@intentic/sandbox-contract 1.175.0 → 1.176.0

package/dist/effects.js

@@ -1,79 +0,0 @@
-const filled = (value) => typeof value === "string" && value.length > 0;
-const hasToken = (config) => filled(config["token"]) || config["hasToken"] === true;
-const cloneUrl = (config) => (filled(config["url"]) ? String(config["url"]) : undefined);
-export const capabilityEffects = (input) => {
-    switch (input.kind) {
-        case "devops":
-            return [{ kind: "scaffold", repos: ["intent", "desired-state"] }];
-        case "monorepo":
-            return [{ kind: "scaffold", repos: input.id === undefined || input.id.length === 0 ? [] : [input.id] }];
-        case "mcp": {
-            const effects = [{ kind: "mcp" }];
-            if (hasToken(input.config)) {
-                effects.push({ kind: "secret", exposure: "disk" });
-            }
-            return effects;
-        }
-        case "service":
-            return [{ kind: "deploy", provisions: true }];
-        case "integration":
-            return [{ kind: "deploy", provisions: false }];
-        case "cli": {
-            const effects = [{ kind: "skill", name: input.id }];
-            const secret = input.connector === undefined ? input.config["hasSecret"] === true : input.connector.fields.some((field) => field.secret === true);
-            if (secret) {
-                effects.push({ kind: "secret", exposure: "agent-env" });
-            }
-            if (input.connector?.fragment !== undefined) {
-                effects.push({ kind: "image" });
-            }
-            return effects;
-        }
-        case "plugin": {
-            const effects = [{ kind: "clone", url: cloneUrl(input.config) }];
-            if (hasToken(input.config)) {
-                effects.push({ kind: "secret", exposure: "disk" });
-            }
-            return effects;
-        }
-        case "extension": {
-            const effects = [{ kind: "trusted-code" }, { kind: "clone", url: cloneUrl(input.config) }];
-            if (hasToken(input.config)) {
-                effects.push({ kind: "secret", exposure: "disk" });
-            }
-            const contributes = input.manifest?.contributes;
-            if (contributes?.environment !== undefined) {
-                effects.push({ kind: "image" });
-            }
-            if (contributes?.processes !== undefined && contributes.processes.length > 0) {
-                effects.push({ kind: "process", names: contributes.processes.map((process) => process.name) });
-            }
-            return effects;
-        }
-        case "ssh":
-            return [
-                { kind: "secret", exposure: "disk" },
-                { kind: "skill", name: "ssh" },
-            ];
-        case "vpn":
-            return [{ kind: "secret", exposure: "disk" }, { kind: "skill", name: "vpn" }, { kind: "image" }, { kind: "runtime", level: "net-admin" }];
-        case "docker":
-            return [{ kind: "image" }, { kind: "runtime", level: "privileged" }, { kind: "process", names: ["dockerd"] }];
-        case "browser": {
-            const effects = [{ kind: "skill", name: input.id }, { kind: "image" }];
-            const platform = input.config["platform"];
-            if (typeof platform === "string") {
-                effects.push({ kind: "profile", platform });
-            }
-            return effects;
-        }
-        case "agent": {
-            const effects = [{ kind: "process", names: input.id === undefined || input.id.length === 0 ? [] : [input.id] }];
-            if (filled(input.config["env"]) || input.config["hasSecret"] === true) {
-                effects.push({ kind: "secret", exposure: "disk" });
-            }
-            return effects;
-        }
-    }
-};
-//# sourceMappingURL=effects.js.map

