@ai-agent-forge/agent-forge 0.86.7 → 0.88.0

package/dist/plugins/ecosystem/registry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../../src/plugins/ecosystem/registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAiD,KAAK,uBAAuB,EAAE,MAAM,cAAc,CAAC;AAC3G,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,mBAAmB,CAAC;AAExE,OAAO,KAAK,EAAE,eAAe,EAAE,WAAW,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AAGzG,qEAAqE;AACrE,eAAO,MAAM,qCAAqC,QAAY,CAAC;AAC/D,gEAAgE;AAChE,eAAO,MAAM,gCAAgC,MAAM,CAAC;AACpD,wEAAwE;AACxE,eAAO,MAAM,oCAAoC,QAAkB,CAAC;AACpE,+EAA+E;AAC/E,eAAO,MAAM,mCAAmC,OAAO,CAAC;AACxD,mEAAmE;AACnE,eAAO,MAAM,kCAAkC,MAAM,CAAC;AAEtD,MAAM,WAAW,gCAAgC;IAChD,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;IACpC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,kFAAkF;IAClF,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,iFAAiF;IACjF,QAAQ,CAAC,YAAY,CAAC,EAAE,8BAA8B,CAAC;CACvD;AAED;;;;GAIG;AACH,MAAM,WAAW,sBAAsB;IACtC,gFAAgF;IAChF,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE;QAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,KAAK,OAAO,CAAC,SAAS,gCAAgC,EAAE,CAAC,CAAC;CAClH;AAED,MAAM,WAAW,8BAA8B;IAC9C,QAAQ,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE;QACxB,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;QACpC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;QAChC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;QACjC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;KAC5B,KACE;QAAE,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAA;KAAE,GAC/B;QAAE,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;QAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GACzD,OAAO,CAAC;QAAE,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAA;KAAE,GAAG;QAAE,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;QAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACxG;AAED,MAAM,WAAW,uBAAuB;IACvC,QAAQ,CAAC,MAAM,EAAE,sBAAsB,CAAC;IACxC,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,sEAAsE;IACtE,QAAQ,CAAC,MAAM,EAAE,8BAA8B,CAAC;IAChD,+EAA+E;IAC/E,QAAQ,CAAC,cAAc,EAAE,sBAAsB,CAAC;IAChD,QAAQ,CAAC,qBAAqB,CAAC,EAAE,SAAS,eAAe,EAAE,CAAC;IAC5D,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,MAAM,yBAAyB,GAClC,WAAW,GACX,eAAe,GACf,iBAAiB,GACjB,kBAAkB,GAClB,gBAAgB,GAChB,gBAAgB,GAChB,mBAAmB,GACnB,oBAAoB,GACpB,cAAc,CAAC;AAElB,qBAAa,qBAAsB,SAAQ,KAAK;IAC/C,QAAQ,CAAC,IAAI,EAAE,yBAAyB,CAAC;IACzC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;IAEzB,YAAY,IAAI,EAAE,yBAAyB,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,EAK5E;CACD;AAED,MAAM,WAAW,qBAAqB;IACrC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;CACzB;AAED,MAAM,MAAM,6BAA6B,GAAG,iBAAiB,GAAG,iBAAiB,GAAG,cAAc,CAAC;AAEnG,MAAM,WAAW,yBAAyB;IACzC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,IAAI,EAAE,6BAA6B,CAAC;IAC7C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,6BAA8B,SAAQ,qBAAqB;IAC3E,QAAQ,CAAC,gBAAgB,EAAE,iBAAiB,CAAC;CAC7C;AAED,MAAM,WAAW,wBAAwB;IACxC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,SAAS,qBAAqB,EAAE,CAAC;IACnD,QAAQ,CAAC,OAAO,EAAE,uBAAuB,CAAC;IAC1C,wEAAwE;IACxE,QAAQ,CAAC,QAAQ,EAAE,SAAS,6BAA6B,EAAE,CAAC;IAC5D,qFAAqF;IACrF,QAAQ,CAAC,QAAQ,EAAE,SAAS,yBAAyB,EAAE,CAAC;CACxD;AAED,6EAA6E;AAC7E,MAAM,WAAW,+BAA+B;IAC/C,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;IACpC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,YAAY,CAAC,EAAE,8BAA8B,CAAC;CACvD;AAED,MAAM,WAAW,gBAAgB;IAChC,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,EAAE;QAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,KAAK,OAAO,CAAC,wBAAwB,CAAC,CAAC;IAChG,sFAAsF;IACtF,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE;QAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;QAChC,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;KAC9B,KAAK,OAAO,CAAC,+BAA+B,GAAG,SAAS,CAAC,CAAC;IAC3D,8EAA8E;IAC9E,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE;QAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,KAAK,OAAO,CAAC,SAAS,gBAAgB,EAAE,CAAC,CAAC;CAC7G;AA4LD,6DAA6D;AAC7D,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,uBAAuB,GAAG,gBAAgB,CAsLzF","sourcesContent":["import { buildPluginCatalogV1, comparePluginVersionsV1, type PluginCatalogSnapshotV1 } from \"./catalog.ts\";\nimport type { PluginDistributionDescriptorV1 } from \"./distribution.ts\";\nimport { createPluginDistributionV1 } from \"./distribution.ts\";\nimport type { CapabilityRefV1, HostFactsV1, PluginManifestV1, PluginSourceVerifierV1 } from \"./types.ts\";\nimport { pluginManifestDigestV1 } from \"./updates.ts\";\n\n/** Maximum manifest JSON bytes accepted by the registry boundary. */\nexport const MAX_PLUGIN_REGISTRY_MANIFEST_BYTES_V1 = 64 * 1024;\n/** Maximum number of manifests returned by one source query. */\nexport const MAX_PLUGIN_REGISTRY_MANIFESTS_V1 = 256;\n/** Maximum aggregate manifest metadata returned by one source query. */\nexport const MAX_PLUGIN_REGISTRY_PAYLOAD_BYTES_V1 = 4 * 1024 * 1024;\n/** Maximum source URI length; sources are identifiers, never package paths. */\nexport const MAX_PLUGIN_REGISTRY_SOURCE_CHARS_V1 = 2048;\n/** Maximum digest/signature text length accepted from a source. */\nexport const MAX_PLUGIN_REGISTRY_PROOF_CHARS_V1 = 512;\n\nexport interface PluginRegistryManifestEnvelopeV1 {\n\treadonly manifest: PluginManifestV1;\n\treadonly source: string;\n\treadonly manifestDigest: string;\n\t/** Optional host- or registry-supplied signature. The verifier owns semantics. */\n\treadonly signature?: string;\n\t/** Optional signed artifact descriptor bound to this exact manifest identity. */\n\treadonly distribution?: PluginDistributionDescriptorV1;\n}\n\n/**\n * A transport-neutral registry source. Hosts inject HTTP, filesystem, or\n * package-manager implementations. The registry never receives package bytes\n * and never exposes source response bodies to the model context.\n */\nexport interface PluginRegistrySourceV1 {\n\t/** Optional stable source identity shown in diagnostics; never a local path. */\n\treadonly source?: string;\n\treadonly list: (input: { readonly signal?: AbortSignal }) => Promise<readonly PluginRegistryManifestEnvelopeV1[]>;\n}\n\nexport interface PluginRegistryDigestVerifierV1 {\n\treadonly verify: (input: {\n\t\treadonly manifest: PluginManifestV1;\n\t\treadonly source: string;\n\t\treadonly manifestDigest: string;\n\t\treadonly expectedDigest?: string;\n\t\treadonly signature?: string;\n\t}) =>\n\t\t| { readonly status: \"accepted\" }\n\t\t| { readonly status: \"rejected\"; readonly reason?: string }\n\t\t| Promise<{ readonly status: \"accepted\" } | { readonly status: \"rejected\"; readonly reason?: string }>;\n}\n\nexport interface PluginRegistryOptionsV1 {\n\treadonly source: PluginRegistrySourceV1;\n\treadonly host: HostFactsV1;\n\t/** Required digest/signature verifier. No implicit trust fallback. */\n\treadonly verify: PluginRegistryDigestVerifierV1;\n\t/** Existing source verifier contract is mandatory at the registry boundary. */\n\treadonly sourceVerifier: PluginSourceVerifierV1;\n\treadonly availableCapabilities?: readonly CapabilityRefV1[];\n\treadonly maxManifests?: number;\n}\n\nexport type PluginRegistryErrorCodeV1 =\n\t| \"cancelled\"\n\t| \"invalid_limit\"\n\t| \"source_rejected\"\n\t| \"invalid_manifest\"\n\t| \"invalid_source\"\n\t| \"invalid_digest\"\n\t| \"payload_too_large\"\n\t| \"too_many_manifests\"\n\t| \"incompatible\";\n\nexport class PluginRegistryErrorV1 extends Error {\n\treadonly code: PluginRegistryErrorCodeV1;\n\treadonly cause?: unknown;\n\n\tconstructor(code: PluginRegistryErrorCodeV1, message: string, cause?: unknown) {\n\t\tsuper(message, cause === undefined ? undefined : { cause });\n\t\tthis.name = \"PluginRegistryErrorV1\";\n\t\tthis.code = code;\n\t\tthis.cause = cause;\n\t}\n}\n\nexport interface PluginRegistryEntryV1 {\n\treadonly pluginId: string;\n\treadonly pluginVersion: string;\n\treadonly source: string;\n\treadonly manifestDigest: string;\n\treadonly signed: boolean;\n}\n\nexport type PluginRegistryRejectionCodeV1 = \"source_rejected\" | \"digest_rejected\" | \"incompatible\";\n\nexport interface PluginRegistryRejectionV1 {\n\treadonly pluginId: string;\n\treadonly pluginVersion: string;\n\treadonly code: PluginRegistryRejectionCodeV1;\n\treadonly reason: string;\n}\n\nexport interface PluginRegistryVerifiedEntryV1 extends PluginRegistryEntryV1 {\n\treadonly resolutionStatus: \"installed-ready\";\n}\n\nexport interface PluginRegistrySnapshotV1 {\n\treadonly version: 1;\n\treadonly source: string;\n\treadonly entries: readonly PluginRegistryEntryV1[];\n\treadonly catalog: PluginCatalogSnapshotV1;\n\t/** Only entries that passed proof validation and host compatibility. */\n\treadonly verified: readonly PluginRegistryVerifiedEntryV1[];\n\t/** Platform/API/test-only entries remain visible in catalog but are not verified. */\n\treadonly rejected: readonly PluginRegistryRejectionV1[];\n}\n\n/** Host-side package projection; package bytes never cross this boundary. */\nexport interface PluginRegistryResolvedPackageV1 {\n\treadonly manifest: PluginManifestV1;\n\treadonly source: string;\n\treadonly expectedDigest: string;\n\treadonly distribution?: PluginDistributionDescriptorV1;\n}\n\nexport interface PluginRegistryV1 {\n\treadonly list: (input?: { readonly signal?: AbortSignal }) => Promise<PluginRegistrySnapshotV1>;\n\t/** Optional host-side resolver. Older custom registry implementations may omit it. */\n\treadonly resolve?: (input: {\n\t\treadonly pluginId: string;\n\t\treadonly pluginVersion?: string;\n\t\treadonly signal?: AbortSignal;\n\t}) => Promise<PluginRegistryResolvedPackageV1 | undefined>;\n\t/** Optional host-side manifest projection used by the CLI catalog command. */\n\treadonly listManifests?: (input?: { readonly signal?: AbortSignal }) => Promise<readonly PluginManifestV1[]>;\n}\n\nfunction isAbortLike(error: unknown, signal: AbortSignal | undefined): boolean {\n\treturn (\n\t\tsignal?.aborted === true ||\n\t\t(error instanceof Error && (error.name === \"AbortError\" || error.name === \"AbortSignalError\"))\n\t);\n}\n\nfunction boundedString(\n\tvalue: unknown,\n\tlabel: string,\n\tmax: number,\n\tcode: PluginRegistryErrorCodeV1 = \"invalid_source\",\n): string {\n\tif (typeof value !== \"string\" || value.trim() === \"\" || value.length > max || /[\\u0000-\\u001f]/u.test(value)) {\n\t\tthrow new PluginRegistryErrorV1(code, `${label} must be a non-empty bounded string`);\n\t}\n\treturn value;\n}\n\nfunction assertAllowedKeys(value: Record<string, unknown>, allowed: readonly string[], label: string): void {\n\tconst expected = new Set(allowed);\n\tif (Object.keys(value).some((key) => !expected.has(key)))\n\t\tthrow new PluginRegistryErrorV1(\"invalid_manifest\", `${label} contains an unsupported field`);\n}\n\nfunction validateSource(source: unknown): string {\n\tconst value = boundedString(source, \"source\", MAX_PLUGIN_REGISTRY_SOURCE_CHARS_V1);\n\tif (/^(?:file:|[a-zA-Z]:[\\\\/]|[\\\\/]{1,2}|\\\\\\\\)/iu.test(value) || /\\s/u.test(value)) {\n\t\tthrow new PluginRegistryErrorV1(\n\t\t\t\"invalid_source\",\n\t\t\t\"Plugin registry source must be an opaque URI, not a local path\",\n\t\t);\n\t}\n\tif (/^https?:\\/\\//iu.test(value)) {\n\t\ttry {\n\t\t\tconst parsed = new URL(value);\n\t\t\tconst pathname = parsed.pathname.length > 512 ? `${parsed.pathname.slice(0, 511)}…` : parsed.pathname;\n\t\t\treturn `${parsed.origin}${pathname || \"/\"}`;\n\t\t} catch (error) {\n\t\t\tthrow new PluginRegistryErrorV1(\"invalid_source\", \"Plugin registry source URL is invalid\", error);\n\t\t}\n\t}\n\treturn value;\n}\n\nfunction validateManifest(manifest: unknown): PluginManifestV1 {\n\tif (typeof manifest !== \"object\" || manifest === null || Array.isArray(manifest)) {\n\t\tthrow new PluginRegistryErrorV1(\"invalid_manifest\", \"Registry manifest must be an object\");\n\t}\n\tconst value = manifest as Record<string, unknown>;\n\tassertAllowedKeys(\n\t\tvalue,\n\t\t[\n\t\t\t\"id\",\n\t\t\t\"pluginVersion\",\n\t\t\t\"apiVersion\",\n\t\t\t\"minHostVersion\",\n\t\t\t\"maxHostVersion\",\n\t\t\t\"capabilityRefs\",\n\t\t\t\"requires\",\n\t\t\t\"platform\",\n\t\t\t\"testOnly\",\n\t\t],\n\t\t\"Registry manifest\",\n\t);\n\tif (typeof value.id !== \"string\" || value.id.trim() === \"\" || value.id.length > 256)\n\t\tthrow new PluginRegistryErrorV1(\"invalid_manifest\", \"Registry manifest id is invalid\");\n\tif (typeof value.pluginVersion !== \"string\" || value.pluginVersion.trim() === \"\" || value.pluginVersion.length > 256)\n\t\tthrow new PluginRegistryErrorV1(\"invalid_manifest\", \"Registry manifest pluginVersion is invalid\");\n\tif (typeof value.apiVersion !== \"string\" || value.apiVersion.trim() === \"\" || value.apiVersion.length > 256)\n\t\tthrow new PluginRegistryErrorV1(\"invalid_manifest\", \"Registry manifest apiVersion is invalid\");\n\tif (value.minHostVersion === undefined && value.maxHostVersion === undefined)\n\t\tthrow new PluginRegistryErrorV1(\n\t\t\t\"invalid_manifest\",\n\t\t\t\"Published plugins must declare host version compatibility range: set minHostVersion and/or maxHostVersion\",\n\t\t);\n\tlet bytes: number;\n\ttry {\n\t\tbytes = new TextEncoder().encode(JSON.stringify(manifest)).byteLength;\n\t} catch (error) {\n\t\tthrow new PluginRegistryErrorV1(\"invalid_manifest\", \"Registry manifest cannot be serialized\", error);\n\t}\n\tif (bytes > MAX_PLUGIN_REGISTRY_MANIFEST_BYTES_V1)\n\t\tthrow new PluginRegistryErrorV1(\"payload_too_large\", \"Registry manifest exceeds the size limit\");\n\treturn Object.freeze({ ...value } as unknown as PluginManifestV1);\n}\n\nfunction validateEnvelope(value: unknown): PluginRegistryManifestEnvelopeV1 {\n\tif (typeof value !== \"object\" || value === null || Array.isArray(value))\n\t\tthrow new PluginRegistryErrorV1(\"invalid_manifest\", \"Registry response entry must be an object\");\n\tconst entry = value as Record<string, unknown>;\n\tassertAllowedKeys(\n\t\tentry,\n\t\t[\"manifest\", \"source\", \"manifestDigest\", \"signature\", \"distribution\"],\n\t\t\"Registry response entry\",\n\t);\n\tconst manifest = validateManifest(entry.manifest);\n\tconst source = validateSource(entry.source);\n\tconst manifestDigest = boundedString(entry.manifestDigest, \"manifestDigest\", MAX_PLUGIN_REGISTRY_PROOF_CHARS_V1);\n\tif (entry.signature !== undefined) boundedString(entry.signature, \"signature\", MAX_PLUGIN_REGISTRY_PROOF_CHARS_V1);\n\tlet distribution: PluginDistributionDescriptorV1 | undefined;\n\tif (entry.distribution !== undefined) {\n\t\ttry {\n\t\t\tdistribution = createPluginDistributionV1().validateDescriptor(entry.distribution);\n\t\t} catch (error) {\n\t\t\tthrow new PluginRegistryErrorV1(\"invalid_manifest\", \"Registry distribution descriptor is invalid\", error);\n\t\t}\n\t\tif (\n\t\t\tdistribution.pluginId !== manifest.id ||\n\t\t\tdistribution.pluginVersion !== manifest.pluginVersion ||\n\t\t\tdistribution.manifestDigest !== manifestDigest\n\t\t)\n\t\t\tthrow new PluginRegistryErrorV1(\n\t\t\t\t\"invalid_manifest\",\n\t\t\t\t\"Registry distribution descriptor does not match the manifest identity\",\n\t\t\t);\n\t}\n\treturn Object.freeze({\n\t\tmanifest,\n\t\tsource,\n\t\tmanifestDigest,\n\t\t...(entry.signature === undefined ? {} : { signature: entry.signature as string }),\n\t\t...(distribution === undefined ? {} : { distribution }),\n\t});\n}\n\nfunction validateMax(value: number | undefined): number {\n\tconst max = value ?? MAX_PLUGIN_REGISTRY_MANIFESTS_V1;\n\tif (!Number.isSafeInteger(max) || max < 1 || max > MAX_PLUGIN_REGISTRY_MANIFESTS_V1)\n\t\tthrow new PluginRegistryErrorV1(\n\t\t\t\"invalid_limit\",\n\t\t\t`maxManifests must be an integer between 1 and ${MAX_PLUGIN_REGISTRY_MANIFESTS_V1}`,\n\t\t);\n\treturn max;\n}\n\nasync function validateSourceProof(\n\tentry: PluginRegistryManifestEnvelopeV1,\n\tverifier: PluginRegistryDigestVerifierV1,\n\tsourceVerifier: PluginSourceVerifierV1,\n): Promise<void> {\n\tconst actualDigest = pluginManifestDigestV1(entry.manifest);\n\tif (entry.manifestDigest !== actualDigest)\n\t\tthrow new PluginRegistryErrorV1(\n\t\t\t\"invalid_digest\",\n\t\t\t`Manifest digest mismatch for ${entry.manifest.id}@${entry.manifest.pluginVersion}`,\n\t\t);\n\ttry {\n\t\tconst result = await verifier.verify({\n\t\t\tmanifest: entry.manifest,\n\t\t\tsource: entry.source,\n\t\t\tmanifestDigest: actualDigest,\n\t\t\texpectedDigest: entry.manifestDigest,\n\t\t\tsignature: entry.signature,\n\t\t});\n\t\tif (result.status !== \"accepted\")\n\t\t\tthrow new PluginRegistryErrorV1(\"source_rejected\", result.reason ?? \"Registry source proof was rejected\");\n\t} catch (error) {\n\t\tif (error instanceof PluginRegistryErrorV1) throw error;\n\t\tthrow new PluginRegistryErrorV1(\"source_rejected\", \"Registry source proof was rejected\", error);\n\t}\n\tlet result: ReturnType<PluginSourceVerifierV1>;\n\ttry {\n\t\tresult = sourceVerifier({\n\t\t\tpluginId: entry.manifest.id,\n\t\t\tpluginVersion: entry.manifest.pluginVersion,\n\t\t\tsource: entry.source,\n\t\t\tmanifestDigest: actualDigest,\n\t\t});\n\t} catch (error) {\n\t\tthrow new PluginRegistryErrorV1(\"source_rejected\", \"Plugin source verifier failed\", error);\n\t}\n\tif (result.status !== \"accepted\")\n\t\tthrow new PluginRegistryErrorV1(\"source_rejected\", result.reason ?? \"Plugin source was rejected\");\n}\n\nfunction sourceIdentity(entries: readonly PluginRegistryManifestEnvelopeV1[]): string {\n\tconst sources = [...new Set(entries.map((entry) => entry.source))].sort((left, right) => left.localeCompare(right));\n\treturn sources.join(\",\");\n}\n\ninterface RegistryLoadV1 {\n\treadonly accepted: readonly PluginRegistryManifestEnvelopeV1[];\n\treadonly snapshot: PluginRegistrySnapshotV1;\n}\n\n/** Create a deterministic, host-injected registry client. */\nexport function createPluginRegistryV1(options: PluginRegistryOptionsV1): PluginRegistryV1 {\n\tconst maxManifests = validateMax(options.maxManifests);\n\tif (options.source === undefined || typeof options.source.list !