@xopcai/xopc 0.0.303 → 0.0.307

package/dist/src/extensions/loader.js

@@ -15,7 +15,9 @@ import { mergeActivationContext } from "./activation-context.js";
 import { checkEngineCompatibility } from "./engine-check.js";
 import { validateSpeechProviderContracts } from "./speech-provider-contracts.js";
 import { validateMediaUnderstandingProviderContracts } from "./media-provider-contracts.js";
-import { DEFAULT_SECURITY_CONFIG, checkExtensionPathSafety, isExtensionAllowed, logSecurityIssue, provenanceTracker } from "./security.js";
+import { validateExtensionConfig } from "./config-validation.js";
+import { EXTENSION_API_VERSION, EXTENSION_UI_API_VERSION, checkExtensionApiCompatibility } from "./api-version.js";
+import { DEFAULT_SECURITY_CONFIG, checkExtensionDirSafety, checkExtensionPathSafety, isExtensionAllowed, logSecurityIssue, provenanceTracker } from "./security.js";
 import { getSlotRegistry } from "./slots.js";
 import { getExtensionCache, getExtensionDiagnostics } from "./diagnostics.js";
 import { fileURLToPath, pathToFileURL } from "node:url";
@@ -59,6 +61,7 @@ var ExtensionLoader = class {
 	registry;
 	options;
 	extensionInstances = /* @__PURE__ */ new Map();
+	startedServiceIds = /* @__PURE__ */ new Set();
 	jiti;
 	_appConfig;
 	_runtimeContext;
@@ -316,6 +319,20 @@ var ExtensionLoader = class {
 				}, "Extension blocked because its path is unsafe");
 				return null;
 			}
+			if (this.securityConfig.checkPermissions) {
+				const directorySafety = checkExtensionDirSafety(extensionPath, extensionPath, source);
+				if (!directorySafety.safe) {
+					const firstIssue = directorySafety.issues[0];
+					if (firstIssue) logSecurityIssue(config.id, firstIssue);
+					const detail = firstIssue?.detail ?? "Unsafe file in extension directory";
+					this.diagnostics.error(config.id, detail);
+					log.error({
+						extensionId: config.id,
+						detail
+					}, "Extension directory safety check failed");
+					return null;
+				}
+			}
 			if (source !== "bundled" && !isExtensionAllowed(config.id, this.securityConfig)) {
 				this.diagnostics.error(config.id, "Extension is not present in extensions.security.allow");
 				log.error({
@@ -377,42 +394,40 @@ var ExtensionLoader = class {
 				this.diagnostics.error(config.id, engineResult.reason ?? "Incompatible xopc version (engines.xopc)");
 				return null;
 			}
-			if (manifest.configSchema) try {
-				const schema = manifest.configSchema;
-				const extensionConfig = config.config;
-				if (schema.type === "object" && schema.properties) {
-					const props = schema.properties;
-					const required = schema.required || [];
-					for (const field of required) if (extensionConfig[field] === void 0) {
-						log.error({
-							extensionId: config.id,
-							field
-						}, "Extension config validation failed: missing required field");
-						return null;
-					}
-					for (const [key, value] of Object.entries(extensionConfig)) {
-						const propSchema = props[key];
-						if (propSchema) {
-							if (propSchema.type && !this.validateType(value, propSchema.type)) {
-								log.error({
-									extensionId: config.id,
-									field: key,
-									expected: propSchema.type,
-									actual: typeof value
-								}, "Extension config validation failed: type mismatch");
-								return null;
-							}
-						}
-					}
+			for (const [engineName, requiredRange, currentVersion] of [[
+				"extensionApi",
+				manifest.engines.extensionApi,
+				EXTENSION_API_VERSION
+			], [
+				"extensionUiApi",
+				manifest.engines.extensionUiApi,
+				EXTENSION_UI_API_VERSION
+			]]) {
+				const result = checkExtensionApiCompatibility(requiredRange, currentVersion, engineName);
+				if (result.parseWarning || !result.compatible) {
+					const reason = result.reason ?? `Incompatible engines.${engineName}`;
+					log.warn({
+						extensionId: config.id,
+						requiredRange,
+						currentVersion
+					}, reason);
+					this.diagnostics.error(config.id, reason);
+					return null;
+				}
+			}
+			if (manifest.configSchema) {
+				const result = validateExtensionConfig(manifest.configSchema, config.config ?? {});
+				if (result.valid === false) {
+					log.error({
+						extensionId: config.id,
+						validationErrors: result.errors
+					}, `Extension config validation failed: ${result.reason}`);
+					this.diagnostics.error(config.id, `Extension config validation failed: ${result.reason}`);
+					return null;
 				}
 				log.debug({ extensionId: config.id }, "Extension config validated");
-			} catch (err) {
-				log.warn({
-					err,
-					extensionId: config.id
-				}, "Config schema validation skipped");
 			}
-			const extensionDir = dirname(extensionPath);
