@opentabs-dev/mcp-server 0.0.19

package/dist/discovery-legacy.js

@@ -0,0 +1,415 @@
+/**
+ * Legacy plugin discovery (opentabs-plugin.json based).
+ *
+ * Provides the old discoverPlugins and loadPluginFromDir functions that read
+ * opentabs-plugin.json manifests. Used by reload.ts and file-watcher.ts until
+ * they are migrated to the new package.json-based pipeline in later stories.
+ *
+ * This file will be deleted once US-009 (reload.ts), US-012 (file-watcher.ts),
+ * and US-020 (cleanup) are complete.
+ */
+import { browserTools } from './browser-tools/index.js';
+import { log } from './logger.js';
+import { parseManifest } from './manifest-schema.js';
+import { isAllowedPluginPath } from './resolver.js';
+import { validatePluginName, validateUrlPattern } from '@opentabs-dev/shared';
+import { readdir, stat } from 'node:fs/promises';
+import { join, resolve, dirname } from 'node:path';
+import { fileURLToPath } from 'node:url';
+/**
+ * The mcp-server package root directory, resolved from this module's URL.
+ * Used as the default rootDir for npm plugin discovery so that `node_modules`
+ * scanning works regardless of the process's working directory.
+ */
+const PACKAGE_DIR = resolve(dirname(fileURLToPath(import.meta.url)), '..');
+/**
+ * Extract the plugin name from an npm package name.
+ * opentabs-plugin-slack → slack
+ * @myorg/opentabs-plugin-jira → myorg-jira
+ */
+const pluginNameFromPackage = (pkgName) => {
+    if (pkgName.startsWith('@')) {
+        // Scoped: @scope/opentabs-plugin-name → scope-name
+        const parts = pkgName.split('/');
+        const scopePart = parts[0] ?? '';
+        const namePart = parts[1] ?? '';
+        const scope = scopePart.slice(1); // remove @
+        const pluginSuffix = namePart.replace(/^opentabs-plugin-/, '');
+        return `${scope}-${pluginSuffix}`;
+    }
+    return pkgName.replace(/^opentabs-plugin-/, '');
+};
+/**
+ * Determine trust tier from how the plugin was discovered.
+ */
+const determineTrustTierLegacy = (pkgName, isLocal) => {
+    if (isLocal)
+        return 'local';
+    if (pkgName && pkgName.startsWith('@opentabs-dev/'))
+        return 'official';
+    return 'community';
+};
+/**
+ * Browser tool names that should not appear in plugin tool descriptions.
+ * Presence of these names may indicate a prompt injection attempt where
+ * a plugin tries to instruct the AI agent to invoke browser-level tools.
+ * Derived from the browserTools array so the list stays in sync automatically.
+ */
+const BROWSER_TOOL_NAMES = browserTools.map(t => t.name);
+/**
+ * Check plugin tool descriptions for references to browser tool names.
+ * Returns an array of { toolName, browserToolName } for each match found.
+ */
+const checkBrowserToolReferences = (tools) => {
+    const matches = [];
+    for (const tool of tools) {
+        const descLower = tool.description.toLowerCase();
+        for (const btName of BROWSER_TOOL_NAMES) {
+            if (descLower.includes(btName)) {
+                matches.push({ toolName: tool.name, browserToolName: btName });
+            }
+        }
+    }
+    return matches;
+};
+/**
+ * Load a single plugin from a directory.
+ * Reads opentabs-plugin.json and dist/adapter.iife.js.
+ */
+const loadPluginFromDir = async (dir, trustTier, npmPkgName, sourcePath) => {
+    const manifestPath = join(dir, 'opentabs-plugin.json');
+    const iifePath = join(dir, 'dist', 'adapter.iife.js');
+    // Read and validate manifest
+    const manifestRaw = await Bun.file(manifestPath).text();
+    const manifest = parseManifest(manifestRaw, manifestPath);
+    // Derive the internal plugin name.
+    // Handles both bare names ("slack") and legacy prefixed names ("opentabs-plugin-slack").
+    let pluginName;
+    if (npmPkgName) {
+        pluginName = pluginNameFromPackage(npmPkgName);
+        const manifestBare = manifest.name.replace(/^opentabs-plugin-/, '');
+        if (manifestBare !== pluginName) {
+            log.warn(`Plugin manifest name "${manifest.name}" doesn't match package name "${npmPkgName}" (expected plugin name: ${pluginName}, got: ${manifestBare})`);
+        }
+    }
+    else {
+        // Local plugin — strip legacy prefix if present
+        pluginName = manifest.name.replace(/^opentabs-plugin-/, '');
+    }
+    // Validate plugin name
+    const nameError = validatePluginName(pluginName);
+    if (nameError) {
+        throw new Error(nameError);
+    }
+    // Validate URL patterns
+    for (const pattern of manifest.url_patterns) {
+        const patternError = validateUrlPattern(pattern);
+        if (patternError)
+            throw new Error(patternError);
+    }
+    // Warn if any tool description references browser tool names (possible prompt injection)
+    for (const match of checkBrowserToolReferences(manifest.tools)) {
+        log.warn(`Plugin "${pluginName}" tool "${match.toolName}" description references browser tool "${match.browserToolName}" — possible prompt injection attempt`);
+    }
+    // Read IIFE — reject missing, empty, or oversized files
+    const MAX_IIFE_SIZE = 5 * 1024 * 1024;
+    const iifeFile = Bun.file(iifePath);
+    if (!(await iifeFile.exists())) {
+        throw new Error(`Adapter IIFE not found at ${iifePath}`);
+    }
+    const iifeSize = iifeFile.size;
+    if (iifeSize > MAX_IIFE_SIZE) {
+        throw new Error(`Adapter IIFE for "${pluginName}" is ${(iifeSize / 1024 / 1024).toFixed(1)}MB, exceeding the 5MB limit`);
+    }
+    const iife = await iifeFile.text();
+    if (iife.length === 0) {
+        throw new Error(`Adapter IIFE at ${iifePath} is empty — rebuild the plugin`);
+    }
+    return {
+        name: pluginName,
+        version: manifest.version,
+        displayName: manifest.displayName,
+        urlPatterns: manifest.url_patterns,
+        trustTier,
+        iife,
+        tools: manifest.tools.map(t => ({
+            name: t.name,
+            displayName: t.displayName,
+            description: t.description,
+            icon: t.icon,
+            input_schema: t.input_schema,
+            output_schema: t.output_schema,
+        })),
+        adapterHash: manifest.adapterHash,
+        sourcePath,
+        npmPackageName: npmPkgName ?? undefined,
+    };
+};
+/**
+ * Check if a directory exists and is accessible.
