@agimon-ai/po-domain 0.0.0-alpha.0

package/dist/mcpFilter-CZNmU_VF.cjs

@@ -0,0 +1,189 @@
+const require_rolldown_runtime = require("./rolldown-runtime-VH7oDXx4.cjs");
+let node_fs = require("node:fs");
+node_fs = require_rolldown_runtime.__toESM(node_fs, 1);
+let node_path = require("node:path");
+node_path = require_rolldown_runtime.__toESM(node_path, 1);
+let _agimon_ai_po_config_domains = require("@agimon-ai/po-config/domains");
+let yaml = require("yaml");
+//#region src/services/mcpFilter/index.ts
+/** Server name in .mcp.json whose upstreams are declared in mcp-config.yaml. */
+const PROXY_SERVER_NAME = "agiflow-proxy";
+const PROXY_CONFIG_FILE = "mcp-config.yaml";
+const CONFIG_ARGUMENT = "--config";
+/**
+* Unions the mcp allowlists of the selected domains.
+*
+* Returns undefined when any selected domain omits `mcp`, which means "give me
+* everything". Filtering only kicks in once every selected domain has opted in,
+* so a domain that has not been migrated yet cannot silently lose its tools.
+*/
+function resolveMcpAllowlist(repoRoot, domainNames) {
+	const manifest = (0, _agimon_ai_po_config_domains.loadDomains)(repoRoot);
+	const expanded = (0, _agimon_ai_po_config_domains.expandDomainNames)(manifest, domainNames);
+	if (expanded.length === 0) return void 0;
+	const servers = /* @__PURE__ */ new Set();
+	const proxy = /* @__PURE__ */ new Set();
+	for (const name of expanded) {
+		const allowlist = manifest.domains[name]?.mcp;
+		if (!allowlist) return void 0;
+		for (const server of allowlist.servers ?? []) servers.add(server);
+		for (const upstream of allowlist.proxy ?? []) proxy.add(upstream);
+	}
+	return {
+		servers: [...servers],
+		proxy: [...proxy]
+	};
+}
+/** Drops servers that are not on the allowlist. An empty list means keep all. */
+function filterMcpServers(config, allowed) {
+	if (!allowed || allowed.length === 0) return config;
+	const servers = config.mcpServers ?? {};
+	const kept = {};
+	for (const [name, definition] of Object.entries(servers)) if (allowed.includes(name)) kept[name] = definition;
+	return {
+		...config,
+		mcpServers: kept
+	};
+}
+/**
+* Rewrites the proxy's upstream list, keeping only allowed servers.
+*
+* Entries are removed rather than marked disabled so a filtered upstream cannot
+* be reached even if the proxy ignores the disabled flag. Comments in the
+* source file are not preserved; the result is a per-run temporary file.
+*/
+function filterProxyConfig(yamlText, allowed) {
+	if (!allowed || allowed.length === 0) return yamlText;
+	const config = (0, yaml.parse)(yamlText) ?? {};
+	const servers = config.mcpServers ?? {};
+	const kept = {};
+	const dropped = [];
+	for (const [name, definition] of Object.entries(servers)) if (allowed.includes(name)) kept[name] = definition;
+	else dropped.push(name);
+	return `${[
+		"# Generated by po for this run. Do not edit.",
+		`# Upstreams kept: ${Object.keys(kept).join(", ") || "(none)"}`,
+		`# Upstreams removed by the domain allowlist: ${dropped.join(", ") || "(none)"}`,
+		""
+	].join("\n")}${(0, yaml.stringify)({
+		...config,
+		mcpServers: kept
+	})}`;
+}
+async function copyFileIfPresent(source, target) {
+	try {
+		await node_fs.default.promises.copyFile(source, target);
+		return true;
+	} catch (error) {
+		if (error.code === "ENOENT") return false;
+		throw error;
+	}
+}
+/**
+* Copies a generated MCP config out of the run directory so another frontend
+* can use it, keeping the proxy's --config pointing at the copy.
+*
+* The run directory is deleted when the harness exits, so emitting for
+* claude.sh or codex.sh has to relocate both files together.
+*/
+async function persistMcpConfig(sourceConfigPath, temporaryDirectory, targetDirectory) {
+	await node_fs.default.promises.mkdir(targetDirectory, { recursive: true });
+	const config = JSON.parse(await node_fs.default.promises.readFile(sourceConfigPath, "utf8"));
+	const servers = config.mcpServers ?? {};
+	const proxy = servers[PROXY_SERVER_NAME];
+	const generatedProxyConfig = node_path.default.join(temporaryDirectory, PROXY_CONFIG_FILE);
+	if (proxy) {
+		const args = [...proxy.args ?? []];
+		const configIndex = args.indexOf(CONFIG_ARGUMENT);
+		if (configIndex !== -1) {
+			const targetProxyConfig = node_path.default.join(targetDirectory, PROXY_CONFIG_FILE);
+			if (await copyFileIfPresent(generatedProxyConfig, targetProxyConfig)) {
+				args[configIndex + 1] = targetProxyConfig;
+				servers[PROXY_SERVER_NAME] = {
+					...proxy,
+					args
+				};
+			}
+		}
+	}
+	const targetPath = node_path.default.join(targetDirectory, "mcp.json");
+	await node_fs.default.promises.writeFile(targetPath, `${JSON.stringify({
+		...config,
+		mcpServers: servers
+	}, null, 2)}\n`, { mode: 384 });
+	return targetPath;
+}
+/**
+* Applies the allowlist to a merged MCP config, writing a filtered proxy config
+* into the run directory and repointing the proxy at it when needed.
