@jingyi0605/codingns 0.8.0 → 0.8.5

package/dist/server/modules/plugins/plugin-manifest.js

@@ -0,0 +1,420 @@
+import fs from "node:fs";
+import path from "node:path";
+import { AppError } from "../../shared/errors/app-error.js";
+const PLUGIN_ID_PATTERN = /^[a-z0-9]+(?:[._-][a-z0-9]+)*$/;
+const SEMVER_PATTERN = /^\d+\.\d+\.\d+(?:[-+][0-9A-Za-z.-]+)?$/;
+const DESKTOP_PERMISSION_SET = new Set([
+    "open_file",
+    "reveal_in_file_manager"
+]);
+export function readPluginManifest(installRoot) {
+    const normalizedInstallRoot = path.resolve(installRoot);
+    const manifestPath = path.join(normalizedInstallRoot, "plugin.json");
+    if (!fs.existsSync(manifestPath) || !fs.statSync(manifestPath).isFile()) {
+        throw new AppError({
+            statusCode: 400,
+            errorCode: "PLUGIN_MANIFEST_NOT_FOUND",
+            detail: `插件目录缺少 plugin.json：${manifestPath}`
+        });
+    }
+    let rawManifest;
+    try {
+        rawManifest = JSON.parse(fs.readFileSync(manifestPath, "utf8"));
+    }
+    catch (error) {
+        throw new AppError({
+            statusCode: 400,
+            errorCode: "PLUGIN_MANIFEST_INVALID_JSON",
+            detail: `plugin.json 不是合法 JSON：${error instanceof Error ? error.message : "未知错误"}`
+        });
+    }
+    return {
+        manifest: validatePluginManifest(rawManifest, normalizedInstallRoot),
+        installRoot: normalizedInstallRoot,
+        manifestPath
+    };
+}
+export function validatePluginManifest(input, installRoot) {
+    if (!isPlainObject(input)) {
+        throw new AppError({
+            statusCode: 400,
+            errorCode: "PLUGIN_MANIFEST_INVALID",
+            detail: "plugin.json 顶层必须是对象"
+        });
+    }
+    const id = readRequiredString(input.id, "id");
+    const name = readRequiredString(input.name, "name");
+    const version = readRequiredString(input.version, "version");
+    const description = readOptionalString(input.description);
+    if (!PLUGIN_ID_PATTERN.test(id)) {
+        throw new AppError({
+            statusCode: 400,
+            errorCode: "PLUGIN_MANIFEST_INVALID_ID",
+            detail: "插件 id 只允许小写字母、数字以及 . _ -",
+            field: "id"
+        });
+    }
+    if (!SEMVER_PATTERN.test(version)) {
+        throw new AppError({
+            statusCode: 400,
+            errorCode: "PLUGIN_MANIFEST_INVALID_VERSION",
+            detail: "插件 version 必须是合法 semver，例如 1.0.0",
+            field: "version"
+        });
+    }
+    const frontend = parseFrontend(input.frontend, installRoot);
+    const backend = parseBackend(input.backend, installRoot);
+    if (!frontend && !backend) {
+        throw new AppError({
+            statusCode: 400,
+            errorCode: "PLUGIN_MANIFEST_ENTRY_REQUIRED",
+            detail: "插件至少要声明 frontend 或 backend"
+        });
+    }
+    const permissions = parsePermissions(input.permissions);
+    const schedules = parseSchedules(input.schedules, backend?.actions ?? []);
+    return {
+        id,
+        name,
+        version,
+        description: description ?? undefined,
+        frontend: frontend ?? undefined,
+        backend: backend ?? undefined,
+        permissions,
+        schedules: schedules.length > 0 ? schedules : undefined
+    };
+}
+function parseFrontend(value, installRoot) {
+    if (value === undefined || value === null) {
+        return undefined;
+    }
+    if (!isPlainObject(value)) {
+        throw new AppError({
+            statusCode: 400,
+            errorCode: "PLUGIN_FRONTEND_INVALID",
+            detail: "frontend 必须是对象",
+            field: "frontend"
+        });
+    }
+    const entry = readRequiredString(value.entry, "frontend.entry");
+    ensureInstallRootRelativeFile(installRoot, entry, "frontend.entry");
+    const mode = readOptionalString(value.mode);
+    if (mode && mode !== "static_html") {
+        throw new AppError({
+            statusCode: 400,
+            errorCode: "PLUGIN_FRONTEND_MODE_INVALID",
+            detail: "frontend.mode 目前只支持 static_html",
