@uniqbit/mate-core 0.17.0-canary.5 → 0.17.0-canary.7

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@uniqbit/mate-core",
-  "version": "0.17.0-canary.5",
+  "version": "0.17.0-canary.7",
   "description": "Core framework and plugin APIs for Mate.",
   "license": "MIT",
   "files": [

package/src/cli/commands/studio/views/document.tsx

@@ -372,6 +372,7 @@ function VaultEditor({ page, vault }: { page: StudioPage; vault: StudioVaultPage
         data-vault-editor
         data-vault-path={vault.open.path}
         data-vault-token={vault.open.token}
+        {...(page.writable ? {} : { readOnly: true })}
         spellCheck={false}
       >
         {vault.open.content}

package/src/cli/commands/studio/views/styles.ts

@@ -372,6 +372,7 @@ ul.plain li:last-child { border-bottom: 0; }
 .vault-warning { color: var(--warn); }
 #vault-editor { display: block; width: 100%; min-height: 62vh; resize: vertical; padding: 16px; border: 1px solid var(--border); border-radius: 8px; background: var(--prompt-bg); color: var(--prompt-text); font-family: var(--mono); font-size: .86rem; line-height: 1.6; }
 #vault-editor:focus { outline: 2px solid var(--accent); outline-offset: 2px; }
+#vault-editor[readonly] { cursor: default; opacity: .85; }
 .vault-incoming { display: grid; gap: 8px; margin-top: 16px; padding: 12px; border: 1px solid var(--warn); border-radius: 8px; background: var(--warn-soft); }
 .vault-incoming pre { max-height: 220px; overflow: auto; margin: 0; white-space: pre-wrap; font-family: var(--mono); font-size: .78rem; }
 @media (max-width: 800px) { .vault-layout { grid-template-columns: 1fr; } }

package/src/lib/orchestrator/adapters/opencode.ts

@@ -8,7 +8,9 @@ import { validateGuidanceData, type MateGuidanceFile } from "../../../runtime/gu
 import {
   getOpenCodePluginPackageReference,
   isMateOpenCodePluginReference,
+  OPENCODE_PLUGIN_PACKAGE_NAME,
 } from "../../opencode-plugin-package";
+import { installedVersionAt, isPreinstalledPluginPath } from "../../preinstalled-plugins";
 import {
   getOpenCodePluginReferences,
   mergeOpenCodeConfigContent,
@@ -129,6 +131,27 @@ export class OpenCodeAdapter extends LaunchAdapter {
       return [];
     }
 
+    // Setup writes one of two spellings, and both are current: the published
+    // spec on an ordinary workstation, and an absolute path into the
+    // machine-local workspace where the distribution supplied an installed
+    // copy. Comparing only against the spec would refuse the launch on exactly
+    // the deployments preinstalled binding exists for.
+    //
+    // A bound reference carries its version in the package it points at rather
+    // than in the string, so staleness is read off disk. It is still caught,
+    // and now names the version actually installed.
+    const expectedVersion = expectedPluginReference.slice(OPENCODE_PLUGIN_PACKAGE_NAME.length + 1);
+    const bound = mateReferences.find((reference) =>
+      isPreinstalledPluginPath(reference, OPENCODE_PLUGIN_PACKAGE_NAME),
+    );
+    if (bound !== undefined) {
+      const version = await installedVersionAt(bound);
+      if (version === expectedVersion) return [];
+      return [
+        `Stale Mate plugin package reference in ${configFile}: it points at ${bound}, which is ${version ?? "not installed"} rather than ${expectedVersion}.`,
+      ];
+    }
+
     if (mateReferences.length > 0) {
       return [
         `Stale Mate plugin package reference in ${configFile}: found ${mateReferences.join(", ")}.`,

package/src/lib/preinstalled-plugins.ts

@@ -36,6 +36,25 @@ export function isPreinstalledPluginPath(entry: unknown, packageName: string): b
   return normalized.endsWith(`/${packageName}`);
 }
 
+/**
+ * The version behind a reference bound to an installed copy.
+ *
+ * A published reference carries its version in the string; a bound one carries
+ * it in the package it points at, so staleness has to be read off disk. Shared
+ * by every site that validates a bound reference, so they cannot disagree about
+ * what "stale" means.
+ */
+export async function installedVersionAt(packageRoot: string): Promise<string | undefined> {
+  try {
+    const manifest = JSON.parse(
+      await fs.readFile(path.join(packageRoot, "package.json"), "utf8"),
+    ) as { version?: string };
+    return manifest.version;
+  } catch {
+    return undefined;
+  }
+}
+
 export class PreinstalledPluginMismatchError extends Error {}
 
 /**

package/src/tools/setup/capabilities/context-mode.ts

@@ -11,7 +11,7 @@ import {
   validateContextModePackage,
 } from "../../../lib/context-mode-package";
 import { warmOpenCodePackageCache } from "../../../lib/opencode-plugin-package";
-import { isPreinstalledPluginPath } from "../../../lib/preinstalled-plugins";
+import { installedVersionAt, isPreinstalledPluginPath } from "../../../lib/preinstalled-plugins";
 import type {
   CapabilityPlugin,
   LaunchPreflightContext,
@@ -71,23 +71,6 @@ async function assertNoMcpConflict(ctx: SetupContext, provider: "claude" | "open
   }
 }
 
-/**
- * The version behind a reference bound to an installed copy.
- *
- * A published reference carries its version in the string; a bound one carries
- * it in the package it points at, so staleness has to be read off disk.
- */
-async function installedVersionAt(packageRoot: string): Promise<string | undefined> {
-  try {
-    const manifest = JSON.parse(
-      await fs.readFile(path.join(packageRoot, "package.json"), "utf8"),
-    ) as { version?: string };
-    return manifest.version;
-  } catch {
-    return undefined;
-  }
-}
-
 /**
  * Both spellings of a current reference are accepted, because the Runtime
  * Surface writes either one: the published spec on an ordinary workstation, and