@xopcai/xopc 0.0.320 → 0.0.323

package/dist/src/auth/credentials.js

@@ -1,10 +1,10 @@
 import { __esmMin } from "../../_virtual/_rolldown/runtime.js";
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
-import { init_write_file_atomic, writeTextAtomic } from "../infra/write-file-atomic.js";
 import { init_paths, resolveAgentAuthProfilesPath, resolveAuthProfilesPath, resolveCredentialsDir, resolveOAuthPath } from "../config/paths.js";
-import { getApiKeyFromEnv, init_env_keys } from "../providers/env-keys.js";
+import { init_write_file_atomic, writeTextAtomic } from "../infra/write-file-atomic.js";
 import { getOAuthProviderDefinition, init_registry } from "./oauth/registry.js";
+import { getApiKeyFromEnv, init_env_keys } from "../providers/env-keys.js";
 import { init_oauth_provider_lock, withOAuthProviderLock } from "./oauth-provider-lock.js";
 import { dirname, join } from "path";
 import { mkdir, readFile, readdir, rm } from "fs/promises";

package/dist/src/auth/oauth/xopc-cloud.js

@@ -1,6 +1,6 @@
 import { __esmMin } from "../../../_virtual/_rolldown/runtime.js";
-import { generatePKCE, init_pkce } from "./pkce.js";
 import { init_resolution, resolveConnectedPlatformEndpoint } from "../../platform/resolution.js";
+import { generatePKCE, init_pkce } from "./pkce.js";
 import { hostname } from "node:os";
 import { randomBytes } from "node:crypto";
 import http from "node:http";

package/dist/src/auth/profiles/store.js

@@ -1,5 +1,5 @@
-import { init_write_file_atomic, writeTextAtomicSync } from "../../infra/write-file-atomic.js";
 import { init_paths, resolveCredentialsDir } from "../../config/paths.js";
+import { init_write_file_atomic, writeTextAtomicSync } from "../../infra/write-file-atomic.js";
 import path from "node:path";
 import { chmodSync, existsSync, mkdirSync, readFileSync } from "node:fs";
 //#region src/auth/profiles/store.ts

package/dist/src/auth/sync-provider-auth.js

@@ -1,8 +1,8 @@
 import { __esmMin } from "../../_virtual/_rolldown/runtime.js";
+import { getDefaultAgentId, init_resolve_route } from "../routing/resolve-route.js";
 import { init_paths, resolveAgentAuthProfilesPath, resolveAuthProfilesPath, resolveOAuthPath } from "../config/paths.js";
-import { init_registry, isOAuthOnlyProvider } from "./oauth/registry.js";
 import { init_loader, loadConfig } from "../config/loader.js";
-import { getDefaultAgentId, init_resolve_route } from "../routing/resolve-route.js";
+import { init_registry, isOAuthOnlyProvider } from "./oauth/registry.js";
 import { existsSync, readFileSync } from "node:fs";
 //#region src/auth/sync-provider-auth.ts
 /**

package/dist/src/browser/providers/browser-ext-install.js

@@ -2,8 +2,8 @@ import { PACKAGE_VERSION, init_package_version } from "../../package-version.js"
 import { resolveStateDir } from "../../config/paths-state.js";
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
-import { init_write_file_atomic, writeTextAtomic } from "../../infra/write-file-atomic.js";
 import { init_paths, resolveBinDir, resolveConfigPath } from "../../config/paths.js";
+import { init_write_file_atomic, writeTextAtomic } from "../../infra/write-file-atomic.js";
 import { assertCacheDir } from "../cache-dir-policy.js";
 import { BROWSER_EXTENSION_ID, BROWSER_NATIVE_HOST_NAME } from "../extension-identity.js";
 import "../native-messaging-host.js";

package/dist/src/chat-commands/agent-edit.js

@@ -1,6 +1,6 @@
 import { init_agent_scope, normalizeAgentId, resolveAgentProfileDir } from "../agent/agent-scope.js";
-import { WORKSPACE_FILES, init_paths } from "../config/paths.js";
 import { init_agent_session_key, resolveAgentIdFromConversationId } from "../routing/agent-session-key.js";
+import { WORKSPACE_FILES, init_paths } from "../config/paths.js";
 import { commandRegistry } from "./registry.js";
 import { join } from "node:path";
 import { readFile } from "node:fs/promises";

package/dist/src/chat-previews/index.d.ts

@@ -0,0 +1,2 @@
+export * from './service.js';
+export * from './store.js';

package/dist/src/chat-previews/index.js

@@ -0,0 +1,3 @@
+import { ChatPreviewStore } from "./store.js";
+import { ChatPreviewNotFoundError, ChatPreviewRevisionConflictError, ChatPreviewService } from "./service.js";
+export { ChatPreviewNotFoundError, ChatPreviewRevisionConflictError, ChatPreviewService, ChatPreviewStore };

