@wrongstack/cli 0.295.1 → 0.296.3

package/dist/chunk-XWEGWYDU.js

@@ -0,0 +1,560 @@
+
+// src/plugin-management.ts
+import * as fs from "node:fs/promises";
+import { atomicWrite } from "@wrongstack/core/utils";
+import { OFFICIAL_PLUGIN_AUDIT_ENTRIES } from "@wrongstack/plugins/audit";
+var HOST_PLUGIN_AUDIT_ENTRIES = [
+  {
+    name: "wstack-prompts",
+    risk: "medium",
+    summary: "Prompt library and prompt authoring commands.",
+    defaultState: "active",
+    canDisable: true
+  },
+  {
+    name: "wstack-sync",
+    risk: "medium",
+    summary: "Cloud sync commands for prompts, skills, settings, memory, and history.",
+    defaultState: "active",
+    canDisable: true
+  },
+  {
+    name: "wstack-git",
+    risk: "high",
+    summary: "Git commands for commit, status checks, and push.",
+    defaultState: "active",
+    canDisable: true
+  },
+  {
+    name: "wstack-observability",
+    risk: "low",
+    summary: "Runtime metrics and health slash commands.",
+    defaultState: "active",
+    canDisable: true
+  },
+  {
+    name: "wstack-chimera",
+    risk: "medium",
+    summary: "Spawns a post-session code review subagent when explicitly enabled.",
+    defaultState: "inactive",
+    canDisable: true
+  },
+  {
+    name: "wstack-skills",
+    risk: "medium",
+    summary: "Skill library, authoring, install, update, and uninstall commands.",
+    defaultState: "active",
+    canDisable: true
+  },
+  {
+    name: "wstack-plan",
+    risk: "medium",
+    summary: "Strategic plan board slash command.",
+    defaultState: "active",
+    canDisable: true
+  },
+  {
+    name: "@wrongstack/plug-lsp",
+    risk: "medium",
+    summary: "Language Server Protocol tools and slash commands.",
+    defaultState: "inactive",
+    canDisable: true
+  },
+  {
+    name: "telegram",
+    risk: "medium",
+    summary: "Telegram bridge for messages, approvals, and notifications.",
+    defaultState: "inactive",
+    canDisable: true
+  }
+];
+var PLUGIN_AUDIT_ENTRIES = Object.freeze([
+  ...HOST_PLUGIN_AUDIT_ENTRIES,
+  ...OFFICIAL_PLUGIN_AUDIT_ENTRIES
+]);
+var OFFICIAL_PLUGINS = [
+  {
+    alias: "telegram",
+    specifier: "@wrongstack/telegram",
+    description: "Telegram bridge for prompts, notifications, and slash commands."
+  },
+  {
+    alias: "lsp",
+    specifier: "@wrongstack/plug-lsp",
+    description: "Language Server Protocol tools for code intelligence."
+  }
+];
+var OFFICIAL_ALIASES = new Map(
+  OFFICIAL_PLUGINS.flatMap((p) => [
+    [p.alias, p.specifier],
+    [p.specifier, p.specifier]
+  ])
+);
+async function runPluginManagementCommand(args, deps) {
+  const sub = args[0];
+  if (!sub || sub === "list" || sub === "status") {
+    return {
+      code: 0,
+      level: "output",
+      message: renderConfiguredPlugins(deps.config)
+    };
+  }
+  if (sub === "official" || sub === "officials") {
+    return {
+      code: 0,
+      level: "output",
+      message: renderOfficialPlugins(deps.config)
+    };
+  }
+  if (sub === "report" || sub === "audit" || sub === "menu") {
+    return {
+      code: 0,
+      level: "output",
+      message: renderPluginAuditReport(deps.config)
+    };
+  }
+  if (sub === "add" || sub === "install") {
+    const spec = args[1];
+    if (!spec) {
+      return errorResult("Usage: wstack plugin add <specifier|official-alias> [--disabled]");
+    }
+    return upsertPlugin(
+      resolvePluginSpecifier(spec),
+      { enabled: !args.includes("--disabled") },
+      deps,
+      "Added"
+    );
+  }
+  if (sub === "remove" || sub === "rm" || sub === "uninstall") {
+    const spec = args[1];
+    if (!spec) {
+      return errorResult("Usage: wstack plugin remove <specifier|official-alias>");
+    }
+    return removePlugin(resolvePluginSpecifier(spec), deps);
+  }
+  if (sub === "enable" || sub === "disable") {
+    const spec = args[1];
+    if (!spec) {
+      return errorResult(`Usage: wstack plugin ${sub} <specifier|official-alias>`);
+    }
+    return upsertPlugin(
+      resolvePluginSpecifier(spec),
+      { enabled: sub === "enable" },
+      deps,
+      sub === "enable" ? "Enabled" : "Disabled"
+    );
+  }
+  if (sub === "toggle") {
+    const spec = args[1];
+    if (!spec) {
+      return errorResult("Usage: wstack plugin toggle <plugin-name|official-alias>");
+    }
+    return togglePlugin(resolvePluginToggleSpecifier(spec), deps);
+  }
+  if (sub === "manager") {
+    return runPluginManagerPolicyCommand(args.slice(1), deps);
+  }
+  if (sub === "llm") {
+    return runPluginLlmCommand(args.slice(1), deps);
+  }
+  return errorResult(
+    `Unknown plugin subcommand: ${sub}
+Usage: wstack plugin [list|status|report|menu|official|add|install|remove|enable|disable|toggle|manager|llm]`
+  );
+}
+var PLUGIN_MANAGER_POLICY_USAGE = [
+  "Usage:",
+  "  wstack plugin manager                         List plugins locked against LLM state changes.",
+  "  wstack plugin manager lock <plugin|*>         Prevent plugin_manager from enabling/disabling it.",
+  "  wstack plugin manager unlock <plugin|*>       Restore plugin_manager enable/disable access.",
+  "",
+  "This policy affects only the LLM-facing plugin_manager tool. Human /plugin and",
+  "wstack plugin enable/disable commands remain available."
+].join("\n");
+async function runPluginManagerPolicyCommand(args, deps) {
+  const action = args[0] ?? "list";
+  if (action === "list") {
+    const locked = deps.config.pluginManager?.locked ?? [];
+    return {
+      code: 0,
+      level: "output",
+      message: locked.length === 0 ? "LLM plugin-manager policy: no plugins are locked." : `LLM plugin-manager policy \u2014 locked (${locked.length}):
+${locked.map((name2) => `  ${name2}`).join("\n")}`
+    };
+  }
+  if (action !== "lock" && action !== "unlock") {
+    return errorResult(PLUGIN_MANAGER_POLICY_USAGE);
+  }
+  const rawName = args[1];
+  if (!rawName) return errorResult(PLUGIN_MANAGER_POLICY_USAGE);
+  const name = rawName === "*" ? "*" : resolvePluginToggleSpecifier(rawName);
+  const existing = await readConfig(deps.configPath);
+  const filePolicy = isRecord(existing.pluginManager) ? existing.pluginManager : void 0;
+  const current = Array.isArray(filePolicy?.["locked"]) ? filePolicy["locked"].filter((entry) => typeof entry === "string") : [...deps.config.pluginManager?.locked ?? []];
+  const canonical = canonicalPolicyName(name);
+  const next = action === "lock" ? current.some((entry) => canonicalPolicyName(entry) === canonical) ? current : [...current, name] : current.filter((entry) => canonicalPolicyName(entry) !== canonical);
+  const pluginManager = { locked: next };
+  existing.pluginManager = { ...filePolicy ?? {}, ...pluginManager };
+  await atomicWrite(deps.configPath, JSON.stringify(existing, null, 2), { mode: 384 });
+  return {
+    code: 0,
+    level: "info",
+    message: action === "lock" ? `Locked "${name}" against LLM enable/disable changes. Human plugin commands still work.` : `Unlocked "${name}" for LLM enable/disable changes.`,
+    patch: { pluginManager }
+  };
+}
+function canonicalPolicyName(name) {
+  if (name === "*") return name;
+  return resolvePluginToggleSpecifier(name).trim().toLowerCase();
+}
+var PLUGIN_LLM_USAGE = [
+  "Usage:",
+  "  wstack plugin llm                               List every per-plugin LLM override.",
+  "  wstack plugin llm <plugin>                      Show one plugin's LLM override.",
+  "  wstack plugin llm <plugin> <provider> [model]   Route this plugin through a provider (and model).",
+  "  wstack plugin llm <plugin> - <model>            Keep the session provider, override only the model.",
+  "  wstack plugin llm <plugin> --clear              Remove the override (back to the session default).",
+  "",
+  "The override is stored as config.extensions.<plugin>.llm and is used by",
+  "every api.llm call the plugin makes. Without an override, plugins follow",
+  "the active session provider/model (the chat leader)."