+            field: "frontend.mode"
+        });
+    }
+    return {
+        entry: normalizeManifestPath(entry),
+        mode: mode === "static_html" ? "static_html" : undefined
+    };
+}
+function parseBackend(value, installRoot) {
+    if (value === undefined || value === null) {
+        return undefined;
+    }
+    if (!isPlainObject(value)) {
+        throw new AppError({
+            statusCode: 400,
+            errorCode: "PLUGIN_BACKEND_INVALID",
+            detail: "backend 必须是对象",
+            field: "backend"
+        });
+    }
+    const runtime = readRequiredString(value.runtime, "backend.runtime");
+    if (runtime !== "node") {
+        throw new AppError({
+            statusCode: 400,
+            errorCode: "PLUGIN_BACKEND_RUNTIME_INVALID",
+            detail: "backend.runtime 目前只支持 node",
+            field: "backend.runtime"
+        });
+    }
+    const mode = readOptionalString(value.mode);
+    if (mode && mode !== "on_demand" && mode !== "daemon") {
+        throw new AppError({
+            statusCode: 400,
+            errorCode: "PLUGIN_BACKEND_MODE_INVALID",
+            detail: "backend.mode 只允许 on_demand 或 daemon",
+            field: "backend.mode"
+        });
+    }
+    if (!Array.isArray(value.actions) || value.actions.length === 0) {
+        throw new AppError({
+            statusCode: 400,
+            errorCode: "PLUGIN_BACKEND_ACTIONS_REQUIRED",
+            detail: "backend.actions 至少要有一个动作",
+            field: "backend.actions"
+        });
+    }
+    const actionIdSet = new Set();
+    const actions = value.actions.map((item, index) => {
+        if (!isPlainObject(item)) {
+            throw new AppError({
+                statusCode: 400,
+                errorCode: "PLUGIN_ACTION_INVALID",
+                detail: `backend.actions[${index}] 必须是对象`,
+                field: `backend.actions[${index}]`
+            });
+        }
+        const id = readRequiredString(item.id, `backend.actions[${index}].id`);
+        const title = readRequiredString(item.title, `backend.actions[${index}].title`);
+        const entry = readRequiredString(item.entry, `backend.actions[${index}].entry`);
+        ensureInstallRootRelativeFile(installRoot, entry, `backend.actions[${index}].entry`);
+        if (!PLUGIN_ID_PATTERN.test(id)) {
+            throw new AppError({
+                statusCode: 400,
+                errorCode: "PLUGIN_ACTION_ID_INVALID",
+                detail: `动作 id 不合法：${id}`,
+                field: `backend.actions[${index}].id`
+            });
+        }
+        if (actionIdSet.has(id)) {
+            throw new AppError({
+                statusCode: 400,
+                errorCode: "PLUGIN_ACTION_ID_DUPLICATED",
+                detail: `动作 id 重复：${id}`,
+                field: `backend.actions[${index}].id`
+            });
+        }
+        actionIdSet.add(id);
+        const timeoutMs = readOptionalPositiveInteger(item.timeoutMs, `backend.actions[${index}].timeoutMs`);
+        const inputSchemaJson = serializeOptionalJson(item.inputSchemaJson ?? item.inputSchema);
+        const outputSchemaJson = serializeOptionalJson(item.outputSchemaJson ?? item.outputSchema);
+        return {
+            id,
+            title,
+            entry: normalizeManifestPath(entry),
+            timeoutMs: timeoutMs ?? undefined,
+            inputSchemaJson: inputSchemaJson ?? undefined,
+            outputSchemaJson: outputSchemaJson ?? undefined
+        };
+    });
+    return {
+        runtime: "node",
+        mode: mode === "daemon" ? "daemon" : mode === "on_demand" ? "on_demand" : undefined,
+        actions
+    };
+}
+function parsePermissions(value) {
+    if (!isPlainObject(value)) {
+        throw new AppError({
+            statusCode: 400,
+            errorCode: "PLUGIN_PERMISSIONS_REQUIRED",
+            detail: "permissions 必须是对象",
+            field: "permissions"
+        });
+    }
+    const desktop = value.desktop === undefined
+        ? undefined
+        : readDesktopPermissions(value.desktop);
