@agimon-ai/po-config 0.0.0-alpha.7 → 0.0.0-alpha.71
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/LICENSE +149 -21
- package/README.md +17 -7
- package/dist/agentPluginMcp.cjs +67 -0
- package/dist/agentPluginMcp.cjs.map +1 -1
- package/dist/agentPluginMcp.d.mts +4 -1
- package/dist/agentPluginMcp.d.mts.map +1 -1
- package/dist/agentPluginMcp.mjs +67 -1
- package/dist/agentPluginMcp.mjs.map +1 -1
- package/dist/{completion-Ba0TiBHa.d.mts → completion-CqlF0TFY.d.mts} +3 -93
- package/dist/completion-CqlF0TFY.d.mts.map +1 -0
- package/dist/{config-Cdybp9rT.cjs → config-B75TDv35.cjs} +16 -16
- package/dist/config-B75TDv35.cjs.map +1 -0
- package/dist/{config-Cxc2xw54.mjs → config-BKBk2p6v.mjs} +16 -16
- package/dist/config-BKBk2p6v.mjs.map +1 -0
- package/dist/{config-pxC7FyUJ.d.mts → config-DdvV_R4Q.d.mts} +73 -13
- package/dist/config-DdvV_R4Q.d.mts.map +1 -0
- package/dist/config.cjs +3 -3
- package/dist/config.d.mts +2 -2
- package/dist/config.mjs +3 -3
- package/dist/{configPolicy-DueX0k6i.mjs → configPolicy-BADJDi8o.mjs} +179 -4
- package/dist/configPolicy-BADJDi8o.mjs.map +1 -0
- package/dist/{configPolicy-CowlLhK1.cjs → configPolicy-BsQTmDKr.cjs} +179 -4
- package/dist/configPolicy-BsQTmDKr.cjs.map +1 -0
- package/dist/{configWriter-DGO0gmXo.cjs → configWriter-BMT2f85J.cjs} +2 -2
- package/dist/{configWriter-DGO0gmXo.cjs.map → configWriter-BMT2f85J.cjs.map} +1 -1
- package/dist/{configWriter-DCASRzr-.mjs → configWriter-Bi0xlkzW.mjs} +2 -2
- package/dist/{configWriter-DCASRzr-.mjs.map → configWriter-Bi0xlkzW.mjs.map} +1 -1
- package/dist/configWriter.cjs +1 -1
- package/dist/configWriter.mjs +1 -1
- package/dist/{core-DKWW9gkh.mjs → core-B0RBX1-I.mjs} +11 -10
- package/dist/core-B0RBX1-I.mjs.map +1 -0
- package/dist/{core-B0Qg0Qq2.cjs → core-CWPpoX0B.cjs} +11 -10
- package/dist/core-CWPpoX0B.cjs.map +1 -0
- package/dist/domains-Bo9krPQ5.d.mts +93 -0
- package/dist/domains-Bo9krPQ5.d.mts.map +1 -0
- package/dist/{domains-CiDUsRiX.cjs → domains-CyLUOwPp.cjs} +4 -4
- package/dist/domains-CyLUOwPp.cjs.map +1 -0
- package/dist/{domains-IlieGHaY.mjs → domains-kCa6tLxF.mjs} +4 -4
- package/dist/domains-kCa6tLxF.mjs.map +1 -0
- package/dist/domains.cjs +2 -2
- package/dist/domains.d.mts +2 -1
- package/dist/domains.mjs +2 -2
- package/dist/extensions/mcp.cjs +6 -6
- package/dist/extensions/mcp.cjs.map +1 -1
- package/dist/extensions/mcp.mjs +6 -6
- package/dist/extensions/mcp.mjs.map +1 -1
- package/dist/extensions/server.cjs +18 -362
- package/dist/extensions/server.cjs.map +1 -1
- package/dist/extensions/server.d.mts +2 -2
- package/dist/extensions/server.d.mts.map +1 -1
- package/dist/extensions/server.mjs +15 -359
- package/dist/extensions/server.mjs.map +1 -1
- package/dist/{harnessState-BrmH0lG5.cjs → harnessState-CQBNDL1D.cjs} +5 -27
- package/dist/harnessState-CQBNDL1D.cjs.map +1 -0
- package/dist/{harnessState-8lZda_8r.mjs → harnessState-ufE-npBa.mjs} +5 -27
- package/dist/harnessState-ufE-npBa.mjs.map +1 -0
- package/dist/harnessState.cjs +1 -1
- package/dist/harnessState.d.mts +1 -1
- package/dist/harnessState.mjs +1 -1
- package/dist/{harnessStore-BinxGITh.cjs → harnessStore-Dgn3T4sR.cjs} +2 -2
- package/dist/harnessStore-Dgn3T4sR.cjs.map +1 -0
- package/dist/{harnessStore-w8zHmJ_H.mjs → harnessStore-yqKUx-kP.mjs} +2 -2
- package/dist/harnessStore-yqKUx-kP.mjs.map +1 -0
- package/dist/harnessStore.cjs +1 -1
- package/dist/harnessStore.d.mts +1 -1
- package/dist/harnessStore.mjs +1 -1
- package/dist/index-7RuIAWX1.d.mts.map +1 -1
- package/dist/{index-BTOU4XiI.d.mts → index-BQZolhwB.d.mts} +5 -8
- package/dist/index-BQZolhwB.d.mts.map +1 -0
- package/dist/{index-Nbj2iQWw.d.mts → index-BWne-gYh.d.mts} +33 -3
- package/dist/index-BWne-gYh.d.mts.map +1 -0
- package/dist/{index-dYgF03lE.d.mts → index-BqEBQ2Uz.d.mts} +3 -3
- package/dist/{index-dYgF03lE.d.mts.map → index-BqEBQ2Uz.d.mts.map} +1 -1
- package/dist/{index-D_OtYtsl.d.mts → index-DLt5gipX.d.mts} +2 -2
- package/dist/{index-D_OtYtsl.d.mts.map → index-DLt5gipX.d.mts.map} +1 -1
- package/dist/{index-D3vGEYup.d.mts → index-DxRjrpTC.d.mts} +5 -4
- package/dist/index-DxRjrpTC.d.mts.map +1 -0
- package/dist/{index-CE5g27J6.d.mts → index-LVklWqVp.d.mts} +15 -14
- package/dist/index-LVklWqVp.d.mts.map +1 -0
- package/dist/index-fTuf8tVH.d.mts.map +1 -1
- package/dist/index-nVcEC1jO.d.mts.map +1 -1
- package/dist/index.cjs +15 -13
- package/dist/index.d.mts +21 -10
- package/dist/index.d.mts.map +1 -0
- package/dist/index.mjs +14 -13
- package/dist/{init-BdZ-gqqk.cjs → init-4E4W_fl1.cjs} +39 -17
- package/dist/init-4E4W_fl1.cjs.map +1 -0
- package/dist/{init-DG7MxGxC.mjs → init-BlopOLXb.mjs} +39 -17
- package/dist/init-BlopOLXb.mjs.map +1 -0
- package/dist/init.cjs +1 -1
- package/dist/init.mjs +1 -1
- package/dist/{layeredConfig-Bs18dXQG.cjs → layeredConfig-BczonW-E.cjs} +2 -2
- package/dist/{layeredConfig-Bs18dXQG.cjs.map → layeredConfig-BczonW-E.cjs.map} +1 -1
- package/dist/{layeredConfig-BbkoIEfM.mjs → layeredConfig-CdvkyGXV.mjs} +2 -2
- package/dist/{layeredConfig-BbkoIEfM.mjs.map → layeredConfig-CdvkyGXV.mjs.map} +1 -1
- package/dist/layeredConfig.cjs +1 -1
- package/dist/layeredConfig.d.mts.map +1 -1
- package/dist/layeredConfig.mjs +1 -1
- package/dist/{majorModes-Ddx975MG.mjs → majorModes-B9FkUfa_.mjs} +35 -22
- package/dist/majorModes-B9FkUfa_.mjs.map +1 -0
- package/dist/{majorModes-Ctsdi8QW.cjs → majorModes-BkVSvdF4.cjs} +40 -33
- package/dist/majorModes-BkVSvdF4.cjs.map +1 -0
- package/dist/majorModes.cjs +2 -3
- package/dist/majorModes.d.mts +2 -2
- package/dist/majorModes.mjs +1 -1
- package/dist/piConfig-Bq36PQFF.mjs.map +1 -1
- package/dist/piConfig-cluCie5i.cjs.map +1 -1
- package/dist/piContext.cjs +1 -1
- package/dist/piContext.d.mts +2 -2
- package/dist/piContext.mjs +1 -1
- package/dist/{profiles-CHict0x-.mjs → profiles-BKJckZka.mjs} +160 -33
- package/dist/profiles-BKJckZka.mjs.map +1 -0
- package/dist/{profiles-t2EUj0aB.cjs → profiles-Bwkq759J.cjs} +162 -29
- package/dist/profiles-Bwkq759J.cjs.map +1 -0
- package/dist/profiles.cjs +2 -1
- package/dist/profiles.d.mts +3 -3
- package/dist/profiles.d.mts.map +1 -1
- package/dist/profiles.mjs +1 -1
- package/dist/selectionSwitch.cjs +13 -14
- package/dist/selectionSwitch.cjs.map +1 -1
- package/dist/selectionSwitch.d.mts +5 -4
- package/dist/selectionSwitch.d.mts.map +1 -1
- package/dist/selectionSwitch.mjs +13 -14
- package/dist/selectionSwitch.mjs.map +1 -1
- package/dist/{sessionConfig-DeP6pplT.cjs → sessionConfig-Bo7xJ8Hp.cjs} +16 -8
- package/dist/sessionConfig-Bo7xJ8Hp.cjs.map +1 -0
- package/dist/{sessionConfig-DFQF618G.mjs → sessionConfig-oQ24DO-4.mjs} +16 -8
- package/dist/sessionConfig-oQ24DO-4.mjs.map +1 -0
- package/dist/settingsApi-BbDdtEWq.mjs +351 -0
- package/dist/settingsApi-BbDdtEWq.mjs.map +1 -0
- package/dist/settingsApi-DMNAPMIe.cjs +356 -0
- package/dist/settingsApi-DMNAPMIe.cjs.map +1 -0
- package/dist/sync-BJ8gCP9s.mjs.map +1 -1
- package/dist/{sync-CC_15kkB.d.mts → sync-C3p_NDH3.d.mts} +3 -2
- package/dist/sync-C3p_NDH3.d.mts.map +1 -0
- package/dist/sync-Dlxz2msM.cjs.map +1 -1
- package/dist/types.d.mts +2 -2
- package/llms.txt +2 -2
- package/package.json +12 -13
- package/src/prompts/{po-author-config → help-how-to-config}/SKILL.md +1 -1
- package/src/prompts/{po-author-config → help-how-to-config}/agents/openai.yaml +1 -1
- package/src/prompts/{po-author-config → help-how-to-config}/references/config-contract.md +20 -0
- package/dist/completion-Ba0TiBHa.d.mts.map +0 -1
- package/dist/config-Cdybp9rT.cjs.map +0 -1
- package/dist/config-Cxc2xw54.mjs.map +0 -1
- package/dist/config-pxC7FyUJ.d.mts.map +0 -1
- package/dist/configPolicy-CowlLhK1.cjs.map +0 -1
- package/dist/configPolicy-DueX0k6i.mjs.map +0 -1
- package/dist/core-B0Qg0Qq2.cjs.map +0 -1
- package/dist/core-DKWW9gkh.mjs.map +0 -1
- package/dist/domains-CiDUsRiX.cjs.map +0 -1
- package/dist/domains-IlieGHaY.mjs.map +0 -1
- package/dist/harnessState-8lZda_8r.mjs.map +0 -1
- package/dist/harnessState-BrmH0lG5.cjs.map +0 -1
- package/dist/harnessStore-BinxGITh.cjs.map +0 -1
- package/dist/harnessStore-w8zHmJ_H.mjs.map +0 -1
- package/dist/index-BTOU4XiI.d.mts.map +0 -1
- package/dist/index-CE5g27J6.d.mts.map +0 -1
- package/dist/index-D3vGEYup.d.mts.map +0 -1
- package/dist/index-Nbj2iQWw.d.mts.map +0 -1
- package/dist/init-BdZ-gqqk.cjs.map +0 -1
- package/dist/init-DG7MxGxC.mjs.map +0 -1
- package/dist/majorModes-Ctsdi8QW.cjs.map +0 -1
- package/dist/majorModes-Ddx975MG.mjs.map +0 -1
- package/dist/profiles-CHict0x-.mjs.map +0 -1
- package/dist/profiles-t2EUj0aB.cjs.map +0 -1
- package/dist/sessionConfig-DFQF618G.mjs.map +0 -1
- package/dist/sessionConfig-DeP6pplT.cjs.map +0 -1
- package/dist/sync-CC_15kkB.d.mts.map +0 -1
package/LICENSE
CHANGED
|
@@ -1,21 +1,149 @@
|
|
|
1
|
-
|
|
2
|
-
|
|
3
|
-
|
|
4
|
-
|
|
5
|
-
|
|
6
|
-
|
|
7
|
-
|
|
8
|
-
|
|
9
|
-
|
|
10
|
-
|
|
11
|
-
|
|
12
|
-
|
|
13
|
-
|
|
14
|
-
|
|
15
|
-
|
|
16
|
-
|
|
17
|
-
|
|
18
|
-
|
|
19
|
-
|
|
20
|
-
|
|
21
|
-
|
|
1
|
+
License text copyright © 2017 MariaDB Corporation Ab, All Rights Reserved.
|
|
2
|
+
"Business Source License" is a trademark of MariaDB Corporation Ab.
|
|
3
|
+
|
|
4
|
+
Parameters
|
|
5
|
+
|
|
6
|
+
Licensor: Agimon Pty Ltd
|
|
7
|
+
Licensed Work: Po, the software in the Po source repository and the
|
|
8
|
+
packages released from it, in each version released by
|
|
9
|
+
the Licensor.
|
|
10
|
+
The Licensed Work is (c) 2026 Agimon Pty Ltd.
|
|
11
|
+
Material identified as third-party in the "Third-party
|
|
12
|
+
components" section at the end of this file or in a
|
|
13
|
+
NOTICE file, and any package or directory whose own
|
|
14
|
+
license file grants a different license, is not part of
|
|
15
|
+
the Licensed Work and remains under its own license.
|
|
16
|
+
Additional Use Grant: You may make production use of the Licensed Work if
|
|
17
|
+
your use is Eligible Use. "Eligible Use" is production use that falls
|
|
18
|
+
within at least one of the following:
|
|
19
|
+
|
|
20
|
+
(a) Personal Use. Use by an individual for their own personal purposes,
|
|
21
|
+
and not on behalf of, or for the benefit of, an employer, client, or
|
|
22
|
+
other Organization. Use by an individual in the course of employment
|
|
23
|
+
or engagement by an Organization is use by that Organization.
|
|
24
|
+
|
|
25
|
+
(b) Small Organization Use. Use by or on behalf of an Organization whose
|
|
26
|
+
Annual Revenue is less than USD 1,000,000.
|
|
27
|
+
|
|
28
|
+
(c) Non-profit, Education and Research Use. Use, regardless of Annual
|
|
29
|
+
Revenue, by (i) an Organization registered or recognized as a
|
|
30
|
+
non-profit or charitable organization under the laws of its
|
|
31
|
+
jurisdiction, for its non-profit purposes; (ii) an accredited school,
|
|
32
|
+
college, or university, for teaching, learning, or academic research;
|
|
33
|
+
or (iii) a publicly funded research institution, for its research.
|
|
34
|
+
|
|
35
|
+
(d) Service Provider Use. Use by a consultant, contractor, agency, or other
|
|
36
|
+
service provider, regardless of its own Annual Revenue, solely to
|
|
37
|
+
build, deploy, host, operate, or support the Licensed Work for a client
|
|
38
|
+
whose own use would be Eligible Use under (a), (b), or (c). A service
|
|
39
|
+
provider's use for its own purposes is Eligible Use only if the service
|
|
40
|
+
provider itself qualifies under (b) or (c).
|
|
41
|
+
|
|
42
|
+
|
|
43
|
+
Hosted services. Offering the Licensed Work to third parties as a hosted
|
|
44
|
+
or managed service whose primary value is the Licensed Work is Eligible
|
|
45
|
+
Use only if each such third party's own use would be Eligible Use.
|
|
46
|
+
|
|
47
|
+
Definitions. "Organization" means any company, partnership, sole
|
|
48
|
+
proprietorship, trust, association, government body, or other entity, and
|
|
49
|
+
includes an individual acting in a business or professional capacity.
|
|
50
|
+
"Affiliate" means any entity that directly or indirectly controls, is
|
|
51
|
+
controlled by, or is under common control with an Organization, where
|
|
52
|
+
"control" means ownership of more than 50% of the voting interests of an
|
|
53
|
+
entity or the power to direct its management and policies by contract or
|
|
54
|
+
otherwise. "Annual Revenue" means the total gross revenue of an
|
|
55
|
+
Organization and all of its Affiliates combined, from all sources and
|
|
56
|
+
whether or not related to the Licensed Work, for its most recently
|
|
57
|
+
completed fiscal year, or, if it has not completed a fiscal year, for the
|
|
58
|
+
twelve months before the use (or since its formation, if shorter),
|
|
59
|
+
converted into US dollars at the average exchange rate for that period.
|
|
60
|
+
Proceeds of equity or debt financing are not revenue.
|
|
61
|
+
|
|
62
|
+
Threshold. If an Organization stops qualifying under (b), its existing
|
|
63
|
+
production use remains Eligible Use for 90 days after it stops
|
|
64
|
+
qualifying, after which it must obtain a commercial license or stop
|
|
65
|
+
production use. Use that was Eligible Use when it occurred never requires
|
|
66
|
+
a commercial license after the fact.
|
|
67
|
+
Change Date: Four years from the date a version of the Licensed Work
|
|
68
|
+
is first publicly released by the Licensor.
|
|
69
|
+
Change License: Apache License, Version 2.0
|
|
70
|
+
|
|
71
|
+
For information about alternative licensing arrangements for the Licensed
|
|
72
|
+
Work, please visit: https://agimon.ai/licensing
|
|
73
|
+
|
|
74
|
+
Notice
|
|
75
|
+
|
|
76
|
+
The Business Source License (this document, or the "License") is not an Open
|
|
77
|
+
Source license. However, the Licensed Work will eventually be made available
|
|
78
|
+
under an Open Source License, as stated in this License.
|
|
79
|
+
|
|
80
|
+
-----------------------------------------------------------------------------
|
|
81
|
+
|
|
82
|
+
Business Source License 1.1
|
|
83
|
+
|
|
84
|
+
Terms
|
|
85
|
+
|
|
86
|
+
The Licensor hereby grants you the right to copy, modify, create derivative
|
|
87
|
+
works, redistribute, and make non-production use of the Licensed Work. The
|
|
88
|
+
Licensor may make an Additional Use Grant, above, permitting limited
|
|
89
|
+
production use.
|
|
90
|
+
|
|
91
|
+
Effective on the Change Date, or the fourth anniversary of the first publicly
|
|
92
|
+
available distribution of a specific version of the Licensed Work under this
|
|
93
|
+
License, whichever comes first, the Licensor hereby grants you rights under
|
|
94
|
+
the terms of the Change License, and the rights granted in the paragraph
|
|
95
|
+
above terminate.
|
|
96
|
+
|
|
97
|
+
If your use of the Licensed Work does not comply with the requirements
|
|
98
|
+
currently in effect as described in this License, you must purchase a
|
|
99
|
+
commercial license from the Licensor, its affiliated entities, or authorized
|
|
100
|
+
resellers, or you must refrain from using the Licensed Work.
|
|
101
|
+
|
|
102
|
+
All copies of the original and modified Licensed Work, and derivative works
|
|
103
|
+
of the Licensed Work, are subject to this License. This License applies
|
|
104
|
+
separately for each version of the Licensed Work and the Change Date may vary
|
|
105
|
+
for each version of the Licensed Work released by Licensor.
|
|
106
|
+
|
|
107
|
+
You must conspicuously display this License on each original or modified copy
|
|
108
|
+
of the Licensed Work. If you receive the Licensed Work in original or
|
|
109
|
+
modified form from a third party, the terms and conditions set forth in this
|
|
110
|
+
License apply to your use of that work.
|
|
111
|
+
|
|
112
|
+
Any use of the Licensed Work in violation of this License will automatically
|
|
113
|
+
terminate your rights under this License for the current and all other
|
|
114
|
+
versions of the Licensed Work.
