@jinn-network/client 0.1.2 → 0.1.3-canary.262e5cda

package/dist/restorer/plug-ins/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/restorer/plug-ins/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC"}

package/dist/restorer/plug-ins/loader.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Load installed Path 1 plug-ins from operator config and assemble a
+ * normalised slot registry. Per-plug-in failures are recorded but never
+ * abort the load — daemon boot continues with the surviving registry.
+ *
+ * Collision policy (phase-agent-override): first-installed-wins on the
+ * `(phase, agent, scope.matchKinds)` key. A collision is recorded as an
+ * error and the second plug-in is DROPPED. The operator must explicitly
+ * remove the existing plug-in before installing the new one.
+ * See plan §"Cross-task conventions / Slot routing rule".
+ */
+import type { ExternalPlugInEntry } from './types.js';
+import type { SlotRegistry } from './registry.js';
+export interface LoadPlugInsArgs {
+    entries: readonly ExternalPlugInEntry[];
+    /** Version of the bundled claude-code-learner package. Used for compat checks. */
+    learnerVersion: string;
+}
+export interface LoadPlugInsResult {
+    registry: SlotRegistry;
+    errors: ReadonlyArray<{
+        plugInName: string;
+        reason: string;
+    }>;
+    warnings: ReadonlyArray<string>;
+}
+export declare function loadPlugIns({ entries, learnerVersion, }: LoadPlugInsArgs): Promise<LoadPlugInsResult>;

package/dist/restorer/plug-ins/loader.js

@@ -0,0 +1,101 @@
+/**
+ * Load installed Path 1 plug-ins from operator config and assemble a
+ * normalised slot registry. Per-plug-in failures are recorded but never
+ * abort the load — daemon boot continues with the surviving registry.
+ *
+ * Collision policy (phase-agent-override): first-installed-wins on the
+ * `(phase, agent, scope.matchKinds)` key. A collision is recorded as an
+ * error and the second plug-in is DROPPED. The operator must explicitly
+ * remove the existing plug-in before installing the new one.
+ * See plan §"Cross-task conventions / Slot routing rule".
+ */
+import { resolve } from 'node:path';
+import semver from 'semver';
+import { loadPlugInManifest } from './manifest.js';
+export async function loadPlugIns({ entries, learnerVersion, }) {
+    const errors = [];
+    const warnings = [];
+    const topicExplorers = [];
+    const mcpTools = [];
+    const skillBundles = [];
+    const memoryBackends = [];
+    const hooks = [];
+    // Track first-installed-wins collisions for phase-agent overrides.
+    const phaseAgentKeyed = new Map();
+    for (const entry of entries) {
+        let manifest;
+        try {
+            manifest = await loadPlugInManifest(entry.entry);
+        }
+        catch (err) {
+            errors.push({ plugInName: entry.name, reason: err.message });
+            continue;
+        }
+        if (manifest.name !== entry.name) {
+            errors.push({
+                plugInName: entry.name,
+                reason: `manifest name "${manifest.name}" mismatches config entry "${entry.name}"`,
+            });
+            continue;
+        }
+        const range = manifest.compatibility.claudeCodeLearner;
+        if (!semver.satisfies(learnerVersion, range)) {
+            warnings.push(`plug-in ${manifest.name}@${manifest.version} compatibility ${range} out-of-range for claude-code-learner@${learnerVersion}; loading anyway, expected to break`);
+        }
+        const packageRoot = resolve(entry.entry);
+        for (const slot of manifest.slots) {
+            const provenance = {
+                plugInName: manifest.name,
+                plugInVersion: manifest.version,
+                packageRoot,
+            };
+            switch (slot.type) {
+                case 'phase-agent-override': {
+                    const key = `${slot.phase}|${slot.agent}|${(slot.scope?.matchKinds ?? ['*']).join(',')}`;
+                    if (phaseAgentKeyed.has(key)) {
+                        const first = phaseAgentKeyed.get(key).plugInName;
+                        errors.push({
+                            plugInName: manifest.name,
+                            reason: `phase-agent-override collision on "${key}": slot already registered by "${first}". Remove "${first}" before installing "${manifest.name}".`,
+                        });
+                        // Do not register the second plug-in — first-installed-wins.
+                        break;
+                    }
+                    phaseAgentKeyed.set(key, { ...provenance, slot });
+                    break;
+                }
+                case 'topic-explorer':
+                    topicExplorers.push({ ...provenance, slot });
+                    break;
+                case 'mcp-tool':
+                    mcpTools.push({ ...provenance, slot });
+                    break;
+                case 'skill-bundle':
+                    skillBundles.push({ ...provenance, slot });
+                    break;
+                case 'memory-backend':
+                    memoryBackends.push({ ...provenance, slot });
+                    break;
+                case 'hook':
+                    hooks.push({ ...provenance, slot });
+                    break;
+            }
+        }
+    }
+    const phaseAgentOverrides = [
+        ...phaseAgentKeyed.values(),
+    ];
+    return {
+        registry: {
+            phaseAgentOverrides,
+            topicExplorers,
+            mcpTools,
+            skillBundles,
+            memoryBackends,
+            hooks,
+        },
+        errors,
+        warnings,
+    };
+}
+//# sourceMappingURL=loader.js.map

