@clowder-ai/plugin-contract 0.1.0-beta.11 → 0.1.0-beta.13

package/dist/validation/catalog.js

@@ -0,0 +1,140 @@
+import { createRequire } from 'node:module';
+const require = createRequire(import.meta.url);
+const Ajv2020 = require('ajv/dist/2020');
+const addFormats = require('ajv-formats');
+const pluginMetadataSchema = require('@clowder-ai/plugin-contract/schemas/plugin-metadata');
+const catalogSchema = require('@clowder-ai/plugin-contract/schemas/catalog');
+const ajv = new Ajv2020({ allErrors: true, strict: false });
+addFormats(ajv);
+ajv.addSchema(pluginMetadataSchema, pluginMetadataSchema['$id']);
+const validateSchema = ajv.compile(catalogSchema);
+function semanticError(instancePath, schemaPath, keyword, message) {
+    return { valid: false, errors: [{ instancePath, schemaPath, keyword, message }] };
+}
+function parseSemVer(value) {
+    const buildIndex = value.indexOf('+');
+    const withoutBuild = buildIndex === -1 ? value : value.slice(0, buildIndex);
+    const prereleaseIndex = withoutBuild.indexOf('-');
+    const core = prereleaseIndex === -1 ? withoutBuild : withoutBuild.slice(0, prereleaseIndex);
+    const prerelease = prereleaseIndex === -1 ? '' : withoutBuild.slice(prereleaseIndex + 1);
+    const [major, minor, patch] = core.split('.');
+    return {
+        numbers: [major, minor, patch],
+        prerelease: prerelease === '' ? [] : prerelease.split('.'),
+    };
+}
+function compareAscii(left, right) {
+    return left < right ? -1 : left > right ? 1 : 0;
+}
+function compareNumericIdentifier(left, right) {
+    const lengthDelta = left.length - right.length;
+    return lengthDelta === 0 ? compareAscii(left, right) : lengthDelta;
+}
+function compareSemVer(left, right) {
+    const a = parseSemVer(left);
+    const b = parseSemVer(right);
+    for (let index = 0; index < a.numbers.length; index += 1) {
+        const delta = compareNumericIdentifier(a.numbers[index], b.numbers[index]);
+        if (delta !== 0)
+            return delta;
+    }
+    if (a.prerelease.length === 0 || b.prerelease.length === 0) {
+        return a.prerelease.length === b.prerelease.length ? 0 : a.prerelease.length === 0 ? 1 : -1;
+    }
+    const length = Math.max(a.prerelease.length, b.prerelease.length);
+    for (let index = 0; index < length; index += 1) {
+        const aPart = a.prerelease[index];
+        const bPart = b.prerelease[index];
+        if (aPart === undefined || bPart === undefined)
+            return aPart === undefined ? -1 : 1;
+        if (aPart === bPart)
+            continue;
+        const aNumeric = /^[0-9]+$/.test(aPart);
+        const bNumeric = /^[0-9]+$/.test(bPart);
+        if (aNumeric && bNumeric)
+            return compareNumericIdentifier(aPart, bPart);
+        if (aNumeric !== bNumeric)
+            return aNumeric ? -1 : 1;
+        return compareAscii(aPart, bPart);
+    }
+    return 0;
+}
+/** Validate repository-owned discovery truth without creating Host inventory state. */
+export function validatePluginCatalog(value) {
+    if (!validateSchema(value)) {
+        return {
+            valid: false,
+            errors: (validateSchema.errors ?? []).map((error) => ({
+                instancePath: error.instancePath,
+                schemaPath: error.schemaPath,
+                keyword: error.keyword,
+                message: error.message ?? 'catalog validation failed',
+            })),
+        };
+    }
+    const catalog = value;
+    const pluginIds = new Set();
+    let priorPluginId;
+    for (const [pluginIndex, plugin] of catalog.plugins.entries()) {
+        if (pluginIds.has(plugin.pluginId)) {
+            return semanticError(`/plugins/${pluginIndex}/pluginId`, '#/$defs/CatalogPluginEntry/uniquePluginIds', 'uniquePluginIds', 'pluginId must be declared at most once per catalog');
+        }
+        if (priorPluginId !== undefined && compareAscii(priorPluginId, plugin.pluginId) >= 0) {
+            return semanticError(`/plugins/${pluginIndex}/pluginId`, '#/properties/plugins/deterministicOrder', 'deterministicOrder', 'catalog plugins must be sorted by pluginId');
+        }
+        pluginIds.add(plugin.pluginId);
+        priorPluginId = plugin.pluginId;
+        let priorKeyword;
+        for (const [keywordIndex, keyword] of (plugin.keywords ?? []).entries()) {
+            if (priorKeyword !== undefined && compareAscii(priorKeyword, keyword) >= 0) {
+                return semanticError(`/plugins/${pluginIndex}/keywords/${keywordIndex}`, '#/$defs/CatalogPluginEntry/deterministicKeywordOrder', 'deterministicKeywordOrder', 'catalog keywords must be unique and sorted by ASCII code point');
+            }
+            priorKeyword = keyword;
+        }
+        const versions = new Set();
+        let priorVersion;
+        for (const [versionIndex, version] of plugin.versions.entries()) {
+            if (versions.has(version.version)) {
+                return semanticError(`/plugins/${pluginIndex}/versions/${versionIndex}/version`, '#/$defs/CatalogPluginVersion/uniqueVersions', 'uniqueVersions', 'version must be declared at most once per plugin');
+            }
+            if (version.artifact.version !== version.version) {
+                return semanticError(`/plugins/${pluginIndex}/versions/${versionIndex}/artifact/version`, '#/$defs/CatalogPluginVersion/artifactVersionMatches', 'artifactVersionMatches', 'artifact version must exactly match the catalog version');
+            }
+            const unscopedPackageName = version.artifact.packageName.slice(version.artifact.packageName.indexOf('/') + 1);
+            const expectedTarballUrl = `https://registry.npmjs.org/${version.artifact.packageName}/-/` +
+                `${unscopedPackageName}-${version.version}.tgz`;
+            if (version.artifact.tarballUrl !== expectedTarballUrl) {
+                return semanticError(`/plugins/${pluginIndex}/versions/${versionIndex}/artifact/tarballUrl`, '#/$defs/NpmArtifact/packageVersionTarball', 'packageVersionTarball', 'npm tarball URL must exactly match the declared package name and version');
+            }
+            if (priorVersion !== undefined && compareSemVer(priorVersion, version.version) <= 0) {
+                return semanticError(`/plugins/${pluginIndex}/versions/${versionIndex}/version`, '#/$defs/CatalogPluginVersion/descendingOrder', 'descendingOrder', 'catalog versions must be in descending semantic-version order');
+            }
+            versions.add(version.version);
+            priorVersion = version.version;
+        }
+    }
+    return { valid: true, catalog, errors: [] };
+}
+export function listCatalogPlugins(catalog) {
+    return catalog.plugins;
+}
+export function searchCatalogPlugins(catalog, query) {
+    const normalized = query.trim().toLocaleLowerCase('en-US');
+    if (normalized === '')
+        return catalog.plugins;
+    return catalog.plugins.filter((plugin) => {
+        const descriptions = typeof plugin.description === 'string'
+            ? [plugin.description]
+            : [plugin.description.default, ...Object.values(plugin.description.translations)];
+        return [plugin.pluginId, plugin.name, ...descriptions, ...(plugin.keywords ?? [])].some((field) => field.toLocaleLowerCase('en-US').includes(normalized));
+    });
+}
+export function getCatalogPlugin(catalog, pluginId, version) {
+    const plugin = catalog.plugins.find((entry) => entry.pluginId === pluginId);
+    if (plugin === undefined)
+        return undefined;
+    return version === undefined
+        ? plugin.versions[0]
+        : plugin.versions.find((entry) => entry.version === version);
+}
+//# sourceMappingURL=catalog.js.map

