kastell 2.2.5 → 2.2.6

package/dist/plugin/handlerResolver.d.ts

@@ -0,0 +1,2 @@
+export declare function resolvePluginHandler(pluginDir: string, handlerPath: string): Promise<(...args: unknown[]) => unknown>;
+//# sourceMappingURL=handlerResolver.d.ts.map

package/dist/plugin/handlerResolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"handlerResolver.d.ts","sourceRoot":"","sources":["../../src/plugin/handlerResolver.ts"],"names":[],"mappings":"AAIA,wBAAsB,oBAAoB,CACxC,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,OAAO,CAAC,CAa1C"}

package/dist/plugin/handlerResolver.js

@@ -0,0 +1,16 @@
+import { resolve } from "path";
+import { pathToFileURL } from "url";
+export async function resolvePluginHandler(pluginDir, handlerPath) {
+    const absPath = resolve(pluginDir, handlerPath);
+    const url = pathToFileURL(absPath).href;
+    const mod = (await import(url));
+    const handler = (typeof mod.default === "function" ? mod.default : mod.default?.handler) ??
+        mod.handler ??
+        mod.fix ??
+        mod.run;
+    if (typeof handler !== "function") {
+        throw new Error(`Plugin handler not found: ${handlerPath}`);
+    }
+    return handler;
+}
+//# sourceMappingURL=handlerResolver.js.map

package/dist/plugin/handlerResolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"handlerResolver.js","sourceRoot":"","sources":["../../src/plugin/handlerResolver.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAC/B,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AAGpC,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,SAAiB,EACjB,WAAmB;IAEnB,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IAChD,MAAM,GAAG,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC;IACxC,MAAM,GAAG,GAAG,CAAC,MAAM,MAAM,CAAC,GAAG,CAAC,CAAuB,CAAC;IACtD,MAAM,OAAO,GACX,CAAC,OAAO,GAAG,CAAC,OAAO,KAAK,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC;QACxE,GAAG,CAAC,OAAO;QACX,GAAG,CAAC,GAAG;QACP,GAAG,CAAC,GAAG,CAAC;IACV,IAAI,OAAO,OAAO,KAAK,UAAU,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,6BAA6B,WAAW,EAAE,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,OAA0C,CAAC;AACpD,CAAC"}

package/dist/plugin/loader.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"loader.d.ts","sourceRoot":"","sources":["../../src/plugin/loader.ts"],"names":[],"mappings":"AAiBA,UAAU,kBAAkB;IAC1B,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CAC/C;AAED,UAAU,iBAAiB;IACzB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,wBAAsB,WAAW,CAC/B,OAAO,CAAC,EAAE,kBAAkB,GAC3B,OAAO,CAAC,iBAAiB,CAAC,CAsG5B"}
+{"version":3,"file":"loader.d.ts","sourceRoot":"","sources":["../../src/plugin/loader.ts"],"names":[],"mappings":"AAiBA,UAAU,kBAAkB;IAC1B,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CAC/C;AAED,UAAU,iBAAiB;IACzB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,wBAAsB,WAAW,CAC/B,OAAO,CAAC,EAAE,kBAAkB,GAC3B,OAAO,CAAC,iBAAiB,CAAC,CAoJ5B"}

package/dist/plugin/loader.js

@@ -3,7 +3,7 @@ import { existsSync, readdirSync, readFileSync } from "fs";
 import { join, resolve, sep } from "path";
 import { pathToFileURL } from "url";
 import { PLUGINS_NODE_MODULES } from "../utils/paths.js";
-import { validateManifest } from "./validate.js";
+import { validateManifest, validateChecks } from "./validate.js";
 import { extractReason } from "../utils/errors.js";
 import { registerPlugin, registerFailedPlugin, clearPluginRegistry, mapRegistryPlugins, savePluginCache, } from "./registry.js";
 export async function loadPlugins(options) {
@@ -64,13 +64,50 @@ export async function loadPlugins(options) {
             registerFailedPlugin(manifest, msg);
             throw new Error(`${dir.name}: import failed — ${msg}`, { cause: err });
         }
-        const moduleObj = mod;
+        const ns = mod;
+        // ESM CJS interop: namespace has .default = module.exports, plus .module.exports = module.exports
+        const moduleObj = (ns.default ?? ns["module.exports"] ?? ns);
         if (!Array.isArray(moduleObj.checks)) {
             registerFailedPlugin(manifest, "module does not export checks array");
             throw new Error(`${dir.name}: module does not export checks array`);
         }
-        const checks = moduleObj.checks;
-        registerPlugin(manifest, checks);
+        let checks;
+        try {
+            checks = validateChecks(moduleObj.checks, manifest.checkPrefix);
+        }
+        catch (err) {
+            const msg = extractReason(err);
+            registerFailedPlugin(manifest, msg);
+            throw new Error(`${dir.name}: check validation failed — ${msg}`, { cause: err });
+        }
+        const enrichedManifest = {
+            ...manifest,
+            commands: moduleObj.commands ?? manifest.commands,
+            mcpTools: moduleObj.mcpTools ?? manifest.mcpTools,
+            fixes: moduleObj.fixes ?? manifest.fixes,
+        };
+        function guardHandlerPath(pluginDir, handler, type) {
+            const resolved = resolve(pluginDir, handler);
+            if (!resolved.startsWith(pluginDir + sep) && resolved !== pluginDir) {
+                throw new Error(`${type} handler escapes plugin directory: ${handler}`);
+            }
+        }
+        if (enrichedManifest.fixes) {
+            for (const fix of enrichedManifest.fixes) {
+                guardHandlerPath(resolvedDir, fix.handler, "fix");
+            }
+        }
+        if (enrichedManifest.commands) {
+            for (const cmd of enrichedManifest.commands) {
+                guardHandlerPath(resolvedDir, cmd.handler, "command");
+            }
+        }
+        if (enrichedManifest.mcpTools) {
+            for (const tool of enrichedManifest.mcpTools) {
+                guardHandlerPath(resolvedDir, tool.handler, "mcpTool");
+            }
+        }
+        registerPlugin(enrichedManifest, checks);
         return manifest.name;
     }));
     for (const result of results) {

