kibi-cli 2.2.0 → 2.4.0

package/dist/performance-trace.js

@@ -0,0 +1,134 @@
+import { constants } from "node:fs";
+import { closeSync, existsSync, lstatSync, openSync, realpathSync, statSync, writeSync, } from "node:fs";
+import path from "node:path";
+export const KIBI_PERF_TRACE_DIR_ENV = "KIBI_PERF_TRACE_DIR";
+export const KIBI_PERF_TIMINGS_ENV = "KIBI_PERF_TIMINGS";
+export const KIBI_PERF_TRACE_MAX_EVENTS = 5_000;
+export const KIBI_PERF_TRACE_MAX_BYTES = 512 * 1024;
+const states = new Map();
+const MAX_DURATION_MS = 60_000;
+const TRACE_LIMIT_RESERVE_BYTES = 96;
+function isWithin(parent, candidate) {
+    const relative = path.relative(parent, candidate);
+    return (relative === "" ||
+        (relative !== ".." &&
+            !relative.startsWith(`..${path.sep}`) &&
+            !path.isAbsolute(relative)));
+}
+function privateTraceFile() {
+    if (process.env[KIBI_PERF_TIMINGS_ENV] !== "1")
+        return null;
+    const configuredDirectory = process.env[KIBI_PERF_TRACE_DIR_ENV];
+    if (!configuredDirectory || !path.isAbsolute(configuredDirectory))
+        return null;
+    try {
+        const directoryInfo = lstatSync(configuredDirectory);
+        if (!directoryInfo.isDirectory() || directoryInfo.isSymbolicLink()) {
+            return null;
+        }
+        const directory = realpathSync(configuredDirectory);
+        if (path.resolve(configuredDirectory) !== directory)
+            return null;
+        const directoryStats = statSync(directory);
+        if (typeof process.getuid !== "function" ||
+            directoryStats.uid !== process.getuid()) {
+            return null;
+        }
+        if ((directoryStats.mode & 0o077) !== 0) {
+            return null;
+        }
+        const currentDirectory = realpathSync(process.cwd());
+        if (isWithin(currentDirectory, directory))
+            return null;
+        const file = path.join(directory, `kibi-performance-${process.pid}.jsonl`);
+        let state = states.get(file);
+        if (!state) {
+            if (existsSync(file))
+                return null;
+            state = { bytes: 0, events: 0, disabled: false };
+            states.set(file, state);
+        }
+        if (state.disabled)
+            return null;
+        return { file, state };
+    }
+    catch {
+        return null;
+    }
+}
+function writeAll(fd, bytes) {
+    let offset = 0;
+    while (offset < bytes.length) {
+        const written = writeSync(fd, bytes, offset, bytes.length - offset);
+        if (written <= 0)
+            throw new Error("Performance trace write made no progress");
+        offset += written;
+    }
+}
+function appendLine(file, state, line, exclusive) {
+    const fileInfo = existsSync(file) ? lstatSync(file) : null;
+    if ((exclusive && fileInfo !== null) ||
+        (!exclusive &&
+            (!fileInfo?.isFile() ||
+                fileInfo.isSymbolicLink() ||
+                fileInfo.size !== state.bytes))) {
+        throw new Error("Performance trace file changed unexpectedly");
+    }
+    const flags = constants.O_WRONLY |
+        constants.O_CREAT |
+        constants.O_APPEND |
+        (constants.O_NOFOLLOW ?? 0) |
+        (exclusive ? constants.O_EXCL : 0);
+    const fd = openSync(file, flags, 0o600);
+    try {
+        const bytes = Buffer.from(line, "utf8");
+        writeAll(fd, bytes);
+        state.bytes += bytes.length;
+    }
+    finally {
+        closeSync(fd);
+    }
+}
+function appendLimitMarker(file, state, limit) {
+    const marker = `${JSON.stringify({ kind: "trace-limit", pid: process.pid, limit })}\n`;
+    const byteLength = Buffer.byteLength(marker, "utf8");
+    if (state.bytes + byteLength <= KIBI_PERF_TRACE_MAX_BYTES) {
+        appendLine(file, state, marker, state.events === 0);
+    }
+    state.disabled = true;
+}
+/**
+ * Append one bounded, payload-free timing observation to the explicitly
+ * supplied private host trace directory. Trace I/O is best-effort and never
+ * changes the operation result.
+ */
+export function writePerformanceTraceEvent(event) {
+    if (!Number.isFinite(event.durationMs) ||
+        event.durationMs < 0 ||
+        event.durationMs > MAX_DURATION_MS) {
+        return;
+    }
+    const trace = privateTraceFile();
+    if (!trace)
+        return;
+    const durationMs = Math.round(event.durationMs * 1000) / 1000;
+    const line = `${JSON.stringify({
+        kind: event.kind,
+        durationMs,
+        pid: process.pid,
+    })}\n`;
+    const byteLength = Buffer.byteLength(line, "utf8");
+    try {
+        if (trace.state.events >= KIBI_PERF_TRACE_MAX_EVENTS ||
+            trace.state.bytes + byteLength >
+                KIBI_PERF_TRACE_MAX_BYTES - TRACE_LIMIT_RESERVE_BYTES) {
+            appendLimitMarker(trace.file, trace.state, trace.state.events >= KIBI_PERF_TRACE_MAX_EVENTS ? "events" : "bytes");
+            return;
+        }
+        appendLine(trace.file, trace.state, line, trace.state.events === 0);
+        trace.state.events += 1;
+    }
+    catch {
+        trace.state.disabled = true;
+    }
+}

package/dist/plugins/approved-source-analyzers.d.ts

@@ -0,0 +1,13 @@
+/** Release-qualified executable and asset closure. Updated only after qualification. */
+export interface ApprovedSourceAnalyzer {
+    packageName: string;
+    version: string;
+    files: Readonly<Record<string, string>>;
+    dependencies: readonly {
+        packageName: string;
+        version: string;
+        files: Readonly<Record<string, string>>;
+    }[];
+}
+export declare const APPROVED_SOURCE_ANALYZERS: readonly ApprovedSourceAnalyzer[];
+//# sourceMappingURL=approved-source-analyzers.d.ts.map

package/dist/plugins/approved-source-analyzers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"approved-source-analyzers.d.ts","sourceRoot":"","sources":["../../src/plugins/approved-source-analyzers.ts"],"names":[],"mappings":"AAEA,wFAAwF;AAExF,MAAM,WAAW,sBAAsB;IACrC,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACxC,YAAY,EAAE,SAAS;QACrB,WAAW,EAAE,MAAM,CAAC;QACpB,OAAO,EAAE,MAAM,CAAC;QAChB,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;KACzC,EAAE,CAAC;CACL;AAGD,eAAO,MAAM,yBAAyB,EAAE,SAAS,sBAAsB,EAC7C,CAAC"}

