@bevel-software/platform-core-backend 0.14.0 → 0.19.0

package/dist/modules/plugins/compile/marketplace-compiler.service.js

@@ -0,0 +1,135 @@
+import path from 'node:path';
+import { DEFAULT_BRANCH } from '@bevel-software/platform-shared';
+import { workspaceIdForBranch } from '../../../shared/workspace-id.js';
+import { compileMarketplace } from './compile-marketplace.js';
+/**
+ * The compiler wired to the live deployment: the default-branch checkout,
+ * the released catalog, the link index, and the access resolver as the read
+ * verdict. Every sink — the per-user git endpoint, a public mirror, a local
+ * export — asks this for a tree and writes it somewhere.
+ *
+ * Two audiences: a PERSON (their `canRead` per skill, exactly the catalog's
+ * filter) or EVERYONE (only what `read: everyone` reaches cleanly — the
+ * public subset a shared mirror may carry). Nothing in between: an audience
+ * that is "these three people" would need a union of verdicts nobody has
+ * asked for yet.
+ */
+export class MarketplaceCompilerService {
+    workspaceService;
+    accessControl;
+    skillService;
+    links;
+    kbDirName;
+    marketplace;
+    source;
+    disk;
+    gitRunner;
+    constructor(workspaceService, accessControl, skillService, links, kbDirName, marketplace, source, disk, 
+    /** How git is run — see `shared/git.contract.ts`. */
+    gitRunner) {
+        this.workspaceService = workspaceService;
+        this.accessControl = accessControl;
+        this.skillService = skillService;
+        this.links = links;
+        this.kbDirName = kbDirName;
+        this.marketplace = marketplace;
+        this.source = source;
+        this.disk = disk;
+        this.gitRunner = gitRunner;
+    }
+    /**
+     * The default-branch commit the next compile would read. Throws when git
+     * cannot say: the repo service keys freshness on this value, and a stable
+     * placeholder would make every later compile look unnecessary — source
+     * changes and access revocations would never reach that caller again.
+     */
+    async sourceCommit() {
+        const { kbRoot } = await this.checkout();
+        const { stdout } = await this.gitRunner.run(kbRoot, ['rev-parse', 'HEAD']);
+        const sha = stdout.trim();
+        // SHA-1 or SHA-256 object format: any hex object id is a commit.
+        if (!/^(?:[0-9a-f]{40}|[0-9a-f]{64})$/.test(sha)) {
+            throw new Error(`could not read the default branch's commit (${sha || 'empty'})`);
+        }
+        return sha;
+    }
+    async compileFor(audience, 
+    /** The commit to stamp the tree with, when the caller already read it (the freshness check does). */
+    knownCommit) {
+        const { wsId, kbRoot } = await this.checkout();
+        // Strictness about the commit belongs to the FRESHNESS check (the repo
+        // service calls `sourceCommit()` itself and refuses to serve without
+        // one). A compile of a checkout git cannot describe still yields a
+        // correct tree; only its README and bundle version lose the sha.
+        const sourceCommit = knownCommit ?? (await this.sourceCommit().catch(() => 'unknown'));
+        // The tree is stamped with the checkout's commit, so every input must be
+        // read from that checkout NOW — not from a catalog scanned before the
+        // commit landed. The skill catalog, the link index and the access memo
+        // are TTL caches that nothing drops on an ordinary write (an MCP
+        // `write_files` moves HEAD and invalidates none of them), and the repo
+        // service keys freshness on the stamped commit: a tree compiled from a
+        // stale catalog under a fresh sha would be "current" until the NEXT
+        // commit, with the caller's marketplace frozen on content the knowledge
+        // base no longer has. Compiles run once per moved commit per caller, so
+        // the rescan is cheap where it matters.
+        this.skillService.invalidate();
+        this.links.invalidate();
+        this.accessControl.invalidate(wsId);
+        const skills = await this.skillService.listSkills(undefined);
+        const membership = await this.links.membership();
+        const { plugins, warnings: discoveryWarnings } = await this.source.discover(kbRoot);
+        const readable = await this.readPredicate(wsId, audience, skills.map((s) => `${s.path}/SKILL.md`));
+        const tree = await compileMarketplace({
+            disk: this.disk,
+            kbRoot,
+            skills,
+            plugins,
+            membership,
+            readable,
+            options: { ...this.marketplace, sourceCommit },
+        });
+        // Discovery's warnings ride with the compile's: a plugin left out for a
+        // malformed manifest or an unresolved MCP profile is otherwise an
+        // omission nobody can diagnose from the tree alone.
+        return { ...tree, warnings: [...discoveryWarnings, ...tree.warnings], sourceCommit };
+    }
+    // --- internal --------------------------------------------------------------
+    async checkout() {
+        const wsId = (await this.workspaceService.getOrCreateForBranch(DEFAULT_BRANCH)).id;
+        return { wsId, kbRoot: path.join(await this.workspaceService.getWorkspacePath(wsId), this.kbDirName) };
+    }
+    /**
+     * One batch verdict per compile, then a lookup. Fail closed both ways: a
+     * path the batch skipped is unreadable, and for the everyone audience a
+     * skill is public only when the resolver says `read: everyone` applies
+     * cleanly (`restricted: false`).
+     */
+    async readPredicate(wsId, audience, docPaths) {
+        if ('userEmail' in audience) {
+            const verdicts = docPaths.length
+                ? await this.accessControl.canReadBatch(wsId, audience.userEmail, docPaths)
+                : new Map();
+            return async (p) => verdicts.get(p) === true;
+        }
+        const cache = new Map();
+        return async (p) => {
+            const hit = cache.get(p);
+            if (hit !== undefined)
+                return hit;
+            let verdict = false;
+            try {
+                verdict = !(await this.accessControl.eligibleReaders(wsId, p)).restricted;
+            }
+            catch {
+                verdict = false;
+            }
+            cache.set(p, verdict);
+            return verdict;
+        };
+    }
+}
+/** The default-branch workspace id compiles run against. */
+export function compileWorkspaceId() {
+    return workspaceIdForBranch(DEFAULT_BRANCH);
+}
+//# sourceMappingURL=marketplace-compiler.service.js.map