package/dist/validation/catalog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalog.js","sourceRoot":"","sources":["../../src/validation/catalog.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAQ5C,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC/C,MAAM,OAAO,GACX,OAAO,CAAC,eAAe,CAAC,CAAC;AAC3B,MAAM,UAAU,GAA+B,OAAO,CAAC,aAAa,CAAC,CAAC;AACtE,MAAM,oBAAoB,GAAG,OAAO,CAClC,qDAAqD,CAC3B,CAAC;AAC7B,MAAM,aAAa,GAAG,OAAO,CAAC,6CAA6C,CAA4B,CAAC;AA8BxG,MAAM,GAAG,GAAG,IAAI,OAAO,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;AAC5D,UAAU,CAAC,GAAG,CAAC,CAAC;AAChB,GAAG,CAAC,SAAS,CAAC,oBAAoB,EAAE,oBAAoB,CAAC,KAAK,CAAW,CAAC,CAAC;AAC3E,MAAM,cAAc,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;AAElD,SAAS,aAAa,CACpB,YAAoB,EACpB,UAAkB,EAClB,OAAe,EACf,OAAe;IAEf,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,YAAY,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;AACpF,CAAC;AAOD,SAAS,WAAW,CAAC,KAAa;IAChC,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACtC,MAAM,YAAY,GAAG,UAAU,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;IAC5E,MAAM,eAAe,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAClD,MAAM,IAAI,GAAG,eAAe,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC;IAC5F,MAAM,UAAU,GAAG,eAAe,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,eAAe,GAAG,CAAC,CAAC,CAAC;IACzF,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9C,OAAO;QACL,OAAO,EAAE,CAAC,KAAM,EAAE,KAAM,EAAE,KAAM,CAAC;QACjC,UAAU,EAAE,UAAU,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC;KAC3D,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,IAAY,EAAE,KAAa;IAC/C,OAAO,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,wBAAwB,CAAC,IAAY,EAAE,KAAa;IAC3D,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IAC/C,OAAO,WAAW,KAAK,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC;AACrE,CAAC;AAED,SAAS,aAAa,CAAC,IAAY,EAAE,KAAa;IAChD,MAAM,CAAC,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAC5B,MAAM,CAAC,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IAC7B,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACzD,MAAM,KAAK,GAAG,wBAAwB,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAE,CAAC,CAAC;QAC7E,IAAI,KAAK,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;IAChC,CAAC;IACD,IAAI,CAAC,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3D,OAAO,CAAC,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9F,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IAClE,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC/C,MAAM,KAAK,GAAG,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAClC,MAAM,KAAK,GAAG,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAClC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACpF,IAAI,KAAK,KAAK,KAAK;YAAE,SAAS;QAC9B,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxC,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxC,IAAI,QAAQ,IAAI,QAAQ;YAAE,OAAO,wBAAwB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACxE,IAAI,QAAQ,KAAK,QAAQ;YAAE,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACpD,OAAO,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACpC,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,qBAAqB,CAAC,KAAc;IAClD,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3B,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,MAAM,EAAE,CAAC,cAAc,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;gBACpD,YAAY,EAAE,KAAK,CAAC,YAAY;gBAChC,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,2BAA2B;aACtD,CAAC,CAAC;SACJ,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,KAAsB,CAAC;IACvC,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IACpC,IAAI,aAAiC,CAAC;IACtC,KAAK,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;QAC9D,IAAI,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YACnC,OAAO,aAAa,CAClB,YAAY,WAAW,WAAW,EAClC,4CAA4C,EAC5C,iBAAiB,EACjB,oDAAoD,CACrD,CAAC;QACJ,CAAC;QACD,IAAI,aAAa,KAAK,SAAS,IAAI,YAAY,CAAC,aAAa,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACrF,OAAO,aAAa,CAClB,YAAY,WAAW,WAAW,EAClC,yCAAyC,EACzC,oBAAoB,EACpB,4CAA4C,CAC7C,CAAC;QACJ,CAAC;QACD,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC/B,aAAa,GAAG,MAAM,CAAC,QAAQ,CAAC;QAEhC,IAAI,YAAgC,CAAC;QACrC,KAAK,MAAM,CAAC,YAAY,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;YACxE,IAAI,YAAY,KAAK,SAAS,IAAI,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC3E,OAAO,aAAa,CAClB,YAAY,WAAW,aAAa,YAAY,EAAE,EAClD,sDAAsD,EACtD,2BAA2B,EAC3B,gEAAgE,CACjE,CAAC;YACJ,CAAC;YACD,YAAY,GAAG,OAAO,CAAC;QACzB,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;QACnC,IAAI,YAAgC,CAAC;QACrC,KAAK,MAAM,CAAC,YAAY,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;YAChE,IAAI,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;gBAClC,OAAO,aAAa,CAClB,YAAY,WAAW,aAAa,YAAY,UAAU,EAC1D,6CAA6C,EAC7C,gBAAgB,EAChB,kDAAkD,CACnD,CAAC;YACJ,CAAC;YACD,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC;gBACjD,OAAO,aAAa,CAClB,YAAY,WAAW,aAAa,YAAY,mBAAmB,EACnE,qDAAqD,EACrD,wBAAwB,EACxB,yDAAyD,CAC1D,CAAC;YACJ,CAAC;YACD,MAAM,mBAAmB,GAAG,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,CAC5D,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAC9C,CAAC;YACF,MAAM,kBAAkB,GACtB,8BAA8B,OAAO,CAAC,QAAQ,CAAC,WAAW,KAAK;gBAC/D,GAAG,mBAAmB,IAAI,OAAO,CAAC,OAAO,MAAM,CAAC;YAClD,IAAI,OAAO,CAAC,QAAQ,CAAC,UAAU,KAAK,kBAAkB,EAAE,CAAC;gBACvD,OAAO,aAAa,CAClB,YAAY,WAAW,aAAa,YAAY,sBAAsB,EACtE,2CAA2C,EAC3C,uBAAuB,EACvB,0EAA0E,CAC3E,CAAC;YACJ,CAAC;YACD,IAAI,YAAY,KAAK,SAAS,IAAI,aAAa,CAAC,YAAY,EAAE,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;gBACpF,OAAO,aAAa,CAClB,YAAY,WAAW,aAAa,YAAY,UAAU,EAC1D,8CAA8C,EAC9C,iBAAiB,EACjB,+DAA+D,CAChE,CAAC;YACJ,CAAC;YACD,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAC9B,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC;QACjC,CAAC;IACH,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,OAAsB;IACvD,OAAO,OAAO,CAAC,OAAO,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,OAAsB,EACtB,KAAa;IAEb,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAC3D,IAAI,UAAU,KAAK,EAAE;QAAE,OAAO,OAAO,CAAC,OAAO,CAAC;IAC9C,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE;QACvC,MAAM,YAAY,GAAG,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ;YACzD,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC;YACtB,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC,CAAC;QACpF,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,EAAE,GAAG,YAAY,EAAE,GAAG,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CACrF,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,CACjE,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,OAAsB,EACtB,QAAgB,EAChB,OAAgB;IAEhB,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;IAC5E,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC3C,OAAO,OAAO,KAAK,SAAS;QAC1B,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QACpB,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC;AACjE,CAAC"}

