@openbrf/plugin-sdk 0.0.0-stage → 1.2.0

package/dist/catalog.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalog.d.ts","sourceRoot":"","sources":["../src/catalog.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,KAAK,EAAE,mBAAmB,EAAuB,MAAM,eAAe,CAAC;AAwE9E,uDAAuD;AACvD,eAAO,MAAM,qBAAqB;;;;kBAyBhC,CAAC;AAEH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE,YAAY,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEzD;;;;;;;GAOG;AACH,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAK7B,CAAC;AAEZ,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAmBhF,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAuIjC,CAAC;AAEL;;;;;;;GAOG;AACH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;kBAMlC,CAAC;AAEH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;4BAG7B,CAAC;AAEH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAC1E,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AACxE,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D;;;;;;;GAOG;AACH,eAAO,MAAM,sBAAsB,YAAI,CAAC,EAAE,CAAC,CAAU,CAAC;AAEtD,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAiPtB,CAAC;AAEL,MAAM,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAEpD;;;;;;;;;GASG;AACH,eAAO,MAAM,gBAAgB,6MAOsB,CAAC;AAEpD,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEnE;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAC;CACtC;AAED,kFAAkF;AAClF,MAAM,WAAW,iBAAiB;IAChC,0CAA0C;IAC1C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,6EAA6E;IAC7E,QAAQ,CAAC,OAAO,EAAE,cAAc,GAAG,IAAI,CAAC;CACzC;AAED,MAAM,MAAM,kBAAkB,GAC1B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAE,GAC5B;IACE,EAAE,EAAE,KAAK,CAAC;IACV,sDAAsD;IACtD,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1B,iEAAiE;IACjE,WAAW,EAAE,SAAS,iBAAiB,EAAE,CAAC;CAC3C,CAAC;AAEN;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,kBAAkB,CAcpE"}

package/dist/catalog.js

@@ -0,0 +1,567 @@
+import { z } from "zod";
+import { IntegrityError, parseSha512 } from "./integrity.js";
+import { localizedTextSchema } from "./localized-text.js";
+import { declaredActionsSchema, declaredExtensionPointsSchema, declaredExtensionsSchema, extensionGroupRefusals, extensionHostPersonalDataRefused, extensionPermissionsRefused, extensionPointRefusal, extensionRuleIssues, pluginExtensionPointSchema, pluginExtensionSchema, declaredDeviceRoutesSchema, deviceRouteRuleIssues, pluginActionSchema, pluginDeviceRouteSchema, pluginIdSchema, pluginManifestSchema, proposeImportPersonalDataIssues, } from "./manifest.js";
+import { PLUGIN_PERMISSIONS, PLUGIN_PERSONAL_DATA_CATEGORIES, } from "./permissions.js";
+import { declaredRecipientsSchema, pluginRecipientSchema, recipientCategoryIssues, } from "./recipients.js";
+/**
+ * The catalog index.
+ *
+ * One file listing everything an instance may install: plugins and themes
+ * alike, since both are distributed the same way and the board browses one
+ * screen per kind rather than one source per kind. Delisting is a commit
+ * against the index, which is why an instance re-reads it rather than caching
+ * it across installs.
+ *
+ * Exported so the index is checked by the same schema wherever it is read: by
+ * the instance before it offers an entry to a board, and by the catalog's own
+ * check before a listing is merged.
+ *
+ * Entries are parsed strictly. The index arrives over the network, and an
+ * entry the instance does not fully understand is an entry it must not offer
+ * to a board for consent - the consent screen's whole job is to say precisely
+ * what is being agreed to.
+ *
+ * Every object in it is strict as well: a field this version of the index does
+ * not define is refused, never dropped. Dropped, a misspelled field of the
+ * declaration would be replaced by its default before the consent screen or
+ * any check of the manifest saw it. The index carries its version for exactly
+ * this, so a new field is a new index version rather than a key an older
+ * instance ignores.
+ */
+/** Whether `declared` is a digest `parseSha512` can read. */
+function isReadableSha512(declared) {
+    try {
+        parseSha512(declared);
+        return true;
+    }
+    catch (error) {
+        if (error instanceof IntegrityError) {
+            return false;
+        }
+        throw error;
+    }
+}
+/** A tarball and the digest its bytes must hash to. */
+export const catalogArtifactSchema = z.strictObject({
+    /**
+     * Direct URL.
+     *
+     * https on a curated instance, and nothing else: the shape is checked here
+     * but the destination is decided at fetch time, where http: and file: are
+     * refused unless the instance has opted out of curation. That is what keeps
+     * an entry - which is data fetched from elsewhere - from naming a `file:`
+     * path and having the instance read its own disk, or a plain-http address
+     * inside the network the instance sits in.
+     */
+    url: z.string().min(1).max(2000),
+    /**
+     * "sha512-<base64>" or 128 hex characters.
+     *
+     * Read through the same `parseSha512` the instance verifies a download with,
+     * so an entry the catalog's check lets through is one the instance can read,
+     * and an index with a badly spelled digest is refused by `parseCatalogIndex`
+     * alone.
