@lingxiao-office/sdk 1.0.0

package/dist/core/mcp-share/McpShare.js

@@ -0,0 +1,311 @@
+/**
+ * McpShare — MCP 配置分享链接生成/解析/导入核心
+ *
+ * 契约: contract:mcp-share v1
+ *
+ * 安全模型:
+ * - 分享时脱敏 env values → env_keys, header values → header_names
+ * - 移除 origin, installed_at, updated_at
+ * - 导入后含脱敏字段 → enabled=false
+ */
+import { getInstalledMcpServers, upsertMcpServer } from '../MarketplaceService.js';
+// ── 常量 ───────────────────────────────────────────────────────────────
+const SHARE_VERSION = 1;
+const MAX_SHARE_SERVERS = 20;
+const MAX_PAYLOAD_BYTES = 32 * 1024; // 32KB base64url encoded
+const SERVER_ID_REGEX = /^[a-z][a-z0-9_]{1,79}$/;
+export const SHARE_URL_SCHEME = 'lingxiao://mcp/share';
+export const SHARE_URL_VERSION_PARAM = 'v=1';
+export class McpShareError extends Error {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+        this.name = 'McpShareError';
+    }
+}
+// ── base64url 工具 ─────────────────────────────────────────────────────
+function toBase64Url(str) {
+    const buf = Buffer.from(str, 'utf-8');
+    return buf.toString('base64url');
+}
+function fromBase64Url(b64) {
+    // base64url → base64
+    const padded = b64.replace(/-/g, '+').replace(/_/g, '/');
+    const pad = padded.length % 4 === 0 ? '' : '='.repeat(4 - (padded.length % 4));
+    return Buffer.from(padded + pad, 'base64').toString('utf-8');
+}
+// ── 脱敏逻辑 ───────────────────────────────────────────────────────────
+/**
+ * 将 McpServerConfig 脱敏为 SharedMcpServerConfig
+ * - stdio: env 的值剥离，只保留 env_keys
+ * - streamable-http: headers 的 value 剥离，只保留 header_names
+ * - 移除 origin, installed_at, updated_at
+ */
+export function sanitizeServer(server) {
+    const shared = {
+        id: server.id,
+        name: server.name,
+        enabled: server.enabled,
+        transport: server.transport,
+    };
+    if (server.title !== undefined)
+        shared.title = server.title;
+    if (server.description !== undefined)
+        shared.description = server.description;
+    if (server.registry !== undefined)
+        shared.registry = server.registry;
+    if (server.transport === 'stdio') {
+        shared.command = server.command;
+        shared.args = server.args;
+        // 脱敏: env 只保留键名
+        const envKeys = Object.keys(server.env || {});
+        if (envKeys.length > 0) {
+            shared.env_keys = envKeys;
+        }
+        if (server.cwd !== undefined)
+            shared.cwd = server.cwd ?? null;
+    }
+    else {
+        // streamable-http
+        shared.url = server.url;
+        // 脱敏: headers 只保留 name
+        const headerNames = (server.headers || []).map((h) => h.name);
+        if (headerNames.length > 0) {
+            shared.header_names = headerNames;
+        }
+    }
+    return shared;
+}
+// ── 还原逻辑 ───────────────────────────────────────────────────────────
+/**
+ * 将 SharedMcpServerConfig 还原为 McpServerConfig
+ * - 含脱敏字段（env_keys 或 header_names 非空）→ enabled=false
+ * - origin 设为空对象 {}, installed_at/updated_at 设为当前时间
+ */
+export function restoreServer(shared, idOverride) {
+    const now = Date.now();
+    const id = idOverride ?? shared.id;
+    const hasSecrets = (shared.env_keys && shared.env_keys.length > 0) ||
+        (shared.header_names && shared.header_names.length > 0);
+    const enabled = hasSecrets ? false : shared.enabled;
+    if (shared.transport === 'stdio') {
+        return {
+            id,
+            name: shared.name,
+            ...(shared.title !== undefined ? { title: shared.title } : {}),
+            ...(shared.description !== undefined ? { description: shared.description } : {}),
+            enabled,
+            transport: 'stdio',
+            command: shared.command || '',
+            args: shared.args || [],
+            env: {}, // 密钥需用户补全
+            ...(shared.cwd ? { cwd: shared.cwd } : {}),
+            ...(shared.registry ? { registry: shared.registry } : {}),
+            origin: {},
+            installed_at: now,
+            updated_at: now,
+        };
+    }
+    // streamable-http
+    return {
+        id,
+        name: shared.name,
+        ...(shared.title !== undefined ? { title: shared.title } : {}),
+        ...(shared.description !== undefined ? { description: shared.description } : {}),
+        enabled,
+        transport: 'streamable-http',
+        url: shared.url || '',
+        headers: [], // 密钥需用户补全
+        ...(shared.registry ? { registry: shared.registry } : {}),
+        origin: {},
+        installed_at: now,
+        updated_at: now,
+    };
+}
+// ── 分享链接生成 ───────────────────────────────────────────────────────
+/**
+ * 生成分享链接
+ * @param serverIds 要分享的 server ID 列表
+ * @param name 分享名称
+ * @param description 分享描述
+ * @returns share_token + share_url + payload
+ */
+export function generateShareLink(serverIds, name, description) {
+    // 验证 server_ids
+    if (!Array.isArray(serverIds) || serverIds.length === 0) {
+        throw new McpShareError('no_servers_selected', 'At least one server_id is required.');
+    }
+    if (serverIds.length > MAX_SHARE_SERVERS) {
+        throw new McpShareError('too_many_servers', `Maximum ${MAX_SHARE_SERVERS} servers per share.`);
+    }
+    // 获取已安装的 servers
+    const installed = getInstalledMcpServers();
+    const installedMap = new Map(installed.map((s) => [s.id, s]));
