@prestyj/cli 5.9.0 → 5.11.0

package/dist/core/extensions/plugin-bundles.d.ts

@@ -0,0 +1,23 @@
+import { z } from "zod";
+export declare const PluginManifestSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    id: z.ZodString;
+    name: z.ZodString;
+    version: z.ZodString;
+    entry: z.ZodString;
+    description: z.ZodOptional<z.ZodString>;
+    commands: z.ZodOptional<z.ZodArray<z.ZodString>>;
+}, z.core.$strict>;
+export type PluginManifest = z.infer<typeof PluginManifestSchema>;
+export interface InstalledPlugin extends PluginManifest {
+    installPath: string;
+}
+export declare function validatePluginPath(candidate: string): string;
+export declare function readPluginManifest(pluginDir: string): Promise<PluginManifest>;
+/** Pack a plugin directory into one deterministic, portable .ggplugin JSON artifact. */
+export declare function packPlugin(sourceDir: string, outputFile: string): Promise<PluginManifest>;
+/** Install atomically; an invalid bundle never damages the currently installed version. */
+export declare function installPlugin(bundleFile: string, extensionsDir: string): Promise<InstalledPlugin>;
+export declare function listInstalledPlugins(extensionsDir: string): Promise<InstalledPlugin[]>;
+export declare function removePlugin(id: string, extensionsDir: string): Promise<void>;
+//# sourceMappingURL=plugin-bundles.d.ts.map

package/dist/core/extensions/plugin-bundles.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-bundles.d.ts","sourceRoot":"","sources":["../../../src/core/extensions/plugin-bundles.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAexB,eAAO,MAAM,oBAAoB;;;;;;;;kBAUtB,CAAC;AAEZ,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAqBlE,MAAM,WAAW,eAAgB,SAAQ,cAAc;IACrD,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAiB5D;AA0CD,wBAAsB,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAGnF;AAED,wFAAwF;AACxF,wBAAsB,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAoB/F;AAqCD,2FAA2F;AAC3F,wBAAsB,aAAa,CACjC,UAAU,EAAE,MAAM,EAClB,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC,eAAe,CAAC,CAgC1B;AAED,wBAAsB,oBAAoB,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC,CAqB5F;AAED,wBAAsB,YAAY,CAAC,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAGnF"}

package/dist/core/extensions/plugin-bundles.js

@@ -0,0 +1,228 @@
+import { randomUUID } from "node:crypto";
+import fs from "node:fs/promises";
+import path from "node:path";
+import { isDeepStrictEqual } from "node:util";
+import { z } from "zod";
+const MAX_BUNDLE_BYTES = 5 * 1024 * 1024;
+const MAX_FILES = 500;
+const SUPPORTED_EXTENSIONS = new Set([
+    ".js",
+    ".mjs",
+    ".cjs",
+    ".json",
+    ".md",
+    ".txt",
+    ".yaml",
+    ".yml",
+]);
+export const PluginManifestSchema = z
+    .object({
+    schemaVersion: z.literal(1),
+    id: z.string().regex(/^[a-z0-9][a-z0-9._-]{1,63}$/),
+    name: z.string().min(1).max(100),
+    version: z.string().regex(/^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?$/),
+    entry: z.string().min(1),
+    description: z.string().max(500).optional(),
+    commands: z.array(z.string()).max(100).optional(),
+})
+    .strict();
+const PluginBundleSchema = z
+    .object({
+    format: z.literal("gg-agent-plugin"),
+    schemaVersion: z.literal(1),
+    manifest: PluginManifestSchema,
+    files: z
+        .array(z
+        .object({
+        path: z.string().min(1),
+        contentBase64: z.string(),
+    })
+        .strict())
+        .min(1)
+        .max(MAX_FILES),
+})
+    .strict();
+export function validatePluginPath(candidate) {
+    const unix = candidate.replaceAll("\\", "/");
+    const normalized = path.posix.normalize(unix);
+    if (normalized !== unix ||
+        normalized === "." ||
+        normalized.startsWith("../") ||
+        path.posix.isAbsolute(normalized) ||
+        normalized.includes("\0")) {
+        throw new Error(`Unsafe plugin path: ${candidate}`);
+    }
+    const extension = path.posix.extname(normalized).toLowerCase();
+    if (!SUPPORTED_EXTENSIONS.has(extension)) {
+        throw new Error(`Unsupported plugin file type: ${candidate}`);
+    }
+    return normalized;
+}
+function validateManifestPaths(manifest, files) {
+    const entry = validatePluginPath(manifest.entry);
+    if (![".js", ".mjs", ".cjs"].includes(path.posix.extname(entry).toLowerCase())) {
+        throw new Error("Plugin entry must be a JavaScript module");
+    }
+    if (!files.has(entry))
+        throw new Error(`Plugin entry is missing: ${entry}`);
+    for (const command of manifest.commands ?? []) {
+        const commandPath = validatePluginPath(command);
+        if (path.posix.extname(commandPath).toLowerCase() !== ".md") {
+            throw new Error(`Plugin command must be Markdown: ${command}`);
+        }
+        if (!files.has(commandPath))
+            throw new Error(`Plugin command is missing: ${commandPath}`);
+    }
+}
+async function collectFiles(root, relative = "") {
