rovecode 0.3.2 → 0.4.0-beta.2

package/dist/lib/plugins.js

@@ -0,0 +1,6 @@
+// @bun
+import{readFileSync as de,writeFileSync as xe,mkdirSync as ge,chmodSync as _t,cpSync as ht,existsSync as S,rmSync as _e}from"fs";import{join as C}from"path";import{homedir as ft}from"os";var wt=384,tt=()=>(process.platform==="win32"?process.env.USERPROFILE:process.env.HOME)||ft();function z(){let e=process.env.ROVECODE_HOME,t=e??C(tt(),".rovecode");return vt(t,{explicit:e!==void 0}),t}var j=!1;function vt(e,t={}){if(j&&t.legacyDir===void 0)return;if(t.legacyDir===void 0)j=!0;try{if(S(e))return;let i=t.legacyDir??C(tt(),".cumulus");if(t.explicit===!0)return;if(e===i||!S(i))return;ht(i,e,{recursive:!0}),(t.note??((u)=>console.error(u)))(`migrated ${i} \u2192 ${e} (the config directory was renamed; the old one is untouched)`);let o=C(e,"credentials.json");if(S(o)&&process.platform!=="win32")_t(o,wt)}catch{}}import{existsSync as Nt,readFileSync as Tt,readdirSync as Gt,statSync as St}from"fs";import{join as L,resolve as at}from"path";import{createHash as bt}from"crypto";import{mkdirSync as kt,readFileSync as et,readdirSync as qt,statSync as Bt,writeFileSync as Mt}from"fs";import{dirname as At,join as O,relative as It,resolve as Et}from"path";var zt="plugins.json",Q=(e)=>O(e,zt),Qt=new Set(["node_modules",".git"]);function g(e){let t={disabled:[],trusted:{}},i;try{i=JSON.parse(et(Q(e),"utf8"))}catch{return t}if(typeof i!=="object"||i===null)return t;let o=i;if(Array.isArray(o.disabled))t.disabled=o.disabled.filter((u)=>typeof u==="string");if(typeof o.trusted==="object"&&o.trusted!==null&&!Array.isArray(o.trusted)){for(let[u,c]of Object.entries(o.trusted))if(typeof c==="string")t.trusted[u]=c}return t}function B(e,t){let i=Q(e);return kt(At(i),{recursive:!0}),Mt(i,JSON.stringify({disabled:[...t.disabled].sort(),trusted:t.trusted},null,2)+`
+`),i}function y(e){let t=[],i=(o)=>{let u;try{u=qt(o,{withFileTypes:!0})}catch{return}for(let c of u){if(Qt.has(c.name))continue;let r=O(o,c.name);if(c.isDirectory())i(r);else if(c.isFile())t.push(It(e,r).replace(/\\/g,"/"))}};return i(e),t.sort()}function K(e){let t=bt("sha256");for(let i of y(e)){t.update(i),t.update("\x00");try{t.update(et(O(e,i)))}catch{}t.update("\x00")}return t.digest("hex")}var M=(e)=>Et(e).replace(/\\/g,"/");function it(e,t,i){return e.trusted[M(t)]===i}function b(e){try{return Bt(e).isDirectory()}catch{return!1}}var Kt=/\$\{([A-Za-z_][A-Za-z0-9_]*)\}/g,Lt=/<[^<>]*[a-z][^<>]*>/g;function Pt(e,t,i){return e.replace(Kt,(o,u)=>{let c=t[u];if(c===void 0)return i.push(u),"";return c})}function x(e){return typeof e==="object"&&e!==null&&!Array.isArray(e)}function ot(e,t,i,o,u=process.env,c={}){if(!x(t)){o.push(`${i}: server "${e}" is not an object; skipped`);return}let r=[],s=(v)=>Pt(v,u,r),m=typeof t.command==="string"&&t.command.length>0?t.command:void 0,n=typeof t.url==="string"&&t.url.length>0?s(t.url):void 0,a=typeof t.transport==="string"?t.transport:typeof t.type==="string"?t.type:void 0,l;if(a==="stdio")l="stdio";else if(a==="http"||a==="streamable-http"||a==="streamable_http")l="http";else if(a==="sse")l="sse";else if(a!