@plumix/core 0.1.0

package/dist/plugin/setup-context.js

@@ -0,0 +1,386 @@
+import { deriveEntryTypeCapabilities, deriveTermTaxonomyCapabilities, } from "../auth/rbac.js";
+import { CORE_MCP_TOOL_NAMES } from "../mcp/registry.js";
+import { DEFAULT_REWRITE_RULE_PRIORITY } from "../route/compile.js";
+import { CORE_RPC_NAMESPACES } from "../rpc/namespaces.js";
+import { RESERVED_DEP_KIND_NAMES } from "../template-deps.js";
+import { DuplicateRegistrationError, PluginContextError } from "./errors.js";
+import { assertComponentRef, assertMetaBoxFields, assertNamespacedId, assertValidAdminPagePath, assertValidFieldTypeName, assertValidIdentifier, assertValidLoginLink, assertValidLookupAdapterKind, assertValidNavGroupId, assertValidPluginRoutePath, assertValidRestResourcePath, assertValidScheduledTask, } from "./validation/index.js";
+export function createPluginSetupContext({ pluginId, hooks, registry, extensions, }) {
+    // Pooling caps by capabilityType is safe when minRoles agree; if one
+    // type applies a `capabilities` override and another doesn't, silent
+    // first-writer-wins would tie the resolved cap to registration order.
+    const addDerivedCaps = (caps) => {
+        for (const cap of caps) {
+            const existing = registry.capabilities.get(cap.name);
+            if (existing) {
+                if (existing.minRole !== cap.minRole) {
+                    throw PluginContextError.derivedCapabilityMinRoleMismatch({
+                        pluginId,
+                        capName: cap.name,
+                        minRole: cap.minRole,
+                        existingMinRole: existing.minRole,
+                        existingOwner: existing.registeredBy ?? "<unknown>",
+                    });
+                }
+                continue;
+            }
+            registry.capabilities.set(cap.name, { ...cap, registeredBy: pluginId });
+        }
+    };
+    const ctx = {
+        id: pluginId,
+        addFilter: (name, fn, options) => {
+            hooks.addFilter(name, fn, { ...options, plugin: pluginId });
+        },
+        addAction: (name, fn, options) => {
+            hooks.addAction(name, fn, { ...options, plugin: pluginId });
+        },
+        registerFilter: (shortName, fn, options) => {
+            const prefixed = `${pluginId}:${shortName}`;
+            hooks.addFilter(prefixed, fn, {
+                ...options,
+                plugin: pluginId,
+            });
+        },
+        registerAction: (shortName, fn, options) => {
+            const prefixed = `${pluginId}:${shortName}`;
+            hooks.addAction(prefixed, fn, {
+                ...options,
+                plugin: pluginId,
+            });
+        },
+        registerEntryType: (name, options) => {
+            if (registry.entryTypes.has(name))
+                throw DuplicateRegistrationError.alreadyRegistered({
+                    kind: "entry type",
+                    identifier: name,
+                });
+            registry.entryTypes.set(name, {
+                ...options,
+                name,
+                registeredBy: pluginId,
+            });
+            addDerivedCaps(deriveEntryTypeCapabilities(name, options));
+        },
+        registerTermTaxonomy: (name, options) => {
+            if (registry.termTaxonomies.has(name))
+                throw DuplicateRegistrationError.alreadyRegistered({
+                    kind: "termTaxonomy",
+                    identifier: name,
+                });
+            registry.termTaxonomies.set(name, {
+                ...options,
+                name,
+                registeredBy: pluginId,
+            });
+            addDerivedCaps(deriveTermTaxonomyCapabilities(name, options));
+        },
+        registerEntryMetaBox: makeMetaBoxRegistrar(registry.entryMetaBoxes, "entry meta box", pluginId),
+        registerTermMetaBox: makeMetaBoxRegistrar(registry.termMetaBoxes, "term meta box", pluginId),
+        registerUserMetaBox: makeMetaBoxRegistrar(registry.userMetaBoxes, "user meta box", pluginId),
+        registerCapability: (name, minRoleOrOptions) => {
+            if (registry.capabilities.has(name)) {
+                throw DuplicateRegistrationError.alreadyRegistered({
+                    kind: "capability",
+                    identifier: name,
+                });
+            }
