@xopcai/xopc 0.0.303 → 0.0.306

package/dist/src/extensions/lockfile.js

@@ -3,7 +3,7 @@ import { init_logger } from "../utils/logger.js";
 import { init_paths, resolveExtensionsDir, resolveExtensionsLockPath } from "../config/paths.js";
 import { init_write_file_atomic, writeTextAtomic } from "../infra/write-file-atomic.js";
 import { dirname, join } from "path";
-import { existsSync } from "fs";
+import { existsSync, lstatSync, readFileSync, readdirSync, readlinkSync } from "fs";
 import { mkdir, readFile } from "fs/promises";
 import { createHash } from "crypto";
 //#region src/extensions/lockfile.ts
@@ -11,10 +11,35 @@ init_write_file_atomic();
 init_logger();
 init_paths();
 const log = createLogger("ExtensionLockfile");
+function computeExtensionDirectoryIntegrity(extensionDir) {
+	if (!existsSync(extensionDir)) return void 0;
+	const hash = createHash("sha256");
+	const walk = (dir, prefix = "") => {
+		const entries = readdirSync(dir, { withFileTypes: true }).filter((entry) => entry.name !== ".DS_Store").sort((left, right) => left.name.localeCompare(right.name));
+		for (const entry of entries) {
+			const relativePath = prefix ? `${prefix}/${entry.name}` : entry.name;
+			const fullPath = join(dir, entry.name);
+			const stat = lstatSync(fullPath);
+			if (stat.isSymbolicLink()) hash.update(`symlink\0${relativePath}\0${readlinkSync(fullPath)}\0`);
+			else if (stat.isDirectory()) {
+				hash.update(`dir\0${relativePath}\0`);
+				walk(fullPath, relativePath);
+			} else if (stat.isFile()) {
+				hash.update(`file\0${relativePath}\0${stat.mode & 511}\0${stat.size}\0`);
+				hash.update(readFileSync(fullPath));
+				hash.update("\0");
+			}
+		}
+	};
+	walk(extensionDir);
+	return `dir-sha256-${hash.digest("base64")}`;
+}
 var ExtensionLockfileManager = class {
 	lockfilePath;
-	constructor(lockfilePath) {
+	extensionsDir;
+	constructor(lockfilePath, extensionsDir = resolveExtensionsDir()) {
 		this.lockfilePath = lockfilePath || resolveExtensionsLockPath();
+		this.extensionsDir = extensionsDir;
 	}
 	/**
 	* Load the lockfile
@@ -101,14 +126,24 @@ var ExtensionLockfileManager = class {
 	* Verify extension integrity
 	*/
 	async verify(extensionId) {
-		if (!await this.get(extensionId)) return {
+		const entry = await this.get(extensionId);
+		if (!entry) return {
 			valid: false,
 			reason: "Extension not in lockfile"
 		};
-		if (!existsSync(join(resolveExtensionsDir(), extensionId))) return {
+		const extDir = join(this.extensionsDir, extensionId);
+		if (!existsSync(extDir)) return {
 			valid: false,
 			reason: "Extension directory not found"
 		};
+		if (!entry.installedIntegrity) return {
+			valid: false,
+			reason: "Lockfile has no installed file integrity snapshot"
+		};
+		if (computeExtensionDirectoryIntegrity(extDir) !== entry.installedIntegrity) return {
+			valid: false,
+			reason: "Installed extension files do not match the lockfile"
+		};
 		return { valid: true };
 	}
 	/**
@@ -128,20 +163,12 @@ var ExtensionLockfileManager = class {
 	*/
 	async freeze() {
 		const data = await this.load();
-		for (const [extensionId] of Object.entries(data.extensions)) if (!existsSync(join(resolveExtensionsDir(), extensionId))) log.warn({ extensionId }, "Extension in lockfile but not installed");
+		for (const [extensionId] of Object.entries(data.extensions)) if (!existsSync(join(this.extensionsDir, extensionId))) log.warn({ extensionId }, "Extension in lockfile but not installed");
 		data.lastUpdated = (/* @__PURE__ */ new Date()).toISOString();
 		await this.save(data);
 		log.info("Lockfile frozen");
 		return data;
 	}
-	/**
-	* Generate integrity hash for a file
-	*/
-	static async generateIntegrity(filePath) {
-		const { readFile } = await import("fs/promises");
-		const content = await readFile(filePath);
-		return "sha512-" + createHash("sha512").update(content).digest("base64");
-	}
 };
 let globalManager;
 function getExtensionLockfileManager(lockfilePath) {
@@ -158,4 +185,4 @@ async function saveExtensionLockfile(data, lockfilePath) {
 	return getExtensionLockfileManager(lockfilePath).save(data);
 }
 //#endregion
-export { ExtensionLockfileManager, getExtensionLockfileManager, loadExtensionLockfile, resetExtensionLockfileManager, saveExtensionLockfile };
+export { ExtensionLockfileManager, computeExtensionDirectoryIntegrity, getExtensionLockfileManager, loadExtensionLockfile, resetExtensionLockfileManager, saveExtensionLockfile };