+     */
+    sha512: z.string().min(1).max(200).refine(isReadableSha512, {
+        error: 'Expected a digest written as "sha512-<base64>" or 128 hex characters.',
+    }),
+    bytes: z.int().min(1).optional(),
+});
+/**
+ * An extension point as the index lists it: the manifest's fields, and the
+ * curator's title and description in both languages.
+ *
+ * The text is the curator's rather than the plugin's own, as an entry's `name`
+ * is, because an addon's consent screen has to name the point before the host
+ * plugin's locale files exist on the instance (ADR 0030).
+ */
+export const catalogExtensionPointSchema = pluginExtensionPointSchema
+    .extend({
+    title: localizedTextSchema,
+    description: localizedTextSchema,
+})
+    .strict();
+/** Strict, and `.extend()` keeps it so for both kinds of entry. */
+const baseEntrySchema = z.strictObject({
+    /**
+     * Unique across the whole index, whatever the entry's type: an install
+     * looks an entry up by id alone.
+     */
+    id: pluginIdSchema,
+    version: z.string().min(1).max(64),
+    /** The curator's text, in both languages the interface is offered in. */
+    name: localizedTextSchema,
+    description: localizedTextSchema,
+    artifact: catalogArtifactSchema,
+    homepage: z.string().max(2000).optional(),
+    /** Set on an entry that is still listed but should not be installed anew. */
+    deprecated: z.boolean().default(false),
+});
+export const catalogPluginEntrySchema = baseEntrySchema
+    .extend({
+    type: z.literal("plugin"),
+    /**
+     * The npm package name the tarball unpacks as. Needed because the installer
+     * writes a dependency set for npm, which keys on the package name and not on
+     * the catalog id.
+     */
+    packageName: z.string().min(1).max(214),
+    /** Gated against the host's own contract version before an install starts. */
+    apiVersion: z.int().min(1),
+    /**
+     * Repeated from the plugin's manifest so the consent screen can be shown
+     * before anything is downloaded. The installed manifest is authoritative:
+     * the loader compares the two and refuses a plugin that asks for more than
+     * the board consented to.
+     */
+    permissions: z.array(z.enum(PLUGIN_PERMISSIONS)).max(16).default([]),
+    personalData: z
+        .array(z.enum(PLUGIN_PERSONAL_DATA_CATEGORIES))
+        .max(16)
+        .default([]),
+    /**
+     * The actions the plugin proposes, on the same terms as the two above.
+     *
+     * The widest part of the declaration, and so the part the consent screen
+     * most needs before anything is downloaded: an action names a capability and
+     * offers it to callers the board decides on.
+     *
+     * The manifest's own action fields and its own uniqueness rule, not a
+     * second array of the same thing: the rule on the ids has to hold at
+     * whichever boundary is read first, and two copies is two places for it to
+     * stop holding. Read strictly here, as everything in the index is.
+     */
+    actions: declaredActionsSchema(pluginActionSchema.strict()).default([]),
+    /**
+     * The route that serves MCP, repeated on the same terms as the three above.
+     *
+     * Both rules about it are decided before anything is downloaded - a second
+     * plugin declaring it is refused, and the reserved id `mcp-connector` may be
+     * taken only by a plugin that does declare it - so the index has to carry it.
+     * The manifest's own field schema rather than a second spelling of it: the
+     * value becomes a URL an unauthenticated caller is pointed at, and one
+     * definition of what it may contain is the point of that schema.
+     */
+    oauthProtectedResource: pluginManifestSchema.shape.oauthProtectedResource,
+    /**
+     * The extension points the plugin offers, repeated from the manifest with
+     * the curator's text, so the host plugin's consent screen can say what its
+     * points accept before anything is downloaded (ADR 0030).
+     *
+     * In version 2 of the index only; see `catalogSchema`. Left without a
+     * default, so that a version 1 index carrying the key, even empty, can be
+     * told from one that does not.
+     */
+    extensionPoints: declaredExtensionPointsSchema(catalogExtensionPointSchema).optional(),
+    /**
+     * The extension points of other plugins it extends, repeated on the same
+     * terms, so an addon's consent screen can say what it extends and what it
+     * hands over. Version 2 only.
+     */
+    extends: declaredExtensionsSchema(pluginExtensionSchema.strict()).optional(),
+    /**
+     * Where the plugin connects to, repeated on the same terms as the
+     * declaration above it (ADR 0037).
+     *
+     * A field version 1 of the index does not define, so only an index of
+     * version 2 may carry it, and an index of version 1 that does is refused.
+     * Absent rather than defaulted, so that rule can tell an entry that left it
+     * out from one that declared none; a reader takes absent as none.
+     */
+    recipients: declaredRecipientsSchema(pluginRecipientSchema.strict()).optional(),
+    /**
+     * The routes a device reaches with a device token, repeated on the same
+     * terms (ADR 0031).
+     *
+     * The consent screen names them - "can be reached by devices holding a token
+     * the board issues" - before anything is downloaded. In version 2 of the
+     * index only; see `catalogSchema`. Left without a default, so that a version 1
+     * index carrying the key, even empty, can be told from one that does not.
