@cjhyy/code-shell-core 0.8.9 → 0.8.10

package/dist/model-catalog/types.js

@@ -12,6 +12,10 @@
  * ("openai"/"google"/"fal"). `shape` is documentation/future only.
  */
 import { z } from "zod";
+const id = z.string().min(1).max(128);
+const shortText = z.string().max(256);
+const longText = z.string().max(32_768);
+const boundedNumber = z.number().finite().min(0).max(1_000_000_000);
 /**
  * How the param maps onto the outgoing request body. `field` is the request
  * field this param lands on — same param name can land differently per
@@ -20,7 +24,7 @@ import { z } from "zod";
  * in `if (kind === ...)` branches in the engine. Minimal v1: field only.
  */
 export const wireSpecSchema = z.object({
-    field: z.string(),
+    field: id,
 });
 /**
  * One **generic** declarative param — no special-casing per param. reasoning
@@ -32,18 +36,18 @@ export const wireSpecSchema = z.object({
  */
 export const paramSpecSchema = z.object({
     /** Logical name, e.g. "reasoning" / "size" / "quality" / "temperature". */
-    name: z.string(),
+    name: id,
     /** UI control label (falls back to `name`). */
-    label: z.string().optional(),
+    label: shortText.optional(),
     control: z.enum(["enum", "number", "toggle", "text"]),
     /** control=enum allowed values, e.g. ["low","medium","high","xhigh"]. */
-    options: z.array(z.string()).optional(),
+    options: z.array(shortText).max(64).optional(),
     /** control=number bounds. */
-    min: z.number().optional(),
-    max: z.number().optional(),
-    default: z.union([z.string(), z.number(), z.boolean()]).optional(),
+    min: boundedNumber.optional(),
+    max: boundedNumber.optional(),
+    default: z.union([shortText, boundedNumber, z.boolean()]).optional(),
     /** Natural-language usage note → injected into the tool description. */
-    doc: z.string().optional(),
+    doc: z.string().max(4_096).optional(),
     /** How this param lands on the request body. */
     wire: wireSpecSchema.optional(),
 });
@@ -53,17 +57,17 @@ export const paramSpecSchema = z.object({
  * can expose different params, since gateways normalize differently).
  */
 export const modelPresetSchema = z.object({
-    value: z.string(),
-    label: z.string().optional(),
-    maxContextTokens: z.number().optional(),
-    maxOutputTokens: z.number().optional(),
+    value: id,
+    label: shortText.optional(),
+    maxContextTokens: boundedNumber.optional(),
+    maxOutputTokens: boundedNumber.optional(),
     supportsVision: z.boolean().optional(),
     /** Params this model supports; absent → no adjustable knobs. */
-    params: z.array(paramSpecSchema).optional(),
+    params: z.array(paramSpecSchema).max(64).optional(),
 });
 export const catalogEntrySchema = z.object({
     /** Template id, e.g. "openai" / "openai-images" / "fal-video". */
-    id: z.string(),
+    id,
     /** Which 连接 page group this lands in. (audio = speech-to-text / voice input.) */
     tag: z.enum(["text", "image", "video", "audio"]),
     /**
@@ -71,15 +75,15 @@ export const catalogEntrySchema = z.object({
      * runtime adapter for image/video. OpenRouter is `openrouter` even though its
      * text protocol is `openai-compat`.
      */
-    adapterKind: z.string(),
+    adapterKind: id,
     /** LLM client protocol (text entries). */
     protocol: z.enum(["openai-compat", "anthropic-style"]).optional(),
     /** HTTP shape — documentation/future only; runtime dispatches on adapterKind. */
     shape: z.enum(["generic-sync", "fal-queue"]).optional(),
-    displayName: z.string(),
-    description: z.string(),
-    defaultBaseUrl: z.string(),
-    defaultModel: z.string().optional(),
+    displayName: z.string().min(1).max(256),
+    description: z.string().max(4_096),
+    defaultBaseUrl: z.string().max(4_096),
+    defaultModel: shortText.optional(),
     /** Whether this provider needs an API key (ollama/local = false). */
     needsKey: z.boolean().optional(),
     /**
@@ -89,8 +93,8 @@ export const catalogEntrySchema = z.object({
      * `value`, so future built-in models remain visible.
      */
     modelPresetsMode: z.enum(["replace", "merge"]).optional(),
-    modelPresets: z.array(modelPresetSchema).optional(),
-    signupUrl: z.string().optional(),
+    modelPresets: z.array(modelPresetSchema).max(512).optional(),
+    signupUrl: z.string().max(4_096).optional(),
     /** Whether the 连接 card offers a "测试" button (image=true, video=false). */
     test: z.boolean().optional(),
     /**
@@ -98,7 +102,7 @@ export const catalogEntrySchema = z.object({
      * the agent via the dynamic GenerateImage/GenerateVideo tool description so it
      * knows what a configured model accepts (different models differ).
      */
-    paramsDoc: z.string().optional(),
+    paramsDoc: longText.optional(),
 });
 /** A user-catalog file is just an array of entries (zod-validated on load). */
-export const userCatalogFileSchema = z.array(catalogEntrySchema);
+export const userCatalogFileSchema = z.array(catalogEntrySchema).max(256);

