@oktis-works/plugin-runtime 0.5.5 → 0.5.7

package/dist/bootstrap.d.ts

@@ -0,0 +1,74 @@
+import { type HookRegistry } from './hook-registry.js';
+import type { PluginApiDependencies, RouteDefinition } from './plugin-api.js';
+export interface BootstrapPluginsSql {
+    unsafe(text: string, params?: unknown[]): Promise<unknown>;
+}
+export interface BootstrapPluginsOptions {
+    /** Diretório de plugins (o chamador resolve — plugin-runtime não conhece o core). */
+    pluginsDir: string;
+    /** Cliente postgres para ler os habilitados; omitido = estado desconhecido (no-op). */
+    sql?: BootstrapPluginsSql;
+    /** Registry alvo (default: registry do escopo — platform ou `tenantId`). */
+    registry?: HookRegistry;
+    /** Statuses considerados habilitados (default: ACTIVATED, RUNNING). */
+    enabledStatuses?: string[];
+    /**
+     * Escopo de carga: `null`/omitido → platform (`plugins.tenant_id IS NULL`);
+     * string → tenant (`plugin_tenants` com status ENABLED).
+     */
+    tenantId?: string | null;
+    /**
+     * Política de permissões concedidas (allowlist). Default: catálogo completo
+     * de permissões do CMS. Nunca é preenchida com as permissões do manifesto.
+     */
+    permissionPolicy?: string[];
+    /** Timeout de callbacks de hook em ms (0 = sem timeout). Default 5000. */
+    hookTimeoutMs?: number;
+    /**
+     * Dependências reais para a PluginAPI (settings, eventBus, db, etc.).
+     * Se omitido, usa apenas o Hooks API legado (compatibilidade).
+     * O core injeta isto com serviços reais.
+     */
+    apiDeps?: Partial<PluginApiDependencies>;
+}
+export interface PluginBootstrapResult {
+    /** Nomes habilitados no banco (vazio quando o banco falhou = estado desconhecido). */
+    enabled: string[];
+    /** Registrados nesta sincronização. */
+    loaded: string[];
+    /** Hooks removidos nesta sincronização (saíram dos habilitados). */
+    unloaded: string[];
+    /** Falhas isoladas por plugin (nunca abortam o lote). */
+    failed: Array<{
+        name: string;
+        error: string;
+    }>;
+}
+/** Escopo com carga registrada (para inspeção/estado de runtime). */
+export declare function listLoadedScopes(): Array<{
+    scope: string;
+    registry: HookRegistry;
+    plugins: string[];
+}>;
+/** Obtém as rotas registradas pelos plugins em um escopo. */
+export declare function getLoadedPluginRoutes(scopeKey: string): Array<{
+    pluginName: string;
+    routes: RouteDefinition[];
+}>;
+/**
+ * Remove todos os hooks dos escopos carregados e limpa o estado.
+ * Útil em testes e em shutdown. Quando `registry` é informado, os hooks são
+ * removidos dele; caso contrário, do registry em que foram registrados.
+ */
+export declare function resetLoadedPlugins(registry?: HookRegistry): void;
+/** Descarrega todos os plugins de um escopo (tenant desativado / LRU). */
+export declare function unloadScope(scopeKey: string): boolean;
+/** Descarrega um tenant (chave `tenant:<id>` ou o próprio id). */
+export declare function unloadTenant(tenantId: string): boolean;
+/**
+ * Sincroniza o registry de um escopo com os plugins habilitados no banco.
+ * Seguro para chamar no boot de qualquer processo e em re-syncs (ex.: logo
+ * após ativar/desativar pela API).
+ */
+export declare function bootstrapPlugins(options: BootstrapPluginsOptions): Promise<PluginBootstrapResult>;
+//# sourceMappingURL=bootstrap.d.ts.map

package/dist/bootstrap.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bootstrap.d.ts","sourceRoot":"","sources":["../src/bootstrap.ts"],"names":[],"mappings":"AAuBA,OAAO,EAAyC,KAAK,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAC9F,OAAO,KAAK,EAAE,qBAAqB,EAAqB,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAEjG,MAAM,WAAW,mBAAmB;IAClC,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC5D;AAED,MAAM,WAAW,uBAAuB;IACtC,qFAAqF;IACrF,UAAU,EAAE,MAAM,CAAC;IACnB,uFAAuF;IACvF,GAAG,CAAC,EAAE,mBAAmB,CAAC;IAC1B,4EAA4E;IAC5E,QAAQ,CAAC,EAAE,YAAY,CAAC;IACxB,uEAAuE;IACvE,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B;;;OAGG;IACH,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB;;;OAGG;IACH,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,0EAA0E;IAC1E,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;;OAIG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC,CAAC;CAC1C;AAED,MAAM,WAAW,qBAAqB;IACpC,sFAAsF;IACtF,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,uCAAuC;IACvC,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,oEAAoE;IACpE,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,yDAAyD;IACzD,MAAM,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAChD;AAoCD,qEAAqE;AACrE,wBAAgB,gBAAgB,IAAI,KAAK,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,YAAY,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CAMtG;AAED,6DAA6D;AAC7D,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,KAAK,CAAC;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,eAAe,EAAE,CAAA;CAAE,CAAC,CAahH;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,CAAC,EAAE,YAAY,GAAG,IAAI,CAWhE;AAED,0EAA0E;AAC1E,wBAAgB,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAWrD;AAED,kEAAkE;AAClE,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAEtD;AA6DD;;;;GAIG;AACH,wBAAsB,gBAAgB,CAAC,OAAO,EAAE,uBAAuB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CA4HvG"}

package/dist/bootstrap.js

@@ -0,0 +1,272 @@
+// @oktis-works/plugin-runtime - Bootstrap de plugins em runtime
+//
+// O PLUGIN.md promete: "`register(registry)` é chamado quando o plugin é
+// carregado". Este módulo cumpre a promessa: descobre os plugins habilitados
+// no banco (escopo **platform** = `tenant_id IS NULL`; escopo **tenant** =
+// `plugin_tenants` habilitados), importa o entrypoint, chama
+// `register(registry)` com uma API de hooks atribuída ao plugin (BUSI-032/033)
+// e sincroniza o registry do escopo.
