@chengchenccc/oh-my-agent 0.1.1-rc.1

package/dist/core/plugins/plugin-code.js

@@ -0,0 +1,62 @@
+import { join } from "node:path";
+import { pathToFileURL } from "node:url";
+const KNOWN_HOOK_KEYS = new Set([
+    "beforeRun",
+    "afterRun",
+    "beforeModel",
+    "afterModel",
+    "beforeTool",
+    "afterTool",
+    "transformToolArgs",
+    "beforeStop",
+    "afterStop",
+]);
+function isPluginToolLike(v) {
+    if (typeof v !== "object" || v === null)
+        return false;
+    const t = v;
+    return (typeof t.name === "string" &&
+        typeof t.description === "string" &&
+        typeof t.execute === "function");
+}
+/** Load ONE code entry (tools or hooks) from an installed plugin root.
+ *  Never throws: any failure degrades to {ok:false, error} (spec failure
+ *  semantics — a broken plugin must never fail the Run). */
+export async function loadPluginCode(root, entry) {
+    const file = join(root, entry);
+    let mod;
+    try {
+        // Bun-native dynamic import: TS transpiles natively, no jiti (spec).
+        // The import itself executes module top-level code — plugin bugs surface
+        // here as caught errors, not oma crashes.
+        mod = (await import(pathToFileURL(file).href));
+    }
+    catch (err) {
+        return {
+            ok: false,
+            warnings: [],
+            error: `failed to import ${entry}: ${err instanceof Error ? err.message : String(err)}`,
+        };
+    }
+    const warnings = [];
+    const toolsExport = mod.tools ?? mod.default;
+    if (toolsExport !== undefined) {
+        if (!Array.isArray(toolsExport) || !toolsExport.every(isPluginToolLike)) {
+            return { ok: false, warnings, error: `${entry}: tools export must be PluginTool[]` };
+        }
+        return { ok: true, tools: toolsExport, warnings };
+    }
+    const hooksExport = mod.hooks ?? mod.default;
+    if (typeof hooksExport === "object" && hooksExport !== null) {
+        const src = hooksExport;
+        const hooks = {};
+        for (const [k, v] of Object.entries(src)) {
+            if (KNOWN_HOOK_KEYS.has(k))
+                hooks[k] = v;
+            else
+                warnings.push(`${entry}: unknown hook key "${k}" ignored`);
+        }
+        return { ok: true, hooks: hooks, warnings };
+    }
+    return { ok: false, warnings, error: `${entry}: no tools/hooks export found` };
+}