package/dist/panel-apps/installer.js

@@ -1,6 +1,6 @@
 import { createHash, randomUUID } from "node:crypto";
-import { existsSync } from "node:fs";
-import { cp, lstat, mkdir, mkdtemp, readFile, readdir, realpath, rename, rm, stat, writeFile, } from "node:fs/promises";
+import { constants, existsSync } from "node:fs";
+import { cp, lstat, mkdir, mkdtemp, open, readdir, realpath, rename, rm, stat, writeFile, } from "node:fs/promises";
 import { tmpdir } from "node:os";
 import { basename, extname, join, posix, relative, resolve, sep } from "node:path";
 import { extractZip, extractZipSubdirectory } from "../plugins/installer/unzip.js";
@@ -279,22 +279,34 @@ async function walkBoundedTree(root, directory, depth, budget, files, directorie
     }
 }
 async function readManifest(sourceRoot) {
-    const file = join(sourceRoot, PANEL_APP_MANIFEST_FILE);
-    let info;
     try {
-        info = await stat(file);
+        const raw = await readBoundedPackageFile(sourceRoot, PANEL_APP_MANIFEST_FILE, MAX_MANIFEST_BYTES);
+        return PanelAppManifest.parse(JSON.parse(raw.toString("utf8")));
     }
-    catch {
-        throw new PanelAppInstallError(`missing ${PANEL_APP_MANIFEST_FILE}`);
+    catch (error) {
+        throw new PanelAppInstallError(`invalid Panel App manifest: ${error instanceof Error ? error.message : String(error)}`);
+    }
+}
+async function readBoundedPackageFile(root, relativePath, maxBytes) {
+    const candidate = join(root, ...relativePath.split("/"));
+    const metadata = await lstat(candidate);
+    if (metadata.isSymbolicLink() || !metadata.isFile() || metadata.size > maxBytes) {
+        throw new PanelAppInstallError(`Panel App file is not a bounded regular file: ${relativePath}`);
     }
-    if (!info.isFile() || info.size > MAX_MANIFEST_BYTES) {
-        throw new PanelAppInstallError(`${PANEL_APP_MANIFEST_FILE} must be a regular file no larger than 1 MiB`);
+    const physical = await realpath(candidate);
+    if (physical !== root && !physical.startsWith(`${root}${sep}`)) {
+        throw new PanelAppInstallError(`Panel App file escapes its package: ${relativePath}`);
     }
+    const handle = await open(candidate, constants.O_RDONLY | (constants.O_NOFOLLOW ?? 0));
     try {
-        return PanelAppManifest.parse(JSON.parse(await readFile(file, "utf-8")));
+        const opened = await handle.stat();
+        if (!opened.isFile() || opened.size > maxBytes) {
+            throw new PanelAppInstallError(`Panel App file is not a bounded regular file: ${relativePath}`);
+        }
+        return await handle.readFile();
     }
-    catch (error) {
-        throw new PanelAppInstallError(`invalid Panel App manifest: ${error instanceof Error ? error.message : String(error)}`);
+    finally {
+        await handle.close();
     }
 }
 async function inspectPanelAppSource(sourceRoot) {
@@ -323,10 +335,11 @@ async function inspectPanelAppSource(sourceRoot) {
         if (!files.includes(skillEntry)) {
             throw new PanelAppInstallError(`declared Panel App skill is missing: ${skillEntry}`);
         }
-        const skillInfo = await stat(join(root, ...skillEntry.split("/")));
+        const skillInfo = await lstat(join(root, ...skillEntry.split("/")));
         if (!skillInfo.isFile() || skillInfo.size > MAX_AGENT_SKILL_BYTES) {
             throw new PanelAppInstallError(`declared Panel App skill must be a file no larger than 256 KiB: ${skillEntry}`);
         }
+        await readBoundedPackageFile(root, skillEntry, MAX_AGENT_SKILL_BYTES);
     }
     for (const file of files) {
         if (file === PANEL_APP_MANIFEST_FILE || file === PANEL_APP_META_FILE)
@@ -352,7 +365,7 @@ async function inspectPanelAppSource(sourceRoot) {
         hash
             .update(file)
             .update("\0")
-            .update(await readFile(join(root, ...file.split("/"))));
+            .update(await readBoundedPackageFile(root, file, file === PANEL_APP_MANIFEST_FILE ? MAX_MANIFEST_BYTES : MAX_FILE_BYTES));
     }
     return { manifest, files, digest: hash.digest("hex") };
 }

