@xrkseek/harness 0.2.7 → 0.3.1

package/node_modules/@xrkseek/server-face/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAcA,OAAO,EACL,oBAAoB,EACpB,sBAAsB,EACtB,kBAAkB,EAClB,aAAa,EACb,WAAW,EACX,kBAAkB,EAClB,cAAc,EACd,iBAAiB,EACjB,YAAY,EACZ,iBAAiB,EACjB,eAAe,EACf,UAAU,EACV,mBAAmB,EACnB,mBAAmB,EACnB,kBAAkB,EAClB,iBAAiB,GAGlB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,aAAa,EAAgB,MAAM,UAAU,CAAC;AACvD,OAAO,EAAE,kBAAkB,EAAE,UAAU,EAAqB,MAAM,UAAU,CAAC;AAC7E,OAAO,EAGN,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,iBAAiB,EAAiC,MAAM,cAAc,CAAC;AAChF,OAAO,EACL,uBAAuB,EACvB,uBAAuB,EACvB,0BAA0B,EAC1B,uBAAuB,GAIxB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,wBAAwB,EACxB,+BAA+B,GAGhC,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,aAAa,EACb,uBAAuB,GAKxB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,oBAAoB,EACpB,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,kBAAkB,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC/D,OAAO,EACL,uBAAuB,EACvB,kBAAkB,GAGnB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,4BAA4B,EAC5B,yBAAyB,EACzB,6BAA6B,EAC7B,+BAA+B,EAC/B,6BAA6B,EAC7B,mBAAmB,EACnB,wBAAwB,EACxB,qBAAqB,EACrB,oBAAoB,GAMrB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,qBAAqB,EACrB,wBAAwB,EACxB,qBAAqB,EACrB,uBAAuB,EACvB,sBAAsB,EACtB,0BAA0B,EAC1B,oBAAoB,GAIrB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,cAAc,EACd,kBAAkB,EAClB,kBAAkB,EAClB,cAAc,EACd,gBAAgB,GAEjB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,kBAAkB,EAClB,oBAAoB,EACpB,qBAAqB,EACrB,iBAAiB,GAElB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,6BAA6B,EAC7B,gBAAgB,GAEjB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,sBAAsB,EACtB,eAAe,EACf,cAAc,EACd,mBAAmB,EACnB,cAAc,EACd,QAAQ,EACR,yBAAyB,EACzB,8BAA8B,EAC9B,kBAAkB,EAClB,wBAAwB,EACxB,eAAe,EACf,sBAAsB,EACtB,iBAAiB,EACjB,kBAAkB,EAClB,aAAa,GAWd,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,kBAAkB,EAClB,qBAAqB,EACrB,mBAAmB,EACnB,sBAAsB,EACtB,iBAAiB,EACjB,yBAAyB,EACzB,2BAA2B,GAO5B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,YAAY,GAIb,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,eAAe,EACf,eAAe,EACf,iBAAiB,EACjB,eAAe,EACf,2BAA2B,EAC3B,mBAAmB,EACnB,mBAAmB,EACnB,iBAAiB,EACjB,yBAAyB,EACzB,gCAAgC,EAChC,iBAAiB,EACjB,oBAAoB,EACpB,sBAAsB,EACtB,mBAAmB,GAEpB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,qBAAqB,GAEtB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,oBAAoB,GAGrB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,cAAc,EACd,mBAAmB,EACnB,iBAAiB,GAGlB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,sBAAsB,EACtB,oBAAoB,EACpB,mBAAmB,EACnB,qBAAqB,GAItB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,iBAAiB,EACjB,YAAY,EACZ,cAAc,EACd,gBAAgB,EAChB,iBAAiB,GAClB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,oBAAoB,EACpB,sBAAsB,EACtB,uBAAuB,EACvB,yBAAyB,EACzB,mBAAmB,GAEpB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,kBAAkB,EAClB,iBAAiB,EACjB,2BAA2B,EAC3B,iBAAiB,EACjB,kCAAkC,EAClC,yBAAyB,EACzB,sBAAsB,EACtB,mBAAmB,EACnB,mBAAmB,GAGpB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,eAAe,EAAoB,MAAM,kBAAkB,CAAC;AACrE,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EACL,mBAAmB,EACnB,sBAAsB,EACtB,mBAAmB,EACnB,eAAe,EACf,cAAc,EACd,gBAAgB,EAChB,iBAAiB,EACjB,mBAAmB,EACnB,uBAAuB,EACvB,mBAAmB,EACnB,mBAAmB,EACnB,sBAAsB,EACtB,oBAAoB,EACpB,WAAW,EACX,kBAAkB,EAClB,mBAAmB,EACnB,WAAW,EACX,kBAAkB,EAClB,oBAAoB,GAQrB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,kBAAkB,EAClB,sBAAsB,EACtB,qBAAqB,GAItB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,kBAAkB,EAClB,iBAAiB,EACjB,eAAe,EACf,oBAAoB,EACpB,sBAAsB,EACtB,oBAAoB,EACpB,sBAAsB,EACtB,qBAAqB,GAGtB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EACL,iBAAiB,EACjB,aAAa,EACb,4BAA4B,GAE7B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,uBAAuB,EACvB,4BAA4B,EAC5B,iBAAiB,EACjB,uBAAuB,EACvB,sBAAsB,EACtB,oBAAoB,EACpB,sBAAsB,EACtB,uBAAuB,GACxB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,oBAAoB,EACpB,sBAAsB,EACtB,2BAA2B,EAC3B,oBAAoB,GACrB,MAAM,yBAAyB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAcA,OAAO,EACL,oBAAoB,EACpB,sBAAsB,EACtB,kBAAkB,EAClB,aAAa,EACb,WAAW,EACX,kBAAkB,EAClB,cAAc,EACd,iBAAiB,EACjB,YAAY,EACZ,iBAAiB,EACjB,eAAe,EACf,UAAU,EACV,mBAAmB,EACnB,mBAAmB,EACnB,kBAAkB,EAClB,iBAAiB,GAGlB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,aAAa,EAAgB,MAAM,UAAU,CAAC;AACvD,OAAO,EAAE,kBAAkB,EAAE,UAAU,EAAqB,MAAM,UAAU,CAAC;AAC7E,OAAO,EAGN,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,iBAAiB,EAAiC,MAAM,cAAc,CAAC;AAChF,OAAO,EACL,uBAAuB,EACvB,uBAAuB,EACvB,wBAAwB,EACxB,sBAAsB,EACtB,iBAAiB,EACjB,sBAAsB,EACtB,2BAA2B,EAC3B,0BAA0B,EAC1B,uBAAuB,EACvB,8BAA8B,EAC9B,wBAAwB,GAIzB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,qBAAqB,EACrB,yBAAyB,EACzB,2BAA2B,GAG5B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,qBAAqB,EACrB,eAAe,GAGhB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,8BAA8B,EAAE,MAAM,wBAAwB,CAAC;AACxE,OAAO,EACL,wBAAwB,EACxB,+BAA+B,GAGhC,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,aAAa,EACb,uBAAuB,GAKxB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,oBAAoB,EACpB,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,kBAAkB,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC/D,OAAO,EACL,uBAAuB,EACvB,kBAAkB,GAGnB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,4BAA4B,EAC5B,yBAAyB,EACzB,6BAA6B,EAC7B,+BAA+B,EAC/B,6BAA6B,EAC7B,mBAAmB,EACnB,wBAAwB,EACxB,qBAAqB,EACrB,oBAAoB,GAMrB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,qBAAqB,EACrB,wBAAwB,EACxB,qBAAqB,EACrB,uBAAuB,EACvB,sBAAsB,EACtB,0BAA0B,EAC1B,oBAAoB,GAIrB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,cAAc,EACd,kBAAkB,EAClB,kBAAkB,EAClB,cAAc,EACd,gBAAgB,GAEjB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,kBAAkB,EAClB,oBAAoB,EACpB,qBAAqB,EACrB,iBAAiB,GAElB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,6BAA6B,EAC7B,gBAAgB,GAEjB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,sBAAsB,EACtB,eAAe,EACf,cAAc,EACd,mBAAmB,EACnB,cAAc,EACd,QAAQ,EACR,yBAAyB,EACzB,8BAA8B,EAC9B,kBAAkB,EAClB,wBAAwB,EACxB,eAAe,EACf,sBAAsB,EACtB,iBAAiB,EACjB,kBAAkB,EAClB,aAAa,EACb,sBAAsB,EACtB,iCAAiC,EACjC,4BAA4B,EAC5B,gBAAgB,EAChB,sBAAsB,GAYvB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,kBAAkB,EAClB,qBAAqB,EACrB,mBAAmB,EACnB,sBAAsB,EACtB,iBAAiB,EACjB,yBAAyB,EACzB,2BAA2B,GAO5B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,YAAY,GAIb,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,eAAe,EACf,eAAe,EACf,iBAAiB,EACjB,eAAe,EACf,2BAA2B,EAC3B,mBAAmB,EACnB,mBAAmB,EACnB,iBAAiB,EACjB,yBAAyB,EACzB,gCAAgC,EAChC,iBAAiB,EACjB,oBAAoB,EACpB,sBAAsB,EACtB,mBAAmB,GAEpB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,qBAAqB,GAEtB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,oBAAoB,GAGrB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,cAAc,EACd,mBAAmB,EACnB,iBAAiB,GAGlB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,sBAAsB,EACtB,oBAAoB,EACpB,mBAAmB,EACnB,qBAAqB,GAItB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,iBAAiB,EACjB,YAAY,EACZ,cAAc,EACd,gBAAgB,EAChB,iBAAiB,GAClB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,oBAAoB,EACpB,sBAAsB,EACtB,uBAAuB,EACvB,yBAAyB,EACzB,mBAAmB,GAEpB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,kBAAkB,EAClB,iBAAiB,EACjB,2BAA2B,EAC3B,iBAAiB,EACjB,kCAAkC,EAClC,yBAAyB,EACzB,sBAAsB,EACtB,mBAAmB,EACnB,mBAAmB,GAGpB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,eAAe,EAAoB,MAAM,kBAAkB,CAAC;AACrE,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EACL,mBAAmB,EACnB,sBAAsB,EACtB,mBAAmB,EACnB,eAAe,EACf,cAAc,EACd,gBAAgB,EAChB,iBAAiB,EACjB,mBAAmB,EACnB,uBAAuB,EACvB,mBAAmB,EACnB,mBAAmB,EACnB,sBAAsB,EACtB,oBAAoB,EACpB,WAAW,EACX,kBAAkB,EAClB,mBAAmB,EACnB,WAAW,EACX,kBAAkB,EAClB,oBAAoB,GAQrB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,kBAAkB,EAClB,sBAAsB,EACtB,qBAAqB,GAItB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,kBAAkB,EAClB,iBAAiB,EACjB,eAAe,EACf,oBAAoB,EACpB,sBAAsB,EACtB,oBAAoB,EACpB,sBAAsB,EACtB,qBAAqB,GAGtB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EACL,iBAAiB,EACjB,aAAa,EACb,4BAA4B,GAE7B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,uBAAuB,EACvB,4BAA4B,EAC5B,iBAAiB,EACjB,uBAAuB,EACvB,sBAAsB,EACtB,oBAAoB,EACpB,sBAAsB,EACtB,uBAAuB,GACxB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,oBAAoB,EACpB,sBAAsB,EACtB,2BAA2B,EAC3B,oBAAoB,GACrB,MAAM,yBAAyB,CAAC"}