+     */
+    deviceRoutes: declaredDeviceRoutesSchema(pluginDeviceRouteSchema.strict()).optional(),
+    /**
+     * That the plugin is an AI package, repeated on the same terms.
+     *
+     * It decides what the plugin's dispatch reaches and how the audit log names
+     * its writes, so the board reads it on the consent screen, and the install
+     * echo compares it, before anything is downloaded.
+     *
+     * Added within version 1 of the index rather than as a new version, because
+     * absent means the same as false: an index that lists no AI package need not
+     * carry the field and stays one an older instance reads. One that lists an
+     * AI package is refused whole by an older instance, which is the rule above
+     * doing its work - that instance would otherwise offer the plugin for
+     * consent without saying what it is, and dispatch it as a plain plugin.
+     */
+    ai: pluginManifestSchema.shape.ai,
+    /**
+     * The licence a paid plugin reads, repeated on the same terms (ADR 0042).
+     *
+     * Above all its `audiences`: the services the plugin may present the
+     * association's licence to are a grant the board consents to, as it does
+     * `permissions`, so the consent screen states them and the install echo
+     * compares them before anything is downloaded. The manifest's own strict
+     * schema, so a misspelled field is refused here as it is there.
+     *
+     * Added within version 1 of the index on the `ai` field's terms: absent
+     * means the plugin reads no licence, and an index that lists a licensed
+     * plugin is refused whole by an instance from before the field.
+     */
+    licence: pluginManifestSchema.shape.licence,
+    /**
+     * The day the release was published, which the update screen compares with
+     * the `updatesUntil` of the licence the instance holds. Required with
+     * `licence`, as in the manifest.
+     */
+    released: pluginManifestSchema.shape.released,
+})
+    .superRefine((entry, ctx) => {
+    if (entry.licence !== undefined && entry.released === undefined) {
+        ctx.addIssue({
+            code: "custom",
+            path: ["released"],
+            message: "an entry that declares a licence must say when it was released",
+        });
+    }
+});
+/**
+ * A theme entry. Themes install through the same download-and-verify path and
+ * are listed in the same index; what happens after the bytes are verified is
+ * the theme installer's business, not this schema's.
+ *
+ * No package name: a theme is data read out of its archive, never an npm
+ * package, and nothing that installs one keys on a package name.
+ */
+export const catalogThemeEntrySchema = baseEntrySchema.extend({
+    type: z.literal("theme"),
+    /** The token contract range the theme was authored against. */
+    contract: z.string().min(1).max(64).optional(),
+    /** The theme it inherits from, as its manifest names it. */
+    extends: z.string().min(1).max(64).optional(),
+});
+export const catalogEntrySchema = z.discriminatedUnion("type", [
+    catalogPluginEntrySchema,
+    catalogThemeEntrySchema,
+]);
+/**
+ * The index versions this package reads.
+ *
+ * Version 2 adds the fields ADR 0030 lists: `extensionPoints` and `extends`
+ * (ADR 0030), `recipients` (ADR 0037) and `deviceRoutes` (ADR 0031). An
+ * instance reads both, and the catalog serves version 1, without the entries
+ * that need version 2, to instances that have not upgraded.
+ */
+export const CATALOG_INDEX_VERSIONS = [1, 2];
+export const catalogSchema = z
+    .strictObject({
+    /** Index format version, so a future shape can be recognised and refused. */
+    version: z.literal(CATALOG_INDEX_VERSIONS),
+    entries: z.array(catalogEntrySchema).max(500),
+})
+    .superRefine((catalog, ctx) => {
+    const plugins = new Map();
+    const pluginIndex = new Map();
+    for (const [index, entry] of catalog.entries.entries()) {
+        if (entry.type === "plugin" && !plugins.has(entry.id)) {
+            plugins.set(entry.id, entry);
+            pluginIndex.set(entry.id, index);
+        }
+    }
+    /** The addons already refused beside a plugin they extend. */
+    const pairRefused = new Set();
+    for (const [index, entry] of catalog.entries.entries()) {
+        if (entry.type !== "plugin") {
+            continue;
+        }
+        // The manifest's rule, so an entry the loader would refuse is never
+        // offered for consent.
+        for (const issue of proposeImportPersonalDataIssues(entry)) {
+            ctx.addIssue({
+                code: "custom",
+                path: ["entries", index, "personalData"],
+                message: issue.message,
+            });
+        }
+        /*
+         * A field version 1 does not define is refused there as any unknown key
+         * is, so an older instance and this one read the same index the same
+         * way.
+         */
+        if (catalog.version === 1) {
+            for (const field of [
+                "extensionPoints",
+                "extends",
+                "deviceRoutes",
+            ]) {
+                if (entry[field] !== undefined) {
+                    ctx.addIssue({
+                        code: "custom",
+                        path: ["entries", index, field],
+                        message: `${field} needs version 2 of the index`,
+                    });
+                }
+            }
+            continue;
+        }
+        // The manifest's own rules, so an entry whose own declaration breaks
+        // one is never offered for consent.
