@bevel-software/platform-core-backend 0.14.0 → 0.19.0

package/dist/modules/plugins/compile/compile-marketplace.d.ts

@@ -0,0 +1,104 @@
+import type { ITreeWalker } from '../../../shared/fs.contract.js';
+import type { SkillSummary } from '../../skills/skills.contract.js';
+import type { LinkMembership } from '../plugin-links.js';
+import type { DiscoveredPlugin } from '../discovery/plugin-source.js';
+/**
+ * The compiler: SOURCE layout in, DISTRIBUTION layout out.
+ *
+ * Source is what lives in the knowledge base — shared skills under
+ * `Skills/`, plugin folders under `Plugins/` whose manifests LINK to them.
+ * Distribution is what an agent installs: a marketplace of self-contained
+ * plugins, each physically holding its skills (Claude Code refuses paths
+ * that escape a plugin's directory, and symlinks are out), in the vendor
+ * layouts the clients read today — `.claude-plugin/plugin.json`,
+ * `.codex-plugin/plugin.json`, `.mcp.json` — beside the Agent Plugins
+ * `plugin.json` and `mcp.json`.
+ *
+ * What comes out, for one caller:
+ *
+ *   .claude-plugin/marketplace.json      Claude Code's catalogue (and Cowork's,
+ *                                        claude.ai's): every plugin below
+ *   .agents/plugins/marketplace.json     Codex's catalogue, every entry
+ *                                        INSTALLED_BY_DEFAULT — without the
+ *                                        bundle, which would install it all twice
+ *   plugins/<slug>/…                     one per plugin the caller may read
+ *                                        anything of: inline + linked skills,
+ *                                        the portable half of mcp.json
+ *   plugins/skills-and-knowledge/…       every readable skill no plugin above
+ *                                        ships — how a standalone skill, or one
+ *                                        only in plugins the caller cannot see,
+ *                                        is still one install away — plus the
+ *                                        knowledge base's own MCP endpoint
+ *   plugins/hexis-all/…                  the one-install bundle: a plugin of
+ *                                        its own holding every readable skill
+ *                                        once and the knowledge base's MCP
+ *                                        endpoint — content, not a dependency
+ *                                        list, because only Claude Code
+ *                                        resolves one
+ *   skills/<name>/…                      every readable skill once, flat, for
+ *                                        `npx skills add <url> --all`
+ *   README.md                            names the source commit
+ *
+ * FAIL CLOSED, per file: a skill is copied only when `readable` says yes for
+ * its SKILL.md — the same per-path verdict the catalog filters on — so the
+ * compiled tree for a caller holds exactly what that caller may read, and
+ * nothing about a skill they may not. Plugins with nothing readable are
+ * left out entirely. `access.md` and `.bevelignore` never ship; neither do
+ * the hexis-only `.tool` manuals (no other client can run them), nor an
+ * `mcp.json` header carrying a `${VAR}` vault reference (the extension block
+ * that resolves it is ours, and a header a client would send verbatim must
+ * not name a secret it cannot expand).
+ *
+ * A pure function of its inputs — it reads the KB tree it is pointed at and
+ * returns a virtual tree; writing it somewhere (a git namespace, a folder, a
+ * remote) is the sink's business.
+ */
+export interface MarketplaceOptions {
+    /** The marketplace's name — a slug the clients key it on. */
+    name: string;
+    /** Shown as the marketplace owner. */
+    owner: string;
+    description?: string;
+    /** The default-branch commit the tree was compiled from; also the bundle's version. */
+    sourceCommit: string;
+    /** The name of the one-install bundle plugin. */
+    bundleName?: string;
+    /** The name of the leftovers plugin holding skills no other plugin ships. */
+    skillsPluginName?: string;
+    /**
+     * This deployment's hosted MCP endpoint — the knowledge base as a tool.
+     * Shipped in the leftovers plugin's `mcp.json` so an agent that installs
+     * from the marketplace can read the knowledge its skills refer to. URL only,
+     * never a credential: the endpoint challenges with OAuth metadata, and the
+     * client signs the person in on first use.
+     */
+    knowledgeBaseMcp?: {
+        name: string;
+        url: string;
+    };
+}
+export interface CompileInput {
+    /** The walk that lists a skill folder's files. */
+    disk: ITreeWalker;
+    /** Absolute path of the KB checkout (the folder holding `Plugins/`, `Skills/`, …). */
+    kbRoot: string;
+    /** The released catalog, UNFILTERED — `readable` does the filtering. */
+    skills: SkillSummary[];
+    /** The plugins as the configured source discovered them (manifests and servers already parsed). */
+    plugins: DiscoveredPlugin[];
+    /** Which plugins hold which skills, from the link index. */
+    membership: LinkMembership;
+    /** The caller's read verdict on a repo-relative path (`<skillFolder>/SKILL.md`). */
+    readable: (repoPath: string) => Promise<boolean>;
+    options: MarketplaceOptions;
+}
+export interface VirtualTree {
+    /** repo-relative POSIX path → file bytes. */
+    files: Map<string, Buffer>;
+    /** What was left out and why — name clashes, unparsable manifests. */
+    warnings: string[];
+    /** The plugin slugs the tree carries, in marketplace order. */
+    plugins: string[];
+}
+export declare function compileMarketplace(input: CompileInput): Promise<VirtualTree>;
+//# sourceMappingURL=compile-marketplace.d.ts.map