+//
+// Regras:
+//   - **nunca lança**: plugin quebrado, manifesto inválido, incompatibilidade
+//     semântica ou banco indisponível não derrubam o boot (isolamento de falha);
+//   - **sincroniza com o banco**: quem saiu da lista de habilitados tem os
+//     hooks removidos do registry (unload);
+//   - **idempotente**: plugin já carregado não é recarregado (sem hooks
+//     duplicados) — chamadas repetidas carregam só o que é novo;
+//   - **por escopo**: o estado de carga é indexado por escopo (platform ou um
+//     tenant), então ativar/desativar num tenant não afeta outro.
+import { createPluginHooksApi } from '@oktis-works/plugin-sdk';
+import { PLUGIN_PERMISSION_DEFAULT } from '@oktis-works/validation';
+import { PluginLoader } from './loader.js';
+import { PluginSandbox } from './sandbox.js';
+import { getHookRegistry, getHookRegistryStore } from './hook-registry.js';
+/** Estado de carga por escopo (`''` = platform, `tenant:<id>` = tenant). */
+const loadedScopes = new Map();
+function scopeKeyOf(tenantId) {
+    return tenantId ? `tenant:${tenantId}` : '';
+}
+function getScope(scopeKey, registry) {
+    let scope = loadedScopes.get(scopeKey);
+    if (!scope) {
+        scope = { registry, plugins: new Map() };
+        loadedScopes.set(scopeKey, scope);
+    }
+    return scope;
+}
+/** Escopo com carga registrada (para inspeção/estado de runtime). */
+export function listLoadedScopes() {
+    return [...loadedScopes.entries()].map(([scope, entry]) => ({
+        scope,
+        registry: entry.registry,
+        plugins: [...entry.plugins.keys()],
+    }));
+}
+/** Obtém as rotas registradas pelos plugins em um escopo. */
+export function getLoadedPluginRoutes(scopeKey) {
+    const scope = loadedScopes.get(scopeKey);
+    if (!scope)
+        return [];
+    const result = [];
+    for (const [pluginName, entry] of scope.plugins) {
+        if (entry.internal) {
+            const routes = entry.internal.getRoutes();
+            if (routes.length > 0) {
+                result.push({ pluginName, routes });
+            }
+        }
+    }
+    return result;
+}
+/**
+ * Remove todos os hooks dos escopos carregados e limpa o estado.
+ * Útil em testes e em shutdown. Quando `registry` é informado, os hooks são
+ * removidos dele; caso contrário, do registry em que foram registrados.
+ */
+export function resetLoadedPlugins(registry) {
+    for (const [scopeKey, scope] of loadedScopes) {
+        const target = registry ?? scope.registry;
+        for (const entry of scope.plugins.values()) {
+            for (const reg of entry.registrations) {
+                if (reg.type === 'action')
+                    target.removeAction(reg.name, reg.callback, reg.priority);
+                else
+                    target.removeFilter(reg.name, reg.callback, reg.priority);
+            }
+        }
+        loadedScopes.delete(scopeKey);
+    }
+}
+/** Descarrega todos os plugins de um escopo (tenant desativado / LRU). */
+export function unloadScope(scopeKey) {
+    const scope = loadedScopes.get(scopeKey);
+    if (!scope)
+        return false;
+    for (const entry of scope.plugins.values()) {
+        for (const reg of entry.registrations) {
+            if (reg.type === 'action')
+                scope.registry.removeAction(reg.name, reg.callback, reg.priority);
+            else
+                scope.registry.removeFilter(reg.name, reg.callback, reg.priority);
+        }
+    }
+    loadedScopes.delete(scopeKey);
+    return true;
+}
+/** Descarrega um tenant (chave `tenant:<id>` ou o próprio id). */
+export function unloadTenant(tenantId) {
+    return unloadScope(scopeKeyOf(tenantId));
+}
+function unloadPlugin(scope, name) {
+    const entry = scope.plugins.get(name);
+    if (!entry)
+        return false;
+    for (const reg of entry.registrations) {
+        if (reg.type === 'action')
+            scope.registry.removeAction(reg.name, reg.callback, reg.priority);
+        else
+            scope.registry.removeFilter(reg.name, reg.callback, reg.priority);
+    }
+    scope.plugins.delete(name);
+    return true;
+}
+/**
+ * Registry que grava cada registro num sink (para poder descarregar depois),
+ * delega ao registry real com `sourceId` atribuído pelo SDK e **aplica o
+ * timeout do sandbox** no callback registrado (WP5 — proteção real contra hook
+ * pendurado; documentada como limitada a trabalho assíncrono).
