@coda-console/plugin-check 0.4.9 → 0.5.0

package/check/panel.mjs

@@ -1,114 +1,63 @@
-// A panel at the handshake level: its command run once as Coda reads a panel (backend/src/application/panels.mjs `env`,
-// adapters/plugin-command.mjs), what it prints held to Coda's panel output (domain/panels.mjs `panelItems`, copied here).
+// A panel at the handshake level: read once by Coda's own resources module (check/coda/resources/plugins/resources/panels/,
+// Panels), given what Coda's plugin host gives it (components/plugins/plugin-host.mjs): the installed plugins as it watches
+// them, here the one checked, and each one's environment, as Coda gives every process of the plugin's.
 // Its actions are not run: a button may change things (switch an account, spend a reset), and only a person presses it.
-import { spawn } from 'node:child_process';
-import { tmpdir } from 'node:os';
 import { dirname } from 'node:path';
-import { ARGS_LIMIT, ITEM_LIMITS, ITEM_TYPES, OUTPUT_LIMIT, PANEL_READ_LIMIT, THREAD_ENV, cleared, groupsState, pluginEnv } from './coda.mjs';
-import { group, temporary } from './leftovers.mjs';
+import { cleared } from './coda/components/plugins/plugin-rules.mjs';
+import { ended, runCommand } from './coda/resources/plugins/resources/panels/command.mjs';
+import { Panels } from './coda/resources/plugins/resources/panels/panels.mjs';
+import { OUTPUT_LIMIT, panelItems } from './coda/resources/plugins/resources/panels/rules.mjs';
+import { closing, temporary } from './leftovers.mjs';
 
-class Invalid extends Error {}
-const check = (condition, message) => { if (!condition) throw new Invalid(message); };
-const object = (value, where) => check(value && typeof value === 'object' && !Array.isArray(value), `${where} 须为对象`);
-const keys = (value, allowed, where) => {
-  const extra = Object.keys(value).filter(k => !allowed.includes(k));
-  check(!extra.length, `${where} 里有 Coda 不支持的键：${extra.join('、')}`);
-};
-const text = (value, max, where, { need = true, line = true } = {}) => {
-  if (value === undefined && !need) return;
-  check(typeof value === 'string' && value.trim() && [...value].length <= max && !value.includes('\0') && (!line || !/[\r\n]/.test(value)),
-    `${where} 须为不超过 ${max} 字的${line ? '一行' : ''}文本`);
-};
+// The session a process would belong to: the host's belong to none.
+const THREAD_ENV = 'CODA_THREAD_ID';
 
-function item(raw, where, actions, inCard) {
-  const L = ITEM_LIMITS;
-  object(raw, where);
-  check(ITEM_TYPES.includes(raw.type), `${where} 的 type 只能是 ${ITEM_TYPES.join('、')}`);
-  check(!(inCard && raw.type === 'card'), `${where}：卡片里不能再放卡片`);
-  switch (raw.type) {
-    case 'card':
-      keys(raw, ['type', 'title', 'subtitle', 'identity', 'items'], where);
-      check(Array.isArray(raw.items) && raw.items.length <= L.cardItems, `${where} 的 items 须为不超过 ${L.cardItems} 项的数组`);
-      text(raw.title, L.label, `${where} 的 title`); text(raw.subtitle, L.label, `${where} 的 subtitle`, { need: false });
-      text(raw.identity, L.identity, `${where} 的 identity`, { need: false });
-      return [raw.type, ...raw.items.flatMap((r, i) => item(r, `${where}.items[${i}]`, actions, true))];
-    case 'meter':
-      keys(raw, ['type', 'label', 'value', 'fraction', 'note', 'time', 'timeLabel'], where);
-      check(raw.fraction === undefined || raw.fraction === null || (typeof raw.fraction === 'number' && raw.fraction >= 0 && raw.fraction <= 1),
-        `${where} 的 fraction 须在 0–1 之间（还剩多少），不知道时不写`);
-      check(raw.time === undefined || (typeof raw.time === 'string' && Number.isFinite(Date.parse(raw.time))), `${where} 的 time 须为 ISO 8601 时间`);
-      text(raw.label, L.label, `${where} 的 label`);
-      for (const key of ['value', 'note', 'timeLabel']) text(raw[key], L.label, `${where} 的 ${key}`, { need: false });
-      return [raw.type];
-    case 'stat':
-      keys(raw, ['type', 'label', 'value'], where);
