@relayflows/sdk 2.0.24 → 2.0.26

package/dist/plugin-source.js

@@ -0,0 +1,84 @@
+import { safePath } from './bundle.js';
+import { PluginError } from './plugin-manifest.js';
+const OWNER = /^[A-Za-z0-9](?:[A-Za-z0-9-]{0,38})$/;
+const REPO = /^[A-Za-z0-9_.-]{1,100}$/;
+const REF = /^[A-Za-z0-9][A-Za-z0-9._/-]{0,254}$/;
+export const SHA = /^[0-9a-f]{40}$/;
+function invalid(message) {
+    throw new PluginError('plugin_source_invalid', message);
+}
+export function isGithubPluginRef(value) {
+    return value.startsWith('github:') || /^https:\/\/github\.com\//.test(value);
+}
+/**
+ * Accepts `github:<owner>/<repo>@<ref>#<path>`,
+ * `https://github.com/<owner>/<repo>/tree/<ref>/<path>` (or `/blob/`), and
+ * `github:<owner>/<repo>@<ref>` for a root-level plugin.
+ *
+ * In the URL form the ref is the single segment after `tree/`: GitHub itself
+ * disambiguates `tree/feat/x/dir` against the repository's refs, which an
+ * offline parser cannot. A ref containing `/` must use the `github:` form,
+ * where `@ref#path` is unambiguous.
+ */
+export function parsePluginSource(input) {
+    if (input.length > 2048)
+        return invalid('Plugin source is too long.');
+    let owner, repo, ref, path = '';
+    if (input.startsWith('github:')) {
+        const m = /^github:([^/@#]+)\/([^/@#]+)@([^#]+)(?:#(.*))?$/.exec(input);
+        if (!m)
+            return invalid('Expected github:<owner>/<repo>@<ref>[#<path>].');
+        [, owner, repo, ref] = m;
+        path = m[4] ?? '';
+    }
+    else if (/^https:\/\/github\.com\//.test(input)) {
+        let url;
+        try {
+            url = new URL(input);
+        }
+        catch {
+            return invalid('Plugin source is not a valid URL.');
+        }
+        if (url.username || url.password || url.search || url.hash)
+            return invalid('Plugin URL must not carry credentials, a query, or a fragment.');
+        const m = /^\/([^/]+)\/([^/]+)\/(?:tree|blob)\/([^/]+)(?:\/(.*))?$/.exec(url.pathname);
+        if (!m)
+            return invalid('Expected https://github.com/<owner>/<repo>/tree/<ref>/<path>.');
+        try {
+            [, owner, repo, ref] = m.map(part => part === undefined ? part : decodeURIComponent(part));
+            path = m[4] === undefined ? '' : decodeURIComponent(m[4]);
+        }
+        catch {
+            return invalid('Plugin URL contains invalid percent-encoding.');
+        }
+    }
+    else
+        return invalid('Expected a github: reference or a https://github.com/ URL.');
+    if (owner === undefined || !OWNER.test(owner))
+        return invalid('Invalid GitHub owner.');
+    if (repo === undefined || !REPO.test(repo) || repo === '.' || repo === '..')
+        return invalid('Invalid GitHub repository name.');
+    if (repo.endsWith('.git'))
+        repo = repo.slice(0, -4);
+    if (ref === undefined || !REF.test(ref) || ref.includes('..') || ref.endsWith('/') || ref.endsWith('.lock'))
+        return invalid('Invalid git ref.');
+    path = path.replace(/\/+$/, '');
+    if (path !== '' && !safePath(path))
+        return invalid('Plugin path must be repository-relative without traversal.');
+    if (path.split('/').some(part => part === 'flows-plugin.json'))
+        return invalid('Plugin path names the directory holding flows-plugin.json, not the file.');
+    return Object.freeze({ host: 'github', owner, repo, ref, path });
+}
+/** The one spelling that is ever persisted. */
+export function canonicalPluginRef(source) {
+    return `github:${source.owner}/${source.repo}@${source.sha}${source.path === '' ? '' : `#${source.path}`}`;
+}
+/** Parses a persisted reference; refuses anything but the canonical sha form. */
+export function parseCanonicalPluginRef(value) {
+    const parsed = parsePluginSource(value);
+    if (!value.startsWith('github:') || !SHA.test(parsed.ref)) {
+        throw new PluginError('plugin_source_invalid', `Persisted plugin reference must be github:<owner>/<repo>@<sha>[#<path>], got ${value}.`);
+    }
+    return Object.freeze({ ...parsed, sha: parsed.ref });
+}
+//# sourceMappingURL=plugin-source.js.map

