@bevel-software/platform-core-backend 0.14.0 → 0.15.1

package/dist/modules/plugins/discovery/bundle-dialect/bundle.source.js

@@ -0,0 +1,135 @@
+import fs from 'node:fs/promises';
+import path from 'node:path';
+import { isPersonalPluginDir, normalizeSkillRoot, pluginManifestName } from '@bevel-software/platform-shared';
+import { isAbsence } from '../../../../shared/fs-errors.js';
+import { expandProfile, parseRegistry } from './registry.js';
+/**
+ * THE DETACHABLE PART — a customer's plugin file format, read as-is:
+ *
+ *   <pluginsRoot>/<scope…>/<plugin>/plugin.bundle.json
+ *     {
+ *       "name": "example-plugin", "version": "1.3.1", "description": "…",
+ *       "mcpProfile": "global",
+ *       "interface": { "displayName": "Example Plugin", "category": "…" },
+ *       "sourceSkillRoots": [ "skills/departments/engineering/shared/<cluster>" ]
+ *     }
+ *
+ * A bundle is a LIST OF SKILL PATHS plus a pointer into an MCP registry —
+ * which is exactly the native model's "a plugin links skills" with different
+ * field names. So the reader maps:
+ *
+ *   sourceSkillRoots   → linkedRoots          (a root is a skill or a folder of skills)
+ *   mcpProfile         → mcpServers           (expanded through the registry)
+ *   name/version/desc  → a synthesised manifest
+ *   interface.displayName → the plugin's display name
+ *
+ * The walker (`kb-plugin-source.ts`) calls this for every folder holding a
+ * bundle file; this reads the file and decides nothing else. READ-ONLY by
+ * construction: nothing in this directory writes. A bundle's links are plain
+ * references (`linksAreManaged: false`): no principal grant is written or
+ * checked, the skills' own scopes decide readability.
+ *
+ * Deleting the dialect later = this directory, the one `else if` in the
+ * walker that calls it, and the walker's registry load.
+ */
+export const BUNDLE_FILE = 'plugin.bundle.json';
+export const DEFAULT_REGISTRY_PATH = 'configs/mcp/registry.json';
+/** The registry, when the repository has one; a missing file is null, a broken one warns. */
+export async function loadRegistry(kbRoot, warnings) {
+    let text;
+    try {
+        text = await fs.readFile(path.join(kbRoot, DEFAULT_REGISTRY_PATH), 'utf-8');
+    }
+    catch (err) {
+        // No registry is a valid state: bundles without a profile are still
+        // plugins. A registry that exists but cannot be read is not.
+        if (!isAbsence(err)) {
+            const code = err?.code;
+            warnings.push(`${DEFAULT_REGISTRY_PATH} could not be read (${String(code ?? err)}) — every mcpProfile is unresolved`);
+        }
+        return null;
+    }
+    const registry = parseRegistry(text);
+    warnings.push(...registry.warnings);
+    return registry;
+}
+export async function readBundlePlugin(dir, folder, relFolder, registry, warnings, unreadable) {
+    // Reading and parsing are two failures with two meanings: a file that
+    // cannot be read is a plugin nobody could see (counted, so a writer can
+    // refuse); a file that is not a bundle is a plugin that is not there.
+    let text;
+    try {
+        text = await fs.readFile(path.join(dir, BUNDLE_FILE), 'utf-8');
+    }
+    catch (err) {
+        if (!isAbsence(err)) {
+            warnings.push(`${folder}/${BUNDLE_FILE} could not be read — ${err instanceof Error ? err.message : String(err)}`);
+            unreadable.push(`${folder}/${BUNDLE_FILE}`);
+        }
+        return null;
+    }
+    let bundle;
+    try {
+        const parsed = JSON.parse(text);
+        if (typeof parsed !== 'object' || parsed === null || Array.isArray(parsed))
+            throw new Error('not an object');
+        bundle = parsed;
+    }
+    catch {
+        warnings.push(`${folder}/${BUNDLE_FILE} is not a JSON object — plugin skipped`);
+        return null;
+    }
+    const leaf = path.posix.basename(relFolder);
+    const name = typeof bundle.name === 'string' && bundle.name.trim() ? bundle.name.trim() : leaf;
+    const linkedRoots = [];
+    for (const raw of Array.isArray(bundle.sourceSkillRoots) ? bundle.sourceSkillRoots : []) {
+        const normalised = normalizeSkillRoot(typeof raw === 'string' ? raw : '');
+        if (normalised === null) {
+            warnings.push(`${folder}: sourceSkillRoots entry ${JSON.stringify(raw)} is not a folder path — ignored`);
+        }
+        else if (!linkedRoots.includes(normalised)) {
+            linkedRoots.push(normalised);
+        }
+    }
+    let mcpServers = null;
+    if (typeof bundle.mcpProfile === 'string' && bundle.mcpProfile.trim()) {
+        if (!registry) {
+            warnings.push(`${folder}: mcpProfile "${bundle.mcpProfile}" named but no registry could be read`);
+        }
+        else {
+            const expanded = expandProfile(registry, bundle.mcpProfile.trim());
+            warnings.push(...expanded.warnings.map((w) => `${folder}: ${w}`));
+            if (Object.keys(expanded.mcpServers).length > 0)
+                mcpServers = expanded.mcpServers;
+        }
+    }
+    const ui = typeof bundle.interface === 'object' && bundle.interface !== null
+        ? bundle.interface
+        : {};
+    const manifest = { name: pluginManifestName(name) };
+    if (typeof bundle.version === 'string')
+        manifest.version = bundle.version;
+    if (typeof bundle.description === 'string')
+        manifest.description = bundle.description;
+    if (typeof ui.displayName === 'string')
+        manifest.displayName = ui.displayName;
+    return {
+        name,
+        // The shared contract (`DiscoveredPlugin.displayName`): the declared
+        // display name, else the FOLDER — never the identity.
+        displayName: typeof ui.displayName === 'string' && ui.displayName.trim() ? ui.displayName.trim() : leaf,
+        folder,
+        relFolder,
+        // The same rule as the native reader: a reserved personal folder directly
+        // under the root is a place, not a plugin, whatever file it carries.
+        personal: isPersonalPluginDir(folder),
+        exists: true,
+        manifest,
+        manifestText: null,
+        linkedRoots,
+        mcpServers,
+        mcpJsonText: mcpServers ? JSON.stringify({ mcpServers }) : null,
+        linksAreManaged: false,
+    };
+}
+//# sourceMappingURL=bundle.source.js.map