+ */
+function recordingRegistry(registry, sink, sandbox) {
+    const acceptedArgsOf = (callback, explicit) => explicit ?? callback.length;
+    return {
+        addAction(action, callback, options) {
+            const wrapped = sandbox.wrapCallback(callback);
+            sink.push({ type: 'action', name: action, callback: wrapped, priority: options?.priority ?? 10 });
+            registry.addAction(action, wrapped, { ...options, acceptedArgs: acceptedArgsOf(callback, options?.acceptedArgs) });
+        },
+        addFilter(filter, callback, options) {
+            const wrapped = sandbox.wrapCallback(callback);
+            sink.push({ type: 'filter', name: filter, callback: wrapped, priority: options?.priority ?? 10 });
+            registry.addFilter(filter, wrapped, { ...options, acceptedArgs: acceptedArgsOf(callback, options?.acceptedArgs) });
+        },
+        removeAction: (action, callback, priority) => registry.removeAction(action, callback, priority),
+        removeFilter: (action, callback, priority) => registry.removeFilter(action, callback, priority),
+        hasAction: (action, callback) => registry.hasAction(action, callback),
+        hasFilter: (action, callback) => registry.hasFilter(action, callback),
+        didAction: (action) => registry.didAction(action),
+        getCurrentHook: () => registry.getCurrentHook(),
+    };
+}
+/** Query de habilitados por escopo. */
+function enabledQuery(tenantId) {
+    if (tenantId) {
+        return {
+            text: `SELECT p.name FROM plugins p
+             JOIN plugin_tenants pt ON pt.plugin_id = p.id
+             WHERE pt.tenant_id = $1 AND pt.status = 'ENABLED'
+               AND p.status NOT IN ('UNINSTALLED', 'MISSING')`,
+            params: [tenantId],
+        };
+    }
+    return { text: 'SELECT name FROM plugins WHERE status = ANY($1) AND tenant_id IS NULL' };
+}
+/**
+ * Sincroniza o registry de um escopo com os plugins habilitados no banco.
+ * Seguro para chamar no boot de qualquer processo e em re-syncs (ex.: logo
+ * após ativar/desativar pela API).
+ */
+export async function bootstrapPlugins(options) {
+    const scopeKey = scopeKeyOf(options.tenantId);
+    const registry = options.registry ??
+        (options.tenantId ? getHookRegistryStore().tenant(options.tenantId) : getHookRegistry());
+    const statuses = options.enabledStatuses ?? ['ACTIVATED', 'RUNNING'];
+    const result = { enabled: [], loaded: [], unloaded: [], failed: [] };
+    // 1) Quem está habilitado no banco? Falha = estado desconhecido → não toca em nada.
+    let enabled = null;
+    if (options.sql) {
+        try {
+            const query = enabledQuery(options.tenantId);
+            const rows = (await options.sql.unsafe(query.text, options.tenantId ? query.params : [statuses]));
+            enabled = rows
+                .map((row) => row.name)
+                .filter((name) => typeof name === 'string' && name.length > 0);
+        }
+        catch {
+            enabled = null;
+        }
+    }
+    result.enabled = enabled ?? [];
+    if (enabled === null)
+        return result;
+    // 2) Descobre no diretório (diretório ausente = nenhum plugin, não é erro)
+    const loader = new PluginLoader(options.pluginsDir);
+    let discovered = [];
+    try {
+        discovered = await loader.discoverPlugins();
+    }
+    catch {
+        discovered = [];
+    }
+    const scope = getScope(scopeKey, registry);
+    // 3) Descarrega quem saiu da lista de habilitados (deste escopo)
+    for (const name of [...scope.plugins.keys()]) {
+        if (!enabled.includes(name) && unloadPlugin(scope, name)) {
+            result.unloaded.push(name);
+        }
+    }
+    // 4) Carrega habilitados ainda não carregados, respeitando ordem de dependência
+    const enabledDiscovered = discovered.filter((entry) => enabled.includes(entry.manifest.name));
+    let levels;
+    try {
+        levels = loader.resolveDependencies(enabledDiscovered);
+    }
+    catch {
+        levels = enabledDiscovered.map((entry) => [entry]); // ordenação falhou: ordem arbitrária
+    }
+    // Política de permissões: allowlist de configuração (ou catálogo completo).
+    const policy = options.permissionPolicy ?? PLUGIN_PERMISSION_DEFAULT;
+    const timeoutMs = options.hookTimeoutMs ?? 5000;
+    for (const level of levels) {
+        for (const entry of level) {
+            const name = entry.manifest.name;
+            if (scope.plugins.has(name))
+                continue;
+            try {
+                const loaded = await loader.loadPlugin(entry.manifest, entry.path);
+                // O sandbox valida o manifesto contra a POLÍTICA (nunca contra si mesmo)
+                const sandbox = new PluginSandbox({ allowedPermissions: [...policy], timeoutMs });
+                sandbox.loadPlugin(entry.manifest, loaded.api);
+                // Contrato do PLUGIN.md: module.exports.register(registry)
+                const register = loaded.api.register;
+                if (typeof register !== 'function') {
+                    throw new Error('não exporta register(registry)');
+                }
+                const registrations = [];
+                // Se o core forneceu apiDeps, cria a API completa (hooks + settings + query + routes + ...)
+                // Caso contrário, usa apenas o Hooks API legado (compatibilidade).