package/dist/plugin-source.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-source.js","sourceRoot":"","sources":["../src/plugin-source.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAuBnD,MAAM,KAAK,GAAG,qCAAqC,CAAC;AACpD,MAAM,IAAI,GAAG,yBAAyB,CAAC;AACvC,MAAM,GAAG,GAAG,qCAAqC,CAAC;AAClD,MAAM,CAAC,MAAM,GAAG,GAAG,gBAAgB,CAAC;AAEpC,SAAS,OAAO,CAAC,OAAe;IAC9B,MAAM,IAAI,WAAW,CAAC,uBAAuB,EAAE,OAAO,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAa;IAC7C,OAAO,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,0BAA0B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC/E,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAa;IAC7C,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI;QAAE,OAAO,OAAO,CAAC,4BAA4B,CAAC,CAAC;IACtE,IAAI,KAAyB,EAAE,IAAwB,EAAE,GAAuB,EAAE,IAAI,GAAG,EAAE,CAAC;IAC5F,IAAI,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAChC,MAAM,CAAC,GAAG,iDAAiD,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxE,IAAI,CAAC,CAAC;YAAE,OAAO,OAAO,CAAC,gDAAgD,CAAC,CAAC;QACzE,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;QACzB,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACpB,CAAC;SAAM,IAAI,0BAA0B,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAClD,IAAI,GAAQ,CAAC;QACb,IAAI,CAAC;YAAC,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,OAAO,CAAC,mCAAmC,CAAC,CAAC;QAAC,CAAC;QAC5F,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI;YAAE,OAAO,OAAO,CAAC,gEAAgE,CAAC,CAAC;QAC7I,MAAM,CAAC,GAAG,yDAAyD,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACvF,IAAI,CAAC,CAAC;YAAE,OAAO,OAAO,CAAC,+DAA+D,CAAC,CAAC;QACxF,IAAI,CAAC;YACH,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC;YAC3F,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5D,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,OAAO,CAAC,+CAA+C,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;;QAAM,OAAO,OAAO,CAAC,4DAA4D,CAAC,CAAC;IACpF,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC,uBAAuB,CAAC,CAAC;IACvF,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,OAAO,CAAC,iCAAiC,CAAC,CAAC;IAC/H,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACpD,IAAI,GAAG,KAAK,SAAS,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAChJ,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAChC,IAAI,IAAI,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,OAAO,CAAC,4DAA4D,CAAC,CAAC;IACjH,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,mBAAmB,CAAC;QAAE,OAAO,OAAO,CAAC,0EAA0E,CAAC,CAAC;IAC3J,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;AACnE,CAAC;AAED,+CAA+C;AAC/C,MAAM,UAAU,kBAAkB,CAAC,MAAuB;IACxD,OAAO,UAAU,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,GAAG,GAAG,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;AAC7G,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,uBAAuB,CAAC,KAAa;IACnD,MAAM,MAAM,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;IACxC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,WAAW,CAAC,uBAAuB,EAAE,gFAAgF,KAAK,GAAG,CAAC,CAAC;IAC3I,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;AACvD,CAAC"}

package/dist/plugin-store.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Where a flow-extension plugin's bytes live inside a project:
+ * `<project>/.flows/plugins/<name>@sha256:<digest>/`, content-addressed like
+ * the bundle cache and never `node_modules`. `manifest.json` in that directory
+ * is the payload manifest whose sha256 is the digest, so a directory can be
+ * re-verified without the network — and, because the lockfile records the
+ * same digest, drift between what was installed and what is on disk is a
+ * refusal, not a surprise.
+ */
+export declare const PLUGIN_STORE = ".flows/plugins";
+export declare function pluginStoreDirectory(root: string, name: string, digest: string): string;
+export interface StoredPluginFile {
+    readonly path: string;
+    readonly data: Uint8Array;
+}
+/** Write the files atomically; an existing directory is verified instead of overwritten. */
+export declare function materializePlugin(root: string, name: string, files: readonly StoredPluginFile[]): Promise<{
+    directory: string;
+    digest: string;
+}>;
+/** Re-hash a materialized plugin and compare with the digest the lockfile recorded. */
+export declare function verifyStoredPlugin(directory: string, expectedDigest: string): Promise<void>;
+/** Re-verify, then return every stored file including the payload `manifest.json`. */
+export declare function readStoredPluginFiles(directory: string, expectedDigest: string): Promise<readonly {
+    path: string;
+    data: Buffer;
+}[]>;
+/** Drop a materialized plugin directory. Missing is a no-op. */
+export declare function removeStoredPlugin(directory: string): Promise<void>;
+//# sourceMappingURL=plugin-store.d.ts.map

package/dist/plugin-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-store.d.ts","sourceRoot":"","sources":["../src/plugin-store.ts"],"names":[],"mappings":"AAKA;;;;;;;;GAQG;AACH,eAAO,MAAM,YAAY,mBAAmB,CAAC;AAE7C,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAEvF;AAED,MAAM,WAAW,gBAAgB;IAAG,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAA;CAAE;AAEtF,4FAA4F;AAC5F,wBAAsB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,gBAAgB,EAAE,GAAG,OAAO,CAAC;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAyBtJ;AAWD,uFAAuF;AACvF,wBAAsB,kBAAkB,CAAC,SAAS,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAqBjG;AAED,sFAAsF;AACtF,wBAAsB,qBAAqB,CAAC,SAAS,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,EAAE,CAAC,CAOzI;AAED,gEAAgE;AAChE,wBAAsB,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAEzE"}