package/dist/src/extensions/normalize-manifest.js

@@ -172,42 +172,18 @@ function normalizeUiManifest(raw) {
 }
 function normalizeUiContributions(raw) {
 	if (!isRecord(raw)) return void 0;
-	const sidebarPanels = normalizeSidebarPanels(raw.sidebarPanels);
 	const settingsPanels = normalizeSettingsPanels(raw.settingsPanels);
 	const chatWidgets = normalizeChatWidgets(raw.chatWidgets);
 	const pages = normalizePages(raw.pages);
 	const commands = normalizeCommands(raw.commands);
-	const statusBarItems = normalizeStatusBarItems(raw.statusBarItems);
 	const out = {
-		...sidebarPanels ? { sidebarPanels } : {},
 		...settingsPanels ? { settingsPanels } : {},
 		...chatWidgets ? { chatWidgets } : {},
 		...pages ? { pages } : {},
-		...commands ? { commands } : {},
-		...statusBarItems ? { statusBarItems } : {}
+		...commands ? { commands } : {}
 	};
 	return Object.keys(out).length ? out : void 0;
 }
-function normalizeSidebarPanels(raw) {
-	if (!Array.isArray(raw)) return void 0;
-	const out = [];
-	for (const item of raw) {
-		if (!isRecord(item)) continue;
-		const id = item.id;
-		const title = item.title;
-		const entrypoint = item.entrypoint;
-		if (typeof id !== "string" || typeof title !== "string" || typeof entrypoint !== "string") continue;
-		out.push({
-			id,
-			title,
-			entrypoint,
-			icon: typeof item.icon === "string" ? item.icon : void 0,
-			defaultVisible: typeof item.defaultVisible === "boolean" ? item.defaultVisible : void 0,
-			when: typeof item.when === "string" && item.when.length > 0 ? item.when : void 0
-		});
-	}
-	return out.length ? out : void 0;
-}
 function normalizeSettingsPanels(raw) {
 	if (!Array.isArray(raw)) return void 0;
 	const out = [];
@@ -277,8 +253,7 @@ function normalizePages(raw) {
 			path,
 			entrypoint,
 			showInNav: typeof item.showInNav === "boolean" ? item.showInNav : void 0,
-			navIcon: typeof item.navIcon === "string" ? item.navIcon : void 0,
-			when: typeof item.when === "string" && item.when.length > 0 ? item.when : void 0
+			navIcon: typeof item.navIcon === "string" ? item.navIcon : void 0
 		});
 	}
 	return out.length ? out : void 0;
@@ -296,27 +271,7 @@ function normalizeCommands(raw) {
 			title,
 			shortcut: typeof item.shortcut === "string" ? item.shortcut : void 0,
 			opensPanel: typeof item.opensPanel === "string" ? item.opensPanel : void 0,
-			chatAlias: typeof item.chatAlias === "string" && item.chatAlias.length > 0 ? item.chatAlias : void 0,
-			when: typeof item.when === "string" && item.when.length > 0 ? item.when : void 0
-		});
-	}
-	return out.length ? out : void 0;
-}
-function normalizeStatusBarItems(raw) {
-	if (!Array.isArray(raw)) return void 0;
-	const out = [];
-	for (const item of raw) {
-		if (!isRecord(item)) continue;
-		const id = item.id;
-		const entrypoint = item.entrypoint;
-		if (typeof id !== "string" || typeof entrypoint !== "string") continue;
-		const position = item.position;
-		out.push({
-			id,
-			entrypoint,
-			position: position === "left" || position === "right" ? position : void 0,
-			width: typeof item.width === "number" ? item.width : void 0,
-			when: typeof item.when === "string" && item.when.length > 0 ? item.when : void 0
+			chatAlias: typeof item.chatAlias === "string" && item.chatAlias.length > 0 ? item.chatAlias : void 0
 		});
 	}
 	return out.length ? out : void 0;
@@ -370,17 +325,12 @@ function normalizeActivation(raw) {
 	if (!isRecord(raw)) return void 0;
 	const onStartup = typeof raw.onStartup === "boolean" ? raw.onStartup : void 0;
 	const onProviders = Array.isArray(raw.onProviders) ? raw.onProviders.filter((x) => typeof x === "string") : void 0;
-	const onCommands = Array.isArray(raw.onCommands) ? raw.onCommands.filter((x) => typeof x === "string") : void 0;
 	const onChannels = Array.isArray(raw.onChannels) ? raw.onChannels.filter((x) => typeof x === "string") : void 0;
-	const capRaw = raw.onCapabilities;
-	const onCapabilities = Array.isArray(capRaw) ? capRaw.filter((x) => x === "provider" || x === "channel" || x === "tool" || x === "hook") : void 0;
-	if (onStartup === void 0 && !onProviders?.length && !onCommands?.length && !onChannels?.length && !onCapabilities?.length) return;
+	if (onStartup === void 0 && !onProviders?.length && !onChannels?.length) return;
 	return {
 		onStartup,
 		onProviders,
-		onCommands,
-		onChannels,
-		onCapabilities
+		onChannels
 	};
 }
 function normalizeContracts(raw) {
@@ -434,15 +384,11 @@ var init_normalize_manifest = __esmMin((() => {
 		"agent.send",
 		"agent.subscribe",
 		"session.read",
-		"session.write",
 		"config.read",
 		"config.write",
 		"storage",
 		"notification",
-		"clipboard",
-		"theme",
-		"workspace.read",
-		"workspace.write"
+		"theme"
 	]);
 }));
 //#endregion

