@x-code-cli/core 0.2.10 → 0.3.1

package/dist/plugins/consent.js

@@ -0,0 +1,181 @@
+// @x-code-cli/core — Install-time consent preview
+//
+// Before a plugin's contents are committed to the cache, the installer
+// builds a `ConsentPreview` summarising what the plugin will contribute
+// (hooks, MCP servers, scopes etc.) and hands it to the caller-supplied
+// consent callback. If the callback returns false, the install aborts
+// and the temp dir is cleaned up.
+//
+// The preview is built from the already-parsed manifest, so all the
+// validation work has already happened — by the time we ask the user
+// "do you accept?" we know the plugin parses cleanly and what it will
+// touch on their system.
+//
+// What it intentionally does NOT include:
+//
+//   - Skill / agent / command counts (they're hidden inside subdirs;
+//     scanning them just to build a preview would slow every install,
+//     and the preview is meant to be a glance, not an audit).
+//   - LICENSE file contents — surfaced as a name only; readers should
+//     follow the homepage / source URL to read the actual terms.
+//
+// What it DOES include — the things with real security blast radius:
+// hooks (arbitrary shell), MCP servers (arbitrary subprocesses), and
+// source (so the user knows whether it came from a trusted marketplace
+// or a random GitHub repo).
+import fs from 'node:fs/promises';
+import path from 'node:path';
+import { parseHookConfig } from '../hooks/config-schema.js';
+import { parseServersBlock } from '../mcp/config-schema.js';
+import { extractMcpServersBlock } from './integration.js';
+/** Stat the plugin root for the conventional contribution files / dirs
+ *  the loader's `resolveContributions` will pick up at runtime. The
+ *  consent UI uses this so "Will contribute" doesn't lie when a plugin
+ *  drops `skills/`, `.mcp.json`, etc. at root without naming them in
+ *  the manifest. Safe to call on any directory — every probe is a
+ *  best-effort stat / read and missing or unreadable files just count
+ *  as "absent". */
+export async function probePluginRoot(rootDir) {
+    const [hasSkillsDir, hasAgentsDir, hasCommandsDir] = await Promise.all([
+        isDir(path.join(rootDir, 'skills')),
+        isDir(path.join(rootDir, 'agents')),
+        isDir(path.join(rootDir, 'commands')),
+    ]);
+    let rootMcpServerNames = [];
+    let hasRootMcpFile = false;
+    for (const conv of ['.mcp.json', 'mcp.json']) {
+        const p = path.join(rootDir, conv);
+        if (!(await isFile(p)))
+            continue;
+        hasRootMcpFile = true;
+        try {
+            const raw = await fs.readFile(p, 'utf-8');
+            const parsed = JSON.parse(raw);
+            const block = extractMcpServersBlock(parsed);
+            const { servers } = parseServersBlock(block);
+            rootMcpServerNames = Object.keys(servers);
+        }
+        catch {
+            // parse errors are deliberately swallowed — they'll surface
+            // with a precise message at load time. The consent preview
+            // just needs to know the file exists.
+        }
+        break;
+    }
+    let rootHookEvents = [];
+    let hasRootHooksFile = false;
+    const hooksPath = path.join(rootDir, 'hooks', 'hooks.json');
+    if (await isFile(hooksPath)) {
+        hasRootHooksFile = true;
+        try {
+            const raw = await fs.readFile(hooksPath, 'utf-8');
+            const parsed = JSON.parse(raw);
+            const cfg = parseHookConfig(parsed, rootDir);
+            rootHookEvents = Object.keys(cfg);
+        }
+        catch {
+            // Same reasoning as the mcp probe — load-time errors win.
+        }
+    }
+    return {
+        hasSkillsDir,
+        hasAgentsDir,
+        hasCommandsDir,
+        rootMcpServerNames,
+        hasRootMcpFile,
+        rootHookEvents,
+        hasRootHooksFile,
+    };
+}
+async function isDir(p) {
+    try {
+        const s = await fs.stat(p);
+        return s.isDirectory();
+    }
+    catch {
+        return false;
+    }
+}
+async function isFile(p) {
+    try {
+        const s = await fs.stat(p);
+        return s.isFile();
+    }
+    catch {
+        return false;
+    }
+}
+/** Build a `ConsentPreview` from a parsed manifest. The hook + mcp
+ *  fields are inspected only for the inline shape; path-form
+ *  contributions are surfaced as `has*` booleans so the consent UI can
+ *  warn "this plugin contributes MCP servers" even when their names
+ *  aren't yet known.