+			const extensionDir = extensionPath;
 			const api = this.createExtensionApi(manifest, config, extensionDir);
 			const module = await this.loadModule(extensionPath, manifest);
 			if (!module) {
@@ -421,7 +436,14 @@ var ExtensionLoader = class {
 				return null;
 			}
 			if (!this.claimExtensionSlots(config.id, manifest)) log.warn({ extensionId: config.id }, "Failed to claim required slots");
-			await this.initializeExtension(module, api, manifest);
+			try {
+				await this.initializeExtension(module, api, manifest);
+			} catch (error) {
+				api._cleanup();
+				this.registry.removeExtensionContributions(config.id);
+				this.releaseExtensionSlots(config.id);
+				throw error;
+			}
 			validateSpeechProviderContracts({
 				extensionId: config.id,
 				manifest,
@@ -490,6 +512,9 @@ var ExtensionLoader = class {
 		if (!claimed) this.diagnostics.warn(extensionId, `Slot "${slotKey}" already claimed by another extension`);
 		return claimed;
 	}
+	releaseExtensionSlots(extensionId) {
+		for (const [key, claim] of this.slotRegistry.getAllClaims()) if (claim.pluginId === extensionId) this.slotRegistry.release(key, extensionId);
+	}
 	loadManifest(extensionPath) {
 		const manifestPath = join(extensionPath, EXTENSION_MANIFEST_FILE);
 		if (existsSync(manifestPath)) try {
@@ -557,13 +582,16 @@ var ExtensionLoader = class {
 	async initializeExtension(module, api, _manifest) {
 		if (typeof module === "function") await module(api);
 		else if (typeof module === "object" && module.register) await module.register(api);
+		if (typeof module === "object" && module.activate) await module.activate(api);
 	}
 	async startServices() {
 		const services = Array.from(this.registry.services.values());
 		for (const service of services) {
+			if (this.startedServiceIds.has(service.id)) continue;
 			const serviceLog = createServiceLogger(service.id);
 			try {
 				await service.start?.();
+				this.startedServiceIds.add(service.id);
 				serviceLog.info(`Started service`);
 			} catch (error) {
 				serviceLog.error({ err: error }, `Failed to start service`);
@@ -572,27 +600,61 @@ var ExtensionLoader = class {
 	}
 	async stopServices() {
 		const services = Array.from(this.registry.services.values()).reverse();
-		for (const service of services) if (service.stop) {
+		for (const service of services) {
+			if (!this.startedServiceIds.has(service.id)) continue;
 			const serviceLog = createServiceLogger(service.id);
 			try {
-				await service.stop();
-				serviceLog.info(`Stopped service`);
+				if (service.stop) {
+					await service.stop();
+					serviceLog.info(`Stopped service`);
+				}
 			} catch (error) {
 				serviceLog.error({ err: error }, `Failed to stop service`);
+			} finally {
+				this.startedServiceIds.delete(service.id);
 			}
 		}
 	}
-	/**
-	* Basic type validation for config values
-	*/
-	validateType(value, expectedType) {
-		if (expectedType === "string") return typeof value === "string";
-		if (expectedType === "number" || expectedType === "integer") return typeof value === "number";
-		if (expectedType === "boolean") return typeof value === "boolean";
-		if (expectedType === "array") return Array.isArray(value);
-		if (expectedType === "object") return typeof value === "object" && value !== null && !Array.isArray(value);
+	async unloadExtension(extensionId) {
+		const api = this.extensionInstances.get(extensionId);
+		const record = this.registry.getExtension(extensionId);
+		if (!api || !record) return false;
+		for (const service of this.registry.getServicesForExtension(extensionId).reverse()) {
+			if (!this.startedServiceIds.has(service.id)) continue;
+			try {
+				await service.stop?.();
+			} catch (error) {
+				log.error({
+					err: error,
+					extensionId,
+					serviceId: service.id
+				}, "Extension service stop failed");
+			} finally {
+				this.startedServiceIds.delete(service.id);
+			}
+		}
+		const module = record.module;
+		try {
+			if (module && typeof module === "object" && module.deactivate) await module.deactivate(api);
+		} catch (error) {
+			log.error({
+				err: error,
+				extensionId
+			}, "Extension deactivation failed");
+		} finally {
+			api._cleanup();
+			this.registry.removeExtensionContributions(extensionId);
+			this.releaseExtensionSlots(extensionId);
+			this.extensionInstances.delete(extensionId);
+			this.cache.invalidate();
+		}
+		this.diagnostics.info(extensionId, "Unloaded extension");
 		return true;
 	}
+	async shutdown() {
+		await this.stopServices();
+		for (const extensionId of [...this.extensionInstances.keys()].reverse()) await this.unloadExtension(extensionId);
+	}
 };
 function resolveExtensionPath(id, _options) {
 	const c = loadConfig();

