@allin-ai/agent-client 0.1.0

package/dist/capabilities/manifest.js

@@ -0,0 +1,292 @@
+import { realpath, stat } from "node:fs/promises";
+import path from "node:path";
+import { CAPABILITY_CONTEXT_KEYS, CAPABILITY_PERMISSIONS, } from "./types.js";
+export const MAX_CAPABILITY_TIMEOUT_SECONDS = 900;
+const CAPABILITY_ID = /^[a-z0-9][a-z0-9._-]{0,127}$/;
+const MAX_SCHEMA_DEPTH = 12;
+const MAX_SCHEMA_PROPERTIES = 128;
+const MAX_SCHEMA_COLLECTION_ITEMS = 1_024;
+function isPlainObject(value) {
+    if (!value || typeof value !== "object" || Array.isArray(value))
+        return false;
+    const prototype = Object.getPrototypeOf(value);
+    return prototype === Object.prototype || prototype === null;
+}
+function isNonNegativeInteger(value) {
+    return Number.isSafeInteger(value) && value >= 0;
+}
+function isFiniteNumber(value) {
+    return typeof value === "number" && Number.isFinite(value);
+}
+function hasOnlyKeys(value, allowed) {
+    return Object.keys(value).every((key) => allowed.includes(key));
+}
+function parseDescription(value) {
+    if (value.description === undefined)
+        return undefined;
+    if (typeof value.description !== "string" ||
+        value.description.length > 4_096) {
+        return null;
+    }
+    return value.description;
+}
+function parseBoundedInteger(value, key, maximum = MAX_SCHEMA_COLLECTION_ITEMS) {
+    const raw = value[key];
+    if (raw === undefined)
+        return undefined;
+    return isNonNegativeInteger(raw) && raw <= maximum ? raw : null;
+}
+function parseJsonSchema(value, depth = 0) {
+    if (depth > MAX_SCHEMA_DEPTH ||
+        !isPlainObject(value) ||
+        typeof value.type !== "string") {
+        return null;
+    }
+    const description = parseDescription(value);
+    if (description === null)
+        return null;
+    const withDescription = description === undefined ? {} : { description };
+    if (value.type === "object") {
+        if (!hasOnlyKeys(value, [
+            "type",
+            "description",
+            "properties",
+            "required",
+            "additionalProperties",
+            "minProperties",
+            "maxProperties",
+        ])) {
+            return null;
+        }
+        let properties;
+        if (value.properties !== undefined) {
+            if (!isPlainObject(value.properties))
+                return null;
+            const entries = Object.entries(value.properties);
+            if (entries.length > MAX_SCHEMA_PROPERTIES)
+                return null;
+            properties = {};
+            for (const [key, child] of entries) {
+                if (!key || key.length > 128)
+                    return null;
+                const parsed = parseJsonSchema(child, depth + 1);
+                if (!parsed)
+                    return null;
+                properties[key] = parsed;
+            }
+        }
+        let required;
+        if (value.required !== undefined) {
+            if (!Array.isArray(value.required) ||
+                value.required.length > MAX_SCHEMA_PROPERTIES ||
+                value.required.some((key) => typeof key !== "string" || !properties?.[key]) ||
+                new Set(value.required).size !== value.required.length) {
+                return null;
+            }
+            required = [...value.required];
+        }
+        if (value.additionalProperties !== undefined &&
+            typeof value.additionalProperties !== "boolean") {
+            return null;
+        }
+        const minProperties = parseBoundedInteger(value, "minProperties", MAX_SCHEMA_PROPERTIES);
+        const maxProperties = parseBoundedInteger(value, "maxProperties", MAX_SCHEMA_PROPERTIES);
+        if (minProperties === null ||
+            maxProperties === null ||
+            (minProperties !== undefined &&
+                maxProperties !== undefined &&
+                minProperties > maxProperties)) {
+            return null;
+        }
+        return {
+            ...withDescription,
+            type: "object",
+            ...(properties ? { properties } : {}),
+            ...(required ? { required } : {}),
+            ...(value.additionalProperties !== undefined
+                ? { additionalProperties: value.additionalProperties }
+                : {}),
+            ...(minProperties === undefined ? {} : { minProperties }),
+            ...(maxProperties === undefined ? {} : { maxProperties }),
+        };
+    }
+    if (value.type === "array") {
+        if (!hasOnlyKeys(value, [
+            "type",
+            "description",
+            "items",
+            "minItems",
+            "maxItems",
+        ])) {
+            return null;
+        }
+        const items = parseJsonSchema(value.items, depth + 1);
+        const minItems = parseBoundedInteger(value, "minItems");
+        const maxItems = parseBoundedInteger(value, "maxItems");
+        if (!items ||
+            minItems === null ||