package/dist/plugin/loader.js.map

@@ -1 +1 @@
-{"version":3,"file":"loader.js","sourceRoot":"","sources":["../../src/plugin/loader.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AAC3D,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AACpC,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EACL,cAAc,EACd,oBAAoB,EACpB,mBAAmB,EACnB,kBAAkB,EAClB,eAAe,GAChB,MAAM,eAAe,CAAC;AAavB,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,OAA4B;IAE5B,MAAM,QAAQ,GAAG,OAAO,EAAE,QAAQ,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IACjE,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,mBAAmB,EAAE,CAAC;IAEtB,IAAI,CAAC,UAAU,CAAC,oBAAoB,CAAC,EAAE,CAAC;QACtC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAC5B,CAAC;IAED,MAAM,OAAO,GAAG,WAAW,CAAC,oBAAoB,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3E,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAC/B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAC/D,CAAC;IAEF,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAC5B,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CACtC,UAAU,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QAC3B,MAAM,SAAS,GAAG,IAAI,CAAC,oBAAoB,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QACvD,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,EAAE,qBAAqB,CAAC,CAAC;QAE5D,MAAM,cAAc,GAAG,GAAmB,EAAE,CAAC,CAAC;YAC5C,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,OAAO,EAAE,OAAO;YAChB,UAAU,EAAE,GAAG;YACf,OAAO,EAAE,GAAG;YACZ,YAAY,EAAE,CAAC,OAAO,CAAC;YACvB,WAAW,EAAE,oBAAoB;YACjC,KAAK,EAAE,EAAE;SACV,CAAC,CAAC;QAEH,IAAI,WAAmB,CAAC;QACxB,IAAI,CAAC;YACH,WAAW,GAAG,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;QACpD,CAAC;QAAC,MAAM,CAAC;YACP,oBAAoB,CAAC,cAAc,EAAE,EAAE,iCAAiC,CAAC,CAAC;YAC1E,MAAM,IAAI,KAAK,CAAC,GAAG,GAAG,CAAC,IAAI,mCAAmC,CAAC,CAAC;QAClE,CAAC;QAED,IAAI,cAAuB,CAAC;QAC5B,IAAI,CAAC;YACH,cAAc,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAC3C,CAAC;QAAC,MAAM,CAAC;YACP,oBAAoB,CAAC,cAAc,EAAE,EAAE,qCAAqC,CAAC,CAAC;YAC9E,MAAM,IAAI,KAAK,CAAC,GAAG,GAAG,CAAC,IAAI,uCAAuC,CAAC,CAAC;QACtE,CAAC;QAED,MAAM,QAAQ,GAAG,gBAAgB,CAAC,cAAc,CAAC,CAAC;QAElD,MAAM,WAAW,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;QACvC,MAAM,aAAa,GAAG,OAAO,CAAC,WAAW,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC3D,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,WAAW,GAAG,GAAG,CAAC,IAAI,aAAa,KAAK,WAAW,EAAE,CAAC;YAClF,oBAAoB,CAAC,QAAQ,EAAE,mCAAmC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;YACpF,MAAM,IAAI,KAAK,CAAC,GAAG,GAAG,CAAC,IAAI,qCAAqC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;QACpF,CAAC;QAED,MAAM,QAAQ,GAAG,aAAa,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC;QAEnD,IAAI,GAAY,CAAC;QACjB,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACjC,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,MAAM,GAAG,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;YAC/B,oBAAoB,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,GAAG,GAAG,CAAC,IAAI,qBAAqB,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;QACzE,CAAC;QAED,MAAM,SAAS,GAAG,GAA8B,CAAC;QACjD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;YACrC,oBAAoB,CAClB,QAAQ,EACR,qCAAqC,CACtC,CAAC;YACF,MAAM,IAAI,KAAK,CACb,GAAG,GAAG,CAAC,IAAI,uCAAuC,CACnD,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,SAAS,CAAC,MAAuB,CAAC;QACjD,cAAc,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACjC,OAAO,QAAQ,CAAC,IAAI,CAAC;IACvB,CAAC,CAAC,CACH,CAAC;IAEF,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YAClC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5B,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GAAG,kBAAkB,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAChD,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAClD,CAAC,MAAM,CAAC,CAAC,CAAC,EAAuB,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;IACjD,eAAe,CAAC,SAAS,CAAC,CAAC;IAE3B,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AAC5B,CAAC"}
+{"version":3,"file":"loader.js","sourceRoot":"","sources":["../../src/plugin/loader.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AAC3D,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AACpC,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACzD,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AACjE,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EACL,cAAc,EACd,oBAAoB,EACpB,mBAAmB,EACnB,kBAAkB,EAClB,eAAe,GAChB,MAAM,eAAe,CAAC;AAavB,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,OAA4B;IAE5B,MAAM,QAAQ,GAAG,OAAO,EAAE,QAAQ,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IACjE,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,mBAAmB,EAAE,CAAC;IAEtB,IAAI,CAAC,UAAU,CAAC,oBAAoB,CAAC,EAAE,CAAC;QACtC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAC5B,CAAC;IAED,MAAM,OAAO,GAAG,WAAW,CAAC,oBAAoB,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3E,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAC/B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAC/D,CAAC;IAEF,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAC5B,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CACtC,UAAU,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QAC3B,MAAM,SAAS,GAAG,IAAI,CAAC,oBAAoB,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QACvD,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,EAAE,qBAAqB,CAAC,CAAC;QAE5D,MAAM,cAAc,GAAG,GAAmB,EAAE,CAAC,CAAC;YAC5C,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,OAAO,EAAE,OAAO;YAChB,UAAU,EAAE,GAAG;YACf,OAAO,EAAE,GAAG;YACZ,YAAY,EAAE,CAAC,OAAO,CAAC;YACvB,WAAW,EAAE,oBAAoB;YACjC,KAAK,EAAE,EAAE;SACV,CAAC,CAAC;QAEH,IAAI,WAAmB,CAAC;QACxB,IAAI,CAAC;YACH,WAAW,GAAG,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;QACpD,CAAC;QAAC,MAAM,CAAC;YACP,oBAAoB,CAAC,cAAc,EAAE,EAAE,iCAAiC,CAAC,CAAC;YAC1E,MAAM,IAAI,KAAK,CAAC,GAAG,GAAG,CAAC,IAAI,mCAAmC,CAAC,CAAC;QAClE,CAAC;QAED,IAAI,cAAuB,CAAC;QAC5B,IAAI,CAAC;YACH,cAAc,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAC3C,CAAC;QAAC,MAAM,CAAC;YACP,oBAAoB,CAAC,cAAc,EAAE,EAAE,qCAAqC,CAAC,CAAC;YAC9E,MAAM,IAAI,KAAK,CAAC,GAAG,GAAG,CAAC,IAAI,uCAAuC,CAAC,CAAC;QACtE,CAAC;QAED,MAAM,QAAQ,GAAG,gBAAgB,CAAC,cAAc,CAAC,CAAC;QAElD,MAAM,WAAW,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;QACvC,MAAM,aAAa,GAAG,OAAO,CAAC,WAAW,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC3D,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,WAAW,GAAG,GAAG,CAAC,IAAI,aAAa,KAAK,WAAW,EAAE,CAAC;YAClF,oBAAoB,CAAC,QAAQ,EAAE,mCAAmC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;YACpF,MAAM,IAAI,KAAK,CAAC,GAAG,GAAG,CAAC,IAAI,qCAAqC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;QACpF,CAAC;QAED,MAAM,QAAQ,GAAG,aAAa,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC;QAEnD,IAAI,GAAY,CAAC;QACjB,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACjC,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,MAAM,GAAG,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;YAC/B,oBAAoB,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,GAAG,GAAG,CAAC,IAAI,qBAAqB,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;QACzE,CAAC;QAED,MAAM,EAAE,GAAG,GAA8B,CAAC;QAC1C,kGAAkG;QAClG,MAAM,SAAS,GAAG,CAAC,EAAE,CAAC,OAAO,IAAI,EAAE,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAA4B,CAAC;QACxF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;YACrC,oBAAoB,CAClB,QAAQ,EACR,qCAAqC,CACtC,CAAC;YACF,MAAM,IAAI,KAAK,CACb,GAAG,GAAG,CAAC,IAAI,uCAAuC,CACnD,CAAC;QACJ,CAAC;QAED,IAAI,MAAqB,CAAC;QAC1B,IAAI,CAAC;YACH,MAAM,GAAG,cAAc,CAAC,SAAS,CAAC,MAAM,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAC;QAClE,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,MAAM,GAAG,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;YAC/B,oBAAoB,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,GAAG,GAAG,CAAC,IAAI,+BAA+B,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;QACnF,CAAC;QAED,MAAM,gBAAgB,GAAmB;YACvC,GAAG,QAAQ;YACX,QAAQ,EAAG,SAAS,CAAC,QAAwC,IAAI,QAAQ,CAAC,QAAQ;YAClF,QAAQ,EAAG,SAAS,CAAC,QAAwC,IAAI,QAAQ,CAAC,QAAQ;YAClF,KAAK,EAAG,SAAS,CAAC,KAAiC,IAAI,QAAQ,CAAC,KAAK;SACtE,CAAC;QAEF,SAAS,gBAAgB,CACvB,SAAiB,EACjB,OAAe,EACf,IAAY;YAEZ,MAAM,QAAQ,GAAG,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YAC7C,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,SAAS,GAAG,GAAG,CAAC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBACpE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,sCAAsC,OAAO,EAAE,CAAC,CAAC;YAC1E,CAAC;QACH,CAAC;QAED,IAAI,gBAAgB,CAAC,KAAK,EAAE,CAAC;YAC3B,KAAK,MAAM,GAAG,IAAI,gBAAgB,CAAC,KAAK,EAAE,CAAC;gBACzC,gBAAgB,CAAC,WAAW,EAAE,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YACpD,CAAC;QACH,CAAC;QAED,IAAI,gBAAgB,CAAC,QAAQ,EAAE,CAAC;YAC9B,KAAK,MAAM,GAAG,IAAI,gBAAgB,CAAC,QAAQ,EAAE,CAAC;gBAC5C,gBAAgB,CAAC,WAAW,EAAE,GAAG,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;YACxD,CAAC;QACH,CAAC;QAED,IAAI,gBAAgB,CAAC,QAAQ,EAAE,CAAC;YAC9B,KAAK,MAAM,IAAI,IAAI,gBAAgB,CAAC,QAAQ,EAAE,CAAC;gBAC7C,gBAAgB,CAAC,WAAW,EAAE,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;YACzD,CAAC;QACH,CAAC;QAED,cAAc,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC;QACzC,OAAO,QAAQ,CAAC,IAAI,CAAC;IACvB,CAAC,CAAC,CACH,CAAC;IAEF,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YAClC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5B,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GAAG,kBAAkB,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAChD,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAClD,CAAC,MAAM,CAAC,CAAC,CAAC,EAAuB,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;IACjD,eAAe,CAAC,SAAS,CAAC,CAAC;IAE3B,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AAC5B,CAAC"}

