@ai-agent-forge/agent-forge 0.86.7 → 0.88.0

package/dist/plugins/ecosystem/default-plugin-market.js.map

@@ -1 +1 @@
-{"version":3,"file":"default-plugin-market.js","sourceRoot":"","sources":["../../../src/plugins/ecosystem/default-plugin-market.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAElD,OAAO,EACN,4BAA4B,EAC5B,wBAAwB,EACxB,oCAAoC,EACpC,uCAAuC,GACvC,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,0BAA0B,EAA6B,MAAM,mBAAmB,CAAC;AAC1F,OAAO,EAAE,uBAAuB,EAA0B,MAAM,gBAAgB,CAAC;AACjF,OAAO,EAAE,oCAAoC,EAAE,MAAM,gCAAgC,CAAC;AACtF,OAAO,EACN,sCAAsC,GAEtC,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACN,8BAA8B,EAC9B,yBAAyB,GAEzB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,iCAAiC,EAAoC,MAAM,mCAAmC,CAAC;AACxH,OAAO,EAAE,2BAA2B,EAAiC,MAAM,6BAA6B,CAAC;AACzG,OAAO,EAAE,oCAAoC,EAAE,MAAM,2BAA2B,CAAC;AACjF,OAAO,EAAE,sBAAsB,EAAsD,MAAM,eAAe,CAAC;AAC3G,OAAO,EAAE,sCAAsC,EAAE,MAAM,2BAA2B,CAAC;AACnF,OAAO,EAAE,wBAAwB,EAA2B,MAAM,YAAY,CAAC;AAE/E,0EAA0E;AAC1E,MAAM,CAAC,MAAM,qCAAqC,GAAG,oCAAoC,CAAC;AAE1F;;;;GAIG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAG,+BAA+B,CAAC;AAEhF,0DAA0D;AAC1D,MAAM,CAAC,MAAM,+BAA+B,GAAG,0BAA0B,CAAC;AAiC1E;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,iCAAiC,CACtD,OAAqC,EACE;IACvC,MAAM,MAAM,GAAG,CAAC,OAAO,CAAC,cAAc,IAAI,OAAO,CAAC,GAAG,CAAC,qCAAqC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;IACtG,MAAM,eAAe,GAAG,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC;IAC3D,MAAM,WAAW,GAAG,oCAAoC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC3E,oEAAoE;IACpE,wEAAwE;IACxE,MAAM,YAAY,GAAG,uCAAuC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC/E,MAAM,UAAU,GAAG,oCAAoC,CAAC,EAAE,aAAa,EAAE,YAAY,EAAE,CAAC,CAAC;IACzF,MAAM,UAAU,GACf,eAAe,KAAK,SAAS;QAC5B,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,oCAAoC,CAAC;YACrC,GAAG,EAAE,IAAI,GAAG,CAAC,eAAe,GAAG,+BAA+B,CAAC;YAC/D,cAAc,EAAE,CAAC,eAAe,CAAC;YACjC,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;SAChE,CAAC,CAAC;IACN,MAAM,MAAM,GAA2B;QACtC,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC;QAClE,IAAI,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC;YAChC,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;YAC/C,IAAI,UAAU,KAAK,SAAS;gBAAE,OAAO,IAAI,CAAC;YAC1C,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;YACjD,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;QAAA,CAC3C;KACD,CAAC;IACF,MAAM,gBAAgB,GACrB,eAAe,KAAK,SAAS;QAC5B,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,MAAM,sCAAsC,CAAC;YAC7C,cAAc,EAAE,CAAC,eAAe,CAAC;YACjC,iBAAiB,EAAE,IAAI,CAAC,WAAW,EAAE,uBAAuB,CAAC;YAC7D,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;SAChE,CAAC,CAAC;IACN,IAAI,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;IAClC,IAAI,SAAS,KAAK,SAAS,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;QAC9D,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC;QAC1D,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YAC5C,IAAI,MAAe,CAAC;YACpB,IAAI,CAAC;gBACJ,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC1B,CAAC;YAAC,MAAM,CAAC;gBACR,MAAM,IAAI,KAAK,CAAC,GAAG,gCAAgC,gDAAgD,CAAC,CAAC;YACtG,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,GAAG,gCAAgC,uBAAuB,CAAC,CAAC;YACxG,SAAS,GAAG,MAAoC,CAAC;QAClD,CAAC;IACF,CAAC;IACD,MAAM,SAAS,GACd,SAAS,KAAK,SAAS,IAAI,gBAAgB,KAAK,SAAS;QACxD,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,2BAA2B,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;IACrD,qEAAqE;IACrE,2EAA2E;IAC3E,MAAM,eAAe,GACpB,OAAO,CAAC,WAAW;QACnB,iCAAiC,CAAC;YACjC,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;YACnE,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;SAChE,CAAC,CAAC;IACJ,MAAM,YAAY,GAAqD,CAAC,KAAK,EAAE,EAAE,CAAC;QACjF,IAAI,eAAe,CAAC,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC;YAAE,OAAO,eAAe,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QAC7F,MAAM,MAAM,GAAG,gBAAgB,EAAE,YAAY,CAAC;QAC9C,IAAI,MAAM,KAAK,SAAS;YAAE,MAAM,IAAI,yBAAyB,CAAC,kBAAkB,CAAC,CAAC;QAClF,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IAAA,CACrB,CAAC;IACF,MAAM,WAAW,GAAG,MAAM,8BAA8B,CAAC;QACxD,YAAY;QACZ,qBAAqB,EAAE,WAAW;QAClC,WAAW,EAAE,YAAY;QACzB,eAAe,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC;QACtC,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;KAC9D,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,sBAAsB,CAAC;QACvC,MAAM;QACN,IAAI,EAAE,wBAAwB,EAAE;QAChC,MAAM,EAAE;YACP,MAAM,EAAE,CAAC,EAAE,cAAc,EAAE,cAAc,EAAE,EAAE,EAAE,CAC9C,cAAc,KAAK,SAAS,IAAI,cAAc,KAAK,cAAc;gBAChE,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE;gBACxB,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,oDAAoD,EAAE;SACxF;QACD,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;KAC9C,CAAC,CAAC;IACH,OAAO;QACN,QAAQ;QACR,WAAW,EAAE,sCAAsC,CAAC,QAAQ,CAAC;QAC7D,WAAW,EAAE,eAAe;QAC5B,SAAS,EAAE,uBAAuB,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;QACzD,GAAG,CAAC,gBAAgB,KAAK,SAAS,IAAI,SAAS,KAAK,SAAS;YAC5D,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,YAAY,EAAE,0BAA0B,CAAC,EAAE,IAAI,EAAE,gBAAgB,CAAC,IAAI,EAAE,eAAe,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;QAC7G,UAAU,EAAE,wBAAwB,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,4BAA4B,CAAC,EAAE,CAAC;QACxG,iBAAiB,EAAE,wBAAwB,CAAC;YAC3C,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,eAAe,EAAE,4BAA4B,CAAC;SAC1E,CAAC;QACF,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC;YAClB,MAAM,WAAW,CAAC,KAAK,EAAE,CAAC;YAC1B,MAAM,eAAe,CAAC,KAAK,EAAE,CAAC;YAC9B,MAAM,gBAAgB,EAAE,KAAK,EAAE,CAAC;QAAA,CAChC;KACD,CAAC;AAAA,CACF","sourcesContent":["/**\n * Default CLI wiring for the plugin marketplace write side (P1-5): one\n * factory composes the disk install store, an optional HTTP registry origin,\n * the HTTP distribution host, and the persistent package install host into\n * the registry/installer/distribution surfaces the ecosystem CLI and the TUI\n * manager consume. Nothing here discovers keys or origins implicitly: the\n * registry origin comes from an explicit option or the\n * AGENT_FORGE_PLUGIN_REGISTRY_ORIGIN environment variable, and its absence\n * keeps disk-only semantics (install resolves to not_found, remove/rollback\n * and state management stay fully usable). Host injection always wins; the\n * factory is only invoked when no host-supplied boundary exists.\n */\n\nimport { join } from \"node:path\";\nimport { CONFIG_DIR_NAME } from \"../../config.ts\";\nimport type { PluginEcosystemRegistryV1 } from \"./cli.ts\";\nimport {\n\tDEFAULT_PLUGIN_STATE_FILE_V1,\n\tdefaultPluginHostFactsV1,\n\tdefaultPluginInstallStoreDirectoryV1,\n\tdefaultPluginInstallStoreInstanceRootV1,\n} from \"./default-active-bindings.ts\";\nimport { createPluginDistributionV1, type PluginDistributionV1 } from \"./distribution.ts\";\nimport { createPluginInstallerV1, type PluginInstallerV1 } from \"./installer.ts\";\nimport { createNodeDiskPluginRegistrySourceV1 } from \"./node-disk-registry-source.ts\";\nimport {\n\tcreateNodeHttpPluginDistributionHostV1,\n\ttype NodeHttpPluginDistributionHostV1,\n} from \"./node-distribution-host.ts\";\nimport {\n\tcreateNodePackageInstallHostV1,\n\tNodePackageInstallErrorV1,\n\ttype NodeZipPackageLimitsV1,\n} from \"./node-package-install-host.ts\";\nimport { createNodePluginAcquisitionHostV1, type NodePluginAcquisitionHostV1 } from \"./node-plugin-acquisition-host.ts\";\nimport { createNodePluginTrustRootV1, type NodePluginTrustRootKeyV1 } from \"./node-plugin-trust-root.ts\";\nimport { createNodeHttpPluginRegistrySourceV1 } from \"./node-registry-source.ts\";\nimport { createPluginRegistryV1, type PluginRegistrySourceV1, type PluginRegistryV1 } from \"./registry.ts\";\nimport { createPluginEcosystemRegistryAdapterV1 } from \"./registry-cli-adapter.ts\";\nimport { createPluginStateStoreV1, type PluginStateStoreV1 } from \"./state.ts\";\n\n/** Environment variable carrying the exact http(s) marketplace origin. */\nexport const DEFAULT_PLUGIN_REGISTRY_ORIGIN_ENV_V1 = \"AGENT_FORGE_PLUGIN_REGISTRY_ORIGIN\";\n\n/**\n * Environment variable carrying the Ed25519 trust root as a JSON array of\n * `{keyId, publicKeyPem}` entries. Downloads never verify without an explicit\n * trust root; there is no implicit key discovery.\n */\nexport const DEFAULT_PLUGIN_TRUST_KEYS_ENV_V1 = \"AGENT_FORGE_PLUGIN_TRUST_KEYS\";\n\n/** Registry document path below the configured origin. */\nexport const DEFAULT_PLUGIN_REGISTRY_PATH_V1 = \"/v1/plugin-registry.json\";\n\nexport interface DefaultPluginMarketOptionsV1 {\n\treadonly agentDir: string;\n\treadonly cwd: string;\n\t/** Exact http(s) registry origin; defaults to the environment variable. */\n\treadonly registryOrigin?: string;\n\t/** Explicit Ed25519 trust root; defaults to the environment variable. */\n\treadonly trustKeys?: readonly NodePluginTrustRootKeyV1[];\n\t/** Optional acquisition host override (tests); defaults to a real Node host. */\n\treadonly acquisition?: NodePluginAcquisitionHostV1;\n\t/** Optional package limits shared by acquisition and the install host; defaults apply. */\n\treadonly limits?: NodeZipPackageLimitsV1;\n\t/** Deterministic fetch replacement for tests. */\n\treadonly fetch?: typeof globalThis.fetch;\n}\n\nexport interface DefaultPluginMarketWiringV1 {\n\t/** Verified registry for the manager controller snapshot. */\n\treadonly registry: PluginRegistryV1;\n\t/** CLI-facing adapter over the same verified registry. */\n\treadonly cliRegistry: PluginEcosystemRegistryV1;\n\t/** Multi-source acquisition boundary for `plugin install <ref>`. */\n\treadonly acquisition: NodePluginAcquisitionHostV1;\n\treadonly installer: PluginInstallerV1;\n\t/** Present only when a registry origin is configured. */\n\treadonly distribution?: PluginDistributionV1;\n\treadonly stateStore: PluginStateStoreV1;\n\treadonly projectStateStore: PluginStateStoreV1;\n\t/** Releases the distribution host's cached artifacts when present. */\n\treadonly close: () => Promise<void>;\n}\n\n/**\n * Compose the default marketplace boundaries over one agent directory. The\n * disk install store is always part of the registry so installed plugins can\n * be listed, updated, and removed offline; a configured origin adds the HTTP\n * registry and package download. Installation failures surface structured\n * errors, never synthetic success.\n */\nexport async function createDefaultPluginMarketWiringV1(\n\toptions: DefaultPluginMarketOptionsV1,\n): Promise<DefaultPluginMarketWiringV1> {\n\tconst origin = (options.registryOrigin ?? process.env[DEFAULT_PLUGIN_REGISTRY_ORIGIN_ENV_V1])?.trim();\n\tconst effectiveOrigin = origin === \"\" ? undefined : origin;\n\tconst storeParent = defaultPluginInstallStoreDirectoryV1(options.agentDir);\n\t// The install host persists under this fixed subdirectory; the disk\n\t// registry source must read the same instance root to observe installs.\n\tconst instanceRoot = defaultPluginInstallStoreInstanceRootV1(options.agentDir);\n\tconst diskSource = createNodeDiskPluginRegistrySourceV1({ rootDirectory: instanceRoot });\n\tconst httpSource =\n\t\teffectiveOrigin === undefined\n\t\t\t? undefined\n\t\t\t: createNodeHttpPluginRegistrySourceV1({\n\t\t\t\t\turl: new URL(effectiveOrigin + DEFAULT_PLUGIN_REGISTRY_PATH_V1),\n\t\t\t\t\tallowedOrigins: [effectiveOrigin],\n\t\t\t\t\t...(options.fetch === undefined ? {} : { fetch: options.fetch }),\n\t\t\t\t});\n\tconst source: PluginRegistrySourceV1 = {\n\t\t...(httpSource === undefined ? {} : { source: httpSource.source }),\n\t\tlist: async ({ signal } = {}) => {\n\t\t\tconst disk = await diskSource.list({ signal });\n\t\t\tif (httpSource === undefined) return disk;\n\t\t\tconst remote = await httpSource.list({ signal });\n\t\t\treturn Object.freeze([...remote, ...disk]);\n\t\t},\n\t};\n\tconst distributionHost =\n\t\teffectiveOrigin === undefined\n\t\t\t? undefined\n\t\t\t: await createNodeHttpPluginDistributionHostV1({\n\t\t\t\t\tallowedOrigins: [effectiveOrigin],\n\t\t\t\t\tartifactDirectory: join(storeParent, \"distribution-cache-v1\"),\n\t\t\t\t\t...(options.fetch === undefined ? {} : { fetch: options.fetch }),\n\t\t\t\t});\n\tlet trustKeys = options.trustKeys;\n\tif (trustKeys === undefined && effectiveOrigin !== undefined) {\n\t\tconst raw = process.env[DEFAULT_PLUGIN_TRUST_KEYS_ENV_V1];\n\t\tif (raw !== undefined && raw.trim() !== \"\") {\n\t\t\tlet parsed: unknown;\n\t\t\ttry {\n\t\t\t\tparsed = JSON.parse(raw);\n\t\t\t} catch {\n\t\t\t\tthrow new Error(`${DEFAULT_PLUGIN_TRUST_KEYS_ENV_V1} must be a JSON array of {keyId, publicKeyPem}`);\n\t\t\t}\n\t\t\tif (!Array.isArray(parsed)) throw new Error(`${DEFAULT_PLUGIN_TRUST_KEYS_ENV_V1} must be a JSON array`);\n\t\t\ttrustKeys = parsed as NodePluginTrustRootKeyV1[];\n\t\t}\n\t}\n\tconst trustRoot =\n\t\ttrustKeys === undefined || distributionHost === undefined\n\t\t\t? undefined\n\t\t\t: createNodePluginTrustRootV1({ keys: trustKeys });\n\t// Acquisition artifacts (npm/URL/local refs) and signed distribution\n\t// artifacts share one install host; ownership decides which reader serves.\n\tconst acquisitionHost =\n\t\toptions.acquisition ??\n\t\tcreateNodePluginAcquisitionHostV1({\n\t\t\t...(options.limits === undefined ? {} : { limits: options.limits }),\n\t\t\t...(options.fetch === undefined ? {} : { fetch: options.fetch }),\n\t\t});\n\tconst openArtifact: NodeHttpPluginDistributionHostV1[\"openArtifact\"] = (input) => {\n\t\tif (acquisitionHost.ownsArtifact(input.artifact)) return acquisitionHost.openArtifact(input);\n\t\tconst reader = distributionHost?.openArtifact;\n\t\tif (reader === undefined) throw new NodePackageInstallErrorV1(\"invalid_artifact\");\n\t\treturn reader(input);\n\t};\n\tconst installHost = await createNodePackageInstallHostV1({\n\t\topenArtifact,\n\t\tinstallationDirectory: storeParent,\n\t\tpersistence: \"persistent\",\n\t\tsupportedScopes: [\"global\", \"project\"],\n\t\t...(options.limits === undefined ? {} : { ...options.limits }),\n\t});\n\tconst registry = createPluginRegistryV1({\n\t\tsource,\n\t\thost: defaultPluginHostFactsV1(),\n\t\tverify: {\n\t\t\tverify: ({ manifestDigest, expectedDigest }) =>\n\t\t\t\texpectedDigest === undefined || expectedDigest === manifestDigest\n\t\t\t\t\t? { status: \"accepted\" }\n\t\t\t\t\t: { status: \"rejected\", reason: \"Manifest digest does not match the expected digest\" },\n\t\t},\n\t\tsourceVerifier: () => ({ status: \"accepted\" }),\n\t});\n\treturn {\n\t\tregistry,\n\t\tcliRegistry: createPluginEcosystemRegistryAdapterV1(registry),\n\t\tacquisition: acquisitionHost,\n\t\tinstaller: createPluginInstallerV1({ host: installHost }),\n\t\t...(distributionHost === undefined || trustRoot === undefined\n\t\t\t? {}\n\t\t\t: { distribution: createPluginDistributionV1({ host: distributionHost.host, verifySignature: trustRoot }) }),\n\t\tstateStore: createPluginStateStoreV1({ filePath: join(options.agentDir, DEFAULT_PLUGIN_STATE_FILE_V1) }),\n\t\tprojectStateStore: createPluginStateStoreV1({\n\t\t\tfilePath: join(options.cwd, CONFIG_DIR_NAME, DEFAULT_PLUGIN_STATE_FILE_V1),\n\t\t}),\n\t\tclose: async () => {\n\t\t\tawait installHost.close();\n\t\t\tawait acquisitionHost.close();\n\t\t\tawait distributionHost?.close();\n\t\t},\n\t};\n}\n"]}
+{"version":3,"file":"default-plugin-market.js","sourceRoot":"","sources":["../../../src/plugins/ecosystem/default-plugin-market.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,CAAC,EAAE,MAAM,0BAA0B,CAAC;AAE7C,OAAO,EACN,4BAA4B,EAC5B,wBAAwB,EACxB,oCAAoC,EACpC,uCAAuC,GACvC,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,0BAA0B,EAA6B,MAAM,mBAAmB,CAAC;AAC1F,OAAO,EAAE,uBAAuB,EAA0B,MAAM,gBAAgB,CAAC;AACjF,OAAO,EAAE,oCAAoC,EAAE,MAAM,gCAAgC,CAAC;AACtF,OAAO,EACN,sCAAsC,GAEtC,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACN,8BAA8B,EAC9B,yBAAyB,GAEzB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,iCAAiC,EAAoC,MAAM,mCAAmC,CAAC;AACxH,OAAO,EAAE,2BAA2B,EAAiC,MAAM,6BAA6B,CAAC;AACzG,OAAO,EAAE,oCAAoC,EAAE,MAAM,2BAA2B,CAAC;AACjF,OAAO,EAAE,sBAAsB,EAAsD,MAAM,eAAe,CAAC;AAC3G,OAAO,EAAE,sCAAsC,EAAE,MAAM,2BAA2B,CAAC;AACnF,OAAO,EAAE,wBAAwB,EAA2B,MAAM,YAAY,CAAC;AAE/E,0EAA0E;AAC1E,MAAM,CAAC,MAAM,qCAAqC,GAAG,oCAAoC,CAAC;AAE1F;;;;GAIG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAG,+BAA+B,CAAC;AAEhF,0DAA0D;AAC1D,MAAM,CAAC,MAAM,+BAA+B,GAAG,0BAA0B,CAAC;AAiC1E;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,iCAAiC,CACtD,OAAqC,EACE;IACvC,MAAM,MAAM,GAAG,CAAC,OAAO,CAAC,cAAc,IAAI,OAAO,CAAC,GAAG,CAAC,qCAAqC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;IACtG,MAAM,eAAe,GAAG,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC;IAC3D,MAAM,WAAW,GAAG,oCAAoC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC3E,oEAAoE;IACpE,wEAAwE;IACxE,MAAM,YAAY,GAAG,uCAAuC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC/E,MAAM,UAAU,GAAG,oCAAoC,CAAC,EAAE,aAAa,EAAE,YAAY,EAAE,CAAC,CAAC;IACzF,MAAM,UAAU,GACf,eAAe,KAAK,SAAS;QAC5B,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,oCAAoC,CAAC;YACrC,GAAG,EAAE,IAAI,GAAG,CAAC,eAAe,GAAG,+BAA+B,CAAC;YAC/D,cAAc,EAAE,CAAC,eAAe,CAAC;YACjC,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;SAChE,CAAC,CAAC;IACN,MAAM,MAAM,GAA2B;QACtC,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC;QAClE,IAAI,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC;YAChC,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;YAC/C,IAAI,UAAU,KAAK,SAAS;gBAAE,OAAO,IAAI,CAAC;YAC1C,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;YACjD,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;QAAA,CAC3C;KACD,CAAC;IACF,MAAM,gBAAgB,GACrB,eAAe,KAAK,SAAS;QAC5B,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,MAAM,sCAAsC,CAAC;YAC7C,cAAc,EAAE,CAAC,eAAe,CAAC;YACjC,iBAAiB,EAAE,IAAI,CAAC,WAAW,EAAE,uBAAuB,CAAC;YAC7D,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;SAChE,CAAC,CAAC;IACN,IAAI,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;IAClC,IAAI,SAAS,KAAK,SAAS,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;QAC9D,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC;QAC1D,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YAC5C,IAAI,MAAe,CAAC;YACpB,IAAI,CAAC;gBACJ,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC1B,CAAC;YAAC,MAAM,CAAC;gBACR,MAAM,IAAI,KAAK,CACd,CAAC,CAAC,qDAAqD,EAAE,EAAE,GAAG,EAAE,gCAAgC,EAAE,CAAC,CACnG,CAAC;YACH,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;gBACzB,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,4BAA4B,EAAE,EAAE,GAAG,EAAE,gCAAgC,EAAE,CAAC,CAAC,CAAC;YAC7F,SAAS,GAAG,MAAoC,CAAC;QAClD,CAAC;IACF,CAAC;IACD,MAAM,SAAS,GACd,SAAS,KAAK,SAAS,IAAI,gBAAgB,KAAK,SAAS;QACxD,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,2BAA2B,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;IACrD,qEAAqE;IACrE,2EAA2E;IAC3E,MAAM,eAAe,GACpB,OAAO,CAAC,WAAW;QACnB,iCAAiC,CAAC;YACjC,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;YACnE,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;SAChE,CAAC,CAAC;IACJ,MAAM,YAAY,GAAqD,CAAC,KAAK,EAAE,EAAE,CAAC;QACjF,IAAI,eAAe,CAAC,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC;YAAE,OAAO,eAAe,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QAC7F,MAAM,MAAM,GAAG,gBAAgB,EAAE,YAAY,CAAC;QAC9C,IAAI,MAAM,KAAK,SAAS;YAAE,MAAM,IAAI,yBAAyB,CAAC,kBAAkB,CAAC,CAAC;QAClF,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IAAA,CACrB,CAAC;IACF,MAAM,WAAW,GAAG,MAAM,8BAA8B,CAAC;QACxD,YAAY;QACZ,qBAAqB,EAAE,WAAW;QAClC,WAAW,EAAE,YAAY;QACzB,eAAe,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC;QACtC,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;KAC9D,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,sBAAsB,CAAC;QACvC,MAAM;QACN,IAAI,EAAE,wBAAwB,EAAE;QAChC,MAAM,EAAE;YACP,MAAM,EAAE,CAAC,EAAE,cAAc,EAAE,cAAc,EAAE,EAAE,EAAE,CAC9C,cAAc,KAAK,SAAS,IAAI,cAAc,KAAK,cAAc;gBAChE,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE;gBACxB,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,oDAAoD,EAAE;SACxF;QACD,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;KAC9C,CAAC,CAAC;IACH,OAAO;QACN,QAAQ;QACR,WAAW,EAAE,sCAAsC,CAAC,QAAQ,CAAC;QAC7D,WAAW,EAAE,eAAe;QAC5B,SAAS,EAAE,uBAAuB,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;QACzD,GAAG,CAAC,gBAAgB,KAAK,SAAS,IAAI,SAAS,KAAK,SAAS;YAC5D,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,YAAY,EAAE,0BAA0B,CAAC,EAAE,IAAI,EAAE,gBAAgB,CAAC,IAAI,EAAE,eAAe,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;QAC7G,UAAU,EAAE,wBAAwB,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,4BAA4B,CAAC,EAAE,CAAC;QACxG,iBAAiB,EAAE,wBAAwB,CAAC;YAC3C,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,eAAe,EAAE,4BAA4B,CAAC;SAC1E,CAAC;QACF,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC;YAClB,MAAM,WAAW,CAAC,KAAK,EAAE,CAAC;YAC1B,MAAM,eAAe,CAAC,KAAK,EAAE,CAAC;YAC9B,MAAM,gBAAgB,EAAE,KAAK,EAAE,CAAC;QAAA,CAChC;KACD,CAAC;AAAA,CACF","sourcesContent":["/**\n * Default CLI wiring for the plugin marketplace write side (P1-5): one\n * factory composes the disk install store, an optional HTTP registry origin,\n * the HTTP distribution host, and the persistent package install host into\n * the registry/installer/distribution surfaces the ecosystem CLI and the TUI\n * manager consume. Nothing here discovers keys or origins implicitly: the\n * registry origin comes from an explicit option or the\n * AGENT_FORGE_PLUGIN_REGISTRY_ORIGIN environment variable, and its absence\n * keeps disk-only semantics (install resolves to not_found, remove/rollback\n * and state management stay fully usable). Host injection always wins; the\n * factory is only invoked when no host-supplied boundary exists.\n */\n\nimport { join } from \"node:path\";\nimport { CONFIG_DIR_NAME } from \"../../config.ts\";\nimport { t } from \"../../core/i18n/index.ts\";\nimport type { PluginEcosystemRegistryV1 } from \"./cli.ts\";\nimport {\n\tDEFAULT_PLUGIN_STATE_FILE_V1,\n\tdefaultPluginHostFactsV1,\n\tdefaultPluginInstallStoreDirectoryV1,\n\tdefaultPluginInstallStoreInstanceRootV1,\n} from \"./default-active-bindings.ts\";\nimport { createPluginDistributionV1, type PluginDistributionV1 } from \"./distribution.ts\";\nimport { createPluginInstallerV1, type PluginInstallerV1 } from \"./installer.ts\";\nimport { createNodeDiskPluginRegistrySourceV1 } from \"./node-disk-registry-source.ts\";\nimport {\n\tcreateNodeHttpPluginDistributionHostV1,\n\ttype NodeHttpPluginDistributionHostV1,\n} from \"./node-distribution-host.ts\";\nimport {\n\tcreateNodePackageInstallHostV1,\n\tNodePackageInstallErrorV1,\n\ttype NodeZipPackageLimitsV1,\n} from \"./node-package-install-host.ts\";\nimport { createNodePluginAcquisitionHostV1, type NodePluginAcquisitionHostV1 } from \"./node-plugin-acquisition-host.ts\";\nimport { createNodePluginTrustRootV1, type NodePluginTrustRootKeyV1 } from \"./node-plugin-trust-root.ts\";\nimport { createNodeHttpPluginRegistrySourceV1 } from \"./node-registry-source.ts\";\nimport { createPluginRegistryV1, type PluginRegistrySourceV1, type PluginRegistryV1 } from \"./registry.ts\";\nimport { createPluginEcosystemRegistryAdapterV1 } from \"./registry-cli-adapter.ts\";\nimport { createPluginStateStoreV1, type PluginStateStoreV1 } from \"./state.ts\";\n\n/** Environment variable carrying the exact http(s) marketplace origin. */\nexport const DEFAULT_PLUGIN_REGISTRY_ORIGIN_ENV_V1 = \"AGENT_FORGE_PLUGIN_REGISTRY_ORIGIN\";\n\n/**\n * Environment variable carrying the Ed25519 trust root as a JSON array of\n * `{keyId, publicKeyPem}` entries. Downloads never verify without an explicit\n * trust root; there is no implicit key discovery.\n */\nexport const DEFAULT_PLUGIN_TRUST_KEYS_ENV_V1 = \"AGENT_FORGE_PLUGIN_TRUST_KEYS\";\n\n/** Registry document path below the configured origin. */\nexport const DEFAULT_PLUGIN_REGISTRY_PATH_V1 = \"/v1/plugin-registry.json\";\n\nexport interface DefaultPluginMarketOptionsV1 {\n\treadonly agentDir: string;\n\treadonly cwd: string;\n\t/** Exact http(s) registry origin; defaults to the environment variable. */\n\treadonly registryOrigin?: string;\n\t/** Explicit Ed25519 trust root; defaults to the environment variable. */\n\treadonly trustKeys?: readonly NodePluginTrustRootKeyV1[];\n\t/** Optional acquisition host override (tests); defaults to a real Node host. */\n\treadonly acquisition?: NodePluginAcquisitionHostV1;\n\t/** Optional package limits shared by acquisition and the install host; defaults apply. */\n\treadonly limits?: NodeZipPackageLimitsV1;\n\t/** Deterministic fetch replacement for tests. */\n\treadonly fetch?: typeof globalThis.fetch;\n}\n\nexport interface DefaultPluginMarketWiringV1 {\n\t/** Verified registry for the manager controller snapshot. */\n\treadonly registry: PluginRegistryV1;\n\t/** CLI-facing adapter over the same verified registry. */\n\treadonly cliRegistry: PluginEcosystemRegistryV1;\n\t/** Multi-source acquisition boundary for `plugin install <ref>`. */\n\treadonly acquisition: NodePluginAcquisitionHostV1;\n\treadonly installer: PluginInstallerV1;\n\t/** Present only when a registry origin is configured. */\n\treadonly distribution?: PluginDistributionV1;\n\treadonly stateStore: PluginStateStoreV1;\n\treadonly projectStateStore: PluginStateStoreV1;\n\t/** Releases the distribution host's cached artifacts when present. */\n\treadonly close: () => Promise<void>;\n}\n\n/**\n * Compose the default marketplace boundaries over one agent directory. The\n * disk install store is always part of the registry so installed plugins can\n * be listed, updated, and removed offline; a configured origin adds the HTTP\n * registry and package download. Installation failures surface structured\n * errors, never synthetic success.