daycare-cli 0.0.1

package/dist/engine/permissions/permissionMergeDefault.spec.js

@@ -0,0 +1,56 @@
+import { describe, expect, it } from "vitest";
+import { permissionMergeDefault } from "./permissionMergeDefault.js";
+describe("permissionMergeDefault", () => {
+    it("falls back to defaults and merges directories", () => {
+        const permissions = {
+            workingDir: "",
+            writeDirs: ["/custom-write"],
+            readDirs: [],
+            network: false
+        };
+        const defaults = {
+            workingDir: "/workspace",
+            writeDirs: ["/base-write"],
+            readDirs: ["/base-read"],
+            network: true
+        };
+        const merged = permissionMergeDefault(permissions, defaults);
+        expect(merged.workingDir).toBe("/workspace");
+        expect(merged.network).toBe(true);
+        expect(merged.writeDirs).toEqual(expect.arrayContaining(["/base-write", "/custom-write"]));
+        expect(merged.readDirs).toEqual(expect.arrayContaining(["/base-read"]));
+    });
+    it("falls back to defaults when workingDir is whitespace-only", () => {
+        const permissions = {
+            workingDir: "   ",
+            writeDirs: [],
+            readDirs: [],
+            network: false
+        };
+        const defaults = {
+            workingDir: "/workspace",
+            writeDirs: [],
+            readDirs: [],
+            network: false
+        };
+        const merged = permissionMergeDefault(permissions, defaults);
+        expect(merged.workingDir).toBe("/workspace");
+    });
+    it("preserves valid workingDir from permissions", () => {
+        const permissions = {
+            workingDir: "/custom-workspace",
+            writeDirs: [],
+            readDirs: [],
+            network: false
+        };
+        const defaults = {
+            workingDir: "/workspace",
+            writeDirs: [],
+            readDirs: [],
+            network: false
+        };
+        const merged = permissionMergeDefault(permissions, defaults);
+        expect(merged.workingDir).toBe("/custom-workspace");
+    });
+});
+//# sourceMappingURL=permissionMergeDefault.spec.js.map

package/dist/engine/permissions/permissionMergeDefault.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissionMergeDefault.spec.js","sourceRoot":"","sources":["../../../sources/engine/permissions/permissionMergeDefault.spec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAG9C,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AAErE,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;IACtC,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,WAAW,GAAuB;YACtC,UAAU,EAAE,EAAE;YACd,SAAS,EAAE,CAAC,eAAe,CAAC;YAC5B,QAAQ,EAAE,EAAE;YACZ,OAAO,EAAE,KAAK;SACf,CAAC;QACF,MAAM,QAAQ,GAAuB;YACnC,UAAU,EAAE,YAAY;YACxB,SAAS,EAAE,CAAC,aAAa,CAAC;YAC1B,QAAQ,EAAE,CAAC,YAAY,CAAC;YACxB,OAAO,EAAE,IAAI;SACd,CAAC;QAEF,MAAM,MAAM,GAAG,sBAAsB,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QAE7D,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC7C,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,CAC9B,MAAM,CAAC,eAAe,CAAC,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC,CACzD,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACnE,MAAM,WAAW,GAAuB;YACtC,UAAU,EAAE,KAAK;YACjB,SAAS,EAAE,EAAE;YACb,QAAQ,EAAE,EAAE;YACZ,OAAO,EAAE,KAAK;SACf,CAAC;QACF,MAAM,QAAQ,GAAuB;YACnC,UAAU,EAAE,YAAY;YACxB,SAAS,EAAE,EAAE;YACb,QAAQ,EAAE,EAAE;YACZ,OAAO,EAAE,KAAK;SACf,CAAC;QAEF,MAAM,MAAM,GAAG,sBAAsB,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QAE7D,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,MAAM,WAAW,GAAuB;YACtC,UAAU,EAAE,mBAAmB;YAC/B,SAAS,EAAE,EAAE;YACb,QAAQ,EAAE,EAAE;YACZ,OAAO,EAAE,KAAK;SACf,CAAC;QACF,MAAM,QAAQ,GAAuB;YACnC,UAAU,EAAE,YAAY;YACxB,SAAS,EAAE,EAAE;YACb,QAAQ,EAAE,EAAE;YACZ,OAAO,EAAE,KAAK;SACf,CAAC;QAEF,MAAM,MAAM,GAAG,sBAAsB,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QAE7D,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/engine/permissions/permissionTagsApply.d.ts