package/dist/plugin/registerCommands.d.ts

@@ -0,0 +1,4 @@
+import type { Command } from "commander";
+import type { PluginCommandEntry } from "./registry.js";
+export declare function registerPluginCommands(program: Command, entries: PluginCommandEntry[]): number;
+//# sourceMappingURL=registerCommands.d.ts.map

package/dist/plugin/registerCommands.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registerCommands.d.ts","sourceRoot":"","sources":["../../src/plugin/registerCommands.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAIxD,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,OAAO,EAChB,OAAO,EAAE,kBAAkB,EAAE,GAC5B,MAAM,CA8CR"}

package/dist/plugin/registerCommands.js

@@ -0,0 +1,45 @@
+import { debugLog } from "../utils/logger.js";
+import { resolvePluginHandler } from "./handlerResolver.js";
+export function registerPluginCommands(program, entries) {
+    if (entries.length === 0)
+        return 0;
+    // Dynamic collision check — no static list needed, program.commands is authoritative
+    const existingNames = new Set(program.commands.map(c => c.name()));
+    const grouped = new Map();
+    for (const entry of entries) {
+        const group = grouped.get(entry.pluginShortName) ?? [];
+        group.push(entry);
+        grouped.set(entry.pluginShortName, group);
+    }
+    let count = 0;
+    for (const [shortName, cmds] of grouped) {
+        if (existingNames.has(shortName)) {
+            debugLog?.(`plugin command "${shortName}" collides with built-in command, skipping`);
+            continue;
+        }
+        const pluginCmd = program
+            .command(shortName)
+            .description(`[plugin] ${cmds[0].pluginShortName} commands`);
+        for (const entry of cmds) {
+            pluginCmd
+                .command(entry.command.name)
+                .description(entry.command.description)
+                .action(async (...args) => {
+                const handler = await resolvePluginHandler(entry.pluginDir, entry.command.handler);
+                await handler(args[args.length - 1] ?? {}, {
+                    logger: {
+                        info: (msg) => console.log(msg),
+                        warn: (msg) => console.warn(msg),
+                        error: (msg) => console.error(msg),
+                    },
+                    ssh: async () => {
+                        throw new Error("SSH not available in CLI plugin context — use kastell audit/fix for SSH operations");
+                    },
+                });
+            });
+            count++;
+        }
+    }
+    return count;
+}
+//# sourceMappingURL=registerCommands.js.map

package/dist/plugin/registerCommands.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registerCommands.js","sourceRoot":"","sources":["../../src/plugin/registerCommands.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAE5D,MAAM,UAAU,sBAAsB,CACpC,OAAgB,EAChB,OAA6B;IAE7B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IAEnC,qFAAqF;IACrF,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACnE,MAAM,OAAO,GAAG,IAAI,GAAG,EAAgC,CAAC;IAExD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC;QACvD,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;IAC5C,CAAC;IAED,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,OAAO,EAAE,CAAC;QACxC,IAAI,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YACjC,QAAQ,EAAE,CAAC,mBAAmB,SAAS,4CAA4C,CAAC,CAAC;YACrF,SAAS;QACX,CAAC;QAED,MAAM,SAAS,GAAG,OAAO;aACtB,OAAO,CAAC,SAAS,CAAC;aAClB,WAAW,CAAC,YAAY,IAAI,CAAC,CAAC,CAAC,CAAC,eAAe,WAAW,CAAC,CAAC;QAE/D,KAAK,MAAM,KAAK,IAAI,IAAI,EAAE,CAAC;YACzB,SAAS;iBACN,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;iBAC3B,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC;iBACtC,MAAM,CAAC,KAAK,EAAE,GAAG,IAAe,EAAE,EAAE;gBACnC,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;gBACnF,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;oBACzC,MAAM,EAAE;wBACN,IAAI,EAAE,CAAC,GAAW,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;wBACvC,IAAI,EAAE,CAAC,GAAW,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC;wBACxC,KAAK,EAAE,CAAC,GAAW,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC;qBAC3C;oBACD,GAAG,EAAE,KAAK,IAAI,EAAE;wBACd,MAAM,IAAI,KAAK,CAAC,oFAAoF,CAAC,CAAC;oBACxG,CAAC;iBACF,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YACL,KAAK,EAAE,CAAC;QACV,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/plugin/registry.d.ts