package/dist/restorer/plug-ins/loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"loader.js","sourceRoot":"","sources":["../../../src/restorer/plug-ins/loader.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,MAAM,MAAM,QAAQ,CAAC;AAY5B,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAenD,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,EAChC,OAAO,EACP,cAAc,GACE;IAChB,MAAM,MAAM,GAA6C,EAAE,CAAC;IAC5D,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,cAAc,GAAsC,EAAE,CAAC;IAC7D,MAAM,QAAQ,GAAgC,EAAE,CAAC;IACjD,MAAM,YAAY,GAAoC,EAAE,CAAC;IACzD,MAAM,cAAc,GAAsC,EAAE,CAAC;IAC7D,MAAM,KAAK,GAA6B,EAAE,CAAC;IAE3C,mEAAmE;IACnE,MAAM,eAAe,GAAG,IAAI,GAAG,EAG5B,CAAC;IAEJ,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,QAA4B,CAAC;QACjC,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,kBAAkB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACnD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;YACxE,SAAS;QACX,CAAC;QACD,IAAI,QAAQ,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,EAAE,CAAC;YACjC,MAAM,CAAC,IAAI,CAAC;gBACV,UAAU,EAAE,KAAK,CAAC,IAAI;gBACtB,MAAM,EAAE,kBAAkB,QAAQ,CAAC,IAAI,8BAA8B,KAAK,CAAC,IAAI,GAAG;aACnF,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,MAAM,KAAK,GAAG,QAAQ,CAAC,aAAa,CAAC,iBAAiB,CAAC;QACvD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,EAAE,KAAK,CAAC,EAAE,CAAC;YAC7C,QAAQ,CAAC,IAAI,CACX,WAAW,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,OAAO,kBAAkB,KAAK,yCAAyC,cAAc,qCAAqC,CAChK,CAAC;QACJ,CAAC;QACD,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACzC,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAwB,EAAE,CAAC;YACrD,MAAM,UAAU,GAAG;gBACjB,UAAU,EAAE,QAAQ,CAAC,IAAI;gBACzB,aAAa,EAAE,QAAQ,CAAC,OAAO;gBAC/B,WAAW;aACZ,CAAC;YACF,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;gBAClB,KAAK,sBAAsB,CAAC,CAAC,CAAC;oBAC5B,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,UAAU,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;oBACzF,IAAI,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;wBAC7B,MAAM,KAAK,GAAG,eAAe,CAAC,GAAG,CAAC,GAAG,CAAE,CAAC,UAAU,CAAC;wBACnD,MAAM,CAAC,IAAI,CAAC;4BACV,UAAU,EAAE,QAAQ,CAAC,IAAI;4BACzB,MAAM,EAAE,sCAAsC,GAAG,kCAAkC,KAAK,cAAc,KAAK,wBAAwB,QAAQ,CAAC,IAAI,IAAI;yBACrJ,CAAC,CAAC;wBACH,6DAA6D;wBAC7D,MAAM;oBACR,CAAC;oBACD,eAAe,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,GAAG,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;oBAClD,MAAM;gBACR,CAAC;gBACD,KAAK,gBAAgB;oBACnB,cAAc,CAAC,IAAI,CAAC,EAAE,GAAG,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;oBAC7C,MAAM;gBACR,KAAK,UAAU;oBACb,QAAQ,CAAC,IAAI,CAAC,EAAE,GAAG,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;oBACvC,MAAM;gBACR,KAAK,cAAc;oBACjB,YAAY,CAAC,IAAI,CAAC,EAAE,GAAG,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;oBAC3C,MAAM;gBACR,KAAK,gBAAgB;oBACnB,cAAc,CAAC,IAAI,CAAC,EAAE,GAAG,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;oBAC7C,MAAM;gBACR,KAAK,MAAM;oBACT,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;oBACpC,MAAM;YACV,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,mBAAmB,GAA2C;QAClE,GAAG,eAAe,CAAC,MAAM,EAAE;KAC5B,CAAC;IAEF,OAAO;QACL,QAAQ,EAAE;YACR,mBAAmB;YACnB,cAAc;YACd,QAAQ;YACR,YAAY;YACZ,cAAc;YACd,KAAK;SACN;QACD,MAAM;QACN,QAAQ;KACT,CAAC;AACJ,CAAC"}