\n */\nexport async function createDefaultPluginMarketWiringV1(\n\toptions: DefaultPluginMarketOptionsV1,\n): Promise<DefaultPluginMarketWiringV1> {\n\tconst origin = (options.registryOrigin ?? process.env[DEFAULT_PLUGIN_REGISTRY_ORIGIN_ENV_V1])?.trim();\n\tconst effectiveOrigin = origin === \"\" ? undefined : origin;\n\tconst storeParent = defaultPluginInstallStoreDirectoryV1(options.agentDir);\n\t// The install host persists under this fixed subdirectory; the disk\n\t// registry source must read the same instance root to observe installs.\n\tconst instanceRoot = defaultPluginInstallStoreInstanceRootV1(options.agentDir);\n\tconst diskSource = createNodeDiskPluginRegistrySourceV1({ rootDirectory: instanceRoot });\n\tconst httpSource =\n\t\teffectiveOrigin === undefined\n\t\t\t? undefined\n\t\t\t: createNodeHttpPluginRegistrySourceV1({\n\t\t\t\t\turl: new URL(effectiveOrigin + DEFAULT_PLUGIN_REGISTRY_PATH_V1),\n\t\t\t\t\tallowedOrigins: [effectiveOrigin],\n\t\t\t\t\t...(options.fetch === undefined ? {} : { fetch: options.fetch }),\n\t\t\t\t});\n\tconst source: PluginRegistrySourceV1 = {\n\t\t...(httpSource === undefined ? {} : { source: httpSource.source }),\n\t\tlist: async ({ signal } = {}) => {\n\t\t\tconst disk = await diskSource.list({ signal });\n\t\t\tif (httpSource === undefined) return disk;\n\t\t\tconst remote = await httpSource.list({ signal });\n\t\t\treturn Object.freeze([...remote, ...disk]);\n\t\t},\n\t};\n\tconst distributionHost =\n\t\teffectiveOrigin === undefined\n\t\t\t? undefined\n\t\t\t: await createNodeHttpPluginDistributionHostV1({\n\t\t\t\t\tallowedOrigins: [effectiveOrigin],\n\t\t\t\t\tartifactDirectory: join(storeParent, \"distribution-cache-v1\"),\n\t\t\t\t\t...(options.fetch === undefined ? {} : { fetch: options.fetch }),\n\t\t\t\t});\n\tlet trustKeys = options.trustKeys;\n\tif (trustKeys === undefined && effectiveOrigin !== undefined) {\n\t\tconst raw = process.env[DEFAULT_PLUGIN_TRUST_KEYS_ENV_V1];\n\t\tif (raw !== undefined && raw.trim() !== \"\") {\n\t\t\tlet parsed: unknown;\n\t\t\ttry {\n\t\t\t\tparsed = JSON.parse(raw);\n\t\t\t} catch {\n\t\t\t\tthrow new Error(\n\t\t\t\t\tt(\"{env} must be a JSON array of {keyId, publicKeyPem}\", { env: DEFAULT_PLUGIN_TRUST_KEYS_ENV_V1 }),\n\t\t\t\t);\n\t\t\t}\n\t\t\tif (!Array.isArray(parsed))\n\t\t\t\tthrow new Error(t(\"{env} must be a JSON array\", { env: DEFAULT_PLUGIN_TRUST_KEYS_ENV_V1 }));\n\t\t\ttrustKeys = parsed as NodePluginTrustRootKeyV1[];\n\t\t}\n\t}\n\tconst trustRoot =\n\t\ttrustKeys === undefined || distributionHost === undefined\n\t\t\t? undefined\n\t\t\t: createNodePluginTrustRootV1({ keys: trustKeys });\n\t// Acquisition artifacts (npm/URL/local refs) and signed distribution\n\t// artifacts share one install host; ownership decides which reader serves.\n\tconst acquisitionHost =\n\t\toptions.acquisition ??\n\t\tcreateNodePluginAcquisitionHostV1({\n\t\t\t...(options.limits === undefined ? {} : { limits: options.limits }),\n\t\t\t...(options.fetch === undefined ? {} : { fetch: options.fetch }),\n\t\t});\n\tconst openArtifact: NodeHttpPluginDistributionHostV1[\"openArtifact\"] = (input) => {\n\t\tif (acquisitionHost.ownsArtifact(input.artifact)) return acquisitionHost.openArtifact(input);\n\t\tconst reader = distributionHost?.openArtifact;\n\t\tif (reader === undefined) throw new NodePackageInstallErrorV1(\"invalid_artifact\");\n\t\treturn reader(input);\n\t};\n\tconst installHost = await createNodePackageInstallHostV1({\n\t\topenArtifact,\n\t\tinstallationDirectory: storeParent,\n\t\tpersistence: \"persistent\",\n\t\tsupportedScopes: [\"global\", \"project\"],\n\t\t...(options.limits === undefined ? {} : { ...options.limits }),\n\t});\n\tconst registry = createPluginRegistryV1({\n\t\tsource,\n\t\thost: defaultPluginHostFactsV1(),\n\t\tverify: {\n\t\t\tverify: ({ manifestDigest, expectedDigest }) =>\n\t\t\t\texpectedDigest === undefined || expectedDigest === manifestDigest\n\t\t\t\t\t? { status: \"accepted\" }\n\t\t\t\t\t: { status: \"rejected\", reason: \"Manifest digest does not match the expected digest\" },\n\t\t},\n\t\tsourceVerifier: () => ({ status: \"accepted\" }),\n\t});\n\treturn {\n\t\tregistry,\n\t\tcliRegistry: createPluginEcosystemRegistryAdapterV1(registry),\n\t\tacquisition: acquisitionHost,\n\t\tinstaller: createPluginInstallerV1({ host: installHost }),\n\t\t...(distributionHost === undefined || trustRoot === undefined\n\t\t\t? {}\n\t\t\t: { distribution: createPluginDistributionV1({ host: distributionHost.host, verifySignature: trustRoot }) }),\n\t\tstateStore: createPluginStateStoreV1({ filePath: join(options.agentDir, DEFAULT_PLUGIN_STATE_FILE_V1) }),\n\t\tprojectStateStore: createPluginStateStoreV1({\n\t\t\tfilePath: join(options.cwd, CONFIG_DIR_NAME, DEFAULT_PLUGIN_STATE_FILE_V1),\n\t\t}),\n\t\tclose: async () => {\n\t\t\tawait installHost.close();\n\t\t\tawait acquisitionHost.close();\n\t\t\tawait distributionHost?.close();\n\t\t},\n\t};\n}\n"]}

package/dist/plugins/ecosystem/distribution.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"distribution.d.ts","sourceRoot":"","sources":["../../../src/plugins/ecosystem/distribution.ts"],"names":[],"mappings":"AAEA,sFAAsF;AACtF,eAAO,MAAM,uCAAuC,GAAa,CAAC;AAElE,yEAAyE;AACzE,eAAO,MAAM,2CAA2C,QAAY,CAAC;AACrE,iFAAiF;AACjF,eAAO,MAAM,sCAAsC,OAAO,CAAC;AAC3D,2DAA2D;AAC3D,eAAO,MAAM,yCAAyC,QAAY,CAAC;AACnE,6CAA6C;AAC7C,eAAO,MAAM,6CAA6C,OAAO,CAAC;AAClE,8FAA8F;AAC9F,eAAO,MAAM,yCAAyC,QAAoB,CAAC;AAE3E,wFAAwF;AACxF,MAAM,WAAW,8BAA8B;IAC9C,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC3B;AAED,mEAAmE;AACnE,MAAM,WAAW,4BAA4B;IAC5C,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC3B;AAED,kFAAkF;AAClF,MAAM,WAAW,kCAAkC;IAClD,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC3B;AAED,kGAAkG;AAClG,MAAM,WAAW,4BAA6B,SAAQ,4BAA4B;IACjF,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,8CAA8C;IAC9D,QAAQ,CAAC,UAAU,EAAE,8BAA8B,CAAC;CACpD;AAED,MAAM,MAAM,yCAAyC,GAClD;IAAE,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAA;CAAE,GAC/B;IAAE,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAE7D,MAAM,MAAM,qCAAqC,GAAG,CACnD,KAAK,EAAE,8CAA8C,KACjD,yCAAyC,GAAG,OAAO,CAAC,yCAAyC,CAAC,CAAC;AAEpG;;;;GAIG;AACH,MAAM,WAAW,wBAAwB;IACxC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC,KAAK,EAAE;QAClC,QAAQ,CAAC,UAAU,EAAE,8BAA8B,CAAC;QACpD,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;KAC9B,KAAK,OAAO,CAAC,4BAA4B,CAAC,CAAC;IAC5C,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC,KAAK,EAAE;QAClC,QAAQ,CAAC,UAAU,EAAE,8BAA8B,CAAC;QACpD,QAAQ,CAAC,QAAQ,EAAE,4BAA4B,CAAC;QAChD,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;KAC9B,KAAK,OAAO,CAAC,kCAAkC,CAAC,CAAC;IAClD,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC,KAAK,EAAE;QAClC,QAAQ,CAAC,QAAQ,EAAE,4BAA4B,CAAC;QAChD,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;KAC9B,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACpB;AAED,MAAM,WAAW,2BAA2B;IAC3C,QAAQ,CAAC,IAAI,CAAC,EAAE,wBAAwB,CAAC;IACzC,8EAA8E;IAC9E,QAAQ,CAAC,eAAe,CAAC,EAAE,qCAAqC,CAAC;IACjE,4DAA4D;IAC5D,QAAQ,CAAC,MAAM,CAAC,EAAE,qCAAqC,CAAC;IACxD,0EAA0E;IAC1E,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CAC5B;AAED,MAAM,MAAM,6BAA6B,GACtC,aAAa,GACb,WAAW,GACX,oBAAoB,GACpB,kBAAkB,GAClB,kBAAkB,GAClB,iBAAiB,GACjB,mBAAmB,GACnB,iBAAiB,GACjB,mBAAmB,GACnB,SAAS,GACT,eAAe,GACf,qBAAqB,GACrB,aAAa,GACb,gBAAgB,CAAC;AAmBpB,0FAA0F;AAC1F,qBAAa,yBAA0B,SAAQ,KAAK;IACnD,QAAQ,CAAC,IAAI,EAAE,6BAA6B,CAAC;IAE7C,YAAY,IAAI,EAAE,6BAA6B,EAI9C;CACD;AAED,MAAM,WAAW,oBAAoB;IACpC,gFAAgF;IAChF,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,8BAA8B,CAAC;IACnE,eAAe,CAAC,KAAK,EAAE;QAAE,UAAU,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,4BAA4B,CAAC,CAAC;IAC7G,eAAe,CAAC,KAAK,EAAE;QACtB,UAAU,EAAE,OAAO,CAAC;QACpB,QAAQ,CAAC,EAAE,OAAO,CAAC;QACnB,MAAM,CAAC,EAAE,WAAW,CAAC;KACrB,GAAG,OAAO,CAAC,4BAA4B,CAAC,CAAC;IAC1C,eAAe,CAAC,KAAK,EAAE;QAAE,QAAQ,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACnF;AAuPD,kGAAkG;AAClG,wBAAgB,0BAA0B,CAAC,OAAO,GAAE,2BAAgC,GAAG,oBAAoB,CAkG1G","sourcesContent":["import { detachedFreeze, isPlainRecord } from \"@agent-forge/plugin-sdk\";\n\n/** Distribution contract version. The host and package must agree on this version. */\nexport const PLUGIN_DISTRIBUTION_CONTRACT_VERSION_V1 = 1 as const;\n\n/** Maximum serialized descriptor size crossing the registry boundary. */\nexport const MAX_PLUGIN_DISTRIBUTION_DESCRIPTOR_BYTES_V1 = 16 * 1024;\n/** Maximum length of identity, URI, digest, signature, and media-type fields. */\nexport const MAX_PLUGIN_DISTRIBUTION_FIELD_CHARS_V1 = 2048;\n/** Maximum descriptor metadata size returned by a host. */\nexport const MAX_PLUGIN_DISTRIBUTION_METADATA_BYTES_V1 = 16 * 1024;\n/** Maximum opaque artifact handle length. */\nexport const MAX_PLUGIN_DISTRIBUTION_ARTIFACT_REF_CHARS_V1 = 2048;\n/** Maximum package size accepted by this contract. Larger artifacts need a newer contract. */\nexport const MAX_PLUGIN_DISTRIBUTION_ARTIFACT_BYTES_V1 = 512 * 1024 * 1024;\n\n/** A signed, bounded package descriptor. It contains no package bytes or local path. */\nexport interface PluginDistributionDescriptorV1 {\n\treadonly version: 1;\n\treadonly source: string;\n\treadonly pluginId: string;\n\treadonly pluginVersion: string;\n\treadonly manifestDigest: string;\n\treadonly artifactDigest: string;\n\treadonly signature: string;\n\treadonly expiresAt: string;\n\treadonly sizeBytes: number;\n\treadonly mediaType: string;\n}\n\n/** Metadata resolved by a host before any artifact is acquired. */\nexport interface PluginDistributionMetadataV1 {\n\treadonly version: 1;\n\treadonly source: string;\n\treadonly pluginId: string;\n\treadonly pluginVersion: string;\n\treadonly manifestDigest: string;\n\treadonly artifactDigest: string;\n\treadonly expiresAt: string;\n\treadonly sizeBytes: number;\n\treadonly mediaType: string;\n}\n\n/** Host-owned acquisition result. `artifactRef` is opaque and is never a path. */\nexport interface PluginDistributionArtifactHandleV1 {\n\treadonly artifactRef: string;\n\treadonly artifactDigest: string;\n\treadonly sizeBytes: number;\n\treadonly mediaType: string;\n}\n\n/** Model-facing acquisition projection. It deliberately contains no bytes or metadata payload. */\nexport interface PluginDistributionArtifactV1 extends PluginDistributionMetadataV1 {\n\treadonly artifactRef: string;\n}\n\nexport interface PluginDistributionSignatureVerificationInputV1 {\n\treadonly descriptor: PluginDistributionDescriptorV1;\n}\n\nexport type PluginDistributionSignatureVerificationV1 =\n\t| { readonly status: \"accepted\" }\n\t| { readonly status: \"rejected\"; readonly reason?: string };\n\nexport type PluginDistributionSignatureVerifierV1 = (\n\tinput: PluginDistributionSignatureVerificationInputV1,\n) => PluginDistributionSignatureVerificationV1 | Promise<PluginDistributionSignatureVerificationV1>;\n\n/**\n * Host boundary for registry metadata and package bytes. The core never opens a\n * URL, reads a path, or receives package bytes; hosts return only bounded metadata\n * and opaque artifact references.\n */\nexport interface PluginDistributionHostV1 {\n\treadonly resolveMetadata?: (input: {\n\t\treadonly descriptor: PluginDistributionDescriptorV1;\n\t\treadonly signal?: AbortSignal;\n\t}) => Promise<PluginDistributionMetadataV1>;\n\treadonly acquireArtifact?: (input: {\n\t\treadonly descriptor: PluginDistributionDescriptorV1;\n\t\treadonly metadata: PluginDistributionMetadataV1;\n\t\treadonly signal?: AbortSignal;\n\t}) => Promise<PluginDistributionArtifactHandleV1>;\n\treadonly releaseArtifact?: (input: {\n\t\treadonly artifact: PluginDistributionArtifactV1;\n\t\treadonly signal?: AbortSignal;\n\t}) => Promise<void>;\n}\n\nexport interface PluginDistributionOptionsV1 {\n\treadonly host?: PluginDistributionHostV1;\n\t/** Required for trust. There is no implicit signature acceptance fallback. */\n\treadonly verifySignature?: PluginDistributionSignatureVerifierV1;\n\t/** Alias for callers using the registry verifier naming. */\n\treadonly verify?: PluginDistributionSignatureVerifierV1;\n\t/** Injected clock for deterministic tests; returns epoch milliseconds. */\n\treadonly now?: () => number;\n}\n\nexport type PluginDistributionErrorCodeV1 =\n\t| \"unsupported\"\n\t| \"cancelled\"\n\t| \"invalid_descriptor\"\n\t| \"invalid_metadata\"\n\t| \"invalid_artifact\"\n\t| \"source_mismatch\"\n\t| \"identity_mismatch\"\n\t| \"digest_mismatch\"\n\t| \"signature_invalid\"\n\t| \"expired\"\n\t| \"size_mismatch\"\n\t| \"media_type_mismatch\"\n\t| \"host_failed\"\n\t| \"release_failed\";\n\nconst ERROR_MESSAGES: Readonly<Record<PluginDistributionErrorCodeV1, string>> = {\n\tunsupported: \"Plugin distribution is unsupported on this host\",\n\tcancelled: \"Plugin distribution operation was cancelled\",\n\tinvalid_descriptor: \"Plugin distribution descriptor is invalid\",\n\tinvalid_metadata: \"Plugin distribution metadata is invalid\",\n\tinvalid_artifact: \"Plugin distribution artifact handle is invalid\",\n\tsource_mismatch: \"Plugin distribution source does not match the descriptor\",\n\tidentity_mismatch: \"Plugin distribution plugin identity does not match the descriptor\",\n\tdigest_mismatch: \"Plugin distribution digest does not match the descriptor\",\n\tsignature_invalid: \"Plugin distribution signature was rejected\",\n\texpired: \"Plugin distribution descriptor has expired\",\n\tsize_mismatch: \"Plugin distribution size does not match the descriptor\",\n\tmedia_type_mismatch: \"Plugin distribution media type does not match the descriptor\",\n\thost_failed: \"Plugin distribution host operation failed\",\n\trelease_failed: \"Plugin distribution artifact release failed\",\n};\n\n/** Stable, non-leaking distribution error. Host exception messages are never retained. */\nexport class PluginDistributionErrorV1 extends Error {\n\treadonly code: PluginDistributionErrorCodeV1;\n\n\tconstructor(code: PluginDistributionErrorCodeV1) {\n\t\tsuper(ERROR_MESSAGES[code]);\n\t\tthis.name = \"PluginDistributionErrorV1\";\n\t\tthis.code = code;\n\t}\n}\n\nexport interface PluginDistributionV1 {\n\t/** Validate and detach a descriptor before passing it to a host or verifier. */\n\tvalidateDescriptor(input: unknown): PluginDistributionDescriptorV1;\n\tresolveMetadata(input: { descriptor: unknown; signal?: AbortSignal }): Promise<PluginDistributionMetadataV1>;\n\tacquireArtifact(input: {\n\t\tdescriptor: unknown;\n\t\tmetadata?: unknown;\n\t\tsignal?: AbortSignal;\n\t}): Promise<PluginDistributionArtifactV1>;\n\treleaseArtifact(input: { artifact: unknown; signal?: AbortSignal }): Promise<void>;\n}\n\nconst DESCRIPTOR_KEYS = [\n\t\"version\",\n\t\"source\",\n\t\"pluginId\",\n\t\"pluginVersion\",\n\t\"manifestDigest\",\n\t\"artifactDigest\",\n\t\"signature\",\n\t\"expiresAt\",\n\t\"sizeBytes\",\n\t\"mediaType\",\n] as const;\nconst METADATA_KEYS = [\n\t\"version\",\n\t\"source\",\n\t\"pluginId\",\n\t\"pluginVersion\",\n\t\"manifestDigest\",\n\t\"artifactDigest\",\n\t\"expiresAt\",\n\t\"sizeBytes\",\n\t\"mediaType\",\n] as const;\nconst ARTIFACT_KEYS = [\"artifactRef\", \"artifactDigest\", \"sizeBytes\", \"mediaType\"] as const;\n\nfunction reject(code: PluginDistributionErrorCodeV1): never {\n\tthrow new PluginDistributionErrorV1(code);\n}\n\nfunction hasExactKeys(value: Record<string, unknown>, keys: readonly string[]): boolean {\n\tconst expected = new Set(keys);\n\treturn (\n\t\tObject.keys(value).every((key) => expected.has(key) && expected.size === keys.length) &&\n\t\tkeys.every((key) => key in value)\n\t);\n}\n\nfunction boundedString(value: unknown, code: PluginDistributionErrorCodeV1): string {\n\tif (\n\t\ttypeof value !== \"string\" ||\n\t\tvalue.trim().length === 0 ||\n\t\tvalue.length > MAX_PLUGIN_DISTRIBUTION_FIELD_CHARS_V1 ||\n\t\t/[\\u0000-\\u001f\\u007f]/u.test(value)\n\t) {\n\t\treject(code);\n\t}\n\treturn value;\n}\n\nfunction identityString(value: unknown, code: PluginDistributionErrorCodeV1): string {\n\tconst result = boundedString(value, code);\n\tif (/\\s/u.test(result)) reject(code);\n\treturn result;\n}\n\nfunction sourceString(value: unknown, code: PluginDistributionErrorCodeV1): string {\n\tconst source = boundedString(value, code);\n\tif (/\\s/u.test(source) || /^(?:file:|[a-zA-Z]:[\\\\/]|[\\\\/]{1,2}|\\\\\\\\)/iu.test(source)) reject(code);\n\tif (/^https?:\\/\\//iu.test(source)) {\n\t\ttry {\n\t\t\tconst parsed = new URL(source);\n\t\t\tif (parsed.username !== \"\" || parsed.password !== \"\") {\n\t\t\t\tparsed.username = \"\";\n\t\t\t\tparsed.password = \"\";\n\t\t\t}\n\t\t\tparsed.search = \"\";\n\t\t\tparsed.hash = \"\";\n\t\t\tconst pathname = parsed.pathname.length > 512 ? `${parsed.pathname.slice(0, 509)}...` : parsed.pathname;\n\t\t\treturn `${parsed.origin}${pathname || \"/\"}`;\n\t\t} catch {\n\t\t\treject(code);\n\t\t}\n\t}\n\treturn source;\n}\n\nfunction digestString(value: unknown, code: PluginDistributionErrorCodeV1): string {\n\tconst digest = identityString(value, code);\n\t// Hosts may use a cryptographic digest or a versioned digest token. The\n\t// boundary validates shape and equality; only the host can verify bytes.\n\tif (!/^(?:[a-z][a-z0-9+.-]{0,15}:[A-Za-z0-9._~-]{1,128}|[0-9a-f]{16,128})$/u.test(digest)) reject(code);\n\treturn digest;\n}\n\nfunction signatureString(value: unknown): string {\n\tconst signature = boundedString(value, \"invalid_descriptor\");\n\tif (signature.length > 512 || /\\s/u.test(signature)) reject(\"invalid_descriptor\");\n\treturn signature;\n}\n\nfunction expiryString(value: unknown, code: PluginDistributionErrorCodeV1): string {\n\tconst expiry = boundedString(value, code);\n\tif (!/^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}(?:\\.\\d{3})?Z$/u.test(expiry)) reject(code);\n\tconst timestamp = Date.parse(expiry);\n\tif (!Number.isFinite(timestamp) || new Date(timestamp).toISOString() !== expiry) reject(code);\n\treturn expiry;\n}\n\nfunction positiveSize(value: unknown, code: PluginDistributionErrorCodeV1): number {\n\tif (\n\t\ttypeof value !== \"number\" ||\n\t\t!Number.isSafeInteger(value) ||\n\t\tvalue < 1 ||\n\t\tvalue > MAX_PLUGIN_DISTRIBUTION_ARTIFACT_BYTES_V1\n\t)\n\t\treject(code);\n\treturn value;\n}\n\nfunction mediaTypeString(value: unknown, code: PluginDistributionErrorCodeV1): string {\n\tconst mediaType = boundedString(value, code).toLowerCase();\n\tif (\n\t\tmediaType.length > 256 ||\n\t\t!/^[a-z0-9!#$&^_.+-]+\\/[a-z0-9!#$&^_.+-]+(?:\\s*;\\s*[a-z0-9!#$&^_.+-]+=[a-z0-9!#$&^_.+-]+)*$/u.test(mediaType)\n\t)\n\t\treject(code);\n\treturn mediaType;\n}\n\nfunction serializedBytes(value: unknown, code: PluginDistributionErrorCodeV1): number {\n\ttry {\n\t\tconst serialized = JSON.stringify(value);\n\t\tif (serialized === undefined) reject(code);\n\t\treturn new TextEncoder().encode(serialized).byteLength;\n\t} catch {\n\t\treject(code);\n\t}\n}\n\nfunction descriptorValue(value: unknown): PluginDistributionDescriptorV1 {\n\tif (!isPlainRecord(value) || !hasExactKeys(value, DESCRIPTOR_KEYS)) reject(\"invalid_descriptor\");\n\tif (value.version !== PLUGIN_DISTRIBUTION_CONTRACT_VERSION_V1) reject(\"invalid_descriptor\");\n\tconst descriptor = {\n\t\tversion: PLUGIN_DISTRIBUTION_CONTRACT_VERSION_V1,\n\t\tsource: sourceString(value.source, \"invalid_descriptor\"),\n\t\tpluginId: identityString(value.pluginId, \"invalid_descriptor\"),\n\t\tpluginVersion: identityString(value.pluginVersion, \"invalid_descriptor\"),\n\t\tmanifestDigest: digestString(value.manifestDigest, \"invalid_descriptor\"),\n\t\tartifactDigest: digestString(value.artifactDigest, \"invalid_descriptor\"),\n\t\tsignature: signatureString(value.signature),\n\t\texpiresAt: expiryString(value.expiresAt, \"invalid_descriptor\"),\n\t\tsizeBytes: positiveSize(value.sizeBytes, \"invalid_descriptor\"),\n\t\tmediaType: mediaTypeString(value.mediaType, \"invalid_descriptor\"),\n\t};\n\tif (serializedBytes(descriptor, \"invalid_descriptor\") > MAX_PLUGIN_DISTRIBUTION_DESCRIPTOR_BYTES_V1)\n\t\treject(\"invalid_descriptor\");\n\treturn detachedFreeze(descriptor);\n}\n\nfunction metadataValue(value: unknown): PluginDistributionMetadataV1 {\n\tif (!isPlainRecord(value) || !hasExactKeys(value, METADATA_KEYS)) reject(\"invalid_metadata\");\n\tif (value.version !== PLUGIN_DISTRIBUTION_CONTRACT_VERSION_V1) reject(\"invalid_metadata\");\n\tconst metadata = {\n\t\tversion: PLUGIN_DISTRIBUTION_CONTRACT_VERSION_V1,\n\t\tsource: sourceString(value.source, \"invalid_metadata\"),\n\t\tpluginId: identityString(value.pluginId, \"invalid_metadata\"),\n\t\tpluginVersion: identityString(value.pluginVersion, \"invalid_metadata\"),\n\t\tmanifestDigest: digestString(value.manifestDigest, \"invalid_metadata\"),\n\t\tartifactDigest: digestString(value.artifactDigest, \"invalid_metadata\"),\n\t\texpiresAt: expiryString(value.expiresAt, \"invalid_metadata\"),\n\t\tsizeBytes: positiveSize(value.sizeBytes, \"invalid_metadata\"),\n\t\tmediaType: mediaTypeString(value.mediaType, \"invalid_metadata\"),\n\t};\n\tif (serializedBytes(metadata, \"invalid_metadata\") > MAX_PLUGIN_DISTRIBUTION_METADATA_BYTES_V1)\n\t\treject(\"invalid_metadata\");\n\treturn detachedFreeze(metadata);\n}\n\nfunction artifactHandleValue(value: unknown): PluginDistributionArtifactHandleV1 {\n\tif (!isPlainRecord(value) || !hasExactKeys(value, ARTIFACT_KEYS)) reject(\"invalid_artifact\");\n\tconst artifact = {\n\t\tartifactRef: boundedString(value.artifactRef, \"invalid_artifact\"),\n\t\tartifactDigest: digestString(value.artifactDigest, \"invalid_artifact\"),\n\t\tsizeBytes: positiveSize(value.sizeBytes, \"invalid_artifact\"),\n\t\tmediaType: mediaTypeString(value.mediaType, \"invalid_artifact\"),\n\t};\n\tif (\n\t\t/[\\s\\u0000-\\u001f\\u007f]/u.test(artifact.artifactRef) ||\n\t\t/^(?:file:|[a-zA-Z]:[\\\\/]|[\\\\/]{1,2}|\\\\\\\\)/iu.test(artifact.artifactRef) ||\n\t\tartifact.artifactRef.length > MAX_PLUGIN_DISTRIBUTION_ARTIFACT_REF_CHARS_V1\n\t)\n\t\treject(\"invalid_artifact\");\n\treturn detachedFreeze(artifact);\n}\n\nfunction assertDescriptorMetadataMatch(\n\tdescriptor: PluginDistributionDescriptorV1,\n\tmetadata: PluginDistributionMetadataV1,\n): void {\n\tif (metadata.source !== descriptor.source) reject(\"source_mismatch\");\n\tif (metadata.pluginId !== descriptor.pluginId || metadata.pluginVersion !== descriptor.pluginVersion)\n\t\treject(\"identity_mismatch\");\n\tif (metadata.manifestDigest !== descriptor.manifestDigest || metadata.artifactDigest !== descriptor.artifactDigest)\n\t\treject(\"digest_mismatch\");\n\tif (metadata.expiresAt !== descriptor.expiresAt) reject(\"expired\");\n\tif (metadata.sizeBytes !== descriptor.sizeBytes) reject(\"size_mismatch\");\n\tif (metadata.mediaType !== descriptor.mediaType) reject(\"media_type_mismatch\");\n}\n\nfunction assertArtifactMatch(\n\tdescriptor: PluginDistributionDescriptorV1,\n\tartifact: PluginDistributionArtifactHandleV1,\n): void {\n\tif (artifact.artifactDigest !== descriptor.artifactDigest) reject(\"digest_mismatch\");\n\tif (artifact.sizeBytes !== descriptor.sizeBytes) reject(\"size_mismatch\");\n\tif (artifact.mediaType !== descriptor.mediaType) reject(\"media_type_mismatch\");\n}\n\nfunction isCancelled(error: unknown, signal: AbortSignal | undefined): boolean {\n\treturn (\n\t\tsignal?.aborted === true ||\n\t\t(error instanceof Error && (error.name === \"AbortError\" || error.name === \"AbortSignalError\"))\n\t);\n}\n\nfunction assertNotExpired(descriptor: PluginDistributionDescriptorV1, now: () => number): void {\n\tlet current: number;\n\ttry {\n\t\tcurrent = now();\n\t} catch {\n\t\treject(\"expired\");\n\t}\n\tif (!Number.isFinite(current)) reject(\"expired\");\n\tif (Date.parse(descriptor.expiresAt) <= current) reject(\"expired\");\n}\n\nasync function verifyDescriptor(\n\tdescriptor: PluginDistributionDescriptorV1,\n\tverifySignature: PluginDistributionSignatureVerifierV1 | undefined,\n\tnow: () => number,\n\tsignal: AbortSignal | undefined,\n): Promise<void> {\n\tif (signal?.aborted) reject(\"cancelled\");\n\tassertNotExpired(descriptor, now);\n\tif (verifySignature === undefined) reject(\"unsupported\");\n\tlet verification: PluginDistributionSignatureVerificationV1;\n\ttry {\n\t\tverification = await verifySignature({ descriptor });\n\t} catch {\n\t\treject(\"signature_invalid\");\n\t}\n\tif (signal?.aborted) reject(\"cancelled\");\n\tif (!isPlainRecord(verification) || verification.status !