@useconductor/conductor 1.0.0

package/dist/plugins/manager.d.ts

@@ -0,0 +1,77 @@
+import { Conductor } from '../core/conductor.js';
+export type { ToolContext } from '../core/interfaces.js';
+export interface Plugin {
+    name: string;
+    description: string;
+    version: string;
+    initialize(conductor: Conductor): Promise<void>;
+    isConfigured(): boolean;
+    getTools(): PluginTool[];
+    configSchema?: PluginConfigSchema;
+    /** Optional: return a short context string for the proactive reasoning cycle. */
+    getContext?(): Promise<string | null>;
+}
+export interface PluginConfigSchema {
+    fields: {
+        key: string;
+        label: string;
+        type: 'string' | 'password' | 'number' | 'boolean';
+        description?: string;
+        required: boolean;
+        secret?: boolean;
+        service?: string;
+    }[];
+    setupInstructions?: string;
+}
+/** The canonical input type for all tool handlers at runtime. */
+export type ToolInput = Record<string, unknown>;
+/** Tool handlers should return a string or a plain-object result. */
+export type ToolOutput = string | Record<string, unknown>;
+export interface PluginTool {
+    name: string;
+    description: string;
+    inputSchema: Record<string, unknown>;
+    handler: (input: any) => Promise<any>;
+    requiresApproval?: boolean;
+}
+export interface PluginStatus {
+    name: string;
+    status: 'ready' | 'not_configured' | 'init_failed' | 'disabled';
+    toolCount: number;
+    error?: string;
+    setupCommand?: string;
+}
+export declare class PluginManager {
+    private conductor;
+    private plugins;
+    private initializedPlugins;
+    private initErrors;
+    constructor(conductor: Conductor);
+    /** Register a plugin without initializing it. */
+    registerPlugin(plugin: Plugin): void;
+    /** Load all builtin plugins (register only, no init). */
+    loadBuiltins(): Promise<void>;
+    /** Get a plugin by name. Lazily initializes on first use. */
+    getPlugin(name: string): Promise<Plugin | undefined>;
+    /** Get the recorded init error for a plugin, if any. */
+    getInitError(name: string): string | undefined;
+    /**
+     * Probe all enabled plugins and return a status summary.
+     * Used by the MCP startup summary and conductor doctor.
+     */
+    getStatusSummary(): Promise<PluginStatus[]>;
+    /** List all registered plugins. Does NOT initialize them. */
+    listPlugins(): Array<{
+        name: string;
+        description: string;
+        version: string;
+        enabled: boolean;
+        configSchema?: PluginConfigSchema;
+    }>;
+    isPluginEnabled(name: string): boolean;
+    enablePlugin(name: string): Promise<void>;
+    disablePlugin(name: string): Promise<void>;
+    /** Get MCP tools from enabled plugins only. */
+    getEnabledTools(): Promise<PluginTool[]>;
+}
+//# sourceMappingURL=manager.d.ts.map

package/dist/plugins/manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manager.d.ts","sourceRoot":"","sources":["../../src/plugins/manager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,YAAY,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAEzD,MAAM,WAAW,MAAM;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,SAAS,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChD,YAAY,IAAI,OAAO,CAAC;IACxB,QAAQ,IAAI,UAAU,EAAE,CAAC;IACzB,YAAY,CAAC,EAAE,kBAAkB,CAAC;IAClC,iFAAiF;IACjF,UAAU,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;CACvC;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE;QACN,GAAG,EAAE,MAAM,CAAC;QACZ,KAAK,EAAE,MAAM,CAAC;QACd,IAAI,EAAE,QAAQ,GAAG,UAAU,GAAG,QAAQ,GAAG,SAAS,CAAC;QACnD,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,QAAQ,EAAE,OAAO,CAAC;QAClB,MAAM,CAAC,EAAE,OAAO,CAAC;QACjB,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,EAAE,CAAC;IACJ,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,iEAAiE;AACjE,MAAM,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAChD,qEAAqE;AACrE,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAE1D,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAErC,OAAO,EAAE,CAAC,KAAK,EAAE,GAAG,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;IACtC,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,OAAO,GAAG,gBAAgB,GAAG,aAAa,GAAG,UAAU,CAAC;IAChE,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,qBAAa,aAAa;IACxB,OAAO,CAAC,SAAS,CAAY;IAC7B,OAAO,CAAC,OAAO,CAAkC;IACjD,OAAO,CAAC,kBAAkB,CAA0B;IACpD,OAAO,CAAC,UAAU,CAAkC;gBAExC,SAAS,EAAE,SAAS;IAIhC,iDAAiD;IACjD,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAIpC,yDAAyD;IACnD,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC;IAOnC,6DAA6D;IACvD,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;IAqB1D,wDAAwD;IACxD,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAI9C;;;OAGG;IACG,gBAAgB,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;IAsCjD,6DAA6D;IAC7D,WAAW,IAAI,KAAK,CAAC;QACnB,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,EAAE,MAAM,CAAC;QACpB,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,EAAE,OAAO,CAAC;QACjB,YAAY,CAAC,EAAE,kBAAkB,CAAC;KACnC,CAAC;IAYF,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAKhC,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAqBzC,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAOhD,+CAA+C;IACzC,eAAe,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;CAiB/C"}

