@moxxy/core 0.3.0

package/dist/logger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../src/logger.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,QAAQ,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;AAE3D,MAAM,WAAW,MAAM;IACrB,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACzD,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACxD,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACxD,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACzD,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC;CAClD;AAID,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC9B,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,wBAAgB,YAAY,CAAC,IAAI,GAAE,aAAkB,GAAG,MAAM,CAmB7D;AAED,eAAO,MAAM,YAAY,EAAE,MAM1B,CAAC"}

package/dist/logger.js

@@ -0,0 +1,27 @@
+const levelRank = { debug: 10, info: 20, warn: 30, error: 40 };
+export function createLogger(opts = {}) {
+    const minLevel = opts.minLevel ?? 'info';
+    const sink = opts.sink ?? ((line) => process.stderr.write(line + '\n'));
+    const bindings = opts.bindings ?? {};
+    const emit = (level, msg, meta) => {
+        if (levelRank[level] < levelRank[minLevel])
+            return;
+        const payload = { ts: new Date().toISOString(), level, msg, ...bindings, ...(meta ?? {}) };
+        sink(JSON.stringify(payload));
+    };
+    return {
+        debug: (msg, meta) => emit('debug', msg, meta),
+        info: (msg, meta) => emit('info', msg, meta),
+        warn: (msg, meta) => emit('warn', msg, meta),
+        error: (msg, meta) => emit('error', msg, meta),
+        child: (extra) => createLogger({ minLevel, sink, bindings: { ...bindings, ...extra } }),
+    };
+}
+export const silentLogger = {
+    debug: () => { },
+    info: () => { },
+    warn: () => { },
+    error: () => { },
+    child: () => silentLogger,
+};
+//# sourceMappingURL=logger.js.map

package/dist/logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.js","sourceRoot":"","sources":["../src/logger.ts"],"names":[],"mappings":"AAUA,MAAM,SAAS,GAA6B,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;AAQzF,MAAM,UAAU,YAAY,CAAC,OAAsB,EAAE;IACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAC;IACzC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC;IACxE,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC;IAErC,MAAM,IAAI,GAAG,CAAC,KAAe,EAAE,GAAW,EAAE,IAA8B,EAAQ,EAAE;QAClF,IAAI,SAAS,CAAC,KAAK,CAAC,GAAG,SAAS,CAAC,QAAQ,CAAC;YAAE,OAAO;QACnD,MAAM,OAAO,GAAG,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,QAAQ,EAAE,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC;QAC3F,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IAChC,CAAC,CAAC;IAEF,OAAO;QACL,KAAK,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC;QAC9C,IAAI,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC;QAC5C,IAAI,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC;QAC5C,KAAK,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC;QAC9C,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CACf,YAAY,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,GAAG,QAAQ,EAAE,GAAG,KAAK,EAAE,EAAE,CAAC;KACxE,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,YAAY,GAAW;IAClC,KAAK,EAAE,GAAG,EAAE,GAAE,CAAC;IACf,IAAI,EAAE,GAAG,EAAE,GAAE,CAAC;IACd,IAAI,EAAE,GAAG,EAAE,GAAE,CAAC;IACd,KAAK,EAAE,GAAG,EAAE,GAAE,CAAC;IACf,KAAK,EAAE,GAAG,EAAE,CAAC,YAAY;CAC1B,CAAC"}

