@ai-agent-forge/agent-forge 0.85.0

package/dist/cli/plugin-manager-controller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-manager-controller.d.ts","sourceRoot":"","sources":["../../src/cli/plugin-manager-controller.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAgC,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACtG,OAAO,KAAK,EAA4B,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AACnG,OAAO,KAAK,EAEX,mBAAmB,EAEnB,kBAAkB,EAClB,MAAM,+BAA+B,CAAC;AAMvC,MAAM,MAAM,0BAA0B,GAAG,WAAW,GAAG,WAAW,GAAG,kBAAkB,GAAG,aAAa,CAAC;AAExG,MAAM,WAAW,oBAAoB;IACpC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,MAAM,EAAE,0BAA0B,CAAC;IAC5C,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,SAAS,CAAC,EAAE,mBAAmB,CAAC,OAAO,CAAC,CAAC,WAAW,CAAC,CAAC;IAC/D,QAAQ,CAAC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;CAC5C;AAED,MAAM,WAAW,uBAAuB;IACvC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IACpB,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,WAAW,EAAE,IAAI,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,OAAO,EAAE,SAAS,oBAAoB,EAAE,CAAC;IAClD,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;CAC5B;AAED,MAAM,MAAM,kCAAkC,GAC3C,WAAW,GACX,sBAAsB,GACtB,eAAe,GACf,mBAAmB,GACnB,0BAA0B,GAC1B,+BAA+B,GAC/B,6BAA6B,GAC7B,uBAAuB,CAAC;AAE3B,MAAM,MAAM,6BAA6B,GACtC;IAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,uBAAuB,CAAA;CAAE,GACrE;IAAE,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,kCAAkC,CAAA;CAAE,CAAC;AAEnF,MAAM,MAAM,6BAA6B,GAAG,WAAW,GAAG,QAAQ,GAAG,aAAa,GAAG,WAAW,GAAG,oBAAoB,CAAC;AAExH,MAAM,WAAW,6BAA6B;IAC7C,QAAQ,CAAC,MAAM,EAAE,6BAA6B,CAAC;IAC/C,QAAQ,CAAC,IAAI,CAAC,EAAE,kCAAkC,CAAC;IACnD,QAAQ,CAAC,QAAQ,CAAC,EAAE,uBAAuB,CAAC;CAC5C;AAED,MAAM,WAAW,yBAAyB;IACzC,QAAQ,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,EAAE;QAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,KAAK,OAAO,CAAC,6BAA6B,CAAC,CAAC;IAC5G,QAAQ,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,4BAA4B,KAAK,OAAO,CAAC,6BAA6B,CAAC,CAAC;IAClG,QAAQ,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,4BAA4B,KAAK,OAAO,CAAC,6BAA6B,CAAC,CAAC;IACjG,QAAQ,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,4BAA4B,KAAK,OAAO,CAAC,6BAA6B,CAAC,CAAC;CACjG;AAED,MAAM,WAAW,4BAA4B;IAC5C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;CAC9B;AAqHD;;;;GAIG;AACH,wBAAgB,+BAA+B,CAAC,OAAO,EAAE;IACxD,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;IACpC,QAAQ,CAAC,UAAU,EAAE,kBAAkB,CAAC;IACxC,QAAQ,CAAC,GAAG,EAAE,oBAAoB,CAAC;CACnC,GAAG,yBAAyB,CAkF5B","sourcesContent":["import { comparePluginVersionsV1 } from \"../plugins/ecosystem/catalog.ts\";\nimport type { PluginEcosystemCliResponseV1, PluginEcosystemCliV1 } from \"../plugins/ecosystem/cli.ts\";\nimport type { PluginRegistrySnapshotV1, PluginRegistryV1 } from \"../plugins/ecosystem/registry.ts\";\nimport type {\n\tPluginStateReadResultV1,\n\tPluginStateRecordV1,\n\tPluginStateSnapshotV1,\n\tPluginStateStoreV1,\n} from \"../plugins/ecosystem/state.ts\";\n\nconst MAX_MANAGER_ENTRIES_V1 = 128;\nconst MAX_MANAGER_DIAGNOSTICS_V1 = 8;\nconst MAX_MANAGER_ID_CHARS_V1 = 256;\n\nexport type PluginManagerEntryStatusV1 = \"available\" | \"installed\" | \"update-available\" | \"unavailable\";\n\nexport interface PluginManagerEntryV1 {\n\treadonly pluginId: string;\n\treadonly pluginVersion: string;\n\treadonly status: PluginManagerEntryStatusV1;\n\treadonly signed: boolean;\n\treadonly installedVersion?: string;\n\treadonly lifecycle?: PluginStateRecordV1[\"state\"][\"lifecycle\"];\n\treadonly diagnosticCodes: readonly string[];\n}\n\nexport interface PluginManagerSnapshotV1 {\n\treadonly version: 1;\n\treadonly registrySource: string;\n\treadonly stateStatus: \"ok\" | \"missing\";\n\treadonly entries: readonly PluginManagerEntryV1[];\n\treadonly truncated: boolean;\n}\n\nexport type PluginManagerControllerErrorCodeV1 =\n\t| \"cancelled\"\n\t| \"registry-unavailable\"\n\t| \"state-invalid\"\n\t| \"state-unavailable\"\n\t| \"manager-operation-failed\"\n\t| \"manager-operation-unsupported\"\n\t| \"manager-operation-cancelled\"\n\t| \"confirmation-required\";\n\nexport type PluginManagerSnapshotResultV1 =\n\t| { readonly status: \"ok\"; readonly snapshot: PluginManagerSnapshotV1 }\n\t| { readonly status: \"error\"; readonly code: PluginManagerControllerErrorCodeV1 };\n\nexport type PluginManagerMutationStatusV1 = \"succeeded\" | \"failed\" | \"unsupported\" | \"cancelled\" | \"needs_confirmation\";\n\nexport interface PluginManagerMutationResultV1 {\n\treadonly status: PluginManagerMutationStatusV1;\n\treadonly code?: PluginManagerControllerErrorCodeV1;\n\treadonly snapshot?: PluginManagerSnapshotV1;\n}\n\nexport interface PluginManagerControllerV1 {\n\treadonly getSnapshot: (input?: { readonly signal?: AbortSignal }) => Promise<PluginManagerSnapshotResultV1>;\n\treadonly install: (input: PluginManagerMutationInputV1) => Promise<PluginManagerMutationResultV1>;\n\treadonly update: (input: PluginManagerMutationInputV1) => Promise<PluginManagerMutationResultV1>;\n\treadonly remove: (input: PluginManagerMutationInputV1) => Promise<PluginManagerMutationResultV1>;\n}\n\nexport interface PluginManagerMutationInputV1 {\n\treadonly pluginId: string;\n\treadonly pluginVersion?: string;\n\treadonly confirmed: boolean;\n\treadonly signal?: AbortSignal;\n}\n\nfunction boundedId(value: string, label: string): string {\n\tif (\n\t\ttypeof value !== \"string\" ||\n\t\tvalue.trim() === \"\" ||\n\t\tvalue.length > MAX_MANAGER_ID_CHARS_V1 ||\n\t\t/[\\u0000-\\u001f\\s]/u.test(value)\n\t)\n\t\tthrow new Error(`${label} is invalid`);\n\treturn value;\n}\n\nfunction signalAborted(signal: AbortSignal | undefined): boolean {\n\treturn signal?.aborted === true;\n}\n\nfunction rejectionCodes(\n\tregistry: PluginRegistrySnapshotV1,\n\tpluginId: string,\n\tpluginVersion: string,\n): readonly string[] {\n\treturn Object.freeze(\n\t\tregistry.rejected\n\t\t\t.filter((entry) => entry.pluginId === pluginId && entry.pluginVersion === pluginVersion)\n\t\t\t.slice(0, MAX_MANAGER_DIAGNOSTICS_V1)\n\t\t\t.map((entry) => entry.code),\n\t);\n}\n\nfunction activeRecord(state: PluginStateSnapshotV1, pluginId: string): PluginStateRecordV1 | undefined {\n\treturn state.records\n\t\t.filter((record) => record.pluginId === pluginId && record.state.lifecycle === \"active\")\n\t\t.sort((left, right) => comparePluginVersionsV1(right.pluginVersion, left.pluginVersion))[0];\n}\n\nfunction makeSnapshot(\n\tregistry: PluginRegistrySnapshotV1,\n\tstateStatus: \"ok\" | \"missing\",\n\tstate: PluginStateSnapshotV1,\n): PluginManagerSnapshotV1 {\n\tconst identities = new Map<\n\t\tstring,\n\t\t{ readonly pluginId: string; readonly pluginVersion: string; readonly signed: boolean }\n\t>();\n\tfor (const entry of registry.entries) {\n\t\tidentities.set(`${entry.pluginId}@${entry.pluginVersion}`, entry);\n\t}\n\t// Source/digest/platform-rejected manifests are intentionally visible as\n\t// unavailable so the host UI can explain why an installed catalog item\n\t// cannot be enabled. Their source, reason and package bytes stay host-only.\n\tfor (const rejection of registry.rejected) {\n\t\tconst identity = `${rejection.pluginId}@${rejection.pluginVersion}`;\n\t\tif (!identities.has(identity)) {\n\t\t\tidentities.set(identity, {\n\t\t\t\tpluginId: rejection.pluginId,\n\t\t\t\tpluginVersion: rejection.pluginVersion,\n\t\t\t\tsigned: false,\n\t\t\t});\n\t\t}\n\t}\n\tconst entries = [...identities.values()]\n\t\t.map((entry) => {\n\t\t\tconst installed = activeRecord(state, entry.pluginId);\n\t\t\tconst diagnostics = rejectionCodes(registry, entry.pluginId, entry.pluginVersion);\n\t\t\tconst unavailable =\n\t\t\t\tdiagnostics.length > 0 ||\n\t\t\t\t!registry.verified.some(\n\t\t\t\t\t(candidate) => candidate.pluginId === entry.pluginId && candidate.pluginVersion === entry.pluginVersion,\n\t\t\t\t);\n\t\t\tconst isInstalled = installed?.pluginVersion === entry.pluginVersion;\n\t\t\treturn Object.freeze({\n\t\t\t\tpluginId: entry.pluginId,\n\t\t\t\tpluginVersion: entry.pluginVersion,\n\t\t\t\tstatus: unavailable\n\t\t\t\t\t? (\"unavailable\" as const)\n\t\t\t\t\t: isInstalled\n\t\t\t\t\t\t? (\"installed\" as const)\n\t\t\t\t\t\t: installed === undefined\n\t\t\t\t\t\t\t? (\"available\" as const)\n\t\t\t\t\t\t\t: (\"update-available\" as const),\n\t\t\t\tsigned: entry.signed,\n\t\t\t\t...(installed === undefined\n\t\t\t\t\t? {}\n\t\t\t\t\t: { installedVersion: installed.pluginVersion, lifecycle: installed.state.lifecycle }),\n\t\t\t\tdiagnosticCodes: diagnostics,\n\t\t\t});\n\t\t})\n\t\t.sort((left, right) => {\n\t\t\tconst idOrder = left.pluginId.localeCompare(right.pluginId);\n\t\t\treturn idOrder === 0 ? comparePluginVersionsV1(right.pluginVersion, left.pluginVersion) : idOrder;\n\t\t});\n\tconst boundedEntries = Object.freeze(entries.slice(0, MAX_MANAGER_ENTRIES_V1));\n\treturn Object.freeze({\n\t\tversion: 1,\n\t\tregistrySource: registry.source,\n\t\tstateStatus,\n\t\tentries: boundedEntries,\n\t\ttruncated: entries.length > boundedEntries.length,\n\t});\n}\n\nfunction stateResult(\n\tresult: PluginStateReadResultV1,\n): { readonly status: \"ok\" | \"missing\"; readonly snapshot: PluginStateSnapshotV1 } | undefined {\n\tif (result.status === \"ok\" || result.status === \"missing\") {\n\t\treturn { status: result.status, snapshot: result.snapshot };\n\t}\n\treturn undefined;\n}\n\nfunction responseCode(response: PluginEcosystemCliResponseV1): PluginManagerControllerErrorCodeV1 {\n\tif (response.status === \"unsupported\") return \"manager-operation-unsupported\";\n\tif (response.status === \"cancelled\") return \"manager-operation-cancelled\";\n\treturn \"manager-operation-failed\";\n}\n\n/**\n * Host-owned installation/update surface. The UI sees only bounded entries\n * and stable operation status; registry sources, installers, paths, package\n * bytes, signatures and credentials never cross this boundary.\n */\nexport function createPluginManagerControllerV1(options: {\n\treadonly registry: PluginRegistryV1;\n\treadonly stateStore: PluginStateStoreV1;\n\treadonly cli: PluginEcosystemCliV1;\n}): PluginManagerControllerV1 {\n\tconst getSnapshot = async (\n\t\tinput: { readonly signal?: AbortSignal } = {},\n\t): Promise<PluginManagerSnapshotResultV1> => {\n\t\tif (signalAborted(input.signal)) return { status: \"error\", code: \"cancelled\" };\n\t\tlet registry: PluginRegistrySnapshotV1;\n\t\ttry {\n\t\t\tregistry = await options.registry.list({ signal: input.signal });\n\t\t} catch {\n\t\t\tif (signalAborted(input.signal)) return { status: \"error\", code: \"cancelled\" };\n\t\t\treturn { status: \"error\", code: \"registry-unavailable\" };\n\t\t}\n\t\tif (signalAborted(input.signal)) return { status: \"error\", code: \"cancelled\" };\n\t\tlet state: PluginStateReadResultV1;\n\t\ttry {\n\t\t\tstate = await options.stateStore.read({ signal: input.signal });\n\t\t} catch {\n\t\t\tif (signalAborted(input.signal)) return { status: \"error\", code: \"cancelled\" };\n\t\t\treturn { status: \"error\", code: \"state-unavailable\" };\n\t\t}\n\t\tif (signalAborted(input.signal)) return { status: \"error\", code: \"cancelled\" };\n\t\tconst checkedState = stateResult(state);\n\t\tif (checkedState === undefined)\n\t\t\treturn {\n\t\t\t\tstatus: \"error\",\n\t\t\t\tcode: state.status === \"cancelled\" ? \"cancelled\" : \"state-invalid\",\n\t\t\t};\n\t\treturn {\n\t\t\tstatus: \"ok\",\n\t\t\tsnapshot: makeSnapshot(registry, checkedState.status, checkedState.snapshot),\n\t\t};\n\t};\n\n\tconst run = async (input: {\n\t\treadonly command: \"install\" | \"update\" | \"remove\";\n\t\treadonly pluginId: string;\n\t\treadonly pluginVersion?: string;\n\t\treadonly confirmed: boolean;\n\t\treadonly signal?: AbortSignal;\n\t}): Promise<PluginManagerMutationResultV1> => {\n\t\ttry {\n\t\t\tboundedId(input.pluginId, \"plugin ID\");\n\t\t\tif (input.pluginVersion !== undefined) boundedId(input.pluginVersion, \"plugin version\");\n\t\t} catch {\n\t\t\treturn { status: \"failed\", code: \"manager-operation-failed\" };\n\t\t}\n\t\tif (!input.confirmed) return { status: \"needs_confirmation\", code: \"confirmation-required\" };\n\t\tif (signalAborted(input.signal)) return { status: \"cancelled\", code: \"cancelled\" };\n\t\tlet response: PluginEcosystemCliResponseV1;\n\t\ttry {\n\t\t\tconst identity =\n\t\t\t\tinput.pluginVersion === undefined ? input.pluginId : `${input.pluginId}@${input.pluginVersion}`;\n\t\t\tresponse = await options.cli.execute({\n\t\t\t\targv: [input.command, identity, \"--json\"],\n\t\t\t\tsignal: input.signal,\n\t\t\t});\n\t\t} catch {\n\t\t\treturn { status: \"failed\", code: \"manager-operation-failed\" };\n\t\t}\n\t\tif (response.status !== \"succeeded\") {\n\t\t\treturn {\n\t\t\t\tstatus:\n\t\t\t\t\tresponse.status === \"unsupported\"\n\t\t\t\t\t\t? \"unsupported\"\n\t\t\t\t\t\t: response.status === \"cancelled\"\n\t\t\t\t\t\t\t? \"cancelled\"\n\t\t\t\t\t\t\t: \"failed\",\n\t\t\t\tcode: responseCode(response),\n\t\t\t};\n\t\t}\n\t\tconst refreshed = await getSnapshot({ signal: input.signal });\n\t\treturn refreshed.status === \"ok\"\n\t\t\t? { status: \"succeeded\", snapshot: refreshed.snapshot }\n\t\t\t: { status: \"succeeded\" };\n\t};\n\n\treturn Object.freeze({\n\t\tgetSnapshot,\n\t\tinstall: (input: PluginManagerMutationInputV1) => run({ ...input, command: \"install\" }),\n\t\tupdate: (input: PluginManagerMutationInputV1) => run({ ...input, command: \"update\" }),\n\t\tremove: (input: PluginManagerMutationInputV1) => run({ ...input, command: \"remove\" }),\n\t});\n}\n"]}

