@bevel-software/platform-core-backend 0.14.0 → 0.15.1

package/dist/modules/plugins/compile/compile-marketplace.d.ts

@@ -0,0 +1,97 @@
+import type { SkillSummary } from '../../skills/skills.contract.js';
+import type { LinkMembership } from '../plugin-links.js';
+import type { DiscoveredPlugin } from '../discovery/plugin-source.js';
+/**
+ * The compiler: SOURCE layout in, DISTRIBUTION layout out.
+ *
+ * Source is what lives in the knowledge base — shared skills under
+ * `Skills/`, plugin folders under `Plugins/` whose manifests LINK to them.
+ * Distribution is what an agent installs: a marketplace of self-contained
+ * plugins, each physically holding its skills (Claude Code refuses paths
+ * that escape a plugin's directory, and symlinks are out), in the vendor
+ * layouts the clients read today — `.claude-plugin/plugin.json`,
+ * `.codex-plugin/plugin.json`, `.mcp.json` — beside the Agent Plugins
+ * `plugin.json` and `mcp.json`.
+ *
+ * What comes out, for one caller:
+ *
+ *   .claude-plugin/marketplace.json      Claude Code's catalogue
+ *   .agents/plugins/marketplace.json     Codex's catalogue, every entry
+ *                                        INSTALLED_BY_DEFAULT
+ *   plugins/<slug>/…                     one per plugin the caller may read
+ *                                        anything of: inline + linked skills,
+ *                                        the portable half of mcp.json
+ *   plugins/skills-and-knowledge/…       every readable skill no plugin above
+ *                                        ships — how a standalone skill, or one
+ *                                        only in plugins the caller cannot see,
+ *                                        is still one install away — plus the
+ *                                        knowledge base's own MCP endpoint
+ *   plugins/hexis-all/…                  a bundle whose only content is a
+ *                                        dependency on every plugin above —
+ *                                        Claude Code installs them all from
+ *                                        one `claude plugin install`
+ *   skills/<name>/…                      every readable skill once, flat, for
+ *                                        `npx skills add <url> --all`
+ *   README.md                            names the source commit
+ *
+ * FAIL CLOSED, per file: a skill is copied only when `readable` says yes for
+ * its SKILL.md — the same per-path verdict the catalog filters on — so the
+ * compiled tree for a caller holds exactly what that caller may read, and
+ * nothing about a skill they may not. Plugins with nothing readable are
+ * left out entirely. `access.md` and `.bevelignore` never ship; neither do
+ * the hexis-only `.tool` manuals (no other client can run them), nor an
+ * `mcp.json` header carrying a `${VAR}` vault reference (the extension block
+ * that resolves it is ours, and a header a client would send verbatim must
+ * not name a secret it cannot expand).
+ *
+ * A pure function of its inputs — it reads the KB tree it is pointed at and
+ * returns a virtual tree; writing it somewhere (a git namespace, a folder, a
+ * remote) is the sink's business.
+ */
+export interface MarketplaceOptions {
+    /** The marketplace's name — a slug the clients key it on. */
+    name: string;
+    /** Shown as the marketplace owner. */
+    owner: string;
+    description?: string;
+    /** The default-branch commit the tree was compiled from; also the bundle's version. */
+    sourceCommit: string;
+    /** The name of the one-install bundle plugin. */
+    bundleName?: string;
+    /** The name of the leftovers plugin holding skills no other plugin ships. */
+    skillsPluginName?: string;
+    /**
+     * This deployment's hosted MCP endpoint — the knowledge base as a tool.
+     * Shipped in the leftovers plugin's `mcp.json` so an agent that installs
+     * from the marketplace can read the knowledge its skills refer to. URL only,
+     * never a credential: the endpoint challenges with OAuth metadata, and the
+     * client signs the person in on first use.
+     */
+    knowledgeBaseMcp?: {
+        name: string;
+        url: string;
+    };
+}
+export interface CompileInput {
+    /** Absolute path of the KB checkout (the folder holding `Plugins/`, `Skills/`, …). */
+    kbRoot: string;
+    /** The released catalog, UNFILTERED — `readable` does the filtering. */
+    skills: SkillSummary[];
+    /** The plugins as the configured source discovered them (manifests and servers already parsed). */
+    plugins: DiscoveredPlugin[];
+    /** Which plugins hold which skills, from the link index. */
+    membership: LinkMembership;
+    /** The caller's read verdict on a repo-relative path (`<skillFolder>/SKILL.md`). */
+    readable: (repoPath: string) => Promise<boolean>;
+    options: MarketplaceOptions;
+}
+export interface VirtualTree {
+    /** repo-relative POSIX path → file bytes. */
+    files: Map<string, Buffer>;
+    /** What was left out and why — name clashes, unparsable manifests. */
+    warnings: string[];
+    /** The plugin slugs the tree carries, in marketplace order. */
+    plugins: string[];
+}
+export declare function compileMarketplace(input: CompileInput): Promise<VirtualTree>;
+//# sourceMappingURL=compile-marketplace.d.ts.map

package/dist/modules/plugins/compile/compile-marketplace.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"compile-marketplace.d.ts","sourceRoot":"","sources":["../../../../src/modules/plugins/compile/compile-marketplace.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AACpE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AAEtE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8CG;AAEH,MAAM,WAAW,kBAAkB;IACjC,6DAA6D;IAC7D,IAAI,EAAE,MAAM,CAAC;IACb,sCAAsC;IACtC,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,uFAAuF;IACvF,YAAY,EAAE,MAAM,CAAC;IACrB,iDAAiD;IACjD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,6EAA6E;IAC7E,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;;;;;OAMG;IACH,gBAAgB,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;CAClD;AAED,MAAM,WAAW,YAAY;IAC3B,sFAAsF;IACtF,MAAM,EAAE,MAAM,CAAC;IACf,wEAAwE;IACxE,MAAM,EAAE,YAAY,EAAE,CAAC;IACvB,mGAAmG;IACnG,OAAO,EAAE,gBAAgB,EAAE,CAAC;IAC5B,4DAA4D;IAC5D,UAAU,EAAE,cAAc,CAAC;IAC3B,oFAAoF;IACpF,QAAQ,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACjD,OAAO,EAAE,kBAAkB,CAAC;CAC7B;AAED,MAAM,WAAW,WAAW;IAC1B,6CAA6C;IAC7C,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC3B,sEAAsE;IACtE,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,+DAA+D;IAC/D,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAQD,wBAAsB,kBAAkB,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,WAAW,CAAC,CAmNlF"}

