@crewspaceai/server 2026.412.0-canary.0

package/dist/services/memoryExtractor.js

@@ -0,0 +1,121 @@
+/**
+ * Memory Extractor — extracts key facts/insights from agent conversations
+ * and stores them as agent memories (RAG data) per agent.
+ *
+ * Extraction runs after a chat session completes and is fire-and-forget
+ * (errors are logged, never propagated to the caller).
+ */
+import { spawn } from "node:child_process";
+import { agentMemoriesService } from "./agentMemories.js";
+const EXTRACT_PROMPT = (agentName, conversation) => `
+You are a knowledge extraction system for the AI agent "${agentName}".
+
+Analyze the following conversation and extract 0–5 distinct, reusable memories that ${agentName} should retain for future reference. Focus on:
+- Facts learned (user preferences, system constraints, domain knowledge)
+- Decisions made and their rationale
+- Patterns or recurring themes
+- Actionable insights or learnings
+- Important context about ongoing tasks or goals
+
+For each memory, output a JSON object on its own line (NDJSON format). Use ONLY these fields:
+  { "title": "short title (< 60 chars)", "content": "1-3 sentences of context", "memoryType": "fact|insight|decision|pattern|task|observation|learning" }
+
+If nothing significant was discussed, output an empty line. Do NOT output anything else — only NDJSON lines or blank lines.
+
+Conversation:
+${conversation}
+`.trim();
+/**
+ * Extract memories from a completed chat session and store them in the DB.
+ * This is fire-and-forget — errors are caught and logged.
+ */
+export async function extractAndStoreMemories(db, opts) {
+    const { companyId, agentId, agentName, claudeCmd, homeDir, messages } = opts;
+    if (messages.length < 2)
+        return; // Not enough context to extract
+    const conversation = messages
+        .map((m) => `${m.role === "user" ? "User" : agentName}: ${m.content}`)
+        .join("\n\n");
+    const prompt = EXTRACT_PROMPT(agentName, conversation);
+    const svc = agentMemoriesService(db);
+    try {
+        const output = await runClaude(claudeCmd, homeDir, prompt);
+        if (!output.trim())
+            return;
+        const lines = output.split("\n").filter((l) => l.trim().startsWith("{"));
+        for (const line of lines.slice(0, 5)) {
+            try {
+                const parsed = JSON.parse(line.trim());
+                const title = typeof parsed.title === "string" ? parsed.title.trim() : null;
+                const content = typeof parsed.content === "string" ? parsed.content.trim() : "";
+                const memoryType = typeof parsed.memoryType === "string" ? parsed.memoryType : "fact";
+                if (!title || title.length < 3)
+                    continue;
+                await svc.create(companyId, {
+                    title: title.slice(0, 200),
+                    content: content.slice(0, 2000),
+                    memoryType,
+                    createdByAgentId: agentId,
+                    agentIds: [agentId],
+                });
+            }
+            catch {
+                // Malformed JSON line — skip
+            }
+        }
+    }
+    catch (err) {
+        console.warn(`[memory-extractor] extraction failed for agent ${agentId}:`, err.message);
+    }
+}
+function runClaude(claudeCmd, homeDir, prompt) {
+    return new Promise((resolve, reject) => {
+        const proc = spawn(claudeCmd, ["--print", "-", "--output-format", "text", "--dangerously-skip-permissions"], { env: { ...process.env, HOME: homeDir } });
+        proc.stdin.write(prompt);
+        proc.stdin.end();
+        let stdout = "";
+        let stderr = "";
+        proc.stdout.on("data", (chunk) => { stdout += chunk.toString(); });
+        proc.stderr.on("data", (chunk) => { stderr += chunk.toString(); });
+        const timer = setTimeout(() => {
+            proc.kill();
+            reject(new Error("memory extraction timed out"));
+        }, 30_000);
+        proc.on("close", (code) => {
+            clearTimeout(timer);
+            if (code !== 0) {
+                reject(new Error(`claude exited ${code}: ${stderr.slice(0, 200)}`));
+            }
+            else {
+                resolve(stdout);
+            }
+        });
+        proc.on("error", (err) => {
+            clearTimeout(timer);
+            reject(err);
+        });
+    });
+}
+/**
+ * Retrieve agent memories as RAG context string for injection into prompts.
+ * Returns an empty string if no memories exist.
+ */
+export async function getMemoryContext(db, opts) {
+    const { companyId, agentId, maxMemories = 12 } = opts;
+    const svc = agentMemoriesService(db);
+    try {
+        const { memories } = await svc.listGraph(companyId);
+        // Filter to memories associated with this agent
+        const agentMems = memories
+            .filter((m) => m.agents.some((a) => a.agentId === agentId))
+            .slice(0, maxMemories);
+        if (agentMems.length === 0)
+            return "";
+        const lines = agentMems.map((m) => `- [${m.memoryType}] ${m.title}${m.content ? ": " + m.content : ""}`);
+        return `\n\n## Your Memory Context (from past interactions)\n${lines.join("\n")}\nUse this context to inform your response where relevant.\n`;
+    }
+    catch {
+        return "";
+    }
+}
+//# sourceMappingURL=memoryExtractor.js.map