+            maxItems === null ||
+            (minItems !== undefined && maxItems !== undefined && minItems > maxItems)) {
+            return null;
+        }
+        return {
+            ...withDescription,
+            type: "array",
+            items,
+            ...(minItems === undefined ? {} : { minItems }),
+            ...(maxItems === undefined ? {} : { maxItems }),
+        };
+    }
+    if (value.type === "string") {
+        if (!hasOnlyKeys(value, [
+            "type",
+            "description",
+            "minLength",
+            "maxLength",
+        ])) {
+            return null;
+        }
+        const minLength = parseBoundedInteger(value, "minLength");
+        const maxLength = parseBoundedInteger(value, "maxLength");
+        if (minLength === null ||
+            maxLength === null ||
+            (minLength !== undefined &&
+                maxLength !== undefined &&
+                minLength > maxLength)) {
+            return null;
+        }
+        return {
+            ...withDescription,
+            type: "string",
+            ...(minLength === undefined ? {} : { minLength }),
+            ...(maxLength === undefined ? {} : { maxLength }),
+        };
+    }
+    if (value.type === "number" || value.type === "integer") {
+        if (!hasOnlyKeys(value, ["type", "description", "minimum", "maximum"])) {
+            return null;
+        }
+        if ((value.minimum !== undefined && !isFiniteNumber(value.minimum)) ||
+            (value.maximum !== undefined && !isFiniteNumber(value.maximum)) ||
+            (typeof value.minimum === "number" &&
+                typeof value.maximum === "number" &&
+                value.minimum > value.maximum)) {
+            return null;
+        }
+        return {
+            ...withDescription,
+            type: value.type,
+            ...(value.minimum === undefined ? {} : { minimum: value.minimum }),
+            ...(value.maximum === undefined ? {} : { maximum: value.maximum }),
+        };
+    }
+    if (value.type === "boolean" || value.type === "null") {
+        if (!hasOnlyKeys(value, ["type", "description"]))
+            return null;
+        return { ...withDescription, type: value.type };
+    }
+    return null;
+}
+function parseEnum(value, allowed) {
+    if (!Array.isArray(value) || new Set(value).size !== value.length)
+        return null;
+    const values = [];
+    for (const item of value) {
+        if (typeof item !== "string" || !allowed.includes(item))
+            return null;
+        values.push(item);
+    }
+    return values;
+}
+export function isValidCapabilityId(value) {
+    return typeof value === "string" && CAPABILITY_ID.test(value);
+}
+export function isSafeCapabilityEntry(value) {
+    if (typeof value !== "string" ||
+        value.length === 0 ||
+        value.length > 512 ||
+        value !== value.trim() ||
+        value.includes("\0") ||
+        value.includes("\\") ||
+        path.posix.isAbsolute(value) ||
+        path.win32.isAbsolute(value)) {
+        return false;
+    }
+    const segments = value.split("/");
+    return (!segments.some((segment) => segment === "" || segment === "." || segment === "..") && path.posix.normalize(value) === value);
+}
+/**
+ * Parse the intentionally small JSON Schema subset accepted for direct shell
+ * inputs. A root object is required, so a Hub request is always structured.
+ */
+export function parseShellCapability(value) {
+    if (!isPlainObject(value))
+        return null;
+    if (!hasOnlyKeys(value, [
+        "id",
+        "entry",
+        "inputSchema",
+        "contextKeys",
+        "permissions",
+        "timeoutSeconds",
+    ]) ||
+        !isValidCapabilityId(value.id) ||
+        !isSafeCapabilityEntry(value.entry) ||
+        !Number.isInteger(value.timeoutSeconds) ||
+        value.timeoutSeconds < 1 ||
+        value.timeoutSeconds > MAX_CAPABILITY_TIMEOUT_SECONDS) {
+        return null;
+    }
+    const inputSchema = parseJsonSchema(value.inputSchema);
+    const contextKeys = parseEnum(value.contextKeys, CAPABILITY_CONTEXT_KEYS);
+    const permissions = parseEnum(value.permissions, CAPABILITY_PERMISSIONS);
+    if (!inputSchema ||
+        inputSchema.type !== "object" ||
+        !contextKeys ||
+        !permissions) {
+        return null;
+    }
+    return {
+        id: value.id,
+        entry: value.entry,
+        inputSchema,
+        contextKeys: contextKeys,
+        permissions: permissions,
+        timeoutSeconds: value.timeoutSeconds,
+    };
+}
+function resolvesInside(root, candidate) {
+    const relative = path.relative(root, candidate);
+    return (relative !== "" &&
+        !relative.startsWith(`..${path.sep}`) &&
+        relative !== ".." &&
+        !path.isAbsolute(relative));
+}
+/**
+ * Installer-time realpath validation closes the remaining symlink escape
+ * avenue that syntactic manifest parsing cannot see.