package/dist/effects.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"effects.js","sourceRoot":"","sources":["../src/effects.ts"],"names":[],"mappings":"AAkDA,MAAM,MAAM,GAAG,CAAC,KAA4C,EAAW,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;AAExH,MAAM,QAAQ,GAAG,CAAC,MAAuC,EAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,IAAI,CAAC;AAC9H,MAAM,QAAQ,GAAG,CAAC,MAAuC,EAAsB,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;AAE9I,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,KAA4B,EAA+B,EAAE;IAC3F,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACjB,KAAK,QAAQ;YACT,OAAO,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,eAAe,CAAC,EAAE,CAAC,CAAC;QACtE,KAAK,UAAU;YACX,OAAO,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE,KAAK,SAAS,IAAI,KAAK,CAAC,EAAE,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAC5G,KAAK,KAAK,EAAE,CAAC;YACT,MAAM,OAAO,GAAuB,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACtD,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;gBACzB,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;YACvD,CAAC;YACD,OAAO,OAAO,CAAC;QACnB,CAAC;QACD,KAAK,SAAS;YACV,OAAO,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;QAClD,KAAK,aAAa;YACd,OAAO,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;QACnD,KAAK,KAAK,EAAE,CAAC;YAKT,MAAM,OAAO,GAAuB,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;YACxE,MAAM,MAAM,GACR,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC;YACvI,IAAI,MAAM,EAAE,CAAC;gBACT,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAC;YAC5D,CAAC;YACD,IAAI,KAAK,CAAC,SAAS,EAAE,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC1C,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;YACpC,CAAC;YACD,OAAO,OAAO,CAAC;QACnB,CAAC;QACD,KAAK,QAAQ,EAAE,CAAC;YACZ,MAAM,OAAO,GAAuB,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACrF,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;gBACzB,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;YACvD,CAAC;YACD,OAAO,OAAO,CAAC;QACnB,CAAC;QACD,KAAK,WAAW,EAAE,CAAC;YACf,MAAM,OAAO,GAAuB,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC/G,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;gBACzB,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;YACvD,CAAC;YACD,MAAM,WAAW,GAAG,KAAK,CAAC,QAAQ,EAAE,WAAW,CAAC;YAChD,IAAI,WAAW,EAAE,WAAW,KAAK,SAAS,EAAE,CAAC;gBACzC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;YACpC,CAAC;YACD,IAAI,WAAW,EAAE,SAAS,KAAK,SAAS,IAAI,WAAW,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC3E,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,WAAW,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACnG,CAAC;YACD,OAAO,OAAO,CAAC;QACnB,CAAC;QACD,KAAK,KAAK;YACN,OAAO;gBACH,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE;gBACpC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE;aACjC,CAAC;QACN,KAAK,KAAK;YACN,OAAO,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;QAC9I,KAAK,QAAQ;YAGT,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAClH,KAAK,SAAS,EAAE,CAAC;YACb,MAAM,OAAO,GAAuB,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;YAC3F,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAC1C,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBAC/B,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC;YAChD,CAAC;YACD,OAAO,OAAO,CAAC;QACnB,CAAC;QACD,KAAK,OAAO,EAAE,CAAC;YAEX,MAAM,OAAO,GAAuB,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE,KAAK,SAAS,IAAI,KAAK,CAAC,EAAE,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;YACpI,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,IAAI,EAAE,CAAC;gBACpE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;YACvD,CAAC;YACD,OAAO,OAAO,CAAC;QACnB,CAAC;IACL,CAAC;AACL,CAAC,CAAC"}

package/src/effects.test.ts

@@ -1,132 +0,0 @@
-import type { ConnectorContribution, ExtensionManifest } from "@intentic/extension-api";
-import { describe, expect, it } from "vitest";
-import { capabilityEffects } from "./effects.js";
-import { CapabilityKindSchema } from "./schemas.js";
-
-const connector = (overrides?: Partial<ConnectorContribution>): ConnectorContribution => ({
-    provider: "github",
-    kind: "cli",
-    catalog: { name: "GitHub", description: "Issues and PRs.", category: "code" },
-    fields: [{ key: "token", label: "Token", secret: true }],
-    env: { GITHUB_TOKEN: "${token}" },
-    skill: "skills/github/SKILL.md",
-    ...overrides,
-});
-
-const manifest = (contributes: ExtensionManifest["contributes"]): ExtensionManifest => ({
-    publisher: "acme",
-    name: "tools",
-    version: "1.0.0",
-    engines: { intentic: "^0.2.0" },
-    contributes,
-});
-
-describe("capabilityEffects", () => {
-    // Pins the CapabilityKind union to the deriver: a 13th kind must declare its effects to pass.
