@opensip-cli/core 0.1.0

package/dist/plugins/loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"loader.js","sourceRoot":"","sources":["../../src/plugins/loader.ts"],"names":[],"mappings":"AAAA,mMAAmM;AACnM;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAE1C,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAIhD,6EAA6E;AAC7E,MAAM,UAAU,GAAG,cAAc,CAAC;AAiClC;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,MAAwB,EACxB,eAAkC;IAElC,MAAM,GAAG,GAAgB;QACvB,MAAM;QACN,IAAI,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE;YACzB,MAAM,CAAC,IAAI,CAAC;gBACV,GAAG;gBACH,MAAM,EAAE,UAAU;gBAClB,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,GAAG;gBACH,GAAG,MAAM;aACV,CAAC,CAAC;QACL,CAAC;QACD,KAAK,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE;YACrB,MAAM,CAAC,KAAK,CAAC;gBACX,GAAG;gBACH,MAAM,EAAE,UAAU;gBAClB,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,GAAG,MAAM;aACV,CAAC,CAAC;QACL,CAAC;KACF,CAAC;IAEF,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,aAAa,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC;QACxD,MAAM,GAAG,GAAG,CAAC,MAAM,MAAM,CAAC,SAAS,CAAC,CAA4B,CAAC;QAEjE,MAAM,UAAU,GAAG,MAAM,eAAe,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAEnD,MAAM,iBAAiB,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;QAE1E,IAAI,iBAAiB,EAAE,CAAC;YACtB,MAAM,CAAC,IAAI,CAAC;gBACV,GAAG,EAAE,0BAA0B;gBAC/B,MAAM,EAAE,UAAU;gBAClB,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,GAAG,EAAE,WAAW,MAAM,CAAC,SAAS,wCAAwC;aACzE,CAAC,CAAC;QACL,CAAC;QAED,MAAM,CAAC,IAAI,CAAC;YACV,GAAG,EAAE,4BAA4B;YACjC,MAAM,EAAE,UAAU;YAClB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,UAAU;SACX,CAAC,CAAC;QAEH,OAAO;YACL,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,UAAU;SACX,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,QAAQ,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAExE,MAAM,CAAC,IAAI,CAAC;YACV,GAAG,EAAE,0BAA0B;YAC/B,MAAM,EAAE,UAAU;YAClB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,KAAK,EAAE,QAAQ;YACf,GAAG,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;YAC/C,GAAG,EAAE,WAAW,MAAM,CAAC,SAAS,qBAAqB,QAAQ,mCAAmC;SACjG,CAAC,CAAC;QAEH,OAAO;YACL,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,UAAU,EAAE,EAAE;YACd,KAAK,EAAE,QAAQ;SAChB,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,MAAoB,EACpB,UAA8B,EAC9B,eAAkC;IAElC,MAAM,UAAU,GAAG,eAAe,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAEvD,MAAM,OAAO,GAAmB,EAAE,CAAC;IACnC,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,KAAK,MAAM,MAAM,IAAI,UAAU,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;QACzD,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACrB,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YACjB,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;IAED,iEAAiE;IACjE,+DAA+D;IAC/D,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;YAC9D,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC;QAC7C,CAAC;IACH,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AACrC,CAAC"}

package/dist/plugins/manifest-discovery.d.ts

@@ -0,0 +1,28 @@
+/**
+ * @fileoverview Validate + carry through a capability domain's optional
+ * `discovery` descriptor (§5.3) when the manifest loader normalizes a tool's
+ * `capabilities[]`. The descriptor is the datum the generic discovery substrate
+ * reads, so it must survive the loader's strip-unknown-fields normalization.
+ */
+import type { CapabilityDiscoveryDescriptor } from '../tools/capability.js';
+/**
+ * Tri-state result of parsing a capability's optional `discovery` field:
+ * - `absent` — the field is missing (the domain auto-discovers nothing).
+ * - `invalid` — the field is present but malformed (fails the whole manifest,
+ *   mirroring the strict `contributionKind` check).
+ * - `ok` — a validated descriptor to carry onto the normalized capability.
+ *
+ * Modeled as a single discriminated union (not `T | 'invalid' | undefined`) so
+ * callers branch on `.status` and every code path returns one type.
+ */
+export type DiscoveryParse = {
+    readonly status: 'absent';
+} | {
+    readonly status: 'invalid';
+} | {
+    readonly status: 'ok';
+    readonly descriptor: CapabilityDiscoveryDescriptor;
+};
+/** Parse + validate a capability's `discovery` field into a {@link DiscoveryParse}. */
+export declare function normalizeDiscovery(value: unknown): DiscoveryParse;
+//# sourceMappingURL=manifest-discovery.d.ts.map

