@plurnk/plurnk-meta 2.1.1 → 2.1.3

package/CORPUS.md

@@ -10,11 +10,11 @@ Authored defaults published by `@plurnk/plurnk-meta` and consumed by
 | ------------------------------- | ---------------------------------------------------------------------------- |
 | `POLICY.md`                     | Read before the first-run seed of the user-owned XDG config `AGENTS.md`.     |
 | `recap.md`                       | Read for an optional Recap rendered last when its content is nonempty.       |
-| `docs/worker.md`                | Read when registered built-in pull docs are materialized.                    |
-| `skills/plurnk/SKILL.md`         | Standard skill entry; Core composes its package-owned and generated resources. |
+| `docs/*.md`                     | Built-in reference pages (`env.md`, `members.md`, `ops.md`, `reasoning.md`, `session.md`, `workspace.md`) read when registered pull docs are materialized. |
+| `skills/plurnk/**`              | Standard skill entry (`SKILL.md`) and reference chapters (`references/configuration.md`, `references/extensibility.md`); Core composes its package-owned and generated resources (`copy-move.md`, `models.md`, `.env.defaults`). |
 
 Core materializes eligible scheme and runtime pull docs at
-`worker:///_plurnk/plurnk/<name>.md` and exposes them through turn-0 FIND surveys. Merely
+`plurnk:///<name>.md` or `<scheme>:///<name>.md` and exposes them through turn-0 FIND surveys. Merely
 placing a file in `docs/` does not register a scheme or make speculative
 teaching current. Every listed source is a required package member; a missing
 or failed read surfaces at the admission boundary rather than silently reducing
@@ -23,7 +23,7 @@ one.
 
 Plurnk's own reference is catalogued at `skill://plurnk/SKILL.md` alongside
 installed skills. Chapters and the complete generated defaults catalog are
-ordinary pull resources, not additional startup packet sections ({§plurnk-skill}).
+ordinary pull resources, not additional startup packet sections ({§tools-resource-materialization}).
 
 ## The teaching split
 
@@ -46,7 +46,7 @@ monorepo forge.
   A recovery warning belongs at the state that makes it relevant, not in every packet.
 - Use concrete, executable examples. Distribute them across useful operations
   rather than accidentally teaching one pattern as the only workflow.
-- Show temporal behavior with legal turns under {§op-execution-order} and
+- Show temporal behavior with legal turns under {§op-methods-op-dispatch} and
   {§send}; describe the contract, not a model's historical workaround.
 - Evaluate packet bytes, reasoning, operation results, and self-audit evidence
   together. Distinguish a teaching gap from a runtime defect before prescribing
@@ -56,5 +56,5 @@ monorepo forge.
   policy can tune different workloads without broadening the default teaching.
 
 Probe history and unresolved experiments belong in forge issues, not current
-doctrine. {§teaching-corpus} owns source membership; {§recap} owns the optional
+doctrine. {§teaching-corpus} owns source membership; {§packet-inject} owns the optional
 footer. Neither creates a second admission rule or release gate.

package/DIVERGENCES.md

@@ -18,7 +18,7 @@ Interoperability:
 
 - PLURNK hosts current MCP servers through `@plurnk/plurnk-mcp`, exposing
   their tools and resources through the ordinary operation language.
-- Clients use AG-UI.
+- Clients use ACP.
 - Provider adapters use established model APIs.
 
 This difference is justified only if whole-product evaluations demonstrate an
@@ -26,19 +26,19 @@ advantage over conventional tool calling.
 
 ## Internal resource addressing
 
-Agent-visible state uses URI schemes such as `worker://` and
-`log://`. The URI authority identifies the relevant worker namespace where the
-scheme supports one.
+Agent-visible state uses URI schemes such as `workspace:///`, `session://`,
+`ops://`, `reasoning://`, `mcp:///`, `skill://`, and `plurnk:///`. The URI
+authority identifies the relevant session namespace where the scheme supports one.
 
-This provides one address form for project content, worker state, execution
+This provides one address form for project content, session state, execution
 results, and external resources. The internal representation does not alter
-MCP, AG-UI, or provider wire protocols.
+MCP, ACP, or provider wire protocols.
 
-## AG-UI management extensions
+## ACP management extensions
 
-AG-UI defines agent Runs but not all workspace-management operations PLURNK
-requires. Management actions therefore use AG-UI's extension fields and custom
-events on the same authenticated endpoint.
+ACP v2 defines JSON-RPC 2.0 sessions, notifications, and client-bound gates, and
+PLURNK management actions use `_plurnk/action` and `_meta.plurnk` extension fields
+on the same authenticated endpoint.
 
-These extensions must remain optional to generic AG-UI consumers. If AG-UI
+These extensions must remain optional to generic ACP consumers. If ACP
 standardizes equivalent management operations, PLURNK should adopt them.

package/README.md

@@ -4,9 +4,9 @@ What plurnk's packages share that no single package owns: extension discovery an
 
 **Membership primitives** (`import Meta from "@plurnk/plurnk-meta"`): shared kind identity, trust, attribution, enumeration, and root resolution for each kind's scanner. [SPEC.md](./SPEC.md) owns the complete contract ({§extension-discovery}).
 
-- `Meta.declaresKind(manifest, kind)` — accepts one exact string kind identity ({§extension-kind}).
+- `Meta.declaresKind(manifest, kind)` — accepts one exact string kind identity ({§extension-discovery}).
 - `Meta.isTrusted(packageName, env?)` — the `PLURNK_EXTENSIONS_TRUSTED_ONLY` gate: `""`/`"0"` off; any value on, `@plurnk/*` always trusted plus a comma-separated allowlist. An unset key is answered by this package's own panel, which ships the gate on.
-- `Meta.normalizeAttribution(raw, packageName)` — normalize an always-on package declaration, including the reserved `@plurnk/` namespace rule ({§extension-attribution}).
+- `Meta.normalizeAttribution(raw, packageName)` — normalize an always-on package declaration, including the reserved `@plurnk/` namespace rule ({§extension-discovery}).
 - `Meta.runtimeAttribution(source, context, packageName)` — pull and normalize an extension's optional synchronous `attributions` function for one provider emission attempt.
 - `Meta.composeAttributions(...lists)` — flatten, deduplicate, and sort opaque tag lists.
 - `Meta.packageDirs(nodeModulesDir)` — scope-agnostic, symlink-aware enumeration across Node's ancestor resolution chain as `{ dir, name }` candidates; the nearest package name wins. Ordering and filtering are the caller's policy.
@@ -23,4 +23,4 @@ validation is exported from `@plurnk/plurnk-meta/agent-plugin`; the portable com
 `@plurnk/plurnk-agent-plugins`. Extension imports use the same operator trust gate.
 
