@stigmer/plugin-package 3.15.3-dev.20260916211208

package/normalise/skills.js

@@ -0,0 +1,116 @@
+/**
+ * Skill discovery and the `SKILL.md` frontmatter check.
+ *
+ * Discovery follows the union of the dialects' rules: the immediate child
+ * directories of `skills/` that hold a `SKILL.md` (the open format's fixed
+ * location, no recursion), plus every path a manifest declared (Claude adds
+ * to the default; Cursor's value is the default in practice), where a
+ * declared path is a skill when it holds `SKILL.md` directly and a directory
+ * of skills otherwise, plus Claude's single-skill layout (a root `SKILL.md`
+ * with no `skills/` and no declaration). A declared path that names nothing
+ * is a warning: Cursor's own tooling does not refuse it, and refusing would
+ * turn a stale manifest line into a failed install.
+ *
+ * The frontmatter check is a discovery check, not the push gate: it asks
+ * that the block be present and closed, that it parse, and that `name`
+ * satisfy `SKILL_NAME_PATTERN`. A missing `name` falls back to the directory
+ * name (Claude's rule) with a warning; the Agent Skills rules Stigmer relaxes
+ * (`name` equal to the directory, `description` present) are warnings.
+ * Optional frontmatter (`license`, `compatibility`, `metadata`,
+ * `allowed-tools`) and vendor keys ride inside the skill untouched. Every
+ * file under the skill directory is listed for the installer's per-skill
+ * archive; only `SKILL.md` is ever read.
+ */
+import { readText } from "../documents.js";
+import { basename, comparePaths, joinPath } from "../files.js";
+import { extractFrontmatter, parseFrontmatter, SKILL_NAME_PATTERN } from "../frontmatter.js";
+export const SKILL_FILE = "SKILL.md";
+export const DEFAULT_SKILLS_DIR = "skills";
+export function normaliseSkills(index, set, findings) {
+    const skills = [];
+    const seenNames = new Map();
+    for (const dir of discoverSkillDirs(index, set, findings)) {
+        const skill = readSkill(index, dir, set, findings);
+        if (skill === undefined)
+            continue;
+        const previous = seenNames.get(skill.name);
+        if (previous !== undefined) {
+            findings.error("skill-name-duplicate", { subject: skill.name, path: joinPath(dir, SKILL_FILE) });
+            continue;
+        }
+        seenNames.set(skill.name, dir);
+        skills.push(skill);
+    }
+    return skills;
+}
+/** Skill directories, deduplicated, in path order; the root skill is `""`. */
+function discoverSkillDirs(index, set, findings) {
+    const dirs = new Set();
+    const addSkillsUnder = (parent) => {
+        for (const child of index.childDirectories(parent)) {
+            const dir = joinPath(parent, child);
+            if (index.has(joinPath(dir, SKILL_FILE)))
+                dirs.add(dir);
+        }
+    };
+    addSkillsUnder(DEFAULT_SKILLS_DIR);
+    const declared = set.manifests.flatMap((m) => m.skillPaths);
+    for (const { path, manifest } of declared) {
+        if (index.has(joinPath(path, SKILL_FILE))) {
+            dirs.add(path);
+        }
+        else if (index.isDirectory(path)) {
+            addSkillsUnder(path);
+        }
+        else {
+            findings.warn("path-missing", { path: manifest, subject: path === "" ? "." : `./${path}` });
+        }
+    }
+    if (declared.length === 0 && !index.isDirectory(DEFAULT_SKILLS_DIR) && index.has(SKILL_FILE)) {
+        dirs.add("");
+    }
+    return [...dirs].sort(comparePaths);
+}
+function readSkill(index, dir, set, findings) {
+    const path = joinPath(dir, SKILL_FILE);
+    const text = readText(index, path, "skillMd", findings);
+    if (text === undefined)
+        return undefined;
+    const extracted = extractFrontmatter(text);
+    if (!extracted.ok) {
+        findings.error(extracted.reason === "missing" ? "skill-frontmatter-missing" : "skill-frontmatter-unclosed", { path });
+        return undefined;
+    }
+    const parsed = parseFrontmatter(extracted.yaml);
+    if (!parsed.ok) {
+        findings.error("skill-frontmatter-unreadable", { path, detail: parsed.detail });
+        return undefined;
+    }
+    const directoryName = dir === "" ? (set.name ?? "skill") : basename(dir);
+    let name;
+    if (typeof parsed.fields["name"] === "string" && parsed.fields["name"] !== "") {
+        name = parsed.fields["name"];
+    }
+    else {
+        name = directoryName;
+        findings.warn("skill-name-defaulted", { path, subject: name });
+    }
+    if (!SKILL_NAME_PATTERN.test(name)) {
+        findings.error("skill-name-invalid", { path, subject: name });
+        return undefined;
+    }
+    if (dir !== "" && name !== directoryName) {
+        findings.warn("skill-name-differs-from-directory", { path, subject: name, detail: directoryName });
+    }
+    const description = parsed.fields["description"];
+    if (typeof description !== "string" || description === "") {
+        findings.warn("skill-description-missing", { path, subject: name });
+    }
+    return {
+        name,
+        ...(typeof description === "string" && description !== "" && { description }),
+        dir,
+        files: index.filesUnder(dir),
+    };
+}
+//# sourceMappingURL=skills.js.map

