opencode-skill-autodiscovery 1.6.1 → 2.1.0

package/dist/agents.js

@@ -1,6 +1,10 @@
 import { readFileSync, readdirSync } from "node:fs";
 import { join } from "node:path";
+import { cachedRead } from "./cache.js";
+import { fingerprintTree, getCachedValue, setCachedValue } from "./discovery-cache.js";
 import { log } from "./log.js";
+import { validateName } from "./schema.js";
+import { resolveContained } from "./discovery.js";
 // Reverse-DNS namespace this plugin (and opencode, by convention) owns for
 // client-specific manifest data and extension directories (Agent Plugins 5.6/8).
 const OPENCODE_NS = "dev.opencode";
@@ -90,10 +94,25 @@ function readJson(path) {
         return null;
     }
 }
+// Package-supplied JSON that feeds agent config (the plugin manifests and the
+// dev.opencode/agents/*.json extension files) is read only when it resolves
+// inside the package root. A symlinked manifest would otherwise let an outside
+// file's `description`/`prompt`/`systemPrompt` fields become model prompt
+// material. Missing files resolve to null silently; an escaping symlink is
+// logged once by resolveContained.
+function readContainedJson(root, path) {
+    const contained = resolveContained(root, path);
+    if (!contained)
+        return null;
+    return readJson(contained);
+}
 // Converts a raw, package-supplied agent object into an opencode AgentConfig.
-// `permission` blocks are dropped (too powerful to inherit by default) and
-// unknown/mistyped keys are ignored. Returns null when nothing usable is left.
-function toAgentConfig(raw) {
+// Package-supplied capability is deliberately clamped: any declared `mode`
+// other than the conservative "subagent" default is dropped, and `permission`
+// blocks and `tools` grants are never inherited (both too powerful to inherit
+// by default). Each drop is logged naming the package and the agent. Unknown
+// or mistyped keys are ignored. Returns null when nothing usable is left.
+function toAgentConfig(raw, pkgName, agentName) {
     const src = asRecord(raw);
     if (!src)
         return null;
@@ -125,20 +144,25 @@ function toAgentConfig(raw) {
         agent.maxSteps = maxSteps;
     if (typeof src.disable === "boolean")
         agent.disable = src.disable;
+    // A declared mode other than "subagent" requests capabilities (a primary
+    // agent, or opencode's full "all" surface) that a package should not grant
+    // itself. Drop it and clamp to the conservative default. An unset mode
+    // falls through to opencode's own "all" default, so it stays unset.
     if (typeof src.mode === "string" && MODES.has(src.mode)) {
-        agent.mode = src.mode;
+        if (src.mode !== "subagent") {
+            log(`dropping mode "${src.mode}" from agent "${agentName}" supplied by package "${pkgName}": clamping to conservative "subagent"`);
+        }
+        agent.mode = "subagent";
     }
+    // Tools booleans are capability grants and are never inherited from a
+    // package (agent.tools is intentionally left unset). The drop is logged so
+    // a package cannot silently pretend it carries write access.
     const tools = asRecord(src.tools);
-    if (tools) {
-        const filtered = {};
-        for (const [name, value] of Object.entries(tools)) {
-            if (typeof value === "boolean")
-                filtered[name] = value;
-        }
-        agent.tools = filtered;
+    if (tools && Object.values(tools).some((value) => typeof value === "boolean")) {
+        log(`dropping tools from agent "${agentName}" supplied by package "${pkgName}": too powerful to inherit`);
     }
     if (src.permission !== undefined) {
-        log("dropping permission block from a package-supplied agent: too powerful to inherit");
+        log(`dropping permission block from agent "${agentName}" supplied by package "${pkgName}": too powerful to inherit`);
     }
     if (!agent.description && !agent.prompt)
         return null;
@@ -150,17 +174,43 @@ function toAgentConfig(raw) {
 //   3. a legacy Claude Code plugin shim: `.claude-plugin/plugin.json` `agents`
 //      plus `agents/<name>/AGENTS.md` when no systemPrompt is declared.
 // Returns a stable, de-duplicated list keyed by agent name.
+//
+// Cached as a whole per package, fingerprinted on pkg.root: this function's
+// own per-file cachedRead calls (below) already skip re-parsing an unchanged
+// *file*, but still pay a readdirSync + containment check (2x realpathSync)
+// per candidate file on every call. A marketplace package that ships many
+// flat agent .md files directly in its root (the agency-agents layout) makes
+// that per-file overhead the dominant remaining cost even on an otherwise
+// fully warm run — skipping the whole function on an unchanged package root
+// avoids it entirely, the same way discovery-cache.ts's walk-skip avoids
+// re-walking an unchanged marketplace tree.
 export function readAgents(pkg) {
+    const fingerprint = fingerprintTree(pkg.root);
+    const key = JSON.stringify(["agents", pkg.root]);
+    const cached = getCachedValue(key, fingerprint);
+    if (cached)
+        return cached;
+    const result = readAgentsUncached(pkg);
+    setCachedValue(key, fingerprint, result);
+    return result;
+}
+function readAgentsUncached(pkg) {
     const out = new Map();
-    const manifest = asRecord(readJson(join(pkg.root, "plugin.json")));
+    const manifest = asRecord(readContainedJson(pkg.root, join(pkg.root, "plugin.json")));
     const extensions = asRecord(manifest?.extensions);
     const opencodeExt = asRecord(extensions?.[OPENCODE_NS]);
     const manifestAgents = asRecord(opencodeExt?.agents);
     if (manifestAgents) {
         for (const [name, raw] of Object.entries(manifestAgents)) {
+            // Manifest agent keys are package-supplied input: gate the name before
+            // it becomes any config key (applyConfigPatch writes config.agent[name]).
+            if (!validateName(name)) {
+                log(`skipping manifest agent key for package "${pkg.name}" (${pkg.source}): invalid name "${name}" (must match the identifier pattern and not be a prototype-chain key)`);
+                continue;
+            }
             if (out.has(name))
                 continue;
-            const agent = toAgentConfig(raw);
+            const agent = toAgentConfig(raw, pkg.name, name);
             if (agent)
                 out.set(name, agent);
         }
@@ -177,16 +227,28 @@ export function readAgents(pkg) {
         if (!entry.endsWith(".json"))
             continue;
         const name = entry.slice(0, -".json".length);
+        // Extension-dir filenames are package-supplied input: gate the name before
+        // it becomes any config key.
+        if (!validateName(name)) {
+            log(`skipping extension-dir agent file for package "${pkg.name}" (${pkg.source}): invalid name "${name}" (must match the identifier pattern and not be a prototype-chain key)`);
+            continue;
+        }
         if (out.has(name))
             continue;
-        const agent = toAgentConfig(readJson(join(extDir, entry)));
+        const agent = toAgentConfig(readContainedJson(pkg.root, join(extDir, entry)), pkg.name, name);
         if (agent)
             out.set(name, agent);
     }
-    const claudeManifest = asRecord(readJson(join(pkg.root, ".claude-plugin", "plugin.json")));
+    const claudeManifest = asRecord(readContainedJson(pkg.root, join(pkg.root, ".claude-plugin", "plugin.json")));
     const claudeAgents = asRecord(claudeManifest?.agents);
     if (claudeAgents) {
         for (const [name, raw] of Object.entries(claudeAgents)) {
+            // Shim manifest agent names are package-supplied legacy input: gate them
+            // before they become config keys or path segments (agents/<name>/AGENTS.md).
+            if (!validateName(name)) {
+                log(`skipping shimmed agent key for package "${pkg.name}" (${pkg.source}): invalid name "${name}" (must match the identifier pattern and not be a prototype-chain key)`);
+                continue;
+            }
             if (out.has(name))
                 continue;
             const src = asRecord(raw);
@@ -197,11 +259,17 @@ export function readAgents(pkg) {
                 agent.prompt = src.systemPrompt;
             }
             else {
-                try {
-                    agent.prompt = readFileSync(join(pkg.root, "agents", name, "AGENTS.md"), "utf8");
-                }
-                catch {
-                    // No prompt file; the description alone is enough to register.
+                // AGENTS.md is package-supplied prompt content: only read it when it
+                // resolves inside the package, so a symlinked shim cannot pull in an
+                // outside file's bytes.
+                const promptPath = resolveContained(pkg.root, join(pkg.root, "agents", name, "AGENTS.md"));
+                if (promptPath) {
+                    try {
+                        agent.prompt = readFileSync(promptPath, "utf8");
+                    }
+                    catch {
+                        // No prompt file; the description alone is enough to register.
+                    }
                 }
             }
             if (typeof src.model === "string")
@@ -228,20 +296,36 @@ export function readAgents(pkg) {
             if (!entry.endsWith(".md"))
                 continue;
             const name = entry.slice(0, -".md".length);
+            // Flat agent filenames are package-supplied input: gate the name before
+            // it becomes any config key.
+            if (!validateName(name)) {
+                log(`skipping flat agent file for package "${pkg.name}" (${pkg.source}): invalid name "${name}" (must match the identifier pattern and not be a prototype-chain key)`);
+                continue;
+            }
             if (out.has(name))
                 continue;
-            let content;
+            // Flat agent files are package-supplied prompt content: only read one
+            // when it resolves inside the package, so a symlinked .md cannot pull in
+            // an outside file's bytes.
+            const contained = resolveContained(pkg.root, join(flatAgentsDir, entry));
+            if (!contained)
+                continue;
+            let parsed;
             try {
-                content = readFileSync(join(flatAgentsDir, entry), "utf8");
+                parsed = cachedRead("flat-agent-md", contained, (content) => {
+                    // Bare .md files in the package root may be docs (README.md); only
+                    // treat them as agents when they carry a frontmatter block.
+                    if (isRoot && !/^---\s*\n/.test(content))
+                        return null;
+                    return parseAgentMarkdown(content);
+                });
             }
             catch {
                 continue;
             }
-            // Bare .md files in the package root may be docs (README.md); only treat
-            // them as agents when they carry a frontmatter block.
-            if (isRoot && !/^---\s*\n/.test(content))
+            if (!parsed)
                 continue;
-            const { description, color, body } = parseAgentMarkdown(content);
+            const { description, color, body } = parsed;
             if (!description && !body)
                 continue;
             const agent = {};