package/dist/src/extensions/lockfile.d.ts

@@ -1,3 +1,4 @@
+export declare function computeExtensionDirectoryIntegrity(extensionDir: string): string | undefined;
 export type ExtensionSource = 'npm' | 'local' | 'git' | 'store';
 export interface ExtensionLockEntry {
     /** Extension ID */
@@ -37,7 +38,8 @@ export interface ExtensionsLockfile {
 }
 export declare class ExtensionLockfileManager {
     private readonly lockfilePath;
-    constructor(lockfilePath?: string);
+    private readonly extensionsDir;
+    constructor(lockfilePath?: string, extensionsDir?: string);
     /**
      * Load the lockfile
      */
@@ -85,10 +87,6 @@ export declare class ExtensionLockfileManager {
      * Freeze current state (save with validation)
      */
     freeze(): Promise<ExtensionsLockfile>;
-    /**
-     * Generate integrity hash for a file
-     */
-    static generateIntegrity(filePath: string): Promise<string>;
 }
 export declare function getExtensionLockfileManager(lockfilePath?: string): ExtensionLockfileManager;
 export declare function resetExtensionLockfileManager(): void;

package/dist/src/extensions/lockfile.js

@@ -3,7 +3,7 @@ import { init_logger } from "../utils/logger.js";
 import { init_paths, resolveExtensionsDir, resolveExtensionsLockPath } from "../config/paths.js";
 import { init_write_file_atomic, writeTextAtomic } from "../infra/write-file-atomic.js";
 import { dirname, join } from "path";
-import { existsSync } from "fs";
+import { existsSync, lstatSync, readFileSync, readdirSync, readlinkSync } from "fs";
 import { mkdir, readFile } from "fs/promises";
 import { createHash } from "crypto";
 //#region src/extensions/lockfile.ts
@@ -11,10 +11,35 @@ init_write_file_atomic();
 init_logger();
 init_paths();
 const log = createLogger("ExtensionLockfile");
+function computeExtensionDirectoryIntegrity(extensionDir) {
+	if (!existsSync(extensionDir)) return void 0;
+	const hash = createHash("sha256");
+	const walk = (dir, prefix = "") => {
+		const entries = readdirSync(dir, { withFileTypes: true }).filter((entry) => entry.name !== ".DS_Store").sort((left, right) => left.name.localeCompare(right.name));
+		for (const entry of entries) {
+			const relativePath = prefix ? `${prefix}/${entry.name}` : entry.name;
+			const fullPath = join(dir, entry.name);
+			const stat = lstatSync(fullPath);
+			if (stat.isSymbolicLink()) hash.update(`symlink\0${relativePath}\0${readlinkSync(fullPath)}\0`);
+			else if (stat.isDirectory()) {
+				hash.update(`dir\0${relativePath}\0`);
+				walk(fullPath, relativePath);
+			} else if (stat.isFile()) {
+				hash.update(`file\0${relativePath}\0${stat.mode & 511}\0${stat.size}\0`);
+				hash.update(readFileSync(fullPath));
+				hash.update("\0");
+			}
+		}
+	};