package/dist/plugin-store.js

@@ -0,0 +1,133 @@
+import { lstat, mkdir, mkdtemp, readFile, readdir, rename, rm, writeFile } from 'node:fs/promises';
+import { dirname, join, resolve } from 'node:path';
+import { payloadManifest, safePath, sha256 } from './bundle.js';
+import { PluginError } from './plugin-manifest.js';
+/**
+ * Where a flow-extension plugin's bytes live inside a project:
+ * `<project>/.flows/plugins/<name>@sha256:<digest>/`, content-addressed like
+ * the bundle cache and never `node_modules`. `manifest.json` in that directory
+ * is the payload manifest whose sha256 is the digest, so a directory can be
+ * re-verified without the network — and, because the lockfile records the
+ * same digest, drift between what was installed and what is on disk is a
+ * refusal, not a surprise.
+ */
+export const PLUGIN_STORE = '.flows/plugins';
+export function pluginStoreDirectory(root, name, digest) {
+    return join(resolve(root), PLUGIN_STORE, `${name}@sha256:${digest}`);
+}
+/** Write the files atomically; an existing directory is verified instead of overwritten. */
+export async function materializePlugin(root, name, files) {
+    const manifest = payloadManifest(files);
+    const digest = sha256(manifest);
+    const directory = pluginStoreDirectory(root, name, digest);
+    let exists = false;
+    try {
+        await lstat(directory);
+        exists = true;
+    }
+    catch (error) {
+        if (error.code !== 'ENOENT')
+            throw error;
+    }
+    if (exists) {
+        await verifyStoredPlugin(directory, digest);
+        return { directory, digest };
+    }
+    const parent = dirname(directory);
+    await mkdir(parent, { recursive: true });
+    const staging = await mkdtemp(join(parent, '.install-'));
+    try {
+        for (const file of files) {
+            if (!safePath(file.path) || file.path === 'manifest.json')
+                throw new PluginError('plugin_path_invalid', `${file.path}: invalid plugin path.`);
+            await mkdir(dirname(join(staging, file.path)), { recursive: true });
+            await writeFile(join(staging, file.path), file.data, { mode: 0o644 });
+        }
+        await writeFile(join(staging, 'manifest.json'), manifest);
+        try {
+            await rename(staging, directory);
+        }
+        catch (error) {
+            if (!['EEXIST', 'ENOTEMPTY'].includes(error.code ?? ''))
+                throw error;
+            await verifyStoredPlugin(directory, digest);
+        }
+    }
+    finally {
+        await rm(staging, { recursive: true, force: true });
+    }
+    return { directory, digest };
+}
+async function regularFile(root, path) {
+    const parts = path.split('/');
+    for (let i = 1; i <= parts.length; i++) {
+        const stat = await lstat(join(root, ...parts.slice(0, i)));
+        if (i === parts.length ? !stat.isFile() : !stat.isDirectory())
+            throw new PluginError('plugin_source_drift', `${path}: expected a regular file, without symlinks.`);
+    }
+    return readFile(join(root, path));
+}
+/** Re-hash a materialized plugin and compare with the digest the lockfile recorded. */
+export async function verifyStoredPlugin(directory, expectedDigest) {
+    const drift = (message) => { throw new PluginError('plugin_source_drift', `${directory}: ${message}`); };
+    let raw;
+    try {
+        if (!(await lstat(directory)).isDirectory())
+            return drift('not a directory');
+        raw = (await regularFile(directory, 'manifest.json')).toString('utf8');
+    }
+    catch (error) {
+        return drift(error instanceof PluginError ? error.message : 'manifest.json is missing');
+    }
+    if (sha256(raw) !== expectedDigest)
+        return drift('manifest.json digest differs from the lockfile');
+    let entries;
+    try {
+        entries = JSON.parse(raw);
+        if (!Array.isArray(entries))
+            throw new Error();
+    }
+    catch {
+        return drift('manifest.json is not a manifest');
+    }
+    const paths = new Set();
+    for (const entry of entries) {
+        if (typeof entry?.path !== 'string' || !safePath(entry.path))
+            return drift('manifest.json lists an invalid path');
+        let data;
+        try {
+            data = await regularFile(directory, entry.path);
+        }
+        catch (error) {
+            return drift(error instanceof PluginError ? error.message : `${entry.path} is missing`);
+        }
+        if (data.length !== entry.bytes || sha256(data) !== entry.sha256)
+            return drift(`${entry.path} changed since installation`);
+        paths.add(entry.path);
+    }
+    await rejectExtras(directory, '', new Set([...paths, 'manifest.json']), drift);
+}
+/** Re-verify, then return every stored file including the payload `manifest.json`. */
+export async function readStoredPluginFiles(directory, expectedDigest) {
+    await verifyStoredPlugin(directory, expectedDigest);
+    const manifest = await regularFile(directory, 'manifest.json');
+    const entries = JSON.parse(manifest.toString('utf8'));
+    const files = [{ path: 'manifest.json', data: manifest }];
+    for (const entry of entries)
+        files.push({ path: entry.path, data: await regularFile(directory, entry.path) });
+    return files;
+}
+/** Drop a materialized plugin directory. Missing is a no-op. */
+export async function removeStoredPlugin(directory) {
+    await rm(directory, { recursive: true, force: true });
+}
+async function rejectExtras(root, prefix, paths, drift) {
+    for (const entry of await readdir(join(root, prefix), { withFileTypes: true })) {
+        const path = prefix + entry.name;
+        if (entry.isDirectory() && [...paths].some(file => file.startsWith(`${path}/`)))
+            await rejectExtras(root, `${path}/`, paths, drift);
+        else if (!entry.isFile() || !paths.has(path))
+            drift(`${path}: unlisted file or unsupported file type`);
+    }
+}
+//# sourceMappingURL=plugin-store.js.map

