@allin-ai/agent-client 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 df007df
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,53 @@
+# @allin-ai/agent-client
+
+`allinai-agent` is the persistent local client for AllInAI. It keeps its
+configuration, credentials, plugins, run state, control socket, and logs under
+`~/.allinai/agent` by default.
+
+It connects to a Hub over the Agent Client protocol, accepts typed platform
+commands, starts one isolated runner per execution, reports ordered events, and
+manages locally installed Git plugins. It has no second local executor, claim
+loop, or Hub-provided shell execution path.
+
+## Install and operate
+
+```bash
+pnpm --filter @allin-ai/agent-client build
+pnpm --filter @allin-ai/agent-client exec allinai-agent init
+pnpm --filter @allin-ai/agent-client exec allinai-agent daemon
+pnpm --filter @allin-ai/agent-client exec allinai-agent status
+```
+
+Use `--config-dir <absolute path>` to put all client-owned state below a
+different root. The Desktop application uses this option for its per-user Agent
+Client home and supervises `allinai-agent daemon` through the local control
+endpoint.
+
+## Protocol surface
+
+The public package exports the local configuration/control helpers, the Hub
+test implementation, Client transport/supervisor types, runtime adapters, and
+Git-plugin manager:
+
+```ts
+import {
+  createMemoryHub,
+  createWsClientTransport,
+  createClientSupervisor,
+  createPlatformRegistry,
+  createPluginManager,
+} from "@allin-ai/agent-client";
+```
+
+`createMemoryHub` is an in-process protocol implementation for integration
+tests and embedding. Production clients use their configured Hub URL and
+credential store; credentials never need to be injected into a second local
+executor.
+
+## Packaging
+
+The root build runs `scripts/build-agent-client.mjs`. It cleans the Client
+`dist/`, deploys production dependencies to `out/agent-client/`, and creates
+the executable expected by Desktop at `out/agent-client/allinai-agent`.
+Electron Builder copies that directory to the packaged resource path
+`resources/agent-client/allinai-agent`.

package/bin/allinai-agent

@@ -0,0 +1,4 @@
+#!/usr/bin/env node
+import { main } from "../dist/cli/main.js";
+
+void main(process.argv.slice(2));

package/dist/capabilities/context.d.ts

@@ -0,0 +1,16 @@
+import type { CapabilityContextKey } from "./types.js";
+export type LocalContextSource = {
+    execution?: Record<string, unknown>;
+    workspace?: string | Record<string, unknown>;
+    projectConfig?: Record<string, unknown>;
+    /** Deliberately ignored: a capability never inherits process environment. */
+    environment?: unknown;
+    [key: string]: unknown;
+};
+/**
+ * Constructs a fresh JSON-only object. It selects named local sources rather
+ * than spreading a command or process object, so credentials and ambient
+ * environment cannot cross into a plugin process by accident.
+ */
+export declare function buildCapabilityContext(keys: readonly CapabilityContextKey[], source: LocalContextSource): Record<string, unknown>;
+//# sourceMappingURL=context.d.ts.map

package/dist/capabilities/context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../../src/capabilities/context.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAUvD,MAAM,MAAM,kBAAkB,GAAG;IAC/B,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACpC,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7C,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACxC,6EAA6E;IAC7E,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB,CAAC;AAkFF;;;;GAIG;AACH,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,SAAS,oBAAoB,EAAE,EACrC,MAAM,EAAE,kBAAkB,GACzB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAiBzB"}

