@vibe-agent-toolkit/agent-skills 0.1.41-rc.7 → 0.1.41

package/dist/schemas/installed-plugins-registry.js

@@ -1,13 +1,42 @@
 import { z } from 'zod';
 import { zodToJsonSchema } from 'zod-to-json-schema';
+import { isRecord, recordDrift, recordUnknownKeys, } from './registry-drift.js';
+/**
+ * `installed_plugins.json` is written and owned by Claude Code — VAT only reads it.
+ * Per VAT's Postel's Law rule (CLAUDE.md: "Reading outside world → liberal"), these
+ * schemas `.passthrough()` and keep `scope` open: an unrecognized field or install
+ * scope is drift in someone else's file, not an error in the user's setup.
+ *
+ * Modelling it strictly turned every shape Claude Code added — the `project` scope,
+ * its `projectPath` companion, the removal of `isLocal` — into a wall of false errors.
+ *
+ * Liberality alone would be blindness, so it is paired with
+ * {@link detectInstalledPluginsRegistryDrift}: what passthrough absorbs still gets
+ * reported, at `info`, as `REGISTRY_SHAPE_DRIFT`.
+ */
+/**
+ * Install scopes VAT's model knows about. Not enforced by the schema — a scope
+ * outside this list parses fine and is reported as drift instead.
+ */
+export const KNOWN_INSTALLATION_SCOPES = [
+    'user',
+    'system',
+    'project',
+    'local',
+];
+const KNOWN_SCOPE_SET = new Set(KNOWN_INSTALLATION_SCOPES);
 /**
  * Single plugin installation entry
  */
 const PluginInstallationSchema = z
     .object({
     scope: z
-        .enum(['user', 'system'])
-        .describe('Installation scope (user or system-wide)'),
+        .string()
+        .describe(`Installation scope (recognized: ${KNOWN_INSTALLATION_SCOPES.join(', ')}; others pass through as drift)`),
+    projectPath: z
+        .string()
+        .optional()
+        .describe('Absolute path to the project a project-scoped installation belongs to'),
     installPath: z
         .string()
         .describe('Absolute path to installed plugin directory'),
@@ -28,16 +57,17 @@ const PluginInstallationSchema = z
         .describe('Git commit SHA for git-based installations'),
     isLocal: z
         .boolean()
-        .describe('Whether plugin is installed locally (not from marketplace)'),
+        .optional()
+        .describe('Whether plugin is installed locally (not from marketplace). Current Claude Code no longer writes this field.'),
 })
-    .strict();
+    .passthrough();
 /**
  * Schema for installed_plugins.json registry
  * Tracks all installed plugins with version and path info
  *
  * Format: { "plugin-name@marketplace-name": [installation entries] }
  *
- * A single plugin can have multiple installations (e.g., both user and system scope).
+ * A single plugin can have multiple installations (e.g., both user and project scope).
  */
 export const InstalledPluginsRegistrySchema = z
     .object({
@@ -48,7 +78,65 @@ export const InstalledPluginsRegistrySchema = z
         .regex(/^[^@]+@[^@]+$/, 'Key must be in format "plugin@marketplace"'), z.array(PluginInstallationSchema).min(1))
         .describe('Map of plugin@marketplace to installation entries'),
 })
-    .strict()
+    .passthrough()
     .describe('Installed plugins registry structure');
 export const InstalledPluginsRegistryJsonSchema = zodToJsonSchema(InstalledPluginsRegistrySchema, { name: 'InstalledPluginsRegistry', $refStrategy: 'none' });
+const KNOWN_REGISTRY_KEYS = new Set(['version', 'plugins']);
+const KNOWN_INSTALLATION_KEYS = new Set([
+    'scope',
+    'projectPath',
+    'installPath',
+    'version',
+    'installedAt',
+    'lastUpdated',
+    'gitCommitSha',
+    'isLocal',
+]);
+/**
+ * Collect drift observations for one installation entry.
+ *
+ * @param entry - Candidate installation entry (may be any shape)
+ * @param pointer - Dotted pointer to the entry, e.g. `plugins.foo@bar.0`
+ * @param record - Accumulator, keyed by message so N entries sharing one unknown
+ *   field produce one observation rather than N identical ones
+ */
+function collectEntryDrift(entry, pointer, record) {
+    if (!isRecord(entry)) {
+        return;
+    }
+    recordUnknownKeys(entry, KNOWN_INSTALLATION_KEYS, pointer, (key) => `Installation entries carry unrecognized field '${key}'`, record);
+    const scope = entry['scope'];
+    if (typeof scope === 'string' && !KNOWN_SCOPE_SET.has(scope)) {
+        recordDrift(record, `${pointer}.scope`, `Installation scope '${scope}' is not one of the recognized scopes (${KNOWN_INSTALLATION_SCOPES.join(', ')})`);
+    }
+}
+/**
+ * Report what `.passthrough()` absorbed: fields and scope values in an
+ * installed-plugins registry that VAT's model does not recognize.
