@av-pi-studio/server 0.0.73 → 0.0.74

package/dist/extensions/curated-packs.d.ts

@@ -0,0 +1,70 @@
+/**
+ * The curated-packs manifest — single source of truth for which Pi extensions Pi-Studio
+ * recommends (swe/features/preinstalled-extensions.md § The manifest).
+ *
+ * Pure data plus two tiny pure helpers: no filesystem, no process, no daemon dependency. Sources
+ * are deliberately **unpinned** (design tenet 3) — `pi update` skips pinned npm specs
+ * (`updateConfiguredSources`: `if (!parsed.pinned)`, pi 0.84.1 `package-manager.js:840`), so a pin
+ * here would permanently exclude that extension from the user's own updater. The guard test below
+ * makes that invariant mechanically unbreakable.
+ */
+/** One curated entry: an unpinned pi source spec, the version it was added in, and an optional
+ *  deprecation tombstone. Entries are never deleted — retire with `deprecated: true`. */
+export interface CuratedEntry {
+    /** Unpinned pi spec: `npm:<name>` or `git:<url>` — no `@version`/`@ref` suffix. */
+    source: string;
+    /** Aligned workspace version on disk when the entry was added (docs/UI/audit only). */
+    addedIn: string;
+    /** Tombstone: never offered anew; existing installs are left untouched. */
+    deprecated?: boolean;
+}
+export interface CuratedPack {
+    title: string;
+    description: string;
+    packages: CuratedEntry[];
+}
+export type CuratedPackCatalog = Record<string, CuratedPack>;
+export declare const CURATED_PACKS: {
+    core: {
+        title: string;
+        description: string;
+        packages: {
+            source: string;
+            addedIn: string;
+        }[];
+    };
+};
+export declare const SERVER_VERSION: string;
+export interface ParsedSource {
+    kind: "npm" | "git";
+    /** Pi's own dedup key: npm package name, or git URL without ref. */
+    identity: string;
+    pinned: boolean;
+}
+/** Parse a pi source spec (`npm:<name>[@<version>]` or `git:<url>[@<ref>]`). Throws on any other
+ *  scheme — every manifest entry must be one of the two pi understands. */
+export declare function parseSource(source: string): ParsedSource;
+/** `identityOf(source) === parseSource(source).identity` — pi's dedup key, ref/version stripped. */
+export declare function identityOf(source: string): string;
+/** `core` + the given slugs (deduped, order-stable, `core` always first), with unknown slugs
+ *  reported for a caller-side `warn` rather than thrown. Entries are deduped by identity so a
+ *  hypothetical identity reachable via two selected packs is never offered twice. */
+export declare function selectEntries(catalog: CuratedPackCatalog, packs: readonly string[]): {
+    entries: {
+        pack: string;
+        entry: CuratedEntry;
+    }[];
+    unknownSlugs: string[];
+};
+export interface CatalogViolation {
+    pack: string;
+    source?: string;
+    message: string;
+}
+/** The manifest invariants from § The manifest: every source parses and is unpinned, no identity
+ *  is shared across packs, pack keys are stable slugs with `core` present, every `addedIn` is
+ *  valid semver `<=` `currentVersion`, and no source carries a placeholder. Returns every
+ *  violation found (empty = a clean catalog) rather than throwing on the first one, so a guard
+ *  test can assert the full violation set against a deliberately broken fixture. */
+export declare function checkCatalogInvariants(catalog: CuratedPackCatalog, currentVersion?: string): CatalogViolation[];
+//# sourceMappingURL=curated-packs.d.ts.map

package/dist/extensions/curated-packs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"curated-packs.d.ts","sourceRoot":"","sources":["../../src/extensions/curated-packs.ts"],"names":[],"mappings":"AAEA;;;;;;;;;GASG;AAEH;yFACyF;AACzF,MAAM,WAAW,YAAY;IAC3B,mFAAmF;IACnF,MAAM,EAAE,MAAM,CAAC;IACf,uFAAuF;IACvF,OAAO,EAAE,MAAM,CAAC;IAChB,2EAA2E;IAC3E,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,YAAY,EAAE,CAAC;CAC1B;AAED,MAAM,MAAM,kBAAkB,GAAG,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;AAI7D,eAAO,MAAM,aAAa;;;;;;;;;CAiBI,CAAC;AAK/B,eAAO,MAAM,cAAc,EAAE,MACT,CAAC;AAErB,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,KAAK,GAAG,KAAK,CAAC;IACpB,oEAAoE;IACpE,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,OAAO,CAAC;CACjB;AAsCD;2EAC2E;AAC3E,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,YAAY,CAgBxD;AAED,oGAAoG;AACpG,wBAAgB,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAEjD;AAED;;qFAEqF;AACrF,wBAAgB,aAAa,CAC3B,OAAO,EAAE,kBAAkB,EAC3B,KAAK,EAAE,SAAS,MAAM,EAAE,GACvB;IAAE,OAAO,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,YAAY,CAAA;KAAE,EAAE,CAAC;IAAC,YAAY,EAAE,MAAM,EAAE,CAAA;CAAE,CAoB9E;AAuBD,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;;oFAIoF;AACpF,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,kBAAkB,EAC3B,cAAc,GAAE,MAAuB,GACtC,gBAAgB,EAAE,CAuEpB"}

