@floegence/redevplugin-ui 0.0.0-dev → 0.1.6

package/dist/index.d.ts

@@ -7,9 +7,9 @@ export type BridgeLifecycleEvent = {
 } | {
     type: "dispose";
 };
-export declare const pluginPlatformErrorCodes: readonly ["PLUGIN_INVALID_REQUEST", "PLUGIN_MANIFEST_INVALID", "PLUGIN_PACKAGE_INVALID", "PLUGIN_PACKAGE_TOO_LARGE", "PLUGIN_PACKAGE_PATH_FORBIDDEN", "PLUGIN_SIGNATURE_INVALID", "PLUGIN_TRUST_STATE_DENIED", "PLUGIN_TRUST_VERIFICATION_REQUIRED", "PLUGIN_TRUST_VERIFICATION_INVALID", "PLUGIN_DISABLED", "PLUGIN_DISABLED_BY_POLICY", "PLUGIN_PERMISSION_DENIED", "PLUGIN_CONFIRMATION_REQUIRED", "PLUGIN_CONFIRMATION_INVALID", "PLUGIN_TOKEN_EXPIRED", "PLUGIN_TOKEN_REPLAY", "PLUGIN_GATEWAY_TOKEN_INVALID", "PLUGIN_GATEWAY_TOKEN_REPLAYED", "PLUGIN_GATEWAY_TOKEN_CHANNEL_MISMATCH", "PLUGIN_ASSET_TICKET_INVALID", "PLUGIN_ASSET_SESSION_INVALID", "PLUGIN_STREAM_TICKET_INVALID", "PLUGIN_STREAM_CANCELLED", "PLUGIN_LEASE_INVALID", "PLUGIN_LEASE_REPLAYED", "PLUGIN_GRANT_INVALID", "PLUGIN_STORAGE_QUOTA_EXCEEDED", "PLUGIN_OPERATION_BLOCKED", "PLUGIN_OPERATION_NOT_FOUND", "PLUGIN_OPERATION_NOT_CANCELABLE", "PLUGIN_NETWORK_TARGET_DENIED", "PLUGIN_NETWORK_RATE_LIMITED", "PLUGIN_RUNTIME_UNAVAILABLE", "PLUGIN_RUNTIME_VERSION_MISMATCH", "PLUGIN_JSON_LIMIT_EXCEEDED", "PLUGIN_CONTRACT_MISMATCH", "PLUGIN_CSRF_REQUIRED", "PLUGIN_RETAINED_DATA_CLEANUP_FAILED", "PLUGIN_RETAINED_DATA_BIND_FAILED"];
-export declare const pluginBridgeErrorCodes: readonly ["PLUGIN_INVALID_REQUEST", "PLUGIN_MANIFEST_INVALID", "PLUGIN_PACKAGE_INVALID", "PLUGIN_PACKAGE_TOO_LARGE", "PLUGIN_PACKAGE_PATH_FORBIDDEN", "PLUGIN_SIGNATURE_INVALID", "PLUGIN_TRUST_STATE_DENIED", "PLUGIN_TRUST_VERIFICATION_REQUIRED", "PLUGIN_TRUST_VERIFICATION_INVALID", "PLUGIN_DISABLED", "PLUGIN_DISABLED_BY_POLICY", "PLUGIN_PERMISSION_DENIED", "PLUGIN_CONFIRMATION_REQUIRED", "PLUGIN_CONFIRMATION_INVALID", "PLUGIN_TOKEN_EXPIRED", "PLUGIN_TOKEN_REPLAY", "PLUGIN_GATEWAY_TOKEN_INVALID", "PLUGIN_GATEWAY_TOKEN_REPLAYED", "PLUGIN_GATEWAY_TOKEN_CHANNEL_MISMATCH", "PLUGIN_ASSET_TICKET_INVALID", "PLUGIN_ASSET_SESSION_INVALID", "PLUGIN_STREAM_TICKET_INVALID", "PLUGIN_STREAM_CANCELLED", "PLUGIN_LEASE_INVALID", "PLUGIN_LEASE_REPLAYED", "PLUGIN_GRANT_INVALID", "PLUGIN_STORAGE_QUOTA_EXCEEDED", "PLUGIN_OPERATION_BLOCKED", "PLUGIN_OPERATION_NOT_FOUND", "PLUGIN_OPERATION_NOT_CANCELABLE", "PLUGIN_NETWORK_TARGET_DENIED", "PLUGIN_NETWORK_RATE_LIMITED", "PLUGIN_RUNTIME_UNAVAILABLE", "PLUGIN_RUNTIME_VERSION_MISMATCH", "PLUGIN_JSON_LIMIT_EXCEEDED", "PLUGIN_CONTRACT_MISMATCH", "PLUGIN_CSRF_REQUIRED", "PLUGIN_RETAINED_DATA_CLEANUP_FAILED", "PLUGIN_RETAINED_DATA_BIND_FAILED", "PLUGIN_CONFIRMATION_REJECTED", "PLUGIN_BRIDGE_TIMEOUT", "PLUGIN_BRIDGE_DISPOSED", "PLUGIN_BRIDGE_HANDSHAKE_FAILED", "PLUGIN_BRIDGE_HANDSHAKE_REQUIRED"];
