@ai-agent-forge/agent-forge 0.85.0

package/dist/plugins/ecosystem/registry.js

@@ -0,0 +1,324 @@
+import { buildPluginCatalogV1, comparePluginVersionsV1 } from "./catalog.js";
+import { createPluginDistributionV1 } from "./distribution.js";
+import { pluginManifestDigestV1 } from "./updates.js";
+/** Maximum manifest JSON bytes accepted by the registry boundary. */
+export const MAX_PLUGIN_REGISTRY_MANIFEST_BYTES_V1 = 64 * 1024;
+/** Maximum number of manifests returned by one source query. */
+export const MAX_PLUGIN_REGISTRY_MANIFESTS_V1 = 256;
+/** Maximum aggregate manifest metadata returned by one source query. */
+export const MAX_PLUGIN_REGISTRY_PAYLOAD_BYTES_V1 = 4 * 1024 * 1024;
+/** Maximum source URI length; sources are identifiers, never package paths. */
+export const MAX_PLUGIN_REGISTRY_SOURCE_CHARS_V1 = 2048;
+/** Maximum digest/signature text length accepted from a source. */
+export const MAX_PLUGIN_REGISTRY_PROOF_CHARS_V1 = 512;
+export class PluginRegistryErrorV1 extends Error {
+    code;
+    cause;
+    constructor(code, message, cause) {
+        super(message, cause === undefined ? undefined : { cause });
+        this.name = "PluginRegistryErrorV1";
+        this.code = code;
+        this.cause = cause;
+    }
+}
+function isAbortLike(error, signal) {
+    return (signal?.aborted === true ||
+        (error instanceof Error && (error.name === "AbortError" || error.name === "AbortSignalError")));
+}
+function boundedString(value, label, max, code = "invalid_source") {
+    if (typeof value !== "string" || value.trim() === "" || value.length > max || /[\u0000-\u001f]/u.test(value)) {
+        throw new PluginRegistryErrorV1(code, `${label} must be a non-empty bounded string`);
+    }
+    return value;
+}
+function assertAllowedKeys(value, allowed, label) {
+    const expected = new Set(allowed);
+    if (Object.keys(value).some((key) => !expected.has(key)))
+        throw new PluginRegistryErrorV1("invalid_manifest", `${label} contains an unsupported field`);
+}
+function validateSource(source) {
+    const value = boundedString(source, "source", MAX_PLUGIN_REGISTRY_SOURCE_CHARS_V1);
+    if (/^(?:file:|[a-zA-Z]:[\\/]|[\\/]{1,2}|\\\\)/iu.test(value) || /\s/u.test(value)) {
+        throw new PluginRegistryErrorV1("invalid_source", "Plugin registry source must be an opaque URI, not a local path");
+    }
+    if (/^https?:\/\//iu.test(value)) {
+        try {
+            const parsed = new URL(value);
+            const pathname = parsed.pathname.length > 512 ? `${parsed.pathname.slice(0, 511)}…` : parsed.pathname;
+            return `${parsed.origin}${pathname || "/"}`;
+        }
+        catch (error) {
+            throw new PluginRegistryErrorV1("invalid_source", "Plugin registry source URL is invalid", error);
+        }
+    }
+    return value;
+}
+function validateManifest(manifest) {
+    if (typeof manifest !== "object" || manifest === null || Array.isArray(manifest)) {
+        throw new PluginRegistryErrorV1("invalid_manifest", "Registry manifest must be an object");
+    }
+    const value = manifest;
+    assertAllowedKeys(value, [
+        "id",
+        "pluginVersion",
+        "apiVersion",
+        "minHostVersion",
+        "maxHostVersion",
+        "capabilityRefs",
+        "requires",
+        "platform",
+        "testOnly",
+    ], "Registry manifest");
+    if (typeof value.id !== "string" || value.id.trim() === "" || value.id.length > 256)
+        throw new PluginRegistryErrorV1("invalid_manifest", "Registry manifest id is invalid");
+    if (typeof value.pluginVersion !== "string" || value.pluginVersion.trim() === "" || value.pluginVersion.length > 256)
+        throw new PluginRegistryErrorV1("invalid_manifest", "Registry manifest pluginVersion is invalid");
+    if (typeof value.apiVersion !== "string" || value.apiVersion.trim() === "" || value.apiVersion.length > 256)
+        throw new PluginRegistryErrorV1("invalid_manifest", "Registry manifest apiVersion is invalid");
+    if (value.minHostVersion === undefined && value.maxHostVersion === undefined)
+        throw new PluginRegistryErrorV1("invalid_manifest", "Published plugins must declare host version compatibility range: set minHostVersion and/or maxHostVersion");
+    let bytes;
+    try {
+        bytes = new TextEncoder().encode(JSON.stringify(manifest)).byteLength;
+    }
+    catch (error) {
+        throw new PluginRegistryErrorV1("invalid_manifest", "Registry manifest cannot be serialized", error);
+    }
+    if (bytes > MAX_PLUGIN_REGISTRY_MANIFEST_BYTES_V1)
+        throw new PluginRegistryErrorV1("payload_too_large", "Registry manifest exceeds the size limit");
+    return Object.freeze({ ...value });
+}
+function validateEnvelope(value) {
+    if (typeof value !== "object" || value === null || Array.isArray(value))
+        throw new PluginRegistryErrorV1("invalid_manifest", "Registry response entry must be an object");
+    const entry = value;
+    assertAllowedKeys(entry, ["manifest", "source", "manifestDigest", "signature", "distribution"], "Registry response entry");
+    const manifest = validateManifest(entry.manifest);
+    const source = validateSource(entry.source);
+    const manifestDigest = boundedString(entry.manifestDigest, "manifestDigest", MAX_PLUGIN_REGISTRY_PROOF_CHARS_V1);
+    if (entry.signature !== undefined)
+        boundedString(entry.signature, "signature", MAX_PLUGIN_REGISTRY_PROOF_CHARS_V1);
+    let distribution;
+    if (entry.distribution !== undefined) {
+        try {
+            distribution = createPluginDistributionV1().validateDescriptor(entry.distribution);
+        }
+        catch (error) {
+            throw new PluginRegistryErrorV1("invalid_manifest", "Registry distribution descriptor is invalid", error);
+        }
+        if (distribution.pluginId !== manifest.id ||
+            distribution.pluginVersion !== manifest.pluginVersion ||
+            distribution.manifestDigest !== manifestDigest)
+            throw new PluginRegistryErrorV1("invalid_manifest", "Registry distribution descriptor does not match the manifest identity");
+    }
+    return Object.freeze({
+        manifest,
+        source,
+        manifestDigest,
+        ...(entry.signature === undefined ? {} : { signature: entry.signature }),
+        ...(distribution === undefined ? {} : { distribution }),
+    });
+}
+function validateMax(value) {
+    const max = value ?? MAX_PLUGIN_REGISTRY_MANIFESTS_V1;
+    if (!Number.isSafeInteger(max) || max < 1 || max > MAX_PLUGIN_REGISTRY_MANIFESTS_V1)
+        throw new PluginRegistryErrorV1("invalid_limit", `maxManifests must be an integer between 1 and ${MAX_PLUGIN_REGISTRY_MANIFESTS_V1}`);
+    return max;
+}
+async function validateSourceProof(entry, verifier, sourceVerifier) {
+    const actualDigest = pluginManifestDigestV1(entry.manifest);
+    if (entry.manifestDigest !== actualDigest)
+        throw new PluginRegistryErrorV1("invalid_digest", `Manifest digest mismatch for ${entry.manifest.id}@${entry.manifest.pluginVersion}`);
+    try {
+        const result = await verifier.verify({
+            manifest: entry.manifest,
+            source: entry.source,
+            manifestDigest: actualDigest,
+            expectedDigest: entry.manifestDigest,
+            signature: entry.signature,
+        });
+        if (result.status !== "accepted")
+            throw new PluginRegistryErrorV1("source_rejected", result.reason ?? "Registry source proof was rejected");
+    }
+    catch (error) {
+        if (error instanceof PluginRegistryErrorV1)
+            throw error;
+        throw new PluginRegistryErrorV1("source_rejected", "Registry source proof was rejected", error);
+    }
+    let result;
+    try {
+        result = sourceVerifier({
+            pluginId: entry.manifest.id,
+            pluginVersion: entry.manifest.pluginVersion,
+            source: entry.source,
+            manifestDigest: actualDigest,
+        });
+    }
+    catch (error) {
+        throw new PluginRegistryErrorV1("source_rejected", "Plugin source verifier failed", error);
+    }
+    if (result.status !== "accepted")
+        throw new PluginRegistryErrorV1("source_rejected", result.reason ?? "Plugin source was rejected");
+}
+function sourceIdentity(entries) {
+    const sources = [...new Set(entries.map((entry) => entry.source))].sort((left, right) => left.localeCompare(right));
+    return sources.join(",");
+}
+/** Create a deterministic, host-injected registry client. */
+export function createPluginRegistryV1(options) {
+    const maxManifests = validateMax(options.maxManifests);
+    if (options.source === undefined || typeof options.source.list !== "function")
+        throw new PluginRegistryErrorV1("invalid_source", "Registry source must provide list()");
+    if (options.source.source !== undefined)
+        validateSource(options.source.source);
+    if (options.verify === undefined || typeof options.verify.verify !== "function")
+        throw new PluginRegistryErrorV1("source_rejected", "Registry source/digest verifier is required");
+    if (options.sourceVerifier === undefined || typeof options.sourceVerifier !== "function")
+        throw new PluginRegistryErrorV1("source_rejected", "Registry source verifier is required");