== \"function\")\n\t\tthrow new PluginRegistryErrorV1(\"invalid_source\", \"Registry source must provide list()\");\n\tif (options.source.source !== undefined) validateSource(options.source.source);\n\tif (options.verify === undefined || typeof options.verify.verify !== \"function\")\n\t\tthrow new PluginRegistryErrorV1(\"source_rejected\", \"Registry source/digest verifier is required\");\n\tif (options.sourceVerifier === undefined || typeof options.sourceVerifier !== \"function\")\n\t\tthrow new PluginRegistryErrorV1(\"source_rejected\", \"Registry source verifier is required\");\n\n\tconst load = async (input: { readonly signal?: AbortSignal } = {}): Promise<RegistryLoadV1> => {\n\t\tif (input.signal?.aborted)\n\t\t\tthrow new PluginRegistryErrorV1(\"cancelled\", \"Plugin registry operation was cancelled\");\n\t\tlet raw: readonly PluginRegistryManifestEnvelopeV1[];\n\t\ttry {\n\t\t\traw = await options.source.list({ signal: input.signal });\n\t\t} catch (error) {\n\t\t\tif (isAbortLike(error, input.signal))\n\t\t\t\tthrow new PluginRegistryErrorV1(\"cancelled\", \"Plugin registry operation was cancelled\", error);\n\t\t\tthrow new PluginRegistryErrorV1(\"source_rejected\", \"Plugin registry source failed\", error);\n\t\t}\n\t\tif (input.signal?.aborted)\n\t\t\tthrow new PluginRegistryErrorV1(\"cancelled\", \"Plugin registry operation was cancelled\");\n\t\tif (!Array.isArray(raw))\n\t\t\tthrow new PluginRegistryErrorV1(\"invalid_manifest\", \"Registry source must return an array\");\n\t\tif (raw.length > maxManifests)\n\t\t\tthrow new PluginRegistryErrorV1(\"too_many_manifests\", \"Registry response contains too many manifests\");\n\t\tconst entries = raw.map(validateEnvelope);\n\t\tconst payloadBytes = entries.reduce((total, entry) => {\n\t\t\tconst manifestBytes = new TextEncoder().encode(JSON.stringify(entry.manifest)).byteLength;\n\t\t\tconst distributionBytes =\n\t\t\t\tentry.distribution === undefined\n\t\t\t\t\t? 0\n\t\t\t\t\t: new TextEncoder().encode(JSON.stringify(entry.distribution)).byteLength;\n\t\t\treturn (\n\t\t\t\ttotal +\n\t\t\t\tmanifestBytes +\n\t\t\t\tdistributionBytes +\n\t\t\t\tnew TextEncoder().encode(entry.source).byteLength +\n\t\t\t\tnew TextEncoder().encode(entry.manifestDigest).byteLength +\n\t\t\t\t(entry.signature === undefined ? 0 : new TextEncoder().encode(entry.signature).byteLength)\n\t\t\t);\n\t\t}, 0);\n\t\tif (payloadBytes > MAX_PLUGIN_REGISTRY_PAYLOAD_BYTES_V1)\n\t\t\tthrow new PluginRegistryErrorV1(\"payload_too_large\", \"Registry response exceeds the aggregate size limit\");\n\t\tconst seen = new Set<string>();\n\t\tconst accepted: PluginRegistryManifestEnvelopeV1[] = [];\n\t\tconst rejected: PluginRegistryRejectionV1[] = [];\n\t\tfor (const entry of entries) {\n\t\t\tconst identity = `${entry.manifest.id}@${entry.manifest.pluginVersion}`;\n\t\t\tif (seen.has(identity))\n\t\t\t\tthrow new PluginRegistryErrorV1(\"invalid_manifest\", `Duplicate registry manifest: ${identity}`);\n\t\t\tseen.add(identity);\n\t\t\ttry {\n\t\t\t\tawait validateSourceProof(entry, options.verify, options.sourceVerifier);\n\t\t\t} catch (error) {\n\t\t\t\tif (!(error instanceof PluginRegistryErrorV1)) throw error;\n\t\t\t\tif (error.cause !== undefined) throw error;\n\t\t\t\tif (error.code !== \"source_rejected\" && error.code !== \"invalid_digest\") throw error;\n\t\t\t\trejected.push({\n\t\t\t\t\tpluginId: entry.manifest.id,\n\t\t\t\t\tpluginVersion: entry.manifest.pluginVersion,\n\t\t\t\t\tcode: error.code === \"invalid_digest\" ? \"digest_rejected\" : \"source_rejected\",\n\t\t\t\t\treason:\n\t\t\t\t\t\terror.code === \"invalid_digest\" ? \"Manifest digest mismatch\" : \"Registry source proof was rejected\",\n\t\t\t\t});\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tif (input.signal?.aborted)\n\t\t\t\tthrow new PluginRegistryErrorV1(\"cancelled\", \"Plugin registry operation was cancelled\");\n\t\t\taccepted.push(entry);\n\t\t}\n\t\tconst manifests = accepted.map((entry) => entry.manifest);\n\t\tconst catalog = buildPluginCatalogV1({\n\t\t\tmanifests,\n\t\t\thost: options.host,\n\t\t\tavailableCapabilities: options.availableCapabilities,\n\t\t\tmaxEntries: maxManifests,\n\t\t});\n\t\tconst publicEntries = Object.freeze(\n\t\t\t[...accepted]\n\t\t\t\t.sort((left, right) => {\n\t\t\t\t\tconst idOrder = left.manifest.id.localeCompare(right.manifest.id);\n\t\t\t\t\treturn idOrder === 0\n\t\t\t\t\t\t? comparePluginVersionsV1(right.manifest.pluginVersion, left.manifest.pluginVersion)\n\t\t\t\t\t\t: idOrder;\n\t\t\t\t})\n\t\t\t\t.map((entry) =>\n\t\t\t\t\tObject.freeze({\n\t\t\t\t\t\tpluginId: entry.manifest.id,\n\t\t\t\t\t\tpluginVersion: entry.manifest.pluginVersion,\n\t\t\t\t\t\tsource: entry.source,\n\t\t\t\t\t\tmanifestDigest: entry.manifestDigest,\n\t\t\t\t\t\tsigned: entry.signature !== undefined,\n\t\t\t\t\t}),\n\t\t\t\t),\n\t\t);\n\t\tconst catalogByIdentity = new Map(\n\t\t\tcatalog.entries.map((entry) => [`${entry.pluginId}@${entry.pluginVersion}`, entry] as const),\n\t\t);\n\t\tconst verified = Object.freeze(\n\t\t\tpublicEntries.flatMap((entry) => {\n\t\t\t\tconst catalogEntry = catalogByIdentity.get(`${entry.pluginId}@${entry.pluginVersion}`);\n\t\t\t\tif (catalogEntry?.resolution.status === \"installed-ready\")\n\t\t\t\t\treturn [{ ...entry, resolutionStatus: \"installed-ready\" as const }];\n\t\t\t\tconst reason = catalogEntry?.resolution.diagnostics[0]?.message ?? \"Plugin is incompatible with this host\";\n\t\t\t\trejected.push({\n\t\t\t\t\tpluginId: entry.pluginId,\n\t\t\t\t\tpluginVersion: entry.pluginVersion,\n\t\t\t\t\tcode: \"incompatible\",\n\t\t\t\t\treason,\n\t\t\t\t});\n\t\t\t\treturn [];\n\t\t\t}),\n\t\t);\n\t\treturn {\n\t\t\taccepted: Object.freeze(accepted),\n\t\t\tsnapshot: Object.freeze({\n\t\t\t\tversion: 1,\n\t\t\t\tsource:\n\t\t\t\t\toptions.source.source === undefined ? sourceIdentity(accepted) : validateSource(options.source.source),\n\t\t\t\tentries: publicEntries,\n\t\t\t\tcatalog,\n\t\t\t\tverified,\n\t\t\t\trejected: Object.freeze(rejected),\n\t\t\t}),\n\t\t};\n\t};\n\tconst listManifests = async (\n\t\tinput: { readonly signal?: AbortSignal } = {},\n\t): Promise<readonly PluginManifestV1[]> => {\n\t\tconst loaded = await load(input);\n\t\treturn Object.freeze(\n\t\t\tloaded.snapshot.catalog.entries.flatMap((catalogEntry) =>\n\t\t\t\tloaded.accepted\n\t\t\t\t\t.filter(\n\t\t\t\t\t\t(entry) =>\n\t\t\t\t\t\t\tentry.manifest.id === catalogEntry.pluginId &&\n\t\t\t\t\t\t\tentry.manifest.pluginVersion === catalogEntry.pluginVersion,\n\t\t\t\t\t)\n\t\t\t\t\t.map((entry) => entry.manifest),\n\t\t\t),\n\t\t);\n\t};\n\treturn {\n\t\tlist: async (input = {}) => (await load(input)).snapshot,\n\t\tlistManifests,\n\t\tresolve: async (input) => {\n\t\t\tconst loaded = await load({ signal: input.signal });\n\t\t\tconst verified = new Set(loaded.snapshot.verified.map((entry) => `${entry.pluginId}@${entry.pluginVersion}`));\n\t\t\tconst identity =\n\t\t\t\tinput.pluginVersion === undefined\n\t\t\t\t\t? loaded.snapshot.catalog.entries.find(\n\t\t\t\t\t\t\t(candidate) =>\n\t\t\t\t\t\t\t\tcandidate.pluginId === input.pluginId &&\n\t\t\t\t\t\t\t\tcandidate.resolution.status === \"installed-ready\" &&\n\t\t\t\t\t\t\t\tverified.has(`${candidate.pluginId}@${candidate.pluginVersion}`),\n\t\t\t\t\t\t)\n\t\t\t\t\t: loaded.snapshot.catalog.entries.find(\n\t\t\t\t\t\t\t(candidate) =>\n\t\t\t\t\t\t\t\tcandidate.pluginId === input.pluginId &&\n\t\t\t\t\t\t\t\tcandidate.pluginVersion === input.pluginVersion &&\n\t\t\t\t\t\t\t\tcandidate.resolution.status === \"installed-ready\" &&\n\t\t\t\t\t\t\t\tverified.has(`${candidate.pluginId}@${candidate.pluginVersion}`),\n\t\t\t\t\t\t);\n\t\t\tconst entry =\n\t\t\t\tidentity === undefined\n\t\t\t\t\t? undefined\n\t\t\t\t\t: loaded.accepted.find(\n\t\t\t\t\t\t\t(candidate) =>\n\t\t\t\t\t\t\t\tcandidate.manifest.id === identity.pluginId &&\n\t\t\t\t\t\t\t\tcandidate.manifest.pluginVersion === identity.pluginVersion,\n\t\t\t\t\t\t);\n\t\t\tif (entry === undefined) return undefined;\n\t\t\treturn Object.freeze({\n\t\t\t\tmanifest: entry.manifest,\n\t\t\t\tsource: entry.source,\n\t\t\t\texpectedDigest: entry.manifestDigest,\n\t\t\t\t...(entry.distribution === undefined ? {} : { distribution: entry.distribution }),\n\t\t\t});\n\t\t},\n\t};\n}\n"]}
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../../src/plugins/ecosystem/registry.ts"],"names":[],"mappings":"AACA,OAAO,EAAiD,KAAK,uBAAuB,EAAE,MAAM,cAAc,CAAC;AAC3G,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,mBAAmB,CAAC;AAExE,OAAO,KAAK,EAAE,eAAe,EAAE,WAAW,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AAGzG,qEAAqE;AACrE,eAAO,MAAM,qCAAqC,QAAY,CAAC;AAC/D,gEAAgE;AAChE,eAAO,MAAM,gCAAgC,MAAM,CAAC;AACpD,wEAAwE;AACxE,eAAO,MAAM,oCAAoC,QAAkB,CAAC;AACpE,+EAA+E;AAC/E,eAAO,MAAM,mCAAmC,OAAO,CAAC;AACxD,mEAAmE;AACnE,eAAO,MAAM,kCAAkC,MAAM,CAAC;AAEtD,MAAM,WAAW,gCAAgC;IAChD,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;IACpC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,kFAAkF;IAClF,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,iFAAiF;IACjF,QAAQ,CAAC,YAAY,CAAC,EAAE,8BAA8B,CAAC;CACvD;AAED;;;;GAIG;AACH,MAAM,WAAW,sBAAsB;IACtC,gFAAgF;IAChF,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE;QAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,KAAK,OAAO,CAAC,SAAS,gCAAgC,EAAE,CAAC,CAAC;CAClH;AAED,MAAM,WAAW,8BAA8B;IAC9C,QAAQ,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE;QACxB,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;QACpC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;QAChC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;QACjC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;KAC5B,KACE;QAAE,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAA;KAAE,GAC/B;QAAE,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;QAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GACzD,OAAO,CAAC;QAAE,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAA;KAAE,GAAG;QAAE,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;QAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACxG;AAED,MAAM,WAAW,uBAAuB;IACvC,QAAQ,CAAC,MAAM,EAAE,sBAAsB,CAAC;IACxC,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,sEAAsE;IACtE,QAAQ,CAAC,MAAM,EAAE,8BAA8B,CAAC;IAChD,+EAA+E;IAC/E,QAAQ,CAAC,cAAc,EAAE,sBAAsB,CAAC;IAChD,QAAQ,CAAC,qBAAqB,CAAC,EAAE,SAAS,eAAe,EAAE,CAAC;IAC5D,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,MAAM,yBAAyB,GAClC,WAAW,GACX,eAAe,GACf,iBAAiB,GACjB,kBAAkB,GAClB,gBAAgB,GAChB,gBAAgB,GAChB,mBAAmB,GACnB,oBAAoB,GACpB,cAAc,CAAC;AAElB,qBAAa,qBAAsB,SAAQ,KAAK;IAC/C,QAAQ,CAAC,IAAI,EAAE,yBAAyB,CAAC;IACzC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;IAEzB,YAAY,IAAI,EAAE,yBAAyB,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,EAK5E;CACD;AAED,MAAM,WAAW,qBAAqB;IACrC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;CACzB;AAED,MAAM,MAAM,6BAA6B,GAAG,iBAAiB,GAAG,iBAAiB,GAAG,cAAc,CAAC;AAEnG,MAAM,WAAW,yBAAyB;IACzC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,IAAI,EAAE,6BAA6B,CAAC;IAC7C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,6BAA8B,SAAQ,qBAAqB;IAC3E,QAAQ,CAAC,gBAAgB,EAAE,iBAAiB,CAAC;CAC7C;AAED,MAAM,WAAW,wBAAwB;IACxC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,SAAS,qBAAqB,EAAE,CAAC;IACnD,QAAQ,CAAC,OAAO,EAAE,uBAAuB,CAAC;IAC1C,wEAAwE;IACxE,QAAQ,CAAC,QAAQ,EAAE,SAAS,6BAA6B,EAAE,CAAC;IAC5D,qFAAqF;IACrF,QAAQ,CAAC,QAAQ,EAAE,SAAS,yBAAyB,EAAE,CAAC;CACxD;AAED,6EAA6E;AAC7E,MAAM,WAAW,+BAA+B;IAC/C,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;IACpC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,YAAY,CAAC,EAAE,8BAA8B,CAAC;CACvD;AAED,MAAM,WAAW,gBAAgB;IAChC,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,EAAE;QAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,KAAK,OAAO,CAAC,wBAAwB,CAAC,CAAC;IAChG,sFAAsF;IACtF,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE;QAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;QAChC,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;KAC9B,KAAK,OAAO,CAAC,+BAA+B,GAAG,SAAS,CAAC,CAAC;IAC3D,8EAA8E;IAC9E,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE;QAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,KAAK,OAAO,CAAC,SAAS,gBAAgB,EAAE,CAAC,CAAC;CAC7G;AA8LD,6DAA6D;AAC7D,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,uBAAuB,GAAG,gBAAgB,CAyLzF","sourcesContent":["import { t } from \"../../core/i18n/index.ts\";\nimport { buildPluginCatalogV1, comparePluginVersionsV1, type PluginCatalogSnapshotV1 } from \"./catalog.ts\";\nimport type { PluginDistributionDescriptorV1 } from \"./distribution.ts\";\nimport { createPluginDistributionV1 } from \"./distribution.ts\";\nimport type { CapabilityRefV1, HostFactsV1, PluginManifestV1, PluginSourceVerifierV1 } from \"./types.ts\";\nimport { pluginManifestDigestV1 } from \"./updates.ts\";\n\n/** Maximum manifest JSON bytes accepted by the registry boundary. */\nexport const MAX_PLUGIN_REGISTRY_MANIFEST_BYTES_V1 = 64 * 1024;\n/** Maximum number of manifests returned by one source query. */\nexport const MAX_PLUGIN_REGISTRY_MANIFESTS_V1 = 256;\n/** Maximum aggregate manifest metadata returned by one source query. */\nexport const MAX_PLUGIN_REGISTRY_PAYLOAD_BYTES_V1 = 4 * 1024 * 1024;\n/** Maximum source URI length; sources are identifiers, never package paths. */\nexport const MAX_PLUGIN_REGISTRY_SOURCE_CHARS_V1 = 2048;\n/** Maximum digest/signature text length accepted from a source. */\nexport const MAX_PLUGIN_REGISTRY_PROOF_CHARS_V1 = 512;\n\nexport interface PluginRegistryManifestEnvelopeV1 {\n\treadonly manifest: PluginManifestV1;\n\treadonly source: string;\n\treadonly manifestDigest: string;\n\t/** Optional host- or registry-supplied signature. The verifier owns semantics. */\n\treadonly signature?: string;\n\t/** Optional signed artifact descriptor bound to this exact manifest identity. */\n\treadonly distribution?: PluginDistributionDescriptorV1;\n}\n\n/**\n * A transport-neutral registry source. Hosts inject HTTP, filesystem, or\n * package-manager implementations. The registry never receives package bytes\n * and never exposes source response bodies to the model context.\n */\nexport interface PluginRegistrySourceV1 {\n\t/** Optional stable source identity shown in diagnostics; never a local path. */\n\treadonly source?: string;\n\treadonly list: (input: { readonly signal?: AbortSignal }) => Promise<readonly PluginRegistryManifestEnvelopeV1[]>;\n}\n\nexport interface PluginRegistryDigestVerifierV1 {\n\treadonly verify: (input: {\n\t\treadonly manifest: PluginManifestV1;\n\t\treadonly source: string;\n\t\treadonly manifestDigest: string;\n\t\treadonly expectedDigest?: string;\n\t\treadonly signature?: string;\n\t}) =>\n\t\t| { readonly status: \"accepted\" }\n\t\t| { readonly status: \"rejected\"; readonly reason?: string }\n\t\t| Promise<{ readonly status: \"accepted\" } | { readonly status: \"rejected\"; readonly reason?: string }>;\n}\n\nexport interface PluginRegistryOptionsV1 {\n\treadonly source: PluginRegistrySourceV1;\n\treadonly host: HostFactsV1;\n\t/** Required digest/signature verifier. No implicit trust fallback. */\n\treadonly verify: PluginRegistryDigestVerifierV1;\n\t/** Existing source verifier contract is mandatory at the registry boundary. */\n\treadonly sourceVerifier: PluginSourceVerifierV1;\n\treadonly availableCapabilities?: readonly CapabilityRefV1[];\n\treadonly maxManifests?: number;\n}\n\nexport type PluginRegistryErrorCodeV1 =\n\t| \"cancelled\"\n\t| \"invalid_limit\"\n\t| \"source_rejected\"\n\t| \"invalid_manifest\"\n\t| \"invalid_source\"\n\t| \"invalid_digest\"\n\t| \"payload_too_large\"\n\t| \"too_many_manifests\"\n\t| \"incompatible\";\n\nexport class PluginRegistryErrorV1 extends Error {\n\treadonly code: PluginRegistryErrorCodeV1;\n\treadonly cause?: unknown;\n\n\tconstructor(code: PluginRegistryErrorCodeV1, message: string, cause?: unknown) {\n\t\tsuper(message, cause === undefined ? undefined : { cause });\n\t\tthis.name = \"PluginRegistryErrorV1\";\n\t\tthis.code = code;\n\t\tthis.cause = cause;\n\t}\n}\n\nexport interface PluginRegistryEntryV1 {\n\treadonly pluginId: string;\n\treadonly pluginVersion: string;\n\treadonly source: string;\n\treadonly manifestDigest: string;\n\treadonly signed: boolean;\n}\n\nexport type PluginRegistryRejectionCodeV1 = \"source_rejected\" | \"digest_rejected\" | \"incompatible\";\n\nexport interface PluginRegistryRejectionV1 {\n\treadonly pluginId: string;\n\treadonly pluginVersion: string;\n\treadonly code: PluginRegistryRejectionCodeV1;\n\treadonly reason: string;\n}\n\nexport interface PluginRegistryVerifiedEntryV1 extends PluginRegistryEntryV1 {\n\treadonly resolutionStatus: \"installed-ready\";\n}\n\nexport interface PluginRegistrySnapshotV1 {\n\treadonly version: 1;\n\treadonly source: string;\n\treadonly entries: readonly PluginRegistryEntryV1[];\n\treadonly catalog: PluginCatalogSnapshotV1;\n\t/** Only entries that passed proof validation and host compatibility. */\n\treadonly verified: readonly PluginRegistryVerifiedEntryV1[];\n\t/** Platform/API/test-only entries remain visible in catalog but are not verified. */\n\treadonly rejected: readonly PluginRegistryRejectionV1[];\n}\n\n/** Host-side package projection; package bytes never cross this boundary. */\nexport interface PluginRegistryResolvedPackageV1 {\n\treadonly manifest: PluginManifestV1;\n\treadonly source: string;\n\treadonly expectedDigest: string;\n\treadonly distribution?: PluginDistributionDescriptorV1;\n}\n\nexport interface PluginRegistryV1 {\n\treadonly list: (input?: { readonly signal?: AbortSignal }) => Promise<PluginRegistrySnapshotV1>;\n\t/** Optional host-side resolver. Older custom registry implementations may omit it. */\n\treadonly resolve?: (input: {\n\t\treadonly pluginId: string;\n\t\treadonly pluginVersion?: string;\n\t\treadonly signal?: AbortSignal;\n\t}) => Promise<PluginRegistryResolvedPackageV1 | undefined>;\n\t/** Optional host-side manifest projection used by the CLI catalog command. */\n\treadonly listManifests?: (input?: { readonly signal?: AbortSignal }) => Promise<readonly PluginManifestV1[]>;\n}\n\nfunction isAbortLike(error: unknown, signal: AbortSignal | undefined): boolean {\n\treturn (\n\t\tsignal?.aborted === true ||\n\t\t(error instanceof Error && (error.name === \"AbortError\" || error.name === \"AbortSignalError\"))\n\t);\n}\n\nfunction boundedString(\n\tvalue: unknown,\n\tlabel: string,\n\tmax: number,\n\tcode: PluginRegistryErrorCodeV1 = \"invalid_source\",\n): string {\n\tif (typeof value !