+ */
+export async function validateCapabilityEntries(pluginRoot, capabilities) {
+    const root = await realpath(pluginRoot);
+    for (const capability of capabilities) {
+        const candidate = path.resolve(root, capability.entry);
+        if (!resolvesInside(root, candidate)) {
+            throw new Error(`Capability ${capability.id} entry is outside the plugin root`);
+        }
+        let resolved;
+        try {
+            resolved = await realpath(candidate);
+        }
+        catch (error) {
+            throw new Error(`Capability ${capability.id} entry could not be resolved: ${error instanceof Error ? error.message : String(error)}`);
+        }
+        if (!resolvesInside(root, resolved)) {
+            throw new Error(`Capability ${capability.id} entry resolves outside the plugin root`);
+        }
+        const details = await stat(resolved);
+        if (!details.isFile()) {
+            throw new Error(`Capability ${capability.id} entry must resolve to a file`);
+        }
+    }
+}
+//# sourceMappingURL=manifest.js.map

package/dist/capabilities/manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.js","sourceRoot":"","sources":["../../src/capabilities/manifest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EACL,uBAAuB,EACvB,sBAAsB,GAMvB,MAAM,YAAY,CAAC;AAEpB,MAAM,CAAC,MAAM,8BAA8B,GAAG,GAAG,CAAC;AAElD,MAAM,aAAa,GAAG,8BAA8B,CAAC;AACrD,MAAM,gBAAgB,GAAG,EAAE,CAAC;AAC5B,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAClC,MAAM,2BAA2B,GAAG,KAAK,CAAC;AAE1C,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9E,MAAM,SAAS,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IAC/C,OAAO,SAAS,KAAK,MAAM,CAAC,SAAS,IAAI,SAAS,KAAK,IAAI,CAAC;AAC9D,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAc;IAC1C,OAAO,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAK,KAAgB,IAAI,CAAC,CAAC;AAC/D,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAC7D,CAAC;AAED,SAAS,WAAW,CAClB,KAA8B,EAC9B,OAA0B;IAE1B,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,gBAAgB,CACvB,KAA8B;IAE9B,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACtD,IACE,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ;QACrC,KAAK,CAAC,WAAW,CAAC,MAAM,GAAG,KAAK,EAChC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC,WAAW,CAAC;AAC3B,CAAC;AAED,SAAS,mBAAmB,CAC1B,KAA8B,EAC9B,GAAW,EACX,OAAO,GAAG,2BAA2B;IAErC,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;IACvB,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACxC,OAAO,oBAAoB,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AAClE,CAAC;AAED,SAAS,eAAe,CAAC,KAAc,EAAE,KAAK,GAAG,CAAC;IAChD,IACE,KAAK,GAAG,gBAAgB;QACxB,CAAC,aAAa,CAAC,KAAK,CAAC;QACrB,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,EAC9B,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,WAAW,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;IAC5C,IAAI,WAAW,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACtC,MAAM,eAAe,GAAG,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;IAEzE,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC5B,IACE,CAAC,WAAW,CAAC,KAAK,EAAE;YAClB,MAAM;YACN,aAAa;YACb,YAAY;YACZ,UAAU;YACV,sBAAsB;YACtB,eAAe;YACf,eAAe;SAChB,CAAC,EACF,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,UAAuD,CAAC;QAC5D,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YACnC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,UAAU,CAAC;gBAAE,OAAO,IAAI,CAAC;YAClD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YACjD,IAAI,OAAO,CAAC,MAAM,GAAG,qBAAqB;gBAAE,OAAO,IAAI,CAAC;YACxD,UAAU,GAAG,EAAE,CAAC;YAChB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,CAAC;gBACnC,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG;oBAAE,OAAO,IAAI,CAAC;gBAC1C,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;gBACjD,IAAI,CAAC,MAAM;oBAAE,OAAO,IAAI,CAAC;gBACzB,UAAU,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC;YAC3B,CAAC;QACH,CAAC;QACD,IAAI,QAA8B,CAAC;QACnC,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