+    const directory = path.join(root, relative);
+    const entries = await fs.readdir(directory, { withFileTypes: true });
+    const files = [];
+    for (const entry of entries.sort((left, right) => left.name.localeCompare(right.name))) {
+        const childRelative = relative ? `${relative}/${entry.name}` : entry.name;
+        const absolute = path.join(root, childRelative);
+        const stat = await fs.lstat(absolute);
+        if (stat.isSymbolicLink())
+            throw new Error(`Plugin bundles cannot contain symlinks: ${childRelative}`);
+        if (stat.isDirectory()) {
+            files.push(...(await collectFiles(root, childRelative)));
+            continue;
+        }
+        if (!stat.isFile())
+            throw new Error(`Unsupported plugin filesystem entry: ${childRelative}`);
+        const safePath = validatePluginPath(childRelative);
+        files.push({ path: safePath, data: await fs.readFile(absolute) });
+        if (files.length > MAX_FILES)
+            throw new Error(`Plugin exceeds ${MAX_FILES} files`);
+    }
+    return files;
+}
+export async function readPluginManifest(pluginDir) {
+    const raw = await fs.readFile(path.join(pluginDir, "plugin.json"), "utf8");
+    return PluginManifestSchema.parse(JSON.parse(raw));
+}
+/** Pack a plugin directory into one deterministic, portable .ggplugin JSON artifact. */
+export async function packPlugin(sourceDir, outputFile) {
+    const sourceStat = await fs.lstat(sourceDir);
+    if (!sourceStat.isDirectory() || sourceStat.isSymbolicLink()) {
+        throw new Error("Plugin source must be a real directory");
+    }
+    const manifest = await readPluginManifest(sourceDir);
+    const files = await collectFiles(sourceDir);
+    validateManifestPaths(manifest, new Set(files.map((file) => file.path)));
+    const totalBytes = files.reduce((sum, file) => sum + file.data.length, 0);
+    if (totalBytes > MAX_BUNDLE_BYTES)
+        throw new Error("Plugin exceeds the 5 MB bundle limit");
+    const bundle = {
+        format: "gg-agent-plugin",
+        schemaVersion: 1,
+        manifest,
+        files: files.map((file) => ({ path: file.path, contentBase64: file.data.toString("base64") })),
+    };
+    await fs.mkdir(path.dirname(outputFile), { recursive: true });
+    await fs.writeFile(outputFile, `${JSON.stringify(bundle)}\n`, { mode: 0o600 });
+    return manifest;
+}
+async function parseBundle(bundleFile) {
+    const stat = await fs.lstat(bundleFile);
+    if (!stat.isFile() || stat.isSymbolicLink())
+        throw new Error("Plugin bundle must be a regular file");
+    if (stat.size > MAX_BUNDLE_BYTES * 2)
+        throw new Error("Plugin bundle is too large");
+    const parsed = PluginBundleSchema.parse(JSON.parse(await fs.readFile(bundleFile, "utf8")));
+    const paths = new Set();
+    let totalBytes = 0;
+    for (const file of parsed.files) {
+        const safePath = validatePluginPath(file.path);
+        if (paths.has(safePath))
+            throw new Error(`Duplicate plugin path: ${safePath}`);
+        paths.add(safePath);
+        const bytes = Buffer.from(file.contentBase64, "base64");
+        if (bytes.toString("base64") !== file.contentBase64) {
+            throw new Error(`Invalid base64 content: ${safePath}`);
+        }
+        totalBytes += bytes.length;
+    }
+    if (totalBytes > MAX_BUNDLE_BYTES)
+        throw new Error("Plugin exceeds the 5 MB bundle limit");
+    validateManifestPaths(parsed.manifest, paths);
+    if (!paths.has("plugin.json"))
+        throw new Error("Plugin bundle is missing plugin.json");
+    const embeddedManifest = PluginManifestSchema.parse(JSON.parse(Buffer.from(parsed.files.find((file) => file.path === "plugin.json").contentBase64, "base64").toString("utf8")));
+    if (!isDeepStrictEqual(embeddedManifest, parsed.manifest)) {
+        throw new Error("Bundle manifest does not match plugin.json");
+    }
+    return parsed;
+}
+/** Install atomically; an invalid bundle never damages the currently installed version. */
+export async function installPlugin(bundleFile, extensionsDir) {
+    const bundle = await parseBundle(bundleFile);
+    await fs.mkdir(extensionsDir, { recursive: true, mode: 0o700 });
+    const destination = path.join(extensionsDir, bundle.manifest.id);
+    const staging = path.join(extensionsDir, `.${bundle.manifest.id}.install-${randomUUID()}`);
+    const backup = path.join(extensionsDir, `.${bundle.manifest.id}.backup-${randomUUID()}`);
+    await fs.mkdir(staging, { recursive: true, mode: 0o700 });
+    try {
+        for (const file of bundle.files) {
+            const relative = validatePluginPath(file.path);
+            const target = path.join(staging, ...relative.split("/"));
+            await fs.mkdir(path.dirname(target), { recursive: true, mode: 0o700 });
+            await fs.writeFile(target, Buffer.from(file.contentBase64, "base64"), { mode: 0o600 });
+        }
+        let hadPrevious = false;
+        try {
+            await fs.rename(destination, backup);