+ *
+ *  When `input.rootProbe` is present, conventional root-level
+ *  contributions (an undeclared `.mcp.json`, `hooks/hooks.json`,
+ *  `skills/`, etc.) are merged in too — the loader will pick those up
+ *  at runtime, so the consent UI needs to know about them now. */
+export function buildConsentPreview(input) {
+    const m = input.manifest;
+    const probe = input.rootProbe;
+    let hookEvents = [];
+    let hasPathHooks = false;
+    if (m.hooks !== undefined) {
+        if (typeof m.hooks === 'string') {
+            hasPathHooks = true;
+        }
+        else {
+            try {
+                const cfg = parseHookConfig(m.hooks, input.pluginId);
+                hookEvents = Object.keys(cfg);
+            }
+            catch {
+                // Don't fail consent on hook parse errors — the install path
+                // will surface them properly. Just leave hookEvents empty so
+                // the preview doesn't lie about what's registered.
+            }
+        }
+    }
+    else if (probe?.hasRootHooksFile) {
+        hookEvents = probe.rootHookEvents;
+        hasPathHooks = true;
+    }
+    let inlineMcpServerNames = [];
+    let hasPathMcpServers = false;
+    if (m.mcpServers !== undefined) {
+        if (typeof m.mcpServers === 'string') {
+            hasPathMcpServers = true;
+        }
+        else {
+            const { servers } = parseServersBlock(m.mcpServers);
+            inlineMcpServerNames = Object.keys(servers);
+        }
+    }
+    else if (probe?.hasRootMcpFile) {
+        // Convention-discovered `.mcp.json` at the plugin root — same blast
+        // radius as a manifest-declared path entry. Surface names when we
+        // were able to parse them; otherwise just flag the file's presence.
+        inlineMcpServerNames = probe.rootMcpServerNames;
+        hasPathMcpServers = true;
+    }
+    return {
+        pluginId: input.pluginId,
+        version: m.version,
+        description: m.description,
+        source: input.source,
+        marketplace: input.marketplace,
+        verified: input.verified ?? false,
+        fromReservedMarketplace: input.fromReservedMarketplace ?? false,
+        hookEvents,
+        inlineMcpServerNames,
+        hasSkillsDir: !!m.skills || !!probe?.hasSkillsDir,
+        hasAgentsDir: !!m.agents || !!probe?.hasAgentsDir,
+        hasCommandsDir: !!m.commands || !!probe?.hasCommandsDir,
+        hasPathMcpServers,
+        hasPathHooks,
+        author: m.author?.name,
+        license: m.license,
+        homepage: m.homepage,
+    };
+}
+//# sourceMappingURL=consent.js.map

package/dist/plugins/consent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"consent.js","sourceRoot":"","sources":["../../src/plugins/consent.ts"],"names":[],"mappings":"AAAA,kDAAkD;AAClD,EAAE;AACF,uEAAuE;AACvE,wEAAwE;AACxE,wEAAwE;AACxE,sEAAsE;AACtE,kCAAkC;AAClC,EAAE;AACF,oEAAoE;AACpE,qEAAqE;AACrE,sEAAsE;AACtE,yBAAyB;AACzB,EAAE;AACF,0CAA0C;AAC1C,EAAE;AACF,qEAAqE;AACrE,sEAAsE;AACtE,8DAA8D;AAC9D,sEAAsE;AACtE,iEAAiE;AACjE,EAAE;AACF,qEAAqE;AACrE,qEAAqE;AACrE,uEAAuE;AACvE,4BAA4B;AAC5B,OAAO,EAAE,MAAM,kBAAkB,CAAA;AACjC,OAAO,IAAI,MAAM,WAAW,CAAA;AAE5B,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAA;AAE3D,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAA;AAC3D,OAAO,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAA;AAuEzD;;;;;;mBAMmB;AACnB,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,OAAe;IACnD,MAAM,CAAC,YAAY,EAAE,YAAY,EAAE,cAAc,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACrE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACnC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACnC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;KACtC,CAAC,CAAA;IAEF,IAAI,kBAAkB,GAAa,EAAE,CAAA;IACrC,IAAI,cAAc,GAAG,KAAK,CAAA;IAC1B,KAAK,MAAM,IAAI,IAAI,CAAC,WAAW,EAAE,UAAU,CAAC,EAAE,CAAC;QAC7C,