package/dist/plugins/manager.js

@@ -0,0 +1,141 @@
+export class PluginManager {
+    conductor;
+    plugins = new Map();
+    initializedPlugins = new Set();
+    initErrors = new Map();
+    constructor(conductor) {
+        this.conductor = conductor;
+    }
+    /** Register a plugin without initializing it. */
+    registerPlugin(plugin) {
+        this.plugins.set(plugin.name, plugin);
+    }
+    /** Load all builtin plugins (register only, no init). */
+    async loadBuiltins() {
+        const builtins = await import('./builtin/index.js');
+        for (const plugin of builtins.getAllBuiltinPlugins()) {
+            this.registerPlugin(plugin);
+        }
+    }
+    /** Get a plugin by name. Lazily initializes on first use. */
+    async getPlugin(name) {
+        const plugin = this.plugins.get(name);
+        if (!plugin)
+            return undefined;
+        if (!this.initializedPlugins.has(name)) {
+            try {
+                await plugin.initialize(this.conductor);
+                this.initializedPlugins.add(name);
+                this.initErrors.delete(name);
+            }
+            catch (error) {
+                const msg = error.message ?? String(error);
+                this.initErrors.set(name, msg);
+                process.stderr.write(`[conductor] ✗ ${name}: init failed — ${msg}\n`);
+                process.stderr.write(`[conductor]   → Run: conductor doctor ${name}\n`);
+                return undefined;
+            }
+        }
+        return plugin;
+    }
+    /** Get the recorded init error for a plugin, if any. */
+    getInitError(name) {
+        return this.initErrors.get(name);
+    }
+    /**
+     * Probe all enabled plugins and return a status summary.
+     * Used by the MCP startup summary and conductor doctor.
+     */
+    async getStatusSummary() {
+        const enabledNames = this.conductor.getConfig().get('plugins.enabled') ?? [];
+        const statuses = [];
+        for (const name of enabledNames) {
+            const plugin = this.plugins.get(name);
+            if (!plugin) {
+                statuses.push({ name, status: 'disabled', toolCount: 0 });
+                continue;
+            }
+            if (!plugin.isConfigured()) {
+                statuses.push({
+                    name,
+                    status: 'not_configured',
+                    toolCount: 0,
+                    setupCommand: `conductor plugins setup ${name}`,
+                });
+                continue;
+            }
+            // Attempt init if not done yet
+            if (!this.initializedPlugins.has(name)) {
+                await this.getPlugin(name);
+            }
+            const err = this.initErrors.get(name);
+            if (err) {
+                statuses.push({ name, status: 'init_failed', toolCount: 0, error: err });
+            }
+            else {
+                const toolCount = plugin.getTools().length;
+                statuses.push({ name, status: 'ready', toolCount });
+            }
+        }
+        return statuses;
+    }
+    /** List all registered plugins. Does NOT initialize them. */
+    listPlugins() {
+        const enabledPlugins = this.conductor.getConfig().get('plugins.enabled') || [];
+        return Array.from(this.plugins.values()).map((plugin) => ({
+            name: plugin.name,
+            description: plugin.description,
+            version: plugin.version,
+            enabled: enabledPlugins.includes(plugin.name),
+            configSchema: plugin.configSchema,
+        }));
+    }
+    isPluginEnabled(name) {
+        const enabled = this.conductor.getConfig().get('plugins.enabled') || [];
+        return enabled.includes(name);
+    }
+    async enablePlugin(name) {
+        const plugin = this.plugins.get(name);
+        if (!plugin)
+            throw new Error(`Plugin not found: ${name}`);
+        // Initialize to verify it works
+        if (!this.initializedPlugins.has(name)) {
+            try {
+                await plugin.initialize(this.conductor);
+                this.initializedPlugins.add(name);
+            }
+            catch (error) {
+                throw new Error(`Failed to enable plugin "${name}": initialization failed: ${error.message}`);
+            }
+        }
+        const enabled = this.conductor.getConfig().get('plugins.enabled') || [];
+        if (!enabled.includes(name)) {
+            enabled.push(name);
+            await this.conductor.getConfig().set('plugins.enabled', enabled);
+        }
+    }
+    async disablePlugin(name) {
+        const enabled = this.conductor.getConfig().get('plugins.enabled') || [];
+        const filtered = enabled.filter((p) => p !== name);
+        await this.conductor.getConfig().set('plugins.enabled', filtered);
+        this.initializedPlugins.delete(name);
+    }
+    /** Get MCP tools from enabled plugins only. */
+    async getEnabledTools() {
+        const tools = [];
+        const enabledNames = this.conductor.getConfig().get('plugins.enabled') || [];
+        for (const name of enabledNames) {
+            try {
+                const plugin = await this.getPlugin(name);
+                if (plugin) {
+                    tools.push(...plugin.getTools());
+                }
+            }
+            catch (error) {
+                process.stderr.write(`Warning: plugin "${name}" failed to load: ${error.message}\n`);
+            }
+        }
+        return tools;
+    }
+}
+//# sourceMappingURL=manager.js.map