-export declare const pluginClientErrorCodes: readonly ["PLUGIN_INVALID_REQUEST", "PLUGIN_MANIFEST_INVALID", "PLUGIN_PACKAGE_INVALID", "PLUGIN_PACKAGE_TOO_LARGE", "PLUGIN_PACKAGE_PATH_FORBIDDEN", "PLUGIN_SIGNATURE_INVALID", "PLUGIN_TRUST_STATE_DENIED", "PLUGIN_TRUST_VERIFICATION_REQUIRED", "PLUGIN_TRUST_VERIFICATION_INVALID", "PLUGIN_DISABLED", "PLUGIN_DISABLED_BY_POLICY", "PLUGIN_PERMISSION_DENIED", "PLUGIN_CONFIRMATION_REQUIRED", "PLUGIN_CONFIRMATION_INVALID", "PLUGIN_TOKEN_EXPIRED", "PLUGIN_TOKEN_REPLAY", "PLUGIN_GATEWAY_TOKEN_INVALID", "PLUGIN_GATEWAY_TOKEN_REPLAYED", "PLUGIN_GATEWAY_TOKEN_CHANNEL_MISMATCH", "PLUGIN_ASSET_TICKET_INVALID", "PLUGIN_ASSET_SESSION_INVALID", "PLUGIN_STREAM_TICKET_INVALID", "PLUGIN_STREAM_CANCELLED", "PLUGIN_LEASE_INVALID", "PLUGIN_LEASE_REPLAYED", "PLUGIN_GRANT_INVALID", "PLUGIN_STORAGE_QUOTA_EXCEEDED", "PLUGIN_OPERATION_BLOCKED", "PLUGIN_OPERATION_NOT_FOUND", "PLUGIN_OPERATION_NOT_CANCELABLE", "PLUGIN_NETWORK_TARGET_DENIED", "PLUGIN_NETWORK_RATE_LIMITED", "PLUGIN_RUNTIME_UNAVAILABLE", "PLUGIN_RUNTIME_VERSION_MISMATCH", "PLUGIN_JSON_LIMIT_EXCEEDED", "PLUGIN_CONTRACT_MISMATCH", "PLUGIN_CSRF_REQUIRED", "PLUGIN_RETAINED_DATA_CLEANUP_FAILED", "PLUGIN_RETAINED_DATA_BIND_FAILED", "PLUGIN_CONFIRMATION_REJECTED", "PLUGIN_BRIDGE_TIMEOUT", "PLUGIN_BRIDGE_DISPOSED", "PLUGIN_BRIDGE_HANDSHAKE_FAILED", "PLUGIN_BRIDGE_HANDSHAKE_REQUIRED", "PLUGIN_PLATFORM_REQUEST_FAILED", "PLUGIN_STREAM_FAILED"];
+export declare const pluginPlatformErrorCodes: readonly ["PLUGIN_INVALID_REQUEST", "PLUGIN_MANIFEST_INVALID", "PLUGIN_PACKAGE_INVALID", "PLUGIN_PACKAGE_TOO_LARGE", "PLUGIN_PACKAGE_PATH_FORBIDDEN", "PLUGIN_SIGNATURE_INVALID", "PLUGIN_TRUST_STATE_DENIED", "PLUGIN_TRUST_VERIFICATION_REQUIRED", "PLUGIN_TRUST_VERIFICATION_INVALID", "PLUGIN_RELEASE_REF_VERIFICATION_FAILED", "PLUGIN_RELEASE_REF_POLICY_DENIED", "PLUGIN_DISABLED", "PLUGIN_DISABLED_BY_POLICY", "PLUGIN_PERMISSION_DENIED", "PLUGIN_CONFIRMATION_REQUIRED", "PLUGIN_CONFIRMATION_INVALID", "PLUGIN_TOKEN_EXPIRED", "PLUGIN_TOKEN_REPLAY", "PLUGIN_GATEWAY_TOKEN_INVALID", "PLUGIN_GATEWAY_TOKEN_REPLAYED", "PLUGIN_GATEWAY_TOKEN_CHANNEL_MISMATCH", "PLUGIN_ASSET_TICKET_INVALID", "PLUGIN_ASSET_SESSION_INVALID", "PLUGIN_STREAM_TICKET_INVALID", "PLUGIN_STREAM_CANCELLED", "PLUGIN_LEASE_INVALID", "PLUGIN_LEASE_REPLAYED", "PLUGIN_GRANT_INVALID", "PLUGIN_STORAGE_QUOTA_EXCEEDED", "PLUGIN_OPERATION_BLOCKED", "PLUGIN_OPERATION_NOT_FOUND", "PLUGIN_OPERATION_NOT_CANCELABLE", "PLUGIN_NETWORK_TARGET_DENIED", "PLUGIN_NETWORK_RATE_LIMITED", "PLUGIN_RUNTIME_UNAVAILABLE", "PLUGIN_RUNTIME_VERSION_MISMATCH", "PLUGIN_JSON_LIMIT_EXCEEDED", "PLUGIN_CONTRACT_MISMATCH", "PLUGIN_CSRF_REQUIRED", "PLUGIN_RETAINED_DATA_CLEANUP_FAILED", "PLUGIN_RETAINED_DATA_BIND_FAILED"];