package/node_modules/@xrkseek/server-face/dist/plugin-boot.d.ts

@@ -0,0 +1,22 @@
+export { atomicWriteText } from "@xrkseek/server-loader";
+export interface ClientBootEntry {
+    readonly id: string;
+    readonly url: string;
+    readonly rev: string;
+    readonly inject: readonly string[];
+    readonly immediately?: boolean;
+}
+export interface ClientBootReconcileResult {
+    readonly rev: string;
+    readonly entries: readonly ClientBootEntry[];
+    /** False when on-disk boot already matched (no rewrite / no cache bust). */
+    readonly wrote: boolean;
+    /** True when disabled file was rewritten (orphan prune and/or canonicalize). */
+    readonly prunedDisabled: boolean;
+}
+/**
+ * Rewrite `{pluginsDir}/web/boot.json` from `.xrk-plugins.json` client rows,
+ * omitting soft-disabled ids and pruning/canonicalizing the disabled file.
+ */
+export declare function reconcileClientBootAt(pluginsDir: string): ClientBootReconcileResult;
+//# sourceMappingURL=plugin-boot.d.ts.map

package/node_modules/@xrkseek/server-face/dist/plugin-boot.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-boot.d.ts","sourceRoot":"","sources":["../src/plugin-boot.ts"],"names":[],"mappings":"AAkBA,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAEzD,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;CAChC;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,OAAO,EAAE,SAAS,eAAe,EAAE,CAAC;IAC7C,4EAA4E;IAC5E,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,gFAAgF;IAChF,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;CAClC;AAiBD;;;GAGG;AACH,wBAAgB,qBAAqB,CACnC,UAAU,EAAE,MAAM,GACjB,yBAAyB,CAiF3B"}

package/node_modules/@xrkseek/server-face/dist/plugin-boot.js

@@ -0,0 +1,92 @@
+/**
+ * Shared client-plugin boot overlay reconcile (CLI + Face + Host).
+ * Soft-disable disk I/O lives in `@xrkseek/server-loader` (shared leaf).
+ * Boot writer stays here: content-stable rev + atomic replace.
+ */
+import { createHash } from "node:crypto";
+import { existsSync, mkdirSync, readFileSync, rmSync } from "node:fs";
+import path from "node:path";
+import { atomicWriteText, canonicalizeDisabledPluginIdsAt, isPluginSoftDisabledAt, readDisabledPluginIdsAt, readManagedPackageIndexAt, readManagedPluginPackagesAt, writeDisabledPluginIdsAt, } from "@xrkseek/server-loader";
+export { atomicWriteText } from "@xrkseek/server-loader";
+function entriesFingerprint(entries) {
+    return createHash("sha256")
+        .update(JSON.stringify(entries))
+        .digest("hex")
+        .slice(0, 16);
+}
+function sameEntries(a, b) {
+    if (!a || a.length !== b.length)
+        return false;
+    return JSON.stringify(a) === JSON.stringify(b);
+}
+/**
+ * Rewrite `{pluginsDir}/web/boot.json` from `.xrk-plugins.json` client rows,
+ * omitting soft-disabled ids and pruning/canonicalizing the disabled file.
+ */
+export function reconcileClientBootAt(pluginsDir) {
+    const root = path.resolve(pluginsDir);
+    const index = readManagedPackageIndexAt(root);
+    const disabled = readDisabledPluginIdsAt(root);
+    const packages = readManagedPluginPackagesAt(root);
+    const entries = [];
+    for (const [name, entry] of packages) {
+        if (entry.kind !== "client" && entry.kind !== "both")
+            continue;
+        if (isPluginSoftDisabledAt(name, disabled, index))
+            continue;
+        entries.push({
+            id: name,
+            url: `/plugins/${name}/client.js`,
+            rev: entry.version ?? "0",
+            inject: entry.clientInject ?? [],
+            ...(entry.clientImmediately ? { immediately: true } : {}),
+        });
+    }
+    const prunedDisabled = canonicalizeDisabledPluginIdsAt(root, disabled, index);
+    if (prunedDisabled)
+        writeDisabledPluginIdsAt(root, disabled);
+    entries.sort((a, b) => a.id.localeCompare(b.id));
+    const webDir = path.join(root, "web");
+    const bootPath = path.join(webDir, "boot.json");
+    if (entries.length === 0) {
+        if (existsSync(bootPath)) {
+            rmSync(bootPath, { force: true });
+            return {
+                rev: `xrk-plugins-empty`,
+                entries,
+                wrote: true,
+                prunedDisabled,
+            };
+        }
+        return {
+            rev: `xrk-plugins-empty`,
+            entries,
+            wrote: false,
+            prunedDisabled,
+        };
+    }
+    let previous;
+    if (existsSync(bootPath)) {
+        try {
+            previous = JSON.parse(readFileSync(bootPath, "utf8"));
+        }
+        catch {
+            previous = undefined;
+        }
+    }
+    if (sameEntries(previous?.entries, entries)) {
+        return {
+            rev: typeof previous?.rev === "string" && previous.rev
+                ? previous.rev
+                : `xrk-plugins-${entriesFingerprint(entries)}`,
+            entries,
+            wrote: false,
+            prunedDisabled,
+        };
+    }
+    const rev = `xrk-plugins-${entriesFingerprint(entries)}`;
+    mkdirSync(webDir, { recursive: true });
+    atomicWriteText(bootPath, `${JSON.stringify({ rev, entries }, null, 2)}\n`);
+    return { rev, entries, wrote: true, prunedDisabled };
+}
+//# sourceMappingURL=plugin-boot.js.map

package/node_modules/@xrkseek/server-face/dist/plugin-boot.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-boot.js","sourceRoot":"","sources":["../src/plugin-boot.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACtE,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EACL,eAAe,EACf,+BAA+B,EAC/B,sBAAsB,EACtB,uBAAuB,EACvB,yBAAyB,EACzB,2BAA2B,EAC3B,wBAAwB,GACzB,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAmBzD,SAAS,kBAAkB,CAAC,OAAmC;IAC7D,OAAO,UAAU,CAAC,QAAQ,CAAC;SACxB,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;SAC/B,MAAM,CAAC,KAAK,CAAC;SACb,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAClB,CAAC;AAED,SAAS,WAAW,CAClB,CAAyC,EACzC,CAA6B;IAE7B,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC9C,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;AACjD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CACnC,UAAkB;IAElB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACtC,MAAM,KAAK,GAAG,yBAAyB,CAAC,IAAI,CAAC,CAAC;IAC9C,MAAM,QAAQ,GAAG,uBAAuB,CAAC,IAAI,CAAC,CAAC;IAC/C,MAAM,QAAQ,GAAG,2BAA2B,CAAC,IAAI,CAAC,CAAC;IACnD,MAAM,OAAO,GAAsB,EAAE,CAAC;IAEtC,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,QAAQ,EAAE,CAAC;QACrC,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM;YAAE,SAAS;QAC/D,IAAI,sBAAsB,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC;YAAE,SAAS;QAC5D,OAAO,CAAC,IAAI,CAAC;YACX,EAAE,EAAE,IAAI;YACR,GAAG,EAAE,YAAY,IAAI,YAAY;YACjC,GAAG,EAAE,KAAK,CAAC,OAAO,IAAI,GAAG;YACzB,MAAM,EAAE,KAAK,CAAC,YAAY,IAAI,EAAE;YAChC,GAAG,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1D,CAAC,CAAC;IACL,CAAC;IAED,MAAM,cAAc,GAAG,+BAA+B,CACpD,IAAI,EACJ,QAAQ,EACR,KAAK,CACN,CAAC;IACF,IAAI,cAAc;QAAE,wBAAwB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAE7D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACjD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAEhD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YACzB,MAAM,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAClC,OAAO;gBACL,GAAG,EAAE,mBAAmB;gBACxB,OAAO;gBACP,KAAK,EAAE,IAAI;gBACX,cAAc;aACf,CAAC;QACJ,CAAC;QACD,OAAO;YACL,GAAG,EAAE,mBAAmB;YACxB,OAAO;YACP,KAAK,EAAE,KAAK;YACZ,cAAc;SACf,CAAC;IACJ,CAAC;IAED,IAAI,QAES,CAAC;IACd,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAGnD,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,QAAQ,GAAG,SAAS,CAAC;QACvB,CAAC;IACH,CAAC;IAED,IAAI,WAAW,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC;QAC5C,OAAO;YACL,GAAG,EACD,OAAO,QAAQ,EAAE,GAAG,KAAK,QAAQ,IAAI,QAAQ,CAAC,GAAG;gBAC/C,CAAC,CAAC,QAAQ,CAAC,GAAG;gBACd,CAAC,CAAC,eAAe,kBAAkB,CAAC,OAAO,CAAC,EAAE;YAClD,OAAO;YACP,KAAK,EAAE,KAAK;YACZ,cAAc;SACf,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,eAAe,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC;IACzD,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvC,eAAe,CACb,QAAQ,EACR,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CACjD,CAAC;IACF,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;AACvD,CAAC"}