package/dist/src/chat-previews/service.d.ts

@@ -0,0 +1,27 @@
+import { type ChatPreviewCreateInput, type ChatPreviewRecord, type ChatPreviewRevision, type ChatPreviewReviseInput, type ChatPreviewDiagnostic, type ChatPreviewFixGuidance, type LocalAppDetail } from '@xopcai/gateway-contract';
+import type { LocalAppService } from '../local-apps/index.js';
+import { ChatPreviewStore } from './store.js';
+export declare class ChatPreviewNotFoundError extends Error {
+}
+export declare class ChatPreviewRevisionConflictError extends Error {
+}
+export declare class ChatPreviewService {
+    private readonly store;
+    private readonly localApps?;
+    constructor(options?: {
+        store?: ChatPreviewStore;
+        localApps?: LocalAppService;
+    });
+    create(conversationId: string, rawInput: ChatPreviewCreateInput): {
+        preview: ChatPreviewRecord;
+        revision: ChatPreviewRevision;
+    };
+    get(id: string): ChatPreviewRecord;
+    getRevision(id: string, revision: string): ChatPreviewRevision;
+    revise(id: string, rawInput: ChatPreviewReviseInput): {
+        preview: ChatPreviewRecord;
+        revision: ChatPreviewRevision;
+    };
+    getFixGuidance(id: string, sourceHashValue: string, diagnostics: ChatPreviewDiagnostic[], locale: 'en' | 'zh'): ChatPreviewFixGuidance;
+    promote(id: string, sourceHashValue: string): LocalAppDetail;
+}

package/dist/src/chat-previews/service.js

@@ -0,0 +1,106 @@
+import { ChatPreviewCreateInputSchema, ChatPreviewReviseInputSchema } from "../../packages/gateway-contract/src/chat-previews.js";
+import { init_src } from "../../packages/gateway-contract/src/index.js";
+import { ChatPreviewStore } from "./store.js";
+import { createHash } from "node:crypto";
+//#region src/chat-previews/service.ts
+init_src();
+var ChatPreviewNotFoundError = class extends Error {};
+var ChatPreviewRevisionConflictError = class extends Error {};
+function sourceHash(source) {
+	const hash = createHash("sha256");
+	for (const value of [
+		source.markup,
+		source.styles,
+		source.script
+	]) {
+		hash.update(String(Buffer.byteLength(value)));
+		hash.update(":");
+		hash.update(value);
+	}
+	return hash.digest("hex");
+}
+var ChatPreviewService = class {
+	store;
+	localApps;
+	constructor(options = {}) {
+		this.store = options.store ?? new ChatPreviewStore();
+		this.localApps = options.localApps;
+	}
+	create(conversationId, rawInput) {
+		const input = ChatPreviewCreateInputSchema.parse(rawInput);
+		const source = {
+			markup: input.markup,
+			styles: input.styles,
+			script: input.script
+		};
+		return this.store.create({
+			conversationId,
+			title: input.title,
+			preferredHeight: input.preferredHeight,
+			sourceHash: sourceHash(source),
+			source
+		});
+	}
+	get(id) {
+		const preview = this.store.get(id);
+		if (!preview) throw new ChatPreviewNotFoundError("Chat preview not found");
+		return preview;
+	}
+	getRevision(id, revision) {
+		const result = this.store.getRevision(id, revision);
+		if (!result) throw new ChatPreviewNotFoundError("Chat preview revision not found");
+		return result;
+	}
+	revise(id, rawInput) {
+		this.get(id);
+		const input = ChatPreviewReviseInputSchema.parse(rawInput);
+		const source = {
+			markup: input.markup,
+			styles: input.styles,
+			script: input.script
+		};
+		const result = this.store.revise({
+			id,
+			expectedRevision: input.baseRevision,
+			sourceHash: sourceHash(source),
+			source,
+			title: input.title,
+			preferredHeight: input.preferredHeight
+		});
+		if (!result) throw new ChatPreviewRevisionConflictError("Chat preview changed; revise the latest revision");
+		return result;
+	}
+	getFixGuidance(id, sourceHashValue, diagnostics, locale) {
+		const preview = this.get(id);
+		this.getRevision(id, sourceHashValue);
+		const issues = JSON.stringify(diagnostics, null, 2);
+		return {
+			previewId: id,
+			sourceHash: sourceHashValue,
+			prompt: locale === "zh" ? `请修复对话预览“${preview.title}”的运行错误。先读取 previewId=${id}、sourceHash=${sourceHashValue} 的不可变版本，分析以下诊断，然后用 xopc_use 的 chat_preview/revise 提交完整 markup、styles、script，并将 baseRevision 设为 ${sourceHashValue}。不要创建 Local App。\n\n诊断：\n${issues}` : `Fix the runtime errors in chat preview "${preview.title}". Read immutable previewId=${id}, sourceHash=${sourceHashValue}, analyze the diagnostics below, then use xopc_use chat_preview/revise with complete markup, styles, and script and baseRevision=${sourceHashValue}. Do not create a Local App.\n\nDiagnostics:\n${issues}`
+		};
+	}
+	promote(id, sourceHashValue) {
+		if (!this.localApps) throw new Error("Local app service is unavailable");
+		const preview = this.get(id);
+		const revision = this.getRevision(id, sourceHashValue);
+		const promotedAppId = this.store.getPromotedAppId(id, sourceHashValue);
+		if (promotedAppId) {
+			const existing = this.localApps.get(promotedAppId);
+			if (!existing) throw new Error("Promoted Local App is unavailable");
+			return existing;
+		}
+		const app = this.localApps.createFromPreview({
+			name: preview.title,
+			idea: `Promoted from chat preview ${preview.id} at revision ${revision.sourceHash}`,
+			description: "Created from an immutable chat preview.",
+			markup: revision.markup,
+			styles: revision.styles,
+			script: revision.script
+		});
+		this.store.setPromotedAppId(id, sourceHashValue, app.id);
+		return app;
+	}
+};
+//#endregion
+export { ChatPreviewNotFoundError, ChatPreviewRevisionConflictError, ChatPreviewService };

