@vetta-org/plugin-sdk 0.1.1 → 0.2.0

package/dist/manifest-schema.js

@@ -0,0 +1,145 @@
+import { Type } from "@sinclair/typebox";
+import { PLUGIN_PERMISSIONS } from "./permissions.js";
+const NON_WHITESPACE_PATTERN = "\\S";
+export const PluginIdSchema = Type.String({
+    minLength: 1,
+    maxLength: 64,
+    pattern: "^[a-z0-9][a-z0-9._-]{0,63}$",
+    description: "Stable lowercase plugin identifier.",
+});
+export const PluginVersionSchema = Type.String({
+    minLength: 1,
+    maxLength: 64,
+    pattern: "^[a-zA-Z0-9][a-zA-Z0-9._+-]{0,63}$",
+    description: "Plugin version without path separators.",
+});
+export const PluginCommandNameSchema = Type.String({
+    minLength: 1,
+    maxLength: 64,
+    pattern: "^[a-zA-Z0-9][a-zA-Z0-9._+-]{0,63}$",
+    description: "Bare executable name declared by the plugin.",
+});
+export const PluginCommandNamesSchema = Type.Array(PluginCommandNameSchema);
+export const PluginNetworkManifestSchema = Type.Object({
+    allowedHosts: Type.Array(Type.String({ minLength: 1, maxLength: 253, pattern: NON_WHITESPACE_PATTERN }), {
+        minItems: 1,
+        maxItems: 128,
+    }),
+}, { additionalProperties: true });
+export const PluginBrowserManifestSchema = Type.Object({
+    allowedHosts: Type.Array(Type.String({ minLength: 1, maxLength: 253, pattern: NON_WHITESPACE_PATTERN }), {
+        minItems: 1,
+        maxItems: 128,
+    }),
+}, { additionalProperties: true });
+export const PluginPermissionSchema = Type.Union(PLUGIN_PERMISSIONS.map((permission) => Type.Literal(permission)), { description: "Host capability requested by the plugin." });
+const NonWhitespaceStringSchema = Type.String({ pattern: NON_WHITESPACE_PATTERN });
+const OptionalAgentModesSchema = Type.Optional(Type.Union([NonWhitespaceStringSchema, Type.Array(NonWhitespaceStringSchema)]));
+const StringRecordSchema = Type.Record(Type.String(), Type.String());
+const PluginSettingBaseProperties = {
+    key: NonWhitespaceStringSchema,
+    description: Type.Optional(Type.String()),
+    default: Type.Optional(Type.Union([Type.String(), Type.Number(), Type.Boolean()])),
+    enum: Type.Optional(Type.Array(NonWhitespaceStringSchema)),
+    visibleWhen: Type.Optional(Type.Object({
+        key: NonWhitespaceStringSchema,
+        in: Type.Array(NonWhitespaceStringSchema),
+    }, { additionalProperties: true })),
+};
+const PluginInputSettingSchema = Type.Object({
+    ...PluginSettingBaseProperties,
+    type: Type.Union([
+        Type.Literal("string"),
+        Type.Literal("number"),
+        Type.Literal("boolean"),
+        Type.Literal("enum"),
+        Type.Literal("secret"),
+    ]),
+    title: NonWhitespaceStringSchema,
+}, { additionalProperties: true });
+const PluginDescriptionSettingSchema = Type.Object({
+    ...PluginSettingBaseProperties,
+    type: Type.Literal("desc"),
+    title: Type.Optional(Type.String()),
+}, { additionalProperties: true });
+export const PluginSettingDefinitionSchema = Type.Union([
+    PluginInputSettingSchema,
+    PluginDescriptionSettingSchema,
+]);
+const PluginMcpCommonProperties = {
+    disabled: Type.Optional(Type.Boolean()),
+    autoApprove: Type.Optional(Type.Array(NonWhitespaceStringSchema)),
+    startupTimeout: Type.Optional(Type.Number()),
+    debug: Type.Optional(Type.Boolean()),
+    displayName: Type.Optional(Type.String()),
+    description: Type.Optional(Type.String()),
+    agent_mode: OptionalAgentModesSchema,
+};
+export const PluginMcpStdioServerConfigSchema = Type.Object({
+    ...PluginMcpCommonProperties,
+    type: Type.Optional(Type.Literal("stdio")),
+    command: NonWhitespaceStringSchema,
+    args: Type.Optional(Type.Array(Type.String())),
+    env: Type.Optional(StringRecordSchema),
+    cwd: Type.Optional(Type.String()),
+}, { additionalProperties: true });
+export const PluginMcpHttpServerConfigSchema = Type.Object({
+    ...PluginMcpCommonProperties,
+    type: Type.Literal("http"),
+    url: NonWhitespaceStringSchema,
+    headers: Type.Optional(StringRecordSchema),
+    oauthClientId: Type.Optional(Type.String()),
+    oauthDeviceFlow: Type.Optional(Type.Boolean()),
+    oauthScopes: Type.Optional(Type.String()),
+}, { additionalProperties: true });
+export const PluginMcpServerConfigSchema = Type.Union([
+    PluginMcpStdioServerConfigSchema,
+    PluginMcpHttpServerConfigSchema,
+]);
+const PluginMcpServerMapSchema = Type.Record(Type.String({ pattern: NON_WHITESPACE_PATTERN }), PluginMcpServerConfigSchema, { additionalProperties: false });
+export const PluginAgentManifestSchema = Type.Object({
+    systemPrompt: Type.Optional(Type.Object({
+        promptPaths: Type.Optional(Type.Array(NonWhitespaceStringSchema)),
+    }, { additionalProperties: true })),
+    skillPaths: Type.Optional(Type.Array(NonWhitespaceStringSchema)),
+    mcpServers: Type.Optional(Type.Union([NonWhitespaceStringSchema, PluginMcpServerMapSchema])),
+    toolPolicy: Type.Optional(Type.Object({
+        allow: Type.Optional(Type.Array(NonWhitespaceStringSchema)),
+        deny: Type.Optional(Type.Array(NonWhitespaceStringSchema)),
+    }, { additionalProperties: true })),
+}, { additionalProperties: true });
+export const PluginModuleFederationManifestSchema = Type.Object({
+    remoteName: Type.String({ pattern: "^[A-Za-z_$][A-Za-z0-9_$-]{0,63}$" }),
+    expose: Type.String({ pattern: "^\\./(?!.*\\.\\.)(?!.*\\\\).+$" }),
+}, { additionalProperties: true });
+export const PluginManifestSchema = Type.Object({
+    id: PluginIdSchema,
+    name: NonWhitespaceStringSchema,
+    version: PluginVersionSchema,
+    pluginApiVersion: NonWhitespaceStringSchema,
+    entry: NonWhitespaceStringSchema,
+    moduleFederation: PluginModuleFederationManifestSchema,
+    agent: Type.Optional(PluginAgentManifestSchema),
+    styles: Type.Optional(Type.Array(NonWhitespaceStringSchema)),
+    permissions: Type.Optional(Type.Array(PluginPermissionSchema)),
+    network: Type.Optional(PluginNetworkManifestSchema),
+    browser: Type.Optional(PluginBrowserManifestSchema),
+    commands: Type.Optional(PluginCommandNamesSchema),
+    contributes: Type.Optional(Type.Object({
+        settings: Type.Optional(Type.Array(PluginSettingDefinitionSchema)),
+    }, { additionalProperties: true })),
+    description: Type.Optional(Type.String()),
+    author: Type.Optional(Type.String()),
+    icon: Type.Optional(NonWhitespaceStringSchema),
+    guidingWords: Type.Optional(Type.Array(NonWhitespaceStringSchema)),
+    defaultLocale: Type.Optional(Type.String({ minLength: 2, maxLength: 16, pattern: "^[a-zA-Z][a-zA-Z0-9-]{1,15}$" })),
+    contributionMode: Type.Optional(Type.Object({
+        hardIsolation: Type.Optional(Type.Boolean()),
+    }, { additionalProperties: true })),
+    agent_mode: OptionalAgentModesSchema,
+}, {
+    $id: "PluginManifest",
+    additionalProperties: true,
+    description: "Vetta desktop plugin manifest (plugin.json).",
+});
+//# sourceMappingURL=manifest-schema.js.map