package/dist/restorer/plug-ins/manifest.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Load + validate a Path 1 plug-in's `jinn-plugin.json` manifest from a
+ * package root. Pure: no network, no signature verification (Path 1
+ * plug-ins inherit trust from the harness — see spec §4.3).
+ */
+import type { JinnPlugInManifest } from './types.js';
+export declare function loadPlugInManifest(packageRoot: string): Promise<JinnPlugInManifest>;

package/dist/restorer/plug-ins/manifest.js

@@ -0,0 +1,97 @@
+/**
+ * Load + validate a Path 1 plug-in's `jinn-plugin.json` manifest from a
+ * package root. Pure: no network, no signature verification (Path 1
+ * plug-ins inherit trust from the harness — see spec §4.3).
+ */
+import { readFile } from 'node:fs/promises';
+import { existsSync } from 'node:fs';
+import { join, resolve, relative, isAbsolute } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { Ajv2020 } from 'ajv/dist/2020.js';
+import * as addFormatsModule from 'ajv-formats';
+const addFormats = addFormatsModule
+    .default;
+// TODO: refactor to import from client/src/util/path-safety.ts once Stream A
+// creates that module (isInsidePackageDir mirrors isInsideWorkingDir from
+// client/src/restorer/engine/packaging.ts).
+function isInsidePackageDir(base, candidate) {
+    const b = resolve(base);
+    const c = resolve(candidate);
+    const rel = relative(b, c);
+    return rel !== '' && !rel.startsWith('..') && !isAbsolute(rel);
+}
+const SCHEMA_PATH = fileURLToPath(new URL('../../../schemas/jinn-plugin-v1.json', import.meta.url));
+let validatorPromise = null;
+let lastValidator;
+async function getValidator() {
+    if (validatorPromise)
+        return validatorPromise;
+    validatorPromise = (async () => {
+        const ajv = new Ajv2020({ allErrors: true, strict: false });
+        addFormats(ajv);
+        const schema = JSON.parse(await readFile(SCHEMA_PATH, 'utf8'));
+        const compiled = ajv.compile(schema);
+        lastValidator = compiled;
+        return compiled;
+    })();
+    return validatorPromise;
+}
+export async function loadPlugInManifest(packageRoot) {
+    const root = resolve(packageRoot);
+    const manifestPath = join(root, 'jinn-plugin.json');
+    const pkgJsonPath = join(root, 'package.json');
+    if (!existsSync(manifestPath)) {
+        throw new Error(`jinn-plugin.json not found in ${root}`);
+    }
+    if (!existsSync(pkgJsonPath)) {
+        throw new Error(`package.json not found in ${root}`);
+    }
+    const [manifestText, pkgJsonText] = await Promise.all([
+        readFile(manifestPath, 'utf8'),
+        readFile(pkgJsonPath, 'utf8'),
+    ]);
+    let manifest;
+    try {
+        manifest = JSON.parse(manifestText);
+    }
+    catch (err) {
+        throw new Error(`jinn-plugin.json is invalid JSON: ${err.message}`);
+    }
+    const validate = await getValidator();
+    if (!validate(manifest)) {
+        const errs = (lastValidator?.errors ?? [])
+            .map((e) => `${e.instancePath} ${e.message}`)
+            .join('; ');
+        throw new Error(`jinn-plugin.json failed schema validation: ${errs}`);
+    }
+    const pkgJson = JSON.parse(pkgJsonText);
+    if (pkgJson.name !== manifest.name) {
+        throw new Error(`name mismatch: package.json has "${pkgJson.name}" but jinn-plugin.json has "${manifest.name}"`);
+    }
+    if (pkgJson.version !== manifest.version) {
+        throw new Error(`version mismatch: package.json has "${pkgJson.version}" but jinn-plugin.json has "${manifest.version}"`);
+    }
+    // Resolve + verify each slot's entry path on disk.
+    for (const slot of manifest.slots) {
+        if ('entry' in slot && slot.entry) {
+            const entryAbs = join(root, slot.entry);
+            if (!isInsidePackageDir(root, entryAbs)) {
+                throw new Error(`slot entry escapes package root (path traversal): ${slot.entry} (slot type: ${slot.type})`);
+            }
+            if (!existsSync(entryAbs)) {
+                throw new Error(`slot entry not found: ${slot.entry} (slot type: ${slot.type})`);
+            }
+        }
+        if ('skillsDir' in slot && slot.skillsDir) {
+            const skillsAbs = join(root, slot.skillsDir);
+            if (!isInsidePackageDir(root, skillsAbs)) {
+                throw new Error(`slot skillsDir escapes package root (path traversal): ${slot.skillsDir}`);
+            }
+            if (!existsSync(skillsAbs)) {
+                throw new Error(`slot skillsDir not found: ${slot.skillsDir}`);
+            }
+        }
+    }
+    return manifest;
+}
+//# sourceMappingURL=manifest.js.map

