@dooc-dev/dooc 0.0.1 → 0.0.3

package/dist/viewer/extension-pack.d.ts

@@ -0,0 +1,2 @@
+/** Package an already bundled module and its relative assets without running build scripts. */
+export declare const packExtension: (root: string, output?: string) => Promise<Buffer>;

package/dist/viewer/extension-pack.js

@@ -0,0 +1,36 @@
+import { lstatSync, readdirSync, readFileSync } from "node:fs";
+import { join, resolve } from "node:path";
+import { inflateRawSync } from "node:zlib";
+import { zip } from "../compiler/zip.js";
+import { MAX_EXTENSION_BYTES, MAX_EXTENSION_FILES, readExtensionZip, } from "../core/extension-package.js";
+/** Package an already bundled module and its relative assets without running build scripts. */
+export const packExtension = async (root, output) => {
+    const entries = [];
+    let size = 0;
+    const walk = (folder, prefix = "") => {
+        for (const entry of readdirSync(folder, { withFileTypes: true }).sort((a, b) => a.name.localeCompare(b.name))) {
+            const path = join(folder, entry.name);
+            if (output && resolve(path) === resolve(output))
+                continue;
+            const name = prefix + entry.name;
+            if (entry.isSymbolicLink())
+                throw new Error(`Plugin assets cannot be symlinks: ${name}`);
+            if (name.length > 240)
+                throw new Error("Plugin asset path is too long");
+            if (entry.isDirectory()) {
+                walk(path, `${name}/`);
+                continue;
+            }
+            if (!entry.isFile())
+                throw new Error(`Expected a regular plugin asset: ${name}`);
+            size += lstatSync(path).size;
+            if (size > MAX_EXTENSION_BYTES || entries.length >= MAX_EXTENSION_FILES)
+                throw new Error("Plugins are limited to 16 MiB and 256 files");
+            entries.push({ name, data: readFileSync(path) });
+        }
+    };
+    walk(root);
+    const data = zip(entries);
+    await readExtensionZip(data, async (bytes, size) => inflateRawSync(bytes, { maxOutputLength: Math.max(1, size) }));
+    return data;
+};

package/dist/viewer/extensions.d.ts

@@ -0,0 +1,10 @@
+import type { LocalPluginStorage } from "../plugins/local-storage.js";
+import { type ViewerPluginRegistry, type ViewerPlugins } from "./plugin-config.js";
+export declare const EXTENSIONS_DIR = ".dooc/plugins";
+/** ZIPs found on disk stay inactive until the browser approves their exact content hash. */
+export declare const createExtensionManager: (root: string, registry: ViewerPluginRegistry & {
+    configuration?: () => ViewerPlugins;
+}, initial: Pick<ViewerPlugins, "plugins" | "mocks">, personal?: LocalPluginStorage) => ((input: Record<string, unknown>) => Promise<unknown>) & {
+    restore(): Promise<string[]>;
+    dispose: () => void;
+};