package/dist/extensions/curated-packs.js

@@ -0,0 +1,206 @@
+import { createRequire } from "node:module";
+// core is implicit and always selected; swe/science/data are future audience packs, added as pure
+// data edits over time.
+export const CURATED_PACKS = {
+    core: {
+        title: "Baseline",
+        description: "Recommended for everyone",
+        packages: [
+            // Background commands + attachable PTY/TUI sessions — long-running work without blocking a turn.
+            { source: "npm:@99percentpeople/pi-background-tasks", addedIn: "0.0.73" },
+            // Automatic memory-context injection: load, search, persist knowledge across sessions.
+            { source: "npm:pi-memctx", addedIn: "0.0.73" },
+            // Todo list for the model, rendered as a live overlay that survives /reload.
+            { source: "npm:@juicesharp/rpiv-todo", addedIn: "0.0.73" },
+            // Web search, URL fetch, repo cloning, PDF/YouTube extraction.
+            { source: "npm:pi-web-access", addedIn: "0.0.73" },
+            // Powerline-style status bar.
+            { source: "npm:pi-powerline-footer", addedIn: "0.0.73" },
+        ],
+    },
+};
+// Aligned workspace version, read from packages/server/package.json (never the root one — the
+// root package.json deliberately carries no "version" field). This module sits two levels below
+// the package root in both `src/` and compiled `dist/`, so the specifier is "../../package.json".
+export const SERVER_VERSION = createRequire(import.meta.url)("../../package.json")
+    .version;
+/** Split a pi git source's `repo[@ref]` shape (mirrors pi's own `splitRef`,
+ *  `@earendil-works/pi-coding-agent/dist/utils/git.js`), so `pinned` is correct for scp-like
+ *  (`git@host:path@ref`), URL (`https://host/path@ref`), and bare (`host/path@ref`) forms. */
+function splitGitRef(url) {
+    const scpMatch = /^git@([^:]+):(.+)$/.exec(url);
+    if (scpMatch) {
+        const host = scpMatch[1] ?? "";
+        const pathWithMaybeRef = scpMatch[2] ?? "";
+        const at = pathWithMaybeRef.indexOf("@");
+        if (at <= 0)
+            return { repo: url };
+        const repoPath = pathWithMaybeRef.slice(0, at);
+        const ref = pathWithMaybeRef.slice(at + 1);
+        if (!repoPath || !ref)
+            return { repo: url };
+        return { repo: `git@${host}:${repoPath}`, ref };
+    }
+    if (url.includes("://")) {
+        try {
+            const parsed = new URL(url);
+            const pathWithMaybeRef = parsed.pathname.replace(/^\/+/, "");
+            const at = pathWithMaybeRef.indexOf("@");
+            if (at <= 0)
+                return { repo: url };
+            const repoPath = pathWithMaybeRef.slice(0, at);
+            const ref = pathWithMaybeRef.slice(at + 1);
+            if (!repoPath || !ref)
+                return { repo: url };
+            parsed.pathname = `/${repoPath}`;
+            return { repo: parsed.toString().replace(/\/$/, ""), ref };
+        }
+        catch {
+            return { repo: url };
+        }
+    }
+    // Bare host/path form (`pi install git:github.com/user/repo[@ref]`).
+    const at = url.lastIndexOf("@");
+    if (at > 0)
+        return { repo: url.slice(0, at), ref: url.slice(at + 1) };
+    return { repo: url };
+}
+/** Parse a pi source spec (`npm:<name>[@<version>]` or `git:<url>[@<ref>]`). Throws on any other
+ *  scheme — every manifest entry must be one of the two pi understands. */
+export function parseSource(source) {
+    if (source.startsWith("npm:")) {
+        const spec = source.slice("npm:".length);
+        // A scoped package's leading `@scope/` must not be mistaken for a version separator — only an
+        // `@` at index > 0 introduces a version.
+        const at = spec.lastIndexOf("@");
+        const hasVersion = at > 0;
+        const name = hasVersion ? spec.slice(0, at) : spec;
+        const version = hasVersion ? spec.slice(at + 1) : undefined;
+        return { kind: "npm", identity: name, pinned: Boolean(version) };
+    }
+    if (source.startsWith("git:")) {
+        const { repo, ref } = splitGitRef(source.slice("git:".length));
+        return { kind: "git", identity: repo, pinned: Boolean(ref) };
+    }
+    throw new Error(`unrecognized pi source spec (must start with "npm:" or "git:"): ${source}`);
+}
+/** `identityOf(source) === parseSource(source).identity` — pi's dedup key, ref/version stripped. */
+export function identityOf(source) {
+    return parseSource(source).identity;
+}
+/** `core` + the given slugs (deduped, order-stable, `core` always first), with unknown slugs
+ *  reported for a caller-side `warn` rather than thrown. Entries are deduped by identity so a
+ *  hypothetical identity reachable via two selected packs is never offered twice. */
+export function selectEntries(catalog, packs) {
+    const slugs = ["core", ...new Set(packs.filter((slug) => slug !== "core"))];
+    const entries = [];
+    const unknownSlugs = [];
+    const seenIdentities = new Set();
+    for (const slug of slugs) {
+        const pack = catalog[slug];
+        if (!pack) {
+            if (slug !== "core")
+                unknownSlugs.push(slug);
+            continue;
+        }
+        for (const entry of pack.packages) {
+            const identity = identityOf(entry.source);
+            if (seenIdentities.has(identity))
+                continue;
+            seenIdentities.add(identity);
+            entries.push({ pack: slug, entry });
+        }
+    }
+    return { entries, unknownSlugs };
+}
+// ---------------------------------------------------------------------------
+// Manifest invariants (curated-packs.test.ts is the guard test that enforces these)
+// ---------------------------------------------------------------------------
+/** `"1.2.3"`-shaped, no pre-release/build metadata — the only form the manifest ever needs. */
+const SEMVER_PATTERN = /^\d+\.\d+\.\d+$/;
+/** `a <= b` for two `SEMVER_PATTERN`-shaped strings, compared numerically per segment. */
+function semverLte(a, b) {
+    const pa = a.split(".").map(Number);
+    const pb = b.split(".").map(Number);
+    for (let i = 0; i < 3; i++) {
+        const da = pa[i] ?? 0;
+        const db = pb[i] ?? 0;
+        if (da !== db)
+            return da < db;
+    }
+    return true;
+}
+const PLACEHOLDER_PATTERN = /<(ref|version|pkg)>/;
+/** The manifest invariants from § The manifest: every source parses and is unpinned, no identity
+ *  is shared across packs, pack keys are stable slugs with `core` present, every `addedIn` is
+ *  valid semver `<=` `currentVersion`, and no source carries a placeholder. Returns every
+ *  violation found (empty = a clean catalog) rather than throwing on the first one, so a guard
+ *  test can assert the full violation set against a deliberately broken fixture. */
+export function checkCatalogInvariants(catalog, currentVersion = SERVER_VERSION) {
+    const violations = [];
+    const identityOwner = new Map();
+    if (!("core" in catalog)) {
+        violations.push({ pack: "core", message: "manifest must define a 'core' pack" });
+    }
+    for (const [packKey, pack] of Object.entries(catalog)) {
+        if (!/^[a-z][a-z0-9]*$/.test(packKey)) {
+            violations.push({ pack: packKey, message: `pack key "${packKey}" is not a stable slug` });
+        }
+        for (const entry of pack.packages) {
+            if (PLACEHOLDER_PATTERN.test(entry.source)) {
+                violations.push({
+                    pack: packKey,
+                    source: entry.source,
+                    message: "source contains a placeholder (<ref>/<version>/<pkg>)",
+                });
+                continue;
+            }
+            let parsed;
+            try {
+                parsed = parseSource(entry.source);
+            }
+            catch (error) {
+                violations.push({
+                    pack: packKey,
+                    source: entry.source,
+                    message: error instanceof Error ? error.message : String(error),
+                });
+                continue;
+            }
+            if (parsed.pinned) {
+                violations.push({
+                    pack: packKey,
+                    source: entry.source,
+                    message: "source carries a version/ref pin — sources must stay unpinned",
+                });
+            }
+            const owner = identityOwner.get(parsed.identity);
+            if (owner && owner !== packKey) {
+                violations.push({
+                    pack: packKey,
+                    source: entry.source,
+                    message: `identity "${parsed.identity}" also appears in pack "${owner}" (identities must be disjoint across packs)`,
+                });
+            }
+            else if (!owner) {
+                identityOwner.set(parsed.identity, packKey);
+            }
+            if (!SEMVER_PATTERN.test(entry.addedIn)) {
+                violations.push({
+                    pack: packKey,
+                    source: entry.source,
+                    message: `addedIn "${entry.addedIn}" is not valid semver`,
+                });
+            }
+            else if (!semverLte(entry.addedIn, currentVersion)) {
+                violations.push({
+                    pack: packKey,
+                    source: entry.source,
+                    message: `addedIn "${entry.addedIn}" is newer than the current version "${currentVersion}"`,
+                });
+            }
+        }
+    }
+    return violations;
+}
+//# sourceMappingURL=curated-packs.js.map