package/dist/panel-apps/registry.js

@@ -1,6 +1,6 @@
 import { randomUUID } from "node:crypto";
-import { existsSync } from "node:fs";
-import { mkdir, readFile, rename, rm, writeFile } from "node:fs/promises";
+import { constants } from "node:fs";
+import { chmod, lstat, mkdir, open, rename, rm, writeFile } from "node:fs/promises";
 import { dirname } from "node:path";
 import { z } from "zod";
 import { panelAppsRegistryPath } from "./paths.js";
@@ -28,47 +28,95 @@ const Registry = z
     apps: z.array(RegistryEntry).max(1_024),
 })
     .strict();
-async function readRegistryUnlocked() {
+const MAX_PANEL_APP_REGISTRY_BYTES = 4 * 1024 * 1024;
+async function registryEntry(path) {
+    try {
+        return await lstat(path);
+    }
+    catch (error) {
+        if (error.code === "ENOENT")
+            return null;
+        throw error;
+    }
+}
+async function checkedRegistryDirectory() {
+    const directory = dirname(panelAppsRegistryPath());
+    await mkdir(directory, { recursive: true, mode: 0o700 });
+    const metadata = await lstat(directory);
+    if (metadata.isSymbolicLink() || !metadata.isDirectory()) {
+        throw new Error("Panel App registry directory must be a real directory");
+    }
+    return directory;
+}
+async function readRegistryUnlocked(strict = false) {
     const path = panelAppsRegistryPath();
-    if (!existsSync(path))
-        return [];
+    let handle;
     try {
-        return Registry.parse(JSON.parse(await readFile(path, "utf-8"))).apps;
+        const metadata = await registryEntry(path);
+        if (!metadata)
+            return [];
+        if (metadata.isSymbolicLink() ||
+            !metadata.isFile() ||
+            metadata.size > MAX_PANEL_APP_REGISTRY_BYTES) {
+            throw new Error("Panel App registry must be a bounded regular file");
+        }
+        handle = await open(path, constants.O_RDONLY | (constants.O_NOFOLLOW ?? 0));
+        const opened = await handle.stat();
+        if (!opened.isFile() || opened.size > MAX_PANEL_APP_REGISTRY_BYTES) {
+            throw new Error("Panel App registry must be a bounded regular file");
+        }
+        return Registry.parse(JSON.parse(await handle.readFile("utf8"))).apps;
     }
-    catch {
+    catch (error) {
+        if (strict) {
+            const detail = error instanceof Error ? `: ${error.message}` : "";
+            throw new Error(`Panel App registry is corrupt${detail}`, { cause: error });
+        }
         return [];
     }
+    finally {
+        await handle?.close().catch(() => undefined);
+    }
 }
 async function writeRegistryUnlocked(apps) {
     const path = panelAppsRegistryPath();
-    await mkdir(dirname(path), { recursive: true, mode: 0o700 });
+    await checkedRegistryDirectory();
+    const target = await registryEntry(path);
+    if (target && (target.isSymbolicLink() || !target.isFile())) {
+        throw new Error("Panel App registry target must be a regular file");
+    }
     const tmp = `${path}.${process.pid}.${randomUUID()}.tmp`;
     try {
         const registry = Registry.parse({
             version: 1,
             apps: [...apps].sort((left, right) => left.id.localeCompare(right.id)),
         });
-        await writeFile(tmp, `${JSON.stringify(registry, null, 2)}\n`, {
+        const serialized = `${JSON.stringify(registry, null, 2)}\n`;
+        if (Buffer.byteLength(serialized, "utf8") > MAX_PANEL_APP_REGISTRY_BYTES) {
+            throw new Error("Panel App registry is too large");
+        }
+        await writeFile(tmp, serialized, {
             encoding: "utf-8",
             flag: "wx",
             mode: 0o600,
         });
         await rename(tmp, path);
+        if (process.platform !== "win32")
+            await chmod(path, 0o600);
     }
     finally {
         await rm(tmp, { force: true });
     }
 }
 async function mutateRegistry(mutation) {
-    const directory = dirname(panelAppsRegistryPath());
-    await mkdir(directory, { recursive: true, mode: 0o700 });
+    const directory = await checkedRegistryDirectory();
     const release = await lock(directory, {
         realpath: true,
         stale: 10_000,
         retries: { retries: 8, minTimeout: 10, maxTimeout: 120, factor: 1.5 },
     });
     try {
-        const next = mutation(await readRegistryUnlocked());
+        const next = mutation(await readRegistryUnlocked(true));
         await writeRegistryUnlocked(next.apps);
         return next.result;
     }

