@floegence/redevplugin-ui 0.2.1 → 0.3.0

package/dist/surface.js

@@ -1,4 +1,4 @@
-import { PluginBridgeError } from "./errors.js";
+import { PluginBridgeError, pluginBridgeErrorCodes } from "./errors.js";
 import { pluginUIProtocolVersion } from "./contracts.gen.js";
 import { opaqueSurfaceAllowedTags, opaqueSurfaceGlobalAttributes, opaqueSurfaceRenderLimits, opaqueSurfaceSafeInputTypes, opaqueSurfaceTagAttributes, } from "./opaque-surface-policy.gen.js";
 import { defaultFetch, hasAllowedKeys, hasExactKeys, isRecord, readHostEnvelope, } from "./http.js";
@@ -9,9 +9,32 @@ const opaquePluginBridgeGlobalKey = "__redevpluginWorkerBridgeV2";
 const maxPendingPluginBridgeRequests = 256;
 const maxPluginBridgeMessageBytes = 256 * 1024;
 const maxRetainedPluginStreamHandles = 128;
+const streamCredentialInvalidatingErrorCodes = new Set([
+    "PLUGIN_BRIDGE_DISPOSED",
+    "PLUGIN_BRIDGE_HANDSHAKE_FAILED",
+    "PLUGIN_BRIDGE_HANDSHAKE_REQUIRED",
+    "PLUGIN_BRIDGE_TIMEOUT",
+    "PLUGIN_CONTRACT_MISMATCH",
+    "PLUGIN_GATEWAY_TOKEN_CHANNEL_MISMATCH",
+    "PLUGIN_GATEWAY_TOKEN_INVALID",
+    "PLUGIN_GATEWAY_TOKEN_REPLAYED",
+    "PLUGIN_GRANT_INVALID",
+    "PLUGIN_LEASE_INVALID",
+    "PLUGIN_LEASE_REPLAYED",
+    "PLUGIN_STATE_VERSION_MISMATCH",
+    "PLUGIN_STREAM_CANCELLED",
+    "PLUGIN_STREAM_TICKET_INVALID",
+    "PLUGIN_TOKEN_EXPIRED",
+    "PLUGIN_TOKEN_REPLAY",
+]);
 const maxOpaqueSurfaceLazyAssets = 128;
 const maxOpaqueSurfaceLazyBytes = 32 * 1024 * 1024;
 const maxConcurrentAssetReads = 4;
+const pluginBridgeErrorCodeSet = new Set(pluginBridgeErrorCodes);
+const hostCapabilityIDPattern = new RegExp("^[A-Za-z0-9][A-Za-z0-9._-]*$");
+const canonicalSemverPattern = new RegExp("^(0|[1-9][0-9]*)\\.(0|[1-9][0-9]*)\\.(0|[1-9][0-9]*)(?:-(?:(?:0|[1-9][0-9]*|[0-9A-Za-z-]*[A-Za-z-][0-9A-Za-z-]*)(?:\\.(?:0|[1-9][0-9]*|[0-9A-Za-z-]*[A-Za-z-][0-9A-Za-z-]*))*))?(?:\\+[0-9A-Za-z-]+(?:\\.[0-9A-Za-z-]+)*)?$");
+const lowercaseSHA256Pattern = new RegExp("^[0-9a-f]{64}$");
+const businessErrorCodePattern = new RegExp("^[A-Z][A-Z0-9_]*$");
 export class PluginBridgeClient {
     surfaceHandle;
     timeoutMs;
@@ -80,6 +103,19 @@ export class PluginBridgeClient {
             stream_handle: streamHandle,
         });
     }
+    cancelOperation(operationID, reason) {
+        this.#assertActive();
+        if (!validOpaqueHandle(operationID, "operation") || (reason !== undefined && (typeof reason !== "string" || reason.length > 256))) {
+            throw new PluginBridgeError("PLUGIN_INVALID_REQUEST", "Plugin operation cancellation is invalid");
+        }
+        const id = this.#requestID("operation");
+        return this.#request(id, removeUndefined({
+            type: "redevplugin.bridge.operation.cancel",
+            id,
+            operation_id: operationID,
+            reason,
+        }));
+    }
     render(tree) {
         this.#assertActive();
         const id = this.#requestID("render");
@@ -176,16 +212,20 @@ export class PluginBridgeClient {
         if (this.#disposed || !messageWithinLimit(event.data))
             return;
         const data = event.data;
-        if (isBridgeResponse(data)) {
+        if (isBridgeResponseCandidate(data)) {
             const pending = this.#pending.get(data.id);
             if (!pending)
                 return;
             this.#pending.delete(data.id);
             clearTimeout(pending.timer);
+            if (!isBridgeResponse(data)) {
+                pending.reject(new PluginBridgeError("PLUGIN_CONTRACT_MISMATCH", `Plugin bridge response ${data.id} is invalid`));
+                return;
+            }
             if (data.ok)
                 pending.resolve(data.data);
             else
-                pending.reject(new PluginBridgeError(data.error_code, data.error));