package/dist/services/memoryExtractor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"memoryExtractor.js","sourceRoot":"","sources":["../../src/services/memoryExtractor.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAE3C,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAO1D,MAAM,cAAc,GAAG,CAAC,SAAiB,EAAE,YAAoB,EAAE,EAAE,CAAC;0DACV,SAAS;;sFAEmB,SAAS;;;;;;;;;;;;;EAa7F,YAAY;CACb,CAAC,IAAI,EAAE,CAAC;AAET;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,EAAM,EACN,IAOC;IAED,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC;IAE7E,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,CAAC,gCAAgC;IAEjE,MAAM,YAAY,GAAG,QAAQ;SAC1B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;SACrE,IAAI,CAAC,MAAM,CAAC,CAAC;IAEhB,MAAM,MAAM,GAAG,cAAc,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;IACvD,MAAM,GAAG,GAAG,oBAAoB,CAAC,EAAE,CAAC,CAAC;IAErC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,SAAS,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAC3D,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE;YAAE,OAAO;QAE3B,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;QACzE,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;YACrC,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAIpC,CAAC;gBACF,MAAM,KAAK,GAAG,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;gBAC5E,MAAM,OAAO,GAAG,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAChF,MAAM,UAAU,GAAG,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC;gBAEtF,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;oBAAE,SAAS;gBAEzC,MAAM,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE;oBAC1B,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;oBAC1B,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC;oBAC/B,UAAU;oBACV,gBAAgB,EAAE,OAAO;oBACzB,QAAQ,EAAE,CAAC,OAAO,CAAC;iBACpB,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,6BAA6B;YAC/B,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,IAAI,CAAC,kDAAkD,OAAO,GAAG,EAAG,GAAa,CAAC,OAAO,CAAC,CAAC;IACrG,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,SAAiB,EAAE,OAAe,EAAE,MAAc;IACnE,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,IAAI,GAAG,KAAK,CAChB,SAAS,EACT,CAAC,SAAS,EAAE,GAAG,EAAE,iBAAiB,EAAE,MAAM,EAAE,gCAAgC,CAAC,EAC7E,EAAE,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAC3C,CAAC;QAEF,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACzB,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QAEjB,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,GAAG,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3E,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,GAAG,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAE3E,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,IAAI,CAAC,IAAI,EAAE,CAAC;YACZ,MAAM,CAAC,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC,CAAC;QACnD,CAAC,EAAE,MAAM,CAAC,CAAC;QAEX,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACxB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;gBACf,MAAM,CAAC,IAAI,KAAK,CAAC,iBAAiB,IAAI,KAAK,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;YACtE,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,MAAM,CAAC,CAAC;YAClB,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACvB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,CAAC,GAAG,CAAC,CAAC;QACd,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,EAAM,EACN,IAAkE;IAElE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,GAAG,EAAE,EAAE,GAAG,IAAI,CAAC;IACtD,MAAM,GAAG,GAAG,oBAAoB,CAAC,EAAE,CAAC,CAAC;IAErC,IAAI,CAAC;QACH,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QAEpD,gDAAgD;QAChD,MAAM,SAAS,GAAG,QAAQ;aACvB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC;aAC1D,KAAK,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;QAEzB,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAEtC,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAChC,MAAM,CAAC,CAAC,UAAU,KAAK,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CACrE,CAAC;QAEF,OAAO,wDAAwD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,8DAA8D,CAAC;IAChJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC"}

package/dist/services/plugin-capability-validator.d.ts

@@ -0,0 +1,108 @@
+/**
+ * PluginCapabilityValidator — enforces the capability model at both
+ * install-time and runtime.
+ *
+ * Every plugin declares the capabilities it requires in its manifest
+ * (`manifest.capabilities`). This service checks those declarations
+ * against a mapping of operations → required capabilities so that:
+ *
+ * 1. **Install-time validation** — `validateManifestCapabilities()`
+ *    ensures that declared features (tools, jobs, webhooks, UI slots)
+ *    have matching capability entries, giving operators clear feedback
+ *    before a plugin is activated.
+ *
+ * 2. **Runtime gating** — `checkOperation()` / `assertOperation()` are
+ *    called on every worker→host bridge call to enforce least-privilege
+ *    access. If a plugin attempts an operation it did not declare, the
+ *    call is rejected with a 403 error.
+ *
+ * @see PLUGIN_SPEC.md §15 — Capability Model
+ * @see host-client-factory.ts — SDK-side capability gating
+ */
+import type { PluginCapability, CrewSpacePluginManifestV1, PluginUiSlotType } from "@crewspaceai/shared";
+/**
+ * Result of a capability check. When `allowed` is false, `missing` contains
+ * the capabilities that the plugin does not declare but the operation requires.
+ */
+export interface CapabilityCheckResult {
+    allowed: boolean;
+    missing: PluginCapability[];
+    operation?: string;
+    pluginId?: string;
+}
+export interface PluginCapabilityValidator {
+    /**
+     * Check whether a plugin has a specific capability.
+     */
+    hasCapability(manifest: CrewSpacePluginManifestV1, capability: PluginCapability): boolean;
+    /**
+     * Check whether a plugin has all of the specified capabilities.
+     */
+    hasAllCapabilities(manifest: CrewSpacePluginManifestV1, capabilities: PluginCapability[]): CapabilityCheckResult;
+    /**
+     * Check whether a plugin has at least one of the specified capabilities.
+     */
+    hasAnyCapability(manifest: CrewSpacePluginManifestV1, capabilities: PluginCapability[]): boolean;
+    /**
+     * Check whether a plugin is allowed to perform the named operation.
+     *
+     * Operations are mapped to required capabilities via OPERATION_CAPABILITIES.
+     * Unknown operations are rejected by default.
+     */
+    checkOperation(manifest: CrewSpacePluginManifestV1, operation: string): CapabilityCheckResult;
+    /**
+     * Assert that a plugin is allowed to perform an operation.
+     * Throws a 403 HttpError if the capability check fails.
+     */
+    assertOperation(manifest: CrewSpacePluginManifestV1, operation: string): void;
+    /**
+     * Assert that a plugin has a specific capability.
+     * Throws a 403 HttpError if the capability is missing.
+     */
+    assertCapability(manifest: CrewSpacePluginManifestV1, capability: PluginCapability): void;
+    /**
+     * Check whether a plugin can register the given UI slot type.
+     */
+    checkUiSlot(manifest: CrewSpacePluginManifestV1, slotType: PluginUiSlotType): CapabilityCheckResult;
+    /**
+     * Validate that a manifest's declared capabilities are consistent with its
+     * declared features (tools, jobs, webhooks, UI slots).
+     *
+     * Returns all missing capabilities rather than failing on the first one.
+     * This is useful for install-time validation to give comprehensive feedback.
+     */
+    validateManifestCapabilities(manifest: CrewSpacePluginManifestV1): CapabilityCheckResult;
+    /**
+     * Get the capabilities required for a named operation.
+     * Returns an empty array if the operation is unknown.
+     */
+    getRequiredCapabilities(operation: string): readonly PluginCapability[];
+    /**
+     * Get the capability required for a UI slot type.
+     */
+    getUiSlotCapability(slotType: PluginUiSlotType): PluginCapability;
+}
+/**
+ * Create a PluginCapabilityValidator.
+ *
+ * This service enforces capability gates for plugin operations.  The host
+ * uses it to verify that a plugin's declared capabilities permit the
+ * operation it is attempting, both at install time (manifest validation)
+ * and at runtime (bridge call gating).
+ *
+ * Usage:
+ * ```ts
+ * const validator = pluginCapabilityValidator();
+ *
+ * // Runtime: gate a bridge call
+ * validator.assertOperation(plugin.manifestJson, "issues.create");
+ *
+ * // Install time: validate manifest consistency
+ * const result = validator.validateManifestCapabilities(manifest);
+ * if (!result.allowed) {
+ *   throw badRequest("Missing capabilities", result.missing);
+ * }
+ * ```
+ */
+export declare function pluginCapabilityValidator(): PluginCapabilityValidator;
+//# sourceMappingURL=plugin-capability-validator.d.ts.map