package/dist/core/plugins/plugin-marketplace.d.ts

@@ -0,0 +1,72 @@
+export interface PluginManifest {
+    readonly name: string;
+    readonly version?: string;
+    readonly description?: string;
+    /** Relative directory containing SKILL.md bundles (default "skills"). */
+    readonly skills?: string;
+    /** Relative directory containing markdown slash commands (reserved). */
+    readonly commands?: string;
+    /** oma code entry (spec): module exporting PluginTool[] (default export ok). */
+    readonly toolsEntry?: string;
+    /** oma code entry (spec): module exporting PluginHooks (default export ok). */
+    readonly hooksEntry?: string;
+    /** Non-fatal conflict/compat notes surfaced to the user (spec conflict matrix). */
+    readonly warnings: readonly string[];
+}
+export interface MarketplacePluginEntry {
+    readonly name: string;
+    readonly path: string;
+    readonly version?: string;
+}
+export interface MarketplaceManifest {
+    readonly name: string;
+    readonly plugins: readonly MarketplacePluginEntry[];
+}
+export interface MarketplaceRecord {
+    readonly name: string;
+    readonly source: string;
+    readonly root: string;
+    /** Version fingerprint (git HEAD, zip hash) from the base source-fetch.
+     *  Absent for local directories (no immutable source). */
+    readonly version?: string;
+}
+export interface InstalledPlugin {
+    readonly name: string;
+    readonly version?: string;
+    readonly description?: string;
+    readonly sourceMarketplace: string;
+    readonly scope: "user" | "project";
+    readonly enabled: boolean;
+    readonly root: string;
+    readonly skillsDir?: string;
+    /** oma code entry (spec): module exporting PluginTool[]. */
+    readonly toolsEntry?: string;
+    /** oma code entry (spec): module exporting PluginHooks. */
+    readonly hooksEntry?: string;
+    /** Plugin bundles a .mcp.json (mounted via mcp-mount when trusted). */
+    readonly hasMcpJson?: boolean;
+    /** Non-fatal manifest conflict notes (spec conflict matrix); always set by
+     *  listInstalledPlugins, absent in persisted registry records. */
+    readonly manifestWarnings?: readonly string[];
+}
+export declare function loadMarketplaceManifest(root: string): MarketplaceManifest | null;
+/** Multi-source manifest read (spec: oma plugin.json → .claude-plugin/plugin.json
+ *  → package.json omp/pi field) with the conflict matrix. */
+export declare function loadPluginManifest(pluginRoot: string): PluginManifest | null;
+export declare function listMarketplaces(workspaceRoot: string): MarketplaceRecord[];
+export declare function addMarketplace(workspaceRoot: string, source: string, scope?: "user" | "project"): {
+    ok: boolean;
+    error?: string;
+    name?: string;
+};
+export declare function removeMarketplace(workspaceRoot: string, name: string): boolean;
+export declare function listInstalledPlugins(workspaceRoot: string): InstalledPlugin[];
+export declare function installPlugin(workspaceRoot: string, ref: string, scope?: "user" | "project"): {
+    ok: boolean;
+    error?: string;
+};
+export declare function uninstallPlugin(workspaceRoot: string, name: string): boolean;
+export declare function setPluginEnabled(workspaceRoot: string, name: string, enabled: boolean): boolean;
+/** Skill roots contributed by enabled installed plugins. */
+export declare function enabledPluginSkillRoots(workspaceRoot: string): string[];
+//# sourceMappingURL=plugin-marketplace.d.ts.map

package/dist/core/plugins/plugin-marketplace.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-marketplace.d.ts","sourceRoot":"","sources":["../../../src/core/plugins/plugin-marketplace.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,yEAAyE;IACzE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,wEAAwE;IACxE,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,gFAAgF;IAChF,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,+EAA+E;IAC/E,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,mFAAmF;IACnF,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;CACtC;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,SAAS,sBAAsB,EAAE,CAAC;CACrD;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB;8DAC0D;IAC1D,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,4DAA4D;IAC5D,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,2DAA2D;IAC3D,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,uEAAuE;IACvE,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC;IAC9B;sEACkE;IAClE,QAAQ,CAAC,gBAAgB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC/C;AAqFD,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,mBAAmB,GAAG,IAAI,CAUhF;AAmBD;6DAC6D;AAC7D,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI,CA4D5E;AA4BD,wBAAgB,gBAAgB,CAAC,aAAa,EAAE,MAAM,GAAG,iBAAiB,EAAE,CAO3E;AAED,wBAAgB,cAAc,CAC5B,aAAa,EAAE,MAAM,EACrB,MAAM,EAAE,MAAM,EACd,KAAK,GAAE,MAAM,GAAG,SAAkB,GACjC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,CA0BhD;AAED,wBAAgB,iBAAiB,CAAC,aAAa,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAe9E;AAED,wBAAgB,oBAAoB,CAAC,aAAa,EAAE,MAAM,GAAG,eAAe,EAAE,CAuB7E;AAED,wBAAgB,aAAa,CAC3B,aAAa,EAAE,MAAM,EACrB,GAAG,EAAE,MAAM,EACX,KAAK,GAAE,MAAM,GAAG,SAAkB,GACjC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAmCjC;AAED,wBAAgB,eAAe,CAAC,aAAa,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAiB5E;AAED,wBAAgB,gBAAgB,CAAC,aAAa,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAgB/F;AAED,4DAA4D;AAC5D,wBAAgB,uBAAuB,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM,EAAE,CAQvE"}

