botmux 3.1.1 → 3.2.0

package/dist/core/plugins/mcp/host.js

@@ -0,0 +1,126 @@
+import { createHash, randomBytes } from 'node:crypto';
+import { chmodSync, mkdtempSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { createServer } from 'node:net';
+import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
+import { PluginMcpGateway } from './gateway.js';
+import { acceptMcpGatewayHandshake, mcpGatewayAuthTokenPath } from './socket-auth.js';
+function escapeForRegex(value) {
+    return value.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+}
+/** Seatbelt deny for every Gateway socket directory owned by this OS user. */
+export function sessionMcpGatewayPathRegex(socketRoot, uid = process.getuid?.() ?? 0) {
+    const root = socketRoot.replace(/\/+$/, '');
+    return `^${escapeForRegex(root)}/bmcp-${uid}-[^/]+(?:/|$)`;
+}
+function gatewaySocketDir(sessionId, dataDir) {
+    const uid = process.getuid?.() ?? 0;
+    const sessionKey = createHash('sha256')
+        .update(dataDir)
+        .update('\0')
+        .update(sessionId)
+        .digest('hex')
+        .slice(0, 8);
+    // mkdtemp is atomic, avoids a predictable shared parent under /tmp, and
+    // keeps the resulting Unix socket below macOS's short sun_path limit.
+    return mkdtempSync(join(tmpdir(), `bmcp-${uid}-${sessionKey}-`));
+}
+/**
+ * Serve a session's credential-bearing Gateway in the trusted worker process.
+ * The CLI receives only a Unix socket capability and never reads the runtime
+ * descriptor snapshot or plugin credentials itself.
+ */
+export async function startSessionMcpGatewayHost(opts) {
+    const socketDir = gatewaySocketDir(opts.sessionId, opts.dataDir);
+    const socketPath = join(socketDir, 'g.sock');
+    const authToken = randomBytes(32).toString('base64url');
+    chmodSync(socketDir, 0o700);
+    writeFileSync(mcpGatewayAuthTokenPath(socketPath), `${authToken}\n`, { mode: 0o600, flag: 'wx' });
+    const sockets = new Set();
+    const connectionClosers = new Set();
+    let closing;
+    const reportError = (error) => {
+        opts.onError?.(error instanceof Error ? error : new Error(String(error)));
+    };
+    const server = createServer((socket) => {
+        sockets.add(socket);
+        socket.setNoDelay(true);
+        socket.once('close', () => {
+            sockets.delete(socket);
+        });
+        void (async () => {
+            if (!await acceptMcpGatewayHandshake(socket, authToken))
+                return;
+            const gateway = new PluginMcpGateway(undefined, {
+                ...process.env,
+                SESSION_DATA_DIR: opts.dataDir,
+                BOTMUX_SESSION_ID: opts.sessionId,
+            });
+            let gatewayClose;
+            const closeGateway = () => {
+                gatewayClose ??= gateway.close()
+                    .catch(reportError)
+                    .finally(() => connectionClosers.delete(closeGateway));
+                return gatewayClose;
+            };
+            connectionClosers.add(closeGateway);
+            socket.once('close', () => { void closeGateway(); });
+            await gateway.connect(new StdioServerTransport(socket, socket));
+            socket.resume();
+        })().catch((error) => {
+            reportError(error);
+            socket.destroy();
+        });
+    });
+    await new Promise((resolve, reject) => {
+        const onInitialError = (error) => {
+            server.off('listening', onListening);
+            reject(error);
+        };
+        const onListening = () => {
+            server.off('error', onInitialError);
+            resolve();
+        };
+        server.once('error', onInitialError);
+        server.once('listening', onListening);
+        server.listen(socketPath);
+    }).catch((error) => {
+        rmSync(socketDir, { recursive: true, force: true });
+        throw error;
+    });
+    server.on('error', reportError);
+    try {
+        chmodSync(socketPath, 0o600);
+    }
+    catch (error) {
+        server.close();
+        rmSync(socketDir, { recursive: true, force: true });
+        throw error;
+    }
+    return {
+        socketPath,
+        socketDir,
+        close() {
+            closing ??= (async () => {
+                for (const socket of sockets)
+                    socket.destroy();
+                // Revoke the filesystem capability before the first await. Worker
+                // signal handlers call process.exit(), so async-only cleanup would
+                // otherwise leave a stale socket directory behind.
+                rmSync(socketDir, { recursive: true, force: true });
+                const serverClosed = new Promise((resolve) => {
+                    if (!server.listening) {
+                        resolve();
+                        return;
+                    }
+                    server.close(() => resolve());
+                });
+                await Promise.allSettled([...connectionClosers].map(close => close()));
+                await serverClosed;
+            })();
+            return closing;
+        },
+    };
+}
+//# sourceMappingURL=host.js.map

