@jini-ai/agent-plugins 0.4.7 → 0.6.10

package/dist/lifecycle/tools/manifest.js

@@ -0,0 +1,89 @@
+// Bounds mirror the existing tier-3 tool capture (`@jini-ai/plugins/host` contributions.ts) so one
+// plugin tool contract has one set of limits, whichever loader admitted it.
+const NAME_PATTERN = /^[a-z][a-z0-9_]{0,63}$/;
+const MAX_TOOLS = 128;
+const MAX_DESCRIPTION = 8000;
+const MAX_MODULE_PATH = 256;
+const MAX_SCHEMA_BYTES = 65536;
+const EFFECTS = new Set(['read', 'write', 'destructive']);
+function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+/** Why the input schema is unusable, or undefined. Detaches nothing; the caller copies. @complexity O(s) schema size. */
+function schemaProblem(schema) {
+    if (!isRecord(schema) || schema.type !== 'object')
+        return 'inputSchema must be a JSON Schema describing an object';
+    if (new TextEncoder().encode(JSON.stringify(schema)).byteLength > MAX_SCHEMA_BYTES)
+        return 'inputSchema is larger than 64 KiB';
+    return undefined;
+}
+/** Why a description is unusable, or undefined. @complexity O(1). */
+function descriptionProblem(name, description) {
+    if (typeof description === 'string' && description.trim() && description.length <= MAX_DESCRIPTION)
+        return undefined;
+    return `tool '${name}' needs a description of at most ${MAX_DESCRIPTION} characters`;
+}
+/** Why a module path is unusable here, or undefined; containment is checked on disk at import. @complexity O(1). */
+function moduleProblem(name, module) {
+    if (typeof module === 'string' && module.endsWith('.mjs') && module.length <= MAX_MODULE_PATH)
+        return undefined;
+    return `tool '${name}' module must be a .mjs path inside the plugin`;
+}
+/** Why one declaration's scalar fields are invalid, or undefined. @complexity O(1). */
+function fieldProblem(entry) {
+    const { name } = entry;
+    if (typeof name !== 'string' || !NAME_PATTERN.test(name))
+        return 'a tool name must be lower snake case, at most 64 characters';
+    const effectProblem = EFFECTS.has(entry.effect) ? undefined : `tool '${name}' effect must be read, write or destructive`;
+    return descriptionProblem(name, entry.description) ?? effectProblem ?? moduleProblem(name, entry.module);
+}
+/** One declaration, or why it is refused. Unknown keys are ignored. @complexity O(s) schema size. */
+function parseEntry(entry) {
+    if (!isRecord(entry))
+        return 'every tool declaration must be an object';
+    const problem = fieldProblem(entry) ?? schemaProblem(entry.inputSchema);
+    if (problem)
+        return problem;
+    return Object.freeze({
+        name: entry.name, description: entry.description, effect: entry.effect,
+        module: entry.module, inputSchema: JSON.parse(JSON.stringify(entry.inputSchema)),
+    });
+}
+/** The declaration list from the raw file, or why the file is refused. @complexity O(n) file size. */
+function declarations(raw) {
+    let value;
+    try {
+        value = JSON.parse(raw);
+    }
+    catch {
+        return 'not valid JSON';
+    }
+    if (!isRecord(value) || value.schemaVersion !== 1)
+        return 'schemaVersion must be 1';
+    const { tools } = value;
+    if (!Array.isArray(tools) || tools.length === 0 || tools.length > MAX_TOOLS)
+        return `tools must list 1 to ${MAX_TOOLS} declarations`;
+    return tools;
+}
+/**
+ * Parses the raw contribution file. A local name declared twice is refused (duplicate id).
+ * @param required.raw - The file text as read from a trusted package.
+ * @returns Descriptors in declaration order, or the reason the whole file is refused.
+ * @complexity O(t^2 + s) for t declarations (t <= 128) and s total schema size.
+ */
+export function parseAgentPluginToolsFile(required, _optional = {}) {
+    const tools = declarations(required.raw);
+    if (typeof tools === 'string')
+        return { ok: false, reason: tools };
+    const descriptors = [];
+    for (const entry of tools) {
+        const parsed = parseEntry(entry);
+        if (typeof parsed === 'string')
+            return { ok: false, reason: parsed };
+        if (descriptors.some(existing => existing.name === parsed.name))
+            return { ok: false, reason: `tool '${parsed.name}' is declared more than once` };
+        descriptors.push(parsed);
+    }
+    return { ok: true, descriptors };
+}
+//# sourceMappingURL=manifest.js.map

package/dist/lifecycle/tools/manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.js","sourceRoot":"","sources":["../../../src/lifecycle/tools/manifest.ts"],"names":[],"mappings":"AA0BA,mGAAmG;AACnG,4EAA4E;AAC5E,MAAM,YAAY,GAAG,wBAAwB,CAAC;AAC9C,MAAM,SAAS,GAAG,GAAG,CAAC;AACtB,MAAM,eAAe,GAAG,IAAI,CAAC;AAC7B,MAAM,eAAe,GAAG,GAAG,CAAC;AAC5B,MAAM,gBAAgB,GAAG,KAAK,CAAC;AAC/B,MAAM,OAAO,GAAyB,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC;AAEhF,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,yHAAyH;AACzH,SAAS,aAAa,CAAC,MAAe;IACpC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,wDAAwD,CAAC;IACnH,IAAI,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,GAAG,gBAAgB;QAAE,OAAO,mCAAmC,CAAC;IAC/H,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,qEAAqE;AACrE,SAAS,kBAAkB,CAAC,IAAY,EAAE,WAAoB;IAC5D,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,CAAC,IAAI,EAAE,IAAI,WAAW,CAAC,MAAM,IAAI,eAAe;QAAE,OAAO,SAAS,CAAC;IACrH,OAAO,SAAS,IAAI,oCAAoC,eAAe,aAAa,CAAC;AACvF,CAAC;AAED,oHAAoH;AACpH,SAAS,aAAa,CAAC,IAAY,EAAE,MAAe;IAClD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,IAAI,eAAe;QAAE,OAAO,SAAS,CAAC;IAChH,OAAO,SAAS,IAAI,gDAAgD,CAAC;AACvE,CAAC;AAED,uFAAuF;AACvF,SAAS,YAAY,CAAC,KAA8B;IAClD,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC;IACvB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,6DAA6D,CAAC;IAC/H,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,IAAI,6CAA6C,CAAC;IACzH,OAAO,kBAAkB,CAAC,IAAI,EAAE,KAAK,CAAC,WAAW,CAAC,IAAI,aAAa,IAAI,aAAa,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;AAC3G,CAAC;AAED,qGAAqG;AACrG,SAAS,UAAU,CAAC,KAAc;IAChC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,0CAA0C,CAAC;IACxE,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,IAAI,aAAa,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IACxE,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC;IAC5B,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,IAAI,EAAE,KAAK,CAAC,IAAc,EAAE,WAAW,EAAE,KAAK,CAAC,WAAqB,EAAE,MAAM,EAAE,KAAK,CAAC,MAA+B;QACnH,MAAM,EAAE,KAAK,CAAC,MAAgB,EAAE,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,WAAW,CAAC,CAA4B;KACtH,CAAC,CAAC;AACL,CAAC;AAED,sGAAsG;AACtG,SAAS,YAAY,CAAC,GAAW;IAC/B,IAAI,KAAc,CAAC;IACnB,IAAI,CAAC;QAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,gBAAgB,CAAC;IAAC,CAAC;IACnE,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,aAAa,KAAK,CAAC;QAAE,OAAO,yBAAyB,CAAC;IACpF,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IACxB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,SAAS;QAAE,OAAO,wBAAwB,SAAS,eAAe,CAAC;IACrI,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,yBAAyB,CAAC,QAAkC,EAAE,YAAmC,EAAE;IACjH,MAAM,KAAK,GAAG,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IACzC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IACnE,MAAM,WAAW,GAAgC,EAAE,CAAC;IACpD,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;QAC1B,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;QACjC,IAAI,OAAO,MAAM,KAAK,QAAQ;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QACrE,IAAI,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,MAAM,CAAC,IAAI,8BAA8B,EAAE,CAAC;QAClJ,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC3B,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;AACnC,CAAC"}