@@ -1,14 +1,33 @@
-import type { PluginManifest, PluginCheck } from "./sdk/types.js";
+import type { PluginManifest, PluginCheck, PluginCommand, PluginMcpTool, PluginFix } from "./sdk/types.js";
 export interface PluginRegistryEntry {
     manifest: PluginManifest;
     checks: PluginCheck[];
     status: "loaded" | "failed";
     reason?: string;
+    commands?: PluginCommand[];
+    mcpTools?: PluginMcpTool[];
+    fixes?: PluginFix[];
+    checksById: ReadonlyMap<string, PluginCheck>;
+    fixesByCheckId: ReadonlyMap<string, PluginFix>;
 }
 export declare function registerPlugin(manifest: PluginManifest, checks: PluginCheck[]): void;
 export declare function registerFailedPlugin(manifest: PluginManifest, reason: string): void;
 export declare function deletePlugin(name: string): void;
 export declare function mapRegistryPlugins<T>(callback: (name: string, entry: PluginRegistryEntry) => T): T[];
+export interface PluginCommandEntry {
+    pluginShortName: string;
+    command: PluginCommand;
+    pluginDir: string;
+}
+export interface PluginMcpToolEntry {
+    pluginShortName: string;
+    toolName: string;
+    tool: PluginMcpTool;
+    pluginDir: string;
+}
+export declare function getShortName(pluginName: string): string;
+export declare function getPluginCommands(): PluginCommandEntry[];
+export declare function getPluginMcpTools(): PluginMcpToolEntry[];
 export declare function clearPluginRegistry(): void;
 export declare function getPluginRegistry(): ReadonlyMap<string, PluginRegistryEntry>;
 export declare function loadPluginCache(): PluginManifest[];

package/dist/plugin/registry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/plugin/registry.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAKlE,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,cAAc,CAAC;IACzB,MAAM,EAAE,WAAW,EAAE,CAAC;IACtB,MAAM,EAAE,QAAQ,GAAG,QAAQ,CAAC;IAC5B,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAMD,wBAAgB,cAAc,CAC5B,QAAQ,EAAE,cAAc,EACxB,MAAM,EAAE,WAAW,EAAE,GACpB,IAAI,CAqCN;AAED,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,cAAc,EACxB,MAAM,EAAE,MAAM,GACb,IAAI,CAON;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAS/C;AAED,wBAAgB,kBAAkB,CAAC,CAAC,EAClC,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,mBAAmB,KAAK,CAAC,GACxD,CAAC,EAAE,CAML;AAED,wBAAgB,mBAAmB,IAAI,IAAI,CAI1C;AAED,wBAAgB,iBAAiB,IAAI,WAAW,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAE5E;AAED,wBAAgB,eAAe,IAAI,cAAc,EAAE,CAalD;AAED,wBAAgB,eAAe,CAAC,SAAS,EAAE,cAAc,EAAE,GAAG,IAAI,CAYjE"}
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/plugin/registry.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,cAAc,EAAE,WAAW,EAAE,aAAa,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAM3G,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,cAAc,CAAC;IACzB,MAAM,EAAE,WAAW,EAAE,CAAC;IACtB,MAAM,EAAE,QAAQ,GAAG,QAAQ,CAAC;IAC5B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,aAAa,EAAE,CAAC;IAC3B,QAAQ,CAAC,EAAE,aAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,EAAE,SAAS,EAAE,CAAC;IACpB,UAAU,EAAE,WAAW,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAC7C,cAAc,EAAE,WAAW,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;CAChD;AAMD,wBAAgB,cAAc,CAC5B,QAAQ,EAAE,cAAc,EACxB,MAAM,EAAE,WAAW,EAAE,GACpB,IAAI,CAkDN;AAED,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,cAAc,EACxB,MAAM,EAAE,MAAM,GACb,IAAI,CASN;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAS/C;AAED,wBAAgB,kBAAkB,CAAC,CAAC,EAClC,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,mBAAmB,KAAK,CAAC,GACxD,CAAC,EAAE,CAML;AAED,MAAM,WAAW,kBAAkB;IACjC,eAAe,EAAE,MAAM,CAAC;IACxB,OAAO,EAAE,aAAa,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,kBAAkB;IACjC,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,aAAa,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,wBAAgB,YAAY,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAEvD;AAED,wBAAgB,iBAAiB,IAAI,kBAAkB,EAAE,CAWxD;AAED,wBAAgB,iBAAiB,IAAI,kBAAkB,EAAE,CAgBxD;AAED,wBAAgB,mBAAmB,IAAI,IAAI,CAI1C;AAED,wBAAgB,iBAAiB,IAAI,WAAW,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAE5E;AAED,wBAAgB,eAAe,IAAI,cAAc,EAAE,CAalD;AAED,wBAAgB,eAAe,CAAC,SAAS,EAAE,cAAc,EAAE,GAAG,IAAI,CAYjE"}

package/dist/plugin/registry.js

@@ -2,8 +2,9 @@ import { readFileSync, existsSync } from "fs";
 import { join } from "path";
 import { ValidationError } from "../utils/errors.js";
 import { secureWriteFileSync, secureMkdirSync } from "../utils/secureWrite.js";
-import { KASTELL_DIR } from "../utils/paths.js";
+import { KASTELL_DIR, PLUGINS_NODE_MODULES } from "../utils/paths.js";
 import { debugLog } from "../utils/logger.js";
+import { PLUGIN_NAME_PREFIX, PLUGIN_TOOL_PREFIX } from "./sdk/constants.js";
 const PLUGIN_CACHE_PATH = join(KASTELL_DIR, "plugin-manifests.json");
 const PLUGIN_REGISTRY = new Map();
 const usedPrefixes = new Map();
@@ -28,10 +29,23 @@ export function registerPlugin(manifest, checks) {
     for (const check of checks) {
         usedCheckIds.add(check.id);
     }
+    const checksById = new Map();
+    for (const check of checks)
+        checksById.set(check.id, check);
+    const fixesByCheckId = new Map();
+    if (manifest.fixes) {
+        for (const fix of manifest.fixes)
+            fixesByCheckId.set(fix.checkId, fix);
+    }
     PLUGIN_REGISTRY.set(manifest.name, {
         manifest,
         checks,
         status: "loaded",
+        commands: manifest.commands,
+        mcpTools: manifest.mcpTools,
+        fixes: manifest.fixes,
+        checksById,
+        fixesByCheckId,
     });
 }
 export function registerFailedPlugin(manifest, reason) {
@@ -40,6 +54,8 @@ export function registerFailedPlugin(manifest, reason) {
         checks: [],
         status: "failed",
         reason,
+        checksById: new Map(),
+        fixesByCheckId: new Map(),
     });
 }
 export function deletePlugin(name) {
@@ -59,6 +75,40 @@ export function mapRegistryPlugins(callback) {
     }
     return results;
 }
+export function getShortName(pluginName) {
+    return pluginName.replace(PLUGIN_NAME_PREFIX, "");
+}
+export function getPluginCommands() {
+    const entries = [];
+    for (const [, entry] of PLUGIN_REGISTRY) {
+        if (entry.status !== "loaded" || !entry.commands?.length)
+            continue;
+        const shortName = getShortName(entry.manifest.name);
+        const pluginDir = join(PLUGINS_NODE_MODULES, entry.manifest.name);
+        for (const cmd of entry.commands) {
+            entries.push({ pluginShortName: shortName, command: cmd, pluginDir });
+        }
+    }
+    return entries;
+}
+export function getPluginMcpTools() {
+    const entries = [];
+    for (const [, entry] of PLUGIN_REGISTRY) {
+        if (entry.status !== "loaded" || !entry.mcpTools?.length)
+            continue;
+        const shortName = getShortName(entry.manifest.name);
+        const pluginDir = join(PLUGINS_NODE_MODULES, entry.manifest.name);
+        for (const tool of entry.mcpTools) {
+            entries.push({
+                pluginShortName: shortName,
+                toolName: `${PLUGIN_TOOL_PREFIX}${shortName}_${tool.name}`,
+                tool,
+                pluginDir,
+            });
+        }
+    }
+    return entries;
+}
 export function clearPluginRegistry() {
     PLUGIN_REGISTRY.clear();
     usedPrefixes.clear();

