@hypersoniclabs/helix-cli 0.1.7 → 0.1.23

package/dist/bridge/plugins.d.ts

@@ -0,0 +1,17 @@
+import { type BridgePluginManifest } from './types';
+export declare const OFFICIAL_BRIDGE_PLUGINS: BridgePluginManifest[];
+export interface LoadedBridgePlugin {
+    root: string | null;
+    manifest: BridgePluginManifest;
+    official: boolean;
+    contentDigest: string;
+}
+export declare function bridgePluginPayloadDigest(root: string): string;
+export declare function bridgeCoreImplementationIdentity(): {
+    cliPackageVersion: string;
+    bridgeCoreImplementationVersion: string;
+};
+export declare function officialBridgePluginDigest(manifest: BridgePluginManifest): string;
+export declare function loadExternalBridgePlugin(root: string): LoadedBridgePlugin;
+export declare function defaultBridgeHome(): string;
+export declare function loadBridgePlugins(pluginDirs?: string[]): LoadedBridgePlugin[];

package/dist/bridge/plugins.js

@@ -0,0 +1,307 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OFFICIAL_BRIDGE_PLUGINS = void 0;
+exports.bridgePluginPayloadDigest = bridgePluginPayloadDigest;
+exports.bridgeCoreImplementationIdentity = bridgeCoreImplementationIdentity;
+exports.officialBridgePluginDigest = officialBridgePluginDigest;
+exports.loadExternalBridgePlugin = loadExternalBridgePlugin;
+exports.defaultBridgeHome = defaultBridgeHome;
+exports.loadBridgePlugins = loadBridgePlugins;
+const node_crypto_1 = require("node:crypto");
+const node_fs_1 = require("node:fs");
+const node_os_1 = require("node:os");
+const node_path_1 = require("node:path");
+const manifest_1 = require("./manifest");
+const hash_1 = require("./hash");
+const types_1 = require("./types");
+exports.OFFICIAL_BRIDGE_PLUGINS = [
+    {
+        schemaVersion: types_1.BRIDGE_PLUGIN_SCHEMA,
+        id: 'helix.formats',
+        name: 'HELIX Generic Formats',
+        version: '1.0.0',
+        trust: 'helix-verified',
+        permissions: ['filesystem.read-source', 'filesystem.write-output'],
+        capabilities: [
+            {
+                id: 'helix.asset.copy',
+                stage: 'package',
+                accepts: ['format.glb', 'format.gltf', 'format.fbx', 'format.obj', 'format.usd', 'format.usdz', 'format.vrm', 'format.image', 'format.audio', 'metahuman.face'],
+                produces: ['helix.package.asset'],
+                permissions: ['filesystem.read-source', 'filesystem.write-output'],
+                description: 'Preserve a source asset as a checksummed HELIX package input.',
+            },
+        ],
+    },
+    {
+        schemaVersion: types_1.BRIDGE_PLUGIN_SCHEMA,
+        id: 'helix.characters',
+        name: 'HELIX Character Utilities',
+        version: '1.0.0',
+        trust: 'helix-verified',
+        permissions: ['filesystem.read-source', 'filesystem.write-output'],
+        capabilities: [
+            {
+                id: 'helix.character.import',
+                stage: 'transform',
+                accepts: ['format.glb', 'format.fbx'],
+                produces: ['helix.package.character'],
+                targets: ['web', 'canonical'],
+                permissions: ['filesystem.read-source', 'filesystem.write-output'],
+                description: 'Retarget, conform, optimize, and package a biped as helix-humanoid@1.',
+            },
+            {
+                // A SEPARATE capability from `helix.character.import`, not a widened `accepts`, because a VRM is not
+                // a GLB that happens to end in .vrm. It carries an explicit humanoid bone map, SpringBone chains and
+                // an expression block, and the conversion reads all three — where the generic biped path has to infer
+                // a skeleton from naming and has no secondary motion or face to carry at all. One capability doing
+                // both would have to branch on the source kind in its own body, which is the thing the capability
+                // graph exists to express.
+                //
+                // Runs IN-PROCESS on read-source/write-output alone: a VRM is a glTF and the whole conversion is
+                // TypeScript over gltf-transform. That is also why `helix bridge import avatar.vrm` needs no reviewed
+                // plan key — the acknowledgement exists for command-backed adapters, and this spawns nothing. A
+                // VRChat avatar is the opposite case and belongs in its own Unity-permissioned plugin.
+                id: 'helix.character.vrm.import',
+                stage: 'transform',
+                accepts: ['format.vrm'],
+                produces: ['helix.package.character'],
+                targets: ['web', 'canonical'],
+                permissions: ['filesystem.read-source', 'filesystem.write-output'],
+                description: 'Convert a VRM avatar to helix-humanoid@1, carrying its SpringBone physics and expressions.',
+            },
+            {
+                id: 'helix.animation.retarget',
+                stage: 'transform',