package/dist/src/chat-previews/store.d.ts

@@ -0,0 +1,28 @@
+import type { ChatPreviewRecord, ChatPreviewRevision, ChatPreviewSource } from '@xopcai/gateway-contract';
+export declare class ChatPreviewStore {
+    create(input: {
+        conversationId: string;
+        title: string;
+        preferredHeight: number;
+        sourceHash: string;
+        source: ChatPreviewSource;
+    }): {
+        preview: ChatPreviewRecord;
+        revision: ChatPreviewRevision;
+    };
+    get(id: string): ChatPreviewRecord | null;
+    getRevision(id: string, sourceHash: string): ChatPreviewRevision | null;
+    getPromotedAppId(id: string, sourceHash: string): string | null;
+    setPromotedAppId(id: string, sourceHash: string, appId: string): void;
+    revise(input: {
+        id: string;
+        expectedRevision: string;
+        sourceHash: string;
+        source: ChatPreviewSource;
+        title?: string;
+        preferredHeight?: number;
+    }): {
+        preview: ChatPreviewRecord;
+        revision: ChatPreviewRevision;
+    } | null;
+}

package/dist/src/chat-previews/store.js

@@ -0,0 +1,77 @@
+import { getSqliteDatabase, runSqliteWriteTransaction } from "../storage/sqlite/transaction.js";
+import "../storage/sqlite/index.js";
+import { randomUUID } from "node:crypto";
+//#region src/chat-previews/store.ts
+function previewFromRow(row) {
+	return {
+		id: row.preview_id,
+		conversationId: row.conversation_id,
+		title: row.title,
+		preferredHeight: row.preferred_height,
+		latestRevision: row.latest_revision,
+		createdAt: row.created_at,
+		updatedAt: row.updated_at
+	};
+}
+function revisionFromRow(row) {
+	return {
+		previewId: row.preview_id,
+		sourceHash: row.source_hash,
+		markup: row.markup,
+		styles: row.styles,
+		script: row.script,
+		createdAt: row.created_at
+	};
+}
+var ChatPreviewStore = class {
+	create(input) {
+		const id = randomUUID();
+		const now = Date.now();
+		runSqliteWriteTransaction((db) => {
+			db.prepare(`INSERT INTO chat_previews (
+        preview_id, conversation_id, title, preferred_height, latest_revision, created_at, updated_at
+      ) VALUES (?, ?, ?, ?, ?, ?, ?)`).run(id, input.conversationId, input.title, input.preferredHeight, input.sourceHash, now, now);
+			db.prepare(`INSERT INTO chat_preview_revisions (
+        preview_id, source_hash, markup, styles, script, created_at
+      ) VALUES (?, ?, ?, ?, ?, ?)`).run(id, input.sourceHash, input.source.markup, input.source.styles, input.source.script, now);
+		});
+		return {
+			preview: this.get(id),
+			revision: this.getRevision(id, input.sourceHash)
+		};
+	}
+	get(id) {
+		const row = getSqliteDatabase().prepare("SELECT * FROM chat_previews WHERE preview_id = ?").get(id);
+		return row ? previewFromRow(row) : null;
+	}
+	getRevision(id, sourceHash) {
+		const row = getSqliteDatabase().prepare("SELECT * FROM chat_preview_revisions WHERE preview_id = ? AND source_hash = ?").get(id, sourceHash);
+		return row ? revisionFromRow(row) : null;
+	}
+	getPromotedAppId(id, sourceHash) {
+		return getSqliteDatabase().prepare("SELECT promoted_app_id FROM chat_preview_revisions WHERE preview_id = ? AND source_hash = ?").get(id, sourceHash)?.promoted_app_id ?? null;
+	}
+	setPromotedAppId(id, sourceHash, appId) {
+		if (getSqliteDatabase().prepare(`UPDATE chat_preview_revisions SET promoted_app_id = ?
+       WHERE preview_id = ? AND source_hash = ? AND promoted_app_id IS NULL`).run(appId, id, sourceHash).changes !== 1) throw new Error("Chat preview revision was already promoted or no longer exists");
