@ai-agent-forge/agent-forge 0.86.7 → 0.88.0

package/dist/plugins/ecosystem/node-plugin-bootstrap.d.ts

@@ -33,10 +33,17 @@ export interface NodePluginBootstrapOptionsV1 {
     readonly signal?: AbortSignal;
     /** Full dependency override for deterministic tests; the env switch still applies. */
     readonly deps?: PluginBootstrapDepsV1;
+    /** Overrides the first-run progress line (stderr) for tests and hosts. */
+    readonly onPendingInstalls?: (count: number) => void;
 }
 export type NodePluginBootstrapResultV1 = PluginBootstrapResultV1 & {
-    /** Present when the env switch short-circuited the run before any local comparison. */
-    readonly skipped?: "disabled";
+    /**
+     * Present when a posture switch short-circuited the run before any local
+     * comparison: the wiring-level env off switch, or the offline posture
+     * (设计 §4.4 offline 姿态门, 2026-10-03 — offline installs cannot succeed
+     * and would only fail slowly, so the run is skipped immediately).
+     */
+    readonly skipped?: "disabled" | "offline";
 };
 /**
  * Run the startup bootstrap for one agent directory. The function resolves

package/dist/plugins/ecosystem/node-plugin-bootstrap.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"node-plugin-bootstrap.d.ts","sourceRoot":"","sources":["../../../src/plugins/ecosystem/node-plugin-bootstrap.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAIH,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,iCAAiC,CAAC;AASrF,OAAO,EAGN,KAAK,sBAAsB,EAC3B,MAAM,gCAAgC,CAAC;AAExC,OAAO,EAAE,KAAK,qBAAqB,EAAE,KAAK,uBAAuB,EAAwB,MAAM,uBAAuB,CAAC;AAGvH,6EAA6E;AAC7E,eAAO,MAAM,mCAAmC,iCAAiC,CAAC;AAKlF,MAAM,WAAW,4BAA4B;IAC5C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,+CAA+C;IAC/C,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,6BAA6B,EAAE,CAAC;IAC7D,2EAA2E;IAC3E,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,oEAAoE;IACpE,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,sBAAsB,CAAC;IACzC,iDAAiD;IACjD,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,CAAC;IACzC,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;IAC9B,sFAAsF;IACtF,QAAQ,CAAC,IAAI,CAAC,EAAE,qBAAqB,CAAC;CACtC;AAED,MAAM,MAAM,2BAA2B,GAAG,uBAAuB,GAAG;IACnE,uFAAuF;IACvF,QAAQ,CAAC,OAAO,CAAC,EAAE,UAAU,CAAC;CAC9B,CAAC;AAkCF;;;;;GAKG;AACH,wBAAsB,wBAAwB,CAC7C,OAAO,EAAE,4BAA4B,GACnC,OAAO,CAAC,2BAA2B,CAAC,CA+ItC","sourcesContent":["/**\n * Node wiring for the startup plugin bootstrap (design\n * `插件独立分发与启动装配设计.md` §4.4, §0.7).\n *\n * `AGENT_FORGE_PLUGIN_BOOTSTRAP=off` skips everything, including the local\n * comparison. The comparison dependency reads the global and project\n * plugin-state.json stores only — read-only, and it never constructs an HTTP\n * client, so an assembled environment starts offline (G3). Network objects\n * (npm acquisition host, install host) are built lazily inside the install\n * action and closed when the bootstrap finishes. Installs go through the\n * npm acquisition path exclusively and persist the `npm:<host>` source label\n * in the global plugin state (same prepare/install/activate/upsert\n * transaction shape as the CLI install flow, implemented as a library\n * function without going through the CLI layer).\n */\n\nimport { join } from \"node:path\";\nimport { CONFIG_DIR_NAME } from \"../../config.ts\";\nimport type { PluginBootstrapFactoryEntryV1 } from \"./bootstrap-factory-manifest.ts\";\nimport { BOOTSTRAP_FACTORY_PLUGIN_MANIFEST_V1 } from \"./bootstrap-factory-manifest.ts\";\nimport {\n\tDEFAULT_PLUGIN_STATE_FILE_V1,\n\tdefaultPluginHostFactsV1,\n\tdefaultPluginInstallStoreDirectoryV1,\n\tprojectPluginScopeRefV1,\n} from \"./default-active-bindings.ts\";\nimport { createPluginInstallerV1, DEFAULT_GLOBAL_PLUGIN_SCOPE_REF_V1, type PluginInstallerV1 } from \"./installer.ts\";\nimport {\n\tcreateNodePackageInstallHostV1,\n\ttype NodePackageInstallHostV1,\n\ttype NodeZipPackageLimitsV1,\n} from \"./node-package-install-host.ts\";\nimport { createNodePluginAcquisitionHostV1, type NodePluginAcquisitionHostV1 } from \"./node-plugin-acquisition-host.ts\";\nimport { type PluginBootstrapDepsV1, type PluginBootstrapResultV1, runPluginBootstrapV1 } from \"./plugin-bootstrap.ts\";\nimport { createPluginStateStoreV1, type PluginStateStoreV1 } from \"./state.ts\";\n\n/** Environment variable disabling the startup bootstrap entirely (`off`). */\nexport const AGENT_FORGE_PLUGIN_BOOTSTRAP_ENV_V1 = \"AGENT_FORGE_PLUGIN_BOOTSTRAP\";\n\n/** The only recognized disabling value; every other value (and absence) keeps bootstrap on. */\nconst PLUGIN_BOOTSTRAP_DISABLED_VALUE_V1 = \"off\";\n\nexport interface NodePluginBootstrapOptionsV1 {\n\treadonly agentDir: string;\n\treadonly cwd: string;\n\t/** Defaults to the frozen factory manifest. */\n\treadonly manifest?: readonly PluginBootstrapFactoryEntryV1[];\n\t/** Bare http(s) npm registry origin; forwarded to the acquisition host. */\n\treadonly npmRegistry?: string;\n\t/** npm registry bearer token; forwarded to the acquisition host. */\n\treadonly npmToken?: string;\n\treadonly limits?: NodeZipPackageLimitsV1;\n\t/** Deterministic fetch replacement for tests. */\n\treadonly fetch?: typeof globalThis.fetch;\n\treadonly signal?: AbortSignal;\n\t/** Full dependency override for deterministic tests; the env switch still applies. */\n\treadonly deps?: PluginBootstrapDepsV1;\n}\n\nexport type NodePluginBootstrapResultV1 = PluginBootstrapResultV1 & {\n\t/** Present when the env switch short-circuited the run before any local comparison. */\n\treadonly skipped?: \"disabled\";\n};\n\n/** Install-scoped boundaries; created lazily by the first install action. */\ninterface InstallSessionV1 {\n\treadonly acquisition: NodePluginAcquisitionHostV1;\n\treadonly installHost: NodePackageInstallHostV1;\n\treadonly installer: PluginInstallerV1;\n\treadonly stateStore: PluginStateStoreV1;\n}\n\nfunction readActiveVersions(\n\tstore: PluginStateStoreV1,\n\tscope: \"global\" | \"project\",\n\tscopeRef: string,\n\tsignal: AbortSignal | undefined,\n): Promise<ReadonlyMap<string, string>> {\n\treturn (async () => {\n\t\tconst result = await store.read({ ...(signal === undefined ? {} : { signal }) });\n\t\tif (result.status !== \"ok\" && result.status !== \"missing\")\n\t\t\tthrow new Error(\n\t\t\t\t`plugin state read failed (${result.diagnostics[0]?.code ?? result.status}) for the ${scope} scope`,\n\t\t\t);\n\t\tconst versions = new Map<string, string>();\n\t\tfor (const record of result.snapshot.records) {\n\t\t\tif (record.state.scope !== scope || record.state.scopeRef !== scopeRef) continue;\n\t\t\t// Enabled is deliberately not filtered: a disabled plugin still owns\n\t\t\t// its active installation record, and bootstrap never touches it (G5).\n\t\t\tif (record.state.lifecycle !== \"active\") continue;\n\t\t\tversions.set(record.pluginId, record.pluginVersion);\n\t\t}\n\t\treturn versions;\n\t})();\n}\n\n/**\n * Run the startup bootstrap for one agent directory. The function resolves\n * with a structured result and never throws for per-plugin failures; only a\n * wiring-level construction error propagates to the caller (main.ts guards\n * startup with its own catch).\n */\nexport async function runNodePluginBootstrapV1(\n\toptions: NodePluginBootstrapOptionsV1,\n): Promise<NodePluginBootstrapResultV1> {\n\tif (process.env[AGENT_FORGE_PLUGIN_BOOTSTRAP_ENV_V1]?.trim() === PLUGIN_BOOTSTRAP_DISABLED_VALUE_V1) {\n\t\treturn Object.freeze({\n\t\t\tversion: 1,\n\t\t\tstatus: \"succeeded\",\n\t\t\tactions: Object.freeze([]),\n\t\t\tdiagnostics: Object.freeze([]),\n\t\t\tdurationMs: 0,\n\t\t\tskipped: \"disabled\",\n\t\t});\n\t}\n\tif (options.deps !== undefined) {\n\t\treturn await runPluginBootstrapV1({\n\t\t\tmanifest: options.manifest ?? BOOTSTRAP_FACTORY_PLUGIN_MANIFEST_V1,\n\t\t\tdeps: options.deps,\n\t\t});\n\t}\n\tlet session: InstallSessionV1 | undefined;\n\tconst ensureSession = async (): Promise<InstallSessionV1> => {\n\t\tif (session !== undefined) return session;\n\t\tconst acquisition = createNodePluginAcquisitionHostV1({\n\t\t\t...(options.npmRegistry === undefined ? {} : { npmRegistry: options.npmRegistry }),\n\t\t\t...(options.npmToken === undefined ? {} : { npmToken: options.npmToken }),\n\t\t\t...(options.fetch === undefined ? {} : { fetch: options.fetch }),\n\t\t\t...(options.limits === undefined ? {} : { limits: options.limits }),\n\t\t});\n\t\tconst installHost = await createNodePackageInstallHostV1({\n\t\t\topenArtifact: (input) => acquisition.openArtifact(input),\n\t\t\tinstallationDirectory: defaultPluginInstallStoreDirectoryV1(options.agentDir),\n\t\t\tpersistence: \"persistent\",\n\t\t\tsupportedScopes: [\"global\", \"project\"],\n\t\t\t...(options.limits === undefined ? {} : { ...options.limits }),\n\t\t});\n\t\tsession = {\n\t\t\tacquisition,\n\t\t\tinstallHost,\n\t\t\tinstaller: createPluginInstallerV1({ host: installHost }),\n\t\t\tstateStore: createPluginStateStoreV1({ filePath: join(options.agentDir, DEFAULT_PLUGIN_STATE_FILE_V1) }),\n\t\t};\n\t\treturn session;\n\t};\n\tconst deps: PluginBootstrapDepsV1 = {\n\t\tlistActive: async ({ signal }) => {\n\t\t\tconst globalVersions = readActiveVersions(\n\t\t\t\tcreatePluginStateStoreV1({ filePath: join(options.agentDir, DEFAULT_PLUGIN_STATE_FILE_V1) }),\n\t\t\t\t\"global\",\n\t\t\t\tDEFAULT_GLOBAL_PLUGIN_SCOPE_REF_V1,\n\t\t\t\tsignal,\n\t\t\t);\n\t\t\tconst projectVersions = readActiveVersions(\n\t\t\t\tcreatePluginStateStoreV1({ filePath: join(options.cwd, CONFIG_DIR_NAME, DEFAULT_PLUGIN_STATE_FILE_V1) }),\n\t\t\t\t\"project\",\n\t\t\t\tprojectPluginScopeRefV1(options.cwd),\n\t\t\t\tsignal,\n\t\t\t);\n\t\t\tconst [globalResult, projectResult] = await Promise.all([globalVersions, projectVersions]);\n\t\t\t// Project precedence mirrors active-binding resolution: a project\n\t\t\t// installation shadows the same plugin id from the global scope.\n\t\t\treturn new Map([...globalResult, ...projectResult]);\n\t\t},\n\t\tinstallFromNpm: async ({ npmName, range, signal }) => {\n\t\t\tconst active = await ensureSession();\n\t\t\t// npm refs only (§0.7): scoped or plain names with the shared minimal\n\t\t\t// range subset; no github/gitee/url/local ref can be expressed here.\n\t\t\tconst ref = range === undefined ? npmName : `${npmName}@${range}`;\n\t\t\tconst acquired = await active.acquisition.resolvePackage({ ref, ...(signal === undefined ? {} : { signal }) });\n\t\t\tlet released = false;\n\t\t\tconst release = async (): Promise<void> => {\n\t\t\t\tif (released) return;\n\t\t\t\treleased = true;\n\t\t\t\tawait acquired.release();\n\t\t\t};\n\t\t\ttry {\n\t\t\t\tconst verified = active.installer.prepare({\n\t\t\t\t\tmanifest: acquired.manifest,\n\t\t\t\t\tsource: acquired.source,\n\t\t\t\t\thost: defaultPluginHostFactsV1(),\n\t\t\t\t});\n\t\t\t\tif (verified.status !== \"verified\")\n\t\t\t\t\tthrow new Error(`installer prepare rejected ${acquired.manifest.id}: ${verified.reason}`);\n\t\t\t\tconst installed = await active.installer.install({\n\t\t\t\t\trecord: verified.record,\n\t\t\t\t\tscope: \"global\",\n\t\t\t\t\tscopeRef: DEFAULT_GLOBAL_PLUGIN_SCOPE_REF_V1,\n\t\t\t\t\tartifact: acquired.artifact,\n\t\t\t\t\t...(signal === undefined ? {} : { signal }),\n\t\t\t\t});\n\t\t\t\tif (installed.status !== \"succeeded\")\n\t\t\t\t\tthrow new Error(`plugin install failed (${installed.error.code}) for ${acquired.manifest.id}`);\n\t\t\t\tconst activated = await active.installer.activate({\n\t\t\t\t\tinstallation: installed.installation,\n\t\t\t\t\trecord: verified.record,\n\t\t\t\t\tscope: \"global\",\n\t\t\t\t\tscopeRef: DEFAULT_GLOBAL_PLUGIN_SCOPE_REF_V1,\n\t\t\t\t\t...(signal === undefined ? {} : { signal }),\n\t\t\t\t});\n\t\t\t\tif (activated.status !== \"succeeded\") {\n\t\t\t\t\tawait active.installer\n\t\t\t\t\t\t.remove({\n\t\t\t\t\t\t\tinstallation: installed.installation,\n\t\t\t\t\t\t\tscope: \"global\",\n\t\t\t\t\t\t\tscopeRef: DEFAULT_GLOBAL_PLUGIN_SCOPE_REF_V1,\n\t\t\t\t\t\t})\n\t\t\t\t\t\t.catch(() => undefined);\n\t\t\t\t\tthrow new Error(`plugin activation failed (${activated.error.code}) for ${acquired.manifest.id}`);\n\t\t\t\t}\n\t\t\t\tconst persisted = await active.stateStore.upsert({\n\t\t\t\t\tinstallation: activated.installation,\n\t\t\t\t\tscope: \"global\",\n\t\t\t\t\tenabled: true,\n\t\t\t\t\tsource: acquired.source,\n\t\t\t\t\t...(signal === undefined ? {} : { signal }),\n\t\t\t\t});\n\t\t\t\tif (persisted.status !== \"ok\") {\n\t\t\t\t\tawait active.installer\n\t\t\t\t\t\t.remove({\n\t\t\t\t\t\t\tinstallation: activated.installation,\n\t\t\t\t\t\t\tscope: \"global\",\n\t\t\t\t\t\t\tscopeRef: DEFAULT_GLOBAL_PLUGIN_SCOPE_REF_V1,\n\t\t\t\t\t\t})\n\t\t\t\t\t\t.catch(() => undefined);\n\t\t\t\t\tthrow new Error(`plugin state persist failed (${persisted.status}) for ${acquired.manifest.id}`);\n\t\t\t\t}\n\t\t\t\treturn { pluginVersion: activated.installation.pluginVersion, source: acquired.source };\n\t\t\t} finally {\n\t\t\t\tawait release();\n\t\t\t}\n\t\t},\n\t\t...(options.signal === undefined ? {} : { signal: options.signal }),\n\t};\n\ttry {\n\t\treturn await runPluginBootstrapV1({\n\t\t\tmanifest: options.manifest ?? BOOTSTRAP_FACTORY_PLUGIN_MANIFEST_V1,\n\t\t\tdeps,\n\t\t});\n\t} finally {\n\t\tconst active = session;\n\t\tsession = undefined;\n\t\tif (active !== undefined) {\n\t\t\tawait active.installHost.close().catch(() => undefined);\n\t\t\tawait active.acquisition.close().catch(() => undefined);\n\t\t}\n\t}\n}\n"]}
+{"version":3,"file":"node-plugin-bootstrap.d.ts","sourceRoot":"","sources":["../../../src/plugins/ecosystem/node-plugin-bootstrap.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAMH,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,iCAAiC,CAAC;AASrF,OAAO,EAGN,KAAK,sBAAsB,EAC3B,MAAM,gCAAgC,CAAC;AAExC,OAAO,EAAE,KAAK,qBAAqB,EAAE,KAAK,uBAAuB,EAAwB,MAAM,uBAAuB,CAAC;AAGvH,6EAA6E;AAC7E,eAAO,MAAM,mCAAmC,iCAAiC,CAAC;AAKlF,MAAM,WAAW,4BAA4B;IAC5C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,+CAA+C;IAC/C,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,6BAA6B,EAAE,CAAC;IAC7D,2EAA2E;IAC3E,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,oEAAoE;IACpE,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,sBAAsB,CAAC;IACzC,iDAAiD;IACjD,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,CAAC;IACzC,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;IAC9B,sFAAsF;IACtF,QAAQ,CAAC,IAAI,CAAC,EAAE,qBAAqB,CAAC;IACtC,0EAA0E;IAC1E,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;CACrD;AAED,MAAM,MAAM,2BAA2B,GAAG,uBAAuB,GAAG;IACnE;;;;;OAKG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC;CAC1C,CAAC;AAqCF;;;;;GAKG;AACH,wBAAsB,wBAAwB,CAC7C,OAAO,EAAE,4BAA4B,GACnC,OAAO,CAAC,2BAA2B,CAAC,CA4LtC","sourcesContent":["/**\n * Node wiring for the startup plugin bootstrap (design\n * `插件独立分发与启动装配设计.md` §4.4, §0.7).\n *\n * `AGENT_FORGE_PLUGIN_BOOTSTRAP=off` skips everything, including the local\n * comparison. The comparison dependency reads the global and project\n * plugin-state.json stores only — read-only, and it never constructs an HTTP\n * client, so an assembled environment starts offline (G3). Network objects\n * (npm acquisition host, install host) are built lazily inside the install\n * action and closed when the bootstrap finishes. Installs go through the\n * npm acquisition path exclusively and persist the `npm:<host>` source label\n * in the global plugin state (same prepare/install/activate/upsert\n * transaction shape as the CLI install flow, implemented as a library\n * function without going through the CLI layer).