@bjoernrochel/sevro 1.0.0 → 1.1.1

package/dist/src/hosts/codex-marketplace.js

@@ -0,0 +1,185 @@
+import { readFile, readdir, realpath, stat } from "node:fs/promises";
+import { join, relative, sep } from "node:path";
+import { insideRoot as inside } from "../paths.js";
+import { fixtureParts } from "../fixtures/preparation.js";
+import { runCodexProcess } from "./codex-process.js";
+import { isRecord, isUnknownArray } from "../value-guards.js";
+function validPluginNames(declaration) {
+    const names = declaration.pluginNames;
+    return (/^[a-z][a-z0-9-]*$/.test(declaration.marketplaceName) &&
+        names.length > 0 &&
+        names.every((name) => /^[a-z][a-z0-9-]*$/.test(name)) &&
+        new Set(names).size === names.length);
+}
+function validArtifactPaths(declaration, paths) {
+    return (declaration.artifactPaths.length > 0 &&
+        paths.size === declaration.artifactPaths.length &&
+        declaration.artifactPaths.every((path) => path.startsWith(`${declaration.artifactRoot}/`) &&
+            fixtureParts(path).join("/") === path));
+}
+async function marketplaceRoot(workspace, declaration) {
+    const paths = new Set(declaration.artifactPaths);
+    if (!validPluginNames(declaration) || !validArtifactPaths(declaration, paths))
+        throw new Error("invalid Codex marketplace declaration");
+    const root = join(workspace, ...fixtureParts(declaration.artifactRoot));
+    const actualWorkspace = await realpath(workspace), actualRoot = await realpath(root);
+    if (!inside(actualWorkspace, actualRoot) || actualRoot === actualWorkspace)
+        throw new Error("Codex marketplace escapes the workspace");
+    await verifyMarketplaceManifest(actualRoot, declaration);
+    await verifyMaterializedPackage(actualRoot, declaration.artifactRoot, paths);
+    return actualRoot;
+}
+function objectRecord(value, message) {
+    if (!value || typeof value !== "object")
+        throw new Error(message);
+    // JSON arrays also have unknown-valued object properties; field validation follows.
+    return value;
+}
+async function marketplaceManifest(root) {
+    let value;
+    try {
+        value = JSON.parse(await readFile(join(root, ".claude-plugin", "marketplace.json"), "utf8"));
+    }
+    catch (error) {
+        throw new Error("Codex marketplace manifest is unreadable", {
+            cause: error,
+        });
+    }
+    return objectRecord(value, "invalid Codex marketplace manifest");
+}
+async function verifyMarketplaceManifest(root, declaration) {
+    const document = await marketplaceManifest(root);
+    const plugins = document.plugins;
+    if (document.name !== declaration.marketplaceName ||
+        !isUnknownArray(plugins) ||
+        plugins.length !== declaration.pluginNames.length)
+        throw new Error("Codex marketplace manifest does not match declaration");
+    const found = new Set();
+    for (const entry of plugins)
+        await verifyLocalPlugin(entry, declaration.pluginNames, found, root);
+}
+function declaredName(name, names, found) {
+    return typeof name === "string" && names.includes(name) && !found.has(name);
+}
+function localSource(source) {
+    return typeof source === "string" && source.startsWith("./");
+}
+async function verifyLocalPlugin(entry, names, found, root) {
+    const plugin = objectRecord(entry, "invalid Codex marketplace plugin");
+    if (!declaredName(plugin.name, names, found) || !localSource(plugin.source))
+        throw new Error("Codex marketplace plugin is not a declared local source");
+    found.add(plugin.name);
+    const source = join(root, ...fixtureParts(plugin.source.slice(2)));