 An admitted extension package may declare always-on `plurnk.attribution` tags and its loaded object
-may return per-attempt tags from `attributions(context)` ({§extension-attribution}). MIT.
+may return per-attempt tags from `attributions(context)` ({§extension-discovery}). MIT.

package/SPEC.md

@@ -1,243 +1,52 @@
 # plurnk-meta — Specification
 
-Contract for facts shared across the open plurnk packages. Each kind's
-framework owns its kind-specific declarations and runtime interfaces; this
-package owns the installed-membership primitives they share and the published
-teaching sources listed below.
+Contract for facts shared across the open plurnk packages: published teaching sources, installed extension discovery, environment readers, redaction-first spans, and ambient HTTP transport.
 
-## §teaching-corpus Published teaching sources
+## §teaching-corpus 1. Published Teaching Sources and Skill Boundary
 
-The package owns the authored defaults and exact membership below. Consumers
-own admission, runtime projection, and model-facing placement; copying these
-sources into a consuming package would create a second teaching owner.
+The package owns the authored defaults and exact membership below. Consumers own admission, runtime projection, and model-facing placement; every teaching source and `docs/*.md` obeys `TEACHING.md` (mechanism over advice, one owner per claim, knobs by name, shapes over purposes, no contract tags on a page).
 
-| Source                          | Membership | Meta-owned content                                 | Core read boundary                                      |
-| ------------------------------- | ---------- | -------------------------------------------------- | ------------------------------------------------------- |
-| `POLICY.md`                     | Required   | First-run default operating policy                 | Policy bootstrap {§policy-sections}                     |
-| `recap.md`                       | Required   | Optional default operational Recap                 | Per-packet user-slot footer {§recap}                    |
-| `docs/worker.md`                | Required   | Deep reference prose for the reserved worker scheme | Pull-doc materialization {§schemes-directory}           |
-| `docs/delegation.md`            | Required   | Worker delegation, lifecycle, and messaging | Pull-doc materialization with the worker scheme |
-| `docs/pattern.md`               | Required   | Operation-neutral pattern selection and literal source editing | Pull-doc materialization independent of schemes |
-| `skills/plurnk/SKILL.md`         | Required   | Standard Plurnk skill entry and chapter directory | Service-provided skill {§plurnk-skill} |
-| `skills/plurnk/references/extensibility.md` | Required | How integrations and extensions reach the model, and each kind's contract | Skill chapter {§plurnk-skill} |
+| Source | Membership | Meta-owned content | Core read boundary |
+| --- | --- | --- | --- |
+| `POLICY.md` | Required | First-run default operating policy | Policy bootstrap {§packet-inject} |
+| `recap.md` | Required | Optional default operational Recap (empty contributes no rendered section) | Per-packet user-slot footer {§packet-inject} |
+| `docs/session.md` | Required | Deep reference prose for the reserved session scheme | Pull-doc materialization {§tools-resource-materialization} |
+| `docs/delegation.md` | Required | Session delegation, lifecycle, and messaging | Pull-doc materialization with the session scheme |
+| `docs/pattern.md` | Required | Operation-neutral pattern selection and literal source editing | Pull-doc materialization independent of schemes |
+| `skills/plurnk/SKILL.md` | Required | Standard Plurnk skill entry and chapter directory | Service-provided skill {§tools-resource-materialization} |
+| `skills/plurnk/references/extensibility.md` | Required | How integrations and extensions reach the model, and each kind's contract | Skill chapter {§tools-resource-materialization} |
 
-Every teaching source, and every package's `docs/*.md`, is written to
-`TEACHING.md`, the style rule for model-facing prose: mechanism over advice,
-one owner per claim, knobs by name, shapes over purposes, one home per
-mechanism, no contract tags on a page.
+- **Exact membership**: Each source is read only at its consuming boundary; missing required sources or read errors fail that boundary with the original cause. Consumers resolve exported membership without scanning `docs/` or inferring capabilities from filenames.
+- **Scheme-bound vs language docs**: Exported documents declare their source and optional owning scheme. Plugin `documentation` is manifest-owned and serves as fallback only when meta owns no document of that name. Document exclusions apply to the document and its owning scheme.
+- **Skill composition boundary**: Meta authors `skills/plurnk/SKILL.md`; Core composes its resource tree from package-owned references and generated resources ({§tools-resource-materialization}) and exposes it through the `skills` Functionality family ({§skills-module}) without copying skills into universal roots or invoking an installer.
 
-Required is a package-membership statement, not unconditional packet
-projection. Each source is read only at its consuming boundary; absence or an
-unrelated read failure fails that boundary with the original cause. An empty
-`recap.md` intentionally contributes no rendered packet section while preserving
-its one authored source for later use. Consumers resolve the exported membership
-exactly: they do not scan `docs/`, infer new members from filenames, or treat a
-missing required source as empty teaching.
+## §extension-discovery 2. Installed Extension Discovery and Kinds
 
-A file in `docs/` does not declare a capability. Each exported document declares
-its source and an optional owning scheme. Scheme-bound references follow that
-scheme's visibility and capability admission; language references are independent
-of scheme registration. A basename is a document identity, not an invented scheme.
-Plugin documentation is owned by its manifest: an absent `documentation`
-contributes no pull doc; a present field is the fallback when meta owns no
-document of that name. Document exclusions apply to the document and its owning
-scheme, when present.
+Enumeration (`Meta.packageDirs`) is scope-agnostic and symlink-aware across Node's ancestor resolution chain; the nearest package with a given name wins.
 