package/dist/extensions/curated-packs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"curated-packs.js","sourceRoot":"","sources":["../../src/extensions/curated-packs.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAgC5C,kGAAkG;AAClG,wBAAwB;AACxB,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,IAAI,EAAE;QACJ,KAAK,EAAE,UAAU;QACjB,WAAW,EAAE,0BAA0B;QACvC,QAAQ,EAAE;YACR,iGAAiG;YACjG,EAAE,MAAM,EAAE,0CAA0C,EAAE,OAAO,EAAE,QAAQ,EAAE;YACzE,uFAAuF;YACvF,EAAE,MAAM,EAAE,eAAe,EAAE,OAAO,EAAE,QAAQ,EAAE;YAC9C,6EAA6E;YAC7E,EAAE,MAAM,EAAE,2BAA2B,EAAE,OAAO,EAAE,QAAQ,EAAE;YAC1D,+DAA+D;YAC/D,EAAE,MAAM,EAAE,mBAAmB,EAAE,OAAO,EAAE,QAAQ,EAAE;YAClD,8BAA8B;YAC9B,EAAE,MAAM,EAAE,yBAAyB,EAAE,OAAO,EAAE,QAAQ,EAAE;SACzD;KACF;CAC2B,CAAC;AAE/B,8FAA8F;AAC9F,gGAAgG;AAChG,kGAAkG;AAClG,MAAM,CAAC,MAAM,cAAc,GAAW,aAAa,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,oBAAoB,CAAC;KACvF,OAAiB,CAAC;AASrB;;8FAE8F;AAC9F,SAAS,WAAW,CAAC,GAAW;IAC9B,MAAM,QAAQ,GAAG,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChD,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC/B,MAAM,gBAAgB,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC3C,MAAM,EAAE,GAAG,gBAAgB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,EAAE,IAAI,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;QAClC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC/C,MAAM,GAAG,GAAG,gBAAgB,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QAC3C,IAAI,CAAC,QAAQ,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;QAC5C,OAAO,EAAE,IAAI,EAAE,OAAO,IAAI,IAAI,QAAQ,EAAE,EAAE,GAAG,EAAE,CAAC;IAClD,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACxB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;YAC5B,MAAM,gBAAgB,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YAC7D,MAAM,EAAE,GAAG,gBAAgB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACzC,IAAI,EAAE,IAAI,CAAC;gBAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;YAClC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC/C,MAAM,GAAG,GAAG,gBAAgB,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;YAC3C,IAAI,CAAC,QAAQ,IAAI,CAAC,GAAG;gBAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;YAC5C,MAAM,CAAC,QAAQ,GAAG,IAAI,QAAQ,EAAE,CAAC;YACjC,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC;QAC7D,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;QACvB,CAAC;IACH,CAAC;IACD,qEAAqE;IACrE,MAAM,EAAE,GAAG,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,EAAE,GAAG,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;IACtE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;AACvB,CAAC;AAED;2EAC2E;AAC3E,MAAM,UAAU,WAAW,CAAC,MAAc;IACxC,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACzC,8FAA8F;QAC9F,yCAAyC;QACzC,MAAM,EAAE,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,UAAU,GAAG,EAAE,GAAG,CAAC,CAAC;QAC1B,MAAM,IAAI,GAAG,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACnD,MAAM,OAAO,GAAG,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC5D,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;IACnE,CAAC;IACD,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAC9B,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QAC/D,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;IAC/D,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,mEAAmE,MAAM,EAAE,CAAC,CAAC;AAC/F,CAAC;AAED,oGAAoG;AACpG,MAAM,UAAU,UAAU,CAAC,MAAc;IACvC,OAAO,WAAW,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC;AACtC,CAAC;AAED;;qFAEqF;AACrF,MAAM,UAAU,aAAa,CAC3B,OAA2B,EAC3B,KAAwB;IAExB,MAAM,KAAK,GAAG,CAAC,MAAM,EAAE,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC;IAC5E,MAAM,OAAO,GAA4C,EAAE,CAAC;IAC5D,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,MAAM,cAAc,GAAG,IAAI,GAAG,EAAU,CAAC;IAEzC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC3B,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,IAAI,IAAI,KAAK,MAAM;gBAAE,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC7C,SAAS;QACX,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClC,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAC1C,IAAI,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC;gBAAE,SAAS;YAC3C,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC7B,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC;AACnC,CAAC;AAED,8EAA8E;AAC9E,oFAAoF;AACpF,8EAA8E;AAE9E,+FAA+F;AAC/F,MAAM,cAAc,GAAG,iBAAiB,CAAC;AAEzC,0FAA0F;AAC1F,SAAS,SAAS,CAAC,CAAS,EAAE,CAAS;IACrC,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACpC,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACpC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3B,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACtB,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACtB,IAAI,EAAE,KAAK,EAAE;YAAE,OAAO,EAAE,GAAG,EAAE,CAAC;IAChC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,mBAAmB,GAAG,qBAAqB,CAAC;AAQlD;;;;oFAIoF;AACpF,MAAM,UAAU,sBAAsB,CACpC,OAA2B,EAC3B,cAAc,GAAW,cAAc;IAEvC,MAAM,UAAU,GAAuB,EAAE,CAAC;IAC1C,MAAM,aAAa,GAAG,IAAI,GAAG,EAAkB,CAAC;IAEhD,IAAI,CAAC,CAAC,MAAM,IAAI,OAAO,CAAC,EAAE,CAAC;QACzB,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,oCAAoC,EAAE,CAAC,CAAC;IACnF,CAAC;IAED,KAAK,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACtD,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACtC,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,aAAa,OAAO,wBAAwB,EAAE,CAAC,CAAC;QAC5F,CAAC;QAED,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClC,IAAI,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC3C,UAAU,CAAC,IAAI,CAAC;oBACd,IAAI,EAAE,OAAO;oBACb,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,OAAO,EAAE,uDAAuD;iBACjE,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YAED,IAAI,MAAoB,CAAC;YACzB,IAAI,CAAC;gBACH,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACrC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,UAAU,CAAC,IAAI,CAAC;oBACd,IAAI,EAAE,OAAO;oBACb,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;iBAChE,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YAED,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;gBAClB,UAAU,CAAC,IAAI,CAAC;oBACd,IAAI,EAAE,OAAO;oBACb,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,OAAO,EAAE,+DAA+D;iBACzE,CAAC,CAAC;YACL,CAAC;YAED,MAAM,KAAK,GAAG,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YACjD,IAAI,KAAK,IAAI,KAAK,KAAK,OAAO,EAAE,CAAC;gBAC/B,UAAU,CAAC,IAAI,CAAC;oBACd,IAAI,EAAE,OAAO;oBACb,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,OAAO,EAAE,aAAa,MAAM,CAAC,QAAQ,2BAA2B,KAAK,8CAA8C;iBACpH,CAAC,CAAC;YACL,CAAC;iBAAM,IAAI,CAAC,KAAK,EAAE,CAAC;gBAClB,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAC9C,CAAC;YAED,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;gBACxC,UAAU,CAAC,IAAI,CAAC;oBACd,IAAI,EAAE,OAAO;oBACb,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,OAAO,EAAE,YAAY,KAAK,CAAC,OAAO,uBAAuB;iBAC1D,CAAC,CAAC;YACL,CAAC;iBAAM,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,EAAE,cAAc,CAAC,EAAE,CAAC;gBACrD,UAAU,CAAC,IAAI,CAAC;oBACd,IAAI,EAAE,OAAO;oBACb,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,OAAO,EAAE,YAAY,KAAK,CAAC,OAAO,wCAAwC,cAAc,GAAG;iBAC5F,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC"}

