@floegence/redevplugin-ui 3.4.0 → 3.6.0

package/dist/connections.d.ts

@@ -0,0 +1,18 @@
+/** A connector-scoped base URL for the application's own HTTP client. */
+export interface PluginWebConnection {
+    readonly connectorId: string;
+    readonly connectionId: string;
+    readonly baseURL: string;
+    readonly httpMethods: readonly string[];
+}
+export interface PluginConnectionOptions {
+    /** Index in the signed fixed destination list; configurable connectors use 0. */
+    readonly destinationIndex?: number;
+    readonly signal?: AbortSignal;
+}
+/**
+ * Discover a connection using the current child-origin session. Use native fetch,
+ * Request and Response with baseURL. This helper never replaces window.fetch,
+ * grants permission, retries a failed mutation, or exposes host credentials.
+ */
+export declare function openPluginConnection(connectorId: string, options?: PluginConnectionOptions): Promise<PluginWebConnection>;

package/dist/connections.js

@@ -0,0 +1,28 @@
+/**
+ * Discover a connection using the current child-origin session. Use native fetch,
+ * Request and Response with baseURL. This helper never replaces window.fetch,
+ * grants permission, retries a failed mutation, or exposes host credentials.
+ */
+export async function openPluginConnection(connectorId, options = {}) {
+    if (!/^[a-zA-Z0-9][a-zA-Z0-9_.-]{0,127}$/.test(connectorId))
+        throw new TypeError("Invalid connector ID");
+    const index = options.destinationIndex ?? 0;
+    if (!Number.isSafeInteger(index) || index < 0)
+        throw new TypeError("Invalid destination index");
+    const endpoint = new URL("/_redevplugin_web/connection", globalThis.location.origin);
+    endpoint.searchParams.set("connector_id", connectorId);
+    endpoint.searchParams.set("destination_index", String(index));
+    const response = await fetch(endpoint, { signal: options.signal, credentials: "same-origin", redirect: "error", cache: "no-store" });
+    if (!response.ok)
+        throw new Error("Connection unavailable; review its configuration and permissions");
+    const value = await response.json();
+    if (!value || typeof value !== "object")
+        throw new Error("Invalid connection response");
+    const item = value;
+    if (item.connector_id !== connectorId || typeof item.connection_id !== "string" || !/^(?:fixed-[0-9]+|[a-f0-9]{64})$/.test(item.connection_id) || !Array.isArray(item.http_methods) || item.http_methods.length === 0 || !item.http_methods.every(method => typeof method === "string" && /^(GET|HEAD|OPTIONS|POST|PUT|PATCH|DELETE)$/.test(method)))
+        throw new Error("Invalid connection response");
+    const expected = "/_redevplugin_web/connections/" + encodeURIComponent(connectorId) + "/" + item.connection_id + "/";
+    if (item.base_path !== expected)
+        throw new Error("Invalid connection base URL");
+    return Object.freeze({ connectorId, connectionId: item.connection_id, baseURL: new URL(expected, endpoint).href, httpMethods: Object.freeze([...item.http_methods]) });
+}

package/dist/error-codes.gen.d.ts

@@ -1,4 +1,4 @@
-export declare const pluginPlatformErrorCodes: readonly ["PLUGIN_INVALID_REQUEST", "PLUGIN_MANIFEST_INVALID", "PLUGIN_PACKAGE_INVALID", "PLUGIN_PACKAGE_TOO_LARGE", "PLUGIN_PACKAGE_PATH_FORBIDDEN", "PLUGIN_SIGNATURE_INVALID", "PLUGIN_TRUST_STATE_DENIED", "PLUGIN_TRUST_VERIFICATION_REQUIRED", "PLUGIN_TRUST_VERIFICATION_INVALID", "PLUGIN_RELEASE_REF_VERIFICATION_FAILED", "PLUGIN_RELEASE_REF_POLICY_DENIED", "PLUGIN_RELEASE_NETWORK", "PLUGIN_RELEASE_TIMEOUT", "PLUGIN_RELEASE_ASSET_MISSING", "PLUGIN_RELEASE_ASSET_INTEGRITY", "PLUGIN_INSTALL_INTERRUPTED", "PLUGIN_INSTALL_STATE_CONFLICT", "PLUGIN_RETAINED_DATA_INCOMPATIBLE", "PLUGIN_INTERNAL_FAILURE", "PLUGIN_DISABLED", "PLUGIN_PERMISSION_DENIED", "PLUGIN_ORIGIN_DENIED", "PLUGIN_ACTION_DENIED", "PLUGIN_OWNER_SCOPE_MISMATCH", "PLUGIN_SECRET_SCOPE_MISMATCH", "PLUGIN_STORAGE_SCOPE_MISMATCH", "PLUGIN_ADAPTER_FAILURE", "PLUGIN_SESSION_REVOKED", "PLUGIN_SESSION_TEARDOWN_INCOMPLETE", "PLUGIN_SESSION_FENCE_CAPACITY", "PLUGIN_CONFIRMATION_REQUIRED", "PLUGIN_CONFIRMATION_INVALID", "PLUGIN_TOKEN_EXPIRED", "PLUGIN_TOKEN_REPLAY", "PLUGIN_GATEWAY_TOKEN_INVALID", "PLUGIN_GATEWAY_TOKEN_REPLAYED", "PLUGIN_GATEWAY_TOKEN_CHANNEL_MISMATCH", "PLUGIN_ASSET_TICKET_INVALID", "PLUGIN_ASSET_SESSION_INVALID", "PLUGIN_STREAM_TICKET_INVALID", "PLUGIN_STREAM_DELIVERY_INVALID", "PLUGIN_STREAM_CANCELLED", "PLUGIN_LEASE_INVALID", "PLUGIN_LEASE_REPLAYED", "PLUGIN_GRANT_INVALID", "PLUGIN_STORAGE_QUOTA_EXCEEDED", "PLUGIN_EXECUTION_BLOCKED", "PLUGIN_EXECUTION_NOT_FOUND", "PLUGIN_EXECUTION_NOT_CANCELABLE", "PLUGIN_NETWORK_TARGET_DENIED", "PLUGIN_NETWORK_RATE_LIMITED", "PLUGIN_RUNTIME_UNAVAILABLE", "PLUGIN_RUNTIME_VERSION_MISMATCH", "PLUGIN_RUNTIME_CONTRACT_MISMATCH", "PLUGIN_UI_PROTOCOL_VIOLATION", "PLUGIN_SURFACE_QUIESCE_TIMEOUT", "PLUGIN_JSON_LIMIT_EXCEEDED", "PLUGIN_CAPABILITY_ERROR", "PLUGIN_WORKER_ERROR", "PLUGIN_CONTRACT_MISMATCH", "PLUGIN_MANAGEMENT_REVISION_MISMATCH", "PLUGIN_AUTHORIZATION_REVISION_MISMATCH", "PLUGIN_BINDING_REVISION_MISMATCH", "PLUGIN_VALUES_REVISION_MISMATCH", "PLUGIN_CSRF_REQUIRED", "PLUGIN_CSRF_INVALID", "PLUGIN_FEATURE_NOT_CONFIGURED"];