package/dist/src/extensions/sdk/index.d.ts

@@ -8,11 +8,12 @@
  * import type { ExtensionApi, ExtensionDefinition } from '@xopcai/xopc/extension-sdk';
  */
 export type { ExtensionDefinition, ExtensionModule, ExtensionKind, ExtensionApi, ExtensionLogger, ExtensionManifest, ExtensionRecord, ExtensionRegistry, ResolvedExtensionConfig, ExtensionRuntime, ExtensionCliRegistration, } from '../types/index.js';
+export { EXTENSION_API_VERSION, EXTENSION_UI_API_VERSION } from '../api-version.js';
 export type { AgentTool, AgentToolResult, AgentToolUpdateCallback, ToolExecutionStartEvent, ToolExecutionUpdateEvent, ToolExecutionEndEvent, } from '../types/index.js';
 export type { ExtensionHookEvent, ExtensionHookHandler, HookOptions, HookAgentContext, AgentMessage, ContextEvent, ContextResult, InputEvent, InputResult, TurnEvent, TurnResult, HookHandlerMap, HookExecutionMode, HookBeforeModelResolveEvent, HookBeforeModelResolveResult, HookBeforePromptBuildEvent, HookBeforePromptBuildResult, HookLlmInputEvent, HookLlmOutputEvent, HookInboundClaimEvent, HookInboundClaimResult, HookBeforeResetEvent, HookBeforeResetResult, HookBeforeMessageWriteEvent, HookBeforeMessageWriteResult, HookTurnStartEvent, HookTurnEndEvent, HookToolExecutionStartEvent, HookToolExecutionUpdateEvent, HookToolExecutionEndEvent, HookContext, BeforeAgentStartContext, BeforeAgentStartResult, AgentEndContext, WebchatTurnCompleteEvent, BeforeCompactionContext, AfterCompactionContext, MessageReceivedContext, MessageSendingContext, MessageSendingResult, MessageSentContext, BeforeToolCallContext, BeforeToolCallResult, AfterToolCallContext, SessionStartContext, SessionEndContext, GatewayStartContext, GatewayStopContext, } from '../types/index.js';
 export type { EventMap, RequestMap, EventHandler, EventHandlerMeta, RequestHandler, RequestHandlerMeta, WildcardEventHandler, WildcardHandlerMeta, TypedEventBusOptions, RequestOptions, } from '../types/index.js';
 export type { ProviderPlugin, ProviderModelDefinition, ProviderCapabilities, ProviderStreamParams, ProviderStreamChunk, ProviderCompleteParams, ProviderResponse, ProviderRegistry, BUILTIN_PROVIDERS, BuiltinProviderId, } from '../types/index.js';
-export type { ProviderConfig, ModelConfig, OAuthConfig, OAuthCallbacks, OAuthCredentials, FlagConfig, FlagValue, ShortcutConfig, ShortcutHandler, } from '../types/index.js';
+export type { ProviderConfig, ModelConfig, OAuthConfig, OAuthCallbacks, OAuthCredentials, } from '../types/index.js';
 export type { TuiExtensionHostContract, TuiExtensionRegistrar, TuiAutocompleteProvider, TuiAutocompleteSuggestion, TuiToolRenderer, TuiToolRenderContext, TuiSlashCommandHandler, TuiNotifyLevel, } from '../types/index.js';
 export type { SafetyCheckResult, SecurityConfig, ExtensionSourceOrigin, ProvenanceInfo, } from '../security.js';
 export type { SlotKey, SlotClaim, SlotConfig, } from '../slots.js';
@@ -23,7 +24,7 @@ export type { ExtensionCommand, ExtensionCommandHandler, ExtensionCommandContext
 export type { ExtensionService, } from '../types/index.js';
 export type { GatewayMethodHandler, } from '../types/index.js';
 export { TypedEventBus } from '../typed-event-bus.js';
-export { ExtensionRegistryImpl } from '../loader.js';
+export { ExtensionRegistryImpl } from '../extension-registry-impl.js';
 export { ProviderPluginRegistry, getProviderRegistry } from '../../providers/plugin-registry.js';
 export { SlotRegistry, getSlotRegistry, registerSlotType } from '../slots.js';
 export { HOOK_EXECUTION_MODES } from '../types/hooks.js';