+].join("\n");
+function renderPluginLlmOverviews(config, sessionDefault) {
+  const rows = [];
+  for (const [pluginName2, ext] of Object.entries(config.extensions ?? {})) {
+    const llm = ext?.["llm"];
+    if (llm && typeof llm === "object") {
+      const o = llm;
+      rows.push({
+        name: pluginName2,
+        provider: o.provider ?? "(session)",
+        model: o.model ?? "(session)"
+      });
+    }
+  }
+  const lines = [`Per-plugin LLM routing (session default: ${sessionDefault}):`];
+  if (rows.length === 0) {
+    lines.push(
+      "  No plugin overrides \u2014 every plugin follows the session default.",
+      "  Set one with: wstack plugin llm <plugin> <provider> [model]"
+    );
+  } else {
+    rows.sort((a, b) => a.name.localeCompare(b.name));
+    for (const r of rows) {
+      lines.push(`  ${r.name.padEnd(24)} provider=${r.provider.padEnd(16)} model=${r.model}`);
+    }
+    lines.push("", "Clear one with: wstack plugin llm <plugin> --clear");
+  }
+  return lines.join("\n");
+}
+async function runPluginLlmCommand(args, deps) {
+  const sessionDefault = `${deps.config.provider ?? "?"} / ${deps.config.model ?? "?"}`;
+  if (args.length === 0 || args[0] === "list") {
+    return {
+      code: 0,
+      level: "output",
+      message: renderPluginLlmOverviews(deps.config, sessionDefault)
+    };
+  }
+  const name = args[0];
+  if (!name || name.startsWith("-")) return errorResult(PLUGIN_LLM_USAGE);
+  const currentOverride = deps.config.extensions?.[name]?.["llm"];
+  if (args.length === 1) {
+    const lines = [`LLM routing for plugin "${name}":`];
+    if (currentOverride && typeof currentOverride === "object") {
+      const o = currentOverride;
+      lines.push(
+        `  override: provider=${o.provider ?? "(session)"} model=${o.model ?? "(session)"}`,
+        `  session default: ${sessionDefault}`
+      );
+    } else {
+      lines.push(
+        `  no override \u2014 follows the session default (${sessionDefault}).`,
+        `  Set one with: wstack plugin llm ${name} <provider> [model]`
+      );
+    }
+    return { code: 0, level: "output", message: lines.join("\n") };
+  }
+  const existing = await readConfig(deps.configPath);
+  const fileExtensions = isRecord(existing.extensions) ? existing.extensions : {};
+  const pluginExt = isRecord(fileExtensions[name]) ? { ...fileExtensions[name] } : {};
+  if (args[1] === "--clear" || args[1] === "clear") {
+    if (!("llm" in pluginExt) && !currentOverride) {
+      return { code: 0, level: "info", message: `Plugin "${name}" has no LLM override.` };
+    }
+    delete pluginExt["llm"];
+    if (Object.keys(pluginExt).length === 0) delete fileExtensions[name];
+    else fileExtensions[name] = pluginExt;
+    existing.extensions = fileExtensions;
+    await atomicWrite(deps.configPath, JSON.stringify(existing, null, 2), { mode: 384 });
+    const merged2 = mergeExtensionsForPatch(deps.config, fileExtensions);
+    const mergedEntry = merged2[name];
+    if (mergedEntry) {
+      delete mergedEntry["llm"];
+      if (Object.keys(mergedEntry).length === 0) delete merged2[name];
+    }
+    return {
+      code: 0,
+      level: "info",
+      message: `Cleared LLM override for "${name}" \u2014 it now follows the session default (${sessionDefault}). Takes effect immediately for api.llm calls.`,
+      patch: { extensions: merged2 }
+    };
+  }
+  const providerArg = args[1];
+  const modelArg = args[2];
+  if (!providerArg || providerArg.startsWith("--")) return errorResult(PLUGIN_LLM_USAGE);
+  const provider = providerArg === "-" ? void 0 : providerArg;
+  const model = modelArg && modelArg !== "-" ? modelArg : void 0;
+  if (!provider && !model) return errorResult(PLUGIN_LLM_USAGE);
+  const llm = {};
+  if (provider) llm["provider"] = provider;
+  if (model) llm["model"] = model;
+  pluginExt["llm"] = llm;
+  fileExtensions[name] = pluginExt;
+  existing.extensions = fileExtensions;
+  await atomicWrite(deps.configPath, JSON.stringify(existing, null, 2), { mode: 384 });
+  const configured = Object.keys(deps.config.providers ?? {});
+  const note = provider && configured.length > 0 && !configured.includes(provider) ? `
+Note: "${provider}" is not in config.providers (configured: ${configured.join(", ")}). Catalog providers (anthropic, openai, \u2026) still resolve if credentials are available.` : "";
+  const merged = mergeExtensionsForPatch(deps.config, fileExtensions);
+  return {
+    code: 0,
+    level: "info",
+    message: `Plugin "${name}" now routes api.llm calls via provider=${provider ?? "(session)"} model=${model ?? "(session)"}. Session default stays ${sessionDefault}. Takes effect immediately for api.llm calls.${note}`,
+    patch: { extensions: merged }
+  };
+}
+function mergeExtensionsForPatch(config, fileExtensions) {
+  const merged = {};
+  for (const [k, v] of Object.entries(config.extensions ?? {})) {
+    merged[k] = { ...v };
+  }
+  for (const [k, v] of Object.entries(fileExtensions)) {
+    if (isRecord(v)) merged[k] = { ...merged[k] ?? {}, ...v };
+  }
+  for (const k of Object.keys(merged)) {
+    if (!(k in fileExtensions) && !(k in (config.extensions ?? {}))) delete merged[k];
+  }
+  return merged;
+}
+function resolvePluginSpecifier(input) {
+  return OFFICIAL_ALIASES.get(input.toLowerCase()) ?? input;
+}
+function resolvePluginToggleSpecifier(input) {
+  if (input.toLowerCase() === "@wrongstack/telegram") return "telegram";
+  if (auditEntryFor(input)) return input;
+  return resolvePluginSpecifier(input);
+}
+function renderOfficialPlugins(config) {
+  return [
+    "Official plugins:",
+    ...OFFICIAL_PLUGINS.map((p) => {
+      const state = config ? officialPluginState(config, p.specifier) : "";
+      const status = state ? `${state.padEnd(14)} ` : "";
+      return `  ${p.alias.padEnd(12)} ${status}${p.specifier.padEnd(24)} ${p.description}`;
+    }),
+    "",
+    "Use `wstack plugin add <alias>` or `/plugin install <alias>`."
+  ].join("\n");
+}
+function renderConfiguredPlugins(config) {
+  const plugins = config.plugins ?? [];
+  if (plugins.length === 0) {
+    return [
+      "No plugins configured.",
+      "Use `wstack plugin add <specifier>` or `/plugin install <official-alias>`."
+    ].join("\n");
+  }
+  return plugins.map((p) => {
+    const name = pluginName(p);
+    const enabled = typeof p === "object" && p.enabled === false ? "disabled" : "enabled";
+    const official = OFFICIAL_PLUGINS.find((entry) => entry.specifier === name);
+    const suffix = official ? ` (${official.alias})` : "";
+    return `  ${`${name}${suffix}`.padEnd(44)} ${enabled}`;
+  }).join("\n");
+}
+function renderPluginAuditReport(config) {
+  const configured = config.plugins ?? [];
+  const lines = [
+    "Plugin audit report:",
+    "  State shows the effective boot state. Default-active plugins run unless disabled in config.",
+    "  Built-in audit rows are toggleable unless a future row explicitly marks itself locked.",
+    "",
+    "  Built-in audit entries:"
+  ];
+  for (const entry of PLUGIN_AUDIT_ENTRIES) {
+    const { state, source } = effectiveAuditState(config, entry);
+    const policy = entry.canDisable ? "toggleable" : lockedReason(entry);
+    lines.push(
+      `  ${entry.name.padEnd(24)} ${state.padEnd(8)} ${source.padEnd(8)} risk=${entry.risk.padEnd(6)} ${policy.padEnd(24)} ${entry.summary}`
+    );
+  }
+  const extra = configured.filter(
+    (plugin) => !PLUGIN_AUDIT_ENTRIES.some((entry) => pluginMatchesToggleSpec(plugin, entry.name))
+  );
+  if (extra.length > 0) {
+    lines.push("", "  Configured plugins outside the audit list:");
+    for (const plugin of extra) {
+      const name = pluginName(plugin);