package/normalise/skills.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skills.js","sourceRoot":"","sources":["../../src/normalise/skills.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAGH,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC3C,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAwB,MAAM,aAAa,CAAC;AACrF,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAI7F,MAAM,CAAC,MAAM,UAAU,GAAG,UAAU,CAAC;AACrC,MAAM,CAAC,MAAM,kBAAkB,GAAG,QAAQ,CAAC;AAE3C,MAAM,UAAU,eAAe,CAAC,KAAsB,EAAE,GAAgB,EAAE,QAAkB;IAC1F,MAAM,MAAM,GAAkB,EAAE,CAAC;IACjC,MAAM,SAAS,GAAG,IAAI,GAAG,EAAkB,CAAC;IAE5C,KAAK,MAAM,GAAG,IAAI,iBAAiB,CAAC,KAAK,EAAE,GAAG,EAAE,QAAQ,CAAC,EAAE,CAAC;QAC1D,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;QACnD,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAClC,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3C,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,QAAQ,CAAC,KAAK,CAAC,sBAAsB,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,GAAG,EAAE,UAAU,CAAC,EAAE,CAAC,CAAC;YACjG,SAAS;QACX,CAAC;QACD,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC/B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,8EAA8E;AAC9E,SAAS,iBAAiB,CAAC,KAAsB,EAAE,GAAgB,EAAE,QAAkB;IACrF,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,cAAc,GAAG,CAAC,MAAc,EAAQ,EAAE;QAC9C,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC;YACnD,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YACpC,IAAI,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;gBAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC,CAAC;IAEF,cAAc,CAAC,kBAAkB,CAAC,CAAC;IAEnC,MAAM,QAAQ,GAAG,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IAC5D,KAAK,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,QAAQ,EAAE,CAAC;QAC1C,IAAI,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,EAAE,CAAC;YAC1C,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACjB,CAAC;aAAM,IAAI,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;YACnC,cAAc,CAAC,IAAI,CAAC,CAAC;QACvB,CAAC;aAAM,CAAC;YACN,QAAQ,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC,CAAC;QAC9F,CAAC;IACH,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,kBAAkB,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;QAC7F,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACf,CAAC;IAED,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;AACtC,CAAC;AAED,SAAS,SAAS,CAAC,KAAsB,EAAE,GAAW,EAAE,GAAgB,EAAE,QAAkB;IAC1F,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IACvC,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;IACxD,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAEzC,MAAM,SAAS,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IAC3C,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;QAClB,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,4BAA4B,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QACtH,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,MAAM,GAAG,gBAAgB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAChD,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,QAAQ,CAAC,KAAK,CAAC,8BAA8B,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QAChF,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,aAAa,GAAG,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IACzE,IAAI,IAAY,CAAC;IACjB,IAAI,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC;QAC9E,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC/B,CAAC;SAAM,CAAC;QACN,IAAI,GAAG,aAAa,CAAC;QACrB,QAAQ,CAAC,IAAI,CAAC,sBAAsB,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IACjE,CAAC;IACD,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,QAAQ,CAAC,KAAK,CAAC,oBAAoB,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9D,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,GAAG,KAAK,EAAE,IAAI,IAAI,KAAK,aAAa,EAAE,CAAC;QACzC,QAAQ,CAAC,IAAI,CAAC,mCAAmC,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;IACrG,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IACjD,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,KAAK,EAAE,EAAE,CAAC;QAC1D,QAAQ,CAAC,IAAI,CAAC,2BAA2B,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IACtE,CAAC;IAED,OAAO;QACL,IAAI;QACJ,GAAG,CAAC,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;QAC7E,GAAG;QACH,KAAK,EAAE,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;KAC7B,CAAC;AACJ,CAAC"}

package/normalise/sub-agents.d.ts

@@ -0,0 +1,44 @@
+/**
+ * Sub-agent files (`agents/*.md`) into the shape `SubAgent` takes.
+ *
+ * Cursor and Claude Code define this component; the open format does not,
+ * so `agents/` is read only when a vendor manifest is present (`detect.ts`
+ * decides) and recorded as ignored otherwise. Files come from the default
+ * `agents/` directory or, when any manifest declares `agents`, from the
+ * declared paths only (Claude's "replaces the default"), each of which may
+ * be one `.md` file or a directory of them.
+ *
+ * The body of the file is the sub-agent's prompt. A body under
+ * `SUB_AGENT_INSTRUCTIONS_MIN` characters is refused, because that is the
+ * proto's floor for `SubAgent.instructions` and a parser that let it through
+ * would add a second silent path after the runner's own (which drops a
+ * sub-agent whose model is unregistered). Frontmatter is optional (a bare
+ * prompt is named after its file, Claude's rule) but must parse when
+ * present: Claude degrades an unparseable header to a file-named agent with
+ * every field ignored, and a faithful install is better refused than
+ * quietly stripped.
+ *
+ * `model` is classified into an alias, never a model id (see `ModelHint`).
+ * Claude `skills:` names are matched against the plugin's own skills. Every
+ * other frontmatter field (`tools`, `disallowedTools`, `effort`, `maxTurns`,
+ * `readonly`, `is_background`, `memory`, `isolation`, ...) is a warning,
+ * once per field per agent: they configure the IDE's loop, not the
+ * sub-agent's prompt.
+ */
+import type { ManifestSet } from "../detect.js";
+import { type PluginFileIndex } from "../files.js";
+import type { Findings } from "../messages.js";
+import type { ModelHint, PluginSkill, PluginSubAgent } from "../types.js";
+export declare const DEFAULT_AGENTS_DIR = "agents";
+/** The proto's `SubAgent.instructions` `min_len`. */
+export declare const SUB_AGENT_INSTRUCTIONS_MIN = 10;
+export declare function normaliseSubAgents(index: PluginFileIndex, set: ManifestSet, skills: readonly PluginSkill[], findings: Findings): readonly PluginSubAgent[];
+/**
+ * A dialect's `model` value to an alias. Cursor writes `fast` and
+ * `inherit`; Claude writes `sonnet`, `opus`, `haiku`, `inherit` or a full
+ * model id, which contains one of those family names. Anything else
+ * (Cursor's `grok-4.6[effort=xhigh]`, a vendor id Stigmer does not serve)
+ * is `unknown` with the raw text kept for the installer's warning.
+ */
+export declare function classifyModel(raw: string): ModelHint;
+//# sourceMappingURL=sub-agents.d.ts.map