package/dist/src/extensions/sdk/index.js

@@ -2,10 +2,10 @@ import { ProviderPluginRegistry, getProviderRegistry, init_plugin_registry } fro
 import { HOOK_EXECUTION_MODES } from "../types/hooks.js";
 import { TypedEventBus } from "../typed-event-bus.js";
 import { ExtensionRegistryImpl } from "../extension-registry-impl.js";
+import { EXTENSION_API_VERSION, EXTENSION_UI_API_VERSION } from "../api-version.js";
 import { DEFAULT_SECURITY_CONFIG, checkExtensionDirSafety, checkExtensionPathSafety, isExtensionAllowed, logSecurityIssue, provenanceTracker } from "../security.js";
 import { SlotRegistry, getSlotRegistry, registerSlotType } from "../slots.js";
 import { ExtensionDiagnostics, ExtensionLoaderCacheImpl, getExtensionCache, getExtensionDiagnostics } from "../diagnostics.js";
-import "../loader.js";
 import { ExtensionHookRunner, createHookContext, isHookEvent } from "../hooks.js";
 import { defineChannelPluginEntry } from "./channel-entry.js";
 import { registerExtensionCliProgram } from "./channel-helpers.js";
@@ -14,4 +14,4 @@ import { createMockExtensionApi, createTestGateway } from "./testing.js";
 //#region src/extensions/sdk/index.ts
 init_plugin_registry();
 //#endregion
-export { DEFAULT_SECURITY_CONFIG, ExtensionDiagnostics, ExtensionHookRunner, ExtensionLoaderCacheImpl, ExtensionRegistryImpl, HOOK_EXECUTION_MODES, ProviderPluginRegistry, SlotRegistry, TypedEventBus, checkExtensionDirSafety, checkExtensionPathSafety, createHookContext, createMockExtensionApi, createTestGateway, defineChannelPluginEntry, getExtensionCache, getExtensionDiagnostics, getProviderRegistry, getSlotRegistry, isExtensionAllowed, isHookEvent, lazyFunction, lazyModule, logSecurityIssue, provenanceTracker, registerExtensionCliProgram, registerSlotType };
+export { DEFAULT_SECURITY_CONFIG, EXTENSION_API_VERSION, EXTENSION_UI_API_VERSION, ExtensionDiagnostics, ExtensionHookRunner, ExtensionLoaderCacheImpl, ExtensionRegistryImpl, HOOK_EXECUTION_MODES, ProviderPluginRegistry, SlotRegistry, TypedEventBus, checkExtensionDirSafety, checkExtensionPathSafety, createHookContext, createMockExtensionApi, createTestGateway, defineChannelPluginEntry, getExtensionCache, getExtensionDiagnostics, getProviderRegistry, getSlotRegistry, isExtensionAllowed, isHookEvent, lazyFunction, lazyModule, logSecurityIssue, provenanceTracker, registerExtensionCliProgram, registerSlotType };