package/dist/agents.js.map

@@ -1 +1 @@
-{"version":3,"file":"agents.js","sourceRoot":"","sources":["../src/agents.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AACpD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAkB/B,2EAA2E;AAC3E,iFAAiF;AACjF,MAAM,WAAW,GAAG,cAAc,CAAC;AAEnC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC;AAEtD,iFAAiF;AACjF,+EAA+E;AAC/E,gFAAgF;AAChF,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC;IAC3B,SAAS;IACT,WAAW;IACX,QAAQ;IACR,SAAS;IACT,SAAS;IACT,OAAO;IACP,MAAM;CACP,CAAC,CAAC;AAEH,6EAA6E;AAC7E,+EAA+E;AAC/E,yDAAyD;AACzD,MAAM,WAAW,GAA2B;IAC1C,GAAG,EAAE,SAAS;IACd,MAAM,EAAE,SAAS;IACjB,KAAK,EAAE,SAAS;IAChB,IAAI,EAAE,SAAS;IACf,MAAM,EAAE,SAAS;IACjB,KAAK,EAAE,SAAS;IAChB,IAAI,EAAE,SAAS;IACf,KAAK,EAAE,SAAS;IAChB,IAAI,EAAE,SAAS;IACf,SAAS,EAAE,SAAS;IACpB,IAAI,EAAE,SAAS;IACf,IAAI,EAAE,SAAS;IACf,WAAW,EAAE,SAAS;IACtB,YAAY,EAAE,SAAS;IACvB,IAAI,EAAE,SAAS;IACf,IAAI,EAAE,SAAS;IACf,eAAe,EAAE,SAAS;IAC1B,MAAM,EAAE,SAAS;IACjB,MAAM,EAAE,SAAS;IACjB,MAAM,EAAE,SAAS;IACjB,OAAO,EAAE,SAAS;IAClB,OAAO,EAAE,SAAS;IAClB,IAAI,EAAE,SAAS;IACf,IAAI,EAAE,SAAS;IACf,OAAO,EAAE,SAAS;IAClB,MAAM,EAAE,SAAS;IACjB,KAAK,EAAE,SAAS;IAChB,KAAK,EAAE,SAAS;IAChB,MAAM,EAAE,SAAS;IACjB,KAAK,EAAE,SAAS;IAChB,IAAI,EAAE,SAAS;IACf,IAAI,EAAE,SAAS;IACf,KAAK,EAAE,SAAS;CACjB,CAAC;AAEF,8EAA8E;AAC9E,4EAA4E;AAC5E,2CAA2C;AAC3C,SAAS,cAAc,CAAC,GAAuB;IAC7C,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACzB,IAAI,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAClD,yEAAyE;IACzE,IAAI,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACpC,OAAO,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;IACnE,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;IAClC,IAAI,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1C,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IAClC,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAC1B,GAAG,CAAC,oCAAoC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACjE,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAChD,CAAC,CAAE,KAAiC;QACpC,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY;IAC5B,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,2EAA2E;AAC3E,+EAA+E;AAC/E,SAAS,aAAa,CAAC,GAAY;IACjC,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC1B,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,MAAM,KAAK,GAAgB,EAAE,CAAC;IAE9B,MAAM,WAAW,GAAG,CAAC,GAAiD,EAAsB,EAAE,CAC5F,OAAO,GAAG,CAAC,GAAG,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAE,GAAG,CAAC,GAAG,CAAY,CAAC,CAAC,CAAC,SAAS,CAAC;IAClE,MAAM,WAAW,GAAG,CAAC,GAAyC,EAAsB,EAAE,CACpF,OAAO,GAAG,CAAC,GAAG,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAW,CAAC;QACjE,CAAC,CAAE,GAAG,CAAC,GAAG,CAAY;QACtB,CAAC,CAAC,SAAS,CAAC;IAEhB,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IACnC,MAAM,MAAM,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;IACrC,MAAM,WAAW,GAAG,WAAW,CAAC,aAAa,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAG,cAAc,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;IACnD,MAAM,WAAW,GAAG,WAAW,CAAC,aAAa,CAAC,CAAC;IAC/C,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IAClC,MAAM,QAAQ,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;IACzC,IAAI,KAAK;QAAE,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC;IAC/B,IAAI,MAAM;QAAE,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC;IAClC,IAAI,WAAW;QAAE,KAAK,CAAC,WAAW,GAAG,WAAW,CAAC;IACjD,IAAI,KAAK;QAAE,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC;IAC/B,IAAI,WAAW,KAAK,SAAS;QAAE,KAAK,CAAC,WAAW,GAAG,WAAW,CAAC;IAC/D,IAAI,IAAI,KAAK,SAAS;QAAE,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC;IAC3C,IAAI,QAAQ,KAAK,SAAS;QAAE,KAAK,CAAC,QAAQ,GAAG,QAAQ,CAAC;IACtD,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,SAAS;QAAE,KAAK,CAAC,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;IAClE,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QACxD,KAAK,CAAC,IAAI,GAAG,GAAG,CAAC,IAA2B,CAAC;IAC/C,CAAC;IACD,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAClC,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,QAAQ,GAA4B,EAAE,CAAC;QAC7C,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAClD,IAAI,OAAO,KAAK,KAAK,SAAS;gBAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;QACzD,CAAC;QACD,KAAK,CAAC,KAAK,GAAG,QAAQ,CAAC;IACzB,CAAC;IACD,IAAI,GAAG,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACjC,GAAG,CAAC,kFAAkF,CAAC,CAAC;IAC1F,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,WAAW,IAAI,CAAC,KAAK,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACrD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,uDAAuD;AACvD,2EAA2E;AAC3E,mFAAmF;AACnF,+EAA+E;AAC/E,wEAAwE;AACxE,4DAA4D;AAC5D,MAAM,UAAU,UAAU,CACxB,GAAkB;IAElB,MAAM,GAAG,GAAG,IAAI,GAAG,EAAuB,CAAC;IAE3C,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC;IACnE,MAAM,UAAU,GAAG,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAClD,MAAM,WAAW,GAAG,QAAQ,CAAC,UAAU,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;IACxD,MAAM,cAAc,GAAG,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IACrD,IAAI,cAAc,EAAE,CAAC;QACnB,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;YACzD,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,SAAS;YAC5B,MAAM,KAAK,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;YACjC,IAAI,KAAK;gBAAE,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;IACrD,IAAI,UAAU,GAAa,EAAE,CAAC;IAC9B,IAAI,CAAC;QACH,UAAU,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,UAAU,GAAG,EAAE,CAAC;IAClB,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE,CAAC;QAC/B,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,SAAS;QACvC,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC7C,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,SAAS;QAC5B,MAAM,KAAK,GAAG,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;QAC3D,IAAI,KAAK;YAAE,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAClC,CAAC;IAED,MAAM,cAAc,GAAG,QAAQ,CAC7B,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,gBAAgB,EAAE,aAAa,CAAC,CAAC,CAC1D,CAAC;IACF,MAAM,YAAY,GAAG,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;IACtD,IAAI,YAAY,EAAE,CAAC;QACjB,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;YACvD,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,SAAS;YAC5B,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;YAC1B,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,CAAC,WAAW,KAAK,QAAQ;gBAAE,SAAS;YAC1D,MAAM,KAAK,GAAgB,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC;YAC5D,IAAI,OAAO,GAAG,CAAC,YAAY,KAAK,QAAQ,IAAI,GAAG,CAAC,YAAY,EAAE,CAAC;gBAC7D,KAAK,CAAC,MAAM,GAAG,GAAG,CAAC,YAAY,CAAC;YAClC,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC;oBACH,KAAK,CAAC,MAAM,GAAG,YAAY,CACzB,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,CAAC,EAC3C,MAAM,CACP,CAAC;gBACJ,CAAC;gBAAC,MAAM,CAAC;oBACP,+DAA+D;gBACjE,CAAC;YACH,CAAC;YACD,IAAI,