@ai-agent-forge/agent-forge 0.85.0

package/dist/profile/identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.js","sourceRoot":"","sources":["../../src/profile/identity.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAqB1E,SAAS,eAAe,CAAC,KAAgB,EAAU;IAClD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC5G,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAC7F,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;SAChC,IAAI,EAAE;SACN,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,eAAe,CAAE,KAAmC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;IACvG,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;AAAA,CAChC;AAED,yEAAyE;AACzE,MAAM,UAAU,gBAAgB,CAAC,KAAgB,EAAU;IAC1D,MAAM,UAAU,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IAC1C,IAAI,MAAM,GAAG,qBAAqB,CAAC;IACnC,KAAK,MAAM,IAAI,IAAI,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC;QACvB,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,cAAc,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;AAAA,CAC7C;AAED,SAAS,oBAAoB,CAAC,KAAc,EAAE,KAAa,EAA2B;IACrF,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,6BAA6B,CAAC,CAAC;AAAA,CACnH;AAED,SAAS,mBAAmB,CAC3B,KAAc,EACd,KAAa,EACsF;IACnG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,mBAAmB,CAAC,CAAC;IACxE,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAC1C,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACtE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,IAAI,KAAK,0BAA0B,CAAC,CAAC;QAC9D,CAAC;QACD,MAAM,MAAM,GAAG,IAA+B,CAAC;QAC/C,oBAAoB,CAAC,MAAM,CAAC,QAAQ,EAAE,GAAG,KAAK,IAAI,KAAK,YAAY,CAAC,CAAC;QACrE,oBAAoB,CAAC,MAAM,CAAC,aAAa,EAAE,GAAG,KAAK,IAAI,KAAK,iBAAiB,CAAC,CAAC;QAC/E,MAAM,GAAG,GAAG,GAAG,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;QACzD,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,8BAA8B,GAAG,EAAE,CAAC,CAAC;QAChF,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACd,MAAM,eAAe,GAAG,MAAM,CAAC,eAAe,CAAC;QAC/C,IAAI,eAAe,KAAK,SAAS;YAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC;QAC7G,IAAI,eAAe,KAAK,IAAI,IAAI,OAAO,eAAe,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC;YACvG,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,IAAI,KAAK,qCAAqC,CAAC,CAAC;QACzE,CAAC;QACD,MAAM,OAAO,GAAG,eAA0C,CAAC;QAC3D,oBAAoB,CAAC,OAAO,CAAC,EAAE,EAAE,GAAG,KAAK,IAAI,KAAK,sBAAsB,CAAC,CAAC;QAC1E,oBAAoB,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,KAAK,IAAI,KAAK,2BAA2B,CAAC,CAAC;QACpF,OAAO;YACN,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,eAAe,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE;SAC7D,CAAC;IAAA,CACF,CAAC,CAAC;IACH,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACnC,IAAI,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ;QAC/B,CAAC,CAAC,uBAAuB,CAAC,IAAI,CAAC,aAAa,EAAE,KAAK,CAAC,aAAa,CAAC;QAClE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,CAC9C,CAAC;AAAA,CACF;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,KAOtC,EAAqB;IACrB,oBAAoB,CAAC,KAAK,CAAC,SAAS,EAAE,4BAA4B,CAAC,CAAC;IACpE,oBAAoB,CAAC,KAAK,CAAC,cAAc,EAAE,iCAAiC,CAAC,CAAC;IAC9E,MAAM,aAAa,GAAG,mBAAmB,CAAC,KAAK,CAAC,eAAe,EAAE,kCAAkC,CAAC,CAAC;IAErG,MAAM,kBAAkB,GAAG,CAAC,GAAG,KAAK,CAAC,kBAAkB,CAAC;SACtD,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC;QACb,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,OAAO,GAAG,CAAC,EAAE,CAAC;YAC9F,MAAM,IAAI,KAAK,CAAC,gFAAgF,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;QAC3G,CAAC;QACD,oBAAoB,CAAC,GAAG,CAAC,EAAE,EAAE,wCAAwC,CAAC,CAAC;QACvE,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC;IAAA,CAC5C,CAAC;SACD,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAEjH,MAAM,cAAc,GAAG,gBAAgB,CAAC;QACvC,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,OAAO,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YACtC,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,GAAG,CAAC,KAAK,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,KAAK,CAAC,eAAe,EAAE,CAAC;SAC1F,CAAC,CAAC;QACH,kBAAkB,EAAE,kBAAkB,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;KAC3F,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC,MAAM,CAAC;QACpB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,cAAc;QACd,kBAAkB,EAAE,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,GAAG,EAAE,CAAC,CAAC,CAAC;KAC7F,CAAC,CAAC;AAAA,CACH;AAED,6EAA6E;AAC7E,MAAM,UAAU,2BAA2B,CAAC,IAAuB,EAAE,KAAwB,EAAW;IACvG,OAAO,IAAI,CAAC,cAAc,KAAK,KAAK,CAAC,cAAc,CAAC;AAAA,CACpD","sourcesContent":["/**\n * Profile identity — minimal Profile identity, resolved manifest digest, and\n * host compatibility facts (2.0a).\n *\n * The identity is fully determined by the resolved inputs: profileId +\n * profileVersion name it; the manifest digest is an FNV-1a digest over the\n * key-order-stable serialization of the sorted resolved plugin manifests; the\n * resolved capability versions are carried as a sorted, JSON-serializable\n * list. The identity is the input for the session-start Profile lock (2.0b).\n */\nimport type { JsonValue } from \"@agent-forge/ai\";\nimport { comparePluginVersionsV1 } from \"../plugins/ecosystem/catalog.ts\";\n\n/** One resolved plugin manifest entry of a Profile. */\nexport interface ResolvedPluginManifestV1 {\n\treadonly pluginId: string;\n\treadonly pluginVersion: string;\n\treadonly manifestPath?: string;\n\treadonly capabilityRefs: readonly { readonly id: string; readonly version: number }[];\n\treadonly selectedAdapter?: { readonly id: string; readonly version: string };\n}\n\n/** The serializable, digest-carrying Profile identity. */\nexport interface ProfileIdentityV1 {\n\treadonly profileId: string;\n\treadonly profileVersion: string;\n\t/** FNV-1a digest over the stable serialization of the resolved manifests. */\n\treadonly manifestDigest: string;\n\t/** Sorted (id, version) capability references of the resolved set. */\n\treadonly capabilityVersions: readonly { readonly id: string; readonly version: number }[];\n}\n\nfunction stableStringify(value: JsonValue): string {\n\tif (value === null || typeof value === \"boolean\" || typeof value === \"number\" || typeof value === \"string\") {\n\t\treturn JSON.stringify(value);\n\t}\n\tif (Array.isArray(value)) return `[${value.map((item) => stableStringify(item)).join(\",\")}]`;\n\tconst entries = Object.keys(value)\n\t\t.sort()\n\t\t.map((key) => `${JSON.stringify(key)}:${stableStringify((value as Record<string, JsonValue>)[key])}`);\n\treturn `{${entries.join(\",\")}}`;\n}\n\n/** FNV-1a 64-bit digest over the key-order-stable JSON serialization. */\nexport function stableJsonDigest(value: JsonValue): string {\n\tconst serialized = stableStringify(value);\n\tlet digest = 14695981039346656037n;\n\tfor (const byte of new TextEncoder().encode(serialized)) {\n\t\tdigest ^= BigInt(byte);\n\t\tdigest = BigInt.asUintN(64, digest * 1099511628211n);\n\t}\n\treturn digest.toString(16).padStart(16, \"0\");\n}\n\nfunction assertNonEmptyString(value: unknown, label: string): asserts value is string {\n\tif (typeof value !== \"string\" || value.trim().length === 0) throw new Error(`${label} must be a non-empty string`);\n}\n\nfunction assertPluginEntries(\n\tvalue: unknown,\n\tlabel: string,\n): { pluginId: string; pluginVersion: string; selectedAdapter?: { id: string; version: string } }[] {\n\tif (!Array.isArray(value)) throw new Error(`${label} must be an array`);\n\tconst seen = new Set<string>();\n\tconst entries = value.map((item, index) => {\n\t\tif (item === null || typeof item !== \"object\" || Array.isArray(item)) {\n\t\t\tthrow new Error(`${label}[${index}] must be a plain object`);\n\t\t}\n\t\tconst record = item as Record<string, unknown>;\n\t\tassertNonEmptyString(record.pluginId, `${label}[${index}].pluginId`);\n\t\tassertNonEmptyString(record.pluginVersion, `${label}[${index}].pluginVersion`);\n\t\tconst key = `${record.pluginId}@${record.pluginVersion}`;\n\t\tif (seen.has(key)) throw new Error(`${label} contains duplicate entry: ${key}`);\n\t\tseen.add(key);\n\t\tconst selectedAdapter = record.selectedAdapter;\n\t\tif (selectedAdapter === undefined) return { pluginId: record.pluginId, pluginVersion: record.pluginVersion };\n\t\tif (selectedAdapter === null || typeof selectedAdapter !== \"object\" || Array.isArray(selectedAdapter)) {\n\t\t\tthrow new Error(`${label}[${index}].selectedAdapter must be an object`);\n\t\t}\n\t\tconst adapter = selectedAdapter as Record<string, unknown>;\n\t\tassertNonEmptyString(adapter.id, `${label}[${index}].selectedAdapter.id`);\n\t\tassertNonEmptyString(adapter.version, `${label}[${index}].selectedAdapter.version`);\n\t\treturn {\n\t\t\tpluginId: record.pluginId,\n\t\t\tpluginVersion: record.pluginVersion,\n\t\t\tselectedAdapter: { id: adapter.id, version: adapter.version },\n\t\t};\n\t});\n\treturn entries.sort((left, right) =>\n\t\tleft.pluginId === right.pluginId\n\t\t\t? comparePluginVersionsV1(left.pluginVersion, right.pluginVersion)\n\t\t\t: left.pluginId.localeCompare(right.pluginId),\n\t);\n}\n\n/**\n * Builds the Profile identity from the resolved inputs. The digest is\n * order-independent (sorted before serialization) so the same resolved set\n * always yields the same identity regardless of discovery order.\n */\nexport function buildProfileIdentityV1(input: {\n\treadonly profileId: string;\n\treadonly profileVersion: string;\n\t/** Resolved plugin manifests participating in the Profile. */\n\treadonly resolvedPlugins: readonly ResolvedPluginManifestV1[];\n\t/** Resolved capability references (id + exact version). */\n\treadonly capabilityVersions: readonly { readonly id: string; readonly version: number }[];\n}): ProfileIdentityV1 {\n\tassertNonEmptyString(input.profileId, \"Profile identity.profileId\");\n\tassertNonEmptyString(input.profileVersion, \"Profile identity.profileVersion\");\n\tconst pluginEntries = assertPluginEntries(input.resolvedPlugins, \"Profile identity.resolvedPlugins\");\n\n\tconst capabilityVersions = [...input.capabilityVersions]\n\t\t.map((ref) => {\n\t\t\tif (typeof ref.version !== \"number\" || !Number.isSafeInteger(ref.version) || ref.version < 1) {\n\t\t\t\tthrow new Error(`Profile identity.capabilityVersions version must be a positive safe integer: ${ref.id}`);\n\t\t\t}\n\t\t\tassertNonEmptyString(ref.id, \"Profile identity.capabilityVersions.id\");\n\t\t\treturn { id: ref.id, version: ref.version };\n\t\t})\n\t\t.sort((left, right) => (left.id === right.id ? left.version - right.version : left.id.localeCompare(right.id)));\n\n\tconst manifestDigest = stableJsonDigest({\n\t\tprofileId: input.profileId,\n\t\tprofileVersion: input.profileVersion,\n\t\tplugins: pluginEntries.map((entry) => ({\n\t\t\tpluginId: entry.pluginId,\n\t\t\tpluginVersion: entry.pluginVersion,\n\t\t\t...(entry.selectedAdapter === undefined ? {} : { selectedAdapter: entry.selectedAdapter }),\n\t\t})),\n\t\tcapabilityVersions: capabilityVersions.map((ref) => ({ id: ref.id, version: ref.version })),\n\t});\n\n\treturn Object.freeze({\n\t\tprofileId: input.profileId,\n\t\tprofileVersion: input.profileVersion,\n\t\tmanifestDigest,\n\t\tcapabilityVersions: Object.freeze(capabilityVersions.map((ref) => Object.freeze({ ...ref }))),\n\t});\n}\n\n/** Host compatibility check: identities match when the digests are equal. */\nexport function profileIdentitiesCompatible(left: ProfileIdentityV1, right: ProfileIdentityV1): boolean {\n\treturn left.manifestDigest === right.manifestDigest;\n}\n"]}