package/dist/plugin/registry.js.map

@@ -1 +1 @@
-{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/plugin/registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAC9C,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,mBAAmB,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC/E,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAEhD,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAE9C,MAAM,iBAAiB,GAAG,IAAI,CAAC,WAAW,EAAE,uBAAuB,CAAC,CAAC;AASrE,MAAM,eAAe,GAAqC,IAAI,GAAG,EAAE,CAAC;AACpE,MAAM,YAAY,GAAwB,IAAI,GAAG,EAAE,CAAC;AACpD,MAAM,YAAY,GAAgB,IAAI,GAAG,EAAE,CAAC;AAE5C,MAAM,UAAU,cAAc,CAC5B,QAAwB,EACxB,MAAqB;IAErB,IAAI,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,eAAe,CACvB,WAAW,QAAQ,CAAC,IAAI,sBAAsB,CAC/C,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAAG,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC3D,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,IAAI,eAAe,CACvB,gBAAgB,QAAQ,CAAC,WAAW,sBAAsB,WAAW,GAAG,CACzE,CAAC;IACJ,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,QAAQ,CAAC,WAAW,GAAG,CAAC,EAAE,CAAC;YACrD,MAAM,IAAI,eAAe,CACvB,aAAa,KAAK,CAAC,EAAE,sBAAsB,QAAQ,CAAC,WAAW,IAAI,CACpE,CAAC;QACJ,CAAC;QACD,IAAI,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,eAAe,CACvB,aAAa,KAAK,CAAC,EAAE,oCAAoC,CAC1D,CAAC;QACJ,CAAC;IACH,CAAC;IAED,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;IACtD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC7B,CAAC;IAED,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE;QACjC,QAAQ;QACR,MAAM;QACN,MAAM,EAAE,QAAQ;KACjB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,QAAwB,EACxB,MAAc;IAEd,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE;QACjC,QAAQ;QACR,MAAM,EAAE,EAAE;QACV,MAAM,EAAE,QAAQ;QAChB,MAAM;KACP,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,MAAM,KAAK,GAAG,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACxC,IAAI,CAAC,KAAK;QAAE,OAAO;IAEnB,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAChD,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACjC,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAChC,CAAC;IACD,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,QAAyD;IAEzD,MAAM,OAAO,GAAQ,EAAE,CAAC;IACxB,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,eAAe,EAAE,CAAC;QAC5C,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;IACtC,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,mBAAmB;IACjC,eAAe,CAAC,KAAK,EAAE,CAAC;IACxB,YAAY,CAAC,KAAK,EAAE,CAAC;IACrB,YAAY,CAAC,KAAK,EAAE,CAAC;AACvB,CAAC;AAED,MAAM,UAAU,iBAAiB;IAC/B,OAAO,eAAe,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,eAAe;IAC7B,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACnC,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,iBAAiB,EAAE,OAAO,CAAC,CAAC;QACrD,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,OAAO,EAAE,CAAC;QACtC,OAAO,MAA0B,CAAC;IACpC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,QAAQ,EAAE,CAAC,2CAA2C,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QAC1E,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,SAA2B;IACzD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACnD,IAAI,UAAU,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAClC,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,YAAY,CAAC,iBAAiB,EAAE,OAAO,CAAC,CAAC;YAC1D,IAAI,QAAQ,KAAK,OAAO;gBAAE,OAAO;QACnC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,QAAQ,EAAE,CAAC,2CAA2C,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QAC5E,CAAC;IACH,CAAC;IACD,eAAe,CAAC,WAAW,CAAC,CAAC;IAC7B,mBAAmB,CAAC,iBAAiB,EAAE,OAAO,CAAC,CAAC;AAClD,CAAC"}
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/plugin/registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAC9C,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,mBAAmB,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC/E,OAAO,EAAE,WAAW,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAEtE,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAE5E,MAAM,iBAAiB,GAAG,IAAI,CAAC,WAAW,EAAE,uBAAuB,CAAC,CAAC;AAcrE,MAAM,eAAe,GAAqC,IAAI,GAAG,EAAE,CAAC;AACpE,MAAM,YAAY,GAAwB,IAAI,GAAG,EAAE,CAAC;AACpD,MAAM,YAAY,GAAgB,IAAI,GAAG,EAAE,CAAC;AAE5C,MAAM,UAAU,cAAc,CAC5B,QAAwB,EACxB,MAAqB;IAErB,IAAI,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,eAAe,CACvB,WAAW,QAAQ,CAAC,IAAI,sBAAsB,CAC/C,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAAG,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC3D,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,IAAI,eAAe,CACvB,gBAAgB,QAAQ,CAAC,WAAW,sBAAsB,WAAW,GAAG,CACzE,CAAC;IACJ,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,QAAQ,CAAC,WAAW,GAAG,CAAC,EAAE,CAAC;YACrD,MAAM,IAAI,eAAe,CACvB,aAAa,KAAK,CAAC,EAAE,sBAAsB,QAAQ,CAAC,WAAW,IAAI,CACpE,CAAC;QACJ,CAAC;QACD,IAAI,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,eAAe,CACvB,aAAa,KAAK,CAAC,EAAE,oCAAoC,CAC1D,CAAC;QACJ,CAAC;IACH,CAAC;IAED,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;IACtD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC7B,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,GAAG,EAAuB,CAAC;IAClD,KAAK,MAAM,KAAK,IAAI,MAAM;QAAE,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;IAE5D,MAAM,cAAc,GAAG,IAAI,GAAG,EAAqB,CAAC;IACpD,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;QACnB,KAAK,MAAM,GAAG,IAAI,QAAQ,CAAC,KAAK;YAAE,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IACzE,CAAC;IAED,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE;QACjC,QAAQ;QACR,MAAM;QACN,MAAM,EAAE,QAAQ;QAChB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,UAAU;QACV,cAAc;KACf,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,QAAwB,EACxB,MAAc;IAEd,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE;QACjC,QAAQ;QACR,MAAM,EAAE,EAAE;QACV,MAAM,EAAE,QAAQ;QAChB,MAAM;QACN,UAAU,EAAE,IAAI,GAAG,EAAE;QACrB,cAAc,EAAE,IAAI,GAAG,EAAE;KAC1B,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,MAAM,KAAK,GAAG,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACxC,IAAI,CAAC,KAAK;QAAE,OAAO;IAEnB,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAChD,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACjC,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAChC,CAAC;IACD,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,QAAyD;IAEzD,MAAM,OAAO,GAAQ,EAAE,CAAC;IACxB,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,eAAe,EAAE,CAAC;QAC5C,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;IACtC,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAeD,MAAM,UAAU,YAAY,CAAC,UAAkB;IAC7C,OAAO,UAAU,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC;AACpD,CAAC;AAED,MAAM,UAAU,iBAAiB;IAC/B,MAAM,OAAO,GAAyB,EAAE,CAAC;IACzC,KAAK,MAAM,CAAC,EAAE,KAAK,CAAC,IAAI,eAAe,EAAE,CAAC;QACxC,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM;YAAE,SAAS;QACnE,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACpD,MAAM,SAAS,GAAG,IAAI,CAAC,oBAAoB,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAClE,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YACjC,OAAO,CAAC,IAAI,CAAC,EAAE,eAAe,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC;QACxE,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,iBAAiB;IAC/B,MAAM,OAAO,GAAyB,EAAE,CAAC;IACzC,KAAK,MAAM,CAAC,EAAE,KAAK,CAAC,IAAI,eAAe,EAAE,CAAC;QACxC,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM;YAAE,SAAS;QACnE,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACpD,MAAM,SAAS,GAAG,IAAI,CAAC,oBAAoB,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAClE,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YAClC,OAAO,CAAC,IAAI,CAAC;gBACX,eAAe,EAAE,SAAS;gBAC1B,QAAQ,EAAE,GAAG,kBAAkB,GAAG,SAAS,IAAI,IAAI,CAAC,IAAI,EAAE;gBAC1D,IAAI;gBACJ,SAAS;aACV,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,mBAAmB;IACjC,eAAe,CAAC,KAAK,EAAE,CAAC;IACxB,YAAY,CAAC,KAAK,EAAE,CAAC;IACrB,YAAY,CAAC,KAAK,EAAE,CAAC;AACvB,CAAC;AAED,MAAM,UAAU,iBAAiB;IAC/B,OAAO,eAAe,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,eAAe;IAC7B,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACnC,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,iBAAiB,EAAE,OAAO,CAAC,CAAC;QACrD,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,OAAO,EAAE,CAAC;QACtC,OAAO,MAA0B,CAAC;IACpC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,QAAQ,EAAE,CAAC,2CAA2C,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QAC1E,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,SAA2B;IACzD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACnD,IAAI,UAAU,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAClC,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,YAAY,CAAC,iBAAiB,EAAE,OAAO,CAAC,CAAC;YAC1D,IAAI,QAAQ,KAAK,OAAO;gBAAE,OAAO;QACnC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,QAAQ,EAAE,CAAC,2CAA2C,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QAC5E,CAAC;IACH,CAAC;IACD,eAAe,CAAC,WAAW,CAAC,CAAC;IAC7B,mBAAmB,CAAC,iBAAiB,EAAE,OAAO,CAAC,CAAC;AAClD,CAAC"}