package/dist/modules/plugins/compile/compile-marketplace.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"compile-marketplace.d.ts","sourceRoot":"","sources":["../../../../src/modules/plugins/compile/compile-marketplace.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,gCAAgC,CAAC;AAGlE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AACpE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AAEtE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkDG;AAEH,MAAM,WAAW,kBAAkB;IACjC,6DAA6D;IAC7D,IAAI,EAAE,MAAM,CAAC;IACb,sCAAsC;IACtC,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,uFAAuF;IACvF,YAAY,EAAE,MAAM,CAAC;IACrB,iDAAiD;IACjD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,6EAA6E;IAC7E,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;;;;;OAMG;IACH,gBAAgB,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;CAClD;AAED,MAAM,WAAW,YAAY;IAC3B,kDAAkD;IAClD,IAAI,EAAE,WAAW,CAAC;IAClB,sFAAsF;IACtF,MAAM,EAAE,MAAM,CAAC;IACf,wEAAwE;IACxE,MAAM,EAAE,YAAY,EAAE,CAAC;IACvB,mGAAmG;IACnG,OAAO,EAAE,gBAAgB,EAAE,CAAC;IAC5B,4DAA4D;IAC5D,UAAU,EAAE,cAAc,CAAC;IAC3B,oFAAoF;IACpF,QAAQ,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACjD,OAAO,EAAE,kBAAkB,CAAC;CAC7B;AAED,MAAM,WAAW,WAAW;IAC1B,6CAA6C;IAC7C,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC3B,sEAAsE;IACtE,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,+DAA+D;IAC/D,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAQD,wBAAsB,kBAAkB,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,WAAW,CAAC,CA6PlF"}

package/dist/modules/plugins/compile/compile-marketplace.js

@@ -0,0 +1,323 @@
+import fs from 'node:fs/promises';
+import path from 'node:path';
+import { HEXIS_EXTENSION_NS, PLUGIN_MANIFEST_FILE, PLUGIN_MCP_FILE, PLUGIN_MANIFEST_SCHEMA, PLUGIN_MCP_SCHEMA, pluginManifestName, } from '@bevel-software/platform-shared';
+import { BUNDLE_FILE as BUNDLE_MANIFEST_FILE } from '../discovery/bundle-dialect/bundle.source.js';
+import { containsVariableReference } from '../../../shared/variable-refs.js';
+import { judgeMcpServerEntry } from '../../tool-manuals/mcp-json-discovery.js';
+const BUNDLE_NAME = 'hexis-all';
+const SKILLS_PLUGIN_NAME = 'skills-and-knowledge';
+/** Slugs the compiler emits itself; a real plugin may not take them. */
+const RESERVED_SLUGS = new Set([BUNDLE_NAME, SKILLS_PLUGIN_NAME]);
+const NEVER_SHIPPED = new Set(['access.md', '.bevelignore']);
+export async function compileMarketplace(input) {
+    const { disk, kbRoot, skills, plugins, membership, readable, options } = input;
+    const files = new Map();
+    const warnings = [];
+    const put = (rel, content) => files.set(rel, typeof content === 'string' ? Buffer.from(content, 'utf-8') : content);
+    // One verdict per skill, resolved once: every plugin below reads from it.
+    // Readability is the only gate — every skill the caller may read ships.
+    const readableSkills = new Map();
+    for (const s of skills) {
+        if (await readable(`${s.path}/SKILL.md`))
+            readableSkills.set(s.path, s);
+    }
+    const out = [];
+    // 1. Real plugins: inline skills (in the folder) + linked skills (from the
+    //    manifest), each only if readable. Personal folders are places, not
+    //    plugins; a plugin the index does not count as existing is not shipped.
+    const byName = new Map(plugins.map((p) => [p.name, p]));
+    for (const [name, links] of [...membership.byPlugin.entries()].sort(([a], [b]) => a.localeCompare(b))) {
+        const plugin = byName.get(name);
+        if (!plugin || plugin.personal || !plugin.exists)
+            continue;
+        const manifest = plugin.manifest;
+        const inline = [...readableSkills.values()].filter((s) => s.path.startsWith(`${plugin.folder}/`));
+        const linked = links.linkedSkills
+            .map((p) => readableSkills.get(p))
+            .filter((s) => s !== undefined);
+        const dedup = dedupeByName([...inline, ...linked], (s, other) => warnings.push(`${name}: skill "${s.name}" at ${s.path} shares its name with ${other.path} — the second is left out`));
+        const mcp = portableMcp(plugin.mcpServers, (name, reason) => warnings.push(`${plugin.folder}: mcp server "${name}" not shipped — ${reason}`));
+        if (dedup.length === 0 && mcp === null)
+            continue; // nothing this caller may see
+        // The plugin's identity IS the marketplace slug. Folded once more here
+        // all the same: it becomes a path segment in the compiled tree, and a
+        // checked-in manifest is repository content, not trusted input — the
+        // folding (`[a-z0-9.-]`, no runs, no leading dots) leaves nothing that
+        // can be a separator or a parent reference.
+        const slug = pluginManifestName(name);
+        if (RESERVED_SLUGS.has(slug)) {
+            warnings.push(`${plugin.folder}: manifest name "${slug}" is reserved by the marketplace and cannot be a plugin — plugin skipped`);
+            continue;
+        }
+        if (out.some((p) => p.slug === slug)) {
+            warnings.push(`${plugin.folder}: manifest name "${slug}" is already taken in this marketplace — plugin skipped`);
+            continue;
+        }
+        const ui = isRecord(manifest?.interface) ? manifest.interface : undefined;
+        out.push({
+            slug,
+            displayName: plugin.displayName,
+            description: typeof manifest?.description === 'string' ? manifest.description : undefined,
+            version: typeof manifest?.version === 'string' ? manifest.version : undefined,
+            author: isRecord(manifest?.author) || typeof manifest?.author === 'string' ? manifest.author : undefined,
+            keywords: Array.isArray(manifest?.keywords) && manifest.keywords.every((k) => typeof k === 'string')
+                ? manifest.keywords
+                : undefined,
+            ui,
+            skills: dedup,
+            folder: plugin.folder,
+            mcp: mcp ?? undefined,
+        });
+    }
+    // 2. The leftovers plugin: every readable skill that no plugin above ships.
