@gobing-ai/ts-runtime 0.2.9 → 0.3.1

package/dist/fs.d.ts

@@ -26,7 +26,9 @@ export interface SyncFileSystem {
     readFile(path: string): string;
     writeFile(path: string, content: string): void;
     mkdir(path: string): void;
+    exists(path: string): boolean;
     readDir(path: string): string[];
+    stat(path: string): FileStat | null;
     unlink(path: string): void;
 }
 export declare class NodeFileSystem implements FileSystem {
@@ -47,7 +49,9 @@ export declare class NodeSyncFileSystem implements SyncFileSystem {
     readFile(path: string): string;
     writeFile(path: string, content: string): void;
     mkdir(path: string): void;
+    exists(path: string): boolean;
     readDir(path: string): string[];
+    stat(path: string): FileStat | null;
     unlink(path: string): void;
 }
 export declare class CloudflareFileSystem implements FileSystem {

package/dist/fs.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"fs.d.ts","sourceRoot":"","sources":["../src/fs.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,QAAQ;IACrB,MAAM,IAAI,OAAO,CAAC;IAClB,WAAW,IAAI,OAAO,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,SAAS;IACtB,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,GAAG,IAAI,IAAI,CAAC;CACf;AAED,MAAM,WAAW,UAAU;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACxC,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxD,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzD,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnC,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACvC,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACzC,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACpC,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAC;IAC7C,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACxC,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/C,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACjD,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;CAC5C;AAED,MAAM,WAAW,cAAc;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;IAC/B,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/C,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAChC,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAkBD,qBAAa,cAAe,YAAW,UAAU;IACvC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAKvC,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAMvD,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAMxD,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAKlC,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAUtC,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAKxC,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAKnC,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;IAe5C,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAKvC,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAK9C,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAKtD,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS;CAG3C;AAED,qBAAa,kBAAmB,YAAW,cAAc;IACrD,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM;IAI9B,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI;IAK9C,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI;IAIzB,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE;IAI/B,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI;CAG7B;AAuCD,qBAAa,oBAAqB,YAAW,UAAU;IAC7C,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAIvC,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIxD,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIzD,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAInC,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAIvC,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAIxC,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAInC,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;IAI7C,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAIvC,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI/C,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIvD,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS;CAG3C;AAQD,wBAAgB,aAAa,CAAC,UAAU,EAAE,UAAU,GAAG,MAAM,IAAI,CAMhE;AAED,wBAAgB,KAAK,IAAI,UAAU,CAElC;AAED,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,aAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAEhF;AAED,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,cAAc,GAAG,IAAI,CAE3E;AAED,wBAAsB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,aAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAKhG;AAED,wBAAsB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,aAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAE/F;AAED,wBAAsB,YAAY,CAAC,CAAC,GAAG,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,aAAU,GAAG,OAAO,CAAC,CAAC,CAAC,CAEtF;AAED,wBAAsB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,aAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAE7F;AAED,wBAAsB,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,aAAU,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAa3E;AAED,wBAAgB,cAAc,CAAC,QAAQ,SAAkB,GAAG,MAAM,CAWjE;AAED,wBAAgB,kBAAkB,CAAC,GAAG,QAAQ,EAAE,MAAM,EAAE,GAAG,MAAM,CAEhE;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,aAAU,GAAG,SAAS,CAErE"}
+{"version":3,"file":"fs.d.ts","sourceRoot":"","sources":["../src/fs.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,QAAQ;IACrB,MAAM,IAAI,OAAO,CAAC;IAClB,WAAW,IAAI,OAAO,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,SAAS;IACtB,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,GAAG,IAAI,IAAI,CAAC;CACf;AAED,MAAM,WAAW,UAAU;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACxC,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxD,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzD,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnC,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACvC,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACzC,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACpC,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAC;IAC7C,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACxC,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/C,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACjD,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;CAC5C;AAED,MAAM,WAAW,cAAc;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;IAC/B,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/C,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IAC9B,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAChC,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,QAAQ,GAAG,IAAI,CAAC;IACpC,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAkBD,qBAAa,cAAe,YAAW,UAAU;IACvC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAKvC,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAMvD,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAMxD,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAKlC,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAUtC,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAKxC,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAKnC,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;IAe5C,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAKvC,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAK9C,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAKtD,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS;CAG3C;AAED,qBAAa,kBAAmB,YAAW,cAAc;IACrD,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM;IAI9B,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI;IAK9C,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI;IAIzB,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAQ7B,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE;IAI/B,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,QAAQ,GAAG,IAAI;IAcnC,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI;CAG7B;AAuCD,qBAAa,oBAAqB,YAAW,UAAU;IAC7C,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAIvC,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIxD,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIzD,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAInC,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAIvC,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAIxC,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAInC,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;IAI7C,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAIvC,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI/C,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIvD,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS;CAG3C;AAQD,wBAAgB,aAAa,CAAC,UAAU,EAAE,UAAU,GAAG,MAAM,IAAI,CAMhE;AAED,wBAAgB,KAAK,IAAI,UAAU,CAElC;AAED,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,aAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAEhF;AAED,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,cAAc,GAAG,IAAI,CAE3E;AAED,wBAAsB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,aAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAKhG;AAED,wBAAsB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,aAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAE/F;AAED,wBAAsB,YAAY,CAAC,CAAC,GAAG,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,aAAU,GAAG,OAAO,CAAC,CAAC,CAAC,CAEtF;AAED,wBAAsB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,aAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAE7F;AAED,wBAAsB,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,aAAU,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAa3E;AAED,wBAAgB,cAAc,CAAC,QAAQ,SAAkB,GAAG,MAAM,CAWjE;AAED,wBAAgB,kBAAkB,CAAC,GAAG,QAAQ,EAAE,MAAM,EAAE,GAAG,MAAM,CAEhE;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,aAAU,GAAG,SAAS,CAErE"}