package/dist/validation/index.d.ts

@@ -1,5 +1,6 @@
 export { validateMessagingSemantics, type SemanticValidationError, type SemanticValidationResult, } from './messaging-semantic.js';
 export { MESSAGING_ROW_METHODS, validateMessagingRowInput, validateMessagingRowResult, type MessagingRowInputByMethod, type MessagingRowMethod, type MessagingRowResultByMethod, type MessagingRowValidationError, type MessagingRowValidationResult, } from './messaging-wire.js';
 export { validateManifest, type ManifestValidationError, type ManifestValidationResult, } from './manifest.js';
+export { getCatalogPlugin, listCatalogPlugins, searchCatalogPlugins, validatePluginCatalog, type CatalogValidationError, type CatalogValidationResult, } from './catalog.js';
 export { SIGNAL_PAYLOAD_MAX_ENCODED_BYTES, validateDeclaredEventsPublishInput, validateEventsPublishInput, validateEventsPublishResult, validateSignalDeclaration, type SignalSchemaCatalog, type SignalValidationError, type SignalValidationResult, } from './signals.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/validation/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/validation/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,0BAA0B,EAC1B,KAAK,uBAAuB,EAC5B,KAAK,wBAAwB,GAC9B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,qBAAqB,EACrB,yBAAyB,EACzB,0BAA0B,EAC1B,KAAK,yBAAyB,EAC9B,KAAK,kBAAkB,EACvB,KAAK,0BAA0B,EAC/B,KAAK,2BAA2B,EAChC,KAAK,4BAA4B,GAClC,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,gBAAgB,EAChB,KAAK,uBAAuB,EAC5B,KAAK,wBAAwB,GAC9B,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,gCAAgC,EAChC,kCAAkC,EAClC,0BAA0B,EAC1B,2BAA2B,EAC3B,yBAAyB,EACzB,KAAK,mBAAmB,EACxB,KAAK,qBAAqB,EAC1B,KAAK,sBAAsB,GAC5B,MAAM,cAAc,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/validation/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,0BAA0B,EAC1B,KAAK,uBAAuB,EAC5B,KAAK,wBAAwB,GAC9B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,qBAAqB,EACrB,yBAAyB,EACzB,0BAA0B,EAC1B,KAAK,yBAAyB,EAC9B,KAAK,kBAAkB,EACvB,KAAK,0BAA0B,EAC/B,KAAK,2BAA2B,EAChC,KAAK,4BAA4B,GAClC,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,gBAAgB,EAChB,KAAK,uBAAuB,EAC5B,KAAK,wBAAwB,GAC9B,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,gBAAgB,EAChB,kBAAkB,EAClB,oBAAoB,EACpB,qBAAqB,EACrB,KAAK,sBAAsB,EAC3B,KAAK,uBAAuB,GAC7B,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,gCAAgC,EAChC,kCAAkC,EAClC,0BAA0B,EAC1B,2BAA2B,EAC3B,yBAAyB,EACzB,KAAK,mBAAmB,EACxB,KAAK,qBAAqB,EAC1B,KAAK,sBAAsB,GAC5B,MAAM,cAAc,CAAC"}

package/dist/validation/index.js

@@ -1,5 +1,6 @@
 export { validateMessagingSemantics, } from './messaging-semantic.js';
 export { MESSAGING_ROW_METHODS, validateMessagingRowInput, validateMessagingRowResult, } from './messaging-wire.js';
 export { validateManifest, } from './manifest.js';
+export { getCatalogPlugin, listCatalogPlugins, searchCatalogPlugins, validatePluginCatalog, } from './catalog.js';
 export { SIGNAL_PAYLOAD_MAX_ENCODED_BYTES, validateDeclaredEventsPublishInput, validateEventsPublishInput, validateEventsPublishResult, validateSignalDeclaration, } from './signals.js';
 //# sourceMappingURL=index.js.map

package/dist/validation/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/validation/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,0BAA0B,GAG3B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,qBAAqB,EACrB,yBAAyB,EACzB,0BAA0B,GAM3B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,gBAAgB,GAGjB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,gCAAgC,EAChC,kCAAkC,EAClC,0BAA0B,EAC1B,2BAA2B,EAC3B,yBAAyB,GAI1B,MAAM,cAAc,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/validation/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,0BAA0B,GAG3B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,qBAAqB,EACrB,yBAAyB,EACzB,0BAA0B,GAM3B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,gBAAgB,GAGjB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,gBAAgB,EAChB,kBAAkB,EAClB,oBAAoB,EACpB,qBAAqB,GAGtB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,gCAAgC,EAChC,kCAAkC,EAClC,0BAA0B,EAC1B,2BAA2B,EAC3B,yBAAyB,GAI1B,MAAM,cAAc,CAAC"}

