@cervio/plugin-core 0.1.4 → 1.0.1

package/manifest.schema.json

@@ -212,6 +212,24 @@
           "type": "array",
           "items": {}
         },
+        "boot_requests": {
+          "maxItems": 8,
+          "type": "array",
+          "items": {
+            "type": "object",
+            "properties": {
+              "path": {
+                "type": "string",
+                "description": "GET path + optional query under /api/v1/, covered by a GET `cervio_apis` prefix."
+              }
+            },
+            "required": [
+              "path"
+            ],
+            "additionalProperties": false
+          },
+          "description": "GET calls the plugin makes at start. The host starts them while the plugin loads and answers the plugin's own fetch of the same path + query from that response (once). `/api/v1/entities/<technical name>/...` also matches the entity id. Hint only: nothing changes for other requests."
+        },
         "settings": {
           "type": "array",
           "items": {
@@ -283,6 +301,29 @@
             "additionalProperties": false
           },
           "description": "Admin-editable settings fields (drives Impostazioni dynamic form)."
+        },
+        "task_widget": {
+          "type": "object",
+          "properties": {
+            "preferred_size": {
+              "type": "string",
+              "enum": [
+                "compact",
+                "standard",
+                "tall",
+                "fill"
+              ],
+              "description": "Default box height preset in a task layout (standard = 34rem)."
+            },
+            "preferred_height_px": {
+              "type": "integer",
+              "minimum": 240,
+              "maximum": 1600,
+              "description": "Default box height in px; wins over preferred_size."
+            }
+          },
+          "additionalProperties": false,
+          "description": "task / task_form plugins: suggested size of the plugin box in a task layout. Default only: the layout widget size set by the tenant admin always wins. Invalid values are ignored, never fatal."
         }
       },
       "additionalProperties": true

package/package.json

@@ -1,47 +1,57 @@
 {
   "name": "@cervio/plugin-core",
-  "version": "0.1.4",
+  "version": "1.0.1",
   "description": "Shared Cervio plugin manifest validation, ZIP safety, content hash, and packing.",
+  "keywords": [
+    "cervio",
+    "plugin"
+  ],
+  "license": "MIT",
+  "homepage": "https://github.com/cervio-app/cervio-devkit/tree/main/packages/plugin-core#readme",
+  "bugs": "https://github.com/cervio-app/cervio-devkit/issues",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/cervio-app/cervio-devkit.git",
+    "directory": "packages/plugin-core"
+  },
   "type": "module",
+  "sideEffects": false,
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
   "exports": {
     ".": {
       "types": "./dist/index.d.ts",
-      "import": "./dist/index.js",
-      "require": "./dist/index.cjs"
+      "import": "./dist/index.js"
     },
     "./browser": {
       "types": "./dist/browser.d.ts",
-      "import": "./dist/browser.js",
-      "require": "./dist/browser.cjs"
+      "import": "./dist/browser.js"
     },
     "./manifest.schema.json": "./manifest.schema.json"
   },
   "files": [
     "dist",
     "manifest.schema.json",
-    "README.md"
+    "README.md",
+    "LICENSE"
   ],
+  "engines": {
+    "node": ">=26"
+  },
   "dependencies": {
-    "jszip": "^3.10.1",
-    "zod": "^3.25.76",
-    "zod-to-json-schema": "^3.24.6"
+    "fflate": "^0.8.3",
+    "zod": "^4.6.7"
   },
   "devDependencies": {
-    "@types/node": "^22.15.0",
-    "tsup": "^8.5.0",
+    "@types/node": "^26.0.0",
+    "jszip": "^3.10.1",
+    "tsup": "^9.0.0",
     "typescript": "^5.8.3",
-    "vitest": "^3.2.4"
+    "vitest": "^5.0.5"
   },
   "publishConfig": {
     "access": "public"
   },
-  "license": "UNLICENSED",
-  "keywords": [
-    "cervio",
-    "plugin"
-  ],
   "scripts": {
     "build": "tsup --config tsup.config.ts && node scripts/emit-manifest-schema.mjs",
     "typecheck": "tsc -p tsconfig.json --noEmit",

package/dist/browser-CbWn_0Kk.d.cts

@@ -1,118 +0,0 @@
-import JSZip from 'jszip';
-
-/** Canonical Policy Plugin type is `policy`; `server` is a silent legacy alias. */
-type PluginType = 'task' | 'form' | 'task_form' | 'route' | 'policy' | 'server';
-type PluginActionResult<T> = {
-    ok: true;
-    value: T;
-} | {
-    ok: false;
-    error: string;
-};
-interface PluginVersionRow {
-    id: string;