package/dist/plugins/manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manager.js","sourceRoot":"","sources":["../../src/plugins/manager.ts"],"names":[],"mappings":"AAkDA,MAAM,OAAO,aAAa;IAChB,SAAS,CAAY;IACrB,OAAO,GAAwB,IAAI,GAAG,EAAE,CAAC;IACzC,kBAAkB,GAAgB,IAAI,GAAG,EAAE,CAAC;IAC5C,UAAU,GAAwB,IAAI,GAAG,EAAE,CAAC;IAEpD,YAAY,SAAoB;QAC9B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC7B,CAAC;IAED,iDAAiD;IACjD,cAAc,CAAC,MAAc;QAC3B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACxC,CAAC;IAED,yDAAyD;IACzD,KAAK,CAAC,YAAY;QAChB,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;QACpD,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,oBAAoB,EAAE,EAAE,CAAC;YACrD,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;IAED,6DAA6D;IAC7D,KAAK,CAAC,SAAS,CAAC,IAAY;QAC1B,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM;YAAE,OAAO,SAAS,CAAC;QAE9B,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACvC,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACxC,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBAClC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC/B,CAAC;YAAC,OAAO,KAAU,EAAE,CAAC;gBACpB,MAAM,GAAG,GAAW,KAAK,CAAC,OAAO,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC;gBACnD,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;gBAC/B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,IAAI,mBAAmB,GAAG,IAAI,CAAC,CAAC;gBACtE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,yCAAyC,IAAI,IAAI,CAAC,CAAC;gBACxE,OAAO,SAAS,CAAC;YACnB,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,wDAAwD;IACxD,YAAY,CAAC,IAAY;QACvB,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACnC,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,gBAAgB;QACpB,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC,GAAG,CAAW,iBAAiB,CAAC,IAAI,EAAE,CAAC;QACvF,MAAM,QAAQ,GAAmB,EAAE,CAAC;QAEpC,KAAK,MAAM,IAAI,IAAI,YAAY,EAAE,CAAC;YAChC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACtC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC;gBAC1D,SAAS;YACX,CAAC;YAED,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,EAAE,CAAC;gBAC3B,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI;oBACJ,MAAM,EAAE,gBAAgB;oBACxB,SAAS,EAAE,CAAC;oBACZ,YAAY,EAAE,2BAA2B,IAAI,EAAE;iBAChD,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YAED,+BAA+B;YAC/B,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBACvC,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YAC7B,CAAC;YAED,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACtC,IAAI,GAAG,EAAE,CAAC;gBACR,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;YAC3E,CAAC;iBAAM,CAAC;gBACN,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC,MAAM,CAAC;gBAC3C,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;YACtD,CAAC;QACH,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,6DAA6D;IAC7D,WAAW;QAOT,MAAM,cAAc,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC,GAAG,CAAW,iBAAiB,CAAC,IAAI,EAAE,CAAC;QAEzF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YACxD,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,OAAO,EAAE,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC;YAC7C,YAAY,EAAE,MAAM,CAAC,YAAY;SAClC,CAAC,CAAC,CAAC;IACN,CAAC;IAED,eAAe,CAAC,IAAY;QAC1B,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC,GAAG,CAAW,iBAAiB,CAAC,IAAI,EAAE,CAAC;QAClF,OAAO,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,IAAY;QAC7B,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,IAAI,EAAE,CAAC,CAAC;QAE1D,gCAAgC;QAChC,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACvC,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACxC,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACpC,CAAC;YAAC,OAAO,KAAU,EAAE,CAAC;gBACpB,MAAM,IAAI,KAAK,CAAC,4BAA4B,IAAI,6BAA6B,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YAChG,CAAC;QACH,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC,GAAG,CAAW,iBAAiB,CAAC,IAAI,EAAE,CAAC;QAClF,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACnB,MAAM,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC,GAAG,CAAC,iBAAiB,EAAE,OAAO,CAAC,CAAC;QACnE,CAAC;IACH,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,IAAY;QAC9B,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC,GAAG,CAAW,iBAAiB,CAAC,IAAI,EAAE,CAAC;QAClF,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;QACnD,MAAM,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC,GAAG,CAAC,iBAAiB,EAAE,QAAQ,CAAC,CAAC;QAClE,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACvC,CAAC;IAED,+CAA+C;IAC/C,KAAK,CAAC,eAAe;QACnB,MAAM,KAAK,GAAiB,EAAE,CAAC;QAC/B,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC,GAAG,CAAW,iBAAiB,CAAC,IAAI,EAAE,CAAC;QAEvF,KAAK,MAAM,IAAI,IAAI,YAAY,EAAE,CAAC;YAChC,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;gBAC1C,IAAI,MAAM,EAAE,CAAC;oBACX,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;gBACnC,CAAC;YACH,CAAC;YAAC,OAAO,KAAU,EAAE,CAAC;gBACpB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oBAAoB,IAAI,qBAAqB,KAAK,CAAC,OAAO,IAAI,CAAC,CAAC;YACvF,CAAC;QACH,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;CACF"}