package/dist/fs.js

@@ -1,4 +1,4 @@
-import { mkdirSync, readdirSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
+import { mkdirSync, readdirSync, readFileSync, rmSync, statSync, writeFileSync } from 'node:fs';
 import { dirnamePath, getProcessCwd, joinPath, resolvePath } from './path.js';
 let fsPromisesModule = null;
 let fsModule = null;
@@ -89,9 +89,31 @@ export class NodeSyncFileSystem {
     mkdir(path) {
         mkdirSync(path, { recursive: true });
     }
+    exists(path) {
+        try {
+            return this.stat(path) !== null;
+        }
+        catch {
+            return false;
+        }
+    }
     readDir(path) {
         return readdirSync(path);
     }
+    stat(path) {
+        try {
+            const value = statSync(path);
+            return {
+                isFile: () => value.isFile(),
+                isDirectory: () => value.isDirectory(),
+                size: value.size,
+                mtimeMs: value.mtimeMs,
+            };
+        }
+        catch {
+            return null;
+        }
+    }
     unlink(path) {
         rmSync(path, { recursive: true, force: true });
     }

package/dist/plugin/capability-registry.d.ts

@@ -0,0 +1,35 @@
+/** Registry origin for a host capability. */
+export type CapabilityOrigin = 'builtin' | 'extension';
+/** Registry entry metadata. */
+export interface CapabilityEntry<TCapability> {
+    /** Capability implementation. */
+    capability: TCapability;
+    /** Registration origin. */
+    origin: CapabilityOrigin;
+}
+/**
+ * Generic, domain-agnostic capability registry shared by engine hosts.
+ *
+ * Stores named capabilities of an opaque type `TCapability` with replace-by-name
+ * semantics and `origin` metadata. It knows nothing about what a capability *is* —
+ * each engine supplies its own type and owns its own error types and override
+ * semantics (the registry only reports what it stores).
+ */
+export declare class CapabilityRegistry<TCapability> {
+    private readonly kind;
+    private readonly capabilities;
+    constructor(kind: string);
+    /** Register or replace a capability. */
+    register(name: string, capability: TCapability, origin?: CapabilityOrigin): void;
+    /** Return true when a capability exists. */
+    has(name: string): boolean;
+    /** Get a registered capability or throw a clear error. */
+    get(name: string): TCapability;
+    /** Get a registered entry (capability plus origin) without throwing. */
+    getEntry(name: string): CapabilityEntry<TCapability> | undefined;
+    /** List registered capability names in insertion order. */
+    list(): string[];
+    /** List registered entries (name + capability + origin) in insertion order. */
+    entries(): Array<readonly [string, CapabilityEntry<TCapability>]>;
+}
+//# sourceMappingURL=capability-registry.d.ts.map