package/dist/manifest-schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest-schema.js","sourceRoot":"","sources":["../src/manifest-schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAe,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAEtD,MAAM,sBAAsB,GAAG,KAAK,CAAC;AAErC,MAAM,CAAC,MAAM,cAAc,GAAG,IAAI,CAAC,MAAM,CAAC;IACzC,SAAS,EAAE,CAAC;IACZ,SAAS,EAAE,EAAE;IACb,OAAO,EAAE,6BAA6B;IACtC,WAAW,EAAE,qCAAqC;CAClD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,mBAAmB,GAAG,IAAI,CAAC,MAAM,CAAC;IAC9C,SAAS,EAAE,CAAC;IACZ,SAAS,EAAE,EAAE;IACb,OAAO,EAAE,oCAAoC;IAC7C,WAAW,EAAE,yCAAyC;CACtD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,uBAAuB,GAAG,IAAI,CAAC,MAAM,CAAC;IAClD,SAAS,EAAE,CAAC;IACZ,SAAS,EAAE,EAAE;IACb,OAAO,EAAE,oCAAoC;IAC7C,WAAW,EAAE,8CAA8C;CAC3D,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,wBAAwB,GAAG,IAAI,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;AAE5E,MAAM,CAAC,MAAM,2BAA2B,GAAG,IAAI,CAAC,MAAM,CACrD;IACC,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC,EAAE;QACxG,QAAQ,EAAE,CAAC;QACX,QAAQ,EAAE,GAAG;KACb,CAAC;CACF,EACD,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAC9B,CAAC;AAEF,MAAM,CAAC,MAAM,2BAA2B,GAAG,IAAI,CAAC,MAAM,CACrD;IACC,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC,EAAE;QACxG,QAAQ,EAAE,CAAC;QACX,QAAQ,EAAE,GAAG;KACb,CAAC;CACF,EACD,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAC9B,CAAC;AAEF,MAAM,CAAC,MAAM,sBAAsB,GAAG,IAAI,CAAC,KAAK,CAC/C,kBAAkB,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,EAChE,EAAE,WAAW,EAAE,0CAA0C,EAAE,CAC3D,CAAC;AAEF,MAAM,yBAAyB,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC,CAAC;AACnF,MAAM,wBAAwB,GAAG,IAAI,CAAC,QAAQ,CAC7C,IAAI,CAAC,KAAK,CAAC,CAAC,yBAAyB,EAAE,IAAI,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC,CAAC,CAC9E,CAAC;AACF,MAAM,kBAAkB,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;AAErE,MAAM,2BAA2B,GAAG;IACnC,GAAG,EAAE,yBAAyB;IAC9B,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IACzC,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAClF,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAC1D,WAAW,EAAE,IAAI,CAAC,QAAQ,CACzB,IAAI,CAAC,MAAM,CACV;QACC,GAAG,EAAE,yBAAyB;QAC9B,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,yBAAyB,CAAC;KACzC,EACD,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAC9B,CACD;CACD,CAAC;AAEF,MAAM,wBAAwB,GAAG,IAAI,CAAC,MAAM,CAC3C;IACC,GAAG,2BAA2B;IAC9B,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC;QAChB,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;QACtB,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;QACtB,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;QACvB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;QACpB,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;KACtB,CAAC;IACF,KAAK,EAAE,yBAAyB;CAChC,EACD,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAC9B,CAAC;AAEF,MAAM,8BAA8B,GAAG,IAAI,CAAC,MAAM,CACjD;IACC,GAAG,2BAA2B;IAC9B,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;IAC1B,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;CACnC,EACD,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAC9B,CAAC;AAEF,MAAM,CAAC,MAAM,6BAA6B,GAAG,IAAI,CAAC,KAAK,CAAC;IACvD,wBAAwB;IACxB,8BAA8B;CAC9B,CAAC,CAAC;AAEH,MAAM,yBAAyB,GAAG;IACjC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;IACvC,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC;IACjE,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IAC5C,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;IACpC,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IACzC,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IACzC,UAAU,EAAE,wBAAwB;CACpC,CAAC;AAEF,MAAM,CAAC,MAAM,gCAAgC,GAAG,IAAI,CAAC,MAAM,CAC1D;IACC,GAAG,yBAAyB;IAC5B,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC1C,OAAO,EAAE,yBAAyB;IAClC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IAC9C,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC;IACtC,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;CACjC,EACD,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAC9B,CAAC;AAEF,MAAM,CAAC,MAAM,+BAA+B,GAAG,IAAI,CAAC,MAAM,CACzD;IACC,GAAG,yBAAyB;IAC5B,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;IAC1B,GAAG,EAAE,yBAAyB;IAC9B,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC;IAC1C,aAAa,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IAC3C,eAAe,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;IAC9C,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;CACzC,EACD,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAC9B,CAAC;AAEF,MAAM,CAAC,MAAM,2BAA2B,GAAG,IAAI,CAAC,KAAK,CAAC;IACrD,gCAAgC;IAChC,+BAA+B;CAC/B,CAAC,CAAC;AAEH,MAAM,wBAAwB,GAAG,IAAI,CAAC,MAAM,CAC3C,IAAI,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC,EAChD,2BAA2B,EAC3B,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAC/B,CAAC;AAEF,MAAM,CAAC,MAAM,yBAAyB,GAAG,IAAI,CAAC,MAAM,CACnD;IACC,YAAY,EAAE,IAAI,CAAC,QAAQ,CAC1B,IAAI,CAAC,MAAM,CACV;QACC,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC;KACjE,EACD,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAC9B,CACD;IACD,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAChE,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,yBAAyB,EAAE,wBAAwB,CAAC,CAAC,CAAC;IAC5F,UAAU,EAAE,IAAI,CAAC,QAAQ,CACxB,IAAI,CAAC,MAAM,CACV;QACC,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC;QAC3D,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC;KAC1D,EACD,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAC9B,CACD;CACD,EACD,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAC9B,CAAC;AAEF,MAAM,CAAC,MAAM,oCAAoC,GAAG,IAAI,CAAC,MAAM,CAC9D;IACC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,kCAAkC,EAAE,CAAC;IACxE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,gCAAgC,EAAE,CAAC;CAClE,EACD,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAC9B,CAAC;AAEF,MAAM,CAAC,MAAM,oBAAoB,GAAG,IAAI,CAAC,MAAM,CAC9C;IACC,EAAE,EAAE,cAAc;IAClB,IAAI,EAAE,yBAAyB;IAC/B,OAAO,EAAE,mBAAmB;IAC5B,gBAAgB,EAAE,yBAAyB;IAC3C,KAAK,EAAE,yBAAyB;IAChC,gBAAgB,EAAE,oCAAoC;IACtD,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,yBAAyB,CAAC;IAC/C,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAC5D,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAC9D,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,2BAA2B,CAAC;IACnD,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,2BAA2B,CAAC;IACnD,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,wBAAwB,CAAC;IACjD,WAAW,EAAE,IAAI,CAAC,QAAQ,CACzB,IAAI,CAAC,MAAM,CACV;QACC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;KAClE,EACD,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAC9B,CACD;IACD,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IACzC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IACpC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,yBAAyB,CAAC;IAC9C,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAClE,aAAa,EAAE,IAAI,CAAC,QAAQ,CAC3B,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,OAAO,EAAE,8BAA8B,EAAE,CAAC,CACrF;IACD,gBAAgB,EAAE,IAAI,CAAC,QAAQ,CAC9B,IAAI,CAAC,MAAM,CACV;QACC,aAAa,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;KAC5C,EACD,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAC9B,CACD;IACD,UAAU,EAAE,wBAAwB;CACpC,EACD;IACC,GAAG,EAAE,gBAAgB;IACrB,oBAAoB,EAAE,IAAI;IAC1B,WAAW,EAAE,8CAA8C;CAC3D,CACD,CAAC","sourcesContent":["import { Type, type Static } from \"@sinclair/typebox\";\nimport { PLUGIN_PERMISSIONS } from \"./permissions.js\";\n\nconst NON_WHITESPACE_PATTERN = \"\\\\S\";\n\nexport const PluginIdSchema = Type.String({\n\tminLength: 1,\n\tmaxLength: 64,\n\tpattern: \"^[a-z0-9][a-z0-9._-]{0,63}$\",\n\tdescription: \"Stable lowercase plugin identifier.\",\n});\n\nexport const PluginVersionSchema = Type.String({\n\tminLength: 1,\n\tmaxLength: 64,\n\tpattern: \"^[a-zA-Z0-9][a-zA-Z0-9._+-]{0,63}$\",\n\tdescription: \"Plugin version without path separators.