+                pending.reject(new PluginBridgeError(data.error_code, data.error, undefined, data.error_details));
             return;
         }
         if (isLifecycleMessage(data)) {
@@ -465,7 +505,7 @@ export function createOpaquePluginBootstrapHTML(options = {}) {
   let currentDocument;
   let workerReady = false;
   const pendingWorkerRequests = new Set();
-  const requestSequence = { rpc: 0, stream: 0, render: 0 };
+  const requestSequence = { rpc: 0, stream: 0, render: 0, operation: 0 };
   let renderWindowStartedAt = 0;
   let renderCount = 0;
   const pendingAssets = new Map();
@@ -735,7 +775,7 @@ export function createOpaquePluginBootstrapHTML(options = {}) {
   const validCall = (value) => exactKeys(value, ["type", "request"]) && value.type === "redevplugin.bridge.call" && isRecord(value.request) && Object.keys(value.request).every((key) => ["id", "method", "params"].includes(key)) && typeof value.request.id === "string" && value.request.id.length <= 128 && typeof value.request.method === "string" && /^[A-Za-z0-9._:-]{1,256}$/.test(value.request.method) && (value.request.params === undefined || isRecord(value.request.params));
   const requestID = (value, expectedKind) => {
     if (typeof value !== "string") return undefined;
-    const match = /^(rpc|stream|render)_([1-9][0-9]{0,15})$/.exec(value);
+    const match = /^(rpc|stream|render|operation)_([1-9][0-9]{0,15})$/.exec(value);
     if (!match || match[1] !== expectedKind) return undefined;
     const sequence = Number(match[2]);
     return Number.isSafeInteger(sequence) ? { kind: match[1], sequence } : undefined;
@@ -783,6 +823,13 @@ export function createOpaquePluginBootstrapHTML(options = {}) {
       sendParent(message);
       return;
     }
+    if (isRecord(message) && Object.keys(message).every((key) => ["type", "id", "operation_id", "reason"].includes(key)) &&
+        message.type === "redevplugin.bridge.operation.cancel" && typeof message.id === "string" &&
+        validOpaqueHandle(message.operation_id, "operation") && (message.reason === undefined || (typeof message.reason === "string" && message.reason.length <= 256))) {
+      if (!acceptWorkerRequest(message.id, "operation")) return rejectWorkerRequest(message.id, "duplicate, replayed, or excessive plugin request");
+      sendParent(message);
+      return;
+    }
     if (exactKeys(message, ["type", "id", "tree"]) && message.type === "redevplugin.ui.render" && typeof message.id === "string") {
       if (!acceptWorkerRequest(message.id, "render")) return rejectWorkerRequest(message.id, "duplicate, replayed, or excessive plugin request");
       if (!renderRateAllowed()) {
@@ -1131,6 +1178,10 @@ export class PluginSurfaceHost {
                 await this.#handleStreamRead(data.id, data.stream_handle);
                 return;
             }
+            if (isOperationCancelMessage(data)) {
+                await this.#handleOperationCancel(data);
+                return;
+            }
             if (isAssetReadMessage(data)) {
                 await this.#handleAssetRead(data);
             }
@@ -1158,7 +1209,7 @@ export class PluginSurfaceHost {
                 await this.#handleConfirmationRequired(request, bridgeError, controller.signal);
                 return;
             }
-            this.#postError(request.id, bridgeError.errorCode, bridgeError.message);
+            this.#postError(request.id, bridgeError.errorCode, bridgeError.message, bridgeError.details);
         }
         finally {
             this.#pendingRequestControllers.delete(request.id);
@@ -1166,7 +1217,7 @@ export class PluginSurfaceHost {
     }
     async #handleConfirmationRequired(request, originalError, signal) {
         if (!this.#confirm) {