== \"accepted\") reject(\"signature_invalid\");\n}\n\n/** Create a host-injected distribution client. No host means all side effects are unsupported. */\nexport function createPluginDistributionV1(options: PluginDistributionOptionsV1 = {}): PluginDistributionV1 {\n\tconst verifySignature = options.verifySignature ?? options.verify;\n\tconst now = options.now ?? (() => Date.now());\n\tconst resolveMetadataForDescriptor = async (\n\t\tdescriptor: PluginDistributionDescriptorV1,\n\t\tsignal: AbortSignal | undefined,\n\t): Promise<PluginDistributionMetadataV1> => {\n\t\tif (signal?.aborted) reject(\"cancelled\");\n\t\tif (options.host?.resolveMetadata === undefined) reject(\"unsupported\");\n\t\tlet result: PluginDistributionMetadataV1;\n\t\ttry {\n\t\t\tresult = await options.host.resolveMetadata({ descriptor, signal });\n\t\t} catch (error) {\n\t\t\tif (isCancelled(error, signal)) reject(\"cancelled\");\n\t\t\treject(\"host_failed\");\n\t\t}\n\t\tif (signal?.aborted) reject(\"cancelled\");\n\t\tconst metadata = metadataValue(result);\n\t\tassertDescriptorMetadataMatch(descriptor, metadata);\n\t\tassertNotExpired(descriptor, now);\n\t\treturn metadata;\n\t};\n\n\tconst resolveMetadata = async (input: {\n\t\tdescriptor: unknown;\n\t\tsignal?: AbortSignal;\n\t}): Promise<PluginDistributionMetadataV1> => {\n\t\tconst descriptor = descriptorValue(input.descriptor);\n\t\tawait verifyDescriptor(descriptor, verifySignature, now, input.signal);\n\t\treturn resolveMetadataForDescriptor(descriptor, input.signal);\n\t};\n\n\tconst acquireArtifact = async (input: {\n\t\tdescriptor: unknown;\n\t\tmetadata?: unknown;\n\t\tsignal?: AbortSignal;\n\t}): Promise<PluginDistributionArtifactV1> => {\n\t\tconst descriptor = descriptorValue(input.descriptor);\n\t\tawait verifyDescriptor(descriptor, verifySignature, now, input.signal);\n\t\tif (options.host?.acquireArtifact === undefined) reject(\"unsupported\");\n\t\tconst metadata =\n\t\t\tinput.metadata === undefined\n\t\t\t\t? await resolveMetadataForDescriptor(descriptor, input.signal)\n\t\t\t\t: metadataValue(input.metadata);\n\t\tassertDescriptorMetadataMatch(descriptor, metadata);\n\t\tassertNotExpired(descriptor, now);\n\t\tlet result: PluginDistributionArtifactHandleV1;\n\t\tlet acquired: PluginDistributionArtifactV1 | undefined;\n\t\ttry {\n\t\t\tresult = await options.host.acquireArtifact({ descriptor, metadata, signal: input.signal });\n\t\t\tconst handle = artifactHandleValue(result);\n\t\t\tacquired = detachedFreeze({ ...metadata, artifactRef: handle.artifactRef });\n\t\t\tassertArtifactMatch(descriptor, handle);\n\t\t\tassertNotExpired(descriptor, now);\n\t\t\tif (input.signal?.aborted) reject(\"cancelled\");\n\t\t\treturn acquired;\n\t\t} catch (error) {\n\t\t\tif (acquired !== undefined && options.host.releaseArtifact !== undefined) {\n\t\t\t\tawait options.host.releaseArtifact({ artifact: acquired }).catch(() => undefined);\n\t\t\t}\n\t\t\tif (error instanceof PluginDistributionErrorV1) throw error;\n\t\t\tif (isCancelled(error, input.signal)) reject(\"cancelled\");\n\t\t\treject(\"host_failed\");\n\t\t}\n\t};\n\n\tconst releaseArtifact = async (input: { artifact: unknown; signal?: AbortSignal }): Promise<void> => {\n\t\tif (input.signal?.aborted) reject(\"cancelled\");\n\t\tif (options.host?.releaseArtifact === undefined) reject(\"unsupported\");\n\t\tconst value = input.artifact;\n\t\tif (!isPlainRecord(value) || !hasExactKeys(value, [...METADATA_KEYS, \"artifactRef\"])) reject(\"invalid_artifact\");\n\t\tconst metadataInput = Object.fromEntries(METADATA_KEYS.map((key) => [key, value[key]]));\n\t\tconst artifact = {\n\t\t\t...metadataValue(metadataInput),\n\t\t\tartifactRef: artifactHandleValue({\n\t\t\t\tartifactRef: value.artifactRef,\n\t\t\t\tartifactDigest: value.artifactDigest,\n\t\t\t\tsizeBytes: value.sizeBytes,\n\t\t\t\tmediaType: value.mediaType,\n\t\t\t}).artifactRef,\n\t\t};\n\t\ttry {\n\t\t\tawait options.host.releaseArtifact({ artifact: detachedFreeze(artifact), signal: input.signal });\n\t\t} catch (error) {\n\t\t\tif (isCancelled(error, input.signal)) reject(\"cancelled\");\n\t\t\treject(\"release_failed\");\n\t\t}\n\t\tif (input.signal?.aborted) reject(\"cancelled\");\n\t};\n\n\treturn {\n\t\tvalidateDescriptor(input) {\n\t\t\treturn descriptorValue(input);\n\t\t},\n\t\tresolveMetadata,\n\t\tacquireArtifact,\n\t\treleaseArtifact,\n\t};\n}\n"]}
+{"version":3,"file":"distribution.d.ts","sourceRoot":"","sources":["../../../src/plugins/ecosystem/distribution.ts"],"names":[],"mappings":"AAGA,sFAAsF;AACtF,eAAO,MAAM,uCAAuC,GAAa,CAAC;AAElE,yEAAyE;AACzE,eAAO,MAAM,2CAA2C,QAAY,CAAC;AACrE,iFAAiF;AACjF,eAAO,MAAM,sCAAsC,OAAO,CAAC;AAC3D,2DAA2D;AAC3D,eAAO,MAAM,yCAAyC,QAAY,CAAC;AACnE,6CAA6C;AAC7C,eAAO,MAAM,6CAA6C,OAAO,CAAC;AAClE,8FAA8F;AAC9F,eAAO,MAAM,yCAAyC,QAAoB,CAAC;AAE3E,wFAAwF;AACxF,MAAM,WAAW,8BAA8B;IAC9C,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC3B;AAED,mEAAmE;AACnE,MAAM,WAAW,4BAA4B;IAC5C,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC3B;AAED,kFAAkF;AAClF,MAAM,WAAW,kCAAkC;IAClD,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC3B;AAED,kGAAkG;AAClG,MAAM,WAAW,4BAA6B,SAAQ,4BAA4B;IACjF,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,8CAA8C;IAC9D,QAAQ,CAAC,UAAU,EAAE,8BAA8B,CAAC;CACpD;AAED,MAAM,MAAM,yCAAyC,GAClD;IAAE,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAA;CAAE,GAC/B;IAAE,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAE7D,MAAM,MAAM,qCAAqC,GAAG,CACnD,KAAK,EAAE,8CAA8C,KACjD,yCAAyC,GAAG,OAAO,CAAC,yCAAyC,CAAC,CAAC;AAEpG;;;;GAIG;AACH,MAAM,WAAW,wBAAwB;IACxC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC,KAAK,EAAE;QAClC,QAAQ,CAAC,UAAU,EAAE,8BAA8B,CAAC;QACpD,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;KAC9B,KAAK,OAAO,CAAC,4BAA4B,CAAC,CAAC;IAC5C,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC,KAAK,EAAE;QAClC,QAAQ,CAAC,UAAU,EAAE,8BAA8B,CAAC;QACpD,QAAQ,CAAC,QAAQ,EAAE,4BAA4B,CAAC;QAChD,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;KAC9B,KAAK,OAAO,CAAC,kCAAkC,CAAC,CAAC;IAClD,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC,KAAK,EAAE;QAClC,QAAQ,CAAC,QAAQ,EAAE,4BAA4B,CAAC;QAChD,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;KAC9B,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACpB;AAED,MAAM,WAAW,2BAA2B;IAC3C,QAAQ,CAAC,IAAI,CAAC,EAAE,wBAAwB,CAAC;IACzC,8EAA8E;IAC9E,QAAQ,CAAC,eAAe,CAAC,EAAE,qCAAqC,CAAC;IACjE,4DAA4D;IAC5D,QAAQ,CAAC,MAAM,CAAC,EAAE,qCAAqC,CAAC;IACxD,0EAA0E;IAC1E,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CAC5B;AAED,MAAM,MAAM,6BAA6B,GACtC,aAAa,GACb,WAAW,GACX,oBAAoB,GACpB,kBAAkB,GAClB,kBAAkB,GAClB,iBAAiB,GACjB,mBAAmB,GACnB,iBAAiB,GACjB,mBAAmB,GACnB,SAAS,GACT,eAAe,GACf,qBAAqB,GACrB,aAAa,GACb,gBAAgB,CAAC;AAmBpB,0FAA0F;AAC1F,qBAAa,yBAA0B,SAAQ,KAAK;IACnD,QAAQ,CAAC,IAAI,EAAE,6BAA6B,CAAC;IAE7C,YAAY,IAAI,EAAE,6BAA6B,EAI9C;CACD;AAED,MAAM,WAAW,oBAAoB;IACpC,gFAAgF;IAChF,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,8BAA8B,CAAC;IACnE,eAAe,CAAC,KAAK,EAAE;QAAE,UAAU,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,4BAA4B,CAAC,CAAC;IAC7G,eAAe,CAAC,KAAK,EAAE;QACtB,UAAU,EAAE,OAAO,CAAC;QACpB,QAAQ,CAAC,EAAE,OAAO,CAAC;QACnB,MAAM,CAAC,EAAE,WAAW,CAAC;KACrB,GAAG,OAAO,CAAC,4BAA4B,CAAC,CAAC;IAC1C,eAAe,CAAC,KAAK,EAAE;QAAE,QAAQ,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACnF;AAuPD,kGAAkG;AAClG,wBAAgB,0BAA0B,CAAC,OAAO,GAAE,2BAAgC,GAAG,oBAAoB,CAkG1G","sourcesContent":["import { detachedFreeze, isPlainRecord } from \"@agent-forge/plugin-sdk\";\nimport { t } from \"../../core/i18n/index.ts\";\n\n/** Distribution contract version. The host and package must agree on this version. */\nexport const PLUGIN_DISTRIBUTION_CONTRACT_VERSION_V1 = 1 as const;\n\n/** Maximum serialized descriptor size crossing the registry boundary. */\nexport const MAX_PLUGIN_DISTRIBUTION_DESCRIPTOR_BYTES_V1 = 16 * 1024;\n/** Maximum length of identity, URI, digest, signature, and media-type fields. */\nexport const MAX_PLUGIN_DISTRIBUTION_FIELD_CHARS_V1 = 2048;\n/** Maximum descriptor metadata size returned by a host. */\nexport const MAX_PLUGIN_DISTRIBUTION_METADATA_BYTES_V1 = 16 * 1024;\n/** Maximum opaque artifact handle length. */\nexport const MAX_PLUGIN_DISTRIBUTION_ARTIFACT_REF_CHARS_V1 = 2048;\n/** Maximum package size accepted by this contract. Larger artifacts need a newer contract. */\nexport const MAX_PLUGIN_DISTRIBUTION_ARTIFACT_BYTES_V1 = 512 * 1024 * 1024;\n\n/** A signed, bounded package descriptor. It contains no package bytes or local path. */\nexport interface PluginDistributionDescriptorV1 {\n\treadonly version: 1;\n\treadonly source: string;\n\treadonly pluginId: string;\n\treadonly pluginVersion: string;\n\treadonly manifestDigest: string;\n\treadonly artifactDigest: string;\n\treadonly signature: string;\n\treadonly expiresAt: string;\n\treadonly sizeBytes: number;\n\treadonly mediaType: string;\n}\n\n/** Metadata resolved by a host before any artifact is acquired. */\nexport interface PluginDistributionMetadataV1 {\n\treadonly version: 1;\n\treadonly source: string;\n\treadonly pluginId: string;\n\treadonly pluginVersion: string;\n\treadonly manifestDigest: string;\n\treadonly artifactDigest: string;\n\treadonly expiresAt: string;\n\treadonly sizeBytes: number;\n\treadonly mediaType: string;\n}\n\n/** Host-owned acquisition result. `artifactRef` is opaque and is never a path. */\nexport interface PluginDistributionArtifactHandleV1 {\n\treadonly artifactRef: string;\n\treadonly artifactDigest: string;\n\treadonly sizeBytes: number;\n\treadonly mediaType: string;\n}\n\n/** Model-facing acquisition projection. It deliberately contains no bytes or metadata payload. */\nexport interface PluginDistributionArtifactV1 extends PluginDistributionMetadataV1 {\n\treadonly artifactRef: string;\n}\n\nexport interface PluginDistributionSignatureVerificationInputV1 {\n\treadonly descriptor: PluginDistributionDescriptorV1;\n}\n\nexport type PluginDistributionSignatureVerificationV1 =\n\t| { readonly status: \"accepted\" }\n\t| { readonly status: \"rejected\"; readonly reason?: string };\n\nexport type PluginDistributionSignatureVerifierV1 = (\n\tinput: PluginDistributionSignatureVerificationInputV1,\n) => PluginDistributionSignatureVerificationV1 | Promise<PluginDistributionSignatureVerificationV1>;\n\n/**\n * Host boundary for registry metadata and package bytes. The core never opens a\n * URL, reads a path, or receives package bytes; hosts return only bounded metadata\n * and opaque artifact references.\n */\nexport interface PluginDistributionHostV1 {\n\treadonly resolveMetadata?: (input: {\n\t\treadonly descriptor: PluginDistributionDescriptorV1;\n\t\treadonly signal?: AbortSignal;\n\t}) => Promise<PluginDistributionMetadataV1>;\n\treadonly acquireArtifact?: (input: {\n\t\treadonly descriptor: PluginDistributionDescriptorV1;\n\t\treadonly metadata: PluginDistributionMetadataV1;\n\t\treadonly signal?: AbortSignal;\n\t}) => Promise<PluginDistributionArtifactHandleV1>;\n\treadonly releaseArtifact?: (input: {\n\t\treadonly artifact: PluginDistributionArtifactV1;\n\t\treadonly signal?: AbortSignal;\n\t}) => Promise<void>;\n}\n\nexport interface PluginDistributionOptionsV1 {\n\treadonly host?: PluginDistributionHostV1;\n\t/** Required for trust. There is no implicit signature acceptance fallback. */\n\treadonly verifySignature?: PluginDistributionSignatureVerifierV1;\n\t/** Alias for callers using the registry verifier naming. */\n\treadonly verify?: PluginDistributionSignatureVerifierV1;\n\t/** Injected clock for deterministic tests; returns epoch milliseconds. */\n\treadonly now?: () => number;\n}\n\nexport type PluginDistributionErrorCodeV1 =\n\t| \"unsupported\"\n\t| \"cancelled\"\n\t| \"invalid_descriptor\"\n\t| \"invalid_metadata\"\n\t| \"invalid_artifact\"\n\t| \"source_mismatch\"\n\t| \"identity_mismatch\"\n\t| \"digest_mismatch\"\n\t| \"signature_invalid\"\n\t| \"expired\"\n\t| \"size_mismatch\"\n\t| \"media_type_mismatch\"\n\t| \"host_failed\"\n\t| \"release_failed\";\n\nconst ERROR_MESSAGES: Readonly<Record<PluginDistributionErrorCodeV1, string>> = {\n\tunsupported: \"Plugin distribution is unsupported on this host\",\n\tcancelled: \"Plugin distribution operation was cancelled\",\n\tinvalid_descriptor: \"Plugin distribution descriptor is invalid\",\n\tinvalid_metadata: \"Plugin distribution metadata is invalid\",\n\tinvalid_artifact: \"Plugin distribution artifact handle is invalid\",\n\tsource_mismatch: \"Plugin distribution source does not match the descriptor\",\n\tidentity_mismatch: \"Plugin distribution plugin identity does not match the descriptor\",\n\tdigest_mismatch: \"Plugin distribution digest does not match the descriptor\",\n\tsignature_invalid: \"Plugin distribution signature was rejected\",\n\texpired: \"Plugin distribution descriptor has expired\",\n\tsize_mismatch: \"Plugin distribution size does not match the descriptor\",\n\tmedia_type_mismatch: \"Plugin distribution media type does not match the descriptor\",\n\thost_failed: \"Plugin distribution host operation failed\",\n\trelease_failed: \"Plugin distribution artifact release failed\",\n};\n\n/** Stable, non-leaking distribution error. Host exception messages are never retained. */\nexport class PluginDistributionErrorV1 extends Error {\n\treadonly code: PluginDistributionErrorCodeV1;\n\n\tconstructor(code: PluginDistributionErrorCodeV1) {\n\t\tsuper(t(ERROR_MESSAGES[code]));\n\t\tthis.name = \"PluginDistributionErrorV1\";\n\t\tthis.code = code;\n\t}\n}\n\nexport interface PluginDistributionV1 {\n\t/** Validate and detach a descriptor before passing it to a host or verifier. */\n\tvalidateDescriptor(input: unknown): PluginDistributionDescriptorV1;\n\tresolveMetadata(input: { descriptor: unknown; signal?: AbortSignal }): Promise<PluginDistributionMetadataV1>;\n\tacquireArtifact(input: {\n\t\tdescriptor: unknown;\n\t\tmetadata?: unknown;\n\t\tsignal?: AbortSignal;\n\t}): Promise<PluginDistributionArtifactV1>;\n\treleaseArtifact(input: { artifact: unknown; signal?: AbortSignal }): Promise<void>;\n}\n\nconst DESCRIPTOR_KEYS = [\n\t\"version\",\n\t\"source\",\n\t\"pluginId\",\n\t\"pluginVersion\",\n\t\"manifestDigest\",\n\t\"artifactDigest\",\n\t\"signature\",\n\t\"expiresAt\",\n\t\"sizeBytes\",\n\t\"mediaType\",\n] as const;\nconst METADATA_KEYS = [\n\t\"version\",\n\t\"source\",\n\t\"pluginId\",\n\t\"pluginVersion\",\n\t\"manifestDigest\",\n\t\"artifactDigest\",\n\t\"expiresAt\",\n\t\"sizeBytes\",\n\t\"mediaType\",\n] as const;\nconst ARTIFACT_KEYS = [\"artifactRef\", \"artifactDigest\", \"sizeBytes\", \"mediaType\"] as const;\n\nfunction reject(code: PluginDistributionErrorCodeV1): never {\n\tthrow new PluginDistributionErrorV1(code);\n}\n\nfunction hasExactKeys(value: Record<string, unknown>, keys: readonly string[]): boolean {\n\tconst expected = new Set(keys);\n\treturn (\n\t\tObject.keys(value).every((key) => expected.has(key) && expected.size === keys.length) &&\n\t\tkeys.every((key) => key in value)\n\t);\n}\n\nfunction boundedString(value: unknown, code: PluginDistributionErrorCodeV1): string {\n\tif (\n\t\ttypeof value !== \"string\" ||\n\t\tvalue.trim().length === 0 ||\n\t\tvalue.length > MAX_PLUGIN_DISTRIBUTION_FIELD_CHARS_V1 ||\n\t\t/[\\u0000-\\u001f\\u007f]/u.test(value)\n\t) {\n\t\treject(code);\n\t}\n\treturn value;\n}\n\nfunction identityString(value: unknown, code: PluginDistributionErrorCodeV1): string {\n\tconst result = boundedString(value, code);\n\tif (/\\s/u.test(result)) reject(code);\n\treturn result;\n}\n\nfunction sourceString(value: unknown, code: PluginDistributionErrorCodeV1): string {\n\tconst source = boundedString(value, code);\n\tif (/\\s/u.test(source) || /^(?:file:|[a-zA-Z]:[\\\\/]|[\\\\/]{1,2}|\\\\\\\\)/iu.test(source)) reject(code);\n\tif (/^https?:\\/\\//iu.test(source)) {\n\t\ttry {\n\t\t\tconst parsed = new URL(source);\n\t\t\tif (parsed.username !== \"\" || parsed.password !== \"\") {\n\t\t\t\tparsed.username = \"\";\n\t\t\t\tparsed.password = \"\";\n\t\t\t}\n\t\t\tparsed.search = \"\";\n\t\t\tparsed.hash = \"\";\n\t\t\tconst pathname = parsed.pathname.length > 512 ? `${parsed.pathname.slice(0, 509)}...` : parsed.pathname;\n\t\t\treturn `${parsed.origin}${pathname || \"/\"}`;\n\t\t} catch {\n\t\t\treject(code);\n\t\t}\n\t}\n\treturn source;\n}\n\nfunction digestString(value: unknown, code: PluginDistributionErrorCodeV1): string {\n\tconst digest = identityString(value, code);\n\t// Hosts may use a cryptographic digest or a versioned digest token. The\n\t// boundary validates shape and equality; only the host can verify bytes.\n\tif (!/^(?:[a-z][a-z0-9+.-]{0,15}:[A-Za-z0-9._~-]{1,128}|[0-9a-f]{16,128})$/u.test(digest)) reject(code);\n\treturn digest;\n}\n\nfunction signatureString(value: unknown): string {\n\tconst signature = boundedString(value, \"invalid_descriptor\");\n\tif (signature.length > 512 || /\\s/u.test(signature)) reject(\"invalid_descriptor\");\n\treturn signature;\n}\n\nfunction expiryString(value: unknown, code: PluginDistributionErrorCodeV1): string {\n\tconst expiry = boundedString(value, code);\n\tif (!/^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}(?:\\.\\d{3})?Z$/u.test(expiry)) reject(code);\n\tconst timestamp = Date.parse(expiry);\n\tif (!Number.isFinite(timestamp) || new Date(timestamp).toISOString() !== expiry) reject(code);\n\treturn expiry;\n}\n\nfunction positiveSize(value: unknown, code: PluginDistributionErrorCodeV1): number {\n\tif (\n\t\ttypeof value !== \"number\" ||\n\t\t!Number.isSafeInteger(value) ||\n\t\tvalue < 1 ||\n\t\tvalue > MAX_PLUGIN_DISTRIBUTION_ARTIFACT_BYTES_V1\n\t)\n\t\treject(code);\n\treturn value;\n}\n\nfunction mediaTypeString(value: unknown, code: PluginDistributionErrorCodeV1): string {\n\tconst mediaType = boundedString(value, code).toLowerCase();\n\tif (\n\t\tmediaType.length > 256 ||\n\t\t!/^[a-z0-9!#$&^_.+-]+\\/[a-z0-9!#$&^_.+-]+(?:\\s*;\\s*[a-z0-9!#$&^_.+-]+=[a-z0-9!#$&^_.+-]+)*$/u.test(mediaType)\n\t)\n\t\treject(code);\n\treturn mediaType;\n}\n\nfunction serializedBytes(value: unknown, code: PluginDistributionErrorCodeV1): number {\n\ttry {\n\t\tconst serialized = JSON.stringify(value);\n\t\tif (serialized === undefined) reject(code);\n\t\treturn new TextEncoder().encode(serialized).byteLength;\n\t} catch {\n\t\treject(code);\n\t}\n}\n\nfunction descriptorValue(value: unknown): PluginDistributionDescriptorV1 {\n\tif (!isPlainRecord(value) || !hasExactKeys(value, DESCRIPTOR_KEYS)) reject(\"invalid_descriptor\");\n\tif (value.version !== PLUGIN_DISTRIBUTION_CONTRACT_VERSION_V1) reject(\"invalid_descriptor\");\n\tconst descriptor = {\n\t\tversion: PLUGIN_DISTRIBUTION_CONTRACT_VERSION_V1,\n\t\tsource: sourceString(value.source, \"invalid_descriptor\"),\n\t\tpluginId: identityString(value.pluginId, \"invalid_descriptor\"),\n\t\tpluginVersion: identityString(value.pluginVersion, \"invalid_descriptor\"),\n\t\tmanifestDigest: digestString(value.manifestDigest, \"invalid_descriptor\"),\n\t\tartifactDigest: digestString(value.artifactDigest, \"invalid_descriptor\"),\n\t\tsignature: signatureString(value.signature),\n\t\texpiresAt: expiryString(value.expiresAt, \"invalid_descriptor\"),\n\t\tsizeBytes: positiveSize(value.sizeBytes, \"invalid_descriptor\"),\n\t\tmediaType: mediaTypeString(value.mediaType, \"invalid_descriptor\"),\n\t};\n\tif (serializedBytes(descriptor, \"invalid_descriptor\") > MAX_PLUGIN_DISTRIBUTION_DESCRIPTOR_BYTES_V1)\n\t\treject(\"invalid_descriptor\");\n\treturn detachedFreeze(descriptor);\n}\n\nfunction metadataValue(value: unknown): PluginDistributionMetadataV1 {\n\tif (!isPlainRecord(value) || !hasExactKeys(value, METADATA_KEYS)) reject(\"invalid_metadata\");\n\tif (value.version !== PLUGIN_DISTRIBUTION_CONTRACT_VERSION_V1) reject(\"invalid_metadata\");\n\tconst metadata = {\n\t\tversion: PLUGIN_DISTRIBUTION_CONTRACT_VERSION_V1,\n\t\tsource: sourceString(value.source, \"invalid_metadata\"),\n\t\tpluginId: identityString(value.pluginId, \"invalid_metadata\"),\n\t\tpluginVersion: identityString(value.pluginVersion, \"invalid_metadata\"),\n\t\tmanifestDigest: digestString(value.manifestDigest, \"invalid_metadata\"),\n\t\tartifactDigest: digestString(value.artifactDigest, \"invalid_metadata\"),\n\t\texpiresAt: expiryString(value.expiresAt, \"invalid_metadata\"),\n\t\tsizeBytes: positiveSize(value.sizeBytes, \"invalid_metadata\"),\n\t\tmediaType: mediaTypeString(value.mediaType, \"invalid_metadata\"),\n\t};\n\tif (serializedBytes(metadata, \"invalid_metadata\") > MAX_PLUGIN_DISTRIBUTION_METADATA_BYTES_V1)\n\t\treject(\"invalid_metadata\");\n\treturn detachedFreeze(metadata);\n}\n\nfunction artifactHandleValue(value: unknown): PluginDistributionArtifactHandleV1 {\n\tif (!isPlainRecord(value) || !hasExactKeys(value, ARTIFACT_KEYS)) reject(\"invalid_artifact\");\n\tconst artifact = {\n\t\tartifactRef: boundedString(value.artifactRef, \"invalid_artifact\"),\n\t\tartifactDigest: digestString(value.artifactDigest, \"invalid_artifact\"),\n\t\tsizeBytes: positiveSize(value.sizeBytes, \"invalid_artifact\"),\n\t\tmediaType: mediaTypeString(value.mediaType, \"invalid_artifact\"),\n\t};\n\tif (\n\t\t/[\\s\\u0000-\\u001f\\u007f]/u.test(artifact.artifactRef) ||\n\t\t/^(?:file:|[a-zA-Z]:[\\\\/]|[\\\\/]{1,2}|\\\\\\\\)/iu.test(artifact.artifactRef) ||\n\t\tartifact.artifactRef.length > MAX_PLUGIN_DISTRIBUTION_ARTIFACT_REF_CHARS_V1\n\t)\n\t\treject(\"invalid_artifact\");\n\treturn detachedFreeze(artifact);\n}\n\nfunction assertDescriptorMetadataMatch(\n\tdescriptor: PluginDistributionDescriptorV1,\n\tmetadata: PluginDistributionMetadataV1,\n): void {\n\tif (metadata.source !== descriptor.source) reject(\"source_mismatch\");\n\tif (metadata.pluginId !== descriptor.pluginId || metadata.pluginVersion !== descriptor.pluginVersion)\n\t\treject(\"identity_mismatch\");\n\tif (metadata.manifestDigest !== descriptor.manifestDigest || metadata.artifactDigest !== descriptor.artifactDigest)\n\t\treject(\"digest_mismatch\");\n\tif (metadata.expiresAt !== descriptor.expiresAt) reject(\"expired\");\n\tif (metadata.sizeBytes !== descriptor.sizeBytes) reject(\"size_mismatch\");\n\tif (metadata.mediaType !== descriptor.mediaType) reject(\"media_type_mismatch\");\n}\n\nfunction assertArtifactMatch(\n\tdescriptor: PluginDistributionDescriptorV1,\n\tartifact: PluginDistributionArtifactHandleV1,\n): void {\n\tif (artifact.artifactDigest !== descriptor.artifactDigest) reject(\"digest_mismatch\");\n\tif (artifact.sizeBytes !== descriptor.sizeBytes) reject(\"size_mismatch\");\n\tif (artifact.mediaType !== descriptor.mediaType) reject(\"media_type_mismatch\");\n}\n\nfunction isCancelled(error: unknown, signal: AbortSignal | undefined): boolean {\n\treturn (\n\t\tsignal?.aborted === true ||\n\t\t(error instanceof Error && (error.name === \"AbortError\" || error.name === \"AbortSignalError\"))\n\t);\n}\n\nfunction assertNotExpired(descriptor: PluginDistributionDescriptorV1, now: () => number): void {\n\tlet current: number;\n\ttry {\n\t\tcurrent = now();\n\t} catch {\n\t\treject(\"expired\");\n\t}\n\tif (!Number.isFinite(current)) reject(\"expired\");\n\tif (Date.parse(descriptor.expiresAt) <= current) reject(\"expired\");\n}\n\nasync function verifyDescriptor(\n\tdescriptor: PluginDistributionDescriptorV1,\n\tverifySignature: PluginDistributionSignatureVerifierV1 | undefined,\n\tnow: () => number,\n\tsignal: AbortSignal | undefined,\n): Promise<void> {\n\tif (signal?.aborted) reject(\"cancelled\");\n\tassertNotExpired(descriptor, now);\n\tif (verifySignature === undefined) reject(\"unsupported\");\n\tlet verification: PluginDistributionSignatureVerificationV1;\n\ttry {\n\t\tverification = await verifySignature({ descriptor });\n\t} catch {\n\t\treject(\"signature_invalid\");\n\t}\n\tif (signal?.aborted) reject(\"cancelled\");\n\tif (!isPlainRecord(verification) || verification.status !