package/dist/lifecycle/tools/projection.d.ts

@@ -0,0 +1,90 @@
+import { type AgentPluginToolCapabilitiesPort, type IssuedTokenMemories } from './capabilities.js';
+import type { LoadedAgentPluginTool } from './definition.js';
+import type { AgentPluginToolEffect } from './manifest.js';
+/** What one call receives from the plugin tool contract. Structural: the host owns that contract. */
+export interface AgentPluginToolInvocation {
+    readonly pluginId: string;
+    readonly auth: {
+        readonly workspaceId: string;
+        readonly principalId?: string;
+    };
+    readonly input: unknown;
+    readonly signal?: AbortSignal;
+}
+/** One tool in the contract's shape (`PluginToolContribution` in `@jini-ai/plugins/host`). */
+export interface AgentPluginContractTool {
+    readonly name: string;
+    readonly description: string;
+    readonly inputSchema: Readonly<Record<string, unknown>>;
+    /** Always set here; optional so the host's own snapshot type (where it is optional) fits the port. */
+    readonly effect?: AgentPluginToolEffect;
+    handler(required: AgentPluginToolInvocation, optional?: Record<string, never>): unknown;
+}
+/** A host adapter over another admitted contribution, using its existing execution owner. */
+export interface AgentPluginAdditionalTool {
+    readonly pluginId: string;
+    readonly tool: AgentPluginContractTool;
+    readonly describeAffectedResources: (required: {
+        readonly input: unknown;
+    }) => readonly string[] | Promise<readonly string[]>;
+}
+/** One plugin's generation in the contract's snapshot shape; routes and widgets stay empty. */
+export interface AgentPluginToolSnapshot {
+    readonly pluginId: string;
+    readonly sdk: object;
+    readonly routes: readonly unknown[];
+    readonly widgets: readonly unknown[];
+    readonly tools: readonly AgentPluginContractTool[];
+}
+/** Host ports: its contribution registry and its tool-id namespacing rule (`pluginToolIdFor`). */
+export interface AgentPluginToolProjectionPorts {
+    readonly registry: {
+        replace(required: {
+            readonly contributions: AgentPluginToolSnapshot;
+        }, optional?: Record<string, never>): void;
+        detach(required: {
+            readonly pluginId: string;
+        }, optional?: Record<string, never>): void;
+        list(required: Record<string, never>, optional?: Record<string, never>): readonly unknown[];
+    };
+    readonly toolIdFor: (required: {
+        readonly pluginId: string;
+        readonly name: string;
+    }, optional?: Record<string, never>) => string;
+    readonly capabilities: AgentPluginToolCapabilitiesPort;
+    /** The host's ONE token memory source, also passed to its admin-surface host (see `createIssuedTokenMemories`). */
+    readonly issuedTokens: IssuedTokenMemories;
+}
+/** What the host shows before confirming a call. */
+export interface AgentPluginToolDisclosure {
+    readonly effect: AgentPluginToolEffect;
+    readonly resources: readonly string[];
+}
+/**
+ * Creates the projection for one dedicated contribution registry (keyed by plugin id, so it must not
+ * be shared with site plugins whose ids could match). Call `sync` after every load: on boot and on
+ * every activation change. A plugin missing from a load is detached: its tools disappear and its
+ * calls' capabilities are revoked.
+ * @param required.registry - Registry the host attached with `attachPluginContributionTools`.
+ * @param required.toolIdFor - The contract's namespacing rule (`pluginToolIdFor`), so ids match the registry's.
+ * @param required.capabilities - Host port building one call's capabilities.
+ * @param required.issuedTokens - Per-plugin token memory shared with the plugin's admin-surface handlers.
+ * @complexity sync is O(t) tools plus schema compilation; disclosure lookup is O(1).
+ */
+export declare function createAgentPluginToolProjection(required: AgentPluginToolProjectionPorts, _optional?: Record<string, never>): {
+    /** Projects one load result. @returns The loader's refusals plus this seam's own, in order. */
+    sync(input: {
+        readonly loaded: readonly LoadedAgentPluginTool[];
+        readonly refusals: readonly string[];
+        readonly additionalTools?: readonly AgentPluginAdditionalTool[];
+    }, _options?: Record<string, never>): {
+        readonly refusals: readonly string[];
+    };
+    /** What a call would change, for the confirmation prompt; null for an unknown or withdrawn tool.
+     * @throws ToolInputError for input that fails the schema; Error for an invalid hook answer. */
+    describeAffectedResources(input: {
+        readonly toolId: string;
+        readonly input: unknown;
+    }, _options?: Record<string, never>): Promise<AgentPluginToolDisclosure | null>;
+};
+//# sourceMappingURL=projection.d.ts.map