YACjC,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC;gBAC9B,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,qBAAqB;gBAC7C,KAAK,CAAC,QAAQ,CAAC,IAAI,CACjB,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,UAAU,EAAE,CAAC,GAAG,CAAC,CACvD;gBACD,IAAI,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,QAAQ,CAAC,MAAM,EACtD,CAAC;gBACD,OAAO,IAAI,CAAC;YACd,CAAC;YACD,QAAQ,GAAG,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC;QACjC,CAAC;QACD,IACE,KAAK,CAAC,oBAAoB,KAAK,SAAS;YACxC,OAAO,KAAK,CAAC,oBAAoB,KAAK,SAAS,EAC/C,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,aAAa,GAAG,mBAAmB,CACvC,KAAK,EACL,eAAe,EACf,qBAAqB,CACtB,CAAC;QACF,MAAM,aAAa,GAAG,mBAAmB,CACvC,KAAK,EACL,eAAe,EACf,qBAAqB,CACtB,CAAC;QACF,IACE,aAAa,KAAK,IAAI;YACtB,aAAa,KAAK,IAAI;YACtB,CAAC,aAAa,KAAK,SAAS;gBAC1B,aAAa,KAAK,SAAS;gBAC3B,aAAa,GAAG,aAAa,CAAC,EAChC,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO;YACL,GAAG,eAAe;YAClB,IAAI,EAAE,QAAQ;YACd,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjC,GAAG,CAAC,KAAK,CAAC,oBAAoB,KAAK,SAAS;gBAC1C,CAAC,CAAC,EAAE,oBAAoB,EAAE,KAAK,CAAC,oBAAoB,EAAE;gBACtD,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC;YACzD,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC;SAC1D,CAAC;IACJ,CAAC;IAED,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC3B,IACE,CAAC,WAAW,CAAC,KAAK,EAAE;YAClB,MAAM;YACN,aAAa;YACb,OAAO;YACP,UAAU;YACV,UAAU;SACX,CAAC,EACF,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,KAAK,GAAG,eAAe,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;QACtD,MAAM,QAAQ,GAAG,mBAAmB,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;QACxD,MAAM,QAAQ,GAAG,mBAAmB,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;QACxD,IACE,CAAC,KAAK;YACN,QAAQ,KAAK,IAAI;YACjB,QAAQ,KAAK,IAAI;YACjB,CAAC,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,GAAG,QAAQ,CAAC,EACzE,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO;YACL,GAAG,eAAe;YAClB,IAAI,EAAE,OAAO;YACb,KAAK;YACL,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC;YAC/C,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC;SAChD,CAAC;IACJ,CAAC;IAED,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC5B,IACE,CAAC,WAAW,CAAC,KAAK,EAAE;YAClB,MAAM;YACN,aAAa;YACb,WAAW;YACX,WAAW;SACZ,CAAC,EACF,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,SAAS,GAAG,mBAAmB,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;QAC1D,MAAM,SAAS,GAAG,mBAAmB,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;QAC1D,IACE,SAAS,KAAK,IAAI;YAClB,SAAS,KAAK,IAAI;YAClB,CAAC,SAAS,KAAK,SAAS;gBACtB,SAAS,KAAK,SAAS;gBACvB,SAAS,GAAG,SAAS,CAAC,EACxB,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO;YACL,GAAG,eAAe;YAClB,IAAI,EAAE,QAAQ;YACd,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC;YACjD,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC;SAClD,CAAC;IACJ,CAAC;IAED,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QACxD,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,EAAE,CAAC;YACvE,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IACE,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC/D,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC/D,CAAC,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ;gBAChC,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ;gBACjC,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,EAChC,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO;YACL,GAAG,eAAe;YAClB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;YAClE,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;SACnE,CAAC;IACJ,CAAC;IAED,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QACtD,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QAC9D,OAAO,EAAE,GAAG,eAAe,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;IAClD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,SAAS,CAChB,KAAc,EACd,OAAqB;IAErB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM;QAC/D,OAAO,IAAI,CAAC;IACd,MAAM,MAAM,GAAQ,EAAE,CAAC;IACvB