\n */\n\nimport { join } from \"node:path\";\nimport { CONFIG_DIR_NAME } from \"../../config.ts\";\nimport { t } from \"../../core/i18n/index.ts\";\nimport { isOfflineModeEnabled } from \"../../core/package-process-runner.ts\";\nimport type { PluginBootstrapFactoryEntryV1 } from \"./bootstrap-factory-manifest.ts\";\nimport { BOOTSTRAP_FACTORY_PLUGIN_MANIFEST_V1 } from \"./bootstrap-factory-manifest.ts\";\nimport {\n\tDEFAULT_PLUGIN_STATE_FILE_V1,\n\tdefaultPluginHostFactsV1,\n\tdefaultPluginInstallStoreDirectoryV1,\n\tprojectPluginScopeRefV1,\n} from \"./default-active-bindings.ts\";\nimport { createPluginInstallerV1, DEFAULT_GLOBAL_PLUGIN_SCOPE_REF_V1, type PluginInstallerV1 } from \"./installer.ts\";\nimport {\n\tcreateNodePackageInstallHostV1,\n\ttype NodePackageInstallHostV1,\n\ttype NodeZipPackageLimitsV1,\n} from \"./node-package-install-host.ts\";\nimport { createNodePluginAcquisitionHostV1, type NodePluginAcquisitionHostV1 } from \"./node-plugin-acquisition-host.ts\";\nimport { type PluginBootstrapDepsV1, type PluginBootstrapResultV1, runPluginBootstrapV1 } from \"./plugin-bootstrap.ts\";\nimport { createPluginStateStoreV1, type PluginStateStoreV1 } from \"./state.ts\";\n\n/** Environment variable disabling the startup bootstrap entirely (`off`). */\nexport const AGENT_FORGE_PLUGIN_BOOTSTRAP_ENV_V1 = \"AGENT_FORGE_PLUGIN_BOOTSTRAP\";\n\n/** The only recognized disabling value; every other value (and absence) keeps bootstrap on. */\nconst PLUGIN_BOOTSTRAP_DISABLED_VALUE_V1 = \"off\";\n\nexport interface NodePluginBootstrapOptionsV1 {\n\treadonly agentDir: string;\n\treadonly cwd: string;\n\t/** Defaults to the frozen factory manifest. */\n\treadonly manifest?: readonly PluginBootstrapFactoryEntryV1[];\n\t/** Bare http(s) npm registry origin; forwarded to the acquisition host. */\n\treadonly npmRegistry?: string;\n\t/** npm registry bearer token; forwarded to the acquisition host. */\n\treadonly npmToken?: string;\n\treadonly limits?: NodeZipPackageLimitsV1;\n\t/** Deterministic fetch replacement for tests. */\n\treadonly fetch?: typeof globalThis.fetch;\n\treadonly signal?: AbortSignal;\n\t/** Full dependency override for deterministic tests; the env switch still applies. */\n\treadonly deps?: PluginBootstrapDepsV1;\n\t/** Overrides the first-run progress line (stderr) for tests and hosts. */\n\treadonly onPendingInstalls?: (count: number) => void;\n}\n\nexport type NodePluginBootstrapResultV1 = PluginBootstrapResultV1 & {\n\t/**\n\t * Present when a posture switch short-circuited the run before any local\n\t * comparison: the wiring-level env off switch, or the offline posture\n\t * (设计 §4.4 offline 姿态门, 2026-10-03 — offline installs cannot succeed\n\t * and would only fail slowly, so the run is skipped immediately).\n\t */\n\treadonly skipped?: \"disabled\" | \"offline\";\n};\n\n/** Install-scoped boundaries; created lazily by the first install action. */\ninterface InstallSessionV1 {\n\treadonly acquisition: NodePluginAcquisitionHostV1;\n\treadonly installHost: NodePackageInstallHostV1;\n\treadonly installer: PluginInstallerV1;\n\treadonly stateStore: PluginStateStoreV1;\n}\n\nfunction readActiveVersions(\n\tstore: PluginStateStoreV1,\n\tscope: \"global\" | \"project\",\n\tscopeRef: string,\n\tsignal: AbortSignal | undefined,\n): Promise<ReadonlyMap<string, string>> {\n\treturn (async () => {\n\t\tconst result = await store.read({ ...(signal === undefined ? {} : { signal }) });\n\t\tif (result.status !== \"ok\" && result.status !== \"missing\")\n\t\t\tthrow new Error(\n\t\t\t\tt(\"plugin state read failed ({detail}) for the {scope} scope\", {\n\t\t\t\t\tdetail: result.diagnostics[0]?.code ?? result.status,\n\t\t\t\t\tscope,\n\t\t\t\t}),\n\t\t\t);\n\t\tconst versions = new Map<string, string>();\n\t\tfor (const record of result.snapshot.records) {\n\t\t\tif (record.state.scope !== scope || record.state.scopeRef !== scopeRef) continue;\n\t\t\t// Enabled is deliberately not filtered: a disabled plugin still owns\n\t\t\t// its active installation record, and bootstrap never touches it (G5).\n\t\t\tif (record.state.lifecycle !== \"active\") continue;\n\t\t\tversions.set(record.pluginId, record.pluginVersion);\n\t\t}\n\t\treturn versions;\n\t})();\n}\n\n/**\n * Run the startup bootstrap for one agent directory. The function resolves\n * with a structured result and never throws for per-plugin failures; only a\n * wiring-level construction error propagates to the caller (main.ts guards\n * startup with its own catch).\n */\nexport async function runNodePluginBootstrapV1(\n\toptions: NodePluginBootstrapOptionsV1,\n): Promise<NodePluginBootstrapResultV1> {\n\tif (process.env[AGENT_FORGE_PLUGIN_BOOTSTRAP_ENV_V1]?.trim() === PLUGIN_BOOTSTRAP_DISABLED_VALUE_V1) {\n\t\treturn Object.freeze({\n\t\t\tversion: 1,\n\t\t\tstatus: \"succeeded\",\n\t\t\tactions: Object.freeze([]),\n\t\t\tdiagnostics: Object.freeze([]),\n\t\t\tdurationMs: 0,\n\t\t\tskipped: \"disabled\",\n\t\t});\n\t}\n\tif (isOfflineModeEnabled()) {\n\t\treturn Object.freeze({\n\t\t\tversion: 1,\n\t\t\tstatus: \"succeeded\",\n\t\t\tactions: Object.freeze([]),\n\t\t\tdiagnostics: Object.freeze([\n\t\t\t\t{\n\t\t\t\t\tcode: \"bootstrap_skipped_offline\",\n\t\t\t\t\tmessage: t(\n\t\t\t\t\t\t\"Offline posture (AGENT_FORGE_OFFLINE) skips the startup plugin bootstrap; run `agent-forge plugin install <package>` explicitly to install plugins.\",\n\t\t\t\t\t),\n\t\t\t\t},\n\t\t\t] as const),\n\t\t\tdurationMs: 0,\n\t\t\tskipped: \"offline\",\n\t\t});\n\t}\n\tif (options.deps !== undefined) {\n\t\treturn await runPluginBootstrapV1({\n\t\t\tmanifest: options.manifest ?? BOOTSTRAP_FACTORY_PLUGIN_MANIFEST_V1,\n\t\t\tdeps: options.deps,\n\t\t\t...(options.onPendingInstalls === undefined ? {} : { onPendingInstalls: options.onPendingInstalls }),\n\t\t});\n\t}\n\tlet session: InstallSessionV1 | undefined;\n\tconst ensureSession = async (): Promise<InstallSessionV1> => {\n\t\tif (session !== undefined) return session;\n\t\tconst acquisition = createNodePluginAcquisitionHostV1({\n\t\t\t...(options.npmRegistry === undefined ? {} : { npmRegistry: options.npmRegistry }),\n\t\t\t...(options.npmToken === undefined ? {} : { npmToken: options.npmToken }),\n\t\t\t...(options.fetch === undefined ? {} : { fetch: options.fetch }),\n\t\t\t...(options.limits === undefined ? {} : { limits: options.limits }),\n\t\t});\n\t\tconst installHost = await createNodePackageInstallHostV1({\n\t\t\topenArtifact: (input) => acquisition.openArtifact(input),\n\t\t\tinstallationDirectory: defaultPluginInstallStoreDirectoryV1(options.agentDir),\n\t\t\tpersistence: \"persistent\",\n\t\t\tsupportedScopes: [\"global\", \"project\"],\n\t\t\t...(options.limits === undefined ? {} : { ...options.limits }),\n\t\t});\n\t\tsession = {\n\t\t\tacquisition,\n\t\t\tinstallHost,\n\t\t\tinstaller: createPluginInstallerV1({ host: installHost }),\n\t\t\tstateStore: createPluginStateStoreV1({ filePath: join(options.agentDir, DEFAULT_PLUGIN_STATE_FILE_V1) }),\n\t\t};\n\t\treturn session;\n\t};\n\tconst deps: PluginBootstrapDepsV1 = {\n\t\tlistActive: async ({ signal }) => {\n\t\t\tconst globalVersions = readActiveVersions(\n\t\t\t\tcreatePluginStateStoreV1({ filePath: join(options.agentDir, DEFAULT_PLUGIN_STATE_FILE_V1) }),\n\t\t\t\t\"global\",\n\t\t\t\tDEFAULT_GLOBAL_PLUGIN_SCOPE_REF_V1,\n\t\t\t\tsignal,\n\t\t\t);\n\t\t\tconst projectVersions = readActiveVersions(\n\t\t\t\tcreatePluginStateStoreV1({ filePath: join(options.cwd, CONFIG_DIR_NAME, DEFAULT_PLUGIN_STATE_FILE_V1) }),\n\t\t\t\t\"project\",\n\t\t\t\tprojectPluginScopeRefV1(options.cwd),\n\t\t\t\tsignal,\n\t\t\t);\n\t\t\tconst [globalResult, projectResult] = await Promise.all([globalVersions, projectVersions]);\n\t\t\t// Project precedence mirrors active-binding resolution: a project\n\t\t\t// installation shadows the same plugin id from the global scope.\n\t\t\treturn new Map([...globalResult, ...projectResult]);\n\t\t},\n\t\tinstallFromNpm: async ({ npmName, range, signal }) => {\n\t\t\tconst active = await ensureSession();\n\t\t\t// npm refs only (§0.7): scoped or plain names with the shared minimal\n\t\t\t// range subset; no github/gitee/url/local ref can be expressed here.\n\t\t\tconst ref = range === undefined ? npmName : `${npmName}@${range}`;\n\t\t\tconst acquired = await active.acquisition.resolvePackage({ ref, ...(signal === undefined ? {} : { signal }) });\n\t\t\tlet released = false;\n\t\t\tconst release = async (): Promise<void> => {\n\t\t\t\tif (released) return;\n\t\t\t\treleased = true;\n\t\t\t\tawait acquired.release();\n\t\t\t};\n\t\t\ttry {\n\t\t\t\tconst verified = active.installer.prepare({\n\t\t\t\t\tmanifest: acquired.manifest,\n\t\t\t\t\tsource: acquired.source,\n\t\t\t\t\thost: defaultPluginHostFactsV1(),\n\t\t\t\t});\n\t\t\t\tif (verified.status !== \"verified\")\n\t\t\t\t\tthrow new Error(\n\t\t\t\t\t\tt(\"installer prepare rejected {pluginId}: {reason}\", {\n\t\t\t\t\t\t\tpluginId: acquired.manifest.id,\n\t\t\t\t\t\t\treason: verified.reason,\n\t\t\t\t\t\t}),\n\t\t\t\t\t);\n\t\t\t\tconst installed = await active.installer.install({\n\t\t\t\t\trecord: verified.record,\n\t\t\t\t\tscope: \"global\",\n\t\t\t\t\tscopeRef: DEFAULT_GLOBAL_PLUGIN_SCOPE_REF_V1,\n\t\t\t\t\tartifact: acquired.artifact,\n\t\t\t\t\t...(signal === undefined ? {} : { signal }),\n\t\t\t\t});\n\t\t\t\tif (installed.status !== \"succeeded\")\n\t\t\t\t\tthrow new Error(\n\t\t\t\t\t\tt(\"plugin install failed ({code}) for {pluginId}\", {\n\t\t\t\t\t\t\tcode: installed.error.code,\n\t\t\t\t\t\t\tpluginId: acquired.manifest.id,\n\t\t\t\t\t\t}),\n\t\t\t\t\t);\n\t\t\t\tconst activated = await active.installer.activate({\n\t\t\t\t\tinstallation: installed.installation,\n\t\t\t\t\trecord: verified.record,\n\t\t\t\t\tscope: \"global\",\n\t\t\t\t\tscopeRef: DEFAULT_GLOBAL_PLUGIN_SCOPE_REF_V1,\n\t\t\t\t\t...(signal === undefined ? {} : { signal }),\n\t\t\t\t});\n\t\t\t\tif (activated.status !== \"succeeded\") {\n\t\t\t\t\tawait active.installer\n\t\t\t\t\t\t.remove({\n\t\t\t\t\t\t\tinstallation: installed.installation,\n\t\t\t\t\t\t\tscope: \"global\",\n\t\t\t\t\t\t\tscopeRef: DEFAULT_GLOBAL_PLUGIN_SCOPE_REF_V1,\n\t\t\t\t\t\t})\n\t\t\t\t\t\t.catch(() => undefined);\n\t\t\t\t\tthrow new Error(\n\t\t\t\t\t\tt(\"plugin activation failed ({code}) for {pluginId}\", {\n\t\t\t\t\t\t\tcode: activated.error.code,\n\t\t\t\t\t\t\tpluginId: acquired.manifest.id,\n\t\t\t\t\t\t}),\n\t\t\t\t\t);\n\t\t\t\t}\n\t\t\t\tconst persisted = await active.stateStore.upsert({\n\t\t\t\t\tinstallation: activated.installation,\n\t\t\t\t\tscope: \"global\",\n\t\t\t\t\tenabled: true,\n\t\t\t\t\tsource: acquired.source,\n\t\t\t\t\t...(signal === undefined ? {} : { signal }),\n\t\t\t\t});\n\t\t\t\tif (persisted.status !== \"ok\") {\n\t\t\t\t\tawait active.installer\n\t\t\t\t\t\t.remove({\n\t\t\t\t\t\t\tinstallation: activated.installation,\n\t\t\t\t\t\t\tscope: \"global\",\n\t\t\t\t\t\t\tscopeRef: DEFAULT_GLOBAL_PLUGIN_SCOPE_REF_V1,\n\t\t\t\t\t\t})\n\t\t\t\t\t\t.catch(() => undefined);\n\t\t\t\t\tthrow new Error(\n\t\t\t\t\t\tt(\"plugin state persist failed ({status}) for {pluginId}\", {\n\t\t\t\t\t\t\tstatus: persisted.status,\n\t\t\t\t\t\t\tpluginId: acquired.manifest.id,\n\t\t\t\t\t\t}),\n\t\t\t\t\t);\n\t\t\t\t}\n\t\t\t\treturn { pluginVersion: activated.installation.pluginVersion, source: acquired.source };\n\t\t\t} finally {\n\t\t\t\tawait release();\n\t\t\t}\n\t\t},\n\t\t...(options.signal === undefined ? {} : { signal: options.signal }),\n\t};\n\ttry {\n\t\treturn await runPluginBootstrapV1({\n\t\t\tmanifest: options.manifest ?? BOOTSTRAP_FACTORY_PLUGIN_MANIFEST_V1,\n\t\t\tdeps,\n\t\t\t// First-run progress line (设计 §4.4, 2026-10-03): a fresh install is\n\t\t\t// otherwise silent for the whole network install window.\n\t\t\tonPendingInstalls:\n\t\t\t\toptions.onPendingInstalls ??\n\t\t\t\t((count: number) => {\n\t\t\t\t\tconsole.error(t(\"First run: installing {count} factory plugins…\", { count }));\n\t\t\t\t}),\n\t\t});\n\t} finally {\n\t\tconst active = session;\n\t\tsession = undefined;\n\t\tif (active !== undefined) {\n\t\t\tawait active.installHost.close().catch(() => undefined);\n\t\t\tawait active.acquisition.close().catch(() => undefined);\n\t\t}\n\t}\n}\n"]}

package/dist/plugins/ecosystem/node-plugin-bootstrap.js

@@ -15,6 +15,8 @@
  */
 import { join } from "node:path";
 import { CONFIG_DIR_NAME } from "../../config.js";
+import { t } from "../../core/i18n/index.js";
+import { isOfflineModeEnabled } from "../../core/package-process-runner.js";
 import { BOOTSTRAP_FACTORY_PLUGIN_MANIFEST_V1 } from "./bootstrap-factory-manifest.js";
 import { DEFAULT_PLUGIN_STATE_FILE_V1, defaultPluginHostFactsV1, defaultPluginInstallStoreDirectoryV1, projectPluginScopeRefV1, } from "./default-active-bindings.js";
 import { createPluginInstallerV1, DEFAULT_GLOBAL_PLUGIN_SCOPE_REF_V1 } from "./installer.js";
@@ -30,7 +32,10 @@ function readActiveVersions(store, scope, scopeRef, signal) {
     return (async () => {
         const result = await store.read({ ...(signal === undefined ? {} : { signal }) });
         if (result.status !== "ok" && result.status !== "missing")
-            throw new Error(`plugin state read failed (${result.diagnostics[0]?.code ?? result.status}) for the ${scope} scope`);
+            throw new Error(t("plugin state read failed ({detail}) for the {scope} scope", {
+                detail: result.diagnostics[0]?.code ?? result.status,
+                scope,
+            }));
         const versions = new Map();
         for (const record of result.snapshot.records) {
             if (record.state.scope !== scope || record.state.scopeRef !== scopeRef)
@@ -61,10 +66,26 @@ export async function runNodePluginBootstrapV1(options) {
             skipped: "disabled",
         });
     }
+    if (isOfflineModeEnabled()) {
+        return Object.freeze({
+            version: 1,
+            status: "succeeded",
+            actions: Object.freeze([]),
+            diagnostics: Object.freeze([
+                {
+                    code: "bootstrap_skipped_offline",
+                    message: t("Offline posture (AGENT_FORGE_OFFLINE) skips the startup plugin bootstrap; run `agent-forge plugin install <package>` explicitly to install plugins."),
+                },
+            ]),
+            durationMs: 0,
+            skipped: "offline",
+        });
+    }
     if (options.deps !== undefined) {
         return await runPluginBootstrapV1({
             manifest: options.manifest ?? BOOTSTRAP_FACTORY_PLUGIN_MANIFEST_V1,
             deps: options.deps,
+            ...(options.onPendingInstalls === undefined ? {} : { onPendingInstalls: options.onPendingInstalls }),
         });
     }
     let session;
@@ -121,7 +142,10 @@ export async function runNodePluginBootstrapV1(options) {
                     host: defaultPluginHostFactsV1(),
                 });
                 if (verified.status !== "verified")
-                    throw new Error(`installer prepare rejected ${acquired.manifest.id}: ${verified.reason}`);
+                    throw new Error(t("installer prepare rejected {pluginId}: {reason}", {
+                        pluginId: acquired.manifest.id,
+                        reason: verified.reason,
+                    }));
                 const installed = await active.installer.install({
                     record: verified.record,
                     scope: "global",
@@ -130,7 +154,10 @@ export async function runNodePluginBootstrapV1(options) {
                     ...(signal === undefined ? {} : { signal }),
                 });
                 if (installed.status !== "succeeded")
-                    throw new Error(`plugin install failed (${installed.error.code}) for ${acquired.manifest.id}`);
+                    throw new Error(t("plugin install failed ({code}) for {pluginId}", {
+                        code: installed.error.code,
+                        pluginId: acquired.manifest.id,
+                    }));
                 const activated = await active.installer.activate({
                     installation: installed.installation,
                     record: verified.record,
@@ -146,7 +173,10 @@ export async function runNodePluginBootstrapV1(options) {
                         scopeRef: DEFAULT_GLOBAL_PLUGIN_SCOPE_REF_V1,
                     })
                         .catch(() => undefined);
-                    throw new Error(`plugin activation failed (${activated.error.code}) for ${acquired.manifest.id}`);
+                    throw new Error(t("plugin activation failed ({code}) for {pluginId}", {
+                        code: activated.error.code,
+                        pluginId: acquired.manifest.id,
+                    }));
                 }
                 const persisted = await active.stateStore.upsert({
                     installation: activated.installation,
@@ -163,7 +193,10 @@ export async function runNodePluginBootstrapV1(options) {
                         scopeRef: DEFAULT_GLOBAL_PLUGIN_SCOPE_REF_V1,
                     })
                         .catch(() => undefined);
-                    throw new Error(`plugin state persist failed (${persisted.status}) for ${acquired.manifest.id}`);
+                    throw new Error(t("plugin state persist failed ({status}) for {pluginId}", {
+                        status: persisted.status,
+                        pluginId: acquired.manifest.id,
+                    }));
                 }
                 return { pluginVersion: activated.installation.pluginVersion, source: acquired.source };
             }
@@ -177,6 +210,12 @@ export async function runNodePluginBootstrapV1(options) {
         return await runPluginBootstrapV1({
             manifest: options.manifest ?? BOOTSTRAP_FACTORY_PLUGIN_MANIFEST_V1,
             deps,
+            // First-run progress line (设计 §4.4, 2026-10-03): a fresh install is
+            // otherwise silent for the whole network install window.
+            onPendingInstalls: options.onPendingInstalls ??
