@xrkseek/harness 0.3.11 → 0.4.0-rc.2

package/node_modules/@xrkseek/server-http/package.json

@@ -1,40 +1,42 @@
-{
-  "name": "@xrkseek/server-http",
-  "version": "0.1.0",
-  "type": "module",
-  "exports": {
-    ".": {
-      "types": "./dist/index.d.ts",
-      "import": "./dist/index.js",
-      "default": "./dist/index.js"
-    },
-    "./dsh-compat": {
-      "types": "./dist/dsh-compat/index.d.ts",
-      "import": "./dist/dsh-compat/index.js",
-      "default": "./dist/dsh-compat/index.js"
-    },
-    "./sidebar": {
-      "types": "./dist/sidebar/index.d.ts",
-      "import": "./dist/sidebar/index.js",
-      "default": "./dist/sidebar/index.js"
-    }
-  },
-  "files": [
-    "dist",
-    "README.md"
-  ],
-  "dependencies": {
-    "@xrkseek/core-agent": "workspace:*",
-    "@xrkseek/core-session": "workspace:*",
-    "@xrkseek/protocol": "workspace:*",
-    "@xrkseek/server-loader": "workspace:*",
-    "qrcode-generator": "1.4.4"
-  },
-  "license": "MIT",
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/xrkseek/XRK-harness.git",
-    "directory": "packages/server/http"
-  },
-  "private": true
-}
+{
+  "name": "@xrkseek/server-http",
+  "version": "0.1.0",
+  "type": "module",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "default": "./dist/index.js"
+    },
+    "./dsh-compat": {
+      "types": "./dist/dsh-compat/index.d.ts",
+      "import": "./dist/dsh-compat/index.js",
+      "default": "./dist/dsh-compat/index.js"
+    },
+    "./sidebar": {
+      "types": "./dist/sidebar/index.d.ts",
+      "import": "./dist/sidebar/index.js",
+      "default": "./dist/sidebar/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "dependencies": {
+    "@xrkseek/core-agent": "workspace:*",
+    "@xrkseek/core-session": "workspace:*",
+    "@xrkseek/policy": "workspace:*",
+    "@xrkseek/protocol": "workspace:*",
+    "@xrkseek/server-loader": "workspace:*",
+    "@xrkseek/xrk-home-paths": "workspace:*",
+    "qrcode-generator": "1.4.4"
+  },
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/xrkseek/XRK-harness.git",
+    "directory": "packages/server/http"
+  },
+  "private": true
+}

package/node_modules/@xrkseek/server-loader/dist/hooks.d.ts

@@ -0,0 +1,32 @@
+import type { ToolPipeline } from "@xrkseek/core-tools";
+import type { RegisteredPlugin } from "./types.js";
+/** In-process tool hook contribution (`kind: "hooks"`). */
+export type PluginToolHooks = NonNullable<RegisteredPlugin["hooks"]>;
+export interface AppliedPluginHook {
+    readonly pluginId: string;
+    readonly stage: "pre" | "post";
+}
+/**
+ * `kind: "hooks"` plugins contribute in-process pre/post tool interceptors.
+ * Presets call {@link wireCompositionHooks} on the existing ToolPipeline
+ * (same waterfall as policy `onPre` — no pipeline fork).
+ */
+export declare function isHooksPlugin(plugin: RegisteredPlugin): plugin is RegisteredPlugin & {
+    readonly kind: "hooks";
+};
+/** Inventory helper: which hook stages each plugin registered. */
+export declare function applyHooksPlugins(plugins: readonly RegisteredPlugin[]): {
+    readonly applied: readonly AppliedPluginHook[];
+};
+/**
+ * Register `kind: "hooks"` handlers onto an existing pipeline.
+ * Call after policy `onPre` (and other host gates) so declarative policy
+ * stays ahead of imperative hooks; call before builtin post trackers so
+ * replace/block see the raw tool result first.
+ */
+export declare function wireCompositionHooks(pipeline: ToolPipeline, options?: {
+    readonly plugins?: readonly RegisteredPlugin[];
+}): {
+    readonly applied: readonly AppliedPluginHook[];
+};
+//# sourceMappingURL=hooks.d.ts.map

package/node_modules/@xrkseek/server-loader/dist/hooks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hooks.d.ts","sourceRoot":"","sources":["../src/hooks.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAA2B,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACjF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAEnD,2DAA2D;AAC3D,MAAM,MAAM,eAAe,GAAG,WAAW,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC;AAErE,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,KAAK,GAAG,MAAM,CAAC;CAChC;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAC3B,MAAM,EAAE,gBAAgB,GACvB,MAAM,IAAI,gBAAgB,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAA;CAAE,CAEzD;AAED,kEAAkE;AAClE,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,SAAS,gBAAgB,EAAE,GACnC;IAAE,QAAQ,CAAC,OAAO,EAAE,SAAS,iBAAiB,EAAE,CAAA;CAAE,CAYpD;AA0BD;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,YAAY,EACtB,OAAO,GAAE;IAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,gBAAgB,EAAE,CAAA;CAAO,GAC/D;IAAE,QAAQ,CAAC,OAAO,EAAE,SAAS,iBAAiB,EAAE,CAAA;CAAE,CAcpD"}

