@nexrall/code-core 1.4.45 → 1.4.47

package/dist/agent/trust.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Which trust-sensitive files actually exist in `dir`, so a confirmation
+ * prompt can tell the user what THIS folder will do rather than describing
+ * risks in the abstract. Ordered most- to least-dangerous.
+ */
+export declare function detectTrustSignals(dir: string): string[];
+//# sourceMappingURL=trust.d.ts.map

package/dist/agent/trust.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"trust.d.ts","sourceRoot":"","sources":["../../src/agent/trust.ts"],"names":[],"mappings":"AAiDA;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE,CA0DxD"}

package/dist/agent/trust.js

@@ -0,0 +1,151 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.detectTrustSignals = detectTrustSignals;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+// ─── Workspace Trust Signals (shared) ─────────────────────────────────────
+//
+// Opening a folder for an agent to work in is not a passive act. Before the
+// user types anything, a session can already read and act on files found in
+// that folder:
+//
+//   • `.nexrall/mcp.json` declares MCP servers, and connecting to a stdio
+//     server runs `spawn(server.command, server.args)` — arbitrary command
+//     execution, straight from a file in the repo (see mcp/manager.ts /
+//     mcp/client.ts).
+//   • `.nexrall/plugins/` may contribute their OWN `mcp.json`/`hooks.json`
+//     (see plugins/index.ts's pluginMcpServers/pluginHooks) — same risk
+//     class as a bare mcp.json, just one hop further away.
+//   • `nexrall.md` is injected into the system prompt as trusted project
+//     instructions, so its contents steer the agent for the whole session.
+//   • `.nexrall/{skills,commands}` define playbooks the agent will follow,
+//     and `.nexrall/permissions.json` can pre-approve tool calls that would
+//     otherwise prompt.
+//
+// So `git clone` of a hostile repo followed by pointing an agent at it is
+// enough to execute attacker-chosen commands before a human reviews anything.
+//
+// This module is the shared, pure "what would this folder do" detector. The
+// CLI has its own longstanding copy (packages/cli/src/trust.ts) — kept
+// independent there rather than migrated onto this one, so a change here
+// can never silently alter the CLI's own trust-prompt wording/behaviour or
+// its own dedicated test suite. Any NEW client (e.g. the desktop app) should
+// use this shared copy instead of hand-rolling a third one.
+//
+// Deliberately stateless: nothing here reads or writes any trust STORE.
+// Whether/how a client remembers "already confirmed this session" is the
+// caller's job (see e.g. desktop's main/trustGate.ts) — this function only
+// ever reports what is true of the folder RIGHT NOW.
+/** Does the project settings file bind plugin aliases to remote repos? */
+function declaresPluginSources(dir) {
+    try {
+        const raw = fs.readFileSync(path.join(dir, '.nexrall', 'settings.json'), 'utf-8');
+        const obj = JSON.parse(raw);
+        const s = obj.pluginSources;
+        return Boolean(s && typeof s === 'object' && !Array.isArray(s) && Object.keys(s).length > 0);
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Which trust-sensitive files actually exist in `dir`, so a confirmation
+ * prompt can tell the user what THIS folder will do rather than describing
+ * risks in the abstract. Ordered most- to least-dangerous.
+ */
+function detectTrustSignals(dir) {
+    const signals = [];
+    const exists = (...p) => {
+        try {
+            return fs.existsSync(path.join(dir, ...p));
+        }
+        catch {
+            return false;
+        }
+    };
+    // Code-executing first — these can run local commands before the user
+    // types anything, so they are what the decision really hinges on.
+    if (exists('.nexrall', 'mcp.json')) {
+        signals.push('.nexrall/mcp.json — can start MCP servers (runs local commands)');
+    }
+    if (exists('.nexrall', 'plugins')) {
+        // Plugins are scanned from the workspace and may contribute their own MCP
+        // servers/hooks (see plugins/index.ts → pluginMcpServers/pluginHooks), so
+        // this is in the same risk class as mcp.json rather than a cosmetic add-on.
+        signals.push('.nexrall/plugins/ — project plugins (may add MCP servers or hooks)');
+    }
+    // Then things that widen what the agent may do without asking.
+    if (exists('.nexrall', 'permissions.json')) {
+        signals.push('.nexrall/permissions.json — pre-approved tool permissions');
+    }
+    if (exists('.nexrall', 'settings.json')) {
+        // Called out separately when the file declares plugin sources: those bind
+        // a short alias to a remote repo, so installing that alias would fetch
+        // whatever the REPOSITORY chose. Installing still needs a human and its
+        // own confirmation — nothing is fetched from a declaration alone — but the
+        // user should know the repo is trying to name what they install. A
+        // settings.json can also carry a project's own `hooks` config, which runs
+        // shell commands automatically around tool calls — worth flagging here too.
+        let hasHooks = false;
+        try {
+            const raw = fs.readFileSync(path.join(dir, '.nexrall', 'settings.json'), 'utf-8');
+            const obj = JSON.parse(raw);
+            hasHooks = Boolean(obj.hooks && typeof obj.hooks === 'object' && Object.keys(obj.hooks).length > 0);
+        }
+        catch { /* absent or malformed — treated as no hooks declared */ }
+        const bits = ['.nexrall/settings.json — project settings and permission rules'];
+        if (declaresPluginSources(dir))
+            bits.push('declares plugin sources (aliases for remote plugin repos)');
+        if (hasHooks)
+            bits.push('runs hooks (shell commands) automatically around tool calls');
+        signals.push(bits.join(', '));
+    }
+    // Then things that steer the agent's behaviour.
+    if (exists('nexrall.md')) {
+        signals.push('nexrall.md — project instructions added to the agent\u2019s prompt');
+    }
+    if (exists('.nexrall', 'skills')) {
+        signals.push('.nexrall/skills/ — custom agent playbooks');
+    }
+    if (exists('.nexrall', 'commands')) {
+        signals.push('.nexrall/commands/ — custom slash commands');
+    }
+    if (exists('.nexrall', 'agents')) {
+        signals.push('.nexrall/agents/ — custom sub-agent definitions');
+    }
+    return signals;
+}
+//# sourceMappingURL=trust.js.map