-            this.#postError(request.id, originalError.errorCode, originalError.message);
+            this.#postError(request.id, originalError.errorCode, originalError.message, originalError.details);
             return;
         }
         try {
@@ -1184,6 +1235,9 @@ export class PluginSurfaceHost {
             if (signal.aborted || this.#disposed)
                 return;
             if (!confirmationDecisionAccepted(decision)) {
+                await this.#rejectConfirmation(confirmation.confirmation_id, signal);
+                if (signal.aborted || this.#disposed)
+                    return;
                 this.#postError(request.id, "PLUGIN_CONFIRMATION_REJECTED", "Plugin method confirmation was rejected");
                 return;
             }
@@ -1195,13 +1249,12 @@ export class PluginSurfaceHost {
             if (signal.aborted || this.#disposed)
                 return;
             const bridgeError = toBridgeError(error, "PLUGIN_PERMISSION_DENIED");
-            this.#postError(request.id, bridgeError.errorCode, bridgeError.message);
+            this.#postError(request.id, bridgeError.errorCode, bridgeError.message, bridgeError.details);
         }
     }
     async #handleStreamRead(id, streamHandle) {
         const credential = this.#streamCredentials.get(streamHandle);
-        this.#streamCredentials.delete(streamHandle);
-        if (!credential) {
+        if (!credential || credential.reading) {
             this.#postError(id, "PLUGIN_STREAM_TICKET_INVALID", "Plugin stream handle is invalid or already consumed");
             return;
         }
@@ -1209,16 +1262,39 @@ export class PluginSurfaceHost {
             this.#postError(id, "PLUGIN_STREAM_TICKET_INVALID", "Plugin stream handle is expired");
             return;
         }
+        credential.reading = true;
         const controller = this.#registerPendingRequest(id);
         try {
-            const result = await this.#postJSON(`/_redevplugin/api/plugins/surfaces/${encodeURIComponent(this.bootstrap.surfaceInstanceId)}/streams/read`, { stream_id: credential.streamID, stream_ticket: credential.streamTicket }, controller.signal);
-            if (!isStreamReadResult(result, credential.streamID)) {
+            const result = await this.#postJSON(`/_redevplugin/api/plugins/surfaces/${encodeURIComponent(this.bootstrap.surfaceInstanceId)}/streams/read`, () => ({ stream_id: credential.streamID, stream_ticket: credential.streamTicket }), controller.signal);
+            if (!isStreamReadResult(result, credential.streamID, credential.lastSequence)) {
                 throw new PluginBridgeError("PLUGIN_CONTRACT_MISMATCH", "Plugin stream endpoint returned an invalid response");
             }
+            const lastSequence = result.events.length > 0 ? result.events[result.events.length - 1].sequence : credential.lastSequence;
+            if (result.done) {
+                this.#streamCredentials.delete(streamHandle);
+            }
+            else {
+                const expiresAtMs = Date.parse(result.next_stream_expires_at);
+                credential.streamTicket = result.next_stream_ticket;
+                credential.expiresAtMs = expiresAtMs;
+                credential.lastSequence = lastSequence;
+                credential.reading = false;
+            }
             if (!controller.signal.aborted && !this.#disposed)
-                this.#postResponse(id, result.events);
+                this.#postResponse(id, {
+                    events: result.events.map(publicPluginStreamEvent),
+                    done: result.done,
+                    ...(result.done ? { terminal_status: result.terminal_status } : {}),
+                    retry_after_ms: result.events.length === 0 && !result.done ? 25 : 0,