package/dist/validation/manifest.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"manifest.d.ts","sourceRoot":"","sources":["../../src/validation/manifest.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAC;AAkCzE,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,MAAM,wBAAwB,GAChC;IACE,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC;IACrB,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC;CAC9B,GACD;IACE,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,SAAS,uBAAuB,EAAE,CAAC;CACrD,CAAC;AAON;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,wBAAwB,CAoCzE"}
+{"version":3,"file":"manifest.d.ts","sourceRoot":"","sources":["../../src/validation/manifest.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAC;AAqCzE,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,MAAM,wBAAwB,GAChC;IACE,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC;IACrB,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC;CAC9B,GACD;IACE,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,SAAS,uBAAuB,EAAE,CAAC;CACrD,CAAC;AAoBN;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,wBAAwB,CAwNzE"}

package/dist/validation/manifest.js

@@ -2,12 +2,20 @@ import { createRequire } from 'node:module';
 const require = createRequire(import.meta.url);
 const Ajv2020 = require('ajv/dist/2020');
 const addFormats = require('ajv-formats');
+const pluginMetadataSchema = require('@clowder-ai/plugin-contract/schemas/plugin-metadata');
 const manifestSchema = require('@clowder-ai/plugin-contract/schemas/manifest');
 const signalSchema = require('@clowder-ai/plugin-contract/schemas/signals');
 const ajv = new Ajv2020({ allErrors: true, strict: false });
 addFormats(ajv);
+ajv.addSchema(pluginMetadataSchema, pluginMetadataSchema['$id']);
 ajv.addSchema(signalSchema, signalSchema['$id']);
 const validateSchema = ajv.compile(manifestSchema);
+function semanticError(instancePath, schemaPath, keyword, message) {
+    return {
+        valid: false,
+        errors: [{ instancePath, schemaPath, keyword, message }],
+    };
+}
 /**
  * Validates an untrusted plugin manifest against the contract-owned schema.
  *
@@ -34,6 +42,102 @@ export function validateManifest(value) {
             }
             declaredTypes.add(declaration.type);
         }
+        const featureIds = new Set();
+        for (const [index, feature] of manifest.features.entries()) {
+            if (featureIds.has(feature.id)) {
+                return semanticError(`/features/${index}/id`, '#/$defs/PluginFeature/uniqueFeatureIds', 'uniqueFeatureIds', 'feature id must be declared at most once per manifest');
+            }
+            featureIds.add(feature.id);
+        }
+        const configuration = manifest.configuration ?? [];
+        const configByKey = new Map();
+        for (const [index, field] of configuration.entries()) {
+            if (configByKey.has(field.key)) {
+                return semanticError(`/configuration/${index}/key`, '#/$defs/ConfigurationField/uniqueConfigurationKeys', 'uniqueConfigurationKeys', 'configuration key must be declared at most once per manifest');
+            }
+            configByKey.set(field.key, field);
+            if (field.kind === 'select') {
+                const optionValues = new Set();
+                for (const [optionIndex, option] of (field.options ?? []).entries()) {
+                    if (optionValues.has(option.value)) {
+                        return semanticError(`/configuration/${index}/options/${optionIndex}/value`, '#/$defs/ConfigurationOption/uniqueOptionValues', 'uniqueOptionValues', 'select option values must be unique within one configuration field');
+                    }
+                    optionValues.add(option.value);
+                }
+                if (field.default !== undefined && !optionValues.has(field.default)) {
+                    return semanticError(`/configuration/${index}/default`, '#/$defs/ConfigurationField/defaultDeclaredBySelect', 'defaultDeclaredBySelect', 'select default must equal one of the declared option values');
+                }
+            }
+        }
+        const contributions = manifest.contributions ?? [];
+        const contributionByKey = new Map();
+        for (const [index, contribution] of contributions.entries()) {
+            const key = `${contribution.type}\0${contribution.id}`;
+            if (contributionByKey.has(key)) {
+                return semanticError(`/contributions/${index}/id`, '#/$defs/StaticContribution/uniqueContributionKeys', 'uniqueContributionKeys', 'contribution type/id must be declared at most once per manifest');
+            }
+            contributionByKey.set(key, contribution);
+            if ('environment' in contribution && contribution.environment !== undefined) {
+                for (const [environmentName, binding] of Object.entries(contribution.environment)) {
+                    const field = configByKey.get(binding.key);
+                    if (field === undefined) {
+                        return semanticError(`/contributions/${index}/environment/${environmentName}/key`, '#/$defs/EnvironmentBinding/declaredConfigurationKey', 'declaredConfigurationKey', 'environment binding must reference a declared configuration key');
+                    }
+                    if ((binding.source === 'secret' && field.kind !== 'secret') ||
+                        (binding.source === 'config' && field.kind === 'secret')) {
+                        return semanticError(`/contributions/${index}/environment/${environmentName}/source`, '#/$defs/EnvironmentBinding/sourceMatchesConfigurationKind', 'sourceMatchesConfigurationKind', 'secret bindings must reference secret fields and config bindings must not');
+                    }
+                }
+            }
+            if (contribution.type === 'webhook' && contribution.verificationSecretRef !== undefined) {
+                const secret = configByKey.get(contribution.verificationSecretRef);
+                if (secret?.kind !== 'secret') {
+                    return semanticError(`/contributions/${index}/verificationSecretRef`, '#/$defs/WebhookContribution/declaredSecretReference', 'declaredSecretReference', 'webhook verificationSecretRef must reference a declared secret field');
+                }
+            }
+        }
+        const referenceOwners = new Map();
+        for (const [featureIndex, feature] of manifest.features.entries()) {
+            for (const [contributionIndex, reference] of (feature.contributions ?? []).entries()) {
+                const key = `${reference.type}\0${reference.id}`;
+                if (!contributionByKey.has(key)) {
+                    return semanticError(`/features/${featureIndex}/contributions/${contributionIndex}`, '#/$defs/ContributionReference/declaredContribution', 'declaredContribution', 'feature contribution must reference a declared contribution with the same type and id');
+                }
+                const existingOwner = referenceOwners.get(key);
+                if (existingOwner !== undefined) {
+                    return semanticError(`/features/${featureIndex}/contributions/${contributionIndex}`, '#/$defs/ContributionReference/singleFeatureOwner', 'singleFeatureOwner', `a static contribution must have exactly one feature reference; already owned by ${existingOwner}`);
+                }
+                referenceOwners.set(key, feature.id);
+            }
+        }
+        for (const [key, contribution] of contributionByKey) {
+            if (!referenceOwners.has(key)) {
+                const index = contributions.indexOf(contribution);
+                return semanticError(`/contributions/${index}`, '#/$defs/StaticContribution/featureOwnerRequired', 'featureOwnerRequired', 'every static contribution must be owned by one feature resource reference');
+            }
+        }
+        for (const [index, contribution] of contributions.entries()) {
+            const owner = referenceOwners.get(`${contribution.type}\0${contribution.id}`);
+            if (contribution.type === 'connector') {
+                const identityKey = `identity\0${contribution.identityRef}`;
+                if (!contributionByKey.has(identityKey)) {
+                    return semanticError(`/contributions/${index}/identityRef`, '#/$defs/ConnectorContribution/declaredIdentityReference', 'declaredIdentityReference', 'connector identityRef must reference a declared identity contribution');
+                }
+                if (referenceOwners.get(identityKey) !== owner) {
+                    return semanticError(`/contributions/${index}/identityRef`, '#/$defs/ConnectorContribution/sameFeatureOwner', 'sameFeatureOwner', 'connector identityRef must reference an identity owned by the same feature');
+                }
+            }
+            if (contribution.type === 'ui' && contribution.kind === 'slot-item') {
+                const commandKey = `ui\0${contribution.command}`;
+                const command = contributionByKey.get(commandKey);
+                if (command?.type !== 'ui' || command.kind !== 'command') {
+                    return semanticError(`/contributions/${index}/command`, '#/$defs/UiSlotItemContribution/declaredCommandReference', 'declaredCommandReference', 'UI slot command must reference a declared UI command contribution');
+                }
+                if (referenceOwners.get(commandKey) !== owner) {
+                    return semanticError(`/contributions/${index}/command`, '#/$defs/UiSlotItemContribution/sameFeatureOwner', 'sameFeatureOwner', 'UI slot command must reference a command owned by the same feature');
+                }
+            }
+        }
         return {
             valid: true,
             manifest,

