@ai-agent-forge/agent-forge 0.85.0

package/dist/plugins/ecosystem/installer.d.ts

@@ -0,0 +1,130 @@
+import type { PluginDistributionArtifactV1 } from "./distribution.ts";
+import type { HostFactsV1, PluginSourceVerifierV1, PluginUpdateRecordV1 } from "./types.ts";
+import { type UpdateVerificationV1 } from "./updates.ts";
+export declare const MAX_PLUGIN_SCOPE_REF_CHARS_V1 = 2048;
+/** Stable host namespace for installations that are not project-local. */
+export declare const DEFAULT_GLOBAL_PLUGIN_SCOPE_REF_V1 = "global:default";
+export type PluginInstallationScopeV1 = "global" | "project";
+export interface PluginInstallationV1 {
+    readonly version: 1;
+    readonly pluginId: string;
+    readonly pluginVersion: string;
+    readonly manifestDigest: string;
+    /** The host installation namespace. It is part of the opaque installation identity. */
+    readonly scope: PluginInstallationScopeV1;
+    /** Concrete host namespace that distinguishes global and individual project installations. */
+    readonly scopeRef?: string;
+    /** Opaque host-owned installation handle; never a local path. */
+    readonly installationRef: string;
+    readonly state: "installed" | "active" | "retained";
+}
+export interface PluginInstallHostV1 {
+    /**
+     * Scopes that this host can isolate physically. Omitting this declaration
+     * preserves the legacy global-only host behavior; project operations must be
+     * declared explicitly.
+     */
+    readonly supportedScopes?: readonly PluginInstallationScopeV1[];
+    /** Host operations are atomic from the installer's perspective: an abort may
+     * prevent starting work, but once a method resolves its side effect is committed. */
+    install(input: {
+        readonly record: PluginUpdateRecordV1;
+        readonly scope: PluginInstallationScopeV1;
+        readonly scopeRef: string;
+        /** A host-owned, digest-bound package reference. Package bytes never cross this contract. */
+        readonly artifact?: PluginDistributionArtifactV1;
+        readonly signal?: AbortSignal;
+    }): Promise<{
+        readonly installationRef: string;
+        readonly scope?: PluginInstallationScopeV1;
+        readonly scopeRef?: string;
+    }>;
+    activate(input: {
+        readonly installation: PluginInstallationV1;
+        readonly record: PluginUpdateRecordV1;
+        readonly scope: PluginInstallationScopeV1;
+        readonly scopeRef: string;
+        readonly signal?: AbortSignal;
+    }): Promise<void>;
+    rollback(input: {
+        readonly failed: PluginInstallationV1;
+        readonly previous: PluginInstallationV1;
+        readonly scope: PluginInstallationScopeV1;
+        readonly scopeRef: string;
+        readonly signal?: AbortSignal;
+    }): Promise<void>;
+    /**
+     * Remove a host-owned installation. The method is optional so hosts can
+     * still expose state-only management while they are migrating; callers that
+     * need physical cleanup must treat a missing method as unsupported.
+     */
+    uninstall?: (input: {
+        readonly installation: PluginInstallationV1;
+        readonly scope: PluginInstallationScopeV1;
+        readonly scopeRef: string;
+        readonly signal?: AbortSignal;
+    }) => Promise<void>;
+}
+export interface PluginInstallerOptionsV1 {
+    readonly host: PluginInstallHostV1;
+    readonly verifier?: PluginSourceVerifierV1;
+}
+export type PluginInstallerErrorCodeV1 = "invalid_installation" | "unsupported_scope" | "install_failed" | "activation_failed" | "rollback_failed" | "uninstall_failed";
+export type PluginInstallerResultV1 = {
+    readonly status: "succeeded";
+    readonly installation: PluginInstallationV1;
+} | {
+    readonly status: "cancelled";
+    readonly error: {
+        readonly code: "cancelled";
+        readonly message: string;
+    };
+} | {
+    readonly status: "failed";
+    readonly error: {
+        readonly code: PluginInstallerErrorCodeV1;
+        readonly message: string;
+    };
+};
+export interface PluginInstallerV1 {
+    /** Declared, host-backed installation scopes. Project support is never inferred. */
+    readonly supportedScopes: readonly PluginInstallationScopeV1[];
+    prepare(input: {
+        readonly manifest: PluginUpdateRecordV1["manifest"];
+        readonly source: string;
+        readonly host: HostFactsV1;
+        readonly expectedDigest?: string;
+    }): UpdateVerificationV1;
+    install(input: {
+        readonly record: PluginUpdateRecordV1;
+        /** Omitting scope preserves the existing global installation behavior. */
+        readonly scope?: PluginInstallationScopeV1;
+        /** Required for project installations; global defaults to `global:default`. */
+        readonly scopeRef?: string;
+        readonly artifact?: PluginDistributionArtifactV1;
+        readonly signal?: AbortSignal;
+    }): Promise<PluginInstallerResultV1>;
+    activate(input: {
+        readonly installation: PluginInstallationV1;
+        readonly record: PluginUpdateRecordV1;
+        readonly scope?: PluginInstallationScopeV1;
+        readonly scopeRef?: string;
+        readonly signal?: AbortSignal;
+    }): Promise<PluginInstallerResultV1>;
+    rollback(input: {
+        readonly failed: PluginInstallationV1;
+        readonly previous: PluginInstallationV1;
+        readonly scope?: PluginInstallationScopeV1;
+        readonly scopeRef?: string;
+        readonly signal?: AbortSignal;
+    }): Promise<PluginInstallerResultV1>;
+    /** Remove one installed version after validating its opaque identity. */
+    remove(input: {
+        readonly installation: PluginInstallationV1;
+        readonly scope?: PluginInstallationScopeV1;
+        readonly scopeRef?: string;
+        readonly signal?: AbortSignal;
+    }): Promise<PluginInstallerResultV1>;
+}
+export declare function createPluginInstallerV1(options: PluginInstallerOptionsV1): PluginInstallerV1;
+//# sourceMappingURL=installer.d.ts.map

package/dist/plugins/ecosystem/installer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"installer.d.ts","sourceRoot":"","sources":["../../../src/plugins/ecosystem/installer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,mBAAmB,CAAC;AACtE,OAAO,KAAK,EAAE,WAAW,EAAE,sBAAsB,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAE5F,OAAO,EAAuB,KAAK,oBAAoB,EAAwB,MAAM,cAAc,CAAC;AAGpG,eAAO,MAAM,6BAA6B,OAAO,CAAC;AAClD,0EAA0E;AAC1E,eAAO,MAAM,kCAAkC,mBAAmB,CAAC;AAEnE,MAAM,MAAM,yBAAyB,GAAG,QAAQ,GAAG,SAAS,CAAC;AAQ7D,MAAM,WAAW,oBAAoB;IACpC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IACpB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,uFAAuF;IACvF,QAAQ,CAAC,KAAK,EAAE,yBAAyB,CAAC;IAC1C,8FAA8F;IAC9F,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,iEAAiE;IACjE,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,KAAK,EAAE,WAAW,GAAG,QAAQ,GAAG,UAAU,CAAC;CACpD;AAED,MAAM,WAAW,mBAAmB;IACnC;;;;OAIG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,SAAS,yBAAyB,EAAE,CAAC;IAChE;yFACqF;IACrF,OAAO,CAAC,KAAK,EAAE;QACd,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAC;QACtC,QAAQ,CAAC,KAAK,EAAE,yBAAyB,CAAC;QAC1C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,6FAA6F;QAC7F,QAAQ,CAAC,QAAQ,CAAC,EAAE,4BAA4B,CAAC;QACjD,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;KAC9B,GAAG,OAAO,CAAC;QACX,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;QACjC,QAAQ,CAAC,KAAK,CAAC,EAAE,yBAAyB,CAAC;QAC3C,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;KAC3B,CAAC,CAAC;IACH,QAAQ,CAAC,KAAK,EAAE;QACf,QAAQ,CAAC,YAAY,EAAE,oBAAoB,CAAC;QAC5C,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAC;QACtC,QAAQ,CAAC,KAAK,EAAE,yBAAyB,CAAC;QAC1C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;KAC9B,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClB,QAAQ,CAAC,KAAK,EAAE;QACf,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAC;QACtC,QAAQ,CAAC,QAAQ,EAAE,oBAAoB,CAAC;QACxC,QAAQ,CAAC,KAAK,EAAE,yBAAyB,CAAC;QAC1C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;KAC9B,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClB;;;;OAIG;IACH,SAAS,CAAC,EAAE,CAAC,KAAK,EAAE;QACnB,QAAQ,CAAC,YAAY,EAAE,oBAAoB,CAAC;QAC5C,QAAQ,CAAC,KAAK,EAAE,yBAAyB,CAAC;QAC1C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;KAC9B,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACpB;AAED,MAAM,WAAW,wBAAwB;IACxC,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAC;IACnC,QAAQ,CAAC,QAAQ,CAAC,EAAE,sBAAsB,CAAC;CAC3C;AAED,MAAM,MAAM,0BAA0B,GACnC,sBAAsB,GACtB,mBAAmB,GACnB,gBAAgB,GAChB,mBAAmB,GACnB,iBAAiB,GACjB,kBAAkB,CAAC;AAEtB,MAAM,MAAM,uBAAuB,GAChC;IACA,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,QAAQ,CAAC,YAAY,EAAE,oBAAoB,CAAC;CAC3C,GACD;IACA,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CACxE,GACD;IACA,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE;QACf,QAAQ,CAAC,IAAI,EAAE,0BAA0B,CAAC;QAC1C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;KACzB,CAAC;CACD,CAAC;AAEL,MAAM,WAAW,iBAAiB;IACjC,oFAAoF;IACpF,QAAQ,CAAC,eAAe,EAAE,SAAS,yBAAyB,EAAE,CAAC;IAC/D,OAAO,CAAC,KAAK,EAAE;QACd,QAAQ,CAAC,QAAQ,EAAE,oBAAoB,CAAC,UAAU,CAAC,CAAC;QACpD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;QAC3B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;KACjC,GAAG,oBAAoB,CAAC;IACzB,OAAO,CAAC,KAAK,EAAE;QACd,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAC;QACtC,0EAA0E;QAC1E,QAAQ,CAAC,KAAK,CAAC,EAAE,yBAAyB,CAAC;QAC3C,+EAA+E;QAC/E,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,QAAQ,CAAC,EAAE,4BAA4B,CAAC;QACjD,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;KAC9B,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;IACrC,QAAQ,CAAC,KAAK,EAAE;QACf,QAAQ,CAAC,YAAY,EAAE,oBAAoB,CAAC;QAC5C,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAC;QACtC,QAAQ,CAAC,KAAK,CAAC,EAAE,yBAAyB,CAAC;QAC3C,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;KAC9B,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;IACrC,QAAQ,CAAC,KAAK,EAAE;QACf,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAC;QACtC,QAAQ,CAAC,QAAQ,EAAE,oBAAoB,CAAC;QACxC,QAAQ,CAAC,KAAK,CAAC,EAAE,yBAAyB,CAAC;QAC3C,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;KAC9B,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;IACrC,yEAAyE;IACzE,MAAM,CAAC,KAAK,EAAE;QACb,QAAQ,CAAC,YAAY,EAAE,oBAAoB,CAAC;QAC5C,QAAQ,CAAC,KAAK,CAAC,EAAE,yBAAyB,CAAC;QAC3C,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;KAC9B,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;CACrC;AAmLD,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,wBAAwB,GAAG,iBAAiB,CAyJ5F","sourcesContent":["import