package/dist/modules/plugins/compile/compile-marketplace.js

@@ -0,0 +1,240 @@
+import fs from 'node:fs/promises';
+import path from 'node:path';
+import { PLUGIN_MANIFEST_FILE, PLUGIN_MCP_FILE, PLUGIN_MANIFEST_SCHEMA, PLUGIN_MCP_SCHEMA, pluginManifestName, } from '@bevel-software/platform-shared';
+import { walkFiles } from '../../../shared/fs-walk.js';
+import { containsVariableReference } from '../../../shared/variable-refs.js';
+import { judgeMcpServerEntry } from '../../tool-manuals/mcp-json-discovery.js';
+const BUNDLE_NAME = 'hexis-all';
+const SKILLS_PLUGIN_NAME = 'skills-and-knowledge';
+/** Slugs the compiler emits itself; a real plugin may not take them. */
+const RESERVED_SLUGS = new Set([BUNDLE_NAME, SKILLS_PLUGIN_NAME]);
+const NEVER_SHIPPED = new Set(['access.md', '.bevelignore']);
+export async function compileMarketplace(input) {
+    const { kbRoot, skills, plugins, membership, readable, options } = input;
+    const files = new Map();
+    const warnings = [];
+    const put = (rel, content) => files.set(rel, typeof content === 'string' ? Buffer.from(content, 'utf-8') : content);
+    // One verdict per skill, resolved once: every plugin below reads from it. A
+    // RETIRED skill (its governance lifecycle) stays in the catalog for its
+    // owners but never ships — retiring is how a skill leaves every agent.
+    const readableSkills = new Map();
+    for (const s of skills) {
+        if (s.lifecycle === 'retired')
+            continue;
+        if (await readable(`${s.path}/SKILL.md`))
+            readableSkills.set(s.path, s);
+    }
+    const out = [];
+    // 1. Real plugins: inline skills (in the folder) + linked skills (from the
+    //    manifest), each only if readable. Personal folders are places, not
+    //    plugins; a plugin the index does not count as existing is not shipped.
+    const byName = new Map(plugins.map((p) => [p.name, p]));
+    for (const [name, links] of [...membership.byPlugin.entries()].sort(([a], [b]) => a.localeCompare(b))) {
+        const plugin = byName.get(name);
+        if (!plugin || plugin.personal || !plugin.exists)
+            continue;
+        const manifest = plugin.manifest;
+        const inline = [...readableSkills.values()].filter((s) => s.path.startsWith(`${plugin.folder}/`));
+        const linked = links.linkedSkills
+            .map((p) => readableSkills.get(p))
+            .filter((s) => s !== undefined);
+        const dedup = dedupeByName([...inline, ...linked], (s, other) => warnings.push(`${name}: skill "${s.name}" at ${s.path} shares its name with ${other.path} — the second is left out`));
+        const mcp = portableMcp(plugin.mcpServers, (name, reason) => warnings.push(`${plugin.folder}: mcp server "${name}" not shipped — ${reason}`));
+        if (dedup.length === 0 && mcp === null)
+            continue; // nothing this caller may see
+        // The plugin's identity IS the marketplace slug. Folded once more here
+        // all the same: it becomes a path segment in the compiled tree, and a
+        // checked-in manifest is repository content, not trusted input — the
+        // folding (`[a-z0-9.-]`, no runs, no leading dots) leaves nothing that
+        // can be a separator or a parent reference.
+        const slug = pluginManifestName(name);
+        if (RESERVED_SLUGS.has(slug)) {
+            warnings.push(`${plugin.folder}: manifest name "${slug}" is reserved by the marketplace and cannot be a plugin — plugin skipped`);
+            continue;
+        }
+        if (out.some((p) => p.slug === slug)) {
+            warnings.push(`${plugin.folder}: manifest name "${slug}" is already taken in this marketplace — plugin skipped`);
+            continue;
+        }
+        out.push({
+            slug,
+            displayName: plugin.displayName,
+            description: typeof manifest?.description === 'string' ? manifest.description : undefined,
+            version: typeof manifest?.version === 'string' ? manifest.version : undefined,
+            skills: dedup,
+            folder: plugin.folder,
+            mcp: mcp ?? undefined,
+        });
+    }
+    // 2. The leftovers plugin: every readable skill that no plugin above ships.
+    //    Agents install plugins, not loose skills, so a skill in no plugin — or
+    //    only in plugins this caller cannot see anything of — still has to be one
+    //    install away. ONE plugin per caller, not one per scope: there is nothing
+    //    to choose between (the caller may read all of it) and the bundle installs
+    //    it regardless, so scope plugins would only add names and duplicate what
+    //    the real plugins already carry.
+    //    It also carries the knowledge base's own MCP endpoint (URL only — the
+    //    client's OAuth flow signs the person in), so an agent installing from
+    //    the marketplace can read the knowledge its skills point at. With the
+    //    endpoint configured the plugin exists even for a caller with no
+    //    leftover skill: the knowledge is the point.
+    const covered = new Set(out.flatMap((p) => p.skills.map((s) => s.path)));
+    const leftovers = [...readableSkills.values()].filter((s) => !covered.has(s.path));
+    const kbMcp = options.knowledgeBaseMcp
+        ? { [options.knowledgeBaseMcp.name]: { type: 'streamable-http', url: options.knowledgeBaseMcp.url } }
+        : undefined;
+    if (leftovers.length > 0 || kbMcp) {
+        const slug = pluginManifestName(options.skillsPluginName ?? SKILLS_PLUGIN_NAME);
+        if (out.some((p) => p.slug === slug)) {
+            warnings.push(`the skills plugin "${slug}" collides with a plugin's manifest name — standalone skills not shipped`);
+        }
+        else {
+            out.push({
+                slug,
+                displayName: 'Skills and knowledge',
+                description: kbMcp
+                    ? 'Every skill you may read that no other plugin here ships, and the knowledge base as an MCP server'
+                    : 'Every skill you may read that no other plugin here ships',
+                skills: dedupeByName(leftovers, (s, other) => warnings.push(`${slug}: "${s.name}" at ${s.path} shares its name with ${other.path} — left out`)),
+                mcp: kbMcp,
+            });
+        }
+    }
+    // 3. Materialise every plugin: the three manifests + copied skill folders.
+    for (const p of out) {
+        const base = `plugins/${p.slug}`;
+        const spec = { $schema: PLUGIN_MANIFEST_SCHEMA, name: p.slug };
+        if (p.version)
+            spec.version = p.version;
+        if (p.description)
