@creezio/electron-shell 0.22.0

package/dist-cjs/host/plugins/crm-key.js

@@ -0,0 +1,135 @@
+"use strict";
+/**
+ * Clé API CRM dédiée par plugin — port TF gold plugin-crm-key.ts (N1).
+ * Injection : apiKeyPrefix, crmKeyFileName, dbPath, nodeBinary, nodeScript.
+ */
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PLUGIN_CRM_KEY_FILE = void 0;
+exports.pluginCrmKeyPath = pluginCrmKeyPath;
+exports.readPluginCrmApiKey = readPluginCrmApiKey;
+exports.ensurePluginCrmApiKey = ensurePluginCrmApiKey;
+const node_child_process_1 = require("node:child_process");
+const node_crypto_1 = __importDefault(require("node:crypto"));
+const node_fs_1 = __importDefault(require("node:fs"));
+const node_path_1 = __importDefault(require("node:path"));
+const brand_bindings_js_1 = require("./brand-bindings.js");
+const node_runtime_js_1 = require("../node-runtime.js");
+function scopesFromPerms(permissions) {
+    const perms = new Set(permissions.map(String));
+    if (perms.has("crm:write"))
+        return "crm:read,crm:write";
+    if (perms.has("crm:read"))
+        return "crm:read";
+    return null;
+}
+function pluginCrmKeyPath(pluginDir) {
+    return node_path_1.default.join(pluginDir, (0, brand_bindings_js_1.pluginCrmKeyFileName)((0, brand_bindings_js_1.getPluginHostBindings)()));
+}
+function readPluginCrmApiKey(pluginDir) {
+    const bindings = (0, brand_bindings_js_1.getPluginHostBindings)();
+    const prefix = bindings.apiKeyPrefix;
+    try {
+        const raw = JSON.parse(node_fs_1.default.readFileSync(pluginCrmKeyPath(pluginDir), "utf8"));
+        if (raw &&
+            typeof raw.apiKey === "string" &&
+            raw.apiKey.startsWith(prefix) &&
+            typeof raw.scopes === "string") {
+            return raw;
+        }
+    }
+    catch {
+        /* absent */
+    }
+    return null;
+}
+function writePluginCrmApiKey(pluginDir, data) {
+    node_fs_1.default.writeFileSync(pluginCrmKeyPath(pluginDir), `${JSON.stringify(data, null, 2)}\n`, { mode: 0o600 });
+}
+function generateKey(scopes) {
+    const bindings = (0, brand_bindings_js_1.getPluginHostBindings)();
+    const prefix = bindings.apiKeyPrefix;
+    const secret = node_crypto_1.default.randomBytes(24).toString("base64url");
+    const apiKey = `${prefix}${secret}`;
+    return {
+        apiKey,
+        prefix: apiKey.slice(0, prefix.length + 6),
+        scopes,
+        createdAt: new Date().toISOString(),
+    };
+}
+function upsertDb(apiKey, name, scopes) {
+    const bindings = (0, brand_bindings_js_1.getPluginHostBindings)();
+    const scriptName = bindings.crmKeyDbScriptName || "ensure-hermes-crm-key-db.js";
+    const script = bindings.nodeScript(scriptName);
+    if (!node_fs_1.default.existsSync(script)) {
+        return Promise.resolve({
+            ok: false,
+            detail: `script DB absent: ${script}`,
+        });
+    }
+    return new Promise((resolve) => {
+        const bin = bindings.nodeBinary();
+        const env = {
+            ...(0, node_runtime_js_1.envForNodeScriptSpawn)(bin),
+            DB_PATH: bindings.dbPath(),
+        };
+        delete env.ELECTRON_BINARY;
+        const nm = bindings.nodeModulesPathForScripts?.();
+        if (nm)
+            env.NODE_PATH = nm;
+        const child = (0, node_child_process_1.spawn)(bin, [script, bindings.dbPath(), apiKey, name, scopes], { env, stdio: ["ignore", "pipe", "pipe"], windowsHide: true });
+        let out = "";
+        let err = "";
+        child.stdout?.on("data", (d) => {
+            out += d.toString();
+        });
+        child.stderr?.on("data", (d) => {
+            err += d.toString();
+        });
+        child.on("error", (e) => resolve({ ok: false, detail: e.message }));
+        child.on("exit", (code) => {
+            if (code === 0) {
+                resolve({ ok: true, detail: out.trim() || "ok" });
+            }
+            else {
+                resolve({ ok: false, detail: err.trim() || `exit ${code}` });
+            }
+        });
+    });
+}
+/**
+ * Garantit une clé plugin avec scopes dérivés des permissions.
+ * Retourne null si le plugin n’a pas `crm:read` / `crm:write`.
