@xopcai/xopc 0.0.397 → 0.0.399

package/dist/src/cli/commands/connectors.js

@@ -1,8 +1,8 @@
 import { getStoreConnectorInstallPlan, installStoreConnector, listStoreConnectors } from "../../capabilities/store-connector.js";
 import { loadConfig, saveConfig } from "../../config/loader.js";
 import { register } from "../registry.js";
-import { Command } from "commander";
 import { confirm } from "@inquirer/prompts";
+import { Command } from "commander";
 //#region src/cli/commands/connectors.ts
 function parsePairs(values, option) {
 	const output = {};

package/dist/src/cli/commands/extension-marketplace.js

@@ -16,8 +16,8 @@ import { existsSync, readFileSync, statSync } from "node:fs";
 import { execSync } from "node:child_process";
 import { createHash } from "node:crypto";
 import semver from "semver";
-import { Command } from "commander";
 import { confirm } from "@inquirer/prompts";
+import { Command } from "commander";
 //#region src/cli/commands/extension-marketplace.ts
 init_paths();
 const MANIFEST = "xopc.extension.json";

package/dist/src/cli/commands/models.js

@@ -16,8 +16,8 @@ import { prepareUpdateGlobalDefaults } from "../../gateway/global-defaults-admin
 import { disconnectProvider } from "../../providers/provider-disconnect.js";
 import { colors } from "../utils/colors.js";
 import { runCliOAuthLogin } from "../utils/oauth-login.js";
-import { Command } from "commander";
 import { input } from "@inquirer/prompts";
+import { Command } from "commander";
 //#region src/cli/commands/models.ts
 init_credentials();
 init_schema();

package/dist/src/cli/commands/onboard.js

@@ -11,8 +11,8 @@ import { initWorkspace } from "../utils/init-workspace.js";
 import { setupModel } from "./onboard/model.js";
 import { getChannelConfigurators } from "./onboard/channels/registry.js";
 import { setupChannels } from "./onboard/channels/index.js";
-import { Command } from "commander";
 import { select } from "@inquirer/prompts";
+import { Command } from "commander";
 //#region src/cli/commands/onboard.ts
 init_repository();
 init_schema();

package/dist/src/extensions/agent-plugins/branding.d.ts

@@ -1,4 +1,10 @@
 import { type PluginManifest } from './validation.js';
+export declare function pluginLocalizations(manifest: PluginManifest): {
+    [k: string]: {
+        description?: string;
+        displayName: string;
+    };
+};
 /** Inline bounded package assets so authenticated and offline inventories need no extra fetch. */
 export declare function pluginBranding(root: string, manifest: PluginManifest): {
     iconUrl: string;

package/dist/src/extensions/agent-plugins/branding.js

@@ -3,6 +3,16 @@ import { extname, resolve } from "node:path";
 import { readFileSync, statSync } from "node:fs";
 import { createHash } from "node:crypto";
 //#region src/extensions/agent-plugins/branding.ts
+function pluginLocalizations(manifest) {
+	const extension = manifest.extensions?.["ai.xopc"];
+	return Object.fromEntries(["en", "zh-CN"].flatMap((locale) => {
+		const value = extension?.localizations?.[locale];
+		return typeof value?.displayName === "string" && value.displayName.trim() ? [[locale, {
+			displayName: value.displayName,
+			...typeof value.description === "string" ? { description: value.description } : {}
+		}]] : [];
+	}));
+}
 /** Inline bounded package assets so authenticated and offline inventories need no extra fetch. */
 function pluginBranding(root, manifest) {
 	const icon = (manifest.extensions?.["ai.xopc"])?.branding?.icon;
@@ -41,4 +51,4 @@ function pluginBranding(root, manifest) {
 	}
 }
 //#endregion
-export { pluginBranding };
+export { pluginBranding, pluginLocalizations };

package/dist/src/extensions/agent-plugins/cli-authorization.d.ts

@@ -14,6 +14,17 @@ export type PluginCliAuthorization = {
     };
     error?: string;
 };
+export declare function inspectPluginCliAuthorization(store: AgentPluginStore, plugin: InstalledAgentPlugin, authorization: string, method: CliMethod, signal: AbortSignal): Promise<{
+    authenticated: boolean;
+    issues: {
+        id: string;
+        title: string;
+        scopes: string[];
+        instructions: string[];
+        method?: string;
+        helpUrl?: string;
+    }[];
+}>;
 export declare function checkPluginCliAuthorization(store: AgentPluginStore, plugin: InstalledAgentPlugin, authorization: string, method: CliMethod, signal: AbortSignal): Promise<boolean>;
 export declare function startPluginCliAuthorization(store: AgentPluginStore, plugin: InstalledAgentPlugin, authorization: string, method: CliMethod, owner: string): PluginCliAuthorization;
 export declare function getPluginCliAuthorization(id: string, owner: string, revision: string): PluginCliAuthorization | undefined;