package/dist/core/plugins/plugin-marketplace.js

@@ -0,0 +1,340 @@
+import { cpSync, existsSync, mkdirSync, readFileSync, rmSync, writeFileSync } from "node:fs";
+import { join } from "node:path";
+import { fetchGitSourceSync } from "@chengchenccc/source-fetch";
+import { agentDir } from "../session/session-file.js";
+function userRegistryPath() {
+    return join(agentDir(), "plugins.json");
+}
+function projectRegistryPath(workspaceRoot) {
+    return join(workspaceRoot, ".oma", "plugins.json");
+}
+function readRegistry(path) {
+    if (!existsSync(path))
+        return { marketplaces: [], plugins: [] };
+    try {
+        const parsed = JSON.parse(readFileSync(path, "utf8"));
+        if (typeof parsed === "object" && parsed !== null) {
+            const obj = parsed;
+            const marketplaces = Array.isArray(obj.marketplaces) ? obj.marketplaces : [];
+            const plugins = Array.isArray(obj.plugins) ? obj.plugins : [];
+            return {
+                marketplaces: marketplaces.filter(isMarketplaceRecord),
+                plugins: plugins.filter(isInstalledPluginRecord),
+            };
+        }
+    }
+    catch {
+        /* corrupt registry: start empty */
+    }
+    return { marketplaces: [], plugins: [] };
+}
+function isMarketplaceRecord(v) {
+    if (typeof v !== "object" || v === null)
+        return false;
+    const o = v;
+    return typeof o.name === "string" && typeof o.source === "string" && typeof o.root === "string";
+}
+function isInstalledPluginRecord(v) {
+    if (typeof v !== "object" || v === null)
+        return false;
+    const o = v;
+    return (typeof o.name === "string" &&
+        typeof o.sourceMarketplace === "string" &&
+        (o.scope === "user" || o.scope === "project") &&
+        typeof o.enabled === "boolean" &&
+        typeof o.root === "string");
+}
+function writeRegistry(path, registry) {
+    mkdirSync(join(path, ".."), { recursive: true });
+    writeFileSync(path, `${JSON.stringify(registry, null, 2)}\n`);
+}
+function parseMarketplaceCatalog(o) {
+    const name = typeof o.name === "string" ? o.name : null;
+    const rawPlugins = Array.isArray(o.plugins) ? o.plugins : [];
+    const plugins = [];
+    for (const entry of rawPlugins) {
+        if (typeof entry !== "object" || entry === null)
+            continue;
+        const e = entry;
+        const entryName = typeof e.name === "string" ? e.name : null;
+        // oma catalogs use `path`; Claude catalogs use `source` ("./rel" form).
+        const pathLike = typeof e.path === "string"
+            ? e.path
+            : typeof e.source === "string" && e.source.startsWith("./")
+                ? e.source.slice(1)
+                : null;
+        if (!entryName || !pathLike)
+            continue;
+        plugins.push({ name: entryName, path: pathLike });
+    }
+    if (!name || plugins.length === 0)
+        return null;
+    return { name, plugins };
+}
+export function loadMarketplaceManifest(root) {
+    // oma catalog first; Claude catalog (`.claude-plugin/marketplace.json`) as
+    // fallback so existing Claude marketplaces keep loading (omp fetcher parity).
+    for (const rel of ["marketplace.json", join(".claude-plugin", "marketplace.json")]) {
+        const parsed = readJson(join(root, rel));
+        if (!parsed)
+            continue;
+        const manifest = parseMarketplaceCatalog(parsed);
+        if (manifest)
+            return manifest;
+    }
+    return null;
+}
+function readJson(path) {
+    if (!existsSync(path))
+        return null;
+    try {
+        const parsed = JSON.parse(readFileSync(path, "utf8"));
+        return typeof parsed === "object" && parsed !== null
+            ? parsed
+            : null;
+    }
+    catch {
+        return null;
+    }
+}
+function str(o, key) {
+    const v = o[key];
+    return typeof v === "string" ? v : undefined;
+}
+/** Multi-source manifest read (spec: oma plugin.json → .claude-plugin/plugin.json
+ *  → package.json omp/pi field) with the conflict matrix. */
+export function loadPluginManifest(pluginRoot) {
+    const warnings = [];
+    const oma = readJson(join(pluginRoot, "plugin.json"));
+    const claude = readJson(join(pluginRoot, ".claude-plugin", "plugin.json"));
+    const pkg = readJson(join(pluginRoot, "package.json"));
+    const ompField = pkg ? (pkg.omp ?? pkg.pi) : undefined;
+    const omp = typeof ompField === "object" && ompField !== null
+        ? ompField
+        : null;
+    const primary = oma ?? claude ?? (pkg && str(pkg, "name") ? { name: str(pkg, "name") } : null);
+    if (!primary || typeof primary.name !== "string")