package/dist/plugin/sdk/constants.d.ts

@@ -1,3 +1,5 @@
 export declare const PLUGIN_NAME_PATTERN: RegExp;
 export declare const FAILED_PLUGIN_PREFIX = "ERR";
+export declare const PLUGIN_NAME_PREFIX = "kastell-plugin-";
+export declare const PLUGIN_TOOL_PREFIX = "server_plugin_";
 //# sourceMappingURL=constants.d.ts.map

package/dist/plugin/sdk/constants.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../src/plugin/sdk/constants.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,mBAAmB,QAAgC,CAAC;AACjE,eAAO,MAAM,oBAAoB,QAAQ,CAAC"}
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../src/plugin/sdk/constants.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,mBAAmB,QAAgC,CAAC;AACjE,eAAO,MAAM,oBAAoB,QAAQ,CAAC;AAC1C,eAAO,MAAM,kBAAkB,oBAAoB,CAAC;AACpD,eAAO,MAAM,kBAAkB,mBAAmB,CAAC"}

package/dist/plugin/sdk/constants.js

@@ -1,3 +1,5 @@
 export const PLUGIN_NAME_PATTERN = /^kastell-plugin-[a-z0-9-]+$/;
 export const FAILED_PLUGIN_PREFIX = "ERR";
+export const PLUGIN_NAME_PREFIX = "kastell-plugin-";
+export const PLUGIN_TOOL_PREFIX = "server_plugin_";
 //# sourceMappingURL=constants.js.map

package/dist/plugin/sdk/constants.js.map

@@ -1 +1 @@
-{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../../src/plugin/sdk/constants.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,mBAAmB,GAAG,6BAA6B,CAAC;AACjE,MAAM,CAAC,MAAM,oBAAoB,GAAG,KAAK,CAAC"}
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../../src/plugin/sdk/constants.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,mBAAmB,GAAG,6BAA6B,CAAC;AACjE,MAAM,CAAC,MAAM,oBAAoB,GAAG,KAAK,CAAC;AAC1C,MAAM,CAAC,MAAM,kBAAkB,GAAG,iBAAiB,CAAC;AACpD,MAAM,CAAC,MAAM,kBAAkB,GAAG,gBAAgB,CAAC"}

package/dist/plugin/sdk/types.d.ts

@@ -1,13 +1,57 @@
+export type PluginCapability = "audit" | "command" | "mcp-tool" | "fix";
 export type PluginSeverity = "critical" | "warning" | "info";
 export type PluginFixTier = "SAFE" | "GUARDED" | "FORBIDDEN";
+export interface PluginCommand {
+    name: string;
+    description: string;
+    handler: string;
+}
+export interface PluginMcpTool {
+    name: string;
+    description: string;
+    handler: string;
+    inputSchema?: Record<string, unknown>;
+}
+export interface PluginContext {
+    server?: string;
+    ip?: string;
+    ssh: (command: string, options?: {
+        timeoutMs?: number;
+    }) => Promise<{
+        stdout: string;
+        stderr: string;
+        code: number;
+    }>;
+    logger: {
+        info: (msg: string) => void;
+        warn: (msg: string) => void;
+        error: (msg: string) => void;
+    };
+}
+export type PluginCommandHandler = (args: Record<string, unknown>, ctx: PluginContext) => Promise<void>;
+export type PluginMcpToolHandler = (args: Record<string, unknown>, ctx: PluginContext) => Promise<{
+    content: Array<{
+        type: string;
+        text: string;
+    }>;
+}>;
+export interface PluginFix {
+    checkId: string;
+    tier: "SAFE" | "GUARDED";
+    handler: string;
+    backupPaths?: string[];
+}
 export interface PluginManifest {
     name: string;
     version: string;
     apiVersion: string;
     kastell: string;
-    capabilities: Array<"audit">;
+    capabilities: PluginCapability[];
     checkPrefix: string;
     entry: string;
+    commands?: PluginCommand[];
+    mcpTools?: PluginMcpTool[];
+    fixes?: PluginFix[];
 }
 export interface PluginCheck {
     id: string;
@@ -26,4 +70,33 @@ export interface PluginCheck {
         ref: string;
     }>;
 }
+export interface PluginFixContext {
+    ip: string;
+    ssh: (command: string, options?: {
+        timeoutMs?: number;
+    }) => Promise<{
+        stdout: string;
+        stderr: string;
+        code: number;
+    }>;
+    logger: {
+        info: (msg: string) => void;
+        warn: (msg: string) => void;
+        error: (msg: string) => void;
+    };
+    dryRun: boolean;
+    manifest: PluginManifest;
+}
+export interface PluginFixResult {
+    success: boolean;
+    error?: string;
+    modifiedFiles?: string[];
+}
+export type PluginFixHandler = (checkId: string, ctx: PluginFixContext) => Promise<PluginFixResult>;
+export interface PluginModuleExport {
+    default?: Record<string, unknown> | ((...args: unknown[]) => unknown);
+    handler?: (...args: unknown[]) => unknown;
+    run?: (...args: unknown[]) => unknown;
+    fix?: (...args: unknown[]) => unknown;
+}
 //# sourceMappingURL=types.d.ts.map