+    if (!inside(root, await realpath(source)))
+        throw new Error("Codex marketplace plugin escapes its artifact root");
+}
+async function verifyMaterializedPackage(root, artifactRoot, expected) {
+    const state = {
+        pending: [root],
+        seen: new Set(),
+        expected,
+        root,
+        artifactRoot,
+    };
+    while (state.pending.length) {
+        const directory = state.pending.pop();
+        if (directory === undefined)
+            break;
+        for (const entry of await readdir(directory, { withFileTypes: true }))
+            verifyPackageEntry(directory, entry, state);
+    }
+    if (state.seen.size !== expected.size)
+        throw new Error("Codex marketplace package is missing declared files");
+}
+function verifyPackageEntry(directory, entry, state) {
+    if (entry.isSymbolicLink())
+        throw new Error("Codex marketplace package contains a symlink");
+    if (entry.isDirectory()) {
+        state.pending.push(join(directory, entry.name));
+        return;
+    }
+    if (!entry.isFile())
+        throw new Error("Codex marketplace package contains a special file");
+    const path = `${state.artifactRoot}/${relative(state.root, join(directory, entry.name)).split(sep).join("/")}`;
+    if (!state.expected.has(path))
+        throw new Error("Codex marketplace package contains undeclared files");
+    state.seen.add(path);
+}
+async function pluginCommand(context, args) {
+    const result = await runCodexProcess({
+        diagnostics: context.diagnostics,
+        argv: [context.binary, "plugin", ...args, "--json"],
+        cwd: context.request.workspace,
+        env: context.env,
+        timeoutMs: 30_000,
+        signal: context.request.signal,
+    });
+    return result;
+}
+export async function installCodexPlugins(context) {
+    const declaration = context.request.codexMarketplace;
+    if (!declaration)
+        return [];
+    context.diagnostics.stage = "marketplace-validation";
+    const root = await marketplaceRoot(context.request.workspace, declaration);
+    context.diagnostics.stage = "marketplace-install";
+    const added = await pluginCommand(context, ["marketplace", "add", root]);
+    if (added.code !== 0)
+        throw new Error("Codex local marketplace installation failed");
+    const installed = [];
+    for (const plugin of declaration.pluginNames)
+        installed.push(await installPlugin(context, declaration, plugin));
+    return installed;
+}
+async function installPlugin(context, declaration, pluginName) {
+    context.diagnostics.stage = "plugin-install";
+    const installed = await pluginCommand(context, [
+        "add",
+        `${pluginName}@${declaration.marketplaceName}`,
+    ]);
+    if (installed.code !== 0)
+        throw new Error("Codex local plugin installation failed");
+    context.diagnostics.stage = "plugin-receipt";
+    const path = await installedPluginPath(installed.out, declaration.marketplaceName, pluginName, context.pluginCacheRoot);
+    await verifyInstalledInvocation(context.request, pluginName, path);
+    return path;
+}
+function installationReceipt(text) {
+    let value;
+    try {
+        value = JSON.parse(text);
+    }
+    catch (error) {
+        throw new Error("Codex plugin installation receipt is invalid", {
+            cause: error,
+        });
+    }
+    if (!isRecord(value))
+        throw new Error("Codex plugin installation receipt is invalid");
+    return value;
+}
+function matchingReceipt(receipt, marketplace, plugin, path) {
+    return (receipt.name === plugin &&
+        receipt.marketplaceName === marketplace &&
+        path !== null);
+}