+        return null;
+    if (oma && claude) {
+        warnings.push("dual manifest: oma plugin.json wins; .claude-plugin/plugin.json fills missing metadata only");
+    }
+    if (omp) {
+        if (typeof omp.tools === "string" || typeof omp.hooks === "string") {
+            warnings.push("omp/pi manifest code entries (tools/hooks) are not executed by oma; provide oma plugin.json tools/hooks entries instead");
+        }
+    }
+    if (claude?.hooks !== undefined) {
+        warnings.push("claude hooks config detected and ignored: hooks run through the oma hooks entry only");
+    }
+    if (claude?.commands !== undefined)
+        warnings.push("claude commands/ component ignored");
+    if (claude?.agents !== undefined)
+        warnings.push("claude agents/ component ignored");
+    const result = { name: primary.name, warnings };
+    const fill = (src) => {
+        if (!src)
+            return;
+        result.version ??= str(src, "version");
+        result.description ??= str(src, "description");
+        result.skills ??= str(src, "skills");
+    };
+    fill(oma);
+    fill(claude);
+    fill(pkg);
+    // oma-only code entries — never sourced from omp/claude fields (spec).
+    if (oma) {
+        const t = str(oma, "tools");
+        if (t)
+            result.toolsEntry = t;
+        const h = str(oma, "hooks");
+        if (h)
+            result.hooksEntry = h;
+    }
+    return result;
+}
+function marketplaceSourceToRoot(source) {
+    if (existsSync(source)) {
+        return { root: source, ok: true };
+    }
+    const cacheDir = join(agentDir(), "marketplace-cache");
+    const slug = source.replace(/[^a-zA-Z0-9_.-]/g, "-").slice(0, 80);
+    try {
+        // Shared base (spec: marketplace cache reuses the public source-fetch
+        // primitive; no backend coupling). rev is the git HEAD — retained for
+        // future cache keying even though the local registry doesn't store it.
+        const { root, rev } = fetchGitSourceSync({ url: source, dataDir: cacheDir, slug });
+        return { root, ok: true, rev };
+    }
+    catch (err) {
+        return {
+            root: join(cacheDir, slug),
+            ok: false,
+            error: err instanceof Error ? err.message : `failed to clone ${source}`,
+        };
+    }
+}
+export function listMarketplaces(workspaceRoot) {
+    const user = readRegistry(userRegistryPath());
+    const project = readRegistry(projectRegistryPath(workspaceRoot));
+    const byName = new Map();
+    for (const m of user.marketplaces)
+        byName.set(m.name, m);
+    for (const m of project.marketplaces)
+        byName.set(m.name, m);
+    return Array.from(byName.values());
+}
+export function addMarketplace(workspaceRoot, source, scope = "user") {
+    // Local dirs have no immutable fingerprint; git/url sources get the
+    // base-fetch rev cached into the record for version display/update.
+    const { root, ok, error, rev: sourceRev } = marketplaceSourceToRoot(source);
+    if (!ok)
+        return { ok: false, error };
+    const manifest = loadMarketplaceManifest(root);
+    if (!manifest)
+        return { ok: false, error: `no marketplace.json in ${root}` };
+    const path = scope === "user" ? userRegistryPath() : projectRegistryPath(workspaceRoot);
+    const registry = readRegistry(path);
+    const existing = registry.marketplaces.find((m) => m.name === manifest.name);
+    if (existing) {
+        registry.marketplaces = registry.marketplaces.map((m) => m.name === manifest.name
+            ? { name: m.name, source, root, ...(sourceRev ? { version: sourceRev } : {}) }
+            : m);
+    }
+    else {
+        registry.marketplaces.push({
+            name: manifest.name,
+            source,
+            root,
+            ...(sourceRev ? { version: sourceRev } : {}),
+        });
+    }
+    writeRegistry(path, registry);
+    return { ok: true, name: manifest.name };
+}
+export function removeMarketplace(workspaceRoot, name) {
+    let removed = false;
+    for (const [, path] of [
+        ["user", userRegistryPath()],
+        ["project", projectRegistryPath(workspaceRoot)],
+    ]) {
+        const registry = readRegistry(path);
+        const before = registry.marketplaces.length;
+        registry.marketplaces = registry.marketplaces.filter((m) => m.name !== name);
+        if (registry.marketplaces.length !== before) {
+            writeRegistry(path, registry);
+            removed = true;
+        }
+    }
+    return removed;
+}
+export function listInstalledPlugins(workspaceRoot) {
+    const user = readRegistry(userRegistryPath());