+      const state = typeof plugin === "object" && plugin.enabled === false ? "disabled" : "enabled";
+      lines.push(
+        `  ${name.padEnd(24)} ${state.padEnd(8)} config   risk=custom user-configured plugin`
+      );
+    }
+  }
+  lines.push(
+    "",
+    "Use `/plugin menu` in the TUI, or `wstack plugin toggle <name>` for toggleable rows."
+  );
+  return lines.join("\n");
+}
+async function readConfig(file) {
+  try {
+    return JSON.parse(await fs.readFile(file, "utf8"));
+  } catch {
+    return {};
+  }
+}
+function pluginName(p) {
+  return typeof p === "string" ? p : p.name;
+}
+function pluginEntry(spec, enabled) {
+  return enabled ? spec : { name: spec, enabled: false };
+}
+function pluginMatchesToggleSpec(p, spec) {
+  const name = pluginName(p);
+  if (spec === "telegram") return name === "telegram" || name === "@wrongstack/telegram";
+  return name === spec;
+}
+function effectiveAuditState(config, entry) {
+  const configured = (config.plugins ?? []).find(
+    (plugin) => pluginMatchesToggleSpec(plugin, entry.name)
+  );
+  if (configured) {
+    return {
+      state: typeof configured === "object" && configured.enabled === false ? "disabled" : "enabled",
+      source: "config"
+    };
+  }
+  return {
+    state: entry.defaultState === "active" ? "enabled" : "disabled",
+    source: "default"
+  };
+}
+function lockedReason(entry) {
+  if (entry.canDisable) return "toggleable";
+  if (entry.name === "secret-scanner") {
+    return "locked: safety guard";
+  }
+  return "locked: core surface";
+}
+function auditEntryFor(spec) {
+  return PLUGIN_AUDIT_ENTRIES.find((entry) => entry.name === spec);
+}
+function officialPluginState(config, spec) {
+  const match = (config.plugins ?? []).find((p) => pluginName(p) === spec);
+  if (!match) return "not configured";
+  return typeof match === "object" && match.enabled === false ? "disabled" : "enabled";
+}
+async function togglePlugin(spec, deps) {
+  const auditEntry = auditEntryFor(spec);
+  if (auditEntry?.canDisable === false) {
+    return errorResult(`Plugin "${spec}" is locked and cannot be toggled from the plugin menu.`);
+  }
+  const existing = await readConfig(deps.configPath);
+  const plugins = Array.isArray(existing.plugins) ? existing.plugins : [];
+  const idx = plugins.findIndex((p) => pluginMatchesToggleSpec(p, spec));
+  const configured = idx >= 0 ? plugins[idx] : void 0;
+  const enabled = configured ? !(typeof configured === "object" && configured.enabled === false) : auditEntry?.defaultState === "active";
+  if (!configured && !auditEntry) {
+    return errorResult(
+      `Plugin "${spec}" is not configured. Use "wstack plugin add ${spec}" first.`
+    );
+  }
+  let nextPlugins;
+  let nextEnabled;
+  if (enabled) {
+    nextEnabled = false;
+    nextPlugins = plugins.filter((p) => !pluginMatchesToggleSpec(p, spec));
+    if (auditEntry?.defaultState !== "inactive") {
+      nextPlugins.push({ name: spec, enabled: false });
+    }
+  } else {
+    nextEnabled = true;
+    if (auditEntry?.defaultState === "active") {
+      nextPlugins = plugins.filter((p) => !pluginMatchesToggleSpec(p, spec));
+    } else {
+      nextPlugins = plugins.filter((p) => !pluginMatchesToggleSpec(p, spec));
+      nextPlugins.push(spec);
+    }
+  }
+  const features = {
+    ...isRecord(deps.config.features) ? deps.config.features : {},
+    ...isRecord(existing.features) ? existing.features : {},
+    plugins: true
+  };
+  existing.plugins = nextPlugins;
+  existing.features = features;
+  await atomicWrite(deps.configPath, JSON.stringify(existing, null, 2), { mode: 384 });
+  const restartRequired = spec === "branch-guard" && !nextEnabled ? void 0 : true;
+  return {
+    code: 0,
+    level: "info",
+    message: `${nextEnabled ? "Enabled" : "Disabled"} "${spec}". Config written to ${deps.configPath}.` + (spec === "branch-guard" && !nextEnabled ? " The running branch-guard hook will disable itself on config update." : ""),
+    patch: { plugins: nextPlugins, features },
+    restartRequired
+  };
+}
+async function upsertPlugin(spec, opts, deps, verb) {
+  const existing = await readConfig(deps.configPath);
+  const plugins = Array.isArray(existing.plugins) ? existing.plugins : [];
+  const idx = plugins.findIndex((p) => pluginName(p) === spec);
+  const nextEntry = pluginEntry(spec, opts.enabled);
+  if (idx >= 0) plugins[idx] = nextEntry;
+  else plugins.push(nextEntry);
+  const features = {
+    ...isRecord(deps.config.features) ? deps.config.features : {},
+    ...isRecord(existing.features) ? existing.features : {},
+    plugins: true
+  };
+  existing.plugins = plugins;
+  existing.features = features;
+  await atomicWrite(deps.configPath, JSON.stringify(existing, null, 2), { mode: 384 });
+  const restartRequired = spec === "branch-guard" && !opts.enabled ? void 0 : true;
+  return {
+    code: 0,
+    level: "info",
+    message: `${verb} "${spec}" (${opts.enabled ? "enabled" : "disabled"}). Config written to ${deps.configPath}.` + (spec === "branch-guard" && !opts.enabled ? " The running branch-guard hook will disable itself on config update." : ""),
+    patch: { plugins, features },
+    restartRequired
+  };
+}
+async function removePlugin(spec, deps) {
+  const existing = await readConfig(deps.configPath);
+  const plugins = Array.isArray(existing.plugins) ? existing.plugins : [];
+  const next = plugins.filter((p) => pluginName(p) !== spec);
+  if (next.length === plugins.length) {
+    return errorResult(`Plugin "${spec}" not in config.`);
+  }
+  existing.plugins = next;
+  await atomicWrite(deps.configPath, JSON.stringify(existing, null, 2), { mode: 384 });
+  return {
+    code: 0,
+    level: "info",
+    message: `Removed "${spec}" from config.`,
+    patch: { plugins: next },
+    restartRequired: true
+  };
+}
+function errorResult(message) {
+  return { code: 1, level: "error", message };
+}
+function isRecord(value) {
+  return Boolean(value) && typeof value === "object" && !Array.isArray(value);
+}
+
+export {
+  PLUGIN_AUDIT_ENTRIES,
+  runPluginManagementCommand
+};
+//# sourceMappingURL=chunk-XWEGWYDU.js.map

package/dist/chunk-XWEGWYDU.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../src/plugin-management.ts"],
+  "sourcesContent": ["import * as fs from 'node:fs/promises';\nimport { atomicWrite } from '@wrongstack/core/utils';\nimport type { Config, PluginConfig, PluginManagerConfig } from '@wrongstack/core/types';\nimport { OFFICIAL_PLUGIN_AUDIT_ENTRIES } from '@wrongstack/plugins/audit';\n\nexport interface PluginAuditEntry {\n  name: string;\n  risk: 'low' | 'medium' | 'high';\n  summary: string;\n  defaultState: 'active' | 'inactive';\n  canDisable: boolean;\n}\n\n/** Host-owned plugins that are not published by @wrongstack/plugins. */\nconst HOST_PLUGIN_AUDIT_ENTRIES: readonly PluginAuditEntry[] = [\n  {\n    name: 'wstack-prompts',\n    risk: 'medium',\n    summary: 'Prompt library and prompt authoring commands.',\n    defaultState: 'active',\n    canDisable: true,\n  },\n  {\n    name: 'wstack-sync',\n    risk: 'medium',\n    summary: 'Cloud sync commands for prompts, skills, settings, memory, and history.',\n    defaultState: 'active',\n    canDisable: true,\n  },\n  {\n    name: 'wstack-git',\n    risk: 'high',\n    summary: 'Git commands for commit, status checks, and push.',\n    defaultState: 'active',\n    canDisable: true,\n  },\n  {\n    name: 'wstack-observability',\n    risk: 'low',\n    summary: 'Runtime metrics and health slash commands.',\n    defaultState: 'active',\n    canDisable: true,\n  },\n  {\n    name: 'wstack-chimera',\n    risk: 'medium',\n    summary: 'Spawns a post-session code review subagent when explicitly enabled.',\n    defaultState: 'inactive',\n    