@stigmer/plugin-package 3.15.3-dev.20260916211208 → 3.16.1-dev.20260917224426

package/client/ignore/pattern.js

@@ -0,0 +1,118 @@
+// Faithful port of go-git's plumbing/format/gitignore Pattern (ParsePattern +
+// Match). This is what gives `push` its exact gitignore semantics: domain
+// scoping, directory-only patterns, single-name vs glob matching, and the
+// `**` zero-to-many-directories wildcard.
+import { matchName } from "./match.js";
+export var MatchResult;
+(function (MatchResult) {
+    MatchResult[MatchResult["NoMatch"] = 0] = "NoMatch";
+    MatchResult[MatchResult["Exclude"] = 1] = "Exclude";
+    MatchResult[MatchResult["Include"] = 2] = "Include";
+})(MatchResult || (MatchResult = {}));
+const INCLUSION_PREFIX = "!";
+const ZERO_TO_MANY = "**";
+const DIR_SEP = "/";
+class GitignorePattern {
+    inclusion;
+    domain;
+    parts;
+    dirOnly;
+    isGlob;
+    constructor(domain, parts, inclusion, dirOnly, isGlob) {
+        this.domain = domain;
+        this.parts = parts;
+        this.inclusion = inclusion;
+        this.dirOnly = dirOnly;
+        this.isGlob = isGlob;
+    }
+    match(path, isDir) {
+        const matchResult = this.inclusion ? MatchResult.Include : MatchResult.Exclude;
+        if (path.length <= this.domain.length)
+            return MatchResult.NoMatch;
+        for (let i = 0; i < this.domain.length; i++) {
+            if (path[i] !== this.domain[i])
+                return MatchResult.NoMatch;
+        }
+        const scoped = path.slice(this.domain.length);
+        const matched = this.isGlob ? this.globMatch(scoped, isDir) : this.simpleNameMatch(scoped, isDir);
+        return matched ? matchResult : MatchResult.NoMatch;
+    }
+    simpleNameMatch(path, isDir) {
+        for (let i = 0; i < path.length; i++) {
+            if (!matchName(this.parts[0] ?? "", path[i] ?? ""))
+                continue;
+            if (this.dirOnly && !isDir && i === path.length - 1)
+                return false;
+            return true;
+        }
+        return false;
+    }
+    globMatch(path, isDir) {
+        let matched = false;
+        let canTraverse = false;
+        let remaining = path;
+        for (let i = 0; i < this.parts.length; i++) {
+            const part = this.parts[i] ?? "";
+            if (part === "") {
+                canTraverse = false;
+                continue;
+            }
+            if (part === ZERO_TO_MANY) {
+                if (i === this.parts.length - 1)
+                    break;
+                canTraverse = true;
+                continue;
+            }
+            if (part.includes(ZERO_TO_MANY))
+                return false;
+            if (remaining.length === 0)
+                return false;
+            if (canTraverse) {
+                canTraverse = false;
+                for (;;) {
+                    if (remaining.length === 0) {
+                        matched = false;
+                        break;
+                    }
+                    const e = remaining[0] ?? "";
+                    remaining = remaining.slice(1);
+                    if (matchName(part, e)) {
+                        matched = true;
+                        break;
+                    }
+                }
+            }
+            else {
+                if (!matchName(part, remaining[0] ?? ""))
+                    return false;
+                matched = true;
+                remaining = remaining.slice(1);
+            }
+        }
+        if (matched && this.dirOnly && !isDir && remaining.length === 0) {
+            matched = false;
+        }
+        return matched;
+    }
+}
+/** Parse a gitignore pattern string into a matchable Pattern (go-git parity). */
+export function parsePattern(raw, domain) {
+    let p = raw;
+    let inclusion = false;
+    if (p.startsWith(INCLUSION_PREFIX)) {
+        inclusion = true;
+        p = p.slice(1);
+    }
+    if (!p.endsWith("\\ ")) {
+        p = p.replace(/ +$/, "");
+    }
+    let dirOnly = false;
+    if (p.endsWith(DIR_SEP)) {
+        dirOnly = true;
+        p = p.slice(0, -1);
+    }
+    const isGlob = p.includes(DIR_SEP);
+    const parts = p.split(DIR_SEP);
+    return new GitignorePattern(domain, parts, inclusion, dirOnly, isGlob);
+}
+//# sourceMappingURL=pattern.js.map