package/dist/plugins/approved-source-analyzers.generated.d.ts

@@ -0,0 +1,71 @@
+export declare const qualifiedSourceAnalyzers: readonly [{
+    readonly packageName: "kibi-plugin-treesitter";
+    readonly version: "1.0.0";
+    readonly files: {
+        readonly "SBOM.spdx.json": "92cf77d240ffc1e95116edd4742363e34ead66b455dbf940f24321a19e7f9571";
+        readonly "THIRD_PARTY_NOTICES.md": "0b1ede96cb261dab73fd1ec8c51d7bb5b2492eed0502f6c10ed071736daa263c";
+        readonly "assets/queries/bash.scm": "6ca535e8fe652b51203ac272831881dab001f7ac508e50551bc2cdc4a15d7b6c";
+        readonly "assets/queries/c.scm": "774ca67cfe23b0e0d1d3a4f01788049a822beb1311feee72b20a595a37be1e28";
+        readonly "assets/queries/cpp-extra.scm": "7cf486901eaf7e9196bc2c5dfe83785eed70d367136f8008af37eb4f1c12a68a";
+        readonly "assets/queries/cpp.scm": "029731ca946e32f919491d9f76c85a50e5deb5ad1934e37fd6849312c0d4a705";
+        readonly "assets/queries/csharp-extra.scm": "d3a55c3c67cb236921da5785d08d146ba53f70d9e2af83a365f59954f8878a57";
+        readonly "assets/queries/csharp.scm": "4ed08da0162ecd48206ac34bebe7ea9757a8c7b617f6ad8f70c168d685d514fe";
+        readonly "assets/queries/go.scm": "d1a9b1f678fe0278b85054e2dc56a28ef26aa478b8c88fb2b0dd83cdcdb9db35";
+        readonly "assets/queries/hcl.scm": "cad52e3fd81bc5584ea181c920bdb8fa4be007f05f8c5e08f95e9ccb40aee93a";
+        readonly "assets/queries/java-extra.scm": "5ce7857f2b52c10b3672bc09f39f287cff2eaa7caa0b75dafccbaa5fec58431d";
+        readonly "assets/queries/java.scm": "bcb22147b8582d92743fc973864cefb894a4c12b3957f16f3d472b2ec7cd4c49";
+        readonly "assets/queries/php.scm": "4ac5e30f99f3abe5417dcb42219e0790c66f9b4bb3be071bc60160dd012f3cd8";
+        readonly "assets/queries/python.scm": "d0f3e577878167bfabc30e526e497bce58d1699b9bcabf8ab3a50698efb5ca3e";
+        readonly "assets/queries/ruby.scm": "ed1e7dc07a95b87aef267e7f9715c6717a70f09efbd7b6f48bbd51c7b7510cf3";
+        readonly "assets/queries/rust-extra.scm": "511a492200e813f15b7ebec324eae69a245986a9d6813ddabe776075fd65976c";
+        readonly "assets/queries/rust.scm": "f22867fdebde5cb091861c08d34690dc2540f4318068bf81be9f6b0d348ab8c1";
+        readonly "assets/queries/terraform.scm": "8a6974a8eb48e13b5b8cd64e7c81262a825b4251df01ab383aee5cdda8151e7e";
+        readonly "assets/tree-sitter-bash.wasm": "8292919c88a0f7d3fb31d0cd0253ca5a9531bc1ede82b0537f2c63dd8abe6a7a";
+        readonly "assets/tree-sitter-c.wasm": "c852c2a85ebf2beb636aa3b0ef7f7e70458684d74f6741b20dcb296885bed9f9";
+        readonly "assets/tree-sitter-c_sharp.wasm": "6f69e1cae44e1c32c1eccc170dc5a9778fb94ff716f71113fe1f8c4299aa2f40";
+        readonly "assets/tree-sitter-cpp.wasm": "174eb0deb75b2ec7881bcacda9f995648d8e683956e5c2267e69ab6dc503fcbf";
+        readonly "assets/tree-sitter-go.wasm": "9504573f352b20be7f2f1911754d710622aedc15afff16d5ed8fb5645681aee7";
+        readonly "assets/tree-sitter-hcl.release.wasm": "2f9acf63e7c263215f283e2cf0f4ebbb9bfa77f58e18fa42b91094be201372a7";
+        readonly "assets/tree-sitter-java.wasm": "4fdeac4ca6ca089f06c6f7e562abcac1733cd465728cc7031ebb73c2019122c4";
+        readonly "assets/tree-sitter-php.wasm": "d4df6a6ff08c87c3ec4f9cbb785fe09998a0cb570e03f57d7b19b3acfb146aa7";
+        readonly "assets/tree-sitter-python.wasm": "16108b50df4ee9a30168794252ab55e7c93bfc5765d7fa0aa3e335752c515f47";
+        readonly "assets/tree-sitter-ruby.wasm": "09a96427d7c72f0613ed470cd9812223fc4a91d6a9c025c0235cc6bd59ff96f4";
+        readonly "assets/tree-sitter-rust.wasm": "f65f354215611fd94ad34134b3427eb3d58cbb745df7b6509ba722184db73d57";
+        readonly "assets/tree-sitter-terraform.release.wasm": "59dbcbb0f08eb78b78f37510834559a48ce5c9d4866c978d62c6390796461cb5";
+        readonly "catalog.json": "4075d988391b8c893f47722fb85f93d626d700af9b2a1b4909fd20ef0ec989b4";
+        readonly "dist/analysis-worker.js": "75a1e646f636c1d1ace9ae22a9141a51e94bddc70203bed08de7bd13dae1764e";
+        readonly "dist/catalog.js": "460243c48cb6a03b8c7971273729d8a1134955186978b6c0d04182c71960ebff";
+        readonly "dist/extractor.js": "1d8cd819e7ec8fcc291a44e5ffe4ccfe77099301677913fcfe0d92e7ce971f33";
+        readonly "dist/index.js": "adc03d77d94c0133b3188950b35f79db19e447cf7bfa1f7e1cf1f5c97a582a44";
+        readonly "dist/performance-timing.js": "56cce530f627c8fd079e8ec070322f84378ae50c40a6765d88b418850692940b";
+        readonly "integrity.json": "4f1530009fdf5f087ab0b7adcae062ca141f76aa6e5acdb20c695fee963dec38";
+        readonly "licenses/tree-sitter-bash-MIT.txt": "49bf33cf78ef5897e4e161ce1517df7de1ae5042a65b6bcfd44401e0fc606559";
+        readonly "licenses/tree-sitter-c-MIT.txt": "2e0110e07abef7c2548b26ec9d6969775617ca539a0dc8dbeeb14d6452c711d1";
+        readonly "licenses/tree-sitter-c-sharp-MIT.txt": "778fb7d63b8c1844da315648c02f325c4713a6f4a5d19644fd413421422776d3";
+        readonly "licenses/tree-sitter-cpp-MIT.txt": "2e0110e07abef7c2548b26ec9d6969775617ca539a0dc8dbeeb14d6452c711d1";
+        readonly "licenses/tree-sitter-go-MIT.txt": "2e0110e07abef7c2548b26ec9d6969775617ca539a0dc8dbeeb14d6452c711d1";
+        readonly "licenses/tree-sitter-hcl-Apache-2.0.txt": "c71d239df91726fc519c6eb72d318ec65820627232b2f796219e87dcf35d0ab4";
+        readonly "licenses/tree-sitter-java-MIT.txt": "52ed137b039cd9c46409bc22e89938af911c95b157feae2d040b51e6084369a7";
+        readonly "licenses/tree-sitter-php-MIT.txt": "664764fabf40c0b318e06324a5a12379092a2df25b8cbf2415f71bc0bb352346";
+        readonly "licenses/tree-sitter-python-MIT.txt": "d724405ce238a22c0d35769c5a36b386ad5958192efe8bbb304fb2896254575f";
+        readonly "licenses/tree-sitter-ruby-MIT.txt": "9c99b99e93d3c6461bef9f6bac45d17b8bf014172625c24f76319bbd235a7b80";
+        readonly "licenses/tree-sitter-rust-MIT.txt": "31d5b6f4243d5c7c6e1c4ebbbb9f6407bd1457a08bcc4f706521710341acba36";
+        readonly "licenses/web-tree-sitter-MIT.txt": "c5cfb43042b6b72045f4ba997834d0a7786d2793d91680868b5815b39f14fc78";
+        readonly "package.json": "433313c71ef7951eb8cb58d855089f08ccab583405ab85d6a417d9309782356c";
+    };
+    readonly dependencies: readonly [{
+        readonly packageName: "web-tree-sitter";
+        readonly version: "0.27.0";
+        readonly files: {
+            readonly LICENSE: "c5cfb43042b6b72045f4ba997834d0a7786d2793d91680868b5815b39f14fc78";
+            readonly "debug/web-tree-sitter.cjs": "3faca4a6e5a006ec8e95a8e1918923ee9a385a02f64154fb2a893d5a27200f24";
+            readonly "debug/web-tree-sitter.js": "4cd02f4b5510044807279f7064e6bcceab391af3c245fc9b6da2de7b1116ff84";
+            readonly "debug/web-tree-sitter.wasm": "91a157f507fabb836588e6537a1af1bae45d3d4b9278d06d003678460b011d8e";
+            readonly "package.json": "707dd14277ba63ca8dcaad6b6df8051e23df78c878b5cbdc27885b3cfd72bfac";
+            readonly "web-tree-sitter.cjs": "743de33347202f863b6714fc7218c455d93f751943d43500500f6c5c65654dce";
+            readonly "web-tree-sitter.js": "7c49e3c1d87e24e0bb4c2def909d17154dfde281f5f8280225450090bb4b8110";
+            readonly "web-tree-sitter.wasm": "c03bccdc3b448a32848f5ae327e209c982bbb0840d43eec8bc2d5759544a1ed3";
+        };
+    }];
+}];
+//# sourceMappingURL=approved-source-analyzers.generated.d.ts.map