package/dist/plugins/manifest-discovery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest-discovery.d.ts","sourceRoot":"","sources":["../../src/plugins/manifest-discovery.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,KAAK,EAEV,6BAA6B,EAE9B,MAAM,wBAAwB,CAAC;AAEhC;;;;;;;;;GASG;AACH,MAAM,MAAM,cAAc,GACtB;IAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAA;CAAE,GAC7B;IAAE,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAA;CAAE,GAC9B;IAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,6BAA6B,CAAA;CAAE,CAAC;AAElF,uFAAuF;AACvF,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,cAAc,CAgCjE"}

package/dist/plugins/manifest-discovery.js

@@ -0,0 +1,103 @@
+/**
+ * @fileoverview Validate + carry through a capability domain's optional
+ * `discovery` descriptor (§5.3) when the manifest loader normalizes a tool's
+ * `capabilities[]`. The descriptor is the datum the generic discovery substrate
+ * reads, so it must survive the loader's strip-unknown-fields normalization.
+ */
+import { isRecord, isStringArray } from './json-guards.js';
+/** Parse + validate a capability's `discovery` field into a {@link DiscoveryParse}. */
+export function normalizeDiscovery(value) {
+    if (value === undefined)
+        return { status: 'absent' };
+    if (!isRecord(value))
+        return { status: 'invalid' };
+    const mode = normalizeDiscoveryMode(value.discovery);
+    if (mode === undefined)
+        return { status: 'invalid' };
+    if (typeof value.exportName !== 'string' || value.exportName === '')
+        return { status: 'invalid' };
+    if (value.exportShape !== 'array' && value.exportShape !== 'single')
+        return { status: 'invalid' };
+    const configKeys = normalizeConfigKeys(value.configKeys);
+    if (configKeys === undefined)
+        return { status: 'invalid' };
+    if (value.builtinScope !== undefined && typeof value.builtinScope !== 'string')
+        return { status: 'invalid' };
+    if (value.explicitListMode !== undefined &&
+        value.explicitListMode !== 'replace' &&
+        value.explicitListMode !== 'augment') {
+        return { status: 'invalid' };
+    }
+    const co = normalizeCoContributions(value.coContributions);
+    if (co.status === 'invalid')
+        return { status: 'invalid' };
+    return {
+        status: 'ok',
+        descriptor: {
+            discovery: mode,
+            exportName: value.exportName,
+            exportShape: value.exportShape,
+            configKeys,
+            ...(value.builtinScope === undefined ? {} : { builtinScope: value.builtinScope }),
+            ...(value.explicitListMode === undefined ? {} : { explicitListMode: value.explicitListMode }),
+            ...(co.status === 'ok' ? { coContributions: co.value } : {}),
+        },
+    };
+}
+/** Validate the optional `coContributions` array (each: exportName + exportShape + domainId). */
+function normalizeCoContributions(value) {
+    if (value === undefined)
+        return { status: 'absent' };
+    if (!Array.isArray(value))
+        return { status: 'invalid' };
+    const out = [];
+    for (const entry of value) {
+        if (!isRecord(entry))
+            return { status: 'invalid' };
+        if (typeof entry.exportName !== 'string' || entry.exportName === '')
+            return { status: 'invalid' };
+        if (entry.exportShape !== 'array' && entry.exportShape !== 'single')
+            return { status: 'invalid' };
+        if (typeof entry.domainId !== 'string' || entry.domainId === '')
+            return { status: 'invalid' };
+        out.push({
+            exportName: entry.exportName,
+            exportShape: entry.exportShape,
+            domainId: entry.domainId,
+        });
+    }
+    return { status: 'ok', value: out };
+}
+/** Validate the optional, all-string `configKeys` map. Returns `undefined` on any non-string member. */
+function normalizeConfigKeys(value) {
+    if (!isRecord(value))
+        return undefined;
+    for (const k of ['packages', 'autoDiscover', 'scopes']) {
+        if (value[k] !== undefined && typeof value[k] !== 'string')
+            return undefined;
+    }
+    return {
+        ...(value.packages === undefined ? {} : { packages: value.packages }),
+        ...(value.autoDiscover === undefined ? {} : { autoDiscover: value.autoDiscover }),
+        ...(value.scopes === undefined ? {} : { scopes: value.scopes }),
+    };
+}
+/** Validate the discriminated discovery mode (marker | name-pattern). */
+function normalizeDiscoveryMode(value) {
+    if (!isRecord(value))
+        return undefined;
+    if (value.mode === 'marker') {
+        return typeof value.markerKind === 'string' && value.markerKind !== ''
+            ? { mode: 'marker', markerKind: value.markerKind }
+            : undefined;
+    }
+    if (value.mode === 'name-pattern') {
+        if (typeof value.prefix !== 'string' || value.prefix === '')
+            return undefined;
+        if (!isStringArray(value.defaultScopes))
+            return undefined;
+        return { mode: 'name-pattern', prefix: value.prefix, defaultScopes: value.defaultScopes };
+    }
+    return undefined;
+}
+//# sourceMappingURL=manifest-discovery.js.map