+                let apiToPass;
+                let internal;
+                if (options.apiDeps) {
+                    // Mescla os deps do core com os específicos do plugin/runtime
+                    const deps = {
+                        hooks: recordingRegistry(registry, registrations, sandbox),
+                        manifest: entry.manifest,
+                        settings: options.apiDeps.settings ?? { get: async () => undefined, set: async () => { } },
+                        eventBus: options.apiDeps.eventBus ?? { emit: async () => { } },
+                        db: options.apiDeps.db ?? { query: async () => [] },
+                        getTenantId: options.apiDeps.getTenantId ?? (() => options.tenantId ?? null),
+                        getUserId: options.apiDeps.getUserId ?? (() => null),
+                        getRequestId: options.apiDeps.getRequestId ?? (() => crypto.randomUUID?.() ?? Math.random().toString(36).slice(2)),
+                        getTenantById: options.apiDeps.getTenantById ?? (async () => null),
+                        getUserById: options.apiDeps.getUserById ?? (async () => null),
+                        registerRoutes: options.apiDeps.registerRoutes ?? (() => { }),
+                        registerContentFields: options.apiDeps.registerContentFields ?? (() => { }),
+                        allowedPermissions: [...policy],
+                    };
+                    // Cria a API completa usando a fábrica interna
+                    const { createPluginApi } = await import('./plugin-api.js');
+                    const apiResult = createPluginApi(deps);
+                    apiToPass = apiResult.api;
+                    internal = apiResult.internal;
+                }
+                else {
+                    apiToPass = createPluginHooksApi(name, recordingRegistry(registry, registrations, sandbox));
+                }
+                register(apiToPass);
+                if (internal) {
+                    scope.plugins.set(name, { registrations, internal });
+                }
+                else {
+                    scope.plugins.set(name, { registrations });
+                }
+                result.loaded.push(name);
+            }
+            catch (error) {
+                // Isolamento de falha: plugin quebrado não impede os demais nem o boot
+                result.failed.push({ name, error: error instanceof Error ? error.message : String(error) });
+            }
+        }
+    }
+    return result;
+}
+//# sourceMappingURL=bootstrap.js.map

package/dist/bootstrap.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bootstrap.js","sourceRoot":"","sources":["../src/bootstrap.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,EAAE;AACF,yEAAyE;AACzE,6EAA6E;AAC7E,2EAA2E;AAC3E,6DAA6D;AAC7D,+EAA+E;AAC/E,qCAAqC;AACrC,EAAE;AACF,UAAU;AACV,8EAA8E;AAC9E,iFAAiF;AACjF,2EAA2E;AAC3E,4CAA4C;AAC5C,wEAAwE;AACxE,iEAAiE;AACjE,8EAA8E;AAC9E,kEAAkE;AAElE,OAAO,EAAE,oBAAoB,EAAyB,MAAM,yBAAyB,CAAC;AACtF,OAAO,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAC;AACpE,OAAO,EAAE,YAAY,EAAyB,MAAM,aAAa,CAAC;AAClE,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAqB,MAAM,oBAAoB,CAAC;AAiE9F,4EAA4E;AAC5E,MAAM,YAAY,GAAG,IAAI,GAAG,EAAuB,CAAC;AAEpD,SAAS,UAAU,CAAC,QAAwB;IAC1C,OAAO,QAAQ,CAAC,CAAC,CAAC,UAAU,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AAC9C,CAAC;AAED,SAAS,QAAQ,CAAC,QAAgB,EAAE,QAAsB;IACxD,IAAI,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACvC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,KAAK,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,EAAE,CAAC;QACzC,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IACpC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,gBAAgB;IAC9B,OAAO,CAAC,GAAG,YAAY,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;QAC1D,KAAK;QACL,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,OAAO,EAAE,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;KACnC,CAAC,CAAC,CAAC;AACN,CAAC;AAED,6DAA6D;AAC7D,MAAM,UAAU,qBAAqB,CAAC,QAAgB;IACpD,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACzC,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IACtB,MAAM,MAAM,GAA6D,EAAE,CAAC;IAC5E,KAAK,MAAM,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QAChD,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YACnB,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;YAC1C,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtB,MAAM,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC;YACtC,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,QAAuB;IACxD,KAAK,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,YAAY,EAAE,CAAC;QAC7C,MAAM,MAAM,GAAG,QAAQ,IAAI,KAAK,CAAC,QAAQ,CAAC;QAC1C,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YAC3C,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;gBACtC,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ;oBAAE,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;;oBAChF,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;YACjE,CAAC;QACH,CAAC;QACD,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAChC,CAAC;AACH,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,WAAW,CAAC,QAAgB;IAC1C,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACzC,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;QAC3C,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;YACtC,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ;gBAAE,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;;gBACxF,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;QACzE,CAAC;IACH,CAAC;IACD,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC9B,OAAO,IAAI,CAAC;AACd,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,YAAY,CAAC,QAAgB;IAC3C,OAAO,WAAW,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,YAAY,CAAC,KAAkB,EAAE,IAAY;IACpD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;QACtC,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ;YAAE,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;;YACxF,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;IACzE,CAAC;IACD,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC3B,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,SAAS,iBAAiB,CACxB,QAAsB,EACtB,IAA2B,EAC3B,OAAsB;IAEtB,MAAM,cAAc,GAAG,CAAC,QAAyC,EAAE,QAAiB,EAAU,EAAE,CAC9F,QAAQ,IAAI,QAAQ,CAAC,MAAM,CAAC;IAE9B,OAAO;QACL,SAAS,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO;YACjC,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;YAC/C,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,CAAC,CAAC;YAClG,QAAQ,CAAC,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,YAAY,EAAE,cAAc,CAAC,QAAQ,EAAE,OAAO,EAAE,YAAY,CAAC,EAAE,CAAC,CAAC;QACrH,CAAC;QACD,SAAS,