@xopcai/xopc 0.0.6 → 0.0.11

package/dist/src/daemon/systemd.js.map

@@ -1 +1 @@
-{"version":3,"file":"systemd.js","names":[],"sources":["../../../src/daemon/systemd.ts"],"sourcesContent":["/**\n * Systemd Service - Linux user service management\n */\n\nimport { writeFile, mkdir, readFile, rm, access, constants } from 'node:fs/promises';\nimport { existsSync } from 'node:fs';\nimport { spawn, execSync } from 'node:child_process';\nimport path from 'node:path';\nimport os from 'node:os';\nimport { createLogger } from '../utils/logger.js';\nimport type {\n  GatewayService,\n  GatewayServiceInstallArgs,\n  GatewayServiceControlArgs,\n  GatewayServiceEnvArgs,\n  GatewayServiceRuntime,\n  GatewayServiceCommandConfig,\n} from './types.js';\nimport type { Writable } from 'node:stream';\n\nconst log = createLogger('SystemdService');\n\n/**\n * Get username\n */\nfunction getUsername(): string {\n  return os.userInfo().username;\n}\n\n/**\n * Resolve systemd unit path\n */\nfunction resolveSystemdUnitPath(_env: NodeJS.ProcessEnv): string {\n  const home = os.homedir();\n  const xopcDir = path.join(home, '.config', 'systemd', 'user');\n  return path.join(xopcDir, 'xopc-gateway.service');\n}\n\n/**\n * Resolve log directory\n */\nfunction resolveLogDir(): string {\n  return path.join(os.homedir(), '.xopc', 'logs');\n}\n\n/**\n * Build systemd unit content\n */\nfunction buildSystemdUnit(params: {\n  description: string;\n  execStart: string;\n  workingDirectory?: string;\n  environment: Record<string, string>;\n  restart?: string;\n  restartSec?: string;\n}): string {\n  const envVars = Object.entries(params.environment)\n    .map(([k, v]) => `Environment=\"${k}=${v}\"`)\n    .join('\\n');\n\n  return `[Unit]\nDescription=${params.description}\nAfter=network.target\n\n[Service]\n${params.workingDirectory ? `WorkingDirectory=${params.workingDirectory}` : ''}\nExecStart=${params.execStart}\n${envVars}\nRestart=${params.restart || 'on-failure'}\nRestartSec=${params.restartSec || '5'}\n\n[Install]\nWantedBy=default.target\n`.trim();\n}\n\n/**\n * Execute systemctl command\n */\nasync function systemctl(args: string[], stdout?: Writable, stderr?: Writable): Promise<void> {\n  try {\n    const child = spawn('systemctl', ['--user', ...args], {\n      stdio: ['ignore', 'pipe', 'pipe'],\n    });\n    \n    let out = '';\n    let err = '';\n    \n    if (child.stdout) {\n      child.stdout.on('data', (data) => { out += data.toString(); });\n    }\n    if (child.stderr) {\n      child.stderr.on('data', (data) => { err += data.toString(); });\n    }\n    \n    await new Promise<void>((resolve, reject) => {\n      child.on('close', (code) => {\n        if (code === 0) {\n          if (stdout && out) stdout.write(out);\n          if (stderr && err) stderr.write(err);\n          resolve();\n        } else {\n          reject(new Error(`systemctl exited with code ${code}`));\n        }\n      });\n      child.on('error', reject);\n    });\n  } catch (err) {\n    const e = err as { message?: string };\n    throw new Error(`systemctl failed: ${e.message || String(err)}`);\n  }\n}\n\nimport { spawnSync } from 'node:child_process';\n\n/**\n * Check if systemd is available\n */\nexport function isSystemdAvailable(): boolean {\n  if (process.platform !== 'linux') return false;\n  try {\n    // Use spawnSync to avoid require in ESM\n    const result = spawnSync('systemctl', ['--user', '--version'], {\n      stdio: ['ignore', 'ignore', 'ignore'],\n    });\n    return result.status === 0;\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Check if user lingering is enabled\n */\nasync function isLingerEnabled(): Promise<boolean> {\n  try {\n    const lingerPath = `/var/lib/systemd/linger/${getUsername()}`;\n    await access(lingerPath, constants.F_OK);\n    return true;\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Enable user lingering (so service runs after logout)\n */\nexport async function enableLinger(): Promise<void> {\n  if (!isSystemdAvailable()) {\n    throw new Error('systemd is not available');\n  }\n\n  const alreadyEnabled = await isLingerEnabled();\n  if (alreadyEnabled) {\n    log.info('User lingering already enabled');\n    return;\n  }\n\n  try {\n    // Try to enable linger (requires root)\n    execSync('sudo loginctl enable-linger ' + getUsername(), { stdio: 'inherit' });\n    log.info('Enabled user lingering');\n  } catch {\n    // If sudo fails, try without sudo (may work on some systems)\n    log.warn(\n      { command: `sudo loginctl enable-linger ${getUsername()}` },\n      'Failed to enable systemd user linger (sudo/loginctl); gateway may not survive logout',\n    );\n    throw new Error(\n      'Failed to enable user lingering. Run: sudo loginctl enable-linger ' + getUsername()\n    );\n  }\n}\n\n/**\n * Systemd service implementation\n */\nexport const systemdService: GatewayService = {\n  label: 'xopc-gateway',\n  loadedText: 'xopc-gateway.service',\n  notLoadedText: 'xopc-gateway.service',\n\n  async install(args: GatewayServiceInstallArgs): Promise<void> {\n    const unitPath = resolveSystemdUnitPath(args.env);\n    const logDir = resolveLogDir();\n\n    // Ensure directories exist\n    await mkdir(path.dirname(unitPath), { recursive: true });\n    await mkdir(logDir, { recursive: true });\n\n    // Build environment\n    const environment: Record<string, string> = {\n      ...args.environment,\n      XOPC_CONFIG: args.env.XOPC_CONFIG || '',\n      XOPC_WORKSPACE: args.env.XOPC_WORKSPACE || '',\n      XOPC_LOG_LEVEL: args.env.XOPC_LOG_LEVEL || 'info',\n      XOPC_LOG_FILE: 'true',\n    };\n\n    if (args.env.XOPC_GATEWAY_TOKEN) {\n      environment.XOPC_GATEWAY_TOKEN = args.env.XOPC_GATEWAY_TOKEN;\n    }\n\n    // Build unit content\n    const unit = buildSystemdUnit({\n      description: 'xopc Gateway Server',\n      execStart: args.programArguments.join(' '),\n      workingDirectory: args.workingDirectory,\n      environment,\n      restart: 'on-failure',\n      restartSec: '5',\n    });\n\n    // Write unit file\n    await writeFile(unitPath, unit, 'utf8');\n    args.stdout?.write(`Written: ${unitPath}\\n`);\n\n    // Reload systemd\n    await systemctl(['daemon-reload'], args.stdout, args.stderr);\n\n    // Enable service\n    await systemctl(['enable', 'xopc-gateway'], args.stdout, args.stderr);\n    log.info('Systemd service installed');\n  },\n\n  async uninstall(args: GatewayServiceControlArgs): Promise<void> {\n    const unitPath = resolveSystemdUnitPath(args.env);\n\n    // Stop if running\n    try {\n      await this.stop(args);\n    } catch {\n      // Ignore errors\n    }\n\n    // Disable service\n    try {\n      await systemctl(['disable', 'xopc-gateway'], args.stdout, args.stderr);\n    } catch {\n      // Ignore errors\n    }\n\n    // Remove unit file\n    if (existsSync(unitPath)) {\n      await rm(unitPath);\n      args.stdout?.write(`Removed: ${unitPath}\\n`);\n    }\n\n    // Reload systemd\n    await systemctl(['daemon-reload'], args.stdout, args.stderr);\n    log.info('Systemd service uninstalled');\n  },\n\n  async start(args: GatewayServiceControlArgs): Promise<void> {\n    await systemctl(['start', 'xopc-gateway'], args.stdout, args.stderr);\n    log.info('Systemd service started');\n  },\n\n  async stop(args: GatewayServiceControlArgs): Promise<void> {\n    await systemctl(['stop', 'xopc-gateway'], args.stdout, args.stderr);\n    log.info('Systemd service stopped');\n  },\n\n  async restart(args: GatewayServiceControlArgs): Promise<void> {\n    await systemctl(['restart', 'xopc-gateway'], args.stdout, args.stderr);\n    log.info('Systemd service restarted');\n  },\n\n  async isLoaded(_args: GatewayServiceEnvArgs): Promise<boolean> {\n    try {\n      execSync('systemctl --user is-enabled xopc-gateway', { stdio: 'ignore' });\n      return true;\n    } catch {\n      return false;\n    }\n  },\n\n  async getRuntime(_args: GatewayServiceEnvArgs): Promise<GatewayServiceRuntime> {\n    try {\n      const stdout = execSync('systemctl --user show xopc-gateway --property=ActiveState,MainPID,ExecMainStatus', { encoding: 'utf-8' });\n      const lines = stdout.trim().split('\\n');\n      let status: 'running' | 'stopped' | 'unknown' = 'unknown';\n      let pid: number | undefined;\n      let lastExitStatus: number | undefined;\n\n      for (const line of lines) {\n        const [key, value] = line.split('=');\n        if (key === 'ActiveState') {\n          status = value === 'active' ? 'running' : value === 'inactive' ? 'stopped' : 'unknown';\n        } else if (key === 'MainPID') {\n          pid = parseInt(value, 10);\n          if (pid === 0) pid = undefined;\n        } else if (key === 'ExecMainStatus') {\n          lastExitStatus = parseInt(value, 10);\n        }\n      }\n\n      return { status, pid, lastExitStatus };\n    } catch {\n      return { status: 'unknown' };\n    }\n  },\n\n  async readCommand(env: NodeJS.ProcessEnv): Promise<GatewayServiceCommandConfig | null> {\n    const unitPath = resolveSystemdUnitPath(env);\n    if (!existsSync(unitPath)) return null;\n\n    const content = await readFile(unitPath, 'utf8');\n    const execStartMatch = content.match(/^ExecStart=(.+)$/m);\n    const workDirMatch = content.match(/^WorkingDirectory=(.+)$/m);\n\n    if (!execStartMatch) return null;\n\n    const execStart = execStartMatch[1].trim();\n    const args = execStart.split(/\\s+/);\n\n    const environment: Record<string, string> = {};\n    const envMatches = content.matchAll(/^Environment=\"([^\"]+)\"/gm);\n    for (const match of envMatches) {\n      const [key, value] = match[1].split('=');\n      environment[key] = value;\n    }\n\n    return {\n      program: args[0],\n      arguments: args.slice(1),\n      environment,\n      workingDirectory: workDirMatch?.[1],\n    };\n  },\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAyBA,SAAS,cAAsB;AAC7B,QAAO,GAAG,UAAU,CAAC;;;;;AAMvB,SAAS,uBAAuB,MAAiC;CAC/D,MAAM,OAAO,GAAG,SAAS;CACzB,MAAM,UAAU,KAAK,KAAK,MAAM,WAAW,WAAW,OAAO;AAC7D,QAAO,KAAK,KAAK,SAAS,uBAAuB;;;;;AAMnD,SAAS,gBAAwB;AAC/B,QAAO,KAAK,KAAK,GAAG,SAAS,EAAE,SAAS,OAAO;;;;;AAMjD,SAAS,iBAAiB,QAOf;CACT,MAAM,UAAU,OAAO,QAAQ,OAAO,YAAY,CAC/C,KAAK,CAAC,GAAG,OAAO,gBAAgB,EAAE,GAAG,EAAE,GAAG,CAC1C,KAAK,KAAK;AAEb,QAAO;cACK,OAAO,YAAY;;;;EAI/B,OAAO,mBAAmB,oBAAoB,OAAO,qBAAqB,GAAG;YACnE,OAAO,UAAU;EAC3B,QAAQ;UACA,OAAO,WAAW,aAAa;aAC5B,OAAO,cAAc,IAAI;;;;EAIpC,MAAM;;;;;AAMR,eAAe,UAAU,MAAgB,QAAmB,QAAkC;AAC5F,KAAI;EACF,MAAM,QAAQ,MAAM,aAAa,CAAC,UAAU,GAAG,KAAK,EAAE,EACpD,OAAO;GAAC;GAAU;GAAQ;GAAO,EAClC,CAAC;EAEF,IAAI,MAAM;EACV,IAAI,MAAM;AAEV,MAAI,MAAM,OACR,OAAM,OAAO,GAAG,SAAS,SAAS;AAAE,UAAO,KAAK,UAAU;IAAI;AAEhE,MAAI,MAAM,OACR,OAAM,OAAO,GAAG,SAAS,SAAS;AAAE,UAAO,KAAK,UAAU;IAAI;AAGhE,QAAM,IAAI,SAAe,SAAS,WAAW;AAC3C,SAAM,GAAG,UAAU,SAAS;AAC1B,QAAI,SAAS,GAAG;AACd,SAAI,UAAU,IAAK,QAAO,MAAM,IAAI;AACpC,SAAI,UAAU,IAAK,QAAO,MAAM,IAAI;AACpC,cAAS;UAET,wBAAO,IAAI,MAAM,8BAA8B,OAAO,CAAC;KAEzD;AACF,SAAM,GAAG,SAAS,OAAO;IACzB;UACK,KAAK;AAEZ,QAAM,IAAI,MAAM,qBADN,IAC6B,WAAW,OAAO,IAAI,GAAG;;;;;;AASpE,SAAgB,qBAA8B;AAC5C,KAAI,QAAQ,aAAa,QAAS,QAAO;AACzC,KAAI;AAKF,SAHe,UAAU,aAAa,CAAC,UAAU,YAAY,EAAE,EAC7D,OAAO;GAAC;GAAU;GAAU;GAAS,EACtC,CAAC,CACY,WAAW;SACnB;AACN,SAAO;;;;;;AAOX,eAAe,kBAAoC;AACjD,KAAI;AAEF,QAAM,OADa,2BAA2B,aAAa,IAClC,UAAU,KAAK;AACxC,SAAO;SACD;AACN,SAAO;;;;;;AAOX,eAAsB,eAA8B;AAClD,KAAI,CAAC,oBAAoB,CACvB,OAAM,IAAI,MAAM,2BAA2B;AAI7C,KADuB,MAAM,iBAAiB,EAC1B;AAClB,MAAI,KAAK,iCAAiC;AAC1C;;AAGF,KAAI;AAEF,WAAS,iCAAiC,aAAa,EAAE,EAAE,OAAO,WAAW,CAAC;AAC9E,MAAI,KAAK,yBAAyB;SAC5B;AAEN,MAAI,KACF,EAAE,SAAS,+BAA+B,aAAa,IAAI,EAC3D,uFACD;AACD,QAAM,IAAI,MACR,uEAAuE,aAAa,CACrF;;;;;cAjK6C;AAW5C,OAAM,aAAa,iBAAiB;AA6J7B,kBAAiC;EAC5C,OAAO;EACP,YAAY;EACZ,eAAe;EAEf,MAAM,QAAQ,MAAgD;GAC5D,MAAM,WAAW,uBAAuB,KAAK,IAAI;GACjD,MAAM,SAAS,eAAe;AAG9B,SAAM,MAAM,KAAK,QAAQ,SAAS,EAAE,EAAE,WAAW,MAAM,CAAC;AACxD,SAAM,MAAM,QAAQ,EAAE,WAAW,MAAM,CAAC;GAGxC,MAAM,cAAsC;IAC1C,GAAG,KAAK;IACR,aAAa,KAAK,IAAI,eAAe;IACrC,gBAAgB,KAAK,IAAI,kBAAkB;IAC3C,gBAAgB,KAAK,IAAI,kBAAkB;IAC3C,eAAe;IAChB;AAED,OAAI,KAAK,IAAI,mBACX,aAAY,qBAAqB,KAAK,IAAI;AAc5C,SAAM,UAAU,UAVH,iBAAiB;IAC5B,aAAa;IACb,WAAW,KAAK,iBAAiB,KAAK,IAAI;IAC1C,kBAAkB,KAAK;IACvB;IACA,SAAS;IACT,YAAY;IACb,CAAC,EAG8B,OAAO;AACvC,QAAK,QAAQ,MAAM,YAAY,SAAS,IAAI;AAG5C,SAAM,UAAU,CAAC,gBAAgB,EAAE,KAAK,QAAQ,KAAK,OAAO;AAG5D,SAAM,UAAU,CAAC,UAAU,eAAe,EAAE,KAAK,QAAQ,KAAK,OAAO;AACrE,OAAI,KAAK,4BAA4B;;EAGvC,MAAM,UAAU,MAAgD;GAC9D,MAAM,WAAW,uBAAuB,KAAK,IAAI;AAGjD,OAAI;AACF,UAAM,KAAK,KAAK,KAAK;WACf;AAKR,OAAI;AACF,UAAM,UAAU,CAAC,WAAW,eAAe,EAAE,KAAK,QAAQ,KAAK,OAAO;WAChE;AAKR,OAAI,WAAW,SAAS,EAAE;AACxB,UAAM,GAAG,SAAS;AAClB,SAAK,QAAQ,MAAM,YAAY,SAAS,IAAI;;AAI9C,SAAM,UAAU,CAAC,gBAAgB,EAAE,KAAK,QAAQ,KAAK,OAAO;AAC5D,OAAI,KAAK,8BAA8B;;EAGzC,MAAM,MAAM,MAAgD;AAC1D,SAAM,UAAU,CAAC,SAAS,eAAe,EAAE,KAAK,QAAQ,KAAK,OAAO;AACpE,OAAI,KAAK,0BAA0B;;EAGrC,MAAM,KAAK,MAAgD;AACzD,SAAM,UAAU,CAAC,QAAQ,eAAe,EAAE,KAAK,QAAQ,KAAK,OAAO;AACnE,OAAI,KAAK,0BAA0B;;EAGrC,MAAM,QAAQ,MAAgD;AAC5D,SAAM,UAAU,CAAC,WAAW,eAAe,EAAE,KAAK,QAAQ,KAAK,OAAO;AACtE,OAAI,KAAK,4BAA4B;;EAGvC,MAAM,SAAS,OAAgD;AAC7D,OAAI;AACF,aAAS,4CAA4C,EAAE,OAAO,UAAU,CAAC;AACzE,WAAO;WACD;AACN,WAAO;;;EAIX,MAAM,WAAW,OAA8D;AAC7E,OAAI;IAEF,MAAM,QADS,SAAS,oFAAoF,EAAE,UAAU,SAAS,CAAC,CAC7G,MAAM,CAAC,MAAM,KAAK;IACvC,IAAI,SAA4C;IAChD,IAAI;IACJ,IAAI;AAEJ,SAAK,MAAM,QAAQ,OAAO;KACxB,MAAM,CAAC,KAAK,SAAS,KAAK,MAAM,IAAI;AACpC,SAAI,QAAQ,cACV,UAAS,UAAU,WAAW,YAAY,UAAU,aAAa,YAAY;cACpE,QAAQ,WAAW;AAC5B,YAAM,SAAS,OAAO,GAAG;AACzB,UAAI,QAAQ,EAAG,OAAM,KAAA;gBACZ,QAAQ,iBACjB,kBAAiB,SAAS,OAAO,GAAG;;AAIxC,WAAO;KAAE;KAAQ;KAAK;KAAgB;WAChC;AACN,WAAO,EAAE,QAAQ,WAAW;;;EAIhC,MAAM,YAAY,KAAqE;GACrF,MAAM,WAAW,uBAAuB,IAAI;AAC5C,OAAI,CAAC,WAAW,SAAS,CAAE,QAAO;GAElC,MAAM,UAAU,MAAM,SAAS,UAAU,OAAO;GAChD,MAAM,iBAAiB,QAAQ,MAAM,oBAAoB;GACzD,MAAM,eAAe,QAAQ,MAAM,2BAA2B;AAE9D,OAAI,CAAC,eAAgB,QAAO;GAG5B,MAAM,OADY,eAAe,GAAG,MAAM,CACnB,MAAM,MAAM;GAEnC,MAAM,cAAsC,EAAE;GAC9C,MAAM,aAAa,QAAQ,SAAS,2BAA2B;AAC/D,QAAK,MAAM,SAAS,YAAY;IAC9B,MAAM,CAAC,KAAK,SAAS,MAAM,GAAG,MAAM,IAAI;AACxC,gBAAY,OAAO;;AAGrB,UAAO;IACL,SAAS,KAAK;IACd,WAAW,KAAK,MAAM,EAAE;IACxB;IACA,kBAAkB,eAAe;IAClC;;EAEJ"}
+{"version":3,"file":"systemd.js","names":["constants"],"sources":["../../../src/daemon/systemd.ts"],"sourcesContent":["/**\n * Systemd Service - Linux user service management\n */\n\nimport { writeFile, mkdir, readFile, rm, access, constants } from 'node:fs/promises';\nimport { existsSync } from 'node:fs';\nimport { spawn, execSync } from 'node:child_process';\nimport path from 'node:path';\nimport os from 'node:os';\nimport { createLogger } from '../utils/logger.js';\nimport type {\n  GatewayService,\n  GatewayServiceInstallArgs,\n  GatewayServiceControlArgs,\n  GatewayServiceEnvArgs,\n  GatewayServiceRuntime,\n  GatewayServiceCommandConfig,\n} from './types.js';\nimport type { Writable } from 'node:stream';\n\nconst log = createLogger('SystemdService');\n\n/**\n * Get username\n */\nfunction getUsername(): string {\n  return os.userInfo().username;\n}\n\n/**\n * Resolve systemd unit path\n */\nfunction resolveSystemdUnitPath(_env: NodeJS.ProcessEnv): string {\n  const home = os.homedir();\n  const xopcDir = path.join(home, '.config', 'systemd', 'user');\n  return path.join(xopcDir, 'xopc-gateway.service');\n}\n\n/**\n * Resolve log directory\n */\nfunction resolveLogDir(): string {\n  return path.join(os.homedir(), '.xopc', 'logs');\n}\n\n/**\n * Build systemd unit content\n */\nfunction buildSystemdUnit(params: {\n  description: string;\n  execStart: string;\n  workingDirectory?: string;\n  environment: Record<string, string>;\n  restart?: string;\n  restartSec?: string;\n}): string {\n  const envVars = Object.entries(params.environment)\n    .map(([k, v]) => `Environment=\"${k}=${v}\"`)\n    .join('\\n');\n\n  return `[Unit]\nDescription=${params.description}\nAfter=network.target\n\n[Service]\n${params.workingDirectory ? `WorkingDirectory=${params.workingDirectory}` : ''}\nExecStart=${params.execStart}\n${envVars}\nRestart=${params.restart || 'on-failure'}\nRestartSec=${params.restartSec || '5'}\n\n[Install]\nWantedBy=default.target\n`.trim();\n}\n\n/**\n * Execute systemctl command\n */\nasync function systemctl(args: string[], stdout?: Writable, stderr?: Writable): Promise<void> {\n  try {\n    const child = spawn('systemctl', ['--user', ...args], {\n      stdio: ['ignore', 'pipe', 'pipe'],\n    });\n    \n    let out = '';\n    let err = '';\n    \n    if (child.stdout) {\n      child.stdout.on('data', (data) => { out += data.toString(); });\n    }\n    if (child.stderr) {\n      child.stderr.on('data', (data) => { err += data.toString(); });\n    }\n    \n    await new Promise<void>((resolve, reject) => {\n      child.on('close', (code) => {\n        if (code === 0) {\n          if (stdout && out) stdout.write(out);\n          if (stderr && err) stderr.write(err);\n          resolve();\n        } else {\n          reject(new Error(`systemctl exited with code ${code}`));\n        }\n      });\n      child.on('error', reject);\n    });\n  } catch (err) {\n    const e = err as { message?: string };\n    throw new Error(`systemctl failed: ${e.message || String(err)}`);\n  }\n}\n\nimport { spawnSync } from 'node:child_process';\n\n/**\n * Check if systemd is available\n */\nexport function isSystemdAvailable(): boolean {\n  if (process.platform !== 'linux') return false;\n  try {\n    // Use spawnSync to avoid require in ESM\n    const result = spawnSync('systemctl', ['--user', '--version'], {\n      stdio: ['ignore', 'ignore', 'ignore'],\n    });\n    return result.status === 0;\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Check if user lingering is enabled\n */\nasync function isLingerEnabled(): Promise<boolean> {\n  try {\n    const lingerPath = `/var/lib/systemd/linger/${getUsername()}`;\n    await access(lingerPath, constants.F_OK);\n    return true;\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Enable user lingering (so service runs after logout)\n */\nexport async function enableLinger(): Promise<void> {\n  if (!isSystemdAvailable()) {\n    throw new Error('systemd is not available');\n  }\n\n  const alreadyEnabled = await isLingerEnabled();\n  if (alreadyEnabled) {\n    log.info('User lingering already enabled');\n    return;\n  }\n\n  try {\n    // Try to enable linger (requires root)\n    execSync('sudo loginctl enable-linger ' + getUsername(), { stdio: 'inherit' });\n    log.info('Enabled user lingering');\n  } catch {\n    // If sudo fails, try without sudo (may work on some systems)\n    log.warn(\n      { command: `sudo loginctl enable-linger ${getUsername()}` },\n      'Failed to enable systemd user linger (sudo/loginctl); gateway may not survive logout',\n    );\n    throw new Error(\n      'Failed to enable user lingering. Run: sudo loginctl enable-linger ' + getUsername()\n    );\n  }\n}\n\n/**\n * Systemd service implementation\n */\nexport const systemdService: GatewayService = {\n  label: 'xopc-gateway',\n  loadedText: 'xopc-gateway.service',\n  notLoadedText: 'xopc-gateway.service',\n\n  async install(args: GatewayServiceInstallArgs): Promise<void> {\n    const unitPath = resolveSystemdUnitPath(args.env);\n    const logDir = resolveLogDir();\n\n    // Ensure directories exist\n    await mkdir(path.dirname(unitPath), { recursive: true });\n    await mkdir(logDir, { recursive: true });\n\n    // Build environment\n    const environment: Record<string, string> = {\n      ...args.environment,\n      XOPC_CONFIG: args.env.XOPC_CONFIG || '',\n      XOPC_WORKSPACE: args.env.XOPC_WORKSPACE || '',\n      XOPC_LOG_LEVEL: args.env.XOPC_LOG_LEVEL || 'info',\n      XOPC_LOG_FILE: 'true',\n    };\n\n    if (args.env.XOPC_GATEWAY_TOKEN) {\n      environment.XOPC_GATEWAY_TOKEN = args.env.XOPC_GATEWAY_TOKEN;\n    }\n\n    // Build unit content\n    const unit = buildSystemdUnit({\n      description: 'xopc Gateway Server',\n      execStart: args.programArguments.join(' '),\n      workingDirectory: args.workingDirectory,\n      environment,\n      restart: 'on-failure',\n      restartSec: '5',\n    });\n\n    // Write unit file\n    await writeFile(unitPath, unit, 'utf8');\n    args.stdout?.write(`Written: ${unitPath}\\n`);\n\n    // Reload systemd\n    await systemctl(['daemon-reload'], args.stdout, args.stderr);\n\n    // Enable service\n    await systemctl(['enable', 'xopc-gateway'], args.stdout, args.stderr);\n    log.info('Systemd service installed');\n  },\n\n  async uninstall(args: GatewayServiceControlArgs): Promise<void> {\n    const unitPath = resolveSystemdUnitPath(args.env);\n\n    // Stop if running\n    try {\n      await this.stop(args);\n    } catch {\n      // Ignore errors\n    }\n\n    // Disable service\n    try {\n      await systemctl(['disable', 'xopc-gateway'], args.stdout, args.stderr);\n    } catch {\n      // Ignore errors\n    }\n\n    // Remove unit file\n    if (existsSync(unitPath)) {\n      await rm(unitPath);\n      args.stdout?.write(`Removed: ${unitPath}\\n`);\n    }\n\n    // Reload systemd\n    await systemctl(['daemon-reload'], args.stdout, args.stderr);\n    log.info('Systemd service uninstalled');\n  },\n\n  async start(args: GatewayServiceControlArgs): Promise<void> {\n    await systemctl(['start', 'xopc-gateway'], args.stdout, args.stderr);\n    log.info('Systemd service started');\n  },\n\n  async stop(args: GatewayServiceControlArgs): Promise<void> {\n    await systemctl(['stop', 'xopc-gateway'], args.stdout, args.stderr);\n    log.info('Systemd service stopped');\n  },\n\n  async restart(args: GatewayServiceControlArgs): Promise<void> {\n    await systemctl(['restart', 'xopc-gateway'], args.stdout, args.stderr);\n    log.info('Systemd service restarted');\n  },\n\n  async isLoaded(_args: GatewayServiceEnvArgs): Promise<boolean> {\n    try {\n      execSync('systemctl --user is-enabled xopc-gateway', { stdio: 'ignore' });\n      return true;\n    } catch {\n      return false;\n    }\n  },\n\n  async getRuntime(_args: GatewayServiceEnvArgs): Promise<GatewayServiceRuntime> {\n    try {\n      const stdout = execSync('systemctl --user show xopc-gateway --property=ActiveState,MainPID,ExecMainStatus', { encoding: 'utf-8' });\n      const lines = stdout.trim().split('\\n');\n      let status: 'running' | 'stopped' | 'unknown' = 'unknown';\n      let pid: number | undefined;\n      let lastExitStatus: number | undefined;\n\n      for (const line of lines) {\n        const [key, value] = line.split('=');\n        if (key === 'ActiveState') {\n          status = value === 'active' ? 'running' : value === 'inactive' ? 'stopped' : 'unknown';\n        } else if (key === 'MainPID') {\n          pid = parseInt(value, 10);\n          if (pid === 0) pid = undefined;\n        } else if (key === 'ExecMainStatus') {\n          lastExitStatus = parseInt(value, 10);\n        }\n      }\n\n      return { status, pid, lastExitStatus };\n    } catch {\n      return { status: 'unknown' };\n    }\n  },\n\n  async readCommand(env: NodeJS.ProcessEnv): Promise<GatewayServiceCommandConfig | null> {\n    const unitPath = resolveSystemdUnitPath(env);\n    if (!existsSync(unitPath)) return null;\n\n    const content = await readFile(unitPath, 'utf8');\n    const execStartMatch = content.match(/^ExecStart=(.+)$/m);\n    const workDirMatch = content.match(/^WorkingDirectory=(.+)$/m);\n\n    if (!execStartMatch) return null;\n\n    const execStart = execStartMatch[1].trim();\n    const args = execStart.split(/\\s+/);\n\n    const environment: Record<string, string> = {};\n    const envMatches = content.matchAll(/^Environment=\"([^\"]+)\"/gm);\n    for (const match of envMatches) {\n      const [key, value] = match[1].split('=');\n      environment[key] = value;\n    }\n\n    return {\n      program: args[0],\n      arguments: args.slice(1),\n      environment,\n      workingDirectory: workDirMatch?.[1],\n    };\n  },\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAyBA,SAAS,cAAsB;AAC7B,QAAO,GAAG,UAAU,CAAC;;;;;AAMvB,SAAS,uBAAuB,MAAiC;CAC/D,MAAM,OAAO,GAAG,SAAS;CACzB,MAAM,UAAU,KAAK,KAAK,MAAM,WAAW,WAAW,OAAO;AAC7D,QAAO,KAAK,KAAK,SAAS,uBAAuB;;;;;AAMnD,SAAS,gBAAwB;AAC/B,QAAO,KAAK,KAAK,GAAG,SAAS,EAAE,SAAS,OAAO;;;;;AAMjD,SAAS,iBAAiB,QAOf;CACT,MAAM,UAAU,OAAO,QAAQ,OAAO,YAAY,CAC/C,KAAK,CAAC,GAAG,OAAO,gBAAgB,EAAE,GAAG,EAAE,GAAG,CAC1C,KAAK,KAAK;AAEb,QAAO;cACK,OAAO,YAAY;;;;EAI/B,OAAO,mBAAmB,oBAAoB,OAAO,qBAAqB,GAAG;YACnE,OAAO,UAAU;EAC3B,QAAQ;UACA,OAAO,WAAW,aAAa;aAC5B,OAAO,cAAc,IAAI;;;;EAIpC,MAAM;;;;;AAMR,eAAe,UAAU,MAAgB,QAAmB,QAAkC;AAC5F,KAAI;EACF,MAAM,QAAQ,MAAM,aAAa,CAAC,UAAU,GAAG,KAAK,EAAE,EACpD,OAAO;GAAC;GAAU;GAAQ;GAAO,EAClC,CAAC;EAEF,IAAI,MAAM;EACV,IAAI,MAAM;AAEV,MAAI,MAAM,OACR,OAAM,OAAO,GAAG,SAAS,SAAS;AAAE,UAAO,KAAK,UAAU;IAAI;AAEhE,MAAI,MAAM,OACR,OAAM,OAAO,GAAG,SAAS,SAAS;AAAE,UAAO,KAAK,UAAU;IAAI;AAGhE,QAAM,IAAI,SAAe,SAAS,WAAW;AAC3C,SAAM,GAAG,UAAU,SAAS;AAC1B,QAAI,SAAS,GAAG;AACd,SAAI,UAAU,IAAK,QAAO,MAAM,IAAI;AACpC,SAAI,UAAU,IAAK,QAAO,MAAM,IAAI;AACpC,cAAS;UAET,wBAAO,IAAI,MAAM,8BAA8B,OAAO,CAAC;KAEzD;AACF,SAAM,GAAG,SAAS,OAAO;IACzB;UACK,KAAK;AAEZ,QAAM,IAAI,MAAM,qBADN,IAC6B,WAAW,OAAO,IAAI,GAAG;;;;;;AASpE,SAAgB,qBAA8B;AAC5C,KAAI,QAAQ,aAAa,QAAS,QAAO;AACzC,KAAI;AAKF,SAHe,UAAU,aAAa,CAAC,UAAU,YAAY,EAAE,EAC7D,OAAO;GAAC;GAAU;GAAU;GAAS,EACtC,CAAC,CACY,WAAW;SACnB;AACN,SAAO;;;;;;AAOX,eAAe,kBAAoC;AACjD,KAAI;AAEF,QAAM,OADa,2BAA2B,aAAa,IAClCA,YAAU,KAAK;AACxC,SAAO;SACD;AACN,SAAO;;;;;;AAOX,eAAsB,eAA8B;AAClD,KAAI,CAAC,oBAAoB,CACvB,OAAM,IAAI,MAAM,2BAA2B;AAI7C,KADuB,MAAM,iBAAiB,EAC1B;AAClB,MAAI,KAAK,iCAAiC;AAC1C;;AAGF,KAAI;AAEF,WAAS,iCAAiC,aAAa,EAAE,EAAE,OAAO,WAAW,CAAC;AAC9E,MAAI,KAAK,yBAAyB;SAC5B;AAEN,MAAI,KACF,EAAE,SAAS,+BAA+B,aAAa,IAAI,EAC3D,uFACD;AACD,QAAM,IAAI,MACR,uEAAuE,aAAa,CACrF;;;;;cAjK6C;AAW5C,OAAM,aAAa,iBAAiB;AA6J7B,kBAAiC;EAC5C,OAAO;EACP,YAAY;EACZ,eAAe;EAEf,MAAM,QAAQ,MAAgD;GAC5D,MAAM,WAAW,uBAAuB,KAAK,IAAI;GACjD,MAAM,SAAS,eAAe;AAG9B,SAAM,MAAM,KAAK,QAAQ,SAAS,EAAE,EAAE,WAAW,MAAM,CAAC;AACxD,SAAM,MAAM,QAAQ,EAAE,WAAW,MAAM,CAAC;GAGxC,MAAM,cAAsC;IAC1C,GAAG,KAAK;IACR,aAAa,KAAK,IAAI,eAAe;IACrC,gBAAgB,KAAK,IAAI,kBAAkB;IAC3C,gBAAgB,KAAK,IAAI,kBAAkB;IAC3C,eAAe;IAChB;AAED,OAAI,KAAK,IAAI,mBACX,aAAY,qBAAqB,KAAK,IAAI;AAc5C,SAAM,UAAU,UAVH,iBAAiB;IAC5B,aAAa;IACb,WAAW,KAAK,iBAAiB,KAAK,IAAI;IAC1C,kBAAkB,KAAK;IACvB;IACA,SAAS;IACT,YAAY;IACb,CAAC,EAG8B,OAAO;AACvC,QAAK,QAAQ,MAAM,YAAY,SAAS,IAAI;AAG5C,SAAM,UAAU,CAAC,gBAAgB,EAAE,KAAK,QAAQ,KAAK,OAAO;AAG5D,SAAM,UAAU,CAAC,UAAU,eAAe,EAAE,KAAK,QAAQ,KAAK,OAAO;AACrE,OAAI,KAAK,4BAA4B;;EAGvC,MAAM,UAAU,MAAgD;GAC9D,MAAM,WAAW,uBAAuB,KAAK,IAAI;AAGjD,OAAI;AACF,UAAM,KAAK,KAAK,KAAK;WACf;AAKR,OAAI;AACF,UAAM,UAAU,CAAC,WAAW,eAAe,EAAE,KAAK,QAAQ,KAAK,OAAO;WAChE;AAKR,OAAI,WAAW,SAAS,EAAE;AACxB,UAAM,GAAG,SAAS;AAClB,SAAK,QAAQ,MAAM,YAAY,SAAS,IAAI;;AAI9C,SAAM,UAAU,CAAC,gBAAgB,EAAE,KAAK,QAAQ,KAAK,OAAO;AAC5D,OAAI,KAAK,8BAA8B;;EAGzC,MAAM,MAAM,MAAgD;AAC1D,SAAM,UAAU,CAAC,SAAS,eAAe,EAAE,KAAK,QAAQ,KAAK,OAAO;AACpE,OAAI,KAAK,0BAA0B;;EAGrC,MAAM,KAAK,MAAgD;AACzD,SAAM,UAAU,CAAC,QAAQ,eAAe,EAAE,KAAK,QAAQ,KAAK,OAAO;AACnE,OAAI,KAAK,0BAA0B;;EAGrC,MAAM,QAAQ,MAAgD;AAC5D,SAAM,UAAU,CAAC,WAAW,eAAe,EAAE,KAAK,QAAQ,KAAK,OAAO;AACtE,OAAI,KAAK,4BAA4B;;EAGvC,MAAM,SAAS,OAAgD;AAC7D,OAAI;AACF,aAAS,4CAA4C,EAAE,OAAO,UAAU,CAAC;AACzE,WAAO;WACD;AACN,WAAO;;;EAIX,MAAM,WAAW,OAA8D;AAC7E,OAAI;IAEF,MAAM,QADS,SAAS,oFAAoF,EAAE,UAAU,SAAS,CAAC,CAC7G,MAAM,CAAC,MAAM,KAAK;IACvC,IAAI,SAA4C;IAChD,IAAI;IACJ,IAAI;AAEJ,SAAK,MAAM,QAAQ,OAAO;KACxB,MAAM,CAAC,KAAK,SAAS,KAAK,MAAM,IAAI;AACpC,SAAI,QAAQ,cACV,UAAS,UAAU,WAAW,YAAY,UAAU,aAAa,YAAY;cACpE,QAAQ,WAAW;AAC5B,YAAM,SAAS,OAAO,GAAG;AACzB,UAAI,QAAQ,EAAG,OAAM,KAAA;gBACZ,QAAQ,iBACjB,kBAAiB,SAAS,OAAO,GAAG;;AAIxC,WAAO;KAAE;KAAQ;KAAK;KAAgB;WAChC;AACN,WAAO,EAAE,QAAQ,WAAW;;;EAIhC,MAAM,YAAY,KAAqE;GACrF,MAAM,WAAW,uBAAuB,IAAI;AAC5C,OAAI,CAAC,WAAW,SAAS,CAAE,QAAO;GAElC,MAAM,UAAU,MAAM,SAAS,UAAU,OAAO;GAChD,MAAM,iBAAiB,QAAQ,MAAM,oBAAoB;GACzD,MAAM,eAAe,QAAQ,MAAM,2BAA2B;AAE9D,OAAI,CAAC,eAAgB,QAAO;GAG5B,MAAM,OADY,eAAe,GAAG,MAAM,CACnB,MAAM,MAAM;GAEnC,MAAM,cAAsC,EAAE;GAC9C,MAAM,aAAa,QAAQ,SAAS,2BAA2B;AAC/D,QAAK,MAAM,SAAS,YAAY;IAC9B,MAAM,CAAC,KAAK,SAAS,MAAM,GAAG,MAAM,IAAI;AACxC,gBAAY,OAAO;;AAGrB,UAAO;IACL,SAAS,KAAK;IACd,WAAW,KAAK,MAAM,EAAE;IACxB;IACA,kBAAkB,eAAe;IAClC;;EAEJ"}