+	}
+	revise(input) {
+		const now = Date.now();
+		return runSqliteWriteTransaction((db) => {
+			const current = db.prepare("SELECT * FROM chat_previews WHERE preview_id = ?").get(input.id);
+			if (!current || current.latest_revision !== input.expectedRevision) return null;
+			db.prepare(`INSERT OR IGNORE INTO chat_preview_revisions (
+        preview_id, source_hash, markup, styles, script, created_at
+      ) VALUES (?, ?, ?, ?, ?, ?)`).run(input.id, input.sourceHash, input.source.markup, input.source.styles, input.source.script, now);
+			db.prepare(`UPDATE chat_previews SET
+        title = ?, preferred_height = ?, latest_revision = ?, updated_at = ?
+        WHERE preview_id = ?`).run(input.title ?? current.title, input.preferredHeight ?? current.preferred_height, input.sourceHash, now, input.id);
+			return {
+				preview: this.get(input.id),
+				revision: this.getRevision(input.id, input.sourceHash)
+			};
+		});
+	}
+};
+//#endregion
+export { ChatPreviewStore };

package/dist/src/cli/commands/agent.js

@@ -2,8 +2,8 @@ import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
 import { getAgentDefaultModelRef, init_schema } from "../../config/schema.js";
 import { init_agent_scope, resolveDefaultAgentId } from "../../agent/agent-scope.js";
-import { loadConfig } from "../../config/loader.js";
 import { init_agent_session_key, resolveAgentMainConversationId } from "../../routing/agent-session-key.js";
+import { loadConfig } from "../../config/loader.js";
 import { ExtensionLoader } from "../../extensions/loader.js";
 import "../../extensions/index.js";
 import { MessageBus, MessageBusShutdownError } from "../../infra/bus/queue.js";

package/dist/src/cli/commands/doctor/checks/database-schema.js

@@ -53,7 +53,7 @@ async function checkDatabaseSchema(ctx) {
 		id: "database-schema",
 		label: "Database schema",
 		status: "pass",
-		message: `SQLite schema v${status.dbVersion} (current release v201).`,
+		message: `SQLite schema v${status.dbVersion} (current release v202).`,
 		hints: []
 	};
 }

package/dist/src/cli/commands/doctor/checks/provider-auth.js

@@ -1,9 +1,9 @@
 import { getAgentDefaultModelRef, init_schema, parseModelRef } from "../../../../config/schema.js";
-import { PROVIDER_ENV_MAP, init_env_keys } from "../../../../providers/env-keys.js";
+import { getDefaultAgentId, init_resolve_route } from "../../../../routing/resolve-route.js";
+import { init_loader, loadConfig } from "../../../../config/loader.js";
 import { getModelOAuthProviderIds, init_registry } from "../../../../auth/oauth/registry.js";
+import { PROVIDER_ENV_MAP, init_env_keys } from "../../../../providers/env-keys.js";
 import { CredentialResolver, init_credentials } from "../../../../auth/credentials.js";
-import { init_loader, loadConfig } from "../../../../config/loader.js";
-import { getDefaultAgentId, init_resolve_route } from "../../../../routing/resolve-route.js";
 import { existsSync } from "node:fs";
 //#region src/cli/commands/doctor/checks/provider-auth.ts
 init_credentials();

package/dist/src/cli/commands/extension-agent-plugin.d.ts

@@ -0,0 +1,8 @@
+import { Command } from 'commander';
+export declare function isAgentPluginSource(source: string): boolean;
+export declare function installAgentPluginFromCli(source: string, options: {
+    yes?: boolean;
+    force?: boolean;
+    expectedId?: string;
+}): Promise<import("../../extensions/agent-plugins/store.js").InstalledAgentPlugin>;
+export declare function addAgentPluginLifecycleCommands(command: Command): void;