+            spec.description = p.description;
+        put(`${base}/${PLUGIN_MANIFEST_FILE}`, `${JSON.stringify(spec, null, 2)}\n`);
+        const vendor = { name: p.slug };
+        if (p.version)
+            vendor.version = p.version;
+        vendor.description = p.description ?? p.displayName;
+        put(`${base}/.claude-plugin/plugin.json`, `${JSON.stringify(vendor, null, 2)}\n`);
+        put(`${base}/.codex-plugin/plugin.json`, `${JSON.stringify(vendor, null, 2)}\n`);
+        if (p.mcp) {
+            put(`${base}/${PLUGIN_MCP_FILE}`, `${JSON.stringify({ $schema: PLUGIN_MCP_SCHEMA, mcpServers: p.mcp }, null, 2)}\n`);
+            put(`${base}/.mcp.json`, `${JSON.stringify({ mcpServers: p.mcp }, null, 2)}\n`);
+        }
+        for (const s of p.skills) {
+            await copySkill(kbRoot, s, `${base}/skills/${s.name}`, put);
+        }
+    }
+    // 4. The one-install bundle: a Claude manifest with nothing but dependencies.
+    const bundle = pluginManifestName(options.bundleName ?? BUNDLE_NAME);
+    const slugs = out.map((p) => p.slug);
+    if (slugs.includes(bundle)) {
+        // Only reachable with a non-default bundle name that folds to a real
+        // plugin's slug: the default is reserved above. Skipping the bundle
+        // beats overwriting that plugin's manifests with a dependency list.
+        warnings.push(`the bundle name "${bundle}" collides with a plugin's manifest name — no bundle plugin emitted`);
+    }
+    if (slugs.length > 0 && !slugs.includes(bundle)) {
+        const shortSha = options.sourceCommit.slice(0, 12) || '0';
+        const description = `Everything in ${options.owner}'s marketplace you may read — one install.`;
+        put(`plugins/${bundle}/.claude-plugin/plugin.json`, `${JSON.stringify({ name: bundle, version: `0.0.0-${shortSha}`, description, dependencies: slugs }, null, 2)}\n`);
+        put(`plugins/${bundle}/${PLUGIN_MANIFEST_FILE}`, `${JSON.stringify({ $schema: PLUGIN_MANIFEST_SCHEMA, name: bundle, description }, null, 2)}\n`);
+        put(`plugins/${bundle}/.codex-plugin/plugin.json`, `${JSON.stringify({ name: bundle, description }, null, 2)}\n`);
+    }
+    // 5. The flat root skills/ folder, every readable skill once.
+    const flat = dedupeByName([...readableSkills.values()].sort((a, b) => a.path.localeCompare(b.path)), (s, other) => warnings.push(`skills/: "${s.name}" at ${s.path} shares its name with ${other.path} — left out`));
+    for (const s of flat)
+        await copySkill(kbRoot, s, `skills/${s.name}`, put);
+    // 6. The two catalogues + a README naming the source.
+    const bundleEmitted = slugs.length > 0 && !slugs.includes(bundle);
+    const entries = [...out.map((p) => ({ slug: p.slug, description: p.description ?? p.displayName })), ...(bundleEmitted ? [{ slug: bundle, description: 'Everything you may read, one install' }] : [])];
+    put('.claude-plugin/marketplace.json', `${JSON.stringify({
+        name: options.name,
+        owner: { name: options.owner },
+        ...(options.description ? { description: options.description } : {}),
+        plugins: entries.map((e) => ({ name: e.slug, source: `./plugins/${e.slug}`, description: e.description })),
+    }, null, 2)}\n`);
+    put('.agents/plugins/marketplace.json', `${JSON.stringify({
+        name: options.name,
+        plugins: entries.map((e) => ({
+            name: e.slug,
+            source: { source: 'local', path: `./plugins/${e.slug}` },
+            policy: { installation: 'INSTALLED_BY_DEFAULT' },
+            description: e.description,
+        })),
+    }, null, 2)}\n`);
+    put('README.md', [
+        `# ${options.name}`,
+        '',
+        `Compiled from ${options.owner}'s knowledge base at commit \`${options.sourceCommit}\`.`,
+        'This tree is generated: edit the knowledge base, not these files.',
+        '',
+        `Plugins: ${entries.map((e) => e.slug).join(', ') || 'none'}.`,
+        '',
+    ].join('\n'));
+    return { files, warnings, plugins: entries.map((e) => e.slug) };
+}
+// --- helpers ------------------------------------------------------------------
+/** Copy a skill folder (minus what never ships) under `dest`. */
+async function copySkill(kbRoot, skill, dest, put) {
+    const abs = path.join(kbRoot, skill.path);
+    for (const rel of await walkFiles(abs, (name) => !NEVER_SHIPPED.has(name))) {
+        put(`${dest}/${rel}`, await fs.readFile(path.join(abs, rel)));
+    }
+}
+/** First by (name, path) order wins; the loser is reported to `onClash`. */
+function dedupeByName(list, onClash) {
+    const sorted = [...list].sort((a, b) => a.name.localeCompare(b.name) || a.path.localeCompare(b.path));
+    const seen = new Map();
+    const out = [];
+    for (const s of sorted) {
+        const winner = seen.get(s.name);
+        if (winner) {
+            if (winner.path !== s.path)
+                onClash(s, winner);
+            continue;
+        }
+        seen.set(s.name, s);
+        out.push(s);
+    }
+    return out;
+}
+/**
+ * The portable half of a plugin's `mcpServers`: every entry the ONE
+ * judgement accepts (a name a client can key on, a transport it speaks, the
+ * field that transport needs), normalised, minus what a client cannot use —
+ * `${VAR}` vault references in a url or a header. Null when there is no
+ * server to ship; each server left out is reported with the judgement's
+ * reason, so an omission is diagnosable.
+ */
+function portableMcp(servers, leftOut) {
+    if (!servers)
+        return null;
+    const out = {};
+    for (const [name, raw] of Object.entries(servers)) {
+        const verdict = judgeMcpServerEntry(name, raw);
+        if (!verdict.ok) {
+            leftOut(name, verdict.reason);
+            continue;
+        }
+        if (verdict.transport === 'stdio') {
+            out[name] = { ...verdict.entry };
+            continue;
+        }
+        const entry = { type: verdict.entry.type, url: verdict.entry.url };
+        if (containsVariableReference(verdict.entry.url)) {
+            leftOut(name, 'its url is expanded from the vault, which a client cannot do');
+            continue;
+        }
+        if (verdict.entry.headers) {
+            const headers = {};
+            for (const [h, v] of Object.entries(verdict.entry.headers)) {
+                if (!containsVariableReference(v))
+                    headers[h] = v;
+            }
+            if (Object.keys(headers).length > 0)
+                entry.headers = headers;
+        }
+        out[name] = entry;
+    }
+    return Object.keys(out).length > 0 ? out : null;
+}
+//# sourceMappingURL=compile-marketplace.js.map

