@xopcai/xopc 0.0.321 → 0.0.324

package/dist/src/cli/commands/config.js

@@ -74,9 +74,8 @@ function setNestedValue(obj, path, value) {
 }
 function createConfigCommand(ctx) {
 	const cmd = new Command("config").description("View and edit configuration").option("--show", "Show full configuration (alias for `config show`)").option("--validate", "Validate configuration file (alias for `config validate`)").addHelpText("after", formatExamples([
-		"xopc config get agents.list",
-		"xopc config get agents.defaults",
-		"xopc config set agents.default main",
+		"xopc config get gateway.port",
+		"xopc config set commands.restart false",
 		"xopc config show",
 		"xopc config validate",
 		"xopc config token              # Show gateway token info",
@@ -204,8 +203,8 @@ register({
 	metadata: {
 		category: "utility",
 		examples: [
-			"xopc config get agents.list",
-			"xopc config set agents.default main",
+			"xopc config get gateway.port",
+			"xopc config set commands.restart false",
 			"xopc config show",
 			"xopc config validate",
 			"xopc config token",

package/dist/src/cli/commands/connectors.js

@@ -1,10 +1,9 @@
-import { init_loader, loadConfig, saveConfig } from "../../config/loader.js";
+import { loadConfig, saveConfig } from "../../config/loader.js";
 import { getStoreConnectorInstallPlan, installStoreConnector, listStoreConnectors } from "../../capabilities/store-connector.js";
 import { register } from "../registry.js";
 import { confirm } from "@inquirer/prompts";
 import { Command } from "commander";
 //#region src/cli/commands/connectors.ts
-init_loader();
 function parsePairs(values, option) {
 	const output = {};
 	for (const value of values ?? []) {

package/dist/src/cli/commands/doctor/checks/channel-config.js

@@ -1,9 +1,7 @@
-import { buildChannelCatalogForConfig, getChannelSetupStatus, init_channel_catalog_service } from "../../../../channels/catalog/channel-catalog-service.js";
-import { init_loader, loadConfig } from "../../../../config/loader.js";
+import { buildChannelCatalogForConfig, getChannelSetupStatus } from "../../../../channels/catalog/channel-catalog-service.js";
+import { loadConfig } from "../../../../config/loader.js";
 import { existsSync } from "node:fs";
 //#region src/cli/commands/doctor/checks/channel-config.ts
-init_channel_catalog_service();
-init_loader();
 function isEnabledChannelConfig(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value) && value.enabled === true;
 }

package/dist/src/cli/commands/doctor/checks/channel-pairing-pending.js

@@ -1,8 +1,7 @@
-import { init_loader, loadConfig } from "../../../../config/loader.js";
+import { loadConfig } from "../../../../config/loader.js";
 import { collectPairingPendingIssues } from "../../../../channels/pairing/pairing-service.js";
 import { existsSync } from "node:fs";
 //#region src/cli/commands/doctor/checks/channel-pairing-pending.ts
-init_loader();
 function hasEnabledChannel(cfg) {
 	return Object.values(cfg.channels ?? {}).some((value) => {
 		return typeof value === "object" && value !== null && !Array.isArray(value) && value.enabled === true;

package/dist/src/cli/commands/doctor/checks/channel-plugins.js

@@ -1,8 +1,7 @@
-import { init_loader, loadConfig } from "../../../../config/loader.js";
 import { listChannelPlugins } from "../../../../channels/plugins/registry.js";
+import { loadConfig } from "../../../../config/loader.js";
 import { existsSync } from "node:fs";
 //#region src/cli/commands/doctor/checks/channel-plugins.ts
-init_loader();
 function toCheckResults(plugin, raw) {
 	const pid = String(plugin.id);
 	return raw.map((r) => ({

package/dist/src/cli/commands/doctor/checks/config-health.js

@@ -1,9 +1,8 @@
 import { ConfigSchema, init_schema } from "../../../../config/schema.js";
-import { init_loader, loadConfig, saveConfig } from "../../../../config/loader.js";
+import { loadConfig, saveConfig } from "../../../../config/loader.js";
 import { dirname } from "node:path";
 import { existsSync, mkdirSync, readFileSync } from "node:fs";
 //#region src/cli/commands/doctor/checks/config-health.ts
-init_loader();
 init_schema();
 async function checkConfigHealth(ctx) {
 	const path = ctx.configPath;