package/dist/plugin-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-store.js","sourceRoot":"","sources":["../src/plugin-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACnG,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAChE,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAEnD;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,gBAAgB,CAAC;AAE7C,MAAM,UAAU,oBAAoB,CAAC,IAAY,EAAE,IAAY,EAAE,MAAc;IAC7E,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,GAAG,IAAI,WAAW,MAAM,EAAE,CAAC,CAAC;AACvE,CAAC;AAID,4FAA4F;AAC5F,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAAY,EAAE,IAAY,EAAE,KAAkC;IACpG,MAAM,QAAQ,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IACxC,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;IAChC,MAAM,SAAS,GAAG,oBAAoB,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IAC3D,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,IAAI,CAAC;QAAC,MAAM,KAAK,CAAC,SAAS,CAAC,CAAC;QAAC,MAAM,GAAG,IAAI,CAAC;IAAC,CAAC;IAC9C,OAAO,KAAK,EAAE,CAAC;QAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAC;IAAC,CAAC;IACtF,IAAI,MAAM,EAAE,CAAC;QAAC,MAAM,kBAAkB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAAC,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;IAAC,CAAC;IAC1F,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IAClC,MAAM,KAAK,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC;IACzD,IAAI,CAAC;QACH,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,KAAK,eAAe;gBAAE,MAAM,IAAI,WAAW,CAAC,qBAAqB,EAAE,GAAG,IAAI,CAAC,IAAI,wBAAwB,CAAC,CAAC;YAC9I,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACpE,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACxE,CAAC;QACD,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,EAAE,QAAQ,CAAC,CAAC;QAC1D,IAAI,CAAC;YAAC,MAAM,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAAC,CAAC;QACzC,OAAO,KAAK,EAAE,CAAC;YACb,IAAI,CAAC,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAE,KAA+B,CAAC,IAAI,IAAI,EAAE,CAAC;gBAAE,MAAM,KAAK,CAAC;YAChG,MAAM,kBAAkB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;YAAS,CAAC;QAAC,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAAC,CAAC;IAClE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;AAC/B,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,IAAY,EAAE,IAAY;IACnD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3D,IAAI,CAAC,KAAK,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE;YAAE,MAAM,IAAI,WAAW,CAAC,qBAAqB,EAAE,GAAG,IAAI,8CAA8C,CAAC,CAAC;IACrK,CAAC;IACD,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;AACpC,CAAC;AAED,uFAAuF;AACvF,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,SAAiB,EAAE,cAAsB;IAChF,MAAM,KAAK,GAAG,CAAC,OAAe,EAAS,EAAE,GAAG,MAAM,IAAI,WAAW,CAAC,qBAAqB,EAAE,GAAG,SAAS,KAAK,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACxH,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,EAAE;YAAE,OAAO,KAAK,CAAC,iBAAiB,CAAC,CAAC;QAC7E,GAAG,GAAG,CAAC,MAAM,WAAW,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACzE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,OAAO,KAAK,CAAC,KAAK,YAAY,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC;IAAC,CAAC;IAC5G,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,cAAc;QAAE,OAAO,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACnG,IAAI,OAA0D,CAAC;IAC/D,IAAI,CAAC;QAAC,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;YAAE,MAAM,IAAI,KAAK,EAAE,CAAC;IAAC,CAAC;IAClF,MAAM,CAAC;QAAC,OAAO,KAAK,CAAC,iCAAiC,CAAC,CAAC;IAAC,CAAC;IAC1D,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,OAAO,KAAK,EAAE,IAAI,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC,qCAAqC,CAAC,CAAC;QAClH,IAAI,IAAY,CAAC;QACjB,IAAI,CAAC;YAAC,IAAI,GAAG,MAAM,WAAW,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC;QACxD,OAAO,KAAK,EAAE,CAAC;YAAC,OAAO,KAAK,CAAC,KAAK,YAAY,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,aAAa,CAAC,CAAC;QAAC,CAAC;QAC1G,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC,GAAG,KAAK,CAAC,IAAI,6BAA6B,CAAC,CAAC;QAC3H,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC;IACD,MAAM,YAAY,CAAC,SAAS,EAAE,EAAE,EAAE,IAAI,GAAG,CAAC,CAAC,GAAG,KAAK,EAAE,eAAe,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;AACjF,CAAC;AAED,sFAAsF;AACtF,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,SAAiB,EAAE,cAAsB;IACnF,MAAM,kBAAkB,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;IACpD,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;IAC/D,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAuB,CAAC;IAC5E,MAAM,KAAK,GAAG,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC1D,KAAK,MAAM,KAAK,IAAI,OAAO;QAAE,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC9G,OAAO,KAAK,CAAC;AACf,CAAC;AAED,gEAAgE;AAChE,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,SAAiB;IACxD,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AACxD,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,IAAY,EAAE,MAAc,EAAE,KAAkB,EAAE,KAA2B;IACvG,KAAK,MAAM,KAAK,IAAI,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QAC/E,MAAM,IAAI,GAAG,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC;QACjC,IAAI,KAAK,CAAC,WAAW,EAAE,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC;YAAE,MAAM,YAAY,CAAC,IAAI,EAAE,GAAG,IAAI,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;aAC/H,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,KAAK,CAAC,GAAG,IAAI,0CAA0C,CAAC,CAAC;IACzG,CAAC;AACH,CAAC"}