+export declare const pluginBridgeErrorCodes: readonly ["PLUGIN_INVALID_REQUEST", "PLUGIN_MANIFEST_INVALID", "PLUGIN_PACKAGE_INVALID", "PLUGIN_PACKAGE_TOO_LARGE", "PLUGIN_PACKAGE_PATH_FORBIDDEN", "PLUGIN_SIGNATURE_INVALID", "PLUGIN_TRUST_STATE_DENIED", "PLUGIN_TRUST_VERIFICATION_REQUIRED", "PLUGIN_TRUST_VERIFICATION_INVALID", "PLUGIN_RELEASE_REF_VERIFICATION_FAILED", "PLUGIN_RELEASE_REF_POLICY_DENIED", "PLUGIN_DISABLED", "PLUGIN_DISABLED_BY_POLICY", "PLUGIN_PERMISSION_DENIED", "PLUGIN_CONFIRMATION_REQUIRED", "PLUGIN_CONFIRMATION_INVALID", "PLUGIN_TOKEN_EXPIRED", "PLUGIN_TOKEN_REPLAY", "PLUGIN_GATEWAY_TOKEN_INVALID", "PLUGIN_GATEWAY_TOKEN_REPLAYED", "PLUGIN_GATEWAY_TOKEN_CHANNEL_MISMATCH", "PLUGIN_ASSET_TICKET_INVALID", "PLUGIN_ASSET_SESSION_INVALID", "PLUGIN_STREAM_TICKET_INVALID", "PLUGIN_STREAM_CANCELLED", "PLUGIN_LEASE_INVALID", "PLUGIN_LEASE_REPLAYED", "PLUGIN_GRANT_INVALID", "PLUGIN_STORAGE_QUOTA_EXCEEDED", "PLUGIN_OPERATION_BLOCKED", "PLUGIN_OPERATION_NOT_FOUND", "PLUGIN_OPERATION_NOT_CANCELABLE", "PLUGIN_NETWORK_TARGET_DENIED", "PLUGIN_NETWORK_RATE_LIMITED", "PLUGIN_RUNTIME_UNAVAILABLE", "PLUGIN_RUNTIME_VERSION_MISMATCH", "PLUGIN_JSON_LIMIT_EXCEEDED", "PLUGIN_CONTRACT_MISMATCH", "PLUGIN_CSRF_REQUIRED", "PLUGIN_RETAINED_DATA_CLEANUP_FAILED", "PLUGIN_RETAINED_DATA_BIND_FAILED", "PLUGIN_CONFIRMATION_REJECTED", "PLUGIN_BRIDGE_TIMEOUT", "PLUGIN_BRIDGE_DISPOSED", "PLUGIN_BRIDGE_HANDSHAKE_FAILED", "PLUGIN_BRIDGE_HANDSHAKE_REQUIRED"];
+export declare const pluginClientErrorCodes: readonly ["PLUGIN_INVALID_REQUEST", "PLUGIN_MANIFEST_INVALID", "PLUGIN_PACKAGE_INVALID", "PLUGIN_PACKAGE_TOO_LARGE", "PLUGIN_PACKAGE_PATH_FORBIDDEN", "PLUGIN_SIGNATURE_INVALID", "PLUGIN_TRUST_STATE_DENIED", "PLUGIN_TRUST_VERIFICATION_REQUIRED", "PLUGIN_TRUST_VERIFICATION_INVALID", "PLUGIN_RELEASE_REF_VERIFICATION_FAILED", "PLUGIN_RELEASE_REF_POLICY_DENIED", "PLUGIN_DISABLED", "PLUGIN_DISABLED_BY_POLICY", "PLUGIN_PERMISSION_DENIED", "PLUGIN_CONFIRMATION_REQUIRED", "PLUGIN_CONFIRMATION_INVALID", "PLUGIN_TOKEN_EXPIRED", "PLUGIN_TOKEN_REPLAY", "PLUGIN_GATEWAY_TOKEN_INVALID", "PLUGIN_GATEWAY_TOKEN_REPLAYED", "PLUGIN_GATEWAY_TOKEN_CHANNEL_MISMATCH", "PLUGIN_ASSET_TICKET_INVALID", "PLUGIN_ASSET_SESSION_INVALID", "PLUGIN_STREAM_TICKET_INVALID", "PLUGIN_STREAM_CANCELLED", "PLUGIN_LEASE_INVALID", "PLUGIN_LEASE_REPLAYED", "PLUGIN_GRANT_INVALID", "PLUGIN_STORAGE_QUOTA_EXCEEDED", "PLUGIN_OPERATION_BLOCKED", "PLUGIN_OPERATION_NOT_FOUND", "PLUGIN_OPERATION_NOT_CANCELABLE", "PLUGIN_NETWORK_TARGET_DENIED", "PLUGIN_NETWORK_RATE_LIMITED", "PLUGIN_RUNTIME_UNAVAILABLE", "PLUGIN_RUNTIME_VERSION_MISMATCH", "PLUGIN_JSON_LIMIT_EXCEEDED", "PLUGIN_CONTRACT_MISMATCH", "PLUGIN_CSRF_REQUIRED", "PLUGIN_RETAINED_DATA_CLEANUP_FAILED", "PLUGIN_RETAINED_DATA_BIND_FAILED", "PLUGIN_CONFIRMATION_REJECTED", "PLUGIN_BRIDGE_TIMEOUT", "PLUGIN_BRIDGE_DISPOSED", "PLUGIN_BRIDGE_HANDSHAKE_FAILED", "PLUGIN_BRIDGE_HANDSHAKE_REQUIRED", "PLUGIN_PLATFORM_REQUEST_FAILED", "PLUGIN_STREAM_FAILED"];
 export type PluginPlatformErrorCode = typeof pluginPlatformErrorCodes[number];
 export type PluginBridgeErrorCode = typeof pluginBridgeErrorCodes[number];