package/node_modules/@xrkseek/server-face/dist/plugin-disabled.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Soft-disable helpers — leaf implementation lives in `@xrkseek/server-loader`
+ * so HTTP / Face / Host / CLI share one disk contract without Face↔HTTP cycles.
+ */
+export { DISABLED_PLUGINS_FILE, MANAGED_PLUGINS_INVENTORY_FILE, canonicalizeDisabledPluginIdsAt, clearSoftDisabledIdsAt, disabledPluginsPath, isPluginSoftDisabledAt, lookupManagedPluginSourceAt, managedPluginsInventoryPath, readDisabledPluginIdsAt, readManagedPackageIndexAt, readManagedPluginPackagesAt, setSoftDisabledAt, writeDisabledPluginIdsAt, type ManagedPackageIndex, type ManagedPluginPackageMeta, } from "@xrkseek/server-loader";
+//# sourceMappingURL=plugin-disabled.d.ts.map

package/node_modules/@xrkseek/server-face/dist/plugin-disabled.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-disabled.d.ts","sourceRoot":"","sources":["../src/plugin-disabled.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EACL,qBAAqB,EACrB,8BAA8B,EAC9B,+BAA+B,EAC/B,sBAAsB,EACtB,mBAAmB,EACnB,sBAAsB,EACtB,2BAA2B,EAC3B,2BAA2B,EAC3B,uBAAuB,EACvB,yBAAyB,EACzB,2BAA2B,EAC3B,iBAAiB,EACjB,wBAAwB,EACxB,KAAK,mBAAmB,EACxB,KAAK,wBAAwB,GAC9B,MAAM,wBAAwB,CAAC"}

package/node_modules/@xrkseek/server-face/dist/plugin-disabled.js

@@ -0,0 +1,6 @@
+/**
+ * Soft-disable helpers — leaf implementation lives in `@xrkseek/server-loader`
+ * so HTTP / Face / Host / CLI share one disk contract without Face↔HTTP cycles.
+ */
+export { DISABLED_PLUGINS_FILE, MANAGED_PLUGINS_INVENTORY_FILE, canonicalizeDisabledPluginIdsAt, clearSoftDisabledIdsAt, disabledPluginsPath, isPluginSoftDisabledAt, lookupManagedPluginSourceAt, managedPluginsInventoryPath, readDisabledPluginIdsAt, readManagedPackageIndexAt, readManagedPluginPackagesAt, setSoftDisabledAt, writeDisabledPluginIdsAt, } from "@xrkseek/server-loader";
+//# sourceMappingURL=plugin-disabled.js.map

package/node_modules/@xrkseek/server-face/dist/plugin-disabled.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-disabled.js","sourceRoot":"","sources":["../src/plugin-disabled.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EACL,qBAAqB,EACrB,8BAA8B,EAC9B,+BAA+B,EAC/B,sBAAsB,EACtB,mBAAmB,EACnB,sBAAsB,EACtB,2BAA2B,EAC3B,2BAA2B,EAC3B,uBAAuB,EACvB,yBAAyB,EACzB,2BAA2B,EAC3B,iBAAiB,EACjB,wBAAwB,GAGzB,MAAM,wBAAwB,CAAC"}