package/dist/modules/plugins/compile/compile-marketplace.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"compile-marketplace.js","sourceRoot":"","sources":["../../../../src/modules/plugins/compile/compile-marketplace.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EACL,oBAAoB,EACpB,eAAe,EACf,sBAAsB,EACtB,iBAAiB,EACjB,kBAAkB,GACnB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AACvD,OAAO,EAAE,yBAAyB,EAAE,MAAM,kCAAkC,CAAC;AAC7E,OAAO,EAAE,mBAAmB,EAAE,MAAM,0CAA0C,CAAC;AAkG/E,MAAM,WAAW,GAAG,WAAW,CAAC;AAChC,MAAM,kBAAkB,GAAG,sBAAsB,CAAC;AAClD,wEAAwE;AACxE,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,kBAAkB,CAAC,CAAC,CAAC;AAClE,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC,CAAC;AAE7D,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,KAAmB;IAC1D,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;IACzE,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;IACxC,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,GAAG,GAAG,CAAC,GAAW,EAAE,OAAwB,EAAE,EAAE,CACpD,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IAExF,4EAA4E;IAC5E,wEAAwE;IACxE,uEAAuE;IACvE,MAAM,cAAc,GAAG,IAAI,GAAG,EAAwB,CAAC;IACvD,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS;YAAE,SAAS;QACxC,IAAI,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,WAAW,CAAC;YAAE,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAC1E,CAAC;IAaD,MAAM,GAAG,GAAgB,EAAE,CAAC;IAE5B,2EAA2E;IAC3E,wEAAwE;IACxE,4EAA4E;IAC5E,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACxD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACtG,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,QAAQ,IAAI,CAAC,MAAM,CAAC,MAAM;YAAE,SAAS;QAC3D,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;QACjC,MAAM,MAAM,GAAG,CAAC,GAAG,cAAc,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAClG,MAAM,MAAM,GAAG,KAAK,CAAC,YAAY;aAC9B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;aACjC,MAAM,CAAC,CAAC,CAAC,EAAqB,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC;QACrD,MAAM,KAAK,GAAG,YAAY,CAAC,CAAC,GAAG,MAAM,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAC9D,QAAQ,CAAC,IAAI,CACX,GAAG,IAAI,YAAY,CAAC,CAAC,IAAI,QAAQ,CAAC,CAAC,IAAI,yBAAyB,KAAK,CAAC,IAAI,2BAA2B,CACtG,CACF,CAAC;QACF,MAAM,GAAG,GAAG,WAAW,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAC1D,QAAQ,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,iBAAiB,IAAI,mBAAmB,MAAM,EAAE,CAAC,CAChF,CAAC;QACF,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,GAAG,KAAK,IAAI;YAAE,SAAS,CAAC,8BAA8B;QAChF,uEAAuE;QACvE,sEAAsE;QACtE,qEAAqE;QACrE,uEAAuE;QACvE,4CAA4C;QAC5C,MAAM,IAAI,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7B,QAAQ,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,oBAAoB,IAAI,0EAA0E,CAAC,CAAC;YAClI,SAAS;QACX,CAAC;QACD,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;YACrC,QAAQ,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,oBAAoB,IAAI,yDAAyD,CAAC,CAAC;YACjH,SAAS;QACX,CAAC;QACD,GAAG,CAAC,IAAI,CAAC;YACP,IAAI;YACJ,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,WAAW,EAAE,OAAO,QAAQ,EAAE,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;YACzF,OAAO,EAAE,OAAO,QAAQ,EAAE,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;YAC7E,MAAM,EAAE,KAAK;YACb,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,GAAG,EAAE,GAAG,IAAI,SAAS;SACtB,CAAC,CAAC;IACL,CAAC;IAED,4EAA4E;IAC5E,4EAA4E;IAC5E,8EAA8E;IAC9E,8EAA8E;IAC9E,+EAA+E;IAC/E,6EAA6E;IAC7E,qCAAqC;IACrC,2EAA2E;IAC3E,2EAA2E;IAC3E,0EAA0E;IAC1E,qEAAqE;IACrE,iDAAiD;IACjD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACzE,MAAM,SAAS,GAAG,CAAC,GAAG,cAAc,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACnF,MAAM,KAAK,GAAG,OAAO,CAAC,gBAAgB;QACpC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,GAAG,EAAE,OAAO,CAAC,gBAAgB,CAAC,GAAG,EAAE,EAAE;QACrG,CAAC,CAAC,SAAS,CAAC;IACd,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,EAAE,CAAC;QAClC,MAAM,IAAI,GAAG,kBAAkB,CAAC,OAAO,CAAC,gBAAgB,IAAI,kBAAkB,CAAC,CAAC;QAChF,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;YACrC,QAAQ,CAAC,IAAI,CAAC,sBAAsB,IAAI,0EAA0E,CAAC,CAAC;QACtH,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,IAAI,CAAC;gBACP,IAAI;gBACJ,WAAW,EAAE,sBAAsB;gBACnC,WAAW,EAAE,KAAK;oBAChB,CAAC,CAAC,mGAAmG;oBACrG,CAAC,CAAC,0DAA0D;gBAC9D,MAAM,EAAE,YAAY,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAC3C,QAAQ,CAAC,IAAI,CAAC,GAAG,IAAI,MAAM,CAAC,CAAC,IAAI,QAAQ,CAAC,CAAC,IAAI,yBAAyB,KAAK,CAAC,IAAI,aAAa,CAAC,CACjG;gBACD,GAAG,EAAE,KAAK;aACX,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,2EAA2E;IAC3E,KAAK,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC;QACpB,MAAM,IAAI,GAAG,WAAW,CAAC,CAAC,IAAI,EAAE,CAAC;QACjC,MAAM,IAAI,GAA4B,EAAE,OAAO,EAAE,sBAAsB,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACxF,IAAI,CAAC,CAAC,OAAO;YAAE,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC;QACxC,IAAI,CAAC,CAAC,WAAW;YAAE,IAAI,CAAC,WAAW,GAAG,CAAC,CAAC,WAAW,CAAC;QACpD,GAAG,CAAC,GAAG,IAAI,IAAI,oBAAoB,EAAE,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QAC7E,MAAM,MAAM,GAA4B,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACzD,IAAI,CAAC,CAAC,OAAO;YAAE,MAAM,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC;QAC1C,MAAM,CAAC,WAAW,GAAG,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,WAAW,CAAC;QACpD,GAAG,CAAC,GAAG,IAAI,6BAA6B,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