+ */
+async function ensurePluginCrmApiKey(opts) {
+    const bindings = (0, brand_bindings_js_1.getPluginHostBindings)();
+    const log = opts.log || (() => { });
+    const scopes = scopesFromPerms(opts.permissions);
+    if (!scopes) {
+        log(`plugin-key ${opts.pluginId}: pas de permission crm:*`);
+        return null;
+    }
+    let stored = readPluginCrmApiKey(opts.pluginDir);
+    if (!stored || stored.scopes !== scopes) {
+        stored = generateKey(scopes);
+        writePluginCrmApiKey(opts.pluginDir, stored);
+        log(`plugin-key ${opts.pluginId}: générée (${scopes})`);
+    }
+    const name = bindings.crmKeyDisplayName
+        ? bindings.crmKeyDisplayName(opts.pluginId)
+        : `${bindings.productName} Plugin ${opts.pluginId}`;
+    const db = await upsertDb(stored.apiKey, name, scopes);
+    if (!db.ok) {
+        log(`plugin-key ${opts.pluginId}: DB ${db.detail}`);
+    }
+    else {
+        log(`plugin-key ${opts.pluginId}: DB OK (${db.detail})`);
+    }
+    return stored;
+}
+/** @deprecated nom fichier TF — préférer pluginCrmKeyFileName(bindings). */
+exports.PLUGIN_CRM_KEY_FILE = ".tempoflow-plugin-api-key.json";
+//# sourceMappingURL=crm-key.js.map

package/dist-cjs/host/plugins/crm-key.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"crm-key.js","sourceRoot":"","sources":["../../../src/host/plugins/crm-key.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;;;;AA0BH,4CAEC;AAED,kDAqBC;AA8ED,sDA+BC;AA9JD,2DAA2C;AAC3C,8DAAiC;AACjC,sDAAyB;AACzB,0DAA6B;AAC7B,2DAG6B;AAC7B,wDAA2D;AAS3D,SAAS,eAAe,CAAC,WAAqB;IAC5C,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;IAC/C,IAAI,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC;QAAE,OAAO,oBAAoB,CAAC;IACxD,IAAI,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC;QAAE,OAAO,UAAU,CAAC;IAC7C,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAgB,gBAAgB,CAAC,SAAiB;IAChD,OAAO,mBAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAA,wCAAoB,EAAC,IAAA,yCAAqB,GAAE,CAAC,CAAC,CAAC;AAC7E,CAAC;AAED,SAAgB,mBAAmB,CACjC,SAAiB;IAEjB,MAAM,QAAQ,GAAG,IAAA,yCAAqB,GAAE,CAAC;IACzC,MAAM,MAAM,GAAG,QAAQ,CAAC,YAAY,CAAC;IACrC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CACpB,iBAAE,CAAC,YAAY,CAAC,gBAAgB,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,CAC/B,CAAC;QACxB,IACE,GAAG;YACH,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ;YAC9B,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC;YAC7B,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,EAC9B,CAAC;YACD,OAAO,GAAG,CAAC;QACb,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,YAAY;IACd,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,oBAAoB,CAC3B,SAAiB,EACjB,IAAwB;IAExB,iBAAE,CAAC,aAAa,CACd,gBAAgB,CAAC,SAAS,CAAC,EAC3B,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EACpC,EAAE,IAAI,EAAE,KAAK,EAAE,CAChB,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,MAAc;IACjC,MAAM,QAAQ,GAAG,IAAA,yCAAqB,GAAE,CAAC;IACzC,MAAM,MAAM,GAAG,QAAQ,CAAC,YAAY,CAAC;IACrC,MAAM,MAAM,GAAG,qBAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC5D,MAAM,MAAM,GAAG,GAAG,MAAM,GAAG,MAAM,EAAE,CAAC;IACpC,OAAO;QACL,MAAM;QACN,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;QAC1C,MAAM;QACN,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CACf,MAAc,EACd,IAAY,EACZ,MAAc;IAEd,MAAM,QAAQ,GAAG,IAAA,yCAAqB,GAAE,CAAC;IACzC,MAAM,UAAU,GACd,QAAQ,CAAC,kBAAkB,IAAI,6BAA6B,CAAC;IAC/D,MAAM,MAAM,GAAG,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;IAC/C,IAAI,CAAC,iBAAE,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3B,OAAO,OAAO,CAAC,OAAO,CAAC;YACrB,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,qBAAqB,MAAM,EAAE;SACtC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,GAAG,GAAG,QAAQ,CAAC,UAAU,EAAE,CAAC;QAClC,MAAM,GAAG,GAAsB;YAC7B,GAAG,IAAA,uCAAqB,EAAC,GAAG,CAAC;YAC7B,OAAO,EAAE,QAAQ,CAAC,MAAM,EAAE;SAC3B,CAAC;QACF,OAAO,GAAG,CAAC,eAAe,CAAC;QAC3B,MAAM,EAAE,GAAG,QAAQ,CAAC,yBAAyB,EAAE,EAAE,CAAC;QAClD,IAAI,EAAE;YAAE,GAAG,CAAC,SAAS,GAAG,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,IAAA,0BAAK,EACjB,GAAG,EACH,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,EACjD,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAC9D,CAAC;QACF,IAAI,GAAG,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,GAAG,EAAE,CAAC;QACb,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE;YACrC,GAAG,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;QACtB,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE;YACrC,GAAG,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;QACtB,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACpE,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;YACxB,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;gBACf,OAAO,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;YACpD,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