+*/
+async function applyMcpAllowlist(config, allowlist, repoRoot, temporaryDirectory) {
+	if (!allowlist) return config;
+	const filtered = filterMcpServers(config, allowlist.servers);
+	const servers = filtered.mcpServers ?? {};
+	const proxy = servers[PROXY_SERVER_NAME];
+	if (!proxy || !allowlist.proxy || allowlist.proxy.length === 0) return filtered;
+	const args = [...proxy.args ?? []];
+	const configIndex = args.indexOf(CONFIG_ARGUMENT);
+	if (configIndex === -1 || !args[configIndex + 1]) return filtered;
+	const sourcePath = node_path.default.resolve(repoRoot, args[configIndex + 1]);
+	let sourceConfig;
+	try {
+		sourceConfig = await node_fs.default.promises.readFile(sourcePath, "utf8");
+	} catch (error) {
+		if (error.code === "ENOENT") return filtered;
+		throw error;
+	}
+	const targetPath = node_path.default.join(temporaryDirectory, PROXY_CONFIG_FILE);
+	await node_fs.default.promises.writeFile(targetPath, filterProxyConfig(sourceConfig, allowlist.proxy), { mode: 384 });
+	args[configIndex + 1] = targetPath;
+	return {
+		...filtered,
+		mcpServers: {
+			...servers,
+			[PROXY_SERVER_NAME]: {
+				...proxy,
+				args
+			}
+		}
+	};
+}
+//#endregion
+Object.defineProperty(exports, "PROXY_SERVER_NAME", {
+	enumerable: true,
+	get: function() {
+		return PROXY_SERVER_NAME;
+	}
+});
+Object.defineProperty(exports, "applyMcpAllowlist", {
+	enumerable: true,
+	get: function() {
+		return applyMcpAllowlist;
+	}
+});
+Object.defineProperty(exports, "filterMcpServers", {
+	enumerable: true,
+	get: function() {
+		return filterMcpServers;
+	}
+});
+Object.defineProperty(exports, "filterProxyConfig", {
+	enumerable: true,
+	get: function() {
+		return filterProxyConfig;
+	}
+});
+Object.defineProperty(exports, "persistMcpConfig", {
+	enumerable: true,
+	get: function() {
+		return persistMcpConfig;
+	}
+});
+Object.defineProperty(exports, "resolveMcpAllowlist", {
+	enumerable: true,
+	get: function() {
+		return resolveMcpAllowlist;
+	}
+});
+
+//# sourceMappingURL=mcpFilter-CZNmU_VF.cjs.map

package/dist/mcpFilter-CZNmU_VF.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcpFilter-CZNmU_VF.cjs","names":["loadDomains","expandDomainNames","parseYaml","stringifyYaml","fs","path"],"sources":["../src/services/mcpFilter/index.ts"],"sourcesContent":["import fs from 'node:fs';\nimport path from 'node:path';\n\nimport { type DomainMcpAllowlist, expandDomainNames, loadDomains } from '@agimon-ai/po-config/domains';\nimport { parse as parseYaml, stringify as stringifyYaml } from 'yaml';\n\nimport type { JsonObject } from '../../types/resources';\n\n/** Server name in .mcp.json whose upstreams are declared in mcp-config.yaml. */\nexport const PROXY_SERVER_NAME = 'agiflow-proxy';\nconst PROXY_CONFIG_FILE = 'mcp-config.yaml';\nconst CONFIG_ARGUMENT = '--config';\n\n/**\n * Unions the mcp allowlists of the selected domains.\n *\n * Returns undefined when any selected domain omits `mcp`, which means \"give me\n * everything\". Filtering only kicks in once every selected domain has opted in,\n * so a domain that has not been migrated yet cannot silently lose its tools.\n */\nexport function resolveMcpAllowlist(repoRoot: string, domainNames: string[]): DomainMcpAllowlist | undefined {\n  const manifest = loadDomains(repoRoot);\n  const expanded = expandDomainNames(manifest, domainNames);\n  if (expanded.length === 0) return undefined;\n\n  const servers = new Set<string>();\n  const proxy = new Set<string>();\n  for (const name of expanded) {\n    const allowlist = manifest.domains[name]?.mcp;\n    if (!allowlist) return undefined;\n    for (const server of allowlist.servers ?? []) servers.add(server);\n    for (const upstream of allowlist.proxy ?? []) proxy.add(upstream);\n  }\n  return { servers: [...servers], proxy: [...proxy] };\n}\n\n/** Drops servers that are not on the allowlist. An empty list means keep all. */\nexport function filterMcpServers(config: JsonObject, allowed?: string[]): JsonObject {\n  if (!allowed || allowed.length === 0) return config;\n  const servers = (config.mcpServers ?? {}) as Record<string, unknown>;\n  const kept: Record<string, unknown> = {};\n  for (const [name, definition] of Object.entries(servers)) {\n    if (allowed.includes(name)) kept[name] = definition;\n  }\n  return { ...config, mcpServers: kept };\n}\n\n/**\n * Rewrites the proxy's upstream list, keeping only allowed servers.\n *\n * Entries are removed rather than marked disabled so a filtered upstream cannot\n * be reached even if the proxy ignores the disabled flag. Comments in the\n * source file are not preserved; the result is a per-run temporary file.\n */\nexport function filterProxyConfig(yamlText: string, allowed?: string[]): string {\n  if (!allowed || allowed.length === 0) return yamlText;\n  const config = (parseYaml(yamlText) ?? {}) as JsonObject;\n  const servers = (config.mcpServers ?? {}) as Record<string, unknown>;\n  const kept: Record<string, unknown> = {};\n  const dropped: string[] = [];\n  for (const [name, definition] of Object.entries(servers)) {\n    if (allowed.includes(name)) kept[name] = definition;\n    else dropped.push(name);\n  }\n  const header = [\n    '# Generated by po for this run. Do not edit.',\n    `# Upstreams kept: ${Object.keys(kept).join(', ') || '(none)'}`,\n    `# Upstreams removed by the domain allowlist: ${dropped.join(', ') || '(none)'}`,\n    '',\n  ].join('\\n');\n  return `${header}${stringifyYaml({ ...config, mcpServers: kept })}`;\n}\n\nasync function copyFileIfPresent(source: string, target: string): Promise<boolean> {\n  try {\n    await fs.promises.copyFile(source, target);\n    return true;\n  } catch (error) {\n    if ((error as NodeJS.ErrnoException).code === 'ENOENT') return false;\n    throw error;\n  }\n}\n\n/**\n * Copies a generated MCP config out of the run directory so another frontend\n * can use it, keeping the proxy's --config pointing at the copy.