package/client/ignore/pattern.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pattern.js","sourceRoot":"","sources":["../../../src/client/ignore/pattern.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,0EAA0E;AAC1E,0EAA0E;AAC1E,0CAA0C;AAE1C,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAEvC,MAAM,CAAN,IAAY,WAIX;AAJD,WAAY,WAAW;IACrB,mDAAW,CAAA;IACX,mDAAW,CAAA;IACX,mDAAW,CAAA;AACb,CAAC,EAJW,WAAW,KAAX,WAAW,QAItB;AAED,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAC7B,MAAM,YAAY,GAAG,IAAI,CAAC;AAC1B,MAAM,OAAO,GAAG,GAAG,CAAC;AAQpB,MAAM,gBAAgB;IACX,SAAS,CAAU;IACX,MAAM,CAAoB;IAC1B,KAAK,CAAoB;IACzB,OAAO,CAAU;IACjB,MAAM,CAAU;IAEjC,YAAY,MAAyB,EAAE,KAAwB,EAAE,SAAkB,EAAE,OAAgB,EAAE,MAAe;QACpH,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,IAAuB,EAAE,KAAc;QAC3C,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC;QAE/E,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM;YAAE,OAAO,WAAW,CAAC,OAAO,CAAC;QAClE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC5C,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;gBAAE,OAAO,WAAW,CAAC,OAAO,CAAC;QAC7D,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC9C,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAClG,OAAO,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC;IACrD,CAAC;IAEO,eAAe,CAAC,IAAuB,EAAE,KAAc;QAC7D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACrC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;gBAAE,SAAS;YAC7D,IAAI,IAAI,CAAC,OAAO,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM,GAAG,CAAC;gBAAE,OAAO,KAAK,CAAC;YAClE,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,SAAS,CAAC,IAAuB,EAAE,KAAc;QACvD,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,WAAW,GAAG,KAAK,CAAC;QACxB,IAAI,SAAS,GAAG,IAAI,CAAC;QAErB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACjC,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;gBAChB,WAAW,GAAG,KAAK,CAAC;gBACpB,SAAS;YACX,CAAC;YACD,IAAI,IAAI,KAAK,YAAY,EAAE,CAAC;gBAC1B,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC;oBAAE,MAAM;gBACvC,WAAW,GAAG,IAAI,CAAC;gBACnB,SAAS;YACX,CAAC;YACD,IAAI,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC;gBAAE,OAAO,KAAK,CAAC;YAC9C,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,KAAK,CAAC;YAEzC,IAAI,WAAW,EAAE,CAAC;gBAChB,WAAW,GAAG,KAAK,CAAC;gBACpB,SAAS,CAAC;oBACR,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;wBAC3B,OAAO,GAAG,KAAK,CAAC;wBAChB,MAAM;oBACR,CAAC;oBACD,MAAM,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;oBAC7B,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;oBAC/B,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;wBACvB,OAAO,GAAG,IAAI,CAAC;wBACf,MAAM;oBACR,CAAC;gBACH,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;oBAAE,OAAO,KAAK,CAAC;gBACvD,OAAO,GAAG,IAAI,CAAC;gBACf,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACjC,CAAC;QACH,CAAC;QAED,IAAI,OAAO,IAAI,IAAI,CAAC,OAAO,IAAI,CAAC,KAAK,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAChE,OAAO,GAAG,KAAK,CAAC;QAClB,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;CACF;AAED,iFAAiF;AACjF,MAAM,UAAU,YAAY,CAAC,GAAW,EAAE,MAAyB;IACjE,IAAI,CAAC,GAAG,GAAG,CAAC;IACZ,IAAI,SAAS,GAAG,KAAK,CAAC;IAEtB,IAAI,CAAC,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACnC,SAAS,GAAG,IAAI,CAAC;QACjB,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACjB,CAAC;IAED,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACvB,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC3B,CAAC;IAED,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QACxB,OAAO,GAAG,IAAI,CAAC;QACf,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACrB,CAAC;IAED,MAAM,MAAM,GAAG,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACnC,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC/B,OAAO,IAAI,gBAAgB,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;AACzE,CAAC"}

package/client/refs.d.ts

@@ -0,0 +1,76 @@
+/**
+ * The two grammars a user types at any marketplace surface, and the words
+ * every client uses for what they name.
+ *
+ * `install [marketplace/]name[@version]`: the plugin's name in its
+ * marketplace, optionally qualified by the marketplace's name and pinned to
+ * the version the entry's manifest must carry. Both names obey the plugin
+ * name rule (`isValidPluginName`: lowercase letters, digits, `.` and `-`,
+ * never `/` or `@`), which is what makes the grammar unambiguous: the first
+ * `/` splits the marketplace off, the first `@` splits the version off, and
+ * anything else is not a ref. A path (`./thermos`, `/tmp/x`, `..`) is the
+ * one likely mistake and gets its own sentence, so a client can point at
+ * the command that installs a folder.
+ *
+ * A GitHub marketplace source: `owner/repo[@ref]`, or the URL a browser
+ * shows for that repository (`https://github.com/owner/repo[/tree/<ref>]`),
+ * normalised to one record. Every vendor keeps its marketplace file at the
+ * repository root, so a subdirectory grammar is not offered.
+ *
+ * Refusals are returned, not thrown: the CLI wraps one in its `UsageError`
+ * and the console renders it, and the sentence is the same in both. A
+ * client adds the second paragraph naming its own command.
+ */
+/** The built-in marketplace's name: the prefix in `install stigmer/<plugin>`; reserved in every client. */
+export declare const OFFICIAL_MARKETPLACE_NAME = "stigmer";
+export interface InstallRef {
+    /** The marketplace named before the `/`, or `undefined` when the name stands alone. */
+    readonly marketplace?: string;
+    readonly name: string;
+    /** The version named after the `@`, asserted against the entry's manifest. */
+    readonly version?: string;
+}
+export type InstallRefOutcome = {
+    readonly ok: true;
+    readonly ref: InstallRef;
+} | {
+    readonly ok: false;
+    /** `path` when the text names a folder rather than a plugin; `shape` for every other refusal. */
+    readonly kind: "path" | "shape";
+    readonly message: string;
+};
+/** The grammar in the user's terms, quoted by every refusal. */
+export declare const INSTALL_REF_SHAPE = "[marketplace/]name[@version], for example 'thermos', 'cursor-plugins/thermos' or 'thermos@1.0.0'";
+export declare function parseInstallRef(text: string): InstallRefOutcome;
+/** The grammar's own text for a ref, the inverse of `parseInstallRef`. */
+export declare function formatInstallRef(ref: InstallRef): string;
+/** Whether `text` reads as a filesystem path on any platform (relative, home, absolute, Windows). */
+export declare function looksLikePath(text: string): boolean;
+/** A public GitHub repository at a ref; the default branch when `ref` is absent. */
+export interface GitHubMarketplaceSource {
+    readonly type: "github";
+    /** `owner/repo`. */
+    readonly repo: string;
+    /** Branch, tag or commit. */
+    readonly ref?: string;
+}
+export type GitHubSourceOutcome = {
+    readonly ok: true;
+    readonly source: GitHubMarketplaceSource;
+} | {
+    readonly ok: false;
+    readonly message: string;
+};
+/** What a GitHub source may be typed as, quoted by every refusal. */
+export declare const GITHUB_SOURCE_SHAPE = "a GitHub repository as 'owner/repo' or 'owner/repo@ref', or that repository's URL (https://github.com/owner/repo)";
+/**
+ * `owner/repo[@ref]` or a github.com URL as one source. The URL form is
+ * tried first because it contains a `/` too; a text that is neither is
+ * refused with the shape.
+ */
+export declare function parseGitHubSource(text: string): GitHubSourceOutcome;
+/** One phrase naming a GitHub source, for lists and sentences. */
+export declare function describeGitHubSource(source: GitHubMarketplaceSource): string;
+/** `owner/repo` as GitHub spells it: two segments, no `.git` suffix required or refused. */
+export declare function isOwnerRepo(value: string): boolean;
+//# sourceMappingURL=refs.d.ts.map

