@opensip-cli/core 0.1.0

package/dist/plugins/discover.js

@@ -0,0 +1,303 @@
+// @fitness-ignore-file error-handling-quality -- safeIsDirectory/safeIsFile/isPathInside are filesystem probes where exception → false is the function's contract; missing path or unresolvable realpath legitimately means "not present" / "not inside", not a swallowed error.
+/**
+ * @fileoverview Plugin discovery for the project-local layout.
+ *
+ * Discovery is descriptor-driven: the caller passes a `PluginLayout`
+ * (`{ domain, userSubdirs }`) declared by the owning tool. The kernel
+ * never enumerates tool domains itself (ADR-0009 corollary 1). Two
+ * artifact sources are walked for the layout:
+ *
+ *   1. USER SOURCE — recursive `.js` / `.mjs` files under
+ *      `<project>/opensip-cli/<domain>/<kind>/`
+ *      for each `kind` in `layout.userSubdirs` (e.g. `checks`/`recipes`
+ *      for fitness, `scenarios`/`recipes` for simulation). Auto-loaded
+ *      by directory presence; no config opt-in.
+ *
+ *   2. NPM PLUGINS — packages installed under
+ *      `<project>/opensip-cli/.runtime/plugins/<domain>/node_modules/`
+ *      whose names appear in the project's
+ *      `opensip-cli.config.yml#plugins.<domain>: [...]`. The explicit
+ *      list is required so a `plugin install` step is intentional, not
+ *      an accidental load of every transitive devDep.
+ *
+ * A layout with an empty `userSubdirs` and no declared npm plugins
+ * (e.g. the language-adapter domain, whose adapters ship as direct CLI
+ * deps) discovers nothing — an emergent property, not a special case.
+ */
+import { existsSync, readdirSync, statSync } from 'node:fs';
+import { join, extname, relative, sep } from 'node:path';
+import { resolveProjectConfigPath } from '../config-resolution.js';
+import { logger } from '../lib/logger.js';
+import { isPathInside, resolveProjectPaths } from '../lib/paths.js';
+import { readYamlFile } from '../lib/yaml.js';
+import { resolvePackageEntryPoint } from './package-entry.js';
+/** Logger module tag used by every event in this file. */
+const MODULE_TAG = 'core:plugins';
+// =============================================================================
+// PUBLIC ENTRY POINT
+// =============================================================================
+/**
+ * Discover all plugins for a layout in the project layout.
+ *
+ * Returns a list of `DiscoveredPlugin` entries (loose .mjs files +
+ * npm packages) for the loader to import. Discovery is silent on a
+ * missing project directory or absent subdirs — callers that care
+ * about "did we find anything?" should check the returned length.
+ *
+ * @param layout      The owning tool's `PluginLayout` (`{ domain,
+ *                    userSubdirs }`).
+ * @param projectDir  Project root. Required — there is no user-global
+ *                    fallback. Pass undefined to discover nothing
+ *                    (used by callers that don't have a project
+ *                    context yet).
+ */
+export function discoverPlugins(layout, projectDir) {
+    if (!projectDir)
+        return [];
+    const { domain, userSubdirs } = layout;
+    const projectPaths = resolveProjectPaths(projectDir);
+    const plugins = [];
+    // 1. User-source loose files: opensip-cli/<domain>/<kind>/*.{js,mjs}
+    const toolDir = join(projectPaths.userSourceDir, domain);
+    for (const kind of userSubdirs) {
+        const kindDir = join(toolDir, kind);
+        if (!existsSync(kindDir))
+            continue;
+        plugins.push(...discoverLooseFiles(kindDir, `${domain}/${kind}`));
+    }
+    // 2. Npm-installed plugins under .runtime/plugins/<domain>/.
+    //    Only walked when the config explicitly declares
+    //    plugins.<domain>: [...]. The runtime dir is gitignored, so
+    //    silently auto-loading anything in it would be a recipe for
+    //    "where did this check come from?" surprises. Explicit listing
+    //    is the contract for npm plugins.
+    const declared = readProjectPluginsList(projectDir, domain);
+    if (declared && declared.length > 0) {
+        const pluginsDir = projectPaths.pluginsDir(domain);
+        const nodeModulesDir = join(pluginsDir, 'node_modules');
+        if (existsSync(nodeModulesDir)) {
+            plugins.push(...discoverNpmPackages(nodeModulesDir, declared));
+        }
+    }
+    logger.info({
+        evt: 'plugin.loader.discover',
+        module: MODULE_TAG,
+        domain,
+        packageCount: plugins.filter((p) => p.type === 'package').length,
+        fileCount: plugins.filter((p) => p.type === 'file').length,
+    });
+    return plugins;
+}
+// =============================================================================
+// CONFIG READING (plugins.<domain> from opensip-cli.config.yml)
+// =============================================================================
+/**
+ * Read the declared plugin list for a domain from the project config.
+ * Returns undefined when the config is absent, unreadable, or has no
+ * entry for the domain. Does NOT throw on YAML parse errors — returns
+ * undefined so discovery falls through gracefully and the config-layer
+ * schema validation surfaces parse errors on its own path.
+ *
+ * Config-path resolution mirrors `resolveProjectConfigPath` (the same
+ * helper the targets loader uses): --config flag → `package.json#
+ * opensip-cli.configPath` pointer → default `<projectDir>/opensip-
+ * tools.config.yml`. Without this, projects that locate their config
+ * via the package.json pointer have their `plugins.<domain>: [...]`
+ * declaration silently ignored — discovery falls through to the empty
+ * default path and the plugin pack never registers.
+ *
+ * The `--config` precedence is honored only when callers pass through
+ * their explicit value via `explicitConfigPath`; this entry point is
+ * the implicit one (no --config available at the discovery seam), so
+ * we resolve without an explicit path and rely on the pointer + default.
+ */
+export function readProjectPluginsList(projectDir, domain) {
+    let configPath;
+    try {
+        configPath = resolveProjectConfigPath(projectDir);
+    }
+    catch {
+        // resolveProjectConfigPath throws on "no config found anywhere" —
+        // discovery is implicit (no --config), so a missing config falls
+        // through gracefully here (the explicit-path layer surfaces its own
+        // error when the caller asked for one).
+        return undefined;
+    }
+    // Parse YAML via the shared permissive helper to avoid a circular dep