-## §skills-installation-boundary Skill composition and installation
+| Surface | Contract |
+| --- | --- |
+| Layer ownership | `plurnk-meta` owns Node package enumeration, exact `kind` identity, `Meta.isTrusted`, and attribution normalization. Each kind's framework owns kind-field validation, deterministic ordering/collisions, trust enforcement before import, and code loading. The composed host arbitrates cross-kind collisions and presents skipped-package evidence. |
+| `plurnk.kind` values | `"exec"` (`runtimes[]`), `"mimetype"` (`handlers[]`), `"provider"` (singular `name`), `"scheme"` (`schemes[]` or singular `name` shorthand), `"http-materializer"` (`materializers[]`, {§http-lifecycle}), `"module"` (singular `module` export subpath, {§module-lifecycle}). |
+| Manifest read (`Meta.readManifest(dir, kind?)`) | Reads `package.json#plurnk` (`packageName` = npm `name`) or Agent Plugin `plugin.json#extensions.ai.plurnk` (validated per {§agent-plugins-roots}; `packageName` = npm `name` when packaged for Node, else plugin `name`; files under `ai.plurnk/` resolve inside the plugin root via `Meta.moduleFile(manifest, relative)`). Declaring both manifests or an invalid `plugin.json` throws; `module` loads from npm or user plugin roots, never project roots ({§module-lifecycle}). Returns `null` for missing/malformed ordinary manifests, non-objects, absent declarations, or other kinds; propagates `AbortSignal` aborts. |
+| Attribution (`plurnk.attribution` / `attributions(context)`) | Static `plurnk.attribution` (`string \| string[] \| null`) and optional synchronous runtime `attributions({ workspaceId, sessionId, primarySessionId, loop, turn, attempt })` normalize via `Meta.normalizeAttribution` / `Meta.runtimeAttribution` into readonly ordered lists (`packageAttributions`). Tags starting with `@plurnk/` are reserved to `@plurnk/*` packages; malformed declarations or thrown functions fail at the package boundary. The host flattens, deduplicates, and sorts tags as an opaque folksonomy. |
+| Trust boundary (`Meta.isTrusted(packageName, env)`) | Enforced after reading the inert manifest and before importing or validating attribution. Empty or `"0"` `PLURNK_EXTENSIONS_TRUSTED_ONLY` trusts all installed packages; any other value trusts `@plurnk/*` plus the comma-separated allowlist in that value; an unset key falls back to this package's `.env.defaults` ({§operator-config-precedence}). Untrusted packages are preserved as skipped evidence without crashing discovery. |
 
-Meta authors the standard Plurnk `SKILL.md`; Core composes its resource tree
-from package-owned references and generated resources ({§plurnk-skill}). Skill
-discovery and enablement use the same `skills` Functionality family as installed
-skills ({§skills-functionality}). Neither package copies skills into universal roots
-or invokes an installer merely to expose the service's own reference material.
+## §env-knob 3. Environment Knobs, Resource Projection, and Error Detail
 
-## §extension-discovery Installed extension discovery
+`Knob` reads a declared key by name from the system environment or an explicitly supplied authoritative environment (never falling through to `process.env` or mutating either environment, and accepting no code fallback).
 
-```mermaid
-flowchart LR
-    graph[Installed Node dependency graph] --> enumerate[Meta.packageDirs]
-    enumerate --> scanner[Kind-owned scanner]
-    manifest[package.json plurnk manifest] --> scanner
-    policy[Meta.isTrusted] --> gate{Trusted?}
-    scanner --> gate
-    gate -->|yes| attribution[Meta.normalizeAttribution]
-    attribution --> framework[Framework-owned validation, loading, and registry]
-    gate -->|no| skipped[Skipped-package evidence]
-    framework --> host[Composed host]
-    skipped --> host
-```
+| Surface | Contract |
+| --- | --- |
+| `Knob` readers | `text`, `list`, `flag` (`0` or `1`), `choice` (vocabulary member), `percent` (`80%` $\to$ `0.8`), `integer(name, floor)` (safe integer $\ge$ floor; floor bounds operator input and is never a fallback), `family(prefix)` (every `<prefix><alias>` with non-empty value in alias order; empty value turns member off). Unset keys are internal errors (broken floor); invalid operator values raise `ConfigurationError` naming `key` ({§configuration-repair-path}). |
+| `ConfigurationError` identity | Available at `@plurnk/plurnk-meta/configuration-error`. `instanceof ConfigurationError` recognizes any `Error` named `ConfigurationError` with a string `key` across duplicate package copies. |
+| `ResourceEnvironment` | Reads `PLURNK_<FAMILY>_<alias>=<definition>` (`_` decodes to `-`; validated against family grammar or `[a-z][a-z0-9-]*`, preserving case and Unicode without folding into uppercase controls), `PLURNK_<FAMILY>_ENABLED=0\|1`, `PLURNK_<FAMILY>_<alias>_ENABLED=0\|1`, and declared family controls. Empty/whitespace-only definitions are invalid even when disabled; `<alias>_ENABLED=0` suppresses activation without hiding the definition. |
+| `ErrorDetail(knob)` | Binds `preview(value)` and `limit(environment?)` to a package's `*_ERROR_DETAIL_LIMIT` knob via `Knob`: truncates messages to at most that many characters with `...`, crashing by knob name if unset or invalid. |
 
-| Layer                 | Owns                                                                                                                              | Does not own                                                           |
-| --------------------- | --------------------------------------------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------- |
-| `plurnk-meta`         | Node package enumeration, exact kind identity, the one trust predicate, and package-attribution normalization.                    | Kind fields, capability collisions, extension imports, or presentation. |
-| Kind framework        | Kind-field validation, deterministic ordering/collisions, trust enforcement before any extension import, and trusted code loading. | A second trust or attribution policy, or cross-kind composition.     |
-| Composed host         | Cross-kind arbitration and presentation of skipped-package evidence.                                                            | Re-parsing manifests or importing a declined package.                  |
+## §observed-span 4. Redaction-First Spans
 
-The installed dependency graph is the compatibility boundary. Enumeration is
-scope-agnostic and symlink-aware across Node's ancestor resolution chain; the
-nearest package with a given package name wins. Installing a package makes a
-valid declared extension discoverable. Environment values configure or bound
-installed extensions; they never manufacture package existence.
+`observed(tracer, name, attributes, fn, options?)` and its synchronous twin wrap one span around `fn` on the caller's tracer: attributes admit strings (capped at 300 characters), numbers, and booleans and drop everything else; a thrown error marks the span `ERROR` and records only `error.type` (the error's class name, never its message).
 