package/client/refs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"refs.d.ts","sourceRoot":"","sources":["../../src/client/refs.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAIH,2GAA2G;AAC3G,eAAO,MAAM,yBAAyB,YAAY,CAAC;AAEnD,MAAM,WAAW,UAAU;IACzB,uFAAuF;IACvF,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,8EAA8E;IAC9E,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,MAAM,iBAAiB,GACzB;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,UAAU,CAAA;CAAE,GAC/C;IACE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IACnB,iGAAiG;IACjG,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IAChC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B,CAAC;AAKN,gEAAgE;AAChE,eAAO,MAAM,iBAAiB,qGACsE,CAAC;AAErG,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,iBAAiB,CAsC/D;AAED,0EAA0E;AAC1E,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,UAAU,GAAG,MAAM,CAIxD;AAED,qGAAqG;AACrG,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAWnD;AAED,oFAAoF;AACpF,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB,oBAAoB;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,6BAA6B;IAC7B,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,MAAM,mBAAmB,GAC3B;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,uBAAuB,CAAA;CAAE,GAC/D;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAErD,qEAAqE;AACrE,eAAO,MAAM,mBAAmB,sHACqF,CAAC;AAItH;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,mBAAmB,CAkBnE;AAED,kEAAkE;AAClE,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,uBAAuB,GAAG,MAAM,CAE5E;AAID,4FAA4F;AAC5F,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAGlD"}