+ */
+const dirExists = async (path) => {
+    try {
+        const s = await stat(path);
+        return s.isDirectory();
+    }
+    catch {
+        return false;
+    }
+};
+/**
+ * Check if a file exists and is accessible.
+ */
+const fileExists = async (path) => Bun.file(path).exists();
+/**
+ * Scan node_modules for opentabs plugins.
+ * Looks for:
+ * 1. node_modules/opentabs-plugin-* directories
+ * 2. node_modules/@* /opentabs-plugin-* directories (scoped packages)
+ * 3. Any package with 'opentabs-plugin' keyword in package.json
+ *
+ * Only packages listed in allowedPackages are loaded. Discovered packages
+ * not in the allow list are logged as skipped with instructions to add them.
+ */
+const discoverFromNodeModules = async (rootDir, allowedPackages) => {
+    const allowedSet = new Set(allowedPackages);
+    const results = [];
+    const nodeModulesDir = join(rootDir, 'node_modules');
+    if (!(await dirExists(nodeModulesDir))) {
+        return results;
+    }
+    let entries;
+    try {
+        entries = await readdir(nodeModulesDir);
+    }
+    catch {
+        return results;
+    }
+    // Track already-discovered package dirs to avoid duplicate keyword scan
+    const discoveredDirs = new Set();
+    // 1. Direct matches: opentabs-plugin-*
+    for (const entry of entries) {
+        if (!entry.startsWith('opentabs-plugin-'))
+            continue;
+        const pkgDir = join(nodeModulesDir, entry);
+        if (!(await dirExists(pkgDir)))
+            continue;
+        if (!(await fileExists(join(pkgDir, 'opentabs-plugin.json'))))
+            continue;
+        if (!allowedSet.has(entry)) {
+            log.info(`Skipping npm plugin "${entry}" — not listed in config.npmPlugins. Add it to ~/.opentabs/config.json to enable.`);
+            discoveredDirs.add(pkgDir);
+            continue;
+        }
+        const trustTier = determineTrustTierLegacy(entry, false);
+        try {
+            const plugin = await loadPluginFromDir(pkgDir, trustTier, entry);
+            results.push({ plugin, source: `node_modules/${entry}` });
+            discoveredDirs.add(pkgDir);
+        }
+        catch (err) {
+            log.error(`Failed to load plugin from node_modules/${entry}:`, err);
+        }
+    }
+    // 2. Scoped packages: @scope/opentabs-plugin-*
+    for (const entry of entries) {
+        if (!entry.startsWith('@'))
+            continue;
+        const scopeDir = join(nodeModulesDir, entry);
+        if (!(await dirExists(scopeDir)))
+            continue;
+        let scopeEntries;
+        try {
+            scopeEntries = await readdir(scopeDir);
+        }
+        catch {
+            continue;
+        }
+        for (const scopeEntry of scopeEntries) {
+            if (!scopeEntry.startsWith('opentabs-plugin-'))
+                continue;
+            const pkgDir = join(scopeDir, scopeEntry);
+            if (!(await dirExists(pkgDir)))
+                continue;
+            if (!(await fileExists(join(pkgDir, 'opentabs-plugin.json'))))
+                continue;
+            const fullPkgName = `${entry}/${scopeEntry}`;
+            if (!allowedSet.has(fullPkgName)) {
+                log.info(`Skipping npm plugin "${fullPkgName}" — not listed in config.npmPlugins. Add it to ~/.opentabs/config.json to enable.`);
+                discoveredDirs.add(pkgDir);
+                continue;
+            }
+            const trustTier = determineTrustTierLegacy(fullPkgName, false);
+            try {
+                const plugin = await loadPluginFromDir(pkgDir, trustTier, fullPkgName);
+                results.push({
+                    plugin,
+                    source: `node_modules/${fullPkgName}`,
+                });
+                discoveredDirs.add(pkgDir);
+            }
+            catch (err) {
+                log.error(`Failed to load plugin from node_modules/${fullPkgName}:`, err);
+            }
+        }
+    }
+    // 3. Keyword fallback: scan remaining packages for 'opentabs-plugin' keyword.
+    // Check for opentabs-plugin.json first (cheap stat) before reading package.json (expensive parse).