package/dist/permissions/engine.d.ts

@@ -0,0 +1,94 @@
+import { type PendingToolCall, type PermissionDecision } from '@moxxy/sdk';
+import { z } from 'zod';
+/**
+ * Flat shape used by the policy file and the engine's mutator API.
+ * Different from SDK's `PermissionRule` (which uses a nested `pattern`).
+ * The engine has its own type because the persisted format is intentionally
+ * simple and stable.
+ */
+export interface PolicyRule {
+    readonly name: string;
+    /**
+     * Map of tool-input field name → regex source string. Each value is compiled
+     * with `new RegExp(value)` and tested with `.test(candidate)`, which is an
+     * UNANCHORED (substring / partial) match by design: the pattern matches if it
+     * occurs anywhere in the field's string form, not only when it spans the whole
+     * value. This is a deliberate, stable contract — existing user permission
+     * files rely on it, so it is never silently anchored.
+     *
+     * Consequence: an allow rule like `{ Read: { path: 'config' } }` matches
+     * `/etc/passwd#config` and `~/.ssh/config-backup` too. A rule that wants a
+     * FULL match must supply its own anchors, e.g. `'^/safe/dir/.*$'`. (Note this
+     * differs from {@link nameMatches}, which anchors its glob with `^...$`
+     * because a glob is a whole-name convention, not an author-supplied regex.)
+     */
+    readonly inputMatches?: Record<string, string>;
+    readonly reason?: string;
+}
+export declare const permissionPolicySchema: z.ZodObject<{
+    allow: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        inputMatches: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        reason: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        name: string;
+        reason?: string | undefined;
+        inputMatches?: Record<string, string> | undefined;
+    }, {
+        name: string;
+        reason?: string | undefined;
+        inputMatches?: Record<string, string> | undefined;
+    }>, "many">>;
+    deny: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        inputMatches: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        reason: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        name: string;
+        reason?: string | undefined;
+        inputMatches?: Record<string, string> | undefined;
+    }, {
+        name: string;
+        reason?: string | undefined;
+        inputMatches?: Record<string, string> | undefined;
+    }>, "many">>;
+}, "strip", z.ZodTypeAny, {
+    allow: {
+        name: string;
+        reason?: string | undefined;
+        inputMatches?: Record<string, string> | undefined;
+    }[];
+    deny: {
+        name: string;
+        reason?: string | undefined;
+        inputMatches?: Record<string, string> | undefined;
+    }[];
+}, {
+    allow?: {
+        name: string;
+        reason?: string | undefined;
+        inputMatches?: Record<string, string> | undefined;
+    }[] | undefined;
+    deny?: {
+        name: string;
+        reason?: string | undefined;
+        inputMatches?: Record<string, string> | undefined;
+    }[] | undefined;
+}>;
+export type PermissionPolicy = z.infer<typeof permissionPolicySchema>;
+export declare class PermissionEngine {
+    private policy;
+    private policyPath;
+    private mutex;
+    constructor(policy?: PermissionPolicy, policyPath?: string | null);
+    static load(policyPath: string): Promise<PermissionEngine>;
+    check(call: PendingToolCall): PermissionDecision | null;
+    addAllow(rule: PolicyRule): Promise<void>;
+    addDeny(rule: PolicyRule): Promise<void>;
+    /** Remove every rule (allow + deny) whose name matches exactly. Returns the count removed. */
+    removeByName(name: string): Promise<number>;
+    clear(): Promise<void>;
+    private persist;
+    get policySnapshot(): PermissionPolicy;
+}
+//# sourceMappingURL=engine.d.ts.map

package/dist/permissions/engine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine.d.ts","sourceRoot":"","sources":["../../src/permissions/engine.ts"],"names":[],"mappings":"AAAA,OAAO,EAA2B,KAAK,eAAe,EAAE,KAAK,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAGpG,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;GAKG;AACH,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB;;;;;;;;;;;;;OAaG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/C,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAWjC,CAAC;AAEH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAItE,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,MAAM,CAAmB;IACjC,OAAO,CAAC,UAAU,CAAgB;IAIlC,OAAO,CAAC,KAAK,CAAwB;gBAEzB,MAAM,GAAE,gBAA8B,EAAE,UAAU,GAAE,MAAM,GAAG,IAAW;WAKvE,IAAI,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAahE,KAAK,CAAC,IAAI,EAAE,eAAe,GAAG,kBAAkB,GAAG,IAAI;IAcjD,QAAQ,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAUzC,OAAO,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAU9C,8FAA8F;IACxF,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAc3C,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;YAOd,OAAO;IAKrB,IAAI,cAAc,IAAI,gBAAgB,CAErC;CACF"}