+    const load = async (input = {}) => {
+        if (input.signal?.aborted)
+            throw new PluginRegistryErrorV1("cancelled", "Plugin registry operation was cancelled");
+        let raw;
+        try {
+            raw = await options.source.list({ signal: input.signal });
+        }
+        catch (error) {
+            if (isAbortLike(error, input.signal))
+                throw new PluginRegistryErrorV1("cancelled", "Plugin registry operation was cancelled", error);
+            throw new PluginRegistryErrorV1("source_rejected", "Plugin registry source failed", error);
+        }
+        if (input.signal?.aborted)
+            throw new PluginRegistryErrorV1("cancelled", "Plugin registry operation was cancelled");
+        if (!Array.isArray(raw))
+            throw new PluginRegistryErrorV1("invalid_manifest", "Registry source must return an array");
+        if (raw.length > maxManifests)
+            throw new PluginRegistryErrorV1("too_many_manifests", "Registry response contains too many manifests");
+        const entries = raw.map(validateEnvelope);
+        const payloadBytes = entries.reduce((total, entry) => {
+            const manifestBytes = new TextEncoder().encode(JSON.stringify(entry.manifest)).byteLength;
+            const distributionBytes = entry.distribution === undefined
+                ? 0
+                : new TextEncoder().encode(JSON.stringify(entry.distribution)).byteLength;
+            return (total +
+                manifestBytes +
+                distributionBytes +
+                new TextEncoder().encode(entry.source).byteLength +
+                new TextEncoder().encode(entry.manifestDigest).byteLength +
+                (entry.signature === undefined ? 0 : new TextEncoder().encode(entry.signature).byteLength));
+        }, 0);
+        if (payloadBytes > MAX_PLUGIN_REGISTRY_PAYLOAD_BYTES_V1)
+            throw new PluginRegistryErrorV1("payload_too_large", "Registry response exceeds the aggregate size limit");
+        const seen = new Set();
+        const accepted = [];
+        const rejected = [];
+        for (const entry of entries) {
+            const identity = `${entry.manifest.id}@${entry.manifest.pluginVersion}`;
+            if (seen.has(identity))
+                throw new PluginRegistryErrorV1("invalid_manifest", `Duplicate registry manifest: ${identity}`);
+            seen.add(identity);
+            try {
+                await validateSourceProof(entry, options.verify, options.sourceVerifier);
+            }
+            catch (error) {
+                if (!(error instanceof PluginRegistryErrorV1))
+                    throw error;
+                if (error.cause !== undefined)
+                    throw error;
+                if (error.code !== "source_rejected" && error.code !== "invalid_digest")
+                    throw error;
+                rejected.push({
+                    pluginId: entry.manifest.id,
+                    pluginVersion: entry.manifest.pluginVersion,
+                    code: error.code === "invalid_digest" ? "digest_rejected" : "source_rejected",
+                    reason: error.code === "invalid_digest" ? "Manifest digest mismatch" : "Registry source proof was rejected",
+                });
+                continue;
+            }
+            if (input.signal?.aborted)
+                throw new PluginRegistryErrorV1("cancelled", "Plugin registry operation was cancelled");
+            accepted.push(entry);
+        }
+        const manifests = accepted.map((entry) => entry.manifest);
+        const catalog = buildPluginCatalogV1({
+            manifests,
+            host: options.host,
+            availableCapabilities: options.availableCapabilities,
+            maxEntries: maxManifests,
+        });
+        const publicEntries = Object.freeze([...accepted]
+            .sort((left, right) => {
+            const idOrder = left.manifest.id.localeCompare(right.manifest.id);
+            return idOrder === 0
+                ? comparePluginVersionsV1(right.manifest.pluginVersion, left.manifest.pluginVersion)
+                : idOrder;
+        })
+            .map((entry) => Object.freeze({
+            pluginId: entry.manifest.id,
+            pluginVersion: entry.manifest.pluginVersion,
+            source: entry.source,
+            manifestDigest: entry.manifestDigest,
+            signed: entry.signature !== undefined,
+        })));
+        const catalogByIdentity = new Map(catalog.entries.map((entry) => [`${entry.pluginId}@${entry.pluginVersion}`, entry]));
+        const verified = Object.freeze(publicEntries.flatMap((entry) => {
+            const catalogEntry = catalogByIdentity.get(`${entry.pluginId}@${entry.pluginVersion}`);
+            if (catalogEntry?.resolution.status === "installed-ready")
+                return [{ ...entry, resolutionStatus: "installed-ready" }];
+            const reason = catalogEntry?.resolution.diagnostics[0]?.message ?? "Plugin is incompatible with this host";
+            rejected.push({
+                pluginId: entry.pluginId,
+                pluginVersion: entry.pluginVersion,
+                code: "incompatible",
+                reason,
+            });
+            return [];
+        }));
+        return {
+            accepted: Object.freeze(accepted),
+            snapshot: Object.freeze({
+                version: 1,
+                source: options.source.source === undefined ? sourceIdentity(accepted) : validateSource(options.source.source),
+                entries: publicEntries,
+                catalog,
+                verified,
+                rejected: Object.freeze(rejected),
+            }),
+        };
+    };
+    const listManifests = async (input = {}) => {
+        const loaded = await load(input);
+        return Object.freeze(loaded.snapshot.catalog.entries.flatMap((catalogEntry) => loaded.accepted
+            .filter((entry) => entry.manifest.id === catalogEntry.pluginId &&
+            entry.manifest.pluginVersion === catalogEntry.pluginVersion)
+            .map((entry) => entry.manifest)));
+    };
+    return {
+        list: async (input = {}) => (await load(input)).snapshot,
+        listManifests,
+        resolve: async (input) => {
+            const loaded = await load({ signal: input.signal });
+            const verified = new Set(loaded.snapshot.verified.map((entry) => `${entry.pluginId}@${entry.pluginVersion}`));
+            const identity = input.pluginVersion === undefined
+                ? loaded.snapshot.catalog.entries.find((candidate) => candidate.pluginId === input.pluginId &&
+                    candidate.resolution.status === "installed-ready" &&
+                    verified.has(`${candidate.pluginId}@${candidate.pluginVersion}`))
+                : loaded.snapshot.catalog.entries.find((candidate) => candidate.pluginId === input.pluginId &&
+                    candidate.pluginVersion === input.pluginVersion &&
+                    candidate.resolution.status === "installed-ready" &&
+                    verified.has(`${candidate.pluginId}@${candidate.pluginVersion}`));
+            const entry = identity === undefined
+                ? undefined
+                : loaded.accepted.find((candidate) => candidate.manifest.id === identity.pluginId &&
+                    candidate.manifest.pluginVersion === identity.pluginVersion);
+            if (entry === undefined)
+                return undefined;
+            return Object.freeze({
+                manifest: entry.manifest,
+                source: entry.source,
+                expectedDigest: entry.manifestDigest,
+                ...(entry.distribution === undefined ? {} : { distribution: entry.distribution }),
+            });
+        },
+    };
+}
+//# sourceMappingURL=registry.js.map