package/dist/lifecycle/tools/projection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"projection.d.ts","sourceRoot":"","sources":["../../../src/lifecycle/tools/projection.ts"],"names":[],"mappings":"AAeA,OAAO,EAA8F,KAAK,+BAA+B,EACvI,KAAK,mBAAmB,EAA0B,MAAM,mBAAmB,CAAC;AAC9E,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAC7D,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAE3D,qGAAqG;AACrG,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE;QAAE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC/E,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;CAC/B;AACD,8FAA8F;AAC9F,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACxD,sGAAsG;IACtG,QAAQ,CAAC,MAAM,CAAC,EAAE,qBAAqB,CAAC;IACxC,OAAO,CAAC,QAAQ,EAAE,yBAAyB,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,OAAO,CAAC;CACzF;AACD,6FAA6F;AAC7F,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,uBAAuB,CAAC;IACvC,QAAQ,CAAC,yBAAyB,EAAE,CAAC,QAAQ,EAAE;QAAE,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAA;KAAE,KAAK,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,SAAS,MAAM,EAAE,CAAC,CAAC;CAC/H;AACD,+FAA+F;AAC/F,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,SAAS,OAAO,EAAE,CAAC;IACpC,QAAQ,CAAC,OAAO,EAAE,SAAS,OAAO,EAAE,CAAC;IACrC,QAAQ,CAAC,KAAK,EAAE,SAAS,uBAAuB,EAAE,CAAC;CACpD;AACD,kGAAkG;AAClG,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,QAAQ,EAAE;QACjB,OAAO,CAAC,QAAQ,EAAE;YAAE,QAAQ,CAAC,aAAa,EAAE,uBAAuB,CAAA;SAAE,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,IAAI,CAAC;QAC/G,MAAM,CAAC,QAAQ,EAAE;YAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;SAAE,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,IAAI,CAAC;QACxF,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,SAAS,OAAO,EAAE,CAAC;KAC7F,CAAC;IACF,QAAQ,CAAC,SAAS,EAAE,CAAC,QAAQ,EAAE;QAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,KAAK,MAAM,CAAC;IACjI,QAAQ,CAAC,YAAY,EAAE,+BAA+B,CAAC;IACvD,mHAAmH;IACnH,QAAQ,CAAC,YAAY,EAAE,mBAAmB,CAAC;CAC5C;AAKD,oDAAoD;AACpD,MAAM,WAAW,yBAAyB;IAAG,QAAQ,CAAC,MAAM,EAAE,qBAAqB,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE;AAmI5H;;;;;;;;;;GAUG;AACH,wBAAgB,+BAA+B,CAAC,QAAQ,EAAE,8BAA8B,EAAE,SAAS,GAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAM;IAyD3H,+FAA+F;gBACnF;QAAE,QAAQ,CAAC,MAAM,EAAE,SAAS,qBAAqB,EAAE,CAAC;QAAC,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;QAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,SAAS,yBAAyB,EAAE,CAAA;KAAE,aAAY,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,GAAQ;QAAE,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAA;KAAE;IAoBzP;mGAC+F;qCACxD;QAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAA;KAAE,aAAY,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,GAAQ,OAAO,CAAC,yBAAyB,GAAG,IAAI,CAAC;EAsBhL"}

