plugnz 0.0.21 → 0.0.22

package/dist/plugnz.mjs

@@ -11108,7 +11108,8 @@ function yamlStringify(value) {
 // src/hosts/hermes.ts
 var hermesProvenManagedRevisions = [
   "c0d7294769a38c17ceae51d8f7995e66e1dcae27",
-  "dce1e9b37581dd62e480a9064dc04a709c2940d3"
+  "dce1e9b37581dd62e480a9064dc04a709c2940d3",
+  "6e7b83a2f1c093e992a8d838ed77ea320fbd8e51"
 ];
 var hermesTargetProfile = {
   kind: "hermes",
@@ -15001,7 +15002,7 @@ function sourceBindingForArgument(source) {
 }
 function parseSource(source) {
   if (source.startsWith("./") || source.startsWith("../") || isAbsolute9(source)) {
-    const locator = resolve12(source);
+    const locator = canonicalLocalArgument(source);
     const binding = { kind: "local", locator };
     validateSourceBinding(binding);
     return { binding, sourceUri: locator };
@@ -15026,11 +15027,19 @@ function parseSource(source) {
     validateSourceBinding(binding);
     return { binding, sourceUri: formatSourceBinding(binding), fetchLocator: locator };
   }
-  const locator = resolve12(source);
+  const locator = canonicalLocalArgument(source);
   const binding = { kind: "local", locator };
   validateSourceBinding(binding);
   return { binding, sourceUri: locator };
 }
+function canonicalLocalArgument(source) {
+  const path = resolve12(source);
+  if (!existsSync20(path))
+    return path;
+  if (lstatSync10(path).isSymbolicLink())
+    throw new Error(`Symlink resources are not supported: ${path}`);
+  return realpath(path);
+}
 function formatSourceBinding(binding) {
   return binding.kind === "git" && binding.ref !== "HEAD" ? `${binding.locator}#${binding.ref}` : binding.locator;
 }
@@ -18387,6 +18396,19 @@ function createClaudeCodeLifecycleHost(input) {
         return decision;
       if (request.operation !== "install" && request.operation !== "update")
         return decision;
+      if (request.snapshot.inventory.componentDefinitions.some((component) => component.kind === "agent" && (component.root !== "agents" || component.dialect !== "markdown"))) {
+        return selectLifecycleRoute(definition.id, definition.evidenceProfiles.map((profile) => ({
+          ...profile,
+          semantics: { ...profile.semantics, agents: "unsupported" }
+        })), request);
+      }
+      const policies = [...request.snapshot.inventory.invocationPolicies, ...request.snapshot.inventory.componentInvocationPolicies];
+      if (policies.some((policy) => !policy.modelInvocable && !policy.declarations.some((declaration) => declaration.dialect === "claude-frontmatter" && declaration.field === "disable-model-invocation" && declaration.direction === "model" && declaration.allowed === false))) {
+        return selectLifecycleRoute(definition.id, definition.evidenceProfiles.map((profile) => ({
+          ...profile,
+          semantics: { ...profile.semantics, "model-invocation-control": "unsupported" }
+        })), request);
+      }
       if (!autoUpdateControlBlocked(request.nativeId))
         return decision;
       return selectLifecycleRoute(definition.id, profilesWithoutAutoUpdate(definition.evidenceProfiles), request);
@@ -18596,7 +18618,7 @@ function claudeVersionObservation(observed) {
     return { kind: "detected", version: observed.version, probeId: observed.probeId };
   return { kind: observed.kind };
 }
-var CLAUDE_MANAGED_RELEASES = new Set(["2.1.275", "2.1.295"]);
+var CLAUDE_MANAGED_RELEASES = new Set(["2.1.275", "2.1.295", "2.1.296"]);
 function claudeEvidenceProfiles(version, contracts) {
   if (version === undefined)
     return [];
@@ -18617,10 +18639,15 @@ function claudeProfile(version, route, sourceTypes, operations) {
     operations,
     route,
     operationStatus: "supported",
-    semantics: claudeSemantics(),
+    semantics: claudeSemantics(version),
     evidence: [
       "docs/hosts/claude-code.md",
-      "docs/research/native-plugin-update-capabilities-2026-10-09.md"
+      "docs/research/native-plugin-update-capabilities-2026-10-09.md",
+      ...version === "2.1.296" ? [
+        "docs/evidence/claude-code-2.1.296-native-20261013.json",
+        "docs/evidence/claude-code-2.1.296-invocation-20261013.json",
+        "docs/evidence/claude-code-2.1.296-agents-20261013.json"
+      ] : []
     ]
   });
 }
@@ -18637,10 +18664,10 @@ var CLAUDE_PROJECTED_SEMANTICS = new Set([
   "activation-reload",
   "reversible-disable"
 ]);
-function claudeSemantics() {
+function claudeSemantics(version) {
   return Object.fromEntries(PACKAGE_SEMANTICS.map((semantic) => [
     semantic,