+                ((count) => {
+                    console.error(t("First run: installing {count} factory plugins…", { count }));
+                }),
         });
     }
     finally {

package/dist/plugins/ecosystem/node-plugin-bootstrap.js.map

@@ -1 +1 @@
-{"version":3,"file":"node-plugin-bootstrap.js","sourceRoot":"","sources":["../../../src/plugins/ecosystem/node-plugin-bootstrap.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAElD,OAAO,EAAE,oCAAoC,EAAE,MAAM,iCAAiC,CAAC;AACvF,OAAO,EACN,4BAA4B,EAC5B,wBAAwB,EACxB,oCAAoC,EACpC,uBAAuB,GACvB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,uBAAuB,EAAE,kCAAkC,EAA0B,MAAM,gBAAgB,CAAC;AACrH,OAAO,EACN,8BAA8B,GAG9B,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,iCAAiC,EAAoC,MAAM,mCAAmC,CAAC;AACxH,OAAO,EAA4D,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AACvH,OAAO,EAAE,wBAAwB,EAA2B,MAAM,YAAY,CAAC;AAE/E,6EAA6E;AAC7E,MAAM,CAAC,MAAM,mCAAmC,GAAG,8BAA8B,CAAC;AAElF,+FAA+F;AAC/F,MAAM,kCAAkC,GAAG,KAAK,CAAC;AAgCjD,SAAS,kBAAkB,CAC1B,KAAyB,EACzB,KAA2B,EAC3B,QAAgB,EAChB,MAA+B,EACQ;IACvC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;QACnB,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;QACjF,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS;YACxD,MAAM,IAAI,KAAK,CACd,6BAA6B,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,MAAM,CAAC,MAAM,aAAa,KAAK,QAAQ,CACnG,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;QAC3C,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;YAC9C,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,KAAK,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,QAAQ,KAAK,QAAQ;gBAAE,SAAS;YACjF,qEAAqE;YACrE,uEAAuE;YACvE,IAAI,MAAM,CAAC,KAAK,CAAC,SAAS,KAAK,QAAQ;gBAAE,SAAS;YAClD,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC;QACrD,CAAC;QACD,OAAO,QAAQ,CAAC;IAAA,CAChB,CAAC,EAAE,CAAC;AAAA,CACL;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC7C,OAAqC,EACE;IACvC,IAAI,OAAO,CAAC,GAAG,CAAC,mCAAmC,CAAC,EAAE,IAAI,EAAE,KAAK,kCAAkC,EAAE,CAAC;QACrG,OAAO,MAAM,CAAC,MAAM,CAAC;YACpB,OAAO,EAAE,CAAC;YACV,MAAM,EAAE,WAAW;YACnB,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1B,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YAC9B,UAAU,EAAE,CAAC;YACb,OAAO,EAAE,UAAU;SACnB,CAAC,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAChC,OAAO,MAAM,oBAAoB,CAAC;YACjC,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,oCAAoC;YAClE,IAAI,EAAE,OAAO,CAAC,IAAI;SAClB,CAAC,CAAC;IACJ,CAAC;IACD,IAAI,OAAqC,CAAC;IAC1C,MAAM,aAAa,GAAG,KAAK,IAA+B,EAAE,CAAC;QAC5D,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO,OAAO,CAAC;QAC1C,MAAM,WAAW,GAAG,iCAAiC,CAAC;YACrD,GAAG,CAAC,OAAO,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC;YAClF,GAAG,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC;YACzE,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;YAChE,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;SACnE,CAAC,CAAC;QACH,MAAM,WAAW,GAAG,MAAM,8BAA8B,CAAC;YACxD,YAAY,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,YAAY,CAAC,KAAK,CAAC;YACxD,qBAAqB,EAAE,oCAAoC,CAAC,OAAO,CAAC,QAAQ,CAAC;YAC7E,WAAW,EAAE,YAAY;YACzB,eAAe,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC;YACtC,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;SAC9D,CAAC,CAAC;QACH,OAAO,GAAG;YACT,WAAW;YACX,WAAW;YACX,SAAS,EAAE,uBAAuB,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;YACzD,UAAU,EAAE,wBAAwB,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,4BAA4B,CAAC,EAAE,CAAC;SACxG,CAAC;QACF,OAAO,OAAO,CAAC;IAAA,CACf,CAAC;IACF,MAAM,IAAI,GAA0B;QACnC,UAAU,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;YACjC,MAAM,cAAc,GAAG,kBAAkB,CACxC,wBAAwB,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,4BAA4B,CAAC,EAAE,CAAC,EAC5F,QAAQ,EACR,kCAAkC,EAClC,MAAM,CACN,CAAC;YACF,MAAM,eAAe,GAAG,kBAAkB,CACzC,wBAAwB,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,eAAe,EAAE,4BAA4B,CAAC,EAAE,CAAC,EACxG,SAAS,EACT,uBAAuB,CAAC,OAAO,CAAC,GAAG,CAAC,EACpC,MAAM,CACN,CAAC;YACF,MAAM,CAAC,YAAY,EAAE,aAAa,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,cAAc,EAAE,eAAe,CAAC,CAAC,CAAC;YAC3F,kEAAkE;YAClE,iEAAiE;YACjE,OAAO,IAAI,GAAG,CAAC,CAAC,GAAG,YAAY,EAAE,GAAG,aAAa,CAAC,CAAC,CAAC;QAAA,CACpD;QACD,cAAc,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;YACrD,MAAM,MAAM,GAAG,MAAM,aAAa,EAAE,CAAC;YACrC,uEAAsE;YACtE,qEAAqE;YACrE,MAAM,GAAG,GAAG,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,IAAI,KAAK,EAAE,CAAC;YAClE,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,cAAc,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;YAC/G,IAAI,QAAQ,GAAG,KAAK,CAAC;YACrB,MAAM,OAAO,GAAG,KAAK,IAAmB,EAAE,CAAC;gBAC1C,IAAI,QAAQ;oBAAE,OAAO;gBACrB,QAAQ,GAAG,IAAI,CAAC;gBAChB,MAAM,QAAQ,CAAC,OAAO,EAAE,CAAC;YAAA,CACzB,CAAC;YACF,IAAI,CAAC;gBACJ,MAAM,QAAQ,GAAG,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC;oBACzC,QAAQ,EAAE,QAAQ,CAAC,QAAQ;oBAC3B,MAAM,EAAE,QAAQ,CAAC,MAAM;oBACvB,IAAI,EAAE,wBAAwB,EAAE;iBAChC,CAAC,CAAC;gBACH,IAAI,QAAQ,CAAC,MAAM,KAAK,UAAU;oBACjC,MAAM,IAAI,KAAK,CAAC,8BAA8B,QAAQ,CAAC,QAAQ,CAAC,EAAE,KAAK,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;gBAC3F,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC;oBAChD,MAAM,EAAE,QAAQ,CAAC,MAAM;oBACvB,KAAK,EAAE,QAAQ;oBACf,QAAQ,EAAE,kCAAkC;oBAC5C,QAAQ,EAAE,QAAQ,CAAC,QAAQ;oBAC3B,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;iBAC3C,CAAC,CAAC;gBACH,IAAI,SAAS,CAAC,MAAM,KAAK,WAAW;oBACnC,MAAM,IAAI,KAAK,CAAC,0BAA0B,SAAS,CAAC,KAAK,CAAC,IAAI,SAAS,QAAQ,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC;gBAChG,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC;oBACjD,YAAY,EAAE,SAAS,CAAC,YAAY;oBACpC,MAAM,EAAE,QAAQ,CAAC,MAAM;oBACvB,KAAK,EAAE,QAAQ;oBACf,QAAQ,EAAE,kCAAkC;oBAC5C,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;iBAC3C,CAAC,CAAC;gBACH,IAAI,SAAS,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;oBACtC,MAAM,MAAM,CAAC,SAAS;yBACpB,MAAM,CAAC;wBACP,YAAY,EAAE,SAAS,CAAC,YAAY;wBACpC,KAAK,EAAE,QAAQ;wBACf,QAAQ,EAAE,kCAAkC;qBAC5C,CAAC;yBACD,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;oBACzB,MAAM,IAAI,KAAK,CAAC,6BAA6B,SAAS,CAAC,KAAK,CAAC,IAAI,SAAS,QAAQ,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC;gBACnG,CAAC;gBACD,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC;oBAChD,YAAY,EAAE,SAAS,CAAC,YAAY;oBACpC,KAAK,EAAE,QAAQ;oBACf,OAAO,EAAE,IAAI;oBACb,MAAM,EAAE,QAAQ,CAAC,MAAM;oBACvB,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;iBAC3C,CAAC,CAAC;gBACH,IAAI,SAAS,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;oBAC/B,MAAM,MAAM,CAAC,SAAS;yBACpB,MAAM,CAAC;wBACP,YAAY,EAAE,SAAS,CAAC,YAAY;wBACpC,KAAK,EAAE,QAAQ;wBACf,QAAQ,EAAE,kCAAkC;qBAC5C,CAAC;yBACD,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;oBACzB,MAAM,IAAI,KAAK,CAAC,gCAAgC,SAAS,CAAC,MAAM,SAAS,QAAQ,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC;gBAClG,CAAC;gBACD,OAAO,EAAE,aAAa,EAAE,SAAS,CAAC,YAAY,CAAC,aAAa,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;YACzF,CAAC;oBAAS,CAAC;gBACV,MAAM,OAAO,EAAE,CAAC;YACjB,CAAC;QAAA,CACD;QACD,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;KACnE,CAAC;IACF,IAAI,CAAC;QACJ,OAAO,MAAM,oBAAoB,CAAC;YACjC,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,oCAAoC;YAClE,IAAI;SACJ,CAAC,CAAC;IACJ,CAAC;YAAS,CAAC;QACV,MAAM,MAAM,GAAG,OAAO,CAAC;QACvB,OAAO,GAAG,SAAS,CAAC;QACpB,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YAC1B,MAAM,MAAM,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YACxD,MAAM,MAAM,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACzD,CAAC;IACF,CAAC;AAAA,CACD","sourcesContent":["/**\n * Node wiring for the startup plugin bootstrap (design\n * `插件独立分发与启动装配设计.md` §4.4, §0.7).\n *\n * `AGENT_FORGE_PLUGIN_BOOTSTRAP=off` skips everything, including the local\n * comparison. The comparison dependency reads the global and project\n * plugin-state.json stores only — read-only, and it never constructs an HTTP\n * client, so an assembled environment starts offline (G3). Network objects\n * (npm acquisition host, install host) are built lazily inside the install\n * action and closed when the bootstrap finishes. Installs go through the\n * npm acquisition path exclusively and persist the `npm:<host>` source label\n * in the global plugin state (same prepare/install/activate/upsert\n * transaction shape as the CLI install flow, implemented as a library\n * function without going through the CLI layer).\n */\n\nimport { join } from \"node:path\";\nimport { CONFIG_DIR_NAME } from \"../../config.ts\";\nimport type { PluginBootstrapFactoryEntryV1 } from \"./bootstrap-factory-manifest.ts\";\nimport { BOOTSTRAP_FACTORY_PLUGIN_MANIFEST_V1 } from \"./bootstrap-factory-manifest.ts\";\nimport {\n\tDEFAULT_PLUGIN_STATE_FILE_V1,\n\tdefaultPluginHostFactsV1,\n\tdefaultPluginInstallStoreDirectoryV1,\n\tprojectPluginScopeRefV1,\n} from \"./default-active-bindings.ts\";\nimport { createPluginInstallerV1, DEFAULT_GLOBAL_PLUGIN_SCOPE_REF_V1, type PluginInstallerV1 } from \"./installer.ts\";\nimport {\n\tcreateNodePackageInstallHostV1,\n\ttype NodePackageInstallHostV1,\n\ttype NodeZipPackageLimitsV1,\n} from \"./node-package-install-host.ts\";\nimport { createNodePluginAcquisitionHostV1, type NodePluginAcquisitionHostV1 } from \"./node-plugin-acquisition-host.ts\";\nimport { type PluginBootstrapDepsV1, type PluginBootstrapResultV1, runPluginBootstrapV1 } from \"./plugin-bootstrap.ts\";\nimport { createPluginStateStoreV1, type PluginStateStoreV1 } from \"./state.ts\";\n\n/** Environment variable disabling the startup bootstrap entirely (`off`). */\nexport const AGENT_FORGE_PLUGIN_BOOTSTRAP_ENV_V1 = \"AGENT_FORGE_PLUGIN_BOOTSTRAP\";\n\n/** The only recognized disabling value; every other value (and absence) keeps bootstrap on. */\nconst PLUGIN_BOOTSTRAP_DISABLED_VALUE_V1 = \"off\";\n\nexport interface NodePluginBootstrapOptionsV1 {\n\treadonly agentDir: string;\n\treadonly cwd: string;\n\t/** Defaults to the frozen factory manifest. */\n\treadonly manifest?: readonly PluginBootstrapFactoryEntryV1[];\n\t/** Bare http(s) npm registry origin; forwarded to the acquisition host. */\n\treadonly npmRegistry?: string;\n\t/** npm registry bearer token; forwarded to the acquisition host. */\n\treadonly npmToken?: string;\n\treadonly limits?: NodeZipPackageLimitsV1;\n\t/** Deterministic fetch replacement for tests. */\n\treadonly fetch?: typeof globalThis.fetch;\n\treadonly signal?: AbortSignal;\n\t/** Full dependency override for deterministic tests; the env switch still applies. */\n\treadonly deps?: PluginBootstrapDepsV1;\n}\n\nexport type NodePluginBootstrapResultV1 = PluginBootstrapResultV1 & {\n\t/** Present when the env switch short-circuited the run before any local comparison. */\n\treadonly skipped?: \"disabled\";\n};\n\n/** Install-scoped boundaries; created lazily by the first install action. */\ninterface InstallSessionV1 {\n\treadonly acquisition: NodePluginAcquisitionHostV1;\n\treadonly installHost: NodePackageInstallHostV1;\n\treadonly installer: PluginInstallerV1;\n\treadonly stateStore: PluginStateStoreV1;\n}\n\nfunction readActiveVersions(\n\tstore: PluginStateStoreV1,\n\tscope: \"global\" | \"project\",\n\tscopeRef: string,\n\tsignal: AbortSignal | undefined,\n): Promise<ReadonlyMap<string, string>> {\n\treturn (async () => {\n\t\tconst result = await store.read({ ...(signal === undefined ? {} : { signal }) });\n\t\tif (result.status !== \"ok\" && result.status !== \"missing\")\n\t\t\tthrow new Error(\n\t\t\t\t`plugin state read failed (${result.diagnostics[0]?.code ?? result.status}) for the ${scope} scope`,\n\t\t\t);\n\t\tconst versions = new Map<string, string>();\n\t\tfor (const record of result.snapshot.records) {\n\t\t\tif (record.state.scope !== scope || record.state.scopeRef !== scopeRef) continue;\n\t\t\t// Enabled is deliberately not filtered: a disabled plugin still owns\n\t\t\t// its active installation record, and bootstrap never touches it (G5).\n\t\t\tif (record.state.lifecycle !== \"active\") continue;\n\t\t\tversions.set(record.pluginId, record.pluginVersion);\n\t\t}\n\t\treturn versions;\n\t})();\n}\n\n/**\n * Run the startup bootstrap for one agent directory. The function resolves\n * with a structured result and never throws for per-plugin failures; only a\n * wiring-level construction error propagates to the caller (main.ts guards\n * startup with its own catch).\n */\nexport async function runNodePluginBootstrapV1(\n\toptions: NodePluginBootstrapOptionsV1,\n): Promise<NodePluginBootstrapResultV1> {\n\tif (process.env[AGENT_FORGE_PLUGIN_BOOTSTRAP_ENV_V1]?.trim() === PLUGIN_BOOTSTRAP_DISABLED_VALUE_V1) {\n\t\treturn Object.freeze({\n\t\t\tversion: 1,\n\t\t\tstatus: \"succeeded\",\n\t\t\tactions: Object.freeze([]),\n\t\t\tdiagnostics: Object.freeze([]),\n\t\t\tdurationMs: 0,\n\t\t\tskipped: \"disabled\",\n\t\t});\n\t}\n\tif (options.deps !== undefined) {\n\t\treturn await runPluginBootstrapV1({\n\t\t\tmanifest: options.manifest ?? BOOTSTRAP_FACTORY_PLUGIN_MANIFEST_V1,\n\t\t\tdeps: options.deps,\n\t\t});\n\t}\n\tlet session: InstallSessionV1 | undefined;\n\tconst ensureSession = async (): Promise<InstallSessionV1> => {\n\t\tif (session !== undefined) return session;\n\t\tconst acquisition = createNodePluginAcquisitionHostV1({\n\t\t\t...(options.npmRegistry === undefined ? {} : { npmRegistry: options.npmRegistry }),\n\t\t\t...(options.npmToken === undefined ? {} : { npmToken: options.npmToken }),\n\t\t\t...(options.fetch === undefined ? {} : { fetch: options.fetch }),\n\t\t\t...(options.limits === undefined ? {} : { limits: options.limits }),\n\t\t});\n\t\tconst installHost = await createNodePackageInstallHostV1({\n\t\t\topenArtifact: (input) => acquisition.openArtifact(input),\n\t\t\tinstallationDirectory: defaultPluginInstallStoreDirectoryV1(options.agentDir),\n\t\t\tpersistence: \"persistent\",\n\t\t\tsupportedScopes: [\"global\", \"project\"],\n\t\t\t...(options.limits === undefined ? {} : { ...options.limits }),\n\t\t});\n\t\tsession = {\n\t\t\tacquisition,\n\t\t\tinstallHost,\n\t\t\tinstaller: createPluginInstallerV1({ host: installHost }),\n\t\t\tstateStore: createPluginStateStoreV1({ filePath: join(options.agentDir, DEFAULT_PLUGIN_STATE_FILE_V1) }),\n\t\t};\n\t\treturn session;\n\t};\n\tconst deps: PluginBootstrapDepsV1 = {\n\t\tlistActive: async ({ signal }) => {\n\t\t\tconst globalVersions = readActiveVersions(\n\t\t\t\tcreatePluginStateStoreV1({ filePath: join(options.agentDir, DEFAULT_PLUGIN_STATE_FILE_V1) }),\n\t\t\t\t\"global\",\n\t\t\t\tDEFAULT_GLOBAL_PLUGIN_SCOPE_REF_V1,\n\t\t\t\tsignal,\n\t\t\t);\n\t\t\tconst projectVersions = readActiveVersions(\n\t\t\t\tcreatePluginStateStoreV1({ filePath: join(options.cwd, CONFIG_DIR_NAME, DEFAULT_PLUGIN_STATE_FILE_V1) }),\n\t\t\t\t\"project\",\n\t\t\t\tprojectPluginScopeRefV1(options.cwd),\n\t\t\t\tsignal,\n\t\t\t);\n\t\t\tconst [globalResult, projectResult] = await Promise.all([globalVersions, projectVersions]);\n\t\t\t// Project precedence mirrors active-binding resolution: a project\n\t\t\t// installation shadows the same plugin id from the global scope.\n\t\t\treturn new Map([...globalResult, ...projectResult]);\n\t\t},\n\t\tinstallFromNpm: async ({ npmName, range, signal }) => {\n\t\t\tconst active = await ensureSession();\n\t\t\t// npm refs only (§0.7): scoped or plain names with the shared minimal\n\t\t\t// range subset; no github/gitee/url/local ref can be expressed here.\n\t\t\tconst ref = range === undefined ? npmName : `${npmName}@${range}`;\n\t\t\tconst acquired = await active.acquisition.resolvePackage({ ref, ...(signal === undefined ? {} : { signal }) });\n\t\t\tlet released = false;\n\t\t\tconst release = async (): Promise<void> => {\n\t\t\t\tif (released) return;\n\t\t\t\treleased = true;\n\t\t\t\tawait acquired.release();\n\t\t\t};\n\t\t\ttry {\n\t\t\t\tconst verified = active.installer.prepare({\n\t\t\t\t\tmanifest: acquired.manifest,\n\t\t\t\t\tsource: acquired.source,\n\t\t\t\t\thost: defaultPluginHostFactsV1(),\n\t\t\t\t});\n\t\t\t\tif (verified.status !== \"verified\")\n\t\t\t\t\tthrow new Error(`installer prepare rejected ${acquired.manifest.id}: ${verified.reason}`);\n\t\t\t\tconst installed = await active.installer.install({\n\t\t\t\t\trecord: verified.record,\n\t\t\t\t\tscope: \"global\",\n\t\t\t\t\tscopeRef: DEFAULT_GLOBAL_PLUGIN_SCOPE_REF_V1,\n\t\t\t\t\tartifact: acquired.artifact,\n\t\t\t\t\t...(signal === undefined ? {} : { signal }),\n\t\t\t\t});\n\t\t\t\tif (installed.status !== \"succeeded\")\n\t\t\t\t\tthrow new Error(`plugin install failed (${installed.error.code}) for ${acquired.manifest.id}`);\n\t\t\t\tconst activated = await active.installer.activate({\n\t\t\t\t\tinstallation: installed.installation,\n\t\t\t\t\trecord: verified.record,\n\t\t\t\t\tscope: \"global\",\n\t\t\t\t\tscopeRef: DEFAULT_GLOBAL_PLUGIN_SCOPE_REF_V1,\n\t\t\t\t\t...(signal === undefined ? {} : { signal }),\n\t\t\t\t});\n\t\t\t\tif (activated.status !== \"succeeded\") {\n\t\t\t\t\tawait active.installer\n\t\t\t\t\t\t.remove({\n\t\t\t\t\t\t\tinstallation: installed.installation,\n\t\t\t\t\t\t\tscope: \"global\",\n\t\t\t\t\t\t\tscopeRef: DEFAULT_GLOBAL_PLUGIN_SCOPE_REF_V1,\n\t\t\t\t\t\t})\n\t\t\t\t\t\t.catch(() => undefined);\n\t\t\t\t\tthrow new Error(`plugin activation failed (${activated.error.code}) for ${acquired.manifest.id}`);\n\t\t\t\t}\n\t\t\t\tconst persisted = await active.stateStore.upsert({\n\t\t\t\t\tinstallation: activated.installation,\n\t\t\t\t\tscope: \"global\",\n\t\t\t\t\tenabled: true,\n\t\t\t\t\tsource: acquired.source,\n\t\t\t\t\t...(signal === undefined ? {} : { signal }),\n\t\t\t\t});\n\t\t\t\tif (persisted.status !== \"ok\") {\n\t\t\t\t\tawait active.installer\n\t\t\t\t\t\t.remove({\n\t\t\t\t\t\t\tinstallation: activated.installation,\n\t\t\t\t\t\t\tscope: \"global\",\n\t\t\t\t\t\t\tscopeRef: DEFAULT_GLOBAL_PLUGIN_SCOPE_REF_V1,\n\t\t\t\t\t\t})\n\t\t\t\t\t\t.catch(() => undefined);\n\t\t\t\t\tthrow new Error(`plugin state persist failed (${persisted.status}) for ${acquired.manifest.id}`);\n\t\t\t\t}\n\t\t\t\treturn { pluginVersion: activated.installation.pluginVersion, source: acquired.source };\n\t\t\t} finally {\n\t\t\t\tawait release();\n\t\t\t}\n\t\t},\n\t\t...(options.signal === undefined ? {} : { signal: options.signal }),\n\t};\n\ttry {\n\t\treturn await runPluginBootstrapV1({\n\t\t\tmanifest: options.manifest ?? BOOTSTRAP_FACTORY_PLUGIN_MANIFEST_V1,\n\t\t\tdeps,\n\t\t});\n\t} finally {\n\t\tconst active = session;\n\t\tsession = undefined;\n\t\tif (active !== undefined) {\n\t\t\tawait active.installHost.close().catch(() => undefined);\n\t\t\tawait active.acquisition.close().catch(() => undefined);\n\t\t}\n\t}\n}\n"]}
