@spinabot/brigade 1.3.1 → 1.4.0

package/dist/agents/extensions/install.d.ts

@@ -0,0 +1,135 @@
+/**
+ * Extension install / remove engine — the source-agnostic machinery behind
+ * `brigade extensions add <source>` and `brigade extensions remove <id>`.
+ *
+ * `add` brings a third-party module into `~/.brigade/extensions/<id>/` from one
+ * of three source forms:
+ *   • a LOCAL PATH (a folder or a single file) → copied in;
+ *   • an NPM SPEC (`name`, `name@version`, `@scope/name@1.2.3`) → fetched with
+ *     `npm pack` into a temp dir, unpacked, and moved in (npm only — never pnpm);
+ *   • a GIT URL (`https://…/repo.git`, `git@…`, `git+…`) → cloned in.
+ *
+ * The installed module's id is resolved from its `brigade.extension.json`
+ * manifest id, else its `package.json` name, else the source basename. An
+ * existing id is refused unless `force` is set.
+ *
+ * After the files land, two read-only gates run:
+ *   1. COMPAT — read the installed manifest and compare `minBrigadeVersion` /
+ *      `pluginApi` against the running build. A module that needs a NEWER
+ *      Brigade is refused (the only hard failure here); a missing field is
+ *      lenient (compatible).
+ *   2. SCAN — `install-scan.ts` does a static dual-use pattern sweep. Findings
+ *      are SURFACED, never auto-blocking; the CLI asks the operator to ack.
+ *
+ * This module does the filesystem + compat work and RETURNS a structured result;
+ * the CLI layer (`commands/extensions.ts`) owns all rendering + the interactive
+ * scan acknowledgement. Keeping the two apart lets the install logic be unit-
+ * tested against a tempdir source with no TTY + no network.
+ */
+import { type ScanReport } from "./install-scan.js";
+import type { BrigadeModuleManifest } from "./types.js";
+/** Which kind of source `add` resolved the argument to. */
+export type InstallSourceKind = "local" | "npm" | "git";
+/** Verdict from the compat (version) gate. */
+export interface CompatVerdict {
+    /** True when the module is safe to run on this Brigade build. */
+    compatible: boolean;
+    /** Running Brigade version (for display). */
+    brigadeVersion: string;
+    /** The module's declared minimum Brigade version, when it set one. */
+    minBrigadeVersion?: string;
+    /** The module's declared plugin-API generation, when it set one. */
+    pluginApi?: string;
+    /** One operator-facing line — why it's (in)compatible. */
+    reason: string;
+}
+/** Everything the CLI needs to render a completed install. */
+export interface InstallResult {
+    /** Resolved extension id (the folder name under the extensions dir). */
+    id: string;
+    /** Absolute folder the module landed in. */
+    dir: string;
+    /** How the source argument was classified. */
+    sourceKind: InstallSourceKind;
+    /** The original source argument, echoed back. */
+    source: string;
+    /** Installed manifest, when the module shipped a sidecar. */
+    manifest?: BrigadeModuleManifest;
+    /** Compat (version) verdict. */
+    compat: CompatVerdict;
+    /** Static security-scan report. */
+    scan: ScanReport;
+    /** True when `--force` overwrote a pre-existing extension of the same id. */
+    replacedExisting: boolean;
+}
+/** A thrown install failure carrying an operator-facing message. */
+export declare class InstallError extends Error {
+}
+/**
+ * The plugin-API generation THIS Brigade build implements. Bumped only on a
+ * breaking change to the module/SDK contract. A module whose manifest
+ * `pluginApi` is a higher integer than this targets a future Brigade and is
+ * refused by the compat gate.
+ */
+export declare const CURRENT_PLUGIN_API = 1;
+/**
+ * Classify the source argument. A path that exists on disk is always `local`
+ * (so a folder literally named like a package still installs from disk); then
+ * git URLs; then everything else is treated as an npm spec.
+ */
+export declare function classifySource(source: string): InstallSourceKind;
+/**
+ * Normalise an arbitrary string into a safe extensions-folder id: lowercase,
+ * `[a-z0-9-]`, no leading digit-only weirdness. Mirrors the `init` id rules
+ * loosely (we accept what we can sanitise rather than reject).
+ */
+export declare function sanitizeId(raw: string): string;
+/**
+ * Resolve the target id for an extracted/staged module: manifest id wins, then
+ * package.json name, then the supplied `fallback` (source basename). All run
+ * through `sanitizeId`.
+ */
+export declare function resolveModuleId(stagedDir: string, fallback: string): string;
+/**
+ * Decide whether a module (by its manifest) is compatible with the running
+ * Brigade. Lenient by design: a module that declares neither field is always
+ * compatible. The two hard-fail cases are forward-incompatibility — the module
+ * needs a NEWER Brigade than this build, or targets a NEWER plugin-API
+ * generation than this build implements.
+ *
+ * `brigadeVersionOverride` / `pluginApiOverride` are test seams.
+ */
+export declare function checkCompat(manifest: BrigadeModuleManifest | undefined, brigadeVersionOverride?: string, pluginApiOverride?: number): CompatVerdict;
+export interface InstallOptions {
+    /** The extensions dir to install into (`~/.brigade/extensions` in prod). */
+    extensionsDir: string;
+    /** Overwrite an existing extension of the same id. */
+    force?: boolean;
+    /** Test seam — override the running Brigade version for the compat gate. */
+    brigadeVersionOverride?: string;
+    /** Test seam — override the plugin-API generation for the compat gate. */
+    pluginApiOverride?: number;
+}
+/**
+ * Install an extension from a source. Does NOT prompt — it stages, resolves the
+ * id, refuses an existing id unless `force`, copies the module into place, then
+ * runs the compat + scan gates and returns the structured result. The CLI layer
+ * decides whether to keep it (e.g. after the operator acks the scan). The
+ * compat gate is the one hard failure: a forward-incompatible module is
+ * REMOVED again and an `InstallError` is thrown.