package/dist/plugins/manifest-discovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest-discovery.js","sourceRoot":"","sources":["../../src/plugins/manifest-discovery.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAuB3D,uFAAuF;AACvF,MAAM,UAAU,kBAAkB,CAAC,KAAc;IAC/C,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IACrD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IACnD,MAAM,IAAI,GAAG,sBAAsB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACrD,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IACrD,IAAI,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,IAAI,KAAK,CAAC,UAAU,KAAK,EAAE;QAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAClG,IAAI,KAAK,CAAC,WAAW,KAAK,OAAO,IAAI,KAAK,CAAC,WAAW,KAAK,QAAQ;QAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAClG,MAAM,UAAU,GAAG,mBAAmB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACzD,IAAI,UAAU,KAAK,SAAS;QAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAC3D,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ;QAC5E,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAC/B,IACE,KAAK,CAAC,gBAAgB,KAAK,SAAS;QACpC,KAAK,CAAC,gBAAgB,KAAK,SAAS;QACpC,KAAK,CAAC,gBAAgB,KAAK,SAAS,EACpC,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAC/B,CAAC;IACD,MAAM,EAAE,GAAG,wBAAwB,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;IAC3D,IAAI,EAAE,CAAC,MAAM,KAAK,SAAS;QAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAC1D,OAAO;QACL,MAAM,EAAE,IAAI;QACZ,UAAU,EAAE;YACV,SAAS,EAAE,IAAI;YACf,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,UAAU;YACV,GAAG,CAAC,KAAK,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC;YACjF,GAAG,CAAC,KAAK,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,EAAE,CAAC;YAC7F,GAAG,CAAC,EAAE,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC7D;KACF,CAAC;AACJ,CAAC;AAQD,iGAAiG;AACjG,SAAS,wBAAwB,CAAC,KAAc;IAC9C,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IACrD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IACxD,MAAM,GAAG,GAA+B,EAAE,CAAC;IAC3C,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;QAC1B,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QACnD,IAAI,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,IAAI,KAAK,CAAC,UAAU,KAAK,EAAE;YACjE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QAC/B,IAAI,KAAK,CAAC,WAAW,KAAK,OAAO,IAAI,KAAK,CAAC,WAAW,KAAK,QAAQ;YACjE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QAC/B,IAAI,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,QAAQ,KAAK,EAAE;YAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QAC9F,GAAG,CAAC,IAAI,CAAC;YACP,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,QAAQ,EAAE,KAAK,CAAC,QAAQ;SACzB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;AACtC,CAAC;AAED,wGAAwG;AACxG,SAAS,mBAAmB,CAC1B,KAAc;IAEd,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACvC,KAAK,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,cAAc,EAAE,QAAQ,CAAU,EAAE,CAAC;QAChE,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;IAC/E,CAAC;IACD,OAAO;QACL,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAkB,EAAE,CAAC;QAC/E,GAAG,CAAC,KAAK,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,YAAsB,EAAE,CAAC;QAC3F,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAgB,EAAE,CAAC;KAC1E,CAAC;AACJ,CAAC;AAED,yEAAyE;AACzE,SAAS,sBAAsB,CAAC,KAAc;IAC5C,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACvC,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC5B,OAAO,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,IAAI,KAAK,CAAC,UAAU,KAAK,EAAE;YACpE,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE;YAClD,CAAC,CAAC,SAAS,CAAC;IAChB,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;QAClC,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,EAAE;YAAE,OAAO,SAAS,CAAC;QAC9E,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,aAAa,CAAC;YAAE,OAAO,SAAS,CAAC;QAC1D,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,CAAC;IAC5F,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/plugins/manifest-loader.d.ts