== \"string\" || value.trim() === \"\" || value.length > max || /[\\u0000-\\u001f]/u.test(value)) {\n\t\tthrow new PluginRegistryErrorV1(code, t(\"{label} must be a non-empty bounded string\", { label }));\n\t}\n\treturn value;\n}\n\nfunction assertAllowedKeys(value: Record<string, unknown>, allowed: readonly string[], label: string): void {\n\tconst expected = new Set(allowed);\n\tif (Object.keys(value).some((key) => !expected.has(key)))\n\t\tthrow new PluginRegistryErrorV1(\"invalid_manifest\", t(\"{label} contains an unsupported field\", { label }));\n}\n\nfunction validateSource(source: unknown): string {\n\tconst value = boundedString(source, \"source\", MAX_PLUGIN_REGISTRY_SOURCE_CHARS_V1);\n\tif (/^(?:file:|[a-zA-Z]:[\\\\/]|[\\\\/]{1,2}|\\\\\\\\)/iu.test(value) || /\\s/u.test(value)) {\n\t\tthrow new PluginRegistryErrorV1(\n\t\t\t\"invalid_source\",\n\t\t\tt(\"Plugin registry source must be an opaque URI, not a local path\"),\n\t\t);\n\t}\n\tif (/^https?:\\/\\//iu.test(value)) {\n\t\ttry {\n\t\t\tconst parsed = new URL(value);\n\t\t\tconst pathname = parsed.pathname.length > 512 ? `${parsed.pathname.slice(0, 511)}…` : parsed.pathname;\n\t\t\treturn `${parsed.origin}${pathname || \"/\"}`;\n\t\t} catch (error) {\n\t\t\tthrow new PluginRegistryErrorV1(\"invalid_source\", t(\"Plugin registry source URL is invalid\"), error);\n\t\t}\n\t}\n\treturn value;\n}\n\nfunction validateManifest(manifest: unknown): PluginManifestV1 {\n\tif (typeof manifest !== \"object\" || manifest === null || Array.isArray(manifest)) {\n\t\tthrow new PluginRegistryErrorV1(\"invalid_manifest\", t(\"Registry manifest must be an object\"));\n\t}\n\tconst value = manifest as Record<string, unknown>;\n\tassertAllowedKeys(\n\t\tvalue,\n\t\t[\n\t\t\t\"id\",\n\t\t\t\"pluginVersion\",\n\t\t\t\"apiVersion\",\n\t\t\t\"minHostVersion\",\n\t\t\t\"maxHostVersion\",\n\t\t\t\"capabilityRefs\",\n\t\t\t\"requires\",\n\t\t\t\"platform\",\n\t\t\t\"testOnly\",\n\t\t],\n\t\t\"Registry manifest\",\n\t);\n\tif (typeof value.id !== \"string\" || value.id.trim() === \"\" || value.id.length > 256)\n\t\tthrow new PluginRegistryErrorV1(\"invalid_manifest\", t(\"Registry manifest id is invalid\"));\n\tif (typeof value.pluginVersion !== \"string\" || value.pluginVersion.trim() === \"\" || value.pluginVersion.length > 256)\n\t\tthrow new PluginRegistryErrorV1(\"invalid_manifest\", t(\"Registry manifest pluginVersion is invalid\"));\n\tif (typeof value.apiVersion !== \"string\" || value.apiVersion.trim() === \"\" || value.apiVersion.length > 256)\n\t\tthrow new PluginRegistryErrorV1(\"invalid_manifest\", t(\"Registry manifest apiVersion is invalid\"));\n\tif (value.minHostVersion === undefined && value.maxHostVersion === undefined)\n\t\tthrow new PluginRegistryErrorV1(\n\t\t\t\"invalid_manifest\",\n\t\t\tt(\"Published plugins must declare host version compatibility range: set minHostVersion and/or maxHostVersion\"),\n\t\t);\n\tlet bytes: number;\n\ttry {\n\t\tbytes = new TextEncoder().encode(JSON.stringify(manifest)).byteLength;\n\t} catch (error) {\n\t\tthrow new PluginRegistryErrorV1(\"invalid_manifest\", t(\"Registry manifest cannot be serialized\"), error);\n\t}\n\tif (bytes > MAX_PLUGIN_REGISTRY_MANIFEST_BYTES_V1)\n\t\tthrow new PluginRegistryErrorV1(\"payload_too_large\", t(\"Registry manifest exceeds the size limit\"));\n\treturn Object.freeze({ ...value } as unknown as PluginManifestV1);\n}\n\nfunction validateEnvelope(value: unknown): PluginRegistryManifestEnvelopeV1 {\n\tif (typeof value !== \"object\" || value === null || Array.isArray(value))\n\t\tthrow new PluginRegistryErrorV1(\"invalid_manifest\", t(\"Registry response entry must be an object\"));\n\tconst entry = value as Record<string, unknown>;\n\tassertAllowedKeys(\n\t\tentry,\n\t\t[\"manifest\", \"source\", \"manifestDigest\", \"signature\", \"distribution\"],\n\t\t\"Registry response entry\",\n\t);\n\tconst manifest = validateManifest(entry.manifest);\n\tconst source = validateSource(entry.source);\n\tconst manifestDigest = boundedString(entry.manifestDigest, \"manifestDigest\", MAX_PLUGIN_REGISTRY_PROOF_CHARS_V1);\n\tif (entry.signature !== undefined) boundedString(entry.signature, \"signature\", MAX_PLUGIN_REGISTRY_PROOF_CHARS_V1);\n\tlet distribution: PluginDistributionDescriptorV1 | undefined;\n\tif (entry.distribution !== undefined) {\n\t\ttry {\n\t\t\tdistribution = createPluginDistributionV1().validateDescriptor(entry.distribution);\n\t\t} catch (error) {\n\t\t\tthrow new PluginRegistryErrorV1(\"invalid_manifest\", t(\"Registry distribution descriptor is invalid\"), error);\n\t\t}\n\t\tif (\n\t\t\tdistribution.pluginId !== manifest.id ||\n\t\t\tdistribution.pluginVersion !== manifest.pluginVersion ||\n\t\t\tdistribution.manifestDigest !== manifestDigest\n\t\t)\n\t\t\tthrow new PluginRegistryErrorV1(\n\t\t\t\t\"invalid_manifest\",\n\t\t\t\tt(\"Registry distribution descriptor does not match the manifest identity\"),\n\t\t\t);\n\t}\n\treturn Object.freeze({\n\t\tmanifest,\n\t\tsource,\n\t\tmanifestDigest,\n\t\t...(entry.signature === undefined ? {} : { signature: entry.signature as string }),\n\t\t...(distribution === undefined ? {} : { distribution }),\n\t});\n}\n\nfunction validateMax(value: number | undefined): number {\n\tconst max = value ?? MAX_PLUGIN_REGISTRY_MANIFESTS_V1;\n\tif (!Number.isSafeInteger(max) || max < 1 || max > MAX_PLUGIN_REGISTRY_MANIFESTS_V1)\n\t\tthrow new PluginRegistryErrorV1(\n\t\t\t\"invalid_limit\",\n\t\t\tt(\"maxManifests must be an integer between 1 and {max}\", { max: MAX_PLUGIN_REGISTRY_MANIFESTS_V1 }),\n\t\t);\n\treturn max;\n}\n\nasync function validateSourceProof(\n\tentry: PluginRegistryManifestEnvelopeV1,\n\tverifier: PluginRegistryDigestVerifierV1,\n\tsourceVerifier: PluginSourceVerifierV1,\n): Promise<void> {\n\tconst actualDigest = pluginManifestDigestV1(entry.manifest);\n\tif (entry.manifestDigest !== actualDigest)\n\t\tthrow new PluginRegistryErrorV1(\n\t\t\t\"invalid_digest\",\n\t\t\tt(\"Manifest digest mismatch for {identity}\", {\n\t\t\t\tidentity: `${entry.manifest.id}@${entry.manifest.pluginVersion}`,\n\t\t\t}),\n\t\t);\n\ttry {\n\t\tconst result = await verifier.verify({\n\t\t\tmanifest: entry.manifest,\n\t\t\tsource: entry.source,\n\t\t\tmanifestDigest: actualDigest,\n\t\t\texpectedDigest: entry.manifestDigest,\n\t\t\tsignature: entry.signature,\n\t\t});\n\t\tif (result.status !== \"accepted\")\n\t\t\tthrow new PluginRegistryErrorV1(\"source_rejected\", result.reason ?? t(\"Registry source proof was rejected\"));\n\t} catch (error) {\n\t\tif (error instanceof PluginRegistryErrorV1) throw error;\n\t\tthrow new PluginRegistryErrorV1(\"source_rejected\", t(\"Registry source proof was rejected\"), error);\n\t}\n\tlet result: ReturnType<PluginSourceVerifierV1>;\n\ttry {\n\t\tresult = sourceVerifier({\n\t\t\tpluginId: entry.manifest.id,\n\t\t\tpluginVersion: entry.manifest.pluginVersion,\n\t\t\tsource: entry.source,\n\t\t\tmanifestDigest: actualDigest,\n\t\t});\n\t} catch (error) {\n\t\tthrow new PluginRegistryErrorV1(\"source_rejected\", t(\"Plugin source verifier failed\"), error);\n\t}\n\tif (result.status !== \"accepted\")\n\t\tthrow new PluginRegistryErrorV1(\"source_rejected\", result.reason ?? t(\"Plugin source was rejected\"));\n}\n\nfunction sourceIdentity(entries: readonly PluginRegistryManifestEnvelopeV1[]): string {\n\tconst sources = [...new Set(entries.map((entry) => entry.source))].sort((left, right) => left.localeCompare(right));\n\treturn sources.join(\",\");\n}\n\ninterface RegistryLoadV1 {\n\treadonly accepted: readonly PluginRegistryManifestEnvelopeV1[];\n\treadonly snapshot: PluginRegistrySnapshotV1;\n}\n\n/** Create a deterministic, host-injected registry client. */\nexport function createPluginRegistryV1(options: PluginRegistryOptionsV1): PluginRegistryV1 {\n\tconst maxManifests = validateMax(options.maxManifests);\n\tif (options.source === undefined || typeof options.source.list !== \"function\")\n\t\tthrow new PluginRegistryErrorV1(\"invalid_source\", t(\"Registry source must provide list()\"));\n\tif (options.source.source !== undefined) validateSource(options.source.source);\n\tif (options.verify === undefined || typeof options.verify.verify !== \"function\")\n\t\tthrow new PluginRegistryErrorV1(\"source_rejected\", t(\"Registry source/digest verifier is required\"));\n\tif (options.sourceVerifier === undefined || typeof options.sourceVerifier !== \"function\")\n\t\tthrow new PluginRegistryErrorV1(\"source_rejected\", t(\"Registry source verifier is required\"));\n\n\tconst load = async (input: { readonly signal?: AbortSignal } = {}): Promise<RegistryLoadV1> => {\n\t\tif (input.signal?.aborted)\n\t\t\tthrow new PluginRegistryErrorV1(\"cancelled\", t(\"Plugin registry operation was cancelled\"));\n\t\tlet raw: readonly PluginRegistryManifestEnvelopeV1[];\n\t\ttry {\n\t\t\traw = await options.source.list({ signal: input.signal });\n\t\t} catch (error) {\n\t\t\tif (isAbortLike(error, input.signal))\n\t\t\t\tthrow new PluginRegistryErrorV1(\"cancelled\", t(\"Plugin registry operation was cancelled\"), error);\n\t\t\tthrow new PluginRegistryErrorV1(\"source_rejected\", t(\"Plugin registry source failed\"), error);\n\t\t}\n\t\tif (input.signal?.aborted)\n\t\t\tthrow new PluginRegistryErrorV1(\"cancelled\", t(\"Plugin registry operation was cancelled\"));\n\t\tif (!Array.isArray(raw))\n\t\t\tthrow new PluginRegistryErrorV1(\"invalid_manifest\", t(\"Registry source must return an array\"));\n\t\tif (raw.length > maxManifests)\n\t\t\tthrow new PluginRegistryErrorV1(\"too_many_manifests\", t(\"Registry response contains too many manifests\"));\n\t\tconst entries = raw.map(validateEnvelope);\n\t\tconst payloadBytes = entries.reduce((total, entry) => {\n\t\t\tconst manifestBytes = new TextEncoder().encode(JSON.stringify(entry.manifest)).byteLength;\n\t\t\tconst distributionBytes =\n\t\t\t\tentry.distribution === undefined\n\t\t\t\t\t? 0\n\t\t\t\t\t: new TextEncoder().encode(JSON.stringify(entry.distribution)).byteLength;\n\t\t\treturn (\n\t\t\t\ttotal +\n\t\t\t\tmanifestBytes +\n\t\t\t\tdistributionBytes +\n\t\t\t\tnew TextEncoder().encode(entry.source).byteLength +\n\t\t\t\tnew TextEncoder().encode(entry.manifestDigest).byteLength +\n\t\t\t\t(entry.signature === undefined ? 0 : new TextEncoder().encode(entry.signature).byteLength)\n\t\t\t);\n\t\t}, 0);\n\t\tif (payloadBytes > MAX_PLUGIN_REGISTRY_PAYLOAD_BYTES_V1)\n\t\t\tthrow new PluginRegistryErrorV1(\"payload_too_large\", t(\"Registry response exceeds the aggregate size limit\"));\n\t\tconst seen = new Set<string>();\n\t\tconst accepted: PluginRegistryManifestEnvelopeV1[] = [];\n\t\tconst rejected: PluginRegistryRejectionV1[] = [];\n\t\tfor (const entry of entries) {\n\t\t\tconst identity = `${entry.manifest.id}@${entry.manifest.pluginVersion}`;\n\t\t\tif (seen.has(identity))\n\t\t\t\tthrow new PluginRegistryErrorV1(\n\t\t\t\t\t\"invalid_manifest\",\n\t\t\t\t\tt(\"Duplicate registry manifest: {identity}\", { identity }),\n\t\t\t\t);\n\t\t\tseen.add(identity);\n\t\t\ttry {\n\t\t\t\tawait validateSourceProof(entry, options.verify, options.sourceVerifier);\n\t\t\t} catch (error) {\n\t\t\t\tif (!(error instanceof PluginRegistryErrorV1)) throw error;\n\t\t\t\tif (error.cause !== undefined) throw error;\n\t\t\t\tif (error.code !== \"source_rejected\" && error.code !== \"invalid_digest\") throw error;\n\t\t\t\trejected.push({\n\t\t\t\t\tpluginId: entry.manifest.id,\n\t\t\t\t\tpluginVersion: entry.manifest.pluginVersion,\n\t\t\t\t\tcode: error.code === \"invalid_digest\" ? \"digest_rejected\" : \"source_rejected\",\n\t\t\t\t\treason:\n\t\t\t\t\t\terror.code === \"invalid_digest\" ? \"Manifest digest mismatch\" : \"Registry source proof was rejected\",\n\t\t\t\t});\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tif (input.signal?.aborted)\n\t\t\t\tthrow new PluginRegistryErrorV1(\"cancelled\", t(\"Plugin registry operation was cancelled\"));\n\t\t\taccepted.push(entry);\n\t\t}\n\t\tconst manifests = accepted.map((entry) => entry.manifest);\n\t\tconst catalog = buildPluginCatalogV1({\n\t\t\tmanifests,\n\t\t\thost: options.host,\n\t\t\tavailableCapabilities: options.availableCapabilities,\n\t\t\tmaxEntries: maxManifests,\n\t\t});\n\t\tconst publicEntries = Object.freeze(\n\t\t\t[...accepted]\n\t\t\t\t.sort((left, right) => {\n\t\t\t\t\tconst idOrder = left.manifest.id.localeCompare(right.manifest.id);\n\t\t\t\t\treturn idOrder === 0\n\t\t\t\t\t\t? comparePluginVersionsV1(right.manifest.pluginVersion, left.manifest.pluginVersion)\n\t\t\t\t\t\t: idOrder;\n\t\t\t\t})\n\t\t\t\t.map((entry) =>\n\t\t\t\t\tObject.freeze({\n\t\t\t\t\t\tpluginId: entry.manifest.id,\n\t\t\t\t\t\tpluginVersion: entry.manifest.pluginVersion,\n\t\t\t\t\t\tsource: entry.source,\n\t\t\t\t\t\tmanifestDigest: entry.manifestDigest,\n\t\t\t\t\t\tsigned: entry.signature !== undefined,\n\t\t\t\t\t}),\n\t\t\t\t),\n\t\t);\n\t\tconst catalogByIdentity = new Map(\n\t\t\tcatalog.entries.map((entry) => [`${entry.pluginId}@${entry.pluginVersion}`, entry] as const),\n\t\t);\n\t\tconst verified = Object.freeze(\n\t\t\tpublicEntries.flatMap((entry) => {\n\t\t\t\tconst catalogEntry = catalogByIdentity.get(`${entry.pluginId}@${entry.pluginVersion}`);\n\t\t\t\tif (catalogEntry?.resolution.status === \"installed-ready\")\n\t\t\t\t\treturn [{ ...entry, resolutionStatus: \"installed-ready\" as const }];\n\t\t\t\tconst reason = catalogEntry?.resolution.diagnostics[0]?.message ?? \"Plugin is incompatible with this host\";\n\t\t\t\trejected.push({\n\t\t\t\t\tpluginId: entry.pluginId,\n\t\t\t\t\tpluginVersion: entry.pluginVersion,\n\t\t\t\t\tcode: \"incompatible\",\n\t\t\t\t\treason,\n\t\t\t\t});\n\t\t\t\treturn [];\n\t\t\t}),\n\t\t);\n\t\treturn {\n\t\t\taccepted: Object.freeze(accepted),\n\t\t\tsnapshot: Object.freeze({\n\t\t\t\tversion: 1,\n\t\t\t\tsource:\n\t\t\t\t\toptions.source.source === undefined ? sourceIdentity(accepted) : validateSource(options.source.source),\n\t\t\t\tentries: publicEntries,\n\t\t\t\tcatalog,\n\t\t\t\tverified,\n\t\t\t\trejected: Object.freeze(rejected),\n\t\t\t}),\n\t\t};\n\t};\n\tconst listManifests = async (\n\t\tinput: { readonly signal?: AbortSignal } = {},\n\t): Promise<readonly PluginManifestV1[]> => {\n\t\tconst loaded = await load(input);\n\t\treturn Object.freeze(\n\t\t\tloaded.snapshot.catalog.entries.flatMap((catalogEntry) =>\n\t\t\t\tloaded.accepted\n\t\t\t\t\t.filter(\n\t\t\t\t\t\t(entry) =>\n\t\t\t\t\t\t\tentry.manifest.id === catalogEntry.pluginId &&\n\t\t\t\t\t\t\tentry.manifest.pluginVersion === catalogEntry.pluginVersion,\n\t\t\t\t\t)\n\t\t\t\t\t.map((entry) => entry.manifest),\n\t\t\t),\n\t\t);\n\t};\n\treturn {\n\t\tlist: async (input = {}) => (await load(input)).snapshot,\n\t\tlistManifests,\n\t\tresolve: async (input) => {\n\t\t\tconst loaded = await load({ signal: input.signal });\n\t\t\tconst verified = new Set(loaded.snapshot.verified.map((entry) => `${entry.pluginId}@${entry.pluginVersion}`));\n\t\t\tconst identity =\n\t\t\t\tinput.pluginVersion === undefined\n\t\t\t\t\t? loaded.snapshot.catalog.entries.find(\n\t\t\t\t\t\t\t(candidate) =>\n\t\t\t\t\t\t\t\tcandidate.pluginId === input.pluginId &&\n\t\t\t\t\t\t\t\tcandidate.resolution.status === \"installed-ready\" &&\n\t\t\t\t\t\t\t\tverified.has(`${candidate.pluginId}@${candidate.pluginVersion}`),\n\t\t\t\t\t\t)\n\t\t\t\t\t: loaded.snapshot.catalog.entries.find(\n\t\t\t\t\t\t\t(candidate) =>\n\t\t\t\t\t\t\t\tcandidate.pluginId === input.pluginId &&\n\t\t\t\t\t\t\t\tcandidate.pluginVersion === input.pluginVersion &&\n\t\t\t\t\t\t\t\tcandidate.resolution.status === \"installed-ready\" &&\n\t\t\t\t\t\t\t\tverified.has(`${candidate.pluginId}@${candidate.pluginVersion}`),\n\t\t\t\t\t\t);\n\t\t\tconst entry =\n\t\t\t\tidentity === undefined\n\t\t\t\t\t? undefined\n\t\t\t\t\t: loaded.accepted.find(\n\t\t\t\t\t\t\t(candidate) =>\n\t\t\t\t\t\t\t\tcandidate.manifest.id === identity.pluginId &&\n\t\t\t\t\t\t\t\tcandidate.manifest.pluginVersion === identity.pluginVersion,\n\t\t\t\t\t\t);\n\t\t\tif (entry === undefined) return undefined;\n\t\t\treturn Object.freeze({\n\t\t\t\tmanifest: entry.manifest,\n\t\t\t\tsource: entry.source,\n\t\t\t\texpectedDigest: entry.manifestDigest,\n\t\t\t\t...(entry.distribution === undefined ? {} : { distribution: entry.distribution }),\n\t\t\t});\n\t\t},\n\t};\n}\n"]}

package/dist/plugins/ecosystem/registry.js

@@ -1,3 +1,4 @@
+import { t } from "../../core/i18n/index.js";
 import { buildPluginCatalogV1, comparePluginVersionsV1 } from "./catalog.js";
 import { createPluginDistributionV1 } from "./distribution.js";
 import { pluginManifestDigestV1 } from "./updates.js";