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ;gBAAE,KAAK,CAAC,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC;YAC3D,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,WAAW;gBAAE,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IAED,0EAA0E;IAC1E,yEAAyE;IACzE,2EAA2E;IAC3E,sCAAsC;IACtC,MAAM,SAAS,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;IACvD,KAAK,MAAM,aAAa,IAAI,SAAS,EAAE,CAAC;QACtC,MAAM,MAAM,GAAG,aAAa,KAAK,GAAG,CAAC,IAAI,CAAC;QAC1C,IAAI,WAAqB,CAAC;QAC1B,IAAI,CAAC;YACH,WAAW,GAAG,WAAW,CAAC,aAAa,CAAC,CAAC;QAC3C,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,WAAW,EAAE,CAAC;YAChC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAAE,SAAS;YACrC,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAC3C,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,SAAS;YAC5B,IAAI,OAAe,CAAC;YACpB,IAAI,CAAC;gBACH,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,aAAa,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC;YAC7D,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;YACD,yEAAyE;YACzE,sDAAsD;YACtD,IAAI,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC;gBAAE,SAAS;YACnD,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;YACjE,IAAI,CAAC,WAAW,IAAI,CAAC,IAAI;gBAAE,SAAS;YACpC,MAAM,KAAK,GAAgB,EAAE,CAAC;YAC9B,IAAI,WAAW;gBAAE,KAAK,CAAC,WAAW,GAAG,WAAW,CAAC;YACjD,IAAI,KAAK;gBAAE,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC;YAC/B,IAAI,IAAI;gBAAE,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC;YAC9B,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;AACtE,CAAC;AAED,8EAA8E;AAC9E,iEAAiE;AACjE,SAAS,kBAAkB,CAAC,OAAe;IAKzC,MAAM,CAAC,GAAG,0BAA0B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACnD,IAAI,CAAC,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IACjC,MAAM,KAAK,GAAG,CAAC,GAAW,EAAsB,EAAE;QAChD,MAAM,EAAE,GAAG,IAAI,MAAM,CAAC,IAAI,GAAG,eAAe,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9D,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACnE,CAAC,CAAC;IACF,MAAM,WAAW,GAAG,KAAK,CAAC,aAAa,CAAC,CAAC;IACzC,MAAM,KAAK,GAAG,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;IAC7C,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/C,OAAO,EAAE,WAAW,EAAE,WAAW,IAAI,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AAChE,CAAC"}
+{"version":3,"file":"agents.js","sourceRoot":"","sources":["../src/agents.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AACpD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACxC,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACvF,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAC/B,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAkBlD,2EAA2E;AAC3E,iFAAiF;AACjF,MAAM,WAAW,GAAG,cAAc,CAAC;AAEnC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC;AAEtD,iFAAiF;AACjF,+EAA+E;AAC/E,gFAAgF;AAChF,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC;IAC3B,SAAS;IACT,WAAW;IACX,QAAQ;IACR,SAAS;IACT,SAAS;IACT,OAAO;IACP,MAAM;CACP,CAAC,CAAC;AAEH,6EAA6E;AAC7E,+EAA+E;AAC/E,yDAAyD;AACzD,MAAM,WAAW,GAA2B;IAC1C,GAAG,EAAE,SAAS;IACd,MAAM,EAAE,SAAS;IACjB,KAAK,EAAE,SAAS;IAChB,IAAI,EAAE,SAAS;IACf,MAAM,EAAE,SAAS;IACjB,KAAK,EAAE,SAAS;IAChB,IAAI,EAAE,SAAS;IACf,KAAK,EAAE,SAAS;IAChB,IAAI,EAAE,SAAS;IACf,SAAS,EAAE,SAAS;IACpB,IAAI,EAAE,SAAS;IACf,IAAI,EAAE,SAAS;IACf,WAAW,EAAE,SAAS;IACtB,YAAY,EAAE,SAAS;IACvB,IAAI,EAAE,SAAS;IACf,IAAI,EAAE,SAAS;IACf,eAAe,EAAE,SAAS;IAC1B,MAAM,EAAE,SAAS;IACjB,MAAM,EAAE,SAAS;IACjB,MAAM,EAAE,SAAS;IACjB,OAAO,EAAE,SAAS;IAClB,OAAO,EAAE,SAAS;IAClB,IAAI,EAAE,SAAS;IACf,IAAI,EAAE,SAAS;IACf,OAAO,EAAE,SAAS;IAClB,MAAM,EAAE,SAAS;IACjB,KAAK,EAAE,SAAS;IAChB,KAAK,EAAE,SAAS;IAChB,MAAM,EAAE,SAAS;IACjB,KAAK,EAAE,SAAS;IAChB,IAAI,EAAE,SAAS;IACf,IAAI,EAAE,SAAS;IACf,KAAK,EAAE,SAAS;CACjB,CAAC;AAEF,8EAA8E;AAC9E,4EAA4E;AAC5E,2CAA2C;AAC3C,SAAS,cAAc,CAAC,GAAuB;IAC7C,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACzB,IAAI,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAClD,yEAAyE;IACzE,IAAI,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACpC,OAAO,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;IACnE,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;IAClC,IAAI,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1C,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IAClC,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAC1B,GAAG,CAAC,oCAAoC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACjE,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAChD,CAAC,CAAE,KAAiC;QACpC,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY;IAC5B,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,4EAA4E;AAC5E,+EAA+E;AAC/E,0EAA0E;AAC1E,2EAA2E;AAC3E,mCAAmC;AACnC,SAAS,iBAAiB,CAAC,IAAY,EAAE,IAAY;IACnD,MAAM,SAAS,GAAG,gBAAgB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC/C,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IAC5B,OAAO,QAAQ,CAAC,SAAS,CAAC,CAAC;AAC7B,CAAC;AAED,8EAA8E;AAC9E,2EAA2E;AAC3E,8EAA8E;AAC9E,8EAA8E;AAC9E,6EAA6E;AAC7E,0EAA0E;AAC1E,SAAS,aAAa,CAAC,GAAY,EAAE,OAAe,EAAE,SAAiB;IACrE,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC1B,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,MAAM,KAAK,GAAgB,EAAE,CAAC;IAE9B,MAAM,WAAW,GAAG,CAAC,GAAiD,EAAsB,EAAE,CAC5F,OAAO,GAAG,CAAC,GAAG,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAE,GAAG,CAAC,GAAG,CAAY,CAAC,CAAC,CAAC,SAAS,CAAC;IAClE,MAAM,WAAW,GAAG,CAAC,GAAyC,EAAsB,EAAE,CACpF,OAAO,GAAG,CAAC,GAAG,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAW,CAAC;QACjE,CAAC,CAAE,GAAG,CAAC,GAAG,CAAY;QACtB,CAAC,CAAC,SAAS,CAAC;IAEhB,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IACnC,MAAM,MAAM,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;IACrC,MAAM,WAAW,GAAG,WAAW,CAAC,aAAa,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAG,cAAc,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;IACnD,MAAM,WAAW,GAAG,WAAW,CAAC,aAAa,CAAC,CAAC;IAC/C,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IAClC,MAAM,QAAQ,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;IACzC,IAAI,KAAK;QAAE,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC;IAC/B,IAAI,MAAM;QAAE,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC;IAClC,IAAI,WAAW;QAAE,KAAK,CAAC,WAAW,GAAG,WAAW,CAAC;IACjD,IAAI,KAAK;QAAE,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC;IAC/B,IAAI,WAAW,KAAK,SAAS;QAAE,KAAK,CAAC,WAAW,GAAG,WAAW,CAAC;IAC/D,IAAI,IAAI,KAAK,SAAS;QAAE,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC;IAC3C,IAAI,QAAQ,KAAK,SAAS;QAAE,KAAK,CAAC,QAAQ,GAAG,QAAQ,CAAC;IACtD,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,SAAS;QAAE,KAAK,CAAC,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;IAClE,yEAAyE;IACzE,2EAA2E;IAC3E,uEAAuE;IACvE,oEAAoE;IACpE,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QACxD,IAAI,GAAG,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAC5B,GAAG,CACD,kBAAkB,GAAG,CAAC,IAAI,iBAAiB,SAAS,0BAA0B,OAAO,wCAAwC,CAC9H,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