@ai-agent-forge/agent-forge 0.85.0

package/dist/plugins/ecosystem/updates.d.ts

@@ -0,0 +1,30 @@
+import type { CapabilityRefV1, HostFactsV1, PluginManifestV1, PluginSourceVerifierV1, PluginUpdateRecordV1 } from "./types.ts";
+export declare function pluginManifestDigestV1(manifest: PluginManifestV1): string;
+/** Create an immutable staged update; activation is a separate explicit transition. */
+export declare function stagePluginUpdateV1(input: {
+    readonly manifest: PluginManifestV1;
+    readonly source: string;
+}): PluginUpdateRecordV1;
+export type UpdateVerificationV1 = {
+    readonly status: "verified";
+    readonly record: PluginUpdateRecordV1;
+} | {
+    readonly status: "rejected";
+    readonly record: PluginUpdateRecordV1;
+    readonly reason: string;
+};
+/** Verify digest and host compatibility without applying any policy or side effect. */
+export declare function verifyPluginUpdateV1(input: {
+    readonly record: PluginUpdateRecordV1;
+    readonly host: HostFactsV1;
+    readonly expectedDigest?: string;
+    readonly availableCapabilities?: readonly CapabilityRefV1[];
+    readonly verifier?: PluginSourceVerifierV1;
+}): UpdateVerificationV1;
+export declare function activatePluginUpdateV1(record: PluginUpdateRecordV1): PluginUpdateRecordV1;
+/** Preserve the old record and return it as active after a failed update. */
+export declare function rollbackPluginUpdateV1(input: {
+    readonly failed: PluginUpdateRecordV1;
+    readonly previous: PluginUpdateRecordV1;
+}): PluginUpdateRecordV1;
+//# sourceMappingURL=updates.d.ts.map

package/dist/plugins/ecosystem/updates.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"updates.d.ts","sourceRoot":"","sources":["../../../src/plugins/ecosystem/updates.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EACX,eAAe,EACf,WAAW,EACX,gBAAgB,EAChB,sBAAsB,EACtB,oBAAoB,EACpB,MAAM,YAAY,CAAC;AAcpB,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,gBAAgB,GAAG,MAAM,CAEzE;AAoCD,uFAAuF;AACvF,wBAAgB,mBAAmB,CAAC,KAAK,EAAE;IAC1C,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;IACpC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACxB,GAAG,oBAAoB,CAUvB;AAED,MAAM,MAAM,oBAAoB,GAC7B;IAAE,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAA;CAAE,GACtE;IAAE,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEnG,uFAAuF;AACvF,wBAAgB,oBAAoB,CAAC,KAAK,EAAE;IAC3C,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAC;IACtC,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,SAAS,eAAe,EAAE,CAAC;IAC5D,QAAQ,CAAC,QAAQ,CAAC,EAAE,sBAAsB,CAAC;CAC3C,GAAG,oBAAoB,CAsEvB;AAED,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,oBAAoB,GAAG,oBAAoB,CAGzF;AAED,6EAA6E;AAC7E,wBAAgB,sBAAsB,CAAC,KAAK,EAAE;IAC7C,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAC;IACtC,QAAQ,CAAC,QAAQ,EAAE,oBAAoB,CAAC;CACxC,GAAG,oBAAoB,CAMvB","sourcesContent":["import { VERSION } from \"../../config.ts\";\nimport { stableJsonDigest } from \"../../profile/identity.ts\";\nimport { resolvePluginCompatibilityV1 } from \"./resolver.ts\";\nimport type {\n\tCapabilityRefV1,\n\tHostFactsV1,\n\tPluginManifestV1,\n\tPluginSourceVerifierV1,\n\tPluginUpdateRecordV1,\n} from \"./types.ts\";\n\nfunction manifestPayload(manifest: PluginManifestV1): Record<string, unknown> {\n\treturn {\n\t\tid: manifest.id,\n\t\tpluginVersion: manifest.pluginVersion,\n\t\tapiVersion: manifest.apiVersion,\n\t\t...(manifest.capabilityRefs === undefined ? {} : { capabilityRefs: manifest.capabilityRefs }),\n\t\t...(manifest.requires === undefined ? {} : { requires: manifest.requires }),\n\t\t...(manifest.platform === undefined ? {} : { platform: manifest.platform }),\n\t\ttestOnly: manifest.testOnly ?? false,\n\t};\n}\n\nexport function pluginManifestDigestV1(manifest: PluginManifestV1): string {\n\treturn stableJsonDigest(manifestPayload(manifest) as Parameters<typeof stableJsonDigest>[0]);\n}\n\nfunction snapshotManifest(manifest: PluginManifestV1): PluginManifestV1 {\n\tconst capabilityRefs = manifest.capabilityRefs?.map((ref) => Object.freeze({ ...ref }));\n\tconst requires = manifest.requires?.map((requirement) => Object.freeze({ ...requirement }));\n\tconst platform = manifest.platform;\n\tconst runtime = platform?.runtime?.map((constraint) => Object.freeze({ ...constraint }));\n\tconst adapters = platform?.adapters?.map((adapter) =>\n\t\tObject.freeze({\n\t\t\t...adapter,\n\t\t\tos: Object.freeze([...adapter.os]),\n\t\t\t...(adapter.arch === undefined ? {} : { arch: Object.freeze([...adapter.arch]) }),\n\t\t\t...(adapter.hostFeatures === undefined ? {} : { hostFeatures: Object.freeze([...adapter.hostFeatures]) }),\n\t\t}),\n\t);\n\tconst platformSnapshot =\n\t\tplatform === undefined\n\t\t\t? undefined\n\t\t\t: Object.freeze({\n\t\t\t\t\t...platform,\n\t\t\t\t\tos: Object.freeze([...platform.os]),\n\t\t\t\t\t...(platform.arch === undefined ? {} : { arch: Object.freeze([...platform.arch]) }),\n\t\t\t\t\t...(runtime === undefined ? {} : { runtime: Object.freeze(runtime) }),\n\t\t\t\t\t...(platform.hostFeatures === undefined\n\t\t\t\t\t\t? {}\n\t\t\t\t\t\t: { hostFeatures: Object.freeze([...platform.hostFeatures]) }),\n\t\t\t\t\t...(adapters === undefined ? {} : { adapters: Object.freeze(adapters) }),\n\t\t\t\t});\n\treturn Object.freeze({\n\t\t...manifest,\n\t\t...(capabilityRefs === undefined ? {} : { capabilityRefs: Object.freeze(capabilityRefs) }),\n\t\t...(requires === undefined ? {} : { requires: Object.freeze(requires) }),\n\t\t...(platformSnapshot === undefined ? {} : { platform: platformSnapshot }),\n\t});\n}\n\n/** Create an immutable staged update; activation is a separate explicit transition. */\nexport function stagePluginUpdateV1(input: {\n\treadonly manifest: PluginManifestV1;\n\treadonly source: string;\n}): PluginUpdateRecordV1 {\n\tif (input.source.trim().length === 0) throw new Error(\"update source must be a non-empty string\");\n\treturn Object.freeze({\n\t\tpluginId: input.manifest.id,\n\t\tpluginVersion: input.manifest.pluginVersion,\n\t\tsource: input.source,\n\t\tmanifest: snapshotManifest(input.manifest),\n\t\tmanifestDigest: pluginManifestDigestV1(input.manifest),\n\t\tstate: \"staged\",\n\t});\n}\n\nexport type UpdateVerificationV1 =\n\t| { readonly status: \"verified\"; readonly record: PluginUpdateRecordV1 }\n\t| { readonly status: \"rejected\"; readonly record: PluginUpdateRecordV1; readonly reason: string };\n\n/** Verify digest and host compatibility without applying any policy or side effect. */\nexport function verifyPluginUpdateV1(input: {\n\treadonly record: PluginUpdateRecordV1;\n\treadonly host: HostFactsV1;\n\treadonly expectedDigest?: string;\n\treadonly availableCapabilities?: readonly CapabilityRefV1[];\n\treadonly verifier?: PluginSourceVerifierV1;\n}): UpdateVerificationV1 {\n\tconst actualDigest = pluginManifestDigestV1(input.record.manifest);\n\tif (input.record.state !== \"staged\") {\n\t\treturn {\n\t\t\tstatus: \"rejected\",\n\t\t\trecord: input.record,\n\t\t\treason: `Update must be staged before verification: ${input.record.state}`,\n\t\t};\n\t}\n\tif (input.record.pluginId !== input.record.manifest.id) {\n\t\treturn {\n\t\t\tstatus: \"rejected\",\n\t\t\trecord: input.record,\n\t\t\treason: \"Update record plugin ID does not match embedded manifest\",\n\t\t};\n\t}\n\tif (input.record.pluginVersion !== input.record.manifest.pluginVersion) {\n\t\treturn {\n\t\t\tstatus: \"rejected\",\n\t\t\trecord: input.record,\n\t\t\treason: \"Update record plugin version does not match embedded manifest\",\n\t\t};\n\t}\n\tif (input.record.manifestDigest !== actualDigest) {\n\t\treturn { status: \"rejected\", record: input.record, reason: \"Staged manifest digest drifted\" };\n\t}\n\tif (input.expectedDigest !== undefined && input.expectedDigest !== actualDigest) {\n\t\treturn { status: \"rejected\", record: input.record, reason: \"Manifest digest does not match expectation\" };\n\t}\n\tconst resolution = resolvePluginCompatibilityV1({\n\t\tmanifest: input.record.manifest,\n\t\thost: input.host,\n\t\trequired: true,\n\t\tavailableCapabilities: input.availableCapabilities,\n\t\t// D-073: update verification enforces the declared host version range;\n\t\t// previously this path skipped the check entirely.\n\t\thostVersion: VERSION,\n\t});\n\tif (resolution.status !== \"installed-ready\") {\n\t\treturn {\n\t\t\tstatus: \"rejected\",\n\t\t\trecord: input.record,\n\t\t\treason: `Plugin is not ready on host: ${resolution.status}`,\n\t\t};\n\t}\n\tif (input.verifier !== undefined) {\n\t\ttry {\n\t\t\tconst sourceVerification = input.verifier({\n\t\t\t\tpluginId: input.record.pluginId,\n\t\t\t\tpluginVersion: input.record.pluginVersion,\n\t\t\t\tsource: input.record.source,\n\t\t\t\tmanifestDigest: actualDigest,\n\t\t\t});\n\t\t\tif (sourceVerification.status !== \"accepted\") {\n\t\t\t\treturn {\n\t\t\t\t\tstatus: \"rejected\",\n\t\t\t\t\trecord: input.record,\n\t\t\t\t\treason: \"Plugin source was rejected by the configured verifier\",\n\t\t\t\t};\n\t\t\t}\n\t\t} catch {\n\t\t\treturn {\n\t\t\t\tstatus: \"rejected\",\n\t\t\t\trecord: input.record,\n\t\t\t\treason: \"Plugin source verifier failed\",\n\t\t\t};\n\t\t}\n\t}\n\tconst record = Object.freeze({ ...input.record, state: \"verified\" as const });\n\treturn { status: \"verified\", record };\n}\n\nexport function activatePluginUpdateV1(record: PluginUpdateRecordV1): PluginUpdateRecordV1 {\n\tif (record.state !== \"verified\") throw new Error(`Only a verified update can become active: ${record.pluginId}`);\n\treturn Object.freeze({ ...record, state: \"active\" as const });\n}\n\n/** Preserve the old record and return it as active after a failed update. */\nexport function rollbackPluginUpdateV1(input: {\n\treadonly failed: PluginUpdateRecordV1;\n\treadonly previous: PluginUpdateRecordV1;\n}): PluginUpdateRecordV1 {\n\tif (input.previous.pluginId !== input.failed.pluginId) {\n\t\tthrow new Error(\"Cannot rollback updates for different plugins\");\n\t}\n\tif (input.previous.state !== \"active\") throw new Error(\"Rollback target must be active\");\n\treturn Object.freeze({ ...input.previous, state: \"active\" as const });\n}\n"]}