package/node_modules/@xrkseek/server-face/dist/plugin-inventory.d.ts

@@ -1,5 +1,6 @@
 import type { ToolDefinition } from "@xrkseek/core-tools";
 import type { FaceRuntime } from "./context.js";
+export { DISABLED_PLUGINS_FILE, clearSoftDisabledIdsAt, canonicalizeDisabledPluginIdsAt, isPluginSoftDisabledAt, lookupManagedPluginSourceAt, readDisabledPluginIdsAt, readManagedPackageIndexAt, readManagedPluginPackagesAt, setSoftDisabledAt, writeDisabledPluginIdsAt, } from "./plugin-disabled.js";
 /** DSH `pluginInventory/list` fiber phase. */
 export type FacePluginFiberPhase = "pending" | "loading" | "active" | "failed" | "unloading" | null;
 export interface FacePluginInventoryEntry {
@@ -12,6 +13,22 @@ export interface FacePluginInventoryEntry {
      * edit / disable / delete. Built-in product-shell and MCP rows stay false.
      */
     readonly managed: boolean;
+    /** CLI inventory version when known (Codex-style plugin summary). */
+    readonly version?: string;
+    /** `client` | `process` | `both` | `mcp` | `cordis` | `builtin`. */
+    readonly kind?: string;
+    /** Original `plugin add` spec when managed. */
+    readonly source?: string;
+    /**
+     * Soft-disable / re-enable / install changed disk state but this Host
+     * process still has the opposite live set — restart to apply.
+     */
+    readonly needsRestart?: boolean;
+}
+export interface FaceManagedPluginMeta {
+    readonly version?: string;
+    readonly kind?: string;
+    readonly source?: string;
 }
 export interface FaceWebPlugin {
     readonly id: string;
@@ -48,23 +65,37 @@ export interface FaceProcessPlugin {
     /** MCP supervisor health (Host `mcp:*` plugins). */
     readonly mcpHealth?: "connected" | "reconnecting" | "gave-up";
 }
+/**
+ * Managed plugins root: Host `pluginsDir` (incl. `XRK_PLUGINS_DIR`) wins;
+ * otherwise `{harnessHome}/plugins`.
+ */
+export declare function resolveManagedPluginsDir(runtime: Pick<FaceRuntime, "productDir" | "hostPublic">): string;
+/**
+ * Reinstall/update spec: keep registry / github sources; local path installs
+ * are cwd-sensitive after Host restart → fall back to `name@latest`.
+ */
+export declare function resolveManagedPluginUpdateSpec(entryId: string, source: string | undefined): string;
 /** Package names recorded by `xrk-harness plugin add`. */
-export declare function readUserPluginNames(runtime: Pick<FaceRuntime, "productDir">): Set<string>;
-/** Soft-disabled managed plugin ids under a plugins directory. */
-export declare function readDisabledPluginIdsAt(pluginsDir: string): Set<string>;
+export declare function readUserPluginNames(runtime: Pick<FaceRuntime, "productDir" | "hostPublic">): Set<string>;
+/** CLI inventory rows keyed by package name (version / kind / source). */
+export declare function readUserPluginPackages(runtime: Pick<FaceRuntime, "productDir" | "hostPublic">): Map<string, FaceManagedPluginMeta>;
 /** Soft-disabled managed plugin ids (Settings inventory toggle). */
-export declare function readDisabledPluginIds(runtime: Pick<FaceRuntime, "productDir">): Set<string>;
-export declare function writeDisabledPluginIds(runtime: Pick<FaceRuntime, "productDir">, ids: ReadonlySet<string>): void;
+export declare function readDisabledPluginIds(runtime: Pick<FaceRuntime, "productDir" | "hostPublic">): Set<string>;
+export declare function writeDisabledPluginIds(runtime: Pick<FaceRuntime, "productDir" | "hostPublic">, ids: ReadonlySet<string>): void;
 /** Absolute install directory for a managed plugin, if it exists on disk. */
-export declare function resolveManagedPluginDir(runtime: Pick<FaceRuntime, "productDir">, entryId: string, moduleName?: string): string | undefined;
+export declare function resolveManagedPluginDir(runtime: Pick<FaceRuntime, "productDir" | "hostPublic">, entryId: string, moduleName?: string): string | undefined;
 /**
- * Rewrite `{pluginsDir}/web/boot.json` from inventory client rows, omitting
- * soft-disabled ids so the next Host start does not load them.
+ * Rewrite `{pluginsDir}/web/boot.json` from inventory client rows.
+ * Delegates to shared {@link reconcileClientBootAt} (stable rev · atomic write).
  */
-export declare function reconcileManagedClientBoot(runtime: Pick<FaceRuntime, "productDir">): void;
+export declare function reconcileManagedClientBoot(runtime: Pick<FaceRuntime, "productDir" | "hostPublic">): void;
 /**
  * Host process plugins first (user-managed sorted ahead), then product-shell
- * boot entries. Cordis uses dsh-compat host.mjs apply or staged `client.js`.
+ * boot entries, then CLI inventory packages missing from live boot.
+ *
+ * Soft-disabled client packages are dropped from `web/boot.json` (and thus from
+ * Host `webPlugins`) so they do not load — but Settings must still list them
+ * from `.xrk-plugins.json`, otherwise there is no row to re-enable.
  */
 export declare function listFacePluginInventory(runtime: Pick<FaceRuntime, "plugins" | "webPlugins" | "hostPublic" | "productDir">): FacePluginInventoryEntry[];
 export declare function collectFacePluginCommands(plugins: readonly FaceProcessPlugin[] | undefined): readonly FacePluginCommand[];