+    // between plugins/ and targets/. We only need the `plugins.<domain>`
+    // array; anything else is validated by the targets loader.
+    const doc = readYamlFile(configPath);
+    if (!doc || typeof doc !== 'object')
+        return undefined;
+    const plugins = doc.plugins;
+    if (!plugins || typeof plugins !== 'object')
+        return undefined;
+    const list = plugins[domain];
+    if (!Array.isArray(list))
+        return undefined;
+    return list.filter((v) => typeof v === 'string');
+}
+// =============================================================================
+// NPM PACKAGE DISCOVERY
+// =============================================================================
+function discoverNpmPackages(nodeModulesDir, declared) {
+    const plugins = [];
+    for (const name of declared) {
+        // Reject names that could traverse before they ever touch the filesystem.
+        // The plugin list comes from opensip-cli.config.yml — user-controlled
+        // content under a project that runs `opensip fit` would otherwise
+        // act as an attacker-influenced input flowing into a path join.
+        if (name.length === 0 || name.includes('..') || name.startsWith('/') || name.includes('\0')) {
+            logger.warn({
+                evt: 'plugin.loader.discover.reject',
+                module: MODULE_TAG,
+                reason: 'invalid plugin name',
+                name,
+            });
+            continue;
+        }
+        const packageDir = join(nodeModulesDir, name);
+        // Containment check: the resolved real path (after symlinks) must
+        // stay inside node_modules. Catches symlink-based escapes if an
+        // attacker plants a symlink.
+        if (!isPathInside(packageDir, nodeModulesDir)) {
+            logger.warn({
+                evt: 'plugin.loader.discover.reject',
+                module: MODULE_TAG,
+                reason: 'package path resolves outside node_modules',
+                name,
+            });
+            continue;
+        }
+        const plugin = tryDiscoverPackage(packageDir, name);
+        if (plugin)
+            plugins.push(plugin);
+    }
+    return plugins;
+}
+function tryDiscoverPackage(packageDir, name) {
+    if (!safeIsDirectory(packageDir))
+        return undefined;
+    const resolved = resolvePackageEntryPoint(packageDir, name);
+    if (!resolved) {
+        logger.debug({
+            evt: 'plugin.loader.discover.skip',
+            module: MODULE_TAG,
+            reason: 'invalid package.json',
+            name,
+        });
+        return undefined;
+    }
+    // Containment check: the resolved entry must stay inside `packageDir`
+    // after symlink resolution. A malicious or accidentally-malformed
+    // `pkg.main` / `pkg.exports` such as `../../escape.js` would otherwise
+    // traverse out of node_modules and be dynamically imported. The earlier
+    // package-dir containment check (discoverNpmPackages) does not cover
+    // the entry-file path, so we re-check it here.
+    if (!isPathInside(resolved.entry, packageDir)) {
+        logger.warn({
+            evt: 'plugin.loader.discover.reject',
+            module: MODULE_TAG,
+            reason: 'entry point resolves outside package directory',
+            name,
+            entry: resolved.entry,
+        });
+        return undefined;
+    }
+    if (!existsSync(resolved.entry)) {
+        logger.debug({
+            evt: 'plugin.loader.discover.skip',
+            module: MODULE_TAG,
+            reason: 'entry point not found',
+            packageName: resolved.name,
+            entryPoint: resolved.entry,
+        });
+        return undefined;
+    }
+    return {
+        type: 'package',
+        entryPoint: resolved.entry,
+        namespace: resolved.name,
+        source: resolved.name,
+    };
+}
+// =============================================================================
+// LOOSE FILE DISCOVERY
+// =============================================================================
+const LOOSE_FILE_EXTENSIONS = new Set(['.js', '.mjs']);
+function discoverLooseFiles(dir, namespacePrefix) {
+    return discoverLooseFilesInDir(dir, namespacePrefix, dir);
+}
+function discoverLooseFilesInDir(dir, namespacePrefix, rootDir) {
+    const plugins = [];
+    let entries;
+    try {
+        entries = readdirSync(dir);
+    }
+    catch {
+        return plugins;
+    }
+    for (const entry of entries) {
+        const fullPath = join(dir, entry);
+        if (safeIsDirectory(fullPath)) {
+            if (!isPathInside(fullPath, rootDir)) {
+                logger.warn({
+                    evt: 'plugin.loader.discover.reject',
+                    module: MODULE_TAG,
+                    reason: 'loose file directory resolves outside plugin dir',
+                    entry,
+                });
+                continue;
+            }
+            plugins.push(...discoverLooseFilesInDir(fullPath, namespacePrefix, rootDir));
+            continue;
+        }
+        const ext = extname(entry);
+        if (!LOOSE_FILE_EXTENSIONS.has(ext))
+            continue;
+        if (!safeIsFile(fullPath))
+            continue;
+        if (!isPathInside(fullPath, rootDir)) {
+            logger.warn({
+                evt: 'plugin.loader.discover.reject',
+                module: MODULE_TAG,
+                reason: 'loose file resolves outside plugin dir',
+                entry,
+            });
+            continue;
+        }
+        const relativePath = normalizePluginRelativePath(relative(rootDir, fullPath));
+        const namespacePath = relativePath.slice(0, -ext.length);
+        plugins.push({
+            type: 'file',
+            entryPoint: fullPath,
+            namespace: `${namespacePrefix}/${namespacePath}`,
+            source: relativePath,
+        });
+    }
+    return plugins;
+}
+function normalizePluginRelativePath(path) {
+    return path.split(sep).join('/');
+}
+// =============================================================================
+// HELPERS
+// =============================================================================
+function safeIsDirectory(path) {
+    try {
+        return statSync(path).isDirectory();
+    }
+    catch {
+        return false;
+    }
+}
+function safeIsFile(path) {
+    try {
+        return statSync(path).isFile();
+    }
+    catch {
+        return false;
+    }
+}
+// isPathInside is centralized in core (lib/paths) for reuse by targeting etc.
+//# sourceMappingURL=discover.js.map