package/normalise/sub-agents.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sub-agents.d.ts","sourceRoot":"","sources":["../../src/normalise/sub-agents.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAEhD,OAAO,EAAoC,KAAK,eAAe,EAAE,MAAM,aAAa,CAAC;AAErF,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,KAAK,EAAc,SAAS,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAEtF,eAAO,MAAM,kBAAkB,WAAW,CAAC;AAE3C,qDAAqD;AACrD,eAAO,MAAM,0BAA0B,KAAK,CAAC;AAI7C,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,eAAe,EACtB,GAAG,EAAE,WAAW,EAChB,MAAM,EAAE,SAAS,WAAW,EAAE,EAC9B,QAAQ,EAAE,QAAQ,GACjB,SAAS,cAAc,EAAE,CAgB3B;AAkGD;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,CAepD"}

package/normalise/sub-agents.js

@@ -0,0 +1,168 @@
+/**
+ * Sub-agent files (`agents/*.md`) into the shape `SubAgent` takes.
+ *
+ * Cursor and Claude Code define this component; the open format does not,
+ * so `agents/` is read only when a vendor manifest is present (`detect.ts`
+ * decides) and recorded as ignored otherwise. Files come from the default
+ * `agents/` directory or, when any manifest declares `agents`, from the
+ * declared paths only (Claude's "replaces the default"), each of which may
+ * be one `.md` file or a directory of them.
+ *
+ * The body of the file is the sub-agent's prompt. A body under
+ * `SUB_AGENT_INSTRUCTIONS_MIN` characters is refused, because that is the
+ * proto's floor for `SubAgent.instructions` and a parser that let it through
+ * would add a second silent path after the runner's own (which drops a
+ * sub-agent whose model is unregistered). Frontmatter is optional (a bare
+ * prompt is named after its file, Claude's rule) but must parse when
+ * present: Claude degrades an unparseable header to a file-named agent with
+ * every field ignored, and a faithful install is better refused than
+ * quietly stripped.
+ *
+ * `model` is classified into an alias, never a model id (see `ModelHint`).
+ * Claude `skills:` names are matched against the plugin's own skills. Every
+ * other frontmatter field (`tools`, `disallowedTools`, `effort`, `maxTurns`,
+ * `readonly`, `is_background`, `memory`, `isolation`, ...) is a warning,
+ * once per field per agent: they configure the IDE's loop, not the
+ * sub-agent's prompt.
+ */
+import { readText } from "../documents.js";
+import { basename, comparePaths, joinPath } from "../files.js";
+import { extractFrontmatter, parseFrontmatter } from "../frontmatter.js";
+export const DEFAULT_AGENTS_DIR = "agents";
+/** The proto's `SubAgent.instructions` `min_len`. */
+export const SUB_AGENT_INSTRUCTIONS_MIN = 10;
+const READ_FIELDS = new Set(["name", "description", "model", "skills"]);
+export function normaliseSubAgents(index, set, skills, findings) {
+    if (!set.readsAgents)
+        return [];
+    const skillNames = new Set(skills.map((skill) => skill.name));
+    const agents = [];
+    const seen = new Set();
+    for (const path of discoverAgentFiles(index, set, findings)) {
+        const agent = readSubAgent(index, path, skillNames, findings);
+        if (agent === undefined)
+            continue;
+        if (seen.has(agent.name)) {
+            findings.error("sub-agent-name-duplicate", { subject: agent.name, path });
+            continue;
+        }
+        seen.add(agent.name);
+        agents.push(agent);
+    }
+    return agents;
+}
+function discoverAgentFiles(index, set, findings) {
+    const files = new Set();
+    const addMarkdownUnder = (dir) => {
+        for (const name of index.childFiles(dir)) {
+            if (name.endsWith(".md"))
+                files.add(joinPath(dir, name));
+        }
+    };
+    const declared = set.manifests.flatMap((m) => m.agentPaths ?? []);
+    if (set.manifests.every((m) => m.agentPaths === undefined)) {
+        addMarkdownUnder(DEFAULT_AGENTS_DIR);
+    }
+    for (const { path, manifest } of declared) {
+        if (path !== "" && index.has(path) && path.endsWith(".md")) {
+            files.add(path);
+        }
+        else if (index.isDirectory(path)) {
+            addMarkdownUnder(path);
+        }
+        else {
+            findings.warn("path-missing", { path: manifest, subject: path === "" ? "." : `./${path}` });
+        }
+    }
+    return [...files].sort(comparePaths);
+}
+function readSubAgent(index, path, skillNames, findings) {
+    const text = readText(index, path, "subAgent", findings);
+    if (text === undefined)
+        return undefined;
+    const extracted = extractFrontmatter(text);
+    let fieldsMap = {};
+    let body = text;
+    if (extracted.ok) {
+        const parsed = parseFrontmatter(extracted.yaml);
+        if (!parsed.ok) {
+            findings.error("sub-agent-frontmatter-unreadable", { path, detail: parsed.detail });
+            return undefined;
+        }
+        fieldsMap = parsed.fields;
+        body = extracted.body;
+    }
+    else if (extracted.reason === "unclosed") {
+        findings.error("sub-agent-frontmatter-unreadable", { path, detail: "the frontmatter is not closed (missing the closing '---')" });
+        return undefined;
+    }
+    const stem = basename(path).replace(/\.md$/, "");
+    let name;
+    if (typeof fieldsMap["name"] === "string" && fieldsMap["name"] !== "") {
+        name = fieldsMap["name"];
+    }
+    else {
+        name = stem;
+        findings.warn("sub-agent-name-defaulted", { path, subject: name });
+    }
+    const instructions = body.trim();
+    if (instructions.length < SUB_AGENT_INSTRUCTIONS_MIN) {
+        findings.error("sub-agent-instructions-short", { path, subject: name, detail: String(SUB_AGENT_INSTRUCTIONS_MIN) });
+        return undefined;
+    }
+    const description = fieldsMap["description"];
+    const requested = fieldsMap["skills"];
+    const matchedSkills = [];
+    if (Array.isArray(requested)) {
+        for (const skill of requested) {
+            if (typeof skill !== "string")
+                continue;
+            if (skillNames.has(skill))
+                matchedSkills.push(skill);
+            else
+                findings.warn("sub-agent-skill-unknown", { path, subject: name, detail: skill });
+        }
+    }
+    let modelHint;
+    const model = fieldsMap["model"];
+    if (typeof model === "string" && model.trim() !== "") {
+        modelHint = classifyModel(model);
+        if (modelHint.alias === "unknown")
+            findings.warn("sub-agent-model-unknown", { path, subject: name, detail: model });
+    }
+    for (const field of Object.keys(fieldsMap)) {
+        if (!READ_FIELDS.has(field))
+            findings.warn("sub-agent-field-ignored", { path, subject: name, detail: field });
+    }
+    return {
+        name,
+        ...(typeof description === "string" && description !== "" && { description }),
+        instructions,
+        skillNames: matchedSkills,
+        ...(modelHint !== undefined && { modelHint }),
+        path,
+    };
+}
+/**
+ * A dialect's `model` value to an alias. Cursor writes `fast` and
+ * `inherit`; Claude writes `sonnet`, `opus`, `haiku`, `inherit` or a full
+ * model id, which contains one of those family names. Anything else
+ * (Cursor's `grok-4.6[effort=xhigh]`, a vendor id Stigmer does not serve)
+ * is `unknown` with the raw text kept for the installer's warning.
+ */
+export function classifyModel(raw) {
+    const value = raw.trim().toLowerCase();
+    const alias = value === "inherit"
+        ? "inherit"
+        : value === "fast"
+            ? "fast"
+            : value.includes("haiku")
+                ? "haiku"
+                : value.includes("sonnet")
+                    ? "sonnet"
+                    : value.includes("opus")
+                        ? "opus"
+                        : "unknown";
+    return { raw, alias };
+}
+//# sourceMappingURL=sub-agents.js.map