package/dist/permissions/engine.js

@@ -0,0 +1,203 @@
+import { createMutex } from '@moxxy/sdk';
+import { writeFileAtomic } from '@moxxy/sdk/server';
+import { promises as fs } from 'node:fs';
+import { z } from 'zod';
+export const permissionPolicySchema = z.object({
+    allow: z.array(z.object({
+        name: z.string(),
+        inputMatches: z.record(z.string(), z.string()).optional(),
+        reason: z.string().optional(),
+    })).default([]),
+    deny: z.array(z.object({
+        name: z.string(),
+        inputMatches: z.record(z.string(), z.string()).optional(),
+        reason: z.string().optional(),
+    })).default([]),
+});
+const emptyPolicy = { allow: [], deny: [] };
+export class PermissionEngine {
+    policy;
+    policyPath;
+    // Per-instance mutex. Mutators read-modify-write `this.policy` then persist;
+    // without serialization two overlapping calls both read the same snapshot,
+    // each append one rule, and the second write clobbers the first's rule.
+    mutex = createMutex();
+    constructor(policy = emptyPolicy, policyPath = null) {
+        this.policy = policy;
+        this.policyPath = policyPath;
+    }
+    static async load(policyPath) {
+        try {
+            const raw = await fs.readFile(policyPath, 'utf8');
+            const parsed = permissionPolicySchema.parse(JSON.parse(raw));
+            return new PermissionEngine(parsed, policyPath);
+        }
+        catch (err) {
+            if (isNodeError(err) && err.code === 'ENOENT') {
+                return new PermissionEngine(emptyPolicy, policyPath);
+            }
+            throw err;
+        }
+    }
+    check(call) {
+        for (const rule of this.policy.deny) {
+            if (matchRule(rule, call, 'deny')) {
+                return { mode: 'deny', reason: rule.reason ?? `Denied by policy: ${rule.name}` };
+            }
+        }
+        for (const rule of this.policy.allow) {
+            if (matchRule(rule, call, 'allow')) {
+                return { mode: 'allow', reason: rule.reason ?? `Allowed by policy: ${rule.name}` };
+            }
+        }
+        return null;
+    }
+    async addAllow(rule) {
+        return this.mutex.run(async () => {
+            this.policy = {
+                ...this.policy,
+                allow: [...this.policy.allow, sanitizeRule(rule)],
+            };
+            await this.persist();
+        });
+    }
+    async addDeny(rule) {
+        return this.mutex.run(async () => {
+            this.policy = {
+                ...this.policy,
+                deny: [...this.policy.deny, sanitizeRule(rule)],
+            };
+            await this.persist();
+        });
+    }
+    /** Remove every rule (allow + deny) whose name matches exactly. Returns the count removed. */
+    async removeByName(name) {
+        return this.mutex.run(async () => {
+            const allowBefore = this.policy.allow.length;
+            const denyBefore = this.policy.deny.length;
+            this.policy = {
+                allow: this.policy.allow.filter((r) => r.name !== name),
+                deny: this.policy.deny.filter((r) => r.name !== name),
+            };
+            const removed = allowBefore - this.policy.allow.length + (denyBefore - this.policy.deny.length);
+            if (removed > 0)
+                await this.persist();
+            return removed;
+        });
+    }
+    async clear() {
+        return this.mutex.run(async () => {
+            this.policy = { allow: [], deny: [] };
+            await this.persist();
+        });
+    }
+    async persist() {
+        if (!this.policyPath)
+            return;
+        await writeFileAtomic(this.policyPath, JSON.stringify(this.policy, null, 2));
+    }
+    get policySnapshot() {
+        return this.policy;
+    }
+}
+/** Strip undefined fields and copy `inputMatches` through so persistence preserves it. */
+function sanitizeRule(rule) {
+    const out = { name: rule.name };
+    if (rule.inputMatches && Object.keys(rule.inputMatches).length > 0) {
+        out.inputMatches = { ...rule.inputMatches };
+    }
+    if (rule.reason !== undefined) {
+        out.reason = rule.reason;
+    }
+    return out;
+}
+/**
+ * Evaluate a rule against a call. `intent` is the list the rule lives on so we
+ * can fail in the safe direction when a pattern is uncompilable:
+ *
+ * - A DENY rule with an invalid `inputMatches` regex fails CLOSED — the bad
+ *   pattern is treated as a match so a malformed deny rule (e.g. an unbalanced
+ *   bracket like `rm -rf [`) keeps denying instead of silently becoming a no-op
+ *   that lets dangerous commands through.
+ * - An ALLOW rule with an invalid regex fails to match — it never over-grants.
+ *
+ * Either way the bad pattern is surfaced on stderr so the misconfiguration is
+ * visible rather than silent.
+ */
+function matchRule(rule, call, intent) {
+    if (!nameMatches(rule.name, call.name))
+        return false;
+    if (rule.inputMatches) {
+        const input = call.input;
+        if (!input || typeof input !== 'object')
+            return false;
+        for (const [k, v] of Object.entries(rule.inputMatches)) {
+            const candidate = stringifyCandidate(input[k]);
+            let re;
+            try {
+                // `inputMatches` values are UNANCHORED regexes by design: `.test` does a
+                // substring/partial match, so the pattern matches if it occurs anywhere
+                // in `candidate`. This is the documented, stable contract (see
+                // PolicyRule.inputMatches) — never wrap it in `^(?:…)$`, as that would
+                // silently break existing permission files. Authors who need a full
+                // match anchor their own pattern with `^…$`.
+                re = new RegExp(v);
+            }
+            catch (err) {
+                warnBadPattern(rule.name, k, v, intent, err);
+                // Uncompilable pattern: a deny rule must still deny (fail closed),
+                // an allow rule must not grant (this field fails to match).
+                if (intent === 'deny')
+                    continue;
+                return false;
+            }
+            if (!re.test(candidate))
+                return false;
+        }
+    }
+    return true;
+}
+/**
+ * Coerce a tool-input field to the string an `inputMatches` regex tests against.
+ * Primitives use their natural string form (unchanged behaviour); a
+ * structured field (object/array) is JSON-serialized so a rule can match its
+ * shape (e.g. `inputMatches: { args: '"--force"' }`) instead of silently
+ * seeing `[object Object]` and never matching. `null`/`undefined` → `''`.
+ */
+function stringifyCandidate(value) {
+    if (value === null || value === undefined)
+        return '';
+    if (typeof value === 'object') {
+        try {
+            return JSON.stringify(value) ?? '';
+        }
+        catch {
+            return String(value);
+        }
+    }
+    return String(value);
+}
+function warnBadPattern(ruleName, field, pattern, intent, err) {
+    const detail = err instanceof Error ? err.message : String(err);
+    const resolution = intent === 'deny'
+        ? 'failing closed (rule still denies)'
+        : 'this field cannot match (rule will not grant)';
+    process.stderr.write(`moxxy: invalid regex in ${intent} permission rule "${ruleName}" ` +
+        `(inputMatches.${field} = ${JSON.stringify(pattern)}): ${detail} — ${resolution}\n`);
+}
+function nameMatches(pattern, candidate) {
+    if (pattern === candidate)
+        return true;
+    if (pattern.includes('*')) {
+        const re = new RegExp('^' + pattern.split('*').map(escapeRe).join('.*') + '$');
+        return re.test(candidate);
+    }
+    return false;
+}
+function escapeRe(s) {
+    return s.replace(/[.+?^${}()|[\]\\]/g, '\\$&');
+}
+function isNodeError(e) {
+    return e instanceof Error && 'code' in e;
+}
+//# sourceMappingURL=engine.js.map