package/dist/modules/plugins/discovery/bundle-dialect/bundle.source.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bundle.source.js","sourceRoot":"","sources":["../../../../../src/modules/plugins/discovery/bundle-dialect/bundle.source.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AAC9G,OAAO,EAAE,SAAS,EAAE,MAAM,iCAAiC,CAAC;AAE5D,OAAO,EAAE,aAAa,EAAE,aAAa,EAAoB,MAAM,eAAe,CAAC;AAE/E;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,oBAAoB,CAAC;AAChD,MAAM,CAAC,MAAM,qBAAqB,GAAG,2BAA2B,CAAC;AAEjE,6FAA6F;AAC7F,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,MAAc,EAAE,QAAkB;IACnE,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,qBAAqB,CAAC,EAAE,OAAO,CAAC,CAAC;IAC9E,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,oEAAoE;QACpE,6DAA6D;QAC7D,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;YACpB,MAAM,IAAI,GAAI,GAAiC,EAAE,IAAI,CAAC;YACtD,QAAQ,CAAC,IAAI,CAAC,GAAG,qBAAqB,uBAAuB,MAAM,CAAC,IAAI,IAAI,GAAG,CAAC,oCAAoC,CAAC,CAAC;QACxH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACrC,QAAQ,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACpC,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,GAAW,EACX,MAAc,EACd,SAAiB,EACjB,QAA4B,EAC5B,QAAkB,EAClB,UAAoB;IAEpB,sEAAsE;IACtE,wEAAwE;IACxE,sEAAsE;IACtE,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE,OAAO,CAAC,CAAC;IACjE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;YACpB,QAAQ,CAAC,IAAI,CAAC,GAAG,MAAM,IAAI,WAAW,wBAAwB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAClH,UAAU,CAAC,IAAI,CAAC,GAAG,MAAM,IAAI,WAAW,EAAE,CAAC,CAAC;QAC9C,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,MAA+B,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;QAC7G,MAAM,GAAG,MAAiC,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,QAAQ,CAAC,IAAI,CAAC,GAAG,MAAM,IAAI,WAAW,wCAAwC,CAAC,CAAC;QAChF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IAC5C,MAAM,IAAI,GAAG,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAE/F,MAAM,WAAW,GAAa,EAAE,CAAC;IACjC,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QACxF,MAAM,UAAU,GAAG,kBAAkB,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC1E,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;YACxB,QAAQ,CAAC,IAAI,CAAC,GAAG,MAAM,4BAA4B,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;QAC3G,CAAC;aAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YAC7C,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;IAED,IAAI,UAAU,GAAmC,IAAI,CAAC;IACtD,IAAI,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC;QACtE,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,QAAQ,CAAC,IAAI,CAAC,GAAG,MAAM,iBAAiB,MAAM,CAAC,UAAU,uCAAuC,CAAC,CAAC;QACpG,CAAC;aAAM,CAAC;YACN,MAAM,QAAQ,GAAG,aAAa,CAAC,QAAQ,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC;YACnE,QAAQ,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,MAAM,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;YAClE,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,MAAM,GAAG,CAAC;gBAAE,UAAU,GAAG,QAAQ,CAAC,UAAU,CAAC;QACpF,CAAC;IACH,CAAC;IAED,MAAM,EAAE,GACN,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,KAAK,IAAI;QAC/D,CAAC,CAAE,MAAM,CAAC,SAAqC;QAC/C,CAAC,CAAC,EAAE,CAAC;IACT,MAAM,QAAQ,GAA4B,EAAE,IAAI,EAAE,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;IAC7E,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ;QAAE,QAAQ,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;IAC1E,IAAI,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ;QAAE,QAAQ,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;IACtF,IAAI,OAAO,EAAE,CAAC,WAAW,KAAK,QAAQ;QAAE,QAAQ,CAAC,WAAW,GAAG,EAAE,CAAC,WAAW,CAAC;IAE9E,OAAO;QACL,IAAI;QACJ,qEAAqE;QACrE,sDAAsD;QACtD,WAAW,EAAE,OAAO,EAAE,CAAC,WAAW,KAAK,QAAQ,IAAI,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI;QACvG,MAAM;QACN,SAAS;QACT,0EAA0E;QAC1E,qEAAqE;QACrE,QAAQ,EAAE,mBAAmB,CAAC,MAAM,CAAC;QACrC,MAAM,EAAE,IAAI;QACZ,QAAQ;QACR,YAAY,EAAE,IAAI;QAClB,WAAW;QACX,UAAU;QACV,WAAW,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI;QAC/D,eAAe,EAAE,KAAK;KACvB,CAAC;AACJ,CAAC"}