package/normalise/sub-agents.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sub-agents.js","sourceRoot":"","sources":["../../src/normalise/sub-agents.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAGH,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC3C,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAwB,MAAM,aAAa,CAAC;AACrF,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAIzE,MAAM,CAAC,MAAM,kBAAkB,GAAG,QAAQ,CAAC;AAE3C,qDAAqD;AACrD,MAAM,CAAC,MAAM,0BAA0B,GAAG,EAAE,CAAC;AAE7C,MAAM,WAAW,GAAwB,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;AAE7F,MAAM,UAAU,kBAAkB,CAChC,KAAsB,EACtB,GAAgB,EAChB,MAA8B,EAC9B,QAAkB;IAElB,IAAI,CAAC,GAAG,CAAC,WAAW;QAAE,OAAO,EAAE,CAAC;IAChC,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9D,MAAM,MAAM,GAAqB,EAAE,CAAC;IACpC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,kBAAkB,CAAC,KAAK,EAAE,GAAG,EAAE,QAAQ,CAAC,EAAE,CAAC;QAC5D,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;QAC9D,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAClC,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,QAAQ,CAAC,KAAK,CAAC,0BAA0B,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1E,SAAS;QACX,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACrB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAsB,EAAE,GAAgB,EAAE,QAAkB;IACtF,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,MAAM,gBAAgB,GAAG,CAAC,GAAW,EAAQ,EAAE;QAC7C,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACzC,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAAE,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,QAAQ,GAAG,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;IAClE,IAAI,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,SAAS,CAAC,EAAE,CAAC;QAC3D,gBAAgB,CAAC,kBAAkB,CAAC,CAAC;IACvC,CAAC;IACD,KAAK,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,QAAQ,EAAE,CAAC;QAC1C,IAAI,IAAI,KAAK,EAAE,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3D,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClB,CAAC;aAAM,IAAI,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;YACnC,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACzB,CAAC;aAAM,CAAC;YACN,QAAQ,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC,CAAC;QAC9F,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;AACvC,CAAC;AAED,SAAS,YAAY,CACnB,KAAsB,EACtB,IAAY,EACZ,UAA+B,EAC/B,QAAkB;IAElB,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;IACzD,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAEzC,MAAM,SAAS,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IAC3C,IAAI,SAAS,GAAsC,EAAE,CAAC;IACtD,IAAI,IAAI,GAAG,IAAI,CAAC;IAChB,IAAI,SAAS,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,MAAM,GAAG,gBAAgB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAChD,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,QAAQ,CAAC,KAAK,CAAC,kCAAkC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;YACpF,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC;QAC1B,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC;IACxB,CAAC;SAAM,IAAI,SAAS,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QAC3C,QAAQ,CAAC,KAAK,CAAC,kCAAkC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,2DAA2D,EAAE,CAAC,CAAC;QAClI,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IACjD,IAAI,IAAY,CAAC;IACjB,IAAI,OAAO,SAAS,CAAC,MAAM,CAAC,KAAK,QAAQ,IAAI,SAAS,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC;QACtE,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;IAC3B,CAAC;SAAM,CAAC;QACN,IAAI,GAAG,IAAI,CAAC;QACZ,QAAQ,CAAC,IAAI,CAAC,0BAA0B,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IACrE,CAAC;IAED,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IACjC,IAAI,YAAY,CAAC,MAAM,GAAG,0BAA0B,EAAE,CAAC;QACrD,QAAQ,CAAC,KAAK,CAAC,8BAA8B,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,0BAA0B,CAAC,EAAE,CAAC,CAAC;QACpH,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,WAAW,GAAG,SAAS,CAAC,aAAa,CAAC,CAAC;IAC7C,MAAM,SAAS,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;IACtC,MAAM,aAAa,GAAa,EAAE,CAAC;IACnC,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7B,KAAK,MAAM,KAAK,IAAI,SAAS,EAAE,CAAC;YAC9B,IAAI,OAAO,KAAK,KAAK,QAAQ;gBAAE,SAAS;YACxC,IAAI,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC;gBAAE,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;;gBAChD,QAAQ,CAAC,IAAI,CAAC,yBAAyB,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QACxF,CAAC;IACH,CAAC;IAED,IAAI,SAAgC,CAAC;IACrC,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IACjC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACrD,SAAS,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;QACjC,IAAI,SAAS,CAAC,KAAK,KAAK,SAAS;YAAE,QAAQ,CAAC,IAAI,CAAC,yBAAyB,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IACtH,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3C,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,QAAQ,CAAC,IAAI,CAAC,yBAAyB,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IAChH,CAAC;IAED,OAAO;QACL,IAAI;QACJ,GAAG,CAAC,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;QAC7E,YAAY;QACZ,UAAU,EAAE,aAAa;QACzB,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,EAAE,SAAS,EAAE,CAAC;QAC7C,IAAI;KACL,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAAC,GAAW;IACvC,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACvC,MAAM,KAAK,GACT,KAAK,KAAK,SAAS;QACjB,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,KAAK,KAAK,MAAM;YAChB,CAAC,CAAC,MAAM;YACR,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC;gBACvB,CAAC,CAAC,OAAO;gBACT,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC;oBACxB,CAAC,CAAC,QAAQ;oBACV,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;wBACtB,CAAC,CAAC,MAAM;wBACR,CAAC,CAAC,SAAS,CAAC;IACxB,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;AACxB,CAAC"}