package/dist/src/extensions/health.js

@@ -1,8 +1,8 @@
 import { init_paths, resolveExtensionsDir } from "../config/paths.js";
 import { getExtensionLockfileManager } from "./lockfile.js";
+import { readFile, readdir } from "fs/promises";
 import { join } from "path";
 import { existsSync } from "fs";
-import { readFile, readdir } from "fs/promises";
 //#region src/extensions/health.ts
 init_paths();
 var ExtensionHealthChecker = class {

package/dist/src/extensions/loader.d.ts

@@ -150,5 +150,5 @@ export declare class ExtensionLoader {
      */
     private validateType;
 }
-export declare function resolveExtensionPath(id: string, options: ExtensionLoaderOptions): string | null;
+export declare function resolveExtensionPath(id: string, _options: ExtensionLoaderOptions): string | null;
 export declare function normalizeExtensionConfig(rawConfig: Record<string, unknown>): ResolvedExtensionConfig[];

package/dist/src/extensions/loader.js

@@ -3,6 +3,7 @@ import { init_logger } from "../utils/logger.js";
 import { init_agent_scope, resolveAgentWorkspaceDir, resolveDefaultAgentId } from "../agent/agent-scope.js";
 import { init_paths, resolveBundledExtensionsDir, resolveExtensionSdkPath, resolveExtensionsDir, resolveWorkspaceExtensionsDir } from "../config/paths.js";
 import { init_loader, loadConfig } from "../config/loader.js";
+import { getProviderRegistry, init_plugin_registry } from "../providers/plugin-registry.js";
 import { ActivationPlanner } from "./activation-planner.js";
 import { mergeActivationContext } from "./activation-context.js";
 import { ManifestRegistry } from "./manifest-registry.js";
@@ -10,7 +11,6 @@ import { normalizeExtensionManifest } from "./normalize-manifest.js";
 import { bundledChannelPlugins } from "../generated/bundled-channel-plugins.js";
 import "../channels/plugins/bundled.js";
 import { DEFAULT_SECURITY_CONFIG, checkExtensionPathSafety, isExtensionAllowed, logSecurityIssue, provenanceTracker } from "./security.js";
-import { getProviderRegistry } from "../providers/plugin-registry.js";
 import { getSlotRegistry } from "./slots.js";
 import { getExtensionCache, getExtensionDiagnostics } from "./diagnostics.js";
 import { ExtensionApiImpl, createExtensionLogger, createPathResolver } from "./api.js";
@@ -32,6 +32,7 @@ init_agent_scope();
 init_loader();
 init_paths();
 init_logger();
+init_plugin_registry();
 const EXTENSION_MANIFEST_FILE = "xopc.extension.json";
 const log = createLogger("ExtensionLoader");
 var ExtensionRegistryImpl = class {
@@ -305,9 +306,7 @@ var ExtensionLoader = class {
 		const globalDir = resolveExtensionsDir();
 		this.discoverInDirectory(globalDir, "global", discovered);
 		const c = loadConfig();
-		const aid = resolveDefaultAgentId(c);
-		this.options.workspaceDir || resolveAgentWorkspaceDir(c, aid);
-		const workspaceExtensionsDir = resolveWorkspaceExtensionsDir(c, aid);
+		const workspaceExtensionsDir = resolveWorkspaceExtensionsDir(c, resolveDefaultAgentId(c));
 		this.discoverInDirectory(workspaceExtensionsDir, "workspace", discovered);
 		return Array.from(discovered.values());
 	}
@@ -658,11 +657,9 @@ var ExtensionLoader = class {
 		return true;
 	}
 };
-function resolveExtensionPath(id, options) {
+function resolveExtensionPath(id, _options) {
 	const c = loadConfig();
-	const aid = resolveDefaultAgentId(c);
-	options.workspaceDir || resolveAgentWorkspaceDir(c, aid);
-	const workspacePath = join(resolveWorkspaceExtensionsDir(c, aid), id);
+	const workspacePath = join(resolveWorkspaceExtensionsDir(c, resolveDefaultAgentId(c)), id);
 	if (existsSync(workspacePath)) return workspacePath;
 	const globalPath = join(resolveExtensionsDir(), id);
 	if (existsSync(globalPath)) return globalPath;