+{"version":3,"file":"node-plugin-bootstrap.js","sourceRoot":"","sources":["../../../src/plugins/ecosystem/node-plugin-bootstrap.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,CAAC,EAAE,MAAM,0BAA0B,CAAC;AAC7C,OAAO,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAC;AAE5E,OAAO,EAAE,oCAAoC,EAAE,MAAM,iCAAiC,CAAC;AACvF,OAAO,EACN,4BAA4B,EAC5B,wBAAwB,EACxB,oCAAoC,EACpC,uBAAuB,GACvB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,uBAAuB,EAAE,kCAAkC,EAA0B,MAAM,gBAAgB,CAAC;AACrH,OAAO,EACN,8BAA8B,GAG9B,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,iCAAiC,EAAoC,MAAM,mCAAmC,CAAC;AACxH,OAAO,EAA4D,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AACvH,OAAO,EAAE,wBAAwB,EAA2B,MAAM,YAAY,CAAC;AAE/E,6EAA6E;AAC7E,MAAM,CAAC,MAAM,mCAAmC,GAAG,8BAA8B,CAAC;AAElF,+FAA+F;AAC/F,MAAM,kCAAkC,GAAG,KAAK,CAAC;AAuCjD,SAAS,kBAAkB,CAC1B,KAAyB,EACzB,KAA2B,EAC3B,QAAgB,EAChB,MAA+B,EACQ;IACvC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;QACnB,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;QACjF,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS;YACxD,MAAM,IAAI,KAAK,CACd,CAAC,CAAC,2DAA2D,EAAE;gBAC9D,MAAM,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,MAAM,CAAC,MAAM;gBACpD,KAAK;aACL,CAAC,CACF,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;QAC3C,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;YAC9C,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,KAAK,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,QAAQ,KAAK,QAAQ;gBAAE,SAAS;YACjF,qEAAqE;YACrE,uEAAuE;YACvE,IAAI,MAAM,CAAC,KAAK,CAAC,SAAS,KAAK,QAAQ;gBAAE,SAAS;YAClD,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC;QACrD,CAAC;QACD,OAAO,QAAQ,CAAC;IAAA,CAChB,CAAC,EAAE,CAAC;AAAA,CACL;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC7C,OAAqC,EACE;IACvC,IAAI,OAAO,CAAC,GAAG,CAAC,mCAAmC,CAAC,EAAE,IAAI,EAAE,KAAK,kCAAkC,EAAE,CAAC;QACrG,OAAO,MAAM,CAAC,MAAM,CAAC;YACpB,OAAO,EAAE,CAAC;YACV,MAAM,EAAE,WAAW;YACnB,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1B,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YAC9B,UAAU,EAAE,CAAC;YACb,OAAO,EAAE,UAAU;SACnB,CAAC,CAAC;IACJ,CAAC;IACD,IAAI,oBAAoB,EAAE,EAAE,CAAC;QAC5B,OAAO,MAAM,CAAC,MAAM,CAAC;YACpB,OAAO,EAAE,CAAC;YACV,MAAM,EAAE,WAAW;YACnB,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1B,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC;gBAC1B;oBACC,IAAI,EAAE,2BAA2B;oBACjC,OAAO,EAAE,CAAC,CACT,qJAAqJ,CACrJ;iBACD;aACQ,CAAC;YACX,UAAU,EAAE,CAAC;YACb,OAAO,EAAE,SAAS;SAClB,CAAC,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAChC,OAAO,MAAM,oBAAoB,CAAC;YACjC,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,oCAAoC;YAClE,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,GAAG,CAAC,OAAO,CAAC,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,OAAO,CAAC,iBAAiB,EAAE,CAAC;SACpG,CAAC,CAAC;IACJ,CAAC;IACD,IAAI,OAAqC,CAAC;IAC1C,MAAM,aAAa,GAAG,KAAK,IAA+B,EAAE,CAAC;QAC5D,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO,OAAO,CAAC;QAC1C,MAAM,WAAW,GAAG,iCAAiC,CAAC;YACrD,GAAG,CAAC,OAAO,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC;YAClF,GAAG,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC;YACzE,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;YAChE,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;SACnE,CAAC,CAAC;QACH,MAAM,WAAW,GAAG,MAAM,8BAA8B,CAAC;YACxD,YAAY,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,YAAY,CAAC,KAAK,CAAC;YACxD,qBAAqB,EAAE,oCAAoC,CAAC,OAAO,CAAC,QAAQ,CAAC;YAC7E,WAAW,EAAE,YAAY;YACzB,eAAe,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC;YACtC,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;SAC9D,CAAC,CAAC;QACH,OAAO,GAAG;YACT,WAAW;YACX,WAAW;YACX,SAAS,EAAE,uBAAuB,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;YACzD,UAAU,EAAE,wBAAwB,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,4BAA4B,CAAC,EAAE,CAAC;SACxG,CAAC;QACF,OAAO,OAAO,CAAC;IAAA,CACf,CAAC;IACF,MAAM,IAAI,GAA0B;QACnC,UAAU,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;YACjC,MAAM,cAAc,GAAG,kBAAkB,CACxC,wBAAwB,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,4BAA4B,CAAC,EAAE,CAAC,EAC5F,QAAQ,EACR,kCAAkC,EAClC,MAAM,CACN,CAAC;YACF,MAAM,eAAe,GAAG,kBAAkB,CACzC,wBAAwB,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,eAAe,EAAE,4BAA4B,CAAC,EAAE,CAAC,EACxG,SAAS,EACT,uBAAuB,CAAC,OAAO,CAAC,GAAG,CAAC,EACpC,MAAM,CACN,CAAC;YACF,MAAM,CAAC,YAAY,EAAE,aAAa,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,cAAc,EAAE,eAAe,CAAC,CAAC,CAAC;YAC3F,kEAAkE;YAClE,iEAAiE;YACjE,OAAO,IAAI,GAAG,CAAC,CAAC,GAAG,YAAY,EAAE,GAAG,aAAa,CAAC,CAAC,CAAC;QAAA,CACpD;QACD,cAAc,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;YACrD,MAAM,MAAM,GAAG,MAAM,aAAa,EAAE,CAAC;YACrC,uEAAsE;YACtE,qEAAqE;YACrE,MAAM,GAAG,GAAG,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,IAAI,KAAK,EAAE,CAAC;YAClE,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,cAAc,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;YAC/G,IAAI,QAAQ,GAAG,KAAK,CAAC;YACrB,MAAM,OAAO,GAAG,KAAK,IAAmB,EAAE,CAAC;gBAC1C,IAAI,QAAQ;oBAAE,OAAO;gBACrB,QAAQ,GAAG,IAAI,CAAC;gBAChB,MAAM,QAAQ,CAAC,OAAO,EAAE,CAAC;YAAA,CACzB,CAAC;YACF,IAAI,CAAC;gBACJ,MAAM,QAAQ,GAAG,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC;oBACzC,QAAQ,EAAE,QAAQ,CAAC,QAAQ;oBAC3B,MAAM,EAAE,QAAQ,CAAC,MAAM;oBACvB,IAAI,EAAE,wBAAwB,EAAE;iBAChC,CAAC,CAAC;gBACH,IAAI,QAAQ,CAAC,MAAM,KAAK,UAAU;oBACjC,MAAM,IAAI,KAAK,CACd,CAAC,CAAC,iDAAiD,EAAE;wBACpD,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE;wBAC9B,MAAM,EAAE,QAAQ,CAAC,MAAM;qBACvB,CAAC,CACF,CAAC;gBACH,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC;oBAChD,MAAM,EAAE,QAAQ,CAAC,MAAM;oBACvB,KAAK,EAAE,QAAQ;oBACf,QAAQ,EAAE,kCAAkC;oBAC5C,QAAQ,EAAE,QAAQ,CAAC,QAAQ;oBAC3B,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;iBAC3C,CAAC,CAAC;gBACH,IAAI,SAAS,CAAC,MAAM,KAAK,WAAW;oBACnC,MAAM,IAAI,KAAK,CACd,CAAC,CAAC,+CAA+C,EAAE;wBAClD,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC,IAAI;wBAC1B,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE;qBAC9B,CAAC,CACF,CAAC;gBACH,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC;oBACjD,YAAY,EAAE,SAAS,CAAC,YAAY;oBACpC,MAAM,EAAE,QAAQ,CAAC,MAAM;oBACvB,KAAK,EAAE,QAAQ;oBACf,QAAQ,EAAE,kCAAkC;oBAC5C,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;iBAC3C,CAAC,CAAC;gBACH,IAAI,SAAS,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;oBACtC,MAAM,MAAM,CAAC,SAAS;yBACpB,MAAM,CAAC;wBACP,YAAY,EAAE,SAAS,CAAC,YAAY;wBACpC,KAAK,EAAE,QAAQ;wBACf,QAAQ,EAAE,kCAAkC;qBAC5C,CAAC;yBACD,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;oBACzB,MAAM,IAAI,KAAK,CACd,CAAC,CAAC,kDAAkD,EAAE;wBACrD,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC,IAAI;wBAC1B,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE;qBAC9B,CAAC,CACF,CAAC;gBACH,CAAC;gBACD,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC;oBAChD,YAAY,EAAE,SAAS,CAAC,YAAY;oBACpC,KAAK,EAAE,QAAQ;oBACf,OAAO,EAAE,IAAI;oBACb,MAAM,EAAE,QAAQ,CAAC,MAAM;oBACvB,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;iBAC3C,CAAC,CAAC;gBACH,IAAI,SAAS,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;oBAC/B,MAAM,MAAM,CAAC,SAAS;yBACpB,MAAM,CAAC;wBACP,YAAY,EAAE,SAAS,CAAC,YAAY;wBACpC,KAAK,EAAE,QAAQ;wBACf,QAAQ,EAAE,kCAAkC;qBAC5C,CAAC;yBACD,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;oBACzB,MAAM,IAAI,KAAK,CACd,CAAC,CAAC,uDAAuD,EAAE;wBAC1D,MAAM,EAAE,SAAS,CAAC,MAAM;wBACxB,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE;qBAC9B,CAAC,CACF,CAAC;gBACH,CAAC;gBACD,OAAO,EAAE,aAAa,EAAE,SAAS,CAAC,YAAY,CAAC,aAAa,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;YACzF,CAAC;oBAAS,CAAC;gBACV,MAAM,OAAO,EAAE,CAAC;YACjB,CAAC;QAAA,CACD;QACD,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;KACnE,CAAC;IACF,IAAI,CAAC;QACJ,OAAO,MAAM,oBAAoB,CAAC;YACjC,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,oCAAoC;YAClE,IAAI;YACJ,yEAAoE;YACpE,yDAAyD;YACzD,iBAAiB,EAChB,OAAO,CAAC,iBAAiB;gBACzB,CAAC,CAAC,KAAa,EAAE,EAAE,CAAC;oBACnB,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,kDAAgD,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;gBAAA,CAC9E,CAAC;SACH,CAAC,CAAC;IACJ,CAAC;YAAS,CAAC;QACV,MAAM,MAAM,GAAG,OAAO,CAAC;QACvB,OAAO,GAAG,SAAS,CAAC;QACpB,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YAC1B,MAAM,MAAM,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YACxD,MAAM,MAAM,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACzD,CAAC;IACF,CAAC;AAAA,CACD","sourcesContent":["/**\n * Node wiring for the startup plugin bootstrap (design\n * `插件独立分发与启动装配设计.md` §4.4, §0.7).\n *\n * `AGENT_FORGE_PLUGIN_BOOTSTRAP=off` skips everything, including the local\n * comparison. The comparison dependency reads the global and project\n * plugin-state.json stores only — read-only, and it never constructs an HTTP\n * client, so an assembled environment starts offline (G3). Network objects\n * (npm acquisition host, install host) are built lazily inside the install\n * action and closed when the bootstrap finishes. Installs go through the\n * npm acquisition path exclusively and persist the `npm:<host>` source label\n * in the global plugin state (same prepare/install/activate/upsert\n * transaction shape as the CLI install flow, implemented as a library\n * function without going through the CLI layer).\n */\n\nimport { join } from \"node:path\";\nimport { CONFIG_DIR_NAME } from \"../../config.ts\";\nimport { t } from \"../../core/i18n/index.ts\";\nimport { isOfflineModeEnabled } from \"../../core/package-process-runner.ts\";\nimport type { PluginBootstrapFactoryEntryV1 } from \"./bootstrap-factory-manifest.ts\";\nimport { BOOTSTRAP_FACTORY_PLUGIN_MANIFEST_V1 } from \"./bootstrap-factory-manifest.ts\";\nimport {\n\tDEFAULT_PLUGIN_STATE_FILE_V1,\n\tdefaultPluginHostFactsV1,\n\tdefaultPluginInstallStoreDirectoryV1,\n\tprojectPluginScopeRefV1,\n} from \"./default-active-bindings.ts\";\nimport { createPluginInstallerV1, DEFAULT_GLOBAL_PLUGIN_SCOPE_REF_V1, type PluginInstallerV1 } from \"./installer.ts\";\nimport {\n\tcreateNodePackageInstallHostV1,\n\ttype NodePackageInstallHostV1,\n\ttype NodeZipPackageLimitsV1,\n} from \"./node-package-install-host.ts\";\nimport { createNodePluginAcquisitionHostV1, type NodePluginAcquisitionHostV1 } from \"./node-plugin-acquisition-host.ts\";\nimport { type PluginBootstrapDepsV1, type PluginBootstrapResultV1, runPluginBootstrapV1 } from \"./plugin-bootstrap.ts\";\nimport { createPluginStateStoreV1, type PluginStateStoreV1 } from \"./state.ts\";\n\n/** Environment variable disabling the startup bootstrap entirely (`off`). */\nexport const AGENT_FORGE_PLUGIN_BOOTSTRAP_ENV_V1 = \"AGENT_FORGE_PLUGIN_BOOTSTRAP\";\n\n/** The only recognized disabling value; every other value (and absence) keeps bootstrap on. */\nconst PLUGIN_BOOTSTRAP_DISABLED_VALUE_V1 = \"off\";\n\nexport interface NodePluginBootstrapOptionsV1 {\n\treadonly agentDir: string;\n\treadonly cwd: string;\n\t/** Defaults to the frozen factory manifest. */\n\treadonly manifest?: readonly PluginBootstrapFactoryEntryV1[];\n\t/** Bare http(s) npm registry origin; forwarded to the acquisition host. */\n\treadonly npmRegistry?: string;\n\t/** npm registry bearer token; forwarded to the acquisition host. */\n\treadonly npmToken?: string;\n\treadonly limits?: NodeZipPackageLimitsV1;\n\t/** Deterministic fetch replacement for tests. */\n\treadonly fetch?: typeof globalThis.fetch;\n\treadonly signal?: AbortSignal;\n\t/** Full dependency override for deterministic tests; the env switch still applies. */\n\treadonly deps?: PluginBootstrapDepsV1;\n\t/** Overrides the first-run progress line (stderr) for tests and hosts. */\n\treadonly onPendingInstalls?: (count: number) => void;\n}\n\nexport type NodePluginBootstrapResultV1 = PluginBootstrapResultV1 & {\n\t/**\n\t * Present when a posture switch short-circuited the run before any local\n\t * comparison: the wiring-level env off switch, or the offline posture\n\t * (设计 §4.4 offline 姿态门, 2026-10-03 — offline installs cannot succeed\n\t * and would only fail slowly, so the run is skipped immediately).\n\t */\n\treadonly skipped?: \"disabled\" | \"offline\";\n};\n\n/** Install-scoped boundaries; created lazily by the first install action. */\ninterface InstallSessionV1 {\n\treadonly acquisition: NodePluginAcquisitionHostV1;\n\treadonly installHost: NodePackageInstallHostV1;\n\treadonly installer: PluginInstallerV1;\n\treadonly stateStore: PluginStateStoreV1;\n}\n\nfunction readActiveVersions(\n\tstore: PluginStateStoreV1,\n\tscope: \"global\" | \"project\",\n\tscopeRef: string,\n\tsignal: AbortSignal | undefined,\n): Promise<ReadonlyMap<string, string>> {\n\treturn (async () => {\n\t\tconst result = await store.read({ ...(signal === undefined ? {} : { signal }) });\n\t\tif (result.status !== \"ok\" && result.status !== \"missing\")\n\t\t\tthrow new Error(\n\t\t\t\tt(\"plugin state read failed ({detail}) for the {scope} scope\", {\n\t\t\t\t\tdetail: result.diagnostics[0]?.code ?? result.status,\n\t\t\t\t\tscope,\n\t\t\t\t}),\n\t\t\t);\n\t\tconst versions = new Map<string, string>();\n\t\tfor (const record of result.snapshot.records) {\n\t\t\tif (record.state.scope !== scope || record.state.scopeRef !== scopeRef) continue;\n\t\t\t// Enabled is deliberately not filtered: a disabled plugin still owns\n\t\t\t// its active installation record, and bootstrap never touches it (G5).\n\t\t\tif (record.state.lifecycle !== \"active\") continue;\n\t\t\tversions.set(record.pluginId, record.pluginVersion);\n\t\t}\n\t\treturn versions;\n\t})();\n}\n\n/**\n * Run the startup bootstrap for one agent directory. The function resolves\n * with a structured result and never throws for per-plugin failures; only a\n * wiring-level construction error propagates to the caller (main.ts guards\n * startup with its own catch).\n */\nexport async function runNodePluginBootstrapV1(\n\toptions: NodePluginBootstrapOptionsV1,\n): Promise<NodePluginBootstrapResultV1> {\n\tif (process.env[AGENT_FORGE_PLUGIN_BOOTSTRAP_ENV_V1]?.trim() === PLUGIN_BOOTSTRAP_DISABLED_VALUE_V1) {\n\t\treturn Object.freeze({\n\t\t\tversion: 1,\n\t\t\tstatus: \"succeeded\",\n\t\t\tactions: Object.freeze([]),\n\t\t\tdiagnostics: Object.freeze([]),\n\t\t\tdurationMs: 0,\n\t\t\tskipped: \"disabled\",\n\t\t});\n\t}\n\tif (isOfflineModeEnabled()) {\n\t\treturn Object.freeze({\n\t\t\tversion: 1,\n\t\t\tstatus: \"succeeded\",\n\t\t\tactions: Object.freeze([]),\n\t\t\tdiagnostics: Object.freeze([\n\t\t\t\t{\n\t\t\t\t\tcode: \"bootstrap_skipped_offline\",\n\t\t\t\t\tmessage: t(\n\t\t\t\t\t\t\"Offline posture (AGENT_FORGE_OFFLINE) skips the startup plugin bootstrap; run `agent-forge plugin install <package>` explicitly to install plugins.\",\n\t\t\t\t\t),\n\t\t\t\t},\n\t\t\t] as const),\n\t\t\tdurationMs: 0,\n\t\t\tskipped: \"offline\",\n\t\t});\n\t}\n\tif (options.deps !== undefined) {\n\t\treturn await runPluginBootstrapV1({\n\t\t\tmanifest: options.manifest ?? BOOTSTRAP_FACTORY_PLUGIN_MANIFEST_V1,\n\t\t\tdeps: options.deps,\n\t\t\t...(options.onPendingInstalls === undefined ? {} : { onPendingInstalls: options.onPendingInstalls }),\n\t\t});\n\t}\n\tlet session: InstallSessionV1 | undefined;\n\tconst ensureSession = async (): Promise<InstallSessionV1> => {\n\t\tif (session !== undefined) return session;\n\t\tconst acquisition = createNodePluginAcquisitionHostV1({\n\t\t\t...(options.npmRegistry === undefined ? {} : { npmRegistry: options.npmRegistry }),\n\t\t\t...(options.npmToken === undefined ? {} : { npmToken: options.npmToken }),\n\t\t\t...(options.fetch === undefined ? {} : { fetch: options.fetch }),\n\t\t\t...(options.limits === undefined ? {} : { limits: options.limits }),\n\t\t});\n\t\tconst installHost = await createNodePackageInstallHostV1({\n\t\t\topenArtifact: (input) => acquisition.openArtifact(input),\n\t\t\tinstallationDirectory: defaultPluginInstallStoreDirectoryV1(options.agentDir),\n\t\t\tpersistence: \"persistent\",\n\t\t\tsupportedScopes: [\"global\", \"project\"],\n\t\t\t...(options.limits === undefined ? {} : { ...options.limits }),\n\t\t});\n\t\tsession = {\n\t\t\tacquisition,\n\t\t\tinstallHost,\n\t\t\tinstaller: createPluginInstallerV1({ host: installHost }),\n\t\t\tstateStore: createPluginStateStoreV1({ filePath: join(options.agentDir, DEFAULT_PLUGIN_STATE_FILE_V1) }),\n\t\t};\n\t\treturn session;\n\t};\n\tconst deps: PluginBootstrapDepsV1 = {\n\t\tlistActive: async ({ signal }) => {\n\t\t\tconst globalVersions = readActiveVersions(\n\t\t\t\tcreatePluginStateStoreV1({ filePath: join(options.agentDir, DEFAULT_PLUGIN_STATE_FILE_V1) }),\n\t\t\t\t\"global\",\n\t\t\t\tDEFAULT_GLOBAL_PLUGIN_SCOPE_REF_V1,\n\t\t\t\tsignal,\n\t\t\t);\n\t\t\tconst projectVersions = readActiveVersions(\n\t\t\t\tcreatePluginStateStoreV1({ filePath: join(options.cwd, CONFIG_DIR_NAME, DEFAULT_PLUGIN_STATE_FILE_V1) }),\n\t\t\t\t\"project\",\n\t\t\t\tprojectPluginScopeRefV1(options.cwd),\n\t\t\t\tsignal,\n\t\t\t);\n\t\t\tconst [globalResult, projectResult] = await Promise.all([globalVersions, projectVersions]);\n\t\t\t// Project precedence mirrors active-binding resolution: a project\n\t\t\t// installation shadows the same plugin id from the global scope.\n\t\t\treturn new Map([...globalResult, ...projectResult]);\n\t\t},\n\t\tinstallFromNpm: async ({ npmName, range, signal }) => {\n\t\t\tconst active = await ensureSession();\n\t\t\t// npm refs only (§0.7): scoped or plain names with the shared minimal\n\t\t\t// range subset; no github/gitee/url/local ref can be expressed here.\n\t\t\tconst ref = range === undefined ? npmName : `${npmName}@${range}`;\n\t\t\tconst acquired = await active.acquisition.resolvePackage({ ref, ...(signal === undefined ? {} : { signal }) });\n\t\t\tlet released = false;\n\t\t\tconst release = async (): Promise<void> => {\n\t\t\t\tif (released) return;\n\t\t\t\treleased = true;\n\t\t\t\tawait acquired.release();\n\t\t\t};\n\t\t\ttry {\n\t\t\t\tconst verified = active.installer.prepare({\n\t\t\t\t\tmanifest: acquired.manifest,\n\t\t\t\t\tsource: acquired.source,\n\t\t\t\t\thost: defaultPluginHostFactsV1(),\n\t\t\t\t});\n\t\t\t\tif (verified.status !== \"verified\")\n\t\t\t\t\tthrow new Error(\n\t\t\t\t\t\tt(\"installer prepare rejected {pluginId}: {reason}\", {\n\t\t\t\t\t\t\tpluginId: acquired.manifest.id,\n\t\t\t\t\t\t\treason: verified.reason,\n\t\t\t\t\t\t}),\n\t\t\t\t\t);\n\t\t\t\tconst installed = await active.installer.install({\n\t\t\t\t\trecord: verified.record,\n\t\t\t\t\tscope: \"global\",\n\t\t\t\t\tscopeRef: DEFAULT_GLOBAL_PLUGIN_SCOPE_REF_V1,\n\t\t\t\t\tartifact: acquired.artifact,\n\t\t\t\t\t...(signal === undefined ? {} : { signal }),\n\t\t\t\t});\n\t\t\t\tif (installed.status !== \"succeeded\")\n\t\t\t\t\tthrow new Error(\n\t\t\t\t\t\tt(\"plugin install failed ({code}) for {pluginId}\", {\n\t\t\t\t\t\t\tcode: installed.error.code,\n\t\t\t\t\t\t\tpluginId: acquired.manifest.id,\n\t\t\t\t\t\t}),\n\t\t\t\t\t);\n\t\t\t\tconst activated = await active.installer.activate({\n\t\t\t\t\tinstallation: installed.installation,\n\t\t\t\t\trecord: verified.record,\n\t\t\t\t\tscope: \"global\",\n\t\t\t\t\tscopeRef: DEFAULT_GLOBAL_PLUGIN_SCOPE_REF_V1,\n\t\t\t\t\t...(signal === undefined ? {} : { signal }),\n\t\t\t\t});\n\t\t\t\tif (activated.status !== \"succeeded\") {\n\t\t\t\t\tawait active.installer\n\t\t\t\t\t\t.remove({\n\t\t\t\t\t\t\tinstallation: installed.installation,\n\t\t\t\t\t\t\tscope: \"global\",\n\t\t\t\t\t\t\tscopeRef: DEFAULT_GLOBAL_PLUGIN_SCOPE_REF_V1,\n\t\t\t\t\t\t})\n\t\t\t\t\t\t.catch(() => undefined);\n\t\t\t\t\tthrow new Error(\n\t\t\t\t\t\tt(\"plugin activation failed ({code}) for {pluginId}\", {\n\t\t\t\t\t\t\tcode: activated.error.code,\n\t\t\t\t\t\t\tpluginId: acquired.manifest.id,\n\t\t\t\t\t\t}),\n\t\t\t\t\t);\n\t\t\t\t}\n\t\t\t\tconst persisted = await active.stateStore.upsert({\n\t\t\t\t\tinstallation: activated.installation,\n\t\t\t\t\tscope: \"global\",\n\t\t\t\t\tenabled: true,\n\t\t\t\t\tsource: acquired.source,\n\t\t\t\t\t...(signal === undefined ? {} : { signal }),\n\t\t\t\t});\n\t\t\t\tif (persisted.status !== \"ok\") {\n\t\t\t\t\tawait active.installer\n\t\t\t\t\t\t.remove({\n\t\t\t\t\t\t\tinstallation: activated.installation,\n\t\t\t\t\t\t\tscope: \"global\",\n\t\t\t\t\t\t\tscopeRef: DEFAULT_GLOBAL_PLUGIN_SCOPE_REF_V1,\n\t\t\t\t\t\t})\n\t\t\t\t\t\t.catch(() => undefined);\n\t\t\t\t\tthrow new Error(\n\t\t\t\t\t\tt(\"plugin state persist failed ({status}) for {pluginId}\", {\n\t\t\t\t\t\t\tstatus: persisted.status,\n\t\t\t\t\t\t\tpluginId: acquired.manifest.id,\n\t\t\t\t\t\t}),\n\t\t\t\t\t);\n\t\t\t\t}\n\t\t\t\treturn { pluginVersion: activated.installation.pluginVersion, source: acquired.source };\n\t\t\t} finally {\n\t\t\t\tawait release();\n\t\t\t}\n\t\t},\n\t\t...(options.signal === undefined ? {} : { signal: options.signal }),\n\t};\n\ttry {\n\t\treturn await runPluginBootstrapV1({\n\t\t\tmanifest: options.manifest ?? BOOTSTRAP_FACTORY_PLUGIN_MANIFEST_V1,\n\t\t\tdeps,\n\t\t\t// First-run progress line (设计 §4.4, 2026-10-03): a fresh install is\n\t\t\t// otherwise silent for the whole network install window.\n\t\t\tonPendingInstalls:\n\t\t\t\toptions.onPendingInstalls ??\n\t\t\t\t((count: number) => {\n\t\t\t\t\tconsole.error(t(\"First run: installing {count} factory plugins…\", { count }));\n\t\t\t\t}),\n\t\t});\n\t} finally {\n\t\tconst active = session;\n\t\tsession = undefined;\n\t\tif (active !== undefined) {\n\t\t\tawait active.installHost.close().catch(() => undefined);\n\t\t\tawait active.acquisition.close().catch(() => undefined);\n\t\t}\n\t}\n}\n"]}