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAS,CAAC;YAAE,OAAO,IAAI,CAAC;QAC1E,MAAM,CAAC,IAAI,CAAC,IAAS,CAAC,CAAC;IACzB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,KAAc;IAChD,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,KAAc;IAClD,IACE,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,CAAC,MAAM,KAAK,CAAC;QAClB,KAAK,CAAC,MAAM,GAAG,GAAG;QAClB,KAAK,KAAK,KAAK,CAAC,IAAI,EAAE;QACtB,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;QACpB,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;QACpB,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC;QAC5B,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,EAC5B,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAClC,OAAO,CACL,CAAC,QAAQ,CAAC,IAAI,CACZ,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,KAAK,EAAE,IAAI,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,IAAI,CACnE,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,KAAK,CAC3C,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAc;IACjD,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACvC,IACE,CAAC,WAAW,CAAC,KAAK,EAAE;QAClB,IAAI;QACJ,OAAO;QACP,aAAa;QACb,aAAa;QACb,aAAa;QACb,gBAAgB;KACjB,CAAC;QACF,CAAC,mBAAmB,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9B,CAAC,qBAAqB,CAAC,KAAK,CAAC,KAAK,CAAC;QACnC,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,cAAc,CAAC;QACtC,KAAK,CAAC,cAAyB,GAAG,CAAC;QACnC,KAAK,CAAC,cAAyB,GAAG,8BAA8B,EACjE,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,WAAW,GAAG,eAAe,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IACvD,MAAM,WAAW,GAAG,SAAS,CAAC,KAAK,CAAC,WAAW,EAAE,uBAAuB,CAAC,CAAC;IAC1E,MAAM,WAAW,GAAG,SAAS,CAAC,KAAK,CAAC,WAAW,EAAE,sBAAsB,CAAC,CAAC;IACzE,IACE,CAAC,WAAW;QACZ,WAAW,CAAC,IAAI,KAAK,QAAQ;QAC7B,CAAC,WAAW;QACZ,CAAC,WAAW,EACZ,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO;QACL,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,WAAW;QACX,WAAW,EAAE,WAAqC;QAClD,WAAW,EAAE,WAAqC;QAClD,cAAc,EAAE,KAAK,CAAC,cAAwB;KAC/C,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,IAAY,EAAE,SAAiB;IACrD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAChD,OAAO,CACL,QAAQ,KAAK,EAAE;QACf,CAAC,QAAQ,CAAC,UAAU,CAAC,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC;QACrC,QAAQ,KAAK,IAAI;QACjB,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAC3B,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,UAAkB,EAClB,YAAwC;IAExC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,CAAC;IACxC,KAAK,MAAM,UAAU,IAAI,YAAY,EAAE,CAAC;QACtC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC;QACvD,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,CAAC;YACrC,MAAM,IAAI,KAAK,CACb,cAAc,UAAU,CAAC,EAAE,mCAAmC,CAC/D,CAAC;QACJ,CAAC;QACD,IAAI,QAAgB,CAAC;QACrB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,CAAC;QACvC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CACb,cAAc,UAAU,CAAC,EAAE,iCACzB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CACvD,EAAE,CACH,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CACb,cAAc,UAAU,CAAC,EAAE,yCAAyC,CACrE,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC;QACrC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CACb,cAAc,UAAU,CAAC,EAAE,+BAA+B,CAC3D,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/capabilities/policy.d.ts

@@ -0,0 +1,17 @@
+import type { InstalledPlugin } from "../plugins/types.js";
+import type { CapabilityPermission, PolicyDecision, ShellCapability } from "./types.js";
+export type CapabilityLocalPolicy = {
+    /** Explicitly false is a durable local kill-switch for all capabilities. */
+    clientEnabled: boolean;
+    autoPermissions: readonly CapabilityPermission[];
+    allowedGitOrigins: readonly string[];
+    deniedPluginIds: readonly string[];
+    allowedWorkspaceRoots: readonly string[];
+};
+/**
+ * Policy order is deliberately fixed: coarse local safety constraints are
+ * never weakened by a later auto-permission setting. Unknown configuration
+ * and empty allowlists therefore fail closed.