@@ -27,19 +28,19 @@ function isAbortLike(error, signal) {
 }
 function boundedString(value, label, max, code = "invalid_source") {
     if (typeof value !== "string" || value.trim() === "" || value.length > max || /[\u0000-\u001f]/u.test(value)) {
-        throw new PluginRegistryErrorV1(code, `${label} must be a non-empty bounded string`);
+        throw new PluginRegistryErrorV1(code, t("{label} must be a non-empty bounded string", { label }));
     }
     return value;
 }
 function assertAllowedKeys(value, allowed, label) {
     const expected = new Set(allowed);
     if (Object.keys(value).some((key) => !expected.has(key)))
-        throw new PluginRegistryErrorV1("invalid_manifest", `${label} contains an unsupported field`);
+        throw new PluginRegistryErrorV1("invalid_manifest", t("{label} contains an unsupported field", { label }));
 }
 function validateSource(source) {
     const value = boundedString(source, "source", MAX_PLUGIN_REGISTRY_SOURCE_CHARS_V1);
     if (/^(?:file:|[a-zA-Z]:[\\/]|[\\/]{1,2}|\\\\)/iu.test(value) || /\s/u.test(value)) {
-        throw new PluginRegistryErrorV1("invalid_source", "Plugin registry source must be an opaque URI, not a local path");
+        throw new PluginRegistryErrorV1("invalid_source", t("Plugin registry source must be an opaque URI, not a local path"));
     }
     if (/^https?:\/\//iu.test(value)) {
         try {
@@ -48,14 +49,14 @@ function validateSource(source) {
             return `${parsed.origin}${pathname || "/"}`;
         }
         catch (error) {
-            throw new PluginRegistryErrorV1("invalid_source", "Plugin registry source URL is invalid", error);
+            throw new PluginRegistryErrorV1("invalid_source", t("Plugin registry source URL is invalid"), error);
         }
     }
     return value;
 }
 function validateManifest(manifest) {
     if (typeof manifest !== "object" || manifest === null || Array.isArray(manifest)) {
-        throw new PluginRegistryErrorV1("invalid_manifest", "Registry manifest must be an object");
+        throw new PluginRegistryErrorV1("invalid_manifest", t("Registry manifest must be an object"));
     }
     const value = manifest;
     assertAllowedKeys(value, [
@@ -70,27 +71,27 @@ function validateManifest(manifest) {
         "testOnly",
     ], "Registry manifest");
     if (typeof value.id !== "string" || value.id.trim() === "" || value.id.length > 256)
-        throw new PluginRegistryErrorV1("invalid_manifest", "Registry manifest id is invalid");
+        throw new PluginRegistryErrorV1("invalid_manifest", t("Registry manifest id is invalid"));
     if (typeof value.pluginVersion !== "string" || value.pluginVersion.trim() === "" || value.pluginVersion.length > 256)
-        throw new PluginRegistryErrorV1("invalid_manifest", "Registry manifest pluginVersion is invalid");
+        throw new PluginRegistryErrorV1("invalid_manifest", t("Registry manifest pluginVersion is invalid"));
     if (typeof value.apiVersion !== "string" || value.apiVersion.trim() === "" || value.apiVersion.length > 256)
-        throw new PluginRegistryErrorV1("invalid_manifest", "Registry manifest apiVersion is invalid");
+        throw new PluginRegistryErrorV1("invalid_manifest", t("Registry manifest apiVersion is invalid"));
     if (value.minHostVersion === undefined && value.maxHostVersion === undefined)
-        throw new PluginRegistryErrorV1("invalid_manifest", "Published plugins must declare host version compatibility range: set minHostVersion and/or maxHostVersion");
+        throw new PluginRegistryErrorV1("invalid_manifest", t("Published plugins must declare host version compatibility range: set minHostVersion and/or maxHostVersion"));
     let bytes;
     try {
         bytes = new TextEncoder().encode(JSON.stringify(manifest)).byteLength;
     }
     catch (error) {
-        throw new PluginRegistryErrorV1("invalid_manifest", "Registry manifest cannot be serialized", error);
+        throw new PluginRegistryErrorV1("invalid_manifest", t("Registry manifest cannot be serialized"), error);
     }
     if (bytes > MAX_PLUGIN_REGISTRY_MANIFEST_BYTES_V1)
-        throw new PluginRegistryErrorV1("payload_too_large", "Registry manifest exceeds the size limit");
+        throw new PluginRegistryErrorV1("payload_too_large", t("Registry manifest exceeds the size limit"));
     return Object.freeze({ ...value });
 }
 function validateEnvelope(value) {
     if (typeof value !== "object" || value === null || Array.isArray(value))
-        throw new PluginRegistryErrorV1("invalid_manifest", "Registry response entry must be an object");
+        throw new PluginRegistryErrorV1("invalid_manifest", t("Registry response entry must be an object"));
     const entry = value;
     assertAllowedKeys(entry, ["manifest", "source", "manifestDigest", "signature", "distribution"], "Registry response entry");
     const manifest = validateManifest(entry.manifest);
@@ -104,12 +105,12 @@ function validateEnvelope(value) {
             distribution = createPluginDistributionV1().validateDescriptor(entry.distribution);
         }
         catch (error) {
-            throw new PluginRegistryErrorV1("invalid_manifest", "Registry distribution descriptor is invalid", error);
+            throw new PluginRegistryErrorV1("invalid_manifest", t("Registry distribution descriptor is invalid"), error);
         }
         if (distribution.pluginId !== manifest.id ||
             distribution.pluginVersion !== manifest.pluginVersion ||
             distribution.manifestDigest !== manifestDigest)
-            throw new PluginRegistryErrorV1("invalid_manifest", "Registry distribution descriptor does not match the manifest identity");
+            throw new PluginRegistryErrorV1("invalid_manifest", t("Registry distribution descriptor does not match the manifest identity"));
     }
     return Object.freeze({
         manifest,
@@ -122,13 +123,15 @@ function validateEnvelope(value) {
 function validateMax(value) {
     const max = value ?? MAX_PLUGIN_REGISTRY_MANIFESTS_V1;
     if (!Number.isSafeInteger(max) || max < 1 || max > MAX_PLUGIN_REGISTRY_MANIFESTS_V1)
-        throw new PluginRegistryErrorV1("invalid_limit", `maxManifests must be an integer between 1 and ${MAX_PLUGIN_REGISTRY_MANIFESTS_V1}`);
+        throw new PluginRegistryErrorV1("invalid_limit", t("maxManifests must be an integer between 1 and {max}", { max: MAX_PLUGIN_REGISTRY_MANIFESTS_V1 }));
     return max;
 }
 async function validateSourceProof(entry, verifier, sourceVerifier) {
     const actualDigest = pluginManifestDigestV1(entry.manifest);
     if (entry.manifestDigest !== actualDigest)
-        throw new PluginRegistryErrorV1("invalid_digest", `Manifest digest mismatch for ${entry.manifest.id}@${entry.manifest.pluginVersion}`);
+        throw new PluginRegistryErrorV1("invalid_digest", t("Manifest digest mismatch for {identity}", {
+            identity: `${entry.manifest.id}@${entry.manifest.pluginVersion}`,
+        }));
     try {
         const result = await verifier.verify({
             manifest: entry.manifest,
@@ -138,12 +141,12 @@ async function validateSourceProof(entry, verifier, sourceVerifier) {
             signature: entry.signature,
         });
         if (result.status !== "accepted")
-            throw new PluginRegistryErrorV1("source_rejected", result.reason ?? "Registry source proof was rejected");
+            throw new PluginRegistryErrorV1("source_rejected", result.reason ?? t("Registry source proof was rejected"));
     }
     catch (error) {
         if (error instanceof PluginRegistryErrorV1)
             throw error;
-        throw new PluginRegistryErrorV1("source_rejected", "Registry source proof was rejected", error);
+        throw new PluginRegistryErrorV1("source_rejected", t("Registry source proof was rejected"), error);
     }
     let result;
     try {
@@ -155,10 +158,10 @@ async function validateSourceProof(entry, verifier, sourceVerifier) {
         });
     }
     catch (error) {
-        throw new PluginRegistryErrorV1("source_rejected", "Plugin source verifier failed", error);
+        throw new PluginRegistryErrorV1("source_rejected", t("Plugin source verifier failed"), error);
     }
     if (result.status !== "accepted")
-        throw new PluginRegistryErrorV1("source_rejected", result.reason ?? "Plugin source was rejected");
+        throw new PluginRegistryErrorV1("source_rejected", result.reason ?? t("Plugin source was rejected"));
 }
 function sourceIdentity(entries) {
     const sources = [...new Set(entries.map((entry) => entry.source))].sort((left, right) => left.localeCompare(right));
@@ -168,31 +171,31 @@ function sourceIdentity(entries) {
 export function createPluginRegistryV1(options) {
     const maxManifests = validateMax(options.maxManifests);
     if (options.source === undefined || typeof options.source.list !== "function")
-        throw new PluginRegistryErrorV1("invalid_source", "Registry source must provide list()");
+        throw new PluginRegistryErrorV1("invalid_source", t("Registry source must provide list()"));
     if (options.source.source !== undefined)
         validateSource(options.source.source);
     if (options.verify === undefined || typeof options.verify.verify !== "function")
-        throw new PluginRegistryErrorV1("source_rejected", "Registry source/digest verifier is required");
+        throw new PluginRegistryErrorV1("source_rejected", t("Registry source/digest verifier is required"));
     if (options.sourceVerifier === undefined || typeof options.sourceVerifier !== "function")
-        throw new PluginRegistryErrorV1("source_rejected", "Registry source verifier is required");
+        throw new PluginRegistryErrorV1("source_rejected", t("Registry source verifier is required"));
     const load = async (input = {}) => {
         if (input.signal?.aborted)
-            throw new PluginRegistryErrorV1("cancelled", "Plugin registry operation was cancelled");
+            throw new PluginRegistryErrorV1("cancelled", t("Plugin registry operation was cancelled"));
         let raw;
         try {
             raw = await options.source.list({ signal: input.signal });
         }
         catch (error) {
             if (isAbortLike(error, input.signal))
-                throw new PluginRegistryErrorV1("cancelled", "Plugin registry operation was cancelled", error);
-            throw new PluginRegistryErrorV1("source_rejected", "Plugin registry source failed", error);
+                throw new PluginRegistryErrorV1("cancelled", t("Plugin registry operation was cancelled"), error);
+            throw new PluginRegistryErrorV1("source_rejected", t("Plugin registry source failed"), error);
         }
         if (input.signal?.aborted)
-            throw new PluginRegistryErrorV1("cancelled", "Plugin registry operation was cancelled");
+            throw new PluginRegistryErrorV1("cancelled", t("Plugin registry operation was cancelled"));
         if (!Array.isArray(raw))
-            throw new PluginRegistryErrorV1("invalid_manifest", "Registry source must return an array");
+            throw new PluginRegistryErrorV1("invalid_manifest", t("Registry source must return an array"));
         if (raw.length > maxManifests)
-            throw new PluginRegistryErrorV1("too_many_manifests", "Registry response contains too many manifests");
+            throw new PluginRegistryErrorV1("too_many_manifests", t("Registry response contains too many manifests"));
         const entries = raw.map(validateEnvelope);
         const payloadBytes = entries.reduce((total, entry) => {
             const manifestBytes = new TextEncoder().encode(JSON.stringify(entry.manifest)).byteLength;
@@ -207,14 +210,14 @@ export function createPluginRegistryV1(options) {
                 (entry.signature === undefined ? 0 : new TextEncoder().encode(entry.signature).byteLength));
         }, 0);
         if (payloadBytes > MAX_PLUGIN_REGISTRY_PAYLOAD_BYTES_V1)
-            throw new PluginRegistryErrorV1("payload_too_large", "Registry response exceeds the aggregate size limit");
+            throw new PluginRegistryErrorV1("payload_too_large", t("Registry response exceeds the aggregate size limit"));
         const seen = new Set();
         const accepted = [];
         const rejected = [];
         for (const entry of entries) {
             const identity = `${entry.manifest.id}@${entry.manifest.pluginVersion}`;
             if (seen.has(identity))
-                throw new PluginRegistryErrorV1("invalid_manifest", `Duplicate registry manifest: ${identity}`);
+                throw new PluginRegistryErrorV1("invalid_manifest", t("Duplicate registry manifest: {identity}", { identity }));
             seen.add(identity);
             try {
                 await validateSourceProof(entry, options.verify, options.sourceVerifier);
@@ -235,7 +238,7 @@ export function createPluginRegistryV1(options) {
                 continue;
             }
             if (input.signal?.aborted)
-                throw new PluginRegistryErrorV1("cancelled", "Plugin registry operation was cancelled");
+                throw new PluginRegistryErrorV1("cancelled", t("Plugin registry operation was cancelled"));
             accepted.push(entry);
         }
         const manifests = accepted.map((entry) => entry.manifest);

package/dist/plugins/ecosystem/registry.js.map

@@ -1 +1 @@
-{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../../src/plugins/ecosystem/registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,uBAAuB,EAAgC,MAAM,cAAc,CAAC;AAE3G,OAAO,EAAE,0BAA0B,EAAE,MAAM,mBAAmB,CAAC;AAE/D,OAAO,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC;AAEtD,qEAAqE;AACrE,MAAM,CAAC,MAAM,qCAAqC,GAAG,EAAE,GAAG,IAAI,CAAC;AAC/D,gEAAgE;AAChE,MAAM,CAAC,MAAM,gCAAgC,GAAG,GAAG,CAAC;AACpD,wEAAwE;AACxE,MAAM,CAAC,MAAM,oCAAoC,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AACpE,+EAA+E;AAC/E,MAAM,CAAC,MAAM,mCAAmC,GAAG,IAAI,CAAC;AACxD,mEAAmE;AACnE,MAAM,CAAC,MAAM,kCAAkC,GAAG,GAAG,CAAC;AA0DtD,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IACtC,IAAI,CAA4B;IAChC,KAAK,CAAW;IAEzB,YAAY,IAA+B,EAAE,OAAe,EAAE,KAAe,EAAE;QAC9E,KAAK,CAAC,OAAO,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAC5D,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;QACpC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IAAA,CACnB;CACD;AAsDD,SAAS,WAAW,CAAC,KAAc,EAAE,MAA+B,EAAW;IAC9E,OAAO,CACN,MAAM,EAAE,OAAO,KAAK,IAAI;QACxB,CAAC,KAAK,YAAY,KAAK,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,YAAY,IAAI,KAAK,CAAC,IAAI,KAAK,kBAAkB,CAAC,CAAC,CAC9F,CAAC;AAAA,CACF;AAED,SAAS,aAAa,CACrB,KAAc,EACd,KAAa,EACb,GAAW,EACX,IAAI,GAA8B,gBAAgB,EACzC;IACT,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG,IAAI,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9G,MAAM,IAAI,qBAAqB,CAAC,IAAI,EAAE,GAAG,KAAK,qCAAqC,CAAC,CAAC;IACtF,CAAC;IACD,OAAO,KAAK,CAAC;AAAA,CACb;AAED,SAAS,iBAAiB,CAAC,KAA8B,EAAE,OAA0B,EAAE,KAAa,EAAQ;IAC3G,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;IAClC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACvD,MAAM,IAAI,qBAAqB,CAAC,kBAAkB,EAAE,GAAG,KAAK,gCAAgC,CAAC,CAAC;AAAA,CAC/F;AAED,SAAS,cAAc,CAAC,MAAe,EAAU;IAChD,MAAM,KAAK,GAAG,aAAa,CAAC,MAAM,EAAE,QAAQ,EAAE,mCAAmC,CAAC,CAAC;IACnF,IAAI,6CAA6C,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACpF,MAAM,IAAI,qBAAqB,CAC9B,gBAAgB,EAChB,gEAAgE,CAChE,CAAC;IACH,CAAC;IACD,IAAI,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAClC,IAAI,CAAC;YACJ,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;YAC9B,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,KAAG,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC;YACtG,OAAO,GAAG,MAAM,CAAC,MAAM,GAAG,QAAQ,IAAI,GAAG,EAAE,CAAC;QAC7C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,IAAI,qBAAqB,CAAC,gBAAgB,EAAE,uCAAuC,EAAE,KAAK,CAAC,CAAC;QACnG,CAAC;IACF,CAAC;IACD,OAAO,KAAK,CAAC;AAAA,CACb;AAED,SAAS,gBAAgB,CAAC,QAAiB,EAAoB;IAC9D,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAClF,MAAM,IAAI,qBAAqB,CAAC,kBAAkB,EAAE,qCAAqC,CAAC,CAAC;IAC5F,CAAC;IACD,MAAM,KAAK,GAAG,QAAmC,CAAC;IAClD,iBAAiB,CAChB,KAAK,EACL;QACC,IAAI;QACJ,eAAe;QACf,YAAY;QACZ,gBAAgB;QAChB,gBAAgB;QAChB,gBAAgB;QAChB,UAAU;QACV,UAAU;QACV,UAAU;KACV,EACD,mBAAmB,CACnB,CAAC;IACF,IAAI,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ,IAAI,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC,EAAE,CAAC,MAAM,GAAG,GAAG;QAClF,MAAM,IAAI,qBAAqB,CAAC,kBAAkB,EAAE,iCAAiC,CAAC,CAAC;IACxF,IAAI,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ,IAAI,KAAK,CAAC,aAAa,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC,aAAa,CAAC,MAAM,GAAG,GAAG;QACnH,MAAM,IAAI,qBAAqB,CAAC,kBAAkB,EAAE,4CAA4C,CAAC,CAAC;IACnG,IAAI,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,GAAG,GAAG;QAC1G,MAAM,IAAI,qBAAqB,CAAC,kBAAkB,EAAE,yCAAyC,CAAC,CAAC;IAChG,IAAI,KAAK,CAAC,cAAc,KAAK,SAAS,IAAI,KAAK,CAAC,cAAc,KAAK,SAAS;QAC3E,MAAM,IAAI,qBAAqB,CAC9B,kBAAkB,EAClB,2GAA2G,CAC3G,CAAC;IACH,IAAI,KAAa,CAAC;IAClB,IAAI,CAAC;QACJ,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC;IACvE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,IAAI,qBAAqB,CAAC,kBAAkB,EAAE,wCAAwC,EAAE,KAAK,CAAC,CAAC;IACtG,CAAC;IACD,IAAI,KAAK,GAAG,qCAAqC;QAChD,MAAM,IAAI,qBAAqB,CAAC,mBAAmB,EAAE,0CAA0C,CAAC,CAAC;IAClG,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,KAAK,EAAiC,CAAC,CAAC;AAAA,CAClE;AAED,SAAS,gBAAgB,CAAC,KAAc,EAAoC;IAC3E,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACtE,MAAM,IAAI,qBAAqB,CAAC,kBAAkB,EAAE,2CAA2C,CAAC,CAAC;IAClG,MAAM,KAAK,GAAG,KAAgC,CAAC;IAC/C,iBAAiB,CAChB,KAAK,EACL,CAAC,UAAU,EAAE,QAAQ,EAAE,gBAAgB,EAAE,WAAW,EAAE,cAAc,CAAC,EACrE,yBAAyB,CACzB,CAAC;IACF,MAAM,QAAQ,GAAG,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAClD,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5C,MAAM,cAAc,GAAG,aAAa,CAAC,KAAK,CAAC,cAAc,EAAE,gBAAgB,EAAE,kCAAkC,CAAC,CAAC;IACjH,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS;QAAE,aAAa,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,EAAE,kCAAkC,CAAC,CAAC;IACnH,IAAI,YAAwD,CAAC;IAC7D,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QACtC,IAAI,CAAC;YACJ,YAAY,GAAG,0BAA0B,EAAE,CAAC,kBAAkB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QACpF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,IAAI,qBAAqB,CAAC,kBAAkB,EAAE,6CAA6C,EAAE,KAAK,CAAC,CAAC;QAC3G,CAAC;QACD,IACC,YAAY,CAAC,QAAQ,KAAK,QAAQ,CAAC,EAAE;YACrC,YAAY,CAAC,aAAa,KAAK,QAAQ,CAAC,aAAa;YACrD,YAAY,CAAC,cAAc,KAAK,cAAc;YAE9C,MAAM,IAAI,qBAAqB,CAC9B,kBAAkB,EAClB,uEAAuE,CACvE,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACpB,QAAQ;QACR,MAAM;QACN,cAAc;QACd,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAmB,EAAE,CAAC;QAClF,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC;KACvD,CAAC,CAAC;AAAA,CACH;AAED,SAAS,WAAW,CAAC,KAAyB,EAAU;IACvD,MAAM,GAAG,GAAG,KAAK,IAAI,gCAAgC,CAAC;IACtD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,GAAG,GAAG,gCAAgC;QAClF,MAAM,IAAI,qBAAqB,CAC9B,eAAe,EACf,iDAAiD,gCAAgC,EAAE,CACnF,CAAC;IACH,OAAO,GAAG,CAAC;AAAA,CACX;AAED,KAAK,UAAU,mBAAmB,CACjC,KAAuC,EACvC,QAAwC,EACxC,cAAsC,EACtB;IAChB,MAAM,YAAY,GAAG,sBAAsB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC5D,IAAI,KAAK,CAAC,cAAc,KAAK,YAAY;QACxC,MAAM,IAAI,qBAAqB,CAC9B,gBAAgB,EAChB,gCAAgC,KAAK,CAAC,QAAQ,CAAC,EAAE,IAAI,KAAK,CAAC,QAAQ,CAAC,aAAa,EAAE,CACnF,CAAC;IACH,IAAI,CAAC;QACJ,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC;YACpC,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,cAAc,EAAE,YAAY;YAC5B,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,SAAS,EAAE,KAAK,CAAC,SAAS;SAC1B,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU;YAC/B,MAAM,IAAI,qBAAqB,CAAC,iBAAiB,EAAE,MAAM,CAAC,MAAM,IAAI,oCAAoC,CAAC,CAAC;IAC5G,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAI,KAAK,YAAY,qBAAqB;YAAE,MAAM,KAAK,CAAC;QACxD,MAAM,IAAI,qBAAqB,CAAC,iBAAiB,EAAE,oCAAoC,EAAE,KAAK,CAAC,CAAC;IACjG,CAAC;IACD,IAAI,MAA0C,CAAC;IAC/C,IAAI,CAAC;QACJ,MAAM,GAAG,cAAc,CAAC;YACvB,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE;YAC3B,aAAa,EAAE,KAAK,CAAC,QAAQ,CAAC,aAAa;YAC3C,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,cAAc,EAAE,YAAY;SAC5B,CAAC,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,IAAI,qBAAqB,CAAC,iBAAiB,EAAE,+BAA+B,EAAE,KAAK,CAAC,CAAC;IAC5F,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU;QAC/B,MAAM,IAAI,qBAAqB,CAAC,iBAAiB,EAAE,MAAM,CAAC,MAAM,IAAI,4BAA4B,CAAC,CAAC;AAAA,CACnG;AAED,SAAS,cAAc,CAAC,OAAoD,EAAU;IACrF,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;IACpH,OAAO,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAAA,CACzB;AAOD,6DAA6D;AAC7D,MAAM,UAAU,sBAAsB,CAAC,OAAgC,EAAoB;IAC1F,MAAM,YAAY,GAAG,WAAW,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACvD,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,UAAU;QAC5E,MAAM,IAAI,qBAAqB,CAAC,gBAAgB,EAAE,qCAAqC,CAAC,CAAC;IAC1F,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS;QAAE,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC/E,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,OAAO,CAAC,MAAM,CAAC,MAAM,KAAK,UAAU;QAC9E,MAAM,IAAI,qBAAqB,CAAC,iBAAiB,EAAE,6CAA6C,CAAC,CAAC;IACnG,IAAI,OAAO,CAAC,cAAc,KAAK,SAAS,IAAI,OAAO,OAAO,CAAC,cAAc,KAAK,UAAU;QACvF,MAAM,IAAI,qBAAqB,CAAC,iBAAiB,EAAE,sCAAsC,CAAC,CAAC;IAE5F,MAAM,IAAI,GAAG,KAAK,EAAE,KAAK,GAAsC,EAAE,EAA2B,EAAE,CAAC;QAC9F,IAAI,KAAK,CAAC,MAAM,EAAE,OAAO;YACxB,MAAM,IAAI,qBAAqB,CAAC,WAAW,EAAE,yCAAyC,CAAC,CAAC;QACzF,IAAI,GAAgD,CAAC;QACrD,IAAI,CAAC;YACJ,GAAG,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QAC3D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,WAAW,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC;gBACnC,MAAM,IAAI,qBAAqB,CAAC,WAAW,EAAE,yCAAyC,EAAE,KAAK,CAAC,CAAC;YAChG,MAAM,IAAI,qBAAqB,CAAC,iBAAiB,EAAE,+BAA+B,EAAE,KAAK,CAAC,CAAC;QAC5F,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,EAAE,OAAO;YACxB,MAAM,IAAI,qBAAqB,CAAC,WAAW,EAAE,yCAAyC,CAAC,CAAC;QACzF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;YACtB,MAAM,IAAI,qBAAqB,CAAC,kBAAkB,EAAE,sCAAsC,CAAC,CAAC;QAC7F,IAAI,GAAG,CAAC,MAAM,GAAG,YAAY;YAC5B,MAAM,IAAI,qBAAqB,CAAC,oBAAoB,EAAE,+CAA+C,CAAC,CAAC;QACxG,MAAM,OAAO,GAAG,GAAG,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;QAC1C,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC;YACrD,MAAM,aAAa,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC;YAC1F,MAAM,iBAAiB,GACtB,KAAK,CAAC,YAAY,KAAK,SAAS;gBAC/B,CAAC,CAAC,CAAC;gBACH,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU,CAAC;YAC5E,OAAO,CACN,KAAK;gBACL,aAAa;gBACb,iBAAiB;gBACjB,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,UAAU;gBACjD,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,UAAU;gBACzD,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,UAAU,CAAC,CAC1F,CAAC;QAAA,CACF,EAAE,CAAC,CAAC,CAAC;QACN,IAAI,YAAY,GAAG,oCAAoC;YACtD,MAAM,IAAI,qBAAqB,CAAC,mBAAmB,EAAE,oDAAoD,CAAC,CAAC;QAC5G,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,MAAM,QAAQ,GAAuC,EAAE,CAAC;QACxD,MAAM,QAAQ,GAAgC,EAAE,CAAC;QACjD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC7B,MAAM,QAAQ,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC,EAAE,IAAI,KAAK,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC;YACxE,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC;gBACrB,MAAM,IAAI,qBAAqB,CAAC,kBAAkB,EAAE,gCAAgC,QAAQ,EAAE,CAAC,CAAC;YACjG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACnB,IAAI,CAAC;gBACJ,MAAM,mBAAmB,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;YAC1E,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,IAAI,CAAC,CAAC,KAAK,YAAY,qBAAqB,CAAC;oBAAE,MAAM,KAAK,CAAC;gBAC3D,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS;oBAAE,MAAM,KAAK,CAAC;gBAC3C,IAAI,KAAK,CAAC,IAAI,KAAK,iBAAiB,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB;oBAAE,MAAM,KAAK,CAAC;gBACrF,QAAQ,CAAC,IAAI,CAAC;oBACb,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE;oBAC3B,aAAa,EAAE,KAAK,CAAC,QAAQ,CAAC,aAAa;oBAC3C,IAAI,EAAE,KAAK,CAAC,IAAI,KAAK,gBAAgB,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,iBAAiB;oBAC7E,MAAM,EACL,KAAK,CAAC,IAAI,KAAK,gBAAgB,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,oCAAoC;iBACpG,CAAC,CAAC;gBACH,SAAS;YACV,CAAC;YACD,IAAI,KAAK,CAAC,MAAM,EAAE,OAAO;gBACxB,MAAM,IAAI,qBAAqB,CAAC,WAAW,EAAE,yCAAyC,CAAC,CAAC;YACzF,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;QACD,MAAM,SAAS,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC1D,MAAM,OAAO,GAAG,oBAAoB,CAAC;YACpC,SAAS;YACT,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,qBAAqB,EAAE,OAAO,CAAC,qBAAqB;YACpD,UAAU,EAAE,YAAY;SACxB,CAAC,CAAC;QACH,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAClC,CAAC,GAAG,QAAQ,CAAC;aACX,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YACtB,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YAClE,OAAO,OAAO,KAAK,CAAC;gBACnB,CAAC,CAAC,uBAAuB,CAAC,KAAK,CAAC,QAAQ,CAAC,aAAa,EAAE,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC;gBACpF,CAAC,CAAC,OAAO,CAAC;QAAA,CACX,CAAC;aACD,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACd,MAAM,CAAC,MAAM,CAAC;YACb,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE;YAC3B,aAAa,EAAE,KAAK,CAAC,QAAQ,CAAC,aAAa;YAC3C,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,MAAM,EAAE,KAAK,CAAC,SAAS,KAAK,SAAS;SACrC,CAAC,CACF,CACF,CAAC;QACF,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAChC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,GAAG,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,aAAa,EAAE,EAAE,KAAK,CAAU,CAAC,CAC5F,CAAC;QACF,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAC7B,aAAa,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;YAChC,MAAM,YAAY,GAAG,iBAAiB,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC;YACvF,IAAI,YAAY,EAAE,UAAU,CAAC,MAAM,KAAK,iBAAiB;gBACxD,OAAO,CAAC,EAAE,GAAG,KAAK,EAAE,gBAAgB,EAAE,iBAA0B,EAAE,CAAC,CAAC;YACrE,MAAM,MAAM,GAAG,YAAY,EAAE,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI,uCAAuC,CAAC;YAC3G,QAAQ,CAAC,IAAI,CAAC;gBACb,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,aAAa,EAAE,KAAK,CAAC,aAAa;gBAClC,IAAI,EAAE,cAAc;gBACpB,MAAM;aACN,CAAC,CAAC;YACH,OAAO,EAAE,CAAC;QAAA,CACV,CAAC,CACF,CAAC;QACF,OAAO;YACN,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC;YACjC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC;gBACvB,OAAO,EAAE,CAAC;gBACV,MAAM,EACL,OAAO,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC;gBACvG,OAAO,EAAE,aAAa;gBACtB,OAAO;gBACP,QAAQ;gBACR,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC;aACjC,CAAC;SACF,CAAC;IAAA,CACF,CAAC;IACF,MAAM,aAAa,GAAG,KAAK,EAC1B,KAAK,GAAsC,EAAE,EACN,EAAE,CAAC;QAC1C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,CAAC;QACjC,OAAO,MAAM,CAAC,MAAM,CACnB,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,YAAY,EAAE,EAAE,CACxD,MAAM,CAAC,QAAQ;aACb,MAAM,CACN,CAAC,KAAK,EAAE,EAAE,CACT,KAAK,CAAC,QAAQ,CAAC,EAAE,KAAK,YAAY,CAAC,QAAQ;YAC3C,KAAK,CAAC,QAAQ,CAAC,aAAa,KAAK,YAAY,CAAC,aAAa,CAC5D;aACA,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAChC,CACD,CAAC;IAAA,CACF,CAAC;IACF,OAAO;QACN,IAAI,EAAE,KAAK,EAAE,KAAK,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ;QACxD,aAAa;QACb,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC;YACzB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;YACpD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC;YAC9G,MAAM,QAAQ,GACb,KAAK,CAAC,aAAa,KAAK,SAAS;gBAChC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CACpC,CAAC,SAAS,EAAE,EAAE,CACb,SAAS,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ;oBACrC,SAAS,CAAC,UAAU,CAAC,MAAM,KAAK,iBAAiB;oBACjD,QAAQ,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC,QAAQ,IAAI,SAAS,CAAC,aAAa,EAAE,CAAC,CACjE;gBACF,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CACpC,CAAC,SAAS,EAAE,EAAE,CACb,SAAS,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ;oBACrC,SAAS,CAAC,aAAa,KAAK,KAAK,CAAC,aAAa;oBAC/C,SAAS,CAAC,UAAU,CAAC,MAAM,KAAK,iBAAiB;oBACjD,QAAQ,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC,QAAQ,IAAI,SAAS,CAAC,aAAa,EAAE,CAAC,CACjE,CAAC;YACL,MAAM,KAAK,GACV,QAAQ,KAAK,SAAS;gBACrB,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CACpB,CAAC,SAAS,EAAE,EAAE,CACb,SAAS,CAAC,QAAQ,CAAC,EAAE,KAAK,QAAQ,CAAC,QAAQ;oBAC3C,SAAS,CAAC,QAAQ,CAAC,aAAa,KAAK,QAAQ,CAAC,aAAa,CAC5D,CAAC;YACL,IAAI,KAAK,KAAK,SAAS;gBAAE,OAAO,SAAS,CAAC;YAC1C,OAAO,MAAM,CAAC,MAAM,CAAC;gBACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,cAAc,EAAE,KAAK,CAAC,cAAc;gBACpC,GAAG,CAAC,KAAK,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC;aACjF,CAAC,CAAC;QAAA,CACH;KACD,CAAC;AAAA,CACF","sourcesContent":["import { buildPluginCatalogV1, comparePluginVersionsV1, type PluginCatalogSnapshotV1 } from \"./catalog.ts\";\nimport type { PluginDistributionDescriptorV1 } from \"./distribution.ts\";\nimport { createPluginDistributionV1 } from \"./distribution.ts\";\nimport type { CapabilityRefV1, HostFactsV1, PluginManifestV1, PluginSourceVerifierV1 } from \"./types.ts\";\nimport { pluginManifestDigestV1 } from \"./updates.ts\";\n\n/** Maximum manifest JSON bytes accepted by the registry boundary. */\nexport const MAX_PLUGIN_REGISTRY_MANIFEST_BYTES_V1 = 64 * 1024;\n/** Maximum number of manifests returned by one source query. */\nexport const MAX_PLUGIN_REGISTRY_MANIFESTS_V1 = 256;\n/** Maximum aggregate manifest metadata returned by one source query. */\nexport const MAX_PLUGIN_REGISTRY_PAYLOAD_BYTES_V1 = 4 * 1024 * 1024;\n/** Maximum source URI length; sources are identifiers, never package paths. */\nexport const MAX_PLUGIN_REGISTRY_SOURCE_CHARS_V1 = 2048;\n/** Maximum digest/signature text length accepted from a source. */\nexport const MAX_PLUGIN_REGISTRY_PROOF_CHARS_V1 = 512;\n\nexport interface PluginRegistryManifestEnvelopeV1 {\n\treadonly manifest: PluginManifestV1;\n\treadonly source: string;\n\treadonly manifestDigest: string;\n\t/** Optional host- or registry-supplied signature. The verifier owns semantics. */\n\treadonly signature?: string;\n\t/** Optional signed artifact descriptor bound to this exact manifest identity. */\n\treadonly distribution?: PluginDistributionDescriptorV1;\n}\n\n/**\n * A transport-neutral registry source. Hosts inject HTTP, filesystem, or\n * package-manager implementations. The registry never receives package bytes\n * and never exposes source response bodies to the model context.\n */\nexport interface PluginRegistrySourceV1 {\n\t/** Optional stable source identity shown in diagnostics; never a local path. */\n\treadonly source?: string;\n\treadonly list: (input: { readonly signal?: AbortSignal }) => Promise<readonly PluginRegistryManifestEnvelopeV1[]>;\n}\n\nexport interface PluginRegistryDigestVerifierV1 {\n\treadonly verify: (input: {\n\t\treadonly manifest: PluginManifestV1;\n\t\treadonly source: string;\n\t\treadonly manifestDigest: string;\n\t\treadonly expectedDigest?: string;\n\t\treadonly signature?: string;\n\t}) =>\n\t\t| { readonly status: \"accepted\" }\n\t\t| { readonly status: \"rejected\"; readonly reason?: string }\n\t\t| Promise<{ readonly status: \"accepted\" } | { readonly status: \"rejected\"; readonly reason?: string }>;\n}\n\nexport interface PluginRegistryOptionsV1 {\n\treadonly source: PluginRegistrySourceV1;\n\treadonly host: HostFactsV1;\n\t/** Required digest/signature verifier. No implicit trust fallback. */\n\treadonly verify: PluginRegistryDigestVerifierV1;\n\t/** Existing source verifier contract is mandatory at the registry boundary. */\n\treadonly sourceVerifier: PluginSourceVerifierV1;\n\treadonly availableCapabilities?: readonly CapabilityRefV1[];\n\treadonly maxManifests?: number;\n}\n\nexport type PluginRegistryErrorCodeV1 =\n\t| \"cancelled\"\n\t| \"invalid_limit\"\n\t| \"source_rejected\"\n\t| \"invalid_manifest\"\n\t| \"invalid_source\"\n\t| \"invalid_digest\"\n\t| \"payload_too_large\"\n\t| \"too_many_manifests\"\n\t| \"incompatible\";\n\nexport class PluginRegistryErrorV1 extends Error {\n\treadonly code: PluginRegistryErrorCodeV1;\n\treadonly cause?: unknown;\n\n\tconstructor(code: PluginRegistryErrorCodeV1, message: string, cause?: unknown) {\n\t\tsuper(message, cause === undefined ? undefined : { cause });\n\t\tthis.name = \"PluginRegistryErrorV1\";\n\t\tthis.code = code;\n\t\tthis.cause = cause;\n\t}\n}\n\nexport interface PluginRegistryEntryV1 {\n\treadonly pluginId: string;\n\treadonly pluginVersion: string;\n\treadonly source: string;\n\treadonly manifestDigest: string;\n\treadonly signed: boolean;\n}\n\nexport type PluginRegistryRejectionCodeV1 = \"source_rejected\" | \"digest_rejected\" | \"incompatible\";\n\nexport interface PluginRegistryRejectionV1 {\n\treadonly pluginId: string;\n\treadonly pluginVersion: string;\n\treadonly code: PluginRegistryRejectionCodeV1;\n\treadonly reason: string;\n}\n\nexport interface PluginRegistryVerifiedEntryV1 extends PluginRegistryEntryV1 {\n\treadonly resolutionStatus: \"installed-ready\";\n}\n\nexport interface PluginRegistrySnapshotV1 {\n\treadonly version: 1;\n\treadonly source: string;\n\treadonly entries: readonly PluginRegistryEntryV1[];\n\treadonly catalog: PluginCatalogSnapshotV1;\n\t/** Only entries that passed proof validation and host compatibility. */\n\treadonly verified: readonly PluginRegistryVerifiedEntryV1[];\n\t/** Platform/API/test-only entries remain visible in catalog but are not verified. */\n\treadonly rejected: readonly PluginRegistryRejectionV1[];\n}\n\n/** Host-side package projection; package bytes never cross this boundary. */\nexport interface PluginRegistryResolvedPackageV1 {\n\treadonly manifest: PluginManifestV1;\n\treadonly source: string;\n\treadonly expectedDigest: string;\n\treadonly distribution?: PluginDistributionDescriptorV1;\n}\n\nexport interface PluginRegistryV1 {\n\treadonly list: (input?: { readonly signal?: AbortSignal }) => Promise<PluginRegistrySnapshotV1>;\n\t/** Optional host-side resolver. Older custom registry implementations may omit it. */\n\treadonly resolve?: (input: {\n\t\treadonly pluginId: string;\n\t\treadonly pluginVersion?: string;\n\t\treadonly signal?: AbortSignal;\n\t}) => Promise<PluginRegistryResolvedPackageV1 | undefined>;\n\t/** Optional host-side manifest projection used by the CLI catalog command. */\n\treadonly listManifests?: (input?: { readonly signal?: AbortSignal }) => Promise<readonly PluginManifestV1[]>;\n}\n\nfunction isAbortLike(error: unknown, signal: AbortSignal | undefined): boolean {\n\treturn (\n\t\tsignal?.aborted === true ||\n\t\t(error instanceof Error && (error.name === \"AbortError\" || error.name === \"AbortSignalError\"))\n\t);\n}\n\nfunction boundedString(\n\tvalue: unknown,\n\tlabel: string,\n\tmax: number,\n\tcode: PluginRegistryErrorCodeV1 = \"invalid_source\",\n): string {\n\tif (typeof value !== \"string\" || value.trim() === \"\" || value.length > max || /[\\u0000-\\u001f]/u.test(value)) {\n\t\tthrow new PluginRegistryErrorV1(code, `${label} must be a non-empty bounded string`);\n\t}\n\treturn value;\n}\n\nfunction assertAllowedKeys(value: Record<string, unknown>, allowed: readonly string[], label: string): void {\n\tconst expected = new Set(allowed);\n\tif (Object.keys(value).some((key) => !expected.has(key)))\n\t\tthrow new PluginRegistryErrorV1(\"invalid_manifest\", `${label} contains an unsupported field`);\n}\n\nfunction validateSource(source: unknown): string {\n\tconst value = boundedString(source, \"source\", MAX_PLUGIN_REGISTRY_SOURCE_CHARS_V1);\n\tif (/^(?:file:|[a-zA-Z]:[\\\\/]|[\\\\/]{1,2}|\\\\\\\\)/iu.test(value) || /\\s/u.test(value)) {\n\t\tthrow new PluginRegistryErrorV1(\n\t\t\t\"invalid_source\",\n\t\t\t\"Plugin registry source must be an opaque URI, not a local path\",\n\t\t);\n\t}\n\tif (/^https?:\\/\\//iu.test(value)) {\n\t\ttry {\n\t\t\tconst parsed = new URL(value);\n\t\t\tconst pathname = parsed.pathname.length > 512 ? `${parsed.pathname.slice(0, 511)}…` : parsed.pathname;\n\t\t\treturn `${parsed.origin}${pathname || \"/\"}`;\n\t\t} catch (error) {\n\t\t\tthrow new PluginRegistryErrorV1(\"invalid_source\", \"Plugin registry source URL is invalid\", error);\n\t\t}\n\t}\n\treturn value;\n}\n\nfunction validateManifest(manifest: unknown): PluginManifestV1 {\n\tif (typeof manifest !