==void 0){o.push(`${i}: server "${e}" has unknown transport "${a}"; skipped`);return}else l=n!==void 0?"http":m!==void 0?"stdio":void 0;if(l===void 0){o.push(`${i}: server "${e}" has neither command nor url; skipped`);return}if(l==="stdio"&&m===void 0){o.push(`${i}: stdio server "${e}" is missing command; skipped`);return}if(l==="http"||l==="sse"){if(n===void 0){o.push(`${i}: ${l} server "${e}" is missing url; skipped`);return}try{new URL(n)}catch{o.push(`${i}: ${l} server "${e}" has invalid url "${n}"; skipped`);return}}let p;if(t.args!==void 0)if(Array.isArray(t.args)&&t.args.every((v)=>typeof v==="string"))p=t.args.map(s);else{o.push(`${i}: server "${e}" has non-string args; skipped`);return}let d;if(x(t.env)){d={};for(let[v,Y]of Object.entries(t.env))if(typeof Y==="string")d[v]=s(Y)}let f;if(x(t.headers)){f={};for(let[v,Y]of Object.entries(t.headers))if(typeof Y==="string")f[v]=s(Y)}let w;if(x(t.oauth)){if(w={},typeof t.oauth.clientId==="string"&&t.oauth.clientId.length>0)w.clientId=t.oauth.clientId;if(typeof t.oauth.scope==="string"&&t.oauth.scope.length>0)w.scope=t.oauth.scope;if(Object.keys(w).length===0)w=void 0}if(r.length>0){o.push(`${i}: server "${e}" needs ${[...new Set(r)].map((v)=>`\${${v}}`).join(", ")} set in the environment; skipped`);return}let P=Yt({args:p,env:d,headers:f,url:n});if(P.length>0&&c.allowPlaceholders!==!0){o.push(`${i}: server "${e}" still has ${P.join(", ")} to fill in; skipped (edit that line and it will connect)`);return}let q={name:e,transport:l};if(m!==void 0)q.command=m;if(p!==void 0)q.args=p;if(d!==void 0)q.env=d;if(n!==void 0)q.url=n;if(f!==void 0)q.headers=f;if(w!==void 0)q.oauth=w;if(typeof t.enabled==="boolean")q.enabled=t.enabled;return q}function Yt(e){return[...new Set([...e.args??[],...Object.values(e.env??{}),...Object.values(e.headers??{}),...e.url!==void 0?[e.url]:[]].flatMap((t)=>[...t.matchAll(Lt)].map((i)=>i[0])))]}var A=1,I="plugin.json",yt=200,ut=/^[a-z0-9][a-z0-9-]{0,63}$/,Vt=/\.(?:[cm]?[jt]s)$/i;function Dt(e){if(e.length===0||e.startsWith("/")||e.startsWith("\\")||/^[A-Za-z]:/.test(e))return!1;return!e.split(/[\\/]/).some((t)=>t==="..")}function V(e,t,i){let o;try{o=JSON.parse(e)}catch(m){return i.push(`${t}: not valid JSON \u2014 ${m.message}`),null}if(!x(o))return i.push(`${t}: must be an object`),null;let u=o.api;if(u!==A){let m=u===void 0?"missing":typeof u==="string"?JSON.stringify(u):String(u);return i.push(`${t}: plugin API version ${m} is not supported (this rovecode speaks ${A}) \u2014 skipped`),null}let c=o.name;if(typeof c!