-export declare const pluginBridgeErrorCodes: readonly ["PLUGIN_INVALID_REQUEST", "PLUGIN_MANIFEST_INVALID", "PLUGIN_PACKAGE_INVALID", "PLUGIN_PACKAGE_TOO_LARGE", "PLUGIN_PACKAGE_PATH_FORBIDDEN", "PLUGIN_SIGNATURE_INVALID", "PLUGIN_TRUST_STATE_DENIED", "PLUGIN_TRUST_VERIFICATION_REQUIRED", "PLUGIN_TRUST_VERIFICATION_INVALID", "PLUGIN_RELEASE_REF_VERIFICATION_FAILED", "PLUGIN_RELEASE_REF_POLICY_DENIED", "PLUGIN_RELEASE_NETWORK", "PLUGIN_RELEASE_TIMEOUT", "PLUGIN_RELEASE_ASSET_MISSING", "PLUGIN_RELEASE_ASSET_INTEGRITY", "PLUGIN_INSTALL_INTERRUPTED", "PLUGIN_INSTALL_STATE_CONFLICT", "PLUGIN_RETAINED_DATA_INCOMPATIBLE", "PLUGIN_INTERNAL_FAILURE", "PLUGIN_DISABLED", "PLUGIN_PERMISSION_DENIED", "PLUGIN_ORIGIN_DENIED", "PLUGIN_ACTION_DENIED", "PLUGIN_OWNER_SCOPE_MISMATCH", "PLUGIN_SECRET_SCOPE_MISMATCH", "PLUGIN_STORAGE_SCOPE_MISMATCH", "PLUGIN_ADAPTER_FAILURE", "PLUGIN_SESSION_REVOKED", "PLUGIN_SESSION_TEARDOWN_INCOMPLETE", "PLUGIN_SESSION_FENCE_CAPACITY", "PLUGIN_CONFIRMATION_REQUIRED", "PLUGIN_CONFIRMATION_INVALID", "PLUGIN_TOKEN_EXPIRED", "PLUGIN_TOKEN_REPLAY", "PLUGIN_GATEWAY_TOKEN_INVALID", "PLUGIN_GATEWAY_TOKEN_REPLAYED", "PLUGIN_GATEWAY_TOKEN_CHANNEL_MISMATCH", "PLUGIN_ASSET_TICKET_INVALID", "PLUGIN_ASSET_SESSION_INVALID", "PLUGIN_STREAM_TICKET_INVALID", "PLUGIN_STREAM_DELIVERY_INVALID", "PLUGIN_STREAM_CANCELLED", "PLUGIN_LEASE_INVALID", "PLUGIN_LEASE_REPLAYED", "PLUGIN_GRANT_INVALID", "PLUGIN_STORAGE_QUOTA_EXCEEDED", "PLUGIN_EXECUTION_BLOCKED", "PLUGIN_EXECUTION_NOT_FOUND", "PLUGIN_EXECUTION_NOT_CANCELABLE", "PLUGIN_NETWORK_TARGET_DENIED", "PLUGIN_NETWORK_RATE_LIMITED", "PLUGIN_RUNTIME_UNAVAILABLE", "PLUGIN_RUNTIME_VERSION_MISMATCH", "PLUGIN_RUNTIME_CONTRACT_MISMATCH", "PLUGIN_UI_PROTOCOL_VIOLATION", "PLUGIN_SURFACE_QUIESCE_TIMEOUT", "PLUGIN_JSON_LIMIT_EXCEEDED", "PLUGIN_CAPABILITY_ERROR", "PLUGIN_WORKER_ERROR", "PLUGIN_CONTRACT_MISMATCH", "PLUGIN_MANAGEMENT_REVISION_MISMATCH", "PLUGIN_AUTHORIZATION_REVISION_MISMATCH", "PLUGIN_BINDING_REVISION_MISMATCH", "PLUGIN_VALUES_REVISION_MISMATCH", "PLUGIN_CSRF_REQUIRED", "PLUGIN_CSRF_INVALID", "PLUGIN_FEATURE_NOT_CONFIGURED", "PLUGIN_CONFIRMATION_REJECTED", "PLUGIN_BRIDGE_CANCELLED", "PLUGIN_BRIDGE_TIMEOUT", "PLUGIN_BRIDGE_DISPOSED", "PLUGIN_BRIDGE_HANDSHAKE_FAILED", "PLUGIN_BRIDGE_HANDSHAKE_REQUIRED"];
-export declare const pluginClientErrorCodes: readonly ["PLUGIN_INVALID_REQUEST", "PLUGIN_MANIFEST_INVALID", "PLUGIN_PACKAGE_INVALID", "PLUGIN_PACKAGE_TOO_LARGE", "PLUGIN_PACKAGE_PATH_FORBIDDEN", "PLUGIN_SIGNATURE_INVALID", "PLUGIN_TRUST_STATE_DENIED", "PLUGIN_TRUST_VERIFICATION_REQUIRED", "PLUGIN_TRUST_VERIFICATION_INVALID", "PLUGIN_RELEASE_REF_VERIFICATION_FAILED", "PLUGIN_RELEASE_REF_POLICY_DENIED", "PLUGIN_RELEASE_NETWORK", "PLUGIN_RELEASE_TIMEOUT", "PLUGIN_RELEASE_ASSET_MISSING", "PLUGIN_RELEASE_ASSET_INTEGRITY", "PLUGIN_INSTALL_INTERRUPTED", "PLUGIN_INSTALL_STATE_CONFLICT", "PLUGIN_RETAINED_DATA_INCOMPATIBLE", "PLUGIN_INTERNAL_FAILURE", "PLUGIN_DISABLED", "PLUGIN_PERMISSION_DENIED", "PLUGIN_ORIGIN_DENIED", "PLUGIN_ACTION_DENIED", "PLUGIN_OWNER_SCOPE_MISMATCH", "PLUGIN_SECRET_SCOPE_MISMATCH", "PLUGIN_STORAGE_SCOPE_MISMATCH", "PLUGIN_ADAPTER_FAILURE", "PLUGIN_SESSION_REVOKED", "PLUGIN_SESSION_TEARDOWN_INCOMPLETE", "PLUGIN_SESSION_FENCE_CAPACITY", "PLUGIN_CONFIRMATION_REQUIRED", "PLUGIN_CONFIRMATION_INVALID", "PLUGIN_TOKEN_EXPIRED", "PLUGIN_TOKEN_REPLAY", "PLUGIN_GATEWAY_TOKEN_INVALID", "PLUGIN_GATEWAY_TOKEN_REPLAYED", "PLUGIN_GATEWAY_TOKEN_CHANNEL_MISMATCH", "PLUGIN_ASSET_TICKET_INVALID", "PLUGIN_ASSET_SESSION_INVALID", "PLUGIN_STREAM_TICKET_INVALID", "PLUGIN_STREAM_DELIVERY_INVALID", "PLUGIN_STREAM_CANCELLED", "PLUGIN_LEASE_INVALID", "PLUGIN_LEASE_REPLAYED", "PLUGIN_GRANT_INVALID", "PLUGIN_STORAGE_QUOTA_EXCEEDED", "PLUGIN_EXECUTION_BLOCKED", "PLUGIN_EXECUTION_NOT_FOUND", "PLUGIN_EXECUTION_NOT_CANCELABLE", "PLUGIN_NETWORK_TARGET_DENIED", "PLUGIN_NETWORK_RATE_LIMITED", "PLUGIN_RUNTIME_UNAVAILABLE", "PLUGIN_RUNTIME_VERSION_MISMATCH", "PLUGIN_RUNTIME_CONTRACT_MISMATCH", "PLUGIN_UI_PROTOCOL_VIOLATION", "PLUGIN_SURFACE_QUIESCE_TIMEOUT", "PLUGIN_JSON_LIMIT_EXCEEDED", "PLUGIN_CAPABILITY_ERROR", "PLUGIN_WORKER_ERROR", "PLUGIN_CONTRACT_MISMATCH", "PLUGIN_MANAGEMENT_REVISION_MISMATCH", "PLUGIN_AUTHORIZATION_REVISION_MISMATCH", "PLUGIN_BINDING_REVISION_MISMATCH", "PLUGIN_VALUES_REVISION_MISMATCH", "PLUGIN_CSRF_REQUIRED", "PLUGIN_CSRF_INVALID", "PLUGIN_FEATURE_NOT_CONFIGURED", "PLUGIN_CONFIRMATION_REJECTED", "PLUGIN_BRIDGE_CANCELLED", "PLUGIN_BRIDGE_TIMEOUT", "PLUGIN_BRIDGE_DISPOSED", "PLUGIN_BRIDGE_HANDSHAKE_FAILED", "PLUGIN_BRIDGE_HANDSHAKE_REQUIRED", "PLUGIN_PLATFORM_REQUEST_FAILED", "PLUGIN_STREAM_FAILED"];