package/dist/viewer/extensions.js

@@ -0,0 +1,302 @@
+import { createHash } from "node:crypto";
+import { lstatSync, mkdirSync, mkdtempSync, readdirSync, readFileSync, realpathSync, renameSync, rmSync, unlinkSync, writeFileSync, } from "node:fs";
+import { tmpdir } from "node:os";
+import { dirname, join } from "node:path";
+import { pathToFileURL } from "node:url";
+import { inflateRawSync } from "node:zlib";
+import { textfilePath } from "../compiler/textfile.js";
+import { zip } from "../compiler/zip.js";
+import { extensionFile, extensionManifest, MAX_EXTENSION_BYTES, readExtensionZip, } from "../core/extension-package.js";
+import { validateViewerPlugins, } from "./plugin-config.js";
+export const EXTENSIONS_DIR = ".dooc/plugins";
+const hash = (source) => createHash("sha256").update(source).digest("hex");
+const unpack = (data) => readExtensionZip(data, async (bytes, size) => inflateRawSync(bytes, { maxOutputLength: Math.max(1, size) }));
+/** ZIPs found on disk stay inactive until the browser approves their exact content hash. */
+export const createExtensionManager = (root, registry, initial, personal) => {
+    const active = new Map();
+    const scope = createHash("sha256").update(realpathSync(root)).digest("hex");
+    const approvalFile = `extensions-${scope}.json`;
+    const approval = () => {
+        const value = personal?.read(approvalFile);
+        return value && typeof value === "object" && !Array.isArray(value)
+            ? value
+            : {};
+    };
+    const remember = (file, revision) => {
+        if (!personal)
+            return;
+        const approved = approval();
+        if (revision)
+            approved[file] = revision;
+        else
+            delete approved[file];
+        personal.write(approvalFile, approved);
+    };
+    let queued = Promise.resolve();
+    const directory = () => {
+        for (const name of [".dooc", EXTENSIONS_DIR]) {
+            const entry = lstatSync(join(root, name), { throwIfNoEntry: false });
+            if (entry && (!entry.isDirectory() || entry.isSymbolicLink()))
+                throw new Error("Plugin folders must be local directories");
+        }
+        return textfilePath(root, EXTENSIONS_DIR);
+    };
+    const read = (name) => {
+        const path = join(directory(), name);
+        const entry = lstatSync(path, { throwIfNoEntry: false });
+        if (!entry)
+            return null;
+        if (!entry.isFile() || entry.isSymbolicLink() || entry.size > MAX_EXTENSION_BYTES)
+            throw new Error("Expected a plugin ZIP smaller than 16 MiB");
+        return readFileSync(path);
+    };
+    const disable = (name) => {
+        const value = active.get(name);
+        if (!value)
+            return;
+        for (const plugin of value.config.plugins)
+            if (!registry.configuration || registry.configuration().plugins.includes(plugin))
+                registry.unregister(plugin.id);
+        rmSync(value.directory, { recursive: true, force: true });
+        active.delete(name);
+    };
+    const list = async () => {
+        const path = directory();
+        const entries = lstatSync(path, { throwIfNoEntry: false })
+            ? readdirSync(path, { withFileTypes: true })
+            : [];
+        const items = [];
+        for (const entry of entries.filter((entry) => entry.isFile() && entry.name.endsWith(".zip"))) {
+            let file;
+            try {
+                file = extensionFile(entry.name);
+            }
+            catch {
+                continue;
+            }
+            const data = read(file);
+            if (!data)
+                continue;
+            const revision = hash(data);
+            const loaded = active.get(file);
+            if (loaded &&
+                (loaded.hash !== revision ||
+                    (registry.configuration &&
+                        loaded.config.plugins.some((plugin) => !registry.configuration?.().plugins.includes(plugin)))))
+                disable(file);
+            try {
+                const pkg = await unpack(data);
+                items.push({
+                    file,
+                    name: pkg.name,
+                    icon: pkg.icon ??
+                        active.get(file)?.config.plugins.find((plugin) => plugin.icon)?.icon,
+                    version: pkg.version,
+                    hash: revision,
+                    size: data.length,
+                    enabled: active.has(file),
+                    plugins: active.get(file)?.config.plugins.map((plugin) => plugin.id) ?? [],
+                });
+            }
+            catch (error) {
+                disable(file);
+                items.push({
+                    file,
+                    name: file,
+                    version: "",
+                    hash: revision,
+                    size: data.length,
+                    enabled: false,
+                    plugins: [],
+                    error: error instanceof Error ? error.message : String(error),
+                });
+            }
+        }
+        for (const name of active.keys())
+            if (!items.some((item) => item.file === name))
+                disable(name);
+        const owned = new Set([...active.values()].flatMap((value) => value.config.plugins));
+        for (const plugin of (registry.configuration?.() ?? initial).plugins) {
+            if (owned.has(plugin))
+                continue;
+            items.push({
+                file: `viewer/${plugin.id}`,
+                name: plugin.name ?? plugin.id,
+                icon: plugin.icon,
+                version: "",
+                hash: "",
+                size: 0,
+                enabled: true,
+                plugins: [plugin.id],
+                readonly: true,
+            });
+        }
+        return { scope, items: items.sort((a, b) => a.name.localeCompare(b.name)) };
+    };
+    const activate = async (name, data, save, base) => {
+        const revision = hash(data);
+        if (!save && active.get(name)?.hash === revision)
+            return;
+        const pkg = await unpack(data);
+        const folder = mkdtempSync(join(tmpdir(), "dooc-extension-"));
+        let timer;
+        try {
+            for (const file of pkg.files) {
+                const path = join(folder, file.name);
+                mkdirSync(dirname(path), { recursive: true });
+                writeFileSync(path, file.data, { flag: "wx" });
+            }
+            const module = await Promise.race([
+                import(pathToFileURL(join(folder, pkg.main)).href),
+                new Promise((_, reject) => {
+                    timer = setTimeout(() => reject(new Error("Plugin initialization timed out")), 10000);
+                }),