package/dist/api/client.d.ts

@@ -131,6 +131,36 @@ export interface DescribeAttachmentResult {
 }
 export declare function describeAttachment(kind: 'image' | 'pdf', data: string, mediaType?: string, name?: string): Promise<DescribeAttachmentResult>;
 export declare function getBalance(): Promise<number>;
+export interface UsageDailyDay {
+    date: string;
+    total: number;
+    byType: Record<string, number>;
+}
+export interface UsageDailyResult {
+    days: UsageDailyDay[];
+    totalSpent: number;
+}
+/**
+ * Day-by-day spend breakdown, same endpoint the web app's Settings > Usage
+ * chart reads (backend/routes/user.js's /usage-daily). Used by Nexrall Work's
+ * own Settings > Usage panel so both surfaces show the identical numbers.
+ */
+export declare function getUsageDaily(days?: number): Promise<UsageDailyResult>;
 export declare function exchangeVscodeCode(code: string): Promise<AuthConfig>;
 export declare function login(email: string, password: string): Promise<AuthConfig>;
+export interface UserProfile {
+    id: string | number;
+    email: string;
+    name?: string;
+    phone?: string;
+    avatar_url?: string;
+    username?: string;
+    bio?: string;
+}
+/**
+ * Same GET /api/user/profile the web app's Settings > Profile section reads.
+ * Used by Nexrall Work's own Settings > Profile panel so both surfaces show
+ * identical account data.
+ */
+export declare function getUserProfile(): Promise<UserProfile>;
 //# sourceMappingURL=client.d.ts.map

package/dist/api/client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/api/client.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAA8B,UAAU,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAiErH,eAAO,MAAM,QAAQ,QAAmB,CAAC;AAIzC;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,kBAAkB,CAAC,CAAC,SAAS;IAAE,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,EAC5D,OAAO,EAAE,CAAC,EAAE,EACZ,UAAU,EAAE,KAAK,CAAC;IAAE,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,GAAG,IAAI,GAAG,SAAS,GACtD,CAAC,EAAE,CAeL;AAiGD,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,UAAU,CAAC;IACjB,aAAa,CAAC,EAAE,aAAa,GAAG,IAAI,CAAC;IACrC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC;IACnC,oFAAoF;IACpF,UAAU,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAC,CAAC;IACjG,6EAA6E;IAC7E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,6IAA6I;IAC7I,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;;;;OAOG;IACH,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,yFAAyF;IACzF,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B;;;;;;;;;OASG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B;;;;;;;;;OASG;IACH,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB;;;;;;;;;;;;;;;OAeG;IACH,uBAAuB,CAAC,EAAE,OAAO,CAAC;CACnC;AA8ID,wBAAsB,UAAU,CAC9B,QAAQ,EAAE,OAAO,EAAE,EACnB,OAAO,EAAE,iBAAiB,EAC1B,OAAO,EAAE,CAAC,CAAC,EAAE,QAAQ,KAAK,IAAI,GAC7B,OAAO,CAAC,OAAO,CAAC,CAkmClB;AAID;;;;;;;;;;;GAWG;AACH,wBAAsB,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAU9D;AAID;;;;;;;;;;GAUG;AACH,wBAAsB,kBAAkB,IAAI,OAAO,CAAC,IAAI,CAAC,CAYxD;AAeD,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,OAAO,GAAG,KAAK,EACrB,IAAI,EAAE,MAAM,EACZ,SAAS,CAAC,EAAE,MAAM,EAClB,IAAI,CAAC,EAAE,MAAM,GACZ,OAAO,CAAC,wBAAwB,CAAC,CAmCnC;AAID,wBAAsB,UAAU,IAAI,OAAO,CAAC,MAAM,CAAC,CA0BlD;AAID,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CA+B1E;AAID,wBAAsB,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CA0BhF"}
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/api/client.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAA8B,UAAU,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAiErH,eAAO,MAAM,QAAQ,QAAmB,CAAC;AAIzC;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,kBAAkB,CAAC,CAAC,SAAS;IAAE,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,EAC5D,OAAO,EAAE,CAAC,EAAE,EACZ,UAAU,EAAE,KAAK,CAAC;IAAE,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,GAAG,IAAI,GAAG,SAAS,GACtD,CAAC,EAAE,CAeL;AAiGD,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,UAAU,CAAC;IACjB,aAAa,CAAC,EAAE,aAAa,GAAG,IAAI,CAAC;IACrC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC;IACnC,oFAAoF;IACpF,UAAU,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAC,CAAC;IACjG,6EAA6E;IAC7E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,6IAA6I;IAC7I,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;;;;OAOG;IACH,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,yFAAyF;IACzF,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B;;;;;;;;;OASG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B;;;;;;;;;OASG;IACH,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB;;;;;;;;;;;;;;;OAeG;IACH,uBAAuB,CAAC,EAAE,OAAO,CAAC;CACnC;AA8ID,wBAAsB,UAAU,CAC9B,QAAQ,EAAE,OAAO,EAAE,EACnB,OAAO,EAAE,iBAAiB,EAC1B,OAAO,EAAE,CAAC,CAAC,EAAE,QAAQ,KAAK,IAAI,GAC7B,OAAO,CAAC,OAAO,CAAC,CAkmClB;AAID;;;;;;;;;;;GAWG;AACH,wBAAsB,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAU9D;AAID;;;;;;;;;;GAUG;AACH,wBAAsB,kBAAkB,IAAI,OAAO,CAAC,IAAI,CAAC,CAYxD;AAeD,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,OAAO,GAAG,KAAK,EACrB,IAAI,EAAE,MAAM,EACZ,SAAS,CAAC,EAAE,MAAM,EAClB,IAAI,CAAC,EAAE,MAAM,GACZ,OAAO,CAAC,wBAAwB,CAAC,CAmCnC;AAID,wBAAsB,UAAU,IAAI,OAAO,CAAC,MAAM,CAAC,CA0BlD;AAID,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAChC;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,aAAa,EAAE,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;;;GAIG;AACH,wBAAsB,aAAa,CAAC,IAAI,SAAK,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAyBxE;AAID,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CA+B1E;AAID,wBAAsB,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CA0BhF;AAID,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,GAAG,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED;;;;GAIG;AACH,wBAAsB,cAAc,IAAI,OAAO,CAAC,WAAW,CAAC,CAqB3D"}