package/normalise/variables.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Variable declarations, from the dialects that have them, reconciled with
+ * the references the servers make.
+ *
+ * Cursor declares `variables` as a JSON Schema object with no sensitivity
+ * flag, so every Cursor variable is a secret on Stigmer (a token treated as
+ * plain text is the costly mistake; a region name treated as a secret is
+ * an inconvenience). Claude declares `userConfig` entries with `sensitive`
+ * and `required`, plus `default`, `options`, `multiple`, `min`, `max` and
+ * the `directory`, `file`, `number`, `boolean` types, none of which a
+ * Stigmer variable carries (values are strings supplied by the user, and a
+ * local path means nothing in the sandbox); each is warned once.
+ *
+ * Reconciliation is what makes an imported server start: the runner
+ * filters a stdio server's environment to its declared keys and resolves
+ * `${VAR}` in headers and arguments strictly, so a variable a server
+ * references but no manifest declares would never reach it. Such a variable
+ * is declared here as a required secret, with a warning naming the server.
+ * A declared variable no server references is warned too; it is not wrong,
+ * only useless.
+ */
+import type { ManifestSet } from "../detect.js";
+import type { Findings } from "../messages.js";
+import type { PluginVariable } from "../types.js";
+import type { McpServersResult } from "./mcp-servers.js";
+export declare function normaliseVariables(set: ManifestSet, servers: McpServersResult, findings: Findings): readonly PluginVariable[];
+//# sourceMappingURL=variables.d.ts.map

package/normalise/variables.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"variables.d.ts","sourceRoot":"","sources":["../../src/normalise/variables.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAEhD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAE/C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAEzD,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,WAAW,EAAE,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,QAAQ,GAAG,SAAS,cAAc,EAAE,CA2C7H"}