+    for (const entry of entries) {
+        if (entry.startsWith('.') || entry.startsWith('@'))
+            continue;
+        if (entry.startsWith('opentabs-plugin-'))
+            continue; // Already checked
+        const pkgDir = join(nodeModulesDir, entry);
+        if (discoveredDirs.has(pkgDir))
+            continue;
+        if (!(await dirExists(pkgDir)))
+            continue;
+        if (!(await fileExists(join(pkgDir, 'opentabs-plugin.json'))))
+            continue;
+        const pkgJsonPath = join(pkgDir, 'package.json');
+        if (!(await fileExists(pkgJsonPath)))
+            continue;
+        try {
+            const pkgJson = JSON.parse(await Bun.file(pkgJsonPath).text());
+            const keywords = pkgJson.keywords;
+            if (!Array.isArray(keywords) || !keywords.includes('opentabs-plugin'))
+                continue;
+            if (!allowedSet.has(entry)) {
+                log.info(`Skipping npm plugin "${entry}" — not listed in config.npmPlugins. Add it to ~/.opentabs/config.json to enable.`);
+                discoveredDirs.add(pkgDir);
+                continue;
+            }
+            const trustTier = determineTrustTierLegacy(entry, false);
+            const plugin = await loadPluginFromDir(pkgDir, trustTier, entry);
+            results.push({ plugin, source: `node_modules/${entry} (keyword)` });
+            discoveredDirs.add(pkgDir);
+        }
+        catch (err) {
+            log.error(`Failed to load plugin from node_modules/${entry} (keyword):`, err);
+        }
+    }
+    // Keyword scan for scoped packages too
+    for (const entry of entries) {
+        if (!entry.startsWith('@'))
+            continue;
+        const scopeDir = join(nodeModulesDir, entry);
+        if (!(await dirExists(scopeDir)))
+            continue;
+        let scopeEntries;
+        try {
+            scopeEntries = await readdir(scopeDir);
+        }
+        catch {
+            continue;
+        }
+        for (const scopeEntry of scopeEntries) {
+            if (scopeEntry.startsWith('opentabs-plugin-'))
+                continue; // Already checked
+            const pkgDir = join(scopeDir, scopeEntry);
+            if (discoveredDirs.has(pkgDir))
+                continue;
+            if (!(await dirExists(pkgDir)))
+                continue;
+            if (!(await fileExists(join(pkgDir, 'opentabs-plugin.json'))))
+                continue;
+            const pkgJsonPath = join(pkgDir, 'package.json');
+            if (!(await fileExists(pkgJsonPath)))
+                continue;
+            try {
+                const pkgJson = JSON.parse(await Bun.file(pkgJsonPath).text());
+                const keywords = pkgJson.keywords;
+                if (!Array.isArray(keywords) || !keywords.includes('opentabs-plugin'))
+                    continue;
+                const fullPkgName = `${entry}/${scopeEntry}`;
+                if (!allowedSet.has(fullPkgName)) {
+                    log.info(`Skipping npm plugin "${fullPkgName}" — not listed in config.npmPlugins. Add it to ~/.opentabs/config.json to enable.`);
+                    discoveredDirs.add(pkgDir);
+                    continue;
+                }
+                const trustTier = determineTrustTierLegacy(fullPkgName, false);
+                const plugin = await loadPluginFromDir(pkgDir, trustTier, fullPkgName);
+                results.push({
+                    plugin,
+                    source: `node_modules/${fullPkgName} (keyword)`,
+                });
+                discoveredDirs.add(pkgDir);
+            }
+            catch (err) {
+                log.error(`Failed to load plugin from node_modules/${entry}/${scopeEntry} (keyword):`, err);
+            }
+        }
+    }
+    return results;
+};
+const discoverFromLocalPaths = async (paths) => {
+    const results = [];
+    const failures = [];
+    for (const pluginPath of paths) {
+        const resolvedPath = resolve(pluginPath);
+        if (!(await isAllowedPluginPath(resolvedPath))) {
+            const msg = `Rejected plugin path outside allowed directories: ${resolvedPath}`;
+            log.warn(msg);
+            failures.push({ path: resolvedPath, error: 'Path is outside allowed directories' });
+            continue;
+        }
+        if (!(await dirExists(resolvedPath))) {
+            const msg = `Local plugin path does not exist: ${resolvedPath}`;
+            log.warn(msg);
+            failures.push({ path: resolvedPath, error: 'Directory does not exist' });
+            continue;
+        }
+        if (!(await fileExists(join(resolvedPath, 'opentabs-plugin.json')))) {
+            const msg = `No opentabs-plugin.json found at: ${resolvedPath}`;
+            log.warn(msg);
+            failures.push({ path: resolvedPath, error: 'No opentabs-plugin.json found' });
+            continue;
+        }
+        try {
+            const plugin = await loadPluginFromDir(resolvedPath, 'local', null, resolvedPath);
+            results.push({ plugin, source: resolvedPath });
+        }
+        catch (err) {
+            const errorMsg = err instanceof Error ? err.message : String(err);
+            log.error(`Failed to load local plugin from ${resolvedPath}:`, err);
+            failures.push({ path: resolvedPath, error: errorMsg });
+        }
+    }
+    return { results, failures };
+};
+/**
+ * Legacy plugin discovery using opentabs-plugin.json manifests.
+ * Discovers from both node_modules and local filesystem paths.
+ *
+ * This function will be replaced by the new discoverPlugins in discovery.ts
+ * once reload.ts (US-009) and file-watcher.ts (US-012) are migrated.