type { PluginDistributionArtifactV1 } from \"./distribution.ts\";\nimport type { HostFactsV1, PluginSourceVerifierV1, PluginUpdateRecordV1 } from \"./types.ts\";\n\nimport { stagePluginUpdateV1, type UpdateVerificationV1, verifyPluginUpdateV1 } from \"./updates.ts\";\n\nconst MAX_INSTALLATION_REF_CHARS_V1 = 2048;\nexport const MAX_PLUGIN_SCOPE_REF_CHARS_V1 = 2048;\n/** Stable host namespace for installations that are not project-local. */\nexport const DEFAULT_GLOBAL_PLUGIN_SCOPE_REF_V1 = \"global:default\";\n\nexport type PluginInstallationScopeV1 = \"global\" | \"project\";\n\ninterface PluginScopeIdentityV1 {\n\treadonly scope: PluginInstallationScopeV1;\n\t/** Opaque host namespace; it must never disclose a local project path. */\n\treadonly scopeRef: string;\n}\n\nexport interface PluginInstallationV1 {\n\treadonly version: 1;\n\treadonly pluginId: string;\n\treadonly pluginVersion: string;\n\treadonly manifestDigest: string;\n\t/** The host installation namespace. It is part of the opaque installation identity. */\n\treadonly scope: PluginInstallationScopeV1;\n\t/** Concrete host namespace that distinguishes global and individual project installations. */\n\treadonly scopeRef?: string;\n\t/** Opaque host-owned installation handle; never a local path. */\n\treadonly installationRef: string;\n\treadonly state: \"installed\" | \"active\" | \"retained\";\n}\n\nexport interface PluginInstallHostV1 {\n\t/**\n\t * Scopes that this host can isolate physically. Omitting this declaration\n\t * preserves the legacy global-only host behavior; project operations must be\n\t * declared explicitly.\n\t */\n\treadonly supportedScopes?: readonly PluginInstallationScopeV1[];\n\t/** Host operations are atomic from the installer's perspective: an abort may\n\t * prevent starting work, but once a method resolves its side effect is committed. */\n\tinstall(input: {\n\t\treadonly record: PluginUpdateRecordV1;\n\t\treadonly scope: PluginInstallationScopeV1;\n\t\treadonly scopeRef: string;\n\t\t/** A host-owned, digest-bound package reference. Package bytes never cross this contract. */\n\t\treadonly artifact?: PluginDistributionArtifactV1;\n\t\treadonly signal?: AbortSignal;\n\t}): Promise<{\n\t\treadonly installationRef: string;\n\t\treadonly scope?: PluginInstallationScopeV1;\n\t\treadonly scopeRef?: string;\n\t}>;\n\tactivate(input: {\n\t\treadonly installation: PluginInstallationV1;\n\t\treadonly record: PluginUpdateRecordV1;\n\t\treadonly scope: PluginInstallationScopeV1;\n\t\treadonly scopeRef: string;\n\t\treadonly signal?: AbortSignal;\n\t}): Promise<void>;\n\trollback(input: {\n\t\treadonly failed: PluginInstallationV1;\n\t\treadonly previous: PluginInstallationV1;\n\t\treadonly scope: PluginInstallationScopeV1;\n\t\treadonly scopeRef: string;\n\t\treadonly signal?: AbortSignal;\n\t}): Promise<void>;\n\t/**\n\t * Remove a host-owned installation. The method is optional so hosts can\n\t * still expose state-only management while they are migrating; callers that\n\t * need physical cleanup must treat a missing method as unsupported.\n\t */\n\tuninstall?: (input: {\n\t\treadonly installation: PluginInstallationV1;\n\t\treadonly scope: PluginInstallationScopeV1;\n\t\treadonly scopeRef: string;\n\t\treadonly signal?: AbortSignal;\n\t}) => Promise<void>;\n}\n\nexport interface PluginInstallerOptionsV1 {\n\treadonly host: PluginInstallHostV1;\n\treadonly verifier?: PluginSourceVerifierV1;\n}\n\nexport type PluginInstallerErrorCodeV1 =\n\t| \"invalid_installation\"\n\t| \"unsupported_scope\"\n\t| \"install_failed\"\n\t| \"activation_failed\"\n\t| \"rollback_failed\"\n\t| \"uninstall_failed\";\n\nexport type PluginInstallerResultV1 =\n\t| {\n\t\t\treadonly status: \"succeeded\";\n\t\t\treadonly installation: PluginInstallationV1;\n\t  }\n\t| {\n\t\t\treadonly status: \"cancelled\";\n\t\t\treadonly error: { readonly code: \"cancelled\"; readonly message: string };\n\t  }\n\t| {\n\t\t\treadonly status: \"failed\";\n\t\t\treadonly error: {\n\t\t\t\treadonly code: PluginInstallerErrorCodeV1;\n\t\t\t\treadonly message: string;\n\t\t\t};\n\t  };\n\nexport interface PluginInstallerV1 {\n\t/** Declared, host-backed installation scopes. Project support is never inferred. */\n\treadonly supportedScopes: readonly PluginInstallationScopeV1[];\n\tprepare(input: {\n\t\treadonly manifest: PluginUpdateRecordV1[\"manifest\"];\n\t\treadonly source: string;\n\t\treadonly host: HostFactsV1;\n\t\treadonly expectedDigest?: string;\n\t}): UpdateVerificationV1;\n\tinstall(input: {\n\t\treadonly record: PluginUpdateRecordV1;\n\t\t/** Omitting scope preserves the existing global installation behavior. */\n\t\treadonly scope?: PluginInstallationScopeV1;\n\t\t/** Required for project installations; global defaults to `global:default`. */\n\t\treadonly scopeRef?: string;\n\t\treadonly artifact?: PluginDistributionArtifactV1;\n\t\treadonly signal?: AbortSignal;\n\t}): Promise<PluginInstallerResultV1>;\n\tactivate(input: {\n\t\treadonly installation: PluginInstallationV1;\n\t\treadonly record: PluginUpdateRecordV1;\n\t\treadonly scope?: PluginInstallationScopeV1;\n\t\treadonly scopeRef?: string;\n\t\treadonly signal?: AbortSignal;\n\t}): Promise<PluginInstallerResultV1>;\n\trollback(input: {\n\t\treadonly failed: PluginInstallationV1;\n\t\treadonly previous: PluginInstallationV1;\n\t\treadonly scope?: PluginInstallationScopeV1;\n\t\treadonly scopeRef?: string;\n\t\treadonly signal?: AbortSignal;\n\t}): Promise<PluginInstallerResultV1>;\n\t/** Remove one installed version after validating its opaque identity. */\n\tremove(input: {\n\t\treadonly installation: PluginInstallationV1;\n\t\treadonly scope?: PluginInstallationScopeV1;\n\t\treadonly scopeRef?: string;\n\t\treadonly signal?: AbortSignal;\n\t}): Promise<PluginInstallerResultV1>;\n}\n\nfunction opaqueInstallationRef(value: unknown): string {\n\tif (typeof value !== \"string\" || value.trim() === \"\" || value.length > MAX_INSTALLATION_REF_CHARS_V1)\n\t\tthrow new Error(\"installation reference is invalid\");\n\tif (/^(?:file:|[a-zA-Z]:[\\\\/]|[\\\\/]{1,2}|\\\\\\\\)/iu.test(value) || /\\s/u.test(value))\n\t\tthrow new Error(\"installation reference must be opaque\");\n\treturn value;\n}\n\nfunction opaqueScopeRef(value: unknown): string {\n\tif (typeof value !== \"string\" || value.trim() === \"\" || value.length > MAX_PLUGIN_SCOPE_REF_CHARS_V1)\n\t\tthrow new Error(\"plugin installation scope reference is invalid\");\n\tif (/^(?:file:|[a-zA-Z]:[\\\\/]|[\\\\/]{1,2}|\\\\\\\\)/iu.test(value) || /\\s/u.test(value))\n\t\tthrow new Error(\"plugin installation scope reference must be opaque\");\n\treturn value;\n}\n\nfunction installationFrom(\n\trecord: PluginUpdateRecordV1,\n\tinstallationRef: string,\n\tscopeIdentity: PluginScopeIdentityV1,\n\tstate: PluginInstallationV1[\"state\"],\n): PluginInstallationV1 {\n\treturn Object.freeze({\n\t\tversion: 1,\n\t\tpluginId: record.pluginId,\n\t\tpluginVersion: record.pluginVersion,\n\t\tmanifestDigest: record.manifestDigest,\n\t\tscope: scopeIdentity.scope,\n\t\tscopeRef: scopeIdentity.scopeRef,\n\t\tinstallationRef: opaqueInstallationRef(installationRef),\n\t\tstate,\n\t});\n}\n\nfunction cancelled(): PluginInstallerResultV1 {\n\treturn {\n\t\tstatus: \"cancelled\",\n\t\terror: {\n\t\t\tcode: \"cancelled\",\n\t\t\tmessage: \"Plugin installation operation was cancelled\",\n\t\t},\n\t};\n}\n\nfunction failure(code: PluginInstallerErrorCodeV1): PluginInstallerResultV1 {\n\treturn {\n\t\tstatus: \"failed\",\n\t\terror: {\n\t\t\tcode,\n\t\t\tmessage:\n\t\t\t\tcode === \"invalid_installation\"\n\t\t\t\t\t? \"The plugin installation handle is invalid\"\n\t\t\t\t\t: code === \"unsupported_scope\"\n\t\t\t\t\t\t? \"The plugin installer does not support this scope\"\n\t\t\t\t\t\t: code === \"install_failed\"\n\t\t\t\t\t\t\t? \"The host plugin installer failed\"\n\t\t\t\t\t\t\t: code === \"activation_failed\"\n\t\t\t\t\t\t\t\t? \"The host plugin activation failed\"\n\t\t\t\t\t\t\t\t: code === \"rollback_failed\"\n\t\t\t\t\t\t\t\t\t? \"The host plugin rollback failed\"\n\t\t\t\t\t\t\t\t\t: \"The host plugin uninstall failed\",\n\t\t},\n\t};\n}\n\nfunction validateInstallation(installation: PluginInstallationV1): void {\n\tif (\n\t\tinstallation.version !== 1 ||\n\t\ttypeof installation.pluginId !== \"string\" ||\n\t\ttypeof installation.pluginVersion !== \"string\" ||\n\t\ttypeof installation.manifestDigest !== \"string\" ||\n\t\tinstallation.pluginId.trim() === \"\" ||\n\t\tinstallation.pluginVersion.trim() === \"\" ||\n\t\tinstallation.manifestDigest.trim() === \"\"\n\t)\n\t\tthrow new Error(\"plugin installation handle is invalid\");\n\tif (installation.scope !== \"global\" && installation.scope !== \"project\")\n\t\tthrow new Error(\"plugin installation scope is invalid\");\n\tconst scopeRef =\n\t\tinstallation.scopeRef === undefined\n\t\t\t? installation.scope === \"global\"\n\t\t\t\t? DEFAULT_GLOBAL_PLUGIN_SCOPE_REF_V1\n\t\t\t\t: (() => {\n\t\t\t\t\t\tthrow new Error(\"project installation scope reference is required\");\n\t\t\t\t\t})()\n\t\t\t: opaqueScopeRef(installation.scopeRef);\n\tif (installation.scope === \"global\" && scopeRef !== DEFAULT_GLOBAL_PLUGIN_SCOPE_REF_V1)\n\t\tthrow new Error(\"plugin global installation scope reference is invalid\");\n\topaqueInstallationRef(installation.installationRef);\n}\n\nfunction ensureIdentity(\n\tinstallation: PluginInstallationV1,\n\trecord: PluginUpdateRecordV1,\n\tscopeIdentity: PluginScopeIdentityV1,\n): void {\n\tvalidateInstallation(installation);\n\tif (\n\t\tinstallation.pluginId !