package/dist/core/plugins/mcp/host.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host.js","sourceRoot":"","sources":["../../../../src/core/plugins/mcp/host.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACxE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,YAAY,EAAyC,MAAM,UAAU,CAAC;AAC/E,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EAAE,yBAAyB,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAQtF,SAAS,cAAc,CAAC,KAAa;IACnC,OAAO,KAAK,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;AACtD,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,0BAA0B,CACxC,UAAkB,EAClB,MAAc,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC;IAErC,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC5C,OAAO,IAAI,cAAc,CAAC,IAAI,CAAC,SAAS,GAAG,eAAe,CAAC;AAC7D,CAAC;AAED,SAAS,gBAAgB,CAAC,SAAiB,EAAE,OAAe;IAC1D,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,CAAC;IACpC,MAAM,UAAU,GAAG,UAAU,CAAC,QAAQ,CAAC;SACpC,MAAM,CAAC,OAAO,CAAC;SACf,MAAM,CAAC,IAAI,CAAC;SACZ,MAAM,CAAC,SAAS,CAAC;SACjB,MAAM,CAAC,KAAK,CAAC;SACb,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACf,wEAAwE;IACxE,sEAAsE;IACtE,OAAO,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,QAAQ,GAAG,IAAI,UAAU,GAAG,CAAC,CAAC,CAAC;AACnE,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,IAIhD;IACC,MAAM,SAAS,GAAG,gBAAgB,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IACjE,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAC7C,MAAM,SAAS,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACxD,SAAS,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAC5B,aAAa,CAAC,uBAAuB,CAAC,UAAU,CAAC,EAAE,GAAG,SAAS,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAElG,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAuB,CAAC;IACzD,IAAI,OAAkC,CAAC;IACvC,MAAM,WAAW,GAAG,CAAC,KAAc,EAAQ,EAAE;QAC3C,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC5E,CAAC,CAAC;IAEF,MAAM,MAAM,GAAc,YAAY,CAAC,CAAC,MAAM,EAAE,EAAE;QAChD,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACpB,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACxB,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;YACxB,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACzB,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,IAAI,CAAC,MAAM,yBAAyB,CAAC,MAAM,EAAE,SAAS,CAAC;gBAAE,OAAO;YAChE,MAAM,OAAO,GAAG,IAAI,gBAAgB,CAAC,SAAS,EAAE;gBAC9C,GAAG,OAAO,CAAC,GAAG;gBACd,gBAAgB,EAAE,IAAI,CAAC,OAAO;gBAC9B,iBAAiB,EAAE,IAAI,CAAC,SAAS;aAClC,CAAC,CAAC;YACH,IAAI,YAAuC,CAAC;YAC5C,MAAM,YAAY,GAAG,GAAkB,EAAE;gBACvC,YAAY,KAAK,OAAO,CAAC,KAAK,EAAE;qBAC7B,KAAK,CAAC,WAAW,CAAC;qBAClB,OAAO,CAAC,GAAG,EAAE,CAAC,iBAAiB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC;gBACzD,OAAO,YAAY,CAAC;YACtB,CAAC,CAAC;YACF,iBAAiB,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YACpC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,KAAK,YAAY,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YACrD,MAAM,OAAO,CAAC,OAAO,CAAC,IAAI,oBAAoB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;YAChE,MAAM,CAAC,MAAM,EAAE,CAAC;QAClB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;YACnB,WAAW,CAAC,KAAK,CAAC,CAAC;YACnB,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,cAAc,GAAG,CAAC,KAAY,EAAE,EAAE;YACtC,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;YACrC,MAAM,CAAC,KAAK,CAAC,CAAC;QAChB,CAAC,CAAC;QACF,MAAM,WAAW,GAAG,GAAG,EAAE;YACvB,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;YACpC,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;QACrC,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;QACtC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAC5B,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;QACjB,MAAM,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACpD,MAAM,KAAK,CAAC;IACd,CAAC,CAAC,CAAC;IACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAChC,IAAI,CAAC;QACH,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IAC/B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACpD,MAAM,KAAK,CAAC;IACd,CAAC;IAED,OAAO;QACL,UAAU;QACV,SAAS;QACT,KAAK;YACH,OAAO,KAAK,CAAC,KAAK,IAAI,EAAE;gBACtB,KAAK,MAAM,MAAM,IAAI,OAAO;oBAAE,MAAM,CAAC,OAAO,EAAE,CAAC;gBAC/C,kEAAkE;gBAClE,mEAAmE;gBACnE,mDAAmD;gBACnD,MAAM,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBACpD,MAAM,YAAY,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;oBACjD,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;wBACtB,OAAO,EAAE,CAAC;wBACV,OAAO;oBACT,CAAC;oBACD,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;gBAChC,CAAC,CAAC,CAAC;gBACH,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC,GAAG,iBAAiB,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;gBACvE,MAAM,YAAY,CAAC;YACrB,CAAC,CAAC,EAAE,CAAC;YACL,OAAO,OAAO,CAAC;QACjB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/core/plugins/mcp/private-store.d.ts

@@ -0,0 +1,15 @@
+import type { PluginMcpContribution, PluginMcpServer } from '../types.js';
+export declare const PLUGIN_MCP_PRIVATE_REF = "private/mcp.json";
+export interface PluginMcpPrivateSnapshot {
+    existed: boolean;
+    content?: Buffer;
+}
+export declare function isPluginMcpServer(value: unknown): value is PluginMcpServer;
+export declare function isPluginMcpContribution(value: unknown): value is PluginMcpContribution;
+export declare function publicPluginMcpContribution(server: PluginMcpServer): PluginMcpContribution;
+export declare function capturePluginMcpPrivateSnapshot(pluginId: string): PluginMcpPrivateSnapshot;
+export declare function restorePluginMcpPrivateSnapshot(pluginId: string, snapshot: PluginMcpPrivateSnapshot): void;
+export declare function writePluginMcpDescriptor(pluginId: string, server: PluginMcpServer): PluginMcpContribution;
+export declare function removePluginMcpDescriptor(pluginId: string): void;
+export declare function readPluginMcpDescriptor(pluginId: string, contribution: PluginMcpContribution): PluginMcpServer;
+//# sourceMappingURL=private-store.d.ts.map

package/dist/core/plugins/mcp/private-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"private-store.d.ts","sourceRoot":"","sources":["../../../../src/core/plugins/mcp/private-store.ts"],"names":[],"mappings":"AAoBA,OAAO,KAAK,EACV,qBAAqB,EACrB,eAAe,EAChB,MAAM,aAAa,CAAC;AAErB,eAAO,MAAM,sBAAsB,qBAAqB,CAAC;AAQzD,MAAM,WAAW,wBAAwB;IACvC,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AASD,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,eAAe,CAqB1E;AAED,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,qBAAqB,CAOtF;AAED,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,eAAe,GAAG,qBAAqB,CAM1F;AA6BD,wBAAgB,+BAA+B,CAAC,QAAQ,EAAE,MAAM,GAAG,wBAAwB,CAK1F;AAED,wBAAgB,+BAA+B,CAC7C,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,wBAAwB,GACjC,IAAI,CAcN;AAED,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,eAAe,GACtB,qBAAqB,CAavB;AAED,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAShE;AAED,wBAAgB,uBAAuB,CACrC,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,qBAAqB,GAClC,eAAe,CA4BjB"}