+async function installedPluginPath(text, marketplace, plugin, cache) {
+    const receipt = installationReceipt(text);
+    const path = typeof receipt.installedPath === "string"
+        ? await realpath(receipt.installedPath)
+        : null;
+    if (!matchingReceipt(receipt, marketplace, plugin, path) ||
+        path === null ||
+        !inside(await realpath(cache), path))
+        throw new Error("Codex plugin installation receipt is invalid");
+    return path;
+}
+async function verifyInstalledInvocation(request, plugin, path) {
+    const selected = request.explicitSkillInvocation;
+    if (selected?.pluginName !== plugin)
+        return;
+    const skill = await stat(join(path, "skills", selected.skillName, "SKILL.md")).catch(() => null);
+    if (!skill?.isFile())
+        throw new Error("invoked Codex skill is absent from the installation");
+}
+//# sourceMappingURL=codex-marketplace.js.map

package/dist/src/hosts/codex-marketplace.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-marketplace.js","sourceRoot":"","sources":["codex-marketplace.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,yBAAyB;AACrE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,kBAAkB;AAChD,OAAO,EAAE,UAAU,IAAI,MAAM,EAAE,oBAAiB;AAChD,OAAO,EAAE,YAAY,EAAE,mCAAgC;AAEvD,OAAO,EAAE,eAAe,EAAE,2BAAwB;AAClD,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,2BAAwB;AAY3D,SAAS,gBAAgB,CAAC,WAAwB;IAChD,MAAM,KAAK,GAAG,WAAW,CAAC,WAAW,CAAC;IACtC,OAAO,CACL,mBAAmB,CAAC,IAAI,CAAC,WAAW,CAAC,eAAe,CAAC;QACrD,KAAK,CAAC,MAAM,GAAG,CAAC;QAChB,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrD,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM,CACrC,CAAC;AACJ,CAAC;AACD,SAAS,kBAAkB,CACzB,WAAwB,EACxB,KAAkB;IAElB,OAAO,CACL,WAAW,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC;QACpC,KAAK,CAAC,IAAI,KAAK,WAAW,CAAC,aAAa,CAAC,MAAM;QAC/C,WAAW,CAAC,aAAa,CAAC,KAAK,CAC7B,CAAC,IAAI,EAAE,EAAE,CACP,IAAI,CAAC,UAAU,CAAC,GAAG,WAAW,CAAC,YAAY,GAAG,CAAC;YAC/C,YAAY,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI,CACxC,CACF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,SAAiB,EACjB,WAAwB;IAExB,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC;IACjD,IAAI,CAAC,gBAAgB,CAAC,WAAW,CAAC,IAAI,CAAC,kBAAkB,CAAC,WAAW,EAAE,KAAK,CAAC;QAC3E,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,GAAG,YAAY,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC,CAAC;IACxE,MAAM,eAAe,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,EAC/C,UAAU,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;IACpC,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,UAAU,CAAC,IAAI,UAAU,KAAK,eAAe;QACxE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,MAAM,yBAAyB,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;IACzD,MAAM,yBAAyB,CAAC,UAAU,EAAE,WAAW,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;IAC7E,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,YAAY,CACnB,KAAc,EACd,OAAe;IAEf,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;IAClE,oFAAoF;IACpF,OAAO,KAAgC,CAAC;AAC1C,CAAC;AACD,KAAK,UAAU,mBAAmB,CAChC,IAAY;IAEZ,IAAI,KAAc,CAAC;IACnB,IAAI,CAAC;QACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAChB,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,gBAAgB,EAAE,kBAAkB,CAAC,EAAE,MAAM,CAAC,CACzE,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,0CAA0C,EAAE;YAC1D,KAAK,EAAE,KAAK;SACb,CAAC,CAAC;IACL,CAAC;IACD,OAAO,YAAY,CAAC,KAAK,EAAE,oCAAoC,CAAC,CAAC;AACnE,CAAC;AACD,KAAK,UAAU,yBAAyB,CACtC,IAAY,EACZ,WAAwB;IAExB,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,IAAI,CAAC,CAAC;IACjD,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;IACjC,IACE,QAAQ,CAAC,IAAI,KAAK,WAAW,CAAC,eAAe;QAC7C,CAAC,cAAc,CAAC,OAAO,CAAC;QACxB,OAAO,CAAC