package/dist/plugins/discover.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"discover.js","sourceRoot":"","sources":["../../src/plugins/discover.ts"],"names":[],"mappings":"AAAA,iRAAiR;AACjR;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC5D,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAEzD,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AACnE,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC1C,OAAO,EAAE,YAAY,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACpE,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAE9C,OAAO,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAI9D,0DAA0D;AAC1D,MAAM,UAAU,GAAG,cAAc,CAAC;AAElC,gFAAgF;AAChF,qBAAqB;AACrB,gFAAgF;AAEhF;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,eAAe,CAAC,MAAoB,EAAE,UAAmB;IACvE,IAAI,CAAC,UAAU;QAAE,OAAO,EAAE,CAAC;IAE3B,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,CAAC;IACvC,MAAM,YAAY,GAAG,mBAAmB,CAAC,UAAU,CAAC,CAAC;IACrD,MAAM,OAAO,GAAuB,EAAE,CAAC;IAEvC,qEAAqE;IACrE,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;IACzD,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;YAAE,SAAS;QACnC,OAAO,CAAC,IAAI,CAAC,GAAG,kBAAkB,CAAC,OAAO,EAAE,GAAG,MAAM,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;IACpE,CAAC;IAED,6DAA6D;IAC7D,qDAAqD;IACrD,gEAAgE;IAChE,gEAAgE;IAChE,mEAAmE;IACnE,sCAAsC;IACtC,MAAM,QAAQ,GAAG,sBAAsB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAC5D,IAAI,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpC,MAAM,UAAU,GAAG,YAAY,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QACnD,MAAM,cAAc,GAAG,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;QACxD,IAAI,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;YAC/B,OAAO,CAAC,IAAI,CAAC,GAAG,mBAAmB,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;IAED,MAAM,CAAC,IAAI,CAAC;QACV,GAAG,EAAE,wBAAwB;QAC7B,MAAM,EAAE,UAAU;QAClB,MAAM;QACN,YAAY,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,MAAM;QAChE,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,MAAM;KAC3D,CAAC,CAAC;IAEH,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,gFAAgF;AAChF,gEAAgE;AAChE,gFAAgF;AAEhF;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,sBAAsB,CACpC,UAAkB,EAClB,MAAc;IAEd,IAAI,UAAkB,CAAC;IACvB,IAAI,CAAC;QACH,UAAU,GAAG,wBAAwB,CAAC,UAAU,CAAC,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,kEAAkE;QAClE,iEAAiE;QACjE,oEAAoE;QACpE,wCAAwC;QACxC,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,sEAAsE;IACtE,qEAAqE;IACrE,2DAA2D;IAC3D,MAAM,GAAG,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;IACrC,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IACtD,MAAM,OAAO,GAAI,GAA+B,CAAC,OAAO,CAAC;IACzD,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC9D,MAAM,IAAI,GAAI,OAAmC,CAAC,MAAM,CAAC,CAAC;IAC1D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IAC3C,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC;AAChE,CAAC;AAED,gFAAgF;AAChF,wBAAwB;AACxB,gFAAgF;AAEhF,SAAS,mBAAmB,CAC1B,cAAsB,EACtB,QAA2B;IAE3B,MAAM,OAAO,GAAuB,EAAE,CAAC;IAEvC,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC5B,0EAA0E;QAC1E,sEAAsE;QACtE,kEAAkE;QAClE,gEAAgE;QAChE,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5F,MAAM,CAAC,IAAI,CAAC;gBACV,GAAG,EAAE,+BAA+B;gBACpC,MAAM,EAAE,UAAU;gBAClB,MAAM,EAAE,qBAAqB;gBAC7B,IAAI;aACL,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,MAAM,UAAU,GAAG,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;QAC9C,kEAAkE;QAClE,gEAAgE;QAChE,6BAA6B;QAC7B,IAAI,CAAC,YAAY,CAAC,UAAU,EAAE,cAAc,CAAC,EAAE,CAAC;YAC9C,MAAM,CAAC,IAAI,CAAC;gBACV,GAAG,EAAE,+BAA+B;gBACpC,MAAM,EAAE,UAAU;gBAClB,MAAM,EAAE,4CAA4C;gBACpD,IAAI;aACL,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,MAAM,MAAM,GAAG,kBAAkB,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QACpD,IAAI,MAAM;YAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACnC,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,kBAAkB,CAAC,UAAkB,EAAE,IAAY;IAC1D,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC;QAAE,OAAO,SAAS,CAAC;IAEnD,MAAM,QAAQ,GAAG,wBAAwB,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IAC5D,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,CAAC,KAAK,CAAC;YACX,GAAG,EAAE,6BAA6B;YAClC,MAAM,EAAE,UAAU;YAClB,MAAM,EAAE,sBAAsB;YAC9B,IAAI;SACL,CAAC,CAAC;QACH,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,sEAAsE;IACtE,kEAAkE;IAClE,uEAAuE;IACvE,wEAAwE;IACxE,qEAAqE;IACrE,+CAA+C;IAC/C,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC,EAAE,CAAC;QAC9C,MAAM,CAAC,IAAI,CAAC;YACV,GAAG,EAAE,+BAA+B;YACpC,MAAM,EAAE,UAAU;YAClB,MAAM,EAAE,gDAAgD;YACxD,IAAI;YACJ,KAAK,EAAE,QAAQ,CAAC,KAAK;SACtB,CAAC,CAAC;QACH,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAChC,MAAM,CAAC,KAAK,CAAC;YACX,GAAG,EAAE,6BAA6B;YAClC,MAAM,EAAE,UAAU;YAClB,MAAM,EAAE,uBAAuB;YAC/B,WAAW,EAAE,QAAQ,CAAC,IAAI;YAC1B,UAAU,EAAE,QAAQ,CAAC,KAAK;SAC3B,CAAC,CAAC;QACH,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO;QACL,IAAI,EAAE,SAAS;QACf,UAAU,EAAE,QAAQ,CAAC,KAAK;QAC1B,SAAS,EAAE,QAAQ,CAAC,IAAI;QACxB,MAAM,EAAE,QAAQ,CAAC,IAAI;KACtB,CAAC;AACJ,CAAC;AAED,gFAAgF;AAChF,uBAAuB;AACvB,gFAAgF;AAEhF,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;AAEvD,SAAS,kBAAkB,CAAC,GAAW,EAAE,eAAuB;IAC9D,OAAO,uBAAuB,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,CAAC,CAAC;AAC5D,CAAC;AAED,SAAS,uBAAuB,CAC9B,GAAW,EACX,eAAuB,EACvB,OAAe;IAEf,MAAM,OAAO,GAAuB,EAAE,CAAC;IAEvC,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAClC,IAAI,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC9B,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,CAAC;gBACrC,MAAM,CAAC,IAAI,CAAC;oBACV,GAAG,EAAE,+BAA+B;oBACpC,MAAM,EAAE,UAAU;oBAClB,MAAM,EAAE,kDAAkD;oBAC1D,KAAK;iBACN,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,GAAG,uBAAuB,CAAC,QAAQ,EAAE,eAAe,EAAE,OAAO,CAAC,CAAC,CAAC;YAC7E,SAAS;QACX,CAAC;QAED,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;QAC3B,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAC9C,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;YAAE,SAAS;QACpC,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,CAAC;YACrC,MAAM,CAAC,IAAI,CAAC;gBACV,GAAG,EAAE,+BAA+B;gBACpC,MAAM,EAAE,UAAU;gBAClB,MAAM,EAAE,wCAAwC;gBAChD,KAAK;aACN,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,MAAM,YAAY,GAAG,2BAA2B,CAAC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;QAC9E,MAAM,aAAa,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAEzD,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,MAAM;YACZ,UAAU,EAAE,QAAQ;YACpB,SAAS,EAAE,GAAG,eAAe,IAAI,aAAa,EAAE;YAChD,MAAM,EAAE,YAAY;SACrB,CAAC,CAAC;IACL,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,2BAA2B,CAAC,IAAY;IAC/C,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACnC,CAAC;AAED,gFAAgF;AAChF,UAAU;AACV,gFAAgF;AAEhF,SAAS,eAAe,CAAC,IAAY;IACnC,IAAI,CAAC;QACH,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,IAAY;IAC9B,IAAI,CAAC;QACH,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,8EAA8E"}

