@cogenta/plugins 0.1.0

package/dist/semver.js

@@ -0,0 +1,93 @@
+/**
+ * A small, real semver-range matcher scoped to exactly the range shapes
+ * `manifest.ts`'s `SEMVER_RANGE_PATTERN` already accepts: `^1.2.3`,
+ * `~1.2.3`, a bare exact `1.2.3`, and a space-separated list of comparators
+ * (`>=1.0.0 <2.0.0`). No `semver` dependency (R9) — this is the whole
+ * matcher a plugin's `engine` field realistically needs, not a general
+ * semver library.
+ */
+const VERSION_PATTERN = /^(\d+)\.(\d+)\.(\d+)/;
+export function parseVersion(input) {
+    const match = VERSION_PATTERN.exec(input);
+    if (match === null)
+        return null;
+    const [, major, minor, patch] = match;
+    return { major: Number(major), minor: Number(minor), patch: Number(patch) };
+}
+/** -1 if `a < b`, 0 if equal, 1 if `a > b`. */
+export function compareVersions(a, b) {
+    if (a.major !== b.major)
+        return a.major < b.major ? -1 : 1;
+    if (a.minor !== b.minor)
+        return a.minor < b.minor ? -1 : 1;
+    if (a.patch !== b.patch)
+        return a.patch < b.patch ? -1 : 1;
+    return 0;
+}
+function satisfiesComparator(version, comparator) {
+    const operatorMatch = /^(>=|<=|>|<|=)?(.+)$/.exec(comparator);
+    if (operatorMatch === null)
+        return false;
+    const [, operator = '=', rest = ''] = operatorMatch;
+    const target = parseVersion(rest);
+    if (target === null)
+        return false;
+    const cmp = compareVersions(version, target);
+    switch (operator) {
+        case '>=':
+            return cmp >= 0;
+        case '<=':
+            return cmp <= 0;
+        case '>':
+            return cmp > 0;
+        case '<':
+            return cmp < 0;
+        default:
+            return cmp === 0;
+    }
+}
+/**
+ * `^1.2.3` — compatible within the same major (or, per npm's own carat
+ * semantics for a `0.x` line, the same minor when major is 0, and the same
+ * patch when major and minor are both 0).
+ */
+function satisfiesCaret(version, base) {
+    if (compareVersions(version, base) < 0)
+        return false;
+    if (base.major > 0)
+        return version.major === base.major;
+    if (base.minor > 0)
+        return version.major === 0 && version.minor === base.minor;
+    return version.major === 0 && version.minor === 0 && version.patch === base.patch;
+}
+/** `~1.2.3` — compatible within the same major.minor. */
+function satisfiesTilde(version, base) {
+    if (compareVersions(version, base) < 0)
+        return false;
+    return version.major === base.major && version.minor === base.minor;
+}
+/**
+ * Whether `versionString` satisfies `range`. Returns `false` (never throws)
+ * for a range or version this matcher cannot parse — an unparseable engine
+ * range already fails `manifest.ts`'s own validation before this is ever
+ * called, so this is a defensive fallback, not the primary guard.
+ */
+export function satisfiesRange(versionString, range) {
+    const version = parseVersion(versionString);
+    if (version === null)
+        return false;
+    const trimmed = range.trim();
+    if (trimmed.startsWith('^')) {
+        const base = parseVersion(trimmed.slice(1));
+        return base !== null && satisfiesCaret(version, base);
+    }
+    if (trimmed.startsWith('~')) {
+        const base = parseVersion(trimmed.slice(1));
+        return base !== null && satisfiesTilde(version, base);
+    }
+    // A bare version, or a space-separated list of comparators (each ANDed).
+    return trimmed
+        .split(/\s+/)
+        .every((comparator) => comparator.length > 0 && satisfiesComparator(version, comparator));
+}
+//# sourceMappingURL=semver.js.map