-    plugin_id: string;
-    version: string;
-    changelog: string | null;
-    artifact_path: string | null;
-    artifact_entry_path?: string | null;
-    artifact_sha256: string | null;
-    content_sha256?: string | null;
-    artifact_size_bytes: number | null;
-    created_at: string;
-    /** Soft-delete timestamp; when set the row is history-only (strikethrough in Admin). */
-    deleted_at?: string | null;
-    deleted_by?: string | null;
-}
-interface ParsedPluginManifest {
-    pluginKey: string;
-    pluginName: string | null;
-    pluginType: PluginType | null;
-    /** Present in ZIP but ignored for assignment; Cervio owns release versions. */
-    manifestVersion: string | null;
-    /** Catalog capability ids the plugin needs (e.g. calendar). */
-    requiredConnectionCapabilities: string[];
-    /** External Connections requirements (OAuth broker). */
-    connections: PluginConnectionRequirement[];
-    /** Declared Cervio entity deps (name-based; for Admin + future export). */
-    entities: PluginEntityRequirement[];
-    /** Declared Cervio API path prefixes (documentation / future allowlist). */
-    cervioApis: PluginCervioApiRequirement[];
-    /** Declared Admin-editable settings fields (drives Impostazioni dynamic form). */
-    settings: PluginSettingsFieldRequirement[];
-    artifactEntryPath: string;
-    rawManifest: Record<string, unknown>;
-    manifestEntryName: string;
-}
-type PluginEntityAccess = 'read' | 'write';
-type PluginEntityRequirement = {
-    name: string;
-    fields: string[];
-    forms: string[];
-    access: PluginEntityAccess[];
-};
-type PluginCervioApiRequirement = {
-    method: string;
-    path_prefix: string;
-};
-type PluginSettingsFieldType = 'string' | 'boolean' | 'select' | 'multiselect';
-type PluginSettingsFieldOption = {
-    value: string;
-    label: string;
-};
-type PluginSettingsFieldRequirement = {
-    key: string;
-    type: PluginSettingsFieldType;
-    label: string;
-    hint?: string;
-    placeholder?: string;
-    default?: string | boolean | string[];
-    /** Required for `select` / `multiselect`. */
-    options?: PluginSettingsFieldOption[];
-};
-type ExternalConnectionHttpMethod = 'GET' | 'POST' | 'PATCH' | 'PUT' | 'DELETE';
-type AllowedApiRule = {
-    host: string;
-    methods: ExternalConnectionHttpMethod[];
-    path_prefix: string;
-};
-type PluginConnectionRequirement = {
-    id: string;
-    provider: string;
-    consent: 'user';
-    scopes: string[];
-    allowed_apis: AllowedApiRule[];
-};
-type ParseManifestOptions = {
-    /**
-     * Capability ids a plugin may declare in `required_connection_capabilities`.
-     * Host passes the live catalog; CLI uses {@link DEFAULT_PLUGIN_DECLARABLE_CAPABILITIES}.
-     */
-    allowedCapabilities?: readonly string[];
-};
-declare const PLUGIN_ARTIFACT_BUCKET = "plugin-artifacts";
-declare const MAX_PLUGIN_ZIP_BYTES: number;
-declare const MAX_PLUGIN_ZIP_ENTRIES = 5000;
-declare const MAX_PLUGIN_UNCOMPRESSED_BYTES: number;
-declare const PLUGIN_KEY_RE: RegExp;
-declare const PLUGIN_VERSION_SELECT = "id, plugin_id, version, changelog, artifact_path, artifact_entry_path, artifact_sha256, content_sha256, artifact_size_bytes, created_at, deleted_at, deleted_by";
-/**
- * Static default for CLI validate. Generated from host `CONNECTION_CAPABILITY_CATALOG`
- * where `pluginDeclarable === true`. Guarded by drift test against the host catalog.
- */
-declare const DEFAULT_PLUGIN_DECLARABLE_CAPABILITIES: readonly ["calendar"];
-
-/** Max uncompressed/compressed ratio per entry (zip-bomb heuristic). */
-declare const MAX_PLUGIN_COMPRESSION_RATIO = 100;
-/**
- * Validates a loaded plugin ZIP before any entry is inflated (CERVIO-SEC-014):
- * caps the entry count and total declared uncompressed size to stop zip bombs,
- * rejects nested archives, and rejects path-traversal / absolute entry names.
- */
-declare function assertZipSafe(zip: JSZip): PluginActionResult<true>;
-declare function assertZipFile(file: {
-    name?: string;
-    size: number;
-}): PluginActionResult<true>;
-
-export { type AllowedApiRule as A, DEFAULT_PLUGIN_DECLARABLE_CAPABILITIES as D, type ExternalConnectionHttpMethod as E, MAX_PLUGIN_UNCOMPRESSED_BYTES as M, type PluginCervioApiRequirement as P, type PluginEntityRequirement as a, type PluginSettingsFieldRequirement as b, type PluginConnectionRequirement as c, type PluginActionResult as d, type ParseManifestOptions as e, type PluginType as f, type ParsedPluginManifest as g, MAX_PLUGIN_ZIP_BYTES as h, MAX_PLUGIN_ZIP_ENTRIES as i, PLUGIN_ARTIFACT_BUCKET as j, PLUGIN_KEY_RE as k, PLUGIN_VERSION_SELECT as l, type PluginEntityAccess as m, type PluginSettingsFieldOption as n, type PluginSettingsFieldType as o, type PluginVersionRow as p, assertZipFile as q, assertZipSafe as r, MAX_PLUGIN_COMPRESSION_RATIO as s };