package/dist/core/plugins/mcp/private-store.js

@@ -0,0 +1,162 @@
+import { chmodSync, closeSync, constants, existsSync, fstatSync, lstatSync, mkdirSync, openSync, readFileSync, readdirSync, rmSync, } from 'node:fs';
+import { atomicWriteFileSync } from '../../../utils/atomic-write.js';
+import { assertValidPluginId } from '../ids.js';
+import { pluginHome, pluginMcpPrivatePath, pluginPrivateDir, } from '../paths.js';
+export const PLUGIN_MCP_PRIVATE_REF = 'private/mcp.json';
+function isStringRecord(value) {
+    return !!value
+        && typeof value === 'object'
+        && !Array.isArray(value)
+        && Object.values(value).every(item => typeof item === 'string');
+}
+export function isPluginMcpServer(value) {
+    if (!value || typeof value !== 'object' || Array.isArray(value))
+        return false;
+    const server = value;
+    if (typeof server.name !== 'string' || !server.name)
+        return false;
+    if (server.transport === 'stdio') {
+        return Array.isArray(server.command)
+            && server.command.length > 0
+            && server.command.every(part => typeof part === 'string' && part.length > 0)
+            && (server.env === undefined || isStringRecord(server.env));
+    }
+    if (server.transport === 'streamable-http') {
+        if (typeof server.url !== 'string' || !server.url)
+            return false;
+        try {
+            const protocol = new URL(server.url).protocol;
+            if (protocol !== 'http:' && protocol !== 'https:')
+                return false;
+        }
+        catch {
+            return false;
+        }
+        return server.headers === undefined || isStringRecord(server.headers);
+    }
+    return false;
+}
+export function isPluginMcpContribution(value) {
+    if (!value || typeof value !== 'object' || Array.isArray(value))
+        return false;
+    const entry = value;
+    return typeof entry.name === 'string'
+        && !!entry.name
+        && (entry.transport === 'stdio' || entry.transport === 'streamable-http')
+        && entry.privateRef === PLUGIN_MCP_PRIVATE_REF;
+}
+export function publicPluginMcpContribution(server) {
+    return {
+        name: server.name,
+        transport: server.transport,
+        privateRef: PLUGIN_MCP_PRIVATE_REF,
+    };
+}
+function assertPrivateStorageLayout(pluginId, create) {
+    const id = assertValidPluginId(pluginId);
+    const home = pluginHome(id);
+    if (existsSync(home)) {
+        const stat = lstatSync(home);
+        if (!stat.isDirectory() || stat.isSymbolicLink())
+            throw new Error(`unsafe_plugin_home:${id}`);
+    }
+    else if (create) {
+        mkdirSync(home, { recursive: true, mode: 0o700 });
+    }
+    const dir = pluginPrivateDir(id);
+    if (existsSync(dir)) {
+        const stat = lstatSync(dir);
+        if (!stat.isDirectory() || stat.isSymbolicLink())
+            throw new Error(`unsafe_plugin_private_dir:${id}`);
+        chmodSync(dir, 0o700);
+    }
+    else if (create) {
+        mkdirSync(dir, { recursive: true, mode: 0o700 });
+        chmodSync(dir, 0o700);
+    }
+    const file = pluginMcpPrivatePath(id);
+    if (existsSync(file)) {
+        const stat = lstatSync(file);
+        if (!stat.isFile() || stat.isSymbolicLink())
+            throw new Error(`unsafe_plugin_mcp_private_file:${id}`);
+    }
+}
+export function capturePluginMcpPrivateSnapshot(pluginId) {
+    assertPrivateStorageLayout(pluginId, false);
+    const file = pluginMcpPrivatePath(pluginId);
+    if (!existsSync(file))
+        return { existed: false };
+    return { existed: true, content: readFileSync(file) };
+}
+export function restorePluginMcpPrivateSnapshot(pluginId, snapshot) {
+    const file = pluginMcpPrivatePath(pluginId);
+    if (snapshot.existed) {
+        assertPrivateStorageLayout(pluginId, true);
+        atomicWriteFileSync(file, snapshot.content ?? Buffer.alloc(0), { mode: 0o600 });
+        return;
+    }
+    rmSync(file, { force: true });
+    const dir = pluginPrivateDir(pluginId);
+    try {
+        if (readdirSync(dir).length === 0)
+            rmSync(dir, { recursive: true, force: true });
+    }
+    catch {
+        // The directory may not have existed before the attempted migration.
+    }
+}
+export function writePluginMcpDescriptor(pluginId, server) {
+    const id = assertValidPluginId(pluginId);
+    if (!isPluginMcpServer(server) || server.name !== id) {
+        throw new Error(`invalid_plugin_mcp_private_descriptor:${id}`);
+    }
+    assertPrivateStorageLayout(id, true);
+    const value = { schemaVersion: 1, pluginId: id, server };
+    atomicWriteFileSync(pluginMcpPrivatePath(id), `${JSON.stringify(value, null, 2)}\n`, { mode: 0o600 });
+    return publicPluginMcpContribution(server);
+}
+export function removePluginMcpDescriptor(pluginId) {
+    assertPrivateStorageLayout(pluginId, false);
+    rmSync(pluginMcpPrivatePath(pluginId), { force: true });
+    const dir = pluginPrivateDir(pluginId);
+    try {
+        if (readdirSync(dir).length === 0)
+            rmSync(dir, { recursive: true, force: true });
+    }
+    catch {
+        // No private directory is a valid state for a plugin without MCP.
+    }
+}
+export function readPluginMcpDescriptor(pluginId, contribution) {
+    const id = assertValidPluginId(pluginId);
+    if (!isPluginMcpContribution(contribution)) {
+        throw new Error(`invalid_plugin_mcp_private_ref:${id}`);
+    }
+    assertPrivateStorageLayout(id, false);
+    const file = pluginMcpPrivatePath(id);
+    let fd;
+    try {
+        fd = openSync(file, constants.O_RDONLY | constants.O_NOFOLLOW);
+        if (!fstatSync(fd).isFile())
+            throw new Error(`invalid_plugin_mcp_private_file:${id}`);
+        const parsed = JSON.parse(readFileSync(fd, 'utf8'));
+        if (parsed.schemaVersion !== 1
+            || parsed.pluginId !== id
+            || !isPluginMcpServer(parsed.server)
+            || parsed.server.name !== contribution.name
+            || parsed.server.transport !== contribution.transport)
+            throw new Error(`invalid_plugin_mcp_private_descriptor:${id}`);
+        return parsed.server;
+    }
+    catch (error) {
+        if (error.code === 'ENOENT') {
+            throw new Error(`plugin_mcp_private_descriptor_missing:${id}`);
+        }
+        throw error;
+    }
+    finally {
+        if (fd !== undefined)
+            closeSync(fd);
+    }
+}
+//# sourceMappingURL=private-store.js.map