package/dist/capabilities/context.js

@@ -0,0 +1,98 @@
+import { PLATFORM_IDS } from "../runtime/types.js";
+/**
+ * Project configuration is useful only after this recursive boundary. These
+ * names deliberately over-match: losing an optional display field is safer
+ * than leaking a session, cookie, bearer credential, or access key.
+ */
+const SENSITIVE_KEY = /(token|secret|password|credential|authorization|authentication|oauth|auth(token|key|cookie|session)|api[_-]?key|private[_-]?key|access[_-]?(key|token)|bearer|cookie|session|keychain|(^|[_-])env($|[_-]))/i;
+const UNSAFE_OBJECT_KEY = new Set(["__proto__", "constructor", "prototype"]);
+const MAX_CONTEXT_DEPTH = 12;
+function isPlainObject(value) {
+    if (!value || typeof value !== "object" || Array.isArray(value))
+        return false;
+    const prototype = Object.getPrototypeOf(value);
+    return prototype === Object.prototype || prototype === null;
+}
+function isRuntime(value) {
+    return (typeof value === "string" && PLATFORM_IDS.includes(value));
+}
+function sanitizeJson(value, seen = new WeakSet(), depth = 0) {
+    if (value === null || typeof value === "string" || typeof value === "boolean")
+        return value;
+    if (typeof value === "number")
+        return Number.isFinite(value) ? value : undefined;
+    if (depth > MAX_CONTEXT_DEPTH || typeof value !== "object")
+        return undefined;
+    if (seen.has(value))
+        return undefined;
+    seen.add(value);
+    if (Array.isArray(value)) {
+        const result = [];
+        for (const item of value) {
+            const sanitized = sanitizeJson(item, seen, depth + 1);
+            if (sanitized !== undefined)
+                result.push(sanitized);
+        }
+        return result;
+    }
+    if (!isPlainObject(value))
+        return undefined;
+    const result = {};
+    for (const [key, item] of Object.entries(value)) {
+        if (SENSITIVE_KEY.test(key) || UNSAFE_OBJECT_KEY.has(key))
+            continue;
+        const sanitized = sanitizeJson(item, seen, depth + 1);
+        if (sanitized !== undefined)
+            result[key] = sanitized;
+    }
+    return result;
+}
+function executionContext(source) {
+    if (!source)
+        return null;
+    const result = {};
+    for (const key of ["executionId", "taskId", "commandId"]) {
+        if (typeof source[key] === "string" && source[key].trim())
+            result[key] = source[key];
+    }
+    if (Number.isSafeInteger(source.attempt) && source.attempt >= 0) {
+        result.attempt = source.attempt;
+    }
+    if (isRuntime(source.runtime))
+        result.runtime = source.runtime;
+    return Object.keys(result).length > 0 ? result : null;
+}
+function workspaceContext(source) {
+    const candidate = typeof source === "string"
+        ? source
+        : isPlainObject(source) && typeof source.path === "string"
+            ? source.path
+            : null;
+    return candidate && candidate.trim() ? { path: candidate } : null;
+}
+/**
+ * Constructs a fresh JSON-only object. It selects named local sources rather
+ * than spreading a command or process object, so credentials and ambient
+ * environment cannot cross into a plugin process by accident.
+ */
+export function buildCapabilityContext(keys, source) {
+    const requested = new Set(keys);
+    const context = {};
+    if (requested.has("execution")) {
+        const execution = executionContext(source.execution);
+        if (execution)
+            context.execution = execution;
+    }
+    if (requested.has("workspace")) {
+        const workspace = workspaceContext(source.workspace);
+        if (workspace)
+            context.workspace = workspace;
+    }
+    if (requested.has("projectConfig")) {
+        const projectConfig = sanitizeJson(source.projectConfig);
+        if (projectConfig && !Array.isArray(projectConfig))
+            context.projectConfig = projectConfig;
+    }
+    return context;
+}
+//# sourceMappingURL=context.js.map