== \"accepted\") reject(\"signature_invalid\");\n}\n\n/** Create a host-injected distribution client. No host means all side effects are unsupported. */\nexport function createPluginDistributionV1(options: PluginDistributionOptionsV1 = {}): PluginDistributionV1 {\n\tconst verifySignature = options.verifySignature ?? options.verify;\n\tconst now = options.now ?? (() => Date.now());\n\tconst resolveMetadataForDescriptor = async (\n\t\tdescriptor: PluginDistributionDescriptorV1,\n\t\tsignal: AbortSignal | undefined,\n\t): Promise<PluginDistributionMetadataV1> => {\n\t\tif (signal?.aborted) reject(\"cancelled\");\n\t\tif (options.host?.resolveMetadata === undefined) reject(\"unsupported\");\n\t\tlet result: PluginDistributionMetadataV1;\n\t\ttry {\n\t\t\tresult = await options.host.resolveMetadata({ descriptor, signal });\n\t\t} catch (error) {\n\t\t\tif (isCancelled(error, signal)) reject(\"cancelled\");\n\t\t\treject(\"host_failed\");\n\t\t}\n\t\tif (signal?.aborted) reject(\"cancelled\");\n\t\tconst metadata = metadataValue(result);\n\t\tassertDescriptorMetadataMatch(descriptor, metadata);\n\t\tassertNotExpired(descriptor, now);\n\t\treturn metadata;\n\t};\n\n\tconst resolveMetadata = async (input: {\n\t\tdescriptor: unknown;\n\t\tsignal?: AbortSignal;\n\t}): Promise<PluginDistributionMetadataV1> => {\n\t\tconst descriptor = descriptorValue(input.descriptor);\n\t\tawait verifyDescriptor(descriptor, verifySignature, now, input.signal);\n\t\treturn resolveMetadataForDescriptor(descriptor, input.signal);\n\t};\n\n\tconst acquireArtifact = async (input: {\n\t\tdescriptor: unknown;\n\t\tmetadata?: unknown;\n\t\tsignal?: AbortSignal;\n\t}): Promise<PluginDistributionArtifactV1> => {\n\t\tconst descriptor = descriptorValue(input.descriptor);\n\t\tawait verifyDescriptor(descriptor, verifySignature, now, input.signal);\n\t\tif (options.host?.acquireArtifact === undefined) reject(\"unsupported\");\n\t\tconst metadata =\n\t\t\tinput.metadata === undefined\n\t\t\t\t? await resolveMetadataForDescriptor(descriptor, input.signal)\n\t\t\t\t: metadataValue(input.metadata);\n\t\tassertDescriptorMetadataMatch(descriptor, metadata);\n\t\tassertNotExpired(descriptor, now);\n\t\tlet result: PluginDistributionArtifactHandleV1;\n\t\tlet acquired: PluginDistributionArtifactV1 | undefined;\n\t\ttry {\n\t\t\tresult = await options.host.acquireArtifact({ descriptor, metadata, signal: input.signal });\n\t\t\tconst handle = artifactHandleValue(result);\n\t\t\tacquired = detachedFreeze({ ...metadata, artifactRef: handle.artifactRef });\n\t\t\tassertArtifactMatch(descriptor, handle);\n\t\t\tassertNotExpired(descriptor, now);\n\t\t\tif (input.signal?.aborted) reject(\"cancelled\");\n\t\t\treturn acquired;\n\t\t} catch (error) {\n\t\t\tif (acquired !== undefined && options.host.releaseArtifact !== undefined) {\n\t\t\t\tawait options.host.releaseArtifact({ artifact: acquired }).catch(() => undefined);\n\t\t\t}\n\t\t\tif (error instanceof PluginDistributionErrorV1) throw error;\n\t\t\tif (isCancelled(error, input.signal)) reject(\"cancelled\");\n\t\t\treject(\"host_failed\");\n\t\t}\n\t};\n\n\tconst releaseArtifact = async (input: { artifact: unknown; signal?: AbortSignal }): Promise<void> => {\n\t\tif (input.signal?.aborted) reject(\"cancelled\");\n\t\tif (options.host?.releaseArtifact === undefined) reject(\"unsupported\");\n\t\tconst value = input.artifact;\n\t\tif (!isPlainRecord(value) || !hasExactKeys(value, [...METADATA_KEYS, \"artifactRef\"])) reject(\"invalid_artifact\");\n\t\tconst metadataInput = Object.fromEntries(METADATA_KEYS.map((key) => [key, value[key]]));\n\t\tconst artifact = {\n\t\t\t...metadataValue(metadataInput),\n\t\t\tartifactRef: artifactHandleValue({\n\t\t\t\tartifactRef: value.artifactRef,\n\t\t\t\tartifactDigest: value.artifactDigest,\n\t\t\t\tsizeBytes: value.sizeBytes,\n\t\t\t\tmediaType: value.mediaType,\n\t\t\t}).artifactRef,\n\t\t};\n\t\ttry {\n\t\t\tawait options.host.releaseArtifact({ artifact: detachedFreeze(artifact), signal: input.signal });\n\t\t} catch (error) {\n\t\t\tif (isCancelled(error, input.signal)) reject(\"cancelled\");\n\t\t\treject(\"release_failed\");\n\t\t}\n\t\tif (input.signal?.aborted) reject(\"cancelled\");\n\t};\n\n\treturn {\n\t\tvalidateDescriptor(input) {\n\t\t\treturn descriptorValue(input);\n\t\t},\n\t\tresolveMetadata,\n\t\tacquireArtifact,\n\t\treleaseArtifact,\n\t};\n}\n"]}

package/dist/plugins/ecosystem/distribution.js

@@ -1,4 +1,5 @@
 import { detachedFreeze, isPlainRecord } from "@agent-forge/plugin-sdk";
+import { t } from "../../core/i18n/index.js";
 /** Distribution contract version. The host and package must agree on this version. */
 export const PLUGIN_DISTRIBUTION_CONTRACT_VERSION_V1 = 1;
 /** Maximum serialized descriptor size crossing the registry boundary. */
@@ -31,7 +32,7 @@ const ERROR_MESSAGES = {
 export class PluginDistributionErrorV1 extends Error {
     code;
     constructor(code) {
-        super(ERROR_MESSAGES[code]);
+        super(t(ERROR_MESSAGES[code]));
         this.name = "PluginDistributionErrorV1";
         this.code = code;
     }

package/dist/plugins/ecosystem/distribution.js.map

@@ -1 +1 @@
-{"version":3,"file":"distribution.js","sourceRoot":"","sources":["../../../src/plugins/ecosystem/distribution.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAExE,sFAAsF;AACtF,MAAM,CAAC,MAAM,uCAAuC,GAAG,CAAU,CAAC;AAElE,yEAAyE;AACzE,MAAM,CAAC,MAAM,2CAA2C,GAAG,EAAE,GAAG,IAAI,CAAC;AACrE,iFAAiF;AACjF,MAAM,CAAC,MAAM,sCAAsC,GAAG,IAAI,CAAC;AAC3D,2DAA2D;AAC3D,MAAM,CAAC,MAAM,yCAAyC,GAAG,EAAE,GAAG,IAAI,CAAC;AACnE,6CAA6C;AAC7C,MAAM,CAAC,MAAM,6CAA6C,GAAG,IAAI,CAAC;AAClE,8FAA8F;AAC9F,MAAM,CAAC,MAAM,yCAAyC,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC;AAqG3E,MAAM,cAAc,GAA4D;IAC/E,WAAW,EAAE,iDAAiD;IAC9D,SAAS,EAAE,6CAA6C;IACxD,kBAAkB,EAAE,2CAA2C;IAC/D,gBAAgB,EAAE,yCAAyC;IAC3D,gBAAgB,EAAE,gDAAgD;IAClE,eAAe,EAAE,0DAA0D;IAC3E,iBAAiB,EAAE,mEAAmE;IACtF,eAAe,EAAE,0DAA0D;IAC3E,iBAAiB,EAAE,4CAA4C;IAC/D,OAAO,EAAE,4CAA4C;IACrD,aAAa,EAAE,wDAAwD;IACvE,mBAAmB,EAAE,8DAA8D;IACnF,WAAW,EAAE,2CAA2C;IACxD,cAAc,EAAE,6CAA6C;CAC7D,CAAC;AAEF,0FAA0F;AAC1F,MAAM,OAAO,yBAA0B,SAAQ,KAAK;IAC1C,IAAI,CAAgC;IAE7C,YAAY,IAAmC,EAAE;QAChD,KAAK,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5B,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAC;QACxC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IAAA,CACjB;CACD;AAcD,MAAM,eAAe,GAAG;IACvB,SAAS;IACT,QAAQ;IACR,UAAU;IACV,eAAe;IACf,gBAAgB;IAChB,gBAAgB;IAChB,WAAW;IACX,WAAW;IACX,WAAW;IACX,WAAW;CACF,CAAC;AACX,MAAM,aAAa,GAAG;IACrB,SAAS;IACT,QAAQ;IACR,UAAU;IACV,eAAe;IACf,gBAAgB;IAChB,gBAAgB;IAChB,WAAW;IACX,WAAW;IACX,WAAW;CACF,CAAC;AACX,MAAM,aAAa,GAAG,CAAC,aAAa,EAAE,gBAAgB,EAAE,WAAW,EAAE,WAAW,CAAU,CAAC;AAE3F,SAAS,MAAM,CAAC,IAAmC,EAAS;IAC3D,MAAM,IAAI,yBAAyB,CAAC,IAAI,CAAC,CAAC;AAAA,CAC1C;AAED,SAAS,YAAY,CAAC,KAA8B,EAAE,IAAuB,EAAW;IACvF,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC;IAC/B,OAAO,CACN,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,IAAI,KAAK,IAAI,CAAC,MAAM,CAAC;QACrF,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,IAAI,KAAK,CAAC,CACjC,CAAC;AAAA,CACF;AAED,SAAS,aAAa,CAAC,KAAc,EAAE,IAAmC,EAAU;IACnF,IACC,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;QACzB,KAAK,CAAC,MAAM,GAAG,sCAAsC;QACrD,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC,EACnC,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC;AAAA,CACb;AAED,SAAS,cAAc,CAAC,KAAc,EAAE,IAAmC,EAAU;IACpF,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAC1C,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IACrC,OAAO,MAAM,CAAC;AAAA,CACd;AAED,SAAS,YAAY,CAAC,KAAc,EAAE,IAAmC,EAAU;IAClF,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAC1C,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,6CAA6C,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IACnG,IAAI,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACnC,IAAI,CAAC;YACJ,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;YAC/B,IAAI,MAAM,CAAC,QAAQ,KAAK,EAAE,IAAI,MAAM,CAAC,QAAQ,KAAK,EAAE,EAAE,CAAC;gBACtD,MAAM,CAAC,QAAQ,GAAG,EAAE,CAAC;gBACrB,MAAM,CAAC,QAAQ,GAAG,EAAE,CAAC;YACtB,CAAC;YACD,MAAM,CAAC,MAAM,GAAG,EAAE,CAAC;YACnB,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC;YACjB,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC;YACxG,OAAO,GAAG,MAAM,CAAC,MAAM,GAAG,QAAQ,IAAI,GAAG,EAAE,CAAC;QAC7C,CAAC;QAAC,MAAM,CAAC;YACR,MAAM,CAAC,IAAI,CAAC,CAAC;QACd,CAAC;IACF,CAAC;IACD,OAAO,MAAM,CAAC;AAAA,CACd;AAED,SAAS,YAAY,CAAC,KAAc,EAAE,IAAmC,EAAU;IAClF,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAC3C,wEAAwE;IACxE,yEAAyE;IACzE,IAAI,CAAC,uEAAuE,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IACxG,OAAO,MAAM,CAAC;AAAA,CACd;AAED,SAAS,eAAe,CAAC,KAAc,EAAU;IAChD,MAAM,SAAS,GAAG,aAAa,CAAC,KAAK,EAAE,oBAAoB,CAAC,CAAC;IAC7D,IAAI,SAAS,CAAC,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC;QAAE,MAAM,CAAC,oBAAoB,CAAC,CAAC;IAClF,OAAO,SAAS,CAAC;AAAA,CACjB;AAED,SAAS,YAAY,CAAC,KAAc,EAAE,IAAmC,EAAU;IAClF,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAC1C,IAAI,CAAC,qDAAqD,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IACtF,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACrC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,KAAK,MAAM;QAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IAC9F,OAAO,MAAM,CAAC;AAAA,CACd;AAED,SAAS,YAAY,CAAC,KAAc,EAAE,IAAmC,EAAU;IAClF,IACC,OAAO,KAAK,KAAK,QAAQ;QACzB,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC;QAC5B,KAAK,GAAG,CAAC;QACT,KAAK,GAAG,yCAAyC;QAEjD,MAAM,CAAC,IAAI,CAAC,CAAC;IACd,OAAO,KAAK,CAAC;AAAA,CACb;AAED,SAAS,eAAe,CAAC,KAAc,EAAE,IAAmC,EAAU;IACrF,MAAM,SAAS,GAAG,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;IAC3D,IACC,SAAS,CAAC,MAAM,GAAG,GAAG;QACtB,CAAC,4FAA4F,CAAC,IAAI,CAAC,SAAS,CAAC;QAE7G,MAAM,CAAC,IAAI,CAAC,CAAC;IACd,OAAO,SAAS,CAAC;AAAA,CACjB;AAED,SAAS,eAAe,CAAC,KAAc,EAAE,IAAmC,EAAU;IACrF,IAAI,CAAC;QACJ,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACzC,IAAI,UAAU,KAAK,SAAS;YAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QAC3C,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,UAAU,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,CAAC,IAAI,CAAC,CAAC;IACd,CAAC;AAAA,CACD;AAED,SAAS,eAAe,CAAC,KAAc,EAAkC;IACxE,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,eAAe,CAAC;QAAE,MAAM,CAAC,oBAAoB,CAAC,CAAC;IACjG,IAAI,KAAK,CAAC,OAAO,KAAK,uCAAuC;QAAE,MAAM,CAAC,oBAAoB,CAAC,CAAC;IAC5F,MAAM,UAAU,GAAG;QAClB,OAAO,EAAE,uCAAuC;QAChD,MAAM,EAAE,YAAY,CAAC,KAAK,CAAC,MAAM,EAAE,oBAAoB,CAAC;QACxD,QAAQ,EAAE,cAAc,CAAC,KAAK,CAAC,QAAQ,EAAE,oBAAoB,CAAC;QAC9D,aAAa,EAAE,cAAc,CAAC,KAAK,CAAC,aAAa,EAAE,oBAAoB,CAAC;QACxE,cAAc,EAAE,YAAY,CAAC,KAAK,CAAC,cAAc,EAAE,oBAAoB,CAAC;QACxE,cAAc,EAAE,YAAY,CAAC,KAAK,CAAC,cAAc,EAAE,oBAAoB,CAAC;QACxE,SAAS,EAAE,eAAe,CAAC,KAAK,CAAC,SAAS,CAAC;QAC3C,SAAS,EAAE,YAAY,CAAC,KAAK,CAAC,SAAS,EAAE,oBAAoB,CAAC;QAC9D,SAAS,EAAE,YAAY,CAAC,KAAK,CAAC,SAAS,EAAE,oBAAoB,CAAC;QAC9D,SAAS,EAAE,eAAe,CAAC,KAAK,CAAC,SAAS,EAAE,oBAAoB,CAAC;KACjE,CAAC;IACF,IAAI,eAAe,CAAC,UAAU,EAAE,oBAAoB,CAAC,GAAG,2CAA2C;QAClG,MAAM,CAAC,oBAAoB,CAAC,CAAC;IAC9B,OAAO,cAAc,CAAC,UAAU,CAAC,CAAC;AAAA,CAClC;AAED,SAAS,aAAa,CAAC,KAAc,EAAgC;IACpE,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,aAAa,CAAC;QAAE,MAAM,CAAC,kBAAkB,CAAC,CAAC;IAC7F,IAAI,KAAK,CAAC,OAAO,KAAK,uCAAuC;QAAE,MAAM,CAAC,kBAAkB,CAAC,CAAC;IAC1F,MAAM,QAAQ,GAAG;QAChB,OAAO,EAAE,uCAAuC;QAChD,MAAM,EAAE,YAAY,CAAC,KAAK,CAAC,MAAM,EAAE,kBAAkB,CAAC;QACtD,QAAQ,EAAE,cAAc,CAAC,KAAK,CAAC,QAAQ,EAAE,kBAAkB,CAAC;QAC5D,aAAa,EAAE,cAAc,CAAC,KAAK,CAAC,aAAa,EAAE,kBAAkB,CAAC;QACtE,cAAc,EAAE,YAAY,CAAC,KAAK,CAAC,cAAc,EAAE,kBAAkB,CAAC;QACtE,cAAc,EAAE,YAAY,CAAC,KAAK,CAAC,cAAc,EAAE,kBAAkB,CAAC;QACtE,SAAS,EAAE,YAAY,CAAC,KAAK,CAAC,SAAS,EAAE,kBAAkB,CAAC;QAC5D,SAAS,EAAE,YAAY,CAAC,KAAK,CAAC,SAAS,EAAE,kBAAkB,CAAC;QAC5D,SAAS,EAAE,eAAe,CAAC,KAAK,CAAC,SAAS,EAAE,kBAAkB,CAAC;KAC/D,CAAC;IACF,IAAI,eAAe,CAAC,QAAQ,EAAE,kBAAkB,CAAC,GAAG,yCAAyC;QAC5F,MAAM,CAAC,kBAAkB,CAAC,CAAC;IAC5B,OAAO,cAAc,CAAC,QAAQ,CAAC,CAAC;AAAA,CAChC;AAED,SAAS,mBAAmB,CAAC,KAAc,EAAsC;IAChF,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,aAAa,CAAC;QAAE,MAAM,CAAC,kBAAkB,CAAC,CAAC;IAC7F,MAAM,QAAQ,GAAG;QAChB,WAAW,EAAE,aAAa,CAAC,KAAK,CAAC,WAAW,EAAE,kBAAkB,CAAC;QACjE,cAAc,EAAE,YAAY,CAAC,KAAK,CAAC,cAAc,EAAE,kBAAkB,CAAC;QACtE,SAAS,EAAE,YAAY,CAAC,KAAK,CAAC,SAAS,EAAE,kBAAkB,CAAC;QAC5D,SAAS,EAAE,eAAe,CAAC,KAAK,CAAC,SAAS,EAAE,kBAAkB,CAAC;KAC/D,CAAC;IACF,IACC,0BAA0B,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC;QACrD,6CAA6C,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC;QACxE,QAAQ,CAAC,WAAW,CAAC,MAAM,GAAG,6CAA6C;QAE3E,MAAM,CAAC,kBAAkB,CAAC,CAAC;IAC5B,OAAO,cAAc,CAAC,QAAQ,CAAC,CAAC;AAAA,CAChC;AAED,SAAS,6BAA6B,CACrC,UAA0C,EAC1C,QAAsC,EAC/B;IACP,IAAI,QAAQ,CAAC,MAAM,KAAK,UAAU,CAAC,MAAM;QAAE,MAAM,CAAC,iBAAiB,CAAC,CAAC;IACrE,IAAI,QAAQ,CAAC,QAAQ,KAAK,UAAU,CAAC,QAAQ,IAAI,QAAQ,CAAC,aAAa,KAAK,UAAU,CAAC,aAAa;QACnG,MAAM,CAAC,mBAAmB,CAAC,CAAC;IAC7B,IAAI,QAAQ,CAAC,cAAc,KAAK,UAAU,CAAC,cAAc,IAAI,QAAQ,CAAC,cAAc,KAAK,UAAU,CAAC,cAAc;QACjH,MAAM,CAAC,iBAAiB,CAAC,CAAC;IAC3B,IAAI,QAAQ,CAAC,SAAS,KAAK,UAAU,CAAC,SAAS;QAAE,MAAM,CAAC,SAAS,CAAC,CAAC;IACnE,IAAI,QAAQ,CAAC,SAAS,KAAK,UAAU,CAAC,SAAS;QAAE,MAAM,CAAC,eAAe,CAAC,CAAC;IACzE,IAAI,QAAQ,CAAC,SAAS,KAAK,UAAU,CAAC,SAAS;QAAE,MAAM,CAAC,qBAAqB,CAAC,CAAC;AAAA,CAC/E;AAED,SAAS,mBAAmB,CAC3B,UAA0C,EAC1C,QAA4C,EACrC;IACP,IAAI,QAAQ,CAAC,cAAc,KAAK,UAAU,CAAC,cAAc;QAAE,MAAM,CAAC,iBAAiB,CAAC,CAAC;IACrF,IAAI,QAAQ,CAAC,SAAS,KAAK,UAAU,CAAC,SAAS;QAAE,MAAM,CAAC,eAAe,CAAC,CAAC;IACzE,IAAI,QAAQ,CAAC,SAAS,KAAK,UAAU,CAAC,SAAS;QAAE,MAAM,CAAC,qBAAqB,CAAC,CAAC;AAAA,CAC/E;AAED,SAAS,WAAW,CAAC,KAAc,EAAE,MAA+B,EAAW;IAC9E,OAAO,CACN,MAAM,EAAE,OAAO,KAAK,IAAI;QACxB,CAAC,KAAK,YAAY,KAAK,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,YAAY,IAAI,KAAK,CAAC,IAAI,KAAK,kBAAkB,CAAC,CAAC,CAC9F,CAAC;AAAA,CACF;AAED,SAAS,gBAAgB,CAAC,UAA0C,EAAE,GAAiB,EAAQ;IAC9F,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACJ,OAAO,GAAG,GAAG,EAAE,CAAC;IACjB,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,CAAC,SAAS,CAAC,CAAC;IACnB,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,MAAM,CAAC,SAAS,CAAC,CAAC;IACjD,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,OAAO;QAAE,MAAM,CAAC,SAAS,CAAC,CAAC;AAAA,CACnE;AAED,KAAK,UAAU,gBAAgB,CAC9B,UAA0C,EAC1C,eAAkE,EAClE,GAAiB,EACjB,MAA+B,EACf;IAChB,IAAI,MAAM,EAAE,OAAO;QAAE,MAAM,CAAC,WAAW,CAAC,CAAC;IACzC,gBAAgB,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;IAClC,IAAI,eAAe,KAAK,SAAS;QAAE,MAAM,CAAC,aAAa,CAAC,CAAC;IACzD,IAAI,YAAuD,CAAC;IAC5D,IAAI,CAAC;QACJ,YAAY,GAAG,MAAM,eAAe,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,CAAC,mBAAmB,CAAC,CAAC;IAC7B,CAAC;IACD,IAAI,MAAM,EAAE,OAAO;QAAE,MAAM,CAAC,WAAW,CAAC,CAAC;IACzC,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,IAAI,YAAY,CAAC,MAAM,KAAK,UAAU;QAAE,MAAM,CAAC,mBAAmB,CAAC,CAAC;AAAA,CACpG;AAED,kGAAkG;AAClG,MAAM,UAAU,0BAA0B,CAAC,OAAO,GAAgC,EAAE,EAAwB;IAC3G,MAAM,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,OAAO,CAAC,MAAM,CAAC;IAClE,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC9C,MAAM,4BAA4B,GAAG,KAAK,EACzC,UAA0C,EAC1C,MAA+B,EACS,EAAE,CAAC;QAC3C,IAAI,MAAM,EAAE,OAAO;YAAE,MAAM,CAAC,WAAW,CAAC,CAAC;QACzC,IAAI,OAAO,CAAC,IAAI,EAAE,eAAe,KAAK,SAAS;YAAE,MAAM,CAAC,aAAa,CAAC,CAAC;QACvE,IAAI,MAAoC,CAAC;QACzC,IAAI,CAAC;YACJ,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC;QACrE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC;gBAAE,MAAM,CAAC,WAAW,CAAC,CAAC;YACpD,MAAM,CAAC,aAAa,CAAC,CAAC;QACvB,CAAC;QACD,IAAI,MAAM,EAAE,OAAO;YAAE,MAAM,CAAC,WAAW,CAAC,CAAC;QACzC,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;QACvC,6BAA6B,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QACpD,gBAAgB,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;QAClC,OAAO,QAAQ,CAAC;IAAA,CAChB,CAAC;IAEF,MAAM,eAAe,GAAG,KAAK,EAAE,KAG9B,EAAyC,EAAE,CAAC;QAC5C,MAAM,UAAU,GAAG,eAAe,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACrD,MAAM,gBAAgB,CAAC,UAAU,EAAE,eAAe,EAAE,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QACvE,OAAO,4BAA4B,CAAC,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAAA,CAC9D,CAAC;IAEF,MAAM,eAAe,GAAG,KAAK,EAAE,KAI9B,EAAyC,EAAE,CAAC;QAC5C,MAAM,UAAU,GAAG,eAAe,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACrD,MAAM,gBAAgB,CAAC,UAAU,EAAE,eAAe,EAAE,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QACvE,IAAI,OAAO,CAAC,IAAI,EAAE,eAAe,KAAK,SAAS;YAAE,MAAM,CAAC,aAAa,CAAC,CAAC;QACvE,MAAM,QAAQ,GACb,KAAK,CAAC,QAAQ,KAAK,SAAS;YAC3B,CAAC,CAAC,MAAM,4BAA4B,CAAC,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC;YAC9D,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAClC,6BAA6B,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QACpD,gBAAgB,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;QAClC,IAAI,MAA0C,CAAC;QAC/C,IAAI,QAAkD,CAAC;QACvD,IAAI,CAAC;YACJ,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;YAC5F,MAAM,MAAM,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;YAC3C,QAAQ,GAAG,cAAc,CAAC,EAAE,GAAG,QAAQ,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;YAC5E,mBAAmB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;YACxC,gBAAgB,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;YAClC,IAAI,KAAK,CAAC,MAAM,EAAE,OAAO;gBAAE,MAAM,CAAC,WAAW,CAAC,CAAC;YAC/C,OAAO,QAAQ,CAAC;QACjB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,QAAQ,KAAK,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;gBAC1E,MAAM,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YACnF,CAAC;YACD,IAAI,KAAK,YAAY,yBAAyB;gBAAE,MAAM,KAAK,CAAC;YAC5D,IAAI,WAAW,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC;gBAAE,MAAM,CAAC,WAAW,CAAC,CAAC;YAC1D,MAAM,CAAC,aAAa,CAAC,CAAC;QACvB,CAAC;IAAA,CACD,CAAC;IAEF,MAAM,eAAe,GAAG,KAAK,EAAE,KAAkD,EAAiB,EAAE,CAAC;QACpG,IAAI,KAAK,CAAC,MAAM,EAAE,OAAO;YAAE,MAAM,CAAC,WAAW,CAAC,CAAC;QAC/C,IAAI,OAAO,CAAC,IAAI,EAAE,eAAe,KAAK,SAAS;YAAE,MAAM,CAAC,aAAa,CAAC,CAAC;QACvE,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC;QAC7B,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC,GAAG,aAAa,EAAE,aAAa,CAAC,CAAC;YAAE,MAAM,CAAC,kBAAkB,CAAC,CAAC;QACjH,MAAM,aAAa,GAAG,MAAM,CAAC,WAAW,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACxF,MAAM,QAAQ,GAAG;YAChB,GAAG,aAAa,CAAC,aAAa,CAAC;YAC/B,WAAW,EAAE,mBAAmB,CAAC;gBAChC,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,cAAc,EAAE,KAAK,CAAC,cAAc;gBACpC,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;aAC1B,CAAC,CAAC,WAAW;SACd,CAAC;QACF,IAAI,CAAC;YACJ,MAAM,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,QAAQ,EAAE,cAAc,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QAClG,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,WAAW,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC;gBAAE,MAAM,CAAC,WAAW,CAAC,CAAC;YAC1D,MAAM,CAAC,gBAAgB,CAAC,CAAC;QAC1B,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,EAAE,OAAO;YAAE,MAAM,CAAC,WAAW,CAAC,CAAC;IAAA,CAC/C,CAAC;IAEF,OAAO;QACN,kBAAkB,CAAC,KAAK,EAAE;YACzB,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC;QAAA,CAC9B;QACD,eAAe;QACf,eAAe;QACf,eAAe;KACf,CAAC;AAAA,CACF","sourcesContent":["import { detachedFreeze, isPlainRecord } from \"@agent-forge/plugin-sdk\";\n\n/** Distribution contract version. The host and package must agree on this version. */\nexport const PLUGIN_DISTRIBUTION_CONTRACT_VERSION_V1 = 1 as const;\n\n/** Maximum serialized descriptor size crossing the registry boundary. */\nexport const MAX_PLUGIN_DISTRIBUTION_DESCRIPTOR_BYTES_V1 = 16 * 1024;\n/** Maximum length of identity, URI, digest, signature, and media-type fields. */\nexport const MAX_PLUGIN_DISTRIBUTION_FIELD_CHARS_V1 = 2048;\n/** Maximum descriptor metadata size returned by a host. */\nexport const MAX_PLUGIN_DISTRIBUTION_METADATA_BYTES_V1 = 16 * 1024;\n/** Maximum opaque artifact handle length. */\nexport const MAX_PLUGIN_DISTRIBUTION_ARTIFACT_REF_CHARS_V1 = 2048;\n/** Maximum package size accepted by this contract. Larger artifacts need a newer contract. */\nexport const MAX_PLUGIN_DISTRIBUTION_ARTIFACT_BYTES_V1 = 512 * 1024 * 1024;\n\n/** A signed, bounded package descriptor. It contains no package bytes or local path. */\nexport interface PluginDistributionDescriptorV1 {\n\treadonly version: 1;\n\treadonly source: string;\n\treadonly pluginId: string;\n\treadonly pluginVersion: string;\n\treadonly manifestDigest: string;\n\treadonly artifactDigest: string;\n\treadonly signature: string;\n\treadonly expiresAt: string;\n\treadonly sizeBytes: number;\n\treadonly mediaType: string;\n}\n\n/** Metadata resolved by a host before any artifact is acquired. */\nexport interface PluginDistributionMetadataV1 {\n\treadonly version: 1;\n\treadonly source: string;\n\treadonly pluginId: string;\n\treadonly pluginVersion: string;\n\treadonly manifestDigest: string;\n\treadonly artifactDigest: string;\n\treadonly expiresAt: string;\n\treadonly sizeBytes: number;\n\treadonly mediaType: string;\n}\n\n/** Host-owned acquisition result. `artifactRef` is opaque and is never a path. */\nexport interface PluginDistributionArtifactHandleV1 {\n\treadonly artifactRef: string;\n\treadonly artifactDigest: string;\n\treadonly sizeBytes: number;\n\treadonly mediaType: string;\n}\n\n/** Model-facing acquisition projection. It deliberately contains no bytes or metadata payload. */\nexport interface PluginDistributionArtifactV1 extends PluginDistributionMetadataV1 {\n\treadonly artifactRef: string;\n}\n\nexport interface PluginDistributionSignatureVerificationInputV1 {\n\treadonly descriptor: PluginDistributionDescriptorV1;\n}\n\nexport type PluginDistributionSignatureVerificationV1 =\n\t| { readonly status: \"accepted\" }\n\t| { readonly status: \"rejected\"; readonly reason?: string };\n\nexport type PluginDistributionSignatureVerifierV1 = (\n\tinput: PluginDistributionSignatureVerificationInputV1,\n) => PluginDistributionSignatureVerificationV1 | Promise<PluginDistributionSignatureVerificationV1>;\n\n/**\n * Host boundary for registry metadata and package bytes. The core never opens a\n * URL, reads a path, or receives package bytes; hosts return only bounded metadata\n * and opaque artifact references.\n */\nexport interface PluginDistributionHostV1 {\n\treadonly resolveMetadata?: (input: {\n\t\treadonly descriptor: PluginDistributionDescriptorV1;\n\t\treadonly signal?: AbortSignal;\n\t}) => Promise<PluginDistributionMetadataV1>;\n\treadonly acquireArtifact?: (input: {\n\t\treadonly descriptor: PluginDistributionDescriptorV1;\n\t\treadonly metadata: PluginDistributionMetadataV1;\n\t\treadonly signal?: AbortSignal;\n\t}) => Promise<PluginDistributionArtifactHandleV1>;\n\treadonly releaseArtifact?: (input: {\n\t\treadonly artifact: PluginDistributionArtifactV1;\n\t\treadonly signal?: AbortSignal;\n\t}) => Promise<void>;\n}\n\nexport interface PluginDistributionOptionsV1 {\n\treadonly host?: PluginDistributionHostV1;\n\t/** Required for trust. There is no implicit signature acceptance fallback. */\n\treadonly verifySignature?: PluginDistributionSignatureVerifierV1;\n\t/** Alias for callers using the registry verifier naming. */\n\treadonly verify?: PluginDistributionSignatureVerifierV1;\n\t/** Injected clock for deterministic tests; returns epoch milliseconds. */\n\treadonly now?: () => number;\n}\n\nexport type PluginDistributionErrorCodeV1 =\n\t| \"unsupported\"\n\t| \"cancelled\"\n\t| \"invalid_descriptor\"\n\t| \"invalid_metadata\"\n\t| \"invalid_artifact\"\n\t| \"source_mismatch\"\n\t| \"identity_mismatch\"\n\t| \"digest_mismatch\"\n\t| \"signature_invalid\"\n\t| \"expired\"\n\t| \"size_mismatch\"\n\t| \"media_type_mismatch\"\n\t| \"host_failed\"\n\t| \"release_failed\";\n\nconst ERROR_MESSAGES: Readonly<Record<PluginDistributionErrorCodeV1, string>> = {\n\tunsupported: \"Plugin distribution is unsupported on this host\",\n\tcancelled: \"Plugin distribution operation was cancelled\",\n\tinvalid_descriptor: \"Plugin distribution descriptor is invalid\",\n\tinvalid_metadata: \"Plugin distribution metadata is invalid\",\n\tinvalid_artifact: \"Plugin distribution artifact handle is invalid\",\n\tsource_mismatch: \"Plugin distribution source does not match the descriptor\",\n\tidentity_mismatch: \"Plugin distribution plugin identity does not match the descriptor\",\n\tdigest_mismatch: \"Plugin distribution digest does not match the descriptor\",\n\tsignature_invalid: \"Plugin distribution signature was rejected\",\n\texpired: \"Plugin distribution descriptor has expired\",\n\tsize_mismatch: \"Plugin distribution size does not match the descriptor\",\n\tmedia_type_mismatch: \"Plugin distribution media type does not match the descriptor\",\n\thost_failed: \"Plugin distribution host operation failed\",\n\trelease_failed: \"Plugin distribution artifact release failed\",\n};\n\n/** Stable, non-leaking distribution error. Host exception messages are never retained. */\nexport class PluginDistributionErrorV1 extends Error {\n\treadonly code: PluginDistributionErrorCodeV1;\n\n\tconstructor(code: PluginDistributionErrorCodeV1) {\n\t\tsuper(ERROR_MESSAGES[code]);\n\t\tthis.name = \"PluginDistributionErrorV1\";\n\t\tthis.code = code;\n\t}\n}\n\nexport interface PluginDistributionV1 {\n\t/** Validate and detach a descriptor before passing it to a host or verifier. */\n\tvalidateDescriptor(input: unknown): PluginDistributionDescriptorV1;\n\tresolveMetadata(input: { descriptor: unknown; signal?: AbortSignal }): Promise<PluginDistributionMetadataV1>;\n\tacquireArtifact(input: {\n\t\tdescriptor: unknown;\n\t\tmetadata?: unknown;\n\t\tsignal?: AbortSignal;\n\t}): Promise<PluginDistributionArtifactV1>;\n\treleaseArtifact(input: { artifact: unknown; signal?: AbortSignal }): Promise<void>;\n}\n\nconst DESCRIPTOR_KEYS = [\n\t\"version\",\n\t\"source\",\n\t\"pluginId\",\n\t\"pluginVersion\",\n\t\"manifestDigest\",\n\t\"artifactDigest\",\n\t\"signature\",\n\t\"expiresAt\",\n\t\"sizeBytes\",\n\t\"mediaType\",\n] as const;\nconst METADATA_KEYS = [\n\t\"version\",\n\t\"source\",\n\t\"pluginId\",\n\t\"pluginVersion\",\n\t\"manifestDigest\",\n\t\"artifactDigest\",\n\t\"expiresAt\",\n\t\"sizeBytes\",\n\t\"mediaType\",\n] as const;\nconst ARTIFACT_KEYS = [\"artifactRef\", \"artifactDigest\", \"sizeBytes\", \"mediaType\"] as const;\n\nfunction reject(code: PluginDistributionErrorCodeV1): never {\n\tthrow new PluginDistributionErrorV1(code);\n}\n\nfunction hasExactKeys(value: Record<string, unknown>, keys: readonly string[]): boolean {\n\tconst expected = new Set(keys);\n\treturn (\n\t\tObject.keys(value).every((key) => expected.has(key) && expected.size === keys.length) &&\n\t\tkeys.every((key) => key in value)\n\t);\n}\n\nfunction boundedString(value: unknown, code: PluginDistributionErrorCodeV1): string {\n\tif (\n\t\ttypeof value !