,QAAQ,IAAI,EAAE,EAAE,CAAC,CAAC;YAC/D,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACI,KAAK,UAAU,qBAAqB,CAAC,IAK3C;IACC,MAAM,QAAQ,GAAG,IAAA,yCAAqB,GAAE,CAAC;IACzC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACnC,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACjD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,GAAG,CAAC,cAAc,IAAI,CAAC,QAAQ,2BAA2B,CAAC,CAAC;QAC5D,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,MAAM,GAAG,mBAAmB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACjD,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QACxC,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;QAC7B,oBAAoB,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAC7C,GAAG,CAAC,cAAc,IAAI,CAAC,QAAQ,cAAc,MAAM,GAAG,CAAC,CAAC;IAC1D,CAAC;IAED,MAAM,IAAI,GAAG,QAAQ,CAAC,iBAAiB;QACrC,CAAC,CAAC,QAAQ,CAAC,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC;QAC3C,CAAC,CAAC,GAAG,QAAQ,CAAC,WAAW,WAAW,IAAI,CAAC,QAAQ,EAAE,CAAC;IACtD,MAAM,EAAE,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IACvD,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QACX,GAAG,CAAC,cAAc,IAAI,CAAC,QAAQ,QAAQ,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC;IACtD,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,cAAc,IAAI,CAAC,QAAQ,YAAY,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,4EAA4E;AAC/D,QAAA,mBAAmB,GAAG,gCAAgC,CAAC"}

package/dist-cjs/host/plugins/data.js

@@ -0,0 +1,107 @@
+"use strict";
+/**
+ * Migrations SQLite des plugins — port TF gold plugin-data.ts (N1).
+ *
+ * NE JAMAIS importer depuis le main Electron : exécuter en sous-process
+ * Node vanilla via `bindings.nodeScript("plugin-data.js")` (cf. migratePluginData
+ * dans control-extras). Utilise `node:sqlite` (kit) — les marques peuvent
+ * injecter better-sqlite3 via `openDatabase`.
+ */
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.applyPluginDataMigrations = applyPluginDataMigrations;
+exports.runPluginDataCli = runPluginDataCli;
+const node_crypto_1 = __importDefault(require("node:crypto"));
+const node_fs_1 = __importDefault(require("node:fs"));
+const node_path_1 = __importDefault(require("node:path"));
+const platform_core_1 = require("@creezio/platform-core");
+function assertPluginDir(pluginDir) {
+    const resolved = node_path_1.default.resolve(pluginDir);
+    if (!node_fs_1.default.existsSync(node_path_1.default.join(resolved, "manifest.json"))) {
+        throw new Error("dossier plugin invalide");
+    }
+    return resolved;
+}
+function applyPluginDataMigrations(pluginDirInput, opts) {
+    const pluginDir = assertPluginDir(pluginDirInput);
+    const dataDir = node_path_1.default.join(pluginDir, "data");
+    const migrationsDir = node_path_1.default.join(pluginDir, "migrations");
+    node_fs_1.default.mkdirSync(dataDir, { recursive: true });
+    const databasePath = node_path_1.default.join(dataDir, "plugin.sqlite");
+    const existed = node_fs_1.default.existsSync(databasePath);
+    const migrationFiles = node_fs_1.default.existsSync(migrationsDir)
+        ? node_fs_1.default
+            .readdirSync(migrationsDir)
+            .filter((name) => /^\d{3,}_[A-Za-z0-9_.-]+\.sql$/.test(name))
+            .sort()
+        : [];
+    let backupPath = null;
+    if (existed && migrationFiles.length) {
+        backupPath = `${databasePath}.bak-${new Date().toISOString().replace(/[:.]/g, "-")}`;
+        node_fs_1.default.copyFileSync(databasePath, backupPath);
+    }
+    const open = opts?.openDatabase || platform_core_1.openNodeSqliteDatabase;
+    const db = open(databasePath);
+    const pragma = (sql) => {
+        try {
+            db.exec(sql);
+        }
+        catch {
+            /* node:sqlite / better-sqlite3 */
+        }
+    };
+    pragma("PRAGMA foreign_keys=ON");
+    pragma("PRAGMA busy_timeout=5000");
+    db.exec(`CREATE TABLE IF NOT EXISTS _plugin_migrations (
+      name TEXT PRIMARY KEY, sha256 TEXT NOT NULL,
+      applied_at TEXT NOT NULL DEFAULT (datetime('now'))
+    )`);
+    const applied = [];
+    const skipped = [];
+    try {
+        for (const name of migrationFiles) {
+            const sql = node_fs_1.default.readFileSync(node_path_1.default.join(migrationsDir, name), "utf8");
+            const sha256 = node_crypto_1.default.createHash("sha256").update(sql).digest("hex");
+            const previous = db
+                .prepare(`SELECT sha256 FROM _plugin_migrations WHERE name=?`)
+                .get(name);
+            if (previous) {
+                if (previous.sha256 !== sha256) {
+                    throw new Error(`migration déjà appliquée puis modifiée: ${name}`);
+                }
+                skipped.push(name);
+                continue;
+            }
+            db.exec(sql);