+    const sharedServers = [];
+    for (const id of serverIds) {
+        const server = installedMap.get(id);
+        if (!server) {
+            throw new McpShareError('server_not_found', `Server not found: ${id}`);
+        }
+        sharedServers.push(sanitizeServer(server));
+    }
+    const payload = {
+        v: SHARE_VERSION,
+        ...(name !== undefined ? { name } : {}),
+        ...(description !== undefined ? { description } : {}),
+        created_at: Date.now(),
+        servers: sharedServers,
+    };
+    const payloadJson = JSON.stringify(payload);
+    const shareToken = toBase64Url(payloadJson);
+    const shareUrl = `${SHARE_URL_SCHEME}?${SHARE_URL_VERSION_PARAM}&d=${shareToken}`;
+    if (shareUrl.length > MAX_PAYLOAD_BYTES) {
+        throw new McpShareError('payload_too_large', `Share payload exceeds ${MAX_PAYLOAD_BYTES} bytes after encoding.`);
+    }
+    return { share_token: shareToken, share_url: shareUrl, payload };
+}
+// ── 分享链接解析 ───────────────────────────────────────────────────────
+/**
+ * 解析分享 token，返回 McpSharePayload
+ * @param shareToken base64url 编码的 McpSharePayload
+ */
+export function parseShareToken(shareToken) {
+    let payloadJson;
+    try {
+        payloadJson = fromBase64Url(shareToken);
+    }
+    catch {
+        throw new McpShareError('share_token_invalid', 'Invalid share token format.');
+    }
+    let payload;
+    try {
+        payload = JSON.parse(payloadJson);
+    }
+    catch {
+        throw new McpShareError('share_token_invalid', 'Invalid share token format.');
+    }
+    if (!payload || typeof payload !== 'object') {
+        throw new McpShareError('share_token_invalid', 'Invalid share token format.');
+    }
+    const obj = payload;
+    if (obj.v !== SHARE_VERSION) {
+        throw new McpShareError('share_version_unsupported', `Unsupported share version: ${obj.v}.`);
+    }
+    if (!Array.isArray(obj.servers)) {
+        throw new McpShareError('share_token_invalid', 'Invalid share token format.');
+    }
+    return payload;
+}
+// ── 导入逻辑 ───────────────────────────────────────────────────────────
+/**
+ * 验证 server_id_map 中的新 ID 是否合法
+ */
+function validateServerIdMap(serverIdMap) {
+    if (!serverIdMap)
+        return;
+    for (const [originalId, newId] of Object.entries(serverIdMap)) {
+        if (!SERVER_ID_REGEX.test(newId)) {
+            throw new McpShareError('invalid_server_id_map', `Invalid server ID in map: ${newId}.`);
+        }
+        // originalId 不需要校验格式（它来自 payload）
+        void originalId;
+    }
+}
+/**
+ * 冲突处理：根据策略决定最终 ID
+ * @returns 最终 ID 或 null（表示跳过）
+ */
+function resolveConflict(desiredId, existingIds, strategy) {
+    if (!existingIds.has(desiredId)) {
+        return { id: desiredId, action: 'import', originalId: desiredId };
+    }
+    switch (strategy) {
+        case 'skip':
+            return { id: desiredId, action: 'skip', originalId: desiredId };
+        case 'overwrite':
+            return { id: desiredId, action: 'overwrite', originalId: desiredId };
+        case 'rename': {
+            let suffix = 2;
+            let newId = `${desiredId}_${suffix}`;
+            while (existingIds.has(newId)) {
+                suffix++;
+                newId = `${desiredId}_${suffix}`;
+            }
+            return { id: newId, action: 'rename', originalId: desiredId };
+        }
+        default:
+            return { id: desiredId, action: 'skip', originalId: desiredId };
+    }
+}
+/**
+ * 核心导入逻辑（可被 McpBundle 复用）
+ * @param servers 脱敏后的 server 列表
+ * @param serverIdMap ID 重命名映射
+ * @param conflictStrategy 冲突策略
+ */
+export function validateImportInput(servers, serverIdMap, conflictStrategy = 'skip') {
+    validateServerIdMap(serverIdMap);
+    const installed = getInstalledMcpServers();
+    const existingIds = new Set(installed.map((s) => s.id));
+    const result = {
+        imported: [],
+        skipped: [],
+        overwritten: [],
+        renamed: [],
+        requires_secrets: [],
+    };
+    for (const shared of servers) {
+        // 应用 server_id_map
+        const desiredId = serverIdMap?.[shared.id] ?? shared.id;
+        // 冲突处理
+        const conflict = resolveConflict(desiredId, existingIds, conflictStrategy);
+        if (conflict.action === 'skip') {
+            result.skipped.push(shared.id);
+            continue;
+        }
+        // 还原为 McpServerConfig
+        const serverConfig = restoreServer(shared, conflict.id);
+        const hasSecrets = (shared.env_keys && shared.env_keys.length > 0) ||
+            (shared.header_names && shared.header_names.length > 0);
+        try {
+            upsertMcpServer(serverConfig);
+        }
+        catch (err) {
+            throw new McpShareError('mcp_server_save_failed', err instanceof Error ? err.message : String(err));
+        }
+        // 更新已存在 ID 集合（防止后续 server 冲突）
+        existingIds.add(conflict.id);
+        result.imported.push(serverConfig);
+        if (conflict.action === 'overwrite') {
+            result.overwritten.push(shared.id);
+        }
+        else if (conflict.action === 'rename') {
+            result.renamed.push(`${shared.id}->${conflict.id}`);
+        }
+        if (hasSecrets) {
+            result.requires_secrets.push(conflict.id);