package/dist/src/extensions/sdk/testing.js

@@ -159,13 +159,9 @@ var MockExtensionApiImpl = class {
 		this._bus.off(event, handler);
 	}
 	registerProvider(_plugin) {}
-	registerProviderPlugin(_plugin) {}
 	registerSpeechProvider(_plugin) {}
 	registerMediaUnderstandingProvider(_plugin) {}
 	registerMarketplaceAdapter(_registration) {}
-	registerFlag(_name, _config) {}
-	getFlag(_name) {}
-	registerShortcut(_key, _config) {}
 	registerTui(_register) {}
 	setLabel(_entryId, _label) {}
 	sendUserMessage(_content, _options) {}

package/dist/src/extensions/security.js

@@ -83,14 +83,12 @@ function checkExtensionDirSafety(extensionDir, rootDir, origin) {
 		const entries = fs.readdirSync(dir, { withFileTypes: true });
 		for (const entry of entries) {
 			const fullPath = path$1.join(dir, entry.name);
-			if (entry.isSymbolicLink()) {
-				const result = checkExtensionPathSafety(fullPath, rootDir, origin);
-				if (!result.safe) issues.push(result);
-			} else if (entry.isDirectory()) walkDir(fullPath);
-			else if (entry.isFile()) {
-				const result = checkExtensionPathSafety(fullPath, rootDir, origin);
-				if (!result.safe) issues.push(result);
+			const result = checkExtensionPathSafety(fullPath, rootDir, origin);
+			if (!result.safe) {
+				issues.push(result);
+				continue;
 			}
+			if (entry.isDirectory()) walkDir(fullPath);
 		}
 	};
 	walkDir(extensionDir);

package/dist/src/extensions/types/core.d.ts

@@ -13,7 +13,6 @@ import type { TypedEventBus } from './events.js';
 import type { ExtensionHookEvent, ExtensionHookHandler, HookOptions, HookHandlerMap } from './hooks.js';
 import type { ChannelPlugin } from '../../channels/plugin-types.js';
 import type { SessionMetadata } from '../../session/types.js';
-import type { FlagConfig, FlagValue, ShortcutConfig } from './registration.js';
 import type { ProviderPlugin } from './providers.js';
 import type { TuiExtensionRegistrar } from './tui.js';
 import type { Migration } from '../../migrations/types.js';
@@ -142,7 +141,6 @@ export interface ExtensionApi {
     off(event: string, handler: (data: unknown) => void): void;
     events: TypedEventBus;
     registerProvider(plugin: ProviderPlugin): void;
-    registerProviderPlugin(plugin: ProviderPlugin): void;
     /** Register a speech (TTS) provider plugin. */
     registerSpeechProvider(plugin: import('../../voice/tts/speech-provider-types.js').SpeechProviderPlugin): void;
     /** Register a media understanding (STT / image / video) provider plugin. */
@@ -155,9 +153,6 @@ export interface ExtensionApi {
         adapter: import('../../agent/skills/marketplace/adapter.types.js').SkillsMarketplaceAdapter;
         displayName?: string;
     }): void;
-    registerFlag(name: string, config: FlagConfig, extensionId?: string): void;
-    getFlag(name: string): FlagValue;
-    registerShortcut(key: string, config: ShortcutConfig): void;
     /**
      * Register TUI contributions (footer/header widgets, autocomplete, tool renderers).
      * Callback runs when `xopc tui` starts — not during gateway-only extension load.

package/dist/src/extensions/types/index.d.ts

@@ -9,6 +9,6 @@ export * from './tools.js';
 export * from './hooks.js';
 export * from './events.js';
 export * from './loader.js';
-export type { ProviderConfig, ProviderApiType, ModelConfig, OAuthConfig, OAuthCallbacks, OAuthCredentials, FlagConfig, FlagValue, ShortcutConfig, ShortcutHandler } from './registration.js';
+export type { ProviderConfig, ProviderApiType, ModelConfig, OAuthConfig, OAuthCallbacks, OAuthCredentials } from './registration.js';
 export * from './providers.js';
 export * from './tui.js';