package/dist/validation/manifest.js.map

@@ -1 +1 @@
-{"version":3,"file":"manifest.js","sourceRoot":"","sources":["../../src/validation/manifest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAI5C,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC/C,MAAM,OAAO,GAGO,OAAO,CAAC,eAAe,CAAC,CAAC;AAC7C,MAAM,UAAU,GAA+B,OAAO,CAAC,aAAa,CAAC,CAAC;AACtE,MAAM,cAAc,GAAG,OAAO,CAAC,8CAA8C,CAG5E,CAAC;AACF,MAAM,YAAY,GAAG,OAAO,CAAC,6CAA6C,CAGzE,CAAC;AAqCF,MAAM,GAAG,GAAG,IAAI,OAAO,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;AAC5D,UAAU,CAAC,GAAG,CAAC,CAAC;AAChB,GAAG,CAAC,SAAS,CAAC,YAAY,EAAE,YAAY,CAAC,KAAK,CAAW,CAAC,CAAC;AAC3D,MAAM,cAAc,GAAG,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;AAEnD;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,IAAI,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,QAAQ,GAAG,KAAuB,CAAC;QACzC,MAAM,aAAa,GAAG,IAAI,GAAG,EAAU,CAAC;QACxC,KAAK,MAAM,CAAC,KAAK,EAAE,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;YAChF,IAAI,aAAa,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;gBACxC,OAAO;oBACL,KAAK,EAAE,KAAK;oBACZ,MAAM,EAAE;wBACN;4BACE,YAAY,EAAE,qBAAqB,KAAK,OAAO;4BAC/C,UAAU,EAAE,8CAA8C;4BAC1D,OAAO,EAAE,mBAAmB;4BAC5B,OAAO,EAAE,wDAAwD;yBAClE;qBACF;iBACF,CAAC;YACJ,CAAC;YACD,aAAa,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QACtC,CAAC;QACD,OAAO;YACL,KAAK,EAAE,IAAI;YACX,QAAQ;YACR,MAAM,EAAE,EAAE;SACX,CAAC;IACJ,CAAC;IAED,OAAO;QACL,KAAK,EAAE,KAAK;QACZ,MAAM,EAAE,CAAC,cAAc,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YACpD,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,4BAA4B;SACvD,CAAC,CAAC;KACJ,CAAC;AACJ,CAAC"}
+{"version":3,"file":"manifest.js","sourceRoot":"","sources":["../../src/validation/manifest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAI5C,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC/C,MAAM,OAAO,GAGO,OAAO,CAAC,eAAe,CAAC,CAAC;AAC7C,MAAM,UAAU,GAA+B,OAAO,CAAC,aAAa,CAAC,CAAC;AACtE,MAAM,oBAAoB,GAAG,OAAO,CAClC,qDAAqD,CAC3B,CAAC;AAC7B,MAAM,cAAc,GAAG,OAAO,CAAC,8CAA8C,CAG5E,CAAC;AACF,MAAM,YAAY,GAAG,OAAO,CAAC,6CAA6C,CAGzE,CAAC;AAqCF,MAAM,GAAG,GAAG,IAAI,OAAO,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;AAC5D,UAAU,CAAC,GAAG,CAAC,CAAC;AAChB,GAAG,CAAC,SAAS,CAAC,oBAAoB,EAAE,oBAAoB,CAAC,KAAK,CAAW,CAAC,CAAC;AAC3E,GAAG,CAAC,SAAS,CAAC,YAAY,EAAE,YAAY,CAAC,KAAK,CAAW,CAAC,CAAC;AAC3D,MAAM,cAAc,GAAG,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;AAEnD,SAAS,aAAa,CACpB,YAAoB,EACpB,UAAkB,EAClB,OAAe,EACf,OAAe;IAEf,OAAO;QACL,KAAK,EAAE,KAAK;QACZ,MAAM,EAAE,CAAC,EAAE,YAAY,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;KACzD,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,IAAI,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,QAAQ,GAAG,KAAuB,CAAC;QACzC,MAAM,aAAa,GAAG,IAAI,GAAG,EAAU,CAAC;QACxC,KAAK,MAAM,CAAC,KAAK,EAAE,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;YAChF,IAAI,aAAa,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;gBACxC,OAAO;oBACL,KAAK,EAAE,KAAK;oBACZ,MAAM,EAAE;wBACN;4BACE,YAAY,EAAE,qBAAqB,KAAK,OAAO;4BAC/C,UAAU,EAAE,8CAA8C;4BAC1D,OAAO,EAAE,mBAAmB;4BAC5B,OAAO,EAAE,wDAAwD;yBAClE;qBACF;iBACF,CAAC;YACJ,CAAC;YACD,aAAa,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QACtC,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;QACrC,KAAK,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;YAC3D,IAAI,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;gBAC/B,OAAO,aAAa,CAClB,aAAa,KAAK,KAAK,EACvB,wCAAwC,EACxC,kBAAkB,EAClB,uDAAuD,CACxD,CAAC;YACJ,CAAC;YACD,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC7B,CAAC;QAED,MAAM,aAAa,GAAG,QAAQ,CAAC,aAAa,IAAI,EAAE,CAAC;QACnD,MAAM,WAAW,GAAG,IAAI,GAAG,EAA0C,CAAC;QACtE,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,aAAa,CAAC,OAAO,EAAE,EAAE,CAAC;YACrD,IAAI,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC/B,OAAO,aAAa,CAClB,kBAAkB,KAAK,MAAM,EAC7B,oDAAoD,EACpD,yBAAyB,EACzB,8DAA8D,CAC/D,CAAC;YACJ,CAAC;YACD,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAClC,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC5B,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;gBACvC,KAAK,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;oBACpE,IAAI,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;wBACnC,OAAO,aAAa,CAClB,kBAAkB,KAAK,YAAY,WAAW,QAAQ,EACtD,gDAAgD,EAChD,oBAAoB,EACpB,oEAAoE,CACrE,CAAC;oBACJ,CAAC;oBACD,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBACjC,CAAC;gBACD,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,OAAiB,CAAC,EAAE,CAAC;oBAC9E,OAAO,aAAa,CAClB,kBAAkB,KAAK,UAAU,EACjC,oDAAoD,EACpD,yBAAyB,EACzB,6DAA6D,CAC9D,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAED,MAAM,aAAa,GAAG,QAAQ,CAAC,aAAa,IAAI,EAAE,CAAC;QACnD,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAA0C,CAAC;QAC5E,KAAK,MAAM,CAAC,KAAK,EAAE,YAAY,CAAC,IAAI,aAAa,CAAC,OAAO,EAAE,EAAE,CAAC;YAC5D,MAAM,GAAG,GAAG,GAAG,YAAY,CAAC,IAAI,KAAK,YAAY,CAAC,EAAE,EAAE,CAAC;YACvD,IAAI,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC/B,OAAO,aAAa,CAClB,kBAAkB,KAAK,KAAK,EAC5B,mDAAmD,EACnD,wBAAwB,EACxB,iEAAiE,CAClE,CAAC;YACJ,CAAC;YACD,iBAAiB,CAAC,GAAG,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;YAEzC,IAAI,aAAa,IAAI,YAAY,IAAI,YAAY,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;gBAC5E,KAAK,MAAM,CAAC,eAAe,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,WAAW,CAAC,EAAE,CAAC;oBAClF,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;oBAC3C,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;wBACxB,OAAO,aAAa,CAClB,kBAAkB,KAAK,gBAAgB,eAAe,MAAM,EAC5D,qDAAqD,EACrD,0BAA0B,EAC1B,iEAAiE,CAClE,CAAC;oBACJ,CAAC;oBACD,IACE,CAAC,OAAO,CAAC,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC;wBACxD,CAAC,OAAO,CAAC,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,EACxD,CAAC;wBACD,OAAO,aAAa,CAClB,kBAAkB,KAAK,gBAAgB,eAAe,SAAS,EAC/D,2DAA2D,EAC3D,gCAAgC,EAChC,2EAA2E,CAC5E,CAAC;oBACJ,CAAC;gBACH,CAAC;YACH,CAAC;YACD,IAAI,YAAY,CAAC,IAAI,KAAK,SAAS,IAAI,YAAY,CAAC,qBAAqB,KAAK,SAAS,EAAE,CAAC;gBACxF,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,YAAY,CAAC,qBAAqB,CAAC,CAAC;gBACnE,IAAI,MAAM,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;oBAC9B,OAAO,aAAa,CAClB,kBAAkB,KAAK,wBAAwB,EAC/C,qDAAqD,EACrD,yBAAyB,EACzB,sEAAsE,CACvE,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAED,MAAM,eAAe,GAAG,IAAI,GAAG,EAAkB,CAAC;QAClD,KAAK,MAAM,CAAC,YAAY,EAAE,OAAO,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;YAClE,KAAK,MAAM,CAAC,iBAAiB,EAAE,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;gBACrF,MAAM,GAAG,GAAG,GAAG,SAAS,CAAC,IAAI,KAAK,SAAS,CAAC,EAAE,EAAE,CAAC;gBACjD,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;oBAChC,OAAO,aAAa,CAClB,aAAa,YAAY,kBAAkB,iBAAiB,EAAE,EAC9D,oDAAoD,EACpD,sBAAsB,EACtB,uFAAuF,CACxF,CAAC;gBACJ,CAAC;gBACD,MAAM,aAAa,GAAG,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBAC/C,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;oBAChC,OAAO,aAAa,CAClB,aAAa,YAAY,kBAAkB,iBAAiB,EAAE,EAC9D,kDAAkD,EAClD,oBAAoB,EACpB,mFAAmF,aAAa,EAAE,CACnG,CAAC;gBACJ,CAAC;gBACD,eAAe,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;YACvC,CAAC;QACH,CAAC;QAED,KAAK,MAAM,CAAC,GAAG,EAAE,YAAY,CAAC,IAAI,iBAAiB,EAAE,CAAC;YACpD,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC9B,MAAM,KAAK,GAAG,aAAa,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;gBAClD,OAAO,aAAa,CAClB,kBAAkB,KAAK,EAAE,EACzB,iDAAiD,EACjD,sBAAsB,EACtB,2EAA2E,CAC5E,CAAC;YACJ,CAAC;QACH,CAAC;QAED,KAAK,MAAM,CAAC,KAAK,EAAE,YAAY,CAAC,IAAI,aAAa,CAAC,OAAO,EAAE,EAAE,CAAC;YAC5D,MAAM,KAAK,GAAG,eAAe,CAAC,GAAG,CAAC,GAAG,YAAY,CAAC,IAAI,KAAK,YAAY,CAAC,EAAE,EAAE,CAAC,CAAC;YAC9E,IAAI,YAAY,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;gBACtC,MAAM,WAAW,GAAG,aAAa,YAAY,CAAC,WAAW,EAAE,CAAC;gBAC5D,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;oBACxC,OAAO,aAAa,CAClB,kBAAkB,KAAK,cAAc,EACrC,yDAAyD,EACzD,2BAA2B,EAC3B,uEAAuE,CACxE,CAAC;gBACJ,CAAC;gBACD,IAAI,eAAe,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,KAAK,EAAE,CAAC;oBAC/C,OAAO,aAAa,CAClB,kBAAkB,KAAK,cAAc,EACrC,gDAAgD,EAChD,kBAAkB,EAClB,4EAA4E,CAC7E,CAAC;gBACJ,CAAC;YACH,CAAC;YACD,IAAI,YAAY,CAAC,IAAI,KAAK,IAAI,IAAI,YAAY,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;gBACpE,MAAM,UAAU,GAAG,OAAO,YAAY,CAAC,OAAO,EAAE,CAAC;gBACjD,MAAM,OAAO,GAAG,iBAAiB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;gBAClD,IAAI,OAAO,EAAE,IAAI,KAAK,IAAI,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;oBACzD,OAAO,aAAa,CAClB,kBAAkB,KAAK,UAAU,EACjC,yDAAyD,EACzD,0BAA0B,EAC1B,mEAAmE,CACpE,CAAC;gBACJ,CAAC;gBACD,IAAI,eAAe,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,KAAK,EAAE,CAAC;oBAC9C,OAAO,aAAa,CAClB,kBAAkB,KAAK,UAAU,EACjC,iDAAiD,EACjD,kBAAkB,EAClB,oEAAoE,CACrE,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO;YACL,KAAK,EAAE,IAAI;YACX,QAAQ;YACR,MAAM,EAAE,EAAE;SACX,CAAC;IACJ,CAAC;IAED,OAAO;QACL,KAAK,EAAE,KAAK;QACZ,MAAM,EAAE,CAAC,cAAc,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YACpD,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,4BAA4B;SACvD,CAAC,CAAC;KACJ,CAAC;AACJ,CAAC"}