+ */
+export declare function decideCapability(policy: CapabilityLocalPolicy, plugin: InstalledPlugin, capability: ShellCapability, workspace: string): PolicyDecision;
+//# sourceMappingURL=policy.d.ts.map

package/dist/capabilities/policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../../src/capabilities/policy.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,KAAK,EACV,oBAAoB,EACpB,cAAc,EACd,eAAe,EAChB,MAAM,YAAY,CAAC;AAEpB,MAAM,MAAM,qBAAqB,GAAG;IAClC,4EAA4E;IAC5E,aAAa,EAAE,OAAO,CAAC;IACvB,eAAe,EAAE,SAAS,oBAAoB,EAAE,CAAC;IACjD,iBAAiB,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,qBAAqB,EAAE,SAAS,MAAM,EAAE,CAAC;CAC1C,CAAC;AA0BF;;;;GAIG;AACH,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,qBAAqB,EAC7B,MAAM,EAAE,eAAe,EACvB,UAAU,EAAE,eAAe,EAC3B,SAAS,EAAE,MAAM,GAChB,cAAc,CA8BhB"}

package/dist/capabilities/policy.js

@@ -0,0 +1,57 @@
+import path from "node:path";
+import { isAllowedGitOrigin } from "../plugins/git.js";
+function isWorkspaceAllowed(workspace, roots) {
+    if (!path.isAbsolute(workspace) || roots.length === 0)
+        return false;
+    const resolvedWorkspace = path.resolve(workspace);
+    return roots.some((root) => {
+        if (typeof root !== "string" || !path.isAbsolute(root))
+            return false;
+        const relative = path.relative(path.resolve(root), resolvedWorkspace);
+        return (relative === "" ||
+            (!relative.startsWith(`..${path.sep}`) &&
+                relative !== ".." &&
+                !path.isAbsolute(relative)));
+    });
+}
+function permissionApprovalReason(permission) {
+    return permission === "network"
+        ? "network requires local approval"
+        : "workspace:write requires local approval";
+}
+/**
+ * Policy order is deliberately fixed: coarse local safety constraints are
+ * never weakened by a later auto-permission setting. Unknown configuration
+ * and empty allowlists therefore fail closed.
+ */
+export function decideCapability(policy, plugin, capability, workspace) {
+    if (!policy.clientEnabled)
+        return { mode: "deny", reason: "client is disabled" };
+    if (plugin.status !== "active" || !plugin.enabled) {
+        return { mode: "deny", reason: "plugin is not active" };
+    }
+    if (policy.deniedPluginIds.includes(plugin.id)) {
+        return { mode: "deny", reason: "plugin is denied by local policy" };
+    }
+    if (!isAllowedGitOrigin(plugin.gitUrl, policy.allowedGitOrigins)) {
+        return { mode: "deny", reason: "plugin Git origin is not allowed" };
+    }
+    if (!isWorkspaceAllowed(workspace, policy.allowedWorkspaceRoots)) {
+        return { mode: "deny", reason: "workspace is not allowed" };
+    }
+    const automatic = new Set(policy.autoPermissions);
+    // Network always asks unless this exact permission appears in local policy.