package/dist/permissions/engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine.js","sourceRoot":"","sources":["../../src/permissions/engine.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAA6D,MAAM,YAAY,CAAC;AACpG,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AA4BxB,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;QACtB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;QACzD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAC9B,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACf,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;QACrB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;QACzD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAC9B,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CAChB,CAAC,CAAC;AAIH,MAAM,WAAW,GAAqB,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;AAE9D,MAAM,OAAO,gBAAgB;IACnB,MAAM,CAAmB;IACzB,UAAU,CAAgB;IAClC,6EAA6E;IAC7E,2EAA2E;IAC3E,wEAAwE;IAChE,KAAK,GAAU,WAAW,EAAE,CAAC;IAErC,YAAY,SAA2B,WAAW,EAAE,aAA4B,IAAI;QAClF,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,UAAkB;QAClC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;YAClD,MAAM,MAAM,GAAG,sBAAsB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;YAC7D,OAAO,IAAI,gBAAgB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QAClD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,WAAW,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC9C,OAAO,IAAI,gBAAgB,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;YACvD,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAqB;QACzB,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YACpC,IAAI,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC;gBAClC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,qBAAqB,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;YACnF,CAAC;QACH,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YACrC,IAAI,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC;gBACnC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,sBAAsB,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;YACrF,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,IAAgB;QAC7B,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE;YAC/B,IAAI,CAAC,MAAM,GAAG;gBACZ,GAAG,IAAI,CAAC,MAAM;gBACd,KAAK,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,YAAY,CAAC,IAAI,CAAC,CAAC;aAClD,CAAC;YACF,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QACvB,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,IAAgB;QAC5B,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE;YAC/B,IAAI,CAAC,MAAM,GAAG;gBACZ,GAAG,IAAI,CAAC,MAAM;gBACd,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,YAAY,CAAC,IAAI,CAAC,CAAC;aAChD,CAAC;YACF,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QACvB,CAAC,CAAC,CAAC;IACL,CAAC;IAED,8FAA8F;IAC9F,KAAK,CAAC,YAAY,CAAC,IAAY;QAC7B,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE;YAC/B,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC;YAC7C,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;YAC3C,IAAI,CAAC,MAAM,GAAG;gBACZ,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC;gBACvD,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC;aACtD,CAAC;YACF,MAAM,OAAO,GAAG,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAChG,IAAI,OAAO,GAAG,CAAC;gBAAE,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;YACtC,OAAO,OAAO,CAAC;QACjB,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,KAAK;QACT,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE;YAC/B,IAAI,CAAC,MAAM,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;YACtC,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QACvB,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,OAAO;QACnB,IAAI,CAAC,IAAI,CAAC,UAAU;YAAE,OAAO;QAC7B,MAAM,eAAe,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC/E,CAAC;IAED,IAAI,cAAc;QAChB,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;CACF;AAED,0FAA0F;AAC1F,SAAS,YAAY,CAAC,IAAgB;IACpC,MAAM,GAAG,GAAe,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;IAC5C,IAAI,IAAI,CAAC,YAAY,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClE,GAA4D,CAAC,YAAY,GAAG,EAAE,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;IACxG,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC7B,GAA4D,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IACrF,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,SAAS,SAAS,CAAC,IAAgB,EAAE,IAAqB,EAAE,MAAwB;IAClF,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACrD,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;QACtB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAuC,CAAC;QAC3D,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QACtD,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;YACvD,MAAM,SAAS,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YAC/C,IAAI,EAAU,CAAC;YACf,IAAI,CAAC;gBACH,yEAAyE;gBACzE,wEAAwE;gBACxE,+DAA+D;gBAC/D,uEAAuE;gBACvE,oEAAoE;gBACpE,6CAA6C;gBAC7C,EAAE,GAAG,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC;YACrB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;gBAC7C,mEAAmE;gBACnE,4DAA4D;gBAC5D,IAAI,MAAM,KAAK,MAAM;oBAAE,SAAS;gBAChC,OAAO,KAAK,CAAC;YACf,CAAC;YACD,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC;gBAAE,OAAO,KAAK,CAAC;QACxC,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;GAMG;AACH,SAAS,kBAAkB,CAAC,KAAc;IACxC,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACrD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QACrC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC;AAED,SAAS,cAAc,CACrB,QAAgB,EAChB,KAAa,EACb,OAAe,EACf,MAAwB,EACxB,GAAY;IAEZ,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAChE,MAAM,UAAU,GACd,MAAM,KAAK,MAAM;QACf,CAAC,CAAC,oCAAoC;QACtC,CAAC,CAAC,+CAA+C,CAAC;IACtD,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,2BAA2B,MAAM,qBAAqB,QAAQ,IAAI;QAChE,iBAAiB,KAAK,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,MAAM,MAAM,UAAU,IAAI,CACtF,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,OAAe,EAAE,SAAiB;IACrD,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACvC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,EAAE,GAAG,IAAI,MAAM,CAAC,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC;QAC/E,OAAO,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC5B,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,QAAQ,CAAC,CAAS;IACzB,OAAO,CAAC,CAAC,OAAO,CAAC,oBAAoB,EAAE,MAAM,CAAC,CAAC;AACjD,CAAC;AAED,SAAS,WAAW,CAAC,CAAU;IAC7B,OAAO,CAAC,YAAY,KAAK,IAAI,MAAM,IAAI,CAAC,CAAC;AAC3C,CAAC"}