-### §extension-kind One package, one kind
+## §ambient-http-transport 5. Ambient Proxy and CA Transport
 
-The native declaration's `kind` is one exact string, in either manifest location
-at {§extension-manifest-read}. A package may declare multiple named capabilities inside its one
-kind-owned collection.
-
-| `plurnk.kind`     | Kind-owned names                                         |
-| ----------------- | -------------------------------------------------------- |
-| `"exec"`          | `runtimes[]`                                             |
-| `"mimetype"`      | `handlers[]`                                             |
-| `"provider"`      | singular `name`                                          |
-| `"scheme"`        | `schemes[]`; singular `name` is the one-scheme shorthand |
-| `"http-materializer"` | `materializers[]` ({§http-materializer-extensions})     |
-| `"module"`        | singular `module` export subpath ({§module-discovery})   |
-
-Coordinated capabilities spanning kinds use explicit daemon-module
-composition ({§module-lifecycle}).
-
-### §env-knob One environment reader
-
-`Knob` reads a declared key by name from the system environment, or an explicitly
-supplied assembled environment: `text`, `list`, `flag` (exactly `0` or `1`), `choice` (one of a
-vocabulary), `percent` (`80%` is 0.8) and `integer(name, floor)` (a safe
-integer of at least the floor, which bounds what the operator may say and is
-never a value used in the operator's place). `family(prefix)` reads every `<prefix><alias>`
-key with a non-empty value, in alias order; an empty value is a member turned off. An unset key is a broken floor
-and remains an internal error. Invalid operator values raise a
-`ConfigurationError` naming the key; the owning capability contains that
-diagnostic without inventing a value ({§configuration-repair-path}).
-The same class is available from `@plurnk/plurnk-meta/configuration-error`
-without loading discovery or observability machinery.
-No reader accepts a fallback: a signature that could carry one is a second
-home for a choice. A supplied environment is authoritative: missing keys do not
-fall through to the process, and reading never mutates either environment.
-Every package reads its knobs through it, so validation and failure wording
-have one home for runtime and offline configuration checks.
-
-### §resource-environment Named resource environment projection
-
-`ResourceEnvironment` reads one family's assembled environment without loading
-resources or changing configuration. Families declare their supported controls,
-per-resource settings and, when required by their resource standard, an alias
-grammar. Definition parsing and validation remain family-owned.
-
-| Form | Meaning |
-|---|---|
-| `PLURNK_<FAMILY>_<alias>=<definition>` | One complete definition. `_` represents `-` in the resource name; validate the decoded name with the family's grammar, otherwise `[a-z][a-z0-9-]*`. |
-| `PLURNK_<FAMILY>_ENABLED=0\|1` | The family default, declared in its owning `.env.defaults`. |
-| `PLURNK_<FAMILY>_<alias>_ENABLED=0\|1` | This resource's independent override; it does not copy or modify the definition. |
-| Other uppercase controls/settings | Accepted only when the family declares them. Definition aliases are never case-folded into controls. |
-
-Enabledness uses {§env-knob}. Controls may precede a definition or address resources
-supplied by other sources; they do not manufacture definitions. An unused alias
-is valid. Spelling, supported settings and their values are validated when the
-environment is read, independently of whether a definition exists.
-Definition data remains verbatim for its owning schema; this reader neither merges
-fields nor includes those values in its diagnostics. Empty or whitespace-only
-definitions are invalid even when disabled. Absence leaves inheritance intact;
-`<alias>_ENABLED=0` suppresses activation without hiding the definition.
-Names are preserved without case folding or Unicode normalization. Standard skill
-names ({§agent-skills-name}) may lead with a digit or contain Unicode; native
-`.env` files and `env 'NAME=value' command` carry such keys even when a shell's
-assignment grammar cannot. Uppercase controls remain distinct from aliases.
-
-### §error-detail-bound One diagnostic-preview bound
-
-`new ErrorDetail(knob)` binds a package's model-facing diagnostic preview to
-that package's `*_ERROR_DETAIL_LIMIT` knob, read through {§env-knob}:
-`preview(value)` keeps at most that many characters of an error's message
-(or a value's string form) and marks the cut with `...`. The bound is read at
-each preview; an unset or invalid bound crashes by name at the first
-diagnostic, never degrades into an unbounded one.
-`limit(environment?)` validates the same bound without rendering a diagnostic;
-an explicitly supplied environment is complete and never falls back to the process.
-
-### §extension-manifest-read One extension declaration
-
-| Distribution | Declaration | Identity |
-|---|---|---|
-| Extension package | `package.json#plurnk` | npm package name |
-| Agent Plugin bundle | `plugin.json#extensions.ai.plurnk` | npm package name when packaged for Node; otherwise the standard plugin name |
-
-The bundle uses the standard manifest validation at {§agent-plugins-manifest}.
-Its namespace contains the same `kind` and kind-owned fields as an extension
-package. Each kind's loader, import convention, registry and lifetime remain
-unchanged; bundling does not convert extensions into daemon modules.
-Use `kind: "module"` when the extension needs the daemon lifecycle ({§module-lifecycle}).
-Its Plurnk-specific files, including defaults, live under `ai.plurnk/`.
-A bundle never repeats its kind declaration in `package.json`: two declarations
-are an error, not an override. npm exports and dependencies remain Node packaging
-metadata. The standard manifest is authoritative when present; an invalid one
-cannot fall through to a package declaration. Other clients' extension namespaces
-claim no Plurnk extension.
-
-| Kind | Installation boundary |
-|---|---|