+            hadPrevious = true;
+        }
+        catch (error) {
+            if (error.code !== "ENOENT")
+                throw error;
+        }
+        try {
+            await fs.rename(staging, destination);
+        }
+        catch (error) {
+            if (hadPrevious)
+                await fs.rename(backup, destination).catch(() => { });
+            throw error;
+        }
+        if (hadPrevious)
+            await fs.rm(backup, { recursive: true, force: true }).catch(() => { });
+    }
+    finally {
+        await fs.rm(staging, { recursive: true, force: true }).catch(() => { });
+    }
+    return { ...bundle.manifest, installPath: destination };
+}
+export async function listInstalledPlugins(extensionsDir) {
+    let entries;
+    try {
+        entries = await fs.readdir(extensionsDir, { withFileTypes: true });
+    }
+    catch (error) {
+        if (error.code === "ENOENT")
+            return [];
+        throw error;
+    }
+    const plugins = [];
+    for (const entry of entries.sort((left, right) => left.name.localeCompare(right.name))) {
+        if (!entry.isDirectory() || entry.name.startsWith("."))
+            continue;
+        const installPath = path.join(extensionsDir, entry.name);
+        try {
+            const manifest = await readPluginManifest(installPath);
+            if (manifest.id !== entry.name)
+                continue;
+            plugins.push({ ...manifest, installPath });
+        }
+        catch {
+            // Legacy extension directories and partially-copied external files are not plugins.
+        }
+    }
+    return plugins;
+}
+export async function removePlugin(id, extensionsDir) {
+    const validatedId = PluginManifestSchema.shape.id.parse(id);
+    await fs.rm(path.join(extensionsDir, validatedId), { recursive: true, force: true });
+}
+//# sourceMappingURL=plugin-bundles.js.map

package/dist/core/extensions/plugin-bundles.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-bundles.js","sourceRoot":"","sources":["../../../src/core/extensions/plugin-bundles.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,gBAAgB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AACzC,MAAM,SAAS,GAAG,GAAG,CAAC;AACtB,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC;IACnC,KAAK;IACL,MAAM;IACN,MAAM;IACN,OAAO;IACP,KAAK;IACL,MAAM;IACN,OAAO;IACP,MAAM;CACP,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC;KAClC,MAAM,CAAC;IACN,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3B,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,6BAA6B,CAAC;IACnD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAChC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,qCAAqC,CAAC;IAChE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAC3C,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;CAClD,CAAC;KACD,MAAM,EAAE,CAAC;AAIZ,MAAM,kBAAkB,GAAG,CAAC;KACzB,MAAM,CAAC;IACN,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC;IACpC,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3B,QAAQ,EAAE,oBAAoB;IAC9B,KAAK,EAAE,CAAC;SACL,KAAK,CACJ,CAAC;SACE,MAAM,CAAC;QACN,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACvB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;KAC1B,CAAC;SACD,MAAM,EAAE,CACZ;SACA,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,SAAS,CAAC;CAClB,CAAC;KACD,MAAM,EAAE,CAAC;AAMZ,MAAM,UAAU,kBAAkB,CAAC,SAAiB;IAClD,MAAM,IAAI,GAAG,SAAS,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC7C,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAC9C,IACE,UAAU,KAAK,IAAI;QACnB,UAAU,KAAK,GAAG;QAClB,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC;QAC5B,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC;QACjC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,EACzB,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,uBAAuB,SAAS,EAAE,CAAC,CAAC;IACtD,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,CAAC;IAC/D,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CAAC,iCAAiC,SAAS,EAAE,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,qBAAqB,CAAC,QAAwB,EAAE,KAA0B;IACjF,MAAM,KAAK,GAAG,kBAAkB,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACjD,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;QAC/E,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,KAAK,EAAE,CAAC,CAAC;IAC5E,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;QAC9C,MAAM,WAAW,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;QAChD,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,WAAW,EAAE,KAAK,KAAK,EAAE,CAAC;YAC5D,MAAM,IAAI,KAAK,CAAC,oCAAoC,OAAO,EAAE,CAAC,CAAC;QACjE,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,WAAW,EAAE,CAAC,CAAC;IAC5F,CAAC;AACH,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,IAAY,EACZ,QAAQ,GAAG,EAAE;IAEb,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC5C,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IACrE,MAAM,KAAK,GAA0C,EAAE,CAAC;IACxD,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QACvF,MAAM,aAAa,GAAG,QAAQ,CAAC,CAAC,CAAC,GAAG,