package/dist/plugin/capability-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"capability-registry.d.ts","sourceRoot":"","sources":["../../src/plugin/capability-registry.ts"],"names":[],"mappings":"AAAA,6CAA6C;AAC7C,MAAM,MAAM,gBAAgB,GAAG,SAAS,GAAG,WAAW,CAAC;AAEvD,+BAA+B;AAC/B,MAAM,WAAW,eAAe,CAAC,WAAW;IACxC,iCAAiC;IACjC,UAAU,EAAE,WAAW,CAAC;IACxB,2BAA2B;IAC3B,MAAM,EAAE,gBAAgB,CAAC;CAC5B;AAED;;;;;;;GAOG;AACH,qBAAa,kBAAkB,CAAC,WAAW;IAG3B,OAAO,CAAC,QAAQ,CAAC,IAAI;IAFjC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAmD;gBAEnD,IAAI,EAAE,MAAM;IAEzC,wCAAwC;IACxC,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,GAAE,gBAA8B,GAAG,IAAI;IAI7F,4CAA4C;IAC5C,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAI1B,0DAA0D;IAC1D,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW;IAQ9B,wEAAwE;IACxE,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,CAAC,WAAW,CAAC,GAAG,SAAS;IAIhE,2DAA2D;IAC3D,IAAI,IAAI,MAAM,EAAE;IAIhB,+EAA+E;IAC/E,OAAO,IAAI,KAAK,CAAC,SAAS,CAAC,MAAM,EAAE,eAAe,CAAC,WAAW,CAAC,CAAC,CAAC;CAGpE"}

package/dist/plugin/capability-registry.js

@@ -0,0 +1,43 @@
+/**
+ * Generic, domain-agnostic capability registry shared by engine hosts.
+ *
+ * Stores named capabilities of an opaque type `TCapability` with replace-by-name
+ * semantics and `origin` metadata. It knows nothing about what a capability *is* —
+ * each engine supplies its own type and owns its own error types and override
+ * semantics (the registry only reports what it stores).
+ */
+export class CapabilityRegistry {
+    kind;
+    capabilities = new Map();
+    constructor(kind) {
+        this.kind = kind;
+    }
+    /** Register or replace a capability. */
+    register(name, capability, origin = 'extension') {
+        this.capabilities.set(name, { capability, origin });
+    }
+    /** Return true when a capability exists. */
+    has(name) {
+        return this.capabilities.has(name);
+    }
+    /** Get a registered capability or throw a clear error. */
+    get(name) {
+        const entry = this.capabilities.get(name);
+        if (entry === undefined) {
+            throw new Error(`Unknown ${this.kind}: ${name}`);
+        }
+        return entry.capability;
+    }
+    /** Get a registered entry (capability plus origin) without throwing. */
+    getEntry(name) {
+        return this.capabilities.get(name);
+    }
+    /** List registered capability names in insertion order. */
+    list() {
+        return [...this.capabilities.keys()];
+    }
+    /** List registered entries (name + capability + origin) in insertion order. */
+    entries() {
+        return [...this.capabilities.entries()];
+    }
+}