package/node_modules/@xrkseek/server-face/dist/plugin-inventory.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"plugin-inventory.d.ts","sourceRoot":"","sources":["../src/plugin-inventory.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAE1D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAGhD,8CAA8C;AAC9C,MAAM,MAAM,oBAAoB,GAC5B,SAAS,GACT,SAAS,GACT,QAAQ,GACR,QAAQ,GACR,WAAW,GACX,IAAI,CAAC;AAET,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,oBAAoB,CAAC;IAC1C;;;OAGG;IACH,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,IAAI,EAAE,SAAS,GAAG,OAAO,CAAC;IACnC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,KAAK,CAAC,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAC3C,QAAQ,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE;QACtB,SAAS,EAAE,MAAM,CAAC;QAClB,QAAQ,EAAE,MAAM,CAAC;QACjB,SAAS,EAAE,MAAM,CAAC;KACnB,KAAK,uBAAuB,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;CAClE;AAED,gEAAgE;AAChE,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,iBAAiB,EAAE,CAAC;IACjD,oEAAoE;IACpE,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,cAAc,EAAE,CAAC;IAC3C,+EAA+E;IAC/E,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS;QAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;KAC/B,EAAE,CAAC;IACJ,oDAAoD;IACpD,QAAQ,CAAC,SAAS,CAAC,EAAE,WAAW,GAAG,cAAc,GAAG,SAAS,CAAC;CAC/D;AAMD,0DAA0D;AAC1D,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,IAAI,CAAC,WAAW,EAAE,YAAY,CAAC,GACvC,GAAG,CAAC,MAAM,CAAC,CAeb;AAMD,kEAAkE;AAClE,wBAAgB,uBAAuB,CAAC,UAAU,EAAE,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAcvE;AAED,oEAAoE;AACpE,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,IAAI,CAAC,WAAW,EAAE,YAAY,CAAC,GACvC,GAAG,CAAC,MAAM,CAAC,CAEb;AAED,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,IAAI,CAAC,WAAW,EAAE,YAAY,CAAC,EACxC,GAAG,EAAE,WAAW,CAAC,MAAM,CAAC,GACvB,IAAI,CAQN;AAED,6EAA6E;AAC7E,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,IAAI,CAAC,WAAW,EAAE,YAAY,CAAC,EACxC,OAAO,EAAE,MAAM,EACf,UAAU,CAAC,EAAE,MAAM,GAClB,MAAM,GAAG,SAAS,CAgBpB;AAED;;;GAGG;AACH,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,IAAI,CAAC,WAAW,EAAE,YAAY,CAAC,GACvC,IAAI,CAuDN;AAaD;;;GAGG;AACH,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,IAAI,CACX,WAAW,EACX,SAAS,GAAG,YAAY,GAAG,YAAY,GAAG,YAAY,CACvD,GACA,wBAAwB,EAAE,CA4C5B;AAED,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,SAAS,iBAAiB,EAAE,GAAG,SAAS,GAChD,SAAS,iBAAiB,EAAE,CAY9B;AAED,0DAA0D;AAC1D,wBAAgB,6BAA6B,CAC3C,OAAO,EAAE,IAAI,CAAC,WAAW,EAAE,SAAS,GAAG,YAAY,GAAG,YAAY,GAAG,YAAY,CAAC,EAClF,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,OAAO,GACf;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAU7C"}
+{"version":3,"file":"plugin-inventory.d.ts","sourceRoot":"","sources":["../src/plugin-inventory.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAU1D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAIhD,OAAO,EACL,qBAAqB,EACrB,sBAAsB,EACtB,+BAA+B,EAC/B,sBAAsB,EACtB,2BAA2B,EAC3B,uBAAuB,EACvB,yBAAyB,EACzB,2BAA2B,EAC3B,iBAAiB,EACjB,wBAAwB,GACzB,MAAM,sBAAsB,CAAC;AAE9B,8CAA8C;AAC9C,MAAM,MAAM,oBAAoB,GAC5B,SAAS,GACT,SAAS,GACT,QAAQ,GACR,QAAQ,GACR,WAAW,GACX,IAAI,CAAC;AAET,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,oBAAoB,CAAC;IAC1C;;;OAGG;IACH,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,qEAAqE;IACrE,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,oEAAoE;IACpE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,+CAA+C;IAC/C,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB;;;OAGG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC;CACjC;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,IAAI,EAAE,SAAS,GAAG,OAAO,CAAC;IACnC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,KAAK,CAAC,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAC3C,QAAQ,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE;QACtB,SAAS,EAAE,MAAM,CAAC;QAClB,QAAQ,EAAE,MAAM,CAAC;QACjB,SAAS,EAAE,MAAM,CAAC;KACnB,KAAK,uBAAuB,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;CAClE;AAED,gEAAgE;AAChE,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,iBAAiB,EAAE,CAAC;IACjD,oEAAoE;IACpE,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,cAAc,EAAE,CAAC;IAC3C,+EAA+E;IAC/E,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS;QAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;KAC/B,EAAE,CAAC;IACJ,oDAAoD;IACpD,QAAQ,CAAC,SAAS,CAAC,EAAE,WAAW,GAAG,cAAc,GAAG,SAAS,CAAC;CAC/D;AAED;;;GAGG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,IAAI,CAAC,WAAW,EAAE,YAAY,GAAG,YAAY,CAAC,GACtD,MAAM,CAIR;AASD;;;GAGG;AACH,wBAAgB,8BAA8B,CAC5C,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,GAAG,SAAS,GACzB,MAAM,CAiBR;AAED,0DAA0D;AAC1D,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,IAAI,CAAC,WAAW,EAAE,YAAY,GAAG,YAAY,CAAC,GACtD,GAAG,CAAC,MAAM,CAAC,CAEb;AAED,0EAA0E;AAC1E,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,IAAI,CAAC,WAAW,EAAE,YAAY,GAAG,YAAY,CAAC,GACtD,GAAG,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAUpC;AAED,oEAAoE;AACpE,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,IAAI,CAAC,WAAW,EAAE,YAAY,GAAG,YAAY,CAAC,GACtD,GAAG,CAAC,MAAM,CAAC,CAEb;AAED,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,IAAI,CAAC,WAAW,EAAE,YAAY,GAAG,YAAY,CAAC,EACvD,GAAG,EAAE,WAAW,CAAC,MAAM,CAAC,GACvB,IAAI,CAEN;AAED,6EAA6E;AAC7E,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,IAAI,CAAC,WAAW,EAAE,YAAY,GAAG,YAAY,CAAC,EACvD,OAAO,EAAE,MAAM,EACf,UAAU,CAAC,EAAE,MAAM,GAClB,MAAM,GAAG,SAAS,CAgBpB;AAED;;;GAGG;AACH,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,IAAI,CAAC,WAAW,EAAE,YAAY,GAAG,YAAY,CAAC,GACtD,IAAI,CAEN;AAiBD;;;;;;;GAOG;AACH,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,IAAI,CACX,WAAW,EACX,SAAS,GAAG,YAAY,GAAG,YAAY,GAAG,YAAY,CACvD,GACA,wBAAwB,EAAE,CAuG5B;AAED,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,SAAS,iBAAiB,EAAE,GAAG,SAAS,GAChD,SAAS,iBAAiB,EAAE,CAY9B;AAED,0DAA0D;AAC1D,wBAAgB,6BAA6B,CAC3C,OAAO,EAAE,IAAI,CAAC,WAAW,EAAE,SAAS,GAAG,YAAY,GAAG,YAAY,GAAG,YAAY,CAAC,EAClF,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,OAAO,GACf;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAY7C"}