package/node_modules/@xrkseek/server-loader/dist/hooks.js

@@ -0,0 +1,70 @@
+/**
+ * `kind: "hooks"` plugins contribute in-process pre/post tool interceptors.
+ * Presets call {@link wireCompositionHooks} on the existing ToolPipeline
+ * (same waterfall as policy `onPre` — no pipeline fork).
+ */
+export function isHooksPlugin(plugin) {
+    return plugin.kind === "hooks";
+}
+/** Inventory helper: which hook stages each plugin registered. */
+export function applyHooksPlugins(plugins) {
+    const applied = [];
+    for (const plugin of plugins) {
+        if (!isHooksPlugin(plugin))
+            continue;
+        for (const _ of plugin.hooks?.onPre ?? []) {
+            applied.push({ pluginId: plugin.id, stage: "pre" });
+        }
+        for (const _ of plugin.hooks?.onPost ?? []) {
+            applied.push({ pluginId: plugin.id, stage: "post" });
+        }
+    }
+    return { applied };
+}
+/**
+ * Fail-open: a throwing hook must not abort the tool waterfall.
+ * Explicit deny / ask / block / replace still win.
+ */
+function safePre(handler) {
+    return async (ctx) => {
+        try {
+            return await handler(ctx);
+        }
+        catch {
+            return { action: "continue", args: ctx.args };
+        }
+    };
+}
+function safePost(handler) {
+    return async (ctx) => {
+        try {
+            return await handler(ctx);
+        }
+        catch {
+            return { action: "accept" };
+        }
+    };
+}
+/**
+ * Register `kind: "hooks"` handlers onto an existing pipeline.
+ * Call after policy `onPre` (and other host gates) so declarative policy
+ * stays ahead of imperative hooks; call before builtin post trackers so
+ * replace/block see the raw tool result first.
+ */
+export function wireCompositionHooks(pipeline, options = {}) {
+    const applied = [];
+    for (const plugin of options.plugins ?? []) {
+        if (!isHooksPlugin(plugin))
+            continue;
+        for (const handler of plugin.hooks?.onPre ?? []) {
+            pipeline.onPre(safePre(handler));
+            applied.push({ pluginId: plugin.id, stage: "pre" });
+        }
+        for (const handler of plugin.hooks?.onPost ?? []) {
+            pipeline.onPost(safePost(handler));
+            applied.push({ pluginId: plugin.id, stage: "post" });
+        }
+    }
+    return { applied };
+}
+//# sourceMappingURL=hooks.js.map

package/node_modules/@xrkseek/server-loader/dist/hooks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hooks.js","sourceRoot":"","sources":["../src/hooks.ts"],"names":[],"mappings":"AAWA;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAC3B,MAAwB;IAExB,OAAO,MAAM,CAAC,IAAI,KAAK,OAAO,CAAC;AACjC,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,iBAAiB,CAC/B,OAAoC;IAEpC,MAAM,OAAO,GAAwB,EAAE,CAAC;IACxC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC;YAAE,SAAS;QACrC,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,KAAK,EAAE,KAAK,IAAI,EAAE,EAAE,CAAC;YAC1C,OAAO,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QACtD,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,KAAK,EAAE,MAAM,IAAI,EAAE,EAAE,CAAC;YAC3C,OAAO,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,CAAC;AACrB,CAAC;AAED;;;GAGG;AACH,SAAS,OAAO,CAAC,OAAmB;IAClC,OAAO,KAAK,EAAE,GAAG,EAAE,EAAE;QACnB,IAAI,CAAC;YACH,OAAO,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC;QAChD,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,OAAoB;IACpC,OAAO,KAAK,EAAE,GAAG,EAAE,EAAE;QACnB,IAAI,CAAC;YACH,OAAO,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;QAC9B,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAClC,QAAsB,EACtB,UAA8D,EAAE;IAEhE,MAAM,OAAO,GAAwB,EAAE,CAAC;IACxC,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC;QAC3C,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC;YAAE,SAAS;QACrC,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,KAAK,EAAE,KAAK,IAAI,EAAE,EAAE,CAAC;YAChD,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;YACjC,OAAO,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QACtD,CAAC;QACD,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,KAAK,EAAE,MAAM,IAAI,EAAE,EAAE,CAAC;YACjD,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;YACnC,OAAO,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,CAAC;AACrB,CAAC"}