+        }
+    }
+    return result;
+}
+/**
+ * 从分享 payload 导入 servers
+ * @param payload 解析后的 McpSharePayload
+ * @param serverIdMap ID 重命名映射
+ * @param conflictStrategy 冲突策略
+ */
+export function importFromPayload(payload, serverIdMap, conflictStrategy = 'skip') {
+    return validateImportInput(payload.servers, serverIdMap, conflictStrategy);
+}
+/**
+ * 从分享 token 导入
+ * @param shareToken base64url 编码的分享 token
+ * @param serverIdMap ID 重命名映射
+ * @param conflictStrategy 冲突策略
+ */
+export function importFromShareToken(shareToken, serverIdMap, conflictStrategy = 'skip') {
+    const payload = parseShareToken(shareToken);
+    return importFromPayload(payload, serverIdMap, conflictStrategy);
+}
+//# sourceMappingURL=McpShare.js.map

package/dist/core/mcp-share/McpShare.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"McpShare.js","sourceRoot":"","sources":["../../../src/core/mcp-share/McpShare.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,EAAE,sBAAsB,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAEnF,wEAAwE;AAExE,MAAM,aAAa,GAAG,CAAU,CAAC;AACjC,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAC7B,MAAM,iBAAiB,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,yBAAyB;AAC9D,MAAM,eAAe,GAAG,wBAAwB,CAAC;AAEjD,MAAM,CAAC,MAAM,gBAAgB,GAAG,sBAAsB,CAAC;AACvD,MAAM,CAAC,MAAM,uBAAuB,GAAG,KAAK,CAAC;AAyE7C,MAAM,OAAO,aAAc,SAAQ,KAAK;IAE7B;IADT,YACS,IAAuB,EAC9B,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;QAHR,SAAI,GAAJ,IAAI,CAAmB;QAI9B,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;IAC9B,CAAC;CACF;AAED,wEAAwE;AAExE,SAAS,WAAW,CAAC,GAAW;IAC9B,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACtC,OAAO,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AACnC,CAAC;AAED,SAAS,aAAa,CAAC,GAAW;IAChC,qBAAqB;IACrB,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACzD,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;IAC/E,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,GAAG,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;AAC/D,CAAC;AAED,sEAAsE;AAEtE;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,MAAuB;IACpD,MAAM,MAAM,GAA0B;QACpC,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,SAAS,EAAE,MAAM,CAAC,SAAS;KAC5B,CAAC;IAEF,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS;QAAE,MAAM,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;IAC5D,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS;QAAE,MAAM,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;IAC9E,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS;QAAE,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;IAErE,IAAI,MAAM,CAAC,SAAS,KAAK,OAAO,EAAE,CAAC;QACjC,MAAM,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;QAChC,MAAM,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;QAC1B,gBAAgB;QAChB,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;QAC9C,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,CAAC,QAAQ,GAAG,OAAO,CAAC;QAC5B,CAAC;QACD,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS;YAAE,MAAM,CAAC,GAAG,GAAG,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC;IAChE,CAAC;SAAM,CAAC;QACN,kBAAkB;QAClB,MAAM,CAAC,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC;QACxB,uBAAuB;QACvB,MAAM,WAAW,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC9D,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3B,MAAM,CAAC,YAAY,GAAG,WAAW,CAAC;QACpC,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,sEAAsE;AAEtE;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAC3B,MAA6B,EAC7B,UAAmB;IAEnB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,EAAE,GAAG,UAAU,IAAI,MAAM,CAAC,EAAE,CAAC;IAEnC,MAAM,UAAU,GACd,CAAC,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;QAC/C,CAAC,MAAM,CAAC,YAAY,IAAI,MAAM,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAE1D,MAAM,OAAO,GAAG,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;IAEpD,IAAI,MAAM,CAAC,SAAS,KAAK,OAAO,EAAE,CAAC;QACjC,OAAO;YACL,EAAE;YACF,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9D,GAAG,CAAC,MAAM,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChF,OAAO;YACP,SAAS,EAAE,OAAO;YAClB,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,EAAE;YAC7B,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,EAAE;YACvB,GAAG,EAAE,EAAE,EAAE,UAAU;YACnB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1C,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzD,MAAM,EAAE,EAAE;YACV,YAAY,EAAE,GAAG;YACjB,UAAU,EAAE,GAAG;SAChB,CAAC;IACJ,CAAC;IAED,kBAAkB;IAClB,OAAO;QACL,EAAE;QACF,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,GAAG,CAAC,MAAM,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChF,OAAO;QACP,SAAS,EAAE,iBAAiB;QAC5B,GAAG,EAAE,MAAM,CAAC,GAAG,IAAI,EAAE;QACrB,OAAO,EAAE,EAAE,EAAE,UAAU;QACvB,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzD,MAAM,EAAE,EAAE;QACV,YAAY,EAAE,GAAG;QACjB,UAAU,EAAE,GAAG;KAChB,CAAC;AACJ,CAAC;AAED,oEAAoE;AAEpE;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAC/B,SAAmB,EACnB,IAAa,EACb,WAAoB;IAEpB,gBAAgB;IAChB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,aAAa,CAAC,qBAAqB,EAAE,qCAAqC,CAAC,CAAC;IACxF,CAAC;IAED,IAAI,SAAS,CAAC,MAAM,GAAG,iBAAiB,EAAE,CAAC;QACzC,MAAM,IAAI,aAAa,CACrB,kBAAkB,EAClB,WAAW,iBAAiB,qBAAqB,CAClD,CAAC;IACJ,CAAC;IAED,iBAAiB;IACjB,MAAM,SAAS,GAAG,sBAAsB,EAAE,CAAC;IAC3C,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAE9D,MAAM,aAAa,GAA4B,EAAE,