+ */
+export declare function installExtension(source: string, opts: InstallOptions): Promise<InstallResult>;
+/** Outcome of a remove. */
+export interface RemoveResult {
+    id: string;
+    dir: string;
+}
+/**
+ * Remove an installed extension by id. Refuses cleanly (throws `InstallError`)
+ * when no extension of that id is installed. `id` is sanitised the same way
+ * install resolves it, so `remove My-Plugin` matches the `my-plugin` folder.
+ */
+export declare function removeExtension(id: string, extensionsDir: string): RemoveResult;
+/** List installed extension ids (folder names) under the extensions dir. */
+export declare function listInstalledIds(extensionsDir: string): string[];
+//# sourceMappingURL=install.d.ts.map

package/dist/agents/extensions/install.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"install.d.ts","sourceRoot":"","sources":["../../../src/agents/extensions/install.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAiBH,OAAO,EAAuB,KAAK,UAAU,EAAE,MAAM,mBAAmB,CAAC;AACzE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAIxD,2DAA2D;AAC3D,MAAM,MAAM,iBAAiB,GAAG,OAAO,GAAG,KAAK,GAAG,KAAK,CAAC;AAExD,8CAA8C;AAC9C,MAAM,WAAW,aAAa;IAC7B,iEAAiE;IACjE,UAAU,EAAE,OAAO,CAAC;IACpB,6CAA6C;IAC7C,cAAc,EAAE,MAAM,CAAC;IACvB,sEAAsE;IACtE,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,oEAAoE;IACpE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,0DAA0D;IAC1D,MAAM,EAAE,MAAM,CAAC;CACf;AAED,8DAA8D;AAC9D,MAAM,WAAW,aAAa;IAC7B,wEAAwE;IACxE,EAAE,EAAE,MAAM,CAAC;IACX,4CAA4C;IAC5C,GAAG,EAAE,MAAM,CAAC;IACZ,8CAA8C;IAC9C,UAAU,EAAE,iBAAiB,CAAC;IAC9B,iDAAiD;IACjD,MAAM,EAAE,MAAM,CAAC;IACf,6DAA6D;IAC7D,QAAQ,CAAC,EAAE,qBAAqB,CAAC;IACjC,gCAAgC;IAChC,MAAM,EAAE,aAAa,CAAC;IACtB,mCAAmC;IACnC,IAAI,EAAE,UAAU,CAAC;IACjB,6EAA6E;IAC7E,gBAAgB,EAAE,OAAO,CAAC;CAC1B;AAED,oEAAoE;AACpE,qBAAa,YAAa,SAAQ,KAAK;CAAG;AAI1C;;;;;GAKG;AACH,eAAO,MAAM,kBAAkB,IAAI,CAAC;AAcpC;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,iBAAiB,CAchE;AAqDD;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAQ9C;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAc3E;AAqBD;;;;;;;;GAQG;AACH,wBAAgB,WAAW,CAC1B,QAAQ,EAAE,qBAAqB,GAAG,SAAS,EAC3C,sBAAsB,CAAC,EAAE,MAAM,EAC/B,iBAAiB,CAAC,EAAE,MAAM,GACxB,aAAa,CA2Cf;AAiFD,MAAM,WAAW,cAAc;IAC9B,4EAA4E;IAC5E,aAAa,EAAE,MAAM,CAAC;IACtB,sDAAsD;IACtD,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,4EAA4E;IAC5E,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,0EAA0E;IAC1E,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED;;;;;;;GAOG;AACH,wBAAsB,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,aAAa,CAAC,CAyDnG;AAED,2BAA2B;AAC3B,MAAM,WAAW,YAAY;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,EAAE,MAAM,CAAC;CACZ;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,YAAY,CAe/E;AAED,4EAA4E;AAC5E,wBAAgB,gBAAgB,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM,EAAE,CAehE"}

package/dist/agents/extensions/install.js

@@ -0,0 +1,414 @@
+/**
+ * Extension install / remove engine — the source-agnostic machinery behind
+ * `brigade extensions add <source>` and `brigade extensions remove <id>`.
+ *
+ * `add` brings a third-party module into `~/.brigade/extensions/<id>/` from one
+ * of three source forms:
+ *   • a LOCAL PATH (a folder or a single file) → copied in;
+ *   • an NPM SPEC (`name`, `name@version`, `@scope/name@1.2.3`) → fetched with
+ *     `npm pack` into a temp dir, unpacked, and moved in (npm only — never pnpm);
+ *   • a GIT URL (`https://…/repo.git`, `git@…`, `git+…`) → cloned in.
+ *
+ * The installed module's id is resolved from its `brigade.extension.json`
+ * manifest id, else its `package.json` name, else the source basename. An
+ * existing id is refused unless `force` is set.
+ *
+ * After the files land, two read-only gates run:
+ *   1. COMPAT — read the installed manifest and compare `minBrigadeVersion` /
+ *      `pluginApi` against the running build. A module that needs a NEWER
+ *      Brigade is refused (the only hard failure here); a missing field is
+ *      lenient (compatible).