package/dist/src/cli/commands/doctor/checks/database-schema.js

@@ -1,12 +1,12 @@
 import { init_runner, inspectSchemaMigrationStatus } from "../../../../storage/sqlite/migrations/runner.js";
 import { requireXopcDatabase } from "../../../../storage/sqlite/connection.js";
 import { getSqliteDatabase } from "../../../../storage/sqlite/transaction.js";
-import "../../../../storage/sqlite/index.js";
-import { init_loader, loadConfig } from "../../../../config/loader.js";
+import { init_sqlite } from "../../../../storage/sqlite/index.js";
+import { loadConfig } from "../../../../config/loader.js";
 import { existsSync } from "node:fs";
 //#region src/cli/commands/doctor/checks/database-schema.ts
-init_loader();
 init_runner();
+init_sqlite();
 async function checkDatabaseSchema(ctx) {
 	if (!existsSync(ctx.configPath)) return {
 		id: "database-schema",
@@ -53,7 +53,7 @@ async function checkDatabaseSchema(ctx) {
 		id: "database-schema",
 		label: "Database schema",
 		status: "pass",
-		message: `SQLite schema v${status.dbVersion} (current release v201).`,
+		message: `SQLite schema v${status.dbVersion} (current release v206).`,
 		hints: []
 	};
 }

package/dist/src/cli/commands/doctor/checks/gateway-health.js

@@ -1,8 +1,7 @@
-import { init_loader, loadConfig } from "../../../../config/loader.js";
 import { resolveGatewayLocalClientHost } from "../../../../config/gateway-bind.js";
+import { loadConfig } from "../../../../config/loader.js";
 import { existsSync } from "node:fs";
 //#region src/cli/commands/doctor/checks/gateway-health.ts
-init_loader();
 function resolveGatewayBaseUrl(cfg) {
 	return `http://${resolveGatewayLocalClientHost(cfg)}:${cfg.gateway?.port ?? 18790}`;
 }

package/dist/src/cli/commands/doctor/checks/gateway-service.js

@@ -1,8 +1,7 @@
-import { init_loader, loadConfig } from "../../../../config/loader.js";
+import { loadConfig } from "../../../../config/loader.js";
 import { resolveGatewayService } from "../../../../daemon/service.js";
 import { existsSync } from "node:fs";
 //#region src/cli/commands/doctor/checks/gateway-service.ts
-init_loader();
 async function checkGatewayService(ctx) {
 	if (!existsSync(ctx.configPath)) return {
 		id: "gateway-service",

package/dist/src/cli/commands/doctor/checks/provider-auth.js

@@ -1,33 +1,35 @@
+import { AgentCatalogRepository, init_repository } from "../../../../agent-catalog/repository.js";
 import { getAgentDefaultModelRef, init_schema, parseModelRef } from "../../../../config/schema.js";
 import { getDefaultAgentId, init_resolve_route } from "../../../../routing/resolve-route.js";
-import { init_loader, loadConfig } from "../../../../config/loader.js";
 import { getModelOAuthProviderIds, init_registry } from "../../../../auth/oauth/registry.js";
 import { PROVIDER_ENV_MAP, init_env_keys } from "../../../../providers/env-keys.js";
 import { CredentialResolver, init_credentials } from "../../../../auth/credentials.js";
+import { loadConfig } from "../../../../config/loader.js";
 import { existsSync } from "node:fs";
 //#region src/cli/commands/doctor/checks/provider-auth.ts
 init_credentials();
+init_repository();
 init_registry();
 init_resolve_route();
-init_loader();
 init_schema();
 init_env_keys();
-function collectProviderIdsFromConfig(cfg) {
+function collectProviderIdsFromConfig() {
 	const ids = /* @__PURE__ */ new Set();
 	const addRef = (ref) => {
 		if (!ref?.trim()) return;
 		const parsed = parseModelRef(ref.trim());
 		if (parsed) ids.add(parsed.provider.toLowerCase());
 	};
-	addRef(getAgentDefaultModelRef(cfg));
+	addRef(getAgentDefaultModelRef());
 	const addRoutes = (routes) => {
 		for (const route of Object.values(routes ?? {})) addRef(route?.primary);
 	};
-	addRef(cfg.agents.defaults.models.chat.primary);
-	addRoutes(cfg.agents.defaults.models.intents);
-	addRef(cfg.agents.defaults.models.imageUnderstanding?.primary);
-	addRef(cfg.agents.defaults.models.imageGeneration?.primary);
-	const list = cfg.agents?.list;
+	const catalog = new AgentCatalogRepository().snapshot();
+	addRef(catalog.defaults.models.chat.primary);
+	addRoutes(catalog.defaults.models.intents);
+	addRef(catalog.defaults.models.imageUnderstanding?.primary);
+	addRef(catalog.defaults.models.imageGeneration?.primary);
+	const list = catalog.agents;
 	if (Array.isArray(list)) for (const e of list) {
 		addRef(e?.models?.chat?.primary);
 		addRoutes(e?.models?.intents);
@@ -58,12 +60,12 @@ async function checkProviderAuth(ctx) {
 	}
 	const credentials = new CredentialResolver({
 		stateDir: ctx.stateDir,
-		agentId: getDefaultAgentId(cfg),
+		agentId: getDefaultAgentId(),
 		appConfig: cfg
 	});
 	const profiles = await credentials.listProfiles();
 	const checkIds = new Set([
-		...collectProviderIdsFromConfig(cfg),
+		...collectProviderIdsFromConfig(),
 		...Object.keys(PROVIDER_ENV_MAP),
 		...getModelOAuthProviderIds(),
 		...profiles.map((profile) => profile.provider)