@@ -0,0 +1,120 @@
+/**
+ * @fileoverview Static manifest reader + the single admission gate
+ * (launch, raw-vs-admitted compatibility contract).
+ *
+ * `loadToolManifest` reads a tool's static front matter **before**
+ * importing its runtime `Tool` module:
+ *
+ *   - **bundled** / **installed** — `package.json#opensipTools` in the tool's
+ *     own package dir (one read for both; the discovery walker already
+ *     touches these package.json files).
+ *   - **project-local** / **user-global** — a JSON sidecar
+ *     (`opensip-tool.manifest.json`) in the tool's directory, since an
+ *     authored tool is authored content, not an installed npm package with a
+ *     package.json marker. Both authored sources read the SAME sidecar; only
+ *     their trust posture differs (deny-by-default vs trusted-by-default),
+ *     which is the admission caller's concern, not the loader's.
+ *
+ * It validates the raw identity subset (`kind: 'tool'`, `id`, `commands`),
+ * derives `name`/`version` from the package.json's own top-level fields
+ * (the manifest block does NOT redeclare them — single source of truth),
+ * validates concrete additive descriptors such as `capabilities`, and returns
+ * `undefined` (with a structured logger diagnostic) on a malformed or missing
+ * manifest. A missing `apiVersion` is still representable as a
+ * `RawToolPluginManifest` so `admitTool` can reject it with a compatibility
+ * diagnostic. It NEVER imports the tool module.
+ *
+ * `admitTool` is the single gate the bundled and external paths share: it
+ * records `ToolProvenance` (incl. a `manifestHash` over the canonical
+ * manifest JSON) and runs `checkCompatibility(manifest.apiVersion)`:
+ *   - compatible                       → `admit`
+ *   - incompatible + not requested     → `skip` (with diagnostic)
+ *   - incompatible + explicitly asked  → `fail-closed` (with diagnostic)
+ * It emits exactly one structured logger evt per decision.
+ *
+ * Both functions are pure over real filesystem reads of package.json /
+ * the sidecar — no tool-module import, no module singletons. They stay in
+ * core (the kernel) and import nothing from contracts/cli/tools-runtime.
+ */
+import { type CompatibilityVerdict } from '../tools/compatibility.js';
+import type { RawToolPluginManifest, ToolPluginManifest, ToolProvenance, ToolSource } from '../tools/manifest.js';
+/**
+ * Filename of the project-local manifest sidecar. A project-local tool is
+ * authored content under `<project>/opensip-cli/…`, not an installed npm
+ * package, so it has no `package.json#opensipTools` marker — it declares
+ * its identity via this JSON sidecar (deliberately NOT an executable
+ * `.mjs`, so the host reads identity without running tool code).
+ */
+export declare const PROJECT_LOCAL_MANIFEST_FILE = "opensip-tool.manifest.json";
+/**
+ * Read + validate a tool's static `ToolPluginManifest` for the given
+ * source, WITHOUT importing the tool's runtime module.
+ *
+ *   - `bundled` / `installed` — reads `<dir>/package.json`, taking identity
+ *     from the `opensipTools` block and `name`/`version` from the
+ *     package.json's own top-level fields.
+ *   - `project-local` / `user-global` — reads
+ *     `<dir>/opensip-tool.manifest.json` (the JSON sidecar), which carries the
+ *     full identity inline. Both authored sources share the sidecar branch.
+ *
+ * @param source Where the tool came from — selects the manifest location.
+ * @param dir The tool's package/authoring directory.
+ * @returns The validated manifest, or `undefined` (with a structured
+ *   `plugin.manifest.read_failed` diagnostic) when the file is missing,
+ *   unparseable, or fails identity validation.
+ */
+export declare function loadToolManifest(source: ToolSource, dir: string): RawToolPluginManifest | undefined;
+/**
+ * The outcome of the single admission gate — the decision plus the
+ * `ToolProvenance` recorded regardless of verdict (so an incompatible
+ * tool can still be surfaced) and the underlying `CompatibilityVerdict`.
+ *
+ *   - `admit`        — compatible; the host may import + register the tool.
+ *   - `skip`         — incompatible but not explicitly requested: dropped
+ *                      silently from the user's perspective (diagnostic only).
+ *   - `fail-closed`  — incompatible AND explicitly requested: the host must
+ *                      fail with the Phase-0 incompatible exit code.
+ */
+export type AdmissionResult = {
+    readonly decision: 'admit';
+    readonly provenance: ToolProvenance;
+    readonly verdict: Extract<CompatibilityVerdict, {
+        kind: 'compatible';
+    }>;
+    readonly manifest: ToolPluginManifest;
+    readonly diagnostic?: undefined;
+} | {
+    readonly decision: 'skip' | 'fail-closed';
+    readonly provenance: ToolProvenance;
+    readonly verdict: CompatibilityVerdict;
+    readonly diagnostic?: string;
+};
+/**
+ * Run the single compatibility gate over a manifest and produce an
+ * {@link AdmissionResult}. Records `ToolProvenance` (source + identity +
+ * `manifestHash`) regardless of verdict, then maps the
+ * `checkCompatibility` outcome to a decision:
+ *
+ *   - compatible                          → `admit`
+ *   - incompatible + `!explicitlyRequested` → `skip`
+ *   - incompatible + `explicitlyRequested`  → `fail-closed`
+ *
+ * Emits exactly one structured logger evt per decision
+ * (`plugin.manifest.loaded` / `plugin.incompatible.skipped` /
+ * `plugin.incompatible.failed`). Never throws, never imports the tool.
+ *
+ * @param args.manifest The validated manifest (from {@link loadToolManifest}).
+ * @param args.source Where the tool came from.
+ * @param args.dir The tool's resolved directory (recorded as `resolvedPath`).
+ * @param args.packageName npm package name, when known (bundled/installed).
+ * @param args.explicitlyRequested Whether the user named this tool directly
+ *   (e.g. via a plugin pin) — promotes an incompatible `skip` to `fail-closed`.
+ */
+export declare function admitTool(args: {
+    readonly manifest: RawToolPluginManifest;
+    readonly source: ToolSource;
+    readonly dir: string;
+    readonly packageName?: string;
+    readonly explicitlyRequested: boolean;
+}): AdmissionResult;
+//# sourceMappingURL=manifest-loader.d.ts.map