package/dist/services/plugin-capability-validator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-capability-validator.d.ts","sourceRoot":"","sources":["../../src/services/plugin-capability-validator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,KAAK,EACV,gBAAgB,EAChB,yBAAyB,EACzB,gBAAgB,EAEjB,MAAM,qBAAqB,CAAC;AA0H7B;;;GAGG;AACH,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,gBAAgB,EAAE,CAAC;IAC5B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAMD,MAAM,WAAW,yBAAyB;IACxC;;OAEG;IACH,aAAa,CACX,QAAQ,EAAE,yBAAyB,EACnC,UAAU,EAAE,gBAAgB,GAC3B,OAAO,CAAC;IAEX;;OAEG;IACH,kBAAkB,CAChB,QAAQ,EAAE,yBAAyB,EACnC,YAAY,EAAE,gBAAgB,EAAE,GAC/B,qBAAqB,CAAC;IAEzB;;OAEG;IACH,gBAAgB,CACd,QAAQ,EAAE,yBAAyB,EACnC,YAAY,EAAE,gBAAgB,EAAE,GAC/B,OAAO,CAAC;IAEX;;;;;OAKG;IACH,cAAc,CACZ,QAAQ,EAAE,yBAAyB,EACnC,SAAS,EAAE,MAAM,GAChB,qBAAqB,CAAC;IAEzB;;;OAGG;IACH,eAAe,CACb,QAAQ,EAAE,yBAAyB,EACnC,SAAS,EAAE,MAAM,GAChB,IAAI,CAAC;IAER;;;OAGG;IACH,gBAAgB,CACd,QAAQ,EAAE,yBAAyB,EACnC,UAAU,EAAE,gBAAgB,GAC3B,IAAI,CAAC;IAER;;OAEG;IACH,WAAW,CACT,QAAQ,EAAE,yBAAyB,EACnC,QAAQ,EAAE,gBAAgB,GACzB,qBAAqB,CAAC;IAEzB;;;;;;OAMG;IACH,4BAA4B,CAC1B,QAAQ,EAAE,yBAAyB,GAClC,qBAAqB,CAAC;IAEzB;;;OAGG;IACH,uBAAuB,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,gBAAgB,EAAE,CAAC;IAExE;;OAEG;IACH,mBAAmB,CAAC,QAAQ,EAAE,gBAAgB,GAAG,gBAAgB,CAAC;CACnE;AAMD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,yBAAyB,IAAI,yBAAyB,CA8KrE"}