+export declare const pluginPlatformErrorCodes: readonly ["PLUGIN_INVALID_REQUEST", "PLUGIN_MANIFEST_INVALID", "PLUGIN_PACKAGE_INVALID", "PLUGIN_PACKAGE_TOO_LARGE", "PLUGIN_PACKAGE_PATH_FORBIDDEN", "PLUGIN_SIGNATURE_INVALID", "PLUGIN_TRUST_STATE_DENIED", "PLUGIN_TRUST_VERIFICATION_REQUIRED", "PLUGIN_TRUST_VERIFICATION_INVALID", "PLUGIN_RELEASE_REF_VERIFICATION_FAILED", "PLUGIN_RELEASE_REF_POLICY_DENIED", "PLUGIN_RELEASE_NETWORK", "PLUGIN_RELEASE_TIMEOUT", "PLUGIN_RELEASE_ASSET_MISSING", "PLUGIN_RELEASE_ASSET_INTEGRITY", "PLUGIN_INSTALL_INTERRUPTED", "PLUGIN_INSTALL_STATE_CONFLICT", "PLUGIN_RETAINED_DATA_INCOMPATIBLE", "PLUGIN_INTERNAL_FAILURE", "PLUGIN_DISABLED", "PLUGIN_PERMISSION_DENIED", "PLUGIN_ORIGIN_DENIED", "PLUGIN_ACTION_DENIED", "PLUGIN_OWNER_SCOPE_MISMATCH", "PLUGIN_SECRET_SCOPE_MISMATCH", "PLUGIN_STORAGE_SCOPE_MISMATCH", "PLUGIN_ADAPTER_FAILURE", "PLUGIN_SESSION_REVOKED", "PLUGIN_SESSION_TEARDOWN_INCOMPLETE", "PLUGIN_SESSION_FENCE_CAPACITY", "PLUGIN_CONFIRMATION_REQUIRED", "PLUGIN_CONFIRMATION_INVALID", "PLUGIN_TOKEN_EXPIRED", "PLUGIN_TOKEN_REPLAY", "PLUGIN_GATEWAY_TOKEN_INVALID", "PLUGIN_GATEWAY_TOKEN_REPLAYED", "PLUGIN_GATEWAY_TOKEN_CHANNEL_MISMATCH", "PLUGIN_ASSET_TICKET_INVALID", "PLUGIN_ASSET_SESSION_INVALID", "PLUGIN_STREAM_TICKET_INVALID", "PLUGIN_STREAM_DELIVERY_INVALID", "PLUGIN_STREAM_CANCELLED", "PLUGIN_LEASE_INVALID", "PLUGIN_LEASE_REPLAYED", "PLUGIN_GRANT_INVALID", "PLUGIN_STORAGE_QUOTA_EXCEEDED", "PLUGIN_EXECUTION_BLOCKED", "PLUGIN_EXECUTION_NOT_FOUND", "PLUGIN_EXECUTION_NOT_CANCELABLE", "PLUGIN_CONNECTION_UNAVAILABLE", "PLUGIN_CONNECTION_CONFLICT", "PLUGIN_NETWORK_TARGET_DENIED", "PLUGIN_NETWORK_RATE_LIMITED", "PLUGIN_RUNTIME_UNAVAILABLE", "PLUGIN_RUNTIME_VERSION_MISMATCH", "PLUGIN_RUNTIME_CONTRACT_MISMATCH", "PLUGIN_UI_PROTOCOL_VIOLATION", "PLUGIN_SURFACE_QUIESCE_TIMEOUT", "PLUGIN_JSON_LIMIT_EXCEEDED", "PLUGIN_CAPABILITY_ERROR", "PLUGIN_WORKER_ERROR", "PLUGIN_FILE_OPERATION_FAILED", "PLUGIN_CONTRACT_MISMATCH", "PLUGIN_MANAGEMENT_REVISION_MISMATCH", "PLUGIN_AUTHORIZATION_REVISION_MISMATCH", "PLUGIN_BINDING_REVISION_MISMATCH", "PLUGIN_VALUES_REVISION_MISMATCH", "PLUGIN_CSRF_REQUIRED", "PLUGIN_CSRF_INVALID", "PLUGIN_FEATURE_NOT_CONFIGURED"];
+export declare const pluginBridgeErrorCodes: readonly ["PLUGIN_INVALID_REQUEST", "PLUGIN_MANIFEST_INVALID", "PLUGIN_PACKAGE_INVALID", "PLUGIN_PACKAGE_TOO_LARGE", "PLUGIN_PACKAGE_PATH_FORBIDDEN", "PLUGIN_SIGNATURE_INVALID", "PLUGIN_TRUST_STATE_DENIED", "PLUGIN_TRUST_VERIFICATION_REQUIRED", "PLUGIN_TRUST_VERIFICATION_INVALID", "PLUGIN_RELEASE_REF_VERIFICATION_FAILED", "PLUGIN_RELEASE_REF_POLICY_DENIED", "PLUGIN_RELEASE_NETWORK", "PLUGIN_RELEASE_TIMEOUT", "PLUGIN_RELEASE_ASSET_MISSING", "PLUGIN_RELEASE_ASSET_INTEGRITY", "PLUGIN_INSTALL_INTERRUPTED", "PLUGIN_INSTALL_STATE_CONFLICT", "PLUGIN_RETAINED_DATA_INCOMPATIBLE", "PLUGIN_INTERNAL_FAILURE", "PLUGIN_DISABLED", "PLUGIN_PERMISSION_DENIED", "PLUGIN_ORIGIN_DENIED", "PLUGIN_ACTION_DENIED", "PLUGIN_OWNER_SCOPE_MISMATCH", "PLUGIN_SECRET_SCOPE_MISMATCH", "PLUGIN_STORAGE_SCOPE_MISMATCH", "PLUGIN_ADAPTER_FAILURE", "PLUGIN_SESSION_REVOKED", "PLUGIN_SESSION_TEARDOWN_INCOMPLETE", "PLUGIN_SESSION_FENCE_CAPACITY", "PLUGIN_CONFIRMATION_REQUIRED", "PLUGIN_CONFIRMATION_INVALID", "PLUGIN_TOKEN_EXPIRED", "PLUGIN_TOKEN_REPLAY", "PLUGIN_GATEWAY_TOKEN_INVALID", "PLUGIN_GATEWAY_TOKEN_REPLAYED", "PLUGIN_GATEWAY_TOKEN_CHANNEL_MISMATCH", "PLUGIN_ASSET_TICKET_INVALID", "PLUGIN_ASSET_SESSION_INVALID", "PLUGIN_STREAM_TICKET_INVALID", "PLUGIN_STREAM_DELIVERY_INVALID", "PLUGIN_STREAM_CANCELLED", "PLUGIN_LEASE_INVALID", "PLUGIN_LEASE_REPLAYED", "PLUGIN_GRANT_INVALID", "PLUGIN_STORAGE_QUOTA_EXCEEDED", "PLUGIN_EXECUTION_BLOCKED", "PLUGIN_EXECUTION_NOT_FOUND", "PLUGIN_EXECUTION_NOT_CANCELABLE", "PLUGIN_CONNECTION_UNAVAILABLE", "PLUGIN_CONNECTION_CONFLICT", "PLUGIN_NETWORK_TARGET_DENIED", "PLUGIN_NETWORK_RATE_LIMITED", "PLUGIN_RUNTIME_UNAVAILABLE", "PLUGIN_RUNTIME_VERSION_MISMATCH", "PLUGIN_RUNTIME_CONTRACT_MISMATCH", "PLUGIN_UI_PROTOCOL_VIOLATION", "PLUGIN_SURFACE_QUIESCE_TIMEOUT", "PLUGIN_JSON_LIMIT_EXCEEDED", "PLUGIN_CAPABILITY_ERROR", "PLUGIN_WORKER_ERROR", "PLUGIN_FILE_OPERATION_FAILED", "PLUGIN_CONTRACT_MISMATCH", "PLUGIN_MANAGEMENT_REVISION_MISMATCH", "PLUGIN_AUTHORIZATION_REVISION_MISMATCH", "PLUGIN_BINDING_REVISION_MISMATCH", "PLUGIN_VALUES_REVISION_MISMATCH", "PLUGIN_CSRF_REQUIRED", "PLUGIN_CSRF_INVALID", "PLUGIN_FEATURE_NOT_CONFIGURED", "PLUGIN_CONFIRMATION_REJECTED", "PLUGIN_BRIDGE_CANCELLED", "PLUGIN_BRIDGE_TIMEOUT", "PLUGIN_BRIDGE_DISPOSED", "PLUGIN_BRIDGE_HANDSHAKE_FAILED", "PLUGIN_BRIDGE_HANDSHAKE_REQUIRED"];