package/dist/plugins/ecosystem/updates.js

@@ -0,0 +1,148 @@
+import { VERSION } from "../../config.js";
+import { stableJsonDigest } from "../../profile/identity.js";
+import { resolvePluginCompatibilityV1 } from "./resolver.js";
+function manifestPayload(manifest) {
+    return {
+        id: manifest.id,
+        pluginVersion: manifest.pluginVersion,
+        apiVersion: manifest.apiVersion,
+        ...(manifest.capabilityRefs === undefined ? {} : { capabilityRefs: manifest.capabilityRefs }),
+        ...(manifest.requires === undefined ? {} : { requires: manifest.requires }),
+        ...(manifest.platform === undefined ? {} : { platform: manifest.platform }),
+        testOnly: manifest.testOnly ?? false,
+    };
+}
+export function pluginManifestDigestV1(manifest) {
+    return stableJsonDigest(manifestPayload(manifest));
+}
+function snapshotManifest(manifest) {
+    const capabilityRefs = manifest.capabilityRefs?.map((ref) => Object.freeze({ ...ref }));
+    const requires = manifest.requires?.map((requirement) => Object.freeze({ ...requirement }));
+    const platform = manifest.platform;
+    const runtime = platform?.runtime?.map((constraint) => Object.freeze({ ...constraint }));
+    const adapters = platform?.adapters?.map((adapter) => Object.freeze({
+        ...adapter,
+        os: Object.freeze([...adapter.os]),
+        ...(adapter.arch === undefined ? {} : { arch: Object.freeze([...adapter.arch]) }),
+        ...(adapter.hostFeatures === undefined ? {} : { hostFeatures: Object.freeze([...adapter.hostFeatures]) }),
+    }));
+    const platformSnapshot = platform === undefined
+        ? undefined
+        : Object.freeze({
+            ...platform,
+            os: Object.freeze([...platform.os]),
+            ...(platform.arch === undefined ? {} : { arch: Object.freeze([...platform.arch]) }),
+            ...(runtime === undefined ? {} : { runtime: Object.freeze(runtime) }),
+            ...(platform.hostFeatures === undefined
+                ? {}
+                : { hostFeatures: Object.freeze([...platform.hostFeatures]) }),
+            ...(adapters === undefined ? {} : { adapters: Object.freeze(adapters) }),
+        });
+    return Object.freeze({
+        ...manifest,
+        ...(capabilityRefs === undefined ? {} : { capabilityRefs: Object.freeze(capabilityRefs) }),
+        ...(requires === undefined ? {} : { requires: Object.freeze(requires) }),
+        ...(platformSnapshot === undefined ? {} : { platform: platformSnapshot }),
+    });
+}
+/** Create an immutable staged update; activation is a separate explicit transition. */
+export function stagePluginUpdateV1(input) {
+    if (input.source.trim().length === 0)
+        throw new Error("update source must be a non-empty string");
+    return Object.freeze({
+        pluginId: input.manifest.id,
+        pluginVersion: input.manifest.pluginVersion,
+        source: input.source,
+        manifest: snapshotManifest(input.manifest),
+        manifestDigest: pluginManifestDigestV1(input.manifest),
+        state: "staged",
+    });
+}
+/** Verify digest and host compatibility without applying any policy or side effect. */
+export function verifyPluginUpdateV1(input) {
+    const actualDigest = pluginManifestDigestV1(input.record.manifest);
+    if (input.record.state !== "staged") {
+        return {
+            status: "rejected",
+            record: input.record,
+            reason: `Update must be staged before verification: ${input.record.state}`,
+        };
+    }
+    if (input.record.pluginId !== input.record.manifest.id) {
+        return {
+            status: "rejected",
+            record: input.record,
+            reason: "Update record plugin ID does not match embedded manifest",
+        };
+    }
+    if (input.record.pluginVersion !== input.record.manifest.pluginVersion) {
+        return {
+            status: "rejected",
+            record: input.record,
+            reason: "Update record plugin version does not match embedded manifest",
+        };
+    }
+    if (input.record.manifestDigest !== actualDigest) {
+        return { status: "rejected", record: input.record, reason: "Staged manifest digest drifted" };
+    }
+    if (input.expectedDigest !== undefined && input.expectedDigest !== actualDigest) {
+        return { status: "rejected", record: input.record, reason: "Manifest digest does not match expectation" };
+    }
+    const resolution = resolvePluginCompatibilityV1({
+        manifest: input.record.manifest,
+        host: input.host,
+        required: true,
+        availableCapabilities: input.availableCapabilities,
+        // D-073: update verification enforces the declared host version range;
+        // previously this path skipped the check entirely.
+        hostVersion: VERSION,
+    });
+    if (resolution.status !== "installed-ready") {
+        return {
+            status: "rejected",
+            record: input.record,
+            reason: `Plugin is not ready on host: ${resolution.status}`,
+        };
+    }
+    if (input.verifier !== undefined) {
+        try {
+            const sourceVerification = input.verifier({
+                pluginId: input.record.pluginId,
+                pluginVersion: input.record.pluginVersion,
+                source: input.record.source,
+                manifestDigest: actualDigest,
+            });
+            if (sourceVerification.status !== "accepted") {
+                return {
+                    status: "rejected",
+                    record: input.record,
+                    reason: "Plugin source was rejected by the configured verifier",
+                };
+            }
+        }
+        catch {
+            return {
+                status: "rejected",
+                record: input.record,
+                reason: "Plugin source verifier failed",
+            };
+        }
+    }
+    const record = Object.freeze({ ...input.record, state: "verified" });
+    return { status: "verified", record };
+}
+export function activatePluginUpdateV1(record) {
+    if (record.state !== "verified")
+        throw new Error(`Only a verified update can become active: ${record.pluginId}`);
+    return Object.freeze({ ...record, state: "active" });
+}
+/** Preserve the old record and return it as active after a failed update. */
+export function rollbackPluginUpdateV1(input) {
+    if (input.previous.pluginId !== input.failed.pluginId) {
+        throw new Error("Cannot rollback updates for different plugins");
+    }
+    if (input.previous.state !== "active")
+        throw new Error("Rollback target must be active");
+    return Object.freeze({ ...input.previous, state: "active" });
+}
+//# sourceMappingURL=updates.js.map