package/dist/plugins/ecosystem/node-plugin-trust-root.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"node-plugin-trust-root.d.ts","sourceRoot":"","sources":["../../../src/plugins/ecosystem/node-plugin-trust-root.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACX,8BAA8B,EAC9B,8CAA8C,EAC9C,yCAAyC,EACzC,MAAM,mBAAmB,CAAC;AAE3B,eAAO,MAAM,iCAAiC,GAAa,CAAC;AAM5D,MAAM,WAAW,wBAAwB;IACxC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,4EAA4E;IAC5E,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,4BAA4B;IAC5C,QAAQ,CAAC,IAAI,EAAE,SAAS,wBAAwB,EAAE,CAAC;IACnD,4EAA4E;IAC5E,QAAQ,CAAC,aAAa,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C,2DAA2D;IAC3D,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CAC5B;AAED,MAAM,MAAM,qBAAqB,GAAG,CACnC,KAAK,EAAE,8CAA8C,KACjD,yCAAyC,CAAC;AAsD/C,wEAAwE;AACxE,wBAAgB,6CAA6C,CAAC,KAAK,EAAE,8BAA8B,GAAG,UAAU,CAE/G;AAmBD;;;;GAIG;AACH,wBAAgB,2BAA2B,CAAC,OAAO,EAAE,4BAA4B,GAAG,qBAAqB,CA4CxG","sourcesContent":["import { createPublicKey, type KeyObject, verify } from \"node:crypto\";\nimport type {\n\tPluginDistributionDescriptorV1,\n\tPluginDistributionSignatureVerificationInputV1,\n\tPluginDistributionSignatureVerificationV1,\n} from \"./distribution.ts\";\n\nexport const NODE_PLUGIN_TRUST_ROOT_VERSION_V1 = 1 as const;\n\nconst MAX_KEY_ID_CHARS_V1 = 128;\nconst MAX_KEYS_V1 = 256;\nconst SIGNATURE_PREFIX_V1 = \"ed25519-v1\";\n\nexport interface NodePluginTrustRootKeyV1 {\n\treadonly keyId: string;\n\t/** Host-owned SPKI PEM. Private keys are never accepted by this adapter. */\n\treadonly publicKeyPem: string;\n\treadonly notBefore?: string;\n\treadonly notAfter?: string;\n}\n\nexport interface NodePluginTrustRootOptionsV1 {\n\treadonly keys: readonly NodePluginTrustRootKeyV1[];\n\t/** Host-owned revocation set; revoked keys never verify new descriptors. */\n\treadonly revokedKeyIds?: readonly string[];\n\t/** Injected clock for deterministic key validity tests. */\n\treadonly now?: () => number;\n}\n\nexport type NodePluginTrustRootV1 = (\n\tinput: PluginDistributionSignatureVerificationInputV1,\n) => PluginDistributionSignatureVerificationV1;\n\ninterface TrustedKeyV1 {\n\treadonly keyId: string;\n\treadonly publicKey: KeyObject;\n\treadonly notBefore?: number;\n\treadonly notAfter?: number;\n}\n\nfunction validKeyId(value: string): boolean {\n\treturn value.length > 0 && value.length <= MAX_KEY_ID_CHARS_V1 && /^[A-Za-z0-9_-]+$/u.test(value);\n}\n\nfunction parseValidity(value: string | undefined, label: string): number | undefined {\n\tif (value === undefined) return undefined;\n\tif (!/^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}(?:\\.\\d{3})?Z$/u.test(value))\n\t\tthrow new Error(`${label} must be an ISO-8601 UTC timestamp`);\n\tconst timestamp = Date.parse(value);\n\tif (!Number.isFinite(timestamp) || new Date(timestamp).toISOString() !== value)\n\t\tthrow new Error(`${label} must be a valid ISO-8601 UTC timestamp`);\n\treturn timestamp;\n}\n\nfunction parsePublicKey(value: string): KeyObject {\n\tif (value.length === 0 || value.length > 16 * 1024 || /\\u0000/u.test(value))\n\t\tthrow new Error(\"publicKeyPem is invalid\");\n\tlet key: KeyObject;\n\ttry {\n\t\tkey = createPublicKey(value);\n\t} catch {\n\t\tthrow new Error(\"publicKeyPem is invalid\");\n\t}\n\tif (key.type !== \"public\" || key.asymmetricKeyType !== \"ed25519\")\n\t\tthrow new Error(\"publicKeyPem must be an Ed25519 public key\");\n\treturn key;\n}\n\nfunction payload(input: PluginDistributionDescriptorV1): Buffer {\n\treturn Buffer.from(\n\t\t`agent-forge-plugin-distribution-v${NODE_PLUGIN_TRUST_ROOT_VERSION_V1}\\n${JSON.stringify([\n\t\t\tinput.version,\n\t\t\tinput.source,\n\t\t\tinput.pluginId,\n\t\t\tinput.pluginVersion,\n\t\t\tinput.manifestDigest,\n\t\t\tinput.artifactDigest,\n\t\t\tinput.expiresAt,\n\t\t\tinput.sizeBytes,\n\t\t\tinput.mediaType,\n\t\t])}`,\n\t\t\"utf8\",\n\t);\n}\n\n/** Return the exact bytes signed by `createNodePluginTrustRootV1()`. */\nexport function buildNodePluginDistributionSignaturePayloadV1(input: PluginDistributionDescriptorV1): Uint8Array {\n\treturn new Uint8Array(payload(input));\n}\n\nfunction parseSignature(value: string): { readonly keyId: string; readonly bytes: Buffer } | undefined {\n\tconst parts = value.split(\".\");\n\tif (parts.length !== 3 || parts[0] !== SIGNATURE_PREFIX_V1 || !validKeyId(parts[1] ?? \"\")) return undefined;\n\tconst encoded = parts[2] ?? \"\";\n\tif (!/^[A-Za-z0-9_-]+$/u.test(encoded)) return undefined;\n\tconst bytes = Buffer.from(encoded, \"base64url\");\n\tif (bytes.byteLength !== 64) return undefined;\n\treturn { keyId: parts[1]!, bytes };\n}\n\nfunction validAt(key: TrustedKeyV1, current: number): boolean {\n\treturn (\n\t\t(key.notBefore === undefined || current >= key.notBefore) &&\n\t\t(key.notAfter === undefined || current < key.notAfter)\n\t);\n}\n\n/**\n * Build an explicit Ed25519 trust-root verifier for distribution descriptors.\n * It is a host policy adapter: no key is loaded implicitly and an unknown key\n * or malformed signature is rejected without leaking cryptographic details.\n */\nexport function createNodePluginTrustRootV1(options: NodePluginTrustRootOptionsV1): NodePluginTrustRootV1 {\n\tif (!Array.isArray(options.keys) || options.keys.length === 0 || options.keys.length > MAX_KEYS_V1)\n\t\tthrow new Error(`keys must contain between 1 and ${MAX_KEYS_V1} entries`);\n\tconst revokedKeyIds = new Set(options.revokedKeyIds ?? []);\n\tif (\n\t\t[...revokedKeyIds].some((keyId) => !validKeyId(keyId)) ||\n\t\t(options.revokedKeyIds !== undefined && revokedKeyIds.size !== options.revokedKeyIds.length)\n\t)\n\t\tthrow new Error(\"revokedKeyIds is invalid or duplicated\");\n\tconst keys = new Map<string, TrustedKeyV1>();\n\tfor (const input of options.keys) {\n\t\tif (!validKeyId(input.keyId) || keys.has(input.keyId)) throw new Error(\"keyId is invalid or duplicated\");\n\t\tconst notBefore = parseValidity(input.notBefore, \"notBefore\");\n\t\tconst notAfter = parseValidity(input.notAfter, \"notAfter\");\n\t\tif (notBefore !== undefined && notAfter !== undefined && notBefore >= notAfter)\n\t\t\tthrow new Error(\"notBefore must be earlier than notAfter\");\n\t\tkeys.set(input.keyId, {\n\t\t\tkeyId: input.keyId,\n\t\t\tpublicKey: parsePublicKey(input.publicKeyPem),\n\t\t\t...(notBefore === undefined ? {} : { notBefore }),\n\t\t\t...(notAfter === undefined ? {} : { notAfter }),\n\t\t});\n\t}\n\tconst now = options.now ?? (() => Date.now());\n\treturn ({ descriptor }): PluginDistributionSignatureVerificationV1 => {\n\t\tconst signature = parseSignature(descriptor.signature);\n\t\tif (signature === undefined) return { status: \"rejected\" };\n\t\tconst key = keys.get(signature.keyId);\n\t\tif (key === undefined || revokedKeyIds.has(signature.keyId)) return { status: \"rejected\" };\n\t\tlet current: number;\n\t\ttry {\n\t\t\tcurrent = now();\n\t\t} catch {\n\t\t\treturn { status: \"rejected\" };\n\t\t}\n\t\tif (!Number.isFinite(current) || !validAt(key, current)) return { status: \"rejected\" };\n\t\ttry {\n\t\t\treturn verify(null, payload(descriptor), key.publicKey, signature.bytes)\n\t\t\t\t? { status: \"accepted\" }\n\t\t\t\t: { status: \"rejected\" };\n\t\t} catch {\n\t\t\treturn { status: \"rejected\" };\n\t\t}\n\t};\n}\n"]}
+{"version":3,"file":"node-plugin-trust-root.d.ts","sourceRoot":"","sources":["../../../src/plugins/ecosystem/node-plugin-trust-root.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EACX,8BAA8B,EAC9B,8CAA8C,EAC9C,yCAAyC,EACzC,MAAM,mBAAmB,CAAC;AAE3B,eAAO,MAAM,iCAAiC,GAAa,CAAC;AAM5D,MAAM,WAAW,wBAAwB;IACxC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,4EAA4E;IAC5E,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,4BAA4B;IAC5C,QAAQ,CAAC,IAAI,EAAE,SAAS,wBAAwB,EAAE,CAAC;IACnD,4EAA4E;IAC5E,QAAQ,CAAC,aAAa,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C,2DAA2D;IAC3D,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CAC5B;AAED,MAAM,MAAM,qBAAqB,GAAG,CACnC,KAAK,EAAE,8CAA8C,KACjD,yCAAyC,CAAC;AAsD/C,wEAAwE;AACxE,wBAAgB,6CAA6C,CAAC,KAAK,EAAE,8BAA8B,GAAG,UAAU,CAE/G;AAmBD;;;;GAIG;AACH,wBAAgB,2BAA2B,CAAC,OAAO,EAAE,4BAA4B,GAAG,qBAAqB,CA4CxG","sourcesContent":["import { createPublicKey, type KeyObject, verify } from \"node:crypto\";\n\nimport { t } from \"../../core/i18n/index.ts\";\nimport type {\n\tPluginDistributionDescriptorV1,\n\tPluginDistributionSignatureVerificationInputV1,\n\tPluginDistributionSignatureVerificationV1,\n} from \"./distribution.ts\";\n\nexport const NODE_PLUGIN_TRUST_ROOT_VERSION_V1 = 1 as const;\n\nconst MAX_KEY_ID_CHARS_V1 = 128;\nconst MAX_KEYS_V1 = 256;\nconst SIGNATURE_PREFIX_V1 = \"ed25519-v1\";\n\nexport interface NodePluginTrustRootKeyV1 {\n\treadonly keyId: string;\n\t/** Host-owned SPKI PEM. Private keys are never accepted by this adapter. */\n\treadonly publicKeyPem: string;\n\treadonly notBefore?: string;\n\treadonly notAfter?: string;\n}\n\nexport interface NodePluginTrustRootOptionsV1 {\n\treadonly keys: readonly NodePluginTrustRootKeyV1[];\n\t/** Host-owned revocation set; revoked keys never verify new descriptors. */\n\treadonly revokedKeyIds?: readonly string[];\n\t/** Injected clock for deterministic key validity tests. */\n\treadonly now?: () => number;\n}\n\nexport type NodePluginTrustRootV1 = (\n\tinput: PluginDistributionSignatureVerificationInputV1,\n) => PluginDistributionSignatureVerificationV1;\n\ninterface TrustedKeyV1 {\n\treadonly keyId: string;\n\treadonly publicKey: KeyObject;\n\treadonly notBefore?: number;\n\treadonly notAfter?: number;\n}\n\nfunction validKeyId(value: string): boolean {\n\treturn value.length > 0 && value.length <= MAX_KEY_ID_CHARS_V1 && /^[A-Za-z0-9_-]+$/u.test(value);\n}\n\nfunction parseValidity(value: string | undefined, label: string): number | undefined {\n\tif (value === undefined) return undefined;\n\tif (!/^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}(?:\\.\\d{3})?Z$/u.test(value))\n\t\tthrow new Error(t(\"{label} must be an ISO-8601 UTC timestamp\", { label }));\n\tconst timestamp = Date.parse(value);\n\tif (!Number.isFinite(timestamp) || new Date(timestamp).toISOString() !== value)\n\t\tthrow new Error(t(\"{label} must be a valid ISO-8601 UTC timestamp\", { label }));\n\treturn timestamp;\n}\n\nfunction parsePublicKey(value: string): KeyObject {\n\tif (value.length === 0 || value.length > 16 * 1024 || /\\u0000/u.test(value))\n\t\tthrow new Error(t(\"publicKeyPem is invalid\"));\n\tlet key: KeyObject;\n\ttry {\n\t\tkey = createPublicKey(value);\n\t} catch {\n\t\tthrow new Error(t(\"publicKeyPem is invalid\"));\n\t}\n\tif (key.type !== \"public\" || key.asymmetricKeyType !== \"ed25519\")\n\t\tthrow new Error(t(\"publicKeyPem must be an Ed25519 public key\"));\n\treturn key;\n}\n\nfunction payload(input: PluginDistributionDescriptorV1): Buffer {\n\treturn Buffer.from(\n\t\t`agent-forge-plugin-distribution-v${NODE_PLUGIN_TRUST_ROOT_VERSION_V1}\\n${JSON.stringify([\n\t\t\tinput.version,\n\t\t\tinput.source,\n\t\t\tinput.pluginId,\n\t\t\tinput.pluginVersion,\n\t\t\tinput.manifestDigest,\n\t\t\tinput.artifactDigest,\n\t\t\tinput.expiresAt,\n\t\t\tinput.sizeBytes,\n\t\t\tinput.mediaType,\n\t\t])}`,\n\t\t\"utf8\",\n\t);\n}\n\n/** Return the exact bytes signed by `createNodePluginTrustRootV1()`. */\nexport function buildNodePluginDistributionSignaturePayloadV1(input: PluginDistributionDescriptorV1): Uint8Array {\n\treturn new Uint8Array(payload(input));\n}\n\nfunction parseSignature(value: string): { readonly keyId: string; readonly bytes: Buffer } | undefined {\n\tconst parts = value.split(\".\");\n\tif (parts.length !== 3 || parts[0] !== SIGNATURE_PREFIX_V1 || !validKeyId(parts[1] ?? \"\")) return undefined;\n\tconst encoded = parts[2] ?? \"\";\n\tif (!/^[A-Za-z0-9_-]+$/u.test(encoded)) return undefined;\n\tconst bytes = Buffer.from(encoded, \"base64url\");\n\tif (bytes.byteLength !== 64) return undefined;\n\treturn { keyId: parts[1]!, bytes };\n}\n\nfunction validAt(key: TrustedKeyV1, current: number): boolean {\n\treturn (\n\t\t(key.notBefore === undefined || current >= key.notBefore) &&\n\t\t(key.notAfter === undefined || current < key.notAfter)\n\t);\n}\n\n/**\n * Build an explicit Ed25519 trust-root verifier for distribution descriptors.\n * It is a host policy adapter: no key is loaded implicitly and an unknown key\n * or malformed signature is rejected without leaking cryptographic details.\n */\nexport function createNodePluginTrustRootV1(options: NodePluginTrustRootOptionsV1): NodePluginTrustRootV1 {\n\tif (!Array.isArray(options.keys) || options.keys.length === 0 || options.keys.length > MAX_KEYS_V1)\n\t\tthrow new Error(t(\"keys must contain between 1 and {max} entries\", { max: MAX_KEYS_V1 }));\n\tconst revokedKeyIds = new Set(options.revokedKeyIds ?? []);\n\tif (\n\t\t[...revokedKeyIds].some((keyId) => !validKeyId(keyId)) ||\n\t\t(options.revokedKeyIds !== undefined && revokedKeyIds.size !== options.revokedKeyIds.length)\n\t)\n\t\tthrow new Error(t(\"revokedKeyIds is invalid or duplicated\"));\n\tconst keys = new Map<string, TrustedKeyV1>();\n\tfor (const input of options.keys) {\n\t\tif (!validKeyId(input.keyId) || keys.has(input.keyId)) throw new Error(t(\"keyId is invalid or duplicated\"));\n\t\tconst notBefore = parseValidity(input.notBefore, \"notBefore\");\n\t\tconst notAfter = parseValidity(input.notAfter, \"notAfter\");\n\t\tif (notBefore !== undefined && notAfter !== undefined && notBefore >= notAfter)\n\t\t\tthrow new Error(t(\"notBefore must be earlier than notAfter\"));\n\t\tkeys.set(input.keyId, {\n\t\t\tkeyId: input.keyId,\n\t\t\tpublicKey: parsePublicKey(input.publicKeyPem),\n\t\t\t...(notBefore === undefined ? {} : { notBefore }),\n\t\t\t...(notAfter === undefined ? {} : { notAfter }),\n\t\t});\n\t}\n\tconst now = options.now ?? (() => Date.now());\n\treturn ({ descriptor }): PluginDistributionSignatureVerificationV1 => {\n\t\tconst signature = parseSignature(descriptor.signature);\n\t\tif (signature === undefined) return { status: \"rejected\" };\n\t\tconst key = keys.get(signature.keyId);\n\t\tif (key === undefined || revokedKeyIds.has(signature.keyId)) return { status: \"rejected\" };\n\t\tlet current: number;\n\t\ttry {\n\t\t\tcurrent = now();\n\t\t} catch {\n\t\t\treturn { status: \"rejected\" };\n\t\t}\n\t\tif (!Number.isFinite(current) || !validAt(key, current)) return { status: \"rejected\" };\n\t\ttry {\n\t\t\treturn verify(null, payload(descriptor), key.publicKey, signature.bytes)\n\t\t\t\t? { status: \"accepted\" }\n\t\t\t\t: { status: \"rejected\" };\n\t\t} catch {\n\t\t\treturn { status: \"rejected\" };\n\t\t}\n\t};\n}\n"]}

package/dist/plugins/ecosystem/node-plugin-trust-root.js

@@ -1,4 +1,5 @@
 import { createPublicKey, verify } from "node:crypto";
+import { t } from "../../core/i18n/index.js";
 export const NODE_PLUGIN_TRUST_ROOT_VERSION_V1 = 1;
 const MAX_KEY_ID_CHARS_V1 = 128;
 const MAX_KEYS_V1 = 256;
@@ -10,24 +11,24 @@ function parseValidity(value, label) {
     if (value === undefined)
         return undefined;
     if (!/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(?:\.\d{3})?Z$/u.test(value))
-        throw new Error(`${label} must be an ISO-8601 UTC timestamp`);
+        throw new Error(t("{label} must be an ISO-8601 UTC timestamp", { label }));
     const timestamp = Date.parse(value);
     if (!Number.isFinite(timestamp) || new Date(timestamp).toISOString() !== value)
-        throw new Error(`${label} must be a valid ISO-8601 UTC timestamp`);
+        throw new Error(t("{label} must be a valid ISO-8601 UTC timestamp", { label }));
     return timestamp;
 }
 function parsePublicKey(value) {
     if (value.length === 0 || value.length > 16 * 1024 || /\u0000/u.test(value))
-        throw new Error("publicKeyPem is invalid");
+        throw new Error(t("publicKeyPem is invalid"));
     let key;
     try {
         key = createPublicKey(value);
     }
     catch {
-        throw new Error("publicKeyPem is invalid");
+        throw new Error(t("publicKeyPem is invalid"));
     }
     if (key.type !== "public" || key.asymmetricKeyType !== "ed25519")
-        throw new Error("publicKeyPem must be an Ed25519 public key");