package/dist/modules/plugins/discovery/bundle-dialect/registry.d.ts

@@ -0,0 +1,45 @@
+/**
+ * The customer's MCP registry — `configs/mcp/registry.json` — and how a
+ * bundle's `mcpProfile` expands through it into an `mcpServers` map of the
+ * shape `mcp.json` carries.
+ *
+ * The file holds two lists:
+ *
+ *   servers   each with an `id`, a `name`, and the real config — either a
+ *             stdio launch (`command`, `args`, `env`) or `type: http` + `url`;
+ *             the config may sit under a `config` key or flat on the entry.
+ *   profiles  each with an `id`, the server ids it selects, and an optional
+ *             `extends` naming another profile (a chain, never a cycle).
+ *
+ * Pure: parse once, expand many. Unknown ids and cycles are warnings, never
+ * throws — a registry typo must not take every plugin down.
+ */
+import { type PortableHttpEntry, type PortableStdioEntry } from '../../../tool-manuals/mcp-json-discovery.js';
+export interface RegistryServer {
+    id: string;
+    name?: string;
+    /** The server as one `mcp.json` entry — judged, and therefore usable, at parse time. */
+    entry: PortableStdioEntry | PortableHttpEntry;
+}
+export interface RegistryProfile {
+    id: string;
+    servers: string[];
+    extends?: string;
+}
+export interface McpRegistry {
+    servers: Map<string, RegistryServer>;
+    profiles: Map<string, RegistryProfile>;
+    warnings: string[];
+}
+export declare function parseRegistry(text: string): McpRegistry;
+/**
+ * The `mcpServers` map a profile resolves to, in `mcp.json` terms. Keyed by
+ * server id — the namespace vault secrets bind to, so the same registry
+ * server in three plugins shares one credential, which is what a registry
+ * means.
+ */
+export declare function expandProfile(registry: McpRegistry, profileId: string): {
+    mcpServers: Record<string, unknown>;
+    warnings: string[];
+};
+//# sourceMappingURL=registry.d.ts.map

package/dist/modules/plugins/discovery/bundle-dialect/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../../../../src/modules/plugins/discovery/bundle-dialect/registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,EAEL,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACxB,MAAM,6CAA6C,CAAC;AAErD,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,wFAAwF;IACxF,KAAK,EAAE,kBAAkB,GAAG,iBAAiB,CAAC;CAC/C;AAED,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IACrC,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IACvC,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,CAgDvD;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAC3B,QAAQ,EAAE,WAAW,EACrB,SAAS,EAAE,MAAM,GAChB;IAAE,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;CAAE,CA+B7D"}

package/dist/modules/plugins/discovery/bundle-dialect/registry.js

@@ -0,0 +1,147 @@
+/**
+ * The customer's MCP registry — `configs/mcp/registry.json` — and how a
+ * bundle's `mcpProfile` expands through it into an `mcpServers` map of the
+ * shape `mcp.json` carries.
+ *
+ * The file holds two lists:
+ *
+ *   servers   each with an `id`, a `name`, and the real config — either a
+ *             stdio launch (`command`, `args`, `env`) or `type: http` + `url`;
+ *             the config may sit under a `config` key or flat on the entry.
+ *   profiles  each with an `id`, the server ids it selects, and an optional
+ *             `extends` naming another profile (a chain, never a cycle).
+ *
+ * Pure: parse once, expand many. Unknown ids and cycles are warnings, never
+ * throws — a registry typo must not take every plugin down.
+ */
+import { judgeMcpServerEntry, } from '../../../tool-manuals/mcp-json-discovery.js';
+export function parseRegistry(text) {
+    const warnings = [];
+    const servers = new Map();
+    const profiles = new Map();
+    let root;
+    try {
+        root = JSON.parse(text);
+    }
+    catch {
+        return { servers, profiles, warnings: ['registry.json is not valid JSON'] };
+    }
+    if (!isRecord(root))
+        return { servers, profiles, warnings: ['registry.json must be a JSON object'] };
+    for (const raw of asArray(root.servers)) {
+        if (!isRecord(raw) || typeof raw.id !== 'string' || !raw.id) {
+            warnings.push('registry.json: a server without an id was skipped');
+            continue;
+        }
+        if (servers.has(raw.id)) {
+            warnings.push(`registry.json: server "${raw.id}" is declared twice — the second declaration is ignored`);
+            continue;
+        }
+        // Converting IS the validation: a server the registry keeps is one whose
+        // entry a client can run — judged by the ONE rule every mcp.json entry
+        // meets (name, transport, required fields), after the customer's shape
+        // is translated into that of mcp.json.
+        const converted = mcpEntryOf(raw.id, isRecord(raw.config) ? raw.config : raw);
+        if ('reason' in converted) {
+            warnings.push(`registry.json: server "${raw.id}" ${converted.reason} — skipped`);
+            continue;
+        }
+        servers.set(raw.id, { id: raw.id, name: typeof raw.name === 'string' ? raw.name : undefined, entry: converted.entry });
+    }
+    for (const raw of asArray(root.profiles)) {
+        if (!isRecord(raw) || typeof raw.id !== 'string' || !raw.id) {
+            warnings.push('registry.json: a profile without an id was skipped');
+            continue;
+        }
+        if (profiles.has(raw.id)) {
+            warnings.push(`registry.json: profile "${raw.id}" is declared twice — the second declaration is ignored`);
+            continue;
+        }
+        profiles.set(raw.id, {
+            id: raw.id,
+            servers: asArray(raw.servers).filter((s) => typeof s === 'string'),
+            extends: typeof raw.extends === 'string' ? raw.extends : undefined,
+        });
+    }
+    return { servers, profiles, warnings };
+}
+/**
+ * The `mcpServers` map a profile resolves to, in `mcp.json` terms. Keyed by
+ * server id — the namespace vault secrets bind to, so the same registry
+ * server in three plugins shares one credential, which is what a registry
+ * means.
+ */
+export function expandProfile(registry, profileId) {
+    const warnings = [];
+    const ids = [];
+    const seen = new Set();
+    let current = profileId;
+    while (current !== undefined) {
+        if (seen.has(current)) {
+            warnings.push(`registry.json: profile "${current}" extends itself through a cycle — chain cut`);
+            break;
+        }
+        seen.add(current);
+        const profile = registry.profiles.get(current);
+        if (!profile) {
+            warnings.push(`registry.json: profile "${current}" does not exist`);
+            break;
+        }
+        // Nearest profile first, so a base profile's servers come after the
+        // extending one's; the map below keeps the first occurrence of an id.
+        for (const id of profile.servers)
+            if (!ids.includes(id))
+                ids.push(id);
+        current = profile.extends;
+    }
+    const mcpServers = {};
+    for (const id of ids) {
+        const server = registry.servers.get(id);
+        if (!server) {
+            warnings.push(`registry.json: profile "${profileId}" selects unknown server "${id}"`);
+            continue;
+        }
+        mcpServers[id] = server.entry;
+    }
+    return { mcpServers, warnings };
+}
+/**
+ * A registry config → one `mcp.json` server entry, or why there is none.
+ *
+ * The registry's OWN knowledge is the customer's shape: a declared `type`
+ * names the transport (`http` is their spelling of `streamable-http`), an
+ * undeclared one is read off the fields — a `url` means http, else a
+ * `command` means stdio — and blank strings are absent. That translation
+ * done, whether the entry can work is the shared judgement's call, the same
+ * one every `mcp.json` entry meets: a name that can be a server name, a
+ * transport the client speaks (no `sse`), the field that transport needs.
+ */
+function mcpEntryOf(id, config) {
+    const declared = typeof config.type === 'string' ? config.type.trim().toLowerCase() : undefined;
+    const url = nonBlank(config.url);
+    const command = nonBlank(config.command);
+    const type = declared === undefined ? (url ? 'streamable-http' : command ? 'stdio' : undefined) : declared === 'http' ? 'streamable-http' : declared;
+    if (type === undefined)
+        return { reason: 'has neither a url nor a command' };
+    const candidate = { type };
+    if (url)
+        candidate.url = url;
+    if (command)
+        candidate.command = command;
+    for (const key of ['args', 'env', 'cwd', 'headers']) {
+        if (config[key] !== undefined)
+            candidate[key] = config[key];
+    }
+    const verdict = judgeMcpServerEntry(id, candidate);
+    return verdict.ok ? { entry: verdict.entry } : { reason: verdict.reason };
+}
+function nonBlank(v) {
+    return typeof v === 'string' && v.trim() ? v : undefined;
+}
+function isRecord(v) {
+    return typeof v === 'object' && v !== null && !Array.isArray(v);
+}
+function asArray(v) {
+    return Array.isArray(v) ? v : [];
+}
+//# sourceMappingURL=registry.js.map