+                accepts: ['format.glb', 'format.fbx'],
+                produces: ['helix.package.animation'],
+                targets: ['web', 'canonical'],
+                permissions: ['filesystem.read-source', 'filesystem.write-output'],
+                description: 'Retarget an animation to helix-humanoid@1.',
+            },
+            {
+                id: 'helix.character.addon.import',
+                stage: 'transform',
+                accepts: ['format.glb', 'format.fbx'],
+                produces: ['helix.package.character-addon'],
+                targets: ['web', 'canonical'],
+                permissions: ['filesystem.read-source', 'filesystem.write-output'],
+                requires: ['input:host', 'input:addon'],
+                description: 'Conform a modular character part to a published HELIX host and emit its runtime add-on contract.',
+            },
+        ],
+    },
+    {
+        schemaVersion: types_1.BRIDGE_PLUGIN_SCHEMA,
+        id: 'helix.metahuman',
+        name: 'HELIX MetaHuman',
+        version: '1.0.0',
+        trust: 'helix-verified',
+        permissions: ['filesystem.read-source', 'filesystem.write-output'],
+        capabilities: [
+            {
+                id: 'metahuman.face.materials',
+                stage: 'transform',
+                accepts: ['metahuman.face'],
+                produces: ['helix.package.character-face'],
+                targets: ['web', 'canonical'],
+                permissions: ['filesystem.read-source', 'filesystem.write-output'],
+                requires: ['input:headTexture'],
+                description: 'Bake the head and preserve textured MetaHuman eyes with the packaged canonical eye bake before web packaging.',
+            },
+        ],
+    },
+    {
+        schemaVersion: types_1.BRIDGE_PLUGIN_SCHEMA,
+        id: 'helix.scenes',
+        name: 'HELIX Scene Utilities',
+        version: '1.0.0',
+        trust: 'helix-verified',
+        permissions: ['filesystem.read-source', 'filesystem.write-output'],
+        capabilities: [
+            {
+                id: 'helix.scene.package',
+                stage: 'package',
+                accepts: ['format.glb', 'format.fbx', 'format.obj'],
+                produces: ['helix.package.scene'],
+                targets: ['web', 'unreal', 'canonical'],
+                permissions: ['filesystem.read-source', 'filesystem.write-output'],
+                description: 'Convert supported geometry to a deterministic HELIX Scene package.',
+            },
+        ],
+    },
+    {
+        schemaVersion: types_1.BRIDGE_PLUGIN_SCHEMA,
+        id: 'helix.engines',
+        name: 'HELIX Engine Projects',
+        version: '1.0.0',
+        trust: 'helix-verified',
+        permissions: ['filesystem.read-source', 'filesystem.write-output', 'spawn-process', 'unreal-editor', 'unity-editor'],
+        capabilities: [
+            {
+                id: 'unity.project.extract',
+                stage: 'extract',
+                accepts: ['unity.project'],
+                produces: ['format.glb'],
+                permissions: ['filesystem.read-source', 'filesystem.write-output', 'spawn-process', 'unity-editor'],
+                requires: ['adapter:unity-project-extract'],
+                description: 'Extract a Unity project through the official batch-mode adapter.',
+            },
+            {
+                id: 'godot.project.extract',
+                stage: 'extract',
+                accepts: ['godot.project'],
+                produces: ['format.glb'],
+                permissions: ['filesystem.read-source', 'filesystem.write-output', 'spawn-process'],
+                requires: ['adapter:godot-project-extract'],
+                description: 'Extract a Godot project through its headless adapter.',
+            },
+        ],
+    },
+];
+const PACKAGED_UNREAL_PLUGIN_MANIFEST = {
+    schemaVersion: types_1.BRIDGE_PLUGIN_SCHEMA,
+    id: 'helix.bridge.unreal',
+    name: 'HELIX Unreal Bridge',
+    version: '1.0.0',
+    trust: 'helix-verified',
+    description: 'Official Unreal Engine skeletal-mesh extraction adapter for HELIX Bridge.',
+    permissions: [
+        'filesystem.read-source',
+        'filesystem.write-output',
+        'spawn-process',
+        'unrestricted-host-execution',
+        'unreal-editor',
+    ],
+    capabilities: [{
+            id: 'unreal.project.extract',
+            stage: 'extract',
+            accepts: ['unreal.project'],
+            produces: ['format.fbx'],
+            targets: ['web', 'unreal', 'canonical'],
+            permissions: [
+                'filesystem.read-source',
+                'filesystem.write-output',
+                'spawn-process',
+                'unrestricted-host-execution',
+                'unreal-editor',
+            ],
+            requires: ['tool:unreal-editor-commandlet', 'input:unrealAsset'],
+            description: 'Open the snapshotted Unreal project in the full editor and export one configured Skeletal Mesh to FBX.',