package/dist/plugins/ecosystem/updates.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"updates.js","sourceRoot":"","sources":["../../../src/plugins/ecosystem/updates.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAC1C,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAC7D,OAAO,EAAE,4BAA4B,EAAE,MAAM,eAAe,CAAC;AAS7D,SAAS,eAAe,CAAC,QAA0B,EAA2B;IAC7E,OAAO;QACN,EAAE,EAAE,QAAQ,CAAC,EAAE;QACf,aAAa,EAAE,QAAQ,CAAC,aAAa;QACrC,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,GAAG,CAAC,QAAQ,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,QAAQ,CAAC,cAAc,EAAE,CAAC;QAC7F,GAAG,CAAC,QAAQ,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC;QAC3E,GAAG,CAAC,QAAQ,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC;QAC3E,QAAQ,EAAE,QAAQ,CAAC,QAAQ,IAAI,KAAK;KACpC,CAAC;AAAA,CACF;AAED,MAAM,UAAU,sBAAsB,CAAC,QAA0B,EAAU;IAC1E,OAAO,gBAAgB,CAAC,eAAe,CAAC,QAAQ,CAA2C,CAAC,CAAC;AAAA,CAC7F;AAED,SAAS,gBAAgB,CAAC,QAA0B,EAAoB;IACvE,MAAM,cAAc,GAAG,QAAQ,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,GAAG,EAAE,CAAC,CAAC,CAAC;IACxF,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,WAAW,EAAE,CAAC,CAAC,CAAC;IAC5F,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC;IACnC,MAAM,OAAO,GAAG,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,UAAU,EAAE,CAAC,CAAC,CAAC;IACzF,MAAM,QAAQ,GAAG,QAAQ,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CACpD,MAAM,CAAC,MAAM,CAAC;QACb,GAAG,OAAO;QACV,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,OAAO,CAAC,EAAE,CAAC,CAAC;QAClC,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QACjF,GAAG,CAAC,OAAO,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC;KACzG,CAAC,CACF,CAAC;IACF,MAAM,gBAAgB,GACrB,QAAQ,KAAK,SAAS;QACrB,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC;YACd,GAAG,QAAQ;YACX,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC;YACnC,GAAG,CAAC,QAAQ,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YACnF,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;YACrE,GAAG,CAAC,QAAQ,CAAC,YAAY,KAAK,SAAS;gBACtC,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,QAAQ,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC;YAC/D,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;SACxE,CAAC,CAAC;IACN,OAAO,MAAM,CAAC,MAAM,CAAC;QACpB,GAAG,QAAQ;QACX,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE,CAAC;QAC1F,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxE,GAAG,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,gBAAgB,EAAE,CAAC;KACzE,CAAC,CAAC;AAAA,CACH;AAED,uFAAuF;AACvF,MAAM,UAAU,mBAAmB,CAAC,KAGnC,EAAwB;IACxB,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAClG,OAAO,MAAM,CAAC,MAAM,CAAC;QACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE;QAC3B,aAAa,EAAE,KAAK,CAAC,QAAQ,CAAC,aAAa;QAC3C,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,QAAQ,EAAE,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC;QAC1C,cAAc,EAAE,sBAAsB,CAAC,KAAK,CAAC,QAAQ,CAAC;QACtD,KAAK,EAAE,QAAQ;KACf,CAAC,CAAC;AAAA,CACH;AAMD,uFAAuF;AACvF,MAAM,UAAU,oBAAoB,CAAC,KAMpC,EAAwB;IACxB,MAAM,YAAY,GAAG,sBAAsB,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACnE,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QACrC,OAAO;YACN,MAAM,EAAE,UAAU;YAClB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,MAAM,EAAE,8CAA8C,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE;SAC1E,CAAC;IACH,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,CAAC,QAAQ,KAAK,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACxD,OAAO;YACN,MAAM,EAAE,UAAU;YAClB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,MAAM,EAAE,0DAA0D;SAClE,CAAC;IACH,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,CAAC,aAAa,KAAK,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC;QACxE,OAAO;YACN,MAAM,EAAE,UAAU;YAClB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,MAAM,EAAE,+DAA+D;SACvE,CAAC;IACH,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,CAAC,cAAc,KAAK,YAAY,EAAE,CAAC;QAClD,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,gCAAgC,EAAE,CAAC;IAC/F,CAAC;IACD,IAAI,KAAK,CAAC,cAAc,KAAK,SAAS,IAAI,KAAK,CAAC,cAAc,KAAK,YAAY,EAAE,CAAC;QACjF,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,4CAA4C,EAAE,CAAC;IAC3G,CAAC;IACD,MAAM,UAAU,GAAG,4BAA4B,CAAC;QAC/C,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,QAAQ;QAC/B,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,QAAQ,EAAE,IAAI;QACd,qBAAqB,EAAE,KAAK,CAAC,qBAAqB;QAClD,uEAAuE;QACvE,mDAAmD;QACnD,WAAW,EAAE,OAAO;KACpB,CAAC,CAAC;IACH,IAAI,UAAU,CAAC,MAAM,KAAK,iBAAiB,EAAE,CAAC;QAC7C,OAAO;YACN,MAAM,EAAE,UAAU;YAClB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,MAAM,EAAE,gCAAgC,UAAU,CAAC,MAAM,EAAE;SAC3D,CAAC;IACH,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QAClC,IAAI,CAAC;YACJ,MAAM,kBAAkB,GAAG,KAAK,CAAC,QAAQ,CAAC;gBACzC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,QAAQ;gBAC/B,aAAa,EAAE,KAAK,CAAC,MAAM,CAAC,aAAa;gBACzC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM;gBAC3B,cAAc,EAAE,YAAY;aAC5B,CAAC,CAAC;YACH,IAAI,kBAAkB,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;gBAC9C,OAAO;oBACN,MAAM,EAAE,UAAU;oBAClB,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,MAAM,EAAE,uDAAuD;iBAC/D,CAAC;YACH,CAAC;QACF,CAAC;QAAC,MAAM,CAAC;YACR,OAAO;gBACN,MAAM,EAAE,UAAU;gBAClB,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,MAAM,EAAE,+BAA+B;aACvC,CAAC;QACH,CAAC;IACF,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,UAAmB,EAAE,CAAC,CAAC;IAC9E,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;AAAA,CACtC;AAED,MAAM,UAAU,sBAAsB,CAAC,MAA4B,EAAwB;IAC1F,IAAI,MAAM,CAAC,KAAK,KAAK,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;IACjH,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,QAAiB,EAAE,CAAC,CAAC;AAAA,CAC9D;AAED,6EAA6E;AAC7E,MAAM,UAAU,sBAAsB,CAAC,KAGtC,EAAwB;IACxB,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,KAAK,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;QACvD,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACzF,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,KAAK,CAAC,QAAQ,EAAE,KAAK,EAAE,QAAiB,EAAE,CAAC,CAAC;AAAA,CACtE","sourcesContent":["import { VERSION } from \"../../config.ts\";\nimport { stableJsonDigest } from \"../../profile/identity.ts\";\nimport { resolvePluginCompatibilityV1 } from \"./resolver.ts\";\nimport type {\n\tCapabilityRefV1,\n\tHostFactsV1,\n\tPluginManifestV1,\n\tPluginSourceVerifierV1,\n\tPluginUpdateRecordV1,\n} from \"./types.ts\";\n\nfunction manifestPayload(manifest: PluginManifestV1): Record<string, unknown> {\n\treturn {\n\t\tid: manifest.id,\n\t\tpluginVersion: manifest.pluginVersion,\n\t\tapiVersion: manifest.apiVersion,\n\t\t...(manifest.capabilityRefs === undefined ? {} : { capabilityRefs: manifest.capabilityRefs }),\n\t\t...(manifest.requires === undefined ? {} : { requires: manifest.requires }),\n\t\t...(manifest.platform === undefined ? {} : { platform: manifest.platform }),\n\t\ttestOnly: manifest.testOnly ?? false,\n\t};\n}\n\nexport function pluginManifestDigestV1(manifest: PluginManifestV1): string {\n\treturn stableJsonDigest(manifestPayload(manifest) as Parameters<typeof stableJsonDigest>[0]);\n}\n\nfunction snapshotManifest(manifest: PluginManifestV1): PluginManifestV1 {\n\tconst capabilityRefs = manifest.capabilityRefs?.map((ref) => Object.freeze({ ...ref }));\n\tconst requires = manifest.requires?.map((requirement) => Object.freeze({ ...requirement }));\n\tconst platform = manifest.platform;\n\tconst runtime = platform?.runtime?.map((constraint) => Object.freeze({ ...constraint }));\n\tconst adapters = platform?.adapters?.map((adapter) =>\n\t\tObject.freeze({\n\t\t\t...adapter,\n\t\t\tos: Object.freeze([...adapter.os]),\n\t\t\t...(adapter.arch === undefined ? {} : { arch: Object.freeze([...adapter.arch]) }),\n\t\t\t...(adapter.hostFeatures === undefined ? {} : { hostFeatures: Object.freeze([...adapter.hostFeatures]) }),\n\t\t}),\n\t);\n\tconst platformSnapshot =\n\t\tplatform === undefined\n\t\t\t? undefined\n\t\t\t: Object.freeze({\n\t\t\t\t\t...platform,\n\t\t\t\t\tos: Object.freeze([...platform.os]),\n\t\t\t\t\t...(platform.arch === undefined ? {} : { arch: Object.freeze([...platform.arch]) }),\n\t\t\t\t\t...(runtime === undefined ? {} : { runtime: Object.freeze(runtime) }),\n\t\t\t\t\t...(platform.hostFeatures === undefined\n\t\t\t\t\t\t? {}\n\t\t\t\t\t\t: { hostFeatures: Object.freeze([...platform.hostFeatures]) }),\n\t\t\t\t\t...(adapters === undefined ? {} : { adapters: Object.freeze(adapters) }),\n\t\t\t\t});\n\treturn Object.freeze({\n\t\t...manifest,\n\t\t...(capabilityRefs === undefined ? {} : { capabilityRefs: Object.freeze(capabilityRefs) }),\n\t\t...(requires === undefined ? {} : { requires: Object.freeze(requires) }),\n\t\t...(platformSnapshot === undefined ? {} : { platform: platformSnapshot }),\n\t});\n}\n\n/** Create an immutable staged update; activation is a separate explicit transition. */\nexport function stagePluginUpdateV1(input: {\n\treadonly manifest: PluginManifestV1;\n\treadonly source: string;\n}): PluginUpdateRecordV1 {\n\tif (input.source.trim().length === 0) throw new Error(\"update source must be a non-empty string\");\n\treturn Object.freeze({\n\t\tpluginId: input.manifest.id,\n\t\tpluginVersion: input.manifest.pluginVersion,\n\t\tsource: input.source,\n\t\tmanifest: snapshotManifest(input.manifest),\n\t\tmanifestDigest: pluginManifestDigestV1(input.manifest),\n\t\tstate: \"staged\",\n\t});\n}\n\nexport type UpdateVerificationV1 =\n\t| { readonly status: \"verified\"; readonly record: PluginUpdateRecordV1 }\n\t| { readonly status: \"rejected\"; readonly record: PluginUpdateRecordV1; readonly reason: string };\n\n/** Verify digest and host compatibility without applying any policy or side effect. */\nexport function verifyPluginUpdateV1(input: {\n\treadonly record: PluginUpdateRecordV1;\n\treadonly host: HostFactsV1;\n\treadonly expectedDigest?: string;\n\treadonly availableCapabilities?: readonly CapabilityRefV1[];\n\treadonly verifier?: PluginSourceVerifierV1;\n}): UpdateVerificationV1 {\n\tconst actualDigest = pluginManifestDigestV1(input.record.manifest);\n\tif (input.record.state !== \"staged\") {\n\t\treturn {\n\t\t\tstatus: \"rejected\",\n\t\t\trecord: input.record,\n\t\t\treason: `Update must be staged before verification: ${input.record.state}`,\n\t\t};\n\t}\n\tif (input.record.pluginId !== input.record.manifest.id) {\n\t\treturn {\n\t\t\tstatus: \"rejected\",\n\t\t\trecord: input.record,\n\t\t\treason: \"Update record plugin ID does not match embedded manifest\",\n\t\t};\n\t}\n\tif (input.record.pluginVersion !== input.record.manifest.pluginVersion) {\n\t\treturn {\n\t\t\tstatus: \"rejected\",\n\t\t\trecord: input.record,\n\t\t\treason: \"Update record plugin version does not match embedded manifest\",\n\t\t};\n\t}\n\tif (input.record.manifestDigest !== actualDigest) {\n\t\treturn { status: \"rejected\", record: input.record, reason: \"Staged manifest digest drifted\" };\n\t}\n\tif (input.expectedDigest !== undefined && input.expectedDigest !== actualDigest) {\n\t\treturn { status: \"rejected\", record: input.record, reason: \"Manifest digest does not match expectation\" };\n\t}\n\tconst resolution = resolvePluginCompatibilityV1({\n\t\tmanifest: input.record.manifest,\n\t\thost: input.host,\n\t\trequired: true,\n\t\tavailableCapabilities: input.availableCapabilities,\n\t\t// D-073: update verification enforces the declared host version range;\n\t\t// previously this path skipped the check entirely.\n\t\thostVersion: VERSION,\n\t});\n\tif (resolution.status !== \"installed-ready\") {\n\t\treturn {\n\t\t\tstatus: \"rejected\",\n\t\t\trecord: input.record,\n\t\t\treason: `Plugin is not ready on host: ${resolution.status}`,\n\t\t};\n\t}\n\tif (input.verifier !== undefined) {\n\t\ttry {\n\t\t\tconst sourceVerification = input.verifier({\n\t\t\t\tpluginId: input.record.pluginId,\n\t\t\t\tpluginVersion: input.record.pluginVersion,\n\t\t\t\tsource: input.record.source,\n\t\t\t\tmanifestDigest: actualDigest,\n\t\t\t});\n\t\t\tif (sourceVerification.status !== \"accepted\") {\n\t\t\t\treturn {\n\t\t\t\t\tstatus: \"rejected\",\n\t\t\t\t\trecord: input.record,\n\t\t\t\t\treason: \"Plugin source was rejected by the configured verifier\",\n\t\t\t\t};\n\t\t\t}\n\t\t} catch {\n\t\t\treturn {\n\t\t\t\tstatus: \"rejected\",\n\t\t\t\trecord: input.record,\n\t\t\t\treason: \"Plugin source verifier failed\",\n\t\t\t};\n\t\t}\n\t}\n\tconst record = Object.freeze({ ...input.record, state: \"verified\" as const });\n\treturn { status: \"verified\", record };\n}\n\nexport function activatePluginUpdateV1(record: PluginUpdateRecordV1): PluginUpdateRecordV1 {\n\tif (record.state !== \"verified\") throw new Error(`Only a verified update can become active: ${record.pluginId}`);\n\treturn Object.freeze({ ...record, state: \"active\" as const });\n}\n\n/** Preserve the old record and return it as active after a failed update. */\nexport function rollbackPluginUpdateV1(input: {\n\treadonly failed: PluginUpdateRecordV1;\n\treadonly previous: PluginUpdateRecordV1;\n}): PluginUpdateRecordV1 {\n\tif (input.previous.pluginId !== input.failed.pluginId) {\n\t\tthrow new Error(\"Cannot rollback updates for different plugins\");\n\t}\n\tif (input.previous.state !== \"active\") throw new Error(\"Rollback target must be active\");\n\treturn Object.freeze({ ...input.previous, state: \"active\" as const });\n}\n"]}