package/dist/core/plugins/mcp/private-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"private-store.js","sourceRoot":"","sources":["../../../../src/core/plugins/mcp/private-store.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,SAAS,EACT,SAAS,EACT,SAAS,EACT,UAAU,EACV,SAAS,EACT,SAAS,EACT,SAAS,EACT,QAAQ,EACR,YAAY,EACZ,WAAW,EACX,MAAM,GACP,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AACrE,OAAO,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAChD,OAAO,EACL,UAAU,EACV,oBAAoB,EACpB,gBAAgB,GACjB,MAAM,aAAa,CAAC;AAMrB,MAAM,CAAC,MAAM,sBAAsB,GAAG,kBAAkB,CAAC;AAazD,SAAS,cAAc,CAAC,KAAc;IACpC,OAAO,CAAC,CAAC,KAAK;WACT,OAAO,KAAK,KAAK,QAAQ;WACzB,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;WACrB,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC;AACpE,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAc;IAC9C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9E,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IAClE,IAAI,MAAM,CAAC,SAAS,KAAK,OAAO,EAAE,CAAC;QACjC,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC;eAC/B,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;eACzB,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;eACzE,CAAC,MAAM,CAAC,GAAG,KAAK,SAAS,IAAI,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IAChE,CAAC;IACD,IAAI,MAAM,CAAC,SAAS,KAAK,iBAAiB,EAAE,CAAC;QAC3C,IAAI,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,GAAG;YAAE,OAAO,KAAK,CAAC;QAChE,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC;YAC9C,IAAI,QAAQ,KAAK,OAAO,IAAI,QAAQ,KAAK,QAAQ;gBAAE,OAAO,KAAK,CAAC;QAClE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,MAAM,CAAC,OAAO,KAAK,SAAS,IAAI,cAAc,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,KAAc;IACpD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9E,MAAM,KAAK,GAAG,KAAgC,CAAC;IAC/C,OAAO,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;WAChC,CAAC,CAAC,KAAK,CAAC,IAAI;WACZ,CAAC,KAAK,CAAC,SAAS,KAAK,OAAO,IAAI,KAAK,CAAC,SAAS,KAAK,iBAAiB,CAAC;WACtE,KAAK,CAAC,UAAU,KAAK,sBAAsB,CAAC;AACnD,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,MAAuB;IACjE,OAAO;QACL,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,UAAU,EAAE,sBAAsB;KACnC,CAAC;AACJ,CAAC;AAED,SAAS,0BAA0B,CAAC,QAAgB,EAAE,MAAe;IACnE,MAAM,EAAE,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,UAAU,CAAC,EAAE,CAAC,CAAC;IAC5B,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,EAAE,EAAE,CAAC,CAAC;IAChG,CAAC;SAAM,IAAI,MAAM,EAAE,CAAC;QAClB,SAAS,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACpD,CAAC;IAED,MAAM,GAAG,GAAG,gBAAgB,CAAC,EAAE,CAAC,CAAC;IACjC,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACpB,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,EAAE,EAAE,CAAC,CAAC;QACrG,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACxB,CAAC;SAAM,IAAI,MAAM,EAAE,CAAC;QAClB,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACjD,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACxB,CAAC;IAED,MAAM,IAAI,GAAG,oBAAoB,CAAC,EAAE,CAAC,CAAC;IACtC,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,EAAE,EAAE,CAAC,CAAC;IACvG,CAAC;AACH,CAAC;AAED,MAAM,UAAU,+BAA+B,CAAC,QAAgB;IAC9D,0BAA0B,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC5C,MAAM,IAAI,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAC;IAC5C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACjD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,+BAA+B,CAC7C,QAAgB,EAChB,QAAkC;IAElC,MAAM,IAAI,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAC;IAC5C,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;QACrB,0BAA0B,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC3C,mBAAmB,CAAC,IAAI,EAAE,QAAQ,CAAC,OAAO,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAChF,OAAO;IACT,CAAC;IACD,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9B,MAAM,GAAG,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IACvC,IAAI,CAAC;QACH,IAAI,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACnF,CAAC;IAAC,MAAM,CAAC;QACP,qEAAqE;IACvE,CAAC;AACH,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,QAAgB,EAChB,MAAuB;IAEvB,MAAM,EAAE,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC;IACzC,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,KAAK,EAAE,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CAAC,yCAAyC,EAAE,EAAE,CAAC,CAAC;IACjE,CAAC;IACD,0BAA0B,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IACrC,MAAM,KAAK,GAAyB,EAAE,aAAa,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC;IAC/E,mBAAmB,CACjB,oBAAoB,CAAC,EAAE,CAAC,EACxB,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EACrC,EAAE,IAAI,EAAE,KAAK,EAAE,CAChB,CAAC;IACF,OAAO,2BAA2B,CAAC,MAAM,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,QAAgB;IACxD,0BAA0B,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC5C,MAAM,CAAC,oBAAoB,CAAC,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACxD,MAAM,GAAG,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IACvC,IAAI,CAAC;QACH,IAAI,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACnF,CAAC;IAAC,MAAM,CAAC;QACP,kEAAkE;IACpE,CAAC;AACH,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,QAAgB,EAChB,YAAmC;IAEnC,MAAM,EAAE,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC;IACzC,IAAI,CAAC,uBAAuB,CAAC,YAAY,CAAC,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CAAC,kCAAkC,EAAE,EAAE,CAAC,CAAC;IAC1D,CAAC;IACD,0BAA0B,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;IACtC,MAAM,IAAI,GAAG,oBAAoB,CAAC,EAAE,CAAC,CAAC;IACtC,IAAI,EAAsB,CAAC;IAC3B,IAAI,CAAC;QACH,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;QAC/D,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,EAAE,EAAE,CAAC,CAAC;QACtF,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,EAAE,MAAM,CAAC,CAAkC,CAAC;QACrF,IACE,MAAM,CAAC,aAAa,KAAK,CAAC;eACvB,MAAM,CAAC,QAAQ,KAAK,EAAE;eACtB,CAAC,iBAAiB,CAAC,MAAM,CAAC,MAAM,CAAC;eACjC,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,YAAY,CAAC,IAAI;eACxC,MAAM,CAAC,MAAM,CAAC,SAAS,KAAK,YAAY,CAAC,SAAS;YACrD,MAAM,IAAI,KAAK,CAAC,yCAAyC,EAAE,EAAE,CAAC,CAAC;QACjE,OAAO,MAAM,CAAC,MAAM,CAAC;IACvB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACvD,MAAM,IAAI,KAAK,CAAC,yCAAyC,EAAE,EAAE,CAAC,CAAC;QACjE,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;YAAS,CAAC;QACT,IAAI,EAAE,KAAK,SAAS;YAAE,SAAS,CAAC,EAAE,CAAC,CAAC;IACtC,CAAC;AACH,CAAC"}

package/dist/core/plugins/mcp/session-runtime.d.ts

@@ -0,0 +1,25 @@
+import type { PluginMcpServer } from '../types.js';
+export interface SessionMcpRuntimeEntry {
+    pluginId: string;
+    pluginDir: string;
+    server: PluginMcpServer;
+}
+export interface SessionMcpRuntimeManifest {
+    schemaVersion: 1;
+    sessionId: string;
+    pluginIds: string[];
+    generatedAt: string;
+    entries: SessionMcpRuntimeEntry[];
+}
+export declare function sessionMcpRuntimeManifestPath(sessionId: string, dataDir?: string): string;
+export declare function readSessionMcpRuntimeManifest(sessionId: string, dataDir?: string): SessionMcpRuntimeManifest | null;
+export declare function refreshSessionMcpRuntimeManifest(opts: {
+    sessionId: string;
+    pluginIds: readonly string[];
+    dataDir?: string;
+    now?: () => string;
+}): SessionMcpRuntimeManifest;
+/** Credential-bearing paths consumed only by the trusted Gateway host. They
+ * must never become CLI sandbox read carve-outs. */
+export declare function sessionMcpRuntimeHostOnlyPaths(manifest: SessionMcpRuntimeManifest, dataDir?: string): string[];
+//# sourceMappingURL=session-runtime.d.ts.map