-    CLAUDE_PROJECTED_SEMANTICS.has(semantic) ? "supported" : "unsupported"
+    CLAUDE_PROJECTED_SEMANTICS.has(semantic) || version === "2.1.296" && (semantic === "model-invocation-control" || semantic === "agents") ? "supported" : "unsupported"
   ]));
 }
 function observeClaudeInstallations(target, version) {
@@ -19736,6 +19763,12 @@ function ensureNativeManifest(stage, fallbackName, fallbackVersion) {
   const sourceManifest = readPluginManifest(stage);
   if (sourceManifest === undefined)
     throw new Error("Codex stage has no Agent Plugins manifest");
+  for (const path of ["plugin.json", ".plugin/plugin.json", ".claude-plugin/plugin.json"]) {
+    const file = join29(stage, path);
+    if (existsSync23(file) && JSON.parse(readFileSync23(file, "utf8")).mcpServers !== undefined) {
+      throw new Error("Codex inline manifest MCP projection is unverified; use mcp.json or .mcp.json");
+    }
+  }
   const name = sourceManifest.name ?? fallbackName;
   const version = sourceManifest.version ?? fallbackVersion;
   const description = sourceManifest.description ?? `Plugin ${name}`;
@@ -19753,8 +19786,36 @@ function ensureNativeManifest(stage, fallbackName, fallbackVersion) {
       throw new Error(`unsupported Codex native skills pointer: ${String(overlay["skills"])}`);
     }
   }
+  const pointer = overlay["mcpServers"];
+  if (pointer !== undefined && (typeof pointer !== "string" || !pointer.startsWith("./") || pointer.includes("\\") || pointer.split("/").includes("..") || !existsSync23(join29(stage, pointer)))) {
+    throw new Error("Codex native MCP pointer must name an existing plugin-local file");
+  }
+  const mcpFiles = ["mcp.json", ".mcp.json", ...typeof pointer === "string" ? [pointer] : []].map((path) => join29(stage, path)).filter(existsSync23);
+  const declarations = mcpFiles.map((file) => {
+    const value = JSON.parse(readFileSync23(file, "utf8"));
+    if (value === null || typeof value !== "object" || Array.isArray(value) || !("mcpServers" in value) || value.mcpServers === null || typeof value.mcpServers !== "object" || Array.isArray(value.mcpServers)) {
+      throw new Error("Codex MCP declaration must contain a server object");
+    }
+    return mcpDeclarationIdentity(value.mcpServers);
+  });
+  if (declarations.some((value) => value !== declarations[0]))
+    throw new Error("conflicting Codex canonical and native MCP declarations");
   mkdirSync7(dirname9(native), { recursive: true });
-  writeFileSync7(native, JSON.stringify({ ...overlay, name, version, description, skills: overlay["skills"] ?? "./skills/" }));
+  writeFileSync7(native, JSON.stringify({
+    ...overlay,
+    name,
+    version,
+    description,
+    skills: overlay["skills"] ?? "./skills/",
+    ...overlay["mcpServers"] === undefined && existsSync23(join29(stage, "mcp.json")) && !existsSync23(join29(stage, ".mcp.json")) ? { mcpServers: "./mcp.json" } : {}
+  }));
+}
+function mcpDeclarationIdentity(value) {
+  if (Array.isArray(value))
+    return JSON.stringify(value.map(mcpDeclarationIdentity));
+  if (value !== null && typeof value === "object")
+    return JSON.stringify(Object.entries(value).sort(([left], [right]) => left < right ? -1 : left > right ? 1 : 0).map(([key, item]) => [key, mcpDeclarationIdentity(item)]));
+  return JSON.stringify(value) ?? "null";
 }
 function assertManagedPath2(root, target) {
   if (target !== root && !target.startsWith(`${root}/`))
@@ -19907,13 +19968,14 @@ function nativeUpgradeTimeout() {
 }
 var RELOAD_EFFECTIVE = { requirement: "reload", status: "effective" };
 var UPDATE_SEMANTICS = ["ordinary-skills", "resources", "auto-update-control", "readback", "rollback", "activation-reload"];
-var MANAGED_SEMANTICS = [...UPDATE_SEMANTICS, "retirement", "retention-safety"];
+var MANAGED_SEMANTICS = [...UPDATE_SEMANTICS, "retirement", "retention-safety", "model-invocation-control", "commands", "mcp"];
 var codexEvidenceProfiles = [
   portableHookProfile(hookAdapter2, "managed", ["install", "update", "retire"]),
   codexRouteProfile("native", ["update"], UPDATE_SEMANTICS, ["docs/research/native-plugin-update-capabilities-2026-10-09.md", "docs/evidence/codex-native-released-20261011.md"]),
   codexRouteProfile("managed", ["install", "update", "retire"], MANAGED_SEMANTICS, [
     "docs/hosts/codex.md",
     "docs/adr/0004-retain-plugin-state-on-removal.md",
+    "docs/evidence/codex-policy-mcp-20261013.json",
     "docs/evidence/codex-native-released-20261011.md"
   ])
 ];