package/dist/plugins/approved-source-analyzers.generated.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"approved-source-analyzers.generated.d.ts","sourceRoot":"","sources":["../../src/plugins/approved-source-analyzers.generated.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAmI3B,CAAC"}

package/dist/plugins/approved-source-analyzers.generated.js

@@ -0,0 +1,77 @@
+// Generated by scripts/qualify-source-analyzers.mjs after release qualification.
+// Do not approve changed bytes without reviewing the executable and asset closure.
+// implements REQ-source-analysis-v2
+export const qualifiedSourceAnalyzers = [
+    {
+        packageName: "kibi-plugin-treesitter",
+        version: "1.0.0",
+        files: {
+            "SBOM.spdx.json": "92cf77d240ffc1e95116edd4742363e34ead66b455dbf940f24321a19e7f9571",
+            "THIRD_PARTY_NOTICES.md": "0b1ede96cb261dab73fd1ec8c51d7bb5b2492eed0502f6c10ed071736daa263c",
+            "assets/queries/bash.scm": "6ca535e8fe652b51203ac272831881dab001f7ac508e50551bc2cdc4a15d7b6c",
+            "assets/queries/c.scm": "774ca67cfe23b0e0d1d3a4f01788049a822beb1311feee72b20a595a37be1e28",
+            "assets/queries/cpp-extra.scm": "7cf486901eaf7e9196bc2c5dfe83785eed70d367136f8008af37eb4f1c12a68a",
+            "assets/queries/cpp.scm": "029731ca946e32f919491d9f76c85a50e5deb5ad1934e37fd6849312c0d4a705",
+            "assets/queries/csharp-extra.scm": "d3a55c3c67cb236921da5785d08d146ba53f70d9e2af83a365f59954f8878a57",
+            "assets/queries/csharp.scm": "4ed08da0162ecd48206ac34bebe7ea9757a8c7b617f6ad8f70c168d685d514fe",
+            "assets/queries/go.scm": "d1a9b1f678fe0278b85054e2dc56a28ef26aa478b8c88fb2b0dd83cdcdb9db35",
+            "assets/queries/hcl.scm": "cad52e3fd81bc5584ea181c920bdb8fa4be007f05f8c5e08f95e9ccb40aee93a",
+            "assets/queries/java-extra.scm": "5ce7857f2b52c10b3672bc09f39f287cff2eaa7caa0b75dafccbaa5fec58431d",
+            "assets/queries/java.scm": "bcb22147b8582d92743fc973864cefb894a4c12b3957f16f3d472b2ec7cd4c49",
+            "assets/queries/php.scm": "4ac5e30f99f3abe5417dcb42219e0790c66f9b4bb3be071bc60160dd012f3cd8",
+            "assets/queries/python.scm": "d0f3e577878167bfabc30e526e497bce58d1699b9bcabf8ab3a50698efb5ca3e",
+            "assets/queries/ruby.scm": "ed1e7dc07a95b87aef267e7f9715c6717a70f09efbd7b6f48bbd51c7b7510cf3",
+            "assets/queries/rust-extra.scm": "511a492200e813f15b7ebec324eae69a245986a9d6813ddabe776075fd65976c",
+            "assets/queries/rust.scm": "f22867fdebde5cb091861c08d34690dc2540f4318068bf81be9f6b0d348ab8c1",
+            "assets/queries/terraform.scm": "8a6974a8eb48e13b5b8cd64e7c81262a825b4251df01ab383aee5cdda8151e7e",
+            "assets/tree-sitter-bash.wasm": "8292919c88a0f7d3fb31d0cd0253ca5a9531bc1ede82b0537f2c63dd8abe6a7a",
+            "assets/tree-sitter-c.wasm": "c852c2a85ebf2beb636aa3b0ef7f7e70458684d74f6741b20dcb296885bed9f9",
+            "assets/tree-sitter-c_sharp.wasm": "6f69e1cae44e1c32c1eccc170dc5a9778fb94ff716f71113fe1f8c4299aa2f40",
+            "assets/tree-sitter-cpp.wasm": "174eb0deb75b2ec7881bcacda9f995648d8e683956e5c2267e69ab6dc503fcbf",
+            "assets/tree-sitter-go.wasm": "9504573f352b20be7f2f1911754d710622aedc15afff16d5ed8fb5645681aee7",
+            "assets/tree-sitter-hcl.release.wasm": "2f9acf63e7c263215f283e2cf0f4ebbb9bfa77f58e18fa42b91094be201372a7",
+            "assets/tree-sitter-java.wasm": "4fdeac4ca6ca089f06c6f7e562abcac1733cd465728cc7031ebb73c2019122c4",
+            "assets/tree-sitter-php.wasm": "d4df6a6ff08c87c3ec4f9cbb785fe09998a0cb570e03f57d7b19b3acfb146aa7",
+            "assets/tree-sitter-python.wasm": "16108b50df4ee9a30168794252ab55e7c93bfc5765d7fa0aa3e335752c515f47",
+            "assets/tree-sitter-ruby.wasm": "09a96427d7c72f0613ed470cd9812223fc4a91d6a9c025c0235cc6bd59ff96f4",
+            "assets/tree-sitter-rust.wasm": "f65f354215611fd94ad34134b3427eb3d58cbb745df7b6509ba722184db73d57",
+            "assets/tree-sitter-terraform.release.wasm": "59dbcbb0f08eb78b78f37510834559a48ce5c9d4866c978d62c6390796461cb5",
+            "catalog.json": "4075d988391b8c893f47722fb85f93d626d700af9b2a1b4909fd20ef0ec989b4",
+            "dist/analysis-worker.js": "75a1e646f636c1d1ace9ae22a9141a51e94bddc70203bed08de7bd13dae1764e",
+            "dist/catalog.js": "460243c48cb6a03b8c7971273729d8a1134955186978b6c0d04182c71960ebff",
+            "dist/extractor.js": "1d8cd819e7ec8fcc291a44e5ffe4ccfe77099301677913fcfe0d92e7ce971f33",
+            "dist/index.js": "adc03d77d94c0133b3188950b35f79db19e447cf7bfa1f7e1cf1f5c97a582a44",
+            "dist/performance-timing.js": "56cce530f627c8fd079e8ec070322f84378ae50c40a6765d88b418850692940b",
+            "integrity.json": "4f1530009fdf5f087ab0b7adcae062ca141f76aa6e5acdb20c695fee963dec38",
+            "licenses/tree-sitter-bash-MIT.txt": "49bf33cf78ef5897e4e161ce1517df7de1ae5042a65b6bcfd44401e0fc606559",
+            "licenses/tree-sitter-c-MIT.txt": "2e0110e07abef7c2548b26ec9d6969775617ca539a0dc8dbeeb14d6452c711d1",
+            "licenses/tree-sitter-c-sharp-MIT.txt": "778fb7d63b8c1844da315648c02f325c4713a6f4a5d19644fd413421422776d3",
+            "licenses/tree-sitter-cpp-MIT.txt": "2e0110e07abef7c2548b26ec9d6969775617ca539a0dc8dbeeb14d6452c711d1",
+            "licenses/tree-sitter-go-MIT.txt": "2e0110e07abef7c2548b26ec9d6969775617ca539a0dc8dbeeb14d6452c711d1",
+            "licenses/tree-sitter-hcl-Apache-2.0.txt": "c71d239df91726fc519c6eb72d318ec65820627232b2f796219e87dcf35d0ab4",
+            "licenses/tree-sitter-java-MIT.txt": "52ed137b039cd9c46409bc22e89938af911c95b157feae2d040b51e6084369a7",
+            "licenses/tree-sitter-php-MIT.txt": "664764fabf40c0b318e06324a5a12379092a2df25b8cbf2415f71bc0bb352346",
+            "licenses/tree-sitter-python-MIT.txt": "d724405ce238a22c0d35769c5a36b386ad5958192efe8bbb304fb2896254575f",
+            "licenses/tree-sitter-ruby-MIT.txt": "9c99b99e93d3c6461bef9f6bac45d17b8bf014172625c24f76319bbd235a7b80",
+            "licenses/tree-sitter-rust-MIT.txt": "31d5b6f4243d5c7c6e1c4ebbbb9f6407bd1457a08bcc4f706521710341acba36",
+            "licenses/web-tree-sitter-MIT.txt": "c5cfb43042b6b72045f4ba997834d0a7786d2793d91680868b5815b39f14fc78",
+            "package.json": "433313c71ef7951eb8cb58d855089f08ccab583405ab85d6a417d9309782356c",
+        },
+        dependencies: [
+            {
+                packageName: "web-tree-sitter",
+                version: "0.27.0",
+                files: {
+                    LICENSE: "c5cfb43042b6b72045f4ba997834d0a7786d2793d91680868b5815b39f14fc78",
+                    "debug/web-tree-sitter.cjs": "3faca4a6e5a006ec8e95a8e1918923ee9a385a02f64154fb2a893d5a27200f24",
+                    "debug/web-tree-sitter.js": "4cd02f4b5510044807279f7064e6bcceab391af3c245fc9b6da2de7b1116ff84",
+                    "debug/web-tree-sitter.wasm": "91a157f507fabb836588e6537a1af1bae45d3d4b9278d06d003678460b011d8e",
+                    "package.json": "707dd14277ba63ca8dcaad6b6df8051e23df78c878b5cbdc27885b3cfd72bfac",
+                    "web-tree-sitter.cjs": "743de33347202f863b6714fc7218c455d93f751943d43500500f6c5c65654dce",
+                    "web-tree-sitter.js": "7c49e3c1d87e24e0bb4c2def909d17154dfde281f5f8280225450090bb4b8110",
+                    "web-tree-sitter.wasm": "c03bccdc3b448a32848f5ae327e209c982bbb0840d43eec8bc2d5759544a1ed3",
+                },
+            },
+        ],
+    },
+];

package/dist/plugins/approved-source-analyzers.js

@@ -0,0 +1,3 @@
+import { qualifiedSourceAnalyzers } from "./approved-source-analyzers.generated.js";
+// implements REQ-capability-plugin-activation-disclosure-v1
+export const APPROVED_SOURCE_ANALYZERS = qualifiedSourceAnalyzers;

package/dist/plugins/maintenance-source-analysis.d.ts

@@ -0,0 +1,14 @@
+import type { ProjectKibiConfig } from "kibi-plugin-sdk";
+import type { GitChangeSnapshot } from "../traceability/git-change-snapshot.js";
+import type { Fingerprint } from "../traceability/impact-review.js";
+import { type ApprovedSourceAnalyzer } from "./approved-source-analyzers.js";
+import { type SourceAnalysisService } from "./source-analysis-service.js";
+/** Hash the exact trusted source-extractor activation and its host-pinned closure. */
+export declare function fingerprintMaintenanceSourceSet(workspaceRoot: string, projectConfig: ProjectKibiConfig): Fingerprint;
+/** Verify the exact host-approved closure before any plugin entrypoint executes. */
+export declare function verifyApprovedSourceAnalyzer(root: string, approval: ApprovedSourceAnalyzer): string;
+/** Maintenance resolves source capabilities only; unrelated plugin code is never imported. */
+export declare function createMaintenanceSourceAnalysisService(workspaceRoot: string, projectConfig?: ProjectKibiConfig): SourceAnalysisService;
+/** Capture activation with the same source snapshot and retain baseline analyzers for code changes. */
+export declare function readSnapshotSourceConfig(snapshot: GitChangeSnapshot, trustedTree?: string): ProjectKibiConfig;
+//# sourceMappingURL=maintenance-source-analysis.d.ts.map