package/dist/src/extensions/agent-plugins/cli-authorization.js

@@ -1,6 +1,6 @@
 import { CredentialResolver, init_credentials } from "../../auth/credentials.js";
 import { spawnProcess } from "../../process/run-process.js";
-import { safeAuthorizationUrl } from "./setup-contract.js";
+import { parsePluginAuthorizationCheck, pluginAuthorizations, safeAuthorizationUrl } from "./setup-contract.js";
 import { containedPath, expandPluginVariables, resolvePluginCwd, validatePluginServer } from "./validation.js";
 import { expandUserConfig, readPluginUserConfig } from "./user-config.js";
 import { homedir } from "node:os";
@@ -86,15 +86,20 @@ async function execute(store, plugin, authorization, command, signal, timeoutMs,
 	if (result.exitCode !== 0 || result.timedOut || result.aborted || result.outputTruncated) throw new Error("CLI login or account check failed. Retry authorization.");
 	return result.stdout;
 }
-async function checkPluginCliAuthorization(store, plugin, authorization, method, signal) {
+async function inspectPluginCliAuthorization(store, plugin, authorization, method, signal) {
 	try {
-		const last = (await execute(store, plugin, authorization, method.check, signal, 15e3)).trim().split("\n").at(-1);
-		return !!last && JSON.parse(last).authenticated === true;
+		return parsePluginAuthorizationCheck(await execute(store, plugin, authorization, method.check, signal, 15e3), pluginAuthorizations(plugin.manifest).find((value) => value.id === authorization)?.methods.map((value) => value.id) ?? []);
 	} catch {
 		signal.throwIfAborted();
-		return false;
+		return {
+			authenticated: false,
+			issues: []
+		};
 	}
 }
+async function checkPluginCliAuthorization(store, plugin, authorization, method, signal) {
+	return (await inspectPluginCliAuthorization(store, plugin, authorization, method, signal)).authenticated;
+}
 function startPluginCliAuthorization(store, plugin, authorization, method, owner) {
 	for (const [key, attempt] of attempts) if (attempt.view.expiresAt < Date.now()) {
 		attempt.controller.abort();
@@ -195,4 +200,4 @@ function cancelAllPluginCliAuthorizations() {
 	}
 }
 //#endregion
-export { cancelAllPluginCliAuthorizations, cancelPluginCliAuthorizations, checkPluginCliAuthorization, getPluginCliAuthorization, startPluginCliAuthorization };
+export { cancelAllPluginCliAuthorizations, cancelPluginCliAuthorizations, checkPluginCliAuthorization, getPluginCliAuthorization, inspectPluginCliAuthorization, startPluginCliAuthorization };

package/dist/src/extensions/agent-plugins/inventory.d.ts

@@ -94,6 +94,12 @@ export declare function agentPluginInventoryRow(plugin: InstalledAgentPlugin, st
     version: string;
     description: string;
     source: string;
+    localizations: {
+        [k: string]: {
+            description?: string;
+            displayName: string;
+        };
+    };
     branding: {
         iconUrl: string;
         iconSha256: string;
@@ -202,6 +208,12 @@ export declare function listAgentPluginInventory(): {
     version: string;
     description: string;
     source: string;
+    localizations: {
+        [k: string]: {
+            description?: string;
+            displayName: string;
+        };
+    };
     branding: {
         iconUrl: string;
         iconSha256: string;