package/dist/plugin/sdk/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/plugin/sdk/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,cAAc,GAAG,UAAU,GAAG,SAAS,GAAG,MAAM,CAAC;AAC7D,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,SAAS,GAAG,WAAW,CAAC;AAE7D,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IAC7B,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,cAAc,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,cAAc,CAAC,EAAE,KAAK,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC5D"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/plugin/sdk/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,gBAAgB,GAAG,OAAO,GAAG,SAAS,GAAG,UAAU,GAAG,KAAK,CAAC;AACxE,MAAM,MAAM,cAAc,GAAG,UAAU,GAAG,SAAS,GAAG,MAAM,CAAC;AAC7D,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,SAAS,GAAG,WAAW,CAAC;AAE7D,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACvC;AAED,MAAM,WAAW,aAAa;IAC5B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACtH,MAAM,EAAE;QAAE,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;QAAC,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;QAAC,KAAK,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAA;KAAE,CAAC;CACpG;AAED,MAAM,MAAM,oBAAoB,GAAG,CACjC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,GAAG,EAAE,aAAa,KACf,OAAO,CAAC,IAAI,CAAC,CAAC;AAEnB,MAAM,MAAM,oBAAoB,GAAG,CACjC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,GAAG,EAAE,aAAa,KACf,OAAO,CAAC;IAAE,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAAE,CAAC,CAAC;AAEjE,MAAM,WAAW,SAAS;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;CACxB;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,gBAAgB,EAAE,CAAC;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,aAAa,EAAE,CAAC;IAC3B,QAAQ,CAAC,EAAE,aAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,EAAE,SAAS,EAAE,CAAC;CACrB;AAED,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,cAAc,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,cAAc,CAAC,EAAE,KAAK,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC5D;AAED,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACtH,MAAM,EAAE;QAAE,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;QAAC,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;QAAC,KAAK,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAA;KAAE,CAAC;IACnG,MAAM,EAAE,OAAO,CAAC;IAChB,QAAQ,EAAE,cAAc,CAAC;CAC1B;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;CAC1B;AAED,MAAM,MAAM,gBAAgB,GAAG,CAC7B,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,gBAAgB,KAClB,OAAO,CAAC,eAAe,CAAC,CAAC;AAE9B,MAAM,WAAW,kBAAkB;IACjC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,OAAO,CAAC,CAAC;IACtE,OAAO,CAAC,EAAE,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,OAAO,CAAC;IAC1C,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,OAAO,CAAC;IACtC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,OAAO,CAAC;CACvC"}

package/dist/plugin/validate.d.ts

@@ -1,3 +1,4 @@
-import type { PluginManifest } from "./sdk/types.js";
+import type { PluginManifest, PluginCheck } from "./sdk/types.js";
 export declare function validateManifest(manifest: unknown): PluginManifest;
+export declare function validateChecks(checks: unknown, checkPrefix: string): PluginCheck[];
 //# sourceMappingURL=validate.d.ts.map

package/dist/plugin/validate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"validate.d.ts","sourceRoot":"","sources":["../../src/plugin/validate.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAerD,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,OAAO,GAAG,cAAc,CAoBlE"}
+{"version":3,"file":"validate.d.ts","sourceRoot":"","sources":["../../src/plugin/validate.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAoElE,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,OAAO,GAAG,cAAc,CA6DlE;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,GAAG,WAAW,EAAE,CAwBlF"}

package/dist/plugin/validate.js

@@ -3,15 +3,63 @@ import semver from "semver";
 import { ValidationError } from "../utils/errors.js";
 import { KASTELL_VERSION } from "../utils/version.js";
 import { PLUGIN_NAME_PATTERN } from "./sdk/constants.js";
+const HANDLER_PATH_PATTERN = /^\.\/(?!.*\.\.)(?:[a-zA-Z0-9_-]+\/)*[a-zA-Z0-9_-]+\.js$/;
+const PluginCommandSchema = z.object({
+    name: z.string().min(1),
+    description: z.string().min(1),
+    handler: z.string().regex(HANDLER_PATH_PATTERN, "Handler must be relative ./path.js"),
+});
+const PluginMcpToolSchema = z.object({
+    name: z.string().min(1),
+    description: z.string().min(1),
+    handler: z.string().regex(HANDLER_PATH_PATTERN, "Handler must be relative ./path.js"),
+});
+const PluginFixSchema = z.object({
+    checkId: z.string().min(1),
+    tier: z.enum(["SAFE", "GUARDED"]),
+    handler: z.string().regex(HANDLER_PATH_PATTERN, "Handler must be relative ./path.js"),
+    backupPaths: z.array(z.string().regex(/^\//, "Backup path must be absolute")).optional(),
+});
+const PluginCheckSchema = z.object({
+    id: z
+        .string()
+        .regex(/^[A-Z][A-Z0-9_-]{1,63}$/, "Check id must be uppercase alphanumeric/underscore/dash, 2-64 chars"),
+    category: z.string().min(1),
+    name: z.string().min(1),
+    severity: z.enum(["critical", "warning", "info"]),
+    description: z.string().optional(),
+    checkCommand: z
+        .string()
+        .min(1)
+        .refine((s) => !s.includes("---SECTION:"), "checkCommand must not contain '---SECTION:' substring")
+        .refine((s) => !s.includes("KASTELL_PLUGIN_CHECK_EOF"), "checkCommand must not contain heredoc tag 'KASTELL_PLUGIN_CHECK_EOF'")
+        .refine((s) => !/\r/.test(s), "checkCommand must not contain CR characters"),
+    passPattern: z.string().optional(),
+    failPattern: z.string().optional(),
+    fixCommand: z.string().optional(),
+    safeToAutoFix: z.enum(["SAFE", "GUARDED", "FORBIDDEN"]).optional(),
+    explain: z
+        .union([
+        z.string(),
+        z.object({ why: z.string(), fix: z.string() }),
+    ])
+        .optional(),
+    complianceRefs: z
+        .array(z.object({ framework: z.string(), ref: z.string() }))
+        .optional(),
+});
 const PluginManifestSchema = z
     .object({
     name: z.string().regex(PLUGIN_NAME_PATTERN, "Name must match kastell-plugin-<lowercase>"),
     version: z.string().regex(/^\d+\.\d+\.\d+$/, "Version must be semver (X.Y.Z)"),
     apiVersion: z.literal("1"),
     kastell: z.string().min(1, "Kastell version range required"),
-    capabilities: z.tuple([z.literal("audit")]),
+    capabilities: z.array(z.enum(["audit", "command", "mcp-tool", "fix"])).min(1),
     checkPrefix: z.string().regex(/^[A-Z]{2,6}$/, "checkPrefix must be 2-6 uppercase letters"),
     entry: z.string().min(1, "Entry point required"),
+    commands: z.array(PluginCommandSchema).optional(),
+    mcpTools: z.array(PluginMcpToolSchema).optional(),
+    fixes: z.array(PluginFixSchema).optional(),
 })
     .strict();
 export function validateManifest(manifest) {
@@ -26,6 +74,63 @@ export function validateManifest(manifest) {
     if (!semver.satisfies(KASTELL_VERSION, parsed.data.kastell)) {
         throw new ValidationError(`Plugin requires Kastell ${parsed.data.kastell}, current: ${KASTELL_VERSION}`);
     }
+    if (parsed.data.fixes) {
+        for (const fix of parsed.data.fixes) {
+            if (!fix.checkId.startsWith(parsed.data.checkPrefix + "-")) {
+                throw new ValidationError(`Fix checkId "${fix.checkId}" must start with plugin prefix "${parsed.data.checkPrefix}-"`);
+            }
+        }
+    }
+    if (parsed.data.commands) {
+        const names = parsed.data.commands.map((c) => c.name);
+        if (names.length !== new Set(names).size) {
+            throw new ValidationError("Duplicate command names are not allowed");
+        }
+    }
+    if (parsed.data.mcpTools) {
+        const names = parsed.data.mcpTools.map((m) => m.name);
+        if (names.length !== new Set(names).size) {
+            throw new ValidationError("Duplicate mcpTool names are not allowed");
+        }
+    }
+    if (parsed.data.fixes) {
+        const checkIds = parsed.data.fixes.map((f) => f.checkId);
+        if (checkIds.length !== new Set(checkIds).size) {
+            throw new ValidationError("Duplicate fix checkIds are not allowed");
+        }
+    }
+    if (parsed.data.commands && !parsed.data.capabilities.includes("command")) {
+        throw new ValidationError("commands field requires 'command' capability");
+    }
+    if (parsed.data.mcpTools && !parsed.data.capabilities.includes("mcp-tool")) {
+        throw new ValidationError("mcpTools field requires 'mcp-tool' capability");
+    }
+    if (parsed.data.fixes && !parsed.data.capabilities.includes("fix")) {
+        throw new ValidationError("fixes field requires 'fix' capability");
+    }
     return parsed.data;
 }
+export function validateChecks(checks, checkPrefix) {
+    if (!Array.isArray(checks)) {
+        throw new ValidationError("Plugin checks must be an array");
+    }
+    const parsed = [];
+    const seen = new Set();
+    for (let i = 0; i < checks.length; i++) {
+        const result = PluginCheckSchema.safeParse(checks[i]);
+        if (!result.success) {
+            throw new ValidationError(`Invalid plugin check at index ${i}: ${result.error.message}`);
+        }
+        const check = result.data;
+        if (!check.id.startsWith(checkPrefix + "-")) {
+            throw new ValidationError(`Check id "${check.id}" must start with plugin prefix "${checkPrefix}-"`);
+        }
+        if (seen.has(check.id)) {
+            throw new ValidationError(`Duplicate check id "${check.id}" within plugin`);
+        }
+        seen.add(check.id);
+        parsed.push(check);
+    }
+    return parsed;
+}
 //# sourceMappingURL=validate.js.map