package/dist/plugins/index.d.ts

@@ -0,0 +1,37 @@
+/**
+ * @fileoverview Plugin system barrel export
+ *
+ * Public API for plugin discovery and the kernel-level plugin types.
+ * The generic plugin loader lives here too — tools (fitness, sim) plug
+ * a domain-specific registerExports callback in. Tool-specific
+ * discovery helpers (check-package-discovery, scenario-package-
+ * discovery) still live with the tool that owns them.
+ */
+export { discoverPlugins, readProjectPluginsList } from './discover.js';
+export { loadPlugin, loadAllPlugins } from './loader.js';
+export type { RegisterCtx, RegisteredCounts, RegisterExportsFn } from './loader.js';
+export { resolvePackageEntryPoint } from './package-entry.js';
+export { VALID_NPM_SCOPE_REGEX, resolveScopes } from './scope-validation.js';
+export type { PackageEntryResolution } from './package-entry.js';
+export { discoverToolPackages, discoverToolPackagesFromAnchors, readToolPackageMetadata, } from './tool-package-discovery.js';
+export type { ToolPackageDiscoveryOptions, ToolDiscoverySource, DiscoveredToolPackage, ToolPackageMetadata, } from './tool-package-discovery.js';
+export { isRecord, isStringArray } from './json-guards.js';
+export { discoverPackagesByMarker, discoverPackagesByDeclaredKind, discoverPackagesInNodeModules, isMarkerKind, readMarkerKind, readDeclaredKind, MARKER_KINDS, } from './marker-discovery.js';
+export type { DiscoveredDeclaredPackage } from './marker-discovery.js';
+export { discoverCapabilityContributions } from './capability-discovery.js';
+export type { CapabilityDiscoveryPreferences, RawCapabilityContribution, CapabilityDiscoveryDiagnostic, DiscoverCapabilityContributionsOptions, } from './capability-discovery.js';
+export { discoverScopedPackages, hasPackageJson, resolvePackageDir } from './node-modules-walk.js';
+export type { DiscoveredScopedPackage, DiscoverScopedPackagesOptions, } from './node-modules-walk.js';
+export type { MarkerKind, MarkerDiscoveryOptions, DiscoveredMarkerPackage, } from './marker-discovery.js';
+export { loadToolManifest, admitTool, PROJECT_LOCAL_MANIFEST_FILE } from './manifest-loader.js';
+export type { AdmissionResult } from './manifest-loader.js';
+export { discoverAuthoredToolSidecars } from './authored-tool-discovery.js';
+export type { AuthoredToolCandidate } from './authored-tool-discovery.js';
+export { CapabilityRegistry, createCapabilityRegistry, currentCapabilityRegistry, registerCapabilityDomainsFromManifest, } from './capability-registry.js';
+export type { CapabilityRegistrar } from './capability-registry.js';
+export { loadCapabilityDomain } from './capability-loader.js';
+export type { LoadCapabilityDomainOptions } from './capability-loader.js';
+export { registerRecipesFromMod } from './recipe-loader.js';
+export type { RegisterRecipesOptions, RegisterRecipesResult } from './recipe-loader.js';
+export type { PluginLayout, DiscoveredPlugin, LoadedPlugin, PluginLoadResult, LangPluginExports, PluginExports, } from './types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/plugins/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/plugins/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,eAAe,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AACxE,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AACzD,YAAY,EAAE,WAAW,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AACpF,OAAO,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,qBAAqB,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC7E,YAAY,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AACjE,OAAO,EACL,oBAAoB,EACpB,+BAA+B,EAC/B,uBAAuB,GACxB,MAAM,6BAA6B,CAAC;AACrC,YAAY,EACV,2BAA2B,EAC3B,mBAAmB,EACnB,qBAAqB,EACrB,mBAAmB,GACpB,MAAM,6BAA6B,CAAC;AAIrC,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EACL,wBAAwB,EACxB,8BAA8B,EAC9B,6BAA6B,EAC7B,YAAY,EACZ,cAAc,EACd,gBAAgB,EAChB,YAAY,GACb,MAAM,uBAAuB,CAAC;AAC/B,YAAY,EAAE,yBAAyB,EAAE,MAAM,uBAAuB,CAAC;AAIvE,OAAO,EAAE,+BAA+B,EAAE,MAAM,2BAA2B,CAAC;AAC5E,YAAY,EACV,8BAA8B,EAC9B,yBAAyB,EACzB,6BAA6B,EAC7B,sCAAsC,GACvC,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,sBAAsB,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AACnG,YAAY,EACV,uBAAuB,EACvB,6BAA6B,GAC9B,MAAM,wBAAwB,CAAC;AAChC,YAAY,EACV,UAAU,EACV,sBAAsB,EACtB,uBAAuB,GACxB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,gBAAgB,EAAE,SAAS,EAAE,2BAA2B,EAAE,MAAM,sBAAsB,CAAC;AAChG,YAAY,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAI5D,OAAO,EAAE,4BAA4B,EAAE,MAAM,8BAA8B,CAAC;AAC5E,YAAY,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AAK1E,OAAO,EACL,kBAAkB,EAClB,wBAAwB,EACxB,yBAAyB,EACzB,qCAAqC,GACtC,MAAM,0BAA0B,CAAC;AAClC,YAAY,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAIpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC9D,YAAY,EAAE,2BAA2B,EAAE,MAAM,wBAAwB,CAAC;AAC1E,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAC5D,YAAY,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AACxF,YAAY,EACV,YAAY,EACZ,gBAAgB,EAChB,YAAY,EACZ,gBAAgB,EAChB,iBAAiB,EACjB,aAAa,GACd,MAAM,YAAY,CAAC"}

