agentplugged 1.0.6 → 1.3.0

package/dist/rolldown-runtime.js

@@ -12,7 +12,7 @@ var __esmMin = (fn, res, err) => () => {
 		throw err = [e], e;
 	}
 };
-var __commonJSMin = (cb, mod) => () => (mod || (cb((mod = { exports: {} }).exports, mod), cb = null), mod.exports);
+var __commonJSMin = (cb, mod) => () => (mod || (cb((mod = { exports: {} }).exports, mod, mod.exports), cb = null), mod.exports);
 var __exportAll = (all, no_symbols) => {
 	let target = {};
 	for (var name in all) __defProp(target, name, {

package/dist/webauthn-verify.js

@@ -1 +1,112 @@
-export { n as verifyWebAuthn } from "./webauthn-verify2.js";
+import { a as fromBase64url, l as utf8, r as sha256, s as toBase64url, ts as SIGNATURE_REASON } from "./hash.js";
+//#region ../../packages/crypto/dist/webauthn.js
+/** Relying party of every `presence` credential. */
+const WEBAUTHN_RP_ID = "agentplugged.local";
+const WEBAUTHN_ORIGIN = `https://${WEBAUTHN_RP_ID}`;
+//#endregion
+//#region ../../packages/crypto/dist/webauthn-verify.js
+/** COSE algorithm of each WebAuthn `alg`. */
+const COSE_ALG = {
+	"webauthn-es256": -7,
+	"webauthn-rs256": -257
+};
+/** Authenticator data flags (WebAuthn §6.1). */
+const FLAG_UV = 4;
+/** rpIdHash (32) + flags (1) + signCount (4). */
+const AUTHENTICATOR_DATA_MIN = 37;
+function equal(a, b) {
+	return a.length === b.length && a.every((byte, index) => byte === b[index]);
+}
+const fail = (reason) => ({
+	ok: false,
+	reason
+});
+/**
+* Checks a WebAuthn assertion over `challenge`: credential algorithm, client data (type,
+* origin, challenge), relying party, UV flag, signature counter, then the signature with
+* `@simplewebauthn/server`. Returns the new counter, to store with the credential.
+*/
+async function verifyWebAuthn(alg, sig, challenge, credential) {
+	const { decodeCredentialPublicKey, cose } = await import("./helpers2.js");
+	try {
+		if (decodeCredentialPublicKey(new Uint8Array(credential.publicKey)).get(cose.COSEKEYS.alg) !== COSE_ALG[alg]) return fail(SIGNATURE_REASON.algMismatch);
+	} catch {
+		return fail(SIGNATURE_REASON.algMismatch);
+	}
+	const clientDataBytes = fromBase64url(sig.clientDataJSON);
+	const authenticatorData = fromBase64url(sig.authenticatorData);
+	if (clientDataBytes === void 0 || authenticatorData === void 0) return fail(SIGNATURE_REASON.clientDataMismatch);
+	let clientData;
+	try {
+		clientData = JSON.parse(new TextDecoder("utf-8", { fatal: true }).decode(clientDataBytes));
+	} catch {
+		return fail(SIGNATURE_REASON.clientDataMismatch);
+	}
+	if (typeof clientData !== "object" || clientData === null || clientData.type !== "webauthn.get" || clientData.origin !== "https://agentplugged.local") return fail(SIGNATURE_REASON.clientDataMismatch);
+	const expectedChallenge = toBase64url(challenge);
+	if (clientData.challenge !== expectedChallenge) return fail(SIGNATURE_REASON.challengeMismatch);
+	if (authenticatorData.length < AUTHENTICATOR_DATA_MIN || !equal(authenticatorData.subarray(0, 32), sha256(utf8("agentplugged.local")))) return fail(SIGNATURE_REASON.clientDataMismatch);
+	if (((authenticatorData[32] ?? 0) & FLAG_UV) === 0) return fail(SIGNATURE_REASON.uvMissing);
+	const counter = new DataView(authenticatorData.buffer, authenticatorData.byteOffset, authenticatorData.byteLength).getUint32(33);
+	const stored = credential.counter ?? 0;
+	if ((stored > 0 || counter > 0) && counter <= stored) return fail(SIGNATURE_REASON.counterRegression);
+	const { verifyAuthenticationResponse } = await import("./esm.js");
+	try {
+		const result = await verifyAuthenticationResponse({
+			response: {
+				id: credential.id,
+				rawId: credential.id,
+				type: "public-key",
+				response: {
+					authenticatorData: sig.authenticatorData,
+					clientDataJSON: sig.clientDataJSON,
+					signature: sig.signature
+				},
+				clientExtensionResults: {}
+			},
+			expectedChallenge,
+			expectedOrigin: WEBAUTHN_ORIGIN,
+			expectedRPID: WEBAUTHN_RP_ID,
+			credential: {
+				id: credential.id,
+				publicKey: new Uint8Array(credential.publicKey),
+				counter: stored
+			},
+			requireUserVerification: true
+		});
+		return result.verified && result.authenticationInfo.userVerified ? {
+			ok: true,
+			newCounter: result.authenticationInfo.newCounter
+		} : fail(SIGNATURE_REASON.signatureMismatch);
+	} catch {
+		return fail(SIGNATURE_REASON.signatureMismatch);
+	}
+}
+/**
+* The credential a platform authenticator created, read from its attestation object (CBOR): the
+* attested credential data of its authenticator data. The attestation statement is not checked
+* (attestation `none`): the credential proves itself when it signs `human.presence_linked`.
+* Undefined when the object is unreadable, made for another relying party, without user
+* verification, or of an algorithm other than ES256 and RS256.
+*/
+async function parsePresenceAttestation(attestationObject) {
+	const { decodeAttestationObject, parseAuthenticatorData, decodeCredentialPublicKey, cose } = await import("./helpers2.js");
+	try {
+		const parsed = parseAuthenticatorData(decodeAttestationObject(new Uint8Array(attestationObject)).get("authData"));
+		if (!equal(parsed.rpIdHash, sha256(utf8("agentplugged.local"))) || !parsed.flags.uv) return void 0;
+		const { credentialID, credentialPublicKey } = parsed;
+		if (credentialID === void 0 || credentialPublicKey === void 0) return void 0;
+		const algId = decodeCredentialPublicKey(credentialPublicKey).get(cose.COSEKEYS.alg);
+		const alg = Object.keys(COSE_ALG).find((name) => COSE_ALG[name] === algId);
+		if (alg === void 0) return void 0;
+		return {
+			credential_id: toBase64url(credentialID),
+			cose_public_key: toBase64url(credentialPublicKey),
+			alg
+		};
+	} catch {
+		return;
+	}
+}
+//#endregion
+export { verifyWebAuthn as n, parsePresenceAttestation as t };