+	walk(extensionDir);
+	return `dir-sha256-${hash.digest("base64")}`;
+}
 var ExtensionLockfileManager = class {
 	lockfilePath;
-	constructor(lockfilePath) {
+	extensionsDir;
+	constructor(lockfilePath, extensionsDir = resolveExtensionsDir()) {
 		this.lockfilePath = lockfilePath || resolveExtensionsLockPath();
+		this.extensionsDir = extensionsDir;
 	}
 	/**
 	* Load the lockfile
@@ -101,14 +126,24 @@ var ExtensionLockfileManager = class {
 	* Verify extension integrity
 	*/
 	async verify(extensionId) {
-		if (!await this.get(extensionId)) return {
+		const entry = await this.get(extensionId);
+		if (!entry) return {
 			valid: false,
 			reason: "Extension not in lockfile"
 		};
-		if (!existsSync(join(resolveExtensionsDir(), extensionId))) return {
+		const extDir = join(this.extensionsDir, extensionId);
+		if (!existsSync(extDir)) return {
 			valid: false,
 			reason: "Extension directory not found"
 		};
+		if (!entry.installedIntegrity) return {
+			valid: false,
+			reason: "Lockfile has no installed file integrity snapshot"
+		};
+		if (computeExtensionDirectoryIntegrity(extDir) !== entry.installedIntegrity) return {
+			valid: false,
+			reason: "Installed extension files do not match the lockfile"
+		};
 		return { valid: true };
 	}
 	/**
@@ -128,20 +163,12 @@ var ExtensionLockfileManager = class {
 	*/
 	async freeze() {
 		const data = await this.load();
-		for (const [extensionId] of Object.entries(data.extensions)) if (!existsSync(join(resolveExtensionsDir(), extensionId))) log.warn({ extensionId }, "Extension in lockfile but not installed");
+		for (const [extensionId] of Object.entries(data.extensions)) if (!existsSync(join(this.extensionsDir, extensionId))) log.warn({ extensionId }, "Extension in lockfile but not installed");
 		data.lastUpdated = (/* @__PURE__ */ new Date()).toISOString();
 		await this.save(data);
 		log.info("Lockfile frozen");
 		return data;
 	}
-	/**
-	* Generate integrity hash for a file
-	*/
-	static async generateIntegrity(filePath) {
-		const { readFile } = await import("fs/promises");
-		const content = await readFile(filePath);
-		return "sha512-" + createHash("sha512").update(content).digest("base64");
-	}
 };
 let globalManager;
 function getExtensionLockfileManager(lockfilePath) {
@@ -158,4 +185,4 @@ async function saveExtensionLockfile(data, lockfilePath) {
 	return getExtensionLockfileManager(lockfilePath).save(data);
 }
 //#endregion
-export { ExtensionLockfileManager, getExtensionLockfileManager, loadExtensionLockfile, resetExtensionLockfileManager, saveExtensionLockfile };
+export { ExtensionLockfileManager, computeExtensionDirectoryIntegrity, getExtensionLockfileManager, loadExtensionLockfile, resetExtensionLockfileManager, saveExtensionLockfile };