\n *\n * The run directory is deleted when the harness exits, so emitting for\n * claude.sh or codex.sh has to relocate both files together.\n */\nexport async function persistMcpConfig(\n  sourceConfigPath: string,\n  temporaryDirectory: string,\n  targetDirectory: string,\n): Promise<string> {\n  await fs.promises.mkdir(targetDirectory, { recursive: true });\n  const config = JSON.parse(await fs.promises.readFile(sourceConfigPath, 'utf8')) as JsonObject;\n  const servers = (config.mcpServers ?? {}) as Record<string, JsonObject>;\n  const proxy = servers[PROXY_SERVER_NAME];\n  const generatedProxyConfig = path.join(temporaryDirectory, PROXY_CONFIG_FILE);\n\n  if (proxy) {\n    const args = [...((proxy.args ?? []) as string[])];\n    const configIndex = args.indexOf(CONFIG_ARGUMENT);\n    if (configIndex !== -1) {\n      const targetProxyConfig = path.join(targetDirectory, PROXY_CONFIG_FILE);\n      if (await copyFileIfPresent(generatedProxyConfig, targetProxyConfig)) {\n        args[configIndex + 1] = targetProxyConfig;\n        servers[PROXY_SERVER_NAME] = { ...proxy, args };\n      }\n    }\n  }\n\n  const targetPath = path.join(targetDirectory, 'mcp.json');\n  await fs.promises.writeFile(targetPath, `${JSON.stringify({ ...config, mcpServers: servers }, null, 2)}\\n`, {\n    mode: 0o600,\n  });\n  return targetPath;\n}\n\n/**\n * Applies the allowlist to a merged MCP config, writing a filtered proxy config\n * into the run directory and repointing the proxy at it when needed.\n */\nexport async function applyMcpAllowlist(\n  config: JsonObject,\n  allowlist: DomainMcpAllowlist | undefined,\n  repoRoot: string,\n  temporaryDirectory: string,\n): Promise<JsonObject> {\n  if (!allowlist) return config;\n  const filtered = filterMcpServers(config, allowlist.servers);\n  const servers = (filtered.mcpServers ?? {}) as Record<string, JsonObject>;\n  const proxy = servers[PROXY_SERVER_NAME];\n  if (!proxy || !allowlist.proxy || allowlist.proxy.length === 0) return filtered;\n\n  const args = [...((proxy.args ?? []) as string[])];\n  const configIndex = args.indexOf(CONFIG_ARGUMENT);\n  if (configIndex === -1 || !args[configIndex + 1]) return filtered;\n\n  const sourcePath = path.resolve(repoRoot, args[configIndex + 1]);\n  let sourceConfig: string;\n  try {\n    sourceConfig = await fs.promises.readFile(sourcePath, 'utf8');\n  } catch (error) {\n    if ((error as NodeJS.ErrnoException).code === 'ENOENT') return filtered;\n    throw error;\n  }\n  const targetPath = path.join(temporaryDirectory, PROXY_CONFIG_FILE);\n  await fs.promises.writeFile(targetPath, filterProxyConfig(sourceConfig, allowlist.proxy), { mode: 0o600 });\n  args[configIndex + 1] = targetPath;\n  return { ...filtered, mcpServers: { ...servers, [PROXY_SERVER_NAME]: { ...proxy, args } } };\n}\n"],"mappings":";;;;;;;;;AASA,MAAa,oBAAoB;AACjC,MAAM,oBAAoB;AAC1B,MAAM,kBAAkB;;;;;;;;AASxB,SAAgB,oBAAoB,UAAkB,aAAuD;CAC3G,MAAM,YAAA,GAAWA,6BAAAA,YAAAA,CAAY,QAAQ;CACrC,MAAM,YAAA,GAAWC,6BAAAA,kBAAAA,CAAkB,UAAU,WAAW;CACxD,IAAI,SAAS,WAAW,GAAG,OAAO,KAAA;CAElC,MAAM,0BAAU,IAAI,IAAY;CAChC,MAAM,wBAAQ,IAAI,IAAY;CAC9B,KAAK,MAAM,QAAQ,UAAU;EAC3B,MAAM,YAAY,SAAS,QAAQ,KAAK,EAAE;EAC1C,IAAI,CAAC,WAAW,OAAO,KAAA;EACvB,KAAK,MAAM,UAAU,UAAU,WAAW,CAAC,GAAG,QAAQ,IAAI,MAAM;EAChE,KAAK,MAAM,YAAY,UAAU,SAAS,CAAC,GAAG,MAAM,IAAI,QAAQ;CAClE;CACA,OAAO;EAAE,SAAS,CAAC,GAAG,OAAO;EAAG,OAAO,CAAC,GAAG,KAAK;CAAE;AACpD;;AAGA,SAAgB,iBAAiB,QAAoB,SAAgC;CACnF,IAAI,CAAC,WAAW,QAAQ,WAAW,GAAG,OAAO;CAC7C,MAAM,UAAW,OAAO,cAAc,CAAC;CACvC,MAAM,OAAgC,CAAC;CACvC,KAAK,MAAM,CAAC,MAAM,eAAe,OAAO,QAAQ,OAAO,GACrD,IAAI,QAAQ,SAAS,IAAI,GAAG,KAAK,QAAQ;CAE3C,OAAO;EAAE,GAAG;EAAQ,YAAY;CAAK;AACvC;;;;;;;;AASA,SAAgB,kBAAkB,UAAkB,SAA4B;CAC9E,IAAI,CAAC,WAAW,QAAQ,WAAW,GAAG,OAAO;CAC7C,MAAM,UAAA,GAAUC,KAAAA,MAAAA,CAAU,QAAQ,KAAK,CAAC;CACxC,MAAM,UAAW,OAAO,cAAc,CAAC;CACvC,MAAM,OAAgC,CAAC;CACvC,MAAM,UAAoB,CAAC;CAC3B,KAAK,MAAM,CAAC,MAAM,eAAe,OAAO,QAAQ,OAAO,GACrD,IAAI,QAAQ,SAAS,IAAI,GAAG,KAAK,QAAQ;MACpC,QAAQ,KAAK,IAAI;CAQxB,OAAO,GANQ;EACb;EACA,qBAAqB,OAAO,KAAK,IAAI,CAAC,CAAC,KAAK,IAAI,KAAK;EACrD,gDAAgD,QAAQ,KAAK,IAAI,KAAK;EACtE;CACF,CAAC,CAAC,KAAK,IACQ,KAAA,GAAIC,KAAAA,UAAAA,CAAc;EAAE,GAAG;EAAQ,YAAY;CAAK,CAAC;AAClE;AAEA,eAAe,kBAAkB,QAAgB,QAAkC;CACjF,IAAI;EACF,MAAMC,QAAAA,QAAG,SAAS,SAAS,QAAQ,MAAM;EACzC,OAAO;CACT,SAAS,OAAO;EACd,IAAK,MAAgC,SAAS,UAAU,OAAO;EAC/D,MAAM;CACR;AACF;;;;;;;;AASA,eAAsB,iBACpB,kBACA,oBACA,iBACiB;CACjB,MAAMA,QAAAA,QAAG,SAAS,MAAM,iBAAiB,EAAE,WAAW,KAAK,CAAC;CAC5D,MAAM,SAAS,KAAK,MAAM,MAAMA,QAAAA,QAAG,SAAS,SAAS,kBAAkB,MAAM,CAAC;CAC9E,MAAM,UAAW,OAAO,cAAc,CAAC;CACvC,MAAM,QAAQ,QAAQ;CACtB,MAAM,uBAAuBC,UAAAA,QAAK,KAAK,oBAAoB,iBAAiB;CAE5E,IAAI,OAAO;EACT,MAAM,OAAO,CAAC,GAAK,MAAM,QAAQ,CAAC,CAAe;EACjD,MAAM,cAAc,KAAK,QAAQ,eAAe;EAChD,IAAI,gBAAgB,IAAI;GACtB,MAAM,oBAAoBA,UAAAA,QAAK,KAAK,iBAAiB,iBAAiB;GACtE,IAAI,MAAM,kBAAkB,sBAAsB,iBAAiB,GAAG;IACpE,KAAK,cAAc,KAAK;IACxB,QAAQ,qBAAqB;KAAE,GAAG;KAAO;IAAK;GAChD;EACF;CACF;CAEA,MAAM,aAAaA,UAAAA,QAAK,KAAK,iBAAiB,UAAU;CACxD,MAAMD,QAAAA,QAAG,SAAS,UAAU,YAAY,GAAG,KAAK,UAAU;EAAE,GAAG;EAAQ,YAAY;CAAQ,GAAG,MAAM,CAAC,EAAE,KAAK,EAC1G,MAAM,IACR,CAAC;CACD,OAAO;AACT;;;;;AAMA,eAAsB,kBACpB,QACA,WACA,UACA,oBACqB;CACrB,IAAI,CAAC,WAAW,OAAO;CACvB,MAAM,WAAW,iBAAiB,QAAQ,UAAU,OAAO;CAC3D,MAAM,UAAW,SAAS,cAAc,CAAC;CACzC,MAAM,QAAQ,QAAQ;CACtB,IAAI,CAAC,SAAS,CAAC,UAAU,SAAS,UAAU,MAAM,WAAW,GAAG,OAAO;CAEvE,MAAM,OAAO,CAAC,GAAK,MAAM,QAAQ,CAAC,CAAe;CACjD,MAAM,cAAc,KAAK,QAAQ,eAAe;CAChD,IAAI,gBAAgB,MAAM,CAAC,KAAK,cAAc,IAAI,OAAO;CAEzD,MAAM,aAAaC,UAAAA,QAAK,QAAQ,UAAU,KAAK,cAAc,EAAE;CAC/D,IAAI;CACJ,IAAI;EACF,eAAe,MAAMD,QAAAA,QAAG,SAAS,SAAS,YAAY,MAAM;CAC9D,SAAS,OAAO;EACd,IAAK,MAAgC,SAAS,UAAU,OAAO;EAC/D,MAAM;CACR;CACA,MAAM,aAAaC,UAAAA,QAAK,KAAK,oBAAoB,iBAAiB;CAClE,MAAMD,QAAAA,QAAG,SAAS,UAAU,YAAY,kBAAkB,cAAc,UAAU,KAAK,GAAG,EAAE,MAAM,IAAM,CAAC;CACzG,KAAK,cAAc,KAAK;CACxB,OAAO;EAAE,GAAG;EAAU,YAAY;GAAE,GAAG;IAAU,oBAAoB;IAAE,GAAG;IAAO;GAAK;EAAE;CAAE;AAC5F"}

package/dist/mcpFilter-Cf-czy8O.mjs

@@ -0,0 +1,151 @@
+import fs from "node:fs";
+import path from "node:path";
+import { expandDomainNames, loadDomains } from "@agimon-ai/po-config/domains";
+import { parse, stringify } from "yaml";
+//#region src/services/mcpFilter/index.ts
+/** Server name in .mcp.json whose upstreams are declared in mcp-config.yaml. */
+const PROXY_SERVER_NAME = "agiflow-proxy";
+const PROXY_CONFIG_FILE = "mcp-config.yaml";
+const CONFIG_ARGUMENT = "--config";
+/**
+* Unions the mcp allowlists of the selected domains.
+*
+* Returns undefined when any selected domain omits `mcp`, which means "give me
+* everything". Filtering only kicks in once every selected domain has opted in,
+* so a domain that has not been migrated yet cannot silently lose its tools.
+*/
+function resolveMcpAllowlist(repoRoot, domainNames) {
+	const manifest = loadDomains(repoRoot);
+	const expanded = expandDomainNames(manifest, domainNames);
+	if (expanded.length === 0) return void 0;
+	const servers = /* @__PURE__ */ new Set();
+	const proxy = /* @__PURE__ */ new Set();
+	for (const name of expanded) {
+		const allowlist = manifest.domains[name]?.mcp;
+		if (!allowlist) return void 0;
+		for (const server of allowlist.servers ?? []) servers.add(server);
+		for (const upstream of allowlist.proxy ?? []) proxy.add(upstream);
+	}
+	return {
+		servers: [...servers],
+		proxy: [...proxy]
+	};
+}
+/** Drops servers that are not on the allowlist. An empty list means keep all. */
+function filterMcpServers(config, allowed) {
+	if (!allowed || allowed.length === 0) return config;
+	const servers = config.mcpServers ?? {};
+	const kept = {};
+	for (const [name, definition] of Object.entries(servers)) if (allowed.includes(name)) kept[name] = definition;
+	return {
+		...config,
+		mcpServers: kept
+	};
+}
+/**
+* Rewrites the proxy's upstream list, keeping only allowed servers.
+*
+* Entries are removed rather than marked disabled so a filtered upstream cannot
+* be reached even if the proxy ignores the disabled flag. Comments in the
+* source file are not preserved; the result is a per-run temporary file.
+*/
+function filterProxyConfig(yamlText, allowed) {
+	if (!allowed || allowed.length === 0) return yamlText;
+	const config = parse(yamlText) ?? {};
+	const servers = config.mcpServers ?? {};
+	const kept = {};
+	const dropped = [];
+	for (const [name, definition] of Object.entries(servers)) if (allowed.includes(name)) kept[name] = definition;
+	else dropped.push(name);
+	return `${[
+		"# Generated by po for this run. Do not edit.",
+		`# Upstreams kept: ${Object.keys(kept).join(", ") || "(none)"}`,
+		`# Upstreams removed by the domain allowlist: ${dropped.join(", ") || "(none)"}`,
+		""
+	].join("\n")}${stringify({
+		...config,
+		mcpServers: kept
+	})}`;
+}
+async function copyFileIfPresent(source, target) {
+	try {
+		await fs.promises.copyFile(source, target);
+		return true;
+	} catch (error) {
+		if (error.code === "ENOENT") return false;
+		throw error;
+	}
+}
+/**
+* Copies a generated MCP config out of the run directory so another frontend
+* can use it, keeping the proxy's --config pointing at the copy.
+*
+* The run directory is deleted when the harness exits, so emitting for
+* claude.sh or codex.sh has to relocate both files together.
+*/
+async function persistMcpConfig(sourceConfigPath, temporaryDirectory, targetDirectory) {
+	await fs.promises.mkdir(targetDirectory, { recursive: true });
+	const config = JSON.parse(await fs.promises.readFile(sourceConfigPath, "utf8"));
+	const servers = config.mcpServers ?? {};
+	const proxy = servers[PROXY_SERVER_NAME];
+	const generatedProxyConfig = path.join(temporaryDirectory, PROXY_CONFIG_FILE);
+	if (proxy) {
+		const args = [...proxy.args ?? []];
+		const configIndex = args.indexOf(CONFIG_ARGUMENT);
+		if (configIndex !== -1) {
+			const targetProxyConfig = path.join(targetDirectory, PROXY_CONFIG_FILE);
+			if (await copyFileIfPresent(generatedProxyConfig, targetProxyConfig)) {
+				args[configIndex + 1] = targetProxyConfig;
+				servers[PROXY_SERVER_NAME] = {
+					...proxy,
+					args
+				};
+			}
+		}
+	}
+	const targetPath = path.join(targetDirectory, "mcp.json");
+	await fs.promises.writeFile(targetPath, `${JSON.stringify({
+		...config,
+		mcpServers: servers
+	}, null, 2)}\n`, { mode: 384 });
+	return targetPath;
+}
+/**
+* Applies the allowlist to a merged MCP config, writing a filtered proxy config
+* into the run directory and repointing the proxy at it when needed.
