@lvce-editor/shared-process 0.103.9 → 0.103.10

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lvce-editor/shared-process",
-  "version": "0.103.9",
+  "version": "0.103.10",
   "main": "index.js",
   "type": "module",
   "keywords": [
@@ -18,7 +18,7 @@
   },
   "dependencies": {
     "@lvce-editor/assert": "1.9.0",
-    "@lvce-editor/extension-host-helper-process": "0.103.9",
+    "@lvce-editor/extension-host-helper-process": "0.103.10",
     "@lvce-editor/ipc": "16.11.0",
     "@lvce-editor/json-rpc": "8.6.0",
     "@lvce-editor/jsonc-parser": "1.5.0",

package/src/parts/BuiltinExtensionsPath/BuiltinExtensionsPath.js

@@ -3,6 +3,6 @@ import { fileURLToPath } from 'url'
 
 export const getBuiltinExtensionsPath = () => {
   const staticServerPath = fileURLToPath(import.meta.resolve('@lvce-editor/static-server'))
-  const builtinExtensionsPath = join(staticServerPath, '..', '..', 'static', '72acf91', 'extensions')
+  const builtinExtensionsPath = join(staticServerPath, '..', '..', 'static', 'ffb9403', 'extensions')
   return builtinExtensionsPath
 }

package/src/parts/ExtensionManifests/ExtensionManifests.js

@@ -34,7 +34,7 @@ const addExtensionDisabledStatus = (uniqueExtensions, disabledExtensionIds) => {
   return uniqueExtensions.map((extension) => {
     return {
       ...extension,
-      disabled: disabledExtensionIds.includes(extension.id),
+      disabled: extension.disabled === true || disabledExtensionIds.includes(extension.id),
       isBuiltin: isBuiltin(extension),
     }
   })

package/src/parts/HandleWebSocketForExtensionHostHelperProcess/HandleWebSocketForExtensionHostHelperProcess.js

@@ -1,6 +1,31 @@
+import * as ExtensionHostHelperProcessIpc from '../ExtensionHostHelperProcessIpc/ExtensionHostHelperProcessIpc.js'
 import * as HandleIncomingIpc from '../HandleIncomingIpc/HandleIncomingIpc.js'
+import * as HandleIpc from '../HandleIpc/HandleIpc.js'
 import * as IpcId from '../IpcId/IpcId.js'
+import * as IpcParentType from '../IpcParentType/IpcParentType.js'
+import * as JsonRpc from '../JsonRpc/JsonRpc.js'
+import * as ResolveExtensionNodeRpcPath from '../ResolveExtensionNodeRpcPath/ResolveExtensionNodeRpcPath.js'
 
-export const handleWebSocket = (message, handle) => {
-  return HandleIncomingIpc.handleIncomingIpc(IpcId.ExtensionHostHelperProcess, handle, message)
+export const handleWebSocket = async (message, handle) => {
+  const url = new URL(message.url, 'http://localhost')
+  const extensionId = url.searchParams.get('extensionId')
+  const rpcId = url.searchParams.get('rpcId')
+  if (!extensionId && !rpcId) {
+    return HandleIncomingIpc.handleIncomingIpc(IpcId.ExtensionHostHelperProcess, handle, message)
+  }
+  if (!extensionId || !rpcId) {
+    throw new Error('Remote extension node rpc request is incomplete')
+  }
+  const modulePath = await ResolveExtensionNodeRpcPath.resolveExtensionNodeRpcPath(extensionId, rpcId)
+  const ipc = await ExtensionHostHelperProcessIpc.create({
+    method: IpcParentType.NodeForkedProcess,
+  })
+  HandleIpc.handleIpc(ipc)
+  try {
+    await JsonRpc.invoke(ipc, 'LoadFile.loadFile', modulePath)
+    await JsonRpc.invokeAndTransfer(ipc, 'HandleWebSocket.handleWebSocket', handle, message)
+  } catch (error) {
+    ipc.dispose()
+    throw error
+  }
 }

package/src/parts/Platform/Platform.js

@@ -61,11 +61,11 @@ export const getSetupName = () => {
   return 'Lvce-Setup'
 }
 
-export const version = '0.103.9'
+export const version = '0.103.10'
 
-export const commit = '72acf91'
+export const commit = 'ffb9403'
 