package/dist/browser-CbWn_0Kk.d.ts

@@ -1,118 +0,0 @@
-import JSZip from 'jszip';
-
-/** Canonical Policy Plugin type is `policy`; `server` is a silent legacy alias. */
-type PluginType = 'task' | 'form' | 'task_form' | 'route' | 'policy' | 'server';
-type PluginActionResult<T> = {
-    ok: true;
-    value: T;
-} | {
-    ok: false;
-    error: string;
-};
-interface PluginVersionRow {
-    id: string;
-    plugin_id: string;
-    version: string;
-    changelog: string | null;
-    artifact_path: string | null;
-    artifact_entry_path?: string | null;
-    artifact_sha256: string | null;
-    content_sha256?: string | null;
-    artifact_size_bytes: number | null;
-    created_at: string;
-    /** Soft-delete timestamp; when set the row is history-only (strikethrough in Admin). */
-    deleted_at?: string | null;
-    deleted_by?: string | null;
-}
-interface ParsedPluginManifest {
-    pluginKey: string;
-    pluginName: string | null;
-    pluginType: PluginType | null;
-    /** Present in ZIP but ignored for assignment; Cervio owns release versions. */
-    manifestVersion: string | null;
-    /** Catalog capability ids the plugin needs (e.g. calendar). */
-    requiredConnectionCapabilities: string[];
-    /** External Connections requirements (OAuth broker). */
-    connections: PluginConnectionRequirement[];
-    /** Declared Cervio entity deps (name-based; for Admin + future export). */
-    entities: PluginEntityRequirement[];
-    /** Declared Cervio API path prefixes (documentation / future allowlist). */
-    cervioApis: PluginCervioApiRequirement[];
-    /** Declared Admin-editable settings fields (drives Impostazioni dynamic form). */
-    settings: PluginSettingsFieldRequirement[];
-    artifactEntryPath: string;
-    rawManifest: Record<string, unknown>;
-    manifestEntryName: string;
-}
-type PluginEntityAccess = 'read' | 'write';
-type PluginEntityRequirement = {
-    name: string;
-    fields: string[];
-    forms: string[];
-    access: PluginEntityAccess[];
-};
-type PluginCervioApiRequirement = {
-    method: string;
-    path_prefix: string;
-};
-type PluginSettingsFieldType = 'string' | 'boolean' | 'select' | 'multiselect';
-type PluginSettingsFieldOption = {
-    value: string;
-    label: string;
-};
-type PluginSettingsFieldRequirement = {
-    key: string;
-    type: PluginSettingsFieldType;
-    label: string;
-    hint?: string;
-    placeholder?: string;
-    default?: string | boolean | string[];
-    /** Required for `select` / `multiselect`. */
-    options?: PluginSettingsFieldOption[];
-};
-type ExternalConnectionHttpMethod = 'GET' | 'POST' | 'PATCH' | 'PUT' | 'DELETE';
-type AllowedApiRule = {
-    host: string;
-    methods: ExternalConnectionHttpMethod[];
-    path_prefix: string;
-};
-type PluginConnectionRequirement = {
-    id: string;
-    provider: string;
-    consent: 'user';
-    scopes: string[];
-    allowed_apis: AllowedApiRule[];
-};
-type ParseManifestOptions = {
-    /**
-     * Capability ids a plugin may declare in `required_connection_capabilities`.
-     * Host passes the live catalog; CLI uses {@link DEFAULT_PLUGIN_DECLARABLE_CAPABILITIES}.
-     */
-    allowedCapabilities?: readonly string[];
-};
-declare const PLUGIN_ARTIFACT_BUCKET = "plugin-artifacts";
-declare const MAX_PLUGIN_ZIP_BYTES: number;
-declare const MAX_PLUGIN_ZIP_ENTRIES = 5000;
-declare const MAX_PLUGIN_UNCOMPRESSED_BYTES: number;
-declare const PLUGIN_KEY_RE: RegExp;
-declare const PLUGIN_VERSION_SELECT = "id, plugin_id, version, changelog, artifact_path, artifact_entry_path, artifact_sha256, content_sha256, artifact_size_bytes, created_at, deleted_at, deleted_by";
-/**
- * Static default for CLI validate. Generated from host `CONNECTION_CAPABILITY_CATALOG`
- * where `pluginDeclarable === true`. Guarded by drift test against the host catalog.
- */
-declare const DEFAULT_PLUGIN_DECLARABLE_CAPABILITIES: readonly ["calendar"];
-
-/** Max uncompressed/compressed ratio per entry (zip-bomb heuristic). */
-declare const MAX_PLUGIN_COMPRESSION_RATIO = 100;
-/**
- * Validates a loaded plugin ZIP before any entry is inflated (CERVIO-SEC-014):
- * caps the entry count and total declared uncompressed size to stop zip bombs,
- * rejects nested archives, and rejects path-traversal / absolute entry names.