package/dist/capabilities/context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.js","sourceRoot":"","sources":["../../src/capabilities/context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAmB,MAAM,qBAAqB,CAAC;AAoBpE;;;;GAIG;AACH,MAAM,aAAa,GACjB,6MAA6M,CAAC;AAChN,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC,CAAC;AAC7E,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAE7B,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9E,MAAM,SAAS,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IAC/C,OAAO,SAAS,KAAK,MAAM,CAAC,SAAS,IAAI,SAAS,KAAK,IAAI,CAAC;AAC9D,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ,IAAI,YAAY,CAAC,QAAQ,CAAC,KAAmB,CAAC,CACxE,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CACnB,KAAc,EACd,OAAO,IAAI,OAAO,EAAU,EAC5B,KAAK,GAAG,CAAC;IAET,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS;QAC3E,OAAO,KAAK,CAAC;IACf,IAAI,OAAO,KAAK,KAAK,QAAQ;QAC3B,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IACpD,IAAI,KAAK,GAAG,iBAAiB,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC7E,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACtC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAChB,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,MAAM,GAAgB,EAAE,CAAC;QAC/B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,SAAS,GAAG,YAAY,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;YACtD,IAAI,SAAS,KAAK,SAAS;gBAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACtD,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC5C,MAAM,MAAM,GAAiC,EAAE,CAAC;IAChD,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChD,IAAI,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QACpE,MAAM,SAAS,GAAG,YAAY,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;QACtD,IAAI,SAAS,KAAK,SAAS;YAAE,MAAM,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC;IACvD,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,gBAAgB,CACvB,MAA2C;IAE3C,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,MAAM,MAAM,GAA8B,EAAE,CAAC;IAC7C,KAAK,MAAM,GAAG,IAAI,CAAC,aAAa,EAAE,QAAQ,EAAE,WAAW,CAAU,EAAE,CAAC;QAClE,IAAI,OAAO,MAAM,CAAC,GAAG,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE;YACvD,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC9B,CAAC;IACD,IAAI,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,IAAK,MAAM,CAAC,OAAkB,IAAI,CAAC,EAAE,CAAC;QAC5E,MAAM,CAAC,OAAO,GAAG,MAAM,CAAC,OAAiB,CAAC;IAC5C,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC;QAAE,MAAM,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;IAC/D,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;AACxD,CAAC;AAED,SAAS,gBAAgB,CACvB,MAAuC;IAEvC,MAAM,SAAS,GACb,OAAO,MAAM,KAAK,QAAQ;QACxB,CAAC,CAAC,MAAM;QACR,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ;YACxD,CAAC,CAAC,MAAM,CAAC,IAAI;YACb,CAAC,CAAC,IAAI,CAAC;IACb,OAAO,SAAS,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACpE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CACpC,IAAqC,EACrC,MAA0B;IAE1B,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,OAAO,GAA4B,EAAE,CAAC;IAC5C,IAAI,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;QAC/B,MAAM,SAAS,GAAG,gBAAgB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACrD,IAAI,SAAS;YAAE,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC;IAC/C,CAAC;IACD,IAAI,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;QAC/B,MAAM,SAAS,GAAG,gBAAgB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACrD,IAAI,SAAS;YAAE,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC;IAC/C,CAAC;IACD,IAAI,SAAS,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC;QACnC,MAAM,aAAa,GAAG,YAAY,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QACzD,IAAI,aAAa,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC;YAChD,OAAO,CAAC,aAAa,GAAG,aAAa,CAAC;IAC1C,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/capabilities/input.d.ts

@@ -0,0 +1,7 @@
+import type { JsonSchema } from "./types.js";
+/**
+ * Validates the manifest's deliberately small JSON Schema subset. Any schema
+ * shape or value outside that subset is rejected rather than silently ignored.
+ */
+export declare function validateCapabilityInput(schema: JsonSchema, input: unknown): boolean;
+//# sourceMappingURL=input.d.ts.map

package/dist/capabilities/input.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"input.d.ts","sourceRoot":"","sources":["../../src/capabilities/input.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AA+S7C;;;GAGG;AACH,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,UAAU,EAClB,KAAK,EAAE,OAAO,GACb,OAAO,CAET"}