package/dist/lifecycle/tools/projection.js

@@ -0,0 +1,283 @@
+/**
+ * @file Projects loaded Agent Plugin tools into the EXISTING plugin tool contribution contract
+ * (`@jini-ai/plugins/host`: `PluginContributionRegistry` → `attachPluginContributionTools`), so these
+ * tools reach the assistant through the same namespaced ids, enablement recheck, auth port, confirmation
+ * and revocable registry scope as every other plugin tool. Nothing here registers tools directly.
+ *
+ * Added at this seam, because only it knows a tool came from an Agent Plugin module:
+ * - schema validation of the input before the module runs (the registry passes schemas through);
+ * - per-call host capabilities, revoked when the plugin's tools are withdrawn;
+ * - the affected-resources disclosure the host shows before confirming a write/destructive call;
+ * - refusal of ambiguous ids (two plugins whose namespaced ids collide) and of write/destructive
+ *   tools that cannot disclose what they change.
+ */
+import { Validator } from '@cfworker/json-schema';
+import { requireInputRecord, ToolInputError } from '@jini-ai/core';
+import { openCapabilitySession, openCredentialScan, REVOKED_MESSAGE } from './capabilities.js';
+const MAX_RESOURCES = 50;
+const MAX_RESOURCE_LENGTH = 300;
+/** Agent Plugin tools have no site-plugin SDK; the contract's slot is filled with one that refuses. */
+const refuse = () => { throw new Error('Agent Plugin tools have no site-plugin SDK.'); };
+const INERT_SDK = Object.freeze({
+    content: Object.freeze({ read: refuse, extend: refuse }), addFilter: refuse, addAction: refuse, addContribution: refuse,
+    routes: Object.freeze({ add: refuse }), tools: Object.freeze({ add: refuse }), widgets: Object.freeze({ add: refuse }),
+});
+/** Compiles the declared schema, or says why it cannot be used. @complexity O(s) schema size. */
+function compileSchema(schema) {
+    try {
+        const validator = new Validator(schema, '2020-12', true);
+        // cfworker resolves references lazily; one probe surfaces a root-level unresolved $ref at load.
+        validator.validate({});
+        return validator;
+    }
+    catch (error) {
+        return `its input schema is invalid (${error instanceof Error ? error.message : String(error)})`;
+    }
+}
+/** Why a loaded tool cannot be projected, or its admitted form. @complexity O(s) schema size. */
+function admitOne(loaded, toolIdFor) {
+    const { descriptor, module } = loaded;
+    if (descriptor.effect !== 'read' && typeof module.describeAffectedResources !== 'function') {
+        return `a ${descriptor.effect} tool must export describeAffectedResources()`;
+    }
+    const validator = compileSchema(descriptor.inputSchema);
+    if (typeof validator === 'string')
+        return validator;
+    return { toolId: toolIdFor({ pluginId: loaded.pluginId, name: descriptor.name }), loaded, validator };
+}
+/** Admits each tool, then drops every id more than one plugin claims ("refusing to guess").
+ * @complexity O(t) tools plus schema compilation. */
+function admitAll(loaded, refusals, toolIdFor) {
+    const admitted = [];
+    for (const entry of loaded) {
+        const result = admitOne(entry, toolIdFor);
+        if (typeof result === 'string')
+            refusals.push(`agent tool '${entry.descriptor.name}' from '${entry.pluginId}' was not loaded: ${result}`);
+        else
+            admitted.push(result);
+    }
+    const claimants = new Map();
+    for (const tool of admitted)
+        claimants.set(tool.toolId, (claimants.get(tool.toolId) ?? new Set()).add(tool.loaded.pluginId));
+    for (const [toolId, owners] of claimants) {
+        if (owners.size > 1)
+            refusals.push(`agent tool '${toolId}' was not loaded: more than one plugin declares it (${[...owners].map(id => `'${id}'`).sort().join(', ')})`);
+    }
+    return admitted.filter(tool => claimants.get(tool.toolId).size === 1);
+}
+/** Validates input against the declared schema; the message names locations, never values.
+ * @complexity O(n) input size. */
+function validatedInput(tool, input) {
+    const record = requireInputRecord({ input });
+    let result;
+    // A schema fault reached only by some inputs (nested $ref, bad pattern) fails closed, not as bad input.
+    try {
+        result = tool.validator.validate(record);
+    }
+    catch (error) {
+        throw new Error(`Plugin tool '${tool.toolId}' has an unusable input schema; report it to the plugin author.`, { cause: error });
+    }
+    if (result.valid)
+        return record;
+    // cfworker roots every instanceLocation at '#' (validate()'s default, children append '/key'), so it
+    // is never empty; pinned by "input failing at the schema root is located at #" in projection.unit.test.ts.
+    const where = [...new Set(result.errors.map(unit => `${unit.instanceLocation} (${unit.keyword})`))].slice(0, 3).join(', ');
+    throw new ToolInputError({ message: `Input for '${tool.toolId}' does not match its schema at ${where}. Fix the input and retry.` });
+}
+/** True when both generations hold the same modules and declarations: no revocation needed. @complexity O(t). */
+function sameTools(previous, next, additional) {
+    if (!previous || previous.tools.length !== next.length || previous.additional.length !== additional.length
+        || !previous.additional.every((tool, index) => tool === additional[index]))
+        return false;
+    return previous.tools.every((tool, index) => tool.loaded.module === next[index].loaded.module
+        && JSON.stringify(tool.loaded.descriptor) === JSON.stringify(next[index].loaded.descriptor));
+}
+/**
+ * Checks a disclosure hook's answer. Its text reaches the confirmation prompt and the transcript,
+ * and module scope may still hold a token from an earlier call, so a list that mentions one is
+ * refused like a malformed one. @complexity O(r) resources plus the token scan.
+ */
+function checkedResources(toolId, value, scan) {
+    const valid = Array.isArray(value) && value.length <= MAX_RESOURCES
+        && value.every(item => typeof item === 'string' && item.length > 0 && item.length <= MAX_RESOURCE_LENGTH)
+        && !scan.mentionsToken({ value });
+    if (!valid)
+        throw new Error(`Plugin tool '${toolId}' returned an invalid affected-resources list; the call cannot be confirmed. Report it to the plugin author.`);
+    return Object.freeze([...value]);
+}
+/** Groups admitted tools and additional contributions in declaration order.
+ * Mutates only the local groups and appends admission failures to refusals. @complexity O(t) plus schema compilation. */
+function groupProjectionTools({ loaded, additionalTools, refusals, toolIdFor }, _options = {}) {
+    const grouped = new Map();
+    for (const tool of admitAll(loaded, refusals, toolIdFor)) {
+        const group = grouped.get(tool.loaded.pluginId);
+        if (group)
+            group.push(tool);
+        else
+            grouped.set(tool.loaded.pluginId, [tool]);
+    }
+    const additional = new Map();
+    for (const entry of additionalTools ?? []) {
+        const group = additional.get(entry.pluginId);
+        if (group)
+            group.push(entry);
+        else
+            additional.set(entry.pluginId, [entry]);
+        if (!grouped.has(entry.pluginId))
+            grouped.set(entry.pluginId, []);
+    }
+    return { grouped, additional };
+}
+/** Counts all declarations, including refused tools, and appends ambiguous-id refusals.
+ * @complexity O(t * (r + 1)) time and O(t) space for t declarations and r prior refusals. */
+function countProjectionClaims({ loaded, additionalTools, refusals, idFor }, _options = {}) {
+    // All claimants lose an ambiguous id, including collisions between executable and surface tools.
+    const counts = new Map();
+    const claimedIds = [...loaded.map(tool => idFor({ pluginId: tool.pluginId, name: tool.descriptor.name })),
+        ...(additionalTools ?? []).map(entry => idFor({ pluginId: entry.pluginId, name: entry.tool.name }))];
+    for (const id of claimedIds)
+        counts.set(id, (counts.get(id) ?? 0) + 1);
+    for (const [id, count] of counts) {
+        if (count <= 1)
+            continue;
+        // MOVE: Admission already reports executable collisions with their owners; preserve that diagnostic once.