+                });
         }
         catch (error) {
+            if (streamReadFailureInvalidatesCredential(error)) {
+                this.#streamCredentials.delete(streamHandle);
+            }
+            else {
+                credential.reading = false;
+            }
             if (controller.signal.aborted || this.#disposed)
                 return;
             const bridgeError = toBridgeError(error, "PLUGIN_RUNTIME_UNAVAILABLE");
@@ -1228,6 +1304,24 @@ export class PluginSurfaceHost {
             this.#pendingRequestControllers.delete(id);
         }
     }
+    async #handleOperationCancel(message) {
+        const controller = this.#registerPendingRequest(message.id);
+        try {
+            await this.#postJSON(`/_redevplugin/api/plugins/surfaces/${encodeURIComponent(this.bootstrap.surfaceInstanceId)}/operations/cancel`, { operation_id: message.operation_id, bridge_channel_id: this.bridgeChannelId, reason: message.reason }, controller.signal);
+            this.#releaseOperationStreams(message.operation_id);
+            if (!controller.signal.aborted && !this.#disposed)
+                this.#postResponse(message.id, undefined);
+        }
+        catch (error) {
+            if (controller.signal.aborted || this.#disposed)
+                return;
+            const bridgeError = toBridgeError(error, "PLUGIN_OPERATION_BLOCKED");
+            this.#postError(message.id, bridgeError.errorCode, bridgeError.message);
+        }
+        finally {
+            this.#pendingRequestControllers.delete(message.id);
+        }
+    }
     async #handleAssetRead(message) {
         if (this.#activeAssetReads >= maxConcurrentAssetReads) {
             throw new PluginBridgeError("PLUGIN_INVALID_REQUEST", "Plugin asset reads exceed the concurrency limit");
@@ -1238,11 +1332,11 @@ export class PluginSurfaceHost {
         }
         this.#activeAssetReads += 1;
         try {
-            const result = await this.#postJSON(`/_redevplugin/api/plugins/surfaces/${encodeURIComponent(this.bootstrap.surfaceInstanceId)}/assets/read`, {
+            const result = await this.#postJSON(`/_redevplugin/api/plugins/surfaces/${encodeURIComponent(this.bootstrap.surfaceInstanceId)}/assets/read`, () => ({
                 asset_session: this.#assetSession,
                 asset_session_id: this.#assetSessionID,
                 binding_id: asset.binding_id,
-            });
+            }));
             if (!isAssetReadResult(result) || result.path !== asset.path || result.sha256 !== asset.sha256 || result.content_type !== asset.content_type) {
                 throw new PluginBridgeError("PLUGIN_CONTRACT_MISMATCH", "Plugin asset endpoint returned mismatched content");
             }
@@ -1278,7 +1372,7 @@ export class PluginSurfaceHost {
             request_hash: result.request_hash,
         };
         if (result.stream_id || result.stream_ticket || result.stream_ticket_id || result.stream_expires_at) {
-            if (!result.stream_id || !result.stream_ticket || !result.stream_ticket_id || !result.stream_expires_at) {
+            if (!result.operation_id || !result.stream_id || !result.stream_ticket || !result.stream_ticket_id || !result.stream_expires_at) {
                 throw new PluginBridgeError("PLUGIN_CONTRACT_MISMATCH", "Plugin RPC returned incomplete stream credentials");
             }
             const expiresAtMs = Date.parse(result.stream_expires_at);
@@ -1290,7 +1384,14 @@ export class PluginSurfaceHost {
                 throw new PluginBridgeError("PLUGIN_JSON_LIMIT_EXCEEDED", "Plugin surface retained too many unread stream handles");
             }
             const handle = randomOpaqueHandle("stream");