+    //    Agents install plugins, not loose skills, so a skill in no plugin — or
+    //    only in plugins this caller cannot see anything of — still has to be one
+    //    install away. ONE plugin per caller, not one per scope: there is nothing
+    //    to choose between (the caller may read all of it) and the bundle installs
+    //    it regardless, so scope plugins would only add names and duplicate what
+    //    the real plugins already carry.
+    //    It also carries the knowledge base's own MCP endpoint (URL only — the
+    //    client's OAuth flow signs the person in), so an agent installing from
+    //    the marketplace can read the knowledge its skills point at. With the
+    //    endpoint configured the plugin exists even for a caller with no
+    //    leftover skill: the knowledge is the point.
+    const covered = new Set(out.flatMap((p) => p.skills.map((s) => s.path)));
+    const leftovers = [...readableSkills.values()].filter((s) => !covered.has(s.path));
+    const kbMcp = options.knowledgeBaseMcp
+        ? { [options.knowledgeBaseMcp.name]: { type: 'streamable-http', url: options.knowledgeBaseMcp.url } }
+        : undefined;
+    if (leftovers.length > 0 || kbMcp) {
+        const slug = pluginManifestName(options.skillsPluginName ?? SKILLS_PLUGIN_NAME);
+        if (out.some((p) => p.slug === slug)) {
+            warnings.push(`the skills plugin "${slug}" collides with a plugin's manifest name — standalone skills not shipped`);
+        }
+        else {
+            out.push({
+                slug,
+                displayName: 'Skills and knowledge',
+                description: kbMcp
+                    ? 'Every skill you may read that no other plugin here ships, and the knowledge base as an MCP server'
+                    : 'Every skill you may read that no other plugin here ships',
+                skills: dedupeByName(leftovers, (s, other) => warnings.push(`${slug}: "${s.name}" at ${s.path} shares its name with ${other.path} — left out`)),
+                mcp: kbMcp,
+            });
+        }
+    }
+    // 3. Materialise every plugin: the plugin folder's own files, the copied
+    //    skill folders, then the three manifests — in that order, so what the
+    //    platform writes wins over a checked-in file of the same name.
+    for (const p of out) {
+        const base = `plugins/${p.slug}`;
+        // The folder's own files — a CONVENTIONS.md the skills refer to, a
+        // README, reference material — ship beside the skills. What does not:
+        // the platform's own files (rules, the source manifests, `mcp.json`, all
+        // rewritten below), the inline skills (copied by name below), and the
+        // hexis-only `.tool` manuals under their extension folder.
+        if (p.folder)
+            await copyPluginFiles(disk, kbRoot, p.folder, base, put);
+        for (const s of p.skills) {
+            await copySkill(disk, kbRoot, s, `${base}/skills/${s.name}`, put);
+        }
+        const spec = { $schema: PLUGIN_MANIFEST_SCHEMA, name: p.slug };
+        if (p.version)
+            spec.version = p.version;
+        if (p.description)
+            spec.description = p.description;
+        if (p.author !== undefined)
+            spec.author = p.author;
+        if (p.keywords)
+            spec.keywords = p.keywords;
+        put(`${base}/${PLUGIN_MANIFEST_FILE}`, `${JSON.stringify(spec, null, 2)}\n`);
+        const vendor = { name: p.slug };
+        if (p.version)
+            vendor.version = p.version;
+        vendor.description = p.description ?? p.displayName;
+        if (p.author !== undefined)
+            vendor.author = p.author;
+        if (p.keywords)
+            vendor.keywords = p.keywords;
+        put(`${base}/.claude-plugin/plugin.json`, `${JSON.stringify(vendor, null, 2)}\n`);
+        // Codex's manifest carries the presentation block: the source's own,
+        // completed with the one thing every plugin can say about itself when
+        // the block does not say it — a partial block is a block, not a reason
+        // to lose the name.
+        const ui = { ...(p.ui ?? {}) };
+        if (typeof ui.displayName !== 'string' || !ui.displayName.trim())
+            ui.displayName = p.displayName;
+        const codex = { ...vendor, interface: ui };
+        put(`${base}/.codex-plugin/plugin.json`, `${JSON.stringify(codex, null, 2)}\n`);
+        if (p.mcp) {
+            put(`${base}/${PLUGIN_MCP_FILE}`, `${JSON.stringify({ $schema: PLUGIN_MCP_SCHEMA, mcpServers: p.mcp }, null, 2)}\n`);
+            put(`${base}/.mcp.json`, `${JSON.stringify({ mcpServers: p.mcp }, null, 2)}\n`);
+        }
+    }
+    // 4. Every readable skill once, by name — ONE set, carried twice: the flat
+    //    root skills/ folder, and the one-install bundle below.
+    const flat = dedupeByName([...readableSkills.values()].sort((a, b) => a.path.localeCompare(b.path)), (s, other) => warnings.push(`"${s.name}" at ${s.path} shares its name with ${other.path} — left out of skills/ and the bundle`));
+    for (const s of flat)
+        await copySkill(disk, kbRoot, s, `skills/${s.name}`, put);
+    // 5. The one-install bundle: a plugin of its own that IS everything the
+    //    caller may read — every skill once, plus the knowledge base's MCP
+    //    endpoint — not a manifest naming the plugins above as dependencies.
+    //    Only Claude Code resolves a dependency list; Cowork and claude.ai
+    //    install a plugin's content and nothing more, so for one install to
+    //    mean the same thing on every surface, the content has to be there.
+    //    Its version is the source commit, so an auto-update sees every change.
+    const bundle = pluginManifestName(options.bundleName ?? BUNDLE_NAME);
+    const bundleTaken = out.some((p) => p.slug === bundle);
+    if (bundleTaken) {
+        // Only reachable with a non-default bundle name that folds to a real
+        // plugin's slug: the default is reserved above. Skipping the bundle
+        // beats overwriting that plugin's tree with everything.