package/dist/src/extensions/loader.js.map

@@ -1 +1 @@
-{"version":3,"file":"loader.js","names":[],"sources":["../../../src/extensions/loader.ts"],"sourcesContent":["/**\n * Extension Loader and Registry\n * \n * Supports three-tier extension storage:\n * 1. Workspace level (workspace/.extensions/) - highest priority\n * 2. Global level (~/.xopc/extensions/) - shared across workspaces\n * 3. Bundled level (xopc/extensions/) - shipped with xopc\n */\n\nimport { existsSync, readFileSync, readdirSync } from 'fs';\nimport { join, dirname, isAbsolute } from 'path';\nimport { fileURLToPath } from 'node:url';\nimport { createRequire } from 'node:module';\nimport { createJiti } from 'jiti';\nimport { resolveDefaultAgentId } from '../agent/agent-scope.js';\nimport { loadConfig } from '../config/loader.js';\nimport {\n  resolveAgentWorkspaceDir,\n  resolveExtensionsDir,\n  resolveWorkspaceExtensionsDir,\n  resolveBundledExtensionsDir,\n  resolveExtensionSdkPath,\n} from '../config/paths.js';\nimport type { Config } from '../config/config-surface.js';\nimport type { MessageBus } from '../infra/bus/index.js';\nimport type { SessionManager } from '../session/manager.js';\nimport type { AgentTool } from '@mariozechner/pi-agent-core';\nimport type {\n  ExtensionApi,\n  ExtensionModule,\n  ExtensionRegistry,\n  ExtensionCliRegistration,\n  GatewayMethodHandler,\n  HttpRequestHandler,\n  ExtensionCommand,\n  ExtensionService,\n  ExtensionHookEvent,\n  ExtensionHookHandler,\n  ExtensionManifest,\n  ExtensionRecord,\n  ResolvedExtensionConfig,\n  DiscoveredExtension,\n} from './types/index.js';\nimport type { ActivationContext } from './activation-planner.js';\nimport { ActivationPlanner } from './activation-planner.js';\nimport { mergeActivationContext } from './activation-context.js';\nimport { ManifestRegistry } from './manifest-registry.js';\nimport { normalizeExtensionManifest } from './normalize-manifest.js';\nimport type { ChannelPlugin } from '../channels/plugin-types.js';\nimport { bundledChannelPlugins } from '../channels/plugins/bundled.js';\nimport { ExtensionApiImpl, createExtensionLogger, createPathResolver } from './api.js';\nimport { createLogger, createServiceLogger } from '../utils/logger.js';\n\n//  Security imports\nimport {\n  checkExtensionPathSafety,\n  isExtensionAllowed,\n  provenanceTracker,\n  logSecurityIssue,\n  DEFAULT_SECURITY_CONFIG,\n  type SecurityConfig,\n  // Note: ExtensionSourceOrigin is defined locally in this file\n} from './security.js';\n\n//  Provider imports\nimport { getProviderRegistry, type ProviderPluginRegistry } from '../providers/plugin-registry.js';\n\n//  Slot imports\nimport {\n  getSlotRegistry,\n  type SlotRegistry,\n  type SlotKey,\n} from './slots.js';\n\n//  Diagnostics imports\nimport {\n  getExtensionCache,\n  getExtensionDiagnostics,\n  type ExtensionLoaderCache,\n  type ExtensionDiagnostics,\n} from './diagnostics.js';\n\nconst EXTENSION_MANIFEST_FILE = 'xopc.extension.json';\n\nconst log = createLogger('ExtensionLoader');\n\n// Extension source origin for debugging\nexport type ExtensionSourceOrigin = 'workspace' | 'global' | 'bundled' | 'config';\n\n// ============================================================================\n// Extension Registry\n// ============================================================================\n\nexport class ExtensionRegistryImpl implements ExtensionRegistry {\n  extensions = new Map<string, ExtensionRecord>();\n  hooks = new Map<ExtensionHookEvent, ExtensionHookHandler[]>();\n  httpRoutes = new Map<string, HttpRequestHandler>();\n  commands = new Map<string, ExtensionCommand>();\n  services = new Map<string, ExtensionService>();\n  gatewayMethods = new Map<string, GatewayMethodHandler>();\n  tools = new Map<string, AgentTool>();\n  channelPlugins: ChannelPlugin[] = [];\n  private cliRegistrations: ExtensionCliRegistration[] = [];\n\n  addExtension(record: ExtensionRecord): void {\n    this.extensions.set(record.id, record);\n  }\n\n  getExtension(id: string): ExtensionRecord | undefined {\n    return this.extensions.get(id);\n  }\n\n  getEnabledExtensions(): ExtensionRecord[] {\n    return Array.from(this.extensions.values()).filter((p) => p.enabled);\n  }\n\n  addHook(\n    event: ExtensionHookEvent,\n    handler: ExtensionHookHandler,\n    extensionId: string,\n    _priority = 0,\n  ): void {\n    if (!this.hooks.has(event)) {\n      this.hooks.set(event, []);\n    }\n    this.hooks.get(event)!.push(handler);\n  }\n\n  getHooks(event: ExtensionHookEvent): ExtensionHookHandler[] {\n    return this.hooks.get(event) || [];\n  }\n\n  addChannelPlugin(plugin: ChannelPlugin): void {\n    this.channelPlugins = this.channelPlugins.filter((p) => p.id !== plugin.id);\n    this.channelPlugins.push(plugin);\n  }\n\n  addHttpRoute(path: string, handler: HttpRequestHandler): void {\n    if (this.httpRoutes.has(path)) {\n      log.warn({ path }, `HTTP route already registered, overwriting`);\n    }\n    this.httpRoutes.set(path, handler);\n  }\n\n  getHttpRoute(path: string): HttpRequestHandler | undefined {\n    return this.httpRoutes.get(path);\n  }\n\n  addCommand(command: ExtensionCommand): void {\n    if (this.commands.has(command.name)) {\n      log.warn({ command: command.name }, `Command already registered, overwriting`);\n    }\n    this.commands.set(command.name, command);\n  }\n\n  getCommand(name: string): ExtensionCommand | undefined {\n    return this.commands.get(name);\n  }\n\n  addService(service: ExtensionService): void {\n    if (this.services.has(service.id)) {\n      log.warn({ service: service.id }, `Service already registered, overwriting`);\n    }\n    this.services.set(service.id, service);\n  }\n\n  getService(id: string): ExtensionService | undefined {\n    return this.services.get(id);\n  }\n\n  addGatewayMethod(method: string, handler: GatewayMethodHandler): void {\n    if (this.gatewayMethods.has(method)) {\n      log.warn({ method }, `Gateway method already registered, overwriting`);\n    }\n    this.gatewayMethods.set(method, handler);\n  }\n\n  getGatewayMethod(method: string): GatewayMethodHandler | undefined {\n    return this.gatewayMethods.get(method);\n  }\n\n  // Tools\n  addTool(tool: AgentTool): void {\n    if (this.tools.has(tool.name)) {\n      log.warn({ tool: tool.name }, `Tool already registered, overwriting`);\n    }\n    this.tools.set(tool.name, tool);\n  }\n\n  removeTool(name: string): void {\n    this.tools.delete(name);\n  }\n\n  getTools(): Map<string, AgentTool> {\n    return this.tools;\n  }\n\n  getTool(name: string): AgentTool | undefined {\n    return this.tools.get(name);\n  }\n\n  getAllTools(): AgentTool[] {\n    return Array.from(this.tools.values());\n  }\n\n  addCliRegistration(reg: ExtensionCliRegistration): void {\n    this.cliRegistrations.push(reg);\n  }\n\n  getCliRegistrations(): readonly ExtensionCliRegistration[] {\n    return this.cliRegistrations;\n  }\n}\n\n// ============================================================================\n// Extension Loader\n// ============================================================================\n\nexport interface ExtensionLoaderOptions {\n  workspaceDir?: string;\n  extensionsDir?: string;\n  bundledExtensions?: string[];\n}\n\nexport class ExtensionLoader {\n  private registry: ExtensionRegistryImpl;\n  private options: ExtensionLoaderOptions;\n  private extensionInstances: Map<string, ExtensionApi> = new Map();\n  private jiti: ReturnType<typeof createJiti>;\n  private _appConfig?: Config;\n  private _runtimeContext?: { bus: MessageBus; sessionManager?: SessionManager };\n  \n  //  Security\n  private securityConfig: SecurityConfig;\n  \n  //  Provider Registry\n  private providerRegistry: ProviderPluginRegistry;\n  \n  //  Slot Registry & Config\n  private slotRegistry: SlotRegistry;\n  private slotsConfig: Partial<Record<SlotKey, string>> = {};\n  \n  //  Cache and Diagnostics\n  private cache: ExtensionLoaderCache;\n  private diagnostics: ExtensionDiagnostics;\n\n  /** Manifest-only registry cache (no runtime module load). */\n  private manifestRegistry: ManifestRegistry | null = null;\n\n  constructor(options?: ExtensionLoaderOptions) {\n    this.registry = new ExtensionRegistryImpl();\n    for (const p of bundledChannelPlugins) {\n      this.registry.addChannelPlugin(p);\n    }\n    this.options = options || (() => {\n      const c = loadConfig();\n      const aid = resolveDefaultAgentId(c);\n      return {\n        workspaceDir: resolveAgentWorkspaceDir(c, aid),\n        extensionsDir: resolveWorkspaceExtensionsDir(c, aid),\n      };\n    })();\n\n    // Initialize security config\n    this.securityConfig = DEFAULT_SECURITY_CONFIG;\n    \n    // Initialize provider registry\n    this.providerRegistry = getProviderRegistry();\n    \n    // Initialize slot registry\n    this.slotRegistry = getSlotRegistry();\n    \n    // Initialize cache and diagnostics \n    this.cache = getExtensionCache();\n    this.diagnostics = getExtensionDiagnostics();\n\n    // Build jiti alias for extension-sdk (+ subpath entry points)\n    const alias: Record<string, string> = {};\n    const sdkPath = resolveExtensionSdkPath();\n    if (sdkPath) {\n      alias['xopc/extension-sdk'] = sdkPath;\n      const sdkDir = dirname(sdkPath);\n      alias['xopc/extension-sdk/core'] = join(sdkDir, 'core.ts');\n      alias['xopc/extension-sdk/lazy'] = join(sdkDir, 'lazy.ts');\n      alias['xopc/extension-sdk/provider'] = join(sdkDir, 'provider.ts');\n      alias['xopc/extension-sdk/channel'] = join(sdkDir, 'channel.ts');\n      alias['xopc/extension-sdk/hooks'] = join(sdkDir, 'hooks.ts');\n      alias['xopc/extension-sdk/tools'] = join(sdkDir, 'tools.ts');\n      alias['xopc/extension-sdk/testing'] = join(sdkDir, 'testing.ts');\n    }\n\n    // Initialize jiti with TypeScript support and SDK alias\n    this.jiti = createJiti(fileURLToPath(import.meta.url), {\n      interopDefault: true,\n      extensions: ['.ts', '.tsx', '.mts', '.cts', '.js', '.mjs', '.cjs', '.json'],\n      alias,\n    });\n  }\n\n  /**\n   * Set security configuration \n   */\n  setSecurityConfig(config: Partial<SecurityConfig>): void {\n    this.securityConfig = { ...this.securityConfig, ...config };\n  }\n\n  /**\n   * Get security configuration \n   */\n  getSecurityConfig(): SecurityConfig {\n    return this.securityConfig;\n  }\n\n  /**\n   * Get provider registry \n   */\n  getProviderRegistry(): ProviderPluginRegistry {\n    return this.providerRegistry;\n  }\n\n  /**\n   * Get slot registry \n   */\n  getSlotRegistry(): SlotRegistry {\n    return this.slotRegistry;\n  }\n\n  /**\n   * Get diagnostics \n   */\n  getDiagnostics(): ExtensionDiagnostics {\n    return this.diagnostics;\n  }\n\n  /**\n   * Set configuration from main Config object \n   */\n  setConfig(config: Config): void {\n    this._appConfig = config;\n    // Wire slot config\n    const slots = (config.extensions as any)?.slots || {};\n    this.slotsConfig = {\n      memory: slots.memory,\n      tts: slots.tts,\n      imageGeneration: slots.imageGeneration,\n      webSearch: slots.webSearch,\n    };\n\n    // Wire security config\n    const security = (config.extensions as any)?.security;\n    if (security) {\n      this.securityConfig = {\n        checkPermissions: security.checkPermissions ?? true,\n        allowUntrusted: security.allowUntrusted ?? false,\n        allow: security.allow ?? [],\n        trackProvenance: security.trackProvenance ?? true,\n        allowPromptInjection: security.allowPromptInjection ?? false,\n      };\n    }\n  }\n\n  /**\n   * Inject MessageBus and optional SessionManager for ExtensionApi.runtime (Gateway).\n   */\n  setRuntimeContext(ctx: { bus: MessageBus; sessionManager?: SessionManager }): void {\n    this._runtimeContext = ctx;\n  }\n\n  getRegistry(): ExtensionRegistryImpl {\n    return this.registry;\n  }\n\n  /**\n   * Phase 1: build manifest registry (filesystem manifests only, no extension code load).\n   */\n  buildManifestRegistry(): ManifestRegistry {\n    if (this.manifestRegistry) {\n      return this.manifestRegistry;\n    }\n    const discovered = this.discoverExtensions();\n    this.manifestRegistry = ManifestRegistry.fromDiscovered(discovered);\n    return this.manifestRegistry;\n  }\n\n  /**\n   * Phase 2: activation planner over the manifest registry (pure logic).\n   */\n  planActivation(_context?: Partial<ActivationContext>): ActivationPlanner {\n    return new ActivationPlanner(this.buildManifestRegistry());\n  }\n\n  /**\n   * Phase 3: load only extensions selected by the activation plan.\n   */\n  async loadByActivationPlan(context?: Partial<ActivationContext>): Promise<void> {\n    const registry = this.buildManifestRegistry();\n    const planner = new ActivationPlanner(registry);\n    const fullContext = mergeActivationContext(this._appConfig, context);\n    const activatedIds = planner.getActivatedIds(fullContext).sort((a, b) => a.localeCompare(b));\n\n    for (const extensionId of activatedIds) {\n      if (this.extensionInstances.has(extensionId)) continue;\n      const entry = registry.getEntry(extensionId);\n      if (!entry) {\n        log.debug(\n          { extensionId },\n          'Activation plan references extension id that was not discovered on disk',\n        );\n        continue;\n      }\n\n      const config: ResolvedExtensionConfig = {\n        id: extensionId,\n        name: entry.manifest.name || extensionId,\n        source: entry.source,\n        path: entry.path,\n        enabled: true,\n        config: this.resolveExtensionConfig(extensionId),\n      };\n\n      await this.loadExtension(config);\n    }\n  }\n\n  getManifestRegistry(): ManifestRegistry {\n    return this.buildManifestRegistry();\n  }\n\n  invalidateManifestCache(): void {\n    this.manifestRegistry = null;\n  }\n\n  private resolveExtensionConfig(extensionId: string): Record<string, unknown> {\n    if (!this._appConfig) return {};\n    const extensionsConfig = (this._appConfig as Record<string, unknown>).extensions as\n      | Record<string, unknown>\n      | undefined;\n    if (!extensionsConfig || typeof extensionsConfig !== 'object') return {};\n    const raw = extensionsConfig[extensionId];\n    if (raw && typeof raw === 'object' && !Array.isArray(raw)) {\n      return raw as Record<string, unknown>;\n    }\n    return {};\n  }\n\n  /**\n   * Discover extensions from all three tiers:\n   * 1. Workspace (.extensions/) - highest priority\n   * 2. Global (~/.xopc/extensions/) - shared\n   * 3. Bundled (xopc/extensions/) - lowest priority\n   */\n  discoverExtensions(): DiscoveredExtension[] {\n    const discovered = new Map<string, DiscoveredExtension>();\n\n    // Priority 3: Bundled extensions (lowest)\n    const bundledDir = resolveBundledExtensionsDir();\n    if (bundledDir) {\n      this.discoverInDirectory(bundledDir, 'bundled', discovered);\n    }\n\n    // Priority 2: Global extensions\n    const globalDir = resolveExtensionsDir();\n    this.discoverInDirectory(globalDir, 'global', discovered);\n\n    // Priority 1: Workspace extensions (highest, can override)\n    const c = loadConfig();\n    const aid = resolveDefaultAgentId(c);\n    const workspaceDir = this.options.workspaceDir || resolveAgentWorkspaceDir(c, aid);\n    const workspaceExtensionsDir = resolveWorkspaceExtensionsDir(c, aid);\n    this.discoverInDirectory(workspaceExtensionsDir, 'workspace', discovered);\n\n    return Array.from(discovered.values());\n  }\n\n  private discoverInDirectory(\n    dir: string,\n    source: ExtensionSourceOrigin,\n    discovered: Map<string, DiscoveredExtension>,\n  ): void {\n    if (!existsSync(dir)) {\n      return;\n    }\n\n    let entries: string[];\n    try {\n      entries = readdirSync(dir);\n    } catch {\n      return;\n    }\n\n    for (const entry of entries) {\n      const extensionPath = join(dir, entry);\n\n      // Check if it's a directory\n      try {\n        const stat = existsSync(extensionPath);\n        if (!stat) continue;\n      } catch {\n        continue;\n      }\n\n      // Try to load manifest\n      const manifest = this.loadManifest(extensionPath);\n      if (!manifest) continue;\n\n      const extensionId = manifest.id || entry;\n\n      // Higher priority origins can override lower ones\n      const existing = discovered.get(extensionId);\n      if (existing) {\n        const priority = { workspace: 3, global: 2, bundled: 1, config: 0 };\n        if (priority[source] <= priority[existing.source]) {\n          log.debug(\n            { extensionId, from: source, existing: existing.source },\n            'Skipping lower priority extension',\n          );\n          continue;\n        }\n        log.info(\n          { extensionId, from: source, overriding: existing.source },\n          'Extension override by higher priority source',\n        );\n      }\n\n      discovered.set(extensionId, {\n        id: extensionId,\n        path: extensionPath,\n        source,\n        manifest,\n      });\n    }\n  }\n\n  /**\n   * Load all discovered extensions\n   */\n  async loadAllExtensions(enabledIds?: string[]): Promise<void> {\n    const extensions = this.discoverExtensions();\n\n    for (const extension of extensions) {\n      // If enabledIds specified, only load those\n      if (enabledIds && !enabledIds.includes(extension.id)) {\n        continue;\n      }\n\n      const config: ResolvedExtensionConfig = {\n        id: extension.id,\n        name: extension.manifest.name || extension.id,\n        source: extension.source,\n        path: extension.path,\n        enabled: true,\n        config: {},\n      };\n\n      await this.loadExtension(config);\n    }\n  }\n\n  async loadExtensions(configs: ResolvedExtensionConfig[]): Promise<void> {\n    for (const extensionConfig of configs) {\n      if (extensionConfig.enabled) {\n        await this.loadExtension(extensionConfig);\n      }\n    }\n  }\n\n  async loadExtension(config: ResolvedExtensionConfig): Promise<ExtensionApi | null> {\n    try {\n      //  Check cache first\n      const cacheKey = this.cache.buildKey(this.options, [config.id]);\n      const cached = this.cache.get<ExtensionApi>(cacheKey);\n      if (cached) {\n        log.debug({ extensionId: config.id }, 'Extension loaded from cache');\n        return cached;\n      }\n\n      // Check if already loaded\n      if (this.extensionInstances.has(config.id)) {\n        return this.extensionInstances.get(config.id)!;\n      }\n\n      // Resolve extension path using resolveExtensionPath\n      let extensionPath: string | null;\n      if (isAbsolute(config.path)) {\n        extensionPath = config.path;\n      } else {\n        // Try to resolve extension ID to actual path\n        extensionPath = resolveExtensionPath(config.path, this.options) ||\n                     resolveExtensionPath(config.id, this.options);\n      }\n      \n      if (!extensionPath) {\n        log.error({ extensionId: config.id, path: config.path }, `Could not resolve extension path`);\n        this.diagnostics.error(config.id, `Could not resolve extension path: ${config.path}`);\n        return null;\n      }\n\n      log.debug({ extensionId: config.id, extensionPath }, 'Resolved extension path');\n\n      //  Security check\n      const source = config.source || 'bundled';\n      const safetyResult = checkExtensionPathSafety(extensionPath, extensionPath, source);\n      \n      if (!safetyResult.safe) {\n        logSecurityIssue(config.id, safetyResult);\n        \n        if (this.securityConfig.checkPermissions && source !== 'bundled') {\n          // Check allowlist\n          if (!isExtensionAllowed(config.id, this.securityConfig)) {\n            this.diagnostics.error(config.id, `Extension not allowed: ${safetyResult.detail}`);\n            log.error({ extensionId: config.id, reason: safetyResult.reason }, 'Extension blocked by security policy');\n            return null;\n          }\n        }\n      }\n\n      // Track provenance \n      provenanceTracker.track(config.id, source);\n\n      const manifest = this.loadManifest(extensionPath);\n      if (!manifest) {\n        log.error({ extensionId: config.id, extensionPath }, `Failed to load manifest for extension`);\n        this.diagnostics.error(config.id, `Failed to load manifest`);\n        return null;\n      }\n\n      // Validate extension config against schema (basic validation)\n      if (manifest.configSchema) {\n        try {\n          const schema = manifest.configSchema as Record<string, unknown>;\n          const extensionConfig = config.config as Record<string, unknown>;\n          \n          // Basic validation: check required fields and types\n          if (schema.type === 'object' && schema.properties) {\n            const props = schema.properties as Record<string, Record<string, unknown>>;\n            const required = (schema.required as string[]) || [];\n            \n            for (const field of required) {\n              if (extensionConfig[field] === undefined) {\n                log.error({ \n                  extensionId: config.id, \n                  field \n                }, 'Extension config validation failed: missing required field');\n                return null;\n              }\n            }\n            \n            for (const [key, value] of Object.entries(extensionConfig)) {\n              const propSchema = props[key];\n              if (propSchema) {\n                if (propSchema.type && !this.validateType(value, propSchema.type as string)) {\n                  log.error({ \n                    extensionId: config.id, \n                    field: key,\n                    expected: propSchema.type,\n                    actual: typeof value\n                  }, 'Extension config validation failed: type mismatch');\n                  return null;\n                }\n              }\n            }\n          }\n          \n          log.debug({ extensionId: config.id }, 'Extension config validated');\n        } catch (err) {\n          log.warn({ err, extensionId: config.id }, 'Config schema validation skipped');\n        }\n      }\n\n      // Create extension API\n      const extensionDir = dirname(extensionPath);\n      const api = this.createExtensionApi(manifest, config, extensionDir);\n\n      // Load extension module\n      const module = await this.loadModule(extensionPath, manifest);\n      if (!module) {\n        log.error({ extensionId: config.id }, `Failed to load module for extension`);\n        this.diagnostics.error(config.id, `Failed to load module`);\n        return null;\n      }\n\n      //  Check and claim slots\n      const slotClaimed = this.claimExtensionSlots(config.id, manifest);\n      if (!slotClaimed) {\n        log.warn({ extensionId: config.id }, 'Failed to claim required slots');\n      }\n\n      // Initialize extension\n      await this.initializeExtension(module, api, manifest);\n\n      // Register to registry\n      this.registry.addExtension({\n        id: config.id,\n        name: manifest.name,\n        version: manifest.version,\n        path: extensionPath,\n        module,\n        config: config.config,\n        enabled: true,\n        source: config.source,\n      });\n\n      // Register extension tools to registry (so AgentManager can access them)\n      // Note: api is actually ExtensionApiImpl at runtime\n      const apiImpl = api as unknown as { _getTools: () => Map<string, AgentTool> };\n      const extensionTools = apiImpl._getTools();\n      for (const tool of extensionTools.values()) {\n        this.registry.addTool(tool);\n      }\n\n      this.extensionInstances.set(config.id, api);\n      \n      //  Cache the loaded extension\n      this.cache.set(cacheKey, api);\n\n      this.diagnostics.info(config.id, `Loaded extension: ${manifest.name}`);\n      log.info({ name: manifest.name, id: manifest.id, source: config.source }, `Loaded extension`);\n\n      return api;\n    } catch (error) {\n      log.error({ err: error, extensionId: config.id }, `Error loading extension`);\n      this.diagnostics.error(config.id, `Error loading extension: ${error}`);\n      return null;\n    }\n  }\n\n  /**\n   *  Claim extension slots based on manifest kind\n   * Respects configured preferred plugin from config.extensions.slots\n   */\n  private claimExtensionSlots(extensionId: string, manifest: ExtensionManifest): boolean {\n    const kind = manifest.kind as string;\n    \n    // Map extension kind to slot\n    const slotMap: Record<string, SlotKey> = {\n      'memory': 'memory',\n      'tts': 'tts',\n      'image-generation': 'imageGeneration',\n      'imageGeneration': 'imageGeneration',\n      'web-search': 'webSearch',\n      'webSearch': 'webSearch',\n    };\n    \n    const slotKey = slotMap[kind];\n    if (!slotKey) {\n      return true; // No slot required\n    }\n    \n    // Check if slot is reserved for a different plugin in config\n    const preferredPlugin = this.slotsConfig[slotKey];\n    if (preferredPlugin && preferredPlugin !== extensionId) {\n      log.info(\n        { extensionId, slotKey, preferredPlugin },\n        `Skipping slot claim: slot \"${slotKey}\" is reserved for \"${preferredPlugin}\"`\n      );\n      this.diagnostics.info(\n        extensionId,\n        `Slot \"${slotKey}\" is reserved for \"${preferredPlugin}\", skipping claim`\n      );\n      return false;\n    }\n    \n    const claimed = this.slotRegistry.claim(slotKey, extensionId, null);\n    if (!claimed) {\n      this.diagnostics.warn(extensionId, `Slot \"${slotKey}\" already claimed by another extension`);\n    }\n    return claimed;\n  }\n\n  loadManifest(extensionPath: string): ExtensionManifest | null {\n    const manifestPath = join(extensionPath, EXTENSION_MANIFEST_FILE);\n\n    // First try to load xopc.extension.json\n    if (existsSync(manifestPath)) {\n      try {\n        const raw = JSON.parse(readFileSync(manifestPath, 'utf-8'));\n        if (!raw || typeof raw !== 'object' || Array.isArray(raw)) {\n          log.error({ manifestPath }, 'Manifest root must be a JSON object');\n          return null;\n        }\n        return normalizeExtensionManifest(raw as Record<string, unknown>);\n      } catch (error) {\n        log.error({ err: error, manifestPath }, `Failed to parse manifest`);\n        return null;\n      }\n    }\n\n    // Fallback to package.json\n    const packagePath = join(extensionPath, 'package.json');\n    if (existsSync(packagePath)) {\n      try {\n        const packageJson = JSON.parse(readFileSync(packagePath, 'utf-8'));\n        \n        // Check for xopc.extension marker\n        if (packageJson.xopc?.extension) {\n          const xopcConfig = packageJson.xopc;\n          return normalizeExtensionManifest({\n            id: xopcConfig.id || packageJson.name,\n            name: xopcConfig.name || packageJson.name,\n            description: xopcConfig.description || packageJson.description,\n            version: xopcConfig.version || packageJson.version || '1.0.0',\n            kind: xopcConfig.kind || 'utility',\n            main: xopcConfig.main || packageJson.main || 'index.js',\n            configSchema: xopcConfig.configSchema,\n          });\n        }\n\n        // Also support xopc-extension-* naming convention\n        if (packageJson.name?.startsWith('xopc-extension-')) {\n          const id = packageJson.name.replace('xopc-extension-', '');\n          return normalizeExtensionManifest({\n            id,\n            name: packageJson.name,\n            description: packageJson.description,\n            version: packageJson.version || '1.0.0',\n            kind: 'utility',\n            main: packageJson.main || 'index.js',\n          });\n        }\n      } catch (error) {\n        log.error({ err: error, packagePath }, `Failed to parse package.json`);\n      }\n    }\n\n    return null;\n  }\n\n  private async loadModule(\n    extensionPath: string,\n    manifest: ExtensionManifest,\n  ): Promise<ExtensionModule | null> {\n    // Determine entry point - .ts files prioritized for development\n    const entryPoints = [\n      manifest.main,\n      'index.ts',\n      'index.js',\n      'extension.ts',\n      'extension.js',\n    ].filter(Boolean) as string[];\n\n    for (const entry of entryPoints) {\n      const fullPath = isAbsolute(entry) ? entry : join(extensionPath, entry);\n\n      if (existsSync(fullPath)) {\n        try {\n          // Use jiti to load both .ts and .js files\n          const mod = this.jiti(fullPath);\n          return mod.default || mod;\n        } catch (error) {\n          log.warn({ err: error, path: fullPath }, `Failed to load module`);\n        }\n      }\n    }\n\n    return null;\n  }\n\n  private createExtensionApi(\n    manifest: ExtensionManifest,\n    resolved: ResolvedExtensionConfig,\n    extensionDir: string,\n  ): ExtensionApi {\n    const logger = createExtensionLogger(`[${manifest.id}]`);\n    const resolvePath = createPathResolver(extensionDir, this.options.workspaceDir || '');\n\n    const appConfig = this._appConfig ?? ({} as Config);\n    const extensionOnly = (resolved.config ?? {}) as Record<string, unknown>;\n\n    const runtime =\n      this._appConfig && this._runtimeContext\n        ? {\n            config: this._appConfig,\n            bus: this._runtimeContext.bus,\n            log: logger,\n            sessionManager: this._runtimeContext.sessionManager,\n          }\n        : this._appConfig\n          ? {\n              config: this._appConfig,\n              log: logger,\n            }\n          : undefined;\n\n    return new ExtensionApiImpl(\n      manifest.id,\n      manifest.name,\n      manifest.version,\n      extensionDir,\n      appConfig,\n      extensionOnly,\n      logger,\n      resolvePath,\n      this.registry,\n      runtime,\n    );\n  }\n\n  private async initializeExtension(\n    module: ExtensionModule,\n    api: ExtensionApi,\n    _manifest: ExtensionManifest,\n  ): Promise<void> {\n    if (typeof module === 'function') {\n      // Module is a function that receives the API\n      await module(api);\n    } else if (typeof module === 'object' && module.register) {\n      // Module is a ExtensionDefinition with register method\n      await module.register(api);\n    }\n  }\n\n  async startServices(): Promise<void> {\n    const services = Array.from(this.registry.services.values());\n\n    for (const service of services) {\n      const serviceLog = createServiceLogger(service.id);\n      try {\n        await service.start?.