=="string"||!ut.test(c))return i.push(`${t}: "name" must match ${ut} \u2014 skipped`),null;let r=typeof o.version==="string"&&o.version.trim()?o.version.trim().slice(0,40):null;if(r===null)return i.push(`${t}: "version" must be a non-empty string \u2014 skipped`),null;let s={name:c,version:r,description:"",api:A};if(o.description!==void 0)if(typeof o.description==="string")s.description=o.description.replace(/\s+/g," ").trim().slice(0,yt);else i.push(`${t}: "description" is not a string \u2014 ignored`);for(let m of["entry","commands","skills"]){let n=o[m];if(n===void 0)continue;if(typeof n!=="string"||!Dt(n)){i.push(`${t}: "${m}" must be a relative path inside the plugin \u2014 ignored`);continue}if(m==="entry"&&!Vt.test(n)){i.push(`${t}: "entry" must be a .ts or .js module \u2014 ignored`);continue}s[m]=n.replace(/\\/g,"/")}if(o.mcp!==void 0)if(x(o.mcp))s.mcp=o.mcp;else i.push(`${t}: "mcp" must be an object of servers keyed by name \u2014 ignored`);for(let m of Object.keys(o))if(!["name","version","description","api","entry","commands","skills","mcp"].includes(m))i.push(`${t}: unknown field "${m}" ignored`);return s}function D(e){let t=[];if(e.entry)t.push(`code: ${e.entry}`);if(e.commands)t.push(`commands: ${e.commands}/`);if(e.skills)t.push(`skills: ${e.skills}/`);if(e.mcp)t.push(`mcp: ${Object.keys(e.mcp).join(", ")||"(none)"}`);return t}function T(e,t){let i=L(t,"plugins"),o=L(e,".rovecode","plugins");return at(i)===at(o)?[["project",o]]:[["user",i],["project",o]]}function E(e,t={}){let i={plugins:[],warnings:[]};if(process.env.ROVECODE_NO_PLUGINS==="1")return i;let o=t.home??z(),u=t.state??g(o),c=new Map;for(let[r,s]of T(e,o)){if(!b(s))continue;let m;try{m=Gt(s).sort()}catch(n){i.warnings.push(`${s}: cannot list \u2014 ${n.message}`);continue}for(let n of m){let a=L(s,n);if(!b(a)||!Nt(L(a,I)))continue;let l=Ct(a,n,r,u),p=c.get(l.name);if(p)i.warnings.push(`${a}: plugin "${l.name}" shadows ${p.dir} (project over user)`);c.set(l.name,l);for(let d of l.problems)i.warnings.push(d)}}return i.plugins=[...c.values()].sort((r,s)=>r.name.localeCompare(s.name)),i}function Ct(e,t,i,o){let u=L(e,I),c=[],r=null;try{r=V(Tt(u,"utf8"),u,c)}catch(f){c.push(`${u}: cannot read \u2014 ${f.message}`)}let s=null;try{s=K(e)}catch{s=null}let m=r?.name??t;if(r&&r.name!==t)c.push(`${u}: name "${r.name}" differs from its folder "${t}" \u2014 the manifest name is the plugin's identity`);let n;if(r===null)n="broken";else if(o.disabled.includes(m))n="disabled";else if(i==="project"&&(s===null||!it(o,e,s)))n="untrusted";else n="active";let a=`plugin ${m}`,l=r?lt(e,r.commands,`${a}: commands`,c):null,p=r?lt(e,r.skills,`${a}: skills`,c):null,d=[];if(r?.mcp)for(let[f,w]of Object.entries(r.mcp)){let P=ot(f,w,u,c);if(P)d.push(P)}return{name:m,dir:e,scope:i,manifest:r,status:n,digest:s,problems:c,commandsDir:l,skillsDir:p,mcp:d}}function lt(e,t,i,o){if(!t)return null;let u=L(e,t);try{if(St(u).isDirectory())return u}catch{}return o.push(`${i} directory "${t}" does not exist \u2014 ignored`),null}import{existsSync as