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;QAClC,IAAI,CAAC,CAAC,MAAM,MAAM,CAAC,CAAC,CAAC,CAAC;YAAE,SAAQ;QAChC,cAAc,GAAG,IAAI,CAAA;QACrB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC,CAAA;YACzC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAA;YACzC,MAAM,KAAK,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAA;YAC5C,MAAM,EAAE,OAAO,EAAE,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAA;YAC5C,kBAAkB,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QAC3C,CAAC;QAAC,MAAM,CAAC;YACP,4DAA4D;YAC5D,2DAA2D;YAC3D,sCAAsC;QACxC,CAAC;QACD,MAAK;IACP,CAAC;IAED,IAAI,cAAc,GAAoB,EAAE,CAAA;IACxC,IAAI,gBAAgB,GAAG,KAAK,CAAA;IAC5B,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,YAAY,CAAC,CAAA;IAC3D,IAAI,MAAM,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;QAC5B,gBAAgB,GAAG,IAAI,CAAA;QACvB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC,CAAA;YACjD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;YAC9B,MAAM,GAAG,GAAG,eAAe,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;YAC5C,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAoB,CAAA;QACtD,CAAC;QAAC,MAAM,CAAC;YACP,0DAA0D;QAC5D,CAAC;IACH,CAAC;IAED,OAAO;QACL,YAAY;QACZ,YAAY;QACZ,cAAc;QACd,kBAAkB;QAClB,cAAc;QACd,cAAc;QACd,gBAAgB;KACjB,CAAA;AACH,CAAC;AAED,KAAK,UAAU,KAAK,CAAC,CAAS;IAC5B,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAC1B,OAAO,CAAC,CAAC,WAAW,EAAE,CAAA;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,CAAS;IAC7B,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAC1B,OAAO,CAAC,CAAC,MAAM,EAAE,CAAA;IACnB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;;kEASkE;AAClE,MAAM,UAAU,mBAAmB,CAAC,KAAwB;IAC1D,MAAM,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAA;IACxB,MAAM,KAAK,GAAG,KAAK,CAAC,SAAS,CAAA;IAE7B,IAAI,UAAU,GAAoB,EAAE,CAAA;IACpC,IAAI,YAAY,GAAG,KAAK,CAAA;IACxB,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC1B,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YAChC,YAAY,GAAG,IAAI,CAAA;QACrB,CAAC;aAAM,CAAC;YACN,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,eAAe,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAA;gBACpD,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAoB,CAAA;YAClD,CAAC;YAAC,MAAM,CAAC;gBACP,6DAA6D;gBAC7D,6DAA6D;gBAC7D,mDAAmD;YACrD,CAAC;QACH,CAAC;IACH,CAAC;SAAM,IAAI,KAAK,EAAE,gBAAgB,EAAE,CAAC;QACnC,UAAU,GAAG,KAAK,CAAC,cAAc,CAAA;QACjC,YAAY,GAAG,IAAI,CAAA;IACrB,CAAC;IAED,IAAI,oBAAoB,GAAa,EAAE,CAAA;IACvC,IAAI,iBAAiB,GAAG,KAAK,CAAA;IAC7B,IAAI,CAAC,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QAC/B,IAAI,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;YACrC,iBAAiB,GAAG,IAAI,CAAA;QAC1B,CAAC;aAAM,CAAC;YACN,MAAM,EAAE,OAAO,EAAE,GAAG,iBAAiB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAA;YACnD,oBAAoB,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QAC7C,CAAC;IACH,CAAC;SAAM,IAAI,KAAK,EAAE,cAAc,EAAE,CAAC;QACjC,oEAAoE;QACpE,kEAAkE;QAClE,oEAAoE;QACpE,oBAAoB,GAAG,KAAK,CAAC,kBAAkB,CAAA;QAC/C,iBAAiB,GAAG,IAAI,CAAA;IAC1B,CAAC;IAED,OAAO;QACL,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,WAAW,EAAE,CAAC,CAAC,WAAW;QAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,KAAK;QACjC,uBAAuB,EAAE,KAAK,CAAC,uBAAuB,IAAI,KAAK;QAC/D,UAAU;QACV,oBAAoB;QACpB,YAAY,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,EAAE,YAAY;QACjD,YAAY,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,EAAE,YAAY;QACjD,cAAc,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,KAAK,EAAE,cAAc;QACvD,iBAAiB;QACjB,YAAY;QACZ,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,IAAI;QACtB,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,QAAQ,EAAE,CAAC,CAAC,QAAQ;KACrB,CAAA;AACH,CAAC"}

package/dist/plugins/enable-state.d.ts

@@ -0,0 +1,34 @@
+import type { PluginScope } from './types.js';
+export declare function settingsPathForScope(scope: PluginScope, cwd?: string): string;
+/** Resolved per-plugin enable state, plus which scope decided it (for