package/dist/cli/plugin-manager-controller.js

@@ -0,0 +1,183 @@
+import { comparePluginVersionsV1 } from "../plugins/ecosystem/catalog.js";
+const MAX_MANAGER_ENTRIES_V1 = 128;
+const MAX_MANAGER_DIAGNOSTICS_V1 = 8;
+const MAX_MANAGER_ID_CHARS_V1 = 256;
+function boundedId(value, label) {
+    if (typeof value !== "string" ||
+        value.trim() === "" ||
+        value.length > MAX_MANAGER_ID_CHARS_V1 ||
+        /[\u0000-\u001f\s]/u.test(value))
+        throw new Error(`${label} is invalid`);
+    return value;
+}
+function signalAborted(signal) {
+    return signal?.aborted === true;
+}
+function rejectionCodes(registry, pluginId, pluginVersion) {
+    return Object.freeze(registry.rejected
+        .filter((entry) => entry.pluginId === pluginId && entry.pluginVersion === pluginVersion)
+        .slice(0, MAX_MANAGER_DIAGNOSTICS_V1)
+        .map((entry) => entry.code));
+}
+function activeRecord(state, pluginId) {
+    return state.records
+        .filter((record) => record.pluginId === pluginId && record.state.lifecycle === "active")
+        .sort((left, right) => comparePluginVersionsV1(right.pluginVersion, left.pluginVersion))[0];
+}
+function makeSnapshot(registry, stateStatus, state) {
+    const identities = new Map();
+    for (const entry of registry.entries) {
+        identities.set(`${entry.pluginId}@${entry.pluginVersion}`, entry);
+    }
+    // Source/digest/platform-rejected manifests are intentionally visible as
+    // unavailable so the host UI can explain why an installed catalog item
+    // cannot be enabled. Their source, reason and package bytes stay host-only.
+    for (const rejection of registry.rejected) {
+        const identity = `${rejection.pluginId}@${rejection.pluginVersion}`;
+        if (!identities.has(identity)) {
+            identities.set(identity, {
+                pluginId: rejection.pluginId,
+                pluginVersion: rejection.pluginVersion,
+                signed: false,
+            });
+        }
+    }
+    const entries = [...identities.values()]
+        .map((entry) => {
+        const installed = activeRecord(state, entry.pluginId);
+        const diagnostics = rejectionCodes(registry, entry.pluginId, entry.pluginVersion);
+        const unavailable = diagnostics.length > 0 ||
+            !registry.verified.some((candidate) => candidate.pluginId === entry.pluginId && candidate.pluginVersion === entry.pluginVersion);
+        const isInstalled = installed?.pluginVersion === entry.pluginVersion;
+        return Object.freeze({
+            pluginId: entry.pluginId,
+            pluginVersion: entry.pluginVersion,
+            status: unavailable
+                ? "unavailable"
+                : isInstalled
+                    ? "installed"
+                    : installed === undefined
+                        ? "available"
+                        : "update-available",
+            signed: entry.signed,
+            ...(installed === undefined
+                ? {}
+                : { installedVersion: installed.pluginVersion, lifecycle: installed.state.lifecycle }),
+            diagnosticCodes: diagnostics,
+        });
+    })
+        .sort((left, right) => {
+        const idOrder = left.pluginId.localeCompare(right.pluginId);
+        return idOrder === 0 ? comparePluginVersionsV1(right.pluginVersion, left.pluginVersion) : idOrder;
+    });
+    const boundedEntries = Object.freeze(entries.slice(0, MAX_MANAGER_ENTRIES_V1));
+    return Object.freeze({
+        version: 1,
+        registrySource: registry.source,
+        stateStatus,
+        entries: boundedEntries,
+        truncated: entries.length > boundedEntries.length,
+    });
+}
+function stateResult(result) {
+    if (result.status === "ok" || result.status === "missing") {
+        return { status: result.status, snapshot: result.snapshot };
+    }
+    return undefined;
+}
+function responseCode(response) {
+    if (response.status === "unsupported")
+        return "manager-operation-unsupported";
+    if (response.status === "cancelled")
+        return "manager-operation-cancelled";
+    return "manager-operation-failed";
+}
+/**
+ * Host-owned installation/update surface. The UI sees only bounded entries
+ * and stable operation status; registry sources, installers, paths, package
+ * bytes, signatures and credentials never cross this boundary.
+ */
+export function createPluginManagerControllerV1(options) {
+    const getSnapshot = async (input = {}) => {
+        if (signalAborted(input.signal))
+            return { status: "error", code: "cancelled" };
+        let registry;
+        try {
+            registry = await options.registry.list({ signal: input.signal });
+        }
+        catch {
+            if (signalAborted(input.signal))
+                return { status: "error", code: "cancelled" };
+            return { status: "error", code: "registry-unavailable" };
+        }
+        if (signalAborted(input.signal))
+            return { status: "error", code: "cancelled" };
+        let state;
+        try {
+            state = await options.stateStore.read({ signal: input.signal });
+        }
+        catch {
+            if (signalAborted(input.signal))
+                return { status: "error", code: "cancelled" };
+            return { status: "error", code: "state-unavailable" };
+        }
+        if (signalAborted(input.signal))
+            return { status: "error", code: "cancelled" };
+        const checkedState = stateResult(state);
+        if (checkedState === undefined)
+            return {
+                status: "error",
+                code: state.status === "cancelled" ? "cancelled" : "state-invalid",
+            };
+        return {
+            status: "ok",
+            snapshot: makeSnapshot(registry, checkedState.status, checkedState.snapshot),
+        };
+    };
+    const run = async (input) => {
+        try {
+            boundedId(input.pluginId, "plugin ID");
+            if (input.pluginVersion !== undefined)
+                boundedId(input.pluginVersion, "plugin version");
+        }
+        catch {
+            return { status: "failed", code: "manager-operation-failed" };
+        }
+        if (!input.confirmed)
+            return { status: "needs_confirmation", code: "confirmation-required" };
+        if (signalAborted(input.signal))
+            return { status: "cancelled", code: "cancelled" };
+        let response;
+        try {
+            const identity = input.pluginVersion === undefined ? input.pluginId : `${input.pluginId}@${input.pluginVersion}`;
+            response = await options.cli.execute({
+                argv: [input.command, identity, "--json"],
+                signal: input.signal,
+            });
+        }
+        catch {
+            return { status: "failed", code: "manager-operation-failed" };
+        }
+        if (response.status !== "succeeded") {
+            return {
+                status: response.status === "unsupported"
+                    ? "unsupported"
+                    : response.status === "cancelled"
+                        ? "cancelled"
+                        : "failed",
+                code: responseCode(response),
+            };
+        }
+        const refreshed = await getSnapshot({ signal: input.signal });
+        return refreshed.status === "ok"
+            ? { status: "succeeded", snapshot: refreshed.snapshot }
+            : { status: "succeeded" };
+    };
+    return Object.freeze({
+        getSnapshot,
+        install: (input) => run({ ...input, command: "install" }),
+        update: (input) => run({ ...input, command: "update" }),
+        remove: (input) => run({ ...input, command: "remove" }),
+    });
+}
+//# sourceMappingURL=plugin-manager-controller.js.map

package/dist/cli/plugin-manager-controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-manager-controller.js","sourceRoot":"","sources":["../../src/cli/plugin-manager-controller.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAU1E,MAAM,sBAAsB,GAAG,GAAG,CAAC;AACnC,MAAM,0BAA0B,GAAG,CAAC,CAAC;AACrC,MAAM,uBAAuB,GAAG,GAAG,CAAC;AA0DpC,SAAS,SAAS,CAAC,KAAa,EAAE,KAAa,EAAU;IACxD,IACC,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE;QACnB,KAAK,CAAC,MAAM,GAAG,uBAAuB;QACtC,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC;QAEhC,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,aAAa,CAAC,CAAC;IACxC,OAAO,KAAK,CAAC;AAAA,CACb;AAED,SAAS,aAAa,CAAC,MAA+B,EAAW;IAChE,OAAO,MAAM,EAAE,OAAO,KAAK,IAAI,CAAC;AAAA,CAChC;AAED,SAAS,cAAc,CACtB,QAAkC,EAClC,QAAgB,EAChB,aAAqB,EACD;IACpB,OAAO,MAAM,CAAC,MAAM,CACnB,QAAQ,CAAC,QAAQ;SACf,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,aAAa,KAAK,aAAa,CAAC;SACvF,KAAK,CAAC,CAAC,EAAE,0BAA0B,CAAC;SACpC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAC5B,CAAC;AAAA,CACF;AAED,SAAS,YAAY,CAAC,KAA4B,EAAE,QAAgB,EAAmC;IACtG,OAAO,KAAK,CAAC,OAAO;SAClB,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,SAAS,KAAK,QAAQ,CAAC;SACvF,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,uBAAuB,CAAC,KAAK,CAAC,aAAa,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAAA,CAC7F;AAED,SAAS,YAAY,CACpB,QAAkC,EAClC,WAA6B,EAC7B,KAA4B,EACF;IAC1B,MAAM,UAAU,GAAG,IAAI,GAAG,EAGvB,CAAC;IACJ,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;QACtC,UAAU,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,aAAa,EAAE,EAAE,KAAK,CAAC,CAAC;IACnE,CAAC;IACD,yEAAyE;IACzE,uEAAuE;IACvE,4EAA4E;IAC5E,KAAK,MAAM,SAAS,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;QAC3C,MAAM,QAAQ,GAAG,GAAG,SAAS,CAAC,QAAQ,IAAI,SAAS,CAAC,aAAa,EAAE,CAAC;QACpE,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC/B,UAAU,CAAC,GAAG,CAAC,QAAQ,EAAE;gBACxB,QAAQ,EAAE,SAAS,CAAC,QAAQ;gBAC5B,aAAa,EAAE,SAAS,CAAC,aAAa;gBACtC,MAAM,EAAE,KAAK;aACb,CAAC,CAAC;QACJ,CAAC;IACF,CAAC;IACD,MAAM,OAAO,GAAG,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC;SACtC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;QACf,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;QACtD,MAAM,WAAW,GAAG,cAAc,CAAC,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC;QAClF,MAAM,WAAW,GAChB,WAAW,CAAC,MAAM,GAAG,CAAC