package/dist/services/plugin-capability-validator.js

@@ -0,0 +1,268 @@
+import { forbidden } from "../errors.js";
+import { logger } from "../middleware/logger.js";
+// ---------------------------------------------------------------------------
+// Capability requirement mappings
+// ---------------------------------------------------------------------------
+/**
+ * Maps high-level operations to the capabilities they require.
+ *
+ * When the bridge receives a call from a plugin worker, the host looks up
+ * the operation in this map and checks the plugin's declared capabilities.
+ * If any required capability is missing, the call is rejected.
+ *
+ * @see PLUGIN_SPEC.md §15 — Capability Model
+ */
+const OPERATION_CAPABILITIES = {
+    // Data read operations
+    "companies.list": ["companies.read"],
+    "companies.get": ["companies.read"],
+    "projects.list": ["projects.read"],
+    "projects.get": ["projects.read"],
+    "project.workspaces.list": ["project.workspaces.read"],
+    "project.workspaces.get": ["project.workspaces.read"],
+    "issues.list": ["issues.read"],
+    "issues.get": ["issues.read"],
+    "issue.comments.list": ["issue.comments.read"],
+    "issue.comments.get": ["issue.comments.read"],
+    "agents.list": ["agents.read"],
+    "agents.get": ["agents.read"],
+    "goals.list": ["goals.read"],
+    "goals.get": ["goals.read"],
+    "activity.list": ["activity.read"],
+    "activity.get": ["activity.read"],
+    "costs.list": ["costs.read"],
+    "costs.get": ["costs.read"],
+    // Data write operations
+    "issues.create": ["issues.create"],
+    "issues.update": ["issues.update"],
+    "issue.comments.create": ["issue.comments.create"],
+    "activity.log": ["activity.log.write"],
+    "metrics.write": ["metrics.write"],
+    // Plugin state operations
+    "plugin.state.get": ["plugin.state.read"],
+    "plugin.state.list": ["plugin.state.read"],
+    "plugin.state.set": ["plugin.state.write"],
+    "plugin.state.delete": ["plugin.state.write"],
+    // Runtime / Integration operations
+    "events.subscribe": ["events.subscribe"],
+    "events.emit": ["events.emit"],
+    "jobs.schedule": ["jobs.schedule"],
+    "jobs.cancel": ["jobs.schedule"],
+    "webhooks.receive": ["webhooks.receive"],
+    "http.request": ["http.outbound"],
+    "secrets.resolve": ["secrets.read-ref"],
+    // Agent tools
+    "agent.tools.register": ["agent.tools.register"],
+    "agent.tools.execute": ["agent.tools.register"],
+};
+/**
+ * Maps UI slot types to the capability required to register them.
+ *
+ * @see PLUGIN_SPEC.md §19 — UI Extension Model
+ */
+const UI_SLOT_CAPABILITIES = {
+    sidebar: "ui.sidebar.register",
+    sidebarPanel: "ui.sidebar.register",
+    projectSidebarItem: "ui.sidebar.register",
+    page: "ui.page.register",
+    detailTab: "ui.detailTab.register",
+    taskDetailView: "ui.detailTab.register",
+    dashboardWidget: "ui.dashboardWidget.register",
+    globalToolbarButton: "ui.action.register",
+    toolbarButton: "ui.action.register",
+    contextMenuItem: "ui.action.register",
+    commentAnnotation: "ui.commentAnnotation.register",
+    commentContextMenuItem: "ui.action.register",
+    settingsPage: "instance.settings.register",
+};
+/**
+ * Launcher placement zones align with host UI surfaces and therefore inherit
+ * the same capability requirements as the equivalent slot type.
+ */
+const LAUNCHER_PLACEMENT_CAPABILITIES = {
+    page: "ui.page.register",
+    detailTab: "ui.detailTab.register",
+    taskDetailView: "ui.detailTab.register",
+    dashboardWidget: "ui.dashboardWidget.register",
+    sidebar: "ui.sidebar.register",
+    sidebarPanel: "ui.sidebar.register",
+    projectSidebarItem: "ui.sidebar.register",
+    globalToolbarButton: "ui.action.register",
+    toolbarButton: "ui.action.register",
+    contextMenuItem: "ui.action.register",
+    commentAnnotation: "ui.commentAnnotation.register",
+    commentContextMenuItem: "ui.action.register",
+    settingsPage: "instance.settings.register",
+};
+/**
+ * Maps feature declarations in the manifest to their required capabilities.
+ */
+const FEATURE_CAPABILITIES = {
+    tools: "agent.tools.register",
+    jobs: "jobs.schedule",
+    webhooks: "webhooks.receive",
+};
+// ---------------------------------------------------------------------------
+// Factory
+// ---------------------------------------------------------------------------
+/**
+ * Create a PluginCapabilityValidator.
+ *
+ * This service enforces capability gates for plugin operations.  The host
+ * uses it to verify that a plugin's declared capabilities permit the
+ * operation it is attempting, both at install time (manifest validation)
+ * and at runtime (bridge call gating).
+ *
+ * Usage:
+ * ```ts
+ * const validator = pluginCapabilityValidator();
+ *
+ * // Runtime: gate a bridge call
+ * validator.assertOperation(plugin.manifestJson, "issues.create");
+ *
+ * // Install time: validate manifest consistency
+ * const result = validator.validateManifestCapabilities(manifest);
+ * if (!result.allowed) {
+ *   throw badRequest("Missing capabilities", result.missing);
+ * }
+ * ```
+ */
+export function pluginCapabilityValidator() {
+    const log = logger.child({ service: "plugin-capability-validator" });
+    // -----------------------------------------------------------------------
+    // Internal helpers
+    // -----------------------------------------------------------------------
+    function capabilitySet(manifest) {
+        return new Set(manifest.capabilities);
+    }
+    function buildForbiddenMessage(manifest, operation, missing) {
+        return (`Plugin '${manifest.id}' is not allowed to perform '${operation}'. ` +
+            `Missing required capabilities: ${missing.join(", ")}`);
+    }
+    // -----------------------------------------------------------------------
+    // Public API
+    // -----------------------------------------------------------------------
+    return {
+        hasCapability(manifest, capability) {
+            return manifest.capabilities.includes(capability);
+        },
+        hasAllCapabilities(manifest, capabilities) {
+            const declared = capabilitySet(manifest);
+            const missing = capabilities.filter((cap) => !declared.has(cap));
+            return {
+                allowed: missing.length === 0,
+                missing,
+                pluginId: manifest.id,
+            };
+        },
+        hasAnyCapability(manifest, capabilities) {
+            const declared = capabilitySet(manifest);
+            return capabilities.some((cap) => declared.has(cap));
+        },
+        checkOperation(manifest, operation) {
+            const required = OPERATION_CAPABILITIES[operation];
+            if (!required) {
+                log.warn({ pluginId: manifest.id, operation }, "capability check for unknown operation – rejecting by default");
+                return {
+                    allowed: false,
+                    missing: [],
+                    operation,
+                    pluginId: manifest.id,
+                };
+            }
+            const declared = capabilitySet(manifest);
+            const missing = required.filter((cap) => !declared.has(cap));
+            if (missing.length > 0) {
+                log.debug({ pluginId: manifest.id, operation, missing }, "capability check failed");
+            }
+            return {
+                allowed: missing.length === 0,
+                missing,
+                operation,
+                pluginId: manifest.id,
+            };
+        },
+        assertOperation(manifest, operation) {
+            const result = this.checkOperation(manifest, operation);
+            if (!result.allowed) {
+                const msg = result.missing.length > 0
+                    ? buildForbiddenMessage(manifest, operation, result.missing)
+                    : `Plugin '${manifest.id}' attempted unknown operation '${operation}'`;
+                throw forbidden(msg);
+            }
+        },
+        assertCapability(manifest, capability) {
+            if (!this.hasCapability(manifest, capability)) {
+                throw forbidden(`Plugin '${manifest.id}' lacks required capability '${capability}'`);
+            }
+        },
+        checkUiSlot(manifest, slotType) {
+            const required = UI_SLOT_CAPABILITIES[slotType];
+            if (!required) {
+                return {
+                    allowed: false,
+                    missing: [],
+                    operation: `ui.${slotType}.register`,
+                    pluginId: manifest.id,
+                };
+            }
+            const has = manifest.capabilities.includes(required);
+            return {
+                allowed: has,
+                missing: has ? [] : [required],
+                operation: `ui.${slotType}.register`,
+                pluginId: manifest.id,
+            };
+        },
+        validateManifestCapabilities(manifest) {
+            const declared = capabilitySet(manifest);
+            const allMissing = [];
+            // Check feature declarations → required capabilities
+            for (const [feature, requiredCap] of Object.entries(FEATURE_CAPABILITIES)) {
+                const featureValue = manifest[feature];
+                if (Array.isArray(featureValue) && featureValue.length > 0) {
+                    if (!declared.has(requiredCap)) {
+                        allMissing.push(requiredCap);
+                    }
+                }
+            }
+            // Check UI slots → required capabilities
+            const uiSlots = manifest.ui?.slots ?? [];
+            if (uiSlots.length > 0) {
+                for (const slot of uiSlots) {
+                    const requiredCap = UI_SLOT_CAPABILITIES[slot.type];
+                    if (requiredCap && !declared.has(requiredCap)) {
+                        if (!allMissing.includes(requiredCap)) {
+                            allMissing.push(requiredCap);
+                        }
+                    }
+                }
+            }
+            // Check launcher declarations → required capabilities
+            const launchers = [
+                ...(manifest.launchers ?? []),
+                ...(manifest.ui?.launchers ?? []),
+            ];
+            if (launchers.length > 0) {
+                for (const launcher of launchers) {
+                    const requiredCap = LAUNCHER_PLACEMENT_CAPABILITIES[launcher.placementZone];
+                    if (requiredCap && !declared.has(requiredCap) && !allMissing.includes(requiredCap)) {
+                        allMissing.push(requiredCap);
+                    }
+                }
+            }
+            return {
+                allowed: allMissing.length === 0,
+                missing: allMissing,
+                pluginId: manifest.id,
+            };
+        },
+        getRequiredCapabilities(operation) {
+            return OPERATION_CAPABILITIES[operation] ?? [];
+        },
+        getUiSlotCapability(slotType) {
+            return UI_SLOT_CAPABILITIES[slotType];
+        },
+    };
+}
+//# sourceMappingURL=plugin-capability-validator.js.map