();\n        serviceLog.info(`Started service`);\n      } catch (error) {\n        serviceLog.error({ err: error }, `Failed to start service`);\n      }\n    }\n  }\n\n  async stopServices(): Promise<void> {\n    const services = Array.from(this.registry.services.values()).reverse();\n\n    for (const service of services) {\n      if (service.stop) {\n        const serviceLog = createServiceLogger(service.id);\n        try {\n          await service.stop();\n          serviceLog.info(`Stopped service`);\n        } catch (error) {\n          serviceLog.error({ err: error }, `Failed to stop service`);\n        }\n      }\n    }\n  }\n\n  /**\n   * Basic type validation for config values\n   */\n  private validateType(value: unknown, expectedType: string): boolean {\n    if (expectedType === 'string') return typeof value === 'string';\n    if (expectedType === 'number' || expectedType === 'integer') return typeof value === 'number';\n    if (expectedType === 'boolean') return typeof value === 'boolean';\n    if (expectedType === 'array') return Array.isArray(value);\n    if (expectedType === 'object') return typeof value === 'object' && value !== null && !Array.isArray(value);\n    return true;\n  }\n}\n\n// ============================================================================\n// Utility Functions\n// ============================================================================\n\nexport function resolveExtensionPath(id: string, options: ExtensionLoaderOptions): string | null {\n  const c = loadConfig();\n  const aid = resolveDefaultAgentId(c);\n  // Priority 1: Workspace\n  const workspaceDir = options.workspaceDir || resolveAgentWorkspaceDir(c, aid);\n  const workspacePath = join(resolveWorkspaceExtensionsDir(c, aid), id);\n  if (existsSync(workspacePath)) return workspacePath;\n\n  // Priority 2: Global\n  const globalPath = join(resolveExtensionsDir(), id);\n  if (existsSync(globalPath)) return globalPath;\n\n  // Priority 3: Bundled\n  const bundledDir = resolveBundledExtensionsDir();\n  if (bundledDir) {\n    const bundledPath = join(bundledDir, id);\n    if (existsSync(bundledPath)) return bundledPath;\n  }\n\n  // Check if it's an npm package\n  try {\n    const require = createRequire(import.meta.url);\n    const resolved = require.resolve(id);\n    return dirname(resolved);\n  } catch {\n    return null;\n  }\n}\n\nexport function normalizeExtensionConfig(\n  rawConfig: Record<string, unknown>,\n): ResolvedExtensionConfig[] {\n  const extensions: ResolvedExtensionConfig[] = [];\n\n  const enabled = (rawConfig.enabled as string[]) || [];\n  const disabled = (rawConfig.disabled as string[]) || [];\n\n  // Parse enabled extensions\n  for (const id of enabled) {\n    const config = (rawConfig[id] as Record<string, unknown>) || {};\n    extensions.push({\n      id,\n      name: id,\n      source: 'config',\n      path: id,\n      enabled: true,\n      config,\n    });\n  }\n\n  // Parse disabled extensions\n  for (const id of disabled) {\n    if (!extensions.find((p) => p.id === id)) {\n      const config = (rawConfig[id] as Record<string, unknown>) || {};\n      extensions.push({\n        id,\n        name: id,\n        source: 'config',\n        path: id,\n        enabled: false,\n        config,\n      });\n    }\n  }\n\n  return extensions;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAcgE;aACf;YAOrB;aA6B2C;AA+BvE,MAAM,0BAA0B;AAEhC,MAAM,MAAM,aAAa,kBAAkB;AAS3C,IAAa,wBAAb,MAAgE;CAC9D,6BAAa,IAAI,KAA8B;CAC/C,wBAAQ,IAAI,KAAiD;CAC7D,6BAAa,IAAI,KAAiC;CAClD,2BAAW,IAAI,KAA+B;CAC9C,2BAAW,IAAI,KAA+B;CAC9C,iCAAiB,IAAI,KAAmC;CACxD,wBAAQ,IAAI,KAAwB;CACpC,iBAAkC,EAAE;CACpC,mBAAuD,EAAE;CAEzD,aAAa,QAA+B;AAC1C,OAAK,WAAW,IAAI,OAAO,IAAI,OAAO;;CAGxC,aAAa,IAAyC;AACpD,SAAO,KAAK,WAAW,IAAI,GAAG;;CAGhC,uBAA0C;AACxC,SAAO,MAAM,KAAK,KAAK,WAAW,QAAQ,CAAC,CAAC,QAAQ,MAAM,EAAE,QAAQ;;CAGtE,QACE,OACA,SACA,aACA,YAAY,GACN;AACN,MAAI,CAAC,KAAK,MAAM,IAAI,MAAM,CACxB,MAAK,MAAM,IAAI,OAAO,EAAE,CAAC;AAE3B,OAAK,MAAM,IAAI,MAAM,CAAE,KAAK,QAAQ;;CAGtC,SAAS,OAAmD;AAC1D,SAAO,KAAK,MAAM,IAAI,MAAM,IAAI,EAAE;;CAGpC,iBAAiB,QAA6B;AAC5C,OAAK,iBAAiB,KAAK,eAAe,QAAQ,MAAM,EAAE,OAAO,OAAO,GAAG;AAC3E,OAAK,eAAe,KAAK,OAAO;;CAGlC,aAAa,MAAc,SAAmC;AAC5D,MAAI,KAAK,WAAW,IAAI,KAAK,CAC3B,KAAI,KAAK,EAAE,MAAM,EAAE,6CAA6C;AAElE,OAAK,WAAW,IAAI,MAAM,QAAQ;;CAGpC,aAAa,MAA8C;AACzD,SAAO,KAAK,WAAW,IAAI,KAAK;;CAGlC,WAAW,SAAiC;AAC1C,MAAI,KAAK,SAAS,IAAI,QAAQ,KAAK,CACjC,KAAI,KAAK,EAAE,SAAS,QAAQ,MAAM,EAAE,0CAA0C;AAEhF,OAAK,SAAS,IAAI,QAAQ,MAAM,QAAQ;;CAG1C,WAAW,MAA4C;AACrD,SAAO,KAAK,SAAS,IAAI,KAAK;;CAGhC,WAAW,SAAiC;AAC1C,MAAI,KAAK,SAAS,IAAI,QAAQ,GAAG,CAC/B,KAAI,KAAK,EAAE,SAAS,QAAQ,IAAI,EAAE,0CAA0C;AAE9E,OAAK,SAAS,IAAI,QAAQ,IAAI,QAAQ;;CAGxC,WAAW,IAA0C;AACnD,SAAO,KAAK,SAAS,IAAI,GAAG;;CAG9B,iBAAiB,QAAgB,SAAqC;AACpE,MAAI,KAAK,eAAe,IAAI,OAAO,CACjC,KAAI,KAAK,EAAE,QAAQ,EAAE,iDAAiD;AAExE,OAAK,eAAe,IAAI,QAAQ,QAAQ;;CAG1C,iBAAiB,QAAkD;AACjE,SAAO,KAAK,eAAe,IAAI,OAAO;;CAIxC,QAAQ,MAAuB;AAC7B,MAAI,KAAK,MAAM,IAAI,KAAK,KAAK,CAC3B,KAAI,KAAK,EAAE,MAAM,KAAK,MAAM,EAAE,uCAAuC;AAEvE,OAAK,MAAM,IAAI,KAAK,MAAM,KAAK;;CAGjC,WAAW,MAAoB;AAC7B,OAAK,MAAM,OAAO,KAAK;;CAGzB,WAAmC;AACjC,SAAO,KAAK;;CAGd,QAAQ,MAAqC;AAC3C,SAAO,KAAK,MAAM,IAAI,KAAK;;CAG7B,cAA2B;AACzB,SAAO,MAAM,KAAK,KAAK,MAAM,QAAQ,CAAC;;CAGxC,mBAAmB,KAAqC;AACtD,OAAK,iBAAiB,KAAK,IAAI;;CAGjC,sBAA2D;AACzD,SAAO,KAAK;;;AAchB,IAAa,kBAAb,MAA6B;CAC3B;CACA;CACA,qCAAwD,IAAI,KAAK;CACjE;CACA;CACA;CAGA;CAGA;CAGA;CACA,cAAwD,EAAE;CAG1D;CACA;;CAGA,mBAAoD;CAEpD,YAAY,SAAkC;AAC5C,OAAK,WAAW,IAAI,uBAAuB;AAC3C,OAAK,MAAM,KAAK,sBACd,MAAK,SAAS,iBAAiB,EAAE;AAEnC,OAAK,UAAU,kBAAkB;GAC/B,MAAM,IAAI,YAAY;GACtB,MAAM,MAAM,sBAAsB,EAAE;AACpC,UAAO;IACL,cAAc,yBAAyB,GAAG,IAAI;IAC9C,eAAe,8BAA8B,GAAG,IAAI;IACrD;MACC;AAGJ,OAAK,iBAAiB;AAGtB,OAAK,mBAAmB,qBAAqB;AAG7C,OAAK,eAAe,iBAAiB;AAGrC,OAAK,QAAQ,mBAAmB;AAChC,OAAK,cAAc,yBAAyB;EAG5C,MAAM,QAAgC,EAAE;EACxC,MAAM,UAAU,yBAAyB;AACzC,MAAI,SAAS;AACX,SAAM,wBAAwB;GAC9B,MAAM,SAAS,QAAQ,QAAQ;AAC/B,SAAM,6BAA6B,KAAK,QAAQ,UAAU;AAC1D,SAAM,6BAA6B,KAAK,QAAQ,UAAU;AAC1D,SAAM,iCAAiC,KAAK,QAAQ,cAAc;AAClE,SAAM,gCAAgC,KAAK,QAAQ,aAAa;AAChE,SAAM,8BAA8B,KAAK,QAAQ,WAAW;AAC5D,SAAM,8BAA8B,KAAK,QAAQ,WAAW;AAC5D,SAAM,gCAAgC,KAAK,QAAQ,aAAa;;AAIlE,OAAK,OAAO,WAAW,cAAc,OAAO,KAAK,IAAI,EAAE;GACrD,gBAAgB;GAChB,YAAY;IAAC;IAAO;IAAQ;IAAQ;IAAQ;IAAO;IAAQ;IAAQ;IAAQ;GAC3E;GACD,CAAC;;;;;CAMJ,kBAAkB,QAAuC;AACvD,OAAK,iBAAiB;GAAE,GAAG,KAAK;GAAgB,GAAG;GAAQ;;;;;CAM7D,oBAAoC;AAClC,SAAO,KAAK;;;;;CAMd,sBAA8C;AAC5C,SAAO,KAAK;;;;;CAMd,kBAAgC;AAC9B,SAAO,KAAK;;;;;CAMd,iBAAuC;AACrC,SAAO,KAAK;;;;;CAMd,UAAU,QAAsB;AAC9B,OAAK,aAAa;EAElB,MAAM,QAAS,OAAO,YAAoB,SAAS,EAAE;AACrD,OAAK,cAAc;GACjB,QAAQ,MAAM;GACd,KAAK,MAAM;GACX,iBAAiB,MAAM;GACvB,WAAW,MAAM;GAClB;EAGD,MAAM,WAAY,OAAO,YAAoB;AAC7C,MAAI,SACF,MAAK,iBAAiB;GACpB,kBAAkB,SAAS,oBAAoB;GAC/C,gBAAgB,SAAS,kBAAkB;GAC3C,OAAO,SAAS,SAAS,EAAE;GAC3B,iBAAiB,SAAS,mBAAmB;GAC7C,sBAAsB,SAAS,wBAAwB;GACxD;;;;;CAOL,kBAAkB,KAAiE;AACjF,OAAK,kBAAkB;;CAGzB,cAAqC;AACnC,SAAO,KAAK;;;;;CAMd,wBAA0C;AACxC,MAAI,KAAK,iBACP,QAAO,KAAK;EAEd,MAAM,aAAa,KAAK,oBAAoB;AAC5C,OAAK,mBAAmB,iBAAiB,eAAe,WAAW;AACnE,SAAO,KAAK;;;;;CAMd,eAAe,UAA0D;AACvE,SAAO,IAAI,kBAAkB,KAAK,uBAAuB,CAAC;;;;;CAM5D,MAAM,qBAAqB,SAAqD;EAC9E,MAAM,WAAW,KAAK,uBAAuB;EAC7C,MAAM,UAAU,IAAI,kBAAkB,SAAS;EAC/C,MAAM,cAAc,uBAAuB,KAAK,YAAY,QAAQ;EACpE,MAAM,eAAe,QAAQ,gBAAgB,YAAY,CAAC,MAAM,GAAG,MAAM,EAAE,cAAc,EAAE,CAAC;AAE5F,OAAK,MAAM,eAAe,cAAc;AACtC,OAAI,KAAK,mBAAmB,IAAI,YAAY,CAAE;GAC9C,MAAM,QAAQ,SAAS,SAAS,YAAY;AAC5C,OAAI,CAAC,OAAO;AACV,QAAI,MACF,EAAE,aAAa,EACf,0EACD;AACD;;GAGF,MAAM,SAAkC;IACtC,IAAI;IACJ,MAAM,MAAM,SAAS,QAAQ;IAC7B,QAAQ,MAAM;IACd,MAAM,MAAM;IACZ,SAAS;IACT,QAAQ,KAAK,uBAAuB,YAAY;IACjD;AAED,SAAM,KAAK,cAAc,OAAO;;;CAIpC,sBAAwC;AACtC,SAAO,KAAK,uBAAuB;;CAGrC,0BAAgC;AAC9B,OAAK,mBAAmB;;CAG1B,uBAA+B,aAA8C;AAC3E,MAAI,CAAC,KAAK,WAAY,QAAO,EAAE;EAC/B,MAAM,mBAAoB,KAAK,WAAuC;AAGtE,MAAI,CAAC,oBAAoB,OAAO,qBAAqB,SAAU,QAAO,EAAE;EACxE,MAAM,MAAM,iBAAiB;AAC7B,MAAI,OAAO,OAAO,QAAQ,YAAY,CAAC,MAAM,QAAQ,IAAI,CACvD,QAAO;AAET,SAAO,EAAE;;;;;;;;CASX,qBAA4C;EAC1C,MAAM,6BAAa,IAAI,KAAkC;EAGzD,MAAM,aAAa,6BAA6B;AAChD,MAAI,WACF,MAAK,oBAAoB,YAAY,WAAW,WAAW;EAI7D,MAAM,YAAY,sBAAsB;AACxC,OAAK,oBAAoB,WAAW,UAAU,WAAW;EAGzD,MAAM,IAAI,YAAY;EACtB,MAAM,MAAM,sBAAsB,EAAE;AACf,OAAK,QAAQ,gBAAgB,yBAAyB,GAAG,IAAI;EAClF,MAAM,yBAAyB,8BAA8B,GAAG,IAAI;AACpE,OAAK,oBAAoB,wBAAwB,aAAa,WAAW;AAEzE,SAAO,MAAM,KAAK,WAAW,QAAQ,CAAC;;CAGxC,oBACE,KACA,QACA,YACM;AACN,MAAI,CAAC,WAAW,IAAI,CAClB;EAGF,IAAI;AACJ,MAAI;AACF,aAAU,YAAY,IAAI;UACpB;AACN;;AAGF,OAAK,MAAM,SAAS,SAAS;GAC3B,MAAM,gBAAgB,KAAK,KAAK,MAAM;AAGtC,OAAI;AAEF,QAAI,CADS,WAAW,cAAc,CAC3B;WACL;AACN;;GAIF,MAAM,WAAW,KAAK,aAAa,cAAc;AACjD,OAAI,CAAC,SAAU;GAEf,MAAM,cAAc,SAAS,MAAM;GAGnC,MAAM,WAAW,WAAW,IAAI,YAAY;AAC5C,OAAI,UAAU;IACZ,MAAM,WAAW;KAAE,WAAW;KAAG,QAAQ;KAAG,SAAS;KAAG,QAAQ;KAAG;AACnE,QAAI,SAAS,WAAW,SAAS,SAAS,SAAS;AACjD,SAAI,MACF;MAAE;MAAa,MAAM;MAAQ,UAAU,SAAS;MAAQ,EACxD,oCACD;AACD;;AAEF,QAAI,KACF;KAAE;KAAa,MAAM;KAAQ,YAAY,SAAS;KAAQ,EAC1D,+CACD;;AAGH,cAAW,IAAI,aAAa;IAC1B,IAAI;IACJ,MAAM;IACN;IACA;IACD,CAAC;;;;;;CAON,MAAM,kBAAkB,YAAsC;EAC5D,MAAM,aAAa,KAAK,oBAAoB;AAE5C,OAAK,MAAM,aAAa,YAAY;AAElC,OAAI,cAAc,CAAC,WAAW,SAAS,UAAU,GAAG,CAClD;GAGF,MAAM,SAAkC;IACtC,IAAI,UAAU;IACd,MAAM,UAAU,SAAS,QAAQ,UAAU;IAC3C,QAAQ,UAAU;IAClB,MAAM,UAAU;IAChB,SAAS;IACT,QAAQ,EAAE;IACX;AAED,SAAM,KAAK,cAAc,OAAO;;;CAIpC,MAAM,eAAe,SAAmD;AACtE,OAAK,MAAM,mBAAmB,QAC5B,KAAI,gBAAgB,QAClB,OAAM,KAAK,cAAc,gBAAgB;;CAK/C,MAAM,cAAc,QAA+D;AACjF,MAAI;GAEF,MAAM,WAAW,KAAK,MAAM,SAAS,KAAK,SAAS,CAAC,OAAO,GAAG,CAAC;GAC/D,MAAM,SAAS,KAAK,MAAM,IAAkB,SAAS;AACrD,OAAI,QAAQ;AACV,QAAI,MAAM,EAAE,aAAa,OAAO,IAAI,EAAE,8BAA8B;AACpE,WAAO;;AAIT,OAAI,KAAK,mBAAmB,IAAI,OAAO,GAAG,CACxC,QAAO,KAAK,mBAAmB,IAAI,OAAO,GAAG;GAI/C,IAAI;AACJ,OAAI,WAAW,OAAO,KAAK,CACzB,iBAAgB,OAAO;OAGvB,iBAAgB,qBAAqB,OAAO,MAAM,KAAK,QAAQ,IAClD,qBAAqB,OAAO,IAAI,KAAK,QAAQ;AAG5D,OAAI,CAAC,eAAe;AAClB,QAAI,MAAM;KAAE,aAAa,OAAO;KAAI,MAAM,OAAO;KAAM,EAAE,mCAAmC;AAC5F,SAAK,YAAY,MAAM,OAAO,IAAI,qCAAqC,OAAO,OAAO;AACrF,WAAO;;AAGT,OAAI,MAAM;IAAE,aAAa,OAAO;IAAI;IAAe,EAAE,0BAA0B;GAG/E,MAAM,SAAS,OAAO,UAAU;GAChC,MAAM,eAAe,yBAAyB,eAAe,eAAe,OAAO;AAEnF,OAAI,CAAC,aAAa,MAAM;AACtB,qBAAiB,OAAO,IAAI,aAAa;AAEzC,QAAI,KAAK,eAAe,oBAAoB,WAAW;SAEjD,CAAC,mBAAmB,OAAO,IAAI,KAAK,eAAe,EAAE;AACvD,WAAK,YAAY,MAAM,OAAO,IAAI,0BAA0B,aAAa,SAAS;AAClF,UAAI,MAAM;OAAE,aAAa,OAAO;OAAI,QAAQ,aAAa;OAAQ,EAAE,uCAAuC;AAC1G,aAAO;;;;AAMb,qBAAkB,MAAM,OAAO,IAAI,OAAO;GAE1C,MAAM,WAAW,KAAK,aAAa,cAAc;AACjD,OAAI,CAAC,UAAU;AACb,QAAI,MAAM;KAAE,aAAa,OAAO;KAAI;KAAe,EAAE,wCAAwC;AAC7F,SAAK,YAAY,MAAM,OAAO,IAAI,0BAA0B;AAC5D,WAAO;;AAIT,OAAI,SAAS,aACX,KAAI;IACF,MAAM,SAAS,SAAS;IACxB,MAAM,kBAAkB,OAAO;AAG/B,QAAI,OAAO,SAAS,YAAY,OAAO,YAAY;KACjD,MAAM,QAAQ,OAAO;KACrB,MAAM,WAAY,OAAO,YAAyB,EAAE;AAEpD,UAAK,MAAM,SAAS,SAClB,KAAI,gBAAgB,WAAW,KAAA,GAAW;AACxC,UAAI,MAAM;OACR,aAAa,OAAO;OACpB;OACD,EAAE,6DAA6D;AAChE,aAAO;;AAIX,UAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,gBAAgB,EAAE;MAC1D,MAAM,aAAa,MAAM;AACzB,UAAI;WACE,WAAW,QAAQ,CAAC,KAAK,aAAa,OAAO,WAAW,KAAe,EAAE;AAC3E,YAAI,MAAM;SACR,aAAa,OAAO;SACpB,OAAO;SACP,UAAU,WAAW;SACrB,QAAQ,OAAO;SAChB,EAAE,oDAAoD;AACvD,eAAO;;;;;AAMf,QAAI,MAAM,EAAE,aAAa,OAAO,IAAI,EAAE,6BAA6B;YAC5D,KAAK;AACZ,QAAI,KAAK;KAAE;KAAK,aAAa,OAAO;KAAI,EAAE,mCAAmC;;GAKjF,MAAM,eAAe,QAAQ,cAAc;GAC3C,MAAM,MAAM,KAAK,mBAAmB,UAAU,QAAQ,aAAa;GAGnE,MAAM,SAAS,MAAM,KAAK,WAAW,eAAe,SAAS;AAC7D,OAAI,CAAC,QAAQ;AACX,QAAI,MAAM,EAAE,aAAa,OAAO,IAAI,EAAE,sCAAsC;AAC5E,SAAK,YAAY,MAAM,OAAO,IAAI,wBAAwB;AAC1D,WAAO;;AAKT,OAAI,CADgB,KAAK,oBAAoB,OAAO,IAAI,SAAS,CAE/D,KAAI,KAAK,EAAE,aAAa,OAAO,IAAI,EAAE,iCAAiC;AAIxE,SAAM,KAAK,oBAAoB,QAAQ,KAAK,SAAS;AAGrD,QAAK,SAAS,aAAa;IACzB,IAAI,OAAO;IACX,MAAM,SAAS;IACf,SAAS,SAAS;IAClB,MAAM;IACN;IACA,QAAQ,OAAO;IACf,SAAS;IACT,QAAQ,OAAO;IAChB,CAAC;GAKF,MAAM,iBADU,IACe,WAAW;AAC1C,QAAK,MAAM,QAAQ,eAAe,QAAQ,CACxC,MAAK,SAAS,QAAQ,KAAK;AAG7B,QAAK,mBAAmB,IAAI,OAAO,IAAI,IAAI;AAG3C,QAAK,MAAM,IAAI,UAAU,IAAI;AAE7B,QAAK,YAAY,KAAK,OAAO,IAAI,qBAAqB,SAAS,OAAO;AACtE,OAAI,KAAK;IAAE,MAAM,SAAS;IAAM,IAAI,SAAS;IAAI,QAAQ,OAAO;IAAQ,EAAE,mBAAmB;AAE7F,UAAO;WACA,OAAO;AACd,OAAI,MAAM;IAAE,KAAK;IAAO,aAAa,OAAO;IAAI,EAAE,0BAA0B;AAC5E,QAAK,YAAY,MAAM,OAAO,IAAI,4BAA4B,QAAQ;AACtE,UAAO;;;;;;;CAQX,oBAA4B,aAAqB,UAAsC;EACrF,MAAM,OAAO,SAAS;EAYtB,MAAM,UATmC;GACvC,UAAU;GACV,OAAO;GACP,oBAAoB;GACpB,mBAAmB;GACnB,cAAc;GACd,aAAa;GACd,CAEuB;AACxB,MAAI,CAAC,QACH,QAAO;EAIT,MAAM,kBAAkB,KAAK,YAAY;AACzC,MAAI,mBAAmB,oBAAoB,aAAa;AACtD,OAAI,KACF;IAAE;IAAa;IAAS;IAAiB,EACzC,8BAA8B,QAAQ,qBAAqB,gBAAgB,GAC5E;AACD,QAAK,YAAY,KACf,aACA,SAAS,QAAQ,qBAAqB,gBAAgB,mBACvD;AACD,UAAO;;EAGT,MAAM,UAAU,KAAK,aAAa,MAAM,SAAS,aAAa,KAAK;AACnE,MAAI,CAAC,QACH,MAAK,YAAY,KAAK,aAAa,SAAS,QAAQ,wCAAwC;AAE9F,SAAO;;CAGT,aAAa,eAAiD;EAC5D,MAAM,eAAe,KAAK,eAAe,wBAAwB;AAGjE,MAAI,WAAW,aAAa,CAC1B,KAAI;GACF,MAAM,MAAM,KAAK,MAAM,aAAa,cAAc,QAAQ,CAAC;AAC3D,OAAI,CAAC,OAAO,OAAO,QAAQ,YAAY,MAAM,QAAQ,IAAI,EAAE;AACzD,QAAI,MAAM,EAAE,cAAc,EAAE,sCAAsC;AAClE,WAAO;;AAET,UAAO,2BAA2B,IAA+B;WAC1D,OAAO;AACd,OAAI,MAAM;IAAE,KAAK;IAAO;IAAc,EAAE,2BAA2B;AACnE,UAAO;;EAKX,MAAM,cAAc,KAAK,eAAe,eAAe;AACvD,MAAI,WAAW,YAAY,CACzB,KAAI;GACF,MAAM,cAAc,KAAK,MAAM,aAAa,aAAa,QAAQ,CAAC;AAGlE,OAAI,YAAY,MAAM,WAAW;IAC/B,MAAM,aAAa,YAAY;AAC/B,WAAO,2BAA2B;KAChC,IAAI,WAAW,MAAM,YAAY;KACjC,MAAM,WAAW,QAAQ,YAAY;KACrC,aAAa,WAAW,eAAe,YAAY;KACnD,SAAS,WAAW,WAAW,YAAY,WAAW;KACtD,MAAM,WAAW,QAAQ;KACzB,MAAM,WAAW,QAAQ,YAAY,QAAQ;KAC7C,cAAc,WAAW;KAC1B,CAAC;;AAIJ,OAAI,YAAY,MAAM,WAAW,kBAAkB,CAEjD,QAAO,2BAA2B;IAChC,IAFS,YAAY,KAAK,QAAQ,mBAAmB,GAAG;IAGxD,MAAM,YAAY;IAClB,aAAa,YAAY;IACzB,SAAS,YAAY,WAAW;IAChC,MAAM;IACN,MAAM,YAAY,QAAQ;IAC3B,CAAC;WAEG,OAAO;AACd,OAAI,MAAM;IAAE,KAAK;IAAO;IAAa,EAAE,+BAA+B;;AAI1E,SAAO;;CAGT,MAAc,WACZ,eACA,UACiC;EAEjC,MAAM,cAAc;GAClB,SAAS;GACT;GACA;GACA;GACA;GACD,CAAC,OAAO,QAAQ;AAEjB,OAAK,MAAM,SAAS,aAAa;GAC/B,MAAM,WAAW,WAAW,MAAM,GAAG,QAAQ,KAAK,eAAe,MAAM;AAEvE,OAAI,WAAW,SAAS,CACtB,KAAI;IAEF,MAAM,MAAM,KAAK,KAAK,SAAS;AAC/B,WAAO,IAAI,WAAW;YACf,OAAO;AACd,QAAI,KAAK;KAAE,KAAK;KAAO,MAAM;KAAU,EAAE,wBAAwB;;;AAKvE,SAAO;;CAGT,mBACE,UACA,UACA,cACc;EACd,MAAM,SAAS,sBAAsB,IAAI,SAAS,GAAG,GAAG;EACxD,MAAM,cAAc,mBAAmB,cAAc,KAAK,QAAQ,gBAAgB,GAAG;EAErF,MAAM,YAAY,KAAK,cAAe,EAAE;EACxC,MAAM,gBAAiB,SAAS,UAAU,EAAE;EAE5C,MAAM,UACJ,KAAK,cAAc,KAAK,kBACpB;GACE,QAAQ,KAAK;GACb,KAAK,KAAK,gBAAgB;GAC1B,KAAK;GACL,gBAAgB,KAAK,gBAAgB;GACtC,GACD,KAAK,aACH;GACE,QAAQ,KAAK;GACb,KAAK;GACN,GACD,KAAA;AAER,SAAO,IAAI,iBACT,SAAS,IACT,SAAS,MACT,SAAS,SACT,cACA,WACA,eACA,QACA,aACA,KAAK,UACL,QACD;;CAGH,MAAc,oBACZ,QACA,KACA,WACe;AACf,MAAI,OAAO,WAAW,WAEpB,OAAM,OAAO,IAAI;WACR,OAAO,WAAW,YAAY,OAAO,SAE9C,OAAM,OAAO,SAAS,IAAI;;CAI9B,MAAM,gBAA+B;EACnC,MAAM,WAAW,MAAM,KAAK,KAAK,SAAS,SAAS,QAAQ,CAAC;AAE5D,OAAK,MAAM,WAAW,UAAU;GAC9B,MAAM,aAAa,oBAAoB,QAAQ,GAAG;AAClD,OAAI;AACF,UAAM,QAAQ,SAAS;AACvB,eAAW,KAAK,kBAAkB;YAC3B,OAAO;AACd,eAAW,MAAM,EAAE,KAAK,OAAO,EAAE,0BAA0B;;;;CAKjE,MAAM,eAA8B;EAClC,MAAM,WAAW,MAAM,KAAK,KAAK,SAAS,SAAS,QAAQ,CAAC,CAAC,SAAS;AAEtE,OAAK,MAAM,WAAW,SACpB,KAAI,QAAQ,MAAM;GAChB,MAAM,aAAa,oBAAoB,QAAQ,GAAG;AAClD,OAAI;AACF,UAAM,QAAQ,MAAM;AACpB,eAAW,KAAK,kBAAkB;YAC3B,OAAO;AACd,eAAW,MAAM,EAAE,KAAK,OAAO,EAAE,yBAAyB;;;;;;;CASlE,aAAqB,OAAgB,cAA+B;AAClE,MAAI,iBAAiB,SAAU,QAAO,OAAO,UAAU;AACvD,MAAI,iBAAiB,YAAY,iBAAiB,UAAW,QAAO,OAAO,UAAU;AACrF,MAAI,iBAAiB,UAAW,QAAO,OAAO,UAAU;AACxD,MAAI,iBAAiB,QAAS,QAAO,MAAM,QAAQ,MAAM;AACzD,MAAI,iBAAiB,SAAU,QAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,MAAM;AAC1G,SAAO;;;AAQX,SAAgB,qBAAqB,IAAY,SAAgD;CAC/F,MAAM,IAAI,YAAY;CACtB,MAAM,MAAM,sBAAsB,EAAE;AAEf,SAAQ,gBAAgB,yBAAyB,GAAG,IAAI;CAC7E,MAAM,gBAAgB,KAAK,8BAA8B,GAAG,IAAI,EAAE,GAAG;AACrE,KAAI,WAAW,cAAc,CAAE,QAAO;CAGtC,MAAM,aAAa,KAAK,sBAAsB,EAAE,GAAG;AACnD,KAAI,WAAW,WAAW,CAAE,QAAO;CAGnC,MAAM,aAAa,6BAA6B;AAChD,KAAI,YAAY;EACd,MAAM,cAAc,KAAK,YAAY,GAAG;AACxC,MAAI,WAAW,YAAY,CAAE,QAAO;;AAItC,KAAI;AAGF,SAAO,QAFS,cAAc,OAAO,KAAK,IAAI,CACrB,QAAQ,GAAG,CACZ;SAClB;AACN,SAAO;;;AAIX,SAAgB,yBACd,WAC2B;CAC3B,MAAM,aAAwC,EAAE;CAEhD,MAAM,UAAW,UAAU,WAAwB,EAAE;CACrD,MAAM,WAAY,UAAU,YAAyB,EAAE;AAGvD,MAAK,MAAM,MAAM,SAAS;EACxB,MAAM,SAAU,UAAU,OAAmC,EAAE;AAC/D,aAAW,KAAK;GACd;GACA,MAAM;GACN,QAAQ;GACR,MAAM;GACN,SAAS;GACT;GACD,CAAC;;AAIJ,MAAK,MAAM,MAAM,SACf,KAAI,CAAC,WAAW,MAAM,MAAM,EAAE,OAAO,GAAG,EAAE;EACxC,MAAM,SAAU,UAAU,OAAmC,EAAE;AAC/D,aAAW,KAAK;GACd;GACA,MAAM;GACN,QAAQ;GACR,MAAM;GACN,SAAS;GACT;GACD,CAAC;;AAIN,QAAO"}
+{"version":3,"file":"loader.js","names":[],"sources":["../../../src/extensions/loader.ts"],"sourcesContent":["/**\n * Extension Loader and Registry\n * \n * Supports three-tier extension storage:\n * 1. Workspace level (workspace/.extensions/) - highest priority\n * 2. Global level (~/.xopc/extensions/) - shared across workspaces\n * 3. Bundled level (xopc/extensions/) - shipped with xopc\n */\n\nimport { existsSync, readFileSync, readdirSync } from 'fs';\nimport { join, dirname, isAbsolute } from 'path';\nimport { fileURLToPath } from 'node:url';\nimport { createRequire } from 'node:module';\nimport { createJiti } from 'jiti';\nimport { resolveDefaultAgentId } from '../agent/agent-scope.js';\nimport { loadConfig } from '../config/loader.js';\nimport {\n  resolveAgentWorkspaceDir,\n  resolveExtensionsDir,\n  resolveWorkspaceExtensionsDir,\n  resolveBundledExtensionsDir,\n  resolveExtensionSdkPath,\n} from '../config/paths.js';\nimport type { Config } from '../config/config-surface.js';\nimport type { MessageBus } from '../infra/bus/index.js';\nimport type { SessionManager } from '../session/manager.js';\nimport type { AgentTool } from '@mariozechner/pi-agent-core';\nimport type {\n  ExtensionApi,\n  ExtensionModule,\n  ExtensionRegistry,\n  ExtensionCliRegistration,\n  GatewayMethodHandler,\n  HttpRequestHandler,\n  ExtensionCommand,\n  ExtensionService,\n  ExtensionHookEvent,\n  ExtensionHookHandler,\n  ExtensionManifest,\n  ExtensionRecord,\n  ResolvedExtensionConfig,\n  DiscoveredExtension,\n} from './types/index.js';\nimport type { ActivationContext } from './activation-planner.js';\nimport { ActivationPlanner } from './activation-planner.js';\nimport { mergeActivationContext } from './activation-context.js';\nimport { ManifestRegistry } from './manifest-registry.js';\nimport { normalizeExtensionManifest } from './normalize-manifest.js';\nimport type { ChannelPlugin } from '../channels/plugin-types.js';\nimport { bundledChannelPlugins } from '../channels/plugins/bundled.js';\nimport { ExtensionApiImpl, createExtensionLogger, createPathResolver } from './api.js';\nimport { createLogger, createServiceLogger } from '../utils/logger.js';\n\n//  Security imports\nimport {\n  checkExtensionPathSafety,\n  isExtensionAllowed,\n  provenanceTracker,\n  logSecurityIssue,\n  DEFAULT_SECURITY_CONFIG,\n  type SecurityConfig,\n  // Note: ExtensionSourceOrigin is defined locally in this file\n} from './security.js';\n\n//  Provider imports\nimport { getProviderRegistry, type ProviderPluginRegistry } from '../providers/plugin-registry.js';\n\n//  Slot imports\nimport {\n  getSlotRegistry,\n  type SlotRegistry,\n  type SlotKey,\n} from './slots.js';\n\n//  Diagnostics imports\nimport {\n  getExtensionCache,\n  getExtensionDiagnostics,\n  type ExtensionLoaderCache,\n  type ExtensionDiagnostics,\n} from './diagnostics.js';\n\nconst EXTENSION_MANIFEST_FILE = 'xopc.extension.json';\n\nconst log = createLogger('ExtensionLoader');\n\n// Extension source origin for debugging\nexport type ExtensionSourceOrigin = 'workspace' | 'global' | 'bundled' | 'config';\n\n// ============================================================================\n// Extension Registry\n// ============================================================================\n\nexport class ExtensionRegistryImpl implements ExtensionRegistry {\n  extensions = new Map<string, ExtensionRecord>();\n  hooks = new Map<ExtensionHookEvent, ExtensionHookHandler[]>();\n  httpRoutes = new Map<string, HttpRequestHandler>();\n  commands = new Map<string, ExtensionCommand>();\n  services = new Map<string, ExtensionService>();\n  gatewayMethods = new Map<string, GatewayMethodHandler>();\n  tools = new Map<string, AgentTool>();\n  channelPlugins: ChannelPlugin[] = [];\n  private cliRegistrations: ExtensionCliRegistration[] = [];\n\n  addExtension(record: ExtensionRecord): void {\n    this.extensions.set(record.id, record);\n  }\n\n  getExtension(id: string): ExtensionRecord | undefined {\n    return this.extensions.get(id);\n  }\n\n  getEnabledExtensions(): ExtensionRecord[] {\n    return Array.from(this.extensions.values()).filter((p) => p.enabled);\n  }\n\n  addHook(\n    event: ExtensionHookEvent,\n    handler: ExtensionHookHandler,\n    extensionId: string,\n    _priority = 0,\n  ): void {\n    if (!this.hooks.has(event)) {\n      this.hooks.set(event, []);\n    }\n    this.hooks.get(event)!.push(handler);\n  }\n\n  getHooks(event: ExtensionHookEvent): ExtensionHookHandler[] {\n    return this.hooks.get(event) || [];\n  }\n\n  addChannelPlugin(plugin: ChannelPlugin): void {\n    this.channelPlugins = this.channelPlugins.filter((p) => p.id !== plugin.id);\n    this.channelPlugins.push(plugin);\n  }\n\n  addHttpRoute(path: string, handler: HttpRequestHandler): void {\n    if (this.httpRoutes.has(path)) {\n      log.warn({ path }, `HTTP route already registered, overwriting`);\n    }\n    this.httpRoutes.set(path, handler);\n  }\n\n  getHttpRoute(path: string): HttpRequestHandler | undefined {\n    return this.httpRoutes.get(path);\n  }\n\n  addCommand(command: ExtensionCommand): void {\n    if (this.commands.has(command.name)) {\n      log.warn({ command: command.name }, `Command already registered, overwriting`);\n    }\n    this.commands.set(command.name, command);\n  }\n\n  getCommand(name: string): ExtensionCommand | undefined {\n    return this.commands.get(name);\n  }\n\n  addService(service: ExtensionService): void {\n    if (this.services.has(service.id)) {\n      log.warn({ service: service.id }, `Service already registered, overwriting`);\n    }\n    this.services.set(service.id, service);\n  }\n\n  getService(id: string): ExtensionService | undefined {\n    return this.services.get(id);\n  }\n\n  addGatewayMethod(method: string, handler: GatewayMethodHandler): void {\n    if (this.gatewayMethods.has(method)) {\n      log.warn({ method }, `Gateway method already registered, overwriting`);\n    }\n    this.gatewayMethods.set(method, handler);\n  }\n\n  getGatewayMethod(method: string): GatewayMethodHandler | undefined {\n    return this.gatewayMethods.get(method);\n  }\n\n  // Tools\n  addTool(tool: AgentTool): void {\n    if (this.tools.has(tool.name)) {\n      log.warn({ tool: tool.name }, `Tool already registered, overwriting`);\n    }\n    this.tools.set(tool.name, tool);\n  }\n\n  removeTool(name: string): void {\n    this.tools.delete(name);\n  }\n\n  getTools(): Map<string, AgentTool> {\n    return this.tools;\n  }\n\n  getTool(name: string): AgentTool | undefined {\n    return this.tools.get(name);\n  }\n\n  getAllTools(): AgentTool[] {\n    return Array.from(this.tools.values());\n  }\n\n  addCliRegistration(reg: ExtensionCliRegistration): void {\n    this.cliRegistrations.push(reg);\n  }\n\n  getCliRegistrations(): readonly ExtensionCliRegistration[] {\n    return this.cliRegistrations;\n  }\n}\n\n// ============================================================================\n// Extension Loader\n// ============================================================================\n\nexport interface ExtensionLoaderOptions {\n  workspaceDir?: string;\n  extensionsDir?: string;\n  bundledExtensions?: string[];\n}\n\nexport class ExtensionLoader {\n  private registry: ExtensionRegistryImpl;\n  private options: ExtensionLoaderOptions;\n  private extensionInstances: Map<string, ExtensionApi> = new Map();\n  private jiti: ReturnType<typeof createJiti>;\n  private _appConfig?: Config;\n  private _runtimeContext?: { bus: MessageBus; sessionManager?: SessionManager };\n  \n  //  Security\n  private securityConfig: SecurityConfig;\n  \n  //  Provider Registry\n  private providerRegistry: ProviderPluginRegistry;\n  \n  //  Slot Registry & Config\n  private slotRegistry: SlotRegistry;\n  private slotsConfig: Partial<Record<SlotKey, string>> = {};\n  \n  //  Cache and Diagnostics\n  private cache: ExtensionLoaderCache;\n  private diagnostics: ExtensionDiagnostics;\n\n  /** Manifest-only registry cache (no runtime module load). */\n  private manifestRegistry: ManifestRegistry | null = null;\n\n  constructor(options?: ExtensionLoaderOptions) {\n    this.registry = new ExtensionRegistryImpl();\n    for (const p of bundledChannelPlugins) {\n      this.registry.addChannelPlugin(p);\n    }\n    this.options = options || (() => {\n      const c = loadConfig();\n      const aid = resolveDefaultAgentId(c);\n      return {\n        workspaceDir: resolveAgentWorkspaceDir(c, aid),\n        extensionsDir: resolveWorkspaceExtensionsDir(c, aid),\n      };\n    })();\n\n    // Initialize security config\n    this.securityConfig = DEFAULT_SECURITY_CONFIG;\n    \n    // Initialize provider registry\n    this.providerRegistry = getProviderRegistry();\n    \n    // Initialize slot registry\n    this.slotRegistry = getSlotRegistry();\n    \n    // Initialize cache and diagnostics \n    this.cache = getExtensionCache();\n    this.diagnostics = getExtensionDiagnostics();\n\n    // Build jiti alias for extension-sdk (+ subpath entry points)\n    const alias: Record<string, string> = {};\n    const sdkPath = resolveExtensionSdkPath();\n    if (sdkPath) {\n      alias['xopc/extension-sdk'] = sdkPath;\n      const sdkDir = dirname(sdkPath);\n      alias['xopc/extension-sdk/core'] = join(sdkDir, 'core.ts');\n      alias['xopc/extension-sdk/lazy'] = join(sdkDir, 'lazy.ts');\n      alias['xopc/extension-sdk/provider'] = join(sdkDir, 'provider.ts');\n      alias['xopc/extension-sdk/channel'] = join(sdkDir, 'channel.ts');\n      alias['xopc/extension-sdk/hooks'] = join(sdkDir, 'hooks.ts');\n      alias['xopc/extension-sdk/tools'] = join(sdkDir, 'tools.ts');\n      alias['xopc/extension-sdk/testing'] = join(sdkDir, 'testing.ts');\n    }\n\n    // Initialize jiti with TypeScript support and SDK alias\n    this.jiti = createJiti(fileURLToPath(import.meta.url), {\n      interopDefault: true,\n      extensions: ['.ts', '.tsx', '.mts', '.cts', '.js', '.mjs', '.cjs', '.json'],\n      alias,\n    });\n  }\n\n  /**\n   * Set security configuration \n   */\n  setSecurityConfig(config: Partial<SecurityConfig>): void {\n    this.securityConfig = { ...this.securityConfig, ...config };\n  }\n\n  /**\n   * Get security configuration \n   */\n  getSecurityConfig(): SecurityConfig {\n    return this.securityConfig;\n  }\n\n  /**\n   * Get provider registry \n   */\n  getProviderRegistry(): ProviderPluginRegistry {\n    return this.providerRegistry;\n  }\n\n  /**\n   * Get slot registry \n   */\n  getSlotRegistry(): SlotRegistry {\n    return this.slotRegistry;\n  }\n\n  /**\n   * Get diagnostics \n   */\n  getDiagnostics(): ExtensionDiagnostics {\n    return this.diagnostics;\n  }\n\n  /**\n   * Set configuration from main Config object \n   */\n  setConfig(config: Config): void {\n    this._appConfig = config;\n    // Wire slot config\n    const slots = (config.extensions as any)?.slots || {};\n    this.slotsConfig = {\n      memory: slots.memory,\n      tts: slots.tts,\n      imageGeneration: slots.imageGeneration,\n      webSearch: slots.webSearch,\n    };\n\n    // Wire security config\n    const security = (config.extensions as any)?.security;\n    if (security) {\n      this.securityConfig = {\n        checkPermissions: security.checkPermissions ?? true,\n        allowUntrusted: security.allowUntrusted ?? false,\n        allow: security.allow ?? [],\n        trackProvenance: security.trackProvenance ?? true,\n        allowPromptInjection: security.allowPromptInjection ?? false,\n      };\n    }\n  }\n\n  /**\n   * Inject MessageBus and optional SessionManager for ExtensionApi.runtime (Gateway).\n   */\n  setRuntimeContext(ctx: { bus: MessageBus; sessionManager?: SessionManager }): void {\n    this._runtimeContext = ctx;\n  }\n\n  getRegistry(): ExtensionRegistryImpl {\n    return this.registry;\n  }\n\n  /**\n   * Phase 1: build manifest registry (filesystem manifests only, no extension code load).\n   */\n  buildManifestRegistry(): ManifestRegistry {\n    if (this.manifestRegistry) {\n      return this.manifestRegistry;\n    }\n    const discovered = this.discoverExtensions();\n    this.manifestRegistry = ManifestRegistry.fromDiscovered(discovered);\n    return this.manifestRegistry;\n  }\n\n  /**\n   * Phase 2: activation planner over the manifest registry (pure logic).\n   */\n  planActivation(_context?: Partial<ActivationContext>): ActivationPlanner {\n    return new ActivationPlanner(this.buildManifestRegistry());\n  }\n\n  /**\n   * Phase 3: load only extensions selected by the activation plan.\n   */\n  async loadByActivationPlan(context?: Partial<ActivationContext>): Promise<void> {\n    const registry = this.buildManifestRegistry();\n    const planner = new ActivationPlanner(registry);\n    const fullContext = mergeActivationContext(this._appConfig, context);\n    const activatedIds = planner.getActivatedIds(fullContext).sort((a, b) => a.localeCompare(b));\n\n    for (const extensionId of activatedIds) {\n      if (this.extensionInstances.has(extensionId)) continue;\n      const entry = registry.getEntry(extensionId);\n      if (!entry) {\n        log.debug(\n          { extensionId },\n          'Activation plan references extension id that was not discovered on disk',\n        );\n        continue;\n      }\n\n      const config: ResolvedExtensionConfig = {\n        id: extensionId,\n        name: entry.manifest.name || extensionId,\n        source: entry.source,\n        path: entry.path,\n        enabled: true,\n        config: this.resolveExtensionConfig(extensionId),\n      };\n\n      await this.loadExtension(config);\n    }\n  }\n\n  getManifestRegistry(): ManifestRegistry {\n    return this.buildManifestRegistry();\n  }\n\n  invalidateManifestCache(): void {\n    this.manifestRegistry = null;\n  }\n\n  private resolveExtensionConfig(extensionId: string): Record<string, unknown> {\n    if (!this._appConfig) return {};\n    const extensionsConfig = (this._appConfig as Record<string, unknown>).extensions as\n      | Record<string, unknown>\n      | undefined;\n    if (!extensionsConfig || typeof extensionsConfig !