;YACtB,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CACtB,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ,IAAI,SAAS,CAAC,aAAa,KAAK,KAAK,CAAC,aAAa,CACvG,CAAC;QACH,MAAM,WAAW,GAAG,SAAS,EAAE,aAAa,KAAK,KAAK,CAAC,aAAa,CAAC;QACrE,OAAO,MAAM,CAAC,MAAM,CAAC;YACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,MAAM,EAAE,WAAW;gBAClB,CAAC,CAAE,aAAuB;gBAC1B,CAAC,CAAC,WAAW;oBACZ,CAAC,CAAE,WAAqB;oBACxB,CAAC,CAAC,SAAS,KAAK,SAAS;wBACxB,CAAC,CAAE,WAAqB;wBACxB,CAAC,CAAE,kBAA4B;YAClC,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,GAAG,CAAC,SAAS,KAAK,SAAS;gBAC1B,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,gBAAgB,EAAE,SAAS,CAAC,aAAa,EAAE,SAAS,EAAE,SAAS,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;YACvF,eAAe,EAAE,WAAW;SAC5B,CAAC,CAAC;IAAA,CACH,CAAC;SACD,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACtB,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC5D,OAAO,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC,KAAK,CAAC,aAAa,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IAAA,CAClG,CAAC,CAAC;IACJ,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,sBAAsB,CAAC,CAAC,CAAC;IAC/E,OAAO,MAAM,CAAC,MAAM,CAAC;QACpB,OAAO,EAAE,CAAC;QACV,cAAc,EAAE,QAAQ,CAAC,MAAM;QAC/B,WAAW;QACX,OAAO,EAAE,cAAc;QACvB,SAAS,EAAE,OAAO,CAAC,MAAM,GAAG,cAAc,CAAC,MAAM;KACjD,CAAC,CAAC;AAAA,CACH;AAED,SAAS,WAAW,CACnB,MAA+B,EAC+D;IAC9F,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC3D,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;IAC7D,CAAC;IACD,OAAO,SAAS,CAAC;AAAA,CACjB;AAED,SAAS,YAAY,CAAC,QAAsC,EAAsC;IACjG,IAAI,QAAQ,CAAC,MAAM,KAAK,aAAa;QAAE,OAAO,+BAA+B,CAAC;IAC9E,IAAI,QAAQ,CAAC,MAAM,KAAK,WAAW;QAAE,OAAO,6BAA6B,CAAC;IAC1E,OAAO,0BAA0B,CAAC;AAAA,CAClC;AAED;;;;GAIG;AACH,MAAM,UAAU,+BAA+B,CAAC,OAI/C,EAA6B;IAC7B,MAAM,WAAW,GAAG,KAAK,EACxB,KAAK,GAAsC,EAAE,EACJ,EAAE,CAAC;QAC5C,IAAI,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC;YAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;QAC/E,IAAI,QAAkC,CAAC;QACvC,IAAI,CAAC;YACJ,QAAQ,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QAClE,CAAC;QAAC,MAAM,CAAC;YACR,IAAI,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC;gBAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;YAC/E,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,sBAAsB,EAAE,CAAC;QAC1D,CAAC;QACD,IAAI,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC;YAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;QAC/E,IAAI,KAA8B,CAAC;QACnC,IAAI,CAAC;YACJ,KAAK,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QACjE,CAAC;QAAC,MAAM,CAAC;YACR,IAAI,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC;gBAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;YAC/E,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC;QACvD,CAAC;QACD,IAAI,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC;YAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;QAC/E,MAAM,YAAY,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;QACxC,IAAI,YAAY,KAAK,SAAS;YAC7B,OAAO;gBACN,MAAM,EAAE,OAAO;gBACf,IAAI,EAAE,KAAK,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,eAAe;aAClE,CAAC;QACH,OAAO;YACN,MAAM,EAAE,IAAI;YACZ,QAAQ,EAAE,YAAY,CAAC,QAAQ,EAAE,YAAY,CAAC,MAAM,EAAE,YAAY,CAAC,QAAQ,CAAC;SAC5E,CAAC;IAAA,CACF,CAAC;IAEF,MAAM,GAAG,GAAG,KAAK,EAAE,KAMlB,EAA0C,EAAE,CAAC;QAC7C,IAAI,CAAC;YACJ,SAAS,CAAC,KAAK,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;YACvC,IAAI,KAAK,CAAC,aAAa,KAAK,SAAS;gBAAE,SAAS,CAAC,KAAK,CAAC,aAAa,EAAE,gBAAgB,CAAC,CAAC;QACzF,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,0BAA0B,EAAE,CAAC;QAC/D,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,SAAS;YAAE,OAAO,EAAE,MAAM,EAAE,oBAAoB,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAAC;QAC7F,IAAI,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC;YAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;QACnF,IAAI,QAAsC,CAAC;QAC3C,IAAI,CAAC;YACJ,MAAM,QAAQ,GACb,KAAK,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;YACjG,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC;gBACpC,IAAI,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC;gBACzC,MAAM,EAAE,KAAK,CAAC,MAAM;aACpB,CAAC,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,0BAA0B,EAAE,CAAC;QAC/D,CAAC;QACD,IAAI,QAAQ,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YACrC,OAAO;gBACN,MAAM,EACL,QAAQ,CAAC,MAAM,KAAK,aAAa;oBAChC,CAAC,CAAC,aAAa;oBACf,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,WAAW;wBAChC,CAAC,CAAC,WAAW;wBACb,CAAC,CAAC,QAAQ;gBACb,IAAI,EAAE,YAAY,CAAC,QAAQ,CAAC;aAC5B,CAAC;QACH,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,WAAW,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QAC9D,OAAO,SAAS,CAAC,MAAM,KAAK,IAAI;YAC/B,CAAC,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAAE;YACvD,CAAC,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IAAA,CAC3B,CAAC;IAEF,OAAO,MAAM,CAAC,MAAM,CAAC;QACpB,WAAW;QACX,OAAO,EAAE,CAAC,KAAmC,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,GAAG,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;QACvF,MAAM,EAAE,CAAC,KAAmC,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,GAAG,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;QACrF,MAAM,EAAE,CAAC,KAAmC,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,GAAG,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;KACrF,CAAC,CAAC;AAAA,CACH","sourcesContent":["import { comparePluginVersionsV1 } from \"../plugins/ecosystem/catalog.ts\";\nimport type { PluginEcosystemCliResponseV1, PluginEcosystemCliV1 } from \"../plugins/ecosystem/cli.ts\";\nimport type { PluginRegistrySnapshotV1, PluginRegistryV1 } from \"../plugins/ecosystem/registry.ts\";\nimport type {\n\tPluginStateReadResultV1,\n\tPluginStateRecordV1,\n\tPluginStateSnapshotV1,\n\tPluginStateStoreV1,\n} from \"../plugins/ecosystem/state.ts\";\n\nconst MAX_MANAGER_ENTRIES_V1 = 128;\nconst MAX_MANAGER_DIAGNOSTICS_V1 = 8;\nconst MAX_MANAGER_ID_CHARS_V1 = 256;\n\nexport type PluginManagerEntryStatusV1 = \"available\" | \"installed\" | \"update-available\" | \"unavailable\";\n\nexport interface PluginManagerEntryV1 {\n\treadonly pluginId: string;\n\treadonly pluginVersion: string;\n\treadonly status: PluginManagerEntryStatusV1;\n\treadonly signed: boolean;\n\treadonly installedVersion?: string;\n\treadonly lifecycle?: PluginStateRecordV1[\"state\"][\"lifecycle\"];\n\treadonly diagnosticCodes: readonly string[];\n}\n\nexport interface PluginManagerSnapshotV1 {\n\treadonly version: 1;\n\treadonly registrySource: string;\n\treadonly stateStatus: \"ok\" | \"missing\";\n\treadonly entries: readonly PluginManagerEntryV1[];\n\treadonly truncated: boolean;\n}\n\nexport type PluginManagerControllerErrorCodeV1 =\n\t| \"cancelled\"\n\t| \"registry-unavailable\"\n\t| \"state-invalid\"\n\t| \"state-unavailable\"\n\t| \"manager-operation-failed\"\n\t| \"manager-operation-unsupported\"\n\t| \"manager-operation-cancelled\"\n\t| \"confirmation-required\";\n\nexport type PluginManagerSnapshotResultV1 =\n\t| { readonly status: \"ok\"; readonly snapshot: PluginManagerSnapshotV1 }\n\t| { readonly status: \"error\"; readonly code: PluginManagerControllerErrorCodeV1 };\n\nexport type PluginManagerMutationStatusV1 = \"succeeded\" | \"failed\" | \"unsupported\" | \"cancelled\" | \"needs_confirmation\";\n\nexport interface PluginManagerMutationResultV1 {\n\treadonly status: PluginManagerMutationStatusV1;\n\treadonly code?: PluginManagerControllerErrorCodeV1;\n\treadonly snapshot?: PluginManagerSnapshotV1;\n}\n\nexport interface PluginManagerControllerV1 {\n\treadonly getSnapshot: (input?: { readonly signal?: AbortSignal }) => Promise<PluginManagerSnapshotResultV1>;\n\treadonly install: (input: PluginManagerMutationInputV1) => Promise<PluginManagerMutationResultV1>;\n\treadonly update: (input: PluginManagerMutationInputV1) => Promise<PluginManagerMutationResultV1>;\n\treadonly remove: (input: PluginManagerMutationInputV1) => Promise<PluginManagerMutationResultV1>;\n}\n\nexport interface PluginManagerMutationInputV1 {\n\treadonly pluginId: string;\n\treadonly pluginVersion?: string;\n\treadonly confirmed: boolean;\n\treadonly signal?: AbortSignal;\n}\n\nfunction boundedId(value: string, label: string): string {\n\tif (\n\t\ttypeof value !== \"string\" ||\n\t\tvalue.trim() === \"\" ||\n\t\tvalue.length > MAX_MANAGER_ID_CHARS_V1 ||\n\t\t/[\\u0000-\\u001f\\s]/u.test(value)\n\t)\n\t\tthrow new Error(`${label} is invalid`);\n\treturn value;\n}\n\nfunction signalAborted(signal: AbortSignal | undefined): boolean {\n\treturn signal?.aborted === true;\n}\n\nfunction rejectionCodes(\n\tregistry: PluginRegistrySnapshotV1,\n\tpluginId: string,\n\tpluginVersion: string,\n): readonly string[] {\n\treturn Object.freeze(\n\t\tregistry.rejected\n\t\t\t.filter((entry) => entry.pluginId === pluginId && entry.pluginVersion === pluginVersion)\n\t\t\t.slice(0, MAX_MANAGER_DIAGNOSTICS_V1)\n\t\t\t.map((entry) => entry.code),\n\t);\n}\n\nfunction activeRecord(state: PluginStateSnapshotV1, pluginId: string): PluginStateRecordV1 | undefined {\n\treturn state.records\n\t\t.filter((record) => record.pluginId === pluginId && record.state.lifecycle === \"active\")\n\t\t.sort((left, right) => comparePluginVersionsV1(right.pluginVersion, left.pluginVersion))[0];\n}\n\nfunction makeSnapshot(\n\tregistry: PluginRegistrySnapshotV1,\n\tstateStatus: \"ok\" | \"missing\",\n\tstate: PluginStateSnapshotV1,\n): PluginManagerSnapshotV1 {\n\tconst identities = new Map<\n\t\tstring,\n\t\t{ readonly pluginId: string; readonly pluginVersion: string; readonly signed: boolean }\n\t>();\n\tfor (const entry of registry.entries) {\n\t\tidentities.set(`${entry.pluginId}@${entry.pluginVersion}`, entry);\n\t}\n\t// Source/digest/platform-rejected manifests are intentionally visible as\n\t// unavailable so the host UI can explain why an installed catalog item\n\t// cannot be enabled. Their source, reason and package bytes stay host-only.\n\tfor (const rejection of registry.rejected) {\n\t\tconst identity = `${rejection.pluginId}@${rejection.pluginVersion}`;\n\t\tif (!identities.has(identity)) {\n\t\t\tidentities.set(identity, {\n\t\t\t\tpluginId: rejection.pluginId,\n\t\t\t\tpluginVersion: rejection.pluginVersion,\n\t\t\t\tsigned: false,\n\t\t\t});\n\t\t}\n\t}\n\tconst entries = [...identities.values()]\n\t\t.map((entry) => {\n\t\t\tconst installed = activeRecord(state, entry.pluginId);\n\t\t\tconst diagnostics = rejectionCodes(registry, entry.pluginId, entry.pluginVersion);\n\t\t\tconst unavailable =\n\t\t\t\tdiagnostics.length > 0 ||\n\t\t\t\t!registry.verified.some(\n\t\t\t\t\t(candidate) => candidate.pluginId === entry.pluginId && candidate.pluginVersion === entry.pluginVersion,\n\t\t\t\t);\n\t\t\tconst isInstalled = installed?.pluginVersion === entry.pluginVersion;\n\t\t\treturn Object.freeze({\n\t\t\t\tpluginId: entry.pluginId,\n\t\t\t\tpluginVersion: entry.pluginVersion,\n\t\t\t\tstatus: unavailable\n\t\t\t\t\t? (\"unavailable\" as const)\n\t\t\t\t\t: isInstalled\n\t\t\t\t\t\t? (\"installed\" as const)\n\t\t\t\t\t\t: installed === undefined\n\t\t\t\t\t\t\t? (\"available\" as const)\n\t\t\t\t\t\t\t: (\"update-available\" as const),\n\t\t\t\tsigned: entry.signed,\n\t\t\t\t...