package/dist/plugins/integrity-adapter.d.ts

@@ -0,0 +1,58 @@
+/**
+ * Integrity and compatibility adapter (7.3) — the seam an external
+ * publishing or policy flow uses to ACCEPT or REJECT a plugin manifest:
+ * integrity (key-order-stable digest over the manifest), version
+ * compatibility (a declared acceptable range), and source provenance.
+ *
+ * The adapter makes NO safety judgment of its own (that is Agent Core
+ * policy, excluded here) — it only computes and compares facts so an
+ * external flow can reject tampered or incompatible manifests explicitly.
+ */
+import type { JsonValue } from "@agent-forge/ai";
+export interface SealedManifestV1 {
+    readonly pluginId: string;
+    readonly version: string;
+    readonly source: string;
+    readonly payload: JsonValue;
+    readonly digest: string;
+}
+export interface ManifestExpectationV1 {
+    /** The digest the external flow expects; a mismatch means tampering. */
+    readonly digest?: string;
+    /** Semantic-version range bounds, e.g. {min:"1.0.0", max:"2.0.0"}. */
+    readonly versionRange?: {
+        readonly min?: string;
+        readonly max?: string;
+    };
+    /** The source the flow is willing to accept. */
+    readonly sourceEquals?: string;
+}
+export type ManifestVerdictV1 = {
+    readonly status: "accepted";
+    readonly pluginId: string;
+    readonly version: string;
+    readonly digest: string;
+} | {
+    readonly status: "tampered";
+    readonly expectedDigest?: string;
+    readonly actualDigest: string;
+} | {
+    readonly status: "incompatible";
+    readonly reason: string;
+    readonly version: string;
+} | {
+    readonly status: "source_rejected";
+    readonly reason: string;
+    readonly source: string;
+};
+export interface IntegrityAdapterV1 {
+    seal(input: {
+        readonly pluginId: string;
+        readonly version: string;
+        readonly source: string;
+        readonly payload: JsonValue;
+    }): SealedManifestV1;
+    verify(manifest: SealedManifestV1, expectation: ManifestExpectationV1): ManifestVerdictV1;
+}
+export declare function createIntegrityAdapter(): IntegrityAdapterV1;
+//# sourceMappingURL=integrity-adapter.d.ts.map