package/dist/restorer/plug-ins/manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.js","sourceRoot":"","sources":["../../../src/restorer/plug-ins/manifest.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAChE,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC3C,OAAO,KAAK,gBAAgB,MAAM,aAAa,CAAC;AAEhD,MAAM,UAAU,GAAI,gBAA4D;KAC7E,OAAO,CAAC;AAIX,6EAA6E;AAC7E,0EAA0E;AAC1E,4CAA4C;AAC5C,SAAS,kBAAkB,CAAC,IAAY,EAAE,SAAiB;IACzD,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxB,MAAM,CAAC,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IAC7B,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC3B,OAAO,GAAG,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;AACjE,CAAC;AAED,MAAM,WAAW,GAAG,aAAa,CAC/B,IAAI,GAAG,CAAC,sCAAsC,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CACjE,CAAC;AAEF,IAAI,gBAAgB,GAA4C,IAAI,CAAC;AACrE,IAAI,aAEH,CAAC;AAEF,KAAK,UAAU,YAAY;IACzB,IAAI,gBAAgB;QAAE,OAAO,gBAAgB,CAAC;IAC9C,gBAAgB,GAAG,CAAC,KAAK,IAAI,EAAE;QAC7B,MAAM,GAAG,GAAG,IAAI,OAAO,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QAC5D,UAAU,CAAC,GAAG,CAAC,CAAC;QAChB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC;QAC/D,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAElC,CAAC;QACF,aAAa,GAAG,QAAQ,CAAC;QACzB,OAAO,QAAQ,CAAC;IAClB,CAAC,CAAC,EAAE,CAAC;IACL,OAAO,gBAAgB,CAAC;AAC1B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,WAAmB;IAEnB,MAAM,IAAI,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAClC,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC;IACpD,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;IAE/C,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,iCAAiC,IAAI,EAAE,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,6BAA6B,IAAI,EAAE,CAAC,CAAC;IACvD,CAAC;IAED,MAAM,CAAC,YAAY,EAAE,WAAW,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACpD,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;QAC9B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;KAC9B,CAAC,CAAC;IAEH,IAAI,QAA4B,CAAC;IACjC,IAAI,CAAC;QACH,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAuB,CAAC;IAC5D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,qCAAsC,GAAa,CAAC,OAAO,EAAE,CAC9D,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,YAAY,EAAE,CAAC;IACtC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,CAAC,aAAa,EAAE,MAAM,IAAI,EAAE,CAAC;aACvC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;aAC5C,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,8CAA8C,IAAI,EAAE,CAAC,CAAC;IACxE,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAwC,CAAC;IAC/E,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CACb,oCAAoC,OAAO,CAAC,IAAI,+BAA+B,QAAQ,CAAC,IAAI,GAAG,CAChG,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CACb,uCAAuC,OAAO,CAAC,OAAO,+BAA+B,QAAQ,CAAC,OAAO,GAAG,CACzG,CAAC;IACJ,CAAC;IAED,mDAAmD;IACnD,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;QAClC,IAAI,OAAO,IAAI,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;YACxC,IAAI,CAAC,kBAAkB,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC;gBACxC,MAAM,IAAI,KAAK,CACb,qDAAqD,IAAI,CAAC,KAAK,gBAAgB,IAAI,CAAC,IAAI,GAAG,CAC5F,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC1B,MAAM,IAAI,KAAK,CACb,yBAAyB,IAAI,CAAC,KAAK,gBAAgB,IAAI,CAAC,IAAI,GAAG,CAChE,CAAC;YACJ,CAAC;QACH,CAAC;QACD,IAAI,WAAW,IAAI,IAAI,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YAC1C,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;YAC7C,IAAI,CAAC,kBAAkB,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,CAAC;gBACzC,MAAM,IAAI,KAAK,CACb,yDAAyD,IAAI,CAAC,SAAS,EAAE,CAC1E,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC3B,MAAM,IAAI,KAAK,CAAC,6BAA6B,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;YACjE,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/restorer/plug-ins/registry.d.ts