package/client/refs.js

@@ -0,0 +1,123 @@
+/**
+ * The two grammars a user types at any marketplace surface, and the words
+ * every client uses for what they name.
+ *
+ * `install [marketplace/]name[@version]`: the plugin's name in its
+ * marketplace, optionally qualified by the marketplace's name and pinned to
+ * the version the entry's manifest must carry. Both names obey the plugin
+ * name rule (`isValidPluginName`: lowercase letters, digits, `.` and `-`,
+ * never `/` or `@`), which is what makes the grammar unambiguous: the first
+ * `/` splits the marketplace off, the first `@` splits the version off, and
+ * anything else is not a ref. A path (`./thermos`, `/tmp/x`, `..`) is the
+ * one likely mistake and gets its own sentence, so a client can point at
+ * the command that installs a folder.
+ *
+ * A GitHub marketplace source: `owner/repo[@ref]`, or the URL a browser
+ * shows for that repository (`https://github.com/owner/repo[/tree/<ref>]`),
+ * normalised to one record. Every vendor keeps its marketplace file at the
+ * repository root, so a subdirectory grammar is not offered.
+ *
+ * Refusals are returned, not thrown: the CLI wraps one in its `UsageError`
+ * and the console renders it, and the sentence is the same in both. A
+ * client adds the second paragraph naming its own command.
+ */
+import { isValidPluginName } from "../detect.js";
+/** The built-in marketplace's name: the prefix in `install stigmer/<plugin>`; reserved in every client. */
+export const OFFICIAL_MARKETPLACE_NAME = "stigmer";
+/** The characters a `@version` may carry: the plugin's tag pattern, so what a ref pins is a tag the server can hold. */
+const VERSION_PATTERN = /^[a-zA-Z0-9._-]+$/;
+/** The grammar in the user's terms, quoted by every refusal. */
+export const INSTALL_REF_SHAPE = "[marketplace/]name[@version], for example 'thermos', 'cursor-plugins/thermos' or 'thermos@1.0.0'";
+export function parseInstallRef(text) {
+    if (looksLikePath(text)) {
+        return {
+            ok: false,
+            kind: "path",
+            message: `'${text}' is a path, and 'install' takes a plugin's name in a marketplace`,
+        };
+    }
+    let rest = text;
+    let marketplace;
+    const slash = rest.indexOf("/");
+    if (slash !== -1) {
+        marketplace = rest.slice(0, slash);
+        rest = rest.slice(slash + 1);
+        if (!isValidPluginName(marketplace)) {
+            return { ok: false, kind: "shape", message: `'${marketplace}' is not a marketplace name` };
+        }
+    }
+    let version;
+    const at = rest.indexOf("@");
+    if (at !== -1) {
+        version = rest.slice(at + 1);
+        rest = rest.slice(0, at);
+        if (version === "" || !VERSION_PATTERN.test(version)) {
+            return { ok: false, kind: "shape", message: `'${version}' is not a version` };
+        }
+    }
+    if (!isValidPluginName(rest)) {
+        return { ok: false, kind: "shape", message: `'${rest}' is not a plugin name` };
+    }
+    return {
+        ok: true,
+        ref: {
+            ...(marketplace !== undefined && { marketplace }),
+            name: rest,
+            ...(version !== undefined && { version }),
+        },
+    };
+}
+/** The grammar's own text for a ref, the inverse of `parseInstallRef`. */
+export function formatInstallRef(ref) {
+    const prefix = ref.marketplace === undefined ? "" : `${ref.marketplace}/`;
+    const suffix = ref.version === undefined ? "" : `@${ref.version}`;
+    return `${prefix}${ref.name}${suffix}`;
+}
+/** Whether `text` reads as a filesystem path on any platform (relative, home, absolute, Windows). */
+export function looksLikePath(text) {
+    return (text === "." ||
+        text === ".." ||
+        text.startsWith("./") ||
+        text.startsWith("../") ||
+        text.startsWith("~") ||
+        text.startsWith("/") ||
+        text.includes("\\") ||
+        /^[A-Za-z]:/.test(text));
+}
+/** What a GitHub source may be typed as, quoted by every refusal. */
+export const GITHUB_SOURCE_SHAPE = "a GitHub repository as 'owner/repo' or 'owner/repo@ref', or that repository's URL (https://github.com/owner/repo)";
+const GITHUB_URL = /^https?:\/\/(?:www\.)?github\.com\/([^/\s]+)\/([^/\s#?]+?)(?:\.git)?(?:\/tree\/([^\s#?]+))?\/?$/;
+/**
+ * `owner/repo[@ref]` or a github.com URL as one source. The URL form is
+ * tried first because it contains a `/` too; a text that is neither is
+ * refused with the shape.
+ */
+export function parseGitHubSource(text) {
+    const url = GITHUB_URL.exec(text);
+    if (url !== null) {
+        const repo = `${url[1] ?? ""}/${url[2] ?? ""}`;
+        if (!isOwnerRepo(repo)) {
+            return { ok: false, message: `'${text}' does not name a GitHub repository` };
+        }
+        const ref = url[3];
+        return { ok: true, source: { type: "github", repo, ...(ref !== undefined && ref !== "" && { ref }) } };
+    }
+    const at = text.indexOf("@");
+    const repo = at === -1 ? text : text.slice(0, at);
+    const ref = at === -1 ? undefined : text.slice(at + 1);
+    if (isOwnerRepo(repo) && (ref === undefined || ref !== "")) {
+        return { ok: true, source: { type: "github", repo, ...(ref !== undefined && { ref }) } };
+    }
+    return { ok: false, message: `'${text}' is not a GitHub 'owner/repo'` };
+}
+/** One phrase naming a GitHub source, for lists and sentences. */
+export function describeGitHubSource(source) {
+    return source.ref === undefined ? `github.com/${source.repo}` : `github.com/${source.repo}@${source.ref}`;
+}
+const OWNER_REPO_SEGMENT = /^[A-Za-z0-9][A-Za-z0-9._-]*$/;
+/** `owner/repo` as GitHub spells it: two segments, no `.git` suffix required or refused. */
+export function isOwnerRepo(value) {
+    const parts = value.split("/");
+    return parts.length === 2 && parts.every((part) => OWNER_REPO_SEGMENT.test(part) && part !== "." && part !== "..");
+}
+//# sourceMappingURL=refs.js.map