package/dist/plugins/index.js

@@ -0,0 +1,40 @@
+/**
+ * @fileoverview Plugin system barrel export
+ *
+ * Public API for plugin discovery and the kernel-level plugin types.
+ * The generic plugin loader lives here too — tools (fitness, sim) plug
+ * a domain-specific registerExports callback in. Tool-specific
+ * discovery helpers (check-package-discovery, scenario-package-
+ * discovery) still live with the tool that owns them.
+ */
+export { discoverPlugins, readProjectPluginsList } from './discover.js';
+export { loadPlugin, loadAllPlugins } from './loader.js';
+export { resolvePackageEntryPoint } from './package-entry.js';
+export { VALID_NPM_SCOPE_REGEX, resolveScopes } from './scope-validation.js';
+export { discoverToolPackages, discoverToolPackagesFromAnchors, readToolPackageMetadata, } from './tool-package-discovery.js';
+// Universal JSON-value guards shared by the manifest loader, the discovery
+// normalizer, and the config-layer preference resolver (one definition, no
+// cross-package duplicated bodies).
+export { isRecord, isStringArray } from './json-guards.js';
+export { discoverPackagesByMarker, discoverPackagesByDeclaredKind, discoverPackagesInNodeModules, isMarkerKind, readMarkerKind, readDeclaredKind, MARKER_KINDS, } from './marker-discovery.js';
+// The generic capability-contribution discovery substrate (§5.3): one walker
+// over marker + name-pattern modes that the host registry drives, replacing the
+// three bespoke per-tool loaders. Yields raw contributions for routing.
+export { discoverCapabilityContributions } from './capability-discovery.js';
+export { discoverScopedPackages, hasPackageJson, resolvePackageDir } from './node-modules-walk.js';
+export { loadToolManifest, admitTool, PROJECT_LOCAL_MANIFEST_FILE } from './manifest-loader.js';
+// Authored-Tool sidecar discovery: a source-agnostic walk over a single
+// authored `tools/` root that returns sidecar-bearing candidate dirs. The
+// host assigns the ToolSource per root (project vs user-global).
+export { discoverAuthoredToolSidecars } from './authored-tool-discovery.js';
+// Scope-owned capability registry (launch, §5.3): the host-side
+// runtime that registers manifest-declared capability domains and routes
+// contributions to their owning tool's registrar. Per-RunScope — mirrors
+// the simulation scenario-registry template.
+export { CapabilityRegistry, createCapabilityRegistry, currentCapabilityRegistry, registerCapabilityDomainsFromManifest, } from './capability-registry.js';
+// The scope-owned capability loader (§5.3, Phase 2): drives the generic
+// discovery substrate for one domain and routes every contribution through
+// `routeContribution` — the live conduit. Memoized per scope (fixes F1).
+export { loadCapabilityDomain } from './capability-loader.js';
+export { registerRecipesFromMod } from './recipe-loader.js';
+//# sourceMappingURL=index.js.map

package/dist/plugins/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/plugins/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,eAAe,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AACxE,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAEzD,OAAO,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,qBAAqB,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAE7E,OAAO,EACL,oBAAoB,EACpB,+BAA+B,EAC/B,uBAAuB,GACxB,MAAM,6BAA6B,CAAC;AAOrC,2EAA2E;AAC3E,2EAA2E;AAC3E,oCAAoC;AACpC,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EACL,wBAAwB,EACxB,8BAA8B,EAC9B,6BAA6B,EAC7B,YAAY,EACZ,cAAc,EACd,gBAAgB,EAChB,YAAY,GACb,MAAM,uBAAuB,CAAC;AAE/B,6EAA6E;AAC7E,gFAAgF;AAChF,wEAAwE;AACxE,OAAO,EAAE,+BAA+B,EAAE,MAAM,2BAA2B,CAAC;AAO5E,OAAO,EAAE,sBAAsB,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAUnG,OAAO,EAAE,gBAAgB,EAAE,SAAS,EAAE,2BAA2B,EAAE,MAAM,sBAAsB,CAAC;AAEhG,wEAAwE;AACxE,0EAA0E;AAC1E,iEAAiE;AACjE,OAAO,EAAE,4BAA4B,EAAE,MAAM,8BAA8B,CAAC;AAE5E,gEAAgE;AAChE,yEAAyE;AACzE,yEAAyE;AACzE,6CAA6C;AAC7C,OAAO,EACL,kBAAkB,EAClB,wBAAwB,EACxB,yBAAyB,EACzB,qCAAqC,GACtC,MAAM,0BAA0B,CAAC;AAElC,wEAAwE;AACxE,2EAA2E;AAC3E,yEAAyE;AACzE,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAE9D,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/plugins/json-guards.d.ts

@@ -0,0 +1,11 @@
+/**
+ * @fileoverview Universal JSON-value type guards shared by the manifest loader
+ * and the capability-discovery normalizer. Kept tiny and dependency-free — these
+ * are the shallow shape checks that gate untrusted manifest JSON before it is
+ * read as a typed structure.
+ */
+/** Type guard: a value is a plain `Record<string, unknown>` (object, non-null, non-array). */
+export declare function isRecord(value: unknown): value is Record<string, unknown>;
+/** Type guard: a value is a `readonly string[]`. */
+export declare function isStringArray(value: unknown): value is readonly string[];
+//# sourceMappingURL=json-guards.d.ts.map

package/dist/plugins/json-guards.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"json-guards.d.ts","sourceRoot":"","sources":["../../src/plugins/json-guards.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,8FAA8F;AAC9F,wBAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAEzE;AAED,oDAAoD;AACpD,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,SAAS,MAAM,EAAE,CAExE"}

package/dist/plugins/json-guards.js

@@ -0,0 +1,15 @@
+/**
+ * @fileoverview Universal JSON-value type guards shared by the manifest loader
+ * and the capability-discovery normalizer. Kept tiny and dependency-free — these
+ * are the shallow shape checks that gate untrusted manifest JSON before it is
+ * read as a typed structure.
+ */
+/** Type guard: a value is a plain `Record<string, unknown>` (object, non-null, non-array). */
+export function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+/** Type guard: a value is a `readonly string[]`. */
+export function isStringArray(value) {
+    return Array.isArray(value) && value.every((a) => typeof a === 'string');
+}
+//# sourceMappingURL=json-guards.js.map