package/dist/src/extensions/types/manifest.d.ts

@@ -131,25 +131,13 @@ export interface ExtensionUiManifest {
     contributions?: ExtensionUiContributions;
 }
 /** Permissions an extension can request for its frontend UI. */
-export type ExtensionUiPermission = 'agent.send' | 'agent.subscribe' | 'session.read' | 'session.write' | 'config.read' | 'config.write' | 'storage' | 'notification' | 'clipboard' | 'theme' | 'workspace.read' | 'workspace.write';
+export type ExtensionUiPermission = 'agent.send' | 'agent.subscribe' | 'session.read' | 'config.read' | 'config.write' | 'storage' | 'notification' | 'theme';
 /** All UI contribution points an extension can declare. */
 export interface ExtensionUiContributions {
-    sidebarPanels?: SidebarPanelContribution[];
     settingsPanels?: SettingsPanelContribution[];
     chatWidgets?: ChatWidgetContribution[];
     pages?: PageContribution[];
     commands?: CommandContribution[];
-    statusBarItems?: StatusBarItemContribution[];
-}
-/** A panel rendered in the sidebar area. */
-export interface SidebarPanelContribution {
-    id: string;
-    title: string;
-    icon?: string;
-    entrypoint: string;
-    defaultVisible?: boolean;
-    /** When-expression for visibility (see Phase 2). */
-    when?: string;
 }
 /** A panel rendered inside the settings page. */
 export interface SettingsPanelContribution {
@@ -182,7 +170,6 @@ export interface PageContribution {
     showInNav?: boolean;
     /** Lucide icon name */
     navIcon?: string;
-    when?: string;
 }
 /** A command registered in the command palette. */
 export interface CommandContribution {
@@ -192,15 +179,6 @@ export interface CommandContribution {
     opensPanel?: string;
     /** Optional chat slash name (e.g. `/hello`); bound via `api.onCommand`. */
     chatAlias?: string;
-    when?: string;
-}
-/** A small widget rendered in the status bar. */
-export interface StatusBarItemContribution {
-    id: string;
-    entrypoint: string;
-    position?: 'left' | 'right';
-    width?: number;
-    when?: string;
 }
 export interface ProviderAuthChoice {
     provider: string;
@@ -223,9 +201,7 @@ export interface ActivationDeclaration {
     /** When false, extension code loads after gateway ready (sidecar). Default: eager at startup. */
     onStartup?: boolean;
     onProviders?: string[];
-    onCommands?: string[];
     onChannels?: string[];
-    onCapabilities?: Array<'provider' | 'channel' | 'tool' | 'hook'>;
 }
 export interface ContractDeclaration {
     tools?: string[];

package/dist/src/extensions/types/providers.d.ts

@@ -168,7 +168,7 @@ export interface ProviderResponse {
 }
 export interface ProviderRegistry {
     /** Register a provider */
-    register(provider: ProviderPlugin): void;
+    register(provider: ProviderPlugin): () => void;
     /** Get a provider by ID */
     get(id: string): ProviderPlugin | undefined;
     /** List all providers */

package/dist/src/extensions/types/registration.d.ts

@@ -37,15 +37,3 @@ export interface OAuthCredentials {
     refresh?: string;
     expiresAt?: number;
 }
-export interface FlagConfig {
-    type: 'boolean' | 'string';
-    default?: FlagValue;
-    description: string;
-    aliases?: string[];
-}
-export type FlagValue = boolean | string | undefined;
-export interface ShortcutConfig {
-    description: string;
-    handler: ShortcutHandler;
-}
-export type ShortcutHandler = (context: unknown) => void | Promise<void>;