package/dist/modules/plugins/compile/marketplace-compiler.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"marketplace-compiler.service.js","sourceRoot":"","sources":["../../../../src/modules/plugins/compile/marketplace-compiler.service.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AAIjE,OAAO,EAAE,oBAAoB,EAAE,MAAM,iCAAiC,CAAC;AAKvE,OAAO,EAAE,kBAAkB,EAAoB,MAAM,0BAA0B,CAAC;AAKhF;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,0BAA0B;IAElB;IACA;IACA;IACA;IACA;IACA;IAOA;IACA;IAEA;IAhBnB,YACmB,gBAAkC,EAClC,aAA6B,EAC7B,YAA2B,EAC3B,KAAsB,EACtB,SAAiB,EACjB,WAMhB,EACgB,MAAoB,EACpB,IAAiB;IAClC,qDAAqD;IACpC,SAAqB;QAfrB,qBAAgB,GAAhB,gBAAgB,CAAkB;QAClC,kBAAa,GAAb,aAAa,CAAgB;QAC7B,iBAAY,GAAZ,YAAY,CAAe;QAC3B,UAAK,GAAL,KAAK,CAAiB;QACtB,cAAS,GAAT,SAAS,CAAQ;QACjB,gBAAW,GAAX,WAAW,CAM3B;QACgB,WAAM,GAAN,MAAM,CAAc;QACpB,SAAI,GAAJ,IAAI,CAAa;QAEjB,cAAS,GAAT,SAAS,CAAY;IACrC,CAAC;IAEJ;;;;;OAKG;IACH,KAAK,CAAC,YAAY;QAChB,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QACzC,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC;QAC3E,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;QAC1B,iEAAiE;QACjE,IAAI,CAAC,iCAAiC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACjD,MAAM,IAAI,KAAK,CAAC,+CAA+C,GAAG,IAAI,OAAO,GAAG,CAAC,CAAC;QACpF,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,KAAK,CAAC,UAAU,CACd,QAAyB;IACzB,qGAAqG;IACrG,WAAoB;QAEpB,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC/C,uEAAuE;QACvE,qEAAqE;QACrE,mEAAmE;QACnE,iEAAiE;QACjE,MAAM,YAAY,GAAG,WAAW,IAAI,CAAC,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;QACvF,yEAAyE;QACzE,sEAAsE;QACtE,uEAAuE;QACvE,iEAAiE;QACjE,uEAAuE;QACvE,uEAAuE;QACvE,oEAAoE;QACpE,wEAAwE;QACxE,wEAAwE;QACxE,wCAAwC;QACxC,IAAI,CAAC,YAAY,CAAC,UAAU,EAAE,CAAC;QAC/B,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;QACxB,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACpC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAC7D,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;QACjD,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,iBAAiB,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACpF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,WAAW,CAAC,CAAC,CAAC;QACnG,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC;YACpC,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,MAAM;YACN,MAAM;YACN,OAAO;YACP,UAAU;YACV,QAAQ;YACR,OAAO,EAAE,EAAE,GAAG,IAAI,CAAC,WAAW,EAAE,YAAY,EAAE;SAC/C,CAAC,CAAC;QACH,wEAAwE;QACxE,kEAAkE;QAClE,oDAAoD;QACpD,OAAO,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,CAAC,GAAG,iBAAiB,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,EAAE,YAAY,EAAE,CAAC;IACvF,CAAC;IAED,8EAA8E;IAEtE,KAAK,CAAC,QAAQ;QACpB,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,gBAAgB,CAAC,oBAAoB,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC;QACnF,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,gBAAgB,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;IACzG,CAAC;IAED;;;;;OAKG;IACK,KAAK,CAAC,aAAa,CACzB,IAAY,EACZ,QAAyB,EACzB,QAAkB;QAElB,IAAI,WAAW,IAAI,QAAQ,EAAE,CAAC;YAC5B,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM;gBAC9B,CAAC,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,IAAI,EAAE,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC;gBAC3E,CAAC,CAAC,IAAI,GAAG,EAAmB,CAAC;YAC/B,OAAO,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC;QAC/C,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAmB,CAAC;QACzC,OAAO,KAAK,EAAE,CAAC,EAAE,EAAE;YACjB,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACzB,IAAI,GAAG,KAAK,SAAS;gBAAE,OAAO,GAAG,CAAC;YAClC,IAAI,OAAO,GAAG,KAAK,CAAC;YACpB,IAAI,CAAC;gBACH,OAAO,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;YAC5E,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,GAAG,KAAK,CAAC;YAClB,CAAC;YACD,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;YACtB,OAAO,OAAO,CAAC;QACjB,CAAC,CAAC;IACJ,CAAC;CACF;AAED,4DAA4D;AAC5D,MAAM,UAAU,kBAAkB;IAChC,OAAO,oBAAoB,CAAC,cAAc,CAAC,CAAC;AAC9C,CAAC"}