+ *  `/plugin doctor`). When `decidedBy` is `undefined`, no scope mentioned
+ *  the plugin and the default applied. */
+export interface ResolvedEnableState {
+    enabled: boolean;
+    decidedBy: PluginScope | undefined;
+}
+export declare class EnableState {
+    private readonly perScope;
+    private constructor();
+    /** Load both settings files and build a snapshot. The snapshot is
+     *  intentionally immutable from this point — callers re-load via
+     *  `EnableState.load()` after settings.json writes. `cwd` defaults to
+     *  `process.cwd()` and controls where the `'project'` scope file is
+     *  read from. */
+    static load(cwd?: string): Promise<EnableState>;
+    /** Effective enabled state for one plugin id. */
+    resolve(pluginId: string): ResolvedEnableState;
+    /** Raw map for one scope — used by `/plugin list` to show the per-scope
+     *  flags alongside the effective state. */
+    scopeEntries(scope: PluginScope): Record<string, boolean>;
+}
+/** Write a single plugin's enable flag in the chosen scope. Read-modify-
+ *  write so unrelated fields in settings.json (e.g. `disabledSkills` from
+ *  the skill subsystem) aren't clobbered. Returns whether the file
+ *  actually changed (so callers can render an accurate
+ *  "already enabled" vs "enabled" message). */
+export declare function setPluginEnabled(pluginId: string, scope: PluginScope, enabled: boolean, cwd?: string): Promise<'changed' | 'noop'>;
+/** Remove a plugin's entry from a scope's enabledPlugins (used by
+ *  `/plugin uninstall` to keep settings.json tidy). */
+export declare function clearPluginEntry(pluginId: string, scope: PluginScope, cwd?: string): Promise<'changed' | 'noop'>;
+//# sourceMappingURL=enable-state.d.ts.map

package/dist/plugins/enable-state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"enable-state.d.ts","sourceRoot":"","sources":["../../src/plugins/enable-state.ts"],"names":[],"mappings":"AAyBA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAc7C,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,WAAW,EAAE,GAAG,GAAE,MAAsB,GAAG,MAAM,CAG5F;AA2BD;;0CAE0C;AAC1C,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,OAAO,CAAA;IAChB,SAAS,EAAE,WAAW,GAAG,SAAS,CAAA;CACnC;AAED,qBAAa,WAAW;IACF,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAA7C,OAAO;IAEP;;;;qBAIiB;WACJ,IAAI,CAAC,GAAG,GAAE,MAAsB,GAAG,OAAO,CAAC,WAAW,CAAC;IASpE,iDAAiD;IACjD,OAAO,CAAC,QAAQ,EAAE,MAAM,GAAG,mBAAmB;IAU9C;+CAC2C;IAC3C,YAAY,CAAC,KAAK,EAAE,WAAW,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAG1D;AAID;;;;+CAI+C;AAC/C,wBAAsB,gBAAgB,CACpC,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,WAAW,EAClB,OAAO,EAAE,OAAO,EAChB,GAAG,GAAE,MAAsB,GAC1B,OAAO,CAAC,SAAS,GAAG,MAAM,CAAC,CAwB7B;AAED;uDACuD;AACvD,wBAAsB,gBAAgB,CACpC,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,WAAW,EAClB,GAAG,GAAE,MAAsB,GAC1B,OAAO,CAAC,SAAS,GAAG,MAAM,CAAC,CA+B7B"}

package/dist/plugins/enable-state.js

@@ -0,0 +1,159 @@
+// @x-code-cli/core — Plugin enable/disable state
+//
+// Reads the per-scope `enabledPlugins` map from settings.json files and
+// resolves the effective enabled state for each plugin id.
+//
+// Two-scope model, mirroring mcp + skill subsystems:
+//
+//   user     ~/.x-code/settings.json
+//   project  <cwd>/.x-code/settings.local.json   (gitignored)
+//
+// `'project'` reading a `.local.json` file is a slight naming quirk we
+// inherit from skills — it's a per-user override for one repo, not a
+// team-shared file. A separate team-shared scope (committed) can be
+// added later without touching the existing two.
+//
+// Map shape: `{ "name@marketplace": true | false }` — true = enabled,
+// false = explicitly disabled, missing = use the project-wide default
+// (currently `true`, i.e. default-enable).
+//
+// Precedence: project > user. An explicit value in a higher-priority
+// scope wins; a missing entry falls through.