package/dist/profile/lock.d.ts

@@ -0,0 +1,59 @@
+/**
+ * Profile lock — pre-creation lock and reopen/reload drift detection (2.0b).
+ *
+ * A Profile lock freezes the resolved `ProfileIdentityV1` at session creation.
+ * Reopen/reload verifies the current resolved identity against the lock:
+ * - same manifest digest + profile version → `locked`;
+ * - same version but a different resolved set → `drift` with the differing
+ *   capability/plugin facts;
+ * - different profile version → `migration_required` (explicit, never an
+ *   automatic replacement).
+ * Replacing a lock requires explicit authorization and is observable — the
+ * locked list can never be silently swapped.
+ */
+import type { ProfileIdentityV1 } from "./identity.ts";
+export interface ProfileLockV1 {
+    readonly identity: ProfileIdentityV1;
+    readonly lockedAt: number;
+    readonly lockedBy: string;
+    /** Generation increments on each authorized replacement. */
+    readonly generation: number;
+    readonly supersededBy?: never;
+}
+export type ProfileLockVerificationV1 = {
+    readonly status: "locked";
+} | {
+    readonly status: "drift";
+    readonly reason: string;
+    readonly missingCapabilityVersions: readonly string[];
+    readonly addedCapabilityVersions: readonly string[];
+} | {
+    readonly status: "migration_required";
+    readonly reason: string;
+    readonly fromProfileVersion: string;
+    readonly toProfileVersion: string;
+};
+export interface ProfileLockReplaceResultV1 {
+    readonly previousGeneration: number;
+    readonly lock: ProfileLockV1;
+}
+/** Creates an immutable Profile lock over a resolved identity (2.0b). */
+export declare function createProfileLock(identity: ProfileIdentityV1, options?: {
+    readonly lockedBy?: string;
+    readonly now?: () => number;
+}): ProfileLockV1;
+/**
+ * Verifies a current resolved identity against the lock during reopen/reload.
+ * The lock itself is never mutated; drift and migration are explicit results.
+ */
+export declare function verifyProfileLock(lock: ProfileLockV1, current: ProfileIdentityV1): ProfileLockVerificationV1;
+/**
+ * Replaces a lock with explicit authorization. This is the ONLY way to change
+ * a lock — silent replacement does not exist.
+ */
+export declare function replaceProfileLock(lock: ProfileLockV1, identity: ProfileIdentityV1, authorization: {
+    readonly authorizedBy: string;
+}, options?: {
+    readonly now?: () => number;
+}): ProfileLockReplaceResultV1;
+//# sourceMappingURL=lock.d.ts.map

package/dist/profile/lock.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lock.d.ts","sourceRoot":"","sources":["../../src/profile/lock.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAGvD,MAAM,WAAW,aAAa;IAC7B,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,CAAC;IACrC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,4DAA4D;IAC5D,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,CAAC,EAAE,KAAK,CAAC;CAC9B;AAED,MAAM,MAAM,yBAAyB,GAClC;IAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAA;CAAE,GAC7B;IACA,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,yBAAyB,EAAE,SAAS,MAAM,EAAE,CAAC;IACtD,QAAQ,CAAC,uBAAuB,EAAE,SAAS,MAAM,EAAE,CAAC;CACnD,GACD;IACA,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAC;IACtC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;CACjC,CAAC;AAEL,MAAM,WAAW,0BAA0B;IAC1C,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;CAC7B;AAMD,yEAAyE;AACzE,wBAAgB,iBAAiB,CAChC,QAAQ,EAAE,iBAAiB,EAC3B,OAAO,GAAE;IAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;CAAO,GACvE,aAAa,CAQf;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,iBAAiB,GAAG,yBAAyB,CAsB5G;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CACjC,IAAI,EAAE,aAAa,EACnB,QAAQ,EAAE,iBAAiB,EAC3B,aAAa,EAAE;IAAE,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;CAAE,EAChD,OAAO,GAAE;IAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;CAAO,GAC3C,0BAA0B,CAW5B","sourcesContent":["/**\n * Profile lock — pre-creation lock and reopen/reload drift detection (2.0b).\n *\n * A Profile lock freezes the resolved `ProfileIdentityV1` at session creation.\n * Reopen/reload verifies the current resolved identity against the lock:\n * - same manifest digest + profile version → `locked`;\n * - same version but a different resolved set → `drift` with the differing\n *   capability/plugin facts;\n * - different profile version → `migration_required` (explicit, never an\n *   automatic replacement).\n * Replacing a lock requires explicit authorization and is observable — the\n * locked list can never be silently swapped.\n */\nimport type { ProfileIdentityV1 } from \"./identity.ts\";\nimport { profileIdentitiesCompatible } from \"./identity.ts\";\n\nexport interface ProfileLockV1 {\n\treadonly identity: ProfileIdentityV1;\n\treadonly lockedAt: number;\n\treadonly lockedBy: string;\n\t/** Generation increments on each authorized replacement. */\n\treadonly generation: number;\n\treadonly supersededBy?: never;\n}\n\nexport type ProfileLockVerificationV1 =\n\t| { readonly status: \"locked\" }\n\t| {\n\t\t\treadonly status: \"drift\";\n\t\t\treadonly reason: string;\n\t\t\treadonly missingCapabilityVersions: readonly string[];\n\t\t\treadonly addedCapabilityVersions: readonly string[];\n\t  }\n\t| {\n\t\t\treadonly status: \"migration_required\";\n\t\t\treadonly reason: string;\n\t\t\treadonly fromProfileVersion: string;\n\t\t\treadonly toProfileVersion: string;\n\t  };\n\nexport interface ProfileLockReplaceResultV1 {\n\treadonly previousGeneration: number;\n\treadonly lock: ProfileLockV1;\n}\n\nfunction assertNonEmptyString(value: unknown, label: string): asserts value is string {\n\tif (typeof value !== \"string\" || value.trim().length === 0) throw new Error(`${label} must be a non-empty string`);\n}\n\n/** Creates an immutable Profile lock over a resolved identity (2.0b). */\nexport function createProfileLock(\n\tidentity: ProfileIdentityV1,\n\toptions: { readonly lockedBy?: string; readonly now?: () => number } = {},\n): ProfileLockV1 {\n\tassertNonEmptyString(identity.profileId, \"Profile lock.profileId\");\n\treturn Object.freeze({\n\t\tidentity,\n\t\tlockedAt: options.now?.() ?? 0,\n\t\tlockedBy: options.lockedBy ?? \"host\",\n\t\tgeneration: 1,\n\t});\n}\n\n/**\n * Verifies a current resolved identity against the lock during reopen/reload.\n * The lock itself is never mutated; drift and migration are explicit results.\n */\nexport function verifyProfileLock(lock: ProfileLockV1, current: ProfileIdentityV1): ProfileLockVerificationV1 {\n\tif (current.profileVersion !== lock.identity.profileVersion) {\n\t\treturn Object.freeze({\n\t\t\tstatus: \"migration_required\",\n\t\t\treason: `Profile version changed from ${lock.identity.profileVersion} to ${current.profileVersion}; explicit migration is required`,\n\t\t\tfromProfileVersion: lock.identity.profileVersion,\n\t\t\ttoProfileVersion: current.profileVersion,\n\t\t});\n\t}\n\tif (!profileIdentitiesCompatible(lock.identity, current)) {\n\t\tconst lockedIds = new Set(lock.identity.capabilityVersions.map((ref) => `${ref.id}@${ref.version}`));\n\t\tconst currentIds = new Set(current.capabilityVersions.map((ref) => `${ref.id}@${ref.version}`));\n\t\tconst missing = [...lockedIds].filter((id) => !currentIds.has(id));\n\t\tconst added = [...currentIds].filter((id) => !lockedIds.has(id));\n\t\treturn Object.freeze({\n\t\t\tstatus: \"drift\",\n\t\t\treason: \"Resolved manifest digest differs from the locked profile identity\",\n\t\t\tmissingCapabilityVersions: Object.freeze(missing),\n\t\t\taddedCapabilityVersions: Object.freeze(added),\n\t\t});\n\t}\n\treturn { status: \"locked\" };\n}\n\n/**\n * Replaces a lock with explicit authorization. This is the ONLY way to change\n * a lock — silent replacement does not exist.\n */\nexport function replaceProfileLock(\n\tlock: ProfileLockV1,\n\tidentity: ProfileIdentityV1,\n\tauthorization: { readonly authorizedBy: string },\n\toptions: { readonly now?: () => number } = {},\n): ProfileLockReplaceResultV1 {\n\tassertNonEmptyString(authorization.authorizedBy, \"authorizedBy\");\n\treturn {\n\t\tpreviousGeneration: lock.generation,\n\t\tlock: Object.freeze({\n\t\t\tidentity,\n\t\t\tlockedAt: options.now?.() ?? 0,\n\t\t\tlockedBy: authorization.authorizedBy,\n\t\t\tgeneration: lock.generation + 1,\n\t\t}),\n\t};\n}\n"]}

package/dist/profile/lock.js

@@ -0,0 +1,59 @@
+import { profileIdentitiesCompatible } from "./identity.js";
+function assertNonEmptyString(value, label) {
+    if (typeof value !== "string" || value.trim().length === 0)
+        throw new Error(`${label} must be a non-empty string`);
+}
+/** Creates an immutable Profile lock over a resolved identity (2.0b). */
+export function createProfileLock(identity, options = {}) {
+    assertNonEmptyString(identity.profileId, "Profile lock.profileId");
+    return Object.freeze({
+        identity,
+        lockedAt: options.now?.() ?? 0,
+        lockedBy: options.lockedBy ?? "host",
+        generation: 1,
+    });
+}
+/**
+ * Verifies a current resolved identity against the lock during reopen/reload.
+ * The lock itself is never mutated; drift and migration are explicit results.
+ */
+export function verifyProfileLock(lock, current) {
+    if (current.profileVersion !== lock.identity.profileVersion) {
+        return Object.freeze({
+            status: "migration_required",
+            reason: `Profile version changed from ${lock.identity.profileVersion} to ${current.profileVersion}; explicit migration is required`,
+            fromProfileVersion: lock.identity.profileVersion,
+            toProfileVersion: current.profileVersion,
+        });
+    }
+    if (!profileIdentitiesCompatible(lock.identity, current)) {
+        const lockedIds = new Set(lock.identity.capabilityVersions.map((ref) => `${ref.id}@${ref.version}`));
+        const currentIds = new Set(current.capabilityVersions.map((ref) => `${ref.id}@${ref.version}`));
+        const missing = [...lockedIds].filter((id) => !currentIds.has(id));
+        const added = [...currentIds].filter((id) => !lockedIds.has(id));
+        return Object.freeze({
+            status: "drift",
+            reason: "Resolved manifest digest differs from the locked profile identity",
+            missingCapabilityVersions: Object.freeze(missing),
+            addedCapabilityVersions: Object.freeze(added),
+        });
+    }
+    return { status: "locked" };
+}
+/**
+ * Replaces a lock with explicit authorization. This is the ONLY way to change
+ * a lock — silent replacement does not exist.
+ */
+export function replaceProfileLock(lock, identity, authorization, options = {}) {
+    assertNonEmptyString(authorization.authorizedBy, "authorizedBy");
+    return {
+        previousGeneration: lock.generation,
+        lock: Object.freeze({
+            identity,
+            lockedAt: options.now?.() ?? 0,
+            lockedBy: authorization.authorizedBy,
+            generation: lock.generation + 1,
+        }),
+    };
+}
+//# sourceMappingURL=lock.js.map