package/dist/modules/plugins/discovery/bundle-dialect/bundle.source.d.ts

@@ -0,0 +1,37 @@
+import type { DiscoveredPlugin } from '../plugin-source.js';
+import { type McpRegistry } from './registry.js';
+/**
+ * THE DETACHABLE PART — a customer's plugin file format, read as-is:
+ *
+ *   <pluginsRoot>/<scope…>/<plugin>/plugin.bundle.json
+ *     {
+ *       "name": "example-plugin", "version": "1.3.1", "description": "…",
+ *       "mcpProfile": "global",
+ *       "interface": { "displayName": "Example Plugin", "category": "…" },
+ *       "sourceSkillRoots": [ "skills/departments/engineering/shared/<cluster>" ]
+ *     }
+ *
+ * A bundle is a LIST OF SKILL PATHS plus a pointer into an MCP registry —
+ * which is exactly the native model's "a plugin links skills" with different
+ * field names. So the reader maps:
+ *
+ *   sourceSkillRoots   → linkedRoots          (a root is a skill or a folder of skills)
+ *   mcpProfile         → mcpServers           (expanded through the registry)
+ *   name/version/desc  → a synthesised manifest
+ *   interface.displayName → the plugin's display name
+ *
+ * The walker (`kb-plugin-source.ts`) calls this for every folder holding a
+ * bundle file; this reads the file and decides nothing else. READ-ONLY by
+ * construction: nothing in this directory writes. A bundle's links are plain
+ * references (`linksAreManaged: false`): no principal grant is written or
+ * checked, the skills' own scopes decide readability.
+ *
+ * Deleting the dialect later = this directory, the one `else if` in the
+ * walker that calls it, and the walker's registry load.
+ */
+export declare const BUNDLE_FILE = "plugin.bundle.json";
+export declare const DEFAULT_REGISTRY_PATH = "configs/mcp/registry.json";
+/** The registry, when the repository has one; a missing file is null, a broken one warns. */
+export declare function loadRegistry(kbRoot: string, warnings: string[]): Promise<McpRegistry | null>;
+export declare function readBundlePlugin(dir: string, folder: string, relFolder: string, registry: McpRegistry | null, warnings: string[], unreadable: string[]): Promise<DiscoveredPlugin | null>;
+//# sourceMappingURL=bundle.source.d.ts.map

package/dist/modules/plugins/discovery/bundle-dialect/bundle.source.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bundle.source.d.ts","sourceRoot":"","sources":["../../../../../src/modules/plugins/discovery/bundle-dialect/bundle.source.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAgC,KAAK,WAAW,EAAE,MAAM,eAAe,CAAC;AAE/E;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,eAAO,MAAM,WAAW,uBAAuB,CAAC;AAChD,eAAO,MAAM,qBAAqB,8BAA8B,CAAC;AAMjE,6FAA6F;AAC7F,wBAAsB,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAgBlG;AAED,wBAAsB,gBAAgB,CACpC,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,WAAW,GAAG,IAAI,EAC5B,QAAQ,EAAE,MAAM,EAAE,EAClB,UAAU,EAAE,MAAM,EAAE,GACnB,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CA2FlC"}