+        throw new Error(t("publicKeyPem must be an Ed25519 public key"));
     return key;
 }
 function payload(input) {
@@ -70,19 +71,19 @@ function validAt(key, current) {
  */
 export function createNodePluginTrustRootV1(options) {
     if (!Array.isArray(options.keys) || options.keys.length === 0 || options.keys.length > MAX_KEYS_V1)
-        throw new Error(`keys must contain between 1 and ${MAX_KEYS_V1} entries`);
+        throw new Error(t("keys must contain between 1 and {max} entries", { max: MAX_KEYS_V1 }));
     const revokedKeyIds = new Set(options.revokedKeyIds ?? []);
     if ([...revokedKeyIds].some((keyId) => !validKeyId(keyId)) ||
         (options.revokedKeyIds !== undefined && revokedKeyIds.size !== options.revokedKeyIds.length))
-        throw new Error("revokedKeyIds is invalid or duplicated");
+        throw new Error(t("revokedKeyIds is invalid or duplicated"));
     const keys = new Map();
     for (const input of options.keys) {
         if (!validKeyId(input.keyId) || keys.has(input.keyId))
-            throw new Error("keyId is invalid or duplicated");
+            throw new Error(t("keyId is invalid or duplicated"));
         const notBefore = parseValidity(input.notBefore, "notBefore");
         const notAfter = parseValidity(input.notAfter, "notAfter");
         if (notBefore !== undefined && notAfter !== undefined && notBefore >= notAfter)
-            throw new Error("notBefore must be earlier than notAfter");
+            throw new Error(t("notBefore must be earlier than notAfter"));
         keys.set(input.keyId, {
             keyId: input.keyId,
             publicKey: parsePublicKey(input.publicKeyPem),

package/dist/plugins/ecosystem/node-plugin-trust-root.js.map

@@ -1 +1 @@
-{"version":3,"file":"node-plugin-trust-root.js","sourceRoot":"","sources":["../../../src/plugins/ecosystem/node-plugin-trust-root.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAkB,MAAM,EAAE,MAAM,aAAa,CAAC;AAOtE,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAU,CAAC;AAE5D,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAChC,MAAM,WAAW,GAAG,GAAG,CAAC;AACxB,MAAM,mBAAmB,GAAG,YAAY,CAAC;AA6BzC,SAAS,UAAU,CAAC,KAAa,EAAW;IAC3C,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,mBAAmB,IAAI,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAAA,CAClG;AAED,SAAS,aAAa,CAAC,KAAyB,EAAE,KAAa,EAAsB;IACpF,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,CAAC,qDAAqD,CAAC,IAAI,CAAC,KAAK,CAAC;QACrE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,oCAAoC,CAAC,CAAC;IAC/D,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACpC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,KAAK,KAAK;QAC7E,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,yCAAyC,CAAC,CAAC;IACpE,OAAO,SAAS,CAAC;AAAA,CACjB;AAED,SAAS,cAAc,CAAC,KAAa,EAAa;IACjD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE,GAAG,IAAI,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC;QAC1E,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAC5C,IAAI,GAAc,CAAC;IACnB,IAAI,CAAC;QACJ,GAAG,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAC5C,CAAC;IACD,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,GAAG,CAAC,iBAAiB,KAAK,SAAS;QAC/D,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAC/D,OAAO,GAAG,CAAC;AAAA,CACX;AAED,SAAS,OAAO,CAAC,KAAqC,EAAU;IAC/D,OAAO,MAAM,CAAC,IAAI,CACjB,oCAAoC,iCAAiC,KAAK,IAAI,CAAC,SAAS,CAAC;QACxF,KAAK,CAAC,OAAO;QACb,KAAK,CAAC,MAAM;QACZ,KAAK,CAAC,QAAQ;QACd,KAAK,CAAC,aAAa;QACnB,KAAK,CAAC,cAAc;QACpB,KAAK,CAAC,cAAc;QACpB,KAAK,CAAC,SAAS;QACf,KAAK,CAAC,SAAS;QACf,KAAK,CAAC,SAAS;KACf,CAAC,EAAE,EACJ,MAAM,CACN,CAAC;AAAA,CACF;AAED,wEAAwE;AACxE,MAAM,UAAU,6CAA6C,CAAC,KAAqC,EAAc;IAChH,OAAO,IAAI,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;AAAA,CACtC;AAED,SAAS,cAAc,CAAC,KAAa,EAAkE;IACtG,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,mBAAmB,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAAE,OAAO,SAAS,CAAC;IAC5G,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/B,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,SAAS,CAAC;IACzD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAChD,IAAI,KAAK,CAAC,UAAU,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IAC9C,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAE,EAAE,KAAK,EAAE,CAAC;AAAA,CACnC;AAED,SAAS,OAAO,CAAC,GAAiB,EAAE,OAAe,EAAW;IAC7D,OAAO,CACN,CAAC,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,OAAO,IAAI,GAAG,CAAC,SAAS,CAAC;QACzD,CAAC,GAAG,CAAC,QAAQ,KAAK,SAAS,IAAI,OAAO,GAAG,GAAG,CAAC,QAAQ,CAAC,CACtD,CAAC;AAAA,CACF;AAED;;;;GAIG;AACH,MAAM,UAAU,2BAA2B,CAAC,OAAqC,EAAyB;IACzG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,GAAG,WAAW;QACjG,MAAM,IAAI,KAAK,CAAC,mCAAmC,WAAW,UAAU,CAAC,CAAC;IAC3E,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC;IAC3D,IACC,CAAC,GAAG,aAAa,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACtD,CAAC,OAAO,CAAC,aAAa,KAAK,SAAS,IAAI,aAAa,CAAC,IAAI,KAAK,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC;QAE5F,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC3D,MAAM,IAAI,GAAG,IAAI,GAAG,EAAwB,CAAC;IAC7C,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QAClC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QACzG,MAAM,SAAS,GAAG,aAAa,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QAC9D,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAC3D,IAAI,SAAS,KAAK,SAAS,IAAI,QAAQ,KAAK,SAAS,IAAI,SAAS,IAAI,QAAQ;YAC7E,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QAC5D,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE;YACrB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,SAAS,EAAE,cAAc,CAAC,KAAK,CAAC,YAAY,CAAC;YAC7C,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC;YACjD,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC;SAC/C,CAAC,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC9C,OAAO,CAAC,EAAE,UAAU,EAAE,EAA6C,EAAE,CAAC;QACrE,MAAM,SAAS,GAAG,cAAc,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QACvD,IAAI,SAAS,KAAK,SAAS;YAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;QAC3D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACtC,IAAI,GAAG,KAAK,SAAS,IAAI,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC;YAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;QAC3F,IAAI,OAAe,CAAC;QACpB,IAAI,CAAC;YACJ,OAAO,GAAG,GAAG,EAAE,CAAC;QACjB,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;QAC/B,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC;YAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;QACvF,IAAI,CAAC;YACJ,OAAO,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,UAAU,CAAC,EAAE,GAAG,CAAC,SAAS,EAAE,SAAS,CAAC,KAAK,CAAC;gBACvE,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE;gBACxB,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;QAC/B,CAAC;IAAA,CACD,CAAC;AAAA,CACF","sourcesContent":["import { createPublicKey, type KeyObject, verify } from \"node:crypto\";\nimport type {\n\tPluginDistributionDescriptorV1,\n\tPluginDistributionSignatureVerificationInputV1,\n\tPluginDistributionSignatureVerificationV1,\n} from \"./distribution.ts\";\n\nexport const NODE_PLUGIN_TRUST_ROOT_VERSION_V1 = 1 as const;\n\nconst MAX_KEY_ID_CHARS_V1 = 128;\nconst MAX_KEYS_V1 = 256;\nconst SIGNATURE_PREFIX_V1 = \"ed25519-v1\";\n\nexport interface NodePluginTrustRootKeyV1 {\n\treadonly keyId: string;\n\t/** Host-owned SPKI PEM. Private keys are never accepted by this adapter. */\n\treadonly publicKeyPem: string;\n\treadonly notBefore?: string;\n\treadonly notAfter?: string;\n}\n\nexport interface NodePluginTrustRootOptionsV1 {\n\treadonly keys: readonly NodePluginTrustRootKeyV1[];\n\t/** Host-owned revocation set; revoked keys never verify new descriptors. */\n\treadonly revokedKeyIds?: readonly string[];\n\t/** Injected clock for deterministic key validity tests. */\n\treadonly now?: () => number;\n}\n\nexport type NodePluginTrustRootV1 = (\n\tinput: PluginDistributionSignatureVerificationInputV1,\n) => PluginDistributionSignatureVerificationV1;\n\ninterface TrustedKeyV1 {\n\treadonly keyId: string;\n\treadonly publicKey: KeyObject;\n\treadonly notBefore?: number;\n\treadonly notAfter?: number;\n}\n\nfunction validKeyId(value: string): boolean {\n\treturn value.length > 0 && value.length <= MAX_KEY_ID_CHARS_V1 && /^[A-Za-z0-9_-]+$/u.test(value);\n}\n\nfunction parseValidity(value: string | undefined, label: string): number | undefined {\n\tif (value === undefined) return undefined;\n\tif (!/^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}(?:\\.\\d{3})?Z$/u.test(value))\n\t\tthrow new Error(`${label} must be an ISO-8601 UTC timestamp`);\n\tconst timestamp = Date.parse(value);\n\tif (!Number.isFinite(timestamp) || new Date(timestamp).toISOString() !== value)\n\t\tthrow new Error(`${label} must be a valid ISO-8601 UTC timestamp`);\n\treturn timestamp;\n}\n\nfunction parsePublicKey(value: string): KeyObject {\n\tif (value.length === 0 || value.length > 16 * 1024 || /\\u0000/u.test(value))\n\t\tthrow new Error(\"publicKeyPem is invalid\");\n\tlet key: KeyObject;\n\ttry {\n\t\tkey = createPublicKey(value);\n\t} catch {\n\t\tthrow new Error(\"publicKeyPem is invalid\");\n\t}\n\tif (key.type !== \"public\" || key.asymmetricKeyType !== \"ed25519\")\n\t\tthrow new Error(\"publicKeyPem must be an Ed25519 public key\");\n\treturn key;\n}\n\nfunction payload(input: PluginDistributionDescriptorV1): Buffer {\n\treturn Buffer.from(\n\t\t`agent-forge-plugin-distribution-v${NODE_PLUGIN_TRUST_ROOT_VERSION_V1}\\n${JSON.stringify([\n\t\t\tinput.version,\n\t\t\tinput.source,\n\t\t\tinput.pluginId,\n\t\t\tinput.pluginVersion,\n\t\t\tinput.manifestDigest,\n\t\t\tinput.artifactDigest,\n\t\t\tinput.expiresAt,\n\t\t\tinput.sizeBytes,\n\t\t\tinput.mediaType,\n\t\t])}`,\n\t\t\"utf8\",\n\t);\n}\n\n/** Return the exact bytes signed by `createNodePluginTrustRootV1()`. */\nexport function buildNodePluginDistributionSignaturePayloadV1(input: PluginDistributionDescriptorV1): Uint8Array {\n\treturn new Uint8Array(payload(input));\n}\n\nfunction parseSignature(value: string): { readonly keyId: string; readonly bytes: Buffer } | undefined {\n\tconst parts = value.split(\".\");\n\tif (parts.length !== 3 || parts[0] !== SIGNATURE_PREFIX_V1 || !validKeyId(parts[1] ?? \"\")) return undefined;\n\tconst encoded = parts[2] ?? \"\";\n\tif (!/^[A-Za-z0-9_-]+$/u.test(encoded)) return undefined;\n\tconst bytes = Buffer.from(encoded, \"base64url\");\n\tif (bytes.byteLength !== 64) return undefined;\n\treturn { keyId: parts[1]!, bytes };\n}\n\nfunction validAt(key: TrustedKeyV1, current: number): boolean {\n\treturn (\n\t\t(key.notBefore === undefined || current >= key.notBefore) &&\n\t\t(key.notAfter === undefined || current < key.notAfter)\n\t);\n}\n\n/**\n * Build an explicit Ed25519 trust-root verifier for distribution descriptors.\n * It is a host policy adapter: no key is loaded implicitly and an unknown key\n * or malformed signature is rejected without leaking cryptographic details.\n */\nexport function createNodePluginTrustRootV1(options: NodePluginTrustRootOptionsV1): NodePluginTrustRootV1 {\n\tif (!Array.isArray(options.keys) || options.keys.length === 0 || options.keys.length > MAX_KEYS_V1)\n\t\tthrow new Error(`keys must contain between 1 and ${MAX_KEYS_V1} entries`);\n\tconst revokedKeyIds = new Set(options.revokedKeyIds ?? []);\n\tif (\n\t\t[...revokedKeyIds].some((keyId) => !validKeyId(keyId)) ||\n\t\t(options.revokedKeyIds !== undefined && revokedKeyIds.size !== options.revokedKeyIds.length)\n\t)\n\t\tthrow new Error(\"revokedKeyIds is invalid or duplicated\");\n\tconst keys = new Map<string, TrustedKeyV1>();\n\tfor (const input of options.keys) {\n\t\tif (!validKeyId(input.keyId) || keys.has(input.keyId)) throw new Error(\"keyId is invalid or duplicated\");\n\t\tconst notBefore = parseValidity(input.notBefore, \"notBefore\");\n\t\tconst notAfter = parseValidity(input.notAfter, \"notAfter\");\n\t\tif (notBefore !== undefined && notAfter !== undefined && notBefore >= notAfter)\n\t\t\tthrow new Error(\"notBefore must be earlier than notAfter\");\n\t\tkeys.set(input.keyId, {\n\t\t\tkeyId: input.keyId,\n\t\t\tpublicKey: parsePublicKey(input.publicKeyPem),\n\t\t\t...(notBefore === undefined ? {} : { notBefore }),\n\t\t\t...(notAfter === undefined ? {} : { notAfter }),\n\t\t});\n\t}\n\tconst now = options.now ?? (() => Date.now());\n\treturn ({ descriptor }): PluginDistributionSignatureVerificationV1 => {\n\t\tconst signature = parseSignature(descriptor.signature);\n\t\tif (signature === undefined) return { status: \"rejected\" };\n\t\tconst key = keys.get(signature.keyId);\n\t\tif (key === undefined || revokedKeyIds.has(signature.keyId)) return { status: \"rejected\" };\n\t\tlet current: number;\n\t\ttry {\n\t\t\tcurrent = now();\n\t\t} catch {\n\t\t\treturn { status: \"rejected\" };\n\t\t}\n\t\tif (!Number.isFinite(current) || !validAt(key, current)) return { status: \"rejected\" };\n\t\ttry {\n\t\t\treturn verify(null, payload(descriptor), key.publicKey, signature.bytes)\n\t\t\t\t? { status: \"accepted\" }\n\t\t\t\t: { status: \"rejected\" };\n\t\t} catch {\n\t\t\treturn { status: \"rejected\" };\n\t\t}\n\t};\n}\n"]}
+{"version":3,"file":"node-plugin-trust-root.js","sourceRoot":"","sources":["../../../src/plugins/ecosystem/node-plugin-trust-root.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAkB,MAAM,EAAE,MAAM,aAAa,CAAC;AAEtE,OAAO,EAAE,CAAC,EAAE,MAAM,0BAA0B,CAAC;AAO7C,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAU,CAAC;AAE5D,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAChC,MAAM,WAAW,GAAG,GAAG,CAAC;AACxB,MAAM,mBAAmB,GAAG,YAAY,CAAC;AA6BzC,SAAS,UAAU,CAAC,KAAa,EAAW;IAC3C,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,mBAAmB,IAAI,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAAA,CAClG;AAED,SAAS,aAAa,CAAC,KAAyB,EAAE,KAAa,EAAsB;IACpF,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,CAAC,qDAAqD,CAAC,IAAI,CAAC,KAAK,CAAC;QACrE,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,2CAA2C,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IAC5E,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACpC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,KAAK,KAAK;QAC7E,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,gDAAgD,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IACjF,OAAO,SAAS,CAAC;AAAA,CACjB;AAED,SAAS,cAAc,CAAC,KAAa,EAAa;IACjD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE,GAAG,IAAI,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC;QAC1E,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC;IAC/C,IAAI,GAAc,CAAC;IACnB,IAAI,CAAC;QACJ,GAAG,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC;IAC/C,CAAC;IACD,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,GAAG,CAAC,iBAAiB,KAAK,SAAS;QAC/D,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,4CAA4C,CAAC,CAAC,CAAC;IAClE,OAAO,GAAG,CAAC;AAAA,CACX;AAED,SAAS,OAAO,CAAC,KAAqC,EAAU;IAC/D,OAAO,MAAM,CAAC,IAAI,CACjB,oCAAoC,iCAAiC,KAAK,IAAI,CAAC,SAAS,CAAC;QACxF,KAAK,CAAC,OAAO;QACb,KAAK,CAAC,MAAM;QACZ,KAAK,CAAC,QAAQ;QACd,KAAK,CAAC,aAAa;QACnB,KAAK,CAAC,cAAc;QACpB,KAAK,CAAC,cAAc;QACpB,KAAK,CAAC,SAAS;QACf,KAAK,CAAC,SAAS;QACf,KAAK,CAAC,SAAS;KACf,CAAC,EAAE,EACJ,MAAM,CACN,CAAC;AAAA,CACF;AAED,wEAAwE;AACxE,MAAM,UAAU,6CAA6C,CAAC,KAAqC,EAAc;IAChH,OAAO,IAAI,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;AAAA,CACtC;AAED,SAAS,cAAc,CAAC,KAAa,EAAkE;IACtG,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,mBAAmB,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAAE,OAAO,SAAS,CAAC;IAC5G,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/B,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,SAAS,CAAC;IACzD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAChD,IAAI,KAAK,CAAC,UAAU,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IAC9C,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAE,EAAE,KAAK,EAAE,CAAC;AAAA,CACnC;AAED,SAAS,OAAO,CAAC,GAAiB,EAAE,OAAe,EAAW;IAC7D,OAAO,CACN,CAAC,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,OAAO,IAAI,GAAG,CAAC,SAAS,CAAC;QACzD,CAAC,GAAG,CAAC,QAAQ,KAAK,SAAS,IAAI,OAAO,GAAG,GAAG,CAAC,QAAQ,CAAC,CACtD,CAAC;AAAA,CACF;AAED;;;;GAIG;AACH,MAAM,UAAU,2BAA2B,CAAC,OAAqC,EAAyB;IACzG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,GAAG,WAAW;QACjG,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,+CAA+C,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC;IAC3F,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC;IAC3D,IACC,CAAC,GAAG,aAAa,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACtD,CAAC,OAAO,CAAC,aAAa,KAAK,SAAS,IAAI,aAAa,CAAC,IAAI,KAAK,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC;QAE5F,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,wCAAwC,CAAC,CAAC,CAAC;IAC9D,MAAM,IAAI,GAAG,IAAI,GAAG,EAAwB,CAAC;IAC7C,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QAClC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,gCAAgC,CAAC,CAAC,CAAC;QAC5G,MAAM,SAAS,GAAG,aAAa,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QAC9D,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAC3D,IAAI,SAAS,KAAK,SAAS,IAAI,QAAQ,KAAK,SAAS,IAAI,SAAS,IAAI,QAAQ;YAC7E,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,yCAAyC,CAAC,CAAC,CAAC;QAC/D,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE;YACrB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,SAAS,EAAE,cAAc,CAAC,KAAK,CAAC,YAAY,CAAC;YAC7C,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC;YACjD,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC;SAC/C,CAAC,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC9C,OAAO,CAAC,EAAE,UAAU,EAAE,EAA6C,EAAE,CAAC;QACrE,MAAM,SAAS,GAAG,cAAc,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QACvD,IAAI,SAAS,KAAK,SAAS;YAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;QAC3D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACtC,IAAI,GAAG,KAAK,SAAS,IAAI,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC;YAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;QAC3F,IAAI,OAAe,CAAC;QACpB,IAAI,CAAC;YACJ,OAAO,GAAG,GAAG,EAAE,CAAC;QACjB,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;QAC/B,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC;YAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;QACvF,IAAI,CAAC;YACJ,OAAO,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,UAAU,CAAC,EAAE,GAAG,CAAC,SAAS,EAAE,SAAS,CAAC,KAAK,CAAC;gBACvE,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE;gBACxB,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;QAC/B,CAAC;IAAA,CACD,CAAC;AAAA,CACF","sourcesContent":["import { createPublicKey, type KeyObject, verify } from \"node:crypto\";\n\nimport { t } from \"../../core/i18n/index.ts\";\nimport type {\n\tPluginDistributionDescriptorV1,\n\tPluginDistributionSignatureVerificationInputV1,\n\tPluginDistributionSignatureVerificationV1,\n} from \"./distribution.ts\";\n\nexport const NODE_PLUGIN_TRUST_ROOT_VERSION_V1 = 1 as const;\n\nconst MAX_KEY_ID_CHARS_V1 = 128;\nconst MAX_KEYS_V1 = 256;\nconst SIGNATURE_PREFIX_V1 = \"ed25519-v1\";\n\nexport interface NodePluginTrustRootKeyV1 {\n\treadonly keyId: string;\n\t/** Host-owned SPKI PEM. Private keys are never accepted by this adapter. */\n\treadonly publicKeyPem: string;\n\treadonly notBefore?: string;\n\treadonly notAfter?: string;\n}\n\nexport interface NodePluginTrustRootOptionsV1 {\n\treadonly keys: readonly NodePluginTrustRootKeyV1[];\n\t/** Host-owned revocation set; revoked keys never verify new descriptors. */\n\treadonly revokedKeyIds?: readonly string[];\n\t/** Injected clock for deterministic key validity tests. */\n\treadonly now?: () => number;\n}\n\nexport type NodePluginTrustRootV1 = (\n\tinput: PluginDistributionSignatureVerificationInputV1,\n) => PluginDistributionSignatureVerificationV1;\n\ninterface TrustedKeyV1 {\n\treadonly keyId: string;\n\treadonly publicKey: KeyObject;\n\treadonly notBefore?: number;\n\treadonly notAfter?: number;\n}\n\nfunction validKeyId(value: string): boolean {\n\treturn value.length > 0 && value.length <= MAX_KEY_ID_CHARS_V1 && /^[A-Za-z0-9_-]+$/u.test(value);\n}\n\nfunction parseValidity(value: string | undefined, label: string): number | undefined {\n\tif (value === undefined) return undefined;\n\tif (!