- */
-declare function assertZipSafe(zip: JSZip): PluginActionResult<true>;
-declare function assertZipFile(file: {
-    name?: string;
-    size: number;
-}): PluginActionResult<true>;
-
-export { type AllowedApiRule as A, DEFAULT_PLUGIN_DECLARABLE_CAPABILITIES as D, type ExternalConnectionHttpMethod as E, MAX_PLUGIN_UNCOMPRESSED_BYTES as M, type PluginCervioApiRequirement as P, type PluginEntityRequirement as a, type PluginSettingsFieldRequirement as b, type PluginConnectionRequirement as c, type PluginActionResult as d, type ParseManifestOptions as e, type PluginType as f, type ParsedPluginManifest as g, MAX_PLUGIN_ZIP_BYTES as h, MAX_PLUGIN_ZIP_ENTRIES as i, PLUGIN_ARTIFACT_BUCKET as j, PLUGIN_KEY_RE as k, PLUGIN_VERSION_SELECT as l, type PluginEntityAccess as m, type PluginSettingsFieldOption as n, type PluginSettingsFieldType as o, type PluginVersionRow as p, assertZipFile as q, assertZipSafe as r, MAX_PLUGIN_COMPRESSION_RATIO as s };

package/dist/browser.cjs

@@ -1,56 +0,0 @@
-'use strict';
-
-// src/types.ts
-var MAX_PLUGIN_ZIP_BYTES = 50 * 1024 * 1024;
-var MAX_PLUGIN_ZIP_ENTRIES = 5e3;
-var MAX_PLUGIN_UNCOMPRESSED_BYTES = 250 * 1024 * 1024;
-
-// src/zip-safety.ts
-var MAX_PLUGIN_COMPRESSION_RATIO = 100;
-function assertZipSafe(zip) {
-  const names = Object.keys(zip.files);
-  if (names.length > MAX_PLUGIN_ZIP_ENTRIES) {
-    return { ok: false, error: "zip_too_many_entries" };
-  }
-  let totalUncompressed = 0;
-  for (const name of names) {
-    if (name.includes("..") || name.includes("\\") || name.startsWith("/")) {
-      return { ok: false, error: "zip_unsafe_entry_path" };
-    }
-    if (/\.zip$/i.test(name) && !zip.files[name]?.dir) {
-      return { ok: false, error: "zip_nested_archive" };
-    }
-    const entry = zip.files[name];
-    const uncompressed = entry._data?.uncompressedSize ?? 0;
-    const compressed = entry._data?.compressedSize ?? 0;
-    totalUncompressed += uncompressed;
-    if (totalUncompressed > MAX_PLUGIN_UNCOMPRESSED_BYTES) {
-      return { ok: false, error: "zip_uncompressed_too_large" };
-    }
-    if (compressed > 0 && uncompressed > 1024 * 1024) {
-      const ratio = uncompressed / compressed;
-      if (ratio > MAX_PLUGIN_COMPRESSION_RATIO) {
-        return { ok: false, error: "zip_compression_ratio_too_high" };
-      }
-    } else if (compressed === 0 && uncompressed > 1024 * 1024) {
-      return { ok: false, error: "zip_compression_ratio_too_high" };
-    }
-  }
-  return { ok: true, value: true };
-}
-function assertZipFile(file) {
-  const name = (file.name ?? "upload.zip").toLowerCase();
-  if (!name.endsWith(".zip")) return { ok: false, error: "invalid_file_extension" };
-  if (file.size <= 0) return { ok: false, error: "empty_file" };
-  if (file.size > MAX_PLUGIN_ZIP_BYTES) return { ok: false, error: "file_too_large" };
-  return { ok: true, value: true };
-}
-
-exports.MAX_PLUGIN_COMPRESSION_RATIO = MAX_PLUGIN_COMPRESSION_RATIO;
-exports.MAX_PLUGIN_UNCOMPRESSED_BYTES = MAX_PLUGIN_UNCOMPRESSED_BYTES;
-exports.MAX_PLUGIN_ZIP_BYTES = MAX_PLUGIN_ZIP_BYTES;
-exports.MAX_PLUGIN_ZIP_ENTRIES = MAX_PLUGIN_ZIP_ENTRIES;
-exports.assertZipFile = assertZipFile;
-exports.assertZipSafe = assertZipSafe;
-//# sourceMappingURL=browser.cjs.map
-//# sourceMappingURL=browser.cjs.map

package/dist/browser.cjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/types.ts","../src/zip-safety.ts"],"names":[],"mappings":";;;AAmGO,IAAM,oBAAA,GAAuB,KAAK,IAAA,GAAO;AACzC,IAAM,sBAAA,GAAyB;AAC/B,IAAM,6BAAA,GAAgC,MAAM,IAAA,GAAO;;;AC5FnD,IAAM,4BAAA,GAA+B;AAOrC,SAAS,cAAc,GAAA,EAAsC;AAClE,EAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,IAAA,CAAK,GAAA,CAAI,KAAK,CAAA;AACnC,EAAA,IAAI,KAAA,CAAM,SAAS,sBAAA,EAAwB;AACzC,IAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,sBAAA,EAAuB;AAAA,EACpD;AACA,EAAA,IAAI,iBAAA,GAAoB,CAAA;AACxB,EAAA,KAAA,MAAW,QAAQ,KAAA,EAAO;AACxB,IAAA,IAAI,IAAA,CAAK,QAAA,CAAS,IAAI,CAAA,IAAK,IAAA,CAAK,QAAA,CAAS,IAAI,CAAA,IAAK,IAAA,CAAK,UAAA,CAAW,GAAG,CAAA,EAAG;AACtE,MAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,uBAAA,EAAwB;AAAA,IACrD;AAEA,IAAA,IAAI,SAAA,CAAU,KAAK,IAAI,CAAA,IAAK,CAAC,GAAA,CAAI,KAAA,CAAM,IAAI,CAAA,EAAG,GAAA,EAAK;AACjD,MAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,oBAAA,EAAqB;AAAA,IAClD;AACA,IAAA,MAAM,KAAA,GAAQ,GAAA,CAAI,KAAA,CAAM,IAAI,CAAA;AAG5B,IAAA,MAAM,YAAA,GAAe,KAAA,CAAM,KAAA,EAAO,gBAAA,IAAoB,CAAA;AACtD,IAAA,MAAM,UAAA,GAAa,KAAA,CAAM,KAAA,EAAO,cAAA,IAAkB,CAAA;AAClD,IAAA,iBAAA,IAAqB,YAAA;AACrB,IAAA,IAAI,oBAAoB,6BAAA,EAA+B;AACrD,MAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,4BAAA,EAA6B;AAAA,IAC1D;AACA,IAAA,IAAI,UAAA,GAAa,CAAA,IAAK,YAAA,GAAe,IAAA,GAAO,IAAA,EAAM;AAChD,MAAA,MAAM,QAAQ,YAAA,GAAe,UAAA;AAC7B,MAAA,IAAI,QAAQ,4BAAA,EAA8B;AACxC,QAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,gCAAA,EAAiC;AAAA,MAC9D;AAAA,IACF,CAAA,MAAA,IAAW,UAAA,KAAe,CAAA,IAAK,YAAA,GAAe,OAAO,IAAA,EAAM;AACzD,MAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,gCAAA,EAAiC;AAAA,IAC9D;AAAA,EACF;AACA,EAAA,OAAO,EAAE,EAAA,EAAI,IAAA,EAAM,KAAA,EAAO,IAAA,EAAK;AACjC;AAEO,SAAS,cAAc,IAAA,EAAiE;AAC7F,EAAA,MAAM,IAAA,GAAA,CAAQ,IAAA,CAAK,IAAA,IAAQ,YAAA,EAAc,WAAA,EAAY;AACrD,EAAA,IAAI,CAAC,IAAA,CAAK,QAAA,CAAS,MAAM,CAAA,SAAU,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,wBAAA,EAAyB;AAChF,EAAA,IAAI,IAAA,CAAK,QAAQ,CAAA,EAAG,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,OAAO,YAAA,EAAa;AAC5D,EAAA,IAAI,IAAA,CAAK,OAAO,oBAAA,EAAsB,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,OAAO,gBAAA,EAAiB;AAClF,EAAA,OAAO,EAAE,EAAA,EAAI,IAAA,EAAM,KAAA,EAAO,IAAA,EAAK;AACjC","file":"browser.cjs","sourcesContent":["/** Canonical Policy Plugin type is `policy`; `server` is a silent legacy alias. */\nexport type PluginType = 'task' | 'form' | 'task_form' | 'route' | 'policy' | 'server'\n\nexport type PluginActionResult<T> = { ok: true; value: T } | { ok: false; error: string }\n\nexport interface PluginVersionRow {\n  id: string\n  plugin_id: string\n  version: string\n  changelog: string | null\n  artifact_path: string | null\n  artifact_entry_path?: string | null\n  artifact_sha256: string | null\n  content_sha256?: string | null\n  artifact_size_bytes: number | null\n  created_at: string\n  /** Soft-delete timestamp; when set the row is history-only (strikethrough in Admin). */\n  deleted_at?: string | null\n  deleted_by?: string | null\n}\n\nexport interface ParsedPluginManifest {\n  pluginKey: string\n  pluginName: string | null\n  pluginType: PluginType | null\n  /** Present in ZIP but ignored for assignment; Cervio owns release versions. */\n  manifestVersion: string | null\n  /** Catalog capability ids the plugin needs (e.g. calendar). */\n  requiredConnectionCapabilities: string[]\n  /** External Connections requirements (OAuth broker). */\n  connections: PluginConnectionRequirement[]\n  /** Declared Cervio entity deps (name-based; for Admin + future export). */\n  entities: PluginEntityRequirement[]\n  /** Declared Cervio API path prefixes (documentation / future allowlist). */\n  cervioApis: PluginCervioApiRequirement[]\n  /** Declared Admin-editable settings fields (drives Impostazioni dynamic form). */\n  settings: PluginSettingsFieldRequirement[]\n  artifactEntryPath: string\n  rawManifest: Record<string, unknown>\n  manifestEntryName: string\n}\n\nexport type PluginEntityAccess = 'read' | 'write'\n\nexport type PluginEntityRequirement = {\n  name: string\n  fields: string[]\n  forms: string[]\n  access: PluginEntityAccess[]\n}\n\nexport type PluginCervioApiRequirement = {\n  method: string\n  path_prefix: string\n}\n\nexport type PluginSettingsFieldType = 'string' | 'boolean' | 'select' | 'multiselect'\n\nexport type PluginSettingsFieldOption = {\n  value: string\n  label: string\n}\n\nexport type PluginSettingsFieldRequirement = {\n  key: string\n  type: PluginSettingsFieldType\n  label: string\n  hint?: string\n  placeholder?: string\n  default?: string | boolean | string[]\n  /** Required for `select` / `multiselect`. */\n  options?: PluginSettingsFieldOption[]\n}\n\nexport type ExternalConnectionHttpMethod = 'GET' | 'POST' | 'PATCH' | 'PUT' | 'DELETE'\n\nexport type AllowedApiRule = {\n  host: string\n  methods: ExternalConnectionHttpMethod[]\n  path_prefix: string\n}\n\nexport type PluginConnectionRequirement = {\n  id: string\n  provider: string\n  consent: 'user'\n  scopes: string[]\n  allowed_apis: AllowedApiRule[]\n}\n\nexport type ParseManifestOptions = {\n  /**\n   * Capability ids a plugin may declare in `required_connection_capabilities`.