== \"string\" ||\n\t\tvalue.trim().length === 0 ||\n\t\tvalue.length > MAX_PLUGIN_DISTRIBUTION_FIELD_CHARS_V1 ||\n\t\t/[\\u0000-\\u001f\\u007f]/u.test(value)\n\t) {\n\t\treject(code);\n\t}\n\treturn value;\n}\n\nfunction identityString(value: unknown, code: PluginDistributionErrorCodeV1): string {\n\tconst result = boundedString(value, code);\n\tif (/\\s/u.test(result)) reject(code);\n\treturn result;\n}\n\nfunction sourceString(value: unknown, code: PluginDistributionErrorCodeV1): string {\n\tconst source = boundedString(value, code);\n\tif (/\\s/u.test(source) || /^(?:file:|[a-zA-Z]:[\\\\/]|[\\\\/]{1,2}|\\\\\\\\)/iu.test(source)) reject(code);\n\tif (/^https?:\\/\\//iu.test(source)) {\n\t\ttry {\n\t\t\tconst parsed = new URL(source);\n\t\t\tif (parsed.username !== \"\" || parsed.password !== \"\") {\n\t\t\t\tparsed.username = \"\";\n\t\t\t\tparsed.password = \"\";\n\t\t\t}\n\t\t\tparsed.search = \"\";\n\t\t\tparsed.hash = \"\";\n\t\t\tconst pathname = parsed.pathname.length > 512 ? `${parsed.pathname.slice(0, 509)}...` : parsed.pathname;\n\t\t\treturn `${parsed.origin}${pathname || \"/\"}`;\n\t\t} catch {\n\t\t\treject(code);\n\t\t}\n\t}\n\treturn source;\n}\n\nfunction digestString(value: unknown, code: PluginDistributionErrorCodeV1): string {\n\tconst digest = identityString(value, code);\n\t// Hosts may use a cryptographic digest or a versioned digest token. The\n\t// boundary validates shape and equality; only the host can verify bytes.\n\tif (!/^(?:[a-z][a-z0-9+.-]{0,15}:[A-Za-z0-9._~-]{1,128}|[0-9a-f]{16,128})$/u.test(digest)) reject(code);\n\treturn digest;\n}\n\nfunction signatureString(value: unknown): string {\n\tconst signature = boundedString(value, \"invalid_descriptor\");\n\tif (signature.length > 512 || /\\s/u.test(signature)) reject(\"invalid_descriptor\");\n\treturn signature;\n}\n\nfunction expiryString(value: unknown, code: PluginDistributionErrorCodeV1): string {\n\tconst expiry = boundedString(value, code);\n\tif (!/^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}(?:\\.\\d{3})?Z$/u.test(expiry)) reject(code);\n\tconst timestamp = Date.parse(expiry);\n\tif (!Number.isFinite(timestamp) || new Date(timestamp).toISOString() !== expiry) reject(code);\n\treturn expiry;\n}\n\nfunction positiveSize(value: unknown, code: PluginDistributionErrorCodeV1): number {\n\tif (\n\t\ttypeof value !== \"number\" ||\n\t\t!Number.isSafeInteger(value) ||\n\t\tvalue < 1 ||\n\t\tvalue > MAX_PLUGIN_DISTRIBUTION_ARTIFACT_BYTES_V1\n\t)\n\t\treject(code);\n\treturn value;\n}\n\nfunction mediaTypeString(value: unknown, code: PluginDistributionErrorCodeV1): string {\n\tconst mediaType = boundedString(value, code).toLowerCase();\n\tif (\n\t\tmediaType.length > 256 ||\n\t\t!/^[a-z0-9!#$&^_.+-]+\\/[a-z0-9!#$&^_.+-]+(?:\\s*;\\s*[a-z0-9!#$&^_.+-]+=[a-z0-9!#$&^_.+-]+)*$/u.test(mediaType)\n\t)\n\t\treject(code);\n\treturn mediaType;\n}\n\nfunction serializedBytes(value: unknown, code: PluginDistributionErrorCodeV1): number {\n\ttry {\n\t\tconst serialized = JSON.stringify(value);\n\t\tif (serialized === undefined) reject(code);\n\t\treturn new TextEncoder().encode(serialized).byteLength;\n\t} catch {\n\t\treject(code);\n\t}\n}\n\nfunction descriptorValue(value: unknown): PluginDistributionDescriptorV1 {\n\tif (!isPlainRecord(value) || !hasExactKeys(value, DESCRIPTOR_KEYS)) reject(\"invalid_descriptor\");\n\tif (value.version !== PLUGIN_DISTRIBUTION_CONTRACT_VERSION_V1) reject(\"invalid_descriptor\");\n\tconst descriptor = {\n\t\tversion: PLUGIN_DISTRIBUTION_CONTRACT_VERSION_V1,\n\t\tsource: sourceString(value.source, \"invalid_descriptor\"),\n\t\tpluginId: identityString(value.pluginId, \"invalid_descriptor\"),\n\t\tpluginVersion: identityString(value.pluginVersion, \"invalid_descriptor\"),\n\t\tmanifestDigest: digestString(value.manifestDigest, \"invalid_descriptor\"),\n\t\tartifactDigest: digestString(value.artifactDigest, \"invalid_descriptor\"),\n\t\tsignature: signatureString(value.signature),\n\t\texpiresAt: expiryString(value.expiresAt, \"invalid_descriptor\"),\n\t\tsizeBytes: positiveSize(value.sizeBytes, \"invalid_descriptor\"),\n\t\tmediaType: mediaTypeString(value.mediaType, \"invalid_descriptor\"),\n\t};\n\tif (serializedBytes(descriptor, \"invalid_descriptor\") > MAX_PLUGIN_DISTRIBUTION_DESCRIPTOR_BYTES_V1)\n\t\treject(\"invalid_descriptor\");\n\treturn detachedFreeze(descriptor);\n}\n\nfunction metadataValue(value: unknown): PluginDistributionMetadataV1 {\n\tif (!isPlainRecord(value) || !hasExactKeys(value, METADATA_KEYS)) reject(\"invalid_metadata\");\n\tif (value.version !== PLUGIN_DISTRIBUTION_CONTRACT_VERSION_V1) reject(\"invalid_metadata\");\n\tconst metadata = {\n\t\tversion: PLUGIN_DISTRIBUTION_CONTRACT_VERSION_V1,\n\t\tsource: sourceString(value.source, \"invalid_metadata\"),\n\t\tpluginId: identityString(value.pluginId, \"invalid_metadata\"),\n\t\tpluginVersion: identityString(value.pluginVersion, \"invalid_metadata\"),\n\t\tmanifestDigest: digestString(value.manifestDigest, \"invalid_metadata\"),\n\t\tartifactDigest: digestString(value.artifactDigest, \"invalid_metadata\"),\n\t\texpiresAt: expiryString(value.expiresAt, \"invalid_metadata\"),\n\t\tsizeBytes: positiveSize(value.sizeBytes, \"invalid_metadata\"),\n\t\tmediaType: mediaTypeString(value.mediaType, \"invalid_metadata\"),\n\t};\n\tif (serializedBytes(metadata, \"invalid_metadata\") > MAX_PLUGIN_DISTRIBUTION_METADATA_BYTES_V1)\n\t\treject(\"invalid_metadata\");\n\treturn detachedFreeze(metadata);\n}\n\nfunction artifactHandleValue(value: unknown): PluginDistributionArtifactHandleV1 {\n\tif (!isPlainRecord(value) || !hasExactKeys(value, ARTIFACT_KEYS)) reject(\"invalid_artifact\");\n\tconst artifact = {\n\t\tartifactRef: boundedString(value.artifactRef, \"invalid_artifact\"),\n\t\tartifactDigest: digestString(value.artifactDigest, \"invalid_artifact\"),\n\t\tsizeBytes: positiveSize(value.sizeBytes, \"invalid_artifact\"),\n\t\tmediaType: mediaTypeString(value.mediaType, \"invalid_artifact\"),\n\t};\n\tif (\n\t\t/[\\s\\u0000-\\u001f\\u007f]/u.test(artifact.artifactRef) ||\n\t\t/^(?:file:|[a-zA-Z]:[\\\\/]|[\\\\/]{1,2}|\\\\\\\\)/iu.test(artifact.artifactRef) ||\n\t\tartifact.artifactRef.length > MAX_PLUGIN_DISTRIBUTION_ARTIFACT_REF_CHARS_V1\n\t)\n\t\treject(\"invalid_artifact\");\n\treturn detachedFreeze(artifact);\n}\n\nfunction assertDescriptorMetadataMatch(\n\tdescriptor: PluginDistributionDescriptorV1,\n\tmetadata: PluginDistributionMetadataV1,\n): void {\n\tif (metadata.source !== descriptor.source) reject(\"source_mismatch\");\n\tif (metadata.pluginId !== descriptor.pluginId || metadata.pluginVersion !== descriptor.pluginVersion)\n\t\treject(\"identity_mismatch\");\n\tif (metadata.manifestDigest !== descriptor.manifestDigest || metadata.artifactDigest !== descriptor.artifactDigest)\n\t\treject(\"digest_mismatch\");\n\tif (metadata.expiresAt !== descriptor.expiresAt) reject(\"expired\");\n\tif (metadata.sizeBytes !== descriptor.sizeBytes) reject(\"size_mismatch\");\n\tif (metadata.mediaType !== descriptor.mediaType) reject(\"media_type_mismatch\");\n}\n\nfunction assertArtifactMatch(\n\tdescriptor: PluginDistributionDescriptorV1,\n\tartifact: PluginDistributionArtifactHandleV1,\n): void {\n\tif (artifact.artifactDigest !== descriptor.artifactDigest) reject(\"digest_mismatch\");\n\tif (artifact.sizeBytes !== descriptor.sizeBytes) reject(\"size_mismatch\");\n\tif (artifact.mediaType !== descriptor.mediaType) reject(\"media_type_mismatch\");\n}\n\nfunction isCancelled(error: unknown, signal: AbortSignal | undefined): boolean {\n\treturn (\n\t\tsignal?.aborted === true ||\n\t\t(error instanceof Error && (error.name === \"AbortError\" || error.name === \"AbortSignalError\"))\n\t);\n}\n\nfunction assertNotExpired(descriptor: PluginDistributionDescriptorV1, now: () => number): void {\n\tlet current: number;\n\ttry {\n\t\tcurrent = now();\n\t} catch {\n\t\treject(\"expired\");\n\t}\n\tif (!Number.isFinite(current)) reject(\"expired\");\n\tif (Date.parse(descriptor.expiresAt) <= current) reject(\"expired\");\n}\n\nasync function verifyDescriptor(\n\tdescriptor: PluginDistributionDescriptorV1,\n\tverifySignature: PluginDistributionSignatureVerifierV1 | undefined,\n\tnow: () => number,\n\tsignal: AbortSignal | undefined,\n): Promise<void> {\n\tif (signal?.aborted) reject(\"cancelled\");\n\tassertNotExpired(descriptor, now);\n\tif (verifySignature === undefined) reject(\"unsupported\");\n\tlet verification: PluginDistributionSignatureVerificationV1;\n\ttry {\n\t\tverification = await verifySignature({ descriptor });\n\t} catch {\n\t\treject(\"signature_invalid\");\n\t}\n\tif (signal?.aborted) reject(\"cancelled\");\n\tif (!isPlainRecord(verification) || verification.status !== \"accepted\") reject(\"signature_invalid\");\n}\n\n/** Create a host-injected distribution client. No host means all side effects are unsupported. */\nexport function createPluginDistributionV1(options: PluginDistributionOptionsV1 = {}): PluginDistributionV1 {\n\tconst verifySignature = options.verifySignature ?? options.verify;\n\tconst now = options.now ?? (() => Date.now());\n\tconst resolveMetadataForDescriptor = async (\n\t\tdescriptor: PluginDistributionDescriptorV1,\n\t\tsignal: AbortSignal | undefined,\n\t): Promise<PluginDistributionMetadataV1> => {\n\t\tif (signal?.aborted) reject(\"cancelled\");\n\t\tif (options.host?.resolveMetadata === undefined) reject(\"unsupported\");\n\t\tlet result: PluginDistributionMetadataV1;\n\t\ttry {\n\t\t\tresult = await options.host.resolveMetadata({ descriptor, signal });\n\t\t} catch (error) {\n\t\t\tif (isCancelled(error, signal)) reject(\"cancelled\");\n\t\t\treject(\"host_failed\");\n\t\t}\n\t\tif (signal?.aborted) reject(\"cancelled\");\n\t\tconst metadata = metadataValue(result);\n\t\tassertDescriptorMetadataMatch(descriptor, metadata);\n\t\tassertNotExpired(descriptor, now);\n\t\treturn metadata;\n\t};\n\n\tconst resolveMetadata = async (input: {\n\t\tdescriptor: unknown;\n\t\tsignal?: AbortSignal;\n\t}): Promise<PluginDistributionMetadataV1> => {\n\t\tconst descriptor = descriptorValue(input.descriptor);\n\t\tawait verifyDescriptor(descriptor, verifySignature, now, input.signal);\n\t\treturn resolveMetadataForDescriptor(descriptor, input.signal);\n\t};\n\n\tconst acquireArtifact = async (input: {\n\t\tdescriptor: unknown;\n\t\tmetadata?: unknown;\n\t\tsignal?: AbortSignal;\n\t}): Promise<PluginDistributionArtifactV1> => {\n\t\tconst descriptor = descriptorValue(input.descriptor);\n\t\tawait verifyDescriptor(descriptor, verifySignature, now, input.signal);\n\t\tif (options.host?.acquireArtifact === undefined) reject(\"unsupported\");\n\t\tconst metadata =\n\t\t\tinput.metadata === undefined\n\t\t\t\t? await resolveMetadataForDescriptor(descriptor, input.signal)\n\t\t\t\t: metadataValue(input.metadata);\n\t\tassertDescriptorMetadataMatch(descriptor, metadata);\n\t\tassertNotExpired(descriptor, now);\n\t\tlet result: PluginDistributionArtifactHandleV1;\n\t\tlet acquired: PluginDistributionArtifactV1 | undefined;\n\t\ttry {\n\t\t\tresult = await options.host.acquireArtifact({ descriptor, metadata, signal: input.signal });\n\t\t\tconst handle = artifactHandleValue(result);\n\t\t\tacquired = detachedFreeze({ ...metadata, artifactRef: handle.artifactRef });\n\t\t\tassertArtifactMatch(descriptor, handle);\n\t\t\tassertNotExpired(descriptor, now);\n\t\t\tif (input.signal?.aborted) reject(\"cancelled\");\n\t\t\treturn acquired;\n\t\t} catch (error) {\n\t\t\tif (acquired !== undefined && options.host.releaseArtifact !== undefined) {\n\t\t\t\tawait options.host.releaseArtifact({ artifact: acquired }).catch(() => undefined);\n\t\t\t}\n\t\t\tif (error instanceof PluginDistributionErrorV1) throw error;\n\t\t\tif (isCancelled(error, input.signal)) reject(\"cancelled\");\n\t\t\treject(\"host_failed\");\n\t\t}\n\t};\n\n\tconst releaseArtifact = async (input: { artifact: unknown; signal?: AbortSignal }): Promise<void> => {\n\t\tif (input.signal?.aborted) reject(\"cancelled\");\n\t\tif (options.host?.releaseArtifact === undefined) reject(\"unsupported\");\n\t\tconst value = input.artifact;\n\t\tif (!isPlainRecord(value) || !hasExactKeys(value, [...METADATA_KEYS, \"artifactRef\"])) reject(\"invalid_artifact\");\n\t\tconst metadataInput = Object.fromEntries(METADATA_KEYS.map((key) => [key, value[key]]));\n\t\tconst artifact = {\n\t\t\t...metadataValue(metadataInput),\n\t\t\tartifactRef: artifactHandleValue({\n\t\t\t\tartifactRef: value.artifactRef,\n\t\t\t\tartifactDigest: value.artifactDigest,\n\t\t\t\tsizeBytes: value.sizeBytes,\n\t\t\t\tmediaType: value.mediaType,\n\t\t\t}).artifactRef,\n\t\t};\n\t\ttry {\n\t\t\tawait options.host.releaseArtifact({ artifact: detachedFreeze(artifact), signal: input.signal });\n\t\t} catch (error) {\n\t\t\tif (isCancelled(error, input.signal)) reject(\"cancelled\");\n\t\t\treject(\"release_failed\");\n\t\t}\n\t\tif (input.signal?.aborted) reject(\"cancelled\");\n\t};\n\n\treturn {\n\t\tvalidateDescriptor(input) {\n\t\t\treturn descriptorValue(input);\n\t\t},\n\t\tresolveMetadata,\n\t\tacquireArtifact,\n\t\treleaseArtifact,\n\t};\n}\n"]}
+{"version":3,"file":"distribution.js","sourceRoot":"","sources":["../../../src/plugins/ecosystem/distribution.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACxE,OAAO,EAAE,CAAC,EAAE,MAAM,0BAA0B,CAAC;AAE7C,sFAAsF;AACtF,MAAM,CAAC,MAAM,uCAAuC,GAAG,CAAU,CAAC;AAElE,yEAAyE;AACzE,MAAM,CAAC,MAAM,2CAA2C,GAAG,EAAE,GAAG,IAAI,CAAC;AACrE,iFAAiF;AACjF,MAAM,CAAC,MAAM,sCAAsC,GAAG,IAAI,CAAC;AAC3D,2DAA2D;AAC3D,MAAM,CAAC,MAAM,yCAAyC,GAAG,EAAE,GAAG,IAAI,CAAC;AACnE,6CAA6C;AAC7C,MAAM,CAAC,MAAM,6CAA6C,GAAG,IAAI,CAAC;AAClE,8FAA8F;AAC9F,MAAM,CAAC,MAAM,yCAAyC,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC;AAqG3E,MAAM,cAAc,GAA4D;IAC/E,WAAW,EAAE,iDAAiD;IAC9D,SAAS,EAAE,6CAA6C;IACxD,kBAAkB,EAAE,2CAA2C;IAC/D,gBAAgB,EAAE,yCAAyC;IAC3D,gBAAgB,EAAE,gDAAgD;IAClE,eAAe,EAAE,0DAA0D;IAC3E,iBAAiB,EAAE,mEAAmE;IACtF,eAAe,EAAE,0DAA0D;IAC3E,iBAAiB,EAAE,4CAA4C;IAC/D,OAAO,EAAE,4CAA4C;IACrD,aAAa,EAAE,wDAAwD;IACvE,mBAAmB,EAAE,8DAA8D;IACnF,WAAW,EAAE,2CAA2C;IACxD,cAAc,EAAE,6CAA6C;CAC7D,CAAC;AAEF,0FAA0F;AAC1F,MAAM,OAAO,yBAA0B,SAAQ,KAAK;IAC1C,IAAI,CAAgC;IAE7C,YAAY,IAAmC,EAAE;QAChD,KAAK,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC/B,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAC;QACxC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IAAA,CACjB;CACD;AAcD,MAAM,eAAe,GAAG;IACvB,SAAS;IACT,QAAQ;IACR,UAAU;IACV,eAAe;IACf,gBAAgB;IAChB,gBAAgB;IAChB,WAAW;IACX,WAAW;IACX,WAAW;IACX,WAAW;CACF,CAAC;AACX,MAAM,aAAa,GAAG;IACrB,SAAS;IACT,QAAQ;IACR,UAAU;IACV,eAAe;IACf,gBAAgB;IAChB,gBAAgB;IAChB,WAAW;IACX,WAAW;IACX,WAAW;CACF,CAAC;AACX,MAAM,aAAa,GAAG,CAAC,aAAa,EAAE,gBAAgB,EAAE,WAAW,EAAE,WAAW,CAAU,CAAC;AAE3F,SAAS,MAAM,CAAC,IAAmC,EAAS;IAC3D,MAAM,IAAI,yBAAyB,CAAC,IAAI,CAAC,CAAC;AAAA,CAC1C;AAED,SAAS,YAAY,CAAC,KAA8B,EAAE,IAAuB,EAAW;IACvF,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC;IAC/B,OAAO,CACN,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,IAAI,KAAK,IAAI,CAAC,MAAM,CAAC;QACrF,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,IAAI,KAAK,CAAC,CACjC,CAAC;AAAA,CACF;AAED,SAAS,aAAa,CAAC,KAAc,EAAE,IAAmC,EAAU;IACnF,IACC,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;QACzB,KAAK,CAAC,MAAM,GAAG,sCAAsC;QACrD,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC,EACnC,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC;AAAA,CACb;AAED,SAAS,cAAc,CAAC,KAAc,EAAE,IAAmC,EAAU;IACpF,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAC1C,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IACrC,OAAO,MAAM,CAAC;AAAA,CACd;AAED,SAAS,YAAY,CAAC,KAAc,EAAE,IAAmC,EAAU;IAClF,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAC1C,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,6CAA6C,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IACnG,IAAI,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACnC,IAAI,CAAC;YACJ,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;YAC/B,IAAI,MAAM,CAAC,QAAQ,KAAK,EAAE,IAAI,MAAM,CAAC,QAAQ,KAAK,EAAE,EAAE,CAAC;gBACtD,MAAM,CAAC,QAAQ,GAAG,EAAE,CAAC;gBACrB,MAAM,CAAC,QAAQ,GAAG,EAAE,CAAC;YACtB,CAAC;YACD,MAAM,CAAC,MAAM,GAAG,EAAE,CAAC;YACnB,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC;YACjB,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC;YACxG,OAAO,GAAG,MAAM,CAAC,MAAM,GAAG,QAAQ,IAAI,GAAG,EAAE,CAAC;QAC7C,CAAC;QAAC,MAAM,CAAC;YACR,MAAM,CAAC,IAAI,CAAC,CAAC;QACd,CAAC;IACF,CAAC;IACD,OAAO,MAAM,CAAC;AAAA,CACd;AAED,SAAS,YAAY,CAAC,KAAc,EAAE,IAAmC,EAAU;IAClF,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAC3C,wEAAwE;IACxE,yEAAyE;IACzE,IAAI,CAAC,uEAAuE,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IACxG,OAAO,MAAM,CAAC;AAAA,CACd;AAED,SAAS,eAAe,CAAC,KAAc,EAAU;IAChD,MAAM,SAAS,GAAG,aAAa,CAAC,KAAK,EAAE,oBAAoB,CAAC,CAAC;IAC7D,IAAI,SAAS,CAAC,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC;QAAE,MAAM,CAAC,oBAAoB,CAAC,CAAC;IAClF,OAAO,SAAS,CAAC;AAAA,CACjB;AAED,SAAS,YAAY,CAAC,KAAc,EAAE,IAAmC,EAAU;IAClF,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAC1C,IAAI,CAAC,qDAAqD,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IACtF,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACrC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,KAAK,MAAM;QAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IAC9F,OAAO,MAAM,CAAC;AAAA,CACd;AAED,SAAS,YAAY,CAAC,KAAc,EAAE,IAAmC,EAAU;IAClF,IACC,OAAO,KAAK,KAAK,QAAQ;QACzB,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC;QAC5B,KAAK,GAAG,CAAC;QACT,KAAK,GAAG,yCAAyC;QAEjD,MAAM,CAAC,IAAI,CAAC,CAAC;IACd,OAAO,KAAK,CAAC;AAAA,CACb;AAED,SAAS,eAAe,CAAC,KAAc,EAAE,IAAmC,EAAU;IACrF,MAAM,SAAS,GAAG,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;IAC3D,IACC,SAAS,CAAC,MAAM,GAAG,GAAG;QACtB,CAAC,4FAA4F,CAAC,IAAI,CAAC,SAAS,CAAC;QAE7G,MAAM,CAAC,IAAI,CAAC,CAAC;IACd,OAAO,SAAS,CAAC;AAAA,CACjB;AAED,SAAS,eAAe,CAAC,KAAc,EAAE,IAAmC,EAAU;IACrF,IAAI,CAAC;QACJ,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACzC,IAAI,UAAU,KAAK,SAAS;YAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QAC3C,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,UAAU,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,CAAC,IAAI,CAAC,CAAC;IACd,CAAC;AAAA,CACD;AAED,SAAS,eAAe,CAAC,KAAc,EAAkC;IACxE,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,eAAe,CAAC;QAAE,MAAM,CAAC,oBAAoB,CAAC,CAAC;IACjG,IAAI,KAAK,CAAC,OAAO,KAAK,uCAAuC;QAAE,MAAM,CAAC,oBAAoB,CAAC,CAAC;IAC5F,MAAM,UAAU,GAAG;QAClB,OAAO,EAAE,uCAAuC;QAChD,MAAM,EAAE,YAAY,CAAC,KAAK,CAAC,MAAM,EAAE,oBAAoB,CAAC;QACxD,QAAQ,EAAE,cAAc,CAAC,KAAK,CAAC,QAAQ,EAAE,oBAAoB,CAAC;QAC9D,aAAa,EAAE,cAAc,CAAC,KAAK,CAAC,aAAa,EAAE,oBAAoB,CAAC;QACxE,cAAc,EAAE,YAAY,CAAC,KAAK,CAAC,cAAc,EAAE,oBAAoB,CAAC;QACxE,cAAc,EAAE,YAAY,CAAC,KAAK,CAAC,cAAc,EAAE,oBAAoB,CAAC;QACxE,SAAS,EAAE,eAAe,CAAC,KAAK,CAAC,SAAS,CAAC;QAC3C,SAAS,EAAE,YAAY,CAAC,KAAK,CAAC,SAAS,EAAE,oBAAoB,CAAC;QAC9D,SAAS,EAAE,YAAY,CAAC,KAAK,CAAC,SAAS,EAAE,oBAAoB,CAAC;QAC9D,SAAS,EAAE,eAAe,CAAC,KAAK,CAAC,SAAS,EAAE,oBAAoB,CAAC;KACjE,CAAC;IACF,IAAI,eAAe,CAAC,UAAU,EAAE,oBAAoB,CAAC,GAAG,2CAA2C;QAClG,MAAM,CAAC,oBAAoB,CAAC,CAAC;IAC9B,OAAO,cAAc,CAAC,UAAU,CAAC,CAAC;AAAA,CAClC;AAED,SAAS,aAAa,CAAC,KAAc,EAAgC;IACpE,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,aAAa,CAAC;QAAE,MAAM,CAAC,kBAAkB,CAAC,CAAC;IAC7F,IAAI,KAAK,CAAC,OAAO,KAAK,uCAAuC;QAAE,MAAM,CAAC,kBAAkB,CAAC,CAAC;IAC1F,MAAM,QAAQ,GAAG;QAChB,OAAO,EAAE,uCAAuC;QAChD,MAAM,EAAE,YAAY,CAAC,KAAK,CAAC,MAAM,EAAE,kBAAkB,CAAC;QACtD,QAAQ,EAAE,cAAc,CAAC,KAAK,CAAC,QAAQ,EAAE,kBAAkB,CAAC;QAC5D,aAAa,EAAE,cAAc,CAAC,KAAK,CAAC,aAAa,EAAE,kBAAkB,CAAC;QACtE,cAAc,EAAE,YAAY,CAAC,KAAK,CAAC,cAAc,EAAE,kBAAkB,CAAC;QACtE,cAAc,EAAE,YAAY,CAAC,KAAK,CAAC,cAAc,EAAE,kBAAkB,CAAC;QACtE,SAAS,EAAE,YAAY,CAAC,KAAK,CAAC,SAAS,EAAE,kBAAkB,CAAC;QAC5D,SAAS,EAAE,YAAY,CAAC,KAAK,CAAC,SAAS,EAAE,kBAAkB,CAAC;QAC5D,SAAS,EAAE,eAAe,CAAC,KAAK,CAAC,SAAS,EAAE,kBAAkB,CAAC;KAC/D,CAAC;IACF,IAAI,eAAe,CAAC,QAAQ,EAAE,kBAAkB,CAAC,GAAG,yCAAyC;QAC5F,MAAM,CAAC,kBAAkB,CAAC,CAAC;IAC5B,OAAO,cAAc,CAAC,QAAQ,CAAC,CAAC;AAAA,CAChC;AAED,SAAS,mBAAmB,CAAC,KAAc,EAAsC;IAChF,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,aAAa,CAAC;QAAE,MAAM,CAAC,kBAAkB,CAAC,CAAC;IAC7F,MAAM,QAAQ,GAAG;QAChB,WAAW,EAAE,aAAa,CAAC,KAAK,CAAC,WAAW,EAAE,kBAAkB,CAAC;QACjE,cAAc,EAAE,YAAY,CAAC,KAAK,CAAC,cAAc,EAAE,kBAAkB,CAAC;QACtE,SAAS,EAAE,YAAY,CAAC,KAAK,CAAC,SAAS,EAAE,kBAAkB,CAAC;QAC5D,SAAS,EAAE,eAAe,CAAC,KAAK,CAAC,SAAS,EAAE,kBAAkB,CAAC;KAC/D,CAAC;IACF,IACC,0BAA0B,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC;QACrD,6CAA6C,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC;QACxE,QAAQ,CAAC,WAAW,CAAC,MAAM,GAAG,6CAA6C;QAE3E,MAAM,CAAC,kBAAkB,CAAC,CAAC;IAC5B,OAAO,cAAc,CAAC,QAAQ,CAAC,CAAC;AAAA,CAChC;AAED,SAAS,6BAA6B,CACrC,UAA0C,EAC1C,QAAsC,EAC/B;IACP,IAAI,QAAQ,CAAC,MAAM,KAAK,UAAU,CAAC,MAAM;QAAE,MAAM,CAAC,iBAAiB,CAAC,CAAC;IACrE,IAAI,QAAQ,CAAC,QAAQ,KAAK,UAAU,CAAC,QAAQ,IAAI,QAAQ,CAAC,aAAa,KAAK,UAAU,CAAC,aAAa;QACnG,MAAM,CAAC,mBAAmB,CAAC,CAAC;IAC7B,IAAI,QAAQ,CAAC,cAAc,KAAK,UAAU,CAAC,cAAc,IAAI,QAAQ,CAAC,cAAc,KAAK,UAAU,CAAC,cAAc;QACjH,MAAM,CAAC,iBAAiB,CAAC,CAAC;IAC3B,IAAI,QAAQ,CAAC,SAAS,KAAK,UAAU,CAAC,SAAS;QAAE,MAAM,CAAC,SAAS,CAAC,CAAC;IACnE,IAAI,QAAQ,CAAC,SAAS,KAAK,UAAU,CAAC,SAAS;QAAE,MAAM,CAAC,eAAe,CAAC,CAAC;IACzE,IAAI,QAAQ,CAAC,SAAS,KAAK,UAAU,CAAC,SAAS;QAAE,MAAM,CAAC,qBAAqB,CAAC,CAAC;AAAA,CAC/E;AAED,SAAS,mBAAmB,CAC3B,UAA0C,EAC1C,QAA4C,EACrC;IACP,IAAI,QAAQ,CAAC,cAAc,KAAK,UAAU,CAAC,cAAc;QAAE,MAAM,CAAC,iBAAiB,CAAC,CAAC;IACrF,IAAI,QAAQ,CAAC,SAAS,KAAK,UAAU,CAAC,SAAS;QAAE,MAAM,CAAC,eAAe,CAAC,CAAC;IACzE,IAAI,QAAQ,CAAC,SAAS,KAAK,UAAU,CAAC,SAAS;QAAE,MAAM,CAAC,qBAAqB,CAAC,CAAC;AAAA,CAC/E;AAED,SAAS,WAAW,CAAC,KAAc,EAAE,MAA+B,EAAW;IAC9E,OAAO,CACN,MAAM,EAAE,OAAO,KAAK,IAAI;QACxB,CAAC,KAAK,YAAY,KAAK,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,YAAY,IAAI,KAAK,CAAC,IAAI,KAAK,kBAAkB,CAAC,CAAC,CAC9F,CAAC;AAAA,CACF;AAED,SAAS,gBAAgB,CAAC,UAA0C,EAAE,GAAiB,EAAQ;IAC9F,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACJ,OAAO,GAAG,GAAG,EAAE,CAAC;IACjB,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,CAAC,SAAS,CAAC,CAAC;IACnB,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,MAAM,CAAC,SAAS,CAAC,CAAC;IACjD,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,OAAO;QAAE,MAAM,CAAC,SAAS,CAAC,CAAC;AAAA,CACnE;AAED,KAAK,UAAU,gBAAgB,CAC9B,UAA0C,EAC1C,eAAkE,EAClE,GAAiB,EACjB,MAA+B,EACf;IAChB,IAAI,MAAM,EAAE,OAAO;QAAE,MAAM,CAAC,WAAW,CAAC,CAAC;IACzC,gBAAgB,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;IAClC,IAAI,eAAe,KAAK,SAAS;QAAE,MAAM,CAAC,aAAa,CAAC,CAAC;IACzD,IAAI,YAAuD,CAAC;IAC5D,IAAI,CAAC;QACJ,YAAY,GAAG,MAAM,eAAe,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,CAAC,mBAAmB,CAAC,CAAC;IAC7B,CAAC;IACD,IAAI,MAAM,EAAE,OAAO;QAAE,MAAM,CAAC,WAAW,CAAC,CAAC;IACzC,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,IAAI,YAAY,CAAC,MAAM,KAAK,UAAU;QAAE,MAAM,CAAC,mBAAmB,CAAC,CAAC;AAAA,CACpG;AAED,kGAAkG;AAClG,MAAM,UAAU,0BAA0B,CAAC,OAAO,GAAgC,EAAE,EAAwB;IAC3G,MAAM,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,OAAO,CAAC,MAAM,CAAC;IAClE,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC9C,MAAM,4BAA4B,GAAG,KAAK,EACzC,UAA0C,EAC1C,MAA+B,EACS,EAAE,CAAC;QAC3C,IAAI,MAAM,EAAE,OAAO;YAAE,MAAM,CAAC,WAAW,CAAC,CAAC;QACzC,IAAI,OAAO,CAAC,IAAI,EAAE,eAAe,KAAK,SAAS;YAAE,MAAM,CAAC,aAAa,CAAC,CAAC;QACvE,IAAI,MAAoC,CAAC;QACzC,IAAI,CAAC;YACJ,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC;QACrE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC;gBAAE,MAAM,CAAC,WAAW,CAAC,CAAC;YACpD,MAAM,CAAC,aAAa,CAAC,CAAC;QACvB,CAAC;QACD,IAAI,MAAM,EAAE,OAAO;YAAE,MAAM,CAAC,WAAW,CAAC,CAAC;QACzC,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;QACvC,6BAA6B,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QACpD,gBAAgB,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;QAClC,OAAO,QAAQ,CAAC;IAAA,CAChB,CAAC;IAEF,MAAM,eAAe,GAAG,KAAK,EAAE,KAG9B,EAAyC,EAAE,CAAC;QAC5C,MAAM,UAAU,GAAG,eAAe,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACrD,MAAM,gBAAgB,CAAC,UAAU,EAAE,eAAe,EAAE,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QACvE,OAAO,4BAA4B,CAAC,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAAA,CAC9D,CAAC;IAEF,MAAM,eAAe,GAAG,KAAK,EAAE,KAI9B,EAAyC,EAAE,CAAC;QAC5C,MAAM,UAAU,GAAG,eAAe,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACrD,MAAM,gBAAgB,CAAC,UAAU,EAAE,eAAe,EAAE,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QACvE,IAAI,OAAO,CAAC,IAAI,EAAE,eAAe,KAAK,SAAS;YAAE,MAAM,CAAC,aAAa,CAAC,CAAC;QACvE,MAAM,QAAQ,GACb,KAAK,CAAC,QAAQ,KAAK,SAAS;YAC3B,CAAC,CAAC,MAAM,4BAA4B,CAAC,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC;YAC9D,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAClC,6BAA6B,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QACpD,gBAAgB,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;QAClC,IAAI,MAA0C,CAAC;QAC/C,IAAI,QAAkD,CAAC;QACvD,IAAI,CAAC;YACJ,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;YAC5F,MAAM,MAAM,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;YAC3C,QAAQ,GAAG,cAAc,CAAC,EAAE,GAAG,QAAQ,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;YAC5E,mBAAmB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;YACxC,gBAAgB,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;YAClC,IAAI,KAAK,CAAC,MAAM,EAAE,OAAO;gBAAE,MAAM,CAAC,WAAW,CAAC,CAAC;YAC/C,OAAO,QAAQ,CAAC;QACjB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,QAAQ,KAAK,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;gBAC1E,MAAM,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YACnF,CAAC;YACD,IAAI,KAAK,YAAY,yBAAyB;gBAAE,MAAM,KAAK,CAAC;YAC5D,IAAI,WAAW,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC;gBAAE,MAAM,CAAC,WAAW,CAAC,CAAC;YAC1D,MAAM,CAAC,aAAa,CAAC,CAAC;QACvB,CAAC;IAAA,CACD,CAAC;IAEF,MAAM,eAAe,GAAG,KAAK,EAAE,KAAkD,EAAiB,EAAE,CAAC;QACpG,IAAI,KAAK,CAAC,MAAM,EAAE,OAAO;YAAE,MAAM,CAAC,WAAW,CAAC,CAAC;QAC/C,IAAI,OAAO,CAAC,IAAI,EAAE,eAAe,KAAK,SAAS;YAAE,MAAM,CAAC,aAAa,CAAC,CAAC;QACvE,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC;QAC7B,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC,GAAG,aAAa,EAAE,aAAa,CAAC,CAAC;YAAE,MAAM,CAAC,kBAAkB,CAAC,CAAC;QACjH,MAAM,aAAa,GAAG,MAAM,CAAC,WAAW,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACxF,MAAM,QAAQ,GAAG;YAChB,GAAG,aAAa,CAAC,aAAa,CAAC;YAC/B,WAAW,EAAE,mBAAmB,CAAC;gBAChC,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,cAAc,EAAE,KAAK,CAAC,cAAc;gBACpC,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;aAC1B,CAAC,CAAC,WAAW;SACd,CAAC;QACF,IAAI,CAAC;YACJ,MAAM,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,QAAQ,EAAE,cAAc,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QAClG,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,WAAW,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC;gBAAE,MAAM,CAAC,WAAW,CAAC,CAAC;YAC1D,MAAM,CAAC,gBAAgB,CAAC,CAAC;QAC1B,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,EAAE,OAAO;YAAE,MAAM,CAAC,WAAW,CAAC,CAAC;IAAA,CAC/C,CAAC;IAEF,OAAO;QACN,kBAAkB,CAAC,KAAK,EAAE;YACzB,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC;QAAA,CAC9B;QACD,eAAe;QACf,eAAe;QACf,eAAe;KACf,CAAC;AAAA,CACF","sourcesContent":["import { detachedFreeze, isPlainRecord } from \"@agent-forge/plugin-sdk\";\nimport { t } from \"../../core/i18n/index.ts\";\n\n/** Distribution contract version. The host and package must agree on this version. */\nexport const PLUGIN_DISTRIBUTION_CONTRACT_VERSION_V1 = 1 as const;\n\n/** Maximum serialized descriptor size crossing the registry boundary. */\nexport const MAX_PLUGIN_DISTRIBUTION_DESCRIPTOR_BYTES_V1 = 16 * 1024;\n/** Maximum length of identity, URI, digest, signature, and media-type fields. */\nexport const MAX_PLUGIN_DISTRIBUTION_FIELD_CHARS_V1 = 2048;\n/** Maximum descriptor metadata size returned by a host. */\nexport const MAX_PLUGIN_DISTRIBUTION_METADATA_BYTES_V1 = 16 * 1024;\n/** Maximum opaque artifact handle length. */\nexport const MAX_PLUGIN_DISTRIBUTION_ARTIFACT_REF_CHARS_V1 = 2048;\n/** Maximum package size accepted by this contract. Larger artifacts need a newer contract. */\nexport const MAX_PLUGIN_DISTRIBUTION_ARTIFACT_BYTES_V1 = 512 * 1024 * 1024;\n\n/** A signed, bounded package descriptor. It contains no package bytes or local path. */\nexport interface PluginDistributionDescriptorV1 {\n\treadonly version: 1;\n\treadonly source: string;\n\treadonly pluginId: string;\n\treadonly pluginVersion: string;\n\treadonly manifestDigest: string;\n\treadonly artifactDigest: string;\n\treadonly signature: string;\n\treadonly expiresAt: string;\n\treadonly sizeBytes: number;\n\treadonly mediaType: string;\n}\n\n/** Metadata resolved by a host before any artifact is acquired. */\nexport interface PluginDistributionMetadataV1 {\n\treadonly version: 1;\n\treadonly source: string;\n\treadonly pluginId: string;\n\treadonly pluginVersion: string;\n\treadonly manifestDigest: string;\n\treadonly artifactDigest: string;\n\treadonly expiresAt: string;\n\treadonly sizeBytes: number;\n\treadonly mediaType: string;\n}\n\n/** Host-owned acquisition result. `artifactRef` is opaque and is never a path. */\nexport interface PluginDistributionArtifactHandleV1 {\n\treadonly artifactRef: string;\n\treadonly artifactDigest: string;\n\treadonly sizeBytes: number;\n\treadonly mediaType: string;\n}\n\n/** Model-facing acquisition projection. It deliberately contains no bytes or metadata payload. */\nexport interface PluginDistributionArtifactV1 extends PluginDistributionMetadataV1 {\n\treadonly artifactRef: string;\n}\n\nexport interface PluginDistributionSignatureVerificationInputV1 {\n\treadonly descriptor: PluginDistributionDescriptorV1;\n}\n\nexport type PluginDistributionSignatureVerificationV1 =\n\t| { readonly status: \"accepted\" }\n\t| { readonly status: \"rejected\"; readonly reason?: string };\n\nexport type PluginDistributionSignatureVerifierV1 = (\n\tinput: PluginDistributionSignatureVerificationInputV1,\n) => PluginDistributionSignatureVerificationV1 | Promise<PluginDistributionSignatureVerificationV1>;\n\n/**\n * Host boundary for registry metadata and package bytes. The core never opens a\n * URL, reads a path, or receives package bytes; hosts return only bounded metadata\n * and opaque artifact references.\n */\nexport interface PluginDistributionHostV1 {\n\treadonly resolveMetadata?: (input: {\n\t\treadonly descriptor: PluginDistributionDescriptorV1;\n\t\treadonly signal?: AbortSignal;\n\t}) => Promise<PluginDistributionMetadataV1>;\n\treadonly acquireArtifact?: (input: {\n\t\treadonly descriptor: PluginDistributionDescriptorV1;\n\t\treadonly metadata: PluginDistributionMetadataV1;\n\t\treadonly signal?: AbortSignal;\n\t}) => Promise<PluginDistributionArtifactHandleV1>;\n\treadonly releaseArtifact?: (input: {\n\t\treadonly artifact: PluginDistributionArtifactV1;\n\t\treadonly signal?: AbortSignal;\n\t}) => Promise<void>;\n}\n\nexport interface PluginDistributionOptionsV1 {\n\treadonly host?: PluginDistributionHostV1;\n\t/** Required for trust. There is no implicit signature acceptance fallback. */\n\treadonly verifySignature?: PluginDistributionSignatureVerifierV1;\n\t/** Alias for callers using the registry verifier naming. */\n\treadonly verify?: PluginDistributionSignatureVerifierV1;\n\t/** Injected clock for deterministic tests; returns epoch milliseconds. */\n\treadonly now?: () => number;\n}\n\nexport type PluginDistributionErrorCodeV1 =\n\t| \"unsupported\"\n\t| \"cancelled\"\n\t| \"invalid_descriptor\"\n\t| \"invalid_metadata\"\n\t| \"invalid_artifact\"\n\t| \"source_mismatch\"\n\t| \"identity_mismatch\"\n\t| \"digest_mismatch\"\n\t| \"signature_invalid\"\n\t| \"expired\"\n\t| \"size_mismatch\"\n\t| \"media_type_mismatch\"\n\t| \"host_failed\"\n\t| \"release_failed\";\n\nconst ERROR_MESSAGES: Readonly<Record<PluginDistributionErrorCodeV1, string>> = {\n\tunsupported: \"Plugin distribution is unsupported on this host\",\n\tcancelled: \"Plugin distribution operation was cancelled\",\n\tinvalid_descriptor: \"Plugin distribution descriptor is invalid\",\n\tinvalid_metadata: \"Plugin distribution metadata is invalid\",\n\tinvalid_artifact: \"Plugin distribution artifact handle is invalid\",\n\tsource_mismatch: \"Plugin distribution source does not match the descriptor\",\n\tidentity_mismatch: \"Plugin distribution plugin identity does not match the descriptor\",\n\tdigest_mismatch: \"Plugin distribution digest does not match the descriptor\",\n\tsignature_invalid: \"Plugin distribution signature was rejected\",\n\texpired: \"Plugin distribution descriptor has expired\",\n\tsize_mismatch: \"Plugin distribution size does not match the descriptor\",\n\tmedia_type_mismatch: \"Plugin distribution media type does not match the descriptor\",\n\thost_failed: \"Plugin distribution host operation failed\",\n\trelease_failed: \"Plugin distribution artifact release failed\",\n};\n\n/** Stable, non-leaking distribution error. Host exception messages are never retained. */\nexport class PluginDistributionErrorV1 extends Error {\n\treadonly code: PluginDistributionErrorCodeV1;\n\n\tconstructor(code: PluginDistributionErrorCodeV1) {\n\t\tsuper(t(ERROR_MESSAGES[code]));\n\t\tthis.name = \"PluginDistributionErrorV1\";\n\t\tthis.code = code;\n\t}\n}\n\nexport interface PluginDistributionV1 {\n\t/** Validate and detach a descriptor before passing it to a host or verifier. */\n\tvalidateDescriptor(input: unknown): PluginDistributionDescriptorV1;\n\tresolveMetadata(input: { descriptor: unknown; signal?: AbortSignal }): Promise<PluginDistributionMetadataV1>;\n\tacquireArtifact(input: {\n\t\tdescriptor: unknown;\n\t\tmetadata?: unknown;\n\t\tsignal?: AbortSignal;\n\t}): Promise<PluginDistributionArtifactV1>;\n\treleaseArtifact(input: { artifact: unknown; signal?: AbortSignal }): Promise<void>;\n}\n\nconst DESCRIPTOR_KEYS = [\n\t\"version\",\n\t\"source\",\n\t\"pluginId\",\n\t\"pluginVersion\",\n\t\"manifestDigest\",\n\t\"artifactDigest\",\n\t\"signature\",\n\t\"expiresAt\",\n\t\"sizeBytes\",\n\t\"mediaType\",\n] as const;\nconst METADATA_KEYS = [\n\t\"version\",\n\t\"source\",\n\t\"pluginId\",\n\t\"pluginVersion\",\n\t\"manifestDigest\",\n\t\"artifactDigest\",\n\t\"expiresAt\",\n\t\"sizeBytes\",\n\t\"mediaType\",\n] as const;\nconst ARTIFACT_KEYS = [\"artifactRef\", \"artifactDigest\", \"sizeBytes\", \"mediaType\"] as const;\n\nfunction reject(code: PluginDistributionErrorCodeV1): never {\n\tthrow new PluginDistributionErrorV1(code);\n}\n\nfunction hasExactKeys(value: Record<string, unknown>, keys: readonly string[]): boolean {\n\tconst expected = new Set(keys);\n\treturn (\n\t\tObject.keys(value).every((key) => expected.has(key) && expected.size === keys.length) &&\n\t\tkeys.every((key) => key in value)\n\t);\n}\n\nfunction boundedString(value: unknown, code: PluginDistributionErrorCodeV1): string {\n\tif (\n\t\ttypeof value !== \"string\" ||\n\t\tvalue.trim().length === 0 ||\n\t\tvalue.length > MAX_PLUGIN_DISTRIBUTION_FIELD_CHARS_V1 ||\n\t\t/[\\u0000-\\u001f\\u007f]/u.test(value)\n\t) {\n\t\treject(code);\n\t}\n\treturn value;\n}\n\nfunction identityString(value: unknown, code: PluginDistributionErrorCodeV1): string {\n\tconst result = boundedString(value, code);\n\tif (/\\s/u.test(result)) reject(code);\n\treturn result;\n}\n\nfunction sourceString(value: unknown, code: PluginDistributionErrorCodeV1): string {\n\tconst source = boundedString(value, code);\n\tif (/\\s/u.test(source) || /^(?:file:|[a-zA-Z]:[\\\\/]|[\\\\/]{1,2}|\\\\\\\\)/iu.test(source)) reject(code);\n\tif (/^https?:\\/\\//iu.test(source)) {\n\t\ttry {\n\t\t\tconst parsed = new URL(source);\n\t\t\tif (parsed.username !== \"\" || parsed.password !== \"\") {\n\t\t\t\tparsed.username = \"\";\n\t\t\t\tparsed.password = \"\";\n\t\t\t}\n\t\t\tparsed.search = \"\";\n\t\t\tparsed.hash = \"\";\n\t\t\tconst pathname = parsed.pathname.length > 512 ? `${parsed.pathname.slice(0, 509)}...` : parsed.pathname;\n\t\t\treturn `${parsed.origin}${pathname || \"/\"}`;\n\t\t} catch {\n\t\t\treject(code);\n\t\t}\n\t}\n\treturn source;\n}\n\nfunction digestString(value: unknown, code: PluginDistributionErrorCodeV1): string {\n\tconst digest = identityString(value, code);\n\t// Hosts may use a cryptographic digest or a versioned digest token. The\n\t// boundary validates shape and equality; only the host can verify bytes.\n\tif (!/^(?:[a-z][a-z0-9+.-]{0,15}:[A-Za-z0-9._~-]{1,128}|[0-9a-f]{16,128})$/u.test(digest)) reject(code);\n\treturn digest;\n}\n\nfunction signatureString(value: unknown): string {\n\tconst signature = boundedString(value, \"invalid_descriptor\");\n\tif (signature.length > 512 || /\\s/u.test(signature)) reject(\"invalid_descriptor\");\n\treturn signature;\n}\n\nfunction expiryString(value: unknown, code: PluginDistributionErrorCodeV1): string {\n\tconst expiry = boundedString(value, code);\n\tif (!/^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}(?:\\.\\d{3})?Z$/u.test(expiry)) reject(code);\n\tconst timestamp = Date.parse(expiry);\n\tif (!Number.isFinite(timestamp) || new Date(timestamp).toISOString() !== expiry) reject(code);\n\treturn expiry;\n}\n\nfunction positiveSize(value: unknown, code: PluginDistributionErrorCodeV1): number {\n\tif (\n\t\ttypeof value !== \"number\" ||\n\t\t!Number.isSafeInteger(value) ||\n\t\tvalue < 1 ||\n\t\tvalue > MAX_PLUGIN_DISTRIBUTION_ARTIFACT_BYTES_V1\n\t)\n\t\treject(code);\n\treturn value;\n}\n\nfunction mediaTypeString(value: unknown, code: PluginDistributionErrorCodeV1): string {\n\tconst mediaType = boundedString(value, code).toLowerCase();\n\tif (\n\t\tmediaType.length > 256 ||\n\t\t!/^[a-z0-9!#$&^_.+-]+\\/[a-z0-9!#$&^_.+-]+(?:\\s*;\\s*[a-z0-9!#$&^_.+-]+=[a-z0-9!#$&^_.+-]+)*$/u.test(mediaType)\n\t)\n\t\treject(code);\n\treturn mediaType;\n}\n\nfunction serializedBytes(value: unknown, code: PluginDistributionErrorCodeV1): number {\n\ttry {\n\t\tconst serialized = JSON.stringify(value);\n\t\tif (serialized === undefined) reject(code);\n\t\treturn new TextEncoder().encode(serialized).byteLength;\n\t} catch {\n\t\treject(code);\n\t}\n}\n\nfunction descriptorValue(value: unknown): PluginDistributionDescriptorV1 {\n\tif (!isPlainRecord(value) || !hasExactKeys(value, DESCRIPTOR_KEYS)) reject(\"invalid_descriptor\");\n\tif (value.version !== PLUGIN_DISTRIBUTION_CONTRACT_VERSION_V1) reject(\"invalid_descriptor\");\n\tconst descriptor = {\n\t\tversion: PLUGIN_DISTRIBUTION_CONTRACT_VERSION_V1,\n\t\tsource: sourceString(value.source, \"invalid_descriptor\"),\n\t\tpluginId: identityString(value.pluginId, \"invalid_descriptor\"),\n\t\tpluginVersion: identityString(value.pluginVersion, \"invalid_descriptor\"),\n\t\tmanifestDigest: digestString(value.manifestDigest, \"invalid_descriptor\"),\n\t\tartifactDigest: digestString(value.artifactDigest, \"invalid_descriptor\"),\n\t\tsignature: signatureString(value.signature),\n\t\texpiresAt: expiryString(value.expiresAt, \"invalid_descriptor\"),\n\t\tsizeBytes: positiveSize(value.sizeBytes, \"invalid_descriptor\"),\n\t\tmediaType: mediaTypeString(value.mediaType, \"invalid_descriptor\"),\n\t};\n\tif (serializedBytes(descriptor, \"invalid_descriptor\") > MAX_PLUGIN_DISTRIBUTION_DESCRIPTOR_BYTES_V1)\n\t\treject(\"invalid_descriptor\");\n\treturn detachedFreeze(descriptor);\n}\n\nfunction metadataValue(value: unknown): PluginDistributionMetadataV1 {\n\tif (!isPlainRecord(value) || !hasExactKeys(value, METADATA_KEYS)) reject(\"invalid_metadata\");\n\tif (value.version !== PLUGIN_DISTRIBUTION_CONTRACT_VERSION_V1) reject(\"invalid_metadata\");\n\tconst metadata = {\n\t\tversion: PLUGIN_DISTRIBUTION_CONTRACT_VERSION_V1,\n\t\tsource: sourceString(value.source, \"invalid_metadata\"),\n\t\tpluginId: identityString(value.pluginId, \"invalid_metadata\"),\n\t\tpluginVersion: identityString(value.pluginVersion, \"invalid_metadata\"),\n\t\tmanifestDigest: digestString(value.manifestDigest, \"invalid_metadata\"),\n\t\tartifactDigest: digestString(value.artifactDigest, \"invalid_metadata\"),\n\t\texpiresAt: expiryString(value.expiresAt, \"invalid_metadata\"),\n\t\tsizeBytes: positiveSize(value.sizeBytes, \"invalid_metadata\"),\n\t\tmediaType: mediaTypeString(value.mediaType, \"invalid_metadata\"),\n\t};\n\tif (serializedBytes(metadata, \"invalid_metadata\") > MAX_PLUGIN_DISTRIBUTION_METADATA_BYTES_V1)\n\t\treject(\"invalid_metadata\");\n\treturn detachedFreeze(metadata);\n}\n\nfunction artifactHandleValue(value: unknown): PluginDistributionArtifactHandleV1 {\n\tif (!isPlainRecord(value) || !hasExactKeys(value, ARTIFACT_KEYS)) reject(\"invalid_artifact\");\n\tconst artifact = {\n\t\tartifactRef: boundedString(value.artifactRef, \"invalid_artifact\"),\n\t\tartifactDigest: digestString(value.artifactDigest, \"invalid_artifact\"),\n\t\tsizeBytes: positiveSize(value.sizeBytes, \"invalid_artifact\"),\n\t\tmediaType: mediaTypeString(value.mediaType, \"invalid_artifact\"),\n\t};\n\tif (\n\t\t/[\\s\\u0000-\\u001f\\u007f]/u.test(artifact.artifactRef) ||\n\t\t/^(?:file:|[a-zA-Z]:[\\\\/]|[\\\\/]{1,2}|\\\\\\\\)/iu.test(artifact.artifactRef) ||\n\t\tartifact.artifactRef.length > MAX_PLUGIN_DISTRIBUTION_ARTIFACT_REF_CHARS_V1\n\t)\n\t\treject(\"invalid_artifact\");\n\treturn detachedFreeze(artifact);\n}\n\nfunction assertDescriptorMetadataMatch(\n\tdescriptor: PluginDistributionDescriptorV1,\n\tmetadata: PluginDistributionMetadataV1,\n): void {\n\tif (metadata.source !== descriptor.source) reject(\"source_mismatch\");\n\tif (metadata.pluginId !== descriptor.pluginId || metadata.pluginVersion !== descriptor.pluginVersion)\n\t\treject(\"identity_mismatch\");\n\tif (metadata.manifestDigest !== descriptor.manifestDigest || metadata.artifactDigest !== descriptor.artifactDigest)\n\t\treject(\"digest_mismatch\");\n\tif (metadata.expiresAt !== descriptor.expiresAt) reject(\"expired\");\n\tif (metadata.sizeBytes !== descriptor.sizeBytes) reject(\"size_mismatch\");\n\tif (metadata.mediaType !== descriptor.mediaType) reject(\"media_type_mismatch\");\n}\n\nfunction assertArtifactMatch(\n\tdescriptor: PluginDistributionDescriptorV1,\n\tartifact: PluginDistributionArtifactHandleV1,\n): void {\n\tif (artifact.artifactDigest !== descriptor.artifactDigest) reject(\"digest_mismatch\");\n\tif (artifact.sizeBytes !== descriptor.sizeBytes) reject(\"size_mismatch\");\n\tif (artifact.mediaType !== descriptor.mediaType) reject(\"media_type_mismatch\");\n}\n\nfunction isCancelled(error: unknown, signal: AbortSignal | undefined): boolean {\n\treturn (\n\t\tsignal?.aborted === true ||\n\t\t(error instanceof Error && (error.name === \"AbortError\" || error.name === \"AbortSignalError\"))\n\t);\n}\n\nfunction assertNotExpired(descriptor: PluginDistributionDescriptorV1, now: () => number): void {\n\tlet current: number;\n\ttry {\n\t\tcurrent = now();\n\t} catch {\n\t\treject(\"expired\");\n\t}\n\tif (!Number.isFinite(current)) reject(\"expired\");\n\tif (Date.parse(descriptor.expiresAt) <= current) reject(\"expired\");\n}\n\nasync function verifyDescriptor(\n\tdescriptor: PluginDistributionDescriptorV1,\n\tverifySignature: PluginDistributionSignatureVerifierV1 | undefined,\n\tnow: () => number,\n\tsignal: AbortSignal | undefined,\n): Promise<void> {\n\tif (signal?.aborted) reject(\"cancelled\");\n\tassertNotExpired(descriptor, now);\n\tif (verifySignature === undefined) reject(\"unsupported\");\n\tlet verification: PluginDistributionSignatureVerificationV1;\n\ttry {\n\t\tverification = await verifySignature({ descriptor });\n\t} catch {\n\t\treject(\"signature_invalid\");\n\t}\n\tif (signal?.aborted) reject(\"cancelled\");\n\tif (!isPlainRecord(verification) || verification.status !== \"accepted\") reject(\"signature_invalid\");\n}\n\n/** Create a host-injected distribution client. No host means all side effects are unsupported. */\nexport function createPluginDistributionV1(options: PluginDistributionOptionsV1 = {}): PluginDistributionV1 {\n\tconst verifySignature = options.verifySignature ?? options.verify;\n\tconst now = options.now ?? (() => Date.now());\n\tconst resolveMetadataForDescriptor = async (\n\t\tdescriptor: PluginDistributionDescriptorV1,\n\t\tsignal: AbortSignal | undefined,\n\t): Promise<PluginDistributionMetadataV1> => {\n\t\tif (signal?.aborted) reject(\"cancelled\");\n\t\tif (options.host?.resolveMetadata === undefined) reject(\"unsupported\");\n\t\tlet result: PluginDistributionMetadataV1;\n\t\ttry {\n\t\t\tresult = await options.host.resolveMetadata({ descriptor, signal });\n\t\t} catch (error) {\n\t\t\tif (isCancelled(error, signal)) reject(\"cancelled\");\n\t\t\treject(\"host_failed\");\n\t\t}\n\t\tif (signal?.aborted) reject(\"cancelled\");\n\t\tconst metadata = metadataValue(result);\n\t\tassertDescriptorMetadataMatch(descriptor, metadata);\n\t\tassertNotExpired(descriptor, now);\n\t\treturn metadata;\n\t};\n\n\tconst resolveMetadata = async (input: {\n\t\tdescriptor: unknown;\n\t\tsignal?: AbortSignal;\n\t}): Promise<PluginDistributionMetadataV1> => {\n\t\tconst descriptor = descriptorValue(input.descriptor);\n\t\tawait verifyDescriptor(descriptor, verifySignature, now, input.signal);\n\t\treturn resolveMetadataForDescriptor(descriptor, input.signal);\n\t};\n\n\tconst acquireArtifact = async (input: {\n\t\tdescriptor: unknown;\n\t\tmetadata?: unknown;\n\t\tsignal?: AbortSignal;\n\t}): Promise<PluginDistributionArtifactV1> => {\n\t\tconst descriptor = descriptorValue(input.descriptor);\n\t\tawait verifyDescriptor(descriptor, verifySignature, now, input.signal);\n\t\tif (options.host?.acquireArtifact === undefined) reject(\"unsupported\");\n\t\tconst metadata =\n\t\t\tinput.metadata === undefined\n\t\t\t\t? await resolveMetadataForDescriptor(descriptor, input.signal)\n\t\t\t\t: metadataValue(input.metadata);\n\t\tassertDescriptorMetadataMatch(descriptor, metadata);\n\t\tassertNotExpired(descriptor, now);\n\t\tlet result: PluginDistributionArtifactHandleV1;\n\t\tlet acquired: PluginDistributionArtifactV1 | undefined;\n\t\ttry {\n\t\t\tresult = await options.host.acquireArtifact({ descriptor, metadata, signal: input.signal });\n\t\t\tconst handle = artifactHandleValue(result);\n\t\t\tacquired = detachedFreeze({ ...metadata, artifactRef: handle.artifactRef });\n\t\t\tassertArtifactMatch(descriptor, handle);\n\t\t\tassertNotExpired(descriptor, now);\n\t\t\tif (input.signal?.aborted) reject(\"cancelled\");\n\t\t\treturn acquired;\n\t\t} catch (error) {\n\t\t\tif (acquired !== undefined && options.host.releaseArtifact !== undefined) {\n\t\t\t\tawait options.host.releaseArtifact({ artifact: acquired }).catch(() => undefined);\n\t\t\t}\n\t\t\tif (error instanceof PluginDistributionErrorV1) throw error;\n\t\t\tif (isCancelled(error, input.signal)) reject(\"cancelled\");\n\t\t\treject(\"host_failed\");\n\t\t}\n\t};\n\n\tconst releaseArtifact = async (input: { artifact: unknown; signal?: AbortSignal }): Promise<void> => {\n\t\tif (input.signal?.aborted) reject(\"cancelled\");\n\t\tif (options.host?.releaseArtifact === undefined) reject(\"unsupported\");\n\t\tconst value = input.artifact;\n\t\tif (!isPlainRecord(value) || !hasExactKeys(value, [...METADATA_KEYS, \"artifactRef\"])) reject(\"invalid_artifact\");\n\t\tconst metadataInput = Object.fromEntries(METADATA_KEYS.map((key) => [key, value[key]]));\n\t\tconst artifact = {\n\t\t\t...metadataValue(metadataInput),\n\t\t\tartifactRef: artifactHandleValue({\n\t\t\t\tartifactRef: value.artifactRef,\n\t\t\t\tartifactDigest: value.artifactDigest,\n\t\t\t\tsizeBytes: value.sizeBytes,\n\t\t\t\tmediaType: value.mediaType,\n\t\t\t}).artifactRef,\n\t\t};\n\t\ttry {\n\t\t\tawait options.host.releaseArtifact({ artifact: detachedFreeze(artifact), signal: input.signal });\n\t\t} catch (error) {\n\t\t\tif (isCancelled(error, input.signal)) reject(\"cancelled\");\n\t\t\treject(\"release_failed\");\n\t\t}\n\t\tif (input.signal?.aborted) reject(\"cancelled\");\n\t};\n\n\treturn {\n\t\tvalidateDescriptor(input) {\n\t\t\treturn descriptorValue(input);\n\t\t},\n\t\tresolveMetadata,\n\t\tacquireArtifact,\n\t\treleaseArtifact,\n\t};\n}\n"]}