@@ -0,0 +1,7 @@
+import type { SessionPermissions } from "@/types";
+/**
+ * Applies permission tags to a permissions object.
+ * Expects: tags are @network, @read:<path>, or @write:<path>.
+ */
+export declare function permissionTagsApply(permissions: SessionPermissions, tags: string[]): void;
+//# sourceMappingURL=permissionTagsApply.d.ts.map

package/dist/engine/permissions/permissionTagsApply.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissionTagsApply.d.ts","sourceRoot":"","sources":["../../../sources/engine/permissions/permissionTagsApply.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AAIlD;;;GAGG;AACH,wBAAgB,mBAAmB,CACjC,WAAW,EAAE,kBAAkB,EAC/B,IAAI,EAAE,MAAM,EAAE,GACb,IAAI,CAQN"}

package/dist/engine/permissions/permissionTagsApply.js

@@ -0,0 +1,16 @@
+import { permissionAccessApply } from "./permissionAccessApply.js";
+import { permissionAccessParse } from "./permissionAccessParse.js";
+/**
+ * Applies permission tags to a permissions object.
+ * Expects: tags are @network, @read:<path>, or @write:<path>.
+ */
+export function permissionTagsApply(permissions, tags) {
+    for (const tag of tags) {
+        const access = permissionAccessParse(tag);
+        const applied = permissionAccessApply(permissions, access);
+        if (!applied) {
+            throw new Error(`Invalid permission tag: ${tag}`);
+        }
+    }
+}
+//# sourceMappingURL=permissionTagsApply.js.map

package/dist/engine/permissions/permissionTagsApply.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissionTagsApply.js","sourceRoot":"","sources":["../../../sources/engine/permissions/permissionTagsApply.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAEnE;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CACjC,WAA+B,EAC/B,IAAc;IAEd,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;QAC1C,MAAM,OAAO,GAAG,qBAAqB,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QAC3D,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,2BAA2B,GAAG,EAAE,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/engine/permissions/permissionTagsApply.spec.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=permissionTagsApply.spec.d.ts.map

package/dist/engine/permissions/permissionTagsApply.spec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissionTagsApply.spec.d.ts","sourceRoot":"","sources":["../../../sources/engine/permissions/permissionTagsApply.spec.ts"],"names":[],"mappings":""}

package/dist/engine/permissions/permissionTagsApply.spec.js

@@ -0,0 +1,18 @@
+import { describe, it, expect } from "vitest";
+import { permissionTagsApply } from "./permissionTagsApply.js";
+describe("permissionTagsApply", () => {
+    it("applies tags to permissions", () => {
+        const permissions = {
+            workingDir: "/tmp",
+            writeDirs: [],
+            readDirs: [],
+            network: false
+        };
+        permissionTagsApply(permissions, ["@network", "@read:/tmp", "@write:/var/tmp"]);
+        expect(permissions.network).toBe(true);
+        expect(permissions.readDirs).toContain("/tmp");
+        expect(permissions.readDirs).toContain("/var/tmp");
+        expect(permissions.writeDirs).toContain("/var/tmp");
+    });
+});
+//# sourceMappingURL=permissionTagsApply.spec.js.map

package/dist/engine/permissions/permissionTagsApply.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissionTagsApply.spec.js","sourceRoot":"","sources":["../../../sources/engine/permissions/permissionTagsApply.spec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAE9C,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAE/D,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,EAAE,CAAC,6BAA6B,EAAE,GAAG,EAAE;QACrC,MAAM,WAAW,GAAG;YAClB,UAAU,EAAE,MAAM;YAClB,SAAS,EAAE,EAAE;YACb,QAAQ,EAAE,EAAE;YACZ,OAAO,EAAE,KAAK;SACf,CAAC;QACF,mBAAmB,CAAC,WAAW,EAAE,CAAC,UAAU,EAAE,YAAY,EAAE,iBAAiB,CAAC,CAAC,CAAC;QAChF,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvC,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAC/C,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QACnD,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/engine/permissions/permissionTagsNormalize.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Normalizes an unknown permissions list into unique permission tags.
+ * Expects: entries are @network, @read:<path>, or @write:<path>.
+ */
+export declare function permissionTagsNormalize(value: unknown): string[];
+//# sourceMappingURL=permissionTagsNormalize.d.ts.map

package/dist/engine/permissions/permissionTagsNormalize.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissionTagsNormalize.d.ts","sourceRoot":"","sources":["../../../sources/engine/permissions/permissionTagsNormalize.ts"],"names":[],"mappings":"AAGA;;;GAGG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,EAAE,CA4BhE"}

package/dist/engine/permissions/permissionTagsNormalize.js

@@ -0,0 +1,33 @@
+import { permissionAccessParse } from "./permissionAccessParse.js";
+/**
+ * Normalizes an unknown permissions list into unique permission tags.
+ * Expects: entries are @network, @read:<path>, or @write:<path>.
+ */
+export function permissionTagsNormalize(value) {
+    if (!value) {
+        return [];
+    }
+    const entries = Array.isArray(value) ? value : [value];
+    const normalized = [];
+    const seen = new Set();
+    for (const entry of entries) {
+        if (typeof entry !== "string") {
+            continue;
+        }
+        const trimmed = entry.trim();
+        if (!trimmed) {
+            continue;
+        }
+        const access = permissionAccessParse(trimmed);
+        const tag = access.kind === "network"
+            ? "@network"
+            : `${access.kind === "read" ? "@read" : "@write"}:${access.path}`;
+        if (seen.has(tag)) {
+            continue;
+        }
+        seen.add(tag);
+        normalized.push(tag);
+    }
+    return normalized;
+}
+//# sourceMappingURL=permissionTagsNormalize.js.map