CAAC;IAClD,KAAK,MAAM,EAAE,IAAI,SAAS,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACpC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,aAAa,CAAC,kBAAkB,EAAE,qBAAqB,EAAE,EAAE,CAAC,CAAC;QACzE,CAAC;QACD,aAAa,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC;IAC7C,CAAC;IAED,MAAM,OAAO,GAAoB;QAC/B,CAAC,EAAE,aAAa;QAChB,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvC,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE;QACtB,OAAO,EAAE,aAAa;KACvB,CAAC;IAEF,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IAC5C,MAAM,UAAU,GAAG,WAAW,CAAC,WAAW,CAAC,CAAC;IAC5C,MAAM,QAAQ,GAAG,GAAG,gBAAgB,IAAI,uBAAuB,MAAM,UAAU,EAAE,CAAC;IAElF,IAAI,QAAQ,CAAC,MAAM,GAAG,iBAAiB,EAAE,CAAC;QACxC,MAAM,IAAI,aAAa,CACrB,mBAAmB,EACnB,yBAAyB,iBAAiB,wBAAwB,CACnE,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;AACnE,CAAC;AAED,oEAAoE;AAEpE;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,UAAkB;IAChD,IAAI,WAAmB,CAAC;IACxB,IAAI,CAAC;QACH,WAAW,GAAG,aAAa,CAAC,UAAU,CAAC,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,aAAa,CAAC,qBAAqB,EAAE,6BAA6B,CAAC,CAAC;IAChF,CAAC;IAED,IAAI,OAAgB,CAAC;IACrB,IAAI,CAAC;QACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,aAAa,CAAC,qBAAqB,EAAE,6BAA6B,CAAC,CAAC;IAChF,CAAC;IAED,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC5C,MAAM,IAAI,aAAa,CAAC,qBAAqB,EAAE,6BAA6B,CAAC,CAAC;IAChF,CAAC;IAED,MAAM,GAAG,GAAG,OAAkC,CAAC;IAC/C,IAAI,GAAG,CAAC,CAAC,KAAK,aAAa,EAAE,CAAC;QAC5B,MAAM,IAAI,aAAa,CACrB,2BAA2B,EAC3B,8BAA8B,GAAG,CAAC,CAAC,GAAG,CACvC,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,aAAa,CAAC,qBAAqB,EAAE,6BAA6B,CAAC,CAAC;IAChF,CAAC;IAED,OAAO,OAA0B,CAAC;AACpC,CAAC;AAED,sEAAsE;AAEtE;;GAEG;AACH,SAAS,mBAAmB,CAC1B,WAA+C;IAE/C,IAAI,CAAC,WAAW;QAAE,OAAO;IACzB,KAAK,MAAM,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;QAC9D,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,aAAa,CACrB,uBAAuB,EACvB,6BAA6B,KAAK,GAAG,CACtC,CAAC;QACJ,CAAC;QACD,kCAAkC;QAClC,KAAK,UAAU,CAAC;IAClB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,eAAe,CACtB,SAAiB,EACjB,WAAwB,EACxB,QAA0B;IAE1B,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;QAChC,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;IACpE,CAAC;IAED,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,MAAM;YACT,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;QAElE,KAAK,WAAW;YACd,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;QAEvE,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,IAAI,MAAM,GAAG,CAAC,CAAC;YACf,IAAI,KAAK,GAAG,GAAG,SAAS,IAAI,MAAM,EAAE,CAAC;YACrC,OAAO,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC9B,MAAM,EAAE,CAAC;gBACT,KAAK,GAAG,GAAG,SAAS,IAAI,MAAM,EAAE,CAAC;YACnC,CAAC;YACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;QAChE,CAAC;QAED;YACE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;IACpE,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CACjC,OAAgC,EAChC,WAAoC,EACpC,mBAAqC,MAAM;IAE3C,mBAAmB,CAAC,WAAW,CAAC,CAAC;IAEjC,MAAM,SAAS,GAAG,sBAAsB,EAAE,CAAC;IAC3C,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAExD,MAAM,MAAM,GAAiB;QAC3B,QAAQ,EAAE,EAAE;QACZ,OAAO,EAAE,EAAE;QACX,WAAW,EAAE,EAAE;QACf,OAAO,EAAE,EAAE;QACX,gBAAgB,EAAE,EAAE;KACrB,CAAC;IAEF,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,mBAAmB;QACnB,MAAM,SAAS,GAAG,WAAW,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,MAAM,CAAC,EAAE,CAAC;QAExD,OAAO;QACP,MAAM,QAAQ,GAAG,eAAe,CAAC,SAAS,EAAE,WAAW,EAAE,gBAAgB,CAAC,CAAC;QAE3E,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC/B,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC/B,SAAS;QACX,CAAC;QAED,sBAAsB;QACtB,MAAM,YAAY,GAAG,aAAa,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;QACxD,MAAM,UAAU,GACd,CAAC,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;YAC/C,CAAC,MAAM,CAAC,YAAY,IAAI,MAAM,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAE1D,IAAI,CAAC;YACH,eAAe,CAAC,YAAY,CAAC,CAAC;QAChC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,aAAa,CACrB,wBAAwB,EACxB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CACjD,CAAC;QACJ,CAAC;QAED,8BAA8B;QAC9B,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAE7B,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAEnC,IAAI,QAAQ,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YACpC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACrC,CAAC;aAAM,IAAI,QAAQ,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YACxC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,EAAE,KAAK,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC;QACtD,CAAC;QAED,IAAI,UAAU,EAAE,CAAC;YACf,MAAM,CAAC,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAC/B,OAAwB,EACxB,WAAoC,EACpC,mBAAqC,MAAM;IAE3C,OAAO,mBAAmB,CAAC,OAAO,CAAC,OAAO,EAAE,WAAW,EAAE,gBAAgB,CAAC,CAAC;AAC7E,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAClC,UAAkB,EAClB,WAAoC,EACpC,mBAAqC,MAAM;IAE3C,MAAM,OAAO,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC;IAC5C,OAAO,iBAAiB,CAAC,OAAO,EAAE,WAAW,EAAE,gBAAgB,CAAC,CAAC;AACnE,CAAC"}

package/dist/core/plugins/PluginManifest.d.ts

@@ -0,0 +1,128 @@
+import { z } from 'zod';
+type JsonValue = null | boolean | number | string | JsonValue[] | {
+    [key: string]: JsonValue;
+};
+export declare const PluginMcpServerSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    id: z.ZodOptional<z.ZodString>;
+    name: z.ZodString;
+    title: z.ZodOptional<z.ZodString>;