== 'object') return {};\n    const raw = extensionsConfig[extensionId];\n    if (raw && typeof raw === 'object' && !Array.isArray(raw)) {\n      return raw as Record<string, unknown>;\n    }\n    return {};\n  }\n\n  /**\n   * Discover extensions from all three tiers:\n   * 1. Workspace (.extensions/) - highest priority\n   * 2. Global (~/.xopc/extensions/) - shared\n   * 3. Bundled (xopc/extensions/) - lowest priority\n   */\n  discoverExtensions(): DiscoveredExtension[] {\n    const discovered = new Map<string, DiscoveredExtension>();\n\n    // Priority 3: Bundled extensions (lowest)\n    const bundledDir = resolveBundledExtensionsDir();\n    if (bundledDir) {\n      this.discoverInDirectory(bundledDir, 'bundled', discovered);\n    }\n\n    // Priority 2: Global extensions\n    const globalDir = resolveExtensionsDir();\n    this.discoverInDirectory(globalDir, 'global', discovered);\n\n    // Priority 1: Workspace extensions (highest, can override)\n    const c = loadConfig();\n    const aid = resolveDefaultAgentId(c);\n    const workspaceExtensionsDir = resolveWorkspaceExtensionsDir(c, aid);\n    this.discoverInDirectory(workspaceExtensionsDir, 'workspace', discovered);\n\n    return Array.from(discovered.values());\n  }\n\n  private discoverInDirectory(\n    dir: string,\n    source: ExtensionSourceOrigin,\n    discovered: Map<string, DiscoveredExtension>,\n  ): void {\n    if (!existsSync(dir)) {\n      return;\n    }\n\n    let entries: string[];\n    try {\n      entries = readdirSync(dir);\n    } catch {\n      return;\n    }\n\n    for (const entry of entries) {\n      const extensionPath = join(dir, entry);\n\n      // Check if it's a directory\n      try {\n        const stat = existsSync(extensionPath);\n        if (!stat) continue;\n      } catch {\n        continue;\n      }\n\n      // Try to load manifest\n      const manifest = this.loadManifest(extensionPath);\n      if (!manifest) continue;\n\n      const extensionId = manifest.id || entry;\n\n      // Higher priority origins can override lower ones\n      const existing = discovered.get(extensionId);\n      if (existing) {\n        const priority = { workspace: 3, global: 2, bundled: 1, config: 0 };\n        if (priority[source] <= priority[existing.source]) {\n          log.debug(\n            { extensionId, from: source, existing: existing.source },\n            'Skipping lower priority extension',\n          );\n          continue;\n        }\n        log.info(\n          { extensionId, from: source, overriding: existing.source },\n          'Extension override by higher priority source',\n        );\n      }\n\n      discovered.set(extensionId, {\n        id: extensionId,\n        path: extensionPath,\n        source,\n        manifest,\n      });\n    }\n  }\n\n  /**\n   * Load all discovered extensions\n   */\n  async loadAllExtensions(enabledIds?: string[]): Promise<void> {\n    const extensions = this.discoverExtensions();\n\n    for (const extension of extensions) {\n      // If enabledIds specified, only load those\n      if (enabledIds && !enabledIds.includes(extension.id)) {\n        continue;\n      }\n\n      const config: ResolvedExtensionConfig = {\n        id: extension.id,\n        name: extension.manifest.name || extension.id,\n        source: extension.source,\n        path: extension.path,\n        enabled: true,\n        config: {},\n      };\n\n      await this.loadExtension(config);\n    }\n  }\n\n  async loadExtensions(configs: ResolvedExtensionConfig[]): Promise<void> {\n    for (const extensionConfig of configs) {\n      if (extensionConfig.enabled) {\n        await this.loadExtension(extensionConfig);\n      }\n    }\n  }\n\n  async loadExtension(config: ResolvedExtensionConfig): Promise<ExtensionApi | null> {\n    try {\n      //  Check cache first\n      const cacheKey = this.cache.buildKey(this.options, [config.id]);\n      const cached = this.cache.get<ExtensionApi>(cacheKey);\n      if (cached) {\n        log.debug({ extensionId: config.id }, 'Extension loaded from cache');\n        return cached;\n      }\n\n      // Check if already loaded\n      if (this.extensionInstances.has(config.id)) {\n        return this.extensionInstances.get(config.id)!;\n      }\n\n      // Resolve extension path using resolveExtensionPath\n      let extensionPath: string | null;\n      if (isAbsolute(config.path)) {\n        extensionPath = config.path;\n      } else {\n        // Try to resolve extension ID to actual path\n        extensionPath = resolveExtensionPath(config.path, this.options) ||\n                     resolveExtensionPath(config.id, this.options);\n      }\n      \n      if (!extensionPath) {\n        log.error({ extensionId: config.id, path: config.path }, `Could not resolve extension path`);\n        this.diagnostics.error(config.id, `Could not resolve extension path: ${config.path}`);\n        return null;\n      }\n\n      log.debug({ extensionId: config.id, extensionPath }, 'Resolved extension path');\n\n      //  Security check\n      const source = config.source || 'bundled';\n      const safetyResult = checkExtensionPathSafety(extensionPath, extensionPath, source);\n      \n      if (!safetyResult.safe) {\n        logSecurityIssue(config.id, safetyResult);\n        \n        if (this.securityConfig.checkPermissions && source !== 'bundled') {\n          // Check allowlist\n          if (!isExtensionAllowed(config.id, this.securityConfig)) {\n            this.diagnostics.error(config.id, `Extension not allowed: ${safetyResult.detail}`);\n            log.error({ extensionId: config.id, reason: safetyResult.reason }, 'Extension blocked by security policy');\n            return null;\n          }\n        }\n      }\n\n      // Track provenance \n      provenanceTracker.track(config.id, source);\n\n      const manifest = this.loadManifest(extensionPath);\n      if (!manifest) {\n        log.error({ extensionId: config.id, extensionPath }, `Failed to load manifest for extension`);\n        this.diagnostics.error(config.id, `Failed to load manifest`);\n        return null;\n      }\n\n      // Validate extension config against schema (basic validation)\n      if (manifest.configSchema) {\n        try {\n          const schema = manifest.configSchema as Record<string, unknown>;\n          const extensionConfig = config.config as Record<string, unknown>;\n          \n          // Basic validation: check required fields and types\n          if (schema.type === 'object' && schema.properties) {\n            const props = schema.properties as Record<string, Record<string, unknown>>;\n            const required = (schema.required as string[]) || [];\n            \n            for (const field of required) {\n              if (extensionConfig[field] === undefined) {\n                log.error({ \n                  extensionId: config.id, \n                  field \n                }, 'Extension config validation failed: missing required field');\n                return null;\n              }\n            }\n            \n            for (const [key, value] of Object.entries(extensionConfig)) {\n              const propSchema = props[key];\n              if (propSchema) {\n                if (propSchema.type && !this.validateType(value, propSchema.type as string)) {\n                  log.error({ \n                    extensionId: config.id, \n                    field: key,\n                    expected: propSchema.type,\n                    actual: typeof value\n                  }, 'Extension config validation failed: type mismatch');\n                  return null;\n                }\n              }\n            }\n          }\n          \n          log.debug({ extensionId: config.id }, 'Extension config validated');\n        } catch (err) {\n          log.warn({ err, extensionId: config.id }, 'Config schema validation skipped');\n        }\n      }\n\n      // Create extension API\n      const extensionDir = dirname(extensionPath);\n      const api = this.createExtensionApi(manifest, config, extensionDir);\n\n      // Load extension module\n      const module = await this.loadModule(extensionPath, manifest);\n      if (!module) {\n        log.error({ extensionId: config.id }, `Failed to load module for extension`);\n        this.diagnostics.error(config.id, `Failed to load module`);\n        return null;\n      }\n\n      //  Check and claim slots\n      const slotClaimed = this.claimExtensionSlots(config.id, manifest);\n      if (!slotClaimed) {\n        log.warn({ extensionId: config.id }, 'Failed to claim required slots');\n      }\n\n      // Initialize extension\n      await this.initializeExtension(module, api, manifest);\n\n      // Register to registry\n      this.registry.addExtension({\n        id: config.id,\n        name: manifest.name,\n        version: manifest.version,\n        path: extensionPath,\n        module,\n        config: config.config,\n        enabled: true,\n        source: config.source,\n      });\n\n      // Register extension tools to registry (so AgentManager can access them)\n      // Note: api is actually ExtensionApiImpl at runtime\n      const apiImpl = api as unknown as { _getTools: () => Map<string, AgentTool> };\n      const extensionTools = apiImpl._getTools();\n      for (const tool of extensionTools.values()) {\n        this.registry.addTool(tool);\n      }\n\n      this.extensionInstances.set(config.id, api);\n      \n      //  Cache the loaded extension\n      this.cache.set(cacheKey, api);\n\n      this.diagnostics.info(config.id, `Loaded extension: ${manifest.name}`);\n      log.info({ name: manifest.name, id: manifest.id, source: config.source }, `Loaded extension`);\n\n      return api;\n    } catch (error) {\n      log.error({ err: error, extensionId: config.id }, `Error loading extension`);\n      this.diagnostics.error(config.id, `Error loading extension: ${error}`);\n      return null;\n    }\n  }\n\n  /**\n   *  Claim extension slots based on manifest kind\n   * Respects configured preferred plugin from config.extensions.slots\n   */\n  private claimExtensionSlots(extensionId: string, manifest: ExtensionManifest): boolean {\n    const kind = manifest.kind as string;\n    \n    // Map extension kind to slot\n    const slotMap: Record<string, SlotKey> = {\n      'memory': 'memory',\n      'tts': 'tts',\n      'image-generation': 'imageGeneration',\n      'imageGeneration': 'imageGeneration',\n      'web-search': 'webSearch',\n      'webSearch': 'webSearch',\n    };\n    \n    const slotKey = slotMap[kind];\n    if (!slotKey) {\n      return true; // No slot required\n    }\n    \n    // Check if slot is reserved for a different plugin in config\n    const preferredPlugin = this.slotsConfig[slotKey];\n    if (preferredPlugin && preferredPlugin !== extensionId) {\n      log.info(\n        { extensionId, slotKey, preferredPlugin },\n        `Skipping slot claim: slot \"${slotKey}\" is reserved for \"${preferredPlugin}\"`\n      );\n      this.diagnostics.info(\n        extensionId,\n        `Slot \"${slotKey}\" is reserved for \"${preferredPlugin}\", skipping claim`\n      );\n      return false;\n    }\n    \n    const claimed = this.slotRegistry.claim(slotKey, extensionId, null);\n    if (!claimed) {\n      this.diagnostics.warn(extensionId, `Slot \"${slotKey}\" already claimed by another extension`);\n    }\n    return claimed;\n  }\n\n  loadManifest(extensionPath: string): ExtensionManifest | null {\n    const manifestPath = join(extensionPath, EXTENSION_MANIFEST_FILE);\n\n    // First try to load xopc.extension.json\n    if (existsSync(manifestPath)) {\n      try {\n        const raw = JSON.parse(readFileSync(manifestPath, 'utf-8'));\n        if (!raw || typeof raw !== 'object' || Array.isArray(raw)) {\n          log.error({ manifestPath }, 'Manifest root must be a JSON object');\n          return null;\n        }\n        return normalizeExtensionManifest(raw as Record<string, unknown>);\n      } catch (error) {\n        log.error({ err: error, manifestPath }, `Failed to parse manifest`);\n        return null;\n      }\n    }\n\n    // Fallback to package.json\n    const packagePath = join(extensionPath, 'package.json');\n    if (existsSync(packagePath)) {\n      try {\n        const packageJson = JSON.parse(readFileSync(packagePath, 'utf-8'));\n        \n        // Check for xopc.extension marker\n        if (packageJson.xopc?.extension) {\n          const xopcConfig = packageJson.xopc;\n          return normalizeExtensionManifest({\n            id: xopcConfig.id || packageJson.name,\n            name: xopcConfig.name || packageJson.name,\n            description: xopcConfig.description || packageJson.description,\n            version: xopcConfig.version || packageJson.version || '1.0.0',\n            kind: xopcConfig.kind || 'utility',\n            main: xopcConfig.main || packageJson.main || 'index.js',\n            configSchema: xopcConfig.configSchema,\n          });\n        }\n\n        // Also support xopc-extension-* naming convention\n        if (packageJson.name?.startsWith('xopc-extension-')) {\n          const id = packageJson.name.replace('xopc-extension-', '');\n          return normalizeExtensionManifest({\n            id,\n            name: packageJson.name,\n            description: packageJson.description,\n            version: packageJson.version || '1.0.0',\n            kind: 'utility',\n            main: packageJson.main || 'index.js',\n          });\n        }\n      } catch (error) {\n        log.error({ err: error, packagePath }, `Failed to parse package.json`);\n      }\n    }\n\n    return null;\n  }\n\n  private async loadModule(\n    extensionPath: string,\n    manifest: ExtensionManifest,\n  ): Promise<ExtensionModule | null> {\n    // Determine entry point - .ts files prioritized for development\n    const entryPoints = [\n      manifest.main,\n      'index.ts',\n      'index.js',\n      'extension.ts',\n      'extension.js',\n    ].filter(Boolean) as string[];\n\n    for (const entry of entryPoints) {\n      const fullPath = isAbsolute(entry) ? entry : join(extensionPath, entry);\n\n      if (existsSync(fullPath)) {\n        try {\n          // Use jiti to load both .ts and .js files\n          const mod = this.jiti(fullPath);\n          return mod.default || mod;\n        } catch (error) {\n          log.warn({ err: error, path: fullPath }, `Failed to load module`);\n        }\n      }\n    }\n\n    return null;\n  }\n\n  private createExtensionApi(\n    manifest: ExtensionManifest,\n    resolved: ResolvedExtensionConfig,\n    extensionDir: string,\n  ): ExtensionApi {\n    const logger = createExtensionLogger(`[${manifest.id}]`);\n    const resolvePath = createPathResolver(extensionDir, this.options.workspaceDir || '');\n\n    const appConfig = this._appConfig ?? ({} as Config);\n    const extensionOnly = (resolved.config ?? {}) as Record<string, unknown>;\n\n    const runtime =\n      this._appConfig && this._runtimeContext\n        ? {\n            config: this._appConfig,\n            bus: this._runtimeContext.bus,\n            log: logger,\n            sessionManager: this._runtimeContext.sessionManager,\n          }\n        : this._appConfig\n          ? {\n              config: this._appConfig,\n              log: logger,\n            }\n          : undefined;\n\n    return new ExtensionApiImpl(\n      manifest.id,\n      manifest.name,\n      manifest.version,\n      extensionDir,\n      appConfig,\n      extensionOnly,\n      logger,\n      resolvePath,\n      this.registry,\n      runtime,\n    );\n  }\n\n  private async initializeExtension(\n    module: ExtensionModule,\n    api: ExtensionApi,\n    _manifest: ExtensionManifest,\n  ): Promise<void> {\n    if (typeof module === 'function') {\n      // Module is a function that receives the API\n      await module(api);\n    } else if (typeof module === 'object' && module.register) {\n      // Module is a ExtensionDefinition with register method\n      await module.register(api);\n    }\n  }\n\n  async startServices(): Promise<void> {\n    const services = Array.from(this.registry.services.values());\n\n    for (const service of services) {\n      const serviceLog = createServiceLogger(service.id);\n      try {\n        await service.start?.();\n        serviceLog.info(`Started service`);\n      } catch (error) {\n        serviceLog.error({ err: error }, `Failed to start service`);\n      }\n    }\n  }\n\n  async stopServices(): Promise<void> {\n    const services = Array.from(this.registry.services.values()).reverse();\n\n    for (const service of services) {\n      if (service.stop) {\n        const serviceLog = createServiceLogger(service.id);\n        try {\n          await service.stop();\n          serviceLog.info(`Stopped service`);\n        } catch (error) {\n          serviceLog.error({ err: error }, `Failed to stop service`);\n        }\n      }\n    }\n  }\n\n  /**\n   * Basic type validation for config values\n   */\n  private validateType(value: unknown, expectedType: string): boolean {\n    if (expectedType === 'string') return typeof value === 'string';\n    if (expectedType === 'number' || expectedType === 'integer') return typeof value === 'number';\n    if (expectedType === 'boolean') return typeof value === 'boolean';\n    if (expectedType === 'array') return Array.isArray(value);\n    if (expectedType === 'object') return typeof value === 'object' && value !== null && !Array.isArray(value);\n    return true;\n  }\n}\n\n// ============================================================================\n// Utility Functions\n// ============================================================================\n\nexport function resolveExtensionPath(id: string, _options: ExtensionLoaderOptions): string | null {\n  const c = loadConfig();\n  const aid = resolveDefaultAgentId(c);\n  // Priority 1: Workspace\n  const workspacePath = join(resolveWorkspaceExtensionsDir(c, aid), id);\n  if (existsSync(workspacePath)) return workspacePath;\n\n  // Priority 2: Global\n  const globalPath = join(resolveExtensionsDir(), id);\n  if (existsSync(globalPath)) return globalPath;\n\n  // Priority 3: Bundled\n  const bundledDir = resolveBundledExtensionsDir();\n  if (bundledDir) {\n    const bundledPath = join(bundledDir, id);\n    if (existsSync(bundledPath)) return bundledPath;\n  }\n\n  // Check if it's an npm package\n  try {\n    const require = createRequire(import.meta.url);\n    const resolved = require.resolve(id);\n    return dirname(resolved);\n  } catch {\n    return null;\n  }\n}\n\nexport function normalizeExtensionConfig(\n  rawConfig: Record<string, unknown>,\n): ResolvedExtensionConfig[] {\n  const extensions: ResolvedExtensionConfig[] = [];\n\n  const enabled = (rawConfig.enabled as string[]) || [];\n  const disabled = (rawConfig.disabled as string[]) || [];\n\n  // Parse enabled extensions\n  for (const id of enabled) {\n    const config = (rawConfig[id] as Record<string, unknown>) || {};\n    extensions.push({\n      id,\n      name: id,\n      source: 'config',\n      path: id,\n      enabled: true,\n      config,\n    });\n  }\n\n  // Parse disabled extensions\n  for (const id of disabled) {\n    if (!extensions.find((p) => p.id === id)) {\n      const config = (rawConfig[id] as Record<string, unknown>) || {};\n      extensions.push({\n        id,\n        name: id,\n        source: 'config',\n        path: id,\n        enabled: false,\n        config,\n      });\n    }\n  }\n\n  return extensions;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAcgE;aACf;YAOrB;aA6B2C;sBAc4B;AAiBnG,MAAM,0BAA0B;AAEhC,MAAM,MAAM,aAAa,kBAAkB;AAS3C,IAAa,wBAAb,MAAgE;CAC9D,6BAAa,IAAI,KAA8B;CAC/C,wBAAQ,IAAI,KAAiD;CAC7D,6BAAa,IAAI,KAAiC;CAClD,2BAAW,IAAI,KAA+B;CAC9C,2BAAW,IAAI,KAA+B;CAC9C,iCAAiB,IAAI,KAAmC;CACxD,wBAAQ,IAAI,KAAwB;CACpC,iBAAkC,EAAE;CACpC,mBAAuD,EAAE;CAEzD,aAAa,QAA+B;AAC1C,OAAK,WAAW,IAAI,OAAO,IAAI,OAAO;;CAGxC,aAAa,IAAyC;AACpD,SAAO,KAAK,WAAW,IAAI,GAAG;;CAGhC,uBAA0C;AACxC,SAAO,MAAM,KAAK,KAAK,WAAW,QAAQ,CAAC,CAAC,QAAQ,MAAM,EAAE,QAAQ;;CAGtE,QACE,OACA,SACA,aACA,YAAY,GACN;AACN,MAAI,CAAC,KAAK,MAAM,IAAI,MAAM,CACxB,MAAK,MAAM,IAAI,OAAO,EAAE,CAAC;AAE3B,OAAK,MAAM,IAAI,MAAM,CAAE,KAAK,QAAQ;;CAGtC,SAAS,OAAmD;AAC1D,SAAO,KAAK,MAAM,IAAI,MAAM,IAAI,EAAE;;CAGpC,iBAAiB,QAA6B;AAC5C,OAAK,iBAAiB,KAAK,eAAe,QAAQ,MAAM,EAAE,OAAO,OAAO,GAAG;AAC3E,OAAK,eAAe,KAAK,OAAO;;CAGlC,aAAa,MAAc,SAAmC;AAC5D,MAAI,KAAK,WAAW,IAAI,KAAK,CAC3B,KAAI,KAAK,EAAE,MAAM,EAAE,6CAA6C;AAElE,OAAK,WAAW,IAAI,MAAM,QAAQ;;CAGpC,aAAa,MAA8C;AACzD,SAAO,KAAK,WAAW,IAAI,KAAK;;CAGlC,WAAW,SAAiC;AAC1C,MAAI,KAAK,SAAS,IAAI,QAAQ,KAAK,CACjC,KAAI,KAAK,EAAE,SAAS,QAAQ,MAAM,EAAE,0CAA0C;AAEhF,OAAK,SAAS,IAAI,QAAQ,MAAM,QAAQ;;CAG1C,WAAW,MAA4C;AACrD,SAAO,KAAK,SAAS,IAAI,KAAK;;CAGhC,WAAW,SAAiC;AAC1C,MAAI,KAAK,SAAS,IAAI,QAAQ,GAAG,CAC/B,KAAI,KAAK,EAAE,SAAS,QAAQ,IAAI,EAAE,0CAA0C;AAE9E,OAAK,SAAS,IAAI,QAAQ,IAAI,QAAQ;;CAGxC,WAAW,IAA0C;AACnD,SAAO,KAAK,SAAS,IAAI,GAAG;;CAG9B,iBAAiB,QAAgB,SAAqC;AACpE,MAAI,KAAK,eAAe,IAAI,OAAO,CACjC,KAAI,KAAK,EAAE,QAAQ,EAAE,iDAAiD;AAExE,OAAK,eAAe,IAAI,QAAQ,QAAQ;;CAG1C,iBAAiB,QAAkD;AACjE,SAAO,KAAK,eAAe,IAAI,OAAO;;CAIxC,QAAQ,MAAuB;AAC7B,MAAI,KAAK,MAAM,IAAI,KAAK,KAAK,CAC3B,KAAI,KAAK,EAAE,MAAM,KAAK,MAAM,EAAE,uCAAuC;AAEvE,OAAK,MAAM,IAAI,KAAK,MAAM,KAAK;;CAGjC,WAAW,MAAoB;AAC7B,OAAK,MAAM,OAAO,KAAK;;CAGzB,WAAmC;AACjC,SAAO,KAAK;;CAGd,QAAQ,MAAqC;AAC3C,SAAO,KAAK,MAAM,IAAI,KAAK;;CAG7B,cAA2B;AACzB,SAAO,MAAM,KAAK,KAAK,MAAM,QAAQ,CAAC;;CAGxC,mBAAmB,KAAqC;AACtD,OAAK,iBAAiB,KAAK,IAAI;;CAGjC,sBAA2D;AACzD,SAAO,KAAK;;;AAchB,IAAa,kBAAb,MAA6B;CAC3B;CACA;CACA,qCAAwD,IAAI,KAAK;CACjE;CACA;CACA;CAGA;CAGA;CAGA;CACA,cAAwD,EAAE;CAG1D;CACA;;CAGA,mBAAoD;CAEpD,YAAY,SAAkC;AAC5C,OAAK,WAAW,IAAI,uBAAuB;AAC3C,OAAK,MAAM,KAAK,sBACd,MAAK,SAAS,iBAAiB,EAAE;AAEnC,OAAK,UAAU,kBAAkB;GAC/B,MAAM,IAAI,YAAY;GACtB,MAAM,MAAM,sBAAsB,EAAE;AACpC,UAAO;IACL,cAAc,yBAAyB,GAAG,IAAI;IAC9C,eAAe,8BAA8B,GAAG,IAAI;IACrD;MACC;AAGJ,OAAK,iBAAiB;AAGtB,OAAK,mBAAmB,qBAAqB;AAG7C,OAAK,eAAe,iBAAiB;AAGrC,OAAK,QAAQ,mBAAmB;AAChC,OAAK,cAAc,yBAAyB;EAG5C,MAAM,QAAgC,EAAE;EACxC,MAAM,UAAU,yBAAyB;AACzC,MAAI,SAAS;AACX,SAAM,wBAAwB;GAC9B,MAAM,SAAS,QAAQ,QAAQ;AAC/B,SAAM,6BAA6B,KAAK,QAAQ,UAAU;AAC1D,SAAM,6BAA6B,KAAK,QAAQ,UAAU;AAC1D,SAAM,iCAAiC,KAAK,QAAQ,cAAc;AAClE,SAAM,gCAAgC,KAAK,QAAQ,aAAa;AAChE,SAAM,8BAA8B,KAAK,QAAQ,WAAW;AAC5D,SAAM,8BAA8B,KAAK,QAAQ,WAAW;AAC5D,SAAM,gCAAgC,KAAK,QAAQ,aAAa;;AAIlE,OAAK,OAAO,WAAW,cAAc,OAAO,KAAK,IAAI,EAAE;GACrD,gBAAgB;GAChB,YAAY;IAAC;IAAO;IAAQ;IAAQ;IAAQ;IAAO;IAAQ;IAAQ;IAAQ;GAC3E;GACD,CAAC;;;;;CAMJ,kBAAkB,QAAuC;AACvD,OAAK,iBAAiB;GAAE,GAAG,KAAK;GAAgB,GAAG;GAAQ;;;;;CAM7D,oBAAoC;AAClC,SAAO,KAAK;;;;;CAMd,sBAA8C;AAC5C,SAAO,KAAK;;;;;CAMd,kBAAgC;AAC9B,SAAO,KAAK;;;;;CAMd,iBAAuC;AACrC,SAAO,KAAK;;;;;CAMd,UAAU,QAAsB;AAC9B,OAAK,aAAa;EAElB,MAAM,QAAS,OAAO,YAAoB,SAAS,EAAE;AACrD,OAAK,cAAc;GACjB,QAAQ,MAAM;GACd,KAAK,MAAM;GACX,iBAAiB,MAAM;GACvB,WAAW,MAAM;GAClB;EAGD,MAAM,WAAY,OAAO,YAAoB;AAC7C,MAAI,SACF,MAAK,iBAAiB;GACpB,kBAAkB,SAAS,oBAAoB;GAC/C,gBAAgB,SAAS,kBAAkB;GAC3C,OAAO,SAAS,SAAS,EAAE;GAC3B,iBAAiB,SAAS,mBAAmB;GAC7C,sBAAsB,SAAS,wBAAwB;GACxD;;;;;CAOL,kBAAkB,KAAiE;AACjF,OAAK,kBAAkB;;CAGzB,cAAqC;AACnC,SAAO,KAAK;;;;;CAMd,wBAA0C;AACxC,MAAI,KAAK,iBACP,QAAO,KAAK;EAEd,MAAM,aAAa,KAAK,oBAAoB;AAC5C,OAAK,mBAAmB,iBAAiB,eAAe,WAAW;AACnE,SAAO,KAAK;;;;;CAMd,eAAe,UAA0D;AACvE,SAAO,IAAI,kBAAkB,KAAK,uBAAuB,CAAC;;;;;CAM5D,MAAM,qBAAqB,SAAqD;EAC9E,MAAM,WAAW,KAAK,uBAAuB;EAC7C,MAAM,UAAU,IAAI,kBAAkB,SAAS;EAC/C,MAAM,cAAc,uBAAuB,KAAK,YAAY,QAAQ;EACpE,MAAM,eAAe,QAAQ,gBAAgB,YAAY,CAAC,MAAM,GAAG,MAAM,EAAE,cAAc,EAAE,CAAC;AAE5F,OAAK,MAAM,eAAe,cAAc;AACtC,OAAI,KAAK,mBAAmB,IAAI,YAAY,CAAE;GAC9C,MAAM,QAAQ,SAAS,SAAS,YAAY;AAC5C,OAAI,CAAC,OAAO;AACV,QAAI,MACF,EAAE,aAAa,EACf,0EACD;AACD;;GAGF,MAAM,SAAkC;IACtC,IAAI;IACJ,MAAM,MAAM,SAAS,QAAQ;IAC7B,QAAQ,MAAM;IACd,MAAM,MAAM;IACZ,SAAS;IACT,QAAQ,KAAK,uBAAuB,YAAY;IACjD;AAED,SAAM,KAAK,cAAc,OAAO;;;CAIpC,sBAAwC;AACtC,SAAO,KAAK,uBAAuB;;CAGrC,0BAAgC;AAC9B,OAAK,mBAAmB;;CAG1B,uBAA+B,aAA8C;AAC3E,MAAI,CAAC,KAAK,WAAY,QAAO,EAAE;EAC/B,MAAM,mBAAoB,KAAK,WAAuC;AAGtE,MAAI,CAAC,oBAAoB,OAAO,qBAAqB,SAAU,QAAO,EAAE;EACxE,MAAM,MAAM,iBAAiB;AAC7B,MAAI,OAAO,OAAO,QAAQ,YAAY,CAAC,MAAM,QAAQ,IAAI,CACvD,QAAO;AAET,SAAO,EAAE;;;;;;;;CASX,qBAA4C;EAC1C,MAAM,6BAAa,IAAI,KAAkC;EAGzD,MAAM,aAAa,6BAA6B;AAChD,MAAI,WACF,MAAK,oBAAoB,YAAY,WAAW,WAAW;EAI7D,MAAM,YAAY,sBAAsB;AACxC,OAAK,oBAAoB,WAAW,UAAU,WAAW;EAGzD,MAAM,IAAI,YAAY;EAEtB,MAAM,yBAAyB,8BAA8B,GADjD,sBAAsB,EAAE,CACgC;AACpE,OAAK,oBAAoB,wBAAwB,aAAa,WAAW;AAEzE,SAAO,MAAM,KAAK,WAAW,QAAQ,CAAC;;CAGxC,oBACE,KACA,QACA,YACM;AACN,MAAI,CAAC,WAAW,IAAI,CAClB;EAGF,IAAI;AACJ,MAAI;AACF,aAAU,YAAY,IAAI;UACpB;AACN;;AAGF,OAAK,MAAM,SAAS,SAAS;GAC3B,MAAM,gBAAgB,KAAK,KAAK,MAAM;AAGtC,OAAI;AAEF,QAAI,CADS,WAAW,cAAc,CAC3B;WACL;AACN;;GAIF,MAAM,WAAW,KAAK,aAAa,cAAc;AACjD,OAAI,CAAC,SAAU;GAEf,MAAM,cAAc,SAAS,MAAM;GAGnC,MAAM,WAAW,WAAW,IAAI,YAAY;AAC5C,OAAI,UAAU;IACZ,MAAM,WAAW;KAAE,WAAW;KAAG,QAAQ;KAAG,SAAS;KAAG,QAAQ;KAAG;AACnE,QAAI,SAAS,WAAW,SAAS,SAAS,SAAS;AACjD,SAAI,MACF;MAAE;MAAa,MAAM;MAAQ,UAAU,SAAS;MAAQ,EACxD,oCACD;AACD;;AAEF,QAAI,KACF;KAAE;KAAa,MAAM;KAAQ,YAAY,SAAS;KAAQ,EAC1D,+CACD;;AAGH,cAAW,IAAI,aAAa;IAC1B,IAAI;IACJ,MAAM;IACN;IACA;IACD,CAAC;;;;;;CAON,MAAM,kBAAkB,YAAsC;EAC5D,MAAM,aAAa,KAAK,oBAAoB;AAE5C,OAAK,MAAM,aAAa,YAAY;AAElC,OAAI,cAAc,CAAC,WAAW,SAAS,UAAU,GAAG,CAClD;GAGF,MAAM,SAAkC;IACtC,IAAI,UAAU;IACd,MAAM,UAAU,SAAS,QAAQ,UAAU;IAC3C,QAAQ,UAAU;IAClB,MAAM,UAAU;IAChB,SAAS;IACT,QAAQ,EAAE;IACX;AAED,SAAM,KAAK,cAAc,OAAO;;;CAIpC,MAAM,eAAe,SAAmD;AACtE,OAAK,MAAM,mBAAmB,QAC5B,KAAI,gBAAgB,QAClB,OAAM,KAAK,cAAc,gBAAgB;;CAK/C,MAAM,cAAc,QAA+D;AACjF,MAAI;GAEF,MAAM,WAAW,KAAK,MAAM,SAAS,KAAK,SAAS,CAAC,OAAO,GAAG,CAAC;GAC/D,MAAM,SAAS,KAAK,MAAM,IAAkB,SAAS;AACrD,OAAI,QAAQ;AACV,QAAI,MAAM,EAAE,aAAa,OAAO,IAAI,EAAE,8BAA8B;AACpE,WAAO;;AAIT,OAAI,KAAK,mBAAmB,IAAI,OAAO,GAAG,CACxC,QAAO,KAAK,mBAAmB,IAAI,OAAO,GAAG;GAI/C,IAAI;AACJ,OAAI,WAAW,OAAO,KAAK,CACzB,iBAAgB,OAAO;OAGvB,iBAAgB,qBAAqB,OAAO,MAAM,KAAK,QAAQ,IAClD,qBAAqB,OAAO,IAAI,KAAK,QAAQ;AAG5D,OAAI,CAAC,eAAe;AAClB,QAAI,MAAM;KAAE,aAAa,OAAO;KAAI,MAAM,OAAO;KAAM,EAAE,mCAAmC;AAC5F,SAAK,YAAY,MAAM,OAAO,IAAI,qCAAqC,OAAO,OAAO;AACrF,WAAO;;AAGT,OAAI,MAAM;IAAE,aAAa,OAAO;IAAI;IAAe,EAAE,0BAA0B;GAG/E,MAAM,SAAS,OAAO,UAAU;GAChC,MAAM,eAAe,yBAAyB,eAAe,eAAe,OAAO;AAEnF,OAAI,CAAC,aAAa,MAAM;AACtB,qBAAiB,OAAO,IAAI,aAAa;AAEzC,QAAI,KAAK,eAAe,oBAAoB,WAAW;SAEjD,CAAC,mBAAmB,OAAO,IAAI,KAAK,eAAe,EAAE;AACvD,WAAK,YAAY,MAAM,OAAO,IAAI,0BAA0B,aAAa,SAAS;AAClF,UAAI,MAAM;OAAE,aAAa,OAAO;OAAI,QAAQ,aAAa;OAAQ,EAAE,uCAAuC;AAC1G,aAAO;;;;AAMb,qBAAkB,MAAM,OAAO,IAAI,OAAO;GAE1C,MAAM,WAAW,KAAK,aAAa,cAAc;AACjD,OAAI,CAAC,UAAU;AACb,QAAI,MAAM;KAAE,aAAa,OAAO;KAAI;KAAe,EAAE,wCAAwC;AAC7F,SAAK,YAAY,MAAM,OAAO,IAAI,0BAA0B;AAC5D,WAAO;;AAIT,OAAI,SAAS,aACX,KAAI;IACF,MAAM,SAAS,SAAS;IACxB,MAAM,kBAAkB,OAAO;AAG/B,QAAI,OAAO,SAAS,YAAY,OAAO,YAAY;KACjD,MAAM,QAAQ,OAAO;KACrB,MAAM,WAAY,OAAO,YAAyB,EAAE;AAEpD,UAAK,MAAM,SAAS,SAClB,KAAI,gBAAgB,WAAW,KAAA,GAAW;AACxC,UAAI,MAAM;OACR,aAAa,OAAO;OACpB;OACD,EAAE,6DAA6D;AAChE,aAAO;;AAIX,UAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,gBAAgB,EAAE;MAC1D,MAAM,aAAa,MAAM;AACzB,UAAI;WACE,WAAW,QAAQ,CAAC,KAAK,aAAa,OAAO,WAAW,KAAe,EAAE;AAC3E,YAAI,MAAM;SACR,aAAa,OAAO;SACpB,OAAO;SACP,UAAU,WAAW;SACrB,QAAQ,OAAO;SAChB,EAAE,oDAAoD;AACvD,eAAO;;;;;AAMf,QAAI,MAAM,EAAE,aAAa,OAAO,IAAI,EAAE,6BAA6B;YAC5D,KAAK;AACZ,QAAI,KAAK;KAAE;KAAK,aAAa,OAAO;KAAI,EAAE,mCAAmC;;GAKjF,MAAM,eAAe,QAAQ,cAAc;GAC3C,MAAM,MAAM,KAAK,mBAAmB,UAAU,QAAQ,aAAa;GAGnE,MAAM,SAAS,MAAM,KAAK,WAAW,eAAe,SAAS;AAC7D,OAAI,CAAC,QAAQ;AACX,QAAI,MAAM,EAAE,aAAa,OAAO,IAAI,EAAE,sCAAsC;AAC5E,SAAK,YAAY,MAAM,OAAO,IAAI,wBAAwB;AAC1D,WAAO;;AAKT,OAAI,CADgB,KAAK,oBAAoB,OAAO,IAAI,SAAS,CAE/D,KAAI,KAAK,EAAE,aAAa,OAAO,IAAI,EAAE,iCAAiC;AAIxE,SAAM,KAAK,oBAAoB,QAAQ,KAAK,SAAS;AAGrD,QAAK,SAAS,aAAa;IACzB,IAAI,OAAO;IACX,MAAM,SAAS;IACf,SAAS,SAAS;IAClB,MAAM;IACN;IACA,QAAQ,OAAO;IACf,SAAS;IACT,QAAQ,OAAO;IAChB,CAAC;GAKF,MAAM,iBADU,IACe,WAAW;AAC1C,QAAK,MAAM,QAAQ,eAAe,QAAQ,CACxC,MAAK,SAAS,QAAQ,KAAK;AAG7B,QAAK,mBAAmB,IAAI,OAAO,IAAI,IAAI;AAG3C,QAAK,MAAM,IAAI,UAAU,IAAI;AAE7B,QAAK,YAAY,KAAK,OAAO,IAAI,qBAAqB,SAAS,OAAO;AACtE,OAAI,KAAK;IAAE,MAAM,SAAS;IAAM,IAAI,SAAS;IAAI,QAAQ,OAAO;IAAQ,EAAE,mBAAmB;AAE7F,UAAO;WACA,OAAO;AACd,OAAI,MAAM;IAAE,KAAK;IAAO,aAAa,OAAO;IAAI,EAAE,0BAA0B;AAC5E,QAAK,YAAY,MAAM,OAAO,IAAI,4BAA4B,QAAQ;AACtE,UAAO;;;;;;;CAQX,oBAA4B,aAAqB,UAAsC;EACrF,MAAM,OAAO,SAAS;EAYtB,MAAM,UATmC;GACvC,UAAU;GACV,OAAO;GACP,oBAAoB;GACpB,mBAAmB;GACnB,cAAc;GACd,aAAa;GACd,CAEuB;AACxB,MAAI,CAAC,QACH,QAAO;EAIT,MAAM,kBAAkB,KAAK,YAAY;AACzC,MAAI,mBAAmB,oBAAoB,aAAa;AACtD,OAAI,KACF;IAAE;IAAa;IAAS;IAAiB,EACzC,8BAA8B,QAAQ,qBAAqB,gBAAgB,GAC5E;AACD,QAAK,YAAY,KACf,aACA,SAAS,QAAQ,qBAAqB,gBAAgB,mBACvD;AACD,UAAO;;EAGT,MAAM,UAAU,KAAK,aAAa,MAAM,SAAS,aAAa,KAAK;AACnE,MAAI,CAAC,QACH,MAAK,YAAY,KAAK,aAAa,SAAS,QAAQ,wCAAwC;AAE9F,SAAO;;CAGT,aAAa,eAAiD;EAC5D,MAAM,eAAe,KAAK,eAAe,wBAAwB;AAGjE,MAAI,WAAW,aAAa,CAC1B,KAAI;GACF,MAAM,MAAM,KAAK,MAAM,aAAa,cAAc,QAAQ,CAAC;AAC3D,OAAI,CAAC,OAAO,OAAO,QAAQ,YAAY,MAAM,QAAQ,IAAI,EAAE;AACzD,QAAI,MAAM,EAAE,cAAc,EAAE,sCAAsC;AAClE,WAAO;;AAET,UAAO,2BAA2B,IAA+B;WAC1D,OAAO;AACd,OAAI,MAAM;IAAE,KAAK;IAAO;IAAc,EAAE,2BAA2B;AACnE,UAAO;;EAKX,MAAM,cAAc,KAAK,eAAe,eAAe;AACvD,MAAI,WAAW,YAAY,CACzB,KAAI;GACF,MAAM,cAAc,KAAK,MAAM,aAAa,aAAa,QAAQ,CAAC;AAGlE,OAAI,YAAY,MAAM,WAAW;IAC/B,MAAM,aAAa,YAAY;AAC/B,WAAO,2BAA2B;KAChC,IAAI,WAAW,MAAM,YAAY;KACjC,MAAM,WAAW,QAAQ,YAAY;KACrC,aAAa,WAAW,eAAe,YAAY;KACnD,SAAS,WAAW,WAAW,YAAY,WAAW;KACtD,MAAM,WAAW,QAAQ;KACzB,MAAM,WAAW,QAAQ,YAAY,QAAQ;KAC7C,cAAc,WAAW;KAC1B,CAAC;;AAIJ,OAAI,YAAY,MAAM,WAAW,kBAAkB,CAEjD,QAAO,2BAA2B;IAChC,IAFS,YAAY,KAAK,QAAQ,mBAAmB,GAAG;IAGxD,MAAM,YAAY;IAClB,aAAa,YAAY;IACzB,SAAS,YAAY,WAAW;IAChC,MAAM;IACN,MAAM,YAAY,QAAQ;IAC3B,CAAC;WAEG,OAAO;AACd,OAAI,MAAM;IAAE,KAAK;IAAO;IAAa,EAAE,+BAA+B;;AAI1E,SAAO;;CAGT,MAAc,WACZ,eACA,UACiC;EAEjC,MAAM,cAAc;GAClB,SAAS;GACT;GACA;GACA;GACA;GACD,CAAC,OAAO,QAAQ;AAEjB,OAAK,MAAM,SAAS,aAAa;GAC/B,MAAM,WAAW,WAAW,MAAM,GAAG,QAAQ,KAAK,eAAe,MAAM;AAEvE,OAAI,WAAW,SAAS,CACtB,KAAI;IAEF,MAAM,MAAM,KAAK,KAAK,SAAS;AAC/B,WAAO,IAAI,WAAW;YACf,OAAO;AACd,QAAI,KAAK;KAAE,KAAK;KAAO,MAAM;KAAU,EAAE,wBAAwB;;;AAKvE,SAAO;;CAGT,mBACE,UACA,UACA,cACc;EACd,MAAM,SAAS,sBAAsB,IAAI,SAAS,GAAG,GAAG;EACxD,MAAM,cAAc,mBAAmB,cAAc,KAAK,QAAQ,gBAAgB,GAAG;EAErF,MAAM,YAAY,KAAK,cAAe,EAAE;EACxC,MAAM,gBAAiB,SAAS,UAAU,EAAE;EAE5C,MAAM,UACJ,KAAK,cAAc,KAAK,kBACpB;GACE,QAAQ,KAAK;GACb,KAAK,KAAK,gBAAgB;GAC1B,KAAK;GACL,gBAAgB,KAAK,gBAAgB;GACtC,GACD,KAAK,aACH;GACE,QAAQ,KAAK;GACb,KAAK;GACN,GACD,KAAA;AAER,SAAO,IAAI,iBACT,SAAS,IACT,SAAS,MACT,SAAS,SACT,cACA,WACA,eACA,QACA,aACA,KAAK,UACL,QACD;;CAGH,MAAc,oBACZ,QACA,KACA,WACe;AACf,MAAI,OAAO,WAAW,WAEpB,OAAM,OAAO,IAAI;WACR,OAAO,WAAW,YAAY,OAAO,SAE9C,OAAM,OAAO,SAAS,IAAI;;CAI9B,MAAM,gBAA+B;EACnC,MAAM,WAAW,MAAM,KAAK,KAAK,SAAS,SAAS,QAAQ,CAAC;AAE5D,OAAK,MAAM,WAAW,UAAU;GAC9B,MAAM,aAAa,oBAAoB,QAAQ,GAAG;AAClD,OAAI;AACF,UAAM,QAAQ,SAAS;AACvB,eAAW,KAAK,kBAAkB;YAC3B,OAAO;AACd,eAAW,MAAM,EAAE,KAAK,OAAO,EAAE,0BAA0B;;;;CAKjE,MAAM,eAA8B;EAClC,MAAM,WAAW,MAAM,KAAK,KAAK,SAAS,SAAS,QAAQ,CAAC,CAAC,SAAS;AAEtE,OAAK,MAAM,WAAW,SACpB,KAAI,QAAQ,MAAM;GAChB,MAAM,aAAa,oBAAoB,QAAQ,GAAG;AAClD,OAAI;AACF,UAAM,QAAQ,MAAM;AACpB,eAAW,KAAK,kBAAkB;YAC3B,OAAO;AACd,eAAW,MAAM,EAAE,KAAK,OAAO,EAAE,yBAAyB;;;;;;;CASlE,aAAqB,OAAgB,cAA+B;AAClE,MAAI,iBAAiB,SAAU,QAAO,OAAO,UAAU;AACvD,MAAI,iBAAiB,YAAY,iBAAiB,UAAW,QAAO,OAAO,UAAU;AACrF,MAAI,iBAAiB,UAAW,QAAO,OAAO,UAAU;AACxD,MAAI,iBAAiB,QAAS,QAAO,MAAM,QAAQ,MAAM;AACzD,MAAI,iBAAiB,SAAU,QAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,MAAM;AAC1G,SAAO;;;AAQX,SAAgB,qBAAqB,IAAY,UAAiD;CAChG,MAAM,IAAI,YAAY;CAGtB,MAAM,gBAAgB,KAAK,8BAA8B,GAF7C,sBAAsB,EAAE,CAE4B,EAAE,GAAG;AACrE,KAAI,WAAW,cAAc,CAAE,QAAO;CAGtC,MAAM,aAAa,KAAK,sBAAsB,EAAE,GAAG;AACnD,KAAI,WAAW,WAAW,CAAE,QAAO;CAGnC,MAAM,aAAa,6BAA6B;AAChD,KAAI,YAAY;EACd,MAAM,cAAc,KAAK,YAAY,GAAG;AACxC,MAAI,WAAW,YAAY,CAAE,QAAO;;AAItC,KAAI;AAGF,SAAO,QAFS,cAAc,OAAO,KAAK,IAAI,CACrB,QAAQ,GAAG,CACZ;SAClB;AACN,SAAO;;;AAIX,SAAgB,yBACd,WAC2B;CAC3B,MAAM,aAAwC,EAAE;CAEhD,MAAM,UAAW,UAAU,WAAwB,EAAE;CACrD,MAAM,WAAY,UAAU,YAAyB,EAAE;AAGvD,MAAK,MAAM,MAAM,SAAS;EACxB,MAAM,SAAU,UAAU,OAAmC,EAAE;AAC/D,aAAW,KAAK;GACd;GACA,MAAM;GACN,QAAQ;GACR,MAAM;GACN,SAAS;GACT;GACD,CAAC;;AAIJ,MAAK,MAAM,MAAM,SACf,KAAI,CAAC,WAAW,MAAM,MAAM,EAAE,OAAO,GAAG,EAAE;EACxC,MAAM,SAAU,UAAU,OAAmC,EAAE;AAC/D,aAAW,KAAK;GACd;GACA,MAAM;GACN,QAAQ;GACR,MAAM;GACN,SAAS;GACT;GACD,CAAC;;AAIN,QAAO"}