package/dist/src/cli/commands/extension-agent-plugin.js

@@ -0,0 +1,82 @@
+import { init_loader, loadConfig } from "../../config/loader.js";
+import { pluginServerId } from "../../extensions/agent-plugins/validation.js";
+import { AgentPluginStore } from "../../extensions/agent-plugins/store.js";
+import { removePluginCredentials, savePluginAuthBinding } from "../../extensions/agent-plugins/auth.js";
+import { materializePluginServers } from "../../extensions/agent-plugins/mcp-adapter.js";
+import { getContextWithOpts } from "../context.js";
+import { getMcpOAuthManager } from "../../agent/mcp/oauth/mcp-oauth-manager.js";
+import { isAgentPluginArchive, withAgentPluginSource } from "../../extensions/agent-plugins/sources.js";
+import { join, resolve } from "node:path";
+import { existsSync, readFileSync, statSync } from "node:fs";
+import { confirm } from "@inquirer/prompts";
+//#region src/cli/commands/extension-agent-plugin.ts
+init_loader();
+function isAgentPluginSource(source) {
+	if (source.startsWith("https://")) return true;
+	const path = resolve(source);
+	if (existsSync(join(path, "package.json"))) {
+		if (JSON.parse(readFileSync(join(path, "package.json"), "utf8"))?.xopc?.extension) return false;
+	}
+	return existsSync(path) && (statSync(path).isFile() && /\.zip$/i.test(path) && statSync(path).size <= 50 * 1024 * 1024 && isAgentPluginArchive(readFileSync(path)) || existsSync(join(path, "plugin.json")) && !existsSync(join(path, "xopc.extension.json")));
+}
+async function installAgentPluginFromCli(source, options) {
+	const store = new AgentPluginStore();
+	const cfg = loadConfig(getContextWithOpts().configPath);
+	const plan = await withAgentPluginSource(source, cfg, (local) => store.inspect(local));
+	console.log(JSON.stringify({
+		format: "agent-plugin",
+		name: plan.manifest.name,
+		version: plan.manifest.version,
+		capabilities: plan.capabilities,
+		addedCapabilities: plan.addedCapabilities,
+		diagnostics: plan.diagnostics
+	}, null, 2));
+	if (!options.yes && (!plan.installed || plan.addedCapabilities.length)) {
+		if (!process.stdin.isTTY) throw new Error("Capability review requires --yes in non-interactive mode");
+		if (!await confirm({
+			message: "Install this Agent Plugin with these capabilities?",
+			default: false
+		})) return;
+	}
+	const plugin = await withAgentPluginSource(source, cfg, (local) => store.install(local, {
+		reviewHash: plan.reviewHash,
+		replace: options.force,
+		expectedId: options.expectedId,
+		sourceLabel: source.startsWith("https://") || source.startsWith("store:") ? source : resolve(source)
+	}));
+	console.log(`Installed plugin:${plugin.id} (${plugin.receipt.enabled ? "enabled" : "disabled"}).`);
+	return plugin;
+}
+function addAgentPluginLifecycleCommands(command) {
+	command.command("rollback").argument("<id>", "plugin:<name>").action((raw) => {
+		console.log(JSON.stringify(new AgentPluginStore().rollback(raw.replace(/^plugin:/, "")), null, 2));
+	});
+	for (const action of ["enable", "disable"]) command.command(action).argument("<id>", "plugin:<name>").action((raw) => {
+		const plugin = new AgentPluginStore().setEnabled(raw.replace(/^plugin:/, ""), action === "enable");
+		console.log(`${plugin.id}: ${action}d`);
+	});
+	command.command("remove").argument("<id>", "plugin:<name>").option("--remove-data", "Also remove persistent plugin data").option("--remove-credentials", "Also delete local credentials").action(async (raw, options) => {
+		const store = new AgentPluginStore();
+		const id = raw.replace(/^plugin:/, "");
+		if (options.removeCredentials) await removePluginCredentials(store, id);
+		store.remove(id, options.removeData);
+		console.log(`Removed ${raw}; credentials ${options.removeCredentials ? "deleted" : "retained"}${options.removeData ? ", plugin data deleted" : ", plugin data retained"}.`);
+	});
+	command.command("connect").argument("<id>", "plugin:<name>").requiredOption("--mcp <server>", "MCP server name").action(async (raw, options) => {
+		const store = new AgentPluginStore();
+		const id = raw.replace(/^plugin:/, "");
+		const plugin = store.get(id);
+		if (!plugin || plugin.readiness === "blocked") throw new Error("Plugin is unavailable");
+		await savePluginAuthBinding(store, id, options.mcp, { mode: "oauth" });
+		const serverId = pluginServerId(id, options.mcp);
+		const server = materializePluginServers(plugin, store)[serverId];
+		if (!server) throw new Error("MCP server not found");
+		const status = await getMcpOAuthManager(server).start({
+			serverId,
+			rawServer: server
+		});
+		console.log(JSON.stringify(status, null, 2));
+	});
+}
+//#endregion
+export { addAgentPluginLifecycleCommands, installAgentPluginFromCli, isAgentPluginSource };