+        for (const issue of extensionRuleIssues({
+            id: entry.id,
+            permissions: entry.permissions,
+            personalData: entry.personalData,
+            extensionPoints: entry.extensionPoints ?? [],
+            extends: entry.extends ?? [],
+        })) {
+            ctx.addIssue({
+                code: "custom",
+                path: ["entries", index, ...issue.path],
+                message: issue.message,
+            });
+        }
+        for (const issue of deviceRouteRuleIssues({
+            deviceRoutes: entry.deviceRoutes ?? [],
+            oauthProtectedResource: entry.oauthProtectedResource,
+            permissions: entry.permissions,
+        })) {
+            ctx.addIssue({
+                code: "custom",
+                path: ["entries", index, ...issue.path],
+                message: issue.message,
+            });
+        }
+        /*
+         * The rule between an addon and a plugin it extends, where the index
+         * lists both, read from the two entries. One it does not list is held to
+         * it by the loader, which reads the installed manifests, as it holds
+         * one it lists.
+         */
+        for (const [position, extension] of (entry.extends ?? []).entries()) {
+            const host = plugins.get(extension.plugin);
+            if (host === undefined) {
+                continue;
+            }
+            const named = {
+                addon: entry.id,
+                plugin: extension.plugin,
+                point: extension.point,
+            };
+            const unserved = extensionPointRefusal(extension, host.extensionPoints ?? []);
+            if (unserved !== null) {
+                pairRefused.add(entry.id);
+                const { field, message, detail } = unservedIssue(extension, unserved);
+                ctx.addIssue({
+                    code: "custom",
+                    path: ["entries", index, "extends", position, field],
+                    message,
+                    params: {
+                        refusal: {
+                            code: unserved.reason,
+                            detail: { ...named, ...detail },
+                        },
+                    },
+                });
+                continue;
+            }
+            const refused = extensionPermissionsRefused(entry, host);
+            if (refused.length > 0) {
+                pairRefused.add(entry.id);
+                ctx.addIssue({
+                    code: "custom",
+                    path: ["entries", index, "extends", position, "plugin"],
+                    message: host.permissions.includes("site:blocks")
+                        ? `${extension.plugin} asks for "site:blocks", so a plugin that extends it may not read the register or propose imports: ${refused.join(", ")}`
+                        : `${extension.plugin} reads the register or proposes imports, so a plugin that asks for "site:blocks" may not extend it: ${refused.join(", ")}`,
+                    params: {
+                        refusal: {
+                            code: "extension-permission-refused",
+                            detail: { ...named, permissions: refused },
+                        },
+                    },
+                });
+                continue;
+            }
+            const categories = extensionHostPersonalDataRefused(entry, host);
+            if (categories.length > 0) {
+                pairRefused.add(entry.id);
+                ctx.addIssue({
+                    code: "custom",
+                    path: ["entries", index, "extends", position, "plugin"],
+                    message: `${extension.plugin} handles personal data, so a plugin that asks for "site:blocks" may not extend it: ${categories.join(", ")}`,
+                    params: {
+                        refusal: {
+                            code: "extension-host-personal-data-refused",
+                            detail: { ...named, categories },
+                        },
+                    },
+                });
+            }
+        }
+    }
+    /*
+     * And the rule on the plugins joined by extensions, among those the index
+     * lists, as the loader reads it: beside the addons the rule above has not
+     * already refused.
+     */
+    if (catalog.version === 2) {
+        const members = [...plugins.values()]
+            .filter((entry) => !pairRefused.has(entry.id))
+            .map((entry) => ({
+            id: entry.id,
+            permissions: entry.permissions,
+            extends: entry.extends ?? [],
+        }));
+        for (const [id, refusal] of extensionGroupRefusals(members)) {
+            ctx.addIssue({
+                code: "custom",
+                path: ["entries", pluginIndex.get(id) ?? 0, "extends"],
+                message: `the plugins it is joined to by extensions would hold one that asks for "site:blocks" (${refusal.website.join(", ")}) and one that reads the register or proposes imports (${refusal.register.join(", ")})`,
+                params: {
+                    refusal: {
+                        code: "extension-group-refused",
+                        detail: {
+                            addon: id,
+                            website: refusal.website,
+                            register: refusal.register,
+                        },
+                    },
+                },
+            });
+        }
+    }
+    /*
+     * A field is in the version that defines it and in no earlier one: an
+     * instance that reads only version 1 would refuse the entry, and an index
+     * claiming version 1 while carrying it is not one such an instance could
+     * read.
+     */
+    if (catalog.version === 1) {
+        for (const [index, entry] of catalog.entries.entries()) {
+            if (entry.type === "plugin" && entry.recipients !== undefined) {
+                ctx.addIssue({
+                    code: "custom",
+                    path: ["entries", index, "recipients"],
+                    message: "recipients is not in version 1 of the index; an entry that declares them is listed in version 2",
+                });
+            }
+        }
+    }
+    /*
+     * The manifest's rule on what a recipient may receive, so an entry the
+     * loader would refuse is not offered for consent with a category the
+     * plugin does not declare it handles. The comparison with the installed
+     * manifest comes later; this holds the entry to itself.