-      text(raw.label, L.label, `${where} 的 label`); text(raw.value, L.label, `${where} 的 value`);
-      return [raw.type];
-    case 'markdown':
-      keys(raw, ['type', 'text'], where);
-      text(raw.text, L.markdown, `${where} 的 text`, { line: false });
-      return [raw.type];
-    case 'error':
-      keys(raw, ['type', 'text'], where);
-      text(raw.text, L.error, `${where} 的 text`, { line: false });
-      return [raw.type];
-    case 'button':
-      keys(raw, ['type', 'label', 'action', 'args', 'disabled', 'confirm'], where);
-      check(typeof raw.action === 'string' && Object.hasOwn(actions, raw.action), `${where} 的 action 须是面板声明的动作：${raw.action}`);
-      check(raw.args === undefined || (raw.args && typeof raw.args === 'object' && !Array.isArray(raw.args) && JSON.stringify(raw.args).length <= ARGS_LIMIT),
-        `${where} 的 args 须为不超过 ${ARGS_LIMIT} 字节的对象`);
-      check(raw.disabled === undefined || typeof raw.disabled === 'boolean', `${where} 的 disabled 须为开或关`);
-      text(raw.label, L.label, `${where} 的 label`); text(raw.confirm, L.confirm, `${where} 的 confirm`, { need: false, line: false });
-      return [raw.type];
-  }
-}
-// The item types a reading holds, cards' items included; throws Invalid with where it went wrong.
-export function panelItems(output, panel) {
-  check(Buffer.byteLength(output) <= OUTPUT_LIMIT, `输出超过 ${OUTPUT_LIMIT / 1024} KiB`);
-  let value;
-  try { value = JSON.parse(output); } catch { check(false, '输出不是 JSON'); }
-  object(value, '输出');
-  keys(value, ['items'], '输出');
-  check(Array.isArray(value.items) && value.items.length <= ITEM_LIMITS.items, `输出的 items 须为不超过 ${ITEM_LIMITS.items} 项的数组`);
-  return value.items.flatMap((r, i) => item(r, `items[${i}]`, panel.actions, false));
-}
+// The item types a reading holds, cards' items included.
+const typesOf = items => items.flatMap(item => item.type === 'card' ? ['card', ...item.items.map(i => i.type)] : [item.type]);
+// What a panel's command printed as Coda takes it (panelItems), by type; throws PanelError with where it went wrong. For the
+// tests of a plugin's panel.
+export const panelTypes = (output, panel, views = []) => typesOf(panelItems(output, panel, views));
 
-// `sh -c` in its own process group from a temporary directory, stopped past the deadline or past 64 KiB of output. The
-// group goes with the checker if that ends first (a Ctrl-C does not reach it).
-function run(command, env, limit) {
-  return new Promise(resolve => {
-    const child = spawn('/bin/sh', ['-c', command], { cwd: tmpdir(), env, detached: true, stdio: ['ignore', 'pipe', 'pipe'] });
-    const ended = group(child.pid), out = [], err = [];
-    let size = 0, overflow = false, timedOut = false;
-    const kill = () => { try { process.kill(-child.pid, 'SIGKILL'); } catch {} ended(); };
-    const timer = setTimeout(() => { timedOut = true; kill(); }, limit);
-    child.stdout.on('data', chunk => { size += chunk.length; if (size > OUTPUT_LIMIT) { overflow = true; kill(); } else out.push(chunk); });
-    child.stderr.on('data', chunk => err.push(chunk));
-    child.on('error', error => { clearTimeout(timer); resolve({ code: null, error: error.message, stdout: '', stderr: '' }); });
-    child.on('close', code => { clearTimeout(timer); kill();
-      resolve({ code, stdout: Buffer.concat(out).toString('utf8'), stderr: Buffer.concat(err).toString('utf8'), overflow, timedOut }); });
-  });
-}
-const lastLine = text => text.replace(/\x1b\[[0-9;]*[A-Za-z]/g, '').split('\n').map(l => l.trim()).filter(Boolean).at(-1)?.slice(0, 200) ?? '';
-
-export async function checkPanel({ panel, pluginDir, settings, dependencies = {}, say, limit = PANEL_READ_LIMIT }) {
+// `checked`: the plugin as the manifest level read it (manifest.mjs checkManifest). `limit`: how long a reading may take, as
+// Panels has it unless given.