+            db.prepare(`INSERT INTO _plugin_migrations(name, sha256) VALUES (?, ?)`).run(name, sha256);
+            applied.push(name);
+        }
+        return { databasePath, backupPath, applied, skipped };
+    }
+    catch (error) {
+        db.close?.();
+        if (backupPath)
+            node_fs_1.default.copyFileSync(backupPath, databasePath);
+        throw error;
+    }
+    finally {
+        db.close?.();
+    }
+}
+/** Entrée CLI (compilée en plugin-data.js côté marque). */
+function runPluginDataCli(argv = process.argv.slice(2)) {
+    const [command, pluginDir] = argv;
+    try {
+        if (command !== "migrate" || !pluginDir) {
+            throw new Error("Usage: plugin-data.js migrate <pluginDir>");
+        }
+        process.stdout.write(`${JSON.stringify(applyPluginDataMigrations(pluginDir))}\n`);
+    }
+    catch (error) {
+        process.stderr.write(`${error instanceof Error ? error.message : String(error)}\n`);
+        process.exit(1);
+    }
+}
+//# sourceMappingURL=data.js.map

package/dist-cjs/host/plugins/data.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"data.js","sourceRoot":"","sources":["../../../src/host/plugins/data.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;;;;AA0BH,8DAoEC;AAGD,4CAeC;AA9GD,8DAAiC;AACjC,sDAAyB;AACzB,0DAA6B;AAC7B,0DAIgC;AAShC,SAAS,eAAe,CAAC,SAAiB;IACxC,MAAM,QAAQ,GAAG,mBAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACzC,IAAI,CAAC,iBAAE,CAAC,UAAU,CAAC,mBAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAgB,yBAAyB,CACvC,cAAsB,EACtB,IAA4C;IAE5C,MAAM,SAAS,GAAG,eAAe,CAAC,cAAc,CAAC,CAAC;IAClD,MAAM,OAAO,GAAG,mBAAI,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAC7C,MAAM,aAAa,GAAG,mBAAI,CAAC,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;IACzD,iBAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3C,MAAM,YAAY,GAAG,mBAAI,CAAC,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;IACzD,MAAM,OAAO,GAAG,iBAAE,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IAC5C,MAAM,cAAc,GAAG,iBAAE,CAAC,UAAU,CAAC,aAAa,CAAC;QACjD,CAAC,CAAC,iBAAE;aACC,WAAW,CAAC,aAAa,CAAC;aAC1B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,+BAA+B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;aAC5D,IAAI,EAAE;QACX,CAAC,CAAC,EAAE,CAAC;IACP,IAAI,UAAU,GAAkB,IAAI,CAAC;IACrC,IAAI,OAAO,IAAI,cAAc,CAAC,MAAM,EAAE,CAAC;QACrC,UAAU,GAAG,GAAG,YAAY,QAAQ,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,CAAC;QACrF,iBAAE,CAAC,YAAY,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;IAC5C,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,EAAE,YAAY,IAAI,sCAAsB,CAAC;IAC1D,MAAM,EAAE,GAAmB,IAAI,CAAC,YAAY,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,CAAC,GAAW,EAAE,EAAE;QAC7B,IAAI,CAAC;YACH,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACf,CAAC;QAAC,MAAM,CAAC;YACP,kCAAkC;QACpC,CAAC;IACH,CAAC,CAAC;IACF,MAAM,CAAC,wBAAwB,CAAC,CAAC;IACjC,MAAM,CAAC,0BAA0B,CAAC,CAAC;IACnC,EAAE,CAAC,IAAI,CACL;;;MAGE,CACH,CAAC;IACF,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,CAAC;QACH,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;YAClC,MAAM,GAAG,GAAG,iBAAE,CAAC,YAAY,CAAC,mBAAI,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;YACpE,MAAM,MAAM,GAAG,qBAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACrE,MAAM,QAAQ,GAAG,EAAE;iBAChB,OAAO,CAAC,oDAAoD,CAAC;iBAC7D,GAAG,CAAC,IAAI,CAAmC,CAAC;YAC/C,IAAI,QAAQ,EAAE,CAAC;gBACb,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;oBAC/B,MAAM,IAAI,KAAK,CAAC,2CAA2C,IAAI,EAAE,CAAC,CAAC;gBACrE,CAAC;gBACD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACnB,SAAS;YACX,CAAC;YACD,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACb,EAAE,CAAC,OAAO,CACR,4DAA4D,CAC7D,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACpB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrB,CAAC;QACD,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;IACxD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC;QACb,IAAI,UAAU;YAAE,iBAAE,CAAC,YAAY,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;QAC1D,MAAM,KAAK,CAAC;IACd,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC;IACf,CAAC;AACH,CAAC;AAED,2DAA2D;AAC3D,SAAgB,gBAAgB,CAAC,OAAiB,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IACrE,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,GAAG,IAAI,CAAC;IAClC,IAAI,CAAC;QACH,IAAI,OAAO,KAAK,SAAS,IAAI,CAAC,SAAS,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC/D,CAAC;QACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,GAAG,IAAI,CAAC,SAAS,CAAC,yBAAyB,CAAC,SAAS,CAAC,CAAC,IAAI,CAC5D,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAC9D,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC"}

package/dist-cjs/host/plugins/events.js

@@ -0,0 +1,19 @@
+"use strict";
+/**
+ * Réexport platform-core — équivalent TF plugin-events (N1).