package/dist/extensions/extensions-rpc.d.ts

@@ -0,0 +1,15 @@
+import type { Logger } from "../logging/logger.js";
+import type { HandlerRegistry } from "../ws/router.js";
+import type { ExtensionsService } from "./extensions-service.js";
+/**
+ * `extension_packs_list_request`/`extension_packs_set_request` (swe/features/
+ * preinstalled-extensions.md § RPC surface). Thin orchestration only — every decision (statuses,
+ * installs) already lives in the planner/executor behind `ExtensionsService`; this module maps
+ * server types to wire types and nothing else.
+ */
+export interface ExtensionsRpcDeps {
+    service: ExtensionsService;
+    logger?: Logger;
+}
+export declare function registerExtensionsHandlers(registry: HandlerRegistry, deps: ExtensionsRpcDeps): void;
+//# sourceMappingURL=extensions-rpc.d.ts.map

package/dist/extensions/extensions-rpc.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"extensions-rpc.d.ts","sourceRoot":"","sources":["../../src/extensions/extensions-rpc.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAEvD,OAAO,KAAK,EAAsB,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAGrF;;;;;GAKG;AAEH,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,iBAAiB,CAAC;IAC3B,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAsBD,wBAAgB,0BAA0B,CACxC,QAAQ,EAAE,eAAe,EACzB,IAAI,EAAE,iBAAiB,GACtB,IAAI,CAuEN"}