|
|
115
|
+
|
|
116
|
+
This License does not grant you any right in any trademark or logo of
|
|
117
|
+
Licensor or its affiliates (provided that you may use a trademark or logo of
|
|
118
|
+
Licensor as expressly required by this License).
|
|
119
|
+
|
|
120
|
+
TO THE EXTENT PERMITTED BY APPLICABLE LAW, THE LICENSED WORK IS PROVIDED ON
|
|
121
|
+
AN “AS IS” BASIS. LICENSOR HEREBY DISCLAIMS ALL WARRANTIES AND CONDITIONS,
|
|
122
|
+
EXPRESS OR IMPLIED, INCLUDING (WITHOUT LIMITATION) WARRANTIES OF
|
|
123
|
+
MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, AND
|
|
124
|
+
TITLE.
|
|
125
|
+
|
|
126
|
+
MariaDB hereby grants you permission to use this License’s text to license
|
|
127
|
+
your works, and to refer to it using the trademark “Business Source License”,
|
|
128
|
+
as long as you comply with the Covenants of Licensor below.
|
|
129
|
+
|
|
130
|
+
Covenants of Licensor
|
|
131
|
+
|
|
132
|
+
In consideration of the right to use this License’s text and the “Business
|
|
133
|
+
Source License” name and trademark, Licensor covenants to MariaDB, and to all
|
|
134
|
+
other recipients of the licensed work to be provided by Licensor:
|
|
135
|
+
|
|
136
|
+
1. To specify as the Change License the GPL Version 2.0 or any later version,
|
|
137
|
+
or a license that is compatible with GPL Version 2.0 or a later version,
|
|
138
|
+
where “compatible” means that software provided under the Change License can
|
|
139
|
+
be included in a program with software provided under GPL Version 2.0 or a
|
|
140
|
+
later version. Licensor may specify additional Change Licenses without
|
|
141
|
+
limitation.
|
|
142
|
+
|
|
143
|
+
2. To either: (a) specify an additional grant of rights to use that does not
|
|
144
|
+
impose any additional restriction on the right granted in this License, as
|
|
145
|
+
the Additional Use Grant; or (b) insert the text “None”.
|
|
146
|
+
|
|
147
|
+
3. To specify a Change Date.
|
|
148
|
+
|
|
149
|
+
4. Not to modify this License in any other way.
|
package/README.md
CHANGED
|
@@ -31,17 +31,22 @@ is field-specific because some settings are personal and others are repository p
|
|
|
31
31
|
| Setting | Effective source policy |
|
|
32
32
|
| ------------------- | -------------------------------------------------------------------- |
|
|
33
33
|
| `projectTrust` | Repository value, defaulting to `ask` |
|
|
34
|
+
| `workspaces` | Repository only, personal declarations are ignored |
|
|
34
35
|
| `editor` | Personal config only |
|
|
35
36
|
| `modes.planning` | Personal and repository fields merge, with repository values winning |
|
|
36
37
|
| `voice` | Personal and repository fields merge, with repository values winning |
|
|
37
38
|
| `voice.autoCapture` | Personal config only |
|
|
38
39
|
| `selection` | Per-axis merge, with repository values winning |
|
|
39
40
|
|
|
40
|
-
Supported root keys
|
|
41
|
-
invalid values fail during loading.
|
|
41
|
+
Supported root keys include `modes`, `projectTrust`, `workspaces`, `editor`, `voice`, and `selection`.
|
|
42
|
+
Unknown keys and invalid values fail during loading.
|
|
42
43
|
|
|
43
44
|
```yaml
|
|
44
45
|
projectTrust: ask
|
|
46
|
+
workspaces:
|
|
47
|
+
- name: Review
|
|
48
|
+
instructions: Focus on correctness and tests.
|
|
49
|
+
- name: Build
|
|
45
50
|
modes:
|
|
46
51
|
planning:
|
|
47
52
|
main:
|
|
@@ -57,10 +62,15 @@ selection:
|
|
|
57
62
|
profile: reviewer
|
|
58
63
|
```
|
|
59
64
|
|
|
65
|
+
`workspaces` is a repository-only list of `{ name, instructions? }` declarations sharing the repository
|
|
66
|
+
root. Names must be nonblank strings and unique after trimming and case-insensitive comparison.
|
|
67
|
+
`instructions` is an optional string. Unknown entry keys are rejected. Omitting the list leaves it
|
|
68
|
+
unset; `workspaces: []` explicitly declares none. A personal config list is ignored, never inherited.
|
|
69
|
+
|
|
60
70
|
The `selection` mapping names defaults. Definitions for those axes live in `modes.yaml`,
|
|
61
71
|
`domains.yaml`, and `profiles.yaml` and are documented by their owning package Help skills.
|
|
62
72
|
|
|
63
|
-
See the shipped [configuration contract](./src/prompts/
|
|
73
|
+
See the shipped [configuration contract](./src/prompts/help-how-to-config/references/config-contract.md) for
|
|
64
74
|
the complete runtime schema and additional configuration details.
|
|
65
75
|
|
|
66
76
|
## Typed session context
|
|
@@ -97,7 +107,7 @@ Major-mode, domain, and profile packages resolve their own requested changes, th
|
|
|
97
107
|
transition coordinator. Config owns the persisted selection and transition journal records used to
|
|
98
108
|
distinguish active state from pending intent.
|
|
99
109
|
|
|
100
|
-
Native session selection is serialized by the kernel and applied to retained
|
|
110
|
+
Native session selection is serialized by the kernel and applied to retained server package candidates. Config owns persisted selection and pending transition records; Po factory reload and terminal relaunch are not native authoring mechanisms.
|
|
101
111
|
|
|
102
112
|
Consumers must not edit `snapshot.harness`, bypass the coordinator, or cache launcher environment
|
|
103
113
|
state at module scope.
|
|
@@ -121,8 +131,8 @@ runtime Config authoring skill.
|
|
|
121
131
|
|
|
122
132
|
## Help
|
|
123
133
|
|
|
124
|
-
The package publishes `src/prompts/
|
|
125
|
-
`
|
|
134
|
+
The package publishes `src/prompts/help-how-to-config`, links it from `llms.txt`, and registers
|
|
135
|
+
`help-how-to-config` with the `po/help` Cordis service. The guidance is visible to the AI only
|
|
126
136
|
while the parent Help minor mode is active.
|
|
127
137
|
|
|
128
138
|
## Remote session app
|
|
@@ -167,4 +177,4 @@ Maintained by [Agimon](https://agimon.ai/about).
|
|
|
167
177
|
|
|
168
178
|
## License
|
|
169
179
|
|
|
170
|
-
|
|
180
|
+
Business Source License 1.1: free for personal use, organisations under USD 1M revenue, non-profits and education. See [LICENSE](LICENSE) and https://agimon.ai/licensing.
|
package/dist/agentPluginMcp.cjs
CHANGED
|
@@ -377,6 +377,72 @@ function normalizeAgentPluginMcpSource(source, options) {
|
|
|
377
377
|
return disabledResult(label, error);
|
|
378
378
|
}
|
|
379
379
|
}
|
|
380
|
+
const AGENT_PLUGIN_SCHEMA = "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json";
|
|
381
|
+
function isPlainObject(value) {
|
|
382
|
+
return typeof value === "object" && value !== null && !Array.isArray(value);
|
|
383
|
+
}
|
|
384
|
+
async function stablePluginIdentity(entry) {
|
|
385
|
+
const source = entry.source;
|
|
386
|
+
const identity = source?.type === "git" ? [
|
|
387
|
+
"git",
|
|
388
|
+
source.url,
|
|
389
|
+
source.path ?? ""
|
|
390
|
+
] : source?.type === "npm" ? [
|
|
391
|
+
"npm",
|
|
392
|
+
source.registry ?? "",
|
|
393
|
+
source.package
|
|
394
|
+
] : ["local", await node_fs.default.promises.realpath(entry.directory)];
|
|
395
|
+
return (0, node_crypto.createHash)("sha256").update(JSON.stringify(identity)).digest("hex");
|
|
396
|
+
}
|
|
397
|
+
async function rootAgentPluginSchema(entry) {
|
|
398
|
+
const manifestPath = node_path.default.join(entry.directory, "plugin.json");
|
|
399
|
+
if (entry.manifest?.path === manifestPath && entry.manifest.agentPluginSchema === AGENT_PLUGIN_SCHEMA) return AGENT_PLUGIN_SCHEMA;
|
|
400
|
+
try {
|
|
401
|
+
const stat = await node_fs.default.promises.lstat(manifestPath);
|
|
402
|
+
if (stat.isSymbolicLink() || !stat.isFile()) return void 0;
|
|
403
|
+
const parsed = JSON.parse(await node_fs.default.promises.readFile(manifestPath, "utf8"));
|
|
404
|
+
return isPlainObject(parsed) && parsed.$schema === AGENT_PLUGIN_SCHEMA ? AGENT_PLUGIN_SCHEMA : void 0;
|
|
405
|
+
} catch {
|
|
406
|
+
return;
|
|
407
|
+
}
|
|
408
|
+
}
|
|
409
|
+
/** One plugin's MCP config as a projection source, or nothing when it ships none. Shared by sync and settings. */
|
|
410
|
+
async function pluginMcpSource(entry, pluginDataRoot) {
|
|
411
|
+
if (entry.mcp === false) return void 0;
|
|
412
|
+
const pluginRoot = await node_fs.default.promises.realpath(entry.directory);
|
|
413
|
+
const agentPlugin = await rootAgentPluginSchema(entry) === AGENT_PLUGIN_SCHEMA;
|
|
414
|
+
const configPath = node_path.default.join(pluginRoot, agentPlugin ? "mcp.json" : ".mcp.json");
|
|
415
|
+
let stat;
|
|
416
|
+
try {
|
|
417
|
+
stat = await node_fs.default.promises.lstat(configPath);
|
|
418
|
+
} catch (error) {
|
|
419
|
+
if (error.code === "ENOENT") return void 0;
|
|
420
|
+
throw error;
|
|
421
|
+
}
|
|
422
|
+
if (!stat.isFile() || stat.isSymbolicLink()) return void 0;
|
|
423
|
+
const content = await node_fs.default.promises.readFile(configPath);
|
|
424
|
+
const contentDigest = (0, node_crypto.createHash)("sha256").update(content).digest("hex");
|
|
425
|
+
const pluginId = await stablePluginIdentity(entry);
|
|
426
|
+
const sourceId = `plugin:${pluginId}`;
|
|
427
|
+
if (!agentPlugin) return {
|
|
428
|
+
sourceId,
|
|
429
|
+
owner: "plugin",
|
|
430
|
+
format: "native",
|
|
431
|
+
configPath,
|
|
432
|
+
contentDigest
|
|
433
|
+
};
|
|
434
|
+
return {
|
|
435
|
+
sourceId,
|
|
436
|
+
owner: "plugin",
|
|
437
|
+
format: "agent-plugin-v1",
|
|
438
|
+
configPath,
|
|
439
|
+
contentDigest,
|
|
440
|
+
pluginId,
|
|
441
|
+
pluginRoot,
|
|
442
|
+
pluginDataDirectory: node_path.default.join(pluginDataRoot, pluginId),
|
|
443
|
+
mcpSchemaUrl: _agimon_ai_po_core_mcpProjection.AGENT_PLUGIN_MCP_SCHEMA_URL
|
|
444
|
+
};
|
|
445
|
+
}
|
|
380
446
|
//#endregion
|
|
381
447
|
//#region src/services/agentPluginMcp/index.ts
|
|
382
448
|
async function realContainedPath(fs, root, candidate, label, context) {
|
|
@@ -497,5 +563,6 @@ async function normalizeAgentPluginMcpSourceAsync(fs, source, options, context)
|
|
|
497
563
|
//#endregion
|
|
498
564
|
exports.normalizeAgentPluginMcpSource = normalizeAgentPluginMcpSource;
|
|
499
565
|
exports.normalizeAgentPluginMcpSourceAsync = normalizeAgentPluginMcpSourceAsync;
|
|
566
|
+
exports.pluginMcpSource = pluginMcpSource;
|
|
500
567
|
|
|
501
568
|
//# sourceMappingURL=agentPluginMcp.cjs.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"agentPluginMcp.cjs","names":["path","createHash","AGENT_PLUGIN_MCP_SCHEMA_URL","realContainedPath","fs","normalizeCommand","path","normalizeWorkingDirectory","normalizeServer","writeStagedInternalConfig","randomUUID","path","getOrThrow","nodeHost","writeFileAtomic"],"sources":["../src/services/agentPluginMcp/normalize.ts","../src/services/agentPluginMcp/sync.ts","../src/services/agentPluginMcp/index.ts"],"sourcesContent":["/** Pure Agent Plugin MCP normalisation shared by the async API and the deprecated Node-only sync shim. */\nimport { createHash } from 'node:crypto';\nimport path from 'node:path';\n\nimport { AGENT_PLUGIN_MCP_SCHEMA_URL, type PoMcpAgentPluginProjectionSource } from '@agimon-ai/po-core/mcpProjection';\n\n/** Same token grammar as node:http `validateHeaderName` (RFC 9110 tchar). */\nconst HTTP_TOKEN = /^[\\^_`a-zA-Z\\-0-9!#$%&'*+.|~]+$/u;\n/** Same rejected characters as node:http `validateHeaderValue`. */\nconst INVALID_HEADER_VALUE_CHARACTER = /[^\\t\\x20-\\x7e\\x80-\\xff]/u;\nconst IPV4_OCTET = '(?:25[0-5]|2[0-4]\\\\d|1\\\\d\\\\d|[1-9]?\\\\d)';\nconst IPV4_ADDRESS = new RegExp(`^${IPV4_OCTET}(?:\\\\.${IPV4_OCTET}){3}$`, 'u');\n\nfunction isIPv4(value: string): boolean {\n return IPV4_ADDRESS.test(value);\n}\n\nexport const PRIVATE_FILE_MODE = 0o600;\nexport const PRIVATE_DIRECTORY_MODE = 0o700;\nexport const RESERVED_ENVIRONMENT_KEYS = new Set(['PLUGIN_ROOT', 'PLUGIN_DATA']);\nexport const PROXY_SERVER_ALIASES = new Set(['mcp-proxy', 'agiflow-proxy']);\n\nexport type JsonObject = Record<string, unknown>;\n\nexport interface AgentPluginMcpConfigSource {\n path: string;\n format: 'internal';\n cacheKey: string;\n}\n\nexport interface NormalizedAgentPluginMcpSource {\n /** Owner-only, content-addressed layer that bypasses Claude env interpolation. */\n configSource?: AgentPluginMcpConfigSource;\n /** Claude-compatible definitions for an external merged config. */\n claudeConfig: { mcpServers: Record<string, JsonObject> };\n serverNames: string[];\n droppedServers: string[];\n diagnostics: string[];\n}\n\nexport interface NormalizeAgentPluginMcpOptions {\n stagingDirectory: string;\n /** Empty and absent lists both mean keep every server. */\n allowedServers?: readonly string[];\n /** Po strips nested wrappers; external-only callers may opt out. */\n stripProxyWrappers?: boolean;\n}\n\nexport interface NormalizedServer {\n internal: JsonObject;\n claude: JsonObject;\n}\n\nexport function isObject(value: unknown): value is JsonObject {\n return typeof value === 'object' && value !== null && !Array.isArray(value);\n}\n\nexport function onlyKeys(value: JsonObject, allowed: readonly string[], label: string): void {\n const unexpected = Object.keys(value).find((key) => !allowed.includes(key));\n if (unexpected) throw new Error(`${label} contains unsupported field \"${unexpected}\"`);\n}\n\nexport function nonEmptyString(value: unknown, label: string): string {\n if (typeof value !== 'string' || value.length === 0) throw new Error(`${label} must be a non-empty string`);\n return value;\n}\n\nexport function optionalStringArray(value: unknown, label: string): string[] | undefined {\n if (value === undefined) return undefined;\n if (!Array.isArray(value)) throw new Error(`${label} must be an array of strings`);\n return value.map((item, index) => {\n if (typeof item !== 'string') throw new Error(`${label}[${index}] must be a string`);\n return item;\n });\n}\n\nfunction optionalStringRecord(value: unknown, label: string): Record<string, string> | undefined {\n if (value === undefined) return undefined;\n if (!isObject(value)) throw new Error(`${label} must be an object of string values`);\n return Object.fromEntries(\n Object.entries(value).map(([key, item]) => {\n if (typeof item !== 'string') throw new Error(`${label}.${key} must be a string`);\n return [key, item];\n }),\n );\n}\n\nexport function expandPluginPlaceholders(value: string, pluginRoot: string, pluginDataDirectory: string): string {\n // The portable contract is a single, non-recursive replacement pass. An\n // unrecognised placeholder remains literal and mcp-proxy must not reinterpret it.