package/dist/src/extensions/normalize-manifest.js

@@ -172,42 +172,18 @@ function normalizeUiManifest(raw) {
 }
 function normalizeUiContributions(raw) {
 	if (!isRecord(raw)) return void 0;
-	const sidebarPanels = normalizeSidebarPanels(raw.sidebarPanels);
 	const settingsPanels = normalizeSettingsPanels(raw.settingsPanels);
 	const chatWidgets = normalizeChatWidgets(raw.chatWidgets);
 	const pages = normalizePages(raw.pages);
 	const commands = normalizeCommands(raw.commands);
-	const statusBarItems = normalizeStatusBarItems(raw.statusBarItems);
 	const out = {
-		...sidebarPanels ? { sidebarPanels } : {},
 		...settingsPanels ? { settingsPanels } : {},
 		...chatWidgets ? { chatWidgets } : {},
 		...pages ? { pages } : {},
-		...commands ? { commands } : {},
-		...statusBarItems ? { statusBarItems } : {}
+		...commands ? { commands } : {}
 	};
 	return Object.keys(out).length ? out : void 0;
 }
-function normalizeSidebarPanels(raw) {
-	if (!Array.isArray(raw)) return void 0;
-	const out = [];
-	for (const item of raw) {
-		if (!isRecord(item)) continue;
-		const id = item.id;
-		const title = item.title;
-		const entrypoint = item.entrypoint;
-		if (typeof id !== "string" || typeof title !== "string" || typeof entrypoint !== "string") continue;
-		out.push({
-			id,
-			title,
-			entrypoint,
-			icon: typeof item.icon === "string" ? item.icon : void 0,
-			defaultVisible: typeof item.defaultVisible === "boolean" ? item.defaultVisible : void 0,
-			when: typeof item.when === "string" && item.when.length > 0 ? item.when : void 0
-		});
-	}
-	return out.length ? out : void 0;
-}
 function normalizeSettingsPanels(raw) {
 	if (!Array.isArray(raw)) return void 0;
 	const out = [];
@@ -277,8 +253,7 @@ function normalizePages(raw) {
 			path,
 			entrypoint,
 			showInNav: typeof item.showInNav === "boolean" ? item.showInNav : void 0,
-			navIcon: typeof item.navIcon === "string" ? item.navIcon : void 0,
-			when: typeof item.when === "string" && item.when.length > 0 ? item.when : void 0
+			navIcon: typeof item.navIcon === "string" ? item.navIcon : void 0
 		});
 	}
 	return out.length ? out : void 0;
@@ -296,27 +271,7 @@ function normalizeCommands(raw) {
 			title,
 			shortcut: typeof item.shortcut === "string" ? item.shortcut : void 0,
 			opensPanel: typeof item.opensPanel === "string" ? item.opensPanel : void 0,
-			chatAlias: typeof item.chatAlias === "string" && item.chatAlias.length > 0 ? item.chatAlias : void 0,
-			when: typeof item.when === "string" && item.when.length > 0 ? item.when : void 0
-		});
-	}
-	return out.length ? out : void 0;
-}
-function normalizeStatusBarItems(raw) {
-	if (!Array.isArray(raw)) return void 0;
-	const out = [];
-	for (const item of raw) {
-		if (!isRecord(item)) continue;
-		const id = item.id;
-		const entrypoint = item.entrypoint;
-		if (typeof id !== "string" || typeof entrypoint !== "string") continue;
-		const position = item.position;
-		out.push({
-			id,
-			entrypoint,
-			position: position === "left" || position === "right" ? position : void 0,
-			width: typeof item.width === "number" ? item.width : void 0,
-			when: typeof item.when === "string" && item.when.length > 0 ? item.when : void 0
+			chatAlias: typeof item.chatAlias === "string" && item.chatAlias.length > 0 ? item.chatAlias : void 0
 		});
 	}
 	return out.length ? out : void 0;
@@ -370,17 +325,12 @@ function normalizeActivation(raw) {
 	if (!isRecord(raw)) return void 0;
 	const onStartup = typeof raw.onStartup === "boolean" ? raw.onStartup : void 0;
 	const onProviders = Array.isArray(raw.onProviders) ? raw.onProviders.filter((x) => typeof x === "string") : void 0;
-	const onCommands = Array.isArray(raw.onCommands) ? raw.onCommands.filter((x) => typeof x === "string") : void 0;
 	const onChannels = Array.isArray(raw.onChannels) ? raw.onChannels.filter((x) => typeof x === "string") : void 0;
-	const capRaw = raw.onCapabilities;
-	const onCapabilities = Array.isArray(capRaw) ? capRaw.filter((x) => x === "provider" || x === "channel" || x === "tool" || x === "hook") : void 0;
-	if (onStartup === void 0 && !onProviders?.length && !onCommands?.length && !onChannels?.length && !onCapabilities?.length) return;
+	if (onStartup === void 0 && !onProviders?.length && !onChannels?.length) return;
 	return {
 		onStartup,
 		onProviders,
-		onCommands,
-		onChannels,
-		onCapabilities
+		onChannels
 	};
 }
 function normalizeContracts(raw) {
@@ -434,15 +384,11 @@ var init_normalize_manifest = __esmMin((() => {
 		"agent.send",
 		"agent.subscribe",
 		"session.read",
-		"session.write",
 		"config.read",
 		"config.write",
 		"storage",
 		"notification",
-		"clipboard",
-		"theme",
-		"workspace.read",
-		"workspace.write"
+		"theme"
 	]);
 }));
 //#endregion