package/dist/src/cli/commands/extension-marketplace.js

@@ -1,12 +1,15 @@
 import { init_paths, resolveExtensionsDir } from "../../config/paths.js";
 import { init_loader, loadConfig } from "../../config/loader.js";
+import { computeExtensionDirectoryIntegrity, getExtensionLockfileManager } from "../../extensions/lockfile.js";
+import { AgentPluginStore } from "../../extensions/agent-plugins/store.js";
 import { downloadExtensionStoreZipBuffer, resolveExtensionZipDownloadUrl, resolveExtensionsStoreBaseUrl, verifyStoreArtifactSha256 } from "../../agent/skills/marketplace/adapters/store/store-api-client.js";
 import { getContextWithOpts } from "../context.js";
-import { computeExtensionDirectoryIntegrity, getExtensionLockfileManager } from "../../extensions/lockfile.js";
 import { peekExtensionManifestFromStoreZip } from "../../extensions/install.js";
 import { commitStagedExtensionInstall, finalizeStagedExtensionInstall, rollbackStagedExtensionInstall, stageExtensionLocal, stageExtensionNpm, stageExtensionStoreZip } from "../../extensions/install-transaction.js";
 import { fetchRegistry, findExtension, getExtensionMarketplaceStoreBaseUrl, listExtensions, searchExtensions } from "../../extensions/marketplace.js";
+import { isAgentPluginArchive } from "../../extensions/agent-plugins/sources.js";
 import { colors } from "../utils/colors.js";
+import { installAgentPluginFromCli, isAgentPluginSource } from "./extension-agent-plugin.js";
 import { validateExtensionPackageDirectory } from "./extension-pack.js";
 import { join, resolve } from "node:path";
 import { existsSync, readFileSync, statSync } from "node:fs";
@@ -135,6 +138,22 @@ async function installExtensionFromStoreWithLock(params) {
 		console.log(colors.cyan("📦"), `Downloading ${params.packageName}@${version} from xopc-store (${params.storeBase})…`);
 		const buf = await downloadExtensionStoreZipBuffer(params.storeBase, downloadUrl);
 		verifyStoreArtifactSha256(buf, sha256);
+		if (isAgentPluginArchive(buf)) {
+			const installed = await installAgentPluginFromCli(`store:${params.packageName}${params.version ? `@${params.version}` : ""}`, {
+				yes: params.yes,
+				force: params.force,
+				expectedId: params.expectedExtensionId
+			});
+			if (!installed) return {
+				ok: false,
+				error: "Install cancelled"
+			};
+			return {
+				ok: true,
+				extensionId: `plugin:${installed.id}`,
+				version: installed.manifest.version ?? version
+			};
+		}
 		const actualIntegrity = sha256Integrity(buf);
 		const manifest = peekExtensionManifestFromStoreZip(buf);
 		if (!await confirmInstall({
@@ -206,7 +225,11 @@ async function installExtensionFromStoreWithLock(params) {
 	}
 }
 function createExtensionInstallCommand() {
-	return new Command("install").description("Install extension from xopc-store (store.xopc.ai), npm, or a local directory into ~/.xopc/extensions").argument("<target>", "Explicit source spec: store:<id>, npm:<package>, or a local extension directory").option("-f, --force", "Replace an existing store or local extension with the same manifest id", false).option("-y, --yes", "Skip interactive install confirmation", false).action(async (target, opts) => {
+	return new Command("install").description("Install a native extension or portable Agent Plugin from an explicit source").argument("<target>", "store:<id>, npm:<package>, local directory, or Agent Plugin ZIP / HTTPS ZIP URL").option("-f, --force", "Replace an existing store or local extension with the same manifest id", false).option("-y, --yes", "Skip interactive install confirmation", false).action(async (target, opts) => {
+		if (isAgentPluginSource(target)) {
+			await installAgentPluginFromCli(target, opts);
+			return;
+		}
 		const cfg = loadConfig(getContextWithOpts().configPath);
 		const targetDir = resolveExtensionsDir();
 		const lock = getExtensionLockfileManager();
@@ -354,14 +377,31 @@ function createExtensionPublishCommand() {
 	});
 }
 function createExtensionUpdateCommand() {
-	return new Command("update").description("Re-install extension(s) from the lockfile (npm or xopc-store) under ~/.xopc/extensions").argument("[extensionId]", "Specific extension id (default: all in lockfile)").action(async (extensionId) => {
+	return new Command("update").description("Update installed extensions and Agent Plugins from their recorded sources").argument("[extensionId]", "Specific extension or plugin:<name> (default: all installed)").option("-y, --yes", "Accept changed plugin capabilities").action(async (extensionId, options) => {
+		if (extensionId?.startsWith("plugin:")) {
+			const id = extensionId.slice(7);
+			const receipt = new AgentPluginStore().receipt(id);
+			if (!receipt) throw new Error("Plugin not installed");
+			await installAgentPluginFromCli(receipt.source, {
+				yes: options.yes,
+				force: true,
+				expectedId: id
+			});
+			return;
+		}
 		const cfg = loadConfig(getContextWithOpts().configPath);
 		const targetDir = resolveExtensionsDir();
 		const storeBase = resolveExtensionsStoreBaseUrl(cfg);
 		const lock = getExtensionLockfileManager();
 		const data = await lock.load();
 		const ids = extensionId?.trim() ? [extensionId.trim()] : Object.keys(data.extensions);
-		if (ids.length === 0) {
+		const plugins = extensionId ? [] : new AgentPluginStore().list();
+		for (const plugin of plugins) await installAgentPluginFromCli(plugin.receipt.source, {
+			yes: options.yes,
+			force: true,
+			expectedId: plugin.id
+		});
+		if (ids.length === 0 && plugins.length === 0) {
 			console.log("No extensions in lockfile.");
 			return;
 		}