+        if (refusals.some(reason => reason.startsWith(`agent tool '${id}' was not loaded:`)))
+            continue;
+        refusals.push(`agent tool '${id}' was not loaded: more than one contribution declares it`);
+    }
+    return counts;
+}
+/**
+ * Creates the projection for one dedicated contribution registry (keyed by plugin id, so it must not
+ * be shared with site plugins whose ids could match). Call `sync` after every load: on boot and on
+ * every activation change. A plugin missing from a load is detached: its tools disappear and its
+ * calls' capabilities are revoked.
+ * @param required.registry - Registry the host attached with `attachPluginContributionTools`.
+ * @param required.toolIdFor - The contract's namespacing rule (`pluginToolIdFor`), so ids match the registry's.
+ * @param required.capabilities - Host port building one call's capabilities.
+ * @param required.issuedTokens - Per-plugin token memory shared with the plugin's admin-surface handlers.
+ * @complexity sync is O(t) tools plus schema compilation; disclosure lookup is O(1).
+ */
+export function createAgentPluginToolProjection(required, _optional = {}) {
+    const { registry } = required;
+    let projected = new Map();
+    let additionalById = new Map();
+    let byToolId = new Map();
+    /** One contract tool whose handler validates, scopes capabilities and gates the result. */
+    function contractTool(tool, generationOf) {
+        const { isLive, issued } = generationOf;
+        const { descriptor, module } = tool.loaded;
+        const contribution = {
+            name: descriptor.name, description: descriptor.description, inputSchema: descriptor.inputSchema, effect: descriptor.effect,
+            async handler({ pluginId, auth, input, signal }) {
+                // Defense in depth: the registry rechecks enablement, but a retained handler must not run either.
+                if (!isLive())
+                    throw new Error(REVOKED_MESSAGE);
+                const checked = validatedInput(tool, input);
+                const host = required.capabilities({ pluginId, workspaceId: auth.workspaceId,
+                    ...(auth.principalId === undefined ? {} : { principalId: auth.principalId }), ...(signal === undefined ? {} : { signal }) });
+                const session = openCapabilitySession({ capabilities: host, isLive, issued });
+                try {
+                    const value = await module.invoke({ input: checked, capabilities: session.capabilities, ...(signal === undefined ? {} : { signal }) });
+                    return session.release({ value });
+                }
+                catch (error) {
+                    throw session.sanitize({ error });
+                }
+            },
+        };
+        return Object.freeze(contribution);
+    }
+    /** A fresh generation for one plugin; its tools are live only while the registry holds it. */
+    function generation(pluginId, tools, additional) {
+        let snapshot;
+        const isLive = () => snapshot !== undefined && registry.list({}).includes(snapshot);
+        const issued = required.issuedTokens.forPlugin({ pluginId });
+        snapshot = Object.freeze({ pluginId, sdk: INERT_SDK, routes: Object.freeze([]), widgets: Object.freeze([]),
+            tools: Object.freeze([...tools.map(tool => contractTool(tool, { isLive, issued })), ...additional.map(({ tool }) => Object.freeze({
+                    ...tool,
+                    handler(input) {
+                        if (!isLive())
+                            throw new Error(REVOKED_MESSAGE);
+                        return tool.handler(input);
+                    },
+                }))]) });
+        return { snapshot, tools, additional };
+    }
+    /** Replaces one plugin's generation unless it is unchanged; a refused replacement detaches it. */
+    function place(pluginId, tools, additional, refusals) {
+        const previous = projected.get(pluginId);
+        if (sameTools(previous, tools, additional))
+            return previous;
+        const next = generation(pluginId, tools, additional);
+        try {
+            registry.replace({ contributions: next.snapshot });
+            return next;
+        }
+        catch (error) {
+            registry.detach({ pluginId });
+            refusals.push(`agent tools from '${pluginId}' were not loaded: ${error instanceof Error ? error.message : String(error)}`);
+            return undefined;
+        }
+    }
+    return {
+        /** Projects one load result. @returns The loader's refusals plus this seam's own, in order. */
+        sync(input, _options = {}) {
+            const refusals = [...input.refusals];
+            const { grouped, additional } = groupProjectionTools({
+                loaded: input.loaded, additionalTools: input.additionalTools, refusals, toolIdFor: required.toolIdFor,
+            });
+            const idFor = required.toolIdFor;
+            const counts = countProjectionClaims({ loaded: input.loaded, additionalTools: input.additionalTools, refusals, idFor });
+            const nextProjected = new Map();
+            for (const [pluginId, tools] of grouped) {
+                const unique = tools.filter(tool => counts.get(tool.toolId) === 1);
+                const extras = (additional.get(pluginId) ?? []).filter(entry => counts.get(idFor({ pluginId, name: entry.tool.name })) === 1);
+                const placed = place(pluginId, unique, extras, refusals);
+                if (placed)
+                    nextProjected.set(pluginId, placed);
+            }
+            for (const pluginId of projected.keys())
+                if (!grouped.has(pluginId))
+                    registry.detach({ pluginId });
+            projected = nextProjected;
+            additionalById = new Map([...nextProjected.values()].flatMap(plugin => plugin.additional.map(entry => [idFor({ pluginId: entry.pluginId, name: entry.tool.name }), { entry, snapshot: plugin.snapshot }])));
+            byToolId = new Map([...nextProjected.values()].flatMap(plugin => plugin.tools.map(tool => [tool.toolId, { tool, snapshot: plugin.snapshot }])));
+            return { refusals };
+        },
+        /** What a call would change, for the confirmation prompt; null for an unknown or withdrawn tool.
+         * @throws ToolInputError for input that fails the schema; Error for an invalid hook answer. */
+        async describeAffectedResources(input, _options = {}) {
+            const extra = additionalById.get(input.toolId);
+            if (extra && registry.list({}).includes(extra.snapshot)) {
+                const scan = openCredentialScan({ issued: required.issuedTokens.forPlugin({ pluginId: extra.entry.pluginId }) });
+                try {
+                    const resources = await extra.entry.describeAffectedResources({ input: input.input });
+                    return { effect: extra.entry.tool.effect ?? 'write', resources: checkedResources(input.toolId, resources, scan) };
+                }
+                catch (error) {
+                    throw scan.sanitize({ error });
+                }
+            }
+            const entry = byToolId.get(input.toolId);
+            if (!entry || !registry.list({}).includes(entry.snapshot))
+                return null;
+            const { tool } = entry;
+            const checked = validatedInput(tool, input.input);
+            const describe = tool.loaded.module.describeAffectedResources;
+            if (!describe)
+                return { effect: tool.loaded.descriptor.effect, resources: [] };
+            // The same per-plugin token memory the plugin's calls feed: its answers and errors are scanned alike.
+            const scan = openCredentialScan({ issued: required.issuedTokens.forPlugin({ pluginId: tool.loaded.pluginId }) });
+            let answer;
+            try {
+                answer = await describe({ input: checked });
+            }
+            catch (error) {
+                throw scan.sanitize({ error });
+            }
+            return { effect: tool.loaded.descriptor.effect, resources: checkedResources(tool.toolId, answer, scan) };
+        },
+    };
+}
+//# sourceMappingURL=projection.js.map