\n   * Host passes the live catalog; CLI uses {@link DEFAULT_PLUGIN_DECLARABLE_CAPABILITIES}.\n   */\n  allowedCapabilities?: readonly string[]\n}\n\nexport const PLUGIN_ARTIFACT_BUCKET = 'plugin-artifacts'\nexport const MAX_PLUGIN_ZIP_BYTES = 50 * 1024 * 1024\nexport const MAX_PLUGIN_ZIP_ENTRIES = 5000\nexport const MAX_PLUGIN_UNCOMPRESSED_BYTES = 250 * 1024 * 1024\nexport const PLUGIN_KEY_RE = /^[a-z0-9][a-z0-9-_]{1,62}$/\n\nexport const PLUGIN_VERSION_SELECT =\n  'id, plugin_id, version, changelog, artifact_path, artifact_entry_path, artifact_sha256, content_sha256, artifact_size_bytes, created_at, deleted_at, deleted_by'\n\n/**\n * Static default for CLI validate. Generated from host `CONNECTION_CAPABILITY_CATALOG`\n * where `pluginDeclarable === true`. Guarded by drift test against the host catalog.\n */\nexport const DEFAULT_PLUGIN_DECLARABLE_CAPABILITIES = ['calendar'] as const\n","import type JSZip from 'jszip'\nimport {\n  MAX_PLUGIN_UNCOMPRESSED_BYTES,\n  MAX_PLUGIN_ZIP_BYTES,\n  MAX_PLUGIN_ZIP_ENTRIES,\n  type PluginActionResult,\n} from './types.js'\n\n/** Max uncompressed/compressed ratio per entry (zip-bomb heuristic). */\nexport const MAX_PLUGIN_COMPRESSION_RATIO = 100\n\n/**\n * Validates a loaded plugin ZIP before any entry is inflated (CERVIO-SEC-014):\n * caps the entry count and total declared uncompressed size to stop zip bombs,\n * rejects nested archives, and rejects path-traversal / absolute entry names.\n */\nexport function assertZipSafe(zip: JSZip): PluginActionResult<true> {\n  const names = Object.keys(zip.files)\n  if (names.length > MAX_PLUGIN_ZIP_ENTRIES) {\n    return { ok: false, error: 'zip_too_many_entries' }\n  }\n  let totalUncompressed = 0\n  for (const name of names) {\n    if (name.includes('..') || name.includes('\\\\') || name.startsWith('/')) {\n      return { ok: false, error: 'zip_unsafe_entry_path' }\n    }\n    // Nested archives are a classic zip-bomb layering vector.\n    if (/\\.zip$/i.test(name) && !zip.files[name]?.dir) {\n      return { ok: false, error: 'zip_nested_archive' }\n    }\n    const entry = zip.files[name] as JSZip.JSZipObject & {\n      _data?: { uncompressedSize?: number; compressedSize?: number }\n    }\n    const uncompressed = entry._data?.uncompressedSize ?? 0\n    const compressed = entry._data?.compressedSize ?? 0\n    totalUncompressed += uncompressed\n    if (totalUncompressed > MAX_PLUGIN_UNCOMPRESSED_BYTES) {\n      return { ok: false, error: 'zip_uncompressed_too_large' }\n    }\n    if (compressed > 0 && uncompressed > 1024 * 1024) {\n      const ratio = uncompressed / compressed\n      if (ratio > MAX_PLUGIN_COMPRESSION_RATIO) {\n        return { ok: false, error: 'zip_compression_ratio_too_high' }\n      }\n    } else if (compressed === 0 && uncompressed > 1024 * 1024) {\n      return { ok: false, error: 'zip_compression_ratio_too_high' }\n    }\n  }\n  return { ok: true, value: true }\n}\n\nexport function assertZipFile(file: { name?: string; size: number }): PluginActionResult<true> {\n  const name = (file.name ?? 'upload.zip').toLowerCase()\n  if (!name.endsWith('.zip')) return { ok: false, error: 'invalid_file_extension' }\n  if (file.size <= 0) return { ok: false, error: 'empty_file' }\n  if (file.size > MAX_PLUGIN_ZIP_BYTES) return { ok: false, error: 'file_too_large' }\n  return { ok: true, value: true }\n}\n"]}

package/dist/browser.d.cts

@@ -1,2 +0,0 @@
-export { s as MAX_PLUGIN_COMPRESSION_RATIO, M as MAX_PLUGIN_UNCOMPRESSED_BYTES, h as MAX_PLUGIN_ZIP_BYTES, i as MAX_PLUGIN_ZIP_ENTRIES, d as PluginActionResult, q as assertZipFile, r as assertZipSafe } from './browser-CbWn_0Kk.cjs';
-import 'jszip';