package/dist/webauthn-verify2.js

@@ -1,107 +1 @@
-import { Po as SIGNATURE_REASON, a as sha256, d as utf8, l as toBase64url, n as WEBAUTHN_RP_ID, s as fromBase64url, t as WEBAUTHN_ORIGIN } from "./webauthn.js";
-//#region ../../packages/crypto/dist/webauthn-verify.js
-/** COSE algorithm of each WebAuthn `alg`. */
-const COSE_ALG = {
-	"webauthn-es256": -7,
-	"webauthn-rs256": -257
-};
-/** Authenticator data flags (WebAuthn §6.1). */
-const FLAG_UV = 4;
-/** rpIdHash (32) + flags (1) + signCount (4). */
-const AUTHENTICATOR_DATA_MIN = 37;
-function equal(a, b) {
-	return a.length === b.length && a.every((byte, index) => byte === b[index]);
-}
-const fail = (reason) => ({
-	ok: false,
-	reason
-});
-/**
-* Checks a WebAuthn assertion over `challenge`: credential algorithm, client data (type,
-* origin, challenge), relying party, UV flag, signature counter, then the signature with
-* `@simplewebauthn/server`. Returns the new counter, to store with the credential.
-*/
-async function verifyWebAuthn(alg, sig, challenge, credential) {
-	const { decodeCredentialPublicKey, cose } = await import("./helpers2.js");
-	try {
-		if (decodeCredentialPublicKey(new Uint8Array(credential.publicKey)).get(cose.COSEKEYS.alg) !== COSE_ALG[alg]) return fail(SIGNATURE_REASON.algMismatch);
-	} catch {
-		return fail(SIGNATURE_REASON.algMismatch);
-	}
-	const clientDataBytes = fromBase64url(sig.clientDataJSON);
-	const authenticatorData = fromBase64url(sig.authenticatorData);
-	if (clientDataBytes === void 0 || authenticatorData === void 0) return fail(SIGNATURE_REASON.clientDataMismatch);
-	let clientData;
-	try {
-		clientData = JSON.parse(new TextDecoder("utf-8", { fatal: true }).decode(clientDataBytes));
-	} catch {
-		return fail(SIGNATURE_REASON.clientDataMismatch);
-	}
-	if (typeof clientData !== "object" || clientData === null || clientData.type !== "webauthn.get" || clientData.origin !== WEBAUTHN_ORIGIN) return fail(SIGNATURE_REASON.clientDataMismatch);
-	const expectedChallenge = toBase64url(challenge);
-	if (clientData.challenge !== expectedChallenge) return fail(SIGNATURE_REASON.challengeMismatch);
-	if (authenticatorData.length < AUTHENTICATOR_DATA_MIN || !equal(authenticatorData.subarray(0, 32), sha256(utf8("agentplugged.local")))) return fail(SIGNATURE_REASON.clientDataMismatch);
-	if (((authenticatorData[32] ?? 0) & FLAG_UV) === 0) return fail(SIGNATURE_REASON.uvMissing);
-	const counter = new DataView(authenticatorData.buffer, authenticatorData.byteOffset, authenticatorData.byteLength).getUint32(33);
-	const stored = credential.counter ?? 0;
-	if ((stored > 0 || counter > 0) && counter <= stored) return fail(SIGNATURE_REASON.counterRegression);
-	const { verifyAuthenticationResponse } = await import("./esm.js");
-	try {
-		const result = await verifyAuthenticationResponse({
-			response: {
-				id: credential.id,
-				rawId: credential.id,
-				type: "public-key",
-				response: {
-					authenticatorData: sig.authenticatorData,
-					clientDataJSON: sig.clientDataJSON,
-					signature: sig.signature
-				},
-				clientExtensionResults: {}
-			},
-			expectedChallenge,
-			expectedOrigin: WEBAUTHN_ORIGIN,
-			expectedRPID: WEBAUTHN_RP_ID,
-			credential: {
-				id: credential.id,
-				publicKey: new Uint8Array(credential.publicKey),
-				counter: stored
-			},
-			requireUserVerification: true
-		});
-		return result.verified && result.authenticationInfo.userVerified ? {
-			ok: true,
-			newCounter: result.authenticationInfo.newCounter
-		} : fail(SIGNATURE_REASON.signatureMismatch);
-	} catch {
-		return fail(SIGNATURE_REASON.signatureMismatch);
-	}
-}
-/**
-* The credential a platform authenticator created, read from its attestation object (CBOR): the
-* attested credential data of its authenticator data. The attestation statement is not checked
-* (attestation `none`): the credential proves itself when it signs `human.presence_linked`.
-* Undefined when the object is unreadable, made for another relying party, without user
-* verification, or of an algorithm other than ES256 and RS256.
-*/
-async function parsePresenceAttestation(attestationObject) {
-	const { decodeAttestationObject, parseAuthenticatorData, decodeCredentialPublicKey, cose } = await import("./helpers2.js");
-	try {
-		const parsed = parseAuthenticatorData(decodeAttestationObject(new Uint8Array(attestationObject)).get("authData"));
-		if (!equal(parsed.rpIdHash, sha256(utf8("agentplugged.local"))) || !parsed.flags.uv) return void 0;
-		const { credentialID, credentialPublicKey } = parsed;
-		if (credentialID === void 0 || credentialPublicKey === void 0) return void 0;
-		const algId = decodeCredentialPublicKey(credentialPublicKey).get(cose.COSEKEYS.alg);
-		const alg = Object.keys(COSE_ALG).find((name) => COSE_ALG[name] === algId);
-		if (alg === void 0) return void 0;
-		return {
-			credential_id: toBase64url(credentialID),
-			cose_public_key: toBase64url(credentialPublicKey),
-			alg
-		};
-	} catch {
-		return;
-	}
-}
-//#endregion
-export { verifyWebAuthn as n, parsePresenceAttestation as t };
+export { n as verifyWebAuthn } from "./webauthn-verify.js";