package/dist/permissions/resolvers.d.ts

@@ -0,0 +1,8 @@
+/**
+ * The reusable PermissionResolver factories now live in `@moxxy/sdk` (they have
+ * zero core internals, and channel plugins — which may only depend on the SDK —
+ * need them). Re-exported here for back-compat so existing `@moxxy/core`
+ * importers keep working.
+ */
+export { autoAllowResolver, denyByDefaultResolver, createCallbackResolver, createAllowListResolver, createDeferredPermissionResolver, type CallbackResolverOptions, type PermissionPromptHandler, type DeferredPermissionResolver, type DeferredPermissionResolverOptions, } from '@moxxy/sdk';
+//# sourceMappingURL=resolvers.d.ts.map

package/dist/permissions/resolvers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolvers.d.ts","sourceRoot":"","sources":["../../src/permissions/resolvers.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EACL,iBAAiB,EACjB,qBAAqB,EACrB,sBAAsB,EACtB,uBAAuB,EACvB,gCAAgC,EAChC,KAAK,uBAAuB,EAC5B,KAAK,uBAAuB,EAC5B,KAAK,0BAA0B,EAC/B,KAAK,iCAAiC,GACvC,MAAM,YAAY,CAAC"}

package/dist/permissions/resolvers.js

@@ -0,0 +1,8 @@
+/**
+ * The reusable PermissionResolver factories now live in `@moxxy/sdk` (they have
+ * zero core internals, and channel plugins — which may only depend on the SDK —
+ * need them). Re-exported here for back-compat so existing `@moxxy/core`
+ * importers keep working.
+ */
+export { autoAllowResolver, denyByDefaultResolver, createCallbackResolver, createAllowListResolver, createDeferredPermissionResolver, } from '@moxxy/sdk';
+//# sourceMappingURL=resolvers.js.map

package/dist/permissions/resolvers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolvers.js","sourceRoot":"","sources":["../../src/permissions/resolvers.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EACL,iBAAiB,EACjB,qBAAqB,EACrB,sBAAsB,EACtB,uBAAuB,EACvB,gCAAgC,GAKjC,MAAM,YAAY,CAAC"}

package/dist/plugins/discovery.d.ts

@@ -0,0 +1,9 @@
+import { type ResolvedPluginManifest } from '@moxxy/sdk';
+import type { Logger } from '../logger.js';
+export interface DiscoveryOptions {
+    readonly cwd: string;
+    readonly logger: Logger;
+    readonly extraPaths?: ReadonlyArray<string>;
+}
+export declare function discoverPlugins(opts: DiscoveryOptions): Promise<ReadonlyArray<ResolvedPluginManifest>>;
+//# sourceMappingURL=discovery.d.ts.map