+    const hostApis = value.hostApis === undefined
+        ? undefined
+        : readStringArray(value.hostApis, "permissions.hostApis");
+    return {
+        workspaceRead: readOptionalBoolean(value.workspaceRead) ?? undefined,
+        workspaceWrite: readOptionalBoolean(value.workspaceWrite) ?? undefined,
+        network: readOptionalBoolean(value.network) ?? undefined,
+        desktop: desktop && desktop.length > 0 ? desktop : undefined,
+        hostApis: hostApis && hostApis.length > 0 ? hostApis : undefined
+    };
+}
+function parseSchedules(value, actions) {
+    if (value === undefined || value === null) {
+        return [];
+    }
+    if (!Array.isArray(value)) {
+        throw new AppError({
+            statusCode: 400,
+            errorCode: "PLUGIN_SCHEDULES_INVALID",
+            detail: "schedules 必须是数组",
+            field: "schedules"
+        });
+    }
+    const actionIds = new Set(actions.map((item) => item.id));
+    const scheduleIdSet = new Set();
+    return value.map((item, index) => {
+        if (!isPlainObject(item)) {
+            throw new AppError({
+                statusCode: 400,
+                errorCode: "PLUGIN_SCHEDULE_INVALID",
+                detail: `schedules[${index}] 必须是对象`,
+                field: `schedules[${index}]`
+            });
+        }
+        const id = readRequiredString(item.id, `schedules[${index}].id`);
+        const actionId = readRequiredString(item.actionId, `schedules[${index}].actionId`);
+        const cron = readOptionalString(item.cron);
+        const everySeconds = readOptionalPositiveInteger(item.everySeconds, `schedules[${index}].everySeconds`);
+        if (scheduleIdSet.has(id)) {
+            throw new AppError({
+                statusCode: 400,
+                errorCode: "PLUGIN_SCHEDULE_ID_DUPLICATED",
+                detail: `schedule id 重复：${id}`,
+                field: `schedules[${index}].id`
+            });
+        }
+        scheduleIdSet.add(id);
+        if (!actionIds.has(actionId)) {
+            throw new AppError({
+                statusCode: 400,
+                errorCode: "PLUGIN_SCHEDULE_ACTION_NOT_FOUND",
+                detail: `schedule 绑定的 action 不存在：${actionId}`,
+                field: `schedules[${index}].actionId`
+            });
+        }
+        if (!cron && !everySeconds) {
+            throw new AppError({
+                statusCode: 400,
+                errorCode: "PLUGIN_SCHEDULE_TRIGGER_REQUIRED",
+                detail: "schedule 至少要声明 cron 或 everySeconds",
+                field: `schedules[${index}]`
+            });
+        }
+        return {
+            id,
+            cron: cron ?? undefined,
+            everySeconds: everySeconds ?? undefined,
+            actionId,
+            inputJson: serializeOptionalJson(item.inputJson ?? item.input) ?? undefined
+        };
+    });
+}
+function readDesktopPermissions(value) {
+    if (!Array.isArray(value)) {
+        throw new AppError({
+            statusCode: 400,
+            errorCode: "PLUGIN_DESKTOP_PERMISSIONS_INVALID",
+            detail: "permissions.desktop 必须是数组",
+            field: "permissions.desktop"
+        });
+    }
+    return value.map((item, index) => {
+        if (typeof item !== "string" || !DESKTOP_PERMISSION_SET.has(item)) {
+            throw new AppError({
+                statusCode: 400,
+                errorCode: "PLUGIN_DESKTOP_PERMISSION_UNKNOWN",
+                detail: `不支持的桌面权限：${String(item)}`,
+                field: `permissions.desktop[${index}]`
+            });
+        }
+        return item;
+    });
+}
+function ensureInstallRootRelativeFile(installRoot, requestedPath, field) {
+    const normalizedPath = normalizeManifestPath(requestedPath);
+    const absolutePath = path.resolve(installRoot, normalizedPath);
+    const relative = path.relative(installRoot, absolutePath);
+    if (path.isAbsolute(requestedPath)
+        || normalizedPath.startsWith("../")
+        || normalizedPath === ".."
+        || relative === ".."