package/dist/capabilities/input.js

@@ -0,0 +1,224 @@
+const MAX_SCHEMA_DEPTH = 12;
+const MAX_VALUE_DEPTH = 16;
+const MAX_SCHEMA_PROPERTIES = 128;
+const MAX_COLLECTION_ITEMS = 1_024;
+const MAX_DESCRIPTION_LENGTH = 4_096;
+const UNSAFE_KEYS = new Set(["__proto__", "constructor", "prototype"]);
+function isPlainObject(value) {
+    if (!value || typeof value !== "object" || Array.isArray(value))
+        return false;
+    const prototype = Object.getPrototypeOf(value);
+    return prototype === Object.prototype || prototype === null;
+}
+function hasOnlyKeys(value, allowed) {
+    return Object.keys(value).every((key) => allowed.includes(key));
+}
+function isBoundedInteger(value, maximum = MAX_COLLECTION_ITEMS) {
+    return (typeof value === "number" &&
+        Number.isSafeInteger(value) &&
+        value >= 0 &&
+        value <= maximum);
+}
+function optionalBound(schema, key, maximum) {
+    const value = schema[key];
+    if (value === undefined)
+        return undefined;
+    return isBoundedInteger(value, maximum) ? value : null;
+}
+function isDescription(schema) {
+    return (schema.description === undefined ||
+        (typeof schema.description === "string" &&
+            schema.description.length <= MAX_DESCRIPTION_LENGTH));
+}
+function isJsonValue(value, depth = 0) {
+    if (value === null ||
+        typeof value === "string" ||
+        typeof value === "boolean" ||
+        (typeof value === "number" && Number.isFinite(value))) {
+        return true;
+    }
+    if (depth >= MAX_VALUE_DEPTH || !value || typeof value !== "object") {
+        return false;
+    }
+    if (Array.isArray(value)) {
+        return (value.length <= MAX_COLLECTION_ITEMS &&
+            value.every((item) => isJsonValue(item, depth + 1)));
+    }
+    if (!isPlainObject(value) ||
+        Object.keys(value).length > MAX_SCHEMA_PROPERTIES) {
+        return false;
+    }
+    return Object.entries(value).every(([key, item]) => !UNSAFE_KEYS.has(key) && isJsonValue(item, depth + 1));
+}
+function validateObject(schema, value, depth) {
+    if (!hasOnlyKeys(schema, [
+        "type",
+        "description",
+        "properties",
+        "required",
+        "additionalProperties",
+        "minProperties",
+        "maxProperties",
+    ]) ||
+        !isDescription(schema) ||
+        !isPlainObject(value)) {
+        return false;
+    }
+    const minProperties = optionalBound(schema, "minProperties", MAX_SCHEMA_PROPERTIES);
+    const maxProperties = optionalBound(schema, "maxProperties", MAX_SCHEMA_PROPERTIES);
+    if (minProperties === null ||
+        maxProperties === null ||
+        (minProperties !== undefined &&
+            maxProperties !== undefined &&
+            minProperties > maxProperties)) {
+        return false;
+    }
+    const entries = Object.entries(value);
+    if (entries.length > MAX_SCHEMA_PROPERTIES ||
+        (minProperties !== undefined && entries.length < minProperties) ||
+        (maxProperties !== undefined && entries.length > maxProperties) ||
+        entries.some(([key]) => UNSAFE_KEYS.has(key))) {
+        return false;
+    }
+    let properties = {};
+    if (schema.properties !== undefined) {
+        if (!isPlainObject(schema.properties) ||
+            Object.keys(schema.properties).length > MAX_SCHEMA_PROPERTIES ||
+            Object.entries(schema.properties).some(([key]) => !key || key.length > 128 || UNSAFE_KEYS.has(key))) {
+            return false;
+        }
+        properties = schema.properties;
+    }
+    let required = [];
+    if (schema.required !== undefined) {
+        if (!Array.isArray(schema.required) ||
+            schema.required.length > MAX_SCHEMA_PROPERTIES ||
+            schema.required.some((key) => typeof key !== "string" || !Object.hasOwn(properties, key)) ||
+            new Set(schema.required).size !== schema.required.length) {
+            return false;
+        }
+        required = schema.required;
+    }
+    if (required.some((key) => !Object.hasOwn(value, key)))
+        return false;
+    if (schema.additionalProperties !== undefined &&
+        typeof schema.additionalProperties !== "boolean") {
+        return false;
+    }
+    const allowAdditional = schema.additionalProperties !== false;
+    for (const [key, item] of entries) {
+        const propertySchema = properties[key];
+        if (propertySchema === undefined) {
+            if (!allowAdditional || !isJsonValue(item, depth + 1))
+                return false;
+            continue;
+        }
+        if (!validateSchema(propertySchema, item, depth + 1))
+            return false;
+    }
+    return true;
+}
+function validateArray(schema, value, depth) {
+    if (!hasOnlyKeys(schema, [
+        "type",
+        "description",
+        "items",
+        "minItems",
+        "maxItems",
+    ]) ||
+        !isDescription(schema) ||
+        !Array.isArray(value) ||
+        schema.items === undefined) {
+        return false;
+    }
+    const minItems = optionalBound(schema, "minItems");
+    const maxItems = optionalBound(schema, "maxItems");
+    if (minItems === null ||
+        maxItems === null ||
+        (minItems !== undefined && maxItems !== undefined && minItems > maxItems) ||
+        value.length > MAX_COLLECTION_ITEMS ||
+        (minItems !== undefined && value.length < minItems) ||
+        (maxItems !== undefined && value.length > maxItems)) {
+        return false;
+    }
+    return value.every((item) => validateSchema(schema.items, item, depth + 1));
+}
+function validateString(schema, value) {
+    if (!hasOnlyKeys(schema, [
+        "type",
+        "description",
+        "minLength",
+        "maxLength",
+    ]) ||
+        !isDescription(schema) ||
+        typeof value !== "string") {
+        return false;
+    }
+    const minLength = optionalBound(schema, "minLength");
+    const maxLength = optionalBound(schema, "maxLength");
+    if (minLength === null ||
+        maxLength === null ||
+        (minLength !== undefined &&
+            maxLength !== undefined &&
+            minLength > maxLength) ||
+        (minLength !== undefined && value.length < minLength) ||
+        (maxLength !== undefined && value.length > maxLength)) {
+        return false;
+    }
+    return true;
+}
+function validateNumber(schema, value) {
+    if (!hasOnlyKeys(schema, ["type", "description", "minimum", "maximum"]) ||
+        !isDescription(schema) ||
+        typeof value !== "number" ||
+        !Number.isFinite(value)) {
+        return false;
+    }
+    if (schema.type === "integer" && !Number.isInteger(value))
+        return false;
+    if ((schema.minimum !== undefined &&
+        (typeof schema.minimum !== "number" ||
+            !Number.isFinite(schema.minimum))) ||
+        (schema.maximum !== undefined &&
+            (typeof schema.maximum !== "number" ||
+                !Number.isFinite(schema.maximum))) ||
+        (typeof schema.minimum === "number" &&
+            typeof schema.maximum === "number" &&
+            schema.minimum > schema.maximum)) {
+        return false;
+    }
+    return ((schema.minimum === undefined || value >= schema.minimum) &&
+        (schema.maximum === undefined || value <= schema.maximum));
+}
+function validateSchema(schema, value, depth) {
+    if (depth > MAX_SCHEMA_DEPTH || !isPlainObject(schema))
+        return false;
+    if (schema.type === "object")
+        return validateObject(schema, value, depth);
+    if (schema.type === "array")
+        return validateArray(schema, value, depth);
+    if (schema.type === "string")
+        return validateString(schema, value);
+    if (schema.type === "number" || schema.type === "integer") {
+        return validateNumber(schema, value);
+    }
+    if (schema.type === "boolean") {
+        return (hasOnlyKeys(schema, ["type", "description"]) &&
+            isDescription(schema) &&
+            typeof value === "boolean");
+    }
+    if (schema.type === "null") {
+        return (hasOnlyKeys(schema, ["type", "description"]) &&
+            isDescription(schema) &&
+            value === null);
+    }
+    return false;
+}
+/**
+ * Validates the manifest's deliberately small JSON Schema subset. Any schema
+ * shape or value outside that subset is rejected rather than silently ignored.
+ */
+export function validateCapabilityInput(schema, input) {
+    return validateSchema(schema, input, 0);
+}
+//# sourceMappingURL=input.js.map