Ot}from"fs";import{join as Ft}from"path";import{pathToFileURL as Rt}from"url";var F=Object.keys({pre_run:0,post_run:0,pre_tool:0,post_tool:0,approval:0,compaction:0,session_open:0,session_close:0,on_event:0});var Oe=Symbol("rovecode.hook.timeout");var rt=5000;function Ut(e=process.env){let t=Number(e.ROVECODE_PLUGIN_TIMEOUT_MS);return Number.isFinite(t)&&t>=1?Math.floor(t):rt}var nt=["read","write","execute","spawn","memory","network","custom"],ct=/^[a-z][a-z0-9_]{0,63}$/,R=Symbol("timed-out");async function pt(e,t){let i,o=new Promise((u)=>{i=setTimeout(()=>u(R),t)});try{return await Promise.race([e,o])}finally{if(i!==void 0)clearTimeout(i)}}var st=(e)=>e instanceof Error?e.message:String(e);async function U(e,t){let i=[],o=[];for(let u of e)o.push(await Xt(u,t,i));return{plugins:o,warnings:i}}async function Xt(e,t,i){let o={...e,tools:[],hooks:null};if(e.status!=="active"||e.manifest===null)return o;let u=e.manifest,c=`plugin ${e.name}`;if(!u.entry)return o;let r=Ft(e.dir,u.entry);if(!Ot(r))return i.push(`${c}: entry ${u.entry} does not exist \u2014 no tools or hooks loaded`),o;let s=t.timeoutMs??Ut(),m;try{m=await pt(import(Rt(r).href),s)}catch(a){return i.push(`${c}: ${u.entry} failed to load \u2014 ${st(a)}`),o}if(m===R)return i.push(`${c}: ${u.entry} load timed out after ${s}ms (top-level await?) \u2014 skipped`),o;let n=x(m)?m.default:void 0;if(!x(n))return i.push(`${c}: ${u.entry} must \`export default { api: ${A}, tools?, hooks? }\` \u2014 skipped`),o;if(n.api!==A)return i.push(`${c}: ${u.entry} declares api ${String(n.api)}; this rovecode speaks ${A} \u2014 skipped`),o;for(let a of Object.keys(n))if(!["api","tools","hooks"].includes(a))i.push(`${c}: ${u.entry} exports unknown member "${a}" \u2014 ignored`);if(n.tools!==void 0){let a;try{let p=n.tools;a=typeof p==="function"?await pt(Promise.resolve(p({cwd:t.cwd,home:t.home,pluginDir:e.dir})),s):p}catch(p){i.push(`${c}: tools() threw \u2014 ${st(p)}`),a=[]}if(a===R)i.push(`${c}: tools() timed out after ${s}ms \u2014 no tools loaded`),a=[];if(!Array.isArray(a))i.push(`${c}: "tools" must be an array (or a function returning one) \u2014 ignored`),a=[];let l=new Set;for(let p of a){let d=Wt(p,c,i);if(!d)continue;if(l.has(d.schema.name)){i.push(`${c}: tool "${d.schema.name}" declared twice \u2014 first kept`);continue}l.add(d.schema.name),o.tools.push(d)}}if(n.hooks!==void 0)if(!x(n.hooks))i.push(`${c}: "hooks" must be an object of hook functions \u2014 ignored`);else{let a={};for(let[l,p]of Object.entries(n.hooks)){if(!F.includes(l)){i.push(`${c}: unknown hook "${l}" ignored (known: ${F.join(", ")})`);continue}if(typeof p!=="function"){i.push(`${c}: hook "${l}" is not a function \u2014 ignored`);continue}a[l]=p}if(Object.keys(a).length)o.hooks=a}return o}function Wt(e,t,i){if(!x(e)||!x(e.schema))return i.push(`${t}: a tool without a schema was dropped`),null;let o=e.schema,u=o.name;if(typeof u!