== \"object\" || manifest === null || Array.isArray(manifest)) {\n\t\tthrow new PluginRegistryErrorV1(\"invalid_manifest\", \"Registry manifest must be an object\");\n\t}\n\tconst value = manifest as Record<string, unknown>;\n\tassertAllowedKeys(\n\t\tvalue,\n\t\t[\n\t\t\t\"id\",\n\t\t\t\"pluginVersion\",\n\t\t\t\"apiVersion\",\n\t\t\t\"minHostVersion\",\n\t\t\t\"maxHostVersion\",\n\t\t\t\"capabilityRefs\",\n\t\t\t\"requires\",\n\t\t\t\"platform\",\n\t\t\t\"testOnly\",\n\t\t],\n\t\t\"Registry manifest\",\n\t);\n\tif (typeof value.id !== \"string\" || value.id.trim() === \"\" || value.id.length > 256)\n\t\tthrow new PluginRegistryErrorV1(\"invalid_manifest\", \"Registry manifest id is invalid\");\n\tif (typeof value.pluginVersion !== \"string\" || value.pluginVersion.trim() === \"\" || value.pluginVersion.length > 256)\n\t\tthrow new PluginRegistryErrorV1(\"invalid_manifest\", \"Registry manifest pluginVersion is invalid\");\n\tif (typeof value.apiVersion !== \"string\" || value.apiVersion.trim() === \"\" || value.apiVersion.length > 256)\n\t\tthrow new PluginRegistryErrorV1(\"invalid_manifest\", \"Registry manifest apiVersion is invalid\");\n\tif (value.minHostVersion === undefined && value.maxHostVersion === undefined)\n\t\tthrow new PluginRegistryErrorV1(\n\t\t\t\"invalid_manifest\",\n\t\t\t\"Published plugins must declare host version compatibility range: set minHostVersion and/or maxHostVersion\",\n\t\t);\n\tlet bytes: number;\n\ttry {\n\t\tbytes = new TextEncoder().encode(JSON.stringify(manifest)).byteLength;\n\t} catch (error) {\n\t\tthrow new PluginRegistryErrorV1(\"invalid_manifest\", \"Registry manifest cannot be serialized\", error);\n\t}\n\tif (bytes > MAX_PLUGIN_REGISTRY_MANIFEST_BYTES_V1)\n\t\tthrow new PluginRegistryErrorV1(\"payload_too_large\", \"Registry manifest exceeds the size limit\");\n\treturn Object.freeze({ ...value } as unknown as PluginManifestV1);\n}\n\nfunction validateEnvelope(value: unknown): PluginRegistryManifestEnvelopeV1 {\n\tif (typeof value !== \"object\" || value === null || Array.isArray(value))\n\t\tthrow new PluginRegistryErrorV1(\"invalid_manifest\", \"Registry response entry must be an object\");\n\tconst entry = value as Record<string, unknown>;\n\tassertAllowedKeys(\n\t\tentry,\n\t\t[\"manifest\", \"source\", \"manifestDigest\", \"signature\", \"distribution\"],\n\t\t\"Registry response entry\",\n\t);\n\tconst manifest = validateManifest(entry.manifest);\n\tconst source = validateSource(entry.source);\n\tconst manifestDigest = boundedString(entry.manifestDigest, \"manifestDigest\", MAX_PLUGIN_REGISTRY_PROOF_CHARS_V1);\n\tif (entry.signature !== undefined) boundedString(entry.signature, \"signature\", MAX_PLUGIN_REGISTRY_PROOF_CHARS_V1);\n\tlet distribution: PluginDistributionDescriptorV1 | undefined;\n\tif (entry.distribution !== undefined) {\n\t\ttry {\n\t\t\tdistribution = createPluginDistributionV1().validateDescriptor(entry.distribution);\n\t\t} catch (error) {\n\t\t\tthrow new PluginRegistryErrorV1(\"invalid_manifest\", \"Registry distribution descriptor is invalid\", error);\n\t\t}\n\t\tif (\n\t\t\tdistribution.pluginId !== manifest.id ||\n\t\t\tdistribution.pluginVersion !== manifest.pluginVersion ||\n\t\t\tdistribution.manifestDigest !== manifestDigest\n\t\t)\n\t\t\tthrow new PluginRegistryErrorV1(\n\t\t\t\t\"invalid_manifest\",\n\t\t\t\t\"Registry distribution descriptor does not match the manifest identity\",\n\t\t\t);\n\t}\n\treturn Object.freeze({\n\t\tmanifest,\n\t\tsource,\n\t\tmanifestDigest,\n\t\t...(entry.signature === undefined ? {} : { signature: entry.signature as string }),\n\t\t...(distribution === undefined ? {} : { distribution }),\n\t});\n}\n\nfunction validateMax(value: number | undefined): number {\n\tconst max = value ?? MAX_PLUGIN_REGISTRY_MANIFESTS_V1;\n\tif (!Number.isSafeInteger(max) || max < 1 || max > MAX_PLUGIN_REGISTRY_MANIFESTS_V1)\n\t\tthrow new PluginRegistryErrorV1(\n\t\t\t\"invalid_limit\",\n\t\t\t`maxManifests must be an integer between 1 and ${MAX_PLUGIN_REGISTRY_MANIFESTS_V1}`,\n\t\t);\n\treturn max;\n}\n\nasync function validateSourceProof(\n\tentry: PluginRegistryManifestEnvelopeV1,\n\tverifier: PluginRegistryDigestVerifierV1,\n\tsourceVerifier: PluginSourceVerifierV1,\n): Promise<void> {\n\tconst actualDigest = pluginManifestDigestV1(entry.manifest);\n\tif (entry.manifestDigest !== actualDigest)\n\t\tthrow new PluginRegistryErrorV1(\n\t\t\t\"invalid_digest\",\n\t\t\t`Manifest digest mismatch for ${entry.manifest.id}@${entry.manifest.pluginVersion}`,\n\t\t);\n\ttry {\n\t\tconst result = await verifier.verify({\n\t\t\tmanifest: entry.manifest,\n\t\t\tsource: entry.source,\n\t\t\tmanifestDigest: actualDigest,\n\t\t\texpectedDigest: entry.manifestDigest,\n\t\t\tsignature: entry.signature,\n\t\t});\n\t\tif (result.status !== \"accepted\")\n\t\t\tthrow new PluginRegistryErrorV1(\"source_rejected\", result.reason ?? \"Registry source proof was rejected\");\n\t} catch (error) {\n\t\tif (error instanceof PluginRegistryErrorV1) throw error;\n\t\tthrow new PluginRegistryErrorV1(\"source_rejected\", \"Registry source proof was rejected\", error);\n\t}\n\tlet result: ReturnType<PluginSourceVerifierV1>;\n\ttry {\n\t\tresult = sourceVerifier({\n\t\t\tpluginId: entry.manifest.id,\n\t\t\tpluginVersion: entry.manifest.pluginVersion,\n\t\t\tsource: entry.source,\n\t\t\tmanifestDigest: actualDigest,\n\t\t});\n\t} catch (error) {\n\t\tthrow new PluginRegistryErrorV1(\"source_rejected\", \"Plugin source verifier failed\", error);\n\t}\n\tif (result.status !== \"accepted\")\n\t\tthrow new PluginRegistryErrorV1(\"source_rejected\", result.reason ?? \"Plugin source was rejected\");\n}\n\nfunction sourceIdentity(entries: readonly PluginRegistryManifestEnvelopeV1[]): string {\n\tconst sources = [...new Set(entries.map((entry) => entry.source))].sort((left, right) => left.localeCompare(right));\n\treturn sources.join(\",\");\n}\n\ninterface RegistryLoadV1 {\n\treadonly accepted: readonly PluginRegistryManifestEnvelopeV1[];\n\treadonly snapshot: PluginRegistrySnapshotV1;\n}\n\n/** Create a deterministic, host-injected registry client. */\nexport function createPluginRegistryV1(options: PluginRegistryOptionsV1): PluginRegistryV1 {\n\tconst maxManifests = validateMax(options.maxManifests);\n\tif (options.source === undefined || typeof options.source.list !== \"function\")\n\t\tthrow new PluginRegistryErrorV1(\"invalid_source\", \"Registry source must provide list()\");\n\tif (options.source.source !== undefined) validateSource(options.source.source);\n\tif (options.verify === undefined || typeof options.verify.verify !== \"function\")\n\t\tthrow new PluginRegistryErrorV1(\"source_rejected\", \"Registry source/digest verifier is required\");\n\tif (options.sourceVerifier === undefined || typeof options.sourceVerifier !== \"function\")\n\t\tthrow new PluginRegistryErrorV1(\"source_rejected\", \"Registry source verifier is required\");\n\n\tconst load = async (input: { readonly signal?: AbortSignal } = {}): Promise<RegistryLoadV1> => {\n\t\tif (input.signal?.aborted)\n\t\t\tthrow new PluginRegistryErrorV1(\"cancelled\", \"Plugin registry operation was cancelled\");\n\t\tlet raw: readonly PluginRegistryManifestEnvelopeV1[];\n\t\ttry {\n\t\t\traw = await options.source.list({ signal: input.signal });\n\t\t} catch (error) {\n\t\t\tif (isAbortLike(error, input.signal))\n\t\t\t\tthrow new PluginRegistryErrorV1(\"cancelled\", \"Plugin registry operation was cancelled\", error);\n\t\t\tthrow new PluginRegistryErrorV1(\"source_rejected\", \"Plugin registry source failed\", error);\n\t\t}\n\t\tif (input.signal?.aborted)\n\t\t\tthrow new PluginRegistryErrorV1(\"cancelled\", \"Plugin registry operation was cancelled\");\n\t\tif (!Array.isArray(raw))\n\t\t\tthrow new PluginRegistryErrorV1(\"invalid_manifest\", \"Registry source must return an array\");\n\t\tif (raw.length > maxManifests)\n\t\t\tthrow new PluginRegistryErrorV1(\"too_many_manifests\", \"Registry response contains too many manifests\");\n\t\tconst entries = raw.map(validateEnvelope);\n\t\tconst payloadBytes = entries.reduce((total, entry) => {\n\t\t\tconst manifestBytes = new TextEncoder().encode(JSON.stringify(entry.manifest)).byteLength;\n\t\t\tconst distributionBytes =\n\t\t\t\tentry.distribution === undefined\n\t\t\t\t\t? 0\n\t\t\t\t\t: new TextEncoder().encode(JSON.stringify(entry.distribution)).byteLength;\n\t\t\treturn (\n\t\t\t\ttotal +\n\t\t\t\tmanifestBytes +\n\t\t\t\tdistributionBytes +\n\t\t\t\tnew TextEncoder().encode(entry.source).byteLength +\n\t\t\t\tnew TextEncoder().encode(entry.manifestDigest).byteLength +\n\t\t\t\t(entry.signature === undefined ? 0 : new TextEncoder().encode(entry.signature).byteLength)\n\t\t\t);\n\t\t}, 0);\n\t\tif (payloadBytes > MAX_PLUGIN_REGISTRY_PAYLOAD_BYTES_V1)\n\t\t\tthrow new PluginRegistryErrorV1(\"payload_too_large\", \"Registry response exceeds the aggregate size limit\");\n\t\tconst seen = new Set<string>();\n\t\tconst accepted: PluginRegistryManifestEnvelopeV1[] = [];\n\t\tconst rejected: PluginRegistryRejectionV1[] = [];\n\t\tfor (const entry of entries) {\n\t\t\tconst identity = `${entry.manifest.id}@${entry.manifest.pluginVersion}`;\n\t\t\tif (seen.has(identity))\n\t\t\t\tthrow new PluginRegistryErrorV1(\"invalid_manifest\", `Duplicate registry manifest: ${identity}`);\n\t\t\tseen.add(identity);\n\t\t\ttry {\n\t\t\t\tawait validateSourceProof(entry, options.verify, options.sourceVerifier);\n\t\t\t} catch (error) {\n\t\t\t\tif (!(error instanceof PluginRegistryErrorV1)) throw error;\n\t\t\t\tif (error.cause !== undefined) throw error;\n\t\t\t\tif (error.code !== \"source_rejected\" && error.code !== \"invalid_digest\") throw error;\n\t\t\t\trejected.push({\n\t\t\t\t\tpluginId: entry.manifest.id,\n\t\t\t\t\tpluginVersion: entry.manifest.pluginVersion,\n\t\t\t\t\tcode: error.code === \"invalid_digest\" ? \"digest_rejected\" : \"source_rejected\",\n\t\t\t\t\treason:\n\t\t\t\t\t\terror.code === \"invalid_digest\" ? \"Manifest digest mismatch\" : \"Registry source proof was rejected\",\n\t\t\t\t});\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tif (input.signal?.aborted)\n\t\t\t\tthrow new PluginRegistryErrorV1(\"cancelled\", \"Plugin registry operation was cancelled\");\n\t\t\taccepted.push(entry);\n\t\t}\n\t\tconst manifests = accepted.map((entry) => entry.manifest);\n\t\tconst catalog = buildPluginCatalogV1({\n\t\t\tmanifests,\n\t\t\thost: options.host,\n\t\t\tavailableCapabilities: options.availableCapabilities,\n\t\t\tmaxEntries: maxManifests,\n\t\t});\n\t\tconst publicEntries = Object.freeze(\n\t\t\t[...accepted]\n\t\t\t\t.sort((left, right) => {\n\t\t\t\t\tconst idOrder = left.manifest.id.localeCompare(right.manifest.id);\n\t\t\t\t\treturn idOrder === 0\n\t\t\t\t\t\t? comparePluginVersionsV1(right.manifest.pluginVersion, left.manifest.pluginVersion)\n\t\t\t\t\t\t: idOrder;\n\t\t\t\t})\n\t\t\t\t.map((entry) =>\n\t\t\t\t\tObject.freeze({\n\t\t\t\t\t\tpluginId: entry.manifest.id,\n\t\t\t\t\t\tpluginVersion: entry.manifest.pluginVersion,\n\t\t\t\t\t\tsource: entry.source,\n\t\t\t\t\t\tmanifestDigest: entry.manifestDigest,\n\t\t\t\t\t\tsigned: entry.signature !== undefined,\n\t\t\t\t\t}),\n\t\t\t\t),\n\t\t);\n\t\tconst catalogByIdentity = new Map(\n\t\t\tcatalog.entries.map((entry) => [`${entry.pluginId}@${entry.pluginVersion}`, entry] as const),\n\t\t);\n\t\tconst verified = Object.freeze(\n\t\t\tpublicEntries.flatMap((entry) => {\n\t\t\t\tconst catalogEntry = catalogByIdentity.get(`${entry.pluginId}@${entry.pluginVersion}`);\n\t\t\t\tif (catalogEntry?.resolution.status === \"installed-ready\")\n\t\t\t\t\treturn [{ ...entry, resolutionStatus: \"installed-ready\" as const }];\n\t\t\t\tconst reason = catalogEntry?.resolution.diagnostics[0]?.message ?? \"Plugin is incompatible with this host\";\n\t\t\t\trejected.push({\n\t\t\t\t\tpluginId: entry.pluginId,\n\t\t\t\t\tpluginVersion: entry.pluginVersion,\n\t\t\t\t\tcode: \"incompatible\",\n\t\t\t\t\treason,\n\t\t\t\t});\n\t\t\t\treturn [];\n\t\t\t}),\n\t\t);\n\t\treturn {\n\t\t\taccepted: Object.freeze(accepted),\n\t\t\tsnapshot: Object.freeze({\n\t\t\t\tversion: 1,\n\t\t\t\tsource:\n\t\t\t\t\toptions.source.source === undefined ? sourceIdentity(accepted) : validateSource(options.source.source),\n\t\t\t\tentries: publicEntries,\n\t\t\t\tcatalog,\n\t\t\t\tverified,\n\t\t\t\trejected: Object.freeze(rejected),\n\t\t\t}),\n\t\t};\n\t};\n\tconst listManifests = async (\n\t\tinput: { readonly signal?: AbortSignal } = {},\n\t): Promise<readonly PluginManifestV1[]> => {\n\t\tconst loaded = await load(input);\n\t\treturn Object.freeze(\n\t\t\tloaded.snapshot.catalog.entries.flatMap((catalogEntry) =>\n\t\t\t\tloaded.accepted\n\t\t\t\t\t.filter(\n\t\t\t\t\t\t(entry) =>\n\t\t\t\t\t\t\tentry.manifest.id === catalogEntry.pluginId &&\n\t\t\t\t\t\t\tentry.manifest.pluginVersion === catalogEntry.pluginVersion,\n\t\t\t\t\t)\n\t\t\t\t\t.map((entry) => entry.manifest),\n\t\t\t),\n\t\t);\n\t};\n\treturn {\n\t\tlist: async (input = {}) => (await load(input)).snapshot,\n\t\tlistManifests,\n\t\tresolve: async (input) => {\n\t\t\tconst loaded = await load({ signal: input.signal });\n\t\t\tconst verified = new Set(loaded.snapshot.verified.map((entry) => `${entry.pluginId}@${entry.pluginVersion}`));\n\t\t\tconst identity =\n\t\t\t\tinput.pluginVersion === undefined\n\t\t\t\t\t? loaded.snapshot.catalog.entries.find(\n\t\t\t\t\t\t\t(candidate) =>\n\t\t\t\t\t\t\t\tcandidate.pluginId === input.pluginId &&\n\t\t\t\t\t\t\t\tcandidate.resolution.status === \"installed-ready\" &&\n\t\t\t\t\t\t\t\tverified.has(`${candidate.pluginId}@${candidate.pluginVersion}`),\n\t\t\t\t\t\t)\n\t\t\t\t\t: loaded.snapshot.catalog.entries.find(\n\t\t\t\t\t\t\t(candidate) =>\n\t\t\t\t\t\t\t\tcandidate.pluginId === input.pluginId &&\n\t\t\t\t\t\t\t\tcandidate.pluginVersion === input.pluginVersion &&\n\t\t\t\t\t\t\t\tcandidate.resolution.status === \"installed-ready\" &&\n\t\t\t\t\t\t\t\tverified.has(`${candidate.pluginId}@${candidate.pluginVersion}`),\n\t\t\t\t\t\t);\n\t\t\tconst entry =\n\t\t\t\tidentity === undefined\n\t\t\t\t\t? undefined\n\t\t\t\t\t: loaded.accepted.find(\n\t\t\t\t\t\t\t(candidate) =>\n\t\t\t\t\t\t\t\tcandidate.manifest.id === identity.pluginId &&\n\t\t\t\t\t\t\t\tcandidate.manifest.pluginVersion === identity.pluginVersion,\n\t\t\t\t\t\t);\n\t\t\tif (entry === undefined) return undefined;\n\t\t\treturn Object.freeze({\n\t\t\t\tmanifest: entry.manifest,\n\t\t\t\tsource: entry.source,\n\t\t\t\texpectedDigest: entry.manifestDigest,\n\t\t\t\t...(entry.distribution === undefined ? {} : { distribution: entry.distribution }),\n\t\t\t});\n\t\t},\n\t};\n}\n"]}