package/dist/src/extensions/agent-plugins/inventory.js

@@ -1,7 +1,7 @@
 import { pluginAuthorizations } from "./setup-contract.js";
 import { pluginServerId } from "./validation.js";
 import { AgentPluginStore } from "./store.js";
-import { pluginBranding } from "./branding.js";
+import { pluginBranding, pluginLocalizations } from "./branding.js";
 import { join } from "node:path";
 import { existsSync, readFileSync } from "node:fs";
 //#region src/extensions/agent-plugins/inventory.ts
@@ -16,7 +16,7 @@ function agentPluginInventoryRow(plugin, store = new AgentPluginStore()) {
 	try {
 		authorizations = pluginAuthorizations(plugin.manifest);
 	} catch {}
-	const needsAuthorization = !!job && ((job.missingConfig?.length ?? 0) > 0 || job.connections?.some((value) => value.state !== "connected") || job.authorizations?.some((value) => value.state !== "connected"));
+	const needsAuthorization = !!job && ((job.missingConfig?.length ?? 0) > 0 || job.connections?.some((value) => value.state !== "connected") || job.authorizations?.some((value) => value.state !== "connected" || !!value.issues?.length));
 	return {
 		id: `plugin:${plugin.id}`,
 		pluginId: plugin.id,
@@ -25,6 +25,7 @@ function agentPluginInventoryRow(plugin, store = new AgentPluginStore()) {
 		version: plugin.manifest.version ?? plugin.receipt.provenance?.version,
 		description: plugin.manifest.description,
 		source: "agent-plugin",
+		localizations: pluginLocalizations(plugin.manifest),
 		branding: pluginBranding(plugin.rootDir, plugin.manifest),
 		active: plugin.receipt.enabled && plugin.readiness !== "blocked" && plugin.readiness !== "setup_required",
 		activationEligible: plugin.receipt.enabled,

package/dist/src/extensions/agent-plugins/setup-contract.d.ts

@@ -52,3 +52,23 @@ export declare function pluginAuthorizations(manifest: {
     extensions?: Record<string, unknown>;
 }): PluginAuthorization[];
 export declare function safeAuthorizationUrl(value: string): string;
+export declare const pluginPermissionIssueSchema: z.ZodObject<{
+    id: z.ZodString;
+    title: z.ZodString;
+    scopes: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    instructions: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    method: z.ZodOptional<z.ZodString>;
+    helpUrl: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export type PluginPermissionIssue = z.infer<typeof pluginPermissionIssueSchema>;
+export declare function parsePluginAuthorizationCheck(output: string, methodIds: string[]): {
+    authenticated: boolean;
+    issues: {
+        id: string;
+        title: string;
+        scopes: string[];
+        instructions: string[];
+        method?: string;
+        helpUrl?: string;
+    }[];
+};

package/dist/src/extensions/agent-plugins/setup-contract.js

@@ -54,5 +54,24 @@ function safeAuthorizationUrl(value) {
 	].includes(url.hostname))) throw new Error("Authorization requires an HTTPS or loopback URL");
 	return url.href;
 }
+const pluginPermissionIssueSchema = z.strictObject({
+	id,
+	title: z.string().min(1).max(100),
+	scopes: z.array(z.string().min(1).max(200).regex(/^[a-zA-Z0-9_.:-]+$/)).max(30).default([]),
+	instructions: z.array(z.string().min(1).max(1e3)).max(6).default([]),
+	method: id.optional(),
+	helpUrl: z.string().url().optional()
+});
+function parsePluginAuthorizationCheck(output, methodIds) {
+	const result = z.object({
+		authenticated: z.boolean(),
+		issues: z.array(pluginPermissionIssueSchema).max(20).default([])
+	}).parse(JSON.parse(output.trim().split("\n").at(-1)));
+	for (const issue of result.issues) {
+		if (issue.method && !methodIds.includes(issue.method)) throw new Error("Unknown permission recovery method");
+		if (issue.helpUrl) safeAuthorizationUrl(issue.helpUrl);
+	}
+	return result;
+}
 //#endregion
-export { pluginAuthorizationSchema, pluginAuthorizations, safeAuthorizationUrl, setupCommandSchema };
+export { parsePluginAuthorizationCheck, pluginAuthorizationSchema, pluginAuthorizations, pluginPermissionIssueSchema, safeAuthorizationUrl, setupCommandSchema };

package/dist/src/extensions/agent-plugins/setup.d.ts

@@ -45,6 +45,14 @@ declare const schema: z.ZodObject<{
             skipped: "skipped";
             connected: "connected";
         }>;
+        issues: z.ZodDefault<z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            title: z.ZodString;
+            scopes: z.ZodDefault<z.ZodArray<z.ZodString>>;
+            instructions: z.ZodDefault<z.ZodArray<z.ZodString>>;
+            method: z.ZodOptional<z.ZodString>;
+            helpUrl: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>>>;
         method: z.ZodOptional<z.ZodString>;
         attemptId: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>>>;