package/dist/plugins/ecosystem/installer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"installer.d.ts","sourceRoot":"","sources":["../../../src/plugins/ecosystem/installer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,mBAAmB,CAAC;AACtE,OAAO,KAAK,EAAE,WAAW,EAAE,sBAAsB,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAE5F,OAAO,EAAuB,KAAK,oBAAoB,EAAwB,MAAM,cAAc,CAAC;AAGpG,eAAO,MAAM,6BAA6B,OAAO,CAAC;AAClD,0EAA0E;AAC1E,eAAO,MAAM,kCAAkC,mBAAmB,CAAC;AAEnE,MAAM,MAAM,yBAAyB,GAAG,QAAQ,GAAG,SAAS,CAAC;AAQ7D,MAAM,WAAW,oBAAoB;IACpC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IACpB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,uFAAuF;IACvF,QAAQ,CAAC,KAAK,EAAE,yBAAyB,CAAC;IAC1C,8FAA8F;IAC9F,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,iEAAiE;IACjE,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,KAAK,EAAE,WAAW,GAAG,QAAQ,GAAG,UAAU,CAAC;CACpD;AAED,MAAM,WAAW,mBAAmB;IACnC;;;;OAIG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,SAAS,yBAAyB,EAAE,CAAC;IAChE;yFACqF;IACrF,OAAO,CAAC,KAAK,EAAE;QACd,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAC;QACtC,QAAQ,CAAC,KAAK,EAAE,yBAAyB,CAAC;QAC1C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,6FAA6F;QAC7F,QAAQ,CAAC,QAAQ,CAAC,EAAE,4BAA4B,CAAC;QACjD,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;KAC9B,GAAG,OAAO,CAAC;QACX,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;QACjC,QAAQ,CAAC,KAAK,CAAC,EAAE,yBAAyB,CAAC;QAC3C,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;KAC3B,CAAC,CAAC;IACH,QAAQ,CAAC,KAAK,EAAE;QACf,QAAQ,CAAC,YAAY,EAAE,oBAAoB,CAAC;QAC5C,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAC;QACtC,QAAQ,CAAC,KAAK,EAAE,yBAAyB,CAAC;QAC1C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;KAC9B,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClB,QAAQ,CAAC,KAAK,EAAE;QACf,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAC;QACtC,QAAQ,CAAC,QAAQ,EAAE,oBAAoB,CAAC;QACxC,QAAQ,CAAC,KAAK,EAAE,yBAAyB,CAAC;QAC1C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;KAC9B,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClB;;;;OAIG;IACH,SAAS,CAAC,EAAE,CAAC,KAAK,EAAE;QACnB,QAAQ,CAAC,YAAY,EAAE,oBAAoB,CAAC;QAC5C,QAAQ,CAAC,KAAK,EAAE,yBAAyB,CAAC;QAC1C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;KAC9B,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACpB;AAED,MAAM,WAAW,wBAAwB;IACxC,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAC;IACnC,QAAQ,CAAC,QAAQ,CAAC,EAAE,sBAAsB,CAAC;CAC3C;AAED,MAAM,MAAM,0BAA0B,GACnC,sBAAsB,GACtB,mBAAmB,GACnB,gBAAgB,GAChB,mBAAmB,GACnB,iBAAiB,GACjB,kBAAkB,CAAC;AAEtB,MAAM,MAAM,uBAAuB,GAChC;IACA,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,QAAQ,CAAC,YAAY,EAAE,oBAAoB,CAAC;CAC3C,GACD;IACA,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CACxE,GACD;IACA,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE;QACf,QAAQ,CAAC,IAAI,EAAE,0BAA0B,CAAC;QAC1C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;KACzB,CAAC;CACD,CAAC;AAEL,MAAM,WAAW,iBAAiB;IACjC,oFAAoF;IACpF,QAAQ,CAAC,eAAe,EAAE,SAAS,yBAAyB,EAAE,CAAC;IAC/D,OAAO,CAAC,KAAK,EAAE;QACd,QAAQ,CAAC,QAAQ,EAAE,oBAAoB,CAAC,UAAU,CAAC,CAAC;QACpD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;QAC3B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;KACjC,GAAG,oBAAoB,CAAC;IACzB,OAAO,CAAC,KAAK,EAAE;QACd,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAC;QACtC,0EAA0E;QAC1E,QAAQ,CAAC,KAAK,CAAC,EAAE,yBAAyB,CAAC;QAC3C,+EAA+E;QAC/E,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,QAAQ,CAAC,EAAE,4BAA4B,CAAC;QACjD,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;KAC9B,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;IACrC,QAAQ,CAAC,KAAK,EAAE;QACf,QAAQ,CAAC,YAAY,EAAE,oBAAoB,CAAC;QAC5C,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAC;QACtC,QAAQ,CAAC,KAAK,CAAC,EAAE,yBAAyB,CAAC;QAC3C,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;KAC9B,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;IACrC,QAAQ,CAAC,KAAK,EAAE;QACf,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAC;QACtC,QAAQ,CAAC,QAAQ,EAAE,oBAAoB,CAAC;QACxC,QAAQ,CAAC,KAAK,CAAC,EAAE,yBAAyB,CAAC;QAC3C,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;KAC9B,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;IACrC,yEAAyE;IACzE,MAAM,CAAC,KAAK,EAAE;QACb,QAAQ,CAAC,YAAY,EAAE,oBAAoB,CAAC;QAC5C,QAAQ,CAAC,KAAK,CAAC,EAAE,yBAAyB,CAAC;QAC3C,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;KAC9B,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;CACrC;AAmLD,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,wBAAwB,GAAG,iBAAiB,CAyJ5F","sourcesContent":["import type { PluginDistributionArtifactV1 } from \"./distribution.ts\";\nimport type { HostFactsV1, PluginSourceVerifierV1, PluginUpdateRecordV1 } from \"./types.ts\";\n\nimport { stagePluginUpdateV1, type UpdateVerificationV1, verifyPluginUpdateV1 } from \"./updates.ts\";\n\nconst MAX_INSTALLATION_REF_CHARS_V1 = 2048;\nexport const MAX_PLUGIN_SCOPE_REF_CHARS_V1 = 2048;\n/** Stable host namespace for installations that are not project-local. */\nexport const DEFAULT_GLOBAL_PLUGIN_SCOPE_REF_V1 = \"global:default\";\n\nexport type PluginInstallationScopeV1 = \"global\" | \"project\";\n\ninterface PluginScopeIdentityV1 {\n\treadonly scope: PluginInstallationScopeV1;\n\t/** Opaque host namespace; it must never disclose a local project path. */\n\treadonly scopeRef: string;\n}\n\nexport interface PluginInstallationV1 {\n\treadonly version: 1;\n\treadonly pluginId: string;\n\treadonly pluginVersion: string;\n\treadonly manifestDigest: string;\n\t/** The host installation namespace. It is part of the opaque installation identity. */\n\treadonly scope: PluginInstallationScopeV1;\n\t/** Concrete host namespace that distinguishes global and individual project installations. */\n\treadonly scopeRef?: string;\n\t/** Opaque host-owned installation handle; never a local path. */\n\treadonly installationRef: string;\n\treadonly state: \"installed\" | \"active\" | \"retained\";\n}\n\nexport interface PluginInstallHostV1 {\n\t/**\n\t * Scopes that this host can isolate physically. Omitting this declaration\n\t * preserves the legacy global-only host behavior; project operations must be\n\t * declared explicitly.\n\t */\n\treadonly supportedScopes?: readonly PluginInstallationScopeV1[];\n\t/** Host operations are atomic from the installer's perspective: an abort may\n\t * prevent starting work, but once a method resolves its side effect is committed. */\n\tinstall(input: {\n\t\treadonly record: PluginUpdateRecordV1;\n\t\treadonly scope: PluginInstallationScopeV1;\n\t\treadonly scopeRef: string;\n\t\t/** A host-owned, digest-bound package reference. Package bytes never cross this contract. */\n\t\treadonly artifact?: PluginDistributionArtifactV1;\n\t\treadonly signal?: AbortSignal;\n\t}): Promise<{\n\t\treadonly installationRef: string;\n\t\treadonly scope?: PluginInstallationScopeV1;\n\t\treadonly scopeRef?: string;\n\t}>;\n\tactivate(input: {\n\t\treadonly installation: PluginInstallationV1;\n\t\treadonly record: PluginUpdateRecordV1;\n\t\treadonly scope: PluginInstallationScopeV1;\n\t\treadonly scopeRef: string;\n\t\treadonly signal?: AbortSignal;\n\t}): Promise<void>;\n\trollback(input: {\n\t\treadonly failed: PluginInstallationV1;\n\t\treadonly previous: PluginInstallationV1;\n\t\treadonly scope: PluginInstallationScopeV1;\n\t\treadonly scopeRef: string;\n\t\treadonly signal?: AbortSignal;\n\t}): Promise<void>;\n\t/**\n\t * Remove a host-owned installation. The method is optional so hosts can\n\t * still expose state-only management while they are migrating; callers that\n\t * need physical cleanup must treat a missing method as unsupported.\n\t */\n\tuninstall?: (input: {\n\t\treadonly installation: PluginInstallationV1;\n\t\treadonly scope: PluginInstallationScopeV1;\n\t\treadonly scopeRef: string;\n\t\treadonly signal?: AbortSignal;\n\t}) => Promise<void>;\n}\n\nexport interface PluginInstallerOptionsV1 {\n\treadonly host: PluginInstallHostV1;\n\treadonly verifier?: PluginSourceVerifierV1;\n}\n\nexport type PluginInstallerErrorCodeV1 =\n\t| \"invalid_installation\"\n\t| \"unsupported_scope\"\n\t| \"install_failed\"\n\t| \"activation_failed\"\n\t| \"rollback_failed\"\n\t| \"uninstall_failed\";\n\nexport type PluginInstallerResultV1 =\n\t| {\n\t\t\treadonly status: \"succeeded\";\n\t\t\treadonly installation: PluginInstallationV1;\n\t  }\n\t| {\n\t\t\treadonly status: \"cancelled\";\n\t\t\treadonly error: { readonly code: \"cancelled\"; readonly message: string };\n\t  }\n\t| {\n\t\t\treadonly status: \"failed\";\n\t\t\treadonly error: {\n\t\t\t\treadonly code: PluginInstallerErrorCodeV1;\n\t\t\t\treadonly message: string;\n\t\t\t};\n\t  };\n\nexport interface PluginInstallerV1 {\n\t/** Declared, host-backed installation scopes. Project support is never inferred. */\n\treadonly supportedScopes: readonly PluginInstallationScopeV1[];\n\tprepare(input: {\n\t\treadonly manifest: PluginUpdateRecordV1[\"manifest\"];\n\t\treadonly source: string;\n\t\treadonly host: HostFactsV1;\n\t\treadonly expectedDigest?: string;\n\t}): UpdateVerificationV1;\n\tinstall(input: {\n\t\treadonly record: PluginUpdateRecordV1;\n\t\t/** Omitting scope preserves the existing global installation behavior. */\n\t\treadonly scope?: PluginInstallationScopeV1;\n\t\t/** Required for project installations; global defaults to `global:default`. */\n\t\treadonly scopeRef?: string;\n\t\treadonly artifact?: PluginDistributionArtifactV1;\n\t\treadonly signal?: AbortSignal;\n\t}): Promise<PluginInstallerResultV1>;\n\tactivate(input: {\n\t\treadonly installation: PluginInstallationV1;\n\t\treadonly record: PluginUpdateRecordV1;\n\t\treadonly scope?: PluginInstallationScopeV1;\n\t\treadonly scopeRef?: string;\n\t\treadonly signal?: AbortSignal;\n\t}): Promise<PluginInstallerResultV1>;\n\trollback(input: {\n\t\treadonly failed: PluginInstallationV1;\n\t\treadonly previous: PluginInstallationV1;\n\t\treadonly scope?: PluginInstallationScopeV1;\n\t\treadonly scopeRef?: string;\n\t\treadonly signal?: AbortSignal;\n\t}): Promise<PluginInstallerResultV1>;\n\t/** Remove one installed version after validating its opaque identity. */\n\tremove(input: {\n\t\treadonly installation: PluginInstallationV1;\n\t\treadonly scope?: PluginInstallationScopeV1;\n\t\treadonly scopeRef?: string;\n\t\treadonly signal?: AbortSignal;\n\t}): Promise<PluginInstallerResultV1>;\n}\n\nfunction opaqueInstallationRef(value: unknown): string {\n\tif (typeof value !== \"string\" || value.trim() === \"\" || value.length > MAX_INSTALLATION_REF_CHARS_V1)\n\t\tthrow new Error(\"installation reference is invalid\");\n\tif (/^(?:file:|[a-zA-Z]:[\\\\/]|[\\\\/]{1,2}|\\\\\\\\)/iu.test(value) || /\\s/u.test(value))\n\t\tthrow new Error(\"installation reference must be opaque\");\n\treturn value;\n}\n\nfunction opaqueScopeRef(value: unknown): string {\n\tif (typeof value !== \"string\" || value.trim() === \"\" || value.length > MAX_PLUGIN_SCOPE_REF_CHARS_V1)\n\t\tthrow new Error(\"plugin installation scope reference is invalid\");\n\tif (/^(?:file:|[a-zA-Z]:[\\\\/]|[\\\\/]{1,2}|\\\\\\\\)/iu.test(value) || /\\s/u.test(value))\n\t\tthrow new Error(\"plugin installation scope reference must be opaque\");\n\treturn value;\n}\n\nfunction installationFrom(\n\trecord: PluginUpdateRecordV1,\n\tinstallationRef: string,\n\tscopeIdentity: PluginScopeIdentityV1,\n\tstate: PluginInstallationV1[\"state\"],\n): PluginInstallationV1 {\n\treturn Object.freeze({\n\t\tversion: 1,\n\t\tpluginId: record.pluginId,\n\t\tpluginVersion: record.pluginVersion,\n\t\tmanifestDigest: record.manifestDigest,\n\t\tscope: scopeIdentity.scope,\n\t\tscopeRef: scopeIdentity.scopeRef,\n\t\tinstallationRef: opaqueInstallationRef(installationRef),\n\t\tstate,\n\t});\n}\n\nfunction cancelled(): PluginInstallerResultV1 {\n\treturn {\n\t\tstatus: \"cancelled\",\n\t\terror: {\n\t\t\tcode: \"cancelled\",\n\t\t\tmessage: \"Plugin installation operation was cancelled\",\n\t\t},\n\t};\n}\n\nfunction failure(code: PluginInstallerErrorCodeV1): PluginInstallerResultV1 {\n\treturn {\n\t\tstatus: \"failed\",\n\t\terror: {\n\t\t\tcode,\n\t\t\tmessage:\n\t\t\t\tcode === \"invalid_installation\"\n\t\t\t\t\t? \"The plugin installation handle is invalid\"\n\t\t\t\t\t: code === \"unsupported_scope\"\n\t\t\t\t\t\t? \"The plugin installer does not support this scope\"\n\t\t\t\t\t\t: code === \"install_failed\"\n\t\t\t\t\t\t\t? \"The host plugin installer failed\"\n\t\t\t\t\t\t\t: code === \"activation_failed\"\n\t\t\t\t\t\t\t\t? \"The host plugin activation failed\"\n\t\t\t\t\t\t\t\t: code === \"rollback_failed\"\n\t\t\t\t\t\t\t\t\t? \"The host plugin rollback failed\"\n\t\t\t\t\t\t\t\t\t: \"The host plugin uninstall failed\",\n\t\t},\n\t};\n}\n\nfunction validateInstallation(installation: PluginInstallationV1): void {\n\tif (\n\t\tinstallation.version !== 1 ||\n\t\ttypeof installation.pluginId !== \"string\" ||\n\t\ttypeof installation.pluginVersion !== \"string\" ||\n\t\ttypeof installation.manifestDigest !== \"string\" ||\n\t\tinstallation.pluginId.trim() === \"\" ||\n\t\tinstallation.pluginVersion.trim() === \"\" ||\n\t\tinstallation.manifestDigest.trim() === \"\"\n\t)\n\t\tthrow new Error(\"plugin installation handle is invalid\");\n\tif (installation.scope !== \"global\" && installation.scope !== \"project\")\n\t\tthrow new Error(\"plugin installation scope is invalid\");\n\tconst scopeRef =\n\t\tinstallation.scopeRef === undefined\n\t\t\t? installation.scope === \"global\"\n\t\t\t\t? DEFAULT_GLOBAL_PLUGIN_SCOPE_REF_V1\n\t\t\t\t: (() => {\n\t\t\t\t\t\tthrow new Error(\"project installation scope reference is required\");\n\t\t\t\t\t})()\n\t\t\t: opaqueScopeRef(installation.scopeRef);\n\tif (installation.scope === \"global\" && scopeRef !== DEFAULT_GLOBAL_PLUGIN_SCOPE_REF_V1)\n\t\tthrow new Error(\"plugin global installation scope reference is invalid\");\n\topaqueInstallationRef(installation.installationRef);\n}\n\nfunction ensureIdentity(\n\tinstallation: PluginInstallationV1,\n\trecord: PluginUpdateRecordV1,\n\tscopeIdentity: PluginScopeIdentityV1,\n): void {\n\tvalidateInstallation(installation);\n\tif (\n\t\tinstallation.pluginId !== record.pluginId ||\n\t\tinstallation.pluginVersion !== record.pluginVersion ||\n\t\tinstallation.manifestDigest !== record.manifestDigest ||\n\t\tinstallation.scope !== scopeIdentity.scope ||\n\t\t(installation.scopeRef ?? DEFAULT_GLOBAL_PLUGIN_SCOPE_REF_V1) !== scopeIdentity.scopeRef\n\t)\n\t\tthrow new Error(\"plugin installation identity mismatch\");\n}\n\nfunction normalizeScope(scope: PluginInstallationScopeV1 | undefined): PluginInstallationScopeV1 {\n\tif (scope === undefined) return \"global\";\n\tif (scope === \"global\" || scope === \"project\") return scope;\n\tthrow new Error(\"plugin installation scope is invalid\");\n}\n\nfunction normalizeScopeIdentity(\n\tscope: PluginInstallationScopeV1 | undefined,\n\tscopeRef: string | undefined,\n): PluginScopeIdentityV1 {\n\tconst normalizedScope = normalizeScope(scope);\n\tif (scopeRef === undefined) {\n\t\tif (normalizedScope !== \"global\") throw new Error(\"project installation scope reference is required\");\n\t\treturn Object.freeze({ scope: normalizedScope, scopeRef: DEFAULT_GLOBAL_PLUGIN_SCOPE_REF_V1 });\n\t}\n\tconst normalizedScopeRef = opaqueScopeRef(scopeRef);\n\tif (normalizedScope === \"global\" && normalizedScopeRef !== DEFAULT_GLOBAL_PLUGIN_SCOPE_REF_V1)\n\t\tthrow new Error(\"plugin global installation scope reference is invalid\");\n\treturn Object.freeze({ scope: normalizedScope, scopeRef: normalizedScopeRef });\n}\n\nfunction declaredScopes(host: PluginInstallHostV1): readonly PluginInstallationScopeV1[] {\n\tif (host.supportedScopes === undefined) return Object.freeze([\"global\"]);\n\tif (\n\t\t!Array.isArray(host.supportedScopes) ||\n\t\tnew Set(host.supportedScopes).size !== host.supportedScopes.length ||\n\t\thost.supportedScopes.some((scope) => scope !== \"global\" && scope !== \"project\")\n\t)\n\t\treturn Object.freeze([]);\n\treturn Object.freeze([...host.supportedScopes]);\n}\n\nfunction hostAcceptedScope(\n\tinstallation: { readonly scope?: PluginInstallationScopeV1; readonly scopeRef?: string },\n\tscopeIdentity: PluginScopeIdentityV1,\n): void {\n\tif (scopeIdentity.scope === \"global\" && installation.scope === undefined && installation.scopeRef === undefined)\n\t\treturn;\n\tif (installation.scope !== scopeIdentity.scope || installation.scopeRef !== scopeIdentity.scopeRef)\n\t\tthrow new Error(\"plugin installation scope mismatch\");\n}\n\nfunction ensureArtifactIdentity(artifact: PluginDistributionArtifactV1, record: PluginUpdateRecordV1): void {\n\tif (\n\t\tartifact.version !== 1 ||\n\t\tartifact.pluginId !== record.pluginId ||\n\t\tartifact.pluginVersion !== record.pluginVersion ||\n\t\tartifact.manifestDigest !== record.manifestDigest ||\n\t\ttypeof artifact.artifactRef !== \"string\" ||\n\t\tartifact.artifactRef.trim() === \"\"\n\t)\n\t\tthrow new Error(\"plugin distribution artifact identity mismatch\");\n\topaqueInstallationRef(artifact.artifactRef);\n}\n\nfunction isInvalidInstallationError(value: unknown): boolean {\n\treturn (\n\t\tvalue instanceof Error &&\n\t\t(value.message === \"plugin installation handle is invalid\" ||\n\t\t\tvalue.message === \"plugin installation scope is invalid\" ||\n\t\t\tvalue.message === \"plugin installation scope reference is invalid\" ||\n\t\t\tvalue.message === \"plugin installation scope reference must be opaque\" ||\n\t\t\tvalue.message === \"plugin global installation scope reference is invalid\" ||\n\t\t\tvalue.message === \"project installation scope reference is required\" ||\n\t\t\tvalue.message === \"plugin installation identity mismatch\" ||\n\t\t\tvalue.message === \"plugin installation scope mismatch\" ||\n\t\t\tvalue.message === \"plugin distribution artifact identity mismatch\")\n\t);\n}\n\nexport function createPluginInstallerV1(options: PluginInstallerOptionsV1): PluginInstallerV1 {\n\tconst supportedScopes = declaredScopes(options.host);\n\tconst supportsScope = (scope: PluginInstallationScopeV1): boolean => supportedScopes.includes(scope);\n\treturn {\n\t\tsupportedScopes,\n\t\tprepare(input) {\n\t\t\tconst staged = stagePluginUpdateV1({\n\t\t\t\tmanifest: input.manifest,\n\t\t\t\tsource: input.source,\n\t\t\t});\n\t\t\treturn verifyPluginUpdateV1({\n\t\t\t\trecord: staged,\n\t\t\t\thost: input.host,\n\t\t\t\texpectedDigest: input.expectedDigest,\n\t\t\t\tverifier: options.verifier,\n\t\t\t});\n\t\t},\n\t\tasync install(input) {\n\t\t\tif (input.signal?.aborted) return cancelled();\n\t\t\tlet scopeIdentity: PluginScopeIdentityV1;\n\t\t\ttry {\n\t\t\t\tscopeIdentity = normalizeScopeIdentity(input.scope, input.scopeRef);\n\t\t\t} catch {\n\t\t\t\treturn failure(\"invalid_installation\");\n\t\t\t}\n\t\t\tif (!supportsScope(scopeIdentity.scope)) return failure(\"unsupported_scope\");\n\t\t\tif (input.record.state !== \"verified\") return failure(\"invalid_installation\");\n\t\t\ttry {\n\t\t\t\tif (input.artifact !== undefined) ensureArtifactIdentity(input.artifact, input.record);\n\t\t\t\tconst installed = await options.host.install({\n\t\t\t\t\trecord: input.record,\n\t\t\t\t\tscope: scopeIdentity.scope,\n\t\t\t\t\tscopeRef: scopeIdentity.scopeRef,\n\t\t\t\t\t...(input.artifact === undefined ? {} : { artifact: input.artifact }),\n\t\t\t\t\tsignal: input.signal,\n\t\t\t\t});\n\t\t\t\thostAcceptedScope(installed, scopeIdentity);\n\t\t\t\treturn {\n\t\t\t\t\tstatus: \"succeeded\",\n\t\t\t\t\tinstallation: installationFrom(input.record, installed.installationRef, scopeIdentity, \"installed\"),\n\t\t\t\t};\n\t\t\t} catch (error) {\n\t\t\t\tif (isInvalidInstallationError(error)) return failure(\"invalid_installation\");\n\t\t\t\treturn input.signal?.aborted ? cancelled() : failure(\"install_failed\");\n\t\t\t}\n\t\t},\n\t\tasync activate(input) {\n\t\t\tif (input.signal?.aborted) return cancelled();\n\t\t\tlet scopeIdentity: PluginScopeIdentityV1;\n\t\t\ttry {\n\t\t\t\tscopeIdentity = normalizeScopeIdentity(input.scope, input.scopeRef);\n\t\t\t\tif (!supportsScope(scopeIdentity.scope)) return failure(\"unsupported_scope\");\n\t\t\t\tensureIdentity(input.installation, input.record, scopeIdentity);\n\t\t\t\tif (input.installation.state !== \"installed\" || input.record.state !== \"verified\")\n\t\t\t\t\treturn failure(\"invalid_installation\");\n\t\t\t\tawait options.host.activate({\n\t\t\t\t\tinstallation: input.installation,\n\t\t\t\t\trecord: input.record,\n\t\t\t\t\tscope: scopeIdentity.scope,\n\t\t\t\t\tscopeRef: scopeIdentity.scopeRef,\n\t\t\t\t\tsignal: input.signal,\n\t\t\t\t});\n\t\t\t\treturn {\n\t\t\t\t\tstatus: \"succeeded\",\n\t\t\t\t\tinstallation: Object.freeze({\n\t\t\t\t\t\t...input.installation,\n\t\t\t\t\t\tstate: \"active\" as const,\n\t\t\t\t\t}),\n\t\t\t\t};\n\t\t\t} catch (error) {\n\t\t\t\tif (isInvalidInstallationError(error)) return failure(\"invalid_installation\");\n\t\t\t\treturn input.signal?.aborted ? cancelled() : failure(\"activation_failed\");\n\t\t\t}\n\t\t},\n\t\tasync rollback(input) {\n\t\t\tif (input.signal?.aborted) return cancelled();\n\t\t\tlet scopeIdentity: PluginScopeIdentityV1;\n\t\t\ttry {\n\t\t\t\tscopeIdentity = normalizeScopeIdentity(input.scope, input.scopeRef);\n\t\t\t\tif (!supportsScope(scopeIdentity.scope)) return failure(\"unsupported_scope\");\n\t\t\t\tvalidateInstallation(input.failed);\n\t\t\t\tvalidateInstallation(input.previous);\n\t\t\t\tif (input.failed.state !== \"installed\" && input.failed.state !== \"active\")\n\t\t\t\t\treturn failure(\"invalid_installation\");\n\t\t\t\tif (input.previous.state !== \"active\") return failure(\"invalid_installation\");\n\t\t\t\tif (\n\t\t\t\t\tinput.failed.pluginId !== input.previous.pluginId ||\n\t\t\t\t\tinput.failed.scope !== scopeIdentity.scope ||\n\t\t\t\t\tinput.previous.scope !== scopeIdentity.scope ||\n\t\t\t\t\t(input.failed.scopeRef ?? DEFAULT_GLOBAL_PLUGIN_SCOPE_REF_V1) !== scopeIdentity.scopeRef ||\n\t\t\t\t\t(input.previous.scopeRef ?? DEFAULT_GLOBAL_PLUGIN_SCOPE_REF_V1) !== scopeIdentity.scopeRef\n\t\t\t\t)\n\t\t\t\t\treturn failure(\"invalid_installation\");\n\t\t\t\tawait options.host.rollback({\n\t\t\t\t\tfailed: input.failed,\n\t\t\t\t\tprevious: input.previous,\n\t\t\t\t\tscope: scopeIdentity.scope,\n\t\t\t\t\tscopeRef: scopeIdentity.scopeRef,\n\t\t\t\t\tsignal: input.signal,\n\t\t\t\t});\n\t\t\t\treturn {\n\t\t\t\t\tstatus: \"succeeded\",\n\t\t\t\t\tinstallation: Object.freeze({\n\t\t\t\t\t\t...input.previous,\n\t\t\t\t\t\tstate: \"active\" as const,\n\t\t\t\t\t}),\n\t\t\t\t};\n\t\t\t} catch (error) {\n\t\t\t\tif (isInvalidInstallationError(error)) return failure(\"invalid_installation\");\n\t\t\t\treturn input.signal?.aborted ? cancelled() : failure(\"rollback_failed\");\n\t\t\t}\n\t\t},\n\t\tasync remove(input) {\n\t\t\tif (input.signal?.aborted) return cancelled();\n\t\t\tlet scopeIdentity: PluginScopeIdentityV1;\n\t\t\ttry {\n\t\t\t\tscopeIdentity = normalizeScopeIdentity(input.scope, input.scopeRef);\n\t\t\t\tif (!supportsScope(scopeIdentity.scope)) return failure(\"unsupported_scope\");\n\t\t\t\tvalidateInstallation(input.installation);\n\t\t\t} catch {\n\t\t\t\treturn failure(\"invalid_installation\");\n\t\t\t}\n\t\t\tif (\n\t\t\t\tinput.installation.state !== \"installed\" &&\n\t\t\t\tinput.installation.state !== \"active\" &&\n\t\t\t\tinput.installation.state !== \"retained\"\n\t\t\t)\n\t\t\t\treturn failure(\"invalid_installation\");\n\t\t\tif (\n\t\t\t\tinput.installation.scope !== scopeIdentity.scope ||\n\t\t\t\t(input.installation.scopeRef ?? DEFAULT_GLOBAL_PLUGIN_SCOPE_REF_V1) !== scopeIdentity.scopeRef\n\t\t\t)\n\t\t\t\treturn failure(\"invalid_installation\");\n\t\t\tif (options.host.uninstall === undefined) return failure(\"uninstall_failed\");\n\t\t\ttry {\n\t\t\t\tawait options.host.uninstall({\n\t\t\t\t\tinstallation: input.installation,\n\t\t\t\t\tscope: scopeIdentity.scope,\n\t\t\t\t\tscopeRef: scopeIdentity.scopeRef,\n\t\t\t\t\tsignal: input.signal,\n\t\t\t\t});\n\t\t\t\treturn {\n\t\t\t\t\tstatus: \"succeeded\",\n\t\t\t\t\tinstallation: Object.freeze({\n\t\t\t\t\t\t...input.installation,\n\t\t\t\t\t\tstate: \"retained\" as const,\n\t\t\t\t\t}),\n\t\t\t\t};\n\t\t\t} catch {\n\t\t\t\treturn input.signal?.aborted ? cancelled() : failure(\"uninstall_failed\");\n\t\t\t}\n\t\t},\n\t};\n}\n"]}