+    description: z.ZodOptional<z.ZodString>;
+    enabled: z.ZodDefault<z.ZodBoolean>;
+    transport: z.ZodLiteral<"streamable-http">;
+    url: z.ZodString;
+    headers: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        value: z.ZodString;
+    }, z.core.$strip>>>;
+}, z.core.$strict>, z.ZodObject<{
+    id: z.ZodOptional<z.ZodString>;
+    name: z.ZodString;
+    title: z.ZodOptional<z.ZodString>;
+    description: z.ZodOptional<z.ZodString>;
+    enabled: z.ZodDefault<z.ZodBoolean>;
+    transport: z.ZodLiteral<"stdio">;
+    command: z.ZodString;
+    args: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    env: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+    cwd: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>], "transport">;
+export declare const PluginManifestSchema: z.ZodObject<{
+    id: z.ZodOptional<z.ZodString>;
+    name: z.ZodString;
+    version: z.ZodDefault<z.ZodString>;
+    description: z.ZodDefault<z.ZodString>;
+    author: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
+        name: z.ZodOptional<z.ZodString>;
+        email: z.ZodOptional<z.ZodString>;
+        url: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>]>>;
+    homepage: z.ZodOptional<z.ZodString>;
+    repository: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
+        type: z.ZodOptional<z.ZodString>;
+        url: z.ZodOptional<z.ZodString>;
+        directory: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>]>>;
+    license: z.ZodOptional<z.ZodString>;
+    keywords: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    interface: z.ZodDefault<z.ZodObject<{
+        displayName: z.ZodOptional<z.ZodString>;
+        shortDescription: z.ZodOptional<z.ZodString>;
+        longDescription: z.ZodOptional<z.ZodString>;
+        icon: z.ZodOptional<z.ZodString>;
+        composerIcon: z.ZodOptional<z.ZodString>;
+        logo: z.ZodOptional<z.ZodString>;
+        category: z.ZodOptional<z.ZodString>;
+        developerName: z.ZodOptional<z.ZodString>;
+        websiteURL: z.ZodOptional<z.ZodString>;
+        privacyPolicyURL: z.ZodOptional<z.ZodString>;
+        termsOfServiceURL: z.ZodOptional<z.ZodString>;
+        defaultPrompt: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
+        capabilities: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        brandColor: z.ZodOptional<z.ZodString>;
+        screenshots: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    }, z.core.$strict>>;
+    skills: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
+    mcp: z.ZodOptional<z.ZodString>;
+    mcpServers: z.ZodDefault<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        id: z.ZodOptional<z.ZodString>;
+        name: z.ZodString;
+        title: z.ZodOptional<z.ZodString>;
+        description: z.ZodOptional<z.ZodString>;
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        transport: z.ZodLiteral<"streamable-http">;
+        url: z.ZodString;
+        headers: z.ZodDefault<z.ZodArray<z.ZodObject<{
+            name: z.ZodString;
+            value: z.ZodString;
+        }, z.core.$strip>>>;
+    }, z.core.$strict>, z.ZodObject<{
+        id: z.ZodOptional<z.ZodString>;
+        name: z.ZodString;
+        title: z.ZodOptional<z.ZodString>;
+        description: z.ZodOptional<z.ZodString>;
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        transport: z.ZodLiteral<"stdio">;
+        command: z.ZodString;
+        args: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        env: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+        cwd: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>], "transport">>>;
+    apps: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
+    assets: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
+    capabilities: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    tools: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        description: z.ZodOptional<z.ZodString>;
+        kind: z.ZodOptional<z.ZodString>;
+        path: z.ZodOptional<z.ZodString>;
+        capabilities: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        metadata: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodType<JsonValue, unknown, z.core.$ZodTypeInternals<JsonValue, unknown>>>>;
+    }, z.core.$strict>>>;
+    hooks: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        event: z.ZodOptional<z.ZodString>;
+        description: z.ZodOptional<z.ZodString>;
+        path: z.ZodOptional<z.ZodString>;
+        capabilities: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        metadata: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodType<JsonValue, unknown, z.core.$ZodTypeInternals<JsonValue, unknown>>>>;
+    }, z.core.$strict>>>;
+    scripts: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
+        description: z.ZodOptional<z.ZodString>;
+        command: z.ZodOptional<z.ZodString>;
+        args: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        cwd: z.ZodOptional<z.ZodString>;
+        metadata: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodType<JsonValue, unknown, z.core.$ZodTypeInternals<JsonValue, unknown>>>>;
+    }, z.core.$strict>]>>>;
+}, z.core.$strict>;
+export type PluginManifest = z.infer<typeof PluginManifestSchema>;