package/dist/src/cli/commands/doctor/checks/security-audit.js

@@ -1,8 +1,7 @@
-import { init_loader, loadConfig } from "../../../../config/loader.js";
+import { loadConfig } from "../../../../config/loader.js";
 import { collectGatewaySecurityFindings } from "../../../../gateway/security/audit.js";
 import { existsSync, statSync } from "node:fs";
 //#region src/cli/commands/doctor/checks/security-audit.ts
-init_loader();
 function collectConfigFileHints(configPath) {
 	const hints = [];
 	if (process.platform === "win32") return hints;

package/dist/src/cli/commands/doctor/checks/session-integrity.js

@@ -1,11 +1,11 @@
 import { requireXopcDatabase } from "../../../../storage/sqlite/connection.js";
 import { getSqliteDatabase } from "../../../../storage/sqlite/transaction.js";
 import { getCurrentTranscriptId, listSessionMetadata } from "../../../../storage/sqlite/session-repository.js";
-import "../../../../storage/sqlite/index.js";
-import { init_loader, loadConfig } from "../../../../config/loader.js";
+import { init_sqlite } from "../../../../storage/sqlite/index.js";
+import { loadConfig } from "../../../../config/loader.js";
 import { existsSync } from "node:fs";
 //#region src/cli/commands/doctor/checks/session-integrity.ts
-init_loader();
+init_sqlite();
 async function checkSessionIntegrity(ctx) {
 	if (!ctx.options.deep) return {
 		id: "session-integrity",

package/dist/src/cli/commands/doctor/checks/tool-runtimes.js

@@ -1,7 +1,6 @@
-import { init_loader, loadConfig } from "../../../../config/loader.js";
 import { ManagedRuntimeManager } from "../../../../runtime-tools/manager.js";
+import { loadConfig } from "../../../../config/loader.js";
 //#region src/cli/commands/doctor/checks/tool-runtimes.ts
-init_loader();
 async function checkToolRuntimes(ctx) {
 	const config = loadConfig(ctx.configPath);
 	const statuses = await new ManagedRuntimeManager({

package/dist/src/cli/commands/doctor/checks/workspace-status.js

@@ -1,11 +1,10 @@
 import { init_agent_scope, resolveAgentProfileDir, resolveAgentWorkspaceDir, resolveDefaultAgentId } from "../../../../agent/agent-scope.js";
 import { WORKSPACE_FILES, init_paths } from "../../../../config/paths.js";
-import { init_loader, loadConfig } from "../../../../config/loader.js";
+import { loadConfig } from "../../../../config/loader.js";
 import { join } from "node:path";
 import { existsSync } from "node:fs";
 //#region src/cli/commands/doctor/checks/workspace-status.ts
 init_agent_scope();
-init_loader();
 init_paths();
 async function checkWorkspaceStatus(ctx) {
 	if (!existsSync(ctx.configPath)) return {
@@ -15,9 +14,8 @@ async function checkWorkspaceStatus(ctx) {
 		message: "No config file; skipped.",
 		hints: []
 	};
-	let config;
 	try {
-		config = loadConfig(ctx.configPath);
+		loadConfig(ctx.configPath);
 	} catch {
 		return {
 			id: "workspace-status",
@@ -27,9 +25,9 @@ async function checkWorkspaceStatus(ctx) {
 			hints: []
 		};
 	}
-	const agentId = resolveDefaultAgentId(config);
-	const root = resolveAgentWorkspaceDir(config, agentId);
-	const profileRoot = resolveAgentProfileDir(config, agentId);
+	const agentId = resolveDefaultAgentId();
+	const root = resolveAgentWorkspaceDir(agentId);
+	const profileRoot = resolveAgentProfileDir(agentId);
 	const hints = [];
 	const hasProfileFile = (name) => existsSync(join(profileRoot, name));
 	if (!existsSync(root)) return {