package/dist/plugins/integrity-adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"integrity-adapter.d.ts","sourceRoot":"","sources":["../../src/plugins/integrity-adapter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAGjD,MAAM,WAAW,gBAAgB;IAChC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,qBAAqB;IACrC,wEAAwE;IACxE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,sEAAsE;IACtE,QAAQ,CAAC,YAAY,CAAC,EAAE;QAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACzE,gDAAgD;IAChD,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,MAAM,iBAAiB,GAC1B;IAAE,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC7G;IAAE,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;CAAE,GAChG;IAAE,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACtF;IAAE,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE5F,MAAM,WAAW,kBAAkB;IAClC,IAAI,CAAC,KAAK,EAAE;QACX,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC;KAC5B,GAAG,gBAAgB,CAAC;IACrB,MAAM,CAAC,QAAQ,EAAE,gBAAgB,EAAE,WAAW,EAAE,qBAAqB,GAAG,iBAAiB,CAAC;CAC1F;AAaD,wBAAgB,sBAAsB,IAAI,kBAAkB,CA8C3D","sourcesContent":["/**\n * Integrity and compatibility adapter (7.3) — the seam an external\n * publishing or policy flow uses to ACCEPT or REJECT a plugin manifest:\n * integrity (key-order-stable digest over the manifest), version\n * compatibility (a declared acceptable range), and source provenance.\n *\n * The adapter makes NO safety judgment of its own (that is Agent Core\n * policy, excluded here) — it only computes and compares facts so an\n * external flow can reject tampered or incompatible manifests explicitly.\n */\n\nimport type { JsonValue } from \"@agent-forge/ai\";\nimport { stableJsonDigest } from \"../profile/identity.ts\";\n\nexport interface SealedManifestV1 {\n\treadonly pluginId: string;\n\treadonly version: string;\n\treadonly source: string;\n\treadonly payload: JsonValue;\n\treadonly digest: string;\n}\n\nexport interface ManifestExpectationV1 {\n\t/** The digest the external flow expects; a mismatch means tampering. */\n\treadonly digest?: string;\n\t/** Semantic-version range bounds, e.g. {min:\"1.0.0\", max:\"2.0.0\"}. */\n\treadonly versionRange?: { readonly min?: string; readonly max?: string };\n\t/** The source the flow is willing to accept. */\n\treadonly sourceEquals?: string;\n}\n\nexport type ManifestVerdictV1 =\n\t| { readonly status: \"accepted\"; readonly pluginId: string; readonly version: string; readonly digest: string }\n\t| { readonly status: \"tampered\"; readonly expectedDigest?: string; readonly actualDigest: string }\n\t| { readonly status: \"incompatible\"; readonly reason: string; readonly version: string }\n\t| { readonly status: \"source_rejected\"; readonly reason: string; readonly source: string };\n\nexport interface IntegrityAdapterV1 {\n\tseal(input: {\n\t\treadonly pluginId: string;\n\t\treadonly version: string;\n\t\treadonly source: string;\n\t\treadonly payload: JsonValue;\n\t}): SealedManifestV1;\n\tverify(manifest: SealedManifestV1, expectation: ManifestExpectationV1): ManifestVerdictV1;\n}\n\nfunction compareVersions(a: string, b: string): number {\n\tconst pa = a.split(\".\").map((part) => Number.parseInt(part, 10) || 0);\n\tconst pb = b.split(\".\").map((part) => Number.parseInt(part, 10) || 0);\n\tconst length = Math.max(pa.length, pb.length);\n\tfor (let index = 0; index < length; index += 1) {\n\t\tconst diff = (pa[index] ?? 0) - (pb[index] ?? 0);\n\t\tif (diff !== 0) return diff;\n\t}\n\treturn 0;\n}\n\nexport function createIntegrityAdapter(): IntegrityAdapterV1 {\n\treturn {\n\t\tseal(input) {\n\t\t\tconst manifest = {\n\t\t\t\tpluginId: input.pluginId,\n\t\t\t\tversion: input.version,\n\t\t\t\tsource: input.source,\n\t\t\t\tpayload: input.payload,\n\t\t\t};\n\t\t\treturn Object.freeze({ ...manifest, digest: stableJsonDigest(manifest) });\n\t\t},\n\t\tverify(manifest, expectation) {\n\t\t\tconst actualDigest = stableJsonDigest({\n\t\t\t\tpluginId: manifest.pluginId,\n\t\t\t\tversion: manifest.version,\n\t\t\t\tsource: manifest.source,\n\t\t\t\tpayload: manifest.payload,\n\t\t\t});\n\t\t\tif (expectation.digest !== undefined && expectation.digest !== actualDigest) {\n\t\t\t\treturn { status: \"tampered\", expectedDigest: expectation.digest, actualDigest };\n\t\t\t}\n\t\t\tif (expectation.sourceEquals !== undefined && manifest.source !== expectation.sourceEquals) {\n\t\t\t\treturn {\n\t\t\t\t\tstatus: \"source_rejected\",\n\t\t\t\t\treason: `Source \"${manifest.source}\" is not the accepted \"${expectation.sourceEquals}\"`,\n\t\t\t\t\tsource: manifest.source,\n\t\t\t\t};\n\t\t\t}\n\t\t\tconst range = expectation.versionRange;\n\t\t\tif (range?.min !== undefined && compareVersions(manifest.version, range.min) < 0) {\n\t\t\t\treturn {\n\t\t\t\t\tstatus: \"incompatible\",\n\t\t\t\t\treason: `Version ${manifest.version} is below the required ${range.min}`,\n\t\t\t\t\tversion: manifest.version,\n\t\t\t\t};\n\t\t\t}\n\t\t\tif (range?.max !== undefined && compareVersions(manifest.version, range.max) > 0) {\n\t\t\t\treturn {\n\t\t\t\t\tstatus: \"incompatible\",\n\t\t\t\t\treason: `Version ${manifest.version} is above the accepted ${range.max}`,\n\t\t\t\t\tversion: manifest.version,\n\t\t\t\t};\n\t\t\t}\n\t\t\treturn { status: \"accepted\", pluginId: manifest.pluginId, version: manifest.version, digest: actualDigest };\n\t\t},\n\t};\n}\n"]}

package/dist/plugins/integrity-adapter.js

@@ -0,0 +1,70 @@
+/**
+ * Integrity and compatibility adapter (7.3) — the seam an external
+ * publishing or policy flow uses to ACCEPT or REJECT a plugin manifest:
+ * integrity (key-order-stable digest over the manifest), version
+ * compatibility (a declared acceptable range), and source provenance.
+ *
+ * The adapter makes NO safety judgment of its own (that is Agent Core
+ * policy, excluded here) — it only computes and compares facts so an
+ * external flow can reject tampered or incompatible manifests explicitly.
+ */
+import { stableJsonDigest } from "../profile/identity.js";
+function compareVersions(a, b) {
+    const pa = a.split(".").map((part) => Number.parseInt(part, 10) || 0);
+    const pb = b.split(".").map((part) => Number.parseInt(part, 10) || 0);
+    const length = Math.max(pa.length, pb.length);
+    for (let index = 0; index < length; index += 1) {
+        const diff = (pa[index] ?? 0) - (pb[index] ?? 0);
+        if (diff !== 0)
+            return diff;
+    }
+    return 0;
+}
+export function createIntegrityAdapter() {
+    return {
+        seal(input) {
+            const manifest = {
+                pluginId: input.pluginId,
+                version: input.version,
+                source: input.source,
+                payload: input.payload,
+            };
+            return Object.freeze({ ...manifest, digest: stableJsonDigest(manifest) });
+        },
+        verify(manifest, expectation) {
+            const actualDigest = stableJsonDigest({
+                pluginId: manifest.pluginId,
+                version: manifest.version,
+                source: manifest.source,
+                payload: manifest.payload,
+            });
+            if (expectation.digest !== undefined && expectation.digest !== actualDigest) {
+                return { status: "tampered", expectedDigest: expectation.digest, actualDigest };
+            }
+            if (expectation.sourceEquals !== undefined && manifest.source !== expectation.sourceEquals) {
+                return {
+                    status: "source_rejected",
+                    reason: `Source "${manifest.source}" is not the accepted "${expectation.sourceEquals}"`,
+                    source: manifest.source,
+                };
+            }
+            const range = expectation.versionRange;
+            if (range?.min !== undefined && compareVersions(manifest.version, range.min) < 0) {
+                return {
+                    status: "incompatible",
+                    reason: `Version ${manifest.version} is below the required ${range.min}`,
+                    version: manifest.version,
+                };
+            }
+            if (range?.max !== undefined && compareVersions(manifest.version, range.max) > 0) {
+                return {
+                    status: "incompatible",
+                    reason: `Version ${manifest.version} is above the accepted ${range.max}`,
+                    version: manifest.version,
+                };
+            }
+            return { status: "accepted", pluginId: manifest.pluginId, version: manifest.version, digest: actualDigest };
+        },
+    };
+}
+//# sourceMappingURL=integrity-adapter.js.map