package/dist/profile/lock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lock.js","sourceRoot":"","sources":["../../src/profile/lock.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,2BAA2B,EAAE,MAAM,eAAe,CAAC;AA+B5D,SAAS,oBAAoB,CAAC,KAAc,EAAE,KAAa,EAA2B;IACrF,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,6BAA6B,CAAC,CAAC;AAAA,CACnH;AAED,yEAAyE;AACzE,MAAM,UAAU,iBAAiB,CAChC,QAA2B,EAC3B,OAAO,GAAgE,EAAE,EACzD;IAChB,oBAAoB,CAAC,QAAQ,CAAC,SAAS,EAAE,wBAAwB,CAAC,CAAC;IACnE,OAAO,MAAM,CAAC,MAAM,CAAC;QACpB,QAAQ;QACR,QAAQ,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC;QAC9B,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,MAAM;QACpC,UAAU,EAAE,CAAC;KACb,CAAC,CAAC;AAAA,CACH;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAmB,EAAE,OAA0B,EAA6B;IAC7G,IAAI,OAAO,CAAC,cAAc,KAAK,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,CAAC;QAC7D,OAAO,MAAM,CAAC,MAAM,CAAC;YACpB,MAAM,EAAE,oBAAoB;YAC5B,MAAM,EAAE,gCAAgC,IAAI,CAAC,QAAQ,CAAC,cAAc,OAAO,OAAO,CAAC,cAAc,kCAAkC;YACnI,kBAAkB,EAAE,IAAI,CAAC,QAAQ,CAAC,cAAc;YAChD,gBAAgB,EAAE,OAAO,CAAC,cAAc;SACxC,CAAC,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,2BAA2B,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,CAAC;QAC1D,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACrG,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QAChG,MAAM,OAAO,GAAG,CAAC,GAAG,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QACnE,MAAM,KAAK,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QACjE,OAAO,MAAM,CAAC,MAAM,CAAC;YACpB,MAAM,EAAE,OAAO;YACf,MAAM,EAAE,mEAAmE;YAC3E,yBAAyB,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;YACjD,uBAAuB,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;SAC7C,CAAC,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AAAA,CAC5B;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CACjC,IAAmB,EACnB,QAA2B,EAC3B,aAAgD,EAChD,OAAO,GAAoC,EAAE,EAChB;IAC7B,oBAAoB,CAAC,aAAa,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;IACjE,OAAO;QACN,kBAAkB,EAAE,IAAI,CAAC,UAAU;QACnC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC;YACnB,QAAQ;YACR,QAAQ,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC;YAC9B,QAAQ,EAAE,aAAa,CAAC,YAAY;YACpC,UAAU,EAAE,IAAI,CAAC,UAAU,GAAG,CAAC;SAC/B,CAAC;KACF,CAAC;AAAA,CACF","sourcesContent":["/**\n * Profile lock — pre-creation lock and reopen/reload drift detection (2.0b).\n *\n * A Profile lock freezes the resolved `ProfileIdentityV1` at session creation.\n * Reopen/reload verifies the current resolved identity against the lock:\n * - same manifest digest + profile version → `locked`;\n * - same version but a different resolved set → `drift` with the differing\n *   capability/plugin facts;\n * - different profile version → `migration_required` (explicit, never an\n *   automatic replacement).\n * Replacing a lock requires explicit authorization and is observable — the\n * locked list can never be silently swapped.\n */\nimport type { ProfileIdentityV1 } from \"./identity.ts\";\nimport { profileIdentitiesCompatible } from \"./identity.ts\";\n\nexport interface ProfileLockV1 {\n\treadonly identity: ProfileIdentityV1;\n\treadonly lockedAt: number;\n\treadonly lockedBy: string;\n\t/** Generation increments on each authorized replacement. */\n\treadonly generation: number;\n\treadonly supersededBy?: never;\n}\n\nexport type ProfileLockVerificationV1 =\n\t| { readonly status: \"locked\" }\n\t| {\n\t\t\treadonly status: \"drift\";\n\t\t\treadonly reason: string;\n\t\t\treadonly missingCapabilityVersions: readonly string[];\n\t\t\treadonly addedCapabilityVersions: readonly string[];\n\t  }\n\t| {\n\t\t\treadonly status: \"migration_required\";\n\t\t\treadonly reason: string;\n\t\t\treadonly fromProfileVersion: string;\n\t\t\treadonly toProfileVersion: string;\n\t  };\n\nexport interface ProfileLockReplaceResultV1 {\n\treadonly previousGeneration: number;\n\treadonly lock: ProfileLockV1;\n}\n\nfunction assertNonEmptyString(value: unknown, label: string): asserts value is string {\n\tif (typeof value !== \"string\" || value.trim().length === 0) throw new Error(`${label} must be a non-empty string`);\n}\n\n/** Creates an immutable Profile lock over a resolved identity (2.0b). */\nexport function createProfileLock(\n\tidentity: ProfileIdentityV1,\n\toptions: { readonly lockedBy?: string; readonly now?: () => number } = {},\n): ProfileLockV1 {\n\tassertNonEmptyString(identity.profileId, \"Profile lock.profileId\");\n\treturn Object.freeze({\n\t\tidentity,\n\t\tlockedAt: options.now?.() ?? 0,\n\t\tlockedBy: options.lockedBy ?? \"host\",\n\t\tgeneration: 1,\n\t});\n}\n\n/**\n * Verifies a current resolved identity against the lock during reopen/reload.\n * The lock itself is never mutated; drift and migration are explicit results.\n */\nexport function verifyProfileLock(lock: ProfileLockV1, current: ProfileIdentityV1): ProfileLockVerificationV1 {\n\tif (current.profileVersion !== lock.identity.profileVersion) {\n\t\treturn Object.freeze({\n\t\t\tstatus: \"migration_required\",\n\t\t\treason: `Profile version changed from ${lock.identity.profileVersion} to ${current.profileVersion}; explicit migration is required`,\n\t\t\tfromProfileVersion: lock.identity.profileVersion,\n\t\t\ttoProfileVersion: current.profileVersion,\n\t\t});\n\t}\n\tif (!profileIdentitiesCompatible(lock.identity, current)) {\n\t\tconst lockedIds = new Set(lock.identity.capabilityVersions.map((ref) => `${ref.id}@${ref.version}`));\n\t\tconst currentIds = new Set(current.capabilityVersions.map((ref) => `${ref.id}@${ref.version}`));\n\t\tconst missing = [...lockedIds].filter((id) => !currentIds.has(id));\n\t\tconst added = [...currentIds].filter((id) => !lockedIds.has(id));\n\t\treturn Object.freeze({\n\t\t\tstatus: \"drift\",\n\t\t\treason: \"Resolved manifest digest differs from the locked profile identity\",\n\t\t\tmissingCapabilityVersions: Object.freeze(missing),\n\t\t\taddedCapabilityVersions: Object.freeze(added),\n\t\t});\n\t}\n\treturn { status: \"locked\" };\n}\n\n/**\n * Replaces a lock with explicit authorization. This is the ONLY way to change\n * a lock — silent replacement does not exist.\n */\nexport function replaceProfileLock(\n\tlock: ProfileLockV1,\n\tidentity: ProfileIdentityV1,\n\tauthorization: { readonly authorizedBy: string },\n\toptions: { readonly now?: () => number } = {},\n): ProfileLockReplaceResultV1 {\n\tassertNonEmptyString(authorization.authorizedBy, \"authorizedBy\");\n\treturn {\n\t\tpreviousGeneration: lock.generation,\n\t\tlock: Object.freeze({\n\t\t\tidentity,\n\t\t\tlockedAt: options.now?.() ?? 0,\n\t\t\tlockedBy: authorization.authorizedBy,\n\t\t\tgeneration: lock.generation + 1,\n\t\t}),\n\t};\n}\n"]}

package/dist/profile/plan-plugin.d.ts

@@ -0,0 +1,44 @@
+import type { TransitionEvidenceRefV1, TransitionStoreV1 } from "./state-store.ts";
+export type PlanStatusV1 = "draft" | "active" | "completed" | "discarded";
+export interface PlanStepV1 {
+    readonly stepId: string;
+    readonly title: string;
+}
+export interface PlanV1 {
+    readonly planId: string;
+    readonly owner: string;
+    readonly title: string;
+    readonly branch: string;
+    readonly steps: readonly PlanStepV1[];
+    readonly status: PlanStatusV1;
+    /** The latest revision explicitly linked while active (undefined before the first link). */
+    readonly revision?: number;
+    readonly evidence: readonly TransitionEvidenceRefV1[];
+    readonly revisionNo: number;
+}
+export interface PlanPluginV1 {
+    createPlan(input: {
+        readonly planId: string;
+        readonly owner: string;
+        readonly title: string;
+        readonly branch: string;
+        readonly steps: readonly PlanStepV1[];
+    }): PlanV1;
+    activate(planId: string, owner: string, options?: {
+        readonly operationId?: string;
+    }): PlanV1;
+    /** Records plan progress against a concrete revision of the bound branch. */
+    linkRevision(planId: string, owner: string, revision: number, options?: {
+        readonly operationId?: string;
+    }): PlanV1;
+    complete(planId: string, owner: string, evidence: readonly TransitionEvidenceRefV1[], options?: {
+        readonly atRevision?: number;
+        readonly operationId?: string;
+    }): PlanV1;
+    discard(planId: string, owner: string): PlanV1;
+    get(planId: string, owner: string): PlanV1 | undefined;
+}
+export declare function createPlanPlugin(options: {
+    readonly transitions: TransitionStoreV1;
+}): PlanPluginV1;
+//# sourceMappingURL=plan-plugin.d.ts.map