QAClF,GAAG,CAAC,GAAG,IAAI,4BAA4B,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QACjF,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC;YACV,GAAG,CAAC,GAAG,IAAI,IAAI,eAAe,EAAE,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,iBAAiB,EAAE,UAAU,EAAE,CAAC,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;YACrH,GAAG,CAAC,GAAG,IAAI,YAAY,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QAClF,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;YACzB,MAAM,SAAS,CAAC,MAAM,EAAE,CAAC,EAAE,GAAG,IAAI,WAAW,CAAC,CAAC,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IAED,8EAA8E;IAC9E,MAAM,MAAM,GAAG,kBAAkB,CAAC,OAAO,CAAC,UAAU,IAAI,WAAW,CAAC,CAAC;IACrE,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACrC,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3B,qEAAqE;QACrE,oEAAoE;QACpE,oEAAoE;QACpE,QAAQ,CAAC,IAAI,CAAC,oBAAoB,MAAM,qEAAqE,CAAC,CAAC;IACjH,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAChD,MAAM,QAAQ,GAAG,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC;QAC1D,MAAM,WAAW,GAAG,iBAAiB,OAAO,CAAC,KAAK,4CAA4C,CAAC;QAC/F,GAAG,CACD,WAAW,MAAM,6BAA6B,EAC9C,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,QAAQ,EAAE,EAAE,WAAW,EAAE,YAAY,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CACjH,CAAC;QACF,GAAG,CACD,WAAW,MAAM,IAAI,oBAAoB,EAAE,EAC3C,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,sBAAsB,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAC/F,CAAC;QACF,GAAG,CACD,WAAW,MAAM,4BAA4B,EAC7C,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAC9D,CAAC;IACJ,CAAC;IAED,8DAA8D;IAC9D,MAAM,IAAI,GAAG,YAAY,CACvB,CAAC,GAAG,cAAc,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EACzE,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,IAAI,QAAQ,CAAC,CAAC,IAAI,yBAAyB,KAAK,CAAC,IAAI,aAAa,CAAC,CAC/G,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,IAAI;QAAE,MAAM,SAAS,CAAC,MAAM,EAAE,CAAC,EAAE,UAAU,CAAC,CAAC,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;IAE1E,sDAAsD;IACtD,MAAM,aAAa,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAClE,MAAM,OAAO,GAAG,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,sCAAsC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACxM,GAAG,CACD,iCAAiC,EACjC,GAAG,IAAI,CAAC,SAAS,CACf;QACE,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,KAAK,EAAE;QAC9B,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC,IAAI,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;KAC3G,EACD,IAAI,EACJ,CAAC,CACF,IAAI,CACN,CAAC;IACF,GAAG,CACD,kCAAkC,EAClC,GAAG,IAAI,CAAC,SAAS,CACf;QACE,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC3B,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,MAAM,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC,IAAI,EAAE,EAAE;YACxD,MAAM,EAAE,EAAE,YAAY,EAAE,sBAAsB,EAAE;YAChD,WAAW,EAAE,CAAC,CAAC,WAAW;SAC3B,CAAC,CAAC;KACJ,EACD,IAAI,EACJ,CAAC,CACF,IAAI,CACN,CAAC;IACF,GAAG,CACD,WAAW,EACX;QACE,KAAK,OAAO,CAAC,IAAI,EAAE;QACnB,EAAE;QACF,iBAAiB,OAAO,CAAC,KAAK,iCAAiC,OAAO,CAAC,YAAY,KAAK;QACxF,mEAAmE;QACnE,EAAE;QACF,YAAY,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,GAAG;QAC9D,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;IAEF,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;AAClE,CAAC;AAED,iFAAiF;AAEjF,iEAAiE;AACjE,KAAK,UAAU,SAAS,CACtB,MAAc,EACd,KAAmB,EACnB,IAAY,EACZ,GAA2C;IAE3C,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1C,KAAK,MAAM,GAAG,IAAI,MAAM,SAAS,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QAC3E,GAAG,CAAC,GAAG,IAAI,IAAI,GAAG,EAAE,EAAE,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IAChE,CAAC;AACH,CAAC;AAED,4EAA4E;AAC5E,SAAS,YAAY,CACnB,IAAoB,EACpB,OAA4D;IAE5D,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACtG,MAAM,IAAI,GAAG,IAAI,GAAG,EAAwB,CAAC;IAC7C,MAAM,GAAG,GAAmB,EAAE,CAAC;IAC/B,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI;gBAAE,OAAO,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;YAC/C,SAAS;QACX,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACpB,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACd,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,WAAW,CAClB,OAAuC,EACvC,OAA+C;IAE/C,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,MAAM,GAAG,GAA4C,EAAE,CAAC;IACxD,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAClD,MAAM,OAAO,GAAG,mBAAmB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC/C,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YAChB,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;YAC9B,SAAS;QACX,CAAC;QACD,IAAI,OAAO,CAAC,SAAS,KAAK,OAAO,EAAE,CAAC;YAClC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC;YACjC,SAAS;QACX,CAAC;QACD,MAAM,KAAK,GAA4B,EAAE,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QAC5F,IAAI,yBAAyB,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YACjD,OAAO,CAAC,IAAI,EAAE,8DAA8D,CAAC,CAAC;YAC9E,SAAS;QACX,CAAC;QACD,IAAI,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;YAC1B,MAAM,OAAO,GAA2B,EAAE,CAAC;YAC3C,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC3D,IAAI,CAAC,yBAAyB,CAAC,CAAC,CAAC;oBAAE,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YACpD,CAAC;YACD,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC;gBAAE,KAAK,CAAC,OAAO,GAAG,OAAO,CAAC;QAC/D,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;IACpB,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AAClD,CAAC"}