package/dist/semver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"semver.js","sourceRoot":"","sources":["../src/semver.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAQH,MAAM,eAAe,GAAG,sBAAsB,CAAA;AAE9C,MAAM,UAAU,YAAY,CAAC,KAAa;IACxC,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACzC,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAA;IAC/B,MAAM,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,GAAG,KAAK,CAAA;IACrC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAA;AAC7E,CAAC;AAED,+CAA+C;AAC/C,MAAM,UAAU,eAAe,CAAC,CAAgB,EAAE,CAAgB;IAChE,IAAI,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,KAAK;QAAE,OAAO,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IAC1D,IAAI,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,KAAK;QAAE,OAAO,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IAC1D,IAAI,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,KAAK;QAAE,OAAO,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IAC1D,OAAO,CAAC,CAAA;AACV,CAAC;AAED,SAAS,mBAAmB,CAAC,OAAsB,EAAE,UAAkB;IACrE,MAAM,aAAa,GAAG,sBAAsB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;IAC7D,IAAI,aAAa,KAAK,IAAI;QAAE,OAAO,KAAK,CAAA;IACxC,MAAM,CAAC,EAAE,QAAQ,GAAG,GAAG,EAAE,IAAI,GAAG,EAAE,CAAC,GAAG,aAAa,CAAA;IACnD,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,CAAA;IACjC,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,KAAK,CAAA;IACjC,MAAM,GAAG,GAAG,eAAe,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;IAE5C,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,IAAI;YACP,OAAO,GAAG,IAAI,CAAC,CAAA;QACjB,KAAK,IAAI;YACP,OAAO,GAAG,IAAI,CAAC,CAAA;QACjB,KAAK,GAAG;YACN,OAAO,GAAG,GAAG,CAAC,CAAA;QAChB,KAAK,GAAG;YACN,OAAO,GAAG,GAAG,CAAC,CAAA;QAChB;YACE,OAAO,GAAG,KAAK,CAAC,CAAA;IACpB,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,cAAc,CAAC,OAAsB,EAAE,IAAmB;IACjE,IAAI,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAA;IACpD,IAAI,IAAI,CAAC,KAAK,GAAG,CAAC;QAAE,OAAO,OAAO,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,CAAA;IACvD,IAAI,IAAI,CAAC,KAAK,GAAG,CAAC;QAAE,OAAO,OAAO,CAAC,KAAK,KAAK,CAAC,IAAI,OAAO,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,CAAA;IAC9E,OAAO,OAAO,CAAC,KAAK,KAAK,CAAC,IAAI,OAAO,CAAC,KAAK,KAAK,CAAC,IAAI,OAAO,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,CAAA;AACnF,CAAC;AAED,yDAAyD;AACzD,SAAS,cAAc,CAAC,OAAsB,EAAE,IAAmB;IACjE,IAAI,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAA;IACpD,OAAO,OAAO,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,CAAA;AACrE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,aAAqB,EAAE,KAAa;IACjE,MAAM,OAAO,GAAG,YAAY,CAAC,aAAa,CAAC,CAAA;IAC3C,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,KAAK,CAAA;IAClC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAA;IAE5B,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;QAC3C,OAAO,IAAI,KAAK,IAAI,IAAI,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;IACvD,CAAC;IACD,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;QAC3C,OAAO,IAAI,KAAK,IAAI,IAAI,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;IACvD,CAAC;IACD,yEAAyE;IACzE,OAAO,OAAO;SACX,KAAK,CAAC,KAAK,CAAC;SACZ,KAAK,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,IAAI,mBAAmB,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,CAAA;AAC7F,CAAC"}