+            ]);
+            const config = validateViewerPlugins(module.default);
+            if (!config.plugins.length ||
+                config.setup ||
+                config.gitOrigin ||
+                config.workspace ||
+                config.allowedDomains)
+                throw new Error("Export a viewer configuration with plugins and optional mocks");
+            const live = registry.configuration?.();
+            const owned = active.get(name)?.config.plugins ?? [];
+            for (const plugin of config.plugins) {
+                const existing = live?.plugins.find((item) => item.id === plugin.id);
+                if (existing && !owned.includes(existing))
+                    throw new Error(`Plugin ID is already registered: ${plugin.id}`);
+            }
+            if (Object.keys(config.mocks).some((id) => !config.plugins.some((plugin) => plugin.id === id)))
+                throw new Error("Mocks must belong to plugins in this package");
+            const other = live
+                ? [
+                    {
+                        plugins: live.plugins.filter((plugin) => !owned.includes(plugin)),
+                        mocks: Object.fromEntries(Object.entries(live.mocks).filter(([id]) => !owned.some((plugin) => plugin.id === id))),
+                    },
+                ]
+                : [
+                    initial,
+                    ...[...active]
+                        .filter(([key]) => key !== name)
+                        .map(([, value]) => value.config),
+                ];
+            validateViewerPlugins({
+                plugins: [...other.flatMap((config) => config.plugins), ...config.plugins],
+                mocks: Object.assign({}, ...other.map((config) => config.mocks), config.mocks),
+            });
+            if (save) {
+                const current = read(name);
+                if ((current ? hash(current) : null) !== base)
+                    throw new Error("Plugin changed. Reopen it before saving.");
+                const target = join(directory(), name);
+                mkdirSync(dirname(target), { recursive: true });
+                const temporary = join(dirname(target), `.upload-${Date.now()}.tmp`);
+                try {
+                    writeFileSync(temporary, data, { flag: "wx" });
+                    renameSync(temporary, target);
+                }
+                finally {
+                    rmSync(temporary, { force: true });
+                }
+            }
+            disable(name);
+            for (const plugin of config.plugins)
+                registry.register(plugin, { mock: config.mocks[plugin.id] });
+            active.set(name, { hash: revision, config, directory: folder });
+            remember(name, revision);
+        }
+        finally {
+            clearTimeout(timer);
+            if (active.get(name)?.directory !== folder)
+                rmSync(folder, { recursive: true, force: true });
+        }
+    };
+    const perform = async (input) => {
+        if (input.action === "list")
+            return list();
+        const name = extensionFile(input.file);
+        const current = read(name);
+        if (input.action === "read") {
+            if (!current)
+                throw new Error("Plugin not found");
+            const pkg = await unpack(current);
+            return {
+                file: name,
+                hash: hash(current),
+                ...pkg,
+                files: pkg.files.map((file) => ({
+                    name: file.name,
+                    data: Buffer.from(file.data).toString("base64"),
+                })),
+            };
+        }
+        if (input.action === "install") {
+            if (typeof input.data !== "string" ||
+                input.data.length > Math.ceil((MAX_EXTENSION_BYTES * 4) / 3) ||
+                input.data.length % 4 !== 0 ||
+                !/^[A-Za-z0-9+/]*={0,2}$/.test(input.data))
+                throw new Error("Expected a ZIP smaller than 16 MiB");
+            if ((current ? hash(current) : null) !== input.base)
+                throw new Error("Plugin changed. Reopen it before saving.");
+            await activate(name, Buffer.from(input.data, "base64"), true, input.base);
+        }
+        else {
+            if (!current || hash(current) !== input.hash)
+                throw new Error("Plugin changed. Reopen it before continuing.");
+            if (input.action === "enable")
+                await activate(name, current, false, input.hash);
+            else if (input.action === "disable") {
+                disable(name);
+                remember(name);
+            }
+            else if (input.action === "delete") {
+                unlinkSync(join(directory(), name));
+                disable(name);
+                remember(name);
+            }
+            else if (input.action === "edit") {
+                if (typeof input.source !== "string" ||
+                    Buffer.byteLength(input.source) > MAX_EXTENSION_BYTES ||
+                    input.source.includes("\0"))
+                    throw new Error("Expected UTF-8 text smaller than 16 MiB");
+                const pkg = await unpack(current);
+                const file = pkg.files.find((file) => file.name === input.path);
+                if (!file)
+                    throw new Error("Plugin file not found");
+                file.data = Buffer.from(input.source);
+                extensionManifest(pkg.files);
+                const data = zip(pkg.files.map((file) => ({ name: file.name, data: Buffer.from(file.data) })));
+                await activate(name, data, true, input.hash);
+            }
+            else
+                throw new Error("Unknown plugin action");
+        }
+        return list();
+    };
+    const request = (input) => {
+        const result = queued.then(() => perform(input));
+        queued = result.catch(() => { });
+        return result;
+    };
+    return Object.assign(request, {
+        async restore() {
+            const approved = approval();
+            const errors = [];
+            for (const item of (await list()).items)
+                if (!item.readonly && !item.error && approved[item.file] === item.hash) {
+                    try {
+                        await request({ action: "enable", file: item.file, hash: item.hash });
+                    }
+                    catch (error) {
+                        errors.push(`${item.file}: ${error instanceof Error ? error.message : String(error)}`);
+                    }
+                }
+            return errors;
+        },
+        dispose: () => {
+            for (const name of active.keys())
+                disable(name);
+        },
+    });
+};