package/dist/src/extensions/lockfile.js

@@ -1,9 +1,9 @@
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
 import { init_paths, resolveExtensionsDir, resolveExtensionsLockPath } from "../config/paths.js";
+import { mkdir, readFile, writeFile } from "fs/promises";
 import { dirname, join } from "path";
 import { existsSync } from "fs";
-import { mkdir, readFile, writeFile } from "fs/promises";
 import { createHash } from "crypto";
 //#region src/extensions/lockfile.ts
 init_logger();

package/dist/src/extensions/sdk/index.js

@@ -1,12 +1,17 @@
+import { ProviderPluginRegistry, getProviderRegistry, init_plugin_registry } from "../../providers/plugin-registry.js";
 import { HOOK_EXECUTION_MODES } from "../types/hooks.js";
 import { TypedEventBus } from "../typed-event-bus.js";
 import { defineChannelPluginEntry } from "./channel-entry.js";
 import { DEFAULT_SECURITY_CONFIG, checkExtensionDirSafety, checkExtensionPathSafety, isExtensionAllowed, logSecurityIssue, provenanceTracker } from "../security.js";
-import { ProviderPluginRegistry, getProviderRegistry } from "../../providers/plugin-registry.js";
 import { SlotRegistry, getSlotRegistry, registerSlotType } from "../slots.js";
 import { ExtensionDiagnostics, ExtensionLoaderCacheImpl, getExtensionCache, getExtensionDiagnostics } from "../diagnostics.js";
 import { ExtensionRegistryImpl } from "../loader.js";
 import { ExtensionHookRunner, createHookContext, isHookEvent } from "../hooks.js";
 import { registerExtensionCliProgram } from "./channel-helpers.js";
 import { lazyFunction, lazyModule } from "./lazy.js";
+//#region src/extensions/sdk/index.ts
+init_plugin_registry();
+//#endregion
 export { DEFAULT_SECURITY_CONFIG, ExtensionDiagnostics, ExtensionHookRunner, ExtensionLoaderCacheImpl, ExtensionRegistryImpl, HOOK_EXECUTION_MODES, ProviderPluginRegistry, SlotRegistry, TypedEventBus, checkExtensionDirSafety, checkExtensionPathSafety, createHookContext, defineChannelPluginEntry, getExtensionCache, getExtensionDiagnostics, getProviderRegistry, getSlotRegistry, isExtensionAllowed, isHookEvent, lazyFunction, lazyModule, logSecurityIssue, provenanceTracker, registerExtensionCliProgram, registerSlotType };
+
+//# sourceMappingURL=index.js.map

package/dist/src/extensions/sdk/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","names":[],"sources":["../../../../src/extensions/sdk/index.ts"],"sourcesContent":["/**\n * xopc Extension SDK\n * \n * Official SDK for developing xopc extensions.\n * Import types and utilities from this module:\n * \n * @example\n * import type { ExtensionApi, ExtensionDefinition } from 'xopc/extension-sdk';\n */\n\n// ============================================================================\n// Core extension types\n// ============================================================================\n\nexport type {\n  ExtensionDefinition,\n  ExtensionModule,\n  ExtensionKind,\n  ExtensionApi,\n  ExtensionLogger,\n  ExtensionManifest,\n  ExtensionRecord,\n  ExtensionRegistry,\n  ResolvedExtensionConfig,\n  ExtensionRuntime,\n  ExtensionCliRegistration,\n} from '../types/index.js';\n\n// ============================================================================\n// Tools (re-exported from @mariozechner/pi-agent-core)\n// ============================================================================\n\nexport type {\n  AgentTool,\n  AgentToolResult,\n  AgentToolUpdateCallback,\n  ToolExecutionStartEvent,\n  ToolExecutionUpdateEvent,\n  ToolExecutionEndEvent,\n} from '../types/index.js';\n\n// ============================================================================\n// Hooks ( Strongly Typed)\n// ============================================================================\n\nexport type {\n  ExtensionHookEvent,\n  ExtensionHookHandler,\n  HookOptions,\n  HookAgentContext,\n  AgentMessage,\n  ContextEvent,\n  ContextResult,\n  InputEvent,\n  InputResult,\n  TurnEvent,\n  TurnResult,\n  //  New hook types\n  HookHandlerMap,\n  HookExecutionMode,\n  // Note: HOOK_EXECUTION_MODES is exported as value below\n  //  LLM observation hooks\n  HookBeforeModelResolveEvent,\n  HookBeforeModelResolveResult,\n  HookBeforePromptBuildEvent,\n  HookBeforePromptBuildResult,\n  HookLlmInputEvent,\n  HookLlmOutputEvent,\n  //  Inbound claim\n  HookInboundClaimEvent,\n  HookInboundClaimResult,\n  //  Reset hook\n  HookBeforeResetEvent,\n  HookBeforeResetResult,\n  //  Message write hook\n  HookBeforeMessageWriteEvent,\n  HookBeforeMessageWriteResult,\n  //  Turn hooks\n  HookTurnStartEvent,\n  HookTurnEndEvent,\n  //  Tool execution hooks\n  HookToolExecutionStartEvent,\n  HookToolExecutionUpdateEvent,\n  HookToolExecutionEndEvent,\n  // Existing context types\n  HookContext,\n  BeforeAgentStartContext,\n  BeforeAgentStartResult,\n  AgentEndContext,\n  BeforeCompactionContext,\n  AfterCompactionContext,\n  MessageReceivedContext,\n  MessageSendingContext,\n  MessageSendingResult,\n  MessageSentContext,\n  BeforeToolCallContext,\n  BeforeToolCallResult,\n  AfterToolCallContext,\n  SessionStartContext,\n  SessionEndContext,\n  GatewayStartContext,\n  GatewayStopContext,\n} from '../types/index.js';\n\n// ============================================================================\n//  Typed Event Bus\n// ============================================================================\n\nexport type {\n  EventMap,\n  RequestMap,\n  EventHandler,\n  EventHandlerMeta,\n  RequestHandler,\n  RequestHandlerMeta,\n  WildcardEventHandler,\n  WildcardHandlerMeta,\n  TypedEventBusOptions,\n  RequestOptions,\n} from '../types/index.js';\n\n// ============================================================================\n//  Provider Types\n// ============================================================================\n\nexport type {\n  ProviderPlugin,\n  ProviderModelDefinition,\n  ProviderCapabilities,\n  ProviderStreamParams,\n  ProviderStreamChunk,\n  ProviderCompleteParams,\n  ProviderResponse,\n  ProviderRegistry,\n  BUILTIN_PROVIDERS,\n  BuiltinProviderId,\n} from '../types/index.js';\n\n// ============================================================================\n//  Advanced Features\n// ============================================================================\n\nexport type {\n  ProviderConfig,\n  ModelConfig,\n  OAuthConfig,\n  OAuthCallbacks,\n  OAuthCredentials,\n  FlagConfig,\n  FlagValue,\n  ShortcutConfig,\n  ShortcutHandler,\n} from '../types/index.js';\n\n// ============================================================================\n//  Security Types\n// ============================================================================\n\nexport type {\n  SafetyCheckResult,\n  SecurityConfig,\n  ExtensionSourceOrigin,\n  ProvenanceInfo,\n} from '../security.js';\n\n// ============================================================================\n//  Slot Types\n// ============================================================================\n\nexport type {\n  SlotKey,\n  SlotClaim,\n  SlotConfig,\n} from '../slots.js';\n\n// ============================================================================\n//  Diagnostics Types\n// ============================================================================\n\nexport type {\n  DiagnosticLevel,\n  ExtensionDiagnostic,\n  ExtensionLoaderCache,\n} from '../diagnostics.js';\n\n// ============================================================================\n// Channels (ChannelPlugin registry)\n// ============================================================================\n\nexport type {\n  ChannelPlugin,\n  ChannelPluginInitOptions,\n  ChannelPluginStartOptions,\n} from '../../channels/plugin-types.js';\n\n// ============================================================================\n// HTTP\n// ============================================================================\n\nexport type {\n  HttpRequestHandler,\n  HttpRequest,\n  HttpResponse,\n} from '../types/index.js';\n\n// ============================================================================\n// Commands\n// ============================================================================\n\nexport type {\n  ExtensionCommand,\n} from '../types/index.js';\n\n// ============================================================================\n// Services\n// ============================================================================\n\nexport type {\n  ExtensionService,\n} from '../types/index.js';\n\n// ============================================================================\n// Gateway\n// ============================================================================\n\nexport type {\n  GatewayMethodHandler,\n} from '../types/index.js';\n\n// ============================================================================\n// Export Classes\n// ============================================================================\n\nexport { TypedEventBus } from '../typed-event-bus.js';\nexport { ExtensionRegistryImpl } from '../loader.js';\nexport { ProviderPluginRegistry, getProviderRegistry } from '../../providers/plugin-registry.js';\nexport { SlotRegistry, getSlotRegistry, registerSlotType } from '../slots.js';\nexport { HOOK_EXECUTION_MODES } from '../types/hooks.js';\n\nexport { defineChannelPluginEntry } from './channel-entry.js';\nexport { registerExtensionCliProgram } from './channel-helpers.js';\n\n// ============================================================================\n// Export Hook Runner and Utilities\n// ============================================================================\n\nexport { \n  ExtensionHookRunner, \n  createHookContext, \n  isHookEvent \n} from '../hooks.js';\n\n// ============================================================================\n//  Security Utilities\n// ============================================================================\n\nexport {\n  checkExtensionPathSafety,\n  checkExtensionDirSafety,\n  isExtensionAllowed,\n  provenanceTracker,\n  logSecurityIssue,\n  DEFAULT_SECURITY_CONFIG,\n} from '../security.js';\n\n// ============================================================================\n//  Diagnostics Utilities\n// ============================================================================\n\nexport {\n  getExtensionCache,\n  getExtensionDiagnostics,\n  ExtensionLoaderCacheImpl,\n  ExtensionDiagnostics,\n} from '../diagnostics.js';\n\n// ============================================================================\n// Config\n// ============================================================================\n\nexport type { Config } from '../../config/config-surface.js';\n\n// Subpath barrels (also available as `xopc/extension-sdk/<name>`)\nexport { lazyModule, lazyFunction } from './lazy.js';\n"],"mappings":";;;;;;;;;;;;sBA2OiG"}

package/dist/src/gateway/agents-admin.js

@@ -2,10 +2,10 @@ import { DEFAULT_AGENT_ID, init_agent_scope, listAgentEntries, normalizeAgentId,
 import { WORKSPACE_FILES, init_paths } from "../config/paths.js";
 import { resolveEffectiveAgentProfile } from "../config/agent-profile.js";
 import { BOOTSTRAP_FILES } from "../agent/context/workspace.js";
+import { isPathUnderWorkspace, resolveWorkspaceSafePath } from "./workspace-editor-path.js";
 import { seedWorkspaceBootstrapFiles } from "../agent/context/workspace-seed.js";
 import { applyAgentConfig, findAgentEntryIndex, pruneAgentConfig, removeAgentDirsFromDisk } from "../commands/agents.config.js";
 import { GATEWAY_BUILTIN_TOOL_IDS } from "./agent-builtin-tools.js";
-import { isPathUnderWorkspace, resolveWorkspaceSafePath } from "./workspace-editor-path.js";
 import { join, resolve } from "node:path";
 import { mkdir, readFile, realpath, stat, writeFile } from "node:fs/promises";
 //#region src/gateway/agents-admin.ts