package/dist/signing/keys.d.ts

@@ -0,0 +1,18 @@
+import { type KeyObject } from 'node:crypto';
+/**
+ * A real Ed25519 key pair, base64-encoded (SPKI for the public half, PKCS8
+ * for the private half) — small, fast, natively supported by `node:crypto`
+ * since well before this project's Node 22 LTS baseline. Asymmetric, not
+ * the HMAC scheme `@cogenta/channels`' approval links use (L6 task 5):
+ * a registry signs once, and every independent Cogenta installation must be
+ * able to verify without ever holding the signing secret — a shared-secret
+ * scheme cannot do that.
+ */
+export interface SigningKeyPair {
+    readonly publicKey: string;
+    readonly privateKey: string;
+}
+export declare function generateSigningKeyPair(): SigningKeyPair;
+export declare function exportPublicKey(key: KeyObject): string;
+export declare function exportPrivateKey(key: KeyObject): string;
+//# sourceMappingURL=keys.d.ts.map

package/dist/signing/keys.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"keys.d.ts","sourceRoot":"","sources":["../../src/signing/keys.ts"],"names":[],"mappings":"AAAA,OAAO,EAAuB,KAAK,SAAS,EAAE,MAAM,aAAa,CAAA;AAEjE;;;;;;;;GAQG;AACH,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;CAC5B;AAED,wBAAgB,sBAAsB,IAAI,cAAc,CAMvD;AAED,wBAAgB,eAAe,CAAC,GAAG,EAAE,SAAS,GAAG,MAAM,CAEtD;AAED,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,SAAS,GAAG,MAAM,CAEvD"}

package/dist/signing/keys.js

@@ -0,0 +1,15 @@
+import { generateKeyPairSync } from 'node:crypto';
+export function generateSigningKeyPair() {
+    const { publicKey, privateKey } = generateKeyPairSync('ed25519');
+    return {
+        publicKey: exportPublicKey(publicKey),
+        privateKey: exportPrivateKey(privateKey),
+    };
+}
+export function exportPublicKey(key) {
+    return key.export({ type: 'spki', format: 'der' }).toString('base64');
+}
+export function exportPrivateKey(key) {
+    return key.export({ type: 'pkcs8', format: 'der' }).toString('base64');
+}
+//# sourceMappingURL=keys.js.map

package/dist/signing/keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keys.js","sourceRoot":"","sources":["../../src/signing/keys.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAkB,MAAM,aAAa,CAAA;AAgBjE,MAAM,UAAU,sBAAsB;IACpC,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAA;IAChE,OAAO;QACL,SAAS,EAAE,eAAe,CAAC,SAAS,CAAC;QACrC,UAAU,EAAE,gBAAgB,CAAC,UAAU,CAAC;KACzC,CAAA;AACH,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,GAAc;IAC5C,OAAO,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;AACvE,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,GAAc;IAC7C,OAAO,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;AACxE,CAAC"}

package/dist/signing/sign.d.ts

@@ -0,0 +1,35 @@
+import type { PluginManifest } from '../manifest.js';
+/**
+ * A deterministic, sorted-key JSON rendering of any signable content — the
+ * same value always canonicalizes identically regardless of the property
+ * insertion order its producer happened to use. Generic over content shape:
+ * a plugin manifest (task 9) and a theme submission (task 12) are both real
+ * consumers, and neither is more "canonical" a use than the other — this is
+ * the one real canonicalization primitive, not one per registry.
+ */
+export declare function canonicalizeContent(value: unknown): string;
+/**
+ * A plugin manifest's canonical content — what actually gets signed for a
+ * plugin (name, version, capabilities, provides, ...), not just its name: a
+ * signature that only covered the name would prove authorship of a label,
+ * not of what the plugin is declared to do.
+ *
+ * Deliberately scoped to the manifest, not the plugin's full package
+ * contents (its actual runtime code): `loadPlugin` (task 2) only ever reads
+ * the manifest-declaring module today — no mechanism yet reads a plugin's
+ * entry-point code into a string a signature could cover, so extending
+ * coverage to the full package is a real, separate piece of work for
+ * whichever future task builds that code-reading path.
+ */
+export declare function canonicalizeManifest(manifest: PluginManifest): string;
+/**
+ * Signs any canonicalizable content with a real Ed25519 private key (base64
+ * PKCS8, `./keys.js`). The publisher-side half of this primitive — a real
+ * Cogenta installation never runs this, only the verification half
+ * (`./verify.js`) matters there, but both sides must be real for the
+ * primitive to be provably correct rather than assumed.
+ */
+export declare function signContent(content: unknown, privateKeyBase64: string): string;
+/** Signs a plugin manifest — the task-9 entry point, now a thin wrapper over `signContent`. */
+export declare function signManifest(manifest: PluginManifest, privateKeyBase64: string): string;
+//# sourceMappingURL=sign.d.ts.map