+            command: { executable: 'bin/unreal-skeletal-mesh-extract.js', timeoutSeconds: 3600 },
+        }],
+};
+function bridgePluginPayloadDigest(root) {
+    const hash = (0, node_crypto_1.createHash)('sha256');
+    const visit = (current) => {
+        for (const entry of (0, node_fs_1.readdirSync)(current, { withFileTypes: true }).sort((a, b) => a.name.localeCompare(b.name))) {
+            const path = (0, node_path_1.join)(current, entry.name);
+            const info = (0, node_fs_1.lstatSync)(path);
+            if (info.isSymbolicLink())
+                throw new Error(`Bridge plugins may not contain symlinks: ${path}`);
+            if (info.isDirectory())
+                visit(path);
+            else if (info.isFile()) {
+                const fingerprint = (0, hash_1.hashAndSizeFileSync)(path);
+                hash.update(`${(0, node_path_1.relative)(root, path).replaceAll('\\', '/')}\0${fingerprint.sizeBytes}\0${fingerprint.sha256}\0`);
+            }
+            else {
+                throw new Error(`Bridge plugins may contain only regular files and directories: ${path}`);
+            }
+        }
+    };
+    visit(root);
+    return hash.digest('hex');
+}
+function bridgeCoreImplementationIdentity() {
+    const packageJson = JSON.parse((0, node_fs_1.readFileSync)((0, node_path_1.join)(__dirname, '..', '..', 'package.json'), 'utf8'));
+    if (typeof packageJson.version !== 'string' || packageJson.version.trim() === '') {
+        throw new Error('HELIX CLI package.json has no valid version for Bridge identity.');
+    }
+    return {
+        cliPackageVersion: packageJson.version,
+        bridgeCoreImplementationVersion: types_1.BRIDGE_CORE_IMPLEMENTATION_VERSION,
+    };
+}
+function officialBridgePluginDigest(manifest) {
+    return (0, node_crypto_1.createHash)('sha256').update(JSON.stringify({
+        implementation: bridgeCoreImplementationIdentity(),
+        manifest,
+    })).digest('hex');
+}
+function loadExternalBridgePlugin(root) {
+    const loaded = (0, manifest_1.readBridgePluginManifest)(root);
+    return {
+        root: loaded.root,
+        manifest: loaded.manifest,
+        official: false,
+        contentDigest: bridgePluginPayloadDigest(loaded.root),
+    };
+}
+function loadPackagedOfficialBridgePlugin() {
+    const root = (0, node_path_1.join)(__dirname, '..', '..', 'bridge-plugins', 'helix.bridge.unreal');
+    const manifestPath = (0, node_path_1.join)(root, 'bridge-plugin.json');
+    if (!(0, node_fs_1.existsSync)(manifestPath))
+        return null;
+    const info = (0, node_fs_1.lstatSync)(manifestPath);
+    if (!info.isFile() || info.isSymbolicLink()) {
+        throw new Error(`Packaged Unreal Bridge manifest must be a regular non-symlink file: ${manifestPath}`);
+    }
+    const parsed = JSON.parse((0, node_fs_1.readFileSync)(manifestPath, 'utf8'));
+    if (JSON.stringify(parsed) !== JSON.stringify(PACKAGED_UNREAL_PLUGIN_MANIFEST)) {
+        throw new Error('Packaged Unreal Bridge manifest does not match the signed CLI registry.');
+    }
+    return {
+        root,
+        manifest: PACKAGED_UNREAL_PLUGIN_MANIFEST,
+        official: true,
+        contentDigest: bridgePluginPayloadDigest(root),
+    };
+}
+function defaultBridgeHome() {
+    return (0, node_path_1.resolve)(process.env.HELIX_BRIDGE_HOME ?? (0, node_path_1.join)((0, node_os_1.homedir)(), '.helix', 'bridge'));
+}
+function isLifecyclePluginDirectory(name) {
+    return name.startsWith('.') || /\.(?:replaced|removed)\./.test(name) || name.endsWith('.tmp');
+}
+function loadBridgePlugins(pluginDirs = []) {
+    const plugins = exports.OFFICIAL_BRIDGE_PLUGINS.map((manifest) => ({
+        root: null,
+        manifest,
+        official: true,
+        contentDigest: officialBridgePluginDigest(manifest),
+    }));
+    const packagedUnreal = loadPackagedOfficialBridgePlugin();
+    if (packagedUnreal)
+        plugins.push(packagedUnreal);
+    const roots = [(0, node_path_1.join)(defaultBridgeHome(), 'plugins'), ...pluginDirs.map((path) => (0, node_path_1.resolve)(path))];
+    for (const root of roots) {
+        if (!(0, node_fs_1.existsSync)(root))
+            continue;
+        const direct = (0, node_fs_1.existsSync)((0, node_path_1.join)(root, 'bridge-plugin.json'));
+        if (direct && isLifecyclePluginDirectory((0, node_path_1.basename)(root)))
+            continue;
+        const candidates = direct
+            ? [root]
+            : (0, node_fs_1.readdirSync)(root, { withFileTypes: true })
+                .filter((entry) => entry.isDirectory() && !isLifecyclePluginDirectory(entry.name))
+                .map((entry) => (0, node_path_1.join)(root, entry.name));
+        for (const candidate of candidates.sort()) {
+            if (!(0, node_fs_1.existsSync)((0, node_path_1.join)(candidate, 'bridge-plugin.json')))
+                continue;
+            const loaded = loadExternalBridgePlugin(candidate);
+            // Scanned roots expose only the canonical active generation. Explicit