+export async function checkPanel({ panel, checked, say, limit }) {
+  const { plugin } = checked;
   // The plugin's state directory, which Coda keeps for it; here a temporary one, gone however the checker ends.
   const state = temporary('coda-plugin-check-state-');
-  try {
-    const env = { ...cleared(process.env), ...pluginEnv({ pluginDir, stateDir: state.dir, settings, dependencies }), CODA_GROUPS_STATE: groupsState(),
-      PATH: [dirname(process.execPath), process.env.PATH].filter(Boolean).join(':') };
+  // The host's environment of a plugin (env): its processes', the backend's `node` first on the PATH, and the concurrency
+  // groups in use as it is asked for (none here).
+  const environment = async () => {
+    const env = { ...cleared(process.env), ...checked.env(state.dir) };
     delete env[THREAD_ENV];
-    const started = Date.now(), result = await run(panel.command, env, limit);
-    if (result.timedOut) return say.fail('panel.read', `读取 ${limit / 1000} 秒没结束：Coda 停下这次读取`);
-    if (result.overflow) return say.fail('panel.read', `标准输出超过 ${OUTPUT_LIMIT / 1024} KiB：Coda 停下这次读取`);
-    if (result.code !== 0) return say.fail('panel.read', `读取命令${result.error ? `起不来：${result.error}` : `退出码 ${result.code}`}${lastLine(result.stderr || result.stdout) ? `：${lastLine(result.stderr || result.stdout)}` : ''}`);
-    let types;
-    try { types = panelItems(result.stdout, panel); } catch (e) { if (!(e instanceof Invalid)) throw e; return say.fail('panel.output', `输出不合面板格式：${e.message}`); }
+    env.PATH = [dirname(process.execPath), env.PATH].filter(Boolean).join(':');
+    env.CODA_GROUPS_STATE = JSON.stringify({ now: Date.now(), groups: [] });
+    return env;
+  };
+  // The installed plugins as a module watches them (components/plugins/plugins.mjs offered).
+  const offered = { id: plugin.id, name: plugin.displayName, version: plugin.version, source: plugin.source, views: plugin.views.map(v => v.id), contributes: plugin.offers ?? {} };
+  const coda = { plugin: { state: null }, environment,
+    watch: async (name, told) => { told({ type: 'ADDED', id: offered.id, object: offered }); return { dispose() {} }; } };
+  // The command's own result, beside what the page shows of it: whether it ended well and what it printed was not a panel's.
+  let result = null;
+  const panels = new Panels(coda, { run: async (command, options) => (result = await runCommand(command, options)), ...(limit ? { readTimeoutMs: limit } : {}) });
+  const done = closing(() => panels.close());
+  try {
+    await panels.start();
+    const started = Date.now(), reading = await panels.read(`${plugin.id}/${panel.id}`), took = ((Date.now() - started) / 1000).toFixed(1);
+    if (reading.error && result && ended(result)) return say.fail('panel.output', `输出不合面板格式：资源页显示「${reading.error}」`);
+    if (reading.error) {
+      const why = !result ? '没有运行' : result.timedOut ? `${panels.readTimeoutMs / 1000} 秒没读完，Coda 停下这次读取` : result.overflow ? `标准输出超过 ${OUTPUT_LIMIT / 1024} KiB，Coda 停下这次读取`
+        : result.error ? '命令起不来' : `退出码 ${result.code}`;
+      return say.fail('panel.read', `读取没成功（${why}）：资源页显示「${reading.error}」`);
+    }
+    const types = typesOf(reading.items);
     const counts = Object.entries(Object.groupBy(types, t => t)).map(([t, list]) => `${t} ×${list.length}`).join('，');
-    if (!types.length) say.info('panel.read', `读出空的 items（${((Date.now() - started) / 1000).toFixed(1)} 秒）：资源页不显示它${panel.signIn ? '，它出现在「添加资源」里' : ''}`);
-    else say.pass('panel.read', `读取 ${((Date.now() - started) / 1000).toFixed(1)} 秒，输出合面板格式：${counts}`);
+    if (!types.length) say.info('panel.read', `读出空的 items（${took} 秒）：资源页不显示它${panel.signIn ? '，它出现在「添加资源」里' : ''}`);
+    else say.pass('panel.read', `读取 ${took} 秒，输出合面板格式：${counts}`);
     if (Object.keys(panel.actions).length) say.skip('panel.actions', `动作 ${Object.keys(panel.actions).join('、')} 不运行：按钮可能改动东西，只由人点`);
   } finally {
+    panels.close();
+    done();
     state.remove();
   }
 }

package/check/waits.mjs

@@ -1,11 +1,12 @@
-// `_coda/wait` as Coda takes it: validWait first (check/coda.mjs, copied), then the rules of docs/agent-protocol.md
-// 「Agent 活动」. Where Coda drops a report without a word, the checker fails it: an agent that relies on it is not heard.
