@paged-media/plugin-sdk 0.2.5-canary.0 → 0.2.6-canary.0

package/dist/index.js

@@ -185,8 +185,26 @@ function createBundleHost(getEditor, manifest, options) {
       );
     }
   };
+  const foreignMetadataKey = (m) => {
+    if (m.op === "setPluginMetadata") {
+      return m.args.key === metadataKey(manifest) ? null : m.args.key;
+    }
+    if (m.op === "batch") {
+      for (const child of m.args.ops) {
+        const bad = foreignMetadataKey(child);
+        if (bad !== null) return bad;
+      }
+    }
+    return null;
+  };
   const document = {
     async mutate(mutation) {
+      const foreign = foreignMetadataKey(mutation);
+      if (foreign !== null) {
+        const error = `setPluginMetadata key "${foreign}" is outside this plugin's namespace ("${metadataKey(manifest)}")`;
+        log.warn(error);
+        return { applied: false, error };
+      }
       try {
         const reply = await getEditor().client.mutate(mutation);
         if (reply.kind === "mutationApplied") {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@paged-media/plugin-sdk",
-  "version": "0.2.5-canary.0",
+  "version": "0.2.6-canary.0",
   "type": "module",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
@@ -11,14 +11,14 @@
     }
   },
   "dependencies": {
-    "@paged-media/plugin-api": "0.2.5-canary.0"
+    "@paged-media/plugin-api": "0.2.6-canary.0"
   },
   "devDependencies": {
     "typescript": "^5.6.3",
     "vitest": "^2.1.8"
   },
   "description": "The Paged plugin runtime: loadBundle, the in-process BundleHost adapter, the gesture kit, and version negotiation.",
-  "license": "UNLICENSED",
+  "license": "MPL-2.0 OR LicenseRef-PMEL",
   "files": [
     "dist"
   ],