+ * Pas de duplication : SoT = `@creezio/platform-core`.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.writePluginRuntimeState = exports.readPluginRuntimeState = exports.pluginSiteId = exports.pluginRuntimePath = exports.pluginN8nWebhookUrl = exports.pluginHookUrl = exports.pluginAcceptsHook = exports.PLUGIN_SITE_ID_SPAN = exports.PLUGIN_SITE_ID_BASE = exports.PLUGIN_RUNTIME_FILE = void 0;
+var platform_core_1 = require("@creezio/platform-core");
+Object.defineProperty(exports, "PLUGIN_RUNTIME_FILE", { enumerable: true, get: function () { return platform_core_1.PLUGIN_RUNTIME_FILE; } });
+Object.defineProperty(exports, "PLUGIN_SITE_ID_BASE", { enumerable: true, get: function () { return platform_core_1.PLUGIN_SITE_ID_BASE; } });
+Object.defineProperty(exports, "PLUGIN_SITE_ID_SPAN", { enumerable: true, get: function () { return platform_core_1.PLUGIN_SITE_ID_SPAN; } });
+Object.defineProperty(exports, "pluginAcceptsHook", { enumerable: true, get: function () { return platform_core_1.pluginAcceptsHook; } });
+Object.defineProperty(exports, "pluginHookUrl", { enumerable: true, get: function () { return platform_core_1.pluginHookUrl; } });
+Object.defineProperty(exports, "pluginN8nWebhookUrl", { enumerable: true, get: function () { return platform_core_1.pluginN8nWebhookUrl; } });
+Object.defineProperty(exports, "pluginRuntimePath", { enumerable: true, get: function () { return platform_core_1.pluginRuntimePath; } });
+Object.defineProperty(exports, "pluginSiteId", { enumerable: true, get: function () { return platform_core_1.pluginSiteId; } });
+Object.defineProperty(exports, "readPluginRuntimeState", { enumerable: true, get: function () { return platform_core_1.readPluginRuntimeState; } });
+Object.defineProperty(exports, "writePluginRuntimeState", { enumerable: true, get: function () { return platform_core_1.writePluginRuntimeState; } });
+//# sourceMappingURL=events.js.map

package/dist-cjs/host/plugins/events.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"events.js","sourceRoot":"","sources":["../../../src/host/plugins/events.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;AAEH,wDAagC;AAZ9B,oHAAA,mBAAmB,OAAA;AACnB,oHAAA,mBAAmB,OAAA;AACnB,oHAAA,mBAAmB,OAAA;AACnB,kHAAA,iBAAiB,OAAA;AACjB,8GAAA,aAAa,OAAA;AACb,oHAAA,mBAAmB,OAAA;AACnB,kHAAA,iBAAiB,OAAA;AACjB,6GAAA,YAAY,OAAA;AACZ,uHAAA,sBAAsB,OAAA;AACtB,wHAAA,uBAAuB,OAAA"}

package/dist-cjs/host/plugins/execution-grant.js

@@ -0,0 +1,11 @@
+"use strict";
+/**
+ * Réexport platform-core — équivalent TF plugin-execution-grant (N1).
+ * Pas de duplication : SoT = `@creezio/platform-core`.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.verifyPluginExecutionGrant = exports.issuePluginExecutionGrant = void 0;
+var platform_core_1 = require("@creezio/platform-core");
+Object.defineProperty(exports, "issuePluginExecutionGrant", { enumerable: true, get: function () { return platform_core_1.issuePluginExecutionGrant; } });
+Object.defineProperty(exports, "verifyPluginExecutionGrant", { enumerable: true, get: function () { return platform_core_1.verifyPluginExecutionGrant; } });
+//# sourceMappingURL=execution-grant.js.map

package/dist-cjs/host/plugins/execution-grant.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"execution-grant.js","sourceRoot":"","sources":["../../../src/host/plugins/execution-grant.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;AAEH,wDAKgC;AAJ9B,0HAAA,yBAAyB,OAAA;AACzB,2HAAA,0BAA0B,OAAA"}

package/dist-cjs/host/plugins/git.js

@@ -0,0 +1,371 @@
+"use strict";
+/**
+ * Versioning Git local par plugin — port TF gold plugin-git.ts (N1).