,IAAI,GAAG,UAAU,CAAC;IAC1B,CAAC;IACD,sEAAsE;IACtE,2EAA2E;IAC3E,6DAA6D;IAC7D,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAClC,IAAI,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,SAAS,CAAC,EAAE,CAAC;QAC9E,GAAG,CACD,8BAA8B,SAAS,0BAA0B,OAAO,4BAA4B,CACrG,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACjC,GAAG,CACD,yCAAyC,SAAS,0BAA0B,OAAO,4BAA4B,CAChH,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,WAAW,IAAI,CAAC,KAAK,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACrD,OAAO,KAAK,CAAC;AACf,CAAC;AAID,uDAAuD;AACvD,2EAA2E;AAC3E,mFAAmF;AACnF,+EAA+E;AAC/E,wEAAwE;AACxE,4DAA4D;AAC5D,EAAE;AACF,4EAA4E;AAC5E,6EAA6E;AAC7E,4EAA4E;AAC5E,0EAA0E;AAC1E,6EAA6E;AAC7E,0EAA0E;AAC1E,4EAA4E;AAC5E,yEAAyE;AACzE,4CAA4C;AAC5C,MAAM,UAAU,UAAU,CAAC,GAAkB;IAC3C,MAAM,WAAW,GAAG,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC9C,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IACjD,MAAM,MAAM,GAAG,cAAc,CAAmB,GAAG,EAAE,WAAW,CAAC,CAAC;IAClE,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAC1B,MAAM,MAAM,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;IACvC,cAAc,CAAC,GAAG,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;IACzC,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,kBAAkB,CAAC,GAAkB;IAC5C,MAAM,GAAG,GAAG,IAAI,GAAG,EAAuB,CAAC;IAE3C,MAAM,QAAQ,GAAG,QAAQ,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC;IACtF,MAAM,UAAU,GAAG,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAClD,MAAM,WAAW,GAAG,QAAQ,CAAC,UAAU,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;IACxD,MAAM,cAAc,GAAG,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IACrD,IAAI,cAAc,EAAE,CAAC;QACnB,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;YACzD,uEAAuE;YACvE,0EAA0E;YAC1E,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;gBACxB,GAAG,CACD,4CAA4C,GAAG,CAAC,IAAI,MAAM,GAAG,CAAC,MAAM,oBAAoB,IAAI,wEAAwE,CACrK,CAAC;gBACF,SAAS;YACX,CAAC;YACD,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,SAAS;YAC5B,MAAM,KAAK,GAAG,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACjD,IAAI,KAAK;gBAAE,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;IACrD,IAAI,UAAU,GAAa,EAAE,CAAC;IAC9B,IAAI,CAAC;QACH,UAAU,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,UAAU,GAAG,EAAE,CAAC;IAClB,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE,CAAC;QAC/B,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,SAAS;QACvC,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC7C,2EAA2E;QAC3E,6BAA6B;QAC7B,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;YACxB,GAAG,CACD,kDAAkD,GAAG,CAAC,IAAI,MAAM,GAAG,CAAC,MAAM,oBAAoB,IAAI,wEAAwE,CAC3K,CAAC;YACF,SAAS;QACX,CAAC;QACD,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,SAAS;QAC5B,MAAM,KAAK,GAAG,aAAa,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC9F,IAAI,KAAK;YAAE,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAClC,CAAC;IAED,MAAM,cAAc,GAAG,QAAQ,CAC7B,iBAAiB,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,gBAAgB,EAAE,aAAa,CAAC,CAAC,CAC7E,CAAC;IACF,MAAM,YAAY,GAAG,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;IACtD,IAAI,YAAY,EAAE,CAAC;QACjB,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;YACvD,yEAAyE;YACzE,6EAA6E;YAC7E,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;gBACxB,GAAG,CACD,2CAA2C,GAAG,CAAC,IAAI,MAAM,GAAG,CAAC,MAAM,oBAAoB,IAAI,wEAAwE,CACpK,CAAC;gBACF,SAAS;YACX,CAAC;YACD,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,SAAS;YAC5B,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;YAC1B,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,CAAC,WAAW,KAAK,QAAQ;gBAAE,SAAS;YAC1D,MAAM,KAAK,GAAgB,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC;YAC5D,IAAI,OAAO,GAAG,CAAC,YAAY,KAAK,QAAQ,IAAI,GAAG,CAAC,YAAY,EAAE,CAAC;gBAC7D,KAAK,CAAC,MAAM,GAAG,GAAG,CAAC,YAAY,CAAC;YAClC,CAAC;iBAAM,CAAC;gBACN,qEAAqE;gBACrE,qEAAqE;gBACrE,wBAAwB;gBACxB,MAAM,UAAU,GAAG,gBAAgB,CACjC,GAAG,CAAC,IAAI,EACR,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,CAAC,CAC5C,CAAC;gBACF,IAAI,UAAU,EAAE,CAAC;oBACf,IAAI,CAAC;wBACH,KAAK,CAAC,MAAM,GAAG,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;oBAClD,CAAC;oBAAC,MAAM,CAAC;wBACP,+DAA+D;oBACjE,CAAC;gBACH,CAAC;YACH,CAAC;YACD,IAAI,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ;gBAAE,KAAK,CAAC,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC;YAC3D,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,WAAW;gBAAE,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IAED,0EAA0E;IAC1E,yEAAyE;IACzE,2EAA2E;IAC3E,sCAAsC;IACtC,MAAM,SAAS,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;IACvD,KAAK,MAAM,aAAa,IAAI,SAAS,EAAE,CAAC;QACtC,MAAM,MAAM,GAAG,aAAa,KAAK,GAAG,CAAC,IAAI,CAAC;QAC1C,IAAI,WAAqB,CAAC;QAC1B,IAAI,CAAC;YACH,WAAW,GAAG,WAAW,CAAC,aAAa,CAAC,CAAC;QAC3C,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,WAAW,EAAE,CAAC;YAChC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAAE,SAAS;YACrC,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAC3C,wEAAwE;YACxE,6BAA6B;YAC7B,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;gBACxB,GAAG,CACD,yCAAyC,GAAG,CAAC,IAAI,MAAM,GAAG,CAAC,MAAM,oBAAoB,IAAI,wEAAwE,CAClK,CAAC;gBACF,SAAS;YACX,CAAC;YACD,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,SAAS;YAC5B,sEAAsE;YACtE,yEAAyE;YACzE,2BAA2B;YAC3B,MAAM,SAAS,GAAG,gBAAgB,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC,CAAC;YACzE,IAAI,CAAC,SAAS;gBAAE,SAAS;YACzB,IAAI,MAAqE,CAAC;YAC1E,IAAI,CAAC;gBACH,MAAM,GAAG,UAAU,CAAC,eAAe,EAAE,SAAS,EAAE,CAAC,OAAO,EAAE,EAAE;oBAC1D,mEAAmE;oBACnE,4DAA4D;oBAC5D,IAAI,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC;wBAAE,OAAO,IAAI,CAAC;oBACtD,OAAO,kBAAkB,CAAC,OAAO,CAAC,CAAC;gBACrC,CAAC,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;YACD,IAAI,CAAC,MAAM;gBAAE,SAAS;YACtB,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC;YAC5C,IAAI,CAAC,WAAW,IAAI,CAAC,IAAI;gBAAE,SAAS;YACpC,MAAM,KAAK,GAAgB,EAAE,CAAC;YAC9B,IAAI,WAAW;gBAAE,KAAK,CAAC,WAAW,GAAG,WAAW,CAAC;YACjD,IAAI,KAAK;gBAAE,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC;YAC/B,IAAI,IAAI;gBAAE,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC;YAC9B,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;AACtE,CAAC;AAED,8EAA8E;AAC9E,iEAAiE;AACjE,SAAS,kBAAkB,CAAC,OAAe;IAKzC,MAAM,CAAC,GAAG,0BAA0B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACnD,IAAI,CAAC,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IACjC,MAAM,KAAK,GAAG,CAAC,GAAW,EAAsB,EAAE;QAChD,MAAM,EAAE,GAAG,IAAI,MAAM,CAAC,IAAI,GAAG,eAAe,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9D,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACnE,CAAC,CAAC;IACF,MAAM,WAAW,GAAG,KAAK,CAAC,aAAa,CAAC,CAAC;IACzC,MAAM,KAAK,GAAG,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;IAC7C,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/C,OAAO,EAAE,WAAW,EAAE,WAAW,IAAI,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AAChE,CAAC"}