+import fs from 'node:fs/promises';
+import path from 'node:path';
+import { XCODE_DIR, userXcodeDir } from '../utils.js';
+/** Highest precedence first. The first scope with an explicit entry wins. */
+const SCOPE_PRECEDENCE = ['project', 'user'];
+/** Default enabled state when no scope mentions the plugin. We default
+ *  to ENABLED so newly-installed plugins work out-of-the-box; users who
+ *  want opt-in behaviour can flip individual plugins off explicitly. */
+const DEFAULT_ENABLED = true;
+export function settingsPathForScope(scope, cwd = process.cwd()) {
+    if (scope === 'user')
+        return path.join(userXcodeDir(), 'settings.json');
+    return path.join(cwd, XCODE_DIR, 'settings.local.json');
+}
+async function readSettings(scope, cwd) {
+    const file = settingsPathForScope(scope, cwd);
+    try {
+        const raw = await fs.readFile(file, 'utf-8');
+        const parsed = JSON.parse(raw);
+        if (!parsed || typeof parsed !== 'object')
+            return {};
+        const obj = parsed;
+        if (obj.enabledPlugins && typeof obj.enabledPlugins === 'object' && !Array.isArray(obj.enabledPlugins)) {
+            // Coerce values to boolean defensively — settings.json may have been
+            // hand-edited and the wrong type here shouldn't crash the loader.
+            const out = {};
+            for (const [k, v] of Object.entries(obj.enabledPlugins)) {
+                if (typeof v === 'boolean')
+                    out[k] = v;
+            }
+            return { enabledPlugins: out };
+        }
+        return {};
+    }
+    catch (err) {
+        if (err.code === 'ENOENT')
+            return {};
+        // Malformed JSON: ignore + return empty so a broken settings file never
+        // blocks startup. The user can fix the file and re-launch.
+        return {};
+    }
+}
+export class EnableState {
+    perScope;
+    constructor(perScope) {
+        this.perScope = perScope;
+    }
+    /** Load both settings files and build a snapshot. The snapshot is
+     *  intentionally immutable from this point — callers re-load via
+     *  `EnableState.load()` after settings.json writes. `cwd` defaults to
+     *  `process.cwd()` and controls where the `'project'` scope file is
+     *  read from. */
+    static async load(cwd = process.cwd()) {
+        const map = new Map();
+        for (const scope of SCOPE_PRECEDENCE) {
+            const s = await readSettings(scope, cwd);
+            map.set(scope, s.enabledPlugins ?? {});
+        }
+        return new EnableState(map);
+    }
+    /** Effective enabled state for one plugin id. */
+    resolve(pluginId) {
+        for (const scope of SCOPE_PRECEDENCE) {
+            const table = this.perScope.get(scope) ?? {};
+            if (pluginId in table) {
+                return { enabled: table[pluginId], decidedBy: scope };
+            }
+        }
+        return { enabled: DEFAULT_ENABLED, decidedBy: undefined };
+    }
+    /** Raw map for one scope — used by `/plugin list` to show the per-scope
+     *  flags alongside the effective state. */
+    scopeEntries(scope) {
+        return { ...(this.perScope.get(scope) ?? {}) };
+    }
+}
+// ── Mutating writes (used by /plugin enable|disable|install) ────────────
+/** Write a single plugin's enable flag in the chosen scope. Read-modify-
+ *  write so unrelated fields in settings.json (e.g. `disabledSkills` from
+ *  the skill subsystem) aren't clobbered. Returns whether the file
+ *  actually changed (so callers can render an accurate
+ *  "already enabled" vs "enabled" message). */
+export async function setPluginEnabled(pluginId, scope, enabled, cwd = process.cwd()) {
+    const file = settingsPathForScope(scope, cwd);
+    await fs.mkdir(path.dirname(file), { recursive: true });
+    let existing = {};
+    try {
+        const raw = await fs.readFile(file, 'utf-8');
+        const parsed = JSON.parse(raw);
+        if (parsed && typeof parsed === 'object')
+            existing = parsed;
+    }
+    catch {
+        // first write — file may not exist yet