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../../src/plugins/ecosystem/registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,0BAA0B,CAAC;AAC7C,OAAO,EAAE,oBAAoB,EAAE,uBAAuB,EAAgC,MAAM,cAAc,CAAC;AAE3G,OAAO,EAAE,0BAA0B,EAAE,MAAM,mBAAmB,CAAC;AAE/D,OAAO,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC;AAEtD,qEAAqE;AACrE,MAAM,CAAC,MAAM,qCAAqC,GAAG,EAAE,GAAG,IAAI,CAAC;AAC/D,gEAAgE;AAChE,MAAM,CAAC,MAAM,gCAAgC,GAAG,GAAG,CAAC;AACpD,wEAAwE;AACxE,MAAM,CAAC,MAAM,oCAAoC,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AACpE,+EAA+E;AAC/E,MAAM,CAAC,MAAM,mCAAmC,GAAG,IAAI,CAAC;AACxD,mEAAmE;AACnE,MAAM,CAAC,MAAM,kCAAkC,GAAG,GAAG,CAAC;AA0DtD,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IACtC,IAAI,CAA4B;IAChC,KAAK,CAAW;IAEzB,YAAY,IAA+B,EAAE,OAAe,EAAE,KAAe,EAAE;QAC9E,KAAK,CAAC,OAAO,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAC5D,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;QACpC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IAAA,CACnB;CACD;AAsDD,SAAS,WAAW,CAAC,KAAc,EAAE,MAA+B,EAAW;IAC9E,OAAO,CACN,MAAM,EAAE,OAAO,KAAK,IAAI;QACxB,CAAC,KAAK,YAAY,KAAK,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,YAAY,IAAI,KAAK,CAAC,IAAI,KAAK,kBAAkB,CAAC,CAAC,CAC9F,CAAC;AAAA,CACF;AAED,SAAS,aAAa,CACrB,KAAc,EACd,KAAa,EACb,GAAW,EACX,IAAI,GAA8B,gBAAgB,EACzC;IACT,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG,IAAI,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9G,MAAM,IAAI,qBAAqB,CAAC,IAAI,EAAE,CAAC,CAAC,4CAA4C,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IACnG,CAAC;IACD,OAAO,KAAK,CAAC;AAAA,CACb;AAED,SAAS,iBAAiB,CAAC,KAA8B,EAAE,OAA0B,EAAE,KAAa,EAAQ;IAC3G,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;IAClC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACvD,MAAM,IAAI,qBAAqB,CAAC,kBAAkB,EAAE,CAAC,CAAC,uCAAuC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;AAAA,CAC5G;AAED,SAAS,cAAc,CAAC,MAAe,EAAU;IAChD,MAAM,KAAK,GAAG,aAAa,CAAC,MAAM,EAAE,QAAQ,EAAE,mCAAmC,CAAC,CAAC;IACnF,IAAI,6CAA6C,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACpF,MAAM,IAAI,qBAAqB,CAC9B,gBAAgB,EAChB,CAAC,CAAC,gEAAgE,CAAC,CACnE,CAAC;IACH,CAAC;IACD,IAAI,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAClC,IAAI,CAAC;YACJ,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;YAC9B,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,KAAG,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC;YACtG,OAAO,GAAG,MAAM,CAAC,MAAM,GAAG,QAAQ,IAAI,GAAG,EAAE,CAAC;QAC7C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,IAAI,qBAAqB,CAAC,gBAAgB,EAAE,CAAC,CAAC,uCAAuC,CAAC,EAAE,KAAK,CAAC,CAAC;QACtG,CAAC;IACF,CAAC;IACD,OAAO,KAAK,CAAC;AAAA,CACb;AAED,SAAS,gBAAgB,CAAC,QAAiB,EAAoB;IAC9D,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAClF,MAAM,IAAI,qBAAqB,CAAC,kBAAkB,EAAE,CAAC,CAAC,qCAAqC,CAAC,CAAC,CAAC;IAC/F,CAAC;IACD,MAAM,KAAK,GAAG,QAAmC,CAAC;IAClD,iBAAiB,CAChB,KAAK,EACL;QACC,IAAI;QACJ,eAAe;QACf,YAAY;QACZ,gBAAgB;QAChB,gBAAgB;QAChB,gBAAgB;QAChB,UAAU;QACV,UAAU;QACV,UAAU;KACV,EACD,mBAAmB,CACnB,CAAC;IACF,IAAI,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ,IAAI,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC,EAAE,CAAC,MAAM,GAAG,GAAG;QAClF,MAAM,IAAI,qBAAqB,CAAC,kBAAkB,EAAE,CAAC,CAAC,iCAAiC,CAAC,CAAC,CAAC;IAC3F,IAAI,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ,IAAI,KAAK,CAAC,aAAa,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC,aAAa,CAAC,MAAM,GAAG,GAAG;QACnH,MAAM,IAAI,qBAAqB,CAAC,kBAAkB,EAAE,CAAC,CAAC,4CAA4C,CAAC,CAAC,CAAC;IACtG,IAAI,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,GAAG,GAAG;QAC1G,MAAM,IAAI,qBAAqB,CAAC,kBAAkB,EAAE,CAAC,CAAC,yCAAyC,CAAC,CAAC,CAAC;IACnG,IAAI,KAAK,CAAC,cAAc,KAAK,SAAS,IAAI,KAAK,CAAC,cAAc,KAAK,SAAS;QAC3E,MAAM,IAAI,qBAAqB,CAC9B,kBAAkB,EAClB,CAAC,CAAC,2GAA2G,CAAC,CAC9G,CAAC;IACH,IAAI,KAAa,CAAC;IAClB,IAAI,CAAC;QACJ,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC;IACvE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,IAAI,qBAAqB,CAAC,kBAAkB,EAAE,CAAC,CAAC,wCAAwC,CAAC,EAAE,KAAK,CAAC,CAAC;IACzG,CAAC;IACD,IAAI,KAAK,GAAG,qCAAqC;QAChD,MAAM,IAAI,qBAAqB,CAAC,mBAAmB,EAAE,CAAC,CAAC,0CAA0C,CAAC,CAAC,CAAC;IACrG,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,KAAK,EAAiC,CAAC,CAAC;AAAA,CAClE;AAED,SAAS,gBAAgB,CAAC,KAAc,EAAoC;IAC3E,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACtE,MAAM,IAAI,qBAAqB,CAAC,kBAAkB,EAAE,CAAC,CAAC,2CAA2C,CAAC,CAAC,CAAC;IACrG,MAAM,KAAK,GAAG,KAAgC,CAAC;IAC/C,iBAAiB,CAChB,KAAK,EACL,CAAC,UAAU,EAAE,QAAQ,EAAE,gBAAgB,EAAE,WAAW,EAAE,cAAc,CAAC,EACrE,yBAAyB,CACzB,CAAC;IACF,MAAM,QAAQ,GAAG,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAClD,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5C,MAAM,cAAc,GAAG,aAAa,CAAC,KAAK,CAAC,cAAc,EAAE,gBAAgB,EAAE,kCAAkC,CAAC,CAAC;IACjH,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS;QAAE,aAAa,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,EAAE,kCAAkC,CAAC,CAAC;IACnH,IAAI,YAAwD,CAAC;IAC7D,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QACtC,IAAI,CAAC;YACJ,YAAY,GAAG,0BAA0B,EAAE,CAAC,kBAAkB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QACpF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,IAAI,qBAAqB,CAAC,kBAAkB,EAAE,CAAC,CAAC,6CAA6C,CAAC,EAAE,KAAK,CAAC,CAAC;QAC9G,CAAC;QACD,IACC,YAAY,CAAC,QAAQ,KAAK,QAAQ,CAAC,EAAE;YACrC,YAAY,CAAC,aAAa,KAAK,QAAQ,CAAC,aAAa;YACrD,YAAY,CAAC,cAAc,KAAK,cAAc;YAE9C,MAAM,IAAI,qBAAqB,CAC9B,kBAAkB,EAClB,CAAC,CAAC,uEAAuE,CAAC,CAC1E,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACpB,QAAQ;QACR,MAAM;QACN,cAAc;QACd,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAmB,EAAE,CAAC;QAClF,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC;KACvD,CAAC,CAAC;AAAA,CACH;AAED,SAAS,WAAW,CAAC,KAAyB,EAAU;IACvD,MAAM,GAAG,GAAG,KAAK,IAAI,gCAAgC,CAAC;IACtD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,GAAG,GAAG,gCAAgC;QAClF,MAAM,IAAI,qBAAqB,CAC9B,eAAe,EACf,CAAC,CAAC,qDAAqD,EAAE,EAAE,GAAG,EAAE,gCAAgC,EAAE,CAAC,CACnG,CAAC;IACH,OAAO,GAAG,CAAC;AAAA,CACX;AAED,KAAK,UAAU,mBAAmB,CACjC,KAAuC,EACvC,QAAwC,EACxC,cAAsC,EACtB;IAChB,MAAM,YAAY,GAAG,sBAAsB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC5D,IAAI,KAAK,CAAC,cAAc,KAAK,YAAY;QACxC,MAAM,IAAI,qBAAqB,CAC9B,gBAAgB,EAChB,CAAC,CAAC,yCAAyC,EAAE;YAC5C,QAAQ,EAAE,GAAG,KAAK,CAAC,QAAQ,CAAC,EAAE,IAAI,KAAK,CAAC,QAAQ,CAAC,aAAa,EAAE;SAChE,CAAC,CACF,CAAC;IACH,IAAI,CAAC;QACJ,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC;YACpC,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,cAAc,EAAE,YAAY;YAC5B,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,SAAS,EAAE,KAAK,CAAC,SAAS;SAC1B,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU;YAC/B,MAAM,IAAI,qBAAqB,CAAC,iBAAiB,EAAE,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC,oCAAoC,CAAC,CAAC,CAAC;IAC/G,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAI,KAAK,YAAY,qBAAqB;YAAE,MAAM,KAAK,CAAC;QACxD,MAAM,IAAI,qBAAqB,CAAC,iBAAiB,EAAE,CAAC,CAAC,oCAAoC,CAAC,EAAE,KAAK,CAAC,CAAC;IACpG,CAAC;IACD,IAAI,MAA0C,CAAC;IAC/C,IAAI,CAAC;QACJ,MAAM,GAAG,cAAc,CAAC;YACvB,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE;YAC3B,aAAa,EAAE,KAAK,CAAC,QAAQ,CAAC,aAAa;YAC3C,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,cAAc,EAAE,YAAY;SAC5B,CAAC,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,IAAI,qBAAqB,CAAC,iBAAiB,EAAE,CAAC,CAAC,+BAA+B,CAAC,EAAE,KAAK,CAAC,CAAC;IAC/F,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU;QAC/B,MAAM,IAAI,qBAAqB,CAAC,iBAAiB,EAAE,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC;AAAA,CACtG;AAED,SAAS,cAAc,CAAC,OAAoD,EAAU;IACrF,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;IACpH,OAAO,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAAA,CACzB;AAOD,6DAA6D;AAC7D,MAAM,UAAU,sBAAsB,CAAC,OAAgC,EAAoB;IAC1F,MAAM,YAAY,GAAG,WAAW,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACvD,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,UAAU;QAC5E,MAAM,IAAI,qBAAqB,CAAC,gBAAgB,EAAE,CAAC,CAAC,qCAAqC,CAAC,CAAC,CAAC;IAC7F,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS;QAAE,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC/E,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,OAAO,CAAC,MAAM,CAAC,MAAM,KAAK,UAAU;QAC9E,MAAM,IAAI,qBAAqB,CAAC,iBAAiB,EAAE,CAAC,CAAC,6CAA6C,CAAC,CAAC,CAAC;IACtG,IAAI,OAAO,CAAC,cAAc,KAAK,SAAS,IAAI,OAAO,OAAO,CAAC,cAAc,KAAK,UAAU;QACvF,MAAM,IAAI,qBAAqB,CAAC,iBAAiB,EAAE,CAAC,CAAC,sCAAsC,CAAC,CAAC,CAAC;IAE/F,MAAM,IAAI,GAAG,KAAK,EAAE,KAAK,GAAsC,EAAE,EAA2B,EAAE,CAAC;QAC9F,IAAI,KAAK,CAAC,MAAM,EAAE,OAAO;YACxB,MAAM,IAAI,qBAAqB,CAAC,WAAW,EAAE,CAAC,CAAC,yCAAyC,CAAC,CAAC,CAAC;QAC5F,IAAI,GAAgD,CAAC;QACrD,IAAI,CAAC;YACJ,GAAG,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QAC3D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,WAAW,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC;gBACnC,MAAM,IAAI,qBAAqB,CAAC,WAAW,EAAE,CAAC,CAAC,yCAAyC,CAAC,EAAE,KAAK,CAAC,CAAC;YACnG,MAAM,IAAI,qBAAqB,CAAC,iBAAiB,EAAE,CAAC,CAAC,+BAA+B,CAAC,EAAE,KAAK,CAAC,CAAC;QAC/F,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,EAAE,OAAO;YACxB,MAAM,IAAI,qBAAqB,CAAC,WAAW,EAAE,CAAC,CAAC,yCAAyC,CAAC,CAAC,CAAC;QAC5F,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;YACtB,MAAM,IAAI,qBAAqB,CAAC,kBAAkB,EAAE,CAAC,CAAC,sCAAsC,CAAC,CAAC,CAAC;QAChG,IAAI,GAAG,CAAC,MAAM,GAAG,YAAY;YAC5B,MAAM,IAAI,qBAAqB,CAAC,oBAAoB,EAAE,CAAC,CAAC,+CAA+C,CAAC,CAAC,CAAC;QAC3G,MAAM,OAAO,GAAG,GAAG,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;QAC1C,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC;YACrD,MAAM,aAAa,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC;YAC1F,MAAM,iBAAiB,GACtB,KAAK,CAAC,YAAY,KAAK,SAAS;gBAC/B,CAAC,CAAC,CAAC;gBACH,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU,CAAC;YAC5E,OAAO,CACN,KAAK;gBACL,aAAa;gBACb,iBAAiB;gBACjB,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,UAAU;gBACjD,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,UAAU;gBACzD,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,UAAU,CAAC,CAC1F,CAAC;QAAA,CACF,EAAE,CAAC,CAAC,CAAC;QACN,IAAI,YAAY,GAAG,oCAAoC;YACtD,MAAM,IAAI,qBAAqB,CAAC,mBAAmB,EAAE,CAAC,CAAC,oDAAoD,CAAC,CAAC,CAAC;QAC/G,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,MAAM,QAAQ,GAAuC,EAAE,CAAC;QACxD,MAAM,QAAQ,GAAgC,EAAE,CAAC;QACjD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC7B,MAAM,QAAQ,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC,EAAE,IAAI,KAAK,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC;YACxE,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC;gBACrB,MAAM,IAAI,qBAAqB,CAC9B,kBAAkB,EAClB,CAAC,CAAC,yCAAyC,EAAE,EAAE,QAAQ,EAAE,CAAC,CAC1D,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACnB,IAAI,CAAC;gBACJ,MAAM,mBAAmB,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;YAC1E,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,IAAI,CAAC,CAAC,KAAK,YAAY,qBAAqB,CAAC;oBAAE,MAAM,KAAK,CAAC;gBAC3D,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS;oBAAE,MAAM,KAAK,CAAC;gBAC3C,IAAI,KAAK,CAAC,IAAI,KAAK,iBAAiB,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB;oBAAE,MAAM,KAAK,CAAC;gBACrF,QAAQ,CAAC,IAAI,CAAC;oBACb,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE;oBAC3B,aAAa,EAAE,KAAK,CAAC,QAAQ,CAAC,aAAa;oBAC3C,IAAI,EAAE,KAAK,CAAC,IAAI,KAAK,gBAAgB,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,iBAAiB;oBAC7E,MAAM,EACL,KAAK,CAAC,IAAI,KAAK,gBAAgB,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,oCAAoC;iBACpG,CAAC,CAAC;gBACH,SAAS;YACV,CAAC;YACD,IAAI,KAAK,CAAC,MAAM,EAAE,OAAO;gBACxB,MAAM,IAAI,qBAAqB,CAAC,WAAW,EAAE,CAAC,CAAC,yCAAyC,CAAC,CAAC,CAAC;YAC5F,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;QACD,MAAM,SAAS,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC1D,MAAM,OAAO,GAAG,oBAAoB,CAAC;YACpC,SAAS;YACT,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,qBAAqB,EAAE,OAAO,CAAC,qBAAqB;YACpD,UAAU,EAAE,YAAY;SACxB,CAAC,CAAC;QACH,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAClC,CAAC,GAAG,QAAQ,CAAC;aACX,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YACtB,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YAClE,OAAO,OAAO,KAAK,CAAC;gBACnB,CAAC,CAAC,uBAAuB,CAAC,KAAK,CAAC,QAAQ,CAAC,aAAa,EAAE,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC;gBACpF,CAAC,CAAC,OAAO,CAAC;QAAA,CACX,CAAC;aACD,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACd,MAAM,CAAC,MAAM,CAAC;YACb,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE;YAC3B,aAAa,EAAE,KAAK,CAAC,QAAQ,CAAC,aAAa;YAC3C,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,MAAM,EAAE,KAAK,CAAC,SAAS,KAAK,SAAS;SACrC,CAAC,CACF,CACF,CAAC;QACF,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAChC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,GAAG,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,aAAa,EAAE,EAAE,KAAK,CAAU,CAAC,CAC5F,CAAC;QACF,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAC7B,aAAa,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;YAChC,MAAM,YAAY,GAAG,iBAAiB,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC;YACvF,IAAI,YAAY,EAAE,UAAU,CAAC,MAAM,KAAK,iBAAiB;gBACxD,OAAO,CAAC,EAAE,GAAG,KAAK,EAAE,gBAAgB,EAAE,iBAA0B,EAAE,CAAC,CAAC;YACrE,MAAM,MAAM,GAAG,YAAY,EAAE,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI,uCAAuC,CAAC;YAC3G,QAAQ,CAAC,IAAI,CAAC;gBACb,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,aAAa,EAAE,KAAK,CAAC,aAAa;gBAClC,IAAI,EAAE,cAAc;gBACpB,MAAM;aACN,CAAC,CAAC;YACH,OAAO,EAAE,CAAC;QAAA,CACV,CAAC,CACF,CAAC;QACF,OAAO;YACN,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC;YACjC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC;gBACvB,OAAO,EAAE,CAAC;gBACV,MAAM,EACL,OAAO,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC;gBACvG,OAAO,EAAE,aAAa;gBACtB,OAAO;gBACP,QAAQ;gBACR,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC;aACjC,CAAC;SACF,CAAC;IAAA,CACF,CAAC;IACF,MAAM,aAAa,GAAG,KAAK,EAC1B,KAAK,GAAsC,EAAE,EACN,EAAE,CAAC;QAC1C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,CAAC;QACjC,OAAO,MAAM,CAAC,MAAM,CACnB,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,YAAY,EAAE,EAAE,CACxD,MAAM,CAAC,QAAQ;aACb,MAAM,CACN,CAAC,KAAK,EAAE,EAAE,CACT,KAAK,CAAC,QAAQ,CAAC,EAAE,KAAK,YAAY,CAAC,QAAQ;YAC3C,KAAK,CAAC,QAAQ,CAAC,aAAa,KAAK,YAAY,CAAC,aAAa,CAC5D;aACA,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAChC,CACD,CAAC;IAAA,CACF,CAAC;IACF,OAAO;QACN,IAAI,EAAE,KAAK,EAAE,KAAK,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ;QACxD,aAAa;QACb,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC;YACzB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;YACpD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC;YAC9G,MAAM,QAAQ,GACb,KAAK,CAAC,aAAa,KAAK,SAAS;gBAChC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CACpC,CAAC,SAAS,EAAE,EAAE,CACb,SAAS,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ;oBACrC,SAAS,CAAC,UAAU,CAAC,MAAM,KAAK,iBAAiB;oBACjD,QAAQ,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC,QAAQ,IAAI,SAAS,CAAC,aAAa,EAAE,CAAC,CACjE;gBACF,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CACpC,CAAC,SAAS,EAAE,EAAE,CACb,SAAS,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ;oBACrC,SAAS,CAAC,aAAa,KAAK,KAAK,CAAC,aAAa;oBAC/C,SAAS,CAAC,UAAU,CAAC,MAAM,KAAK,iBAAiB;oBACjD,QAAQ,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC,QAAQ,IAAI,SAAS,CAAC,aAAa,EAAE,CAAC,CACjE,CAAC;YACL,MAAM,KAAK,GACV,QAAQ,KAAK,SAAS;gBACrB,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CACpB,CAAC,SAAS,EAAE,EAAE,CACb,SAAS,CAAC,QAAQ,CAAC,EAAE,KAAK,QAAQ,CAAC,QAAQ;oBAC3C,SAAS,CAAC,QAAQ,CAAC,aAAa,KAAK,QAAQ,CAAC,aAAa,CAC5D,CAAC;YACL,IAAI,KAAK,KAAK,SAAS;gBAAE,OAAO,SAAS,CAAC;YAC1C,OAAO,MAAM,CAAC,MAAM,CAAC;gBACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,cAAc,EAAE,KAAK,CAAC,cAAc;gBACpC,GAAG,CAAC,KAAK,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC;aACjF,CAAC,CAAC;QAAA,CACH;KACD,CAAC;AAAA,CACF","sourcesContent":["import { t } from \"../../core/i18n/index.ts\";\nimport { buildPluginCatalogV1, comparePluginVersionsV1, type PluginCatalogSnapshotV1 } from \"./catalog.ts\";\nimport type { PluginDistributionDescriptorV1 } from \"./distribution.ts\";\nimport { createPluginDistributionV1 } from \"./distribution.ts\";\nimport type { CapabilityRefV1, HostFactsV1, PluginManifestV1, PluginSourceVerifierV1 } from \"./types.ts\";\nimport { pluginManifestDigestV1 } from \"./updates.ts\";\n\n/** Maximum manifest JSON bytes accepted by the registry boundary. */\nexport const MAX_PLUGIN_REGISTRY_MANIFEST_BYTES_V1 = 64 * 1024;\n/** Maximum number of manifests returned by one source query. */\nexport const MAX_PLUGIN_REGISTRY_MANIFESTS_V1 = 256;\n/** Maximum aggregate manifest metadata returned by one source query. */\nexport const MAX_PLUGIN_REGISTRY_PAYLOAD_BYTES_V1 = 4 * 1024 * 1024;\n/** Maximum source URI length; sources are identifiers, never package paths. */\nexport const MAX_PLUGIN_REGISTRY_SOURCE_CHARS_V1 = 2048;\n/** Maximum digest/signature text length accepted from a source. */\nexport const MAX_PLUGIN_REGISTRY_PROOF_CHARS_V1 = 512;\n\nexport interface PluginRegistryManifestEnvelopeV1 {\n\treadonly manifest: PluginManifestV1;\n\treadonly source: string;\n\treadonly manifestDigest: string;\n\t/** Optional host- or registry-supplied signature. The verifier owns semantics. */\n\treadonly signature?: string;\n\t/** Optional signed artifact descriptor bound to this exact manifest identity. */\n\treadonly distribution?: PluginDistributionDescriptorV1;\n}\n\n/**\n * A transport-neutral registry source. Hosts inject HTTP, filesystem, or\n * package-manager implementations. The registry never receives package bytes\n * and never exposes source response bodies to the model context.\n */\nexport interface PluginRegistrySourceV1 {\n\t/** Optional stable source identity shown in diagnostics; never a local path. */\n\treadonly source?: string;\n\treadonly list: (input: { readonly signal?: AbortSignal }) => Promise<readonly PluginRegistryManifestEnvelopeV1[]>;\n}\n\nexport interface PluginRegistryDigestVerifierV1 {\n\treadonly verify: (input: {\n\t\treadonly manifest: PluginManifestV1;\n\t\treadonly source: string;\n\t\treadonly manifestDigest: string;\n\t\treadonly expectedDigest?: string;\n\t\treadonly signature?: string;\n\t}) =>\n\t\t| { readonly status: \"accepted\" }\n\t\t| { readonly status: \"rejected\"; readonly reason?: string }\n\t\t| Promise<{ readonly status: \"accepted\" } | { readonly status: \"rejected\"; readonly reason?: string }>;\n}\n\nexport interface PluginRegistryOptionsV1 {\n\treadonly source: PluginRegistrySourceV1;\n\treadonly host: HostFactsV1;\n\t/** Required digest/signature verifier. No implicit trust fallback. */\n\treadonly verify: PluginRegistryDigestVerifierV1;\n\t/** Existing source verifier contract is mandatory at the registry boundary. */\n\treadonly sourceVerifier: PluginSourceVerifierV1;\n\treadonly availableCapabilities?: readonly CapabilityRefV1[];\n\treadonly maxManifests?: number;\n}\n\nexport type PluginRegistryErrorCodeV1 =\n\t| \"cancelled\"\n\t| \"invalid_limit\"\n\t| \"source_rejected\"\n\t| \"invalid_manifest\"\n\t| \"invalid_source\"\n\t| \"invalid_digest\"\n\t| \"payload_too_large\"\n\t| \"too_many_manifests\"\n\t| \"incompatible\";\n\nexport class PluginRegistryErrorV1 extends Error {\n\treadonly code: PluginRegistryErrorCodeV1;\n\treadonly cause?: unknown;\n\n\tconstructor(code: PluginRegistryErrorCodeV1, message: string, cause?: unknown) {\n\t\tsuper(message, cause === undefined ? undefined : { cause });\n\t\tthis.name = \"PluginRegistryErrorV1\";\n\t\tthis.code = code;\n\t\tthis.cause = cause;\n\t}\n}\n\nexport interface PluginRegistryEntryV1 {\n\treadonly pluginId: string;\n\treadonly pluginVersion: string;\n\treadonly source: string;\n\treadonly manifestDigest: string;\n\treadonly signed: boolean;\n}\n\nexport type PluginRegistryRejectionCodeV1 = \"source_rejected\" | \"digest_rejected\" | \"incompatible\";\n\nexport interface PluginRegistryRejectionV1 {\n\treadonly pluginId: string;\n\treadonly pluginVersion: string;\n\treadonly code: PluginRegistryRejectionCodeV1;\n\treadonly reason: string;\n}\n\nexport interface PluginRegistryVerifiedEntryV1 extends PluginRegistryEntryV1 {\n\treadonly resolutionStatus: \"installed-ready\";\n}\n\nexport interface PluginRegistrySnapshotV1 {\n\treadonly version: 1;\n\treadonly source: string;\n\treadonly entries: readonly PluginRegistryEntryV1[];\n\treadonly catalog: PluginCatalogSnapshotV1;\n\t/** Only entries that passed proof validation and host compatibility. */\n\treadonly verified: readonly PluginRegistryVerifiedEntryV1[];\n\t/** Platform/API/test-only entries remain visible in catalog but are not verified. */\n\treadonly rejected: readonly PluginRegistryRejectionV1[];\n}\n\n/** Host-side package projection; package bytes never cross this boundary. */\nexport interface PluginRegistryResolvedPackageV1 {\n\treadonly manifest: PluginManifestV1;\n\treadonly source: string;\n\treadonly expectedDigest: string;\n\treadonly distribution?: PluginDistributionDescriptorV1;\n}\n\nexport interface PluginRegistryV1 {\n\treadonly list: (input?: { readonly signal?: AbortSignal }) => Promise<PluginRegistrySnapshotV1>;\n\t/** Optional host-side resolver. Older custom registry implementations may omit it. */\n\treadonly resolve?: (input: {\n\t\treadonly pluginId: string;\n\t\treadonly pluginVersion?: string;\n\t\treadonly signal?: AbortSignal;\n\t}) => Promise<PluginRegistryResolvedPackageV1 | undefined>;\n\t/** Optional host-side manifest projection used by the CLI catalog command. */\n\treadonly listManifests?: (input?: { readonly signal?: AbortSignal }) => Promise<readonly PluginManifestV1[]>;\n}\n\nfunction isAbortLike(error: unknown, signal: AbortSignal | undefined): boolean {\n\treturn (\n\t\tsignal?.aborted === true ||\n\t\t(error instanceof Error && (error.name === \"AbortError\" || error.name === \"AbortSignalError\"))\n\t);\n}\n\nfunction boundedString(\n\tvalue: unknown,\n\tlabel: string,\n\tmax: number,\n\tcode: PluginRegistryErrorCodeV1 = \"invalid_source\",\n): string {\n\tif (typeof value !