+ */
+const discoverPluginsLegacy = async (localPaths, allowedNpmPackages, rootDir) => {
+    const resolvedRoot = rootDir ?? PACKAGE_DIR;
+    log.info('Starting plugin discovery...');
+    // Discover from both sources in parallel
+    const [npmResults, localDiscovery] = await Promise.all([
+        discoverFromNodeModules(resolvedRoot, allowedNpmPackages),
+        discoverFromLocalPaths(localPaths),
+    ]);
+    // Local results first so local plugins take precedence over npm in dedup
+    const allResults = [...localDiscovery.results, ...npmResults];
+    const failures = [...localDiscovery.failures];
+    // Build new plugin Map, checking for duplicates
+    const plugins = new Map();
+    let loaded = 0;
+    for (const { plugin, source } of allResults) {
+        if (plugins.has(plugin.name)) {
+            log.warn(`Duplicate plugin "${plugin.name}" from ${source} — skipping (already loaded)`);
+            continue;
+        }
+        plugins.set(plugin.name, plugin);
+        loaded++;
+        const toolNames = plugin.tools.map(t => t.name).join(', ');
+        log.info(`Discovered plugin: ${plugin.name} v${plugin.version} (${plugin.trustTier}) from ${source} — tools: [${toolNames}]`);
+    }
+    log.info(`Plugin discovery complete: ${loaded} plugin(s) loaded`);
+    return { plugins, failures };
+};
+export { discoverPluginsLegacy, loadPluginFromDir };
+//# sourceMappingURL=discovery-legacy.js.map

package/dist/discovery-legacy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"discovery-legacy.js","sourceRoot":"","sources":["../src/discovery-legacy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAClC,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC9E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAIzC;;;;GAIG;AACH,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;AAQ3E;;;;GAIG;AACH,MAAM,qBAAqB,GAAG,CAAC,OAAe,EAAU,EAAE;IACxD,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5B,mDAAmD;QACnD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACjC,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAChC,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW;QAC7C,MAAM,YAAY,GAAG,QAAQ,CAAC,OAAO,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAC;QAC/D,OAAO,GAAG,KAAK,IAAI,YAAY,EAAE,CAAC;IACpC,CAAC;IACD,OAAO,OAAO,CAAC,OAAO,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAC;AAClD,CAAC,CAAC;AAEF;;GAEG;AACH,MAAM,wBAAwB,GAAG,CAAC,OAAsB,EAAE,OAAgB,EAAa,EAAE;IACvF,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC;IAC5B,IAAI,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,gBAAgB,CAAC;QAAE,OAAO,UAAU,CAAC;IACvE,OAAO,WAAW,CAAC;AACrB,CAAC,CAAC;AAEF;;;;;GAKG;AACH,MAAM,kBAAkB,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AAEzD;;;GAGG;AACH,MAAM,0BAA0B,GAAG,CACjC,KAA2D,EACL,EAAE;IACxD,MAAM,OAAO,GAAyD,EAAE,CAAC;IACzE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC;QACjD,KAAK,MAAM,MAAM,IAAI,kBAAkB,EAAE,CAAC;YACxC,IAAI,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC/B,OAAO,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,CAAC,CAAC;YACjE,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC,CAAC;AAEF;;;GAGG;AACH,MAAM,iBAAiB,GAAG,KAAK,EAC7B,GAAW,EACX,SAAoB,EACpB,UAAyB,EACzB,UAAmB,EACQ,EAAE;IAC7B,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,sBAAsB,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,iBAAiB,CAAC,CAAC;IAEtD,6BAA6B;IAC7B,MAAM,WAAW,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,EAAE,CAAC;IACxD,MAAM,QAAQ,GAAG,aAAa,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;IAE1D,mCAAmC;IACnC,yFAAyF;IACzF,IAAI,UAAkB,CAAC;IACvB,IAAI,UAAU,EAAE,CAAC;QACf,UAAU,GAAG,qBAAqB,CAAC,UAAU,CAAC,CAAC;QAC/C,MAAM,YAAY,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAC;QACpE,IAAI,YAAY,KAAK,UAAU,EAAE,CAAC;YAChC,GAAG,CAAC,IAAI,CACN,yBAAyB,QAAQ,CAAC,IAAI,iCAAiC,UAAU,4BAA4B,UAAU,UAAU,YAAY,GAAG,CACjJ,CAAC;QACJ,CAAC;IACH,CAAC;SAAM,CAAC;QACN,gDAAgD;QAChD,UAAU,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAC;IAC9D,CAAC;IAED,uBAAuB;IACvB,MAAM,SAAS,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;IACjD,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC;IAC7B,CAAC;IAED,wBAAwB;IACxB,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,YAAY,EAAE,CAAC;QAC5C,MAAM,YAAY,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;QACjD,IAAI,YAAY;YAAE,MAAM,IAAI,KAAK,CAAC,YAAY,CAAC,CAAC;IAClD,CAAC;IAED,yFAAyF;IACzF,KAAK,MAAM,KAAK,IAAI,0BAA0B,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/D,GAAG,CAAC,IAAI,CACN,WAAW,UAAU,WAAW,KAAK,CAAC,QAAQ,0CAA0C,KAAK,CAAC,eAAe,uCAAuC,CACrJ,CAAC;IACJ,CAAC;IAED,wDAAwD;IACxD,MAAM,aAAa,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;IACtC,MAAM,QAAQ,GAAG,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACpC,IAAI,CAAC,CAAC,MAAM,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,6BAA6B,QAAQ,EAAE,CAAC,CAAC;IAC3D,CAAC;IACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC;IAC/B,IAAI,QAAQ,GAAG,aAAa,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CACb,qBAAqB,UAAU,QAAQ,CAAC,QAAQ,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,6BAA6B,CACxG,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IACnC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,mBAAmB,QAAQ,gCAAgC,CAAC,CAAC;IAC/E,CAAC;IAED,OAAO;QACL,IAAI,EAAE,UAAU;QAChB,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,WAAW,EAAE,QAAQ,CAAC,WAAW;QACjC