package/dist/api/client.js

@@ -10,8 +10,10 @@ exports.cancelTurn = cancelTurn;
 exports.revokeRefreshToken = revokeRefreshToken;
 exports.describeAttachment = describeAttachment;
 exports.getBalance = getBalance;
+exports.getUsageDaily = getUsageDaily;
 exports.exchangeVscodeCode = exchangeVscodeCode;
 exports.login = login;
+exports.getUserProfile = getUserProfile;
 const eventsource_parser_1 = require("eventsource-parser");
 const node_fetch_1 = __importDefault(require("node-fetch"));
 const crypto_1 = require("crypto");
@@ -1544,6 +1546,33 @@ async function getBalance() {
     const data = (await response.json());
     return typeof data.balance === 'number' ? data.balance : 0;
 }
+/**
+ * Day-by-day spend breakdown, same endpoint the web app's Settings > Usage
+ * chart reads (backend/routes/user.js's /usage-daily). Used by Nexrall Work's
+ * own Settings > Usage panel so both surfaces show the identical numbers.
+ */
+async function getUsageDaily(days = 30) {
+    const fetchOnce = () => (0, node_fetch_1.default)(`${exports.API_BASE}/api/user/usage-daily?days=${days}`, { method: 'GET', headers: authHeaders() });
+    let response = await fetchOnce();
+    if (response.status === 401 || response.status === 403) {
+        const body = await response.text().catch(() => '');
+        if (isExpiredTokenResponse(response.status, body) && await refreshAccessToken()) {
+            response = await fetchOnce();
+        }
+        else {
+            throw new Error(`API error ${response.status}: ${body}`);
+        }
+    }
+    if (!response.ok) {
+        const errText = await response.text();
+        throw new Error(`API error ${response.status}: ${errText}`);
+    }
+    const data = (await response.json());
+    return {
+        days: Array.isArray(data.days) ? data.days : [],
+        totalSpent: typeof data.totalSpent === 'number' ? data.totalSpent : 0,
+    };
+}
 // ─── VSCode OAuth ─────────────────────────────────────────────────────────────
 async function exchangeVscodeCode(code) {
     const response = await (0, node_fetch_1.default)(`${exports.API_BASE}/api/auth/vscode-exchange`, {
@@ -1596,4 +1625,27 @@ async function login(email, password) {
         email: data.email ?? email,
     };
 }
+/**
+ * Same GET /api/user/profile the web app's Settings > Profile section reads.
+ * Used by Nexrall Work's own Settings > Profile panel so both surfaces show
+ * identical account data.
+ */
+async function getUserProfile() {
+    const fetchOnce = () => (0, node_fetch_1.default)(`${exports.API_BASE}/api/user/profile`, { method: 'GET', headers: authHeaders() });
+    let response = await fetchOnce();
+    if (response.status === 401 || response.status === 403) {
+        const body = await response.text().catch(() => '');
+        if (isExpiredTokenResponse(response.status, body) && await refreshAccessToken()) {
+            response = await fetchOnce();
+        }
+        else {
+            throw new Error(`API error ${response.status}: ${body}`);
+        }
+    }
+    if (!response.ok) {
+        const errText = await response.text();
+        throw new Error(`API error ${response.status}: ${errText}`);
+    }
+    return (await response.json());
+}
 //# sourceMappingURL=client.js.map