package/dist/plugin/validate.js.map

@@ -1 +1 @@
-{"version":3,"file":"validate.js","sourceRoot":"","sources":["../../src/plugin/validate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,MAAM,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAEtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAEzD,MAAM,oBAAoB,GAAG,CAAC;KAC3B,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,mBAAmB,EAAE,4CAA4C,CAAC;IACzF,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,iBAAiB,EAAE,gCAAgC,CAAC;IAC9E,UAAU,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC;IAC1B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,gCAAgC,CAAC;IAC5D,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,cAAc,EAAE,2CAA2C,CAAC;IAC1F,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,sBAAsB,CAAC;CACjD,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,UAAU,gBAAgB,CAAC,QAAiB;IAChD,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IACxD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,eAAe,CAAC,4BAA4B,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IAChF,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACrD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,eAAe,CACvB,mCAAmC,MAAM,CAAC,IAAI,CAAC,OAAO,GAAG,CAC1D,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,eAAe,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5D,MAAM,IAAI,eAAe,CACvB,2BAA2B,MAAM,CAAC,IAAI,CAAC,OAAO,cAAc,eAAe,EAAE,CAC9E,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC"}
+{"version":3,"file":"validate.js","sourceRoot":"","sources":["../../src/plugin/validate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,MAAM,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAEtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAEzD,MAAM,oBAAoB,GAAG,yDAAyD,CAAC;AAEvF,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,oBAAoB,EAAE,oCAAoC,CAAC;CACtF,CAAC,CAAC;AAEH,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,oBAAoB,EAAE,oCAAoC,CAAC;CACtF,CAAC,CAAC;AAEH,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACjC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,oBAAoB,EAAE,oCAAoC,CAAC;IACrF,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,8BAA8B,CAAC,CAAC,CAAC,QAAQ,EAAE;CACzF,CAAC,CAAC;AAEH,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,EAAE,EAAE,CAAC;SACF,MAAM,EAAE;SACR,KAAK,CAAC,yBAAyB,EAAE,qEAAqE,CAAC;IAC1G,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IACjD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,YAAY,EAAE,CAAC;SACZ,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,uDAAuD,CAAC;SAClG,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,0BAA0B,CAAC,EAAE,sEAAsE,CAAC;SAC9H,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,6CAA6C,CAAC;IAC9E,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,aAAa,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC,QAAQ,EAAE;IAClE,OAAO,EAAE,CAAC;SACP,KAAK,CAAC;QACL,CAAC,CAAC,MAAM,EAAE;QACV,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;KAC/C,CAAC;SACD,QAAQ,EAAE;IACb,cAAc,EAAE,CAAC;SACd,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;SAC3D,QAAQ,EAAE;CACd,CAAC,CAAC;AAEH,MAAM,oBAAoB,GAAG,CAAC;KAC3B,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,mBAAmB,EAAE,4CAA4C,CAAC;IACzF,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,iBAAiB,EAAE,gCAAgC,CAAC;IAC9E,UAAU,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC;IAC1B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,gCAAgC,CAAC;IAC5D,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7E,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,cAAc,EAAE,2CAA2C,CAAC;IAC1F,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,sBAAsB,CAAC;IAChD,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,QAAQ,EAAE;IACjD,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,QAAQ,EAAE;IACjD,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,QAAQ,EAAE;CAC3C,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,UAAU,gBAAgB,CAAC,QAAiB;IAChD,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IACxD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,eAAe,CAAC,4BAA4B,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IAChF,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACrD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,eAAe,CACvB,mCAAmC,MAAM,CAAC,IAAI,CAAC,OAAO,GAAG,CAC1D,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,eAAe,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5D,MAAM,IAAI,eAAe,CACvB,2BAA2B,MAAM,CAAC,IAAI,CAAC,OAAO,cAAc,eAAe,EAAE,CAC9E,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QACtB,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YACpC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,GAAG,GAAG,CAAC,EAAE,CAAC;gBAC3D,MAAM,IAAI,eAAe,CACvB,gBAAgB,GAAG,CAAC,OAAO,oCAAoC,MAAM,CAAC,IAAI,CAAC,WAAW,IAAI,CAC3F,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACtD,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;YACzC,MAAM,IAAI,eAAe,CAAC,yCAAyC,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACtD,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;YACzC,MAAM,IAAI,eAAe,CAAC,yCAAyC,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QACtB,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QACzD,IAAI,QAAQ,CAAC,MAAM,KAAK,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;YAC/C,MAAM,IAAI,eAAe,CAAC,wCAAwC,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QAC1E,MAAM,IAAI,eAAe,CAAC,8CAA8C,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3E,MAAM,IAAI,eAAe,CAAC,+CAA+C,CAAC,CAAC;IAC7E,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACnE,MAAM,IAAI,eAAe,CAAC,uCAAuC,CAAC,CAAC;IACrE,CAAC;IAED,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,MAAe,EAAE,WAAmB;IACjE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,eAAe,CAAC,gCAAgC,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,MAAM,GAAkB,EAAE,CAAC;IACjC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,MAAM,MAAM,GAAG,iBAAiB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QACtD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,IAAI,eAAe,CAAC,iCAAiC,CAAC,KAAK,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAC3F,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC;QAC1B,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,UAAU,CAAC,WAAW,GAAG,GAAG,CAAC,EAAE,CAAC;YAC5C,MAAM,IAAI,eAAe,CACvB,aAAa,KAAK,CAAC,EAAE,oCAAoC,WAAW,IAAI,CACzE,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,eAAe,CAAC,uBAAuB,KAAK,CAAC,EAAE,iBAAiB,CAAC,CAAC;QAC9E,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACnB,MAAM,CAAC,IAAI,CAAC,KAAoB,CAAC,CAAC;IACpC,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}