package/dist/plugins/validation.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Zod validation wrapper for plugin tool handlers.
+ *
+ * Every tool handler input is validated against its inputSchema before execution.
+ * Invalid inputs are rejected with clear error messages — no silent failures,
+ * no `any` types slipping through.
+ */
+import type { PluginTool } from './manager.js';
+/**
+ * Wrap a plugin tool with Zod validation.
+ * Returns a new tool whose handler validates input before execution.
+ */
+export declare function withValidation(tool: PluginTool): PluginTool;
+/**
+ * Wrap an array of plugin tools with Zod validation.
+ */
+export declare function validateTools(tools: PluginTool[]): PluginTool[];
+//# sourceMappingURL=validation.d.ts.map

package/dist/plugins/validation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../../src/plugins/validation.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AA0D/C;;;GAGG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,UAAU,GAAG,UAAU,CAe3D;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,UAAU,EAAE,GAAG,UAAU,EAAE,CAE/D"}

package/dist/plugins/validation.js

@@ -0,0 +1,81 @@
+/**
+ * Zod validation wrapper for plugin tool handlers.
+ *
+ * Every tool handler input is validated against its inputSchema before execution.
+ * Invalid inputs are rejected with clear error messages — no silent failures,
+ * no `any` types slipping through.
+ */
+import { z } from 'zod';
+/**
+ * Convert an MCP-style JSON Schema inputSchema to a Zod schema.
+ * This validates tool inputs at runtime before they reach the handler.
+ */
+function schemaFromInputSchema(schema) {
+    if (schema.type !== 'object') {
+        return z.unknown();
+    }
+    const properties = (schema.properties ?? {});
+    const required = new Set(schema.required ?? []);
+    const shape = {};
+    for (const [key, propSchema] of Object.entries(properties)) {
+        let fieldSchema;
+        switch (propSchema.type) {
+            case 'string':
+                fieldSchema = z.string();
+                if (propSchema.enum) {
+                    fieldSchema = z.enum(propSchema.enum);
+                }
+                break;
+            case 'number':
+            case 'integer':
+                fieldSchema = z.number();
+                break;
+            case 'boolean':
+                fieldSchema = z.boolean();
+                break;
+            case 'array':
+                fieldSchema = z.array(propSchema.items?.type === 'string'
+                    ? z.string()
+                    : propSchema.items?.type === 'number'
+                        ? z.number()
+                        : z.unknown());
+                break;
+            case 'object':
+                fieldSchema = z.record(z.string(), z.unknown());
+                break;
+            default:
+                fieldSchema = z.unknown();
+        }
+        if (propSchema.description) {
+            fieldSchema = fieldSchema.describe(propSchema.description);
+        }
+        shape[key] = required.has(key) ? fieldSchema : fieldSchema.optional();
+    }
+    return z.object(shape);
+}
+/**
+ * Wrap a plugin tool with Zod validation.
+ * Returns a new tool whose handler validates input before execution.
+ */