package/client/refs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"refs.js","sourceRoot":"","sources":["../../src/client/refs.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAEjD,2GAA2G;AAC3G,MAAM,CAAC,MAAM,yBAAyB,GAAG,SAAS,CAAC;AAmBnD,wHAAwH;AACxH,MAAM,eAAe,GAAG,mBAAmB,CAAC;AAE5C,gEAAgE;AAChE,MAAM,CAAC,MAAM,iBAAiB,GAC5B,kGAAkG,CAAC;AAErG,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,IAAI,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,MAAM;YACZ,OAAO,EAAE,IAAI,IAAI,mEAAmE;SACrF,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,GAAG,IAAI,CAAC;IAChB,IAAI,WAA+B,CAAC;IACpC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;QACjB,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QACnC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QAC7B,IAAI,CAAC,iBAAiB,CAAC,WAAW,CAAC,EAAE,CAAC;YACpC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,WAAW,6BAA6B,EAAE,CAAC;QAC7F,CAAC;IACH,CAAC;IACD,IAAI,OAA2B,CAAC;IAChC,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;QACd,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QAC7B,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACzB,IAAI,OAAO,KAAK,EAAE,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACrD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,OAAO,oBAAoB,EAAE,CAAC;QAChF,CAAC;IACH,CAAC;IACD,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,IAAI,wBAAwB,EAAE,CAAC;IACjF,CAAC;IACD,OAAO;QACL,EAAE,EAAE,IAAI;QACR,GAAG,EAAE;YACH,GAAG,CAAC,WAAW,KAAK,SAAS,IAAI,EAAE,WAAW,EAAE,CAAC;YACjD,IAAI,EAAE,IAAI;YACV,GAAG,CAAC,OAAO,KAAK,SAAS,IAAI,EAAE,OAAO,EAAE,CAAC;SAC1C;KACF,CAAC;AACJ,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,gBAAgB,CAAC,GAAe;IAC9C,MAAM,MAAM,GAAG,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,WAAW,GAAG,CAAC;IAC1E,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;IAClE,OAAO,GAAG,MAAM,GAAG,GAAG,CAAC,IAAI,GAAG,MAAM,EAAE,CAAC;AACzC,CAAC;AAED,qGAAqG;AACrG,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,OAAO,CACL,IAAI,KAAK,GAAG;QACZ,IAAI,KAAK,IAAI;QACb,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QACrB,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;QACtB,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QACpB,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QACpB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QACnB,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CACxB,CAAC;AACJ,CAAC;AAeD,qEAAqE;AACrE,MAAM,CAAC,MAAM,mBAAmB,GAC9B,mHAAmH,CAAC;AAEtH,MAAM,UAAU,GAAG,iGAAiG,CAAC;AAErH;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;QACjB,MAAM,IAAI,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QAC/C,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;YACvB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,IAAI,qCAAqC,EAAE,CAAC;QAC/E,CAAC;QACD,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;QACnB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,CAAC,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;IACzG,CAAC;IAED,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC7B,MAAM,IAAI,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAClD,MAAM,GAAG,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IACvD,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,EAAE,CAAC,EAAE,CAAC;QAC3D,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,CAAC,GAAG,KAAK,SAAS,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;IAC3F,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,IAAI,gCAAgC,EAAE,CAAC;AAC1E,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,oBAAoB,CAAC,MAA+B;IAClE,OAAO,MAAM,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,cAAc,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,cAAc,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,GAAG,EAAE,CAAC;AAC5G,CAAC;AAED,MAAM,kBAAkB,GAAG,8BAA8B,CAAC;AAE1D,4FAA4F;AAC5F,MAAM,UAAU,WAAW,CAAC,KAAa;IACvC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,CAAC,CAAC;AACrH,CAAC"}

package/client/select.d.ts

@@ -0,0 +1,74 @@
+/**
+ * Which files of a tree a plugin push carries, and in what order.
+ *
+ * A client that installs a plugin holds a tree: the CLI a directory on disk,
+ * the console the file list a marketplace host returned. Both must choose
+ * the same files in the same order, because the archive's bytes are the
+ * plugin's identity on the server (`status.digest` is the SHA-256 of what
+ * it received) and the order of the archive's entries is part of those
+ * bytes. This module is that choice, made once.
+ *
+ * The rule is the CLI's original walk (`stigmer push plugin <dir>`): at each
+ * directory the names are sorted by code point, files and directories
+ * interleaved by name, and a directory the matcher ignores is skipped whole,
+ * so no negation inside it can pull a file back. Symlinks never appear (the
+ * CLI walker skips them; a hosted tree has none the client asks for).
+ * `compareWalkOrder` states that order for a flat list of paths so a client
+ * with no directory to walk arrives at the same sequence; it is NOT the plain
+ * code-point order of full paths (`b/x.txt` sorts before `b.txt` here,
+ * because the directory `b` sorts before the file `b.txt` at their level).
+ * The reader in `read-plugin-package.ts` indexes entries by path and is
+ * indifferent to their order; only the archive cares.
+ *
+ * `.gitignore` and `.stigmerignore` are read from the root of the tree being
+ * selected, as the CLI does, never from an ancestor: a marketplace entry is
+ * its own plugin root.
+ */
+import type { PluginFiles } from "../files.js";
+import { type Matcher } from "./ignore/matcher.js";
+/** The tree a client holds before selection: every file it could offer, with its size. */
+export interface CandidateFile {
+    /** Root-relative POSIX path, no leading `./`. */
+    readonly path: string;
+    readonly size: number;
+}
+/** What the selection included and left out, for the summary line every client prints. */
+export interface SelectionStats {
+    filesIncluded: number;
+    filesIgnored: number;
+    /** Ignored directories that held at least one candidate; a tree lists no empty directories. */
+    dirsSkipped: number;
+    totalSize: number;
+}
+export interface SelectPluginFilesOptions {
+    /** Whether the tree's own root `.gitignore` applies (every push says yes unless asked otherwise). */
+    readonly respectGitignore: boolean;
+    readonly extraIgnore?: readonly string[];
+    readonly extraInclude?: readonly string[];
+}
+export interface PluginSelection {
+    readonly files: PluginFiles;
+    readonly stats: SelectionStats;
+    /** The matcher the selection ran, for diagnostics (`push --dry-run` lists its patterns). */
+    readonly matcher: Matcher;
+}
+/** The two files at a tree's root that shape its own selection. */
+export declare const IGNORE_FILE_NAMES: {
+    readonly gitignore: ".gitignore";
+    readonly stigmerignore: ".stigmerignore";
+};
+/**
+ * Select the files a push of `candidates` carries. `read` yields a listed
+ * candidate's bytes and is called here only for the two ignore files at the
+ * root, so a client may hand over a lazy reader and pay for the rest only
+ * when the archive is built.
+ */
+export declare function selectPluginFiles(candidates: readonly CandidateFile[], read: (path: string) => Uint8Array, options: SelectPluginFilesOptions): PluginSelection;
+/**
+ * The order a sorted directory walk visits files: component by component,
+ * each compared by code point. Two paths never share a prefix that is a
+ * file in one and a directory in the other, so a shorter path is never a
+ * prefix of a longer one at the point they differ.
+ */
+export declare function compareWalkOrder(a: string, b: string): number;
+//# sourceMappingURL=select.d.ts.map