package/dist/plugin/extension-loader.d.ts

@@ -0,0 +1,66 @@
+/**
+ * A single extension module reference.
+ *
+ * `kind` is an engine-defined tag the registration callback uses to route the
+ * module to the right registry — the loader itself never interprets it. `path` is
+ * the relative path as authored; the loader **derives** the import target by
+ * resolving `path` against `baseDir` *after* validating it, so the trust guard
+ * always governs the actual module that gets imported. `sourceName` identifies the
+ * declaring config for diagnostics.
+ */
+export interface ExtensionRef<TExtensionKind extends string = string> {
+    /** Engine-defined capability tag, used only by the registration callback. */
+    readonly kind: TExtensionKind;
+    /** Relative path as authored, enforced by {@link assertRelativeExtensionPath}. */
+    readonly path: string;
+    /** Absolute directory the authored `path` is resolved against. */
+    readonly baseDir: string;
+    /** Name of the config (preset, workflow, …) that declared this ref. */
+    readonly sourceName: string;
+}
+/** Options controlling extension-module loading. */
+export interface LoadExtensionsOptions {
+    /**
+     * Whether to actually import extension modules. Defaults to `false`: loading
+     * arbitrary code is a trust decision the caller must make explicitly. When refs
+     * exist and this is not `true`, loading throws **before any import**.
+     */
+    readonly allowExtensions?: boolean;
+    /** Optional sink for non-fatal warnings (e.g. capability overrides). */
+    readonly logger?: {
+        warn: (message: string) => void;
+    };
+    /**
+     * Required module loader. The generic core never performs a dynamic `import`
+     * itself — the embedder supplies the import policy (typically
+     * `(absPath) => import(absPath)`), and tests pass a stub. Keeping this explicit
+     * means the shared core has no ambient code-loading capability of its own.
+     */
+    readonly moduleLoader: (absPath: string) => Promise<Record<string, unknown>>;
+}
+/** A validated extension module export: an object carrying at least a string `name`. */
+export interface LoadedExtension {
+    /** Stable name of the contributed capability bundle. */
+    readonly name: string;
+    /** Engine-specific contribution payload (actions, evaluators, …). */
+    readonly [key: string]: unknown;
+}
+/**
+ * Import each extension module behind an explicit trust gate, validate its export,
+ * then hand it to an engine-provided registration callback.
+ *
+ * The loader is domain-agnostic: it does not know which registry a module belongs to.
+ * It enforces the trust boundary (gate + relative-path guard), validates the
+ * default/named-`extension` export shape, and delegates routing to `register`.
+ *
+ * Security invariants:
+ * - No refs → no-op.
+ * - Refs present but `allowExtensions !== true` → throws **before** any `import` or
+ *   `moduleLoader` call, so a declared extension is never silently dropped.
+ * - Every ref's authored path is re-validated by {@link assertRelativeExtensionPath}.
+ *
+ * @throws When extensions are present but `allowExtensions` is not `true`, when a path
+ *   fails the trust guard, or when a module lacks a valid `name`.
+ */
+export declare function loadExtensionModules<TExtensionKind extends string>(refs: readonly ExtensionRef<TExtensionKind>[], options: LoadExtensionsOptions, register: (ref: ExtensionRef<TExtensionKind>, extension: LoadedExtension) => void | Promise<void>): Promise<void>;
+//# sourceMappingURL=extension-loader.d.ts.map

package/dist/plugin/extension-loader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"extension-loader.d.ts","sourceRoot":"","sources":["../../src/plugin/extension-loader.ts"],"names":[],"mappings":"AAGA;;;;;;;;;GASG;AACH,MAAM,WAAW,YAAY,CAAC,cAAc,SAAS,MAAM,GAAG,MAAM;IAChE,6EAA6E;IAC7E,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,kFAAkF;IAClF,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,kEAAkE;IAClE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,uEAAuE;IACvE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC/B;AAED,oDAAoD;AACpD,MAAM,WAAW,qBAAqB;IAClC;;;;OAIG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,CAAC;IACnC,wEAAwE;IACxE,QAAQ,CAAC,MAAM,CAAC,EAAE;QAAE,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAA;KAAE,CAAC;IACtD;;;;;OAKG;IACH,QAAQ,CAAC,YAAY,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CAChF;AAED,wFAAwF;AACxF,MAAM,WAAW,eAAe;IAC5B,wDAAwD;IACxD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,qEAAqE;IACrE,QAAQ,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACnC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,oBAAoB,CAAC,cAAc,SAAS,MAAM,EACpE,IAAI,EAAE,SAAS,YAAY,CAAC,cAAc,CAAC,EAAE,EAC7C,OAAO,EAAE,qBAAqB,EAC9B,QAAQ,EAAE,CAAC,GAAG,EAAE,YAAY,CAAC,cAAc,CAAC,EAAE,SAAS,EAAE,eAAe,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,GAClG,OAAO,CAAC,IAAI,CAAC,CAgCf"}