package/dist/capabilities/input.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"input.js","sourceRoot":"","sources":["../../src/capabilities/input.ts"],"names":[],"mappings":"AAEA,MAAM,gBAAgB,GAAG,EAAE,CAAC;AAC5B,MAAM,eAAe,GAAG,EAAE,CAAC;AAC3B,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAClC,MAAM,oBAAoB,GAAG,KAAK,CAAC;AACnC,MAAM,sBAAsB,GAAG,KAAK,CAAC;AACrC,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC,CAAC;AAEvE,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9E,MAAM,SAAS,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IAC/C,OAAO,SAAS,KAAK,MAAM,CAAC,SAAS,IAAI,SAAS,KAAK,IAAI,CAAC;AAC9D,CAAC;AAED,SAAS,WAAW,CAClB,KAA8B,EAC9B,OAA0B;IAE1B,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,gBAAgB,CACvB,KAAc,EACd,OAAO,GAAG,oBAAoB;IAE9B,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC;QAC3B,KAAK,IAAI,CAAC;QACV,KAAK,IAAI,OAAO,CACjB,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CACpB,MAA+B,EAC/B,GAAW,EACX,OAAgB;IAEhB,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC1B,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,OAAO,gBAAgB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,CAAE,KAAgB,CAAC,CAAC,CAAC,IAAI,CAAC;AACrE,CAAC;AAED,SAAS,aAAa,CAAC,MAA+B;IACpD,OAAO,CACL,MAAM,CAAC,WAAW,KAAK,SAAS;QAChC,CAAC,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ;YACrC,MAAM,CAAC,WAAW,CAAC,MAAM,IAAI,sBAAsB,CAAC,CACvD,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,KAAc,EAAE,KAAK,GAAG,CAAC;IAC5C,IACE,KAAK,KAAK,IAAI;QACd,OAAO,KAAK,KAAK,QAAQ;QACzB,OAAO,KAAK,KAAK,SAAS;QAC1B,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EACrD,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,KAAK,IAAI,eAAe,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACpE,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,CACL,KAAK,CAAC,MAAM,IAAI,oBAAoB;YACpC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CACpD,CAAC;IACJ,CAAC;IACD,IACE,CAAC,aAAa,CAAC,KAAK,CAAC;QACrB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,qBAAqB,EACjD,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,KAAK,CAChC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,WAAW,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CACvE,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CACrB,MAA+B,EAC/B,KAAc,EACd,KAAa;IAEb,IACE,CAAC,WAAW,CAAC,MAAM,EAAE;QACnB,MAAM;QACN,aAAa;QACb,YAAY;QACZ,UAAU;QACV,sBAAsB;QACtB,eAAe;QACf,eAAe;KAChB,CAAC;QACF,CAAC,aAAa,CAAC,MAAM,CAAC;QACtB,CAAC,aAAa,CAAC,KAAK,CAAC,EACrB,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,aAAa,GAAG,aAAa,CACjC,MAAM,EACN,eAAe,EACf,qBAAqB,CACtB,CAAC;IACF,MAAM,aAAa,GAAG,aAAa,CACjC,MAAM,EACN,eAAe,EACf,qBAAqB,CACtB,CAAC;IACF,IACE,aAAa,KAAK,IAAI;QACtB,aAAa,KAAK,IAAI;QACtB,CAAC,aAAa,KAAK,SAAS;YAC1B,aAAa,KAAK,SAAS;YAC3B,aAAa,GAAG,aAAa,CAAC,EAChC,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACtC,IACE,OAAO,CAAC,MAAM,GAAG,qBAAqB;QACtC,CAAC,aAAa,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM,GAAG,aAAa,CAAC;QAC/D,CAAC,aAAa,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM,GAAG,aAAa,CAAC;QAC/D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAC7C,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,UAAU,GAA4B,EAAE,CAAC;IAC7C,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACpC,IACE,CAAC,aAAa,CAAC,MAAM,CAAC,UAAU,CAAC;YACjC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM,GAAG,qBAAqB;YAC7D,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CACpC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG,IAAI,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAC5D,EACD,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;IACjC,CAAC;IACD,IAAI,QAAQ,GAAa,EAAE,CAAC;IAC5B,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QAClC,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC;YAC/B,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,qBAAqB;YAC9C,MAAM,CAAC,QAAQ,CAAC,IAAI,CAClB,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,GAAG,CAAC,CACpE;YACD,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,QAAQ,CAAC,MAAM,EACxD,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,QAAQ,GAAG,MAAM,CAAC,QAAoB,CAAC;IACzC,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACrE,IACE,MAAM,CAAC,oBAAoB,KAAK,SAAS;QACzC,OAAO,MAAM,CAAC,oBAAoB,KAAK,SAAS,EAChD,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,eAAe,GAAG,MAAM,CAAC,oBAAoB,KAAK,KAAK,CAAC;IAC9D,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,OAAO,EAAE,CAAC;QAClC,MAAM,cAAc,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;QACvC,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;YACjC,IAAI,CAAC,eAAe,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC;gBAAE,OAAO,KAAK,CAAC;YACpE,SAAS;QACX,CAAC;QACD,IAAI,CAAC,cAAc,CAAC,cAAc,EAAE,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;IACrE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,aAAa,CACpB,MAA+B,EAC/B,KAAc,EACd,KAAa;IAEb,IACE,CAAC,WAAW,CAAC,MAAM,EAAE;QACnB,MAAM;QACN,aAAa;QACb,OAAO;QACP,UAAU;QACV,UAAU;KACX,CAAC;QACF,CAAC,aAAa,CAAC,MAAM,CAAC;QACtB,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACrB,MAAM,CAAC,KAAK,KAAK,SAAS,EAC1B,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACnD,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACnD,IACE,QAAQ,KAAK,IAAI;QACjB,QAAQ,KAAK,IAAI;QACjB,CAAC,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,GAAG,QAAQ,CAAC;QACzE,KAAK,CAAC,MAAM,GAAG,oBAAoB;QACnC,CAAC,QAAQ,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,GAAG,QAAQ,CAAC;QACnD,CAAC,QAAQ,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,GAAG,QAAQ,CAAC,EACnD,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,cAAc,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,cAAc,CACrB,MAA+B,EAC/B,KAAc;IAEd,IACE,CAAC,WAAW,CAAC,MAAM,EAAE;QACnB,MAAM;QACN,aAAa;QACb,WAAW;QACX,WAAW;KACZ,CAAC;QACF,CAAC,aAAa,CAAC,MAAM,CAAC;QACtB,OAAO,KAAK,KAAK,QAAQ,EACzB,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,SAAS,GAAG,aAAa,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IACrD,MAAM,SAAS,GAAG,aAAa,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IACrD,IACE,SAAS,KAAK,IAAI;QAClB,SAAS,KAAK,IAAI;QAClB,CAAC,SAAS,KAAK,SAAS;YACtB,SAAS,KAAK,SAAS;YACvB,SAAS,GAAG,SAAS,CAAC;QACxB,CAAC,SAAS,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC;QACrD,CAAC,SAAS,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,EACrD,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,cAAc,CACrB,MAA+B,EAC/B,KAAc;IAEd,IACE,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;QACnE,CAAC,aAAa,CAAC,MAAM,CAAC;QACtB,OAAO,KAAK,KAAK,QAAQ;QACzB,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EACvB,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACxE,IACE,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS;QAC3B,CAAC,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ;YACjC,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;QACtC,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS;YAC3B,CAAC,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ;gBACjC,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;QACtC,CAAC,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ;YACjC,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ;YAClC,MAAM,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,EAClC,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,CACL,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,IAAI,KAAK,IAAI,MAAM,CAAC,OAAO,CAAC;QACzD,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,IAAI,KAAK,IAAI,MAAM,CAAC,OAAO,CAAC,CAC1D,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CACrB,MAAe,EACf,KAAc,EACd,KAAa;IAEb,IAAI,KAAK,GAAG,gBAAgB,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IACrE,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,cAAc,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;IAC1E,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,aAAa,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;IACxE,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,cAAc,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACnE,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC1D,OAAO,cAAc,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACvC,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC9B,OAAO,CACL,WAAW,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;YAC5C,aAAa,CAAC,MAAM,CAAC;YACrB,OAAO,KAAK,KAAK,SAAS,CAC3B,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC3B,OAAO,CACL,WAAW,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;YAC5C,aAAa,CAAC,MAAM,CAAC;YACrB,KAAK,KAAK,IAAI,CACf,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CACrC,MAAkB,EAClB,KAAc;IAEd,OAAO,cAAc,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;AAC1C,CAAC"}