,WAAW,EAAE,QAAQ,CAAC,YAAY;QAClC,SAAS;QACT,IAAI;QACJ,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC9B,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,WAAW,EAAE,CAAC,CAAC,WAAW;YAC1B,WAAW,EAAE,CAAC,CAAC,WAAW;YAC1B,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,YAAY,EAAE,CAAC,CAAC,YAAY;YAC5B,aAAa,EAAE,CAAC,CAAC,aAAa;SAC/B,CAAC,CAAC;QACH,WAAW,EAAE,QAAQ,CAAC,WAAW;QACjC,UAAU;QACV,cAAc,EAAE,UAAU,IAAI,SAAS;KACxC,CAAC;AACJ,CAAC,CAAC;AAEF;;GAEG;AACH,MAAM,SAAS,GAAG,KAAK,EAAE,IAAY,EAAoB,EAAE;IACzD,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3B,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC,CAAC;AAEF;;GAEG;AACH,MAAM,UAAU,GAAG,KAAK,EAAE,IAAY,EAAoB,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;AAErF;;;;;;;;;GASG;AACH,MAAM,uBAAuB,GAAG,KAAK,EACnC,OAAe,EACf,eAAyB,EACS,EAAE;IACpC,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,eAAe,CAAC,CAAC;IAC5C,MAAM,OAAO,GAA4B,EAAE,CAAC;IAC5C,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;IAErD,IAAI,CAAC,CAAC,MAAM,SAAS,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC;QACvC,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,wEAAwE;IACxE,MAAM,cAAc,GAAG,IAAI,GAAG,EAAU,CAAC;IAEzC,uCAAuC;IACvC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,kBAAkB,CAAC;YAAE,SAAS;QACpD,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;QAC3C,IAAI,CAAC,CAAC,MAAM,SAAS,CAAC,MAAM,CAAC,CAAC;YAAE,SAAS;QACzC,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC,CAAC;YAAE,SAAS;QAExE,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3B,GAAG,CAAC,IAAI,CACN,wBAAwB,KAAK,mFAAmF,CACjH,CAAC;YACF,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAC3B,SAAS;QACX,CAAC;QAED,MAAM,SAAS,GAAG,wBAAwB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACzD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;YACjE,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,gBAAgB,KAAK,EAAE,EAAE,CAAC,CAAC;YAC1D,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC7B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,KAAK,CAAC,2CAA2C,KAAK,GAAG,EAAE,GAAG,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IAED,+CAA+C;IAC/C,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;QAC7C,IAAI,CAAC,CAAC,MAAM,SAAS,CAAC,QAAQ,CAAC,CAAC;YAAE,SAAS;QAE3C,IAAI,YAAsB,CAAC;QAC3B,IAAI,CAAC;YACH,YAAY,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAC;QACzC,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QAED,KAAK,MAAM,UAAU,IAAI,YAAY,EAAE,CAAC;YACtC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,kBAAkB,CAAC;gBAAE,SAAS;YACzD,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;YAC1C,IAAI,CAAC,CAAC,MAAM,SAAS,CAAC,MAAM,CAAC,CAAC;gBAAE,SAAS;YACzC,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC,CAAC;gBAAE,SAAS;YAExE,MAAM,WAAW,GAAG,GAAG,KAAK,IAAI,UAAU,EAAE,CAAC;YAE7C,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;gBACjC,GAAG,CAAC,IAAI,CACN,wBAAwB,WAAW,mFAAmF,CACvH,CAAC;gBACF,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBAC3B,SAAS;YACX,CAAC;YAED,MAAM,SAAS,GAAG,wBAAwB,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;YAC/D,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,MAAM,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;gBACvE,OAAO,CAAC,IAAI,CAAC;oBACX,MAAM;oBACN,MAAM,EAAE,gBAAgB,WAAW,EAAE;iBACtC,CAAC,CAAC;gBACH,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAC7B,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,GAAG,CAAC,KAAK,CAAC,2CAA2C,WAAW,GAAG,EAAE,GAAG,CAAC,CAAC;YAC5E,CAAC;QACH,CAAC;IACH,CAAC;IAED,8EAA8E;IAC9E,mGAAmG;IACnG,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAC7D,IAAI,KAAK,CAAC,UAAU,CAAC,kBAAkB,CAAC;YAAE,SAAS,CAAC,kBAAkB;QAEtE,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;QAC3C,IAAI,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,SAAS;QACzC,IAAI,CAAC,CAAC,MAAM,SAAS,CAAC,MAAM,CAAC,CAAC;YAAE,SAAS;QACzC,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC,CAAC;YAAE,SAAS;QAExE,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;QACjD,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,WAAW,CAAC,CAAC;YAAE,SAAS;QAE/C,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,IAAI,EAAE,CAA4B,CAAC;YAC1F,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAgC,CAAC;YAC1D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,iBAAiB,CAAC;gBAAE,SAAS;YAEhF,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC3B,GAAG,CAAC,IAAI,CACN,wBAAwB,KAAK,mFAAmF,CACjH,CAAC;gBACF,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBAC3B,SAAS;YACX,CAAC;YAED,MAAM,SAAS,GAAG,wBAAwB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YACzD,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;YACjE,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,gBAAgB,KAAK,YAAY,EAAE,CAAC,CAAC;YACpE,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC7B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,KAAK,CAAC,2CAA2C,KAAK,aAAa,EAAE,GAAG,CAAC,CAAC;QAChF,CAAC;IACH,CAAC;IAED,uCAAuC;IACvC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;QAC7C,IAAI,CAAC,CAAC,MAAM,SAAS,CAAC,QAAQ,CAAC,CAAC;YAAE,SAAS;QAE3C,IAAI,YAAsB,CAAC;QAC3B,IAAI,CAAC;YACH,YAAY,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAC;QACzC,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QAED,KAAK,MAAM,UAAU,IAAI,YAAY,EAAE,CAAC;YACtC,IAAI,UAAU,CAAC,UAAU,CAAC,kBAAkB,CAAC;gBAAE,SAAS,CAAC,kBAAkB;YAC3E,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;YAC1C,IAAI,