+export function withValidation(tool) {
+    const validator = schemaFromInputSchema(tool.inputSchema);
+    return {
+        ...tool,
+        handler: async (input) => {
+            const result = validator.safeParse(input);
+            if (!result.success) {
+                const errors = result.error.issues.map((e) => `${e.path.join('.')}: ${e.message}`).join('; ');
+                throw new Error(`Invalid input for tool "${tool.name}": ${errors}`);
+            }
+            // eslint-disable-next-line @typescript-eslint/no-explicit-any
+            return tool.handler(result.data);
+        },
+    };
+}
+/**
+ * Wrap an array of plugin tools with Zod validation.
+ */
+export function validateTools(tools) {
+    return tools.map(withValidation);
+}
+//# sourceMappingURL=validation.js.map

package/dist/plugins/validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.js","sourceRoot":"","sources":["../../src/plugins/validation.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB;;;GAGG;AACH,SAAS,qBAAqB,CAAC,MAA+B;IAC5D,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC;IACrB,CAAC;IAED,MAAM,UAAU,GAAG,CAAC,MAAM,CAAC,UAAU,IAAI,EAAE,CAA4C,CAAC;IACxF,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAU,MAAM,CAAC,QAAqB,IAAI,EAAE,CAAC,CAAC;IACtE,MAAM,KAAK,GAA8B,EAAE,CAAC;IAE5C,KAAK,MAAM,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3D,IAAI,WAAsB,CAAC;QAE3B,QAAQ,UAAU,CAAC,IAAI,EAAE,CAAC;YACxB,KAAK,QAAQ;gBACX,WAAW,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC;gBACzB,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC;oBACpB,WAAW,GAAG,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,IAA6B,CAAC,CAAC;gBACjE,CAAC;gBACD,MAAM;YACR,KAAK,QAAQ,CAAC;YACd,KAAK,SAAS;gBACZ,WAAW,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC;gBACzB,MAAM;YACR,KAAK,SAAS;gBACZ,WAAW,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC;gBAC1B,MAAM;YACR,KAAK,OAAO;gBACV,WAAW,GAAG,CAAC,CAAC,KAAK,CAClB,UAAU,CAAC,KAA2B,EAAE,IAAI,KAAK,QAAQ;oBACxD,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE;oBACZ,CAAC,CAAE,UAAU,CAAC,KAA2B,EAAE,IAAI,KAAK,QAAQ;wBAC1D,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE;wBACZ,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAClB,CAAC;gBACF,MAAM;YACR,KAAK,QAAQ;gBACX,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;gBAChD,MAAM;YACR;gBACE,WAAW,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC;QAC9B,CAAC;QAED,IAAI,UAAU,CAAC,WAAW,EAAE,CAAC;YAC3B,WAAW,GAAG,WAAW,CAAC,QAAQ,CAAC,UAAU,CAAC,WAAqB,CAAC,CAAC;QACvE,CAAC;QAED,KAAK,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC;IACxE,CAAC;IAED,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACzB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,IAAgB;IAC7C,MAAM,SAAS,GAAG,qBAAqB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAE1D,OAAO;QACL,GAAG,IAAI;QACP,OAAO,EAAE,KAAK,EAAE,KAAc,EAAE,EAAE;YAChC,MAAM,MAAM,GAAG,SAAS,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YAC1C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC9F,MAAM,IAAI,KAAK,CAAC,2BAA2B,IAAI,CAAC,IAAI,MAAM,MAAM,EAAE,CAAC,CAAC;YACtE,CAAC;YACD,8DAA8D;YAC9D,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAW,CAAC,CAAC;QAC1C,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,KAAmB;IAC/C,OAAO,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;AACnC,CAAC"}