package/dist/src/extensions/sdk/index.d.ts

@@ -8,11 +8,12 @@
  * import type { ExtensionApi, ExtensionDefinition } from '@xopcai/xopc/extension-sdk';
  */
 export type { ExtensionDefinition, ExtensionModule, ExtensionKind, ExtensionApi, ExtensionLogger, ExtensionManifest, ExtensionRecord, ExtensionRegistry, ResolvedExtensionConfig, ExtensionRuntime, ExtensionCliRegistration, } from '../types/index.js';
+export { EXTENSION_API_VERSION, EXTENSION_UI_API_VERSION } from '../api-version.js';
 export type { AgentTool, AgentToolResult, AgentToolUpdateCallback, ToolExecutionStartEvent, ToolExecutionUpdateEvent, ToolExecutionEndEvent, } from '../types/index.js';
 export type { ExtensionHookEvent, ExtensionHookHandler, HookOptions, HookAgentContext, AgentMessage, ContextEvent, ContextResult, InputEvent, InputResult, TurnEvent, TurnResult, HookHandlerMap, HookExecutionMode, HookBeforeModelResolveEvent, HookBeforeModelResolveResult, HookBeforePromptBuildEvent, HookBeforePromptBuildResult, HookLlmInputEvent, HookLlmOutputEvent, HookInboundClaimEvent, HookInboundClaimResult, HookBeforeResetEvent, HookBeforeResetResult, HookBeforeMessageWriteEvent, HookBeforeMessageWriteResult, HookTurnStartEvent, HookTurnEndEvent, HookToolExecutionStartEvent, HookToolExecutionUpdateEvent, HookToolExecutionEndEvent, HookContext, BeforeAgentStartContext, BeforeAgentStartResult, AgentEndContext, WebchatTurnCompleteEvent, BeforeCompactionContext, AfterCompactionContext, MessageReceivedContext, MessageSendingContext, MessageSendingResult, MessageSentContext, BeforeToolCallContext, BeforeToolCallResult, AfterToolCallContext, SessionStartContext, SessionEndContext, GatewayStartContext, GatewayStopContext, } from '../types/index.js';
 export type { EventMap, RequestMap, EventHandler, EventHandlerMeta, RequestHandler, RequestHandlerMeta, WildcardEventHandler, WildcardHandlerMeta, TypedEventBusOptions, RequestOptions, } from '../types/index.js';
 export type { ProviderPlugin, ProviderModelDefinition, ProviderCapabilities, ProviderStreamParams, ProviderStreamChunk, ProviderCompleteParams, ProviderResponse, ProviderRegistry, BUILTIN_PROVIDERS, BuiltinProviderId, } from '../types/index.js';
-export type { ProviderConfig, ModelConfig, OAuthConfig, OAuthCallbacks, OAuthCredentials, FlagConfig, FlagValue, ShortcutConfig, ShortcutHandler, } from '../types/index.js';
+export type { ProviderConfig, ModelConfig, OAuthConfig, OAuthCallbacks, OAuthCredentials, } from '../types/index.js';
 export type { TuiExtensionHostContract, TuiExtensionRegistrar, TuiAutocompleteProvider, TuiAutocompleteSuggestion, TuiToolRenderer, TuiToolRenderContext, TuiSlashCommandHandler, TuiNotifyLevel, } from '../types/index.js';
 export type { SafetyCheckResult, SecurityConfig, ExtensionSourceOrigin, ProvenanceInfo, } from '../security.js';
 export type { SlotKey, SlotClaim, SlotConfig, } from '../slots.js';
@@ -23,7 +24,7 @@ export type { ExtensionCommand, ExtensionCommandHandler, ExtensionCommandContext
 export type { ExtensionService, } from '../types/index.js';
 export type { GatewayMethodHandler, } from '../types/index.js';
 export { TypedEventBus } from '../typed-event-bus.js';
-export { ExtensionRegistryImpl } from '../loader.js';
+export { ExtensionRegistryImpl } from '../extension-registry-impl.js';
 export { ProviderPluginRegistry, getProviderRegistry } from '../../providers/plugin-registry.js';
 export { SlotRegistry, getSlotRegistry, registerSlotType } from '../slots.js';
 export { HOOK_EXECUTION_MODES } from '../types/hooks.js';