+export declare const pluginClientErrorCodes: readonly ["PLUGIN_INVALID_REQUEST", "PLUGIN_MANIFEST_INVALID", "PLUGIN_PACKAGE_INVALID", "PLUGIN_PACKAGE_TOO_LARGE", "PLUGIN_PACKAGE_PATH_FORBIDDEN", "PLUGIN_SIGNATURE_INVALID", "PLUGIN_TRUST_STATE_DENIED", "PLUGIN_TRUST_VERIFICATION_REQUIRED", "PLUGIN_TRUST_VERIFICATION_INVALID", "PLUGIN_RELEASE_REF_VERIFICATION_FAILED", "PLUGIN_RELEASE_REF_POLICY_DENIED", "PLUGIN_RELEASE_NETWORK", "PLUGIN_RELEASE_TIMEOUT", "PLUGIN_RELEASE_ASSET_MISSING", "PLUGIN_RELEASE_ASSET_INTEGRITY", "PLUGIN_INSTALL_INTERRUPTED", "PLUGIN_INSTALL_STATE_CONFLICT", "PLUGIN_RETAINED_DATA_INCOMPATIBLE", "PLUGIN_INTERNAL_FAILURE", "PLUGIN_DISABLED", "PLUGIN_PERMISSION_DENIED", "PLUGIN_ORIGIN_DENIED", "PLUGIN_ACTION_DENIED", "PLUGIN_OWNER_SCOPE_MISMATCH", "PLUGIN_SECRET_SCOPE_MISMATCH", "PLUGIN_STORAGE_SCOPE_MISMATCH", "PLUGIN_ADAPTER_FAILURE", "PLUGIN_SESSION_REVOKED", "PLUGIN_SESSION_TEARDOWN_INCOMPLETE", "PLUGIN_SESSION_FENCE_CAPACITY", "PLUGIN_CONFIRMATION_REQUIRED", "PLUGIN_CONFIRMATION_INVALID", "PLUGIN_TOKEN_EXPIRED", "PLUGIN_TOKEN_REPLAY", "PLUGIN_GATEWAY_TOKEN_INVALID", "PLUGIN_GATEWAY_TOKEN_REPLAYED", "PLUGIN_GATEWAY_TOKEN_CHANNEL_MISMATCH", "PLUGIN_ASSET_TICKET_INVALID", "PLUGIN_ASSET_SESSION_INVALID", "PLUGIN_STREAM_TICKET_INVALID", "PLUGIN_STREAM_DELIVERY_INVALID", "PLUGIN_STREAM_CANCELLED", "PLUGIN_LEASE_INVALID", "PLUGIN_LEASE_REPLAYED", "PLUGIN_GRANT_INVALID", "PLUGIN_STORAGE_QUOTA_EXCEEDED", "PLUGIN_EXECUTION_BLOCKED", "PLUGIN_EXECUTION_NOT_FOUND", "PLUGIN_EXECUTION_NOT_CANCELABLE", "PLUGIN_CONNECTION_UNAVAILABLE", "PLUGIN_CONNECTION_CONFLICT", "PLUGIN_NETWORK_TARGET_DENIED", "PLUGIN_NETWORK_RATE_LIMITED", "PLUGIN_RUNTIME_UNAVAILABLE", "PLUGIN_RUNTIME_VERSION_MISMATCH", "PLUGIN_RUNTIME_CONTRACT_MISMATCH", "PLUGIN_UI_PROTOCOL_VIOLATION", "PLUGIN_SURFACE_QUIESCE_TIMEOUT", "PLUGIN_JSON_LIMIT_EXCEEDED", "PLUGIN_CAPABILITY_ERROR", "PLUGIN_WORKER_ERROR", "PLUGIN_FILE_OPERATION_FAILED", "PLUGIN_CONTRACT_MISMATCH", "PLUGIN_MANAGEMENT_REVISION_MISMATCH", "PLUGIN_AUTHORIZATION_REVISION_MISMATCH", "PLUGIN_BINDING_REVISION_MISMATCH", "PLUGIN_VALUES_REVISION_MISMATCH", "PLUGIN_CSRF_REQUIRED", "PLUGIN_CSRF_INVALID", "PLUGIN_FEATURE_NOT_CONFIGURED", "PLUGIN_CONFIRMATION_REJECTED", "PLUGIN_BRIDGE_CANCELLED", "PLUGIN_BRIDGE_TIMEOUT", "PLUGIN_BRIDGE_DISPOSED", "PLUGIN_BRIDGE_HANDSHAKE_FAILED", "PLUGIN_BRIDGE_HANDSHAKE_REQUIRED", "PLUGIN_PLATFORM_REQUEST_FAILED", "PLUGIN_STREAM_FAILED"];
 export declare const runtimeProcessFailureCodes: readonly ["RUNTIME_PROCESS_FAILED", "RUNTIME_PROCESS_EXIT_UNEXPECTED", "RUNTIME_PROCESS_EXIT_UNRECOGNIZED", "RUNTIME_PROCESS_SIGNALLED", "IPC_WRITER_CAPACITY_OVERFLOW", "IPC_WRITER_CAPACITY_LIMIT_EXCEEDED", "IPC_WRITER_START_FAILED", "IPC_WRITER_CLOSED", "IPC_WRITER_BATCH_SIZE_OVERFLOW", "IPC_WRITER_WRITE_FAILED", "IPC_WRITER_FLUSH_FAILED", "IPC_WRITER_PANICKED"];

package/dist/error-codes.gen.js

@@ -49,6 +49,8 @@ export const pluginPlatformErrorCodes = [
     "PLUGIN_EXECUTION_BLOCKED",
     "PLUGIN_EXECUTION_NOT_FOUND",
     "PLUGIN_EXECUTION_NOT_CANCELABLE",
+    "PLUGIN_CONNECTION_UNAVAILABLE",
+    "PLUGIN_CONNECTION_CONFLICT",
     "PLUGIN_NETWORK_TARGET_DENIED",
     "PLUGIN_NETWORK_RATE_LIMITED",
     "PLUGIN_RUNTIME_UNAVAILABLE",
@@ -59,6 +61,7 @@ export const pluginPlatformErrorCodes = [
     "PLUGIN_JSON_LIMIT_EXCEEDED",
     "PLUGIN_CAPABILITY_ERROR",
     "PLUGIN_WORKER_ERROR",
+    "PLUGIN_FILE_OPERATION_FAILED",
     "PLUGIN_CONTRACT_MISMATCH",
     "PLUGIN_MANAGEMENT_REVISION_MISMATCH",
     "PLUGIN_AUTHORIZATION_REVISION_MISMATCH",
@@ -118,6 +121,8 @@ export const pluginBridgeErrorCodes = [
     "PLUGIN_EXECUTION_BLOCKED",
     "PLUGIN_EXECUTION_NOT_FOUND",
     "PLUGIN_EXECUTION_NOT_CANCELABLE",
+    "PLUGIN_CONNECTION_UNAVAILABLE",
+    "PLUGIN_CONNECTION_CONFLICT",
     "PLUGIN_NETWORK_TARGET_DENIED",
     "PLUGIN_NETWORK_RATE_LIMITED",
     "PLUGIN_RUNTIME_UNAVAILABLE",
@@ -128,6 +133,7 @@ export const pluginBridgeErrorCodes = [
     "PLUGIN_JSON_LIMIT_EXCEEDED",
     "PLUGIN_CAPABILITY_ERROR",
     "PLUGIN_WORKER_ERROR",
+    "PLUGIN_FILE_OPERATION_FAILED",
     "PLUGIN_CONTRACT_MISMATCH",
     "PLUGIN_MANAGEMENT_REVISION_MISMATCH",
     "PLUGIN_AUTHORIZATION_REVISION_MISMATCH",
@@ -193,6 +199,8 @@ export const pluginClientErrorCodes = [
     "PLUGIN_EXECUTION_BLOCKED",
     "PLUGIN_EXECUTION_NOT_FOUND",
     "PLUGIN_EXECUTION_NOT_CANCELABLE",
+    "PLUGIN_CONNECTION_UNAVAILABLE",
+    "PLUGIN_CONNECTION_CONFLICT",
     "PLUGIN_NETWORK_TARGET_DENIED",
     "PLUGIN_NETWORK_RATE_LIMITED",
     "PLUGIN_RUNTIME_UNAVAILABLE",
@@ -203,6 +211,7 @@ export const pluginClientErrorCodes = [
     "PLUGIN_JSON_LIMIT_EXCEEDED",
     "PLUGIN_CAPABILITY_ERROR",
     "PLUGIN_WORKER_ERROR",
+    "PLUGIN_FILE_OPERATION_FAILED",
     "PLUGIN_CONTRACT_MISMATCH",
     "PLUGIN_MANAGEMENT_REVISION_MISMATCH",
     "PLUGIN_AUTHORIZATION_REVISION_MISMATCH",

package/dist/files.d.ts