+    const project = readRegistry(projectRegistryPath(workspaceRoot));
+    const byName = new Map();
+    for (const p of [...user.plugins, ...project.plugins]) {
+        if (p.scope === "user")
+            byName.set(p.name, p);
+    }
+    for (const p of project.plugins) {
+        if (p.scope === "project")
+            byName.set(p.name, p);
+    }
+    return Array.from(byName.values()).map((p) => {
+        const manifest = loadPluginManifest(p.root);
+        return {
+            ...p,
+            description: manifest?.description,
+            version: manifest?.version ?? p.version,
+            skillsDir: manifest?.skills ? join(p.root, manifest.skills) : join(p.root, "skills"),
+            toolsEntry: manifest?.toolsEntry,
+            hooksEntry: manifest?.hooksEntry,
+            hasMcpJson: existsSync(join(p.root, ".mcp.json")),
+            manifestWarnings: manifest?.warnings ?? [],
+        };
+    });
+}
+export function installPlugin(workspaceRoot, ref, scope = "user") {
+    const slash = ref.indexOf("/");
+    if (slash <= 0)
+        return { ok: false, error: "usage: /plugin install <marketplace>/<plugin>" };
+    const marketplaceName = ref.slice(0, slash);
+    const pluginName = ref.slice(slash + 1);
+    const marketplace = listMarketplaces(workspaceRoot).find((m) => m.name === marketplaceName);
+    if (!marketplace)
+        return { ok: false, error: `marketplace not found: ${marketplaceName}` };
+    const manifest = loadMarketplaceManifest(marketplace.root);
+    const entry = manifest?.plugins.find((p) => p.name === pluginName);
+    if (!entry)
+        return { ok: false, error: `plugin not found: ${pluginName}` };
+    const sourceRoot = join(marketplace.root, entry.path);
+    const pluginManifest = loadPluginManifest(sourceRoot);
+    if (!pluginManifest)
+        return { ok: false, error: `no plugin.json in ${sourceRoot}` };
+    const installRoot = scope === "user"
+        ? join(agentDir(), "plugins", pluginName)
+        : join(workspaceRoot, ".oma", "plugins", pluginName);
+    if (existsSync(installRoot))
+        rmSync(installRoot, { recursive: true, force: true });
+    mkdirSync(join(installRoot, ".."), { recursive: true });
+    cpSync(sourceRoot, installRoot, { recursive: true });
+    const path = scope === "user" ? userRegistryPath() : projectRegistryPath(workspaceRoot);
+    const registry = readRegistry(path);
+    registry.plugins = registry.plugins.filter((p) => !(p.name === pluginName && p.scope === scope));
+    registry.plugins.push({
+        name: pluginName,
+        version: pluginManifest.version,
+        sourceMarketplace: marketplaceName,
+        scope,
+        enabled: true,
+        root: installRoot,
+    });
+    writeRegistry(path, registry);
+    return { ok: true };
+}
+export function uninstallPlugin(workspaceRoot, name) {
+    let removed = false;
+    for (const [scope, path] of [
+        ["user", userRegistryPath()],
+        ["project", projectRegistryPath(workspaceRoot)],
+    ]) {
+        const registry = readRegistry(path);
+        const before = registry.plugins.length;
+        const removedPlugin = registry.plugins.find((p) => p.name === name && p.scope === scope);
+        registry.plugins = registry.plugins.filter((p) => !(p.name === name && p.scope === scope));
+        if (registry.plugins.length !== before) {
+            writeRegistry(path, registry);
+            if (removedPlugin)
+                rmSync(removedPlugin.root, { recursive: true, force: true });
+            removed = true;
+        }
+    }
+    return removed;
+}
+export function setPluginEnabled(workspaceRoot, name, enabled) {
+    let changed = false;
+    for (const [scope, path] of [
+        ["user", userRegistryPath()],
+        ["project", projectRegistryPath(workspaceRoot)],
+    ]) {
+        const registry = readRegistry(path);
+        const rec = registry.plugins.find((p) => p.name === name && p.scope === scope);
+        if (!rec || rec.enabled === enabled)
+            continue;
+        registry.plugins = registry.plugins.map((p) => p.name === name && p.scope === scope ? { ...p, enabled } : p);
+        writeRegistry(path, registry);
+        changed = true;
+    }
+    return changed;
+}
+/** Skill roots contributed by enabled installed plugins. */
+export function enabledPluginSkillRoots(workspaceRoot) {
+    const plugins = listInstalledPlugins(workspaceRoot);
+    const roots = [];
+    for (const p of plugins) {
+        if (!p.enabled || !p.skillsDir)
+            continue;
+        if (existsSync(p.skillsDir))
+            roots.push(p.skillsDir);
+    }
+    return roots;
+}