package/dist/src/extensions/agent-plugins/setup.js

@@ -1,7 +1,7 @@
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
 import { init_write_file_atomic, writeTextAtomicSync } from "../../infra/write-file-atomic.js";
-import { pluginAuthorizations } from "./setup-contract.js";
+import { pluginAuthorizations, pluginPermissionIssueSchema } from "./setup-contract.js";
 import { preparePluginResources } from "./resources.js";
 import { pluginName, pluginServerId } from "./validation.js";
 import { AgentPluginStore } from "./store.js";
@@ -12,7 +12,7 @@ import { pluginConfigMissing, readPluginUserConfig, savePluginUserConfig } from
 import { materializePluginServers } from "./mcp-adapter.js";
 import { getNativePiAgentDir } from "../../agent/mcp/native-mcp.js";
 import { cancelMcpAuthorization, getMcpAuthorization, probeMcpConnection, startMcpAuthorization, submitMcpRedirect } from "../../agent/mcp/connection-setup.js";
-import { cancelPluginCliAuthorizations, checkPluginCliAuthorization, getPluginCliAuthorization, startPluginCliAuthorization } from "./cli-authorization.js";
+import { cancelPluginCliAuthorizations, getPluginCliAuthorization, inspectPluginCliAuthorization, startPluginCliAuthorization } from "./cli-authorization.js";
 import { join } from "node:path";
 import { existsSync, readFileSync } from "node:fs";
 import { randomUUID } from "node:crypto";
@@ -66,6 +66,7 @@ const schema = z.object({
 			"skipped",
 			"error"
 		]),
+		issues: z.array(pluginPermissionIssueSchema).max(20).default([]),
 		method: z.string().optional(),
 		attemptId: z.string().optional()
 	})).default([]),
@@ -171,7 +172,8 @@ var PluginSetupService = class {
 			deferred: false,
 			authorizations: pluginAuthorizations(plugin.manifest).map((value) => ({
 				id: value.id,
-				state: "pending"
+				state: "pending",
+				issues: []
 			})),
 			operations: [],
 			missingConfig: pluginConfigMissing(this.store, plugin),
@@ -435,8 +437,11 @@ var PluginSetupService = class {
 			} else {
 				for (const target of job.authorizations) {
 					const method = declarations.find((value) => value.id === target.id).methods.find((value) => value.id === target.method);
-					if (method?.type === "cli") target.state = await checkPluginCliAuthorization(this.store, plugin, target.id, method, controller.signal) ? "connected" : "pending";
-					else if (method?.type === "form") {
+					if (method?.type === "cli") {
+						const check = await inspectPluginCliAuthorization(this.store, plugin, target.id, method, controller.signal);
+						target.state = check.authenticated ? "connected" : "pending";
+						target.issues = check.issues;
+					} else if (method?.type === "form") {
 						const values = readPluginUserConfig(this.store, id, plugin.receipt.revision);
 						target.state = method.fields.every((key) => values[key] !== void 0 && values[key] !== "") ? "connected" : "pending";
 					}

package/dist/src/extensions/agent-plugins/skill-catalog.d.ts

@@ -0,0 +1,14 @@
+import type { SkillCatalogEntry } from '../../agent/agent-manager.js';
+import { AgentPluginStore } from './store.js';
+export declare function pluginSkillName(plugin: ReturnType<AgentPluginStore['list']>[number], name: string): string;
+/** Browse installed content without enabling it in the Agent runtime. */
+export declare function withPluginSkillCatalog(catalog: SkillCatalogEntry[], store?: AgentPluginStore): SkillCatalogEntry[];
+export declare function pluginSkillPreview(name: string, store?: AgentPluginStore): {
+    name: string;
+    description: string;
+    bodyMarkdown: string;
+    disableModelInvocation: boolean;
+    metadata: import("../../agent/skills/types.js").SkillMetadata;
+    toolConditions?: import("../../agent/skills/types.js").SkillToolConditions;
+    requiredEnvVarNames?: string[];
+};