package/dist/signing/sign.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sign.d.ts","sourceRoot":"","sources":["../../src/signing/sign.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAA;AAEpD;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAE1D;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,cAAc,GAAG,MAAM,CAErE;AAcD;;;;;;GAMG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,GAAG,MAAM,CAU9E;AAED,+FAA+F;AAC/F,wBAAgB,YAAY,CAAC,QAAQ,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,GAAG,MAAM,CAEvF"}

package/dist/signing/sign.js

@@ -0,0 +1,63 @@
+import { createPrivateKey, sign as cryptoSign } from 'node:crypto';
+/**
+ * A deterministic, sorted-key JSON rendering of any signable content — the
+ * same value always canonicalizes identically regardless of the property
+ * insertion order its producer happened to use. Generic over content shape:
+ * a plugin manifest (task 9) and a theme submission (task 12) are both real
+ * consumers, and neither is more "canonical" a use than the other — this is
+ * the one real canonicalization primitive, not one per registry.
+ */
+export function canonicalizeContent(value) {
+    return JSON.stringify(sortKeysDeep(value));
+}
+/**
+ * A plugin manifest's canonical content — what actually gets signed for a
+ * plugin (name, version, capabilities, provides, ...), not just its name: a
+ * signature that only covered the name would prove authorship of a label,
+ * not of what the plugin is declared to do.
+ *
+ * Deliberately scoped to the manifest, not the plugin's full package
+ * contents (its actual runtime code): `loadPlugin` (task 2) only ever reads
+ * the manifest-declaring module today — no mechanism yet reads a plugin's
+ * entry-point code into a string a signature could cover, so extending
+ * coverage to the full package is a real, separate piece of work for
+ * whichever future task builds that code-reading path.
+ */
+export function canonicalizeManifest(manifest) {
+    return canonicalizeContent(manifest);
+}
+function sortKeysDeep(value) {
+    if (Array.isArray(value))
+        return value.map(sortKeysDeep);
+    if (value !== null && typeof value === 'object') {
+        const sorted = {};
+        for (const key of Object.keys(value).sort()) {
+            sorted[key] = sortKeysDeep(value[key]);
+        }
+        return sorted;
+    }
+    return value;
+}
+/**
+ * Signs any canonicalizable content with a real Ed25519 private key (base64
+ * PKCS8, `./keys.js`). The publisher-side half of this primitive — a real
+ * Cogenta installation never runs this, only the verification half
+ * (`./verify.js`) matters there, but both sides must be real for the
+ * primitive to be provably correct rather than assumed.
+ */
+export function signContent(content, privateKeyBase64) {
+    const privateKey = createPrivateKey({
+        key: Buffer.from(privateKeyBase64, 'base64'),
+        format: 'der',
+        type: 'pkcs8',
+    });
+    const data = Buffer.from(canonicalizeContent(content), 'utf8');
+    // Ed25519 has no separate digest step — `null` is the documented algorithm
+    // argument `crypto.sign` expects for it.
+    return cryptoSign(null, data, privateKey).toString('base64');
+}
+/** Signs a plugin manifest — the task-9 entry point, now a thin wrapper over `signContent`. */
+export function signManifest(manifest, privateKeyBase64) {
+    return signContent(manifest, privateKeyBase64);
+}
+//# sourceMappingURL=sign.js.map