-import { validWait, WAIT_STATES } from './coda.mjs';
+// `_coda/wait` as Coda takes it: Coda's validWait first (check/coda/domain/agent-protocol.mjs), then the rules of
+// docs/agent-protocol.md「Agent 活动」. Where Coda drops a report without a word, the checker fails it: an agent that relies
+// on it is not heard.
+import { validWait, WAIT_STATES } from './coda/domain/agent-protocol.mjs';
 
 export const TERMINAL = new Set(['done', 'failed', 'cancelled']);
 const LIMITS = { sessionId: 200, waitId: 200, kind: 50, title: 500, detail: 4000, childSessionId: 200, model: 200, outputFile: 4096, toolCallId: 200 };
 
-// The first part of validWait a report fails, in words.
+// The first part of validWait a report fails, in words (validWait decides; this only says why).
 export function whyInvalid(p) {
   if (!p || typeof p !== 'object' || Array.isArray(p)) return 'params 须为对象';
   for (const key of ['sessionId', 'waitId']) if (typeof p[key] !== 'string' || !p[key]) return `缺 ${key}`;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@coda-console/plugin-check",
-  "version": "0.4.9",
+  "version": "0.5.0",
   "description": "Coda 插件的契约检查：扮演 Coda 读清单、启动 Agent 讲 ACP 与 _coda/wait、读面板。",
   "license": "MIT",
   "repository": {
@@ -22,7 +22,9 @@
     "test": "node --test 'test/**/*.test.mjs'"
   },
   "dependencies": {
-    "@agentclientprotocol/sdk": "1.4.0"
+    "@0dep/piso": "5.2.0",
+    "@agentclientprotocol/sdk": "1.4.0",
+    "yaml": "2.9.1"
   },
   "publishConfig": {
     "access": "public"

package/check/coda.mjs

@@ -1,165 +0,0 @@
-// What the checker copies from Coda, in one place. Coda is the authority: its「读取来源」(PluginSources.readSource) reads a
-// plugin with the same rules, and wins where the two differ. Each rule names where it came from in the Coda repository at
-// CODA_COMMIT; a Coda PR that changes one of them changes this file too (docs/agent-protocol.md here is synced from the same
-// commit, and test/protocol-copy.test.mjs keeps the two together).
-import { PROTOCOL_VERSION } from '@agentclientprotocol/sdk';
-
-// The Coda commit these rules were copied from (an empty current mode is none chosen).
-export const CODA_COMMIT = 'a52459b1f950957923a6e187075ba981263279f4';
-// The ACP version Coda speaks: the SDK's (backend/package.json pins @agentclientprotocol/sdk 1.4.0, as package.json here).
-export const ACP_PROTOCOL_VERSION = PROTOCOL_VERSION;
-
-// ---- ACP (backend/src/adapters/acp.mjs) ----
-// `initialize` as Coda sends it (AcpSession.initialize): no clientInfo, these capabilities.
-export const clientCapabilities = () => ({
-  elicitation: { form: {}, url: {} },
-  session: { compaction: {}, configOptions: { boolean: {} } },
-  _meta: { coda: { waits: {} } },
-});
-// Session instructions (AcpSession.takesInstructions, initialize): ACP's unstable `systemPrompt`, sent only to an agent that
-// declares it, the same on `session/new` and `session/load`, in `append` mode, one text block (docs/agent-protocol.md「会话指令」).
-export const takesInstructions = init => init?.agentCapabilities?.sessionCapabilities?.systemPrompt != null;
-export const systemPrompt = text => ({ mode: 'append', content: [{ type: 'text', text }] });
-// Steering (AcpSession.supportsSteering, steer; docs/agent-protocol.md「插话」): declared beside the capabilities; sent only
-// while a turn of Coda's own is under way. `injected` joined it; `promptRequired` was not taken, the turn having ended;
-// anything else Coda records as unknown.