package/dist/plugins/discovery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"discovery.d.ts","sourceRoot":"","sources":["../../src/plugins/discovery.ts"],"names":[],"mappings":"AAEA,OAAO,EAAsB,KAAK,sBAAsB,EAAE,MAAM,YAAY,CAAC;AAC7E,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAS3C,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;CAC7C;AAED,wBAAsB,eAAe,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,aAAa,CAAC,sBAAsB,CAAC,CAAC,CAgC5G"}

package/dist/plugins/discovery.js

@@ -0,0 +1,112 @@
+import { promises as fs } from 'node:fs';
+import * as path from 'node:path';
+import { moxxyPackageSchema } from '@moxxy/sdk';
+/**
+ * Maximum number of directory levels to climb when collecting `node_modules`
+ * roots from the cwd upward. Bounds the walk so discovery never traverses all
+ * the way to the filesystem root on a deeply-nested cwd.
+ */
+const MAX_NODE_MODULES_WALK_DEPTH = 8;
+export async function discoverPlugins(opts) {
+    const seen = new Set();
+    const out = [];
+    const roots = await candidateRoots(opts.cwd);
+    for (const extra of opts.extraPaths ?? [])
+        roots.push(extra);
+    for (const root of roots) {
+        let pkgsDirs;
+        try {
+            pkgsDirs = await listPackageDirs(root);
+        }
+        catch (err) {
+            opts.logger.debug('discovery: failed to list packages in root', { root, err: String(err) });
+            continue;
+        }
+        // Dedupe by path FIRST (cheap, order-preserving), then read the unique
+        // manifests in parallel — the reads are independent fs.readFile + parse.
+        // Promise.all preserves array order, so the emitted order is identical to
+        // the prior sequential loop.
+        const uniquePaths = pkgsDirs.filter((pkgPath) => {
+            if (seen.has(pkgPath))
+                return false;
+            seen.add(pkgPath);
+            return true;
+        });
+        const manifests = await Promise.all(uniquePaths.map((pkgPath) => readPluginManifest(pkgPath, opts.logger)));
+        for (const manifest of manifests) {
+            if (manifest)
+                out.push(manifest);
+        }
+    }
+    return out;
+}
+async function candidateRoots(cwd) {
+    const out = [];
+    let cursor = path.resolve(cwd);
+    for (let i = 0; i < MAX_NODE_MODULES_WALK_DEPTH; i++) {
+        out.push(path.join(cursor, 'node_modules'));
+        const parent = path.dirname(cursor);
+        if (parent === cursor)
+            break;
+        cursor = parent;
+    }
+    return out;
+}
+async function listPackageDirs(root) {
+    const entries = await fs
+        .readdir(root, { withFileTypes: true })
+        .catch(() => []);
+    // Resolve each top-level entry to its contributed package dirs in parallel
+    // (scoped `@org` dirs need their own readdir), then flatten in entry order so
+    // the result matches the prior sequential walk.
+    const perEntry = await Promise.all(entries.map(async (entry) => {
+        if (!entry.isDirectory() && !entry.isSymbolicLink())
+            return [];
+        const full = path.join(root, entry.name);
+        if (entry.name.startsWith('@')) {
+            const sub = await fs
+                .readdir(full, { withFileTypes: true })
+                .catch(() => []);
+            return sub
+                .filter((s) => s.isDirectory() || s.isSymbolicLink())
+                .map((s) => path.join(full, s.name));
+        }
+        if (entry.name !== '.bin' && entry.name !== '.pnpm')
+            return [full];
+        return [];
+    }));
+    return perEntry.flat();
+}
+async function readPluginManifest(packagePath, logger) {
+    const pkgJsonPath = path.join(packagePath, 'package.json');
+    let pkg;
+    try {
+        pkg = JSON.parse(await fs.readFile(pkgJsonPath, 'utf8'));
+    }
+    catch {
+        return null;
+    }
+    if (!pkg.moxxy)
+        return null;
+    if (!pkg.name)
+        return null;
+    const parsedMoxxy = moxxyPackageSchema.safeParse(pkg.moxxy);
+    if (!parsedMoxxy.success) {
+        logger.warn('discovery: invalid moxxy package config, skipping', {
+            package: pkg.name,
+            issues: parsedMoxxy.error.issues,
+        });
+        return null;
+    }
+    const { plugin, requirements } = parsedMoxxy.data;
+    if (!plugin)
+        return null;
+    return {
+        ...plugin,
+        packageName: pkg.name,
+        packageVersion: pkg.version ?? '0.0.0',
+        packagePath,
+        ...(requirements ? { requirements } : {}),
+    };
+}
+//# sourceMappingURL=discovery.js.map