package/dist/plugins/ecosystem/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../../src/plugins/ecosystem/registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,uBAAuB,EAAgC,MAAM,cAAc,CAAC;AAE3G,OAAO,EAAE,0BAA0B,EAAE,MAAM,mBAAmB,CAAC;AAE/D,OAAO,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC;AAEtD,qEAAqE;AACrE,MAAM,CAAC,MAAM,qCAAqC,GAAG,EAAE,GAAG,IAAI,CAAC;AAC/D,gEAAgE;AAChE,MAAM,CAAC,MAAM,gCAAgC,GAAG,GAAG,CAAC;AACpD,wEAAwE;AACxE,MAAM,CAAC,MAAM,oCAAoC,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AACpE,+EAA+E;AAC/E,MAAM,CAAC,MAAM,mCAAmC,GAAG,IAAI,CAAC;AACxD,mEAAmE;AACnE,MAAM,CAAC,MAAM,kCAAkC,GAAG,GAAG,CAAC;AA0DtD,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IACtC,IAAI,CAA4B;IAChC,KAAK,CAAW;IAEzB,YAAY,IAA+B,EAAE,OAAe,EAAE,KAAe,EAAE;QAC9E,KAAK,CAAC,OAAO,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAC5D,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;QACpC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IAAA,CACnB;CACD;AAsDD,SAAS,WAAW,CAAC,KAAc,EAAE,MAA+B,EAAW;IAC9E,OAAO,CACN,MAAM,EAAE,OAAO,KAAK,IAAI;QACxB,CAAC,KAAK,YAAY,KAAK,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,YAAY,IAAI,KAAK,CAAC,IAAI,KAAK,kBAAkB,CAAC,CAAC,CAC9F,CAAC;AAAA,CACF;AAED,SAAS,aAAa,CACrB,KAAc,EACd,KAAa,EACb,GAAW,EACX,IAAI,GAA8B,gBAAgB,EACzC;IACT,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG,IAAI,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9G,MAAM,IAAI,qBAAqB,CAAC,IAAI,EAAE,GAAG,KAAK,qCAAqC,CAAC,CAAC;IACtF,CAAC;IACD,OAAO,KAAK,CAAC;AAAA,CACb;AAED,SAAS,iBAAiB,CAAC,KAA8B,EAAE,OAA0B,EAAE,KAAa,EAAQ;IAC3G,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;IAClC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACvD,MAAM,IAAI,qBAAqB,CAAC,kBAAkB,EAAE,GAAG,KAAK,gCAAgC,CAAC,CAAC;AAAA,CAC/F;AAED,SAAS,cAAc,CAAC,MAAe,EAAU;IAChD,MAAM,KAAK,GAAG,aAAa,CAAC,MAAM,EAAE,QAAQ,EAAE,mCAAmC,CAAC,CAAC;IACnF,IAAI,6CAA6C,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACpF,MAAM,IAAI,qBAAqB,CAC9B,gBAAgB,EAChB,gEAAgE,CAChE,CAAC;IACH,CAAC;IACD,IAAI,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAClC,IAAI,CAAC;YACJ,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;YAC9B,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,KAAG,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC;YACtG,OAAO,GAAG,MAAM,CAAC,MAAM,GAAG,QAAQ,IAAI,GAAG,EAAE,CAAC;QAC7C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,IAAI,qBAAqB,CAAC,gBAAgB,EAAE,uCAAuC,EAAE,KAAK,CAAC,CAAC;QACnG,CAAC;IACF,CAAC;IACD,OAAO,KAAK,CAAC;AAAA,CACb;AAED,SAAS,gBAAgB,CAAC,QAAiB,EAAoB;IAC9D,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAClF,MAAM,IAAI,qBAAqB,CAAC,kBAAkB,EAAE,qCAAqC,CAAC,CAAC;IAC5F,CAAC;IACD,MAAM,KAAK,GAAG,QAAmC,CAAC;IAClD,iBAAiB,CAChB,KAAK,EACL;QACC,IAAI;QACJ,eAAe;QACf,YAAY;QACZ,gBAAgB;QAChB,gBAAgB;QAChB,gBAAgB;QAChB,UAAU;QACV,UAAU;QACV,UAAU;KACV,EACD,mBAAmB,CACnB,CAAC;IACF,IAAI,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ,IAAI,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC,EAAE,CAAC,MAAM,GAAG,GAAG;QAClF,MAAM,IAAI,qBAAqB,CAAC,kBAAkB,EAAE,iCAAiC,CAAC,CAAC;IACxF,IAAI,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ,IAAI,KAAK,CAAC,aAAa,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC,aAAa,CAAC,MAAM,GAAG,GAAG;QACnH,MAAM,IAAI,qBAAqB,CAAC,kBAAkB,EAAE,4CAA4C,CAAC,CAAC;IACnG,IAAI,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,GAAG,GAAG;QAC1G,MAAM,IAAI,qBAAqB,CAAC,kBAAkB,EAAE,yCAAyC,CAAC,CAAC;IAChG,IAAI,KAAK,CAAC,cAAc,KAAK,SAAS,IAAI,KAAK,CAAC,cAAc,KAAK,SAAS;QAC3E,MAAM,IAAI,qBAAqB,CAC9B,kBAAkB,EAClB,2GAA2G,CAC3G,CAAC;IACH,IAAI,KAAa,CAAC;IAClB,IAAI,CAAC;QACJ,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC;IACvE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,IAAI,qBAAqB,CAAC,kBAAkB,EAAE,wCAAwC,EAAE,KAAK,CAAC,CAAC;IACtG,CAAC;IACD,IAAI,KAAK,GAAG,qCAAqC;QAChD,MAAM,IAAI,qBAAqB,CAAC,mBAAmB,EAAE,0CAA0C,CAAC,CAAC;IAClG,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,KAAK,EAAiC,CAAC,CAAC;AAAA,CAClE;AAED,SAAS,gBAAgB,CAAC,KAAc,EAAoC;IAC3E,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACtE,MAAM,IAAI,qBAAqB,CAAC,kBAAkB,EAAE,2CAA2C,CAAC,CAAC;IAClG,MAAM,KAAK,GAAG,KAAgC,CAAC;IAC/C,iBAAiB,CAChB,KAAK,EACL,CAAC,UAAU,EAAE,QAAQ,EAAE,gBAAgB,EAAE,WAAW,EAAE,cAAc,CAAC,EACrE,yBAAyB,CACzB,CAAC;IACF,MAAM,QAAQ,GAAG,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAClD,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5C,MAAM,cAAc,GAAG,aAAa,CAAC,KAAK,CAAC,cAAc,EAAE,gBAAgB,EAAE,kCAAkC,CAAC,CAAC;IACjH,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS;QAAE,aAAa,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,EAAE,kCAAkC,CAAC,CAAC;IACnH,IAAI,YAAwD,CAAC;IAC7D,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QACtC,IAAI,CAAC;YACJ,YAAY,GAAG,0BAA0B,EAAE,CAAC,kBAAkB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QACpF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,IAAI,qBAAqB,CAAC,kBAAkB,EAAE,6CAA6C,EAAE,KAAK,CAAC,CAAC;QAC3G,CAAC;QACD,IACC,YAAY,CAAC,QAAQ,KAAK,QAAQ,CAAC,EAAE;YACrC,YAAY,CAAC,aAAa,KAAK,QAAQ,CAAC,aAAa;YACrD,YAAY,CAAC,cAAc,KAAK,cAAc;YAE9C,MAAM,IAAI,qBAAqB,CAC9B,kBAAkB,EAClB,uEAAuE,CACvE,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACpB,QAAQ;QACR,MAAM;QACN,cAAc;QACd,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAmB,EAAE,CAAC;QAClF,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC;KACvD,CAAC,CAAC;AAAA,CACH;AAED,SAAS,WAAW,CAAC,KAAyB,EAAU;IACvD,MAAM,GAAG,GAAG,KAAK,IAAI,gCAAgC,CAAC;IACtD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,GAAG,GAAG,gCAAgC;QAClF,MAAM,IAAI,qBAAqB,CAC9B,eAAe,EACf,iDAAiD,gCAAgC,EAAE,CACnF,CAAC;IACH,OAAO,GAAG,CAAC;AAAA,CACX;AAED,KAAK,UAAU,mBAAmB,CACjC,KAAuC,EACvC,QAAwC,EACxC,cAAsC,EACtB;IAChB,MAAM,YAAY,GAAG,sBAAsB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC5D,IAAI,KAAK,CAAC,cAAc,KAAK,YAAY;QACxC,MAAM,IAAI,qBAAqB,CAC9B,gBAAgB,EAChB,gCAAgC,KAAK,CAAC,QAAQ,CAAC,EAAE,IAAI,KAAK,CAAC,QAAQ,CAAC,aAAa,EAAE,CACnF,CAAC;IACH,IAAI,CAAC;QACJ,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC;YACpC,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,cAAc,EAAE,YAAY;YAC5B,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,SAAS,EAAE,KAAK,CAAC,SAAS;SAC1B,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU;YAC/B,MAAM,IAAI,qBAAqB,CAAC,iBAAiB,EAAE,MAAM,CAAC,MAAM,IAAI,oCAAoC,CAAC,CAAC;IAC5G,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAI,KAAK,YAAY,qBAAqB;YAAE,MAAM,KAAK,CAAC;QACxD,MAAM,IAAI,qBAAqB,CAAC,iBAAiB,EAAE,oCAAoC,EAAE,KAAK,CAAC,CAAC;IACjG,CAAC;IACD,IAAI,MAA0C,CAAC;IAC/C,IAAI,CAAC;QACJ,MAAM,GAAG,cAAc,CAAC;YACvB,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE;YAC3B,aAAa,EAAE,KAAK,CAAC,QAAQ,CAAC,aAAa;YAC3C,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,cAAc,EAAE,YAAY;SAC5B,CAAC,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,IAAI,qBAAqB,CAAC,iBAAiB,EAAE,+BAA+B,EAAE,KAAK,CAAC,CAAC;IAC5F,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU;QAC/B,MAAM,IAAI,qBAAqB,CAAC,iBAAiB,EAAE,MAAM,CAAC,MAAM,IAAI,4BAA4B,CAAC,CAAC;AAAA,CACnG;AAED,SAAS,cAAc,CAAC,OAAoD,EAAU;IACrF,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;IACpH,OAAO,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAAA,CACzB;AAOD,6DAA6D;AAC7D,MAAM,UAAU,sBAAsB,CAAC,OAAgC,EAAoB;IAC1F,MAAM,YAAY,GAAG,WAAW,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACvD,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,UAAU;QAC5E,MAAM,IAAI,qBAAqB,CAAC,gBAAgB,EAAE,qCAAqC,CAAC,CAAC;IAC1F,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS;QAAE,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC/E,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,OAAO,CAAC,MAAM,CAAC,MAAM,KAAK,UAAU;QAC9E,MAAM,IAAI,qBAAqB,CAAC,iBAAiB,EAAE,6CAA6C,CAAC,CAAC;IACnG,IAAI,OAAO,CAAC,cAAc,KAAK,SAAS,IAAI,OAAO,OAAO,CAAC,cAAc,KAAK,UAAU;QACvF,MAAM,IAAI,qBAAqB,CAAC,iBAAiB,EAAE,sCAAsC,CAAC,CAAC;IAE5F,MAAM,IAAI,GAAG,KAAK,EAAE,KAAK,GAAsC,EAAE,EAA2B,EAAE,CAAC;QAC9F,IAAI,KAAK,CAAC,MAAM,EAAE,OAAO;YACxB,MAAM,IAAI,qBAAqB,CAAC,WAAW,EAAE,yCAAyC,CAAC,CAAC;QACzF,IAAI,GAAgD,CAAC;QACrD,IAAI,CAAC;YACJ,GAAG,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QAC3D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,WAAW,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC;gBACnC,MAAM,IAAI,qBAAqB,CAAC,WAAW,EAAE,yCAAyC,EAAE,KAAK,CAAC,CAAC;YAChG,MAAM,IAAI,qBAAqB,CAAC,iBAAiB,EAAE,+BAA+B,EAAE,KAAK,CAAC,CAAC;QAC5F,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,EAAE,OAAO;YACxB,MAAM,IAAI,qBAAqB,CAAC,WAAW,EAAE,yCAAyC,CAAC,CAAC;QACzF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;YACtB,MAAM,IAAI,qBAAqB,CAAC,kBAAkB,EAAE,sCAAsC,CAAC,CAAC;QAC7F,IAAI,GAAG,CAAC,MAAM,GAAG,YAAY;YAC5B,MAAM,IAAI,qBAAqB,CAAC,oBAAoB,EAAE,+CAA+C,CAAC,CAAC;QACxG,MAAM,OAAO,GAAG,GAAG,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;QAC1C,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC;YACrD,MAAM,aAAa,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC;YAC1F,MAAM,iBAAiB,GACtB,KAAK,CAAC,YAAY,KAAK,SAAS;gBAC/B,CAAC,CAAC,CAAC;gBACH,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU,CAAC;YAC5E,OAAO,CACN,KAAK;gBACL,aAAa;gBACb,iBAAiB;gBACjB,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,UAAU;gBACjD,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,UAAU;gBACzD,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,UAAU,CAAC,CAC1F,CAAC;QAAA,CACF,EAAE,CAAC,CAAC,CAAC;QACN,IAAI,YAAY,GAAG,oCAAoC;YACtD,MAAM,IAAI,qBAAqB,CAAC,mBAAmB,EAAE,oDAAoD,CAAC,CAAC;QAC5G,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,MAAM,QAAQ,GAAuC,EAAE,CAAC;QACxD,MAAM,QAAQ,GAAgC,EAAE,CAAC;QACjD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC7B,MAAM,QAAQ,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC,EAAE,IAAI,KAAK,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC;YACxE,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC;gBACrB,MAAM,IAAI,qBAAqB,CAAC,kBAAkB,EAAE,gCAAgC,QAAQ,EAAE,CAAC,CAAC;YACjG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACnB,IAAI,CAAC;gBACJ,MAAM,mBAAmB,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;YAC1E,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,IAAI,CAAC,CAAC,KAAK,YAAY,qBAAqB,CAAC;oBAAE,MAAM,KAAK,CAAC;gBAC3D,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS;oBAAE,MAAM,KAAK,CAAC;gBAC3C,IAAI,KAAK,CAAC,IAAI,KAAK,iBAAiB,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB;oBAAE,MAAM,KAAK,CAAC;gBACrF,QAAQ,CAAC,IAAI,CAAC;oBACb,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE;oBAC3B,aAAa,EAAE,KAAK,CAAC,QAAQ,CAAC,aAAa;oBAC3C,IAAI,EAAE,KAAK,CAAC,IAAI,KAAK,gBAAgB,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,iBAAiB;oBAC7E,MAAM,EACL,KAAK,CAAC,IAAI,KAAK,gBAAgB,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,oCAAoC;iBACpG,CAAC,CAAC;gBACH,SAAS;YACV,CAAC;YACD,IAAI,KAAK,CAAC,MAAM,EAAE,OAAO;gBACxB,MAAM,IAAI,qBAAqB,CAAC,WAAW,EAAE,yCAAyC,CAAC,CAAC;YACzF,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;QACD,MAAM,SAAS,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC1D,MAAM,OAAO,GAAG,oBAAoB,CAAC;YACpC,SAAS;YACT,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,qBAAqB,EAAE,OAAO,CAAC,qBAAqB;YACpD,UAAU,EAAE,YAAY;SACxB,CAAC,CAAC;QACH,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAClC,CAAC,GAAG,QAAQ,CAAC;aACX,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YACtB,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YAClE,OAAO,OAAO,KAAK,CAAC;gBACnB,CAAC,CAAC,uBAAuB,CAAC,KAAK,CAAC,QAAQ,CAAC,aAAa,EAAE,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC;gBACpF,CAAC,CAAC,OAAO,CAAC;QAAA,CACX,CAAC;aACD,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACd,MAAM,CAAC,MAAM,CAAC;YACb,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE;YAC3B,aAAa,EAAE,KAAK,CAAC,QAAQ,CAAC,aAAa;YAC3C,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,MAAM,EAAE,KAAK,CAAC,SAAS,KAAK,SAAS;SACrC,CAAC,CACF,CACF,CAAC;QACF,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAChC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,GAAG,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,aAAa,EAAE,EAAE,KAAK,CAAU,CAAC,CAC5F,CAAC;QACF,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAC7B,aAAa,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;YAChC,MAAM,YAAY,GAAG,iBAAiB,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC;YACvF,IAAI,YAAY,EAAE,UAAU,CAAC,MAAM,KAAK,iBAAiB;gBACxD,OAAO,CAAC,EAAE,GAAG,KAAK,EAAE,gBAAgB,EAAE,iBAA0B,EAAE,CAAC,CAAC;YACrE,MAAM,MAAM,GAAG,YAAY,EAAE,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI,uCAAuC,CAAC;YAC3G,QAAQ,CAAC,IAAI,CAAC;gBACb,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,aAAa,EAAE,KAAK,CAAC,aAAa;gBAClC,IAAI,EAAE,cAAc;gBACpB,MAAM;aACN,CAAC,CAAC;YACH,OAAO,EAAE,CAAC;QAAA,CACV,CAAC,CACF,CAAC;QACF,OAAO;YACN,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC;YACjC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC;gBACvB,OAAO,EAAE,CAAC;gBACV,MAAM,EACL,OAAO,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC;gBACvG,OAAO,EAAE,aAAa;gBACtB,OAAO;gBACP,QAAQ;gBACR,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC;aACjC,CAAC;SACF,CAAC;IAAA,CACF,CAAC;IACF,MAAM,aAAa,GAAG,KAAK,EAC1B,KAAK,GAAsC,EAAE,EACN,EAAE,CAAC;QAC1C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,CAAC;QACjC,OAAO,MAAM,CAAC,MAAM,CACnB,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,YAAY,EAAE,EAAE,CACxD,MAAM,CAAC,QAAQ;aACb,MAAM,CACN,CAAC,KAAK,EAAE,EAAE,CACT,KAAK,CAAC,QAAQ,CAAC,EAAE,KAAK,YAAY,CAAC,QAAQ;YAC3C,KAAK,CAAC,QAAQ,CAAC,aAAa,KAAK,YAAY,CAAC,aAAa,CAC5D;aACA,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAChC,CACD,CAAC;IAAA,CACF,CAAC;IACF,OAAO;QACN,IAAI,EAAE,KAAK,EAAE,KAAK,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ;QACxD,aAAa;QACb,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC;YACzB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;YACpD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC;YAC9G,MAAM,QAAQ,GACb,KAAK,CAAC,aAAa,KAAK,SAAS;gBAChC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CACpC,CAAC,SAAS,EAAE,EAAE,CACb,SAAS,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ;oBACrC,SAAS,CAAC,UAAU,CAAC,MAAM,KAAK,iBAAiB;oBACjD,QAAQ,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC,QAAQ,IAAI,SAAS,CAAC,aAAa,EAAE,CAAC,CACjE;gBACF,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CACpC,CAAC,SAAS,EAAE,EAAE,CACb,SAAS,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ;oBACrC,SAAS,CAAC,aAAa,KAAK,KAAK,CAAC,aAAa;oBAC/C,SAAS,CAAC,UAAU,CAAC,MAAM,KAAK,iBAAiB;oBACjD,QAAQ,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC,QAAQ,IAAI,SAAS,CAAC,aAAa,EAAE,CAAC,CACjE,CAAC;YACL,MAAM,KAAK,GACV,QAAQ,KAAK,SAAS;gBACrB,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CACpB,CAAC,SAAS,EAAE,EAAE,CACb,SAAS,CAAC,QAAQ,CAAC,EAAE,KAAK,QAAQ,CAAC,QAAQ;oBAC3C,SAAS,CAAC,QAAQ,CAAC,aAAa,KAAK,QAAQ,CAAC,aAAa,CAC5D,CAAC;YACL,IAAI,KAAK,KAAK,SAAS;gBAAE,OAAO,SAAS,CAAC;YAC1C,OAAO,MAAM,CAAC,MAAM,CAAC;gBACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,cAAc,EAAE,KAAK,CAAC,cAAc;gBACpC,GAAG,CAAC,KAAK,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC;aACjF,CAAC,CAAC;QAAA,CACH;KACD,CAAC;AAAA,CACF","sourcesContent":["import { buildPluginCatalogV1, comparePluginVersionsV1, type PluginCatalogSnapshotV1 } from \"./catalog.ts\";\nimport type { PluginDistributionDescriptorV1 } from \"./distribution.ts\";\nimport { createPluginDistributionV1 } from \"./distribution.ts\";\nimport type { CapabilityRefV1, HostFactsV1, PluginManifestV1, PluginSourceVerifierV1 } from \"./types.ts\";\nimport { pluginManifestDigestV1 } from \"./updates.ts\";\n\n/** Maximum manifest JSON bytes accepted by the registry boundary. */\nexport const MAX_PLUGIN_REGISTRY_MANIFEST_BYTES_V1 = 64 * 1024;\n/** Maximum number of manifests returned by one source query. */\nexport const MAX_PLUGIN_REGISTRY_MANIFESTS_V1 = 256;\n/** Maximum aggregate manifest metadata returned by one source query. */\nexport const MAX_PLUGIN_REGISTRY_PAYLOAD_BYTES_V1 = 4 * 1024 * 1024;\n/** Maximum source URI length; sources are identifiers, never package paths. */\nexport const MAX_PLUGIN_REGISTRY_SOURCE_CHARS_V1 = 2048;\n/** Maximum digest/signature text length accepted from a source. */\nexport const MAX_PLUGIN_REGISTRY_PROOF_CHARS_V1 = 512;\n\nexport interface PluginRegistryManifestEnvelopeV1 {\n\treadonly manifest: PluginManifestV1;\n\treadonly source: string;\n\treadonly manifestDigest: string;\n\t/** Optional host- or registry-supplied signature. The verifier owns semantics. */\n\treadonly signature?: string;\n\t/** Optional signed artifact descriptor bound to this exact manifest identity. */\n\treadonly distribution?: PluginDistributionDescriptorV1;\n}\n\n/**\n * A transport-neutral registry source. Hosts inject HTTP, filesystem, or\n * package-manager implementations. The registry never receives package bytes\n * and never exposes source response bodies to the model context.\n */\nexport interface PluginRegistrySourceV1 {\n\t/** Optional stable source identity shown in diagnostics; never a local path. */\n\treadonly source?: string;\n\treadonly list: (input: { readonly signal?: AbortSignal }) => Promise<readonly PluginRegistryManifestEnvelopeV1[]>;\n}\n\nexport interface PluginRegistryDigestVerifierV1 {\n\treadonly verify: (input: {\n\t\treadonly manifest: PluginManifestV1;\n\t\treadonly source: string;\n\t\treadonly manifestDigest: string;\n\t\treadonly expectedDigest?: string;\n\t\treadonly signature?: string;\n\t}) =>\n\t\t| { readonly status: \"accepted\" }\n\t\t| { readonly status: \"rejected\"; readonly reason?: string }\n\t\t| Promise<{ readonly status: \"accepted\" } | { readonly status: \"rejected\"; readonly reason?: string }>;\n}\n\nexport interface PluginRegistryOptionsV1 {\n\treadonly source: PluginRegistrySourceV1;\n\treadonly host: HostFactsV1;\n\t/** Required digest/signature verifier. No implicit trust fallback. */\n\treadonly verify: PluginRegistryDigestVerifierV1;\n\t/** Existing source verifier contract is mandatory at the registry boundary. */\n\treadonly sourceVerifier: PluginSourceVerifierV1;\n\treadonly availableCapabilities?: readonly CapabilityRefV1[];\n\treadonly maxManifests?: number;\n}\n\nexport type PluginRegistryErrorCodeV1 =\n\t| \"cancelled\"\n\t| \"invalid_limit\"\n\t| \"source_rejected\"\n\t| \"invalid_manifest\"\n\t| \"invalid_source\"\n\t| \"invalid_digest\"\n\t| \"payload_too_large\"\n\t| \"too_many_manifests\"\n\t| \"incompatible\";\n\nexport class PluginRegistryErrorV1 extends Error {\n\treadonly code: PluginRegistryErrorCodeV1;\n\treadonly cause?: unknown;\n\n\tconstructor(code: PluginRegistryErrorCodeV1, message: string, cause?: unknown) {\n\t\tsuper(message, cause === undefined ? undefined : { cause });\n\t\tthis.name = \"PluginRegistryErrorV1\";\n\t\tthis.code = code;\n\t\tthis.cause = cause;\n\t}\n}\n\nexport interface PluginRegistryEntryV1 {\n\treadonly pluginId: string;\n\treadonly pluginVersion: string;\n\treadonly source: string;\n\treadonly manifestDigest: string;\n\treadonly signed: boolean;\n}\n\nexport type PluginRegistryRejectionCodeV1 = \"source_rejected\" | \"digest_rejected\" | \"incompatible\";\n\nexport interface PluginRegistryRejectionV1 {\n\treadonly pluginId: string;\n\treadonly pluginVersion: string;\n\treadonly code: PluginRegistryRejectionCodeV1;\n\treadonly reason: string;\n}\n\nexport interface PluginRegistryVerifiedEntryV1 extends PluginRegistryEntryV1 {\n\treadonly resolutionStatus: \"installed-ready\";\n}\n\nexport interface PluginRegistrySnapshotV1 {\n\treadonly version: 1;\n\treadonly source: string;\n\treadonly entries: readonly PluginRegistryEntryV1[];\n\treadonly catalog: PluginCatalogSnapshotV1;\n\t/** Only entries that passed proof validation and host compatibility. */\n\treadonly verified: readonly PluginRegistryVerifiedEntryV1[];\n\t/** Platform/API/test-only entries remain visible in catalog but are not verified. */\n\treadonly rejected: readonly PluginRegistryRejectionV1[];\n}\n\n/** Host-side package projection; package bytes never cross this boundary. */\nexport interface PluginRegistryResolvedPackageV1 {\n\treadonly manifest: PluginManifestV1;\n\treadonly source: string;\n\treadonly expectedDigest: string;\n\treadonly distribution?: PluginDistributionDescriptorV1;\n}\n\nexport interface PluginRegistryV1 {\n\treadonly list: (input?: { readonly signal?: AbortSignal }) => Promise<PluginRegistrySnapshotV1>;\n\t/** Optional host-side resolver. Older custom registry implementations may omit it. */\n\treadonly resolve?: (input: {\n\t\treadonly pluginId: string;\n\t\treadonly pluginVersion?: string;\n\t\treadonly signal?: AbortSignal;\n\t}) => Promise<PluginRegistryResolvedPackageV1 | undefined>;\n\t/** Optional host-side manifest projection used by the CLI catalog command. */\n\treadonly listManifests?: (input?: { readonly signal?: AbortSignal }) => Promise<readonly PluginManifestV1[]>;\n}\n\nfunction isAbortLike(error: unknown, signal: AbortSignal | undefined): boolean {\n\treturn (\n\t\tsignal?.aborted === true ||\n\t\t(error instanceof Error && (error.name === \"AbortError\" || error.name === \"AbortSignalError\"))\n\t);\n}\n\nfunction boundedString(\n\tvalue: unknown,\n\tlabel: string,\n\tmax: number,\n\tcode: PluginRegistryErrorCodeV1 = \"invalid_source\",\n): string {\n\tif (typeof value !