package/dist/cache.d.ts

@@ -0,0 +1,5 @@
+export declare function pluginCacheRoot(): string;
+export declare function _resetFileCacheForTests(): void;
+export declare function cachedRead<T>(kind: string, path: string, parse: (content: string) => T): T;
+export declare function flushFileCache(): void;
+//# sourceMappingURL=cache.d.ts.map

package/dist/cache.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cache.d.ts","sourceRoot":"","sources":["../src/cache.ts"],"names":[],"mappings":"AAqCA,wBAAgB,eAAe,IAAI,MAAM,CAGxC;AAyBD,wBAAgB,uBAAuB,IAAI,IAAI,CAG9C;AAgBD,wBAAgB,UAAU,CAAC,CAAC,EAC1B,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,CAAC,GAC5B,CAAC,CAaH;AAMD,wBAAgB,cAAc,IAAI,IAAI,CAWrC"}

package/dist/cache.js

@@ -0,0 +1,94 @@
+import { mkdirSync, readFileSync, statSync, writeFileSync } from "node:fs";
+import { homedir } from "node:os";
+import { dirname, join } from "node:path";
+const CACHE_FILE_NAME = "discovery-file-cache.json";
+// Bump when the shape of a cached `value` changes, so an old on-disk cache
+// from a prior plugin version is discarded instead of misread.
+const CACHE_VERSION = 1;
+let store = null;
+let dirty = false;
+// Deliberately its own root, separate from {state}/opencode/plugin-data/:
+// that tree is reserved for *discovered* packages' own data (created only
+// when a package's mcp.json is actually processed), and several tests assert
+// it stays untouched when discovery finds nothing that needs it. This cache
+// belongs to the plugin itself, not to anything it discovers. Exported so
+// other plugin-owned caches (discovery-cache.ts) share one root instead of
+// inventing their own convention.
+export function pluginCacheRoot() {
+    const base = process.env.XDG_CACHE_HOME || join(homedir(), ".cache");
+    return join(base, "opencode-skill-autodiscovery");
+}
+function cacheFilePath() {
+    return join(pluginCacheRoot(), CACHE_FILE_NAME);
+}
+function loadStore() {
+    if (store)
+        return store;
+    try {
+        const raw = JSON.parse(readFileSync(cacheFilePath(), "utf8"));
+        store =
+            raw && raw.version === CACHE_VERSION && raw.entries && typeof raw.entries === "object"
+                ? raw.entries
+                : {};
+    }
+    catch {
+        store = {};
+    }
+    return store;
+}
+// Test-only seam: drops the in-memory store so the next cachedRead/flush
+// reloads from disk (or starts empty) instead of reusing state left over
+// from a previous test's HOME. Production code never calls this: one
+// opencode process makes exactly one config() call, so a process-lifetime
+// singleton is the right scope there.
+export function _resetFileCacheForTests() {
+    store = null;
+    dirty = false;
+}
+// Reads `path` and feeds its content to `parse`, reusing a previous result
+// when the file's (mtimeMs, size) match the last successful cachedRead of the
+// same (kind, path) pair. Throws exactly when `readFileSync`/`statSync` would
+// have thrown (missing file, permission error, etc.) — existing callers
+// already wrap those in try/catch, so behavior is unchanged when nothing is
+// cached yet. `parse` must be pure and return a JSON-serializable value: it
+// round-trips through the on-disk cache verbatim.
+//
+// `kind` namespaces the cache entry by what `parse` extracts, not just which
+// file: the same file is read for different purposes at different call sites
+// (e.g. "does this .md have agent frontmatter" vs. "the parsed agent from
+// this .md"), and those must never share one cached value. The key is built
+// with JSON.stringify (not string concatenation) so no separator choice can
+// ever collide with a path or kind that happens to contain it.
+export function cachedRead(kind, path, parse) {
+    const st = statSync(path);
+    const key = JSON.stringify([kind, path]);
+    const s = loadStore();
+    const cached = s[key];
+    if (cached && cached.mtimeMs === st.mtimeMs && cached.size === st.size) {
+        return cached.value;
+    }
+    const content = readFileSync(path, "utf8");
+    const value = parse(content);
+    s[key] = { mtimeMs: st.mtimeMs, size: st.size, value };
+    dirty = true;
+    return value;
+}
+// Persists the in-memory cache to disk when it changed. Best-effort, like
+// every other filesystem side effect in this codebase: a failed write is
+// swallowed rather than surfaced, since caching is an optimization and must
+// never be able to break discovery.
+export function flushFileCache() {
+    if (!dirty || !store)
+        return;
+    try {
+        const path = cacheFilePath();
+        mkdirSync(dirname(path), { recursive: true });
+        const payload = { version: CACHE_VERSION, entries: store };
+        writeFileSync(path, JSON.stringify(payload));
+        dirty = false;
+    }
+    catch {
+        // Non-fatal: the next run just re-reads everything.
+    }
+}
+//# sourceMappingURL=cache.js.map