package/dist/plugin/extension-loader.js

@@ -0,0 +1,47 @@
+import { isAbsolute, resolve } from 'node:path';
+import { assertRelativeExtensionPath } from './extension-path.js';
+/**
+ * Import each extension module behind an explicit trust gate, validate its export,
+ * then hand it to an engine-provided registration callback.
+ *
+ * The loader is domain-agnostic: it does not know which registry a module belongs to.
+ * It enforces the trust boundary (gate + relative-path guard), validates the
+ * default/named-`extension` export shape, and delegates routing to `register`.
+ *
+ * Security invariants:
+ * - No refs → no-op.
+ * - Refs present but `allowExtensions !== true` → throws **before** any `import` or
+ *   `moduleLoader` call, so a declared extension is never silently dropped.
+ * - Every ref's authored path is re-validated by {@link assertRelativeExtensionPath}.
+ *
+ * @throws When extensions are present but `allowExtensions` is not `true`, when a path
+ *   fails the trust guard, or when a module lacks a valid `name`.
+ */
+export async function loadExtensionModules(refs, options, register) {
+    if (refs.length === 0)
+        return;
+    // Fail closed before importing anything: a declared extension under a disabled gate
+    // is a hard error, never a silent drop.
+    if (options.allowExtensions !== true) {
+        const first = refs[0];
+        throw new Error(`"${first.sourceName}" declares ${first.kind} extension "${first.path}", but extensions are disabled — pass allowExtensions: true to load extension modules`);
+    }
+    for (const ref of refs) {
+        if (!isAbsolute(ref.baseDir)) {
+            throw new Error(`"${ref.sourceName}" extension baseDir "${ref.baseDir}" must be an absolute directory`);
+        }
+        // Validate the authored path, then derive the import target from it so the
+        // trust guard always governs the module actually imported — the loader never
+        // imports a caller-supplied absolute path it did not resolve itself.
+        assertRelativeExtensionPath(ref.path, { sourceName: ref.sourceName });
+        const absPath = resolve(ref.baseDir, ref.path);
+        const moduleExports = await options.moduleLoader(absPath);
+        const candidate = moduleExports.default ?? moduleExports.extension;
+        if (candidate === null ||
+            typeof candidate !== 'object' ||
+            typeof candidate.name !== 'string') {
+            throw new Error(`"${ref.sourceName}" extension "${ref.path}" must export an object with a string "name"`);
+        }
+        await register(ref, candidate);
+    }
+}

package/dist/plugin/extension-path.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Assert that an extension module path is relative and does not escape its
+ * declaring directory.
+ *
+ * Extension declarations are data, and a path that is absolute or escapes via `..`
+ * is a trust-boundary violation even when extension loading is explicitly allowed.
+ * This is a standalone validator (not a schema refinement) so the loader can enforce
+ * it at load time, independent of any engine's config schema — defense in depth.
+ *
+ * @throws When the path is absolute or contains a `..` traversal segment.
+ */
+export declare function assertRelativeExtensionPath(path: string, options?: {
+    sourceName?: string;
+}): void;
+//# sourceMappingURL=extension-path.d.ts.map

package/dist/plugin/extension-path.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"extension-path.d.ts","sourceRoot":"","sources":["../../src/plugin/extension-path.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,IAAI,CAQrG"}

package/dist/plugin/extension-path.js

@@ -0,0 +1,20 @@
+/**
+ * Assert that an extension module path is relative and does not escape its
+ * declaring directory.
+ *
+ * Extension declarations are data, and a path that is absolute or escapes via `..`
+ * is a trust-boundary violation even when extension loading is explicitly allowed.
+ * This is a standalone validator (not a schema refinement) so the loader can enforce
+ * it at load time, independent of any engine's config schema — defense in depth.
+ *
+ * @throws When the path is absolute or contains a `..` traversal segment.
+ */
+export function assertRelativeExtensionPath(path, options = {}) {
+    const where = options.sourceName !== undefined ? ` declared by "${options.sourceName}"` : '';
+    if (/^([/\\]|[A-Za-z]:[/\\])/.test(path)) {
+        throw new Error(`extension path "${path}"${where} must be relative (no absolute paths)`);
+    }
+    if (path.split(/[/\\]/).includes('..')) {
+        throw new Error(`extension path "${path}"${where} must not contain ".." traversal`);
+    }
+}