+     */
+    for (const [index, entry] of catalog.entries.entries()) {
+        if (entry.type !== "plugin" || entry.recipients === undefined) {
+            continue;
+        }
+        for (const issue of recipientCategoryIssues(entry.recipients, entry.personalData)) {
+            ctx.addIssue({
+                code: "custom",
+                path: ["entries", index, ...issue.path],
+                message: issue.message,
+            });
+        }
+    }
+    /*
+     * An id names one entry in the whole index, not one per type. An install
+     * finds its entry by id and then refuses one of the wrong type, so a theme
+     * sharing a plugin's id would leave that plugin impossible to install, and
+     * which of the two a board got would depend on the order of the file.
+     */
+    const firstIndexById = new Map();
+    for (const [index, entry] of catalog.entries.entries()) {
+        const first = firstIndexById.get(entry.id);
+        if (first === undefined) {
+            firstIndexById.set(entry.id, index);
+            continue;
+        }
+        ctx.addIssue({
+            code: "custom",
+            path: ["entries", index, "id"],
+            message: `"${entry.id}" is already the id of entry ${String(first)}; an id appears once in the index`,
+        });
+    }
+});
+/**
+ * The refusals of an index that its reader is told in their own language.
+ *
+ * What the schema says about one entry's field is English for the catalog's
+ * curator, who fixes the index from it. These hold one entry against another,
+ * an addon against the plugin it extends or against the plugins joined to it,
+ * and are the loader's own refusals of the same pair, under the same codes. So
+ * the refusal carries its code and the values its sentence is completed with
+ * beside the English line, and whoever shows it translates the code.
+ */
+export const CATALOG_REFUSALS = [
+    "extension-point-unknown",
+    "extension-version-unsupported",
+    "extension-personal-data-refused",
+    "extension-permission-refused",
+    "extension-host-personal-data-refused",
+    "extension-group-refused",
+];
+/**
+ * Parses a catalog index.
+ *
+ * A single malformed entry rejects the whole index rather than being dropped
+ * quietly. A board that installs from a catalog which silently lost an entry
+ * has no way to tell that from an entry that was delisted on purpose, and the
+ * two mean opposite things.
+ *
+ * Returns a result rather than throwing, as `parsePluginPackage` does, so a
+ * catalog's own check can list every problem at once.
+ */
+export function parseCatalogIndex(input) {
+    const result = catalogSchema.safeParse(input);
+    if (result.success) {
+        return { ok: true, value: result.data };
+    }
+    const diagnostics = result.error.issues.map((issue) => ({
+        issue: `${issue.path.join(".") || "(root)"}: ${issue.message}`,
+        refusal: catalogRefusalOf(issue),
+    }));
+    return {
+        ok: false,
+        issues: diagnostics.map((diagnostic) => diagnostic.issue),
+        diagnostics,
+    };
+}
+function catalogRefusalOf(issue) {
+    if (issue.code !== "custom" || typeof issue.params !== "object") {
+        return null;
+    }
+    const refusal = issue.params
+        ?.refusal;
+    return refusal !== undefined && CATALOG_REFUSALS.includes(refusal.code)
+        ? refusal
+        : null;
+}
+/** The field, the curator's line and the values of a point's refusal. */
+function unservedIssue(extension, unserved) {
+    switch (unserved.reason) {
+        case "extension-point-unknown":
+            return {
+                field: "point",
+                message: `${extension.plugin} declares no extension point "${extension.point}"`,
+                detail: {},
+            };
+        case "extension-version-unsupported":
+            return {
+                field: "version",
+                message: `"${extension.point}" of ${extension.plugin} is at version ${String(unserved.supported)}, not ${String(extension.version)}`,
+                detail: {
+                    version: extension.version,
+                    supported: unserved.supported,
+                },
+            };
+        case "extension-personal-data-refused":
+            return {
+                field: "personalData",
+                message: `"${extension.point}" of ${extension.plugin} does not accept ${unserved.categories.join(", ")}`,
+                detail: { categories: unserved.categories },
+            };
+    }
+}
+//# sourceMappingURL=catalog.js.map