-    it("yields at least one effect for every kind", () => {
-        for (const kind of CapabilityKindSchema.options) {
-            expect(capabilityEffects({ kind, config: {} }).length).toBeGreaterThan(0);
-        }
-    });
-
-    it("interpolates the plugin clone url and token from form state and from the echo", () => {
-        expect(capabilityEffects({ kind: "plugin", config: {} })).toEqual([{ kind: "clone", url: undefined }]);
-        expect(capabilityEffects({ kind: "plugin", config: { url: "https://github.com/o/p", token: "t" } })).toEqual([
-            { kind: "clone", url: "https://github.com/o/p" },
-            { kind: "secret", exposure: "disk" },
-        ]);
-        expect(capabilityEffects({ kind: "plugin", config: { url: "https://github.com/o/p", hasToken: true } })).toContainEqual({
-            kind: "secret",
-            exposure: "disk",
-        });
-    });
-
-    it("stores an mcp token only when one is present", () => {
-        expect(capabilityEffects({ kind: "mcp", config: { url: "https://mcp.example.com" } })).toEqual([{ kind: "mcp" }]);
-        expect(capabilityEffects({ kind: "mcp", config: { url: "https://mcp.example.com", token: "t" } })).toContainEqual({
-            kind: "secret",
-            exposure: "disk",
-        });
-    });
-
-    it("always stores an ssh credential on disk, for both auth modes", () => {
-        for (const auth of ["key", "password"]) {
-            expect(capabilityEffects({ kind: "ssh", config: { auth } })).toEqual([
-                { kind: "secret", exposure: "disk" },
-                { kind: "skill", name: "ssh" },
-            ]);
-        }
-    });
-
-    it("scaffolds the monorepo under the instance name", () => {
-        expect(capabilityEffects({ kind: "monorepo", id: "shop", config: {} })).toEqual([{ kind: "scaffold", repos: ["shop"] }]);
-        expect(capabilityEffects({ kind: "monorepo", config: {} })).toEqual([{ kind: "scaffold", repos: [] }]);
-    });
-
-    it("derives cli secret and image from the connector spec", () => {
-        const github = capabilityEffects({ kind: "cli", id: "github", config: { provider: "github" }, connector: connector() });
-        expect(github).toEqual([
-            { kind: "skill", name: "github" },
-            { kind: "secret", exposure: "agent-env" },
-        ]);
-        const postgres = capabilityEffects({
-            kind: "cli",
-            id: "db",
-            config: { provider: "postgres" },
-            connector: connector({ provider: "postgres", fragment: "env/postgres.Dockerfile" }),
-        });
-        expect(postgres).toContainEqual({ kind: "image" });
-        // Discord's whisper fragment is connector spec data like any other — the image effect derives from it.
-        const discord = capabilityEffects({
-            kind: "cli",
-            id: "discord",
-            config: { provider: "discord" },
-            connector: connector({ provider: "discord", fragment: "env/whisper.Dockerfile" }),
-        });
-        expect(discord).toContainEqual({ kind: "image" });
-    });
-
-    it("falls back to the echoed hasSecret when no connector spec is at hand", () => {
-        expect(capabilityEffects({ kind: "cli", id: "github", config: { provider: "github", hasSecret: true } })).toContainEqual({
-            kind: "secret",
-            exposure: "agent-env",
-        });
-        expect(capabilityEffects({ kind: "cli", id: "github", config: { provider: "github" } })).toEqual([{ kind: "skill", name: "github" }]);
-    });
-
-    it("derives extension process and image effects from the installed manifest", () => {
-        const bare = capabilityEffects({ kind: "extension", config: { url: "https://github.com/o/e" } });
-        expect(bare).toEqual([{ kind: "trusted-code" }, { kind: "clone", url: "https://github.com/o/e" }]);
-        const full = capabilityEffects({
-            kind: "extension",
-            config: { url: "https://github.com/o/e", hasToken: true },
-            manifest: manifest({
-                processes: [{ name: "gateway", command: "node gateway.js" }],
-                environment: { fragment: "env/tools.Dockerfile" },
-            }),
-        });
-        expect(full).toContainEqual({ kind: "secret", exposure: "disk" });
-        expect(full).toContainEqual({ kind: "image" });
-        expect(full).toContainEqual({ kind: "process", names: ["gateway"] });
-    });
-
-    it("marks vpn as a privileged-runtime image change", () => {
-        expect(capabilityEffects({ kind: "vpn", config: {} })).toContainEqual({ kind: "runtime", level: "net-admin" });
-    });
-