package/dist/checkpoint/manager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"manager.d.ts","sourceRoot":"","sources":["../../src/checkpoint/manager.ts"],"names":[],"mappings":"AA4CA,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEpD;AAQD,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAMlE;AAyBD,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,0DAA0D;IAC1D,OAAO,EAAE,OAAO,CAAC;IACjB,8FAA8F;IAC9F,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AAED,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,qEAAqE;IACrE,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,sFAAsF;IACtF,SAAS,EAAE,MAAM,CAAC;IAClB,sGAAsG;IACtG,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAMD,MAAM,WAAW,aAAa;IAC5B,4CAA4C;IAC5C,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,kFAAkF;IAClF,YAAY,EAAE,MAAM,CAAC;IACrB,6FAA6F;IAC7F,SAAS,EAAE,MAAM,CAAC;IAClB,6FAA6F;IAC7F,cAAc,EAAE,MAAM,EAAE,CAAC;CAC1B;AA6BD,qBAAa,iBAAiB;IAWhB,OAAO,CAAC,QAAQ,CAAC,OAAO;IAVpC,OAAO,CAAC,KAAK,CAAc;IAC3B,OAAO,CAAC,OAAO,CAAqB;IACpC,OAAO,CAAC,MAAM,CAAK;IACnB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAElC;;;;OAIG;gBAC0B,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM;IAa5D,OAAO,CAAC,OAAO;IAIf;;;OAGG;IACH,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,IAAI;IAcpD;;;;;OAKG;IACH,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;IA8BxE;;;;;;;OAOG;IACH,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;IAQxC,OAAO,CAAC,iBAAiB;IAiBzB,0FAA0F;IAC1F,UAAU,IAAI,IAAI;IAWlB,IAAI,IAAI,iBAAiB,EAAE;IAY3B,cAAc,IAAI,OAAO;IAIzB;;;;;OAKG;IACH,OAAO,CAAC,YAAY,EAAE,MAAM,GAAG,aAAa,GAAG,IAAI;IA0BnD,OAAO,CAAC,aAAa;IAsBrB,OAAO,CAAC,QAAQ;IAIhB,OAAO,CAAC,WAAW;IAuBnB,OAAO,CAAC,YAAY;IAepB,OAAO,CAAC,cAAc;IAItB,OAAO,CAAC,KAAK;IAOb,OAAO,CAAC,YAAY;CAkCrB"}
+{"version":3,"file":"manager.d.ts","sourceRoot":"","sources":["../../src/checkpoint/manager.ts"],"names":[],"mappings":"AA+CA,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEpD;AAQD,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAMlE;AA4BD,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,0DAA0D;IAC1D,OAAO,EAAE,OAAO,CAAC;IACjB,8FAA8F;IAC9F,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AAED,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,qEAAqE;IACrE,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,sFAAsF;IACtF,SAAS,EAAE,MAAM,CAAC;IAClB,sGAAsG;IACtG,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAMD,MAAM,WAAW,aAAa;IAC5B,4CAA4C;IAC5C,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,kFAAkF;IAClF,YAAY,EAAE,MAAM,CAAC;IACrB,6FAA6F;IAC7F,SAAS,EAAE,MAAM,CAAC;IAClB,6FAA6F;IAC7F,cAAc,EAAE,MAAM,EAAE,CAAC;CAC1B;AA6BD,qBAAa,iBAAiB;IAWhB,OAAO,CAAC,QAAQ,CAAC,OAAO;IAVpC,OAAO,CAAC,KAAK,CAAc;IAC3B,OAAO,CAAC,OAAO,CAAqB;IACpC,OAAO,CAAC,MAAM,CAAK;IACnB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAElC;;;;OAIG;gBAC0B,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM;IAa5D,OAAO,CAAC,OAAO;IAIf;;;OAGG;IACH,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,IAAI;IAcpD;;;;;OAKG;IACH,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;IA8BxE;;;;;;;OAOG;IACH,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;IAQxC,OAAO,CAAC,iBAAiB;IAiBzB,0FAA0F;IAC1F,UAAU,IAAI,IAAI;IAWlB,IAAI,IAAI,iBAAiB,EAAE;IAY3B,cAAc,IAAI,OAAO;IAIzB;;;;;OAKG;IACH,OAAO,CAAC,YAAY,EAAE,MAAM,GAAG,aAAa,GAAG,IAAI;IA0BnD,OAAO,CAAC,aAAa;IAsBrB,OAAO,CAAC,QAAQ;IAIhB,OAAO,CAAC,WAAW;IAuBnB,OAAO,CAAC,YAAY;IAepB,OAAO,CAAC,cAAc;IAItB,OAAO,CAAC,KAAK;IAOb,OAAO,CAAC,YAAY;CAkCrB"}

package/dist/checkpoint/manager.js

@@ -68,6 +68,9 @@ const MAX_SNAPSHOT_BYTES = 2 * 1024 * 1024; // 2 MB/file — larger files are no
 const MAX_PERSISTED_TURNS = 50; // pruned oldest-first on commit
 const MUTATING_TOOLS = new Set([
     'write_file',
+    'write_docx',
+    'write_xlsx',
+    'write_pptx',
     'edit_file',
     'multi_edit',
     'delete_file',
@@ -99,6 +102,9 @@ function str(v) {
 function affectedPaths(name, input) {
     switch (name) {
         case 'write_file':
+        case 'write_docx':
+        case 'write_xlsx':
+        case 'write_pptx':
         case 'edit_file':
         case 'multi_edit':
         case 'delete_file':