+            const resolved = typeof minRoleOrOptions === "string"
+                ? { minRole: minRoleOrOptions, defaultGrants: undefined }
+                : {
+                    minRole: minRoleOrOptions.minRole,
+                    defaultGrants: minRoleOrOptions.defaultGrants,
+                };
+            registry.capabilities.set(name, {
+                name,
+                minRole: resolved.minRole,
+                defaultGrants: resolved.defaultGrants
+                    ? [...new Set(resolved.defaultGrants)].sort()
+                    : undefined,
+                registeredBy: pluginId,
+            });
+        },
+        registerSettingsGroup: (name, options) => {
+            assertValidIdentifier("settings group", name);
+            if (registry.settingsGroups.has(name)) {
+                throw DuplicateRegistrationError.alreadyRegistered({
+                    kind: "settings group",
+                    identifier: name,
+                });
+            }
+            assertMetaBoxFields("settings group", name, options.fields);
+            registry.settingsGroups.set(name, {
+                ...options,
+                name,
+                registeredBy: pluginId,
+            });
+        },
+        registerSettingsPage: (name, options) => {
+            assertValidIdentifier("settings page", name);
+            if (registry.settingsPages.has(name)) {
+                throw DuplicateRegistrationError.alreadyRegistered({
+                    kind: "settings page",
+                    identifier: name,
+                });
+            }
+            for (const groupName of options.groups) {
+                assertValidIdentifier("settings group reference", groupName);
+            }
+            if (new Set(options.groups).size !== options.groups.length) {
+                throw PluginContextError.settingsPageDuplicateGroup({ name });
+            }
+            registry.settingsPages.set(name, {
+                ...options,
+                name,
+                registeredBy: pluginId,
+            });
+        },
+        registerRewriteRule: (pattern, intent, options) => {
+            registry.rewriteRules.push({
+                pattern,
+                intent,
+                priority: options?.priority ?? DEFAULT_REWRITE_RULE_PRIORITY,
+                registeredBy: pluginId,
+            });
+        },
+        registerRpcRouter: (router) => {
+            if (CORE_RPC_NAMESPACES.has(pluginId)) {
+                throw PluginContextError.pluginIdCollidesWithCoreRpcNamespace({
+                    pluginId,
+                    coreNamespaces: [...CORE_RPC_NAMESPACES],
+                });
+            }
+            if (registry.rpcRouters.has(pluginId)) {
+                throw DuplicateRegistrationError.alreadyRegistered({
+                    kind: "plugin RPC router",
+                    identifier: pluginId,
+                });
+            }
+            registry.rpcRouters.set(pluginId, router);
+        },
+        registerMcpTool: (tool) => {
+            if (CORE_MCP_TOOL_NAMES.has(tool.name) ||
+                registry.mcpTools.has(tool.name)) {
+                throw DuplicateRegistrationError.alreadyRegistered({
+                    kind: "MCP tool",
+                    identifier: tool.name,
+                });
+            }
+            registry.mcpTools.set(tool.name, { tool, registeredBy: pluginId });
+        },
+        registerRoute: ({ method, path, auth, handler }) => {
+            assertValidPluginRoutePath(pluginId, path);
+            for (const existing of registry.rawRoutes) {
+                if (existing.pluginId === pluginId &&
+                    existing.method === method &&
+                    existing.path === path) {
+                    throw PluginContextError.duplicateRoute({ pluginId, method, path });
+                }
+            }
+            registry.rawRoutes.push({
+                pluginId,
+                method,
+                path,
+                auth,
+                handler,
+            });
+        },
+        registerRestResource: (options) => {
+            assertValidRestResourcePath(pluginId, options.path);
+            // Cross-resource path collisions are validated at boot (buildApp), where
+            // the full set across all plugins + core reserved paths is known.