package/dist/cache.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cache.js","sourceRoot":"","sources":["../src/cache.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC3E,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAoB1C,MAAM,eAAe,GAAG,2BAA2B,CAAC;AACpD,2EAA2E;AAC3E,+DAA+D;AAC/D,MAAM,aAAa,GAAG,CAAC,CAAC;AAExB,IAAI,KAAK,GAAsB,IAAI,CAAC;AACpC,IAAI,KAAK,GAAG,KAAK,CAAC;AAElB,0EAA0E;AAC1E,0EAA0E;AAC1E,6EAA6E;AAC7E,4EAA4E;AAC5E,0EAA0E;AAC1E,2EAA2E;AAC3E,kCAAkC;AAClC,MAAM,UAAU,eAAe;IAC7B,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,CAAC;IACrE,OAAO,IAAI,CAAC,IAAI,EAAE,8BAA8B,CAAC,CAAC;AACpD,CAAC;AAED,SAAS,aAAa;IACpB,OAAO,IAAI,CAAC,eAAe,EAAE,EAAE,eAAe,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,SAAS;IAChB,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC;IACxB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,aAAa,EAAE,EAAE,MAAM,CAAC,CAAuB,CAAC;QACpF,KAAK;YACH,GAAG,IAAI,GAAG,CAAC,OAAO,KAAK,aAAa,IAAI,GAAG,CAAC,OAAO,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ;gBACpF,CAAC,CAAC,GAAG,CAAC,OAAO;gBACb,CAAC,CAAC,EAAE,CAAC;IACX,CAAC;IAAC,MAAM,CAAC;QACP,KAAK,GAAG,EAAE,CAAC;IACb,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,yEAAyE;AACzE,yEAAyE;AACzE,qEAAqE;AACrE,0EAA0E;AAC1E,sCAAsC;AACtC,MAAM,UAAU,uBAAuB;IACrC,KAAK,GAAG,IAAI,CAAC;IACb,KAAK,GAAG,KAAK,CAAC;AAChB,CAAC;AAED,2EAA2E;AAC3E,8EAA8E;AAC9E,8EAA8E;AAC9E,wEAAwE;AACxE,4EAA4E;AAC5E,4EAA4E;AAC5E,kDAAkD;AAClD,EAAE;AACF,6EAA6E;AAC7E,6EAA6E;AAC7E,0EAA0E;AAC1E,4EAA4E;AAC5E,4EAA4E;AAC5E,+DAA+D;AAC/D,MAAM,UAAU,UAAU,CACxB,IAAY,EACZ,IAAY,EACZ,KAA6B;IAE7B,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;IACzC,MAAM,CAAC,GAAG,SAAS,EAAE,CAAC;IACtB,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;IACtB,IAAI,MAAM,IAAI,MAAM,CAAC,OAAO,KAAK,EAAE,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC,IAAI,EAAE,CAAC;QACvE,OAAO,MAAM,CAAC,KAAU,CAAC;IAC3B,CAAC;IACD,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;IAC7B,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;IACvD,KAAK,GAAG,IAAI,CAAC;IACb,OAAO,KAAK,CAAC;AACf,CAAC;AAED,0EAA0E;AAC1E,yEAAyE;AACzE,4EAA4E;AAC5E,oCAAoC;AACpC,MAAM,UAAU,cAAc;IAC5B,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK;QAAE,OAAO;IAC7B,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,aAAa,EAAE,CAAC;QAC7B,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9C,MAAM,OAAO,GAAc,EAAE,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QACtE,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;QAC7C,KAAK,GAAG,KAAK,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,oDAAoD;IACtD,CAAC;AACH,CAAC"}

package/dist/discovery-cache.d.ts

@@ -0,0 +1,9 @@
+import type { PluginPackage } from "./discovery.js";
+export declare function _resetDiscoveryCacheForTests(): void;
+export declare function fingerprintTree(root: string): string;
+export declare function getCachedPackages(key: string, fingerprint: string): PluginPackage[] | null;
+export declare function setCachedPackages(key: string, fingerprint: string, packages: PluginPackage[]): void;
+export declare function getCachedValue<T>(key: string, fingerprint: string): T | null;
+export declare function setCachedValue<T>(key: string, fingerprint: string, value: T): void;
+export declare function flushDiscoveryCache(): void;
+//# sourceMappingURL=discovery-cache.d.ts.map

package/dist/discovery-cache.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"discovery-cache.d.ts","sourceRoot":"","sources":["../src/discovery-cache.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AA+DpD,wBAAgB,4BAA4B,IAAI,IAAI,CAGnD;AAcD,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAOpD;AA2BD,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,aAAa,EAAE,GAAG,IAAI,CAE1F;AAKD,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,MAAM,EACX,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,aAAa,EAAE,GACxB,IAAI,CAEN;AAWD,wBAAgB,cAAc,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,CAAC,GAAG,IAAI,CAG5E;AAED,wBAAgB,cAAc,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,GAAG,IAAI,CAGlF;AAQD,wBAAgB,mBAAmB,IAAI,IAAI,CAa1C"}