-            this.#streamCredentials.set(handle, { streamID: result.stream_id, streamTicket: result.stream_ticket, expiresAtMs });
+            this.#streamCredentials.set(handle, {
+                streamID: result.stream_id,
+                operationID: result.operation_id,
+                streamTicket: result.stream_ticket,
+                expiresAtMs,
+                lastSequence: 0,
+                reading: false,
+            });
             publicResult.stream_handle = handle;
         }
         return removeUndefined(publicResult);
@@ -1301,11 +1402,28 @@ export class PluginSurfaceHost {
                 this.#streamCredentials.delete(handle);
         }
     }
+    #releaseOperationStreams(operationID) {
+        for (const [handle, credential] of this.#streamCredentials) {
+            if (credential.operationID === operationID)
+                this.#streamCredentials.delete(handle);
+        }
+    }
     #callRPC(request, confirmationID, signal) {
-        return this.#postJSON("/_redevplugin/api/plugins/rpc", this.#rpcBody(request, confirmationID), signal);
+        return this.#postJSON("/_redevplugin/api/plugins/rpc", () => this.#rpcBody(request, confirmationID), signal);
     }
     #prepareConfirmation(request, signal) {
-        return this.#postJSON("/_redevplugin/api/plugins/confirm", this.#rpcBody(request), signal);
+        return this.#postJSON("/_redevplugin/api/plugins/confirm", () => this.#rpcBody(request), signal);
+    }
+    async #rejectConfirmation(confirmationID, signal) {
+        const result = await this.#postJSON(`/_redevplugin/api/plugins/surfaces/${encodeURIComponent(this.bootstrap.surfaceInstanceId)}/confirmations/reject`, () => ({
+            plugin_instance_id: this.bootstrap.pluginInstanceId,
+            bridge_channel_id: this.bridgeChannelId,
+            plugin_gateway_token: this.#gatewayToken,
+            confirmation_id: confirmationID,
+        }), signal);
+        if (!hasExactKeys(result, ["rejected"]) || result.rejected !== true) {
+            throw new PluginBridgeError("PLUGIN_CONTRACT_MISMATCH", "Plugin confirmation rejection endpoint returned an invalid response");
+        }
     }
     #rpcBody(request, confirmationID) {
         const body = {
@@ -1356,9 +1474,10 @@ export class PluginSurfaceHost {
             else if (this.#leaseRenewalPromise)
                 await this.#leaseRenewalPromise;
         }
+        const requestBody = typeof body === "function" ? body() : body;
         this.#activeTransportRequests += 1;
         try {
-            return await this.#fetchJSON(path, body, signal);
+            return await this.#fetchJSON(path, requestBody, signal);
         }
         finally {
             this.#activeTransportRequests -= 1;
@@ -1507,8 +1626,16 @@ export class PluginSurfaceHost {
     #postResponse(id, data) {
         this.#postToRenderer({ type: "redevplugin.bridge.response", id, ok: true, data });
     }
-    #postError(id, errorCode, error) {
-        this.#postToRenderer({ type: "redevplugin.bridge.response", id, ok: false, error_code: errorCode, error });
+    #postError(id, errorCode, error, details) {
+        const errorDetails = details === undefined ? undefined : normalizePluginJSONObject(details);
+        this.#postToRenderer(removeUndefined({
+            type: "redevplugin.bridge.response",
+            id,
+            ok: false,
+            error_code: errorCode,
+            error,
+            error_details: errorDetails,
+        }));
     }
     #postToRenderer(message) {
         if (!this.#port) {
@@ -1743,6 +1870,13 @@ function isStreamReadMessage(value) {
         validBridgeRequestID(value.id, "stream") &&
         validOpaqueHandle(value.stream_handle, "stream");
 }
+function isOperationCancelMessage(value) {