package/dist/viewer/hmr.js

@@ -59,6 +59,8 @@ export const classifyChange = (rel) => {
         p === "src/viewer/language-picker.ts" ||
         p === "src/viewer/theme-picker.ts" ||
         p === "src/viewer/ui-client.ts" ||
+        p === "src/viewer/extensions-ui.ts" ||
+        p === "src/viewer/extensions-store.ts" ||
         p === "src/viewer/plugins-ui.ts" ||
         p === "src/viewer/plugin-view.ts" ||
         p === "src/viewer/plugin-resize.ts" ||

package/dist/viewer/locales/eng.json

@@ -178,7 +178,7 @@
     "File preview": "File preview",
     "Files": "Files",
     "Search files": "Search files",
-    "Extension": "Extension",
+    "Plugin": "Plugin",
     "Default folder layout": "Default folder layout",
     "Folder restructure": "Folder restructure",
     "Move": "Move",
@@ -290,5 +290,28 @@
     "Reload actions before saving again.": "Reload actions before saving again.",
     "Saved, but refresh failed. Reload actions before saving again.": "Saved, but refresh failed. Reload actions before saving again.",
     "Actions could not be loaded.": "Actions could not be loaded.",
-    "An open draft is no longer editable. Copy or cancel it before reloading.": "An open draft is no longer editable. Copy or cancel it before reloading."
+    "An open draft is no longer editable. Copy or cancel it before reloading.": "An open draft is no longer editable. Copy or cancel it before reloading.",
+    "Changed elsewhere. Your input is kept; edit again to apply it.": "Changed elsewhere. Your input is kept; edit again to apply it.",
+    "Plugins": "Plugins",
+    "Add plugins": "Add plugins",
+    "Plugins are saved in this browser. Run server plugins in a local dooc editor.": "Plugins are saved in this browser. Run server plugins in a local dooc editor.",
+    "Drag and drop here, or click to browse.": "Drag and drop here, or click to browse.",
+    "Invalid package": "Invalid package",
+    "Browser storage": "Browser storage",
+    "Enabled": "Enabled",
+    "Disabled": "Disabled",
+    "Enable": "Enable",
+    "Disable": "Disable",
+    "Delete plugin {name}?": "Delete plugin {name}?",
+    "Replace plugin {name}?": "Replace plugin {name}?",
+    "Discard plugin changes?": "Discard plugin changes?",
+    "Plugin file": "Plugin file",
+    "Apply changes": "Apply changes",
+    "Binary asset — replace it by importing a new ZIP.": "Binary asset — replace it by importing a new ZIP.",
+    "Choose a ZIP smaller than 16 MiB": "Choose a ZIP smaller than 16 MiB",
+    "Sign in": "Sign in",
+    "Sign out": "Sign out",
+    "Not signed in": "Not signed in",
+    "Continue login": "Continue login",
+    "Provided by viewer": "Provided by viewer"
 }