package/dist/plugins/installedPlugins.d.ts

@@ -7,6 +7,10 @@ import type { InstalledPluginsV2, PluginInstallEntry } from "./types.js";
 export declare function installedPluginsPath(): string;
 export declare function readInstalledPlugins(): InstalledPluginsV2;
 export declare function writeInstalledPlugins(data: InstalledPluginsV2): void;
+export declare function mutateInstalledPlugins<R>(mutation: (current: InstalledPluginsV2) => {
+    value?: InstalledPluginsV2;
+    result?: R;
+}): R | undefined;
 /**
  * Append an install entry for `<plugin>@<marketplace>`. Multiple entries
  * for the same key are allowed (different scopes); MVP only writes scope:"user".

package/dist/plugins/installedPlugins.js

@@ -3,10 +3,10 @@
  * Reads the Claude Code-compatible V2 shape plus optional CodeShell integrity
  * fields on each install entry.
  */
-import { randomUUID } from "node:crypto";
-import { existsSync, mkdirSync, readFileSync, renameSync, rmSync, writeFileSync } from "node:fs";
-import { dirname, join } from "node:path";
+import { chmodSync, closeSync, constants, fstatSync, lstatSync, openSync, readFileSync, } from "node:fs";
+import { join } from "node:path";
 import { homedir } from "node:os";
+import { mutateJsonFile } from "../utils/file-mutex.js";
 const MAX_PLUGIN_KEYS = 2_048;
 const MAX_INSTALLS_PER_KEY = 16;
 const MAX_KEY_LENGTH = 256;
@@ -16,6 +16,7 @@ const DIGEST_RE = /^[a-f0-9]{64}$/;
 const MAX_HOOK_REVIEW_ITEMS = 256;
 const MAX_HOOK_REVIEW_COMMAND_LENGTH = 4_096;
 const MAX_HOOK_REVIEW_MATCHER_LENGTH = 4_096;
+const MAX_INSTALLED_PLUGINS_FILE_BYTES = 16 * 1024 * 1024;
 function userHome() {
     return process.env.HOME ?? homedir();
 }
@@ -142,52 +143,91 @@ function registryOf(value) {
 }
 export function readInstalledPlugins() {
     const path = installedPluginsPath();
-    if (!existsSync(path))
-        return { version: 2, plugins: {} };
+    let descriptor;
     try {
-        const parsed = registryOf(JSON.parse(readFileSync(path, "utf-8")));
+        const metadata = lstatSync(path);
+        if (metadata.isSymbolicLink() ||
+            !metadata.isFile() ||
+            metadata.size > MAX_INSTALLED_PLUGINS_FILE_BYTES) {
+            return { version: 2, plugins: {} };
+        }
+        descriptor = openSync(path, constants.O_RDONLY | (constants.O_NOFOLLOW ?? 0));
+        const opened = fstatSync(descriptor);
+        if (!opened.isFile() || opened.size > MAX_INSTALLED_PLUGINS_FILE_BYTES) {
+            return { version: 2, plugins: {} };
+        }
+        const parsed = registryOf(JSON.parse(readFileSync(descriptor, "utf-8")));
         if (parsed)
             return parsed;
     }
     catch {
         // Corrupt — treat as empty so the user can re-install.
     }
+    finally {
+        if (descriptor !== undefined)
+            closeSync(descriptor);
+    }
     return { version: 2, plugins: {} };
 }
 export function writeInstalledPlugins(data) {
     const path = installedPluginsPath();