-| `module` | npm or selected user plugin roots; never project roots ({§module-discovery}) |
-| `exec`, `mimetype`, `provider`, `scheme`, `http-materializer` | Existing npm discovery and each kind's import conventions |
-
-`Meta.moduleFile(manifest, relative)` resolves a kind-owned file entry. A standard
-bundle's entry must be under `ai.plurnk/` and resolve inside the plugin root.
-npm export-based kinds retain Node's package export resolution. Declared file
-entry loaders use this shared containment boundary before importing.
-
-`Meta.readManifest(dir, kind?)` is the one read of a package's kind claim:
-its declaration, parsed, with an object declaring exactly that
-`kind` ({§extension-kind}); omitting the filter inspects any kind,
-as required by the configuration-floor collector. It answers `null` for a missing or
-malformed ordinary package manifest, a non-object, no declaration, or another kind —
-none of those is a package of that kind, and a scanner skips them without
-evidence. The result carries the manifest path, the package name when
-`name` is a non-empty string (otherwise `null`; what an unnamed package is
-remains the kind's decision), and the `plurnk` object untouched: kind
-fields are validated by the kind's framework, after the trust gate. A scanner that
-passes an `AbortSignal` receives the abort; it is never masked as an
-unreadable directory. No framework reads a manifest any other way.
-
-### §extension-attribution Extension-authored attribution tags
-
-| Surface                 | Contract                                                                                                                                                                                                                                  |
-| ----------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
-| Static declaration      | Optional `plurnk.attribution` is one non-empty string or an array of non-empty strings. `null`, absence, and an empty array normalize to no tags. A declaration is an always-on source for the admitted package.                            |
-| Runtime declaration     | A loaded extension object may implement synchronous `attributions(context)`, returning the same declaration shape, `null`, or `undefined`. The function is pulled once for each provider emission attempt; returning no tags omits that source.     |
-| Function context        | `workspaceId`, `workerId`, and `primaryWorkerId` are opaque strings; `loop`, `turn`, and `attempt` are positive sequence numbers. The function receives no engine, database, trust, or mutation capability.                                      |
-| Trust                   | The kind's framework applies {§extension-trust-boundary} before attribution validation or extension import. Trust admits executable code; it does not make an authored tag truthful.                                                                        |
-| Normalization           | `Meta.normalizeAttribution(raw, packageName)` and `Meta.runtimeAttribution(source, context, packageName)` produce readonly ordered lists. A malformed trusted declaration, malformed function, or thrown function fails at the package boundary.    |
-| Namespace reservation   | A tag beginning `@plurnk/` is valid only when `packageName` also begins `@plurnk/`; a violating trusted package fails. Other tag vocabularies, collisions, and meanings are deliberately uninterpreted.                                      |
-| Discovery result        | Each kind's discovery returns `packageAttributions`, keyed once by package name. Only non-empty static lists for packages represented after admission are present.                                                                             |
-| Host composition        | The host flattens static and runtime lists from its admitted extension objects, deduplicates and sorts the result, and treats it as an opaque folksonomy. It does not infer contribution, provenance, weight, trustworthiness, or causal value. |
-
-Manifest acquisition and static validation occur once in each kind's discovery
-path. A composed host consumes the admitted package map and loaded extension
-objects without reopening a manifest or tracing tags through produced values.
-
-### §extension-trust-boundary One policy, enforcement before import
-
-`Meta.isTrusted(packageName, env)` is the sole trust decision:
-
-- empty or `"0"` `PLURNK_EXTENSIONS_TRUSTED_ONLY` trusts every installed package;
-- any other value trusts every `@plurnk/*` package plus the comma-separated
-  package-name allowlist in that value;
-- an **unset** key is answered by this package's own `.env.defaults`, because the
-  gate decides whose panel joins the floor and so is asked before the floor
-  exists. A value in code would outrank the panel, so there is none
-  ({§operator-config-only-home}).
-
-Every kind's scanner applies that predicate after reading the inert package
-manifest and before importing or registering extension code. An untrusted package
-does not crash discovery: the scanner's result preserves its package identity as
-skipped evidence. The composed host decides how to present that evidence.
-Direct framework consumers receive the same safe load boundary and can choose
-their own presentation.
-
-## §observed-span Redaction-first spans
-
-`observed(tracer, name, attributes, fn, options?)` and its synchronous twin wrap
-one span around `fn` on the caller's tracer: attributes admit strings (capped at
-300 characters), numbers and booleans and drop everything else; a thrown error
-marks the span `ERROR` and records only `error.type`, the error's class name,
-never its message. Every instrumented package binds these to its own tracer
-rather than declaring a second helper; prompts, payloads and arbitrary URLs never
-reach a span through them.
+`outboundFetch` and `syncAmbientHttp(env?)` apply ambient proxy (`HTTP_PROXY`, `HTTPS_PROXY`, `NO_PROXY`, and lowercase spellings) and extra CA (`NODE_EXTRA_CA_CERTS`) settings from the shell or `$XDG_CONFIG_HOME/plurnk/.env` to Node's global HTTP/HTTPS agents, global `fetch` dispatcher, and OpenSSL root store, leaving global state untouched when none are set.

