@capybara-hq/plugin-tools 0.1.0-rc.5 → 0.1.0-rc.7

package/dist/check/deps.d.ts

@@ -5,7 +5,9 @@ export type { Finding };
  * - pluginDirs: each plugin directory (source imports and package.json); a violation is
  *   plugin-imports-kernel (a path leaving the plugin directory: plugin-imports-outside);
  * - sdkDirs: the packages/plugin-sdk directory; any @capybara-hq/* package or path leaving the
- *   package directory is sdk-imports-internal.
+ *   package directory is sdk-imports-internal;
+ * - deviceDirs: the packages/device directory (source, tests and package.json); any @capybara-hq/*
+ *   package other than plugin-sdk or path leaving the package directory is device-imports-internal.
  *
  * Covers: import / export from / export * / import type / dynamic import("literal or concatenated
  * literals") / require("…") / import x = require() / import("x") types; package.json dependencies /
@@ -20,4 +22,4 @@ export type { Finding };
  * `module.require` or `createRequire(...)`; `import.meta.resolve`; paths built at run time to read
  * files; nested package.json files and TS `paths` mappings.
  */
-export declare function checkDeps(pluginDirs: string[], sdkDirs?: string[]): Finding[];
+export declare function checkDeps(pluginDirs: string[], sdkDirs?: string[], deviceDirs?: string[]): Finding[];

package/dist/check/deps.js

@@ -33,6 +33,13 @@ const SDK_RULES = {
     outsideMessage: (what) => `packages/plugin-sdk must not reference files outside its package directory (${what})`,
     allowed: () => false,
 };
+const DEVICE_RULES = {
+    pkgRule: "device-imports-internal",
+    outsideRule: "device-imports-internal",
+    pkgMessage: (what) => `packages/device runs on a person's machine and may depend only on ${SDK} and third-party npm packages, not on ${what}; the kernel is reached over HTTP and WebSocket only`,
+    outsideMessage: (what) => `packages/device must not reference files outside its package directory (${what})`,
+    allowed: (pkg) => pkg === SDK,
+};
 /** The violation a reference string (package name / relative path / file: URL / protocol dependency value) makes, if any. */
 function judge(value, baseDir, rootDir, rules, where) {
     const pkgs = [...value.matchAll(SCOPED_RE)].map((m) => `${SCOPE}${m[1]}`);
@@ -180,7 +187,9 @@ function sourceFindings(dir, rules, srcDir) {
  * - pluginDirs: each plugin directory (source imports and package.json); a violation is
  *   plugin-imports-kernel (a path leaving the plugin directory: plugin-imports-outside);
  * - sdkDirs: the packages/plugin-sdk directory; any @capybara-hq/* package or path leaving the
- *   package directory is sdk-imports-internal.
+ *   package directory is sdk-imports-internal;
+ * - deviceDirs: the packages/device directory (source, tests and package.json); any @capybara-hq/*
+ *   package other than plugin-sdk or path leaving the package directory is device-imports-internal.
  *
  * Covers: import / export from / export * / import type / dynamic import("literal or concatenated
  * literals") / require("…") / import x = require() / import("x") types; package.json dependencies /
@@ -195,7 +204,7 @@ function sourceFindings(dir, rules, srcDir) {
  * `module.require` or `createRequire(...)`; `import.meta.resolve`; paths built at run time to read
  * files; nested package.json files and TS `paths` mappings.
  */
-export function checkDeps(pluginDirs, sdkDirs = []) {
+export function checkDeps(pluginDirs, sdkDirs = [], deviceDirs = []) {
     const findings = [];
     for (const dir of pluginDirs) {
         findings.push(...packageFindings(dir, PLUGIN_RULES), ...sourceFindings(dir, PLUGIN_RULES, dir));
@@ -203,5 +212,8 @@ export function checkDeps(pluginDirs, sdkDirs = []) {
     for (const dir of sdkDirs) {
         findings.push(...packageFindings(dir, SDK_RULES), ...sourceFindings(dir, SDK_RULES, join(dir, "src")));
     }
+    for (const dir of deviceDirs) {
+        findings.push(...packageFindings(dir, DEVICE_RULES), ...sourceFindings(dir, DEVICE_RULES, dir));
+    }
     return findings;
 }

package/dist/check/plugin-permissions.d.ts

@@ -22,7 +22,9 @@ export interface ToolRegistration {
  * - perm-hooks: the mount point of ctx.hooks.on(mount, …) is not in permissions.hooks (the mount
  *   point must be a string literal or a same-file const, like the names below), or the options are
  *   `{ mode: "policy" }` and the mount point is not in permissions.policyHooks;
- * - perm-reserved：用了尚未提供的 ctx.models。
+ * - perm-models: ctx.models is used but permissions.models is not declared (the purposes it may use
+ *   are checked at run time);
+ * - perm-reserved: platform access that cannot be confirmed (a destructured ctx, a computed member).
  * 路由路径、工具名、能力 ref、界面 id 须是字符串字面量或本文件的 const；动态的写法报「无法静态确认」，
  * 豁免：`// capybara:allow-dynamic-permission <原因>`（行尾或紧邻上一行，原因必填）。
  * ctx 会跟踪本地别名，以及按位置传给同文件函数的参数。