+ *   2. SCAN — `install-scan.ts` does a static dual-use pattern sweep. Findings
+ *      are SURFACED, never auto-blocking; the CLI asks the operator to ack.
+ *
+ * This module does the filesystem + compat work and RETURNS a structured result;
+ * the CLI layer (`commands/extensions.ts`) owns all rendering + the interactive
+ * scan acknowledgement. Keeping the two apart lets the install logic be unit-
+ * tested against a tempdir source with no TTY + no network.
+ */
+import { execFileSync } from "node:child_process";
+import { cpSync, existsSync, mkdirSync, mkdtempSync, readFileSync, readdirSync, rmSync, statSync, } from "node:fs";
+import { tmpdir } from "node:os";
+import path from "node:path";
+import { getBuildInfo } from "../../version.js";
+import { scanInstalledModule } from "./install-scan.js";
+const SIDECAR_BASENAME = "brigade.extension.json";
+/** A thrown install failure carrying an operator-facing message. */
+export class InstallError extends Error {
+}
+/* ─────────────────────────── plugin-API generation ─────────────────────────── */
+/**
+ * The plugin-API generation THIS Brigade build implements. Bumped only on a
+ * breaking change to the module/SDK contract. A module whose manifest
+ * `pluginApi` is a higher integer than this targets a future Brigade and is
+ * refused by the compat gate.
+ */
+export const CURRENT_PLUGIN_API = 1;
+/* ─────────────────────────── source classification ─────────────────────────── */
+/** Does the argument look like a git URL we should clone? */
+function isGitUrl(source) {
+    return (/^git\+/.test(source) ||
+        /^git@/.test(source) ||
+        /^(?:https?|git|ssh):\/\/.*\.git(?:#.*)?$/.test(source) ||
+        /^(?:https?:\/\/)?(?:www\.)?(?:github|gitlab|bitbucket)\.com\/[^/]+\/[^/]+/.test(source));
+}
+/**
+ * Classify the source argument. A path that exists on disk is always `local`
+ * (so a folder literally named like a package still installs from disk); then
+ * git URLs; then everything else is treated as an npm spec.
+ */
+export function classifySource(source) {
+    const trimmed = source.trim();
+    if (trimmed.length === 0)
+        throw new InstallError("No source given. Pass a folder, a file, an npm package, or a git URL.");
+    // An on-disk path always wins — unambiguous + offline.
+    try {
+        if (existsSync(trimmed))
+            return "local";
+    }
+    catch {
+        /* fall through to remote classification */
+    }
+    // Explicit relative/absolute path markers that don't (yet) exist → still local
+    // (the install step then reports "no such file" clearly rather than trying npm).
+    if (/^[.~]/.test(trimmed) || path.isAbsolute(trimmed))
+        return "local";
+    if (isGitUrl(trimmed))
+        return "git";
+    return "npm";
+}
+/* ─────────────────────────── manifest + id resolution ─────────────────────────── */
+/** Read + parse a JSON file, returning `undefined` on any failure. */
+function readJson(file) {
+    try {
+        const parsed = JSON.parse(readFileSync(file, "utf8"));
+        return parsed && typeof parsed === "object" ? parsed : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+/** Find + read the sidecar manifest at the root of an installed/extracted module. */
+function readManifestAt(dir) {
+    const sidecar = path.join(dir, SIDECAR_BASENAME);
+    const parsed = readJson(sidecar);
+    if (parsed && typeof parsed.id === "string")
+        return parsed;
+    return undefined;
+}
+/** Read a `package.json` `name` at the root of a module, when present. */
+function readPackageName(dir) {
+    const parsed = readJson(path.join(dir, "package.json"));
+    const name = parsed?.name;
+    return typeof name === "string" && name.length > 0 ? name : undefined;
+}
+/** Strip an npm scope + version range to a bare, folder-safe id. */
+function bareNameFromSpec(spec) {
+    // `@scope/name@1.2.3` → `name`; `name@^2` → `name`; `name` → `name`.
+    let s = spec.trim();
+    // Drop a trailing version range (the LAST `@` that isn't the scope `@`).
+    const at = s.lastIndexOf("@");
+    if (at > 0)
+        s = s.slice(0, at);
+    // Drop the scope prefix.
+    if (s.startsWith("@")) {
+        const slash = s.indexOf("/");
+        if (slash >= 0)
+            s = s.slice(slash + 1);
+    }
+    return s;
+}
+/** Strip a git URL down to its repo basename (sans `.git` + fragment). */
+function repoNameFromGit(url) {
+    let s = url.trim().replace(/^git\+/, "");
+    s = s.split("#")[0] ?? s; // drop a `#branch` fragment
+    s = s.replace(/\/+$/, ""); // trailing slashes
+    const last = s.split(/[/:]/).pop() ?? s;
+    return last.replace(/\.git$/i, "");
+}
+/**
+ * Normalise an arbitrary string into a safe extensions-folder id: lowercase,
+ * `[a-z0-9-]`, no leading digit-only weirdness. Mirrors the `init` id rules
+ * loosely (we accept what we can sanitise rather than reject).
+ */
+export function sanitizeId(raw) {
+    const cleaned = raw
+        .trim()
+        .toLowerCase()
+        .replace(/[^a-z0-9-]+/g, "-")
+        .replace(/-+/g, "-")
+        .replace(/^-+|-+$/g, "");
+    return cleaned;
+}
+/**
+ * Resolve the target id for an extracted/staged module: manifest id wins, then
+ * package.json name, then the supplied `fallback` (source basename). All run
+ * through `sanitizeId`.