package/dist/src/cli/commands/extension-agent-plugin.d.ts

@@ -0,0 +1,8 @@
+import { Command } from 'commander';
+export declare function isAgentPluginSource(source: string): boolean;
+export declare function installAgentPluginFromCli(source: string, options: {
+    yes?: boolean;
+    force?: boolean;
+    expectedId?: string;
+}): Promise<import("../../extensions/agent-plugins/store.js").InstalledAgentPlugin>;
+export declare function addAgentPluginLifecycleCommands(command: Command): void;

package/dist/src/cli/commands/extension-agent-plugin.js

@@ -0,0 +1,81 @@
+import { pluginServerId } from "../../extensions/agent-plugins/validation.js";
+import { AgentPluginStore } from "../../extensions/agent-plugins/store.js";
+import { removePluginCredentials, savePluginAuthBinding } from "../../extensions/agent-plugins/auth.js";
+import { materializePluginServers } from "../../extensions/agent-plugins/mcp-adapter.js";
+import { loadConfig } from "../../config/loader.js";
+import { getContextWithOpts } from "../context.js";
+import { getMcpOAuthManager } from "../../agent/mcp/oauth/mcp-oauth-manager.js";
+import { isAgentPluginArchive, withAgentPluginSource } from "../../extensions/agent-plugins/sources.js";
+import { join, resolve } from "node:path";
+import { existsSync, readFileSync, statSync } from "node:fs";
+import { confirm } from "@inquirer/prompts";
+//#region src/cli/commands/extension-agent-plugin.ts
+function isAgentPluginSource(source) {
+	if (source.startsWith("https://")) return true;
+	const path = resolve(source);
+	if (existsSync(join(path, "package.json"))) {
+		if (JSON.parse(readFileSync(join(path, "package.json"), "utf8"))?.xopc?.extension) return false;
+	}
+	return existsSync(path) && (statSync(path).isFile() && /\.zip$/i.test(path) && statSync(path).size <= 50 * 1024 * 1024 && isAgentPluginArchive(readFileSync(path)) || existsSync(join(path, "plugin.json")) && !existsSync(join(path, "xopc.extension.json")));
+}
+async function installAgentPluginFromCli(source, options) {
+	const store = new AgentPluginStore();
+	const cfg = loadConfig(getContextWithOpts().configPath);
+	const plan = await withAgentPluginSource(source, cfg, (local) => store.inspect(local));
+	console.log(JSON.stringify({
+		format: "agent-plugin",
+		name: plan.manifest.name,
+		version: plan.manifest.version,
+		capabilities: plan.capabilities,
+		addedCapabilities: plan.addedCapabilities,
+		diagnostics: plan.diagnostics
+	}, null, 2));
+	if (!options.yes && (!plan.installed || plan.addedCapabilities.length)) {
+		if (!process.stdin.isTTY) throw new Error("Capability review requires --yes in non-interactive mode");
+		if (!await confirm({
+			message: "Install this Agent Plugin with these capabilities?",
+			default: false
+		})) return;
+	}
+	const plugin = await withAgentPluginSource(source, cfg, (local) => store.install(local, {
+		reviewHash: plan.reviewHash,
+		replace: options.force,
+		expectedId: options.expectedId,
+		sourceLabel: source.startsWith("https://") || source.startsWith("store:") ? source : resolve(source)
+	}));
+	console.log(`Installed plugin:${plugin.id} (${plugin.receipt.enabled ? "enabled" : "disabled"}).`);
+	return plugin;
+}
+function addAgentPluginLifecycleCommands(command) {
+	command.command("rollback").argument("<id>", "plugin:<name>").action((raw) => {
+		console.log(JSON.stringify(new AgentPluginStore().rollback(raw.replace(/^plugin:/, "")), null, 2));
+	});
+	for (const action of ["enable", "disable"]) command.command(action).argument("<id>", "plugin:<name>").action((raw) => {
+		const plugin = new AgentPluginStore().setEnabled(raw.replace(/^plugin:/, ""), action === "enable");
+		console.log(`${plugin.id}: ${action}d`);
+	});
+	command.command("remove").argument("<id>", "plugin:<name>").option("--remove-data", "Also remove persistent plugin data").option("--remove-credentials", "Also delete local credentials").action(async (raw, options) => {
+		const store = new AgentPluginStore();
+		const id = raw.replace(/^plugin:/, "");
+		if (options.removeCredentials) await removePluginCredentials(store, id);
+		store.remove(id, options.removeData);
+		console.log(`Removed ${raw}; credentials ${options.removeCredentials ? "deleted" : "retained"}${options.removeData ? ", plugin data deleted" : ", plugin data retained"}.`);
+	});
+	command.command("connect").argument("<id>", "plugin:<name>").requiredOption("--mcp <server>", "MCP server name").action(async (raw, options) => {
+		const store = new AgentPluginStore();
+		const id = raw.replace(/^plugin:/, "");
+		const plugin = store.get(id);
+		if (!plugin || plugin.readiness === "blocked") throw new Error("Plugin is unavailable");
+		await savePluginAuthBinding(store, id, options.mcp, { mode: "oauth" });
+		const serverId = pluginServerId(id, options.mcp);
+		const server = materializePluginServers(plugin, store)[serverId];
+		if (!server) throw new Error("MCP server not found");
+		const status = await getMcpOAuthManager(server).start({
+			serverId,
+			rawServer: server
+		});
+		console.log(JSON.stringify(status, null, 2));
+	});
+}
+//#endregion
+export { addAgentPluginLifecycleCommands, installAgentPluginFromCli, isAgentPluginSource };