package/dist/plugins/integrity-adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"integrity-adapter.js","sourceRoot":"","sources":["../../src/plugins/integrity-adapter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAmC1D,SAAS,eAAe,CAAC,CAAS,EAAE,CAAS,EAAU;IACtD,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IACtE,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IACtE,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC;IAC9C,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QACjD,IAAI,IAAI,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;IAC7B,CAAC;IACD,OAAO,CAAC,CAAC;AAAA,CACT;AAED,MAAM,UAAU,sBAAsB,GAAuB;IAC5D,OAAO;QACN,IAAI,CAAC,KAAK,EAAE;YACX,MAAM,QAAQ,GAAG;gBAChB,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,OAAO,EAAE,KAAK,CAAC,OAAO;aACtB,CAAC;YACF,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,QAAQ,EAAE,MAAM,EAAE,gBAAgB,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAAA,CAC1E;QACD,MAAM,CAAC,QAAQ,EAAE,WAAW,EAAE;YAC7B,MAAM,YAAY,GAAG,gBAAgB,CAAC;gBACrC,QAAQ,EAAE,QAAQ,CAAC,QAAQ;gBAC3B,OAAO,EAAE,QAAQ,CAAC,OAAO;gBACzB,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,OAAO,EAAE,QAAQ,CAAC,OAAO;aACzB,CAAC,CAAC;YACH,IAAI,WAAW,CAAC,MAAM,KAAK,SAAS,IAAI,WAAW,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;gBAC7E,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,cAAc,EAAE,WAAW,CAAC,MAAM,EAAE,YAAY,EAAE,CAAC;YACjF,CAAC;YACD,IAAI,WAAW,CAAC,YAAY,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,KAAK,WAAW,CAAC,YAAY,EAAE,CAAC;gBAC5F,OAAO;oBACN,MAAM,EAAE,iBAAiB;oBACzB,MAAM,EAAE,WAAW,QAAQ,CAAC,MAAM,0BAA0B,WAAW,CAAC,YAAY,GAAG;oBACvF,MAAM,EAAE,QAAQ,CAAC,MAAM;iBACvB,CAAC;YACH,CAAC;YACD,MAAM,KAAK,GAAG,WAAW,CAAC,YAAY,CAAC;YACvC,IAAI,KAAK,EAAE,GAAG,KAAK,SAAS,IAAI,eAAe,CAAC,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAClF,OAAO;oBACN,MAAM,EAAE,cAAc;oBACtB,MAAM,EAAE,WAAW,QAAQ,CAAC,OAAO,0BAA0B,KAAK,CAAC,GAAG,EAAE;oBACxE,OAAO,EAAE,QAAQ,CAAC,OAAO;iBACzB,CAAC;YACH,CAAC;YACD,IAAI,KAAK,EAAE,GAAG,KAAK,SAAS,IAAI,eAAe,CAAC,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAClF,OAAO;oBACN,MAAM,EAAE,cAAc;oBACtB,MAAM,EAAE,WAAW,QAAQ,CAAC,OAAO,0BAA0B,KAAK,CAAC,GAAG,EAAE;oBACxE,OAAO,EAAE,QAAQ,CAAC,OAAO;iBACzB,CAAC;YACH,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;QAAA,CAC5G;KACD,CAAC;AAAA,CACF","sourcesContent":["/**\n * Integrity and compatibility adapter (7.3) — the seam an external\n * publishing or policy flow uses to ACCEPT or REJECT a plugin manifest:\n * integrity (key-order-stable digest over the manifest), version\n * compatibility (a declared acceptable range), and source provenance.\n *\n * The adapter makes NO safety judgment of its own (that is Agent Core\n * policy, excluded here) — it only computes and compares facts so an\n * external flow can reject tampered or incompatible manifests explicitly.\n */\n\nimport type { JsonValue } from \"@agent-forge/ai\";\nimport { stableJsonDigest } from \"../profile/identity.ts\";\n\nexport interface SealedManifestV1 {\n\treadonly pluginId: string;\n\treadonly version: string;\n\treadonly source: string;\n\treadonly payload: JsonValue;\n\treadonly digest: string;\n}\n\nexport interface ManifestExpectationV1 {\n\t/** The digest the external flow expects; a mismatch means tampering. */\n\treadonly digest?: string;\n\t/** Semantic-version range bounds, e.g. {min:\"1.0.0\", max:\"2.0.0\"}. */\n\treadonly versionRange?: { readonly min?: string; readonly max?: string };\n\t/** The source the flow is willing to accept. */\n\treadonly sourceEquals?: string;\n}\n\nexport type ManifestVerdictV1 =\n\t| { readonly status: \"accepted\"; readonly pluginId: string; readonly version: string; readonly digest: string }\n\t| { readonly status: \"tampered\"; readonly expectedDigest?: string; readonly actualDigest: string }\n\t| { readonly status: \"incompatible\"; readonly reason: string; readonly version: string }\n\t| { readonly status: \"source_rejected\"; readonly reason: string; readonly source: string };\n\nexport interface IntegrityAdapterV1 {\n\tseal(input: {\n\t\treadonly pluginId: string;\n\t\treadonly version: string;\n\t\treadonly source: string;\n\t\treadonly payload: JsonValue;\n\t}): SealedManifestV1;\n\tverify(manifest: SealedManifestV1, expectation: ManifestExpectationV1): ManifestVerdictV1;\n}\n\nfunction compareVersions(a: string, b: string): number {\n\tconst pa = a.split(\".\").map((part) => Number.parseInt(part, 10) || 0);\n\tconst pb = b.split(\".\").map((part) => Number.parseInt(part, 10) || 0);\n\tconst length = Math.max(pa.length, pb.length);\n\tfor (let index = 0; index < length; index += 1) {\n\t\tconst diff = (pa[index] ?? 0) - (pb[index] ?? 0);\n\t\tif (diff !== 0) return diff;\n\t}\n\treturn 0;\n}\n\nexport function createIntegrityAdapter(): IntegrityAdapterV1 {\n\treturn {\n\t\tseal(input) {\n\t\t\tconst manifest = {\n\t\t\t\tpluginId: input.pluginId,\n\t\t\t\tversion: input.version,\n\t\t\t\tsource: input.source,\n\t\t\t\tpayload: input.payload,\n\t\t\t};\n\t\t\treturn Object.freeze({ ...manifest, digest: stableJsonDigest(manifest) });\n\t\t},\n\t\tverify(manifest, expectation) {\n\t\t\tconst actualDigest = stableJsonDigest({\n\t\t\t\tpluginId: manifest.pluginId,\n\t\t\t\tversion: manifest.version,\n\t\t\t\tsource: manifest.source,\n\t\t\t\tpayload: manifest.payload,\n\t\t\t});\n\t\t\tif (expectation.digest !== undefined && expectation.digest !== actualDigest) {\n\t\t\t\treturn { status: \"tampered\", expectedDigest: expectation.digest, actualDigest };\n\t\t\t}\n\t\t\tif (expectation.sourceEquals !== undefined && manifest.source !== expectation.sourceEquals) {\n\t\t\t\treturn {\n\t\t\t\t\tstatus: \"source_rejected\",\n\t\t\t\t\treason: `Source \"${manifest.source}\" is not the accepted \"${expectation.sourceEquals}\"`,\n\t\t\t\t\tsource: manifest.source,\n\t\t\t\t};\n\t\t\t}\n\t\t\tconst range = expectation.versionRange;\n\t\t\tif (range?.min !== undefined && compareVersions(manifest.version, range.min) < 0) {\n\t\t\t\treturn {\n\t\t\t\t\tstatus: \"incompatible\",\n\t\t\t\t\treason: `Version ${manifest.version} is below the required ${range.min}`,\n\t\t\t\t\tversion: manifest.version,\n\t\t\t\t};\n\t\t\t}\n\t\t\tif (range?.max !== undefined && compareVersions(manifest.version, range.max) > 0) {\n\t\t\t\treturn {\n\t\t\t\t\tstatus: \"incompatible\",\n\t\t\t\t\treason: `Version ${manifest.version} is above the accepted ${range.max}`,\n\t\t\t\t\tversion: manifest.version,\n\t\t\t\t};\n\t\t\t}\n\t\t\treturn { status: \"accepted\", pluginId: manifest.pluginId, version: manifest.version, digest: actualDigest };\n\t\t},\n\t};\n}\n"]}