+ *
+ * Deduplicated by message — the point is "Claude Code writes something new",
+ * not "it wrote it 28 times".
+ *
+ * @param data - Parsed registry JSON (any shape; non-objects yield no drift)
+ * @returns One observation per distinct unrecognized field or scope value
+ */
+export function detectInstalledPluginsRegistryDrift(data) {
+    const found = new Map();
+    if (!isRecord(data)) {
+        return [];
+    }
+    recordUnknownKeys(data, KNOWN_REGISTRY_KEYS, '', (key) => `Registry carries unrecognized top-level field '${key}'`, found);
+    const plugins = data['plugins'];
+    if (isRecord(plugins)) {
+        for (const [pluginKey, entries] of Object.entries(plugins)) {
+            if (!Array.isArray(entries)) {
+                continue;
+            }
+            for (const [index, entry] of entries.entries()) {
+                collectEntryDrift(entry, `plugins.${pluginKey}.${index}`, found);
+            }
+        }
+    }
+    return [...found.values()];
+}
 //# sourceMappingURL=installed-plugins-registry.js.map

package/dist/schemas/installed-plugins-registry.js.map

@@ -1 +1 @@
-{"version":3,"file":"installed-plugins-registry.js","sourceRoot":"","sources":["../../src/schemas/installed-plugins-registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAErD;;GAEG;AACH,MAAM,wBAAwB,GAAG,CAAC;KAC/B,MAAM,CAAC;IACN,KAAK,EAAE,CAAC;SACL,IAAI,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;SACxB,QAAQ,CAAC,0CAA0C,CAAC;IAEvD,WAAW,EAAE,CAAC;SACX,MAAM,EAAE;SACR,QAAQ,CAAC,6CAA6C,CAAC;IAE1D,OAAO,EAAE,CAAC;SACP,MAAM,EAAE;SACR,QAAQ,CAAC,0CAA0C,CAAC;IAEvD,WAAW,EAAE,CAAC;SACX,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,oDAAoD,CAAC;IAEjE,WAAW,EAAE,CAAC;SACX,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,iDAAiD,CAAC;IAE9D,YAAY,EAAE,CAAC;SACZ,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,4CAA4C,CAAC;IAEzD,OAAO,EAAE,CAAC;SACP,OAAO,EAAE;SACT,QAAQ,CAAC,4DAA4D,CAAC;CAC1E,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC;KAC5C,MAAM,CAAC;IACN,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,uCAAuC,CAAC;IAEvE,OAAO,EAAE,CAAC;SACP,MAAM,CACL,CAAC;SACE,MAAM,EAAE;SACR,KAAK,CAAC,eAAe,EAAE,4CAA4C,CAAC,EACvE,CAAC,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CACzC;SACA,QAAQ,CAAC,mDAAmD,CAAC;CACjE,CAAC;KACD,MAAM,EAAE;KACR,QAAQ,CAAC,sCAAsC,CAAC,CAAC;AAOpD,MAAM,CAAC,MAAM,kCAAkC,GAAG,eAAe,CAC/D,8BAA8B,EAC9B,EAAE,IAAI,EAAE,0BAA0B,EAAE,YAAY,EAAE,MAAM,EAAE,CAC3D,CAAC"}
+{"version":3,"file":"installed-plugins-registry.js","sourceRoot":"","sources":["../../src/schemas/installed-plugins-registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAErD,OAAO,EACL,QAAQ,EACR,WAAW,EACX,iBAAiB,GAGlB,MAAM,qBAAqB,CAAC;AAI7B;;;;;;;;;;;;GAYG;AAEH;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG;IACvC,MAAM;IACN,QAAQ;IACR,SAAS;IACT,OAAO;CACC,CAAC;AAEX,MAAM,eAAe,GAAwB,IAAI,GAAG,CAAC,yBAAyB,CAAC,CAAC;AAEhF;;GAEG;AACH,MAAM,wBAAwB,GAAG,CAAC;KAC/B,MAAM,CAAC;IACN,KAAK,EAAE,CAAC;SACL,MAAM,EAAE;SACR,QAAQ,CACP,mCAAmC,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC,iCAAiC,CACzG;IAEH,WAAW,EAAE,CAAC;SACX,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,uEAAuE,CAAC;IAEpF,WAAW,EAAE,CAAC;SACX,MAAM,EAAE;SACR,QAAQ,CAAC,6CAA6C,CAAC;IAE1D,OAAO,EAAE,CAAC;SACP,MAAM,EAAE;SACR,QAAQ,CAAC,0CAA0C,CAAC;IAEvD,WAAW,EAAE,CAAC;SACX,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,oDAAoD,CAAC;IAEjE,WAAW,EAAE,CAAC;SACX,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,iDAAiD,CAAC;IAE9D,YAAY,EAAE,CAAC;SACZ,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,4CAA4C,CAAC;IAEzD,OAAO,EAAE,CAAC;SACP,OAAO,EAAE;SACT,QAAQ,EAAE;SACV,QAAQ,CACP,8GAA8G,CAC/G;CACJ,CAAC;