+        warnings.push(`the bundle name "${bundle}" collides with a plugin's manifest name — no bundle plugin emitted`);
+    }
+    const bundleEmitted = !bundleTaken && (flat.length > 0 || kbMcp !== undefined);
+    if (bundleEmitted) {
+        const base = `plugins/${bundle}`;
+        const shortSha = options.sourceCommit.slice(0, 12) || '0';
+        const description = `Everything in ${options.owner}'s marketplace you may read, in one install.`;
+        put(`${base}/.claude-plugin/plugin.json`, `${JSON.stringify({ name: bundle, version: `0.0.0-${shortSha}`, description }, null, 2)}\n`);
+        put(`${base}/${PLUGIN_MANIFEST_FILE}`, `${JSON.stringify({ $schema: PLUGIN_MANIFEST_SCHEMA, name: bundle, description }, null, 2)}\n`);
+        if (kbMcp) {
+            put(`${base}/${PLUGIN_MCP_FILE}`, `${JSON.stringify({ $schema: PLUGIN_MCP_SCHEMA, mcpServers: kbMcp }, null, 2)}\n`);
+            put(`${base}/.mcp.json`, `${JSON.stringify({ mcpServers: kbMcp }, null, 2)}\n`);
+        }
+        for (const s of flat)
+            await copySkill(disk, kbRoot, s, `${base}/skills/${s.name}`, put);
+    }
+    // 6. The two catalogues + a README naming the source. The bundle is listed
+    //    for Claude's surfaces only: Codex installs every catalogue entry on
+    //    add, and the bundle repeats what the other entries already carry.
+    const entries = out.map((p) => ({ slug: p.slug, description: p.description ?? p.displayName }));
+    const claudeEntries = [...entries, ...(bundleEmitted ? [{ slug: bundle, description: 'Everything you may read, one install' }] : [])];
+    put('.claude-plugin/marketplace.json', `${JSON.stringify({
+        name: options.name,
+        owner: { name: options.owner },
+        ...(options.description ? { description: options.description } : {}),
+        plugins: claudeEntries.map((e) => ({ name: e.slug, source: `./plugins/${e.slug}`, description: e.description })),
+    }, null, 2)}\n`);
+    put('.agents/plugins/marketplace.json', `${JSON.stringify({
+        name: options.name,
+        plugins: entries.map((e) => ({
+            name: e.slug,
+            source: { source: 'local', path: `./plugins/${e.slug}` },
+            policy: { installation: 'INSTALLED_BY_DEFAULT' },
+            description: e.description,
+        })),
+    }, null, 2)}\n`);
+    put('README.md', [
+        `# ${options.name}`,
+        '',
+        `Compiled from ${options.owner}'s knowledge base at commit \`${options.sourceCommit}\`.`,
+        'This tree is generated: edit the knowledge base, not these files.',
+        '',
+        `Plugins: ${claudeEntries.map((e) => e.slug).join(', ') || 'none'}.`,
+        '',
+    ].join('\n'));
+    return { files, warnings, plugins: claudeEntries.map((e) => e.slug) };
+}
+// --- helpers ------------------------------------------------------------------
+/** The files of a plugin's own folder that are the platform's or another step's to write, never copied as they are. */
+const REWRITTEN_AT_ROOT = new Set([PLUGIN_MANIFEST_FILE, BUNDLE_MANIFEST_FILE, PLUGIN_MCP_FILE]);
+/**
+ * Copy a plugin folder's own files under `dest`: everything except the
+ * platform's files (rules, the manifests and `mcp.json` at the root — all
+ * rewritten by the compiler), the inline skills under `skills/` (copied by
+ * name, so a clash resolves the same way everywhere), the hexis extension
+ * folder (`.tool` manuals no other client runs) and `.tool` files anywhere.
+ */
+async function copyPluginFiles(disk, kbRoot, folder, dest, put) {
+    const abs = path.join(kbRoot, folder);
+    for (const rel of await disk.walkFiles(abs, (name) => !NEVER_SHIPPED.has(name) && !name.endsWith('.tool'))) {
+        const top = rel.split('/')[0];
+        if (top === 'skills' || top === HEXIS_EXTENSION_NS)
+            continue;
+        if (!rel.includes('/') && REWRITTEN_AT_ROOT.has(rel))
+            continue;
+        put(`${dest}/${rel}`, await fs.readFile(path.join(abs, rel)));
+    }
+}
+function isRecord(v) {
+    return typeof v === 'object' && v !== null && !Array.isArray(v);
+}
+/** Copy a skill folder (minus what never ships) under `dest`. */
+async function copySkill(disk, kbRoot, skill, dest, put) {
+    const abs = path.join(kbRoot, skill.path);
+    for (const rel of await disk.walkFiles(abs, (name) => !NEVER_SHIPPED.has(name))) {
+        put(`${dest}/${rel}`, await fs.readFile(path.join(abs, rel)));
+    }
+}
+/** First by (name, path) order wins; the loser is reported to `onClash`. */
+function dedupeByName(list, onClash) {
+    const sorted = [...list].sort((a, b) => a.name.localeCompare(b.name) || a.path.localeCompare(b.path));
+    const seen = new Map();
+    const out = [];
+    for (const s of sorted) {
+        const winner = seen.get(s.name);
+        if (winner) {
+            if (winner.path !== s.path)
+                onClash(s, winner);
+            continue;
+        }
+        seen.set(s.name, s);
+        out.push(s);
+    }
+    return out;
+}
+/**
+ * The portable half of a plugin's `mcpServers`: every entry the ONE
+ * judgement accepts (a name a client can key on, a transport it speaks, the
+ * field that transport needs), normalised, minus what a client cannot use —
+ * `${VAR}` vault references in a url or a header. Null when there is no
+ * server to ship; each server left out is reported with the judgement's
+ * reason, so an omission is diagnosable.