package/dist/plugin/index.d.ts

@@ -0,0 +1,4 @@
+export * from './capability-registry';
+export * from './extension-loader';
+export * from './extension-path';
+//# sourceMappingURL=index.d.ts.map

package/dist/plugin/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/plugin/index.ts"],"names":[],"mappings":"AAAA,cAAc,uBAAuB,CAAC;AACtC,cAAc,oBAAoB,CAAC;AACnC,cAAc,kBAAkB,CAAC"}

package/dist/plugin/index.js

@@ -0,0 +1,3 @@
+export * from './capability-registry.js';
+export * from './extension-loader.js';
+export * from './extension-path.js';

package/dist/plugin.d.ts

@@ -0,0 +1,2 @@
+export * from './plugin/index';
+//# sourceMappingURL=plugin.d.ts.map

package/dist/plugin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../src/plugin.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAC"}

package/dist/plugin.js

@@ -0,0 +1 @@
+export * from './plugin/index.js';

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@gobing-ai/ts-runtime",
-    "version": "0.2.9",
+    "version": "0.3.1",
     "description": "@gobing-ai/ts-runtime — Runtime abstractions for Bun, Node, and Cloudflare Workers.",
     "keywords": [
         "typescript",
@@ -35,6 +35,10 @@
         "./bun-sqlite": {
             "types": "./dist/bun-sqlite.d.ts",
             "import": "./dist/bun-sqlite.js"
+        },
+        "./plugin": {
+            "types": "./dist/plugin.d.ts",
+            "import": "./dist/plugin.js"
         }
     },
     "files": [
@@ -54,7 +58,7 @@
         "release": "echo 'Manual publish is disabled. Releases go through GitHub Actions via Trusted Publishing — push a tag: git tag @gobing-ai/ts-runtime-v<version> && git push --tags' && exit 1"
     },
     "dependencies": {
-        "@gobing-ai/ts-utils": "^0.2.9",
+        "@gobing-ai/ts-utils": "^0.3.1",
         "execa": "^9.5.0",
         "yaml": "^2.7.0",
         "zod": "^4.1.0"

package/src/fs.ts

@@ -1,4 +1,4 @@
-import { mkdirSync, readdirSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
+import { mkdirSync, readdirSync, readFileSync, rmSync, statSync, writeFileSync } from 'node:fs';
 import { dirnamePath, getProcessCwd, joinPath, resolvePath } from './path';
 
 export interface FileStat {
@@ -32,7 +32,9 @@ export interface SyncFileSystem {
     readFile(path: string): string;
     writeFile(path: string, content: string): void;
     mkdir(path: string): void;
+    exists(path: string): boolean;
     readDir(path: string): string[];
+    stat(path: string): FileStat | null;
     unlink(path: string): void;
 }
 
@@ -144,10 +146,32 @@ export class NodeSyncFileSystem implements SyncFileSystem {
         mkdirSync(path, { recursive: true });
     }
 
+    exists(path: string): boolean {
+        try {
+            return this.stat(path) !== null;
+        } catch {
+            return false;
+        }
+    }
+
     readDir(path: string): string[] {
         return readdirSync(path);
     }
 