package/dist/extensions/extensions-rpc.js

@@ -0,0 +1,76 @@
+import { CURATED_PACKS, selectEntries } from "./curated-packs.js";
+import { toExtensionPackInfoList } from "./wire.js";
+/** The list-response fields, shared verbatim by both the list response and the set response
+ *  (which carries them plus `ok`/`error`/`report`) — computed fresh from `describe()` so a `set`
+ *  response reflects state *after* the sync it triggered completes, never a stale pre-sync view. */
+function toListFields(described) {
+    return {
+        autoSync: described.autoSync,
+        selected: described.selected,
+        packs: toExtensionPackInfoList(CURATED_PACKS, described.entries),
+        ...(described.lastSync ? { lastSync: described.lastSync } : {}),
+    };
+}
+/** `ctx.message` is an unvalidated `Record<string, unknown>` (`ws/router.ts`), so the handler must
+ *  check `packs`'s shape itself rather than trust the wire schema a conforming client used. */
+function isSlugArray(value) {
+    return Array.isArray(value) && value.every((slug) => typeof slug === "string");
+}
+export function registerExtensionsHandlers(registry, deps) {
+    const { service, logger } = deps;
+    registry.register("extension_packs_list_request", async () => {
+        const described = await service.describe();
+        return { type: "extension_packs_list_response", ...toListFields(described) };
+    });
+    registry.register("extension_packs_set_request", async (ctx) => {
+        const packs = ctx.message.packs;
+        // Absent `packs` ⇒ the manual-sync trigger: no validation, no persistence, ungated sync.
+        if (packs === undefined) {
+            const report = await service.sync("manual");
+            const described = await service.describe();
+            return {
+                type: "extension_packs_set_response",
+                ...toListFields(described),
+                ok: true,
+                report,
+            };
+        }
+        // A malformed `packs` is a domain failure, NOT a silent "deselect everything": coercing it
+        // would persist an empty selection and sync over it. Only a client bypassing the protocol
+        // schema (`packs: z.array(z.string()).optional()`) can send this, so this is
+        // defense-in-depth — but the daemon must never act on a shape it cannot read.
+        if (!isSlugArray(packs)) {
+            logger?.warn({ packs }, "extension_packs_set_request: rejecting malformed packs");
+            const described = await service.describe();
+            return {
+                type: "extension_packs_set_response",
+                ...toListFields(described),
+                ok: false,
+                error: "invalid packs: expected an array of pack slugs",
+            };
+        }
+        const { unknownSlugs } = selectEntries(CURATED_PACKS, packs);
+        if (unknownSlugs.length > 0) {
+            logger?.warn({ unknownSlugs }, "extension_packs_set_request: rejecting unknown pack slug(s)");
+            // Domain failure ⇒ `ok: false` + `error`, never `rpc_error` (transport-level only). No
+            // persistence, no sync — the current (unchanged) state is still echoed back.
+            const described = await service.describe();
+            return {
+                type: "extension_packs_set_response",
+                ...toListFields(described),
+                ok: false,
+                error: `unknown pack: ${unknownSlugs.join(", ")}`,
+            };
+        }
+        await service.setSelectedPacks(packs);
+        const report = await service.sync("selection");
+        const described = await service.describe();
+        return {
+            type: "extension_packs_set_response",
+            ...toListFields(described),
+            ok: true,
+            report,
+        };
+    });
+}
+//# sourceMappingURL=extensions-rpc.js.map

package/dist/extensions/extensions-rpc.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"extensions-rpc.js","sourceRoot":"","sources":["../../src/extensions/extensions-rpc.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAElE,OAAO,EAAE,uBAAuB,EAAE,MAAM,WAAW,CAAC;AAcpD;;oGAEoG;AACpG,SAAS,YAAY,CACnB,SAA6B;IAE7B,OAAO;QACL,QAAQ,EAAE,SAAS,CAAC,QAAQ;QAC5B,QAAQ,EAAE,SAAS,CAAC,QAAQ;QAC5B,KAAK,EAAE,uBAAuB,CAAC,aAAa,EAAE,SAAS,CAAC,OAAO,CAAC;QAChE,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAChE,CAAC;AACJ,CAAC;AAED;+FAC+F;AAC/F,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC;AACjF,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,QAAyB,EACzB,IAAuB;IAEvB,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAEjC,QAAQ,CAAC,QAAQ,CACf,8BAA8B,EAC9B,KAAK,IAA4D,EAAE;QACjE,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,QAAQ,EAAE,CAAC;QAC3C,OAAO,EAAE,IAAI,EAAE,+BAA+B,EAAE,GAAG,YAAY,CAAC,SAAS,CAAC,EAAE,CAAC;IAC/E,CAAC,CACF,CAAC;IAEF,QAAQ,CAAC,QAAQ,CACf,6BAA6B,EAC7B,KAAK,EAAE,GAAG,EAAyD,EAAE;QACnE,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC;QAEhC,yFAAyF;QACzF,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC5C,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,QAAQ,EAAE,CAAC;YAC3C,OAAO;gBACL,IAAI,EAAE,8BAA8B;gBACpC,GAAG,YAAY,CAAC,SAAS,CAAC;gBAC1B,EAAE,EAAE,IAAI;gBACR,MAAM;aACP,CAAC;QACJ,CAAC;QAED,2FAA2F;QAC3F,0FAA0F;QAC1F,6EAA6E;QAC7E,8EAA8E;QAC9E,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;YACxB,MAAM,EAAE,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,wDAAwD,CAAC,CAAC;YAClF,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,QAAQ,EAAE,CAAC;YAC3C,OAAO;gBACL,IAAI,EAAE,8BAA8B;gBACpC,GAAG,YAAY,CAAC,SAAS,CAAC;gBAC1B,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,gDAAgD;aACxD,CAAC;QACJ,CAAC;QAED,MAAM,EAAE,YAAY,EAAE,GAAG,aAAa,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;QAC7D,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,MAAM,EAAE,IAAI,CACV,EAAE,YAAY,EAAE,EAChB,6DAA6D,CAC9D,CAAC;YACF,uFAAuF;YACvF,6EAA6E;YAC7E,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,QAAQ,EAAE,CAAC;YAC3C,OAAO;gBACL,IAAI,EAAE,8BAA8B;gBACpC,GAAG,YAAY,CAAC,SAAS,CAAC;gBAC1B,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,iBAAiB,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;aAClD,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;QACtC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC/C,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,QAAQ,EAAE,CAAC;QAC3C,OAAO;YACL,IAAI,EAAE,8BAA8B;YACpC,GAAG,YAAY,CAAC,SAAS,CAAC;YAC1B,EAAE,EAAE,IAAI;YACR,MAAM;SACP,CAAC;IACJ,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/extensions/extensions-service.d.ts