\n return value.replace(/\\$\\{PLUGIN_(ROOT|DATA)\\}/gu, (placeholder) =>\n placeholder === '${PLUGIN_ROOT}' ? pluginRoot : pluginDataDirectory,\n );\n}\n\nexport function isInside(root: string, candidate: string): boolean {\n const relative = path.relative(root, candidate);\n return relative === '' || (!relative.startsWith(`..${path.sep}`) && relative !== '..' && !path.isAbsolute(relative));\n}\n\nexport function normalizeEnvironment(\n value: unknown,\n pluginRoot: string,\n pluginDataDirectory: string,\n): Record<string, string> {\n const declared = optionalStringRecord(value, 'env') ?? {};\n for (const key of Object.keys(declared)) {\n const reservedKey = process.platform === 'win32' ? key.toUpperCase() : key;\n if (RESERVED_ENVIRONMENT_KEYS.has(reservedKey)) {\n throw new Error(`env key \"${key}\" is reserved by Agent Plugins`);\n }\n }\n return {\n ...Object.fromEntries(\n Object.entries(declared).map(([key, item]) => [\n key,\n expandPluginPlaceholders(item, pluginRoot, pluginDataDirectory),\n ]),\n ),\n PLUGIN_ROOT: pluginRoot,\n PLUGIN_DATA: pluginDataDirectory,\n };\n}\n\nfunction isLoopbackHost(hostname: string): boolean {\n const bareHostname = hostname.startsWith('[') && hostname.endsWith(']') ? hostname.slice(1, -1) : hostname;\n if (bareHostname.toLowerCase() === 'localhost') return true;\n if (isIPv4(bareHostname)) return bareHostname.split('.')[0] === '127';\n return bareHostname === '::1';\n}\n\nexport function normalizeUrl(value: unknown): string {\n const raw = nonEmptyString(value, 'url');\n let parsed: URL;\n try {\n parsed = new URL(raw);\n } catch {\n throw new Error('url must be an absolute HTTP(S) URL');\n }\n if (parsed.protocol !== 'http:' && parsed.protocol !== 'https:') {\n throw new Error('url must use http or https');\n }\n if (parsed.username || parsed.password) throw new Error('url must not contain user information');\n if (parsed.hash) throw new Error('url must not contain a fragment');\n if (parsed.protocol === 'http:' && !isLoopbackHost(parsed.hostname)) {\n throw new Error('non-loopback MCP URLs must use https');\n }\n return raw;\n}\n\nexport function normalizeHeaders(value: unknown): Record<string, string> | undefined {\n const headers = optionalStringRecord(value, 'headers');\n if (!headers) return undefined;\n const seen = new Set<string>();\n for (const [name, item] of Object.entries(headers)) {\n const canonical = name.toLowerCase();\n if (seen.has(canonical)) throw new Error(`headers contain duplicate name \"${name}\"`);\n seen.add(canonical);\n if (!HTTP_TOKEN.test(name) || INVALID_HEADER_VALUE_CHARACTER.test(item)) {\n throw new Error(`header \"${name}\" is invalid`);\n }\n }\n return headers;\n}\n\nexport function stagedInternalPath(\n source: PoMcpAgentPluginProjectionSource,\n contents: string,\n stagingDirectory: string,\n): string {\n const digest = createHash('sha256')\n .update(source.sourceId)\n .update('\\0')\n .update(source.contentDigest)\n .update('\\0')\n .update(contents)\n .digest('hex')\n .slice(0, 20);\n return path.join(stagingDirectory, `agent-plugin-mcp-${digest}.internal.json`);\n}\n\nexport function emptyResult(diagnostic: string): NormalizedAgentPluginMcpSource {\n return {\n claudeConfig: { mcpServers: {} },\n serverNames: [],\n droppedServers: [],\n diagnostics: [diagnostic],\n };\n}\n\nexport function sourceLabel(source: PoMcpAgentPluginProjectionSource): string {\n return `Agent Plugin MCP source \"${source.sourceId}\"`;\n}\n\n/** Checks the projection identity before any file is touched. */\nexport function assertProjectionSource(source: PoMcpAgentPluginProjectionSource): void {\n if (source.mcpSchemaUrl !== AGENT_PLUGIN_MCP_SCHEMA_URL) {\n throw new Error(`unsupported schema \"${String(source.mcpSchemaUrl)}\"`);\n }\n if (!path.isAbsolute(source.pluginRoot) || !path.isAbsolute(source.pluginDataDirectory)) {\n throw new Error('pluginRoot and pluginDataDirectory must be absolute');\n }\n}\n\nexport function assertRootConfigPath(configPath: string, pluginRoot: string): void {\n if (path.dirname(configPath) !== pluginRoot || path.basename(configPath) !== 'mcp.json') {\n throw new Error('portable plugin config must be root mcp.json');\n }\n}\n\n/** Verifies the digest and document shape of the raw mcp.json bytes; returns its server map. */\nexport function parseMcpDocument(\n source: PoMcpAgentPluginProjectionSource,\n bytes: Uint8Array,\n label: string,\n): Record<string, unknown> {\n const digest = createHash('sha256').update(bytes).digest('hex');\n if (digest !== source.contentDigest) throw new Error('content digest does not match the projection');\n const parsed: unknown = JSON.parse(new TextDecoder('utf-8', { ignoreBOM: true }).decode(bytes));\n if (!isObject(parsed)) throw new Error('document must be an object');\n onlyKeys(parsed, ['$schema', 'mcpServers'], label);\n if (parsed.$schema !== source.mcpSchemaUrl) throw new Error('$schema does not match the projected schema');\n if (!isObject(parsed.mcpServers)) throw new Error('mcpServers must be an object');\n return parsed.mcpServers;\n}\n\n/** Whether a declared server is skipped (empty name), dropped by the allowlist or wrapper rule, or normalised. */\nexport function serverDisposition(name: string, options: NormalizeAgentPluginMcpOptions): 'empty' | 'dropped' | 'keep' {\n if (!name) return 'empty';\n const allowed = options.allowedServers;\n const keepAll = !allowed || allowed.length === 0;\n const stripProxyWrappers = options.stripProxyWrappers ?? true;\n if ((!keepAll && !allowed.includes(name)) || (stripProxyWrappers && PROXY_SERVER_ALIASES.has(name))) return 'dropped';\n return 'keep';\n}\n\nexport function emptyServerDiagnostic(label: string): string {\n return `${label} contains an empty server name; that entry was skipped.`;\n}\n\nexport function skippedServerDiagnostic(label: string, name: string, error: unknown): string {\n return `${label} skipped server \"${name}\": ${error instanceof Error ? error.message : String(error)}`;\n}\n\nexport function disabledResult(label: string, error: unknown): NormalizedAgentPluginMcpSource {\n return emptyResult(`${label} was disabled: ${error instanceof Error ? error.message : String(error)}`);\n}\n\n/** The declared transport of one server; stdio declarations are also checked for unsupported fields. */\nexport function serverType(raw: unknown, name: string): string {\n if (!isObject(raw)) throw new Error('definition must be an object');\n const type = nonEmptyString(raw.type, 'type');\n if (type === 'stdio') onlyKeys(raw, ['type', 'command', 'args', 'env', 'cwd'], `server \"${name}\"`);\n return type;\n}\n\nexport function stdioServer(\n name: string,\n config: { command: string; args?: string[]; env: Record<string, string>; cwd: string },\n): NormalizedServer {\n return {\n internal: { name, transport: 'stdio', config },\n claude: { type: 'stdio', ...config },\n };\n}\n\n/** A streamable-http or sse server; any other type is unsupported. */\nexport function remoteServer(raw: JsonObject, name: string, type: string): NormalizedServer {\n if (type === 'streamable-http' || type === 'sse') {\n onlyKeys(raw, ['type', 'url', 'headers'], `server \"${name}\"`);\n const url = normalizeUrl(raw.url);\n const headers = normalizeHeaders(raw.headers);\n const transport = type === 'streamable-http' ? 'http' : 'sse';\n const config = { url, ...(headers ? { headers } : {}) };\n return {\n internal: { name, transport, config },\n claude: { type: transport, ...config },\n };\n }\n throw new Error(`unsupported transport type \"${type}\"`);\n}\n\nexport function stagedContents(internalServers: Record<string, JsonObject>): string {\n return `${JSON.stringify({ mcpServers: internalServers }, null, 2)}\\n`;\n}\n\nexport function stagedCacheKey(source: PoMcpAgentPluginProjectionSource, configPath: string, contents: string): string {\n return createHash('sha256')\n .update('agent-plugin-v1\\0')\n .update(source.sourceId)\n .update('\\0')\n .update(source.contentDigest)\n .update('\\0')\n .update(configPath)\n .update('\\0')\n .update(contents)\n .digest('hex');\n}\n\n/** The containment base and expanded path of a declared cwd, or undefined when the plugin root is the default. */\nexport function workingDirectoryCandidate(\n declared: unknown,\n pluginRoot: string,\n pluginDataDirectory: string,\n): { base: string; candidate: string } | undefined {\n if (declared === undefined) return undefined;\n const cwd = nonEmptyString(declared, 'cwd');\n if (cwd.startsWith('./')) return { base: pluginRoot, candidate: path.resolve(pluginRoot, cwd) };\n const expanded = expandPluginPlaceholders(cwd, pluginRoot, pluginDataDirectory);\n if (cwd === '${PLUGIN_ROOT}' || cwd.startsWith('${PLUGIN_ROOT}/')) {\n return { base: pluginRoot, candidate: path.resolve(expanded) };\n }\n if (cwd === '${PLUGIN_DATA}' || cwd.startsWith('${PLUGIN_DATA}/')) {\n return { base: pluginDataDirectory, candidate: path.resolve(expanded) };\n }\n throw new Error('cwd must start with ./, ${PLUGIN_ROOT}, or ${PLUGIN_DATA}');\n}\n\n/** Rejects a command that is neither a bare executable name nor a ./ path; true when it must be resolved. */\nexport function isPluginRelativeCommand(command: string): boolean {\n if (command.startsWith('./')) return true;\n if (command === '.' || command === '..' || /[\\s/\\\\]/u.test(command)) {\n throw new Error('command must be a bare executable name or a ./ path inside the plugin');\n }\n return false;\n}\n","import { randomUUID } from 'node:crypto';\nimport fs from 'node:fs';\nimport path from 'node:path';\n\nimport type { PoMcpAgentPluginProjectionSource } from '@agimon-ai/po-core/mcpProjection';\n\nimport {\n type JsonObject,\n type NormalizeAgentPluginMcpOptions,\n type NormalizedAgentPluginMcpSource,\n type NormalizedServer,\n PRIVATE_DIRECTORY_MODE,\n PRIVATE_FILE_MODE,\n assertProjectionSource,\n assertRootConfigPath,\n disabledResult,\n emptyServerDiagnostic,\n expandPluginPlaceholders,\n isInside,\n isPluginRelativeCommand,\n nonEmptyString,\n normalizeEnvironment,\n optionalStringArray,\n parseMcpDocument,\n remoteServer,\n serverDisposition,\n serverType,\n skippedServerDiagnostic,\n sourceLabel,\n stagedCacheKey,\n stagedContents,\n stagedInternalPath,\n stdioServer,\n workingDirectoryCandidate,\n} from './normalize';\n\nfunction realContainedPath(root: string, candidate: string, label: string): string {\n let realCandidate: string;\n try {\n realCandidate = fs.realpathSync(candidate);\n } catch {\n throw new Error(`${label} does not exist`);\n }\n if (!isInside(root, realCandidate)) throw new Error(`${label} escapes its allowed plugin directory`);\n return realCandidate;\n}\n\nfunction normalizeCommand(command: string, pluginRoot: string): string {\n if (!isPluginRelativeCommand(command)) return command;\n const resolved = realContainedPath(pluginRoot, path.resolve(pluginRoot, command), 'command');\n if (!fs.statSync(resolved).isFile()) throw new Error('command must resolve to a regular file');\n try {\n fs.accessSync(resolved, fs.constants.X_OK);\n } catch {\n throw new Error('command must resolve to an executable file');\n }\n return resolved;\n}\n\nfunction normalizeWorkingDirectory(declared: unknown, pluginRoot: string, pluginDataDirectory: string): string {\n const declaredCwd = workingDirectoryCandidate(declared, pluginRoot, pluginDataDirectory);\n if (!declaredCwd) return pluginRoot;\n const resolved = realContainedPath(declaredCwd.base, declaredCwd.candidate, 'cwd');\n if (!fs.statSync(resolved).isDirectory()) throw new Error('cwd must resolve to a directory');\n return resolved;\n}\n\nfunction normalizeServer(\n raw: unknown,\n pluginRoot: string,\n pluginDataDirectory: string,\n name: string,\n): NormalizedServer {\n const type = serverType(raw, name);\n const declaration = raw as JsonObject;\n if (type !== 'stdio') return remoteServer(declaration, name, type);\n const command = normalizeCommand(nonEmptyString(declaration.command, 'command'), pluginRoot);\n const args = optionalStringArray(declaration.args, 'args')?.map((item) =>\n expandPluginPlaceholders(item, pluginRoot, pluginDataDirectory),\n );\n const env = normalizeEnvironment(declaration.env, pluginRoot, pluginDataDirectory);\n const cwd = normalizeWorkingDirectory(declaration.cwd, pluginRoot, pluginDataDirectory);\n return stdioServer(name, { command, ...(args ? { args } : {}), env, cwd });\n}\n\nfunction writeStagedInternalConfig(target: string, contents: string, stagingDirectory: string): void {\n fs.mkdirSync(stagingDirectory, { mode: PRIVATE_DIRECTORY_MODE, recursive: true });\n fs.chmodSync(stagingDirectory, PRIVATE_DIRECTORY_MODE);\n const temporaryPath = `${target}.${process.pid}-${randomUUID()}.tmp`;\n try {\n fs.writeFileSync(temporaryPath, contents, { flag: 'wx', mode: PRIVATE_FILE_MODE });\n try {\n fs.renameSync(temporaryPath, target);\n } catch (error) {\n const code = (error as NodeJS.ErrnoException).code;\n if (code !== 'EEXIST' && code !== 'EPERM') throw error;\n const stat = fs.lstatSync(target);\n if (stat.isSymbolicLink() || !stat.isFile() || fs.readFileSync(target, 'utf8') !== contents) {\n throw new Error('content-addressed staging path is occupied by different content');\n }\n }\n fs.chmodSync(target, PRIVATE_FILE_MODE);\n } finally {\n fs.rmSync(temporaryPath, { force: true });\n }\n}\n\n/**\n * Validates one Agent Plugins v1 `mcp.json` and stages a native mcp-proxy layer.\n *\n * Server validation is isolated: one malformed server is diagnosed and skipped.\n * Document/schema, source identity, or plugin-boundary failures reject the whole\n * source. Only the two portable plugin placeholders are expanded; the staged\n * layer is tagged `internal`, so legacy `${ENV}` interpolation cannot run again.\n *\n * @deprecated Node-only sync shim; use normalizeAgentPluginMcpSourceAsync. Removed in M2.