+ * Injection marque : gitBinary / userDataDir / isPackaged / applyOsSandboxEnv / identité git.
+ */
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resetGitBinaryCache = resetGitBinaryCache;
+exports.resolveGitBinary = resolveGitBinary;
+exports.isPluginGitRepo = isPluginGitRepo;
+exports.bumpPluginManifestPatch = bumpPluginManifestPatch;
+exports.ensurePluginGitRepo = ensurePluginGitRepo;
+exports.commitPluginChanges = commitPluginChanges;
+exports.listPluginVersions = listPluginVersions;
+exports.restorePluginVersion = restorePluginVersion;
+exports.getPluginGitStatus = getPluginGitStatus;
+const node_child_process_1 = require("node:child_process");
+const node_fs_1 = __importDefault(require("node:fs"));
+const node_path_1 = __importDefault(require("node:path"));
+const node_util_1 = require("node:util");
+const platform_core_1 = require("@creezio/platform-core");
+const brand_bindings_js_1 = require("./brand-bindings.js");
+const execFileAsync = (0, node_util_1.promisify)(node_child_process_1.execFile);
+function pluginGitignore(bindings) {
+    const keyFile = (0, brand_bindings_js_1.pluginCrmKeyFileName)(bindings);
+    return `# ${bindings.productName} plugin — ne pas versionner secrets / runtime
+.enabled
+${keyFile}
+.tempoflow-plugin-api-key.json
+os-home/
+node_modules/
+*.log
+.DS_Store
+`;
+}
+let gitBinCache;
+/** Invalide le cache (tests). */
+function resetGitBinaryCache() {
+    gitBinCache = undefined;
+}
+function forceEmbeddedGitEnvKey(bindings) {
+    if (bindings.forceEmbeddedGitEnvKey)
+        return bindings.forceEmbeddedGitEnvKey;
+    const alias = bindings.legacyEnvAliases?.[0];
+    return `${alias || bindings.envPrefix}_FORCE_EMBEDDED_GIT`;
+}
+/**
+ * Résout le binaire git — SANDBOX UNIQUEMENT (même règles TF gold).
+ */
+async function resolveGitBinary() {
+    if (gitBinCache !== undefined)
+        return gitBinCache;
+    const bindings = (0, brand_bindings_js_1.getPluginHostBindings)();
+    const embedded = bindings.gitBinary();
+    if (embedded) {
+        if (process.platform === "win32" ||
+            process.env[forceEmbeddedGitEnvKey(bindings)] === "1" ||
+            !embedded.endsWith(".exe")) {
+            gitBinCache = embedded;
+            return gitBinCache;
+        }
+    }
+    if (bindings.isPackaged()) {
+        gitBinCache = null;
+        return gitBinCache;
+    }
+    const devCandidates = process.platform === "win32"
+        ? []
+        : ["/usr/bin/git", "/usr/local/bin/git", "/bin/git"];
+    gitBinCache = devCandidates.find((p) => node_fs_1.default.existsSync(p)) || null;
+    return gitBinCache;
+}
+function mingitProcessEnv(bin) {
+    const bindings = (0, brand_bindings_js_1.getPluginHostBindings)();
+    const identity = (0, brand_bindings_js_1.pluginGitIdentity)(bindings);
+    let env = {
+        ...process.env,
+        GIT_TERMINAL_PROMPT: "0",
+        GIT_AUTHOR_NAME: identity.name,
+        GIT_AUTHOR_EMAIL: identity.email,
+        GIT_COMMITTER_NAME: identity.name,
+        GIT_COMMITTER_EMAIL: identity.email,
+    };
+    const norm = bin.replace(/\\/g, "/");
+    const toolDirs = [node_path_1.default.dirname(bin)];
+    if (norm.endsWith("/cmd/git.exe") || norm.endsWith("/cmd/git")) {
+        const root = node_path_1.default.dirname(node_path_1.default.dirname(bin));
+        toolDirs.push(...[
+            node_path_1.default.join(root, "cmd"),
+            node_path_1.default.join(root, "mingw64", "bin"),
+            node_path_1.default.join(root, "usr", "bin"),
+        ].filter((p) => node_fs_1.default.existsSync(p)));
+    }
+    try {
+        const apply = (0, brand_bindings_js_1.resolveApplyOsSandboxEnv)(bindings);
+        env = apply({
+            env,
+            profileHome: node_path_1.default.join(bindings.userDataDir(), "plugins", ".git-home"),
+            userData: bindings.userDataDir(),
+            toolDirs,
+        });
+    }
+    catch {
+        /* hors app Electron (tests) : env non confiné acceptable */
+    }
+    return env;
+}
+async function git(cwd, args, opts) {
+    const bin = await resolveGitBinary();
+    if (!bin) {
+        return { code: 127, stdout: "", stderr: "git introuvable" };
+    }
+    try {
+        const { stdout, stderr } = await execFileAsync(bin, args, {
+            cwd,
+            timeout: 30_000,
+            windowsHide: true,