-export const date = '2026-08-16T14:55:12.000Z'
+export const date = '2026-08-16T15:11:25.000Z'
 
 export const getVersion = () => {
   return version

package/src/parts/PreloadUrl/PreloadUrl.js

@@ -2,5 +2,5 @@ import { join } from 'node:path'
 import * as Root from '../Root/Root.js'
 
 export const getPreloadUrl = () => {
-  return join(Root.root, 'static', '72acf91', 'packages', 'preload', 'dist', 'index.js')
+  return join(Root.root, 'static', 'ffb9403', 'packages', 'preload', 'dist', 'index.js')
 }

package/src/parts/ResolveExtensionNodeRpcPath/ResolveExtensionNodeRpcPath.js

@@ -0,0 +1,40 @@
+import { readFile, realpath } from 'node:fs/promises'
+import path from 'node:path'
+
+const idRegex = /^[A-Za-z0-9][A-Za-z0-9._-]*$/
+const schemeRegex = /^[A-Za-z][A-Za-z\d+.-]*:/
+
+const isInside = (parent, child) => child === parent || child.startsWith(`${parent}${path.sep}`)
+
+const validateId = (value, name) => {
+  if (!idRegex.test(value)) {
+    throw new Error(`Invalid extension node rpc ${name}`)
+  }
+}
+
+export const resolveExtensionNodeRpcPath = async (extensionId, rpcId) => {
+  validateId(extensionId, 'extension id')
+  validateId(rpcId, 'rpc id')
+  const configuredRoot = process.env.LVCE_REMOTE_EXTENSIONS_PATH
+  if (!configuredRoot) {
+    throw new Error('Remote extensions path is unavailable')
+  }
+  const extensionsRoot = await realpath(configuredRoot)
+  const extensionRoot = await realpath(path.join(extensionsRoot, extensionId))
+  if (!isInside(extensionsRoot, extensionRoot)) {
+    throw new Error('Extension path escapes the remote extensions root')
+  }
+  const manifest = JSON.parse(await readFile(path.join(extensionRoot, 'extension.json'), 'utf8'))
+  const rpc = manifest.rpc?.find((candidate) => candidate?.id === rpcId)
+  if (!rpc || rpc.type !== 'node' || typeof rpc.url !== 'string') {
+    throw new Error(`Node rpc ${rpcId} is not declared by extension ${extensionId}`)
+  }
+  if (!rpc.url || path.isAbsolute(rpc.url) || schemeRegex.test(rpc.url)) {
+    throw new Error(`Node rpc ${rpcId} must use a relative url`)
+  }
+  const modulePath = await realpath(path.resolve(extensionRoot, rpc.url))
+  if (!isInside(extensionRoot, modulePath)) {
+    throw new Error('Extension node rpc path escapes the extension root')
+  }
+  return modulePath
+}

package/src/parts/Workers/Workers.json

@@ -1234,7 +1234,7 @@
   {
     "id": "processExplorer",
     "fileName": "process-explorer-worker/index.js",
-    "contentSecurityPolicy": ["default-src 'none'", "connect-src 'self'"],
+    "contentSecurityPolicy": ["default-src 'none'", "connect-src 'self' ws://127.0.0.1:* ws://localhost:*"],
     "defaultPath": "/packages/renderer-worker/node_modules/@lvce-editor/process-explorer-worker/index.js",
     "productionPath": "/packages/process-explorer-worker/index.js",
     "settingName": "develop.processExplorerWorkerPath",
@@ -1540,7 +1540,7 @@
   {
     "id": "terminalWorker",
     "fileName": "terminalWorkerMain.js",
-    "contentSecurityPolicy": ["default-src 'none'", "connect-src 'self'", "script-src 'self'"],
+    "contentSecurityPolicy": ["default-src 'none'", "connect-src 'self' ws://127.0.0.1:* ws://localhost:*", "script-src 'self'"],
     "defaultPath": "/packages/renderer-worker/node_modules/@lvce-editor/terminal-worker/dist/terminalWorkerMain.js",
     "productionPath": "/packages/terminal-worker/dist/terminalWorkerMain.js",
     "settingName": "develop.terminalWorkerPath",
@@ -1571,7 +1571,7 @@
     "productionPath": "/packages/text-search-worker/dist/textSearchWorkerMain.js",
     "settingName": "develop.textSearchWorkerPath",
     "hotReloadCommand": "Search.hotReload",
-    "contentSecurityPolicy": ["default-src 'none'", "connect-src 'self'", "sandbox allow-same-origin"]
+    "contentSecurityPolicy": ["default-src 'none'", "connect-src 'self' ws://127.0.0.1:* ws://localhost:*", "sandbox allow-same-origin"]
   },
   {
     "id": "titleBar",