package/dist/src/extensions/sdk/index.js

@@ -2,10 +2,10 @@ import { ProviderPluginRegistry, getProviderRegistry, init_plugin_registry } fro
 import { HOOK_EXECUTION_MODES } from "../types/hooks.js";
 import { TypedEventBus } from "../typed-event-bus.js";
 import { ExtensionRegistryImpl } from "../extension-registry-impl.js";
+import { EXTENSION_API_VERSION, EXTENSION_UI_API_VERSION } from "../api-version.js";
 import { DEFAULT_SECURITY_CONFIG, checkExtensionDirSafety, checkExtensionPathSafety, isExtensionAllowed, logSecurityIssue, provenanceTracker } from "../security.js";
 import { SlotRegistry, getSlotRegistry, registerSlotType } from "../slots.js";
 import { ExtensionDiagnostics, ExtensionLoaderCacheImpl, getExtensionCache, getExtensionDiagnostics } from "../diagnostics.js";
-import "../loader.js";
 import { ExtensionHookRunner, createHookContext, isHookEvent } from "../hooks.js";
 import { defineChannelPluginEntry } from "./channel-entry.js";
 import { registerExtensionCliProgram } from "./channel-helpers.js";
@@ -14,4 +14,4 @@ import { createMockExtensionApi, createTestGateway } from "./testing.js";
 //#region src/extensions/sdk/index.ts
 init_plugin_registry();
 //#endregion
-export { DEFAULT_SECURITY_CONFIG, ExtensionDiagnostics, ExtensionHookRunner, ExtensionLoaderCacheImpl, ExtensionRegistryImpl, HOOK_EXECUTION_MODES, ProviderPluginRegistry, SlotRegistry, TypedEventBus, checkExtensionDirSafety, checkExtensionPathSafety, createHookContext, createMockExtensionApi, createTestGateway, defineChannelPluginEntry, getExtensionCache, getExtensionDiagnostics, getProviderRegistry, getSlotRegistry, isExtensionAllowed, isHookEvent, lazyFunction, lazyModule, logSecurityIssue, provenanceTracker, registerExtensionCliProgram, registerSlotType };
+export { DEFAULT_SECURITY_CONFIG, EXTENSION_API_VERSION, EXTENSION_UI_API_VERSION, ExtensionDiagnostics, ExtensionHookRunner, ExtensionLoaderCacheImpl, ExtensionRegistryImpl, HOOK_EXECUTION_MODES, ProviderPluginRegistry, SlotRegistry, TypedEventBus, checkExtensionDirSafety, checkExtensionPathSafety, createHookContext, createMockExtensionApi, createTestGateway, defineChannelPluginEntry, getExtensionCache, getExtensionDiagnostics, getProviderRegistry, getSlotRegistry, isExtensionAllowed, isHookEvent, lazyFunction, lazyModule, logSecurityIssue, provenanceTracker, registerExtensionCliProgram, registerSlotType };

package/dist/src/extensions/sdk/testing.js

@@ -159,13 +159,9 @@ var MockExtensionApiImpl = class {
 		this._bus.off(event, handler);
 	}
 	registerProvider(_plugin) {}
-	registerProviderPlugin(_plugin) {}
 	registerSpeechProvider(_plugin) {}
 	registerMediaUnderstandingProvider(_plugin) {}
 	registerMarketplaceAdapter(_registration) {}
-	registerFlag(_name, _config) {}
-	getFlag(_name) {}
-	registerShortcut(_key, _config) {}
 	registerTui(_register) {}
 	setLabel(_entryId, _label) {}
 	sendUserMessage(_content, _options) {}

package/dist/src/extensions/security.js

@@ -83,14 +83,12 @@ function checkExtensionDirSafety(extensionDir, rootDir, origin) {
 		const entries = fs.readdirSync(dir, { withFileTypes: true });
 		for (const entry of entries) {
 			const fullPath = path$1.join(dir, entry.name);
-			if (entry.isSymbolicLink()) {
-				const result = checkExtensionPathSafety(fullPath, rootDir, origin);
-				if (!result.safe) issues.push(result);
-			} else if (entry.isDirectory()) walkDir(fullPath);
-			else if (entry.isFile()) {
-				const result = checkExtensionPathSafety(fullPath, rootDir, origin);
-				if (!result.safe) issues.push(result);
+			const result = checkExtensionPathSafety(fullPath, rootDir, origin);
+			if (!result.safe) {
+				issues.push(result);
+				continue;
 			}
+			if (entry.isDirectory()) walkDir(fullPath);
 		}
 	};
 	walkDir(extensionDir);