package/dist/plugins/discovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"discovery.js","sourceRoot":"","sources":["../../src/plugins/discovery.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,kBAAkB,EAA+B,MAAM,YAAY,CAAC;AAG7E;;;;GAIG;AACH,MAAM,2BAA2B,GAAG,CAAC,CAAC;AAQtC,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAsB;IAC1D,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,GAAG,GAA6B,EAAE,CAAC;IAEzC,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC7C,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,UAAU,IAAI,EAAE;QAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAE7D,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,QAAkB,CAAC;QACvB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,CAAC;QACzC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,4CAA4C,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC5F,SAAS;QACX,CAAC;QACD,uEAAuE;QACvE,yEAAyE;QACzE,0EAA0E;QAC1E,6BAA6B;QAC7B,MAAM,WAAW,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE;YAC9C,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;gBAAE,OAAO,KAAK,CAAC;YACpC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAClB,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,GAAG,CACjC,WAAW,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,kBAAkB,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CACvE,CAAC;QACF,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;YACjC,IAAI,QAAQ;gBAAE,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,GAAW;IACvC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,IAAI,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC/B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,2BAA2B,EAAE,CAAC,EAAE,EAAE,CAAC;QACrD,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC;QAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACpC,IAAI,MAAM,KAAK,MAAM;YAAE,MAAM;QAC7B,MAAM,GAAG,MAAM,CAAC;IAClB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,IAAY;IACzC,MAAM,OAAO,GAA+B,MAAM,EAAE;SACjD,OAAO,CAAC,IAAI,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;SACtC,KAAK,CAAC,GAA+B,EAAE,CAAC,EAAE,CAAC,CAAC;IAC/C,2EAA2E;IAC3E,8EAA8E;IAC9E,gDAAgD;IAChD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,CAChC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,EAAqB,EAAE;QAC7C,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE;YAAE,OAAO,EAAE,CAAC;QAC/D,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/B,MAAM,GAAG,GAA+B,MAAM,EAAE;iBAC7C,OAAO,CAAC,IAAI,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;iBACtC,KAAK,CAAC,GAA+B,EAAE,CAAC,EAAE,CAAC,CAAC;YAC/C,OAAO,GAAG;iBACP,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,cAAc,EAAE,CAAC;iBACpD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QACzC,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO;YAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QACnE,OAAO,EAAE,CAAC;IACZ,CAAC,CAAC,CACH,CAAC;IACF,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC;AACzB,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,WAAmB,EACnB,MAAc;IAEd,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;IAC3D,IAAI,GAAyD,CAAC;IAC9D,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC;IAC3D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IAC5B,IAAI,CAAC,GAAG,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IAE3B,MAAM,WAAW,GAAG,kBAAkB,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC5D,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;QACzB,MAAM,CAAC,IAAI,CAAC,mDAAmD,EAAE;YAC/D,OAAO,EAAE,GAAG,CAAC,IAAI;YACjB,MAAM,EAAE,WAAW,CAAC,KAAK,CAAC,MAAM;SACjC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,WAAW,CAAC,IAAI,CAAC;IAClD,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAEzB,OAAO;QACL,GAAG,MAAM;QACT,WAAW,EAAE,GAAG,CAAC,IAAI;QACrB,cAAc,EAAE,GAAG,CAAC,OAAO,IAAI,OAAO;QACtC,WAAW;QACX,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1C,CAAC;AACJ,CAAC"}