package/dist/plugins/mcp-http.d.ts

@@ -0,0 +1,78 @@
+/**
+ * MCP HTTP transport (4.3) — a streamable-HTTP MCP transport implementing the
+ * same transport interface as the stdio plugin, plus observable retry.
+ *
+ * Retries apply ONLY to requests the server could not have started (connect
+ * errors, 5xx, 429) — a completed response (any JSON-RPC reply) is never
+ * re-sent, keeping calls idempotent from the caller's perspective. Every
+ * transport error, retry attempt, and reconnect is reported through the
+ * `onEvent` callback so callers can observe what happened. CLI
+ * productization is out of scope.
+ */
+/**
+ * Per-request options for MCP transports. Defined here rather than imported
+ * from the mcp-stdio example so production src never depends on examples/
+ * (统一修复轮 C reverse-dependency fix); structurally identical to the
+ * example's own declaration, which stays self-contained.
+ */
+export interface McpRequestOptions {
+    signal?: AbortSignal;
+    timeoutMs?: number;
+}
+export interface McpHttpTransportEventV1 {
+    readonly kind: "connect" | "transport_error" | "retry" | "reconnect" | "response";
+    readonly at: number;
+    readonly detail: string;
+    readonly attempt?: number;
+}
+export interface McpHttpTransportOptionsV1 {
+    readonly url: string;
+    readonly timeoutMs?: number;
+    readonly retryLimit?: number;
+    readonly baseRetryMs?: number;
+    readonly maxRetryMs?: number;
+    readonly now?: () => number;
+    readonly sleep?: (ms: number) => Promise<void> | void;
+    readonly onEvent?: (event: McpHttpTransportEventV1) => void;
+    /**
+     * Extra request headers merged after the transport defaults on every
+     * outbound request (initialize / notifications/initialized / tools/list /
+     * tools/call), so user values can override the defaults — the
+     * `Authorization: Bearer ...` case for hosted remote MCP servers. Values
+     * are sent verbatim (never case-normalized). They may carry credentials:
+     * the suite MCP pool materializes them into the generated plugin entry
+     * below `<agentDir>/mcp/pool/`, which sits inside the same local-machine
+     * data boundary as `auth.json` (docs/design/产品价值度量与数据边界登记.md
+     * §2.1 本机数据).
+     */
+    readonly headers?: Readonly<Record<string, string>>;
+}
+/** Structurally compatible with the stdio plugin's transport interface. */
+export interface McpHttpTransportV1 {
+    request(method: string, params?: unknown, options?: McpRequestOptions): Promise<unknown>;
+    notify(method: string, params?: unknown): Promise<void> | void;
+    close(): Promise<void> | void;
+    events(): readonly McpHttpTransportEventV1[];
+}
+export declare function createMcpHttpTransport(options: McpHttpTransportOptionsV1): McpHttpTransportV1;
+/** Minimal api surface the HTTP server plugin relies on (capability registerTool). */
+export interface McpHttpServerPluginApiV1 {
+    registerTool(definition: unknown): unknown;
+}
+/**
+ * Configuration-driven entry for remote MCP servers: wires
+ * createMcpHttpTransport into the same plugin shape as the generated stdio
+ * bridge (initialize/tools/list handshake, one registerTool per remote tool,
+ * dual call convention). Tool call policy stays host-owned; the plugin only
+ * forwards requests and maps results. The suite MCP registration pool
+ * materializes url-configured servers through this entry; optional `headers`
+ * are forwarded verbatim to the transport (credential note there).
+ */
+export declare function createMcpHttpServerPlugin(config: {
+    url: string;
+    /** Forwarded to the transport verbatim; see McpHttpTransportOptionsV1.headers for the credential note. */
+    headers?: Readonly<Record<string, string>>;
+}): (api: McpHttpServerPluginApiV1) => Promise<{
+    dispose(): void;
+}>;
+//# sourceMappingURL=mcp-http.d.ts.map