package/dist/plugins/maintenance-source-analysis.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"maintenance-source-analysis.d.ts","sourceRoot":"","sources":["../../src/plugins/maintenance-source-analysis.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAEzD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,wCAAwC,CAAC;AAChF,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kCAAkC,CAAC;AAEpE,OAAO,EAEL,KAAK,sBAAsB,EAC5B,MAAM,gCAAgC,CAAC;AAIxC,OAAO,EACL,KAAK,qBAAqB,EAE3B,MAAM,8BAA8B,CAAC;AA+DtC,sFAAsF;AAEtF,wBAAgB,+BAA+B,CAC7C,aAAa,EAAE,MAAM,EACrB,aAAa,EAAE,iBAAiB,GAC/B,WAAW,CAwCb;AAED,oFAAoF;AAEpF,wBAAgB,4BAA4B,CAC1C,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,sBAAsB,GAC/B,MAAM,CAwBR;AAED,8FAA8F;AAE9F,wBAAgB,sCAAsC,CACpD,aAAa,EAAE,MAAM,EACrB,aAAa,CAAC,EAAE,iBAAiB,GAChC,qBAAqB,CAyDvB;AAED,uGAAuG;AAEvG,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,iBAAiB,EAC3B,WAAW,CAAC,EAAE,MAAM,GACnB,iBAAiB,CA+CnB"}

package/dist/plugins/maintenance-source-analysis.js

@@ -0,0 +1,191 @@
+import { createHash } from "node:crypto";
+import { readFileSync, realpathSync } from "node:fs";
+import { createRequire } from "node:module";
+import { dirname, isAbsolute, join, relative, resolve } from "node:path";
+import { validateProjectKibiConfig, } from "kibi-plugin-sdk";
+import { SYMBOL_EXTRACTOR_V2_CAPABILITY_ID } from "kibi-plugin-sdk";
+import { fingerprint } from "../traceability/impact-review.js";
+import { APPROVED_SOURCE_ANALYZERS, } from "./approved-source-analyzers.js";
+import { readProjectKibiConfig } from "./project-config.js";
+import { CapabilityRegistry } from "./registry.js";
+import { resolveProjectLocalPackage } from "./resolve-package.js";
+import { createSourceAnalysisService, } from "./source-analysis-service.js";
+function digestFile(root, file) {
+    const candidate = resolve(root, file);
+    const rel = relative(root, candidate);
+    if (!rel || rel.startsWith("..") || isAbsolute(rel))
+        throw new Error(`Invalid approved asset path: ${file}`);
+    const actual = realpathSync(candidate);
+    const actualRel = relative(realpathSync(root), actual);
+    if (actualRel.startsWith("..") || isAbsolute(actualRel))
+        throw new Error(`Approved asset escapes its package: ${file}`);
+    return createHash("sha256").update(readFileSync(actual)).digest("hex");
+}
+function verifyFiles(root, files) {
+    if (Object.keys(files).length === 0)
+        throw new Error("An approved analyzer must pin its executable closure");
+    for (const [file, expected] of Object.entries(files)) {
+        if (digestFile(root, file) !== expected)
+            throw new Error(`Source analyzer integrity mismatch: ${file}`);
+    }
+}
+function dependencyRoot(importer, packageName) {
+    const require = createRequire(join(importer, "package.json"));
+    let current = dirname(require.resolve(packageName));
+    for (;;) {
+        try {
+            const json = JSON.parse(readFileSync(join(current, "package.json"), "utf8"));
+            if (json.name === packageName)
+                return current;
+        }
+        catch {
+            /* Walk through a package's dist directories. */
+        }
+        const parent = dirname(current);
+        if (parent === current)
+            throw new Error(`Cannot locate approved dependency: ${packageName}`);
+        current = parent;
+    }
+}
+/**
+ * Identify the host's first-party builtin analyzer by its published package
+ * identity. Content integrity of an installed release is the package
+ * manager's job; hashing the installed tree made the fingerprint differ
+ * between a workspace checkout, an npm install and a bundled runtime.
+ */
+function builtinRuntimeIdentity() {
+    const manifest = createRequire(import.meta.url)("kibi-plugin-builtin/package.json");
+    if (manifest.name !== "kibi-plugin-builtin" ||
+        typeof manifest.version !== "string")
+        throw new Error("Builtin source analyzer identity is invalid");
+    return { name: manifest.name, version: manifest.version };
+}
+/** Hash the exact trusted source-extractor activation and its host-pinned closure. */
+// implements REQ-impact-policy-stage-e-content-bound-review
+export function fingerprintMaintenanceSourceSet(workspaceRoot, projectConfig) {
+    const sourceEntries = (projectConfig.plugins ?? [])
+        .map((entry) => ({
+        package: entry.package,
+        capability: entry.capabilities[SYMBOL_EXTRACTOR_V2_CAPABILITY_ID] ?? null,
+    }))
+        .filter((entry) => entry.capability !== null)
+        .sort((a, b) => a.package.localeCompare(b.package));
+    const bindings = sourceEntries.map(({ package: packageName, capability }) => {
+        const approval = APPROVED_SOURCE_ANALYZERS.find((item) => item.packageName === packageName);
+        if (!approval)
+            throw new Error(`Source analyzer is not approved for impact review: ${packageName}`);
+        const resolved = resolveProjectLocalPackage(workspaceRoot, packageName);
+        const entryRelative = relative(resolved.packageRoot, resolved.entryPath).replaceAll("\\", "/");
+        if (!approval.files[entryRelative])
+            throw new Error("Source analyzer entrypoint is outside its approved closure");
+        return {
+            packageName,
+            capability,
+            approvalFingerprint: verifyApprovedSourceAnalyzer(resolved.packageRoot, approval),
+        };
+    });
+    return fingerprint({
+        contractVersion: "kibi.maintenance-source-set.v2",
+        builtinRuntime: builtinRuntimeIdentity(),
+        sdkContract: SYMBOL_EXTRACTOR_V2_CAPABILITY_ID,
+        bindings,
+    });
+}
+/** Verify the exact host-approved closure before any plugin entrypoint executes. */
+// implements REQ-capability-plugin-activation-disclosure-v1
+export function verifyApprovedSourceAnalyzer(root, approval) {
+    verifyFiles(root, approval.files);
+    const manifest = JSON.parse(readFileSync(join(root, "package.json"), "utf8"));
+    if (manifest.name !== approval.packageName ||
+        manifest.version !== approval.version)
+        throw new Error("Source analyzer package identity does not match host approval");
+    for (const dependency of approval.dependencies) {
+        const depRoot = dependencyRoot(root, dependency.packageName);
+        verifyFiles(depRoot, dependency.files);
+        const metadata = JSON.parse(readFileSync(join(depRoot, "package.json"), "utf8"));
+        if (metadata.version !== dependency.version)
+            throw new Error(`Unapproved source runtime version: ${dependency.packageName}`);
+    }
+    return createHash("sha256").update(JSON.stringify(approval)).digest("hex");
+}
+/** Maintenance resolves source capabilities only; unrelated plugin code is never imported. */
+// implements REQ-capability-plugin-activation-disclosure-v1
+export function createMaintenanceSourceAnalysisService(workspaceRoot, projectConfig) {
+    const config = projectConfig ?? readProjectKibiConfig(workspaceRoot);
+    const fingerprints = {};
+    const sourceEntries = (config.plugins ?? []).filter((entry) => entry.capabilities[SYMBOL_EXTRACTOR_V2_CAPABILITY_ID]);
+    const registry = new CapabilityRegistry({
+        workspaceRoot,
+        projectConfig: {
+            plugins: sourceEntries.flatMap((entry) => {
+                const capability = entry.capabilities[SYMBOL_EXTRACTOR_V2_CAPABILITY_ID];
+                return capability
+                    ? [
+                        {
+                            package: entry.package,
+                            capabilities: {
+                                [SYMBOL_EXTRACTOR_V2_CAPABILITY_ID]: capability,
+                            },
+                        },
+                    ]
+                    : [];
+            }),
+        },
+    });
+    return createSourceAnalysisService({
+        registry,
+        providerFingerprints: fingerprints,
+        resolveExtractorsV2: async () => {
+            for (const entry of sourceEntries) {
+                const approval = APPROVED_SOURCE_ANALYZERS.find((item) => item.packageName === entry.package);
+                if (!approval)
+                    throw new Error(`Source analyzer is not approved for maintenance: ${entry.package}`);
+                const resolved = resolveProjectLocalPackage(workspaceRoot, entry.package);
+                const entryRelative = relative(resolved.packageRoot, resolved.entryPath).replaceAll("\\", "/");
+                if (!approval.files[entryRelative])
+                    throw new Error("Source analyzer entrypoint is outside its approved closure");
+                fingerprints[entry.package] = verifyApprovedSourceAnalyzer(resolved.packageRoot, approval);
+            }
+            return registry.resolveSymbolExtractorsV2();
+        },
+    });
+}
+/** Capture activation with the same source snapshot and retain baseline analyzers for code changes. */
+// implements REQ-source-analysis-v2
+export function readSnapshotSourceConfig(snapshot, trustedTree) {
+    const readConfig = (tree) => {
+        const entry = snapshot
+            .readGit(["ls-tree", tree, "--", "package.json"])
+            .toString("utf8");
+        if (!entry)
+            return {};
+        if (!/^100(?:644|755) blob /.test(entry))
+            throw new Error("Source analyzer configuration must be a regular snapshot file");
+        return validateProjectKibiConfig(JSON.parse(snapshot.readGit(["show", `${tree}:package.json`]).toString("utf8")).kibi);
+    };
+    if (trustedTree !== undefined)
+        return readConfig(trustedTree);
+    const entries = new Map();
+    for (const entry of readConfig(snapshot.headTree).plugins ?? [])
+        entries.set(entry.package, entry);
+    const configurationPaths = new Set([
+        "package.json",
+        "bun.lock",
+        "package-lock.json",
+        "pnpm-lock.yaml",
+        "yarn.lock",
+    ]);
+    if (snapshot.inventory.some((file) => !configurationPaths.has(file.path) && !file.path.startsWith(".kb/"))) {
+        for (const entry of readConfig(snapshot.baseTree).plugins ?? []) {
+            const baseline = entry.capabilities[SYMBOL_EXTRACTOR_V2_CAPABILITY_ID];
+            if (!baseline || baseline.mode === "shadow")
+                continue;
+            const selected = entries.get(entry.package)?.capabilities[SYMBOL_EXTRACTOR_V2_CAPABILITY_ID];
+            if (selected?.mode === "shadow")
+                throw new Error(`Cannot downgrade active source analyzer '${entry.package}' to shadow while changing source; separate the configuration change`);
+            if (!selected)
+                entries.set(entry.package, entry);
+        }
+    }
+    return { plugins: [...entries.values()] };
+}