package/dist/core/plugins/mcp/session-runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-runtime.d.ts","sourceRoot":"","sources":["../../../../src/core/plugins/mcp/session-runtime.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAGnD,MAAM,WAAW,sBAAsB;IACrC,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,eAAe,CAAC;CACzB;AAED,MAAM,WAAW,yBAAyB;IACxC,aAAa,EAAE,CAAC,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,sBAAsB,EAAE,CAAC;CACnC;AAED,wBAAgB,6BAA6B,CAC3C,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE,MAA+B,GACvC,MAAM,CAER;AAED,wBAAgB,6BAA6B,CAC3C,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE,MAA+B,GACvC,yBAAyB,GAAG,IAAI,CA0BlC;AAED,wBAAgB,gCAAgC,CAAC,IAAI,EAAE;IACrD,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB,GAAG,yBAAyB,CAqB5B;AAED;oDACoD;AACpD,wBAAgB,8BAA8B,CAC5C,QAAQ,EAAE,yBAAyB,EACnC,OAAO,GAAE,MAA+B,GACvC,MAAM,EAAE,CAQV"}

package/dist/core/plugins/mcp/session-runtime.js

@@ -0,0 +1,76 @@
+import { existsSync, mkdirSync, readFileSync } from 'node:fs';
+import { dirname, isAbsolute, join } from 'node:path';
+import { config } from '../../../config.js';
+import { readPluginRegistry } from '../../../services/plugin-registry-store.js';
+import { atomicWriteFileSync } from '../../../utils/atomic-write.js';
+import { pluginMcpPrivatePath, pluginRuntimeDir } from '../paths.js';
+import { sessionPluginManifestPath } from '../session-manifest.js';
+import { isPluginMcpServer, readPluginMcpDescriptor } from './private-store.js';
+export function sessionMcpRuntimeManifestPath(sessionId, dataDir = config.session.dataDir) {
+    return join(dirname(sessionPluginManifestPath(sessionId, dataDir)), 'plugin-mcp-runtime.json');
+}
+export function readSessionMcpRuntimeManifest(sessionId, dataDir = config.session.dataDir) {
+    const path = sessionMcpRuntimeManifestPath(sessionId, dataDir);
+    if (!existsSync(path))
+        return null;
+    try {
+        const parsed = JSON.parse(readFileSync(path, 'utf8'));
+        if (parsed.schemaVersion !== 1
+            || parsed.sessionId !== sessionId
+            || !Array.isArray(parsed.pluginIds)
+            || !parsed.pluginIds.every(id => typeof id === 'string')
+            || !Array.isArray(parsed.entries))
+            return null;
+        const enabled = new Set(parsed.pluginIds);
+        if (!parsed.entries.every((entry) => {
+            if (!entry || typeof entry !== 'object' || Array.isArray(entry))
+                return false;
+            const value = entry;
+            return typeof value.pluginId === 'string'
+                && enabled.has(value.pluginId)
+                && typeof value.pluginDir === 'string'
+                && isAbsolute(value.pluginDir)
+                && isPluginMcpServer(value.server);
+        }))
+            return null;
+        return parsed;
+    }
+    catch {
+        return null;
+    }
+}
+export function refreshSessionMcpRuntimeManifest(opts) {
+    const registry = readPluginRegistry();
+    const pluginIds = [...opts.pluginIds];
+    const entries = [];
+    for (const pluginId of pluginIds) {
+        const contribution = registry.plugins[pluginId]?.contributions?.mcp;
+        if (!contribution)
+            continue;
+        const server = readPluginMcpDescriptor(pluginId, contribution);
+        entries.push({ pluginId, pluginDir: pluginRuntimeDir(pluginId), server });
+    }
+    const manifest = {
+        schemaVersion: 1,
+        sessionId: opts.sessionId,
+        pluginIds,
+        generatedAt: opts.now ? opts.now() : new Date().toISOString(),
+        entries,
+    };
+    const path = sessionMcpRuntimeManifestPath(opts.sessionId, opts.dataDir);
+    mkdirSync(dirname(path), { recursive: true });
+    atomicWriteFileSync(path, `${JSON.stringify(manifest, null, 2)}\n`, { mode: 0o600 });
+    return manifest;
+}
+/** Credential-bearing paths consumed only by the trusted Gateway host. They
+ * must never become CLI sandbox read carve-outs. */
+export function sessionMcpRuntimeHostOnlyPaths(manifest, dataDir = config.session.dataDir) {
+    return [...new Set([
+            sessionMcpRuntimeManifestPath(manifest.sessionId, dataDir),
+            ...manifest.entries.flatMap(entry => [
+                pluginMcpPrivatePath(entry.pluginId),
+                join(entry.pluginDir, 'mcp', 'index.json'),
+            ]),
+        ])];
+}
+//# sourceMappingURL=session-runtime.js.map

package/dist/core/plugins/mcp/session-runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-runtime.js","sourceRoot":"","sources":["../../../../src/core/plugins/mcp/session-runtime.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC9D,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACtD,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,kBAAkB,EAAE,MAAM,4CAA4C,CAAC;AAChF,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AACrE,OAAO,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AACrE,OAAO,EAAE,yBAAyB,EAAE,MAAM,wBAAwB,CAAC;AAEnE,OAAO,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAgBhF,MAAM,UAAU,6BAA6B,CAC3C,SAAiB,EACjB,UAAkB,MAAM,CAAC,OAAO,CAAC,OAAO;IAExC,OAAO,IAAI,CAAC,OAAO,CAAC,yBAAyB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,EAAE,yBAAyB,CAAC,CAAC;AACjG,CAAC;AAED,MAAM,UAAU,6BAA6B,CAC3C,SAAiB,EACjB,UAAkB,MAAM,CAAC,OAAO,CAAC,OAAO;IAExC,MAAM,IAAI,GAAG,6BAA6B,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAC/D,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAuC,CAAC;QAC5F,IACE,MAAM,CAAC,aAAa,KAAK,CAAC;eACvB,MAAM,CAAC,SAAS,KAAK,SAAS;eAC9B,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC;eAChC,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,KAAK,QAAQ,CAAC;eACrD,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC;YACjC,OAAO,IAAI,CAAC;QACd,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;YAClC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;gBAAE,OAAO,KAAK,CAAC;YAC9E,MAAM,KAAK,GAAG,KAAwC,CAAC;YACvD,OAAO,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ;mBACpC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC;mBAC3B,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;mBACnC,UAAU,CAAC,KAAK,CAAC,SAAS,CAAC;mBAC3B,iBAAiB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACvC,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QAChB,OAAO,MAAmC,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,gCAAgC,CAAC,IAKhD;IACC,MAAM,QAAQ,GAAG,kBAAkB,EAAE,CAAC;IACtC,MAAM,SAAS,GAAG,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC;IACtC,MAAM,OAAO,GAA6B,EAAE,CAAC;IAC7C,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,MAAM,YAAY,GAAG,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,aAAa,EAAE,GAAG,CAAC;QACpE,IAAI,CAAC,YAAY;YAAE,SAAS;QAC5B,MAAM,MAAM,GAAG,uBAAuB,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;QAC/D,OAAO,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,gBAAgB,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;IAC5E,CAAC;IACD,MAAM,QAAQ,GAA8B;QAC1C,aAAa,EAAE,CAAC;QAChB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,SAAS;QACT,WAAW,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QAC7D,OAAO;KACR,CAAC;IACF,MAAM,IAAI,GAAG,6BAA6B,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IACzE,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,mBAAmB,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACrF,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;oDACoD;AACpD,MAAM,UAAU,8BAA8B,CAC5C,QAAmC,EACnC,UAAkB,MAAM,CAAC,OAAO,CAAC,OAAO;IAExC,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC;YACjB,6BAA6B,CAAC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;YAC1D,GAAG,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBACnC,oBAAoB,CAAC,KAAK,CAAC,QAAQ,CAAC;gBACpC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,EAAE,YAAY,CAAC;aAC3C,CAAC;SACH,CAAC,CAAC,CAAC;AACN,CAAC"}