,MAAM,KAAK,WAAW,CAAC,WAAW,CAAC,MAAM;QAEjD,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC3E,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,KAAK,MAAM,KAAK,IAAI,OAAO;QACzB,MAAM,iBAAiB,CAAC,KAAK,EAAE,WAAW,CAAC,WAAW,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;AACzE,CAAC;AACD,SAAS,YAAY,CACnB,IAAa,EACb,KAAe,EACf,KAAkB;IAElB,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAC9E,CAAC;AACD,SAAS,WAAW,CAAC,MAAe;IAClC,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;AAC/D,CAAC;AACD,KAAK,UAAU,iBAAiB,CAC9B,KAAc,EACd,KAAe,EACf,KAAkB,EAClB,IAAY;IAEZ,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,EAAE,kCAAkC,CAAC,CAAC;IACvE,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC;QACzE,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACvB,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,GAAG,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACnE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,QAAQ,CAAC,MAAM,CAAC,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;AAC1E,CAAC;AASD,KAAK,UAAU,yBAAyB,CACtC,IAAY,EACZ,YAAoB,EACpB,QAAqB;IAErB,MAAM,KAAK,GAAiB;QAC1B,OAAO,EAAE,CAAC,IAAI,CAAC;QACf,IAAI,EAAE,IAAI,GAAG,EAAE;QACf,QAAQ;QACR,IAAI;QACJ,YAAY;KACb,CAAC;IACF,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;QAC5B,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;QACtC,IAAI,SAAS,KAAK,SAAS;YAAE,MAAM;QACnC,KAAK,MAAM,KAAK,IAAI,MAAM,OAAO,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;YACnE,kBAAkB,CAAC,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;IAChD,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI;QACnC,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;AAC3E,CAAC;AACD,SAAS,kBAAkB,CACzB,SAAiB,EACjB,KAAa,EACb,KAAmB;IAEnB,IAAI,KAAK,CAAC,cAAc,EAAE;QACxB,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;QACxB,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QAChD,OAAO;IACT,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE;QACjB,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,MAAM,IAAI,GAAG,GAAG,KAAK,CAAC,YAAY,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IAC/G,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACvB,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,OAAuB,EAAE,IAAc;IAClE,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC;QACnC,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,EAAE,QAAQ,CAAC;QACnD,GAAG,EAAE,OAAO,CAAC,OAAO,CAAC,SAAS;QAC9B,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,SAAS,EAAE,MAAM;QACjB,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM;KAC/B,CAAC,CAAC;IACH,OAAO,MAAM,CAAC;AAChB,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,OAAuB;IAEvB,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,gBAAgB,CAAC;IACrD,IAAI,CAAC,WAAW;QAAE,OAAO,EAAE,CAAC;IAC5B,OAAO,CAAC,WAAW,CAAC,KAAK,GAAG,wBAAwB,CAAC;IACrD,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IAC3E,OAAO,CAAC,WAAW,CAAC,KAAK,GAAG,qBAAqB,CAAC;IAClD,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,CAAC,aAAa,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;IACzE,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,KAAK,MAAM,MAAM,IAAI,WAAW,CAAC,WAAW;QAC1C,SAAS,CAAC,IAAI,CAAC,MAAM,aAAa,CAAC,OAAO,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC;IACpE,OAAO,SAAS,CAAC;AACnB,CAAC;AACD,KAAK,UAAU,aAAa,CAC1B,OAAuB,EACvB,WAAwB,EACxB,UAAkB;IAElB,OAAO,CAAC,WAAW,CAAC,KAAK,GAAG,gBAAgB,CAAC;IAC7C,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE;QAC7C,KAAK;QACL,GAAG,UAAU,IAAI,WAAW,CAAC,eAAe,EAAE;KAC/C,CAAC,CAAC;IACH,IAAI,SAAS,CAAC,IAAI,KAAK,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,OAAO,CAAC,WAAW,CAAC,KAAK,GAAG,gBAAgB,CAAC;IAC7C,MAAM,IAAI,GAAG,MAAM,mBAAmB,CACpC,SAAS,CAAC,GAAG,EACb,WAAW,CAAC,eAAe,EAC3B,UAAU,EACV,OAAO,CAAC,eAAe,CACxB,CAAC;IACF,MAAM,yBAAyB,CAAC,OAAO,CAAC,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;IACnE,OAAO,IAAI,CAAC;AACd,CAAC;AACD,SAAS,mBAAmB,CAAC,IAAY;IACvC,IAAI,KAAc,CAAC;IACnB,IAAI,CAAC;QACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,8CAA8C,EAAE;YAC9D,KAAK,EAAE,KAAK;SACb,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,OAAO,KAAK,CAAC;AACf,CAAC;AACD,SAAS,eAAe,CACtB,OAAgC,EAChC,WAAmB,EACnB,MAAc,EACd,IAAmB;IAEnB,OAAO,CACL,OAAO,CAAC,IAAI,KAAK,MAAM;QACvB,OAAO,CAAC,eAAe,KAAK,WAAW;QACvC,IAAI,KAAK,IAAI,CACd,CAAC;AACJ,CAAC;AACD,KAAK,UAAU,mBAAmB,CAChC,IAAY,EACZ,WAAmB,EACnB,MAAc,EACd,KAAa;IAEb,MAAM,OAAO,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAC1C,MAAM,IAAI,GACR,OAAO,OAAO,CAAC,aAAa,KAAK,QAAQ;QACvC,CAAC,CAAC,MAAM,QAAQ,CAAC,OAAO,CAAC,aAAa,CAAC;QACvC,CAAC,CAAC,IAAI,CAAC;IACX,IACE,CAAC,eAAe,CAAC,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,CAAC;QACpD,IAAI,KAAK,IAAI;QACb,CAAC,MAAM,CAAC,MAAM,QAAQ,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC;QAEpC,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,OAAO,IAAI,CAAC;AACd,CAAC;AACD,KAAK,UAAU,yBAAyB,CACtC,OAAgB,EAChB,MAAc,EACd,IAAY;IAEZ,MAAM,QAAQ,GAAG,OAAO,CAAC,uBAAuB,CAAC;IACjD,IAAI,QAAQ,EAAE,UAAU,KAAK,MAAM;QAAE,OAAO;IAC5C,MAAM,KAAK,GAAG,MAAM,IAAI,CACtB,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC,CACrD,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IACpB,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE;QAClB,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;AAC3E,CAAC","sourcesContent":["import type { Dirent } from \"node:fs\";\nimport { readFile, readdir, realpath, stat } from \"node:fs/promises\";\nimport { join, relative, sep } from \"node:path\";\nimport { insideRoot as inside } from \"../paths\";\nimport { fixtureParts } from \"../fixtures/preparation\";\nimport type { HostAdapter } from \"../engine\";\nimport { runCodexProcess } from \"./codex-process\";\nimport { isRecord, isUnknownArray } from \"../value-guards\";\nimport type { HostDiagnostics } from \"../host-diagnostics\";\ntype Request = Parameters<HostAdapter[\"run\"]>[0];\ntype Declaration = NonNullable<Request[\"codexMarketplace\"]>;\ninterface InstallContext {\n  binary: string;\n  env: Record<string, string>;\n  pluginCacheRoot: string;\n  request: Request;\n  diagnostics: HostDiagnostics;\n}\n\nfunction validPluginNames(declaration: Declaration): boolean {\n  const names = declaration.pluginNames;\n  return (\n    /^[a-z][a-z0-9-]*$/.test(declaration.marketplaceName) &&\n    names.length > 0 &&\n    names.every((name) => /^[a-z][a-z0-9-]*$/.test(name)) &&\n    new Set(names).size === names.length\n  );\n}\nfunction validArtifactPaths(\n  declaration: Declaration,\n  paths: Set<string>,\n): boolean {\n  return (\n    declaration.artifactPaths.length > 0 &&\n    paths.size === declaration.artifactPaths.length &&\n    declaration.artifactPaths.every(\n      (path) =>\n        path.startsWith(`${declaration.artifactRoot}/`) &&\n        fixtureParts(path).join(\"/\") === path,\n    )\n  );\n}\n\nasync function marketplaceRoot(\n  workspace: string,\n  declaration: Declaration,\n): Promise<string> {\n  const paths = new Set(declaration.artifactPaths);\n  if (!validPluginNames(declaration) || !validArtifactPaths(declaration, paths))\n    throw new Error(\"invalid Codex marketplace declaration\");\n  const root = join(workspace, ...fixtureParts(declaration.artifactRoot));\n  const actualWorkspace = await realpath(workspace),\n    actualRoot = await realpath(root);\n  if (!inside(actualWorkspace, actualRoot) || actualRoot === actualWorkspace)\n    throw new Error(\"Codex marketplace escapes the workspace\");\n  await verifyMarketplaceManifest(actualRoot, declaration);\n  await verifyMaterializedPackage(actualRoot, declaration.artifactRoot, paths);\n  return actualRoot;\n}\n\nfunction objectRecord(\n  value: unknown,\n  message: string,\n): Record<string, unknown> {\n  if (!value || typeof value !