+ */
+function portableMcp(servers, leftOut) {
+    if (!servers)
+        return null;
+    const out = {};
+    for (const [name, raw] of Object.entries(servers)) {
+        const verdict = judgeMcpServerEntry(name, raw);
+        if (!verdict.ok) {
+            leftOut(name, verdict.reason);
+            continue;
+        }
+        // Fields the judgement does not read (`startup_timeout_sec`, say) ride
+        // along as declared — a client that knows one uses it, one that does
+        // not ignores it — unless they hold a vault reference, which no client
+        // can expand.
+        // Built without a prototype, so a field spelled `__proto__` is a field
+        // that survives to the serialised entry, not a prototype assignment.
+        const extras = Object.create(null);
+        if (isRecord(raw)) {
+            for (const [key, value] of Object.entries(raw)) {
+                if (JUDGED_KEYS.has(key) || containsVariableReference(JSON.stringify(value)))
+                    continue;
+                extras[key] = value;
+            }
+        }
+        if (verdict.transport === 'stdio') {
+            out[name] = { ...verdict.entry, ...extras };
+            continue;
+        }
+        const entry = { type: verdict.entry.type, url: verdict.entry.url };
+        if (containsVariableReference(verdict.entry.url)) {
+            leftOut(name, 'its url is expanded from the vault, which a client cannot do');
+            continue;
+        }
+        if (verdict.entry.headers) {
+            const headers = {};
+            for (const [h, v] of Object.entries(verdict.entry.headers)) {
+                if (!containsVariableReference(v))
+                    headers[h] = v;
+            }
+            if (Object.keys(headers).length > 0)
+                entry.headers = headers;
+        }
+        out[name] = { ...entry, ...extras };
+    }
+    return Object.keys(out).length > 0 ? out : null;
+}
+/** The server fields the judgement reads and normalises; every other field passes through. */
+const JUDGED_KEYS = new Set(['type', 'url', 'command', 'args', 'env', 'cwd', 'headers']);
+//# sourceMappingURL=compile-marketplace.js.map

package/dist/modules/plugins/compile/compile-marketplace.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"compile-marketplace.js","sourceRoot":"","sources":["../../../../src/modules/plugins/compile/compile-marketplace.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EACL,kBAAkB,EAClB,oBAAoB,EACpB,eAAe,EACf,sBAAsB,EACtB,iBAAiB,EACjB,kBAAkB,GACnB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,WAAW,IAAI,oBAAoB,EAAE,MAAM,8CAA8C,CAAC;AAEnG,OAAO,EAAE,yBAAyB,EAAE,MAAM,kCAAkC,CAAC;AAC7E,OAAO,EAAE,mBAAmB,EAAE,MAAM,0CAA0C,CAAC;AAwG/E,MAAM,WAAW,GAAG,WAAW,CAAC;AAChC,MAAM,kBAAkB,GAAG,sBAAsB,CAAC;AAClD,wEAAwE;AACxE,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,kBAAkB,CAAC,CAAC,CAAC;AAClE,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC,CAAC;AAE7D,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,KAAmB;IAC1D,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;IAC/E,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;IACxC,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,GAAG,GAAG,CAAC,GAAW,EAAE,OAAwB,EAAE,EAAE,CACpD,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IAExF,0EAA0E;IAC1E,wEAAwE;IACxE,MAAM,cAAc,GAAG,IAAI,GAAG,EAAwB,CAAC;IACvD,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,IAAI,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,WAAW,CAAC;YAAE,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAC1E,CAAC;IAkBD,MAAM,GAAG,GAAgB,EAAE,CAAC;IAE5B,2EAA2E;IAC3E,wEAAwE;IACxE,4EAA4E;IAC5E,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACxD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACtG,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,QAAQ,IAAI,CAAC,MAAM,CAAC,MAAM;YAAE,SAAS;QAC3D,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;QACjC,MAAM,MAAM,GAAG,CAAC,GAAG,cAAc,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAClG,MAAM,MAAM,GAAG,KAAK,CAAC,YAAY;aAC9B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;aACjC,MAAM,CAAC,CAAC,CAAC,EAAqB,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC;QACrD,MAAM,KAAK,GAAG,YAAY,CAAC,CAAC,GAAG,MAAM,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAC9D,QAAQ,CAAC,IAAI,CACX,GAAG,IAAI,YAAY,CAAC,CAAC,IAAI,QAAQ,CAAC,CAAC,IAAI,yBAAyB,KAAK,CAAC,IAAI,2BAA2B,CACtG,CACF,CAAC;QACF,MAAM,GAAG,GAAG,WAAW,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAC1D,QAAQ,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,iBAAiB,IAAI,mBAAmB,MAAM,EAAE,CAAC,CAChF,CAAC;QACF,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,GAAG,KAAK,IAAI;YAAE,SAAS,CAAC,8BAA8B;QAChF,uEAAuE;QACvE,sEAAsE;QACtE,qEAAqE;QACrE,uEAAuE;QACvE,4CAA4C;QAC5C,MAAM,IAAI,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7B,QAAQ,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,oBAAoB,IAAI,0EAA0E,CAAC,CAAC;YAClI,SAAS;QACX,CAAC;QACD,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;YACrC,QAAQ,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,oBAAoB,IAAI,yDAAyD,CAAC,CAAC;YACjH,SAAS;QACX,CAAC;QACD,MAAM,EAAE,GAAG,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;QAC1E,GAAG,CAAC,IAAI,CAAC;YACP,IAAI;YACJ,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,WAAW,EAAE,OAAO,QAAQ,EAAE,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;YACzF,OAAO,EAAE,OAAO,QAAQ,EAAE,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;YAC7E,MAAM,EAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,OAAO,QAAQ,EAAE,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;YACxG,QAAQ,EACN,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,QAAQ,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;gBACxF,CAAC,CAAE,QAAQ,CAAC,QAAqB;gBACjC,CAAC,CAAC,SAAS;YACf