+    stat(path: string): FileStat | null {
+        try {
+            const value = statSync(path);
+            return {
+                isFile: () => value.isFile(),
+                isDirectory: () => value.isDirectory(),
+                size: value.size,
+                mtimeMs: value.mtimeMs,
+            };
+        } catch {
+            return null;
+        }
+    }
+
     unlink(path: string): void {
         rmSync(path, { recursive: true, force: true });
     }

package/src/plugin/capability-registry.ts

@@ -0,0 +1,58 @@
+/** Registry origin for a host capability. */
+export type CapabilityOrigin = 'builtin' | 'extension';
+
+/** Registry entry metadata. */
+export interface CapabilityEntry<TCapability> {
+    /** Capability implementation. */
+    capability: TCapability;
+    /** Registration origin. */
+    origin: CapabilityOrigin;
+}
+
+/**
+ * Generic, domain-agnostic capability registry shared by engine hosts.
+ *
+ * Stores named capabilities of an opaque type `TCapability` with replace-by-name
+ * semantics and `origin` metadata. It knows nothing about what a capability *is* —
+ * each engine supplies its own type and owns its own error types and override
+ * semantics (the registry only reports what it stores).
+ */
+export class CapabilityRegistry<TCapability> {
+    private readonly capabilities = new Map<string, CapabilityEntry<TCapability>>();
+
+    constructor(private readonly kind: string) {}
+
+    /** Register or replace a capability. */
+    register(name: string, capability: TCapability, origin: CapabilityOrigin = 'extension'): void {
+        this.capabilities.set(name, { capability, origin });
+    }
+
+    /** Return true when a capability exists. */
+    has(name: string): boolean {
+        return this.capabilities.has(name);
+    }
+
+    /** Get a registered capability or throw a clear error. */
+    get(name: string): TCapability {
+        const entry = this.capabilities.get(name);
+        if (entry === undefined) {
+            throw new Error(`Unknown ${this.kind}: ${name}`);
+        }
+        return entry.capability;
+    }
+
+    /** Get a registered entry (capability plus origin) without throwing. */
+    getEntry(name: string): CapabilityEntry<TCapability> | undefined {
+        return this.capabilities.get(name);
+    }
+
+    /** List registered capability names in insertion order. */
+    list(): string[] {
+        return [...this.capabilities.keys()];
+    }
+
+    /** List registered entries (name + capability + origin) in insertion order. */
+    entries(): Array<readonly [string, CapabilityEntry<TCapability>]> {
+        return [...this.capabilities.entries()];
+    }
+}