-export const STEERING = '_session/steering';
-export const supportsSteering = init => init?._meta?.steering?.supported === true;
-export const steeringParams = (sessionId, text) => ({ sessionId, prompt: [{ type: 'text', text }], _meta: { steering: { idleBehavior: 'promptRequired' } } });
-export const STEERING_OUTCOMES = ['injected', 'promptRequired'];
-// Failure categories and presentation (backend/src/domain/agent-failures.mjs).
-export function agentFailure(error) {
-  const failure = error?.data?._meta?.coda?.failure;
-  if (!record(failure)) return null;
-  return failure.kind === 'quota_exhausted' ||
-    (failure.kind === 'service_unavailable' && ['accepted', 'not_accepted'].includes(failure.input)) ? failure : null;
-}
-export function agentErrorMessage(error) {
-  const message = typeof error?.message === 'string' && error.message ? error.message : 'Agent 返回错误';
-  const detail = typeof error?.data?.message === 'string' ? error.data.message.trim() : '';
-  const text = detail && !message.includes(detail) ? `${message}\n\n${detail}` : message;
-  return agentFailure(error)?.kind === 'quota_exhausted' && !text.startsWith('额度不足') ? `额度不足\n\n${text}` : text;
-}
-// Service retry policy (backend/src/application/prompt-recovery.mjs).
-export function serviceFailure(error) {
-  const failure = agentFailure(error);
-  return failure?.kind === 'service_unavailable' ? failure : null;
-}
-// The former capacity/model-unavailable policy, shared by every agent that reports a service failure.
-export const RETRY_DELAYS = [15_000, 30_000, 60_000];
-export const continuationPrompt = '继续完成当前任务，沿用已有上下文和已完成的工作，从尚未完成的部分接着执行。';
-
-// The agent refuses until it is signed in: ACP's auth_required (signedOut).
-export const SIGNED_OUT = -32000;
-// What Coda answers an agent request it has no handler for (the SDK's): Coda handles only approvals and forms.
-export const METHOD_NOT_FOUND = -32601;
-// What an agent may say of a wait of its own (validWait, verbatim); anything else Coda drops unread.
-const record = value => value && typeof value === 'object' && !Array.isArray(value);
-export const WAIT_STATES = new Set(['waiting', 'handling', 'done', 'failed', 'cancelled']);
-const fits = (value, limit) => value === undefined || (typeof value === 'string' && value.length <= limit);
-export const validWait = p => record(p) && typeof p.sessionId === 'string' && p.sessionId.length > 0 && p.sessionId.length <= 200
-  && typeof p.waitId === 'string' && p.waitId.length > 0 && p.waitId.length <= 200 && WAIT_STATES.has(p.state)
-  && fits(p.kind, 50) && fits(p.title, 500) && fits(p.detail, 4000) && fits(p.childSessionId, 200) && fits(p.model, 200) && fits(p.outputFile, 4096)
-  && fits(p.toolCallId, 200)
-  && [p.stoppable, p.recurring].every(flag => flag === undefined || typeof flag === 'boolean')
-  && (p.at === undefined || (typeof p.at === 'string' && Number.isFinite(Date.parse(p.at))));
-// The model a session runs with, as Coda reads it (catalog().current.model): every turn Coda configures first, and refuses
-// a session whose agent names none (configure: 「适配器未报告实际模型」).
-export function currentModel(session) {
-  const model = session?.configOptions?.find?.(x => x?.category === 'model');
-  return model?.currentValue ?? session?.models?.currentModelId;
-}
-// docs/agent-protocol.md「Agent 活动」规则 3: a turn the user stops ends within this, or Coda closes the agent's process group.
-export const CANCEL_LIMIT = 30_000;
-// adapters/session-host.mjs `close`: Coda stops an agent with SIGTERM to its process group, and SIGKILL this long after.
-export const TERM_GRACE = 800;
-// adapters/acp.mjs `open` and application/option-cache.mjs: opening a session (initialize, session/new or session/load) may take this.