+        || relative.startsWith(`..${path.sep}`)
+        || path.isAbsolute(relative)) {
+        throw new AppError({
+            statusCode: 400,
+            errorCode: "PLUGIN_PATH_OUT_OF_ROOT",
+            detail: `${field} 超出插件目录边界`,
+            field
+        });
+    }
+    if (!fs.existsSync(absolutePath) || !fs.statSync(absolutePath).isFile()) {
+        throw new AppError({
+            statusCode: 400,
+            errorCode: "PLUGIN_ENTRY_NOT_FOUND",
+            detail: `${field} 指向的文件不存在：${normalizedPath}`,
+            field
+        });
+    }
+    return absolutePath;
+}
+function normalizeManifestPath(input) {
+    return input.replaceAll("\\", "/").replace(/^\.\/+/, "");
+}
+function readRequiredString(value, field) {
+    const normalized = readOptionalString(value);
+    if (!normalized) {
+        throw new AppError({
+            statusCode: 400,
+            errorCode: "PLUGIN_MANIFEST_REQUIRED_FIELD_MISSING",
+            detail: `缺少必要字段：${field}`,
+            field
+        });
+    }
+    return normalized;
+}
+function readOptionalString(value) {
+    if (typeof value !== "string") {
+        return null;
+    }
+    const trimmed = value.trim();
+    return trimmed.length > 0 ? trimmed : null;
+}
+function readOptionalBoolean(value) {
+    return typeof value === "boolean" ? value : null;
+}
+function readOptionalPositiveInteger(value, field) {
+    if (value === undefined || value === null) {
+        return null;
+    }
+    if (!Number.isInteger(value) || Number(value) <= 0) {
+        throw new AppError({
+            statusCode: 400,
+            errorCode: "PLUGIN_INTEGER_INVALID",
+            detail: `${field} 必须是正整数`,
+            field
+        });
+    }
+    return Number(value);
+}
+function readStringArray(value, field) {
+    if (!Array.isArray(value)) {
+        throw new AppError({
+            statusCode: 400,
+            errorCode: "PLUGIN_STRING_ARRAY_INVALID",
+            detail: `${field} 必须是字符串数组`,
+            field
+        });
+    }
+    return value.map((item, index) => {
+        const normalized = readOptionalString(item);
+        if (!normalized) {
+            throw new AppError({
+                statusCode: 400,
+                errorCode: "PLUGIN_STRING_ARRAY_ITEM_INVALID",
+                detail: `${field}[${index}] 必须是非空字符串`,
+                field: `${field}[${index}]`
+            });
+        }
+        return normalized;
+    });
+}
+function serializeOptionalJson(value) {
+    if (value === undefined) {
+        return null;
+    }
+    if (value === null) {
+        return "null";
+    }
+    if (typeof value === "string") {
+        const trimmed = value.trim();
+        if (!trimmed) {
+            return null;
+        }
+        try {
+            JSON.parse(trimmed);
+            return trimmed;
+        }
+        catch {
+            return JSON.stringify(value);
+        }
+    }
+    return JSON.stringify(value);
+}
+function isPlainObject(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+//# sourceMappingURL=plugin-manifest.js.map

package/dist/server/modules/plugins/plugin-manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-manifest.js","sourceRoot":"","sources":["../../../../src/modules/plugins/plugin-manifest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,QAAQ,EAAE,MAAM,kCAAkC,CAAC;AAS5D,MAAM,iBAAiB,GAAG,gCAAgC,CAAC;AAC3D,MAAM,cAAc,GAAG,wCAAwC,CAAC;AAChE,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAA0B;IAC9D,WAAW;IACX,wBAAwB;CACzB,CAAC,CAAC;AAQH,MAAM,UAAU,kBAAkB,CAAC,WAAmB;IACpD,MAAM,qBAAqB,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IACxD,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