package/node_modules/@xrkseek/server-loader/dist/index.d.ts

@@ -1,3 +1,4 @@
+import { type ReconcileProcessPluginsResult } from "./load-failures.js";
 import { type DiscoveryHit } from "./manifest.js";
 import type { RegisteredPlugin } from "./types.js";
 export type { RegisteredPlugin, PluginPromptSection, PluginCommand, PluginCommandContext, PluginCommandResult, PluginChannelDescriptor, HostWireContext, HostPublicHandlerFn, } from "./types.js";
@@ -9,15 +10,26 @@ export { applyToolsPlugins, isToolsPlugin, wireCompositionTools, type AppliedPlu
 export { applyPromptPlugins, isPromptPlugin, wireCompositionPrompts, type AppliedPluginPrompt, type ApplyPromptPluginsResult, type SkippedPluginPrompt, } from "./prompt.js";
 export { collectPluginCommands, isCommandsPlugin, } from "./commands.js";
 export { toPluginInventoryEntries, type PluginFiberPhase, type PluginInventoryEntry, } from "./inventory.js";
-export { collectPolicyRules, applyPolicyPlugins, isPolicyPlugin, wireCompositionPolicy, createPolicyEngineFromPlugins, type AppliedPluginPolicyRule, } from "./policy.js";
+export { collectPolicyRules, applyPolicyPlugins, isPolicyPlugin, wireCompositionPolicy, composeHostPolicyEngine, createPolicyEngineFromPlugins, type AppliedPluginPolicyRule, } from "./policy.js";
+export { applyHooksPlugins, isHooksPlugin, wireCompositionHooks, type AppliedPluginHook, type PluginToolHooks, } from "./hooks.js";
+export { createShellHookPre, defaultShellHookPaths, loadShellHookCommands, parsePreToolUseHooks, toolNameMatches, DEFAULT_SHELL_HOOK_TIMEOUT_MS, type CreateShellHookPreOptions, type ShellHookCommand, type ShellHookRunResult, type ShellHookRunner, } from "./shell-hooks.js";
+export { createLifecycleWebhookNotifier, defaultLifecycleWebhookPaths, loadLifecycleWebhooks, parseLifecycleWebhooks, DEFAULT_LIFECYCLE_WEBHOOK_TIMEOUT_MS, type CreateLifecycleWebhookNotifierOptions, type LifecycleWebhookEventName, type LifecycleWebhookFetch, type LifecycleWebhookNotifier, type LifecycleWebhookPayload, type LifecycleWebhookTarget, } from "./lifecycle-webhooks.js";
 export { collectChannelPlugins, collectChannelPluginRegistrations, isChannelPlugin, wireCompositionChannels, type AppliedPluginChannel, type PluginChannelRegistration, } from "./channel.js";
 export { applyLlmPlugins, collectLlmBrands, createProviderRegistryFromPlugins, isLlmPlugin, wireCompositionLlm, type AppliedPluginLlmBrand, type ApplyLlmPluginsResult, type SkippedPluginLlmBrand, } from "./llm.js";
 export { isHostPlugin, listHostPlugins } from "./host.js";
 export { atomicWriteText } from "./atomic-write.js";
-export { DISABLED_PLUGINS_FILE, MANAGED_PLUGINS_INVENTORY_FILE, canonicalizeDisabledPluginIdsAt, clearSoftDisabledIdsAt, disabledPluginsPath, isPluginSoftDisabledAt, lookupManagedPluginSourceAt, managedPluginsInventoryPath, readDisabledPluginIdsAt, readManagedPackageIndexAt, readManagedPluginPackagesAt, reconcileManagedProcessPlugins, setSoftDisabledAt, writeDisabledPluginIdsAt, type ManagedPackageIndex, type ManagedPluginPackageMeta, type SoftDisableReconcileLoader, } from "./managed-state.js";
+export { DISABLED_PLUGINS_FILE, MANAGED_PLUGINS_INVENTORY_FILE, canonicalizeDisabledPluginIdsAt, clearSoftDisabledIdsAt, disabledPluginsPath, isPluginSoftDisabledAt, lookupManagedPluginSourceAt, managedPluginsInventoryPath, readDisabledPluginIdsAt, readManagedPackageIndexAt, readManagedPluginPackagesAt, reconcileManagedProcessPlugins, setSoftDisabledAt, writeDisabledPluginIdsAt, RequiredPluginLoadError, throwIfRequiredPluginFailures, type ManagedPackageIndex, type ManagedPluginPackageMeta, type PluginLoadFailure, type ReconcileProcessPluginsResult, type SoftDisableReconcileLoader, } from "./managed-state.js";
+export type { PluginLoadFailure as ProcessPluginLoadFailure, } from "./load-failures.js";
+export { StartupError, formatStartupDiagnostic, entriesFromPluginFailures, isPendingServiceMessage, missingServicesFromMessage, startupErrorFromUnknown, type StartupEntryDiagnostic, type StartupFailureOutcome, } from "./startup-audit.js";
+export { checkPluginRegisterUnloadPair, type PluginRegisterUnloadPair, } from "./load-failures.js";
 export interface PluginLoader {
     register(plugin: RegisteredPlugin): void;
     unregister(id: string): Promise<void>;
+    /**
+     * Drop registration without calling `dispose` (Host defers MCP client
+     * teardown while a drain still holds mid-turn tool handles).
+     */
+    detach(id: string): RegisteredPlugin | undefined;
     list(): readonly RegisteredPlugin[];
     /**
      * Scan `dir` for plugin manifests (`xrk.plugin.json` or
@@ -28,9 +40,12 @@ export interface PluginLoader {
     load(hit: DiscoveryHit): Promise<RegisteredPlugin>;
     /**
      * Discover + load + register every plugin under `dir`.
-     * Skips ids already registered. Returns registered ids.
+     * Skips ids already registered and soft-disabled managed ids (same disk
+     * contract as {@link reconcileManagedProcessPlugins}). Optional load
+     * failures are isolated; `required: true` failures throw
+     * {@link RequiredPluginLoadError}. Returns `{ ids, failures }`.
      */
-    loadAll(dir: string): Promise<readonly string[]>;
+    loadAll(dir: string): Promise<ReconcileProcessPluginsResult>;
 }
 export declare function createPluginLoader(): PluginLoader;
 //# sourceMappingURL=index.d.ts.map