-    mkdirSync(dirname(path), { recursive: true });
-    const tmp = `${path}.${process.pid}.${randomUUID()}.tmp`;
-    try {
-        writeFileSync(tmp, JSON.stringify(data, null, 2) + "\n", {
-            encoding: "utf-8",
-            flag: "wx",
-            mode: 0o600,
-        });
-        renameSync(tmp, path);
-    }
-    finally {
-        rmSync(tmp, { force: true });
-    }
+    const normalized = registryOf(data);
+    if (!normalized)
+        throw new Error("invalid installed plugins registry");
+    mutateJsonFile(path, {
+        parse: parseInstalledPlugins,
+        serialize: (value) => `${JSON.stringify(value, null, 2)}\n`,
+        mutation: () => ({ value: normalized }),
+        mode: 0o600,
+        maxBytes: MAX_INSTALLED_PLUGINS_FILE_BYTES,
+    });
+    if (process.platform !== "win32")
+        chmodSync(path, 0o600);
+}
+function parseInstalledPlugins(raw) {
+    if (raw === undefined)
+        return { version: 2, plugins: {} };
+    const parsed = registryOf(JSON.parse(raw));
+    if (!parsed)
+        throw new Error("installed plugins registry is corrupt");
+    return parsed;
+}
+export function mutateInstalledPlugins(mutation) {
+    return mutateJsonFile(installedPluginsPath(), {
+        parse: parseInstalledPlugins,
+        serialize: (value) => `${JSON.stringify(value, null, 2)}\n`,
+        mutation,
+        mode: 0o600,
+        maxBytes: MAX_INSTALLED_PLUGINS_FILE_BYTES,
+    });
 }
 /**
  * Append an install entry for `<plugin>@<marketplace>`. Multiple entries
  * for the same key are allowed (different scopes); MVP only writes scope:"user".
  */
 export function appendInstallEntry(key, entry) {
-    const data = readInstalledPlugins();
-    const list = data.plugins[key] ?? [];
-    list.push(entry);
-    data.plugins[key] = list;
-    writeInstalledPlugins(data);
+    if (key.length === 0 || key.length > MAX_KEY_LENGTH || key.includes("\0")) {
+        throw new Error("invalid plugin install key");
+    }
+    const normalized = installEntryOf(entry);
+    if (!normalized)
+        throw new Error("invalid plugin install entry");
+    mutateInstalledPlugins((data) => {
+        const list = [...(data.plugins[key] ?? [])];
+        if (list.length >= MAX_INSTALLS_PER_KEY)
+            throw new Error("too many plugin installs for key");
+        list.push(normalized);
+        data.plugins[key] = list;
+        return { value: data };
+    });
 }
 export function removeInstallEntries(key) {
-    const data = readInstalledPlugins();
-    if (!(key in data.plugins))
-        return false;
-    delete data.plugins[key];
-    writeInstalledPlugins(data);
-    return true;
+    return (mutateInstalledPlugins((data) => {
+        if (!Object.prototype.hasOwnProperty.call(data.plugins, key))
+            return { result: false };
+        delete data.plugins[key];
+        return { value: data, result: true };
+    }) ?? false);
 }
 export function pluginInstallKey(plugin, marketplace) {
     return `${plugin}@${marketplace}`;