@@ -0,0 +1,24 @@
+/**
+ * In-memory normalised view of all installed Path 1 plug-ins, keyed by
+ * slot type. Built once at daemon boot from `config.learnerPlugIns[]`
+ * via {@link loadPlugIns}; serialised to JSON and threaded into the
+ * harness via `JINN_SLOT_REGISTRY_JSON` (see `serialise.ts`).
+ */
+import type { PhaseAgentOverrideSlot, TopicExplorerSlot, McpToolSlot, SkillBundleSlot, MemoryBackendSlot, HookSlot } from './types.js';
+/** A slot as stored in the registry — original slot data plus provenance. */
+export interface RegistrySlot<S> {
+    plugInName: string;
+    plugInVersion: string;
+    /** Absolute path to the plug-in package root. */
+    packageRoot: string;
+    slot: S;
+}
+export interface SlotRegistry {
+    phaseAgentOverrides: ReadonlyArray<RegistrySlot<PhaseAgentOverrideSlot>>;
+    topicExplorers: ReadonlyArray<RegistrySlot<TopicExplorerSlot>>;
+    mcpTools: ReadonlyArray<RegistrySlot<McpToolSlot>>;
+    skillBundles: ReadonlyArray<RegistrySlot<SkillBundleSlot>>;
+    memoryBackends: ReadonlyArray<RegistrySlot<MemoryBackendSlot>>;
+    hooks: ReadonlyArray<RegistrySlot<HookSlot>>;
+}
+export declare function emptyRegistry(): SlotRegistry;

package/dist/restorer/plug-ins/registry.js

@@ -0,0 +1,17 @@
+/**
+ * In-memory normalised view of all installed Path 1 plug-ins, keyed by
+ * slot type. Built once at daemon boot from `config.learnerPlugIns[]`
+ * via {@link loadPlugIns}; serialised to JSON and threaded into the
+ * harness via `JINN_SLOT_REGISTRY_JSON` (see `serialise.ts`).
+ */
+export function emptyRegistry() {
+    return {
+        phaseAgentOverrides: [],
+        topicExplorers: [],
+        mcpTools: [],
+        skillBundles: [],
+        memoryBackends: [],
+        hooks: [],
+    };
+}
+//# sourceMappingURL=registry.js.map

package/dist/restorer/plug-ins/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../../src/restorer/plug-ins/registry.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AA6BH,MAAM,UAAU,aAAa;IAC3B,OAAO;QACL,mBAAmB,EAAE,EAAE;QACvB,cAAc,EAAE,EAAE;QAClB,QAAQ,EAAE,EAAE;QACZ,YAAY,EAAE,EAAE;QAChB,cAAc,EAAE,EAAE;QAClB,KAAK,EAAE,EAAE;KACV,CAAC;AACJ,CAAC"}

package/dist/restorer/plug-ins/serialise.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Serialise the in-memory {@link SlotRegistry} into a JSON-stable shape
+ * for the harness hand-off (`workingDir/.coordinator/slots.json`).
+ *
+ * Phase skills `Read` this file and route plug-in contributions into
+ * orient / strategize / plan / execute / debrief / improve /
+ * memory-consolidation. Shape is intentionally simple — no types, just
+ * JSON objects that markdown skills can grep/jq.
+ */
+import type { SlotRegistry } from './registry.js';
+import type { Slot, PhaseAgentOverrideSlot, TopicExplorerSlot, McpToolSlot, SkillBundleSlot, MemoryBackendSlot, HookSlot } from './types.js';
+export interface SerialisedSlot<S extends Slot> {
+    plugInName: string;
+    packageRoot: string;
+    slot: S;
+}
+export interface SerialisedRegistry {
+    /** ISO timestamp of registry construction. */
+    builtAt: string;
+    /** claude-code-learner version this registry was built against. */
+    learnerVersion: string;
+    phaseAgentOverrides: ReadonlyArray<SerialisedSlot<PhaseAgentOverrideSlot>>;
+    topicExplorers: ReadonlyArray<SerialisedSlot<TopicExplorerSlot>>;
+    mcpTools: ReadonlyArray<SerialisedSlot<McpToolSlot>>;
+    skillBundles: ReadonlyArray<SerialisedSlot<SkillBundleSlot>>;
+    memoryBackends: ReadonlyArray<SerialisedSlot<MemoryBackendSlot>>;
+    hooks: ReadonlyArray<SerialisedSlot<HookSlot>>;
+}
+export declare function serialiseRegistry(registry: SlotRegistry, learnerVersion: string): SerialisedRegistry;

package/dist/restorer/plug-ins/serialise.js

@@ -0,0 +1,29 @@
+/**
+ * Serialise the in-memory {@link SlotRegistry} into a JSON-stable shape
+ * for the harness hand-off (`workingDir/.coordinator/slots.json`).
+ *
+ * Phase skills `Read` this file and route plug-in contributions into
+ * orient / strategize / plan / execute / debrief / improve /
+ * memory-consolidation. Shape is intentionally simple — no types, just
+ * JSON objects that markdown skills can grep/jq.
+ */
+function projectSlot(r) {
+    return {
+        plugInName: r.plugInName,
+        packageRoot: r.packageRoot,
+        slot: r.slot,
+    };
+}
+export function serialiseRegistry(registry, learnerVersion) {
+    return {
+        builtAt: new Date().toISOString(),
+        learnerVersion,
+        phaseAgentOverrides: registry.phaseAgentOverrides.map(projectSlot),
+        topicExplorers: registry.topicExplorers.map(projectSlot),
+        mcpTools: registry.mcpTools.map(projectSlot),
+        skillBundles: registry.skillBundles.map(projectSlot),
+        memoryBackends: registry.memoryBackends.map(projectSlot),
+        hooks: registry.hooks.map(projectSlot),
+    };
+}
+//# sourceMappingURL=serialise.js.map