package/dist/src/extensions/agent-plugins/skill-catalog.js

@@ -0,0 +1,95 @@
+import { parseFrontmatter } from "../../markdown/frontmatter.js";
+import { createSkillConfigManager } from "../../agent/skills/config.js";
+import { parseSkillLocalizations } from "../../agent/skills/parse-skill-metadata.js";
+import { containedPath } from "./validation.js";
+import { AgentPluginStore } from "./store.js";
+import { buildSkillMarkdownPreviewFromRaw } from "../../agent/skills/skill-markdown-preview-from-raw.js";
+import { agentPluginInventoryRow } from "./inventory.js";
+import { basename, dirname } from "node:path";
+import { readFileSync } from "node:fs";
+//#region src/extensions/agent-plugins/skill-catalog.ts
+function pluginSkillName(plugin, name) {
+	return plugin.layout?.dialect !== "portable" ? `${plugin.id}.${name}` : name;
+}
+/** Browse installed content without enabling it in the Agent runtime. */
+function withPluginSkillCatalog(catalog, store = new AgentPluginStore()) {
+	const rows = [...catalog];
+	const config = createSkillConfigManager(store.stateDir).load();
+	for (const plugin of store.list()) {
+		const inventory = agentPluginInventoryRow(plugin, store);
+		const owner = {
+			id: plugin.id,
+			name: plugin.manifest.name,
+			title: inventory.setup.authorizations.length === 1 ? inventory.setup.authorizations[0].title : plugin.manifest.name,
+			authorizationStatus: inventory.authorizationStatus,
+			active: inventory.active,
+			readiness: plugin.readiness
+		};
+		for (const skill of plugin.skills) {
+			const name = pluginSkillName(plugin, skill.name);
+			const index = rows.findIndex((row) => row.origin === `plugin:${plugin.id}` && row.name === name);
+			try {
+				const raw = readFileSync(containedPath(plugin.rootDir, skill.filePath), "utf8");
+				const preview = buildSkillMarkdownPreviewFromRaw(raw, {
+					name,
+					description: ""
+				});
+				const { frontmatter } = parseFrontmatter(raw);
+				const fm = frontmatter;
+				const localizations = parseSkillLocalizations(fm).localizations ?? {
+					en: {
+						displayName: skill.name,
+						description: preview.description
+					},
+					"zh-CN": {
+						displayName: typeof fm.displayName === "string" ? fm.displayName : skill.name,
+						description: typeof fm.displayDescription === "string" ? fm.displayDescription : preview.description
+					}
+				};
+				if (index >= 0) {
+					rows[index] = {
+						...rows[index],
+						localizations,
+						plugin: owner
+					};
+					continue;
+				}
+				rows.push({
+					localizations,
+					directoryId: basename(dirname(skill.filePath)),
+					name,
+					description: preview.description,
+					source: "global",
+					origin: `plugin:${plugin.id}`,
+					path: dirname(skill.filePath),
+					managed: false,
+					writable: false,
+					enabled: config.entries?.[name]?.enabled !== false,
+					disableModelInvocation: preview.disableModelInvocation,
+					plugin: owner
+				});
+			} catch {}
+		}
+	}
+	return rows;
+}
+function pluginSkillPreview(name, store = new AgentPluginStore()) {
+	for (const plugin of store.list()) {
+		const skill = plugin.skills.find((skill) => pluginSkillName(plugin, skill.name) === name);
+		if (!skill) continue;
+		try {
+			return {
+				...buildSkillMarkdownPreviewFromRaw(readFileSync(containedPath(plugin.rootDir, skill.filePath), "utf8"), {
+					name,
+					description: ""
+				}),
+				name
+			};
+		} catch {
+			return null;
+		}
+	}
+	return null;
+}
+//#endregion
+export { pluginSkillName, pluginSkillPreview, withPluginSkillCatalog };

package/dist/src/extensions/agent-plugins/store.js

@@ -127,7 +127,7 @@ var AgentPluginStore = class {
 			});
 			const setupPath = join(this.stateDir, "plugin-setup", `${id}.json`);
 			const setup = existsSync(setupPath) ? JSON.parse(readFileSync(setupPath, "utf8")) : void 0;
-			const readiness = !valid || adapterChanged || capabilityChanged || inspection.layout?.compatibility.some((item) => item.component === "hooks" || item.component === "authorizations" && item.support === "invalid") ? "blocked" : setup?.packageRevision === receipt.revision && setup.state !== "completed" && !setup.installed ? "setup_required" : inspection.diagnostics.length || setup?.packageRevision === receipt.revision && (setup.partial || setup.installed && (setup.missingConfig?.length || setup.connections?.some((value) => value.state !== "connected") || setup.authorizations?.some((value) => value.state !== "connected"))) ? "degraded" : "ready";
+			const readiness = !valid || adapterChanged || capabilityChanged || inspection.layout?.compatibility.some((item) => item.component === "hooks" || item.component === "authorizations" && item.support === "invalid") ? "blocked" : setup?.packageRevision === receipt.revision && setup.state !== "completed" && !setup.installed ? "setup_required" : inspection.diagnostics.length || setup?.packageRevision === receipt.revision && (setup.partial || setup.installed && (setup.missingConfig?.length || setup.connections?.some((value) => value.state !== "connected") || setup.authorizations?.some((value) => value.state !== "connected" || !!value.issues?.length))) ? "degraded" : "ready";
 			return {
 				...inspection,
 				id,