+            env: mingitProcessEnv(bin),
+            maxBuffer: 2 * 1024 * 1024,
+        });
+        return {
+            code: 0,
+            stdout: String(stdout || ""),
+            stderr: String(stderr || ""),
+        };
+    }
+    catch (e) {
+        const err = e;
+        if (opts?.allowFail) {
+            return {
+                code: typeof err.code === "number" ? err.code : 1,
+                stdout: String(err.stdout || ""),
+                stderr: String(err.stderr || err.message || ""),
+            };
+        }
+        throw new Error(String(err.stderr || err.message || "git failed").trim() || "git failed");
+    }
+}
+function isPluginGitRepo(pluginDir) {
+    return node_fs_1.default.existsSync(node_path_1.default.join(pluginDir, ".git"));
+}
+function ensureGitignore(pluginDir) {
+    const bindings = (0, brand_bindings_js_1.getPluginHostBindings)();
+    const p = node_path_1.default.join(pluginDir, ".gitignore");
+    if (!node_fs_1.default.existsSync(p)) {
+        node_fs_1.default.writeFileSync(p, pluginGitignore(bindings), "utf8");
+    }
+}
+/** Bump patch du manifest.version (0.1.0 → 0.1.1). */
+function bumpPluginManifestPatch(pluginDir) {
+    const mfPath = node_path_1.default.join(pluginDir, platform_core_1.PLUGIN_MANIFEST_FILE);
+    try {
+        const raw = JSON.parse(node_fs_1.default.readFileSync(mfPath, "utf8"));
+        const cur = String(raw.version || "0.1.0").trim();
+        const m = cur.match(/^(\d+)\.(\d+)\.(\d+)(.*)$/);
+        let next;
+        if (m) {
+            next = `${m[1]}.${m[2]}.${Number(m[3]) + 1}${m[4] || ""}`;
+        }
+        else {
+            next = `${cur}.1`;
+        }
+        raw.version = next;
+        node_fs_1.default.writeFileSync(mfPath, `${JSON.stringify(raw, null, 2)}\n`, "utf8");
+        return next;
+    }
+    catch {
+        return null;
+    }
+}
+async function ensurePluginGitRepo(pluginDir, opts) {
+    const bindings = (0, brand_bindings_js_1.getPluginHostBindings)();
+    const identity = (0, brand_bindings_js_1.pluginGitIdentity)(bindings);
+    const bin = await resolveGitBinary();
+    if (!bin) {
+        return { ok: false, detail: "git introuvable sur le PATH" };
+    }
+    ensureGitignore(pluginDir);
+    if (!isPluginGitRepo(pluginDir)) {
+        await git(pluginDir, ["init", "-b", "main"]);
+        await git(pluginDir, ["config", "user.name", identity.name]);
+        await git(pluginDir, ["config", "user.email", identity.email]);
+    }
+    await git(pluginDir, ["add", "-A"]);
+    const st = await git(pluginDir, ["status", "--porcelain"], { allowFail: true });
+    if (!st.stdout.trim()) {
+        const log = await git(pluginDir, ["rev-parse", "HEAD"], { allowFail: true });
+        if (log.code !== 0) {
+            await git(pluginDir, [
+                "commit",
+                "--allow-empty",
+                "-m",
+                opts?.message || "chore: init plugin",
+            ]);
+            return { ok: true, detail: "init + commit vide" };
+        }
+        return { ok: true, detail: "déjà à jour" };
+    }
+    await git(pluginDir, [
+        "commit",
+        "-m",
+        opts?.message || "chore: init plugin",
+    ]);
+    return { ok: true, detail: "init + commit" };
+}
+async function commitPluginChanges(pluginDir, message, opts) {
+    const bin = await resolveGitBinary();
+    if (!bin) {
+        return {
+            ok: false,
+            sha: null,
+            version: null,
+            detail: "git introuvable",
+        };
+    }
+    ensureGitignore(pluginDir);
+    if (!isPluginGitRepo(pluginDir)) {
+        await ensurePluginGitRepo(pluginDir, { message: "chore: init plugin" });
+    }
+    let version = null;
+    if (opts?.bumpVersion !== false) {
+        version = bumpPluginManifestPatch(pluginDir);
+    }
+    await git(pluginDir, ["add", "-A"]);
+    const st = await git(pluginDir, ["status", "--porcelain"], { allowFail: true });
+    if (!st.stdout.trim()) {
+        const head = await git(pluginDir, ["rev-parse", "HEAD"], { allowFail: true });
+        return {
+            ok: true,
+            sha: head.code === 0 ? head.stdout.trim() : null,
+            version,
+            detail: "aucun changement",
+        };
+    }
+    const msg = String(message || "update").trim() || "update";