,qBAAqB,EAAE,aAAa,CAAC,CAAC;IAErE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;QACxE,MAAM,IAAI,QAAQ,CAAC;YACjB,UAAU,EAAE,GAAG;YACf,SAAS,EAAE,2BAA2B;YACtC,MAAM,EAAE,sBAAsB,YAAY,EAAE;SAC7C,CAAC,CAAC;IACL,CAAC;IAED,IAAI,WAAoB,CAAC;IAEzB,IAAI,CAAC;QACH,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC;IAClE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,QAAQ,CAAC;YACjB,UAAU,EAAE,GAAG;YACf,SAAS,EAAE,8BAA8B;YACzC,MAAM,EAAE,yBAAyB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,EAAE;SACnF,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,QAAQ,EAAE,sBAAsB,CAAC,WAAW,EAAE,qBAAqB,CAAC;QACpE,WAAW,EAAE,qBAAqB;QAClC,YAAY;KACb,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,KAAc,EAAE,WAAmB;IACxE,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,QAAQ,CAAC;YACjB,UAAU,EAAE,GAAG;YACf,SAAS,EAAE,yBAAyB;YACpC,MAAM,EAAE,qBAAqB;SAC9B,CAAC,CAAC;IACL,CAAC;IAED,MAAM,EAAE,GAAG,kBAAkB,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IAC9C,MAAM,IAAI,GAAG,kBAAkB,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACpD,MAAM,OAAO,GAAG,kBAAkB,CAAC,KAAK,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAC7D,MAAM,WAAW,GAAG,kBAAkB,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAE1D,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,QAAQ,CAAC;YACjB,UAAU,EAAE,GAAG;YACf,SAAS,EAAE,4BAA4B;YACvC,MAAM,EAAE,0BAA0B;YAClC,KAAK,EAAE,IAAI;SACZ,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,QAAQ,CAAC;YACjB,UAAU,EAAE,GAAG;YACf,SAAS,EAAE,iCAAiC;YAC5C,MAAM,EAAE,kCAAkC;YAC1C,KAAK,EAAE,SAAS;SACjB,CAAC,CAAC;IACL,CAAC;IAED,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IAC5D,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAEzD,IAAI,CAAC,QAAQ,IAAI,CAAC,OAAO,EAAE,CAAC;QAC1B,MAAM,IAAI,QAAQ,CAAC;YACjB,UAAU,EAAE,GAAG;YACf,SAAS,EAAE,gCAAgC;YAC3C,MAAM,EAAE,4BAA4B;SACrC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,WAAW,GAAG,gBAAgB,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IACxD,MAAM,SAAS,GAAG,cAAc,CAAC,KAAK,CAAC,SAAS,EAAE,OAAO,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC;IAE1E,OAAO;QACL,EAAE;QACF,IAAI;QACJ,OAAO;QACP,WAAW,EAAE,WAAW,IAAI,SAAS;QACrC,QAAQ,EAAE,QAAQ,IAAI,SAAS;QAC/B,OAAO,EAAE,OAAO,IAAI,SAAS;QAC7B,WAAW;QACX,SAAS,EAAE,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;KACxD,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,KAAc,EAAE,WAAmB;IACxD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAC1C,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,QAAQ,CAAC;YACjB,UAAU,EAAE,GAAG;YACf,SAAS,EAAE,yBAAyB;YACpC,MAAM,EAAE,gBAAgB;YACxB,KAAK,EAAE,UAAU;SAClB,CAAC,CAAC;IACL,CAAC;IAED,MAAM,KAAK,GAAG,kBAAkB,CAAC,KAAK,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;IAChE,6BAA6B,CAAC,WAAW,EAAE,KAAK,EAAE,gBAAgB,CAAC,CAAC;IACpE,MAAM,IAAI,GAAG,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAE5C,IAAI,IAAI,IAAI,IAAI,KAAK,aAAa,EAAE,CAAC;QACnC,MAAM,IAAI,QAAQ,CAAC;YACjB,UAAU,EAAE,GAAG;YACf,SAAS,EAAE,8BAA8B;YACzC,MAAM,EAAE,iCAAiC;YACzC,KAAK,EAAE,eAAe;SACvB,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,KAAK,EAAE,qBAAqB,CAAC,KAAK,CAAC;QACnC,IAAI,EAAE,IAAI,KAAK,aAAa,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS;KACzD,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,KAAc,EAAE,WAAmB;IACvD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAC1C,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,QAAQ,CAAC;YACjB,UAAU,EAAE,GAAG;YACf,SAAS,EAAE,wBAAwB;YACnC,MAAM,EAAE,eAAe;YACvB,KAAK,EAAE,SAAS;SACjB,CAAC,CAAC;IACL,CAAC;IAED,MAAM,OAAO,GAAG,kBAAkB,CAAC,KAAK,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;IACrE,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;QACvB,MAAM,IAAI,QAAQ,CAAC;YACjB,UAAU,EAAE,GAAG;YACf,SAAS,EAAE,gCAAgC;YAC3C,MAAM,EAAE,4BAA4