package/dist/modules/plugins/discovery/bundle-dialect/bundle.source.js

@@ -0,0 +1,158 @@
+import fs from 'node:fs/promises';
+import path from 'node:path';
+import { isPersonalPluginDir, normalizeSkillRoot, pluginManifestName } from '@bevel-software/platform-shared';
+import { isAbsence } from '../../../../shared/fs.contract.js';
+import { expandProfile, parseRegistry } from './registry.js';
+/**
+ * THE DETACHABLE PART — a customer's plugin file format, read as-is:
+ *
+ *   <pluginsRoot>/<scope…>/<plugin>/plugin.bundle.json
+ *     {
+ *       "name": "example-plugin", "version": "1.3.1", "description": "…",
+ *       "mcpProfile": "global",
+ *       "interface": { "displayName": "Example Plugin", "category": "…" },
+ *       "sourceSkillRoots": [ "skills/departments/engineering/shared/<cluster>" ]
+ *     }
+ *
+ * A bundle is a LIST OF SKILL PATHS plus a pointer into an MCP registry —
+ * which is exactly the native model's "a plugin links skills" with different
+ * field names. So the reader maps:
+ *
+ *   sourceSkillRoots   → linkedRoots          (a root is a skill or a folder of skills)
+ *   mcpProfile         → mcpServers           (expanded through the registry)
+ *   name/version/desc  → a synthesised manifest
+ *   interface.displayName → the plugin's display name
+ *
+ * The walker (`kb-plugin-source.ts`) calls this for every folder holding a
+ * bundle file; this reads the file and decides nothing else. READ-ONLY by
+ * construction: nothing in this directory writes. A bundle's links are plain
+ * references (`linksAreManaged: false`): no principal grant is written or
+ * checked, the skills' own scopes decide readability.
+ *
+ * Deleting the dialect later = this directory, the one `else if` in the
+ * walker that calls it, and the walker's registry load.
+ */
+export const BUNDLE_FILE = 'plugin.bundle.json';
+export const DEFAULT_REGISTRY_PATH = 'configs/mcp/registry.json';
+function isRecord(v) {
+    return typeof v === 'object' && v !== null && !Array.isArray(v);
+}
+/** The registry, when the repository has one; a missing file is null, a broken one warns. */
+export async function loadRegistry(kbRoot, warnings) {
+    let text;
+    try {
+        text = await fs.readFile(path.join(kbRoot, DEFAULT_REGISTRY_PATH), 'utf-8');
+    }
+    catch (err) {
+        // No registry is a valid state: bundles without a profile are still
+        // plugins. A registry that exists but cannot be read is not.
+        if (!isAbsence(err)) {
+            const code = err?.code;
+            warnings.push(`${DEFAULT_REGISTRY_PATH} could not be read (${String(code ?? err)}) — every mcpProfile is unresolved`);
+        }
+        return null;
+    }
+    const registry = parseRegistry(text);
+    warnings.push(...registry.warnings);
+    return registry;
+}
+export async function readBundlePlugin(dir, folder, relFolder, registry, warnings, unreadable) {
+    // Reading and parsing are two failures with two meanings: a file that
+    // cannot be read is a plugin nobody could see (counted, so a writer can
+    // refuse); a file that is not a bundle is a plugin that is not there.
+    let text;
+    try {
+        text = await fs.readFile(path.join(dir, BUNDLE_FILE), 'utf-8');
+    }
+    catch (err) {
+        if (!isAbsence(err)) {
+            warnings.push(`${folder}/${BUNDLE_FILE} could not be read — ${err instanceof Error ? err.message : String(err)}`);
+            unreadable.push(`${folder}/${BUNDLE_FILE}`);
+        }
+        return null;
+    }
+    let bundle;
+    try {
+        const parsed = JSON.parse(text);
+        if (typeof parsed !== 'object' || parsed === null || Array.isArray(parsed))
+            throw new Error('not an object');
+        bundle = parsed;
+    }
+    catch {
+        warnings.push(`${folder}/${BUNDLE_FILE} is not a JSON object — plugin skipped`);
+        return null;
+    }
+    const leaf = path.posix.basename(relFolder);
+    const name = typeof bundle.name === 'string' && bundle.name.trim() ? bundle.name.trim() : leaf;
+    const linkedRoots = [];
+    for (const raw of Array.isArray(bundle.sourceSkillRoots) ? bundle.sourceSkillRoots : []) {
+        const normalised = normalizeSkillRoot(typeof raw === 'string' ? raw : '');
+        if (normalised === null) {
+            warnings.push(`${folder}: sourceSkillRoots entry ${JSON.stringify(raw)} is not a folder path — ignored`);
+        }
+        else if (!linkedRoots.includes(normalised)) {
+            linkedRoots.push(normalised);
+        }
+    }
+    let mcpServers = null;
+    if (typeof bundle.mcpProfile === 'string' && bundle.mcpProfile.trim()) {
+        if (!registry) {
+            warnings.push(`${folder}: mcpProfile "${bundle.mcpProfile}" named but no registry could be read`);
+        }
+        else {
+            const expanded = expandProfile(registry, bundle.mcpProfile.trim());
+            warnings.push(...expanded.warnings.map((w) => `${folder}: ${w}`));
+            if (Object.keys(expanded.mcpServers).length > 0)
+                mcpServers = expanded.mcpServers;
+        }
+    }
+    // A record, or nothing: a list where the block should be is not a block.
+    const ui = isRecord(bundle.interface) ? bundle.interface : {};
+    // The bundle's own rule for what it is called: `interface.displayName`,
+    // else the FOLDER — this dialect is a foreign repository's, read-only, and
+    // its folders are its presentation. The synthesized manifest carries the
+    // answer so the shared reader (`pluginDisplayNameOf`, manifest-only) tells
+    // anyone who asks the same thing this discovery reports.
+    const displayName = typeof ui.displayName === 'string' && ui.displayName.trim() ? ui.displayName.trim() : leaf;
+    // The presentation block is carried as written (below) — except for the
+    // one field that is also a name: the block gets the SAME answer the
+    // manifest does. The compile step fills `interface.displayName` only when
+    // it is blank, so a padded or blank spelling left here would ship a Codex
+    // manifest whose `interface` calls the plugin something the catalog and
+    // the API do not — the split answer this whole rule removes.
+    const carriedUi = typeof ui.displayName === 'string' ? { ...ui, displayName } : ui;
+    const manifest = { name: pluginManifestName(name) };
+    if (typeof bundle.version === 'string')
+        manifest.version = bundle.version;
+    if (typeof bundle.description === 'string')
+        manifest.description = bundle.description;
+    manifest.displayName = displayName;
+    // What the bundle says about itself beyond the four fields above — who
+    // wrote it, what it is for, how a catalogue should present it — is carried
+    // as written, so the compiled plugin can say the same. Shapes are the
+    // vendor manifests' own (`author` an object or a string, `keywords` a list,
+    // `interface` the Codex presentation block); anything else is left where it is.
+    if (isRecord(bundle.author) || typeof bundle.author === 'string')
+        manifest.author = bundle.author;
+    if (Array.isArray(bundle.keywords) && bundle.keywords.every((k) => typeof k === 'string'))
+        manifest.keywords = bundle.keywords;
+    if (Object.keys(carriedUi).length > 0)
+        manifest.interface = carriedUi;
+    return {
+        name,
+        displayName,
+        folder,
+        relFolder,
+        // The same rule as the native reader: a reserved personal folder directly
+        // under the root is a place, not a plugin, whatever file it carries.
+        personal: isPersonalPluginDir(folder),
+        exists: true,
+        manifest,
+        manifestText: null,
+        linkedRoots,
+        mcpServers,
+        mcpJsonText: mcpServers ? JSON.stringify({ mcpServers }) : null,
+        linksAreManaged: false,
+    };
+}
+//# sourceMappingURL=bundle.source.js.map