package/dist/plugins/registry.d.ts

@@ -1,4 +1,4 @@
-import { type CapabilityId, type KibiPluginV1, type OntologyPackV1, type PluginMode, type PluginPermissions, type PluginProviderStamp, type ProjectKibiConfig, type SemanticClassifierV1, type SymbolExtractorV1, type VocabularyAlignmentV1 } from "kibi-plugin-sdk";
+import { type CapabilityId, type KibiPluginV1, type OntologyPackV1, type PluginMode, type PluginPermissions, type PluginProviderStamp, type ProjectKibiConfig, type SemanticClassifierV1, type SymbolExtractorV1, type SymbolExtractorV2, type VocabularyAlignmentV1 } from "kibi-plugin-sdk";
 import { type LoadPluginOptions, loadPluginPackage } from "./load-plugin.js";
 export type BuiltinPluginFactory = () => KibiPluginV1 | Promise<KibiPluginV1>;
 export type CapabilityProviderBinding<T> = Readonly<{
@@ -59,6 +59,7 @@ export declare class CapabilityRegistry {
     resolveSemanticClassifiers(): Promise<CapabilityModeResolution<SemanticClassifierV1>>;
     resolveOntologyPacks(): Promise<CapabilityModeResolution<OntologyPackV1>>;
     resolveSymbolExtractors(): Promise<CapabilityModeResolution<SymbolExtractorV1>>;
+    resolveSymbolExtractorsV2(): Promise<CapabilityModeResolution<SymbolExtractorV2>>;
     resolveVocabularyAlignment(): Promise<CapabilityModeResolution<VocabularyAlignmentV1>>;
     resolveCapability(capabilityId: CapabilityId): Promise<CapabilityModeResolution<unknown>>;
     /**