package/dist/plugins/json-guards.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"json-guards.js","sourceRoot":"","sources":["../../src/plugins/json-guards.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,8FAA8F;AAC9F,MAAM,UAAU,QAAQ,CAAC,KAAc;IACrC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,oDAAoD;AACpD,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC;AAC3E,CAAC"}

package/dist/plugins/loader.d.ts

@@ -0,0 +1,67 @@
+/**
+ * @fileoverview Generic plugin loader.
+ *
+ * Owns the machinery that's identical for every plugin domain:
+ *
+ *   1. Discover plugins for a domain (via discoverPlugins).
+ *   2. Dynamic-import each discovered entry point.
+ *   3. Hand the imported module to a domain-supplied `registerExports`
+ *      callback that performs the actual registration (into the fitness
+ *      check registry, the sim scenario registry, the kernel language
+ *      registry, etc.).
+ *   4. Roll up per-plugin counts into a PluginLoadResult, catching and
+ *      reporting per-plugin failures without aborting the whole batch.
+ *
+ * What we deliberately do NOT own here: the *contents* of registration.
+ * Each domain (fit, sim, lang) knows what shape its plugins export and
+ * which registry to feed; that lives with the tool that owns the
+ * registry. The callback receives a `RegisterCtx` so it can emit
+ * structured warnings without re-deriving plugin metadata.
+ *
+ * This file replaces what used to be a fit-coupled loader in
+ * @opensip-cli/fitness. The fitness loader is now a thin adapter
+ * that supplies a fit-specific registerExports callback and re-exports
+ * loadPlugin / loadAllPlugins with the same public signatures it had
+ * before, so existing callers (fit.ts) don't change.
+ */
+import type { DiscoveredPlugin, LoadedPlugin, PluginLayout, PluginLoadResult } from './types.js';
+/**
+ * Per-plugin context handed to a domain's `registerExports` callback.
+ * Lets the callback emit structured warnings (with namespace/source
+ * already filled in) without re-deriving plugin metadata.
+ */
+export interface RegisterCtx {
+    readonly plugin: DiscoveredPlugin;
+    /** Emit a structured warning about a malformed plugin export. */
+    readonly warn: (evt: string, msg: string, fields?: Record<string, unknown>) => void;
+    /** Emit a structured debug event. */
+    readonly debug: (evt: string, fields?: Record<string, unknown>) => void;
+}
+/**
+ * Per-plugin registration counts returned from the callback — a generic
+ * map keyed by whatever artifact kinds the domain registers (e.g.
+ * `{ checks: 3, recipes: 1 }`, `{ scenarios: 2 }`, `{ adapters: 1 }`).
+ * The kernel carries no tool-specific counter names (ADR-0009 M2).
+ */
+export type RegisteredCounts = Readonly<Record<string, number>>;
+/**
+ * Callback that registers a plugin's exports into the right registries
+ * for its domain. Returns the per-kind counts for that plugin. Kinds a
+ * domain doesn't produce are simply absent from the map.
+ */
+export type RegisterExportsFn = (mod: Record<string, unknown>, ctx: RegisterCtx) => Promise<RegisteredCounts> | RegisteredCounts;
+/**
+ * Load a single discovered plugin: dynamic-import its entry, run the
+ * domain's `registerExports` callback, and wrap any thrown error so a
+ * single bad plugin doesn't take down the rest of the batch.
+ */
+export declare function loadPlugin(plugin: DiscoveredPlugin, registerExports: RegisterExportsFn): Promise<LoadedPlugin>;
+/**
+ * Discover and load every plugin for a domain. Plugins are loaded
+ * sequentially to keep registration order deterministic.
+ *
+ * Without `projectDir`, no plugins are discovered — there is no
+ * user-global fallback, by design.
+ */
+export declare function loadAllPlugins(layout: PluginLayout, projectDir: string | undefined, registerExports: RegisterExportsFn): Promise<PluginLoadResult>;
+//# sourceMappingURL=loader.d.ts.map

package/dist/plugins/loader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"loader.d.ts","sourceRoot":"","sources":["../../src/plugins/loader.ts"],"names":[],"mappings":"AACA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAQH,OAAO,KAAK,EAAE,gBAAgB,EAAE,YAAY,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAKjG;;;;GAIG;AACH,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;IAClC,iEAAiE;IACjE,QAAQ,CAAC,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IACpF,qCAAqC;IACrC,QAAQ,CAAC,KAAK,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;CACzE;AAED;;;;;GAKG;AACH,MAAM,MAAM,gBAAgB,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AAEhE;;;;GAIG;AACH,MAAM,MAAM,iBAAiB,GAAG,CAC9B,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC5B,GAAG,EAAE,WAAW,KACb,OAAO,CAAC,gBAAgB,CAAC,GAAG,gBAAgB,CAAC;AAElD;;;;GAIG;AACH,wBAAsB,UAAU,CAC9B,MAAM,EAAE,gBAAgB,EACxB,eAAe,EAAE,iBAAiB,GACjC,OAAO,CAAC,YAAY,CAAC,CA6EvB;AAED;;;;;;GAMG;AACH,wBAAsB,cAAc,CAClC,MAAM,EAAE,YAAY,EACpB,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,eAAe,EAAE,iBAAiB,GACjC,OAAO,CAAC,gBAAgB,CAAC,CAwB3B"}