KACD,WAAW,EAAE,CAAC;AAEjB;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC;KAC5C,MAAM,CAAC;IACN,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,uCAAuC,CAAC;IAEvE,OAAO,EAAE,CAAC;SACP,MAAM,CACL,CAAC;SACE,MAAM,EAAE;SACR,KAAK,CAAC,eAAe,EAAE,4CAA4C,CAAC,EACvE,CAAC,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CACzC;SACA,QAAQ,CAAC,mDAAmD,CAAC;CACjE,CAAC;KACD,WAAW,EAAE;KACb,QAAQ,CAAC,sCAAsC,CAAC,CAAC;AAOpD,MAAM,CAAC,MAAM,kCAAkC,GAAG,eAAe,CAC/D,8BAA8B,EAC9B,EAAE,IAAI,EAAE,0BAA0B,EAAE,YAAY,EAAE,MAAM,EAAE,CAC3D,CAAC;AAEF,MAAM,mBAAmB,GAAwB,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;AAEjF,MAAM,uBAAuB,GAAwB,IAAI,GAAG,CAAC;IAC3D,OAAO;IACP,aAAa;IACb,aAAa;IACb,SAAS;IACT,aAAa;IACb,aAAa;IACb,cAAc;IACd,SAAS;CACV,CAAC,CAAC;AAEH;;;;;;;GAOG;AACH,SAAS,iBAAiB,CACxB,KAAc,EACd,OAAe,EACf,MAA2B;IAE3B,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO;IACT,CAAC;IAED,iBAAiB,CACf,KAAK,EACL,uBAAuB,EACvB,OAAO,EACP,CAAC,GAAG,EAAE,EAAE,CAAC,kDAAkD,GAAG,GAAG,EACjE,MAAM,CACP,CAAC;IAEF,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;IAC7B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7D,WAAW,CACT,MAAM,EACN,GAAG,OAAO,QAAQ,EAClB,uBAAuB,KAAK,0CAA0C,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAC9G,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,mCAAmC,CACjD,IAAa;IAEb,MAAM,KAAK,GAAwB,IAAI,GAAG,EAAE,CAAC;IAE7C,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACpB,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,iBAAiB,CACf,IAAI,EACJ,mBAAmB,EACnB,EAAE,EACF,CAAC,GAAG,EAAE,EAAE,CAAC,kDAAkD,GAAG,GAAG,EACjE,KAAK,CACN,CAAC;IAEF,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC;IAChC,IAAI,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QACtB,KAAK,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC5B,SAAS;YACX,CAAC;YACD,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;gBAC/C,iBAAiB,CAAC,KAAK,EAAE,WAAW,SAAS,IAAI,KAAK,EAAE,EAAE,KAAK,CAAC,CAAC;YACnE,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;AAC7B,CAAC"}

package/dist/schemas/known-marketplaces-registry.d.ts

@@ -1,72 +1,111 @@
 import { z } from 'zod';
+import { type RegistryShapeDrift } from './registry-drift.js';
 /**
- * Marketplace source - GitHub or local file
+ * `known_marketplaces.json` is written and owned by Claude Code — VAT only reads it.
+ * Per VAT's Postel's Law rule (CLAUDE.md: "Reading outside world → liberal"), these
+ * schemas `.passthrough()` and keep the source `kind` open: an unrecognized field or
+ * marketplace source kind is drift in someone else's file, not an error in the user's
+ * setup.
+ *
+ * Modelling it strictly turned every shape Claude Code added — the git `ref` on a
+ * github source, the `directory` source kind — into a hard error against a registry
+ * the user cannot edit.
+ *
+ * Liberality alone would be blindness, so it is paired with
+ * {@link detectKnownMarketplacesRegistryDrift}: what passthrough absorbs still gets
+ * reported, at `info`, under the same `REGISTRY_SHAPE_DRIFT` code the installed-plugins
+ * registry uses.
+ */
+/**
+ * Marketplace source kinds VAT's model knows about. Not enforced by the schema — a
+ * kind outside this list parses fine and is reported as drift instead.
+ */
+export declare const KNOWN_MARKETPLACE_SOURCE_KINDS: readonly ["github", "file", "directory"];
+/**
+ * Marketplace source location.
+ *
+ * Kind-specific fields are optional rather than required-per-kind: a github source
+ * carries `repo` (and optionally a `ref`), a file/directory source carries `path`.
+ * Requiring them per kind would re-create the false errors this schema exists to
+ * avoid the moment Claude Code renames one.