+ */
+export function resolveModuleId(stagedDir, fallback) {
+    const manifest = readManifestAt(stagedDir);
+    if (manifest?.id) {
+        const id = sanitizeId(manifest.id);
+        if (id)
+            return id;
+    }
+    const pkgName = readPackageName(stagedDir);
+    if (pkgName) {
+        const id = sanitizeId(bareNameFromSpec(pkgName));
+        if (id)
+            return id;
+    }
+    const id = sanitizeId(fallback);
+    if (id)
+        return id;
+    throw new InstallError("Couldn't work out a name for this extension. Give it one by adding a brigade.extension.json with an \"id\".");
+}
+/* ─────────────────────────── compat (version) gate ─────────────────────────── */
+/** Parse a leading `major.minor.patch` from a version string → numeric tuple. */
+function parseSemverLead(v) {
+    const m = /^\s*v?(\d+)(?:\.(\d+))?(?:\.(\d+))?/.exec(v);
+    if (!m)
+        return null;
+    return [Number(m[1] ?? 0), Number(m[2] ?? 0), Number(m[3] ?? 0)];
+}
+/** Compare two semver leads: -1 / 0 / 1. */
+function compareSemver(a, b) {
+    for (let i = 0; i < 3; i++) {
+        const av = a[i] ?? 0;
+        const bv = b[i] ?? 0;
+        if (av !== bv)
+            return av < bv ? -1 : 1;
+    }
+    return 0;
+}
+/**
+ * Decide whether a module (by its manifest) is compatible with the running
+ * Brigade. Lenient by design: a module that declares neither field is always
+ * compatible. The two hard-fail cases are forward-incompatibility — the module
+ * needs a NEWER Brigade than this build, or targets a NEWER plugin-API
+ * generation than this build implements.
+ *
+ * `brigadeVersionOverride` / `pluginApiOverride` are test seams.
+ */
+export function checkCompat(manifest, brigadeVersionOverride, pluginApiOverride) {
+    const brigadeVersion = brigadeVersionOverride ?? getBuildInfo().version;
+    const currentApi = pluginApiOverride ?? CURRENT_PLUGIN_API;
+    const minBrigadeVersion = manifest?.minBrigadeVersion;
+    const pluginApi = manifest?.pluginApi;
+    // (1) plugin-API generation — a forward-incompatible module targets a newer
+    // generation than this build understands.
+    if (typeof pluginApi === "string" && pluginApi.trim().length > 0) {
+        const wanted = Number.parseInt(pluginApi.trim(), 10);
+        if (Number.isFinite(wanted) && wanted > currentApi) {
+            return {
+                compatible: false,
+                brigadeVersion,
+                minBrigadeVersion,
+                pluginApi,
+                reason: `This extension targets plugin API v${wanted}, but this Brigade only supports up to v${currentApi}. Update Brigade first.`,
+            };
+        }
+    }
+    // (2) minimum Brigade version — module needs a newer Brigade than is running.
+    if (typeof minBrigadeVersion === "string" && minBrigadeVersion.trim().length > 0) {
+        const need = parseSemverLead(minBrigadeVersion);
+        const have = parseSemverLead(brigadeVersion);
+        if (need && have && compareSemver(have, need) < 0) {
+            return {
+                compatible: false,
+                brigadeVersion,
+                minBrigadeVersion,
+                pluginApi,
+                reason: `This extension needs Brigade ${minBrigadeVersion} or newer; you're on ${brigadeVersion}. Update Brigade first.`,
+            };
+        }
+    }
+    return {
+        compatible: true,
+        brigadeVersion,
+        minBrigadeVersion,
+        pluginApi,
+        reason: "Compatible with this version of Brigade.",
+    };
+}
+/* ─────────────────────────── staging by source kind ─────────────────────────── */
+/** Copy a local path (file OR folder) into a fresh staging dir; return it. */
+function stageLocal(source, stageRoot) {
+    const abs = path.resolve(source.replace(/^~(?=$|[/\\])/, () => process.env.HOME ?? process.env.USERPROFILE ?? "~"));
+    let st;
+    try {
+        st = statSync(abs);
+    }
+    catch {
+        throw new InstallError(`No file or folder found at ${abs}.`);
+    }
+    const stagedDir = path.join(stageRoot, "staged");
+    mkdirSync(stagedDir, { recursive: true });
+    if (st.isDirectory()) {
+        cpSync(abs, stagedDir, { recursive: true });
+        return { stagedDir, fallbackName: path.basename(abs) };
+    }
+    // Single file → place it as the module's index, preserving its extension.
+    const ext = path.extname(abs) || ".js";
+    const indexName = `index${ext}`;
+    cpSync(abs, path.join(stagedDir, indexName));
+    return { stagedDir, fallbackName: path.basename(abs, ext) };
+}
+/** Run a command, surfacing a clean error. `cwd` defaults to the stage root. */
+function runTool(cmd, args, cwd) {
+    try {
+        execFileSync(cmd, args, { cwd, stdio: "pipe", windowsHide: true });
+    }
+    catch (err) {
+        const detail = err instanceof Error ? err.message : String(err);
+        throw new InstallError(`\`${cmd} ${args.join(" ")}\` failed: ${detail}`);
+    }
+}
+/** Fetch an npm package via `npm pack`, unpack the tarball, return the dir. */
+function stageNpm(spec, stageRoot) {
+    // `npm pack <spec>` downloads the tarball into cwd and prints its filename.