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC;gBAAE,SAAS;YACzC,IAAI,CAAC,CAAC,MAAM,SAAS,CAAC,MAAM,CAAC,CAAC;gBAAE,SAAS;YACzC,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC,CAAC;gBAAE,SAAS;YAExE,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;YACjD,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,WAAW,CAAC,CAAC;gBAAE,SAAS;YAE/C,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,IAAI,EAAE,CAA4B,CAAC;gBAC1F,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAgC,CAAC;gBAC1D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,iBAAiB,CAAC;oBAAE,SAAS;gBAEhF,MAAM,WAAW,GAAG,GAAG,KAAK,IAAI,UAAU,EAAE,CAAC;gBAE7C,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;oBACjC,GAAG,CAAC,IAAI,CACN,wBAAwB,WAAW,mFAAmF,CACvH,CAAC;oBACF,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;oBAC3B,SAAS;gBACX,CAAC;gBAED,MAAM,SAAS,GAAG,wBAAwB,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;gBAC/D,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,MAAM,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;gBACvE,OAAO,CAAC,IAAI,CAAC;oBACX,MAAM;oBACN,MAAM,EAAE,gBAAgB,WAAW,YAAY;iBAChD,CAAC,CAAC;gBACH,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAC7B,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,GAAG,CAAC,KAAK,CAAC,2CAA2C,KAAK,IAAI,UAAU,aAAa,EAAE,GAAG,CAAC,CAAC;YAC9F,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC,CAAC;AAEF,MAAM,sBAAsB,GAAG,KAAK,EAClC,KAAe,EAC0D,EAAE;IAC3E,MAAM,OAAO,GAA4B,EAAE,CAAC;IAC5C,MAAM,QAAQ,GAAmB,EAAE,CAAC;IAEpC,KAAK,MAAM,UAAU,IAAI,KAAK,EAAE,CAAC;QAC/B,MAAM,YAAY,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;QAEzC,IAAI,CAAC,CAAC,MAAM,mBAAmB,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC;YAC/C,MAAM,GAAG,GAAG,qDAAqD,YAAY,EAAE,CAAC;YAChF,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACd,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,qCAAqC,EAAE,CAAC,CAAC;YACpF,SAAS;QACX,CAAC;QAED,IAAI,CAAC,CAAC,MAAM,SAAS,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC;YACrC,MAAM,GAAG,GAAG,qCAAqC,YAAY,EAAE,CAAC;YAChE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACd,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC,CAAC;YACzE,SAAS;QACX,CAAC;QAED,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,IAAI,CAAC,YAAY,EAAE,sBAAsB,CAAC,CAAC,CAAC,EAAE,CAAC;YACpE,MAAM,GAAG,GAAG,qCAAqC,YAAY,EAAE,CAAC;YAChE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACd,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,+BAA+B,EAAE,CAAC,CAAC;YAC9E,SAAS;QACX,CAAC;QAED,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,CAAC,CAAC;YAClF,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC;QACjD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,QAAQ,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAClE,GAAG,CAAC,KAAK,CAAC,oCAAoC,YAAY,GAAG,EAAE,GAAG,CAAC,CAAC;YACpE,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;AAC/B,CAAC,CAAC;AAQF;;;;;;GAMG;AACH,MAAM,qBAAqB,GAAG,KAAK,EACjC,UAAoB,EACpB,kBAA4B,EAC5B,OAAgB,EACW,EAAE;IAC7B,MAAM,YAAY,GAAG,OAAO,IAAI,WAAW,CAAC;IAE5C,GAAG,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;IAEzC,yCAAyC;IACzC,MAAM,CAAC,UAAU,EAAE,cAAc,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACrD,uBAAuB,CAAC,YAAY,EAAE,kBAAkB,CAAC;QACzD,sBAAsB,CAAC,UAAU,CAAC;KACnC,CAAC,CAAC;IAEH,yEAAyE;IACzE,MAAM,UAAU,GAAG,CAAC,GAAG,cAAc,CAAC,OAAO,EAAE,GAAG,UAAU,CAAC,CAAC;IAC9D,MAAM,QAAQ,GAAG,CAAC,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;IAE9C,gDAAgD;IAChD,MAAM,OAAO,GAAG,IAAI,GAAG,EAA4B,CAAC;IACpD,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,UAAU,EAAE,CAAC;QAC5C,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7B,GAAG,CAAC,IAAI,CAAC,qBAAqB,MAAM,CAAC,IAAI,UAAU,MAAM,8BAA8B,CAAC,CAAC;YACzF,SAAS;QACX,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACjC,MAAM,EAAE,CAAC;QAET,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3D,GAAG,CAAC,IAAI,CACN,sBAAsB,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,OAAO,KAAK,MAAM,CAAC,SAAS,UAAU,MAAM,cAAc,SAAS,GAAG,CACpH,CAAC;IACJ,CAAC;IAED,GAAG,CAAC,IAAI,CAAC,8BAA8B,MAAM,mBAAmB,CAAC,CAAC;IAElE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;AAC/B,CAAC,CAAC;AAEF,OAAO,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,CAAC"}

package/dist/discovery.d.ts

@@ -0,0 +1,28 @@
+/** Plugin discovery orchestrator: resolve → load → register pipeline. */
+import type { PluginRegistry } from './state.js';
+import type { TrustTier } from '@opentabs-dev/shared';
+/** Outcome of plugin discovery: an immutable registry plus any errors from failed plugins. */
+interface DiscoveryResult {
+    readonly registry: PluginRegistry;
+    readonly errors: readonly DiscoveryError[];
+}
+/** A single plugin that failed to load during discovery, identified by its specifier. */
+interface DiscoveryError {
+    readonly specifier: string;
+    readonly error: string;
+}
+/** Determine trust tier for an npm plugin directory path based on its package name. */
+declare const npmTrustTier: (dir: string) => TrustTier;
+/**
+ * Discover plugins from auto-discovered npm globals and explicit local paths.
+ *
+ * Phase 1: Discover npm plugins from global node_modules (auto-discovery).
+ * Phase 2: Resolve local plugin paths from config.localPlugins.
+ * Phase 3: Load all plugins in parallel.
+ * Phase 4: Merge — local plugins override npm plugins of the same name.
+ * Phase 5: Build immutable registry.