package/dist/profile/plan-plugin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plan-plugin.d.ts","sourceRoot":"","sources":["../../src/profile/plan-plugin.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,uBAAuB,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAEnF,MAAM,MAAM,YAAY,GAAG,OAAO,GAAG,QAAQ,GAAG,WAAW,GAAG,WAAW,CAAC;AAE1E,MAAM,WAAW,UAAU;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,MAAM;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,SAAS,UAAU,EAAE,CAAC;IACtC,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B,4FAA4F;IAC5F,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,SAAS,uBAAuB,EAAE,CAAC;IACtD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,YAAY;IAC5B,UAAU,CAAC,KAAK,EAAE;QACjB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,KAAK,EAAE,SAAS,UAAU,EAAE,CAAC;KACtC,GAAG,MAAM,CAAC;IACX,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,MAAM,CAAC;IAC7F,6EAA6E;IAC7E,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,MAAM,CAAC;IACnH,QAAQ,CACP,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,SAAS,uBAAuB,EAAE,EAC5C,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,GACvE,MAAM,CAAC;IACV,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAAC;IAC/C,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;CACvD;AAiBD,wBAAgB,gBAAgB,CAAC,OAAO,EAAE;IAAE,QAAQ,CAAC,WAAW,EAAE,iBAAiB,CAAA;CAAE,GAAG,YAAY,CAsJnG","sourcesContent":["/**\n * Plan plugin (2.3c) — Plan semantics bound to a branch/revision over the\n * 2.3a transition store.\n *\n * Status graph: null → draft → active → completed, and draft/active →\n * discarded. A plan is created with its step list and bound to a code branch;\n * while active, `linkRevision` records plan progress against concrete\n * revisions, and `complete` requires evidence plus the final revision. The\n * plugin holds NO shadow state: status, revision, steps, branch, and the\n * latest linked revision are all derived from the transition history, so\n * recovery is exactly a store replay.\n */\nimport type { JsonValue } from \"@agent-forge/ai\";\nimport type { TransitionEvidenceRefV1, TransitionStoreV1 } from \"./state-store.ts\";\n\nexport type PlanStatusV1 = \"draft\" | \"active\" | \"completed\" | \"discarded\";\n\nexport interface PlanStepV1 {\n\treadonly stepId: string;\n\treadonly title: string;\n}\n\nexport interface PlanV1 {\n\treadonly planId: string;\n\treadonly owner: string;\n\treadonly title: string;\n\treadonly branch: string;\n\treadonly steps: readonly PlanStepV1[];\n\treadonly status: PlanStatusV1;\n\t/** The latest revision explicitly linked while active (undefined before the first link). */\n\treadonly revision?: number;\n\treadonly evidence: readonly TransitionEvidenceRefV1[];\n\treadonly revisionNo: number;\n}\n\nexport interface PlanPluginV1 {\n\tcreatePlan(input: {\n\t\treadonly planId: string;\n\t\treadonly owner: string;\n\t\treadonly title: string;\n\t\treadonly branch: string;\n\t\treadonly steps: readonly PlanStepV1[];\n\t}): PlanV1;\n\tactivate(planId: string, owner: string, options?: { readonly operationId?: string }): PlanV1;\n\t/** Records plan progress against a concrete revision of the bound branch. */\n\tlinkRevision(planId: string, owner: string, revision: number, options?: { readonly operationId?: string }): PlanV1;\n\tcomplete(\n\t\tplanId: string,\n\t\towner: string,\n\t\tevidence: readonly TransitionEvidenceRefV1[],\n\t\toptions?: { readonly atRevision?: number; readonly operationId?: string },\n\t): PlanV1;\n\tdiscard(planId: string, owner: string): PlanV1;\n\tget(planId: string, owner: string): PlanV1 | undefined;\n}\n\ninterface PlanPayloadV1 {\n\treadonly title: string;\n\treadonly branch: string;\n\treadonly steps: readonly PlanStepV1[];\n\treadonly linkedRevision?: number;\n}\n\nfunction planPayloadOf(record: { readonly payload?: unknown }): Partial<PlanPayloadV1> | undefined {\n\tconst payload = record.payload;\n\tif (payload !== null && typeof payload === \"object\" && !Array.isArray(payload)) {\n\t\treturn payload as Partial<PlanPayloadV1>;\n\t}\n\treturn undefined;\n}\n\nexport function createPlanPlugin(options: { readonly transitions: TransitionStoreV1 }): PlanPluginV1 {\n\tconst transitions = options.transitions;\n\n\tconst planHistory = (planId: string, owner: string) =>\n\t\ttransitions.history(planId).filter((record) => record.domain === \"plan\" && record.owner === owner);\n\n\tconst current = (planId: string, owner: string): { status: PlanStatusV1; revisionNo: number } | undefined => {\n\t\tconst state = transitions.currentStatus(\"plan\", planId);\n\t\tif (state === undefined || planHistory(planId, owner).length === 0) return undefined;\n\t\treturn { status: state.status as PlanStatusV1, revisionNo: state.revision };\n\t};\n\n\tconst planGet = (planId: string, owner: string): PlanV1 | undefined => {\n\t\tconst state = current(planId, owner);\n\t\tif (!state) return undefined;\n\t\tconst history = planHistory(planId, owner);\n\t\t// v8 ignore next -- 因果校验保证每条 plan 历史都以 fromStatus=null 的创建记录开始\n\t\tconst createPayload = planPayloadOf(history.find((record) => record.fromStatus === null) ?? {});\n\t\tconst lastLinked = [...history]\n\t\t\t.reverse()\n\t\t\t.map((record) => planPayloadOf(record)?.linkedRevision)\n\t\t\t.find((revision): revision is number => typeof revision === \"number\");\n\t\tconst lastEvidence = [...history].reverse().find((record) => record.evidence.length > 0)?.evidence ?? [];\n\t\treturn {\n\t\t\tplanId,\n\t\t\towner,\n\t\t\ttitle: createPayload?.title ?? planId,\n\t\t\tbranch: createPayload?.branch ?? \"\",\n\t\t\tsteps: createPayload?.steps ?? [],\n\t\t\tstatus: state.status,\n\t\t\t...(lastLinked === undefined ? {} : { revision: lastLinked }),\n\t\t\tevidence: lastEvidence,\n\t\t\trevisionNo: state.revisionNo,\n\t\t};\n\t};\n\n\t/** A retried transition with an already-applied operationId returns the existing state instead of conflicting. */\n\tconst replayedPlan = (\n\t\tplanId: string,\n\t\towner: string,\n\t\ttoStatus: PlanStatusV1,\n\t\toperationId?: string,\n\t): PlanV1 | undefined => {\n\t\tif (!operationId) return undefined;\n\t\tconst applied = planHistory(planId, owner).some(\n\t\t\t(record) => record.toStatus === toStatus && record.operationId === operationId,\n\t\t);\n\t\treturn applied ? planGet(planId, owner) : undefined;\n\t};\n\n\tconst transitionPlan = (\n\t\tplanId: string,\n\t\towner: string,\n\t\tfromStatus: PlanStatusV1 | null,\n\t\ttoStatus: PlanStatusV1,\n\t\tplanOptions: {\n\t\t\treadonly evidence?: readonly TransitionEvidenceRefV1[];\n\t\t\treadonly payload?: PlanPayloadV1;\n\t\t\treadonly operationId?: string;\n\t\t},\n\t): PlanV1 => {\n\t\ttransitions.transition({\n\t\t\tdomain: \"plan\",\n\t\t\tentityId: planId,\n\t\t\towner,\n\t\t\tfromStatus,\n\t\t\ttoStatus,\n\t\t\toperationId: planOptions.operationId ?? `${toStatus}:${planId}`,\n\t\t\tevidence: planOptions.evidence,\n\t\t\tpayload: planOptions.payload as JsonValue | undefined,\n\t\t});\n\t\treturn planGet(planId, owner)!;\n\t};\n\n\treturn {\n\t\tcreatePlan({ planId, owner, title, branch, steps }) {\n\t\t\tif (title.trim().length === 0) throw new Error(\"Plan title must be a non-empty string\");\n\t\t\tif (branch.trim().length === 0) throw new Error(\"Plan branch must be a non-empty string\");\n\t\t\tif (steps.length === 0) throw new Error(\"Plan requires at least one step\");\n\t\t\tconst stepIds = new Set<string>();\n\t\t\tfor (const step of steps) {\n\t\t\t\tif (typeof step.stepId !== \"string\" || step.stepId.trim().length === 0) {\n\t\t\t\t\tthrow new Error(\"Plan stepId must be a non-empty string\");\n\t\t\t\t}\n\t\t\t\tif (typeof step.title !== \"string\" || step.title.trim().length === 0) {\n\t\t\t\t\tthrow new Error(\"Plan step title must be a non-empty string\");\n\t\t\t\t}\n\t\t\t\tif (stepIds.has(step.stepId)) throw new Error(`Duplicate plan stepId: ${step.stepId}`);\n\t\t\t\tstepIds.add(step.stepId);\n\t\t\t}\n\t\t\treturn transitionPlan(planId, owner, null, \"draft\", {\n\t\t\t\tpayload: { title, branch, steps: [...steps] },\n\t\t\t\toperationId: `create:${planId}`,\n\t\t\t});\n\t\t},\n\t\tactivate(planId, owner, activateOptions) {\n\t\t\tconst replayed = replayedPlan(planId, owner, \"active\", activateOptions?.operationId);\n\t\t\tif (replayed) return replayed;\n\t\t\tconst plan = planGet(planId, owner);\n\t\t\tif (plan?.status !== \"draft\") {\n\t\t\t\tthrow new Error(\n\t\t\t\t\t`Plan ${planId} must be in draft status to activate (current: ${plan?.status ?? \"missing\"})`,\n\t\t\t\t);\n\t\t\t}\n\t\t\treturn transitionPlan(planId, owner, \"draft\", \"active\", { operationId: activateOptions?.operationId });\n\t\t},\n\t\tlinkRevision(planId, owner, revision, linkOptions) {\n\t\t\tconst replayed = replayedPlan(planId, owner, \"active\", linkOptions?.operationId);\n\t\t\tif (replayed) return replayed;\n\t\t\tconst plan = planGet(planId, owner);\n\t\t\tif (plan?.status !== \"active\") {\n\t\t\t\tthrow new Error(`Plan ${planId} must be active to link a revision (current: ${plan?.status ?? \"missing\"})`);\n\t\t\t}\n\t\t\tif (!Number.isSafeInteger(revision) || revision < 1) {\n\t\t\t\tthrow new Error(`Plan revision must be a positive safe integer, got ${revision}`);\n\t\t\t}\n\t\t\treturn transitionPlan(planId, owner, \"active\", \"active\", {\n\t\t\t\tpayload: { title: plan.title, branch: plan.branch, steps: plan.steps, linkedRevision: revision },\n\t\t\t\toperationId: linkOptions?.operationId ?? `link:${planId}:${revision}`,\n\t\t\t});\n\t\t},\n\t\tcomplete(planId, owner, evidence, completeOptions) {\n\t\t\tconst replayed = replayedPlan(planId, owner, \"completed\", completeOptions?.operationId);\n\t\t\tif (replayed) return replayed;\n\t\t\tconst plan = planGet(planId, owner);\n\t\t\tif (plan?.status !== \"active\") {\n\t\t\t\tthrow new Error(`Plan ${planId} must be active to complete (current: ${plan?.status ?? \"missing\"})`);\n\t\t\t}\n\t\t\tif (evidence.length === 0) throw new Error(\"Completing a plan requires at least one evidence reference\");\n\t\t\tconst target = completeOptions?.atRevision ?? plan.revision;\n\t\t\tif (typeof target !== \"number\") {\n\t\t\t\tthrow new Error(`Plan ${planId} requires atRevision or a linked revision to complete`);\n\t\t\t}\n\t\t\treturn transitionPlan(planId, owner, \"active\", \"completed\", {\n\t\t\t\tevidence,\n\t\t\t\tpayload: { title: plan.title, branch: plan.branch, steps: plan.steps, linkedRevision: target },\n\t\t\t\toperationId: completeOptions?.operationId,\n\t\t\t});\n\t\t},\n\t\tdiscard(planId, owner) {\n\t\t\tconst plan = planGet(planId, owner);\n\t\t\tif (!plan || plan.status === \"completed\" || plan.status === \"discarded\") {\n\t\t\t\tthrow new Error(`Plan ${planId} cannot be discarded from status ${plan?.status ?? \"missing\"}`);\n\t\t\t}\n\t\t\treturn transitionPlan(planId, owner, plan.status, \"discarded\", {});\n\t\t},\n\t\tget(planId, owner) {\n\t\t\treturn planGet(planId, owner);\n\t\t},\n\t};\n}\n"]}