== record.pluginId ||\n\t\tinstallation.pluginVersion !== record.pluginVersion ||\n\t\tinstallation.manifestDigest !== record.manifestDigest ||\n\t\tinstallation.scope !== scopeIdentity.scope ||\n\t\t(installation.scopeRef ?? DEFAULT_GLOBAL_PLUGIN_SCOPE_REF_V1) !== scopeIdentity.scopeRef\n\t)\n\t\tthrow new Error(\"plugin installation identity mismatch\");\n}\n\nfunction normalizeScope(scope: PluginInstallationScopeV1 | undefined): PluginInstallationScopeV1 {\n\tif (scope === undefined) return \"global\";\n\tif (scope === \"global\" || scope === \"project\") return scope;\n\tthrow new Error(\"plugin installation scope is invalid\");\n}\n\nfunction normalizeScopeIdentity(\n\tscope: PluginInstallationScopeV1 | undefined,\n\tscopeRef: string | undefined,\n): PluginScopeIdentityV1 {\n\tconst normalizedScope = normalizeScope(scope);\n\tif (scopeRef === undefined) {\n\t\tif (normalizedScope !== \"global\") throw new Error(\"project installation scope reference is required\");\n\t\treturn Object.freeze({ scope: normalizedScope, scopeRef: DEFAULT_GLOBAL_PLUGIN_SCOPE_REF_V1 });\n\t}\n\tconst normalizedScopeRef = opaqueScopeRef(scopeRef);\n\tif (normalizedScope === \"global\" && normalizedScopeRef !== DEFAULT_GLOBAL_PLUGIN_SCOPE_REF_V1)\n\t\tthrow new Error(\"plugin global installation scope reference is invalid\");\n\treturn Object.freeze({ scope: normalizedScope, scopeRef: normalizedScopeRef });\n}\n\nfunction declaredScopes(host: PluginInstallHostV1): readonly PluginInstallationScopeV1[] {\n\tif (host.supportedScopes === undefined) return Object.freeze([\"global\"]);\n\tif (\n\t\t!Array.isArray(host.supportedScopes) ||\n\t\tnew Set(host.supportedScopes).size !== host.supportedScopes.length ||\n\t\thost.supportedScopes.some((scope) => scope !== \"global\" && scope !== \"project\")\n\t)\n\t\treturn Object.freeze([]);\n\treturn Object.freeze([...host.supportedScopes]);\n}\n\nfunction hostAcceptedScope(\n\tinstallation: { readonly scope?: PluginInstallationScopeV1; readonly scopeRef?: string },\n\tscopeIdentity: PluginScopeIdentityV1,\n): void {\n\tif (scopeIdentity.scope === \"global\" && installation.scope === undefined && installation.scopeRef === undefined)\n\t\treturn;\n\tif (installation.scope !== scopeIdentity.scope || installation.scopeRef !== scopeIdentity.scopeRef)\n\t\tthrow new Error(\"plugin installation scope mismatch\");\n}\n\nfunction ensureArtifactIdentity(artifact: PluginDistributionArtifactV1, record: PluginUpdateRecordV1): void {\n\tif (\n\t\tartifact.version !== 1 ||\n\t\tartifact.pluginId !== record.pluginId ||\n\t\tartifact.pluginVersion !== record.pluginVersion ||\n\t\tartifact.manifestDigest !== record.manifestDigest ||\n\t\ttypeof artifact.artifactRef !== \"string\" ||\n\t\tartifact.artifactRef.trim() === \"\"\n\t)\n\t\tthrow new Error(\"plugin distribution artifact identity mismatch\");\n\topaqueInstallationRef(artifact.artifactRef);\n}\n\nfunction isInvalidInstallationError(value: unknown): boolean {\n\treturn (\n\t\tvalue instanceof Error &&\n\t\t(value.message === \"plugin installation handle is invalid\" ||\n\t\t\tvalue.message === \"plugin installation scope is invalid\" ||\n\t\t\tvalue.message === \"plugin installation scope reference is invalid\" ||\n\t\t\tvalue.message === \"plugin installation scope reference must be opaque\" ||\n\t\t\tvalue.message === \"plugin global installation scope reference is invalid\" ||\n\t\t\tvalue.message === \"project installation scope reference is required\" ||\n\t\t\tvalue.message === \"plugin installation identity mismatch\" ||\n\t\t\tvalue.message === \"plugin installation scope mismatch\" ||\n\t\t\tvalue.message === \"plugin distribution artifact identity mismatch\")\n\t);\n}\n\nexport function createPluginInstallerV1(options: PluginInstallerOptionsV1): PluginInstallerV1 {\n\tconst supportedScopes = declaredScopes(options.host);\n\tconst supportsScope = (scope: PluginInstallationScopeV1): boolean => supportedScopes.includes(scope);\n\treturn {\n\t\tsupportedScopes,\n\t\tprepare(input) {\n\t\t\tconst staged = stagePluginUpdateV1({\n\t\t\t\tmanifest: input.manifest,\n\t\t\t\tsource: input.source,\n\t\t\t});\n\t\t\treturn verifyPluginUpdateV1({\n\t\t\t\trecord: staged,\n\t\t\t\thost: input.host,\n\t\t\t\texpectedDigest: input.expectedDigest,\n\t\t\t\tverifier: options.verifier,\n\t\t\t});\n\t\t},\n\t\tasync install(input) {\n\t\t\tif (input.signal?.aborted) return cancelled();\n\t\t\tlet scopeIdentity: PluginScopeIdentityV1;\n\t\t\ttry {\n\t\t\t\tscopeIdentity = normalizeScopeIdentity(input.scope, input.scopeRef);\n\t\t\t} catch {\n\t\t\t\treturn failure(\"invalid_installation\");\n\t\t\t}\n\t\t\tif (!supportsScope(scopeIdentity.scope)) return failure(\"unsupported_scope\");\n\t\t\tif (input.record.state !== \"verified\") return failure(\"invalid_installation\");\n\t\t\ttry {\n\t\t\t\tif (input.artifact !== undefined) ensureArtifactIdentity(input.artifact, input.record);\n\t\t\t\tconst installed = await options.host.install({\n\t\t\t\t\trecord: input.record,\n\t\t\t\t\tscope: scopeIdentity.scope,\n\t\t\t\t\tscopeRef: scopeIdentity.scopeRef,\n\t\t\t\t\t...(input.artifact === undefined ? {} : { artifact: input.artifact }),\n\t\t\t\t\tsignal: input.signal,\n\t\t\t\t});\n\t\t\t\thostAcceptedScope(installed, scopeIdentity);\n\t\t\t\treturn {\n\t\t\t\t\tstatus: \"succeeded\",\n\t\t\t\t\tinstallation: installationFrom(input.record, installed.installationRef, scopeIdentity, \"installed\"),\n\t\t\t\t};\n\t\t\t} catch (error) {\n\t\t\t\tif (isInvalidInstallationError(error)) return failure(\"invalid_installation\");\n\t\t\t\treturn input.signal?.aborted ? cancelled() : failure(\"install_failed\");\n\t\t\t}\n\t\t},\n\t\tasync activate(input) {\n\t\t\tif (input.signal?.aborted) return cancelled();\n\t\t\tlet scopeIdentity: PluginScopeIdentityV1;\n\t\t\ttry {\n\t\t\t\tscopeIdentity = normalizeScopeIdentity(input.scope, input.scopeRef);\n\t\t\t\tif (!supportsScope(scopeIdentity.scope)) return failure(\"unsupported_scope\");\n\t\t\t\tensureIdentity(input.installation, input.record, scopeIdentity);\n\t\t\t\tif (input.installation.state !== \"installed\" || input.record.state !== \"verified\")\n\t\t\t\t\treturn failure(\"invalid_installation\");\n\t\t\t\tawait options.host.activate({\n\t\t\t\t\tinstallation: input.installation,\n\t\t\t\t\trecord: input.record,\n\t\t\t\t\tscope: scopeIdentity.scope,\n\t\t\t\t\tscopeRef: scopeIdentity.scopeRef,\n\t\t\t\t\tsignal: input.signal,\n\t\t\t\t});\n\t\t\t\treturn {\n\t\t\t\t\tstatus: \"succeeded\",\n\t\t\t\t\tinstallation: Object.freeze({\n\t\t\t\t\t\t...input.installation,\n\t\t\t\t\t\tstate: \"active\" as const,\n\t\t\t\t\t}),\n\t\t\t\t};\n\t\t\t} catch (error) {\n\t\t\t\tif (isInvalidInstallationError(error)) return failure(\"invalid_installation\");\n\t\t\t\treturn input.signal?.aborted ? cancelled() : failure(\"activation_failed\");\n\t\t\t}\n\t\t},\n\t\tasync rollback(input) {\n\t\t\tif (input.signal?.aborted) return cancelled();\n\t\t\tlet scopeIdentity: PluginScopeIdentityV1;\n\t\t\ttry {\n\t\t\t\tscopeIdentity = normalizeScopeIdentity(input.scope, input.scopeRef);\n\t\t\t\tif (!supportsScope(scopeIdentity.scope)) return failure(\"unsupported_scope\");\n\t\t\t\tvalidateInstallation(input.failed);\n\t\t\t\tvalidateInstallation(input.previous);\n\t\t\t\tif (input.failed.state !== \"installed\" && input.failed.state !== \"active\")\n\t\t\t\t\treturn failure(\"invalid_installation\");\n\t\t\t\tif (input.previous.state !== \"active\") return failure(\"invalid_installation\");\n\t\t\t\tif (\n\t\t\t\t\tinput.failed.pluginId !== input.previous.pluginId ||\n\t\t\t\t\tinput.failed.scope !== scopeIdentity.scope ||\n\t\t\t\t\tinput.previous.scope !== scopeIdentity.scope ||\n\t\t\t\t\t(input.failed.scopeRef ?? DEFAULT_GLOBAL_PLUGIN_SCOPE_REF_V1) !== scopeIdentity.scopeRef ||\n\t\t\t\t\t(input.previous.scopeRef ?? DEFAULT_GLOBAL_PLUGIN_SCOPE_REF_V1) !== scopeIdentity.scopeRef\n\t\t\t\t)\n\t\t\t\t\treturn failure(\"invalid_installation\");\n\t\t\t\tawait options.host.rollback({\n\t\t\t\t\tfailed: input.failed,\n\t\t\t\t\tprevious: input.previous,\n\t\t\t\t\tscope: scopeIdentity.scope,\n\t\t\t\t\tscopeRef: scopeIdentity.scopeRef,\n\t\t\t\t\tsignal: input.signal,\n\t\t\t\t});\n\t\t\t\treturn {\n\t\t\t\t\tstatus: \"succeeded\",\n\t\t\t\t\tinstallation: Object.freeze({\n\t\t\t\t\t\t...input.previous,\n\t\t\t\t\t\tstate: \"active\" as const,\n\t\t\t\t\t}),\n\t\t\t\t};\n\t\t\t} catch (error) {\n\t\t\t\tif (isInvalidInstallationError(error)) return failure(\"invalid_installation\");\n\t\t\t\treturn input.signal?.aborted ? cancelled() : failure(\"rollback_failed\");\n\t\t\t}\n\t\t},\n\t\tasync remove(input) {\n\t\t\tif (input.signal?.aborted) return cancelled();\n\t\t\tlet scopeIdentity: PluginScopeIdentityV1;\n\t\t\ttry {\n\t\t\t\tscopeIdentity = normalizeScopeIdentity(input.scope, input.scopeRef);\n\t\t\t\tif (!supportsScope(scopeIdentity.scope)) return failure(\"unsupported_scope\");\n\t\t\t\tvalidateInstallation(input.installation);\n\t\t\t} catch {\n\t\t\t\treturn failure(\"invalid_installation\");\n\t\t\t}\n\t\t\tif (\n\t\t\t\tinput.installation.state !== \"installed\" &&\n\t\t\t\tinput.installation.state !== \"active\" &&\n\t\t\t\tinput.installation.state !== \"retained\"\n\t\t\t)\n\t\t\t\treturn failure(\"invalid_installation\");\n\t\t\tif (\n\t\t\t\tinput.installation.scope !== scopeIdentity.scope ||\n\t\t\t\t(input.installation.scopeRef ?? DEFAULT_GLOBAL_PLUGIN_SCOPE_REF_V1) !== scopeIdentity.scopeRef\n\t\t\t)\n\t\t\t\treturn failure(\"invalid_installation\");\n\t\t\tif (options.host.uninstall === undefined) return failure(\"uninstall_failed\");\n\t\t\ttry {\n\t\t\t\tawait options.host.uninstall({\n\t\t\t\t\tinstallation: input.installation,\n\t\t\t\t\tscope: scopeIdentity.scope,\n\t\t\t\t\tscopeRef: scopeIdentity.scopeRef,\n\t\t\t\t\tsignal: input.signal,\n\t\t\t\t});\n\t\t\t\treturn {\n\t\t\t\t\tstatus: \"succeeded\",\n\t\t\t\t\tinstallation: Object.freeze({\n\t\t\t\t\t\t...input.installation,\n\t\t\t\t\t\tstate: \"retained\" as const,\n\t\t\t\t\t}),\n\t\t\t\t};\n\t\t\t} catch {\n\t\t\t\treturn input.signal?.aborted ? cancelled() : failure(\"uninstall_failed\");\n\t\t\t}\n\t\t},\n\t};\n}\n"]}