  */
-declare const MarketplaceSourceSchema: z.ZodDiscriminatedUnion<"source", [z.ZodObject<{
-    source: z.ZodLiteral<"github">;
-    repo: z.ZodString;
-}, "strict", z.ZodTypeAny, {
-    source: "github";
-    repo: string;
-}, {
-    source: "github";
-    repo: string;
-}>, z.ZodObject<{
-    source: z.ZodLiteral<"file">;
-    path: z.ZodString;
-}, "strict", z.ZodTypeAny, {
-    source: "file";
-    path: string;
-}, {
-    source: "file";
-    path: string;
-}>]>;
+declare const MarketplaceSourceSchema: z.ZodObject<{
+    source: z.ZodString;
+    repo: z.ZodOptional<z.ZodString>;
+    ref: z.ZodOptional<z.ZodString>;
+    path: z.ZodOptional<z.ZodString>;
+}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+    source: z.ZodString;
+    repo: z.ZodOptional<z.ZodString>;
+    ref: z.ZodOptional<z.ZodString>;
+    path: z.ZodOptional<z.ZodString>;
+}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+    source: z.ZodString;
+    repo: z.ZodOptional<z.ZodString>;
+    ref: z.ZodOptional<z.ZodString>;
+    path: z.ZodOptional<z.ZodString>;
+}, z.ZodTypeAny, "passthrough">>;
 /**
  * Single marketplace registry entry
  */
 declare const MarketplaceEntrySchema: z.ZodObject<{
-    source: z.ZodDiscriminatedUnion<"source", [z.ZodObject<{
-        source: z.ZodLiteral<"github">;
-        repo: z.ZodString;
-    }, "strict", z.ZodTypeAny, {
-        source: "github";
-        repo: string;
-    }, {
-        source: "github";
-        repo: string;
-    }>, z.ZodObject<{
-        source: z.ZodLiteral<"file">;
-        path: z.ZodString;
-    }, "strict", z.ZodTypeAny, {
-        source: "file";
-        path: string;
-    }, {
-        source: "file";
-        path: string;
-    }>]>;
+    source: z.ZodObject<{
+        source: z.ZodString;
+        repo: z.ZodOptional<z.ZodString>;
+        ref: z.ZodOptional<z.ZodString>;
+        path: z.ZodOptional<z.ZodString>;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        source: z.ZodString;
+        repo: z.ZodOptional<z.ZodString>;
+        ref: z.ZodOptional<z.ZodString>;
+        path: z.ZodOptional<z.ZodString>;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        source: z.ZodString;
+        repo: z.ZodOptional<z.ZodString>;
+        ref: z.ZodOptional<z.ZodString>;
+        path: z.ZodOptional<z.ZodString>;
+    }, z.ZodTypeAny, "passthrough">>;
     installLocation: z.ZodString;
     lastUpdated: z.ZodString;
-}, "strict", z.ZodTypeAny, {
-    source: {
-        source: "github";
-        repo: string;
-    } | {
-        source: "file";
-        path: string;
-    };
-    lastUpdated: string;
-    installLocation: string;
-}, {
-    source: {
-        source: "github";
-        repo: string;
-    } | {
-        source: "file";
-        path: string;
-    };
-    lastUpdated: string;
-    installLocation: string;
-}>;
+}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+    source: z.ZodObject<{
+        source: z.ZodString;
+        repo: z.ZodOptional<z.ZodString>;
+        ref: z.ZodOptional<z.ZodString>;
+        path: z.ZodOptional<z.ZodString>;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        source: z.ZodString;
+        repo: z.ZodOptional<z.ZodString>;
+        ref: z.ZodOptional<z.ZodString>;
+        path: z.ZodOptional<z.ZodString>;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        source: z.ZodString;
+        repo: z.ZodOptional<z.ZodString>;
+        ref: z.ZodOptional<z.ZodString>;
+        path: z.ZodOptional<z.ZodString>;
+    }, z.ZodTypeAny, "passthrough">>;
+    installLocation: z.ZodString;
+    lastUpdated: z.ZodString;
+}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+    source: z.ZodObject<{
+        source: z.ZodString;
+        repo: z.ZodOptional<z.ZodString>;
+        ref: z.ZodOptional<z.ZodString>;
+        path: z.ZodOptional<z.ZodString>;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        source: z.ZodString;
+        repo: z.ZodOptional<z.ZodString>;
+        ref: z.ZodOptional<z.ZodString>;
+        path: z.ZodOptional<z.ZodString>;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        source: z.ZodString;
+        repo: z.ZodOptional<z.ZodString>;
+        ref: z.ZodOptional<z.ZodString>;
+        path: z.ZodOptional<z.ZodString>;
+    }, z.ZodTypeAny, "passthrough">>;
+    installLocation: z.ZodString;