package/dist/engine/permissions/permissionTagsNormalize.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissionTagsNormalize.js","sourceRoot":"","sources":["../../../sources/engine/permissions/permissionTagsNormalize.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAEnE;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CAAC,KAAc;IACpD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACvD,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAE/B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,SAAS;QACX,CAAC;QACD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;QAC7B,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,SAAS;QACX,CAAC;QACD,MAAM,MAAM,GAAqB,qBAAqB,CAAC,OAAO,CAAC,CAAC;QAChE,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,KAAK,SAAS;YACnC,CAAC,CAAC,UAAU;YACZ,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QACpE,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAClB,SAAS;QACX,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACd,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACvB,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC"}

package/dist/engine/permissions/permissionTagsNormalize.spec.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=permissionTagsNormalize.spec.d.ts.map

package/dist/engine/permissions/permissionTagsNormalize.spec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissionTagsNormalize.spec.d.ts","sourceRoot":"","sources":["../../../sources/engine/permissions/permissionTagsNormalize.spec.ts"],"names":[],"mappings":""}

package/dist/engine/permissions/permissionTagsNormalize.spec.js

@@ -0,0 +1,17 @@
+import { describe, it, expect } from "vitest";
+import { permissionTagsNormalize } from "./permissionTagsNormalize.js";
+describe("permissionTagsNormalize", () => {
+    it("normalizes and dedupes permission tags", () => {
+        const result = permissionTagsNormalize([
+            " @network ",
+            "@read:/tmp",
+            "@read:/tmp",
+            "@write:/var/log"
+        ]);
+        expect(result).toEqual(["@network", "@read:/tmp", "@write:/var/log"]);
+    });
+    it("returns empty for missing values", () => {
+        expect(permissionTagsNormalize(undefined)).toEqual([]);
+    });
+});
+//# sourceMappingURL=permissionTagsNormalize.spec.js.map

package/dist/engine/permissions/permissionTagsNormalize.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissionTagsNormalize.spec.js","sourceRoot":"","sources":["../../../sources/engine/permissions/permissionTagsNormalize.spec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAE9C,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AAEvE,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;IACvC,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,MAAM,MAAM,GAAG,uBAAuB,CAAC;YACrC,YAAY;YACZ,YAAY;YACZ,YAAY;YACZ,iBAAiB;SAClB,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,YAAY,EAAE,iBAAiB,CAAC,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,MAAM,CAAC,uBAAuB,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/engine/permissions/permissionTagsValidate.d.ts

@@ -0,0 +1,9 @@
+import type { SessionPermissions } from "@/types";
+/**
+ * Validates that all permission tags are allowed by current permissions.
+ * Throws an error if any permission is not already held by the caller.
+ *
+ * Expects: tags are @network, @read:<path>, or @write:<path>.
+ */
+export declare function permissionTagsValidate(permissions: SessionPermissions, tags: string[]): Promise<void>;
+//# sourceMappingURL=permissionTagsValidate.d.ts.map

package/dist/engine/permissions/permissionTagsValidate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissionTagsValidate.d.ts","sourceRoot":"","sources":["../../../sources/engine/permissions/permissionTagsValidate.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AAIlD;;;;;GAKG;AACH,wBAAsB,sBAAsB,CAC1C,WAAW,EAAE,kBAAkB,EAC/B,IAAI,EAAE,MAAM,EAAE,GACb,OAAO,CAAC,IAAI,CAAC,CAQf"}

package/dist/engine/permissions/permissionTagsValidate.js

@@ -0,0 +1,18 @@
+import { permissionAccessAllows } from "./permissionAccessAllows.js";
+import { permissionAccessParse } from "./permissionAccessParse.js";
+/**
+ * Validates that all permission tags are allowed by current permissions.
+ * Throws an error if any permission is not already held by the caller.
+ *
+ * Expects: tags are @network, @read:<path>, or @write:<path>.
+ */
+export async function permissionTagsValidate(permissions, tags) {
+    for (const tag of tags) {
+        const access = permissionAccessParse(tag);
+        const allowed = await permissionAccessAllows(permissions, access);
+        if (!allowed) {
+            throw new Error(`Cannot attach permission '${tag}' - you don't have it.`);
+        }
+    }
+}
+//# sourceMappingURL=permissionTagsValidate.js.map

package/dist/engine/permissions/permissionTagsValidate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissionTagsValidate.js","sourceRoot":"","sources":["../../../sources/engine/permissions/permissionTagsValidate.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AACrE,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAEnE;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,WAA+B,EAC/B,IAAc;IAEd,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;QAC1C,MAAM,OAAO,GAAG,MAAM,sBAAsB,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QAClE,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,6BAA6B,GAAG,wBAAwB,CAAC,CAAC;QAC5E,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/engine/permissions/permissionTagsValidate.spec.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=permissionTagsValidate.spec.d.ts.map

package/dist/engine/permissions/permissionTagsValidate.spec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissionTagsValidate.spec.d.ts","sourceRoot":"","sources":["../../../sources/engine/permissions/permissionTagsValidate.spec.ts"],"names":[],"mappings":""}