 export type PluginClientErrorCode = typeof pluginClientErrorCodes[number];
@@ -281,6 +281,9 @@ export type PluginCompatibilityMatrix = {
     wasm_abi_version: string;
     manifest_schema_version: string;
     package_signature_schema_version: string;
+    release_metadata_schema_version: string;
+    source_policy_schema_version: string;
+    source_revocations_schema_version: string;
     token_ticket_schema_version: string;
     bridge_schema_version: string;
     target_classifier_version: string;
@@ -304,10 +307,50 @@ export type PluginCompatibilityManifest = {
     contracts: PluginContractArtifact[];
     [key: string]: unknown;
 };
-export type PluginTrustState = "bundled" | "verified" | "unsigned_local" | "untrusted" | "needs_review" | "blocked_security";
+export type PluginTrustState = "verified" | "unsigned_local" | "untrusted" | "needs_review" | "trust_unavailable" | "blocked_security";
 export type PluginEnableState = "disabled" | "enabled" | "disabled_by_policy";
 export type PluginRetainedDataRecordState = "retained" | "expired" | "bound" | "deleted" | "delete_failed_retryable";
 export type PluginRetainedDataState = "none" | PluginRetainedDataRecordState;
+export type PluginTrustHashSet = {
+    package_sha256: string;
+    manifest_sha256: string;
+    entries_sha256: string;
+};
+export type PluginVerifiedSignature = {
+    algorithm: string;
+    key_id: string;
+};
+export type PluginTrustAssessment = {
+    trust_state: PluginTrustState | string;
+    reason_codes?: string[];
+    verified_hashes: PluginTrustHashSet;
+    verified_signature?: PluginVerifiedSignature;
+    trust_assessment_epoch?: string;
+    policy_epoch?: string;
+    revocation_epoch?: string;
+    metadata?: Record<string, string>;
+};
+export type PluginLocalImportProvenance = {
+    import_id: string;
+    distribution: "local_import" | string;
+    policy_epoch: string;
+    unsigned_policy: "dev_only" | "review_required" | "block" | string;
+    assessed_at: string;
+};
+export type PluginVersionRecord = {
+    version: string;
+    active_fingerprint: string;
+    package_hash: string;
+    manifest_hash: string;
+    entries_hash: string;
+    trust_state: PluginTrustState | string;
+    trust_assessment: PluginTrustAssessment;
+    source_policy_snapshot_hash?: string;
+    source_policy_snapshot?: Record<string, unknown>;
+    local_import_provenance?: PluginLocalImportProvenance;
+    metadata?: Record<string, string>;
+    [key: string]: unknown;
+};
 export type PluginRecord = {
     plugin_instance_id: string;
     publisher_id?: string;
@@ -318,6 +361,10 @@ export type PluginRecord = {
     manifest_hash?: string;
     entries_hash?: string;
     trust_state: PluginTrustState | string;
+    trust_assessment: PluginTrustAssessment;
+    source_policy_snapshot_hash?: string;
+    source_policy_snapshot?: Record<string, unknown>;