\",\n});\n\nexport const PluginCommandNameSchema = Type.String({\n\tminLength: 1,\n\tmaxLength: 64,\n\tpattern: \"^[a-zA-Z0-9][a-zA-Z0-9._+-]{0,63}$\",\n\tdescription: \"Bare executable name declared by the plugin.\",\n});\n\nexport const PluginCommandNamesSchema = Type.Array(PluginCommandNameSchema);\n\nexport const PluginNetworkManifestSchema = Type.Object(\n\t{\n\t\tallowedHosts: Type.Array(Type.String({ minLength: 1, maxLength: 253, pattern: NON_WHITESPACE_PATTERN }), {\n\t\t\tminItems: 1,\n\t\t\tmaxItems: 128,\n\t\t}),\n\t},\n\t{ additionalProperties: true },\n);\n\nexport const PluginBrowserManifestSchema = Type.Object(\n\t{\n\t\tallowedHosts: Type.Array(Type.String({ minLength: 1, maxLength: 253, pattern: NON_WHITESPACE_PATTERN }), {\n\t\t\tminItems: 1,\n\t\t\tmaxItems: 128,\n\t\t}),\n\t},\n\t{ additionalProperties: true },\n);\n\nexport const PluginPermissionSchema = Type.Union(\n\tPLUGIN_PERMISSIONS.map((permission) => Type.Literal(permission)),\n\t{ description: \"Host capability requested by the plugin.\" },\n);\n\nconst NonWhitespaceStringSchema = Type.String({ pattern: NON_WHITESPACE_PATTERN });\nconst OptionalAgentModesSchema = Type.Optional(\n\tType.Union([NonWhitespaceStringSchema, Type.Array(NonWhitespaceStringSchema)]),\n);\nconst StringRecordSchema = Type.Record(Type.String(), Type.String());\n\nconst PluginSettingBaseProperties = {\n\tkey: NonWhitespaceStringSchema,\n\tdescription: Type.Optional(Type.String()),\n\tdefault: Type.Optional(Type.Union([Type.String(), Type.Number(), Type.Boolean()])),\n\tenum: Type.Optional(Type.Array(NonWhitespaceStringSchema)),\n\tvisibleWhen: Type.Optional(\n\t\tType.Object(\n\t\t\t{\n\t\t\t\tkey: NonWhitespaceStringSchema,\n\t\t\t\tin: Type.Array(NonWhitespaceStringSchema),\n\t\t\t},\n\t\t\t{ additionalProperties: true },\n\t\t),\n\t),\n};\n\nconst PluginInputSettingSchema = Type.Object(\n\t{\n\t\t...PluginSettingBaseProperties,\n\t\ttype: Type.Union([\n\t\t\tType.Literal(\"string\"),\n\t\t\tType.Literal(\"number\"),\n\t\t\tType.Literal(\"boolean\"),\n\t\t\tType.Literal(\"enum\"),\n\t\t\tType.Literal(\"secret\"),\n\t\t]),\n\t\ttitle: NonWhitespaceStringSchema,\n\t},\n\t{ additionalProperties: true },\n);\n\nconst PluginDescriptionSettingSchema = Type.Object(\n\t{\n\t\t...PluginSettingBaseProperties,\n\t\ttype: Type.Literal(\"desc\"),\n\t\ttitle: Type.Optional(Type.String()),\n\t},\n\t{ additionalProperties: true },\n);\n\nexport const PluginSettingDefinitionSchema = Type.Union([\n\tPluginInputSettingSchema,\n\tPluginDescriptionSettingSchema,\n]);\n\nconst PluginMcpCommonProperties = {\n\tdisabled: Type.Optional(Type.Boolean()),\n\tautoApprove: Type.Optional(Type.Array(NonWhitespaceStringSchema)),\n\tstartupTimeout: Type.Optional(Type.Number()),\n\tdebug: Type.Optional(Type.Boolean()),\n\tdisplayName: Type.Optional(Type.String()),\n\tdescription: Type.Optional(Type.String()),\n\tagent_mode: OptionalAgentModesSchema,\n};\n\nexport const PluginMcpStdioServerConfigSchema = Type.Object(\n\t{\n\t\t...PluginMcpCommonProperties,\n\t\ttype: Type.Optional(Type.Literal(\"stdio\")),\n\t\tcommand: NonWhitespaceStringSchema,\n\t\targs: Type.Optional(Type.Array(Type.String())),\n\t\tenv: Type.Optional(StringRecordSchema),\n\t\tcwd: Type.Optional(Type.String()),\n\t},\n\t{ additionalProperties: true },\n);\n\nexport const PluginMcpHttpServerConfigSchema = Type.Object(\n\t{\n\t\t...PluginMcpCommonProperties,\n\t\ttype: Type.Literal(\"http\"),\n\t\turl: NonWhitespaceStringSchema,\n\t\theaders: Type.Optional(StringRecordSchema),\n\t\toauthClientId: Type.Optional(Type.String()),\n\t\toauthDeviceFlow: Type.Optional(Type.Boolean()),\n\t\toauthScopes: Type.Optional(Type.String()),\n\t},\n\t{ additionalProperties: true },\n);\n\nexport const PluginMcpServerConfigSchema = Type.Union([\n\tPluginMcpStdioServerConfigSchema,\n\tPluginMcpHttpServerConfigSchema,\n]);\n\nconst PluginMcpServerMapSchema = Type.Record(\n\tType.String({ pattern: NON_WHITESPACE_PATTERN }),\n\tPluginMcpServerConfigSchema,\n\t{ additionalProperties: false },\n);\n\nexport const PluginAgentManifestSchema = Type.Object(\n\t{\n\t\tsystemPrompt: Type.Optional(\n\t\t\tType.Object(\n\t\t\t\t{\n\t\t\t\t\tpromptPaths: Type.Optional(Type.Array(NonWhitespaceStringSchema)),\n\t\t\t\t},\n\t\t\t\t{ additionalProperties: true },\n\t\t\t),\n\t\t),\n\t\tskillPaths: Type.Optional(Type.Array(NonWhitespaceStringSchema)),\n\t\tmcpServers: Type.Optional(Type.Union([NonWhitespaceStringSchema, PluginMcpServerMapSchema])),\n\t\ttoolPolicy: Type.Optional(\n\t\t\tType.Object(\n\t\t\t\t{\n\t\t\t\t\tallow: Type.Optional(Type.Array(NonWhitespaceStringSchema)),\n\t\t\t\t\tdeny: Type.Optional(Type.Array(NonWhitespaceStringSchema)),\n\t\t\t\t},\n\t\t\t\t{ additionalProperties: true },\n\t\t\t),\n\t\t),\n\t},\n\t{ additionalProperties: true },\n);\n\nexport const PluginModuleFederationManifestSchema = Type.Object(\n\t{\n\t\tremoteName: Type.String({ pattern: \"^[A-Za-z_$][A-Za-z0-9_$-]{0,63}$\" }),\n\t\texpose: Type.String({ pattern: \"^\\\\./(?!.*\\\\.\\\\.)(?!.*\\\\\\\\).+$\" }),\n\t},\n\t{ additionalProperties: true },\n);\n\nexport const PluginManifestSchema = Type.Object(\n\t{\n\t\tid: PluginIdSchema,\n\t\tname: NonWhitespaceStringSchema,\n\t\tversion: PluginVersionSchema,\n\t\tpluginApiVersion: NonWhitespaceStringSchema,\n\t\tentry: NonWhitespaceStringSchema,\n\t\tmoduleFederation: PluginModuleFederationManifestSchema,\n\t\tagent: Type.Optional(PluginAgentManifestSchema),\n\t\tstyles: Type.Optional(Type.Array(NonWhitespaceStringSchema)),\n\t\tpermissions: Type.Optional(Type.Array(PluginPermissionSchema)),\n\t\tnetwork: Type.Optional(PluginNetworkManifestSchema),\n\t\tbrowser: Type.Optional(PluginBrowserManifestSchema),\n\t\tcommands: Type.Optional(PluginCommandNamesSchema),\n\t\tcontributes: Type.Optional(\n\t\t\tType.Object(\n\t\t\t\t{\n\t\t\t\t\tsettings: Type.Optional(Type.Array(PluginSettingDefinitionSchema)),\n\t\t\t\t},\n\t\t\t\t{ additionalProperties: true },\n\t\t\t),\n\t\t),\n\t\tdescription: Type.Optional(Type.String()),\n\t\tauthor: Type.Optional(Type.String()),\n\t\ticon: Type.Optional(NonWhitespaceStringSchema),\n\t\tguidingWords: Type.Optional(Type.Array(NonWhitespaceStringSchema)),\n\t\tdefaultLocale: Type.Optional(\n\t\t\tType.String({ minLength: 2, maxLength: 16, pattern: \"^[a-zA-Z][a-zA-Z0-9-]{1,15}$\" }),\n\t\t),\n\t\tcontributionMode: Type.Optional(\n\t\t\tType.Object(\n\t\t\t\t{\n\t\t\t\t\thardIsolation: Type.Optional(Type.Boolean()),\n\t\t\t\t},\n\t\t\t\t{ additionalProperties: true },\n\t\t\t),\n\t\t),\n\t\tagent_mode: OptionalAgentModesSchema,\n\t},\n\t{\n\t\t$id: \"PluginManifest\",\n\t\tadditionalProperties: true,\n\t\tdescription: \"Vetta desktop plugin manifest (plugin.json).\",\n\t},\n);\n\nexport type PluginSettingSchema = Static<typeof PluginSettingDefinitionSchema>;\nexport type PluginMcpServerConfig = Static<typeof PluginMcpServerConfigSchema>;\nexport type PluginAgentManifest = Static<typeof PluginAgentManifestSchema>;\nexport type PluginNetworkManifest = Static<typeof PluginNetworkManifestSchema>;\nexport type PluginBrowserManifest = Static<typeof PluginBrowserManifestSchema>;\nexport type PluginManifestInput = Static<typeof PluginManifestSchema>;\nexport type PluginManifest = PluginManifestInput;\n"]}

package/dist/manifest.d.ts

@@ -1,57 +1,23 @@
-/**
- * MCP server config declared inside a plugin (stdio or http). Relative paths in
- * stdio `command`/`args`/`cwd` are resolved against the plugin root at contribute time.