package/dist/commands/loader.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"loader.d.ts","sourceRoot":"","sources":["../../src/commands/loader.ts"],"names":[],"mappings":"AA6BA,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,SAAS,GAAG,QAAQ,GAAG,SAAS,GAAG,QAAQ,CAAC;CACrD;AAiFD,uFAAuF;AACvF,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,YAAY,EAAE,CASjE;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,MAAM,GAAG,YAAY,GAAG,SAAS,CAG7F;AAED;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAuCnF;AAED,4FAA4F;AAC5F,wBAAgB,aAAa,CAAC,GAAG,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAE3F"}
+{"version":3,"file":"loader.d.ts","sourceRoot":"","sources":["../../src/commands/loader.ts"],"names":[],"mappings":"AA8BA,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,SAAS,GAAG,QAAQ,GAAG,SAAS,GAAG,QAAQ,CAAC;CACrD;AAsED,uFAAuF;AACvF,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,YAAY,EAAE,CASjE;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,MAAM,GAAG,YAAY,GAAG,SAAS,CAG7F;AAED;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAuCnF;AAED,4FAA4F;AAC5F,wBAAgB,aAAa,CAAC,GAAG,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAE3F"}

package/dist/commands/loader.js

@@ -42,6 +42,7 @@ const path = __importStar(require("path"));
 const os = __importStar(require("os"));
 const child_process_1 = require("child_process");
 const index_1 = require("../plugins/index");
+const frontmatter_1 = require("../util/frontmatter");
 // ── Built-in commands ─────────────────────────────────────────────────────────
 // Shipped with the product; lowest precedence (project > global > builtin), so
 // a user can override any of them by creating a file with the same name.
@@ -79,18 +80,6 @@ const BUILTIN_COMMANDS = [
         ].join('\n'),
     },
 ];
-function parseFrontmatter(raw) {
-    const m = /^\s*---\r?\n([\s\S]*?)\r?\n---\r?\n?([\s\S]*)$/.exec(raw);
-    if (!m)
-        return { meta: {}, body: raw.trim() };
-    const meta = {};
-    for (const line of m[1].split(/\r?\n/)) {
-        const kv = /^([A-Za-z0-9_-]+)\s*:\s*(.*)$/.exec(line.trim());
-        if (kv)
-            meta[kv[1].toLowerCase()] = kv[2].trim().replace(/^["']|["']$/g, '');
-    }
-    return { meta, body: (m[2] ?? '').trim() };
-}
 function loadDir(dir, source, into) {
     let files;
     try {
@@ -102,7 +91,7 @@ function loadDir(dir, source, into) {
     for (const file of files) {
         try {
             const raw = fs.readFileSync(path.join(dir, file), 'utf-8');
-            const { meta, body } = parseFrontmatter(raw);
+            const { meta, body } = (0, frontmatter_1.parseFrontmatter)(raw);
             const name = (meta.name || path.basename(file, '.md')).trim().toLowerCase();
             if (!name)
                 continue;

package/dist/index.d.ts

@@ -26,4 +26,5 @@ export * from './permissions/destructive';
 export * from './plugins/index';
 export * from './plugins/installer';
 export * from './plugins/sources';
+export * from './agent/trust';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,SAAS,CAAC;AACxB,cAAc,cAAc,CAAC;AAC7B,cAAc,cAAc,CAAC;AAC7B,cAAc,kBAAkB,CAAC;AACjC,cAAc,cAAc,CAAC;AAC7B,cAAc,uBAAuB,CAAC;AACtC,cAAc,0BAA0B,CAAC;AACzC,cAAc,sBAAsB,CAAC;AACrC,cAAc,mBAAmB,CAAC;AAClC,cAAc,eAAe,CAAC;AAC9B,cAAc,uBAAuB,CAAC;AACtC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,cAAc,CAAC;AAC7B,cAAc,kBAAkB,CAAC;AACjC,cAAc,eAAe,CAAC;AAC9B,cAAc,sBAAsB,CAAC;AACrC,cAAc,mBAAmB,CAAC;AAClC,cAAc,oBAAoB,CAAC;AACnC,cAAc,kBAAkB,CAAC;AACjC,cAAc,uBAAuB,CAAC;AACtC,cAAc,qBAAqB,CAAC;AACpC,cAAc,0BAA0B,CAAC;AACzC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,iBAAiB,CAAC;AAChC,cAAc,qBAAqB,CAAC;AACpC,cAAc,mBAAmB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,SAAS,CAAC;AACxB,cAAc,cAAc,CAAC;AAC7B,cAAc,cAAc,CAAC;AAC7B,cAAc,kBAAkB,CAAC;AACjC,cAAc,cAAc,CAAC;AAC7B,cAAc,uBAAuB,CAAC;AACtC,cAAc,0BAA0B,CAAC;AACzC,cAAc,sBAAsB,CAAC;AACrC,cAAc,mBAAmB,CAAC;AAClC,cAAc,eAAe,CAAC;AAC9B,cAAc,uBAAuB,CAAC;AACtC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,cAAc,CAAC;AAC7B,cAAc,kBAAkB,CAAC;AACjC,cAAc,eAAe,CAAC;AAC9B,cAAc,sBAAsB,CAAC;AACrC,cAAc,mBAAmB,CAAC;AAClC,cAAc,oBAAoB,CAAC;AACnC,cAAc,kBAAkB,CAAC;AACjC,cAAc,uBAAuB,CAAC;AACtC,cAAc,qBAAqB,CAAC;AACpC,cAAc,0BAA0B,CAAC;AACzC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,iBAAiB,CAAC;AAChC,cAAc,qBAAqB,CAAC;AACpC,cAAc,mBAAmB,CAAC;AAClC,cAAc,eAAe,CAAC"}