package/dist/services/plugin-capability-validator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-capability-validator.js","sourceRoot":"","sources":["../../src/services/plugin-capability-validator.ts"],"names":[],"mappings":"AA2BA,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AAEjD,8EAA8E;AAC9E,kCAAkC;AAClC,8EAA8E;AAE9E;;;;;;;;GAQG;AACH,MAAM,sBAAsB,GAAgD;IAC1E,uBAAuB;IACvB,gBAAgB,EAAE,CAAC,gBAAgB,CAAC;IACpC,eAAe,EAAE,CAAC,gBAAgB,CAAC;IACnC,eAAe,EAAE,CAAC,eAAe,CAAC;IAClC,cAAc,EAAE,CAAC,eAAe,CAAC;IACjC,yBAAyB,EAAE,CAAC,yBAAyB,CAAC;IACtD,wBAAwB,EAAE,CAAC,yBAAyB,CAAC;IACrD,aAAa,EAAE,CAAC,aAAa,CAAC;IAC9B,YAAY,EAAE,CAAC,aAAa,CAAC;IAC7B,qBAAqB,EAAE,CAAC,qBAAqB,CAAC;IAC9C,oBAAoB,EAAE,CAAC,qBAAqB,CAAC;IAC7C,aAAa,EAAE,CAAC,aAAa,CAAC;IAC9B,YAAY,EAAE,CAAC,aAAa,CAAC;IAC7B,YAAY,EAAE,CAAC,YAAY,CAAC;IAC5B,WAAW,EAAE,CAAC,YAAY,CAAC;IAC3B,eAAe,EAAE,CAAC,eAAe,CAAC;IAClC,cAAc,EAAE,CAAC,eAAe,CAAC;IACjC,YAAY,EAAE,CAAC,YAAY,CAAC;IAC5B,WAAW,EAAE,CAAC,YAAY,CAAC;IAE3B,wBAAwB;IACxB,eAAe,EAAE,CAAC,eAAe,CAAC;IAClC,eAAe,EAAE,CAAC,eAAe,CAAC;IAClC,uBAAuB,EAAE,CAAC,uBAAuB,CAAC;IAClD,cAAc,EAAE,CAAC,oBAAoB,CAAC;IACtC,eAAe,EAAE,CAAC,eAAe,CAAC;IAElC,0BAA0B;IAC1B,kBAAkB,EAAE,CAAC,mBAAmB,CAAC;IACzC,mBAAmB,EAAE,CAAC,mBAAmB,CAAC;IAC1C,kBAAkB,EAAE,CAAC,oBAAoB,CAAC;IAC1C,qBAAqB,EAAE,CAAC,oBAAoB,CAAC;IAE7C,mCAAmC;IACnC,kBAAkB,EAAE,CAAC,kBAAkB,CAAC;IACxC,aAAa,EAAE,CAAC,aAAa,CAAC;IAC9B,eAAe,EAAE,CAAC,eAAe,CAAC;IAClC,aAAa,EAAE,CAAC,eAAe,CAAC;IAChC,kBAAkB,EAAE,CAAC,kBAAkB,CAAC;IACxC,cAAc,EAAE,CAAC,eAAe,CAAC;IACjC,iBAAiB,EAAE,CAAC,kBAAkB,CAAC;IAEvC,cAAc;IACd,sBAAsB,EAAE,CAAC,sBAAsB,CAAC;IAChD,qBAAqB,EAAE,CAAC,sBAAsB,CAAC;CAChD,CAAC;AAEF;;;;GAIG;AACH,MAAM,oBAAoB,GAA+C;IACvE,OAAO,EAAE,qBAAqB;IAC9B,YAAY,EAAE,qBAAqB;IACnC,kBAAkB,EAAE,qBAAqB;IACzC,IAAI,EAAE,kBAAkB;IACxB,SAAS,EAAE,uBAAuB;IAClC,cAAc,EAAE,uBAAuB;IACvC,eAAe,EAAE,6BAA6B;IAC9C,mBAAmB,EAAE,oBAAoB;IACzC,aAAa,EAAE,oBAAoB;IACnC,eAAe,EAAE,oBAAoB;IACrC,iBAAiB,EAAE,+BAA+B;IAClD,sBAAsB,EAAE,oBAAoB;IAC5C,YAAY,EAAE,4BAA4B;CAC3C,CAAC;AAEF;;;GAGG;AACH,MAAM,+BAA+B,GAGjC;IACF,IAAI,EAAE,kBAAkB;IACxB,SAAS,EAAE,uBAAuB;IAClC,cAAc,EAAE,uBAAuB;IACvC,eAAe,EAAE,6BAA6B;IAC9C,OAAO,EAAE,qBAAqB;IAC9B,YAAY,EAAE,qBAAqB;IACnC,kBAAkB,EAAE,qBAAqB;IACzC,mBAAmB,EAAE,oBAAoB;IACzC,aAAa,EAAE,oBAAoB;IACnC,eAAe,EAAE,oBAAoB;IACrC,iBAAiB,EAAE,+BAA+B;IAClD,sBAAsB,EAAE,oBAAoB;IAC5C,YAAY,EAAE,4BAA4B;CAC3C,CAAC;AAEF;;GAEG;AACH,MAAM,oBAAoB,GAAqC;IAC7D,KAAK,EAAE,sBAAsB;IAC7B,IAAI,EAAE,eAAe;IACrB,QAAQ,EAAE,kBAAkB;CAC7B,CAAC;AA0GF,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,UAAU,yBAAyB;IACvC,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,6BAA6B,EAAE,CAAC,CAAC;IAErE,0EAA0E;IAC1E,mBAAmB;IACnB,0EAA0E;IAE1E,SAAS,aAAa,CAAC,QAAmC;QACxD,OAAO,IAAI,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;IACxC,CAAC;IAED,SAAS,qBAAqB,CAC5B,QAAmC,EACnC,SAAiB,EACjB,OAA2B;QAE3B,OAAO,CACL,WAAW,QAAQ,CAAC,EAAE,gCAAgC,SAAS,KAAK;YACpE,kCAAkC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACvD,CAAC;IACJ,CAAC;IAED,0EAA0E;IAC1E,aAAa;IACb,0EAA0E;IAE1E,OAAO;QACL,aAAa,CAAC,QAAQ,EAAE,UAAU;YAChC,OAAO,QAAQ,CAAC,YAAY,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QACpD,CAAC;QAED,kBAAkB,CAAC,QAAQ,EAAE,YAAY;YACvC,MAAM,QAAQ,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;YACzC,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;YACjE,OAAO;gBACL,OAAO,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC;gBAC7B,OAAO;gBACP,QAAQ,EAAE,QAAQ,CAAC,EAAE;aACtB,CAAC;QACJ,CAAC;QAED,gBAAgB,CAAC,QAAQ,EAAE,YAAY;YACrC,MAAM,QAAQ,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;YACzC,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;QACvD,CAAC;QAED,cAAc,CAAC,QAAQ,EAAE,SAAS;YAChC,MAAM,QAAQ,GAAG,sBAAsB,CAAC,SAAS,CAAC,CAAC;YAEnD,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,GAAG,CAAC