package/dist/profile/plan-plugin.js

@@ -0,0 +1,144 @@
+function planPayloadOf(record) {
+    const payload = record.payload;
+    if (payload !== null && typeof payload === "object" && !Array.isArray(payload)) {
+        return payload;
+    }
+    return undefined;
+}
+export function createPlanPlugin(options) {
+    const transitions = options.transitions;
+    const planHistory = (planId, owner) => transitions.history(planId).filter((record) => record.domain === "plan" && record.owner === owner);
+    const current = (planId, owner) => {
+        const state = transitions.currentStatus("plan", planId);
+        if (state === undefined || planHistory(planId, owner).length === 0)
+            return undefined;
+        return { status: state.status, revisionNo: state.revision };
+    };
+    const planGet = (planId, owner) => {
+        const state = current(planId, owner);
+        if (!state)
+            return undefined;
+        const history = planHistory(planId, owner);
+        // v8 ignore next -- 因果校验保证每条 plan 历史都以 fromStatus=null 的创建记录开始
+        const createPayload = planPayloadOf(history.find((record) => record.fromStatus === null) ?? {});
+        const lastLinked = [...history]
+            .reverse()
+            .map((record) => planPayloadOf(record)?.linkedRevision)
+            .find((revision) => typeof revision === "number");
+        const lastEvidence = [...history].reverse().find((record) => record.evidence.length > 0)?.evidence ?? [];
+        return {
+            planId,
+            owner,
+            title: createPayload?.title ?? planId,
+            branch: createPayload?.branch ?? "",
+            steps: createPayload?.steps ?? [],
+            status: state.status,
+            ...(lastLinked === undefined ? {} : { revision: lastLinked }),
+            evidence: lastEvidence,
+            revisionNo: state.revisionNo,
+        };
+    };
+    /** A retried transition with an already-applied operationId returns the existing state instead of conflicting. */
+    const replayedPlan = (planId, owner, toStatus, operationId) => {
+        if (!operationId)
+            return undefined;
+        const applied = planHistory(planId, owner).some((record) => record.toStatus === toStatus && record.operationId === operationId);
+        return applied ? planGet(planId, owner) : undefined;
+    };
+    const transitionPlan = (planId, owner, fromStatus, toStatus, planOptions) => {
+        transitions.transition({
+            domain: "plan",
+            entityId: planId,
+            owner,
+            fromStatus,
+            toStatus,
+            operationId: planOptions.operationId ?? `${toStatus}:${planId}`,
+            evidence: planOptions.evidence,
+            payload: planOptions.payload,
+        });
+        return planGet(planId, owner);
+    };
+    return {
+        createPlan({ planId, owner, title, branch, steps }) {
+            if (title.trim().length === 0)
+                throw new Error("Plan title must be a non-empty string");
+            if (branch.trim().length === 0)
+                throw new Error("Plan branch must be a non-empty string");
+            if (steps.length === 0)
+                throw new Error("Plan requires at least one step");
+            const stepIds = new Set();
+            for (const step of steps) {
+                if (typeof step.stepId !== "string" || step.stepId.trim().length === 0) {
+                    throw new Error("Plan stepId must be a non-empty string");
+                }
+                if (typeof step.title !== "string" || step.title.trim().length === 0) {
+                    throw new Error("Plan step title must be a non-empty string");
+                }
+                if (stepIds.has(step.stepId))
+                    throw new Error(`Duplicate plan stepId: ${step.stepId}`);
+                stepIds.add(step.stepId);
+            }
+            return transitionPlan(planId, owner, null, "draft", {
+                payload: { title, branch, steps: [...steps] },
+                operationId: `create:${planId}`,
+            });
+        },
+        activate(planId, owner, activateOptions) {
+            const replayed = replayedPlan(planId, owner, "active", activateOptions?.operationId);
+            if (replayed)
+                return replayed;
+            const plan = planGet(planId, owner);
+            if (plan?.status !== "draft") {
+                throw new Error(`Plan ${planId} must be in draft status to activate (current: ${plan?.status ?? "missing"})`);
+            }
+            return transitionPlan(planId, owner, "draft", "active", { operationId: activateOptions?.operationId });
+        },
+        linkRevision(planId, owner, revision, linkOptions) {
+            const replayed = replayedPlan(planId, owner, "active", linkOptions?.operationId);
+            if (replayed)
+                return replayed;
+            const plan = planGet(planId, owner);
+            if (plan?.status !== "active") {
+                throw new Error(`Plan ${planId} must be active to link a revision (current: ${plan?.status ?? "missing"})`);
+            }
+            if (!Number.isSafeInteger(revision) || revision < 1) {
+                throw new Error(`Plan revision must be a positive safe integer, got ${revision}`);
+            }
+            return transitionPlan(planId, owner, "active", "active", {
+                payload: { title: plan.title, branch: plan.branch, steps: plan.steps, linkedRevision: revision },
+                operationId: linkOptions?.operationId ?? `link:${planId}:${revision}`,
+            });
+        },
+        complete(planId, owner, evidence, completeOptions) {
+            const replayed = replayedPlan(planId, owner, "completed", completeOptions?.operationId);
+            if (replayed)
+                return replayed;
+            const plan = planGet(planId, owner);
+            if (plan?.status !== "active") {
+                throw new Error(`Plan ${planId} must be active to complete (current: ${plan?.status ?? "missing"})`);
+            }
+            if (evidence.length === 0)
+                throw new Error("Completing a plan requires at least one evidence reference");
+            const target = completeOptions?.atRevision ?? plan.revision;
+            if (typeof target !== "number") {
+                throw new Error(`Plan ${planId} requires atRevision or a linked revision to complete`);
+            }
+            return transitionPlan(planId, owner, "active", "completed", {
+                evidence,
+                payload: { title: plan.title, branch: plan.branch, steps: plan.steps, linkedRevision: target },
+                operationId: completeOptions?.operationId,
+            });
+        },
+        discard(planId, owner) {
+            const plan = planGet(planId, owner);
+            if (!plan || plan.status === "completed" || plan.status === "discarded") {
+                throw new Error(`Plan ${planId} cannot be discarded from status ${plan?.status ?? "missing"}`);
+            }
+            return transitionPlan(planId, owner, plan.status, "discarded", {});
+        },
+        get(planId, owner) {
+            return planGet(planId, owner);
+        },
+    };
+}
+//# sourceMappingURL=plan-plugin.js.map