package/dist/index.js

@@ -42,4 +42,5 @@ __exportStar(require("./permissions/destructive"), exports);
 __exportStar(require("./plugins/index"), exports);
 __exportStar(require("./plugins/installer"), exports);
 __exportStar(require("./plugins/sources"), exports);
+__exportStar(require("./agent/trust"), exports);
 //# sourceMappingURL=index.js.map

package/dist/permissions/modePolicy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"modePolicy.d.ts","sourceRoot":"","sources":["../../src/permissions/modePolicy.ts"],"names":[],"mappings":"AAsBA,yDAAyD;AACzD,MAAM,MAAM,cAAc,GAAG,MAAM,GAAG,KAAK,GAAG,MAAM,GAAG,MAAM,CAAC;AAE9D,kDAAkD;AAClD,MAAM,MAAM,cAAc,GACtB,OAAO,GACP,KAAK,GACL,MAAM,GACN,SAAS,CAAC;AAEd,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,IAAI,EAAE,cAAc,CAAC;IACrB,oFAAoF;IACpF,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,2EAA2E;IAC3E,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,eAAe,aAU1B,CAAC;AAEH,0CAA0C;AAC1C,eAAO,MAAM,gBAAgB,aAE3B,CAAC;AAEH,oEAAoE;AACpE,eAAO,MAAM,iBAAiB,aAE5B,CAAC;AAEH,sCAAsC;AACtC,eAAO,MAAM,UAAU,aAAsD,CAAC;AAE9E;;;;;;;;;;;GAWG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAEvD;AAED;;;;;;;GAOG;AACH,wBAAgB,MAAM,CAAC,GAAG,EAAE,WAAW,GAAG,cAAc,CAwDvD;AAED,4DAA4D;AAC5D,wBAAgB,YAAY,CAAC,IAAI,EAAE,cAAc,GAAG,MAAM,CAOzD;AAED,gFAAgF;AAChF,wBAAgB,SAAS,CAAC,GAAG,EAAE,OAAO,GAAG,cAAc,CAGtD"}
+{"version":3,"file":"modePolicy.d.ts","sourceRoot":"","sources":["../../src/permissions/modePolicy.ts"],"names":[],"mappings":"AAsBA,yDAAyD;AACzD,MAAM,MAAM,cAAc,GAAG,MAAM,GAAG,KAAK,GAAG,MAAM,GAAG,MAAM,CAAC;AAE9D,kDAAkD;AAClD,MAAM,MAAM,cAAc,GACtB,OAAO,GACP,KAAK,GACL,MAAM,GACN,SAAS,CAAC;AAEd,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,IAAI,EAAE,cAAc,CAAC;IACrB,oFAAoF;IACpF,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,2EAA2E;IAC3E,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,eAAe,aAU1B,CAAC;AAEH,0CAA0C;AAC1C,eAAO,MAAM,gBAAgB,aAG3B,CAAC;AAEH,oEAAoE;AACpE,eAAO,MAAM,iBAAiB,aAE5B,CAAC;AAEH,sCAAsC;AACtC,eAAO,MAAM,UAAU,aAAsD,CAAC;AAE9E;;;;;;;;;;;GAWG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAEvD;AAED;;;;;;;GAOG;AACH,wBAAgB,MAAM,CAAC,GAAG,EAAE,WAAW,GAAG,cAAc,CAwDvD;AAED,4DAA4D;AAC5D,wBAAgB,YAAY,CAAC,IAAI,EAAE,cAAc,GAAG,MAAM,CAOzD;AAED,gFAAgF;AAChF,wBAAgB,SAAS,CAAC,GAAG,EAAE,OAAO,GAAG,cAAc,CAGtD"}

package/dist/permissions/modePolicy.js

@@ -28,6 +28,7 @@ exports.READ_ONLY_TOOLS = new Set([
 /** Tools that write to the filesystem. */
 exports.FILE_WRITE_TOOLS = new Set([
     'write_file', 'create_file', 'edit_file', 'multi_edit', 'notebook_edit',
+    'write_docx', 'write_xlsx', 'write_pptx',
 ]);
 /** Tools that move/delete files — riskier than an in-place edit. */
 exports.FILE_MUTATE_TOOLS = new Set([

package/dist/permissions/rules.js

@@ -200,7 +200,7 @@ function ruleMatches(rule, tool, input, workDir, opts) {
     const aliases = {
         Read: ['read_file', 'list_directory', 'search_files', 'glob', 'notebook_read'],
         Edit: ['edit_file', 'multi_edit', 'write_file', 'notebook_edit'],
-        Write: ['write_file'],
+        Write: ['write_file', 'write_docx', 'write_xlsx', 'write_pptx'],
         Bash: ['bash'],
         WebFetch: ['fetch_url'],
         Image: ['generate_image', 'stock_photo'],