- */
-export type PluginMcpServerConfig = {
-    type?: "stdio";
-    command: string;
-    args?: string[];
-    env?: Record<string, string>;
-    cwd?: string;
-    disabled?: boolean;
-    autoApprove?: string[];
-    startupTimeout?: number;
-    debug?: boolean;
-    displayName?: string;
-    description?: string;
-    /** 该 server 的工具允许出现的工作模式 slug（agent_mode 轴，缺省/空 = 通用）。见 ADR-0046。 */
-    agent_mode?: string | string[];
-} | {
-    type: "http";
-    url: string;
-    headers?: Record<string, string>;
-    oauthClientId?: string;
-    oauthDeviceFlow?: boolean;
-    oauthScopes?: string;
-    disabled?: boolean;
-    autoApprove?: string[];
-    startupTimeout?: number;
-    debug?: boolean;
-    displayName?: string;
-    description?: string;
-    /** 该 server 的工具允许出现的工作模式 slug（agent_mode 轴，缺省/空 = 通用）。见 ADR-0046。 */
-    agent_mode?: string | string[];
-};
-export interface PluginAgentManifest {
-    systemPrompt?: {
-        /**
-         * Plugin-packaged prompt contribution file paths. Main-process aggregation
-         * resolves these relative to the installed plugin root.
-         */
-        promptPaths?: string[];
-    };
-    /** Plugin-packaged skill files or directories to add to the agent resource graph. */
-    skillPaths?: string[];
-    /**
-     * Plugin-scoped MCP servers. Either a relative path to `.mcp.json`
-     * (shape `{ mcpServers: { ... } }`) or an inline map of server configs.
-     * Requires permission `agent.mcp.control`. Never written into user mcp.json.
-     */
-    mcpServers?: string | Record<string, PluginMcpServerConfig>;
-    /** Declarative tool visibility policy. Names are tool ids after registration. */
-    toolPolicy?: {
-        allow?: string[];
-        deny?: string[];
-    };
+import { type PluginManifest, type PluginMcpServerConfig } from "./manifest-schema.js";
+export { PluginAgentManifestSchema, PluginBrowserManifestSchema, PluginCommandNameSchema, PluginCommandNamesSchema, PluginIdSchema, PluginManifestSchema, PluginMcpHttpServerConfigSchema, PluginMcpServerConfigSchema, PluginMcpStdioServerConfigSchema, PluginModuleFederationManifestSchema, PluginNetworkManifestSchema, PluginPermissionSchema, PluginSettingDefinitionSchema, PluginVersionSchema, } from "./manifest-schema.js";
+export type { PluginAgentManifest, PluginBrowserManifest, PluginManifest, PluginManifestInput, PluginMcpServerConfig, PluginNetworkManifest, PluginSettingSchema, } from "./manifest-schema.js";
+export { PLUGIN_PERMISSIONS } from "./permissions.js";
+export type { PluginPermission } from "./permissions.js";
+export interface PluginManifestResourceReference {
+    field: string;
+    path: string;
+    kind: "file" | "file-or-directory";
 }
+export declare function validatePluginId(id: string): void;
+export declare function validatePluginVersion(version: string): void;
+export declare function validatePluginRelativePath(value: string, fieldName: string): string;
+export declare function parsePluginCommandNames(value: unknown): string[];
+/** @deprecated agent_mode 已无任何运行时语义（ADR-0071），保留仅为容忍既有 manifest。 */
+export declare function normalizePluginAgentModes(value: unknown): string[] | undefined;
+export declare function parsePluginMcpServerConfig(name: string, raw: unknown): PluginMcpServerConfig;
+export declare function isPluginPassthroughIconRef(icon: string): boolean;
+export declare function isPluginPackagedIconPath(icon: string): boolean;
+export declare function parsePluginManifest(raw: unknown): PluginManifest;
+export declare function listPluginManifestResources(manifest: PluginManifest): PluginManifestResourceReference[];
+export declare function isPluginApiCompatible(hostVersion: string, range: string): boolean;
 //# sourceMappingURL=manifest.d.ts.map

package/dist/manifest.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"manifest.d.ts","sourceRoot":"","sources":["../src/manifest.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,MAAM,qBAAqB,GAC9B;IACA,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,uHAAqE;IACrE,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;CAC9B,GACD;IACA,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,uHAAqE;IACrE,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;CAC9B,CAAC;AAEL,MAAM,WAAW,mBAAmB;IACnC,YAAY,CAAC,EAAE;QACd;;;WAGG;QACH,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;KACvB,CAAC;IACF,qFAAqF;IACrF,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC;IAC5D,iFAAiF;IACjF,UAAU,CAAC,EAAE;QACZ,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;QACjB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;KAChB,CAAC;CACF","sourcesContent":["/**\n * MCP server config declared inside a plugin (stdio or http). Relative paths in\n * stdio `command`/`args`/`cwd` are resolved against the plugin root at contribute time.\n */\nexport type PluginMcpServerConfig =\n\t| {\n\t\t\ttype?: \"stdio\";\n\t\t\tcommand: string;\n\t\t\targs?: string[];\n\t\t\tenv?: Record<string, string>;\n\t\t\tcwd?: string;\n\t\t\tdisabled?: boolean;\n\t\t\tautoApprove?: string[];\n\t\t\tstartupTimeout?: number;\n\t\t\tdebug?: boolean;\n\t\t\tdisplayName?: string;\n\t\t\tdescription?: string;\n\t\t\t/** 该 server 的工具允许出现的工作模式 slug（agent_mode 轴，缺省/空 = 通用）。见 ADR-0046。 */\n\t\t\tagent_mode?: string | string[];\n\t  }\n\t| {\n\t\t\ttype: \"http\";\n\t\t\turl: string;\n\t\t\theaders?: Record<string, string>;\n\t\t\toauthClientId?: string;\n\t\t\toauthDeviceFlow?: boolean;\n\t\t\toauthScopes?: string;\n\t\t\tdisabled?: boolean;\n\t\t\tautoApprove?: string[];\n\t\t\tstartupTimeout?: number;\n\t\t\tdebug?: boolean;\n\t\t\tdisplayName?: string;\n\t\t\tdescription?: string;\n\t\t\t/** 该 server 的工具允许出现的工作模式 slug（agent_mode 轴，缺省/空 = 通用）。见 ADR-0046。 */\n\t\t\tagent_mode?: string | string[];\n\t  };\n\nexport interface PluginAgentManifest {\n\tsystemPrompt?: {\n\t\t/**\n\t\t * Plugin-packaged prompt contribution file paths. Main-process aggregation\n\t\t * resolves these relative to the installed plugin root.\n\t\t */\n\t\tpromptPaths?: string[];\n\t};\n\t/** Plugin-packaged skill files or directories to add to the agent resource graph. */\n\tskillPaths?: string[];\n\t/**\n\t * Plugin-scoped MCP servers. Either a relative path to `.mcp.json`\n\t * (shape `{ mcpServers: { ... } }`) or an inline map of server configs.\n\t * Requires permission `agent.mcp.control`. Never written into user mcp.json.\n\t */\n\tmcpServers?: string | Record<string, PluginMcpServerConfig>;\n\t/** Declarative tool visibility policy. Names are tool ids after registration. */\n\ttoolPolicy?: {\n\t\tallow?: string[];\n\t\tdeny?: string[];\n\t};\n}\n"]}
+{"version":3,"file":"manifest.d.ts","sourceRoot":"","sources":["../src/manifest.ts"],"names":[],"mappings":"AAGA,OAAO,EASN,KAAK,cAAc,EAEnB,KAAK,qBAAqB,EAG1B,MAAM,sBAAsB,CAAC;AAG9B,OAAO,EACN,yBAAyB,EACzB,2BAA2B,EAC3B,uBAAuB,EACvB,wBAAwB,EACxB,cAAc,EACd,oBAAoB,EACpB,+BAA+B,EAC/B,2BAA2B,EAC3B,gCAAgC,EAChC,oCAAoC,EACpC,2BAA2B,EAC3B,sBAAsB,EACtB,6BAA6B,EAC7B,mBAAmB,GACnB,MAAM,sBAAsB,CAAC;AAC9B,YAAY,EACX,mBAAmB,EACnB,qBAAqB,EACrB,cAAc,EACd,mBAAmB,EACnB,qBAAqB,EACrB,qBAAqB,EACrB,mBAAmB,GACnB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,YAAY,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAEzD,MAAM,WAAW,+BAA+B;IAC/C,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,GAAG,mBAAmB,CAAC;CACnC;AAuMD,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,CAIjD;AAED,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAI3D;AAED,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAiBnF;AAED,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,EAAE,CAIhE;AAED,8GAAoE;AACpE,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,EAAE,GAAG,SAAS,CAK9E;AAED,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,GAAG,qBAAqB,CAG5F;AAED,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAMhE;AAED,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAE9D;AAED,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,OAAO,GAAG,cAAc,CAsDhE;AAED,wBAAgB,2BAA2B,CAC1C,QAAQ,EAAE,cAAc,GACtB,+BAA+B,EAAE,CAoBnC;AAkBD,wBAAgB,qBAAqB,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAWjF","sourcesContent":["import { type Static, type