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO;YACjC,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;YAC/C,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,CAAC,CAAC;YAClG,QAAQ,CAAC,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,YAAY,EAAE,cAAc,CAAC,QAAQ,EAAE,OAAO,EAAE,YAAY,CAAC,EAAE,CAAC,CAAC;QACrH,CAAC;QACD,YAAY,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC;QAC/F,YAAY,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC;QAC/F,SAAS,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,EAAE,QAAQ,CAAC;QACrE,SAAS,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,EAAE,QAAQ,CAAC;QACrE,SAAS,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC;QACjD,cAAc,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,cAAc,EAAE;KAChD,CAAC;AACJ,CAAC;AAED,uCAAuC;AACvC,SAAS,YAAY,CAAC,QAAwB;IAC5C,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO;YACL,IAAI,EAAE;;;8DAGkD;YACxD,MAAM,EAAE,CAAC,QAAQ,CAAC;SACnB,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,uEAAuE,EAAE,CAAC;AAC3F,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,OAAgC;IACrE,MAAM,QAAQ,GAAG,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC9C,MAAM,QAAQ,GACZ,OAAO,CAAC,QAAQ;QAChB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,oBAAoB,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC;IAC3F,MAAM,QAAQ,GAAG,OAAO,CAAC,eAAe,IAAI,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;IACrE,MAAM,MAAM,GAA0B,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IAE5F,oFAAoF;IACpF,IAAI,OAAO,GAAoB,IAAI,CAAC;IACpC,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QAChB,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YAC7C,MAAM,IAAI,GAAG,CAAC,MAAM,OAAO,CAAC,GAAG,CAAC,MAAM,CACpC,KAAK,CAAC,IAAI,EACV,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAC7C,CAA6B,CAAC;YAC/B,OAAO,GAAG,IAAI;iBACX,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC;iBACtB,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACnF,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC;IACH,CAAC;IACD,MAAM,CAAC,OAAO,GAAG,OAAO,IAAI,EAAE,CAAC;IAC/B,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC;IAEpC,2EAA2E;IAC3E,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACpD,IAAI,UAAU,GAAuB,EAAE,CAAC;IACxC,IAAI,CAAC;QACH,UAAU,GAAG,MAAM,MAAM,CAAC,eAAe,EAAE,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,UAAU,GAAG,EAAE,CAAC;IAClB,CAAC;IAED,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAE3C,iEAAiE;IACjE,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;QAC7C,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,YAAY,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC;YACzD,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;IAED,gFAAgF;IAChF,MAAM,iBAAiB,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9F,IAAI,MAA4B,CAAC;IACjC,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,CAAC,mBAAmB,CAAC,iBAAiB,CAAC,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,qCAAqC;IAC3F,CAAC;IAED,4EAA4E;IAC5E,MAAM,MAAM,GAAG,OAAO,CAAC,gBAAgB,IAAI,yBAAyB,CAAC;IACrE,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,IAAI,IAAI,CAAC;IAEhD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;YAC1B,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;YACjC,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,SAAS;YAEtC,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;gBAEnE,yEAAyE;gBACzE,MAAM,OAAO,GAAG,IAAI,aAAa,CAAC,EAAE,kBAAkB,EAAE,CAAC,GAAG,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC;gBAClF,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;gBAE/C,2DAA2D;gBAC3D,MAAM,QAAQ,GAAI,MAAM,CAAC,GAAyC,CAAC,QAAQ,CAAC;gBAC5E,IAAI,OAAO,QAAQ,KAAK,UAAU,EAAE,CAAC;oBACnC,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;gBACpD,CAAC;gBAED,MAAM,aAAa,GAA0B,EAAE,CAAC;gBAEhD,4FAA4F;gBAC5F,mEAAmE;gBACnE,IAAI,SAAkB,CAAC;gBACvB,IAAI,QAAuC,CAAC;gBAC5C,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;oBACpB,8DAA8D;oBAC9D,MAAM,IAAI,GAA0B;wBAClC,KAAK,EAAE,iBAAiB,CAAC,QAAQ,EAAE,aAAa,EAAE,OAAO,CAAC;wBAC1D,QAAQ,EAAE,KAAK,CAAC,QAAQ;wBACxB,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,GAAG,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC,EAAE;wBACzF,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,IAAI,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC,EAAE;wBAC9D,EAAE,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC,EAAE,EAAE;wBACnD,WAAW,EAAE,OAAO,CAAC,OAAO,CAAC,WAAW,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,QAAQ,IAAI,IAAI,CAAC;wBAC5E,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,SAAS,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC;wBACpD,YAAY,EAAE,OAAO,CAAC,OAAO,CAAC,YAAY,IAAI,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;wBAClH,aAAa,EAAE,OAAO,CAAC,OAAO,CAAC,aAAa,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC;wBAClE,WAAW,EAAE,OAAO,CAAC,OAAO,CAAC,WAAW,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC;wBAC9D,cAAc,EAAE,OAAO,CAAC,OAAO,CAAC,cAAc,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC;wBAC5D,qBAAqB,EAAE,OAAO,CAAC,OAAO,CAAC,qBAAqB,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC;wBAC1E,kBAAkB,EAAE,CAAC,GAAG,MAAM,CAAC;qBAChC,CAAC;oBACF,+CAA+C;oBAC/C,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,CAAC;oBAC5D,MAAM,SAAS,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;oBACxC,SAAS,GAAG,SAAS,CAAC,GAAG,CAAC;oBAC1B,QAAQ,GAAG,SAAS,CAAC,QAAQ,CAAC;gBAChC,CAAC;qBAAM,CAAC;oBACN,SAAS,GAAG,oBAAoB,CAAC,IAAI,EAAE,iBAAiB,CAAC,QAAQ,EAAE,aAAa,EAAE,OAAO,CAAC,CAAC,CAAC;gBAC9F,CAAC;gBAEA,QAAwC,CAAC,SAAS,CAAC,CAAC;gBAErD,IAAI,QAAQ,EAAE,CAAC;oBACb,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,aAAa,EAAE,QAAQ,EAAE,CAAC,CAAC;gBACvD,CAAC;qBAAM,CAAC;oBACN,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,aAAa,EAAE,CAAC,CAAC;gBAC7C,CAAC;gBACD,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC3B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,uEAAuE;gBACvE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAC9F,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/hook-registry.d.ts

@@ -25,7 +25,27 @@ export declare class HookRegistry {
     private readonly auditLog;
     private devMode;
     private trustLevels;
+    /** Nomes de hooks oficiais (catálogo do core) — sempre aceitos em dev. */
+    private readonly knownHooks;
+    /** Prefixos de hooks oficiais parametrizados (terminam em '*'). */
+    private readonly knownPrefixes;
     setDevMode(enabled: boolean): void;
+    /**
+     * Registra o catálogo de hooks oficiais do core. Em modo dev a regra de
+     * prefixo (`okcms.`/`plugin.`) continua exigida para hooks customizados,
+     * mas os nomes oficiais (`content:query`, `theme:data:*`, ...) são
+     * aceitos — sem isso, o próprio catálogo do core é reprovado em dev.