@@ -0,0 +1,66 @@
+import type { components } from "./openapi.gen.js";
+import { PluginBridgeError } from "./errors.js";
+import type { PluginBridgeRequestOptions } from "./surface.js";
+type Schemas = components["schemas"];
+export type PluginFileResource = Schemas["FileResource"];
+export type PluginFileResourceReview = Schemas["FileResourceReview"];
+export type PluginFileSelectionOptions = Schemas["FileSelectionOptions"];
+export type PluginFileIORequest = Schemas["FileIORequest"];
+export type PluginFileIOResult = Schemas["FileIOResult"];
+export type PluginFileOpenOptions = Extract<PluginFileIORequest, {
+    operation: "fs.open";
+}>["arguments"]["options"];
+export type PluginFileAccessConfirmation = (review: Readonly<PluginFileResourceReview & {
+    signal: AbortSignal;
+}>) => boolean | Promise<boolean>;
+export type PluginFileStat = {
+    uri: string;
+    kind: "file" | "directory";
+    size: bigint;
+    mode: number;
+    modified_unix_ms: number;
+    created_unix_ms?: number;
+};
+export type PluginDirectoryEntry = {
+    name: string;
+    uri: string;
+    kind: "file" | "directory" | "symlink" | "other";
+};
+type FileCall = (request: PluginFileIORequest, options?: PluginBridgeRequestOptions) => Promise<PluginFileIOResult>;
+export declare function isPluginFileResourceReview(value: unknown): value is PluginFileResourceReview;
+export declare function isPluginFileResource(value: unknown): value is PluginFileResource;
+/** Thin client over the Host's selected-resource authority and shared I/O table. */
+export declare class PluginFilesClient {
+    private readonly call;
+    constructor(call: FileCall);
+    select(selection: PluginFileSelectionOptions, options?: PluginBridgeRequestOptions): Promise<PluginFileResource | null>;
+    open(resourceURI: string, flags?: PluginFileOpenOptions, options?: PluginBridgeRequestOptions): Promise<PluginFileHandle>;
+    stat(resourceURI: string, options?: PluginBridgeRequestOptions): Promise<PluginFileStat>;
+    entries(resourceURI: string, options?: PluginBridgeRequestOptions): AsyncGenerator<PluginDirectoryEntry>;
+    mkdir(resourceURI: string, recursive?: boolean, options?: PluginBridgeRequestOptions): Promise<void>;
+    remove(resourceURI: string, recursive?: boolean, options?: PluginBridgeRequestOptions): Promise<void>;
+    rename(from: string, to: string, overwrite?: boolean, options?: PluginBridgeRequestOptions): Promise<void>;
+    copy(from: string, to: string, overwrite?: boolean, options?: PluginBridgeRequestOptions): Promise<void>;
+}
+export declare class PluginFileHandle {
+    #private;
+    private readonly call;
+    private readonly id;
+    constructor(call: FileCall, id: string);
+    read(length?: number, options?: PluginBridgeRequestOptions): Promise<{
+        bytes: Uint8Array;
+        eof: boolean;
+    }>;
+    write(bytes: Uint8Array, options?: PluginBridgeRequestOptions): Promise<number>;
+    seek(offset: bigint, whence?: 0 | 1 | 2, options?: PluginBridgeRequestOptions): Promise<bigint>;
+    sync(options?: PluginBridgeRequestOptions): Promise<void>;
+    close(): Promise<void>;
+}
+/** A rejected write may have changed the file. bytesWritten counts acknowledged bytes only. */
+export declare class PluginFileWriteError extends PluginBridgeError {
+    readonly bytesWritten: number;
+    readonly cause: unknown;
+    constructor(bytesWritten: number, cause: unknown);
+}
+export declare function validFileIORequest(value: unknown): value is PluginFileIORequest;
+export {};

package/dist/files.js

@@ -0,0 +1,255 @@
+import { PluginBridgeError, pluginMutationOutcome } from "./errors.js";
+import { hasAllowedKeys, hasExactKeys, isRecord } from "./http.js";
+const chunkBytes = 65536;
+function invalid(message) { throw new PluginBridgeError("PLUGIN_CONTRACT_MISMATCH", message); }
+function handle(value) {
+    if (typeof value !== "string" || !/^[1-9][0-9]{0,18}$/.test(value) || BigInt(value) > 9223372036854775807n)
+        return invalid("File handle is invalid");
+    return value;
+}
+function uri(value) {
+    if (!validURI(value))
+        throw new PluginBridgeError("PLUGIN_INVALID_REQUEST", "Selected file URI is invalid");
+    return value;
+}
+export function isPluginFileResourceReview(value) {
+    return hasExactKeys(value, ["review_id", "plugin_instance_id", "name", "kind", "recursive", "writable", "review_expires_at", "resource_expires_at"]) &&
+        typeof value.review_id === "string" && /^[0-9a-f]{64}$/.test(value.review_id) &&
+        typeof value.plugin_instance_id === "string" && value.plugin_instance_id.length > 0 && value.plugin_instance_id.length <= 256 &&
+        typeof value.name === "string" && value.name.length > 0 && [...value.name].length <= 255 &&