TSchema } from \"@sinclair/typebox\";\nimport type { ValueError } from \"@sinclair/typebox/errors\";\nimport { Value } from \"@sinclair/typebox/value\";\nimport {\n\tPluginCommandNameSchema,\n\tPluginCommandNamesSchema,\n\tPluginIdSchema,\n\tPluginManifestSchema,\n\tPluginMcpServerConfigSchema,\n\tPluginVersionSchema,\n\ttype PluginAgentManifest,\n\ttype PluginBrowserManifest,\n\ttype PluginManifest,\n\ttype PluginManifestInput,\n\ttype PluginMcpServerConfig,\n\ttype PluginNetworkManifest,\n\ttype PluginSettingSchema,\n} from \"./manifest-schema.js\";\nimport { PLUGIN_PERMISSIONS, type PluginPermission } from \"./permissions.js\";\n\nexport {\n\tPluginAgentManifestSchema,\n\tPluginBrowserManifestSchema,\n\tPluginCommandNameSchema,\n\tPluginCommandNamesSchema,\n\tPluginIdSchema,\n\tPluginManifestSchema,\n\tPluginMcpHttpServerConfigSchema,\n\tPluginMcpServerConfigSchema,\n\tPluginMcpStdioServerConfigSchema,\n\tPluginModuleFederationManifestSchema,\n\tPluginNetworkManifestSchema,\n\tPluginPermissionSchema,\n\tPluginSettingDefinitionSchema,\n\tPluginVersionSchema,\n} from \"./manifest-schema.js\";\nexport type {\n\tPluginAgentManifest,\n\tPluginBrowserManifest,\n\tPluginManifest,\n\tPluginManifestInput,\n\tPluginMcpServerConfig,\n\tPluginNetworkManifest,\n\tPluginSettingSchema,\n} from \"./manifest-schema.js\";\nexport { PLUGIN_PERMISSIONS } from \"./permissions.js\";\nexport type { PluginPermission } from \"./permissions.js\";\n\nexport interface PluginManifestResourceReference {\n\tfield: string;\n\tpath: string;\n\tkind: \"file\" | \"file-or-directory\";\n}\n\nfunction schemaErrorPath(path: string): string {\n\tif (!path) return \"\";\n\treturn path\n\t\t.split(\"/\")\n\t\t.slice(1)\n\t\t.map((segment) => segment.replace(/~1/g, \"/\").replace(/~0/g, \"~\"))\n\t\t.map((segment) => {\n\t\t\tif (segment === \"\") return '[\"\"]';\n\t\t\treturn /^\\d+$/.test(segment) ? `[${segment}]` : `.${segment}`;\n\t\t})\n\t\t.join(\"\");\n}\n\nfunction mostSpecificSchemaError(issue: ValueError): ValueError {\n\tconst nested = issue.errors.flatMap((iterator) =>\n\t\t[...iterator].map((child) => mostSpecificSchemaError(child)),\n\t);\n\tconst deeper = nested.filter((child) => child.path.length > issue.path.length);\n\tif (deeper.length === 0) return issue;\n\treturn deeper.reduce((best, child) => (child.path.length > best.path.length ? child : best));\n}\n\nfunction assertSchema<Schema extends TSchema>(\n\tschema: Schema,\n\tvalue: unknown,\n\tfieldName: string,\n): asserts value is Static<Schema> {\n\tif (Value.Check(schema, value)) return;\n\tconst firstIssue = Value.Errors(schema, value).First();\n\tconst issue = firstIssue ? mostSpecificSchemaError(firstIssue) : undefined;\n\tconst location = `${fieldName}${schemaErrorPath(issue?.path ?? \"\")}`;\n\tthrow new Error(`Invalid plugin ${location}: ${issue?.message ?? \"schema validation failed\"}`);\n}\n\nfunction trimString(value: string): string {\n\treturn value.trim();\n}\n\nfunction normalizeStringArray(values: string[] | undefined): string[] {\n\treturn (values ?? []).map(trimString);\n}\n\nfunction normalizeOptionalAgentModes(value: string | string[] | undefined): string | string[] | undefined {\n\tif (value === undefined) return undefined;\n\treturn Array.isArray(value) ? normalizeStringArray(value) : trimString(value);\n}\n\nfunction normalizeSetting(setting: PluginSettingSchema): PluginSettingSchema {\n\tconst common = {\n\t\tkey: trimString(setting.key),\n\t\tdescription: setting.description,\n\t\tdefault: setting.default,\n\t\tenum: setting.enum?.map(trimString),\n\t\tvisibleWhen: setting.visibleWhen\n\t\t\t? {\n\t\t\t\t\tkey: trimString(setting.visibleWhen.key),\n\t\t\t\t\tin: setting.visibleWhen.in.map(trimString),\n\t\t\t\t}\n\t\t\t: undefined,\n\t};\n\tif (setting.type === \"desc\") {\n\t\treturn {\n\t\t\t...common,\n\t\t\ttype: \"desc\",\n\t\t\ttitle: setting.title === undefined ? undefined : trimString(setting.title),\n\t\t};\n\t}\n\treturn {\n\t\t...common,\n\t\ttype: setting.type,\n\t\ttitle: trimString(setting.title),\n\t};\n}\n\nfunction normalizeSettings(settings: PluginSettingSchema[] | undefined): PluginSettingSchema[] | undefined {\n\tif (!settings || settings.length === 0) return undefined;\n\treturn settings.map(normalizeSetting);\n}\n\nfunction normalizePermissions(permissions: PluginPermission[] | undefined): PluginPermission[] {\n\treturn Array.from(new Set(permissions ?? []));\n}\n\nfunction normalizeAllowedHost(value: string, fieldName: \"network\" | \"browser\"): string {\n\tconst raw = trimString(value).toLowerCase();\n\tif (raw === \"*\") return raw;\n\tconst wildcard = raw.startsWith(\"*.\");\n\tconst candidate = wildcard ? raw.slice(2) : raw;\n\tif (!candidate || candidate.includes(\"*\") || /[\\\\/?#@]/.test(candidate)) {\n\t\tthrow new Error(`Invalid plugin ${fieldName}.allowedHosts entry: ${value}`);\n\t}\n\tconst unwrapped = candidate.startsWith(\"[\") && candidate.endsWith(\"]\") ? candidate.slice(1, -1) : candidate;\n\tif (wildcard && unwrapped.includes(\":\")) {\n\t\tthrow new Error(`Invalid plugin ${fieldName}.allowedHosts entry: ${value}`);\n\t}\n\ttry {\n\t\tconst parsed = new URL(`http://${unwrapped.includes(\":\") ? `[${unwrapped}]` : unwrapped}`);\n\t\tconst hostname = parsed.hostname.replace(/^\\[|\\]$/g, \"\").replace(/\\.$/, \"\").toLowerCase();\n\t\tif (!hostname || parsed.port || parsed.username || parsed.password) throw new Error(\"invalid host\");\n\t\treturn wildcard ? `*.${hostname}` : hostname;\n\t} catch {\n\t\tthrow new Error(`Invalid plugin ${fieldName}.allowedHosts entry: ${value}`);\n\t}\n}\n\nfunction normalizeNetworkManifest(network: PluginNetworkManifest | undefined): PluginNetworkManifest | undefined {\n\tif (!network) return undefined;\n\treturn { allowedHosts: Array.from(new Set(network.allowedHosts.map((host) => normalizeAllowedHost(host, \"network\")))) };\n}\n\nfunction normalizeBrowserManifest(browser: PluginBrowserManifest | undefined): PluginBrowserManifest | undefined {\n\tif (!browser) return undefined;\n\treturn { allowedHosts: Array.from(new Set(browser.allowedHosts.map((host) => normalizeAllowedHost(host, \"browser\")))) };\n}\n\nfunction normalizeModuleFederation(\n\tmoduleFederation: PluginManifestInput[\"moduleFederation\"],\n): PluginManifest[\"moduleFederation\"] {\n\treturn {\n\t\tremoteName: trimString(moduleFederation.remoteName),\n\t\texpose: trimString(moduleFederation.expose),\n\t};\n}\n\nfunction normalizeToolPolicy(\n\ttoolPolicy: PluginAgentManifest[\"toolPolicy\"],\n): PluginAgentManifest[\"toolPolicy\"] {\n\tif (!toolPolicy) return undefined;\n\treturn {\n\t\tallow: normalizeStringArray(toolPolicy.allow),\n\t\tdeny: normalizeStringArray(toolPolicy.deny),\n\t};\n}\n\nfunction normalizeMcpServers(\n\tmcpServers: PluginAgentManifest[\"mcpServers\"],\n): PluginAgentManifest[\"mcpServers\"] {\n\tif (mcpServers === undefined) return undefined;\n\tif (typeof mcpServers === \"string\") {\n\t\treturn validatePluginRelativePath(trimString(mcpServers), \"agent.mcpServers\");\n\t}\n\tconst result: Record<string, PluginMcpServerConfig> = {};\n\tfor (const [name, config] of Object.entries(mcpServers)) {\n\t\tresult[trimString(name)] = normalizePluginMcpServerConfig(config);\n\t}\n\treturn result;\n}\n\nfunction normalizeAgentManifest(agent: PluginAgentManifest | undefined): PluginAgentManifest | undefined {\n\tif (!agent) return undefined;\n\treturn {\n\t\tsystemPrompt: agent.systemPrompt\n\t\t\t? {\n\t\t\t\t\tpromptPaths: normalizeStringArray(agent.systemPrompt.promptPaths).map((path) =>\n\t\t\t\t\t\tvalidatePluginRelativePath(path, \"agent.systemPrompt.promptPaths\"),\n\t\t\t\t\t),\n\t\t\t\t}\n\t\t\t: undefined,\n\t\tskillPaths: normalizeStringArray(agent.skillPaths).map((path) =>\n\t\t\tvalidatePluginRelativePath(path, \"agent.skillPaths\"),\n\t\t),\n\t\tmcpServers: normalizeMcpServers(agent.mcpServers),\n\t\ttoolPolicy: normalizeToolPolicy(agent.toolPolicy),\n\t};\n}\n\nfunction normalizePluginMcpServerConfig(config: PluginMcpServerConfig): PluginMcpServerConfig {\n\tconst common = {\n\t\tdisabled: config.disabled,\n\t\tautoApprove: config.autoApprove?.map(trimString),\n\t\tstartupTimeout: config.startupTimeout,\n\t\tdebug: config.debug,\n\t\tdisplayName: config.displayName,\n\t\tdescription: config.description,\n\t\tagent_mode: normalizeOptionalAgentModes(config.agent_mode),\n\t};\n\tif (config.type === \"http\") {\n\t\treturn {\n\t\t\ttype: \"http\",\n\t\t\turl: trimString(config.url),\n\t\t\theaders: config.headers ? { ...config.headers } : undefined,\n\t\t\toauthClientId: config.oauthClientId,\n\t\t\toauthDeviceFlow: config.oauthDeviceFlow,\n\t\t\toauthScopes: config.oauthScopes,\n\t\t\t...common,\n\t\t};\n\t}\n\treturn {\n\t\ttype: config.type,\n\t\tcommand: trimString(config.command),\n\t\targs: config.args ? [...config.args] : undefined,\n\t\tenv: config.env ? { ...config.env } : undefined,\n\t\tcwd: config.cwd,\n\t\t...common,\n\t};\n}\n\nexport function validatePluginId(id: string): void {\n\tif (!Value.Check(PluginIdSchema, id)) {\n\t\tthrow new Error(\"Plugin id must be 1-64 chars: lowercase letters, numbers, dot, underscore, or dash\");\n\t}\n}\n\nexport function validatePluginVersion(version: string): void {\n\tif (!Value.Check(PluginVersionSchema, version)) {\n\t\tthrow new Error(\"Plugin version must be 1-64 chars and cannot contain path separators\");\n\t}\n}\n\nexport function validatePluginRelativePath(value: string, fieldName: string): string {\n\tif (value.startsWith(\"/\") || /^[a-zA-Z]:/.test(value)) {\n\t\tthrow new Error(`Invalid plugin ${fieldName}`);\n\t}\n\tconst parts: string[] = [];\n\tfor (const part of value.replace(/\\\\/g, \"/\").split(\"/\")) {\n\t\tif (part === \"\" || part === \".\") continue;\n\t\tif (part === \"..\") {\n\t\t\tif (parts.length === 0) throw new Error(`Invalid plugin ${fieldName}`);\n\t\t\tparts.pop();\n\t\t\tcontinue;\n\t\t}\n\t\tparts.push(part);\n\t}\n\tconst normalized = parts.join(\"/\");\n\tif (!normalized) throw new Error(`Invalid plugin ${fieldName}`);\n\treturn normalized;\n}\n\nexport function parsePluginCommandNames(value: unknown): string[] {\n\tif (value === undefined) return [];\n\tassertSchema(PluginCommandNamesSchema, value, \"commands\");\n\treturn Array.from(new Set(value));\n}\n\n/** @deprecated agent_mode 已无任何运行时语义（ADR-0071），保留仅为容忍既有 manifest。 */\nexport function normalizePluginAgentModes(value: unknown): string[] | undefined {\n\tif (value === undefined || value === null) return undefined;\n\tconst values = Array.isArray(value) ? value : [value];\n\tconst modes = values.map((item) => String(item).trim()).filter(Boolean);\n\treturn modes.length > 0 ? modes : undefined;\n}\n\nexport function parsePluginMcpServerConfig(name: string, raw: unknown): PluginMcpServerConfig {\n\tassertSchema(PluginMcpServerConfigSchema, raw, `MCP server '${name}'`);\n\treturn normalizePluginMcpServerConfig(raw);\n}\n\nexport function isPluginPassthroughIconRef(icon: string): boolean {\n\treturn (\n\t\ticon.startsWith(\"http://\") ||\n\t\ticon.startsWith(\"https://\") ||\n\t\t/^[a-z0-9]+(?:-[a-z0-9]+)*:[a-z0-9]+(?:-[a-z0-9]+)*$/.test(icon)\n\t);\n}\n\nexport function isPluginPackagedIconPath(icon: string): boolean {\n\treturn !isPluginPassthroughIconRef(icon);\n}\n\nexport function parsePluginManifest(raw: unknown): PluginManifest {\n\tif (typeof raw === \"object\" && raw !== null && \"runtime\" in raw) {\n\t\tthrow new Error(\n\t\t\t'Invalid plugin manifest.runtime: runtime selection is unsupported; plugins use Module Federation.',\n\t\t);\n\t}\n\tassertSchema(PluginManifestSchema, raw, \"manifest\");\n\tconst commands = parsePluginCommandNames(raw.commands);\n\tconst icon = raw.icon === undefined ? undefined : trimString(raw.icon);\n\tconst permissions = normalizePermissions(raw.permissions);\n\tconst network = normalizeNetworkManifest(raw.network);\n\tconst browser = normalizeBrowserManifest(raw.browser);\n\tif (permissions.includes(\"network.fetch\") && !network) {\n\t\tthrow new Error(\"Plugin network.allowedHosts is required with network.fetch\");\n\t}\n\tconst browserPermissions = permissions.filter((permission) => permission.startsWith(\"browser.\"));\n\tif (browserPermissions.length > 0 && !browser) {\n\t\tthrow new Error(\"Plugin browser.allowedHosts is required with browser permissions\");\n\t}\n\tif (permissions.includes(\"browser.interact\") && !permissions.includes(\"browser.read\")) {\n\t\tthrow new Error(\"Plugin browser.interact requires browser.read\");\n\t}\n\treturn {\n\t\tid: raw.id,\n\t\tname: trimString(raw.name),\n\t\tversion: raw.version,\n\t\tpluginApiVersion: trimString(raw.pluginApiVersion),\n\t\tentry: validatePluginRelativePath(trimString(raw.entry), \"entry\"),\n\t\tmoduleFederation: normalizeModuleFederation(raw.moduleFederation),\n\t\tagent: normalizeAgentManifest(raw.agent),\n\t\tstyles: normalizeStringArray(raw.styles).map((style) => validatePluginRelativePath(style, \"styles\")),\n\t\tpermissions,\n\t\tnetwork,\n\t\tbrowser,\n\t\tcommands: commands.length > 0 ? commands : undefined,\n\t\tcontributes: raw.contributes\n\t\t\t? (() => {\n\t\t\t\t\tconst settings = normalizeSettings(raw.contributes.settings);\n\t\t\t\t\treturn settings ? { settings } : undefined;\n\t\t\t\t})()\n\t\t\t: undefined,\n\t\tdescription: raw.description,\n\t\tauthor: raw.author,\n\t\ticon:\n\t\t\ticon === undefined || isPluginPassthroughIconRef(icon)\n\t\t\t\t? icon\n\t\t\t\t: validatePluginRelativePath(icon, \"icon\"),\n\t\tguidingWords: raw.guidingWords?.map(trimString),\n\t\tdefaultLocale: raw.defaultLocale ?? \"zh\",\n\t\tcontributionMode: raw.contributionMode\n\t\t\t? { hardIsolation: raw.contributionMode.hardIsolation === true }\n\t\t\t: undefined,\n\t\tagent_mode: normalizePluginAgentModes(raw.agent_mode),\n\t};\n}\n\nexport function listPluginManifestResources(\n\tmanifest: PluginManifest,\n): PluginManifestResourceReference[] {\n\tconst resources: PluginManifestResourceReference[] = [\n\t\t{ field: \"entry\", path: manifest.entry, kind: \"file\" },\n\t];\n\tfor (const stylePath of manifest.styles ?? []) {\n\t\tresources.push({ field: \"styles\", path: stylePath, kind: \"file\" });\n\t}\n\tif (manifest.icon && isPluginPackagedIconPath(manifest.icon)) {\n\t\tresources.push({ field: \"icon\", path: manifest.icon, kind: \"file\" });\n\t}\n\tfor (const promptPath of manifest.agent?.systemPrompt?.promptPaths ?? []) {\n\t\tresources.push({ field: \"agent.systemPrompt.promptPaths\", path: promptPath, kind: \"file-or-directory\" });\n\t}\n\tfor (const skillPath of manifest.agent?.skillPaths ?? []) {\n\t\tresources.push({ field: \"agent.skillPaths\", path: skillPath, kind: \"file-or-directory\" });\n\t}\n\tif (typeof manifest.agent?.mcpServers === \"string\") {\n\t\tresources.push({ field: \"agent.mcpServers\", path: manifest.agent.mcpServers, kind: \"file\" });\n\t}\n\treturn resources;\n}\n\nfunction parseApiVersion(value: string): readonly [number, number, number] | undefined {\n\tconst match = /^(\\d+)\\.(\\d+)\\.(\\d+)$/.exec(value);\n\tif (!match) return undefined;\n\treturn [Number(match[1]), Number(match[2]), Number(match[3])];\n}\n\nfunction compareApiVersions(\n\tleft: readonly [number, number, number],\n\tright: readonly [number, number, number],\n): number {\n\tfor (let index = 0; index < left.length; index += 1) {\n\t\tif (left[index] !== right[index]) return left[index] - right[index];\n\t}\n\treturn 0;\n}\n\nexport function isPluginApiCompatible(hostVersion: string, range: string): boolean {\n\tconst host = parseApiVersion(hostVersion);\n\tif (!host) return false;\n\tconst normalized = range.trim();\n\tconst exact = parseApiVersion(normalized);\n\tif (exact) return exact[0] === host[0] && compareApiVersions(host, exact) >= 0;\n\tconst caret = normalized.startsWith(\"^\") ? parseApiVersion(normalized.slice(1)) : undefined;\n\tif (caret) return caret[0] === host[0] && compareApiVersions(host, caret) >= 0;\n\tif (normalized === `^${host[0]}` || normalized === `${host[0]}.x`) return true;\n\tconst minimum = normalized.startsWith(\">=\") ? parseApiVersion(normalized.slice(2)) : undefined;\n\treturn minimum !== undefined && compareApiVersions(host, minimum) >= 0;\n}\n"]}

package/dist/manifest.js

@@ -1,2 +1,343 @@
-export {};
+import { Value } from "@sinclair/typebox/value";