+    lastUpdated: z.ZodString;
+}, z.ZodTypeAny, "passthrough">>;
 /**
  * Schema for known_marketplaces.json registry
  * Tracks all known marketplace sources
@@ -74,48 +113,63 @@ declare const MarketplaceEntrySchema: z.ZodObject<{
  * Format: { "marketplace-name": { source, installLocation, lastUpdated } }
  */
 export declare const KnownMarketplacesRegistrySchema: z.ZodRecord<z.ZodString, z.ZodObject<{
-    source: z.ZodDiscriminatedUnion<"source", [z.ZodObject<{
-        source: z.ZodLiteral<"github">;
-        repo: z.ZodString;
-    }, "strict", z.ZodTypeAny, {
-        source: "github";
-        repo: string;
-    }, {
-        source: "github";
-        repo: string;
-    }>, z.ZodObject<{
-        source: z.ZodLiteral<"file">;
-        path: z.ZodString;
-    }, "strict", z.ZodTypeAny, {
-        source: "file";
-        path: string;
-    }, {
-        source: "file";
-        path: string;
-    }>]>;
+    source: z.ZodObject<{
+        source: z.ZodString;
+        repo: z.ZodOptional<z.ZodString>;
+        ref: z.ZodOptional<z.ZodString>;
+        path: z.ZodOptional<z.ZodString>;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        source: z.ZodString;
+        repo: z.ZodOptional<z.ZodString>;
+        ref: z.ZodOptional<z.ZodString>;
+        path: z.ZodOptional<z.ZodString>;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        source: z.ZodString;
+        repo: z.ZodOptional<z.ZodString>;
+        ref: z.ZodOptional<z.ZodString>;
+        path: z.ZodOptional<z.ZodString>;
+    }, z.ZodTypeAny, "passthrough">>;
+    installLocation: z.ZodString;
+    lastUpdated: z.ZodString;
+}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+    source: z.ZodObject<{
+        source: z.ZodString;
+        repo: z.ZodOptional<z.ZodString>;
+        ref: z.ZodOptional<z.ZodString>;
+        path: z.ZodOptional<z.ZodString>;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        source: z.ZodString;
+        repo: z.ZodOptional<z.ZodString>;
+        ref: z.ZodOptional<z.ZodString>;
+        path: z.ZodOptional<z.ZodString>;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        source: z.ZodString;
+        repo: z.ZodOptional<z.ZodString>;
+        ref: z.ZodOptional<z.ZodString>;
+        path: z.ZodOptional<z.ZodString>;
+    }, z.ZodTypeAny, "passthrough">>;
+    installLocation: z.ZodString;
+    lastUpdated: z.ZodString;
+}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+    source: z.ZodObject<{
+        source: z.ZodString;
+        repo: z.ZodOptional<z.ZodString>;
+        ref: z.ZodOptional<z.ZodString>;
+        path: z.ZodOptional<z.ZodString>;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        source: z.ZodString;
+        repo: z.ZodOptional<z.ZodString>;
+        ref: z.ZodOptional<z.ZodString>;
+        path: z.ZodOptional<z.ZodString>;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        source: z.ZodString;
+        repo: z.ZodOptional<z.ZodString>;
+        ref: z.ZodOptional<z.ZodString>;
+        path: z.ZodOptional<z.ZodString>;
+    }, z.ZodTypeAny, "passthrough">>;
     installLocation: z.ZodString;
     lastUpdated: z.ZodString;
-}, "strict", z.ZodTypeAny, {
-    source: {
-        source: "github";
-        repo: string;
-    } | {
-        source: "file";
-        path: string;
-    };
-    lastUpdated: string;
-    installLocation: string;
-}, {
-    source: {
-        source: "github";
-        repo: string;
-    } | {
-        source: "file";
-        path: string;
-    };
-    lastUpdated: string;
-    installLocation: string;
-}>>;
+}, z.ZodTypeAny, "passthrough">>>;
 export type KnownMarketplacesRegistry = z.infer<typeof KnownMarketplacesRegistrySchema>;
 export type MarketplaceEntry = z.infer<typeof MarketplaceEntrySchema>;
 export type MarketplaceSource = z.infer<typeof MarketplaceSourceSchema>;
@@ -125,5 +179,16 @@ export declare const KnownMarketplacesRegistryJsonSchema: import("zod-to-json-sc
         [key: string]: import("zod-to-json-schema").JsonSchema7Type;
     } | undefined;
 };
+/**
+ * Report what `.passthrough()` absorbed: fields and source kinds in a
+ * known-marketplaces registry that VAT's model does not recognize.
+ *
+ * Deduplicated by message — the point is "Claude Code writes something new",
+ * not "it wrote it eight times".