+    if (capability.permissions.includes("network") && !automatic.has("network")) {
+        return { mode: "approval", reason: permissionApprovalReason("network") };
+    }
+    for (const permission of capability.permissions) {
+        if (!automatic.has(permission)) {
+            return { mode: "approval", reason: permissionApprovalReason(permission) };
+        }
+    }
+    return {
+        mode: "auto",
+        reason: "all capability permissions are locally allowed",
+    };
+}
+//# sourceMappingURL=policy.js.map

package/dist/capabilities/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../src/capabilities/policy.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAiBvD,SAAS,kBAAkB,CACzB,SAAiB,EACjB,KAAwB;IAExB,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACpE,MAAM,iBAAiB,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAClD,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;QACzB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;QACrE,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,iBAAiB,CAAC,CAAC;QACtE,OAAO,CACL,QAAQ,KAAK,EAAE;YACf,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC;gBACpC,QAAQ,KAAK,IAAI;gBACjB,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAC9B,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,wBAAwB,CAAC,UAAgC;IAChE,OAAO,UAAU,KAAK,SAAS;QAC7B,CAAC,CAAC,iCAAiC;QACnC,CAAC,CAAC,yCAAyC,CAAC;AAChD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAC9B,MAA6B,EAC7B,MAAuB,EACvB,UAA2B,EAC3B,SAAiB;IAEjB,IAAI,CAAC,MAAM,CAAC,aAAa;QACvB,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;IACxD,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QAClD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC;IAC1D,CAAC;IACD,IAAI,MAAM,CAAC,eAAe,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;QAC/C,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,kCAAkC,EAAE,CAAC;IACtE,CAAC;IACD,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACjE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,kCAAkC,EAAE,CAAC;IACtE,CAAC;IACD,IAAI,CAAC,kBAAkB,CAAC,SAAS,EAAE,MAAM,CAAC,qBAAqB,CAAC,EAAE,CAAC;QACjE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,0BAA0B,EAAE,CAAC;IAC9D,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;IAClD,4EAA4E;IAC5E,IAAI,UAAU,CAAC,WAAW,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;QAC5E,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,wBAAwB,CAAC,SAAS,CAAC,EAAE,CAAC;IAC3E,CAAC;IACD,KAAK,MAAM,UAAU,IAAI,UAAU,CAAC,WAAW,EAAE,CAAC;QAChD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;YAC/B,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,wBAAwB,CAAC,UAAU,CAAC,EAAE,CAAC;QAC5E,CAAC;IACH,CAAC;IACD,OAAO;QACL,IAAI,EAAE,MAAM;QACZ,MAAM,EAAE,gDAAgD;KACzD,CAAC;AACJ,CAAC"}

package/dist/capabilities/shell-host.d.ts

@@ -0,0 +1,32 @@
+import { type ChildProcess, type SpawnOptions } from "node:child_process";
+import { type CapabilityEvent } from "./shell-wire.js";
+import type { ShellCapability } from "./types.js";
+export type CapabilitySpawn = (entry: string, args: readonly string[], options: SpawnOptions) => ChildProcess;
+export type ShellCapabilityHostOptions = {
+    /** The immutable active revision selected by the local plugin manager. */
+    pluginRoot: string;
+    spawn?: CapabilitySpawn;
+    /** Explicit local values only; process.env is never inherited. */
+    environment?: Readonly<Record<string, string>>;
+    maxLineBytes?: number;
+    maxOutputBytes?: number;
+    killGraceMs?: number;
+};
+/**
+ * The only process boundary available to a direct Shell Capability. The Hub
+ * supplies data, never a command: the installed manifest determines the
+ * executable and a fixed JSON document is the process's sole stdin input.
+ */
+export declare class ShellCapabilityHost {
+    private readonly options;
+    private readonly spawn;
+    private readonly maxLineBytes;
+    private readonly maxOutputBytes;
+    private readonly killGraceMs;
+    constructor(options: ShellCapabilityHostOptions);
+    invoke(capability: ShellCapability, input: unknown, context: Record<string, unknown>, signal: AbortSignal): AsyncIterable<CapabilityEvent>;
+    private resolveEntrypoint;
+    private run;
+    private streamChild;
+}
+//# sourceMappingURL=shell-host.d.ts.map

package/dist/capabilities/shell-host.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shell-host.d.ts","sourceRoot":"","sources":["../../src/capabilities/shell-host.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,YAAY,EACjB,KAAK,YAAY,EAClB,MAAM,oBAAoB,CAAC;AAI5B,OAAO,EAEL,KAAK,eAAe,EACrB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAElD,MAAM,MAAM,eAAe,GAAG,CAC5B,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,OAAO,EAAE,YAAY,KAClB,YAAY,CAAC;AAElB,MAAM,MAAM,0BAA0B,GAAG;IACvC,0EAA0E;IAC1E,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,eAAe,CAAC;IACxB,kEAAkE;IAClE,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC/C,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,CAAC;AA2EF;;;;GAIG;AACH,qBAAa,mBAAmB;IAMlB,OAAO,CAAC,QAAQ,CAAC,OAAO;IALpC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAkB;IACxC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAS;IACtC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAS;IACxC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;gBAER,OAAO,EAAE,0BAA0B;IAgBzD,MAAM,CACX,UAAU,EAAE,eAAe,EAC3B,KAAK,EAAE,OAAO,EACd,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,MAAM,EAAE,WAAW,GAClB,aAAa,CAAC,eAAe,CAAC;YAiBnB,iBAAiB;YAiCjB,GAAG;YAuFH,WAAW;CAiK1B"}