package/dist/core/plugins/mcp/socket-auth.d.ts

@@ -0,0 +1,9 @@
+import type { Socket } from 'node:net';
+export declare const MCP_GATEWAY_AUTH_FILENAME = "auth";
+export declare function mcpGatewayAuthTokenPath(socketPath: string): string;
+export declare function readMcpGatewayAuthToken(socketPath: string): string;
+/** Authenticate a newly accepted worker-side socket before MCP sees any bytes. */
+export declare function acceptMcpGatewayHandshake(socket: Socket, expectedToken: string): Promise<boolean>;
+/** Authenticate the CLI-side relay before piping untrusted MCP stdio. */
+export declare function sendMcpGatewayHandshake(socket: Socket, token: string): Promise<void>;
+//# sourceMappingURL=socket-auth.d.ts.map

package/dist/core/plugins/mcp/socket-auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"socket-auth.d.ts","sourceRoot":"","sources":["../../../../src/core/plugins/mcp/socket-auth.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAUvC,eAAO,MAAM,yBAAyB,SAAS,CAAC;AAEhD,wBAAgB,uBAAuB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAElE;AAED,wBAAgB,uBAAuB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAIlE;AAqDD,kFAAkF;AAClF,wBAAsB,yBAAyB,CAAC,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAgBvG;AAED,yEAAyE;AACzE,wBAAsB,uBAAuB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAO1F"}

package/dist/core/plugins/mcp/socket-auth.js

@@ -0,0 +1,94 @@
+import { timingSafeEqual } from 'node:crypto';
+import { readFileSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { MCP_GATEWAY_HANDSHAKE_ERROR, MCP_GATEWAY_HANDSHAKE_OK, MCP_GATEWAY_HANDSHAKE_PREFIX, } from './environment.js';
+const MAX_HANDSHAKE_BYTES = 512;
+const HANDSHAKE_TIMEOUT_MS = 2_000;
+export const MCP_GATEWAY_AUTH_FILENAME = 'auth';
+export function mcpGatewayAuthTokenPath(socketPath) {
+    return join(dirname(socketPath), MCP_GATEWAY_AUTH_FILENAME);
+}
+export function readMcpGatewayAuthToken(socketPath) {
+    const token = readFileSync(mcpGatewayAuthTokenPath(socketPath), 'utf8').trim();
+    if (!token)
+        throw new Error('Gateway authentication token is empty');
+    return token;
+}
+function readSocketLine(socket) {
+    return new Promise((resolve, reject) => {
+        let buffer = Buffer.alloc(0);
+        let timer;
+        const cleanup = () => {
+            if (timer)
+                clearTimeout(timer);
+            socket.off('data', onData);
+            socket.off('error', onError);
+            socket.off('close', onClose);
+        };
+        const finish = (error, line) => {
+            cleanup();
+            if (error)
+                reject(error);
+            else
+                resolve(line ?? '');
+        };
+        const onError = (error) => finish(error);
+        const onClose = () => finish(new Error('Gateway connection closed during authentication'));
+        const onData = (chunk) => {
+            const bytes = typeof chunk === 'string' ? Buffer.from(chunk) : chunk;
+            buffer = Buffer.concat([buffer, bytes]);
+            if (buffer.length > MAX_HANDSHAKE_BYTES) {
+                finish(new Error('Gateway authentication frame is too large'));
+                return;
+            }
+            const newline = buffer.indexOf(0x0a);
+            if (newline < 0)
+                return;
+            const remainder = buffer.subarray(newline + 1);
+            socket.pause();
+            if (remainder.length > 0)
+                socket.unshift(remainder);
+            finish(undefined, buffer.subarray(0, newline).toString('utf8').replace(/\r$/, ''));
+        };
+        timer = setTimeout(() => finish(new Error('Gateway authentication timed out')), HANDSHAKE_TIMEOUT_MS);
+        timer.unref?.();
+        socket.on('data', onData);
+        socket.once('error', onError);
+        socket.once('close', onClose);
+    });
+}
+function tokenMatches(presented, expected) {
+    const presentedBytes = Buffer.from(presented);
+    const expectedBytes = Buffer.from(expected);
+    return presentedBytes.length === expectedBytes.length
+        && timingSafeEqual(presentedBytes, expectedBytes);
+}
+/** Authenticate a newly accepted worker-side socket before MCP sees any bytes. */
+export async function acceptMcpGatewayHandshake(socket, expectedToken) {
+    try {
+        const line = await readSocketLine(socket);
+        const presentedToken = line.startsWith(MCP_GATEWAY_HANDSHAKE_PREFIX)
+            ? line.slice(MCP_GATEWAY_HANDSHAKE_PREFIX.length)
+            : '';
+        if (!tokenMatches(presentedToken, expectedToken)) {
+            socket.end(`${MCP_GATEWAY_HANDSHAKE_ERROR}\n`);
+            return false;
+        }
+        socket.write(`${MCP_GATEWAY_HANDSHAKE_OK}\n`);
+        return true;
+    }
+    catch {
+        socket.destroy();
+        return false;
+    }
+}
+/** Authenticate the CLI-side relay before piping untrusted MCP stdio. */
+export async function sendMcpGatewayHandshake(socket, token) {
+    socket.write(`${MCP_GATEWAY_HANDSHAKE_PREFIX}${token}\n`);
+    const response = await readSocketLine(socket);
+    if (response !== MCP_GATEWAY_HANDSHAKE_OK) {
+        throw new Error('Botmux MCP Gateway authentication failed');
+    }
+    socket.resume();
+}
+//# sourceMappingURL=socket-auth.js.map