+    return hasAllowedKeys(value, ["type", "id", "operation_id", "reason"]) &&
+        value.type === "redevplugin.bridge.operation.cancel" &&
+        validBridgeRequestID(value.id, "operation") &&
+        validOpaqueHandle(value.operation_id, "operation") &&
+        (value.reason === undefined || (typeof value.reason === "string" && value.reason.length <= 256));
+}
 function isBridgeCancelMessage(value) {
     return hasExactKeys(value, ["type", "id"]) &&
         value.type === "redevplugin.bridge.cancel" &&
@@ -1756,13 +1890,54 @@ function isAssetReadMessage(value) {
         validPackagePath(value.path) &&
         validSHA256(value.sha256);
 }
+function isBridgeResponseCandidate(value) {
+    return isRecord(value) && value.type === "redevplugin.bridge.response" && typeof value.id === "string";
+}
 function isBridgeResponse(value) {
-    if (!isRecord(value) || value.type !== "redevplugin.bridge.response" || typeof value.id !== "string")
+    if (!isBridgeResponseCandidate(value) || !validBridgeRequestID(value.id))
         return false;
     if (value.ok === true)
         return Object.keys(value).every((key) => ["type", "id", "ok", "data"].includes(key));
-    return value.ok === false && typeof value.error_code === "string" && typeof value.error === "string" &&
-        Object.keys(value).every((key) => ["type", "id", "ok", "error_code", "error"].includes(key));
+    if (value.ok !== false || typeof value.error_code !== "string" || !pluginBridgeErrorCodeSet.has(value.error_code) ||
+        typeof value.error !== "string" || value.error.length > 4096 ||
+        !Object.keys(value).every((key) => ["type", "id", "ok", "error_code", "error", "error_details"].includes(key))) {
+        return false;
+    }
+    if (value.error_code === "PLUGIN_CAPABILITY_ERROR")
+        return isCapabilityBusinessErrorDetails(value.error_details);
+    if (value.error_details === undefined)
+        return true;
+    try {
+        return Object.keys(normalizePluginJSONObject(value.error_details)).length <= 8;
+    }
+    catch {
+        return false;
+    }
+}
+function isCapabilityBusinessErrorDetails(value) {
+    if (!hasAllowedKeys(value, [
+        "capability_id",
+        "capability_version",
+        "detail_schema_sha256",
+        "business_error_code",
+        "business_error_details",
+    ]))
+        return false;
+    if (typeof value.capability_id !== "string" || !hostCapabilityIDPattern.test(value.capability_id) ||
+        typeof value.capability_version !== "string" || !canonicalSemverPattern.test(value.capability_version) ||
+        typeof value.detail_schema_sha256 !== "string" || !lowercaseSHA256Pattern.test(value.detail_schema_sha256) ||
+        typeof value.business_error_code !== "string" || !businessErrorCodePattern.test(value.business_error_code)) {
+        return false;
+    }
+    if (value.business_error_details === undefined)
+        return true;
+    try {
+        normalizePluginJSONObject(value.business_error_details);
+        return true;
+    }
+    catch {
+        return false;
+    }
 }
 function isLifecycleMessage(value) {
     return hasExactKeys(value, ["type", "event"]) &&
@@ -1801,10 +1976,25 @@ function isGatewayTokenResult(value) {
         typeof value.asset_session_id === "string" && value.asset_session_id.length > 0 &&
         typeof value.issued_at === "string" && typeof value.expires_at === "string";
 }
-function isStreamReadResult(value, expectedStreamID) {
-    if (!hasExactKeys(value, ["events"]) || !Array.isArray(value.events))
+function isStreamReadResult(value, expectedStreamID, previousSequence) {
+    if (!isRecord(value) || typeof value.done !== "boolean" || !Array.isArray(value.events))
+        return false;
+    const expectedKeys = value.done