package/dist/modules/plugins/discovery/bundle-dialect/bundle.source.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bundle.source.js","sourceRoot":"","sources":["../../../../../src/modules/plugins/discovery/bundle-dialect/bundle.source.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AAC9G,OAAO,EAAE,SAAS,EAAE,MAAM,mCAAmC,CAAC;AAE9D,OAAO,EAAE,aAAa,EAAE,aAAa,EAAoB,MAAM,eAAe,CAAC;AAE/E;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,oBAAoB,CAAC;AAChD,MAAM,CAAC,MAAM,qBAAqB,GAAG,2BAA2B,CAAC;AAEjE,SAAS,QAAQ,CAAC,CAAU;IAC1B,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,6FAA6F;AAC7F,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,MAAc,EAAE,QAAkB;IACnE,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,qBAAqB,CAAC,EAAE,OAAO,CAAC,CAAC;IAC9E,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,oEAAoE;QACpE,6DAA6D;QAC7D,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;YACpB,MAAM,IAAI,GAAI,GAAiC,EAAE,IAAI,CAAC;YACtD,QAAQ,CAAC,IAAI,CAAC,GAAG,qBAAqB,uBAAuB,MAAM,CAAC,IAAI,IAAI,GAAG,CAAC,oCAAoC,CAAC,CAAC;QACxH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACrC,QAAQ,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACpC,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,GAAW,EACX,MAAc,EACd,SAAiB,EACjB,QAA4B,EAC5B,QAAkB,EAClB,UAAoB;IAEpB,sEAAsE;IACtE,wEAAwE;IACxE,sEAAsE;IACtE,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE,OAAO,CAAC,CAAC;IACjE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;YACpB,QAAQ,CAAC,IAAI,CAAC,GAAG,MAAM,IAAI,WAAW,wBAAwB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAClH,UAAU,CAAC,IAAI,CAAC,GAAG,MAAM,IAAI,WAAW,EAAE,CAAC,CAAC;QAC9C,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,MAA+B,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;QAC7G,MAAM,GAAG,MAAiC,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,QAAQ,CAAC,IAAI,CAAC,GAAG,MAAM,IAAI,WAAW,wCAAwC,CAAC,CAAC;QAChF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IAC5C,MAAM,IAAI,GAAG,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAE/F,MAAM,WAAW,GAAa,EAAE,CAAC;IACjC,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QACxF,MAAM,UAAU,GAAG,kBAAkB,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC1E,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;YACxB,QAAQ,CAAC,IAAI,CAAC,GAAG,MAAM,4BAA4B,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;QAC3G,CAAC;aAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YAC7C,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;IAED,IAAI,UAAU,GAAmC,IAAI,CAAC;IACtD,IAAI,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC;QACtE,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,QAAQ,CAAC,IAAI,CAAC,GAAG,MAAM,iBAAiB,MAAM,CAAC,UAAU,uCAAuC,CAAC,CAAC;QACpG,CAAC;aAAM,CAAC;YACN,MAAM,QAAQ,GAAG,aAAa,CAAC,QAAQ,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC;YACnE,QAAQ,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,MAAM,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;YAClE,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,MAAM,GAAG,CAAC;gBAAE,UAAU,GAAG,QAAQ,CAAC,UAAU,CAAC;QACpF,CAAC;IACH,CAAC;IAED,yEAAyE;IACzE,MAAM,EAAE,GAAG,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9D,wEAAwE;IACxE,2EAA2E;IAC3E,yEAAyE;IACzE,2EAA2E;IAC3E,yDAAyD;IACzD,MAAM,WAAW,GAAG,OAAO,EAAE,CAAC,WAAW,KAAK,QAAQ,IAAI,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAC/G,wEAAwE;IACxE,oEAAoE;IACpE,0EAA0E;IAC1E,0EAA0E;IAC1E,wEAAwE;IACxE,6DAA6D;IAC7D,MAAM,SAAS,GAAG,OAAO,EAAE,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACnF,MAAM,QAAQ,GAA4B,EAAE,IAAI,EAAE,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;IAC7E,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ;QAAE,QAAQ,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;IAC1E,IAAI,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ;QAAE,QAAQ,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;IACtF,QAAQ,CAAC,WAAW,GAAG,WAAW,CAAC;IACnC,uEAAuE;IACvE,2EAA2E;IAC3E,sEAAsE;IACtE,4EAA4E;IAC5E,gFAAgF;IAChF,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ;QAAE,QAAQ,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IAClG,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;QAAE,QAAQ,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;IAC/H,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,GAAG,CAAC;QAAE,QAAQ,CAAC,SAAS,GAAG,SAAS,CAAC;IAEtE,OAAO;QACL,IAAI;QACJ,WAAW;QACX,MAAM;QACN,SAAS;QACT,0EAA0E;QAC1E,qEAAqE;QACrE,QAAQ,EAAE,mBAAmB,CAAC,MAAM,CAAC;QACrC,MAAM,EAAE,IAAI;QACZ,QAAQ;QACR,YAAY,EAAE,IAAI;QAClB,WAAW;QACX,UAAU;QACV,WAAW,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI;QAC/D,eAAe,EAAE,KAAK;KACvB,CAAC;AACJ,CAAC"}

package/dist/modules/plugins/discovery/bundle-dialect/registry.d.ts

@@ -0,0 +1,65 @@
+/**
+ * The customer's MCP registry — `configs/mcp/registry.json` — and how a
+ * bundle's `mcpProfile` expands through it into an `mcpServers` map of the
+ * shape `mcp.json` carries.
+ *
+ * The file holds two lists:
+ *
+ *   servers   each with an `id`, a `name`, and the real config — either a
+ *             stdio launch (`command`, `args`, `env`) or `type: http` + `url`;
+ *             the config may sit under a `config` key or flat on the entry.
+ *   profiles  each with an `id`, the server ids it selects, and an optional
+ *             `extends` naming another profile (a chain, never a cycle).
+ *
+ * Pure: parse once, expand many. Unknown ids and cycles are warnings, never
+ * throws — a registry typo must not take every plugin down.
+ */
+import { type PortableHttpEntry, type PortableStdioEntry } from '../../../tool-manuals/mcp-json-discovery.js';
+export interface RegistryServer {
+    /** The registry's own key: what a profile lists, unique across the file. */
+    id: string;
+    /**
+     * What the server is CALLED once it runs — the `mcp.json` key, the
+     * `mcp__<name>__*` tool namespace a skill is written against. Several
+     * entries may share one (two transports of one server); a profile picks
+     * one of them. Absent, the id is the name.
+     */
+    name: string;
+    /**
+     * The server as one `mcp.json` entry — judged, and therefore usable, at
+     * parse time — plus every field of the config the judgement does not
+     * know (`startup_timeout_sec`, say), carried through untouched: a field a
+     * client understands must reach it, and one it does not it ignores.
+     */
+    entry: (PortableStdioEntry | PortableHttpEntry) & Record<string, unknown>;
+}
+export interface RegistryProfile {
+    id: string;
+    servers: string[];
+    extends?: string;
+}
+export interface McpRegistry {
+    servers: Map<string, RegistryServer>;
+    profiles: Map<string, RegistryProfile>;
+    /** Servers the registry declared but could not keep, by id, with the reason — so a profile selecting one can say why it is missing. */
+    rejected: Map<string, string>;
+    warnings: string[];
+}
+export declare function parseRegistry(text: string): McpRegistry;
+/**
+ * The `mcpServers` map a profile resolves to, in `mcp.json` terms. Keyed by
+ * the server's NAME, not its registry id: the name is what a client
+ * registers the server as and what a skill's `mcp__<name>__*` calls are
+ * written against, and it is the namespace vault secrets bind to — so the
+ * two transports of one server (`figma-stdio` and `figma-remote`, both
+ * named `figma`) present as one server whichever a profile picks, and share
+ * one credential. A profile may select only one of them: two servers of one
+ * name in one expansion is a conflict, reported, and the nearer profile's
+ * wins. A selected server the registry could not keep is reported with the
+ * reason it was rejected, so the plugin's page can say what is missing.
+ */
+export declare function expandProfile(registry: McpRegistry, profileId: string): {
+    mcpServers: Record<string, unknown>;
+    warnings: string[];
+};
+//# sourceMappingURL=registry.d.ts.map