package/dist/plugins/installer/types.d.ts

@@ -29,8 +29,8 @@ export declare const PluginAutomationTemplate: z.ZodObject<{
         en?: string | undefined;
         "zh-CN"?: string | undefined;
     };
-    permissionLevel: "full" | "read-only" | "workspace-write";
     schedule: string;
+    permissionLevel: "full" | "read-only" | "workspace-write";
     description?: string | undefined;
     timezone?: string | undefined;
 }, {
@@ -79,8 +79,8 @@ export declare const PluginAutomationsManifest: z.ZodEffects<z.ZodObject<{
             en?: string | undefined;
             "zh-CN"?: string | undefined;
         };
-        permissionLevel: "full" | "read-only" | "workspace-write";
         schedule: string;
+        permissionLevel: "full" | "read-only" | "workspace-write";
         description?: string | undefined;
         timezone?: string | undefined;
     }, {
@@ -108,8 +108,8 @@ export declare const PluginAutomationsManifest: z.ZodEffects<z.ZodObject<{
             en?: string | undefined;
             "zh-CN"?: string | undefined;
         };
-        permissionLevel: "full" | "read-only" | "workspace-write";
         schedule: string;
+        permissionLevel: "full" | "read-only" | "workspace-write";
         description?: string | undefined;
         timezone?: string | undefined;
     }[];
@@ -140,8 +140,8 @@ export declare const PluginAutomationsManifest: z.ZodEffects<z.ZodObject<{
             en?: string | undefined;
             "zh-CN"?: string | undefined;
         };
-        permissionLevel: "full" | "read-only" | "workspace-write";
         schedule: string;
+        permissionLevel: "full" | "read-only" | "workspace-write";
         description?: string | undefined;
         timezone?: string | undefined;
     }[];
@@ -249,8 +249,8 @@ export declare const CodeShellPluginOverlay: z.ZodObject<{
                 en?: string | undefined;
                 "zh-CN"?: string | undefined;
             };
-            permissionLevel: "full" | "read-only" | "workspace-write";
             schedule: string;
+            permissionLevel: "full" | "read-only" | "workspace-write";
             description?: string | undefined;
             timezone?: string | undefined;
         }, {
@@ -278,8 +278,8 @@ export declare const CodeShellPluginOverlay: z.ZodObject<{
                 en?: string | undefined;
                 "zh-CN"?: string | undefined;
             };
-            permissionLevel: "full" | "read-only" | "workspace-write";
             schedule: string;
+            permissionLevel: "full" | "read-only" | "workspace-write";
             description?: string | undefined;
             timezone?: string | undefined;
         }[];
@@ -310,8 +310,8 @@ export declare const CodeShellPluginOverlay: z.ZodObject<{
                 en?: string | undefined;
                 "zh-CN"?: string | undefined;
             };
-            permissionLevel: "full" | "read-only" | "workspace-write";
             schedule: string;
+            permissionLevel: "full" | "read-only" | "workspace-write";
             description?: string | undefined;
             timezone?: string | undefined;
         }[];
@@ -345,8 +345,8 @@ export declare const CodeShellPluginOverlay: z.ZodObject<{
                 en?: string | undefined;
                 "zh-CN"?: string | undefined;
             };
-            permissionLevel: "full" | "read-only" | "workspace-write";
             schedule: string;
+            permissionLevel: "full" | "read-only" | "workspace-write";
             description?: string | undefined;
             timezone?: string | undefined;
         }[];
@@ -634,8 +634,8 @@ export declare const CanonicalPluginManifest: z.ZodObject<{
                 en?: string | undefined;
                 "zh-CN"?: string | undefined;
             };
-            permissionLevel: "full" | "read-only" | "workspace-write";
             schedule: string;
+            permissionLevel: "full" | "read-only" | "workspace-write";
             description?: string | undefined;
             timezone?: string | undefined;
         }, {
@@ -663,8 +663,8 @@ export declare const CanonicalPluginManifest: z.ZodObject<{
                 en?: string | undefined;
                 "zh-CN"?: string | undefined;
             };
-            permissionLevel: "full" | "read-only" | "workspace-write";
             schedule: string;
+            permissionLevel: "full" | "read-only" | "workspace-write";
             description?: string | undefined;
             timezone?: string | undefined;
         }[];
@@ -695,8 +695,8 @@ export declare const CanonicalPluginManifest: z.ZodObject<{
                 en?: string | undefined;
                 "zh-CN"?: string | undefined;
             };
-            permissionLevel: "full" | "read-only" | "workspace-write";
             schedule: string;
+            permissionLevel: "full" | "read-only" | "workspace-write";
             description?: string | undefined;
             timezone?: string | undefined;
         }[];
@@ -750,8 +750,8 @@ export declare const CanonicalPluginManifest: z.ZodObject<{
                 en?: string | undefined;
                 "zh-CN"?: string | undefined;
             };
-            permissionLevel: "full" | "read-only" | "workspace-write";
             schedule: string;
+            permissionLevel: "full" | "read-only" | "workspace-write";
             description?: string | undefined;
             timezone?: string | undefined;
         }[];