+        ? ["done", "events", "terminal_status"]
+        : ["done", "events", "next_stream_expires_at", "next_stream_ticket", "next_stream_ticket_id"];
+    if (!hasExactKeys(value, expectedKeys))
         return false;
-    let previousSequence = 0;
+    if (value.done) {
+        if (!validPluginStreamTerminalStatus(value.terminal_status))
+            return false;
+    }
+    else {
+        const expiresAt = Date.parse(String(value.next_stream_expires_at));
+        if (typeof value.next_stream_ticket !== "string" || value.next_stream_ticket.length === 0 ||
+            typeof value.next_stream_ticket_id !== "string" || value.next_stream_ticket_id.length === 0 ||
+            !Number.isFinite(expiresAt) || expiresAt <= Date.now())
+            return false;
+    }
     let terminal = false;
     for (const event of value.events) {
         if (!isStreamEvent(event) || event.stream_id !== expectedStreamID || event.sequence <= previousSequence || terminal)
@@ -1823,6 +2013,13 @@ function isStreamEvent(value) {
         (value.error == null || typeof value.error === "string") &&
         typeof value.at === "string";
 }
+function publicPluginStreamEvent(event) {
+    return removeUndefined({ sequence: event.sequence, kind: event.kind, data: event.data, error: event.error, at: event.at });
+}
+function validPluginStreamTerminalStatus(value) {
+    return value === "closed" || value === "canceled" || value === "failed" ||
+        value === "orphaned_after_disable" || value === "orphaned_after_uninstall";
+}
 function validRPCParams(value) {
     if (value === undefined)
         return true;
@@ -1837,7 +2034,7 @@ function validRPCParams(value) {
 const pluginMethodPattern = new RegExp("^[-A-Za-z0-9._:]{1,256}$");
 const pluginActionPattern = new RegExp("^[-A-Za-z0-9._:]{1,128}$");
 const opaqueHandlePattern = new RegExp("^[-A-Za-z0-9_]{8,160}$");
-const bridgeRequestIDPattern = /^(rpc|stream|render)_([1-9][0-9]{0,15})$/;
+const bridgeRequestIDPattern = /^(rpc|stream|render|operation)_([1-9][0-9]{0,15})$/;
 function validBridgeRequestID(value, expectedKind) {
     if (typeof value !== "string")
         return false;
@@ -2003,6 +2200,8 @@ function normalizePluginJSONValue(value, depth = 0, state = { nodes: 0, seen: ne
         for (const key of Reflect.ownKeys(value)) {
             if (typeof key !== "string")
                 throw new TypeError("JSON object keys must be strings");
+            if (prototypeSensitivePropertyNames.has(key))
+                throw new TypeError("JSON object keys must not alter object prototypes");
             const descriptor = Object.getOwnPropertyDescriptor(value, key);
             if (!descriptor?.enumerable || !("value" in descriptor))
                 throw new TypeError("JSON object fields must be enumerable data properties");
@@ -2014,6 +2213,7 @@ function normalizePluginJSONValue(value, depth = 0, state = { nodes: 0, seen: ne
         state.seen.delete(value);
     }
 }
+const prototypeSensitivePropertyNames = new Set(["__proto__", "constructor", "prototype"]);
 function normalizeTimeout(timeoutMs) {
     if (timeoutMs == null)
         return 30_000;
@@ -2071,3 +2271,8 @@ function toBridgeError(error, fallbackCode) {
         return new PluginBridgeError(fallbackCode, error.message);
     return new PluginBridgeError(fallbackCode, String(error));
 }
+function streamReadFailureInvalidatesCredential(error) {
+    if (!(error instanceof PluginBridgeError))
+        return true;
+    return streamCredentialInvalidatingErrorCodes.has(error.errorCode);
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@floegence/redevplugin-ui",
-  "version": "0.2.1",
+  "version": "0.3.0",
   "license": "MIT",
   "type": "module",
   "repository": {