package/dist/discovery-cache.js

@@ -0,0 +1,161 @@
+import { createHash } from "node:crypto";
+import { mkdirSync, readdirSync, readFileSync, renameSync, statSync, writeFileSync } from "node:fs";
+import { dirname, join, relative } from "node:path";
+import { pluginCacheRoot } from "./cache.js";
+// findPluginRoots' real walk is the expensive part of a scan: at every
+// directory it calls hasPluginLayout -> hasRootAgentFiles, which reads every
+// flat *.md file's content to check its frontmatter (cache.ts's cachedRead
+// avoids re-parsing an unchanged file's bytes, but the walk still visits
+// every directory and opens every candidate file on every single run). For a
+// large, mostly-unchanged tree (a synced Claude/VS Code plugin marketplace),
+// that per-directory cost dominates opencode's startup time.
+//
+// This module is a second, coarser cache layer in front of the walk itself:
+// fingerprint the subtree cheaply (readdirSync + statSync only, no content
+// reads, no containment/symlink-resolution overhead) and let the caller skip
+// the real walk entirely when the fingerprint matches the last run's. Pure
+// primitives only — no dependency on discovery.ts's walk functions, so
+// discovery.ts can depend on this module without a cycle; the glue that
+// actually runs findPluginRoots on a miss lives in discovery.ts itself.
+const CACHE_FILE_NAME = "discovery-root-cache.json";
+// Bumped from 1 to 2 when the per-entry field storing the cached value was
+// renamed from `packages` (PluginPackage[]-only) to the generic `value`
+// (any JSON-serializable result — readAgents' cache reuses this same store).
+// A version-1 file on disk is now correctly treated as absent rather than
+// misread with the wrong field name.
+const CACHE_VERSION = 2;
+// Mirrors discovery.ts's MAX_WALK_DEPTH: this is a separate, cheaper walk
+// (see fingerprintTree below), but it must bound depth the same way for the
+// same reason — a pathological or cyclic tree must not grow this pass
+// unboundedly, even though (unlike the real walk) it does not resolve
+// symlinks to detect cycles precisely. A cycle just gets fingerprinted up to
+// this depth and then stops, exactly like the real walk's own documented
+// "belt-and-braces, not load-bearing" depth cap.
+const MAX_FINGERPRINT_DEPTH = 16;
+let store = null;
+let dirty = false;
+function cacheFilePath() {
+    return join(pluginCacheRoot(), CACHE_FILE_NAME);
+}
+function loadStore() {
+    if (store)
+        return store;
+    try {
+        const raw = JSON.parse(readFileSync(cacheFilePath(), "utf8"));
+        store =
+            raw && raw.version === CACHE_VERSION && raw.entries && typeof raw.entries === "object"
+                ? raw.entries
+                : {};
+    }
+    catch {
+        store = {};
+    }
+    return store;
+}
+// Test-only seam, same rationale as cache.ts's _resetFileCacheForTests: one
+// opencode process makes one config() call, so the module-level singleton is
+// the right scope in production; tests need to force a reload between cases
+// that reuse the same HOME.
+export function _resetDiscoveryCacheForTests() {
+    store = null;
+    dirty = false;
+}
+// A cheap, content-free signature of everything a full walk of `root` would
+// visit: every directory's direct children, keyed by (path relative to root,
+// file-or-dir, mtimeMs, size), hashed. Any add, remove, rename, or content
+// edit anywhere in the subtree changes at least one child's stat (a write
+// changes the file's own mtime/size; an add/remove/rename changes its parent
+// directory's mtime) and so changes this hash — there is no staleness
+// window, only a cheaper way to notice nothing changed.
+//
+// Deliberately skips realpathSync: that is precisely the overhead the real
+// walk pays for its containment/symlink-cycle guarantees, and this pass does
+// not need those guarantees — it only decides whether to trust a cached
+// *result* of the real (fully-guarded) walk, never emits a path itself.
+export function fingerprintTree(root) {
+    const parts = [];
+    walkFingerprint(root, root, parts, 0);
+    parts.sort();
+    const hash = createHash("sha1");
+    for (const part of parts)
+        hash.update(part).update("\n");
+    return hash.digest("hex");
+}
+function walkFingerprint(root, dir, parts, depth) {
+    if (depth > MAX_FINGERPRINT_DEPTH)
+        return;
+    let entries;
+    try {
+        entries = readdirSync(dir);
+    }
+    catch {
+        return;
+    }
+    for (const entry of entries) {
+        if (entry === ".git" || entry === "node_modules")
+            continue;
+        const full = join(dir, entry);
+        let st;
+        try {
+            st = statSync(full);
+        }
+        catch {
+            continue;
+        }
+        const isDir = st.isDirectory();
+        parts.push(`${relative(root, full)}:${isDir ? "d" : "f"}:${st.mtimeMs}:${st.size}`);
+        if (isDir)
+            walkFingerprint(root, full, parts, depth + 1);
+    }
+}
+// Returns the packages cached for `key` when its stored fingerprint matches
+// `fingerprint`, or null on a miss (not cached yet, or the subtree changed).
+export function getCachedPackages(key, fingerprint) {
+    return getCachedValue(key, fingerprint);
+}
+// Records `packages` as the result for `key` at `fingerprint`, so the next
+// call with an unchanged fingerprint gets them back from getCachedPackages
+// without re-walking.
+export function setCachedPackages(key, fingerprint, packages) {
+    setCachedValue(key, fingerprint, packages);
+}
+// Generic form of the same fingerprint-gated cache, for any JSON-serializable
+// result of a per-directory computation — not just a package list. Used by
+// readAgents (agents.ts) to cache a whole package's extracted agents keyed by
+// a fingerprint of that package's own root: a marketplace layout with few
+// packages but many flat *.md files per package (the exact shape that caused
+// the original hang) would otherwise re-run readdirSync + the per-file
+// containment check for every file, every run, even once the top-level walk
+// itself is fully cached — package roots are typically far smaller subtrees
+// than the marketplace root, so fingerprinting one is cheap.
+export function getCachedValue(key, fingerprint) {
+    const cached = loadStore()[key];
+    return cached && cached.fingerprint === fingerprint ? cached.value : null;
+}
+export function setCachedValue(key, fingerprint, value) {
+    loadStore()[key] = { fingerprint, value, cachedAt: new Date().toISOString() };
+    dirty = true;
+}
+// Persists the in-memory cache to disk when it changed, atomically (write to
+// a pid-suffixed temp file, then rename over the real path) so a process
+// killed mid-write can never leave a half-written cache file behind for the
+// next run to trip over. Best-effort, like every other filesystem side
+// effect in this codebase: a failed write is swallowed, and the next run
+// just re-walks.
+export function flushDiscoveryCache() {
+    if (!dirty || !store)
+        return;
+    try {
+        const path = cacheFilePath();
+        mkdirSync(dirname(path), { recursive: true });
+        const payload = { version: CACHE_VERSION, entries: store };
+        const tmp = `${path}.${process.pid}.tmp`;
+        writeFileSync(tmp, JSON.stringify(payload));
+        renameSync(tmp, path);
+        dirty = false;
+    }
+    catch {
+        // Non-fatal: the next run just re-walks and rebuilds the cache.
+    }
+}
+//# sourceMappingURL=discovery-cache.js.map