+        (value.kind === "file" || value.kind === "directory") && typeof value.recursive === "boolean" && (value.kind !== "file" || !value.recursive) && typeof value.writable === "boolean" &&
+        typeof value.review_expires_at === "string" && Number.isFinite(Date.parse(value.review_expires_at)) &&
+        typeof value.resource_expires_at === "string" && Number.isFinite(Date.parse(value.resource_expires_at));
+}
+export function isPluginFileResource(value) {
+    return hasExactKeys(value, ["resource_id", "uri", "name", "kind", "recursive", "writable", "revision", "expires_at", "status"]) &&
+        typeof value.resource_id === "string" && /^selected-[0-9a-f]{64}$/.test(value.resource_id) && value.uri === `redevfs://${value.resource_id}/` &&
+        typeof value.name === "string" && value.name.length > 0 && [...value.name].length <= 255 && (value.kind === "file" || value.kind === "directory") &&
+        typeof value.recursive === "boolean" && (value.kind !== "file" || !value.recursive) && typeof value.writable === "boolean" && Number.isSafeInteger(value.revision) && Number(value.revision) >= 1 &&
+        typeof value.expires_at === "string" && Number.isFinite(Date.parse(value.expires_at)) &&
+        ["active", "revoked", "expired", "unavailable"].includes(String(value.status));
+}
+/** Thin client over the Host's selected-resource authority and shared I/O table. */
+export class PluginFilesClient {
+    call;
+    constructor(call) {
+        this.call = call;
+    }
+    async select(selection, options) {
+        const result = await this.call({ operation: "select", arguments: selection }, options);
+        if (hasExactKeys(result, ["canceled"]) && result.canceled === true)
+            return null;
+        if (!hasExactKeys(result, ["resource"]) || !isPluginFileResource(result.resource))
+            return invalid("File selection response is invalid");
+        return result.resource;
+    }
+    async open(resourceURI, flags = { read: true }, options) {
+        const result = await this.call({ operation: "fs.open", arguments: { uri: uri(resourceURI), options: flags } }, options);
+        return new PluginFileHandle(this.call, handle(result.handle));
+    }
+    async stat(resourceURI, options) {
+        const result = await this.call({ operation: "fs.stat", arguments: { uri: uri(resourceURI) } }, options);
+        const value = result.value;
+        if (!hasExactKeys(result, ["value"]) || !isRecord(value) || !hasAllowedKeys(value, ["uri", "kind", "size", "mode", "modified_unix_ms", "created_unix_ms"]) || !sameFileURI(value.uri, resourceURI) || !["file", "directory"].includes(String(value.kind)) || typeof value.size !== "string" || !/^(0|[1-9][0-9]{0,18})$/.test(value.size) || BigInt(value.size) > 9223372036854775807n || !boundedInteger(value.mode, 0, 4294967295) || !Number.isSafeInteger(value.modified_unix_ms) || (value.created_unix_ms !== undefined && !Number.isSafeInteger(value.created_unix_ms)))
+            return invalid("File stat response is invalid");
+        return { ...value, size: BigInt(value.size) };
+    }
+    async *entries(resourceURI, options) {
+        const opened = await this.call({ operation: "fs.read_dir.open", arguments: { uri: uri(resourceURI) } }, options);
+        const id = handle(opened.handle);
+        let finished = false;
+        let failed = false;
+        try {
+            for (;;) {
+                const result = await this.call({ operation: "read_dir.next", arguments: { handle: id, limit: 128 } }, options);
+                const value = result.value;
+                if (!hasExactKeys(value, ["entries", "eof"]) || !Array.isArray(value.entries) || value.entries.length > 128 || typeof value.eof !== "boolean")
+                    return invalid("Directory page is invalid");
+                for (const entry of value.entries) {
+                    if (!hasExactKeys(entry, ["name", "uri", "kind"]) || typeof entry.name !== "string" || typeof entry.uri !== "string" || !["file", "directory", "symlink", "other"].includes(String(entry.kind)))
+                        return invalid("Directory entry is invalid");
+                    yield entry;
+                }
+                if (value.eof) {
+                    finished = true;
+                    return;
+                }
+                if (value.entries.length === 0)
+                    return invalid("Directory made no progress");
+            }
+        }
+        catch (error) {
+            failed = true;
+            throw error;
+        }
+        finally {
+            if (!finished) {
+                try {
+                    await this.call({ operation: "close", arguments: { handle: id } });
+                }
+                catch (error) {
+                    if (!failed)
+                        throw error;
+                }
+            }
+        }
+    }
+    async mkdir(resourceURI, recursive = false, options) {