+            // direct plugin directories remain useful for local development even
+            // when their checkout directory is not named after the manifest ID.
+            if (!direct && (0, node_path_1.basename)(candidate) !== loaded.manifest.id)
+                continue;
+            const existing = plugins.findIndex((entry) => entry.manifest.id === loaded.manifest.id);
+            if (existing >= 0)
+                plugins.splice(existing, 1, loaded);
+            else
+                plugins.push(loaded);
+        }
+    }
+    return plugins;
+}
+//# sourceMappingURL=plugins.js.map

package/dist/bridge/plugins.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugins.js","sourceRoot":"","sources":["../../src/bridge/plugins.ts"],"names":[],"mappings":";;;AAsMA,8DAkBC;AAED,4EASC;AAED,gEAKC;AAED,4DAQC;AAsBD,8CAEC;AAMD,8CAgCC;AAlTD,6CAAyC;AACzC,qCAA2E;AAC3E,qCAAkC;AAClC,yCAA8D;AAC9D,yCAAsD;AACtD,iCAA6C;AAC7C,mCAIiB;AAEJ,QAAA,uBAAuB,GAA2B;IAC7D;QACE,aAAa,EAAE,4BAAoB;QACnC,EAAE,EAAE,eAAe;QACnB,IAAI,EAAE,uBAAuB;QAC7B,OAAO,EAAE,OAAO;QAChB,KAAK,EAAE,gBAAgB;QACvB,WAAW,EAAE,CAAC,wBAAwB,EAAE,yBAAyB,CAAC;QAClE,YAAY,EAAE;YACZ;gBACE,EAAE,EAAE,kBAAkB;gBACtB,KAAK,EAAE,SAAS;gBAChB,OAAO,EAAE,CAAC,YAAY,EAAE,aAAa,EAAE,YAAY,EAAE,YAAY,EAAE,YAAY,EAAE,aAAa,EAAE,YAAY,EAAE,cAAc,EAAE,cAAc,EAAE,gBAAgB,CAAC;gBAC/J,QAAQ,EAAE,CAAC,qBAAqB,CAAC;gBACjC,WAAW,EAAE,CAAC,wBAAwB,EAAE,yBAAyB,CAAC;gBAClE,WAAW,EAAE,+DAA+D;aAC7E;SACF;KACF;IACD;QACE,aAAa,EAAE,4BAAoB;QACnC,EAAE,EAAE,kBAAkB;QACtB,IAAI,EAAE,2BAA2B;QACjC,OAAO,EAAE,OAAO;QAChB,KAAK,EAAE,gBAAgB;QACvB,WAAW,EAAE,CAAC,wBAAwB,EAAE,yBAAyB,CAAC;QAClE,YAAY,EAAE;YACZ;gBACE,EAAE,EAAE,wBAAwB;gBAC5B,KAAK,EAAE,WAAW;gBAClB,OAAO,EAAE,CAAC,YAAY,EAAE,YAAY,CAAC;gBACrC,QAAQ,EAAE,CAAC,yBAAyB,CAAC;gBACrC,OAAO,EAAE,CAAC,KAAK,EAAE,WAAW,CAAC;gBAC7B,WAAW,EAAE,CAAC,wBAAwB,EAAE,yBAAyB,CAAC;gBAClE,WAAW,EAAE,uEAAuE;aACrF;YACD;gBACE,qGAAqG;gBACrG,qGAAqG;gBACrG,sGAAsG;gBACtG,mGAAmG;gBACnG,kGAAkG;gBAClG,2BAA2B;gBAC3B,EAAE;gBACF,iGAAiG;gBACjG,sGAAsG;gBACtG,gGAAgG;gBAChG,uFAAuF;gBACvF,EAAE,EAAE,4BAA4B;gBAChC,KAAK,EAAE,WAAW;gBAClB,OAAO,EAAE,CAAC,YAAY,CAAC;gBACvB,QAAQ,EAAE,CAAC,yBAAyB,CAAC;gBACrC,OAAO,EAAE,CAAC,KAAK,EAAE,WAAW,CAAC;gBAC7B,WAAW,EAAE,CAAC,wBAAwB,EAAE,yBAAyB,CAAC;gBAClE,WAAW,EAAE,4FAA4F;aAC1G;YACD;gBACE,EAAE,EAAE,0BAA0B;gBAC9B,KAAK,EAAE,WAAW;gBAClB,OAAO,EAAE,CAAC,YAAY,EAAE,YAAY,CAAC;gBACrC,QAAQ,EAAE,CAAC,yBAAyB,CAAC;gBACrC,OAAO,EAAE,CAAC,KAAK,EAAE,WAAW,CAAC;gBAC7B,WAAW,EAAE,CAAC,wBAAwB,EAAE,yBAAyB,CAAC;gBAClE,WAAW,EAAE,4CAA4C;aAC1D;YACD;gBACE,EAAE,EAAE,8BAA8B;gBAClC,KAAK,EAAE,WAAW;gBAClB,OAAO,EAAE,CAAC,YAAY,EAAE,YAAY,CAAC;gBACrC,QAAQ,EAAE,CAAC,+BAA+B,CAAC;gBAC3C,OAAO,EAAE,CAAC,KAAK,EAAE,WAAW,CAAC;gBAC7B,WAAW,EAAE,CAAC,wBAAwB,EAAE,yBAAyB,CAAC;gBAClE,QAAQ,EAAE,CAAC,YAAY,EAAE,aAAa,CAAC;gBACvC,WAAW,EAAE,kGAAkG;aAChH;SACF;KACF;IACD;QACE,aAAa,EAAE,4BAAoB;QACnC,EAAE,EAAE,iBAAiB;QACrB,IAAI,EAAE,iBAAiB;QACvB,OAAO,EAAE,OAAO;QAChB,KAAK,EAAE,gBAAgB;QACvB,WAAW,EAAE,CAAC,wBAAwB,EAAE,yBAAyB,CAAC;QAClE,YAAY,EAAE;YACZ;gBACE,EAAE,EAAE,0BAA0B;gBAC9B,KAAK,EAAE,WAAW;gBAClB,OAAO,EAAE,CAAC,gBAAgB,CAAC;gBAC3B,QAAQ,EAAE,CAAC,8BAA8B,CAAC;gBAC1C,OAAO,EAAE,CAAC,KAAK,EAAE,WAAW,CAAC;gBAC7B,WAAW,EAAE,CAAC,wBAAwB,EAAE,yBAAyB,CAAC;gBAClE,QAAQ,EAAE,CAAC,mBAAmB,CAAC;gBAC/B,WAAW,EAAE,+GAA+G;aAC7H;SACF;KACF;IACD;QACE,aAAa,EAAE,4BAAoB;QACnC,EAAE,EAAE,cAAc;QAClB,IAAI,EAAE,uBAAuB;QAC7B,OAAO,EAAE,OAAO;QAChB,KAAK,EAAE,gBAAgB;QACvB,WAAW,EAAE,CAAC,wBAAwB,EAAE,yBAAyB,CAAC;QAClE,YAAY,EAAE;YACZ;gBACE,EAAE,EAAE,qBAAqB;gBACzB,KAAK,EAAE,SAAS;gBAChB,OAAO,EAAE,CAAC,YAAY,EAAE,YAAY,EAAE,YAAY,CAAC;gBACnD,QAAQ,EAAE,CAAC,qBAAqB,CAAC;gBACjC,OAAO,EAAE,CAAC,KAAK,EAAE,QAAQ,EAAE,WAAW,CAAC;gBACvC,WAAW,EAAE,CAAC,wBAAwB,EAAE,yBAAyB,CAAC;gBAClE,WAAW,EAAE,oEAAoE;aAClF;SACF;KACF;IACD;QACE,aAAa,EAAE,4BAAoB;QACnC,EAAE,EAAE,eAAe;QACnB,IAAI,EAAE,uBAAuB;QAC7B,OAAO,EAAE,OAAO;QAChB,KAAK,EAAE,gBAAgB;QACvB,WAAW,EAAE,CAAC,wBAAwB,EAAE,yBAAyB,EAAE,eAAe,EAAE,eAAe,EAAE,cAAc,CAAC;QACpH,YAAY,EAAE;YACZ;gBACE,EAAE,EAAE,uBAAuB;gBAC3B,KAAK,EAAE,SAAS;gBAChB,OAAO,EAAE,CAAC,eAAe,CAAC;gBAC1B,QAAQ,EAAE,CAAC,YAAY,CAAC;gBACxB,WAAW,EAAE,CAAC,wBAAwB,EAAE,yBAAyB,EAAE,eAAe,EAAE,cAAc,CAAC;gBACnG,QAAQ,EAAE,CAAC,+BAA+B,CAAC;gBAC3C,WAAW,EAAE,kEAAkE;aAChF;YACD;gBACE,EAAE,EAAE,uBAAuB;gBAC3B,KAAK,EAAE,SAAS;gBAChB,OAAO,EAAE,CAAC,eAAe,CAAC;gBAC1B,QAAQ,EAAE,CAAC,YAAY,CAAC;gBACxB,WAAW,EAAE,CAAC,wBAAwB,EAAE,yBAAyB,EAAE,eAAe,CAAC;gBACnF,QAAQ,EAAE,CAAC,+BAA+B,CAAC;gBAC3C,WAAW,EAAE,uDAAuD;aACrE;SACF;KACF;CACF,CAAC;AAEF,MAAM,+BAA+B,GAAyB;IAC5D,aAAa,EAAE,4BAAoB;IACnC,EAAE,EAAE,qBAAqB;IACzB,IAAI,EAAE,qBAAqB;IAC3B,OAAO,EAAE,OAAO;IAChB,KAAK,EAAE,gBAAgB;IACvB,WAAW,EAAE,2EAA2E;IACxF,WAAW,EAAE;QACX,wBAAwB;QACxB,yBAAyB;QACzB,eAAe;QACf,6BAA6B;QAC7B,eAAe;KAChB;IACD,YAAY,EAAE,CAAC;YACb,EAAE,EAAE,wBAAwB;YAC5B,KAAK,EAAE,SAAS;YAChB,OAAO,EAAE,CAAC,gBAAgB,CAAC;YAC3B,QAAQ,EAAE,CAAC,YAAY,CAAC;YACxB,OAAO,EAAE,CAAC,KAAK,EAAE,QAAQ,EAAE,WAAW,CAAC;YACvC,WAAW,EAAE;gBACX,wBAAwB;gBACxB,yBAAyB;gBACzB,eAAe;gBACf,6BAA6B;gBAC7B,eAAe;aAChB;YACD,QAAQ,EAAE,CAAC,+BAA+B,EAAE,mBAAmB,CAAC;YAChE,WAAW,EAAE,wGAAwG;YACrH,OAAO,EAAE,EAAE,UAAU,EAAE,qCAAqC,EAAE,cAAc,EAAE,IAAI,EAAE;SACrF,CAAC;CACH,CAAC;AASF