+ *
+ * @param data - Parsed registry JSON (any shape; non-objects yield no drift)
+ * @returns One observation per distinct unrecognized field or source kind
+ */
+export declare function detectKnownMarketplacesRegistryDrift(data: unknown): RegistryShapeDrift[];
 export {};
 //# sourceMappingURL=known-marketplaces-registry.d.ts.map

package/dist/schemas/known-marketplaces-registry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"known-marketplaces-registry.d.ts","sourceRoot":"","sources":["../../src/schemas/known-marketplaces-registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB;;GAEG;AACH,QAAA,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;IAoBY,CAAC;AAE1C;;GAEG;AACH,QAAA,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAcmB,CAAC;AAEhD;;;;;GAKG;AACH,eAAO,MAAM,+BAA+B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAEO,CAAC;AAEpD,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAC9C,OAAO,+BAA+B,CACtC,CAAC;AACF,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AACtE,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAExE,eAAO,MAAM,mCAAmC;;;;;CAG/C,CAAC"}
+{"version":3,"file":"known-marketplaces-registry.d.ts","sourceRoot":"","sources":["../../src/schemas/known-marketplaces-registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAKN,KAAK,kBAAkB,EACvB,MAAM,qBAAqB,CAAC;AAE7B;;;;;;;;;;;;;;;GAeG;AAEH;;;GAGG;AACH,eAAO,MAAM,8BAA8B,0CAIjC,CAAC;AAMX;;;;;;;GAOG;AACH,QAAA,MAAM,uBAAuB;;;;;;;;;;;;;;;gCAyBY,CAAC;AAE1C;;GAEG;AACH,QAAA,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gCAcmB,CAAC;AAEhD;;;;;GAKG;AACH,eAAO,MAAM,+BAA+B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iCAEO,CAAC;AAEpD,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAC9C,OAAO,+BAA+B,CACtC,CAAC;AACF,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AACtE,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAExE,eAAO,MAAM,mCAAmC;;;;;CAG/C,CAAC;AA+DF;;;;;;;;;GASG;AACH,wBAAgB,oCAAoC,CACnD,IAAI,EAAE,OAAO,GACX,kBAAkB,EAAE,CAYtB"}

package/dist/schemas/known-marketplaces-registry.js

@@ -1,27 +1,60 @@
 import { z } from 'zod';
 import { zodToJsonSchema } from 'zod-to-json-schema';
+import { isRecord, recordDrift, recordUnknownKeys, } from './registry-drift.js';
 /**
- * Marketplace source - GitHub or local file
+ * `known_marketplaces.json` is written and owned by Claude Code — VAT only reads it.
+ * Per VAT's Postel's Law rule (CLAUDE.md: "Reading outside world → liberal"), these
+ * schemas `.passthrough()` and keep the source `kind` open: an unrecognized field or
+ * marketplace source kind is drift in someone else's file, not an error in the user's
+ * setup.
+ *
+ * Modelling it strictly turned every shape Claude Code added — the git `ref` on a
+ * github source, the `directory` source kind — into a hard error against a registry
+ * the user cannot edit.
+ *
+ * Liberality alone would be blindness, so it is paired with
+ * {@link detectKnownMarketplacesRegistryDrift}: what passthrough absorbs still gets
+ * reported, at `info`, under the same `REGISTRY_SHAPE_DRIFT` code the installed-plugins
+ * registry uses.
+ */
+/**
+ * Marketplace source kinds VAT's model knows about. Not enforced by the schema — a
+ * kind outside this list parses fine and is reported as drift instead.
+ */
+export const KNOWN_MARKETPLACE_SOURCE_KINDS = [
+    'github',
+    'file',
+    'directory',
+];
+const KNOWN_SOURCE_KIND_SET = new Set(KNOWN_MARKETPLACE_SOURCE_KINDS);
+/**
+ * Marketplace source location.
+ *
+ * Kind-specific fields are optional rather than required-per-kind: a github source
+ * carries `repo` (and optionally a `ref`), a file/directory source carries `path`.
+ * Requiring them per kind would re-create the false errors this schema exists to
+ * avoid the moment Claude Code renames one.
  */
 const MarketplaceSourceSchema = z
-    .discriminatedUnion('source', [
-    z
-        .object({
-        source: z.literal('github'),
-        repo: z
-            .string()
-            .regex(/^[^/]+\/[^/]+$/, 'Must be in format "owner/repo"'),
-    })
-        .strict()
-        .describe('GitHub repository'),
-    z
-        .object({
-        source: z.literal('file'),
-        path: z.string(),
-    })
-        .strict()
-        .describe('Local file path'),
-])
+    .object({
+    source: z
+        .string()
+        .describe(`Source kind (recognized: ${KNOWN_MARKETPLACE_SOURCE_KINDS.join(', ')}; others pass through as drift)`),
+    repo: z
+        .string()
+        .regex(/^[^/]+\/[^/]+$/, 'Must be in format "owner/repo"')
+        .optional()
+        .describe('GitHub repository in "owner/repo" form'),
+    ref: z
+        .string()
+        .optional()
+        .describe('Git ref (branch, tag or commit) a github marketplace is pinned to'),
+    path: z
+        .string()
+        .optional()
+        .describe('Filesystem path for a file or directory marketplace'),
+})
+    .passthrough()
     .describe('Marketplace source location');
 /**
  * Single marketplace registry entry
@@ -34,10 +67,10 @@ const MarketplaceEntrySchema = z
         .describe('Absolute path to marketplace installation'),
     lastUpdated: z
         .string()
-        .datetime()
+        .datetime({ offset: true })
         .describe('ISO 8601 last update timestamp'),
 })
-    .strict()
+    .passthrough()
     .describe('Single marketplace registry entry');
 /**
  * Schema for known_marketplaces.json registry
@@ -49,4 +82,58 @@ export const KnownMarketplacesRegistrySchema = z
     .record(z.string().min(1), MarketplaceEntrySchema)
     .describe('Known marketplaces registry structure');
 export const KnownMarketplacesRegistryJsonSchema = zodToJsonSchema(KnownMarketplacesRegistrySchema, { name: 'KnownMarketplacesRegistry', $refStrategy: 'none' });
+const KNOWN_ENTRY_KEYS = new Set([
+    'source',
+    'installLocation',
+    'lastUpdated',
+]);
+const KNOWN_SOURCE_KEYS = new Set([
+    'source',
+    'repo',
+    'ref',
+    'path',
+]);
+/**
+ * Collect drift observations for one marketplace entry.