/^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}(?:\\.\\d{3})?Z$/u.test(value))\n\t\tthrow new Error(t(\"{label} must be an ISO-8601 UTC timestamp\", { label }));\n\tconst timestamp = Date.parse(value);\n\tif (!Number.isFinite(timestamp) || new Date(timestamp).toISOString() !== value)\n\t\tthrow new Error(t(\"{label} must be a valid ISO-8601 UTC timestamp\", { label }));\n\treturn timestamp;\n}\n\nfunction parsePublicKey(value: string): KeyObject {\n\tif (value.length === 0 || value.length > 16 * 1024 || /\\u0000/u.test(value))\n\t\tthrow new Error(t(\"publicKeyPem is invalid\"));\n\tlet key: KeyObject;\n\ttry {\n\t\tkey = createPublicKey(value);\n\t} catch {\n\t\tthrow new Error(t(\"publicKeyPem is invalid\"));\n\t}\n\tif (key.type !== \"public\" || key.asymmetricKeyType !== \"ed25519\")\n\t\tthrow new Error(t(\"publicKeyPem must be an Ed25519 public key\"));\n\treturn key;\n}\n\nfunction payload(input: PluginDistributionDescriptorV1): Buffer {\n\treturn Buffer.from(\n\t\t`agent-forge-plugin-distribution-v${NODE_PLUGIN_TRUST_ROOT_VERSION_V1}\\n${JSON.stringify([\n\t\t\tinput.version,\n\t\t\tinput.source,\n\t\t\tinput.pluginId,\n\t\t\tinput.pluginVersion,\n\t\t\tinput.manifestDigest,\n\t\t\tinput.artifactDigest,\n\t\t\tinput.expiresAt,\n\t\t\tinput.sizeBytes,\n\t\t\tinput.mediaType,\n\t\t])}`,\n\t\t\"utf8\",\n\t);\n}\n\n/** Return the exact bytes signed by `createNodePluginTrustRootV1()`. */\nexport function buildNodePluginDistributionSignaturePayloadV1(input: PluginDistributionDescriptorV1): Uint8Array {\n\treturn new Uint8Array(payload(input));\n}\n\nfunction parseSignature(value: string): { readonly keyId: string; readonly bytes: Buffer } | undefined {\n\tconst parts = value.split(\".\");\n\tif (parts.length !== 3 || parts[0] !== SIGNATURE_PREFIX_V1 || !validKeyId(parts[1] ?? \"\")) return undefined;\n\tconst encoded = parts[2] ?? \"\";\n\tif (!/^[A-Za-z0-9_-]+$/u.test(encoded)) return undefined;\n\tconst bytes = Buffer.from(encoded, \"base64url\");\n\tif (bytes.byteLength !== 64) return undefined;\n\treturn { keyId: parts[1]!, bytes };\n}\n\nfunction validAt(key: TrustedKeyV1, current: number): boolean {\n\treturn (\n\t\t(key.notBefore === undefined || current >= key.notBefore) &&\n\t\t(key.notAfter === undefined || current < key.notAfter)\n\t);\n}\n\n/**\n * Build an explicit Ed25519 trust-root verifier for distribution descriptors.\n * It is a host policy adapter: no key is loaded implicitly and an unknown key\n * or malformed signature is rejected without leaking cryptographic details.\n */\nexport function createNodePluginTrustRootV1(options: NodePluginTrustRootOptionsV1): NodePluginTrustRootV1 {\n\tif (!Array.isArray(options.keys) || options.keys.length === 0 || options.keys.length > MAX_KEYS_V1)\n\t\tthrow new Error(t(\"keys must contain between 1 and {max} entries\", { max: MAX_KEYS_V1 }));\n\tconst revokedKeyIds = new Set(options.revokedKeyIds ?? []);\n\tif (\n\t\t[...revokedKeyIds].some((keyId) => !validKeyId(keyId)) ||\n\t\t(options.revokedKeyIds !== undefined && revokedKeyIds.size !== options.revokedKeyIds.length)\n\t)\n\t\tthrow new Error(t(\"revokedKeyIds is invalid or duplicated\"));\n\tconst keys = new Map<string, TrustedKeyV1>();\n\tfor (const input of options.keys) {\n\t\tif (!validKeyId(input.keyId) || keys.has(input.keyId)) throw new Error(t(\"keyId is invalid or duplicated\"));\n\t\tconst notBefore = parseValidity(input.notBefore, \"notBefore\");\n\t\tconst notAfter = parseValidity(input.notAfter, \"notAfter\");\n\t\tif (notBefore !== undefined && notAfter !== undefined && notBefore >= notAfter)\n\t\t\tthrow new Error(t(\"notBefore must be earlier than notAfter\"));\n\t\tkeys.set(input.keyId, {\n\t\t\tkeyId: input.keyId,\n\t\t\tpublicKey: parsePublicKey(input.publicKeyPem),\n\t\t\t...(notBefore === undefined ? {} : { notBefore }),\n\t\t\t...(notAfter === undefined ? {} : { notAfter }),\n\t\t});\n\t}\n\tconst now = options.now ?? (() => Date.now());\n\treturn ({ descriptor }): PluginDistributionSignatureVerificationV1 => {\n\t\tconst signature = parseSignature(descriptor.signature);\n\t\tif (signature === undefined) return { status: \"rejected\" };\n\t\tconst key = keys.get(signature.keyId);\n\t\tif (key === undefined || revokedKeyIds.has(signature.keyId)) return { status: \"rejected\" };\n\t\tlet current: number;\n\t\ttry {\n\t\t\tcurrent = now();\n\t\t} catch {\n\t\t\treturn { status: \"rejected\" };\n\t\t}\n\t\tif (!Number.isFinite(current) || !validAt(key, current)) return { status: \"rejected\" };\n\t\ttry {\n\t\t\treturn verify(null, payload(descriptor), key.publicKey, signature.bytes)\n\t\t\t\t? { status: \"accepted\" }\n\t\t\t\t: { status: \"rejected\" };\n\t\t} catch {\n\t\t\treturn { status: \"rejected\" };\n\t\t}\n\t};\n}\n"]}

package/dist/plugins/ecosystem/node-registry-source.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"node-registry-source.d.ts","sourceRoot":"","sources":["../../../src/plugins/ecosystem/node-registry-source.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAoC,sBAAsB,EAAE,MAAM,eAAe,CAAC;AAE9F,QAAA,MAAM,2CAA2C,GAAa,CAAC;AAM/D,MAAM,MAAM,uCAAuC,GAChD,WAAW,GACX,uBAAuB,GACvB,gBAAgB,GAChB,mBAAmB,GACnB,kBAAkB,GAClB,oBAAoB,CAAC;AAExB;;;GAGG;AACH,qBAAa,mCAAoC,SAAQ,KAAK;IAC7D,QAAQ,CAAC,IAAI,EAAE,uCAAuC,CAAC;IAEvD,YAAY,IAAI,EAAE,uCAAuC,EAAE,OAAO,EAAE,MAAM,EAIzE;CACD;AAED,MAAM,WAAW,qCAAqC;IACrD,wEAAwE;IACxE,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;IAC3B,gEAAgE;IAChE,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C,oDAAoD;IACpD,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,CAAC;IACzC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,8BAA+B,SAAQ,sBAAsB;IAC7E,QAAQ,CAAC,OAAO,EAAE,OAAO,2CAA2C,CAAC;IACrE,mFAAmF;IACnF,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACxB;AA4ND;;;;GAIG;AACH,wBAAgB,oCAAoC,CACnD,OAAO,EAAE,qCAAqC,GAC5C,8BAA8B,CAmGhC","sourcesContent":["import type { PluginRegistryManifestEnvelopeV1, PluginRegistrySourceV1 } from \"./registry.ts\";\n\nconst NODE_HTTP_PLUGIN_REGISTRY_SOURCE_VERSION_V1 = 1 as const;\nconst DEFAULT_TIMEOUT_MS_V1 = 15_000;\nconst MAX_TIMEOUT_MS_V1 = 120_000;\nconst DEFAULT_MAX_RESPONSE_BYTES_V1 = 4 * 1024 * 1024;\nconst MAX_RESPONSE_BYTES_V1 = 8 * 1024 * 1024;\n\nexport type NodeHttpPluginRegistrySourceErrorCodeV1 =\n\t| \"cancelled\"\n\t| \"invalid_configuration\"\n\t| \"request_failed\"\n\t| \"request_timed_out\"\n\t| \"invalid_response\"\n\t| \"response_too_large\";\n\n/**\n * Deliberately does not retain transport exceptions or response bodies: callers\n * must not turn registry diagnostics into a credential or path disclosure.\n */\nexport class NodeHttpPluginRegistrySourceErrorV1 extends Error {\n\treadonly code: NodeHttpPluginRegistrySourceErrorCodeV1;\n\n\tconstructor(code: NodeHttpPluginRegistrySourceErrorCodeV1, message: string) {\n\t\tsuper(message);\n\t\tthis.name = \"NodeHttpPluginRegistrySourceErrorV1\";\n\t\tthis.code = code;\n\t}\n}\n\nexport interface NodeHttpPluginRegistrySourceOptionsV1 {\n\t/** Absolute endpoint returning the versioned JSON registry document. */\n\treadonly url: string | URL;\n\t/** Exact http(s) origins the host has intentionally allowed. */\n\treadonly allowedOrigins: readonly string[];\n\t/** Real fetch or deterministic test replacement. */\n\treadonly fetch?: typeof globalThis.fetch;\n\treadonly requestTimeoutMs?: number;\n\treadonly maxResponseBytes?: number;\n\treadonly userAgent?: string;\n}\n\nexport interface NodeHttpPluginRegistrySourceV1 extends PluginRegistrySourceV1 {\n\treadonly version: typeof NODE_HTTP_PLUGIN_REGISTRY_SOURCE_VERSION_V1;\n\t/** Sanitized endpoint identity: never contains credentials, query, or fragment. */\n\treadonly source: string;\n}\n\ninterface RegistryDocumentV1 {\n\treadonly version: 1;\n\treadonly entries: readonly PluginRegistryManifestEnvelopeV1[];\n}\n\nfunction boundedPositive(value: number | undefined, fallback: number, maximum: number, label: string): number {\n\tconst result = value ?? fallback;\n\tif (!Number.isSafeInteger(result) || result <= 0 || result > maximum) {\n\t\tthrow new NodeHttpPluginRegistrySourceErrorV1(\n\t\t\t\"invalid_configuration\",\n\t\t\t`${label} must be a positive integer at most ${maximum}`,\n\t\t);\n\t}\n\treturn result;\n}\n\nfunction allowedOrigin(value: string): string {\n\tlet parsed: URL;\n\ttry {\n\t\tparsed = new URL(value);\n\t} catch {\n\t\tthrow new NodeHttpPluginRegistrySourceErrorV1(\"invalid_configuration\", \"Allowed registry origin is invalid\");\n\t}\n\tif ((parsed.protocol !== \"http:\" && parsed.protocol !== \"https:\") || parsed.username || parsed.password) {\n\t\tthrow new NodeHttpPluginRegistrySourceErrorV1(\n\t\t\t\"invalid_configuration\",\n\t\t\t\"Allowed registry origin must be an http(s) origin without credentials\",\n\t\t);\n\t}\n\tif (parsed.pathname !== \"/\" || parsed.search !== \"\" || parsed.hash !== \"\") {\n\t\tthrow new NodeHttpPluginRegistrySourceErrorV1(\n\t\t\t\"invalid_configuration\",\n\t\t\t\"Allowed registry origin must not include a path, query, or fragment\",\n\t\t);\n\t}\n\treturn parsed.origin;\n}\n\nfunction endpointUrl(value: string | URL, origins: ReadonlySet<string>): URL {\n\tlet parsed: URL;\n\ttry {\n\t\tparsed = new URL(value);\n\t} catch {\n\t\tthrow new NodeHttpPluginRegistrySourceErrorV1(\"invalid_configuration\", \"Plugin registry URL is invalid\");\n\t}\n\tif ((parsed.protocol !== \"http:\" && parsed.protocol !== \"https:\") || parsed.username || parsed.password) {\n\t\tthrow new NodeHttpPluginRegistrySourceErrorV1(\n\t\t\t\"invalid_configuration\",\n\t\t\t\"Plugin registry URL must use http(s) without credentials\",\n\t\t);\n\t}\n\tif (parsed.search !== \"\" || parsed.hash !== \"\") {\n\t\tthrow new NodeHttpPluginRegistrySourceErrorV1(\n\t\t\t\"invalid_configuration\",\n\t\t\t\"Plugin registry URL must not include a query or fragment\",\n\t\t);\n\t}\n\tif (!origins.has(parsed.origin)) {\n\t\tthrow new NodeHttpPluginRegistrySourceErrorV1(\"invalid_configuration\", \"Plugin registry origin is not allowed\");\n\t}\n\treturn parsed;\n}\n\nfunction responseLength(response: Response): number | undefined {\n\tconst raw = response.headers.get(\"content-length\");\n\tif (raw === null) return undefined;\n\tif (!/^\\d+$/u.test(raw)) {\n\t\tthrow new NodeHttpPluginRegistrySourceErrorV1(\"invalid_response\", \"Plugin registry response length is invalid\");\n\t}\n\tconst value = Number(raw);\n\tif (!Number.isSafeInteger(value)) {\n\t\tthrow new NodeHttpPluginRegistrySourceErrorV1(\"invalid_response\", \"Plugin registry response length is invalid\");\n\t}\n\treturn value;\n}\n\nfunction isJsonResponse(response: Response): boolean {\n\tconst contentType = response.headers.get(\"content-type\");\n\tif (contentType === null) return false;\n\tconst mediaType = contentType.split(\";\", 1)[0]?.trim().toLowerCase();\n\treturn mediaType === \"application/json\" || mediaType === \"application/vnd.agent-forge.plugin-registry+json\";\n}\n\nfunction requestController(\n\tparent: AbortSignal | undefined,\n\ttimeoutMs: number,\n): {\n\treadonly signal: AbortSignal;\n\treadonly timedOut: () => boolean;\n\treadonly cleanup: () => void;\n} {\n\tconst controller = new AbortController();\n\tlet timedOut = false;\n\tconst abort = () => controller.abort(parent?.reason);\n\tif (parent?.aborted === true) abort();\n\telse parent?.addEventListener(\"abort\", abort, { once: true });\n\tconst timeout = setTimeout(() => {\n\t\ttimedOut = true;\n\t\tcontroller.abort();\n\t}, timeoutMs);\n\treturn {\n\t\tsignal: controller.signal,\n\t\ttimedOut: () => timedOut,\n\t\tcleanup: () => {\n\t\t\tclearTimeout(timeout);\n\t\t\tparent?.removeEventListener(\"abort\", abort);\n\t\t},\n\t};\n}\n\nfunction abortPromise(signal: AbortSignal): { readonly promise: Promise<never>; readonly cleanup: () => void } {\n\tlet rejectAbort: (() => void) | undefined;\n\tconst promise = new Promise<never>((_resolve, reject) => {\n\t\trejectAbort = () => reject(new DOMException(\"aborted\", \"AbortError\"));\n\t\tif (signal.aborted) rejectAbort();\n\t\telse signal.addEventListener(\"abort\", rejectAbort, { once: true });\n\t});\n\treturn {\n\t\tpromise,\n\t\tcleanup: () => {\n\t\t\tif (rejectAbort !== undefined) signal.removeEventListener(\"abort\", rejectAbort);\n\t\t},\n\t};\n}\n\nasync function awaitBeforeAbort<T>(operation: Promise<T>, signal: AbortSignal): Promise<T> {\n\tconst abort = abortPromise(signal);\n\ttry {\n\t\treturn await Promise.race([operation, abort.promise]);\n\t} finally {\n\t\tabort.cleanup();\n\t}\n}\n\nfunction discardResponseBody(response: Response | undefined): void {\n\tconst responseBody = response?.body;\n\tif (responseBody !== undefined && responseBody !== null) {\n\t\tvoid responseBody.cancel().catch(() => undefined);\n\t}\n}\n\nasync function readBody(response: Response, maxBytes: number, signal: AbortSignal): Promise<Uint8Array> {\n\tif (response.body === null) {\n\t\tthrow new NodeHttpPluginRegistrySourceErrorV1(\"invalid_response\", \"Plugin registry response has no body\");\n\t}\n\tconst reader = response.body.getReader();\n\tconst chunks: Uint8Array[] = [];\n\tlet total = 0;\n\ttry {\n\t\tfor (;;) {\n\t\t\tif (signal.aborted) throw new DOMException(\"aborted\", \"AbortError\");\n\t\t\tconst item = await awaitBeforeAbort(reader.read(), signal);\n\t\t\tif (item.done) break;\n\t\t\ttotal += item.value.byteLength;\n\t\t\tif (total > maxBytes) {\n\t\t\t\tthrow new NodeHttpPluginRegistrySourceErrorV1(\n\t\t\t\t\t\"response_too_large\",\n\t\t\t\t\t\"Plugin registry response exceeds the configured size limit\",\n\t\t\t\t);\n\t\t\t}\n\t\t\tchunks.push(item.value);\n\t\t}\n\t} finally {\n\t\treader.releaseLock();\n\t}\n\tconst bytes = new Uint8Array(total);\n\tlet offset = 0;\n\tfor (const chunk of chunks) {\n\t\tbytes.set(chunk, offset);\n\t\toffset += chunk.byteLength;\n\t}\n\treturn bytes;\n}\n\nfunction parseDocument(bytes: Uint8Array): readonly PluginRegistryManifestEnvelopeV1[] {\n\tlet value: unknown;\n\ttry {\n\t\tvalue = JSON.parse(new TextDecoder(\"utf-8\", { fatal: true }).decode(bytes));\n\t} catch {\n\t\tthrow new NodeHttpPluginRegistrySourceErrorV1(\"invalid_response\", \"Plugin registry response is not valid JSON\");\n\t}\n\tif (typeof value !== \"object\" || value === null || Array.isArray(value)) {\n\t\tthrow new NodeHttpPluginRegistrySourceErrorV1(\"invalid_response\", \"Plugin registry document is invalid\");\n\t}\n\tconst document = value as Record<string, unknown>;\n\tif (\n\t\tObject.keys(document).some((key) => key !== \"version\" && key !== \"entries\") ||\n\t\tdocument.version !== 1 ||\n\t\t!Array.isArray(document.entries)\n\t) {\n\t\tthrow new NodeHttpPluginRegistrySourceErrorV1(\"invalid_response\", \"Plugin registry document is invalid\");\n\t}\n\treturn document.entries as unknown as RegistryDocumentV1[\"entries\"];\n}\n\nfunction isAbortLike(error: unknown): boolean {\n\treturn error instanceof DOMException && error.name === \"AbortError\";\n}\n\nfunction isCallerCancelled(signal: AbortSignal | undefined): boolean {\n\treturn signal?.aborted === true;\n}\n\nfunction sanitizedSourceError(error: NodeHttpPluginRegistrySourceErrorV1): NodeHttpPluginRegistrySourceErrorV1 {\n\tconst code: unknown = error.code;\n\tif (\n\t\tcode !== \"cancelled\" &&\n\t\tcode !== \"invalid_configuration\" &&\n\t\tcode !== \"request_failed\" &&\n\t\tcode !== \"request_timed_out\" &&\n\t\tcode !== \"invalid_response\" &&\n\t\tcode !== \"response_too_large\"\n\t) {\n\t\treturn new NodeHttpPluginRegistrySourceErrorV1(\"request_failed\", \"Plugin registry request failed\");\n\t}\n\treturn new NodeHttpPluginRegistrySourceErrorV1(code, \"Plugin registry request failed\");\n}\n\n/**\n * Creates a bounded, allowlisted HTTP registry reader. It only transports\n * metadata to the existing registry verifier; package bytes, trust decisions,\n * and installation remain separate host-owned capabilities.\n */\nexport function createNodeHttpPluginRegistrySourceV1(\n\toptions: NodeHttpPluginRegistrySourceOptionsV1,\n): NodeHttpPluginRegistrySourceV1 {\n\tconst transport = options.fetch ?? globalThis.fetch;\n\tif (typeof transport !