=="string"||!ct.test(u))return i.push(`${t}: tool name ${JSON.stringify(u)} must match ${ct} \u2014 dropped`),null;if(typeof o.description!=="string"||!o.description.trim())return i.push(`${t}: tool "${u}" needs a description \u2014 dropped`),null;if(!x(o.args))return i.push(`${t}: tool "${u}" needs a JSON-Schema "args" object \u2014 dropped`),null;if(!nt.includes(e.kind))return i.push(`${t}: tool "${u}" kind ${JSON.stringify(e.kind)} is not one of ${nt.join("|")} \u2014 dropped (the kind is its permission class)`),null;if(typeof e.execute!=="function")return i.push(`${t}: tool "${u}" has no execute() \u2014 dropped`),null;return e}import{cpSync as Zt,existsSync as N,lstatSync as Ht,mkdirSync as Jt,mkdtempSync as mt,readFileSync as $t,renameSync as jt,rmSync as G}from"fs";import{tmpdir as te}from"os";import{join as _,resolve as X,sep as ee}from"path";var ie=(e,t)=>`${e}#${t??""}`;var oe=/^(?:https?:\/\/|git@|ssh:\/\/|git:\/\/)|\.git$/i,dt=(e)=>oe.test(e)&&!N(e),ue=async(e,t)=>{let i=Bun.spawn(e,{cwd:t,stdout:"ignore",stderr:"pipe",stdin:"ignore"}),o=await new Response(i.stderr).text();return{code:await i.exited,stderr:o}};function h(e,t,i){return T(t,i).find(([o])=>o===e)?.[1]??_(i,"plugins")}function ae(e){try{return Ht(e).isSymbolicLink()}catch{return!0}}async function W(e,t){let i=e,o=null,u=t.copy??((c,r,s)=>Zt(c,r,{recursive:!0,filter:s}));try{if(dt(e)){let l=ie(e),p=t.cloneCache?.get(l);if(p!==void 0&&b(p))i=p;else{o=mt(_(te(),"rovecode-plugin-"));let d=await(t.spawn??ue)(["git","clone","--depth","1","--quiet","--",e,"."],o);if(d.code!==0)return{ok:!1,error:`git clone failed (exit ${d.code})${d.stderr.trim()?`: ${d.stderr.trim().split(`
+`).at(-1)}`:""}`};if(i=o,t.cloneCache!==void 0)t.cloneCache.set(l,o),o=null}}if(i=X(i),t.subfolder!==void 0&&t.subfolder!==""){let l=t.subfolder.split("\\").join("/");if(l.startsWith("/")||/^[A-Za-z]:/.test(l)||l.split("/").includes(".."))return{ok:!1,error:`subfolder "${t.subfolder}" escapes the source`};let p=X(_(i,l));if(p!==i&&!p.startsWith(i+ee))return{ok:!1,error:`subfolder "${t.subfolder}" escapes the source`};if(!b(p))return{ok:!1,error:`${e}: no folder "${t.subfolder}" inside it`};i=p}if(!b(i))return{ok:!1,error:`${e}: not a directory`};let c=_(i,I);if(!N(c))return{ok:!1,error:`${e}: no ${I} \u2014 a plugin is a folder with a manifest`};let r=[],s=V($t(c,"utf8"),c,r);if(s===null)return{ok:!1,error:r.join("; ")||`${c}: invalid manifest`};let m=h(t.scope,t.cwd,t.home),n=_(m,s.name);if(X(n)===i)return{ok:!1,error:`${e} is already the installed copy`};if(N(n)&&!t.force)return{ok:!1,error:`plugin "${s.name}" already exists at ${n} (use --force to replace)`};Jt(m,{recursive:!0});let a=mt(_(m,`.rovecode-add-${s.name}-`));try{if(u(i,a,(l)=>!