package/dist/plugins/ecosystem/installer.js

@@ -0,0 +1,316 @@
+import { stagePluginUpdateV1, verifyPluginUpdateV1 } from "./updates.js";
+const MAX_INSTALLATION_REF_CHARS_V1 = 2048;
+export const MAX_PLUGIN_SCOPE_REF_CHARS_V1 = 2048;
+/** Stable host namespace for installations that are not project-local. */
+export const DEFAULT_GLOBAL_PLUGIN_SCOPE_REF_V1 = "global:default";
+function opaqueInstallationRef(value) {
+    if (typeof value !== "string" || value.trim() === "" || value.length > MAX_INSTALLATION_REF_CHARS_V1)
+        throw new Error("installation reference is invalid");
+    if (/^(?:file:|[a-zA-Z]:[\\/]|[\\/]{1,2}|\\\\)/iu.test(value) || /\s/u.test(value))
+        throw new Error("installation reference must be opaque");
+    return value;
+}
+function opaqueScopeRef(value) {
+    if (typeof value !== "string" || value.trim() === "" || value.length > MAX_PLUGIN_SCOPE_REF_CHARS_V1)
+        throw new Error("plugin installation scope reference is invalid");
+    if (/^(?:file:|[a-zA-Z]:[\\/]|[\\/]{1,2}|\\\\)/iu.test(value) || /\s/u.test(value))
+        throw new Error("plugin installation scope reference must be opaque");
+    return value;
+}
+function installationFrom(record, installationRef, scopeIdentity, state) {
+    return Object.freeze({
+        version: 1,
+        pluginId: record.pluginId,
+        pluginVersion: record.pluginVersion,
+        manifestDigest: record.manifestDigest,
+        scope: scopeIdentity.scope,
+        scopeRef: scopeIdentity.scopeRef,
+        installationRef: opaqueInstallationRef(installationRef),
+        state,
+    });
+}
+function cancelled() {
+    return {
+        status: "cancelled",
+        error: {
+            code: "cancelled",
+            message: "Plugin installation operation was cancelled",
+        },
+    };
+}
+function failure(code) {
+    return {
+        status: "failed",
+        error: {
+            code,
+            message: code === "invalid_installation"
+                ? "The plugin installation handle is invalid"
+                : code === "unsupported_scope"
+                    ? "The plugin installer does not support this scope"
+                    : code === "install_failed"
+                        ? "The host plugin installer failed"
+                        : code === "activation_failed"
+                            ? "The host plugin activation failed"
+                            : code === "rollback_failed"
+                                ? "The host plugin rollback failed"
+                                : "The host plugin uninstall failed",
+        },
+    };
+}
+function validateInstallation(installation) {
+    if (installation.version !== 1 ||
+        typeof installation.pluginId !== "string" ||
+        typeof installation.pluginVersion !== "string" ||
+        typeof installation.manifestDigest !== "string" ||
+        installation.pluginId.trim() === "" ||
+        installation.pluginVersion.trim() === "" ||
+        installation.manifestDigest.trim() === "")
+        throw new Error("plugin installation handle is invalid");
+    if (installation.scope !== "global" && installation.scope !== "project")
+        throw new Error("plugin installation scope is invalid");
+    const scopeRef = installation.scopeRef === undefined
+        ? installation.scope === "global"
+            ? DEFAULT_GLOBAL_PLUGIN_SCOPE_REF_V1
+            : (() => {
+                throw new Error("project installation scope reference is required");
+            })()
+        : opaqueScopeRef(installation.scopeRef);
+    if (installation.scope === "global" && scopeRef !== DEFAULT_GLOBAL_PLUGIN_SCOPE_REF_V1)
+        throw new Error("plugin global installation scope reference is invalid");
+    opaqueInstallationRef(installation.installationRef);
+}
+function ensureIdentity(installation, record, scopeIdentity) {
+    validateInstallation(installation);
+    if (installation.pluginId !== record.pluginId ||
+        installation.pluginVersion !== record.pluginVersion ||
+        installation.manifestDigest !== record.manifestDigest ||
+        installation.scope !== scopeIdentity.scope ||
+        (installation.scopeRef ?? DEFAULT_GLOBAL_PLUGIN_SCOPE_REF_V1) !== scopeIdentity.scopeRef)
+        throw new Error("plugin installation identity mismatch");
+}
+function normalizeScope(scope) {
+    if (scope === undefined)
+        return "global";
+    if (scope === "global" || scope === "project")
+        return scope;
+    throw new Error("plugin installation scope is invalid");
+}
+function normalizeScopeIdentity(scope, scopeRef) {
+    const normalizedScope = normalizeScope(scope);
+    if (scopeRef === undefined) {
+        if (normalizedScope !== "global")
+            throw new Error("project installation scope reference is required");
+        return Object.freeze({ scope: normalizedScope, scopeRef: DEFAULT_GLOBAL_PLUGIN_SCOPE_REF_V1 });
+    }
+    const normalizedScopeRef = opaqueScopeRef(scopeRef);
+    if (normalizedScope === "global" && normalizedScopeRef !== DEFAULT_GLOBAL_PLUGIN_SCOPE_REF_V1)
+        throw new Error("plugin global installation scope reference is invalid");
+    return Object.freeze({ scope: normalizedScope, scopeRef: normalizedScopeRef });
+}
+function declaredScopes(host) {
+    if (host.supportedScopes === undefined)
+        return Object.freeze(["global"]);
+    if (!Array.isArray(host.supportedScopes) ||
+        new Set(host.supportedScopes).size !== host.supportedScopes.length ||
+        host.supportedScopes.some((scope) => scope !== "global" && scope !== "project"))
+        return Object.freeze([]);
+    return Object.freeze([...host.supportedScopes]);
+}
+function hostAcceptedScope(installation, scopeIdentity) {
+    if (scopeIdentity.scope === "global" && installation.scope === undefined && installation.scopeRef === undefined)
+        return;
+    if (installation.scope !== scopeIdentity.scope || installation.scopeRef !== scopeIdentity.scopeRef)
+        throw new Error("plugin installation scope mismatch");
+}
+function ensureArtifactIdentity(artifact, record) {
+    if (artifact.version !== 1 ||
+        artifact.pluginId !== record.pluginId ||
+        artifact.pluginVersion !== record.pluginVersion ||
+        artifact.manifestDigest !== record.manifestDigest ||
+        typeof artifact.artifactRef !== "string" ||
+        artifact.artifactRef.trim() === "")
+        throw new Error("plugin distribution artifact identity mismatch");
+    opaqueInstallationRef(artifact.artifactRef);
+}
+function isInvalidInstallationError(value) {
+    return (value instanceof Error &&
+        (value.message === "plugin installation handle is invalid" ||
+            value.message === "plugin installation scope is invalid" ||
+            value.message === "plugin installation scope reference is invalid" ||
+            value.message === "plugin installation scope reference must be opaque" ||
+            value.message === "plugin global installation scope reference is invalid" ||
+            value.message === "project installation scope reference is required" ||
+            value.message === "plugin installation identity mismatch" ||
+            value.message === "plugin installation scope mismatch" ||
+            value.message === "plugin distribution artifact identity mismatch"));
+}
+export function createPluginInstallerV1(options) {
+    const supportedScopes = declaredScopes(options.host);
+    const supportsScope = (scope) => supportedScopes.includes(scope);
+    return {
+        supportedScopes,
+        prepare(input) {
+            const staged = stagePluginUpdateV1({
+                manifest: input.manifest,
+                source: input.source,
+            });
+            return verifyPluginUpdateV1({
+                record: staged,
+                host: input.host,
+                expectedDigest: input.expectedDigest,
+                verifier: options.verifier,
+            });
+        },
+        async install(input) {
+            if (input.signal?.aborted)
+                return cancelled();
+            let scopeIdentity;
+            try {
+                scopeIdentity = normalizeScopeIdentity(input.scope, input.scopeRef);
+            }
+            catch {
+                return failure("invalid_installation");
+            }
+            if (!supportsScope(scopeIdentity.scope))
+                return failure("unsupported_scope");
+            if (input.record.state !== "verified")
+                return failure("invalid_installation");
+            try {
+                if (input.artifact !== undefined)
+                    ensureArtifactIdentity(input.artifact, input.record);
+                const installed = await options.host.install({
+                    record: input.record,
+                    scope: scopeIdentity.scope,
+                    scopeRef: scopeIdentity.scopeRef,
+                    ...(input.artifact === undefined ? {} : { artifact: input.artifact }),
+                    signal: input.signal,
+                });
+                hostAcceptedScope(installed, scopeIdentity);
+                return {
+                    status: "succeeded",
+                    installation: installationFrom(input.record, installed.installationRef, scopeIdentity, "installed"),
+                };
+            }
+            catch (error) {
+                if (isInvalidInstallationError(error))
+                    return failure("invalid_installation");
+                return input.signal?.aborted ? cancelled() : failure("install_failed");
+            }
+        },
+        async activate(input) {
+            if (input.signal?.aborted)
+                return cancelled();
+            let scopeIdentity;
+            try {