package/dist/src/extensions/types/core.d.ts

@@ -13,7 +13,6 @@ import type { TypedEventBus } from './events.js';
 import type { ExtensionHookEvent, ExtensionHookHandler, HookOptions, HookHandlerMap } from './hooks.js';
 import type { ChannelPlugin } from '../../channels/plugin-types.js';
 import type { SessionMetadata } from '../../session/types.js';
-import type { FlagConfig, FlagValue, ShortcutConfig } from './registration.js';
 import type { ProviderPlugin } from './providers.js';
 import type { TuiExtensionRegistrar } from './tui.js';
 import type { Migration } from '../../migrations/types.js';
@@ -142,7 +141,6 @@ export interface ExtensionApi {
     off(event: string, handler: (data: unknown) => void): void;
     events: TypedEventBus;
     registerProvider(plugin: ProviderPlugin): void;
-    registerProviderPlugin(plugin: ProviderPlugin): void;
     /** Register a speech (TTS) provider plugin. */
     registerSpeechProvider(plugin: import('../../voice/tts/speech-provider-types.js').SpeechProviderPlugin): void;
     /** Register a media understanding (STT / image / video) provider plugin. */
@@ -155,9 +153,6 @@ export interface ExtensionApi {
         adapter: import('../../agent/skills/marketplace/adapter.types.js').SkillsMarketplaceAdapter;
         displayName?: string;
     }): void;
-    registerFlag(name: string, config: FlagConfig, extensionId?: string): void;
-    getFlag(name: string): FlagValue;
-    registerShortcut(key: string, config: ShortcutConfig): void;
     /**
      * Register TUI contributions (footer/header widgets, autocomplete, tool renderers).
      * Callback runs when `xopc tui` starts — not during gateway-only extension load.

package/dist/src/extensions/types/index.d.ts

@@ -9,6 +9,6 @@ export * from './tools.js';
 export * from './hooks.js';
 export * from './events.js';
 export * from './loader.js';
-export type { ProviderConfig, ProviderApiType, ModelConfig, OAuthConfig, OAuthCallbacks, OAuthCredentials, FlagConfig, FlagValue, ShortcutConfig, ShortcutHandler } from './registration.js';
+export type { ProviderConfig, ProviderApiType, ModelConfig, OAuthConfig, OAuthCallbacks, OAuthCredentials } from './registration.js';
 export * from './providers.js';
 export * from './tui.js';

package/dist/src/extensions/types/manifest.d.ts

@@ -131,25 +131,13 @@ export interface ExtensionUiManifest {
     contributions?: ExtensionUiContributions;
 }
 /** Permissions an extension can request for its frontend UI. */
-export type ExtensionUiPermission = 'agent.send' | 'agent.subscribe' | 'session.read' | 'session.write' | 'config.read' | 'config.write' | 'storage' | 'notification' | 'clipboard' | 'theme' | 'workspace.read' | 'workspace.write';
+export type ExtensionUiPermission = 'agent.send' | 'agent.subscribe' | 'session.read' | 'config.read' | 'config.write' | 'storage' | 'notification' | 'theme';
 /** All UI contribution points an extension can declare. */
 export interface ExtensionUiContributions {
-    sidebarPanels?: SidebarPanelContribution[];
     settingsPanels?: SettingsPanelContribution[];
     chatWidgets?: ChatWidgetContribution[];
     pages?: PageContribution[];
     commands?: CommandContribution[];
-    statusBarItems?: StatusBarItemContribution[];
-}
-/** A panel rendered in the sidebar area. */
-export interface SidebarPanelContribution {
-    id: string;
-    title: string;
-    icon?: string;
-    entrypoint: string;
-    defaultVisible?: boolean;
-    /** When-expression for visibility (see Phase 2). */
-    when?: string;
 }
 /** A panel rendered inside the settings page. */
 export interface SettingsPanelContribution {
@@ -182,7 +170,6 @@ export interface PageContribution {
     showInNav?: boolean;
     /** Lucide icon name */
     navIcon?: string;
-    when?: string;
 }
 /** A command registered in the command palette. */
 export interface CommandContribution {
@@ -192,15 +179,6 @@ export interface CommandContribution {
     opensPanel?: string;
     /** Optional chat slash name (e.g. `/hello`); bound via `api.onCommand`. */
     chatAlias?: string;
-    when?: string;
-}
-/** A small widget rendered in the status bar. */
-export interface StatusBarItemContribution {
-    id: string;
-    entrypoint: string;
-    position?: 'left' | 'right';
-    width?: number;
-    when?: string;
 }
 export interface ProviderAuthChoice {
     provider: string;
@@ -223,9 +201,7 @@ export interface ActivationDeclaration {
     /** When false, extension code loads after gateway ready (sidecar). Default: eager at startup. */
     onStartup?: boolean;
     onProviders?: string[];
-    onCommands?: string[];
     onChannels?: string[];
-    onCapabilities?: Array<'provider' | 'channel' | 'tool' | 'hook'>;
 }
 export interface ContractDeclaration {
     tools?: string[];