package/dist/lifecycle/tools/projection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"projection.js","sourceRoot":"","sources":["../../../src/lifecycle/tools/projection.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,SAAS,EAAe,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AACnE,OAAO,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,eAAe,EACf,MAAM,mBAAmB,CAAC;AAqD9E,MAAM,aAAa,GAAG,EAAE,CAAC;AACzB,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAEhC,uGAAuG;AACvG,MAAM,MAAM,GAAG,GAAU,EAAE,GAAG,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC,CAAC,CAAC,CAAC;AAChG,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC;IAC9B,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM;IACvH,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC;CACvH,CAAC,CAAC;AAEH,iGAAiG;AACjG,SAAS,aAAa,CAAC,MAAyC;IAC9D,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,IAAI,SAAS,CAAC,MAAgB,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;QACnE,gGAAgG;QAChG,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACvB,OAAO,SAAS,CAAC;IACnB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,OAAO,gCAAgC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC;IAAC,CAAC;AACvH,CAAC;AAED,iGAAiG;AACjG,SAAS,QAAQ,CAAC,MAA6B,EAAE,SAAsD;IACrG,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;IACtC,IAAI,UAAU,CAAC,MAAM,KAAK,MAAM,IAAI,OAAO,MAAM,CAAC,yBAAyB,KAAK,UAAU,EAAE,CAAC;QAC3F,OAAO,KAAK,UAAU,CAAC,MAAM,+CAA+C,CAAC;IAC/E,CAAC;IACD,MAAM,SAAS,GAAG,aAAa,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;IACxD,IAAI,OAAO,SAAS,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IACpD,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;AACxG,CAAC;AAED;qDACqD;AACrD,SAAS,QAAQ,CAAC,MAAwC,EAAE,QAAkB,EAAE,SAAsD;IACpI,MAAM,QAAQ,GAAmB,EAAE,CAAC;IACpC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QAC1C,IAAI,OAAO,MAAM,KAAK,QAAQ;YAAE,QAAQ,CAAC,IAAI,CAAC,eAAe,KAAK,CAAC,UAAU,CAAC,IAAI,WAAW,KAAK,CAAC,QAAQ,qBAAqB,MAAM,EAAE,CAAC,CAAC;;YACrI,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC7B,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,GAAG,EAAuB,CAAC;IACjD,KAAK,MAAM,IAAI,IAAI,QAAQ;QAAE,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC7H,KAAK,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;QACzC,IAAI,MAAM,CAAC,IAAI,GAAG,CAAC;YAAE,QAAQ,CAAC,IAAI,CAAC,eAAe,MAAM,uDAAuD,CAAC,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACxK,CAAC;IACD,OAAO,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAE,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC;AACzE,CAAC;AAED;kCACkC;AAClC,SAAS,cAAc,CAAC,IAAkB,EAAE,KAAc;IACxD,MAAM,MAAM,GAAG,kBAAkB,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7C,IAAI,MAAyC,CAAC;IAC9C,wGAAwG;IACxG,IAAI,CAAC;QAAC,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAAC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAC/D,MAAM,IAAI,KAAK,CAAC,gBAAgB,IAAI,CAAC,MAAM,iEAAiE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IAClI,CAAC;IACD,IAAI,MAAM,CAAC,KAAK;QAAE,OAAO,MAAM,CAAC;IAChC,qGAAqG;IACrG,2GAA2G;IAC3G,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,gBAAgB,KAAK,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3H,MAAM,IAAI,cAAc,CAAC,EAAE,OAAO,EAAE,cAAc,IAAI,CAAC,MAAM,kCAAkC,KAAK,4BAA4B,EAAE,CAAC,CAAC;AACtI,CAAC;AAED,iHAAiH;AACjH,SAAS,SAAS,CAAC,QAAqC,EAAE,IAA6B,EAAE,UAAgD;IACvI,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,MAAM,KAAK,UAAU,CAAC,MAAM;WACrG,CAAC,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,KAAK,UAAU,CAAC,KAAK,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3F,OAAO,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,IAAI,CAAC,KAAK,CAAE,CAAC,MAAM,CAAC,MAAM;WACzF,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;AAClG,CAAC;AAED;;;;GAIG;AACH,SAAS,gBAAgB,CAAC,MAAc,EAAE,KAAc,EAAE,IAA+B;IACvF,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,aAAa;WAC9D,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,IAAI,mBAAmB,CAAC;WACtG,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IACpC,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,MAAM,8GAA8G,CAAC,CAAC;IAClK,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC;AACnC,CAAC;AAED;yHACyH;AACzH,SAAS,oBAAoB,CAAC,EAAE,MAAM,EAAE,eAAe,EAAE,QAAQ,EAAE,SAAS,EAK3E,EAAE,WAAkC,EAAE;IACrC,MAAM,OAAO,GAAG,IAAI,GAAG,EAA0B,CAAC;IAClD,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,MAAM,EAAE,QAAQ,EAAE,SAAS,CAAC,EAAE,CAAC;QACzD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAChD,IAAI,KAAK;YAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;;YAAM,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9E,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,GAAG,EAAuC,CAAC;IAClE,KAAK,MAAM,KAAK,IAAI,eAAe,IAAI,EAAE,EAAE,CAAC;QAC1C,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC7C,IAAI,KAAK;YAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;;YAAM,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;QAC3E,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;AACjC,CAAC;AAED;6FAC6F;AAC7F,SAAS,qBAAqB,CAAC,EAAE,MAAM,EAAE,eAAe,EAAE,QAAQ,EAAE,KAAK,EAKxE,EAAE,WAAkC,EAAE;IACrC,iGAAiG;IACjG,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,MAAM,UAAU,GAAG,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC;QACvG,GAAG,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACvG,KAAK,MAAM,EAAE,IAAI,UAAU;QAAE,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACvE,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,MAAM,EAAE,CAAC;QACjC,IAAI,KAAK,IAAI,CAAC;YAAE,SAAS;QACzB,0GAA0G;QAC1G,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,eAAe,EAAE,mBAAmB,CAAC,CAAC;YAAE,SAAS;QAC/F,QAAQ,CAAC,IAAI,CAAC,eAAe,EAAE,0DAA0D,CAAC,CAAC;IAC7F,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,+BAA+B,CAAC,QAAwC,EAAE,YAAmC,EAAE;IAC7H,MAAM,EAAE,QAAQ,EAAE,GAAG,QAAQ,CAAC;IAC9B,IAAI,SAAS,GAAG,IAAI,GAAG,EAA2B,CAAC;IACnD,IAAI,cAAc,GAAG,IAAI,GAAG,EAAqG,CAAC;IAClI,IAAI,QAAQ,GAAG,IAAI,GAAG,EAAuF,CAAC;IAE9G,2FAA2F;IAC3F,SAAS,YAAY,CAAC,IAAkB,EAAE,YAAoF;QAC5H,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,YAAY,CAAC;QACxC,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC;QAC3C,MAAM,YAAY,GAA4B;YAC5C,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,WAAW,EAAE,UAAU,CAAC,WAAW,EAAE,WAAW,EAAE,UAAU,CAAC,WAAW,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM;YAC1H,KAAK,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE;gBAC7C,kGAAkG;gBAClG,IAAI,CAAC,MAAM,EAAE;oBAAE,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;gBAChD,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;gBAC5C,MAAM,IAAI,GAAG,QAAQ,CAAC,YAAY,CAAC,EAAE,QAAQ,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW;oBAC1E,GAAG,CAAC,IAAI,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;gBAC/H,MAAM,OAAO,GAAG,qBAAqB,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;gBAC9E,IAAI,CAAC;oBACH,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;oBACvI,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;gBACpC,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBAAC,MAAM,OAAO,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;gBAAC,CAAC;YACxD,CAAC;SACF,CAAC;QACF,OAAO,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IACrC,CAAC;IAED,8FAA8F;IAC9F,SAAS,UAAU,CAAC,QAAgB,EAAE,KAA8B,EAAE,UAAgD;QACpH,IAAI,QAA6C,CAAC;QAClD,MAAM,MAAM,GAAG,GAAG,EAAE,CAAC,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACpF,MAAM,MAAM,GAAG,QAAQ,CAAC,YAAY,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC7D,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YACxG,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,EAAE,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC;oBAChI,GAAG,IAAI;oBACP,OAAO,CAAC,KAAgC;wBACtC,IAAI,CAAC,MAAM,EAAE;4BAAE,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;wBAChD,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;oBAC7B,CAAC;iBACF,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACX,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;IACzC,CAAC;IAED,kGAAkG;IAClG,SAAS,KAAK,CAAC,QAAgB,EAAE,KAA8B,EAAE,UAAgD,EAAE,QAAkB;QACnI,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACzC,IAAI,SAAS,CAAC,QAAQ,EAAE,KAAK,EAAE,UAAU,CAAC;YAAE,OAAO,QAAQ,CAAC;QAC5D,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;QACrD,IAAI,CAAC;YAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACtF,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC9B,QAAQ,CAAC,IAAI,CAAC,qBAAqB,QAAQ,sBAAsB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAC3H,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IAED,OAAO;QACL,+FAA+F;QAC/F,IAAI,CAAC,KAAmK,EAAE,WAAkC,EAAE;YAC5M,MAAM,QAAQ,GAAG,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC;YACrC,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,oBAAoB,CAAC;gBACnD,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,eAAe,EAAE,KAAK,CAAC,eAAe,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS;aACtG,CAAC,CAAC;YACH,MAAM,KAAK,GAAG,QAAQ,CAAC,SAAS,CAAC;YACjC,MAAM,MAAM,GAAG,qBAAqB,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,eAAe,EAAE,KAAK,CAAC,eAAe,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;YACxH,MAAM,aAAa,GAAG,IAAI,GAAG,EAA2B,CAAC;YACzD,KAAK,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,CAAC;gBACxC,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;gBACnE,MAAM,MAAM,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;gBAC9H,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;gBACzD,IAAI,MAAM;oBAAE,aAAa,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YAClD,CAAC;YACD,KAAK,MAAM,QAAQ,IAAI,SAAS,CAAC,IAAI,EAAE;gBAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;oBAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;YACnG,SAAS,GAAG,aAAa,CAAC;YAC1B,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,aAAa,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAU,CAAC,CAAC,CAAC,CAAC;YACrN,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,aAAa,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAU,CAAC,CAAC,CAAC,CAAC;YACzJ,OAAO,EAAE,QAAQ,EAAE,CAAC;QACtB,CAAC;QACD;uGAC+F;QAC/F,KAAK,CAAC,yBAAyB,CAAC,KAA2D,EAAE,WAAkC,EAAE;YAC/H,MAAM,KAAK,GAAG,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAC/C,IAAI,KAAK,IAAI,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACxD,MAAM,IAAI,GAAG,kBAAkB,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,YAAY,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC;gBACjH,IAAI,CAAC;oBACH,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,yBAAyB,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;oBACtF,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,IAAI,OAAO,EAAE,SAAS,EAAE,gBAAgB,CAAC,KAAK,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,EAAE,CAAC;gBACpH,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;gBAAC,CAAC;YACrD,CAAC;YACD,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACzC,IAAI,CAAC,KAAK,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC;gBAAE,OAAO,IAAI,CAAC;YACvE,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC;YACvB,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;YAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,yBAAyB,CAAC;YAC9D,IAAI,CAAC,QAAQ;gBAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;YAC/E,sGAAsG;YACtG,MAAM,IAAI,GAAG,kBAAkB,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,YAAY,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC;YACjH,IAAI,MAAe,CAAC;YACpB,IAAI,CAAC;gBAAC,MAAM,GAAG,MAAM,QAAQ,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;YAAC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;YAAC,CAAC;YACtG,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,SAAS,EAAE,gBAAgB,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC;QAC3G,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/lifecycle/trusted-plugin-files.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"trusted-plugin-files.d.ts","sourceRoot":"","sources":["../../src/lifecycle/trusted-plugin-files.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,YAAY,CAAC;AAE5D;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,uEAAuE;AACvE,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAE7B,kEAAkE;IAClE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAE1B,2GAA2G;IAC3G,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAE9B,kEAAkE;IAClE,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC;IAEhC,sEAAsE;IACtE,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,SAAS,CAAC;IAEjD;uFACmF;IACnF,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;QAAE,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAA;KAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,SAAS,CAAC;CAC5G;AAED;;oCAEoC;AACpC,MAAM,MAAM,oBAAoB,GAAG;IAAE,QAAQ,CAAC,OAAO,EAAE,oBAAoB,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAsF7G,gFAAgF;AAChF,wBAAgB,8BAA8B,CAAC,KAAK,EAAE,yBAAyB;uCAtE7B,0BAA0B,KAAG,OAAO,CAAC,SAAS,oBAAoB,EAAE,CAAC;oCAsCxE,oBAAoB,YAAY,MAAM,KAAG,OAAO,CAAC,MAAM,CAAC;oCAWxD,oBAAoB,cAAc,MAAM,KAAG,OAAO,CAAC;QAAE,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAA;KAAE,GAAG,MAAM,CAAC;EAyBzI"}