package/dist/restorer/plug-ins/serialise.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"serialise.js","sourceRoot":"","sources":["../../../src/restorer/plug-ins/serialise.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAgCH,SAAS,WAAW,CAAiB,CAAkB;IACrD,OAAO;QACL,UAAU,EAAE,CAAC,CAAC,UAAU;QACxB,WAAW,EAAE,CAAC,CAAC,WAAW;QAC1B,IAAI,EAAE,CAAC,CAAC,IAAI;KACb,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,QAAsB,EACtB,cAAsB;IAEtB,OAAO;QACL,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACjC,cAAc;QACd,mBAAmB,EAAE,QAAQ,CAAC,mBAAmB,CAAC,GAAG,CAAC,WAAW,CAAC;QAClE,cAAc,EAAE,QAAQ,CAAC,cAAc,CAAC,GAAG,CAAC,WAAW,CAAC;QACxD,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC;QAC5C,YAAY,EAAE,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC;QACpD,cAAc,EAAE,QAAQ,CAAC,cAAc,CAAC,GAAG,CAAC,WAAW,CAAC;QACxD,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC;KACvC,CAAC;AACJ,CAAC"}

package/dist/restorer/plug-ins/types.d.ts

@@ -0,0 +1,77 @@
+/**
+ * Type definitions for the Path 1 plug-in surface (`jinn-plugin.json`).
+ *
+ * Spec: spec/2026-04-30-plug-in-surface.md §4. Plan:
+ * docs/superpowers/plans/2026-04-30-plug-in-surface-path-1-mechanism.md.
+ *
+ * The shape mirrors `client/schemas/jinn-plugin-v1.json` 1:1.
+ */
+export type SlotScope = {
+    matchKinds: readonly string[];
+};
+export type PhaseAgentOverrideSlot = {
+    type: 'phase-agent-override';
+    phase: 'strategize' | 'plan' | 'execute' | 'debrief' | 'improve' | 'memory-consolidation';
+    agent: 'strategist' | 'planner' | 'step-worker' | 'analyst' | 'promoter' | 'consolidator';
+    scope?: SlotScope;
+    entry: string;
+};
+export type TopicExplorerSlot = {
+    type: 'topic-explorer';
+    phase: 'orient' | 'debrief';
+    topic: string;
+    scope?: SlotScope;
+    entry: string;
+};
+export type McpToolSlot = {
+    type: 'mcp-tool';
+    command: string;
+    args: readonly string[];
+    namespace?: string;
+};
+export type SkillBundleSlot = {
+    type: 'skill-bundle';
+    skillsDir: string;
+    scope?: SlotScope;
+};
+export type MemoryBackendSlot = {
+    type: 'memory-backend';
+    command: string;
+    args: readonly string[];
+    scope?: SlotScope;
+};
+export type HookSlot = {
+    type: 'hook';
+    event: 'session-start' | 'pre-phase' | 'post-phase' | 'session-end';
+    phase?: 'orient' | 'strategize' | 'plan' | 'execute' | 'debrief' | 'improve' | 'memory-consolidation';
+    entry: string;
+    scope?: SlotScope;
+};
+export type Slot = PhaseAgentOverrideSlot | TopicExplorerSlot | McpToolSlot | SkillBundleSlot | MemoryBackendSlot | HookSlot;
+export interface JinnPlugInManifest {
+    schemaVersion: '1.0.0';
+    name: string;
+    version: string;
+    description?: string;
+    compatibility: {
+        claudeCodeLearner: string;
+        supportedKinds?: readonly string[];
+    };
+    slots: readonly Slot[];
+    author?: {
+        name: string;
+        url?: string;
+    };
+    license?: string;
+    homepage?: string;
+}
+/**
+ * One entry in operator config (`config.learnerPlugIns[]`). Points the
+ * loader at a package root that contains a `jinn-plugin.json` manifest.
+ */
+export interface ExternalPlugInEntry {
+    /** MUST equal the manifest's `name`. */
+    name: string;
+    /** Local filesystem path to the plug-in package's root (typically a node_modules path). */
+    entry: string;
+}