package/dist/plugins/registry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/plugins/registry.ts"],"names":[],"mappings":"AAkBA,OAAO,EACL,KAAK,YAAY,EAEjB,KAAK,YAAY,EAEjB,KAAK,cAAc,EACnB,KAAK,UAAU,EACf,KAAK,iBAAiB,EACtB,KAAK,mBAAmB,EACxB,KAAK,iBAAiB,EAItB,KAAK,oBAAoB,EACzB,KAAK,iBAAiB,EAEtB,KAAK,qBAAqB,EAG3B,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,KAAK,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAK7E,MAAM,MAAM,oBAAoB,GAAG,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;AAG9E,MAAM,MAAM,yBAAyB,CAAC,CAAC,IAAI,QAAQ,CAAC;IAClD,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,IAAI,EAAE,UAAU,GAAG,SAAS,CAAC;IAC7B,WAAW,EAAE,iBAAiB,CAAC;IAC/B,QAAQ,EAAE,OAAO,CAAC;IAClB,UAAU,EAAE,CAAC,CAAC;IACd,KAAK,EAAE,mBAAmB,CAAC;CAC5B,CAAC,CAAC;AAGH,MAAM,MAAM,wBAAwB,CAAC,CAAC,IAAI,QAAQ,CAAC;IACjD,OAAO,EAAE,yBAAyB,CAAC,CAAC,CAAC,CAAC;IACtC,wDAAwD;IACxD,OAAO,EAAE,yBAAyB,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;IAC7C,0DAA0D;IAC1D,OAAO,EAAE,SAAS,yBAAyB,CAAC,CAAC,CAAC,EAAE,CAAC;IACjD,+DAA+D;IAC/D,MAAM,EAAE,SAAS,yBAAyB,CAAC,CAAC,CAAC,EAAE,CAAC;CACjD,CAAC,CAAC;AAGH,MAAM,MAAM,yBAAyB,GAAG,QAAQ,CAAC;IAC/C,aAAa,EAAE,MAAM,CAAC;IACtB,yDAAyD;IACzD,cAAc,CAAC,EAAE,oBAAoB,CAAC;IACtC,sEAAsE;IACtE,aAAa,CAAC,EAAE,iBAAiB,CAAC;IAClC,kDAAkD;IAClD,UAAU,CAAC,EAAE,CAAC,aAAa,EAAE,MAAM,KAAK,iBAAiB,CAAC;IAC1D,0CAA0C;IAC1C,UAAU,CAAC,EAAE,CACX,aAAa,EAAE,MAAM,EACrB,WAAW,EAAE,MAAM,EACnB,OAAO,CAAC,EAAE,iBAAiB,KACxB,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,iBAAiB,CAAC,CAAC,CAAC,CAAC;IAC5D,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;CACvC,CAAC,CAAC;AAeH;;;GAGG;AAEH,wBAAgB,uBAAuB,IAAI,YAAY,CAwDtD;AA0GD;;;;GAIG;AAEH,qBAAa,kBAAkB;IAC7B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAuB;IACtD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA+C;IAC1E,OAAO,CAAC,QAAQ,CAAC,UAAU,CAEzB;IACF,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAgC;IAClE,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAgC;IAE/D,OAAO,CAAC,oBAAoB,CAAoC;IAChE,OAAO,CAAC,aAAa,CAAyC;IAC9D,OAAO,CAAC,QAAQ,CAAC,cAAc,CAG3B;IACJ,OAAO,CAAC,QAAQ,CAAC,eAAe,CAG5B;gBAEQ,OAAO,EAAE,yBAAyB;IASxC,gBAAgB,IAAI,OAAO,CAAC,YAAY,CAAC;IAOzC,gBAAgB,IAAI,OAAO,CAAC,iBAAiB,CAAC;IAQ9C,0BAA0B,IAAI,OAAO,CACzC,wBAAwB,CAAC,oBAAoB,CAAC,CAC/C;IAMK,oBAAoB,IAAI,OAAO,CACnC,wBAAwB,CAAC,cAAc,CAAC,CACzC;IAMK,uBAAuB,IAAI,OAAO,CACtC,wBAAwB,CAAC,iBAAiB,CAAC,CAC5C;IAMK,0BAA0B,IAAI,OAAO,CACzC,wBAAwB,CAAC,qBAAqB,CAAC,CAChD;IAMK,iBAAiB,CACrB,YAAY,EAAE,YAAY,GACzB,OAAO,CAAC,wBAAwB,CAAC,OAAO,CAAC,CAAC;IAc7C;;;OAGG;IACH,kBAAkB,CAAC,CAAC,EAClB,UAAU,EAAE,wBAAwB,CAAC,CAAC,CAAC,GACtC,SAAS,yBAAyB,CAAC,CAAC,CAAC,EAAE;YAO5B,yBAAyB;YAyFzB,mBAAmB;CAsBlC;AAED;;GAEG;AAEH,qBAAa,uBAAuB;IAClC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAyC;IAEpE,GAAG,CAAC,aAAa,EAAE,MAAM,GAAG,kBAAkB,GAAG,SAAS;IAI1D,WAAW,CACT,aAAa,EAAE,MAAM,EACrB,OAAO,CAAC,EAAE,IAAI,CAAC,yBAAyB,EAAE,eAAe,CAAC,GACzD,kBAAkB;IAWrB,GAAG,CAAC,aAAa,EAAE,MAAM,EAAE,QAAQ,EAAE,kBAAkB,GAAG,IAAI;IAI9D,KAAK,IAAI,IAAI;CAGd;AAGD,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,yBAAyB,GACjC,kBAAkB,CAEpB;AAGD,wBAAgB,6BAA6B,IAAI,uBAAuB,CAEvE;AAGD,MAAM,MAAM,+BAA+B,GAAG,yBAAyB,GAAG;IACxE,QAAQ,CAAC,KAAK,CAAC,EAAE,uBAAuB,CAAC;CAC1C,CAAC;AAEF;;;GAGG;AAEH,wBAAgB,wBAAwB,CACtC,sBAAsB,EAAE,MAAM,GAAG,+BAA+B,EAChE,OAAO,CAAC,EAAE,IAAI,CAAC,yBAAyB,EAAE,eAAe,CAAC,GAAG;IAC3D,QAAQ,CAAC,KAAK,CAAC,EAAE,uBAAuB,CAAC;CAC1C,GACA,kBAAkB,CAoBpB"}