+        await this.call({ operation: "fs.mkdir", arguments: { uri: uri(resourceURI), recursive } }, options);
+    }
+    async remove(resourceURI, recursive = false, options) {
+        await this.call({ operation: "fs.remove", arguments: { uri: uri(resourceURI), recursive } }, options);
+    }
+    async rename(from, to, overwrite = false, options) {
+        await this.call({ operation: "fs.rename", arguments: { from: uri(from), to: uri(to), overwrite } }, options);
+    }
+    async copy(from, to, overwrite = false, options) {
+        await this.call({ operation: "fs.copy", arguments: { from: uri(from), to: uri(to), overwrite } }, options);
+    }
+}
+export class PluginFileHandle {
+    call;
+    id;
+    #closed = false;
+    constructor(call, id) {
+        this.call = call;
+        this.id = id;
+    }
+    #active() { if (this.#closed)
+        throw new PluginBridgeError("PLUGIN_BRIDGE_DISPOSED", "File handle is closed"); }
+    async read(length = chunkBytes, options) {
+        this.#active();
+        if (!Number.isSafeInteger(length) || length < 1 || length > chunkBytes)
+            throw new PluginBridgeError("PLUGIN_INVALID_REQUEST", "Read length must be between 1 and 65536");
+        const result = await this.call({ operation: "read", arguments: { handle: this.id, length } }, options);
+        if (!hasExactKeys(result, ["data", "count", "eof"]) || typeof result.data !== "string" || typeof result.eof !== "boolean" || !Number.isSafeInteger(result.count))
+            return invalid("File read response is invalid");
+        let decoded;
+        try {
+            decoded = atob(result.data);
+        }
+        catch {
+            return invalid("File data is invalid");
+        }
+        if (decoded.length !== result.count || decoded.length > length || btoa(decoded) !== result.data)
+            return invalid("File read length is invalid");
+        return { bytes: Uint8Array.from(decoded, c => c.charCodeAt(0)), eof: result.eof };
+    }
+    async write(bytes, options) {
+        this.#active();
+        let written = 0;
+        for (let offset = 0; offset < bytes.byteLength; offset += chunkBytes) {
+            const part = bytes.subarray(offset, offset + chunkBytes);
+            let binary = "";
+            for (const byte of part)
+                binary += String.fromCharCode(byte);
+            try {
+                const result = await this.call({ operation: "write", arguments: { handle: this.id, data: btoa(binary) } }, options);
+                if (!hasExactKeys(result, ["count"]) || result.count !== part.length) {
+                    throw new PluginBridgeError("PLUGIN_CONTRACT_MISMATCH", "File write length is invalid", undefined, undefined, "unknown");
+                }
+                written += result.count;
+            }
+            catch (error) {
+                if (written > 0 || pluginMutationOutcome(error) !== "not_committed")
+                    throw new PluginFileWriteError(written, error);
+                throw error;
+            }
+        }
+        return written;
+    }
+    async seek(offset, whence = 0, options) {
+        this.#active();
+        const result = await this.call({ operation: "seek", arguments: { handle: this.id, offset: offset.toString(), whence } }, options);
+        if (!hasExactKeys(result, ["offset"]) || typeof result.offset !== "string" || !/^(0|[1-9][0-9]{0,18})$/.test(result.offset) || BigInt(result.offset) > 9223372036854775807n)
+            return invalid("File offset is invalid");
+        return BigInt(result.offset);
+    }
+    async sync(options) { this.#active(); await this.call({ operation: "sync", arguments: { handle: this.id } }, options); }
+    async close() {
+        if (this.#closed)
+            return;
+        await this.call({ operation: "close", arguments: { handle: this.id } });
+        this.#closed = true;
+    }
+}
+/** A rejected write may have changed the file. bytesWritten counts acknowledged bytes only. */
+export class PluginFileWriteError extends PluginBridgeError {
+    bytesWritten;
+    cause;
+    constructor(bytesWritten, cause) {
+        super(cause instanceof PluginBridgeError ? cause.errorCode : "PLUGIN_FILE_OPERATION_FAILED", "File write did not finish; inspect the file before retrying", undefined, cause instanceof PluginBridgeError ? cause.details : undefined, "unknown");
+        this.bytesWritten = bytesWritten;
+        this.name = "PluginFileWriteError";
+        this.cause = cause;
+    }
+}
+function validURI(value) {
+    if (typeof value !== "string" || value.length > 4096 || !/^redevfs:\/\/selected-[0-9a-f]{64}\//.test(value))
+        return false;
+    const path = value.slice(value.indexOf("/", 10) + 1);
+    if (path === "")
+        return true;
+    try {