package/node_modules/@xrkseek/server-face/dist/plugin-inventory.js

@@ -3,51 +3,64 @@
  * User-installed packages (`~/.xrk/plugins/.xrk-plugins.json`) are marked
  * `managed` so the Settings inventory can pin them and offer remove/disable.
  */
-import { existsSync, readFileSync, writeFileSync, mkdirSync, rmSync } from "node:fs";
+import { existsSync } from "node:fs";
 import path from "node:path";
-import { resolveCordisFiberState } from "./cordis-bridge.js";
+import { isPluginSoftDisabledAt, readDisabledPluginIdsAt, readManagedPackageIndexAt, readManagedPluginPackagesAt, setSoftDisabledAt, writeDisabledPluginIdsAt, } from "@xrkseek/server-loader";
+import { resolveCordisFiberState, hasStagedCordisClient } from "./cordis-bridge.js";
+import { reconcileClientBootAt } from "./plugin-boot.js";
 import { resolveHarnessHome } from "./settings-document.js";
-function pluginsDirOf(runtime) {
+export { DISABLED_PLUGINS_FILE, clearSoftDisabledIdsAt, canonicalizeDisabledPluginIdsAt, isPluginSoftDisabledAt, lookupManagedPluginSourceAt, readDisabledPluginIdsAt, readManagedPackageIndexAt, readManagedPluginPackagesAt, setSoftDisabledAt, writeDisabledPluginIdsAt, } from "./plugin-disabled.js";
+/**
+ * Managed plugins root: Host `pluginsDir` (incl. `XRK_PLUGINS_DIR`) wins;
+ * otherwise `{harnessHome}/plugins`.
+ */
+export function resolveManagedPluginsDir(runtime) {
+    const fromHost = runtime.hostPublic?.pluginsDir?.trim();
+    if (fromHost)
+        return path.resolve(fromHost);
     return path.join(resolveHarnessHome(runtime), "plugins");
 }
-/** Package names recorded by `xrk-harness plugin add`. */
-export function readUserPluginNames(runtime) {
-    const invPath = path.join(pluginsDirOf(runtime), ".xrk-plugins.json");
-    const names = new Set();
-    if (!existsSync(invPath))
-        return names;
-    try {
-        const raw = JSON.parse(readFileSync(invPath, "utf8"));
-        for (const name of Object.keys(raw.packages ?? {})) {
-            if (name.trim())
-                names.add(name.trim());
-        }
-    }
-    catch {
-        /* empty */
+/** Alias used by inventory helpers in this module. */
+function pluginsDirOf(runtime) {
+    return resolveManagedPluginsDir(runtime);
+}
+/**
+ * Reinstall/update spec: keep registry / github sources; local path installs
+ * are cwd-sensitive after Host restart → fall back to `name@latest`.
+ */
+export function resolveManagedPluginUpdateSpec(entryId, source) {
+    const id = entryId.trim();
+    const s = source?.trim();
+    if (!id)
+        return "unknown@latest";
+    if (!s)
+        return `${id}@latest`;
+    if (/^(file:|link:)/i.test(s))
+        return `${id}@latest`;
+    if (path.isAbsolute(s) || s.startsWith("."))
+        return `${id}@latest`;
+    // Unscoped path-like strings (`ext/pkg`) without a registry/git scheme.
+    if (!s.startsWith("@") &&
+        !s.includes("@") &&
+        !/^[a-z][a-z0-9+.-]*:/i.test(s) &&
+        /[/\\]/.test(s)) {
+        return `${id}@latest`;
     }
-    return names;
+    return s;
 }
-function disabledListPath(pluginsDir) {
-    return path.join(pluginsDir, ".xrk-plugins-disabled.json");
+/** Package names recorded by `xrk-harness plugin add`. */
+export function readUserPluginNames(runtime) {
+    return new Set(readUserPluginPackages(runtime).keys());
 }
-/** Soft-disabled managed plugin ids under a plugins directory. */
-export function readDisabledPluginIdsAt(pluginsDir) {
-    const file = disabledListPath(pluginsDir);
-    const out = new Set();
-    if (!existsSync(file))
-        return out;
-    try {
-        const raw = JSON.parse(readFileSync(file, "utf8"));
-        if (!Array.isArray(raw.ids))
-            return out;
-        for (const id of raw.ids) {
-            if (typeof id === "string" && id.trim())
-                out.add(id.trim());
-        }
-    }
-    catch {
-        /* empty */
+/** CLI inventory rows keyed by package name (version / kind / source). */
+export function readUserPluginPackages(runtime) {
+    const out = new Map();
+    for (const [name, meta] of readManagedPluginPackagesAt(pluginsDirOf(runtime))) {
+        out.set(name, {
+            ...(meta.version ? { version: meta.version } : {}),
+            ...(meta.kind ? { kind: meta.kind } : {}),
+            ...(meta.source ? { source: meta.source } : {}),
+        });
     }
     return out;
 }
@@ -56,9 +69,7 @@ export function readDisabledPluginIds(runtime) {
     return readDisabledPluginIdsAt(pluginsDirOf(runtime));
 }
 export function writeDisabledPluginIds(runtime, ids) {
-    const dir = pluginsDirOf(runtime);
-    mkdirSync(dir, { recursive: true });
-    writeFileSync(disabledListPath(dir), `${JSON.stringify({ ids: [...ids].sort() }, null, 2)}\n`, "utf8");
+    writeDisabledPluginIdsAt(pluginsDirOf(runtime), ids);
 }
 /** Absolute install directory for a managed plugin, if it exists on disk. */
 export function resolveManagedPluginDir(runtime, entryId, moduleName) {
@@ -80,72 +91,48 @@ export function resolveManagedPluginDir(runtime, entryId, moduleName) {
     return undefined;
 }
 /**
- * Rewrite `{pluginsDir}/web/boot.json` from inventory client rows, omitting
- * soft-disabled ids so the next Host start does not load them.
+ * Rewrite `{pluginsDir}/web/boot.json` from inventory client rows.
+ * Delegates to shared {@link reconcileClientBootAt} (stable rev · atomic write).
  */
 export function reconcileManagedClientBoot(runtime) {
-    const root = pluginsDirOf(runtime);
-    const invPath = path.join(root, ".xrk-plugins.json");
-    const disabled = readDisabledPluginIdsAt(root);
-    const entries = [];
-    if (existsSync(invPath)) {
-        try {
-            const raw = JSON.parse(readFileSync(invPath, "utf8"));
-            for (const entry of Object.values(raw.packages ?? {})) {
-                const name = entry.name?.trim();
-                if (!name)
-                    continue;
-                if (entry.kind !== "client" && entry.kind !== "both")
-                    continue;
-                if (disabled.has(name))
-                    continue;
-                entries.push({
-                    id: name,
-                    url: `/plugins/${name}/client.js`,
-                    rev: typeof entry.version === "string" ? entry.version : "0",
-                    inject: entry.clientInject ?? [],
-                    ...(entry.clientImmediately ? { immediately: true } : {}),
-                });
-            }
-        }
-        catch {