@@ -20501,6 +20563,7 @@ function captureNativeCacheSnapshots(projection) {
     const parentIdentity = nativeCacheParentIdentity(path);
     const parentMode = statSync10(dirname9(path)).mode & 4095;
     cpSync6(path, snapshot, { recursive: true });
+    chmodSync(snapshot, statSync10(path).mode & 4095);
     if (nativeCacheFingerprint(snapshot) !== fingerprint || nativeCacheFingerprint(path) !== fingerprint)
       throw new Error("Codex complete native cache changed during capture");
     const slot = { nativeId, path, saved, fingerprint, parentIdentity, parentMode };
@@ -23614,23 +23677,23 @@ var supportedSemantics = new Set([
   "activation-reload",
   "reversible-disable"
 ]);
-var ompManagedProfile = createCapabilityEvidenceProfile({
+var ompManagedProfiles = ["18.1.4", "18.10.3"].map((detectedVersion) => createCapabilityEvidenceProfile({
   host: "omp",
-  detectedVersion: "18.1.4",
+  detectedVersion,
   sourceTypes: ["local", "git"],
   operations: ["install", "update", "disable", "retire"],
   route: "managed",
   operationStatus: "supported",
   semantics: Object.fromEntries(PACKAGE_SEMANTICS.map((semantic) => [semantic, supportedSemantics.has(semantic) ? "supported" : "unsupported"])),
   evidence: [
-    "docs/evidence/omp-native-extension-package-20260923.json",
+    detectedVersion === "18.10.3" ? "docs/evidence/omp-native-extension-package-20261013.json" : "docs/evidence/omp-native-extension-package-20260923.json",
     "docs/hosts/omp.md",
     "docs/research/native-plugin-update-capabilities-2026-10-09.md"
   ]
-});
+}));
 var ompLifecycleDefinition = {
   id: "omp",
-  evidenceProfiles: [ompManagedProfile, portableHookProfile(hookAdapter3, "managed", ["install", "update", "disable", "retire"])],
+  evidenceProfiles: [...ompManagedProfiles, portableHookProfile(hookAdapter3, "managed", ["install", "update", "disable", "retire"])],
   probeVersion: (target) => probeOmpVersion(target),
   observeTarget: (target) => observeInventory(target),
   observeNativeMutationScope: (request) => Promise.resolve(ompUpgradeMutationScope(unprovenCandidate(request.nativeId), request.nativeId)),
@@ -29078,7 +29141,7 @@ function verifiedSourceImportClosure(root) {
     if (hasImportShadow(directory, modules, allowed))
       return false;
     for (const entry of entries) {
-      if (entry.startsWith(".") || entry === "__pycache__")
+      if (entry.startsWith(".") || entry === "__pycache__" || entry === "node_modules")
         continue;
       const path = join41(directory, entry);
       const stat = lstatSync26(path);
@@ -29250,7 +29313,7 @@ var hermesManagedProfiles = hermesProvenManagedRevisions.map((detectedVersion) =
   operationStatus: "supported",
   semantics: Object.fromEntries(PACKAGE_SEMANTICS.map((semantic) => [semantic, HERMES_SUPPORTED.has(semantic) ? "supported" : "unsupported"])),
   evidence: [
-    detectedVersion === "c0d7294769a38c17ceae51d8f7995e66e1dcae27" ? "docs/evidence/hermes-native-loader-c0d7294-20260923.json" : "docs/evidence/hermes-native-loader-dce1e9b-20261011.json",
+    detectedVersion === "c0d7294769a38c17ceae51d8f7995e66e1dcae27" ? "docs/evidence/hermes-native-loader-c0d7294-20260923.json" : detectedVersion === "6e7b83a2f1c093e992a8d838ed77ea320fbd8e51" ? "docs/evidence/hermes-native-loader-6e7b83a-20261013.json" : "docs/evidence/hermes-native-loader-dce1e9b-20261011.json",
     "docs/hosts/hermes.md",
     "docs/research/native-plugin-update-capabilities-2026-10-09.md"
   ]
@@ -30077,7 +30140,7 @@ function parseSourceBinding(value, label) {
       invalidArgument2(`${label} local locator must be a string`);
     const source = { kind: "local", locator: binding["locator"] };
     validateBinding(source, label);
-    return source;
+    return sourceBindingForArgument(source.locator);
   }
   if (binding["kind"] === "git") {
     exactFields5(binding, ["kind", "locator", "ref"], label);
@@ -33840,7 +33903,7 @@ function legacyCommandAction(command) {
 // package.json
 var package_default = {
   name: "plugnz",
-  version: "0.0.21",
+  version: "0.0.22",
   description: "Install, diagnose and update agent plugins (Agent Plugins spec) and MCP configs across Claude Code, Codex, Cursor, Kimi and more",
   license: "MIT",
   type: "module",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "plugnz",
-  "version": "0.0.21",
+  "version": "0.0.22",
   "description": "Install, diagnose and update agent plugins (Agent Plugins spec) and MCP configs across Claude Code, Codex, Cursor, Kimi and more",
   "license": "MIT",
   "type": "module",