@@ -0,0 +1,60 @@
+import { type PersistedConfig } from "../config/daemon-config.js";
+import type { Logger } from "../logging/logger.js";
+import { type DescribedEntry } from "./sync-planner.js";
+import { type InstallSpawn, type SyncReport } from "./sync-executor.js";
+/**
+ * Orchestration only: reads `settings.json` + state, hands them to the pure planner, runs the plan
+ * through the executor, persists the `lastSync` summary, and logs the loud-but-not-alarming
+ * first-sync report (swe/features/preinstalled-extensions.md § Lifecycle, § Concurrency).
+ * Every real decision lives in `sync-planner.ts`/`sync-executor.ts` — this class never decides
+ * *what* to install, only *when* and *whether*.
+ */
+export type SyncReason = "bootstrap" | "manual" | "selection";
+export type { DescribedEntry };
+export interface ExtensionsDescribe {
+    autoSync: boolean;
+    selected: string[];
+    entries: DescribedEntry[];
+    /** `outcome` is read back as a plain `string`, not the narrow `SyncReport["outcome"]` union —
+     *  the persisted field is forward-compat (a future daemon's new outcome value must round-trip
+     *  through an older one without a type mismatch). */
+    lastSync?: {
+        at: string;
+        outcome: string;
+    };
+}
+export declare class ExtensionsService {
+    private readonly home;
+    private readonly config;
+    private readonly logger;
+    private readonly spawn;
+    /** Where `setSelectedPacks` persists — defaults to `<home>/config.json`, mirroring bootstrap's
+     *  own default, so tests that don't care about persistence never need to pass one. */
+    private readonly configPath;
+    private readonly mutex;
+    constructor(deps: {
+        home: string;
+        config: PersistedConfig;
+        logger: Logger;
+        spawn?: InstallSpawn;
+        configPath?: string;
+    });
+    sync(reason: SyncReason): Promise<SyncReport>;
+    /**
+     * Updates the service's own selection view *and* persists it, in that order — an
+     * in-memory-correct daemon must survive a disk write failure (logged, never thrown; the running
+     * daemon keeps serving the new selection even if the write failed). `core` is never stored (it
+     * is implicit); dedupes and preserves caller order otherwise.
+     */
+    setSelectedPacks(packs: readonly string[]): Promise<void>;
+    /** Dry-run: the same planner, no writes. One code path for "what we'd do" and "what we
+     *  report" — this must never drift from `sync()`'s own plan computation. */
+    describe(): Promise<ExtensionsDescribe>;
+    /** Persists only the `{ at, outcome }` summary (never the full report) so a freshly-booted
+     *  daemon that hasn't synced yet can still report the previous run via `describe()`. Re-reads
+     *  state first so this never clobbers what `executePlan` just wrote per-action; silently no-ops
+     *  if the state file is unreadable (never rewrite a corrupt file, even for this). */
+    private recordLastSync;
+    private runSync;
+}
+//# sourceMappingURL=extensions-service.d.ts.map

package/dist/extensions/extensions-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"extensions-service.d.ts","sourceRoot":"","sources":["../../src/extensions/extensions-service.ts"],"names":[],"mappings":"AAEA,OAAO,EAAyB,KAAK,eAAe,EAAE,MAAM,4BAA4B,CAAC;AACzF,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAUnD,OAAO,EAA8B,KAAK,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACpF,OAAO,EAAe,KAAK,YAAY,EAAE,KAAK,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAErF;;;;;;GAMG;AAEH,MAAM,MAAM,UAAU,GAAG,WAAW,GAAG,QAAQ,GAAG,WAAW,CAAC;AAE9D,YAAY,EAAE,cAAc,EAAE,CAAC;AAE/B,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,OAAO,CAAC;IAClB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,OAAO,EAAE,cAAc,EAAE,CAAC;IAC1B;;yDAEqD;IACrD,QAAQ,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CAC5C;AAED,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAS;IAC9B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAkB;IACzC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA2B;IACjD;0FACsF;IACtF,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IAGpC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAoB;IAE1C,YAAY,IAAI,EAAE;QAChB,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,EAAE,eAAe,CAAC;QACxB,MAAM,EAAE,MAAM,CAAC;QACf,KAAK,CAAC,EAAE,YAAY,CAAC;QACrB,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,EAMA;IAED,IAAI,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAE5C;IAED;;;;;OAKG;IACG,gBAAgB,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAW9D;IAED;gFAC4E;IACtE,QAAQ,IAAI,OAAO,CAAC,kBAAkB,CAAC,CAqB5C;IAED;;;yFAGqF;YACvE,cAAc;YAYd,OAAO;CA2EtB"}