package/dist/src/extensions/update.js

@@ -3,11 +3,12 @@ import { init_logger } from "../utils/logger.js";
 import { init_paths, resolveBundledExtensionsDir, resolveExtensionsDir } from "../config/paths.js";
 import { init_loader, loadConfig } from "../config/loader.js";
 import { downloadExtensionStoreZipBuffer, resolveExtensionZipDownloadUrl, resolveExtensionsStoreBaseUrl, verifyStoreArtifactSha256 } from "../agent/skills/marketplace/adapters/store/store-api-client.js";
-import { getExtensionLockfileManager } from "./lockfile.js";
-import { installExtensionFromStoreZip, installFromNpm } from "./install.js";
+import { computeExtensionDirectoryIntegrity, getExtensionLockfileManager } from "./lockfile.js";
+import { commitStagedExtensionInstall, finalizeStagedExtensionInstall, rollbackStagedExtensionInstall, stageExtensionNpm, stageExtensionStoreZip } from "./install-transaction.js";
 import { findExtension } from "./marketplace.js";
 import { join } from "node:path";
-import { existsSync, readFileSync, readdirSync, rmSync } from "node:fs";
+import { existsSync, readFileSync, readdirSync } from "node:fs";
+import { createHash } from "node:crypto";
 import semver from "semver";
 //#region src/extensions/update.ts
 /**
@@ -18,6 +19,35 @@ init_loader();
 init_logger();
 const log = createLogger("ExtensionUpdate");
 const MANIFEST = "xopc.extension.json";
+function readJsonObject(path) {
+	try {
+		const value = JSON.parse(readFileSync(path, "utf-8"));
+		return value && typeof value === "object" && !Array.isArray(value) ? value : void 0;
+	} catch {
+		return;
+	}
+}
+function installedSnapshots(targetDir, extensionId) {
+	const root = join(targetDir, extensionId);
+	return {
+		manifest: readJsonObject(join(root, MANIFEST)),
+		packageJson: readJsonObject(join(root, "package.json"))
+	};
+}
+async function commitStagedWithLock(transaction, lock, writeLock) {
+	const snapshot = await lock.load();
+	let lockWriteStarted = false;
+	try {
+		commitStagedExtensionInstall(transaction, true);
+		lockWriteStarted = true;
+		await writeLock();
+	} catch (error) {
+		rollbackStagedExtensionInstall(transaction);
+		if (lockWriteStarted) await lock.save(snapshot);
+		throw error;
+	}
+	finalizeStagedExtensionInstall(transaction);
+}
 function readInstalledExtensionVersion(targetDir, extensionId) {
 	const manifestPath = join(targetDir, extensionId, MANIFEST);
 	if (!existsSync(manifestPath)) return;
@@ -46,7 +76,9 @@ async function upsertNpmExtensionLock(lock, targetDir, result, spec) {
 		name: result.extensionId,
 		version: ver,
 		resolved,
-		source: "npm"
+		source: "npm",
+		installedIntegrity: computeExtensionDirectoryIntegrity(join(targetDir, result.extensionId)),
+		...installedSnapshots(targetDir, result.extensionId)
 	});
 }
 async function installExtensionFromStoreWithLock(params) {
@@ -54,20 +86,27 @@ async function installExtensionFromStoreWithLock(params) {
 		const { downloadUrl, version, sha256 } = await resolveExtensionZipDownloadUrl(params.storeBase, params.packageName, params.version);
 		const buf = await downloadExtensionStoreZipBuffer(params.storeBase, downloadUrl);
 		verifyStoreArtifactSha256(buf, sha256);
-		const result = await installExtensionFromStoreZip(buf, params.targetDir);
-		if (!result.ok || !result.extensionId) return {
-			ok: false,
-			error: result.error ?? "install failed"
-		};
-		await params.lock.upsert(result.extensionId, {
-			name: result.extensionId,
+		const transaction = await stageExtensionStoreZip(buf, params.targetDir);
+		if (transaction.extensionId !== params.expectedExtensionId) {
+			rollbackStagedExtensionInstall(transaction);
+			return {
+				ok: false,
+				error: `Expected extension ${params.expectedExtensionId}, received ${transaction.extensionId}`
+			};
+		}
+		await commitStagedWithLock(transaction, params.lock, () => params.lock.upsert(transaction.extensionId, {
+			name: transaction.extensionId,
 			version,
 			resolved: params.packageName,
-			source: "store"
-		});
+			source: "store",
+			artifactUrl: downloadUrl,
+			integrity: `sha256-${createHash("sha256").update(buf).digest("base64")}`,
+			installedIntegrity: computeExtensionDirectoryIntegrity(transaction.targetDir),
+			...installedSnapshots(params.targetDir, transaction.extensionId)
+		}));
 		return {
 			ok: true,
-			extensionId: result.extensionId,
+			extensionId: transaction.extensionId,
 			version
 		};
 	} catch (err) {
@@ -112,14 +151,10 @@ async function updateSingleExtension(params) {
 	const { extensionId, entry, targetDir, storeBase, lock, timeoutMs, logger } = params;
 	const currentVersion = readInstalledExtensionVersion(targetDir, extensionId);
 	if (entry.source === "store") {
-		const pkgName = entry.resolved?.trim() || extensionId;
-		if (existsSync(join(targetDir, extensionId))) rmSync(join(targetDir, extensionId), {
-			recursive: true,
-			force: true
-		});
 		const result = await installExtensionFromStoreWithLock({
 			storeBase,
-			packageName: pkgName,
+			packageName: entry.resolved?.trim() || extensionId,
+			expectedExtensionId: extensionId,
 			targetDir,
 			lock
 		});
@@ -153,13 +188,20 @@ async function updateSingleExtension(params) {
 		status: "skipped",
 		message: `Skipping "${extensionId}" (could not resolve npm package).`
 	};
-	if (existsSync(join(targetDir, extensionId))) rmSync(join(targetDir, extensionId), {
-		recursive: true,
-		force: true
-	});
-	const installResult = await installFromNpm(spec, targetDir, timeoutMs);
-	if (!installResult.ok) {
-		const message = installResult.error ?? "npm install failed";
+	let transaction;
+	try {
+		transaction = await stageExtensionNpm(spec, targetDir, timeoutMs);
+		if (transaction.extensionId !== extensionId) {
+			rollbackStagedExtensionInstall(transaction);
+			throw new Error(`Expected extension ${extensionId}, received ${transaction.extensionId}`);
+		}
+		await commitStagedWithLock(transaction, lock, () => upsertNpmExtensionLock(lock, targetDir, {
+			ok: true,
+			extensionId: transaction.extensionId,
+			targetDir: transaction.targetDir
+		}, spec));
+	} catch (error) {
+		const message = error instanceof Error ? error.message : String(error);
 		logger.error?.(`Failed to update ${extensionId}: ${message}`);
 		return {
 			extensionId,
@@ -168,9 +210,8 @@ async function updateSingleExtension(params) {
 			currentVersion
 		};
 	}
-	await upsertNpmExtensionLock(lock, targetDir, installResult, spec);
-	const nextVersion = (installResult.extensionId ? readInstalledExtensionVersion(targetDir, installResult.extensionId) : void 0) ?? entry.version;
-	const resolvedId = installResult.extensionId ?? extensionId;
+	const nextVersion = readInstalledExtensionVersion(targetDir, transaction.extensionId) ?? entry.version;
+	const resolvedId = transaction.extensionId;
 	const status = currentVersion && nextVersion && currentVersion === nextVersion ? "unchanged" : "updated";
 	return {
 		extensionId: resolvedId,