package/dist/lifecycle/trusted-plugin-files.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trusted-plugin-files.js","sourceRoot":"","sources":["../../src/lifecycle/trusted-plugin-files.ts"],"names":[],"mappings":"AAAA,uFAAuF;AACvF,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AACzD,OAAO,EAAE,0BAA0B,EAAE,MAAM,sBAAsB,CAAC;AAClE,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,kCAAkC,EAAE,MAAM,gCAAgC,CAAC;AA8DpF,SAAS,WAAW,CAAC,KAAgC;IACnD,MAAM,QAAQ,GAAG,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAClE,MAAM,EAAE,4BAA4B,EAAE,GAAG,sBAAsB,CAAC,KAAK,CAAC,CAAC;IACvE,MAAM,EAAE,+BAA+B,EAAE,6BAA6B,EAAE,GAAG,0BAA0B,CAAC,KAAK,CAAC,CAAC;IAC7G,MAAM,EAAE,qBAAqB,EAAE,GAAG,wBAAwB,CAAC,KAAK,CAAC,CAAC;IAClE,MAAM,EAAE,oBAAoB,EAAE,GAAG,kCAAkC,CAAC,KAAK,CAAC,CAAC;IAC3E;;;;;;;;KAQC;IACD,KAAK,UAAU,yBAAyB,CAAC,KAAiC;QACxE,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;QAC7E,MAAM,OAAO,GAAG,MAAM,6BAA6B,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACjE,MAAM,SAAS,GAAG,+BAA+B,CAAC,MAAM,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;QACpG,MAAM,SAAS,GAAG,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAE1H,MAAM,QAAQ,GAA2B,EAAE,CAAC;QAC5C,KAAK,MAAM,MAAM,IAAI,SAAS,EAAE,CAAC;YAC/B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC;gBAAE,SAAS;YACrD,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;YAC7F,MAAM,OAAO,GAAG,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC;YAC/E,IAAI,OAAO,KAAK,IAAI;gBAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;iBAC5C,IAAI,OAAO,KAAK,UAAU;gBAAE,MAAM,KAAK,CAAC,UAAU,EAAE,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;;gBAC1E,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC,YAAY,UAAU,MAAM,CAAC,QAAQ,sBAAsB,OAAO,EAAE,EAAE,CAAC,CAAC;QACjH,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;qDACiD;IACjD,KAAK,UAAU,YAAY,CACzB,KAAiC,EACjC,MAAqE,EACrE,aAAiC,EACjC,aAAqB;QAErB,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;YACxB,MAAM,UAAU,GAAG,MAAM,4BAA4B,CAAC,aAAa,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;YACtF,IAAI,UAAU,CAAC,OAAO,KAAK,UAAU;gBAAE,OAAO,UAAU,CAAC;YACzD,IAAI,UAAU,CAAC,OAAO,KAAK,cAAc;gBAAE,OAAO,qCAAqC,UAAU,CAAC,MAAM,GAAG,CAAC;QAC9G,CAAC;QACD,IAAI,aAAa,KAAK,MAAM,CAAC,aAAa,EAAE,CAAC;YAC3C,OAAO,6BAA6B,KAAK,CAAC,WAAW,YAAY,KAAK,CAAC,YAAY,sBAAsB,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,qCAAqC,CAAC;QAClL,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,8FAA8F;IAC9F,KAAK,UAAU,qBAAqB,CAAC,MAA4B,EAAE,QAAgB;QACjF,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,MAAM,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QAC3E,OAAO,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACpC,CAAC;IAED;;;;;KAKC;IACD,KAAK,UAAU,qBAAqB,CAAC,MAA4B,EAAE,UAAkB;QACnF,IAAI,QAAgB,CAAC;QACrB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,qBAAqB,CAAC,MAAM,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;QACzE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,oBAAoB;gBAAE,OAAO,gBAAgB,UAAU,2BAA2B,CAAC;YACxG,MAAM,KAAK,CAAC;QACd,CAAC;QACD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,CAAC,MAAM,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAmC,CAAC;YAChG,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC;QACxC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;IAED,OAAO,EAAE,yBAAyB,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,CAAC;AACrF,CAAC;AAED,MAAM,SAAS,GAAG,IAAI,OAAO,EAA6D,CAAC;AAC3F,gFAAgF;AAChF,MAAM,UAAU,8BAA8B,CAAC,KAAgC;IAC7E,IAAI,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACpC,IAAI,CAAC,QAAQ,EAAE,CAAC;QAAC,QAAQ,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;QAAC,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IAAC,CAAC;IACjF,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/lifecycle/types.d.ts