package/dist/restorer/plug-ins/types.js

@@ -0,0 +1,10 @@
+/**
+ * Type definitions for the Path 1 plug-in surface (`jinn-plugin.json`).
+ *
+ * Spec: spec/2026-04-30-plug-in-surface.md §4. Plan:
+ * docs/superpowers/plans/2026-04-30-plug-in-surface-path-1-mechanism.md.
+ *
+ * The shape mirrors `client/schemas/jinn-plugin-v1.json` 1:1.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/restorer/plug-ins/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/restorer/plug-ins/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG"}

package/dist/restorer/types.d.ts

@@ -3,10 +3,12 @@
  *
  * Pure type definitions; no runtime side effects.
  */
-import type { DesiredState } from '../types/desired-state.js';
+import type { RestorationJob } from '../types/desired-state.js';
 import type { OutputArtifact, RationaleEntry, Snapshot } from '../types/portfolio.js';
+import type { TrajectoryCollector } from '../trajectory/index.js';
+import type { ScopedSigner, ScopedRpc, ScopedSecrets } from './capability/index.js';
 export interface RestorationContext {
-    intent: DesiredState;
+    intent: RestorationJob;
     /**
      * IPFS CID of this job's desired state (from Marketplace / observe).
      * Restorers' submission manifests should reference the same CID; evaluators
@@ -26,6 +28,31 @@ export interface RestorationContext {
     /** Fires at window.endTs. */
     abort: AbortSignal;
     msUntilEndTs: () => number;
+    /**
+     * In-run trajectory collector. Impls call ctx.trajectory.addSpan(...)
+     * (or use the traced wrappers) to emit spans. The engine emits the
+     * collected trajectory to IPFS before envelope assembly and populates
+     * envelope.trajectory with the resulting { cid, sha256 }.
+     */
+    trajectory: TrajectoryCollector;
+    /**
+     * Scoped signer capability. Present when the daemon is providing a
+     * signing surface to this impl per its manifest allow-list. Absent
+     * for stub-mode CLI introspection.
+     * Spec: `spec/2026-05-executor-trust-boundary.md` §3.2.
+     */
+    signer?: ScopedSigner;
+    /**
+     * Scoped read-only RPC client. Method-filtered, rate-limited, and
+     * chain-scoped per the impl's manifest.
+     * Spec: `spec/2026-05-executor-trust-boundary.md` §3.3.
+     */
+    rpc?: ScopedRpc;
+    /**
+     * Per-impl secret bag, populated by `onEnable`.
+     * Spec: `spec/2026-05-executor-trust-boundary.md` §3.4.
+     */
+    secrets?: ScopedSecrets;
 }
 export interface RestorationOutput {
     venueRef: {
@@ -38,9 +65,36 @@ export interface RestorationOutput {
     /** Shape is per spec.kind convention. */
     gating: Record<string, unknown>;
     informational?: Record<string, unknown>;
+    /**
+     * Full restoration payload for impls whose kind has a non-portfolio payload
+     * schema (e.g. prediction.v0, prediction.apy.v0).
+     *
+     * When set, engine.pack() uses this directly as the envelope payload
+     * (validated against the kind's restoration schema) instead of building the
+     * portfolio-shaped { preSnapshot, postSnapshot, fills, gating } wrapper.
+     * Portfolio impls MUST leave this undefined (engine falls back to legacy shape).
+     */
+    restorationPayload?: Record<string, unknown>;
+    /**
+     * Full verdict payload for evaluator impls (intentType === 'evaluation').
+     *
+     * When set, engine.pack() uses role='verdict' and passes this as the
+     * envelope payload directly (validated against the kind's verdict schema).
+     * Restoration impls MUST leave this undefined.
+     */
+    verdictPayload?: Record<string, unknown>;
     artifacts?: OutputArtifact[];
     rationale?: RationaleEntry[];
 }
+/**
+ * Kind/type slice for contextual impl probes (`isReady`, `enableMetadata`,
+ * `onEnable` / `onDisable` delegation on wrappers). Mirrors the `supports()`
+ * discriminant.
+ */
+export type ImplIntentPeek = {
+    kind: string;
+    type?: 'restoration' | 'evaluation';
+};
 /**
  * Context-free readiness probe. "Are this impl's external dependencies
  * satisfied right now, regardless of any specific intent?" Used by
@@ -134,7 +188,7 @@ export interface RestorerImpl {
     /**
      * Return true if this impl should handle the given (kind, type) pair.
      *
-     * `type` reflects DesiredState.type:
+     * `type` reflects RestorationJob.type:
      *   - 'restoration' (or undefined — legacy default): the impl runs a restoration attempt
      *   - 'evaluation': the impl runs as an evaluator producing a verdict
      *
@@ -145,7 +199,7 @@ export interface RestorerImpl {
         kind: string;
         type?: 'restoration' | 'evaluation';
     }): boolean;
-    canAttempt?(intent: DesiredState): Promise<{
+    canAttempt?(intent: RestorationJob): Promise<{
         ok: true;
     } | {
         ok: false;
@@ -153,17 +207,18 @@ export interface RestorerImpl {
     }>;
     run(ctx: RestorationContext): Promise<RestorationOutput>;
     /**
-     * Context-free readiness probe. Zero-dep impls can omit this (treated
-     * as `{ ready: true }`). Impls with external deps (credentials, files,
-     * exchange approvals) report current readiness plus a `nextStep` hint.
+     * Readiness probe. Zero-dep impls can omit this (treated as `{ ready: true }`).
+     * When `spec` is provided (daemon pre-claim gate, `jinn intents`), wrappers
+     * should delegate to the kind-matched specialist instead of aggregating all.
      */
-    isReady?(): Promise<ReadyStatus>;
+    isReady?(spec?: ImplIntentPeek): Promise<ReadyStatus>;
     /**
      * Describes what `onEnable` wants from the caller. Consumed by
      * `jinn intents list` so the agent can tell the operator what a
      * specific kind's enable flow needs without triggering it first.
+     * With `spec`, wrappers delegate to the specialist for that kind.
      */
-    enableMetadata?(): IntentEnableMetadata;
+    enableMetadata?(spec?: ImplIntentPeek): IntentEnableMetadata | undefined;
     /**
      * Idempotent enable-state machine. Called by `jinn intents enable <kind>`.
      *
@@ -182,7 +237,7 @@ export interface RestorerImpl {
      * Impls that omit this method cannot be enabled by the generic CLI;
      * they are either always-on (zero-dep) or require manual config.
      */
-    onEnable?(args: Record<string, string | undefined>): Promise<EnableResult>;
+    onEnable?(args: Record<string, string | undefined>, spec?: ImplIntentPeek): Promise<EnableResult>;
     /**
      * Optional inverse of `onEnable`. Invoked when the operator runs
      * `jinn intents disable <kind>`. Should NOT destroy unrecoverable
@@ -190,5 +245,5 @@ export interface RestorerImpl {
      * that for explicit `jinn intents purge` or similar (out of scope
      * for this interface).
      */
-    onDisable?(): Promise<void>;
+    onDisable?(spec?: ImplIntentPeek): Promise<void>;
 }