package/dist/src/cli/commands/extension-dev.js

@@ -2,9 +2,9 @@ import { PACKAGE_VERSION, init_package_version } from "../../package-version.js"
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
 import { init_paths, resolveConfigPath, resolveExtensionsDir } from "../../config/paths.js";
-import { init_normalize_manifest, normalizeExtensionManifest } from "../../extensions/normalize-manifest.js";
-import { init_loader, loadConfig } from "../../config/loader.js";
+import { normalizeExtensionManifest } from "../../extensions/normalize-manifest.js";
 import { checkEngineCompatibility } from "../../extensions/engine-check.js";
+import { loadConfig } from "../../config/loader.js";
 import { getContextWithOpts } from "../context.js";
 import { GatewayServer } from "../../gateway/server.js";
 import { runGatewayLoop } from "../../gateway/run-loop.js";
@@ -15,9 +15,7 @@ import { join, resolve } from "node:path";
 import { existsSync, mkdirSync, readFileSync, symlinkSync, unlinkSync, watch } from "node:fs";
 import { Command } from "commander";
 //#region src/cli/commands/extension-dev.ts
-init_loader();
 init_paths();
-init_normalize_manifest();
 init_package_version();
 init_logger();
 const log = createLogger("ExtensionDev");

package/dist/src/cli/commands/extension-marketplace.js

@@ -1,12 +1,15 @@
 import { init_paths, resolveExtensionsDir } from "../../config/paths.js";
-import { init_loader, loadConfig } from "../../config/loader.js";
+import { computeExtensionDirectoryIntegrity, getExtensionLockfileManager } from "../../extensions/lockfile.js";
+import { AgentPluginStore } from "../../extensions/agent-plugins/store.js";
 import { downloadExtensionStoreZipBuffer, resolveExtensionZipDownloadUrl, resolveExtensionsStoreBaseUrl, verifyStoreArtifactSha256 } from "../../agent/skills/marketplace/adapters/store/store-api-client.js";
+import { loadConfig } from "../../config/loader.js";
 import { getContextWithOpts } from "../context.js";
-import { computeExtensionDirectoryIntegrity, getExtensionLockfileManager } from "../../extensions/lockfile.js";
 import { peekExtensionManifestFromStoreZip } from "../../extensions/install.js";
 import { commitStagedExtensionInstall, finalizeStagedExtensionInstall, rollbackStagedExtensionInstall, stageExtensionLocal, stageExtensionNpm, stageExtensionStoreZip } from "../../extensions/install-transaction.js";
 import { fetchRegistry, findExtension, getExtensionMarketplaceStoreBaseUrl, listExtensions, searchExtensions } from "../../extensions/marketplace.js";
+import { isAgentPluginArchive } from "../../extensions/agent-plugins/sources.js";
 import { colors } from "../utils/colors.js";
+import { installAgentPluginFromCli, isAgentPluginSource } from "./extension-agent-plugin.js";
 import { validateExtensionPackageDirectory } from "./extension-pack.js";
 import { join, resolve } from "node:path";
 import { existsSync, readFileSync, statSync } from "node:fs";
@@ -16,7 +19,6 @@ import semver from "semver";
 import { confirm } from "@inquirer/prompts";
 import { Command } from "commander";
 //#region src/cli/commands/extension-marketplace.ts
-init_loader();
 init_paths();
 const MANIFEST = "xopc.extension.json";
 function readJsonObject(path) {
@@ -135,6 +137,22 @@ async function installExtensionFromStoreWithLock(params) {
 		console.log(colors.cyan("📦"), `Downloading ${params.packageName}@${version} from xopc-store (${params.storeBase})…`);
 		const buf = await downloadExtensionStoreZipBuffer(params.storeBase, downloadUrl);
 		verifyStoreArtifactSha256(buf, sha256);
+		if (isAgentPluginArchive(buf)) {