package/dist/engine/permissions/permissionTagsValidate.spec.js

@@ -0,0 +1,66 @@
+import { describe, it, expect, afterEach } from "vitest";
+import { promises as fs } from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import { permissionTagsValidate } from "./permissionTagsValidate.js";
+describe("permissionTagsValidate", () => {
+    const tempDirs = [];
+    afterEach(async () => {
+        await Promise.all(tempDirs.map((dir) => fs.rm(dir, { recursive: true, force: true })));
+        tempDirs.length = 0;
+    });
+    it("allows tags the caller already has", async () => {
+        const dir = await fs.mkdtemp(path.join(os.tmpdir(), "perm-validate-"));
+        tempDirs.push(dir);
+        const target = path.join(dir, "file.txt");
+        await fs.writeFile(target, "ok", "utf8");
+        const permissions = {
+            workingDir: dir,
+            writeDirs: [dir],
+            readDirs: [dir],
+            network: true
+        };
+        // Should not throw
+        await permissionTagsValidate(permissions, ["@network", `@read:${target}`, `@write:${dir}`]);
+    });
+    it("rejects network permission when caller lacks it", async () => {
+        const permissions = {
+            workingDir: "/tmp",
+            writeDirs: [],
+            readDirs: [],
+            network: false
+        };
+        await expect(permissionTagsValidate(permissions, ["@network"]))
+            .rejects.toThrow("Cannot attach permission '@network' - you don't have it.");
+    });
+    it("rejects write permission outside allowed directories", async () => {
+        const permissions = {
+            workingDir: "/tmp",
+            writeDirs: ["/tmp"],
+            readDirs: [],
+            network: false
+        };
+        await expect(permissionTagsValidate(permissions, ["@write:/etc"]))
+            .rejects.toThrow("Cannot attach permission '@write:/etc' - you don't have it.");
+    });
+    it("rejects read permission outside allowed directories", async () => {
+        const permissions = {
+            workingDir: "/tmp",
+            writeDirs: [],
+            readDirs: ["/tmp"],
+            network: false
+        };
+        await expect(permissionTagsValidate(permissions, ["@read:/etc"]))
+            .rejects.toThrow("Cannot attach permission '@read:/etc' - you don't have it.");
+    });
+    it("allows read tags for any absolute path when readDirs are empty", async () => {
+        const permissions = {
+            workingDir: "/tmp",
+            writeDirs: [],
+            readDirs: [],
+            network: false
+        };
+        await expect(permissionTagsValidate(permissions, ["@read:/etc"])).resolves.toBeUndefined();
+    });
+});
+//# sourceMappingURL=permissionTagsValidate.spec.js.map

package/dist/engine/permissions/permissionTagsValidate.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissionTagsValidate.spec.js","sourceRoot":"","sources":["../../../sources/engine/permissions/permissionTagsValidate.spec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACzD,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AAErE,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;IACtC,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,SAAS,CAAC,KAAK,IAAI,EAAE;QACnB,MAAM,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACvF,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;IACtB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,KAAK,IAAI,EAAE;QAClD,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,gBAAgB,CAAC,CAAC,CAAC;QACvE,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACnB,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;QAC1C,MAAM,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QAEzC,MAAM,WAAW,GAAG;YAClB,UAAU,EAAE,GAAG;YACf,SAAS,EAAE,CAAC,GAAG,CAAC;YAChB,QAAQ,EAAE,CAAC,GAAG,CAAC;YACf,OAAO,EAAE,IAAI;SACd,CAAC;QAEF,mBAAmB;QACnB,MAAM,sBAAsB,CAAC,WAAW,EAAE,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,EAAE,UAAU,GAAG,EAAE,CAAC,CAAC,CAAC;IAC9F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;QAC/D,MAAM,WAAW,GAAG;YAClB,UAAU,EAAE,MAAM;YAClB,SAAS,EAAE,EAAE;YACb,QAAQ,EAAE,EAAE;YACZ,OAAO,EAAE,KAAK;SACf,CAAC;QAEF,MAAM,MAAM,CAAC,sBAAsB,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;aAC5D,OAAO,CAAC,OAAO,CAAC,0DAA0D,CAAC,CAAC;IACjF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,WAAW,GAAG;YAClB,UAAU,EAAE,MAAM;YAClB,SAAS,EAAE,CAAC,MAAM,CAAC;YACnB,QAAQ,EAAE,EAAE;YACZ,OAAO,EAAE,KAAK;SACf,CAAC;QAEF,MAAM,MAAM,CAAC,sBAAsB,CAAC,WAAW,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC;aAC/D,OAAO,CAAC,OAAO,CAAC,6DAA6D,CAAC,CAAC;IACpF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACnE,MAAM,WAAW,GAAG;YAClB,UAAU,EAAE,MAAM;YAClB,SAAS,EAAE,EAAE;YACb,QAAQ,EAAE,CAAC,MAAM,CAAC;YAClB,OAAO,EAAE,KAAK;SACf,CAAC;QAEF,MAAM,MAAM,CAAC,sBAAsB,CAAC,WAAW,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;aAC9D,OAAO,CAAC,OAAO,CAAC,4DAA4D,CAAC,CAAC;IACnF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gEAAgE,EAAE,KAAK,IAAI,EAAE;QAC9E,MAAM,WAAW,GAAG;YAClB,UAAU,EAAE,MAAM;YAClB,SAAS,EAAE,EAAE;YACb,QAAQ,EAAE,EAAE;YACZ,OAAO,EAAE,KAAK;SACf,CAAC;QAEF,MAAM,MAAM,CACV,sBAAsB,CAAC,WAAW,EAAE,CAAC,YAAY,CAAC,CAAC,CACpD,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC;IAC7B,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/engine/permissions.d.ts