-export const OPEN_LIMIT = 60_000;
-
-// ---- What every process Coda runs for a plugin is given (backend/src/components/plugins/plugin-rules.mjs pluginEnv, cleared) ----
-// Its agents', its panels' and the commands it brings alike: Coda's own Node, the plugin's directory, its state, its settings,
-// what is plugged into its points (none here: the checker installs nothing beside it), where the plugins it depends on are
-// (`dependencies`, by ID), and CODA_ARBITER only for an instance's own backend, which the checker is not. What a process
-// inherits is cleared of them first, those it is given only sometimes too (its secrets' files, the model services, the PATH
-// without Coda's directories): it never takes another plugin's for its own.
-export const PLUGIN_VARIABLES = ['CODA_NODE', 'CODA_ARBITER', 'CODA_PLUGIN_PATH', 'CODA_PLUGIN_STATE', 'CODA_PLUGIN_SETTINGS', 'CODA_PLUGIN_SECRETS',
-  'CODA_PLUGIN_EXTENSIONS', 'CODA_PLUGIN_DEPENDENCIES', 'CODA_MODEL_PROVIDERS', 'CODA_USER_PATH'];
-export const pluginEnv = ({ pluginDir, stateDir, settings = {}, dependencies = {} }) => ({ CODA_NODE: process.execPath, CODA_PLUGIN_PATH: pluginDir,
-  CODA_PLUGIN_STATE: stateDir, CODA_PLUGIN_SETTINGS: JSON.stringify(settings),
-  ...(Object.keys(dependencies).length ? { CODA_PLUGIN_DEPENDENCIES: JSON.stringify(dependencies) } : {}) });
-export const cleared = base => Object.fromEntries(Object.entries(base).filter(([name]) => !PLUGIN_VARIABLES.includes(name)));
-// How Coda starts an agent (domain/agents.mjs launch, adapters/session-host.mjs): `sh -c` in its own process group, standard
-// error unread, the session's environment plus its plugin's.
-// A panel's command (application/panels.mjs env): no session's ID, the backend's `node` first on the PATH, and the
-// concurrency groups in use as it starts (`{ now, groups }`; none here).
-export const THREAD_ENV = 'CODA_THREAD_ID';
-export const groupsState = () => JSON.stringify({ now: Date.now(), groups: [] });
-
-// ---- Manifests (backend/src/domain/plugins.mjs, agent-plugins.mjs, panels.mjs, plugin-extensions.mjs) ----
-export const PLUGIN_ID = /^[a-z][a-z0-9-]{0,39}$/;
-export const AGENT_ID = /^[a-z][a-z0-9-]{0,39}$/;
-export const PANEL_ID = /^[a-z][a-z0-9-]{0,63}$/;
-export const POINT = /^[a-z][a-z0-9-]{0,39}$/;
-export const SETTING_KEY = /^[a-z][a-z0-9-]*(\.[a-z][A-Za-z0-9]*)+$/;
-// The string formats a setting may have, beside `coda-agent` and `coda-agent-match` (backend/src/components/plugins/plugin-rules.mjs
-// STRING_FORMATS): a duration, a repository, a directory of the machine, a model service another plugin provides
-// (`<插件>/<服务>`, MODEL_PROVIDER), and the address of one.
-export const STRING_FORMATS = ['duration', 'coda-repo', 'coda-directory', 'coda-model-provider', 'coda-model-url'];
-export const MODEL_PROVIDER = /^[a-z][a-z0-9-]{0,39}\/[a-z][a-z0-9-]{0,39}$/;
-export const CAPABILITY = /^[a-z][a-z0-9-]{0,63}$/;
-// What a plugin may contribute to Coda itself (backend/src/components/plugins/plugin-rules.mjs CONTRIBUTES).
-export const CONTRIBUTES = ['configuration', 'capabilities', 'instructions', 'agents', 'extensionPoints', 'extensions', 'groups', 'events', 'commands', 'gitCredentials',
-  'repositories', 'services', 'setup', 'skills', 'environment', 'path', 'endpoints', 'mcpServers', 'views', 'modelProviders', 'executors'];
-// The keys of `contributes` points of the plugins Coda ships take (Coda's docs/plugins.md「写在 contributes 里的扩展点」): the
-// resources plugin's `panels`. Anything else is said, not refused: Coda may have added it since this copy.