,IAAI,CACN,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,EACpC,+DAA+D,CAChE,CAAC;gBACF,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,OAAO,EAAE,EAAE;oBACX,SAAS;oBACT,QAAQ,EAAE,QAAQ,CAAC,EAAE;iBACtB,CAAC;YACJ,CAAC;YAED,MAAM,QAAQ,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;YACzC,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;YAE7D,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACvB,GAAG,CAAC,KAAK,CACP,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,EAC7C,yBAAyB,CAC1B,CAAC;YACJ,CAAC;YAED,OAAO;gBACL,OAAO,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC;gBAC7B,OAAO;gBACP,SAAS;gBACT,QAAQ,EAAE,QAAQ,CAAC,EAAE;aACtB,CAAC;QACJ,CAAC;QAED,eAAe,CAAC,QAAQ,EAAE,SAAS;YACjC,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;YACxD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;oBACnC,CAAC,CAAC,qBAAqB,CAAC,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC;oBAC5D,CAAC,CAAC,WAAW,QAAQ,CAAC,EAAE,kCAAkC,SAAS,GAAG,CAAC;gBACzE,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC;YACvB,CAAC;QACH,CAAC;QAED,gBAAgB,CAAC,QAAQ,EAAE,UAAU;YACnC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,UAAU,CAAC,EAAE,CAAC;gBAC9C,MAAM,SAAS,CACb,WAAW,QAAQ,CAAC,EAAE,gCAAgC,UAAU,GAAG,CACpE,CAAC;YACJ,CAAC;QACH,CAAC;QAED,WAAW,CAAC,QAAQ,EAAE,QAAQ;YAC5B,MAAM,QAAQ,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAC;YAChD,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,OAAO,EAAE,EAAE;oBACX,SAAS,EAAE,MAAM,QAAQ,WAAW;oBACpC,QAAQ,EAAE,QAAQ,CAAC,EAAE;iBACtB,CAAC;YACJ,CAAC;YAED,MAAM,GAAG,GAAG,QAAQ,CAAC,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACrD,OAAO;gBACL,OAAO,EAAE,GAAG;gBACZ,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;gBAC9B,SAAS,EAAE,MAAM,QAAQ,WAAW;gBACpC,QAAQ,EAAE,QAAQ,CAAC,EAAE;aACtB,CAAC;QACJ,CAAC;QAED,4BAA4B,CAAC,QAAQ;YACnC,MAAM,QAAQ,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;YACzC,MAAM,UAAU,GAAuB,EAAE,CAAC;YAE1C,qDAAqD;YACrD,KAAK,MAAM,CAAC,OAAO,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,oBAAoB,CAAC,EAAE,CAAC;gBAC1E,MAAM,YAAY,GAAG,QAAQ,CAAC,OAA0C,CAAC,CAAC;gBAC1E,IAAI,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC3D,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;wBAC/B,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;oBAC/B,CAAC;gBACH,CAAC;YACH,CAAC;YAED,yCAAyC;YACzC,MAAM,OAAO,GAAG,QAAQ,CAAC,EAAE,EAAE,KAAK,IAAI,EAAE,CAAC;YACzC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACvB,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;oBAC3B,MAAM,WAAW,GAAG,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBACpD,IAAI,WAAW,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;wBAC9C,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;4BACtC,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;wBAC/B,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;YAED,sDAAsD;YACtD,MAAM,SAAS,GAAG;gBAChB,GAAG,CAAC,QAAQ,CAAC,SAAS,IAAI,EAAE,CAAC;gBAC7B,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,IAAI,EAAE,CAAC;aAClC,CAAC;YACF,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACzB,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;oBACjC,MAAM,WAAW,GAAG,+BAA+B,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;oBAC5E,IAAI,WAAW,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;wBACnF,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;oBAC/B,CAAC;gBACH,CAAC;YACH,CAAC;YAED,OAAO;gBACL,OAAO,EAAE,UAAU,CAAC,MAAM,KAAK,CAAC;gBAChC,OAAO,EAAE,UAAU;gBACnB,QAAQ,EAAE,QAAQ,CAAC,EAAE;aACtB,CAAC;QACJ,CAAC;QAED,uBAAuB,CAAC,SAAS;YAC/B,OAAO,sBAAsB,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;QACjD,CAAC;QAED,mBAAmB,CAAC,QAAQ;YAC1B,OAAO,oBAAoB,CAAC,QAAQ,CAAC,CAAC;QACxC,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/services/plugin-config-validator.d.ts