package/dist/signing/sign.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sign.js","sourceRoot":"","sources":["../../src/signing/sign.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,IAAI,IAAI,UAAU,EAAE,MAAM,aAAa,CAAA;AAGlE;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAc;IAChD,OAAO,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAA;AAC5C,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,oBAAoB,CAAC,QAAwB;IAC3D,OAAO,mBAAmB,CAAC,QAAQ,CAAC,CAAA;AACtC,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAA;IACxD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,MAAM,MAAM,GAA4B,EAAE,CAAA;QAC1C,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAgC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YACvE,MAAM,CAAC,GAAG,CAAC,GAAG,YAAY,CAAE,KAAiC,CAAC,GAAG,CAAC,CAAC,CAAA;QACrE,CAAC;QACD,OAAO,MAAM,CAAA;IACf,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,WAAW,CAAC,OAAgB,EAAE,gBAAwB;IACpE,MAAM,UAAU,GAAG,gBAAgB,CAAC;QAClC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,gBAAgB,EAAE,QAAQ,CAAC;QAC5C,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,OAAO;KACd,CAAC,CAAA;IACF,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAA;IAC9D,2EAA2E;IAC3E,yCAAyC;IACzC,OAAO,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;AAC9D,CAAC;AAED,+FAA+F;AAC/F,MAAM,UAAU,YAAY,CAAC,QAAwB,EAAE,gBAAwB;IAC7E,OAAO,WAAW,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAA;AAChD,CAAC"}

package/dist/signing/verify.d.ts

@@ -0,0 +1,40 @@
+import type { PluginManifest } from '../manifest.js';
+/**
+ * Public keys of registries this installation trusts. Empty: no real
+ * plugin registry exists anywhere yet (this whole lot is pre-alpha,
+ * `loadPlugin`'s own `engineVersion` default documents the same honest
+ * gap). An empty list is the correct, honest default — every `registry`
+ * -source plugin fails verification until a real registry key is added
+ * here or passed explicitly via `LoadPluginOptions.trustedPublicKeys` —
+ * never a placeholder key that would make verification silently vacuous.
+ */
+export declare const TRUSTED_REGISTRY_PUBLIC_KEYS: readonly string[];
+/**
+ * Verifies a base64 Ed25519 signature against any canonicalizable content
+ * and a base64 SPKI public key. Real, standard verification —
+ * `crypto.verify` returns `false` on any mismatch (wrong key, tampered
+ * content, malformed signature bytes) rather than throwing, except for a
+ * structurally invalid key/signature, which this function treats the same
+ * way: not verified, never an uncaught exception.
+ */
+export declare function verifyContentSignature(content: unknown, signatureBase64: string, publicKeyBase64: string): boolean;
+/** Verifies a plugin manifest's signature — the task-9 entry point, now a thin wrapper. */
+export declare function verifyManifestSignature(manifest: PluginManifest, signatureBase64: string, publicKeyBase64: string): boolean;
+/**
+ * A signature verifies if it matches ANY trusted key — one registry
+ * operator's key rotation, or several trusted registries, both work without
+ * this function's caller needing to know which key actually signed.
+ */
+export declare function verifyContentAgainstTrustedKeys(content: unknown, signatureBase64: string | null, trustedPublicKeys: readonly string[]): boolean;
+/** Verifies a plugin manifest against trusted keys — the task-9 entry point, now a thin wrapper. */
+export declare function verifyPluginSignature(manifest: PluginManifest, signatureBase64: string | null, trustedPublicKeys: readonly string[]): boolean;
+/**
+ * A signature travels as a sibling file next to the manifest
+ * (`plugin.manifest.mjs.sig`), a single base64 line — never embedded in the
+ * manifest object itself, so signing never changes the manifest's own
+ * shape (the lot doc's literal `definePlugin({...})` example carries no
+ * signature field, and it shouldn't need one: the manifest is signed, not
+ * self-describing its own signature).
+ */
+export declare function readSignatureFile(manifestPath: string): Promise<string | null>;
+//# sourceMappingURL=verify.d.ts.map