package/normalise/variables.js

@@ -0,0 +1,155 @@
+/**
+ * Variable declarations, from the dialects that have them, reconciled with
+ * the references the servers make.
+ *
+ * Cursor declares `variables` as a JSON Schema object with no sensitivity
+ * flag, so every Cursor variable is a secret on Stigmer (a token treated as
+ * plain text is the costly mistake; a region name treated as a secret is
+ * an inconvenience). Claude declares `userConfig` entries with `sensitive`
+ * and `required`, plus `default`, `options`, `multiple`, `min`, `max` and
+ * the `directory`, `file`, `number`, `boolean` types, none of which a
+ * Stigmer variable carries (values are strings supplied by the user, and a
+ * local path means nothing in the sandbox); each is warned once.
+ *
+ * Reconciliation is what makes an imported server start: the runner
+ * filters a stdio server's environment to its declared keys and resolves
+ * `${VAR}` in headers and arguments strictly, so a variable a server
+ * references but no manifest declares would never reach it. Such a variable
+ * is declared here as a required secret, with a warning naming the server.
+ * A declared variable no server references is warned too; it is not wrong,
+ * only useless.
+ */
+import { describeValue, fields, isJsonObject, isStringArray } from "../documents.js";
+import { VARIABLE_NAME_PATTERN } from "../placeholders.js";
+export function normaliseVariables(set, servers, findings) {
+    const declared = new Map();
+    const declaredIn = new Map();
+    for (const manifest of set.manifests) {
+        const declaration = manifest.variables;
+        if (declaration === undefined)
+            continue;
+        const variables = declaration.dialect === "cursor"
+            ? readCursorVariables(declaration.value, declaration.manifest, findings)
+            : readClaudeVariables(declaration.value, declaration.manifest, findings);
+        for (const variable of variables) {
+            // Two manifests declaring one name: the identity manifest's wins.
+            if (declared.has(variable.name))
+                continue;
+            declared.set(variable.name, variable);
+            declaredIn.set(variable.name, declaration.manifest);
+        }
+    }
+    const referencedBy = new Map();
+    for (const server of servers.servers) {
+        for (const name of server.env) {
+            if (!referencedBy.has(name))
+                referencedBy.set(name, server.name);
+        }
+    }
+    // A refused server's references are unknown, so an "unreferenced"
+    // warning would be a consequence of the refusal, not advice.
+    if (servers.refused === 0) {
+        for (const [name, variable] of declared) {
+            if (!referencedBy.has(name)) {
+                findings.warn("variable-unreferenced", { subject: variable.name, path: declaredIn.get(name) });
+            }
+        }
+    }
+    const inferred = [];
+    for (const [name, server] of [...referencedBy].sort(([a], [b]) => (a < b ? -1 : a > b ? 1 : 0))) {
+        if (declared.has(name))
+            continue;
+        findings.warn("variable-inferred", { subject: name, detail: server });
+        inferred.push({ name, isSecret: true, optional: false, declaredBy: "inferred" });
+    }
+    return [...declared.values(), ...inferred];
+}
+/**
+ * Cursor: `{ type: "object", properties: { NAME: { type, title, description } }, required: [NAME] }`.
+ */
+function readCursorVariables(value, manifest, findings) {
+    if (!isJsonObject(value) || value["type"] !== "object") {
+        findings.error("manifest-field-type", { path: manifest, subject: "variables", detail: "a JSON Schema object with type 'object'" });
+        return [];
+    }
+    const properties = value["properties"] ?? {};
+    if (!isJsonObject(properties)) {
+        findings.error("manifest-field-type", { path: manifest, subject: "variables.properties", detail: "an object" });
+        return [];
+    }
+    const required = value["required"] ?? [];
+    if (!isStringArray(required)) {
+        findings.error("manifest-field-type", { path: manifest, subject: "variables.required", detail: "an array of strings" });
+        return [];
+    }
+    const variables = [];
+    for (const [name, schema] of fields(properties)) {
+        if (!VARIABLE_NAME_PATTERN.test(name)) {
+            findings.error("variable-name-invalid", { subject: name, path: manifest });
+            continue;
+        }
+        const property = isJsonObject(schema) ? schema : {};
+        const type = property["type"];
+        if (type !== undefined && type !== "string") {
+            findings.warn("variable-type-narrowed", { subject: name, path: manifest, detail: describeValue(type) });
+        }
+        if (property["default"] !== undefined)
+            findings.warn("variable-default-dropped", { subject: name, path: manifest });
+        if (property["enum"] !== undefined)
+            findings.warn("variable-option-dropped", { subject: name, path: manifest, detail: "enum" });
+        const description = describe(property);
+        variables.push({
+            name,
+            ...(description !== undefined && { description }),
+            isSecret: true,
+            optional: !required.includes(name),
+            declaredBy: "cursor",
+        });
+    }
+    return variables;
+}
+/**
+ * Claude: `{ KEY: { type, title, description, sensitive, required, default, options, multiple, min, max } }`.
+ */
+function readClaudeVariables(value, manifest, findings) {
+    if (!isJsonObject(value)) {
+        findings.error("manifest-field-type", { path: manifest, subject: "userConfig", detail: "an object" });
+        return [];
+    }
+    const variables = [];
+    for (const [name, entry] of fields(value)) {
+        if (!VARIABLE_NAME_PATTERN.test(name)) {
+            findings.error("variable-name-invalid", { subject: name, path: manifest });
+            continue;
+        }
+        if (!isJsonObject(entry)) {
+            findings.error("manifest-field-type", { path: manifest, subject: `userConfig.${name}`, detail: "an object" });
+            continue;
+        }
+        const type = entry["type"];
+        if (type !== undefined && type !== "string") {
+            findings.warn("variable-type-narrowed", { subject: name, path: manifest, detail: describeValue(type) });
+        }
+        if (entry["default"] !== undefined)
+            findings.warn("variable-default-dropped", { subject: name, path: manifest });
+        for (const option of ["options", "multiple", "min", "max"]) {
+            if (entry[option] !== undefined)
+                findings.warn("variable-option-dropped", { subject: name, path: manifest, detail: option });
+        }
+        const description = describe(entry);
+        variables.push({
+            name,
+            ...(description !== undefined && { description }),
+            isSecret: entry["sensitive"] === true,
+            optional: entry["required"] !== true,
+            declaredBy: "claude",
+        });
+    }
+    return variables;
+}
+/** `title` and `description` joined, whichever are present. */
+function describe(entry) {
+    const parts = [entry["title"], entry["description"]].filter((part) => typeof part === "string" && part !== "");
+    return parts.length === 0 ? undefined : parts.join(": ");
+}
+//# sourceMappingURL=variables.js.map