(installed === undefined\n\t\t\t\t\t? {}\n\t\t\t\t\t: { installedVersion: installed.pluginVersion, lifecycle: installed.state.lifecycle }),\n\t\t\t\tdiagnosticCodes: diagnostics,\n\t\t\t});\n\t\t})\n\t\t.sort((left, right) => {\n\t\t\tconst idOrder = left.pluginId.localeCompare(right.pluginId);\n\t\t\treturn idOrder === 0 ? comparePluginVersionsV1(right.pluginVersion, left.pluginVersion) : idOrder;\n\t\t});\n\tconst boundedEntries = Object.freeze(entries.slice(0, MAX_MANAGER_ENTRIES_V1));\n\treturn Object.freeze({\n\t\tversion: 1,\n\t\tregistrySource: registry.source,\n\t\tstateStatus,\n\t\tentries: boundedEntries,\n\t\ttruncated: entries.length > boundedEntries.length,\n\t});\n}\n\nfunction stateResult(\n\tresult: PluginStateReadResultV1,\n): { readonly status: \"ok\" | \"missing\"; readonly snapshot: PluginStateSnapshotV1 } | undefined {\n\tif (result.status === \"ok\" || result.status === \"missing\") {\n\t\treturn { status: result.status, snapshot: result.snapshot };\n\t}\n\treturn undefined;\n}\n\nfunction responseCode(response: PluginEcosystemCliResponseV1): PluginManagerControllerErrorCodeV1 {\n\tif (response.status === \"unsupported\") return \"manager-operation-unsupported\";\n\tif (response.status === \"cancelled\") return \"manager-operation-cancelled\";\n\treturn \"manager-operation-failed\";\n}\n\n/**\n * Host-owned installation/update surface. The UI sees only bounded entries\n * and stable operation status; registry sources, installers, paths, package\n * bytes, signatures and credentials never cross this boundary.\n */\nexport function createPluginManagerControllerV1(options: {\n\treadonly registry: PluginRegistryV1;\n\treadonly stateStore: PluginStateStoreV1;\n\treadonly cli: PluginEcosystemCliV1;\n}): PluginManagerControllerV1 {\n\tconst getSnapshot = async (\n\t\tinput: { readonly signal?: AbortSignal } = {},\n\t): Promise<PluginManagerSnapshotResultV1> => {\n\t\tif (signalAborted(input.signal)) return { status: \"error\", code: \"cancelled\" };\n\t\tlet registry: PluginRegistrySnapshotV1;\n\t\ttry {\n\t\t\tregistry = await options.registry.list({ signal: input.signal });\n\t\t} catch {\n\t\t\tif (signalAborted(input.signal)) return { status: \"error\", code: \"cancelled\" };\n\t\t\treturn { status: \"error\", code: \"registry-unavailable\" };\n\t\t}\n\t\tif (signalAborted(input.signal)) return { status: \"error\", code: \"cancelled\" };\n\t\tlet state: PluginStateReadResultV1;\n\t\ttry {\n\t\t\tstate = await options.stateStore.read({ signal: input.signal });\n\t\t} catch {\n\t\t\tif (signalAborted(input.signal)) return { status: \"error\", code: \"cancelled\" };\n\t\t\treturn { status: \"error\", code: \"state-unavailable\" };\n\t\t}\n\t\tif (signalAborted(input.signal)) return { status: \"error\", code: \"cancelled\" };\n\t\tconst checkedState = stateResult(state);\n\t\tif (checkedState === undefined)\n\t\t\treturn {\n\t\t\t\tstatus: \"error\",\n\t\t\t\tcode: state.status === \"cancelled\" ? \"cancelled\" : \"state-invalid\",\n\t\t\t};\n\t\treturn {\n\t\t\tstatus: \"ok\",\n\t\t\tsnapshot: makeSnapshot(registry, checkedState.status, checkedState.snapshot),\n\t\t};\n\t};\n\n\tconst run = async (input: {\n\t\treadonly command: \"install\" | \"update\" | \"remove\";\n\t\treadonly pluginId: string;\n\t\treadonly pluginVersion?: string;\n\t\treadonly confirmed: boolean;\n\t\treadonly signal?: AbortSignal;\n\t}): Promise<PluginManagerMutationResultV1> => {\n\t\ttry {\n\t\t\tboundedId(input.pluginId, \"plugin ID\");\n\t\t\tif (input.pluginVersion !== undefined) boundedId(input.pluginVersion, \"plugin version\");\n\t\t} catch {\n\t\t\treturn { status: \"failed\", code: \"manager-operation-failed\" };\n\t\t}\n\t\tif (!input.confirmed) return { status: \"needs_confirmation\", code: \"confirmation-required\" };\n\t\tif (signalAborted(input.signal)) return { status: \"cancelled\", code: \"cancelled\" };\n\t\tlet response: PluginEcosystemCliResponseV1;\n\t\ttry {\n\t\t\tconst identity =\n\t\t\t\tinput.pluginVersion === undefined ? input.pluginId : `${input.pluginId}@${input.pluginVersion}`;\n\t\t\tresponse = await options.cli.execute({\n\t\t\t\targv: [input.command, identity, \"--json\"],\n\t\t\t\tsignal: input.signal,\n\t\t\t});\n\t\t} catch {\n\t\t\treturn { status: \"failed\", code: \"manager-operation-failed\" };\n\t\t}\n\t\tif (response.status !== \"succeeded\") {\n\t\t\treturn {\n\t\t\t\tstatus:\n\t\t\t\t\tresponse.status === \"unsupported\"\n\t\t\t\t\t\t? \"unsupported\"\n\t\t\t\t\t\t: response.status === \"cancelled\"\n\t\t\t\t\t\t\t? \"cancelled\"\n\t\t\t\t\t\t\t: \"failed\",\n\t\t\t\tcode: responseCode(response),\n\t\t\t};\n\t\t}\n\t\tconst refreshed = await getSnapshot({ signal: input.signal });\n\t\treturn refreshed.status === \"ok\"\n\t\t\t? { status: \"succeeded\", snapshot: refreshed.snapshot }\n\t\t\t: { status: \"succeeded\" };\n\t};\n\n\treturn Object.freeze({\n\t\tgetSnapshot,\n\t\tinstall: (input: PluginManagerMutationInputV1) => run({ ...input, command: \"install\" }),\n\t\tupdate: (input: PluginManagerMutationInputV1) => run({ ...input, command: \"update\" }),\n\t\tremove: (input: PluginManagerMutationInputV1) => run({ ...input, command: \"remove\" }),\n\t});\n}\n"]}

package/dist/cli/plugin-selection-controller.d.ts

@@ -0,0 +1,57 @@
+import type { PluginSelectionStoreV1 } from "../plugins/ecosystem/selection-store.ts";
+import type { HostFactsV1, PluginDiagnosticCodeV1 } from "../plugins/ecosystem/types.ts";
+import type { BuiltinPluginManifestOverridesV1 } from "../profile/plugin-profiles.ts";
+import type { VerifiedToolPluginV1 } from "../profile/profile-assembly.ts";
+export type PluginSelectionUiStateV1 = "selected" | "disabled" | "available";
+export type PluginSelectionControllerErrorCodeV1 = "store-invalid" | "store-cancelled" | "store-error" | "write-invalid" | "write-cancelled" | "write-error" | "unknown-profile" | "unknown-plugin" | "unavailable-plugin";
+export interface PluginSelectionUiPluginV1 {
+    readonly pluginId: string;
+    readonly state: PluginSelectionUiStateV1;
+    readonly availability: "ready" | "unavailable";
+    readonly diagnosticCodes: readonly PluginDiagnosticCodeV1[];
+}
+export interface PluginSelectionUiProfileV1 {
+    readonly profileId: string;
+    readonly version: string;
+    readonly plugins: readonly PluginSelectionUiPluginV1[];
+}
+export interface PluginSelectionUiSnapshotV1 {
+    readonly version: 1;
+    readonly scope: "global" | "project";
+    readonly storeStatus: "ok" | "missing";
+    readonly profiles: readonly PluginSelectionUiProfileV1[];
+}
+export type PluginSelectionControllerResultV1 = {
+    readonly status: "ok";
+    readonly snapshot: PluginSelectionUiSnapshotV1;
+} | {
+    readonly status: "error";
+    readonly code: PluginSelectionControllerErrorCodeV1;
+    readonly snapshot?: PluginSelectionUiSnapshotV1;
+};
+export interface PluginSelectionControllerV1 {
+    readonly getSnapshot: (input?: {
+        readonly signal?: AbortSignal;
+    }) => Promise<PluginSelectionControllerResultV1>;
+    readonly setState: (input: {
+        readonly profileId: string;
+        readonly pluginId: string;
+        readonly state: Exclude<PluginSelectionUiStateV1, "available">;
+        readonly signal?: AbortSignal;
+    }) => Promise<PluginSelectionControllerResultV1>;
+    readonly toggle: (input: {
+        readonly profileId: string;
+        readonly pluginId: string;
+        readonly signal?: AbortSignal;
+    }) => Promise<PluginSelectionControllerResultV1>;
+}
+export declare function createPluginSelectionControllerV1(options: {
+    readonly store: PluginSelectionStoreV1;
+    readonly host: HostFactsV1;
+    readonly scope?: "global" | "project";
+    /** Optional host-owned verified plugin set used to project runtime readiness. */
+    readonly verifiedPlugins?: readonly VerifiedToolPluginV1[];
+    /** Optional host-selected active manifests for installed verified versions. */
+    readonly manifestOverrides?: BuiltinPluginManifestOverridesV1;
+}): PluginSelectionControllerV1;
+//# sourceMappingURL=plugin-selection-controller.d.ts.map

package/dist/cli/plugin-selection-controller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-selection-controller.d.ts","sourceRoot":"","sources":["../../src/cli/plugin-selection-controller.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAGX,sBAAsB,EACtB,MAAM,yCAAyC,CAAC;AACjD,OAAO,KAAK,EAAE,WAAW,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AACzF,OAAO,KAAK,EAAE,gCAAgC,EAAE,MAAM,+BAA+B,CAAC;AAOtF,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AAM3E,MAAM,MAAM,wBAAwB,GAAG,UAAU,GAAG,UAAU,GAAG,WAAW,CAAC;AAC7E,MAAM,MAAM,oCAAoC,GAC7C,eAAe,GACf,iBAAiB,GACjB,aAAa,GACb,eAAe,GACf,iBAAiB,GACjB,aAAa,GACb,iBAAiB,GACjB,gBAAgB,GAChB,oBAAoB,CAAC;AAExB,MAAM,WAAW,yBAAyB;IACzC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,wBAAwB,CAAC;IACzC,QAAQ,CAAC,YAAY,EAAE,OAAO,GAAG,aAAa,CAAC;IAC/C,QAAQ,CAAC,eAAe,EAAE,SAAS,sBAAsB,EAAE,CAAC;CAC5D;AAED,MAAM,WAAW,0BAA0B;IAC1C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,SAAS,yBAAyB,EAAE,CAAC;CACvD;AAED,MAAM,WAAW,2BAA2B;IAC3C,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,QAAQ,GAAG,SAAS,CAAC;IACrC,QAAQ,CAAC,WAAW,EAAE,IAAI,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,QAAQ,EAAE,SAAS,0BAA0B,EAAE,CAAC;CACzD;AAED,MAAM,MAAM,iCAAiC,GAC1C;IAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,2BAA2B,CAAA;CAAE,GACzE;IACA,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,oCAAoC,CAAC;IACpD,QAAQ,CAAC,QAAQ,CAAC,EAAE,2BAA2B,CAAC;CAC/C,CAAC;AAEL,MAAM,WAAW,2BAA2B;IAC3C,QAAQ,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,EAAE;QAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,KAAK,OAAO,CAAC,iCAAiC,CAAC,CAAC;IAChH,QAAQ,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE;QAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,wBAAwB,EAAE,WAAW,CAAC,CAAC;QAC/D,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;KAC9B,KAAK,OAAO,CAAC,iCAAiC,CAAC,CAAC;IACjD,QAAQ,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE;QACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;KAC9B,KAAK,OAAO,CAAC,iCAAiC,CAAC,CAAC;CACjD;AA0FD,wBAAgB,iCAAiC,CAAC,OAAO,EAAE;IAC1D,QAAQ,CAAC,KAAK,EAAE,sBAAsB,CAAC;IACvC,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,KAAK,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAC;IACtC,iFAAiF;IACjF,QAAQ,CAAC,eAAe,CAAC,EAAE,SAAS,oBAAoB,EAAE,CAAC;IAC3D,+EAA+E;IAC/E,QAAQ,CAAC,iBAAiB,CAAC,EAAE,gCAAgC,CAAC;CAC9D,GAAG,2BAA2B,CAyG9B","sourcesContent":["import { createPluginSelectionV1, type PluginSelectionV1 } from \"../plugins/ecosystem/selection.ts\";\nimport type {\n\tPluginSelectionStoreMutationResultV1,\n\tPluginSelectionStoreReadResultV1,\n\tPluginSelectionStoreV1,\n} from \"../plugins/ecosystem/selection-store.ts\";\nimport type { HostFactsV1, PluginDiagnosticCodeV1 } from \"../plugins/ecosystem/types.ts\";\nimport type { BuiltinPluginManifestOverridesV1 } from \"../profile/plugin-profiles.ts\";\nimport {\n\ttype BuiltinPluginProfileV1,\n\tlistBuiltinPluginManifestsV1,\n\tlistBuiltinPluginProfilesV1,\n\tresolveBuiltinPluginProfileV1,\n} from \"../profile/plugin-profiles.ts\";\nimport type { VerifiedToolPluginV1 } from \"../profile/profile-assembly.ts\";\n\nconst MAX_PROFILES = 32;\nconst MAX_PLUGINS_PER_PROFILE = 128;\nconst MAX_DIAGNOSTIC_CODES = 8;\n\nexport type PluginSelectionUiStateV1 = \"selected\" | \"disabled\" | \"available\";\nexport type PluginSelectionControllerErrorCodeV1 =\n\t| \"store-invalid\"\n\t| \"store-cancelled\"\n\t| \"store-error\"\n\t| \"write-invalid\"\n\t| \"write-cancelled\"\n\t| \"write-error\"\n\t| \"unknown-profile\"\n\t| \"unknown-plugin\"\n\t| \"unavailable-plugin\";\n\nexport interface PluginSelectionUiPluginV1 {\n\treadonly pluginId: string;\n\treadonly state: PluginSelectionUiStateV1;\n\treadonly availability: \"ready\" | \"unavailable\";\n\treadonly diagnosticCodes: readonly PluginDiagnosticCodeV1[];\n}\n\nexport interface PluginSelectionUiProfileV1 {\n\treadonly profileId: string;\n\treadonly version: string;\n\treadonly plugins: readonly PluginSelectionUiPluginV1[];\n}\n\nexport interface PluginSelectionUiSnapshotV1 {\n\treadonly version: 1;\n\treadonly scope: \"global\" | \"project\";\n\treadonly storeStatus: \"ok\" | \"missing\";\n\treadonly profiles: readonly PluginSelectionUiProfileV1[];\n}\n\nexport type PluginSelectionControllerResultV1 =\n\t| { readonly status: \"ok\"; readonly snapshot: PluginSelectionUiSnapshotV1 }\n\t| {\n\t\t\treadonly status: \"error\";\n\t\t\treadonly code: PluginSelectionControllerErrorCodeV1;\n\t\t\treadonly snapshot?: PluginSelectionUiSnapshotV1;\n\t  };\n\nexport interface PluginSelectionControllerV1 {\n\treadonly getSnapshot: (input?: { readonly signal?: AbortSignal }) => Promise<PluginSelectionControllerResultV1>;\n\treadonly setState: (input: {\n\t\treadonly profileId: string;\n\t\treadonly pluginId: string;\n\t\treadonly state: Exclude<PluginSelectionUiStateV1, \"available\">;\n\t\treadonly signal?: AbortSignal;\n\t}) => Promise<PluginSelectionControllerResultV1>;\n\treadonly toggle: (input: {\n\t\treadonly profileId: string;\n\t\treadonly pluginId: string;\n\t\treadonly signal?: AbortSignal;\n\t}) => Promise<PluginSelectionControllerResultV1>;\n}\n\nfunction diagnosticCodes(\n\tresolution: ReturnType<typeof resolveBuiltinPluginProfileV1>,\n\tpluginId: string,\n): readonly PluginDiagnosticCodeV1[] {\n\tif (resolution.status !