package/dist/plugins/loader.js

@@ -0,0 +1,137 @@
+// @fitness-ignore-file performance-anti-patterns -- sequential await across discovered plugin modules preserves load order for deterministic conflict detection; bounded by installed plugin count
+/**
+ * @fileoverview Generic plugin loader.
+ *
+ * Owns the machinery that's identical for every plugin domain:
+ *
+ *   1. Discover plugins for a domain (via discoverPlugins).
+ *   2. Dynamic-import each discovered entry point.
+ *   3. Hand the imported module to a domain-supplied `registerExports`
+ *      callback that performs the actual registration (into the fitness
+ *      check registry, the sim scenario registry, the kernel language
+ *      registry, etc.).
+ *   4. Roll up per-plugin counts into a PluginLoadResult, catching and
+ *      reporting per-plugin failures without aborting the whole batch.
+ *
+ * What we deliberately do NOT own here: the *contents* of registration.
+ * Each domain (fit, sim, lang) knows what shape its plugins export and
+ * which registry to feed; that lives with the tool that owns the
+ * registry. The callback receives a `RegisterCtx` so it can emit
+ * structured warnings without re-deriving plugin metadata.
+ *
+ * This file replaces what used to be a fit-coupled loader in
+ * @opensip-cli/fitness. The fitness loader is now a thin adapter
+ * that supplies a fit-specific registerExports callback and re-exports
+ * loadPlugin / loadAllPlugins with the same public signatures it had
+ * before, so existing callers (fit.ts) don't change.
+ */
+import { pathToFileURL } from 'node:url';
+import { logger } from '../lib/logger.js';
+import { discoverPlugins } from './discover.js';
+/** Logger module tag used by every event emitted from the generic loader. */
+const MODULE_TAG = 'core:plugins';
+/**
+ * Load a single discovered plugin: dynamic-import its entry, run the
+ * domain's `registerExports` callback, and wrap any thrown error so a
+ * single bad plugin doesn't take down the rest of the batch.
+ */
+export async function loadPlugin(plugin, registerExports) {
+    const ctx = {
+        plugin,
+        warn: (evt, msg, fields) => {
+            logger.warn({
+                evt,
+                module: MODULE_TAG,
+                namespace: plugin.namespace,
+                source: plugin.source,
+                msg,
+                ...fields,
+            });
+        },
+        debug: (evt, fields) => {
+            logger.debug({
+                evt,
+                module: MODULE_TAG,
+                namespace: plugin.namespace,
+                source: plugin.source,
+                ...fields,
+            });
+        },
+    };
+    try {
+        const moduleUrl = pathToFileURL(plugin.entryPoint).href;
+        const mod = (await import(moduleUrl));
+        const registered = await registerExports(mod, ctx);
+        const nothingRegistered = Object.values(registered).every((n) => n === 0);
+        if (nothingRegistered) {
+            logger.warn({
+                evt: 'plugin.loader.no_exports',
+                module: MODULE_TAG,
+                namespace: plugin.namespace,
+                source: plugin.source,
+                msg: `Plugin "${plugin.namespace}" registered nothing — nothing to run.`,
+            });
+        }
+        logger.info({
+            evt: 'plugin.loader.load.success',
+            module: MODULE_TAG,
+            namespace: plugin.namespace,
+            source: plugin.source,
+            registered,
+        });
+        return {
+            namespace: plugin.namespace,
+            source: plugin.source,
+            type: plugin.type,
+            registered,
+        };
+    }
+    catch (error) {
+        const errorMsg = error instanceof Error ? error.message : String(error);
+        logger.warn({
+            evt: 'plugin.loader.load.error',
+            module: MODULE_TAG,
+            namespace: plugin.namespace,
+            source: plugin.source,
+            error: errorMsg,
+            err: error instanceof Error ? error : undefined,
+            msg: `Plugin "${plugin.namespace}" failed to load: ${errorMsg}. Continuing without this plugin.`,
+        });
+        return {
+            namespace: plugin.namespace,
+            source: plugin.source,
+            type: plugin.type,
+            registered: {},
+            error: errorMsg,
+        };
+    }
+}
+/**
+ * Discover and load every plugin for a domain. Plugins are loaded
+ * sequentially to keep registration order deterministic.
+ *
+ * Without `projectDir`, no plugins are discovered — there is no
+ * user-global fallback, by design.
+ */
+export async function loadAllPlugins(layout, projectDir, registerExports) {
+    const discovered = discoverPlugins(layout, projectDir);
+    const plugins = [];
+    const errors = [];
+    for (const plugin of discovered) {
+        const result = await loadPlugin(plugin, registerExports);
+        plugins.push(result);
+        if (result.error) {
+            errors.push(`${result.source}: ${result.error}`);
+        }
+    }
+    // Sum each plugin's per-kind counts into generic totals. No tool
+    // vocabulary here — whatever keys the domain reported roll up.
+    const totals = {};
+    for (const plugin of plugins) {
+        for (const [kind, count] of Object.entries(plugin.registered)) {
+            totals[kind] = (totals[kind] ?? 0) + count;
+        }
+    }
+    return { plugins, totals, errors };
+}
+//# sourceMappingURL=loader.js.map