package/dist/core/plugins/plugin-resolve.d.ts

@@ -0,0 +1,32 @@
+import type { Plugin } from "../runtime/plugin.js";
+export type OmaMode = "tui" | "print" | "json" | "rpc";
+export interface CodeEntry {
+    readonly name: string;
+    readonly root: string;
+    readonly toolsEntry?: string;
+    readonly hooksEntry?: string;
+}
+/** A plugin's .mcp.json servers, gated identically to code entries. */
+export interface PluginMcpConfig {
+    readonly pluginName: string;
+    readonly pluginRoot: string;
+    readonly scope: "user" | "project";
+    readonly servers: Record<string, unknown>;
+}
+export interface ResolvedComponents {
+    readonly codeEntries: readonly CodeEntry[];
+    readonly mcpServers: readonly PluginMcpConfig[];
+    readonly warnings: readonly string[];
+}
+/** Policy layer (spec): scope x mode trust matrix. Pure — no imports, no
+ *  code loading. The runtime never sees this; it only mounts what wins. */
+export declare function resolvePluginComponents(workspaceRoot: string, mode: OmaMode): ResolvedComponents;
+export interface AssembledPluginRuntime {
+    readonly plugins: readonly Plugin[];
+    readonly mcpServers: readonly PluginMcpConfig[];
+    readonly warnings: readonly string[];
+}
+/** Mode-layer entry: resolve policy + load approved code. The ONLY function
+ *  modes call (spec: policy in mode layer, runtime mounts only). */
+export declare function assemblePluginRuntime(workspaceRoot: string, mode: OmaMode): Promise<AssembledPluginRuntime>;
+//# sourceMappingURL=plugin-resolve.d.ts.map