package/dist/signing/verify.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify.d.ts","sourceRoot":"","sources":["../../src/signing/verify.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAA;AAGpD;;;;;;;;GAQG;AACH,eAAO,MAAM,4BAA4B,EAAE,SAAS,MAAM,EAAO,CAAA;AAEjE;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,OAAO,EAChB,eAAe,EAAE,MAAM,EACvB,eAAe,EAAE,MAAM,GACtB,OAAO,CAaT;AAED,2FAA2F;AAC3F,wBAAgB,uBAAuB,CACrC,QAAQ,EAAE,cAAc,EACxB,eAAe,EAAE,MAAM,EACvB,eAAe,EAAE,MAAM,GACtB,OAAO,CAET;AAED;;;;GAIG;AACH,wBAAgB,+BAA+B,CAC7C,OAAO,EAAE,OAAO,EAChB,eAAe,EAAE,MAAM,GAAG,IAAI,EAC9B,iBAAiB,EAAE,SAAS,MAAM,EAAE,GACnC,OAAO,CAGT;AAED,oGAAoG;AACpG,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,cAAc,EACxB,eAAe,EAAE,MAAM,GAAG,IAAI,EAC9B,iBAAiB,EAAE,SAAS,MAAM,EAAE,GACnC,OAAO,CAET;AAED;;;;;;;GAOG;AACH,wBAAsB,iBAAiB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAQpF"}

package/dist/signing/verify.js

@@ -0,0 +1,73 @@
+import { createPublicKey, verify as cryptoVerify } from 'node:crypto';
+import { readFile } from 'node:fs/promises';
+import { canonicalizeContent } from './sign.js';
+/**
+ * Public keys of registries this installation trusts. Empty: no real
+ * plugin registry exists anywhere yet (this whole lot is pre-alpha,
+ * `loadPlugin`'s own `engineVersion` default documents the same honest
+ * gap). An empty list is the correct, honest default — every `registry`
+ * -source plugin fails verification until a real registry key is added
+ * here or passed explicitly via `LoadPluginOptions.trustedPublicKeys` —
+ * never a placeholder key that would make verification silently vacuous.
+ */
+export const TRUSTED_REGISTRY_PUBLIC_KEYS = [];
+/**
+ * Verifies a base64 Ed25519 signature against any canonicalizable content
+ * and a base64 SPKI public key. Real, standard verification —
+ * `crypto.verify` returns `false` on any mismatch (wrong key, tampered
+ * content, malformed signature bytes) rather than throwing, except for a
+ * structurally invalid key/signature, which this function treats the same
+ * way: not verified, never an uncaught exception.
+ */
+export function verifyContentSignature(content, signatureBase64, publicKeyBase64) {
+    try {
+        const publicKey = createPublicKey({
+            key: Buffer.from(publicKeyBase64, 'base64'),
+            format: 'der',
+            type: 'spki',
+        });
+        const data = Buffer.from(canonicalizeContent(content), 'utf8');
+        const signature = Buffer.from(signatureBase64, 'base64');
+        return cryptoVerify(null, data, publicKey, signature);
+    }
+    catch {
+        return false;
+    }
+}
+/** Verifies a plugin manifest's signature — the task-9 entry point, now a thin wrapper. */
+export function verifyManifestSignature(manifest, signatureBase64, publicKeyBase64) {
+    return verifyContentSignature(manifest, signatureBase64, publicKeyBase64);
+}
+/**
+ * A signature verifies if it matches ANY trusted key — one registry
+ * operator's key rotation, or several trusted registries, both work without
+ * this function's caller needing to know which key actually signed.
+ */
+export function verifyContentAgainstTrustedKeys(content, signatureBase64, trustedPublicKeys) {
+    if (signatureBase64 === null)
+        return false;
+    return trustedPublicKeys.some((key) => verifyContentSignature(content, signatureBase64, key));
+}
+/** Verifies a plugin manifest against trusted keys — the task-9 entry point, now a thin wrapper. */
+export function verifyPluginSignature(manifest, signatureBase64, trustedPublicKeys) {
+    return verifyContentAgainstTrustedKeys(manifest, signatureBase64, trustedPublicKeys);
+}
+/**
+ * A signature travels as a sibling file next to the manifest
+ * (`plugin.manifest.mjs.sig`), a single base64 line — never embedded in the
+ * manifest object itself, so signing never changes the manifest's own
+ * shape (the lot doc's literal `definePlugin({...})` example carries no
+ * signature field, and it shouldn't need one: the manifest is signed, not
+ * self-describing its own signature).
+ */
+export async function readSignatureFile(manifestPath) {
+    try {
+        const content = await readFile(`${manifestPath}.sig`, 'utf8');
+        const trimmed = content.trim();
+        return trimmed === '' ? null : trimmed;
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=verify.js.map