+{"version":3,"file":"installer.d.ts","sourceRoot":"","sources":["../../../src/plugins/ecosystem/installer.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,mBAAmB,CAAC;AACtE,OAAO,KAAK,EAAE,WAAW,EAAE,sBAAsB,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAE5F,OAAO,EAAuB,KAAK,oBAAoB,EAAwB,MAAM,cAAc,CAAC;AAGpG,eAAO,MAAM,6BAA6B,OAAO,CAAC;AAClD,0EAA0E;AAC1E,eAAO,MAAM,kCAAkC,mBAAmB,CAAC;AAEnE,MAAM,MAAM,yBAAyB,GAAG,QAAQ,GAAG,SAAS,CAAC;AAQ7D,MAAM,WAAW,oBAAoB;IACpC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IACpB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,uFAAuF;IACvF,QAAQ,CAAC,KAAK,EAAE,yBAAyB,CAAC;IAC1C,8FAA8F;IAC9F,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,iEAAiE;IACjE,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,KAAK,EAAE,WAAW,GAAG,QAAQ,GAAG,UAAU,CAAC;CACpD;AAED,MAAM,WAAW,mBAAmB;IACnC;;;;OAIG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,SAAS,yBAAyB,EAAE,CAAC;IAChE;yFACqF;IACrF,OAAO,CAAC,KAAK,EAAE;QACd,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAC;QACtC,QAAQ,CAAC,KAAK,EAAE,yBAAyB,CAAC;QAC1C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,6FAA6F;QAC7F,QAAQ,CAAC,QAAQ,CAAC,EAAE,4BAA4B,CAAC;QACjD,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;KAC9B,GAAG,OAAO,CAAC;QACX,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;QACjC,QAAQ,CAAC,KAAK,CAAC,EAAE,yBAAyB,CAAC;QAC3C,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;KAC3B,CAAC,CAAC;IACH,QAAQ,CAAC,KAAK,EAAE;QACf,QAAQ,CAAC,YAAY,EAAE,oBAAoB,CAAC;QAC5C,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAC;QACtC,QAAQ,CAAC,KAAK,EAAE,yBAAyB,CAAC;QAC1C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;KAC9B,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClB,QAAQ,CAAC,KAAK,EAAE;QACf,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAC;QACtC,QAAQ,CAAC,QAAQ,EAAE,oBAAoB,CAAC;QACxC,QAAQ,CAAC,KAAK,EAAE,yBAAyB,CAAC;QAC1C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;KAC9B,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClB;;;;OAIG;IACH,SAAS,CAAC,EAAE,CAAC,KAAK,EAAE;QACnB,QAAQ,CAAC,YAAY,EAAE,oBAAoB,CAAC;QAC5C,QAAQ,CAAC,KAAK,EAAE,yBAAyB,CAAC;QAC1C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;KAC9B,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACpB;AAED,MAAM,WAAW,wBAAwB;IACxC,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAC;IACnC,QAAQ,CAAC,QAAQ,CAAC,EAAE,sBAAsB,CAAC;CAC3C;AAED,MAAM,MAAM,0BAA0B,GACnC,sBAAsB,GACtB,mBAAmB,GACnB,gBAAgB,GAChB,mBAAmB,GACnB,iBAAiB,GACjB,kBAAkB,CAAC;AAEtB,MAAM,MAAM,uBAAuB,GAChC;IACA,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,QAAQ,CAAC,YAAY,EAAE,oBAAoB,CAAC;CAC3C,GACD;IACA,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CACxE,GACD;IACA,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE;QACf,QAAQ,CAAC,IAAI,EAAE,0BAA0B,CAAC;QAC1C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;KACzB,CAAC;CACD,CAAC;AAEL,MAAM,WAAW,iBAAiB;IACjC,oFAAoF;IACpF,QAAQ,CAAC,eAAe,EAAE,SAAS,yBAAyB,EAAE,CAAC;IAC/D,OAAO,CAAC,KAAK,EAAE;QACd,QAAQ,CAAC,QAAQ,EAAE,oBAAoB,CAAC,UAAU,CAAC,CAAC;QACpD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;QAC3B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;KACjC,GAAG,oBAAoB,CAAC;IACzB,OAAO,CAAC,KAAK,EAAE;QACd,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAC;QACtC,0EAA0E;QAC1E,QAAQ,CAAC,KAAK,CAAC,EAAE,yBAAyB,CAAC;QAC3C,+EAA+E;QAC/E,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,QAAQ,CAAC,EAAE,4BAA4B,CAAC;QACjD,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;KAC9B,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;IACrC,QAAQ,CAAC,KAAK,EAAE;QACf,QAAQ,CAAC,YAAY,EAAE,oBAAoB,CAAC;QAC5C,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAC;QACtC,QAAQ,CAAC,KAAK,CAAC,EAAE,yBAAyB,CAAC;QAC3C,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;KAC9B,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;IACrC,QAAQ,CAAC,KAAK,EAAE;QACf,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAC;QACtC,QAAQ,CAAC,QAAQ,EAAE,oBAAoB,CAAC;QACxC,QAAQ,CAAC,KAAK,CAAC,EAAE,yBAAyB,CAAC;QAC3C,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;KAC9B,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;IACrC,yEAAyE;IACzE,MAAM,CAAC,KAAK,EAAE;QACb,QAAQ,CAAC,YAAY,EAAE,oBAAoB,CAAC;QAC5C,QAAQ,CAAC,KAAK,CAAC,EAAE,yBAAyB,CAAC;QAC3C,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;KAC9B,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;CACrC;AAmLD,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,wBAAwB,GAAG,iBAAiB,CAyJ5F","sourcesContent":["import { t } from \"../../core/i18n/index.ts\";\nimport type { PluginDistributionArtifactV1 } from \"./distribution.ts\";\nimport type { HostFactsV1, PluginSourceVerifierV1, PluginUpdateRecordV1 } from \"./types.ts\";\n\nimport { stagePluginUpdateV1, type UpdateVerificationV1, verifyPluginUpdateV1 } from \"./updates.ts\";\n\nconst MAX_INSTALLATION_REF_CHARS_V1 = 2048;\nexport const MAX_PLUGIN_SCOPE_REF_CHARS_V1 = 2048;\n/** Stable host namespace for installations that are not project-local. */\nexport const DEFAULT_GLOBAL_PLUGIN_SCOPE_REF_V1 = \"global:default\";\n\nexport type PluginInstallationScopeV1 = \"global\" | \"project\";\n\ninterface PluginScopeIdentityV1 {\n\treadonly scope: PluginInstallationScopeV1;\n\t/** Opaque host namespace; it must never disclose a local project path. */\n\treadonly scopeRef: string;\n}\n\nexport interface PluginInstallationV1 {\n\treadonly version: 1;\n\treadonly pluginId: string;\n\treadonly pluginVersion: string;\n\treadonly manifestDigest: string;\n\t/** The host installation namespace. It is part of the opaque installation identity. */\n\treadonly scope: PluginInstallationScopeV1;\n\t/** Concrete host namespace that distinguishes global and individual project installations. */\n\treadonly scopeRef?: string;\n\t/** Opaque host-owned installation handle; never a local path. */\n\treadonly installationRef: string;\n\treadonly state: \"installed\" | \"active\" | \"retained\";\n}\n\nexport interface PluginInstallHostV1 {\n\t/**\n\t * Scopes that this host can isolate physically. Omitting this declaration\n\t * preserves the legacy global-only host behavior; project operations must be\n\t * declared explicitly.\n\t */\n\treadonly supportedScopes?: readonly PluginInstallationScopeV1[];\n\t/** Host operations are atomic from the installer's perspective: an abort may\n\t * prevent starting work, but once a method resolves its side effect is committed. */\n\tinstall(input: {\n\t\treadonly record: PluginUpdateRecordV1;\n\t\treadonly scope: PluginInstallationScopeV1;\n\t\treadonly scopeRef: string;\n\t\t/** A host-owned, digest-bound package reference. Package bytes never cross this contract. */\n\t\treadonly artifact?: PluginDistributionArtifactV1;\n\t\treadonly signal?: AbortSignal;\n\t}): Promise<{\n\t\treadonly installationRef: string;\n\t\treadonly scope?: PluginInstallationScopeV1;\n\t\treadonly scopeRef?: string;\n\t}>;\n\tactivate(input: {\n\t\treadonly installation: PluginInstallationV1;\n\t\treadonly record: PluginUpdateRecordV1;\n\t\treadonly scope: PluginInstallationScopeV1;\n\t\treadonly scopeRef: string;\n\t\treadonly signal?: AbortSignal;\n\t}): Promise<void>;\n\trollback(input: {\n\t\treadonly failed: PluginInstallationV1;\n\t\treadonly previous: PluginInstallationV1;\n\t\treadonly scope: PluginInstallationScopeV1;\n\t\treadonly scopeRef: string;\n\t\treadonly signal?: AbortSignal;\n\t}): Promise<void>;\n\t/**\n\t * Remove a host-owned installation. The method is optional so hosts can\n\t * still expose state-only management while they are migrating; callers that\n\t * need physical cleanup must treat a missing method as unsupported.\n\t */\n\tuninstall?: (input: {\n\t\treadonly installation: PluginInstallationV1;\n\t\treadonly scope: PluginInstallationScopeV1;\n\t\treadonly scopeRef: string;\n\t\treadonly signal?: AbortSignal;\n\t}) => Promise<void>;\n}\n\nexport interface PluginInstallerOptionsV1 {\n\treadonly host: PluginInstallHostV1;\n\treadonly verifier?: PluginSourceVerifierV1;\n}\n\nexport type PluginInstallerErrorCodeV1 =\n\t| \"invalid_installation\"\n\t| \"unsupported_scope\"\n\t| \"install_failed\"\n\t| \"activation_failed\"\n\t| \"rollback_failed\"\n\t| \"uninstall_failed\";\n\nexport type PluginInstallerResultV1 =\n\t| {\n\t\t\treadonly status: \"succeeded\";\n\t\t\treadonly installation: PluginInstallationV1;\n\t  }\n\t| {\n\t\t\treadonly status: \"cancelled\";\n\t\t\treadonly error: { readonly code: \"cancelled\"; readonly message: string };\n\t  }\n\t| {\n\t\t\treadonly status: \"failed\";\n\t\t\treadonly error: {\n\t\t\t\treadonly code: PluginInstallerErrorCodeV1;\n\t\t\t\treadonly message: string;\n\t\t\t};\n\t  };\n\nexport interface PluginInstallerV1 {\n\t/** Declared, host-backed installation scopes. Project support is never inferred. */\n\treadonly supportedScopes: readonly PluginInstallationScopeV1[];\n\tprepare(input: {\n\t\treadonly manifest: PluginUpdateRecordV1[\"manifest\"];\n\t\treadonly source: string;\n\t\treadonly host: HostFactsV1;\n\t\treadonly expectedDigest?: string;\n\t}): UpdateVerificationV1;\n\tinstall(input: {\n\t\treadonly record: PluginUpdateRecordV1;\n\t\t/** Omitting scope preserves the existing global installation behavior. */\n\t\treadonly scope?: PluginInstallationScopeV1;\n\t\t/** Required for project installations; global defaults to `global:default`. */\n\t\treadonly scopeRef?: string;\n\t\treadonly artifact?: PluginDistributionArtifactV1;\n\t\treadonly signal?: AbortSignal;\n\t}): Promise<PluginInstallerResultV1>;\n\tactivate(input: {\n\t\treadonly installation: PluginInstallationV1;\n\t\treadonly record: PluginUpdateRecordV1;\n\t\treadonly scope?: PluginInstallationScopeV1;\n\t\treadonly scopeRef?: string;\n\t\treadonly signal?: AbortSignal;\n\t}): Promise<PluginInstallerResultV1>;\n\trollback(input: {\n\t\treadonly failed: PluginInstallationV1;\n\t\treadonly previous: PluginInstallationV1;\n\t\treadonly scope?: PluginInstallationScopeV1;\n\t\treadonly scopeRef?: string;\n\t\treadonly signal?: AbortSignal;\n\t}): Promise<PluginInstallerResultV1>;\n\t/** Remove one installed version after validating its opaque identity. */\n\tremove(input: {\n\t\treadonly installation: PluginInstallationV1;\n\t\treadonly scope?: PluginInstallationScopeV1;\n\t\treadonly scopeRef?: string;\n\t\treadonly signal?: AbortSignal;\n\t}): Promise<PluginInstallerResultV1>;\n}\n\nfunction opaqueInstallationRef(value: unknown): string {\n\tif (typeof value !== \"string\" || value.trim() === \"\" || value.length > MAX_INSTALLATION_REF_CHARS_V1)\n\t\tthrow new Error(t(\"installation reference is invalid\"));\n\tif (/^(?:file:|[a-zA-Z]:[\\\\/]|[\\\\/]{1,2}|\\\\\\\\)/iu.test(value) || /\\s/u.test(value))\n\t\tthrow new Error(t(\"installation reference must be opaque\"));\n\treturn value;\n}\n\nfunction opaqueScopeRef(value: unknown): string {\n\tif (typeof value !== \"string\" || value.trim() === \"\" || value.length > MAX_PLUGIN_SCOPE_REF_CHARS_V1)\n\t\tthrow new Error(\"plugin installation scope reference is invalid\");\n\tif (/^(?:file:|[a-zA-Z]:[\\\\/]|[\\\\/]{1,2}|\\\\\\\\)/iu.test(value) || /\\s/u.test(value))\n\t\tthrow new Error(\"plugin installation scope reference must be opaque\");\n\treturn value;\n}\n\nfunction installationFrom(\n\trecord: PluginUpdateRecordV1,\n\tinstallationRef: string,\n\tscopeIdentity: PluginScopeIdentityV1,\n\tstate: PluginInstallationV1[\"state\"],\n): PluginInstallationV1 {\n\treturn Object.freeze({\n\t\tversion: 1,\n\t\tpluginId: record.pluginId,\n\t\tpluginVersion: record.pluginVersion,\n\t\tmanifestDigest: record.manifestDigest,\n\t\tscope: scopeIdentity.scope,\n\t\tscopeRef: scopeIdentity.scopeRef,\n\t\tinstallationRef: opaqueInstallationRef(installationRef),\n\t\tstate,\n\t});\n}\n\nfunction cancelled(): PluginInstallerResultV1 {\n\treturn {\n\t\tstatus: \"cancelled\",\n\t\terror: {\n\t\t\tcode: \"cancelled\",\n\t\t\tmessage: \"Plugin installation operation was cancelled\",\n\t\t},\n\t};\n}\n\nfunction failure(code: PluginInstallerErrorCodeV1): PluginInstallerResultV1 {\n\treturn {\n\t\tstatus: \"failed\",\n\t\terror: {\n\t\t\tcode,\n\t\t\tmessage:\n\t\t\t\tcode === \"invalid_installation\"\n\t\t\t\t\t? \"The plugin installation handle is invalid\"\n\t\t\t\t\t: code === \"unsupported_scope\"\n\t\t\t\t\t\t? \"The plugin installer does not support this scope\"\n\t\t\t\t\t\t: code === \"install_failed\"\n\t\t\t\t\t\t\t? \"The host plugin installer failed\"\n\t\t\t\t\t\t\t: code === \"activation_failed\"\n\t\t\t\t\t\t\t\t? \"The host plugin activation failed\"\n\t\t\t\t\t\t\t\t: code === \"rollback_failed\"\n\t\t\t\t\t\t\t\t\t? \"The host plugin rollback failed\"\n\t\t\t\t\t\t\t\t\t: \"The host plugin uninstall failed\",\n\t\t},\n\t};\n}\n\nfunction validateInstallation(installation: PluginInstallationV1): void {\n\tif (\n\t\tinstallation.version !== 1 ||\n\t\ttypeof installation.pluginId !== \"string\" ||\n\t\ttypeof installation.pluginVersion !== \"string\" ||\n\t\ttypeof installation.manifestDigest !== \"string\" ||\n\t\tinstallation.pluginId.trim() === \"\" ||\n\t\tinstallation.pluginVersion.trim() === \"\" ||\n\t\tinstallation.manifestDigest.trim() === \"\"\n\t)\n\t\tthrow new Error(\"plugin installation handle is invalid\");\n\tif (installation.scope !== \"global\" && installation.scope !== \"project\")\n\t\tthrow new Error(\"plugin installation scope is invalid\");\n\tconst scopeRef =\n\t\tinstallation.scopeRef === undefined\n\t\t\t? installation.scope === \"global\"\n\t\t\t\t? DEFAULT_GLOBAL_PLUGIN_SCOPE_REF_V1\n\t\t\t\t: (() => {\n\t\t\t\t\t\tthrow new Error(\"project installation scope reference is required\");\n\t\t\t\t\t})()\n\t\t\t: opaqueScopeRef(installation.scopeRef);\n\tif (installation.scope === \"global\" && scopeRef !== DEFAULT_GLOBAL_PLUGIN_SCOPE_REF_V1)\n\t\tthrow new Error(\"plugin global installation scope reference is invalid\");\n\topaqueInstallationRef(installation.installationRef);\n}\n\nfunction ensureIdentity(\n\tinstallation: PluginInstallationV1,\n\trecord: PluginUpdateRecordV1,\n\tscopeIdentity: PluginScopeIdentityV1,\n): void {\n\tvalidateInstallation(installation);\n\tif (\n\t\tinstallation.pluginId !== record.pluginId ||\n\t\tinstallation.pluginVersion !== record.pluginVersion ||\n\t\tinstallation.manifestDigest !== record.manifestDigest ||\n\t\tinstallation.scope !== scopeIdentity.scope ||\n\t\t(installation.scopeRef ?? DEFAULT_GLOBAL_PLUGIN_SCOPE_REF_V1) !== scopeIdentity.scopeRef\n\t)\n\t\tthrow new Error(\"plugin installation identity mismatch\");\n}\n\nfunction normalizeScope(scope: PluginInstallationScopeV1 | undefined): PluginInstallationScopeV1 {\n\tif (scope === undefined) return \"global\";\n\tif (scope === \"global\" || scope === \"project\") return scope;\n\tthrow new Error(\"plugin installation scope is invalid\");\n}\n\nfunction normalizeScopeIdentity(\n\tscope: PluginInstallationScopeV1 | undefined,\n\tscopeRef: string | undefined,\n): PluginScopeIdentityV1 {\n\tconst normalizedScope = normalizeScope(scope);\n\tif (scopeRef === undefined) {\n\t\tif (normalizedScope !== \"global\") throw new Error(\"project installation scope reference is required\");\n\t\treturn Object.freeze({ scope: normalizedScope, scopeRef: DEFAULT_GLOBAL_PLUGIN_SCOPE_REF_V1 });\n\t}\n\tconst normalizedScopeRef = opaqueScopeRef(scopeRef);\n\tif (normalizedScope === \"global\" && normalizedScopeRef !== DEFAULT_GLOBAL_PLUGIN_SCOPE_REF_V1)\n\t\tthrow new Error(\"plugin global installation scope reference is invalid\");\n\treturn Object.freeze({ scope: normalizedScope, scopeRef: normalizedScopeRef });\n}\n\nfunction declaredScopes(host: PluginInstallHostV1): readonly PluginInstallationScopeV1[] {\n\tif (host.supportedScopes === undefined) return Object.freeze([\"global\"]);\n\tif (\n\t\t!Array.isArray(host.supportedScopes) ||\n\t\tnew Set(host.supportedScopes).size !== host.supportedScopes.length ||\n\t\thost.supportedScopes.some((scope) => scope !== \"global\" && scope !== \"project\")\n\t)\n\t\treturn Object.freeze([]);\n\treturn Object.freeze([...host.supportedScopes]);\n}\n\nfunction hostAcceptedScope(\n\tinstallation: { readonly scope?: PluginInstallationScopeV1; readonly scopeRef?: string },\n\tscopeIdentity: PluginScopeIdentityV1,\n): void {\n\tif (scopeIdentity.scope === \"global\" && installation.scope === undefined && installation.scopeRef === undefined)\n\t\treturn;\n\tif (installation.scope !== scopeIdentity.scope || installation.scopeRef !== scopeIdentity.scopeRef)\n\t\tthrow new Error(\"plugin installation scope mismatch\");\n}\n\nfunction ensureArtifactIdentity(artifact: PluginDistributionArtifactV1, record: PluginUpdateRecordV1): void {\n\tif (\n\t\tartifact.version !== 1 ||\n\t\tartifact.pluginId !== record.pluginId ||\n\t\tartifact.pluginVersion !== record.pluginVersion ||\n\t\tartifact.manifestDigest !== record.manifestDigest ||\n\t\ttypeof artifact.artifactRef !== \"string\" ||\n\t\tartifact.artifactRef.trim() === \"\"\n\t)\n\t\tthrow new Error(\"plugin distribution artifact identity mismatch\");\n\topaqueInstallationRef(artifact.artifactRef);\n}\n\nfunction isInvalidInstallationError(value: unknown): boolean {\n\treturn (\n\t\tvalue instanceof Error &&\n\t\t(value.message === \"plugin installation handle is invalid\" ||\n\t\t\tvalue.message === \"plugin installation scope is invalid\" ||\n\t\t\tvalue.message === \"plugin installation scope reference is invalid\" ||\n\t\t\tvalue.message === \"plugin installation scope reference must be opaque\" ||\n\t\t\tvalue.message === \"plugin global installation scope reference is invalid\" ||\n\t\t\tvalue.message === \"project installation scope reference is required\" ||\n\t\t\tvalue.message === \"plugin installation identity mismatch\" ||\n\t\t\tvalue.message === \"plugin installation scope mismatch\" ||\n\t\t\tvalue.message === \"plugin distribution artifact identity mismatch\")\n\t);\n}\n\nexport function createPluginInstallerV1(options: PluginInstallerOptionsV1): PluginInstallerV1 {\n\tconst supportedScopes = declaredScopes(options.host);\n\tconst supportsScope = (scope: PluginInstallationScopeV1): boolean => supportedScopes.includes(scope);\n\treturn {\n\t\tsupportedScopes,\n\t\tprepare(input) {\n\t\t\tconst staged = stagePluginUpdateV1({\n\t\t\t\tmanifest: input.manifest,\n\t\t\t\tsource: input.source,\n\t\t\t});\n\t\t\treturn verifyPluginUpdateV1({\n\t\t\t\trecord: staged,\n\t\t\t\thost: input.host,\n\t\t\t\texpectedDigest: input.expectedDigest,\n\t\t\t\tverifier: options.verifier,\n\t\t\t});\n\t\t},\n\t\tasync install(input) {\n\t\t\tif (input.signal?.aborted) return cancelled();\n\t\t\tlet scopeIdentity: PluginScopeIdentityV1;\n\t\t\ttry {\n\t\t\t\tscopeIdentity = normalizeScopeIdentity(input.scope, input.scopeRef);\n\t\t\t} catch {\n\t\t\t\treturn failure(\"invalid_installation\");\n\t\t\t}\n\t\t\tif (!supportsScope(scopeIdentity.scope)) return failure(\"unsupported_scope\");\n\t\t\tif (input.record.state !== \"verified\") return failure(\"invalid_installation\");\n\t\t\ttry {\n\t\t\t\tif (input.artifact !== undefined) ensureArtifactIdentity(input.artifact, input.record);\n\t\t\t\tconst installed = await options.host.install({\n\t\t\t\t\trecord: input.record,\n\t\t\t\t\tscope: scopeIdentity.scope,\n\t\t\t\t\tscopeRef: scopeIdentity.scopeRef,\n\t\t\t\t\t...(input.artifact === undefined ? {} : { artifact: input.artifact }),\n\t\t\t\t\tsignal: input.signal,\n\t\t\t\t});\n\t\t\t\thostAcceptedScope(installed, scopeIdentity);\n\t\t\t\treturn {\n\t\t\t\t\tstatus: \"succeeded\",\n\t\t\t\t\tinstallation: installationFrom(input.record, installed.installationRef, scopeIdentity, \"installed\"),\n\t\t\t\t};\n\t\t\t} catch (error) {\n\t\t\t\tif (isInvalidInstallationError(error)) return failure(\"invalid_installation\");\n\t\t\t\treturn input.signal?.aborted ? cancelled() : failure(\"install_failed\");\n\t\t\t}\n\t\t},\n\t\tasync activate(input) {\n\t\t\tif (input.signal?.aborted) return cancelled();\n\t\t\tlet scopeIdentity: PluginScopeIdentityV1;\n\t\t\ttry {\n\t\t\t\tscopeIdentity = normalizeScopeIdentity(input.scope, input.scopeRef);\n\t\t\t\tif (!supportsScope(scopeIdentity.scope)) return failure(\"unsupported_scope\");\n\t\t\t\tensureIdentity(input.installation, input.record, scopeIdentity);\n\t\t\t\tif (input.installation.state !== \"installed\" || input.record.state !== \"verified\")\n\t\t\t\t\treturn failure(\"invalid_installation\");\n\t\t\t\tawait options.host.activate({\n\t\t\t\t\tinstallation: input.installation,\n\t\t\t\t\trecord: input.record,\n\t\t\t\t\tscope: scopeIdentity.scope,\n\t\t\t\t\tscopeRef: scopeIdentity.scopeRef,\n\t\t\t\t\tsignal: input.signal,\n\t\t\t\t});\n\t\t\t\treturn {\n\t\t\t\t\tstatus: \"succeeded\",\n\t\t\t\t\tinstallation: Object.freeze({\n\t\t\t\t\t\t...input.installation,\n\t\t\t\t\t\tstate: \"active\" as const,\n\t\t\t\t\t}),\n\t\t\t\t};\n\t\t\t} catch (error) {\n\t\t\t\tif (isInvalidInstallationError(error)) return failure(\"invalid_installation\");\n\t\t\t\treturn input.signal?.aborted ? cancelled() : failure(\"activation_failed\");\n\t\t\t}\n\t\t},\n\t\tasync rollback(input) {\n\t\t\tif (input.signal?.aborted) return cancelled();\n\t\t\tlet scopeIdentity: PluginScopeIdentityV1;\n\t\t\ttry {\n\t\t\t\tscopeIdentity = normalizeScopeIdentity(input.scope, input.scopeRef);\n\t\t\t\tif (!supportsScope(scopeIdentity.scope)) return failure(\"unsupported_scope\");\n\t\t\t\tvalidateInstallation(input.failed);\n\t\t\t\tvalidateInstallation(input.previous);\n\t\t\t\tif (input.failed.state !== \"installed\" && input.failed.state !== \"active\")\n\t\t\t\t\treturn failure(\"invalid_installation\");\n\t\t\t\tif (input.previous.state !== \"active\") return failure(\"invalid_installation\");\n\t\t\t\tif (\n\t\t\t\t\tinput.failed.pluginId !== input.previous.pluginId ||\n\t\t\t\t\tinput.failed.scope !== scopeIdentity.scope ||\n\t\t\t\t\tinput.previous.scope !== scopeIdentity.scope ||\n\t\t\t\t\t(input.failed.scopeRef ?? DEFAULT_GLOBAL_PLUGIN_SCOPE_REF_V1) !== scopeIdentity.scopeRef ||\n\t\t\t\t\t(input.previous.scopeRef ?? DEFAULT_GLOBAL_PLUGIN_SCOPE_REF_V1) !== scopeIdentity.scopeRef\n\t\t\t\t)\n\t\t\t\t\treturn failure(\"invalid_installation\");\n\t\t\t\tawait options.host.rollback({\n\t\t\t\t\tfailed: input.failed,\n\t\t\t\t\tprevious: input.previous,\n\t\t\t\t\tscope: scopeIdentity.scope,\n\t\t\t\t\tscopeRef: scopeIdentity.scopeRef,\n\t\t\t\t\tsignal: input.signal,\n\t\t\t\t});\n\t\t\t\treturn {\n\t\t\t\t\tstatus: \"succeeded\",\n\t\t\t\t\tinstallation: Object.freeze({\n\t\t\t\t\t\t...input.previous,\n\t\t\t\t\t\tstate: \"active\" as const,\n\t\t\t\t\t}),\n\t\t\t\t};\n\t\t\t} catch (error) {\n\t\t\t\tif (isInvalidInstallationError(error)) return failure(\"invalid_installation\");\n\t\t\t\treturn input.signal?.aborted ? cancelled() : failure(\"rollback_failed\");\n\t\t\t}\n\t\t},\n\t\tasync remove(input) {\n\t\t\tif (input.signal?.aborted) return cancelled();\n\t\t\tlet scopeIdentity: PluginScopeIdentityV1;\n\t\t\ttry {\n\t\t\t\tscopeIdentity = normalizeScopeIdentity(input.scope, input.scopeRef);\n\t\t\t\tif (!supportsScope(scopeIdentity.scope)) return failure(\"unsupported_scope\");\n\t\t\t\tvalidateInstallation(input.installation);\n\t\t\t} catch {\n\t\t\t\treturn failure(\"invalid_installation\");\n\t\t\t}\n\t\t\tif (\n\t\t\t\tinput.installation.state !== \"installed\" &&\n\t\t\t\tinput.installation.state !== \"active\" &&\n\t\t\t\tinput.installation.state !== \"retained\"\n\t\t\t)\n\t\t\t\treturn failure(\"invalid_installation\");\n\t\t\tif (\n\t\t\t\tinput.installation.scope !== scopeIdentity.scope ||\n\t\t\t\t(input.installation.scopeRef ?? DEFAULT_GLOBAL_PLUGIN_SCOPE_REF_V1) !== scopeIdentity.scopeRef\n\t\t\t)\n\t\t\t\treturn failure(\"invalid_installation\");\n\t\t\tif (options.host.uninstall === undefined) return failure(\"uninstall_failed\");\n\t\t\ttry {\n\t\t\t\tawait options.host.uninstall({\n\t\t\t\t\tinstallation: input.installation,\n\t\t\t\t\tscope: scopeIdentity.scope,\n\t\t\t\t\tscopeRef: scopeIdentity.scopeRef,\n\t\t\t\t\tsignal: input.signal,\n\t\t\t\t});\n\t\t\t\treturn {\n\t\t\t\t\tstatus: \"succeeded\",\n\t\t\t\t\tinstallation: Object.freeze({\n\t\t\t\t\t\t...input.installation,\n\t\t\t\t\t\tstate: \"retained\" as const,\n\t\t\t\t\t}),\n\t\t\t\t};\n\t\t\t} catch {\n\t\t\t\treturn input.signal?.aborted ? cancelled() : failure(\"uninstall_failed\");\n\t\t\t}\n\t\t},\n\t};\n}\n"]}

package/dist/plugins/ecosystem/installer.js

@@ -1,3 +1,4 @@
+import { t } from "../../core/i18n/index.js";
 import { stagePluginUpdateV1, verifyPluginUpdateV1 } from "./updates.js";
 const MAX_INSTALLATION_REF_CHARS_V1 = 2048;
 export const MAX_PLUGIN_SCOPE_REF_CHARS_V1 = 2048;
@@ -5,9 +6,9 @@ export const MAX_PLUGIN_SCOPE_REF_CHARS_V1 = 2048;
 export const DEFAULT_GLOBAL_PLUGIN_SCOPE_REF_V1 = "global:default";
 function opaqueInstallationRef(value) {
     if (typeof value !== "string" || value.trim() === "" || value.length > MAX_INSTALLATION_REF_CHARS_V1)
-        throw new Error("installation reference is invalid");
+        throw new Error(t("installation reference is invalid"));
     if (/^(?:file:|[a-zA-Z]:[\\/]|[\\/]{1,2}|\\\\)/iu.test(value) || /\s/u.test(value))
-        throw new Error("installation reference must be opaque");
+        throw new Error(t("installation reference must be opaque"));
     return value;
 }
 function opaqueScopeRef(value) {