package/dist/semver-range.d.ts

@@ -0,0 +1,10 @@
+interface Parsed {
+    readonly triple: readonly [number, number, number];
+    readonly pre?: string;
+}
+export declare function parseVersion(value: string): Parsed | undefined;
+export declare function isVersionRange(value: string): boolean;
+/** Whether `version` satisfies `range`; false for malformed input rather than a throw. */
+export declare function satisfiesRange(version: string, range: string): boolean;
+export {};
+//# sourceMappingURL=semver-range.d.ts.map

package/dist/semver-range.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"semver-range.d.ts","sourceRoot":"","sources":["../src/semver-range.ts"],"names":[],"mappings":"AAYA,UAAU,MAAM;IAAG,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE;AAE9F,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAM9D;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAErD;AAgCD,0FAA0F;AAC1F,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAgBtE"}

package/dist/semver-range.js

@@ -0,0 +1,88 @@
+/**
+ * The small semver subset plugin `compat` ranges may use. Deliberately not a
+ * dependency on `semver`: a plugin's compatibility claim has to be checkable by
+ * every reader — Cloud, the CLI, a catalog — from one short, obvious rule.
+ *
+ * Accepted: `*`, `x.y.z`, `^x.y.z`, `~x.y.z`, `>=x.y.z`, `>=x.y.z <a.b.c`.
+ * Prerelease tags are ordered lexically after the numeric triple and only
+ * compare against a range whose bounds name the same triple.
+ */
+const VERSION = /^(\d+)\.(\d+)\.(\d+)(?:-([0-9A-Za-z.-]+))?$/;
+const RANGE = /^(\*|(?:[\^~]|>=)?\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?(?: <\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?)?)$/;
+export function parseVersion(value) {
+    const m = VERSION.exec(value);
+    if (!m)
+        return undefined;
+    const triple = [Number(m[1]), Number(m[2]), Number(m[3])];
+    if (triple.some(n => !Number.isSafeInteger(n)))
+        return undefined;
+    return m[4] === undefined ? { triple } : { triple, pre: m[4] };
+}
+export function isVersionRange(value) {
+    return RANGE.test(value);
+}
+function compare(a, b) {
+    for (let i = 0; i < 3; i++)
+        if (a.triple[i] !== b.triple[i])
+            return a.triple[i] - b.triple[i];
+    if (a.pre === b.pre)
+        return 0;
+    if (a.pre === undefined)
+        return 1;
+    if (b.pre === undefined)
+        return -1;
+    return comparePrerelease(a.pre, b.pre);
+}
+function comparePrerelease(a, b) {
+    const as = a.split('.');
+    const bs = b.split('.');
+    const n = Math.max(as.length, bs.length);
+    for (let i = 0; i < n; i++) {
+        const left = as[i];
+        const right = bs[i];
+        if (left === undefined)
+            return -1;
+        if (right === undefined)
+            return 1;
+        const leftNum = /^\d+$/.test(left) ? Number(left) : undefined;
+        const rightNum = /^\d+$/.test(right) ? Number(right) : undefined;
+        if (leftNum !== undefined && rightNum !== undefined) {
+            if (leftNum !== rightNum)
+                return leftNum - rightNum;
+            continue;
+        }
+        if (leftNum !== undefined)
+            return -1;
+        if (rightNum !== undefined)
+            return 1;
+        if (left !== right)
+            return left < right ? -1 : 1;
+    }
+    return 0;
+}
+/** Whether `version` satisfies `range`; false for malformed input rather than a throw. */
+export function satisfiesRange(version, range) {
+    const v = parseVersion(version);
+    if (v === undefined || !isVersionRange(range))
+        return false;
+    if (range === '*')
+        return true;
+    const [lowerText, upperText] = range.split(' ');
+    const operator = /^[\^~]|^>=/.exec(lowerText)?.[0] ?? '';
+    const lower = parseVersion(lowerText.slice(operator.length));
+    if (compare(v, lower) < 0)
+        return false;
+    if (operator === '')
+        return compare(v, lower) === 0;
+    let upper;
+    if (upperText !== undefined)
+        upper = parseVersion(upperText.slice(1));
+    else if (operator === '^') {
+        const [major, minor] = lower.triple;
+        upper = major > 0 ? { triple: [major + 1, 0, 0] } : minor > 0 ? { triple: [0, minor + 1, 0] } : { triple: [0, 0, lower.triple[2] + 1] };
+    }
+    else if (operator === '~')
+        upper = { triple: [lower.triple[0], lower.triple[1] + 1, 0] };
+    return upper === undefined || compare(v, upper) < 0;
+}
+//# sourceMappingURL=semver-range.js.map