package/dist/src/gateway/agents-admin.js.map

@@ -1 +1 @@
-{"version":3,"file":"agents-admin.js","names":["pathResolve"],"sources":["../../../src/gateway/agents-admin.ts"],"sourcesContent":["/**\n * Gateway REST helpers for multi-agent management.\n */\n\nimport { mkdir, readdir, readFile, realpath, stat, writeFile } from 'node:fs/promises';\nimport { join, resolve as pathResolve } from 'node:path';\n\nimport {\n  DEFAULT_AGENT_ID,\n  listAgentEntries,\n  normalizeAgentId,\n  resolveAgentBootstrapDir,\n  resolveAgentDir,\n  resolveAgentWorkspaceDir,\n  resolveDefaultAgentId,\n  resolveUserPath,\n  validateAgentIdForNewAgent,\n} from '../agent/agent-scope.js';\nimport { BOOTSTRAP_FILES } from '../agent/context/workspace.js';\nimport { seedWorkspaceBootstrapFiles } from '../agent/context/workspace-seed.js';\nimport {\n  applyAgentConfig,\n  findAgentEntryIndex,\n  pruneAgentConfig,\n  removeAgentDirsFromDisk,\n} from '../commands/agents.config.js';\nimport type { Config } from '../config/schema.js';\nimport { WORKSPACE_FILES } from '../config/paths.js';\nimport { resolveEffectiveAgentProfile } from '../config/agent-profile.js';\nimport { GATEWAY_BUILTIN_TOOL_IDS } from './agent-builtin-tools.js';\nimport { isPathUnderWorkspace, resolveWorkspaceSafePath } from './workspace-editor-path.js';\n\nconst EDITABLE_BOOTSTRAP_NAMES = new Set<string>([\n  ...BOOTSTRAP_FILES,\n  WORKSPACE_FILES.BOOTSTRAP,\n  WORKSPACE_FILES.CONTEXT,\n  WORKSPACE_FILES.SKILLS,\n]);\n\nexport type GatewayAgentRow = {\n  id: string;\n  name?: string;\n  description?: string;\n  workspace: string;\n  bootstrapDir: string;\n  model?: { primary?: string; fallbacks?: string[] };\n  isDefault: boolean;\n  skills: {\n    defaults: string[];\n    entry?: string[];\n    effectiveAllowlist?: string[];\n  };\n  tools: {\n    defaultsDisable: string[];\n    entryDisable: string[];\n    effectiveDisable: string[];\n  };\n};\n\nexport type GatewayAgentsListResponse = {\n  defaultId: string;\n  agents: GatewayAgentRow[];\n  builtinToolIds: string[];\n};\n\nfunction collectAgentIdsForList(cfg: Config): string[] {\n  const entries = listAgentEntries(cfg).filter((e) => e.enabled !== false);\n  const defaultId = resolveDefaultAgentId(cfg);\n  if (entries.length === 0) {\n    return [defaultId];\n  }\n  const ids = new Set<string>();\n  for (const e of entries) {\n    ids.add(normalizeAgentId(e.id));\n  }\n  ids.add(defaultId);\n  return [...ids];\n}\n\nexport function listGatewayAgents(cfg: Config): GatewayAgentsListResponse {\n  const defaultId = resolveDefaultAgentId(cfg);\n  const agents: GatewayAgentRow[] = [];\n  const defaultsSkills = cfg.agents?.defaults?.skills;\n  const defaultsDisable = cfg.agents?.defaults?.tools?.disable ?? [];\n  for (const id of collectAgentIdsForList(cfg)) {\n    const profile = resolveEffectiveAgentProfile(cfg, id);\n    const entry = listAgentEntries(cfg).find((e) => normalizeAgentId(e.id) === id);\n    const model =\n      profile.primaryModelRef || profile.fallbacks.length > 0\n        ? {\n            ...(profile.primaryModelRef ? { primary: profile.primaryModelRef } : {}),\n            ...(profile.fallbacks.length > 0 ? { fallbacks: profile.fallbacks } : {}),\n          }\n        : undefined;\n    const entrySkills = entry?.skills;\n    const entryDisable = entry?.tools?.disable ?? [];\n    agents.push({\n      id,\n      ...(entry?.name?.trim() ? { name: entry.name.trim() } : {}),\n      ...(entry?.description?.trim() ? { description: entry.description.trim() } : {}),\n      workspace: profile.resolvedWorkspacePath,\n      bootstrapDir: resolveAgentBootstrapDir(cfg, id),\n      ...(model ? { model } : {}),\n      isDefault: id === defaultId,\n      skills: {\n        defaults: defaultsSkills ? [...defaultsSkills] : [],\n        ...(entrySkills !== undefined ? { entry: [...entrySkills] } : {}),\n        ...(profile.skillsAllowlist !== undefined\n          ? { effectiveAllowlist: [...profile.skillsAllowlist] }\n          : {}),\n      },\n      tools: {\n        defaultsDisable: [...defaultsDisable],\n        entryDisable: [...entryDisable],\n        effectiveDisable: [...profile.tools.disable].sort((a, b) => a.localeCompare(b)),\n      },\n    });\n  }\n  agents.sort((a, b) => a.id.localeCompare(b.id));\n  return { defaultId, agents, builtinToolIds: [...GATEWAY_BUILTIN_TOOL_IDS] };\n}\n\nexport type CreateAgentBody = {\n  /** Display name stored on the agent entry. */\n  name: string;\n  /** Optional id seed; normalized agent id defaults from `name` when omitted. */\n  id?: string;\n  workspace: string;\n  model?: string;\n  agentDir?: string;\n  description?: string;\n};\n\nexport type AgentAdminHttpStatus = 400 | 404 | 409;\n\nexport type AgentAdminResult<T> =\n  | { ok: true; data: T }\n  | { ok: false; error: string; status?: AgentAdminHttpStatus };\n\nfunction requireNonMain(id: string): AgentAdminResult<never> | null {\n  if (normalizeAgentId(id) === DEFAULT_AGENT_ID) {\n    return { ok: false, error: `\"${DEFAULT_AGENT_ID}\" is reserved`, status: 400 };\n  }\n  return null;\n}\n\nexport function prepareCreateAgent(\n  cfg: Config,\n  body: CreateAgentBody,\n): AgentAdminResult<{ nextConfig: Config; agentId: string; workspace: string }> {\n  const name = body.name?.trim() ?? '';\n  if (!name) {\n    return { ok: false, error: 'name is required', status: 400 };\n  }\n  const workspace = body.workspace?.trim() ?? '';\n  if (!workspace) {\n    return { ok: false, error: 'workspace is required', status: 400 };\n  }\n  const idRes = validateAgentIdForNewAgent(body.id, name);\n  if (idRes.ok === false) {\n    return { ok: false, error: idRes.error, status: 400 };\n  }\n  const agentId = idRes.agentId;\n  if (findAgentEntryIndex(listAgentEntries(cfg), agentId) >= 0) {\n    return { ok: false, error: `agent \"${agentId}\" already exists`, status: 409 };\n  }\n  const wsAbs = resolveUserPath(workspace);\n  let next = applyAgentConfig(cfg, {\n    agentId,\n    name,\n    workspace: wsAbs,\n    ...(body.model?.trim() ? { model: body.model.trim() } : {}),\n    ...(body.agentDir?.trim() ? { agentDir: body.agentDir.trim() } : {}),\n    ...(body.description?.trim() ? { description: body.description.trim() } : {}),\n  });\n  return { ok: true, data: { nextConfig: next, agentId, workspace: wsAbs } };\n}\n\nexport async function finalizeCreateAgentDirs(cfg: Config, agentId: string): Promise<void> {\n  const wsPath = resolveAgentWorkspaceDir(cfg, agentId);\n  const adPath = resolveAgentDir(cfg, agentId);\n  const bootstrapPath = resolveAgentBootstrapDir(cfg, agentId);\n  await mkdir(wsPath, { recursive: true });\n  await mkdir(adPath, { recursive: true });\n  await mkdir(join(adPath, 'credentials'), { recursive: true });\n  await mkdir(bootstrapPath, { recursive: true });\n  const id = normalizeAgentId(agentId);\n  const entry = listAgentEntries(cfg).find((e) => normalizeAgentId(e.id) === id);\n  const displayName = entry?.name?.trim() || id;\n  seedWorkspaceBootstrapFiles(bootstrapPath, { displayName });\n}\n\nexport type UpdateAgentBody = {\n  name?: string;\n  description?: string | null;\n  workspace?: string;\n  model?: string | null;\n  agentDir?: string | null;\n  setDefault?: boolean;\n  /** Replace `agents.list[].skills`; `null` removes the key (inherit defaults). */\n  skills?: string[] | null;\n  /** Replace `agents.list[].tools.disable`; `null` clears entry-level disables. */\n  toolsDisable?: string[] | null;\n};\n\nexport function prepareUpdateAgent(\n  cfg: Config,\n  agentIdRaw: string,\n  body: UpdateAgentBody,\n): AgentAdminResult<{ nextConfig: Config }> {\n  const agentId = normalizeAgentId(agentIdRaw);\n  let list = [...listAgentEntries(cfg)];\n  let idx = findAgentEntryIndex(list, agentId);\n  if (idx < 0 && agentId === resolveDefaultAgentId(cfg)) {\n    list = [...list, { id: agentId, enabled: true as const }];\n    idx = list.length - 1;\n  }\n  if (idx < 0) {\n    return { ok: false, error: `agent \"${agentId}\" not found`, status: 404 };\n  }\n\n  type Entry = (typeof list)[number];\n  const entry: Entry = { ...list[idx] };\n\n  if (body.name !== undefined) {\n    const n = body.name.trim();\n    if (n) {\n      entry.name = n;\n    }\n  }\n  if (body.description !== undefined) {\n    if (body.description === null || String(body.description).trim() === '') {\n      delete entry.description;\n    } else {\n      entry.description = String(body.description).trim();\n    }\n  }\n  if (body.workspace !== undefined) {\n    const w = body.workspace.trim();\n    if (w) {\n      entry.workspace = resolveUserPath(w);\n    }\n  }\n  if (body.model !== undefined) {\n    if (body.model === null || String(body.model).trim() === '') {\n      delete entry.model;\n    } else {\n      entry.model = String(body.model).trim() as Entry['model'];\n    }\n  }\n  if (body.agentDir !== undefined) {\n    if (body.agentDir === null || String(body.agentDir).trim() === '') {\n      delete entry.agentDir;\n    } else {\n      entry.agentDir = String(body.agentDir).trim();\n    }\n  }\n\n  if (body.skills !== undefined) {\n    if (body.skills === null) {\n      delete entry.skills;\n    } else {\n      const next = body.skills.map((s) => String(s).trim()).filter(Boolean);\n      if (next.length === 0) {\n        entry.skills = [];\n      } else {\n        entry.skills = next;\n      }\n    }\n  }\n\n  if (body.toolsDisable !== undefined) {\n    if (body.toolsDisable === null) {\n      if (entry.tools) {\n        delete entry.tools.disable;\n        if (Object.keys(entry.tools).length === 0) {\n          delete entry.tools;\n        }\n      }\n    } else {\n      const next = body.toolsDisable.map((s) => String(s).trim()).filter(Boolean);\n      entry.tools = { ...entry.tools, disable: next };\n    }\n  }\n\n  list[idx] = entry;\n  let next: Config = {\n    ...cfg,\n    agents: {\n      ...cfg.agents,\n      list,\n    },\n  };\n\n  if (body.setDefault === true) {\n    next = {\n      ...next,\n      agents: {\n        ...next.agents,\n        default: agentId,\n      },\n    };\n  }\n  return { ok: true, data: { nextConfig: next } };\n}\n\nexport function prepareDeleteAgent(\n  cfg: Config,\n  agentIdRaw: string,\n): AgentAdminResult<{ nextConfig: Config; agentId: string }> {\n  const agentId = normalizeAgentId(agentIdRaw);\n  const reserved = requireNonMain(agentId);\n  if (reserved) {\n    return reserved;\n  }\n  if (findAgentEntryIndex(listAgentEntries(cfg), agentId) < 0) {\n    return { ok: false, error: `agent \"${agentId}\" not found`, status: 404 };\n  }\n  const { config: pruned } = pruneAgentConfig(cfg, agentId);\n  return { ok: true, data: { nextConfig: pruned, agentId } };\n}\n\nexport async function runAfterDeletePurge(cfg: Config, agentId: string): Promise<void> {\n  await removeAgentDirsFromDisk(cfg, agentId);\n}\n\nexport type AgentFileEntry = {\n  name: string;\n  missing: boolean;\n  size?: number;\n  updatedAtMs?: number;\n};\n\nasync function bootstrapRootReal(cfg: Config, agentId: string): Promise<string> {\n  const dir = resolveAgentBootstrapDir(cfg, agentId);\n  await mkdir(dir, { recursive: true });\n  try {\n    return await realpath(dir);\n  } catch {\n    return pathResolve(dir);\n  }\n}\n\nfunction assertAllowedFile(name: string): AgentAdminResult<never> | null {\n  if (!name || name.includes('/') || name.includes('\\\\') || !EDITABLE_BOOTSTRAP_NAMES.has(name)) {\n    return { ok: false, error: `unsupported file \"${name}\"`, status: 400 };\n  }\n  return null;\n}\n\nexport async function listAgentBootstrapFiles(\n  cfg: Config,\n  agentId: string,\n): Promise<AgentAdminResult<{ agentId: string; bootstrapDir: string; files: AgentFileEntry[] }>> {\n  const id = normalizeAgentId(agentId);\n  if (collectAgentIdsForList(cfg).every((x) => x !== id)) {\n    return { ok: false, error: `agent \"${id}\" not found`, status: 404 };\n  }\n  const root = await bootstrapRootReal(cfg, id);\n  const names = [...EDITABLE_BOOTSTRAP_NAMES];\n  const files: AgentFileEntry[] = [];\n  for (const name of names.sort((a, b) => a.localeCompare(b))) {\n    const abs = resolveWorkspaceSafePath(root, name);\n    if (!abs) {\n      continue;\n    }\n    try {\n      const st = await stat(abs);\n      if (!st.isFile()) {\n        continue;\n      }\n      files.push({\n        name,\n        missing: false,\n        size: st.size,\n        updatedAtMs: st.mtimeMs,\n      });\n    } catch {\n      files.push({ name, missing: true });\n    }\n  }\n  files.sort((a, b) => a.name.localeCompare(b.name));\n  return { ok: true, data: { agentId: id, bootstrapDir: root, files } };\n}\n\nexport async function readAgentBootstrapFile(\n  cfg: Config,\n  agentId: string,\n  name: string,\n): Promise<AgentAdminResult<{ agentId: string; content: string; path: string }>> {\n  const bad = assertAllowedFile(name);\n  if (bad) {\n    return bad;\n  }\n  const id = normalizeAgentId(agentId);\n  if (collectAgentIdsForList(cfg).every((x) => x !== id)) {\n    return { ok: false, error: `agent \"${id}\" not found`, status: 404 };\n  }\n  const root = await bootstrapRootReal(cfg, id);\n  const abs = resolveWorkspaceSafePath(root, name);\n  if (!abs) {\n    return { ok: false, error: 'invalid path', status: 400 };\n  }\n  try {\n    const content = await readFile(abs, 'utf-8');\n    return { ok: true, data: { agentId: id, content, path: abs } };\n  } catch {\n    return { ok: false, error: 'file not found', status: 404 };\n  }\n}\n\nexport async function writeAgentBootstrapFile(\n  cfg: Config,\n  agentId: string,\n  name: string,\n  content: string,\n): Promise<AgentAdminResult<{ agentId: string; path: string }>> {\n  const bad = assertAllowedFile(name);\n  if (bad) {\n    return bad;\n  }\n  const id = normalizeAgentId(agentId);\n  if (collectAgentIdsForList(cfg).every((x) => x !== id)) {\n    return { ok: false, error: `agent \"${id}\" not found`, status: 404 };\n  }\n  const root = await bootstrapRootReal(cfg, id);\n  const abs = resolveWorkspaceSafePath(root, name);\n  if (!abs) {\n    return { ok: false, error: 'invalid path', status: 400 };\n  }\n  const rootReal = await bootstrapRootReal(cfg, id);\n  if (!isPathUnderWorkspace(rootReal, abs)) {\n    return { ok: false, error: 'path escapes bootstrap root', status: 400 };\n  }\n  await writeFile(abs, content, 'utf-8');\n  return { ok: true, data: { agentId: id, path: abs } };\n}\n"],"mappings":";;;;;;;;;;;;;;kBAiBiC;YAUoB;AAKrD,MAAM,2BAA2B,IAAI,IAAY;CAC/C,GAAG;CACH,gBAAgB;CAChB,gBAAgB;CAChB,gBAAgB;CACjB,CAAC;AA4BF,SAAS,uBAAuB,KAAuB;CACrD,MAAM,UAAU,iBAAiB,IAAI,CAAC,QAAQ,MAAM,EAAE,YAAY,MAAM;CACxE,MAAM,YAAY,sBAAsB,IAAI;AAC5C,KAAI,QAAQ,WAAW,EACrB,QAAO,CAAC,UAAU;CAEpB,MAAM,sBAAM,IAAI,KAAa;AAC7B,MAAK,MAAM,KAAK,QACd,KAAI,IAAI,iBAAiB,EAAE,GAAG,CAAC;AAEjC,KAAI,IAAI,UAAU;AAClB,QAAO,CAAC,GAAG,IAAI;;AAGjB,SAAgB,kBAAkB,KAAwC;CACxE,MAAM,YAAY,sBAAsB,IAAI;CAC5C,MAAM,SAA4B,EAAE;CACpC,MAAM,iBAAiB,IAAI,QAAQ,UAAU;CAC7C,MAAM,kBAAkB,IAAI,QAAQ,UAAU,OAAO,WAAW,EAAE;AAClE,MAAK,MAAM,MAAM,uBAAuB,IAAI,EAAE;EAC5C,MAAM,UAAU,6BAA6B,KAAK,GAAG;EACrD,MAAM,QAAQ,iBAAiB,IAAI,CAAC,MAAM,MAAM,iBAAiB,EAAE,GAAG,KAAK,GAAG;EAC9E,MAAM,QACJ,QAAQ,mBAAmB,QAAQ,UAAU,SAAS,IAClD;GACE,GAAI,QAAQ,kBAAkB,EAAE,SAAS,QAAQ,iBAAiB,GAAG,EAAE;GACvE,GAAI,QAAQ,UAAU,SAAS,IAAI,EAAE,WAAW,QAAQ,WAAW,GAAG,EAAE;GACzE,GACD,KAAA;EACN,MAAM,cAAc,OAAO;EAC3B,MAAM,eAAe,OAAO,OAAO,WAAW,EAAE;AAChD,SAAO,KAAK;GACV;GACA,GAAI,OAAO,MAAM,MAAM,GAAG,EAAE,MAAM,MAAM,KAAK,MAAM,EAAE,GAAG,EAAE;GAC1D,GAAI,OAAO,aAAa,MAAM,GAAG,EAAE,aAAa,MAAM,YAAY,MAAM,EAAE,GAAG,EAAE;GAC/E,WAAW,QAAQ;GACnB,cAAc,yBAAyB,KAAK,GAAG;GAC/C,GAAI,QAAQ,EAAE,OAAO,GAAG,EAAE;GAC1B,WAAW,OAAO;GAClB,QAAQ;IACN,UAAU,iBAAiB,CAAC,GAAG,eAAe,GAAG,EAAE;IACnD,GAAI,gBAAgB,KAAA,IAAY,EAAE,OAAO,CAAC,GAAG,YAAY,EAAE,GAAG,EAAE;IAChE,GAAI,QAAQ,oBAAoB,KAAA,IAC5B,EAAE,oBAAoB,CAAC,GAAG,QAAQ,gBAAgB,EAAE,GACpD,EAAE;IACP;GACD,OAAO;IACL,iBAAiB,CAAC,GAAG,gBAAgB;IACrC,cAAc,CAAC,GAAG,aAAa;IAC/B,kBAAkB,CAAC,GAAG,QAAQ,MAAM,QAAQ,CAAC,MAAM,GAAG,MAAM,EAAE,cAAc,EAAE,CAAC;IAChF;GACF,CAAC;;AAEJ,QAAO,MAAM,GAAG,MAAM,EAAE,GAAG,cAAc,EAAE,GAAG,CAAC;AAC/C,QAAO;EAAE;EAAW;EAAQ,gBAAgB,CAAC,GAAG,yBAAyB;EAAE;;AAoB7E,SAAS,eAAe,IAA4C;AAClE,KAAI,iBAAiB,GAAG,KAAA,OACtB,QAAO;EAAE,IAAI;EAAO,OAAO,IAAI,iBAAiB;EAAgB,QAAQ;EAAK;AAE/E,QAAO;;AAGT,SAAgB,mBACd,KACA,MAC8E;CAC9E,MAAM,OAAO,KAAK,MAAM,MAAM,IAAI;AAClC,KAAI,CAAC,KACH,QAAO;EAAE,IAAI;EAAO,OAAO;EAAoB,QAAQ;EAAK;CAE9D,MAAM,YAAY,KAAK,WAAW,MAAM,IAAI;AAC5C,KAAI,CAAC,UACH,QAAO;EAAE,IAAI;EAAO,OAAO;EAAyB,QAAQ;EAAK;CAEnE,MAAM,QAAQ,2BAA2B,KAAK,IAAI,KAAK;AACvD,KAAI,MAAM,OAAO,MACf,QAAO;EAAE,IAAI;EAAO,OAAO,MAAM;EAAO,QAAQ;EAAK;CAEvD,MAAM,UAAU,MAAM;AACtB,KAAI,oBAAoB,iBAAiB,IAAI,EAAE,QAAQ,IAAI,EACzD,QAAO;EAAE,IAAI;EAAO,OAAO,UAAU,QAAQ;EAAmB,QAAQ;EAAK;CAE/E,MAAM,QAAQ,gBAAgB,UAAU;AASxC,QAAO;EAAE,IAAI;EAAM,MAAM;GAAE,YARhB,iBAAiB,KAAK;IAC/B;IACA;IACA,WAAW;IACX,GAAI,KAAK,OAAO,MAAM,GAAG,EAAE,OAAO,KAAK,MAAM,MAAM,EAAE,GAAG,EAAE;IAC1D,GAAI,KAAK,UAAU,MAAM,GAAG,EAAE,UAAU,KAAK,SAAS,MAAM,EAAE,GAAG,EAAE;IACnE,GAAI,KAAK,aAAa,MAAM,GAAG,EAAE,aAAa,KAAK,YAAY,MAAM,EAAE,GAAG,EAAE;IAC7E,CAAC;GAC2C;GAAS,WAAW;GAAO;EAAE;;AAG5E,eAAsB,wBAAwB,KAAa,SAAgC;CACzF,MAAM,SAAS,yBAAyB,KAAK,QAAQ;CACrD,MAAM,SAAS,gBAAgB,KAAK,QAAQ;CAC5C,MAAM,gBAAgB,yBAAyB,KAAK,QAAQ;AAC5D,OAAM,MAAM,QAAQ,EAAE,WAAW,MAAM,CAAC;AACxC,OAAM,MAAM,QAAQ,EAAE,WAAW,MAAM,CAAC;AACxC,OAAM,MAAM,KAAK,QAAQ,cAAc,EAAE,EAAE,WAAW,MAAM,CAAC;AAC7D,OAAM,MAAM,eAAe,EAAE,WAAW,MAAM,CAAC;CAC/C,MAAM,KAAK,iBAAiB,QAAQ;AAGpC,6BAA4B,eAAe,EAAE,aAF/B,iBAAiB,IAAI,CAAC,MAAM,MAAM,iBAAiB,EAAE,GAAG,KAAK,GAAG,EACnD,MAAM,MAAM,IAAI,IACe,CAAC;;AAgB7D,SAAgB,mBACd,KACA,YACA,MAC0C;CAC1C,MAAM,UAAU,iBAAiB,WAAW;CAC5C,IAAI,OAAO,CAAC,GAAG,iBAAiB,IAAI,CAAC;CACrC,IAAI,MAAM,oBAAoB,MAAM,QAAQ;AAC5C,KAAI,MAAM,KAAK,YAAY,sBAAsB,IAAI,EAAE;AACrD,SAAO,CAAC,GAAG,MAAM;GAAE,IAAI;GAAS,SAAS;GAAe,CAAC;AACzD,QAAM,KAAK,SAAS;;AAEtB,KAAI,MAAM,EACR,QAAO;EAAE,IAAI;EAAO,OAAO,UAAU,QAAQ;EAAc,QAAQ;EAAK;CAI1E,MAAM,QAAe,EAAE,GAAG,KAAK,MAAM;AAErC,KAAI,KAAK,SAAS,KAAA,GAAW;EAC3B,MAAM,IAAI,KAAK,KAAK,MAAM;AAC1B,MAAI,EACF,OAAM,OAAO;;AAGjB,KAAI,KAAK,gBAAgB,KAAA,EACvB,KAAI,KAAK,gBAAgB,QAAQ,OAAO,KAAK,YAAY,CAAC,MAAM,KAAK,GACnE,QAAO,MAAM;KAEb,OAAM,cAAc,OAAO,KAAK,YAAY,CAAC,MAAM;AAGvD,KAAI,KAAK,cAAc,KAAA,GAAW;EAChC,MAAM,IAAI,KAAK,UAAU,MAAM;AAC/B,MAAI,EACF,OAAM,YAAY,gBAAgB,EAAE;;AAGxC,KAAI,KAAK,UAAU,KAAA,EACjB,KAAI,KAAK,UAAU,QAAQ,OAAO,KAAK,MAAM,CAAC,MAAM,KAAK,GACvD,QAAO,MAAM;KAEb,OAAM,QAAQ,OAAO,KAAK,MAAM,CAAC,MAAM;AAG3C,KAAI,KAAK,aAAa,KAAA,EACpB,KAAI,KAAK,aAAa,QAAQ,OAAO,KAAK,SAAS,CAAC,MAAM,KAAK,GAC7D,QAAO,MAAM;KAEb,OAAM,WAAW,OAAO,KAAK,SAAS,CAAC,MAAM;AAIjD,KAAI,KAAK,WAAW,KAAA,EAClB,KAAI,KAAK,WAAW,KAClB,QAAO,MAAM;MACR;EACL,MAAM,OAAO,KAAK,OAAO,KAAK,MAAM,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC,OAAO,QAAQ;AACrE,MAAI,KAAK,WAAW,EAClB,OAAM,SAAS,EAAE;MAEjB,OAAM,SAAS;;AAKrB,KAAI,KAAK,iBAAiB,KAAA,EACxB,KAAI,KAAK,iBAAiB;MACpB,MAAM,OAAO;AACf,UAAO,MAAM,MAAM;AACnB,OAAI,OAAO,KAAK,MAAM,MAAM,CAAC,WAAW,EACtC,QAAO,MAAM;;QAGZ;EACL,MAAM,OAAO,KAAK,aAAa,KAAK,MAAM,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC,OAAO,QAAQ;AAC3E,QAAM,QAAQ;GAAE,GAAG,MAAM;GAAO,SAAS;GAAM;;AAInD,MAAK,OAAO;CACZ,IAAI,OAAe;EACjB,GAAG;EACH,QAAQ;GACN,GAAG,IAAI;GACP;GACD;EACF;AAED,KAAI,KAAK,eAAe,KACtB,QAAO;EACL,GAAG;EACH,QAAQ;GACN,GAAG,KAAK;GACR,SAAS;GACV;EACF;AAEH,QAAO;EAAE,IAAI;EAAM,MAAM,EAAE,YAAY,MAAM;EAAE;;AAGjD,SAAgB,mBACd,KACA,YAC2D;CAC3D,MAAM,UAAU,iBAAiB,WAAW;CAC5C,MAAM,WAAW,eAAe,QAAQ;AACxC,KAAI,SACF,QAAO;AAET,KAAI,oBAAoB,iBAAiB,IAAI,EAAE,QAAQ,GAAG,EACxD,QAAO;EAAE,IAAI;EAAO,OAAO,UAAU,QAAQ;EAAc,QAAQ;EAAK;CAE1E,MAAM,EAAE,QAAQ,WAAW,iBAAiB,KAAK,QAAQ;AACzD,QAAO;EAAE,IAAI;EAAM,MAAM;GAAE,YAAY;GAAQ;GAAS;EAAE;;AAG5D,eAAsB,oBAAoB,KAAa,SAAgC;AACrF,OAAM,wBAAwB,KAAK,QAAQ;;AAU7C,eAAe,kBAAkB,KAAa,SAAkC;CAC9E,MAAM,MAAM,yBAAyB,KAAK,QAAQ;AAClD,OAAM,MAAM,KAAK,EAAE,WAAW,MAAM,CAAC;AACrC,KAAI;AACF,SAAO,MAAM,SAAS,IAAI;SACpB;AACN,SAAOA,QAAY,IAAI;;;AAI3B,SAAS,kBAAkB,MAA8C;AACvE,KAAI,CAAC,QAAQ,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS,KAAK,IAAI,CAAC,yBAAyB,IAAI,KAAK,CAC3F,QAAO;EAAE,IAAI;EAAO,OAAO,qBAAqB,KAAK;EAAI,QAAQ;EAAK;AAExE,QAAO;;AAGT,eAAsB,wBACpB,KACA,SAC+F;CAC/F,MAAM,KAAK,iBAAiB,QAAQ;AACpC,KAAI,uBAAuB,IAAI,CAAC,OAAO,MAAM,MAAM,GAAG,CACpD,QAAO;EAAE,IAAI;EAAO,OAAO,UAAU,GAAG;EAAc,QAAQ;EAAK;CAErE,MAAM,OAAO,MAAM,kBAAkB,KAAK,GAAG;CAC7C,MAAM,QAAQ,CAAC,GAAG,yBAAyB;CAC3C,MAAM,QAA0B,EAAE;AAClC,MAAK,MAAM,QAAQ,MAAM,MAAM,GAAG,MAAM,EAAE,cAAc,EAAE,CAAC,EAAE;EAC3D,MAAM,MAAM,yBAAyB,MAAM,KAAK;AAChD,MAAI,CAAC,IACH;AAEF,MAAI;GACF,MAAM,KAAK,MAAM,KAAK,IAAI;AAC1B,OAAI,CAAC,GAAG,QAAQ,CACd;AAEF,SAAM,KAAK;IACT;IACA,SAAS;IACT,MAAM,GAAG;IACT,aAAa,GAAG;IACjB,CAAC;UACI;AACN,SAAM,KAAK;IAAE;IAAM,SAAS;IAAM,CAAC;;;AAGvC,OAAM,MAAM,GAAG,MAAM,EAAE,KAAK,cAAc,EAAE,KAAK,CAAC;AAClD,QAAO;EAAE,IAAI;EAAM,MAAM;GAAE,SAAS;GAAI,cAAc;GAAM;GAAO;EAAE;;AAGvE,eAAsB,uBACpB,KACA,SACA,MAC+E;CAC/E,MAAM,MAAM,kBAAkB,KAAK;AACnC,KAAI,IACF,QAAO;CAET,MAAM,KAAK,iBAAiB,QAAQ;AACpC,KAAI,uBAAuB,IAAI,CAAC,OAAO,MAAM,MAAM,GAAG,CACpD,QAAO;EAAE,IAAI;EAAO,OAAO,UAAU,GAAG;EAAc,QAAQ;EAAK;CAGrE,MAAM,MAAM,yBADC,MAAM,kBAAkB,KAAK,GAAG,EACF,KAAK;AAChD,KAAI,CAAC,IACH,QAAO;EAAE,IAAI;EAAO,OAAO;EAAgB,QAAQ;EAAK;AAE1D,KAAI;AAEF,SAAO;GAAE,IAAI;GAAM,MAAM;IAAE,SAAS;IAAI,SADxB,MAAM,SAAS,KAAK,QAAQ;IACK,MAAM;IAAK;GAAE;SACxD;AACN,SAAO;GAAE,IAAI;GAAO,OAAO;GAAkB,QAAQ;GAAK;;;AAI9D,eAAsB,wBACpB,KACA,SACA,MACA,SAC8D;CAC9D,MAAM,MAAM,kBAAkB,KAAK;AACnC,KAAI,IACF,QAAO;CAET,MAAM,KAAK,iBAAiB,QAAQ;AACpC,KAAI,uBAAuB,IAAI,CAAC,OAAO,MAAM,MAAM,GAAG,CACpD,QAAO;EAAE,IAAI;EAAO,OAAO,UAAU,GAAG;EAAc,QAAQ;EAAK;CAGrE,MAAM,MAAM,yBADC,MAAM,kBAAkB,KAAK,GAAG,EACF,KAAK;AAChD,KAAI,CAAC,IACH,QAAO;EAAE,IAAI;EAAO,OAAO;EAAgB,QAAQ;EAAK;AAG1D,KAAI,CAAC,qBADY,MAAM,kBAAkB,KAAK,GAAG,EACb,IAAI,CACtC,QAAO;EAAE,IAAI;EAAO,OAAO;EAA+B,QAAQ;EAAK;AAEzE,OAAM,UAAU,KAAK,SAAS,QAAQ;AACtC,QAAO;EAAE,IAAI;EAAM,MAAM;GAAE,SAAS;GAAI,MAAM;GAAK;EAAE"}
+{"version":3,"file":"agents-admin.js","names":["pathResolve"],"sources":["../../../src/gateway/agents-admin.ts"],"sourcesContent":["/**\n * Gateway REST helpers for multi-agent management.\n */\n\nimport { mkdir, readFile, realpath, stat, writeFile } from 'node:fs/promises';\nimport { join, resolve as pathResolve } from 'node:path';\n\nimport {\n  DEFAULT_AGENT_ID,\n  listAgentEntries,\n  normalizeAgentId,\n  resolveAgentBootstrapDir,\n  resolveAgentDir,\n  resolveAgentWorkspaceDir,\n  resolveDefaultAgentId,\n  resolveUserPath,\n  validateAgentIdForNewAgent,\n} from '../agent/agent-scope.js';\nimport { BOOTSTRAP_FILES } from '../agent/context/workspace.js';\nimport { seedWorkspaceBootstrapFiles } from '../agent/context/workspace-seed.js';\nimport {\n  applyAgentConfig,\n  findAgentEntryIndex,\n  pruneAgentConfig,\n  removeAgentDirsFromDisk,\n} from '../commands/agents.config.js';\nimport type { Config } from '../config/schema.js';\nimport { WORKSPACE_FILES } from '../config/paths.js';\nimport { resolveEffectiveAgentProfile } from '../config/agent-profile.js';\nimport { GATEWAY_BUILTIN_TOOL_IDS } from './agent-builtin-tools.js';\nimport { isPathUnderWorkspace, resolveWorkspaceSafePath } from './workspace-editor-path.js';\n\nconst EDITABLE_BOOTSTRAP_NAMES = new Set<string>([\n  ...BOOTSTRAP_FILES,\n  WORKSPACE_FILES.BOOTSTRAP,\n  WORKSPACE_FILES.CONTEXT,\n  WORKSPACE_FILES.SKILLS,\n]);\n\nexport type GatewayAgentRow = {\n  id: string;\n  name?: string;\n  description?: string;\n  workspace: string;\n  bootstrapDir: string;\n  model?: { primary?: string; fallbacks?: string[] };\n  isDefault: boolean;\n  skills: {\n    defaults: string[];\n    entry?: string[];\n    effectiveAllowlist?: string[];\n  };\n  tools: {\n    defaultsDisable: string[];\n    entryDisable: string[];\n    effectiveDisable: string[];\n  };\n};\n\nexport type GatewayAgentsListResponse = {\n  defaultId: string;\n  agents: GatewayAgentRow[];\n  builtinToolIds: string[];\n};\n\nfunction collectAgentIdsForList(cfg: Config): string[] {\n  const entries = listAgentEntries(cfg).filter((e) => e.enabled !== false);\n  const defaultId = resolveDefaultAgentId(cfg);\n  if (entries.length === 0) {\n    return [defaultId];\n  }\n  const ids = new Set<string>();\n  for (const e of entries) {\n    ids.add(normalizeAgentId(e.id));\n  }\n  ids.add(defaultId);\n  return [...ids];\n}\n\nexport function listGatewayAgents(cfg: Config): GatewayAgentsListResponse {\n  const defaultId = resolveDefaultAgentId(cfg);\n  const agents: GatewayAgentRow[] = [];\n  const defaultsSkills = cfg.agents?.defaults?.skills;\n  const defaultsDisable = cfg.agents?.defaults?.tools?.disable ?? [];\n  for (const id of collectAgentIdsForList(cfg)) {\n    const profile = resolveEffectiveAgentProfile(cfg, id);\n    const entry = listAgentEntries(cfg).find((e) => normalizeAgentId(e.id) === id);\n    const model =\n      profile.primaryModelRef || profile.fallbacks.length > 0\n        ? {\n            ...(profile.primaryModelRef ? { primary: profile.primaryModelRef } : {}),\n            ...(profile.fallbacks.length > 0 ? { fallbacks: profile.fallbacks } : {}),\n          }\n        : undefined;\n    const entrySkills = entry?.skills;\n    const entryDisable = entry?.tools?.disable ?? [];\n    agents.push({\n      id,\n      ...(entry?.name?.trim() ? { name: entry.name.trim() } : {}),\n      ...(entry?.description?.trim() ? { description: entry.description.trim() } : {}),\n      workspace: profile.resolvedWorkspacePath,\n      bootstrapDir: resolveAgentBootstrapDir(cfg, id),\n      ...(model ? { model } : {}),\n      isDefault: id === defaultId,\n      skills: {\n        defaults: defaultsSkills ? [...defaultsSkills] : [],\n        ...(entrySkills !== undefined ? { entry: [...entrySkills] } : {}),\n        ...(profile.skillsAllowlist !== undefined\n          ? { effectiveAllowlist: [...profile.skillsAllowlist] }\n          : {}),\n      },\n      tools: {\n        defaultsDisable: [...defaultsDisable],\n        entryDisable: [...entryDisable],\n        effectiveDisable: [...profile.tools.disable].sort((a, b) => a.localeCompare(b)),\n      },\n    });\n  }\n  agents.sort((a, b) => a.id.localeCompare(b.id));\n  return { defaultId, agents, builtinToolIds: [...GATEWAY_BUILTIN_TOOL_IDS] };\n}\n\nexport type CreateAgentBody = {\n  /** Display name stored on the agent entry. */\n  name: string;\n  /** Optional id seed; normalized agent id defaults from `name` when omitted. */\n  id?: string;\n  workspace: string;\n  model?: string;\n  agentDir?: string;\n  description?: string;\n};\n\nexport type AgentAdminHttpStatus = 400 | 404 | 409;\n\nexport type AgentAdminResult<T> =\n  | { ok: true; data: T }\n  | { ok: false; error: string; status?: AgentAdminHttpStatus };\n\nfunction requireNonMain(id: string): AgentAdminResult<never> | null {\n  if (normalizeAgentId(id) === DEFAULT_AGENT_ID) {\n    return { ok: false, error: `\"${DEFAULT_AGENT_ID}\" is reserved`, status: 400 };\n  }\n  return null;\n}\n\nexport function prepareCreateAgent(\n  cfg: Config,\n  body: CreateAgentBody,\n): AgentAdminResult<{ nextConfig: Config; agentId: string; workspace: string }> {\n  const name = body.name?.trim() ?? '';\n  if (!name) {\n    return { ok: false, error: 'name is required', status: 400 };\n  }\n  const workspace = body.workspace?.trim() ?? '';\n  if (!workspace) {\n    return { ok: false, error: 'workspace is required', status: 400 };\n  }\n  const idRes = validateAgentIdForNewAgent(body.id, name);\n  if (idRes.ok === false) {\n    return { ok: false, error: idRes.error, status: 400 };\n  }\n  const agentId = idRes.agentId;\n  if (findAgentEntryIndex(listAgentEntries(cfg), agentId) >= 0) {\n    return { ok: false, error: `agent \"${agentId}\" already exists`, status: 409 };\n  }\n  const wsAbs = resolveUserPath(workspace);\n  let next = applyAgentConfig(cfg, {\n    agentId,\n    name,\n    workspace: wsAbs,\n    ...(body.model?.trim() ? { model: body.model.trim() } : {}),\n    ...(body.agentDir?.trim() ? { agentDir: body.agentDir.trim() } : {}),\n    ...(body.description?.trim() ? { description: body.description.trim() } : {}),\n  });\n  return { ok: true, data: { nextConfig: next, agentId, workspace: wsAbs } };\n}\n\nexport async function finalizeCreateAgentDirs(cfg: Config, agentId: string): Promise<void> {\n  const wsPath = resolveAgentWorkspaceDir(cfg, agentId);\n  const adPath = resolveAgentDir(cfg, agentId);\n  const bootstrapPath = resolveAgentBootstrapDir(cfg, agentId);\n  await mkdir(wsPath, { recursive: true });\n  await mkdir(adPath, { recursive: true });\n  await mkdir(join(adPath, 'credentials'), { recursive: true });\n  await mkdir(bootstrapPath, { recursive: true });\n  const id = normalizeAgentId(agentId);\n  const entry = listAgentEntries(cfg).find((e) => normalizeAgentId(e.id) === id);\n  const displayName = entry?.name?.trim() || id;\n  seedWorkspaceBootstrapFiles(bootstrapPath, { displayName });\n}\n\nexport type UpdateAgentBody = {\n  name?: string;\n  description?: string | null;\n  workspace?: string;\n  model?: string | null;\n  agentDir?: string | null;\n  setDefault?: boolean;\n  /** Replace `agents.list[].skills`; `null` removes the key (inherit defaults). */\n  skills?: string[] | null;\n  /** Replace `agents.list[].tools.disable`; `null` clears entry-level disables. */\n  toolsDisable?: string[] | null;\n};\n\nexport function prepareUpdateAgent(\n  cfg: Config,\n  agentIdRaw: string,\n  body: UpdateAgentBody,\n): AgentAdminResult<{ nextConfig: Config }> {\n  const agentId = normalizeAgentId(agentIdRaw);\n  let list = [...listAgentEntries(cfg)];\n  let idx = findAgentEntryIndex(list, agentId);\n  if (idx < 0 && agentId === resolveDefaultAgentId(cfg)) {\n    list = [...list, { id: agentId, enabled: true as const }];\n    idx = list.length - 1;\n  }\n  if (idx < 0) {\n    return { ok: false, error: `agent \"${agentId}\" not found`, status: 404 };\n  }\n\n  type Entry = (typeof list)[number];\n  const entry: Entry = { ...list[idx] };\n\n  if (body.name !== undefined) {\n    const n = body.name.trim();\n    if (n) {\n      entry.name = n;\n    }\n  }\n  if (body.description !== undefined) {\n    if (body.description === null || String(body.description).trim() === '') {\n      delete entry.description;\n    } else {\n      entry.description = String(body.description).trim();\n    }\n  }\n  if (body.workspace !== undefined) {\n    const w = body.workspace.trim();\n    if (w) {\n      entry.workspace = resolveUserPath(w);\n    }\n  }\n  if (body.model !== undefined) {\n    if (body.model === null || String(body.model).trim() === '') {\n      delete entry.model;\n    } else {\n      entry.model = String(body.model).trim() as Entry['model'];\n    }\n  }\n  if (body.agentDir !== undefined) {\n    if (body.agentDir === null || String(body.agentDir).trim() === '') {\n      delete entry.agentDir;\n    } else {\n      entry.agentDir = String(body.agentDir).trim();\n    }\n  }\n\n  if (body.skills !== undefined) {\n    if (body.skills === null) {\n      delete entry.skills;\n    } else {\n      const next = body.skills.map((s) => String(s).trim()).filter(Boolean);\n      if (next.length === 0) {\n        entry.skills = [];\n      } else {\n        entry.skills = next;\n      }\n    }\n  }\n\n  if (body.toolsDisable !== undefined) {\n    if (body.toolsDisable === null) {\n      if (entry.tools) {\n        delete entry.tools.disable;\n        if (Object.keys(entry.tools).length === 0) {\n          delete entry.tools;\n        }\n      }\n    } else {\n      const next = body.toolsDisable.map((s) => String(s).trim()).filter(Boolean);\n      entry.tools = { ...entry.tools, disable: next };\n    }\n  }\n\n  list[idx] = entry;\n  let next: Config = {\n    ...cfg,\n    agents: {\n      ...cfg.agents,\n      list,\n    },\n  };\n\n  if (body.setDefault === true) {\n    next = {\n      ...next,\n      agents: {\n        ...next.agents,\n        default: agentId,\n      },\n    };\n  }\n  return { ok: true, data: { nextConfig: next } };\n}\n\nexport function prepareDeleteAgent(\n  cfg: Config,\n  agentIdRaw: string,\n): AgentAdminResult<{ nextConfig: Config; agentId: string }> {\n  const agentId = normalizeAgentId(agentIdRaw);\n  const reserved = requireNonMain(agentId);\n  if (reserved) {\n    return reserved;\n  }\n  if (findAgentEntryIndex(listAgentEntries(cfg), agentId) < 0) {\n    return { ok: false, error: `agent \"${agentId}\" not found`, status: 404 };\n  }\n  const { config: pruned } = pruneAgentConfig(cfg, agentId);\n  return { ok: true, data: { nextConfig: pruned, agentId } };\n}\n\nexport async function runAfterDeletePurge(cfg: Config, agentId: string): Promise<void> {\n  await removeAgentDirsFromDisk(cfg, agentId);\n}\n\nexport type AgentFileEntry = {\n  name: string;\n  missing: boolean;\n  size?: number;\n  updatedAtMs?: number;\n};\n\nasync function bootstrapRootReal(cfg: Config, agentId: string): Promise<string> {\n  const dir = resolveAgentBootstrapDir(cfg, agentId);\n  await mkdir(dir, { recursive: true });\n  try {\n    return await realpath(dir);\n  } catch {\n    return pathResolve(dir);\n  }\n}\n\nfunction assertAllowedFile(name: string): AgentAdminResult<never> | null {\n  if (!name || name.includes('/') || name.includes('\\\\') || !EDITABLE_BOOTSTRAP_NAMES.has(name)) {\n    return { ok: false, error: `unsupported file \"${name}\"`, status: 400 };\n  }\n  return null;\n}\n\nexport async function listAgentBootstrapFiles(\n  cfg: Config,\n  agentId: string,\n): Promise<AgentAdminResult<{ agentId: string; bootstrapDir: string; files: AgentFileEntry[] }>> {\n  const id = normalizeAgentId(agentId);\n  if (collectAgentIdsForList(cfg).every((x) => x !== id)) {\n    return { ok: false, error: `agent \"${id}\" not found`, status: 404 };\n  }\n  const root = await bootstrapRootReal(cfg, id);\n  const names = [...EDITABLE_BOOTSTRAP_NAMES];\n  const files: AgentFileEntry[] = [];\n  for (const name of names.sort((a, b) => a.localeCompare(b))) {\n    const abs = resolveWorkspaceSafePath(root, name);\n    if (!abs) {\n      continue;\n    }\n    try {\n      const st = await stat(abs);\n      if (!st.isFile()) {\n        continue;\n      }\n      files.push({\n        name,\n        missing: false,\n        size: st.size,\n        updatedAtMs: st.mtimeMs,\n      });\n    } catch {\n      files.push({ name, missing: true });\n    }\n  }\n  files.sort((a, b) => a.name.localeCompare(b.name));\n  return { ok: true, data: { agentId: id, bootstrapDir: root, files } };\n}\n\nexport async function readAgentBootstrapFile(\n  cfg: Config,\n  agentId: string,\n  name: string,\n): Promise<AgentAdminResult<{ agentId: string; content: string; path: string }>> {\n  const bad = assertAllowedFile(name);\n  if (bad) {\n    return bad;\n  }\n  const id = normalizeAgentId(agentId);\n  if (collectAgentIdsForList(cfg).every((x) => x !== id)) {\n    return { ok: false, error: `agent \"${id}\" not found`, status: 404 };\n  }\n  const root = await bootstrapRootReal(cfg, id);\n  const abs = resolveWorkspaceSafePath(root, name);\n  if (!abs) {\n    return { ok: false, error: 'invalid path', status: 400 };\n  }\n  try {\n    const content = await readFile(abs, 'utf-8');\n    return { ok: true, data: { agentId: id, content, path: abs } };\n  } catch {\n    return { ok: false, error: 'file not found', status: 404 };\n  }\n}\n\nexport async function writeAgentBootstrapFile(\n  cfg: Config,\n  agentId: string,\n  name: string,\n  content: string,\n): Promise<AgentAdminResult<{ agentId: string; path: string }>> {\n  const bad = assertAllowedFile(name);\n  if (bad) {\n    return bad;\n  }\n  const id = normalizeAgentId(agentId);\n  if (collectAgentIdsForList(cfg).every((x) => x !== id)) {\n    return { ok: false, error: `agent \"${id}\" not found`, status: 404 };\n  }\n  const root = await bootstrapRootReal(cfg, id);\n  const abs = resolveWorkspaceSafePath(root, name);\n  if (!abs) {\n    return { ok: false, error: 'invalid path', status: 400 };\n  }\n  const rootReal = await bootstrapRootReal(cfg, id);\n  if (!isPathUnderWorkspace(rootReal, abs)) {\n    return { ok: false, error: 'path escapes bootstrap root', status: 400 };\n  }\n  await writeFile(abs, content, 'utf-8');\n  return { ok: true, data: { agentId: id, path: abs } };\n}\n"],"mappings":";;;;;;;;;;;;;;kBAiBiC;YAUoB;AAKrD,MAAM,2BAA2B,IAAI,IAAY;CAC/C,GAAG;CACH,gBAAgB;CAChB,gBAAgB;CAChB,gBAAgB;CACjB,CAAC;AA4BF,SAAS,uBAAuB,KAAuB;CACrD,MAAM,UAAU,iBAAiB,IAAI,CAAC,QAAQ,MAAM,EAAE,YAAY,MAAM;CACxE,MAAM,YAAY,sBAAsB,IAAI;AAC5C,KAAI,QAAQ,WAAW,EACrB,QAAO,CAAC,UAAU;CAEpB,MAAM,sBAAM,IAAI,KAAa;AAC7B,MAAK,MAAM,KAAK,QACd,KAAI,IAAI,iBAAiB,EAAE,GAAG,CAAC;AAEjC,KAAI,IAAI,UAAU;AAClB,QAAO,CAAC,GAAG,IAAI;;AAGjB,SAAgB,kBAAkB,KAAwC;CACxE,MAAM,YAAY,sBAAsB,IAAI;CAC5C,MAAM,SAA4B,EAAE;CACpC,MAAM,iBAAiB,IAAI,QAAQ,UAAU;CAC7C,MAAM,kBAAkB,IAAI,QAAQ,UAAU,OAAO,WAAW,EAAE;AAClE,MAAK,MAAM,MAAM,uBAAuB,IAAI,EAAE;EAC5C,MAAM,UAAU,6BAA6B,KAAK,GAAG;EACrD,MAAM,QAAQ,iBAAiB,IAAI,CAAC,MAAM,MAAM,iBAAiB,EAAE,GAAG,KAAK,GAAG;EAC9E,MAAM,QACJ,QAAQ,mBAAmB,QAAQ,UAAU,SAAS,IAClD;GACE,GAAI,QAAQ,kBAAkB,EAAE,SAAS,QAAQ,iBAAiB,GAAG,EAAE;GACvE,GAAI,QAAQ,UAAU,SAAS,IAAI,EAAE,WAAW,QAAQ,WAAW,GAAG,EAAE;GACzE,GACD,KAAA;EACN,MAAM,cAAc,OAAO;EAC3B,MAAM,eAAe,OAAO,OAAO,WAAW,EAAE;AAChD,SAAO,KAAK;GACV;GACA,GAAI,OAAO,MAAM,MAAM,GAAG,EAAE,MAAM,MAAM,KAAK,MAAM,EAAE,GAAG,EAAE;GAC1D,GAAI,OAAO,aAAa,MAAM,GAAG,EAAE,aAAa,MAAM,YAAY,MAAM,EAAE,GAAG,EAAE;GAC/E,WAAW,QAAQ;GACnB,cAAc,yBAAyB,KAAK,GAAG;GAC/C,GAAI,QAAQ,EAAE,OAAO,GAAG,EAAE;GAC1B,WAAW,OAAO;GAClB,QAAQ;IACN,UAAU,iBAAiB,CAAC,GAAG,eAAe,GAAG,EAAE;IACnD,GAAI,gBAAgB,KAAA,IAAY,EAAE,OAAO,CAAC,GAAG,YAAY,EAAE,GAAG,EAAE;IAChE,GAAI,QAAQ,oBAAoB,KAAA,IAC5B,EAAE,oBAAoB,CAAC,GAAG,QAAQ,gBAAgB,EAAE,GACpD,EAAE;IACP;GACD,OAAO;IACL,iBAAiB,CAAC,GAAG,gBAAgB;IACrC,cAAc,CAAC,GAAG,aAAa;IAC/B,kBAAkB,CAAC,GAAG,QAAQ,MAAM,QAAQ,CAAC,MAAM,GAAG,MAAM,EAAE,cAAc,EAAE,CAAC;IAChF;GACF,CAAC;;AAEJ,QAAO,MAAM,GAAG,MAAM,EAAE,GAAG,cAAc,EAAE,GAAG,CAAC;AAC/C,QAAO;EAAE;EAAW;EAAQ,gBAAgB,CAAC,GAAG,yBAAyB;EAAE;;AAoB7E,SAAS,eAAe,IAA4C;AAClE,KAAI,iBAAiB,GAAG,KAAA,OACtB,QAAO;EAAE,IAAI;EAAO,OAAO,IAAI,iBAAiB;EAAgB,QAAQ;EAAK;AAE/E,QAAO;;AAGT,SAAgB,mBACd,KACA,MAC8E;CAC9E,MAAM,OAAO,KAAK,MAAM,MAAM,IAAI;AAClC,KAAI,CAAC,KACH,QAAO;EAAE,IAAI;EAAO,OAAO;EAAoB,QAAQ;EAAK;CAE9D,MAAM,YAAY,KAAK,WAAW,MAAM,IAAI;AAC5C,KAAI,CAAC,UACH,QAAO;EAAE,IAAI;EAAO,OAAO;EAAyB,QAAQ;EAAK;CAEnE,MAAM,QAAQ,2BAA2B,KAAK,IAAI,KAAK;AACvD,KAAI,MAAM,OAAO,MACf,QAAO;EAAE,IAAI;EAAO,OAAO,MAAM;EAAO,QAAQ;EAAK;CAEvD,MAAM,UAAU,MAAM;AACtB,KAAI,oBAAoB,iBAAiB,IAAI,EAAE,QAAQ,IAAI,EACzD,QAAO;EAAE,IAAI;EAAO,OAAO,UAAU,QAAQ;EAAmB,QAAQ;EAAK;CAE/E,MAAM,QAAQ,gBAAgB,UAAU;AASxC,QAAO;EAAE,IAAI;EAAM,MAAM;GAAE,YARhB,iBAAiB,KAAK;IAC/B;IACA;IACA,WAAW;IACX,GAAI,KAAK,OAAO,MAAM,GAAG,EAAE,OAAO,KAAK,MAAM,MAAM,EAAE,GAAG,EAAE;IAC1D,GAAI,KAAK,UAAU,MAAM,GAAG,EAAE,UAAU,KAAK,SAAS,MAAM,EAAE,GAAG,EAAE;IACnE,GAAI,KAAK,aAAa,MAAM,GAAG,EAAE,aAAa,KAAK,YAAY,MAAM,EAAE,GAAG,EAAE;IAC7E,CAAC;GAC2C;GAAS,WAAW;GAAO;EAAE;;AAG5E,eAAsB,wBAAwB,KAAa,SAAgC;CACzF,MAAM,SAAS,yBAAyB,KAAK,QAAQ;CACrD,MAAM,SAAS,gBAAgB,KAAK,QAAQ;CAC5C,MAAM,gBAAgB,yBAAyB,KAAK,QAAQ;AAC5D,OAAM,MAAM,QAAQ,EAAE,WAAW,MAAM,CAAC;AACxC,OAAM,MAAM,QAAQ,EAAE,WAAW,MAAM,CAAC;AACxC,OAAM,MAAM,KAAK,QAAQ,cAAc,EAAE,EAAE,WAAW,MAAM,CAAC;AAC7D,OAAM,MAAM,eAAe,EAAE,WAAW,MAAM,CAAC;CAC/C,MAAM,KAAK,iBAAiB,QAAQ;AAGpC,6BAA4B,eAAe,EAAE,aAF/B,iBAAiB,IAAI,CAAC,MAAM,MAAM,iBAAiB,EAAE,GAAG,KAAK,GAAG,EACnD,MAAM,MAAM,IAAI,IACe,CAAC;;AAgB7D,SAAgB,mBACd,KACA,YACA,MAC0C;CAC1C,MAAM,UAAU,iBAAiB,WAAW;CAC5C,IAAI,OAAO,CAAC,GAAG,iBAAiB,IAAI,CAAC;CACrC,IAAI,MAAM,oBAAoB,MAAM,QAAQ;AAC5C,KAAI,MAAM,KAAK,YAAY,sBAAsB,IAAI,EAAE;AACrD,SAAO,CAAC,GAAG,MAAM;GAAE,IAAI;GAAS,SAAS;GAAe,CAAC;AACzD,QAAM,KAAK,SAAS;;AAEtB,KAAI,MAAM,EACR,QAAO;EAAE,IAAI;EAAO,OAAO,UAAU,QAAQ;EAAc,QAAQ;EAAK;CAI1E,MAAM,QAAe,EAAE,GAAG,KAAK,MAAM;AAErC,KAAI,KAAK,SAAS,KAAA,GAAW;EAC3B,MAAM,IAAI,KAAK,KAAK,MAAM;AAC1B,MAAI,EACF,OAAM,OAAO;;AAGjB,KAAI,KAAK,gBAAgB,KAAA,EACvB,KAAI,KAAK,gBAAgB,QAAQ,OAAO,KAAK,YAAY,CAAC,MAAM,KAAK,GACnE,QAAO,MAAM;KAEb,OAAM,cAAc,OAAO,KAAK,YAAY,CAAC,MAAM;AAGvD,KAAI,KAAK,cAAc,KAAA,GAAW;EAChC,MAAM,IAAI,KAAK,UAAU,MAAM;AAC/B,MAAI,EACF,OAAM,YAAY,gBAAgB,EAAE;;AAGxC,KAAI,KAAK,UAAU,KAAA,EACjB,KAAI,KAAK,UAAU,QAAQ,OAAO,KAAK,MAAM,CAAC,MAAM,KAAK,GACvD,QAAO,MAAM;KAEb,OAAM,QAAQ,OAAO,KAAK,MAAM,CAAC,MAAM;AAG3C,KAAI,KAAK,aAAa,KAAA,EACpB,KAAI,KAAK,aAAa,QAAQ,OAAO,KAAK,SAAS,CAAC,MAAM,KAAK,GAC7D,QAAO,MAAM;KAEb,OAAM,WAAW,OAAO,KAAK,SAAS,CAAC,MAAM;AAIjD,KAAI,KAAK,WAAW,KAAA,EAClB,KAAI,KAAK,WAAW,KAClB,QAAO,MAAM;MACR;EACL,MAAM,OAAO,KAAK,OAAO,KAAK,MAAM,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC,OAAO,QAAQ;AACrE,MAAI,KAAK,WAAW,EAClB,OAAM,SAAS,EAAE;MAEjB,OAAM,SAAS;;AAKrB,KAAI,KAAK,iBAAiB,KAAA,EACxB,KAAI,KAAK,iBAAiB;MACpB,MAAM,OAAO;AACf,UAAO,MAAM,MAAM;AACnB,OAAI,OAAO,KAAK,MAAM,MAAM,CAAC,WAAW,EACtC,QAAO,MAAM;;QAGZ;EACL,MAAM,OAAO,KAAK,aAAa,KAAK,MAAM,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC,OAAO,QAAQ;AAC3E,QAAM,QAAQ;GAAE,GAAG,MAAM;GAAO,SAAS;GAAM;;AAInD,MAAK,OAAO;CACZ,IAAI,OAAe;EACjB,GAAG;EACH,QAAQ;GACN,GAAG,IAAI;GACP;GACD;EACF;AAED,KAAI,KAAK,eAAe,KACtB,QAAO;EACL,GAAG;EACH,QAAQ;GACN,GAAG,KAAK;GACR,SAAS;GACV;EACF;AAEH,QAAO;EAAE,IAAI;EAAM,MAAM,EAAE,YAAY,MAAM;EAAE;;AAGjD,SAAgB,mBACd,KACA,YAC2D;CAC3D,MAAM,UAAU,iBAAiB,WAAW;CAC5C,MAAM,WAAW,eAAe,QAAQ;AACxC,KAAI,SACF,QAAO;AAET,KAAI,oBAAoB,iBAAiB,IAAI,EAAE,QAAQ,GAAG,EACxD,QAAO;EAAE,IAAI;EAAO,OAAO,UAAU,QAAQ;EAAc,QAAQ;EAAK;CAE1E,MAAM,EAAE,QAAQ,WAAW,iBAAiB,KAAK,QAAQ;AACzD,QAAO;EAAE,IAAI;EAAM,MAAM;GAAE,YAAY;GAAQ;GAAS;EAAE;;AAG5D,eAAsB,oBAAoB,KAAa,SAAgC;AACrF,OAAM,wBAAwB,KAAK,QAAQ;;AAU7C,eAAe,kBAAkB,KAAa,SAAkC;CAC9E,MAAM,MAAM,yBAAyB,KAAK,QAAQ;AAClD,OAAM,MAAM,KAAK,EAAE,WAAW,MAAM,CAAC;AACrC,KAAI;AACF,SAAO,MAAM,SAAS,IAAI;SACpB;AACN,SAAOA,QAAY,IAAI;;;AAI3B,SAAS,kBAAkB,MAA8C;AACvE,KAAI,CAAC,QAAQ,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS,KAAK,IAAI,CAAC,yBAAyB,IAAI,KAAK,CAC3F,QAAO;EAAE,IAAI;EAAO,OAAO,qBAAqB,KAAK;EAAI,QAAQ;EAAK;AAExE,QAAO;;AAGT,eAAsB,wBACpB,KACA,SAC+F;CAC/F,MAAM,KAAK,iBAAiB,QAAQ;AACpC,KAAI,uBAAuB,IAAI,CAAC,OAAO,MAAM,MAAM,GAAG,CACpD,QAAO;EAAE,IAAI;EAAO,OAAO,UAAU,GAAG;EAAc,QAAQ;EAAK;CAErE,MAAM,OAAO,MAAM,kBAAkB,KAAK,GAAG;CAC7C,MAAM,QAAQ,CAAC,GAAG,yBAAyB;CAC3C,MAAM,QAA0B,EAAE;AAClC,MAAK,MAAM,QAAQ,MAAM,MAAM,GAAG,MAAM,EAAE,cAAc,EAAE,CAAC,EAAE;EAC3D,MAAM,MAAM,yBAAyB,MAAM,KAAK;AAChD,MAAI,CAAC,IACH;AAEF,MAAI;GACF,MAAM,KAAK,MAAM,KAAK,IAAI;AAC1B,OAAI,CAAC,GAAG,QAAQ,CACd;AAEF,SAAM,KAAK;IACT;IACA,SAAS;IACT,MAAM,GAAG;IACT,aAAa,GAAG;IACjB,CAAC;UACI;AACN,SAAM,KAAK;IAAE;IAAM,SAAS;IAAM,CAAC;;;AAGvC,OAAM,MAAM,GAAG,MAAM,EAAE,KAAK,cAAc,EAAE,KAAK,CAAC;AAClD,QAAO;EAAE,IAAI;EAAM,MAAM;GAAE,SAAS;GAAI,cAAc;GAAM;GAAO;EAAE;;AAGvE,eAAsB,uBACpB,KACA,SACA,MAC+E;CAC/E,MAAM,MAAM,kBAAkB,KAAK;AACnC,KAAI,IACF,QAAO;CAET,MAAM,KAAK,iBAAiB,QAAQ;AACpC,KAAI,uBAAuB,IAAI,CAAC,OAAO,MAAM,MAAM,GAAG,CACpD,QAAO;EAAE,IAAI;EAAO,OAAO,UAAU,GAAG;EAAc,QAAQ;EAAK;CAGrE,MAAM,MAAM,yBADC,MAAM,kBAAkB,KAAK,GAAG,EACF,KAAK;AAChD,KAAI,CAAC,IACH,QAAO;EAAE,IAAI;EAAO,OAAO;EAAgB,QAAQ;EAAK;AAE1D,KAAI;AAEF,SAAO;GAAE,IAAI;GAAM,MAAM;IAAE,SAAS;IAAI,SADxB,MAAM,SAAS,KAAK,QAAQ;IACK,MAAM;IAAK;GAAE;SACxD;AACN,SAAO;GAAE,IAAI;GAAO,OAAO;GAAkB,QAAQ;GAAK;;;AAI9D,eAAsB,wBACpB,KACA,SACA,MACA,SAC8D;CAC9D,MAAM,MAAM,kBAAkB,KAAK;AACnC,KAAI,IACF,QAAO;CAET,MAAM,KAAK,iBAAiB,QAAQ;AACpC,KAAI,uBAAuB,IAAI,CAAC,OAAO,MAAM,MAAM,GAAG,CACpD,QAAO;EAAE,IAAI;EAAO,OAAO,UAAU,GAAG;EAAc,QAAQ;EAAK;CAGrE,MAAM,MAAM,yBADC,MAAM,kBAAkB,KAAK,GAAG,EACF,KAAK;AAChD,KAAI,CAAC,IACH,QAAO;EAAE,IAAI;EAAO,OAAO;EAAgB,QAAQ;EAAK;AAG1D,KAAI,CAAC,qBADY,MAAM,kBAAkB,KAAK,GAAG,EACb,IAAI,CACtC,QAAO;EAAE,IAAI;EAAO,OAAO;EAA+B,QAAQ;EAAK;AAEzE,OAAM,UAAU,KAAK,SAAS,QAAQ;AACtC,QAAO;EAAE,IAAI;EAAM,MAAM;GAAE,SAAS;GAAI,MAAM;GAAK;EAAE"}