== \"string\" || value.trim() === \"\" || value.length > max || /[\\u0000-\\u001f]/u.test(value)) {\n\t\tthrow new PluginRegistryErrorV1(code, `${label} must be a non-empty bounded string`);\n\t}\n\treturn value;\n}\n\nfunction assertAllowedKeys(value: Record<string, unknown>, allowed: readonly string[], label: string): void {\n\tconst expected = new Set(allowed);\n\tif (Object.keys(value).some((key) => !expected.has(key)))\n\t\tthrow new PluginRegistryErrorV1(\"invalid_manifest\", `${label} contains an unsupported field`);\n}\n\nfunction validateSource(source: unknown): string {\n\tconst value = boundedString(source, \"source\", MAX_PLUGIN_REGISTRY_SOURCE_CHARS_V1);\n\tif (/^(?:file:|[a-zA-Z]:[\\\\/]|[\\\\/]{1,2}|\\\\\\\\)/iu.test(value) || /\\s/u.test(value)) {\n\t\tthrow new PluginRegistryErrorV1(\n\t\t\t\"invalid_source\",\n\t\t\t\"Plugin registry source must be an opaque URI, not a local path\",\n\t\t);\n\t}\n\tif (/^https?:\\/\\//iu.test(value)) {\n\t\ttry {\n\t\t\tconst parsed = new URL(value);\n\t\t\tconst pathname = parsed.pathname.length > 512 ? `${parsed.pathname.slice(0, 511)}…` : parsed.pathname;\n\t\t\treturn `${parsed.origin}${pathname || \"/\"}`;\n\t\t} catch (error) {\n\t\t\tthrow new PluginRegistryErrorV1(\"invalid_source\", \"Plugin registry source URL is invalid\", error);\n\t\t}\n\t}\n\treturn value;\n}\n\nfunction validateManifest(manifest: unknown): PluginManifestV1 {\n\tif (typeof manifest !== \"object\" || manifest === null || Array.isArray(manifest)) {\n\t\tthrow new PluginRegistryErrorV1(\"invalid_manifest\", \"Registry manifest must be an object\");\n\t}\n\tconst value = manifest as Record<string, unknown>;\n\tassertAllowedKeys(\n\t\tvalue,\n\t\t[\n\t\t\t\"id\",\n\t\t\t\"pluginVersion\",\n\t\t\t\"apiVersion\",\n\t\t\t\"minHostVersion\",\n\t\t\t\"maxHostVersion\",\n\t\t\t\"capabilityRefs\",\n\t\t\t\"requires\",\n\t\t\t\"platform\",\n\t\t\t\"testOnly\",\n\t\t],\n\t\t\"Registry manifest\",\n\t);\n\tif (typeof value.id !== \"string\" || value.id.trim() === \"\" || value.id.length > 256)\n\t\tthrow new PluginRegistryErrorV1(\"invalid_manifest\", \"Registry manifest id is invalid\");\n\tif (typeof value.pluginVersion !== \"string\" || value.pluginVersion.trim() === \"\" || value.pluginVersion.length > 256)\n\t\tthrow new PluginRegistryErrorV1(\"invalid_manifest\", \"Registry manifest pluginVersion is invalid\");\n\tif (typeof value.apiVersion !== \"string\" || value.apiVersion.trim() === \"\" || value.apiVersion.length > 256)\n\t\tthrow new PluginRegistryErrorV1(\"invalid_manifest\", \"Registry manifest apiVersion is invalid\");\n\tif (value.minHostVersion === undefined && value.maxHostVersion === undefined)\n\t\tthrow new PluginRegistryErrorV1(\n\t\t\t\"invalid_manifest\",\n\t\t\t\"Published plugins must declare host version compatibility range: set minHostVersion and/or maxHostVersion\",\n\t\t);\n\tlet bytes: number;\n\ttry {\n\t\tbytes = new TextEncoder().encode(JSON.stringify(manifest)).byteLength;\n\t} catch (error) {\n\t\tthrow new PluginRegistryErrorV1(\"invalid_manifest\", \"Registry manifest cannot be serialized\", error);\n\t}\n\tif (bytes > MAX_PLUGIN_REGISTRY_MANIFEST_BYTES_V1)\n\t\tthrow new PluginRegistryErrorV1(\"payload_too_large\", \"Registry manifest exceeds the size limit\");\n\treturn Object.freeze({ ...value } as unknown as PluginManifestV1);\n}\n\nfunction validateEnvelope(value: unknown): PluginRegistryManifestEnvelopeV1 {\n\tif (typeof value !== \"object\" || value === null || Array.isArray(value))\n\t\tthrow new PluginRegistryErrorV1(\"invalid_manifest\", \"Registry response entry must be an object\");\n\tconst entry = value as Record<string, unknown>;\n\tassertAllowedKeys(\n\t\tentry,\n\t\t[\"manifest\", \"source\", \"manifestDigest\", \"signature\", \"distribution\"],\n\t\t\"Registry response entry\",\n\t);\n\tconst manifest = validateManifest(entry.manifest);\n\tconst source = validateSource(entry.source);\n\tconst manifestDigest = boundedString(entry.manifestDigest, \"manifestDigest\", MAX_PLUGIN_REGISTRY_PROOF_CHARS_V1);\n\tif (entry.signature !== undefined) boundedString(entry.signature, \"signature\", MAX_PLUGIN_REGISTRY_PROOF_CHARS_V1);\n\tlet distribution: PluginDistributionDescriptorV1 | undefined;\n\tif (entry.distribution !== undefined) {\n\t\ttry {\n\t\t\tdistribution = createPluginDistributionV1().validateDescriptor(entry.distribution);\n\t\t} catch (error) {\n\t\t\tthrow new PluginRegistryErrorV1(\"invalid_manifest\", \"Registry distribution descriptor is invalid\", error);\n\t\t}\n\t\tif (\n\t\t\tdistribution.pluginId !== manifest.id ||\n\t\t\tdistribution.pluginVersion !== manifest.pluginVersion ||\n\t\t\tdistribution.manifestDigest !== manifestDigest\n\t\t)\n\t\t\tthrow new PluginRegistryErrorV1(\n\t\t\t\t\"invalid_manifest\",\n\t\t\t\t\"Registry distribution descriptor does not match the manifest identity\",\n\t\t\t);\n\t}\n\treturn Object.freeze({\n\t\tmanifest,\n\t\tsource,\n\t\tmanifestDigest,\n\t\t...(entry.signature === undefined ? {} : { signature: entry.signature as string }),\n\t\t...(distribution === undefined ? {} : { distribution }),\n\t});\n}\n\nfunction validateMax(value: number | undefined): number {\n\tconst max = value ?? MAX_PLUGIN_REGISTRY_MANIFESTS_V1;\n\tif (!Number.isSafeInteger(max) || max < 1 || max > MAX_PLUGIN_REGISTRY_MANIFESTS_V1)\n\t\tthrow new PluginRegistryErrorV1(\n\t\t\t\"invalid_limit\",\n\t\t\t`maxManifests must be an integer between 1 and ${MAX_PLUGIN_REGISTRY_MANIFESTS_V1}`,\n\t\t);\n\treturn max;\n}\n\nasync function validateSourceProof(\n\tentry: PluginRegistryManifestEnvelopeV1,\n\tverifier: PluginRegistryDigestVerifierV1,\n\tsourceVerifier: PluginSourceVerifierV1,\n): Promise<void> {\n\tconst actualDigest = pluginManifestDigestV1(entry.manifest);\n\tif (entry.manifestDigest !== actualDigest)\n\t\tthrow new PluginRegistryErrorV1(\n\t\t\t\"invalid_digest\",\n\t\t\t`Manifest digest mismatch for ${entry.manifest.id}@${entry.manifest.pluginVersion}`,\n\t\t);\n\ttry {\n\t\tconst result = await verifier.verify({\n\t\t\tmanifest: entry.manifest,\n\t\t\tsource: entry.source,\n\t\t\tmanifestDigest: actualDigest,\n\t\t\texpectedDigest: entry.manifestDigest,\n\t\t\tsignature: entry.signature,\n\t\t});\n\t\tif (result.status !== \"accepted\")\n\t\t\tthrow new PluginRegistryErrorV1(\"source_rejected\", result.reason ?? \"Registry source proof was rejected\");\n\t} catch (error) {\n\t\tif (error instanceof PluginRegistryErrorV1) throw error;\n\t\tthrow new PluginRegistryErrorV1(\"source_rejected\", \"Registry source proof was rejected\", error);\n\t}\n\tlet result: ReturnType<PluginSourceVerifierV1>;\n\ttry {\n\t\tresult = sourceVerifier({\n\t\t\tpluginId: entry.manifest.id,\n\t\t\tpluginVersion: entry.manifest.pluginVersion,\n\t\t\tsource: entry.source,\n\t\t\tmanifestDigest: actualDigest,\n\t\t});\n\t} catch (error) {\n\t\tthrow new PluginRegistryErrorV1(\"source_rejected\", \"Plugin source verifier failed\", error);\n\t}\n\tif (result.status !== \"accepted\")\n\t\tthrow new PluginRegistryErrorV1(\"source_rejected\", result.reason ?? \"Plugin source was rejected\");\n}\n\nfunction sourceIdentity(entries: readonly PluginRegistryManifestEnvelopeV1[]): string {\n\tconst sources = [...new Set(entries.map((entry) => entry.source))].sort((left, right) => left.localeCompare(right));\n\treturn sources.join(\",\");\n}\n\ninterface RegistryLoadV1 {\n\treadonly accepted: readonly PluginRegistryManifestEnvelopeV1[];\n\treadonly snapshot: PluginRegistrySnapshotV1;\n}\n\n/** Create a deterministic, host-injected registry client. */\nexport function createPluginRegistryV1(options: PluginRegistryOptionsV1): PluginRegistryV1 {\n\tconst maxManifests = validateMax(options.maxManifests);\n\tif (options.source === undefined || typeof options.source.list !== \"function\")\n\t\tthrow new PluginRegistryErrorV1(\"invalid_source\", \"Registry source must provide list()\");\n\tif (options.source.source !== undefined) validateSource(options.source.source);\n\tif (options.verify === undefined || typeof options.verify.verify !== \"function\")\n\t\tthrow new PluginRegistryErrorV1(\"source_rejected\", \"Registry source/digest verifier is required\");\n\tif (options.sourceVerifier === undefined || typeof options.sourceVerifier !