+    local_import_provenance?: PluginLocalImportProvenance;
     enable_state: PluginEnableState | string;
     disabled_reason?: string;
     retained_data_state?: PluginRetainedDataState | string;
@@ -326,7 +373,7 @@ export type PluginRecord = {
     revoke_epoch?: number;
     manifest?: Record<string, unknown>;
     package_entries?: Array<Record<string, unknown>>;
-    version_history?: Array<Record<string, unknown>>;
+    version_history?: PluginVersionRecord[];
     installed_at?: string;
     enabled_at?: string;
     updated_at?: string;
@@ -334,15 +381,27 @@ export type PluginRecord = {
     metadata?: Record<string, string>;
     [key: string]: unknown;
 };
-export type PluginInstallRequest = {
-    package_base64: string;
-    trust_state?: PluginTrustState | string;
+export type PluginPackageHashSet = {
+    package_sha256: string;
+    manifest_sha256: string;
+    entries_sha256: string;
+};
+export type PluginReleaseRef = {
+    source_id: string;
+    release_metadata_ref: string;
+    release_metadata_sha256: string;
+    publisher_id: string;
+    plugin_id: string;
+    version: string;
+    expected_hashes: PluginPackageHashSet;
+};
+export type PluginInstallReleaseRefRequest = {
+    release_ref: PluginReleaseRef;
     plugin_instance_id?: string;
 };
-export type PluginUpdateRequest = {
+export type PluginUpdateReleaseRefRequest = {
     plugin_instance_id: string;
-    package_base64: string;
-    trust_state?: PluginTrustState | string;
+    release_ref: PluginReleaseRef;
 };
 export type PluginDowngradeRequest = {
     plugin_instance_id: string;
@@ -618,8 +677,8 @@ export declare class PluginPlatformClient {
     constructor(options?: PluginPlatformClientOptions);
     catalog(): Promise<PluginCatalogResult>;
     getCompatibility(): Promise<PluginCompatibilityManifest>;
-    installPlugin(request: PluginInstallRequest): Promise<PluginRecord>;
-    updatePlugin(request: PluginUpdateRequest): Promise<PluginRecord>;
+    installReleaseRef(request: PluginInstallReleaseRefRequest): Promise<PluginRecord>;
+    updateReleaseRef(request: PluginUpdateReleaseRefRequest): Promise<PluginRecord>;
     downgradePlugin(request: PluginDowngradeRequest): Promise<PluginRecord>;
     enablePlugin(pluginInstanceIdOrRequest: string | PluginEnableRequest): Promise<PluginRecord>;
     disablePlugin(request: PluginDisableRequest): Promise<PluginRecord>;

package/dist/index.js

@@ -8,6 +8,8 @@ export const pluginPlatformErrorCodes = [
     "PLUGIN_TRUST_STATE_DENIED",
     "PLUGIN_TRUST_VERIFICATION_REQUIRED",
     "PLUGIN_TRUST_VERIFICATION_INVALID",
+    "PLUGIN_RELEASE_REF_VERIFICATION_FAILED",
+    "PLUGIN_RELEASE_REF_POLICY_DENIED",
     "PLUGIN_DISABLED",
     "PLUGIN_DISABLED_BY_POLICY",
     "PLUGIN_PERMISSION_DENIED",
@@ -241,7 +243,7 @@ export class PluginBridgeClient {
         this.#lifecycleHandlers.clear();