package/dist/profile/plan-plugin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plan-plugin.js","sourceRoot":"","sources":["../../src/profile/plan-plugin.ts"],"names":[],"mappings":"AA+DA,SAAS,aAAa,CAAC,MAAsC,EAAsC;IAClG,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;IAC/B,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAChF,OAAO,OAAiC,CAAC;IAC1C,CAAC;IACD,OAAO,SAAS,CAAC;AAAA,CACjB;AAED,MAAM,UAAU,gBAAgB,CAAC,OAAoD,EAAgB;IACpG,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;IAExC,MAAM,WAAW,GAAG,CAAC,MAAc,EAAE,KAAa,EAAE,EAAE,CACrD,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,MAAM,IAAI,MAAM,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC;IAEpG,MAAM,OAAO,GAAG,CAAC,MAAc,EAAE,KAAa,EAA4D,EAAE,CAAC;QAC5G,MAAM,KAAK,GAAG,WAAW,CAAC,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACxD,IAAI,KAAK,KAAK,SAAS,IAAI,WAAW,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QACrF,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,MAAsB,EAAE,UAAU,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC;IAAA,CAC5E,CAAC;IAEF,MAAM,OAAO,GAAG,CAAC,MAAc,EAAE,KAAa,EAAsB,EAAE,CAAC;QACtE,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACrC,IAAI,CAAC,KAAK;YAAE,OAAO,SAAS,CAAC;QAC7B,MAAM,OAAO,GAAG,WAAW,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC3C,qGAA+D;QAC/D,MAAM,aAAa,GAAG,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAChG,MAAM,UAAU,GAAG,CAAC,GAAG,OAAO,CAAC;aAC7B,OAAO,EAAE;aACT,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,cAAc,CAAC;aACtD,IAAI,CAAC,CAAC,QAAQ,EAAsB,EAAE,CAAC,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC;QACvE,MAAM,YAAY,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,QAAQ,IAAI,EAAE,CAAC;QACzG,OAAO;YACN,MAAM;YACN,KAAK;YACL,KAAK,EAAE,aAAa,EAAE,KAAK,IAAI,MAAM;YACrC,MAAM,EAAE,aAAa,EAAE,MAAM,IAAI,EAAE;YACnC,KAAK,EAAE,aAAa,EAAE,KAAK,IAAI,EAAE;YACjC,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;YAC7D,QAAQ,EAAE,YAAY;YACtB,UAAU,EAAE,KAAK,CAAC,UAAU;SAC5B,CAAC;IAAA,CACF,CAAC;IAEF,kHAAkH;IAClH,MAAM,YAAY,GAAG,CACpB,MAAc,EACd,KAAa,EACb,QAAsB,EACtB,WAAoB,EACC,EAAE,CAAC;QACxB,IAAI,CAAC,WAAW;YAAE,OAAO,SAAS,CAAC;QACnC,MAAM,OAAO,GAAG,WAAW,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,IAAI,CAC9C,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,WAAW,KAAK,WAAW,CAC9E,CAAC;QACF,OAAO,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAAA,CACpD,CAAC;IAEF,MAAM,cAAc,GAAG,CACtB,MAAc,EACd,KAAa,EACb,UAA+B,EAC/B,QAAsB,EACtB,WAIC,EACQ,EAAE,CAAC;QACZ,WAAW,CAAC,UAAU,CAAC;YACtB,MAAM,EAAE,MAAM;YACd,QAAQ,EAAE,MAAM;YAChB,KAAK;YACL,UAAU;YACV,QAAQ;YACR,WAAW,EAAE,WAAW,CAAC,WAAW,IAAI,GAAG,QAAQ,IAAI,MAAM,EAAE;YAC/D,QAAQ,EAAE,WAAW,CAAC,QAAQ;YAC9B,OAAO,EAAE,WAAW,CAAC,OAAgC;SACrD,CAAC,CAAC;QACH,OAAO,OAAO,CAAC,MAAM,EAAE,KAAK,CAAE,CAAC;IAAA,CAC/B,CAAC;IAEF,OAAO;QACN,UAAU,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE;YACnD,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;YACxF,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;YAC1F,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;YAC3E,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;YAClC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBAC1B,IAAI,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACxE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;gBAC3D,CAAC;gBACD,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACtE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;gBAC/D,CAAC;gBACD,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;gBACvF,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC1B,CAAC;YACD,OAAO,cAAc,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE;gBACnD,OAAO,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,GAAG,KAAK,CAAC,EAAE;gBAC7C,WAAW,EAAE,UAAU,MAAM,EAAE;aAC/B,CAAC,CAAC;QAAA,CACH;QACD,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,eAAe,EAAE;YACxC,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,eAAe,EAAE,WAAW,CAAC,CAAC;YACrF,IAAI,QAAQ;gBAAE,OAAO,QAAQ,CAAC;YAC9B,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YACpC,IAAI,IAAI,EAAE,MAAM,KAAK,OAAO,EAAE,CAAC;gBAC9B,MAAM,IAAI,KAAK,CACd,QAAQ,MAAM,kDAAkD,IAAI,EAAE,MAAM,IAAI,SAAS,GAAG,CAC5F,CAAC;YACH,CAAC;YACD,OAAO,cAAc,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,WAAW,EAAE,eAAe,EAAE,WAAW,EAAE,CAAC,CAAC;QAAA,CACvG;QACD,YAAY,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE;YAClD,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC;YACjF,IAAI,QAAQ;gBAAE,OAAO,QAAQ,CAAC;YAC9B,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YACpC,IAAI,IAAI,EAAE,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAC/B,MAAM,IAAI,KAAK,CAAC,QAAQ,MAAM,gDAAgD,IAAI,EAAE,MAAM,IAAI,SAAS,GAAG,CAAC,CAAC;YAC7G,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;gBACrD,MAAM,IAAI,KAAK,CAAC,sDAAsD,QAAQ,EAAE,CAAC,CAAC;YACnF,CAAC;YACD,OAAO,cAAc,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE;gBACxD,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,cAAc,EAAE,QAAQ,EAAE;gBAChG,WAAW,EAAE,WAAW,EAAE,WAAW,IAAI,QAAQ,MAAM,IAAI,QAAQ,EAAE;aACrE,CAAC,CAAC;QAAA,CACH;QACD,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,eAAe,EAAE;YAClD,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,eAAe,EAAE,WAAW,CAAC,CAAC;YACxF,IAAI,QAAQ;gBAAE,OAAO,QAAQ,CAAC;YAC9B,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YACpC,IAAI,IAAI,EAAE,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAC/B,MAAM,IAAI,KAAK,CAAC,QAAQ,MAAM,yCAAyC,IAAI,EAAE,MAAM,IAAI,SAAS,GAAG,CAAC,CAAC;YACtG,CAAC;YACD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;YACzG,MAAM,MAAM,GAAG,eAAe,EAAE,UAAU,IAAI,IAAI,CAAC,QAAQ,CAAC;YAC5D,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAChC,MAAM,IAAI,KAAK,CAAC,QAAQ,MAAM,uDAAuD,CAAC,CAAC;YACxF,CAAC;YACD,OAAO,cAAc,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE;gBAC3D,QAAQ;gBACR,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,cAAc,EAAE,MAAM,EAAE;gBAC9F,WAAW,EAAE,eAAe,EAAE,WAAW;aACzC,CAAC,CAAC;QAAA,CACH;QACD,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE;YACtB,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YACpC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,WAAW,IAAI,IAAI,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;gBACzE,MAAM,IAAI,KAAK,CAAC,QAAQ,MAAM,oCAAoC,IAAI,EAAE,MAAM,IAAI,SAAS,EAAE,CAAC,CAAC;YAChG,CAAC;YACD,OAAO,cAAc,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC;QAAA,CACnE;QACD,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE;YAClB,OAAO,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAAA,CAC9B;KACD,CAAC;AAAA,CACF","sourcesContent":["/**\n * Plan plugin (2.3c) — Plan semantics bound to a branch/revision over the\n * 2.3a transition store.\n *\n * Status graph: null → draft → active → completed, and draft/active →\n * discarded. A plan is created with its step list and bound to a code branch;\n * while active, `linkRevision` records plan progress against concrete\n * revisions, and `complete` requires evidence plus the final revision. The\n * plugin holds NO shadow state: status, revision, steps, branch, and the\n * latest linked revision are all derived from the transition history, so\n * recovery is exactly a store replay.\n */\nimport type { JsonValue } from \"@agent-forge/ai\";\nimport type { TransitionEvidenceRefV1, TransitionStoreV1 } from \"./state-store.ts\";\n\nexport type PlanStatusV1 = \"draft\" | \"active\" | \"completed\" | \"discarded\";\n\nexport interface PlanStepV1 {\n\treadonly stepId: string;\n\treadonly title: string;\n}\n\nexport interface PlanV1 {\n\treadonly planId: string;\n\treadonly owner: string;\n\treadonly title: string;\n\treadonly branch: string;\n\treadonly steps: readonly PlanStepV1[];\n\treadonly status: PlanStatusV1;\n\t/** The latest revision explicitly linked while active (undefined before the first link). */\n\treadonly revision?: number;\n\treadonly evidence: readonly TransitionEvidenceRefV1[];\n\treadonly revisionNo: number;\n}\n\nexport interface PlanPluginV1 {\n\tcreatePlan(input: {\n\t\treadonly planId: string;\n\t\treadonly owner: string;\n\t\treadonly title: string;\n\t\treadonly branch: string;\n\t\treadonly steps: readonly PlanStepV1[];\n\t}): PlanV1;\n\tactivate(planId: string, owner: string, options?: { readonly operationId?: string }): PlanV1;\n\t/** Records plan progress against a concrete revision of the bound branch. */\n\tlinkRevision(planId: string, owner: string, revision: number, options?: { readonly operationId?: string }): PlanV1;\n\tcomplete(\n\t\tplanId: string,\n\t\towner: string,\n\t\tevidence: readonly TransitionEvidenceRefV1[],\n\t\toptions?: { readonly atRevision?: number; readonly operationId?: string },\n\t): PlanV1;\n\tdiscard(planId: string, owner: string): PlanV1;\n\tget(planId: string, owner: string): PlanV1 | undefined;\n}\n\ninterface PlanPayloadV1 {\n\treadonly title: string;\n\treadonly branch: string;\n\treadonly steps: readonly PlanStepV1[];\n\treadonly linkedRevision?: number;\n}\n\nfunction planPayloadOf(record: { readonly payload?: unknown }): Partial<PlanPayloadV1> | undefined {\n\tconst payload = record.payload;\n\tif (payload !== null && typeof payload === \"object\" && !Array.isArray(payload)) {\n\t\treturn payload as Partial<PlanPayloadV1>;\n\t}\n\treturn undefined;\n}\n\nexport function createPlanPlugin(options: { readonly transitions: TransitionStoreV1 }): PlanPluginV1 {\n\tconst transitions = options.transitions;\n\n\tconst planHistory = (planId: string, owner: string) =>\n\t\ttransitions.history(planId).filter((record) => record.domain === \"plan\" && record.owner === owner);\n\n\tconst current = (planId: string, owner: string): { status: PlanStatusV1; revisionNo: number } | undefined => {\n\t\tconst state = transitions.currentStatus(\"plan\", planId);\n\t\tif (state === undefined || planHistory(planId, owner).length === 0) return undefined;\n\t\treturn { status: state.status as PlanStatusV1, revisionNo: state.revision };\n\t};\n\n\tconst planGet = (planId: string, owner: string): PlanV1 | undefined => {\n\t\tconst state = current(planId, owner);\n\t\tif (!state) return undefined;\n\t\tconst history = planHistory(planId, owner);\n\t\t// v8 ignore next -- 因果校验保证每条 plan 历史都以 fromStatus=null 的创建记录开始\n\t\tconst createPayload = planPayloadOf(history.find((record) => record.fromStatus === null) ?? {});\n\t\tconst lastLinked = [...history]\n\t\t\t.reverse()\n\t\t\t.map((record) => planPayloadOf(record)?.linkedRevision)\n\t\t\t.find((revision): revision is number => typeof revision === \"number\");\n\t\tconst lastEvidence = [...history].reverse().find((record) => record.evidence.length > 0)?.evidence ?? [];\n\t\treturn {\n\t\t\tplanId,\n\t\t\towner,\n\t\t\ttitle: createPayload?.title ?? planId,\n\t\t\tbranch: createPayload?.branch ?? \"\",\n\t\t\tsteps: createPayload?.steps ?? [],\n\t\t\tstatus: state.status,\n\t\t\t...(lastLinked === undefined ? {} : { revision: lastLinked }),\n\t\t\tevidence: lastEvidence,\n\t\t\trevisionNo: state.revisionNo,\n\t\t};\n\t};\n\n\t/** A retried transition with an already-applied operationId returns the existing state instead of conflicting. */\n\tconst replayedPlan = (\n\t\tplanId: string,\n\t\towner: string,\n\t\ttoStatus: PlanStatusV1,\n\t\toperationId?: string,\n\t): PlanV1 | undefined => {\n\t\tif (!operationId) return undefined;\n\t\tconst applied = planHistory(planId, owner).some(\n\t\t\t(record) => record.toStatus === toStatus && record.operationId === operationId,\n\t\t);\n\t\treturn applied ? planGet(planId, owner) : undefined;\n\t};\n\n\tconst transitionPlan = (\n\t\tplanId: string,\n\t\towner: string,\n\t\tfromStatus: PlanStatusV1 | null,\n\t\ttoStatus: PlanStatusV1,\n\t\tplanOptions: {\n\t\t\treadonly evidence?: readonly TransitionEvidenceRefV1[];\n\t\t\treadonly payload?: PlanPayloadV1;\n\t\t\treadonly operationId?: string;\n\t\t},\n\t): PlanV1 => {\n\t\ttransitions.transition({\n\t\t\tdomain: \"plan\",\n\t\t\tentityId: planId,\n\t\t\towner,\n\t\t\tfromStatus,\n\t\t\ttoStatus,\n\t\t\toperationId: planOptions.operationId ?? `${toStatus}:${planId}`,\n\t\t\tevidence: planOptions.evidence,\n\t\t\tpayload: planOptions.payload as JsonValue | undefined,\n\t\t});\n\t\treturn planGet(planId, owner)!;\n\t};\n\n\treturn {\n\t\tcreatePlan({ planId, owner, title, branch, steps }) {\n\t\t\tif (title.trim().length === 0) throw new Error(\"Plan title must be a non-empty string\");\n\t\t\tif (branch.trim().length === 0) throw new Error(\"Plan branch must be a non-empty string\");\n\t\t\tif (steps.length === 0) throw new Error(\"Plan requires at least one step\");\n\t\t\tconst stepIds = new Set<string>();\n\t\t\tfor (const step of steps) {\n\t\t\t\tif (typeof step.stepId !== \"string\" || step.stepId.trim().length === 0) {\n\t\t\t\t\tthrow new Error(\"Plan stepId must be a non-empty string\");\n\t\t\t\t}\n\t\t\t\tif (typeof step.title !== \"string\" || step.title.trim().length === 0) {\n\t\t\t\t\tthrow new Error(\"Plan step title must be a non-empty string\");\n\t\t\t\t}\n\t\t\t\tif (stepIds.has(step.stepId)) throw new Error(`Duplicate plan stepId: ${step.stepId}`);\n\t\t\t\tstepIds.add(step.stepId);\n\t\t\t}\n\t\t\treturn transitionPlan(planId, owner, null, \"draft\", {\n\t\t\t\tpayload: { title, branch, steps: [...steps] },\n\t\t\t\toperationId: `create:${planId}`,\n\t\t\t});\n\t\t},\n\t\tactivate(planId, owner, activateOptions) {\n\t\t\tconst replayed = replayedPlan(planId, owner, \"active\", activateOptions?.operationId);\n\t\t\tif (replayed) return replayed;\n\t\t\tconst plan = planGet(planId, owner);\n\t\t\tif (plan?.status !== \"draft\") {\n\t\t\t\tthrow new Error(\n\t\t\t\t\t`Plan ${planId} must be in draft status to activate (current: ${plan?.status ?? \"missing\"})`,\n\t\t\t\t);\n\t\t\t}\n\t\t\treturn transitionPlan(planId, owner, \"draft\", \"active\", { operationId: activateOptions?.operationId });\n\t\t},\n\t\tlinkRevision(planId, owner, revision, linkOptions) {\n\t\t\tconst replayed = replayedPlan(planId, owner, \"active\", linkOptions?.operationId);\n\t\t\tif (replayed) return replayed;\n\t\t\tconst plan = planGet(planId, owner);\n\t\t\tif (plan?.status !== \"active\") {\n\t\t\t\tthrow new Error(`Plan ${planId} must be active to link a revision (current: ${plan?.status ?? \"missing\"})`);\n\t\t\t}\n\t\t\tif (!Number.isSafeInteger(revision) || revision < 1) {\n\t\t\t\tthrow new Error(`Plan revision must be a positive safe integer, got ${revision}`);\n\t\t\t}\n\t\t\treturn transitionPlan(planId, owner, \"active\", \"active\", {\n\t\t\t\tpayload: { title: plan.title, branch: plan.branch, steps: plan.steps, linkedRevision: revision },\n\t\t\t\toperationId: linkOptions?.operationId ?? `link:${planId}:${revision}`,\n\t\t\t});\n\t\t},\n\t\tcomplete(planId, owner, evidence, completeOptions) {\n\t\t\tconst replayed = replayedPlan(planId, owner, \"completed\", completeOptions?.operationId);\n\t\t\tif (replayed) return replayed;\n\t\t\tconst plan = planGet(planId, owner);\n\t\t\tif (plan?.status !== \"active\") {\n\t\t\t\tthrow new Error(`Plan ${planId} must be active to complete (current: ${plan?.status ?? \"missing\"})`);\n\t\t\t}\n\t\t\tif (evidence.length === 0) throw new Error(\"Completing a plan requires at least one evidence reference\");\n\t\t\tconst target = completeOptions?.atRevision ?? plan.revision;\n\t\t\tif (typeof target !== \"number\") {\n\t\t\t\tthrow new Error(`Plan ${planId} requires atRevision or a linked revision to complete`);\n\t\t\t}\n\t\t\treturn transitionPlan(planId, owner, \"active\", \"completed\", {\n\t\t\t\tevidence,\n\t\t\t\tpayload: { title: plan.title, branch: plan.branch, steps: plan.steps, linkedRevision: target },\n\t\t\t\toperationId: completeOptions?.operationId,\n\t\t\t});\n\t\t},\n\t\tdiscard(planId, owner) {\n\t\t\tconst plan = planGet(planId, owner);\n\t\t\tif (!plan || plan.status === \"completed\" || plan.status === \"discarded\") {\n\t\t\t\tthrow new Error(`Plan ${planId} cannot be discarded from status ${plan?.status ?? \"missing\"}`);\n\t\t\t}\n\t\t\treturn transitionPlan(planId, owner, plan.status, \"discarded\", {});\n\t\t},\n\t\tget(planId, owner) {\n\t\t\treturn planGet(planId, owner);\n\t\t},\n\t};\n}\n"]}