package/dist/wire/grants.d.ts

@@ -14,7 +14,7 @@
 import type { Capability } from '../generated/contract.generated.js';
 /**
  * Maximum number of items in effectiveGrants.
- * Derived from the 17-value Capability enum — a plugin cannot hold
+ * Derived from the signed 17-value M0 Capability enum — a plugin cannot hold
  * more capabilities than exist.
  */
 export declare const MAX_GRANT_ITEMS: 17;

package/dist/wire/grants.js

@@ -17,7 +17,7 @@ import { L0_CAPABILITIES, L1_CAPABILITIES, L2_CAPABILITIES, } from '../generated
 // ---------------------------------------------------------------------------
 /**
  * Maximum number of items in effectiveGrants.
- * Derived from the 17-value Capability enum — a plugin cannot hold
+ * Derived from the signed 17-value M0 Capability enum — a plugin cannot hold
  * more capabilities than exist.
  */
 export const MAX_GRANT_ITEMS = 17;

package/dist/wire/signal-byte-bounds.d.ts

@@ -66,14 +66,14 @@ export declare function eventsPublishStandardErrorEnvelopes(): ({
     arm: string;
     id: null;
     error: {
-        code: -32700 | -32600 | -32601 | -32602 | -32603;
+        code: -32602 | -32700 | -32600 | -32601 | -32603;
         message: "Parse error" | "Invalid Request" | "Method not found" | "Invalid params" | "Internal error";
     };
 } | {
     arm: string;
     id: string;
     error: {
-        code: -32700 | -32600 | -32601 | -32602 | -32603;
+        code: -32602 | -32700 | -32600 | -32601 | -32603;
         message: "Parse error" | "Invalid Request" | "Method not found" | "Invalid params" | "Internal error";
     };
 })[];
@@ -81,7 +81,7 @@ export declare function eventsPublishStandardErrorNPlusOneWitnesses(): {
     id: string;
     arm: string;
     error: {
-        code: -32700 | -32600 | -32601 | -32602 | -32603;
+        code: -32602 | -32700 | -32600 | -32601 | -32603;
         message: "Parse error" | "Invalid Request" | "Method not found" | "Invalid params" | "Internal error";
     };
 }[];