+    let out;
+    try {
+        out = execFileSync("npm", ["pack", spec, "--silent"], {
+            cwd: stageRoot,
+            stdio: ["ignore", "pipe", "pipe"],
+            encoding: "utf8",
+            windowsHide: true,
+        }).trim();
+    }
+    catch (err) {
+        const detail = err instanceof Error ? err.message : String(err);
+        throw new InstallError(`Couldn't download "${spec}" from npm: ${detail}`);
+    }
+    // `npm pack` may print multiple lines; the tarball name is the last non-empty.
+    const tarball = out.split(/\r?\n/).map((l) => l.trim()).filter(Boolean).pop();
+    if (!tarball)
+        throw new InstallError(`npm didn't produce a package tarball for "${spec}".`);
+    const tarballPath = path.join(stageRoot, tarball);
+    const extractDir = path.join(stageRoot, "unpacked");
+    mkdirSync(extractDir, { recursive: true });
+    // Tarballs from `npm pack` always nest under a top-level `package/` dir.
+    runTool("tar", ["-xzf", tarballPath, "-C", extractDir], stageRoot);
+    const inner = path.join(extractDir, "package");
+    const stagedDir = existsSync(inner) ? inner : extractDir;
+    return { stagedDir, fallbackName: bareNameFromSpec(spec) };
+}
+/** Clone a git URL (shallow) into a staging dir; return it. */
+function stageGit(url, stageRoot) {
+    const stagedDir = path.join(stageRoot, "cloned");
+    const cleanUrl = url.replace(/^git\+/, "");
+    runTool("git", ["clone", "--depth", "1", cleanUrl, stagedDir], stageRoot);
+    // Drop the `.git` dir so it isn't carried into the extensions folder (and
+    // doesn't trip the scanner's skip rules either way).
+    try {
+        rmSync(path.join(stagedDir, ".git"), { recursive: true, force: true });
+    }
+    catch {
+        /* best-effort */
+    }
+    return { stagedDir, fallbackName: repoNameFromGit(url) };
+}
+/**
+ * Install an extension from a source. Does NOT prompt — it stages, resolves the
+ * id, refuses an existing id unless `force`, copies the module into place, then
+ * runs the compat + scan gates and returns the structured result. The CLI layer
+ * decides whether to keep it (e.g. after the operator acks the scan). The
+ * compat gate is the one hard failure: a forward-incompatible module is
+ * REMOVED again and an `InstallError` is thrown.
+ */
+export async function installExtension(source, opts) {
+    const sourceKind = classifySource(source);
+    const stageRoot = mkdtempSync(path.join(tmpdir(), "brigade-ext-install-"));
+    try {
+        // 1. Stage the bytes into a temp dir based on the source kind.
+        const staged = sourceKind === "local"
+            ? stageLocal(source, stageRoot)
+            : sourceKind === "npm"
+                ? stageNpm(source, stageRoot)
+                : stageGit(source, stageRoot);
+        // 2. Resolve the id (manifest → package.json → basename).
+        const id = resolveModuleId(staged.stagedDir, staged.fallbackName);
+        // 3. Collision check.
+        const targetDir = path.join(opts.extensionsDir, id);
+        const exists = existsSync(targetDir);
+        if (exists && !opts.force) {
+            throw new InstallError(`An extension named "${id}" is already installed. Re-run with --force to replace it, or remove it first with \`brigade extensions remove ${id}\`.`);
+        }
+        // 4. Copy the staged module into the extensions dir.
+        mkdirSync(opts.extensionsDir, { recursive: true });
+        if (exists)
+            rmSync(targetDir, { recursive: true, force: true });
+        cpSync(staged.stagedDir, targetDir, { recursive: true });
+        // 5. Compat gate — the one hard failure. Roll back on incompatibility.
+        const manifest = readManifestAt(targetDir);
+        const compat = checkCompat(manifest, opts.brigadeVersionOverride, opts.pluginApiOverride);
+        if (!compat.compatible) {
+            rmSync(targetDir, { recursive: true, force: true });
+            throw new InstallError(compat.reason);
+        }
+        // 6. Security scan — surfaced, never auto-blocking.
+        const scan = scanInstalledModule(targetDir);
+        return {
+            id,
+            dir: targetDir,
+            sourceKind,
+            source,
+            manifest,
+            compat,
+            scan,
+            replacedExisting: exists,
+        };
+    }
+    finally {
+        try {
+            rmSync(stageRoot, { recursive: true, force: true });
+        }
+        catch {
+            /* best-effort temp cleanup */
+        }
+    }
+}
+/**
+ * Remove an installed extension by id. Refuses cleanly (throws `InstallError`)
+ * when no extension of that id is installed. `id` is sanitised the same way
+ * install resolves it, so `remove My-Plugin` matches the `my-plugin` folder.
+ */
+export function removeExtension(id, extensionsDir) {
+    const safeId = sanitizeId(id);
+    if (!safeId)
+        throw new InstallError(`"${id}" isn't a valid extension name.`);
+    const dir = path.join(extensionsDir, safeId);
+    let isDir = false;
+    try {
+        isDir = statSync(dir).isDirectory();
+    }
+    catch {
+        isDir = false;
+    }
+    if (!isDir) {
+        throw new InstallError(`No extension named "${safeId}" is installed. Run \`brigade extensions list\` to see what you have.`);
+    }
+    rmSync(dir, { recursive: true, force: true });
+    return { id: safeId, dir };
+}
+/** List installed extension ids (folder names) under the extensions dir. */
+export function listInstalledIds(extensionsDir) {
+    try {
+        return readdirSync(extensionsDir)
+            .filter((name) => {
+            if (name.startsWith("."))