canDisable: true,\n  },\n  {\n    name: 'wstack-skills',\n    risk: 'medium',\n    summary: 'Skill library, authoring, install, update, and uninstall commands.',\n    defaultState: 'active',\n    canDisable: true,\n  },\n  {\n    name: 'wstack-plan',\n    risk: 'medium',\n    summary: 'Strategic plan board slash command.',\n    defaultState: 'active',\n    canDisable: true,\n  },\n  {\n    name: '@wrongstack/plug-lsp',\n    risk: 'medium',\n    summary: 'Language Server Protocol tools and slash commands.',\n    defaultState: 'inactive',\n    canDisable: true,\n  },\n  {\n    name: 'telegram',\n    risk: 'medium',\n    summary: 'Telegram bridge for messages, approvals, and notifications.',\n    defaultState: 'inactive',\n    canDisable: true,\n  },\n] as const;\n\nexport const PLUGIN_AUDIT_ENTRIES: readonly PluginAuditEntry[] = Object.freeze([\n  ...HOST_PLUGIN_AUDIT_ENTRIES,\n  ...OFFICIAL_PLUGIN_AUDIT_ENTRIES,\n]);\n\nexport const OFFICIAL_PLUGINS = [\n  {\n    alias: 'telegram',\n    specifier: '@wrongstack/telegram',\n    description: 'Telegram bridge for prompts, notifications, and slash commands.',\n  },\n  {\n    alias: 'lsp',\n    specifier: '@wrongstack/plug-lsp',\n    description: 'Language Server Protocol tools for code intelligence.',\n  },\n] as const;\n\nexport interface PluginManagementDeps {\n  config: Config;\n  configPath: string;\n}\n\nexport interface PluginManagementResult {\n  code: number;\n  level: 'output' | 'info' | 'error';\n  message: string;\n  patch?: {\n    plugins?: (string | PluginConfig)[] | undefined;\n    features?: Record<string, unknown>;\n    pluginManager?: PluginManagerConfig | undefined;\n    /**\n     * Full replacement `extensions` map (patchConfig is a SHALLOW merge,\n     * so per-plugin llm overrides must ship the whole merged object).\n     */\n    extensions?: Record<string, Record<string, unknown>> | undefined;\n  };\n  restartRequired?: boolean | undefined;\n}\n\nconst OFFICIAL_ALIASES = new Map<string, string>(\n  OFFICIAL_PLUGINS.flatMap((p) => [\n    [p.alias, p.specifier],\n    [p.specifier, p.specifier],\n  ]),\n);\n\nexport async function runPluginManagementCommand(\n  args: string[],\n  deps: PluginManagementDeps,\n): Promise<PluginManagementResult> {\n  const sub = args[0];\n  if (!sub || sub === 'list' || sub === 'status') {\n    return {\n      code: 0,\n      level: 'output',\n      message: renderConfiguredPlugins(deps.config),\n    };\n  }\n  if (sub === 'official' || sub === 'officials') {\n    return {\n      code: 0,\n      level: 'output',\n      message: renderOfficialPlugins(deps.config),\n    };\n  }\n  if (sub === 'report' || sub === 'audit' || sub === 'menu') {\n    return {\n      code: 0,\n      level: 'output',\n      message: renderPluginAuditReport(deps.config),\n    };\n  }\n  if (sub === 'add' || sub === 'install') {\n    const spec = args[1];\n    if (!spec) {\n      return errorResult('Usage: wstack plugin add <specifier|official-alias> [--disabled]');\n    }\n    return upsertPlugin(\n      resolvePluginSpecifier(spec),\n      { enabled: !args.includes('--disabled') },\n      deps,\n      'Added',\n    );\n  }\n  if (sub === 'remove' || sub === 'rm' || sub === 'uninstall') {\n    const spec = args[1];\n    if (!spec) {\n      return errorResult('Usage: wstack plugin remove <specifier|official-alias>');\n    }\n    return removePlugin(resolvePluginSpecifier(spec), deps);\n  }\n  if (sub === 'enable' || sub === 'disable') {\n    const spec = args[1];\n    if (!spec) {\n      return errorResult(`Usage: wstack plugin ${sub} <specifier|official-alias>`);\n    }\n    return upsertPlugin(\n      resolvePluginSpecifier(spec),\n      { enabled: sub === 'enable' },\n      deps,\n      sub === 'enable' ? 'Enabled' : 'Disabled',\n    );\n  }\n  if (sub === 'toggle') {\n    const spec = args[1];\n    if (!spec) {\n      return errorResult('Usage: wstack plugin toggle <plugin-name|official-alias>');\n    }\n    return togglePlugin(resolvePluginToggleSpecifier(spec), deps);\n  }\n  if (sub === 'manager') {\n    return runPluginManagerPolicyCommand(args.slice(1), deps);\n  }\n  if (sub === 'llm') {\n    return runPluginLlmCommand(args.slice(1), deps);\n  }\n  return errorResult(\n    `Unknown plugin subcommand: ${sub}\\nUsage: wstack plugin [list|status|report|menu|official|add|install|remove|enable|disable|toggle|manager|llm]`,\n  );\n}\n\nconst PLUGIN_MANAGER_POLICY_USAGE = [\n  'Usage:',\n  '  wstack plugin manager                         List plugins locked against LLM state changes.',\n  '  wstack plugin manager lock <plugin|*>         Prevent plugin_manager from enabling/disabling it.',\n  '  wstack plugin manager unlock <plugin|*>       Restore plugin_manager enable/disable access.',\n  '',\n  'This policy affects only the LLM-facing plugin_manager tool. Human /plugin and',\n  'wstack plugin enable/disable commands remain available.',\n].join('\\n');\n\nasync function runPluginManagerPolicyCommand(\n  args: string[],\n  deps: PluginManagementDeps,\n): Promise<PluginManagementResult> {\n  const action = args[0] ?? 'list';\n  if (action === 'list') {\n    const locked = deps.config.pluginManager?.locked ?? [];\n    return {\n      code: 0,\n      level: 'output',\n      message:\n        locked.length === 0\n          ? 'LLM plugin-manager policy: no plugins are locked.'\n          : `LLM plugin-manager policy \u2014 locked (${locked.length}):\\n${locked.map((name) => `  ${name}`).join('\\n')}`,\n    };\n  }\n\n  if (action !== 'lock' && action !== 'unlock') {\n    return errorResult(PLUGIN_MANAGER_POLICY_USAGE);\n  }\n  const rawName = args[1];\n  if (!rawName) return errorResult(PLUGIN_MANAGER_POLICY_USAGE);\n  const name = rawName === '*' ? '*' : resolvePluginToggleSpecifier(rawName);\n\n  const existing = await readConfig(deps.configPath);\n  const filePolicy = isRecord(existing.pluginManager) ? existing.pluginManager : undefined;\n  const current = Array.isArray(filePolicy?.['locked'])\n    ? filePolicy['locked'].filter((entry): entry is string => typeof entry === 'string')\n    : [...(deps.config.pluginManager?.locked ?? [])];\n  const canonical = canonicalPolicyName(name);\n  const next =\n    action === 'lock'\n      ? current.some((entry) => canonicalPolicyName(entry) === canonical)\n        ? current\n        : [...current, name]\n      : current.filter((entry) => canonicalPolicyName(entry) !== canonical);\n\n  const pluginManager: PluginManagerConfig = { locked: next };\n  existing.pluginManager = { ...(filePolicy ?? {}), ...pluginManager };\n  await atomicWrite(deps.configPath, JSON.stringify(existing, null, 2), { mode: 0o600 });\n\n  return {\n    code: 0,\n    level: 'info',\n    message:\n      action === 'lock'\n        ? `Locked \"${name}\" against LLM enable/disable changes. Human plugin commands still work.`\n        : `Unlocked \"${name}\" for LLM enable/disable changes.`,\n    patch: { pluginManager },\n  };\n}\n\nfunction canonicalPolicyName(name: string): string {\n  if (name === '*') return name;\n  return resolvePluginToggleSpecifier(name).trim().toLowerCase();\n}\n\nconst PLUGIN_LLM_USAGE = [\n  'Usage:',\n  '  wstack plugin llm                               List every per-plugin LLM override.',\n  \"  wstack plugin llm <plugin>                      Show one plugin's LLM override.\",\n  '  wstack plugin llm <plugin> <provider> [model]   Route this plugin through a provider (and model).',\n  '  wstack plugin llm <plugin> - <model>            Keep the session provider, override only the model.',\n  '  wstack plugin llm <plugin> --clear              Remove the override (back to the session default).',\n  '',\n  'The override is stored as config.extensions.