package/dist/modules/plugins/discovery/bundle-dialect/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../../../../src/modules/plugins/discovery/bundle-dialect/registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,EACL,mBAAmB,GAGpB,MAAM,6CAA6C,CAAC;AAqBrD,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,OAAO,GAAG,IAAI,GAAG,EAA0B,CAAC;IAClD,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA2B,CAAC;IACpD,IAAI,IAAa,CAAC;IAClB,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,iCAAiC,CAAC,EAAE,CAAC;IAC9E,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,qCAAqC,CAAC,EAAE,CAAC;IAErG,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACxC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,OAAO,GAAG,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YAC5D,QAAQ,CAAC,IAAI,CAAC,mDAAmD,CAAC,CAAC;YACnE,SAAS;QACX,CAAC;QACD,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;YACxB,QAAQ,CAAC,IAAI,CAAC,0BAA0B,GAAG,CAAC,EAAE,yDAAyD,CAAC,CAAC;YACzG,SAAS;QACX,CAAC;QACD,yEAAyE;QACzE,uEAAuE;QACvE,uEAAuE;QACvE,uCAAuC;QACvC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,CAAC,EAAE,EAAE,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAC9E,IAAI,QAAQ,IAAI,SAAS,EAAE,CAAC;YAC1B,QAAQ,CAAC,IAAI,CAAC,0BAA0B,GAAG,CAAC,EAAE,KAAK,SAAS,CAAC,MAAM,YAAY,CAAC,CAAC;YACjF,SAAS;QACX,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC;IACzH,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,OAAO,GAAG,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YAC5D,QAAQ,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAC;YACpE,SAAS;QACX,CAAC;QACD,IAAI,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;YACzB,QAAQ,CAAC,IAAI,CAAC,2BAA2B,GAAG,CAAC,EAAE,yDAAyD,CAAC,CAAC;YAC1G,SAAS;QACX,CAAC;QACD,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE;YACnB,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;YAC/E,OAAO,EAAE,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;SACnE,CAAC,CAAC;IACL,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;AACzC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAC3B,QAAqB,EACrB,SAAiB;IAEjB,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,IAAI,OAAO,GAAuB,SAAS,CAAC;IAC5C,OAAO,OAAO,KAAK,SAAS,EAAE,CAAC;QAC7B,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YACtB,QAAQ,CAAC,IAAI,CAAC,2BAA2B,OAAO,8CAA8C,CAAC,CAAC;YAChG,MAAM;QACR,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAClB,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC/C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,QAAQ,CAAC,IAAI,CAAC,2BAA2B,OAAO,kBAAkB,CAAC,CAAC;YACpE,MAAM;QACR,CAAC;QACD,oEAAoE;QACpE,sEAAsE;QACtE,KAAK,MAAM,EAAE,IAAI,OAAO,CAAC,OAAO;YAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACtE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAC5B,CAAC;IACD,MAAM,UAAU,GAA4B,EAAE,CAAC;IAC/C,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;QACrB,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACxC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,QAAQ,CAAC,IAAI,CAAC,2BAA2B,SAAS,6BAA6B,EAAE,GAAG,CAAC,CAAC;YACtF,SAAS;QACX,CAAC;QACD,UAAU,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC;IAChC,CAAC;IACD,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC;AAClC,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,UAAU,CACjB,EAAU,EACV,MAA+B;IAE/B,MAAM,QAAQ,GAAG,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAChG,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACjC,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACzC,MAAM,IAAI,GACR,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC1I,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,EAAE,MAAM,EAAE,iCAAiC,EAAE,CAAC;IAC7E,MAAM,SAAS,GAA4B,EAAE,IAAI,EAAE,CAAC;IACpD,IAAI,GAAG;QAAE,SAAS,CAAC,GAAG,GAAG,GAAG,CAAC;IAC7B,IAAI,OAAO;QAAE,SAAS,CAAC,OAAO,GAAG,OAAO,CAAC;IACzC,KAAK,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,CAAU,EAAE,CAAC;QAC7D,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,SAAS;YAAE,SAAS,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,OAAO,GAAG,mBAAmB,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;IACnD,OAAO,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;AAC5E,CAAC;AAED,SAAS,QAAQ,CAAC,CAAU;IAC1B,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3D,CAAC;AAED,SAAS,QAAQ,CAAC,CAAU;IAC1B,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,OAAO,CAAC,CAAU;IACzB,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACnC,CAAC"}