package/dist/check/plugin-permissions.js

@@ -129,7 +129,11 @@ function readManifest(obj, decls) {
         m.secrets = !!secrets && resolve(secrets.value, decls).value === true;
         const storage = prop(pe, "storage");
         m.storage = !!storage && resolve(storage.value, decls).value === true;
-        m.models = !!prop(pe, "models");
+        // an empty list declares nothing (ctx.models is gated on at least one purpose)
+        const models = prop(pe, "models");
+        const me = models ? resolve(models.value, decls) : undefined;
+        m.models =
+            me !== undefined && !(me.type === "ArrayExpression" && me.elements.length === 0);
         for (const t of strings(prop(pe, "tools")?.value, decls))
             m.tools.add(t);
         for (const h of strings(prop(pe, "hooks")?.value, decls))
@@ -312,7 +316,9 @@ function scanSetup(f, m, decls, onTool, onCall) {
                     }
                 }
                 else if (name === "models") {
-                    add(n, "perm-reserved", "ctx.models is reserved and not provided in this release; remove the access");
+                    if (!m.models) {
+                        add(n, "perm-models", "ctx.models is used but not declared; declare its purposes in permissions.models in the extension manifest");
+                    }
                 }
                 else if (name === "http" ||
                     name === "tools" ||
@@ -376,7 +382,9 @@ function scanFile(f, onTool, onCall) {
  * - perm-hooks: the mount point of ctx.hooks.on(mount, …) is not in permissions.hooks (the mount
  *   point must be a string literal or a same-file const, like the names below), or the options are
  *   `{ mode: "policy" }` and the mount point is not in permissions.policyHooks;
- * - perm-reserved：用了尚未提供的 ctx.models。
+ * - perm-models: ctx.models is used but permissions.models is not declared (the purposes it may use
+ *   are checked at run time);
+ * - perm-reserved: platform access that cannot be confirmed (a destructured ctx, a computed member).
  * 路由路径、工具名、能力 ref、界面 id 须是字符串字面量或本文件的 const；动态的写法报「无法静态确认」，
  * 豁免：`// capybara:allow-dynamic-permission <原因>`（行尾或紧邻上一行，原因必填）。
  * ctx 会跟踪本地别名，以及按位置传给同文件函数的参数。

package/dist/check/run.d.ts

@@ -14,6 +14,8 @@ export interface PluginCheckScope {
     plugins: string[];
     /** Package directories held to the SDK's boundary (core: `packages/plugin-sdk`). */
     sdkDirs?: string[];
+    /** Package directories that may depend on `@capybara-hq/plugin-sdk` only (core: `packages/device`). */
+    deviceDirs?: string[];
     /** More directories the tool design rules scan (core: the kernel's builtin tools). */
     toolDesignDirs?: string[];
     /** More migration directories (core: the kernel's migrations). */

package/dist/check/run.js

@@ -25,7 +25,10 @@ export function pluginChecks(scope) {
                 ...plugins.map((p) => join(p, "migrations")),
             ]),
         },
-        { name: "Dependency boundary", run: () => checkDeps(plugins, scope.sdkDirs ?? []) },
+        {
+            name: "Dependency boundary",
+            run: () => checkDeps(plugins, scope.sdkDirs ?? [], scope.deviceDirs ?? []),
+        },
         { name: "Extension state", run: () => checkPluginState(plugins) },
         { name: "Extension permissions", run: () => checkPluginPermissions(plugins) },
         { name: "Plugin pack", run: () => checkPluginPack(plugins) },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@capybara-hq/plugin-tools",
-  "version": "0.1.0-rc.5",
+  "version": "0.1.0-rc.7",
   "description": "Capybara plugin toolchain: the capybara-plugin CLI to pack, check and release Capybara plugins",
   "license": "Apache-2.0",
   "repository": {
@@ -51,12 +51,12 @@
     "esbuild": "0.28.2",
     "oxc-parser": "^0.154.0",
     "tar-stream": "3.2.2",
-    "@capybara-hq/kernel": "^0.1.0-rc.5",
-    "@capybara-hq/plugin-sdk": "^0.1.0-rc.3"
+    "@capybara-hq/plugin-sdk": "^0.1.0-rc.6",
+    "@capybara-hq/kernel": "^0.1.0-rc.9"
   },
   "devDependencies": {
     "zod": "^4.6.7",
-    "@capybara-hq/testing": "0.1.0-rc.6"
+    "@capybara-hq/testing": "0.1.0-rc.9"
   },
   "scripts": {
     "build": "tsc -b"