<plugin>.llm and is used by',\n  'every api.llm call the plugin makes. Without an override, plugins follow',\n  'the active session provider/model (the chat leader).',\n].join('\\n');\n\n/**\n * Render every configured per-plugin LLM override. Reads\n * `config.extensions.<plugin>.llm` across all plugins so the user can\n * see, at a glance, which plugins deviate from the session default.\n */\nfunction renderPluginLlmOverviews(config: Config, sessionDefault: string): string {\n  const rows: Array<{ name: string; provider: string; model: string }> = [];\n  for (const [pluginName, ext] of Object.entries(config.extensions ?? {})) {\n    const llm = (ext as Record<string, unknown>)?.['llm'];\n    if (llm && typeof llm === 'object') {\n      const o = llm as { provider?: string; model?: string };\n      rows.push({\n        name: pluginName,\n        provider: o.provider ?? '(session)',\n        model: o.model ?? '(session)',\n      });\n    }\n  }\n  const lines = [`Per-plugin LLM routing (session default: ${sessionDefault}):`];\n  if (rows.length === 0) {\n    lines.push(\n      '  No plugin overrides \u2014 every plugin follows the session default.',\n      '  Set one with: wstack plugin llm <plugin> <provider> [model]',\n    );\n  } else {\n    rows.sort((a, b) => a.name.localeCompare(b.name));\n    for (const r of rows) {\n      lines.push(`  ${r.name.padEnd(24)} provider=${r.provider.padEnd(16)} model=${r.model}`);\n    }\n    lines.push('', 'Clear one with: wstack plugin llm <plugin> --clear');\n  }\n  return lines.join('\\n');\n}\n\n/**\n * `wstack plugin llm \u2026` \u2014 per-plugin LLM routing. The chat leader's\n * provider/model stays the DEFAULT; this stores an override under\n * `config.extensions[<plugin>].llm = { provider?, model? }` which\n * `api.llm` resolves ahead of the session default on every call.\n */\nasync function runPluginLlmCommand(\n  args: string[],\n  deps: PluginManagementDeps,\n): Promise<PluginManagementResult> {\n  const sessionDefault = `${deps.config.provider ?? '?'} / ${deps.config.model ?? '?'}`;\n\n  // \u2500\u2500 List: `plugin llm` (no name) or `plugin llm list` \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n  if (args.length === 0 || args[0] === 'list') {\n    return {\n      code: 0,\n      level: 'output',\n      message: renderPluginLlmOverviews(deps.config, sessionDefault),\n    };\n  }\n\n  const name = args[0];\n  if (!name || name.startsWith('-')) return errorResult(PLUGIN_LLM_USAGE);\n\n  const currentOverride = deps.config.extensions?.[name]?.['llm'];\n\n  // \u2500\u2500 Show \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n  if (args.length === 1) {\n    const lines = [`LLM routing for plugin \"${name}\":`];\n    if (currentOverride && typeof currentOverride === 'object') {\n      const o = currentOverride as { provider?: string; model?: string };\n      lines.push(\n        `  override: provider=${o.provider ?? '(session)'} model=${o.model ?? '(session)'}`,\n        `  session default: ${sessionDefault}`,\n      );\n    } else {\n      lines.push(\n        `  no override \u2014 follows the session default (${sessionDefault}).`,\n        `  Set one with: wstack plugin llm ${name} <provider> [model]`,\n      );\n    }\n    return { code: 0, level: 'output', message: lines.join('\\n') };\n  }\n\n  const existing = await readConfig(deps.configPath);\n  const fileExtensions = isRecord(existing.extensions)\n    ? (existing.extensions as Record<string, unknown>)\n    : {};\n  const pluginExt = isRecord(fileExtensions[name])\n    ? { ...(fileExtensions[name] as Record<string, unknown>) }\n    : {};\n\n  // \u2500\u2500 Clear \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n  if (args[1] === '--clear' || args[1] === 'clear') {\n    if (!('llm' in pluginExt) && !currentOverride) {\n      return { code: 0, level: 'info', message: `Plugin \"${name}\" has no LLM override.` };\n    }\n    delete pluginExt['llm'];\n    if (Object.keys(pluginExt).length === 0) delete fileExtensions[name];\n    else fileExtensions[name] = pluginExt;\n    existing.extensions = fileExtensions;\n    await atomicWrite(deps.configPath, JSON.stringify(existing, null, 2), { mode: 0o600 });\n    const merged = mergeExtensionsForPatch(deps.config, fileExtensions);\n    // The in-memory config may still carry the old override \u2014 the merge\n    // above unions both sources, so drop the key explicitly.\n    const mergedEntry = merged[name];\n    if (mergedEntry) {\n      delete mergedEntry['llm'];\n      if (Object.keys(mergedEntry).length === 0) delete merged[name];\n    }\n    return {\n      code: 0,\n      level: 'info',\n      message:\n        `Cleared LLM override for \"${name}\" \u2014 it now follows the session default (${sessionDefault}). ` +\n        'Takes effect immediately for api.llm calls.',\n      patch: { extensions: merged },\n    };\n  }\n\n  // \u2500\u2500 Set \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n  const providerArg = args[1];\n  const modelArg = args[2];\n  if (!providerArg || providerArg.startsWith('--')) return errorResult(PLUGIN_LLM_USAGE);\n  const provider = providerArg === '-' ? undefined : providerArg;\n  const model = modelArg && modelArg !== '-' ? modelArg : undefined;\n  if (!provider && !model) return errorResult(PLUGIN_LLM_USAGE);\n\n  const llm: Record<string, unknown> = {};\n  if (provider) llm['provider'] = provider;\n  if (model) llm['model'] = model;\n  pluginExt['llm'] = llm;\n  fileExtensions[name] = pluginExt;\n  existing.extensions = fileExtensions;\n  await atomicWrite(deps.configPath, JSON.stringify(existing, null, 2), { mode: 0o600 });\n\n  // Soft sanity note: an unknown provider name still works if the\n  // models.dev catalog knows it, but flag likely typos against the\n  // user's configured providers.\n  const configured = Object.keys(deps.config.providers ?? {});\n  const note =\n    provider && configured.length > 0 && !configured.includes(provider)\n      ? `\\nNote: \"${provider}\" is not in config.providers (configured: ${configured.join(', ')}). ` +\n        'Catalog providers (anthropic, openai, \u2026) still resolve if credentials are available.'\n      : '';\n\n  const merged = mergeExtensionsForPatch(deps.config, fileExtensions);\n  return {\n    code: 0,\n    level: 'info',\n    message:\n      `Plugin \"${name}\" now routes api.llm calls via ` +\n      `provider=${provider ?? '(session)'} model=${model ?? '(session)'}. ` +\n      `Session default stays ${sessionDefault}. Takes effect immediately for api.llm calls.${note}`,\n    patch: { extensions: merged },\n  };\n}\n\n/**\n * patchConfig is a shallow merge \u2014 build the FULL extensions map:\n * in-memory config first, then the file's (just-written) entries win.\n */\nfunction mergeExtensionsForPatch(\n  config: Config,\n  fileExtensions: Record<string, unknown>,\n): Record<string, Record<string, unknown>> {\n  const merged: Record<string, Record<string, unknown>> = {};\n  for (const [k, v] of Object.entries(config.extensions ?? {})) {\n    merged[k] = { ...v };\n  }\n  for (const [k, v] of Object.entries(fileExtensions)) {\n    if (isRecord(v)) merged[k] = { ...(merged[k] ?? {}), ...v };\n  }\n  // A cleared plugin entry must disappear from the merged view too.\n  for (const k of Object.keys(merged)) {\n    if (!(k in fileExtensions) && !