+export type PluginMcpServerManifest = z.infer<typeof PluginMcpServerSchema>;
+export interface LoadedPluginManifest {
+    manifest: PluginManifest;
+    manifestPath: string;
+    pluginRoot: string;
+}
+export declare function findPluginManifestPath(pluginRoot: string): string | null;
+export declare function loadPluginManifest(pluginRoot: string): LoadedPluginManifest | null;
+export declare function validatePluginManifest(value: unknown): PluginManifest;
+export {};
+//# sourceMappingURL=PluginManifest.d.ts.map

package/dist/core/plugins/PluginManifest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PluginManifest.d.ts","sourceRoot":"","sources":["../../../src/core/plugins/PluginManifest.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAsDxB,KAAK,SAAS,GAAG,IAAI,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,SAAS,EAAE,GAAG;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,CAAC;AA0C/F,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;iCAuBhC,CAAC;AAEH,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAoBtB,CAAC;AAEZ,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAClE,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAE5E,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,cAAc,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;CACpB;AASD,wBAAgB,sBAAsB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAKxE;AAED,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,MAAM,GAAG,oBAAoB,GAAG,IAAI,CAclF;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,OAAO,GAAG,cAAc,CAMrE"}

package/dist/core/plugins/PluginManifest.js

@@ -0,0 +1,166 @@
+import { existsSync, readFileSync } from 'fs';
+import { join, resolve } from 'path';
+import { z } from 'zod';
+const PluginIdSchema = z.string()
+    .min(1)
+    .max(80)
+    .regex(/^[a-z][a-z0-9_-]*$/, 'plugin id must start with a lowercase letter and contain only a-z, 0-9, _ or -');
+const RelativePathSchema = z.string()
+    .min(1)
+    .max(500)
+    .refine((value) => !value.startsWith('/') && !value.includes('\0'), 'path must be relative')
+    .refine((value) => !value.split(/[\\/]+/).includes('..'), 'path must stay inside the plugin directory');
+const AuthorSchema = z.union([
+    z.string().max(200),
+    z.object({
+        name: z.string().max(200).optional(),
+        email: z.string().max(200).optional(),
+        url: z.string().max(500).optional(),
+    }).strict(),
+]).optional();
+const RepositorySchema = z.union([
+    z.string().max(500),
+    z.object({
+        type: z.string().max(80).optional(),
+        url: z.string().max(500).optional(),
+        directory: RelativePathSchema.optional(),
+    }).strict(),
+]).optional();
+const InterfaceSchema = z.object({
+    displayName: z.string().max(120).optional(),
+    shortDescription: z.string().max(300).optional(),
+    longDescription: z.string().max(2000).optional(),
+    icon: RelativePathSchema.optional(),
+    composerIcon: RelativePathSchema.optional(),
+    logo: RelativePathSchema.optional(),
+    category: z.string().max(80).optional(),
+    developerName: z.string().max(120).optional(),
+    websiteURL: z.string().max(500).optional(),
+    privacyPolicyURL: z.string().max(500).optional(),
+    termsOfServiceURL: z.string().max(500).optional(),
+    defaultPrompt: z.union([z.string().max(1000), z.array(z.string().max(1000))]).optional(),
+    capabilities: z.array(z.string().max(80)).default([]),
+    brandColor: z.string().max(40).optional(),
+    screenshots: z.array(RelativePathSchema).default([]),
+}).strict().default({ capabilities: [], screenshots: [] });
+const McpHeaderSchema = z.object({
+    name: z.string().min(1).max(200),
+    value: z.string().max(4000),
+});
+const JsonValueSchema = z.lazy(() => z.union([
+    z.null(),
+    z.boolean(),
+    z.number(),
+    z.string().max(4000),
+    z.array(JsonValueSchema),
+    z.record(z.string().max(120), JsonValueSchema),
+]));
+const MetadataRecordSchema = z.record(z.string().max(120), JsonValueSchema).default({});
+const PluginToolDeclarationSchema = z.object({
+    name: z.string().min(1).max(120),
+    description: z.string().max(1000).optional(),
+    kind: z.string().max(80).optional(),
+    path: RelativePathSchema.optional(),
+    capabilities: z.array(z.string().max(80)).default([]),
+    metadata: MetadataRecordSchema,
+}).strict();
+const PluginHookDeclarationSchema = z.object({
+    name: z.string().min(1).max(120),
+    event: z.string().max(120).optional(),
+    description: z.string().max(1000).optional(),
+    path: RelativePathSchema.optional(),
+    capabilities: z.array(z.string().max(80)).default([]),
+    metadata: MetadataRecordSchema,
+}).strict();
+const PluginScriptDeclarationSchema = z.union([
+    z.string().max(2000),
+    z.object({
+        description: z.string().max(1000).optional(),
+        command: z.string().max(2000).optional(),
+        args: z.array(z.string().max(500)).default([]),
+        cwd: RelativePathSchema.optional(),
+        metadata: MetadataRecordSchema,
+    }).strict(),
+]);
+export const PluginMcpServerSchema = z.discriminatedUnion('transport', [
+    z.object({
+        id: z.string().regex(/^[a-z][a-z0-9_]{1,79}$/).optional(),
+        name: z.string().min(1).max(200),
+        title: z.string().max(200).optional(),