+ *
+ * @param entry - Candidate marketplace entry (may be any shape)
+ * @param pointer - Dotted pointer to the entry, i.e. the marketplace name
+ * @param record - Accumulator, keyed by message so N marketplaces sharing one
+ *   unknown field produce one observation rather than N identical ones
+ */
+function collectEntryDrift(entry, pointer, record) {
+    if (!isRecord(entry)) {
+        return;
+    }
+    recordUnknownKeys(entry, KNOWN_ENTRY_KEYS, pointer, (key) => `Marketplace entries carry unrecognized field '${key}'`, record);
+    const source = entry['source'];
+    if (!isRecord(source)) {
+        return;
+    }
+    recordUnknownKeys(source, KNOWN_SOURCE_KEYS, `${pointer}.source`, (key) => `Marketplace sources carry unrecognized field '${key}'`, record);
+    const kind = source['source'];
+    if (typeof kind === 'string' && !KNOWN_SOURCE_KIND_SET.has(kind)) {
+        recordDrift(record, `${pointer}.source.source`, `Marketplace source kind '${kind}' is not one of the recognized kinds (${KNOWN_MARKETPLACE_SOURCE_KINDS.join(', ')})`);
+    }
+}
+/**
+ * Report what `.passthrough()` absorbed: fields and source kinds in a
+ * known-marketplaces registry that VAT's model does not recognize.
+ *
+ * Deduplicated by message — the point is "Claude Code writes something new",
+ * not "it wrote it eight times".
+ *
+ * @param data - Parsed registry JSON (any shape; non-objects yield no drift)
+ * @returns One observation per distinct unrecognized field or source kind
+ */
+export function detectKnownMarketplacesRegistryDrift(data) {
+    const found = new Map();
+    if (!isRecord(data)) {
+        return [];
+    }
+    for (const [marketplaceName, entry] of Object.entries(data)) {
+        collectEntryDrift(entry, marketplaceName, found);
+    }
+    return [...found.values()];
+}
 //# sourceMappingURL=known-marketplaces-registry.js.map

package/dist/schemas/known-marketplaces-registry.js.map

@@ -1 +1 @@
-{"version":3,"file":"known-marketplaces-registry.js","sourceRoot":"","sources":["../../src/schemas/known-marketplaces-registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAErD;;GAEG;AACH,MAAM,uBAAuB,GAAG,CAAC;KAC/B,kBAAkB,CAAC,QAAQ,EAAE;IAC7B,CAAC;SACC,MAAM,CAAC;QACP,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;QAC3B,IAAI,EAAE,CAAC;aACL,MAAM,EAAE;aACR,KAAK,CAAC,gBAAgB,EAAE,gCAAgC,CAAC;KAC3D,CAAC;SACD,MAAM,EAAE;SACR,QAAQ,CAAC,mBAAmB,CAAC;IAE/B,CAAC;SACC,MAAM,CAAC;QACP,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;QACzB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;KAChB,CAAC;SACD,MAAM,EAAE;SACR,QAAQ,CAAC,iBAAiB,CAAC;CAC7B,CAAC;KACD,QAAQ,CAAC,6BAA6B,CAAC,CAAC;AAE1C;;GAEG;AACH,MAAM,sBAAsB,GAAG,CAAC;KAC9B,MAAM,CAAC;IACP,MAAM,EAAE,uBAAuB,CAAC,QAAQ,CAAC,6BAA6B,CAAC;IAEvE,eAAe,EAAE,CAAC;SAChB,MAAM,EAAE;SACR,QAAQ,CAAC,2CAA2C,CAAC;IAEvD,WAAW,EAAE,CAAC;SACZ,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,gCAAgC,CAAC;CAC5C,CAAC;KACD,MAAM,EAAE;KACR,QAAQ,CAAC,mCAAmC,CAAC,CAAC;AAEhD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC;KAC9C,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,sBAAsB,CAAC;KACjD,QAAQ,CAAC,uCAAuC,CAAC,CAAC;AAQpD,MAAM,CAAC,MAAM,mCAAmC,GAAG,eAAe,CACjE,+BAA+B,EAC/B,EAAE,IAAI,EAAE,2BAA2B,EAAE,YAAY,EAAE,MAAM,EAAE,CAC3D,CAAC"}