+     *
+     * Entradas terminadas em `*` viram prefixos (ex.: `theme:data:*`,
+     * `manage:*`, `before_publish_content_*`).
+     *
+     * O runtime não depende do core (seria ciclo): quem conhece o catálogo é
+     * o chamador (bootstrap do core) e injeta aqui.
+     */
+    setKnownHooks(names: Iterable<string>): void;
+    clearKnownHooks(): void;
+    /** True quando o nome pertence ao catálogo oficial (exato ou por prefixo). */
+    isKnownHook(action: string): boolean;
     setTrustLevel(sourceId: string, level: number): void;
     /**
      * Catálogo de hooks registrados (REQ-REQU-035-002): lista cada hook com tipo,
@@ -74,9 +94,48 @@ export declare class HookRegistry {
     private removeEntry;
     private hasEntry;
 }
+export declare function setHookTenantResolver(resolver: () => string | null): void;
+export declare function getCurrentHookTenantId(): string | null;
+/**
+ * Store de registries por tenant (isolamento de plugins por tenant).
+ *
+ * - `platform`: hooks do core (`okcms.*`) — compartilhado por todo o processo;
+ * - `tenant(tenantId)`: hooks dos plugins habilitados daquele tenant, criado
+ *   sob demanda e descarregável (invalidate/drop).
+ *
+ * O contrato é `tenant(id)` para poder evoluir para vm/worker por tenant sem
+ * mudar quem chama (`getHookRegistry()` continua síncrono).
+ */
+export declare class HookRegistryStore {
+    private platformRegistry;
+    private readonly byTenant;
+    constructor(platform?: HookRegistry);
+    platform(): HookRegistry;
+    setPlatform(registry: HookRegistry): void;
+    /** Registry do tenant (criado sob demanda com devMode + catálogo do core). */
+    tenant(tenantId: string): HookRegistry;
+    hasTenant(tenantId: string): boolean;
+    tenantIds(): string[];
+    /**
+     * Descarrega os hooks de um tenant (ativação/desativação, LRU, shutdown).
+     * Retorna true quando havia um registry carregado.
+     */
+    invalidateTenant(tenantId: string): boolean;
+    clearTenants(): void;
+    /** Propaga o catálogo do core para todos os registries (atuais e futuros). */
+    setKnownHooks(names: Iterable<string>): void;
+    get size(): number;
+}
+export declare function getHookRegistryStore(): HookRegistryStore;
+/**
+ * Registry do escopo atual: tenant quando há contexto de tenant (plugins por
+ * tenant), platform quando não há (hooks do core).
+ */
 export declare function getHookRegistry(): HookRegistry;
 /**
- * Substitui o registry global. Uso interno: testes e hot-reload de plugins.
+ * Substitui o registry platform. Uso interno: testes e hot-reload de plugins.
  */
 export declare function setHookRegistry(registry: HookRegistry): void;
+/** Troca o store inteiro (testes). */
+export declare function setHookRegistryStore(store: HookRegistryStore | null): void;
 //# sourceMappingURL=hook-registry.d.ts.map

package/dist/hook-registry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"hook-registry.d.ts","sourceRoot":"","sources":["../src/hook-registry.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,YAAY,CAAC,KAAK,SAAS,OAAO,EAAE,GAAG,OAAO,EAAE,IAAI,CAAC,GAAG,IAAI,EAAE,KAAK,KAAK,OAAO,CAAC;AAY5F,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,mEAAmE;IACnE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,GAAG,QAAQ,CAAC;IAC/B,gEAAgE;IAChE,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,cAAc,GAAG,eAAe,CAAC;IACvC,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,GAAG,QAAQ,CAAC;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB;AASD,qBAAa,YAAY;IACvB,OAAO,CAAC,eAAe,CAAK;IAC5B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA+C;IACvE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA+C;IACvE,OAAO,CAAC,QAAQ,CAAC,eAAe,CAA6B;IAC7D,OAAO,CAAC,WAAW,CAAuB;IAC1C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAuB;IAChD,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,WAAW,CAA6B;IAEhD,UAAU,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI;IAIlC,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI;IAIpD;;;OAGG;IACH,cAAc,IAAI,KAAK,CAAC;QACtB,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,QAAQ,GAAG,QAAQ,CAAC;QAC1B,UAAU,EAAE,MAAM,EAAE,CAAC;QACrB,OAAO,EAAE,MAAM,EAAE,CAAC;QAClB,KAAK,EAAE,MAAM,CAAC;KACf,CAAC;IAoBF,WAAW,IAAI,aAAa,EAAE;IAI9B,aAAa,IAAI,IAAI;IAIrB;;OAEG;IACH,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,OAAO,GAAE,cAAmB,GAAG,IAAI;IAqBrF;;OAEG;IACH,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC,OAAO,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC,EAAE,OAAO,GAAE,cAAmB,GAAG,IAAI;IAqB9G,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO;IAIhF,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO;IAIhF,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,YAAY,GAAG,OAAO;IAI3D,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,YAAY,GAAG,OAAO;IAI3D,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM;IAIjC,cAAc,IAAI,MAAM,GAAG,IAAI;IAI/B;;;OAGG;IACG,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAmBjE;;;OAGG;IACH,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,OAAO;IAqBzE;;;OAGG;IACG,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC;IAqB7F,OAAO,CAAC,aAAa;IASrB,OAAO,CAAC,qBAAqB;IA2B7B,OAAO,CAAC,WAAW;IA+BnB,OAAO,CAAC,QAAQ;CAWjB;AAID,wBAAgB,eAAe,IAAI,YAAY,CAM9C;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,YAAY,GAAG,IAAI,CAE5D"}