package/client/select.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"select.d.ts","sourceRoot":"","sources":["../../src/client/select.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,KAAK,EAAmB,WAAW,EAAE,MAAM,aAAa,CAAC;AAChE,OAAO,EAAsB,KAAK,OAAO,EAAwD,MAAM,qBAAqB,CAAC;AAE7H,0FAA0F;AAC1F,MAAM,WAAW,aAAa;IAC5B,iDAAiD;IACjD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,0FAA0F;AAC1F,MAAM,WAAW,cAAc;IAC7B,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,+FAA+F;IAC/F,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,wBAAwB;IACvC,qGAAqG;IACrG,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;IACnC,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACzC,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC3C;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,cAAc,CAAC;IAC/B,4FAA4F;IAC5F,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;CAC3B;AAED,mEAAmE;AACnE,eAAO,MAAM,iBAAiB;;;CAGpB,CAAC;AAEX;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAC/B,UAAU,EAAE,SAAS,aAAa,EAAE,EACpC,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,UAAU,EAClC,OAAO,EAAE,wBAAwB,GAChC,eAAe,CAwCjB;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,CAU7D"}

package/client/select.js

@@ -0,0 +1,121 @@
+/**
+ * Which files of a tree a plugin push carries, and in what order.
+ *
+ * A client that installs a plugin holds a tree: the CLI a directory on disk,
+ * the console the file list a marketplace host returned. Both must choose
+ * the same files in the same order, because the archive's bytes are the
+ * plugin's identity on the server (`status.digest` is the SHA-256 of what
+ * it received) and the order of the archive's entries is part of those
+ * bytes. This module is that choice, made once.
+ *
+ * The rule is the CLI's original walk (`stigmer push plugin <dir>`): at each
+ * directory the names are sorted by code point, files and directories
+ * interleaved by name, and a directory the matcher ignores is skipped whole,
+ * so no negation inside it can pull a file back. Symlinks never appear (the
+ * CLI walker skips them; a hosted tree has none the client asks for).
+ * `compareWalkOrder` states that order for a flat list of paths so a client
+ * with no directory to walk arrives at the same sequence; it is NOT the plain
+ * code-point order of full paths (`b/x.txt` sorts before `b.txt` here,
+ * because the directory `b` sorts before the file `b.txt` at their level).
+ * The reader in `read-plugin-package.ts` indexes entries by path and is
+ * indifferent to their order; only the archive cares.
+ *
+ * `.gitignore` and `.stigmerignore` are read from the root of the tree being
+ * selected, as the CLI does, never from an ancestor: a marketplace entry is
+ * its own plugin root.
+ */
+import { SOURCE_GITIGNORE, SOURCE_STIGMERIGNORE, buildMatcher } from "./ignore/matcher.js";
+/** The two files at a tree's root that shape its own selection. */
+export const IGNORE_FILE_NAMES = {
+    gitignore: SOURCE_GITIGNORE,
+    stigmerignore: SOURCE_STIGMERIGNORE,
+};
+/**
+ * Select the files a push of `candidates` carries. `read` yields a listed
+ * candidate's bytes and is called here only for the two ignore files at the
+ * root, so a client may hand over a lazy reader and pay for the rest only
+ * when the archive is built.
+ */
+export function selectPluginFiles(candidates, read, options) {
+    const byPath = new Map(candidates.map((candidate) => [candidate.path, candidate]));
+    const sources = {
+        includeDefaults: true,
+        ...(options.respectGitignore &&
+            byPath.has(IGNORE_FILE_NAMES.gitignore) && { gitignore: decode(read(IGNORE_FILE_NAMES.gitignore)) }),
+        ...(byPath.has(IGNORE_FILE_NAMES.stigmerignore) && {
+            stigmerignore: decode(read(IGNORE_FILE_NAMES.stigmerignore)),
+        }),
+        ...(options.extraIgnore !== undefined && { extraIgnore: options.extraIgnore }),
+        ...(options.extraInclude !== undefined && { extraInclude: options.extraInclude }),
+    };
+    const matcher = buildMatcher(sources);
+    const stats = { filesIncluded: 0, filesIgnored: 0, dirsSkipped: 0, totalSize: 0 };
+    const skippedDirs = new Set();
+    const entries = [];
+    for (const candidate of [...candidates].sort((a, b) => compareWalkOrder(a.path, b.path))) {
+        if (underSkippedDir(candidate.path, matcher, skippedDirs, stats))
+            continue;
+        if (matcher.matchWithReason(candidate.path, false).ignored) {
+            stats.filesIgnored++;
+            continue;
+        }
+        entries.push({ path: candidate.path, size: candidate.size });
+        stats.filesIncluded++;
+        stats.totalSize += candidate.size;
+    }
+    return {
+        files: {
+            entries,
+            read(path) {
+                if (!byPath.has(path))
+                    throw new Error(`plugin file '${path}' is not listed`);
+                return read(path);
+            },
+        },
+        stats,
+        matcher,
+    };
+}
+/**
+ * The order a sorted directory walk visits files: component by component,
+ * each compared by code point. Two paths never share a prefix that is a
+ * file in one and a directory in the other, so a shorter path is never a
+ * prefix of a longer one at the point they differ.
+ */
+export function compareWalkOrder(a, b) {
+    const as = a.split("/");
+    const bs = b.split("/");
+    const depth = Math.min(as.length, bs.length);
+    for (let i = 0; i < depth; i++) {
+        const x = as[i] ?? "";
+        const y = bs[i] ?? "";
+        if (x !== y)
+            return x < y ? -1 : 1;
+    }
+    return as.length - bs.length;
+}
+/**
+ * True when an ancestor directory of `path` is ignored as a directory. The
+ * walk checks a directory once and skips its subtree, so each ignored
+ * directory counts once whatever it holds.
+ */
+function underSkippedDir(path, matcher, skipped, stats) {
+    const parts = path.split("/");
+    let dir = "";
+    for (let i = 0; i < parts.length - 1; i++) {
+        dir = dir === "" ? (parts[i] ?? "") : `${dir}/${parts[i] ?? ""}`;
+        if (skipped.has(dir))
+            return true;
+        if (matcher.matchWithReason(dir, true).ignored) {
+            skipped.add(dir);
+            stats.dirsSkipped++;
+            return true;
+        }
+    }
+    return false;
+}
+const decoder = new TextDecoder();
+function decode(bytes) {
+    return decoder.decode(bytes);
+}
+//# sourceMappingURL=select.js.map