+        description: z.string().max(1000).optional(),
+        enabled: z.boolean().default(true),
+        transport: z.literal('streamable-http'),
+        url: z.string().url(),
+        headers: z.array(McpHeaderSchema).default([]),
+    }).strict(),
+    z.object({
+        id: z.string().regex(/^[a-z][a-z0-9_]{1,79}$/).optional(),
+        name: z.string().min(1).max(200),
+        title: z.string().max(200).optional(),
+        description: z.string().max(1000).optional(),
+        enabled: z.boolean().default(true),
+        transport: z.literal('stdio'),
+        command: z.string().min(1).max(2000),
+        args: z.array(z.string()).default([]),
+        env: z.record(z.string(), z.string()).default({}),
+        cwd: RelativePathSchema.optional(),
+    }).strict(),
+]);
+export const PluginManifestSchema = z.object({
+    id: PluginIdSchema.optional(),
+    name: PluginIdSchema,
+    version: z.string().min(1).max(100).default('0.0.0'),
+    description: z.string().max(2000).default(''),
+    author: AuthorSchema,
+    homepage: z.string().max(500).optional(),
+    repository: RepositorySchema,
+    license: z.string().max(80).optional(),
+    keywords: z.array(z.string().max(80)).default([]),
+    interface: InterfaceSchema,
+    skills: z.union([RelativePathSchema, z.array(RelativePathSchema)]).optional(),
+    mcp: RelativePathSchema.optional(),
+    mcpServers: z.array(PluginMcpServerSchema).default([]),
+    apps: z.union([RelativePathSchema, z.array(RelativePathSchema)]).optional(),
+    assets: z.union([RelativePathSchema, z.array(RelativePathSchema)]).optional(),
+    capabilities: z.array(z.string().max(80)).default([]),
+    tools: z.array(PluginToolDeclarationSchema).default([]),
+    hooks: z.array(PluginHookDeclarationSchema).default([]),
+    scripts: z.record(z.string().max(120), PluginScriptDeclarationSchema).default({}),
+}).strict();
+function candidateManifestPaths(pluginRoot) {
+    return [
+        join(pluginRoot, '.lingxiao-plugin', 'plugin.json'),
+        join(pluginRoot, '.codex-plugin', 'plugin.json'),
+    ];
+}
+export function findPluginManifestPath(pluginRoot) {
+    for (const candidate of candidateManifestPaths(pluginRoot)) {
+        if (existsSync(candidate))
+            return candidate;
+    }
+    return null;
+}
+export function loadPluginManifest(pluginRoot) {
+    const resolvedRoot = resolve(pluginRoot);
+    const manifestPath = findPluginManifestPath(resolvedRoot);
+    if (!manifestPath)
+        return null;
+    const raw = JSON.parse(readFileSync(manifestPath, 'utf-8'));
+    const parsed = PluginManifestSchema.parse(raw);
+    return {
+        manifest: {
+            ...parsed,
+            id: parsed.id || parsed.name,
+        },
+        manifestPath,
+        pluginRoot: resolvedRoot,
+    };
+}
+export function validatePluginManifest(value) {
+    const parsed = PluginManifestSchema.parse(value);
+    return {
+        ...parsed,
+        id: parsed.id || parsed.name,
+    };
+}
+//# sourceMappingURL=PluginManifest.js.map

package/dist/core/plugins/PluginManifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PluginManifest.js","sourceRoot":"","sources":["../../../src/core/plugins/PluginManifest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AAC9C,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AACrC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,EAAE;KAC9B,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,EAAE,CAAC;KACP,KAAK,CAAC,oBAAoB,EAAE,gFAAgF,CAAC,CAAC;AAEjH,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,EAAE;KAClC,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,GAAG,CAAC;KACR,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,uBAAuB,CAAC;KAC3F,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,4CAA4C,CAAC,CAAC;AAE1G,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC;IAC3B,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC;IACnB,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;QACpC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;QACrC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;KACpC,CAAC,CAAC,MAAM,EAAE;CACZ,CAAC,CAAC,QAAQ,EAAE,CAAC;AAEd,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC;IAC/B,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC;IACnB,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;QACnC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;QACnC,SAAS,EAAE,kBAAkB,CAAC,QAAQ,EAAE;KACzC,CAAC,CAAC,MAAM,EAAE;CACZ,CAAC,CAAC,QAAQ,EAAE,CAAC;AAEd,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAC3C,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAChD,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;IAChD,IAAI,EAAE,kBAAkB,CAAC,QAAQ,EAAE;IACnC,YAAY,EAAE,kBAAkB,CAAC,QAAQ,EAAE;IAC3C,IAAI,EAAE,kBAAkB,CAAC,QAAQ,EAAE;IACnC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IACvC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAC7C,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAC1C,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAChD,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IACjD,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACxF,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACrD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IACzC,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