package/dist/profile/plugin-profiles.d.ts

@@ -0,0 +1,56 @@
+import type { HostFactsV1, PluginManifestV1, ProfileResolutionV1 } from "../plugins/ecosystem/types.ts";
+import { type ProfileAssemblyResultV1, type VerifiedToolPluginV1 } from "./profile-assembly.ts";
+export type BuiltinPluginProfileIdV1 = "coding-core" | "desktop-qa" | "desktop-observe" | "desktop-control" | "lsp-diagnostics" | "process-exec" | "test-runner" | "workspace-files" | "workspace-files-write" | "formatter-linter" | "git-repository";
+export interface BuiltinPluginProfileV1 {
+    readonly id: BuiltinPluginProfileIdV1;
+    readonly version: string;
+    readonly pluginIds: readonly string[];
+}
+/**
+ * Host-owned manifest replacements for installed, verified package versions.
+ *
+ * Builtin manifests remain the default. A host may explicitly provide one
+ * replacement per builtin plugin ID when a staged/verified/active install is
+ * selected for a new Profile. The resolver never discovers files or chooses a
+ * version implicitly; the replacement is part of the resulting Profile
+ * identity and must still pass normal compatibility and verification checks.
+ */
+export type BuiltinPluginManifestOverridesV1 = Readonly<Record<string, PluginManifestV1>>;
+export type BuiltinPluginProfileResolutionV1 = {
+    readonly status: "not_found";
+    readonly profileId: string;
+} | {
+    readonly status: "host_facts_required";
+    readonly profileId: string;
+} | {
+    readonly status: "invalid_selection";
+    readonly profileId: string;
+    readonly unknownPluginIds: readonly string[];
+    readonly duplicatePluginIds: readonly string[];
+} | {
+    readonly status: "resolved";
+    readonly profile: BuiltinPluginProfileV1;
+    readonly resolution: ProfileResolutionV1;
+    readonly assembly?: ProfileAssemblyResultV1;
+};
+export declare function listBuiltinPluginProfilesV1(): readonly BuiltinPluginProfileV1[];
+/** Return the first-party manifest projection for catalog and selection UIs. */
+export declare function listBuiltinPluginManifestsV1(): readonly PluginManifestV1[];
+/**
+ * First-party plugins of an explicitly selected Profile are trusted by
+ * default: builtins ship with the product and the user chose the Profile
+ * explicitly. Installed third-party versions are still verified through the
+ * active-binding resolver; host-injected verifiedPlugins always win.
+ */
+export declare function defaultBuiltinVerifiedPluginsV1(profileId: string): readonly VerifiedToolPluginV1[];
+export declare function resolveBuiltinPluginProfileV1(input: {
+    readonly profileId: string;
+    readonly host: HostFactsV1;
+    /** Optional subset of the selected builtin Profile's plugins. */
+    readonly selectedPluginIds?: readonly string[];
+    readonly disabledPluginIds?: readonly string[];
+    readonly verifiedPlugins?: readonly VerifiedToolPluginV1[];
+    /** Explicit host-selected active manifests; never inferred from disk. */
+    readonly manifestOverrides?: BuiltinPluginManifestOverridesV1;
+}): BuiltinPluginProfileResolutionV1;
+//# sourceMappingURL=plugin-profiles.d.ts.map