package/fixtures/behavior/messaging/adversarial-invariants.json

@@ -10,6 +10,11 @@
     {
       "id": "raw-thread-id-rejection",
       "invariant": "Plugins cannot address threads by raw threadId.",
+      "execution": {
+        "plane": "wire-admission",
+        "method": "messaging.send",
+        "verdictOracle": { "kind": "json-rpc-error", "code": -32602, "sideEffects": "behavior-expectation" }
+      },
       "given": {
         "caller": { "pluginInstanceId": "plugin-a" },
         "grants": ["messaging.send"],
@@ -40,6 +45,11 @@
     {
       "id": "system-audience-dual-rejection",
       "invariant": "Drafts cannot express the host-only system audience.",
+      "execution": {
+        "plane": "wire-admission",
+        "method": "messaging.send",
+        "verdictOracle": { "kind": "json-rpc-error", "code": -32602, "sideEffects": "behavior-expectation" }
+      },
       "given": {
         "caller": { "pluginInstanceId": "plugin-a" },
         "grants": ["messaging.send"],
@@ -73,6 +83,11 @@
     {
       "id": "cross-instance-handle-rejection",
       "invariant": "A message handle issued to one plugin instance cannot authorize another.",
+      "execution": {
+        "plane": "plugin-to-host-wire",
+        "method": "messaging.appendElements",
+        "verdictOracle": { "kind": "behavior-expectation" }
+      },
       "given": {
         "caller": { "pluginInstanceId": "plugin-a" },
         "grants": ["messaging.appendElements"],
@@ -103,6 +118,11 @@
     {
       "id": "origin-forgery-rejection",
       "invariant": "A thread-handle send may only declare the caller's own plugin origin.",
+      "execution": {
+        "plane": "plugin-to-host-wire",
+        "method": "messaging.send",
+        "verdictOracle": { "kind": "behavior-expectation" }
+      },
       "given": {
         "caller": { "pluginInstanceId": "plugin-a" },
         "grants": ["messaging.send"],
@@ -135,6 +155,11 @@
     {
       "id": "base-revision-conflict-zero-change",
       "invariant": "A stale baseRevision produces CONFLICT and no mutation.",
+      "execution": {
+        "plane": "plugin-to-host-wire",
+        "method": "messaging.appendElements",
+        "verdictOracle": { "kind": "behavior-expectation" }
+      },
       "given": {
         "caller": { "pluginInstanceId": "plugin-a" },
         "grants": ["messaging.appendElements"],
@@ -165,6 +190,11 @@
     {
       "id": "stale-cursor-snapshot-roundtrip",
       "invariant": "A stale cursor reports stale and snapshot catch-up supplies an exact resume point.",
+      "execution": {
+        "plane": "plugin-to-host-wire",
+        "method": "messaging.read",
+        "verdictOracle": { "kind": "behavior-expectation" }
+      },
       "given": {
         "caller": { "pluginInstanceId": "plugin-a" },
         "grants": ["message.event.subscribe"],
@@ -189,6 +219,11 @@
     {
       "id": "cross-subscription-ack-rejection",
       "invariant": "Ack tokens are subscription-local and cannot cross subscriptions.",
+      "execution": {
+        "plane": "plugin-to-host-wire",
+        "method": "messaging.ack",
+        "verdictOracle": { "kind": "behavior-expectation" }
+      },
       "given": {
         "caller": { "pluginInstanceId": "plugin-a" },
         "grants": ["message.event.subscribe"],
@@ -214,6 +249,11 @@
     {
       "id": "reply-to-cross-thread-leakage",
       "invariant": "replyTo cannot reference a message from another thread.",
+      "execution": {
+        "plane": "plugin-to-host-wire",
+        "method": "messaging.send",
+        "verdictOracle": { "kind": "behavior-expectation" }
+      },
       "given": {
         "caller": { "pluginInstanceId": "plugin-a" },
         "grants": ["messaging.send"],
@@ -247,6 +287,11 @@
     {
       "id": "epistemic-status-upgrade-rejection",
       "invariant": "Derived content cannot claim a stronger epistemic status than its source.",
+      "execution": {
+        "plane": "plugin-to-host-wire",
+        "method": "messaging.appendElements",
+        "verdictOracle": { "kind": "behavior-expectation" }
+      },
       "given": {
         "caller": { "pluginInstanceId": "plugin-a" },
         "grants": ["messaging.appendElements"],
@@ -277,6 +322,10 @@
     {
       "id": "preset-l2-rejected",
       "invariant": "First-party presets are derived from L1 and cannot silently grant L2 capabilities.",
+      "execution": {
+        "plane": "host-control",
+        "verdictOracle": { "kind": "behavior-expectation" }
+      },
       "given": {
         "caller": { "pluginInstanceId": "first-party-plugin" },
         "grants": ["messaging.send"],
@@ -298,6 +347,10 @@
     {
       "id": "preset-visible-revocable",
       "invariant": "A first-party L1 preset remains visible and independently revocable.",
+      "execution": {
+        "plane": "host-control",
+        "verdictOracle": { "kind": "behavior-expectation" }
+      },
       "given": {
         "caller": { "pluginInstanceId": "first-party-plugin" },
         "grants": ["messaging.send"],
@@ -318,6 +371,11 @@
     {
       "id": "whisper-target-beyond-default-empty-grant-rejected",
       "invariant": "The default whisper target grant is empty; messaging.send alone cannot add a target.",
+      "execution": {
+        "plane": "plugin-to-host-wire",
+        "method": "messaging.send",
+        "verdictOracle": { "kind": "behavior-expectation" }
+      },
       "given": {
         "caller": { "pluginInstanceId": "plugin-a" },
         "grants": ["messaging.send"],
@@ -351,6 +409,11 @@
     {
       "id": "append-without-grant-rejected",
       "invariant": "A valid message handle does not bypass the messaging.appendElements grant.",
+      "execution": {
+        "plane": "plugin-to-host-wire",
+        "method": "messaging.appendElements",
+        "verdictOracle": { "kind": "behavior-expectation" }
+      },
       "given": {
         "caller": { "pluginInstanceId": "plugin-a" },
         "grants": [],
@@ -381,6 +444,11 @@
     {
       "id": "denied-on-message-rejected",
       "invariant": "The Host cannot deliver an onMessage envelope without an explicit scoped L2 grant.",
+      "execution": {
+        "plane": "host-to-plugin-delivery",
+        "method": "host.messaging.deliver",
+        "verdictOracle": { "kind": "behavior-expectation" }
+      },
       "given": {
         "caller": { "pluginInstanceId": "plugin-a" },
         "grants": [],
@@ -408,6 +476,10 @@
     {
       "id": "permission-matrix-complete",
       "invariant": "The loopback policy matrix covers every signed capability and presets only L1 for first-party plugins.",
+      "execution": {
+        "plane": "host-control",
+        "verdictOracle": { "kind": "behavior-expectation" }
+      },
       "given": {
         "caller": { "pluginInstanceId": "policy-auditor" },
         "grants": [],
@@ -448,6 +520,10 @@
     {
       "id": "delete-replay-events-preserves-canonical-messages",
       "invariant": "Deleting the replay transport buffer cannot delete canonical messages or threads.",
+      "execution": {
+        "plane": "host-control",
+        "verdictOracle": { "kind": "behavior-expectation" }
+      },
       "given": {
         "caller": { "pluginInstanceId": "host-retention" },
         "grants": ["message.event.subscribe"],
@@ -474,6 +550,11 @@
     {
       "id": "snapshot-without-grant-rejected",
       "invariant": "A subscription identifier cannot bypass the message.event.subscribe grant for snapshots.",
+      "execution": {
+        "plane": "wire-admission",
+        "method": "messaging.snapshot",
+        "verdictOracle": { "kind": "json-rpc-error", "code": -32602, "sideEffects": "behavior-expectation" }
+      },
       "given": {
         "caller": { "pluginInstanceId": "plugin-a" },
         "grants": [],
@@ -498,6 +579,10 @@
     {
       "id": "foreign-replay-delete-rejected",
       "invariant": "A caller cannot delete another plugin instance's subscription replay buffer.",
+      "execution": {
+        "plane": "host-control",
+        "verdictOracle": { "kind": "behavior-expectation" }
+      },
       "given": {
         "caller": { "pluginInstanceId": "plugin-b" },
         "grants": ["message.event.subscribe"],

package/fixtures/manifest/invalid/icon-package-escape.json

@@ -0,0 +1,22 @@
+{
+  "pluginId": "com.example.icon-escape",
+  "version": "1.0.0",
+  "contractVersion": "0.1.0-beta.13",
+  "name": "Icon escape fixture",
+  "description": "Legacy description remains accepted.",
+  "icon": {
+    "type": "svg",
+    "src": "../outside.svg"
+  },
+  "features": [
+    {
+      "id": "main",
+      "name": "Main",
+      "resources": [],
+      "capabilities": []
+    }
+  ],
+  "runtime": {
+    "transport": "builtin"
+  }
+}

package/fixtures/manifest/valid/localized-product-metadata.json

@@ -0,0 +1,27 @@
+{
+  "pluginId": "com.example.localized-metadata",
+  "version": "1.0.0",
+  "contractVersion": "0.1.0-beta.13",
+  "name": "Localized metadata fixture",
+  "description": {
+    "default": "Describe this plugin for agents and people.",
+    "translations": {
+      "zh-CN": "向 Agent 和用户介绍这个插件。"
+    }
+  },
+  "icon": {
+    "type": "svg",
+    "src": "assets/icon.svg"
+  },
+  "features": [
+    {
+      "id": "main",
+      "name": "Main",
+      "resources": [],
+      "capabilities": []
+    }
+  ],
+  "runtime": {
+    "transport": "builtin"
+  }
+}