CACrD,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC;AAE3D,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAChC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC;CAC5B,CAAC,CAAC;AAIH,MAAM,eAAe,GAAyB,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;IACjE,CAAC,CAAC,IAAI,EAAE;IACR,CAAC,CAAC,OAAO,EAAE;IACX,CAAC,CAAC,MAAM,EAAE;IACV,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC;IACpB,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC;IACxB,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,eAAe,CAAC;CAC/C,CAAC,CAAC,CAAC;AAEJ,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,eAAe,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;AAExF,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAChC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;IAC5C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IACnC,IAAI,EAAE,kBAAkB,CAAC,QAAQ,EAAE;IACnC,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACrD,QAAQ,EAAE,oBAAoB;CAC/B,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAChC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IACrC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;IAC5C,IAAI,EAAE,kBAAkB,CAAC,QAAQ,EAAE;IACnC,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACrD,QAAQ,EAAE,oBAAoB;CAC/B,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,6BAA6B,GAAG,CAAC,CAAC,KAAK,CAAC;IAC5C,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC;IACpB,CAAC,CAAC,MAAM,CAAC;QACP,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;QAC5C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;QACxC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9C,GAAG,EAAE,kBAAkB,CAAC,QAAQ,EAAE;QAClC,QAAQ,EAAE,oBAAoB;KAC/B,CAAC,CAAC,MAAM,EAAE;CACZ,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,kBAAkB,CAAC,WAAW,EAAE;IACrE,CAAC,CAAC,MAAM,CAAC;QACP,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC,QAAQ,EAAE;QACzD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;QAChC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;QACrC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;QAC5C,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;QAClC,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC;QACvC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;QACrB,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;KAC9C,CAAC,CAAC,MAAM,EAAE;IACX,CAAC,CAAC,MAAM,CAAC;QACP,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC,QAAQ,EAAE;QACzD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;QAChC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;QACrC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;QAC5C,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;QAClC,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;QAC7B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;QACpC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;QACrC,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;QACjD,GAAG,EAAE,kBAAkB,CAAC,QAAQ,EAAE;KACnC,CAAC,CAAC,MAAM,EAAE;CACZ,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,EAAE,EAAE,cAAc,CAAC,QAAQ,EAAE;IAC7B,IAAI,EAAE,cAAc;IACpB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IACpD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC7C,MAAM,EAAE,YAAY;IACpB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IACxC,UAAU,EAAE,gBAAgB;IAC5B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IACtC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACjD,SAAS,EAAE,eAAe;IAC1B,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,kBAAkB,EAAE,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC7E,GAAG,EAAE,kBAAkB,CAAC,QAAQ,EAAE;IAClC,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACtD,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,kBAAkB,EAAE,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC3E,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,kBAAkB,EAAE,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC7E,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACrD,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACvD,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACvD,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,6BAA6B,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CAClF,CAAC,CAAC,MAAM,EAAE,CAAC;AAWZ,SAAS,sBAAsB,CAAC,UAAkB;IAChD,OAAO;QACL,IAAI,CAAC,UAAU,EAAE,kBAAkB,EAAE,aAAa,CAAC;QACnD,IAAI,CAAC,UAAU,EAAE,eAAe,EAAE,aAAa,CAAC;KACjD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,UAAkB;IACvD,KAAK,MAAM,SAAS,IAAI,sBAAsB,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3D,IAAI,UAAU,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAC;IAC9C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,UAAkB;IACnD,MAAM,YAAY,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IACzC,MAAM,YAAY,GAAG,sBAAsB,CAAC,YAAY,CAAC,CAAC;IAC1D,IAAI,CAAC,YAAY;QAAE,OAAO,IAAI,CAAC;IAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC;IAC5D,MAAM,MAAM,GAAG,oBAAoB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/C,OAAO;QACL,QAAQ,EAAE;YACR,GAAG,MAAM;YACT,EAAE,EAAE,MAAM,CAAC,EAAE,IAAI,MAAM,CAAC,IAAI;SAC7B;QACD,YAAY;QACZ,UAAU,EAAE,YAAY;KACzB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,KAAc;IACnD,MAAM,MAAM,GAAG,oBAAoB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACjD,OAAO;QACL,GAAG,MAAM;QACT,EAAE,EAAE,MAAM,CAAC,EAAE,IAAI,MAAM,CAAC,IAAI;KAC7B,CAAC;AACJ,CAAC"}