,EAAE;YACF,MAAM,EAAE,KAAK;YACb,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,GAAG,EAAE,GAAG,IAAI,SAAS;SACtB,CAAC,CAAC;IACL,CAAC;IAED,4EAA4E;IAC5E,4EAA4E;IAC5E,8EAA8E;IAC9E,8EAA8E;IAC9E,+EAA+E;IAC/E,6EAA6E;IAC7E,qCAAqC;IACrC,2EAA2E;IAC3E,2EAA2E;IAC3E,0EAA0E;IAC1E,qEAAqE;IACrE,iDAAiD;IACjD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACzE,MAAM,SAAS,GAAG,CAAC,GAAG,cAAc,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACnF,MAAM,KAAK,GAAG,OAAO,CAAC,gBAAgB;QACpC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,GAAG,EAAE,OAAO,CAAC,gBAAgB,CAAC,GAAG,EAAE,EAAE;QACrG,CAAC,CAAC,SAAS,CAAC;IACd,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,EAAE,CAAC;QAClC,MAAM,IAAI,GAAG,kBAAkB,CAAC,OAAO,CAAC,gBAAgB,IAAI,kBAAkB,CAAC,CAAC;QAChF,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;YACrC,QAAQ,CAAC,IAAI,CAAC,sBAAsB,IAAI,0EAA0E,CAAC,CAAC;QACtH,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,IAAI,CAAC;gBACP,IAAI;gBACJ,WAAW,EAAE,sBAAsB;gBACnC,WAAW,EAAE,KAAK;oBAChB,CAAC,CAAC,mGAAmG;oBACrG,CAAC,CAAC,0DAA0D;gBAC9D,MAAM,EAAE,YAAY,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAC3C,QAAQ,CAAC,IAAI,CAAC,GAAG,IAAI,MAAM,CAAC,CAAC,IAAI,QAAQ,CAAC,CAAC,IAAI,yBAAyB,KAAK,CAAC,IAAI,aAAa,CAAC,CACjG;gBACD,GAAG,EAAE,KAAK;aACX,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,yEAAyE;IACzE,0EAA0E;IAC1E,mEAAmE;IACnE,KAAK,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC;QACpB,MAAM,IAAI,GAAG,WAAW,CAAC,CAAC,IAAI,EAAE,CAAC;QACjC,mEAAmE;QACnE,sEAAsE;QACtE,yEAAyE;QACzE,sEAAsE;QACtE,2DAA2D;QAC3D,IAAI,CAAC,CAAC,MAAM;YAAE,MAAM,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;QACvE,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;YACzB,MAAM,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,EAAC,GAAG,IAAI,WAAW,CAAC,CAAC,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;QACnE,CAAC;QACD,MAAM,IAAI,GAA4B,EAAE,OAAO,EAAE,sBAAsB,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACxF,IAAI,CAAC,CAAC,OAAO;YAAE,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC;QACxC,IAAI,CAAC,CAAC,WAAW;YAAE,IAAI,CAAC,WAAW,GAAG,CAAC,CAAC,WAAW,CAAC;QACpD,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS;YAAE,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;QACnD,IAAI,CAAC,CAAC,QAAQ;YAAE,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC;QAC3C,GAAG,CAAC,GAAG,IAAI,IAAI,oBAAoB,EAAE,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QAC7E,MAAM,MAAM,GAA4B,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACzD,IAAI,CAAC,CAAC,OAAO;YAAE,MAAM,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC;QAC1C,MAAM,CAAC,WAAW,GAAG,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,WAAW,CAAC;QACpD,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS;YAAE,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;QACrD,IAAI,CAAC,CAAC,QAAQ;YAAE,MAAM,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC;QAC7C,GAAG,CAAC,GAAG,IAAI,6BAA6B,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QAClF,qEAAqE;QACrE,sEAAsE;QACtE,uEAAuE;QACvE,oBAAoB;QACpB,MAAM,EAAE,GAA4B,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QACxD,IAAI,OAAO,EAAE,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE;YAAE,EAAE,CAAC,WAAW,GAAG,CAAC,CAAC,WAAW,CAAC;QACjG,MAAM,KAAK,GAA4B,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;QACpE,GAAG,CAAC,GAAG,IAAI,4BAA4B,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QAChF,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC;YACV,GAAG,CAAC,GAAG,IAAI,IAAI,eAAe,EAAE,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,iBAAiB,EAAE,UAAU,EAAE,CAAC,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;YACrH,GAAG,CAAC,GAAG,IAAI,YAAY,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QAClF,CAAC;IACH,CAAC;IAED,2EAA2E;IAC3E,4DAA4D;IAC5D,MAAM,IAAI,GAAG,YAAY,CACvB,CAAC,GAAG,cAAc,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EACzE,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CACX,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,QAAQ,CAAC,CAAC,IAAI,yBAAyB,KAAK,CAAC,IAAI,uCAAuC,CAAC,CACpH,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,IAAI;QAAE,MAAM,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,EAAC,UAAU,CAAC,CAAC,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;IAE/E,wEAAwE;IACxE,uEAAuE;IACvE,yEAAyE;IACzE,uEAAuE;IACvE,wEAAwE;IACxE,wEAAwE;IACxE,4EAA4E;IAC5E,MAAM,MAAM,GAAG,kBAAkB,CAAC,OAAO,CAAC,UAAU,IAAI,WAAW,CAAC,CAAC;IACrE,MAAM,WAAW,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC;IACvD,IAAI,WAAW,EAAE,CAAC;QAChB,qEAAqE;QACrE,oEAAoE;QACpE,wDAAwD;QACxD,QAAQ,CAAC,IAAI,CAAC,oBAAoB,MAAM,qEAAqE,CAAC,CAAC;IACjH,CAAC;IACD,MAAM,aAAa,GAAG,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,KAAK,SAAS,CAAC,CAAC;IAC/E,IAAI,aAAa,EAAE,CAAC;QAClB,MAAM,IAAI,GAAG,WAAW,MAAM,EAAE,CAAC;QACjC,MAAM,QAAQ,GAAG,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC;QAC1D,MAAM,WAAW,GAAG,iBAAiB,OAAO,CAAC,KAAK,8CAA8C,CAAC;QACjG,GAAG,CACD,GAAG,IAAI,6BAA6B,EACpC,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,QAAQ,EAAE,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAC5F,CAAC;QACF,GAAG,CACD,GAAG,IAAI,IAAI,oBAAoB,EAAE,EACjC,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,sBAAsB,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAC/F,CAAC;QACF,IAAI,KAAK,EAAE,CAAC;YACV,GAAG,CAAC,GAAG,IAAI,IAAI,eAAe,EAAE,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,iBAAiB,EAAE,UAAU,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;YACrH,GAAG,CAAC,GAAG,IAAI,YAAY,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QAClF,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,IAAI;YAAE,MAAM,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,EAAC,GAAG,IAAI,WAAW,CAAC,CAAC,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;IACzF,CAAC;IAED,2EAA2E;IAC3E,yEAAyE;IACzE,uEAAuE;IACvE,MAAM,OAAO,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