+                return false;
+            try {
+                return statSync(path.join(extensionsDir, name)).isDirectory();
+            }
+            catch {
+                return false;
+            }
+        })
+            .sort();
+    }
+    catch {
+        return [];
+    }
+}
+//# sourceMappingURL=install.js.map

package/dist/agents/extensions/install.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"install.js","sourceRoot":"","sources":["../../../src/agents/extensions/install.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EACN,MAAM,EACN,UAAU,EACV,SAAS,EACT,WAAW,EACX,YAAY,EACZ,WAAW,EACX,MAAM,EACN,QAAQ,GACR,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,EAAE,mBAAmB,EAAmB,MAAM,mBAAmB,CAAC;AAGzE,MAAM,gBAAgB,GAAG,wBAAwB,CAAC;AAuClD,oEAAoE;AACpE,MAAM,OAAO,YAAa,SAAQ,KAAK;CAAG;AAE1C,mFAAmF;AAEnF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC;AAEpC,mFAAmF;AAEnF,6DAA6D;AAC7D,SAAS,QAAQ,CAAC,MAAc;IAC/B,OAAO,CACN,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC;QACrB,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC;QACpB,0CAA0C,CAAC,IAAI,CAAC,MAAM,CAAC;QACvD,2EAA2E,CAAC,IAAI,CAAC,MAAM,CAAC,CACxF,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,MAAc;IAC5C,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;IAC9B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,YAAY,CAAC,uEAAuE,CAAC,CAAC;IAC1H,uDAAuD;IACvD,IAAI,CAAC;QACJ,IAAI,UAAU,CAAC,OAAO,CAAC;YAAE,OAAO,OAAO,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACR,2CAA2C;IAC5C,CAAC;IACD,+EAA+E;IAC/E,iFAAiF;IACjF,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC;IACtE,IAAI,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IACpC,OAAO,KAAK,CAAC;AACd,CAAC;AAED,sFAAsF;AAEtF,sEAAsE;AACtE,SAAS,QAAQ,CAAC,IAAY;IAC7B,IAAI,CAAC;QACJ,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAY,CAAC;QACjE,OAAO,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAE,MAAkC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/F,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,SAAS,CAAC;IAClB,CAAC;AACF,CAAC;AAED,qFAAqF;AACrF,SAAS,cAAc,CAAC,GAAW;IAClC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;IACjD,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IACjC,IAAI,MAAM,IAAI,OAAO,MAAM,CAAC,EAAE,KAAK,QAAQ;QAAE,OAAO,MAA0C,CAAC;IAC/F,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,0EAA0E;AAC1E,SAAS,eAAe,CAAC,GAAW;IACnC,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC,CAAC;IACxD,MAAM,IAAI,GAAG,MAAM,EAAE,IAAI,CAAC;IAC1B,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AACvE,CAAC;AAED,oEAAoE;AACpE,SAAS,gBAAgB,CAAC,IAAY;IACrC,qEAAqE;IACrE,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IACpB,yEAAyE;IACzE,MAAM,EAAE,GAAG,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,EAAE,GAAG,CAAC;QAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC/B,yBAAyB;IACzB,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,KAAK,IAAI,CAAC;YAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,CAAC,CAAC;AACV,CAAC;AAED,0EAA0E;AAC1E,SAAS,eAAe,CAAC,GAAW;IACnC,IAAI,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IACzC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,4BAA4B;IACtD,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,mBAAmB;IAC9C,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACxC,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;AACpC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,GAAW;IACrC,MAAM,OAAO,GAAG,GAAG;SACjB,IAAI,EAAE;SACN,WAAW,EAAE;SACb,OAAO,CAAC,cAAc,EAAE,GAAG,CAAC;SAC5B,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAC1B,OAAO,OAAO,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,SAAiB,EAAE,QAAgB;IAClE,MAAM,QAAQ,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC;IAC3C,IAAI,QAAQ,EAAE,EAAE,EAAE,CAAC;QAClB,MAAM,EAAE,GAAG,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACnC,IAAI,EAAE;YAAE,OAAO,EAAE,CAAC;IACnB,CAAC;IACD,MAAM,OAAO,GAAG,eAAe,CAAC,SAAS,CAAC,CAAC;IAC3C,IAAI,OAAO,EAAE,CAAC;QACb,MAAM,EAAE,GAAG,UAAU,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC;QACjD,IAAI,EAAE;YAAE,OAAO,EAAE,CAAC;IACnB,CAAC;IACD,MAAM,EAAE,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAChC,IAAI,EAAE;QAAE,OAAO,EAAE,CAAC;IAClB,MAAM,IAAI,YAAY,CAAC,6GAA6G,CAAC,CAAC;AACvI,CAAC;AAED,mFAAmF;AAEnF,iFAAiF;AACjF,SAAS,eAAe,CAAC,CAAS;IACjC,MAAM,CAAC,GAAG,qCAAqC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACxD,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpB,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,4CAA4C;AAC5C,SAAS,aAAa,CAAC,CAA2B,EAAE,CAA2B;IAC9E,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5B,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACrB,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACrB,IAAI,EAAE,KAAK,EAAE;YAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,CAAC,CAAC;AACV,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,WAAW,CAC1B,QAA2C,EAC3C,sBAA+B,EAC/B,iBAA0B;IAE1B,MAAM