package/node_modules/@xrkseek/server-loader/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAiB,KAAK,YAAY,EAAE,MAAM,eAAe,CAAC;AACjE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAEnD,YAAY,EACV,gBAAgB,EAChB,mBAAmB,EACnB,aAAa,EACb,oBAAoB,EACpB,mBAAmB,EACnB,uBAAuB,EACvB,eAAe,EACf,mBAAmB,GACpB,MAAM,YAAY,CAAC;AACpB,YAAY,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAClE,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AACjF,OAAO,EACL,YAAY,EACZ,qBAAqB,EACrB,iBAAiB,EACjB,KAAK,eAAe,GACrB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,iBAAiB,EACjB,aAAa,EACb,oBAAoB,EACpB,KAAK,iBAAiB,EACtB,KAAK,uBAAuB,EAC5B,KAAK,iBAAiB,GACvB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,kBAAkB,EAClB,cAAc,EACd,sBAAsB,EACtB,KAAK,mBAAmB,EACxB,KAAK,wBAAwB,EAC7B,KAAK,mBAAmB,GACzB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,qBAAqB,EACrB,gBAAgB,GACjB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,wBAAwB,EACxB,KAAK,gBAAgB,EACrB,KAAK,oBAAoB,GAC1B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,kBAAkB,EAClB,kBAAkB,EAClB,cAAc,EACd,qBAAqB,EACrB,6BAA6B,EAC7B,KAAK,uBAAuB,GAC7B,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,qBAAqB,EACrB,iCAAiC,EACjC,eAAe,EACf,uBAAuB,EACvB,KAAK,oBAAoB,EACzB,KAAK,yBAAyB,GAC/B,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,eAAe,EACf,gBAAgB,EAChB,iCAAiC,EACjC,WAAW,EACX,kBAAkB,EAClB,KAAK,qBAAqB,EAC1B,KAAK,qBAAqB,EAC1B,KAAK,qBAAqB,GAC3B,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EACL,qBAAqB,EACrB,8BAA8B,EAC9B,+BAA+B,EAC/B,sBAAsB,EACtB,mBAAmB,EACnB,sBAAsB,EACtB,2BAA2B,EAC3B,2BAA2B,EAC3B,uBAAuB,EACvB,yBAAyB,EACzB,2BAA2B,EAC3B,8BAA8B,EAC9B,iBAAiB,EACjB,wBAAwB,EACxB,KAAK,mBAAmB,EACxB,KAAK,wBAAwB,EAC7B,KAAK,0BAA0B,GAChC,MAAM,oBAAoB,CAAC;AAE5B,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,MAAM,EAAE,gBAAgB,GAAG,IAAI,CAAC;IACzC,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,IAAI,SAAS,gBAAgB,EAAE,CAAC;IACpC;;;OAGG;IACH,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,YAAY,EAAE,CAAC,CAAC;IACxD,2EAA2E;IAC3E,IAAI,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACnD;;;OAGG;IACH,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,MAAM,EAAE,CAAC,CAAC;CAClD;AAED,wBAAgB,kBAAkB,IAAI,YAAY,CAyCjD"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAIL,KAAK,6BAA6B,EACnC,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAiB,KAAK,YAAY,EAAE,MAAM,eAAe,CAAC;AAMjE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAEnD,YAAY,EACV,gBAAgB,EAChB,mBAAmB,EACnB,aAAa,EACb,oBAAoB,EACpB,mBAAmB,EACnB,uBAAuB,EACvB,eAAe,EACf,mBAAmB,GACpB,MAAM,YAAY,CAAC;AACpB,YAAY,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAClE,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AACjF,OAAO,EACL,YAAY,EACZ,qBAAqB,EACrB,iBAAiB,EACjB,KAAK,eAAe,GACrB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,iBAAiB,EACjB,aAAa,EACb,oBAAoB,EACpB,KAAK,iBAAiB,EACtB,KAAK,uBAAuB,EAC5B,KAAK,iBAAiB,GACvB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,kBAAkB,EAClB,cAAc,EACd,sBAAsB,EACtB,KAAK,mBAAmB,EACxB,KAAK,wBAAwB,EAC7B,KAAK,mBAAmB,GACzB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,qBAAqB,EACrB,gBAAgB,GACjB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,wBAAwB,EACxB,KAAK,gBAAgB,EACrB,KAAK,oBAAoB,GAC1B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,kBAAkB,EAClB,kBAAkB,EAClB,cAAc,EACd,qBAAqB,EACrB,uBAAuB,EACvB,6BAA6B,EAC7B,KAAK,uBAAuB,GAC7B,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,iBAAiB,EACjB,aAAa,EACb,oBAAoB,EACpB,KAAK,iBAAiB,EACtB,KAAK,eAAe,GACrB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,kBAAkB,EAClB,qBAAqB,EACrB,qBAAqB,EACrB,oBAAoB,EACpB,eAAe,EACf,6BAA6B,EAC7B,KAAK,yBAAyB,EAC9B,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACvB,KAAK,eAAe,GACrB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,8BAA8B,EAC9B,4BAA4B,EAC5B,qBAAqB,EACrB,sBAAsB,EACtB,oCAAoC,EACpC,KAAK,qCAAqC,EAC1C,KAAK,yBAAyB,EAC9B,KAAK,qBAAqB,EAC1B,KAAK,wBAAwB,EAC7B,KAAK,uBAAuB,EAC5B,KAAK,sBAAsB,GAC5B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,qBAAqB,EACrB,iCAAiC,EACjC,eAAe,EACf,uBAAuB,EACvB,KAAK,oBAAoB,EACzB,KAAK,yBAAyB,GAC/B,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,eAAe,EACf,gBAAgB,EAChB,iCAAiC,EACjC,WAAW,EACX,kBAAkB,EAClB,KAAK,qBAAqB,EAC1B,KAAK,qBAAqB,EAC1B,KAAK,qBAAqB,GAC3B,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EACL,qBAAqB,EACrB,8BAA8B,EAC9B,+BAA+B,EAC/B,sBAAsB,EACtB,mBAAmB,EACnB,sBAAsB,EACtB,2BAA2B,EAC3B,2BAA2B,EAC3B,uBAAuB,EACvB,yBAAyB,EACzB,2BAA2B,EAC3B,8BAA8B,EAC9B,iBAAiB,EACjB,wBAAwB,EACxB,uBAAuB,EACvB,6BAA6B,EAC7B,KAAK,mBAAmB,EACxB,KAAK,wBAAwB,EAC7B,KAAK,iBAAiB,EACtB,KAAK,6BAA6B,EAClC,KAAK,0BAA0B,GAChC,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EACV,iBAAiB,IAAI,wBAAwB,GAC9C,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,YAAY,EACZ,uBAAuB,EACvB,yBAAyB,EACzB,uBAAuB,EACvB,0BAA0B,EAC1B,uBAAuB,EACvB,KAAK,sBAAsB,EAC3B,KAAK,qBAAqB,GAC3B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,6BAA6B,EAC7B,KAAK,wBAAwB,GAC9B,MAAM,oBAAoB,CAAC;AAE5B,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,MAAM,EAAE,gBAAgB,GAAG,IAAI,CAAC;IACzC,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC;;;OAGG;IACH,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,gBAAgB,GAAG,SAAS,CAAC;IACjD,IAAI,IAAI,SAAS,gBAAgB,EAAE,CAAC;IACpC;;;OAGG;IACH,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,YAAY,EAAE,CAAC,CAAC;IACxD,2EAA2E;IAC3E,IAAI,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACnD;;;;;;OAMG;IACH,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,6BAA6B,CAAC,CAAC;CAC9D;AAED,wBAAgB,kBAAkB,IAAI,YAAY,CAsEjD"}