package/normalise/variables.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"variables.js","sourceRoot":"","sources":["../../src/normalise/variables.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAGH,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,YAAY,EAAE,aAAa,EAAmB,MAAM,iBAAiB,CAAC;AAEtG,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAI3D,MAAM,UAAU,kBAAkB,CAAC,GAAgB,EAAE,OAAyB,EAAE,QAAkB;IAChG,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA0B,CAAC;IACnD,MAAM,UAAU,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC7C,KAAK,MAAM,QAAQ,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;QACrC,MAAM,WAAW,GAAG,QAAQ,CAAC,SAAS,CAAC;QACvC,IAAI,WAAW,KAAK,SAAS;YAAE,SAAS;QACxC,MAAM,SAAS,GACb,WAAW,CAAC,OAAO,KAAK,QAAQ;YAC9B,CAAC,CAAC,mBAAmB,CAAC,WAAW,CAAC,KAAK,EAAE,WAAW,CAAC,QAAQ,EAAE,QAAQ,CAAC;YACxE,CAAC,CAAC,mBAAmB,CAAC,WAAW,CAAC,KAAK,EAAE,WAAW,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAC7E,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;YACjC,kEAAkE;YAClE,IAAI,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC;gBAAE,SAAS;YAC1C,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YACtC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC,QAAQ,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;IAED,MAAM,YAAY,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC/C,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACrC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,GAAG,EAAE,CAAC;YAC9B,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,YAAY,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QACnE,CAAC;IACH,CAAC;IAED,kEAAkE;IAClE,6DAA6D;IAC7D,IAAI,OAAO,CAAC,OAAO,KAAK,CAAC,EAAE,CAAC;QAC1B,KAAK,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,QAAQ,EAAE,CAAC;YACxC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC5B,QAAQ,CAAC,IAAI,CAAC,uBAAuB,EAAE,EAAE,OAAO,EAAE,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACjG,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAqB,EAAE,CAAC;IACtC,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAChG,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,SAAS;QACjC,QAAQ,CAAC,IAAI,CAAC,mBAAmB,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QACtE,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,CAAC;IACnF,CAAC;IAED,OAAO,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,EAAE,GAAG,QAAQ,CAAC,CAAC;AAC7C,CAAC;AAED;;GAEG;AACH,SAAS,mBAAmB,CAAC,KAAc,EAAE,QAAgB,EAAE,QAAkB;IAC/E,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,QAAQ,EAAE,CAAC;QACvD,QAAQ,CAAC,KAAK,CAAC,qBAAqB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,yCAAyC,EAAE,CAAC,CAAC;QACnI,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,UAAU,GAAG,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;IAC7C,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9B,QAAQ,CAAC,KAAK,CAAC,qBAAqB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,sBAAsB,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;QAChH,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,QAAQ,GAAG,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;IACzC,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,QAAQ,CAAC,KAAK,CAAC,qBAAqB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,oBAAoB,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC,CAAC;QACxH,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,SAAS,GAAqB,EAAE,CAAC;IACvC,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;QAChD,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACtC,QAAQ,CAAC,KAAK,CAAC,uBAAuB,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC3E,SAAS;QACX,CAAC;QACD,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC9B,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC5C,QAAQ,CAAC,IAAI,CAAC,wBAAwB,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC1G,CAAC;QACD,IAAI,QAAQ,CAAC,SAAS,CAAC,KAAK,SAAS;YAAE,QAAQ,CAAC,IAAI,CAAC,0BAA0B,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QACpH,IAAI,QAAQ,CAAC,MAAM,CAAC,KAAK,SAAS;YAAE,QAAQ,CAAC,IAAI,CAAC,yBAAyB,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QAChI,MAAM,WAAW,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACvC,SAAS,CAAC,IAAI,CAAC;YACb,IAAI;YACJ,GAAG,CAAC,WAAW,KAAK,SAAS,IAAI,EAAE,WAAW,EAAE,CAAC;YACjD,QAAQ,EAAE,IAAI;YACd,QAAQ,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC;YAClC,UAAU,EAAE,QAAQ;SACrB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;GAEG;AACH,SAAS,mBAAmB,CAAC,KAAc,EAAE,QAAgB,EAAE,QAAkB;IAC/E,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,QAAQ,CAAC,KAAK,CAAC,qBAAqB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;QACtG,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,SAAS,GAAqB,EAAE,CAAC;IACvC,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1C,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACtC,QAAQ,CAAC,KAAK,CAAC,uBAAuB,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC3E,SAAS;QACX,CAAC;QACD,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,QAAQ,CAAC,KAAK,CAAC,qBAAqB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,cAAc,IAAI,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;YAC9G,SAAS;QACX,CAAC;QACD,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;QAC3B,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC5C,QAAQ,CAAC,IAAI,CAAC,wBAAwB,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC1G,CAAC;QACD,IAAI,KAAK,CAAC,SAAS,CAAC,KAAK,SAAS;YAAE,QAAQ,CAAC,IAAI,CAAC,0BAA0B,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QACjH,KAAK,MAAM,MAAM,IAAI,CAAC,SAAS,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC;YAC3D,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,SAAS;gBAAE,QAAQ,CAAC,IAAI,CAAC,yBAAyB,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QAC/H,CAAC;QACD,MAAM,WAAW,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;QACpC,SAAS,CAAC,IAAI,CAAC;YACb,IAAI;YACJ,GAAG,CAAC,WAAW,KAAK,SAAS,IAAI,EAAE,WAAW,EAAE,CAAC;YACjD,QAAQ,EAAE,KAAK,CAAC,WAAW,CAAC,KAAK,IAAI;YACrC,QAAQ,EAAE,KAAK,CAAC,UAAU,CAAC,KAAK,IAAI;YACpC,UAAU,EAAE,QAAQ;SACrB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,+DAA+D;AAC/D,SAAS,QAAQ,CAAC,KAAiB;IACjC,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,EAAE,CAAC,CAAC;IAC/H,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC3D,CAAC"}

package/outcome.d.ts

@@ -0,0 +1,46 @@
+/**
+ * The outcome of reading a package and the closed vocabulary of findings.
+ *
+ * The shape is the server's `ConnectRunOutcome`: a discriminated union on
+ * `ok`, with a closed `kind` union behind the failure arm, so a consumer
+ * switches on kinds and the compiler closes the switch. An error refuses the
+ * package; a warning never does. Both are `PluginFinding`s with the same
+ * fields, so one renderer prints both.
+ *
+ * Two error postures meet here and the header of each module states which
+ * applies. Where the open format tells a client to skip a broken component
+ * and keep loading, Stigmer refuses the package: an installed agent that
+ * quietly lacks a server or a sub-agent is worse than a refused install.
+ * But the reader keeps scanning past a fatal finding so one run reports
+ * every problem and an author fixes them in one pass.
+ *
+ * Every kind has exactly one sentence, in `messages.ts`, and the adversarial
+ * suite has exactly one fixture per kind. Adding a kind means adding both.
+ */
+import type { PluginPackage } from "./types.js";
+export type PluginErrorKind = "no-manifest" | "manifest-unreadable" | "manifest-schema-missing" | "manifest-schema-unsupported" | "manifest-name-missing" | "manifest-name-invalid" | "manifest-name-conflict" | "manifest-field-type" | "path-not-relative" | "path-escapes-root" | "path-glob-unsupported" | "path-uncontained" | "document-too-large" | "skill-frontmatter-missing" | "skill-frontmatter-unclosed" | "skill-frontmatter-unreadable" | "skill-name-invalid" | "skill-name-duplicate" | "mcp-config-unreadable" | "mcp-config-shape" | "mcp-config-schema-missing" | "mcp-config-schema-unsupported" | "mcp-config-field-unknown" | "mcp-server-shape" | "mcp-server-type-missing" | "mcp-server-transport-unknown" | "mcp-server-type-ambiguous" | "mcp-server-type-unknown" | "mcp-server-field-unknown" | "mcp-server-field-type" | "mcp-server-url-missing" | "mcp-server-url-invalid" | "mcp-server-url-variable" | "mcp-server-command-missing" | "mcp-server-command-invalid" | "mcp-server-command-relative" | "mcp-server-plugin-root-reference" | "mcp-server-cwd-unsupported" | "mcp-server-env-literal" | "mcp-server-env-rename" | "mcp-server-name-duplicate" | "mcp-server-header-duplicate" | "mcp-server-header-invalid" | "sub-agent-frontmatter-unreadable" | "sub-agent-instructions-short" | "sub-agent-name-duplicate" | "variable-name-invalid" | "overlay-server-unknown" | "overlay-document-unknown";
+export type PluginWarningKind = "manifest-field-unknown" | "manifest-extensions-invalid" | "path-missing" | "skill-name-defaulted" | "skill-name-differs-from-directory" | "skill-description-missing" | "mcp-config-field-ignored" | "mcp-server-sse-mapped" | "mcp-server-field-ignored" | "mcp-server-auth-ignored" | "variable-inferred" | "variable-unreferenced" | "variable-default-dropped" | "variable-type-narrowed" | "variable-option-dropped" | "sub-agent-name-defaulted" | "sub-agent-skill-unknown" | "sub-agent-model-unknown" | "sub-agent-field-ignored";
+export type PluginFindingKind = PluginErrorKind | PluginWarningKind;
+export interface PluginFinding {
+    readonly kind: PluginFindingKind;
+    /** The file, or the declared path, the finding is about. */
+    readonly path?: string;
+    /** The skill, server, sub-agent, variable or field the finding names. */
+    readonly subject?: string;
+    /** A second identifier the sentence needs (a field name, a parser's own message). */
+    readonly detail?: string;
+    /** The one sentence for this kind, from `messages.ts`. */
+    readonly message: string;
+}
+/** What `read` needs to compose a finding: everything but the sentence. */
+export type FindingContext = Pick<PluginFinding, "path" | "subject" | "detail">;
+export type PluginReadOutcome = {
+    readonly ok: true;
+    readonly plugin: PluginPackage;
+    readonly warnings: readonly PluginFinding[];
+} | {
+    readonly ok: false;
+    readonly errors: readonly PluginFinding[];
+    readonly warnings: readonly PluginFinding[];
+};
+//# sourceMappingURL=outcome.d.ts.map