== \"function\")\n\t\tthrow new PluginRegistryErrorV1(\"source_rejected\", \"Registry source verifier is required\");\n\n\tconst load = async (input: { readonly signal?: AbortSignal } = {}): Promise<RegistryLoadV1> => {\n\t\tif (input.signal?.aborted)\n\t\t\tthrow new PluginRegistryErrorV1(\"cancelled\", \"Plugin registry operation was cancelled\");\n\t\tlet raw: readonly PluginRegistryManifestEnvelopeV1[];\n\t\ttry {\n\t\t\traw = await options.source.list({ signal: input.signal });\n\t\t} catch (error) {\n\t\t\tif (isAbortLike(error, input.signal))\n\t\t\t\tthrow new PluginRegistryErrorV1(\"cancelled\", \"Plugin registry operation was cancelled\", error);\n\t\t\tthrow new PluginRegistryErrorV1(\"source_rejected\", \"Plugin registry source failed\", error);\n\t\t}\n\t\tif (input.signal?.aborted)\n\t\t\tthrow new PluginRegistryErrorV1(\"cancelled\", \"Plugin registry operation was cancelled\");\n\t\tif (!Array.isArray(raw))\n\t\t\tthrow new PluginRegistryErrorV1(\"invalid_manifest\", \"Registry source must return an array\");\n\t\tif (raw.length > maxManifests)\n\t\t\tthrow new PluginRegistryErrorV1(\"too_many_manifests\", \"Registry response contains too many manifests\");\n\t\tconst entries = raw.map(validateEnvelope);\n\t\tconst payloadBytes = entries.reduce((total, entry) => {\n\t\t\tconst manifestBytes = new TextEncoder().encode(JSON.stringify(entry.manifest)).byteLength;\n\t\t\tconst distributionBytes =\n\t\t\t\tentry.distribution === undefined\n\t\t\t\t\t? 0\n\t\t\t\t\t: new TextEncoder().encode(JSON.stringify(entry.distribution)).byteLength;\n\t\t\treturn (\n\t\t\t\ttotal +\n\t\t\t\tmanifestBytes +\n\t\t\t\tdistributionBytes +\n\t\t\t\tnew TextEncoder().encode(entry.source).byteLength +\n\t\t\t\tnew TextEncoder().encode(entry.manifestDigest).byteLength +\n\t\t\t\t(entry.signature === undefined ? 0 : new TextEncoder().encode(entry.signature).byteLength)\n\t\t\t);\n\t\t}, 0);\n\t\tif (payloadBytes > MAX_PLUGIN_REGISTRY_PAYLOAD_BYTES_V1)\n\t\t\tthrow new PluginRegistryErrorV1(\"payload_too_large\", \"Registry response exceeds the aggregate size limit\");\n\t\tconst seen = new Set<string>();\n\t\tconst accepted: PluginRegistryManifestEnvelopeV1[] = [];\n\t\tconst rejected: PluginRegistryRejectionV1[] = [];\n\t\tfor (const entry of entries) {\n\t\t\tconst identity = `${entry.manifest.id}@${entry.manifest.pluginVersion}`;\n\t\t\tif (seen.has(identity))\n\t\t\t\tthrow new PluginRegistryErrorV1(\"invalid_manifest\", `Duplicate registry manifest: ${identity}`);\n\t\t\tseen.add(identity);\n\t\t\ttry {\n\t\t\t\tawait validateSourceProof(entry, options.verify, options.sourceVerifier);\n\t\t\t} catch (error) {\n\t\t\t\tif (!(error instanceof PluginRegistryErrorV1)) throw error;\n\t\t\t\tif (error.cause !== undefined) throw error;\n\t\t\t\tif (error.code !== \"source_rejected\" && error.code !== \"invalid_digest\") throw error;\n\t\t\t\trejected.push({\n\t\t\t\t\tpluginId: entry.manifest.id,\n\t\t\t\t\tpluginVersion: entry.manifest.pluginVersion,\n\t\t\t\t\tcode: error.code === \"invalid_digest\" ? \"digest_rejected\" : \"source_rejected\",\n\t\t\t\t\treason:\n\t\t\t\t\t\terror.code === \"invalid_digest\" ? \"Manifest digest mismatch\" : \"Registry source proof was rejected\",\n\t\t\t\t});\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tif (input.signal?.aborted)\n\t\t\t\tthrow new PluginRegistryErrorV1(\"cancelled\", \"Plugin registry operation was cancelled\");\n\t\t\taccepted.push(entry);\n\t\t}\n\t\tconst manifests = accepted.map((entry) => entry.manifest);\n\t\tconst catalog = buildPluginCatalogV1({\n\t\t\tmanifests,\n\t\t\thost: options.host,\n\t\t\tavailableCapabilities: options.availableCapabilities,\n\t\t\tmaxEntries: maxManifests,\n\t\t});\n\t\tconst publicEntries = Object.freeze(\n\t\t\t[...accepted]\n\t\t\t\t.sort((left, right) => {\n\t\t\t\t\tconst idOrder = left.manifest.id.localeCompare(right.manifest.id);\n\t\t\t\t\treturn idOrder === 0\n\t\t\t\t\t\t? comparePluginVersionsV1(right.manifest.pluginVersion, left.manifest.pluginVersion)\n\t\t\t\t\t\t: idOrder;\n\t\t\t\t})\n\t\t\t\t.map((entry) =>\n\t\t\t\t\tObject.freeze({\n\t\t\t\t\t\tpluginId: entry.manifest.id,\n\t\t\t\t\t\tpluginVersion: entry.manifest.pluginVersion,\n\t\t\t\t\t\tsource: entry.source,\n\t\t\t\t\t\tmanifestDigest: entry.manifestDigest,\n\t\t\t\t\t\tsigned: entry.signature !== undefined,\n\t\t\t\t\t}),\n\t\t\t\t),\n\t\t);\n\t\tconst catalogByIdentity = new Map(\n\t\t\tcatalog.entries.map((entry) => [`${entry.pluginId}@${entry.pluginVersion}`, entry] as const),\n\t\t);\n\t\tconst verified = Object.freeze(\n\t\t\tpublicEntries.flatMap((entry) => {\n\t\t\t\tconst catalogEntry = catalogByIdentity.get(`${entry.pluginId}@${entry.pluginVersion}`);\n\t\t\t\tif (catalogEntry?.resolution.status === \"installed-ready\")\n\t\t\t\t\treturn [{ ...entry, resolutionStatus: \"installed-ready\" as const }];\n\t\t\t\tconst reason = catalogEntry?.resolution.diagnostics[0]?.message ?? \"Plugin is incompatible with this host\";\n\t\t\t\trejected.push({\n\t\t\t\t\tpluginId: entry.pluginId,\n\t\t\t\t\tpluginVersion: entry.pluginVersion,\n\t\t\t\t\tcode: \"incompatible\",\n\t\t\t\t\treason,\n\t\t\t\t});\n\t\t\t\treturn [];\n\t\t\t}),\n\t\t);\n\t\treturn {\n\t\t\taccepted: Object.freeze(accepted),\n\t\t\tsnapshot: Object.freeze({\n\t\t\t\tversion: 1,\n\t\t\t\tsource:\n\t\t\t\t\toptions.source.source === undefined ? sourceIdentity(accepted) : validateSource(options.source.source),\n\t\t\t\tentries: publicEntries,\n\t\t\t\tcatalog,\n\t\t\t\tverified,\n\t\t\t\trejected: Object.freeze(rejected),\n\t\t\t}),\n\t\t};\n\t};\n\tconst listManifests = async (\n\t\tinput: { readonly signal?: AbortSignal } = {},\n\t): Promise<readonly PluginManifestV1[]> => {\n\t\tconst loaded = await load(input);\n\t\treturn Object.freeze(\n\t\t\tloaded.snapshot.catalog.entries.flatMap((catalogEntry) =>\n\t\t\t\tloaded.accepted\n\t\t\t\t\t.filter(\n\t\t\t\t\t\t(entry) =>\n\t\t\t\t\t\t\tentry.manifest.id === catalogEntry.pluginId &&\n\t\t\t\t\t\t\tentry.manifest.pluginVersion === catalogEntry.pluginVersion,\n\t\t\t\t\t)\n\t\t\t\t\t.map((entry) => entry.manifest),\n\t\t\t),\n\t\t);\n\t};\n\treturn {\n\t\tlist: async (input = {}) => (await load(input)).snapshot,\n\t\tlistManifests,\n\t\tresolve: async (input) => {\n\t\t\tconst loaded = await load({ signal: input.signal });\n\t\t\tconst verified = new Set(loaded.snapshot.verified.map((entry) => `${entry.pluginId}@${entry.pluginVersion}`));\n\t\t\tconst identity =\n\t\t\t\tinput.pluginVersion === undefined\n\t\t\t\t\t? loaded.snapshot.catalog.entries.find(\n\t\t\t\t\t\t\t(candidate) =>\n\t\t\t\t\t\t\t\tcandidate.pluginId === input.pluginId &&\n\t\t\t\t\t\t\t\tcandidate.resolution.status === \"installed-ready\" &&\n\t\t\t\t\t\t\t\tverified.has(`${candidate.pluginId}@${candidate.pluginVersion}`),\n\t\t\t\t\t\t)\n\t\t\t\t\t: loaded.snapshot.catalog.entries.find(\n\t\t\t\t\t\t\t(candidate) =>\n\t\t\t\t\t\t\t\tcandidate.pluginId === input.pluginId &&\n\t\t\t\t\t\t\t\tcandidate.pluginVersion === input.pluginVersion &&\n\t\t\t\t\t\t\t\tcandidate.resolution.status === \"installed-ready\" &&\n\t\t\t\t\t\t\t\tverified.has(`${candidate.pluginId}@${candidate.pluginVersion}`),\n\t\t\t\t\t\t);\n\t\t\tconst entry =\n\t\t\t\tidentity === undefined\n\t\t\t\t\t? undefined\n\t\t\t\t\t: loaded.accepted.find(\n\t\t\t\t\t\t\t(candidate) =>\n\t\t\t\t\t\t\t\tcandidate.manifest.id === identity.pluginId &&\n\t\t\t\t\t\t\t\tcandidate.manifest.pluginVersion === identity.pluginVersion,\n\t\t\t\t\t\t);\n\t\t\tif (entry === undefined) return undefined;\n\t\t\treturn Object.freeze({\n\t\t\t\tmanifest: entry.manifest,\n\t\t\t\tsource: entry.source,\n\t\t\t\texpectedDigest: entry.manifestDigest,\n\t\t\t\t...(entry.distribution === undefined ? {} : { distribution: entry.distribution }),\n\t\t\t});\n\t\t},\n\t};\n}\n"]}

package/dist/plugins/ecosystem/resolver.d.ts

@@ -0,0 +1,32 @@
+import type { CapabilityRefV1, HostFactsV1, PluginManifestV1, PluginResolutionV1, ProfileResolutionV1, ResolvedManifestV1, ResolvedPluginV1 } from "./types.ts";
+/** Resolve one installed plugin against concrete host facts. */
+export declare function resolvePluginCompatibilityV1(input: {
+    readonly manifest: PluginManifestV1;
+    readonly host: HostFactsV1;
+    readonly required?: boolean;
+    readonly disabled?: boolean;
+    readonly availableCapabilities?: readonly CapabilityRefV1[];
+    /** Host's own version; when omitted, the manifest min/maxHostVersion range is not checked. */
+    readonly hostVersion?: string;
+}): PluginResolutionV1;
+/** Build an order-independent identity including adapter and capability refs. */
+export declare function buildResolvedManifestV1(input: {
+    readonly profileId: string;
+    readonly profileVersion: string;
+    readonly plugins: readonly ResolvedPluginV1[];
+}): ResolvedManifestV1;
+/** Resolve all plugins in a Profile; optional unavailable plugins do not block startup. */
+export declare function resolvePluginProfileV1(input: {
+    readonly profileId: string;
+    readonly profileVersion: string;
+    readonly plugins: readonly {
+        readonly manifest: PluginManifestV1;
+        readonly required?: boolean;