package/dist/plugins/mcp-http.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-http.d.ts","sourceRoot":"","sources":["../../src/plugins/mcp-http.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH;;;;;GAKG;AACH,MAAM,WAAW,iBAAiB;IACjC,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,uBAAuB;IACvC,QAAQ,CAAC,IAAI,EAAE,SAAS,GAAG,iBAAiB,GAAG,OAAO,GAAG,WAAW,GAAG,UAAU,CAAC;IAClF,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,yBAAyB;IACzC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IACtD,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,uBAAuB,KAAK,IAAI,CAAC;IAC5D;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACpD;AAED,2EAA2E;AAC3E,MAAM,WAAW,kBAAkB;IAClC,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACzF,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAC/D,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAC9B,MAAM,IAAI,SAAS,uBAAuB,EAAE,CAAC;CAC7C;AAQD,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,yBAAyB,GAAG,kBAAkB,CAsH7F;AAED,sFAAsF;AACtF,MAAM,WAAW,wBAAwB;IACxC,YAAY,CAAC,UAAU,EAAE,OAAO,GAAG,OAAO,CAAC;CAC3C;AAWD;;;;;;;;GAQG;AACH,wBAAgB,yBAAyB,CAAC,MAAM,EAAE;IACjD,GAAG,EAAE,MAAM,CAAC;IACZ,0GAA0G;IAC1G,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CAC3C,GAAG,CAAC,GAAG,EAAE,wBAAwB,KAAK,OAAO,CAAC;IAAE,OAAO,IAAI,IAAI,CAAA;CAAE,CAAC,CAqDlE","sourcesContent":["/**\n * MCP HTTP transport (4.3) — a streamable-HTTP MCP transport implementing the\n * same transport interface as the stdio plugin, plus observable retry.\n *\n * Retries apply ONLY to requests the server could not have started (connect\n * errors, 5xx, 429) — a completed response (any JSON-RPC reply) is never\n * re-sent, keeping calls idempotent from the caller's perspective. Every\n * transport error, retry attempt, and reconnect is reported through the\n * `onEvent` callback so callers can observe what happened. CLI\n * productization is out of scope.\n */\n/**\n * Per-request options for MCP transports. Defined here rather than imported\n * from the mcp-stdio example so production src never depends on examples/\n * (统一修复轮 C reverse-dependency fix); structurally identical to the\n * example's own declaration, which stays self-contained.\n */\nexport interface McpRequestOptions {\n\tsignal?: AbortSignal;\n\ttimeoutMs?: number;\n}\n\nexport interface McpHttpTransportEventV1 {\n\treadonly kind: \"connect\" | \"transport_error\" | \"retry\" | \"reconnect\" | \"response\";\n\treadonly at: number;\n\treadonly detail: string;\n\treadonly attempt?: number;\n}\n\nexport interface McpHttpTransportOptionsV1 {\n\treadonly url: string;\n\treadonly timeoutMs?: number;\n\treadonly retryLimit?: number;\n\treadonly baseRetryMs?: number;\n\treadonly maxRetryMs?: number;\n\treadonly now?: () => number;\n\treadonly sleep?: (ms: number) => Promise<void> | void;\n\treadonly onEvent?: (event: McpHttpTransportEventV1) => void;\n\t/**\n\t * Extra request headers merged after the transport defaults on every\n\t * outbound request (initialize / notifications/initialized / tools/list /\n\t * tools/call), so user values can override the defaults — the\n\t * `Authorization: Bearer ...` case for hosted remote MCP servers. Values\n\t * are sent verbatim (never case-normalized). They may carry credentials:\n\t * the suite MCP pool materializes them into the generated plugin entry\n\t * below `<agentDir>/mcp/pool/`, which sits inside the same local-machine\n\t * data boundary as `auth.json` (docs/design/产品价值度量与数据边界登记.md\n\t * §2.1 本机数据).\n\t */\n\treadonly headers?: Readonly<Record<string, string>>;\n}\n\n/** Structurally compatible with the stdio plugin's transport interface. */\nexport interface McpHttpTransportV1 {\n\trequest(method: string, params?: unknown, options?: McpRequestOptions): Promise<unknown>;\n\tnotify(method: string, params?: unknown): Promise<void> | void;\n\tclose(): Promise<void> | void;\n\tevents(): readonly McpHttpTransportEventV1[];\n}\n\ninterface JsonRpcResponse {\n\tid?: number | string | null;\n\tresult?: unknown;\n\terror?: { code?: number; message?: string };\n}\n\nexport function createMcpHttpTransport(options: McpHttpTransportOptionsV1): McpHttpTransportV1 {\n\tconst timeoutMs = options.timeoutMs ?? 10_000;\n\tconst retryLimit = options.retryLimit ?? 2;\n\tconst baseRetryMs = options.baseRetryMs ?? 100;\n\tconst maxRetryMs = options.maxRetryMs ?? 1_600;\n\tconst now = options.now ?? (() => Date.now());\n\tconst sleep = options.sleep ?? (() => undefined);\n\tconst events: McpHttpTransportEventV1[] = [];\n\tlet nextId = 1;\n\tlet closed = false;\n\n\tconst record = (event: McpHttpTransportEventV1): void => {\n\t\tevents.push(event);\n\t\toptions.onEvent?.(event);\n\t};\n\n\tconst postOnce = async (\n\t\tbody: string,\n\t\trequestOptions: McpRequestOptions | undefined,\n\t): Promise<{ status: number; text: string } | { status: \"connect_error\"; reason: string }> => {\n\t\tconst controller = new AbortController();\n\t\tconst timer = setTimeout(() => controller.abort(), requestOptions?.timeoutMs ?? timeoutMs);\n\t\ttry {\n\t\t\tconst response = await fetch(options.url, {\n\t\t\t\tmethod: \"POST\",\n\t\t\t\theaders: {\n\t\t\t\t\t\"content-type\": \"application/json\",\n\t\t\t\t\taccept: \"application/json, text/event-stream\",\n\t\t\t\t\t...(options.headers ?? {}),\n\t\t\t\t},\n\t\t\t\tbody,\n\t\t\t\tsignal: controller.signal,\n\t\t\t});\n\t\t\tconst text = await response.text();\n\t\t\treturn { status: response.status, text };\n\t\t} catch (error) {\n\t\t\tconst reason = error instanceof Error ? `${error.name}: ${error.message}` : String(error);\n\t\t\treturn { status: \"connect_error\", reason };\n\t\t} finally {\n\t\t\tclearTimeout(timer);\n\t\t}\n\t};\n\n\tconst postWithRetry = async (\n\t\tbody: string,\n\t\trequestOptions?: McpRequestOptions,\n\t): Promise<{ status: number; text: string }> => {\n\t\tfor (let attempt = 1; ; attempt += 1) {\n\t\t\tconst response = await postOnce(body, requestOptions);\n\t\t\tif (response.status !== \"connect_error\" && response.status < 500 && response.status !== 429) {\n\t\t\t\trecord({ kind: \"response\", at: now(), detail: `HTTP ${response.status}`, attempt });\n\t\t\t\treturn response;\n\t\t\t}\n\t\t\tconst reason = response.status === \"connect_error\" ? response.reason : `HTTP ${response.status}`;\n\t\t\tif (attempt > retryLimit) {\n\t\t\t\trecord({\n\t\t\t\t\tkind: \"transport_error\",\n\t\t\t\t\tat: now(),\n\t\t\t\t\tdetail: `giving up after ${attempt - 1} retries: ${reason}`,\n\t\t\t\t\tattempt,\n\t\t\t\t});\n\t\t\t\tthrow new Error(`MCP HTTP transport error: ${reason}`);\n\t\t\t}\n\t\t\tconst waitedMs = Math.min(baseRetryMs * 2 ** (attempt - 1), maxRetryMs);\n\t\t\trecord({\n\t\t\t\tkind: \"retry\",\n\t\t\t\tat: now(),\n\t\t\t\tdetail: `attempt ${attempt} failed (${reason}); waiting ${waitedMs}ms`,\n\t\t\t\tattempt,\n\t\t\t});\n\t\t\tawait sleep(waitedMs);\n\t\t\tif (attempt === 1 && response.status === \"connect_error\") {\n\t\t\t\trecord({ kind: \"reconnect\", at: now(), detail: \"re-establishing HTTP connection\", attempt });\n\t\t\t}\n\t\t}\n\t};\n\n\tconst rpc = async (method: string, params?: unknown, requestOptions?: McpRequestOptions): Promise<unknown> => {\n\t\tif (closed) throw new Error(\"MCP HTTP transport is closed\");\n\t\tconst id = nextId;\n\t\tnextId += 1;\n\t\tconst body = JSON.stringify({ jsonrpc: \"2.0\", id, method, ...(params === undefined ? {} : { params }) });\n\t\tconst response = await postWithRetry(body, requestOptions);\n\t\tif (response.status !== 200) {\n\t\t\tthrow new Error(`MCP HTTP transport returned HTTP ${response.status}`);\n\t\t}\n\t\tlet parsed: JsonRpcResponse;\n\t\ttry {\n\t\t\tparsed = JSON.parse(response.text) as JsonRpcResponse;\n\t\t} catch (error) {\n\t\t\tthrow new Error(\n\t\t\t\t// v8 ignore next -- JSON.parse 只会抛出 Error 对象\n\t\t\t\t`MCP HTTP transport returned non-JSON body: ${error instanceof Error ? error.message : String(error)}`,\n\t\t\t);\n\t\t}\n\t\tif (parsed.error !== undefined) {\n\t\t\tthrow new Error(`MCP error ${parsed.error.code ?? \"\"}: ${parsed.error.message ?? \"unknown error\"}`);\n\t\t}\n\t\treturn parsed.result;\n\t};\n\n\treturn {\n\t\tasync request(method, params, requestOptions) {\n\t\t\treturn rpc(method, params, requestOptions);\n\t\t},\n\t\tasync notify(method, params) {\n\t\t\tawait postWithRetry(\n\t\t\t\tJSON.stringify({ jsonrpc: \"2.0\", method, ...(params === undefined ? {} : { params }) }),\n\t\t\t\tundefined,\n\t\t\t);\n\t\t},\n\t\tasync close() {\n\t\t\tclosed = true;\n\t\t},\n\t\tevents() {\n\t\t\treturn Object.freeze([...events]);\n\t\t},\n\t};\n}\n\n/** Minimal api surface the HTTP server plugin relies on (capability registerTool). */\nexport interface McpHttpServerPluginApiV1 {\n\tregisterTool(definition: unknown): unknown;\n}\n\nfunction normalizeToolResult(result: unknown): { content: unknown[]; details?: unknown } {\n\tif (result && typeof result === \"object\" && Array.isArray((result as { content?: unknown }).content)) {\n\t\tconst { content, details } = result as { content: unknown[]; details?: unknown };\n\t\treturn { content, details };\n\t}\n\tif (result === undefined) return { content: [{ type: \"text\", text: \"\" }] };\n\treturn { content: [{ type: \"text\", text: JSON.stringify(result) }] };\n}\n\n/**\n * Configuration-driven entry for remote MCP servers: wires\n * createMcpHttpTransport into the same plugin shape as the generated stdio\n * bridge (initialize/tools/list handshake, one registerTool per remote tool,\n * dual call convention). Tool call policy stays host-owned; the plugin only\n * forwards requests and maps results. The suite MCP registration pool\n * materializes url-configured servers through this entry; optional `headers`\n * are forwarded verbatim to the transport (credential note there).\n */\nexport function createMcpHttpServerPlugin(config: {\n\turl: string;\n\t/** Forwarded to the transport verbatim; see McpHttpTransportOptionsV1.headers for the credential note. */\n\theaders?: Readonly<Record<string, string>>;\n}): (api: McpHttpServerPluginApiV1) => Promise<{ dispose(): void }> {\n\treturn async (api) => {\n\t\tconst transport = createMcpHttpTransport({ url: config.url, headers: config.headers });\n\t\ttry {\n\t\t\tawait transport.request(\"initialize\", {\n\t\t\t\tprotocolVersion: \"2024-11-05\",\n\t\t\t\tcapabilities: {},\n\t\t\t\tclientInfo: { name: \"agent-forge-mcp-pool\", version: \"0.1.0\" },\n\t\t\t});\n\t\t\tawait transport.notify(\"notifications/initialized\");\n\t\t\tconst listing = (await transport.request(\"tools/list\")) as { tools?: unknown };\n\t\t\tif (!listing || !Array.isArray(listing.tools)) {\n\t\t\t\tthrow new Error(\"MCP tools/list result must contain tools[]\");\n\t\t\t}\n\t\t\tfor (const tool of listing.tools) {\n\t\t\t\tconst candidate = tool as { name?: unknown; description?: unknown; inputSchema?: unknown };\n\t\t\t\tif (!candidate || typeof candidate.name !== \"string\" || !candidate.name) {\n\t\t\t\t\tthrow new Error(\"MCP tool requires a non-empty name\");\n\t\t\t\t}\n\t\t\t\tapi.registerTool({\n\t\t\t\t\tname: candidate.name,\n\t\t\t\t\tlabel: candidate.name,\n\t\t\t\t\tdescription:\n\t\t\t\t\t\ttypeof candidate.description === \"string\" ? candidate.description : `MCP tool: ${candidate.name}`,\n\t\t\t\t\tparameters:\n\t\t\t\t\t\tcandidate.inputSchema && typeof candidate.inputSchema === \"object\"\n\t\t\t\t\t\t\t? candidate.inputSchema\n\t\t\t\t\t\t\t: { type: \"object\", properties: {} },\n\t\t\t\t\texecute: async (toolCallId: string, params: unknown, signal?: AbortSignal) => {\n\t\t\t\t\t\t// Dual call convention: the session passes (toolCallId, params,\n\t\t\t\t\t\t// signal); the runtime's invokeTool passes the input as the\n\t\t\t\t\t\t// single first argument.\n\t\t\t\t\t\tconst singleArgCall = params === undefined && typeof toolCallId !== \"string\";\n\t\t\t\t\t\tconst input = singleArgCall ? toolCallId : params;\n\t\t\t\t\t\tconst result = await transport.request(\n\t\t\t\t\t\t\t\"tools/call\",\n\t\t\t\t\t\t\t{ name: candidate.name as string, arguments: input || {} },\n\t\t\t\t\t\t\tsingleArgCall ? undefined : { signal },\n\t\t\t\t\t\t);\n\t\t\t\t\t\treturn normalizeToolResult(result);\n\t\t\t\t\t},\n\t\t\t\t});\n\t\t\t}\n\t\t\treturn {\n\t\t\t\tdispose() {\n\t\t\t\t\ttransport.close();\n\t\t\t\t},\n\t\t\t};\n\t\t} catch (error) {\n\t\t\ttransport.close();\n\t\t\tthrow error;\n\t\t}\n\t};\n}\n"]}