+                scopeIdentity = normalizeScopeIdentity(input.scope, input.scopeRef);
+                if (!supportsScope(scopeIdentity.scope))
+                    return failure("unsupported_scope");
+                ensureIdentity(input.installation, input.record, scopeIdentity);
+                if (input.installation.state !== "installed" || input.record.state !== "verified")
+                    return failure("invalid_installation");
+                await options.host.activate({
+                    installation: input.installation,
+                    record: input.record,
+                    scope: scopeIdentity.scope,
+                    scopeRef: scopeIdentity.scopeRef,
+                    signal: input.signal,
+                });
+                return {
+                    status: "succeeded",
+                    installation: Object.freeze({
+                        ...input.installation,
+                        state: "active",
+                    }),
+                };
+            }
+            catch (error) {
+                if (isInvalidInstallationError(error))
+                    return failure("invalid_installation");
+                return input.signal?.aborted ? cancelled() : failure("activation_failed");
+            }
+        },
+        async rollback(input) {
+            if (input.signal?.aborted)
+                return cancelled();
+            let scopeIdentity;
+            try {
+                scopeIdentity = normalizeScopeIdentity(input.scope, input.scopeRef);
+                if (!supportsScope(scopeIdentity.scope))
+                    return failure("unsupported_scope");
+                validateInstallation(input.failed);
+                validateInstallation(input.previous);
+                if (input.failed.state !== "installed" && input.failed.state !== "active")
+                    return failure("invalid_installation");
+                if (input.previous.state !== "active")
+                    return failure("invalid_installation");
+                if (input.failed.pluginId !== input.previous.pluginId ||
+                    input.failed.scope !== scopeIdentity.scope ||
+                    input.previous.scope !== scopeIdentity.scope ||
+                    (input.failed.scopeRef ?? DEFAULT_GLOBAL_PLUGIN_SCOPE_REF_V1) !== scopeIdentity.scopeRef ||
+                    (input.previous.scopeRef ?? DEFAULT_GLOBAL_PLUGIN_SCOPE_REF_V1) !== scopeIdentity.scopeRef)
+                    return failure("invalid_installation");
+                await options.host.rollback({
+                    failed: input.failed,
+                    previous: input.previous,
+                    scope: scopeIdentity.scope,
+                    scopeRef: scopeIdentity.scopeRef,
+                    signal: input.signal,
+                });
+                return {
+                    status: "succeeded",
+                    installation: Object.freeze({
+                        ...input.previous,
+                        state: "active",
+                    }),
+                };
+            }
+            catch (error) {
+                if (isInvalidInstallationError(error))
+                    return failure("invalid_installation");
+                return input.signal?.aborted ? cancelled() : failure("rollback_failed");
+            }
+        },
+        async remove(input) {
+            if (input.signal?.aborted)
+                return cancelled();
+            let scopeIdentity;
+            try {
+                scopeIdentity = normalizeScopeIdentity(input.scope, input.scopeRef);
+                if (!supportsScope(scopeIdentity.scope))
+                    return failure("unsupported_scope");
+                validateInstallation(input.installation);
+            }
+            catch {
+                return failure("invalid_installation");
+            }
+            if (input.installation.state !== "installed" &&
+                input.installation.state !== "active" &&
+                input.installation.state !== "retained")
+                return failure("invalid_installation");
+            if (input.installation.scope !== scopeIdentity.scope ||
+                (input.installation.scopeRef ?? DEFAULT_GLOBAL_PLUGIN_SCOPE_REF_V1) !== scopeIdentity.scopeRef)
+                return failure("invalid_installation");
+            if (options.host.uninstall === undefined)
+                return failure("uninstall_failed");
+            try {
+                await options.host.uninstall({
+                    installation: input.installation,
+                    scope: scopeIdentity.scope,
+                    scopeRef: scopeIdentity.scopeRef,
+                    signal: input.signal,
+                });
+                return {
+                    status: "succeeded",
+                    installation: Object.freeze({
+                        ...input.installation,
+                        state: "retained",
+                    }),
+                };
+            }
+            catch {
+                return input.signal?.aborted ? cancelled() : failure("uninstall_failed");
+            }
+        },
+    };
+}
+//# sourceMappingURL=installer.js.map

package/dist/plugins/ecosystem/installer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"installer.js","sourceRoot":"","sources":["../../../src/plugins/ecosystem/installer.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,mBAAmB,EAA6B,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAEpG,MAAM,6BAA6B,GAAG,IAAI,CAAC;AAC3C,MAAM,CAAC,MAAM,6BAA6B,GAAG,IAAI,CAAC;AAClD,0EAA0E;AAC1E,MAAM,CAAC,MAAM,kCAAkC,GAAG,gBAAgB,CAAC;AA+InE,SAAS,qBAAqB,CAAC,KAAc,EAAU;IACtD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC,MAAM,GAAG,6BAA6B;QACnG,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACtD,IAAI,6CAA6C,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;QACjF,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC1D,OAAO,KAAK,CAAC;AAAA,CACb;AAED,SAAS,cAAc,CAAC,KAAc,EAAU;IAC/C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC,MAAM,GAAG,6BAA6B;QACnG,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACnE,IAAI,6CAA6C,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;QACjF,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACvE,OAAO,KAAK,CAAC;AAAA,CACb;AAED,SAAS,gBAAgB,CACxB,MAA4B,EAC5B,eAAuB,EACvB,aAAoC,EACpC,KAAoC,EACb;IACvB,OAAO,MAAM,CAAC,MAAM,CAAC;QACpB,OAAO,EAAE,CAAC;QACV,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,KAAK,EAAE,aAAa,CAAC,KAAK;QAC1B,QAAQ,EAAE,aAAa,CAAC,QAAQ;QAChC,eAAe,EAAE,qBAAqB,CAAC,eAAe,CAAC;QACvD,KAAK;KACL,CAAC,CAAC;AAAA,CACH;AAED,SAAS,SAAS,GAA4B;IAC7C,OAAO;QACN,MAAM,EAAE,WAAW;QACnB,KAAK,EAAE;YACN,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,6CAA6C;SACtD;KACD,CAAC;AAAA,CACF;AAED,SAAS,OAAO,CAAC,IAAgC,EAA2B;IAC3E,OAAO;QACN,MAAM,EAAE,QAAQ;QAChB,KAAK,EAAE;YACN,IAAI;YACJ,OAAO,EACN,IAAI,KAAK,sBAAsB;gBAC9B,CAAC,CAAC,2CAA2C;gBAC7C,CAAC,CAAC,IAAI,KAAK,mBAAmB;oBAC7B,CAAC,CAAC,kDAAkD;oBACpD,CAAC,CAAC,IAAI,KAAK,gBAAgB;wBAC1B,CAAC,CAAC,kCAAkC;wBACpC,CAAC,CAAC,IAAI,KAAK,mBAAmB;4BAC7B,CAAC,CAAC,mCAAmC;4BACrC,CAAC,CAAC,IAAI,KAAK,iBAAiB;gCAC3B,CAAC,CAAC,iCAAiC;gCACnC,CAAC,CAAC,kCAAkC;SAC1C;KACD,CAAC;AAAA,CACF;AAED,SAAS,oBAAoB,CAAC,YAAkC,EAAQ;IACvE,IACC,YAAY,CAAC,OAAO,KAAK,CAAC;QAC1B,OAAO,YAAY,CAAC,QAAQ,KAAK,QAAQ;QACzC,OAAO,YAAY,CAAC,aAAa,KAAK,QAAQ;QAC9C,OAAO,YAAY,CAAC,cAAc,KAAK,QAAQ;QAC/C,YAAY,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE;QACnC,YAAY,CAAC,aAAa,CAAC,IAAI,EAAE,KAAK,EAAE;QACxC,YAAY,CAAC,cAAc,CAAC,IAAI,EAAE,KAAK,EAAE;QAEzC,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC1D,IAAI,YAAY,CAAC,KAAK,KAAK,QAAQ,IAAI,YAAY,CAAC,KAAK,KAAK,SAAS;QACtE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IACzD,MAAM,QAAQ,GACb,YAAY,CAAC,QAAQ,KAAK,SAAS;QAClC,CAAC,CAAC,YAAY,CAAC,KAAK,KAAK,QAAQ;YAChC,CAAC,CAAC,kCAAkC;YACpC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;gBACP,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;YAAA,CACpE,CAAC,EAAE;QACN,CAAC,CAAC,cAAc,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IAC1C,IAAI,YAAY,CAAC,KAAK,KAAK,QAAQ,IAAI,QAAQ,KAAK,kCAAkC;QACrF,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC1E,qBAAqB,CAAC,YAAY,CAAC,eAAe,CAAC,CAAC;AAAA,CACpD;AAED,SAAS,cAAc,CACtB,YAAkC,EAClC,MAA4B,EAC5B,aAAoC,EAC7B;IACP,oBAAoB,CAAC,YAAY,CAAC,CAAC;IACnC,IACC,YAAY,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ;QACzC,YAAY,CAAC,aAAa,KAAK,MAAM,CAAC,aAAa;QACnD,YAAY,CAAC,cAAc,KAAK,MAAM,CAAC,cAAc;QACrD,YAAY,CAAC,KAAK,KAAK,aAAa,CAAC,KAAK;QAC1C,CAAC,YAAY,CAAC,QAAQ,IAAI,kCAAkC,CAAC,KAAK,aAAa,CAAC,QAAQ;QAExF,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;AAAA,CAC1D;AAED,SAAS,cAAc,CAAC,KAA4C,EAA6B;IAChG,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IACzC,IAAI,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC5D,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;AAAA,CACxD;AAED,SAAS,sBAAsB,CAC9B,KAA4C,EAC5C,QAA4B,EACJ;IACxB,MAAM,eAAe,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;IAC9C,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC5B,IAAI,eAAe,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACtG,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,QAAQ,EAAE,kCAAkC,EAAE,CAAC,CAAC;IAChG,CAAC;IACD,MAAM,kBAAkB,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;IACpD,IAAI,eAAe,KAAK,QAAQ,IAAI,kBAAkB,KAAK,kCAAkC;QAC5F,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC1E,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,QAAQ,EAAE,kBAAkB,EAAE,CAAC,CAAC;AAAA,CAC/E;AAED,SAAS,cAAc,CAAC,IAAyB,EAAwC;IACxF,IAAI,IAAI,CAAC,eAAe,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;IACzE,IACC,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC;QACpC,IAAI,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,eAAe,CAAC,MAAM;QAClE,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,SAAS,CAAC;QAE/E,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC1B,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC;AAAA,CAChD;AAED,SAAS,iBAAiB,CACzB,YAAwF,EACxF,aAAoC,EAC7B;IACP,IAAI,aAAa,CAAC,KAAK,KAAK,QAAQ,IAAI,YAAY,CAAC,KAAK,KAAK,SAAS,IAAI,YAAY,CAAC,QAAQ,KAAK,SAAS;QAC9G,OAAO;IACR,IAAI,YAAY,CAAC,KAAK,KAAK,aAAa,CAAC,KAAK,IAAI,YAAY,CAAC,QAAQ,KAAK,aAAa,CAAC,QAAQ;QACjG,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;AAAA,CACvD;AAED,SAAS,sBAAsB,CAAC,QAAsC,EAAE,MAA4B,EAAQ;IAC3G,IACC,QAAQ,CAAC,OAAO,KAAK,CAAC;QACtB,QAAQ,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ;QACrC,QAAQ,CAAC,aAAa,KAAK,MAAM,CAAC,aAAa;QAC/C,QAAQ,CAAC,cAAc,KAAK,MAAM,CAAC,cAAc;QACjD,OAAO,QAAQ,CAAC,WAAW,KAAK,QAAQ;QACxC,QAAQ,CAAC,WAAW,CAAC,IAAI,EAAE,KAAK,EAAE;QAElC,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACnE,qBAAqB,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAAA,CAC5C;AAED,SAAS,0BAA0B,CAAC,KAAc,EAAW;IAC5D,OAAO,CACN,KAAK,YAAY,KAAK;QACtB,CAAC,KAAK,CAAC,OAAO,KAAK,uCAAuC;YACzD,KAAK,CAAC,OAAO,KAAK,sCAAsC;YACxD,KAAK,CAAC,OAAO,KAAK,gDAAgD;YAClE,KAAK,CAAC,OAAO,KAAK,oDAAoD;YACtE,KAAK,CAAC,OAAO,KAAK,uDAAuD;YACzE,KAAK,CAAC,OAAO,KAAK,kDAAkD;YACpE,KAAK,CAAC,OAAO,KAAK,uCAAuC;YACzD,KAAK,CAAC,OAAO,KAAK,oCAAoC;YACtD,KAAK,CAAC,OAAO,KAAK,gDAAgD,CAAC,CACpE,CAAC;AAAA,CACF;AAED,MAAM,UAAU,uBAAuB,CAAC,OAAiC,EAAqB;IAC7F,MAAM,eAAe,GAAG,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACrD,MAAM,aAAa,GAAG,CAAC,KAAgC,EAAW,EAAE,CAAC,eAAe,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACrG,OAAO;QACN,eAAe;QACf,OAAO,CAAC,KAAK,EAAE;YACd,MAAM,MAAM,GAAG,mBAAmB,CAAC;gBAClC,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,MAAM,EAAE,KAAK,CAAC,MAAM;aACpB,CAAC,CAAC;YACH,OAAO,oBAAoB,CAAC;gBAC3B,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,cAAc,EAAE,KAAK,CAAC,cAAc;gBACpC,QAAQ,EAAE,OAAO,CAAC,QAAQ;aAC1B,CAAC,CAAC;QAAA,CACH;QACD,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE;YACpB,IAAI,KAAK,CAAC,MAAM,EAAE,OAAO;gBAAE,OAAO,SAAS,EAAE,CAAC;YAC9C,IAAI,aAAoC,CAAC;YACzC,IAAI,CAAC;gBACJ,aAAa,GAAG,sBAAsB,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;YACrE,CAAC;YAAC,MAAM,CAAC;gBACR,OAAO,OAAO,CAAC,sBAAsB,CAAC,CAAC;YACxC,CAAC;YACD,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,KAAK,CAAC;gBAAE,OAAO,OAAO,CAAC,mBAAmB,CAAC,CAAC;YAC7E,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,KAAK,UAAU;gBAAE,OAAO,OAAO,CAAC,sBAAsB,CAAC,CAAC;YAC9E,IAAI,CAAC;gBACJ,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS;oBAAE,sBAAsB,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;gBACvF,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC;oBAC5C,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,KAAK,EAAE,aAAa,CAAC,KAAK;oBAC1B,QAAQ,EAAE,aAAa,CAAC,QAAQ;oBAChC,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC;oBACrE,MAAM,EAAE,KAAK,CAAC,MAAM;iBACpB,CAAC,CAAC;gBACH,iBAAiB,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;gBAC5C,OAAO;oBACN,MAAM,EAAE,WAAW;oBACnB,YAAY,EAAE,gBAAgB,CAAC,KAAK,CAAC,MAAM,EAAE,SAAS,CAAC,eAAe,EAAE,aAAa,EAAE,WAAW,CAAC;iBACnG,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,IAAI,0BAA0B,CAAC,KAAK,CAAC;oBAAE,OAAO,OAAO,CAAC,sBAAsB,CAAC,CAAC;gBAC9E,OAAO,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;YACxE,CAAC;QAAA,CACD;QACD,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE;YACrB,IAAI,KAAK,CAAC,MAAM,EAAE,OAAO;gBAAE,OAAO,SAAS,EAAE,CAAC;YAC9C,IAAI,aAAoC,CAAC;YACzC,IAAI,CAAC;gBACJ,aAAa,GAAG,sBAAsB,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;gBACpE,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,KAAK,CAAC;oBAAE,OAAO,OAAO,CAAC,mBAAmB,CAAC,CAAC;gBAC7E,cAAc,CAAC,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;gBAChE,IAAI,KAAK,CAAC,YAAY,CAAC,KAAK,KAAK,WAAW,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,KAAK,UAAU;oBAChF,OAAO,OAAO,CAAC,sBAAsB,CAAC,CAAC;gBACxC,MAAM,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC;oBAC3B,YAAY,EAAE,KAAK,CAAC,YAAY;oBAChC,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,KAAK,EAAE,aAAa,CAAC,KAAK;oBAC1B,QAAQ,EAAE,aAAa,CAAC,QAAQ;oBAChC,MAAM,EAAE,KAAK,CAAC,MAAM;iBACpB,CAAC,CAAC;gBACH,OAAO;oBACN,MAAM,EAAE,WAAW;oBACnB,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC;wBAC3B,GAAG,KAAK,CAAC,YAAY;wBACrB,KAAK,EAAE,QAAiB;qBACxB,CAAC;iBACF,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,IAAI,0BAA0B,CAAC,KAAK,CAAC;oBAAE,OAAO,OAAO,CAAC,sBAAsB,CAAC,CAAC;gBAC9E,OAAO,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;YAC3E,CAAC;QAAA,CACD;QACD,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE;YACrB,IAAI,KAAK,CAAC,MAAM,EAAE,OAAO;gBAAE,OAAO,SAAS,EAAE,CAAC;YAC9C,IAAI,aAAoC,CAAC;YACzC,IAAI,CAAC;gBACJ,aAAa,GAAG,sBAAsB,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;gBACpE,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,KAAK,CAAC;oBAAE,OAAO,OAAO,CAAC,mBAAmB,CAAC,CAAC;gBAC7E,oBAAoB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;gBACnC,oBAAoB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;gBACrC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,KAAK,WAAW,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,KAAK,QAAQ;oBACxE,OAAO,OAAO,CAAC,sBAAsB,CAAC,CAAC;gBACxC,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,KAAK,QAAQ;oBAAE,OAAO,OAAO,CAAC,sBAAsB,CAAC,CAAC;gBAC9E,IACC,KAAK,CAAC,MAAM,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ,CAAC,QAAQ;oBACjD,KAAK,CAAC,MAAM,CAAC,KAAK,KAAK,aAAa,CAAC,KAAK;oBAC1C,KAAK,CAAC,QAAQ,CAAC,KAAK,KAAK,aAAa,CAAC,KAAK;oBAC5C,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,IAAI,kCAAkC,CAAC,KAAK,aAAa,CAAC,QAAQ;oBACxF,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,IAAI,kCAAkC,CAAC,KAAK,aAAa,CAAC,QAAQ;oBAE1F,OAAO,OAAO,CAAC,sBAAsB,CAAC,CAAC;gBACxC,MAAM,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC;oBAC3B,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;oBACxB,KAAK,EAAE,aAAa,CAAC,KAAK;oBAC1B,QAAQ,EAAE,aAAa,CAAC,QAAQ;oBAChC,MAAM,EAAE,KAAK,CAAC,MAAM;iBACpB,CAAC,CAAC;gBACH,OAAO;oBACN,MAAM,EAAE,WAAW;oBACnB,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC;wBAC3B,GAAG,KAAK,CAAC,QAAQ;wBACjB,KAAK,EAAE,QAAiB;qBACxB,CAAC;iBACF,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,IAAI,0BAA0B,CAAC,KAAK,CAAC;oBAAE,OAAO,OAAO,CAAC,sBAAsB,CAAC,CAAC;gBAC9E,OAAO,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;YACzE,CAAC;QAAA,CACD;QACD,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE;YACnB,IAAI,KAAK,CAAC,MAAM,EAAE,OAAO;gBAAE,OAAO,SAAS,EAAE,CAAC;YAC9C,IAAI,aAAoC,CAAC;YACzC,IAAI,CAAC;gBACJ,aAAa,GAAG,sBAAsB,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;gBACpE,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,KAAK,CAAC;oBAAE,OAAO,OAAO,CAAC,mBAAmB,CAAC,CAAC;gBAC7E,oBAAoB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;YAC1C,CAAC;YAAC,MAAM,CAAC;gBACR,OAAO,OAAO,CAAC,sBAAsB,CAAC,CAAC;YACxC,CAAC;YACD,IACC,KAAK,CAAC,YAAY,CAAC,KAAK,KAAK,WAAW;gBACxC,KAAK,CAAC,YAAY,CAAC,KAAK,KAAK,QAAQ;gBACrC,KAAK,CAAC,YAAY,CAAC,KAAK,KAAK,UAAU;gBAEvC,OAAO,OAAO,CAAC,sBAAsB,CAAC,CAAC;YACxC,IACC,KAAK,CAAC,YAAY,CAAC,KAAK,KAAK,aAAa,CAAC,KAAK;gBAChD,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,IAAI,kCAAkC,CAAC,KAAK,aAAa,CAAC,QAAQ;gBAE9F,OAAO,OAAO,CAAC,sBAAsB,CAAC,CAAC;YACxC,IAAI,OAAO,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS;gBAAE,OAAO,OAAO,CAAC,kBAAkB,CAAC,CAAC;YAC7E,IAAI,CAAC;gBACJ,MAAM,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC;oBAC5B,YAAY,EAAE,KAAK,CAAC,YAAY;oBAChC,KAAK,EAAE,aAAa,CAAC,KAAK;oBAC1B,QAAQ,EAAE,aAAa,CAAC,QAAQ;oBAChC,MAAM,EAAE,KAAK,CAAC,MAAM;iBACpB,CAAC,CAAC;gBACH,OAAO;oBACN,MAAM,EAAE,WAAW;oBACnB,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC;wBAC3B,GAAG,KAAK,CAAC,YAAY;wBACrB,KAAK,EAAE,UAAmB;qBAC1B,CAAC;iBACF,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACR,OAAO,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;YAC1E,CAAC;QAAA,CACD;KACD,CAAC;AAAA,CACF","sourcesContent":["import type { PluginDistributionArtifactV1 } from \"./distribution.ts\";\nimport type { HostFactsV1, PluginSourceVerifierV1, PluginUpdateRecordV1 } from \"./types.ts\";\n\nimport { stagePluginUpdateV1, type UpdateVerificationV1, verifyPluginUpdateV1 } from \"./updates.ts\";\n\nconst MAX_INSTALLATION_REF_CHARS_V1 = 2048;\nexport const MAX_PLUGIN_SCOPE_REF_CHARS_V1 = 2048;\n/** Stable host namespace for installations that are not project-local. */\nexport const DEFAULT_GLOBAL_PLUGIN_SCOPE_REF_V1 = \"global:default\";\n\nexport type PluginInstallationScopeV1 = \"global\" | \"project\";\n\ninterface PluginScopeIdentityV1 {\n\treadonly scope: PluginInstallationScopeV1;\n\t/** Opaque host namespace; it must never disclose a local project path. */\n\treadonly scopeRef: string;\n}\n\nexport interface PluginInstallationV1 {\n\treadonly version: 1;\n\treadonly pluginId: string;\n\treadonly pluginVersion: string;\n\treadonly manifestDigest: string;\n\t/** The host installation namespace. It is part of the opaque installation identity. */\n\treadonly scope: PluginInstallationScopeV1;\n\t/** Concrete host namespace that distinguishes global and individual project installations. */\n\treadonly scopeRef?: string;\n\t/** Opaque host-owned installation handle; never a local path. */\n\treadonly installationRef: string;\n\treadonly state: \"installed\" | \"active\" | \"retained\";\n}\n\nexport interface PluginInstallHostV1 {\n\t/**\n\t * Scopes that this host can isolate physically. Omitting this declaration\n\t * preserves the legacy global-only host behavior; project operations must be\n\t * declared explicitly.\n\t */\n\treadonly supportedScopes?: readonly PluginInstallationScopeV1[];\n\t/** Host operations are atomic from the installer's perspective: an abort may\n\t * prevent starting work, but once a method resolves its side effect is committed. */\n\tinstall(input: {\n\t\treadonly record: PluginUpdateRecordV1;\n\t\treadonly scope: PluginInstallationScopeV1;\n\t\treadonly scopeRef: string;\n\t\t/** A host-owned, digest-bound package reference. Package bytes never cross this contract. */\n\t\treadonly artifact?: PluginDistributionArtifactV1;\n\t\treadonly signal?: AbortSignal;\n\t}): Promise<{\n\t\treadonly installationRef: string;\n\t\treadonly scope?: PluginInstallationScopeV1;\n\t\treadonly scopeRef?: string;\n\t}>;\n\tactivate(input: {\n\t\treadonly installation: PluginInstallationV1;\n\t\treadonly record: PluginUpdateRecordV1;\n\t\treadonly scope: PluginInstallationScopeV1;\n\t\treadonly scopeRef: string;\n\t\treadonly signal?: AbortSignal;\n\t}): Promise<void>;\n\trollback(input: {\n\t\treadonly failed: PluginInstallationV1;\n\t\treadonly previous: PluginInstallationV1;\n\t\treadonly scope: PluginInstallationScopeV1;\n\t\treadonly scopeRef: string;\n\t\treadonly signal?: AbortSignal;\n\t}): Promise<void>;\n\t/**\n\t * Remove a host-owned installation. The method is optional so hosts can\n\t * still expose state-only management while they are migrating; callers that\n\t * need physical cleanup must treat a missing method as unsupported.