package/dist/discovery-cache.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"discovery-cache.js","sourceRoot":"","sources":["../src/discovery-cache.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,UAAU,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACpG,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACpD,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAG7C,uEAAuE;AACvE,6EAA6E;AAC7E,2EAA2E;AAC3E,yEAAyE;AACzE,6EAA6E;AAC7E,6EAA6E;AAC7E,6DAA6D;AAC7D,EAAE;AACF,4EAA4E;AAC5E,2EAA2E;AAC3E,6EAA6E;AAC7E,2EAA2E;AAC3E,uEAAuE;AACvE,wEAAwE;AACxE,wEAAwE;AAExE,MAAM,eAAe,GAAG,2BAA2B,CAAC;AACpD,2EAA2E;AAC3E,wEAAwE;AACxE,6EAA6E;AAC7E,0EAA0E;AAC1E,qCAAqC;AACrC,MAAM,aAAa,GAAG,CAAC,CAAC;AACxB,0EAA0E;AAC1E,4EAA4E;AAC5E,sEAAsE;AACtE,sEAAsE;AACtE,6EAA6E;AAC7E,yEAAyE;AACzE,iDAAiD;AACjD,MAAM,qBAAqB,GAAG,EAAE,CAAC;AAMjC,IAAI,KAAK,GAAsB,IAAI,CAAC;AACpC,IAAI,KAAK,GAAG,KAAK,CAAC;AAElB,SAAS,aAAa;IACpB,OAAO,IAAI,CAAC,eAAe,EAAE,EAAE,eAAe,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,SAAS;IAChB,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC;IACxB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,aAAa,EAAE,EAAE,MAAM,CAAC,CAAuB,CAAC;QACpF,KAAK;YACH,GAAG,IAAI,GAAG,CAAC,OAAO,KAAK,aAAa,IAAI,GAAG,CAAC,OAAO,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ;gBACpF,CAAC,CAAC,GAAG,CAAC,OAAO;gBACb,CAAC,CAAC,EAAE,CAAC;IACX,CAAC;IAAC,MAAM,CAAC;QACP,KAAK,GAAG,EAAE,CAAC;IACb,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,4EAA4E;AAC5E,6EAA6E;AAC7E,4EAA4E;AAC5E,4BAA4B;AAC5B,MAAM,UAAU,4BAA4B;IAC1C,KAAK,GAAG,IAAI,CAAC;IACb,KAAK,GAAG,KAAK,CAAC;AAChB,CAAC;AAED,4EAA4E;AAC5E,6EAA6E;AAC7E,2EAA2E;AAC3E,0EAA0E;AAC1E,6EAA6E;AAC7E,sEAAsE;AACtE,wDAAwD;AACxD,EAAE;AACF,2EAA2E;AAC3E,6EAA6E;AAC7E,wEAAwE;AACxE,wEAAwE;AACxE,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,eAAe,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IACtC,KAAK,CAAC,IAAI,EAAE,CAAC;IACb,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;IAChC,KAAK,MAAM,IAAI,IAAI,KAAK;QAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACzD,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC5B,CAAC;AAED,SAAS,eAAe,CAAC,IAAY,EAAE,GAAW,EAAE,KAAe,EAAE,KAAa;IAChF,IAAI,KAAK,GAAG,qBAAqB;QAAE,OAAO;IAC1C,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;IACT,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,cAAc;YAAE,SAAS;QAC3D,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC9B,IAAI,EAA+B,CAAC;QACpC,IAAI,CAAC;YACH,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;QACtB,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,MAAM,KAAK,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;QAC/B,KAAK,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,EAAE,CAAC,OAAO,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;QACpF,IAAI,KAAK;YAAE,eAAe,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;IAC3D,CAAC;AACH,CAAC;AAED,4EAA4E;AAC5E,6EAA6E;AAC7E,MAAM,UAAU,iBAAiB,CAAC,GAAW,EAAE,WAAmB;IAChE,OAAO,cAAc,CAAkB,GAAG,EAAE,WAAW,CAAC,CAAC;AAC3D,CAAC;AAED,2EAA2E;AAC3E,2EAA2E;AAC3E,sBAAsB;AACtB,MAAM,UAAU,iBAAiB,CAC/B,GAAW,EACX,WAAmB,EACnB,QAAyB;IAEzB,cAAc,CAAC,GAAG,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;AAC7C,CAAC;AAED,8EAA8E;AAC9E,2EAA2E;AAC3E,8EAA8E;AAC9E,0EAA0E;AAC1E,6EAA6E;AAC7E,uEAAuE;AACvE,4EAA4E;AAC5E,4EAA4E;AAC5E,6DAA6D;AAC7D,MAAM,UAAU,cAAc,CAAI,GAAW,EAAE,WAAmB;IAChE,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC,GAAG,CAAC,CAAC;IAChC,OAAO,MAAM,IAAI,MAAM,CAAC,WAAW,KAAK,WAAW,CAAC,CAAC,CAAE,MAAM,CAAC,KAAW,CAAC,CAAC,CAAC,IAAI,CAAC;AACnF,CAAC;AAED,MAAM,UAAU,cAAc,CAAI,GAAW,EAAE,WAAmB,EAAE,KAAQ;IAC1E,SAAS,EAAE,CAAC,GAAG,CAAC,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;IAC9E,KAAK,GAAG,IAAI,CAAC;AACf,CAAC;AAED,6EAA6E;AAC7E,yEAAyE;AACzE,4EAA4E;AAC5E,uEAAuE;AACvE,yEAAyE;AACzE,iBAAiB;AACjB,MAAM,UAAU,mBAAmB;IACjC,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK;QAAE,OAAO;IAC7B,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,aAAa,EAAE,CAAC;QAC7B,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9C,MAAM,OAAO,GAAc,EAAE,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QACtE,MAAM,GAAG,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;QACzC,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;QAC5C,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACtB,KAAK,GAAG,KAAK,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,gEAAgE;IAClE,CAAC;AACH,CAAC"}

package/dist/discovery.d.ts

@@ -7,6 +7,14 @@ export type { McpEntry } from "./mcp.js";
 export type PackageSource = "claude" | "vscode" | "opencode-cache" | "node_modules" | "extra";
 export type PluginPackage = {
     source: PackageSource;
+    /**
+     * Two-tier trust model. True when the content was installed or fetched
+     * deliberately via a host tool or opencode itself (claude/vscode manifests
+     * under home roots, opencode's package cache). False when present merely as
+     * a side effect (project node_modules, manifest-less walks, and any package
+     * reached through a user-supplied extra root).
+     */
+    trusted: boolean;
     name: string;
     root: string;
     skillDirs: string[];
@@ -21,18 +29,25 @@ export type SkillInfo = {
 };
 export type ConfigPatch = {
     skillPaths: string[];
+    skillTrust: Array<{
+        dir: string;
+        trusted: boolean;
+    }>;
     commands: Array<{
         name: string;
         description: string;
         template: string;
+        trusted: boolean;
     }>;
     mcp: Array<{
         key: string;
         entry: McpEntry;
+        trusted: boolean;
     }>;
     agents: Array<{
         name: string;
         agent: AgentConfig;
+        trusted: boolean;
     }>;
 };
 export type ConfigLike = {
@@ -47,23 +62,30 @@ export type ConfigLike = {
     agent?: Record<string, AgentConfig | undefined>;
 };
 export declare function contains(parent: string, child: string): boolean;
+export declare function resolveContained(root: string, candidate: string): string | null;
 export declare function readSkillInfo(dir: string): SkillInfo | null;
-export declare function readPackage(root: string, source: PackageSource): PluginPackage | null;
+export declare function readPackage(root: string, source: PackageSource, trusted?: boolean): PluginPackage | null;
 export declare function findSkillDirs(root: string, out: Set<string>, seen: Set<string>): void;
 export declare function findPluginRoots(root: string, out: string[]): void;
-export declare function packageFromDir(root: string, source: PackageSource): PluginPackage | null;
-export declare function collectVscodeManifest(out: PluginPackage[], installedJson: string): void;
-export declare function collectVscodeCache(out: PluginPackage[], cacheJson: string): void;
-export declare function collectVscode(out: PluginPackage[], extra: string[]): void;
-export declare function collectClaudeManifest(out: PluginPackage[], installedJson: string): void;
-export declare function collectClaude(out: PluginPackage[]): void;
+export declare function packageFromDir(root: string, source: PackageSource, trusted?: boolean): PluginPackage | null;
+export declare function collectVscodeManifest(out: PluginPackage[], installedJson: string, exclude?: string[], trusted?: boolean): void;
+export declare function collectVscodeCache(out: PluginPackage[], cacheJson: string, exclude?: string[], trusted?: boolean): void;
+export declare function collectVscode(out: PluginPackage[], extra: string[], exclude?: string[]): void;
+export declare function collectClaudeManifest(out: PluginPackage[], installedJson: string, exclude?: string[], trusted?: boolean): void;
+export declare function collectClaude(out: PluginPackage[], exclude?: string[]): void;
 export declare function opencodeCacheRoot(): string;
-export declare function collectOpencodeCache(packagesRoot: string, out: PluginPackage[]): void;
-export declare function collectNodeModules(nodeModulesRoot: string, out: PluginPackage[]): void;
+export declare function collectOpencodeCache(packagesRoot: string, out: PluginPackage[], exclude?: string[]): void;
+export declare function collectNodeModules(nodeModulesRoot: string, out: PluginPackage[], trusted?: boolean, exclude?: string[]): void;
 export declare function planConfig(packages: PluginPackage[], taken?: {
     commands?: Iterable<string>;
     mcp?: Iterable<string>;
     agents?: Iterable<string>;
+}, enabled?: {
+    mcp?: boolean;
+    agents?: boolean;
+}, consent?: {
+    mcp?: Iterable<string>;
+    agents?: Iterable<string>;
 }): ConfigPatch;
 export declare function applyConfigPatch(config: ConfigLike, plan: ConfigPatch, enabled: {
     mcp: boolean;