package/dist/semver-range.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"semver-range.js","sourceRoot":"","sources":["../src/semver-range.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,MAAM,OAAO,GAAG,6CAA6C,CAAC;AAC9D,MAAM,KAAK,GAAG,+FAA+F,CAAC;AAI9G,MAAM,UAAU,YAAY,CAAC,KAAa;IACxC,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9B,IAAI,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IACzB,MAAM,MAAM,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAU,CAAC;IACnE,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IACjE,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACjE,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAa;IAC1C,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC3B,CAAC;AAED,SAAS,OAAO,CAAC,CAAS,EAAE,CAAS;IACnC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE;QAAE,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;YAAE,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAE,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC;IAChG,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG;QAAE,OAAO,CAAC,CAAC;IAC9B,IAAI,CAAC,CAAC,GAAG,KAAK,SAAS;QAAE,OAAO,CAAC,CAAC;IAClC,IAAI,CAAC,CAAC,GAAG,KAAK,SAAS;QAAE,OAAO,CAAC,CAAC,CAAC;IACnC,OAAO,iBAAiB,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,iBAAiB,CAAC,CAAS,EAAE,CAAS;IAC7C,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACxB,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACxB,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC;IACzC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;QACnB,MAAM,KAAK,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,CAAC,CAAC,CAAC;QAClC,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,CAAC,CAAC;QAClC,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9D,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACjE,IAAI,OAAO,KAAK,SAAS,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YACpD,IAAI,OAAO,KAAK,QAAQ;gBAAE,OAAO,OAAO,GAAG,QAAQ,CAAC;YACpD,SAAS;QACX,CAAC;QACD,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO,CAAC,CAAC,CAAC;QACrC,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,CAAC,CAAC;QACrC,IAAI,IAAI,KAAK,KAAK;YAAE,OAAO,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,cAAc,CAAC,OAAe,EAAE,KAAa;IAC3D,MAAM,CAAC,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IAChC,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5D,IAAI,KAAK,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IAC/B,MAAM,CAAC,SAAS,EAAE,SAAS,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAiC,CAAC;IAChF,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACzD,MAAM,KAAK,GAAG,YAAY,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAE,CAAC;IAC9D,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACxC,IAAI,QAAQ,KAAK,EAAE;QAAE,OAAO,OAAO,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IACpD,IAAI,KAAyB,CAAC;IAC9B,IAAI,SAAS,KAAK,SAAS;QAAE,KAAK,GAAG,YAAY,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;SACjE,IAAI,QAAQ,KAAK,GAAG,EAAE,CAAC;QAC1B,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC;QACpC,KAAK,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;IAC1I,CAAC;SAAM,IAAI,QAAQ,KAAK,GAAG;QAAE,KAAK,GAAG,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;IAC3F,OAAO,KAAK,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;AACtD,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@relayflows/sdk",
-  "version": "2.0.24",
+  "version": "2.0.26",
   "description": "TypeScript-first authoring SDK for Relayflows. Compiles specs; speaks the journal protocol.",
   "type": "module",
   "main": "./dist/index.js",
@@ -47,9 +47,9 @@
   "license": "Apache-2.0",
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.30.0",
-    "@relayfile/adapter-core": "0.5.26",
-    "@relayfile/relay-helpers": "0.4.11",
-    "@relayflows/surface": "2.0.24",
+    "@relayfile/adapter-core": "0.6.2",
+    "@relayfile/relay-helpers": "0.4.12",
+    "@relayflows/surface": "2.0.26",
     "@types/js-yaml": "^4.0.9",
     "ai-hist": "0.4.1",
     "ajv": "^8.17.1",
@@ -80,5 +80,10 @@
     "@agent-relay/sdk": {
       "optional": true
     }
+  },
+  "overrides": {
+    "@relayflows/surface": {
+      "@relayfile/relay-helpers": "$@relayfile/relay-helpers"
+    }
   }
 }

package/src/authored-flow-executor.ts

@@ -44,6 +44,14 @@ import {
 } from './authored-flow-operation.js';
 import { AuthoredFlowLifecycle } from './authored-flow-lifecycle.js';
 import { JournalClient } from './journal-client.js';
+import { PluginError } from './plugin-manifest.js';
+import { createHookEvaluator } from './authored-hooks.js';
+import {
+  extensionHandlerForHostedDispatch,
+  probeFlowExtension,
+  type HostedExtensionDispatch,
+  type LoadedFlowExtension,
+} from './flow-extension-loader.js';
 import type {
   CompletionReason as ProtocolCompletionReason,
   RunCompletionReason as ProtocolRunCompletionReason,
@@ -148,6 +156,13 @@ export interface ExecuteAuthoredFlowOptions {
   readonly localAgentStream?: string;
   /** Durable kernel root that owns this body's child admission identities. */
   readonly rootRunId?: string;
+  /** Installed flow-extension plugins, in lock order, so `f.hook` can AND-compose them. */
+  readonly extensions?: readonly LoadedFlowExtension[];
+  /**
+   * Server-authenticated integration delivery authority. Never derive this
+   * from authored input: direct `/workflows/run` callers control that JSON.
+   */
+  readonly extensionDispatch?: HostedExtensionDispatch;
 }
 