package/dist/plugins/host-options.d.ts

@@ -0,0 +1,72 @@
+/**
+ * Shared option/loader types for {@link PluginHost}. Extracted into this leaf
+ * module so both `host.ts` and the registry-kind table (`registry-kinds.ts`)
+ * can depend on `PluginHostOptions` without forming an import cycle
+ * (`host.ts` → `registry-kinds.ts` → `host.ts`). Re-exported from `host.ts`
+ * for back-compat, so existing `import { PluginHostOptions } from './host.js'`
+ * call sites keep working.
+ */
+import type { Plugin, ResolvedPluginManifest } from '@moxxy/sdk';
+import type { Logger } from '../logger.js';
+import type { AgentRegistry } from '../registries/agents.js';
+import type { CommandRegistry } from '../registries/commands.js';
+import type { ChannelRegistryImpl } from '../registries/channels.js';
+import type { SurfaceRegistryImpl } from '../registries/surfaces.js';
+import type { CacheStrategyRegistry } from '../registries/cache-strategies.js';
+import type { ViewRendererRegistry } from '../registries/view-renderers.js';
+import type { TunnelProviderRegistry } from '../registries/tunnel-providers.js';
+import type { CompactorRegistry } from '../registries/compactors.js';
+import type { ModeRegistry } from '../registries/modes.js';
+import type { ProviderRegistry } from '../registries/providers.js';
+import type { ToolRegistry } from '../registries/tools.js';
+import type { TranscriberRegistry } from '../registries/transcribers.js';
+import type { SynthesizerRegistry } from '../registries/synthesizers.js';
+import type { EmbedderRegistry } from '../registries/embedders.js';
+import type { IsolatorRegistry } from '../registries/isolators.js';
+import type { WorkflowExecutorRegistry } from '../registries/workflow-executors.js';
+import type { HookDispatcherImpl } from './lifecycle.js';
+import type { RequirementRegistry } from '../requirements.js';
+export interface PluginHostOptions {
+    readonly cwd: string;
+    readonly logger: Logger;
+    readonly tools: ToolRegistry;
+    readonly providers: ProviderRegistry;
+    readonly modes: ModeRegistry;
+    readonly compactors: CompactorRegistry;
+    readonly cacheStrategies: CacheStrategyRegistry;
+    readonly viewRenderers: ViewRendererRegistry;
+    readonly tunnelProviders: TunnelProviderRegistry;
+    readonly channels: ChannelRegistryImpl;
+    readonly surfaces: SurfaceRegistryImpl;
+    readonly agents: AgentRegistry;
+    readonly commands: CommandRegistry;
+    readonly transcribers: TranscriberRegistry;
+    readonly synthesizers: SynthesizerRegistry;
+    readonly embedders: EmbedderRegistry;
+    readonly isolators: IsolatorRegistry;
+    readonly workflowExecutors: WorkflowExecutorRegistry;
+    readonly requirements: RequirementRegistry;
+    readonly dispatcher: HookDispatcherImpl;
+    readonly loader?: PluginLoader;
+    /**
+     * Extra discovery roots beyond the cwd-rooted `node_modules` walk (e.g.
+     * `~/.moxxy/plugins` and its `node_modules`). Stored so `reload()` reuses
+     * them — otherwise a reload would compute its "wanted" set without these
+     * paths and unload every user plugin, then fail to rediscover them.
+     */
+    readonly userPaths?: ReadonlyArray<string>;
+    /**
+     * Predicate consulted (by PACKAGE name) for discovered plugins on every
+     * `discoverAndLoad`/`reload`. Returning `true` keeps the package out of the
+     * "wanted" set, so a plugin the user disabled (config `plugins[name].enabled
+     * = false`) is never re-loaded by a reload and, if currently loaded, is
+     * unloaded. Boot-time builtins are filtered separately by register-plugins;
+     * this closes the runtime-toggle / reload hole. Reads live state, so a
+     * runtime enable/disable takes effect on the next reload without a restart.
+     */
+    readonly isDisabled?: (packageName: string) => boolean;
+}
+export interface PluginLoader {
+    load(manifest: ResolvedPluginManifest): Promise<Plugin>;
+}
+//# sourceMappingURL=host-options.d.ts.map

package/dist/plugins/host-options.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-options.d.ts","sourceRoot":"","sources":["../../src/plugins/host-options.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,KAAK,EAAE,MAAM,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AACjE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AACrE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AACrE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,mCAAmC,CAAC;AAC/E,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,iCAAiC,CAAC;AAC5E,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,mCAAmC,CAAC;AAChF,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AACrE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAC;AACzE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAC;AACzE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,qCAAqC,CAAC;AACpF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AACzD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAE9D,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,gBAAgB,CAAC;IACrC,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,iBAAiB,CAAC;IACvC,QAAQ,CAAC,eAAe,EAAE,qBAAqB,CAAC;IAChD,QAAQ,CAAC,aAAa,EAAE,oBAAoB,CAAC;IAC7C,QAAQ,CAAC,eAAe,EAAE,sBAAsB,CAAC;IACjD,QAAQ,CAAC,QAAQ,EAAE,mBAAmB,CAAC;IACvC,QAAQ,CAAC,QAAQ,EAAE,mBAAmB,CAAC;IACvC,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC;IACnC,QAAQ,CAAC,YAAY,EAAE,mBAAmB,CAAC;IAC3C,QAAQ,CAAC,YAAY,EAAE,mBAAmB,CAAC;IAC3C,QAAQ,CAAC,SAAS,EAAE,gBAAgB,CAAC;IACrC,QAAQ,CAAC,SAAS,EAAE,gBAAgB,CAAC;IACrC,QAAQ,CAAC,iBAAiB,EAAE,wBAAwB,CAAC;IACrD,QAAQ,CAAC,YAAY,EAAE,mBAAmB,CAAC;IAC3C,QAAQ,CAAC,UAAU,EAAE,kBAAkB,CAAC;IACxC,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;IAC/B;;;;;OAKG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IAC3C;;;;;;;;OAQG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,OAAO,CAAC;CACxD;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,CAAC,QAAQ,EAAE,sBAAsB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CACzD"}

package/dist/plugins/host-options.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=host-options.js.map

package/dist/plugins/host-options.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-options.js","sourceRoot":"","sources":["../../src/plugins/host-options.ts"],"names":[],"mappings":""}