package/dist/viewer/locales/jpn.json

@@ -178,7 +178,7 @@
     "File preview": "ファイルプレビュー",
     "Files": "ファイル",
     "Search files": "ファイルを検索",
-    "Extension": "拡張子",
+    "Plugin": "拡張子",
     "Default folder layout": "既定のフォルダー配置",
     "Folder restructure": "フォルダーを整理",
     "Move": "移動",
@@ -290,5 +290,28 @@
     "Reload actions before saving again.": "再保存する前に再読み込みしてください。",
     "Saved, but refresh failed. Reload actions before saving again.": "保存は完了しましたが、再取得に失敗しました。再保存する前に再読み込みしてください。",
     "Actions could not be loaded.": "操作を取得できませんでした。",
-    "An open draft is no longer editable. Copy or cancel it before reloading.": "編集中の項目を更新する権限がありません。再読み込みの前に入力をコピーするか、キャンセルしてください。"
+    "An open draft is no longer editable. Copy or cancel it before reloading.": "編集中の項目を更新する権限がありません。再読み込みの前に入力をコピーするか、キャンセルしてください。",
+    "Changed elsewhere. Your input is kept; edit again to apply it.": "外部で変更されました。入力は保持しています。再度編集すると反映します。",
+    "Plugins": "Plugins",
+    "Add plugins": "プラグインを追加",
+    "Plugins are saved in this browser. Run server plugins in a local dooc editor.": "プラグインはこのブラウザーに保存されます。サーバープラグインの実行にはローカルの dooc を使います。",
+    "Drag and drop here, or click to browse.": "ここにドラッグ＆ドロップ、またはクリックして選択",
+    "Invalid package": "無効なパッケージ",
+    "Browser storage": "ブラウザーに保存",
+    "Enabled": "有効",
+    "Disabled": "無効",
+    "Enable": "有効にする",
+    "Disable": "無効にする",
+    "Delete plugin {name}?": "プラグイン「{name}」を削除しますか？",
+    "Replace plugin {name}?": "プラグイン「{name}」を置き換えますか？",
+    "Discard plugin changes?": "プラグインの未適用の変更を破棄しますか？",
+    "Plugin file": "プラグインのファイル",
+    "Apply changes": "変更を適用",
+    "Binary asset — replace it by importing a new ZIP.": "バイナリファイルです。新しい ZIP を読み込むと置き換えられます。",
+    "Choose a ZIP smaller than 16 MiB": "16 MiB 以下の ZIP を選択してください",
+    "Sign in": "ログイン",
+    "Sign out": "ログアウト",
+    "Not signed in": "未ログイン",
+    "Continue login": "ログインを続ける",
+    "Provided by viewer": "開発用プラグイン"
 }

package/dist/viewer/locales/zho.json

@@ -178,7 +178,7 @@
     "File preview": "文件预览",
     "Files": "文件",
     "Search files": "搜索文件",
-    "Extension": "扩展名",
+    "Plugin": "插件名",
     "Default folder layout": "默认文件夹布局",
     "Folder restructure": "整理文件夹",
     "Move": "移动",
@@ -290,5 +290,28 @@
     "Reload actions before saving again.": "再次保存前请重新加载。",
     "Saved, but refresh failed. Reload actions before saving again.": "保存已完成，但刷新失败。再次保存前请重新加载。",
     "Actions could not be loaded.": "无法加载操作。",
-    "An open draft is no longer editable. Copy or cancel it before reloading.": "正在编辑的草稿已无法修改。重新加载前请复制或取消草稿。"
+    "An open draft is no longer editable. Copy or cancel it before reloading.": "正在编辑的草稿已无法修改。重新加载前请复制或取消草稿。",
+    "Changed elsewhere. Your input is kept; edit again to apply it.": "内容已在其他位置更改。已保留输入，再次编辑即可应用。",
+    "Plugins": "插件",
+    "Add plugins": "添加插件",
+    "Plugins are saved in this browser. Run server plugins in a local dooc editor.": "插件保存在此浏览器中。服务器插件需在本地 dooc 编辑器中运行。",
+    "Drag and drop here, or click to browse.": "拖放到此处，或点击选择。",
+    "Invalid package": "无效包",
+    "Browser storage": "浏览器存储",
+    "Enabled": "已启用",
+    "Disabled": "已禁用",
+    "Enable": "启用",
+    "Disable": "禁用",
+    "Delete plugin {name}?": "删除插件 {name}？",
+    "Replace plugin {name}?": "替换插件 {name}？",
+    "Discard plugin changes?": "放弃未应用的插件更改？",
+    "Plugin file": "插件文件",
+    "Apply changes": "应用更改",
+    "Binary asset — replace it by importing a new ZIP.": "二进制资源。导入新 ZIP 以替换。",
+    "Choose a ZIP smaller than 16 MiB": "请选择不超过 16 MiB 的 ZIP",
+    "Sign in": "登录",
+    "Sign out": "退出登录",
+    "Not signed in": "未登录",
+    "Continue login": "继续登录",
+    "Provided by viewer": "由查看器提供"
 }