package/node_modules/@xrkseek/server-loader/dist/index.js

@@ -1,5 +1,7 @@
 import { loadDiscoveryHit } from "./load.js";
+import { failureFromLoadError, throwIfRequiredPluginFailures, } from "./load-failures.js";
 import { scanPluginDir } from "./manifest.js";
+import { isPluginSoftDisabledAt, readDisabledPluginIdsAt, readManagedPackageIndexAt, } from "./managed-state.js";
 export { scanPluginDir } from "./manifest.js";
 export { loadPluginModule, loadDiscoveryHit, stubFromManifest } from "./load.js";
 export { PLUGIN_KINDS, RESERVED_PLUGIN_KINDS, isKnownPluginKind, } from "./kinds.js";
@@ -7,12 +9,17 @@ export { applyToolsPlugins, isToolsPlugin, wireCompositionTools, } from "./tools
 export { applyPromptPlugins, isPromptPlugin, wireCompositionPrompts, } from "./prompt.js";
 export { collectPluginCommands, isCommandsPlugin, } from "./commands.js";
 export { toPluginInventoryEntries, } from "./inventory.js";
-export { collectPolicyRules, applyPolicyPlugins, isPolicyPlugin, wireCompositionPolicy, createPolicyEngineFromPlugins, } from "./policy.js";
+export { collectPolicyRules, applyPolicyPlugins, isPolicyPlugin, wireCompositionPolicy, composeHostPolicyEngine, createPolicyEngineFromPlugins, } from "./policy.js";
+export { applyHooksPlugins, isHooksPlugin, wireCompositionHooks, } from "./hooks.js";
+export { createShellHookPre, defaultShellHookPaths, loadShellHookCommands, parsePreToolUseHooks, toolNameMatches, DEFAULT_SHELL_HOOK_TIMEOUT_MS, } from "./shell-hooks.js";
+export { createLifecycleWebhookNotifier, defaultLifecycleWebhookPaths, loadLifecycleWebhooks, parseLifecycleWebhooks, DEFAULT_LIFECYCLE_WEBHOOK_TIMEOUT_MS, } from "./lifecycle-webhooks.js";
 export { collectChannelPlugins, collectChannelPluginRegistrations, isChannelPlugin, wireCompositionChannels, } from "./channel.js";
 export { applyLlmPlugins, collectLlmBrands, createProviderRegistryFromPlugins, isLlmPlugin, wireCompositionLlm, } from "./llm.js";
 export { isHostPlugin, listHostPlugins } from "./host.js";
 export { atomicWriteText } from "./atomic-write.js";
-export { DISABLED_PLUGINS_FILE, MANAGED_PLUGINS_INVENTORY_FILE, canonicalizeDisabledPluginIdsAt, clearSoftDisabledIdsAt, disabledPluginsPath, isPluginSoftDisabledAt, lookupManagedPluginSourceAt, managedPluginsInventoryPath, readDisabledPluginIdsAt, readManagedPackageIndexAt, readManagedPluginPackagesAt, reconcileManagedProcessPlugins, setSoftDisabledAt, writeDisabledPluginIdsAt, } from "./managed-state.js";
+export { DISABLED_PLUGINS_FILE, MANAGED_PLUGINS_INVENTORY_FILE, canonicalizeDisabledPluginIdsAt, clearSoftDisabledIdsAt, disabledPluginsPath, isPluginSoftDisabledAt, lookupManagedPluginSourceAt, managedPluginsInventoryPath, readDisabledPluginIdsAt, readManagedPackageIndexAt, readManagedPluginPackagesAt, reconcileManagedProcessPlugins, setSoftDisabledAt, writeDisabledPluginIdsAt, RequiredPluginLoadError, throwIfRequiredPluginFailures, } from "./managed-state.js";
+export { StartupError, formatStartupDiagnostic, entriesFromPluginFailures, isPendingServiceMessage, missingServicesFromMessage, startupErrorFromUnknown, } from "./startup-audit.js";
+export { checkPluginRegisterUnloadPair, } from "./load-failures.js";
 export function createPluginLoader() {
     const plugins = new Map();
     return {
@@ -26,8 +33,21 @@ export function createPluginLoader() {
             const p = plugins.get(id);
             if (!p)
                 return;
-            await p.dispose?.();
+            // Always drop the registration so unload pairs with dispose even when
+            // dispose throws (resource leak vs stuck registry — prefer unload).
+            try {
+                await p.dispose?.();
+            }
+            finally {
+                plugins.delete(id);
+            }
+        },
+        detach(id) {
+            const p = plugins.get(id);
+            if (!p)
+                return undefined;
             plugins.delete(id);
+            return p;
         },
         list() {
             return [...plugins.values()];
@@ -44,16 +64,30 @@ export function createPluginLoader() {
             return plugin;
         },
         async loadAll(dir) {
-            const hits = await scanPluginDir(dir);
+            const root = dir;
+            const hits = await scanPluginDir(root);
+            const disabled = readDisabledPluginIdsAt(root);
+            const index = readManagedPackageIndexAt(root);
             const ids = [];
+            const failures = [];
             for (const hit of hits) {
                 if (plugins.has(hit.manifest.id))
                     continue;
-                const plugin = await loadDiscoveryHit(hit);
-                plugins.set(plugin.id, plugin);
-                ids.push(plugin.id);
+                // Soft-disabled managed packages (incl. skipLoad cordis stubs) must
+                // not reappear as live inventory ghosts via loadAll.
+                if (isPluginSoftDisabledAt(hit.manifest.id, disabled, index))
+                    continue;
+                try {
+                    const plugin = await loadDiscoveryHit(hit);
+                    plugins.set(plugin.id, plugin);
+                    ids.push(plugin.id);
+                }
+                catch (err) {
+                    failures.push(failureFromLoadError(hit.manifest.id, hit.manifest.required === true, err));
+                }
             }
-            return ids;
+            throwIfRequiredPluginFailures(failures);
+            return { ids, failures };
         },
     };
 }