(k in (config.extensions ?? {}))) delete merged[k];\n  }\n  return merged;\n}\n\nexport function resolvePluginSpecifier(input: string): string {\n  return OFFICIAL_ALIASES.get(input.toLowerCase()) ?? input;\n}\n\nfunction resolvePluginToggleSpecifier(input: string): string {\n  if (input.toLowerCase() === '@wrongstack/telegram') return 'telegram';\n  if (auditEntryFor(input)) return input;\n  return resolvePluginSpecifier(input);\n}\n\nexport function renderOfficialPlugins(config?: Config): string {\n  return [\n    'Official plugins:',\n    ...OFFICIAL_PLUGINS.map((p) => {\n      const state = config ? officialPluginState(config, p.specifier) : '';\n      const status = state ? `${state.padEnd(14)} ` : '';\n      return `  ${p.alias.padEnd(12)} ${status}${p.specifier.padEnd(24)} ${p.description}`;\n    }),\n    '',\n    'Use `wstack plugin add <alias>` or `/plugin install <alias>`.',\n  ].join('\\n');\n}\n\nexport function renderConfiguredPlugins(config: Config): string {\n  const plugins = config.plugins ?? [];\n  if (plugins.length === 0) {\n    return [\n      'No plugins configured.',\n      'Use `wstack plugin add <specifier>` or `/plugin install <official-alias>`.',\n    ].join('\\n');\n  }\n  return plugins\n    .map((p) => {\n      const name = pluginName(p);\n      const enabled = typeof p === 'object' && p.enabled === false ? 'disabled' : 'enabled';\n      const official = OFFICIAL_PLUGINS.find((entry) => entry.specifier === name);\n      const suffix = official ? ` (${official.alias})` : '';\n      return `  ${`${name}${suffix}`.padEnd(44)} ${enabled}`;\n    })\n    .join('\\n');\n}\n\nexport function renderPluginAuditReport(config: Config): string {\n  const configured = config.plugins ?? [];\n  const lines = [\n    'Plugin audit report:',\n    '  State shows the effective boot state. Default-active plugins run unless disabled in config.',\n    '  Built-in audit rows are toggleable unless a future row explicitly marks itself locked.',\n    '',\n    '  Built-in audit entries:',\n  ];\n\n  for (const entry of PLUGIN_AUDIT_ENTRIES) {\n    const { state, source } = effectiveAuditState(config, entry);\n    const policy = entry.canDisable ? 'toggleable' : lockedReason(entry);\n    lines.push(\n      `  ${entry.name.padEnd(24)} ${state.padEnd(8)} ${source.padEnd(8)} risk=${entry.risk.padEnd(6)} ${policy.padEnd(24)} ${entry.summary}`,\n    );\n  }\n\n  const extra = configured.filter(\n    (plugin) => !PLUGIN_AUDIT_ENTRIES.some((entry) => pluginMatchesToggleSpec(plugin, entry.name)),\n  );\n  if (extra.length > 0) {\n    lines.push('', '  Configured plugins outside the audit list:');\n    for (const plugin of extra) {\n      const name = pluginName(plugin);\n      const state = typeof plugin === 'object' && plugin.enabled === false ? 'disabled' : 'enabled';\n      lines.push(\n        `  ${name.padEnd(24)} ${state.padEnd(8)} config   risk=custom user-configured plugin`,\n      );\n    }\n  }\n\n  lines.push(\n    '',\n    'Use `/plugin menu` in the TUI, or `wstack plugin toggle <name>` for toggleable rows.',\n  );\n  return lines.join('\\n');\n}\n\nasync function readConfig(file: string): Promise<Record<string, unknown>> {\n  try {\n    return JSON.parse(await fs.readFile(file, 'utf8')) as Record<string, unknown>;\n  } catch {\n    return {};\n  }\n}\n\nfunction pluginName(p: string | PluginConfig): string {\n  return typeof p === 'string' ? p : p.name;\n}\n\nfunction pluginEntry(spec: string, enabled: boolean): string | PluginConfig {\n  return enabled ? spec : { name: spec, enabled: false };\n}\n\nfunction pluginMatchesToggleSpec(p: string | PluginConfig, spec: string): boolean {\n  const name = pluginName(p);\n  if (spec === 'telegram') return name === 'telegram' || name === '@wrongstack/telegram';\n  return name === spec;\n}\n\nfunction effectiveAuditState(\n  config: Config,\n  entry: PluginAuditEntry,\n): { state: 'enabled' | 'disabled'; source: 'config' | 'default' } {\n  const configured = (config.plugins ?? []).find((plugin) =>\n    pluginMatchesToggleSpec(plugin, entry.name),\n  );\n  if (configured) {\n    return {\n      state:\n        typeof configured === 'object' && configured.enabled === false ? 'disabled' : 'enabled',\n      source: 'config',\n    };\n  }\n  return {\n    state: entry.defaultState === 'active' ? 'enabled' : 'disabled',\n    source: 'default',\n  };\n}\n\nfunction lockedReason(entry: PluginAuditEntry): string {\n  if (entry.canDisable) return 'toggleable';\n  if (entry.name === 'secret-scanner') {\n    return 'locked: safety guard';\n  }\n  return 'locked: core surface';\n}\n\nfunction auditEntryFor(spec: string): PluginAuditEntry | undefined {\n  return PLUGIN_AUDIT_ENTRIES.find((entry) => entry.name === spec);\n}\n\nfunction officialPluginState(\n  config: Config,\n  spec: string,\n): 'enabled' | 'disabled' | 'not configured' {\n  const match = (config.plugins ?? []).find((p) => pluginName(p) === spec);\n  if (!match) return 'not configured';\n  return typeof match === 'object' && match.enabled === false ? 'disabled' : 'enabled';\n}\n\nasync function togglePlugin(\n  spec: string,\n  deps: PluginManagementDeps,\n): Promise<PluginManagementResult> {\n  const auditEntry = auditEntryFor(spec);\n  if (auditEntry?.canDisable === false) {\n    return errorResult(`Plugin \"${spec}\" is locked and cannot be toggled from the plugin menu.`);\n  }\n\n  const existing = await readConfig(deps.configPath);\n  const plugins = Array.isArray(existing.plugins)\n    ? (existing.plugins as Array<string | PluginConfig>)\n    : [];\n  const idx = plugins.findIndex((p) => pluginMatchesToggleSpec(p, spec));\n  const configured = idx >= 0 ? plugins[idx] : undefined;\n  const enabled = configured\n    ? !(typeof configured === 'object' && configured.enabled === false)\n    : auditEntry?.defaultState === 'active';\n\n  if (!configured && !auditEntry) {\n    return errorResult(\n      `Plugin \"${spec}\" is not configured. Use \"wstack plugin add ${spec}\" first.`,\n    );\n  }\n\n  let nextPlugins: Array<string | PluginConfig>;\n  let nextEnabled: boolean;\n  if (enabled) {\n    nextEnabled = false;\n    nextPlugins = plugins.filter((p) => !pluginMatchesToggleSpec(p, spec));\n    if (auditEntry?.defaultState !== 'inactive') {\n      nextPlugins.push({ name: spec, enabled: false });\n    }\n  } else {\n    nextEnabled = true;\n    if (auditEntry?.defaultState === 'active') {\n      nextPlugins = plugins.filter((p) => !pluginMatchesToggleSpec(p, spec));\n    } else {\n      nextPlugins = plugins.filter((p) => !pluginMatchesToggleSpec(p, spec));\n      nextPlugins.push(spec);\n    }\n  }\n\n  const features = {\n    ...(isRecord(deps.config.features) ? deps.config.features : {}),\n    ...(isRecord(existing.features) ? existing.features : {}),\n    plugins: true,\n  };\n  existing.plugins = nextPlugins;\n  existing.features = features;\n  await atomicWrite(deps.configPath, JSON.stringify(existing, null, 2), { mode: 0o600 });\n  const restartRequired = spec === 'branch-guard' && !nextEnabled ? undefined : true;\n  return {\n    code: 0,\n    level: 'info',\n    message:\n      `${nextEnabled ? 'Enabled' : 'Disabled'} \"${spec}\". Config written to ${deps.configPath}.` +\n      (spec === 'branch-guard' && !nextEnabled\n        ? ' The running branch-guard hook will disable itself on config update.'\n        : ''),\n    patch: { plugins: nextPlugins, features },\n    restartRequired,\n  };\n}\n\nasync function upsertPlugin(\n  spec: string,\n  opts: { enabled: boolean },\n  deps: PluginManagementDeps,\n  verb: string,\n): Promise<PluginManagementResult> {\n  const existing = await readConfig(deps.configPath);\n  const plugins = Array.isArray(existing.plugins)\n    ? (existing.plugins as Array<string | PluginConfig>)\n    : [];\n  const idx = plugins.findIndex((p) => pluginName(p) === spec);\n  const nextEntry = pluginEntry(spec, opts.enabled);\n  if (idx >= 0) plugins[idx] = nextEntry;\n  else plugins.push(nextEntry);\n  const features = {\n    ...(isRecord(deps.config.features) ? deps.config.features : {}),\n    ...