== \"string\" || value.trim() === \"\" || value.length > max || /[\\u0000-\\u001f]/u.test(value)) {\n\t\tthrow new PluginRegistryErrorV1(code, t(\"{label} must be a non-empty bounded string\", { label }));\n\t}\n\treturn value;\n}\n\nfunction assertAllowedKeys(value: Record<string, unknown>, allowed: readonly string[], label: string): void {\n\tconst expected = new Set(allowed);\n\tif (Object.keys(value).some((key) => !expected.has(key)))\n\t\tthrow new PluginRegistryErrorV1(\"invalid_manifest\", t(\"{label} contains an unsupported field\", { label }));\n}\n\nfunction validateSource(source: unknown): string {\n\tconst value = boundedString(source, \"source\", MAX_PLUGIN_REGISTRY_SOURCE_CHARS_V1);\n\tif (/^(?:file:|[a-zA-Z]:[\\\\/]|[\\\\/]{1,2}|\\\\\\\\)/iu.test(value) || /\\s/u.test(value)) {\n\t\tthrow new PluginRegistryErrorV1(\n\t\t\t\"invalid_source\",\n\t\t\tt(\"Plugin registry source must be an opaque URI, not a local path\"),\n\t\t);\n\t}\n\tif (/^https?:\\/\\//iu.test(value)) {\n\t\ttry {\n\t\t\tconst parsed = new URL(value);\n\t\t\tconst pathname = parsed.pathname.length > 512 ? `${parsed.pathname.slice(0, 511)}…` : parsed.pathname;\n\t\t\treturn `${parsed.origin}${pathname || \"/\"}`;\n\t\t} catch (error) {\n\t\t\tthrow new PluginRegistryErrorV1(\"invalid_source\", t(\"Plugin registry source URL is invalid\"), error);\n\t\t}\n\t}\n\treturn value;\n}\n\nfunction validateManifest(manifest: unknown): PluginManifestV1 {\n\tif (typeof manifest !== \"object\" || manifest === null || Array.isArray(manifest)) {\n\t\tthrow new PluginRegistryErrorV1(\"invalid_manifest\", t(\"Registry manifest must be an object\"));\n\t}\n\tconst value = manifest as Record<string, unknown>;\n\tassertAllowedKeys(\n\t\tvalue,\n\t\t[\n\t\t\t\"id\",\n\t\t\t\"pluginVersion\",\n\t\t\t\"apiVersion\",\n\t\t\t\"minHostVersion\",\n\t\t\t\"maxHostVersion\",\n\t\t\t\"capabilityRefs\",\n\t\t\t\"requires\",\n\t\t\t\"platform\",\n\t\t\t\"testOnly\",\n\t\t],\n\t\t\"Registry manifest\",\n\t);\n\tif (typeof value.id !== \"string\" || value.id.trim() === \"\" || value.id.length > 256)\n\t\tthrow new PluginRegistryErrorV1(\"invalid_manifest\", t(\"Registry manifest id is invalid\"));\n\tif (typeof value.pluginVersion !== \"string\" || value.pluginVersion.trim() === \"\" || value.pluginVersion.length > 256)\n\t\tthrow new PluginRegistryErrorV1(\"invalid_manifest\", t(\"Registry manifest pluginVersion is invalid\"));\n\tif (typeof value.apiVersion !== \"string\" || value.apiVersion.trim() === \"\" || value.apiVersion.length > 256)\n\t\tthrow new PluginRegistryErrorV1(\"invalid_manifest\", t(\"Registry manifest apiVersion is invalid\"));\n\tif (value.minHostVersion === undefined && value.maxHostVersion === undefined)\n\t\tthrow new PluginRegistryErrorV1(\n\t\t\t\"invalid_manifest\",\n\t\t\tt(\"Published plugins must declare host version compatibility range: set minHostVersion and/or maxHostVersion\"),\n\t\t);\n\tlet bytes: number;\n\ttry {\n\t\tbytes = new TextEncoder().encode(JSON.stringify(manifest)).byteLength;\n\t} catch (error) {\n\t\tthrow new PluginRegistryErrorV1(\"invalid_manifest\", t(\"Registry manifest cannot be serialized\"), error);\n\t}\n\tif (bytes > MAX_PLUGIN_REGISTRY_MANIFEST_BYTES_V1)\n\t\tthrow new PluginRegistryErrorV1(\"payload_too_large\", t(\"Registry manifest exceeds the size limit\"));\n\treturn Object.freeze({ ...value } as unknown as PluginManifestV1);\n}\n\nfunction validateEnvelope(value: unknown): PluginRegistryManifestEnvelopeV1 {\n\tif (typeof value !== \"object\" || value === null || Array.isArray(value))\n\t\tthrow new PluginRegistryErrorV1(\"invalid_manifest\", t(\"Registry response entry must be an object\"));\n\tconst entry = value as Record<string, unknown>;\n\tassertAllowedKeys(\n\t\tentry,\n\t\t[\"manifest\", \"source\", \"manifestDigest\", \"signature\", \"distribution\"],\n\t\t\"Registry response entry\",\n\t);\n\tconst manifest = validateManifest(entry.manifest);\n\tconst source = validateSource(entry.source);\n\tconst manifestDigest = boundedString(entry.manifestDigest, \"manifestDigest\", MAX_PLUGIN_REGISTRY_PROOF_CHARS_V1);\n\tif (entry.signature !== undefined) boundedString(entry.signature, \"signature\", MAX_PLUGIN_REGISTRY_PROOF_CHARS_V1);\n\tlet distribution: PluginDistributionDescriptorV1 | undefined;\n\tif (entry.distribution !== undefined) {\n\t\ttry {\n\t\t\tdistribution = createPluginDistributionV1().validateDescriptor(entry.distribution);\n\t\t} catch (error) {\n\t\t\tthrow new PluginRegistryErrorV1(\"invalid_manifest\", t(\"Registry distribution descriptor is invalid\"), error);\n\t\t}\n\t\tif (\n\t\t\tdistribution.pluginId !== manifest.id ||\n\t\t\tdistribution.pluginVersion !== manifest.pluginVersion ||\n\t\t\tdistribution.manifestDigest !== manifestDigest\n\t\t)\n\t\t\tthrow new PluginRegistryErrorV1(\n\t\t\t\t\"invalid_manifest\",\n\t\t\t\tt(\"Registry distribution descriptor does not match the manifest identity\"),\n\t\t\t);\n\t}\n\treturn Object.freeze({\n\t\tmanifest,\n\t\tsource,\n\t\tmanifestDigest,\n\t\t...(entry.signature === undefined ? {} : { signature: entry.signature as string }),\n\t\t...(distribution === undefined ? {} : { distribution }),\n\t});\n}\n\nfunction validateMax(value: number | undefined): number {\n\tconst max = value ?? MAX_PLUGIN_REGISTRY_MANIFESTS_V1;\n\tif (!Number.isSafeInteger(max) || max < 1 || max > MAX_PLUGIN_REGISTRY_MANIFESTS_V1)\n\t\tthrow new PluginRegistryErrorV1(\n\t\t\t\"invalid_limit\",\n\t\t\tt(\"maxManifests must be an integer between 1 and {max}\", { max: MAX_PLUGIN_REGISTRY_MANIFESTS_V1 }),\n\t\t);\n\treturn max;\n}\n\nasync function validateSourceProof(\n\tentry: PluginRegistryManifestEnvelopeV1,\n\tverifier: PluginRegistryDigestVerifierV1,\n\tsourceVerifier: PluginSourceVerifierV1,\n): Promise<void> {\n\tconst actualDigest = pluginManifestDigestV1(entry.manifest);\n\tif (entry.manifestDigest !== actualDigest)\n\t\tthrow new PluginRegistryErrorV1(\n\t\t\t\"invalid_digest\",\n\t\t\tt(\"Manifest digest mismatch for {identity}\", {\n\t\t\t\tidentity: `${entry.manifest.id}@${entry.manifest.pluginVersion}`,\n\t\t\t}),\n\t\t);\n\ttry {\n\t\tconst result = await verifier.verify({\n\t\t\tmanifest: entry.manifest,\n\t\t\tsource: entry.source,\n\t\t\tmanifestDigest: actualDigest,\n\t\t\texpectedDigest: entry.manifestDigest,\n\t\t\tsignature: entry.signature,\n\t\t});\n\t\tif (result.status !== \"accepted\")\n\t\t\tthrow new PluginRegistryErrorV1(\"source_rejected\", result.reason ?? t(\"Registry source proof was rejected\"));\n\t} catch (error) {\n\t\tif (error instanceof PluginRegistryErrorV1) throw error;\n\t\tthrow new PluginRegistryErrorV1(\"source_rejected\", t(\"Registry source proof was rejected\"), error);\n\t}\n\tlet result: ReturnType<PluginSourceVerifierV1>;\n\ttry {\n\t\tresult = sourceVerifier({\n\t\t\tpluginId: entry.manifest.id,\n\t\t\tpluginVersion: entry.manifest.pluginVersion,\n\t\t\tsource: entry.source,\n\t\t\tmanifestDigest: actualDigest,\n\t\t});\n\t} catch (error) {\n\t\tthrow new PluginRegistryErrorV1(\"source_rejected\", t(\"Plugin source verifier failed\"), error);\n\t}\n\tif (result.status !== \"accepted\")\n\t\tthrow new PluginRegistryErrorV1(\"source_rejected\", result.reason ?? t(\"Plugin source was rejected\"));\n}\n\nfunction sourceIdentity(entries: readonly PluginRegistryManifestEnvelopeV1[]): string {\n\tconst sources = [...new Set(entries.map((entry) => entry.source))].sort((left, right) => left.localeCompare(right));\n\treturn sources.join(\",\");\n}\n\ninterface RegistryLoadV1 {\n\treadonly accepted: readonly PluginRegistryManifestEnvelopeV1[];\n\treadonly snapshot: PluginRegistrySnapshotV1;\n}\n\n/** Create a deterministic, host-injected registry client. */\nexport function createPluginRegistryV1(options: PluginRegistryOptionsV1): PluginRegistryV1 {\n\tconst maxManifests = validateMax(options.maxManifests);\n\tif (options.source === undefined || typeof options.source.list !== \"function\")\n\t\tthrow new PluginRegistryErrorV1(\"invalid_source\", t(\"Registry source must provide list()\"));\n\tif (options.source.source !== undefined) validateSource(options.source.source);\n\tif (options.verify === undefined || typeof options.verify.verify !== \"function\")\n\t\tthrow new PluginRegistryErrorV1(\"source_rejected\", t(\"Registry source/digest verifier is required\"));\n\tif (options.sourceVerifier === undefined || typeof options.sourceVerifier !== \"function\")\n\t\tthrow new PluginRegistryErrorV1(\"source_rejected\", t(\"Registry source verifier is required\"));\n\n\tconst load = async (input: { readonly signal?: AbortSignal } = {}): Promise<RegistryLoadV1> => {\n\t\tif (input.signal?.aborted)\n\t\t\tthrow new PluginRegistryErrorV1(\"cancelled\", t(\"Plugin registry operation was cancelled\"));\n\t\tlet raw: readonly PluginRegistryManifestEnvelopeV1[];\n\t\ttry {\n\t\t\traw = await options.source.list({ signal: input.signal });\n\t\t} catch (error) {\n\t\t\tif (isAbortLike(error, input.signal))\n\t\t\t\tthrow new PluginRegistryErrorV1(\"cancelled\", t(\"Plugin registry operation was cancelled\"), error);\n\t\t\tthrow new PluginRegistryErrorV1(\"source_rejected\", t(\"Plugin registry source failed\"), error);\n\t\t}\n\t\tif (input.signal?.aborted)\n\t\t\tthrow new PluginRegistryErrorV1(\"cancelled\", t(\"Plugin registry operation was cancelled\"));\n\t\tif (!Array.isArray(raw))\n\t\t\tthrow new PluginRegistryErrorV1(\"invalid_manifest\", t(\"Registry source must return an array\"));\n\t\tif (raw.length > maxManifests)\n\t\t\tthrow new PluginRegistryErrorV1(\"too_many_manifests\", t(\"Registry response contains too many manifests\"));\n\t\tconst entries = raw.map(validateEnvelope);\n\t\tconst payloadBytes = entries.reduce((total, entry) => {\n\t\t\tconst manifestBytes = new TextEncoder().encode(JSON.stringify(entry.manifest)).byteLength;\n\t\t\tconst distributionBytes =\n\t\t\t\tentry.distribution === undefined\n\t\t\t\t\t? 0\n\t\t\t\t\t: new TextEncoder().encode(JSON.stringify(entry.distribution)).byteLength;\n\t\t\treturn (\n\t\t\t\ttotal +\n\t\t\t\tmanifestBytes +\n\t\t\t\tdistributionBytes +\n\t\t\t\tnew TextEncoder().encode(entry.source).byteLength +\n\t\t\t\tnew TextEncoder().encode(entry.manifestDigest).byteLength +\n\t\t\t\t(entry.signature === undefined ? 0 : new TextEncoder().encode(entry.signature).byteLength)\n\t\t\t);\n\t\t}, 0);\n\t\tif (payloadBytes > MAX_PLUGIN_REGISTRY_PAYLOAD_BYTES_V1)\n\t\t\tthrow new PluginRegistryErrorV1(\"payload_too_large\", t(\"Registry response exceeds the aggregate size limit\"));\n\t\tconst seen = new Set<string>();\n\t\tconst accepted: PluginRegistryManifestEnvelopeV1[] = [];\n\t\tconst rejected: PluginRegistryRejectionV1[] = [];\n\t\tfor (const entry of entries) {\n\t\t\tconst identity = `${entry.manifest.id}@${entry.manifest.pluginVersion}`;\n\t\t\tif (seen.has(identity))\n\t\t\t\tthrow new PluginRegistryErrorV1(\n\t\t\t\t\t\"invalid_manifest\",\n\t\t\t\t\tt(\"Duplicate registry manifest: {identity}\", { identity }),\n\t\t\t\t);\n\t\t\tseen.add(identity);\n\t\t\ttry {\n\t\t\t\tawait validateSourceProof(entry, options.verify, options.sourceVerifier);\n\t\t\t} catch (error) {\n\t\t\t\tif (!(error instanceof PluginRegistryErrorV1)) throw error;\n\t\t\t\tif (error.cause !== undefined) throw error;\n\t\t\t\tif (error.code !== \"source_rejected\" && error.code !== \"invalid_digest\") throw error;\n\t\t\t\trejected.push({\n\t\t\t\t\tpluginId: entry.manifest.id,\n\t\t\t\t\tpluginVersion: entry.manifest.pluginVersion,\n\t\t\t\t\tcode: error.code === \"invalid_digest\" ? \"digest_rejected\" : \"source_rejected\",\n\t\t\t\t\treason:\n\t\t\t\t\t\terror.code === \"invalid_digest\" ? \"Manifest digest mismatch\" : \"Registry source proof was rejected\",\n\t\t\t\t});\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tif (input.signal?.aborted)\n\t\t\t\tthrow new PluginRegistryErrorV1(\"cancelled\", t(\"Plugin registry operation was cancelled\"));\n\t\t\taccepted.push(entry);\n\t\t}\n\t\tconst manifests = accepted.map((entry) => entry.manifest);\n\t\tconst catalog = buildPluginCatalogV1({\n\t\t\tmanifests,\n\t\t\thost: options.host,\n\t\t\tavailableCapabilities: options.availableCapabilities,\n\t\t\tmaxEntries: maxManifests,\n\t\t});\n\t\tconst publicEntries = Object.freeze(\n\t\t\t[...accepted]\n\t\t\t\t.sort((left, right) => {\n\t\t\t\t\tconst idOrder = left.manifest.id.localeCompare(right.manifest.id);\n\t\t\t\t\treturn idOrder === 0\n\t\t\t\t\t\t? comparePluginVersionsV1(right.manifest.pluginVersion, left.manifest.pluginVersion)\n\t\t\t\t\t\t: idOrder;\n\t\t\t\t})\n\t\t\t\t.map((entry) =>\n\t\t\t\t\tObject.freeze({\n\t\t\t\t\t\tpluginId: entry.manifest.id,\n\t\t\t\t\t\tpluginVersion: entry.manifest.pluginVersion,\n\t\t\t\t\t\tsource: entry.source,\n\t\t\t\t\t\tmanifestDigest: entry.manifestDigest,\n\t\t\t\t\t\tsigned: entry.signature !== undefined,\n\t\t\t\t\t}),\n\t\t\t\t),\n\t\t);\n\t\tconst catalogByIdentity = new Map(\n\t\t\tcatalog.entries.map((entry) => [`${entry.pluginId}@${entry.pluginVersion}`, entry] as const),\n\t\t);\n\t\tconst verified = Object.freeze(\n\t\t\tpublicEntries.flatMap((entry) => {\n\t\t\t\tconst catalogEntry = catalogByIdentity.get(`${entry.pluginId}@${entry.pluginVersion}`);\n\t\t\t\tif (catalogEntry?.resolution.status === \"installed-ready\")\n\t\t\t\t\treturn [{ ...entry, resolutionStatus: \"installed-ready\" as const }];\n\t\t\t\tconst reason = catalogEntry?.resolution.diagnostics[0]?.message ?? \"Plugin is incompatible with this host\";\n\t\t\t\trejected.push({\n\t\t\t\t\tpluginId: entry.pluginId,\n\t\t\t\t\tpluginVersion: entry.pluginVersion,\n\t\t\t\t\tcode: \"incompatible\",\n\t\t\t\t\treason,\n\t\t\t\t});\n\t\t\t\treturn [];\n\t\t\t}),\n\t\t);\n\t\treturn {\n\t\t\taccepted: Object.freeze(accepted),\n\t\t\tsnapshot: Object.freeze({\n\t\t\t\tversion: 1,\n\t\t\t\tsource:\n\t\t\t\t\toptions.source.source === undefined ? sourceIdentity(accepted) : validateSource(options.source.source),\n\t\t\t\tentries: publicEntries,\n\t\t\t\tcatalog,\n\t\t\t\tverified,\n\t\t\t\trejected: Object.freeze(rejected),\n\t\t\t}),\n\t\t};\n\t};\n\tconst listManifests = async (\n\t\tinput: { readonly signal?: AbortSignal } = {},\n\t): Promise<readonly PluginManifestV1[]> => {\n\t\tconst loaded = await load(input);\n\t\treturn Object.freeze(\n\t\t\tloaded.snapshot.catalog.entries.flatMap((catalogEntry) =>\n\t\t\t\tloaded.accepted\n\t\t\t\t\t.filter(\n\t\t\t\t\t\t(entry) =>\n\t\t\t\t\t\t\tentry.manifest.id === catalogEntry.pluginId &&\n\t\t\t\t\t\t\tentry.manifest.pluginVersion === catalogEntry.pluginVersion,\n\t\t\t\t\t)\n\t\t\t\t\t.map((entry) => entry.manifest),\n\t\t\t),\n\t\t);\n\t};\n\treturn {\n\t\tlist: async (input = {}) => (await load(input)).snapshot,\n\t\tlistManifests,\n\t\tresolve: async (input) => {\n\t\t\tconst loaded = await load({ signal: input.signal });\n\t\t\tconst verified = new Set(loaded.snapshot.verified.map((entry) => `${entry.pluginId}@${entry.pluginVersion}`));\n\t\t\tconst identity =\n\t\t\t\tinput.pluginVersion === undefined\n\t\t\t\t\t? loaded.snapshot.catalog.entries.find(\n\t\t\t\t\t\t\t(candidate) =>\n\t\t\t\t\t\t\t\tcandidate.pluginId === input.pluginId &&\n\t\t\t\t\t\t\t\tcandidate.resolution.status === \"installed-ready\" &&\n\t\t\t\t\t\t\t\tverified.has(`${candidate.pluginId}@${candidate.pluginVersion}`),\n\t\t\t\t\t\t)\n\t\t\t\t\t: loaded.snapshot.catalog.entries.find(\n\t\t\t\t\t\t\t(candidate) =>\n\t\t\t\t\t\t\t\tcandidate.pluginId === input.pluginId &&\n\t\t\t\t\t\t\t\tcandidate.pluginVersion === input.pluginVersion &&\n\t\t\t\t\t\t\t\tcandidate.resolution.status === \"installed-ready\" &&\n\t\t\t\t\t\t\t\tverified.has(`${candidate.pluginId}@${candidate.pluginVersion}`),\n\t\t\t\t\t\t);\n\t\t\tconst entry =\n\t\t\t\tidentity === undefined\n\t\t\t\t\t? undefined\n\t\t\t\t\t: loaded.accepted.find(\n\t\t\t\t\t\t\t(candidate) =>\n\t\t\t\t\t\t\t\tcandidate.manifest.id === identity.pluginId &&\n\t\t\t\t\t\t\t\tcandidate.manifest.pluginVersion === identity.pluginVersion,\n\t\t\t\t\t\t);\n\t\t\tif (entry === undefined) return undefined;\n\t\t\treturn Object.freeze({\n\t\t\t\tmanifest: entry.manifest,\n\t\t\t\tsource: entry.source,\n\t\t\t\texpectedDigest: entry.manifestDigest,\n\t\t\t\t...(entry.distribution === undefined ? {} : { distribution: entry.distribution }),\n\t\t\t});\n\t\t},\n\t};\n}\n"]}