/(?:^|[\\/])(?:node_modules|\.git)(?:[\\/]|$)/.test(l)&&!ae(l)),N(n))G(n,{recursive:!0,force:!0});jt(a,n)}catch(l){return{ok:!1,error:`could not install "${s.name}" into ${n}: ${l instanceof Error?l.message:String(l)}`}}finally{G(a,{recursive:!0,force:!0})}if(t.scope==="project"){let l=g(t.home);l.trusted[M(n)]=K(n),B(t.home,l)}return{ok:!0,name:s.name,dir:n,scope:t.scope,manifest:s}}finally{if(o)G(o,{recursive:!0,force:!0})}}function Z(e,t){let i=_(h(t.scope,t.cwd,t.home),e);if(!b(i))return{ok:!1,error:`no ${t.scope} plugin "${e}" at ${i}`};G(i,{recursive:!0,force:!0});let o=g(t.home);return delete o.trusted[M(i)],B(t.home,o),{ok:!0,dir:i}}function H(e,t,i){let o=g(i);if(o.disabled=o.disabled.filter((u)=>u!==e),!t)o.disabled.push(e);return B(i,o)}function J(e,t){let i=_(h("project",t.cwd,t.home),e);if(!b(i)||!N(_(i,I)))return{ok:!1,error:`no project plugin "${e}" under ${h("project",t.cwd,t.home)}`};let o=K(i),u=g(t.home);return u.trusted[M(i)]=o,B(t.home,u),{ok:!0,dir:i,digest:o}}function $(e,t){let i=_(h("project",t.cwd,t.home),e),o=g(t.home),u=M(i)in o.trusted;return delete o.trusted[M(i)],B(t.home,o),u}import{relative as le}from"path";var k=["usage: rovecode plugin <command>","  list                       every plugin in ~/.rovecode/plugins and .rovecode/plugins, with its status","  add <folder|git-url> [--project] [--force]","                             copy (or shallow-clone) a plugin into the user scope, or this repo's .rovecode/plugins","  remove <name> [--project]  delete the installed copy","  enable <name> \xB7 disable <name>","                             switch a plugin off/on in every scope (~/.rovecode/plugins.json)","  trust <name>               approve a PROJECT plugin's current files on this machine \u2014 until they change","  untrust <name>             withdraw that approval","  show <name>                manifest, files and what it contributes, without running any of it","status: active \xB7 disabled \xB7 untrusted (project plugin not yet approved here) \xB7 broken (see problems)"].join(`
+`),xt=(e,t)=>e.includes(t),ne=(e)=>e.filter((t)=>!t.startsWith("--"));async function ce(e,t={}){let i=t.cwd??process.cwd(),o=t.home??z(),u=t.out??((a)=>console.log(a)),c=t.err??((a)=>console.error(a)),[r="list",...s]=e,m=xt(s,"--project")?"project":"user",n=ne(s)[0];switch(r){case"list":case"ls":{let{plugins:a,warnings:l}=E(i,{home:o});if(a.length===0)u(`no plugins. add one: rovecode plugin add <folder|git-url>   (user: ${h("user",i,o)}, project: ${le(i,h("project",i,o))||"."})`);for(let p of a)u(gt(p));for(let p of l)c(`warning: ${p}`);return 0}case"add":{let a=n;if(!a)return c(k),2;let l=await W(a,{cwd:i,home:o,scope:m,force:xt(s,"--force"),...t.spawn?