package/dist/security/auth.d.ts

@@ -0,0 +1,23 @@
+export interface VerificationCode {
+    code: string;
+    userId?: number;
+    expiresAt: Date;
+    used: boolean;
+}
+export declare class AuthManager {
+    private codes;
+    /**
+     * Generate a verification code like: CX-8F2K-9L4P
+     */
+    generateVerificationCode(): string;
+    /**
+     * Verify a code and mark it as used.
+     */
+    verifyCode(code: string, userId: number): boolean;
+    /**
+     * Clean up expired codes.
+     */
+    cleanupExpiredCodes(): void;
+    private randomString;
+}
+//# sourceMappingURL=auth.d.ts.map

package/dist/security/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/security/auth.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,IAAI,CAAC;IAChB,IAAI,EAAE,OAAO,CAAC;CACf;AAED,qBAAa,WAAW;IACtB,OAAO,CAAC,KAAK,CAA4C;IAEzD;;OAEG;IACH,wBAAwB,IAAI,MAAM;IAiBlC;;OAEG;IACH,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO;IAajD;;OAEG;IACH,mBAAmB,IAAI,IAAI;IAS3B,OAAO,CAAC,YAAY;CAWrB"}

package/dist/security/auth.js

@@ -0,0 +1,56 @@
+import crypto from 'crypto';
+export class AuthManager {
+    codes = new Map();
+    /**
+     * Generate a verification code like: CX-8F2K-9L4P
+     */
+    generateVerificationCode() {
+        const part1 = this.randomString(2);
+        const part2 = this.randomString(4);
+        const part3 = this.randomString(4);
+        const code = `${part1}-${part2}-${part3}`.toUpperCase();
+        // Store with 5-minute expiry
+        this.codes.set(code, {
+            code,
+            expiresAt: new Date(Date.now() + 5 * 60 * 1000),
+            used: false,
+        });
+        return code;
+    }
+    /**
+     * Verify a code and mark it as used.
+     */
+    verifyCode(code, userId) {
+        const storedCode = this.codes.get(code.toUpperCase());
+        if (!storedCode)
+            return false;
+        if (storedCode.used)
+            return false;
+        if (storedCode.expiresAt < new Date())
+            return false;
+        storedCode.used = true;
+        storedCode.userId = userId;
+        return true;
+    }
+    /**
+     * Clean up expired codes.
+     */
+    cleanupExpiredCodes() {
+        const now = new Date();
+        for (const [code, data] of this.codes.entries()) {
+            if (data.expiresAt < now) {
+                this.codes.delete(code);
+            }
+        }
+    }
+    randomString(length) {
+        const chars = 'ABCDEFGHJKLMNPQRSTUVWXYZ23456789'; // Exclude ambiguous chars
+        let result = '';
+        const bytes = crypto.randomBytes(length);
+        for (let i = 0; i < length; i++) {
+            result += chars[bytes[i] % chars.length];
+        }
+        return result;
+    }
+}
+//# sourceMappingURL=auth.js.map