package/dist/extensions/extensions-service.js

@@ -0,0 +1,145 @@
+import { join } from "node:path";
+import { persistExtensionPacks } from "../config/daemon-config.js";
+import { createLimiter } from "../util/concurrency.js";
+import { CURATED_PACKS, selectEntries } from "./curated-packs.js";
+import { effectivePiHomeKey, loadExtensionsState, readPiSettingsPackages, saveExtensionsState, } from "./extensions-state.js";
+import { attachLastErrors, planSync } from "./sync-planner.js";
+import { executePlan } from "./sync-executor.js";
+export class ExtensionsService {
+    home;
+    config;
+    logger;
+    spawn;
+    /** Where `setSelectedPacks` persists — defaults to `<home>/config.json`, mirroring bootstrap's
+     *  own default, so tests that don't care about persistence never need to pass one. */
+    configPath;
+    // In-process mutex (concurrency-1 limiter): a sync requested while one runs waits for it, then
+    // gets its own fresh run — never the same report, since config may have changed in between.
+    mutex = createLimiter(1);
+    constructor(deps) {
+        this.home = deps.home;
+        this.config = deps.config;
+        this.logger = deps.logger;
+        this.spawn = deps.spawn;
+        this.configPath = deps.configPath ?? join(deps.home, "config.json");
+    }
+    sync(reason) {
+        return this.mutex(() => this.runSync(reason));
+    }
+    /**
+     * Updates the service's own selection view *and* persists it, in that order — an
+     * in-memory-correct daemon must survive a disk write failure (logged, never thrown; the running
+     * daemon keeps serving the new selection even if the write failed). `core` is never stored (it
+     * is implicit); dedupes and preserves caller order otherwise.
+     */
+    async setSelectedPacks(packs) {
+        const deduped = [...new Set(packs.filter((p) => p !== "core"))];
+        this.config.daemon.extensions.packs = deduped;
+        try {
+            await persistExtensionPacks(this.configPath, deduped);
+        }
+        catch (err) {
+            this.logger.error({ err: err?.message ?? String(err) }, "failed to persist extension pack selection to config.json");
+        }
+    }
+    /** Dry-run: the same planner, no writes. One code path for "what we'd do" and "what we
+     *  report" — this must never drift from `sync()`'s own plan computation. */
+    async describe() {
+        const piHomeKey = effectivePiHomeKey(this.config);
+        const [state, settings] = await Promise.all([
+            loadExtensionsState(this.home),
+            readPiSettingsPackages(piHomeKey),
+        ]);
+        const piHomeState = state === "unreadable" ? "unreadable" : (state.piHomes[piHomeKey] ?? emptyPiHomeState());
+        const packs = this.config.daemon.extensions.packs;
+        const { entries } = planSync({
+            catalog: CURATED_PACKS,
+            packs,
+            state: piHomeState,
+            settingsPackages: settings.packages,
+        });
+        return {
+            autoSync: this.config.daemon.extensions.autoSync,
+            selected: [...packs],
+            entries: attachLastErrors(entries, piHomeState),
+            lastSync: state === "unreadable" ? undefined : state.piHomes[piHomeKey]?.lastSync,
+        };
+    }
+    /** Persists only the `{ at, outcome }` summary (never the full report) so a freshly-booted
+     *  daemon that hasn't synced yet can still report the previous run via `describe()`. Re-reads
+     *  state first so this never clobbers what `executePlan` just wrote per-action; silently no-ops
+     *  if the state file is unreadable (never rewrite a corrupt file, even for this). */
+    async recordLastSync(piHomeKey, summary) {
+        const loaded = await loadExtensionsState(this.home);
+        if (loaded === "unreadable")
+            return;
+        const slice = loaded.piHomes[piHomeKey] ?? emptyPiHomeState();
+        slice.lastSync = summary;
+        loaded.piHomes[piHomeKey] = slice;
+        await saveExtensionsState(this.home, loaded);
+    }
+    async runSync(reason) {
+        // `autoSync: false` gates bootstrap/selection entirely — Pi-Studio never touches pi's settings.
+        // `manual` is the deliberate escape hatch (`extensions sync` must work even with the switch
+        // off); no plan is even computed here, so no lastSync write either — nothing was attempted.
+        if (!this.config.daemon.extensions.autoSync && reason !== "manual") {
+            this.logger.debug({ reason }, "extensions sync skipped — daemon.extensions.autoSync is false");
+            return { at: new Date().toISOString(), outcome: "noop", installed: [], failures: [] };
+        }
+        const piHomeKey = effectivePiHomeKey(this.config);
+        const settings = await readPiSettingsPackages(piHomeKey);
+        if (!settings.ok) {
+            this.logger.warn({ piHomeKey }, "settings.json is malformed — extensions sync skipped for this pi-home");
+            const report = {
+                at: new Date().toISOString(),
+                outcome: "skipped",
+                installed: [],
+                failures: [],
+            };
+            await this.recordLastSync(piHomeKey, { at: report.at, outcome: report.outcome });
+            return report;
+        }
+        const state = await loadExtensionsState(this.home);
+        if (state === "unreadable") {
+            this.logger.error({ piHomeKey }, "extensions-state.json is unreadable — extensions sync skipped");
+            // Never rewrite the corrupt file — not even to record this attempt as lastSync.
+            return { at: new Date().toISOString(), outcome: "skipped", installed: [], failures: [] };
+        }
+        const packs = this.config.daemon.extensions.packs;
+        const { unknownSlugs } = selectEntries(CURATED_PACKS, packs);
+        if (unknownSlugs.length > 0) {
+            this.logger.warn({ unknownSlugs }, "ignoring unknown extension pack slug(s) in config");
+        }
+        const piHomeState = state.piHomes[piHomeKey] ?? emptyPiHomeState();
+        const plan = planSync({
+            catalog: CURATED_PACKS,
+            packs,
+            state: piHomeState,
+            settingsPackages: settings.packages,
+        });
+        const report = await executePlan(plan, {
+            home: this.home,
+            piHomeKey,
+            config: this.config,
+            spawn: this.spawn,
+            logger: this.logger,
+        });
+        if (plan.actions.length > 0) {
+            const failedSources = report.failures.map((f) => f.source).join(", ");
+            const summary = `installed ${report.installed.length} of ${plan.actions.length} recommended extensions ` +
+                `into ${piHomeKey}; ${report.failures.length} failed` +
+                (report.failures.length > 0 ? `: ${failedSources} (will retry on next start)` : "") +
+                " — disable via daemon.extensions.autoSync=false / PI_STUDIO_EXTENSIONS_AUTOSYNC=false";
+            if (report.outcome === "partial" || report.outcome === "failed")
+                this.logger.warn(summary);
+            else
+                this.logger.info(summary);
+        }
+        await this.recordLastSync(piHomeKey, { at: report.at, outcome: report.outcome });
+        return report;
+    }
+}
+function emptyPiHomeState() {
+    return { offered: {}, failures: {} };
+}
+//# sourceMappingURL=extensions-service.js.map