@@ -0,0 +1,26 @@
+/**
+ * @fileoverview Validates plugin instance configuration against its JSON Schema.
+ *
+ * Uses Ajv to validate `configJson` values against the `instanceConfigSchema`
+ * declared in a plugin's manifest. This ensures that invalid configuration is
+ * rejected at the API boundary, not discovered later at worker startup.
+ *
+ * @module server/services/plugin-config-validator
+ */
+import type { JsonSchema } from "@crewspaceai/shared";
+export interface ConfigValidationResult {
+    valid: boolean;
+    errors?: {
+        field: string;
+        message: string;
+    }[];
+}
+/**
+ * Validate a config object against a JSON Schema.
+ *
+ * @param configJson - The configuration values to validate.
+ * @param schema - The JSON Schema from the plugin manifest's `instanceConfigSchema`.
+ * @returns Validation result with structured field errors on failure.
+ */
+export declare function validateInstanceConfig(configJson: Record<string, unknown>, schema: JsonSchema): ConfigValidationResult;
+//# sourceMappingURL=plugin-config-validator.d.ts.map

package/dist/services/plugin-config-validator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-config-validator.d.ts","sourceRoot":"","sources":["../../src/services/plugin-config-validator.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAEtD,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CAC/C;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CACpC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACnC,MAAM,EAAE,UAAU,GACjB,sBAAsB,CAwBxB"}

package/dist/services/plugin-config-validator.js

@@ -0,0 +1,41 @@
+/**
+ * @fileoverview Validates plugin instance configuration against its JSON Schema.
+ *
+ * Uses Ajv to validate `configJson` values against the `instanceConfigSchema`
+ * declared in a plugin's manifest. This ensures that invalid configuration is
+ * rejected at the API boundary, not discovered later at worker startup.
+ *
+ * @module server/services/plugin-config-validator
+ */
+import Ajv from "ajv";
+import addFormats from "ajv-formats";
+/**
+ * Validate a config object against a JSON Schema.
+ *
+ * @param configJson - The configuration values to validate.
+ * @param schema - The JSON Schema from the plugin manifest's `instanceConfigSchema`.
+ * @returns Validation result with structured field errors on failure.
+ */
+export function validateInstanceConfig(configJson, schema) {
+    // eslint-disable-next-line @typescript-eslint/no-explicit-any
+    const AjvCtor = Ajv.default ?? Ajv;
+    const ajv = new AjvCtor({ allErrors: true });
+    // ajv-formats v3 default export is a FormatsPlugin object; call it as a plugin.
+    const applyFormats = addFormats.default ?? addFormats;
+    applyFormats(ajv);
+    // Register the secret-ref format used by plugin manifests to mark fields that
+    // hold a CrewSpace secret UUID rather than a raw value. The format is a UI
+    // hint only — UUID validation happens in the secrets handler at resolve time.
+    ajv.addFormat("secret-ref", { validate: () => true });
+    const validate = ajv.compile(schema);
+    const valid = validate(configJson);
+    if (valid) {
+        return { valid: true };
+    }
+    const errors = (validate.errors ?? []).map((err) => ({
+        field: err.instancePath || "/",
+        message: err.message ?? "validation failed",
+    }));
+    return { valid: false, errors };
+}
+//# sourceMappingURL=plugin-config-validator.js.map