     }
     #handleMessage(event) {
-        if (this.#disposed || event.origin !== this.bootstrap.parentOrigin) {
+        if (this.#disposed || event.origin !== this.bootstrap.parentOrigin || event.source !== this.#target) {
             return;
         }
         const data = event.data;
@@ -297,11 +299,11 @@ export class PluginPlatformClient {
     getCompatibility() {
         return this.#getJSON("/_redevplugin/api/plugins/platform/compatibility");
     }
-    installPlugin(request) {
-        return this.#postJSON("/_redevplugin/api/plugins/install", request);
+    installReleaseRef(request) {
+        return this.#postJSON("/_redevplugin/api/plugins/install-release-ref", request);
     }
-    updatePlugin(request) {
-        return this.#postJSON("/_redevplugin/api/plugins/update", request);
+    updateReleaseRef(request) {
+        return this.#postJSON("/_redevplugin/api/plugins/update-release-ref", request);
     }
     downgradePlugin(request) {
         return this.#postJSON("/_redevplugin/api/plugins/downgrade", request);
@@ -503,10 +505,7 @@ export class PluginSurfaceHost {
         this.#postToIframe({ type: "redevplugin.bridge.lifecycle", event: { type: "dispose" } });
     }
     async #handleMessage(event) {
-        if (this.#disposed || event.origin !== this.iframeOrigin) {
-            return;
-        }
-        if (event.source != null && event.source !== this.#iframeWindow) {
+        if (this.#disposed || event.origin !== this.iframeOrigin || event.source !== this.#iframeWindow) {
             return;
         }
         const data = event.data;

package/dist/local-import.d.ts

@@ -0,0 +1,15 @@
+import { type PluginPlatformClientOptions, type PluginRecord } from "./index.js";
+export type PluginImportLocalPackageRequest = {
+    package_base64: string;
+    plugin_instance_id?: string;
+};
+export type PluginUpdateLocalPackageRequest = {
+    plugin_instance_id: string;
+    package_base64: string;
+};
+export declare class PluginLocalImportClient {
+    #private;
+    constructor(options?: PluginPlatformClientOptions);
+    importLocalPackage(request: PluginImportLocalPackageRequest): Promise<PluginRecord>;
+    updateLocalPackage(request: PluginUpdateLocalPackageRequest): Promise<PluginRecord>;
+}

package/dist/local-import.js

@@ -0,0 +1,76 @@
+import { PluginBridgeError, } from "./index.js";
+export class PluginLocalImportClient {
+    #fetch;
+    #apiBaseURL;
+    #ownerSessionHashHeader;
+    constructor(options = {}) {
+        this.#fetch = options.fetch ?? defaultFetch();
+        this.#apiBaseURL = trimTrailingSlash(options.apiBaseURL ?? "");
+        this.#ownerSessionHashHeader = options.ownerSessionHashHeader;
+    }
+    importLocalPackage(request) {
+        return this.#postJSON("/_redevplugin/api/plugins/local-import/install", request);
+    }
+    updateLocalPackage(request) {