+*/
+async function applyMcpAllowlist(config, allowlist, repoRoot, temporaryDirectory) {
+	if (!allowlist) return config;
+	const filtered = filterMcpServers(config, allowlist.servers);
+	const servers = filtered.mcpServers ?? {};
+	const proxy = servers[PROXY_SERVER_NAME];
+	if (!proxy || !allowlist.proxy || allowlist.proxy.length === 0) return filtered;
+	const args = [...proxy.args ?? []];
+	const configIndex = args.indexOf(CONFIG_ARGUMENT);
+	if (configIndex === -1 || !args[configIndex + 1]) return filtered;
+	const sourcePath = path.resolve(repoRoot, args[configIndex + 1]);
+	let sourceConfig;
+	try {
+		sourceConfig = await fs.promises.readFile(sourcePath, "utf8");
+	} catch (error) {
+		if (error.code === "ENOENT") return filtered;
+		throw error;
+	}
+	const targetPath = path.join(temporaryDirectory, PROXY_CONFIG_FILE);
+	await fs.promises.writeFile(targetPath, filterProxyConfig(sourceConfig, allowlist.proxy), { mode: 384 });
+	args[configIndex + 1] = targetPath;
+	return {
+		...filtered,
+		mcpServers: {
+			...servers,
+			[PROXY_SERVER_NAME]: {
+				...proxy,
+				args
+			}
+		}
+	};
+}
+//#endregion
+export { persistMcpConfig as a, filterProxyConfig as i, applyMcpAllowlist as n, resolveMcpAllowlist as o, filterMcpServers as r, PROXY_SERVER_NAME as t };
+
+//# sourceMappingURL=mcpFilter-Cf-czy8O.mjs.map

package/dist/mcpFilter-Cf-czy8O.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcpFilter-Cf-czy8O.mjs","names":["parseYaml","stringifyYaml"],"sources":["../src/services/mcpFilter/index.ts"],"sourcesContent":["import fs from 'node:fs';\nimport path from 'node:path';\n\nimport { type DomainMcpAllowlist, expandDomainNames, loadDomains } from '@agimon-ai/po-config/domains';\nimport { parse as parseYaml, stringify as stringifyYaml } from 'yaml';\n\nimport type { JsonObject } from '../../types/resources';\n\n/** Server name in .mcp.json whose upstreams are declared in mcp-config.yaml. */\nexport const PROXY_SERVER_NAME = 'agiflow-proxy';\nconst PROXY_CONFIG_FILE = 'mcp-config.yaml';\nconst CONFIG_ARGUMENT = '--config';\n\n/**\n * Unions the mcp allowlists of the selected domains.\n *\n * Returns undefined when any selected domain omits `mcp`, which means \"give me\n * everything\". Filtering only kicks in once every selected domain has opted in,\n * so a domain that has not been migrated yet cannot silently lose its tools.\n */\nexport function resolveMcpAllowlist(repoRoot: string, domainNames: string[]): DomainMcpAllowlist | undefined {\n  const manifest = loadDomains(repoRoot);\n  const expanded = expandDomainNames(manifest, domainNames);\n  if (expanded.length === 0) return undefined;\n\n  const servers = new Set<string>();\n  const proxy = new Set<string>();\n  for (const name of expanded) {\n    const allowlist = manifest.domains[name]?.mcp;\n    if (!allowlist) return undefined;\n    for (const server of allowlist.servers ?? []) servers.add(server);\n    for (const upstream of allowlist.proxy ?? []) proxy.add(upstream);\n  }\n  return { servers: [...servers], proxy: [...proxy] };\n}\n\n/** Drops servers that are not on the allowlist. An empty list means keep all. */\nexport function filterMcpServers(config: JsonObject, allowed?: string[]): JsonObject {\n  if (!allowed || allowed.length === 0) return config;\n  const servers = (config.mcpServers ?? {}) as Record<string, unknown>;\n  const kept: Record<string, unknown> = {};\n  for (const [name, definition] of Object.entries(servers)) {\n    if (allowed.includes(name)) kept[name] = definition;\n  }\n  return { ...config, mcpServers: kept };\n}\n\n/**\n * Rewrites the proxy's upstream list, keeping only allowed servers.\n *\n * Entries are removed rather than marked disabled so a filtered upstream cannot\n * be reached even if the proxy ignores the disabled flag. Comments in the\n * source file are not preserved; the result is a per-run temporary file.\n */\nexport function filterProxyConfig(yamlText: string, allowed?: string[]): string {\n  if (!allowed || allowed.length === 0) return yamlText;\n  const config = (parseYaml(yamlText) ?? {}) as JsonObject;\n  const servers = (config.mcpServers ?? {}) as Record<string, unknown>;\n  const kept: Record<string, unknown> = {};\n  const dropped: string[] = [];\n  for (const [name, definition] of Object.entries(servers)) {\n    if (allowed.includes(name)) kept[name] = definition;\n    else dropped.push(name);\n  }\n  const header = [\n    '# Generated by po for this run. Do not edit.',\n    `# Upstreams kept: ${Object.keys(kept).join(', ') || '(none)'}`,\n    `# Upstreams removed by the domain allowlist: ${dropped.join(', ') || '(none)'}`,\n    '',\n  ].join('\\n');\n  return `${header}${stringifyYaml({ ...config, mcpServers: kept })}`;\n}\n\nasync function copyFileIfPresent(source: string, target: string): Promise<boolean> {\n  try {\n    await fs.promises.copyFile(source, target);\n    return true;\n  } catch (error) {\n    if ((error as NodeJS.ErrnoException).code === 'ENOENT') return false;\n    throw error;\n  }\n}\n\n/**\n * Copies a generated MCP config out of the run directory so another frontend\n * can use it, keeping the proxy's --config pointing at the copy.