+import { PluginCommandNamesSchema, PluginIdSchema, PluginManifestSchema, PluginMcpServerConfigSchema, PluginVersionSchema, } from "./manifest-schema.js";
+import "./permissions.js";
+export { PluginAgentManifestSchema, PluginBrowserManifestSchema, PluginCommandNameSchema, PluginCommandNamesSchema, PluginIdSchema, PluginManifestSchema, PluginMcpHttpServerConfigSchema, PluginMcpServerConfigSchema, PluginMcpStdioServerConfigSchema, PluginModuleFederationManifestSchema, PluginNetworkManifestSchema, PluginPermissionSchema, PluginSettingDefinitionSchema, PluginVersionSchema, } from "./manifest-schema.js";
+export { PLUGIN_PERMISSIONS } from "./permissions.js";
+function schemaErrorPath(path) {
+    if (!path)
+        return "";
+    return path
+        .split("/")
+        .slice(1)
+        .map((segment) => segment.replace(/~1/g, "/").replace(/~0/g, "~"))
+        .map((segment) => {
+        if (segment === "")
+            return '[""]';
+        return /^\d+$/.test(segment) ? `[${segment}]` : `.${segment}`;
+    })
+        .join("");
+}
+function mostSpecificSchemaError(issue) {
+    const nested = issue.errors.flatMap((iterator) => [...iterator].map((child) => mostSpecificSchemaError(child)));
+    const deeper = nested.filter((child) => child.path.length > issue.path.length);
+    if (deeper.length === 0)
+        return issue;
+    return deeper.reduce((best, child) => (child.path.length > best.path.length ? child : best));
+}
+function assertSchema(schema, value, fieldName) {
+    if (Value.Check(schema, value))
+        return;
+    const firstIssue = Value.Errors(schema, value).First();
+    const issue = firstIssue ? mostSpecificSchemaError(firstIssue) : undefined;
+    const location = `${fieldName}${schemaErrorPath(issue?.path ?? "")}`;
+    throw new Error(`Invalid plugin ${location}: ${issue?.message ?? "schema validation failed"}`);
+}
+function trimString(value) {
+    return value.trim();
+}
+function normalizeStringArray(values) {
+    return (values ?? []).map(trimString);
+}
+function normalizeOptionalAgentModes(value) {
+    if (value === undefined)
+        return undefined;
+    return Array.isArray(value) ? normalizeStringArray(value) : trimString(value);
+}
+function normalizeSetting(setting) {
+    const common = {
+        key: trimString(setting.key),
+        description: setting.description,
+        default: setting.default,
+        enum: setting.enum?.map(trimString),
+        visibleWhen: setting.visibleWhen
+            ? {
+                key: trimString(setting.visibleWhen.key),
+                in: setting.visibleWhen.in.map(trimString),
+            }
+            : undefined,
+    };
+    if (setting.type === "desc") {
+        return {
+            ...common,
+            type: "desc",
+            title: setting.title === undefined ? undefined : trimString(setting.title),
+        };
+    }
+    return {
+        ...common,
+        type: setting.type,
+        title: trimString(setting.title),
+    };
+}
+function normalizeSettings(settings) {
+    if (!settings || settings.length === 0)
+        return undefined;
+    return settings.map(normalizeSetting);
+}
+function normalizePermissions(permissions) {
+    return Array.from(new Set(permissions ?? []));
+}
+function normalizeAllowedHost(value, fieldName) {
+    const raw = trimString(value).toLowerCase();
+    if (raw === "*")
+        return raw;
+    const wildcard = raw.startsWith("*.");
+    const candidate = wildcard ? raw.slice(2) : raw;
+    if (!candidate || candidate.includes("*") || /[\\/?#@]/.test(candidate)) {
+        throw new Error(`Invalid plugin ${fieldName}.allowedHosts entry: ${value}`);
+    }
+    const unwrapped = candidate.startsWith("[") && candidate.endsWith("]") ? candidate.slice(1, -1) : candidate;
+    if (wildcard && unwrapped.includes(":")) {
+        throw new Error(`Invalid plugin ${fieldName}.allowedHosts entry: ${value}`);
+    }
+    try {
+        const parsed = new URL(`http://${unwrapped.includes(":") ? `[${unwrapped}]` : unwrapped}`);
+        const hostname = parsed.hostname.replace(/^\[|\]$/g, "").replace(/\.$/, "").toLowerCase();
+        if (!hostname || parsed.port || parsed.username || parsed.password)
+            throw new Error("invalid host");
+        return wildcard ? `*.${hostname}` : hostname;
+    }
+    catch {
+        throw new Error(`Invalid plugin ${fieldName}.allowedHosts entry: ${value}`);
+    }
+}
+function normalizeNetworkManifest(network) {
+    if (!network)
+        return undefined;
+    return { allowedHosts: Array.from(new Set(network.allowedHosts.map((host) => normalizeAllowedHost(host, "network")))) };
+}
+function normalizeBrowserManifest(browser) {
+    if (!browser)
+        return undefined;
+    return { allowedHosts: Array.from(new Set(browser.allowedHosts.map((host) => normalizeAllowedHost(host, "browser")))) };
+}
+function normalizeModuleFederation(moduleFederation) {
+    return {
+        remoteName: trimString(moduleFederation.remoteName),
+        expose: trimString(moduleFederation.expose),
+    };
+}
+function normalizeToolPolicy(toolPolicy) {
+    if (!toolPolicy)
+        return undefined;
+    return {
+        allow: normalizeStringArray(toolPolicy.allow),
+        deny: normalizeStringArray(toolPolicy.deny),
+    };
+}
+function normalizeMcpServers(mcpServers) {
+    if (mcpServers === undefined)
+        return undefined;
+    if (typeof mcpServers === "string") {
+        return validatePluginRelativePath(trimString(mcpServers), "agent.mcpServers");
+    }
+    const result = {};
+    for (const [name, config] of Object.entries(mcpServers)) {
+        result[trimString(name)] = normalizePluginMcpServerConfig(config);
+    }
+    return result;
+}
+function normalizeAgentManifest(agent) {
+    if (!agent)
+        return undefined;
+    return {
+        systemPrompt: agent.systemPrompt
+            ? {
+                promptPaths: normalizeStringArray(agent.systemPrompt.promptPaths).map((path) => validatePluginRelativePath(path, "agent.systemPrompt.promptPaths")),
+            }
+            : undefined,
+        skillPaths: normalizeStringArray(agent.skillPaths).map((path) => validatePluginRelativePath(path, "agent.skillPaths")),
+        mcpServers: normalizeMcpServers(agent.mcpServers),
+        toolPolicy: normalizeToolPolicy(agent.toolPolicy),
+    };
+}
+function normalizePluginMcpServerConfig(config) {
+    const common = {
+        disabled: config.disabled,
+        autoApprove: config.autoApprove?.map(trimString),
+        startupTimeout: config.startupTimeout,
+        debug: config.debug,
+        displayName: config.displayName,
+        description: config.description,
+        agent_mode: normalizeOptionalAgentModes(config.agent_mode),
+    };
+    if (config.type === "http") {
+        return {
+            type: "http",
+            url: trimString(config.url),
+            headers: config.headers ? { ...config.headers } : undefined,
+            oauthClientId: config.oauthClientId,
+            oauthDeviceFlow: config.oauthDeviceFlow,
+            oauthScopes: config.oauthScopes,
+            ...common,
+        };
+    }
+    return {
+        type: config.type,
+        command: trimString(config.command),
+        args: config.args ? [...config.args] : undefined,
+        env: config.env ? { ...config.env } : undefined,
+        cwd: config.cwd,
+        ...common,
+    };
+}
+export function validatePluginId(id) {
+    if (!Value.Check(PluginIdSchema, id)) {
+        throw new Error("Plugin id must be 1-64 chars: lowercase letters, numbers, dot, underscore, or dash");
+    }
+}
+export function validatePluginVersion(version) {
+    if (!Value.Check(PluginVersionSchema, version)) {
+        throw new Error("Plugin version must be 1-64 chars and cannot contain path separators");
+    }
+}
+export function validatePluginRelativePath(value, fieldName) {
+    if (value.startsWith("/") || /^[a-zA-Z]:/.test(value)) {
+        throw new Error(`Invalid plugin ${fieldName}`);
+    }
+    const parts = [];
+    for (const part of value.replace(/\\/g, "/").split("/")) {
+        if (part === "" || part === ".")