package/dist/modules/plugins/discovery/kb-plugin-source.d.ts

@@ -0,0 +1,37 @@
+import type { Discovery, PluginSource, PluginSourceWalk } from './plugin-source.js';
+import { type KbWalkListener } from '../../../shared/kb-walk.js';
+/**
+ * THE plugin source: a LISTENER on the one walk of the checkout
+ * (`walkKb`), reading every folder under the plugins root in whichever of
+ * the two file shapes it carries.
+ *
+ *   plugin.json          → a native plugin (this platform's layout)
+ *   plugin.bundle.json   → a bundle (the customer dialect, read-only)
+ *
+ * Nothing else is a plugin. A folder's POSITION means nothing: the legacy
+ * rule "everything directly under the root is a plugin" is retired by the
+ * `plugin-manifests` boot step, which writes the manifest into every such
+ * folder once, so discovery never has to guess.
+ *
+ * A folder that IS a plugin claims everything beneath it (its `skills/` are
+ * its own) — the walk still visits what lies beneath, for the other
+ * listeners; this one ignores it. When a folder carries both files the
+ * manifest wins, so a bundle migrated in place stops being read as a bundle
+ * the moment a `plugin.json` lands beside it. Two plugins with one name keep
+ * the first by path (the walk's order) and warn about the second — a name is
+ * an identity to people and URLs, and two folders answering to it would be
+ * two plugins with one key.
+ *
+ * Holes — a folder under the root that could not be listed, an identity
+ * file that could not be read — are counted in `unreadable`: nothing behind
+ * them is listed, and a writer refuses while they exist.
+ *
+ * No setting picks a dialect. Nothing to configure means nothing to document
+ * and nothing to remove but the `else if` that reads bundles.
+ */
+export declare class KbPluginSource implements PluginSource {
+    readonly dialect = "kb";
+    discover(kbRoot: string): Promise<Discovery>;
+    walkWith(kbRoot: string, listeners: readonly KbWalkListener[]): Promise<PluginSourceWalk>;
+}
+//# sourceMappingURL=kb-plugin-source.d.ts.map

package/dist/modules/plugins/discovery/kb-plugin-source.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"kb-plugin-source.d.ts","sourceRoot":"","sources":["../../../../src/modules/plugins/discovery/kb-plugin-source.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAoB,SAAS,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtG,OAAO,EAAU,KAAK,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAKzE;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,qBAAa,cAAe,YAAW,YAAY;IACjD,QAAQ,CAAC,OAAO,QAAQ;IAElB,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;IAI5C,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,cAAc,EAAE,GAAG,OAAO,CAAC,gBAAgB,CAAC;CAOhG"}