package/dist/src/extensions/sdk/index.js

@@ -7,8 +7,8 @@ import { DEFAULT_SECURITY_CONFIG, checkExtensionDirSafety, checkExtensionPathSaf
 import { SlotRegistry, getSlotRegistry, registerSlotType } from "../slots.js";
 import { ExtensionDiagnostics, ExtensionLoaderCacheImpl, getExtensionCache, getExtensionDiagnostics } from "../diagnostics.js";
 import { ExtensionHookRunner, createHookContext, isHookEvent } from "../hooks.js";
-import { registerExtensionCliProgram } from "./channel-helpers.js";
 import { defineChannelPluginEntry } from "./channel-entry.js";
+import { registerExtensionCliProgram } from "./channel-helpers.js";
 import { lazyFunction, lazyModule } from "./lazy.js";
 import { createMockExtensionApi, createTestGateway } from "./testing.js";
 //#region src/extensions/sdk/index.ts

package/dist/src/gateway/hono/app.js

@@ -7,10 +7,10 @@ import { resolveGatewayEffectiveHost } from "../../config/gateway-bind.js";
 import { loadTunnelState } from "../../tunnel/tunnel-state.js";
 import { resolveReverseProxyPublicUrl } from "../public-url.js";
 import { maxSessionInputRequestBodyBytes } from "../chat-limits.js";
+import { BROWSER_EXTENSION_ID } from "../../browser/extension-identity.js";
 import { isLoopbackIpAddress, isTrustedProxyAddress } from "../client-ip.js";
 import { buildGatewayConsoleCspHeader } from "../security/csp.js";
 import { checkBrowserOrigin, isChromeExtensionOrigin } from "../security/origin-check.js";
-import { BROWSER_EXTENSION_ID } from "../../browser/extension-identity.js";
 import { auth } from "./middleware/auth.js";
 import { gatewayScopes } from "./middleware/scopes.js";
 import { createChannelRateLimitMiddleware, createChatRateLimitMiddleware, createMediaRateLimitMiddleware, createStrictRateLimitMiddleware, createTaskRateLimitMiddleware, createXopcCloudPollRateLimitMiddleware } from "./middleware/strict-rate-limit.js";

package/dist/src/gateway/hono/routes/agent-plugins.js

@@ -3,9 +3,9 @@ import { PluginSelectionRequired } from "../../../extensions/agent-plugins/sourc
 import { AgentPluginStore } from "../../../extensions/agent-plugins/store.js";
 import { savePluginAuthBinding } from "../../../extensions/agent-plugins/auth.js";
 import { evictAllEmbeddedSessionRunners } from "../../../agent/embedded/session-runner.js";
+import { agentPluginInventoryRow } from "../../../extensions/agent-plugins/inventory.js";
 import { withAgentPluginSource } from "../../../extensions/agent-plugins/sources.js";
 import { getGatewayPrincipal } from "../../security/gateway-principal.js";
-import { agentPluginInventoryRow } from "../../../extensions/agent-plugins/inventory.js";
 import { cancelPluginCliAuthorizations } from "../../../extensions/agent-plugins/cli-authorization.js";
 import { PluginSetupService, setupActionSchema } from "../../../extensions/agent-plugins/setup.js";
 import { removePluginCredentials } from "../../../extensions/agent-plugins/credentials.js";