package/dist/modules/plugins/discovery/bundle-dialect/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../../../../src/modules/plugins/discovery/bundle-dialect/registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,EAEL,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACxB,MAAM,6CAA6C,CAAC;AAErD,MAAM,WAAW,cAAc;IAC7B,4EAA4E;IAC5E,EAAE,EAAE,MAAM,CAAC;IACX;;;;;OAKG;IACH,IAAI,EAAE,MAAM,CAAC;IACb;;;;;OAKG;IACH,KAAK,EAAE,CAAC,kBAAkB,GAAG,iBAAiB,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC3E;AAED,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IACrC,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IACvC,uIAAuI;IACvI,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9B,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,CAwEvD;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,aAAa,CAC3B,QAAQ,EAAE,WAAW,EACrB,SAAS,EAAE,MAAM,GAChB;IAAE,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;CAAE,CA6C7D"}

package/dist/modules/plugins/discovery/bundle-dialect/registry.js

@@ -0,0 +1,204 @@
+/**
+ * The customer's MCP registry — `configs/mcp/registry.json` — and how a
+ * bundle's `mcpProfile` expands through it into an `mcpServers` map of the
+ * shape `mcp.json` carries.
+ *
+ * The file holds two lists:
+ *
+ *   servers   each with an `id`, a `name`, and the real config — either a
+ *             stdio launch (`command`, `args`, `env`) or `type: http` + `url`;
+ *             the config may sit under a `config` key or flat on the entry.
+ *   profiles  each with an `id`, the server ids it selects, and an optional
+ *             `extends` naming another profile (a chain, never a cycle).
+ *
+ * Pure: parse once, expand many. Unknown ids and cycles are warnings, never
+ * throws — a registry typo must not take every plugin down.
+ */
+import { judgeMcpServerEntry, } from '../../../tool-manuals/mcp-json-discovery.js';
+export function parseRegistry(text) {
+    const warnings = [];
+    const servers = new Map();
+    const profiles = new Map();
+    const rejected = new Map();
+    let root;
+    try {
+        root = JSON.parse(text);
+    }
+    catch {
+        return { servers, profiles, rejected, warnings: ['registry.json is not valid JSON'] };
+    }
+    if (!isRecord(root))
+        return { servers, profiles, rejected, warnings: ['registry.json must be a JSON object'] };
+    for (const raw of asArray(root.servers)) {
+        if (!isRecord(raw) || typeof raw.id !== 'string' || !raw.id) {
+            warnings.push('registry.json: a server without an id was skipped');
+            continue;
+        }
+        if (servers.has(raw.id) || rejected.has(raw.id)) {
+            warnings.push(`registry.json: server "${raw.id}" is declared twice — the second declaration is ignored`);
+            continue;
+        }
+        // Converting IS the validation: a server the registry keeps is one whose
+        // entry a client can run — judged by the ONE rule every mcp.json entry
+        // meets (name, transport, required fields), after the customer's shape
+        // is translated into that of mcp.json.
+        const config = isRecord(raw.config) ? raw.config : raw;
+        const converted = mcpEntryOf(raw.id, config);
+        if ('reason' in converted) {
+            warnings.push(`registry.json: server "${raw.id}" ${converted.reason} — skipped`);
+            rejected.set(raw.id, converted.reason);
+            continue;
+        }
+        // The running name is the key a client sees, so it meets the same
+        // spelling rule the id just did. One that does not is not a reason to
+        // lose the server: it runs under its id, and the registry's author is
+        // told which skills will not find it.
+        let name = raw.id;
+        if (raw.name !== undefined) {
+            const declared = typeof raw.name === 'string' ? raw.name.trim() : '';
+            if (declared === raw.id) {
+                // Named as it is keyed: nothing to say.
+            }
+            else if (declared && judgeMcpServerEntry(declared, { ...config, ...converted.entry }).ok) {
+                name = declared;
+            }
+            else {
+                // Every name that is present and unusable is said, blank or not a
+                // string included: a skill written against it will not find the server.
+                warnings.push(declared
+                    ? `registry.json: server "${raw.id}" is named "${declared}", which cannot be a server name (lowercase alphanumeric with \`_\`/\`-\`) — it runs as "${raw.id}"`
+                    : `registry.json: server "${raw.id}" has a name that is blank or not a string — it runs as "${raw.id}"`);
+            }
+        }
+        servers.set(raw.id, { id: raw.id, name, entry: converted.entry });
+    }
+    for (const raw of asArray(root.profiles)) {
+        if (!isRecord(raw) || typeof raw.id !== 'string' || !raw.id) {
+            warnings.push('registry.json: a profile without an id was skipped');
+            continue;
+        }
+        if (profiles.has(raw.id)) {
+            warnings.push(`registry.json: profile "${raw.id}" is declared twice — the second declaration is ignored`);
+            continue;
+        }
+        profiles.set(raw.id, {
+            id: raw.id,
+            servers: asArray(raw.servers).filter((s) => typeof s === 'string'),
+            extends: typeof raw.extends === 'string' ? raw.extends : undefined,
+        });
+    }