package/node_modules/@xrkseek/server-loader/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAqB,MAAM,eAAe,CAAC;AAcjE,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AACjF,OAAO,EACL,YAAY,EACZ,qBAAqB,EACrB,iBAAiB,GAElB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,iBAAiB,EACjB,aAAa,EACb,oBAAoB,GAIrB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,kBAAkB,EAClB,cAAc,EACd,sBAAsB,GAIvB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,qBAAqB,EACrB,gBAAgB,GACjB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,wBAAwB,GAGzB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,kBAAkB,EAClB,kBAAkB,EAClB,cAAc,EACd,qBAAqB,EACrB,6BAA6B,GAE9B,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,qBAAqB,EACrB,iCAAiC,EACjC,eAAe,EACf,uBAAuB,GAGxB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,eAAe,EACf,gBAAgB,EAChB,iCAAiC,EACjC,WAAW,EACX,kBAAkB,GAInB,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EACL,qBAAqB,EACrB,8BAA8B,EAC9B,+BAA+B,EAC/B,sBAAsB,EACtB,mBAAmB,EACnB,sBAAsB,EACtB,2BAA2B,EAC3B,2BAA2B,EAC3B,uBAAuB,EACvB,yBAAyB,EACzB,2BAA2B,EAC3B,8BAA8B,EAC9B,iBAAiB,EACjB,wBAAwB,GAIzB,MAAM,oBAAoB,CAAC;AAoB5B,MAAM,UAAU,kBAAkB;IAChC,MAAM,OAAO,GAAG,IAAI,GAAG,EAA4B,CAAC;IACpD,OAAO;QACL,QAAQ,CAAC,MAAM;YACb,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;gBAC3B,MAAM,IAAI,KAAK,CAAC,8BAA8B,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;YAC7D,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QACjC,CAAC;QACD,KAAK,CAAC,UAAU,CAAC,EAAE;YACjB,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC1B,IAAI,CAAC,CAAC;gBAAE,OAAO;YACf,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;YACpB,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACrB,CAAC;QACD,IAAI;YACF,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QAC/B,CAAC;QACD,KAAK,CAAC,QAAQ,CAAC,GAAG;YAChB,OAAO,aAAa,CAAC,GAAG,CAAC,CAAC;QAC5B,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,GAAG;YACZ,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,GAAG,CAAC,CAAC;YAC3C,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;gBAC3B,MAAM,IAAI,KAAK,CAAC,8BAA8B,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;YAC7D,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;YAC/B,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,KAAK,CAAC,OAAO,CAAC,GAAG;YACf,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC;YACtC,MAAM,GAAG,GAAa,EAAE,CAAC;YACzB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;gBACvB,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAAE,SAAS;gBAC3C,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,GAAG,CAAC,CAAC;gBAC3C,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;gBAC/B,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACtB,CAAC;YACD,OAAO,GAAG,CAAC;QACb,CAAC;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EACL,oBAAoB,EACpB,6BAA6B,GAG9B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,aAAa,EAAqB,MAAM,eAAe,CAAC;AACjE,OAAO,EACL,sBAAsB,EACtB,uBAAuB,EACvB,yBAAyB,GAC1B,MAAM,oBAAoB,CAAC;AAc5B,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AACjF,OAAO,EACL,YAAY,EACZ,qBAAqB,EACrB,iBAAiB,GAElB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,iBAAiB,EACjB,aAAa,EACb,oBAAoB,GAIrB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,kBAAkB,EAClB,cAAc,EACd,sBAAsB,GAIvB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,qBAAqB,EACrB,gBAAgB,GACjB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,wBAAwB,GAGzB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,kBAAkB,EAClB,kBAAkB,EAClB,cAAc,EACd,qBAAqB,EACrB,uBAAuB,EACvB,6BAA6B,GAE9B,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,iBAAiB,EACjB,aAAa,EACb,oBAAoB,GAGrB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,kBAAkB,EAClB,qBAAqB,EACrB,qBAAqB,EACrB,oBAAoB,EACpB,eAAe,EACf,6BAA6B,GAK9B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,8BAA8B,EAC9B,4BAA4B,EAC5B,qBAAqB,EACrB,sBAAsB,EACtB,oCAAoC,GAOrC,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,qBAAqB,EACrB,iCAAiC,EACjC,eAAe,EACf,uBAAuB,GAGxB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,eAAe,EACf,gBAAgB,EAChB,iCAAiC,EACjC,WAAW,EACX,kBAAkB,GAInB,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EACL,qBAAqB,EACrB,8BAA8B,EAC9B,+BAA+B,EAC/B,sBAAsB,EACtB,mBAAmB,EACnB,sBAAsB,EACtB,2BAA2B,EAC3B,2BAA2B,EAC3B,uBAAuB,EACvB,yBAAyB,EACzB,2BAA2B,EAC3B,8BAA8B,EAC9B,iBAAiB,EACjB,wBAAwB,EACxB,uBAAuB,EACvB,6BAA6B,GAM9B,MAAM,oBAAoB,CAAC;AAI5B,OAAO,EACL,YAAY,EACZ,uBAAuB,EACvB,yBAAyB,EACzB,uBAAuB,EACvB,0BAA0B,EAC1B,uBAAuB,GAGxB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,6BAA6B,GAE9B,MAAM,oBAAoB,CAAC;AA4B5B,MAAM,UAAU,kBAAkB;IAChC,MAAM,OAAO,GAAG,IAAI,GAAG,EAA4B,CAAC;IACpD,OAAO;QACL,QAAQ,CAAC,MAAM;YACb,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;gBAC3B,MAAM,IAAI,KAAK,CAAC,8BAA8B,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;YAC7D,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QACjC,CAAC;QACD,KAAK,CAAC,UAAU,CAAC,EAAE;YACjB,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC1B,IAAI,CAAC,CAAC;gBAAE,OAAO;YACf,sEAAsE;YACtE,oEAAoE;YACpE,IAAI,CAAC;gBACH,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;YACtB,CAAC;oBAAS,CAAC;gBACT,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACrB,CAAC;QACH,CAAC;QACD,MAAM,CAAC,EAAE;YACP,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC1B,IAAI,CAAC,CAAC;gBAAE,OAAO,SAAS,CAAC;YACzB,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACnB,OAAO,CAAC,CAAC;QACX,CAAC;QACD,IAAI;YACF,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QAC/B,CAAC;QACD,KAAK,CAAC,QAAQ,CAAC,GAAG;YAChB,OAAO,aAAa,CAAC,GAAG,CAAC,CAAC;QAC5B,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,GAAG;YACZ,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,GAAG,CAAC,CAAC;YAC3C,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;gBAC3B,MAAM,IAAI,KAAK,CAAC,8BAA8B,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;YAC7D,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;YAC/B,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,KAAK,CAAC,OAAO,CAAC,GAAG;YACf,MAAM,IAAI,GAAG,GAAG,CAAC;YACjB,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC;YACvC,MAAM,QAAQ,GAAG,uBAAuB,CAAC,IAAI,CAAC,CAAC;YAC/C,MAAM,KAAK,GAAG,yBAAyB,CAAC,IAAI,CAAC,CAAC;YAC9C,MAAM,GAAG,GAAa,EAAE,CAAC;YACzB,MAAM,QAAQ,GAAwB,EAAE,CAAC;YACzC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;gBACvB,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAAE,SAAS;gBAC3C,oEAAoE;gBACpE,qDAAqD;gBACrD,IAAI,sBAAsB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC;oBAAE,SAAS;gBACvE,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,GAAG,CAAC,CAAC;oBAC3C,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;oBAC/B,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACtB,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,QAAQ,CAAC,IAAI,CACX,oBAAoB,CAClB,GAAG,CAAC,QAAQ,CAAC,EAAE,EACf,GAAG,CAAC,QAAQ,CAAC,QAAQ,KAAK,IAAI,EAC9B,GAAG,CACJ,CACF,CAAC;gBACJ,CAAC;YACH,CAAC;YACD,6BAA6B,CAAC,QAAQ,CAAC,CAAC;YACxC,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC;QAC3B,CAAC;KACF,CAAC;AACJ,CAAC"}