,cAAc,GAAG,sBAAsB,IAAI,YAAY,EAAE,CAAC,OAAO,CAAC;IACxE,MAAM,UAAU,GAAG,iBAAiB,IAAI,kBAAkB,CAAC;IAC3D,MAAM,iBAAiB,GAAG,QAAQ,EAAE,iBAAiB,CAAC;IACtD,MAAM,SAAS,GAAG,QAAQ,EAAE,SAAS,CAAC;IAEtC,4EAA4E;IAC5E,0CAA0C;IAC1C,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClE,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QACrD,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,UAAU,EAAE,CAAC;YACpD,OAAO;gBACN,UAAU,EAAE,KAAK;gBACjB,cAAc;gBACd,iBAAiB;gBACjB,SAAS;gBACT,MAAM,EAAE,sCAAsC,MAAM,2CAA2C,UAAU,yBAAyB;aAClI,CAAC;QACH,CAAC;IACF,CAAC;IAED,8EAA8E;IAC9E,IAAI,OAAO,iBAAiB,KAAK,QAAQ,IAAI,iBAAiB,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClF,MAAM,IAAI,GAAG,eAAe,CAAC,iBAAiB,CAAC,CAAC;QAChD,MAAM,IAAI,GAAG,eAAe,CAAC,cAAc,CAAC,CAAC;QAC7C,IAAI,IAAI,IAAI,IAAI,IAAI,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACnD,OAAO;gBACN,UAAU,EAAE,KAAK;gBACjB,cAAc;gBACd,iBAAiB;gBACjB,SAAS;gBACT,MAAM,EAAE,gCAAgC,iBAAiB,wBAAwB,cAAc,yBAAyB;aACxH,CAAC;QACH,CAAC;IACF,CAAC;IAED,OAAO;QACN,UAAU,EAAE,IAAI;QAChB,cAAc;QACd,iBAAiB;QACjB,SAAS;QACT,MAAM,EAAE,0CAA0C;KAClD,CAAC;AACH,CAAC;AAED,oFAAoF;AAEpF,8EAA8E;AAC9E,SAAS,UAAU,CAAC,MAAc,EAAE,SAAiB;IACpD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,eAAe,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,CAAC,CAAC;IACpH,IAAI,EAA+B,CAAC;IACpC,IAAI,CAAC;QACJ,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;IACpB,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,IAAI,YAAY,CAAC,8BAA8B,GAAG,GAAG,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IACjD,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1C,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;QACtB,MAAM,CAAC,GAAG,EAAE,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5C,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;IACxD,CAAC;IACD,0EAA0E;IAC1E,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC;IACvC,MAAM,SAAS,GAAG,QAAQ,GAAG,EAAE,CAAC;IAChC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;IAC7C,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC;AAC7D,CAAC;AAED,gFAAgF;AAChF,SAAS,OAAO,CAAC,GAAW,EAAE,IAAc,EAAE,GAAW;IACxD,IAAI,CAAC;QACJ,YAAY,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;IACpE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChE,MAAM,IAAI,YAAY,CAAC,KAAK,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,cAAc,MAAM,EAAE,CAAC,CAAC;IAC1E,CAAC;AACF,CAAC;AAED,+EAA+E;AAC/E,SAAS,QAAQ,CAAC,IAAY,EAAE,SAAiB;IAChD,4EAA4E;IAC5E,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACJ,GAAG,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,UAAU,CAAC,EAAE;YACrD,GAAG,EAAE,SAAS;YACd,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;YACjC,QAAQ,EAAE,MAAM;YAChB,WAAW,EAAE,IAAI;SACjB,CAAC,CAAC,IAAI,EAAE,CAAC;IACX,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChE,MAAM,IAAI,YAAY,CAAC,sBAAsB,IAAI,eAAe,MAAM,EAAE,CAAC,CAAC;IAC3E,CAAC;IACD,+EAA+E;IAC/E,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC;IAC9E,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,YAAY,CAAC,6CAA6C,IAAI,IAAI,CAAC,CAAC;IAC5F,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAClD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IACpD,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3C,yEAAyE;IACzE,OAAO,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,UAAU,CAAC,EAAE,SAAS,CAAC,CAAC;IACnE,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;IAC/C,MAAM,SAAS,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC;IACzD,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;AAC5D,CAAC;AAED,+DAA+D;AAC/D,SAAS,QAAQ,CAAC,GAAW,EAAE,SAAiB;IAC/C,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IACjD,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAC3C,OAAO,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,QAAQ,EAAE,SAAS,CAAC,EAAE,SAAS,CAAC,CAAC;IAC1E,0EAA0E;IAC1E,qDAAqD;IACrD,IAAI,CAAC;QACJ,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACxE,CAAC;IAAC,MAAM,CAAC;QACR,iBAAiB;IAClB,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC;AAC1D,CAAC;AAeD;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,MAAc,EAAE,IAAoB;IAC1E,MAAM,UAAU,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;IAC1C,MAAM,SAAS,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,sBAAsB,CAAC,CAAC,CAAC;IAC3E,IAAI,CAAC;QACJ,+DAA+D;QAC/D,MAAM,MAAM,GACX,UAAU,KAAK,OAAO;YACrB,CAAC,CAAC,UAAU,CAAC,MAAM,EAAE,SAAS,CAAC;YAC/B,CAAC,CAAC,UAAU,KAAK,KAAK;gBACrB,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;gBAC7B,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QAEjC,0DAA0D;QAC1D,MAAM,EAAE,GAAG,eAAe,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC;QAElE,sBAAsB;QACtB,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;QACpD,MAAM,MAAM,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC;QACrC,IAAI,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YAC3B,MAAM,IAAI,YAAY,CACrB,uBAAuB,EAAE,kHAAkH,EAAE,KAAK,CAClJ,CAAC;QACH,CAAC;QAED,qDAAqD;QACrD,SAAS,