+    return { servers, profiles, rejected, warnings };
+}
+/**
+ * The `mcpServers` map a profile resolves to, in `mcp.json` terms. Keyed by
+ * the server's NAME, not its registry id: the name is what a client
+ * registers the server as and what a skill's `mcp__<name>__*` calls are
+ * written against, and it is the namespace vault secrets bind to — so the
+ * two transports of one server (`figma-stdio` and `figma-remote`, both
+ * named `figma`) present as one server whichever a profile picks, and share
+ * one credential. A profile may select only one of them: two servers of one
+ * name in one expansion is a conflict, reported, and the nearer profile's
+ * wins. A selected server the registry could not keep is reported with the
+ * reason it was rejected, so the plugin's page can say what is missing.
+ */
+export function expandProfile(registry, profileId) {
+    const warnings = [];
+    const ids = [];
+    const seen = new Set();
+    let current = profileId;
+    while (current !== undefined) {
+        if (seen.has(current)) {
+            warnings.push(`registry.json: profile "${current}" extends itself through a cycle — chain cut`);
+            break;
+        }
+        seen.add(current);
+        const profile = registry.profiles.get(current);
+        if (!profile) {
+            warnings.push(`registry.json: profile "${current}" does not exist`);
+            break;
+        }
+        // Nearest profile first, so a base profile's servers come after the
+        // extending one's; the map below keeps the first occurrence of an id.
+        for (const id of profile.servers)
+            if (!ids.includes(id))
+                ids.push(id);
+        current = profile.extends;
+    }
+    const mcpServers = {};
+    const holder = new Map();
+    for (const id of ids) {
+        const server = registry.servers.get(id);
+        if (!server) {
+            const reason = registry.rejected.get(id);
+            warnings.push(reason
+                ? `registry.json: profile "${profileId}" selects server "${id}", which was left out — ${reason}`
+                : `registry.json: profile "${profileId}" selects unknown server "${id}"`);
+            continue;
+        }
+        const first = holder.get(server.name);
+        if (first !== undefined) {
+            warnings.push(`registry.json: profile "${profileId}" selects both "${first}" and "${id}", which are both named "${server.name}" — "${id}" left out`);
+            continue;
+        }
+        holder.set(server.name, id);
+        mcpServers[server.name] = server.entry;
+    }
+    return { mcpServers, warnings };
+}
+/**
+ * A registry config → one `mcp.json` server entry, or why there is none.
+ *
+ * The registry's OWN knowledge is the customer's shape: a declared `type`
+ * names the transport (`http` is their spelling of `streamable-http`), an
+ * undeclared one is read off the fields — a `url` means http, else a
+ * `command` means stdio — and blank strings are absent. That translation
+ * done, whether the entry can work is the shared judgement's call, the same
+ * one every `mcp.json` entry meets: a name that can be a server name, a
+ * transport the client speaks (no `sse`), the field that transport needs.
+ */
+function mcpEntryOf(name, config) {
+    const declared = typeof config.type === 'string' ? config.type.trim().toLowerCase() : undefined;
+    const url = nonBlank(config.url);
+    const command = nonBlank(config.command);
+    const type = declared === undefined ? (url ? 'streamable-http' : command ? 'stdio' : undefined) : declared === 'http' ? 'streamable-http' : declared;
+    if (type === undefined)
+        return { reason: 'has neither a url nor a command' };
+    const candidate = { type };
+    if (url)
+        candidate.url = url;
+    if (command)
+        candidate.command = command;
+    for (const key of ['args', 'env', 'cwd', 'headers']) {
+        if (config[key] !== undefined)
+            candidate[key] = config[key];
+    }
+    const verdict = judgeMcpServerEntry(name, candidate);
+    if (!verdict.ok)
+        return { reason: verdict.reason };
+    // Every field the judgement did not read rides along as written: a
+    // `startup_timeout_sec` is meaningful to the client that knows it and
+    // harmless to one that does not, and dropping it silently was the
+    // customer's first complaint. The registry's own keys (`id`, `name`, a
+    // flat entry's) are the record's, not the server's.
+    const entry = { ...verdict.entry };
+    for (const [key, value] of Object.entries(config)) {
+        // Defined, not assigned: a field spelled `__proto__` is a field to
+        // carry, and assignment would set the object's prototype instead.
+        if (!JUDGED_OR_RECORD_KEYS.has(key)) {
+            Object.defineProperty(entry, key, { value, enumerable: true, configurable: true, writable: true });
+        }
+    }
+    return { entry: entry };
+}
+/** The config keys the judgement reads, plus the record's own; everything else passes through. */
+const JUDGED_OR_RECORD_KEYS = new Set(['type', 'url', 'command', 'args', 'env', 'cwd', 'headers', 'id', 'name', 'config']);
+function nonBlank(v) {
+    return typeof v === 'string' && v.trim() ? v : undefined;
+}
+function isRecord(v) {
+    return typeof v === 'object' && v !== null && !Array.isArray(v);
+}
+function asArray(v) {
+    return Array.isArray(v) ? v : [];
+}
+//# sourceMappingURL=registry.js.map