+{"version":3,"file":"known-marketplaces-registry.js","sourceRoot":"","sources":["../../src/schemas/known-marketplaces-registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAErD,OAAO,EACN,QAAQ,EACR,WAAW,EACX,iBAAiB,GAGjB,MAAM,qBAAqB,CAAC;AAE7B;;;;;;;;;;;;;;;GAeG;AAEH;;;GAGG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG;IAC7C,QAAQ;IACR,MAAM;IACN,WAAW;CACF,CAAC;AAEX,MAAM,qBAAqB,GAAwB,IAAI,GAAG,CACzD,8BAA8B,CAC9B,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,uBAAuB,GAAG,CAAC;KAC/B,MAAM,CAAC;IACP,MAAM,EAAE,CAAC;SACP,MAAM,EAAE;SACR,QAAQ,CACR,4BAA4B,8BAA8B,CAAC,IAAI,CAAC,IAAI,CAAC,iCAAiC,CACtG;IAEF,IAAI,EAAE,CAAC;SACL,MAAM,EAAE;SACR,KAAK,CAAC,gBAAgB,EAAE,gCAAgC,CAAC;SACzD,QAAQ,EAAE;SACV,QAAQ,CAAC,wCAAwC,CAAC;IAEpD,GAAG,EAAE,CAAC;SACJ,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,mEAAmE,CAAC;IAE/E,IAAI,EAAE,CAAC;SACL,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,qDAAqD,CAAC;CACjE,CAAC;KACD,WAAW,EAAE;KACb,QAAQ,CAAC,6BAA6B,CAAC,CAAC;AAE1C;;GAEG;AACH,MAAM,sBAAsB,GAAG,CAAC;KAC9B,MAAM,CAAC;IACP,MAAM,EAAE,uBAAuB,CAAC,QAAQ,CAAC,6BAA6B,CAAC;IAEvE,eAAe,EAAE,CAAC;SAChB,MAAM,EAAE;SACR,QAAQ,CAAC,2CAA2C,CAAC;IAEvD,WAAW,EAAE,CAAC;SACZ,MAAM,EAAE;SACR,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;SAC1B,QAAQ,CAAC,gCAAgC,CAAC;CAC5C,CAAC;KACD,WAAW,EAAE;KACb,QAAQ,CAAC,mCAAmC,CAAC,CAAC;AAEhD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC;KAC9C,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,sBAAsB,CAAC;KACjD,QAAQ,CAAC,uCAAuC,CAAC,CAAC;AAQpD,MAAM,CAAC,MAAM,mCAAmC,GAAG,eAAe,CACjE,+BAA+B,EAC/B,EAAE,IAAI,EAAE,2BAA2B,EAAE,YAAY,EAAE,MAAM,EAAE,CAC3D,CAAC;AAEF,MAAM,gBAAgB,GAAwB,IAAI,GAAG,CAAC;IACrD,QAAQ;IACR,iBAAiB;IACjB,aAAa;CACb,CAAC,CAAC;AAEH,MAAM,iBAAiB,GAAwB,IAAI,GAAG,CAAC;IACtD,QAAQ;IACR,MAAM;IACN,KAAK;IACL,MAAM;CACN,CAAC,CAAC;AAEH;;;;;;;GAOG;AACH,SAAS,iBAAiB,CACzB,KAAc,EACd,OAAe,EACf,MAA2B;IAE3B,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO;IACR,CAAC;IAED,iBAAiB,CAChB,KAAK,EACL,gBAAgB,EAChB,OAAO,EACP,CAAC,GAAG,EAAE,EAAE,CAAC,iDAAiD,GAAG,GAAG,EAChE,MAAM,CACN,CAAC;IAEF,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC/B,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACvB,OAAO;IACR,CAAC;IAED,iBAAiB,CAChB,MAAM,EACN,iBAAiB,EACjB,GAAG,OAAO,SAAS,EACnB,CAAC,GAAG,EAAE,EAAE,CAAC,iDAAiD,GAAG,GAAG,EAChE,MAAM,CACN,CAAC;IAEF,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC9B,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QAClE,WAAW,CACV,MAAM,EACN,GAAG,OAAO,gBAAgB,EAC1B,4BAA4B,IAAI,yCAAyC,8BAA8B,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACrH,CAAC;IACH,CAAC;AACF,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,oCAAoC,CACnD,IAAa;IAEb,MAAM,KAAK,GAAwB,IAAI,GAAG,EAAE,CAAC;IAE7C,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACrB,OAAO,EAAE,CAAC;IACX,CAAC;IAED,KAAK,MAAM,CAAC,eAAe,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7D,iBAAiB,CAAC,KAAK,EAAE,eAAe,EAAE,KAAK,CAAC,CAAC;IAClD,CAAC;IAED,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;AAC5B,CAAC"}