package/dist/restorer/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/restorer/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AA2DH,6EAA6E;AAC7E,MAAM,CAAC,MAAM,8BAA8B,GAAgB;IACzD,KAAK,EAAE,KAAK;IACZ,MAAM,EAAE,sBAAsB;IAC9B,QAAQ,EAAE;QACR,WAAW,EAAE,mDAAmD;QAChE,GAAG,EAAE,UAAU;KAChB;CACF,CAAC;AA0DF,iFAAiF;AAEjF;;;GAGG;AACH,MAAM,OAAO,cAAe,SAAQ,KAAK;IAC9B,MAAM,CAAS;IAExB,YAAY,MAAc,EAAE,OAAgB;QAC1C,KAAK,CAAC,OAAO,IAAI,MAAM,CAAC,CAAC;QACzB,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;QAC7B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;CACF"}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/restorer/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAoHH,6EAA6E;AAC7E,MAAM,CAAC,MAAM,8BAA8B,GAAgB;IACzD,KAAK,EAAE,KAAK;IACZ,MAAM,EAAE,sBAAsB;IAC9B,QAAQ,EAAE;QACR,WAAW,EAAE,mDAAmD;QAChE,GAAG,EAAE,UAAU;KAChB;CACF,CAAC;AA0DF,iFAAiF;AAEjF;;;GAGG;AACH,MAAM,OAAO,cAAe,SAAQ,KAAK;IAC9B,MAAM,CAAS;IAExB,YAAY,MAAc,EAAE,OAAgB;QAC1C,KAAK,CAAC,OAAO,IAAI,MAAM,CAAC,CAAC;QACzB,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;QAC7B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;CACF"}

package/dist/runner/claude.d.ts

@@ -1,4 +1,4 @@
-import type { DesiredState, RestorationResult } from '../types/index.js';
+import type { RestorationJob, RestorationResult } from '../types/index.js';
 import type { Runner, RunnerContext } from './runner.js';
 export interface ClaudeRunnerConfig {
     claudePath?: string;
@@ -10,6 +10,6 @@ export declare class ClaudeRunner implements Runner {
     private model?;
     private readonly mcpLauncher;
     constructor(config?: ClaudeRunnerConfig);
-    run(desiredState: DesiredState, context: RunnerContext): Promise<RestorationResult>;
+    run(restorationJob: RestorationJob, context: RunnerContext): Promise<RestorationResult>;
 }
-export declare function buildPrompt(desiredState: DesiredState): string;
+export declare function buildPrompt(restorationJob: RestorationJob): string;