package/dist/src/gateway/hono/routes/auth-registry-extensions.js

@@ -3,11 +3,11 @@ import { ActivationPlanner } from "../../../extensions/activation-planner.js";
 import { mergeActivationContext } from "../../../extensions/activation-context.js";
 import { validateExtensionConfig } from "../../../extensions/config-validation.js";
 import { fetchRegistry, listExtensions, searchExtensions } from "../../../extensions/marketplace.js";
+import { listAgentPluginInventory } from "../../../extensions/agent-plugins/inventory.js";
 import { createOAuthAsyncHandler } from "../oauth-async.js";
 import { createOAuthHandler } from "../oauth.js";
 import { extensionAssetMimeType } from "../lib/extension-assets.js";
 import { loadExtensionStore, saveExtensionStore } from "../lib/extension-store.js";
-import { listAgentPluginInventory } from "../../../extensions/agent-plugins/inventory.js";
 import { relative, resolve } from "node:path";
 import { existsSync, readFileSync, statSync } from "node:fs";
 //#region src/gateway/hono/routes/auth-registry-extensions.ts

package/dist/src/gateway/hono/routes/browser-install.js

@@ -1,5 +1,5 @@
-import { createGatewayRouteLogger } from "../lib/route-logger.js";
 import { acquireBrowserInstallLock, cancelBrowserInstall } from "../../../browser/install-lock.js";
+import { createGatewayRouteLogger } from "../lib/route-logger.js";
 import { runPlaywrightChromiumInstallWithProgress } from "../../../browser/providers/playwright-install.js";
 import { streamSSE } from "hono/streaming";
 //#region src/gateway/hono/routes/browser-install.ts

package/dist/src/gateway/service/marketplace-service.js

@@ -10,6 +10,7 @@ import { resolveWorkspaceSkillsDir, resolveWorkspaceSkillsLockPath } from "../..
 import { getExtensionLockfileManager } from "../../extensions/lockfile.js";
 import { AgentPluginStore } from "../../extensions/agent-plugins/store.js";
 import { normalizeSkillInstallTarget } from "../../agent/skills/install-target.js";
+import { pluginSkillPreview, withPluginSkillCatalog } from "../../extensions/agent-plugins/skill-catalog.js";
 import { isAgentPluginArchive, withAgentPluginArchive } from "../../extensions/agent-plugins/sources.js";
 import { existsSync, rmSync } from "node:fs";
 //#region src/gateway/service/marketplace-service.ts
@@ -52,7 +53,7 @@ var GatewayMarketplaceService = class {
 	getSkillsApi() {
 		const snapshot = this.opts.getAgentService().getSkillCatalogSnapshot();
 		return {
-			catalog: snapshot.catalog,
+			catalog: withPluginSkillCatalog(snapshot.catalog),
 			managed: listManagedSkillDirs(),
 			version: snapshot.version,
 			loadedAt: snapshot.loadedAt,
@@ -82,9 +83,10 @@ var GatewayMarketplaceService = class {
 		return this.opts.getAgentService().setSessionWorkspaceTrust(conversationId, trusted);
 	}
 	getSkillMarkdownSource(skillName) {
-		return this.opts.getAgentService().getSkillMarkdownSource(skillName);
+		return this.opts.getAgentService().getSkillMarkdownSource(skillName) ?? pluginSkillPreview(skillName);
 	}
 	deleteSkill(skillId, target) {
+		if (this.getSkillsApi().catalog.find((row) => row.name === skillId)?.origin.startsWith("plugin:")) throw new Error("This skill belongs to a plugin. Manage or uninstall the owning plugin instead.");
 		const requestedTarget = target ? this.resolveInstallTarget(target) : void 0;
 		const workspaceTarget = requestedTarget ?? this.resolveInstallTarget("workspace");
 		try {