package/dist/src/cli/commands/extension.js

@@ -3,13 +3,16 @@ import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
 import { init_paths, resolveExtensionsDir } from "../../config/paths.js";
 import { init_loader, loadConfig, saveConfig } from "../../config/loader.js";
+import { computeExtensionDirectoryIntegrity, getExtensionLockfileManager } from "../../extensions/lockfile.js";
+import { AgentPluginStore } from "../../extensions/agent-plugins/store.js";
 import { checkEngineCompatibility } from "../../extensions/engine-check.js";
 import { ExtensionLoader } from "../../extensions/loader.js";
 import { getContextWithOpts } from "../context.js";
-import { computeExtensionDirectoryIntegrity, getExtensionLockfileManager } from "../../extensions/lockfile.js";
 import { checkAllExtensionsHealth, getExtensionHealthChecker } from "../../extensions/health.js";
 import { collectExtensionPackageDependencyIssues } from "../../extensions/package-contract.js";
+import { withAgentPluginSource } from "../../extensions/agent-plugins/sources.js";
 import { colors } from "../utils/colors.js";
+import { addAgentPluginLifecycleCommands, isAgentPluginSource } from "./extension-agent-plugin.js";
 import { createExtensionCreateCommand } from "./extension-create.js";
 import { createExtensionDevCommand } from "./extension-dev.js";
 import { createExtensionPackCommand } from "./extension-pack.js";
@@ -26,7 +29,19 @@ const log = createLogger("ExtensionCommands");
 function createExtensionListCommand() {
 	return new Command("list").description("List installed extensions").option("--json", "Output as JSON").action(async (options) => {
 		try {
-			const extensions = await getExtensionLockfileManager().list();
+			const extensions = [...(await getExtensionLockfileManager().list()).map((ext) => ({
+				...ext,
+				format: "native-extension"
+			})), ...new AgentPluginStore().list().map((p) => ({
+				name: `plugin:${p.id}`,
+				version: p.manifest.version ?? "",
+				format: p.format,
+				source: "local",
+				resolved: p.receipt.source,
+				installedAt: p.receipt.installedAt,
+				readiness: p.readiness,
+				enabled: p.receipt.enabled
+			}))];
 			if (options.json) {
 				console.log(JSON.stringify(extensions, null, 2));
 				return;
@@ -62,6 +77,13 @@ function readJson(path) {
 function createExtensionInspectCommand() {
 	return new Command("inspect").description("Inspect an installed extension manifest and package contract").argument("<extension>", "Extension id").option("--json", "Output as JSON").option("--runtime", "Load the extension and include runtime registrations").action(async (extensionId, options) => {
 		try {
+			if (extensionId.startsWith("plugin:") || extensionId.startsWith("store:") || isAgentPluginSource(extensionId)) {
+				const store = new AgentPluginStore();
+				const result = extensionId.startsWith("plugin:") ? store.get(extensionId.slice(7)) : await withAgentPluginSource(extensionId, loadConfig(getContextWithOpts().configPath), (source) => store.inspect(source));
+				if (!result) throw new Error("Plugin not installed");
+				console.log(JSON.stringify(result, null, 2));
+				return;
+			}
 			const lockEntry = await getExtensionLockfileManager().get(extensionId);
 			const extensionDir = join(resolveExtensionsDir(), extensionId);
 			const manifest = readJson(join(extensionDir, "xopc.extension.json")) ?? lockEntry?.manifest;
@@ -188,7 +210,11 @@ function createExtensionVerifyCommand() {
 	return new Command("verify").description("Verify extension integrity").argument("[extension]", "Specific extension to verify (default: all)").action(async (extensionId) => {
 		try {
 			const lockfileManager = getExtensionLockfileManager();
-			if (extensionId) {
+			if (extensionId?.startsWith("plugin:")) {
+				const plugin = new AgentPluginStore().get(extensionId.slice(7));
+				if (!plugin || plugin.readiness === "blocked") throw new Error("Plugin integrity verification failed");
+				console.log(`Verified ${extensionId}`);
+			} else if (extensionId) {
 				const result = await lockfileManager.verify(extensionId);
 				if (result.valid) console.log(colors.green("✓"), `Extension "${extensionId}" is valid`);
 				else {
@@ -198,6 +224,11 @@ function createExtensionVerifyCommand() {
 			} else {
 				const results = await lockfileManager.verifyAll();
 				let hasErrors = false;
+				for (const plugin of new AgentPluginStore().list()) {
+					const valid = plugin.readiness !== "blocked";
+					console.log(valid ? colors.green("✓") : colors.red("✗"), `plugin:${plugin.id}`);
+					if (!valid) hasErrors = true;
+				}
 				for (const result of results) if (result.valid) console.log(colors.green("✓"), result.extensionId);
 				else {
 					console.log(colors.red("✗"), `${result.extensionId}: ${result.reason}`);
@@ -474,6 +505,7 @@ function createExtensionAuditCommand() {
 function registerExtensionCommands(program) {
 	const extensions = new Command("extensions").description("Manage extensions").addCommand(createExtensionListCommand()).addCommand(createExtensionInspectCommand()).addCommand(createExtensionFreezeCommand()).addCommand(createExtensionHealthCommand()).addCommand(createExtensionVerifyCommand()).addCommand(createExtensionDoctorCommand()).addCommand(createExtensionAuditCommand()).addCommand(createExtensionPackCommand()).addCommand(createExtensionCreateCommand()).addCommand(createExtensionDevCommand()).addCommand(createExtensionInstallCommand()).addCommand(createExtensionSearchCommand()).addCommand(createExtensionPublishCommand()).addCommand(createExtensionUpdateCommand());
 	program.addCommand(extensions);
+	addAgentPluginLifecycleCommands(extensions);
 }
 //#endregion
 export { createExtensionAuditCommand, createExtensionDoctorCommand, createExtensionFreezeCommand, createExtensionHealthCommand, createExtensionInspectCommand, createExtensionListCommand, createExtensionVerifyCommand, registerExtensionCommands };