-    it("marks docker as a fully privileged runtime rebuild running dockerd", () => {
-        expect(capabilityEffects({ kind: "docker", config: {} })).toEqual([
-            { kind: "image" },
-            { kind: "runtime", level: "privileged" },
-            { kind: "process", names: ["dockerd"] },
-        ]);
-    });
-
-    it("keeps a browser profile per platform", () => {
-        expect(capabilityEffects({ kind: "browser", id: "reddit", config: { platform: "reddit" } })).toEqual([
-            { kind: "skill", name: "reddit" },
-            { kind: "image" },
-            { kind: "profile", platform: "reddit" },
-        ]);
-    });
-});

package/src/effects.ts

@@ -1,138 +0,0 @@
-import type { ConnectorContribution, ExtensionManifest } from "@intentic/extension-api";
-import type { CapabilityKind } from "./schemas.js";
-
-/* What adding a capability DOES to the sandbox, as data — the structured counterpart of the handlers' side
- * effects (the sandbox's capabilities/handlers/*), rendered by the web as the "This will add to your sandbox"
- * panel before an add and as per-instance effect strips after. Derived, not declared per card: config-dependent
- * effects (a plugin's clone URL, the SQL card's engine-dependent client image) and connector/extension-declared
- * ones (secret fields, image fragments, processes) are computed from the same contribution data the handlers
- * consume, so there is no per-card effects list to drift. The streamed apply log stays the post-apply record;
- * this is the pre-add disclosure. */
-
-export type CapabilityEffect =
-    // Writes .claude/skills/<name>/SKILL.md, auto-loaded by the agent next turn. `name` is the instance id for
-    // cli/browser (per-instance skills), the fixed shared skill for ssh/vpn; absent while the instance is unnamed.
-    | { readonly kind: "skill"; readonly name?: string | undefined }
-    // Stores a credential in the sandbox. "agent-env": injected into the agent's environment each turn, never
-    // written to a file (cli). "disk": a 0600 file or a denylisted manifest field (ssh key, vpn conf, git token).
-    | { readonly kind: "secret"; readonly exposure: "agent-env" | "disk" }
-    // Git-clones a repo into .intentic/plugins|extensions/<id>. `url` absent until the form field is filled.
-    | { readonly kind: "clone"; readonly url?: string | undefined }
-    // Bakes a Dockerfile fragment into the sandbox image overlay — needs a one-time owner rebuild.
-    | { readonly kind: "image" }
-    // The baked fragment carries a privileged runtime directive: "net-admin" (vpn NET_ADMIN + tun) or
-    // "privileged" (docker — the full --privileged run its dockerd needs).
-    | { readonly kind: "runtime"; readonly level: "net-admin" | "privileged" }
-    // Runs long-lived background processes in the sandbox (an extension's declared processes).
-    | { readonly kind: "process"; readonly names: readonly string[] }
-    // Registers an mcp__<id>__ server the agent connects to next turn.
-    | { readonly kind: "mcp" }
-    // Scaffolds workspace repositories. Empty while a name-derived repo is still unnamed.
-    | { readonly kind: "scaffold"; readonly repos: readonly string[] }
-    // Writes a managed deploy.config.ts entry; `provisions` = also runs the infra apply job now (service).
-    | { readonly kind: "deploy"; readonly provisions: boolean }
-    // Extension code runs inside the app with the owner's session — the owner-only trust decision.
-    | { readonly kind: "trusted-code" }
-    // Keeps a logged-in Chromium profile under .intentic/browser/<platform> that the agent drives.
-    | { readonly kind: "profile"; readonly platform: string };
-
-export interface CapabilityEffectInput {
-    readonly kind: CapabilityKind;
-    // The instance name — the skill name for cli/browser, the repo name for monorepo.
-    readonly id?: string | undefined;
-    // Live form values, or a CapabilitySummary's secret-stripped config echo (hasToken/hasSecret booleans).
-    readonly config: Record<string, string | number | boolean | undefined>;
-    // The cli provider's connector spec — the source of truth for its secret/fragment declarations.
-    readonly connector?: ConnectorContribution | undefined;
-    // An installed extension's manifest — resolves its process/image contributions (unknowable before install).
-    readonly manifest?: ExtensionManifest | undefined;
-}
-
-const filled = (value: string | number | boolean | undefined): boolean => typeof value === "string" && value.length > 0;
-// A token either typed into the form (`token`) or echoed as present on an installed instance (`hasToken`).