+        readonly disabled?: boolean;
+    }[];
+    readonly host: HostFactsV1;
+    readonly availableCapabilities?: readonly CapabilityRefV1[];
+    /** Host's own version, forwarded to each plugin's min/maxHostVersion range check. */
+    readonly hostVersion?: string;
+}): ProfileResolutionV1;
+//# sourceMappingURL=resolver.d.ts.map

package/dist/plugins/ecosystem/resolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolver.d.ts","sourceRoot":"","sources":["../../../src/plugins/ecosystem/resolver.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACX,eAAe,EAEf,WAAW,EAGX,gBAAgB,EAEhB,kBAAkB,EAClB,mBAAmB,EACnB,kBAAkB,EAClB,gBAAgB,EAEhB,MAAM,YAAY,CAAC;AA2KpB,gEAAgE;AAChE,wBAAgB,4BAA4B,CAAC,KAAK,EAAE;IACnD,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;IACpC,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,qBAAqB,CAAC,EAAE,SAAS,eAAe,EAAE,CAAC;IAC5D,8FAA8F;IAC9F,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC9B,GAAG,kBAAkB,CAiJrB;AAYD,iFAAiF;AACjF,wBAAgB,uBAAuB,CAAC,KAAK,EAAE;IAC9C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,OAAO,EAAE,SAAS,gBAAgB,EAAE,CAAC;CAC9C,GAAG,kBAAkB,CA2BrB;AAED,2FAA2F;AAC3F,wBAAgB,sBAAsB,CAAC,KAAK,EAAE;IAC7C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,OAAO,EAAE,SAAS;QAC1B,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;QACpC,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;QAC5B,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;KAC5B,EAAE,CAAC;IACJ,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,qBAAqB,CAAC,EAAE,SAAS,eAAe,EAAE,CAAC;IAC5D,qFAAqF;IACrF,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC9B,GAAG,mBAAmB,CAgCtB","sourcesContent":["import { stableJsonDigest } from \"../../profile/identity.ts\";\nimport { comparePluginVersionsV1 } from \"./catalog.ts\";\nimport type {\n\tCapabilityRefV1,\n\tHostAdapterFactV1,\n\tHostFactsV1,\n\tPluginAdapterManifestV1,\n\tPluginDiagnosticV1,\n\tPluginManifestV1,\n\tPluginResolutionStatusV1,\n\tPluginResolutionV1,\n\tProfileResolutionV1,\n\tResolvedManifestV1,\n\tResolvedPluginV1,\n\tSelectedAdapterV1,\n} from \"./types.ts\";\n\nfunction assertNonEmpty(value: string, label: string): void {\n\tif (typeof value !== \"string\" || value.trim().length === 0) throw new Error(`${label} must be a non-empty string`);\n}\n\nfunction matchesList<T extends string>(value: string, allowed: readonly T[] | undefined): boolean {\n\treturn (\n\t\tallowed === undefined || (allowed.length > 0 && (allowed.includes(value as T) || allowed.includes(\"any\" as T)))\n\t);\n}\n\nfunction hasAllFeatures(hostFeatures: readonly string[], required: readonly string[] | undefined): string | undefined {\n\tif (required === undefined) return undefined;\n\tconst available = new Set(hostFeatures);\n\treturn required.find((feature) => !available.has(feature));\n}\n\nfunction runtimeVersion(host: HostFactsV1, name: string): string | undefined {\n\treturn host.runtime.find((runtime) => runtime.name === name)?.version;\n}\n\nfunction diagnostic(\n\tcode: PluginDiagnosticV1[\"code\"],\n\tmessage: string,\n\tdetails?: Readonly<Record<string, string>>,\n): PluginDiagnosticV1 {\n\treturn details === undefined ? { code, message } : { code, message, details };\n}\n\nfunction adapterMatches(adapter: PluginAdapterManifestV1, host: HostFactsV1): boolean {\n\treturn (\n\t\tmatchesList(host.os, adapter.os) &&\n\t\tmatchesList(host.arch, adapter.arch) &&\n\t\thasAllFeatures(host.hostFeatures, adapter.hostFeatures) === undefined\n\t);\n}\n\nfunction hostAdapterMatches(\n\tadapter: PluginAdapterManifestV1,\n\thostAdapter: HostAdapterFactV1,\n\thost: HostFactsV1,\n): boolean {\n\treturn (\n\t\thostAdapter.id === adapter.id &&\n\t\thostAdapter.version === adapter.version &&\n\t\tadapterMatches(adapter, host) &&\n\t\t(hostAdapter.os === undefined || hostAdapter.os === host.os || hostAdapter.os === \"any\") &&\n\t\t(hostAdapter.arch === undefined || hostAdapter.arch === host.arch || hostAdapter.arch === \"any\") &&\n\t\thasAllFeatures(hostAdapter.hostFeatures ?? [], adapter.hostFeatures) === undefined\n\t);\n}\n\nfunction selectAdapter(\n\tmanifest: PluginManifestV1,\n\thost: HostFactsV1,\n): { readonly selected?: SelectedAdapterV1; readonly diagnostic?: PluginDiagnosticV1 } | undefined {\n\tconst adapters = manifest.platform?.adapters;\n\tif (adapters === undefined || adapters.length === 0) return undefined;\n\tconst installed = host.adapters ?? [];\n\tconst candidates = adapters\n\t\t.filter((adapter) => adapterMatches(adapter, host))\n\t\t.filter((adapter) => installed.some((hostAdapter) => hostAdapterMatches(adapter, hostAdapter, host)))\n\t\t.sort((left, right) => {\n\t\t\tconst idOrder = left.id.localeCompare(right.id);\n\t\t\treturn idOrder === 0 ? comparePluginVersionsV1(right.version, left.version) : idOrder;\n\t\t});\n\tconst selected = candidates[0];\n\treturn selected === undefined\n\t\t? {\n\t\t\t\tdiagnostic: diagnostic(\n\t\t\t\t\t\"adapter-unavailable\",\n\t\t\t\t\t`No installed adapter satisfies plugin ${manifest.id} on ${host.os}/${host.arch}`,\n\t\t\t\t),\n\t\t\t}\n\t\t: { selected: { id: selected.id, version: selected.version } };\n}\n\nfunction normalizeRefs(refs: readonly CapabilityRefV1[] | undefined): readonly CapabilityRefV1[] {\n\tconst normalized = [...(refs ?? [])].map((ref) => {\n\t\tassertNonEmpty(ref.id, \"capability id\");\n\t\tif (!Number.isSafeInteger(ref.version) || ref.version < 1) {\n\t\t\tthrow new Error(`capability ${ref.id} version must be a positive safe integer`);\n\t\t}\n\t\treturn { id: ref.id, version: ref.version };\n\t});\n\tnormalized.sort((left, right) =>\n\t\tleft.id === right.id ? left.version - right.version : left.id.localeCompare(right.id),\n\t);\n\treturn normalized;\n}\n\nfunction hasCapability(ref: CapabilityRefV1, available: readonly CapabilityRefV1[]): boolean {\n\treturn available.some((candidate) => candidate.id === ref.id && candidate.version === ref.version);\n}\n\nfunction resolvePlatform(\n\tmanifest: PluginManifestV1,\n\thost: HostFactsV1,\n): {\n\treadonly status?: PluginResolutionStatusV1;\n\treadonly diagnostics: readonly PluginDiagnosticV1[];\n\treadonly selectedAdapter?: SelectedAdapterV1;\n} {\n\tconst platform = manifest.platform;\n\tif (platform === undefined) return { diagnostics: [] };\n\tif (!matchesList(host.os, platform.os)) {\n\t\treturn {\n\t\t\tstatus: \"installed-unavailable\",\n\t\t\tdiagnostics: [diagnostic(\"unsupported-platform\", `Plugin ${manifest.id} does not support host OS ${host.os}`)],\n\t\t};\n\t}\n\tif (!matchesList(host.arch, platform.arch)) {\n\t\treturn {\n\t\t\tstatus: \"installed-unavailable\",\n\t\t\tdiagnostics: [\n\t\t\t\tdiagnostic(\n\t\t\t\t\t\"unsupported-architecture\",\n\t\t\t\t\t`Plugin ${manifest.id} does not support host architecture ${host.arch}`,\n\t\t\t\t),\n\t\t\t],\n\t\t};\n\t}\n\tconst missingFeature = hasAllFeatures(host.hostFeatures, platform.hostFeatures);\n\tif (missingFeature !== undefined) {\n\t\treturn {\n\t\t\tstatus: \"installed-unavailable\",\n\t\t\tdiagnostics: [\n\t\t\t\tdiagnostic(\"missing-host-feature\", `Host feature is missing: ${missingFeature}`, {\n\t\t\t\t\tfeature: missingFeature,\n\t\t\t\t}),\n\t\t\t],\n\t\t};\n\t}\n\tfor (const constraint of platform.runtime ?? []) {\n\t\tconst actual = runtimeVersion(host, constraint.name);\n\t\tif (actual === undefined) {\n\t\t\treturn {\n\t\t\t\tstatus: \"version-incompatible\",\n\t\t\t\tdiagnostics: [\n\t\t\t\t\tdiagnostic(\"missing-runtime\", `Required runtime is missing: ${constraint.name}`, {\n\t\t\t\t\t\truntime: constraint.name,\n\t\t\t\t\t}),\n\t\t\t\t],\n\t\t\t};\n\t\t}\n\t\tif (\n\t\t\t(constraint.minVersion !== undefined && comparePluginVersionsV1(actual, constraint.minVersion) < 0) ||\n\t\t\t(constraint.maxVersion !== undefined && comparePluginVersionsV1(actual, constraint.maxVersion) > 0)\n\t\t) {\n\t\t\treturn {\n\t\t\t\tstatus: \"version-incompatible\",\n\t\t\t\tdiagnostics: [\n\t\t\t\t\tdiagnostic(\n\t\t\t\t\t\t\"runtime-version-incompatible\",\n\t\t\t\t\t\t`Runtime ${constraint.name}@${actual} is outside the supported range`,\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\truntime: constraint.name,\n\t\t\t\t\t\t\tactual,\n\t\t\t\t\t\t},\n\t\t\t\t\t),\n\t\t\t\t],\n\t\t\t};\n\t\t}\n\t}\n\tconst selected = selectAdapter(manifest, host);\n\tif (selected?.diagnostic !