package/dist/browser.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/types.ts","../src/zip-safety.ts"],"names":[],"mappings":";AAmGO,IAAM,oBAAA,GAAuB,KAAK,IAAA,GAAO;AACzC,IAAM,sBAAA,GAAyB;AAC/B,IAAM,6BAAA,GAAgC,MAAM,IAAA,GAAO;;;AC5FnD,IAAM,4BAAA,GAA+B;AAOrC,SAAS,cAAc,GAAA,EAAsC;AAClE,EAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,IAAA,CAAK,GAAA,CAAI,KAAK,CAAA;AACnC,EAAA,IAAI,KAAA,CAAM,SAAS,sBAAA,EAAwB;AACzC,IAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,sBAAA,EAAuB;AAAA,EACpD;AACA,EAAA,IAAI,iBAAA,GAAoB,CAAA;AACxB,EAAA,KAAA,MAAW,QAAQ,KAAA,EAAO;AACxB,IAAA,IAAI,IAAA,CAAK,QAAA,CAAS,IAAI,CAAA,IAAK,IAAA,CAAK,QAAA,CAAS,IAAI,CAAA,IAAK,IAAA,CAAK,UAAA,CAAW,GAAG,CAAA,EAAG;AACtE,MAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,uBAAA,EAAwB;AAAA,IACrD;AAEA,IAAA,IAAI,SAAA,CAAU,KAAK,IAAI,CAAA,IAAK,CAAC,GAAA,CAAI,KAAA,CAAM,IAAI,CAAA,EAAG,GAAA,EAAK;AACjD,MAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,oBAAA,EAAqB;AAAA,IAClD;AACA,IAAA,MAAM,KAAA,GAAQ,GAAA,CAAI,KAAA,CAAM,IAAI,CAAA;AAG5B,IAAA,MAAM,YAAA,GAAe,KAAA,CAAM,KAAA,EAAO,gBAAA,IAAoB,CAAA;AACtD,IAAA,MAAM,UAAA,GAAa,KAAA,CAAM,KAAA,EAAO,cAAA,IAAkB,CAAA;AAClD,IAAA,iBAAA,IAAqB,YAAA;AACrB,IAAA,IAAI,oBAAoB,6BAAA,EAA+B;AACrD,MAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,4BAAA,EAA6B;AAAA,IAC1D;AACA,IAAA,IAAI,UAAA,GAAa,CAAA,IAAK,YAAA,GAAe,IAAA,GAAO,IAAA,EAAM;AAChD,MAAA,MAAM,QAAQ,YAAA,GAAe,UAAA;AAC7B,MAAA,IAAI,QAAQ,4BAAA,EAA8B;AACxC,QAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,gCAAA,EAAiC;AAAA,MAC9D;AAAA,IACF,CAAA,MAAA,IAAW,UAAA,KAAe,CAAA,IAAK,YAAA,GAAe,OAAO,IAAA,EAAM;AACzD,MAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,gCAAA,EAAiC;AAAA,IAC9D;AAAA,EACF;AACA,EAAA,OAAO,EAAE,EAAA,EAAI,IAAA,EAAM,KAAA,EAAO,IAAA,EAAK;AACjC;AAEO,SAAS,cAAc,IAAA,EAAiE;AAC7F,EAAA,MAAM,IAAA,GAAA,CAAQ,IAAA,CAAK,IAAA,IAAQ,YAAA,EAAc,WAAA,EAAY;AACrD,EAAA,IAAI,CAAC,IAAA,CAAK,QAAA,CAAS,MAAM,CAAA,SAAU,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,wBAAA,EAAyB;AAChF,EAAA,IAAI,IAAA,CAAK,QAAQ,CAAA,EAAG,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,OAAO,YAAA,EAAa;AAC5D,EAAA,IAAI,IAAA,CAAK,OAAO,oBAAA,EAAsB,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,OAAO,gBAAA,EAAiB;AAClF,EAAA,OAAO,EAAE,EAAA,EAAI,IAAA,EAAM,KAAA,EAAO,IAAA,EAAK;AACjC","file":"browser.js","sourcesContent":["/** Canonical Policy Plugin type is `policy`; `server` is a silent legacy alias. */\nexport type PluginType = 'task' | 'form' | 'task_form' | 'route' | 'policy' | 'server'\n\nexport type PluginActionResult<T> = { ok: true; value: T } | { ok: false; error: string }\n\nexport interface PluginVersionRow {\n  id: string\n  plugin_id: string\n  version: string\n  changelog: string | null\n  artifact_path: string | null\n  artifact_entry_path?: string | null\n  artifact_sha256: string | null\n  content_sha256?: string | null\n  artifact_size_bytes: number | null\n  created_at: string\n  /** Soft-delete timestamp; when set the row is history-only (strikethrough in Admin). */\n  deleted_at?: string | null\n  deleted_by?: string | null\n}\n\nexport interface ParsedPluginManifest {\n  pluginKey: string\n  pluginName: string | null\n  pluginType: PluginType | null\n  /** Present in ZIP but ignored for assignment; Cervio owns release versions. */\n  manifestVersion: string | null\n  /** Catalog capability ids the plugin needs (e.g. calendar). */\n  requiredConnectionCapabilities: string[]\n  /** External Connections requirements (OAuth broker). */\n  connections: PluginConnectionRequirement[]\n  /** Declared Cervio entity deps (name-based; for Admin + future export). */\n  entities: PluginEntityRequirement[]\n  /** Declared Cervio API path prefixes (documentation / future allowlist). */\n  cervioApis: PluginCervioApiRequirement[]\n  /** Declared Admin-editable settings fields (drives Impostazioni dynamic form). */\n  settings: PluginSettingsFieldRequirement[]\n  artifactEntryPath: string\n  rawManifest: Record<string, unknown>\n  manifestEntryName: string\n}\n\nexport type PluginEntityAccess = 'read' | 'write'\n\nexport type PluginEntityRequirement = {\n  name: string\n  fields: string[]\n  forms: string[]\n  access: PluginEntityAccess[]\n}\n\nexport type PluginCervioApiRequirement = {\n  method: string\n  path_prefix: string\n}\n\nexport type PluginSettingsFieldType = 'string' | 'boolean' | 'select' | 'multiselect'\n\nexport type PluginSettingsFieldOption = {\n  value: string\n  label: string\n}\n\nexport