+			const installed = await installAgentPluginFromCli(`store:${params.packageName}${params.version ? `@${params.version}` : ""}`, {
+				yes: params.yes,
+				force: params.force,
+				expectedId: params.expectedExtensionId
+			});
+			if (!installed) return {
+				ok: false,
+				error: "Install cancelled"
+			};
+			return {
+				ok: true,
+				extensionId: `plugin:${installed.id}`,
+				version: installed.manifest.version ?? version
+			};
+		}
 		const actualIntegrity = sha256Integrity(buf);
 		const manifest = peekExtensionManifestFromStoreZip(buf);
 		if (!await confirmInstall({
@@ -206,7 +224,11 @@ async function installExtensionFromStoreWithLock(params) {
 	}
 }
 function createExtensionInstallCommand() {
-	return new Command("install").description("Install extension from xopc-store (store.xopc.ai), npm, or a local directory into ~/.xopc/extensions").argument("<target>", "Explicit source spec: store:<id>, npm:<package>, or a local extension directory").option("-f, --force", "Replace an existing store or local extension with the same manifest id", false).option("-y, --yes", "Skip interactive install confirmation", false).action(async (target, opts) => {
+	return new Command("install").description("Install a native extension or portable Agent Plugin from an explicit source").argument("<target>", "store:<id>, npm:<package>, local directory, or Agent Plugin ZIP / HTTPS ZIP URL").option("-f, --force", "Replace an existing store or local extension with the same manifest id", false).option("-y, --yes", "Skip interactive install confirmation", false).action(async (target, opts) => {
+		if (isAgentPluginSource(target)) {
+			await installAgentPluginFromCli(target, opts);
+			return;
+		}
 		const cfg = loadConfig(getContextWithOpts().configPath);
 		const targetDir = resolveExtensionsDir();
 		const lock = getExtensionLockfileManager();
@@ -354,14 +376,31 @@ function createExtensionPublishCommand() {
 	});
 }
 function createExtensionUpdateCommand() {
-	return new Command("update").description("Re-install extension(s) from the lockfile (npm or xopc-store) under ~/.xopc/extensions").argument("[extensionId]", "Specific extension id (default: all in lockfile)").action(async (extensionId) => {
+	return new Command("update").description("Update installed extensions and Agent Plugins from their recorded sources").argument("[extensionId]", "Specific extension or plugin:<name> (default: all installed)").option("-y, --yes", "Accept changed plugin capabilities").action(async (extensionId, options) => {
+		if (extensionId?.startsWith("plugin:")) {
+			const id = extensionId.slice(7);
+			const receipt = new AgentPluginStore().receipt(id);
+			if (!receipt) throw new Error("Plugin not installed");
+			await installAgentPluginFromCli(receipt.source, {
+				yes: options.yes,
+				force: true,
+				expectedId: id
+			});
+			return;
+		}
 		const cfg = loadConfig(getContextWithOpts().configPath);
 		const targetDir = resolveExtensionsDir();
 		const storeBase = resolveExtensionsStoreBaseUrl(cfg);
 		const lock = getExtensionLockfileManager();
 		const data = await lock.load();
 		const ids = extensionId?.trim() ? [extensionId.trim()] : Object.keys(data.extensions);
-		if (ids.length === 0) {
+		const plugins = extensionId ? [] : new AgentPluginStore().list();
+		for (const plugin of plugins) await installAgentPluginFromCli(plugin.receipt.source, {
+			yes: options.yes,
+			force: true,
+			expectedId: plugin.id
+		});
+		if (ids.length === 0 && plugins.length === 0) {
 			console.log("No extensions in lockfile.");
 			return;
 		}