package/dist/catalog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalog.js","sourceRoot":"","sources":["../src/catalog.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7D,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EACL,qBAAqB,EACrB,6BAA6B,EAC7B,wBAAwB,EACxB,sBAAsB,EACtB,gCAAgC,EAChC,2BAA2B,EAC3B,qBAAqB,EAErB,mBAAmB,EACnB,0BAA0B,EAC1B,qBAAqB,EACrB,0BAA0B,EAC1B,qBAAqB,EACrB,kBAAkB,EAClB,uBAAuB,EACvB,cAAc,EACd,oBAAoB,EACpB,+BAA+B,GAChC,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,kBAAkB,EAClB,+BAA+B,GAChC,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,wBAAwB,EACxB,qBAAqB,EACrB,uBAAuB,GACxB,MAAM,iBAAiB,CAAC;AAEzB;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,6DAA6D;AAC7D,SAAS,gBAAgB,CAAC,QAAgB;IACxC,IAAI,CAAC;QACH,WAAW,CAAC,QAAQ,CAAC,CAAC;QACtB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,cAAc,EAAE,CAAC;YACpC,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,uDAAuD;AACvD,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,YAAY,CAAC;IAClD;;;;;;;;;OASG;IACH,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;IAChC;;;;;;;OAOG;IACH,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,gBAAgB,EAAE;QAC1D,KAAK,EACH,uEAAuE;KAC1E,CAAC;IACF,KAAK,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACjC,CAAC,CAAC;AAMH;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,0BAA0B;KAClE,MAAM,CAAC;IACN,KAAK,EAAE,mBAAmB;IAC1B,WAAW,EAAE,mBAAmB;CACjC,CAAC;KACD,MAAM,EAAE,CAAC;AAIZ,mEAAmE;AACnE,MAAM,eAAe,GAAG,CAAC,CAAC,YAAY,CAAC;IACrC;;;OAGG;IACH,EAAE,EAAE,cAAc;IAClB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IAClC,yEAAyE;IACzE,IAAI,EAAE,mBAAmB;IACzB,WAAW,EAAE,mBAAmB;IAChC,QAAQ,EAAE,qBAAqB;IAC/B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;IACzC,6EAA6E;IAC7E,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;CACvC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,wBAAwB,GAAG,eAAe;KACpD,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;IACzB;;;;OAIG;IACH,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACvC,8EAA8E;IAC9E,UAAU,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B;;;;;OAKG;IACH,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACpE,YAAY,EAAE,CAAC;SACZ,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;SAC9C,GAAG,CAAC,EAAE,CAAC;SACP,OAAO,CAAC,EAAE,CAAC;IACd;;;;;;;;;;;OAWG;IACH,OAAO,EAAE,qBAAqB,CAAC,kBAAkB,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACvE;;;;;;;;;OASG;IACH,sBAAsB,EAAE,oBAAoB,CAAC,KAAK,CAAC,sBAAsB;IACzE;;;;;;;;OAQG;IACH,eAAe,EAAE,6BAA6B,CAC5C,2BAA2B,CAC5B,CAAC,QAAQ,EAAE;IACZ;;;;OAIG;IACH,OAAO,EAAE,wBAAwB,CAC/B,qBAAqB,CAAC,MAAM,EAAE,CAC/B,CAAC,QAAQ,EAAE;IACZ;;;;;;;;OAQG;IACH,UAAU,EAAE,wBAAwB,CAClC,qBAAqB,CAAC,MAAM,EAAE,CAC/B,CAAC,QAAQ,EAAE;IACZ;;;;;;;;OAQG;IACH,YAAY,EAAE,0BAA0B,CACtC,uBAAuB,CAAC,MAAM,EAAE,CACjC,CAAC,QAAQ,EAAE;IACZ;;;;;;;;;;;;;OAaG;IACH,EAAE,EAAE,oBAAoB,CAAC,KAAK,CAAC,EAAE;IACjC;;;;;;;;;;;;OAYG;IACH,OAAO,EAAE,oBAAoB,CAAC,KAAK,CAAC,OAAO;IAC3C;;;;OAIG;IACH,QAAQ,EAAE,oBAAoB,CAAC,KAAK,CAAC,QAAQ;CAC9C,CAAC;KACD,WAAW,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;IAC1B,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QAChE,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,UAAU,CAAC;YAClB,OAAO,EACL,gEAAgE;SACnE,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAEL;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,eAAe,CAAC,MAAM,CAAC;IAC5D,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IACxB,+DAA+D;IAC/D,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC9C,4DAA4D;IAC5D,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;CAC9C,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAC7D,wBAAwB;IACxB,uBAAuB;CACxB,CAAC,CAAC;AAMH;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,EAAE,CAAC,CAAU,CAAC;AAEtD,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC;KAC3B,YAAY,CAAC;IACZ,6EAA6E;IAC7E,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,sBAAsB,CAAC;IAC1C,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;CAC9C,CAAC;KACD,WAAW,CAAC,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE;IAC5B,MAAM,OAAO,GAAG,IAAI,GAAG,EAA8B,CAAC;IACtD,MAAM,WAAW,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC9C,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;QACvD,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;YACtD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;YAC7B,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IACD,8DAA8D;IAC9D,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;IACtC,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;QACvD,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC5B,SAAS;QACX,CAAC;QACD,oEAAoE;QACpE,uBAAuB;QACvB,KAAK,MAAM,KAAK,IAAI,+BAA+B,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3D,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,cAAc,CAAC;gBACxC,OAAO,EAAE,KAAK,CAAC,OAAO;aACvB,CAAC,CAAC;QACL,CAAC;QACD;;;;WAIG;QACH,IAAI,OAAO,CAAC,OAAO,KAAK