package/dist/src/cli/commands/models.js

@@ -1,6 +1,6 @@
 import { getAgentDefaultModelRef, init_schema } from "../../config/schema.js";
-import { CredentialResolver, init_credentials } from "../../auth/credentials.js";
 import { loadConfig, saveConfig } from "../../config/loader.js";
+import { CredentialResolver, init_credentials } from "../../auth/credentials.js";
 import { getAllModels, getAvailableModels, getConfiguredProviders, getProviderAuthState, getProviderDisplayName, init_providers, isProviderConfigured, providerSupportsApiKey, providerSupportsOAuth, resolveModel } from "../../providers/index.js";
 import { formatExamples, register } from "../registry.js";
 import { getContextWithOpts } from "../context.js";

package/dist/src/computer/runtime.js

@@ -1,9 +1,9 @@
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
+import { resolveEffectiveAgentConfigForSession } from "../config/agent-profile.js";
 import { COMPUTER_CONTROL_TOOL, ComputerAppSchema, ComputerObservationSchema, ComputerWindowSchema, init_src } from "../../packages/computer-control-contract/src/index.js";
 import { ComputerServiceLimitsSchema, computerModelProfile, init_model_policy } from "./model-policy.js";
 import { getApiKey, init_providers, resolveModel } from "../providers/index.js";
-import { resolveEffectiveAgentConfigForSession } from "../config/agent-profile.js";
 import { enterComputerControl, leaveComputerControl } from "./control-guard.js";
 import { ComputerDiagnosticSchema, ComputerOperationError, computerDiagnostic, computerRecovery } from "./errors.js";
 import { createComputerModelAdapter, predictComputerStep, readComputerJson } from "./model-adapter.js";