package/dist/core/plugins/plugin-resolve.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-resolve.d.ts","sourceRoot":"","sources":["../../../src/core/plugins/plugin-resolve.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,MAAM,EAA2B,MAAM,sBAAsB,CAAC;AAI5E,MAAM,MAAM,OAAO,GAAG,KAAK,GAAG,OAAO,GAAG,MAAM,GAAG,KAAK,CAAC;AAEvD,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,uEAAuE;AACvE,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC3C;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,WAAW,EAAE,SAAS,SAAS,EAAE,CAAC;IAC3C,QAAQ,CAAC,UAAU,EAAE,SAAS,eAAe,EAAE,CAAC;IAChD,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;CACtC;AAeD;2EAC2E;AAC3E,wBAAgB,uBAAuB,CAAC,aAAa,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,kBAAkB,CAsChG;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,UAAU,EAAE,SAAS,eAAe,EAAE,CAAC;IAChD,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;CACtC;AAED;oEACoE;AACpE,wBAAsB,qBAAqB,CACzC,aAAa,EAAE,MAAM,EACrB,IAAI,EAAE,OAAO,GACZ,OAAO,CAAC,sBAAsB,CAAC,CAwCjC"}

package/dist/core/plugins/plugin-resolve.js

@@ -0,0 +1,101 @@
+import { existsSync, readFileSync } from "node:fs";
+import { join } from "node:path";
+import { loadPluginCode } from "./plugin-code.js";
+import { listInstalledPlugins } from "./plugin-marketplace.js";
+import { isFileTrusted, isPluginTrusted, readTrustedPlugins } from "./plugin-trust.js";
+function readPluginMcp(root) {
+    const path = join(root, ".mcp.json");
+    if (!existsSync(path))
+        return null;
+    try {
+        const parsed = JSON.parse(readFileSync(path, "utf8"));
+        return parsed.mcpServers ?? null;
+    }
+    catch {
+        return null;
+    }
+}
+/** Policy layer (spec): scope x mode trust matrix. Pure — no imports, no
+ *  code loading. The runtime never sees this; it only mounts what wins. */
+export function resolvePluginComponents(workspaceRoot, mode) {
+    const warnings = [];
+    const trusted = readTrustedPlugins();
+    const codeEntries = [];
+    const mcpServers = [];
+    for (const p of listInstalledPlugins(workspaceRoot)) {
+        if (!p.enabled)
+            continue;
+        warnings.push(...(p.manifestWarnings ?? []).map((w) => `${p.name}: ${w}`));
+        const hasCode = Boolean(p.toolsEntry || p.hooksEntry);
+        const mcp = p.hasMcpJson ? readPluginMcp(p.root) : null;
+        if (!hasCode && !mcp)
+            continue;
+        if (p.scope === "project") {
+            if (mode === "rpc") {
+                warnings.push(`${p.name}: project-scope code components never load in rpc mode`);
+                continue;
+            }
+            if (!isPluginTrusted(p.root, trusted)) {
+                warnings.push(`${p.name}: project-scope code components untrusted (hash mismatch or no record); run /plugin trust ${p.name} to approve`);
+                continue;
+            }
+        }
+        if (hasCode) {
+            codeEntries.push({
+                name: p.name,
+                root: p.root,
+                ...(p.toolsEntry ? { toolsEntry: p.toolsEntry } : {}),
+                ...(p.hooksEntry ? { hooksEntry: p.hooksEntry } : {}),
+            });
+        }
+        if (mcp) {
+            mcpServers.push({ pluginName: p.name, pluginRoot: p.root, scope: p.scope, servers: mcp });
+        }
+    }
+    return { codeEntries, mcpServers, warnings };
+}
+/** Mode-layer entry: resolve policy + load approved code. The ONLY function
+ *  modes call (spec: policy in mode layer, runtime mounts only). */
+export async function assemblePluginRuntime(workspaceRoot, mode) {
+    const resolved = resolvePluginComponents(workspaceRoot, mode);
+    const warnings = [...resolved.warnings];
+    // Standalone trust gate (spec follow-up): the workspace's own .mcp.json is
+    // repo-controlled; untrusted content mounts nothing (run-runtime enforces)
+    // and the warning tells the user how to approve it. RPC skips this — the
+    // product writes that file.
+    if (mode !== "rpc") {
+        const mcpJsonPath = join(workspaceRoot, ".mcp.json");
+        if (existsSync(mcpJsonPath) && !isFileTrusted(mcpJsonPath, readTrustedPlugins())) {
+            warnings.push("workspace .mcp.json untrusted: servers not mounted; run /mcp trust to approve this file");
+        }
+    }
+    const plugins = [];
+    for (const entry of resolved.codeEntries) {
+        const tools = [];
+        let hooks;
+        if (entry.toolsEntry) {
+            const r = await loadPluginCode(entry.root, entry.toolsEntry);
+            if (r.ok && r.tools)
+                tools.push(...r.tools);
+            else
+                warnings.push(`${entry.name}: ${r.error ?? "tools entry failed"}`);
+            warnings.push(...r.warnings.map((w) => `${entry.name}: ${w}`));
+        }
+        if (entry.hooksEntry) {
+            const r = await loadPluginCode(entry.root, entry.hooksEntry);
+            if (r.ok && r.hooks)
+                hooks = r.hooks;
+            else
+                warnings.push(`${entry.name}: ${r.error ?? "hooks entry failed"}`);
+            warnings.push(...r.warnings.map((w) => `${entry.name}: ${w}`));
+        }
+        if (tools.length > 0 || hooks) {
+            plugins.push({
+                name: `plugin:${entry.name}`,
+                ...(tools.length > 0 ? { tools } : {}),
+                ...(hooks ? { hooks } : {}),
+            });
+        }
+    }
+    return { plugins, mcpServers: resolved.mcpServers, warnings };
+}