package/dist/capabilities/manifest.d.ts

@@ -0,0 +1,15 @@
+import { type ShellCapability } from "./types.js";
+export declare const MAX_CAPABILITY_TIMEOUT_SECONDS = 900;
+export declare function isValidCapabilityId(value: unknown): value is string;
+export declare function isSafeCapabilityEntry(value: unknown): value is string;
+/**
+ * Parse the intentionally small JSON Schema subset accepted for direct shell
+ * inputs. A root object is required, so a Hub request is always structured.
+ */
+export declare function parseShellCapability(value: unknown): ShellCapability | null;
+/**
+ * Installer-time realpath validation closes the remaining symlink escape
+ * avenue that syntactic manifest parsing cannot see.
+ */
+export declare function validateCapabilityEntries(pluginRoot: string, capabilities: readonly ShellCapability[]): Promise<void>;
+//# sourceMappingURL=manifest.d.ts.map

package/dist/capabilities/manifest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.d.ts","sourceRoot":"","sources":["../../src/capabilities/manifest.ts"],"names":[],"mappings":"AAEA,OAAO,EAOL,KAAK,eAAe,EACrB,MAAM,YAAY,CAAC;AAEpB,eAAO,MAAM,8BAA8B,MAAM,CAAC;AAsPlD,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAEnE;AAED,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAmBrE;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,eAAe,GAAG,IAAI,CAsC3E;AAYD;;;GAGG;AACH,wBAAsB,yBAAyB,CAC7C,UAAU,EAAE,MAAM,EAClB,YAAY,EAAE,SAAS,eAAe,EAAE,GACvC,OAAO,CAAC,IAAI,CAAC,CA+Bf"}