+ */
+declare const discoverPlugins: (localPlugins: string[], configDir: string) => Promise<DiscoveryResult>;
+export { discoverPlugins, npmTrustTier };
+export type { DiscoveryError, DiscoveryResult };
+//# sourceMappingURL=discovery.d.ts.map

package/dist/discovery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"discovery.d.ts","sourceRoot":"","sources":["../src/discovery.ts"],"names":[],"mappings":"AAAA,yEAAyE;AAQzE,OAAO,KAAK,EAAgB,cAAc,EAAE,MAAM,YAAY,CAAC;AAC/D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAEtD,8FAA8F;AAC9F,UAAU,eAAe;IACvB,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,SAAS,cAAc,EAAE,CAAC;CAC5C;AAED,yFAAyF;AACzF,UAAU,cAAc;IACtB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED,uFAAuF;AACvF,QAAA,MAAM,YAAY,GAAI,KAAK,MAAM,KAAG,SAInC,CAAC;AAEF;;;;;;;;GAQG;AACH,QAAA,MAAM,eAAe,GAAU,cAAc,MAAM,EAAE,EAAE,WAAW,MAAM,KAAG,OAAO,CAAC,eAAe,CAuFjG,CAAC;AAEF,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,CAAC;AACzC,YAAY,EAAE,cAAc,EAAE,eAAe,EAAE,CAAC"}

package/dist/discovery.js

@@ -0,0 +1,97 @@
+/** Plugin discovery orchestrator: resolve → load → register pipeline. */
+import { loadPlugin } from './loader.js';
+import { log } from './logger.js';
+import { buildRegistry } from './registry.js';
+import { discoverGlobalNpmPlugins, resolvePluginPath } from './resolver.js';
+import { isErr } from '@opentabs-dev/shared';
+/** Determine trust tier for an npm plugin directory path based on its package name. */
+const npmTrustTier = (dir) => {
+    // Scoped @opentabs-dev packages are official
+    if (dir.includes('/@opentabs-dev/'))
+        return 'official';
+    return 'community';
+};
+/**
+ * Discover plugins from auto-discovered npm globals and explicit local paths.
+ *
+ * Phase 1: Discover npm plugins from global node_modules (auto-discovery).
+ * Phase 2: Resolve local plugin paths from config.localPlugins.
+ * Phase 3: Load all plugins in parallel.
+ * Phase 4: Merge — local plugins override npm plugins of the same name.
+ * Phase 5: Build immutable registry.
+ */
+const discoverPlugins = async (localPlugins, configDir) => {
+    log.info('Starting plugin discovery...');
+    const errors = [];
+    const failures = [];
+    // Phase 1: Auto-discover npm plugins from global node_modules
+    const { dirs: npmDirs, errors: npmErrors } = await discoverGlobalNpmPlugins();
+    for (const npmErr of npmErrors) {
+        errors.push({ specifier: '(npm auto-discovery)', error: npmErr });
+    }
+    // Phase 2 + 3: Resolve and load all plugins in parallel
+    const loadNpm = npmDirs.map(async (dir) => {
+        const trustTier = npmTrustTier(dir);
+        const loadResult = await loadPlugin(dir, trustTier, 'npm');
+        if (isErr(loadResult)) {
+            errors.push({ specifier: dir, error: loadResult.error });
+            failures.push({ path: dir, error: loadResult.error });
+            return null;
+        }
+        return loadResult.value;
+    });
+    const loadLocal = localPlugins.map(async (specifier) => {
+        const resolveResult = await resolvePluginPath(specifier, configDir);
+        if (isErr(resolveResult)) {
+            errors.push({ specifier, error: resolveResult.error });
+            failures.push({ path: specifier, error: resolveResult.error });
+            return null;
+        }
+        const dir = resolveResult.value;
+        const loadResult = await loadPlugin(dir, 'local', 'local');
+        if (isErr(loadResult)) {
+            errors.push({ specifier, error: loadResult.error });
+            failures.push({ path: dir, error: loadResult.error });
+            return null;
+        }
+        return loadResult.value;
+    });
+    const [npmSettled, localSettled] = await Promise.all([Promise.allSettled(loadNpm), Promise.allSettled(loadLocal)]);
+    // Collect results
+    const collectLoaded = (settled) => {
+        const loaded = [];
+        for (const result of settled) {
+            if (result.status === 'fulfilled' && result.value !== null) {
+                loaded.push(result.value);
+            }
+            else if (result.status === 'rejected') {
+                const errorMsg = result.reason instanceof Error ? result.reason.message : String(result.reason);
+                errors.push({ specifier: '(unknown)', error: errorMsg });
+            }
+        }
+        return loaded;
+    };
+    const npmLoaded = collectLoaded(npmSettled);
+    const localLoaded = collectLoaded(localSettled);
+    // Phase 4: Merge — local plugins override npm plugins of the same name
+    const merged = new Map();
+    for (const plugin of npmLoaded) {
+        merged.set(plugin.name, plugin);
+    }
+    for (const plugin of localLoaded) {
+        if (merged.has(plugin.name)) {
+            log.info(`Local plugin "${plugin.name}" overrides npm auto-discovered version`);
+        }
+        merged.set(plugin.name, plugin);
+    }
+    // Phase 5: Build immutable registry
+    const registry = buildRegistry(Array.from(merged.values()), failures);
+    for (const plugin of registry.plugins.values()) {
+        const toolNames = plugin.tools.map(t => t.name).join(', ');
+        log.info(`Discovered plugin: ${plugin.name} v${plugin.version} (${plugin.trustTier}, ${plugin.source}) from ${plugin.sourcePath ?? '(npm)'} — tools: [${toolNames}]`);
+    }
+    log.info(`Plugin discovery complete: ${registry.plugins.size} plugin(s) loaded, ${errors.length} error(s)`);
+    return { registry, errors };
+};
+export { discoverPlugins, npmTrustTier };
+//# sourceMappingURL=discovery.js.map