,SAAgB,yBAAyB,CAAC,IAAY;IACpD,MAAM,IAAI,GAAG,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC;IAClC,MAAM,KAAK,GAAG,CAAC,OAAe,EAAQ,EAAE;QACtC,KAAK,MAAM,KAAK,IAAI,IAAA,qBAAW,EAAC,OAAO,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YAC/G,MAAM,IAAI,GAAG,IAAA,gBAAI,EAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACvC,MAAM,IAAI,GAAG,IAAA,mBAAS,EAAC,IAAI,CAAC,CAAC;YAC7B,IAAI,IAAI,CAAC,cAAc,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,IAAI,EAAE,CAAC,CAAC;YAC/F,IAAI,IAAI,CAAC,WAAW,EAAE;gBAAE,KAAK,CAAC,IAAI,CAAC,CAAC;iBAC/B,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;gBACvB,MAAM,WAAW,GAAG,IAAA,0BAAmB,EAAC,IAAI,CAAC,CAAC;gBAC9C,IAAI,CAAC,MAAM,CAAC,GAAG,IAAA,oBAAQ,EAAC,IAAI,EAAE,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,WAAW,CAAC,SAAS,KAAK,WAAW,CAAC,MAAM,IAAI,CAAC,CAAC;YAClH,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,KAAK,CAAC,kEAAkE,IAAI,EAAE,CAAC,CAAC;YAC5F,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,CAAC;IACZ,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC5B,CAAC;AAED,SAAgB,gCAAgC;IAC9C,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,IAAA,sBAAY,EAAC,IAAA,gBAAI,EAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAA0B,CAAC;IAC3H,IAAI,OAAO,WAAW,CAAC,OAAO,KAAK,QAAQ,IAAI,WAAW,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACjF,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;IACtF,CAAC;IACD,OAAO;QACL,iBAAiB,EAAE,WAAW,CAAC,OAAO;QACtC,+BAA+B,EAAE,0CAAkC;KACpE,CAAC;AACJ,CAAC;AAED,SAAgB,0BAA0B,CAAC,QAA8B;IACvE,OAAO,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;QAChD,cAAc,EAAE,gCAAgC,EAAE;QAClD,QAAQ;KACT,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACpB,CAAC;AAED,SAAgB,wBAAwB,CAAC,IAAY;IACnD,MAAM,MAAM,GAAG,IAAA,mCAAwB,EAAC,IAAI,CAAC,CAAC;IAC9C,OAAO;QACL,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,QAAQ,EAAE,KAAK;QACf,aAAa,EAAE,yBAAyB,CAAC,MAAM,CAAC,IAAI,CAAC;KACtD,CAAC;AACJ,CAAC;AAED,SAAS,gCAAgC;IACvC,MAAM,IAAI,GAAG,IAAA,gBAAI,EAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,gBAAgB,EAAE,qBAAqB,CAAC,CAAC;IAClF,MAAM,YAAY,GAAG,IAAA,gBAAI,EAAC,IAAI,EAAE,oBAAoB,CAAC,CAAC;IACtD,IAAI,CAAC,IAAA,oBAAU,EAAC,YAAY,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3C,MAAM,IAAI,GAAG,IAAA,mBAAS,EAAC,YAAY,CAAC,CAAC;IACrC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,uEAAuE,YAAY,EAAE,CAAC,CAAC;IACzG,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAA,sBAAY,EAAC,YAAY,EAAE,MAAM,CAAC,CAAY,CAAC;IACzE,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,+BAA+B,CAAC,EAAE,CAAC;QAC/E,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAC;IAC7F,CAAC;IACD,OAAO;QACL,IAAI;QACJ,QAAQ,EAAE,+BAA+B;QACzC,QAAQ,EAAE,IAAI;QACd,aAAa,EAAE,yBAAyB,CAAC,IAAI,CAAC;KAC/C,CAAC;AACJ,CAAC;AAED,SAAgB,iBAAiB;IAC/B,OAAO,IAAA,mBAAO,EAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,IAAA,gBAAI,EAAC,IAAA,iBAAO,GAAE,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;AACvF,CAAC;AAED,SAAS,0BAA0B,CAAC,IAAY;IAC9C,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAChG,CAAC;AAED,SAAgB,iBAAiB,CAAC,aAAuB,EAAE;IACzD,MAAM,OAAO,GAAyB,+BAAuB,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAC/E,IAAI,EAAE,IAAI;QACV,QAAQ;QACR,QAAQ,EAAE,IAAI;QACd,aAAa,EAAE,0BAA0B,CAAC,QAAQ,CAAC;KACpD,CAAC,CAAC,CAAC;IACJ,MAAM,cAAc,GAAG,gCAAgC,EAAE,CAAC;IAC1D,IAAI,cAAc;QAAE,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IACjD,MAAM,KAAK,GAAG,CAAC,IAAA,gBAAI,EAAC,iBAAiB,EAAE,EAAE,SAAS,CAAC,EAAE,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAA,mBAAO,EAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACjG,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,IAAA,oBAAU,EAAC,IAAI,CAAC;YAAE,SAAS;QAChC,MAAM,MAAM,GAAG,IAAA,oBAAU,EAAC,IAAA,gBAAI,EAAC,IAAI,EAAE,oBAAoB,CAAC,CAAC,CAAC;QAC5D,IAAI,MAAM,IAAI,0BAA0B,CAAC,IAAA,oBAAQ,EAAC,IAAI,CAAC,CAAC;YAAE,SAAS;QACnE,MAAM,UAAU,GAAG,MAAM;YACvB,CAAC,CAAC,CAAC,IAAI,CAAC;YACR,CAAC,CAAC,IAAA,qBAAW,EAAC,IAAI,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;iBACzC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,CAAC,0BAA0B,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;iBACjF,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAA,gBAAI,EAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5C,KAAK,MAAM,SAAS,IAAI,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC;YAC1C,IAAI,CAAC,IAAA,oBAAU,EAAC,IAAA,gBAAI,EAAC,SAAS,EAAE,oBAAoB,CAAC,CAAC;gBAAE,SAAS;YACjE,MAAM,MAAM,GAAG,wBAAwB,CAAC,SAAS,CAAC,CAAC;YACnD,sEAAsE;YACtE,qEAAqE;YACrE,oEAAoE;YACpE,IAAI,CAAC,MAAM,IAAI,IAAA,oBAAQ,EAAC,SAAS,CAAC,KAAK,MAAM,CAAC,QAAQ,CAAC,EAAE;gBAAE,SAAS;YACpE,MAAM,QAAQ,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,KAAK,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YACxF,IAAI,QAAQ,IAAI,CAAC;gBAAE,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;;gBAClD,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/bridge/resolution.d.ts

@@ -0,0 +1,8 @@
+import { type LoadedBridgePlugin } from './plugins';
+import type { BridgePlan, BridgePlanOptions } from './types';
+/**
+ * Resolve the complete read-only Bridge contract reviewed before import.