+            continue;
+        if (part === "..") {
+            if (parts.length === 0)
+                throw new Error(`Invalid plugin ${fieldName}`);
+            parts.pop();
+            continue;
+        }
+        parts.push(part);
+    }
+    const normalized = parts.join("/");
+    if (!normalized)
+        throw new Error(`Invalid plugin ${fieldName}`);
+    return normalized;
+}
+export function parsePluginCommandNames(value) {
+    if (value === undefined)
+        return [];
+    assertSchema(PluginCommandNamesSchema, value, "commands");
+    return Array.from(new Set(value));
+}
+/** @deprecated agent_mode 已无任何运行时语义（ADR-0071），保留仅为容忍既有 manifest。 */
+export function normalizePluginAgentModes(value) {
+    if (value === undefined || value === null)
+        return undefined;
+    const values = Array.isArray(value) ? value : [value];
+    const modes = values.map((item) => String(item).trim()).filter(Boolean);
+    return modes.length > 0 ? modes : undefined;
+}
+export function parsePluginMcpServerConfig(name, raw) {
+    assertSchema(PluginMcpServerConfigSchema, raw, `MCP server '${name}'`);
+    return normalizePluginMcpServerConfig(raw);
+}
+export function isPluginPassthroughIconRef(icon) {
+    return (icon.startsWith("http://") ||
+        icon.startsWith("https://") ||
+        /^[a-z0-9]+(?:-[a-z0-9]+)*:[a-z0-9]+(?:-[a-z0-9]+)*$/.test(icon));
+}
+export function isPluginPackagedIconPath(icon) {
+    return !isPluginPassthroughIconRef(icon);
+}
+export function parsePluginManifest(raw) {
+    if (typeof raw === "object" && raw !== null && "runtime" in raw) {
+        throw new Error('Invalid plugin manifest.runtime: runtime selection is unsupported; plugins use Module Federation.');
+    }
+    assertSchema(PluginManifestSchema, raw, "manifest");
+    const commands = parsePluginCommandNames(raw.commands);
+    const icon = raw.icon === undefined ? undefined : trimString(raw.icon);
+    const permissions = normalizePermissions(raw.permissions);
+    const network = normalizeNetworkManifest(raw.network);
+    const browser = normalizeBrowserManifest(raw.browser);
+    if (permissions.includes("network.fetch") && !network) {
+        throw new Error("Plugin network.allowedHosts is required with network.fetch");
+    }
+    const browserPermissions = permissions.filter((permission) => permission.startsWith("browser."));
+    if (browserPermissions.length > 0 && !browser) {
+        throw new Error("Plugin browser.allowedHosts is required with browser permissions");
+    }
+    if (permissions.includes("browser.interact") && !permissions.includes("browser.read")) {
+        throw new Error("Plugin browser.interact requires browser.read");
+    }
+    return {
+        id: raw.id,
+        name: trimString(raw.name),
+        version: raw.version,
+        pluginApiVersion: trimString(raw.pluginApiVersion),
+        entry: validatePluginRelativePath(trimString(raw.entry), "entry"),
+        moduleFederation: normalizeModuleFederation(raw.moduleFederation),
+        agent: normalizeAgentManifest(raw.agent),
+        styles: normalizeStringArray(raw.styles).map((style) => validatePluginRelativePath(style, "styles")),
+        permissions,
+        network,
+        browser,
+        commands: commands.length > 0 ? commands : undefined,
+        contributes: raw.contributes
+            ? (() => {
+                const settings = normalizeSettings(raw.contributes.settings);
+                return settings ? { settings } : undefined;
+            })()
+            : undefined,
+        description: raw.description,
+        author: raw.author,
+        icon: icon === undefined || isPluginPassthroughIconRef(icon)
+            ? icon
+            : validatePluginRelativePath(icon, "icon"),
+        guidingWords: raw.guidingWords?.map(trimString),
+        defaultLocale: raw.defaultLocale ?? "zh",
+        contributionMode: raw.contributionMode
+            ? { hardIsolation: raw.contributionMode.hardIsolation === true }
+            : undefined,
+        agent_mode: normalizePluginAgentModes(raw.agent_mode),
+    };
+}
+export function listPluginManifestResources(manifest) {
+    const resources = [
+        { field: "entry", path: manifest.entry, kind: "file" },
+    ];
+    for (const stylePath of manifest.styles ?? []) {
+        resources.push({ field: "styles", path: stylePath, kind: "file" });
+    }
+    if (manifest.icon && isPluginPackagedIconPath(manifest.icon)) {
+        resources.push({ field: "icon", path: manifest.icon, kind: "file" });
+    }
+    for (const promptPath of manifest.agent?.systemPrompt?.promptPaths ?? []) {
+        resources.push({ field: "agent.systemPrompt.promptPaths", path: promptPath, kind: "file-or-directory" });
+    }
+    for (const skillPath of manifest.agent?.skillPaths ?? []) {
+        resources.push({ field: "agent.skillPaths", path: skillPath, kind: "file-or-directory" });
+    }
+    if (typeof manifest.agent?.mcpServers === "string") {
+        resources.push({ field: "agent.mcpServers", path: manifest.agent.mcpServers, kind: "file" });
+    }
+    return resources;
+}
+function parseApiVersion(value) {
+    const match = /^(\d+)\.(\d+)\.(\d+)$/.exec(value);
+    if (!match)
+        return undefined;
+    return [Number(match[1]), Number(match[2]), Number(match[3])];
+}
+function compareApiVersions(left, right) {
+    for (let index = 0; index < left.length; index += 1) {
+        if (left[index] !== right[index])
+            return left[index] - right[index];
+    }
+    return 0;
+}
+export function isPluginApiCompatible(hostVersion, range) {
+    const host = parseApiVersion(hostVersion);
+    if (!host)
+        return false;
+    const normalized = range.trim();
+    const exact = parseApiVersion(normalized);
+    if (exact)
+        return exact[0] === host[0] && compareApiVersions(host, exact) >= 0;
+    const caret = normalized.startsWith("^") ? parseApiVersion(normalized.slice(1)) : undefined;
+    if (caret)
+        return caret[0] === host[0] && compareApiVersions(host, caret) >= 0;
+    if (normalized === `^${host[0]}` || normalized === `${host[0]}.x`)
+        return true;
+    const minimum = normalized.startsWith(">=") ? parseApiVersion(normalized.slice(2)) : undefined;
+    return minimum !== undefined && compareApiVersions(host, minimum) >= 0;
+}
 //# sourceMappingURL=manifest.js.map