(isRecord(existing.features) ? existing.features : {}),\n    plugins: true,\n  };\n  existing.plugins = plugins;\n  existing.features = features;\n  await atomicWrite(deps.configPath, JSON.stringify(existing, null, 2), { mode: 0o600 });\n  const restartRequired = spec === 'branch-guard' && !opts.enabled ? undefined : true;\n  return {\n    code: 0,\n    level: 'info',\n    message:\n      `${verb} \"${spec}\" (${opts.enabled ? 'enabled' : 'disabled'}). Config written to ${deps.configPath}.` +\n      (spec === 'branch-guard' && !opts.enabled\n        ? ' The running branch-guard hook will disable itself on config update.'\n        : ''),\n    patch: { plugins, features },\n    restartRequired,\n  };\n}\n\nasync function removePlugin(\n  spec: string,\n  deps: PluginManagementDeps,\n): Promise<PluginManagementResult> {\n  const existing = await readConfig(deps.configPath);\n  const plugins = Array.isArray(existing.plugins)\n    ? (existing.plugins as Array<string | PluginConfig>)\n    : [];\n  const next = plugins.filter((p) => pluginName(p) !== spec);\n  if (next.length === plugins.length) {\n    return errorResult(`Plugin \"${spec}\" not in config.`);\n  }\n  existing.plugins = next;\n  await atomicWrite(deps.configPath, JSON.stringify(existing, null, 2), { mode: 0o600 });\n  return {\n    code: 0,\n    level: 'info',\n    message: `Removed \"${spec}\" from config.`,\n    patch: { plugins: next },\n    restartRequired: true,\n  };\n}\n\nfunction errorResult(message: string): PluginManagementResult {\n  return { code: 1, level: 'error', message };\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return Boolean(value) && typeof value === 'object' && !Array.isArray(value);\n}\n"],
+  "mappings": ";;;AAAA,YAAY,QAAQ;AACpB,SAAS,mBAAmB;AAE5B,SAAS,qCAAqC;AAW9C,IAAM,4BAAyD;AAAA,EAC7D;AAAA,IACE,MAAM;AAAA,IACN,MAAM;AAAA,IACN,SAAS;AAAA,IACT,cAAc;AAAA,IACd,YAAY;AAAA,EACd;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,MAAM;AAAA,IACN,SAAS;AAAA,IACT,cAAc;AAAA,IACd,YAAY;AAAA,EACd;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,MAAM;AAAA,IACN,SAAS;AAAA,IACT,cAAc;AAAA,IACd,YAAY;AAAA,EACd;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,MAAM;AAAA,IACN,SAAS;AAAA,IACT,cAAc;AAAA,IACd,YAAY;AAAA,EACd;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,MAAM;AAAA,IACN,SAAS;AAAA,IACT,cAAc;AAAA,IACd,YAAY;AAAA,EACd;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,MAAM;AAAA,IACN,SAAS;AAAA,IACT,cAAc;AAAA,IACd,YAAY;AAAA,EACd;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,MAAM;AAAA,IACN,SAAS;AAAA,IACT,cAAc;AAAA,IACd,YAAY;AAAA,EACd;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,MAAM;AAAA,IACN,SAAS;AAAA,IACT,cAAc;AAAA,IACd,YAAY;AAAA,EACd;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,MAAM;AAAA,IACN,SAAS;AAAA,IACT,cAAc;AAAA,IACd,YAAY;AAAA,EACd;AACF;AAEO,IAAM,uBAAoD,OAAO,OAAO;AAAA,EAC7E,GAAG;AAAA,EACH,GAAG;AACL,CAAC;AAEM,IAAM,mBAAmB;AAAA,EAC9B;AAAA,IACE,OAAO;AAAA,IACP,WAAW;AAAA,IACX,aAAa;AAAA,EACf;AAAA,EACA;AAAA,IACE,OAAO;AAAA,IACP,WAAW;AAAA,IACX,aAAa;AAAA,EACf;AACF;AAwBA,IAAM,mBAAmB,IAAI;AAAA,EAC3B,iBAAiB,QAAQ,CAAC,MAAM;AAAA,IAC9B,CAAC,EAAE,OAAO,EAAE,SAAS;AAAA,IACrB,CAAC,EAAE,WAAW,EAAE,SAAS;AAAA,EAC3B,CAAC;AACH;AAEA,eAAsB,2BACpB,MACA,MACiC;AACjC,QAAM,MAAM,KAAK,CAAC;AAClB,MAAI,CAAC,OAAO,QAAQ,UAAU,QAAQ,UAAU;AAC9C,WAAO;AAAA,MACL,MAAM;AAAA,MACN,OAAO;AAAA,MACP,SAAS,wBAAwB,KAAK,MAAM;AAAA,IAC9C;AAAA,EACF;AACA,MAAI,QAAQ,cAAc,QAAQ,aAAa;AAC7C,WAAO;AAAA,MACL,MAAM;AAAA,MACN,OAAO;AAAA,MACP,SAAS,sBAAsB,KAAK,MAAM;AAAA,IAC5C;AAAA,EACF;AACA,MAAI,QAAQ,YAAY,QAAQ,WAAW,QAAQ,QAAQ;AACzD,WAAO;AAAA,MACL,MAAM;AAAA,MACN,OAAO;AAAA,MACP,SAAS,wBAAwB,KAAK,MAAM;AAAA,IAC9C;AAAA,EACF;AACA,MAAI,QAAQ,SAAS,QAAQ,WAAW;AACtC,UAAM,OAAO,KAAK,CAAC;AACnB,QAAI,CAAC,MAAM;AACT,aAAO,YAAY,kEAAkE;AAAA,IACvF;AACA,WAAO;AAAA,MACL,uBAAuB,IAAI;AAAA,MAC3B,EAAE,SAAS,CAAC,KAAK,SAAS,YAAY,EAAE;AAAA,MACxC;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACA,MAAI,QAAQ,YAAY,QAAQ,QAAQ,QAAQ,aAAa;AAC3D,UAAM,OAAO,KAAK,CAAC;AACnB,QAAI,CAAC,MAAM;AACT,aAAO,YAAY,wDAAwD;AAAA,IAC7E;AACA,WAAO,aAAa,uBAAuB,IAAI,GAAG,IAAI;AAAA,EACxD;AACA,MAAI,QAAQ,YAAY,QAAQ,WAAW;AACzC,UAAM,OAAO,KAAK,CAAC;AACnB,QAAI,CAAC,MAAM;AACT,aAAO,YAAY,wBAAwB,GAAG,6BAA6B;AAAA,IAC7E;AACA,WAAO;AAAA,MACL,uBAAuB,IAAI;AAAA,MAC3B,EAAE,SAAS,QAAQ,SAAS;AAAA,MAC5B;AAAA,MACA,QAAQ,WAAW,YAAY;AAAA,IACjC;AAAA,EACF;AACA,MAAI,QAAQ,UAAU;AACpB,UAAM,OAAO,KAAK,CAAC;AACnB,QAAI,CAAC,MAAM;AACT,aAAO,YAAY,0DAA0D;AAAA,IAC/E;AACA,WAAO,aAAa,6BAA6B,IAAI,GAAG,IAAI;AAAA,EAC9D;AACA,MAAI,QAAQ,WAAW;AACrB,WAAO,8BAA8B,KAAK,MAAM,CAAC,GAAG,IAAI;AAAA,EAC1D;AACA,MAAI,QAAQ,OAAO;AACjB,WAAO,oBAAoB,KAAK,MAAM,CAAC,GAAG,IAAI;AAAA,EAChD;AACA,SAAO;AAAA,IACL,8BAA8B,GAAG;AAAA;AAAA,EACnC;AACF;AAEA,IAAM,8BAA8B;AAAA,EAClC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,EAAE,KAAK,IAAI;AAEX,eAAe,8BACb,MACA,MACiC;AACjC,QAAM,SAAS,KAAK,CAAC,KAAK;AAC1B,MAAI,WAAW,QAAQ;AACrB,UAAM,SAAS,KAAK,OAAO,eAAe,UAAU,CAAC;AACrD,WAAO;AAAA,MACL,MAAM;AAAA,MACN,OAAO;AAAA,MACP,SACE,OAAO,WAAW,IACd,sDACA,4CAAuC,OAAO,MAAM;AAAA,EAAO,OAAO,IAAI,CAACA,UAAS,KAAKA,KAAI,EAAE,EAAE,KAAK,IAAI,CAAC;AAAA,IAC/G;AAAA,EACF;AAEA,MAAI,WAAW,UAAU,WAAW,UAAU;AAC5C,WAAO,YAAY,2BAA2B;AAAA,EAChD;AACA,QAAM,UAAU,KAAK,CAAC;AACtB,MAAI,CAAC,QAAS,QAAO,YAAY,2BAA2B;AAC5D,QAAM,OAAO,YAAY,MAAM,MAAM,6BAA6B,OAAO;AAEzE,QAAM,WAAW,MAAM,WAAW,KAAK,UAAU;AACjD,QAAM,aAAa,SAAS,SAAS,aAAa,IAAI,SAAS,gBAAgB;AAC/E,QAAM,UAAU,MAAM,QAAQ,aAAa,QAAQ,CAAC,IAChD,WAAW,QAAQ,EAAE,OAAO,CAAC,UAA2B,OAAO,UAAU,QAAQ,IACjF,CAAC,GAAI,KAAK,OAAO,eAAe,UAAU,CAAC,CAAE;AACjD,QAAM,YAAY,oBAAoB,IAAI;AAC1C,QAAM,OACJ,WAAW,SACP,QAAQ,KAAK,CAAC,UAAU,oBAAoB,KAAK,MAAM,SAAS,IAC9D,UACA,CAAC,GAAG,SAAS,IAAI,IACnB,QAAQ,OAAO,CAAC,UAAU,oBAAoB,KAAK,MAAM,SAAS;AAExE,QAAM,gBAAqC,EAAE,QAAQ,KAAK;AAC1D,WAAS,gBAAgB,EAAE,GAAI,cAAc,CAAC,GAAI,GAAG,cAAc;AACnE,QAAM,YAAY,KAAK,YAAY,KAAK,UAAU,UAAU,MAAM,CAAC,GAAG,EAAE,MAAM,IAAM,CAAC;AAErF,SAAO;AAAA,IACL,MAAM;AAAA,IACN,OAAO;AAAA,IACP,SACE,WAAW,SACP,WAAW,IAAI,4EACf,aAAa,IAAI;AAAA,IACvB,OAAO,EAAE,cAAc;AAAA,EACzB;AACF;AAEA,SAAS,oBAAoB,MAAsB;AACjD,MAAI,SAAS,IAAK,QAAO;AACzB,SAAO,6BAA6B,IAAI,EAAE,KAAK,EAAE,YAAY;AAC/D;AAEA,IAAM,mBAAmB;AAAA,EACvB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,EAAE,KAAK,IAAI;AAOX,SAAS,yBAAyB,QAAgB,gBAAgC;AAChF,QAAM,OAAiE,CAAC;AACxE,aAAW,CAACC,aAAY,GAAG,KAAK,OAAO,QAAQ,OAAO,cAAc,CAAC,CAAC,GAAG;AACvE,UAAM,MAAO,MAAkC,KAAK;AACpD,QAAI,OAAO,OAAO,QAAQ,UAAU;AAClC,YAAM,IAAI;AACV,WAAK,KAAK;AAAA,QACR,MAAMA;AAAA,QACN,UAAU,EAAE,YAAY;AAAA,QACxB,OAAO,EAAE,SAAS;AAAA,MACpB,CAAC;AAAA,IACH;AAAA,EACF;AACA,QAAM,QAAQ,CAAC,4CAA4C,cAAc,IAAI;AAC7E,MAAI,KAAK,WAAW,GAAG;AACrB,UAAM;AAAA,MACJ;AAAA,MACA;AAAA,IACF;AAAA,EACF,OAAO;AACL,SAAK,KAAK,CAAC,GAAG,MAAM,EAAE,KAAK,cAAc,EAAE,IAAI,CAAC;AAChD,eAAW,KAAK,MAAM;AACpB,YAAM,KAAK,KAAK,EAAE,KAAK,OAAO,EAAE,CAAC,aAAa,EAAE,SAAS,OAAO,EAAE,CAAC,UAAU,EAAE,KAAK,EAAE;AAAA,IACxF;AACA,UAAM,KAAK,IAAI,oDAAoD;AAAA,EACrE;AACA,SAAO,MAAM,KAAK,IAAI;AACxB;AAQA,eAAe,oBACb,MACA,MACiC;AACjC,QAAM,iBAAiB,GAAG,KAAK,OAAO,YAAY,GAAG,MAAM,KAAK,OAAO,SAAS,GAAG;AAGnF,MAAI,KAAK,WAAW,KAAK,KAAK,CAAC,MAAM,QAAQ;AAC3C,WAAO;AAAA,MACL,MAAM;AAAA,MACN,OAAO;AAAA,MACP,SAAS,yBAAyB,KAAK,QAAQ,cAAc;AAAA,IAC/D;AAAA,EACF;AAEA,QAAM,OAAO,KAAK,CAAC;AACnB,MAAI,CAAC,QAAQ,KAAK,WAAW,GAAG,EAAG,QAAO,YAAY,gBAAgB;AAEtE,QAAM,kBAAkB,KAAK,OAAO,aAAa,IAAI,IAAI,KAAK;AAG9D,MAAI,KAAK,WAAW,GAAG;AACrB,UAAM,QAAQ,CAAC,2BAA2B,IAAI,IAAI;AAClD,QAAI,mBAAmB,OAAO,oBAAoB,UAAU;AAC1D,YAAM,IAAI;AACV,YAAM;AAAA,QACJ,wBAAwB,EAAE,YAAY,WAAW,UAAU,EAAE,SAAS,WAAW;AAAA,QACjF,sBAAsB,cAAc;AAAA,MACtC;AAAA,IACF,OAAO;AACL,YAAM;AAAA,QACJ,qDAAgD,cAAc;AAAA,QAC9D,qCAAqC,IAAI;AAAA,MAC3C;AAAA,IACF;AACA,WAAO,EAAE,MAAM,GAAG,OAAO,UAAU,SAAS,MAAM,KAAK,IAAI,EAAE;AAAA,EAC/D;AAEA,QAAM,WAAW,MAAM,WAAW,KAAK,UAAU;AACjD,QAAM,iBAAiB,SAAS,SAAS,UAAU,IAC9C,SAAS,aACV,CAAC;AACL,QAAM,YAAY,SAAS,eAAe,IAAI,CAAC,IAC3C,EAAE,GAAI,eAAe,IAAI,EAA8B,IACvD,CAAC;AAGL,MAAI,KAAK,CAAC,MAAM,aAAa,KAAK,CAAC,MAAM,SAAS;AAChD,QAAI,EAAE,SAAS,cAAc,CAAC,iBAAiB;AAC7C,aAAO,EAAE,MAAM,GAAG,OAAO,QAAQ,SAAS,WAAW,IAAI,yBAAyB;AAAA,IACpF;AACA,WAAO,UAAU,KAAK;AACtB,QAAI,OAAO,KAAK,SAAS,EAAE,WAAW,EAAG,QAAO,eAAe,IAAI;AAAA,QAC9D,gBAAe,IAAI,IAAI;AAC5B,aAAS,aAAa;AACtB,UAAM,YAAY,KAAK,YAAY,KAAK,UAAU,UAAU,MAAM,CAAC,GAAG,EAAE,MAAM,IAAM,CAAC;AACrF,UAAMC,UAAS,wBAAwB,KAAK,QAAQ,cAAc;AAGlE,UAAM,cAAcA,QAAO,IAAI;AAC/B,QAAI,aAAa;AACf,aAAO,YAAY,KAAK;AACxB,UAAI,OAAO,KAAK,WAAW,EAAE,WAAW,EAAG,QAAOA,QAAO,IAAI;AAAA,IAC/D;AACA,WAAO;AAAA,MACL,MAAM;AAAA,MACN,OAAO;AAAA,MACP,SACE,6BAA6B,IAAI,gDAA2C,cAAc;AAAA,MAE5F,OAAO,EAAE,YAAYA,QAAO;AAAA,IAC9B;AAAA,EACF;AAGA,QAAM,cAAc,KAAK,CAAC;AAC1B,QAAM,WAAW,KAAK,CAAC;AACvB,MAAI,CAAC,eAAe,YAAY,WAAW,IAAI,EAAG,QAAO,YAAY,gBAAgB;AACrF,QAAM,WAAW,gBAAgB,MAAM,SAAY;AACnD,QAAM,QAAQ,YAAY,aAAa,MAAM,WAAW;AACxD,MAAI,CAAC,YAAY,CAAC,MAAO,QAAO,YAAY,gBAAgB;AAE5D,QAAM,MAA+B,CAAC;AACtC,MAAI,SAAU,KAAI,UAAU,IAAI;AAChC,MAAI,MAAO,KAAI,OAAO,IAAI;AAC1B,YAAU,KAAK,IAAI;AACnB,iBAAe,IAAI,IAAI;AACvB,WAAS,aAAa;AACtB,QAAM,YAAY,KAAK,YAAY,KAAK,UAAU,UAAU,MAAM,CAAC,GAAG,EAAE,MAAM,IAAM,CAAC;AAKrF,QAAM,aAAa,OAAO,KAAK,KAAK,OAAO,aAAa,CAAC,CAAC;AAC1D,QAAM,OACJ,YAAY,WAAW,SAAS,KAAK,CAAC,WAAW,SAAS,QAAQ,IAC9D;AAAA,SAAY,QAAQ,6CAA6C,WAAW,KAAK,IAAI,CAAC,iGAEtF;AAEN,QAAM,SAAS,wBAAwB,KAAK,QAAQ,cAAc;AAClE,SAAO;AAAA,IACL,MAAM;AAAA,IACN,OAAO;AAAA,IACP,SACE,WAAW,IAAI,2CACH,YAAY,WAAW,UAAU,SAAS,WAAW,2BACxC,cAAc,gDAAgD,IAAI;AAAA,IAC7F,OAAO,EAAE,YAAY,OAAO;AAAA,EAC9B;AACF;AAMA,SAAS,wBACP,QACA,gBACyC;AACzC,QAAM,SAAkD,CAAC;AACzD,aAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,OAAO,cAAc,CAAC,CAAC,GAAG;AAC5D,WAAO,CAAC,IAAI,EAAE,GAAG,EAAE;AAAA,EACrB;AACA,aAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,cAAc,GAAG;AACnD,QAAI,SAAS,CAAC,EAAG,QAAO,CAAC,IAAI,EAAE,GAAI,OAAO,CAAC,KAAK,CAAC,GAAI,GAAG,EAAE;AAAA,EAC5D;AAEA,aAAW,KAAK,OAAO,KAAK,MAAM,GAAG;AACnC,QAAI,EAAE,KAAK,mBAAmB,EAAE,MAAM,OAAO,cAAc,CAAC,IAAK,QAAO,OAAO,CAAC;AAAA,EAClF;AACA,SAAO;AACT;AAEO,SAAS,uBAAuB,OAAuB;AAC5D,SAAO,iBAAiB,IAAI,MAAM,YAAY,CAAC,KAAK;AACtD;AAEA,SAAS,6BAA6B,OAAuB;AAC3D,MAAI,MAAM,YAAY,MAAM,uBAAwB,QAAO;AAC3D,MAAI,cAAc,KAAK,EAAG,QAAO;AACjC,SAAO,uBAAuB,KAAK;AACrC;AAEO,SAAS,sBAAsB,QAAyB;AAC7D,SAAO;AAAA,IACL;AAAA,IACA,GAAG,iBAAiB,IAAI,CAAC,MAAM;AAC7B,YAAM,QAAQ,SAAS,oBAAoB,QAAQ,EAAE,SAAS,IAAI;AAClE,YAAM,SAAS,QAAQ,GAAG,MAAM,OAAO,EAAE,CAAC,MAAM;AAChD,aAAO,KAAK,EAAE,MAAM,OAAO,EAAE,CAAC,IAAI,MAAM,GAAG,EAAE,UAAU,OAAO,EAAE,CAAC,IAAI,EAAE,WAAW;AAAA,IACpF,CAAC;AAAA,IACD;AAAA,IACA;AAAA,EACF,EAAE,KAAK,IAAI;AACb;AAEO,SAAS,wBAAwB,QAAwB;AAC9D,QAAM,UAAU,OAAO,WAAW,CAAC;AACnC,MAAI,QAAQ,WAAW,GAAG;AACxB,WAAO;AAAA,MACL;AAAA,MACA;AAAA,IACF,EAAE,KAAK,IAAI;AAAA,EACb;AACA,SAAO,QACJ,IAAI,CAAC,MAAM;AACV,UAAM,OAAO,WAAW,CAAC;AACzB,UAAM,UAAU,OAAO,MAAM,YAAY,EAAE,YAAY,QAAQ,aAAa;AAC5E,UAAM,WAAW,iBAAiB,KAAK,CAAC,UAAU,MAAM,cAAc,IAAI;AAC1E,UAAM,SAAS,WAAW,KAAK,SAAS,KAAK,MAAM;AACnD,WAAO,KAAK,GAAG,IAAI,GAAG,MAAM,GAAG,OAAO,EAAE,CAAC,IAAI,OAAO;AAAA,EACtD,CAAC,EACA,KAAK,IAAI;AACd;AAEO,SAAS,wBAAwB,QAAwB;AAC9D,QAAM,aAAa,OAAO,WAAW,CAAC;AACtC,QAAM,QAAQ;AAAA,IACZ;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAEA,aAAW,SAAS,sBAAsB;AACxC,UAAM,EAAE,OAAO,OAAO,IAAI,oBAAoB,QAAQ,KAAK;AAC3D,UAAM,SAAS,MAAM,aAAa,eAAe,aAAa,KAAK;AACnE,UAAM;AAAA,MACJ,KAAK,MAAM,KAAK,OAAO,EAAE,CAAC,IAAI,MAAM,OAAO,CAAC,CAAC,IAAI,OAAO,OAAO,CAAC,CAAC,SAAS,MAAM,KAAK,OAAO,CAAC,CAAC,IAAI,OAAO,OAAO,EAAE,CAAC,IAAI,MAAM,OAAO;AAAA,IACtI;AAAA,EACF;AAEA,QAAM,QAAQ,WAAW;AAAA,IACvB,CAAC,WAAW,CAAC,qBAAqB,KAAK,CAAC,UAAU,wBAAwB,QAAQ,MAAM,IAAI,CAAC;AAAA,EAC/F;AACA,MAAI,MAAM,SAAS,GAAG;AACpB,UAAM,KAAK,IAAI,8CAA8C;AAC7D,eAAW,UAAU,OAAO;AAC1B,YAAM,OAAO,WAAW,MAAM;AAC9B,YAAM,QAAQ,OAAO,WAAW,YAAY,OAAO,YAAY,QAAQ,aAAa;AACpF,YAAM;AAAA,QACJ,KAAK,KAAK,OAAO,EAAE,CAAC,IAAI,MAAM,OAAO,CAAC,CAAC;AAAA,MACzC;AAAA,IACF;AAAA,EACF;AAEA,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,EACF;AACA,SAAO,MAAM,KAAK,IAAI;AACxB;AAEA,eAAe,WAAW,MAAgD;AACxE,MAAI;AACF,WAAO,KAAK,MAAM,MAAS,YAAS,MAAM,MAAM,CAAC;AAAA,EACnD,QAAQ;AACN,WAAO,CAAC;AAAA,EACV;AACF;AAEA,SAAS,WAAW,GAAkC;AACpD,SAAO,OAAO,MAAM,WAAW,IAAI,EAAE;AACvC;AAEA,SAAS,YAAY,MAAc,SAAyC;AAC1E,SAAO,UAAU,OAAO,EAAE,MAAM,MAAM,SAAS,MAAM;AACvD;AAEA,SAAS,wBAAwB,GAA0B,MAAuB;AAChF,QAAM,OAAO,WAAW,CAAC;AACzB,MAAI,SAAS,WAAY,QAAO,SAAS,cAAc,SAAS;AAChE,SAAO,SAAS;AAClB;AAEA,SAAS,oBACP,QACA,OACiE;AACjE,QAAM,cAAc,OAAO,WAAW,CAAC,GAAG;AAAA,IAAK,CAAC,WAC9C,wBAAwB,QAAQ,MAAM,IAAI;AAAA,EAC5C;AACA,MAAI,YAAY;AACd,WAAO;AAAA,MACL,OACE,OAAO,eAAe,YAAY,WAAW,YAAY,QAAQ,aAAa;AAAA,MAChF,QAAQ;AAAA,IACV;AAAA,EACF;AACA,SAAO;AAAA,IACL,OAAO,MAAM,iBAAiB,WAAW,YAAY;AAAA,IACrD,QAAQ;AAAA,EACV;AACF;AAEA,SAAS,aAAa,OAAiC;AACrD,MAAI,MAAM,WAAY,QAAO;AAC7B,MAAI,MAAM,SAAS,kBAAkB;AACnC,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAEA,SAAS,cAAc,MAA4C;AACjE,SAAO,qBAAqB,KAAK,CAAC,UAAU,MAAM,SAAS,IAAI;AACjE;AAEA,SAAS,oBACP,QACA,MAC2C;AAC3C,QAAM,SAAS,OAAO,WAAW,CAAC,GAAG,KAAK,CAAC,MAAM,WAAW,CAAC,MAAM,IAAI;AACvE,MAAI,CAAC,MAAO,QAAO;AACnB,SAAO,OAAO,UAAU,YAAY,MAAM,YAAY,QAAQ,aAAa;AAC7E;AAEA,eAAe,aACb,MACA,MACiC;AACjC,QAAM,aAAa,cAAc,IAAI;AACrC,MAAI,YAAY,eAAe,OAAO;AACpC,WAAO,YAAY,WAAW,IAAI,yDAAyD;AAAA,EAC7F;AAEA,QAAM,WAAW,MAAM,WAAW,KAAK,UAAU;AACjD,QAAM,UAAU,MAAM,QAAQ,SAAS,OAAO,IACzC,SAAS,UACV,CAAC;AACL,QAAM,MAAM,QAAQ,UAAU,CAAC,MAAM,wBAAwB,GAAG,IAAI,CAAC;AACrE,QAAM,aAAa,OAAO,IAAI,QAAQ,GAAG,IAAI;AAC7C,QAAM,UAAU,aACZ,EAAE,OAAO,eAAe,YAAY,WAAW,YAAY,SAC3D,YAAY,iBAAiB;AAEjC,MAAI,CAAC,cAAc,CAAC,YAAY;AAC9B,WAAO;AAAA,MACL,WAAW,IAAI,+CAA+C,IAAI;AAAA,IACpE;AAAA,EACF;AAEA,MAAI;AACJ,MAAI;AACJ,MAAI,SAAS;AACX,kBAAc;AACd,kBAAc,QAAQ,OAAO,CAAC,MAAM,CAAC,wBAAwB,GAAG,IAAI,CAAC;AACrE,QAAI,YAAY,iBAAiB,YAAY;AAC3C,kBAAY,KAAK,EAAE,MAAM,MAAM,SAAS,MAAM,CAAC;AAAA,IACjD;AAAA,EACF,OAAO;AACL,kBAAc;AACd,QAAI,YAAY,iBAAiB,UAAU;AACzC,oBAAc,QAAQ,OAAO,CAAC,MAAM,CAAC,wBAAwB,GAAG,IAAI,CAAC;AAAA,IACvE,OAAO;AACL,oBAAc,QAAQ,OAAO,CAAC,MAAM,CAAC,wBAAwB,GAAG,IAAI,CAAC;AACrE,kBAAY,KAAK,IAAI;AAAA,IACvB;AAAA,EACF;AAEA,QAAM,WAAW;AAAA,IACf,GAAI,SAAS,KAAK,OAAO,QAAQ,IAAI,KAAK,OAAO,WAAW,CAAC;AAAA,IAC7D,GAAI,SAAS,SAAS,QAAQ,IAAI,SAAS,WAAW,CAAC;AAAA,IACvD,SAAS;AAAA,EACX;AACA,WAAS,UAAU;AACnB,WAAS,WAAW;AACpB,QAAM,YAAY,KAAK,YAAY,KAAK,UAAU,UAAU,MAAM,CAAC,GAAG,EAAE,MAAM,IAAM,CAAC;AACrF,QAAM,kBAAkB,SAAS,kBAAkB,CAAC,cAAc,SAAY;AAC9E,SAAO;AAAA,IACL,MAAM;AAAA,IACN,OAAO;AAAA,IACP,SACE,GAAG,cAAc,YAAY,UAAU,KAAK,IAAI,wBAAwB,KAAK,UAAU,OACtF,SAAS,kBAAkB,CAAC,cACzB,yEACA;AAAA,IACN,OAAO,EAAE,SAAS,aAAa,SAAS;AAAA,IACxC;AAAA,EACF;AACF;AAEA,eAAe,aACb,MACA,MACA,MACA,MACiC;AACjC,QAAM,WAAW,MAAM,WAAW,KAAK,UAAU;AACjD,QAAM,UAAU,MAAM,QAAQ,SAAS,OAAO,IACzC,SAAS,UACV,CAAC;AACL,QAAM,MAAM,QAAQ,UAAU,CAAC,MAAM,WAAW,CAAC,MAAM,IAAI;AAC3D,QAAM,YAAY,YAAY,MAAM,KAAK,OAAO;AAChD,MAAI,OAAO,EAAG,SAAQ,GAAG,IAAI;AAAA,MACxB,SAAQ,KAAK,SAAS;AAC3B,QAAM,WAAW;AAAA,IACf,GAAI,SAAS,KAAK,OAAO,QAAQ,IAAI,KAAK,OAAO,WAAW,CAAC;AAAA,IAC7D,GAAI,SAAS,SAAS,QAAQ,IAAI,SAAS,WAAW,CAAC;AAAA,IACvD,SAAS;AAAA,EACX;AACA,WAAS,UAAU;AACnB,WAAS,WAAW;AACpB,QAAM,YAAY,KAAK,YAAY,KAAK,UAAU,UAAU,MAAM,CAAC,GAAG,EAAE,MAAM,IAAM,CAAC;AACrF,QAAM,kBAAkB,SAAS,kBAAkB,CAAC,KAAK,UAAU,SAAY;AAC/E,SAAO;AAAA,IACL,MAAM;AAAA,IACN,OAAO;AAAA,IACP,SACE,GAAG,IAAI,KAAK,IAAI,MAAM,KAAK,UAAU,YAAY,UAAU,wBAAwB,KAAK,UAAU,OACjG,SAAS,kBAAkB,CAAC,KAAK,UAC9B,yEACA;AAAA,IACN,OAAO,EAAE,SAAS,SAAS;AAAA,IAC3B;AAAA,EACF;AACF;AAEA,eAAe,aACb,MACA,MACiC;AACjC,QAAM,WAAW,MAAM,WAAW,KAAK,UAAU;AACjD,QAAM,UAAU,MAAM,QAAQ,SAAS,OAAO,IACzC,SAAS,UACV,CAAC;AACL,QAAM,OAAO,QAAQ,OAAO,CAAC,MAAM,WAAW,CAAC,MAAM,IAAI;AACzD,MAAI,KAAK,WAAW,QAAQ,QAAQ;AAClC,WAAO,YAAY,WAAW,IAAI,kBAAkB;AAAA,EACtD;AACA,WAAS,UAAU;AACnB,QAAM,YAAY,KAAK,YAAY,KAAK,UAAU,UAAU,MAAM,CAAC,GAAG,EAAE,MAAM,IAAM,CAAC;AACrF,SAAO;AAAA,IACL,MAAM;AAAA,IACN,OAAO;AAAA,IACP,SAAS,YAAY,IAAI;AAAA,IACzB,OAAO,EAAE,SAAS,KAAK;AAAA,IACvB,iBAAiB;AAAA,EACnB;AACF;AAEA,SAAS,YAAY,SAAyC;AAC5D,SAAO,EAAE,MAAM,GAAG,OAAO,SAAS,QAAQ;AAC5C;AAEA,SAAS,SAAS,OAAkD;AAClE,SAAO,QAAQ,KAAK,KAAK,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,KAAK;AAC5E;",
+  "names": ["name", "pluginName", "merged"]
+}