package/dist/viewer/plugin-view.d.ts

@@ -1,3 +1,2 @@
 import { type PluginView } from "../plugins/view.js";
-/** Authored HTML cannot run scripts; auto height permits only a nonce-protected reporter. */
 export declare const pluginViewHtml: (input: PluginView) => string;

package/dist/viewer/plugin-view.js

@@ -1,28 +1,6 @@
-import { escapeHtml } from "../core/html.js";
 import { validatePluginView } from "../plugins/view.js";
 import { pluginBlocksHtml } from "./plugin-blocks.js";
-/** Authored HTML cannot run scripts; auto height permits only a nonce-protected reporter. */
 export const pluginViewHtml = (input) => {
     const view = validatePluginView(input);
-    if (view.format === "blocks")
-        return `<div class="plugin-blocks">${pluginBlocksHtml(view.blocks)}</div>`;
-    if (view.format === "html") {
-        const auto = view.height === "auto";
-        const nonce = auto ? crypto.randomUUID() : "";
-        const script = auto
-            ? `<script nonce="${nonce}">(()=>{const report=()=>parent.postMessage({doocPluginHeight:Math.ceil(document.body.getBoundingClientRect().height)},"*");new ResizeObserver(report).observe(document.body);report();})()</script>`
-            : "";
-        const source = `<!doctype html><html><head><meta charset="utf-8"><meta http-equiv="Content-Security-Policy" content="default-src 'none'; style-src 'unsafe-inline';${auto ? ` script-src 'nonce-${nonce}';` : ""} base-uri 'none'; form-action 'none'"><meta name="referrer" content="no-referrer"><style>html,body{margin:0}body{display:flow-root}</style></head><body>${view.html}${script}</body></html>`;
-        return `<iframe title="Plugin content" sandbox="${auto ? "allow-scripts" : ""}"${auto ? ' data-plugin-auto-height=""' : ""} referrerpolicy="no-referrer" srcdoc="${escapeHtml(source)}" style="width:100%;height:${auto ? 120 : (view.height ?? 240)}px;border:0"></iframe>`;
-    }
-    switch (view.preset) {
-        case "card":
-            return `<article class="plugin-card"><strong>${escapeHtml(view.title)}</strong><p>${escapeHtml(view.text)}</p></article>`;
-        case "list":
-            return `<ul>${view.items.map((item) => `<li>${escapeHtml(item)}</li>`).join("")}</ul>`;
-        case "table":
-            return `<table><thead><tr>${view.headers.map((header) => `<th scope="col">${escapeHtml(header)}</th>`).join("")}</tr></thead><tbody>${view.rows.map((row) => `<tr>${row.map((cell) => `<td>${escapeHtml(cell === null ? "" : String(cell))}</td>`).join("")}</tr>`).join("")}</tbody></table>`;
-        case "code":
-            return `<pre><code>${escapeHtml(JSON.stringify(view.value, null, 2))}</code></pre>`;
-    }
+    return `<div class="plugin-blocks">${pluginBlocksHtml(view.blocks)}</div>`;
 };

package/dist/viewer/plugins.d.ts

@@ -1,8 +1,12 @@
 import type { IncomingMessage, ServerResponse } from "node:http";
+import type { PluginCredentialStore } from "../plugins/local-storage.js";
 import type { DataPlugin } from "../plugins/types.js";
 export type { GitWorkspace, StorageWorkspace, WorkspaceSource } from "../core/workspace.js";
 import { type ViewerPluginRegistry, type ViewerPlugins } from "./plugin-config.js";
 export type { GitContext, GitOrigin, GitOriginAction, GitOriginState, GitPullRequest, } from "./git-types.js";
 export type { PluginMock, ViewerPluginRegistry, ViewerPlugins, ViewerRuntime, } from "./plugin-config.js";
 /** Local viewer only: the cookie identifies a browser session, never a document-supplied user. */
-export declare const createPluginHandler: (plugins: readonly DataPlugin[], presentation?: Pick<ViewerPlugins, "mocks">) => ((req: IncomingMessage, res: ServerResponse) => Promise<boolean>) & ViewerPluginRegistry;
+export declare const createPluginHandler: (plugins: readonly DataPlugin[], presentation?: Pick<ViewerPlugins, "mocks">, credentials?: PluginCredentialStore) => ((req: IncomingMessage, res: ServerResponse) => Promise<boolean>) & ViewerPluginRegistry & {
+    loginLink: (plugin: string, origin: string) => string;
+    configuration: () => ViewerPlugins;
+};