@@ -0,0 +1,12 @@
+import type { AssistantSettings } from "../settings.js";
+export type SessionPermissions = {
+    workingDir: string;
+    writeDirs: string[];
+    readDirs: string[];
+    network: boolean;
+};
+export declare function resolveWorkspaceDir(configDir: string, assistant?: AssistantSettings | null): string;
+export declare function ensureWorkspaceDir(dir: string): Promise<void>;
+export declare function normalizePermissions(value: unknown, defaultWorkingDir: string): SessionPermissions;
+export declare function resolveWorkspacePath(workingDir: string, target: string): string;
+//# sourceMappingURL=permissions.d.ts.map

package/dist/engine/permissions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions.d.ts","sourceRoot":"","sources":["../../sources/engine/permissions.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAExD,MAAM,MAAM,kBAAkB,GAAG;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;CAClB,CAAC;AAEF,wBAAgB,mBAAmB,CACjC,SAAS,EAAE,MAAM,EACjB,SAAS,CAAC,EAAE,iBAAiB,GAAG,IAAI,GACnC,MAAM,CAQR;AAED,wBAAsB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAEnE;AAED,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,OAAO,EACd,iBAAiB,EAAE,MAAM,GACxB,kBAAkB,CA6CpB;AAED,wBAAgB,oBAAoB,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAO/E"}

package/dist/engine/permissions.js

@@ -0,0 +1,67 @@
+import { promises as fs } from "node:fs";
+import path from "node:path";
+export function resolveWorkspaceDir(configDir, assistant) {
+    const configured = assistant?.workspaceDir?.trim();
+    if (configured) {
+        return path.isAbsolute(configured)
+            ? path.resolve(configured)
+            : path.resolve(configDir, configured);
+    }
+    return path.resolve(configDir, "workspace");
+}
+export async function ensureWorkspaceDir(dir) {
+    await fs.mkdir(dir, { recursive: true });
+}
+export function normalizePermissions(value, defaultWorkingDir) {
+    let writeDirs = [];
+    let readDirs = [];
+    let network = false;
+    if (value && typeof value === "object") {
+        const candidate = value;
+        if (typeof candidate.workingDir === "string" && candidate.workingDir.trim().length > 0) {
+            if (path.isAbsolute(candidate.workingDir)) {
+                if (Array.isArray(candidate.writeDirs)) {
+                    writeDirs = candidate.writeDirs
+                        .filter((entry) => typeof entry === "string" && entry.trim().length > 0)
+                        .map((entry) => entry.trim())
+                        .filter((entry) => path.isAbsolute(entry))
+                        .map((entry) => path.resolve(entry));
+                }
+                if (Array.isArray(candidate.readDirs)) {
+                    readDirs = candidate.readDirs
+                        .filter((entry) => typeof entry === "string" && entry.trim().length > 0)
+                        .map((entry) => entry.trim())
+                        .filter((entry) => path.isAbsolute(entry))
+                        .map((entry) => path.resolve(entry));
+                }
+                if (typeof candidate.network === "boolean") {
+                    network = candidate.network;
+                }
+                return {
+                    workingDir: path.resolve(candidate.workingDir),
+                    writeDirs: dedupe(writeDirs),
+                    readDirs: dedupe(readDirs),
+                    network
+                };
+            }
+        }
+    }
+    return {
+        workingDir: path.resolve(defaultWorkingDir),
+        writeDirs: [],
+        readDirs: [],
+        network: false
+    };
+}
+export function resolveWorkspacePath(workingDir, target) {
+    const resolved = path.resolve(workingDir, target);
+    const relative = path.relative(workingDir, resolved);
+    if (relative.startsWith("..") || path.isAbsolute(relative)) {
+        throw new Error("Path is outside the workspace.");
+    }
+    return resolved;
+}
+function dedupe(values) {
+    return Array.from(new Set(values));
+}
+//# sourceMappingURL=permissions.js.map