+ * The returned key covers the graph, plugin payloads, source, auxiliary files,
+ * packaged MetaHuman eye default, and every safe FBX/glTF sidecar.
+ */
+export declare function resolveBridgePlan(source: string, options?: BridgePlanOptions, loadedPlugins?: LoadedBridgePlugin[]): Promise<BridgePlan>;

package/dist/bridge/resolution.js

@@ -0,0 +1,55 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveBridgePlan = resolveBridgePlan;
+const node_crypto_1 = require("node:crypto");
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
+const characterAddon_1 = require("./characterAddon");
+const detect_1 = require("./detect");
+const snapshots_1 = require("./internal/snapshots");
+const externalExecution_1 = require("./internal/externalExecution");
+const planner_1 = require("./planner");
+const plugins_1 = require("./plugins");
+/**
+ * Resolve the complete read-only Bridge contract reviewed before import.
+ * The returned key covers the graph, plugin payloads, source, auxiliary files,
+ * packaged MetaHuman eye default, and every safe FBX/glTF sidecar.
+ */
+async function resolveBridgePlan(source, options = {}, loadedPlugins = (0, plugins_1.loadBridgePlugins)(options.pluginDirs)) {
+    const detection = await (0, detect_1.detectBridgeSource)(source);
+    let graph = (0, planner_1.buildBridgePlan)(detection, options, loadedPlugins, { addon: null });
+    let reviewedAddon = null;
+    if (options.inputs?.addon && graph.steps.some((step) => step.capability === 'helix.character.addon.import')) {
+        const unresolved = (0, node_path_1.resolve)(options.inputs.addon);
+        const info = (0, node_fs_1.lstatSync)(unresolved);
+        if (info.isSymbolicLink() || !info.isFile()) {
+            throw new Error("Bridge input 'addon' must be a regular non-symlink file.");
+        }
+        const path = (0, node_fs_1.realpathSync)(unresolved);
+        const bytes = (0, node_fs_1.readFileSync)(path);
+        reviewedAddon = {
+            file: (0, node_path_1.basename)(path),
+            sha256: (0, node_crypto_1.createHash)('sha256').update(bytes).digest('hex'),
+            sizeBytes: bytes.byteLength,
+        };
+        graph = (0, planner_1.buildBridgePlan)(detection, options, loadedPlugins, {
+            addon: (0, characterAddon_1.parseCharacterAddonProfileJson)(bytes),
+        });
+    }
+    const [inputs, sourceDependencies, tools] = await Promise.all([
+        (0, snapshots_1.fingerprintAuxiliaryInputs)(graph, options),
+        (0, snapshots_1.fingerprintSourceDependencies)(detection.source, detection),
+        (0, externalExecution_1.fingerprintRequiredExternalTools)(graph),
+    ]);
+    if (reviewedAddon) {
+        const fingerprint = inputs.addon;
+        if (!fingerprint
+            || fingerprint.file !== reviewedAddon.file
+            || fingerprint.sha256 !== reviewedAddon.sha256
+            || fingerprint.sizeBytes !== reviewedAddon.sizeBytes) {
+            throw new Error("Bridge input 'addon' changed while its reviewed plan was being resolved; retry the plan.");
+        }
+    }
+    return (0, planner_1.bindBridgePlanIdentity)(graph, { inputs, sourceDependencies, tools });
+}
+//# sourceMappingURL=resolution.js.map

package/dist/bridge/resolution.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolution.js","sourceRoot":"","sources":["../../src/bridge/resolution.ts"],"names":[],"mappings":";;AAmBA,8CAwCC;AA3DD,6CAAyC;AACzC,qCAAgE;AAChE,yCAA8C;AAC9C,qDAAkE;AAClE,qCAA8C;AAC9C,oDAG8B;AAC9B,oEAAgF;AAChF,uCAAoE;AACpE,uCAAuE;AAGvE;;;;GAIG;AACI,KAAK,UAAU,iBAAiB,CACrC,MAAc,EACd,UAA6B,EAAE,EAC/B,gBAAsC,IAAA,2BAAiB,EAAC,OAAO,CAAC,UAAU,CAAC;IAE3E,MAAM,SAAS,GAAG,MAAM,IAAA,2BAAkB,EAAC,MAAM,CAAC,CAAC;IACnD,IAAI,KAAK,GAAG,IAAA,yBAAe,EAAC,SAAS,EAAE,OAAO,EAAE,aAAa,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAChF,IAAI,aAAa,GAA+D,IAAI,CAAC;IACrF,IAAI,OAAO,CAAC,MAAM,EAAE,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,KAAK,8BAA8B,CAAC,EAAE,CAAC;QAC5G,MAAM,UAAU,GAAG,IAAA,mBAAO,EAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACjD,MAAM,IAAI,GAAG,IAAA,mBAAS,EAAC,UAAU,CAAC,CAAC;QACnC,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;QAC9E,CAAC;QACD,MAAM,IAAI,GAAG,IAAA,sBAAY,EAAC,UAAU,CAAC,CAAC;QACtC,MAAM,KAAK,GAAG,IAAA,sBAAY,EAAC,IAAI,CAAC,CAAC;QACjC,aAAa,GAAG;YACd,IAAI,EAAE,IAAA,oBAAQ,EAAC,IAAI,CAAC;YACpB,MAAM,EAAE,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;YACxD,SAAS,EAAE,KAAK,CAAC,UAAU;SAC5B,CAAC;QACF,KAAK,GAAG,IAAA,yBAAe,EAAC,SAAS,EAAE,OAAO,EAAE,aAAa,EAAE;YACzD,KAAK,EAAE,IAAA,+CAA8B,EAAC,KAAK,CAAC;SAC7C,CAAC,CAAC;IACL,CAAC;IACD,MAAM,CAAC,MAAM,EAAE,kBAAkB,EAAE,KAAK,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC5D,IAAA,sCAA0B,EAAC,KAAK,EAAE,OAAO,CAAC;QAC1C,IAAA,yCAA6B,EAAC,SAAS,CAAC,MAAM,EAAE,SAAS,CAAC;QAC1D,IAAA,oDAAgC,EAAC,KAAK,CAAC;KACxC,CAAC,CAAC;IACH,IAAI,aAAa,EAAE,CAAC;QAClB,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC;QACjC,IAAI,CAAC,WAAW;eACX,WAAW,CAAC,IAAI,KAAK,aAAa,CAAC,IAAI;eACvC,WAAW,CAAC,MAAM,KAAK,aAAa,CAAC,MAAM;eAC3C,WAAW,CAAC,SAAS,KAAK,aAAa,CAAC,SAAS,EAAE,CAAC;YACvD,MAAM,IAAI,KAAK,CAAC,0FAA0F,CAAC,CAAC;QAC9G,CAAC;IACH,CAAC;IACD,OAAO,IAAA,gCAAsB,EAAC,KAAK,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,KAAK,EAAE,CAAC,CAAC;AAC9E,CAAC"}