package/client/select.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"select.js","sourceRoot":"","sources":["../../src/client/select.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAGH,OAAO,EAAoC,gBAAgB,EAAE,oBAAoB,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAgC7H,mEAAmE;AACnE,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,SAAS,EAAE,gBAAgB;IAC3B,aAAa,EAAE,oBAAoB;CAC3B,CAAC;AAEX;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAC/B,UAAoC,EACpC,IAAkC,EAClC,OAAiC;IAEjC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;IACnF,MAAM,OAAO,GAAkB;QAC7B,eAAe,EAAE,IAAI;QACrB,GAAG,CAAC,OAAO,CAAC,gBAAgB;YAC1B,MAAM,CAAC,GAAG,CAAC,iBAAiB,CAAC,SAAS,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;QACtG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,iBAAiB,CAAC,aAAa,CAAC,IAAI;YACjD,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAAC;SAC7D,CAAC;QACF,GAAG,CAAC,OAAO,CAAC,WAAW,KAAK,SAAS,IAAI,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC;QAC9E,GAAG,CAAC,OAAO,CAAC,YAAY,KAAK,SAAS,IAAI,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC;KAClF,CAAC;IACF,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IAEtC,MAAM,KAAK,GAAmB,EAAE,aAAa,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IAClG,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;IACtC,MAAM,OAAO,GAAsB,EAAE,CAAC;IAEtC,KAAK,MAAM,SAAS,IAAI,CAAC,GAAG,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QACzF,IAAI,eAAe,CAAC,SAAS,CAAC,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,KAAK,CAAC;YAAE,SAAS;QAC3E,IAAI,OAAO,CAAC,eAAe,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;YAC3D,KAAK,CAAC,YAAY,EAAE,CAAC;YACrB,SAAS;QACX,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC;QAC7D,KAAK,CAAC,aAAa,EAAE,CAAC;QACtB,KAAK,CAAC,SAAS,IAAI,SAAS,CAAC,IAAI,CAAC;IACpC,CAAC;IAED,OAAO;QACL,KAAK,EAAE;YACL,OAAO;YACP,IAAI,CAAC,IAAI;gBACP,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,IAAI,iBAAiB,CAAC,CAAC;gBAC9E,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC;YACpB,CAAC;SACF;QACD,KAAK;QACL,OAAO;KACR,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,CAAS,EAAE,CAAS;IACnD,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACxB,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACxB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC;IAC7C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;QAC/B,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACtB,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACtB,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,EAAE,CAAC,MAAM,GAAG,EAAE,CAAC,MAAM,CAAC;AAC/B,CAAC;AAED;;;;GAIG;AACH,SAAS,eAAe,CAAC,IAAY,EAAE,OAAgB,EAAE,OAAoB,EAAE,KAAqB;IAClG,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC1C,GAAG,GAAG,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QACjE,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAClC,IAAI,OAAO,CAAC,eAAe,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;YAC/C,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACjB,KAAK,CAAC,WAAW,EAAE,CAAC;YACpB,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;AAElC,SAAS,MAAM,CAAC,KAAiB;IAC/B,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC/B,CAAC"}

package/client/vocabulary.d.ts

@@ -0,0 +1,13 @@
+/**
+ * The words every client prints for the same thing.
+ *
+ * The CLI's `validate -f`, `push plugin --dry-run` and `install`, and the
+ * console's install preview, all describe a package to the user; a
+ * platform where the same fact is named differently on two surfaces has
+ * two vocabularies. The labels here are the docs' words
+ * (`docs/vocabulary.md`), kept once.
+ */
+import type { PluginDialect } from "../types.js";
+/** Human labels for the four dialects, in the vocabulary the docs use. */
+export declare const DIALECT_LABELS: Readonly<Record<PluginDialect, string>>;
+//# sourceMappingURL=vocabulary.d.ts.map