package/dist/modules/plugins/compile/marketplace-compiler.service.d.ts

@@ -0,0 +1,66 @@
+import type { WorkspaceService } from '../../workspace/workspace.service.js';
+import type { IAccessControl } from '../../access/access-control.interface.js';
+import type { ISkillService } from '../../skills/skills.contract.js';
+import type { PluginLinkIndex } from '../plugin-links.js';
+import type { PluginSource } from '../discovery/plugin-source.js';
+import { type VirtualTree } from './compile-marketplace.js';
+/** Whose view of the knowledge base to compile. */
+export type CompileAudience = {
+    userEmail: string;
+} | {
+    everyone: true;
+};
+/**
+ * The compiler wired to the live deployment: the default-branch checkout,
+ * the released catalog, the link index, and the access resolver as the read
+ * verdict. Every sink — the per-user git endpoint, a public mirror, a local
+ * export — asks this for a tree and writes it somewhere.
+ *
+ * Two audiences: a PERSON (their `canRead` per skill, exactly the catalog's
+ * filter) or EVERYONE (only what `read: everyone` reaches cleanly — the
+ * public subset a shared mirror may carry). Nothing in between: an audience
+ * that is "these three people" would need a union of verdicts nobody has
+ * asked for yet.
+ */
+export declare class MarketplaceCompilerService {
+    private readonly workspaceService;
+    private readonly accessControl;
+    private readonly skillService;
+    private readonly links;
+    private readonly kbDirName;
+    private readonly marketplace;
+    private readonly source;
+    constructor(workspaceService: WorkspaceService, accessControl: IAccessControl, skillService: ISkillService, links: PluginLinkIndex, kbDirName: string, marketplace: {
+        name: string;
+        owner: string;
+        description?: string;
+        /** The hosted MCP endpoint to ship in the skills plugin (URL only). */
+        knowledgeBaseMcp?: {
+            name: string;
+            url: string;
+        };
+    }, source?: PluginSource);
+    /**
+     * The default-branch commit the next compile would read. Throws when git
+     * cannot say: the repo service keys freshness on this value, and a stable
+     * placeholder would make every later compile look unnecessary — source
+     * changes and access revocations would never reach that caller again.
+     */
+    sourceCommit(): Promise<string>;
+    compileFor(audience: CompileAudience, 
+    /** The commit to stamp the tree with, when the caller already read it (the freshness check does). */
+    knownCommit?: string): Promise<VirtualTree & {
+        sourceCommit: string;
+    }>;
+    private checkout;
+    /**
+     * One batch verdict per compile, then a lookup. Fail closed both ways: a
+     * path the batch skipped is unreadable, and for the everyone audience a
+     * skill is public only when the resolver says `read: everyone` applies
+     * cleanly (`restricted: false`).
+     */
+    private readPredicate;
+}
+/** The default-branch workspace id compiles run against. */
+export declare function compileWorkspaceId(): string;
+//# sourceMappingURL=marketplace-compiler.service.d.ts.map

package/dist/modules/plugins/compile/marketplace-compiler.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"marketplace-compiler.service.d.ts","sourceRoot":"","sources":["../../../../src/modules/plugins/compile/marketplace-compiler.service.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,sCAAsC,CAAC;AAC7E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,0CAA0C,CAAC;AAC/E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAErE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAElE,OAAO,EAAsB,KAAK,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAIhF,mDAAmD;AACnD,MAAM,MAAM,eAAe,GAAG;IAAE,SAAS,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,QAAQ,EAAE,IAAI,CAAA;CAAE,CAAC;AAEzE;;;;;;;;;;;GAWG;AACH,qBAAa,0BAA0B;IAEnC,OAAO,CAAC,QAAQ,CAAC,gBAAgB;IACjC,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,YAAY;IAC7B,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,WAAW;IAO5B,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAZN,gBAAgB,EAAE,gBAAgB,EAClC,aAAa,EAAE,cAAc,EAC7B,YAAY,EAAE,aAAa,EAC3B,KAAK,EAAE,eAAe,EACtB,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE;QAC5B,IAAI,EAAE,MAAM,CAAC;QACb,KAAK,EAAE,MAAM,CAAC;QACd,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,uEAAuE;QACvE,gBAAgB,CAAC,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,GAAG,EAAE,MAAM,CAAA;SAAE,CAAC;KAClD,EACgB,MAAM,GAAE,YAAmC;IAG9D;;;;;OAKG;IACG,YAAY,IAAI,OAAO,CAAC,MAAM,CAAC;IAW/B,UAAU,CACd,QAAQ,EAAE,eAAe;IACzB,qGAAqG;IACrG,WAAW,CAAC,EAAE,MAAM,GACnB,OAAO,CAAC,WAAW,GAAG;QAAE,YAAY,EAAE,MAAM,CAAA;KAAE,CAAC;YAwCpC,QAAQ;IAKtB;;;;;OAKG;YACW,aAAa;CAyB5B;AAED,4DAA4D;AAC5D,wBAAgB,kBAAkB,IAAI,MAAM,CAE3C"}