package/dist/services/plugin-config-validator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-config-validator.js","sourceRoot":"","sources":["../../src/services/plugin-config-validator.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,GAAyB,MAAM,KAAK,CAAC;AAC5C,OAAO,UAAU,MAAM,aAAa,CAAC;AAQrC;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CACpC,UAAmC,EACnC,MAAkB;IAElB,8DAA8D;IAC9D,MAAM,OAAO,GAAI,GAAW,CAAC,OAAO,IAAI,GAAG,CAAC;IAC5C,MAAM,GAAG,GAAG,IAAI,OAAO,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7C,gFAAgF;IAChF,MAAM,YAAY,GAAI,UAAkB,CAAC,OAAO,IAAI,UAAU,CAAC;IAC/D,YAAY,CAAC,GAAG,CAAC,CAAC;IAClB,8EAA8E;IAC9E,2EAA2E;IAC3E,8EAA8E;IAC9E,GAAG,CAAC,SAAS,CAAC,YAAY,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;IACtD,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACrC,MAAM,KAAK,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC;IAEnC,IAAI,KAAK,EAAE,CAAC;QACV,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACzB,CAAC;IAED,MAAM,MAAM,GAAG,CAAC,QAAQ,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,GAAgB,EAAE,EAAE,CAAC,CAAC;QAChE,KAAK,EAAE,GAAG,CAAC,YAAY,IAAI,GAAG;QAC9B,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,mBAAmB;KAC5C,CAAC,CAAC,CAAC;IAEJ,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;AAClC,CAAC"}

package/dist/services/plugin-dev-watcher.d.ts

@@ -0,0 +1,30 @@
+import { existsSync, readFileSync, readdirSync, statSync } from "node:fs";
+import type { PluginLifecycleManager } from "./plugin-lifecycle.js";
+export interface PluginDevWatcher {
+    /** Start watching a local-path plugin directory. */
+    watch(pluginId: string, packagePath: string): void;
+    /** Stop watching a specific plugin. */
+    unwatch(pluginId: string): void;
+    /** Stop all watchers and clean up. */
+    close(): void;
+}
+export type ResolvePluginPackagePath = (pluginId: string) => Promise<string | null | undefined>;
+export interface PluginDevWatcherFsDeps {
+    existsSync?: typeof existsSync;
+    readFileSync?: typeof readFileSync;
+    readdirSync?: typeof readdirSync;
+    statSync?: typeof statSync;
+}
+type PluginWatchTarget = {
+    path: string;
+    recursive: boolean;
+    kind: "file" | "dir";
+};
+export declare function resolvePluginWatchTargets(packagePath: string, fsDeps?: Pick<PluginDevWatcherFsDeps, "existsSync" | "readFileSync" | "readdirSync" | "statSync">): PluginWatchTarget[];
+/**
+ * Create a PluginDevWatcher that monitors local plugin directories and
+ * restarts workers on file changes.
+ */
+export declare function createPluginDevWatcher(lifecycle: PluginLifecycleManager, resolvePluginPackagePath?: ResolvePluginPackagePath, fsDeps?: PluginDevWatcherFsDeps): PluginDevWatcher;
+export {};
+//# sourceMappingURL=plugin-dev-watcher.d.ts.map

package/dist/services/plugin-dev-watcher.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-dev-watcher.d.ts","sourceRoot":"","sources":["../../src/services/plugin-dev-watcher.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAG1E,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAOpE,MAAM,WAAW,gBAAgB;IAC/B,oDAAoD;IACpD,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACnD,uCAAuC;IACvC,OAAO,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,sCAAsC;IACtC,KAAK,IAAI,IAAI,CAAC;CACf;AAED,MAAM,MAAM,wBAAwB,GAAG,CACrC,QAAQ,EAAE,MAAM,KACb,OAAO,CAAC,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,CAAC;AAExC,MAAM,WAAW,sBAAsB;IACrC,UAAU,CAAC,EAAE,OAAO,UAAU,CAAC;IAC/B,YAAY,CAAC,EAAE,OAAO,YAAY,CAAC;IACnC,WAAW,CAAC,EAAE,OAAO,WAAW,CAAC;IACjC,QAAQ,CAAC,EAAE,OAAO,QAAQ,CAAC;CAC5B;AAED,KAAK,iBAAiB,GAAG;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,OAAO,CAAC;IACnB,IAAI,EAAE,MAAM,GAAG,KAAK,CAAC;CACtB,CAAC;AAwBF,wBAAgB,yBAAyB,CACvC,WAAW,EAAE,MAAM,EACnB,MAAM,CAAC,EAAE,IAAI,CAAC,sBAAsB,EAAE,YAAY,GAAG,cAAc,GAAG,aAAa,GAAG,UAAU,CAAC,GAChG,iBAAiB,EAAE,CA2ErB;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CACpC,SAAS,EAAE,sBAAsB,EACjC,wBAAwB,CAAC,EAAE,wBAAwB,EACnD,MAAM,CAAC,EAAE,sBAAsB,GAC9B,gBAAgB,CAgLlB"}