== \"function\") {\n\t\tthrow new NodeHttpPluginRegistrySourceErrorV1(\"invalid_configuration\", \"Node fetch is unavailable\");\n\t}\n\tif (!Array.isArray(options.allowedOrigins) || options.allowedOrigins.length === 0) {\n\t\tthrow new NodeHttpPluginRegistrySourceErrorV1(\n\t\t\t\"invalid_configuration\",\n\t\t\t\"At least one allowed registry origin is required\",\n\t\t);\n\t}\n\tconst origins = new Set(options.allowedOrigins.map(allowedOrigin));\n\tconst endpoint = endpointUrl(options.url, origins);\n\tconst timeoutMs = boundedPositive(\n\t\toptions.requestTimeoutMs,\n\t\tDEFAULT_TIMEOUT_MS_V1,\n\t\tMAX_TIMEOUT_MS_V1,\n\t\t\"requestTimeoutMs\",\n\t);\n\tconst maxResponseBytes = boundedPositive(\n\t\toptions.maxResponseBytes,\n\t\tDEFAULT_MAX_RESPONSE_BYTES_V1,\n\t\tMAX_RESPONSE_BYTES_V1,\n\t\t\"maxResponseBytes\",\n\t);\n\tconst userAgent = options.userAgent ?? \"agent-forge-plugin-registry/1\";\n\tif (userAgent.length === 0 || userAgent.length > 256 || /[\\r\\n]/u.test(userAgent)) {\n\t\tthrow new NodeHttpPluginRegistrySourceErrorV1(\"invalid_configuration\", \"userAgent is invalid\");\n\t}\n\tconst source = endpoint.origin + endpoint.pathname;\n\n\treturn {\n\t\tversion: NODE_HTTP_PLUGIN_REGISTRY_SOURCE_VERSION_V1,\n\t\tsource,\n\t\tlist: async ({ signal } = {}) => {\n\t\t\tif (isCallerCancelled(signal)) {\n\t\t\t\tthrow new NodeHttpPluginRegistrySourceErrorV1(\"cancelled\", \"Plugin registry request was cancelled\");\n\t\t\t}\n\t\t\tconst request = requestController(signal, timeoutMs);\n\t\t\tlet response: Response | undefined;\n\t\t\ttry {\n\t\t\t\tconst transportResponse = Promise.resolve().then(() => {\n\t\t\t\t\tif (request.signal.aborted) throw new DOMException(\"aborted\", \"AbortError\");\n\t\t\t\t\treturn transport(endpoint.toString(), {\n\t\t\t\t\t\tmethod: \"GET\",\n\t\t\t\t\t\theaders: {\n\t\t\t\t\t\t\taccept: \"application/vnd.agent-forge.plugin-registry+json, application/json\",\n\t\t\t\t\t\t\t\"user-agent\": userAgent,\n\t\t\t\t\t\t},\n\t\t\t\t\t\tredirect: \"error\",\n\t\t\t\t\t\tsignal: request.signal,\n\t\t\t\t\t});\n\t\t\t\t});\n\t\t\t\tvoid transportResponse.then(\n\t\t\t\t\t(lateResponse) => {\n\t\t\t\t\t\tif (request.signal.aborted) discardResponseBody(lateResponse);\n\t\t\t\t\t},\n\t\t\t\t\t() => undefined,\n\t\t\t\t);\n\t\t\t\tconst receivedResponse = await awaitBeforeAbort(transportResponse, request.signal);\n\t\t\t\tresponse = receivedResponse;\n\t\t\t\tif (receivedResponse.status < 200 || receivedResponse.status >= 300) {\n\t\t\t\t\tthrow new NodeHttpPluginRegistrySourceErrorV1(\n\t\t\t\t\t\t\"request_failed\",\n\t\t\t\t\t\t\"Plugin registry request did not succeed\",\n\t\t\t\t\t);\n\t\t\t\t}\n\t\t\t\tif (!isJsonResponse(receivedResponse)) {\n\t\t\t\t\tthrow new NodeHttpPluginRegistrySourceErrorV1(\n\t\t\t\t\t\t\"invalid_response\",\n\t\t\t\t\t\t\"Plugin registry response must be JSON\",\n\t\t\t\t\t);\n\t\t\t\t}\n\t\t\t\tconst length = responseLength(receivedResponse);\n\t\t\t\tif (length !== undefined && length > maxResponseBytes) {\n\t\t\t\t\tthrow new NodeHttpPluginRegistrySourceErrorV1(\n\t\t\t\t\t\t\"response_too_large\",\n\t\t\t\t\t\t\"Plugin registry response exceeds the configured size limit\",\n\t\t\t\t\t);\n\t\t\t\t}\n\t\t\t\treturn parseDocument(await readBody(receivedResponse, maxResponseBytes, request.signal));\n\t\t\t} catch (error) {\n\t\t\t\tif (isCallerCancelled(signal)) {\n\t\t\t\t\tthrow new NodeHttpPluginRegistrySourceErrorV1(\"cancelled\", \"Plugin registry request was cancelled\");\n\t\t\t\t}\n\t\t\t\tif (request.timedOut()) {\n\t\t\t\t\tthrow new NodeHttpPluginRegistrySourceErrorV1(\"request_timed_out\", \"Plugin registry request timed out\");\n\t\t\t\t}\n\t\t\t\tif (error instanceof NodeHttpPluginRegistrySourceErrorV1) throw sanitizedSourceError(error);\n\t\t\t\tif (isAbortLike(error)) {\n\t\t\t\t\tthrow new NodeHttpPluginRegistrySourceErrorV1(\"cancelled\", \"Plugin registry request was cancelled\");\n\t\t\t\t}\n\t\t\t\tthrow new NodeHttpPluginRegistrySourceErrorV1(\"request_failed\", \"Plugin registry request failed\");\n\t\t\t} finally {\n\t\t\t\trequest.cleanup();\n\t\t\t\tdiscardResponseBody(response);\n\t\t\t}\n\t\t},\n\t};\n}\n"]}
+{"version":3,"file":"node-registry-source.d.ts","sourceRoot":"","sources":["../../../src/plugins/ecosystem/node-registry-source.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAoC,sBAAsB,EAAE,MAAM,eAAe,CAAC;AAE9F,QAAA,MAAM,2CAA2C,GAAa,CAAC;AAM/D,MAAM,MAAM,uCAAuC,GAChD,WAAW,GACX,uBAAuB,GACvB,gBAAgB,GAChB,mBAAmB,GACnB,kBAAkB,GAClB,oBAAoB,CAAC;AAExB;;;GAGG;AACH,qBAAa,mCAAoC,SAAQ,KAAK;IAC7D,QAAQ,CAAC,IAAI,EAAE,uCAAuC,CAAC;IAEvD,YAAY,IAAI,EAAE,uCAAuC,EAAE,OAAO,EAAE,MAAM,EAIzE;CACD;AAED,MAAM,WAAW,qCAAqC;IACrD,wEAAwE;IACxE,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;IAC3B,gEAAgE;IAChE,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C,oDAAoD;IACpD,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,CAAC;IACzC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,8BAA+B,SAAQ,sBAAsB;IAC7E,QAAQ,CAAC,OAAO,EAAE,OAAO,2CAA2C,CAAC;IACrE,mFAAmF;IACnF,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACxB;AAwOD;;;;GAIG;AACH,wBAAgB,oCAAoC,CACnD,OAAO,EAAE,qCAAqC,GAC5C,8BAA8B,CAsGhC","sourcesContent":["import { t } from \"../../core/i18n/index.ts\";\nimport type { PluginRegistryManifestEnvelopeV1, PluginRegistrySourceV1 } from \"./registry.ts\";\n\nconst NODE_HTTP_PLUGIN_REGISTRY_SOURCE_VERSION_V1 = 1 as const;\nconst DEFAULT_TIMEOUT_MS_V1 = 15_000;\nconst MAX_TIMEOUT_MS_V1 = 120_000;\nconst DEFAULT_MAX_RESPONSE_BYTES_V1 = 4 * 1024 * 1024;\nconst MAX_RESPONSE_BYTES_V1 = 8 * 1024 * 1024;\n\nexport type NodeHttpPluginRegistrySourceErrorCodeV1 =\n\t| \"cancelled\"\n\t| \"invalid_configuration\"\n\t| \"request_failed\"\n\t| \"request_timed_out\"\n\t| \"invalid_response\"\n\t| \"response_too_large\";\n\n/**\n * Deliberately does not retain transport exceptions or response bodies: callers\n * must not turn registry diagnostics into a credential or path disclosure.\n */\nexport class NodeHttpPluginRegistrySourceErrorV1 extends Error {\n\treadonly code: NodeHttpPluginRegistrySourceErrorCodeV1;\n\n\tconstructor(code: NodeHttpPluginRegistrySourceErrorCodeV1, message: string) {\n\t\tsuper(message);\n\t\tthis.name = \"NodeHttpPluginRegistrySourceErrorV1\";\n\t\tthis.code = code;\n\t}\n}\n\nexport interface NodeHttpPluginRegistrySourceOptionsV1 {\n\t/** Absolute endpoint returning the versioned JSON registry document. */\n\treadonly url: string | URL;\n\t/** Exact http(s) origins the host has intentionally allowed. */\n\treadonly allowedOrigins: readonly string[];\n\t/** Real fetch or deterministic test replacement. */\n\treadonly fetch?: typeof globalThis.fetch;\n\treadonly requestTimeoutMs?: number;\n\treadonly maxResponseBytes?: number;\n\treadonly userAgent?: string;\n}\n\nexport interface NodeHttpPluginRegistrySourceV1 extends PluginRegistrySourceV1 {\n\treadonly version: typeof NODE_HTTP_PLUGIN_REGISTRY_SOURCE_VERSION_V1;\n\t/** Sanitized endpoint identity: never contains credentials, query, or fragment. */\n\treadonly source: string;\n}\n\ninterface RegistryDocumentV1 {\n\treadonly version: 1;\n\treadonly entries: readonly PluginRegistryManifestEnvelopeV1[];\n}\n\nfunction boundedPositive(value: number | undefined, fallback: number, maximum: number, label: string): number {\n\tconst result = value ?? fallback;\n\tif (!Number.isSafeInteger(result) || result <= 0 || result > maximum) {\n\t\tthrow new NodeHttpPluginRegistrySourceErrorV1(\n\t\t\t\"invalid_configuration\",\n\t\t\tt(\"{label} must be a positive integer at most {maximum}\", { label, maximum }),\n\t\t);\n\t}\n\treturn result;\n}\n\nfunction allowedOrigin(value: string): string {\n\tlet parsed: URL;\n\ttry {\n\t\tparsed = new URL(value);\n\t} catch {\n\t\tthrow new NodeHttpPluginRegistrySourceErrorV1(\"invalid_configuration\", t(\"Allowed registry origin is invalid\"));\n\t}\n\tif ((parsed.protocol !== \"http:\" && parsed.protocol !== \"https:\") || parsed.username || parsed.password) {\n\t\tthrow new NodeHttpPluginRegistrySourceErrorV1(\n\t\t\t\"invalid_configuration\",\n\t\t\tt(\"Allowed registry origin must be an http(s) origin without credentials\"),\n\t\t);\n\t}\n\tif (parsed.pathname !== \"/\" || parsed.search !== \"\" || parsed.hash !== \"\") {\n\t\tthrow new NodeHttpPluginRegistrySourceErrorV1(\n\t\t\t\"invalid_configuration\",\n\t\t\tt(\"Allowed registry origin must not include a path, query, or fragment\"),\n\t\t);\n\t}\n\treturn parsed.origin;\n}\n\nfunction endpointUrl(value: string | URL, origins: ReadonlySet<string>): URL {\n\tlet parsed: URL;\n\ttry {\n\t\tparsed = new URL(value);\n\t} catch {\n\t\tthrow new NodeHttpPluginRegistrySourceErrorV1(\"invalid_configuration\", t(\"Plugin registry URL is invalid\"));\n\t}\n\tif ((parsed.protocol !== \"http:\" && parsed.protocol !== \"https:\") || parsed.username || parsed.password) {\n\t\tthrow new NodeHttpPluginRegistrySourceErrorV1(\n\t\t\t\"invalid_configuration\",\n\t\t\tt(\"Plugin registry URL must use http(s) without credentials\"),\n\t\t);\n\t}\n\tif (parsed.search !== \"\" || parsed.hash !== \"\") {\n\t\tthrow new NodeHttpPluginRegistrySourceErrorV1(\n\t\t\t\"invalid_configuration\",\n\t\t\tt(\"Plugin registry URL must not include a query or fragment\"),\n\t\t);\n\t}\n\tif (!origins.has(parsed.origin)) {\n\t\tthrow new NodeHttpPluginRegistrySourceErrorV1(\n\t\t\t\"invalid_configuration\",\n\t\t\tt(\"Plugin registry origin is not allowed\"),\n\t\t);\n\t}\n\treturn parsed;\n}\n\nfunction responseLength(response: Response): number | undefined {\n\tconst raw = response.headers.get(\"content-length\");\n\tif (raw === null) return undefined;\n\tif (!/^\\d+$/u.test(raw)) {\n\t\tthrow new NodeHttpPluginRegistrySourceErrorV1(\n\t\t\t\"invalid_response\",\n\t\t\tt(\"Plugin registry response length is invalid\"),\n\t\t);\n\t}\n\tconst value = Number(raw);\n\tif (!Number.isSafeInteger(value)) {\n\t\tthrow new NodeHttpPluginRegistrySourceErrorV1(\n\t\t\t\"invalid_response\",\n\t\t\tt(\"Plugin registry response length is invalid\"),\n\t\t);\n\t}\n\treturn value;\n}\n\nfunction isJsonResponse(response: Response): boolean {\n\tconst contentType = response.headers.get(\"content-type\");\n\tif (contentType === null) return false;\n\tconst mediaType = contentType.split(\";\", 1)[0]?.trim().toLowerCase();\n\treturn mediaType === \"application/json\" || mediaType === \"application/vnd.agent-forge.plugin-registry+json\";\n}\n\nfunction requestController(\n\tparent: AbortSignal | undefined,\n\ttimeoutMs: number,\n): {\n\treadonly signal: AbortSignal;\n\treadonly timedOut: () => boolean;\n\treadonly cleanup: () => void;\n} {\n\tconst controller = new AbortController();\n\tlet timedOut = false;\n\tconst abort = () => controller.abort(parent?.reason);\n\tif (parent?.aborted === true) abort();\n\telse parent?.addEventListener(\"abort\", abort, { once: true });\n\tconst timeout = setTimeout(() => {\n\t\ttimedOut = true;\n\t\tcontroller.abort();\n\t}, timeoutMs);\n\treturn {\n\t\tsignal: controller.signal,\n\t\ttimedOut: () => timedOut,\n\t\tcleanup: () => {\n\t\t\tclearTimeout(timeout);\n\t\t\tparent?.removeEventListener(\"abort\", abort);\n\t\t},\n\t};\n}\n\nfunction abortPromise(signal: AbortSignal): { readonly promise: Promise<never>; readonly cleanup: () => void } {\n\tlet rejectAbort: (() => void) | undefined;\n\tconst promise = new Promise<never>((_resolve, reject) => {\n\t\trejectAbort = () => reject(new DOMException(\"aborted\", \"AbortError\"));\n\t\tif (signal.aborted) rejectAbort();\n\t\telse signal.addEventListener(\"abort\", rejectAbort, { once: true });\n\t});\n\treturn {\n\t\tpromise,\n\t\tcleanup: () => {\n\t\t\tif (rejectAbort !== undefined) signal.removeEventListener(\"abort\", rejectAbort);\n\t\t},\n\t};\n}\n\nasync function awaitBeforeAbort<T>(operation: Promise<T>, signal: AbortSignal): Promise<T> {\n\tconst abort = abortPromise(signal);\n\ttry {\n\t\treturn await Promise.race([operation, abort.promise]);\n\t} finally {\n\t\tabort.cleanup();\n\t}\n}\n\nfunction discardResponseBody(response: Response | undefined): void {\n\tconst responseBody = response?.body;\n\tif (responseBody !== undefined && responseBody !== null) {\n\t\tvoid responseBody.cancel().catch(() => undefined);\n\t}\n}\n\nasync function readBody(response: Response, maxBytes: number, signal: AbortSignal): Promise<Uint8Array> {\n\tif (response.body === null) {\n\t\tthrow new NodeHttpPluginRegistrySourceErrorV1(\"invalid_response\", t(\"Plugin registry response has no body\"));\n\t}\n\tconst reader = response.body.getReader();\n\tconst chunks: Uint8Array[] = [];\n\tlet total = 0;\n\ttry {\n\t\tfor (;;) {\n\t\t\tif (signal.aborted) throw new DOMException(t(\"aborted\"), \"AbortError\");\n\t\t\tconst item = await awaitBeforeAbort(reader.read(), signal);\n\t\t\tif (item.done) break;\n\t\t\ttotal += item.value.byteLength;\n\t\t\tif (total > maxBytes) {\n\t\t\t\tthrow new NodeHttpPluginRegistrySourceErrorV1(\n\t\t\t\t\t\"response_too_large\",\n\t\t\t\t\tt(\"Plugin registry response exceeds the configured size limit\"),\n\t\t\t\t);\n\t\t\t}\n\t\t\tchunks.push(item.value);\n\t\t}\n\t} finally {\n\t\treader.releaseLock();\n\t}\n\tconst bytes = new Uint8Array(total);\n\tlet offset = 0;\n\tfor (const chunk of chunks) {\n\t\tbytes.set(chunk, offset);\n\t\toffset += chunk.byteLength;\n\t}\n\treturn bytes;\n}\n\nfunction parseDocument(bytes: Uint8Array): readonly PluginRegistryManifestEnvelopeV1[] {\n\tlet value: unknown;\n\ttry {\n\t\tvalue = JSON.parse(new TextDecoder(\"utf-8\", { fatal: true }).decode(bytes));\n\t} catch {\n\t\tthrow new NodeHttpPluginRegistrySourceErrorV1(\n\t\t\t\"invalid_response\",\n\t\t\tt(\"Plugin registry response is not valid JSON\"),\n\t\t);\n\t}\n\tif (typeof value !== \"object\" || value === null || Array.isArray(value)) {\n\t\tthrow new NodeHttpPluginRegistrySourceErrorV1(\"invalid_response\", t(\"Plugin registry document is invalid\"));\n\t}\n\tconst document = value as Record<string, unknown>;\n\tif (\n\t\tObject.keys(document).some((key) => key !== \"version\" && key !== \"entries\") ||\n\t\tdocument.version !== 1 ||\n\t\t!Array.isArray(document.entries)\n\t) {\n\t\tthrow new NodeHttpPluginRegistrySourceErrorV1(\"invalid_response\", t(\"Plugin registry document is invalid\"));\n\t}\n\treturn document.entries as unknown as RegistryDocumentV1[\"entries\"];\n}\n\nfunction isAbortLike(error: unknown): boolean {\n\treturn error instanceof DOMException && error.name === \"AbortError\";\n}\n\nfunction isCallerCancelled(signal: AbortSignal | undefined): boolean {\n\treturn signal?.aborted === true;\n}\n\nfunction sanitizedSourceError(error: NodeHttpPluginRegistrySourceErrorV1): NodeHttpPluginRegistrySourceErrorV1 {\n\tconst code: unknown = error.code;\n\tif (\n\t\tcode !== \"cancelled\" &&\n\t\tcode !== \"invalid_configuration\" &&\n\t\tcode !== \"request_failed\" &&\n\t\tcode !== \"request_timed_out\" &&\n\t\tcode !== \"invalid_response\" &&\n\t\tcode !== \"response_too_large\"\n\t) {\n\t\treturn new NodeHttpPluginRegistrySourceErrorV1(\"request_failed\", t(\"Plugin registry request failed\"));\n\t}\n\treturn new NodeHttpPluginRegistrySourceErrorV1(code, t(\"Plugin registry request failed\"));\n}\n\n/**\n * Creates a bounded, allowlisted HTTP registry reader. It only transports\n * metadata to the existing registry verifier; package bytes, trust decisions,\n * and installation remain separate host-owned capabilities.\n */\nexport function createNodeHttpPluginRegistrySourceV1(\n\toptions: NodeHttpPluginRegistrySourceOptionsV1,\n): NodeHttpPluginRegistrySourceV1 {\n\tconst transport = options.fetch ?? globalThis.fetch;\n\tif (typeof transport !== \"function\") {\n\t\tthrow new NodeHttpPluginRegistrySourceErrorV1(\"invalid_configuration\", t(\"Node fetch is unavailable\"));\n\t}\n\tif (!Array.isArray(options.allowedOrigins) || options.allowedOrigins.length === 0) {\n\t\tthrow new NodeHttpPluginRegistrySourceErrorV1(\n\t\t\t\"invalid_configuration\",\n\t\t\tt(\"At least one allowed registry origin is required\"),\n\t\t);\n\t}\n\tconst origins = new Set(options.allowedOrigins.map(allowedOrigin));\n\tconst endpoint = endpointUrl(options.url, origins);\n\tconst timeoutMs = boundedPositive(\n\t\toptions.requestTimeoutMs,\n\t\tDEFAULT_TIMEOUT_MS_V1,\n\t\tMAX_TIMEOUT_MS_V1,\n\t\t\"requestTimeoutMs\",\n\t);\n\tconst maxResponseBytes = boundedPositive(\n\t\toptions.maxResponseBytes,\n\t\tDEFAULT_MAX_RESPONSE_BYTES_V1,\n\t\tMAX_RESPONSE_BYTES_V1,\n\t\t\"maxResponseBytes\",\n\t);\n\tconst userAgent = options.userAgent ?? \"agent-forge-plugin-registry/1\";\n\tif (userAgent.length === 0 || userAgent.length > 256 || /[\\r\\n]/u.test(userAgent)) {\n\t\tthrow new NodeHttpPluginRegistrySourceErrorV1(\"invalid_configuration\", t(\"userAgent is invalid\"));\n\t}\n\tconst source = endpoint.origin + endpoint.pathname;\n\n\treturn {\n\t\tversion: NODE_HTTP_PLUGIN_REGISTRY_SOURCE_VERSION_V1,\n\t\tsource,\n\t\tlist: async ({ signal } = {}) => {\n\t\t\tif (isCallerCancelled(signal)) {\n\t\t\t\tthrow new NodeHttpPluginRegistrySourceErrorV1(\"cancelled\", t(\"Plugin registry request was cancelled\"));\n\t\t\t}\n\t\t\tconst request = requestController(signal, timeoutMs);\n\t\t\tlet response: Response | undefined;\n\t\t\ttry {\n\t\t\t\tconst transportResponse = Promise.resolve().then(() => {\n\t\t\t\t\tif (request.signal.aborted) throw new DOMException(t(\"aborted\"), \"AbortError\");\n\t\t\t\t\treturn transport(endpoint.toString(), {\n\t\t\t\t\t\tmethod: \"GET\",\n\t\t\t\t\t\theaders: {\n\t\t\t\t\t\t\taccept: \"application/vnd.agent-forge.plugin-registry+json, application/json\",\n\t\t\t\t\t\t\t\"user-agent\": userAgent,\n\t\t\t\t\t\t},\n\t\t\t\t\t\tredirect: \"error\",\n\t\t\t\t\t\tsignal: request.signal,\n\t\t\t\t\t});\n\t\t\t\t});\n\t\t\t\tvoid transportResponse.then(\n\t\t\t\t\t(lateResponse) => {\n\t\t\t\t\t\tif (request.signal.aborted) discardResponseBody(lateResponse);\n\t\t\t\t\t},\n\t\t\t\t\t() => undefined,\n\t\t\t\t);\n\t\t\t\tconst receivedResponse = await awaitBeforeAbort(transportResponse, request.signal);\n\t\t\t\tresponse = receivedResponse;\n\t\t\t\tif (receivedResponse.status < 200 || receivedResponse.status >= 300) {\n\t\t\t\t\tthrow new NodeHttpPluginRegistrySourceErrorV1(\n\t\t\t\t\t\t\"request_failed\",\n\t\t\t\t\t\tt(\"Plugin registry request did not succeed\"),\n\t\t\t\t\t);\n\t\t\t\t}\n\t\t\t\tif (!isJsonResponse(receivedResponse)) {\n\t\t\t\t\tthrow new NodeHttpPluginRegistrySourceErrorV1(\n\t\t\t\t\t\t\"invalid_response\",\n\t\t\t\t\t\tt(\"Plugin registry response must be JSON\"),\n\t\t\t\t\t);\n\t\t\t\t}\n\t\t\t\tconst length = responseLength(receivedResponse);\n\t\t\t\tif (length !== undefined && length > maxResponseBytes) {\n\t\t\t\t\tthrow new NodeHttpPluginRegistrySourceErrorV1(\n\t\t\t\t\t\t\"response_too_large\",\n\t\t\t\t\t\tt(\"Plugin registry response exceeds the configured size limit\"),\n\t\t\t\t\t);\n\t\t\t\t}\n\t\t\t\treturn parseDocument(await readBody(receivedResponse, maxResponseBytes, request.signal));\n\t\t\t} catch (error) {\n\t\t\t\tif (isCallerCancelled(signal)) {\n\t\t\t\t\tthrow new NodeHttpPluginRegistrySourceErrorV1(\"cancelled\", t(\"Plugin registry request was cancelled\"));\n\t\t\t\t}\n\t\t\t\tif (request.timedOut()) {\n\t\t\t\t\tthrow new NodeHttpPluginRegistrySourceErrorV1(\n\t\t\t\t\t\t\"request_timed_out\",\n\t\t\t\t\t\tt(\"Plugin registry request timed out\"),\n\t\t\t\t\t);\n\t\t\t\t}\n\t\t\t\tif (error instanceof NodeHttpPluginRegistrySourceErrorV1) throw sanitizedSourceError(error);\n\t\t\t\tif (isAbortLike(error)) {\n\t\t\t\t\tthrow new NodeHttpPluginRegistrySourceErrorV1(\"cancelled\", t(\"Plugin registry request was cancelled\"));\n\t\t\t\t}\n\t\t\t\tthrow new NodeHttpPluginRegistrySourceErrorV1(\"request_failed\", t(\"Plugin registry request failed\"));\n\t\t\t} finally {\n\t\t\t\trequest.cleanup();\n\t\t\t\tdiscardResponseBody(response);\n\t\t\t}\n\t\t},\n\t};\n}\n"]}