package/dist/AgentPlugin.d.ts

@@ -1,3 +1,49 @@
-export * from "./AgentPluginManifest.ts";
-export { default as AgentPluginFiles } from "./AgentPluginFiles.ts";
+export declare const AGENT_PLUGINS_VERSION = "1.0.0";
+export declare const PLUGIN_SCHEMA = "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json";
+export declare const MCP_SCHEMA = "https://agent-plugins.org/schemas/1.0.0/mcp.schema.json";
+export declare const schemaVersion: (identifier: string, kind: "plugin" | "mcp") => string | null;
+export declare const expandPlaceholders: (value: string, { root, data }: {
+    root: string;
+    data: string;
+}) => string;
+export declare const isObject: (value: unknown) => value is Record<string, unknown>;
+export interface Finding {
+    readonly section: string;
+    readonly message: string;
+}
+export interface PluginAuthor {
+    readonly name?: string;
+    readonly email?: string;
+    readonly url?: string;
+}
+export interface PluginManifest {
+    readonly $schema: typeof PLUGIN_SCHEMA;
+    readonly name: string;
+    readonly version?: string;
+    readonly description?: string;
+    readonly author?: PluginAuthor;
+    readonly homepage?: string;
+    readonly repository?: string;
+    readonly license?: string;
+    readonly keywords?: readonly string[];
+    readonly extensions?: Readonly<Record<string, Readonly<Record<string, unknown>>>>;
+}
+export type ManifestResult = {
+    readonly manifest: PluginManifest;
+    readonly ignored: readonly Finding[];
+} | {
+    readonly rejected: Finding;
+    readonly ignored: readonly Finding[];
+};
+export declare const validateManifest: (value: unknown) => ManifestResult;
+export declare class AgentPluginFiles {
+    static errnoCode(cause: unknown): string | undefined;
+    static inside(root: string, candidate: string): boolean;
+    static isFile(path: string): Promise<boolean>;
+    static resolved(path: string): Promise<string | null>;
+    static contained(root: string, candidate: string): Promise<boolean>;
+    static manifest(directory: string, { signal }?: {
+        signal?: AbortSignal;
+    }): Promise<ManifestResult | null>;
+}
 //# sourceMappingURL=AgentPlugin.d.ts.map

package/dist/AgentPlugin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"AgentPlugin.d.ts","sourceRoot":"","sources":["../src/AgentPlugin.ts"],"names":[],"mappings":"AAAA,cAAc,0BAA0B,CAAC;AACzC,OAAO,EAAE,OAAO,IAAI,gBAAgB,EAAE,MAAM,uBAAuB,CAAC"}
+{"version":3,"file":"AgentPlugin.d.ts","sourceRoot":"","sources":["../src/AgentPlugin.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,qBAAqB,UAAU,CAAC;AAC7C,eAAO,MAAM,aAAa,+DAA+D,CAAC;AAC1F,eAAO,MAAM,UAAU,4DAA4D,CAAC;AAGpF,eAAO,MAAM,aAAa,eAAgB,MAAM,QAAQ,QAAQ,GAAG,KAAK,KAAG,MAAM,GAAG,IACsC,CAAC;AAG3H,eAAO,MAAM,kBAAkB,UAAW,MAAM,kBAAkB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,KAAG,MAC8B,CAAC;AAElI,eAAO,MAAM,QAAQ,UAAW,OAAO,KAAG,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CACD,CAAC;AAEzE,MAAM,WAAW,OAAO;IACpB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,YAAY;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;CACzB;AAGD,MAAM,WAAW,cAAc;IAC3B,QAAQ,CAAC,OAAO,EAAE,OAAO,aAAa,CAAC;IACvC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;IAC/B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,QAAQ,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;CACrF;AAED,MAAM,MAAM,cAAc,GACpB;IAAE,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,SAAS,OAAO,EAAE,CAAA;CAAE,GAC3E;IAAE,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,SAAS,OAAO,EAAE,CAAA;CAAE,CAAC;AAQ3E,eAAO,MAAM,gBAAgB,UAAW,OAAO,KAAG,cAmCjD,CAAC;AAGF,qBAAa,gBAAgB;IACzB,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAEnD;IAED,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAGtD;IAED,OAAa,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAQlD;IAED,OAAa,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAQ1D;IAED,OAAa,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAMxE;IAGD,OAAa,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,GAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAO,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CA6BlH;CACJ"}