-const hasToken = (config: CapabilityEffectInput["config"]): boolean => filled(config["token"]) || config["hasToken"] === true;
-const cloneUrl = (config: CapabilityEffectInput["config"]): string | undefined => (filled(config["url"]) ? String(config["url"]) : undefined);
-
-export const capabilityEffects = (input: CapabilityEffectInput): readonly CapabilityEffect[] => {
-    switch (input.kind) {
-        case "devops":
-            return [{ kind: "scaffold", repos: ["intent", "desired-state"] }];
-        case "monorepo":
-            return [{ kind: "scaffold", repos: input.id === undefined || input.id.length === 0 ? [] : [input.id] }];
-        case "mcp": {
-            const effects: CapabilityEffect[] = [{ kind: "mcp" }];
-            if (hasToken(input.config)) {
-                effects.push({ kind: "secret", exposure: "disk" });
-            }
-            return effects;
-        }
-        case "service":
-            return [{ kind: "deploy", provisions: true }];
-        case "integration":
-            return [{ kind: "deploy", provisions: false }];
-        case "cli": {
-            // Without the connector spec (extensions query pending / sandbox unreachable) fall back to the
-            // echoed hasSecret — which the web also synthesizes from the card's own secret-marked fields, so
-            // the secret row never waits on /extensions. The image row does wait: a connector's fragment
-            // (postgres/mysql clients, discord's whisper) is spec data with no static counterpart on the card.
-            const effects: CapabilityEffect[] = [{ kind: "skill", name: input.id }];
-            const secret =
-                input.connector === undefined ? input.config["hasSecret"] === true : input.connector.fields.some((field) => field.secret === true);
-            if (secret) {
-                effects.push({ kind: "secret", exposure: "agent-env" });
-            }
-            if (input.connector?.fragment !== undefined) {
-                effects.push({ kind: "image" });
-            }
-            return effects;
-        }
-        case "plugin": {
-            const effects: CapabilityEffect[] = [{ kind: "clone", url: cloneUrl(input.config) }];
-            if (hasToken(input.config)) {
-                effects.push({ kind: "secret", exposure: "disk" });
-            }
-            return effects;
-        }
-        case "extension": {
-            const effects: CapabilityEffect[] = [{ kind: "trusted-code" }, { kind: "clone", url: cloneUrl(input.config) }];
-            if (hasToken(input.config)) {
-                effects.push({ kind: "secret", exposure: "disk" });
-            }
-            const contributes = input.manifest?.contributes;
-            if (contributes?.environment !== undefined) {
-                effects.push({ kind: "image" });
-            }
-            if (contributes?.processes !== undefined && contributes.processes.length > 0) {
-                effects.push({ kind: "process", names: contributes.processes.map((process) => process.name) });
-            }
-            return effects;
-        }
-        case "ssh":
-            return [
-                { kind: "secret", exposure: "disk" },
-                { kind: "skill", name: "ssh" },
-            ];
-        case "vpn":
-            return [{ kind: "secret", exposure: "disk" }, { kind: "skill", name: "vpn" }, { kind: "image" }, { kind: "runtime", level: "net-admin" }];
-        case "docker":
-            // The engine is baked into the base image — the "image" effect here is the overlay rebuild that
-            // applies the fragment's --privileged directive, not new tooling.
-            return [{ kind: "image" }, { kind: "runtime", level: "privileged" }, { kind: "process", names: ["dockerd"] }];
-        case "browser": {
-            const effects: CapabilityEffect[] = [{ kind: "skill", name: input.id }, { kind: "image" }];
-            const platform = input.config["platform"];
-            if (typeof platform === "string") {
-                effects.push({ kind: "profile", platform });
-            }
-            return effects;
-        }
-        case "agent": {
-            // The spawned ACP subprocess is the standing consequence; a pasted env block is a stored credential.
-            const effects: CapabilityEffect[] = [{ kind: "process", names: input.id === undefined || input.id.length === 0 ? [] : [input.id] }];
-            if (filled(input.config["env"]) || input.config["hasSecret"] === true) {
-                effects.push({ kind: "secret", exposure: "disk" });
-            }
-            return effects;
-        }
-    }
-};