== \"resolved\") return Object.freeze([]);\n\tconst plugin = resolution.resolution.plugins.find((candidate) => candidate.pluginId === pluginId);\n\treturn Object.freeze((plugin?.diagnostics ?? []).slice(0, MAX_DIAGNOSTIC_CODES).map((item) => item.code));\n}\n\nfunction profileById(profileId: string): BuiltinPluginProfileV1 | undefined {\n\treturn listBuiltinPluginProfilesV1().find((profile) => profile.id === profileId);\n}\n\nfunction selectionForProfile(\n\tsnapshot: Extract<PluginSelectionStoreReadResultV1, { readonly status: \"ok\" | \"missing\" }>[\"snapshot\"],\n\tprofileId: string,\n): PluginSelectionV1 | undefined {\n\treturn snapshot.selections.find((selection) => selection.profileId === profileId);\n}\n\nfunction pluginState(pluginId: string, selection: PluginSelectionV1 | undefined): PluginSelectionUiStateV1 {\n\tif (selection?.disabledPluginIds.includes(pluginId) === true) return \"disabled\";\n\tif (selection === undefined || selection.selectedPluginIds.includes(pluginId)) return \"selected\";\n\treturn \"available\";\n}\n\nfunction makeSnapshot(\n\tstoreStatus: \"ok\" | \"missing\",\n\tstoreSnapshot: Extract<PluginSelectionStoreReadResultV1, { readonly status: \"ok\" | \"missing\" }>[\"snapshot\"],\n\thost: HostFactsV1,\n\tscope: \"global\" | \"project\",\n\tverifiedPlugins: readonly VerifiedToolPluginV1[] | undefined,\n\tmanifestOverrides?: BuiltinPluginManifestOverridesV1,\n): PluginSelectionUiSnapshotV1 {\n\tconst manifests = new Set(listBuiltinPluginManifestsV1().map((manifest) => manifest.id));\n\tconst profiles = listBuiltinPluginProfilesV1()\n\t\t.slice(0, MAX_PROFILES)\n\t\t.map((profile) => {\n\t\t\tconst selection = selectionForProfile(storeSnapshot, profile.id);\n\t\t\tlet resolution: ReturnType<typeof resolveBuiltinPluginProfileV1>;\n\t\t\ttry {\n\t\t\t\tresolution = resolveBuiltinPluginProfileV1({\n\t\t\t\t\tprofileId: profile.id,\n\t\t\t\t\thost,\n\t\t\t\t\tverifiedPlugins,\n\t\t\t\t\tmanifestOverrides,\n\t\t\t\t});\n\t\t\t} catch {\n\t\t\t\tresolution = { status: \"host_facts_required\", profileId: profile.id };\n\t\t\t}\n\t\t\tconst plugins = profile.pluginIds.slice(0, MAX_PLUGINS_PER_PROFILE).map((pluginId) => {\n\t\t\t\t// D-075 S3: embedded manifests are gone; a plugin is known when the\n\t\t\t\t// host selected an installed active manifest for it (overrides).\n\t\t\t\tconst known = manifests.has(pluginId) || manifestOverrides?.[pluginId] !== undefined;\n\t\t\t\tconst ready =\n\t\t\t\t\tknown &&\n\t\t\t\t\tresolution.status === \"resolved\" &&\n\t\t\t\t\tresolution.resolution.plugins.some(\n\t\t\t\t\t\t(candidate) => candidate.pluginId === pluginId && candidate.status === \"installed-ready\",\n\t\t\t\t\t);\n\t\t\t\treturn Object.freeze({\n\t\t\t\t\tpluginId,\n\t\t\t\t\tstate: pluginState(pluginId, selection),\n\t\t\t\t\tavailability: ready ? (\"ready\" as const) : (\"unavailable\" as const),\n\t\t\t\t\tdiagnosticCodes: known ? diagnosticCodes(resolution, pluginId) : Object.freeze([]),\n\t\t\t\t});\n\t\t\t});\n\t\t\treturn Object.freeze({ profileId: profile.id, version: profile.version, plugins: Object.freeze(plugins) });\n\t\t});\n\treturn Object.freeze({ version: 1, scope, storeStatus, profiles: Object.freeze(profiles) });\n}\n\nfunction resultFromRead(\n\tresult: PluginSelectionStoreReadResultV1,\n\thost: HostFactsV1,\n\tscope: \"global\" | \"project\",\n\tverifiedPlugins: readonly VerifiedToolPluginV1[] | undefined,\n\tmanifestOverrides?: BuiltinPluginManifestOverridesV1,\n): PluginSelectionControllerResultV1 {\n\tif (result.status === \"ok\" || result.status === \"missing\") {\n\t\treturn {\n\t\t\tstatus: \"ok\",\n\t\t\tsnapshot: makeSnapshot(result.status, result.snapshot, host, scope, verifiedPlugins, manifestOverrides),\n\t\t};\n\t}\n\treturn { status: \"error\", code: result.status === \"cancelled\" ? \"store-cancelled\" : \"store-invalid\" };\n}\n\nexport function createPluginSelectionControllerV1(options: {\n\treadonly store: PluginSelectionStoreV1;\n\treadonly host: HostFactsV1;\n\treadonly scope?: \"global\" | \"project\";\n\t/** Optional host-owned verified plugin set used to project runtime readiness. */\n\treadonly verifiedPlugins?: readonly VerifiedToolPluginV1[];\n\t/** Optional host-selected active manifests for installed verified versions. */\n\treadonly manifestOverrides?: BuiltinPluginManifestOverridesV1;\n}): PluginSelectionControllerV1 {\n\tconst scope = options.scope ?? \"global\";\n\tconst getSnapshot = async (\n\t\tinput: { readonly signal?: AbortSignal } = {},\n\t): Promise<PluginSelectionControllerResultV1> => {\n\t\ttry {\n\t\t\treturn resultFromRead(\n\t\t\t\tawait options.store.read(input),\n\t\t\t\toptions.host,\n\t\t\t\tscope,\n\t\t\t\toptions.verifiedPlugins,\n\t\t\t\toptions.manifestOverrides,\n\t\t\t);\n\t\t} catch {\n\t\t\treturn { status: \"error\", code: \"store-error\" };\n\t\t}\n\t};\n\n\tconst setState = async (input: {\n\t\treadonly profileId: string;\n\t\treadonly pluginId: string;\n\t\treadonly state: Exclude<PluginSelectionUiStateV1, \"available\">;\n\t\treadonly signal?: AbortSignal;\n\t}): Promise<PluginSelectionControllerResultV1> => {\n\t\tconst profile = profileById(input.profileId);\n\t\tif (profile === undefined) return { status: \"error\", code: \"unknown-profile\" };\n\t\tif (!profile.pluginIds.includes(input.pluginId)) return { status: \"error\", code: \"unknown-plugin\" };\n\t\tconst current = await getSnapshot({ signal: input.signal });\n\t\tif (current.status !== \"ok\") return current;\n\t\tconst currentSelectionResult = await options.store.read({ signal: input.signal });\n\t\tif (currentSelectionResult.status !== \"ok\" && currentSelectionResult.status !== \"missing\") {\n\t\t\treturn {\n\t\t\t\tstatus: \"error\",\n\t\t\t\tcode: currentSelectionResult.status === \"cancelled\" ? \"write-cancelled\" : \"store-invalid\",\n\t\t\t};\n\t\t}\n\t\tconst existing = selectionForProfile(currentSelectionResult.snapshot, profile.id);\n\t\tconst disabled = new Set(existing?.disabledPluginIds ?? []);\n\t\tconst selected = new Set(existing?.selectedPluginIds ?? profile.pluginIds);\n\t\tif (input.state === \"disabled\") {\n\t\t\tselected.delete(input.pluginId);\n\t\t\tdisabled.add(input.pluginId);\n\t\t} else {\n\t\t\tconst profileView = current.snapshot.profiles.find((candidate) => candidate.profileId === profile.id);\n\t\t\tconst pluginView = profileView?.plugins.find((candidate) => candidate.pluginId === input.pluginId);\n\t\t\tif (pluginView?.availability !== \"ready\") {\n\t\t\t\treturn { status: \"error\", code: \"unavailable-plugin\", snapshot: current.snapshot };\n\t\t\t}\n\t\t\tselected.add(input.pluginId);\n\t\t\tdisabled.delete(input.pluginId);\n\t\t}\n\t\tconst selection = createPluginSelectionV1({\n\t\t\tprofileId: profile.id,\n\t\t\tselectedPluginIds: [...selected],\n\t\t\tdisabledPluginIds: [...disabled],\n\t\t});\n\t\tlet mutation: PluginSelectionStoreMutationResultV1;\n\t\ttry {\n\t\t\tmutation = await options.store.set({ selection, signal: input.signal });\n\t\t} catch {\n\t\t\treturn { status: \"error\", code: \"write-error\", snapshot: current.snapshot };\n\t\t}\n\t\tif (mutation.status !== \"ok\") {\n\t\t\treturn {\n\t\t\t\tstatus: \"error\",\n\t\t\t\tcode: mutation.status === \"cancelled\" ? \"write-cancelled\" : \"write-invalid\",\n\t\t\t\tsnapshot: current.snapshot,\n\t\t\t};\n\t\t}\n\t\treturn {\n\t\t\tstatus: \"ok\",\n\t\t\tsnapshot: makeSnapshot(\n\t\t\t\t\"ok\",\n\t\t\t\tmutation.snapshot,\n\t\t\t\toptions.host,\n\t\t\t\tscope,\n\t\t\t\toptions.verifiedPlugins,\n\t\t\t\toptions.manifestOverrides,\n\t\t\t),\n\t\t};\n\t};\n\n\treturn Object.freeze({\n\t\tgetSnapshot,\n\t\tsetState,\n\t\ttoggle: async (input: {\n\t\t\treadonly profileId: string;\n\t\t\treadonly pluginId: string;\n\t\t\treadonly signal?: AbortSignal;\n\t\t}): Promise<PluginSelectionControllerResultV1> => {\n\t\t\tconst snapshot = await getSnapshot({ signal: input.signal });\n\t\t\tif (snapshot.status !== \"ok\") return snapshot;\n\t\t\tconst profile = snapshot.snapshot.profiles.find((candidate) => candidate.profileId === input.profileId);\n\t\t\tconst plugin = profile?.plugins.find((candidate) => candidate.pluginId === input.pluginId);\n\t\t\tif (profile === undefined) return { status: \"error\", code: \"unknown-profile\" };\n\t\t\tif (plugin === undefined) return { status: \"error\", code: \"unknown-plugin\" };\n\t\t\tif (plugin.state === \"disabled\" && plugin.availability !== \"ready\") {\n\t\t\t\treturn { status: \"error\", code: \"unavailable-plugin\", snapshot: snapshot.snapshot };\n\t\t\t}\n\t\t\treturn await setState({\n\t\t\t\t...input,\n\t\t\t\tstate: plugin.state === \"disabled\" ? \"selected\" : \"disabled\",\n\t\t\t});\n\t\t},\n\t});\n}\n"]}

package/dist/cli/plugin-selection-controller.js

@@ -0,0 +1,159 @@
+import { createPluginSelectionV1 } from "../plugins/ecosystem/selection.js";
+import { listBuiltinPluginManifestsV1, listBuiltinPluginProfilesV1, resolveBuiltinPluginProfileV1, } from "../profile/plugin-profiles.js";
+const MAX_PROFILES = 32;
+const MAX_PLUGINS_PER_PROFILE = 128;
+const MAX_DIAGNOSTIC_CODES = 8;
+function diagnosticCodes(resolution, pluginId) {
+    if (resolution.status !== "resolved")
+        return Object.freeze([]);
+    const plugin = resolution.resolution.plugins.find((candidate) => candidate.pluginId === pluginId);
+    return Object.freeze((plugin?.diagnostics ?? []).slice(0, MAX_DIAGNOSTIC_CODES).map((item) => item.code));
+}
+function profileById(profileId) {
+    return listBuiltinPluginProfilesV1().find((profile) => profile.id === profileId);
+}
+function selectionForProfile(snapshot, profileId) {
+    return snapshot.selections.find((selection) => selection.profileId === profileId);
+}
+function pluginState(pluginId, selection) {
+    if (selection?.disabledPluginIds.includes(pluginId) === true)
+        return "disabled";
+    if (selection === undefined || selection.selectedPluginIds.includes(pluginId))
+        return "selected";
+    return "available";
+}
+function makeSnapshot(storeStatus, storeSnapshot, host, scope, verifiedPlugins, manifestOverrides) {
+    const manifests = new Set(listBuiltinPluginManifestsV1().map((manifest) => manifest.id));
+    const profiles = listBuiltinPluginProfilesV1()
+        .slice(0, MAX_PROFILES)
+        .map((profile) => {
+        const selection = selectionForProfile(storeSnapshot, profile.id);
+        let resolution;
+        try {
+            resolution = resolveBuiltinPluginProfileV1({
+                profileId: profile.id,
+                host,
+                verifiedPlugins,
+                manifestOverrides,
+            });
+        }
+        catch {
+            resolution = { status: "host_facts_required", profileId: profile.id };
+        }
+        const plugins = profile.pluginIds.slice(0, MAX_PLUGINS_PER_PROFILE).map((pluginId) => {
+            // D-075 S3: embedded manifests are gone; a plugin is known when the
+            // host selected an installed active manifest for it (overrides).