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "agentplugged",
-  "version": "1.0.6",
-  "description": "Install the AgentPlugged method in a repository and make its agents callable from Claude Code, Codex, Antigravity/Gemini CLI and Cursor.",
-  "releaseSummary": "The engine updates itself: your session moves to a newer version between two calls, with nothing to reconnect.",
+  "version": "1.3.0",
+  "description": "Install the AgentPlugged method in a repository and make its agents callable from Claude Code, Codex, Antigravity CLI and Cursor.",
+  "releaseSummary": "One circuit: pause the whole team, stop a story at its budget before the next tool call, and let Noah keep a note of each exchange.",
   "license": "FSL-1.1-MIT",
   "author": "Innovel Studio SASU",
   "repository": {
@@ -20,7 +20,7 @@
     "ai",
     "claude-code",
     "codex",
-    "gemini-cli",
+    "antigravity-cli",
     "cursor",
     "cli"
   ],
@@ -47,14 +47,14 @@
     "koffi": "~3.3.2"
   },
   "devDependencies": {
-    "@agentplugged/adapters-git": "1.0.6",
-    "@agentplugged/adapters-tools": "1.0.6",
-    "@agentplugged/core": "1.0.6",
-    "@agentplugged/crypto": "1.0.6",
-    "@agentplugged/i18n": "1.0.6",
-    "@agentplugged/mcp": "1.0.6",
+    "@agentplugged/adapters-git": "1.3.0",
+    "@agentplugged/adapters-tools": "1.3.0",
+    "@agentplugged/core": "1.3.0",
+    "@agentplugged/crypto": "1.3.0",
+    "@agentplugged/i18n": "1.3.0",
+    "@agentplugged/mcp": "1.3.0",
     "@agentplugged/method": "0.0.0",
-    "@agentplugged/protocol": "1.0.6",
+    "@agentplugged/protocol": "1.3.0",
     "@biomejs/biome": "~2.5.15",
     "@modelcontextprotocol/client": "~2.3.0",
     "@types/node": "^24.19.1",