{spawn:t.spawn}:{}});if(!l.ok)return c(`plugin add: ${l.error}`),1;u(`added ${l.name}@${l.manifest.version} (${l.scope}) \u2192 ${l.dir}`);for(let p of D(l.manifest))u(`  ${p}`);if(l.scope==="project")u(`  trusted on this machine (recorded in ${Q(o)}); a change to its files will ask again`);return u("restart rovecode to load it \u2014 plugins are read once per process, like hooks"),0}case"remove":case"rm":{if(!n)return c(k),2;let a=Z(n,{cwd:i,home:o,scope:m});if(!a.ok)return c(`plugin remove: ${a.error}`),1;return u(`removed ${n} (${m}) from ${a.dir}`),0}case"enable":case"disable":{if(!n)return c(k),2;if(!E(i,{home:o}).plugins.some((p)=>p.name===n))c(`warning: no installed plugin named "${n}" \u2014 the setting is recorded anyway`);let l=H(n,r==="enable",o);return u(`${n} ${r}d (${l})`),0}case"trust":{if(!n)return c(k),2;let a=E(i,{home:o}).plugins.find((p)=>p.name===n&&p.scope==="project");if(!a)return c(`plugin trust: no project plugin "${n}" under ${h("project",i,o)}`),1;if(a.manifest===null){c(`plugin trust: "${n}" is broken \u2014 fix it first:`);for(let p of a.problems)c(`  ${p}`);return 1}let l=J(n,{cwd:i,home:o});if(!l.ok)return c(`plugin trust: ${l.error}`),1;u(`trusted ${n}@${a.manifest.version} \u2014 ${y(a.dir).length} files, digest ${l.digest.slice(0,12)}\u2026`);for(let p of D(a.manifest))u(`  ${p}`);return u("it loads on the next start; `rovecode plugin show "+n+"` lists every file it brings"),0}case"untrust":{if(!n)return c(k),2;return u($(n,{cwd:i,home:o})?`untrusted ${n}`:`${n} was not trusted`),0}case"show":case"info":{if(!n)return c(k),2;let a=E(i,{home:o}).plugins.find((l)=>l.name===n);if(!a)return c(`plugin show: no plugin "${n}"`),1;if(u(gt(a)),u(`  folder:  ${a.dir}`),a.digest)u(`  digest:  ${a.digest}`);if(a.manifest)for(let l of D(a.manifest))u(`  ${l}`);for(let l of y(a.dir))u(`  - ${l}`);for(let l of a.problems)u(`  ! ${l}`);if(a.status==="untrusted")u(`  run \`rovecode plugin trust ${a.name}\` after reading the files above`);return 0}case"help":case"--help":case"-h":return u(k),0;default:return c(`unknown plugin command "${r}"
+${k}`),2}}function gt(e){let t=e.manifest?`@${e.manifest.version}`:"",i=e.manifest?.description?` \u2014 ${e.manifest.description}`:"";return`${(e.name+t).padEnd(28)} ${e.scope.padEnd(8)} ${e.status.padEnd(9)}${i}`.trimEnd()}async function _i(e,t={}){let i=t.home??z(),o=E(e,{home:i,state:g(i)}),u=await U(o.plugins,{cwd:e,home:i,...t.timeoutMs!==void 0?{timeoutMs:t.timeoutMs}:{}});return{plugins:u.plugins,warnings:[...o.warnings,...u.warnings]}}function hi(e){if(e.length===0)return null;let t=(o)=>e.filter((u)=>u.status===o).map((u)=>u.name),i=[];for(let o of["active","untrusted","disabled","broken"]){let u=t(o);if(u.length)i.push(`${u.length} ${o} (${u.join(", ")})`)}return`plugins: ${i.join(" \xB7 ")}`}export{$ as untrustPlugin,J as trustPlugin,hi as summarizePlugins,Q as statePath,H as setPluginEnabled,h as scopeRoot,B as saveState,Z as removePlugin,T as pluginRoots,y as pluginFiles,K as pluginDigest,V as parseManifest,g as loadState,_i as loadPlugins,dt as isGitSource,E as discoverPlugins,D as contributions,ce as cmdPlugin,W as addPlugin,U as activatePlugins,k as PLUGIN_USAGE,A as PLUGIN_API_VERSION,I as MANIFEST_FILE,rt as DEFAULT_PLUGIN_TIMEOUT_MS};