\n */\nexport function normalizeAgentPluginMcpSource(\n source: PoMcpAgentPluginProjectionSource,\n options: NormalizeAgentPluginMcpOptions,\n): NormalizedAgentPluginMcpSource {\n const label = sourceLabel(source);\n try {\n assertProjectionSource(source);\n const pluginRoot = fs.realpathSync(source.pluginRoot);\n try {\n const dataStat = fs.lstatSync(source.pluginDataDirectory);\n if (dataStat.isSymbolicLink() || !dataStat.isDirectory()) {\n throw new Error('pluginDataDirectory must be a real directory');\n }\n } catch (error) {\n if ((error as NodeJS.ErrnoException).code !== 'ENOENT') throw error;\n fs.mkdirSync(source.pluginDataDirectory, { mode: PRIVATE_DIRECTORY_MODE, recursive: true });\n }\n fs.chmodSync(source.pluginDataDirectory, PRIVATE_DIRECTORY_MODE);\n fs.accessSync(source.pluginDataDirectory, fs.constants.W_OK);\n const pluginDataDirectory = fs.realpathSync(source.pluginDataDirectory);\n const configPath = realContainedPath(pluginRoot, source.configPath, 'mcp.json');\n assertRootConfigPath(configPath, pluginRoot);\n\n const servers = parseMcpDocument(source, fs.readFileSync(configPath), label);\n const internalServers = Object.create(null) as Record<string, JsonObject>;\n const claudeServers = Object.create(null) as Record<string, JsonObject>;\n const droppedServers: string[] = [];\n const diagnostics: string[] = [];\n\n for (const [name, rawServer] of Object.entries(servers)) {\n const disposition = serverDisposition(name, options);\n if (disposition === 'empty') {\n diagnostics.push(emptyServerDiagnostic(label));\n continue;\n }\n if (disposition === 'dropped') {\n droppedServers.push(name);\n continue;\n }\n try {\n const normalized = normalizeServer(rawServer, pluginRoot, pluginDataDirectory, name);\n internalServers[name] = normalized.internal;\n claudeServers[name] = normalized.claude;\n } catch (error) {\n droppedServers.push(name);\n diagnostics.push(skippedServerDiagnostic(label, name, error));\n }\n }\n\n const contents = stagedContents(internalServers);\n const target = stagedInternalPath(source, contents, options.stagingDirectory);\n writeStagedInternalConfig(target, contents, options.stagingDirectory);\n return {\n configSource: { path: target, format: 'internal', cacheKey: stagedCacheKey(source, configPath, contents) },\n claudeConfig: { mcpServers: claudeServers },\n serverNames: Object.keys(internalServers),\n droppedServers,\n diagnostics,\n };\n } catch (error) {\n return disabledResult(label, error);\n }\n}\n","import path from 'node:path';\n\nimport type { PoMcpAgentPluginProjectionSource } from '@agimon-ai/po-core/mcpProjection';\nimport { type FileSystem, getOrThrow, nodeHost, writeFileAtomic } from '@agimon-ai/po-core/platform';\n\nimport {\n type JsonObject,\n type NormalizeAgentPluginMcpOptions,\n type NormalizedAgentPluginMcpSource,\n type NormalizedServer,\n PRIVATE_DIRECTORY_MODE,\n PRIVATE_FILE_MODE,\n assertProjectionSource,\n assertRootConfigPath,\n disabledResult,\n emptyServerDiagnostic,\n expandPluginPlaceholders,\n isInside,\n isPluginRelativeCommand,\n nonEmptyString,\n normalizeEnvironment,\n optionalStringArray,\n parseMcpDocument,\n remoteServer,\n serverDisposition,\n serverType,\n skippedServerDiagnostic,\n sourceLabel,\n stagedCacheKey,\n stagedContents,\n stagedInternalPath,\n stdioServer,\n workingDirectoryCandidate,\n} from './normalize';\n\nexport type {\n AgentPluginMcpConfigSource,\n NormalizeAgentPluginMcpOptions,\n NormalizedAgentPluginMcpSource,\n} from './normalize';\nexport { normalizeAgentPluginMcpSource } from './sync';\n\ntype Context = Parameters<FileSystem['readTextFile']>[1];\n\nasync function realContainedPath(\n fs: FileSystem,\n root: string,\n candidate: string,\n label: string,\n context: Context,\n): Promise<string> {\n const real = await fs.canonicalPath(candidate, context);\n if (!real.ok) throw new Error(`${label} does not exist`);\n if (!isInside(root, real.value)) throw new Error(`${label} escapes its allowed plugin directory`);\n return real.value;\n}\n\nasync function normalizeCommand(\n fs: FileSystem,\n command: string,\n pluginRoot: string,\n context: Context,\n): Promise<string> {\n if (!isPluginRelativeCommand(command)) return command;\n const resolved = await realContainedPath(fs, pluginRoot, path.resolve(pluginRoot, command), 'command', context);\n if (getOrThrow(await fs.fileInfo(resolved, context)).kind !== 'file') {\n throw new Error('command must resolve to a regular file');\n }\n // Execute bits stand in for access(X_OK); the edge has no modes, so nodeHost reports none and the check is skipped.\n const mode = await nodeHost.fileMode(resolved);\n if (mode !== undefined && (mode & 0o111) === 0) throw new Error('command must resolve to an executable file');\n return resolved;\n}\n\nasync function normalizeWorkingDirectory(\n fs: FileSystem,\n declared: unknown,\n pluginRoot: string,\n pluginDataDirectory: string,\n context: Context,\n): Promise<string> {\n const declaredCwd = workingDirectoryCandidate(declared, pluginRoot, pluginDataDirectory);\n if (!declaredCwd) return pluginRoot;\n const resolved = await realContainedPath(fs, declaredCwd.base, declaredCwd.candidate, 'cwd', context);\n if (getOrThrow(await fs.fileInfo(resolved, context)).kind !== 'directory') {\n throw new Error('cwd must resolve to a directory');\n }\n return resolved;\n}\n\nasync function normalizeServer(\n fs: FileSystem,\n raw: unknown,\n pluginRoot: string,\n pluginDataDirectory: string,\n name: string,\n context: Context,\n): Promise<NormalizedServer> {\n const type = serverType(raw, name);\n const declaration = raw as JsonObject;\n if (type !== 'stdio') return remoteServer(declaration, name, type);\n const command = await normalizeCommand(fs, nonEmptyString(declaration.command, 'command'), pluginRoot, context);\n const args = optionalStringArray(declaration.args, 'args')?.map((item) =>\n expandPluginPlaceholders(item, pluginRoot, pluginDataDirectory),\n );\n const env = normalizeEnvironment(declaration.env, pluginRoot, pluginDataDirectory);\n const cwd = await normalizeWorkingDirectory(fs, declaration.cwd, pluginRoot, pluginDataDirectory, context);\n return stdioServer(name, { command, ...(args ? { args } : {}), env, cwd });\n}\n\n/** Owner-only plugin data directory; a symbolic link or non-directory rejects the source. */\nasync function preparePluginDataDirectory(fs: FileSystem, directory: string, context: Context): Promise<string> {\n const info = await fs.fileInfo(directory, context);\n if (info.ok) {\n if (info.value.kind !== 'directory') throw new Error('pluginDataDirectory must be a real directory');\n } else if (info.error.code === 'not_found') {\n getOrThrow(await fs.createDir(directory, { recursive: true }, context));\n } else {\n throw info.error;\n }\n await nodeHost.setMode(directory, PRIVATE_DIRECTORY_MODE);\n return getOrThrow(await fs.canonicalPath(directory, context));\n}\n\n/**\n * Content-addressed and owner-only. The name hashes the contents, so replacing an\n * existing staged file through a uniquely named temporary file never changes what it holds.\n */\nasync function writeStagedInternalConfig(\n fs: FileSystem,\n target: string,\n contents: string,\n stagingDirectory: string,\n context: Context,\n): Promise<void> {\n getOrThrow(await fs.createDir(stagingDirectory, { recursive: true }, context));\n await nodeHost.setMode(stagingDirectory, PRIVATE_DIRECTORY_MODE);\n await writeFileAtomic(fs, target, contents, context);\n await nodeHost.setMode(target, PRIVATE_FILE_MODE);\n}\n\n/**\n * Validates one Agent Plugins v1 `mcp.json` and stages a native mcp-proxy layer,\n * reading and writing through the injected file system.\n *\n * Server validation is isolated: one malformed server is diagnosed and skipped.\n * Document/schema, source identity, or plugin-boundary failures reject the whole\n * source. Only the two portable plugin placeholders are expanded; the staged\n * layer is tagged `internal`, so legacy `${ENV}` interpolation cannot run again.\n */\nexport async function normalizeAgentPluginMcpSourceAsync(\n fs: FileSystem,\n source: PoMcpAgentPluginProjectionSource,\n options: NormalizeAgentPluginMcpOptions,\n context: Context,\n): Promise<NormalizedAgentPluginMcpSource> {\n const label = sourceLabel(source);\n try {\n assertProjectionSource(source);\n const pluginRoot = getOrThrow(await fs.canonicalPath(source.pluginRoot, context));\n const pluginDataDirectory = await preparePluginDataDirectory(fs, source.pluginDataDirectory, context);\n const configPath = await realContainedPath(fs, pluginRoot, source.configPath, 'mcp.json', context);\n assertRootConfigPath(configPath, pluginRoot);\n\n const bytes = getOrThrow(await fs.readBinaryFile(configPath, context));\n const servers = parseMcpDocument(source, bytes, label);\n const internalServers = Object.create(null) as Record<string, JsonObject>;\n const claudeServers = Object.create(null) as Record<string, JsonObject>;\n const droppedServers: string[] = [];\n const diagnostics: string[] = [];\n\n for (const [name, rawServer] of Object.entries(servers)) {\n const disposition = serverDisposition(name, options);\n if (disposition === 'empty') {\n diagnostics.push(emptyServerDiagnostic(label));\n continue;\n }\n if (disposition === 'dropped') {\n droppedServers.push(name);\n continue;\n }\n try {\n const normalized = await normalizeServer(fs, rawServer, pluginRoot, pluginDataDirectory, name, context);\n internalServers[name] = normalized.internal;\n claudeServers[name] = normalized.claude;\n } catch (error) {\n droppedServers.push(name);\n diagnostics.push(skippedServerDiagnostic(label, name, error));\n }\n }\n\n const contents = stagedContents(internalServers);\n const target = stagedInternalPath(source, contents, options.stagingDirectory);\n await writeStagedInternalConfig(fs, target, contents, options.stagingDirectory, context);\n return {\n configSource: { path: target, format: 'internal', cacheKey: stagedCacheKey(source, configPath, contents) },\n claudeConfig: { mcpServers: claudeServers },\n serverNames: Object.keys(internalServers),\n droppedServers,\n diagnostics,\n };\n } catch (error) {\n return disabledResult(label, error);\n }\n}\n"],"mappings":";;;;;;;;;;;;AAOA,MAAM,aAAa;;AAEnB,MAAM,iCAAiC;AACvC,MAAM,aAAa;AACnB,MAAM,eAAe,IAAI,OAAO,IAAI,WAAW,QAAQ,WAAW,QAAQ,GAAG;AAE7E,SAAS,OAAO,OAAwB;CACtC,OAAO,aAAa,KAAK,KAAK;AAChC;AAIA,MAAa,4CAA4B,IAAI,IAAI,CAAC,eAAe,aAAa,CAAC;AAC/E,MAAa,uCAAuB,IAAI,IAAI,CAAC,aAAa,eAAe,CAAC;AAiC1E,SAAgB,SAAS,OAAqC;CAC5D,OAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAEA,SAAgB,SAAS,OAAmB,SAA4B,OAAqB;CAC3F,MAAM,aAAa,OAAO,KAAK,KAAK,CAAC,CAAC,MAAM,QAAQ,CAAC,QAAQ,SAAS,GAAG,CAAC;CAC1E,IAAI,YAAY,MAAM,IAAI,MAAM,GAAG,MAAM,+BAA+B,WAAW,EAAE;AACvF;AAEA,SAAgB,eAAe,OAAgB,OAAuB;CACpE,IAAI,OAAO,UAAU,YAAY,MAAM,WAAW,GAAG,MAAM,IAAI,MAAM,GAAG,MAAM,4BAA4B;CAC1G,OAAO;AACT;AAEA,SAAgB,oBAAoB,OAAgB,OAAqC;CACvF,IAAI,UAAU,KAAA,GAAW,OAAO,KAAA;CAChC,IAAI,CAAC,MAAM,QAAQ,KAAK,GAAG,MAAM,IAAI,MAAM,GAAG,MAAM,6BAA6B;CACjF,OAAO,MAAM,KAAK,MAAM,UAAU;EAChC,IAAI,OAAO,SAAS,UAAU,MAAM,IAAI,MAAM,GAAG,MAAM,GAAG,MAAM,mBAAmB;EACnF,OAAO;CACT,CAAC;AACH;AAEA,SAAS,qBAAqB,OAAgB,OAAmD;CAC/F,IAAI,UAAU,KAAA,GAAW,OAAO,KAAA;CAChC,IAAI,CAAC,SAAS,KAAK,GAAG,MAAM,IAAI,MAAM,GAAG,MAAM,oCAAoC;CACnF,OAAO,OAAO,YACZ,OAAO,QAAQ,KAAK,CAAC,CAAC,KAAK,CAAC,KAAK,UAAU;EACzC,IAAI,OAAO,SAAS,UAAU,MAAM,IAAI,MAAM,GAAG,MAAM,GAAG,IAAI,kBAAkB;EAChF,OAAO,CAAC,KAAK,IAAI;CACnB,CAAC,CACH;AACF;AAEA,SAAgB,yBAAyB,OAAe,YAAoB,qBAAqC;CAG/G,OAAO,MAAM,QAAQ,+BAA+B,gBAClD,gBAAgB,mBAAmB,aAAa,mBAClD;AACF;AAEA,SAAgB,SAAS,MAAc,WAA4B;CACjE,MAAM,WAAWA,UAAAA,QAAK,SAAS,MAAM,SAAS;CAC9C,OAAO,aAAa,MAAO,CAAC,SAAS,WAAW,KAAKA,UAAAA,QAAK,KAAK,KAAK,aAAa,QAAQ,CAACA,UAAAA,QAAK,WAAW,QAAQ;AACpH;AAEA,SAAgB,qBACd,OACA,YACA,qBACwB;CACxB,MAAM,WAAW,qBAAqB,OAAO,KAAK,KAAK,CAAC;CACxD,KAAK,MAAM,OAAO,OAAO,KAAK,QAAQ,GAAG;EACvC,MAAM,cAAc,QAAQ,aAAa,UAAU,IAAI,YAAY,IAAI;EACvE,IAAI,0BAA0B,IAAI,WAAW,GAC3C,MAAM,IAAI,MAAM,YAAY,IAAI,+BAA+B;CAEnE;CACA,OAAO;EACL,GAAG,OAAO,YACR,OAAO,QAAQ,QAAQ,CAAC,CAAC,KAAK,CAAC,KAAK,UAAU,CAC5C,KACA,yBAAyB,MAAM,YAAY,mBAAmB,CAChE,CAAC,CACH;EACA,aAAa;EACb,aAAa;CACf;AACF;AAEA,SAAS,eAAe,UAA2B;CACjD,MAAM,eAAe,SAAS,WAAW,GAAG,KAAK,SAAS,SAAS,GAAG,IAAI,SAAS,MAAM,GAAG,EAAE,IAAI;CAClG,IAAI,aAAa,YAAY,MAAM,aAAa,OAAO;CACvD,IAAI,OAAO,YAAY,GAAG,OAAO,aAAa,MAAM,GAAG,CAAC,CAAC,OAAO;CAChE,OAAO,iBAAiB;AAC1B;AAEA,SAAgB,aAAa,OAAwB;CACnD,MAAM,MAAM,eAAe,OAAO,KAAK;CACvC,IAAI;CACJ,IAAI;EACF,SAAS,IAAI,IAAI,GAAG;CACtB,QAAQ;EACN,MAAM,IAAI,MAAM,qCAAqC;CACvD;CACA,IAAI,OAAO,aAAa,WAAW,OAAO,aAAa,UACrD,MAAM,IAAI,MAAM,4BAA4B;CAE9C,IAAI,OAAO,YAAY,OAAO,UAAU,MAAM,IAAI,MAAM,uCAAuC;CAC/F,IAAI,OAAO,MAAM,MAAM,IAAI,MAAM,iCAAiC;CAClE,IAAI,OAAO,aAAa,WAAW,CAAC,eAAe,OAAO,QAAQ,GAChE,MAAM,IAAI,MAAM,sCAAsC;CAExD,OAAO;AACT;AAEA,SAAgB,iBAAiB,OAAoD;CACnF,MAAM,UAAU,qBAAqB,OAAO,SAAS;CACrD,IAAI,CAAC,SAAS,OAAO,KAAA;CACrB,MAAM,uBAAO,IAAI,IAAY;CAC7B,KAAK,MAAM,CAAC,MAAM,SAAS,OAAO,QAAQ,OAAO,GAAG;EAClD,MAAM,YAAY,KAAK,YAAY;EACnC,IAAI,KAAK,IAAI,SAAS,GAAG,MAAM,IAAI,MAAM,mCAAmC,KAAK,EAAE;EACnF,KAAK,IAAI,SAAS;EAClB,IAAI,CAAC,WAAW,KAAK,IAAI,KAAK,+BAA+B,KAAK,IAAI,GACpE,MAAM,IAAI,MAAM,WAAW,KAAK,aAAa;CAEjD;CACA,OAAO;AACT;AAEA,SAAgB,mBACd,QACA,UACA,kBACQ;CACR,MAAM,UAAA,GAASC,YAAAA,WAAAA,CAAW,QAAQ,CAAC,CAChC,OAAO,OAAO,QAAQ,CAAC,CACvB,OAAO,IAAI,CAAC,CACZ,OAAO,OAAO,aAAa,CAAC,CAC5B,OAAO,IAAI,CAAC,CACZ,OAAO,QAAQ,CAAC,CAChB,OAAO,KAAK,CAAC,CACb,MAAM,GAAG,EAAE;CACd,OAAOD,UAAAA,QAAK,KAAK,kBAAkB,oBAAoB,OAAO,eAAe;AAC/E;AAEA,SAAgB,YAAY,YAAoD;CAC9E,OAAO;EACL,cAAc,EAAE,YAAY,CAAC,EAAE;EAC/B,aAAa,CAAC;EACd,gBAAgB,CAAC;EACjB,aAAa,CAAC,UAAU;CAC1B;AACF;AAEA,SAAgB,YAAY,QAAkD;CAC5E,OAAO,4BAA4B,OAAO,SAAS;AACrD;;AAGA,SAAgB,uBAAuB,QAAgD;CACrF,IAAI,OAAO,iBAAiBE,iCAAAA,6BAC1B,MAAM,IAAI,MAAM,uBAAuB,OAAO,OAAO,YAAY,EAAE,EAAE;CAEvE,IAAI,CAACF,UAAAA,QAAK,WAAW,OAAO,UAAU,KAAK,CAACA,UAAAA,QAAK,WAAW,OAAO,mBAAmB,GACpF,MAAM,IAAI,MAAM,qDAAqD;AAEzE;AAEA,SAAgB,qBAAqB,YAAoB,YAA0B;CACjF,IAAIA,UAAAA,QAAK,QAAQ,UAAU,MAAM,cAAcA,UAAAA,QAAK,SAAS,UAAU,MAAM,YAC3E,MAAM,IAAI,MAAM,8CAA8C;AAElE;;AAGA,SAAgB,iBACd,QACA,OACA,OACyB;CAEzB,KAAA,GADeC,YAAAA,WAAAA,CAAW,QAAQ,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO,KAChD,MAAM,OAAO,eAAe,MAAM,IAAI,MAAM,8CAA8C;CACnG,MAAM,SAAkB,KAAK,MAAM,IAAI,YAAY,SAAS,EAAE,WAAW,KAAK,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC;CAC9F,IAAI,CAAC,SAAS,MAAM,GAAG,MAAM,IAAI,MAAM,4BAA4B;CACnE,SAAS,QAAQ,CAAC,WAAW,YAAY,GAAG,KAAK;CACjD,IAAI,OAAO,YAAY,OAAO,cAAc,MAAM,IAAI,MAAM,6CAA6C;CACzG,IAAI,CAAC,SAAS,OAAO,UAAU,GAAG,MAAM,IAAI,MAAM,8BAA8B;CAChF,OAAO,OAAO;AAChB;;AAGA,SAAgB,kBAAkB,MAAc,SAAuE;CACrH,IAAI,CAAC,MAAM,OAAO;CAClB,MAAM,UAAU,QAAQ;CACxB,MAAM,UAAU,CAAC,WAAW,QAAQ,WAAW;CAC/C,MAAM,qBAAqB,QAAQ,sBAAsB;CACzD,IAAK,CAAC,WAAW,CAAC,QAAQ,SAAS,IAAI,KAAO,sBAAsB,qBAAqB,IAAI,IAAI,GAAI,OAAO;CAC5G,OAAO;AACT;AAEA,SAAgB,sBAAsB,OAAuB;CAC3D,OAAO,GAAG,MAAM;AAClB;AAEA,SAAgB,wBAAwB,OAAe,MAAc,OAAwB;CAC3F,OAAO,GAAG,MAAM,mBAAmB,KAAK,KAAK,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AACpG;AAEA,SAAgB,eAAe,OAAe,OAAgD;CAC5F,OAAO,YAAY,GAAG,MAAM,iBAAiB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,GAAG;AACvG;;AAGA,SAAgB,WAAW,KAAc,MAAsB;CAC7D,IAAI,CAAC,SAAS,GAAG,GAAG,MAAM,IAAI,MAAM,8BAA8B;CAClE,MAAM,OAAO,eAAe,IAAI,MAAM,MAAM;CAC5C,IAAI,SAAS,SAAS,SAAS,KAAK;EAAC;EAAQ;EAAW;EAAQ;EAAO;CAAK,GAAG,WAAW,KAAK,EAAE;CACjG,OAAO;AACT;AAEA,SAAgB,YACd,MACA,QACkB;CAClB,OAAO;EACL,UAAU;GAAE;GAAM,WAAW;GAAS;EAAO;EAC7C,QAAQ;GAAE,MAAM;GAAS,GAAG;EAAO;CACrC;AACF;;AAGA,SAAgB,aAAa,KAAiB,MAAc,MAAgC;CAC1F,IAAI,SAAS,qBAAqB,SAAS,OAAO;EAChD,SAAS,KAAK;GAAC;GAAQ;GAAO;EAAS,GAAG,WAAW,KAAK,EAAE;EAC5D,MAAM,MAAM,aAAa,IAAI,GAAG;EAChC,MAAM,UAAU,iBAAiB,IAAI,OAAO;EAC5C,MAAM,YAAY,SAAS,oBAAoB,SAAS;EACxD,MAAM,SAAS;GAAE;GAAK,GAAI,UAAU,EAAE,QAAQ,IAAI,CAAC;EAAG;EACtD,OAAO;GACL,UAAU;IAAE;IAAM;IAAW;GAAO;GACpC,QAAQ;IAAE,MAAM;IAAW,GAAG;GAAO;EACvC;CACF;CACA,MAAM,IAAI,MAAM,+BAA+B,KAAK,EAAE;AACxD;AAEA,SAAgB,eAAe,iBAAqD;CAClF,OAAO,GAAG,KAAK,UAAU,EAAE,YAAY,gBAAgB,GAAG,MAAM,CAAC,EAAE;AACrE;AAEA,SAAgB,eAAe,QAA0C,YAAoB,UAA0B;CACrH,QAAA,GAAOA,YAAAA,WAAAA,CAAW,QAAQ,CAAC,CACxB,OAAO,mBAAmB,CAAC,CAC3B,OAAO,OAAO,QAAQ,CAAC,CACvB,OAAO,IAAI,CAAC,CACZ,OAAO,OAAO,aAAa,CAAC,CAC5B,OAAO,IAAI,CAAC,CACZ,OAAO,UAAU,CAAC,CAClB,OAAO,IAAI,CAAC,CACZ,OAAO,QAAQ,CAAC,CAChB,OAAO,KAAK;AACjB;;AAGA,SAAgB,0BACd,UACA,YACA,qBACiD;CACjD,IAAI,aAAa,KAAA,GAAW,OAAO,KAAA;CACnC,MAAM,MAAM,eAAe,UAAU,KAAK;CAC1C,IAAI,IAAI,WAAW,IAAI,GAAG,OAAO;EAAE,MAAM;EAAY,WAAWD,UAAAA,QAAK,QAAQ,YAAY,GAAG;CAAE;CAC9F,MAAM,WAAW,yBAAyB,KAAK,YAAY,mBAAmB;CAC9E,IAAI,QAAQ,oBAAoB,IAAI,WAAW,iBAAiB,GAC9D,OAAO;EAAE,MAAM;EAAY,WAAWA,UAAAA,QAAK,QAAQ,QAAQ;CAAE;CAE/D,IAAI,QAAQ,oBAAoB,IAAI,WAAW,iBAAiB,GAC9D,OAAO;EAAE,MAAM;EAAqB,WAAWA,UAAAA,QAAK,QAAQ,QAAQ;CAAE;CAExE,MAAM,IAAI,MAAM,2DAA2D;AAC7E;;AAGA,SAAgB,wBAAwB,SAA0B;CAChE,IAAI,QAAQ,WAAW,IAAI,GAAG,OAAO;CACrC,IAAI,YAAY,OAAO,YAAY,QAAQ,WAAW,KAAK,OAAO,GAChE,MAAM,IAAI,MAAM,uEAAuE;CAEzF,OAAO;AACT;;;ACjSA,SAASG,oBAAkB,MAAc,WAAmB,OAAuB;CACjF,IAAI;CACJ,IAAI;EACF,gBAAgBC,QAAAA,QAAG,aAAa,SAAS;CAC3C,QAAQ;EACN,MAAM,IAAI,MAAM,GAAG,MAAM,gBAAgB;CAC3C;CACA,IAAI,CAAC,SAAS,MAAM,aAAa,GAAG,MAAM,IAAI,MAAM,GAAG,MAAM,sCAAsC;CACnG,OAAO;AACT;AAEA,SAASC,mBAAiB,SAAiB,YAA4B;CACrE,IAAI,CAAC,wBAAwB,OAAO,GAAG,OAAO;CAC9C,MAAM,WAAWF,oBAAkB,YAAYG,UAAAA,QAAK,QAAQ,YAAY,OAAO,GAAG,SAAS;CAC3F,IAAI,CAACF,QAAAA,QAAG,SAAS,QAAQ,CAAC,CAAC,OAAO,GAAG,MAAM,IAAI,MAAM,wCAAwC;CAC7F,IAAI;EACF,QAAA,QAAG,WAAW,UAAUA,QAAAA,QAAG,UAAU,IAAI;CAC3C,QAAQ;EACN,MAAM,IAAI,MAAM,4CAA4C;CAC9D;CACA,OAAO;AACT;AAEA,SAASG,4BAA0B,UAAmB,YAAoB,qBAAqC;CAC7G,MAAM,cAAc,0BAA0B,UAAU,YAAY,mBAAmB;CACvF,IAAI,CAAC,aAAa,OAAO;CACzB,MAAM,WAAWJ,oBAAkB,YAAY,MAAM,YAAY,WAAW,KAAK;CACjF,IAAI,CAACC,QAAAA,QAAG,SAAS,QAAQ,CAAC,CAAC,YAAY,GAAG,MAAM,IAAI,MAAM,iCAAiC;CAC3F,OAAO;AACT;AAEA,SAASI,kBACP,KACA,YACA,qBACA,MACkB;CAClB,MAAM,OAAO,WAAW,KAAK,IAAI;CACjC,MAAM,cAAc;CACpB,IAAI,SAAS,SAAS,OAAO,aAAa,aAAa,MAAM,IAAI;CACjE,MAAM,UAAUH,mBAAiB,eAAe,YAAY,SAAS,SAAS,GAAG,UAAU;CAC3F,MAAM,OAAO,oBAAoB,YAAY,MAAM,MAAM,CAAC,EAAE,KAAK,SAC/D,yBAAyB,MAAM,YAAY,mBAAmB,CAChE;CACA,MAAM,MAAM,qBAAqB,YAAY,KAAK,YAAY,mBAAmB;CACjF,MAAM,MAAME,4BAA0B,YAAY,KAAK,YAAY,mBAAmB;CACtF,OAAO,YAAY,MAAM;EAAE;EAAS,GAAI,OAAO,EAAE,KAAK,IAAI,CAAC;EAAI;EAAK;CAAI,CAAC;AAC3E;AAEA,SAASE,4BAA0B,QAAgB,UAAkB,kBAAgC;CACnG,QAAA,QAAG,UAAU,kBAAkB;EAAE,MAAA;EAA8B,WAAW;CAAK,CAAC;CAChF,QAAA,QAAG,UAAU,kBAAA,GAAwC;CACrD,MAAM,gBAAgB,GAAG,OAAO,GAAG,QAAQ,IAAI,IAAA,GAAGC,YAAAA,WAAAA,CAAW,EAAE;CAC/D,IAAI;EACF,QAAA,QAAG,cAAc,eAAe,UAAU;GAAE,MAAM;GAAM,MAAA;EAAwB,CAAC;EACjF,IAAI;GACF,QAAA,QAAG,WAAW,eAAe,MAAM;EACrC,SAAS,OAAO;GACd,MAAM,OAAQ,MAAgC;GAC9C,IAAI,SAAS,YAAY,SAAS,SAAS,MAAM;GACjD,MAAM,OAAON,QAAAA,QAAG,UAAU,MAAM;GAChC,IAAI,KAAK,eAAe,KAAK,CAAC,KAAK,OAAO,KAAKA,QAAAA,QAAG,aAAa,QAAQ,MAAM,MAAM,UACjF,MAAM,IAAI,MAAM,iEAAiE;EAErF;EACA,QAAA,QAAG,UAAU,QAAA,GAAyB;CACxC,UAAU;EACR,QAAA,QAAG,OAAO,eAAe,EAAE,OAAO,KAAK,CAAC;CAC1C;AACF;;;;;;;;;;;AAYA,SAAgB,8BACd,QACA,SACgC;CAChC,MAAM,QAAQ,YAAY,MAAM;CAChC,IAAI;EACF,uBAAuB,MAAM;EAC7B,MAAM,aAAaA,QAAAA,QAAG,aAAa,OAAO,UAAU;EACpD,IAAI;GACF,MAAM,WAAWA,QAAAA,QAAG,UAAU,OAAO,mBAAmB;GACxD,IAAI,SAAS,eAAe,KAAK,CAAC,SAAS,YAAY,GACrD,MAAM,IAAI,MAAM,8CAA8C;EAElE,SAAS,OAAO;GACd,IAAK,MAAgC,SAAS,UAAU,MAAM;GAC9D,QAAA,QAAG,UAAU,OAAO,qBAAqB;IAAE,MAAA;IAA8B,WAAW;GAAK,CAAC;EAC5F;EACA,QAAA,QAAG,UAAU,OAAO,qBAAA,GAA2C;EAC/D,QAAA,QAAG,WAAW,OAAO,qBAAqBA,QAAAA,QAAG,UAAU,IAAI;EAC3D,MAAM,sBAAsBA,QAAAA,QAAG,aAAa,OAAO,mBAAmB;EACtE,MAAM,aAAaD,oBAAkB,YAAY,OAAO,YAAY,UAAU;EAC9E,qBAAqB,YAAY,UAAU;EAE3C,MAAM,UAAU,iBAAiB,QAAQC,QAAAA,QAAG,aAAa,UAAU,GAAG,KAAK;EAC3E,MAAM,kBAAkB,OAAO,OAAO,IAAI;EAC1C,MAAM,gBAAgB,OAAO,OAAO,IAAI;EACxC,MAAM,iBAA2B,CAAC;EAClC,MAAM,cAAwB,CAAC;EAE/B,KAAK,MAAM,CAAC,MAAM,cAAc,OAAO,QAAQ,OAAO,GAAG;GACvD,MAAM,cAAc,kBAAkB,MAAM,OAAO;GACnD,IAAI,gBAAgB,SAAS;IAC3B,YAAY,KAAK,sBAAsB,KAAK,CAAC;IAC7C;GACF;GACA,IAAI,gBAAgB,WAAW;IAC7B,eAAe,KAAK,IAAI;IACxB;GACF;GACA,IAAI;IACF,MAAM,aAAaI,kBAAgB,WAAW,YAAY,qBAAqB,IAAI;IACnF,gBAAgB,QAAQ,WAAW;IACnC,cAAc,QAAQ,WAAW;GACnC,SAAS,OAAO;IACd,eAAe,KAAK,IAAI;IACxB,YAAY,KAAK,wBAAwB,OAAO,MAAM,KAAK,CAAC;GAC9D;EACF;EAEA,MAAM,WAAW,eAAe,eAAe;EAC/C,MAAM,SAAS,mBAAmB,QAAQ,UAAU,QAAQ,gBAAgB;EAC5E,4BAA0B,QAAQ,UAAU,QAAQ,gBAAgB;EACpE,OAAO;GACL,cAAc;IAAE,MAAM;IAAQ,QAAQ;IAAY,UAAU,eAAe,QAAQ,YAAY,QAAQ;GAAE;GACzG,cAAc,EAAE,YAAY,cAAc;GAC1C,aAAa,OAAO,KAAK,eAAe;GACxC;GACA;EACF;CACF,SAAS,OAAO;EACd,OAAO,eAAe,OAAO,KAAK;CACpC;AACF;;;ACvIA,eAAe,kBACb,IACA,MACA,WACA,OACA,SACiB;CACjB,MAAM,OAAO,MAAM,GAAG,cAAc,WAAW,OAAO;CACtD,IAAI,CAAC,KAAK,IAAI,MAAM,IAAI,MAAM,GAAG,MAAM,gBAAgB;CACvD,IAAI,CAAC,SAAS,MAAM,KAAK,KAAK,GAAG,MAAM,IAAI,MAAM,GAAG,MAAM,sCAAsC;CAChG,OAAO,KAAK;AACd;AAEA,eAAe,iBACb,IACA,SACA,YACA,SACiB;CACjB,IAAI,CAAC,wBAAwB,OAAO,GAAG,OAAO;CAC9C,MAAM,WAAW,MAAM,kBAAkB,IAAI,YAAYG,UAAAA,QAAK,QAAQ,YAAY,OAAO,GAAG,WAAW,OAAO;CAC9G,KAAA,GAAIC,4BAAAA,WAAAA,CAAW,MAAM,GAAG,SAAS,UAAU,OAAO,CAAC,CAAC,CAAC,SAAS,QAC5D,MAAM,IAAI,MAAM,wCAAwC;CAG1D,MAAM,OAAO,MAAMC,4BAAAA,SAAS,SAAS,QAAQ;CAC7C,IAAI,SAAS,KAAA,MAAc,OAAO,QAAW,GAAG,MAAM,IAAI,MAAM,4CAA4C;CAC5G,OAAO;AACT;AAEA,eAAe,0BACb,IACA,UACA,YACA,qBACA,SACiB;CACjB,MAAM,cAAc,0BAA0B,UAAU,YAAY,mBAAmB;CACvF,IAAI,CAAC,aAAa,OAAO;CACzB,MAAM,WAAW,MAAM,kBAAkB,IAAI,YAAY,MAAM,YAAY,WAAW,OAAO,OAAO;CACpG,KAAA,GAAID,4BAAAA,WAAAA,CAAW,MAAM,GAAG,SAAS,UAAU,OAAO,CAAC,CAAC,CAAC,SAAS,aAC5D,MAAM,IAAI,MAAM,iCAAiC;CAEnD,OAAO;AACT;AAEA,eAAe,gBACb,IACA,KACA,YACA,qBACA,MACA,SAC2B;CAC3B,MAAM,OAAO,WAAW,KAAK,IAAI;CACjC,MAAM,cAAc;CACpB,IAAI,SAAS,SAAS,OAAO,aAAa,aAAa,MAAM,IAAI;CACjE,MAAM,UAAU,MAAM,iBAAiB,IAAI,eAAe,YAAY,SAAS,SAAS,GAAG,YAAY,OAAO;CAC9G,MAAM,OAAO,oBAAoB,YAAY,MAAM,MAAM,CAAC,EAAE,KAAK,SAC/D,yBAAyB,MAAM,YAAY,mBAAmB,CAChE;CACA,MAAM,MAAM,qBAAqB,YAAY,KAAK,YAAY,mBAAmB;CACjF,MAAM,MAAM,MAAM,0BAA0B,IAAI,YAAY,KAAK,YAAY,qBAAqB,OAAO;CACzG,OAAO,YAAY,MAAM;EAAE;EAAS,GAAI,OAAO,EAAE,KAAK,IAAI,CAAC;EAAI;EAAK;CAAI,CAAC;AAC3E;;AAGA,eAAe,2BAA2B,IAAgB,WAAmB,SAAmC;CAC9G,MAAM,OAAO,MAAM,GAAG,SAAS,WAAW,OAAO;CACjD,IAAI,KAAK,IACH;MAAA,KAAK,MAAM,SAAS,aAAa,MAAM,IAAI,MAAM,8CAA8C;CAAA,OAC9F,IAAI,KAAK,MAAM,SAAS,aAC7B,CAAA,GAAA,4BAAA,WAAA,CAAW,MAAM,GAAG,UAAU,WAAW,EAAE,WAAW,KAAK,GAAG,OAAO,CAAC;MAEtE,MAAM,KAAK;CAEb,MAAMC,4BAAAA,SAAS,QAAQ,WAAA,GAAiC;CACxD,QAAA,GAAOD,4BAAAA,WAAAA,CAAW,MAAM,GAAG,cAAc,WAAW,OAAO,CAAC;AAC9D;;;;;AAMA,eAAe,0BACb,IACA,QACA,UACA,kBACA,SACe;CACf,CAAA,GAAA,4BAAA,WAAA,CAAW,MAAM,GAAG,UAAU,kBAAkB,EAAE,WAAW,KAAK,GAAG,OAAO,CAAC;CAC7E,MAAMC,4BAAAA,SAAS,QAAQ,kBAAA,GAAwC;CAC/D,OAAA,GAAMC,4BAAAA,gBAAAA,CAAgB,IAAI,QAAQ,UAAU,OAAO;CACnD,MAAMD,4BAAAA,SAAS,QAAQ,QAAA,GAAyB;AAClD;;;;;;;;;;AAWA,eAAsB,mCACpB,IACA,QACA,SACA,SACyC;CACzC,MAAM,QAAQ,YAAY,MAAM;CAChC,IAAI;EACF,uBAAuB,MAAM;EAC7B,MAAM,cAAA,GAAaD,4BAAAA,WAAAA,CAAW,MAAM,GAAG,cAAc,OAAO,YAAY,OAAO,CAAC;EAChF,MAAM,sBAAsB,MAAM,2BAA2B,IAAI,OAAO,qBAAqB,OAAO;EACpG,MAAM,aAAa,MAAM,kBAAkB,IAAI,YAAY,OAAO,YAAY,YAAY,OAAO;EACjG,qBAAqB,YAAY,UAAU;EAG3C,MAAM,UAAU,iBAAiB,SAD3B,GAAQA,4BAAAA,WAAAA,CAAW,MAAM,GAAG,eAAe,YAAY,OAAO,CAC3B,GAAO,KAAK;EACrD,MAAM,kBAAkB,OAAO,OAAO,IAAI;EAC1C,MAAM,gBAAgB,OAAO,OAAO,IAAI;EACxC,MAAM,iBAA2B,CAAC;EAClC,MAAM,cAAwB,CAAC;EAE/B,KAAK,MAAM,CAAC,MAAM,cAAc,OAAO,QAAQ,OAAO,GAAG;GACvD,MAAM,cAAc,kBAAkB,MAAM,OAAO;GACnD,IAAI,gBAAgB,SAAS;IAC3B,YAAY,KAAK,sBAAsB,KAAK,CAAC;IAC7C;GACF;GACA,IAAI,gBAAgB,WAAW;IAC7B,eAAe,KAAK,IAAI;IACxB;GACF;GACA,IAAI;IACF,MAAM,aAAa,MAAM,gBAAgB,IAAI,WAAW,YAAY,qBAAqB,MAAM,OAAO;IACtG,gBAAgB,QAAQ,WAAW;IACnC,cAAc,QAAQ,WAAW;GACnC,SAAS,OAAO;IACd,eAAe,KAAK,IAAI;IACxB,YAAY,KAAK,wBAAwB,OAAO,MAAM,KAAK,CAAC;GAC9D;EACF;EAEA,MAAM,WAAW,eAAe,eAAe;EAC/C,MAAM,SAAS,mBAAmB,QAAQ,UAAU,QAAQ,gBAAgB;EAC5E,MAAM,0BAA0B,IAAI,QAAQ,UAAU,QAAQ,kBAAkB,OAAO;EACvF,OAAO;GACL,cAAc;IAAE,MAAM;IAAQ,QAAQ;IAAY,UAAU,eAAe,QAAQ,YAAY,QAAQ;GAAE;GACzG,cAAc,EAAE,YAAY,cAAc;GAC1C,aAAa,OAAO,KAAK,eAAe;GACxC;GACA;EACF;CACF,SAAS,OAAO;EACd,OAAO,eAAe,OAAO,KAAK;CACpC;AACF"}
|
|
1
|
+
{"version":3,"file":"agentPluginMcp.cjs","names":["path","createHash","AGENT_PLUGIN_MCP_SCHEMA_URL","realContainedPath","fs","normalizeCommand","path","normalizeWorkingDirectory","normalizeServer","writeStagedInternalConfig","randomUUID","createHash","AGENT_PLUGIN_MCP_SCHEMA_URL","path","getOrThrow","nodeHost","writeFileAtomic"],"sources":["../src/services/agentPluginMcp/normalize.ts","../src/services/agentPluginMcp/sync.ts","../src/services/agentPluginMcp/index.ts"],"sourcesContent":["/** Pure Agent Plugin MCP normalisation shared by the async API and the deprecated Node-only sync shim. */\nimport { createHash } from 'node:crypto';\nimport path from 'node:path';\n\nimport { AGENT_PLUGIN_MCP_SCHEMA_URL, type PoMcpAgentPluginProjectionSource } from '@agimon-ai/po-core/mcpProjection';\n\n/** Same token grammar as node:http `validateHeaderName` (RFC 9110 tchar). */\nconst HTTP_TOKEN = /^[\\^_`a-zA-Z\\-0-9!#$%&'*+.|~]+$/u;\n/** Same rejected characters as node:http `validateHeaderValue`. */\nconst INVALID_HEADER_VALUE_CHARACTER = /[^\\t\\x20-\\x7e\\x80-\\xff]/u;\nconst IPV4_OCTET = '(?:25[0-5]|2[0-4]\\\\d|1\\\\d\\\\d|[1-9]?\\\\d)';\nconst IPV4_ADDRESS = new RegExp(`^${IPV4_OCTET}(?:\\\\.${IPV4_OCTET}){3}$`, 'u');\n\nfunction isIPv4(value: string): boolean {\n return IPV4_ADDRESS.test(value);\n}\n\nexport const PRIVATE_FILE_MODE = 0o600;\nexport const PRIVATE_DIRECTORY_MODE = 0o700;\nexport const RESERVED_ENVIRONMENT_KEYS = new Set(['PLUGIN_ROOT', 'PLUGIN_DATA']);\nexport const PROXY_SERVER_ALIASES = new Set(['mcp-proxy', 'agiflow-proxy']);\n\nexport type JsonObject = Record<string, unknown>;\n\nexport interface AgentPluginMcpConfigSource {\n path: string;\n format: 'internal';\n cacheKey: string;\n}\n\nexport interface NormalizedAgentPluginMcpSource {\n /** Owner-only, content-addressed layer that bypasses Claude env interpolation. */\n configSource?: AgentPluginMcpConfigSource;\n /** Claude-compatible definitions for an external merged config. */\n claudeConfig: { mcpServers: Record<string, JsonObject> };\n serverNames: string[];\n droppedServers: string[];\n diagnostics: string[];\n}\n\nexport interface NormalizeAgentPluginMcpOptions {\n stagingDirectory: string;\n /** Empty and absent lists both mean keep every server. */\n allowedServers?: readonly string[];\n /** Po strips nested wrappers; external-only callers may opt out. */\n stripProxyWrappers?: boolean;\n}\n\nexport interface NormalizedServer {\n internal: JsonObject;\n claude: JsonObject;\n}\n\nexport function isObject(value: unknown): value is JsonObject {\n return typeof value === 'object' && value !== null && !Array.isArray(value);\n}\n\nexport function onlyKeys(value: JsonObject, allowed: readonly string[], label: string): void {\n const unexpected = Object.keys(value).find((key) => !allowed.includes(key));\n if (unexpected) throw new Error(`${label} contains unsupported field \"${unexpected}\"`);\n}\n\nexport function nonEmptyString(value: unknown, label: string): string {\n if (typeof value !== 'string' || value.length === 0) throw new Error(`${label} must be a non-empty string`);\n return value;\n}\n\nexport function optionalStringArray(value: unknown, label: string): string[] | undefined {\n if (value === undefined) return undefined;\n if (!Array.isArray(value)) throw new Error(`${label} must be an array of strings`);\n return value.map((item, index) => {\n if (typeof item !== 'string') throw new Error(`${label}[${index}] must be a string`);\n return item;\n });\n}\n\nfunction optionalStringRecord(value: unknown, label: string): Record<string, string> | undefined {\n if (value === undefined) return undefined;\n if (!isObject(value)) throw new Error(`${label} must be an object of string values`);\n return Object.fromEntries(\n Object.entries(value).map(([key, item]) => {\n if (typeof item !== 'string') throw new Error(`${label}.${key} must be a string`);\n return [key, item];\n }),\n );\n}\n\nexport function expandPluginPlaceholders(value: string, pluginRoot: string, pluginDataDirectory: string): string {\n // The portable contract is a single, non-recursive replacement pass. An\n // unrecognised placeholder remains literal and mcp-proxy must not reinterpret it.\n return value.replace(/\\$\\{PLUGIN_(ROOT|DATA)\\}/gu, (placeholder) =>\n placeholder === '${PLUGIN_ROOT}' ? pluginRoot : pluginDataDirectory,\n );\n}\n\nexport function isInside(root: string, candidate: string): boolean {\n const relative = path.relative(root, candidate);\n return relative === '' || (!relative.startsWith(`..${path.sep}`) && relative !== '..' && !path.isAbsolute(relative));\n}\n\nexport function normalizeEnvironment(\n value: unknown,\n pluginRoot: string,\n pluginDataDirectory: string,\n): Record<string, string> {\n const declared = optionalStringRecord(value, 'env') ?? {};\n for (const key of Object.keys(declared)) {\n const reservedKey = process.platform === 'win32' ? key.toUpperCase() : key;\n if (RESERVED_ENVIRONMENT_KEYS.has(reservedKey)) {\n throw new Error(`env key \"${key}\" is reserved by Agent Plugins`);\n }\n }\n return {\n ...Object.fromEntries(\n Object.entries(declared).map(([key, item]) => [\n key,\n expandPluginPlaceholders(item, pluginRoot, pluginDataDirectory),\n ]),\n ),\n PLUGIN_ROOT: pluginRoot,\n PLUGIN_DATA: pluginDataDirectory,\n };\n}\n\nfunction isLoopbackHost(hostname: string): boolean {\n const bareHostname = hostname.startsWith('[') && hostname.endsWith(']') ? hostname.slice(1, -1) : hostname;\n if (bareHostname.toLowerCase() === 'localhost') return true;\n if (isIPv4(bareHostname)) return bareHostname.split('.')