package/dist/AgentPlugin.js

@@ -1,3 +1,140 @@
-export * from "./AgentPluginManifest.js";
-export { default as AgentPluginFiles } from "./AgentPluginFiles.js";
+import { lstat, readFile, realpath, stat } from "node:fs/promises";
+import { dirname, isAbsolute, join, relative, sep } from "node:path";
+// {§agent-plugins-roots} Shared inert Agent Plugins format primitives.
+export const AGENT_PLUGINS_VERSION = "1.0.0";
+export const PLUGIN_SCHEMA = "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json";
+export const MCP_SCHEMA = "https://agent-plugins.org/schemas/1.0.0/mcp.schema.json";
+// A canonical identifier names its version; any other string is not an Agent Plugins identifier.
+export const schemaVersion = (identifier, kind) => new RegExp(`^https://agent-plugins\\.org/schemas/([^/]+)/${kind}\\.schema\\.json$`, "u").exec(identifier)?.[1] ?? null;
+// {§agent-plugins-expansion} One textual pass: text a replacement introduces is never scanned again.
+export const expandPlaceholders = (value, { root, data }) => value.replaceAll(/\$\{(PLUGIN_ROOT|PLUGIN_DATA)\}/gu, (_placeholder, name) => (name === "PLUGIN_ROOT" ? root : data));
+export const isObject = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
+const FIELDS = new Set(["$schema", "name", "version", "description", "author", "homepage", "repository", "license", "keywords", "extensions"]);
+const STRINGS = ["version", "description", "homepage", "repository", "license"];
+const AUTHOR = new Set(["name", "email", "url"]);
+const NAME = /^(?!.*(?:--|\.\.))[a-z0-9](?:[a-z0-9.-]*[a-z0-9])?$/u;
+// {§agent-plugins-roots} Unknown fields and a non-object `extensions` are the only non-fatal violations.
+export const validateManifest = (value) => {
+    if (!isObject(value))
+        return { rejected: { section: "5.2", message: "plugin.json must contain a top-level JSON object" }, ignored: [] };
+    const ignored = Object.keys(value).filter((key) => !FIELDS.has(key))
+        .map((key) => ({ section: "5.2", message: `unknown top-level field ${JSON.stringify(key)} is ignored` }));
+    const reject = (section, message) => ({ rejected: { section, message }, ignored });
+    const { $schema, name, author, keywords, extensions } = value;
+    if (typeof $schema !== "string")
+        return reject("5.3", "required field $schema is missing or not a string");
+    if ($schema !== PLUGIN_SCHEMA) {
+        const version = schemaVersion($schema, "plugin");
+        return reject("5.2", version === null
+            ? `$schema ${JSON.stringify($schema)} is not a canonical Agent Plugins manifest identifier`
+            : `Agent Plugins ${version} is not supported; this client implements 1.0.0`);
+    }
+    if (typeof name !== "string")
+        return reject("5.3", "required field name is missing or not a string");
+    if (name.length === 0 || name.length > 64 || !NAME.test(name))
+        return reject("5.5", `name ${JSON.stringify(name)} violates the plugin name constraints`);
+    const nonString = STRINGS.find((field) => value[field] !== undefined && typeof value[field] !== "string");
+    if (nonString !== undefined)
+        return reject("5.4", `${nonString} must be a string`);
+    if (author !== undefined) {
+        if (!isObject(author))
+            return reject("5.4", "author must be an object");
+        const invalid = Object.keys(author).find((key) => !AUTHOR.has(key) || typeof author[key] !== "string");
+        if (invalid !== undefined)
+            return reject("5.4", `author may hold only string name, email, and url; found ${JSON.stringify(invalid)}`);
+    }
+    if (keywords !== undefined && !(Array.isArray(keywords) && keywords.every((keyword) => typeof keyword === "string"))) {
+        return reject("5.4", "keywords must be an array of strings");
+    }
+    if (extensions !== undefined && !isObject(extensions)) {
+        ignored.push({ section: "8.1", message: "extensions is not an object and is ignored" });
+    }
+    else if (extensions !== undefined) {
+        const member = Object.keys(extensions).find((namespace) => !isObject(extensions[namespace]));
+        if (member !== undefined)
+            return reject("8.1", `extensions member ${JSON.stringify(member)} must be an object`);
+    }
+    const manifest = Object.fromEntries(Object.entries(value)
+        .filter(([key]) => FIELDS.has(key) && !(key === "extensions" && !isObject(extensions))));
+    // oxlint-disable-next-line typescript/no-unsafe-type-assertion -- the checks above are the manifest's validator; the kept fields are the ones it names
+    return { manifest: manifest, ignored };
+};
+// {§agent-plugins-containment} Shared by portable components and extension admission.
+export class AgentPluginFiles {
+    static errnoCode(cause) {
+        return typeof cause === "object" && cause !== null && "code" in cause && typeof cause.code === "string" ? cause.code : undefined;
+    }
+    static inside(root, candidate) {
+        const path = relative(root, candidate);
+        return path !== ".." && !path.startsWith(`..${sep}`) && !isAbsolute(path);
+    }
+    static async isFile(path) {
+        try {
+            return (await stat(path)).isFile();
+        }
+        catch (cause) {
+            const code = AgentPluginFiles.errnoCode(cause);
+            if (code === "ENOENT" || code === "ENOTDIR")
+                return false;
+            throw cause;
+        }
+    }
+    static async resolved(path) {
+        try {
+            return await realpath(path);
+        }
+        catch (cause) {
+            const code = AgentPluginFiles.errnoCode(cause);
+            if (code === "ENOENT" || code === "ENOTDIR")
+                return null;
+            throw cause;
+        }
+    }
+    static async contained(root, candidate) {
+        if (!AgentPluginFiles.inside(root, candidate))
+            return false;
+        const real = await AgentPluginFiles.resolved(candidate);
+        if (real !== null)
+            return AgentPluginFiles.inside(root, real);
+        // A missing leaf can still escape through an existing symlinked parent.
+        return candidate !== root && AgentPluginFiles.contained(root, dirname(candidate));
+    }
+    // null is absence, not an invalid manifest that permits another format to take its place.
+    static async manifest(directory, { signal } = {}) {
+        signal?.throwIfAborted();
+        const authored = join(directory, "plugin.json");
+        try {
+            await lstat(authored);
+        }
+        catch (cause) {
+            const code = AgentPluginFiles.errnoCode(cause);
+            if (code === "ENOENT" || code === "ENOTDIR")
+                return null;
+            throw cause;
+        }
+        const root = await AgentPluginFiles.resolved(directory);
+        if (root === null)
+            return null;
+        const location = await AgentPluginFiles.resolved(authored);
+        if (location === null) {
+            return { rejected: { section: "5.1", message: "plugin.json does not resolve to a regular file" }, ignored: [] };
+        }
+        if (!AgentPluginFiles.inside(root, location)) {
+            return { rejected: { section: "4.1", message: "plugin.json resolves outside the plugin root" }, ignored: [] };
+        }
+        if (!(await stat(location)).isFile()) {
+            return { rejected: { section: "5.1", message: "plugin.json is not a regular file" }, ignored: [] };
+        }
+        let value;
+        try {
+            value = JSON.parse(await readFile(location, { encoding: "utf8", signal }));
+        }
+        catch (cause) {
+            if (!(cause instanceof SyntaxError))
+                throw cause;
+            return { rejected: { section: "5.2", message: "plugin.json is not valid JSON" }, ignored: [] };
+        }
+        return validateManifest(value);
+    }
+}
 //# sourceMappingURL=AgentPlugin.js.map