B;YACpC,KAAK,EAAE,iBAAiB;SACzB,CAAC,CAAC;IACL,CAAC;IAED,MAAM,IAAI,GAAG,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5C,IAAI,IAAI,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtD,MAAM,IAAI,QAAQ,CAAC;YACjB,UAAU,EAAE,GAAG;YACf,SAAS,EAAE,6BAA6B;YACxC,MAAM,EAAE,qCAAqC;YAC7C,KAAK,EAAE,cAAc;SACtB,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,QAAQ,CAAC;YACjB,UAAU,EAAE,GAAG;YACf,SAAS,EAAE,iCAAiC;YAC5C,MAAM,EAAE,0BAA0B;YAClC,KAAK,EAAE,iBAAiB;SACzB,CAAC,CAAC;IACL,CAAC;IAED,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;IACtC,MAAM,OAAO,GAA6B,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QAC1E,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,QAAQ,CAAC;gBACjB,UAAU,EAAE,GAAG;gBACf,SAAS,EAAE,uBAAuB;gBAClC,MAAM,EAAE,mBAAmB,KAAK,SAAS;gBACzC,KAAK,EAAE,mBAAmB,KAAK,GAAG;aACnC,CAAC,CAAC;QACL,CAAC;QAED,MAAM,EAAE,GAAG,kBAAkB,CAAC,IAAI,CAAC,EAAE,EAAE,mBAAmB,KAAK,MAAM,CAAC,CAAC;QACvE,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,KAAK,EAAE,mBAAmB,KAAK,SAAS,CAAC,CAAC;QAChF,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,KAAK,EAAE,mBAAmB,KAAK,SAAS,CAAC,CAAC;QAChF,6BAA6B,CAAC,WAAW,EAAE,KAAK,EAAE,mBAAmB,KAAK,SAAS,CAAC,CAAC;QAErF,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,QAAQ,CAAC;gBACjB,UAAU,EAAE,GAAG;gBACf,SAAS,EAAE,0BAA0B;gBACrC,MAAM,EAAE,aAAa,EAAE,EAAE;gBACzB,KAAK,EAAE,mBAAmB,KAAK,MAAM;aACtC,CAAC,CAAC;QACL,CAAC;QAED,IAAI,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,QAAQ,CAAC;gBACjB,UAAU,EAAE,GAAG;gBACf,SAAS,EAAE,6BAA6B;gBACxC,MAAM,EAAE,YAAY,EAAE,EAAE;gBACxB,KAAK,EAAE,mBAAmB,KAAK,MAAM;aACtC,CAAC,CAAC;QACL,CAAC;QACD,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAEpB,MAAM,SAAS,GAAG,2BAA2B,CAAC,IAAI,CAAC,SAAS,EAAE,mBAAmB,KAAK,aAAa,CAAC,CAAC;QACrG,MAAM,eAAe,GAAG,qBAAqB,CAAC,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC,WAAW,CAAC,CAAC;QACxF,MAAM,gBAAgB,GAAG,qBAAqB,CAAC,IAAI,CAAC,gBAAgB,IAAI,IAAI,CAAC,YAAY,CAAC,CAAC;QAE3F,OAAO;YACL,EAAE;YACF,KAAK;YACL,KAAK,EAAE,qBAAqB,CAAC,KAAK,CAAC;YACnC,SAAS,EAAE,SAAS,IAAI,SAAS;YACjC,eAAe,EAAE,eAAe,IAAI,SAAS;YAC7C,gBAAgB,EAAE,gBAAgB,IAAI,SAAS;SAChD,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,OAAO,EAAE,MAAM;QACf,IAAI,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;QACnF,OAAO;KACR,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,QAAQ,CAAC;YACjB,UAAU,EAAE,GAAG;YACf,SAAS,EAAE,6BAA6B;YACxC,MAAM,EAAE,mBAAmB;YAC3B,KAAK,EAAE,aAAa;SACrB,CAAC,CAAC;IACL,CAAC;IAED,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,KAAK,SAAS;QACzC,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,sBAAsB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC1C,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,KAAK,SAAS;QAC3C,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,QAAQ,EAAE,sBAAsB,CAAC,CAAC;IAE5D,OAAO;QACL,aAAa,EAAE,mBAAmB,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,SAAS;QACpE,cAAc,EAAE,mBAAmB,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,SAAS;QACtE,OAAO,EAAE,mBAAmB,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,SAAS;QACxD,OAAO,EAAE,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;QAC5D,QAAQ,EAAE,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;KACjE,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,KAAc,EAAE,OAAiC;IACvE,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAC1C,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,QAAQ,CAAC;YACjB,UAAU,EAAE,GAAG;YACf,SAAS,EAAE,0BAA0B;YACrC,MAAM,EAAE,iBAAiB;YACzB,KAAK,EAAE,WAAW;SACnB,CAAC,CAAC;IACL,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;IAC1D,MAAM,aAAa,GAAG,IAAI,GAAG,EAAU,CAAC;IAExC,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QAC/B,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,QAAQ,CAAC;gBACjB,UAAU,EAAE,GAAG;gBACf,SAAS,EAAE,yBAAyB;gBACpC,MAAM,EAAE,aAAa,KAAK,SAAS;gBACnC,KAAK,EAAE,aAAa,KAAK,GAAG;aAC7B,CAAC,CAAC;QACL,CAAC;QAED,MAAM,EAAE,GAAG,kBAAkB,CAAC,IAAI,CAAC,EAAE,EAAE,aAAa,KAAK,MAAM,CAAC,CAAC;QACjE,MAAM,QAAQ,GAAG,kBAAkB,CAAC,IAAI,CAAC,QAAQ,EAAE,aAAa,KAAK,YAAY,CAAC,CAAC;QACnF,MAAM,IAAI,GAAG,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3C,MAAM,YAAY,GAAG,2BAA2B,CAAC,IAAI,CAAC,YAAY,EAAE,aAAa,KAAK,gBAAgB,CAAC,CAAC;QAExG,IAAI,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,QAAQ,CAAC;gBACjB,UAAU,EAAE,GAAG;gBACf,SAAS,EAAE,+BAA+B;gBAC1C,MAAM,EAAE,kBAAkB,EAAE,EAAE;gBAC9B,KAAK,EAAE,aAAa,KAAK,MAAM;aAChC,CAAC,CAAC;QACL,CAAC;QACD,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAEtB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,QAAQ,CAAC;gBACjB,UAAU,EAAE,GAAG;gBACf,SAAS,EAAE,kCAAkC;gBAC7C,MAAM,EAAE,2BAA2B,QAAQ,EAAE;gBAC7C,KAAK,EAAE,aAAa,KAAK,YAAY;aACtC,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YAC3B,MAAM,IAAI,QAAQ,CAAC;gBACjB,UAAU,EAAE,GAAG;gBACf,SAAS,EAAE,kCAAkC;gBAC7C,MAAM,EAAE,oCAAoC;gBAC5C,KAAK,EAAE,aAAa,KAAK,GAAG;aAC7B,CAAC,CAAC;QACL,CAAC;QAED,OAAO;YACL,EAAE;YACF,IAAI,EAAE,IAAI,IAAI,SAAS;YACvB,YAAY,EAAE,YAAY,IAAI,SAAS;YACvC,QAAQ;YACR,SAAS,EAAE,qBAAqB,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,SAAS;SAC5E,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAc;IAC5C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,QAAQ,CAAC;YACjB,UAAU,EAAE,GAAG;YACf,SAAS,EAAE,oCAAoC;YAC/C,MAAM,EAAE,2BAA2B;YACnC,KAAK,EAAE,qBAAqB;SAC7B,CAAC,CAAC;IACL,CAAC;IAED,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QAC/B,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,IAA+B,CAAC,EAAE,CAAC;YAC7F,MAAM,IAAI,QAAQ,CAAC;gBACjB,UAAU,EAAE,GAAG;gBACf,SAAS,EAAE,mCAAmC;gBAC9C,MAAM,EAAE,YAAY,MAAM,CAAC,IAAI,CAAC,EAAE;gBAClC,KAAK,EAAE,uBAAuB,KAAK,GAAG;aACvC,CAAC,CAAC;QACL,CAAC;QAED,OAAO,IAA+B,CAAC;IACzC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,6BAA6B,CAAC,WAAmB,EAAE,aAAqB,EAAE,KAAa;IAC9F,MAAM,cAAc,GAAG,qBAAqB,CAAC,aAAa,CAAC,CAAC;IAC5D,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;IAC/D,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;IAE1D,IACE,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC;WAC3B,cAAc,CAAC,UAAU,CAAC,KAAK,CAAC;WAChC,cAAc,KAAK,IAAI;WACvB,QAAQ,KAAK,IAAI;WACjB,QAAQ,CAAC,UAAU,CAAC,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC;WACpC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAC5B,CAAC;QACD,MAAM,IAAI,QAAQ,CAAC;YACjB,UAAU,EAAE,GAAG;YACf,SAAS,EAAE,yBAAyB;YACpC,MAAM,EAAE,GAAG,KAAK,WAAW;YAC3B,KAAK;SACN,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;QACxE,MAAM,IAAI,QAAQ,CAAC;YACjB,UAAU,EAAE,GAAG;YACf,SAAS,EAAE,wBAAwB;YACnC,MAAM,EAAE,GAAG,KAAK,aAAa,cAAc,EAAE;YAC7C,KAAK;SACN,CAAC,CAAC;IACL,CAAC;IAED,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAa;IAC1C,OAAO,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc,EAAE,KAAa;IACvD,MAAM,UAAU,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAC7C,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,QAAQ,CAAC;YACjB,UAAU,EAAE,GAAG;YACf,SAAS,EAAE,wCAAwC;YACnD,MAAM,EAAE,UAAU,KAAK,EAAE;YACzB,KAAK;SACN,CAAC,CAAC;IACL,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACxC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7C,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc;IACzC,OAAO,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AACnD,CAAC;AAED,SAAS,2BAA2B,CAAC,KAAc,EAAE,KAAa;IAChE,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAC1C,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,MAAM,IAAI,QAAQ,CAAC;YACjB,UAAU,EAAE,GAAG;YACf,SAAS,EAAE,wBAAwB;YACnC,MAAM,EAAE,GAAG,KAAK,SAAS;YACzB,KAAK;SACN,CAAC,CAAC;IACL,CAAC;IAED,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC;AAED,SAAS,eAAe,CAAC,KAAc,EAAE,KAAa;IACpD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,QAAQ,CAAC;YACjB,UAAU,EAAE,GAAG;YACf,SAAS,EAAE,6BAA6B;YACxC,MAAM,EAAE,GAAG,KAAK,WAAW;YAC3B,KAAK;SACN,CAAC,CAAC;IACL,CAAC;IAED,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QAC/B,MAAM,UAAU,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,QAAQ,CAAC;gBACjB,UAAU,EAAE,GAAG;gBACf,SAAS,EAAE,kCAAkC;gBAC7C,MAAM,EAAE,GAAG,KAAK,IAAI,KAAK,YAAY;gBACrC,KAAK,EAAE,GAAG,KAAK,IAAI,KAAK,GAAG;aAC5B,CAAC,CAAC;QACL,CAAC;QAED,OAAO,UAAU,CAAC;IACpB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAc;IAC3C,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;QAC7B,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,CAAC;YACH,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACpB,OAAO,OAAO,CAAC;QACjB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC"}

package/dist/server/modules/plugins/plugin-permission-service.d.ts

@@ -0,0 +1,49 @@
+import type { PluginAuditEventRepository } from "../../storage/repositories/plugin-audit-event-repository.js";
+import type { PluginPermissionGrantRepository } from "../../storage/repositories/plugin-permission-grant-repository.js";
+import type { PluginDesktopPermission, PluginManifest, PluginPermissionGrant, PluginPermissionGrantMode, PluginPermissionKey } from "../../types/domain.js";
+export interface PluginRuntimeContext {
+    pluginId: string;
+    workspaceId: string;
+}
+export interface PluginGrantRequestInput {
+    manifest: PluginManifest;
+    pluginId: string;
+    workspaceId: string;
+    permissionKey: PluginPermissionKey;
+    scopeType: "workspace" | "directory" | "file";
+    scopePath: string | null;
+    grantMode: PluginPermissionGrantMode;
+    runtimeSessionId: string | null;
+    grantedByUserId: string;
+}
+export declare class PluginPermissionService {
+    private readonly pluginPermissionGrantRepository?;
+    private readonly pluginAuditEventRepository?;
+    constructor(pluginPermissionGrantRepository?: PluginPermissionGrantRepository | undefined, pluginAuditEventRepository?: PluginAuditEventRepository | undefined);
+    assertWorkspaceScopedContext(workspaceId: string | null | undefined): string;
+    assertManifestPermissionDeclared(manifest: PluginManifest, permissionKey: PluginPermissionKey): void;
+    requirePermissionGrant(input: {
+        manifest: PluginManifest;
+        pluginId: string;
+        workspaceId: string;
+        permissionKey: PluginPermissionKey;
+        scopePath?: string | null;
+        runtimeSessionId?: string | null;
+    }): PluginPermissionGrant;
+    assertWorkspaceRead(manifest: PluginManifest, context: PluginRuntimeContext): PluginPermissionGrant;
+    assertWorkspaceWrite(manifest: PluginManifest, context: PluginRuntimeContext, scopePath?: string | null): PluginPermissionGrant;
+    assertDesktopPermission(manifest: PluginManifest, context: PluginRuntimeContext, permission: PluginDesktopPermission, scopePath?: string | null, runtimeSessionId?: string | null): PluginPermissionGrant;
+    listWorkspaceGrants(pluginId: string, workspaceId: string): PluginPermissionGrant[];
+    createGrant(input: PluginGrantRequestInput): PluginPermissionGrant;
+    revokeGrant(pluginId: string, workspaceId: string, grantId: string, actorUserId: string): PluginPermissionGrant;
+    recordPermissionDenied(input: {
+        pluginId: string;
+        workspaceId: string;
+        actorUserId: string | null;
+        permissionKey: PluginPermissionKey;
+        scopePath: string | null;
+        runtimeSessionId?: string | null;
+        reason: "declaration_missing" | "grant_required";
+    }): void;
+    private recordAuditEvent;
+}