package/outcome.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"outcome.d.ts","sourceRoot":"","sources":["../src/outcome.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAEhD,MAAM,MAAM,eAAe,GAEvB,aAAa,GACb,qBAAqB,GACrB,yBAAyB,GACzB,6BAA6B,GAC7B,uBAAuB,GACvB,uBAAuB,GACvB,wBAAwB,GACxB,qBAAqB,GAErB,mBAAmB,GACnB,mBAAmB,GACnB,uBAAuB,GACvB,kBAAkB,GAClB,oBAAoB,GAEpB,2BAA2B,GAC3B,4BAA4B,GAC5B,8BAA8B,GAC9B,oBAAoB,GACpB,sBAAsB,GAEtB,uBAAuB,GACvB,kBAAkB,GAClB,2BAA2B,GAC3B,+BAA+B,GAC/B,0BAA0B,GAE1B,kBAAkB,GAClB,yBAAyB,GACzB,8BAA8B,GAC9B,2BAA2B,GAC3B,yBAAyB,GACzB,0BAA0B,GAC1B,uBAAuB,GACvB,wBAAwB,GACxB,wBAAwB,GACxB,yBAAyB,GACzB,4BAA4B,GAC5B,4BAA4B,GAC5B,6BAA6B,GAC7B,kCAAkC,GAClC,4BAA4B,GAC5B,wBAAwB,GACxB,uBAAuB,GACvB,2BAA2B,GAC3B,6BAA6B,GAC7B,2BAA2B,GAE3B,kCAAkC,GAClC,8BAA8B,GAC9B,0BAA0B,GAE1B,uBAAuB,GAEvB,wBAAwB,GACxB,0BAA0B,CAAC;AAE/B,MAAM,MAAM,iBAAiB,GACzB,wBAAwB,GACxB,6BAA6B,GAC7B,cAAc,GACd,sBAAsB,GACtB,mCAAmC,GACnC,2BAA2B,GAC3B,0BAA0B,GAC1B,uBAAuB,GACvB,0BAA0B,GAC1B,yBAAyB,GACzB,mBAAmB,GACnB,uBAAuB,GACvB,0BAA0B,GAC1B,wBAAwB,GACxB,yBAAyB,GACzB,0BAA0B,GAC1B,yBAAyB,GACzB,yBAAyB,GACzB,yBAAyB,CAAC;AAE9B,MAAM,MAAM,iBAAiB,GAAG,eAAe,GAAG,iBAAiB,CAAC;AAEpE,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;IACjC,4DAA4D;IAC5D,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,yEAAyE;IACzE,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,qFAAqF;IACrF,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,0DAA0D;IAC1D,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,2EAA2E;AAC3E,MAAM,MAAM,cAAc,GAAG,IAAI,CAAC,aAAa,EAAE,MAAM,GAAG,SAAS,GAAG,QAAQ,CAAC,CAAC;AAEhF,MAAM,MAAM,iBAAiB,GACzB;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,SAAS,aAAa,EAAE,CAAA;CAAE,GAClG;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,SAAS,aAAa,EAAE,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,SAAS,aAAa,EAAE,CAAA;CAAE,CAAC"}

package/outcome.js

@@ -0,0 +1,21 @@
+/**
+ * The outcome of reading a package and the closed vocabulary of findings.
+ *
+ * The shape is the server's `ConnectRunOutcome`: a discriminated union on
+ * `ok`, with a closed `kind` union behind the failure arm, so a consumer
+ * switches on kinds and the compiler closes the switch. An error refuses the
+ * package; a warning never does. Both are `PluginFinding`s with the same
+ * fields, so one renderer prints both.
+ *
+ * Two error postures meet here and the header of each module states which
+ * applies. Where the open format tells a client to skip a broken component
+ * and keep loading, Stigmer refuses the package: an installed agent that
+ * quietly lacks a server or a sub-agent is worse than a refused install.
+ * But the reader keeps scanning past a fatal finding so one run reports
+ * every problem and an author fixes them in one pass.
+ *
+ * Every kind has exactly one sentence, in `messages.ts`, and the adversarial
+ * suite has exactly one fixture per kind. Adding a kind means adding both.
+ */
+export {};
+//# sourceMappingURL=outcome.js.map

package/outcome.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"outcome.js","sourceRoot":"","sources":["../src/outcome.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG"}