\n *\n * The run directory is deleted when the harness exits, so emitting for\n * claude.sh or codex.sh has to relocate both files together.\n */\nexport async function persistMcpConfig(\n  sourceConfigPath: string,\n  temporaryDirectory: string,\n  targetDirectory: string,\n): Promise<string> {\n  await fs.promises.mkdir(targetDirectory, { recursive: true });\n  const config = JSON.parse(await fs.promises.readFile(sourceConfigPath, 'utf8')) as JsonObject;\n  const servers = (config.mcpServers ?? {}) as Record<string, JsonObject>;\n  const proxy = servers[PROXY_SERVER_NAME];\n  const generatedProxyConfig = path.join(temporaryDirectory, PROXY_CONFIG_FILE);\n\n  if (proxy) {\n    const args = [...((proxy.args ?? []) as string[])];\n    const configIndex = args.indexOf(CONFIG_ARGUMENT);\n    if (configIndex !== -1) {\n      const targetProxyConfig = path.join(targetDirectory, PROXY_CONFIG_FILE);\n      if (await copyFileIfPresent(generatedProxyConfig, targetProxyConfig)) {\n        args[configIndex + 1] = targetProxyConfig;\n        servers[PROXY_SERVER_NAME] = { ...proxy, args };\n      }\n    }\n  }\n\n  const targetPath = path.join(targetDirectory, 'mcp.json');\n  await fs.promises.writeFile(targetPath, `${JSON.stringify({ ...config, mcpServers: servers }, null, 2)}\\n`, {\n    mode: 0o600,\n  });\n  return targetPath;\n}\n\n/**\n * Applies the allowlist to a merged MCP config, writing a filtered proxy config\n * into the run directory and repointing the proxy at it when needed.\n */\nexport async function applyMcpAllowlist(\n  config: JsonObject,\n  allowlist: DomainMcpAllowlist | undefined,\n  repoRoot: string,\n  temporaryDirectory: string,\n): Promise<JsonObject> {\n  if (!allowlist) return config;\n  const filtered = filterMcpServers(config, allowlist.servers);\n  const servers = (filtered.mcpServers ?? {}) as Record<string, JsonObject>;\n  const proxy = servers[PROXY_SERVER_NAME];\n  if (!proxy || !allowlist.proxy || allowlist.proxy.length === 0) return filtered;\n\n  const args = [...((proxy.args ?? []) as string[])];\n  const configIndex = args.indexOf(CONFIG_ARGUMENT);\n  if (configIndex === -1 || !args[configIndex + 1]) return filtered;\n\n  const sourcePath = path.resolve(repoRoot, args[configIndex + 1]);\n  let sourceConfig: string;\n  try {\n    sourceConfig = await fs.promises.readFile(sourcePath, 'utf8');\n  } catch (error) {\n    if ((error as NodeJS.ErrnoException).code === 'ENOENT') return filtered;\n    throw error;\n  }\n  const targetPath = path.join(temporaryDirectory, PROXY_CONFIG_FILE);\n  await fs.promises.writeFile(targetPath, filterProxyConfig(sourceConfig, allowlist.proxy), { mode: 0o600 });\n  args[configIndex + 1] = targetPath;\n  return { ...filtered, mcpServers: { ...servers, [PROXY_SERVER_NAME]: { ...proxy, args } } };\n}\n"],"mappings":";;;;;;AASA,MAAa,oBAAoB;AACjC,MAAM,oBAAoB;AAC1B,MAAM,kBAAkB;;;;;;;;AASxB,SAAgB,oBAAoB,UAAkB,aAAuD;CAC3G,MAAM,WAAW,YAAY,QAAQ;CACrC,MAAM,WAAW,kBAAkB,UAAU,WAAW;CACxD,IAAI,SAAS,WAAW,GAAG,OAAO,KAAA;CAElC,MAAM,0BAAU,IAAI,IAAY;CAChC,MAAM,wBAAQ,IAAI,IAAY;CAC9B,KAAK,MAAM,QAAQ,UAAU;EAC3B,MAAM,YAAY,SAAS,QAAQ,KAAK,EAAE;EAC1C,IAAI,CAAC,WAAW,OAAO,KAAA;EACvB,KAAK,MAAM,UAAU,UAAU,WAAW,CAAC,GAAG,QAAQ,IAAI,MAAM;EAChE,KAAK,MAAM,YAAY,UAAU,SAAS,CAAC,GAAG,MAAM,IAAI,QAAQ;CAClE;CACA,OAAO;EAAE,SAAS,CAAC,GAAG,OAAO;EAAG,OAAO,CAAC,GAAG,KAAK;CAAE;AACpD;;AAGA,SAAgB,iBAAiB,QAAoB,SAAgC;CACnF,IAAI,CAAC,WAAW,QAAQ,WAAW,GAAG,OAAO;CAC7C,MAAM,UAAW,OAAO,cAAc,CAAC;CACvC,MAAM,OAAgC,CAAC;CACvC,KAAK,MAAM,CAAC,MAAM,eAAe,OAAO,QAAQ,OAAO,GACrD,IAAI,QAAQ,SAAS,IAAI,GAAG,KAAK,QAAQ;CAE3C,OAAO;EAAE,GAAG;EAAQ,YAAY;CAAK;AACvC;;;;;;;;AASA,SAAgB,kBAAkB,UAAkB,SAA4B;CAC9E,IAAI,CAAC,WAAW,QAAQ,WAAW,GAAG,OAAO;CAC7C,MAAM,SAAUA,MAAU,QAAQ,KAAK,CAAC;CACxC,MAAM,UAAW,OAAO,cAAc,CAAC;CACvC,MAAM,OAAgC,CAAC;CACvC,MAAM,UAAoB,CAAC;CAC3B,KAAK,MAAM,CAAC,MAAM,eAAe,OAAO,QAAQ,OAAO,GACrD,IAAI,QAAQ,SAAS,IAAI,GAAG,KAAK,QAAQ;MACpC,QAAQ,KAAK,IAAI;CAQxB,OAAO,GANQ;EACb;EACA,qBAAqB,OAAO,KAAK,IAAI,CAAC,CAAC,KAAK,IAAI,KAAK;EACrD,gDAAgD,QAAQ,KAAK,IAAI,KAAK;EACtE;CACF,CAAC,CAAC,KAAK,IACQ,IAAIC,UAAc;EAAE,GAAG;EAAQ,YAAY;CAAK,CAAC;AAClE;AAEA,eAAe,kBAAkB,QAAgB,QAAkC;CACjF,IAAI;EACF,MAAM,GAAG,SAAS,SAAS,QAAQ,MAAM;EACzC,OAAO;CACT,SAAS,OAAO;EACd,IAAK,MAAgC,SAAS,UAAU,OAAO;EAC/D,MAAM;CACR;AACF;;;;;;;;AASA,eAAsB,iBACpB,kBACA,oBACA,iBACiB;CACjB,MAAM,GAAG,SAAS,MAAM,iBAAiB,EAAE,WAAW,KAAK,CAAC;CAC5D,MAAM,SAAS,KAAK,MAAM,MAAM,GAAG,SAAS,SAAS,kBAAkB,MAAM,CAAC;CAC9E,MAAM,UAAW,OAAO,cAAc,CAAC;CACvC,MAAM,QAAQ,QAAQ;CACtB,MAAM,uBAAuB,KAAK,KAAK,oBAAoB,iBAAiB;CAE5E,IAAI,OAAO;EACT,MAAM,OAAO,CAAC,GAAK,MAAM,QAAQ,CAAC,CAAe;EACjD,MAAM,cAAc,KAAK,QAAQ,eAAe;EAChD,IAAI,gBAAgB,IAAI;GACtB,MAAM,oBAAoB,KAAK,KAAK,iBAAiB,iBAAiB;GACtE,IAAI,MAAM,kBAAkB,sBAAsB,iBAAiB,GAAG;IACpE,KAAK,cAAc,KAAK;IACxB,QAAQ,qBAAqB;KAAE,GAAG;KAAO;IAAK;GAChD;EACF;CACF;CAEA,MAAM,aAAa,KAAK,KAAK,iBAAiB,UAAU;CACxD,MAAM,GAAG,SAAS,UAAU,YAAY,GAAG,KAAK,UAAU;EAAE,GAAG;EAAQ,YAAY;CAAQ,GAAG,MAAM,CAAC,EAAE,KAAK,EAC1G,MAAM,IACR,CAAC;CACD,OAAO;AACT;;;;;AAMA,eAAsB,kBACpB,QACA,WACA,UACA,oBACqB;CACrB,IAAI,CAAC,WAAW,OAAO;CACvB,MAAM,WAAW,iBAAiB,QAAQ,UAAU,OAAO;CAC3D,MAAM,UAAW,SAAS,cAAc,CAAC;CACzC,MAAM,QAAQ,QAAQ;CACtB,IAAI,CAAC,SAAS,CAAC,UAAU,SAAS,UAAU,MAAM,WAAW,GAAG,OAAO;CAEvE,MAAM,OAAO,CAAC,GAAK,MAAM,QAAQ,CAAC,CAAe;CACjD,MAAM,cAAc,KAAK,QAAQ,eAAe;CAChD,IAAI,gBAAgB,MAAM,CAAC,KAAK,cAAc,IAAI,OAAO;CAEzD,MAAM,aAAa,KAAK,QAAQ,UAAU,KAAK,cAAc,EAAE;CAC/D,IAAI;CACJ,IAAI;EACF,eAAe,MAAM,GAAG,SAAS,SAAS,YAAY,MAAM;CAC9D,SAAS,OAAO;EACd,IAAK,MAAgC,SAAS,UAAU,OAAO;EAC/D,MAAM;CACR;CACA,MAAM,aAAa,KAAK,KAAK,oBAAoB,iBAAiB;CAClE,MAAM,GAAG,SAAS,UAAU,YAAY,kBAAkB,cAAc,UAAU,KAAK,GAAG,EAAE,MAAM,IAAM,CAAC;CACzG,KAAK,cAAc,KAAK;CACxB,OAAO;EAAE,GAAG;EAAU,YAAY;GAAE,GAAG;IAAU,oBAAoB;IAAE,GAAG;IAAO;GAAK;EAAE;CAAE;AAC5F"}

package/dist/pluginMaterializer-C8IZ1PSY.cjs

@@ -0,0 +1,267 @@
+const require_rolldown_runtime = require("./rolldown-runtime-VH7oDXx4.cjs");
+let node_fs = require("node:fs");
+node_fs = require_rolldown_runtime.__toESM(node_fs, 1);
+let node_path = require("node:path");
+node_path = require_rolldown_runtime.__toESM(node_path, 1);
+let _agimon_ai_po_config_domains = require("@agimon-ai/po-config/domains");
+let node_child_process = require("node:child_process");
+let _agimon_ai_po_core_piSettings = require("@agimon-ai/po-core/piSettings");
+//#region src/services/pluginMaterializer/index.ts
+const AGENT_PLUGIN_SCHEMA = "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json";
+const INSTALL_MARKER = ".po-plugin.json";
+const INSTALL_MARKER_VERSION = 1;
+const OUTPUT_LIMIT = 65536;
+/** The staging project that declares the one npm plugin being installed. */
+const STAGING_PACKAGE_NAME = "po-plugin-staging";
+const LATEST_TAG = "latest";
+function appendOutput(current, chunk) {
+	const next = current + chunk.toString("utf8");
+	return next.length <= OUTPUT_LIMIT ? next : next.slice(-65536);
+}
+function runCommand(command, args, options = {}) {
+	return new Promise((resolve, reject) => {
+		const child = (0, node_child_process.spawn)(command, args, {
+			cwd: options.cwd,
+			env: options.environment ?? process.env,
+			stdio: [
+				"ignore",
+				"pipe",
+				"pipe"
+			]
+		});
+		let stdout = "";
+		let stderr = "";
+		child.stdout.on("data", (chunk) => {
+			stdout = appendOutput(stdout, chunk);
+		});
+		child.stderr.on("data", (chunk) => {
+			stderr = appendOutput(stderr, chunk);
+		});
+		child.once("error", (error) => {
+			reject(new Error(`Failed to run ${command}: ${error.message}`, { cause: error }));
+		});
+		child.once("close", (code, signal) => {
+			if (code === 0) {
+				resolve(stdout.trim());
+				return;
+			}
+			const outcome = signal ? `signal ${signal}` : `exit code ${code ?? "unknown"}`;
+			const details = stderr.trim() || stdout.trim();
+			reject(/* @__PURE__ */ new Error(`${command} ${args.join(" ")} failed with ${outcome}${details ? `\n${details}` : ""}`));
+		});
+	});
+}
+function assertContained(root, candidate, label) {
+	const relative = node_path.default.relative(root, candidate);
+	if (relative === "" || !relative.startsWith("..") && !node_path.default.isAbsolute(relative)) return;
+	throw new Error(`${label} resolves outside ${root}`);
+}
+async function materializeGitSource(source, workspace) {
+	const checkout = node_path.default.join(workspace, "checkout");
+	const pluginRoot = source.path ? node_path.default.resolve(checkout, source.path) : checkout;
+	if (source.path) assertContained(checkout, pluginRoot, "Git plugin path");
+	const cloneArgs = ["clone", "--filter=blob:none"];
+	if (source.path) cloneArgs.push("--sparse", "--no-checkout");
+	cloneArgs.push(source.url, checkout);
+	const environment = {
+		...process.env,
+		GIT_TERMINAL_PROMPT: "0"
+	};
+	await runCommand("git", cloneArgs, { environment });
+	if (source.path) await runCommand("git", [
+		"sparse-checkout",
+		"set",
+		"--no-cone",
+		"--",
+		source.path
+	], {
+		cwd: checkout,
+		environment
+	});
+	if (source.sha) {
+		await runCommand("git", ["checkout", source.sha], {
+			cwd: checkout,
+			environment
+		});
+		const checkedOutSha = await runCommand("git", ["rev-parse", "HEAD"], {
+			cwd: checkout,
+			environment
+		});
+		if (checkedOutSha.toLowerCase() !== source.sha.toLowerCase()) throw new Error(`Checked out Git SHA ${checkedOutSha} does not match requested SHA ${source.sha}`);
+	} else if (source.ref) await runCommand("git", ["checkout", source.ref], {
+		cwd: checkout,
+		environment
+	});
+	else if (source.path) await runCommand("git", ["checkout"], {
+		cwd: checkout,
+		environment
+	});
+	return pluginRoot;
+}
+/**
+* Installs an npm plugin into the staging workspace with upm: a one-dependency
+* project, never a spawned package manager. upm runs no lifecycle scripts, and
+* its store is Po's shared `<po home>/store`.