+    const verSuffix = version ? ` (v${version})` : "";
+    await git(pluginDir, ["commit", "-m", `${msg}${verSuffix}`]);
+    const head = await git(pluginDir, ["rev-parse", "HEAD"]);
+    return {
+        ok: true,
+        sha: head.stdout.trim(),
+        version,
+        detail: "committed",
+    };
+}
+async function listPluginVersions(pluginDir, limit = 40) {
+    const bin = await resolveGitBinary();
+    if (!bin) {
+        return {
+            ok: false,
+            available: false,
+            commits: [],
+            head: null,
+            error: "git introuvable",
+        };
+    }
+    if (!isPluginGitRepo(pluginDir)) {
+        return { ok: true, available: true, commits: [], head: null };
+    }
+    const headR = await git(pluginDir, ["rev-parse", "HEAD"], { allowFail: true });
+    const head = headR.code === 0 ? headR.stdout.trim() : null;
+    const log = await git(pluginDir, [
+        "log",
+        `-n${Math.min(100, Math.max(1, limit))}`,
+        "--format=%H%x09%h%x09%cI%x09%s",
+    ], { allowFail: true });
+    if (log.code !== 0) {
+        return {
+            ok: false,
+            available: true,
+            commits: [],
+            head,
+            error: log.stderr || "git log failed",
+        };
+    }
+    const commits = [];
+    for (const line of log.stdout.split("\n")) {
+        if (!line.trim())
+            continue;
+        const [sha, shortSha, date, ...rest] = line.split("\t");
+        if (!sha || !shortSha || !date)
+            continue;
+        commits.push({
+            sha,
+            shortSha,
+            date,
+            subject: rest.join("\t"),
+        });
+    }
+    return { ok: true, available: true, commits, head };
+}
+async function restorePluginVersion(pluginDir, ref) {
+    const bin = await resolveGitBinary();
+    if (!bin) {
+        return { ok: false, sha: null, detail: "git introuvable" };
+    }
+    if (!isPluginGitRepo(pluginDir)) {
+        return { ok: false, sha: null, detail: "pas de dépôt git" };
+    }
+    const target = String(ref || "").trim();
+    if (!/^[a-zA-Z0-9_./~^-]+$/.test(target) || target.includes("..")) {
+        return { ok: false, sha: null, detail: "ref invalide" };
+    }
+    const rev = await git(pluginDir, ["rev-parse", "--verify", target], {
+        allowFail: true,
+    });
+    if (rev.code !== 0) {
+        return { ok: false, sha: null, detail: `commit inconnu: ${target}` };
+    }
+    const sha = rev.stdout.trim();
+    await git(pluginDir, ["checkout", sha, "--", "."]);
+    await git(pluginDir, ["clean", "-fd"], { allowFail: true });
+    await git(pluginDir, ["add", "-A"]);
+    const st = await git(pluginDir, ["status", "--porcelain"], { allowFail: true });
+    if (st.stdout.trim()) {
+        await git(pluginDir, [
+            "commit",
+            "-m",
+            `revert: restore ${sha.slice(0, 7)}`,
+        ]);
+    }
+    const head = await git(pluginDir, ["rev-parse", "HEAD"]);
+    return {
+        ok: true,
+        sha: head.stdout.trim(),
+        detail: `restauré depuis ${sha.slice(0, 7)}`,
+    };
+}
+async function getPluginGitStatus(pluginDir) {
+    const bin = await resolveGitBinary();
+    if (!bin) {
+        return {
+            ok: false,
+            available: false,
+            head: null,
+            shortHead: null,
+            dirty: false,
+            commits: 0,
+            error: "git introuvable",
+        };
+    }
+    if (!isPluginGitRepo(pluginDir)) {
+        return {
+            ok: true,
+            available: true,
+            head: null,
+            shortHead: null,
+            dirty: false,
+            commits: 0,
+        };
+    }
+    const headR = await git(pluginDir, ["rev-parse", "HEAD"], { allowFail: true });
+    const head = headR.code === 0 ? headR.stdout.trim() : null;
+    const short = head ? head.slice(0, 7) : null;
+    const st = await git(pluginDir, ["status", "--porcelain"], { allowFail: true });
+    const countR = await git(pluginDir, ["rev-list", "--count", "HEAD"], {
+        allowFail: true,
+    });
+    const commits = countR.code === 0 ? Number(countR.stdout.trim()) || 0 : 0;
+    return {
+        ok: true,
+        available: true,
+        head,
+        shortHead: short,
+        dirty: Boolean(st.stdout.trim()),
+        commits,
+    };
+}
+//# sourceMappingURL=git.js.map