IAChG,MAAM,aAAa,GAAG,CAAC,GAAG,OAAO,EAAE,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,sCAAsC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACtI,GAAG,CACD,iCAAiC,EACjC,GAAG,IAAI,CAAC,SAAS,CACf;QACE,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,KAAK,EAAE;QAC9B,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,OAAO,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC,IAAI,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;KACjH,EACD,IAAI,EACJ,CAAC,CACF,IAAI,CACN,CAAC;IACF,GAAG,CACD,kCAAkC,EAClC,GAAG,IAAI,CAAC,SAAS,CACf;QACE,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC3B,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,MAAM,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC,IAAI,EAAE,EAAE;YACxD,MAAM,EAAE,EAAE,YAAY,EAAE,sBAAsB,EAAE;YAChD,WAAW,EAAE,CAAC,CAAC,WAAW;SAC3B,CAAC,CAAC;KACJ,EACD,IAAI,EACJ,CAAC,CACF,IAAI,CACN,CAAC;IACF,GAAG,CACD,WAAW,EACX;QACE,KAAK,OAAO,CAAC,IAAI,EAAE;QACnB,EAAE;QACF,iBAAiB,OAAO,CAAC,KAAK,iCAAiC,OAAO,CAAC,YAAY,KAAK;QACxF,mEAAmE;QACnE,EAAE;QACF,YAAY,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,GAAG;QACpE,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;IAEF,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;AACxE,CAAC;AAED,iFAAiF;AAEjF,uHAAuH;AACvH,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,oBAAoB,EAAE,oBAAoB,EAAE,eAAe,CAAC,CAAC,CAAC;AAEjG;;;;;;GAMG;AACH,KAAK,UAAU,eAAe,CAC5B,IAAiB,EACjB,MAAc,EACd,MAAc,EACd,IAAY,EACZ,GAA2C;IAE3C,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtC,KAAK,MAAM,GAAG,IAAI,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;QAC3G,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9B,IAAI,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,kBAAkB;YAAE,SAAS;QAC7D,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAC/D,GAAG,CAAC,GAAG,IAAI,IAAI,GAAG,EAAE,EAAE,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IAChE,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,CAAU;IAC1B,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,iEAAiE;AACjE,KAAK,UAAU,SAAS,CACtB,IAAiB,EACjB,MAAc,EACd,KAAmB,EACnB,IAAY,EACZ,GAA2C;IAE3C,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1C,KAAK,MAAM,GAAG,IAAI,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QAChF,GAAG,CAAC,GAAG,IAAI,IAAI,GAAG,EAAE,EAAE,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IAChE,CAAC;AACH,CAAC;AAED,4EAA4E;AAC5E,SAAS,YAAY,CACnB,IAAoB,EACpB,OAA4D;IAE5D,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACtG,MAAM,IAAI,GAAG,IAAI,GAAG,EAAwB,CAAC;IAC7C,MAAM,GAAG,GAAmB,EAAE,CAAC;IAC/B,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI;gBAAE,OAAO,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;YAC/C,SAAS;QACX,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACpB,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACd,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,WAAW,CAClB,OAAuC,EACvC,OAA+C;IAE/C,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,MAAM,GAAG,GAA4C,EAAE,CAAC;IACxD,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAClD,MAAM,OAAO,GAAG,mBAAmB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC/C,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YAChB,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;YAC9B,SAAS;QACX,CAAC;QACD,uEAAuE;QACvE,qEAAqE;QACrE,uEAAuE;QACvE,cAAc;QACd,uEAAuE;QACvE,qEAAqE;QACrE,MAAM,MAAM,GAA4B,MAAM,CAAC,MAAM,CAAC,IAAI,CAA4B,CAAC;QACvF,IAAI,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAClB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC/C,IAAI,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,yBAAyB,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;oBAAE,SAAS;gBACvF,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YACtB,CAAC;QACH,CAAC;QACD,IAAI,OAAO,CAAC,SAAS,KAAK,OAAO,EAAE,CAAC;YAClC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,KAAK,EAAE,GAAG,MAAM,EAAE,CAAC;YAC5C,SAAS;QACX,CAAC;QACD,MAAM,KAAK,GAA4B,EAAE,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QAC5F,IAAI,yBAAyB,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YACjD,OAAO,CAAC,IAAI,EAAE,8DAA8D,CAAC,CAAC;YAC9E,SAAS;QACX,CAAC;QACD,IAAI,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;YAC1B,MAAM,OAAO,GAA2B,EAAE,CAAC;YAC3C,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC3D,IAAI,CAAC,yBAAyB,CAAC,CAAC,CAAC;oBAAE,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YACpD,CAAC;YACD,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC;gBAAE,KAAK,CAAC,OAAO,GAAG,OAAO,CAAC;QAC/D,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,EAAE,GAAG,MAAM,EAAE,CAAC;IACtC,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AAClD,CAAC;AAED,8FAA8F;AAC9F,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC"}

package/dist/modules/plugins/compile/marketplace-compiler.service.d.ts

@@ -0,0 +1,73 @@
+import type { WorkspaceService } from '../../workspace/workspace.service.js';
+import type { IAccessControl } from '../../access/access-control.interface.js';
+import type { ISkillService } from '../../skills/skills.contract.js';
+import type { PluginLinkIndex } from '../plugin-links.js';
+import type { PluginSource } from '../discovery/plugin-source.js';
+import type { ITreeWalker } from '../../../shared/fs.contract.js';
+import type { IGitRunner } from '../../../shared/git.contract.js';
+import { type VirtualTree } from './compile-marketplace.js';
+/** Whose view of the knowledge base to compile. */
+export type CompileAudience = {
+    userEmail: string;
+} | {
+    everyone: true;
+};
+/**
+ * The compiler wired to the live deployment: the default-branch checkout,
+ * the released catalog, the link index, and the access resolver as the read
+ * verdict. Every sink — the per-user git endpoint, a public mirror, a local
+ * export — asks this for a tree and writes it somewhere.