package/dist/modules/plugins/discovery/bundle-dialect/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../../../../src/modules/plugins/discovery/bundle-dialect/registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,EACL,mBAAmB,GAGpB,MAAM,6CAA6C,CAAC;AAmCrD,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,OAAO,GAAG,IAAI,GAAG,EAA0B,CAAC;IAClD,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA2B,CAAC;IACpD,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC3C,IAAI,IAAa,CAAC;IAClB,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,iCAAiC,CAAC,EAAE,CAAC;IACxF,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,qCAAqC,CAAC,EAAE,CAAC;IAE/G,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACxC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,OAAO,GAAG,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YAC5D,QAAQ,CAAC,IAAI,CAAC,mDAAmD,CAAC,CAAC;YACnE,SAAS;QACX,CAAC;QACD,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;YAChD,QAAQ,CAAC,IAAI,CAAC,0BAA0B,GAAG,CAAC,EAAE,yDAAyD,CAAC,CAAC;YACzG,SAAS;QACX,CAAC;QACD,yEAAyE;QACzE,uEAAuE;QACvE,uEAAuE;QACvE,uCAAuC;QACvC,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC;QACvD,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QAC7C,IAAI,QAAQ,IAAI,SAAS,EAAE,CAAC;YAC1B,QAAQ,CAAC,IAAI,CAAC,0BAA0B,GAAG,CAAC,EAAE,KAAK,SAAS,CAAC,MAAM,YAAY,CAAC,CAAC;YACjF,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;YACvC,SAAS;QACX,CAAC;QACD,kEAAkE;QAClE,sEAAsE;QACtE,sEAAsE;QACtE,sCAAsC;QACtC,IAAI,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC;QAClB,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC3B,MAAM,QAAQ,GAAG,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrE,IAAI,QAAQ,KAAK,GAAG,CAAC,EAAE,EAAE,CAAC;gBACxB,wCAAwC;YAC1C,CAAC;iBAAM,IAAI,QAAQ,IAAI,mBAAmB,CAAC,QAAQ,EAAE,EAAE,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC;gBAC3F,IAAI,GAAG,QAAQ,CAAC;YAClB,CAAC;iBAAM,CAAC;gBACN,kEAAkE;gBAClE,wEAAwE;gBACxE,QAAQ,CAAC,IAAI,CACX,QAAQ;oBACN,CAAC,CAAC,0BAA0B,GAAG,CAAC,EAAE,eAAe,QAAQ,4FAA4F,GAAG,CAAC,EAAE,GAAG;oBAC9J,CAAC,CAAC,0BAA0B,GAAG,CAAC,EAAE,4DAA4D,GAAG,CAAC,EAAE,GAAG,CAC1G,CAAC;YACJ,CAAC;QACH,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC;IACpE,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,OAAO,GAAG,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YAC5D,QAAQ,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAC;YACpE,SAAS;QACX,CAAC;QACD,IAAI,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;YACzB,QAAQ,CAAC,IAAI,CAAC,2BAA2B,GAAG,CAAC,EAAE,yDAAyD,CAAC,CAAC;YAC1G,SAAS;QACX,CAAC;QACD,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE;YACnB,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;YAC/E,OAAO,EAAE,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;SACnE,CAAC,CAAC;IACL,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;AACnD,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,aAAa,CAC3B,QAAqB,EACrB,SAAiB;IAEjB,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,IAAI,OAAO,GAAuB,SAAS,CAAC;IAC5C,OAAO,OAAO,KAAK,SAAS,EAAE,CAAC;QAC7B,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YACtB,QAAQ,CAAC,IAAI,CAAC,2BAA2B,OAAO,8CAA8C,CAAC,CAAC;YAChG,MAAM;QACR,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAClB,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC/C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,QAAQ,CAAC,IAAI,CAAC,2BAA2B,OAAO,kBAAkB,CAAC,CAAC;YACpE,MAAM;QACR,CAAC;QACD,oEAAoE;QACpE,sEAAsE;QACtE,KAAK,MAAM,EAAE,IAAI,OAAO,CAAC,OAAO;YAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACtE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAC5B,CAAC;IACD,MAAM,UAAU,GAA4B,EAAE,CAAC;IAC/C,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;QACrB,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACxC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACzC,QAAQ,CAAC,IAAI,CACX,MAAM;gBACJ,CAAC,CAAC,2BAA2B,SAAS,qBAAqB,EAAE,2BAA2B,MAAM,EAAE;gBAChG,CAAC,CAAC,2BAA2B,SAAS,6BAA6B,EAAE,GAAG,CAC3E,CAAC;YACF,SAAS;QACX,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,QAAQ,CAAC,IAAI,CACX,2BAA2B,SAAS,mBAAmB,KAAK,UAAU,EAAE,4BAA4B,MAAM,CAAC,IAAI,QAAQ,EAAE,YAAY,CACtI,CAAC;YACF,SAAS;QACX,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC5B,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC;IACzC,CAAC;IACD,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC;AAClC,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,UAAU,CACjB,IAAY,EACZ,MAA+B;IAE/B,MAAM,QAAQ,GAAG,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAChG,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACjC,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACzC,MAAM,IAAI,GACR,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC1I,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,EAAE,MAAM,EAAE,iCAAiC,EAAE,CAAC;IAC7E,MAAM,SAAS,GAA4B,EAAE,IAAI,EAAE,CAAC;IACpD,IAAI,GAAG;QAAE,SAAS,CAAC,GAAG,GAAG,GAAG,CAAC;IAC7B,IAAI,OAAO;QAAE,SAAS,CAAC,OAAO,GAAG,OAAO,CAAC;IACzC,KAAK,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,CAAU,EAAE,CAAC;QAC7D,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,SAAS;YAAE,SAAS,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,OAAO,GAAG,mBAAmB,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACrD,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;IACnD,mEAAmE;IACnE,sEAAsE;IACtE,kEAAkE;IAClE,uEAAuE;IACvE,oDAAoD;IACpD,MAAM,KAAK,GAA4B,EAAE,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC;IAC5D,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,mEAAmE;QACnE,kEAAkE;QAClE,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACpC,MAAM,CAAC,cAAc,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QACrG,CAAC;IACH,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,KAAgC,EAAE,CAAC;AACrD,CAAC;AAED,kGAAkG;AAClG,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;AAE3H,SAAS,QAAQ,CAAC,CAAU;IAC1B,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3D,CAAC;AAED,SAAS,QAAQ,CAAC,CAAU;IAC1B,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,OAAO,CAAC,CAAU;IACzB,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACnC,CAAC"}