package/dist/src/cli/commands/extension-pack.js

@@ -1,7 +1,7 @@
 import { PACKAGE_VERSION, init_package_version } from "../../package-version.js";
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
-import { init_normalize_manifest, normalizeExtensionManifest } from "../../extensions/normalize-manifest.js";
+import { normalizeExtensionManifest } from "../../extensions/normalize-manifest.js";
 import { checkEngineCompatibility } from "../../extensions/engine-check.js";
 import { collectExtensionPackageDependencyIssues } from "../../extensions/package-contract.js";
 import { colors } from "../utils/colors.js";
@@ -12,7 +12,6 @@ import { createHash } from "node:crypto";
 import AdmZip from "adm-zip";
 import { Command } from "commander";
 //#region src/cli/commands/extension-pack.ts
-init_normalize_manifest();
 init_package_version();
 init_logger();
 const log = createLogger("ExtensionPack");

package/dist/src/cli/commands/extension.js

@@ -2,14 +2,17 @@ import { PACKAGE_VERSION, init_package_version } from "../../package-version.js"
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
 import { init_paths, resolveExtensionsDir } from "../../config/paths.js";
-import { init_loader, loadConfig, saveConfig } from "../../config/loader.js";
+import { computeExtensionDirectoryIntegrity, getExtensionLockfileManager } from "../../extensions/lockfile.js";
+import { AgentPluginStore } from "../../extensions/agent-plugins/store.js";
 import { checkEngineCompatibility } from "../../extensions/engine-check.js";
 import { ExtensionLoader } from "../../extensions/loader.js";
+import { loadConfig, saveConfig } from "../../config/loader.js";
 import { getContextWithOpts } from "../context.js";
-import { computeExtensionDirectoryIntegrity, getExtensionLockfileManager } from "../../extensions/lockfile.js";
 import { checkAllExtensionsHealth, getExtensionHealthChecker } from "../../extensions/health.js";
 import { collectExtensionPackageDependencyIssues } from "../../extensions/package-contract.js";
+import { withAgentPluginSource } from "../../extensions/agent-plugins/sources.js";
 import { colors } from "../utils/colors.js";
+import { addAgentPluginLifecycleCommands, isAgentPluginSource } from "./extension-agent-plugin.js";
 import { createExtensionCreateCommand } from "./extension-create.js";
 import { createExtensionDevCommand } from "./extension-dev.js";
 import { createExtensionPackCommand } from "./extension-pack.js";
@@ -18,7 +21,6 @@ import { join } from "node:path";
 import { existsSync, readFileSync, readdirSync } from "node:fs";
 import { Command } from "commander";
 //#region src/cli/commands/extension.ts
-init_loader();
 init_paths();
 init_package_version();
 init_logger();
@@ -26,7 +28,19 @@ const log = createLogger("ExtensionCommands");
 function createExtensionListCommand() {
 	return new Command("list").description("List installed extensions").option("--json", "Output as JSON").action(async (options) => {
 		try {
-			const extensions = await getExtensionLockfileManager().list();
+			const extensions = [...(await getExtensionLockfileManager().list()).map((ext) => ({
+				...ext,
+				format: "native-extension"
+			})), ...new AgentPluginStore().list().map((p) => ({
+				name: `plugin:${p.id}`,
+				version: p.manifest.version ?? "",
+				format: p.format,
+				source: "local",
+				resolved: p.receipt.source,
+				installedAt: p.receipt.installedAt,
+				readiness: p.readiness,
+				enabled: p.receipt.enabled
+			}))];
 			if (options.json) {
 				console.log(JSON.stringify(extensions, null, 2));
 				return;
@@ -62,6 +76,13 @@ function readJson(path) {
 function createExtensionInspectCommand() {
 	return new Command("inspect").description("Inspect an installed extension manifest and package contract").argument("<extension>", "Extension id").option("--json", "Output as JSON").option("--runtime", "Load the extension and include runtime registrations").action(async (extensionId, options) => {
 		try {
+			if (extensionId.startsWith("plugin:") || extensionId.startsWith("store:") || isAgentPluginSource(extensionId)) {
+				const store = new AgentPluginStore();
+				const result = extensionId.startsWith("plugin:") ? store.get(extensionId.slice(7)) : await withAgentPluginSource(extensionId, loadConfig(getContextWithOpts().configPath), (source) => store.inspect(source));
+				if (!result) throw new Error("Plugin not installed");
+				console.log(JSON.stringify(result, null, 2));
+				return;
+			}
 			const lockEntry = await getExtensionLockfileManager().get(extensionId);
 			const extensionDir = join(resolveExtensionsDir(), extensionId);
 			const manifest = readJson(join(extensionDir, "xopc.extension.json")) ?? lockEntry?.manifest;
@@ -188,7 +209,11 @@ function createExtensionVerifyCommand() {
 	return new Command("verify").description("Verify extension integrity").argument("[extension]", "Specific extension to verify (default: all)").action(async (extensionId) => {
 		try {
 			const lockfileManager = getExtensionLockfileManager();
-			if (extensionId) {
+			if (extensionId?.startsWith("plugin:")) {
+				const plugin = new AgentPluginStore().get(extensionId.slice(7));
+				if (!plugin || plugin.readiness === "blocked") throw new Error("Plugin integrity verification failed");
+				console.log(`Verified ${extensionId}`);
+			} else if (extensionId) {
 				const result = await lockfileManager.verify(extensionId);
 				if (result.valid) console.log(colors.green("✓"), `Extension "${extensionId}" is valid`);
 				else {
@@ -198,6 +223,11 @@ function createExtensionVerifyCommand() {
 			} else {
 				const results = await lockfileManager.verifyAll();
 				let hasErrors = false;
+				for (const plugin of new AgentPluginStore().list()) {
+					const valid = plugin.readiness !== "blocked";
+					console.log(valid ? colors.green("✓") : colors.red("✗"), `plugin:${plugin.id}`);
+					if (!valid) hasErrors = true;
+				}
 				for (const result of results) if (result.valid) console.log(colors.green("✓"), result.extensionId);
 				else {
 					console.log(colors.red("✗"), `${result.extensionId}: ${result.reason}`);
@@ -474,6 +504,7 @@ function createExtensionAuditCommand() {
 function registerExtensionCommands(program) {
 	const extensions = new Command("extensions").description("Manage extensions").addCommand(createExtensionListCommand()).addCommand(createExtensionInspectCommand()).addCommand(createExtensionFreezeCommand()).addCommand(createExtensionHealthCommand()).addCommand(createExtensionVerifyCommand()).addCommand(createExtensionDoctorCommand()).addCommand(createExtensionAuditCommand()).addCommand(createExtensionPackCommand()).addCommand(createExtensionCreateCommand()).addCommand(createExtensionDevCommand()).addCommand(createExtensionInstallCommand()).addCommand(createExtensionSearchCommand()).addCommand(createExtensionPublishCommand()).addCommand(createExtensionUpdateCommand());
 	program.addCommand(extensions);
+	addAgentPluginLifecycleCommands(extensions);
 }
 //#endregion
 export { createExtensionAuditCommand, createExtensionDoctorCommand, createExtensionFreezeCommand, createExtensionHealthCommand, createExtensionInspectCommand, createExtensionListCommand, createExtensionVerifyCommand, registerExtensionCommands };