package/dist/core/plugins/plugin-trust.d.ts

@@ -0,0 +1,24 @@
+export interface TrustRecord {
+    readonly hash: string;
+    readonly trustedAt: string;
+}
+export type TrustedPlugins = Map<string, TrustRecord>;
+/** Directory hash (spec): recursive sha256 over sorted (relpath, fileHash)
+ *  pairs, excluding node_modules. */
+export declare function computePluginHash(pluginRoot: string): string;
+/** Corrupt file = empty map (all untrusted) — never throws (spec failure
+ *  semantics). */
+export declare function readTrustedPlugins(): TrustedPlugins;
+export declare function writeTrustedPlugins(map: TrustedPlugins): void;
+/** Record explicit user trust for a plugin root at its current hash. */
+export declare function trustPlugin(pluginRoot: string): void;
+/** Trust decision: approved only when the recorded hash matches the
+ *  current content hash (any file change re-untrusts). */
+export declare function isPluginTrusted(pluginRoot: string, trusted: TrustedPlugins): boolean;
+/** Content hash of a single file (workspace .mcp.json gating). */
+export declare function computeFileHash(path: string): string;
+/** Record explicit user trust for a single file at its current hash. */
+export declare function trustFile(path: string): void;
+/** File trust decision: recorded hash must match current content. */
+export declare function isFileTrusted(path: string, trusted: TrustedPlugins): boolean;
+//# sourceMappingURL=plugin-trust.d.ts.map

package/dist/core/plugins/plugin-trust.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-trust.d.ts","sourceRoot":"","sources":["../../../src/core/plugins/plugin-trust.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,MAAM,cAAc,GAAG,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;AAMtD;qCACqC;AACrC,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAoB5D;AAED;kBACkB;AAClB,wBAAgB,kBAAkB,IAAI,cAAc,CAkBnD;AAED,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,cAAc,GAAG,IAAI,CAI7D;AAED,wEAAwE;AACxE,wBAAgB,WAAW,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAOpD;AAED;0DAC0D;AAC1D,wBAAgB,eAAe,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,GAAG,OAAO,CAGpF;AAED,kEAAkE;AAClE,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEpD;AAED,wEAAwE;AACxE,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAI5C;AAED,qEAAqE;AACrE,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,GAAG,OAAO,CAG5E"}