[0] === '127';\n return bareHostname === '::1';\n}\n\nexport function normalizeUrl(value: unknown): string {\n const raw = nonEmptyString(value, 'url');\n let parsed: URL;\n try {\n parsed = new URL(raw);\n } catch {\n throw new Error('url must be an absolute HTTP(S) URL');\n }\n if (parsed.protocol !== 'http:' && parsed.protocol !== 'https:') {\n throw new Error('url must use http or https');\n }\n if (parsed.username || parsed.password) throw new Error('url must not contain user information');\n if (parsed.hash) throw new Error('url must not contain a fragment');\n if (parsed.protocol === 'http:' && !isLoopbackHost(parsed.hostname)) {\n throw new Error('non-loopback MCP URLs must use https');\n }\n return raw;\n}\n\nexport function normalizeHeaders(value: unknown): Record<string, string> | undefined {\n const headers = optionalStringRecord(value, 'headers');\n if (!headers) return undefined;\n const seen = new Set<string>();\n for (const [name, item] of Object.entries(headers)) {\n const canonical = name.toLowerCase();\n if (seen.has(canonical)) throw new Error(`headers contain duplicate name \"${name}\"`);\n seen.add(canonical);\n if (!HTTP_TOKEN.test(name) || INVALID_HEADER_VALUE_CHARACTER.test(item)) {\n throw new Error(`header \"${name}\" is invalid`);\n }\n }\n return headers;\n}\n\nexport function stagedInternalPath(\n source: PoMcpAgentPluginProjectionSource,\n contents: string,\n stagingDirectory: string,\n): string {\n const digest = createHash('sha256')\n .update(source.sourceId)\n .update('\\0')\n .update(source.contentDigest)\n .update('\\0')\n .update(contents)\n .digest('hex')\n .slice(0, 20);\n return path.join(stagingDirectory, `agent-plugin-mcp-${digest}.internal.json`);\n}\n\nexport function emptyResult(diagnostic: string): NormalizedAgentPluginMcpSource {\n return {\n claudeConfig: { mcpServers: {} },\n serverNames: [],\n droppedServers: [],\n diagnostics: [diagnostic],\n };\n}\n\nexport function sourceLabel(source: PoMcpAgentPluginProjectionSource): string {\n return `Agent Plugin MCP source \"${source.sourceId}\"`;\n}\n\n/** Checks the projection identity before any file is touched. */\nexport function assertProjectionSource(source: PoMcpAgentPluginProjectionSource): void {\n if (source.mcpSchemaUrl !== AGENT_PLUGIN_MCP_SCHEMA_URL) {\n throw new Error(`unsupported schema \"${String(source.mcpSchemaUrl)}\"`);\n }\n if (!path.isAbsolute(source.pluginRoot) || !path.isAbsolute(source.pluginDataDirectory)) {\n throw new Error('pluginRoot and pluginDataDirectory must be absolute');\n }\n}\n\nexport function assertRootConfigPath(configPath: string, pluginRoot: string): void {\n if (path.dirname(configPath) !== pluginRoot || path.basename(configPath) !== 'mcp.json') {\n throw new Error('portable plugin config must be root mcp.json');\n }\n}\n\n/** Verifies the digest and document shape of the raw mcp.json bytes; returns its server map. */\nexport function parseMcpDocument(\n source: PoMcpAgentPluginProjectionSource,\n bytes: Uint8Array,\n label: string,\n): Record<string, unknown> {\n const digest = createHash('sha256').update(bytes).digest('hex');\n if (digest !== source.contentDigest) throw new Error('content digest does not match the projection');\n const parsed: unknown = JSON.parse(new TextDecoder('utf-8', { ignoreBOM: true }).decode(bytes));\n if (!isObject(parsed)) throw new Error('document must be an object');\n onlyKeys(parsed, ['$schema', 'mcpServers'], label);\n if (parsed.$schema !== source.mcpSchemaUrl) throw new Error('$schema does not match the projected schema');\n if (!isObject(parsed.mcpServers)) throw new Error('mcpServers must be an object');\n return parsed.mcpServers;\n}\n\n/** Whether a declared server is skipped (empty name), dropped by the allowlist or wrapper rule, or normalised. */\nexport function serverDisposition(name: string, options: NormalizeAgentPluginMcpOptions): 'empty' | 'dropped' | 'keep' {\n if (!name) return 'empty';\n const allowed = options.allowedServers;\n const keepAll = !allowed || allowed.length === 0;\n const stripProxyWrappers = options.stripProxyWrappers ?? true;\n if ((!keepAll && !allowed.includes(name)) || (stripProxyWrappers && PROXY_SERVER_ALIASES.has(name))) return 'dropped';\n return 'keep';\n}\n\nexport function emptyServerDiagnostic(label: string): string {\n return `${label} contains an empty server name; that entry was skipped.`;\n}\n\nexport function skippedServerDiagnostic(label: string, name: string, error: unknown): string {\n return `${label} skipped server \"${name}\": ${error instanceof Error ? error.message : String(error)}`;\n}\n\nexport function disabledResult(label: string, error: unknown): NormalizedAgentPluginMcpSource {\n return emptyResult(`${label} was disabled: ${error instanceof Error ? error.message : String(error)}`);\n}\n\n/** The declared transport of one server; stdio declarations are also checked for unsupported fields. */\nexport function serverType(raw: unknown, name: string): string {\n if (!isObject(raw)) throw new Error('definition must be an object');\n const type = nonEmptyString(raw.type, 'type');\n if (type === 'stdio') onlyKeys(raw, ['type', 'command', 'args', 'env', 'cwd'], `server \"${name}\"`);\n return type;\n}\n\nexport function stdioServer(\n name: string,\n config: { command: string; args?: string[]; env: Record<string, string>; cwd: string },\n): NormalizedServer {\n return {\n internal: { name, transport: 'stdio', config },\n claude: { type: 'stdio', ...config },\n };\n}\n\n/** A streamable-http or sse server; any other type is unsupported. */\nexport function remoteServer(raw: JsonObject, name: string, type: string): NormalizedServer {\n if (type === 'streamable-http' || type === 'sse') {\n onlyKeys(raw, ['type', 'url', 'headers'], `server \"${name}\"`);\n const url = normalizeUrl(raw.url);\n const headers = normalizeHeaders(raw.headers);\n const transport = type === 'streamable-http' ? 'http' : 'sse';\n const config = { url, ...(headers ? { headers } : {}) };\n return {\n internal: { name, transport, config },\n claude: { type: transport, ...config },\n };\n }\n throw new Error(`unsupported transport type \"${type}\"`);\n}\n\nexport function stagedContents(internalServers: Record<string, JsonObject>): string {\n return `${JSON.stringify({ mcpServers: internalServers }, null, 2)}\\n`;\n}\n\nexport function stagedCacheKey(source: PoMcpAgentPluginProjectionSource, configPath: string, contents: string): string {\n return createHash('sha256')\n .update('agent-plugin-v1\\0')\n .update(source.sourceId)\n .update('\\0')\n .update(source.contentDigest)\n .update('\\0')\n .update(configPath)\n .update('\\0')\n .update(contents)\n .digest('hex');\n}\n\n/** The containment base and expanded path of a declared cwd, or undefined when the plugin root is the default. */\nexport function workingDirectoryCandidate(\n declared: unknown,\n pluginRoot: string,\n pluginDataDirectory: string,\n): { base: string; candidate: string } | undefined {\n if (declared === undefined) return undefined;\n const cwd = nonEmptyString(declared, 'cwd');\n if (cwd.startsWith('./')) return { base: pluginRoot, candidate: path.resolve(pluginRoot, cwd) };\n const expanded = expandPluginPlaceholders(cwd, pluginRoot, pluginDataDirectory);\n if (cwd === '${PLUGIN_ROOT}' || cwd.startsWith('${PLUGIN_ROOT}/')) {\n return { base: pluginRoot, candidate: path.resolve(expanded) };\n }\n if (cwd === '${PLUGIN_DATA}' || cwd.startsWith('${PLUGIN_DATA}/')) {\n return { base: pluginDataDirectory, candidate: path.resolve(expanded) };\n }\n throw new Error('cwd must start with ./, ${PLUGIN_ROOT}, or ${PLUGIN_DATA}');\n}\n\n/** Rejects a command that is neither a bare executable name nor a ./ path; true when it must be resolved. */\nexport function isPluginRelativeCommand(command: string): boolean {\n if (command.startsWith('./')) return true;\n if (command === '.' || command === '..' || /[\\s/\\\\]/u.test(command)) {\n throw new Error('command must be a bare executable name or a ./ path inside the plugin');\n }\n return false;\n}\n","import { createHash, randomUUID } from 'node:crypto';\n// sync: The normalization helpers preserve the exported Node-only normalizeAgentPluginMcpSource signature.\nimport fs from 'node:fs';\nimport path from 'node:path';\n\nimport {\n AGENT_PLUGIN_MCP_SCHEMA_URL,\n type PoMcpAgentPluginProjectionSource,\n type PoMcpProjectionSource,\n} from '@agimon-ai/po-core/mcpProjection';\n\nimport type { PluginEntry } from '../../types/domains';\nimport {\n type JsonObject,\n type NormalizeAgentPluginMcpOptions,\n type NormalizedAgentPluginMcpSource,\n type NormalizedServer,\n PRIVATE_DIRECTORY_MODE,\n PRIVATE_FILE_MODE,\n assertProjectionSource,\n assertRootConfigPath,\n disabledResult,\n emptyServerDiagnostic,\n expandPluginPlaceholders,\n isInside,\n isPluginRelativeCommand,\n nonEmptyString,\n normalizeEnvironment,\n optionalStringArray,\n parseMcpDocument,\n remoteServer,\n serverDisposition,\n serverType,\n skippedServerDiagnostic,\n sourceLabel,\n stagedCacheKey,\n stagedContents,\n stagedInternalPath,\n stdioServer,\n workingDirectoryCandidate,\n} from './normalize';\n\nfunction realContainedPath(root: string, candidate: string, label: string): string {\n let realCandidate: string;\n try {\n realCandidate = fs.realpathSync(candidate);\n } catch {\n throw new Error(`${label} does not exist`);\n }\n if (!isInside(root, realCandidate)) throw new Error(`${label} escapes its allowed plugin directory`);\n return realCandidate;\n}\n\nfunction normalizeCommand(command: string, pluginRoot: string): string {\n if (!isPluginRelativeCommand(command)) return command;\n const resolved = realContainedPath(pluginRoot, path.resolve(pluginRoot, command), 'command');\n if (!fs.statSync(resolved).isFile()) throw new Error('command must resolve to a regular file');\n try {\n fs.accessSync(resolved, fs.constants.X_OK);\n } catch {\n throw new Error('command must resolve to an executable file');\n }\n return resolved;\n}\n\nfunction normalizeWorkingDirectory(declared: unknown, pluginRoot: string, pluginDataDirectory: string): string {\n const declaredCwd = workingDirectoryCandidate(declared, pluginRoot, pluginDataDirectory);\n if (!declaredCwd) return pluginRoot;\n const resolved = realContainedPath(declaredCwd.base, declaredCwd.candidate, 'cwd');\n if (!fs.statSync(resolved).isDirectory()) throw new Error('cwd must resolve to a directory');\n return resolved;\n}\n\nfunction normalizeServer(\n raw: unknown,\n pluginRoot: string,\n pluginDataDirectory: string,\n name: string,\n): NormalizedServer {\n const type = serverType(raw, name);\n const declaration = raw as JsonObject;\n if (type !== 'stdio') return remoteServer(declaration, name, type);\n const command = normalizeCommand(nonEmptyString(declaration.command, 'command'), pluginRoot);\n const args = optionalStringArray(declaration.args, 'args')?.map((item) =>\n expandPluginPlaceholders(item, pluginRoot, pluginDataDirectory),\n );\n const env = normalizeEnvironment(declaration.env, pluginRoot, pluginDataDirectory);\n const cwd = normalizeWorkingDirectory(declaration.cwd, pluginRoot, pluginDataDirectory);\n return stdioServer(name, { command, ...(args ? { args } : {}), env, cwd });\n}\n\nfunction writeStagedInternalConfig(target: string, contents: string, stagingDirectory: string): void {\n fs.mkdirSync(stagingDirectory, { mode: PRIVATE_DIRECTORY_MODE, recursive: true });\n fs.chmodSync(stagingDirectory, PRIVATE_DIRECTORY_MODE);\n const temporaryPath = `${target}.${process.pid}-${randomUUID()}.tmp`;\n try {\n fs.writeFileSync(temporaryPath, contents, { flag: 'wx', mode: PRIVATE_FILE_MODE });\n try {\n fs.renameSync(temporaryPath, target);\n } catch (error) {\n const code = (error as NodeJS.ErrnoException).code;\n if (code !== 'EEXIST' && code !== 'EPERM') throw error;\n const stat = fs.lstatSync(target);\n if (stat.isSymbolicLink() || !stat.isFile() || fs.readFileSync(target, 'utf8') !== contents) {\n throw new Error('content-addressed staging path is occupied by different content');\n }\n }\n fs.chmodSync(target, PRIVATE_FILE_MODE);\n } finally {\n fs.rmSync(temporaryPath, { force: true });\n }\n}\n\n/**\n * Validates one Agent Plugins v1 `mcp.json` and stages a native mcp-proxy layer.\n *\n * Server validation is isolated: one malformed server is diagnosed and skipped.\n * Document/schema, source identity, or plugin-boundary failures reject the whole\n * source. Only the two portable plugin placeholders are expanded; the staged\n * layer is tagged `internal`, so legacy `${ENV}` interpolation cannot run again.\n *\n * @deprecated Node-only sync shim; use normalizeAgentPluginMcpSourceAsync. Removed in M2.\n */\nexport function normalizeAgentPluginMcpSource(\n source: PoMcpAgentPluginProjectionSource,\n options: NormalizeAgentPluginMcpOptions,\n): NormalizedAgentPluginMcpSource {\n const label = sourceLabel(source);\n try {\n assertProjectionSource(source);\n const pluginRoot = fs.realpathSync(source.pluginRoot);\n try {\n const dataStat = fs.lstatSync(source.pluginDataDirectory);\n if (dataStat.isSymbolicLink() || !dataStat.isDirectory()) {\n throw new Error('pluginDataDirectory must be a real directory');\n }\n } catch (error) {\n if ((error as NodeJS.ErrnoException).code !