package/dist/modules/plugins/compile/marketplace-compiler.service.js

@@ -0,0 +1,132 @@
+import path from 'node:path';
+import { execFile } from 'node:child_process';
+import { promisify } from 'node:util';
+import { DEFAULT_BRANCH } from '@bevel-software/platform-shared';
+import { workspaceIdForBranch } from '../../../shared/workspace-id.js';
+import { KbPluginSource } from '../discovery/kb-plugin-source.js';
+import { compileMarketplace } from './compile-marketplace.js';
+const execFileAsync = promisify(execFile);
+/**
+ * The compiler wired to the live deployment: the default-branch checkout,
+ * the released catalog, the link index, and the access resolver as the read
+ * verdict. Every sink — the per-user git endpoint, a public mirror, a local
+ * export — asks this for a tree and writes it somewhere.
+ *
+ * Two audiences: a PERSON (their `canRead` per skill, exactly the catalog's
+ * filter) or EVERYONE (only what `read: everyone` reaches cleanly — the
+ * public subset a shared mirror may carry). Nothing in between: an audience
+ * that is "these three people" would need a union of verdicts nobody has
+ * asked for yet.
+ */
+export class MarketplaceCompilerService {
+    workspaceService;
+    accessControl;
+    skillService;
+    links;
+    kbDirName;
+    marketplace;
+    source;
+    constructor(workspaceService, accessControl, skillService, links, kbDirName, marketplace, source = new KbPluginSource()) {
+        this.workspaceService = workspaceService;
+        this.accessControl = accessControl;
+        this.skillService = skillService;
+        this.links = links;
+        this.kbDirName = kbDirName;
+        this.marketplace = marketplace;
+        this.source = source;
+    }
+    /**
+     * The default-branch commit the next compile would read. Throws when git
+     * cannot say: the repo service keys freshness on this value, and a stable
+     * placeholder would make every later compile look unnecessary — source
+     * changes and access revocations would never reach that caller again.
+     */
+    async sourceCommit() {
+        const { kbRoot } = await this.checkout();
+        const { stdout } = await execFileAsync('git', ['-C', kbRoot, 'rev-parse', 'HEAD']);
+        const sha = stdout.trim();
+        // SHA-1 or SHA-256 object format: any hex object id is a commit.
+        if (!/^(?:[0-9a-f]{40}|[0-9a-f]{64})$/.test(sha)) {
+            throw new Error(`could not read the default branch's commit (${sha || 'empty'})`);
+        }
+        return sha;
+    }
+    async compileFor(audience, 
+    /** The commit to stamp the tree with, when the caller already read it (the freshness check does). */
+    knownCommit) {
+        const { wsId, kbRoot } = await this.checkout();
+        // Strictness about the commit belongs to the FRESHNESS check (the repo
+        // service calls `sourceCommit()` itself and refuses to serve without
+        // one). A compile of a checkout git cannot describe still yields a
+        // correct tree; only its README and bundle version lose the sha.
+        const sourceCommit = knownCommit ?? (await this.sourceCommit().catch(() => 'unknown'));
+        // The tree is stamped with the checkout's commit, so every input must be
+        // read from that checkout NOW — not from a catalog scanned before the
+        // commit landed. The skill catalog, the link index and the access memo
+        // are TTL caches that nothing drops on an ordinary write (an MCP
+        // `write_files` moves HEAD and invalidates none of them), and the repo
+        // service keys freshness on the stamped commit: a tree compiled from a
+        // stale catalog under a fresh sha would be "current" until the NEXT
+        // commit, with the caller's marketplace frozen on content the knowledge
+        // base no longer has. Compiles run once per moved commit per caller, so
+        // the rescan is cheap where it matters.
+        this.skillService.invalidate();
+        this.links.invalidate();
+        this.accessControl.invalidate(wsId);
+        const skills = await this.skillService.listSkills(undefined);
+        const membership = await this.links.membership();
+        const { plugins, warnings: discoveryWarnings } = await this.source.discover(kbRoot);
+        const readable = await this.readPredicate(wsId, audience, skills.map((s) => `${s.path}/SKILL.md`));
+        const tree = await compileMarketplace({
+            kbRoot,
+            skills,
+            plugins,
+            membership,
+            readable,
+            options: { ...this.marketplace, sourceCommit },
+        });
+        // Discovery's warnings ride with the compile's: a plugin left out for a
+        // malformed manifest or an unresolved MCP profile is otherwise an
+        // omission nobody can diagnose from the tree alone.
+        return { ...tree, warnings: [...discoveryWarnings, ...tree.warnings], sourceCommit };
+    }
+    // --- internal --------------------------------------------------------------
+    async checkout() {
+        const wsId = (await this.workspaceService.getOrCreateForBranch(DEFAULT_BRANCH)).id;
+        return { wsId, kbRoot: path.join(await this.workspaceService.getWorkspacePath(wsId), this.kbDirName) };
+    }
+    /**
+     * One batch verdict per compile, then a lookup. Fail closed both ways: a
+     * path the batch skipped is unreadable, and for the everyone audience a
+     * skill is public only when the resolver says `read: everyone` applies
+     * cleanly (`restricted: false`).
+     */
+    async readPredicate(wsId, audience, docPaths) {
+        if ('userEmail' in audience) {
+            const verdicts = docPaths.length
+                ? await this.accessControl.canReadBatch(wsId, audience.userEmail, docPaths)
+                : new Map();
+            return async (p) => verdicts.get(p) === true;
+        }
+        const cache = new Map();
+        return async (p) => {
+            const hit = cache.get(p);
+            if (hit !== undefined)
+                return hit;
+            let verdict = false;
+            try {
+                verdict = !(await this.accessControl.eligibleReaders(wsId, p)).restricted;
+            }
+            catch {
+                verdict = false;
+            }
+            cache.set(p, verdict);
+            return verdict;
+        };
+    }
+}
+/** The default-branch workspace id compiles run against. */
+export function compileWorkspaceId() {
+    return workspaceIdForBranch(DEFAULT_BRANCH);
+}
+//# sourceMappingURL=marketplace-compiler.service.js.map

