@capybara-hq/plugin-tools 0.1.0-rc.5 → 0.1.0-rc.6

package/dist/check/plugin-permissions.d.ts

@@ -22,7 +22,9 @@ export interface ToolRegistration {
  * - perm-hooks: the mount point of ctx.hooks.on(mount, …) is not in permissions.hooks (the mount
  *   point must be a string literal or a same-file const, like the names below), or the options are
  *   `{ mode: "policy" }` and the mount point is not in permissions.policyHooks;
- * - perm-reserved：用了尚未提供的 ctx.models。
+ * - perm-models: ctx.models is used but permissions.models is not declared (the purposes it may use
+ *   are checked at run time);
+ * - perm-reserved: platform access that cannot be confirmed (a destructured ctx, a computed member).
  * 路由路径、工具名、能力 ref、界面 id 须是字符串字面量或本文件的 const；动态的写法报「无法静态确认」，
  * 豁免：`// capybara:allow-dynamic-permission <原因>`（行尾或紧邻上一行，原因必填）。
  * ctx 会跟踪本地别名，以及按位置传给同文件函数的参数。

package/dist/check/plugin-permissions.js

@@ -129,7 +129,11 @@ function readManifest(obj, decls) {
         m.secrets = !!secrets && resolve(secrets.value, decls).value === true;
         const storage = prop(pe, "storage");
         m.storage = !!storage && resolve(storage.value, decls).value === true;
-        m.models = !!prop(pe, "models");
+        // an empty list declares nothing (ctx.models is gated on at least one purpose)
+        const models = prop(pe, "models");
+        const me = models ? resolve(models.value, decls) : undefined;
+        m.models =
+            me !== undefined && !(me.type === "ArrayExpression" && me.elements.length === 0);
         for (const t of strings(prop(pe, "tools")?.value, decls))
             m.tools.add(t);
         for (const h of strings(prop(pe, "hooks")?.value, decls))
@@ -312,7 +316,9 @@ function scanSetup(f, m, decls, onTool, onCall) {
                     }
                 }
                 else if (name === "models") {
-                    add(n, "perm-reserved", "ctx.models is reserved and not provided in this release; remove the access");
+                    if (!m.models) {
+                        add(n, "perm-models", "ctx.models is used but not declared; declare its purposes in permissions.models in the extension manifest");
+                    }
                 }
                 else if (name === "http" ||
                     name === "tools" ||
@@ -376,7 +382,9 @@ function scanFile(f, onTool, onCall) {
  * - perm-hooks: the mount point of ctx.hooks.on(mount, …) is not in permissions.hooks (the mount
  *   point must be a string literal or a same-file const, like the names below), or the options are
  *   `{ mode: "policy" }` and the mount point is not in permissions.policyHooks;
- * - perm-reserved：用了尚未提供的 ctx.models。
+ * - perm-models: ctx.models is used but permissions.models is not declared (the purposes it may use
+ *   are checked at run time);
+ * - perm-reserved: platform access that cannot be confirmed (a destructured ctx, a computed member).
  * 路由路径、工具名、能力 ref、界面 id 须是字符串字面量或本文件的 const；动态的写法报「无法静态确认」，
  * 豁免：`// capybara:allow-dynamic-permission <原因>`（行尾或紧邻上一行，原因必填）。
  * ctx 会跟踪本地别名，以及按位置传给同文件函数的参数。

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@capybara-hq/plugin-tools",
-  "version": "0.1.0-rc.5",
+  "version": "0.1.0-rc.6",
   "description": "Capybara plugin toolchain: the capybara-plugin CLI to pack, check and release Capybara plugins",
   "license": "Apache-2.0",
   "repository": {
@@ -51,12 +51,12 @@
     "esbuild": "0.28.2",
     "oxc-parser": "^0.154.0",
     "tar-stream": "3.2.2",
-    "@capybara-hq/kernel": "^0.1.0-rc.5",
-    "@capybara-hq/plugin-sdk": "^0.1.0-rc.3"
+    "@capybara-hq/kernel": "^0.1.0-rc.6",
+    "@capybara-hq/plugin-sdk": "^0.1.0-rc.4"
   },
   "devDependencies": {
     "zod": "^4.6.7",
-    "@capybara-hq/testing": "0.1.0-rc.6"
+    "@capybara-hq/testing": "0.1.0-rc.7"
   },
   "scripts": {
     "build": "tsc -b"