package/client/vocabulary.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vocabulary.d.ts","sourceRoot":"","sources":["../../src/client/vocabulary.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAEjD,0EAA0E;AAC1E,eAAO,MAAM,cAAc,EAAE,QAAQ,CAAC,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,CAKlE,CAAC"}

package/client/vocabulary.js

@@ -0,0 +1,17 @@
+/**
+ * The words every client prints for the same thing.
+ *
+ * The CLI's `validate -f`, `push plugin --dry-run` and `install`, and the
+ * console's install preview, all describe a package to the user; a
+ * platform where the same fact is named differently on two surfaces has
+ * two vocabularies. The labels here are the docs' words
+ * (`docs/vocabulary.md`), kept once.
+ */
+/** Human labels for the four dialects, in the vocabulary the docs use. */
+export const DIALECT_LABELS = {
+    "agent-plugins": "Agent Plugins 1.0",
+    claude: "Claude Code plugin",
+    cursor: "Cursor plugin",
+    codex: "Codex plugin",
+};
+//# sourceMappingURL=vocabulary.js.map

package/client/vocabulary.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vocabulary.js","sourceRoot":"","sources":["../../src/client/vocabulary.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,0EAA0E;AAC1E,MAAM,CAAC,MAAM,cAAc,GAA4C;IACrE,eAAe,EAAE,mBAAmB;IACpC,MAAM,EAAE,oBAAoB;IAC5B,MAAM,EAAE,eAAe;IACvB,KAAK,EAAE,cAAc;CACtB,CAAC"}

package/client.d.ts

@@ -0,0 +1,34 @@
+/**
+ * `@stigmer/plugin-package/client`: what every client that installs a
+ * plugin does identically.
+ *
+ * The main entry reads a package; this entry is for the client that holds
+ * a tree and must turn it into the push the server expects. Two clients do
+ * that today, the CLI from a directory and the console from a marketplace
+ * host's file list, and a plugin installed from either must have one
+ * digest for one tree, be refused with one sentence for one mistake, and be
+ * described in one vocabulary. So the pieces live here, once:
+ *
+ * - the gitignore-compatible ignore engine and the security defaults
+ *   (`ignore/`), pure over the text of the ignore files;
+ * - the selection rule (`select.ts`): which files a push carries, in the
+ *   order the CLI's original walk produced them;
+ * - the archive and its digest (`archive.ts`): the deterministic zip and
+ *   the SHA-256 the server records;
+ * - the grammars (`refs.ts`): an install ref and a GitHub marketplace
+ *   source, with their refusal sentences;
+ * - the vocabulary (`vocabulary.ts`): the labels both surfaces print.
+ *
+ * Nothing here touches the filesystem, the network or any `node:*` module.
+ * A client's edge (a directory walk, a fetch) produces the candidates and
+ * the bytes; this entry decides what becomes of them.
+ */
+export { DEFAULT_PATTERNS } from "./client/ignore/defaults.js";
+export { matchName } from "./client/ignore/match.js";
+export { type IgnoreSources, type MatchReason, Matcher, Reason, REASON_TEXT, SOURCE_CLI, SOURCE_DEFAULTS, SOURCE_GITIGNORE, SOURCE_STIGMERIGNORE, buildMatcher, } from "./client/ignore/matcher.js";
+export { MatchResult, type Pattern, parsePattern } from "./client/ignore/pattern.js";
+export { type CandidateFile, type PluginSelection, type SelectPluginFilesOptions, type SelectionStats, IGNORE_FILE_NAMES, compareWalkOrder, selectPluginFiles, } from "./client/select.js";
+export { DETERMINISTIC_ZIP_MTIME, archivePlugin, digestArchive } from "./client/archive.js";
+export { type GitHubMarketplaceSource, type GitHubSourceOutcome, type InstallRef, type InstallRefOutcome, GITHUB_SOURCE_SHAPE, INSTALL_REF_SHAPE, OFFICIAL_MARKETPLACE_NAME, describeGitHubSource, formatInstallRef, isOwnerRepo, looksLikePath, parseGitHubSource, parseInstallRef, } from "./client/refs.js";
+export { DIALECT_LABELS } from "./client/vocabulary.js";
+//# sourceMappingURL=client.d.ts.map

package/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AACrD,OAAO,EACL,KAAK,aAAa,EAClB,KAAK,WAAW,EAChB,OAAO,EACP,MAAM,EACN,WAAW,EACX,UAAU,EACV,eAAe,EACf,gBAAgB,EAChB,oBAAoB,EACpB,YAAY,GACb,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,WAAW,EAAE,KAAK,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AACrF,OAAO,EACL,KAAK,aAAa,EAClB,KAAK,eAAe,EACpB,KAAK,wBAAwB,EAC7B,KAAK,cAAc,EACnB,iBAAiB,EACjB,gBAAgB,EAChB,iBAAiB,GAClB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,uBAAuB,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAC5F,OAAO,EACL,KAAK,uBAAuB,EAC5B,KAAK,mBAAmB,EACxB,KAAK,UAAU,EACf,KAAK,iBAAiB,EACtB,mBAAmB,EACnB,iBAAiB,EACjB,yBAAyB,EACzB,oBAAoB,EACpB,gBAAgB,EAChB,WAAW,EACX,aAAa,EACb,iBAAiB,EACjB,eAAe,GAChB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC"}