,CAAC,EAAE,CAAC;YAC1B,KAAK,MAAM,KAAK,IAAI;gBAClB,iBAAiB;gBACjB,SAAS;gBACT,cAAc;aACN,EAAE,CAAC;gBACX,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,SAAS,EAAE,CAAC;oBAC/B,GAAG,CAAC,QAAQ,CAAC;wBACX,IAAI,EAAE,QAAQ;wBACd,IAAI,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC;wBAC/B,OAAO,EAAE,GAAG,KAAK,+BAA+B;qBACjD,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YACD,SAAS;QACX,CAAC;QACD,qEAAqE;QACrE,oCAAoC;QACpC,KAAK,MAAM,KAAK,IAAI,mBAAmB,CAAC;YACtC,EAAE,EAAE,KAAK,CAAC,EAAE;YACZ,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,eAAe,EAAE,KAAK,CAAC,eAAe,IAAI,EAAE;YAC5C,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,EAAE;SAC7B,CAAC,EAAE,CAAC;YACH,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC;gBACvC,OAAO,EAAE,KAAK,CAAC,OAAO;aACvB,CAAC,CAAC;QACL,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,qBAAqB,CAAC;YACxC,YAAY,EAAE,KAAK,CAAC,YAAY,IAAI,EAAE;YACtC,sBAAsB,EAAE,KAAK,CAAC,sBAAsB;YACpD,WAAW,EAAE,KAAK,CAAC,WAAW;SAC/B,CAAC,EAAE,CAAC;YACH,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC;gBACvC,OAAO,EAAE,KAAK,CAAC,OAAO;aACvB,CAAC,CAAC;QACL,CAAC;QACD;;;;;WAKG;QACH,KAAK,MAAM,CAAC,QAAQ,EAAE,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;YACpE,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YAC3C,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACvB,SAAS;YACX,CAAC;YACD,MAAM,KAAK,GAAG;gBACZ,KAAK,EAAE,KAAK,CAAC,EAAE;gBACf,MAAM,EAAE,SAAS,CAAC,MAAM;gBACxB,KAAK,EAAE,SAAS,CAAC,KAAK;aACvB,CAAC;YACF,MAAM,QAAQ,GAAG,qBAAqB,CACpC,SAAS,EACT,IAAI,CAAC,eAAe,IAAI,EAAE,CAC3B,CAAC;YACF,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;gBACtB,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBAC1B,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,aAAa,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;gBACtE,GAAG,CAAC,QAAQ,CAAC;oBACX,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,CAAC;oBACpD,OAAO;oBACP,MAAM,EAAE;wBACN,OAAO,EAAE;4BACP,IAAI,EAAE,QAAQ,CAAC,MAAM;4BACrB,MAAM,EAAE,EAAE,GAAG,KAAK,EAAE,GAAG,MAAM,EAAE;yBACP;qBAC3B;iBACF,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YACD,MAAM,OAAO,GAAG,2BAA2B,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YACzD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACvB,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBAC1B,GAAG,CAAC,QAAQ,CAAC;oBACX,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,CAAC;oBACvD,OAAO,EAAE,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,aAAa,CAAC;wBAC/C,CAAC,CAAC,GAAG,SAAS,CAAC,MAAM,sGAAsG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;wBAC/I,CAAC,CAAC,GAAG,SAAS,CAAC,MAAM,uGAAuG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;oBAClJ,MAAM,EAAE;wBACN,OAAO,EAAE;4BACP,IAAI,EAAE,8BAA8B;4BACpC,MAAM,EAAE,EAAE,GAAG,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE;yBAClB;qBAC3B;iBACF,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YACD,MAAM,UAAU,GAAG,gCAAgC,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YACjE,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC1B,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBAC1B,GAAG,CAAC,QAAQ,CAAC;oBACX,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,CAAC;oBACvD,OAAO,EAAE,GAAG,SAAS,CAAC,MAAM,sFAAsF,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;oBACzI,MAAM,EAAE;wBACN,OAAO,EAAE;4BACP,IAAI,EAAE,sCAAsC;4BAC5C,MAAM,EAAE,EAAE,GAAG,KAAK,EAAE,UAAU,EAAE;yBACR;qBAC3B;iBACF,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,IAAI,OAAO,CAAC,OAAO,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,OAAO,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;aAClC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;aAC7C,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YACf,EAAE,EAAE,KAAK,CAAC,EAAE;YACZ,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,EAAE;SAC7B,CAAC,CAAC,CAAC;QACN,KAAK,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,IAAI,sBAAsB,CAAC,OAAO,CAAC,EAAE,CAAC;YAC5D,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,SAAS,EAAE,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC;gBACtD,OAAO,EAAE,yFAAyF,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,0DAA0D,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;gBACpN,MAAM,EAAE;oBACN,OAAO,EAAE;wBACP,IAAI,EAAE,yBAAyB;wBAC/B,MAAM,EAAE;4BACN,KAAK,EAAE,EAAE;4BACT,OAAO,EAAE,OAAO,CAAC,OAAO;4BACxB,QAAQ,EAAE,OAAO,CAAC,QAAQ;yBAC3B;qBACuB;iBAC3B;aACF,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,IAAI,OAAO,CAAC,OAAO,KAAK,CAAC,EAAE,CAAC;QAC1B,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;YACvD,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;gBAC9D,GAAG,CAAC,QAAQ,CAAC;oBACX,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,YAAY,CAAC;oBACtC,OAAO,EACL,iGAAiG;iBACpG,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;QACvD,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YAC9D,SAAS;QACX,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,uBAAuB,CACzC,KAAK,CAAC,UAAU,EAChB,KAAK,CAAC,YAAY,CACnB,EAAE,CAAC;YACF,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC;gBACvC,OAAO,EAAE,KAAK,CAAC,OAAO;aACvB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,MAAM,cAAc,GAAG,IAAI,GAAG,EAAkB,CAAC;IACjD,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;QACvD,MAAM,KAAK,GAAG,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC3C,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;YACpC,SAAS;QACX,CAAC;QACD,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC;YAC9B,OAAO,EAAE,IAAI,KAAK,CAAC,EAAE,gCAAgC,MAAM,CAAC,KAAK,CAAC,mCAAmC;SACtG,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAIL;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,yBAAyB;IACzB,+BAA+B;IAC/B,iCAAiC;IACjC,8BAA8B;IAC9B,sCAAsC;IACtC,yBAAyB;CACwB,CAAC;AA+BpD;;;;;;;;;;GAUG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAc;IAC9C,MAAM,MAAM,GAAG,aAAa,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC9C,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;IAC1C,CAAC;IACD,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACtD,KAAK,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,KAAK,KAAK,CAAC,OAAO,EAAE;QAC9D,OAAO,EAAE,gBAAgB,CAAC,KAAK,CAAC;KACjC,CAAC,CAAC,CAAC;IACJ,OAAO;QACL,EAAE,EAAE,KAAK;QACT,MAAM,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC;QACzD,WAAW;KACZ,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,KAGzB;IACC,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAChE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,OAAO,GAAI,KAAK,CAAC,MAA8C;QACnE,EAAE,OAAO,CAAC;IACZ,OAAO,OAAO,KAAK,SAAS,IAAI,gBAAgB,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC;QACrE,CAAC,CAAC,OAAO;QACT,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED,yEAAyE;AACzE,SAAS,aAAa,CACpB,SAIC,EACD,QAA+B;IAE/B,QAAQ,QAAQ,CAAC,MAAM,EAAE,CAAC;QACxB,KAAK,yBAAyB;YAC5B,OAAO;gBACL,KAAK,EAAE,OAAO;gBACd,OAAO,EAAE,GAAG,SAAS,CAAC,MAAM,iCAAiC,SAAS,CAAC,KAAK,GAAG;gBAC/E,MAAM,EAAE,EAAE;aACX,CAAC;QACJ,KAAK,+BAA+B;YAClC,OAAO;gBACL,KAAK,EAAE,SAAS;gBAChB,OAAO,EAAE,IAAI,SAAS,CAAC,KAAK,QAAQ,SAAS,CAAC,MAAM,kBAAkB,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE;gBACpI,MAAM,EAAE;oBACN,OAAO,EAAE,SAAS,CAAC,OAAO;oBAC1B,SAAS,EAAE,QAAQ,CAAC,SAAS;iBAC9B;aACF,CAAC;QACJ,KAAK,iCAAiC;YACpC,OAAO;gBACL,KAAK,EAAE,cAAc;gBACrB,OAAO,EAAE,IAAI,SAAS,CAAC,KAAK,QAAQ,SAAS,CAAC,MAAM,oBAAoB,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;gBACxG,MAAM,EAAE,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE;aAC5C,CAAC;IACN,CAAC;AACH,CAAC"}

package/dist/define-plugin.d.ts

@@ -0,0 +1,14 @@
+import type { PluginModuleFactory } from "./module.ts";
+/**
+ * Declares a plugin's server entry point.
+ *
+ * Deliberately an identity function. ADR 0003 requires a plugin to ship a
+ * prebuilt CJS bundle whose only externals are host packages, so anything
+ * this helper did at runtime would either have to be bundled into every
+ * plugin or would make the SDK a runtime dependency the host has to resolve
+ * for it. Being identity means a bundler inlines it to nothing and the value
+ * the helper adds - the type of the factory, checked at the author's build
+ * time - costs the running instance nothing.
+ */
+export declare function definePlugin(factory: PluginModuleFactory): PluginModuleFactory;
+//# sourceMappingURL=define-plugin.d.ts.map

package/dist/define-plugin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"define-plugin.d.ts","sourceRoot":"","sources":["../src/define-plugin.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAEvD;;;;;;;;;;GAUG;AACH,wBAAgB,YAAY,CAC1B,OAAO,EAAE,mBAAmB,GAC3B,mBAAmB,CAErB"}

package/dist/define-plugin.js

@@ -0,0 +1,15 @@
+/**
+ * Declares a plugin's server entry point.
+ *
+ * Deliberately an identity function. ADR 0003 requires a plugin to ship a
+ * prebuilt CJS bundle whose only externals are host packages, so anything
+ * this helper did at runtime would either have to be bundled into every
+ * plugin or would make the SDK a runtime dependency the host has to resolve
+ * for it. Being identity means a bundler inlines it to nothing and the value
+ * the helper adds - the type of the factory, checked at the author's build
+ * time - costs the running instance nothing.
+ */
+export function definePlugin(factory) {
+    return factory;
+}
+//# sourceMappingURL=define-plugin.js.map

package/dist/define-plugin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"define-plugin.js","sourceRoot":"","sources":["../src/define-plugin.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;GAUG;AACH,MAAM,UAAU,YAAY,CAC1B,OAA4B;IAE5B,OAAO,OAAO,CAAC;AACjB,CAAC"}