+            const known = manifests.has(pluginId) || manifestOverrides?.[pluginId] !== undefined;
+            const ready = known &&
+                resolution.status === "resolved" &&
+                resolution.resolution.plugins.some((candidate) => candidate.pluginId === pluginId && candidate.status === "installed-ready");
+            return Object.freeze({
+                pluginId,
+                state: pluginState(pluginId, selection),
+                availability: ready ? "ready" : "unavailable",
+                diagnosticCodes: known ? diagnosticCodes(resolution, pluginId) : Object.freeze([]),
+            });
+        });
+        return Object.freeze({ profileId: profile.id, version: profile.version, plugins: Object.freeze(plugins) });
+    });
+    return Object.freeze({ version: 1, scope, storeStatus, profiles: Object.freeze(profiles) });
+}
+function resultFromRead(result, host, scope, verifiedPlugins, manifestOverrides) {
+    if (result.status === "ok" || result.status === "missing") {
+        return {
+            status: "ok",
+            snapshot: makeSnapshot(result.status, result.snapshot, host, scope, verifiedPlugins, manifestOverrides),
+        };
+    }
+    return { status: "error", code: result.status === "cancelled" ? "store-cancelled" : "store-invalid" };
+}
+export function createPluginSelectionControllerV1(options) {
+    const scope = options.scope ?? "global";
+    const getSnapshot = async (input = {}) => {
+        try {
+            return resultFromRead(await options.store.read(input), options.host, scope, options.verifiedPlugins, options.manifestOverrides);
+        }
+        catch {
+            return { status: "error", code: "store-error" };
+        }
+    };
+    const setState = async (input) => {
+        const profile = profileById(input.profileId);
+        if (profile === undefined)
+            return { status: "error", code: "unknown-profile" };
+        if (!profile.pluginIds.includes(input.pluginId))
+            return { status: "error", code: "unknown-plugin" };
+        const current = await getSnapshot({ signal: input.signal });
+        if (current.status !== "ok")
+            return current;
+        const currentSelectionResult = await options.store.read({ signal: input.signal });
+        if (currentSelectionResult.status !== "ok" && currentSelectionResult.status !== "missing") {
+            return {
+                status: "error",
+                code: currentSelectionResult.status === "cancelled" ? "write-cancelled" : "store-invalid",
+            };
+        }
+        const existing = selectionForProfile(currentSelectionResult.snapshot, profile.id);
+        const disabled = new Set(existing?.disabledPluginIds ?? []);
+        const selected = new Set(existing?.selectedPluginIds ?? profile.pluginIds);
+        if (input.state === "disabled") {
+            selected.delete(input.pluginId);
+            disabled.add(input.pluginId);
+        }
+        else {
+            const profileView = current.snapshot.profiles.find((candidate) => candidate.profileId === profile.id);
+            const pluginView = profileView?.plugins.find((candidate) => candidate.pluginId === input.pluginId);
+            if (pluginView?.availability !== "ready") {
+                return { status: "error", code: "unavailable-plugin", snapshot: current.snapshot };
+            }
+            selected.add(input.pluginId);
+            disabled.delete(input.pluginId);
+        }
+        const selection = createPluginSelectionV1({
+            profileId: profile.id,
+            selectedPluginIds: [...selected],
+            disabledPluginIds: [...disabled],
+        });
+        let mutation;
+        try {
+            mutation = await options.store.set({ selection, signal: input.signal });
+        }
+        catch {
+            return { status: "error", code: "write-error", snapshot: current.snapshot };
+        }
+        if (mutation.status !== "ok") {
+            return {
+                status: "error",
+                code: mutation.status === "cancelled" ? "write-cancelled" : "write-invalid",
+                snapshot: current.snapshot,
+            };
+        }
+        return {
+            status: "ok",
+            snapshot: makeSnapshot("ok", mutation.snapshot, options.host, scope, options.verifiedPlugins, options.manifestOverrides),
+        };
+    };
+    return Object.freeze({
+        getSnapshot,
+        setState,
+        toggle: async (input) => {
+            const snapshot = await getSnapshot({ signal: input.signal });
+            if (snapshot.status !== "ok")
+                return snapshot;
+            const profile = snapshot.snapshot.profiles.find((candidate) => candidate.profileId === input.profileId);
+            const plugin = profile?.plugins.find((candidate) => candidate.pluginId === input.pluginId);
+            if (profile === undefined)
+                return { status: "error", code: "unknown-profile" };
+            if (plugin === undefined)
+                return { status: "error", code: "unknown-plugin" };
+            if (plugin.state === "disabled" && plugin.availability !== "ready") {
+                return { status: "error", code: "unavailable-plugin", snapshot: snapshot.snapshot };
+            }
+            return await setState({
+                ...input,
+                state: plugin.state === "disabled" ? "selected" : "disabled",
+            });
+        },
+    });
+}
+//# sourceMappingURL=plugin-selection-controller.js.map

package/dist/cli/plugin-selection-controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-selection-controller.js","sourceRoot":"","sources":["../../src/cli/plugin-selection-controller.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAA0B,MAAM,mCAAmC,CAAC;AAQpG,OAAO,EAEN,4BAA4B,EAC5B,2BAA2B,EAC3B,6BAA6B,GAC7B,MAAM,+BAA+B,CAAC;AAGvC,MAAM,YAAY,GAAG,EAAE,CAAC;AACxB,MAAM,uBAAuB,GAAG,GAAG,CAAC;AACpC,MAAM,oBAAoB,GAAG,CAAC,CAAC;AAyD/B,SAAS,eAAe,CACvB,UAA4D,EAC5D,QAAgB,EACoB;IACpC,IAAI,UAAU,CAAC,MAAM,KAAK,UAAU;QAAE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC/D,MAAM,MAAM,GAAG,UAAU,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;IAClG,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,WAAW,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,oBAAoB,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AAAA,CAC1G;AAED,SAAS,WAAW,CAAC,SAAiB,EAAsC;IAC3E,OAAO,2BAA2B,EAAE,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC;AAAA,CACjF;AAED,SAAS,mBAAmB,CAC3B,QAAsG,EACtG,SAAiB,EACe;IAChC,OAAO,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC;AAAA,CAClF;AAED,SAAS,WAAW,CAAC,QAAgB,EAAE,SAAwC,EAA4B;IAC1G,IAAI,SAAS,EAAE,iBAAiB,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,IAAI;QAAE,OAAO,UAAU,CAAC;IAChF,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,CAAC,iBAAiB,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,UAAU,CAAC;IACjG,OAAO,WAAW,CAAC;AAAA,CACnB;AAED,SAAS,YAAY,CACpB,WAA6B,EAC7B,aAA2G,EAC3G,IAAiB,EACjB,KAA2B,EAC3B,eAA4D,EAC5D,iBAAoD,EACtB;IAC9B,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,4BAA4B,EAAE,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;IACzF,MAAM,QAAQ,GAAG,2BAA2B,EAAE;SAC5C,KAAK,CAAC,CAAC,EAAE,YAAY,CAAC;SACtB,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;QACjB,MAAM,SAAS,GAAG,mBAAmB,CAAC,aAAa,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;QACjE,IAAI,UAA4D,CAAC;QACjE,IAAI,CAAC;YACJ,UAAU,GAAG,6BAA6B,CAAC;gBAC1C,SAAS,EAAE,OAAO,CAAC,EAAE;gBACrB,IAAI;gBACJ,eAAe;gBACf,iBAAiB;aACjB,CAAC,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACR,UAAU,GAAG,EAAE,MAAM,EAAE,qBAAqB,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC;QACvE,CAAC;QACD,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,uBAAuB,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC;YACrF,oEAAoE;YACpE,iEAAiE;YACjE,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,iBAAiB,EAAE,CAAC,QAAQ,CAAC,KAAK,SAAS,CAAC;YACrF,MAAM,KAAK,GACV,KAAK;gBACL,UAAU,CAAC,MAAM,KAAK,UAAU;gBAChC,UAAU,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CACjC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,KAAK,QAAQ,IAAI,SAAS,CAAC,MAAM,KAAK,iBAAiB,CACxF,CAAC;YACH,OAAO,MAAM,CAAC,MAAM,CAAC;gBACpB,QAAQ;gBACR,KAAK,EAAE,WAAW,CAAC,QAAQ,EAAE,SAAS,CAAC;gBACvC,YAAY,EAAE,KAAK,CAAC,CAAC,CAAE,OAAiB,CAAC,CAAC,CAAE,aAAuB;gBACnE,eAAe,EAAE,KAAK,CAAC,CAAC,CAAC,eAAe,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;aAClF,CAAC,CAAC;QAAA,CACH,CAAC,CAAC;QACH,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAAA,CAC3G,CAAC,CAAC;IACJ,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;AAAA,CAC5F;AAED,SAAS,cAAc,CACtB,MAAwC,EACxC,IAAiB,EACjB,KAA2B,EAC3B,eAA4D,EAC5D,iBAAoD,EAChB;IACpC,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC3D,OAAO;YACN,MAAM,EAAE,IAAI;YACZ,QAAQ,EAAE,YAAY,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,eAAe,EAAE,iBAAiB,CAAC;SACvG,CAAC;IACH,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC;AAAA,CACtG;AAED,MAAM,UAAU,iCAAiC,CAAC,OAQjD,EAA+B;IAC/B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,QAAQ,CAAC;IACxC,MAAM,WAAW,GAAG,KAAK,EACxB,KAAK,GAAsC,EAAE,EACA,EAAE,CAAC;QAChD,IAAI,CAAC;YACJ,OAAO,cAAc,CACpB,MAAM,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAC/B,OAAO,CAAC,IAAI,EACZ,KAAK,EACL,OAAO,CAAC,eAAe,EACvB,OAAO,CAAC,iBAAiB,CACzB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;QACjD,CAAC;IAAA,CACD,CAAC;IAEF,MAAM,QAAQ,GAAG,KAAK,EAAE,KAKvB,EAA8C,EAAE,CAAC;QACjD,MAAM,OAAO,GAAG,WAAW,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC;QAC/E,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC;YAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC;QACpG,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QAC5D,IAAI,OAAO,CAAC,MAAM,KAAK,IAAI;YAAE,OAAO,OAAO,CAAC;QAC5C,MAAM,sBAAsB,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QAClF,IAAI,sBAAsB,CAAC,MAAM,KAAK,IAAI,IAAI,sBAAsB,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC3F,OAAO;gBACN,MAAM,EAAE,OAAO;gBACf,IAAI,EAAE,sBAAsB,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,eAAe;aACzF,CAAC;QACH,CAAC;QACD,MAAM,QAAQ,GAAG,mBAAmB,CAAC,sBAAsB,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;QAClF,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,QAAQ,EAAE,iBAAiB,IAAI,EAAE,CAAC,CAAC;QAC5D,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,QAAQ,EAAE,iBAAiB,IAAI,OAAO,CAAC,SAAS,CAAC,CAAC;QAC3E,IAAI,KAAK,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;YAChC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAChC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC9B,CAAC;aAAM,CAAC;YACP,MAAM,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,SAAS,KAAK,OAAO,CAAC,EAAE,CAAC,CAAC;YACtG,MAAM,UAAU,GAAG,WAAW,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ,CAAC,CAAC;YACnG,IAAI,UAAU,EAAE,YAAY,KAAK,OAAO,EAAE,CAAC;gBAC1C,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,oBAAoB,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC;YACpF,CAAC;YACD,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC7B,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACjC,CAAC;QACD,MAAM,SAAS,GAAG,uBAAuB,CAAC;YACzC,SAAS,EAAE,OAAO,CAAC,EAAE;YACrB,iBAAiB,EAAE,CAAC,GAAG,QAAQ,CAAC;YAChC,iBAAiB,EAAE,CAAC,GAAG,QAAQ,CAAC;SAChC,CAAC,CAAC;QACH,IAAI,QAA8C,CAAC;QACnD,IAAI,CAAC;YACJ,QAAQ,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QACzE,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC;QAC7E,CAAC;QACD,IAAI,QAAQ,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;YAC9B,OAAO;gBACN,MAAM,EAAE,OAAO;gBACf,IAAI,EAAE,QAAQ,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,eAAe;gBAC3E,QAAQ,EAAE,OAAO,CAAC,QAAQ;aAC1B,CAAC;QACH,CAAC;QACD,OAAO;YACN,MAAM,EAAE,IAAI;YACZ,QAAQ,EAAE,YAAY,CACrB,IAAI,EACJ,QAAQ,CAAC,QAAQ,EACjB,OAAO,CAAC,IAAI,EACZ,KAAK,EACL,OAAO,CAAC,eAAe,EACvB,OAAO,CAAC,iBAAiB,CACzB;SACD,CAAC;IAAA,CACF,CAAC;IAEF,OAAO,MAAM,CAAC,MAAM,CAAC;QACpB,WAAW;QACX,QAAQ;QACR,MAAM,EAAE,KAAK,EAAE,KAId,EAA8C,EAAE,CAAC;YACjD,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;YAC7D,IAAI,QAAQ,CAAC,MAAM,KAAK,IAAI;gBAAE,OAAO,QAAQ,CAAC;YAC9C,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,CAAC,CAAC;YACxG,MAAM,MAAM,GAAG,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC3F,IAAI,OAAO,KAAK,SAAS;gBAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC;YAC/E,IAAI,MAAM,KAAK,SAAS;gBAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC;YAC7E,IAAI,MAAM,CAAC,KAAK,KAAK,UAAU,IAAI,MAAM,CAAC,YAAY,KAAK,OAAO,EAAE,CAAC;gBACpE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,oBAAoB,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACrF,CAAC;YACD,OAAO,MAAM,QAAQ,CAAC;gBACrB,GAAG,KAAK;gBACR,KAAK,EAAE,MAAM,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU;aAC5D,CAAC,CAAC;QAAA,CACH;KACD,CAAC,CAAC;AAAA,CACH","sourcesContent":["import { createPluginSelectionV1, type PluginSelectionV1 } from \"../plugins/ecosystem/selection.ts\";\nimport type {\n\tPluginSelectionStoreMutationResultV1,\n\tPluginSelectionStoreReadResultV1,\n\tPluginSelectionStoreV1,\n} from \"../plugins/ecosystem/selection-store.ts\";\nimport type { HostFactsV1, PluginDiagnosticCodeV1 } from \"../plugins/ecosystem/types.ts\";\nimport type { BuiltinPluginManifestOverridesV1 } from \"../profile/plugin-profiles.ts\";\nimport {\n\ttype BuiltinPluginProfileV1,\n\tlistBuiltinPluginManifestsV1,\n\tlistBuiltinPluginProfilesV1,\n\tresolveBuiltinPluginProfileV1,\n} from \"../profile/plugin-profiles.ts\";\nimport type { VerifiedToolPluginV1 } from \"../profile/profile-assembly.ts\";\n\nconst MAX_PROFILES = 32;\nconst MAX_PLUGINS_PER_PROFILE = 128;\nconst MAX_DIAGNOSTIC_CODES = 8;\n\nexport type PluginSelectionUiStateV1 = \"selected\" | \"disabled\" | \"available\";\nexport type PluginSelectionControllerErrorCodeV1 =\n\t| \"store-invalid\"\n\t| \"store-cancelled\"\n\t| \"store-error\"\n\t| \"write-invalid\"\n\t| \"write-cancelled\"\n\t| \"write-error\"\n\t| \"unknown-profile\"\n\t| \"unknown-plugin\"\n\t| \"unavailable-plugin\";\n\nexport interface PluginSelectionUiPluginV1 {\n\treadonly pluginId: string;\n\treadonly state: PluginSelectionUiStateV1;\n\treadonly availability: \"ready\" | \"unavailable\";\n\treadonly diagnosticCodes: readonly PluginDiagnosticCodeV1[];\n}\n\nexport interface PluginSelectionUiProfileV1 {\n\treadonly profileId: string;\n\treadonly version: string;\n\treadonly plugins: readonly PluginSelectionUiPluginV1[];\n}\n\nexport interface PluginSelectionUiSnapshotV1 {\n\treadonly version: 1;\n\treadonly scope: \"global\" | \"project\";\n\treadonly storeStatus: \"ok\" | \"missing\";\n\treadonly profiles: readonly PluginSelectionUiProfileV1[];\n}\n\nexport type PluginSelectionControllerResultV1 =\n\t| { readonly status: \"ok\"; readonly snapshot: PluginSelectionUiSnapshotV1 }\n\t| {\n\t\t\treadonly status: \"error\";\n\t\t\treadonly code: PluginSelectionControllerErrorCodeV1;\n\t\t\treadonly snapshot?: PluginSelectionUiSnapshotV1;\n\t  };\n\nexport interface PluginSelectionControllerV1 {\n\treadonly getSnapshot: (input?: { readonly signal?: AbortSignal }) => Promise<PluginSelectionControllerResultV1>;\n\treadonly setState: (input: {\n\t\treadonly profileId: string;\n\t\treadonly pluginId: string;\n\t\treadonly state: Exclude<PluginSelectionUiStateV1, \"available\">;\n\t\treadonly signal?: AbortSignal;\n\t}) => Promise<PluginSelectionControllerResultV1>;\n\treadonly toggle: (input: {\n\t\treadonly profileId: string;\n\t\treadonly pluginId: string;\n\t\treadonly signal?: AbortSignal;\n\t}) => Promise<PluginSelectionControllerResultV1>;\n}\n\nfunction diagnosticCodes(\n\tresolution: ReturnType<typeof resolveBuiltinPluginProfileV1>,\n\tpluginId: string,\n): readonly PluginDiagnosticCodeV1[] {\n\tif (resolution.status !== \"resolved\") return Object.freeze([]);\n\tconst plugin = resolution.resolution.plugins.find((candidate) => candidate.pluginId === pluginId);\n\treturn Object.freeze((plugin?.diagnostics ?? []).slice(0, MAX_DIAGNOSTIC_CODES).map((item) => item.code));\n}\n\nfunction profileById(profileId: string): BuiltinPluginProfileV1 | undefined {\n\treturn listBuiltinPluginProfilesV1().find((profile) => profile.id === profileId);\n}\n\nfunction selectionForProfile(\n\tsnapshot: Extract<PluginSelectionStoreReadResultV1, { readonly status: \"ok\" | \"missing\" }>[\"snapshot\"],\n\tprofileId: string,\n): PluginSelectionV1 | undefined {\n\treturn snapshot.selections.find((selection) => selection.profileId === profileId);\n}\n\nfunction pluginState(pluginId: string, selection: PluginSelectionV1 | undefined): PluginSelectionUiStateV1 {\n\tif (selection?.disabledPluginIds.includes(pluginId) === true) return \"disabled\";\n\tif (selection === undefined || selection.selectedPluginIds.includes(pluginId)) return \"selected\";\n\treturn \"available\";\n}\n\nfunction makeSnapshot(\n\tstoreStatus: \"ok\" | \"missing\",\n\tstoreSnapshot: Extract<PluginSelectionStoreReadResultV1, { readonly status: \"ok\" | \"missing\" }>[\"snapshot\"],\n\thost: HostFactsV1,\n\tscope: \"global\" | \"project\",\n\tverifiedPlugins: readonly VerifiedToolPluginV1[] | undefined,\n\tmanifestOverrides?: BuiltinPluginManifestOverridesV1,\n): PluginSelectionUiSnapshotV1 {\n\tconst manifests = new Set(listBuiltinPluginManifestsV1().map((manifest) => manifest.id));\n\tconst profiles = listBuiltinPluginProfilesV1()\n\t\t.slice(0, MAX_PROFILES)\n\t\t.map((profile) => {\n\t\t\tconst selection = selectionForProfile(storeSnapshot, profile.id);\n\t\t\tlet resolution: ReturnType<typeof resolveBuiltinPluginProfileV1>;\n\t\t\ttry {\n\t\t\t\tresolution = resolveBuiltinPluginProfileV1({\n\t\t\t\t\tprofileId: profile.id,\n\t\t\t\t\thost,\n\t\t\t\t\tverifiedPlugins,\n\t\t\t\t\tmanifestOverrides,\n\t\t\t\t});\n\t\t\t} catch {\n\t\t\t\tresolution = { status: \"host_facts_required\", profileId: profile.id };\n\t\t\t}\n\t\t\tconst plugins = profile.pluginIds.slice(0, MAX_PLUGINS_PER_PROFILE).map((pluginId) => {\n\t\t\t\t// D-075 S3: embedded manifests are gone; a plugin is known when the\n\t\t\t\t// host selected an installed active manifest for it (overrides).\n\t\t\t\tconst known = manifests.has(pluginId) || manifestOverrides?.[pluginId] !== undefined;\n\t\t\t\tconst ready =\n\t\t\t\t\tknown &&\n\t\t\t\t\tresolution.status === \"resolved\" &&\n\t\t\t\t\tresolution.resolution.plugins.some(\n\t\t\t\t\t\t(candidate) => candidate.pluginId === pluginId && candidate.status === \"installed-ready\",\n\t\t\t\t\t);\n\t\t\t\treturn Object.freeze({\n\t\t\t\t\tpluginId,\n\t\t\t\t\tstate: pluginState(pluginId, selection),\n\t\t\t\t\tavailability: ready ? (\"ready\" as const) : (\"unavailable\" as const),\n\t\t\t\t\tdiagnosticCodes: known ? diagnosticCodes(resolution, pluginId) : Object.freeze([]),\n\t\t\t\t});\n\t\t\t});\n\t\t\treturn Object.freeze({ profileId: profile.id, version: profile.version, plugins: Object.freeze(plugins) });\n\t\t});\n\treturn Object.freeze({ version: 1, scope, storeStatus, profiles: Object.freeze(profiles) });\n}\n\nfunction resultFromRead(\n\tresult: PluginSelectionStoreReadResultV1,\n\thost: HostFactsV1,\n\tscope: \"global\" | \"project\",\n\tverifiedPlugins: readonly VerifiedToolPluginV1[] | undefined,\n\tmanifestOverrides?: BuiltinPluginManifestOverridesV1,\n): PluginSelectionControllerResultV1 {\n\tif (result.status === \"ok\" || result.status === \"missing\") {\n\t\treturn {\n\t\t\tstatus: \"ok\",\n\t\t\tsnapshot: makeSnapshot(result.status, result.snapshot, host, scope, verifiedPlugins, manifestOverrides),\n\t\t};\n\t}\n\treturn { status: \"error\", code: result.status === \"cancelled\" ? \"store-cancelled\" : \"store-invalid\" };\n}\n\nexport function createPluginSelectionControllerV1(options: {\n\treadonly store: PluginSelectionStoreV1;\n\treadonly host: HostFactsV1;\n\treadonly scope?: \"global\" | \"project\";\n\t/** Optional host-owned verified plugin set used to project runtime readiness. */\n\treadonly verifiedPlugins?: readonly VerifiedToolPluginV1[];\n\t/** Optional host-selected active manifests for installed verified versions. */\n\treadonly manifestOverrides?: BuiltinPluginManifestOverridesV1;\n}): PluginSelectionControllerV1 {\n\tconst scope = options.scope ?? \"global\";\n\tconst getSnapshot = async (\n\t\tinput: { readonly signal?: AbortSignal } = {},\n\t): Promise<PluginSelectionControllerResultV1> => {\n\t\ttry {\n\t\t\treturn resultFromRead(\n\t\t\t\tawait options.store.read(input),\n\t\t\t\toptions.host,\n\t\t\t\tscope,\n\t\t\t\toptions.verifiedPlugins,\n\t\t\t\toptions.manifestOverrides,\n\t\t\t);\n\t\t} catch {\n\t\t\treturn { status: \"error\", code: \"store-error\" };\n\t\t}\n\t};\n\n\tconst setState = async (input: {\n\t\treadonly profileId: string;\n\t\treadonly pluginId: string;\n\t\treadonly state: Exclude<PluginSelectionUiStateV1, \"available\">;\n\t\treadonly signal?: AbortSignal;\n\t}): Promise<PluginSelectionControllerResultV1> => {\n\t\tconst profile = profileById(input.profileId);\n\t\tif (profile === undefined) return { status: \"error\", code: \"unknown-profile\" };\n\t\tif (!profile.pluginIds.includes(input.pluginId)) return { status: \"error\", code: \"unknown-plugin\" };\n\t\tconst current = await getSnapshot({ signal: input.signal });\n\t\tif (current.status !== \"ok\") return current;\n\t\tconst currentSelectionResult = await options.store.read({ signal: input.signal });\n\t\tif (currentSelectionResult.status !== \"ok\" && currentSelectionResult.status !== \"missing\") {\n\t\t\treturn {\n\t\t\t\tstatus: \"error\",\n\t\t\t\tcode: currentSelectionResult.status === \"cancelled\" ? \"write-cancelled\" : \"store-invalid\",\n\t\t\t};\n\t\t}\n\t\tconst existing = selectionForProfile(currentSelectionResult.snapshot, profile.id);\n\t\tconst disabled = new Set(existing?.disabledPluginIds ?? []);\n\t\tconst selected = new Set(existing?.selectedPluginIds ?? profile.pluginIds);\n\t\tif (input.state === \"disabled\") {\n\t\t\tselected.delete(input.pluginId);\n\t\t\tdisabled.add(input.pluginId);\n\t\t} else {\n\t\t\tconst profileView = current.snapshot.profiles.find((candidate) => candidate.profileId === profile.id);\n\t\t\tconst pluginView = profileView?.plugins.find((candidate) => candidate.pluginId === input.pluginId);\n\t\t\tif (pluginView?.availability !== \"ready\") {\n\t\t\t\treturn { status: \"error\", code: \"unavailable-plugin\", snapshot: current.snapshot };\n\t\t\t}\n\t\t\tselected.add(input.pluginId);\n\t\t\tdisabled.delete(input.pluginId);\n\t\t}\n\t\tconst selection = createPluginSelectionV1({\n\t\t\tprofileId: profile.id,\n\t\t\tselectedPluginIds: [...selected],\n\t\t\tdisabledPluginIds: [...disabled],\n\t\t});\n\t\tlet mutation: PluginSelectionStoreMutationResultV1;\n\t\ttry {\n\t\t\tmutation = await options.store.set({ selection, signal: input.signal });\n\t\t} catch {\n\t\t\treturn { status: \"error\", code: \"write-error\", snapshot: current.snapshot };\n\t\t}\n\t\tif (mutation.status !== \"ok\") {\n\t\t\treturn {\n\t\t\t\tstatus: \"error\",\n\t\t\t\tcode: mutation.status === \"cancelled\" ? \"write-cancelled\" : \"write-invalid\",\n\t\t\t\tsnapshot: current.snapshot,\n\t\t\t};\n\t\t}\n\t\treturn {\n\t\t\tstatus: \"ok\",\n\t\t\tsnapshot: makeSnapshot(\n\t\t\t\t\"ok\",\n\t\t\t\tmutation.snapshot,\n\t\t\t\toptions.host,\n\t\t\t\tscope,\n\t\t\t\toptions.verifiedPlugins,\n\t\t\t\toptions.manifestOverrides,\n\t\t\t),\n\t\t};\n\t};\n\n\treturn Object.freeze({\n\t\tgetSnapshot,\n\t\tsetState,\n\t\ttoggle: async (input: {\n\t\t\treadonly profileId: string;\n\t\t\treadonly pluginId: string;\n\t\t\treadonly signal?: AbortSignal;\n\t\t}): Promise<PluginSelectionControllerResultV1> => {\n\t\t\tconst snapshot = await getSnapshot({ signal: input.signal });\n\t\t\tif (snapshot.status !== \"ok\") return snapshot;\n\t\t\tconst profile = snapshot.snapshot.profiles.find((candidate) => candidate.profileId === input.profileId);\n\t\t\tconst plugin = profile?.plugins.find((candidate) => candidate.pluginId === input.pluginId);\n\t\t\tif (profile === undefined) return { status: \"error\", code: \"unknown-profile\" };\n\t\t\tif (plugin === undefined) return { status: \"error\", code: \"unknown-plugin\" };\n\t\t\tif (plugin.state === \"disabled\" && plugin.availability !== \"ready\") {\n\t\t\t\treturn { status: \"error\", code: \"unavailable-plugin\", snapshot: snapshot.snapshot };\n\t\t\t}\n\t\t\treturn await setState({\n\t\t\t\t...input,\n\t\t\t\tstate: plugin.state === \"disabled\" ? \"selected\" : \"disabled\",\n\t\t\t});\n\t\t},\n\t});\n}\n"]}

package/dist/cli/serve.d.ts

@@ -0,0 +1,39 @@
+import { type PiServerListener } from "@agent-forge/server";
+import type { HostLogger } from "../core/logger.ts";
+import type { CodingAgentServerAssemblyOptions } from "../remote/server-assembly.ts";
+import { type CodingAgentRemoteServerHandle, type StartCodingAgentRemoteServerOptions } from "../remote/server-entry.ts";
+/** Overridable collaborators for `runServeMode`, injected in tests. */
+export interface RunServeModeOptions {
+    /** Defaults to a loopback ws gateway listener on `port` with the artifact HTTP read routes. */
+    readonly createListener?: () => PiServerListener;
+    /** Defaults to `startCodingAgentRemoteServer`. */
+    readonly startServer?: (options: StartCodingAgentRemoteServerOptions) => Promise<CodingAgentRemoteServerHandle>;
+    /**
+     * Opt-in workspace boundary forwarded to the session source: remote creates
+     * are then restricted to cwds inside one of these roots. Omitted (or empty)
+     * keeps the unrestricted local-trust behavior.