+    }
+    const currentMap = existing.enabledPlugins && typeof existing.enabledPlugins === 'object' && !Array.isArray(existing.enabledPlugins)
+        ? { ...existing.enabledPlugins }
+        : {};
+    if (currentMap[pluginId] === enabled)
+        return 'noop';
+    currentMap[pluginId] = enabled;
+    existing.enabledPlugins = currentMap;
+    await fs.writeFile(file, JSON.stringify(existing, null, 2) + '\n', 'utf-8');
+    return 'changed';
+}
+/** Remove a plugin's entry from a scope's enabledPlugins (used by
+ *  `/plugin uninstall` to keep settings.json tidy). */
+export async function clearPluginEntry(pluginId, scope, cwd = process.cwd()) {
+    const file = settingsPathForScope(scope, cwd);
+    let existing = {};
+    try {
+        const raw = await fs.readFile(file, 'utf-8');
+        const parsed = JSON.parse(raw);
+        if (parsed && typeof parsed === 'object')
+            existing = parsed;
+    }
+    catch {
+        return 'noop';
+    }
+    if (!existing.enabledPlugins ||
+        typeof existing.enabledPlugins !== 'object' ||
+        Array.isArray(existing.enabledPlugins)) {
+        return 'noop';
+    }
+    const map = { ...existing.enabledPlugins };
+    if (!(pluginId in map))
+        return 'noop';
+    delete map[pluginId];
+    if (Object.keys(map).length === 0) {
+        delete existing.enabledPlugins;
+    }
+    else {
+        existing.enabledPlugins = map;
+    }
+    await fs.writeFile(file, JSON.stringify(existing, null, 2) + '\n', 'utf-8');
+    return 'changed';
+}
+//# sourceMappingURL=enable-state.js.map

package/dist/plugins/enable-state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"enable-state.js","sourceRoot":"","sources":["../../src/plugins/enable-state.ts"],"names":[],"mappings":"AAAA,iDAAiD;AACjD,EAAE;AACF,wEAAwE;AACxE,2DAA2D;AAC3D,EAAE;AACF,qDAAqD;AACrD,EAAE;AACF,qCAAqC;AACrC,8DAA8D;AAC9D,EAAE;AACF,uEAAuE;AACvE,qEAAqE;AACrE,oEAAoE;AACpE,iDAAiD;AACjD,EAAE;AACF,sEAAsE;AACtE,sEAAsE;AACtE,2CAA2C;AAC3C,EAAE;AACF,qEAAqE;AACrE,6CAA6C;AAC7C,OAAO,EAAE,MAAM,kBAAkB,CAAA;AACjC,OAAO,IAAI,MAAM,WAAW,CAAA;AAE5B,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAGrD,6EAA6E;AAC7E,MAAM,gBAAgB,GAA+B,CAAC,SAAS,EAAE,MAAM,CAAC,CAAA;AAExE;;wEAEwE;AACxE,MAAM,eAAe,GAAG,IAAI,CAAA;AAM5B,MAAM,UAAU,oBAAoB,CAAC,KAAkB,EAAE,MAAc,OAAO,CAAC,GAAG,EAAE;IAClF,IAAI,KAAK,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,eAAe,CAAC,CAAA;IACvE,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,qBAAqB,CAAC,CAAA;AACzD,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,KAAkB,EAAE,GAAW;IACzD,MAAM,IAAI,GAAG,oBAAoB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;IAC7C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;QAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAA;QACzC,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;YAAE,OAAO,EAAE,CAAA;QACpD,MAAM,GAAG,GAAG,MAAiC,CAAA;QAC7C,IAAI,GAAG,CAAC,cAAc,IAAI,OAAO,GAAG,CAAC,cAAc,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;YACvG,qEAAqE;YACrE,kEAAkE;YAClE,MAAM,GAAG,GAA4B,EAAE,CAAA;YACvC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;gBACxD,IAAI,OAAO,CAAC,KAAK,SAAS;oBAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;YACxC,CAAC;YACD,OAAO,EAAE,cAAc,EAAE,GAAG,EAAE,CAAA;QAChC,CAAC;QACD,OAAO,EAAE,CAAA;IACX,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,CAAA;QAC/D,wEAAwE;QACxE,2DAA2D;QAC3D,OAAO,EAAE,CAAA;IACX,CAAC;AACH,CAAC;AAUD,MAAM,OAAO,WAAW;IACe;IAArC,YAAqC,QAAmD;QAAnD,aAAQ,GAAR,QAAQ,CAA2C;IAAG,CAAC;IAE5F;;;;qBAIiB;IACjB,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAc,OAAO,CAAC,GAAG,EAAE;QAC3C,MAAM,GAAG,GAAG,IAAI,GAAG,EAAwC,CAAA;QAC3D,KAAK,MAAM,KAAK,IAAI,gBAAgB,EAAE,CAAC;YACrC,MAAM,CAAC,GAAG,MAAM,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;YACxC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,cAAc,IAAI,EAAE,CAAC,CAAA;QACxC,CAAC;QACD,OAAO,IAAI,WAAW,CAAC,GAAG,CAAC,CAAA;IAC7B,CAAC;IAED,iDAAiD;IACjD,OAAO,CAAC,QAAgB;QACtB,KAAK,MAAM,KAAK,IAAI,gBAAgB,EAAE,CAAC;YACrC,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAA;YAC5C,IAAI,QAAQ,IAAI,KAAK,EAAE,CAAC;gBACtB,