package/dist/plugins/manifest-loader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest-loader.d.ts","sourceRoot":"","sources":["../../src/plugins/manifest-loader.ts"],"names":[],"mappings":"AACA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AAOH,OAAO,EAAsB,KAAK,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAO1F,OAAO,KAAK,EACV,qBAAqB,EAErB,kBAAkB,EAClB,cAAc,EACd,UAAU,EACX,MAAM,sBAAsB,CAAC;AAE9B;;;;;;GAMG;AACH,eAAO,MAAM,2BAA2B,+BAA+B,CAAC;AAKxE;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,UAAU,EAClB,GAAG,EAAE,MAAM,GACV,qBAAqB,GAAG,SAAS,CAgBnC;AAED;;;;;;;;;;GAUG;AACH,MAAM,MAAM,eAAe,GACvB;IACE,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,cAAc,CAAC;IACpC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,oBAAoB,EAAE;QAAE,IAAI,EAAE,YAAY,CAAA;KAAE,CAAC,CAAC;IACxE,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAC;IACtC,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,CAAC;CACjC,GACD;IACE,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,aAAa,CAAC;IAC1C,QAAQ,CAAC,UAAU,EAAE,cAAc,CAAC;IACpC,QAAQ,CAAC,OAAO,EAAE,oBAAoB,CAAC;IACvC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B,CAAC;AAEN;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,SAAS,CAAC,IAAI,EAAE;IAC9B,QAAQ,CAAC,QAAQ,EAAE,qBAAqB,CAAC;IACzC,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,mBAAmB,EAAE,OAAO,CAAC;CACvC,GAAG,eAAe,CAmElB"}