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;QAC1E,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;QAChD,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACtC,IAAI,IAAI,CAAC,cAAc,EAAE;YACvB,MAAM,IAAI,KAAK,CAAC,2CAA2C,aAAa,EAAE,CAAC,CAAC;QAC9E,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;YACvB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,YAAY,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC;YACzD,SAAS;QACX,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,aAAa,EAAE,CAAC,CAAC;QAC7F,MAAM,QAAQ,GAAG,kBAAkB,CAAC,aAAa,CAAC,CAAC;QACnD,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAClE,IAAI,KAAK,CAAC,MAAM,GAAG,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,SAAS,QAAQ,CAAC,CAAC;IACrF,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,SAAiB;IACxD,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,EAAE,MAAM,CAAC,CAAC;IAC3E,OAAO,oBAAoB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;AACrD,CAAC;AAED,wFAAwF;AACxF,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,SAAiB,EAAE,UAAkB;IACpE,MAAM,UAAU,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAC7C,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,IAAI,UAAU,CAAC,cAAc,EAAE,EAAE,CAAC;QAC7D,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,SAAS,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,SAAS,CAAC,CAAC;IAC5C,qBAAqB,CAAC,QAAQ,EAAE,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACzE,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC1E,IAAI,UAAU,GAAG,gBAAgB;QAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAE3F,MAAM,MAAM,GAAG;QACb,MAAM,EAAE,iBAA0B;QAClC,aAAa,EAAE,CAAU;QACzB,QAAQ;QACR,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;KAC/F,CAAC;IACF,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9D,MAAM,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/E,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,UAAkB;IAC3C,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACxC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE;QACzC,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,IAAI,IAAI,CAAC,IAAI,GAAG,gBAAgB,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IACpF,MAAM,MAAM,GAAG,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IAC3F,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QAChC,MAAM,QAAQ,GAAG,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/C,IAAI,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,QAAQ,EAAE,CAAC,CAAC;QAC/E,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACpB,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;QACxD,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,aAAa,EAAE,CAAC;YACpD,MAAM,IAAI,KAAK,CAAC,2BAA2B,QAAQ,EAAE,CAAC,CAAC;QACzD,CAAC;QACD,UAAU,IAAI,KAAK,CAAC,MAAM,CAAC;IAC7B,CAAC;IACD,IAAI,UAAU,GAAG,gBAAgB;QAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC3F,qBAAqB,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC9C,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IACvF,MAAM,gBAAgB,GAAG,oBAAoB,CAAC,KAAK,CACjD,IAAI,CAAC,KAAK,CACR,MAAM,CAAC,IAAI,CACT,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,aAAa,CAAE,CAAC,aAAa,EACvE,QAAQ,CACT,CAAC,QAAQ,CAAC,MAAM,CAAC,CACnB,CACF,CAAC;IACF,IAAI,CAAC,iBAAiB,CAAC,gBAAgB,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,2FAA2F;AAC3F,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,UAAkB,EAClB,aAAqB;IAErB,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,UAAU,CAAC,CAAC;IAC7C,MAAM,EAAE,CAAC,KAAK,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAChE,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IACjE,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,MAAM,CAAC,QAAQ,CAAC,EAAE,YAAY,UAAU,EAAE,EAAE,CAAC,CAAC;IAC3F,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,MAAM,CAAC,QAAQ,CAAC,EAAE,WAAW,UAAU,EAAE,EAAE,CAAC,CAAC;IACzF,MAAM,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1D,IAAI,CAAC;QACH,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YAChC,MAAM,QAAQ,GAAG,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC/C,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;YAC1D,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACvE,MAAM,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACzF,CAAC;QACD,IAAI,WAAW,GAAG,KAAK,CAAC;QACxB,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;YACrC,WAAW,GAAG,IAAI,CAAC;QACrB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAC;QACtE,CAAC;QACD,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QACxC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,WAAW;gBAAE,MAAM,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACtE,MAAM,KAAK,CAAC;QACd,CAAC;QACD,IAAI,WAAW;YAAE,MAAM,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACzF,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,EAAE,GAAG,MAAM,CAAC,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC;AAC1D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,aAAqB;IAC9D,IAAI,OAAO,CAAC;IACZ,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IACrE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,CAAC;QAClE,MAAM,KAAK,CAAC;IACd,CAAC;IACD,MAAM,OAAO,GAAsB,EAAE,CAAC;IACtC,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QACvF,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QACjE,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACzD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,WAAW,CAAC,CAAC;YACvD,IAAI,QAAQ,CAAC,EAAE,KAAK,KAAK,CAAC,IAAI;gBAAE,SAAS;YACzC,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAC;QAC7C,CAAC;QAAC,MAAM,CAAC;YACP,oFAAoF;QACtF,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,EAAU,EAAE,aAAqB;IAClE,MAAM,WAAW,GAAG,oBAAoB,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC5D,MAAM,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AACvF,CAAC"}