package/dist/modules/plugins/discovery/kb-plugin-source.js

@@ -0,0 +1,107 @@
+import path from 'node:path';
+import { PLUGINS_DIR, PLUGIN_MANIFEST_FILE, pluginManifestName } from '@bevel-software/platform-shared';
+import { walkKb } from '../../../shared/kb-walk.js';
+import { readNativePlugin } from './native.source.js';
+import { BUNDLE_FILE, loadRegistry, readBundlePlugin } from './bundle-dialect/bundle.source.js';
+/**
+ * THE plugin source: a LISTENER on the one walk of the checkout
+ * (`walkKb`), reading every folder under the plugins root in whichever of
+ * the two file shapes it carries.
+ *
+ *   plugin.json          → a native plugin (this platform's layout)
+ *   plugin.bundle.json   → a bundle (the customer dialect, read-only)
+ *
+ * Nothing else is a plugin. A folder's POSITION means nothing: the legacy
+ * rule "everything directly under the root is a plugin" is retired by the
+ * `plugin-manifests` boot step, which writes the manifest into every such
+ * folder once, so discovery never has to guess.
+ *
+ * A folder that IS a plugin claims everything beneath it (its `skills/` are
+ * its own) — the walk still visits what lies beneath, for the other
+ * listeners; this one ignores it. When a folder carries both files the
+ * manifest wins, so a bundle migrated in place stops being read as a bundle
+ * the moment a `plugin.json` lands beside it. Two plugins with one name keep
+ * the first by path (the walk's order) and warn about the second — a name is
+ * an identity to people and URLs, and two folders answering to it would be
+ * two plugins with one key.
+ *
+ * Holes — a folder under the root that could not be listed, an identity
+ * file that could not be read — are counted in `unreadable`: nothing behind
+ * them is listed, and a writer refuses while they exist.
+ *
+ * No setting picks a dialect. Nothing to configure means nothing to document
+ * and nothing to remove but the `else if` that reads bundles.
+ */
+export class KbPluginSource {
+    dialect = 'kb';
+    async discover(kbRoot) {
+        return (await this.walkWith(kbRoot, [])).discovery;
+    }
+    async walkWith(kbRoot, listeners) {
+        const warnings = [];
+        const registry = await loadRegistry(kbRoot, warnings);
+        const listener = pluginListener(kbRoot, registry, warnings);
+        const { holes } = await walkKb(kbRoot, [listener.listener, ...listeners]);
+        return { discovery: listener.result(), holes };
+    }
+}
+/** The discovery listener over one walk, and the `Discovery` it has built once the walk is done. */
+function pluginListener(kbRoot, registry, warnings) {
+    const unreadable = [];
+    const plugins = [];
+    const seen = new Map();
+    /** Folders claimed as plugins (or as holes standing where a plugin may be): nothing beneath is looked at. */
+    const claimed = [];
+    const underRoot = (rel) => rel === PLUGINS_DIR || rel.startsWith(`${PLUGINS_DIR}/`);
+    const beneathClaimed = (rel) => claimed.some((c) => rel === c || rel.startsWith(`${c}/`));
+    // Uniqueness is judged on the MANIFEST SLUG, not the raw name: `Sales Team`
+    // and `sales-team` fold to one slug, and the slug is what the compiled
+    // marketplace keys a plugin on — two folders sharing it would be two
+    // plugins with one key and one of them silently overwritten.
+    const claim = (plugin) => {
+        const key = pluginManifestName(plugin.name);
+        const twin = seen.get(key);
+        if (twin) {
+            warnings.push(`${plugin.folder}: plugin name "${plugin.name}" is already used by ${twin} — plugin skipped`);
+            return;
+        }
+        seen.set(key, plugin.folder);
+        plugins.push(plugin);
+    };
+    return {
+        listener: {
+            async onDir(rel, entries) {
+                if (!underRoot(rel) || rel === PLUGINS_DIR || beneathClaimed(rel))
+                    return;
+                const has = (name) => entries.some((e) => e.isFile() && e.name === name);
+                const dir = path.join(kbRoot, rel);
+                const relFolder = rel.slice(PLUGINS_DIR.length + 1);
+                if (has(PLUGIN_MANIFEST_FILE)) {
+                    claimed.push(rel);
+                    // A manifest that could not be read: a hole, and still claimed.
+                    const native = await readNativePlugin(dir, rel, relFolder, warnings, unreadable);
+                    if (native)
+                        claim(native);
+                }
+                else if (has(BUNDLE_FILE)) {
+                    claimed.push(rel);
+                    const bundle = await readBundlePlugin(dir, rel, relFolder, registry, warnings, unreadable);
+                    if (bundle)
+                        claim(bundle);
+                }
+            },
+            onHole(rel, err) {
+                // A folder under the root that could not be listed hides every plugin
+                // beneath it; said out loud rather than letting the catalog shrink in
+                // silence, and COUNTED so a writer can tell an incomplete listing from
+                // a complete one. (Holes elsewhere in the tree are the walk's to report.)
+                if (!underRoot(rel) || beneathClaimed(rel))
+                    return;
+                warnings.push(`${rel}: could not be read — ${err instanceof Error ? err.message : String(err)}`);
+                unreadable.push(rel);
+            },
+        },
+        result: () => ({ plugins, warnings, unreadable }),
+    };
+}
+//# sourceMappingURL=kb-plugin-source.js.map

package/dist/modules/plugins/discovery/kb-plugin-source.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kb-plugin-source.js","sourceRoot":"","sources":["../../../../src/modules/plugins/discovery/kb-plugin-source.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,WAAW,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AAExG,OAAO,EAAE,MAAM,EAAuB,MAAM,4BAA4B,CAAC;AACzE,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AAGhG;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,OAAO,cAAc;IAChB,OAAO,GAAG,IAAI,CAAC;IAExB,KAAK,CAAC,QAAQ,CAAC,MAAc;QAC3B,OAAO,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IACrD,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,MAAc,EAAE,SAAoC;QACjE,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACtD,MAAM,QAAQ,GAAG,cAAc,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAC5D,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC;QAC1E,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC;IACjD,CAAC;CACF;AAED,oGAAoG;AACpG,SAAS,cAAc,CACrB,MAAc,EACd,QAA4B,EAC5B,QAAkB;IAElB,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,MAAM,OAAO,GAAuB,EAAE,CAAC;IACvC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAC;IACvC,6GAA6G;IAC7G,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,MAAM,SAAS,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,GAAG,KAAK,WAAW,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,WAAW,GAAG,CAAC,CAAC;IAC5F,MAAM,cAAc,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IAElG,4EAA4E;IAC5E,uEAAuE;IACvE,qEAAqE;IACrE,6DAA6D;IAC7D,MAAM,KAAK,GAAG,CAAC,MAAwB,EAAQ,EAAE;QAC/C,MAAM,GAAG,GAAG,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC5C,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC3B,IAAI,IAAI,EAAE,CAAC;YACT,QAAQ,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,kBAAkB,MAAM,CAAC,IAAI,wBAAwB,IAAI,mBAAmB,CAAC,CAAC;YAC5G,OAAO;QACT,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QAC7B,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACvB,CAAC,CAAC;IAEF,OAAO;QACL,QAAQ,EAAE;YACR,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,OAAO;gBACtB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,GAAG,KAAK,WAAW,IAAI,cAAc,CAAC,GAAG,CAAC;oBAAE,OAAO;gBAC1E,MAAM,GAAG,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;gBACjF,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;gBACnC,MAAM,SAAS,GAAG,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;gBACpD,IAAI,GAAG,CAAC,oBAAoB,CAAC,EAAE,CAAC;oBAC9B,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;oBAClB,gEAAgE;oBAChE,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;oBACjF,IAAI,MAAM;wBAAE,KAAK,CAAC,MAAM,CAAC,CAAC;gBAC5B,CAAC;qBAAM,IAAI,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;oBAC5B,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;oBAClB,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;oBAC3F,IAAI,MAAM;wBAAE,KAAK,CAAC,MAAM,CAAC,CAAC;gBAC5B,CAAC;YACH,CAAC;YACD,MAAM,CAAC,GAAG,EAAE,GAAG;gBACb,sEAAsE;gBACtE,sEAAsE;gBACtE,uEAAuE;gBACvE,0EAA0E;gBAC1E,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,cAAc,CAAC,GAAG,CAAC;oBAAE,OAAO;gBACnD,QAAQ,CAAC,IAAI,CAAC,GAAG,GAAG,yBAAyB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBACjG,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACvB,CAAC;SACF;QACD,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;KAClD,CAAC;AACJ,CAAC"}