package/dist/src/gateway/hono/lib/static-ui.js

@@ -1,6 +1,6 @@
 import { dirname, resolve } from "node:path";
-import { fileURLToPath } from "node:url";
 import { readFileSync } from "node:fs";
+import { fileURLToPath } from "node:url";
 //#region src/gateway/hono/lib/static-ui.ts
 const __dirname = dirname(fileURLToPath(import.meta.url));
 /**

package/dist/src/gateway/hono/oauth.js

@@ -1,6 +1,6 @@
 import { CredentialResolver, init_credentials } from "../../auth/credentials.js";
-import { init_providers, isProviderConfigured } from "../../providers/index.js";
 import { anthropicOAuthProvider } from "../../auth/oauth/anthropic.js";
+import { init_providers, isProviderConfigured } from "../../providers/index.js";
 import { minimaxOAuthProvider } from "../../auth/oauth/minimax.js";
 import { minimaxCnOAuthProvider } from "../../auth/oauth/minimax-cn.js";
 import { kimiCodingOAuthProvider } from "../../auth/oauth/kimi-coding.js";

package/dist/src/gateway/hono/routes/config.js

@@ -1,5 +1,5 @@
-import { BindingsConfigSchema, init_schema } from "../../../config/schema.js";
 import { CredentialResolver, init_credentials } from "../../../auth/credentials.js";
+import { BindingsConfigSchema, init_schema } from "../../../config/schema.js";
 import { normalizePatchAgentModel } from "../lib/agent-model.js";
 import { applyToolsWebPatch } from "../../config-tools-web.js";
 import { buildSafeWebConfigPayload } from "../lib/config-payload.js";

package/dist/src/gateway/hono/routes/doctor.d.ts

@@ -0,0 +1,3 @@
+import type { Hono } from 'hono';
+import type { AuthenticatedRouteDeps } from './deps.js';
+export declare function registerDoctorRoutes(authenticated: Hono, _deps: AuthenticatedRouteDeps): void;