 export async function executeAuthoredFlow<Input = undefined>(
@@ -171,7 +186,8 @@ export async function executeAuthoredFlow<Input = undefined>(
     ...(options.onWait !== undefined ? { onWait: options.onWait } : {}),
   };
   const definition = getDefinition<Input>(handle);
-  const headerFields = Object.keys(definition.header).filter(key => key !== 'tools' && key !== 'budget' && key !== 'memory');
+  const hostedHandler = extensionHandlerForHostedDispatch(options.extensionDispatch, options.extensions ?? []);
+  const headerFields = Object.keys(definition.header).filter(key => key !== 'tools' && key !== 'budget' && key !== 'memory' && key !== 'version' && key !== 'hooks');
   if (definition.header.tools && Object.keys(definition.header.tools).some(key => !['mcp', ...helperProviders.map(p => p.namespace)].includes(key))) headerFields.push('tools');
   if (definition.header.tools?.relayfile !== undefined) headerFields.push('tools.relayfile');
   const helperPreflight = checkSlackHelpers(definition);
@@ -188,6 +204,21 @@ export async function executeAuthoredFlow<Input = undefined>(
 
   const checkedMcp = await checkMcpHeader(definition, flowPath);
   if (!checkedMcp.report.ok) throw new McpPreflightError(checkedMcp.report);
+  for (const extension of options.extensions ?? []) {
+    if (extension.manifest !== undefined) await probeFlowExtension(extension.manifest);
+  }
+  if (hostedHandler !== undefined) {
+    // A schema-2 entry is ordinary authored JavaScript. Passing it the base
+    // context would not constrain direct Node access, f.run, helpers, MCP or
+    // agent harnesses to manifest.permissions; those declarations are still
+    // explicitly unenforced by gate 8 / #442. Refuse before either body runs.
+    // A later isolated runtime may replace this gate only when it can prove
+    // the manifest boundary, not merely proxy selected Ctx properties.
+    throw new PluginError(
+      'plugin_unsupported',
+      `${hostedHandler.extension.name}: hosted extension handlers require enforced manifest permission isolation (gate 8 / #442).`,
+    );
+  }
 
   const budget = new AuthoredBudget(definition.header.budget);
   if (definition.header.memory?.agent === true) {
@@ -349,6 +380,17 @@ export async function executeAuthoredFlow<Input = undefined>(
     ));
   }
 
+  const evaluateHook = createHookEvaluator({
+    journal,
+    ...(options.rootRunId === undefined ? {} : { rootRunId: options.rootRunId }),
+    flowName: definition.name,
+    declared: definition.header?.hooks ?? [],
+    extensions: options.extensions ?? [],
+    peekStep: () => nextStep,
+    restoreStep: (step) => { nextStep = step; },
+    ...(options.signal === undefined ? {} : { signal: options.signal }),
+  });
+
   const context: Ctx = {
     ...createHelpers(<T>(call: HelperCall): Step<T> => {
       const verb = `${call.provider}.${call.verb}`;
@@ -477,6 +519,23 @@ export async function executeAuthoredFlow<Input = undefined>(
       assertOperationAllowed('dispatch', definition.name, requestedCompletion);
       throw unsupportedVerb('dispatch');
     },
+    hook(name, input) {
+      assertOperationAllowed('hook', definition.name, requestedCompletion);
+      const id = `hook-${nextStep++}`;
+      const snapshot = snapshotJsonValue(input, 'f.hook input');
+      return trackStep(authoredSteps, new AuthoredFlowOperation<boolean>(
+        id, 'hook',
+        () => assertOperationAllowed('hook', definition.name, requestedCompletion),
+        async () => {
+          const verdict = await evaluateHook(id, name, snapshot, context);
+          const record = { hook: name, step: id, verdict: verdict ? 'pass' : 'fail' };
+          const literal = `'${JSON.stringify(record).replaceAll("'", "'\\''")}'`;
+          await observeStep(id, 'deterministic', () => lowerDeterministic(id, `printf '%s' ${literal}`, false), options.onProgress);
+          return verdict;
+        },
+        lifecycle,
+      ));
+    },
     done(reason) {
       if (!isSurfaceFlowCompletionReason(reason)) {
         throw new AuthoredFlowExecutionError(

package/src/authored-flow-loader.ts

@@ -9,6 +9,9 @@ import {
   type AuthoredFlowDefinition,
   type FlowHandle,
 } from './authored-flow.js';
+import { canonicalize } from './canonical.js';
+import { composeDefinition, loadFlowExtensions, parseHooksExport, type ImportedFlow, type LoadedFlowExtension } from './flow-extension-loader.js';
+import type { RuntimeVersions } from './flow-extension-compat.js';
 