package/dist/modules/plugins/discovery/native.source.d.ts

@@ -0,0 +1,15 @@
+import type { DiscoveredPlugin } from './plugin-source.js';
+/**
+ * A plugin in the layout this platform writes (see `kb-layout.ts`): a folder
+ * carrying `plugin.json`, optionally `mcp.json`, and the `access.md` that
+ * makes it exist to the index. Called by the walker for every folder it
+ * decides is a native plugin; reads the files, decides nothing else.
+ *
+ * Null when the manifest exists but could not be READ: the manifest is the
+ * identity, and a plugin whose identity nobody could see is not listed under
+ * a guessed one — it is a hole (`unreadable`), like a folder that could not
+ * be listed. The optional `mcp.json` carries no identity, so its read
+ * failure is a warning and nothing more.
+ */
+export declare function readNativePlugin(dir: string, folder: string, relFolder: string, warnings: string[], unreadable: string[]): Promise<DiscoveredPlugin | null>;
+//# sourceMappingURL=native.source.d.ts.map

package/dist/modules/plugins/discovery/native.source.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"native.source.d.ts","sourceRoot":"","sources":["../../../../src/modules/plugins/discovery/native.source.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAE3D;;;;;;;;;;;GAWG;AACH,wBAAsB,gBAAgB,CACpC,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,EAAE,EAClB,UAAU,EAAE,MAAM,EAAE,GACnB,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CA0DlC"}

package/dist/modules/plugins/discovery/native.source.js

@@ -0,0 +1,102 @@
+import fs from 'node:fs/promises';
+import path from 'node:path';
+import { PLUGIN_MANIFEST_FILE, PLUGIN_MCP_FILE, isPersonalPluginDir, isPluginIdentifier, linkedSkillRoots, pluginDisplayNameOf, pluginIdentityOf, } from '@bevel-software/platform-shared';
+import { isAbsence } from '../../../shared/fs-errors.js';
+/**
+ * A plugin in the layout this platform writes (see `kb-layout.ts`): a folder
+ * carrying `plugin.json`, optionally `mcp.json`, and the `access.md` that
+ * makes it exist to the index. Called by the walker for every folder it
+ * decides is a native plugin; reads the files, decides nothing else.
+ *
+ * Null when the manifest exists but could not be READ: the manifest is the
+ * identity, and a plugin whose identity nobody could see is not listed under
+ * a guessed one — it is a hole (`unreadable`), like a folder that could not
+ * be listed. The optional `mcp.json` carries no identity, so its read
+ * failure is a warning and nothing more.
+ */
+export async function readNativePlugin(dir, folder, relFolder, warnings, unreadable) {
+    const folderName = path.posix.basename(relFolder);
+    const manifestRead = await readText(path.join(dir, PLUGIN_MANIFEST_FILE), folder, warnings);
+    if (manifestRead.failed) {
+        unreadable.push(`${folder}/${PLUGIN_MANIFEST_FILE}`);
+        return null;
+    }
+    // The walker probed the manifest a moment ago; gone now means it vanished
+    // between probe and read — then this is no plugin, not one under a guessed name.
+    if (manifestRead.text === null)
+        return null;
+    const manifestText = manifestRead.text;
+    const mcpJsonText = (await readText(path.join(dir, PLUGIN_MCP_FILE), folder, warnings)).text;
+    const manifest = parseObject(manifestText);
+    if (manifest === null) {
+        warnings.push(`${folder}/${PLUGIN_MANIFEST_FILE} is not a JSON object — treated as absent`);
+    }
+    // The manifest's `name` IS the identity — the grants, the URLs, the
+    // marketplace all spell it — when it is an identifier. One that is not
+    // (spaces, capitals) is never silently reinterpreted: the folder stands
+    // in, and the mismatch is said out loud so a grant written against the
+    // manifest's spelling is not a mystery.
+    const name = pluginIdentityOf(manifest, folderName);
+    const displayName = pluginDisplayNameOf(manifest, folderName);
+    // Any PRESENT name that is not an identifier is worth a word — a number or
+    // an object as much as a capitalised string. Only an absent name is silent.
+    if (manifest && manifest.name !== undefined && !isPluginIdentifier(manifest.name)) {
+        // A diagnostic must never be the thing that fails: a non-string name is
+        // described by its type, not serialised (a value nested deep enough
+        // would blow the stack on the way to a warning).
+        const spelled = typeof manifest.name === 'string'
+            ? `"${manifest.name}"`
+            : `a value of type ${Array.isArray(manifest.name) ? 'array' : typeof manifest.name}`;
+        warnings.push(`${folder}/${PLUGIN_MANIFEST_FILE} names ${spelled}, which is not a plugin identifier (lowercase kebab-case) — the folder stands in as "${name}"`);
+    }
+    const mcp = parseObject(mcpJsonText);
+    const mcpServers = mcp && typeof mcp.mcpServers === 'object' && mcp.mcpServers !== null && !Array.isArray(mcp.mcpServers)
+        ? mcp.mcpServers
+        : null;
+    const exists = await fs.stat(path.join(dir, 'access.md')).then((s) => s.isFile(), () => false);
+    return {
+        name,
+        displayName,
+        folder,
+        relFolder,
+        // The one structural rule: a direct child of the root with the prefix.
+        personal: isPersonalPluginDir(folder),
+        exists,
+        manifest,
+        manifestText,
+        linkedRoots: linkedSkillRoots(manifest),
+        mcpServers,
+        mcpJsonText,
+        linksAreManaged: true,
+    };
+}
+/**
+ * A file's text — null when there is no such file — and whether a file that
+ * IS there could not be read. Absence and failure are different answers;
+ * the caller decides what a failure means for the file in question.
+ */
+async function readText(abs, folder, warnings) {
+    try {
+        return { text: await fs.readFile(abs, 'utf-8'), failed: false };
+    }
+    catch (err) {
+        if (isAbsence(err))
+            return { text: null, failed: false };
+        warnings.push(`${folder}/${path.basename(abs)} could not be read — ${err instanceof Error ? err.message : String(err)}`);
+        return { text: null, failed: true };
+    }
+}
+function parseObject(text) {
+    if (text === null)
+        return null;
+    try {
+        const parsed = JSON.parse(text);
+        return typeof parsed === 'object' && parsed !== null && !Array.isArray(parsed)
+            ? parsed
+            : null;
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=native.source.js.map