package/node_modules/@xrkseek/server-loader/dist/kinds.d.ts

@@ -19,7 +19,10 @@ export declare const PLUGIN_KINDS: {
     readonly host: "host";
 };
 export type KnownPluginKind = (typeof PLUGIN_KINDS)[keyof typeof PLUGIN_KINDS];
-/** Reserved / discovered but not auto-wired yet. */
-export declare const RESERVED_PLUGIN_KINDS: readonly ["channel", "policy", "llm", "cordis"];
+/**
+ * Kinds Host wires by name (`channel` / `policy` / `llm` on plugin refresh).
+ * `cordis` is listed only — never `import()` / `apply()`.
+ */
+export declare const RESERVED_PLUGIN_KINDS: readonly ["channel", "policy", "hooks", "llm", "cordis"];
 export declare function isKnownPluginKind(kind: string): kind is KnownPluginKind;
 //# sourceMappingURL=kinds.d.ts.map

package/node_modules/@xrkseek/server-loader/dist/kinds.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"kinds.d.ts","sourceRoot":"","sources":["../src/kinds.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,eAAO,MAAM,YAAY;IACvB,kDAAkD;;IAElD,qDAAqD;;IAErD,8EAA8E;;IAE9E;;;OAGG;;CAEK,CAAC;AAEX,MAAM,MAAM,eAAe,GACzB,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,OAAO,YAAY,CAAC,CAAC;AAEnD,oDAAoD;AACpD,eAAO,MAAM,qBAAqB,iDAMxB,CAAC;AAEX,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,IAAI,eAAe,CAEvE"}
+{"version":3,"file":"kinds.d.ts","sourceRoot":"","sources":["../src/kinds.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,eAAO,MAAM,YAAY;IACvB,kDAAkD;;IAElD,qDAAqD;;IAErD,8EAA8E;;IAE9E;;;OAGG;;CAEK,CAAC;AAEX,MAAM,MAAM,eAAe,GACzB,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,OAAO,YAAY,CAAC,CAAC;AAEnD;;;GAGG;AACH,eAAO,MAAM,qBAAqB,0DAQxB,CAAC;AAEX,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,IAAI,eAAe,CAEvE"}

package/node_modules/@xrkseek/server-loader/dist/kinds.js

@@ -18,10 +18,15 @@ export const PLUGIN_KINDS = {
      */
     host: "host",
 };
-/** Reserved / discovered but not auto-wired yet. */
+/**
+ * Kinds Host wires by name (`channel` / `policy` / `llm` on plugin refresh).
+ * `cordis` is listed only — never `import()` / `apply()`.
+ */
 export const RESERVED_PLUGIN_KINDS = [
     "channel",
     "policy",
+    /** In-process pre/post tool intercept → `wireCompositionHooks`. */
+    "hooks",
     "llm",
     /** DSH Cordis host package: listed, never `import()` / `apply()`. */
     "cordis",

package/node_modules/@xrkseek/server-loader/dist/kinds.js.map

@@ -1 +1 @@
-{"version":3,"file":"kinds.js","sourceRoot":"","sources":["../src/kinds.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,kDAAkD;IAClD,KAAK,EAAE,OAAO;IACd,qDAAqD;IACrD,MAAM,EAAE,QAAQ;IAChB,8EAA8E;IAC9E,QAAQ,EAAE,UAAU;IACpB;;;OAGG;IACH,IAAI,EAAE,MAAM;CACJ,CAAC;AAKX,oDAAoD;AACpD,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,SAAS;IACT,QAAQ;IACR,KAAK;IACL,qEAAqE;IACrE,QAAQ;CACA,CAAC;AAEX,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,OAAQ,MAAM,CAAC,MAAM,CAAC,YAAY,CAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AAClE,CAAC"}
+{"version":3,"file":"kinds.js","sourceRoot":"","sources":["../src/kinds.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,kDAAkD;IAClD,KAAK,EAAE,OAAO;IACd,qDAAqD;IACrD,MAAM,EAAE,QAAQ;IAChB,8EAA8E;IAC9E,QAAQ,EAAE,UAAU;IACpB;;;OAGG;IACH,IAAI,EAAE,MAAM;CACJ,CAAC;AAKX;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,SAAS;IACT,QAAQ;IACR,mEAAmE;IACnE,OAAO;IACP,KAAK;IACL,qEAAqE;IACrE,QAAQ;CACA,CAAC;AAEX,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,OAAQ,MAAM,CAAC,MAAM,CAAC,YAAY,CAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AAClE,CAAC"}