 export class AuthoredFlowLoadError extends Error {
   constructor(message: string, readonly kind: 'invalid_spec' | 'use_not_found' | 'use_invalid' | 'use_cycle' = 'invalid_spec') {
@@ -40,8 +43,20 @@ export interface LoadedAuthoredFlow {
   readonly getDefinition: GetFlowDefinition;
   /** Exact Surface package/runtime that owns the handle's WeakMap identity. */
   readonly surfaceAuthority: SurfaceModuleAuthority;
-  /** Dependency-first load order, each canonical absolute path appearing once. */
+  /**
+   * Dependency-first load order, each canonical absolute path appearing once.
+   * Flow-extension entries follow the root, so a graph of one node still
+   * means "one self-contained source" to the hosted paths that require it.
+   */
   readonly graph: readonly LoadedAuthoredFlowNode[];
+  /** Schema-2 flow extensions composed onto the root, in lock order; empty when the project declares none. */
+  readonly extensions: readonly LoadedFlowExtension[];
+}
+
+export interface LoadAuthoredFlowOptions {
+  /** `compose` (default) verifies and appends the project's flow extensions; `none` loads the root alone. */
+  readonly extensions?: 'compose' | 'none';
+  readonly versions?: RuntimeVersions;
 }
 
 export interface LoadedAuthoredFlowNode {
@@ -53,7 +68,7 @@ export interface LoadedAuthoredFlowNode {
 }
 
 /** Import and validate a direct-run module without executing its authored body. */
-export async function loadAuthoredFlow(path: string): Promise<LoadedAuthoredFlow> {
+export async function loadAuthoredFlow(path: string, options: LoadAuthoredFlowOptions = {}): Promise<LoadedAuthoredFlow> {
   const loaded = new Map<string, LoadedAuthoredFlowNode>();
   const visiting = new Set<string>();
   async function visit(sourcePath: string, isRoot = false): Promise<LoadedAuthoredFlowNode> {
@@ -98,11 +113,39 @@ export async function loadAuthoredFlow(path: string): Promise<LoadedAuthoredFlow
     }
   }
   const root = await visit(resolve(path), true);
-  return Object.freeze({ sourcePath: root.path, handle: root.handle, getDefinition: root.getDefinition,
-    surfaceAuthority: root.surfaceAuthority, graph: Object.freeze([...loaded.values()]) });
+  const graph = [...loaded.values()];
+  if (options.extensions === 'none') {
+    return Object.freeze({ sourcePath: root.path, handle: root.handle, getDefinition: root.getDefinition,
+      surfaceAuthority: root.surfaceAuthority, graph: Object.freeze(graph), extensions: Object.freeze([]) });
+  }
+  // Extensions are verified (lock, digest, manifest hash, compat) before their
+  // entry is imported, and are composed after the root in lock order. The
+  // composed definition is served for the root handle only; every other
+  // handle keeps the surface copy's own answer.
+  const baseDefinition = root.getDefinition(root.handle);
+  const extensions = await loadFlowExtensions(root.path, { definition: baseDefinition, surfaceAuthority: root.surfaceAuthority }, {
+    importFlow: importAuthoredFlow,
+    sameAuthority: (a, b) => canonicalize(a) === canonicalize(b),
+    ...(options.versions === undefined ? {} : { versions: options.versions }),
+  });
+  if (extensions.length === 0) {
+    return Object.freeze({ sourcePath: root.path, handle: root.handle, getDefinition: root.getDefinition,
+      surfaceAuthority: root.surfaceAuthority, graph: Object.freeze(graph), extensions });
+  }
+  const composed = composeDefinition(baseDefinition, extensions);
+  const getDefinition: GetFlowDefinition = <Input = unknown>(handle: FlowHandle) =>
+    (handle === root.handle ? composed : root.getDefinition(handle)) as AuthoredFlowDefinition<Input>;
+  for (const extension of extensions) {
+    // The node carries the accessor the entry's own surface copy handed back:
+    // the root's accessor answers for the root's WeakMap only.
+    graph.push(Object.freeze({ path: extension.entryPath, handle: extension.handle, getDefinition: extension.getDefinition,
+      surfaceAuthority: root.surfaceAuthority, use: Object.freeze([]) }));
+  }
+  return Object.freeze({ sourcePath: root.path, handle: root.handle, getDefinition,
+    surfaceAuthority: root.surfaceAuthority, graph: Object.freeze(graph), extensions });
 }
 
-async function importAuthoredFlow(path: string): Promise<Pick<LoadedAuthoredFlow, 'handle' | 'getDefinition' | 'surfaceAuthority'>> {
+async function importAuthoredFlow(path: string): Promise<ImportedFlow<SurfaceModuleAuthority>> {
   const absolutePath = resolve(path);
   try {
     accessSync(absolutePath, constants.R_OK);
@@ -128,7 +171,7 @@ async function importAuthoredFlow(path: string): Promise<Pick<LoadedAuthoredFlow
       `Flow "${path}" must default-export flow(...): ${errorMessage(error)}`,
     );
   }
-  return { handle, getDefinition, surfaceAuthority };
+  return { handle, getDefinition, surfaceAuthority, hooks: parseHooksExport(authoredModule, path) };
 }
 
 /**