package/dist/src/cli/commands/gateway/run-foreground.js

@@ -37,15 +37,15 @@ async function runGatewayFromCliOptions(options, ctx) {
 	}
 	if (tailscaleOverride && tailscaleOverride !== "off") process.env.XOPC_GATEWAY_TAILSCALE_MODE = tailscaleOverride;
 	if (options.tailscaleResetOnExit === true) process.env.XOPC_GATEWAY_TAILSCALE_RESET_ON_EXIT = "1";
-	const [{ loadConfig }, { resolveConfigPath }, { runGatewayLoop }, gatewayPorts, migrations] = await Promise.all([
+	const [{ loadConfig }, { resolveConfigPath }, { runGatewayLoop }, gatewayPorts, bootstrap] = await Promise.all([
 		import("../../../config/index.js"),
 		import("../../../config/paths.js"),
 		import("../../../gateway/run-loop.js"),
 		import("../../../gateway/ports.js"),
-		import("../../../migrations/runner.js")
+		import("../../../bootstrap/application-state.js")
 	]);
 	const { checkPortAvailable, forceFreePortAndWait } = gatewayPorts;
-	migrations.runBootstrapMigrationsSync(ctx.configPath);
+	bootstrap.bootstrapApplicationStateSync(ctx.configPath);
 	const config = loadConfig(ctx.configPath);
 	const bindFromFlagRaw = typeof options.bind === "string" && options.bind.trim().length > 0 ? options.bind.trim().toLowerCase() : void 0;
 	const bindFromFlag = bindFromFlagRaw && new Set([

package/dist/src/cli/commands/gateway/shared.js

@@ -1,6 +1,6 @@
 import { init_paths, resolveConfigPath } from "../../../config/paths.js";
-import { loadConfig } from "../../../config/loader.js";
 import { resolveGatewayLaunchAgentLabel, resolveGatewaySystemdServiceName, resolveGatewayWindowsTaskName } from "../../../daemon/constants.js";
+import { loadConfig } from "../../../config/loader.js";
 import "../../../config/index.js";
 //#region src/cli/commands/gateway/shared.ts
 init_paths();