+        return this.#postJSON("/_redevplugin/api/plugins/local-import/update", request);
+    }
+    async #postJSON(path, body) {
+        const response = await this.#fetch(this.#apiBaseURL + path, {
+            method: "POST",
+            headers: this.#headers(),
+            body: JSON.stringify(body),
+            credentials: "same-origin",
+        });
+        return readHostEnvelope(response);
+    }
+    #headers() {
+        const headers = {
+            "Accept": "application/json",
+            "Content-Type": "application/json",
+        };
+        if (this.#ownerSessionHashHeader) {
+            headers["X-ReDevPlugin-Owner-Session-Hash"] = this.#ownerSessionHashHeader;
+        }
+        return headers;
+    }
+}
+function defaultFetch() {
+    const fetchLike = globalThis.fetch;
+    if (!fetchLike) {
+        throw new Error("fetch is required when globalThis.fetch is unavailable");
+    }
+    return fetchLike.bind(globalThis);
+}
+function trimTrailingSlash(value) {
+    return value.endsWith("/") ? value.slice(0, -1) : value;
+}
+async function readHostEnvelope(response) {
+    const raw = await response.json();
+    if (!isHostEnvelope(raw)) {
+        throw new PluginBridgeError("PLUGIN_CONTRACT_MISMATCH", `Plugin platform endpoint returned an invalid envelope with HTTP ${response.status}`);
+    }
+    const envelope = raw;
+    if (response.ok && envelope.ok) {
+        return envelope.data;
+    }
+    if (envelope.ok) {
+        throw new PluginBridgeError("PLUGIN_PLATFORM_REQUEST_FAILED", `Plugin platform request failed with HTTP ${response.status}`, envelope.data);
+    }
+    const errorCode = envelope.error_code ?? "PLUGIN_PLATFORM_REQUEST_FAILED";
+    const message = envelope.error ?? "Plugin platform request failed";
+    throw new PluginBridgeError(errorCode, message, envelope.data, envelope.error_details ?? envelope.data);
+}
+function isHostEnvelope(value) {
+    if (!isRecord(value) || typeof value.ok !== "boolean") {
+        return false;
+    }
+    if (value.ok) {
+        return true;
+    }
+    return ((value.error === undefined || typeof value.error === "string") &&
+        (value.error_code === undefined || typeof value.error_code === "string") &&
+        (value.error_details === undefined || isRecord(value.error_details)));
+}
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@floegence/redevplugin-ui",
-  "version": "0.0.0-dev",
+  "version": "0.1.6",
   "type": "module",
   "repository": {
     "type": "git",
@@ -9,7 +9,19 @@
   },
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
-  "files": ["dist"],
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    },
+    "./local-import": {
+      "types": "./dist/local-import.d.ts",
+      "default": "./dist/local-import.js"
+    }
+  },
+  "files": [
+    "dist"
+  ],
   "publishConfig": {
     "access": "public"
   },