package/dist/core/extensions/plugin-bundles.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=plugin-bundles.test.d.ts.map

package/dist/core/extensions/plugin-bundles.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-bundles.test.d.ts","sourceRoot":"","sources":["../../../src/core/extensions/plugin-bundles.test.ts"],"names":[],"mappings":""}

package/dist/core/extensions/plugin-bundles.test.js

@@ -0,0 +1,110 @@
+import fs from "node:fs/promises";
+import os from "node:os";
+import path from "node:path";
+import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
+import { ExtensionLoader } from "./loader.js";
+import { installPlugin, listInstalledPlugins, packPlugin, removePlugin } from "./plugin-bundles.js";
+let root;
+let source;
+let extensions;
+let artifact;
+async function writePlugin(id = "example.plugin", version = "1.2.3") {
+    await fs.mkdir(path.join(source, "commands"), { recursive: true });
+    await fs.writeFile(path.join(source, "plugin.json"), JSON.stringify({
+        schemaVersion: 1,
+        id,
+        name: "Example Plugin",
+        version,
+        entry: "index.mjs",
+        commands: ["commands/review.md"],
+    }));
+    await fs.writeFile(path.join(source, "index.mjs"), "export default () => ({ name: 'example', activate() {} });\n");
+    await fs.writeFile(path.join(source, "commands", "review.md"), "Review this change.\n");
+}
+beforeEach(async () => {
+    root = await fs.mkdtemp(path.join(os.tmpdir(), "gg-plugin-test-"));
+    source = path.join(root, "source");
+    extensions = path.join(root, "extensions");
+    artifact = path.join(root, "example.ggplugin");
+    await writePlugin();
+});
+afterEach(async () => {
+    await fs.rm(root, { recursive: true, force: true });
+});
+describe("plugin bundles", () => {
+    it("packs, installs, lists, updates, and removes a portable plugin without rewriting its manifest", async () => {
+        const originalManifest = await fs.readFile(path.join(source, "plugin.json"), "utf8");
+        await packPlugin(source, artifact);
+        const installed = await installPlugin(artifact, extensions);
+        expect(installed).toMatchObject({ id: "example.plugin", version: "1.2.3" });
+        expect(await fs.readFile(path.join(installed.installPath, "plugin.json"), "utf8")).toBe(originalManifest);
+        expect(await fs.readFile(path.join(installed.installPath, "commands", "review.md"), "utf8")).toBe("Review this change.\n");
+        expect(await listInstalledPlugins(extensions)).toEqual([installed]);
+        const loader = new ExtensionLoader();
+        await loader.loadAll(extensions, {});
+        expect(loader.getLoaded()).toMatchObject([{ name: "example" }]);
+        await fs.rm(source, { recursive: true, force: true });
+        await fs.mkdir(source, { recursive: true });
+        await writePlugin("example.plugin", "2.0.0");
+        await packPlugin(source, artifact);
+        await installPlugin(artifact, extensions);
+        expect(await listInstalledPlugins(extensions)).toMatchObject([
+            { id: "example.plugin", version: "2.0.0" },
+        ]);
+        await removePlugin("example.plugin", extensions);
+        expect(await listInstalledPlugins(extensions)).toEqual([]);
+    });
+    it("rejects source symlinks and unsupported executable files", async () => {
+        await fs.symlink(path.join(source, "index.mjs"), path.join(source, "linked.mjs"));
+        await expect(packPlugin(source, artifact)).rejects.toThrow("symlinks");
+        await fs.rm(path.join(source, "linked.mjs"));
+        await fs.writeFile(path.join(source, "payload.exe"), "bad");
+        await expect(packPlugin(source, artifact)).rejects.toThrow("Unsupported plugin file type");
+    });
+    it("does not let manually placed plugin manifests load entries outside their directory", async () => {
+        const pluginDir = path.join(extensions, "malicious");
+        await fs.mkdir(pluginDir, { recursive: true });
+        await fs.writeFile(path.join(pluginDir, "plugin.json"), JSON.stringify({
+            schemaVersion: 1,
+            id: "malicious",
+            name: "Malicious",
+            version: "1.0.0",
+            entry: "../outside.mjs",
+        }));