package/dist/modules/plugins/discovery/native.source.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"native.source.js","sourceRoot":"","sources":["../../../../src/modules/plugins/discovery/native.source.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EACL,oBAAoB,EACpB,eAAe,EACf,mBAAmB,EACnB,kBAAkB,EAClB,gBAAgB,EAChB,mBAAmB,EACnB,gBAAgB,GACjB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAC;AAGzD;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,GAAW,EACX,MAAc,EACd,SAAiB,EACjB,QAAkB,EAClB,UAAoB;IAEpB,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IAClD,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,oBAAoB,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC5F,IAAI,YAAY,CAAC,MAAM,EAAE,CAAC;QACxB,UAAU,CAAC,IAAI,CAAC,GAAG,MAAM,IAAI,oBAAoB,EAAE,CAAC,CAAC;QACrD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,0EAA0E;IAC1E,iFAAiF;IACjF,IAAI,YAAY,CAAC,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC5C,MAAM,YAAY,GAAG,YAAY,CAAC,IAAI,CAAC;IACvC,MAAM,WAAW,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7F,MAAM,QAAQ,GAAG,WAAW,CAAC,YAAY,CAAC,CAAC;IAC3C,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,QAAQ,CAAC,IAAI,CAAC,GAAG,MAAM,IAAI,oBAAoB,2CAA2C,CAAC,CAAC;IAC9F,CAAC;IACD,oEAAoE;IACpE,uEAAuE;IACvE,wEAAwE;IACxE,uEAAuE;IACvE,wCAAwC;IACxC,MAAM,IAAI,GAAG,gBAAgB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IACpD,MAAM,WAAW,GAAG,mBAAmB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAC9D,2EAA2E;IAC3E,4EAA4E;IAC5E,IAAI,QAAQ,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAClF,wEAAwE;QACxE,oEAAoE;QACpE,iDAAiD;QACjD,MAAM,OAAO,GACX,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ;YAC/B,CAAC,CAAC,IAAI,QAAQ,CAAC,IAAI,GAAG;YACtB,CAAC,CAAC,mBAAmB,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC;QACzF,QAAQ,CAAC,IAAI,CACX,GAAG,MAAM,IAAI,oBAAoB,UAAU,OAAO,wFAAwF,IAAI,GAAG,CAClJ,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,WAAW,CAAC,WAAW,CAAC,CAAC;IACrC,MAAM,UAAU,GACd,GAAG,IAAI,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ,IAAI,GAAG,CAAC,UAAU,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;QACpG,CAAC,CAAE,GAAG,CAAC,UAAsC;QAC7C,CAAC,CAAC,IAAI,CAAC;IACX,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;IAC/F,OAAO;QACL,IAAI;QACJ,WAAW;QACX,MAAM;QACN,SAAS;QACT,uEAAuE;QACvE,QAAQ,EAAE,mBAAmB,CAAC,MAAM,CAAC;QACrC,MAAM;QACN,QAAQ;QACR,YAAY;QACZ,WAAW,EAAE,gBAAgB,CAAC,QAAQ,CAAC;QACvC,UAAU;QACV,WAAW;QACX,eAAe,EAAE,IAAI;KACtB,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,QAAQ,CACrB,GAAW,EACX,MAAc,EACd,QAAkB;IAElB,IAAI,CAAC;QACH,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAClE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,SAAS,CAAC,GAAG,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;QACzD,QAAQ,CAAC,IAAI,CAAC,GAAG,MAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,wBAAwB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACzH,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IACtC,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,IAAmB;IACtC,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC/B,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACzC,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAC5E,CAAC,CAAE,MAAkC;YACrC,CAAC,CAAC,IAAI,CAAC;IACX,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}