package/dist/core/plugins/mcp/socket-auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"socket-auth.js","sourceRoot":"","sources":["../../../../src/core/plugins/mcp/socket-auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAEvC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EACL,2BAA2B,EAC3B,wBAAwB,EACxB,4BAA4B,GAC7B,MAAM,kBAAkB,CAAC;AAE1B,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAChC,MAAM,oBAAoB,GAAG,KAAK,CAAC;AACnC,MAAM,CAAC,MAAM,yBAAyB,GAAG,MAAM,CAAC;AAEhD,MAAM,UAAU,uBAAuB,CAAC,UAAkB;IACxD,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,yBAAyB,CAAC,CAAC;AAC9D,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,UAAkB;IACxD,MAAM,KAAK,GAAG,YAAY,CAAC,uBAAuB,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/E,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IACrE,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,cAAc,CAAC,MAAc;IACpC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC7B,IAAI,KAAiC,CAAC;QAEtC,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,IAAI,KAAK;gBAAE,YAAY,CAAC,KAAK,CAAC,CAAC;YAC/B,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAC3B,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC7B,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC/B,CAAC,CAAC;QACF,MAAM,MAAM,GAAG,CAAC,KAAa,EAAE,IAAa,EAAE,EAAE;YAC9C,OAAO,EAAE,CAAC;YACV,IAAI,KAAK;gBAAE,MAAM,CAAC,KAAK,CAAC,CAAC;;gBACpB,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAC3B,CAAC,CAAC;QACF,MAAM,OAAO,GAAG,CAAC,KAAY,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAChD,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC,CAAC;QAC3F,MAAM,MAAM,GAAG,CAAC,KAAsB,EAAE,EAAE;YACxC,MAAM,KAAK,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;YACrE,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;YACxC,IAAI,MAAM,CAAC,MAAM,GAAG,mBAAmB,EAAE,CAAC;gBACxC,MAAM,CAAC,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC,CAAC;gBAC/D,OAAO;YACT,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACrC,IAAI,OAAO,GAAG,CAAC;gBAAE,OAAO;YACxB,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC;YAC/C,MAAM,CAAC,KAAK,EAAE,CAAC;YACf,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC;gBAAE,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YACpD,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC;QACrF,CAAC,CAAC;QAEF,KAAK,GAAG,UAAU,CAChB,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC,EAC3D,oBAAoB,CACrB,CAAC;QACF,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;QAChB,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC1B,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,YAAY,CAAC,SAAiB,EAAE,QAAgB;IACvD,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC9C,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC5C,OAAO,cAAc,CAAC,MAAM,KAAK,aAAa,CAAC,MAAM;WAChD,eAAe,CAAC,cAAc,EAAE,aAAa,CAAC,CAAC;AACtD,CAAC;AAED,kFAAkF;AAClF,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,MAAc,EAAE,aAAqB;IACnF,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,MAAM,CAAC,CAAC;QAC1C,MAAM,cAAc,GAAG,IAAI,CAAC,UAAU,CAAC,4BAA4B,CAAC;YAClE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,4BAA4B,CAAC,MAAM,CAAC;YACjD,CAAC,CAAC,EAAE,CAAC;QACP,IAAI,CAAC,YAAY,CAAC,cAAc,EAAE,aAAa,CAAC,EAAE,CAAC;YACjD,MAAM,CAAC,GAAG,CAAC,GAAG,2BAA2B,IAAI,CAAC,CAAC;YAC/C,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,CAAC,KAAK,CAAC,GAAG,wBAAwB,IAAI,CAAC,CAAC;QAC9C,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,CAAC,OAAO,EAAE,CAAC;QACjB,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,yEAAyE;AACzE,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,MAAc,EAAE,KAAa;IACzE,MAAM,CAAC,KAAK,CAAC,GAAG,4BAA4B,GAAG,KAAK,IAAI,CAAC,CAAC;IAC1D,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,MAAM,CAAC,CAAC;IAC9C,IAAI,QAAQ,KAAK,wBAAwB,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,CAAC,MAAM,EAAE,CAAC;AAClB,CAAC"}

package/dist/core/plugins/paths.d.ts

@@ -3,9 +3,12 @@ export declare function pluginRegistryPath(): string;
 export declare function pluginsHome(): string;
 export declare function pluginHome(pluginId: string): string;
 export declare function pluginRuntimeDir(pluginId: string): string;
+export declare function pluginPrivateDir(pluginId: string): string;
+export declare function pluginMcpPrivatePath(pluginId: string): string;
 export declare function pluginConfigPath(pluginId: string): string;
 export declare function pluginSettingsPath(pluginId: string): string;
 export declare function pluginServiceStatePath(pluginId: string): string;
+export declare function pluginServicePm2ConfigPath(pluginId: string): string;
 export declare function pluginMaterializedPath(pluginId: string): string;
 export declare function ensurePluginHome(pluginId: string): string;
 export declare function ensurePluginRegistryDir(): void;

package/dist/core/plugins/paths.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"paths.d.ts","sourceRoot":"","sources":["../../../src/core/plugins/paths.ts"],"names":[],"mappings":"AAKA,wBAAgB,UAAU,IAAI,MAAM,CAEnC;AAED,wBAAgB,kBAAkB,IAAI,MAAM,CAE3C;AAED,wBAAgB,WAAW,IAAI,MAAM,CAEpC;AAED,wBAAgB,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAEnD;AAED,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAEzD;AAED,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAEzD;AAED,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAE3D;AAED,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAE/D;AAED,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAE/D;AAED,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAIzD;AAED,wBAAgB,uBAAuB,IAAI,IAAI,CAE9C;AAED,wBAAgB,4BAA4B,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,SAAS,GAAG,MAAM,CAQjF;AAED,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,KAAK,SAAS,GAAG,MAAM,CAO/F"}
+{"version":3,"file":"paths.d.ts","sourceRoot":"","sources":["../../../src/core/plugins/paths.ts"],"names":[],"mappings":"AAKA,wBAAgB,UAAU,IAAI,MAAM,CAEnC;AAED,wBAAgB,kBAAkB,IAAI,MAAM,CAE3C;AAED,wBAAgB,WAAW,IAAI,MAAM,CAEpC;AAED,wBAAgB,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAEnD;AAED,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAEzD;AAED,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAEzD;AAED,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAE7D;AAED,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAEzD;AAED,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAE3D;AAED,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAE/D;AAED,wBAAgB,0BAA0B,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAEnE;AAED,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAE/D;AAED,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAIzD;AAED,wBAAgB,uBAAuB,IAAI,IAAI,CAE9C;AAED,wBAAgB,4BAA4B,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,SAAS,GAAG,MAAM,CAQjF;AAED,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,KAAK,SAAS,GAAG,MAAM,CAO/F"}