+        return path.split("/").every(part => {
+            if (/[?#]/.test(part))
+                return false;
+            const decoded = decodeURIComponent(part);
+            return decoded !== "" && decoded !== "." && decoded !== ".." && !/[\\/\u0000]/.test(decoded);
+        });
+    }
+    catch {
+        return false;
+    }
+}
+function sameFileURI(actual, expected) {
+    if (!validURI(actual) || !validURI(expected))
+        return false;
+    const normalized = (value) => value.split("/").map(part => decodeURIComponent(part).normalize("NFC")).join("/");
+    return normalized(actual) === normalized(expected);
+}
+function boundedInteger(value, min, max) { return Number.isSafeInteger(value) && Number(value) >= min && Number(value) <= max; }
+function decimal(value, signed = false) {
+    return typeof value === "string" && (signed ? /^(0|-?[1-9][0-9]{0,18})$/ : /^[1-9][0-9]{0,18}$/).test(value) && BigInt(value) <= 9223372036854775807n && BigInt(value) >= (signed ? -9223372036854775808n : 1n);
+}
+function base64(value) {
+    if (typeof value !== "string" || value.length > 87384)
+        return false;
+    try {
+        const raw = atob(value);
+        return raw.length <= chunkBytes && btoa(raw) === value;
+    }
+    catch {
+        return false;
+    }
+}
+export function validFileIORequest(value) {
+    if (!hasExactKeys(value, ["operation", "arguments"]) || !isRecord(value.arguments))
+        return false;
+    const a = value.arguments;
+    const keys = (required, optional = []) => required.every(key => Object.hasOwn(a, key)) && hasAllowedKeys(a, [...required, ...optional]);
+    const flags = (...names) => names.every(name => a[name] === undefined || typeof a[name] === "boolean");
+    switch (value.operation) {
+        case "select": return keys(["kind"], ["recursive", "writable"]) && ["file", "directory"].includes(String(a.kind)) && flags("recursive", "writable") && (a.kind !== "file" || !a.recursive);
+        case "fs.open": {
+            if (!keys(["uri", "options"]) || !validURI(a.uri) || !isRecord(a.options) || !hasAllowedKeys(a.options, ["read", "write", "create", "create_new", "truncate", "append", "mode"]))
+                return false;
+            const o = a.options;
+            return ["read", "write", "create", "create_new", "truncate", "append"].every(key => o[key] === undefined || typeof o[key] === "boolean") && (o.mode === undefined || boundedInteger(o.mode, 0, 511));
+        }
+        case "fs.stat": return keys(["uri"], ["follow_symlinks"]) && validURI(a.uri) && flags("follow_symlinks");
+        case "fs.read_dir.open": return keys(["uri"]) && validURI(a.uri);
+        case "fs.mkdir": return keys(["uri"], ["recursive", "mode"]) && validURI(a.uri) && flags("recursive") && (a.mode === undefined || boundedInteger(a.mode, 0, 511));
+        case "fs.remove": return keys(["uri"], ["recursive"]) && validURI(a.uri) && flags("recursive");
+        case "fs.rename":
+        case "fs.copy": return keys(["from", "to"], ["overwrite"]) && validURI(a.from) && validURI(a.to) && flags("overwrite");
+        case "fs.set_times": return keys(["uri", "accessed_unix_ms", "modified_unix_ms"]) && validURI(a.uri) && Number.isSafeInteger(a.accessed_unix_ms) && Number.isSafeInteger(a.modified_unix_ms);
+        case "read": return keys(["handle", "length"]) && decimal(a.handle) && boundedInteger(a.length, 1, chunkBytes);
+        case "write": return keys(["handle", "data"]) && decimal(a.handle) && base64(a.data);
+        case "seek": return keys(["handle", "offset"], ["whence"]) && decimal(a.handle) && decimal(a.offset, true) && (a.whence === undefined || boundedInteger(a.whence, 0, 2));
+        case "close":
+        case "sync": return keys(["handle"]) && decimal(a.handle);
+        case "read_dir.next": return keys(["handle", "limit"]) && decimal(a.handle) && boundedInteger(a.limit, 1, 256);
+        default: return false;
+    }
+}

package/dist/http.js

@@ -187,6 +187,10 @@ function isPlatformErrorDetails(code, value) {
             Array.from(value.worker_error_message).length <= 4096 &&
             ["runtime", "hostcall", "plugin"].includes(String(value.worker_error_origin));
     }
+    if (code === "PLUGIN_FILE_OPERATION_FAILED") {
+        return hasExactKeys(value, ["file_error_code", "file_retryable"]) && typeof value.file_retryable === "boolean" &&
+            ["INVALID_ARGUMENT", "PERMISSION_DENIED", "NOT_FOUND", "NOT_EMPTY", "ALREADY_EXISTS", "RESOURCE_CLOSED", "RESOURCE_LIMIT", "CROSS_DEVICE", "MOUNT_UNAVAILABLE", "RUNTIME_UNAVAILABLE", "CANCELED", "TIMEOUT", "IO_ERROR"].includes(String(value.file_error_code));
+    }
     if (code === "PLUGIN_JSON_LIMIT_EXCEEDED") {
         return hasExactKeys(value, ["reason"]) &&
             typeof value.reason === "string" && jsonLimitReasons.includes(value.reason);