package/dist/src/gateway/service.js

@@ -81,6 +81,9 @@ import "../infra/bus/index.js";
 import { collectMediaUrisFromMessages, deleteMediaUris } from "../media/session-references.js";
 import { AgentService } from "../agent/service.js";
 import { bootstrapApplicationStateSync } from "../bootstrap/application-state.js";
+import { setPairingBroadcastSink } from "../channels/pairing/pairing-events.js";
+import { registerClarificationChannelRuntime } from "./clarify-runtime.js";
+import { ChannelManager } from "../channels/manager.js";
 import { ChatPreviewService } from "../chat-previews/service.js";
 import "../chat-previews/index.js";
 import { configureGatewayHttpProxy } from "../infra/http-proxy-env.js";
@@ -100,13 +103,8 @@ import { DiscussionSealer } from "../discussions/sealer.js";
 import "../discussions/index.js";
 import { EndpointToolRuntime } from "../endpoint-tools/runtime.js";
 import "../endpoint-tools/index.js";
-import { HomeCapabilityPreflightService } from "../home-intelligence/capability-preflight.js";
-import { HomeAdviceGenerator } from "../home-intelligence/generator.js";
-import { HomeIntelligenceHost } from "../home-intelligence/host.js";
-import { HomeSnapshotBuilder } from "../home-intelligence/snapshot.js";
 import { assertGatewayAuthConfigured, extractToken, resolveGatewayAuth, validateToken } from "./auth.js";
 import { prepareAutomationAgentSession } from "./automation-agent-session.js";
-import { registerClarificationChannelRuntime } from "./clarify-runtime.js";
 import { stopTailscaleExposure } from "./tailscale-lifecycle.js";
 import { getGatewayFileSpaceService } from "./file-space-service.js";
 import { reconcileHomeIntelligenceAutomation } from "./home-intelligence-automation-reconciler.js";
@@ -120,8 +118,6 @@ import { WorkDiscoveryService } from "../work-discovery/service.js";
 import { buildVoiceMemoryContext } from "../voice/realtime/memory-context.js";
 import { buildVoicePersonaContext } from "../voice/realtime/persona-context.js";
 import { voiceMemoryBudget, voicePersonaBudget } from "../voice/realtime/conversation-context.js";
-import { setPairingBroadcastSink } from "../channels/pairing/pairing-events.js";
-import { ChannelManager } from "../channels/manager.js";
 import "../notes/index.js";
 import { buildWorkflowChildTools } from "../agent/workflow/workflow-child-tools.js";
 import { WorkflowRunService } from "../workflows/service/workflow-run-service.js";
@@ -167,6 +163,10 @@ import { TaskMainUpdateDecisionService } from "../tasks/task-main-update-decisio
 import { selectTaskMainUpdateAttempt, submitAndConfirmTaskMainUpdate } from "../tasks/task-main-update-input.js";
 import { checkAppContextAccess, prepareAppContext } from "./service/app-context-access.js";
 import { applyAutomaticVoiceLanguage, inferProductLanguageFromEnvironment, initializeVoiceDefaults } from "../voice/language-profile.js";
+import { HomeAdviceGenerator } from "../home-intelligence/generator.js";
+import { HomeIntelligenceHost } from "../home-intelligence/host.js";
+import { HomeSnapshotBuilder } from "../home-intelligence/snapshot.js";
+import { HomeCapabilityPreflightService } from "../home-intelligence/capability-preflight.js";
 import crypto from "node:crypto";
 //#region src/gateway/service.ts
 init_session_repository();

package/dist/src/home-intelligence/host.js

@@ -1,10 +1,10 @@
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
+import { HomeAdviceBudgetExceededError, isHomeProseLocalized } from "./generator.js";
 import { homePatternKey } from "./strategy.js";
+import { HomeAdvicePolicy } from "./policy.js";
 import { HomeIntelligenceRepository } from "./repository.js";
 import { HomeOpportunityApplicationService } from "./application-service.js";
-import { HomeAdvicePolicy } from "./policy.js";
-import { HomeAdviceBudgetExceededError, isHomeProseLocalized } from "./generator.js";
 import { buildHomeOpportunityNotification } from "./notification.js";
 import { createHash } from "node:crypto";
 //#region src/home-intelligence/host.ts

package/dist/src/storage/sqlite/device-pairing-approval.js

@@ -5,8 +5,8 @@ import { init_src } from "../../../packages/gateway-contract/src/index.js";
 import { init_gateway_scopes } from "../../gateway/security/gateway-scopes.js";
 import { createDevice, getDevice, init_device_access_repository, registerInitialDeviceRefreshToken, revokeDevice } from "./device-access-repository.js";
 import { getOrCreateGatewayIdentity, init_gateway_identity_repository } from "./gateway-identity-repository.js";
-import "../../browser/extension-identity.js";
 import { browserEnrollmentPublicKeyThumbprint } from "../../browser/enrollment.js";
+import "../../browser/extension-identity.js";
 import crypto from "node:crypto";
 //#region src/storage/sqlite/device-pairing-approval.ts
 init_src();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xopcai/xopc",
-  "version": "0.0.397",
+  "version": "0.0.399",
   "description": "Local-first personal AI with Ada, task delegation, files, projects, workflows, and automations. Use cloud or local models.",
   "type": "module",
   "main": "dist/src/index.js",