package/dist/signing/verify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify.js","sourceRoot":"","sources":["../../src/signing/verify.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,IAAI,YAAY,EAAE,MAAM,aAAa,CAAA;AACrE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AAE3C,OAAO,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAA;AAE/C;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAsB,EAAE,CAAA;AAEjE;;;;;;;GAOG;AACH,MAAM,UAAU,sBAAsB,CACpC,OAAgB,EAChB,eAAuB,EACvB,eAAuB;IAEvB,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,eAAe,CAAC;YAChC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,QAAQ,CAAC;YAC3C,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,MAAM;SACb,CAAC,CAAA;QACF,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAA;QAC9D,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAA;QACxD,OAAO,YAAY,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,CAAC,CAAA;IACvD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,uBAAuB,CACrC,QAAwB,EACxB,eAAuB,EACvB,eAAuB;IAEvB,OAAO,sBAAsB,CAAC,QAAQ,EAAE,eAAe,EAAE,eAAe,CAAC,CAAA;AAC3E,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,+BAA+B,CAC7C,OAAgB,EAChB,eAA8B,EAC9B,iBAAoC;IAEpC,IAAI,eAAe,KAAK,IAAI;QAAE,OAAO,KAAK,CAAA;IAC1C,OAAO,iBAAiB,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,sBAAsB,CAAC,OAAO,EAAE,eAAe,EAAE,GAAG,CAAC,CAAC,CAAA;AAC/F,CAAC;AAED,oGAAoG;AACpG,MAAM,UAAU,qBAAqB,CACnC,QAAwB,EACxB,eAA8B,EAC9B,iBAAoC;IAEpC,OAAO,+BAA+B,CAAC,QAAQ,EAAE,eAAe,EAAE,iBAAiB,CAAC,CAAA;AACtF,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,YAAoB;IAC1D,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,GAAG,YAAY,MAAM,EAAE,MAAM,CAAC,CAAA;QAC7D,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,CAAA;QAC9B,OAAO,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAA;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC"}

package/package.json

@@ -0,0 +1,46 @@
+{
+  "name": "@cogenta/plugins",
+  "version": "0.1.0",
+  "description": "Plugin manifest schema, loader, worker isolation and permission model.",
+  "license": "MPL-2.0",
+  "type": "module",
+  "sideEffects": false,
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "engines": {
+    "node": ">=22.11.0"
+  },
+  "publishConfig": {
+    "access": "public",
+    "provenance": true
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/cogenta-cms/cogenta.git",
+    "directory": "packages/plugins"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.json && node -e \"const fs=require('node:fs');fs.mkdirSync('dist/guest',{recursive:true});fs.copyFileSync('src/guest/sandbox-entry.mjs','dist/guest/sandbox-entry.mjs')\"",
+    "typecheck": "tsc -p tsconfig.typecheck.json",
+    "test": "vitest run --passWithNoTests"
+  },
+  "dependencies": {
+    "@cogenta/agents": "workspace:*",
+    "@cogenta/core": "workspace:*",
+    "@cogenta/render": "workspace:*",
+    "zod": "catalog:"
+  },
+  "devDependencies": {
+    "@cogenta/blocks": "workspace:*",
+    "@cogenta/schema": "workspace:*",
+    "typescript": "catalog:",
+    "vitest": "catalog:"
+  }
+}