+{"version":3,"file":"hook-registry.d.ts","sourceRoot":"","sources":["../src/hook-registry.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,YAAY,CAAC,KAAK,SAAS,OAAO,EAAE,GAAG,OAAO,EAAE,IAAI,CAAC,GAAG,IAAI,EAAE,KAAK,KAAK,OAAO,CAAC;AAY5F,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,mEAAmE;IACnE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,GAAG,QAAQ,CAAC;IAC/B,gEAAgE;IAChE,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,cAAc,GAAG,eAAe,CAAC;IACvC,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,GAAG,QAAQ,CAAC;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB;AASD,qBAAa,YAAY;IACvB,OAAO,CAAC,eAAe,CAAK;IAC5B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA+C;IACvE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA+C;IACvE,OAAO,CAAC,QAAQ,CAAC,eAAe,CAA6B;IAC7D,OAAO,CAAC,WAAW,CAAuB;IAC1C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAuB;IAChD,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,WAAW,CAA6B;IAChD,0EAA0E;IAC1E,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAqB;IAChD,mEAAmE;IACnE,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAgB;IAE9C,UAAU,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI;IAIlC;;;;;;;;;;;OAWG;IACH,aAAa,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,GAAG,IAAI;IAO5C,eAAe,IAAI,IAAI;IAKvB,8EAA8E;IAC9E,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO;IAKpC,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI;IAIpD;;;OAGG;IACH,cAAc,IAAI,KAAK,CAAC;QACtB,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,QAAQ,GAAG,QAAQ,CAAC;QAC1B,UAAU,EAAE,MAAM,EAAE,CAAC;QACrB,OAAO,EAAE,MAAM,EAAE,CAAC;QAClB,KAAK,EAAE,MAAM,CAAC;KACf,CAAC;IAoBF,WAAW,IAAI,aAAa,EAAE;IAI9B,aAAa,IAAI,IAAI;IAIrB;;OAEG;IACH,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,OAAO,GAAE,cAAmB,GAAG,IAAI;IAqBrF;;OAEG;IACH,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC,OAAO,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC,EAAE,OAAO,GAAE,cAAmB,GAAG,IAAI;IAqB9G,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO;IAIhF,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO;IAIhF,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,YAAY,GAAG,OAAO;IAI3D,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,YAAY,GAAG,OAAO;IAI3D,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM;IAIjC,cAAc,IAAI,MAAM,GAAG,IAAI;IAI/B;;;OAGG;IACG,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAmBjE;;;OAGG;IACH,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,OAAO;IAqBzE;;;OAGG;IACG,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC;IAqB7F,OAAO,CAAC,aAAa;IASrB,OAAO,CAAC,qBAAqB;IA2B7B,OAAO,CAAC,WAAW;IA+BnB,OAAO,CAAC,QAAQ;CAWjB;AAkBD,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,MAAM,GAAG,IAAI,GAAG,IAAI,CAEzE;AAED,wBAAgB,sBAAsB,IAAI,MAAM,GAAG,IAAI,CAMtD;AAED;;;;;;;;;GASG;AACH,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,gBAAgB,CAAe;IACvC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAmC;gBAEhD,QAAQ,CAAC,EAAE,YAAY;IAInC,QAAQ,IAAI,YAAY;IAIxB,WAAW,CAAC,QAAQ,EAAE,YAAY,GAAG,IAAI;IAIzC,8EAA8E;IAC9E,MAAM,CAAC,QAAQ,EAAE,MAAM,GAAG,YAAY;IAStC,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAIpC,SAAS,IAAI,MAAM,EAAE;IAIrB;;;OAGG;IACH,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAI3C,YAAY,IAAI,IAAI;IAIpB,8EAA8E;IAC9E,aAAa,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,GAAG,IAAI;IAQ5C,IAAI,IAAI,IAAI,MAAM,CAEjB;CACF;AAID,wBAAgB,oBAAoB,IAAI,iBAAiB,CAGxD;AAED;;;GAGG;AACH,wBAAgB,eAAe,IAAI,YAAY,CAI9C;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,YAAY,GAAG,IAAI,CAE5D;AAED,sCAAsC;AACtC,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,iBAAiB,GAAG,IAAI,GAAG,IAAI,CAG1E"}

package/dist/hook-registry.js

@@ -13,9 +13,43 @@ export class HookRegistry {
     auditLog = [];
     devMode = false;
     trustLevels = new Map();
+    /** Nomes de hooks oficiais (catálogo do core) — sempre aceitos em dev. */
+    knownHooks = new Set();
+    /** Prefixos de hooks oficiais parametrizados (terminam em '*'). */
+    knownPrefixes = [];
     setDevMode(enabled) {
         this.devMode = enabled;
     }
+    /**
+     * Registra o catálogo de hooks oficiais do core. Em modo dev a regra de
+     * prefixo (`okcms.`/`plugin.`) continua exigida para hooks customizados,
+     * mas os nomes oficiais (`content:query`, `theme:data:*`, ...) são
+     * aceitos — sem isso, o próprio catálogo do core é reprovado em dev.
+     *
+     * Entradas terminadas em `*` viram prefixos (ex.: `theme:data:*`,
+     * `manage:*`, `before_publish_content_*`).
+     *
+     * O runtime não depende do core (seria ciclo): quem conhece o catálogo é
+     * o chamador (bootstrap do core) e injeta aqui.