package/dist/core/plugins/paths.js

@@ -17,6 +17,12 @@ export function pluginHome(pluginId) {
 export function pluginRuntimeDir(pluginId) {
     return join(pluginHome(pluginId), 'dist');
 }
+export function pluginPrivateDir(pluginId) {
+    return join(pluginHome(pluginId), 'private');
+}
+export function pluginMcpPrivatePath(pluginId) {
+    return join(pluginPrivateDir(pluginId), 'mcp.json');
+}
 export function pluginConfigPath(pluginId) {
     return join(pluginHome(pluginId), 'config.json');
 }
@@ -26,6 +32,9 @@ export function pluginSettingsPath(pluginId) {
 export function pluginServiceStatePath(pluginId) {
     return join(pluginHome(pluginId), 'service.json');
 }
+export function pluginServicePm2ConfigPath(pluginId) {
+    return join(pluginHome(pluginId), 'service.pm2.json');
+}
 export function pluginMaterializedPath(pluginId) {
     return join(pluginHome(pluginId), 'materialized.json');
 }

package/dist/core/plugins/paths.js.map

@@ -1 +1 @@
-{"version":3,"file":"paths.js","sourceRoot":"","sources":["../../../src/core/plugins/paths.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpF,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAC;AAE/C,MAAM,UAAU,UAAU;IACxB,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,kBAAkB;IAChC,OAAO,IAAI,CAAC,UAAU,EAAE,EAAE,uBAAuB,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,WAAW;IACzB,OAAO,IAAI,CAAC,UAAU,EAAE,EAAE,SAAS,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,QAAgB;IACzC,OAAO,IAAI,CAAC,WAAW,EAAE,EAAE,mBAAmB,CAAC,QAAQ,CAAC,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,QAAgB;IAC/C,OAAO,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAC;AAC5C,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,QAAgB;IAC/C,OAAO,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,aAAa,CAAC,CAAC;AACnD,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,QAAgB;IACjD,OAAO,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,eAAe,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,QAAgB;IACrD,OAAO,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,cAAc,CAAC,CAAC;AACpD,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,QAAgB;IACrD,OAAO,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,mBAAmB,CAAC,CAAC;AACzD,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,QAAgB;IAC/C,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IACjC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpC,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,uBAAuB;IACrC,SAAS,CAAC,OAAO,CAAC,kBAAkB,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AAChE,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,IAAY,EAAE,KAAK,GAAG,MAAM;IACvE,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,KAAK,EAAE,CAAC,CAAC;IACzF,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC5B,IAAI,UAAU,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,UAAU,KAAK,mBAAmB,CAAC,CAAC;IAC7E,MAAM,UAAU,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IACtC,IAAI,UAAU,KAAK,GAAG,IAAI,UAAU,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,UAAU,KAAK,eAAe,CAAC,CAAC;IAC/F,IAAI,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,UAAU,KAAK,eAAe,CAAC,CAAC;IAC5G,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,OAAe,EAAE,YAAoB,EAAE,KAAK,GAAG,MAAM;IACrF,MAAM,IAAI,GAAG,4BAA4B,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;IAC/D,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9B,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACnC,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACnC,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,UAAU,KAAK,eAAe,CAAC,CAAC;IACrG,OAAO,MAAM,CAAC;AAChB,CAAC"}
+{"version":3,"file":"paths.js","sourceRoot":"","sources":["../../../src/core/plugins/paths.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpF,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAC;AAE/C,MAAM,UAAU,UAAU;IACxB,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,kBAAkB;IAChC,OAAO,IAAI,CAAC,UAAU,EAAE,EAAE,uBAAuB,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,WAAW;IACzB,OAAO,IAAI,CAAC,UAAU,EAAE,EAAE,SAAS,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,QAAgB;IACzC,OAAO,IAAI,CAAC,WAAW,EAAE,EAAE,mBAAmB,CAAC,QAAQ,CAAC,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,QAAgB;IAC/C,OAAO,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAC;AAC5C,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,QAAgB;IAC/C,OAAO,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,SAAS,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,QAAgB;IACnD,OAAO,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,EAAE,UAAU,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,QAAgB;IAC/C,OAAO,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,aAAa,CAAC,CAAC;AACnD,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,QAAgB;IACjD,OAAO,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,eAAe,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,QAAgB;IACrD,OAAO,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,cAAc,CAAC,CAAC;AACpD,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,QAAgB;IACzD,OAAO,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,kBAAkB,CAAC,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,QAAgB;IACrD,OAAO,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,mBAAmB,CAAC,CAAC;AACzD,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,QAAgB;IAC/C,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IACjC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpC,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,uBAAuB;IACrC,SAAS,CAAC,OAAO,CAAC,kBAAkB,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AAChE,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,IAAY,EAAE,KAAK,GAAG,MAAM;IACvE,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,KAAK,EAAE,CAAC,CAAC;IACzF,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC5B,IAAI,UAAU,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,UAAU,KAAK,mBAAmB,CAAC,CAAC;IAC7E,MAAM,UAAU,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IACtC,IAAI,UAAU,KAAK,GAAG,IAAI,UAAU,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,UAAU,KAAK,eAAe,CAAC,CAAC;IAC/F,IAAI,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,UAAU,KAAK,eAAe,CAAC,CAAC;IAC5G,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,OAAe,EAAE,YAAoB,EAAE,KAAK,GAAG,MAAM;IACrF,MAAM,IAAI,GAAG,4BAA4B,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;IAC/D,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9B,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACnC,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACnC,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,UAAU,KAAK,eAAe,CAAC,CAAC;IACrG,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/core/plugins/pm2.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pm2.d.ts","sourceRoot":"","sources":["../../../src/core/plugins/pm2.ts"],"names":[],"mappings":"AASA,eAAO,MAAM,eAAe,QAA2B,CAAC;AACxD,eAAO,MAAM,iBAAiB,mBAAmB,CAAC;AAElD,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAEzD;AAmBD,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,GAAE;IAAE,OAAO,CAAC,EAAE,OAAO,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAO,GAAG,IAAI,CAarI;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAO,GAAG,MAAM,CAexH"}
+{"version":3,"file":"pm2.d.ts","sourceRoot":"","sources":["../../../src/core/plugins/pm2.ts"],"names":[],"mappings":"AASA,eAAO,MAAM,eAAe,QAA2B,CAAC;AACxD,eAAO,MAAM,iBAAiB,mBAAmB,CAAC;AAElD,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAEzD;AAqBD,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,GAAE;IAAE,OAAO,CAAC,EAAE,OAAO,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAO,GAAG,IAAI,CAarI;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAO,GAAG,MAAM,CAexH"}