type PluginSettingsFieldRequirement = {\n  key: string\n  type: PluginSettingsFieldType\n  label: string\n  hint?: string\n  placeholder?: string\n  default?: string | boolean | string[]\n  /** Required for `select` / `multiselect`. */\n  options?: PluginSettingsFieldOption[]\n}\n\nexport type ExternalConnectionHttpMethod = 'GET' | 'POST' | 'PATCH' | 'PUT' | 'DELETE'\n\nexport type AllowedApiRule = {\n  host: string\n  methods: ExternalConnectionHttpMethod[]\n  path_prefix: string\n}\n\nexport type PluginConnectionRequirement = {\n  id: string\n  provider: string\n  consent: 'user'\n  scopes: string[]\n  allowed_apis: AllowedApiRule[]\n}\n\nexport type ParseManifestOptions = {\n  /**\n   * Capability ids a plugin may declare in `required_connection_capabilities`.\n   * Host passes the live catalog; CLI uses {@link DEFAULT_PLUGIN_DECLARABLE_CAPABILITIES}.\n   */\n  allowedCapabilities?: readonly string[]\n}\n\nexport const PLUGIN_ARTIFACT_BUCKET = 'plugin-artifacts'\nexport const MAX_PLUGIN_ZIP_BYTES = 50 * 1024 * 1024\nexport const MAX_PLUGIN_ZIP_ENTRIES = 5000\nexport const MAX_PLUGIN_UNCOMPRESSED_BYTES = 250 * 1024 * 1024\nexport const PLUGIN_KEY_RE = /^[a-z0-9][a-z0-9-_]{1,62}$/\n\nexport const PLUGIN_VERSION_SELECT =\n  'id, plugin_id, version, changelog, artifact_path, artifact_entry_path, artifact_sha256, content_sha256, artifact_size_bytes, created_at, deleted_at, deleted_by'\n\n/**\n * Static default for CLI validate. Generated from host `CONNECTION_CAPABILITY_CATALOG`\n * where `pluginDeclarable === true`. Guarded by drift test against the host catalog.\n */\nexport const DEFAULT_PLUGIN_DECLARABLE_CAPABILITIES = ['calendar'] as const\n","import type JSZip from 'jszip'\nimport {\n  MAX_PLUGIN_UNCOMPRESSED_BYTES,\n  MAX_PLUGIN_ZIP_BYTES,\n  MAX_PLUGIN_ZIP_ENTRIES,\n  type PluginActionResult,\n} from './types.js'\n\n/** Max uncompressed/compressed ratio per entry (zip-bomb heuristic). */\nexport const MAX_PLUGIN_COMPRESSION_RATIO = 100\n\n/**\n * Validates a loaded plugin ZIP before any entry is inflated (CERVIO-SEC-014):\n * caps the entry count and total declared uncompressed size to stop zip bombs,\n * rejects nested archives, and rejects path-traversal / absolute entry names.\n */\nexport function assertZipSafe(zip: JSZip): PluginActionResult<true> {\n  const names = Object.keys(zip.files)\n  if (names.length > MAX_PLUGIN_ZIP_ENTRIES) {\n    return { ok: false, error: 'zip_too_many_entries' }\n  }\n  let totalUncompressed = 0\n  for (const name of names) {\n    if (name.includes('..') || name.includes('\\\\') || name.startsWith('/')) {\n      return { ok: false, error: 'zip_unsafe_entry_path' }\n    }\n    // Nested archives are a classic zip-bomb layering vector.\n    if (/\\.zip$/i.test(name) && !zip.files[name]?.dir) {\n      return { ok: false, error: 'zip_nested_archive' }\n    }\n    const entry = zip.files[name] as JSZip.JSZipObject & {\n      _data?: { uncompressedSize?: number; compressedSize?: number }\n    }\n    const uncompressed = entry._data?.uncompressedSize ?? 0\n    const compressed = entry._data?.compressedSize ?? 0\n    totalUncompressed += uncompressed\n    if (totalUncompressed > MAX_PLUGIN_UNCOMPRESSED_BYTES) {\n      return { ok: false, error: 'zip_uncompressed_too_large' }\n    }\n    if (compressed > 0 && uncompressed > 1024 * 1024) {\n      const ratio = uncompressed / compressed\n      if (ratio > MAX_PLUGIN_COMPRESSION_RATIO) {\n        return { ok: false, error: 'zip_compression_ratio_too_high' }\n      }\n    } else if (compressed === 0 && uncompressed > 1024 * 1024) {\n      return { ok: false, error: 'zip_compression_ratio_too_high' }\n    }\n  }\n  return { ok: true, value: true }\n}\n\nexport function assertZipFile(file: { name?: string; size: number }): PluginActionResult<true> {\n  const name = (file.name ?? 'upload.zip').toLowerCase()\n  if (!name.endsWith('.zip')) return { ok: false, error: 'invalid_file_extension' }\n  if (file.size <= 0) return { ok: false, error: 'empty_file' }\n  if (file.size > MAX_PLUGIN_ZIP_BYTES) return { ok: false, error: 'file_too_large' }\n  return { ok: true, value: true }\n}\n"]}