+ *
+ * Two audiences: a PERSON (their `canRead` per skill, exactly the catalog's
+ * filter) or EVERYONE (only what `read: everyone` reaches cleanly — the
+ * public subset a shared mirror may carry). Nothing in between: an audience
+ * that is "these three people" would need a union of verdicts nobody has
+ * asked for yet.
+ */
+export declare class MarketplaceCompilerService {
+    private readonly workspaceService;
+    private readonly accessControl;
+    private readonly skillService;
+    private readonly links;
+    private readonly kbDirName;
+    private readonly marketplace;
+    private readonly source;
+    private readonly disk;
+    /** How git is run — see `shared/git.contract.ts`. */
+    private readonly gitRunner;
+    constructor(workspaceService: WorkspaceService, accessControl: IAccessControl, skillService: ISkillService, links: PluginLinkIndex, kbDirName: string, marketplace: {
+        name: string;
+        owner: string;
+        description?: string;
+        /** The hosted MCP endpoint to ship in the skills plugin (URL only). */
+        knowledgeBaseMcp?: {
+            name: string;
+            url: string;
+        };
+    }, source: PluginSource, disk: ITreeWalker, 
+    /** How git is run — see `shared/git.contract.ts`. */
+    gitRunner: IGitRunner);
+    /**
+     * The default-branch commit the next compile would read. Throws when git
+     * cannot say: the repo service keys freshness on this value, and a stable
+     * placeholder would make every later compile look unnecessary — source
+     * changes and access revocations would never reach that caller again.
+     */
+    sourceCommit(): Promise<string>;
+    compileFor(audience: CompileAudience, 
+    /** The commit to stamp the tree with, when the caller already read it (the freshness check does). */
+    knownCommit?: string): Promise<VirtualTree & {
+        sourceCommit: string;
+    }>;
+    private checkout;
+    /**
+     * One batch verdict per compile, then a lookup. Fail closed both ways: a
+     * path the batch skipped is unreadable, and for the everyone audience a
+     * skill is public only when the resolver says `read: everyone` applies
+     * cleanly (`restricted: false`).
+     */
+    private readPredicate;
+}
+/** The default-branch workspace id compiles run against. */
+export declare function compileWorkspaceId(): string;
+//# sourceMappingURL=marketplace-compiler.service.d.ts.map

package/dist/modules/plugins/compile/marketplace-compiler.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"marketplace-compiler.service.d.ts","sourceRoot":"","sources":["../../../../src/modules/plugins/compile/marketplace-compiler.service.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,sCAAsC,CAAC;AAC7E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,0CAA0C,CAAC;AAC/E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAErE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,gCAAgC,CAAC;AAClE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iCAAiC,CAAC;AAClE,OAAO,EAAsB,KAAK,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAEhF,mDAAmD;AACnD,MAAM,MAAM,eAAe,GAAG;IAAE,SAAS,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,QAAQ,EAAE,IAAI,CAAA;CAAE,CAAC;AAEzE;;;;;;;;;;;GAWG;AACH,qBAAa,0BAA0B;IAEnC,OAAO,CAAC,QAAQ,CAAC,gBAAgB;IACjC,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,YAAY;IAC7B,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,WAAW;IAO5B,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,qDAAqD;IACrD,OAAO,CAAC,QAAQ,CAAC,SAAS;gBAfT,gBAAgB,EAAE,gBAAgB,EAClC,aAAa,EAAE,cAAc,EAC7B,YAAY,EAAE,aAAa,EAC3B,KAAK,EAAE,eAAe,EACtB,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE;QAC5B,IAAI,EAAE,MAAM,CAAC;QACb,KAAK,EAAE,MAAM,CAAC;QACd,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,uEAAuE;QACvE,gBAAgB,CAAC,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,GAAG,EAAE,MAAM,CAAA;SAAE,CAAC;KAClD,EACgB,MAAM,EAAE,YAAY,EACpB,IAAI,EAAE,WAAW;IAClC,qDAAqD;IACpC,SAAS,EAAE,UAAU;IAGxC;;;;;OAKG;IACG,YAAY,IAAI,OAAO,CAAC,MAAM,CAAC;IAW/B,UAAU,CACd,QAAQ,EAAE,eAAe;IACzB,qGAAqG;IACrG,WAAW,CAAC,EAAE,MAAM,GACnB,OAAO,CAAC,WAAW,GAAG;QAAE,YAAY,EAAE,MAAM,CAAA;KAAE,CAAC;YAyCpC,QAAQ;IAKtB;;;;;OAKG;YACW,aAAa;CAyB5B;AAED,4DAA4D;AAC5D,wBAAgB,kBAAkB,IAAI,MAAM,CAE3C"}