package/dist/engine/permissions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions.js","sourceRoot":"","sources":["../../sources/engine/permissions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,IAAI,MAAM,WAAW,CAAC;AAW7B,MAAM,UAAU,mBAAmB,CACjC,SAAiB,EACjB,SAAoC;IAEpC,MAAM,UAAU,GAAG,SAAS,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IACnD,IAAI,UAAU,EAAE,CAAC;QACf,OAAO,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;YAChC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC;YAC1B,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,GAAW;IAClD,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,KAAc,EACd,iBAAyB;IAEzB,IAAI,SAAS,GAAa,EAAE,CAAC;IAC7B,IAAI,QAAQ,GAAa,EAAE,CAAC;IAC5B,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,SAAS,GAAG,KAKjB,CAAC;QACF,IAAI,OAAO,SAAS,CAAC,UAAU,KAAK,QAAQ,IAAI,SAAS,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvF,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC1C,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC;oBACvC,SAAS,GAAG,SAAS,CAAC,SAAS;yBAC5B,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;yBACxF,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;yBAC5B,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;yBACzC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;gBACzC,CAAC;gBACD,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;oBACtC,QAAQ,GAAG,SAAS,CAAC,QAAQ;yBAC1B,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;yBACxF,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;yBAC5B,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;yBACzC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;gBACzC,CAAC;gBACD,IAAI,OAAO,SAAS,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;oBAC3C,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC;gBAC9B,CAAC;gBACD,OAAO;oBACL,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,UAAU,CAAC;oBAC9C,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC;oBAC5B,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC;oBAC1B,OAAO;iBACR,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO;QACL,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC;QAC3C,SAAS,EAAE,EAAE;QACb,QAAQ,EAAE,EAAE;QACZ,OAAO,EAAE,KAAK;KACf,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,UAAkB,EAAE,MAAc;IACrE,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IACrD,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACpD,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,MAAM,CAAC,MAAgB;IAC9B,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;AACrC,CAAC"}

package/dist/engine/plugins/builtins.spec.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=builtins.spec.d.ts.map

package/dist/engine/plugins/builtins.spec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"builtins.spec.d.ts","sourceRoot":"","sources":["../../../sources/engine/plugins/builtins.spec.ts"],"names":[],"mappings":""}

package/dist/engine/plugins/builtins.spec.js

@@ -0,0 +1,91 @@
+import { describe, it, expect, afterEach, vi } from "vitest";
+import { promises as fs } from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import { FileStore } from "../../files/store.js";
+import { getLogger } from "../../log.js";
+import { AuthStore } from "../../auth/store.js";
+import { configResolve } from "../../config/configResolve.js";
+import { Processes } from "../processes/processes.js";
+import { plugin as braveSearch } from "../../plugins/brave-search/plugin.js";
+import { plugin as memory } from "../../plugins/memory/plugin.js";
+import { plugin as telegram } from "../../plugins/telegram/plugin.js";
+const tempRoots = [];
+async function createTempDir() {
+    const dir = await fs.mkdtemp(path.join(os.tmpdir(), "daycare-plugin-builtin-"));
+    tempRoots.push(dir);
+    return dir;
+}
+function createRegistrar() {
+    return {
+        registerInferenceProvider: vi.fn(),
+        unregisterInferenceProvider: vi.fn(),
+        registerTool: vi.fn(),
+        unregisterTool: vi.fn(),
+        registerImageProvider: vi.fn(),
+        unregisterImageProvider: vi.fn(),
+        registerConnector: vi.fn(),
+        unregisterConnector: vi.fn()
+    };
+}
+async function createApi(instanceId, pluginId, settings, registrar, dir) {
+    const config = configResolve({ engine: { dataDir: dir } }, path.join(dir, "settings.json"));
+    const auth = new AuthStore(config);
+    const fileStore = new FileStore(config);
+    const inference = {
+        complete: async () => {
+            throw new Error("Inference not available in tests");
+        }
+    };
+    return {
+        instance: { instanceId, pluginId, enabled: true },
+        settings,
+        engineSettings: {},
+        logger: getLogger(`test.${instanceId}`),
+        auth,
+        dataDir: dir,
+        registrar,
+        fileStore,
+        inference,
+        processes: new Processes(dir, getLogger(`test.processes.${instanceId}`)),
+        mode: "runtime",
+        events: { emit: vi.fn() }
+    };
+}
+describe("built-in plugins", () => {
+    afterEach(async () => {
+        const pending = tempRoots.splice(0, tempRoots.length);
+        await Promise.all(pending.map(async (dir) => {
+            await fs.rm(dir, { recursive: true, force: true });
+        }));
+    });
+    it("registers tools", async () => {
+        const dir = await createTempDir();
+        const registrar = createRegistrar();
+        const braveSettings = braveSearch.settingsSchema.parse({ toolName: "search_v2" });
+        const braveApi = await createApi("brave-main", "brave-search", braveSettings, registrar, dir);
+        const braveInstance = await braveSearch.create(braveApi);
+        await braveInstance.load?.();
+        const memorySettings = memory.settingsSchema.parse({});
+        const memoryApi = await createApi("memory-main", "memory", memorySettings, registrar, dir);
+        const memoryInstance = await memory.create(memoryApi);
+        await memoryInstance.load?.();
+        expect(registrar.registerTool).toHaveBeenCalledWith(expect.objectContaining({ tool: expect.objectContaining({ name: "search_v2" }) }));
+        expect(registrar.registerTool).toHaveBeenCalledWith(expect.objectContaining({ tool: expect.objectContaining({ name: "memory_create_entity" }) }));
+        expect(registrar.registerTool).toHaveBeenCalledWith(expect.objectContaining({ tool: expect.objectContaining({ name: "memory_upsert_record" }) }));
+        expect(registrar.registerTool).toHaveBeenCalledWith(expect.objectContaining({ tool: expect.objectContaining({ name: "memory_list_entities" }) }));
+    });
+    it("builds a telegram plugin instance without executing load", async () => {
+        const dir = await createTempDir();
+        const registrar = createRegistrar();
+        const settings = telegram.settingsSchema.parse({
+            polling: false,
+            allowedUids: ["123456789"]
+        });
+        const api = await createApi("telegram-main", "telegram", settings, registrar, dir);
+        const instance = await telegram.create(api);
+        expect(typeof instance.load).toBe("function");
+        expect(typeof instance.unload).toBe("function");
+    });
+});
+//# sourceMappingURL=builtins.spec.js.map