+*/
+async function materializeNpmSource(source, workspace) {
+	const prefix = node_path.default.join(workspace, "npm");
+	await node_fs.default.promises.mkdir(prefix, { recursive: true });
+	await node_fs.default.promises.writeFile(node_path.default.join(prefix, "package.json"), `${JSON.stringify({
+		name: STAGING_PACKAGE_NAME,
+		private: true,
+		dependencies: { [source.package]: source.version ?? LATEST_TAG }
+	}, null, 2)}\n`);
+	const { installRuntimePackages } = await import("@agimon-ai/po-core/runtimePackages");
+	await installRuntimePackages({
+		dir: prefix,
+		poHome: (0, _agimon_ai_po_core_piSettings.poHomeDirectory)(),
+		...source.registry ? { registry: source.registry } : {}
+	});
+	const pluginRoot = node_path.default.resolve(prefix, "node_modules", ...source.package.split("/"));
+	assertContained(node_path.default.join(prefix, "node_modules"), pluginRoot, "npm plugin package");
+	return node_fs.default.promises.realpath(pluginRoot);
+}
+const DEFAULT_MATERIALIZERS = {
+	git: materializeGitSource,
+	npm: materializeNpmSource
+};
+async function pathType(target) {
+	try {
+		return (await node_fs.default.promises.lstat(target)).isDirectory() ? "directory" : "other";
+	} catch (error) {
+		if (error.code === "ENOENT") return "missing";
+		throw error;
+	}
+}
+function optionalManifestString(manifest, key) {
+	const value = manifest[key];
+	return typeof value === "string" && value.trim() ? value.trim() : void 0;
+}
+function validatePluginManifest(pluginRoot, manifestPath) {
+	try {
+		const manifest = JSON.parse(node_fs.default.readFileSync(manifestPath, "utf8"));
+		if (typeof manifest !== "object" || manifest === null || Array.isArray(manifest)) throw new Error("manifest must contain a JSON object");
+		const record = manifest;
+		const agentPluginSchema = manifestPath === node_path.default.join(pluginRoot, "plugin.json") && record.$schema === AGENT_PLUGIN_SCHEMA ? AGENT_PLUGIN_SCHEMA : void 0;
+		const name = optionalManifestString(record, "name");
+		const version = optionalManifestString(record, "version");
+		const description = optionalManifestString(record, "description");
+		return {
+			skillDiscovery: agentPluginSchema ? "direct-children" : "recursive",
+			manifest: {
+				path: manifestPath,
+				...name ? { name } : {},
+				...version ? { version } : {},
+				...description ? { description } : {},
+				...agentPluginSchema ? { agentPluginSchema } : {}
+			}
+		};
+	} catch (error) {
+		throw new Error(`Invalid plugin manifest ${manifestPath}: ${error instanceof Error ? error.message : String(error)}`, { cause: error });
+	}
+}
+async function inspectInstallation(entry) {
+	const type = await pathType(entry.directory);
+	if (type === "missing") return false;
+	if (type !== "directory") throw new Error(`Remote plugin cache path is not a directory: ${entry.directory}`);
+	if (!entry.source || !(0, _agimon_ai_po_config_domains.isRemotePluginSource)(entry.source)) throw new Error(`Remote plugin entry is missing its source: ${entry.name ?? entry.directory}`);
+	let marker;
+	try {
+		marker = JSON.parse(await node_fs.default.promises.readFile(node_path.default.join(entry.directory, INSTALL_MARKER), "utf8"));
+	} catch (error) {
+		throw new Error(`Remote plugin cache is not managed by Po: ${entry.directory}`, { cause: error });
+	}
+	if (marker.version !== INSTALL_MARKER_VERSION || JSON.stringify(marker.source) !== JSON.stringify(entry.source)) throw new Error(`Remote plugin cache metadata does not match ${entry.name ?? entry.directory}: ${entry.directory}`);
+	const manifestPath = (0, _agimon_ai_po_config_domains.findPluginManifestPath)(entry.directory);
+	if (!manifestPath) throw new Error(`Remote plugin cache is missing a supported plugin manifest: ${entry.directory}`);
+	return validatePluginManifest(entry.directory, manifestPath);
+}
+async function copyPluginSource(sourceRoot, destination) {
+	if (await pathType(sourceRoot) !== "directory") throw new Error(`Materialized plugin source is not a directory: ${sourceRoot}`);
+	await node_fs.default.promises.cp(sourceRoot, destination, {
+		recursive: true,
+		filter: (candidate) => node_path.default.basename(candidate) !== ".git"
+	});
+}
+function isRenameRace(error) {
+	const code = error.code;
+	return code === "EEXIST" || code === "ENOTEMPTY";
+}
+async function installRemotePlugin(entry, materializers) {
+	if (!entry.source || !(0, _agimon_ai_po_config_domains.isRemotePluginSource)(entry.source)) return entry;
+	const existingManifest = await inspectInstallation(entry);
+	if (existingManifest) return {
+		...entry,
+		...existingManifest
+	};
+	const parent = node_path.default.dirname(entry.directory);
+	await node_fs.default.promises.mkdir(parent, {
+		recursive: true,
+		mode: 448
+	});
+	if (await pathType(parent) !== "directory") throw new Error(`Remote plugin cache root is not a directory: ${parent}`);
+	await node_fs.default.promises.chmod(parent, 448);
+	const workspace = await node_fs.default.promises.mkdtemp(node_path.default.join(parent, ".plugin-staging-"));
+	const installation = node_path.default.join(workspace, "installation");
+	try {
+		await copyPluginSource(entry.source.type === "git" ? await materializers.git(entry.source, workspace) : await materializers.npm(entry.source, workspace), installation);
+		const manifestPath = (0, _agimon_ai_po_config_domains.findPluginManifestPath)(installation);
+		if (!manifestPath) throw new Error(`Remote plugin ${entry.name ?? entry.directory} does not contain a supported plugin manifest`);
+		validatePluginManifest(installation, manifestPath);
+		const markerPath = node_path.default.join(installation, INSTALL_MARKER);
+		if (await pathType(markerPath) !== "missing") throw new Error(`Remote plugin contains reserved cache metadata path: ${INSTALL_MARKER}`);
+		const marker = {
+			version: INSTALL_MARKER_VERSION,
+			source: entry.source
+		};
+		await node_fs.default.promises.writeFile(markerPath, `${JSON.stringify(marker, null, 2)}\n`, {
+			flag: "wx",
+			mode: 384
+		});
+		try {
+			await node_fs.default.promises.rename(installation, entry.directory);
+		} catch (error) {
+			if (!isRenameRace(error)) throw error;
+			await node_fs.default.promises.rm(installation, {
+				recursive: true,
+				force: true
+			});
+			const racedManifest = await inspectInstallation(entry);
+			if (!racedManifest) throw new Error(`Remote plugin installation race left no cache: ${entry.directory}`);
+			return {
+				...entry,
+				...racedManifest
+			};
+		}
+		const installedManifest = await inspectInstallation(entry);
+		if (!installedManifest) throw new Error(`Remote plugin installation left no cache: ${entry.directory}`);
+		return {
+			...entry,
+			...installedManifest
+		};
+	} catch (error) {
+		throw new Error(`Failed to install remote plugin ${entry.name ?? entry.directory}: ${error instanceof Error ? error.message : String(error)}`, { cause: error });
+	} finally {
+		await node_fs.default.promises.rm(workspace, {
+			recursive: true,
+			force: true
+		});
+	}
+}
+/** Downloads selected remote plugins once into their content-addressed cache directories. */
+async function materializePluginEntries(entries, options = {}) {
+	const materializers = {
+		git: options.materializers?.git ?? DEFAULT_MATERIALIZERS.git,
+		npm: options.materializers?.npm ?? DEFAULT_MATERIALIZERS.npm
+	};
+	return Promise.all(entries.map((entry) => installRemotePlugin(entry, materializers)));
+}
+//#endregion
+Object.defineProperty(exports, "materializePluginEntries", {
+	enumerable: true,
+	get: function() {
+		return materializePluginEntries;
+	}
+});
+
+//# sourceMappingURL=pluginMaterializer-C8IZ1PSY.cjs.map