+        await fs.writeFile(path.join(extensions, "outside.mjs"), "export default () => ({ name: 'escaped', activate() {} });\n");
+        const loader = new ExtensionLoader();
+        const errorSpy = vi.spyOn(console, "error").mockImplementation(() => { });
+        await loader.loadAll(extensions, {});
+        expect(loader.getLoaded()).toEqual([]);
+        expect(errorSpy).toHaveBeenCalledWith(expect.stringContaining("Unsafe plugin path"));
+        errorSpy.mockRestore();
+    });
+    it("rejects traversal and duplicate paths before writing outside the install root", async () => {
+        const manifest = {
+            schemaVersion: 1,
+            id: "example.plugin",
+            name: "Example Plugin",
+            version: "1.0.0",
+            entry: "index.mjs",
+        };
+        await fs.writeFile(artifact, JSON.stringify({
+            format: "gg-agent-plugin",
+            schemaVersion: 1,
+            manifest,
+            files: [
+                {
+                    path: "plugin.json",
+                    contentBase64: Buffer.from(JSON.stringify(manifest)).toString("base64"),
+                },
+                {
+                    path: "index.mjs",
+                    contentBase64: Buffer.from("export default () => ({})").toString("base64"),
+                },
+                { path: "../escaped.js", contentBase64: Buffer.from("bad").toString("base64") },
+            ],
+        }));
+        await expect(installPlugin(artifact, extensions)).rejects.toThrow("Unsafe plugin path");
+        await expect(fs.stat(path.join(root, "escaped.js"))).rejects.toMatchObject({ code: "ENOENT" });
+    });
+});
+//# sourceMappingURL=plugin-bundles.test.js.map

package/dist/core/extensions/plugin-bundles.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-bundles.test.js","sourceRoot":"","sources":["../../../src/core/extensions/plugin-bundles.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACzE,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,oBAAoB,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAEpG,IAAI,IAAY,CAAC;AACjB,IAAI,MAAc,CAAC;AACnB,IAAI,UAAkB,CAAC;AACvB,IAAI,QAAgB,CAAC;AAErB,KAAK,UAAU,WAAW,CAAC,EAAE,GAAG,gBAAgB,EAAE,OAAO,GAAG,OAAO;IACjE,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACnE,MAAM,EAAE,CAAC,SAAS,CAChB,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,aAAa,CAAC,EAChC,IAAI,CAAC,SAAS,CAAC;QACb,aAAa,EAAE,CAAC;QAChB,EAAE;QACF,IAAI,EAAE,gBAAgB;QACtB,OAAO;QACP,KAAK,EAAE,WAAW;QAClB,QAAQ,EAAE,CAAC,oBAAoB,CAAC;KACjC,CAAC,CACH,CAAC;IACF,MAAM,EAAE,CAAC,SAAS,CAChB,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,EAC9B,8DAA8D,CAC/D,CAAC;IACF,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,EAAE,WAAW,CAAC,EAAE,uBAAuB,CAAC,CAAC;AAC1F,CAAC;AAED,UAAU,CAAC,KAAK,IAAI,EAAE;IACpB,IAAI,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,iBAAiB,CAAC,CAAC,CAAC;IACnE,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACnC,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IAC3C,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC;IAC/C,MAAM,WAAW,EAAE,CAAC;AACtB,CAAC,CAAC,CAAC;AAEH,SAAS,CAAC,KAAK,IAAI,EAAE;IACnB,MAAM,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AACtD,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,EAAE,CAAC,+FAA+F,EAAE,KAAK,IAAI,EAAE;QAC7G,MAAM,gBAAgB,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,aAAa,CAAC,EAAE,MAAM,CAAC,CAAC;QACrF,MAAM,UAAU,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACnC,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAE5D,MAAM,CAAC,SAAS,CAAC,CAAC,aAAa,CAAC,EAAE,EAAE,EAAE,gBAAgB,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;QAC5E,MAAM,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,aAAa,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CACrF,gBAAgB,CACjB,CAAC;QACF,MAAM,CACJ,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,UAAU,EAAE,WAAW,CAAC,EAAE,MAAM,CAAC,CACrF,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;QAChC,MAAM,CAAC,MAAM,oBAAoB,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;QACpE,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QACrC,MAAM,MAAM,CAAC,OAAO,CAAC,UAAU,EAAE,EAAW,CAAC,CAAC;QAC9C,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;QAEhE,MAAM,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,MAAM,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5C,MAAM,WAAW,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAC;QAC7C,MAAM,UAAU,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACnC,MAAM,aAAa,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAC1C,MAAM,CAAC,MAAM,oBAAoB,CAAC,UAAU,CAAC,CAAC,CAAC,aAAa,CAAC;YAC3D,EAAE,EAAE,EAAE,gBAAgB,EAAE,OAAO,EAAE,OAAO,EAAE;SAC3C,CAAC,CAAC;QAEH,MAAM,YAAY,CAAC,gBAAgB,EAAE,UAAU,CAAC,CAAC;QACjD,MAAM,CAAC,MAAM,oBAAoB,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;QACxE,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC;QAClF,MAAM,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QACvE,MAAM,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC;QAC7C,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,aAAa,CAAC,EAAE,KAAK,CAAC,CAAC;QAC5D,MAAM,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,8BAA8B,CAAC,CAAC;IAC7F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oFAAoF,EAAE,KAAK,IAAI,EAAE;QAClG,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;QACrD,MAAM,EAAE,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/C,MAAM,EAAE,CAAC,SAAS,CAChB,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,EACnC,IAAI,CAAC,SAAS,CAAC;YACb,aAAa,EAAE,CAAC;YAChB,EAAE,EAAE,WAAW;YACf,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,OAAO;YAChB,KAAK,EAAE,gBAAgB;SACxB,CAAC,CACH,CAAC;QACF,MAAM,EAAE,CAAC,SAAS,CAChB,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC,EACpC,8DAA8D,CAC/D,CAAC;QACF,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QACrC,MAAM,QAAQ,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAEzE,MAAM,MAAM,CAAC,OAAO,CAAC,UAAU,EAAE,EAAW,CAAC,CAAC;QAE9C,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACvC,MAAM,CAAC,QAAQ,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,gBAAgB,CAAC,oBAAoB,CAAC,CAAC,CAAC;QACrF,QAAQ,CAAC,WAAW,EAAE,CAAC;IACzB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+EAA+E,EAAE,KAAK,IAAI,EAAE;QAC7F,MAAM,QAAQ,GAAG;YACf,aAAa,EAAE,CAAC;YAChB,EAAE,EAAE,gBAAgB;YACpB,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,OAAO;YAChB,KAAK,EAAE,WAAW;SACnB,CAAC;QACF,MAAM,EAAE,CAAC,SAAS,CAChB,QAAQ,EACR,IAAI,CAAC,SAAS,CAAC;YACb,MAAM,EAAE,iBAAiB;YACzB,aAAa,EAAE,CAAC;YAChB,QAAQ;YACR,KAAK,EAAE;gBACL;oBACE,IAAI,EAAE,aAAa;oBACnB,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;iBACxE;gBACD;oBACE,IAAI,EAAE,WAAW;oBACjB,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;iBAC3E;gBACD,EAAE,IAAI,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE;aAChF;SACF,CAAC,CACH,CAAC;QAEF,MAAM,MAAM,CAAC,aAAa,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;QACxF,MAAM,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IACjG,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/core/foreign-session-import.d.ts

@@ -0,0 +1,120 @@
+import type { Message, Provider } from "@prestyj/ai";
+import { type SessionManager } from "./session-manager.js";
+/**
+ * Parse a foreign coding-agent transcript (Claude Code, Codex, Cursor) into
+ * EZ Coder messages so the thread can be resumed here.
+ *
+ * `project-discovery.ts` already walks `~/.claude/projects` and
+ * `~/.codex/sessions`, but only to recover a cwd. This module reads the message
+ * records themselves.
+ *
+ * Import is lossy **by design**: anything we cannot map faithfully is dropped
+ * and counted, never fabricated. `ForeignImportResult.dropped` reports exactly
+ * what was lost so the caller can record it on the imported session.
+ */
+export type ForeignFormat = "claude" | "codex" | "cursor";
+export interface ForeignImportDropped {
+    /** Tool results whose call we could not pair, or whose payload was unmappable. */
+    toolResults: number;
+    /** Records recognized as messages but with no usable content. */
+    messages: number;
+    /** Lines that were not valid JSON or not a known record shape. */
+    records: number;
+}
+export interface ForeignImportResult {
+    format: ForeignFormat;
+    messages: Message[];
+    /** Working directory recorded by the source agent, when it stored one. */
+    cwd?: string;
+    /** First user prompt, used as the session preview/title. */
+    preview?: string;
+    /** Epoch millis of the earliest record, when the source recorded timestamps. */
+    startedAt?: number;
+    dropped: ForeignImportDropped;
+}
+/** Human-readable summary of what an import discarded. */
+export declare function describeDropped(dropped: ForeignImportDropped): string;
+/**
+ * Identify a transcript from its records. Detection is shape-based, not
+ * filename-based, so a transcript copied out of its home directory still
+ * imports correctly.
+ */
+export declare function detectForeignFormat(text: string): ForeignFormat | undefined;
+export declare function parseForeignTranscript(text: string, format?: ForeignFormat): ForeignImportResult;
+/**
+ * Claude Code writes one JSONL record per DAG node under
+ * `~/.claude/projects/<encoded-cwd>/<session>.jsonl`. Message records are
+ * `{ type: "user"|"assistant", message: { role, content }, uuid, cwd, timestamp }`
+ * where `content` is a string or an Anthropic content-block array. Non-message
+ * record types (system, file-history-snapshot, mode, …) are UI state, not
+ * conversation, and are skipped without counting as data loss.
+ */
+export declare function parseClaudeTranscript(text: string): ForeignImportResult;
+/**
+ * Codex rollouts live at `~/.codex/sessions/YYYY/MM/DD/rollout-*.jsonl`.
+ * Current records are `{ timestamp, type, payload }` where `type` is
+ * `session_meta` / `response_item` / `event_msg` / `turn_context`; older
+ * rollouts wrote the payload at the top level with no wrapper.
+ *
+ * Only `response_item` carries the model conversation. `event_msg` duplicates
+ * it for the UI, so importing both would double every turn.