+     */
+    setKnownHooks(names) {
+        for (const name of names) {
+            if (name.endsWith('*'))
+                this.knownPrefixes.push(name.slice(0, -1));
+            else
+                this.knownHooks.add(name);
+        }
+    }
+    clearKnownHooks() {
+        this.knownHooks.clear();
+        this.knownPrefixes.length = 0;
+    }
+    /** True quando o nome pertence ao catálogo oficial (exato ou por prefixo). */
+    isKnownHook(action) {
+        if (this.knownHooks.has(action))
+            return true;
+        return this.knownPrefixes.some((prefix) => action.startsWith(prefix));
+    }
     setTrustLevel(sourceId, level) {
         this.trustLevels.set(sourceId, level);
     }
@@ -185,8 +219,8 @@ export class HookRegistry {
     }
     authorizeRegistration(action, options) {
         const sourceId = options.sourceId ?? 'anonymous';
-        if (this.devMode && !isPrefixed(action)) {
-            throw new Error(`[hooks] Em modo dev, hooks customizados devem ser prefixados ("${CORE_PREFIX}..." ou "plugin.<id>...."). Recebido: "${action}"`);
+        if (this.devMode && !isPrefixed(action) && !this.isKnownHook(action)) {
+            throw new Error(`[hooks] Em modo dev, hooks customizados devem ser prefixados ("${CORE_PREFIX}..." ou "plugin.<id>....") ou pertencer ao catálogo oficial. Recebido: "${action}"`);
         }
         const requiredLevel = options.requiredTrustLevel ?? 0;
         const sourceLevel = this.trustLevels.get(sourceId) ?? 0;
@@ -238,18 +272,116 @@ export class HookRegistry {
         return false;
     }
 }
-let globalRegistry = null;
-export function getHookRegistry() {
-    if (!globalRegistry) {
-        globalRegistry = new HookRegistry();
-        globalRegistry.setDevMode(process.env['NODE_ENV'] !== 'production');
+/** Nomes do catálogo do core injetados via store — aplicados a novos registries. */
+const pendingKnownHooks = [];
+function createDefaultRegistry() {
+    const registry = new HookRegistry();
+    registry.setDevMode(process.env['NODE_ENV'] !== 'production');
+    if (pendingKnownHooks.length > 0)
+        registry.setKnownHooks(pendingKnownHooks);
+    return registry;
+}
+/**
+ * Resolução síncrona do tenant ativo. Injetado pelo core (ALS de tenant);
+ * sem contexto → registry platform (hooks do core).
+ */
+let hookTenantResolver = () => null;
+export function setHookTenantResolver(resolver) {
+    hookTenantResolver = resolver;
+}
+export function getCurrentHookTenantId() {
+    try {
+        return hookTenantResolver();
+    }
+    catch {
+        return null;
     }
-    return globalRegistry;
 }
 /**
- * Substitui o registry global. Uso interno: testes e hot-reload de plugins.
+ * Store de registries por tenant (isolamento de plugins por tenant).
+ *
+ * - `platform`: hooks do core (`okcms.*`) — compartilhado por todo o processo;
+ * - `tenant(tenantId)`: hooks dos plugins habilitados daquele tenant, criado
+ *   sob demanda e descarregável (invalidate/drop).
+ *
+ * O contrato é `tenant(id)` para poder evoluir para vm/worker por tenant sem
+ * mudar quem chama (`getHookRegistry()` continua síncrono).
+ */
+export class HookRegistryStore {
+    platformRegistry;
+    byTenant = new Map();
+    constructor(platform) {
+        this.platformRegistry = platform ?? createDefaultRegistry();
+    }
+    platform() {
+        return this.platformRegistry;
+    }
+    setPlatform(registry) {
+        this.platformRegistry = registry;
+    }
+    /** Registry do tenant (criado sob demanda com devMode + catálogo do core). */
+    tenant(tenantId) {
+        let registry = this.byTenant.get(tenantId);
+        if (!registry) {
+            registry = createDefaultRegistry();
+            this.byTenant.set(tenantId, registry);
+        }
+        return registry;
+    }
+    hasTenant(tenantId) {
+        return this.byTenant.has(tenantId);
+    }
+    tenantIds() {
+        return [...this.byTenant.keys()];
+    }
+    /**
+     * Descarrega os hooks de um tenant (ativação/desativação, LRU, shutdown).
+     * Retorna true quando havia um registry carregado.
+     */
+    invalidateTenant(tenantId) {
+        return this.byTenant.delete(tenantId);
+    }
+    clearTenants() {
+        this.byTenant.clear();
+    }
+    /** Propaga o catálogo do core para todos os registries (atuais e futuros). */
+    setKnownHooks(names) {
+        const list = [...names];
+        pendingKnownHooks.length = 0;
+        pendingKnownHooks.push(...list);
+        this.platformRegistry.setKnownHooks(list);
+        for (const registry of this.byTenant.values())
+            registry.setKnownHooks(list);
+    }
+    get size() {
+        return this.byTenant.size;
+    }
+}
+let globalStore = null;
+export function getHookRegistryStore() {
+    if (!globalStore)
+        globalStore = new HookRegistryStore();
+    return globalStore;
+}
+/**
+ * Registry do escopo atual: tenant quando há contexto de tenant (plugins por
+ * tenant), platform quando não há (hooks do core).
+ */
+export function getHookRegistry() {
+    const store = getHookRegistryStore();
+    const tenantId = getCurrentHookTenantId();
+    return tenantId ? store.tenant(tenantId) : store.platform();
+}
+/**
+ * Substitui o registry platform. Uso interno: testes e hot-reload de plugins.
  */
 export function setHookRegistry(registry) {
-    globalRegistry = registry;
+    getHookRegistryStore().setPlatform(registry);
+}
+/** Troca o store inteiro (testes). */
+export function setHookRegistryStore(store) {
+    globalStore = store;
+    if (store === null)
+        pendingKnownHooks.length = 0;
 }
 //# sourceMappingURL=hook-registry.js.map