package/dist/extensions/extensions-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"extensions-service.js","sourceRoot":"","sources":["../../src/extensions/extensions-service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,qBAAqB,EAAwB,MAAM,4BAA4B,CAAC;AAEzF,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAClE,OAAO,EACL,kBAAkB,EAClB,mBAAmB,EACnB,sBAAsB,EACtB,mBAAmB,GAEpB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAuB,MAAM,mBAAmB,CAAC;AACpF,OAAO,EAAE,WAAW,EAAsC,MAAM,oBAAoB,CAAC;AAwBrF,MAAM,OAAO,iBAAiB;IACX,IAAI,CAAS;IACb,MAAM,CAAkB;IACxB,MAAM,CAAS;IACf,KAAK,CAA2B;IACjD;0FACsF;IACrE,UAAU,CAAS;IACpC,+FAA+F;IAC/F,4FAA4F;IAC3E,KAAK,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC;IAE1C,YAAY,IAMX;QACC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACtB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACxB,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;IACtE,CAAC;IAED,IAAI,CAAC,MAAkB;QACrB,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IAChD,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,gBAAgB,CAAC,KAAwB;QAC7C,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC;QAChE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,GAAG,OAAO,CAAC;QAC9C,IAAI,CAAC;YACH,MAAM,qBAAqB,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QACxD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,EAAE,GAAG,EAAG,GAAa,EAAE,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,EAC/C,2DAA2D,CAC5D,CAAC;QACJ,CAAC;IACH,CAAC;IAED;gFAC4E;IAC5E,KAAK,CAAC,QAAQ;QACZ,MAAM,SAAS,GAAG,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAClD,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC1C,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC;YAC9B,sBAAsB,CAAC,SAAS,CAAC;SAClC,CAAC,CAAC;QACH,MAAM,WAAW,GACf,KAAK,KAAK,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,gBAAgB,EAAE,CAAC,CAAC;QAC3F,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC;QAClD,MAAM,EAAE,OAAO,EAAE,GAAG,QAAQ,CAAC;YAC3B,OAAO,EAAE,aAAa;YACtB,KAAK;YACL,KAAK,EAAE,WAAW;YAClB,gBAAgB,EAAE,QAAQ,CAAC,QAAQ;SACpC,CAAC,CAAC;QACH,OAAO;YACL,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ;YAChD,QAAQ,EAAE,CAAC,GAAG,KAAK,CAAC;YACpB,OAAO,EAAE,gBAAgB,CAAC,OAAO,EAAE,WAAW,CAAC;YAC/C,QAAQ,EAAE,KAAK,KAAK,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,QAAQ;SAClF,CAAC;IACJ,CAAC;IAED;;;yFAGqF;IAC7E,KAAK,CAAC,cAAc,CAC1B,SAAiB,EACjB,OAAuD;QAEvD,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpD,IAAI,MAAM,KAAK,YAAY;YAAE,OAAO;QACpC,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,gBAAgB,EAAE,CAAC;QAC9D,KAAK,CAAC,QAAQ,GAAG,OAAO,CAAC;QACzB,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC;QAClC,MAAM,mBAAmB,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC/C,CAAC;IAEO,KAAK,CAAC,OAAO,CAAC,MAAkB;QACtC,gGAAgG;QAChG,4FAA4F;QAC5F,4FAA4F;QAC5F,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;YACnE,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,EAAE,MAAM,EAAE,EACV,+DAA+D,CAChE,CAAC;YACF,OAAO,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;QACxF,CAAC;QAED,MAAM,SAAS,GAAG,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAClD,MAAM,QAAQ,GAAG,MAAM,sBAAsB,CAAC,SAAS,CAAC,CAAC;QACzD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,EAAE,SAAS,EAAE,EACb,uEAAuE,CACxE,CAAC;YACF,MAAM,MAAM,GAAe;gBACzB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBAC5B,OAAO,EAAE,SAAS;gBAClB,SAAS,EAAE,EAAE;gBACb,QAAQ,EAAE,EAAE;aACb,CAAC;YACF,MAAM,IAAI,CAAC,cAAc,CAAC,SAAS,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;YACjF,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnD,IAAI,KAAK,KAAK,YAAY,EAAE,CAAC;YAC3B,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,EAAE,SAAS,EAAE,EACb,+DAA+D,CAChE,CAAC;YACF,gFAAgF;YAChF,OAAO,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;QAC3F,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC;QAClD,MAAM,EAAE,YAAY,EAAE,GAAG,aAAa,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;QAC7D,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,EAAE,mDAAmD,CAAC,CAAC;QAC1F,CAAC;QAED,MAAM,WAAW,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,gBAAgB,EAAE,CAAC;QACnE,MAAM,IAAI,GAAG,QAAQ,CAAC;YACpB,OAAO,EAAE,aAAa;YACtB,KAAK;YACL,KAAK,EAAE,WAAW;YAClB,gBAAgB,EAAE,QAAQ,CAAC,QAAQ;SACpC,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,IAAI,EAAE;YACrC,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,SAAS;YACT,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,MAAM,EAAE,IAAI,CAAC,MAAM;SACpB,CAAC,CAAC;QAEH,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,MAAM,aAAa,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACtE,MAAM,OAAO,GACX,aAAa,MAAM,CAAC,SAAS,CAAC,MAAM,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,0BAA0B;gBACxF,QAAQ,SAAS,KAAK,MAAM,CAAC,QAAQ,CAAC,MAAM,SAAS;gBACrD,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,aAAa,6BAA6B,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnF,uFAAuF,CAAC;YAC1F,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,IAAI,MAAM,CAAC,OAAO,KAAK,QAAQ;gBAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;;gBACtF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACjC,CAAC;QAED,MAAM,IAAI,CAAC,cAAc,CAAC,SAAS,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;QACjF,OAAO,MAAM,CAAC;IAChB,CAAC;CACF;AAED,SAAS,gBAAgB;IACvB,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;AACvC,CAAC"}