-export const POINT_KEYS = ['panels'];
-// What only a plugin Coda ships may contribute, one installed from a repository or npm being refused it
-// (backend/src/components/plugins/plugin-source-rules.mjs catalogProblem): the clients do not show these in the confirmation yet.
-export const BUILTIN_ONLY = { gitCredentials: '只有 Coda 自带的插件能提供 Git 凭据', repositories: '只有 Coda 自带的插件能提供仓库列表' };
-// The bundled services a plugin turns on (`contributes.services`, docs/supervisor.md「独立服务进程」): their IDs.
-export const SERVICE = /^[a-z][a-z0-9-]{0,63}$/;
-// A command a plugin puts on every session's and step's PATH (`contributes.commands`): its name, as a shell finds it, which
-// may not be one of Coda's own; what runs for it, one line.
-export const COMMAND = /^[a-z][a-z0-9-]{0,39}$/;
-export const CODA_COMMANDS = ['coda-run', 'coda-event'];
-// An event a plugin publishes (`contributes.events`, Coda's docs/plugins.md「事件」): `<域>.<名>`, in no domain of Coda's own;
-// whether it starts the workflows subscribed to it (`starts`), and whether it ends its subject (`ends`: a run re-run after it
-// is told it again).
-export const EVENT = /^(?=.{3,100}$)[a-z][a-z0-9_]*(\.[a-z][a-z0-9_]*)+$/;
-export const CODA_EVENT_DOMAINS = ['workflow', 'session', 'user'];
-export const EVENT_LIMIT = 50;
-export const COMMAND_LIMIT = 4000;
-// A plugin's setup action (`contributes.setup`): `{ command }`, one line as a panel's command is; it may install software, so
-// the checker reads it and does not run it.
-export const SETUP_KEYS = ['command'];
-export const INSTRUCTIONS_LIMIT = 200;
-export const ICON_LIMIT = 32 * 1024;
-export const AGENT_LIMITS = { displayName: 40, modeTitle: 10, modeUnset: 20, modeNote: 100, modeId: 200, setupHint: 200, command: 4000, configFiles: 16, path: 1000 };
-export const PANEL_LIMITS = { title: 40, command: 4000, confirm: 200, note: 200 };
-
-// ---- From a repository (backend/src/domain/plugin-sources.mjs) ----
-export const SIZE_LIMIT = 10 * 1024 * 1024;
-export const SEGMENT = /^[A-Za-z0-9._-]+$/;
-export const DEPTH = 2;
-// A plugin's npm dependencies come with its package-lock.json, naming the same (manifestProblem): Coda installs them with
-// `npm ci` in the plugin's version directory.
-export const NPM = ['dependencies', 'optionalDependencies'];
-export const NPM_LOCK = 'package-lock.json';
-// Those kept in `plugins/<id>` here that Coda ships as npm dependencies, `@coda-console/<id>` (docs/plugins.md「内置插件的来源」):
-// a version of the same package may be installed over Coda's. Other sources may use the same ID once the built-in plugin is
-// uninstalled; only the target backend can check its installed state (builtinProblem).
-export const BUILTIN_HERE = ['claude', 'codex', 'codex-accounts', 'grok', 'kimi', 'opencode', 'review'];
-export const BUILTIN_SCOPE = '@coda-console/';
-// An agent, a concurrency group and a command are one plugin's (catalogProblem, claims). Those the built-in plugins declare, by
-// plugin; and `claude`, the agent ID sessions from before #1069 still store (docs/plugins.md「Agent」).
-export const BUILTIN_AGENTS = { 'claude-sdk': 'claude', codex: 'codex', grok: 'grok', kimi: 'kimi', opencode: 'opencode', claude: 'claude' };
-export const BUILTIN_GROUPS = { host: 'host' };
-export const BUILTIN_COMMANDS = { 'host-sim': 'host' };
-
-// ---- Panels (backend/src/domain/panels.mjs, application/panels.mjs) ----
-export const ITEM_TYPES = ['card', 'meter', 'stat', 'markdown', 'button', 'error'];
-export const OUTPUT_LIMIT = 64 * 1024;
-export const ARGS_LIMIT = 4 * 1024;
-export const ITEM_LIMITS = { items: 50, cardItems: 20, label: 80, identity: 200, markdown: 4000, error: 500, confirm: 200 };
-// A reading is stopped past this (docs/plugins.md「面板」).
-export const PANEL_READ_LIMIT = 30_000;