package/dist/plugins/index.d.ts

@@ -6,7 +6,13 @@ export interface PluginInfo {
     /** Absolute path to the plugin directory. */
     dir: string;
     scope: 'project' | 'global';
+    /** True when the user has toggled this plugin off (see isPluginDisabled). */
+    disabled: boolean;
 }
+/** True if this installed plugin directory has been toggled off. */
+export declare function isPluginDisabled(dir: string): boolean;
+/** Toggle a plugin on/off. Idempotent — enabling an already-enabled plugin is a no-op. */
+export declare function setPluginDisabled(dir: string, disabled: boolean): void;
 /**
  * Where each single-file component may live, in priority order.
  *
@@ -27,12 +33,33 @@ export declare const FILE_CANDIDATES: {
 };
 /** First existing candidate path for a component, or null. */
 export declare function resolvePluginFile(dir: string, kind: keyof typeof FILE_CANDIDATES): string | null;
-/** Discover installed plugins (project scope shadows global on name clash). */
+/**
+ * Discover installed plugins (project scope shadows global on name clash).
+ *
+ * Includes disabled plugins — callers that manage the install (the desktop
+ * UI's list, `nex plugin list`) need to show and re-enable them. Everything
+ * that actually LOADS a plugin's contents at runtime (pluginAssetDirs,
+ * pluginHooks, pluginMcpServers below) filters `disabled` out itself, which is
+ * what makes toggling a plugin off actually take effect instead of only
+ * hiding it from a list.
+ */
 export declare function loadPlugins(workDir: string): PluginInfo[];
-/** Subdirectories of every installed plugin that hold `kind` assets (existing only). */
+/**
+ * Find one installed plugin by name AND scope. Looking this up through
+ * loadPlugins() (rather than re-deriving `<scopeRoot>/<name>` the way
+ * removePlugin/updatePlugin in installer.ts do) is deliberate: a plugin's
+ * effective name can come from plugin.json's "name" field rather than its
+ * directory name (see scanRoot/readMeta above), so a caller that needs the
+ * plugin's actual `dir` for a specific scope — not just "some plugin with
+ * this name, whichever scope loadPlugins()'s single merged map preferred" —
+ * has to re-scan that one scope directly to avoid resolving to the wrong
+ * directory or silently matching the other scope's plugin of the same name.
+ */
+export declare function findPlugin(workDir: string, name: string, scope: 'project' | 'global'): PluginInfo | undefined;
+/** Subdirectories of every ENABLED installed plugin that hold `kind` assets (existing only). */
 export declare function pluginAssetDirs(workDir: string, kind: 'commands' | 'agents' | 'skills'): string[];
-/** Merge hooks.json from every plugin into a single hooks config (arrays concatenated). */
+/** Merge hooks.json from every ENABLED plugin into a single hooks config (arrays concatenated). */
 export declare function pluginHooks(workDir: string): Record<string, unknown[]>;
-/** MCP server maps declared by plugins: { serverName → config } (first plugin wins on clash). */
+/** MCP server maps declared by ENABLED plugins: { serverName → config } (first plugin wins on clash). */
 export declare function pluginMcpServers(workDir: string): Record<string, unknown>;
 //# sourceMappingURL=index.d.ts.map

package/dist/plugins/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/plugins/index.ts"],"names":[],"mappings":"AAsCA,MAAM,WAAW,UAAU;IACzB,2DAA2D;IAC3D,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,6CAA6C;IAC7C,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,SAAS,GAAG,QAAQ,CAAC;CAC7B;AAED;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,eAAe;;;;CAIlB,CAAC;AAEX,8DAA8D;AAC9D,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,OAAO,eAAe,GAAG,MAAM,GAAG,IAAI,CAQhG;AAwCD,+EAA+E;AAC/E,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,UAAU,EAAE,CAKzD;AAED,wFAAwF;AACxF,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG,QAAQ,GAAG,QAAQ,GAAG,MAAM,EAAE,CAMjG;AAED,2FAA2F;AAC3F,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAiBtE;AAED,iGAAiG;AACjG,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAezE"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/plugins/index.ts"],"names":[],"mappings":"AAsCA,MAAM,WAAW,UAAU;IACzB,2DAA2D;IAC3D,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,6CAA6C;IAC7C,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,SAAS,GAAG,QAAQ,CAAC;IAC5B,6EAA6E;IAC7E,QAAQ,EAAE,OAAO,CAAC;CACnB;AAYD,oEAAoE;AACpE,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAMrD;AAED,0FAA0F;AAC1F,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,GAAG,IAAI,CAWtE;AAED;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,eAAe;;;;CAIlB,CAAC;AAEX,8DAA8D;AAC9D,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,OAAO,eAAe,GAAG,MAAM,GAAG,IAAI,CAQhG;AAwCD;;;;;;;;;GASG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,UAAU,EAAE,CAKzD;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,GAAG,QAAQ,GAAG,UAAU,GAAG,SAAS,CAK7G;AAED,gGAAgG;AAChG,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG,QAAQ,GAAG,QAAQ,GAAG,MAAM,EAAE,CAOjG;AAED,mGAAmG;AACnG,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAkBtE;AAED,yGAAyG;AACzG,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAgBzE"}