== \"object\") throw new Error(message);\n  // JSON arrays also have unknown-valued object properties; field validation follows.\n  return value as Record<string, unknown>;\n}\nasync function marketplaceManifest(\n  root: string,\n): Promise<Record<string, unknown>> {\n  let value: unknown;\n  try {\n    value = JSON.parse(\n      await readFile(join(root, \".claude-plugin\", \"marketplace.json\"), \"utf8\"),\n    );\n  } catch (error) {\n    throw new Error(\"Codex marketplace manifest is unreadable\", {\n      cause: error,\n    });\n  }\n  return objectRecord(value, \"invalid Codex marketplace manifest\");\n}\nasync function verifyMarketplaceManifest(\n  root: string,\n  declaration: Declaration,\n): Promise<void> {\n  const document = await marketplaceManifest(root);\n  const plugins = document.plugins;\n  if (\n    document.name !== declaration.marketplaceName ||\n    !isUnknownArray(plugins) ||\n    plugins.length !== declaration.pluginNames.length\n  )\n    throw new Error(\"Codex marketplace manifest does not match declaration\");\n  const found = new Set<string>();\n  for (const entry of plugins)\n    await verifyLocalPlugin(entry, declaration.pluginNames, found, root);\n}\nfunction declaredName(\n  name: unknown,\n  names: string[],\n  found: Set<string>,\n): name is string {\n  return typeof name === \"string\" && names.includes(name) && !found.has(name);\n}\nfunction localSource(source: unknown): source is string {\n  return typeof source === \"string\" && source.startsWith(\"./\");\n}\nasync function verifyLocalPlugin(\n  entry: unknown,\n  names: string[],\n  found: Set<string>,\n  root: string,\n): Promise<void> {\n  const plugin = objectRecord(entry, \"invalid Codex marketplace plugin\");\n  if (!declaredName(plugin.name, names, found) || !localSource(plugin.source))\n    throw new Error(\"Codex marketplace plugin is not a declared local source\");\n  found.add(plugin.name);\n  const source = join(root, ...fixtureParts(plugin.source.slice(2)));\n  if (!inside(root, await realpath(source)))\n    throw new Error(\"Codex marketplace plugin escapes its artifact root\");\n}\n\ninterface PackageState {\n  pending: string[];\n  seen: Set<string>;\n  expected: Set<string>;\n  root: string;\n  artifactRoot: string;\n}\nasync function verifyMaterializedPackage(\n  root: string,\n  artifactRoot: string,\n  expected: Set<string>,\n): Promise<void> {\n  const state: PackageState = {\n    pending: [root],\n    seen: new Set(),\n    expected,\n    root,\n    artifactRoot,\n  };\n  while (state.pending.length) {\n    const directory = state.pending.pop();\n    if (directory === undefined) break;\n    for (const entry of await readdir(directory, { withFileTypes: true }))\n      verifyPackageEntry(directory, entry, state);\n  }\n  if (state.seen.size !== expected.size)\n    throw new Error(\"Codex marketplace package is missing declared files\");\n}\nfunction verifyPackageEntry(\n  directory: string,\n  entry: Dirent,\n  state: PackageState,\n): void {\n  if (entry.isSymbolicLink())\n    throw new Error(\"Codex marketplace package contains a symlink\");\n  if (entry.isDirectory()) {\n    state.pending.push(join(directory, entry.name));\n    return;\n  }\n  if (!entry.isFile())\n    throw new Error(\"Codex marketplace package contains a special file\");\n  const path = `${state.artifactRoot}/${relative(state.root, join(directory, entry.name)).split(sep).join(\"/\")}`;\n  if (!state.expected.has(path))\n    throw new Error(\"Codex marketplace package contains undeclared files\");\n  state.seen.add(path);\n}\n\nasync function pluginCommand(context: InstallContext, args: string[]) {\n  const result = await runCodexProcess({\n    diagnostics: context.diagnostics,\n    argv: [context.binary, \"plugin\", ...args, \"--json\"],\n    cwd: context.request.workspace,\n    env: context.env,\n    timeoutMs: 30_000,\n    signal: context.request.signal,\n  });\n  return result;\n}\nexport async function installCodexPlugins(\n  context: InstallContext,\n): Promise<string[]> {\n  const declaration = context.request.codexMarketplace;\n  if (!declaration) return [];\n  context.diagnostics.stage = \"marketplace-validation\";\n  const root = await marketplaceRoot(context.request.workspace, declaration);\n  context.diagnostics.stage = \"marketplace-install\";\n  const added = await pluginCommand(context, [\"marketplace\", \"add\", root]);\n  if (added.code !== 0)\n    throw new Error(\"Codex local marketplace installation failed\");\n  const installed: string[] = [];\n  for (const plugin of declaration.pluginNames)\n    installed.push(await installPlugin(context, declaration, plugin));\n  return installed;\n}\nasync function installPlugin(\n  context: InstallContext,\n  declaration: Declaration,\n  pluginName: string,\n): Promise<string> {\n  context.diagnostics.stage = \"plugin-install\";\n  const installed = await pluginCommand(context, [\n    \"add\",\n    `${pluginName}@${declaration.marketplaceName}`,\n  ]);\n  if (installed.code !== 0)\n    throw new Error(\"Codex local plugin installation failed\");\n  context.diagnostics.stage = \"plugin-receipt\";\n  const path = await installedPluginPath(\n    installed.out,\n    declaration.marketplaceName,\n    pluginName,\n    context.pluginCacheRoot,\n  );\n  await verifyInstalledInvocation(context.request, pluginName, path);\n  return path;\n}\nfunction installationReceipt(text: string): Record<string, unknown> {\n  let value: unknown;\n  try {\n    value = JSON.parse(text);\n  } catch (error) {\n    throw new Error(\"Codex plugin installation receipt is invalid\", {\n      cause: error,\n    });\n  }\n  if (!isRecord(value))\n    throw new Error(\"Codex plugin installation receipt is invalid\");\n  return value;\n}\nfunction matchingReceipt(\n  receipt: Record<string, unknown>,\n  marketplace: string,\n  plugin: string,\n  path: string | null,\n): boolean {\n  return (\n    receipt.name === plugin &&\n    receipt.marketplaceName === marketplace &&\n    path !== null\n  );\n}\nasync function installedPluginPath(\n  text: string,\n  marketplace: string,\n  plugin: string,\n  cache: string,\n): Promise<string> {\n  const receipt = installationReceipt(text);\n  const path =\n    typeof receipt.installedPath === \"string\"\n      ? await realpath(receipt.installedPath)\n      : null;\n  if (\n    !matchingReceipt(receipt, marketplace, plugin, path) ||\n    path === null ||\n    !inside(await realpath(cache), path)\n  )\n    throw new Error(\"Codex plugin installation receipt is invalid\");\n  return path;\n}\nasync function verifyInstalledInvocation(\n  request: Request,\n  plugin: string,\n  path: string,\n): Promise<void> {\n  const selected = request.explicitSkillInvocation;\n  if (selected?.pluginName !== plugin) return;\n  const skill = await stat(\n    join(path, \"skills\", selected.skillName, \"SKILL.md\"),\n  ).catch(() => null);\n  if (!skill?.isFile())\n    throw new Error(\"invoked Codex skill is absent from the installation\");\n}\n"]}