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,QAAQ,CAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAA;YACxD,CAAC;QACH,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,SAAS,EAAE,CAAA;IAC3D,CAAC;IAED;+CAC2C;IAC3C,YAAY,CAAC,KAAkB;QAC7B,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,EAAE,CAAA;IAChD,CAAC;CACF;AAED,2EAA2E;AAE3E;;;;+CAI+C;AAC/C,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,QAAgB,EAChB,KAAkB,EAClB,OAAgB,EAChB,MAAc,OAAO,CAAC,GAAG,EAAE;IAE3B,MAAM,IAAI,GAAG,oBAAoB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;IAC7C,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAEvD,IAAI,QAAQ,GAA4B,EAAE,CAAA;IAC1C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;QAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAA;QACzC,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;YAAE,QAAQ,GAAG,MAAiC,CAAA;IACxF,CAAC;IAAC,MAAM,CAAC;QACP,uCAAuC;IACzC,CAAC;IAED,MAAM,UAAU,GACd,QAAQ,CAAC,cAAc,IAAI,OAAO,QAAQ,CAAC,cAAc,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC;QAC/G,CAAC,CAAC,EAAE,GAAI,QAAQ,CAAC,cAA0C,EAAE;QAC7D,CAAC,CAAC,EAAE,CAAA;IAER,IAAI,UAAU,CAAC,QAAQ,CAAC,KAAK,OAAO;QAAE,OAAO,MAAM,CAAA;IACnD,UAAU,CAAC,QAAQ,CAAC,GAAG,OAAO,CAAA;IAC9B,QAAQ,CAAC,cAAc,GAAG,UAAU,CAAA;IAEpC,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAA;IAC3E,OAAO,SAAS,CAAA;AAClB,CAAC;AAED;uDACuD;AACvD,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,QAAgB,EAChB,KAAkB,EAClB,MAAc,OAAO,CAAC,GAAG,EAAE;IAE3B,MAAM,IAAI,GAAG,oBAAoB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;IAC7C,IAAI,QAAQ,GAA4B,EAAE,CAAA;IAC1C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;QAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAA;QACzC,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;YAAE,QAAQ,GAAG,MAAiC,CAAA;IACxF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAA;IACf,CAAC;IAED,IACE,CAAC,QAAQ,CAAC,cAAc;QACxB,OAAO,QAAQ,CAAC,cAAc,KAAK,QAAQ;QAC3C,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,EACtC,CAAC;QACD,OAAO,MAAM,CAAA;IACf,CAAC;IAED,MAAM,GAAG,GAAG,EAAE,GAAI,QAAQ,CAAC,cAA0C,EAAE,CAAA;IACvE,IAAI,CAAC,CAAC,QAAQ,IAAI,GAAG,CAAC;QAAE,OAAO,MAAM,CAAA;IACrC,OAAO,GAAG,CAAC,QAAQ,CAAC,CAAA;IAEpB,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClC,OAAO,QAAQ,CAAC,cAAc,CAAA;IAChC,CAAC;SAAM,CAAC;QACN,QAAQ,CAAC,cAAc,GAAG,GAAG,CAAA;IAC/B,CAAC;IAED,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAA;IAC3E,OAAO,SAAS,CAAA;AAClB,CAAC"}

package/dist/plugins/installer.d.ts

@@ -0,0 +1,64 @@
+import { type ConsentPreview } from './consent.js';
+import type { InstalledPluginRecord, ManifestFormat, PluginManifest, PluginScope, PluginSource } from './types.js';
+import { type UserConfigValue } from './user-config.js';
+export interface InstallRequest {
+    source: PluginSource;
+    /** Marketplace this plugin belongs to. Use `"local"` for direct
+     *  git/local installs that aren't associated with a subscribed
+     *  marketplace — the resulting plugin id will be `<name>@local`. */
+    marketplace: string;
+    /** Scope where the install is recorded (which settings.json's
+     *  `enabledPlugins` map will mention it). Defaults to `'user'`. */
+    scope?: PluginScope;
+    /** If set, the installer aborts when the manifest's `name` field
+     *  doesn't match — used by the marketplace install path to catch
+     *  spoofed entries. */
+    expectedName?: string;
+    /** Whether the marketplace listing marked this plugin as verified.
+     *  Surfaced to the consent callback so users know whether the listing
+     *  came with curator endorsement. Pure metadata — we don't grant
+     *  extra trust based on the flag. */
+    verified?: boolean;
+    /** Called after manifest parse but BEFORE the temp dir is moved to
+     *  the cache. Return false to abort the install — the temp dir is
+     *  cleaned up and the cache is untouched. Absent ⇒ install proceeds
+     *  without prompting (used by tests + the `--yes` CLI flag). */
+    consent?: (preview: ConsentPreview) => Promise<boolean> | boolean;
+    /** Called AFTER consent passes when the manifest declares `userConfig`.