package/src/plugin/extension-loader.ts

@@ -0,0 +1,105 @@
+import { isAbsolute, resolve } from 'node:path';
+import { assertRelativeExtensionPath } from './extension-path';
+
+/**
+ * A single extension module reference.
+ *
+ * `kind` is an engine-defined tag the registration callback uses to route the
+ * module to the right registry — the loader itself never interprets it. `path` is
+ * the relative path as authored; the loader **derives** the import target by
+ * resolving `path` against `baseDir` *after* validating it, so the trust guard
+ * always governs the actual module that gets imported. `sourceName` identifies the
+ * declaring config for diagnostics.
+ */
+export interface ExtensionRef<TExtensionKind extends string = string> {
+    /** Engine-defined capability tag, used only by the registration callback. */
+    readonly kind: TExtensionKind;
+    /** Relative path as authored, enforced by {@link assertRelativeExtensionPath}. */
+    readonly path: string;
+    /** Absolute directory the authored `path` is resolved against. */
+    readonly baseDir: string;
+    /** Name of the config (preset, workflow, …) that declared this ref. */
+    readonly sourceName: string;
+}
+
+/** Options controlling extension-module loading. */
+export interface LoadExtensionsOptions {
+    /**
+     * Whether to actually import extension modules. Defaults to `false`: loading
+     * arbitrary code is a trust decision the caller must make explicitly. When refs
+     * exist and this is not `true`, loading throws **before any import**.
+     */
+    readonly allowExtensions?: boolean;
+    /** Optional sink for non-fatal warnings (e.g. capability overrides). */
+    readonly logger?: { warn: (message: string) => void };
+    /**
+     * Required module loader. The generic core never performs a dynamic `import`
+     * itself — the embedder supplies the import policy (typically
+     * `(absPath) => import(absPath)`), and tests pass a stub. Keeping this explicit
+     * means the shared core has no ambient code-loading capability of its own.
+     */
+    readonly moduleLoader: (absPath: string) => Promise<Record<string, unknown>>;
+}
+
+/** A validated extension module export: an object carrying at least a string `name`. */
+export interface LoadedExtension {
+    /** Stable name of the contributed capability bundle. */
+    readonly name: string;
+    /** Engine-specific contribution payload (actions, evaluators, …). */
+    readonly [key: string]: unknown;
+}
+
+/**
+ * Import each extension module behind an explicit trust gate, validate its export,
+ * then hand it to an engine-provided registration callback.
+ *
+ * The loader is domain-agnostic: it does not know which registry a module belongs to.
+ * It enforces the trust boundary (gate + relative-path guard), validates the
+ * default/named-`extension` export shape, and delegates routing to `register`.
+ *
+ * Security invariants:
+ * - No refs → no-op.
+ * - Refs present but `allowExtensions !== true` → throws **before** any `import` or
+ *   `moduleLoader` call, so a declared extension is never silently dropped.
+ * - Every ref's authored path is re-validated by {@link assertRelativeExtensionPath}.
+ *
+ * @throws When extensions are present but `allowExtensions` is not `true`, when a path
+ *   fails the trust guard, or when a module lacks a valid `name`.
+ */
+export async function loadExtensionModules<TExtensionKind extends string>(
+    refs: readonly ExtensionRef<TExtensionKind>[],
+    options: LoadExtensionsOptions,
+    register: (ref: ExtensionRef<TExtensionKind>, extension: LoadedExtension) => void | Promise<void>,
+): Promise<void> {
+    if (refs.length === 0) return;
+
+    // Fail closed before importing anything: a declared extension under a disabled gate
+    // is a hard error, never a silent drop.
+    if (options.allowExtensions !== true) {
+        const first = refs[0] as ExtensionRef<TExtensionKind>;
+        throw new Error(
+            `"${first.sourceName}" declares ${first.kind} extension "${first.path}", but extensions are disabled — pass allowExtensions: true to load extension modules`,
+        );
+    }
+
+    for (const ref of refs) {
+        if (!isAbsolute(ref.baseDir)) {
+            throw new Error(`"${ref.sourceName}" extension baseDir "${ref.baseDir}" must be an absolute directory`);
+        }
+        // Validate the authored path, then derive the import target from it so the
+        // trust guard always governs the module actually imported — the loader never
+        // imports a caller-supplied absolute path it did not resolve itself.
+        assertRelativeExtensionPath(ref.path, { sourceName: ref.sourceName });
+        const absPath = resolve(ref.baseDir, ref.path);
+        const moduleExports = await options.moduleLoader(absPath);
+        const candidate = moduleExports.default ?? moduleExports.extension;
+        if (
+            candidate === null ||
+            typeof candidate !== 'object' ||
+            typeof (candidate as { name?: unknown }).name !== 'string'
+        ) {
+            throw new Error(`"${ref.sourceName}" extension "${ref.path}" must export an object with a string "name"`);
+        }
+        await register(ref, candidate as LoadedExtension);
+    }
+}

package/src/plugin/extension-path.ts

@@ -0,0 +1,20 @@
+/**
+ * Assert that an extension module path is relative and does not escape its
+ * declaring directory.
+ *
+ * Extension declarations are data, and a path that is absolute or escapes via `..`
+ * is a trust-boundary violation even when extension loading is explicitly allowed.
+ * This is a standalone validator (not a schema refinement) so the loader can enforce
+ * it at load time, independent of any engine's config schema — defense in depth.
+ *
+ * @throws When the path is absolute or contains a `..` traversal segment.
+ */
+export function assertRelativeExtensionPath(path: string, options: { sourceName?: string } = {}): void {
+    const where = options.sourceName !== undefined ? ` declared by "${options.sourceName}"` : '';
+    if (/^([/\\]|[A-Za-z]:[/\\])/.test(path)) {
+        throw new Error(`extension path "${path}"${where} must be relative (no absolute paths)`);
+    }
+    if (path.split(/[/\\]/).includes('..')) {
+        throw new Error(`extension path "${path}"${where} must not contain ".." traversal`);
+    }
+}

package/src/plugin/index.ts

@@ -0,0 +1,3 @@
+export * from './capability-registry';
+export * from './extension-loader';
+export * from './extension-path';

package/src/plugin.ts

@@ -0,0 +1 @@
+export * from './plugin/index';