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/plugins/registry.ts"],"names":[],"mappings":"AAkBA,OAAO,EACL,KAAK,YAAY,EAEjB,KAAK,YAAY,EAEjB,KAAK,cAAc,EACnB,KAAK,UAAU,EACf,KAAK,iBAAiB,EACtB,KAAK,mBAAmB,EACxB,KAAK,iBAAiB,EAKtB,KAAK,oBAAoB,EACzB,KAAK,iBAAiB,EACtB,KAAK,iBAAiB,EAEtB,KAAK,qBAAqB,EAG3B,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,KAAK,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAK7E,MAAM,MAAM,oBAAoB,GAAG,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;AAG9E,MAAM,MAAM,yBAAyB,CAAC,CAAC,IAAI,QAAQ,CAAC;IAClD,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,IAAI,EAAE,UAAU,GAAG,SAAS,CAAC;IAC7B,WAAW,EAAE,iBAAiB,CAAC;IAC/B,QAAQ,EAAE,OAAO,CAAC;IAClB,UAAU,EAAE,CAAC,CAAC;IACd,KAAK,EAAE,mBAAmB,CAAC;CAC5B,CAAC,CAAC;AAGH,MAAM,MAAM,wBAAwB,CAAC,CAAC,IAAI,QAAQ,CAAC;IACjD,OAAO,EAAE,yBAAyB,CAAC,CAAC,CAAC,CAAC;IACtC,wDAAwD;IACxD,OAAO,EAAE,yBAAyB,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;IAC7C,0DAA0D;IAC1D,OAAO,EAAE,SAAS,yBAAyB,CAAC,CAAC,CAAC,EAAE,CAAC;IACjD,+DAA+D;IAC/D,MAAM,EAAE,SAAS,yBAAyB,CAAC,CAAC,CAAC,EAAE,CAAC;CACjD,CAAC,CAAC;AAGH,MAAM,MAAM,yBAAyB,GAAG,QAAQ,CAAC;IAC/C,aAAa,EAAE,MAAM,CAAC;IACtB,yDAAyD;IACzD,cAAc,CAAC,EAAE,oBAAoB,CAAC;IACtC,sEAAsE;IACtE,aAAa,CAAC,EAAE,iBAAiB,CAAC;IAClC,kDAAkD;IAClD,UAAU,CAAC,EAAE,CAAC,aAAa,EAAE,MAAM,KAAK,iBAAiB,CAAC;IAC1D,0CAA0C;IAC1C,UAAU,CAAC,EAAE,CACX,aAAa,EAAE,MAAM,EACrB,WAAW,EAAE,MAAM,EACnB,OAAO,CAAC,EAAE,iBAAiB,KACxB,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,iBAAiB,CAAC,CAAC,CAAC,CAAC;IAC5D,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;CACvC,CAAC,CAAC;AAiBH;;;GAGG;AAEH,wBAAgB,uBAAuB,IAAI,YAAY,CAwDtD;AA2GD;;;;GAIG;AAEH,qBAAa,kBAAkB;IAC7B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAuB;IACtD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA+C;IAC1E,OAAO,CAAC,QAAQ,CAAC,UAAU,CAEzB;IACF,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAgC;IAClE,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAgC;IAE/D,OAAO,CAAC,oBAAoB,CAAoC;IAChE,OAAO,CAAC,aAAa,CAAyC;IAC9D,OAAO,CAAC,QAAQ,CAAC,cAAc,CAG3B;IACJ,OAAO,CAAC,QAAQ,CAAC,eAAe,CAG5B;gBAEQ,OAAO,EAAE,yBAAyB;IASxC,gBAAgB,IAAI,OAAO,CAAC,YAAY,CAAC;IAOzC,gBAAgB,IAAI,OAAO,CAAC,iBAAiB,CAAC;IAQ9C,0BAA0B,IAAI,OAAO,CACzC,wBAAwB,CAAC,oBAAoB,CAAC,CAC/C;IAMK,oBAAoB,IAAI,OAAO,CACnC,wBAAwB,CAAC,cAAc,CAAC,CACzC;IAMK,uBAAuB,IAAI,OAAO,CACtC,wBAAwB,CAAC,iBAAiB,CAAC,CAC5C;IAOK,yBAAyB,IAAI,OAAO,CACxC,wBAAwB,CAAC,iBAAiB,CAAC,CAC5C;IAMK,0BAA0B,IAAI,OAAO,CACzC,wBAAwB,CAAC,qBAAqB,CAAC,CAChD;IAMK,iBAAiB,CACrB,YAAY,EAAE,YAAY,GACzB,OAAO,CAAC,wBAAwB,CAAC,OAAO,CAAC,CAAC;IAc7C;;;OAGG;IACH,kBAAkB,CAAC,CAAC,EAClB,UAAU,EAAE,wBAAwB,CAAC,CAAC,CAAC,GACtC,SAAS,yBAAyB,CAAC,CAAC,CAAC,EAAE;YAO5B,yBAAyB;YAyFzB,mBAAmB;CAsBlC;AAED;;GAEG;AAEH,qBAAa,uBAAuB;IAClC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAyC;IAEpE,GAAG,CAAC,aAAa,EAAE,MAAM,GAAG,kBAAkB,GAAG,SAAS;IAI1D,WAAW,CACT,aAAa,EAAE,MAAM,EACrB,OAAO,CAAC,EAAE,IAAI,CAAC,yBAAyB,EAAE,eAAe,CAAC,GACzD,kBAAkB;IAWrB,GAAG,CAAC,aAAa,EAAE,MAAM,EAAE,QAAQ,EAAE,kBAAkB,GAAG,IAAI;IAI9D,KAAK,IAAI,IAAI;CAGd;AAGD,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,yBAAyB,GACjC,kBAAkB,CAEpB;AAGD,wBAAgB,6BAA6B,IAAI,uBAAuB,CAEvE;AAGD,MAAM,MAAM,+BAA+B,GAAG,yBAAyB,GAAG;IACxE,QAAQ,CAAC,KAAK,CAAC,EAAE,uBAAuB,CAAC;CAC1C,CAAC;AAEF;;;GAGG;AAEH,wBAAgB,wBAAwB,CACtC,sBAAsB,EAAE,MAAM,GAAG,+BAA+B,EAChE,OAAO,CAAC,EAAE,IAAI,CAAC,yBAAyB,EAAE,eAAe,CAAC,GAAG;IAC3D,QAAQ,CAAC,KAAK,CAAC,EAAE,uBAAuB,CAAC;CAC1C,GACA,kBAAkB,CAoBpB"}