-            /* leave entries empty → drop stale boot.json */
-        }
-    }
-    entries.sort((a, b) => a.id.localeCompare(b.id));
-    const webDir = path.join(root, "web");
-    mkdirSync(webDir, { recursive: true });
-    const bootPath = path.join(webDir, "boot.json");
-    if (entries.length === 0) {
-        if (existsSync(bootPath))
-            rmSync(bootPath, { force: true });
-        return;
-    }
-    writeFileSync(bootPath, `${JSON.stringify({ rev: `xrk-plugins-${Date.now()}`, entries }, null, 2)}\n`, "utf8");
+    reconcileClientBootAt(pluginsDirOf(runtime));
 }
-function isManagedProcessPlugin(plugin, userNames) {
+function isManagedProcessPlugin(plugin, userNames, runtime) {
     if (plugin.id.startsWith("mcp:"))
         return false;
     if (userNames.has(plugin.id))
         return true;
-    // Cordis community packages are user-installed; product-shell rows are not.
-    if (plugin.kind === "cordis")
-        return true;
+    // Only staged / inventory community cordis are managed — not product-shell
+    // cordis stubs (those must not gain Settings disable/delete).
+    if (plugin.kind === "cordis") {
+        return hasStagedCordisClient(runtime, plugin.id);
+    }
     return false;
 }
 /**
  * Host process plugins first (user-managed sorted ahead), then product-shell
- * boot entries. Cordis uses dsh-compat host.mjs apply or staged `client.js`.
+ * boot entries, then CLI inventory packages missing from live boot.
+ *
+ * Soft-disabled client packages are dropped from `web/boot.json` (and thus from
+ * Host `webPlugins`) so they do not load — but Settings must still list them
+ * from `.xrk-plugins.json`, otherwise there is no row to re-enable.
  */
 export function listFacePluginInventory(runtime) {
     const seen = new Set();
+    const liveIds = new Set();
     const entries = [];
-    const userNames = readUserPluginNames(runtime);
+    const packages = readUserPluginPackages(runtime);
+    const userNames = new Set(packages.keys());
     const disabled = readDisabledPluginIds(runtime);
-    const push = (entry) => {
+    const packageIndex = readManagedPackageIndexAt(pluginsDirOf(runtime));
+    const softDisabledOf = (...ids) => ids.some((id) => isPluginSoftDisabledAt(id, disabled, packageIndex));
+    const metaOf = (id) => packages.get(id) ?? {};
+    const push = (entry, options = {}) => {
         if (seen.has(entry.entryId))
             return;
         seen.add(entry.entryId);
+        if (options.live)
+            liveIds.add(entry.entryId);
         entries.push(entry);
     };
     for (const plugin of runtime.plugins ?? []) {
@@ -153,27 +140,68 @@ export function listFacePluginInventory(runtime) {
         const fiber = cordis
             ? resolveCordisFiberState(runtime, plugin.id)
             : { enabled: true, fiberPhase: "active" };
-        const managed = isManagedProcessPlugin(plugin, userNames);
-        const softDisabled = managed && disabled.has(plugin.id);
+        const managed = isManagedProcessPlugin(plugin, userNames, runtime);
+        const softDisabled = managed && softDisabledOf(plugin.id);
+        const meta = metaOf(plugin.id);
+        const kind = meta.kind ??
+            (plugin.id.startsWith("mcp:")
+                ? "mcp"
+                : cordis
+                    ? "cordis"
+                    : "process");
         push({
             entryId: plugin.id,
             moduleName: plugin.id,
             enabled: softDisabled ? false : fiber.enabled,
             fiberPhase: softDisabled ? null : fiber.fiberPhase,
             managed,
-        });
+            ...(meta.version ? { version: meta.version } : {}),
+            kind,
+            ...(meta.source ? { source: meta.source } : {}),
+        }, { live: true });
     }
     for (const web of runtime.webPlugins ?? []) {
         const managed = userNames.has(web.id) || userNames.has(web.moduleName ?? "");
-        const softDisabled = managed && disabled.has(web.id);
+        const softDisabled = managed && softDisabledOf(web.id, web.moduleName ?? "");
+        const meta = packages.get(web.id) ?? packages.get(web.moduleName ?? "") ?? {};
         push({
             entryId: web.id,
             moduleName: web.moduleName ?? web.id,
             enabled: softDisabled ? false : true,
             fiberPhase: softDisabled ? null : "active",
             managed,
+            ...(meta.version ? { version: meta.version } : {}),
+            kind: meta.kind ?? "client",
+            ...(meta.source ? { source: meta.source } : {}),
+        }, { live: true });
+    }
+    // Inventory is the durable source for managed packages. Client-only rows that
+    // were soft-disabled (or installed after this Host start) are not in webPlugins.
+    for (const [name, meta] of packages) {
+        if (seen.has(name))
+            continue;
+        const softDisabled = softDisabledOf(name);
+        push({
+            entryId: name,
+            moduleName: name,
+            enabled: !softDisabled,
+            fiberPhase: null,
+            managed: true,
+            ...(meta.version ? { version: meta.version } : {}),
+            kind: meta.kind ?? "client",
+            ...(meta.source ? { source: meta.source } : {}),
         });
     }
+    for (let i = 0; i < entries.length; i++) {
+        const entry = entries[i];
+        if (!entry.managed)
+            continue;
+        const live = liveIds.has(entry.entryId);
+        const needsRestart = (entry.enabled && !live) || (!entry.enabled && live);
+        if (!needsRestart)
+            continue;
+        entries[i] = { ...entry, needsRestart: true };
+    }
     entries.sort((a, b) => {
         if (a.managed !== b.managed)
             return a.managed ? -1 : 1;
@@ -203,12 +231,12 @@ export function setFacePluginInventoryEnabled(runtime, entryId, enabled) {
         return { ok: false, error: "plugin not found" };
     if (!entry.managed)
         return { ok: false, error: "builtin plugins cannot be toggled here" };
-    const disabled = readDisabledPluginIds(runtime);
-    if (enabled)
-        disabled.delete(entryId);
-    else
-        disabled.add(entryId);
-    writeDisabledPluginIds(runtime, disabled);
+    // Durable key = CLI inventory package name; aliases stripped on write.
+    setSoftDisabledAt(pluginsDirOf(runtime), {
+        enabled,
+        entryId: entry.entryId,
+        aliases: [entry.moduleName],
+    });
     reconcileManagedClientBoot(runtime);
     return { ok: true };
 }