package/dist/src/gateway/heartbeat/service.js

@@ -4,11 +4,11 @@ import { init_agent_scope, resolveDefaultAgentId } from "../../agent/agent-scope
 import { createConversation, init_conversation_repository, resolveRoutedConversation } from "../../storage/sqlite/conversation-repository.js";
 import { shouldSilence, stripHeartbeatToken } from "../../heartbeat/tokens.js";
 import { proactiveChecksAllowed, proactivePreferences } from "../../proactive/policy/service.js";
-import { beginHeartbeatCheck, completeHeartbeatCheck, deliverHeartbeatChecks, recentHeartbeatChecks, recoverHeartbeatChecks } from "./check-store.js";
-import { appendCronEventLines } from "../../heartbeat/event-prompt.js";
 import { isWithinActiveHours } from "../../heartbeat/active-hours.js";
 import { isHeartbeatContentEmpty } from "../../heartbeat/content-check.js";
+import { appendCronEventLines } from "../../heartbeat/event-prompt.js";
 import { createHeartbeatWake } from "../../heartbeat/wake.js";
+import { beginHeartbeatCheck, completeHeartbeatCheck, deliverHeartbeatChecks, recentHeartbeatChecks, recoverHeartbeatChecks } from "./check-store.js";
 import { resolveHeartbeatMdPath } from "../workspace-heartbeat-path.js";
 import { readFile } from "fs/promises";
 //#region src/gateway/heartbeat/service.ts

package/dist/src/gateway/hono/lib/config-payload.d.ts

@@ -245,8 +245,10 @@ export declare function buildSafeWebConfigPayload(service: GatewayService, optio
         knowledgeMemory: {
             enabled: boolean;
             writePolicy: "allow" | "confirm" | "deny";
-            sources: ("project" | "session" | "workspace" | "connector")[];
+            readScopes: ("project" | "session" | "agent" | "workspace" | "global")[];
+            contentSources: ("memory" | "connector" | "local_import")[];
             searchStrategy: "local-first" | "external-first" | "fanout" | "local-only" | "external-only";
+            searchTimeoutMs: number;
             writeStrategy: "local-first" | "external-first" | "local-only" | "external-only" | "write-through";
             allowExternalWrites: boolean;
             allowedProviderIds?: string[];