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACnD,IAAI,MAAM;YAAE,MAAM,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAChE,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAEzD,uEAAuE;QACvE,MAAM,QAAQ,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC;QAC3C,MAAM,MAAM,GAAG,WAAW,CAAC,QAAQ,EAAE,IAAI,CAAC,sBAAsB,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAC1F,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;YACxB,MAAM,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACpD,MAAM,IAAI,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACvC,CAAC;QAED,oDAAoD;QACpD,MAAM,IAAI,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;QAE5C,OAAO;YACN,EAAE;YACF,GAAG,EAAE,SAAS;YACd,UAAU;YACV,MAAM;YACN,QAAQ;YACR,MAAM;YACN,IAAI;YACJ,gBAAgB,EAAE,MAAM;SACxB,CAAC;IACH,CAAC;YAAS,CAAC;QACV,IAAI,CAAC;YACJ,MAAM,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACrD,CAAC;QAAC,MAAM,CAAC;YACR,8BAA8B;QAC/B,CAAC;IACF,CAAC;AACF,CAAC;AAQD;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,EAAU,EAAE,aAAqB;IAChE,MAAM,MAAM,GAAG,UAAU,CAAC,EAAE,CAAC,CAAC;IAC9B,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,YAAY,CAAC,IAAI,EAAE,iCAAiC,CAAC,CAAC;IAC7E,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;IAC7C,IAAI,KAAK,GAAG,KAAK,CAAC;IAClB,IAAI,CAAC;QACJ,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACR,KAAK,GAAG,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC,KAAK,EAAE,CAAC;QACZ,MAAM,IAAI,YAAY,CAAC,uBAAuB,MAAM,uEAAuE,CAAC,CAAC;IAC9H,CAAC;IACD,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC5B,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,gBAAgB,CAAC,aAAqB;IACrD,IAAI,CAAC;QACJ,OAAO,WAAW,CAAC,aAAa,CAAC;aAC/B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;YAChB,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,OAAO,KAAK,CAAC;YACvC,IAAI,CAAC;gBACJ,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;YAC/D,CAAC;YAAC,MAAM,CAAC;gBACR,OAAO,KAAK,CAAC;YACd,CAAC;QACF,CAAC,CAAC;aACD,IAAI,EAAE,CAAC;IACV,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,EAAE,CAAC;IACX,CAAC;AACF,CAAC"}

package/dist/agents/extensions/loader.d.ts

@@ -12,8 +12,19 @@
  * Activation traceability: EVERY module decision (activated / skipped) emits a
  * structured log line under the `extensions/loader` subsystem. The reason is a
  * stable enum (`disabled`/`requiresEnv`/`eligible`/`allowlist`/`configSchema`/
- * `registerFailed`) so an operator running `brigade doctor` or scraping the
- * JSONL log can answer "why didn't my plugin load" without source-diving.
+ * `registerFailed`/`activation-not-triggered`) so an operator running
+ * `brigade doctor` or scraping the JSONL log can answer "why didn't my plugin
+ * load" without source-diving.
+ *
+ * Step 5 — manifest-driven LAZY activation. User modules are no longer imported
+ * eagerly. The loader lists candidates WITHOUT importing, reads each one's
+ * sidecar `brigade.extension.json` manifest, and consults the activation planner
+ * (`activation-planner.ts`) against an active-config snapshot. A module whose
+ * declared `activation` triggers don't fire is NEVER imported (its top-level
+ * never runs) — O(manifest) boot. A module with no sidecar manifest is imported
+ * to recover its `manifest` field, then re-planned from the body, so back-compat
+ * holds (no manifest / no triggers ⇒ always activate). Skips here log
+ * `reason=activation-not-triggered`.
  */
 import { BrigadeExtensionRegistry, type RegistryContextMeta } from "./registry.js";
 import type { BrigadeModule } from "./types.js";

package/dist/agents/extensions/loader.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"loader.d.ts","sourceRoot":"","sources":["../../../src/agents/extensions/loader.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AASH,OAAO,EAAE,wBAAwB,EAAE,KAAK,mBAAmB,EAAE,MAAM,eAAe,CAAC;AACnF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAmChD,MAAM,WAAW,eAAe;IAC/B,yCAAyC;IACzC,OAAO,EAAE,aAAa,EAAE,CAAC;IACzB,IAAI,EAAE,mBAAmB,CAAC;IAC1B,gEAAgE;IAChE,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,qFAAqF;IACrF,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gFAAgF;IAChF,WAAW,CAAC,EAAE,OAAO,CAAC;CACtB;AAWD;;;;;GAKG;AACH,wBAAsB,WAAW,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAgG1F"}
+{"version":3,"file":"loader.d.ts","sourceRoot":"","sources":["../../../src/agents/extensions/loader.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAkBH,OAAO,EAAE,wBAAwB,EAAqB,KAAK,mBAAmB,EAAE,MAAM,eAAe,CAAC;AACtG,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAmChD,MAAM,WAAW,eAAe;IAC/B,yCAAyC;IACzC,OAAO,EAAE,aAAa,EAAE,CAAC;IACzB,IAAI,EAAE,mBAAmB,CAAC;IAC1B,gEAAgE;IAChE,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,qFAAqF;IACrF,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gFAAgF;IAChF,WAAW,CAAC,EAAE,OAAO,CAAC;CACtB;AAkBD;;;;;GAKG;AACH,wBAAsB,WAAW,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAiM1F"}