package/dist/security/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/security/auth.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,QAAQ,CAAC;AAS5B,MAAM,OAAO,WAAW;IACd,KAAK,GAAkC,IAAI,GAAG,EAAE,CAAC;IAEzD;;OAEG;IACH,wBAAwB;QACtB,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACnC,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACnC,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAEnC,MAAM,IAAI,GAAG,GAAG,KAAK,IAAI,KAAK,IAAI,KAAK,EAAE,CAAC,WAAW,EAAE,CAAC;QAExD,6BAA6B;QAC7B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE;YACnB,IAAI;YACJ,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;YAC/C,IAAI,EAAE,KAAK;SACZ,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,UAAU,CAAC,IAAY,EAAE,MAAc;QACrC,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;QAEtD,IAAI,CAAC,UAAU;YAAE,OAAO,KAAK,CAAC;QAC9B,IAAI,UAAU,CAAC,IAAI;YAAE,OAAO,KAAK,CAAC;QAClC,IAAI,UAAU,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE;YAAE,OAAO,KAAK,CAAC;QAEpD,UAAU,CAAC,IAAI,GAAG,IAAI,CAAC;QACvB,UAAU,CAAC,MAAM,GAAG,MAAM,CAAC;QAE3B,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,mBAAmB;QACjB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;YAChD,IAAI,IAAI,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC;gBACzB,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC;IACH,CAAC;IAEO,YAAY,CAAC,MAAc;QACjC,MAAM,KAAK,GAAG,kCAAkC,CAAC,CAAC,0BAA0B;QAC5E,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAEzC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;QAC3C,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;CACF"}

package/dist/security/keychain.d.ts

@@ -0,0 +1,60 @@
+/**
+ * Keychain — encrypted credential storage.
+ *
+ * Supports two formats:
+ *   v2  — AES-256-GCM with machine-specific key derivation (written by install.sh)
+ *   v1  — AES-256-CBC legacy format (written by older versions)
+ *
+ * New writes always use the v2 format.
+ */
+export declare class Keychain {
+    private keychainDir;
+    private masterKey;
+    constructor(configDir: string);
+    /**
+     * Derive a machine-specific master key.
+     * Matches the install.sh derivation so credentials saved by either
+     * the installer or the app are interchangeable.
+     */
+    private deriveMasterKey;
+    /**
+     * Get a machine-specific secret for key derivation.
+     * Mirrors the logic in install.sh's save_cred function.
+     */
+    private getMachineSecret;
+    /**
+     * Store an encrypted credential (v2 format: AES-256-GCM).
+     */
+    set(service: string, key: string, value: string): Promise<void>;
+    /**
+     * Retrieve and decrypt a credential.
+     * Handles both v2 (GCM) and legacy v1 (CBC) formats.
+     */
+    get(service: string, key: string): Promise<string | null>;
+    /**
+     * Delete a credential.
+     */
+    delete(service: string, key: string): Promise<void>;
+    /**
+     * Check if a credential exists.
+     */
+    has(service: string, key: string): Promise<boolean>;
+    /**
+     * List all credential keys for a service.
+     */
+    list(service: string): Promise<string[]>;
+    /**
+     * Decrypt a stored value, auto-detecting format version.
+     */
+    private decrypt;
+    /**
+     * AES-256-GCM decryption (v2 format, matches install.sh).
+     */
+    private decryptGCM;
+    /**
+     * AES-256-CBC decryption (legacy v1 format).
+     * Kept for backward-compat with credentials written before the v2 migration.
+     */
+    private decryptCBC;
+}
+//# sourceMappingURL=keychain.d.ts.map

package/dist/security/keychain.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"keychain.d.ts","sourceRoot":"","sources":["../../src/security/keychain.ts"],"names":[],"mappings":"AAOA;;;;;;;;GAQG;AACH,qBAAa,QAAQ;IACnB,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,SAAS,CAAS;gBAEd,SAAS,EAAE,MAAM;IAK7B;;;;OAIG;IACH,OAAO,CAAC,eAAe;IAMvB;;;OAGG;IACH,OAAO,CAAC,gBAAgB;IAiExB;;OAEG;IACG,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAmBrE;;;OAGG;IACG,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAU/D;;OAEG;IACG,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IASzD;;OAEG;IACG,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAUzD;;OAEG;IACG,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAW9C;;OAEG;IACH,OAAO,CAAC,OAAO;IAgBf;;OAEG;IACH,OAAO,CAAC,UAAU;IAWlB;;;OAGG;IACH,OAAO,CAAC,UAAU;CAQnB"}