@@ -8,6 +8,8 @@ export interface InstalledAgentPluginSkill {
 export interface InstalledAgentPlugin {
     readonly id?: string | undefined;
     readonly provides?: readonly string[] | undefined;
+    readonly requires?: readonly string[] | undefined;
+    readonly hostRange?: string | undefined;
     readonly pluginId: string;
     readonly version?: (string) | undefined;
     /** the host extension namespace in `plugin.json`: `displayName` — the human-facing title when the id alone reads

package/dist/lifecycle/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/lifecycle/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAE3D,0EAA0E;AAC1E,MAAM,MAAM,uBAAuB,GAAG,QAAQ,GAAG,SAAS,CAAC;AAE3D,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IAClD,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IAClD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC;IAExC;;;;qCAIiC;IACjC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1C;;;;oEAIgE;IAChE,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC;IAC5C,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,SAAS,MAAM,EAAE,CAAC,GAAG,SAAS,CAAC;IACpD,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,oBAAoB,GAAG,SAAS,CAAC;IAC5D,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC;IAExC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAE/B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,SAAS,yBAAyB,EAAE,CAAC;CACvD"}

package/dist/lifecycle/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/lifecycle/types.ts"],"names":[],"mappings":""}

package/dist/lifecycle/uninstall.d.ts

@@ -64,7 +64,9 @@ export interface StagedTree {
 export declare function createUninstallModule(ports: AgentPluginLifecyclePorts): {
     previewAgentPluginUninstall: (required: UninstallAgentPluginRequired) => Promise<AgentPluginUninstallPreview>;
     uninstallAgentPlugin: (required: UninstallAgentPluginRequired, optional?: UninstallAgentPluginOptional) => Promise<UninstallAgentPluginResult>;
-    stageForRemoval: (packagesDir: string, packageRoot: string) => Promise<StagedTree>;
+    stageForRemoval: (packagesDir: string, packageRoot: string, optional?: {
+        quarantined?: string;
+    }) => Promise<StagedTree>;
     restoreStagedTrees: (staged: readonly StagedTree[], cause: unknown) => Promise<unknown>;
     removeFrozenPackageTree: (root: string) => Promise<void>;
 };

package/dist/lifecycle/uninstall.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"uninstall.d.ts","sourceRoot":"","sources":["../../src/lifecycle/uninstall.ts"],"names":[],"mappings":"AAoHA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAGrD,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,YAAY,CAAC;AAE5D,yEAAyE;AACzE,qBAAa,wBAAyB,SAAQ,KAAK;gBACrC,EAAE,OAAO,EAAE,EAAE;QAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;KAAE,EAAE,QAAQ,GAAE,YAAiB;CACnF;AAED;2BAC2B;AAC3B,qBAAa,gCAAiC,SAAQ,KAAK;gBAC7C,EAAE,OAAO,EAAE,EAAE;QAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;KAAE,EAAE,QAAQ,GAAE,YAAiB;CACnF;AAED;gFACgF;AAChF,qBAAa,mCAAoC,SAAQ,KAAK;gBAChD,EAAE,OAAO,EAAE,EAAE;QAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;KAAE,EAAE,QAAQ,GAAE,YAAiB;CACnF;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAC;IACnC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,4BAA4B;IAE3C;;wGAEoG;IACpG,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC,2BAA2B,CAAC,GAAG,SAAS,CAAC;IACtE,qFAAqF;IACrF,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAE5C;;;wFAGoF;IACpF,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,SAAS,CAAC;CACjD;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAE1B;;uFAEmF;IACnF,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;CAC5C;AAED,kGAAkG;AAClG,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAE1B,4FAA4F;IAC5F,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;CAC5C;AAED,qGAAqG;AACrG;iEACiE;AACjE,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAsTD,gFAAgF;AAChF,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,yBAAyB;4CAjRf,4BAA4B,KAAG,OAAO,CAAC,2BAA2B,CAAC;qCAqB1E,4BAA4B,aAAY,4BAA4B,KAAQ,OAAO,CAAC,0BAA0B,CAAC;mCA+GjH,MAAM,eAAe,MAAM,aAAY;QAAE,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,KAAQ,OAAO,CAAC,UAAU,CAAC;iCAwB5F,SAAS,UAAU,EAAE,SAAS,OAAO,KAAG,OAAO,CAAC,OAAO,CAAC;oCAwFrD,MAAM,KAAG,OAAO,CAAC,IAAI,CAAC;EAiCpE"}