+     */
+    readonly workspaceRoots?: readonly string[];
+    /**
+     * Explicit session directory forwarded to the session source. Serve mode
+     * never reads the settings/env sessionDir chain, so only an explicit CLI
+     * `--session-dir` value arrives here; without it `getSessionsDir()` is used.
+     */
+    readonly sessionDir?: string;
+    /**
+     * Explicit durable service override. Omitted (undefined) constructs a default
+     * file-backed durable service under the agent dir, so serve mode persists
+     * operations and artifacts across restarts. Hosts that need a custom backend
+     * or a shared service pass it here.
+     */
+    readonly durable?: CodingAgentServerAssemblyOptions["durable"];
+    /**
+     * Host-process logger forwarded into every session the server builds
+     * (D-067 phase 1 seam). The CLI passes the process file logger; omitted
+     * keeps the SDK's explicit no-op contract.
+     */
+    readonly hostLogger?: HostLogger;
+}
+/** Starts the remote server on the given port and keeps the process alive until SIGINT/SIGTERM. */
+export declare function runServeMode(port: number, options?: RunServeModeOptions): Promise<void>;
+//# sourceMappingURL=serve.d.ts.map

package/dist/cli/serve.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"serve.d.ts","sourceRoot":"","sources":["../../src/cli/serve.ts"],"names":[],"mappings":"AAmBA,OAAO,EAA0B,KAAK,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAEpF,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAEpD,OAAO,KAAK,EAAE,gCAAgC,EAAE,MAAM,8BAA8B,CAAC;AACrF,OAAO,EACN,KAAK,6BAA6B,EAElC,KAAK,mCAAmC,EAExC,MAAM,2BAA2B,CAAC;AAUnC,uEAAuE;AACvE,MAAM,WAAW,mBAAmB;IACnC,+FAA+F;IAC/F,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,gBAAgB,CAAC;IACjD,kDAAkD;IAClD,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,OAAO,EAAE,mCAAmC,KAAK,OAAO,CAAC,6BAA6B,CAAC,CAAC;IAChH;;;;OAIG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5C;;;;OAIG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B;;;;;OAKG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,gCAAgC,CAAC,SAAS,CAAC,CAAC;IAC/D;;;;OAIG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC;CACjC;AAOD,mGAAmG;AACnG,wBAAsB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC,CA2F7F","sourcesContent":["/**\n * CLI remote server entry (E3 tail): serves the coding-agent session runtime\n * behind the programmatic `startCodingAgentRemoteServer` entry.\n *\n * The default listener is the ws gateway: it negotiates WebSocket protocol\n * connections and serves the gateway HTTP surface (healthz plus the\n * token-protected artifact stat/read routes from B-H2b). Read tokens are\n * issued through the protocol path (`artifact_token_issue`) against the same\n * attach/lease gate as `artifact_read`; the direct HTTP face has no\n * `authorize` hook — the token is a single-use, short-lived projection of that\n * access.\n *\n * Experimental, single-user local trust only: the default listener binds\n * loopback, there is no authentication, and the session source accepts\n * whatever cwd clients submit, so any local process can drive the agent in an\n * arbitrary directory. An opt-in workspace boundary is available via\n * `--serve-workspace-root` (forwarded here as `workspaceRoots`).\n */\nimport { join } from \"node:path\";\nimport { createWsServerListener, type PiServerListener } from \"@agent-forge/server\";\nimport { getAgentDir, getSessionsDir } from \"../config.ts\";\nimport type { HostLogger } from \"../core/logger.ts\";\nimport { createDurableService, createFileDurableStoreBackend } from \"../durable/durable-service.ts\";\nimport type { CodingAgentServerAssemblyOptions } from \"../remote/server-assembly.ts\";\nimport {\n\ttype CodingAgentRemoteServerHandle,\n\treadOrCreateWriterId,\n\ttype StartCodingAgentRemoteServerOptions,\n\tstartCodingAgentRemoteServer,\n} from \"../remote/server-entry.ts\";\n\n/**\n * Server-level ops log relative to the agent dir. Parallels the default\n * session journal (`<agentDir>/remote-server-journal.jsonl`): one shared\n * server domain, never the process cwd. The backend's lock acquisition\n * creates parent directories, so no mkdir is needed before the first persist.\n */\nconst DEFAULT_DURABLE_LOG_RELATIVE_PATH = join(\"durable\", \"remote-server-ops.jsonl\");\n\n/** Overridable collaborators for `runServeMode`, injected in tests. */\nexport interface RunServeModeOptions {\n\t/** Defaults to a loopback ws gateway listener on `port` with the artifact HTTP read routes. */\n\treadonly createListener?: () => PiServerListener;\n\t/** Defaults to `startCodingAgentRemoteServer`. */\n\treadonly startServer?: (options: StartCodingAgentRemoteServerOptions) => Promise<CodingAgentRemoteServerHandle>;\n\t/**\n\t * Opt-in workspace boundary forwarded to the session source: remote creates\n\t * are then restricted to cwds inside one of these roots. Omitted (or empty)\n\t * keeps the unrestricted local-trust behavior.\n\t */\n\treadonly workspaceRoots?: readonly string[];\n\t/**\n\t * Explicit session directory forwarded to the session source. Serve mode\n\t * never reads the settings/env sessionDir chain, so only an explicit CLI\n\t * `--session-dir` value arrives here; without it `getSessionsDir()` is used.\n\t */\n\treadonly sessionDir?: string;\n\t/**\n\t * Explicit durable service override. Omitted (undefined) constructs a default\n\t * file-backed durable service under the agent dir, so serve mode persists\n\t * operations and artifacts across restarts. Hosts that need a custom backend\n\t * or a shared service pass it here.\n\t */\n\treadonly durable?: CodingAgentServerAssemblyOptions[\"durable\"];\n\t/**\n\t * Host-process logger forwarded into every session the server builds\n\t * (D-067 phase 1 seam). The CLI passes the process file logger; omitted\n\t * keeps the SDK's explicit no-op contract.\n\t */\n\treadonly hostLogger?: HostLogger;\n}\n\n/** Detects the transport-level \"address already in use\" failure. */\nfunction isAddrInUse(error: unknown): boolean {\n\treturn typeof error === \"object\" && error !== null && (error as { readonly code?: unknown }).code === \"EADDRINUSE\";\n}\n\n/** Starts the remote server on the given port and keeps the process alive until SIGINT/SIGTERM. */\nexport async function runServeMode(port: number, options?: RunServeModeOptions): Promise<void> {\n\t// Assigned once `startServer` resolves; until then the HTTP handler falls\n\t// through to the listener's default paths (no requests arrive before the\n\t// address is announced).\n\tlet handle: CodingAgentRemoteServerHandle | undefined;\n\tconst createListener =\n\t\toptions?.createListener ??\n\t\t((): PiServerListener =>\n\t\t\tcreateWsServerListener({\n\t\t\t\tport,\n\t\t\t\t// Token-protected artifact stat/read over the gateway HTTP surface\n\t\t\t\t// (B-H2b): routes live behind the server boundary so the token store\n\t\t\t\t// and the artifact data plane stay single-source.\n\t\t\t\thttpRequestHandler: (request, response) =>\n\t\t\t\t\thandle?.server.handleArtifactHttpRequest(request, response) ?? false,\n\t\t\t\t// Listener-lifetime socket errors (post-startup) otherwise disappear:\n\t\t\t\t// route them to the same one-line stderr sink as server errors.\n\t\t\t\tonError: (error: Error): void => {\n\t\t\t\t\tconsole.error(`remote-server error: ${error.message}`);\n\t\t\t\t},\n\t\t\t}));\n\tconst startServer = options?.startServer ?? startCodingAgentRemoteServer;\n\tconst workspaceRoots = options?.workspaceRoots;\n\tconst sessionDir = options?.sessionDir;\n\t// Default durable service persists operations and artifacts across\n\t// restarts; without it those surfaces answer durable_unavailable.\n\tconst durable =\n\t\toptions?.durable ??\n\t\tcreateDurableService({\n\t\t\tbackend: createFileDurableStoreBackend({\n\t\t\t\tpath: join(getAgentDir(), DEFAULT_DURABLE_LOG_RELATIVE_PATH),\n\t\t\t}),\n\t\t});\n\t// Host-level writer identity: one writer serves the whole process — the\n\t// server assembly claims the lease with it (claim/recover unchanged), and\n\t// sessions persist their agent task terminal records with it\n\t// (agent-result-replay-v1). A host-supplied durable rides the same writer.\n\t// The id is stable across restarts (see readOrCreateWriterId).\n\tconst writerId = readOrCreateWriterId(getAgentDir());\n\ttry {\n\t\thandle = await startServer({\n\t\t\tsessionSourceOptions: {\n\t\t\t\tsessionsDir: sessionDir ?? getSessionsDir(),\n\t\t\t\tcwd: process.cwd(),\n\t\t\t\tagentDir: getAgentDir(),\n\t\t\t\t...(workspaceRoots === undefined || workspaceRoots.length === 0 ? {} : { workspaceRoots }),\n\t\t\t\tagentTaskResults: { store: durable, writerId },\n\t\t\t\t// 承载退役切片 2：serve 会话经自动池化获得委派载体（与交互模式同纪律）。\n\t\t\t\tsubagentPoolFromSelfInvocation: true,\n\t\t\t\t// D-067 第一期 S3：serve 会话进程日志接缝——补上此前 no-op 的缺口。\n\t\t\t\t...(options?.hostLogger === undefined ? {} : { hostLogger: options.hostLogger }),\n\t\t\t},\n\t\t\tlisteners: [createListener()],\n\t\t\t// Without this sink the server swallows every internal error; keep\n\t\t\t// the output one-line so console noise stays greppable.\n\t\t\tonError: (error: Error): void => {\n\t\t\t\tconsole.error(`remote-server error: ${error.message}`);\n\t\t\t},\n\t\t\tdurable,\n\t\t\twriterId,\n\t\t});\n\t} catch (error) {\n\t\t// Startup failures otherwise bubble to top level as a raw stack trace;\n\t\t// the dominant day-to-day case (port already taken) deserves one line.\n\t\tif (isAddrInUse(error)) {\n\t\t\tconsole.error(`Port ${port} is already in use`);\n\t\t\tprocess.exit(1);\n\t\t}\n\t\tthrow error;\n\t}\n\n\tlet closing = false;\n\tconst shutdown = (): void => {\n\t\tif (closing) return;\n\t\tclosing = true;\n\t\tvoid handle\n\t\t\t.close()\n\t\t\t.then(() => {\n\t\t\t\t// Explicit exit so listener or signal handles cannot keep the\n\t\t\t\t// process alive after a successful shutdown.\n\t\t\t\tprocess.exit(0);\n\t\t\t})\n\t\t\t.catch((error: unknown) => {\n\t\t\t\tconsole.error(`Remote server shutdown failed: ${error instanceof Error ? error.message : String(error)}`);\n\t\t\t\tprocess.exit(1);\n\t\t\t});\n\t};\n\tprocess.on(\"SIGINT\", shutdown);\n\tprocess.on(\"SIGTERM\", shutdown);\n\n\tconsole.log(`Remote server listening on ${handle.addresses.join(\", \")}`);\n}\n"]}