== undefined)\n\t\treturn { status: \"dependency-unavailable\", diagnostics: [selected.diagnostic] };\n\treturn { diagnostics: [], selectedAdapter: selected?.selected };\n}\n\n/** Resolve one installed plugin against concrete host facts. */\nexport function resolvePluginCompatibilityV1(input: {\n\treadonly manifest: PluginManifestV1;\n\treadonly host: HostFactsV1;\n\treadonly required?: boolean;\n\treadonly disabled?: boolean;\n\treadonly availableCapabilities?: readonly CapabilityRefV1[];\n\t/** Host's own version; when omitted, the manifest min/maxHostVersion range is not checked. */\n\treadonly hostVersion?: string;\n}): PluginResolutionV1 {\n\tconst { manifest, host } = input;\n\tassertNonEmpty(manifest.id, \"plugin id\");\n\tassertNonEmpty(manifest.pluginVersion, \"pluginVersion\");\n\tassertNonEmpty(manifest.apiVersion, \"apiVersion\");\n\tconst required = input.required ?? true;\n\tif (input.disabled === true) {\n\t\treturn {\n\t\t\tpluginId: manifest.id,\n\t\t\tpluginVersion: manifest.pluginVersion,\n\t\t\trequired,\n\t\t\tstatus: \"disabled\",\n\t\t\tdiagnostics: [diagnostic(\"plugin-disabled\", `Plugin ${manifest.id} is disabled`)],\n\t\t};\n\t}\n\tif (manifest.testOnly === true) {\n\t\treturn {\n\t\t\tpluginId: manifest.id,\n\t\t\tpluginVersion: manifest.pluginVersion,\n\t\t\trequired,\n\t\t\tstatus: \"installed-unavailable\",\n\t\t\tdiagnostics: [\n\t\t\t\tdiagnostic(\"test-only-plugin\", `Plugin ${manifest.id} is test-only and cannot be selected for production`),\n\t\t\t],\n\t\t};\n\t}\n\tif (![\"windows\", \"macos\", \"linux\"].includes(host.os)) {\n\t\treturn {\n\t\t\tpluginId: manifest.id,\n\t\t\tpluginVersion: manifest.pluginVersion,\n\t\t\trequired,\n\t\t\tstatus: \"installed-unavailable\",\n\t\t\tdiagnostics: [diagnostic(\"unsupported-platform\", `Host OS is unknown: ${host.os}`)],\n\t\t};\n\t}\n\tif (![\"x64\", \"arm64\"].includes(host.arch)) {\n\t\treturn {\n\t\t\tpluginId: manifest.id,\n\t\t\tpluginVersion: manifest.pluginVersion,\n\t\t\trequired,\n\t\t\tstatus: \"installed-unavailable\",\n\t\t\tdiagnostics: [diagnostic(\"unsupported-architecture\", `Host architecture is unknown: ${host.arch}`)],\n\t\t};\n\t}\n\tif (manifest.minHostVersion !== undefined || manifest.maxHostVersion !== undefined) {\n\t\tif (manifest.minHostVersion !== undefined) assertNonEmpty(manifest.minHostVersion, \"minHostVersion\");\n\t\tif (manifest.maxHostVersion !== undefined) assertNonEmpty(manifest.maxHostVersion, \"maxHostVersion\");\n\t\tif (input.hostVersion !== undefined) {\n\t\t\tconst belowFloor =\n\t\t\t\tmanifest.minHostVersion !== undefined &&\n\t\t\t\tcomparePluginVersionsV1(input.hostVersion, manifest.minHostVersion) < 0;\n\t\t\tconst aboveCeiling =\n\t\t\t\tmanifest.maxHostVersion !== undefined &&\n\t\t\t\tcomparePluginVersionsV1(input.hostVersion, manifest.maxHostVersion) > 0;\n\t\t\tif (belowFloor || aboveCeiling) {\n\t\t\t\t// The declared compatibility range, rendered human-readably\n\t\t\t\t// (e.g. \">= 1.0.0 and <= 2.0.0\"); a single bound keeps the\n\t\t\t\t// floor-only shape the diagnostics contract pins.\n\t\t\t\tconst requiredRange = [\n\t\t\t\t\tmanifest.minHostVersion !== undefined ? `>= ${manifest.minHostVersion}` : undefined,\n\t\t\t\t\tmanifest.maxHostVersion !== undefined ? `<= ${manifest.maxHostVersion}` : undefined,\n\t\t\t\t]\n\t\t\t\t\t.filter((bound) => bound !== undefined)\n\t\t\t\t\t.join(\" and \");\n\t\t\t\tconst guidance = belowFloor\n\t\t\t\t\t? `Upgrade the host to at least ${manifest.minHostVersion} to load this plugin.`\n\t\t\t\t\t: `Install a plugin version whose declared host range includes ${input.hostVersion}.`;\n\t\t\t\treturn {\n\t\t\t\t\tpluginId: manifest.id,\n\t\t\t\t\tpluginVersion: manifest.pluginVersion,\n\t\t\t\t\trequired,\n\t\t\t\t\tstatus: \"version-incompatible\",\n\t\t\t\t\tdiagnostics: [\n\t\t\t\t\t\tdiagnostic(\n\t\t\t\t\t\t\t\"host-version-incompatible\",\n\t\t\t\t\t\t\t`Plugin ${manifest.id} requires host version ${requiredRange}, but the host is ${input.hostVersion}. ${guidance}`,\n\t\t\t\t\t\t\t{ required: requiredRange, actual: input.hostVersion },\n\t\t\t\t\t\t),\n\t\t\t\t\t],\n\t\t\t\t};\n\t\t\t}\n\t\t}\n\t}\n\tif (manifest.apiVersion !== host.apiVersion) {\n\t\treturn {\n\t\t\tpluginId: manifest.id,\n\t\t\tpluginVersion: manifest.pluginVersion,\n\t\t\trequired,\n\t\t\tstatus: \"version-incompatible\",\n\t\t\tdiagnostics: [\n\t\t\t\tdiagnostic(\n\t\t\t\t\t\"api-version-incompatible\",\n\t\t\t\t\t`Plugin requires API ${manifest.apiVersion}, host provides ${host.apiVersion}`,\n\t\t\t\t),\n\t\t\t],\n\t\t};\n\t}\n\tconst platform = resolvePlatform(manifest, host);\n\tif (platform.status !== undefined) {\n\t\treturn {\n\t\t\tpluginId: manifest.id,\n\t\t\tpluginVersion: manifest.pluginVersion,\n\t\t\trequired,\n\t\t\tstatus: platform.status,\n\t\t\tdiagnostics: platform.diagnostics,\n\t\t};\n\t}\n\tconst available = input.availableCapabilities ?? [];\n\tconst dependencyDiagnostics: PluginDiagnosticV1[] = [];\n\tfor (const requirement of manifest.requires ?? []) {\n\t\tif (hasCapability(requirement, available)) continue;\n\t\tdependencyDiagnostics.push(\n\t\t\tdiagnostic(\n\t\t\t\trequirement.optional === true ? \"optional-capability-unavailable\" : \"missing-capability\",\n\t\t\t\t`Capability ${requirement.id}@${requirement.version} is unavailable`,\n\t\t\t\t{ capability: requirement.id, version: String(requirement.version) },\n\t\t\t),\n\t\t);\n\t}\n\tconst hasRequiredMissing = dependencyDiagnostics.some((item) => item.code === \"missing-capability\");\n\tif (hasRequiredMissing) {\n\t\treturn {\n\t\t\tpluginId: manifest.id,\n\t\t\tpluginVersion: manifest.pluginVersion,\n\t\t\trequired,\n\t\t\tstatus: \"dependency-unavailable\",\n\t\t\tdiagnostics: dependencyDiagnostics,\n\t\t};\n\t}\n\tconst capabilityRefs = normalizeRefs(manifest.capabilityRefs);\n\tconst resolved: ResolvedPluginV1 = {\n\t\tpluginId: manifest.id,\n\t\tpluginVersion: manifest.pluginVersion,\n\t\tcapabilityRefs,\n\t\t...(platform.selectedAdapter === undefined ? {} : { selectedAdapter: platform.selectedAdapter }),\n\t};\n\treturn {\n\t\tpluginId: manifest.id,\n\t\tpluginVersion: manifest.pluginVersion,\n\t\trequired,\n\t\tstatus: \"installed-ready\",\n\t\tdiagnostics: dependencyDiagnostics,\n\t\tresolved,\n\t\t...(platform.selectedAdapter === undefined ? {} : { selectedAdapter: platform.selectedAdapter }),\n\t};\n}\n\nfunction compareResolvedPlugins(left: ResolvedPluginV1, right: ResolvedPluginV1): number {\n\treturn left.pluginId === right.pluginId\n\t\t? comparePluginVersionsV1(left.pluginVersion, right.pluginVersion)\n\t\t: left.pluginId.localeCompare(right.pluginId);\n}\n\nfunction compareRefs(left: CapabilityRefV1, right: CapabilityRefV1): number {\n\treturn left.id === right.id ? left.version - right.version : left.id.localeCompare(right.id);\n}\n\n/** Build an order-independent identity including adapter and capability refs. */\nexport function buildResolvedManifestV1(input: {\n\treadonly profileId: string;\n\treadonly profileVersion: string;\n\treadonly plugins: readonly ResolvedPluginV1[];\n}): ResolvedManifestV1 {\n\tassertNonEmpty(input.profileId, \"profileId\");\n\tassertNonEmpty(input.profileVersion, \"profileVersion\");\n\tconst plugins = [...input.plugins]\n\t\t.map((plugin) => ({\n\t\t\tpluginId: plugin.pluginId,\n\t\t\tpluginVersion: plugin.pluginVersion,\n\t\t\tcapabilityRefs: normalizeRefs(plugin.capabilityRefs),\n\t\t\t...(plugin.selectedAdapter === undefined ? {} : { selectedAdapter: { ...plugin.selectedAdapter } }),\n\t\t}))\n\t\t.sort(compareResolvedPlugins);\n\tconst capabilityRefs = plugins\n\t\t.flatMap((plugin) => plugin.capabilityRefs)\n\t\t.sort(compareRefs)\n\t\t.filter(\n\t\t\t(ref, index, all) => index === 0 || all[index - 1]!.id !== ref.id || all[index - 1]!.version !== ref.version,\n\t\t);\n\tconst digestInput = { profileId: input.profileId, profileVersion: input.profileVersion, plugins, capabilityRefs };\n\treturn Object.freeze({\n\t\tprofileId: input.profileId,\n\t\tprofileVersion: input.profileVersion,\n\t\tplugins: Object.freeze(\n\t\t\tplugins.map((plugin) => Object.freeze({ ...plugin, capabilityRefs: Object.freeze(plugin.capabilityRefs) })),\n\t\t),\n\t\tcapabilityRefs: Object.freeze(capabilityRefs),\n\t\tmanifestDigest: stableJsonDigest(digestInput as unknown as Parameters<typeof stableJsonDigest>[0]),\n\t});\n}\n\n/** Resolve all plugins in a Profile; optional unavailable plugins do not block startup. */\nexport function resolvePluginProfileV1(input: {\n\treadonly profileId: string;\n\treadonly profileVersion: string;\n\treadonly plugins: readonly {\n\t\treadonly manifest: PluginManifestV1;\n\t\treadonly required?: boolean;\n\t\treadonly disabled?: boolean;\n\t}[];\n\treadonly host: HostFactsV1;\n\treadonly availableCapabilities?: readonly CapabilityRefV1[];\n\t/** Host's own version, forwarded to each plugin's min/maxHostVersion range check. */\n\treadonly hostVersion?: string;\n}): ProfileResolutionV1 {\n\tconst plugins = input.plugins\n\t\t.map((candidate) =>\n\t\t\tresolvePluginCompatibilityV1({\n\t\t\t\tmanifest: candidate.manifest,\n\t\t\t\thost: input.host,\n\t\t\t\trequired: candidate.required,\n\t\t\t\tdisabled: candidate.disabled,\n\t\t\t\tavailableCapabilities: input.availableCapabilities,\n\t\t\t\thostVersion: input.hostVersion,\n\t\t\t}),\n\t\t)\n\t\t.sort((left, right) =>\n\t\t\tleft.pluginId === right.pluginId\n\t\t\t\t? comparePluginVersionsV1(left.pluginVersion, right.pluginVersion)\n\t\t\t\t: left.pluginId.localeCompare(right.pluginId),\n\t\t);\n\tconst diagnostics = plugins.flatMap((plugin) => plugin.diagnostics);\n\tconst blocked = plugins.some((plugin) => plugin.required && plugin.status !== \"installed-ready\");\n\tconst resolvedPlugins = plugins.flatMap((plugin) => (plugin.resolved === undefined ? [] : [plugin.resolved]));\n\treturn Object.freeze({\n\t\tprofileId: input.profileId,\n\t\tprofileVersion: input.profileVersion,\n\t\tstatus: blocked ? \"blocked\" : \"ready\",\n\t\tplugins: Object.freeze(plugins),\n\t\tdiagnostics: Object.freeze(diagnostics),\n\t\tresolvedManifest: buildResolvedManifestV1({\n\t\t\tprofileId: input.profileId,\n\t\t\tprofileVersion: input.profileVersion,\n\t\t\tplugins: resolvedPlugins,\n\t\t}),\n\t});\n}\n"]}