package/dist/modules/plugins/compile/marketplace-compiler.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"marketplace-compiler.service.js","sourceRoot":"","sources":["../../../../src/modules/plugins/compile/marketplace-compiler.service.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AAIjE,OAAO,EAAE,oBAAoB,EAAE,MAAM,iCAAiC,CAAC;AAGvE,OAAO,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AAClE,OAAO,EAAE,kBAAkB,EAAoB,MAAM,0BAA0B,CAAC;AAEhF,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAK1C;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,0BAA0B;IAElB;IACA;IACA;IACA;IACA;IACA;IAOA;IAbnB,YACmB,gBAAkC,EAClC,aAA6B,EAC7B,YAA2B,EAC3B,KAAsB,EACtB,SAAiB,EACjB,WAMhB,EACgB,SAAuB,IAAI,cAAc,EAAE;QAZ3C,qBAAgB,GAAhB,gBAAgB,CAAkB;QAClC,kBAAa,GAAb,aAAa,CAAgB;QAC7B,iBAAY,GAAZ,YAAY,CAAe;QAC3B,UAAK,GAAL,KAAK,CAAiB;QACtB,cAAS,GAAT,SAAS,CAAQ;QACjB,gBAAW,GAAX,WAAW,CAM3B;QACgB,WAAM,GAAN,MAAM,CAAqC;IAC3D,CAAC;IAEJ;;;;;OAKG;IACH,KAAK,CAAC,YAAY;QAChB,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QACzC,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC;QACnF,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;QAC1B,iEAAiE;QACjE,IAAI,CAAC,iCAAiC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACjD,MAAM,IAAI,KAAK,CAAC,+CAA+C,GAAG,IAAI,OAAO,GAAG,CAAC,CAAC;QACpF,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,KAAK,CAAC,UAAU,CACd,QAAyB;IACzB,qGAAqG;IACrG,WAAoB;QAEpB,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC/C,uEAAuE;QACvE,qEAAqE;QACrE,mEAAmE;QACnE,iEAAiE;QACjE,MAAM,YAAY,GAAG,WAAW,IAAI,CAAC,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;QACvF,yEAAyE;QACzE,sEAAsE;QACtE,uEAAuE;QACvE,iEAAiE;QACjE,uEAAuE;QACvE,uEAAuE;QACvE,oEAAoE;QACpE,wEAAwE;QACxE,wEAAwE;QACxE,wCAAwC;QACxC,IAAI,CAAC,YAAY,CAAC,UAAU,EAAE,CAAC;QAC/B,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;QACxB,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACpC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAC7D,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;QACjD,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,iBAAiB,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACpF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,WAAW,CAAC,CAAC,CAAC;QACnG,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC;YACpC,MAAM;YACN,MAAM;YACN,OAAO;YACP,UAAU;YACV,QAAQ;YACR,OAAO,EAAE,EAAE,GAAG,IAAI,CAAC,WAAW,EAAE,YAAY,EAAE;SAC/C,CAAC,CAAC;QACH,wEAAwE;QACxE,kEAAkE;QAClE,oDAAoD;QACpD,OAAO,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,CAAC,GAAG,iBAAiB,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,EAAE,YAAY,EAAE,CAAC;IACvF,CAAC;IAED,8EAA8E;IAEtE,KAAK,CAAC,QAAQ;QACpB,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,gBAAgB,CAAC,oBAAoB,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC;QACnF,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,gBAAgB,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;IACzG,CAAC;IAED;;;;;OAKG;IACK,KAAK,CAAC,aAAa,CACzB,IAAY,EACZ,QAAyB,EACzB,QAAkB;QAElB,IAAI,WAAW,IAAI,QAAQ,EAAE,CAAC;YAC5B,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM;gBAC9B,CAAC,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,IAAI,EAAE,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC;gBAC3E,CAAC,CAAC,IAAI,GAAG,EAAmB,CAAC;YAC/B,OAAO,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC;QAC/C,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAmB,CAAC;QACzC,OAAO,KAAK,EAAE,CAAC,EAAE,EAAE;YACjB,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACzB,IAAI,GAAG,KAAK,SAAS;gBAAE,OAAO,GAAG,CAAC;YAClC,IAAI,OAAO,GAAG,KAAK,CAAC;YACpB,IAAI,CAAC;gBACH,OAAO,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;YAC5E,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,GAAG,KAAK,CAAC;YAClB,CAAC;YACD,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;YACtB,OAAO,OAAO,CAAC;QACjB,CAAC,CAAC;IACJ,CAAC;CACF;AAED,4DAA4D;AAC5D,MAAM,UAAU,kBAAkB;IAChC,OAAO,oBAAoB,CAAC,cAAc,CAAC,CAAC;AAC9C,CAAC"}

package/dist/modules/plugins/discovery/bundle-dialect/bundle.source.d.ts

@@ -0,0 +1,37 @@
+import type { DiscoveredPlugin } from '../plugin-source.js';
+import { type McpRegistry } from './registry.js';
+/**
+ * THE DETACHABLE PART — a customer's plugin file format, read as-is:
+ *
+ *   <pluginsRoot>/<scope…>/<plugin>/plugin.bundle.json
+ *     {
+ *       "name": "example-plugin", "version": "1.3.1", "description": "…",
+ *       "mcpProfile": "global",
+ *       "interface": { "displayName": "Example Plugin", "category": "…" },
+ *       "sourceSkillRoots": [ "skills/departments/engineering/shared/<cluster>" ]
+ *     }
+ *
+ * A bundle is a LIST OF SKILL PATHS plus a pointer into an MCP registry —
+ * which is exactly the native model's "a plugin links skills" with different
+ * field names. So the reader maps:
+ *
+ *   sourceSkillRoots   → linkedRoots          (a root is a skill or a folder of skills)
+ *   mcpProfile         → mcpServers           (expanded through the registry)
+ *   name/version/desc  → a synthesised manifest
+ *   interface.displayName → the plugin's display name
+ *
+ * The walker (`kb-plugin-source.ts`) calls this for every folder holding a
+ * bundle file; this reads the file and decides nothing else. READ-ONLY by
+ * construction: nothing in this directory writes. A bundle's links are plain
+ * references (`linksAreManaged: false`): no principal grant is written or
+ * checked, the skills' own scopes decide readability.
+ *
+ * Deleting the dialect later = this directory, the one `else if` in the
+ * walker that calls it, and the walker's registry load.
+ */
+export declare const BUNDLE_FILE = "plugin.bundle.json";
+export declare const DEFAULT_REGISTRY_PATH = "configs/mcp/registry.json";
+/** The registry, when the repository has one; a missing file is null, a broken one warns. */
+export declare function loadRegistry(kbRoot: string, warnings: string[]): Promise<McpRegistry | null>;
+export declare function readBundlePlugin(dir: string, folder: string, relFolder: string, registry: McpRegistry | null, warnings: string[], unreadable: string[]): Promise<DiscoveredPlugin | null>;
+//# sourceMappingURL=bundle.source.d.ts.map

package/dist/modules/plugins/discovery/bundle-dialect/bundle.source.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bundle.source.d.ts","sourceRoot":"","sources":["../../../../../src/modules/plugins/discovery/bundle-dialect/bundle.source.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAgC,KAAK,WAAW,EAAE,MAAM,eAAe,CAAC;AAE/E;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,eAAO,MAAM,WAAW,uBAAuB,CAAC;AAChD,eAAO,MAAM,qBAAqB,8BAA8B,CAAC;AAEjE,6FAA6F;AAC7F,wBAAsB,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAgBlG;AAED,wBAAsB,gBAAgB,CACpC,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,WAAW,GAAG,IAAI,EAC5B,QAAQ,EAAE,MAAM,EAAE,EAClB,UAAU,EAAE,MAAM,EAAE,GACnB,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CA0ElC"}