package/dist/discovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"discovery.js","sourceRoot":"","sources":["../src/discovery.ts"],"names":[],"mappings":"AAAA,yEAAyE;AAEzE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAClC,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,wBAAwB,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAC5E,OAAO,EAAE,KAAK,EAAE,MAAM,sBAAsB,CAAC;AAiB7C,uFAAuF;AACvF,MAAM,YAAY,GAAG,CAAC,GAAW,EAAa,EAAE;IAC9C,6CAA6C;IAC7C,IAAI,GAAG,CAAC,QAAQ,CAAC,iBAAiB,CAAC;QAAE,OAAO,UAAU,CAAC;IACvD,OAAO,WAAW,CAAC;AACrB,CAAC,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,eAAe,GAAG,KAAK,EAAE,YAAsB,EAAE,SAAiB,EAA4B,EAAE;IACpG,GAAG,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;IAEzC,MAAM,MAAM,GAAqB,EAAE,CAAC;IACpC,MAAM,QAAQ,GAAmB,EAAE,CAAC;IAEpC,8DAA8D;IAC9D,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,wBAAwB,EAAE,CAAC;IAC9E,KAAK,MAAM,MAAM,IAAI,SAAS,EAAE,CAAC;QAC/B,MAAM,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,sBAAsB,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IACpE,CAAC;IAED,wDAAwD;IACxD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAgC,EAAE;QACtE,MAAM,SAAS,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QACpC,MAAM,UAAU,GAAG,MAAM,UAAU,CAAC,GAAG,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;QAC3D,IAAI,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;YACtB,MAAM,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC;YACzD,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC;YACtD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,UAAU,CAAC,KAAK,CAAC;IAC1B,CAAC,CAAC,CAAC;IAEH,MAAM,SAAS,GAAG,YAAY,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,EAAgC,EAAE;QACnF,MAAM,aAAa,GAAG,MAAM,iBAAiB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QACpE,IAAI,KAAK,CAAC,aAAa,CAAC,EAAE,CAAC;YACzB,MAAM,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,aAAa,CAAC,KAAK,EAAE,CAAC,CAAC;YACvD,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,aAAa,CAAC,KAAK,EAAE,CAAC,CAAC;YAC/D,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,GAAG,GAAG,aAAa,CAAC,KAAK,CAAC;QAChC,MAAM,UAAU,GAAG,MAAM,UAAU,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QAC3D,IAAI,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;YACtB,MAAM,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC;YACpD,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC;YACtD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,UAAU,CAAC,KAAK,CAAC;IAC1B,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,UAAU,EAAE,YAAY,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IAEnH,kBAAkB;IAClB,MAAM,aAAa,GAAG,CAAC,OAAoD,EAAkB,EAAE;QAC7F,MAAM,MAAM,GAAmB,EAAE,CAAC;QAClC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW,IAAI,MAAM,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;gBAC3D,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC5B,CAAC;iBAAM,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;gBACxC,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,YAAY,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBAChG,MAAM,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,WAAW,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC3D,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IAEF,MAAM,SAAS,GAAG,aAAa,CAAC,UAAU,CAAC,CAAC;IAC5C,MAAM,WAAW,GAAG,aAAa,CAAC,YAAY,CAAC,CAAC;IAEhD,uEAAuE;IACvE,MAAM,MAAM,GAAG,IAAI,GAAG,EAAwB,CAAC;IAC/C,KAAK,MAAM,MAAM,IAAI,SAAS,EAAE,CAAC;QAC/B,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAClC,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,WAAW,EAAE,CAAC;QACjC,IAAI,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5B,GAAG,CAAC,IAAI,CAAC,iBAAiB,MAAM,CAAC,IAAI,yCAAyC,CAAC,CAAC;QAClF,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAClC,CAAC;IAED,oCAAoC;IACpC,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC;IAEtE,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;QAC/C,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3D,GAAG,CAAC,IAAI,CACN,sBAAsB,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,OAAO,KAAK,MAAM,CAAC,SAAS,KAAK,MAAM,CAAC,MAAM,UAAU,MAAM,CAAC,UAAU,IAAI,OAAO,cAAc,SAAS,GAAG,CAC5J,CAAC;IACJ,CAAC;IAED,GAAG,CAAC,IAAI,CAAC,8BAA8B,QAAQ,CAAC,OAAO,CAAC,IAAI,sBAAsB,MAAM,CAAC,MAAM,WAAW,CAAC,CAAC;IAE5G,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;AAC9B,CAAC,CAAC;AAEF,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,CAAC"}

package/dist/extension-install.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Managed extension auto-install.
+ *
+ * On every MCP server startup (and hot reload), checks whether the browser
+ * extension in ~/.opentabs/extension/ is up to date with the server's package
+ * version. If the version file is missing or stale, copies the extension from
+ * the platform/browser-extension/ source directory, writes a version marker,
+ * and creates the adapters/ directory for plugin IIFEs.
+ *
+ * The copy excludes build/development artifacts (node_modules, src, .git,
+ * tsconfig*) — only the files needed to load an unpacked extension in Chrome.
+ */
+/**
+ * Ensure the managed extension in ~/.opentabs/extension/ matches the current
+ * server version. Copies the extension source if the version is missing or
+ * outdated, creating the directory structure as needed.
+ *
+ * Safe to call on every reload — skips the copy when versions match.
+ */
+interface ExtensionInstallResult {
+    /** Whether the extension files were updated (version mismatch detected and files copied) */
+    versionChanged: boolean;
+}
+declare const ensureExtensionInstalled: () => Promise<ExtensionInstallResult>;
+export type { ExtensionInstallResult };
+export { ensureExtensionInstalled };
+//# sourceMappingURL=extension-install.d.ts.map

package/dist/extension-install.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"extension-install.d.ts","sourceRoot":"","sources":["../src/extension-install.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAkBH;;;;;;GAMG;AACH,UAAU,sBAAsB;IAC9B,4FAA4F;IAC5F,cAAc,EAAE,OAAO,CAAC;CACzB;AAED,QAAA,MAAM,wBAAwB,QAAa,OAAO,CAAC,sBAAsB,CAuDxE,CAAC;AAEF,YAAY,EAAE,sBAAsB,EAAE,CAAC;AACvC,OAAO,EAAE,wBAAwB,EAAE,CAAC"}