package/dist/bridge/types.d.ts

@@ -0,0 +1,247 @@
+export declare const BRIDGE_PLUGIN_SCHEMA: "helix.bridge-plugin/1";
+export declare const BRIDGE_DETECTION_SCHEMA: "helix.bridge-detection/1";
+export declare const BRIDGE_PLAN_SCHEMA: "helix.bridge-plan/1";
+export declare const BRIDGE_PLUGIN_REQUEST_SCHEMA: "helix.bridge-plugin-request/1";
+export declare const BRIDGE_PROVENANCE_SCHEMA: "helix.bridge-provenance/1";
+export declare const BRIDGE_CORE_IMPLEMENTATION_VERSION: "5";
+export declare const BRIDGE_PERMISSIONS: readonly ["filesystem.read-source", "filesystem.write-output", "unrestricted-host-execution", "network", "spawn-process", "unreal-editor", "unity-editor", "blender", "gpu"];
+export declare const BRIDGE_EXTERNAL_COMMAND_PERMISSIONS: readonly ["filesystem.read-source", "filesystem.write-output", "spawn-process", "unrestricted-host-execution"];
+/** Host tool requirements and the only environment variables exposed for them. */
+export declare const BRIDGE_EXTERNAL_TOOL_ENVIRONMENT: {
+    readonly 'tool:unreal-editor-commandlet': "HELIX_UNREAL_EDITOR";
+    readonly 'tool:unity-editor-batchmode': "HELIX_UNITY_EDITOR";
+    readonly 'tool:godot-headless': "HELIX_GODOT";
+};
+/**
+ * Capability identities owned by the in-process HELIX implementation. External
+ * manifests cannot claim these identities (or the broader `helix.` namespace),
+ * so a reviewed plan can never be redirected into a different dispatcher.
+ */
+export declare const BRIDGE_RESERVED_CAPABILITY_IDS: readonly ["helix.asset.copy", "helix.character.import", "helix.character.addon.import", "helix.animation.retarget", "metahuman.face.materials", "helix.scene.package", "unreal.project.extract", "unity.project.extract", "godot.project.extract"];
+export declare const BRIDGE_STAGES: readonly ["detect", "inspect", "extract", "normalize", "transform", "validate", "optimize", "package", "publish"];
+export declare const BRIDGE_CONTENT_TYPES: readonly ["auto", "asset", "character", "addon", "scene", "animation", "extract"];
+export declare const BRIDGE_TARGETS: readonly ["web", "unreal", "mobile", "canonical"];
+export declare const BRIDGE_TRUST_LEVELS: readonly ["helix-verified", "verified-publisher", "community", "local-untrusted"];
+export type BridgePermission = (typeof BRIDGE_PERMISSIONS)[number];
+export type BridgeTrust = (typeof BRIDGE_TRUST_LEVELS)[number];
+export type BridgeStage = (typeof BRIDGE_STAGES)[number];
+export type BridgeContentType = (typeof BRIDGE_CONTENT_TYPES)[number];
+export type BridgeTarget = (typeof BRIDGE_TARGETS)[number];
+export declare const BRIDGE_SOURCE_KINDS: readonly ["format.glb", "format.gltf", "format.fbx", "format.obj", "format.usd", "format.usdz", "format.vrm", "format.image", "format.audio", "metahuman.face", "unreal.project", "unity.project", "godot.project", "directory.unknown", "file.unknown"];
+export type BridgeSourceKind = (typeof BRIDGE_SOURCE_KINDS)[number];
+export interface BridgeCommandHandler {
+    executable: string;
+    args?: string[];
+    timeoutSeconds?: number;
+}
+export interface BridgeSourceMatcher {
+    extensions?: string[];
+    fileNames?: string[];
+    markerFiles?: string[];
+}
+export interface BridgeCapabilityManifest {
+    id: string;
+    stage: BridgeStage;
+    accepts: string[];
+    produces: string[];
+    targets?: BridgeTarget[];
+    priority?: number;
+    permissions?: BridgePermission[];
+    command?: BridgeCommandHandler;
+    description?: string;
+    requires?: string[];
+    replaces?: string[];
+    matches?: BridgeSourceMatcher;
+}
+export interface BridgePluginManifest {
+    schemaVersion: typeof BRIDGE_PLUGIN_SCHEMA;
+    id: string;
+    name: string;
+    version: string;
+    trust: BridgeTrust;
+    permissions: BridgePermission[];
+    capabilities: BridgeCapabilityManifest[];
+    description?: string;
+    homepage?: string;
+}
+export interface BridgeGlbInspection {
+    meshCount: number;
+    skinCount: number;
+    animationCount: number;
+    materialCount: number;
+    nodeNames: string[];
+    meshNames: string[];
+    materialNames: string[];
+}
+export interface BridgeDetection {
+    schemaVersion: typeof BRIDGE_DETECTION_SCHEMA;
+    source: string;
+    sourceKind: BridgeSourceKind;
+    suggestedType: Exclude<BridgeContentType, 'auto'>;
+    confidence: number;
+    evidence: string[];
+    sha256: string;
+    sizeBytes: number;
+    fileCount?: number;
+    directoryCount?: number;
+    inspection?: BridgeGlbInspection;
+}
+export interface BridgeSourceSnapshotIdentity {
+    kind: 'file' | 'directory';
+    sha256: string;
+    sizeBytes: number;
+    fileCount?: number;
+    directoryCount?: number;
+}
+/** Stable fingerprint for an immutable auxiliary input or source dependency. */
+export interface BridgeInputFingerprint {
+    file: string;
+    sha256: string;
+    sizeBytes: number;
+}
+/** Reviewed identity of a host executable made available to an external adapter. */