+     *  The caller (a CLI / TUI handler) collects values for each field —
+     *  typically by prompting the user one field at a time, masking input
+     *  for `sensitive: true` fields — and resolves to a `{ key: value }`
+     *  map that gets persisted via user-config.ts. Returning `null`
+     *  aborts the install (treat it like consent denial). Absent ⇒ we
+     *  skip the prompt; non-sensitive fields fall back to manifest
+     *  defaults, sensitive fields are simply unset (the plugin's hooks /
+     *  MCP entries will see empty env vars, which is the same as today). */
+    userConfigPrompt?: (fields: PluginManifest['userConfig']) => Promise<Record<string, UserConfigValue> | null>;
+    signal?: AbortSignal;
+}
+export interface InstallResult {
+    pluginId: string;
+    rootDir: string;
+    manifest: PluginManifest;
+    manifestFormat: ManifestFormat;
+    record: InstalledPluginRecord;
+}
+export declare class InstallError extends Error {
+    constructor(message: string);
+}
+export declare function installPlugin(req: InstallRequest): Promise<InstallResult>;
+export declare function listInstalledPlugins(): Promise<InstalledPluginRecord[]>;
+export declare function findInstalledPlugin(id: string): Promise<InstalledPluginRecord | undefined>;
+export interface UninstallResult {
+    /** Versions that were removed from cache. Empty if the plugin wasn't
+     *  cached. */
+    removedVersions: string[];
+    /** Whether the installed_plugins.json record was removed. */
+    removedRecord: boolean;
+}
+/** Remove all cached versions of a plugin + drop its
+ *  installed_plugins.json record. Leaves the data dir
+ *  (`~/.x-code/plugins/data/<id>/`) intact so the user doesn't lose
+ *  state if they reinstall later. */
+export declare function uninstallPlugin(id: string): Promise<UninstallResult>;
+//# sourceMappingURL=installer.d.ts.map

package/dist/plugins/installer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"installer.d.ts","sourceRoot":"","sources":["../../src/plugins/installer.ts"],"names":[],"mappings":"AAkCA,OAAO,EAAE,KAAK,cAAc,EAAwC,MAAM,cAAc,CAAA;AAIxF,OAAO,KAAK,EACV,qBAAqB,EAErB,cAAc,EACd,cAAc,EACd,WAAW,EACX,YAAY,EACb,MAAM,YAAY,CAAA;AACnB,OAAO,EAAE,KAAK,eAAe,EAAuB,MAAM,kBAAkB,CAAA;AAE5E,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,YAAY,CAAA;IACpB;;wEAEoE;IACpE,WAAW,EAAE,MAAM,CAAA;IACnB;uEACmE;IACnE,KAAK,CAAC,EAAE,WAAW,CAAA;IACnB;;2BAEuB;IACvB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB;;;yCAGqC;IACrC,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB;;;oEAGgE;IAChE,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,cAAc,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAA;IACjE;;;;;;;;4EAQwE;IACxE,gBAAgB,CAAC,EAAE,CAAC,MAAM,EAAE,cAAc,CAAC,YAAY,CAAC,KAAK,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,GAAG,IAAI,CAAC,CAAA;IAC5G,MAAM,CAAC,EAAE,WAAW,CAAA;CACrB;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,MAAM,CAAA;IAChB,OAAO,EAAE,MAAM,CAAA;IACf,QAAQ,EAAE,cAAc,CAAA;IACxB,cAAc,EAAE,cAAc,CAAA;IAC9B,MAAM,EAAE,qBAAqB,CAAA;CAC9B;AAED,qBAAa,YAAa,SAAQ,KAAK;gBACzB,OAAO,EAAE,MAAM;CAI5B;AAED,wBAAsB,aAAa,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,aAAa,CAAC,CA6I/E;AA0ND,wBAAsB,oBAAoB,IAAI,OAAO,CAAC,qBAAqB,EAAE,CAAC,CAG7E;AAED,wBAAsB,mBAAmB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,GAAG,SAAS,CAAC,CAGhG;AAID,MAAM,WAAW,eAAe;IAC9B;kBACc;IACd,eAAe,EAAE,MAAM,EAAE,CAAA;IACzB,6DAA6D;IAC7D,aAAa,EAAE,OAAO,CAAA;CACvB;AAED;;;qCAGqC;AACrC,wBAAsB,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAyB1E"}