package/dist/plugins/registry.js

@@ -15,7 +15,7 @@
  You should have received a copy of the GNU Affero General Public License
  along with this program.  If not, see <https://www.gnu.org/licenses/>.
 */
-import { KIBI_PLUGIN_API_VERSION, ONTOLOGY_PACK_CAPABILITY_ID, SEMANTIC_CLASSIFIER_CAPABILITY_ID, SYMBOL_EXTRACTOR_CAPABILITY_ID, VOCABULARY_ALIGNMENT_CAPABILITY_ID, defineKibiPlugin, validateKibiPlugin, } from "kibi-plugin-sdk";
+import { KIBI_PLUGIN_API_VERSION, ONTOLOGY_PACK_CAPABILITY_ID, SEMANTIC_CLASSIFIER_CAPABILITY_ID, SYMBOL_EXTRACTOR_CAPABILITY_ID, SYMBOL_EXTRACTOR_V2_CAPABILITY_ID, VOCABULARY_ALIGNMENT_CAPABILITY_ID, defineKibiPlugin, validateKibiPlugin, } from "kibi-plugin-sdk";
 import { loadPluginPackage } from "./load-plugin.js";
 import { readProjectKibiConfig } from "./project-config.js";
 import { PluginResolutionError } from "./resolve-package.js";
@@ -23,6 +23,7 @@ const CAPABILITY_SLOT = {
     [SEMANTIC_CLASSIFIER_CAPABILITY_ID]: "semanticClassifier",
     [ONTOLOGY_PACK_CAPABILITY_ID]: "ontologyPack",
     [SYMBOL_EXTRACTOR_CAPABILITY_ID]: "symbolExtractor",
+    [SYMBOL_EXTRACTOR_V2_CAPABILITY_ID]: "symbolExtractorV2",
     [VOCABULARY_ALIGNMENT_CAPABILITY_ID]: "vocabularyAlignment",
 };
 /**
@@ -197,6 +198,10 @@ export class CapabilityRegistry {
     async resolveSymbolExtractors() {
         return this.resolveCapability(SYMBOL_EXTRACTOR_CAPABILITY_ID);
     }
+    // implements REQ-capability-plugin-activation-disclosure-v1
+    async resolveSymbolExtractorsV2() {
+        return this.resolveCapability(SYMBOL_EXTRACTOR_V2_CAPABILITY_ID);
+    }
     async resolveVocabularyAlignment() {
         return this.resolveCapability(VOCABULARY_ALIGNMENT_CAPABILITY_ID);
     }