package/dist/plugins/index.js

@@ -34,14 +34,50 @@ var __importStar = (this && this.__importStar) || (function () {
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.FILE_CANDIDATES = void 0;
+exports.isPluginDisabled = isPluginDisabled;
+exports.setPluginDisabled = setPluginDisabled;
 exports.resolvePluginFile = resolvePluginFile;
 exports.loadPlugins = loadPlugins;
+exports.findPlugin = findPlugin;
 exports.pluginAssetDirs = pluginAssetDirs;
 exports.pluginHooks = pluginHooks;
 exports.pluginMcpServers = pluginMcpServers;
 const fs = __importStar(require("fs"));
 const path = __importStar(require("path"));
 const os = __importStar(require("os"));
+// ─── Enable / disable ──────────────────────────────────────────────────────────
+//
+// A marker file rather than a registry list, so the on/off state travels WITH
+// the plugin directory itself: it survives a rename of the parent folder, and
+// (deliberately, see installPlugin's preservation logic in installer.ts) it
+// must survive `nex plugin update` re-copying the directory's contents — a
+// user who turned a plugin off should not have it silently turn back on the
+// next time it updates.
+const DISABLED_MARKER = '.disabled';
+/** True if this installed plugin directory has been toggled off. */
+function isPluginDisabled(dir) {
+    try {
+        return fs.statSync(path.join(dir, DISABLED_MARKER)).isFile();
+    }
+    catch {
+        return false;
+    }
+}
+/** Toggle a plugin on/off. Idempotent — enabling an already-enabled plugin is a no-op. */
+function setPluginDisabled(dir, disabled) {
+    const marker = path.join(dir, DISABLED_MARKER);
+    if (disabled) {
+        fs.writeFileSync(marker, '');
+    }
+    else {
+        try {
+            fs.unlinkSync(marker);
+        }
+        catch {
+            /* already absent */
+        }
+    }
+}
 /**
  * Where each single-file component may live, in priority order.
  *
@@ -112,19 +148,46 @@ function scanRoot(root, scope, into) {
         const name = meta.name || entry.name;
         if (into.has(name))
             continue; // project scope scanned first — it wins
-        into.set(name, { name, version: meta.version, description: meta.description, dir, scope });
+        into.set(name, { name, version: meta.version, description: meta.description, dir, scope, disabled: isPluginDisabled(dir) });
     }
 }
-/** Discover installed plugins (project scope shadows global on name clash). */
+/**
+ * Discover installed plugins (project scope shadows global on name clash).
+ *
+ * Includes disabled plugins — callers that manage the install (the desktop
+ * UI's list, `nex plugin list`) need to show and re-enable them. Everything
+ * that actually LOADS a plugin's contents at runtime (pluginAssetDirs,
+ * pluginHooks, pluginMcpServers below) filters `disabled` out itself, which is
+ * what makes toggling a plugin off actually take effect instead of only
+ * hiding it from a list.
+ */
 function loadPlugins(workDir) {
     const out = new Map();
     scanRoot(path.join(workDir, '.nexrall', 'plugins'), 'project', out);
     scanRoot(path.join(os.homedir(), '.nexrall', 'plugins'), 'global', out);
     return [...out.values()];
 }
-/** Subdirectories of every installed plugin that hold `kind` assets (existing only). */
+/**
+ * Find one installed plugin by name AND scope. Looking this up through
+ * loadPlugins() (rather than re-deriving `<scopeRoot>/<name>` the way
+ * removePlugin/updatePlugin in installer.ts do) is deliberate: a plugin's
+ * effective name can come from plugin.json's "name" field rather than its
+ * directory name (see scanRoot/readMeta above), so a caller that needs the
+ * plugin's actual `dir` for a specific scope — not just "some plugin with
+ * this name, whichever scope loadPlugins()'s single merged map preferred" —
+ * has to re-scan that one scope directly to avoid resolving to the wrong
+ * directory or silently matching the other scope's plugin of the same name.
+ */
+function findPlugin(workDir, name, scope) {
+    const out = new Map();
+    const root = scope === 'project' ? path.join(workDir, '.nexrall', 'plugins') : path.join(os.homedir(), '.nexrall', 'plugins');
+    scanRoot(root, scope, out);
+    return out.get(name);
+}
+/** Subdirectories of every ENABLED installed plugin that hold `kind` assets (existing only). */
 function pluginAssetDirs(workDir, kind) {
     return loadPlugins(workDir)
+        .filter((p) => !p.disabled)
         .map((p) => path.join(p.dir, kind))
         .filter((d) => {
         try {
@@ -135,10 +198,12 @@ function pluginAssetDirs(workDir, kind) {
         }
     });
 }
-/** Merge hooks.json from every plugin into a single hooks config (arrays concatenated). */
+/** Merge hooks.json from every ENABLED plugin into a single hooks config (arrays concatenated). */
 function pluginHooks(workDir) {
     const merged = {};
     for (const p of loadPlugins(workDir)) {
+        if (p.disabled)
+            continue;
         const file = resolvePluginFile(p.dir, 'hooks');
         if (!file)
             continue;
@@ -157,10 +222,12 @@ function pluginHooks(workDir) {
     }
     return merged;
 }
-/** MCP server maps declared by plugins: { serverName → config } (first plugin wins on clash). */
+/** MCP server maps declared by ENABLED plugins: { serverName → config } (first plugin wins on clash). */
 function pluginMcpServers(workDir) {
     const merged = {};
     for (const p of loadPlugins(workDir)) {
+        if (p.disabled)
+            continue;
         const file = resolvePluginFile(p.dir, 'mcp');
         if (!file)
             continue;