== 'ENOENT') throw error;\n fs.mkdirSync(source.pluginDataDirectory, { mode: PRIVATE_DIRECTORY_MODE, recursive: true });\n }\n fs.chmodSync(source.pluginDataDirectory, PRIVATE_DIRECTORY_MODE);\n fs.accessSync(source.pluginDataDirectory, fs.constants.W_OK);\n const pluginDataDirectory = fs.realpathSync(source.pluginDataDirectory);\n const configPath = realContainedPath(pluginRoot, source.configPath, 'mcp.json');\n assertRootConfigPath(configPath, pluginRoot);\n\n const servers = parseMcpDocument(source, fs.readFileSync(configPath), label);\n const internalServers = Object.create(null) as Record<string, JsonObject>;\n const claudeServers = Object.create(null) as Record<string, JsonObject>;\n const droppedServers: string[] = [];\n const diagnostics: string[] = [];\n\n for (const [name, rawServer] of Object.entries(servers)) {\n const disposition = serverDisposition(name, options);\n if (disposition === 'empty') {\n diagnostics.push(emptyServerDiagnostic(label));\n continue;\n }\n if (disposition === 'dropped') {\n droppedServers.push(name);\n continue;\n }\n try {\n const normalized = normalizeServer(rawServer, pluginRoot, pluginDataDirectory, name);\n internalServers[name] = normalized.internal;\n claudeServers[name] = normalized.claude;\n } catch (error) {\n droppedServers.push(name);\n diagnostics.push(skippedServerDiagnostic(label, name, error));\n }\n }\n\n const contents = stagedContents(internalServers);\n const target = stagedInternalPath(source, contents, options.stagingDirectory);\n writeStagedInternalConfig(target, contents, options.stagingDirectory);\n return {\n configSource: { path: target, format: 'internal', cacheKey: stagedCacheKey(source, configPath, contents) },\n claudeConfig: { mcpServers: claudeServers },\n serverNames: Object.keys(internalServers),\n droppedServers,\n diagnostics,\n };\n } catch (error) {\n return disabledResult(label, error);\n }\n}\n\nconst AGENT_PLUGIN_SCHEMA = 'https://agent-plugins.org/schemas/1.0.0/plugin.schema.json';\n\nfunction isPlainObject(value: unknown): value is Record<string, unknown> {\n return typeof value === 'object' && value !== null && !Array.isArray(value);\n}\n\nasync function stablePluginIdentity(entry: PluginEntry): Promise<string> {\n const source = entry.source;\n const identity =\n source?.type === 'git'\n ? ['git', source.url, source.path ?? '']\n : source?.type === 'npm'\n ? ['npm', source.registry ?? '', source.package]\n : ['local', await fs.promises.realpath(entry.directory)];\n return createHash('sha256').update(JSON.stringify(identity)).digest('hex');\n}\n\nasync function rootAgentPluginSchema(entry: PluginEntry): Promise<string | undefined> {\n const manifestPath = path.join(entry.directory, 'plugin.json');\n if (entry.manifest?.path === manifestPath && entry.manifest.agentPluginSchema === AGENT_PLUGIN_SCHEMA) {\n return AGENT_PLUGIN_SCHEMA;\n }\n try {\n const stat = await fs.promises.lstat(manifestPath);\n if (stat.isSymbolicLink() || !stat.isFile()) return undefined;\n const parsed = JSON.parse(await fs.promises.readFile(manifestPath, 'utf8')) as unknown;\n return isPlainObject(parsed) && parsed.$schema === AGENT_PLUGIN_SCHEMA ? AGENT_PLUGIN_SCHEMA : undefined;\n } catch {\n return undefined;\n }\n}\n\n/** One plugin's MCP config as a projection source, or nothing when it ships none. Shared by sync and settings. */\nexport async function pluginMcpSource(\n entry: PluginEntry,\n pluginDataRoot: string,\n): Promise<PoMcpProjectionSource | undefined> {\n if (entry.mcp === false) return undefined;\n const pluginRoot = await fs.promises.realpath(entry.directory);\n const agentPlugin = (await rootAgentPluginSchema(entry)) === AGENT_PLUGIN_SCHEMA;\n const configPath = path.join(pluginRoot, agentPlugin ? 'mcp.json' : '.mcp.json');\n let stat: fs.Stats;\n try {\n stat = await fs.promises.lstat(configPath);\n } catch (error) {\n if ((error as NodeJS.ErrnoException).code === 'ENOENT') return undefined;\n throw error;\n }\n if (!stat.isFile() || stat.isSymbolicLink()) return undefined;\n const content = await fs.promises.readFile(configPath);\n const contentDigest = createHash('sha256').update(content).digest('hex');\n const pluginId = await stablePluginIdentity(entry);\n const sourceId = `plugin:${pluginId}`;\n if (!agentPlugin) return { sourceId, owner: 'plugin', format: 'native', configPath, contentDigest };\n return {\n sourceId,\n owner: 'plugin',\n format: 'agent-plugin-v1',\n configPath,\n contentDigest,\n pluginId,\n pluginRoot,\n pluginDataDirectory: path.join(pluginDataRoot, pluginId),\n mcpSchemaUrl: AGENT_PLUGIN_MCP_SCHEMA_URL,\n };\n}\n","import path from 'node:path';\n\nimport type { PoMcpAgentPluginProjectionSource } from '@agimon-ai/po-core/mcpProjection';\nimport { type FileSystem, getOrThrow, nodeHost, writeFileAtomic } from '@agimon-ai/po-core/platform';\n\nimport {\n type JsonObject,\n type NormalizeAgentPluginMcpOptions,\n type NormalizedAgentPluginMcpSource,\n type NormalizedServer,\n PRIVATE_DIRECTORY_MODE,\n PRIVATE_FILE_MODE,\n assertProjectionSource,\n assertRootConfigPath,\n disabledResult,\n emptyServerDiagnostic,\n expandPluginPlaceholders,\n isInside,\n isPluginRelativeCommand,\n nonEmptyString,\n normalizeEnvironment,\n optionalStringArray,\n parseMcpDocument,\n remoteServer,\n serverDisposition,\n serverType,\n skippedServerDiagnostic,\n sourceLabel,\n stagedCacheKey,\n stagedContents,\n stagedInternalPath,\n stdioServer,\n workingDirectoryCandidate,\n} from './normalize';\n\nexport type {\n AgentPluginMcpConfigSource,\n NormalizeAgentPluginMcpOptions,\n NormalizedAgentPluginMcpSource,\n} from './normalize';\nexport { normalizeAgentPluginMcpSource, pluginMcpSource } from './sync';\n\ntype Context = Parameters<FileSystem['readTextFile']>[1];\n\nasync function realContainedPath(\n fs: FileSystem,\n root: string,\n candidate: string,\n label: string,\n context: Context,\n): Promise<string> {\n const real = await fs.canonicalPath(candidate, context);\n if (!real.ok) throw new Error(`${label} does not exist`);\n if (!isInside(root, real.value)) throw new Error(`${label} escapes its allowed plugin directory`);\n return real.value;\n}\n\nasync function normalizeCommand(\n fs: FileSystem,\n command: string,\n pluginRoot: string,\n context: Context,\n): Promise<string> {\n if (!isPluginRelativeCommand(command)) return command;\n const resolved = await realContainedPath(fs, pluginRoot, path.resolve(pluginRoot, command), 'command', context);\n if (getOrThrow(await fs.fileInfo(resolved, context)).kind !== 'file') {\n throw new Error('command must resolve to a regular file');\n }\n // Execute bits stand in for access(X_OK); the edge has no modes, so nodeHost reports none and the check is skipped.\n const mode = await nodeHost.fileMode(resolved);\n if (mode !== undefined && (mode & 0o111) === 0) throw new Error('command must resolve to an executable file');\n return resolved;\n}\n\nasync function normalizeWorkingDirectory(\n fs: FileSystem,\n declared: unknown,\n pluginRoot: string,\n pluginDataDirectory: string,\n context: Context,\n): Promise<string> {\n const declaredCwd = workingDirectoryCandidate(declared, pluginRoot, pluginDataDirectory);\n if (!declaredCwd) return pluginRoot;\n const resolved = await realContainedPath(fs, declaredCwd.base, declaredCwd.candidate, 'cwd', context);\n if (getOrThrow(await fs.fileInfo(resolved, context)).kind !== 'directory') {\n throw new Error('cwd must resolve to a directory');\n }\n return resolved;\n}\n\nasync function normalizeServer(\n fs: FileSystem,\n raw: unknown,\n pluginRoot: string,\n pluginDataDirectory: string,\n name: string,\n context: Context,\n): Promise<NormalizedServer> {\n const type = serverType(raw, name);\n const declaration = raw as JsonObject;\n if (type !== 'stdio') return remoteServer(declaration, name, type);\n const command = await normalizeCommand(fs, nonEmptyString(declaration.command, 'command'), pluginRoot, context);\n const args = optionalStringArray(declaration.args, 'args')?.map((item) =>\n expandPluginPlaceholders(item, pluginRoot, pluginDataDirectory),\n );\n const env = normalizeEnvironment(declaration.env, pluginRoot, pluginDataDirectory);\n const cwd = await normalizeWorkingDirectory(fs, declaration.cwd, pluginRoot, pluginDataDirectory, context);\n return stdioServer(name, { command, ...(args ? { args } : {}), env, cwd });\n}\n\n/** Owner-only plugin data directory; a symbolic link or non-directory rejects the source. */\nasync function preparePluginDataDirectory(fs: FileSystem, directory: string, context: Context): Promise<string> {\n const info = await fs.fileInfo(directory, context);\n if (info.ok) {\n if (info.value.kind !== 'directory') throw new Error('pluginDataDirectory must be a real directory');\n } else if (info.error.code === 'not_found') {\n getOrThrow(await fs.createDir(directory, { recursive: true }, context));\n } else {\n throw info.error;\n }\n await nodeHost.setMode(directory, PRIVATE_DIRECTORY_MODE);\n return getOrThrow(await fs.canonicalPath(directory, context));\n}\n\n/**\n * Content-addressed and owner-only. The name hashes the contents, so replacing an\n * existing staged file through a uniquely named temporary file never changes what it holds.\n */\nasync function writeStagedInternalConfig(\n fs: FileSystem,\n target: string,\n contents: string,\n stagingDirectory: string,\n context: Context,\n): Promise<void> {\n getOrThrow(await fs.createDir(stagingDirectory, { recursive: true }, context));\n await nodeHost.setMode(stagingDirectory, PRIVATE_DIRECTORY_MODE);\n await writeFileAtomic(fs, target, contents, context);\n await nodeHost.setMode(target, PRIVATE_FILE_MODE);\n}\n\n/**\n * Validates one Agent Plugins v1 `mcp.json` and stages a native mcp-proxy layer,\n * reading and writing through the injected file system.\n *\n * Server validation is isolated: one malformed server is diagnosed and skipped.\n * Document/schema, source identity, or plugin-boundary failures reject the whole\n * source. Only the two portable plugin placeholders are expanded; the staged\n * layer is tagged `internal`, so legacy `${ENV}` interpolation cannot run again.\n */\nexport async function normalizeAgentPluginMcpSourceAsync(\n fs: FileSystem,\n source: PoMcpAgentPluginProjectionSource,\n options: NormalizeAgentPluginMcpOptions,\n context: Context,\n): Promise<NormalizedAgentPluginMcpSource> {\n const label = sourceLabel(source);\n try {\n assertProjectionSource(source);\n const pluginRoot = getOrThrow(await fs.canonicalPath(source.pluginRoot, context));\n const pluginDataDirectory = await preparePluginDataDirectory(fs, source.pluginDataDirectory, context);\n const configPath = await realContainedPath(fs, pluginRoot, source.configPath, 'mcp.json', context);\n assertRootConfigPath(configPath, pluginRoot);\n\n const bytes = getOrThrow(await fs.readBinaryFile(configPath, context));\n const servers = parseMcpDocument(source, bytes, label);\n const internalServers = Object.create(null) as Record<string, JsonObject>;\n const claudeServers = Object.create(null) as Record<string, JsonObject>;\n const droppedServers: string[] = [];\n const diagnostics: string[] = [];\n\n for (const [name, rawServer] of Object.entries(servers)) {\n const disposition = serverDisposition(name, options);\n if (disposition === 'empty') {\n diagnostics.push(emptyServerDiagnostic(label));\n continue;\n }\n if (disposition === 'dropped') {\n droppedServers.push(name);\n continue;\n }\n try {\n const normalized = await normalizeServer(fs, rawServer, pluginRoot, pluginDataDirectory, name, context);\n internalServers[name] = normalized.internal;\n claudeServers[name] = normalized.claude;\n } catch (error) {\n droppedServers.push(name);\n diagnostics.push(skippedServerDiagnostic(label, name, error));\n }\n }\n\n const contents = stagedContents(internalServers);\n const target = stagedInternalPath(source, contents, options.stagingDirectory);\n await writeStagedInternalConfig(fs, target, contents, options.stagingDirectory, context);\n return {\n configSource: { path: target, format: 'internal', cacheKey: stagedCacheKey(source, configPath, contents) },\n claudeConfig: { mcpServers: claudeServers },\n serverNames: Object.keys(internalServers),\n droppedServers,\n diagnostics,\n };\n } catch (error) {\n return disabledResult(label, error);\n }\n}\n"],"mappings":";;;;;;;;;;;;AAOA,MAAM,aAAa;;AAEnB,MAAM,iCAAiC;AACvC,MAAM,aAAa;AACnB,MAAM,eAAe,IAAI,OAAO,IAAI,WAAW,QAAQ,WAAW,QAAQ,GAAG;AAE7E,SAAS,OAAO,OAAwB;CACtC,OAAO,aAAa,KAAK,KAAK;AAChC;AAIA,MAAa,4CAA4B,IAAI,IAAI,CAAC,eAAe,aAAa,CAAC;AAC/E,MAAa,uCAAuB,IAAI,IAAI,CAAC,aAAa,eAAe,CAAC;AAiC1E,SAAgB,SAAS,OAAqC;CAC5D,OAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAEA,SAAgB,SAAS,OAAmB,SAA4B,OAAqB;CAC3F,MAAM,aAAa,OAAO,KAAK,KAAK,CAAC,CAAC,MAAM,QAAQ,CAAC,QAAQ,SAAS,GAAG,CAAC;CAC1E,IAAI,YAAY,MAAM,IAAI,MAAM,GAAG,MAAM,+BAA+B,WAAW,EAAE;AACvF;AAEA,SAAgB,eAAe,OAAgB,OAAuB;CACpE,IAAI,OAAO,UAAU,YAAY,MAAM,WAAW,GAAG,MAAM,IAAI,MAAM,GAAG,MAAM,4BAA4B;CAC1G,OAAO;AACT;AAEA,SAAgB,oBAAoB,OAAgB,OAAqC;CACvF,IAAI,UAAU,KAAA,GAAW,OAAO,KAAA;CAChC,IAAI,CAAC,MAAM,QAAQ,KAAK,GAAG,MAAM,IAAI,MAAM,GAAG,MAAM,6BAA6B;CACjF,OAAO,MAAM,KAAK,MAAM,UAAU;EAChC,IAAI,OAAO,SAAS,UAAU,MAAM,IAAI,MAAM,GAAG,MAAM,GAAG,MAAM,mBAAmB;EACnF,OAAO;CACT,CAAC;AACH;AAEA,SAAS,qBAAqB,OAAgB,OAAmD;CAC/F,IAAI,UAAU,KAAA,GAAW,OAAO,KAAA;CAChC,IAAI,CAAC,SAAS,KAAK,GAAG,MAAM,IAAI,MAAM,GAAG,MAAM,oCAAoC;CACnF,OAAO,OAAO,YACZ,OAAO,QAAQ,KAAK,CAAC,CAAC,KAAK,CAAC,KAAK,UAAU;EACzC,IAAI,OAAO,SAAS,UAAU,MAAM,IAAI,MAAM,GAAG,MAAM,GAAG,IAAI,kBAAkB;EAChF,OAAO,CAAC,KAAK,IAAI;CACnB,CAAC,CACH;AACF;AAEA,SAAgB,yBAAyB,OAAe,YAAoB,qBAAqC;CAG/G,OAAO,MAAM,QAAQ,+BAA+B,gBAClD,gBAAgB,mBAAmB,aAAa,mBAClD;AACF;AAEA,SAAgB,SAAS,MAAc,WAA4B;CACjE,MAAM,WAAWA,UAAAA,QAAK,SAAS,MAAM,SAAS;CAC9C,OAAO,aAAa,MAAO,CAAC,SAAS,WAAW,KAAKA,UAAAA,QAAK,KAAK,KAAK,aAAa,QAAQ,CAACA,UAAAA,QAAK,WAAW,QAAQ;AACpH;AAEA,SAAgB,qBACd,OACA,YACA,qBACwB;CACxB,MAAM,WAAW,qBAAqB,OAAO,KAAK,KAAK,CAAC;CACxD,KAAK,MAAM,OAAO,OAAO,KAAK,QAAQ,GAAG;EACvC,MAAM,cAAc,QAAQ,aAAa,UAAU,IAAI,YAAY,IAAI;EACvE,IAAI,0BAA0B,IAAI,WAAW,GAC3C,MAAM,IAAI,MAAM,YAAY,IAAI,+BAA+B;CAEnE;CACA,OAAO;EACL,GAAG,OAAO,YACR,OAAO,QAAQ,QAAQ,CAAC,CAAC,KAAK,CAAC,KAAK,UAAU,CAC5C,KACA,yBAAyB,MAAM,YAAY,mBAAmB,CAChE,CAAC,CACH;EACA,aAAa;EACb,aAAa;CACf;AACF;AAEA,SAAS,eAAe,UAA2B;CACjD,MAAM,eAAe,SAAS,WAAW,GAAG,KAAK,SAAS,SAAS,GAAG,IAAI,SAAS,MAAM,GAAG,EAAE,IAAI;CAClG,IAAI,aAAa,YAAY,MAAM,aAAa,OAAO;CACvD,IAAI,OAAO,YAAY,GAAG,OAAO,aAAa,MAAM,GAAG,CAAC,CAAC,OAAO;CAChE,OAAO,iBAAiB;AAC1B;AAEA,SAAgB,aAAa,OAAwB;CACnD,MAAM,MAAM,eAAe,OAAO,KAAK;CACvC,IAAI;CACJ,IAAI;EACF,SAAS,IAAI,IAAI,GAAG;CACtB,QAAQ;EACN,MAAM,IAAI,MAAM,qCAAqC;CACvD;CACA,IAAI,OAAO,aAAa,WAAW,OAAO,aAAa,UACrD,MAAM,IAAI,MAAM,4BAA4B;CAE9C,IAAI,OAAO,YAAY,OAAO,UAAU,MAAM,IAAI,MAAM,uCAAuC;CAC/F,IAAI,OAAO,MAAM,MAAM,IAAI,MAAM,iCAAiC;CAClE,IAAI,OAAO,aAAa,WAAW,CAAC,eAAe,OAAO,QAAQ,GAChE,MAAM,IAAI,MAAM,sCAAsC;CAExD,OAAO;AACT;AAEA,SAAgB,iBAAiB,OAAoD;CACnF,MAAM,UAAU,qBAAqB,OAAO,SAAS;CACrD,IAAI,CAAC,SAAS,OAAO,KAAA;CACrB,MAAM,uBAAO,IAAI,IAAY;CAC7B,KAAK,MAAM,CAAC,MAAM,SAAS,OAAO,QAAQ,OAAO,GAAG;EAClD,MAAM,YAAY,KAAK,YAAY;EACnC,IAAI,KAAK,IAAI,SAAS,GAAG,MAAM,IAAI,MAAM,mCAAmC,KAAK,EAAE;EACnF,KAAK,IAAI,SAAS;EAClB,IAAI,CAAC,WAAW,KAAK,IAAI,KAAK,+BAA+B,KAAK,IAAI,GACpE,MAAM,IAAI,MAAM,WAAW,KAAK,aAAa;CAEjD;CACA,OAAO;AACT;AAEA,SAAgB,mBACd,QACA,UACA,kBACQ;CACR,MAAM,UAAA,GAASC,YAAAA,WAAAA,CAAW,QAAQ,CAAC,CAChC,OAAO,OAAO,QAAQ,CAAC,CACvB,OAAO,IAAI,CAAC,CACZ,OAAO,OAAO,aAAa,CAAC,CAC5B,OAAO,IAAI,CAAC,CACZ,OAAO,QAAQ,CAAC,CAChB,OAAO,KAAK,CAAC,CACb,MAAM,GAAG,EAAE;CACd,OAAOD,UAAAA,QAAK,KAAK,kBAAkB,oBAAoB,OAAO,eAAe;AAC/E;AAEA,SAAgB,YAAY,YAAoD;CAC9E,OAAO;EACL,cAAc,EAAE,YAAY,CAAC,EAAE;EAC/B,aAAa,CAAC;EACd,gBAAgB,CAAC;EACjB,aAAa,CAAC,UAAU;CAC1B;AACF;AAEA,SAAgB,YAAY,QAAkD;CAC5E,OAAO,4BAA4B,OAAO,SAAS;AACrD;;AAGA,SAAgB,uBAAuB,QAAgD;CACrF,IAAI,OAAO,iBAAiBE,iCAAAA,6BAC1B,MAAM,IAAI,MAAM,uBAAuB,OAAO,OAAO,YAAY,EAAE,EAAE;CAEvE,IAAI,CAACF,UAAAA,QAAK,WAAW,OAAO,UAAU,KAAK,CAACA,UAAAA,QAAK,WAAW,OAAO,mBAAmB,GACpF,MAAM,IAAI,MAAM,qDAAqD;AAEzE;AAEA,SAAgB,qBAAqB,YAAoB,YAA0B;CACjF,IAAIA,UAAAA,QAAK,QAAQ,UAAU,MAAM,cAAcA,UAAAA,QAAK,SAAS,UAAU,MAAM,YAC3E,MAAM,IAAI,MAAM,8CAA8C;AAElE;;AAGA,SAAgB,iBACd,QACA,OACA,OACyB;CAEzB,KAAA,GADeC,YAAAA,WAAAA,CAAW,QAAQ,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO,KAChD,MAAM,OAAO,eAAe,MAAM,IAAI,MAAM,8CAA8C;CACnG,MAAM,SAAkB,KAAK,MAAM,IAAI,YAAY,SAAS,EAAE,WAAW,KAAK,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC;CAC9F,IAAI,CAAC,SAAS,MAAM,GAAG,MAAM,IAAI,MAAM,4BAA4B;CACnE,SAAS,QAAQ,CAAC,WAAW,YAAY,GAAG,KAAK;CACjD,IAAI,OAAO,YAAY,OAAO,cAAc,MAAM,IAAI,MAAM,6CAA6C;CACzG,IAAI,CAAC,SAAS,OAAO,UAAU,GAAG,MAAM,IAAI,MAAM,8BAA8B;CAChF,OAAO,OAAO;AAChB;;AAGA,SAAgB,kBAAkB,MAAc,SAAuE;CACrH,IAAI,CAAC,MAAM,OAAO;CAClB,MAAM,UAAU,QAAQ;CACxB,MAAM,UAAU,CAAC,WAAW,QAAQ,WAAW;CAC/C,MAAM,qBAAqB,QAAQ,sBAAsB;CACzD,IAAK,CAAC,WAAW,CAAC,QAAQ,SAAS,IAAI,KAAO,sBAAsB,qBAAqB,IAAI,IAAI,GAAI,OAAO;CAC5G,OAAO;AACT;AAEA,SAAgB,sBAAsB,OAAuB;CAC3D,OAAO,GAAG,MAAM;AAClB;AAEA,SAAgB,wBAAwB,OAAe,MAAc,OAAwB;CAC3F,OAAO,GAAG,MAAM,mBAAmB,KAAK,KAAK,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AACpG;AAEA,SAAgB,eAAe,OAAe,OAAgD;CAC5F,OAAO,YAAY,GAAG,MAAM,iBAAiB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,GAAG;AACvG;;AAGA,SAAgB,WAAW,KAAc,MAAsB;CAC7D,IAAI,CAAC,SAAS,GAAG,GAAG,MAAM,IAAI,MAAM,8BAA8B;CAClE,MAAM,OAAO,eAAe,IAAI,MAAM,MAAM;CAC5C,IAAI,SAAS,SAAS,SAAS,KAAK;EAAC;EAAQ;EAAW;EAAQ;EAAO;CAAK,GAAG,WAAW,KAAK,EAAE;CACjG,OAAO;AACT;AAEA,SAAgB,YACd,MACA,QACkB;CAClB,OAAO;EACL,UAAU;GAAE;GAAM,WAAW;GAAS;EAAO;EAC7C,QAAQ;GAAE,MAAM;GAAS,GAAG;EAAO;CACrC;AACF;;AAGA,SAAgB,aAAa,KAAiB,MAAc,MAAgC;CAC1F,IAAI,SAAS,qBAAqB,SAAS,OAAO;EAChD,SAAS,KAAK;GAAC;GAAQ;GAAO;EAAS,GAAG,WAAW,KAAK,EAAE;EAC5D,MAAM,MAAM,aAAa,IAAI,GAAG;EAChC,MAAM,UAAU,iBAAiB,IAAI,OAAO;EAC5C,MAAM,YAAY,SAAS,oBAAoB,SAAS;EACxD,MAAM,SAAS;GAAE;GAAK,GAAI,UAAU,EAAE,QAAQ,IAAI,CAAC;EAAG;EACtD,OAAO;GACL,UAAU;IAAE;IAAM;IAAW;GAAO;GACpC,QAAQ;IAAE,MAAM;IAAW,GAAG;GAAO;EACvC;CACF;CACA,MAAM,IAAI,MAAM,+BAA+B,KAAK,EAAE;AACxD;AAEA,SAAgB,eAAe,iBAAqD;CAClF,OAAO,GAAG,KAAK,UAAU,EAAE,YAAY,gBAAgB,GAAG,MAAM,CAAC,EAAE;AACrE;AAEA,SAAgB,eAAe,QAA0C,YAAoB,UAA0B;CACrH,QAAA,GAAOA,YAAAA,WAAAA,CAAW,QAAQ,CAAC,CACxB,OAAO,mBAAmB,CAAC,CAC3B,OAAO,OAAO,QAAQ,CAAC,CACvB,OAAO,IAAI,CAAC,CACZ,OAAO,OAAO,aAAa,CAAC,CAC5B,OAAO,IAAI,CAAC,CACZ,OAAO,UAAU,CAAC,CAClB,OAAO,IAAI,CAAC,CACZ,OAAO,QAAQ,CAAC,CAChB,OAAO,KAAK;AACjB;;AAGA,SAAgB,0BACd,UACA,YACA,qBACiD;CACjD,IAAI,aAAa,KAAA,GAAW,OAAO,KAAA;CACnC,MAAM,MAAM,eAAe,UAAU,KAAK;CAC1C,IAAI,IAAI,WAAW,IAAI,GAAG,OAAO;EAAE,MAAM;EAAY,WAAWD,UAAAA,QAAK,QAAQ,YAAY,GAAG;CAAE;CAC9F,MAAM,WAAW,yBAAyB,KAAK,YAAY,mBAAmB;CAC9E,IAAI,QAAQ,oBAAoB,IAAI,WAAW,iBAAiB,GAC9D,OAAO;EAAE,MAAM;EAAY,WAAWA,UAAAA,QAAK,QAAQ,QAAQ;CAAE;CAE/D,IAAI,QAAQ,oBAAoB,IAAI,WAAW,iBAAiB,GAC9D,OAAO;EAAE,MAAM;EAAqB,WAAWA,UAAAA,QAAK,QAAQ,QAAQ;CAAE;CAExE,MAAM,IAAI,MAAM,2DAA2D;AAC7E;;AAGA,SAAgB,wBAAwB,SAA0B;CAChE,IAAI,QAAQ,WAAW,IAAI,GAAG,OAAO;CACrC,IAAI,YAAY,OAAO,YAAY,QAAQ,WAAW,KAAK,OAAO,GAChE,MAAM,IAAI,MAAM,uEAAuE;CAEzF,OAAO;AACT;;;AC3RA,SAASG,oBAAkB,MAAc,WAAmB,OAAuB;CACjF,IAAI;CACJ,IAAI;EACF,gBAAgBC,QAAAA,QAAG,aAAa,SAAS;CAC3C,QAAQ;EACN,MAAM,IAAI,MAAM,GAAG,MAAM,gBAAgB;CAC3C;CACA,IAAI,CAAC,SAAS,MAAM,aAAa,GAAG,MAAM,IAAI,MAAM,GAAG,MAAM,sCAAsC;CACnG,OAAO;AACT;AAEA,SAASC,mBAAiB,SAAiB,YAA4B;CACrE,IAAI,CAAC,wBAAwB,OAAO,GAAG,OAAO;CAC9C,MAAM,WAAWF,oBAAkB,YAAYG,UAAAA,QAAK,QAAQ,YAAY,OAAO,GAAG,SAAS;CAC3F,IAAI,CAACF,QAAAA,QAAG,SAAS,QAAQ,CAAC,CAAC,OAAO,GAAG,MAAM,IAAI,MAAM,wCAAwC;CAC7F,IAAI;EACF,QAAA,QAAG,WAAW,UAAUA,QAAAA,QAAG,UAAU,IAAI;CAC3C,QAAQ;EACN,MAAM,IAAI,MAAM,4CAA4C;CAC9D;CACA,OAAO;AACT;AAEA,SAASG,4BAA0B,UAAmB,YAAoB,qBAAqC;CAC7G,MAAM,cAAc,0BAA0B,UAAU,YAAY,mBAAmB;CACvF,IAAI,CAAC,aAAa,OAAO;CACzB,MAAM,WAAWJ,oBAAkB,YAAY,MAAM,YAAY,WAAW,KAAK;CACjF,IAAI,CAACC,QAAAA,QAAG,SAAS,QAAQ,CAAC,CAAC,YAAY,GAAG,MAAM,IAAI,MAAM,iCAAiC;CAC3F,OAAO;AACT;AAEA,SAASI,kBACP,KACA,YACA,qBACA,MACkB;CAClB,MAAM,OAAO,WAAW,KAAK,IAAI;CACjC,MAAM,cAAc;CACpB,IAAI,SAAS,SAAS,OAAO,aAAa,aAAa,MAAM,IAAI;CACjE,MAAM,UAAUH,mBAAiB,eAAe,YAAY,SAAS,SAAS,GAAG,UAAU;CAC3F,MAAM,OAAO,oBAAoB,YAAY,MAAM,MAAM,CAAC,EAAE,KAAK,SAC/D,yBAAyB,MAAM,YAAY,mBAAmB,CAChE;CACA,MAAM,MAAM,qBAAqB,YAAY,KAAK,YAAY,mBAAmB;CACjF,MAAM,MAAME,4BAA0B,YAAY,KAAK,YAAY,mBAAmB;CACtF,OAAO,YAAY,MAAM;EAAE;EAAS,GAAI,OAAO,EAAE,KAAK,IAAI,CAAC;EAAI;EAAK;CAAI,CAAC;AAC3E;AAEA,SAASE,4BAA0B,QAAgB,UAAkB,kBAAgC;CACnG,QAAA,QAAG,UAAU,kBAAkB;EAAE,MAAA;EAA8B,WAAW;CAAK,CAAC;CAChF,QAAA,QAAG,UAAU,kBAAA,GAAwC;CACrD,MAAM,gBAAgB,GAAG,OAAO,GAAG,QAAQ,IAAI,IAAA,GAAGC,YAAAA,WAAAA,CAAW,EAAE;CAC/D,IAAI;EACF,QAAA,QAAG,cAAc,eAAe,UAAU;GAAE,MAAM;GAAM,MAAA;EAAwB,CAAC;EACjF,IAAI;GACF,QAAA,QAAG,WAAW,eAAe,MAAM;EACrC,SAAS,OAAO;GACd,MAAM,OAAQ,MAAgC;GAC9C,IAAI,SAAS,YAAY,SAAS,SAAS,MAAM;GACjD,MAAM,OAAON,QAAAA,QAAG,UAAU,MAAM;GAChC,IAAI,KAAK,eAAe,KAAK,CAAC,KAAK,OAAO,KAAKA,QAAAA,QAAG,aAAa,QAAQ,MAAM,MAAM,UACjF,MAAM,IAAI,MAAM,iEAAiE;EAErF;EACA,QAAA,QAAG,UAAU,QAAA,GAAyB;CACxC,UAAU;EACR,QAAA,QAAG,OAAO,eAAe,EAAE,OAAO,KAAK,CAAC;CAC1C;AACF;;;;;;;;;;;AAYA,SAAgB,8BACd,QACA,SACgC;CAChC,MAAM,QAAQ,YAAY,MAAM;CAChC,IAAI;EACF,uBAAuB,MAAM;EAC7B,MAAM,aAAaA,QAAAA,QAAG,aAAa,OAAO,UAAU;EACpD,IAAI;GACF,MAAM,WAAWA,QAAAA,QAAG,UAAU,OAAO,mBAAmB;GACxD,IAAI,SAAS,eAAe,KAAK,CAAC,SAAS,YAAY,GACrD,MAAM,IAAI,MAAM,8CAA8C;EAElE,SAAS,OAAO;GACd,IAAK,MAAgC,SAAS,UAAU,MAAM;GAC9D,QAAA,QAAG,UAAU,OAAO,qBAAqB;IAAE,MAAA;IAA8B,WAAW;GAAK,CAAC;EAC5F;EACA,QAAA,QAAG,UAAU,OAAO,qBAAA,GAA2C;EAC/D,QAAA,QAAG,WAAW,OAAO,qBAAqBA,QAAAA,QAAG,UAAU,IAAI;EAC3D,MAAM,sBAAsBA,QAAAA,QAAG,aAAa,OAAO,mBAAmB;EACtE,MAAM,aAAaD,oBAAkB,YAAY,OAAO,YAAY,UAAU;EAC9E,qBAAqB,YAAY,UAAU;EAE3C,MAAM,UAAU,iBAAiB,QAAQC,QAAAA,QAAG,aAAa,UAAU,GAAG,KAAK;EAC3E,MAAM,kBAAkB,OAAO,OAAO,IAAI;EAC1C,MAAM,gBAAgB,OAAO,OAAO,IAAI;EACxC,MAAM,iBAA2B,CAAC;EAClC,MAAM,cAAwB,CAAC;EAE/B,KAAK,MAAM,CAAC,MAAM,cAAc,OAAO,QAAQ,OAAO,GAAG;GACvD,MAAM,cAAc,kBAAkB,MAAM,OAAO;GACnD,IAAI,gBAAgB,SAAS;IAC3B,YAAY,KAAK,sBAAsB,KAAK,CAAC;IAC7C;GACF;GACA,IAAI,gBAAgB,WAAW;IAC7B,eAAe,KAAK,IAAI;IACxB;GACF;GACA,IAAI;IACF,MAAM,aAAaI,kBAAgB,WAAW,YAAY,qBAAqB,IAAI;IACnF,gBAAgB,QAAQ,WAAW;IACnC,cAAc,QAAQ,WAAW;GACnC,SAAS,OAAO;IACd,eAAe,KAAK,IAAI;IACxB,YAAY,KAAK,wBAAwB,OAAO,MAAM,KAAK,CAAC;GAC9D;EACF;EAEA,MAAM,WAAW,eAAe,eAAe;EAC/C,MAAM,SAAS,mBAAmB,QAAQ,UAAU,QAAQ,gBAAgB;EAC5E,4BAA0B,QAAQ,UAAU,QAAQ,gBAAgB;EACpE,OAAO;GACL,cAAc;IAAE,MAAM;IAAQ,QAAQ;IAAY,UAAU,eAAe,QAAQ,YAAY,QAAQ;GAAE;GACzG,cAAc,EAAE,YAAY,cAAc;GAC1C,aAAa,OAAO,KAAK,eAAe;GACxC;GACA;EACF;CACF,SAAS,OAAO;EACd,OAAO,eAAe,OAAO,KAAK;CACpC;AACF;AAEA,MAAM,sBAAsB;AAE5B,SAAS,cAAc,OAAkD;CACvE,OAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAEA,eAAe,qBAAqB,OAAqC;CACvE,MAAM,SAAS,MAAM;CACrB,MAAM,WACJ,QAAQ,SAAS,QACb;EAAC;EAAO,OAAO;EAAK,OAAO,QAAQ;CAAE,IACrC,QAAQ,SAAS,QACf;EAAC;EAAO,OAAO,YAAY;EAAI,OAAO;CAAO,IAC7C,CAAC,SAAS,MAAMJ,QAAAA,QAAG,SAAS,SAAS,MAAM,SAAS,CAAC;CAC7D,QAAA,GAAOO,YAAAA,WAAAA,CAAW,QAAQ,CAAC,CAAC,OAAO,KAAK,UAAU,QAAQ,CAAC,CAAC,CAAC,OAAO,KAAK;AAC3E;AAEA,eAAe,sBAAsB,OAAiD;CACpF,MAAM,eAAeL,UAAAA,QAAK,KAAK,MAAM,WAAW,aAAa;CAC7D,IAAI,MAAM,UAAU,SAAS,gBAAgB,MAAM,SAAS,sBAAsB,qBAChF,OAAO;CAET,IAAI;EACF,MAAM,OAAO,MAAMF,QAAAA,QAAG,SAAS,MAAM,YAAY;EACjD,IAAI,KAAK,eAAe,KAAK,CAAC,KAAK,OAAO,GAAG,OAAO,KAAA;EACpD,MAAM,SAAS,KAAK,MAAM,MAAMA,QAAAA,QAAG,SAAS,SAAS,cAAc,MAAM,CAAC;EAC1E,OAAO,cAAc,MAAM,KAAK,OAAO,YAAY,sBAAsB,sBAAsB,KAAA;CACjG,QAAQ;EACN;CACF;AACF;;AAGA,eAAsB,gBACpB,OACA,gBAC4C;CAC5C,IAAI,MAAM,QAAQ,OAAO,OAAO,KAAA;CAChC,MAAM,aAAa,MAAMA,QAAAA,QAAG,SAAS,SAAS,MAAM,SAAS;CAC7D,MAAM,cAAe,MAAM,sBAAsB,KAAK,MAAO;CAC7D,MAAM,aAAaE,UAAAA,QAAK,KAAK,YAAY,cAAc,aAAa,WAAW;CAC/E,IAAI;CACJ,IAAI;EACF,OAAO,MAAMF,QAAAA,QAAG,SAAS,MAAM,UAAU;CAC3C,SAAS,OAAO;EACd,IAAK,MAAgC,SAAS,UAAU,OAAO,KAAA;EAC/D,MAAM;CACR;CACA,IAAI,CAAC,KAAK,OAAO,KAAK,KAAK,eAAe,GAAG,OAAO,KAAA;CACpD,MAAM,UAAU,MAAMA,QAAAA,QAAG,SAAS,SAAS,UAAU;CACrD,MAAM,iBAAA,GAAgBO,YAAAA,WAAAA,CAAW,QAAQ,CAAC,CAAC,OAAO,OAAO,CAAC,CAAC,OAAO,KAAK;CACvE,MAAM,WAAW,MAAM,qBAAqB,KAAK;CACjD,MAAM,WAAW,UAAU;CAC3B,IAAI,CAAC,aAAa,OAAO;EAAE;EAAU,OAAO;EAAU,QAAQ;EAAU;EAAY;CAAc;CAClG,OAAO;EACL;EACA,OAAO;EACP,QAAQ;EACR;EACA;EACA;EACA;EACA,qBAAqBL,UAAAA,QAAK,KAAK,gBAAgB,QAAQ;EACvD,cAAcM,iCAAAA;CAChB;AACF;;;AChNA,eAAe,kBACb,IACA,MACA,WACA,OACA,SACiB;CACjB,MAAM,OAAO,MAAM,GAAG,cAAc,WAAW,OAAO;CACtD,IAAI,CAAC,KAAK,IAAI,MAAM,IAAI,MAAM,GAAG,MAAM,gBAAgB;CACvD,IAAI,CAAC,SAAS,MAAM,KAAK,KAAK,GAAG,MAAM,IAAI,MAAM,GAAG,MAAM,sCAAsC;CAChG,OAAO,KAAK;AACd;AAEA,eAAe,iBACb,IACA,SACA,YACA,SACiB;CACjB,IAAI,CAAC,wBAAwB,OAAO,GAAG,OAAO;CAC9C,MAAM,WAAW,MAAM,kBAAkB,IAAI,YAAYC,UAAAA,QAAK,QAAQ,YAAY,OAAO,GAAG,WAAW,OAAO;CAC9G,KAAA,GAAIC,4BAAAA,WAAAA,CAAW,MAAM,GAAG,SAAS,UAAU,OAAO,CAAC,CAAC,CAAC,SAAS,QAC5D,MAAM,IAAI,MAAM,wCAAwC;CAG1D,MAAM,OAAO,MAAMC,4BAAAA,SAAS,SAAS,QAAQ;CAC7C,IAAI,SAAS,KAAA,MAAc,OAAO,QAAW,GAAG,MAAM,IAAI,MAAM,4CAA4C;CAC5G,OAAO;AACT;AAEA,eAAe,0BACb,IACA,UACA,YACA,qBACA,SACiB;CACjB,MAAM,cAAc,0BAA0B,UAAU,YAAY,mBAAmB;CACvF,IAAI,CAAC,aAAa,OAAO;CACzB,MAAM,WAAW,MAAM,kBAAkB,IAAI,YAAY,MAAM,YAAY,WAAW,OAAO,OAAO;CACpG,KAAA,GAAID,4BAAAA,WAAAA,CAAW,MAAM,GAAG,SAAS,UAAU,OAAO,CAAC,CAAC,CAAC,SAAS,aAC5D,MAAM,IAAI,MAAM,iCAAiC;CAEnD,OAAO;AACT;AAEA,eAAe,gBACb,IACA,KACA,YACA,qBACA,MACA,SAC2B;CAC3B,MAAM,OAAO,WAAW,KAAK,IAAI;CACjC,MAAM,cAAc;CACpB,IAAI,SAAS,SAAS,OAAO,aAAa,aAAa,MAAM,IAAI;CACjE,MAAM,UAAU,MAAM,iBAAiB,IAAI,eAAe,YAAY,SAAS,SAAS,GAAG,YAAY,OAAO;CAC9G,MAAM,OAAO,oBAAoB,YAAY,MAAM,MAAM,CAAC,EAAE,KAAK,SAC/D,yBAAyB,MAAM,YAAY,mBAAmB,CAChE;CACA,MAAM,MAAM,qBAAqB,YAAY,KAAK,YAAY,mBAAmB;CACjF,MAAM,MAAM,MAAM,0BAA0B,IAAI,YAAY,KAAK,YAAY,qBAAqB,OAAO;CACzG,OAAO,YAAY,MAAM;EAAE;EAAS,GAAI,OAAO,EAAE,KAAK,IAAI,CAAC;EAAI;EAAK;CAAI,CAAC;AAC3E;;AAGA,eAAe,2BAA2B,IAAgB,WAAmB,SAAmC;CAC9G,MAAM,OAAO,MAAM,GAAG,SAAS,WAAW,OAAO;CACjD,IAAI,KAAK,IACH;MAAA,KAAK,MAAM,SAAS,aAAa,MAAM,IAAI,MAAM,8CAA8C;CAAA,OAC9F,IAAI,KAAK,MAAM,SAAS,aAC7B,CAAA,GAAA,4BAAA,WAAA,CAAW,MAAM,GAAG,UAAU,WAAW,EAAE,WAAW,KAAK,GAAG,OAAO,CAAC;MAEtE,MAAM,KAAK;CAEb,MAAMC,4BAAAA,SAAS,QAAQ,WAAA,GAAiC;CACxD,QAAA,GAAOD,4BAAAA,WAAAA,CAAW,MAAM,GAAG,cAAc,WAAW,OAAO,CAAC;AAC9D;;;;;AAMA,eAAe,0BACb,IACA,QACA,UACA,kBACA,SACe;CACf,CAAA,GAAA,4BAAA,WAAA,CAAW,MAAM,GAAG,UAAU,kBAAkB,EAAE,WAAW,KAAK,GAAG,OAAO,CAAC;CAC7E,MAAMC,4BAAAA,SAAS,QAAQ,kBAAA,GAAwC;CAC/D,OAAA,GAAMC,4BAAAA,gBAAAA,CAAgB,IAAI,QAAQ,UAAU,OAAO;CACnD,MAAMD,4BAAAA,SAAS,QAAQ,QAAA,GAAyB;AAClD;;;;;;;;;;AAWA,eAAsB,mCACpB,IACA,QACA,SACA,SACyC;CACzC,MAAM,QAAQ,YAAY,MAAM;CAChC,IAAI;EACF,uBAAuB,MAAM;EAC7B,MAAM,cAAA,GAAaD,4BAAAA,WAAAA,CAAW,MAAM,GAAG,cAAc,OAAO,YAAY,OAAO,CAAC;EAChF,MAAM,sBAAsB,MAAM,2BAA2B,IAAI,OAAO,qBAAqB,OAAO;EACpG,MAAM,aAAa,MAAM,kBAAkB,IAAI,YAAY,OAAO,YAAY,YAAY,OAAO;EACjG,qBAAqB,YAAY,UAAU;EAG3C,MAAM,UAAU,iBAAiB,SAD3B,GAAQA,4BAAAA,WAAAA,CAAW,MAAM,GAAG,eAAe,YAAY,OAAO,CAC3B,GAAO,KAAK;EACrD,MAAM,kBAAkB,OAAO,OAAO,IAAI;EAC1C,MAAM,gBAAgB,OAAO,OAAO,IAAI;EACxC,MAAM,iBAA2B,CAAC;EAClC,MAAM,cAAwB,CAAC;EAE/B,KAAK,MAAM,CAAC,MAAM,cAAc,OAAO,QAAQ,OAAO,GAAG;GACvD,MAAM,cAAc,kBAAkB,MAAM,OAAO;GACnD,IAAI,gBAAgB,SAAS;IAC3B,YAAY,KAAK,sBAAsB,KAAK,CAAC;IAC7C;GACF;GACA,IAAI,gBAAgB,WAAW;IAC7B,eAAe,KAAK,IAAI;IACxB;GACF;GACA,IAAI;IACF,MAAM,aAAa,MAAM,gBAAgB,IAAI,WAAW,YAAY,qBAAqB,MAAM,OAAO;IACtG,gBAAgB,QAAQ,WAAW;IACnC,cAAc,QAAQ,WAAW;GACnC,SAAS,OAAO;IACd,eAAe,KAAK,IAAI;IACxB,YAAY,KAAK,wBAAwB,OAAO,MAAM,KAAK,CAAC;GAC9D;EACF;EAEA,MAAM,WAAW,eAAe,eAAe;EAC/C,MAAM,SAAS,mBAAmB,QAAQ,UAAU,QAAQ,gBAAgB;EAC5E,MAAM,0BAA0B,IAAI,QAAQ,UAAU,QAAQ,kBAAkB,OAAO;EACvF,OAAO;GACL,cAAc;IAAE,MAAM;IAAQ,QAAQ;IAAY,UAAU,eAAe,QAAQ,YAAY,QAAQ;GAAE;GACzG,cAAc,EAAE,YAAY,cAAc;GAC1C,aAAa,OAAO,KAAK,eAAe;GACxC;GACA;EACF;CACF,SAAS,OAAO;EACd,OAAO,eAAe,OAAO,KAAK;CACpC;AACF"}
|
|
@@ -1,5 +1,6 @@
|
|
|
1
|
+
import { u as PluginEntry } from "./domains-Bo9krPQ5.mjs";
|
|
1
2
|
import { FileSystem } from "@agimon-ai/po-core/platform";
|
|
2
|
-
import { PoMcpAgentPluginProjectionSource } from "@agimon-ai/po-core/mcpProjection";
|
|
3
|
+
import { PoMcpAgentPluginProjectionSource, PoMcpProjectionSource } from "@agimon-ai/po-core/mcpProjection";
|
|
3
4
|
//#region src/services/agentPluginMcp/normalize.d.ts
|
|
4
5
|
type JsonObject = Record<string, unknown>;
|
|
5
6
|
interface AgentPluginMcpConfigSource {
|
|
@@ -38,6 +39,8 @@ interface NormalizeAgentPluginMcpOptions {
|
|
|
38
39
|
* @deprecated Node-only sync shim; use normalizeAgentPluginMcpSourceAsync. Removed in M2.
|
|
39
40
|
*/
|
|
40
41
|
export declare function normalizeAgentPluginMcpSource(source: PoMcpAgentPluginProjectionSource, options: NormalizeAgentPluginMcpOptions): NormalizedAgentPluginMcpSource;
|
|
42
|
+
/** One plugin's MCP config as a projection source, or nothing when it ships none. Shared by sync and settings. */
|
|
43
|
+
export declare function pluginMcpSource(entry: PluginEntry, pluginDataRoot: string): Promise<PoMcpProjectionSource | undefined>;
|
|
41
44
|
//#endregion
|
|
42
45
|
//#region src/services/agentPluginMcp/index.d.ts
|
|
43
46
|
type Context = Parameters<FileSystem['readTextFile']>[1];
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"agentPluginMcp.d.mts","names":[],"sources":["../src/services/agentPluginMcp/normalize.ts","../src/services/agentPluginMcp/sync.ts","../src/services/agentPluginMcp/index.ts"],"mappings":"
|
|
1
|
+
{"version":3,"file":"agentPluginMcp.d.mts","names":[],"sources":["../src/services/agentPluginMcp/normalize.ts","../src/services/agentPluginMcp/sync.ts","../src/services/agentPluginMcp/index.ts"],"mappings":";;;;KAsBY,aAAa;UAER;EACf;EACA;EACA;;UAGe;;EAEf,eAAe;;EAEf;IAAgB,YAAY,eAAe;;EAC3C;EACA;EACA;;UAGe;EACf;;EAEA;;EAEA;;;;;;;;;;;;;;wBC8Ec,8BACd,QAAQ,kCACR,SAAS,iCACR;;wBA8FmB,gBACpB,OAAO,aACP,yBACC,QAAQ;;;KCrLN,UAAU,WAAW;;;;;;;;;;wBA4GJ,mCACpB,IAAI,YACJ,QAAQ,kCACR,SAAS,gCACT,SAAS,UACR,QAAQ"}
|