package/dist/engine/plugins/builtins.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"builtins.spec.js","sourceRoot":"","sources":["../../../sources/engine/plugins/builtins.spec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC7D,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAGhD,OAAO,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AAC9D,OAAO,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AAEtD,OAAO,EAAE,MAAM,IAAI,WAAW,EAAE,MAAM,sCAAsC,CAAC;AAC7E,OAAO,EAAE,MAAM,IAAI,MAAM,EAAE,MAAM,gCAAgC,CAAC;AAClE,OAAO,EAAE,MAAM,IAAI,QAAQ,EAAE,MAAM,kCAAkC,CAAC;AAEtE,MAAM,SAAS,GAAa,EAAE,CAAC;AAE/B,KAAK,UAAU,aAAa;IAC1B,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,yBAAyB,CAAC,CAAC,CAAC;IAChF,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACpB,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,eAAe;IACtB,OAAO;QACL,yBAAyB,EAAE,EAAE,CAAC,EAAE,EAAE;QAClC,2BAA2B,EAAE,EAAE,CAAC,EAAE,EAAE;QACpC,YAAY,EAAE,EAAE,CAAC,EAAE,EAAE;QACrB,cAAc,EAAE,EAAE,CAAC,EAAE,EAAE;QACvB,qBAAqB,EAAE,EAAE,CAAC,EAAE,EAAE;QAC9B,uBAAuB,EAAE,EAAE,CAAC,EAAE,EAAE;QAChC,iBAAiB,EAAE,EAAE,CAAC,EAAE,EAAE;QAC1B,mBAAmB,EAAE,EAAE,CAAC,EAAE,EAAE;KACC,CAAC;AAClC,CAAC;AAED,KAAK,UAAU,SAAS,CACtB,UAAkB,EAClB,QAAgB,EAChB,QAAmB,EACnB,SAA0B,EAC1B,GAAW;IAEX,MAAM,MAAM,GAAG,aAAa,CAAC,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC,CAAC;IAC5F,MAAM,IAAI,GAAG,IAAI,SAAS,CAAC,MAAM,CAAC,CAAC;IACnC,MAAM,SAAS,GAAG,IAAI,SAAS,CAAC,MAAM,CAAC,CAAC;IACxC,MAAM,SAAS,GAAG;QAChB,QAAQ,EAAE,KAAK,IAAI,EAAE;YACnB,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QACtD,CAAC;KACF,CAAC;IACF,OAAO;QACL,QAAQ,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE;QACjD,QAAQ;QACR,cAAc,EAAE,EAAE;QAClB,MAAM,EAAE,SAAS,CAAC,QAAQ,UAAU,EAAE,CAAC;QACvC,IAAI;QACJ,OAAO,EAAE,GAAG;QACZ,SAAS;QACT,SAAS;QACT,SAAS;QACT,SAAS,EAAE,IAAI,SAAS,CAAC,GAAG,EAAE,SAAS,CAAC,kBAAkB,UAAU,EAAE,CAAC,CAAC;QACxE,IAAI,EAAE,SAAS;QACf,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE;KAC1B,CAAC;AACJ,CAAC;AAED,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,SAAS,CAAC,KAAK,IAAI,EAAE;QACnB,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;QACtD,MAAM,OAAO,CAAC,GAAG,CACf,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YACxB,MAAM,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACrD,CAAC,CAAC,CACH,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iBAAiB,EAAE,KAAK,IAAI,EAAE;QAC/B,MAAM,GAAG,GAAG,MAAM,aAAa,EAAE,CAAC;QAClC,MAAM,SAAS,GAAG,eAAe,EAAE,CAAC;QAEpC,MAAM,aAAa,GAAG,WAAW,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAC;QAClF,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,YAAY,EAAE,cAAc,EAAE,aAAa,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;QAC9F,MAAM,aAAa,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACzD,MAAM,aAAa,CAAC,IAAI,EAAE,EAAE,CAAC;QAE7B,MAAM,cAAc,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACvD,MAAM,SAAS,GAAG,MAAM,SAAS,CAAC,aAAa,EAAE,QAAQ,EAAE,cAAc,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;QAC3F,MAAM,cAAc,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACtD,MAAM,cAAc,CAAC,IAAI,EAAE,EAAE,CAAC;QAE9B,MAAM,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QACvI,MAAM,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,sBAAsB,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QAClJ,MAAM,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,sBAAsB,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QAClJ,MAAM,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,sBAAsB,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IACpJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;QACxE,MAAM,GAAG,GAAG,MAAM,aAAa,EAAE,CAAC;QAClC,MAAM,SAAS,GAAG,eAAe,EAAE,CAAC;QACpC,MAAM,QAAQ,GAAG,QAAQ,CAAC,cAAc,CAAC,KAAK,CAAC;YAC7C,OAAO,EAAE,KAAK;YACd,WAAW,EAAE,CAAC,WAAW,CAAC;SAC3B,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,eAAe,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;QACnF,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAE5C,MAAM,CAAC,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC9C,MAAM,CAAC,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/engine/plugins/catalog.d.ts