\n\t */\n\tuninstall?: (input: {\n\t\treadonly installation: PluginInstallationV1;\n\t\treadonly scope: PluginInstallationScopeV1;\n\t\treadonly scopeRef: string;\n\t\treadonly signal?: AbortSignal;\n\t}) => Promise<void>;\n}\n\nexport interface PluginInstallerOptionsV1 {\n\treadonly host: PluginInstallHostV1;\n\treadonly verifier?: PluginSourceVerifierV1;\n}\n\nexport type PluginInstallerErrorCodeV1 =\n\t| \"invalid_installation\"\n\t| \"unsupported_scope\"\n\t| \"install_failed\"\n\t| \"activation_failed\"\n\t| \"rollback_failed\"\n\t| \"uninstall_failed\";\n\nexport type PluginInstallerResultV1 =\n\t| {\n\t\t\treadonly status: \"succeeded\";\n\t\t\treadonly installation: PluginInstallationV1;\n\t  }\n\t| {\n\t\t\treadonly status: \"cancelled\";\n\t\t\treadonly error: { readonly code: \"cancelled\"; readonly message: string };\n\t  }\n\t| {\n\t\t\treadonly status: \"failed\";\n\t\t\treadonly error: {\n\t\t\t\treadonly code: PluginInstallerErrorCodeV1;\n\t\t\t\treadonly message: string;\n\t\t\t};\n\t  };\n\nexport interface PluginInstallerV1 {\n\t/** Declared, host-backed installation scopes. Project support is never inferred. */\n\treadonly supportedScopes: readonly PluginInstallationScopeV1[];\n\tprepare(input: {\n\t\treadonly manifest: PluginUpdateRecordV1[\"manifest\"];\n\t\treadonly source: string;\n\t\treadonly host: HostFactsV1;\n\t\treadonly expectedDigest?: string;\n\t}): UpdateVerificationV1;\n\tinstall(input: {\n\t\treadonly record: PluginUpdateRecordV1;\n\t\t/** Omitting scope preserves the existing global installation behavior. */\n\t\treadonly scope?: PluginInstallationScopeV1;\n\t\t/** Required for project installations; global defaults to `global:default`. */\n\t\treadonly scopeRef?: string;\n\t\treadonly artifact?: PluginDistributionArtifactV1;\n\t\treadonly signal?: AbortSignal;\n\t}): Promise<PluginInstallerResultV1>;\n\tactivate(input: {\n\t\treadonly installation: PluginInstallationV1;\n\t\treadonly record: PluginUpdateRecordV1;\n\t\treadonly scope?: PluginInstallationScopeV1;\n\t\treadonly scopeRef?: string;\n\t\treadonly signal?: AbortSignal;\n\t}): Promise<PluginInstallerResultV1>;\n\trollback(input: {\n\t\treadonly failed: PluginInstallationV1;\n\t\treadonly previous: PluginInstallationV1;\n\t\treadonly scope?: PluginInstallationScopeV1;\n\t\treadonly scopeRef?: string;\n\t\treadonly signal?: AbortSignal;\n\t}): Promise<PluginInstallerResultV1>;\n\t/** Remove one installed version after validating its opaque identity. */\n\tremove(input: {\n\t\treadonly installation: PluginInstallationV1;\n\t\treadonly scope?: PluginInstallationScopeV1;\n\t\treadonly scopeRef?: string;\n\t\treadonly signal?: AbortSignal;\n\t}): Promise<PluginInstallerResultV1>;\n}\n\nfunction opaqueInstallationRef(value: unknown): string {\n\tif (typeof value !== \"string\" || value.trim() === \"\" || value.length > MAX_INSTALLATION_REF_CHARS_V1)\n\t\tthrow new Error(\"installation reference is invalid\");\n\tif (/^(?:file:|[a-zA-Z]:[\\\\/]|[\\\\/]{1,2}|\\\\\\\\)/iu.test(value) || /\\s/u.test(value))\n\t\tthrow new Error(\"installation reference must be opaque\");\n\treturn value;\n}\n\nfunction opaqueScopeRef(value: unknown): string {\n\tif (typeof value !== \"string\" || value.trim() === \"\" || value.length > MAX_PLUGIN_SCOPE_REF_CHARS_V1)\n\t\tthrow new Error(\"plugin installation scope reference is invalid\");\n\tif (/^(?:file:|[a-zA-Z]:[\\\\/]|[\\\\/]{1,2}|\\\\\\\\)/iu.test(value) || /\\s/u.test(value))\n\t\tthrow new Error(\"plugin installation scope reference must be opaque\");\n\treturn value;\n}\n\nfunction installationFrom(\n\trecord: PluginUpdateRecordV1,\n\tinstallationRef: string,\n\tscopeIdentity: PluginScopeIdentityV1,\n\tstate: PluginInstallationV1[\"state\"],\n): PluginInstallationV1 {\n\treturn Object.freeze({\n\t\tversion: 1,\n\t\tpluginId: record.pluginId,\n\t\tpluginVersion: record.pluginVersion,\n\t\tmanifestDigest: record.manifestDigest,\n\t\tscope: scopeIdentity.scope,\n\t\tscopeRef: scopeIdentity.scopeRef,\n\t\tinstallationRef: opaqueInstallationRef(installationRef),\n\t\tstate,\n\t});\n}\n\nfunction cancelled(): PluginInstallerResultV1 {\n\treturn {\n\t\tstatus: \"cancelled\",\n\t\terror: {\n\t\t\tcode: \"cancelled\",\n\t\t\tmessage: \"Plugin installation operation was cancelled\",\n\t\t},\n\t};\n}\n\nfunction failure(code: PluginInstallerErrorCodeV1): PluginInstallerResultV1 {\n\treturn {\n\t\tstatus: \"failed\",\n\t\terror: {\n\t\t\tcode,\n\t\t\tmessage:\n\t\t\t\tcode === \"invalid_installation\"\n\t\t\t\t\t? \"The plugin installation handle is invalid\"\n\t\t\t\t\t: code === \"unsupported_scope\"\n\t\t\t\t\t\t? \"The plugin installer does not support this scope\"\n\t\t\t\t\t\t: code === \"install_failed\"\n\t\t\t\t\t\t\t? \"The host plugin installer failed\"\n\t\t\t\t\t\t\t: code === \"activation_failed\"\n\t\t\t\t\t\t\t\t? \"The host plugin activation failed\"\n\t\t\t\t\t\t\t\t: code === \"rollback_failed\"\n\t\t\t\t\t\t\t\t\t? \"The host plugin rollback failed\"\n\t\t\t\t\t\t\t\t\t: \"The host plugin uninstall failed\",\n\t\t},\n\t};\n}\n\nfunction validateInstallation(installation: PluginInstallationV1): void {\n\tif (\n\t\tinstallation.version !== 1 ||\n\t\ttypeof installation.pluginId !== \"string\" ||\n\t\ttypeof installation.pluginVersion !== \"string\" ||\n\t\ttypeof installation.manifestDigest !== \"string\" ||\n\t\tinstallation.pluginId.trim() === \"\" ||\n\t\tinstallation.pluginVersion.trim() === \"\" ||\n\t\tinstallation.manifestDigest.trim() === \"\"\n\t)\n\t\tthrow new Error(\"plugin installation handle is invalid\");\n\tif (installation.scope !== \"global\" && installation.scope !== \"project\")\n\t\tthrow new Error(\"plugin installation scope is invalid\");\n\tconst scopeRef =\n\t\tinstallation.scopeRef === undefined\n\t\t\t? installation.scope === \"global\"\n\t\t\t\t? DEFAULT_GLOBAL_PLUGIN_SCOPE_REF_V1\n\t\t\t\t: (() => {\n\t\t\t\t\t\tthrow new Error(\"project installation scope reference is required\");\n\t\t\t\t\t})()\n\t\t\t: opaqueScopeRef(installation.scopeRef);\n\tif (installation.scope === \"global\" && scopeRef !== DEFAULT_GLOBAL_PLUGIN_SCOPE_REF_V1)\n\t\tthrow new Error(\"plugin global installation scope reference is invalid\");\n\topaqueInstallationRef(installation.installationRef);\n}\n\nfunction ensureIdentity(\n\tinstallation: PluginInstallationV1,\n\trecord: PluginUpdateRecordV1,\n\tscopeIdentity: PluginScopeIdentityV1,\n): void {\n\tvalidateInstallation(installation);\n\tif (\n\t\tinstallation.pluginId !== record.pluginId ||\n\t\tinstallation.pluginVersion !== record.pluginVersion ||\n\t\tinstallation.manifestDigest !== record.manifestDigest ||\n\t\tinstallation.scope !== scopeIdentity.scope ||\n\t\t(installation.scopeRef ?? DEFAULT_GLOBAL_PLUGIN_SCOPE_REF_V1) !== scopeIdentity.scopeRef\n\t)\n\t\tthrow new Error(\"plugin installation identity mismatch\");\n}\n\nfunction normalizeScope(scope: PluginInstallationScopeV1 | undefined): PluginInstallationScopeV1 {\n\tif (scope === undefined) return \"global\";\n\tif (scope === \"global\" || scope === \"project\") return scope;\n\tthrow new Error(\"plugin installation scope is invalid\");\n}\n\nfunction normalizeScopeIdentity(\n\tscope: PluginInstallationScopeV1 | undefined,\n\tscopeRef: string | undefined,\n): PluginScopeIdentityV1 {\n\tconst normalizedScope = normalizeScope(scope);\n\tif (scopeRef === undefined) {\n\t\tif (normalizedScope !== \"global\") throw new Error(\"project installation scope reference is required\");\n\t\treturn Object.freeze({ scope: normalizedScope, scopeRef: DEFAULT_GLOBAL_PLUGIN_SCOPE_REF_V1 });\n\t}\n\tconst normalizedScopeRef = opaqueScopeRef(scopeRef);\n\tif (normalizedScope === \"global\" && normalizedScopeRef !== DEFAULT_GLOBAL_PLUGIN_SCOPE_REF_V1)\n\t\tthrow new Error(\"plugin global installation scope reference is invalid\");\n\treturn Object.freeze({ scope: normalizedScope, scopeRef: normalizedScopeRef });\n}\n\nfunction declaredScopes(host: PluginInstallHostV1): readonly PluginInstallationScopeV1[] {\n\tif (host.supportedScopes === undefined) return Object.freeze([\"global\"]);\n\tif (\n\t\t!Array.isArray(host.supportedScopes) ||\n\t\tnew Set(host.supportedScopes).size !== host.supportedScopes.length ||\n\t\thost.supportedScopes.some((scope) => scope !== \"global\" && scope !== \"project\")\n\t)\n\t\treturn Object.freeze([]);\n\treturn Object.freeze([...host.supportedScopes]);\n}\n\nfunction hostAcceptedScope(\n\tinstallation: { readonly scope?: PluginInstallationScopeV1; readonly scopeRef?: string },\n\tscopeIdentity: PluginScopeIdentityV1,\n): void {\n\tif (scopeIdentity.scope === \"global\" && installation.scope === undefined && installation.scopeRef === undefined)\n\t\treturn;\n\tif (installation.scope !== scopeIdentity.scope || installation.scopeRef !== scopeIdentity.scopeRef)\n\t\tthrow new Error(\"plugin installation scope mismatch\");\n}\n\nfunction ensureArtifactIdentity(artifact: PluginDistributionArtifactV1, record: PluginUpdateRecordV1): void {\n\tif (\n\t\tartifact.version !== 1 ||\n\t\tartifact.pluginId !== record.pluginId ||\n\t\tartifact.pluginVersion !== record.pluginVersion ||\n\t\tartifact.manifestDigest !== record.manifestDigest ||\n\t\ttypeof artifact.artifactRef !