+ */
+export declare function parseCodexTranscript(text: string): ForeignImportResult;
+/**
+ * Cursor exports a flat JSONL chat log: one record per turn, carrying a role
+ * and either a plain `text`/`content` string or a content-block array.
+ *
+ * The part that actually matters on import is the wrapping: Cursor sends the
+ * typed prompt inside `<user_query>`, preceded by context blocks such as
+ * `<cursor_commands>` and `<timestamp>`. Importing that verbatim leaks harness
+ * scaffolding into the session title and preview, so a recognized wrapper is
+ * stripped while a message with UNRECOGNIZED leading context is kept intact —
+ * that text may be something the user genuinely wrote.
+ */
+export declare function parseCursorTranscript(text: string): ForeignImportResult;
+export interface ImportedSession {
+    sessionId: string;
+    sessionPath: string;
+    cwd: string;
+    messageCount: number;
+    format: ForeignFormat;
+    dropped: ForeignImportDropped;
+    preview?: string;
+}
+export interface ImportForeignSessionOptions {
+    /** Path to the foreign JSONL transcript. */
+    filePath: string;
+    sessionManager: SessionManager;
+    provider: Provider;
+    model: string;
+    /** Overrides the cwd recorded by the source agent. */
+    cwd?: string;
+    /** Skips detection when the caller already knows the format. */
+    format?: ForeignFormat;
+}
+/**
+ * Read a foreign transcript and write it out as a real EZ Coder session, so it
+ * resumes through the existing loader with no reader changes: a v2
+ * `SessionHeader` from `SessionManager.create()`, one `MessageEntry` per
+ * message chained through `parentId`, and a final leaf pointer.
+ *
+ * An `import` app marker records the source and everything the import dropped —
+ * import is lossy by definition, and a silent loss is worse than a noted one.
+ */
+export declare function importForeignSession(opts: ImportForeignSessionOptions): Promise<ImportedSession>;
+/** Never-throwing result shape shared by the CLI, the sidecar and the app. */
+export type ImportForeignTranscriptResult = {
+    ok: true;
+    sessionId: string;
+    sessionPath: string;
+    cwd: string;
+    format: ForeignFormat;
+    messageCount: number;
+    /** Human-readable summary of what the lossy import discarded. */
+    dropped: string;
+    preview?: string;
+} | {
+    ok: false;
+    error: string;
+};
+//# sourceMappingURL=foreign-session-import.d.ts.map

package/dist/core/foreign-session-import.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"foreign-session-import.d.ts","sourceRoot":"","sources":["../../src/core/foreign-session-import.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAe,OAAO,EAAE,QAAQ,EAAc,MAAM,aAAa,CAAC;AAC9E,OAAO,EAKL,KAAK,cAAc,EACpB,MAAM,sBAAsB,CAAC;AAc9B;;;;;;;;;;;GAWG;AAEH,MAAM,MAAM,aAAa,GAAG,QAAQ,GAAG,OAAO,GAAG,QAAQ,CAAC;AAE1D,MAAM,WAAW,oBAAoB;IACnC,kFAAkF;IAClF,WAAW,EAAE,MAAM,CAAC;IACpB,iEAAiE;IACjE,QAAQ,EAAE,MAAM,CAAC;IACjB,kEAAkE;IAClE,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,aAAa,CAAC;IACtB,QAAQ,EAAE,OAAO,EAAE,CAAC;IACpB,0EAA0E;IAC1E,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,4DAA4D;IAC5D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,gFAAgF;IAChF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,oBAAoB,CAAC;CAC/B;AAID,0DAA0D;AAC1D,wBAAgB,eAAe,CAAC,OAAO,EAAE,oBAAoB,GAAG,MAAM,CAMrE;AAID;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS,CAyC3E;AAID,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,aAAa,GAAG,mBAAmB,CAehG;AAkID;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,mBAAmB,CA2FvE;AAID;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,mBAAmB,CA+DtE;AA4CD;;;;;;;;;;GAUG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,mBAAmB,CAgCvE;AAqDD,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,aAAa,CAAC;IACtB,OAAO,EAAE,oBAAoB,CAAC;IAC9B,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,2BAA2B;IAC1C,4CAA4C;IAC5C,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,cAAc,CAAC;IAC/B,QAAQ,EAAE,QAAQ,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,sDAAsD;IACtD,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,gEAAgE;IAChE,MAAM,CAAC,EAAE,aAAa,CAAC;CACxB;AAED;;;;;;;;GAQG;AACH,wBAAsB,oBAAoB,CACxC,IAAI,EAAE,2BAA2B,GAChC,OAAO,CAAC,eAAe,CAAC,CAsE1B;AAED,8EAA8E;AAC9E,MAAM,MAAM,6BAA6B,GACrC;IACE,EAAE,EAAE,IAAI,CAAC;IACT,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,aAAa,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,iEAAiE;IACjE,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,GACD;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC"}