package/node_modules/@xrkseek/server-loader/dist/lifecycle-webhooks.d.ts

@@ -0,0 +1,63 @@
+export declare const DEFAULT_LIFECYCLE_WEBHOOK_TIMEOUT_MS = 10000;
+export declare const MAX_LIFECYCLE_WEBHOOK_TIMEOUT_MS = 60000;
+export declare const MIN_LIFECYCLE_WEBHOOK_TIMEOUT_MS = 1000;
+export type LifecycleWebhookEventName = "turn/start" | "turn/end" | "tool/post";
+export interface LifecycleWebhookTarget {
+    readonly name?: string;
+    readonly url: string;
+    readonly events: readonly LifecycleWebhookEventName[];
+    /** Env var holding HMAC secret (never inline in the JSON file). */
+    readonly secretEnv?: string;
+    /** Tool-name matcher for `tool/post` only. */
+    readonly matcher?: string;
+    readonly timeoutMs?: number;
+}
+export interface LifecycleWebhookPayload {
+    readonly hookEventName: LifecycleWebhookEventName;
+    readonly sessionId: string;
+    readonly workspaceRoot: string;
+    readonly deliveryId: string;
+    readonly timestamp: string;
+    readonly turnId?: string;
+    readonly toolName?: string;
+    readonly toolUseId?: string;
+    readonly isError?: boolean;
+    readonly skippedBody?: boolean;
+    readonly extra?: Record<string, unknown>;
+}
+export type LifecycleWebhookFetch = (input: string, init: RequestInit) => Promise<Response>;
+export interface LifecycleWebhookNotifier {
+    /** Fire-and-forget; never throws to callers. */
+    fire(payload: Omit<LifecycleWebhookPayload, "deliveryId" | "timestamp" | "sessionId" | "workspaceRoot"> & {
+        readonly sessionId?: string;
+        readonly workspaceRoot?: string;
+    }): void;
+    fireToolPost(args: {
+        readonly toolName: string;
+        readonly toolUseId: string;
+        readonly isError: boolean;
+        readonly skippedBody: boolean;
+    }): void;
+}
+export interface CreateLifecycleWebhookNotifierOptions {
+    readonly targets: readonly LifecycleWebhookTarget[];
+    readonly sessionId: string;
+    readonly workspaceRoot: string;
+    readonly env?: NodeJS.ProcessEnv;
+    readonly fetchImpl?: LifecycleWebhookFetch;
+    readonly now?: () => Date;
+}
+/**
+ * Parse `{ outbound: [...] }` or Hermes-shaped `{ hooks: { outbound: [...] } }`.
+ * Malformed entries are skipped (never throws).
+ */
+export declare function parseLifecycleWebhooks(raw: unknown): LifecycleWebhookTarget[];
+/** Read webhooks.json paths; missing / malformed files contribute nothing. */
+export declare function loadLifecycleWebhooks(paths: readonly string[]): LifecycleWebhookTarget[];
+/** Default paths: product home then workspace `.xrk/webhooks.json`. */
+export declare function defaultLifecycleWebhookPaths(workspaceRoot: string, productHome: string): string[];
+/**
+ * Notify-only POST notifier. `XRK_SAFE_MODE=1` → empty targets (no registration).
+ */
+export declare function createLifecycleWebhookNotifier(options: CreateLifecycleWebhookNotifierOptions): LifecycleWebhookNotifier;
+//# sourceMappingURL=lifecycle-webhooks.d.ts.map

package/node_modules/@xrkseek/server-loader/dist/lifecycle-webhooks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lifecycle-webhooks.d.ts","sourceRoot":"","sources":["../src/lifecycle-webhooks.ts"],"names":[],"mappings":"AAUA,eAAO,MAAM,oCAAoC,QAAS,CAAC;AAC3D,eAAO,MAAM,gCAAgC,QAAS,CAAC;AACvD,eAAO,MAAM,gCAAgC,OAAQ,CAAC;AAEtD,MAAM,MAAM,yBAAyB,GACjC,YAAY,GACZ,UAAU,GACV,WAAW,CAAC;AAEhB,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,SAAS,yBAAyB,EAAE,CAAC;IACtD,mEAAmE;IACnE,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,8CAA8C;IAC9C,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,aAAa,EAAE,yBAAyB,CAAC;IAClD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;IAC/B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC1C;AAED,MAAM,MAAM,qBAAqB,GAAG,CAClC,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,WAAW,KACd,OAAO,CAAC,QAAQ,CAAC,CAAC;AAEvB,MAAM,WAAW,wBAAwB;IACvC,gDAAgD;IAChD,IAAI,CACF,OAAO,EAAE,IAAI,CACX,uBAAuB,EACvB,YAAY,GAAG,WAAW,GAAG,WAAW,GAAG,eAAe,CAC3D,GAAG;QACF,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAC5B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;KACjC,GACA,IAAI,CAAC;IACR,YAAY,CAAC,IAAI,EAAE;QACjB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;QAC1B,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;KAC/B,GAAG,IAAI,CAAC;CACV;AAED,MAAM,WAAW,qCAAqC;IACpD,QAAQ,CAAC,OAAO,EAAE,SAAS,sBAAsB,EAAE,CAAC;IACpD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACjC,QAAQ,CAAC,SAAS,CAAC,EAAE,qBAAqB,CAAC;IAC3C,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAC3B;AAqBD;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,OAAO,GAAG,sBAAsB,EAAE,CAkD7E;AAED,8EAA8E;AAC9E,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,SAAS,MAAM,EAAE,GACvB,sBAAsB,EAAE,CAW1B;AAED,uEAAuE;AACvE,wBAAgB,4BAA4B,CAC1C,aAAa,EAAE,MAAM,EACrB,WAAW,EAAE,MAAM,GAClB,MAAM,EAAE,CAKV;AAMD;;GAEG;AACH,wBAAgB,8BAA8B,CAC5C,OAAO,EAAE,qCAAqC,GAC7C,wBAAwB,CAkF1B"}