@@ -0,0 +1,9 @@
+import { type PluginDescriptor } from "./descriptor.js";
+export type PluginDefinition = {
+    descriptor: PluginDescriptor;
+    entryPath: string;
+    descriptorPath: string;
+    pluginDir: string;
+};
+export declare function buildPluginCatalog(): Map<string, PluginDefinition>;
+//# sourceMappingURL=catalog.d.ts.map

package/dist/engine/plugins/catalog.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalog.d.ts","sourceRoot":"","sources":["../../../sources/engine/plugins/catalog.ts"],"names":[],"mappings":"AAIA,OAAO,EAA0B,KAAK,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAEhF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,UAAU,EAAE,gBAAgB,CAAC;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAqBF,wBAAgB,kBAAkB,IAAI,GAAG,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAiBlE"}

package/dist/engine/plugins/catalog.js

@@ -0,0 +1,37 @@
+import fs from "node:fs";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+import { pluginDescriptorSchema } from "./descriptor.js";
+const pluginsDir = fileURLToPath(new URL("../../plugins", import.meta.url));
+function collectDescriptorFiles(root) {
+    const entries = fs.readdirSync(root, { withFileTypes: true });
+    const results = [];
+    for (const entry of entries) {
+        if (entry.isDirectory()) {
+            results.push(...collectDescriptorFiles(path.join(root, entry.name)));
+            continue;
+        }
+        if (entry.isFile() && entry.name === "plugin.json") {
+            results.push(path.join(root, entry.name));
+        }
+    }
+    return results;
+}
+const descriptorFiles = collectDescriptorFiles(pluginsDir);
+export function buildPluginCatalog() {
+    const catalog = new Map();
+    for (const descriptorPath of descriptorFiles) {
+        const raw = fs.readFileSync(descriptorPath, "utf8");
+        const parsed = pluginDescriptorSchema.parse(JSON.parse(raw));
+        const pluginDir = path.dirname(descriptorPath);
+        const entryPath = path.resolve(pluginDir, parsed.entry);
+        catalog.set(parsed.id, {
+            descriptor: parsed,
+            entryPath,
+            descriptorPath,
+            pluginDir
+        });
+    }
+    return catalog;
+}
+//# sourceMappingURL=catalog.js.map

package/dist/engine/plugins/catalog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalog.js","sourceRoot":"","sources":["../../../sources/engine/plugins/catalog.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,sBAAsB,EAAyB,MAAM,iBAAiB,CAAC;AAShF,MAAM,UAAU,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAE5E,SAAS,sBAAsB,CAAC,IAAY;IAC1C,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9D,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,OAAO,CAAC,IAAI,CAAC,GAAG,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACrE,SAAS;QACX,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;YACnD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,eAAe,GAAG,sBAAsB,CAAC,UAAU,CAAC,CAAC;AAE3D,MAAM,UAAU,kBAAkB;IAChC,MAAM,OAAO,GAAG,IAAI,GAAG,EAA4B,CAAC;IAEpD,KAAK,MAAM,cAAc,IAAI,eAAe,EAAE,CAAC;QAC7C,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;QACpD,MAAM,MAAM,GAAG,sBAAsB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;QAC7D,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QAC/C,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;QACxD,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE;YACrB,UAAU,EAAE,MAAM;YAClB,SAAS;YACT,cAAc;YACd,SAAS;SACV,CAAC,CAAC;IACL,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/engine/plugins/descriptor.d.ts

@@ -0,0 +1,22 @@
+import { z } from "zod";
+export declare const pluginDescriptorSchema: z.ZodObject<{
+    id: z.ZodString;
+    name: z.ZodString;
+    description: z.ZodString;
+    entry: z.ZodString;
+    exclusive: z.ZodOptional<z.ZodBoolean>;
+}, "strip", z.ZodTypeAny, {
+    id: string;
+    entry: string;
+    name: string;
+    description: string;
+    exclusive?: boolean | undefined;
+}, {
+    id: string;
+    entry: string;
+    name: string;
+    description: string;
+    exclusive?: boolean | undefined;
+}>;
+export type PluginDescriptor = z.infer<typeof pluginDescriptorSchema>;
+//# sourceMappingURL=descriptor.d.ts.map

package/dist/engine/plugins/descriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"descriptor.d.ts","sourceRoot":"","sources":["../../../sources/engine/plugins/descriptor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;EAMjC,CAAC;AAEH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC"}