== \"string\" ||\n\t\tartifact.artifactRef.trim() === \"\"\n\t)\n\t\tthrow new Error(\"plugin distribution artifact identity mismatch\");\n\topaqueInstallationRef(artifact.artifactRef);\n}\n\nfunction isInvalidInstallationError(value: unknown): boolean {\n\treturn (\n\t\tvalue instanceof Error &&\n\t\t(value.message === \"plugin installation handle is invalid\" ||\n\t\t\tvalue.message === \"plugin installation scope is invalid\" ||\n\t\t\tvalue.message === \"plugin installation scope reference is invalid\" ||\n\t\t\tvalue.message === \"plugin installation scope reference must be opaque\" ||\n\t\t\tvalue.message === \"plugin global installation scope reference is invalid\" ||\n\t\t\tvalue.message === \"project installation scope reference is required\" ||\n\t\t\tvalue.message === \"plugin installation identity mismatch\" ||\n\t\t\tvalue.message === \"plugin installation scope mismatch\" ||\n\t\t\tvalue.message === \"plugin distribution artifact identity mismatch\")\n\t);\n}\n\nexport function createPluginInstallerV1(options: PluginInstallerOptionsV1): PluginInstallerV1 {\n\tconst supportedScopes = declaredScopes(options.host);\n\tconst supportsScope = (scope: PluginInstallationScopeV1): boolean => supportedScopes.includes(scope);\n\treturn {\n\t\tsupportedScopes,\n\t\tprepare(input) {\n\t\t\tconst staged = stagePluginUpdateV1({\n\t\t\t\tmanifest: input.manifest,\n\t\t\t\tsource: input.source,\n\t\t\t});\n\t\t\treturn verifyPluginUpdateV1({\n\t\t\t\trecord: staged,\n\t\t\t\thost: input.host,\n\t\t\t\texpectedDigest: input.expectedDigest,\n\t\t\t\tverifier: options.verifier,\n\t\t\t});\n\t\t},\n\t\tasync install(input) {\n\t\t\tif (input.signal?.aborted) return cancelled();\n\t\t\tlet scopeIdentity: PluginScopeIdentityV1;\n\t\t\ttry {\n\t\t\t\tscopeIdentity = normalizeScopeIdentity(input.scope, input.scopeRef);\n\t\t\t} catch {\n\t\t\t\treturn failure(\"invalid_installation\");\n\t\t\t}\n\t\t\tif (!supportsScope(scopeIdentity.scope)) return failure(\"unsupported_scope\");\n\t\t\tif (input.record.state !== \"verified\") return failure(\"invalid_installation\");\n\t\t\ttry {\n\t\t\t\tif (input.artifact !== undefined) ensureArtifactIdentity(input.artifact, input.record);\n\t\t\t\tconst installed = await options.host.install({\n\t\t\t\t\trecord: input.record,\n\t\t\t\t\tscope: scopeIdentity.scope,\n\t\t\t\t\tscopeRef: scopeIdentity.scopeRef,\n\t\t\t\t\t...(input.artifact === undefined ? {} : { artifact: input.artifact }),\n\t\t\t\t\tsignal: input.signal,\n\t\t\t\t});\n\t\t\t\thostAcceptedScope(installed, scopeIdentity);\n\t\t\t\treturn {\n\t\t\t\t\tstatus: \"succeeded\",\n\t\t\t\t\tinstallation: installationFrom(input.record, installed.installationRef, scopeIdentity, \"installed\"),\n\t\t\t\t};\n\t\t\t} catch (error) {\n\t\t\t\tif (isInvalidInstallationError(error)) return failure(\"invalid_installation\");\n\t\t\t\treturn input.signal?.aborted ? cancelled() : failure(\"install_failed\");\n\t\t\t}\n\t\t},\n\t\tasync activate(input) {\n\t\t\tif (input.signal?.aborted) return cancelled();\n\t\t\tlet scopeIdentity: PluginScopeIdentityV1;\n\t\t\ttry {\n\t\t\t\tscopeIdentity = normalizeScopeIdentity(input.scope, input.scopeRef);\n\t\t\t\tif (!supportsScope(scopeIdentity.scope)) return failure(\"unsupported_scope\");\n\t\t\t\tensureIdentity(input.installation, input.record, scopeIdentity);\n\t\t\t\tif (input.installation.state !== \"installed\" || input.record.state !== \"verified\")\n\t\t\t\t\treturn failure(\"invalid_installation\");\n\t\t\t\tawait options.host.activate({\n\t\t\t\t\tinstallation: input.installation,\n\t\t\t\t\trecord: input.record,\n\t\t\t\t\tscope: scopeIdentity.scope,\n\t\t\t\t\tscopeRef: scopeIdentity.scopeRef,\n\t\t\t\t\tsignal: input.signal,\n\t\t\t\t});\n\t\t\t\treturn {\n\t\t\t\t\tstatus: \"succeeded\",\n\t\t\t\t\tinstallation: Object.freeze({\n\t\t\t\t\t\t...input.installation,\n\t\t\t\t\t\tstate: \"active\" as const,\n\t\t\t\t\t}),\n\t\t\t\t};\n\t\t\t} catch (error) {\n\t\t\t\tif (isInvalidInstallationError(error)) return failure(\"invalid_installation\");\n\t\t\t\treturn input.signal?.aborted ? cancelled() : failure(\"activation_failed\");\n\t\t\t}\n\t\t},\n\t\tasync rollback(input) {\n\t\t\tif (input.signal?.aborted) return cancelled();\n\t\t\tlet scopeIdentity: PluginScopeIdentityV1;\n\t\t\ttry {\n\t\t\t\tscopeIdentity = normalizeScopeIdentity(input.scope, input.scopeRef);\n\t\t\t\tif (!supportsScope(scopeIdentity.scope)) return failure(\"unsupported_scope\");\n\t\t\t\tvalidateInstallation(input.failed);\n\t\t\t\tvalidateInstallation(input.previous);\n\t\t\t\tif (input.failed.state !== \"installed\" && input.failed.state !== \"active\")\n\t\t\t\t\treturn failure(\"invalid_installation\");\n\t\t\t\tif (input.previous.state !== \"active\") return failure(\"invalid_installation\");\n\t\t\t\tif (\n\t\t\t\t\tinput.failed.pluginId !== input.previous.pluginId ||\n\t\t\t\t\tinput.failed.scope !== scopeIdentity.scope ||\n\t\t\t\t\tinput.previous.scope !== scopeIdentity.scope ||\n\t\t\t\t\t(input.failed.scopeRef ?? DEFAULT_GLOBAL_PLUGIN_SCOPE_REF_V1) !== scopeIdentity.scopeRef ||\n\t\t\t\t\t(input.previous.scopeRef ?? DEFAULT_GLOBAL_PLUGIN_SCOPE_REF_V1) !== scopeIdentity.scopeRef\n\t\t\t\t)\n\t\t\t\t\treturn failure(\"invalid_installation\");\n\t\t\t\tawait options.host.rollback({\n\t\t\t\t\tfailed: input.failed,\n\t\t\t\t\tprevious: input.previous,\n\t\t\t\t\tscope: scopeIdentity.scope,\n\t\t\t\t\tscopeRef: scopeIdentity.scopeRef,\n\t\t\t\t\tsignal: input.signal,\n\t\t\t\t});\n\t\t\t\treturn {\n\t\t\t\t\tstatus: \"succeeded\",\n\t\t\t\t\tinstallation: Object.freeze({\n\t\t\t\t\t\t...input.previous,\n\t\t\t\t\t\tstate: \"active\" as const,\n\t\t\t\t\t}),\n\t\t\t\t};\n\t\t\t} catch (error) {\n\t\t\t\tif (isInvalidInstallationError(error)) return failure(\"invalid_installation\");\n\t\t\t\treturn input.signal?.aborted ? cancelled() : failure(\"rollback_failed\");\n\t\t\t}\n\t\t},\n\t\tasync remove(input) {\n\t\t\tif (input.signal?.aborted) return cancelled();\n\t\t\tlet scopeIdentity: PluginScopeIdentityV1;\n\t\t\ttry {\n\t\t\t\tscopeIdentity = normalizeScopeIdentity(input.scope, input.scopeRef);\n\t\t\t\tif (!supportsScope(scopeIdentity.scope)) return failure(\"unsupported_scope\");\n\t\t\t\tvalidateInstallation(input.installation);\n\t\t\t} catch {\n\t\t\t\treturn failure(\"invalid_installation\");\n\t\t\t}\n\t\t\tif (\n\t\t\t\tinput.installation.state !== \"installed\" &&\n\t\t\t\tinput.installation.state !== \"active\" &&\n\t\t\t\tinput.installation.state !== \"retained\"\n\t\t\t)\n\t\t\t\treturn failure(\"invalid_installation\");\n\t\t\tif (\n\t\t\t\tinput.installation.scope !== scopeIdentity.scope ||\n\t\t\t\t(input.installation.scopeRef ?? DEFAULT_GLOBAL_PLUGIN_SCOPE_REF_V1) !== scopeIdentity.scopeRef\n\t\t\t)\n\t\t\t\treturn failure(\"invalid_installation\");\n\t\t\tif (options.host.uninstall === undefined) return failure(\"uninstall_failed\");\n\t\t\ttry {\n\t\t\t\tawait options.host.uninstall({\n\t\t\t\t\tinstallation: input.installation,\n\t\t\t\t\tscope: scopeIdentity.scope,\n\t\t\t\t\tscopeRef: scopeIdentity.scopeRef,\n\t\t\t\t\tsignal: input.signal,\n\t\t\t\t});\n\t\t\t\treturn {\n\t\t\t\t\tstatus: \"succeeded\",\n\t\t\t\t\tinstallation: Object.freeze({\n\t\t\t\t\t\t...input.installation,\n\t\t\t\t\t\tstate: \"retained\" as const,\n\t\t\t\t\t}),\n\t\t\t\t};\n\t\t\t} catch {\n\t\t\t\treturn input.signal?.aborted ? cancelled() : failure(\"uninstall_failed\");\n\t\t\t}\n\t\t},\n\t};\n}\n"]}

package/dist/plugins/ecosystem/node-disk-registry-source.d.ts

@@ -0,0 +1,47 @@
+import type { PluginRegistrySourceV1 } from "./registry.ts";
+declare const NODE_DISK_REGISTRY_SOURCE_VERSION_V1: 1;
+/** Maximum index.v1.json bytes accepted by this source boundary. */
+export declare const MAX_NODE_DISK_REGISTRY_INDEX_BYTES_V1: number;
+/** Maximum per-installation agent-forge.json bytes accepted by this source. */
+export declare const MAX_NODE_DISK_REGISTRY_MANIFEST_BYTES_V1: number;
+/** Maximum index records projected by one list() call; matches the registry manifest cap. */
+export declare const MAX_NODE_DISK_REGISTRY_RECORDS_V1 = 256;
+export type NodeDiskRegistrySourceErrorCodeV1 = "cancelled" | "invalid_configuration" | "invalid_index" | "invalid_manifest" | "identity_mismatch" | "too_many_records" | "io_failed";
+/**
+ * Deliberately does not retain filesystem exceptions or file contents: callers
+ * must not turn registry diagnostics into a path or package disclosure.
+ */
+export declare class NodeDiskRegistrySourceErrorV1 extends Error {
+    readonly code: NodeDiskRegistrySourceErrorCodeV1;
+    constructor(code: NodeDiskRegistrySourceErrorCodeV1, message: string);
+}
+export interface NodeDiskRegistrySourceOptionsV1 {
+    /** Absolute host-owned default install store directory. It is never returned in a DTO. */
+    readonly rootDirectory: string;
+}
+export interface NodeDiskRegistrySourceResolveInputV1 {
+    readonly pluginId: string;
+    readonly pluginVersion: string;
+    readonly signal?: AbortSignal;
+}
+export interface NodeDiskRegistrySourceV1 extends PluginRegistrySourceV1 {
+    readonly version: typeof NODE_DISK_REGISTRY_SOURCE_VERSION_V1;
+    /**
+     * Internal host channel (D-075 S2): absolute `plugin.json` path of the
+     * installation directory matching `{pluginId, pluginVersion}` in the store
+     * index, for the sdk's installed-plugin code loading. Registry snapshots
+     * still carry no paths; undefined means no matching record or the manifest
+     * file is absent from the installation directory.
+     */
+    readonly resolveCapabilityManifestPath?: (input: NodeDiskRegistrySourceResolveInputV1) => Promise<string | undefined>;
+}
+/**
+ * Read-only registry source over the default install store. It projects the
+ * persistent index and each installation instance's ecosystem manifest as
+ * bounded envelopes for the registry's own digest verification. It never
+ * writes the index or installation directories, and installation directories
+ * stay inside the host-owned store.
+ */
+export declare function createNodeDiskPluginRegistrySourceV1(options: NodeDiskRegistrySourceOptionsV1): NodeDiskRegistrySourceV1;
+export {};
+//# sourceMappingURL=node-disk-registry-source.d.ts.map