+export interface BridgeToolFingerprint {
+    environmentVariable: string;
+    /** Canonical executable path. POSIX paths such as WSL `/mnt/...` remain POSIX paths. */
+    executable: string;
+    sha256: string;
+    sizeBytes: number;
+}
+/** Portable tool identity written to a relocatable provenance receipt. */
+export interface BridgeProvenanceToolFingerprint extends BridgeInputFingerprint {
+    environmentVariable: string;
+}
+/** Identity evidence required in every Bridge provenance record. */
+export interface BridgeProvenanceSettings {
+    contentType: Exclude<BridgeContentType, 'auto'>;
+    inputs: Record<string, BridgeInputFingerprint>;
+    tools: Record<string, BridgeProvenanceToolFingerprint>;
+    sourceBundle: {
+        snapshot: BridgeSourceSnapshotIdentity;
+        dependencies: Record<string, BridgeInputFingerprint>;
+    };
+}
+export interface BridgePlanOptions {
+    type?: BridgeContentType;
+    target?: BridgeTarget;
+    plugin?: string[];
+    pluginDirs?: string[];
+    headTexture?: string;
+    eyeTexture?: string;
+    canonical?: string;
+    map?: string;
+    /** Generic named auxiliary inputs. Required `input:<name>` declarations resolve here. */
+    inputs?: Record<string, string>;
+}
+/** Immutable identities covered by a reviewed Bridge plan key. */
+export interface BridgePlanIdentity {
+    inputs: Record<string, BridgeInputFingerprint>;
+    sourceDependencies: Record<string, BridgeInputFingerprint>;
+    tools: Record<string, BridgeToolFingerprint>;
+}
+export interface BridgePlanStep {
+    index: number;
+    plugin: string;
+    pluginVersion: string;
+    pluginDigest: string;
+    capability: string;
+    stage: BridgeStage;
+    accepts: string;
+    produces: string;
+    permissions: BridgePermission[];
+    requires: string[];
+}
+export interface BridgePlan {
+    schemaVersion: typeof BRIDGE_PLAN_SCHEMA;
+    source: BridgeDetection;
+    contentType: Exclude<BridgeContentType, 'auto'>;
+    target: BridgeTarget;
+    goal: string;
+    steps: BridgePlanStep[];
+    requiredInputs: string[];
+    requiredPermissions: BridgePermission[];
+    blockers: string[];
+    warnings: string[];
+    identity: BridgePlanIdentity;
+    deterministicKey: string;
+    /** Present after execution has verified the private immutable source snapshot. */
+    sourceSnapshot?: BridgeSourceSnapshotIdentity;
+}
+export interface BridgeArtifact {
+    kind: string;
+    path: string;
+    sha256: string;
+    sizeBytes: number;
+    metadata?: Record<string, unknown>;
+}
+/** Immutable auxiliary input delivered to an external Bridge capability. */
+export interface BridgeNamedInput {
+    path: string;
+    sha256: string;
+    sizeBytes: number;
+}
+export interface BridgePluginRequest {
+    schemaVersion: typeof BRIDGE_PLUGIN_REQUEST_SCHEMA;
+    capability: string;
+    source: BridgeDetection;
+    input: BridgeArtifact | null;
+    inputs: Record<string, BridgeNamedInput>;
+    outputDir: string;
+    target: BridgeTarget;
+    deterministicKey: string;
+}
+export interface BridgeProvenance {
+    schemaVersion: typeof BRIDGE_PROVENANCE_SCHEMA;
+    deterministicKey: string;
+    source: {
+        path: string;
+        kind: BridgeSourceKind;
+        sha256: string;
+        sizeBytes: number;
+        fileCount?: number;
+        directoryCount?: number;
+    };
+    plugins: Array<{
+        id: string;
+        version: string;
+        digest: string;
+    }>;
+    capabilities: string[];
+    target: BridgeTarget;
+    settings: BridgeProvenanceSettings;
+    outputs: BridgeArtifact[];
+    createdAt: string;
+}
+export interface BridgeImportOptions extends BridgePlanOptions {
+    output?: string;
+    dryRun?: boolean;
+    /**
+     * Refuse execution unless the freshly resolved plan has this exact key.
+     * Required for every non-dry-run plan containing an external plugin command.
+     */
+    expectedPlanKey?: string;
+    approvedPermissions?: BridgePermission[];
+    onProgress?: (message: string) => void;
+    /**
+     * Preserve the `.{output}.bridge-stage-<uuid>/` transaction directory (raw
+     * step outputs, snapshots, and any external-tool working files) after a
+     * failed import instead of deleting it. Also honored via the
+     * `HELIX_BRIDGE_KEEP_STAGE=1` environment variable. Debug-only: never set
+     * this for a normal import, since a kept stage is not cleaned up by Bridge
+     * and accumulates on disk across retries.
+     */
+    keepStage?: boolean;
+    /**
+     * Package a character add-on even when `bodyGeometryGuard.ts`'s
+     * leftover-base-body/underwear trip line fires. Use ONLY after a human has
+     * looked at the item and confirmed the flagged surface is a legitimate
+     * garment panel — see that file's "MEASURED PRECISION" section for the
+     * measured residual false-positive class this exists for.
+     */
+    allowUntexturedBodyGeometry?: boolean;
+}
+export interface BridgeImportResult {
+    plan: BridgePlan;
+    outputs: BridgeArtifact[];
+    provenancePath: string | null;
+}