package/dist/AgentPlugin.js.map

@@ -1 +1 @@
-{"version":3,"file":"AgentPlugin.js","sourceRoot":"","sources":["../src/AgentPlugin.ts"],"names":[],"mappings":"AAAA,cAAc,0BAA0B,CAAC;AACzC,OAAO,EAAE,OAAO,IAAI,gBAAgB,EAAE,MAAM,uBAAuB,CAAC"}
+{"version":3,"file":"AgentPlugin.js","sourceRoot":"","sources":["../src/AgentPlugin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACnE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAErE,uEAAuE;AACvE,MAAM,CAAC,MAAM,qBAAqB,GAAG,OAAO,CAAC;AAC7C,MAAM,CAAC,MAAM,aAAa,GAAG,4DAA4D,CAAC;AAC1F,MAAM,CAAC,MAAM,UAAU,GAAG,yDAAyD,CAAC;AAEpF,iGAAiG;AACjG,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,UAAkB,EAAE,IAAsB,EAAiB,EAAE,CACvF,IAAI,MAAM,CAAC,gDAAgD,IAAI,mBAAmB,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;AAE3H,qGAAqG;AACrG,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,KAAa,EAAE,EAAE,IAAI,EAAE,IAAI,EAAkC,EAAU,EAAE,CACxG,KAAK,CAAC,UAAU,CAAC,mCAAmC,EAAE,CAAC,YAAY,EAAE,IAAY,EAAE,EAAE,CAAC,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;AAElI,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,KAAc,EAAoC,EAAE,CACzE,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AA+BzE,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,aAAa,EAAE,QAAQ,EAAE,UAAU,EAAE,YAAY,EAAE,SAAS,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC,CAAC;AAC/I,MAAM,OAAO,GAAG,CAAC,SAAS,EAAE,aAAa,EAAE,UAAU,EAAE,YAAY,EAAE,SAAS,CAAU,CAAC;AACzF,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;AACjD,MAAM,IAAI,GAAG,sDAAsD,CAAC;AAEpE,yGAAyG;AACzG,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,KAAc,EAAkB,EAAE;IAC/D,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,kDAAkD,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IACxI,MAAM,OAAO,GAAc,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;SAC1E,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,2BAA2B,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC;IAC9G,MAAM,MAAM,GAAG,CAAC,OAAe,EAAE,OAAe,EAAkB,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;IACnH,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,KAAK,CAAC;IAC9D,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,KAAK,EAAE,mDAAmD,CAAC,CAAC;IAC3G,IAAI,OAAO,KAAK,aAAa,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACjD,OAAO,MAAM,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI;YACjC,CAAC,CAAC,WAAW,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,uDAAuD;YAC3F,CAAC,CAAC,iBAAiB,OAAO,iDAAiD,CAAC,CAAC;IACrF,CAAC;IACD,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,KAAK,EAAE,gDAAgD,CAAC,CAAC;IACrG,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,MAAM,CAAC,KAAK,EAAE,QAAQ,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;IACzJ,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,KAAK,CAAC,KAAK,QAAQ,CAAC,CAAC;IAC1G,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,KAAK,EAAE,GAAG,SAAS,mBAAmB,CAAC,CAAC;IACnF,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACvB,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,OAAO,MAAM,CAAC,KAAK,EAAE,0BAA0B,CAAC,CAAC;QACxE,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,OAAO,MAAM,CAAC,GAAG,CAAC,KAAK,QAAQ,CAAC,CAAC;QACvG,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO,MAAM,CAAC,KAAK,EAAE,2DAA2D,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC1I,CAAC;IACD,IAAI,QAAQ,KAAK,SAAS,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,EAAE,CAAC;QACnH,OAAO,MAAM,CAAC,KAAK,EAAE,sCAAsC,CAAC,CAAC;IACjE,CAAC;IACD,IAAI,UAAU,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QACpD,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,4CAA4C,EAAE,CAAC,CAAC;IAC5F,CAAC;SAAM,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QAC7F,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,MAAM,CAAC,KAAK,EAAE,qBAAqB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;IACpH,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;SACpD,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,KAAK,YAAY,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7F,uJAAuJ;IACvJ,OAAO,EAAE,QAAQ,EAAE,QAAqC,EAAE,OAAO,EAAE,CAAC;AACxE,CAAC,CAAC;AAEF,sFAAsF;AACtF,MAAM,OAAO,gBAAgB;IACzB,MAAM,CAAC,SAAS,CAAC,KAAc;QAC3B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,IAAI,KAAK,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IACrI,CAAC;IAED,MAAM,CAAC,MAAM,CAAC,IAAY,EAAE,SAAiB;QACzC,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QACvC,OAAO,IAAI,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IAC9E,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAY;QAC5B,IAAI,CAAC;YACD,OAAO,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QACvC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,MAAM,IAAI,GAAG,gBAAgB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YAC/C,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,SAAS;gBAAE,OAAO,KAAK,CAAC;YAC1D,MAAM,KAAK,CAAC;QAChB,CAAC;IACL,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAY;QAC9B,IAAI,CAAC;YACD,OAAO,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;QAChC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,MAAM,IAAI,GAAG,gBAAgB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YAC/C,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,SAAS;gBAAE,OAAO,IAAI,CAAC;YACzD,MAAM,KAAK,CAAC;QAChB,CAAC;IACL,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,IAAY,EAAE,SAAiB;QAClD,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC;YAAE,OAAO,KAAK,CAAC;QAC5D,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QACxD,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,gBAAgB,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC9D,wEAAwE;QACxE,OAAO,SAAS,KAAK,IAAI,IAAI,gBAAgB,CAAC,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;IACtF,CAAC;IAED,0FAA0F;IAC1F,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAiB,EAAE,EAAE,MAAM,EAAE,GAA6B,EAAE;QAC9E,MAAM,EAAE,cAAc,EAAE,CAAC;QACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;QAChD,IAAI,CAAC;YAAC,MAAM,KAAK,CAAC,QAAQ,CAAC,CAAC;QAAC,CAAC;QAC9B,OAAO,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,GAAG,gBAAgB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YAC/C,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,SAAS;gBAAE,OAAO,IAAI,CAAC;YACzD,MAAM,KAAK,CAAC;QAChB,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QACxD,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAC/B,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC3D,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACpB,OAAO,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,gDAAgD,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;QACpH,CAAC;QACD,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC;YAC3C,OAAO,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,8CAA8C,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;QAClH,CAAC;QACD,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;YACnC,OAAO,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,mCAAmC,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;QACvG,CAAC;QACD,IAAI,KAAc,CAAC;QACnB,IAAI,CAAC;YACD,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;QAC/E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,IAAI,CAAC,CAAC,KAAK,YAAY,WAAW,CAAC;gBAAE,MAAM,KAAK,CAAC;YACjD,OAAO,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,+BAA+B,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;QACnG,CAAC;QACD,OAAO,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC;CACJ"}

package/dist/ConfigurationError.d.ts

@@ -1,5 +1,6 @@
 export default class ConfigurationError extends Error {
     readonly key: string;
     constructor(key: string, message: string, options?: ErrorOptions);
+    static [Symbol.hasInstance](value: unknown): boolean;
 }
 //# sourceMappingURL=ConfigurationError.d.ts.map