package/dist/profile/plugin-profiles.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-profiles.d.ts","sourceRoot":"","sources":["../../src/profile/plugin-profiles.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EACX,WAAW,EACX,gBAAgB,EAEhB,mBAAmB,EACnB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAmB,KAAK,uBAAuB,EAAE,KAAK,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAEjH,MAAM,MAAM,wBAAwB,GACjC,aAAa,GACb,YAAY,GACZ,iBAAiB,GACjB,iBAAiB,GACjB,iBAAiB,GACjB,cAAc,GACd,aAAa,GACb,iBAAiB,GACjB,uBAAuB,GACvB,kBAAkB,GAClB,gBAAgB,CAAC;AAEpB,MAAM,WAAW,sBAAsB;IACtC,QAAQ,CAAC,EAAE,EAAE,wBAAwB,CAAC;IACtC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;CACtC;AAED;;;;;;;;GAQG;AACH,MAAM,MAAM,gCAAgC,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC;AAE1F,MAAM,MAAM,gCAAgC,GACzC;IAAE,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAC5D;IAAE,QAAQ,CAAC,MAAM,EAAE,qBAAqB,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GACtE;IACA,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAC;IACrC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7C,QAAQ,CAAC,kBAAkB,EAAE,SAAS,MAAM,EAAE,CAAC;CAC9C,GACD;IACA,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,sBAAsB,CAAC;IACzC,QAAQ,CAAC,UAAU,EAAE,mBAAmB,CAAC;IACzC,QAAQ,CAAC,QAAQ,CAAC,EAAE,uBAAuB,CAAC;CAC3C,CAAC;AAsCL,wBAAgB,2BAA2B,IAAI,SAAS,sBAAsB,EAAE,CAE/E;AAED,gFAAgF;AAChF,wBAAgB,4BAA4B,IAAI,SAAS,gBAAgB,EAAE,CAO1E;AAED;;;;;GAKG;AACH,wBAAgB,+BAA+B,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,oBAAoB,EAAE,CAOlG;AAED,wBAAgB,6BAA6B,CAAC,KAAK,EAAE;IACpD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,iEAAiE;IACjE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/C,QAAQ,CAAC,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/C,QAAQ,CAAC,eAAe,CAAC,EAAE,SAAS,oBAAoB,EAAE,CAAC;IAC3D,yEAAyE;IACzE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,gCAAgC,CAAC;CAC9D,GAAG,gCAAgC,CA2FnC","sourcesContent":["import { VERSION } from \"../config.ts\";\nimport { comparePluginVersionsV1 } from \"../plugins/ecosystem/catalog.ts\";\nimport { resolvePluginProfileV1 } from \"../plugins/ecosystem/resolver.ts\";\nimport type {\n\tHostFactsV1,\n\tPluginManifestV1,\n\tPluginResolutionV1,\n\tProfileResolutionV1,\n} from \"../plugins/ecosystem/types.ts\";\nimport { assembleProfile, type ProfileAssemblyResultV1, type VerifiedToolPluginV1 } from \"./profile-assembly.ts\";\n\nexport type BuiltinPluginProfileIdV1 =\n\t| \"coding-core\"\n\t| \"desktop-qa\"\n\t| \"desktop-observe\"\n\t| \"desktop-control\"\n\t| \"lsp-diagnostics\"\n\t| \"process-exec\"\n\t| \"test-runner\"\n\t| \"workspace-files\"\n\t| \"workspace-files-write\"\n\t| \"formatter-linter\"\n\t| \"git-repository\";\n\nexport interface BuiltinPluginProfileV1 {\n\treadonly id: BuiltinPluginProfileIdV1;\n\treadonly version: string;\n\treadonly pluginIds: readonly string[];\n}\n\n/**\n * Host-owned manifest replacements for installed, verified package versions.\n *\n * Builtin manifests remain the default. A host may explicitly provide one\n * replacement per builtin plugin ID when a staged/verified/active install is\n * selected for a new Profile. The resolver never discovers files or chooses a\n * version implicitly; the replacement is part of the resulting Profile\n * identity and must still pass normal compatibility and verification checks.\n */\nexport type BuiltinPluginManifestOverridesV1 = Readonly<Record<string, PluginManifestV1>>;\n\nexport type BuiltinPluginProfileResolutionV1 =\n\t| { readonly status: \"not_found\"; readonly profileId: string }\n\t| { readonly status: \"host_facts_required\"; readonly profileId: string }\n\t| {\n\t\t\treadonly status: \"invalid_selection\";\n\t\t\treadonly profileId: string;\n\t\t\treadonly unknownPluginIds: readonly string[];\n\t\t\treadonly duplicatePluginIds: readonly string[];\n\t  }\n\t| {\n\t\t\treadonly status: \"resolved\";\n\t\t\treadonly profile: BuiltinPluginProfileV1;\n\t\t\treadonly resolution: ProfileResolutionV1;\n\t\t\treadonly assembly?: ProfileAssemblyResultV1;\n\t  };\n\n// D-075 S3: every first-party category-A plugin now ships as an independent\n// package under `plugins/` with the `agent-forge.plugin.<name>` id domain\n// (design §4.1). No embedded manifests remain; profiles resolve through the\n// install store (host-provided `manifestOverrides` from active bindings).\nconst manifests: Readonly<Record<string, PluginManifestV1>> = Object.freeze({});\n\nconst profiles: readonly BuiltinPluginProfileV1[] = Object.freeze([\n\t{ id: \"coding-core\", version: \"1\", pluginIds: [] },\n\t{\n\t\tid: \"desktop-qa\",\n\t\tversion: \"1\",\n\t\tpluginIds: [\"agent-forge.plugin.desktop-windows-observe\", \"agent-forge.plugin.desktop-windows-input\"],\n\t},\n\t{ id: \"desktop-observe\", version: \"1\", pluginIds: [\"agent-forge.plugin.desktop-windows-observe\"] },\n\t{\n\t\tid: \"desktop-control\",\n\t\tversion: \"1\",\n\t\tpluginIds: [\"agent-forge.plugin.desktop-windows-observe\", \"agent-forge.plugin.desktop-windows-input\"],\n\t},\n\t{ id: \"lsp-diagnostics\", version: \"1\", pluginIds: [\"agent-forge.plugin.lsp-diagnostics\"] },\n\t{ id: \"process-exec\", version: \"1\", pluginIds: [\"agent-forge.plugin.process-exec\"] },\n\t{ id: \"test-runner\", version: \"1\", pluginIds: [\"agent-forge.plugin.test-runner\"] },\n\t{ id: \"workspace-files\", version: \"1\", pluginIds: [\"agent-forge.plugin.workspace-files\"] },\n\t{ id: \"workspace-files-write\", version: \"1\", pluginIds: [\"agent-forge.plugin.workspace-files-write\"] },\n\t{\n\t\t// D-075 S2: the plugin code ships as the independent package\n\t\t// `agent-forge.plugin.formatter-linter` (design §4.1 id domain); this\n\t\t// Profile stays the stable user entry (`--plugin-profile formatter-linter`)\n\t\t// and resolves through the install store, not an embedded manifest.\n\t\tid: \"formatter-linter\",\n\t\tversion: \"1\",\n\t\tpluginIds: [\"agent-forge.plugin.formatter-linter\"],\n\t},\n\t{ id: \"git-repository\", version: \"1\", pluginIds: [\"agent-forge.plugin.git-repository\"] },\n]);\n\nexport function listBuiltinPluginProfilesV1(): readonly BuiltinPluginProfileV1[] {\n\treturn profiles;\n}\n\n/** Return the first-party manifest projection for catalog and selection UIs. */\nexport function listBuiltinPluginManifestsV1(): readonly PluginManifestV1[] {\n\treturn Object.freeze(\n\t\tObject.values(manifests).sort((left, right) => {\n\t\t\tconst idOrder = `${left.id}@${left.pluginVersion}`.localeCompare(`${right.id}@${right.pluginVersion}`);\n\t\t\treturn idOrder === 0 ? comparePluginVersionsV1(left.pluginVersion, right.pluginVersion) : idOrder;\n\t\t}),\n\t);\n}\n\n/**\n * First-party plugins of an explicitly selected Profile are trusted by\n * default: builtins ship with the product and the user chose the Profile\n * explicitly. Installed third-party versions are still verified through the\n * active-binding resolver; host-injected verifiedPlugins always win.\n */\nexport function defaultBuiltinVerifiedPluginsV1(profileId: string): readonly VerifiedToolPluginV1[] {\n\tconst profile = profiles.find((candidate) => candidate.id === profileId);\n\tif (profile === undefined) return [];\n\treturn profile.pluginIds.flatMap((pluginId) => {\n\t\tconst manifest = manifests[pluginId];\n\t\treturn manifest === undefined ? [] : [{ pluginId: manifest.id, version: manifest.pluginVersion }];\n\t});\n}\n\nexport function resolveBuiltinPluginProfileV1(input: {\n\treadonly profileId: string;\n\treadonly host: HostFactsV1;\n\t/** Optional subset of the selected builtin Profile's plugins. */\n\treadonly selectedPluginIds?: readonly string[];\n\treadonly disabledPluginIds?: readonly string[];\n\treadonly verifiedPlugins?: readonly VerifiedToolPluginV1[];\n\t/** Explicit host-selected active manifests; never inferred from disk. */\n\treadonly manifestOverrides?: BuiltinPluginManifestOverridesV1;\n}): BuiltinPluginProfileResolutionV1 {\n\tconst profile = profiles.find((candidate) => candidate.id === input.profileId);\n\tif (profile === undefined) return { status: \"not_found\", profileId: input.profileId };\n\tconst requestedPluginIds = input.selectedPluginIds;\n\tconst requestedDisabledPluginIds = input.disabledPluginIds;\n\tif (requestedPluginIds !== undefined || requestedDisabledPluginIds !== undefined) {\n\t\tconst availablePluginIds = new Set(profile.pluginIds);\n\t\tconst duplicatePluginIds: string[] = [];\n\t\tconst unknownPluginIds: string[] = [];\n\t\tfor (const requestedIds of [requestedPluginIds ?? [], requestedDisabledPluginIds ?? []]) {\n\t\t\tconst seen = new Set<string>();\n\t\t\tfor (const pluginId of requestedIds) {\n\t\t\t\tif (!availablePluginIds.has(pluginId) && !unknownPluginIds.includes(pluginId))\n\t\t\t\t\tunknownPluginIds.push(pluginId);\n\t\t\t\tif (seen.has(pluginId) && !duplicatePluginIds.includes(pluginId)) duplicatePluginIds.push(pluginId);\n\t\t\t\tseen.add(pluginId);\n\t\t\t}\n\t\t}\n\t\tif (unknownPluginIds.length > 0 || duplicatePluginIds.length > 0) {\n\t\t\treturn {\n\t\t\t\tstatus: \"invalid_selection\",\n\t\t\t\tprofileId: input.profileId,\n\t\t\t\tunknownPluginIds: Object.freeze([...new Set(unknownPluginIds)]),\n\t\t\t\tduplicatePluginIds: Object.freeze(duplicatePluginIds),\n\t\t\t};\n\t\t}\n\t}\n\tconst selected =\n\t\trequestedPluginIds === undefined\n\t\t\t? profile.pluginIds\n\t\t\t: profile.pluginIds.filter((pluginId) => requestedPluginIds.includes(pluginId));\n\tconst selectedProfile =\n\t\trequestedPluginIds === undefined\n\t\t\t? profile\n\t\t\t: Object.freeze({ ...profile, pluginIds: Object.freeze([...selected]) });\n\tconst disabled = new Set(input.disabledPluginIds ?? []);\n\t// D-075 S2: a Profile plugin without a builtin manifest and without a\n\t// host-installed override is a structured miss, not a startup failure. The\n\t// plugin is omitted from the resolved manifest and runtime bindings; the\n\t// remaining Profile plugins resolve normally (soft degradation).\n\tconst manifestByPluginId = new Map(\n\t\tselectedProfile.pluginIds.map((pluginId) => [pluginId, manifestFor(pluginId, input.manifestOverrides)] as const),\n\t);\n\tconst missingPluginIds = selectedProfile.pluginIds.filter(\n\t\t(pluginId) => manifestByPluginId.get(pluginId) === undefined,\n\t);\n\tconst resolution = resolvePluginProfileV1({\n\t\tprofileId: selectedProfile.id,\n\t\tprofileVersion: selectedProfile.version,\n\t\tplugins: selectedProfile.pluginIds.flatMap((pluginId) => {\n\t\t\tconst manifest = manifestByPluginId.get(pluginId);\n\t\t\treturn manifest === undefined\n\t\t\t\t? []\n\t\t\t\t: [\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\tmanifest,\n\t\t\t\t\t\t\t// A user-disabled plugin must not block the remaining profile. It is\n\t\t\t\t\t\t\t// still represented in the resolution diagnostics, but is omitted from\n\t\t\t\t\t\t\t// the active resolved manifest and runtime bindings.\n\t\t\t\t\t\t\trequired: !disabled.has(pluginId),\n\t\t\t\t\t\t\tdisabled: disabled.has(pluginId),\n\t\t\t\t\t\t},\n\t\t\t\t\t];\n\t\t}),\n\t\thost: input.host,\n\t\t// The host's own version enforces each manifest's minHostVersion floor\n\t\t// at the single builtin profile resolution funnel used by production\n\t\t// loading paths.\n\t\thostVersion: VERSION,\n\t});\n\tconst merged = mergeMissingPluginResolutionsV1(resolution, missingPluginIds, disabled);\n\tif (merged.status !== \"ready\") return { status: \"resolved\", profile: selectedProfile, resolution: merged };\n\tconst resolvedPlugins = merged.resolvedManifest.plugins.map((plugin) => ({\n\t\tpluginId: plugin.pluginId,\n\t\tpluginVersion: plugin.pluginVersion,\n\t\tcapabilityRefs: plugin.capabilityRefs,\n\t\t...(plugin.selectedAdapter === undefined ? {} : { selectedAdapter: plugin.selectedAdapter }),\n\t}));\n\tconst verifiedPlugins = input.verifiedPlugins ?? [];\n\tconst assembly = assembleProfile({\n\t\tprofileId: selectedProfile.id,\n\t\tprofileVersion: selectedProfile.version,\n\t\tresolvedPlugins,\n\t\tverifiedPlugins,\n\t});\n\treturn {\n\t\tstatus: \"resolved\",\n\t\tprofile: selectedProfile,\n\t\tresolution: merged,\n\t\tassembly,\n\t};\n}\n\nfunction manifestFor(\n\tpluginId: string,\n\toverrides: BuiltinPluginManifestOverridesV1 | undefined,\n): PluginManifestV1 | undefined {\n\tconst manifest = overrides?.[pluginId] ?? manifests[pluginId];\n\t// A mismatched override stays a hard host error: the host selected it\n\t// explicitly, so silence would hide an identity bug. A plain absent\n\t// manifest (no builtin, no installed override) is the structured miss.\n\tif (manifest !== undefined && manifest.id !== pluginId)\n\t\tthrow new Error(`builtin manifest override does not match plugin ${pluginId}`);\n\treturn manifest;\n}\n\n/**\n * Merge structured `manifest_missing` resolutions for Profile plugins that\n * have no builtin manifest and no installed override into the resolver\n * result. Missing plugins never block the Profile (soft degradation): the\n * remaining diagnostics and the resolved manifest stay exactly what the\n * resolver produced, and the merged plugin list keeps the resolver's\n * deterministic id sort.\n */\nfunction mergeMissingPluginResolutionsV1(\n\tresolution: ProfileResolutionV1,\n\tmissingPluginIds: readonly string[],\n\tdisabled: ReadonlySet<string>,\n): ProfileResolutionV1 {\n\tif (missingPluginIds.length === 0) return resolution;\n\tconst missing: PluginResolutionV1[] = missingPluginIds.map((pluginId) => ({\n\t\tpluginId,\n\t\tpluginVersion: \"\",\n\t\trequired: !disabled.has(pluginId),\n\t\tstatus: \"manifest-missing\",\n\t\tdiagnostics: [\n\t\t\t{\n\t\t\t\tcode: \"manifest_missing\",\n\t\t\t\tmessage: `Plugin ${pluginId} has no builtin manifest and no installed active override; the plugin is omitted from this profile (install it with agent-forge plugin install)`,\n\t\t\t},\n\t\t],\n\t}));\n\tconst plugins = [...resolution.plugins, ...missing].sort((left, right) =>\n\t\tleft.pluginId.localeCompare(right.pluginId),\n\t);\n\treturn Object.freeze({\n\t\t...resolution,\n\t\tplugins: Object.freeze(plugins),\n\t\tdiagnostics: Object.freeze(plugins.flatMap((plugin) => plugin.diagnostics)),\n\t});\n}\n"]}