+            registry.restResources.push({
+                ...options,
+                pluginId,
+                method: options.method ?? "GET",
+            });
+        },
+        registerAdminPage: (options) => {
+            assertValidAdminPagePath(pluginId, options.path);
+            if (registry.adminPages.has(options.path)) {
+                throw DuplicateRegistrationError.alreadyRegistered({
+                    kind: "admin page",
+                    identifier: options.path,
+                });
+            }
+            assertComponentRef(pluginId, `admin page "${options.path}"`, options.component);
+            if (options.nav) {
+                const groupId = typeof options.nav.group === "string"
+                    ? options.nav.group
+                    : options.nav.group.id;
+                assertValidNavGroupId(pluginId, groupId);
+            }
+            registry.adminPages.set(options.path, {
+                ...options,
+                registeredBy: pluginId,
+            });
+        },
+        registerDashboardWidget: (options) => {
+            assertNamespacedId("dashboard widget id", options.id, pluginId);
+            if (registry.dashboardWidgets.has(options.id)) {
+                throw DuplicateRegistrationError.alreadyRegistered({
+                    kind: "dashboard widget",
+                    identifier: options.id,
+                });
+            }
+            assertComponentRef(pluginId, `dashboard widget "${options.id}"`, options.component);
+            registry.dashboardWidgets.set(options.id, {
+                ...options,
+                registeredBy: pluginId,
+            });
+        },
+        registerFieldType: (options) => {
+            assertValidFieldTypeName(pluginId, options.type);
+            if (registry.fieldTypes.has(options.type)) {
+                throw DuplicateRegistrationError.alreadyRegistered({
+                    kind: "field type",
+                    identifier: options.type,
+                });
+            }
+            assertComponentRef(pluginId, `field type "${options.type}"`, options.component);
+            registry.fieldTypes.set(options.type, {
+                ...options,
+                registeredBy: pluginId,
+            });
+        },
+        registerBlock: (spec) => {
+            if (registry.blockSpecs.has(spec.name)) {
+                throw DuplicateRegistrationError.alreadyRegistered({
+                    kind: "block",
+                    identifier: spec.name,
+                });
+            }
+            registry.blockSpecs.set(spec.name, { spec, registeredBy: pluginId });
+        },
+        registerMark: (spec) => {
+            if (registry.markSpecs.has(spec.name)) {
+                throw DuplicateRegistrationError.alreadyRegistered({
+                    kind: "mark",
+                    identifier: spec.name,
+                });
+            }
+            registry.markSpecs.set(spec.name, { spec, registeredBy: pluginId });
+        },
+        registerShortcode: (spec) => {
+            if (registry.shortcodeSpecs.has(spec.name)) {
+                throw DuplicateRegistrationError.alreadyRegistered({
+                    kind: "shortcode",
+                    identifier: spec.name,
+                });
+            }
+            registry.shortcodeSpecs.set(spec.name, { spec, registeredBy: pluginId });
+        },
+        registerPattern: (spec) => {
+            if (registry.patternSpecs.has(spec.name)) {
+                throw DuplicateRegistrationError.alreadyRegistered({
+                    kind: "pattern",
+                    identifier: spec.name,
+                });
+            }
+            registry.patternSpecs.set(spec.name, { spec, registeredBy: pluginId });
+        },
+        registerLookupAdapter: (options) => {
+            assertValidLookupAdapterKind(pluginId, options.kind);
+            if (registry.lookupAdapters.has(options.kind)) {
+                throw DuplicateRegistrationError.alreadyRegistered({
+                    kind: "lookup adapter",
+                    identifier: options.kind,
+                });
+            }
+            // Spread to preserve plugin-contributed option fields (e.g. the
+            // `menuPicker` field that @plumix/plugin-menu adds via declaration
+            // merging).
+            registry.lookupAdapters.set(options.kind, {
+                ...options,
+                capability: options.capability ?? null,
+                registeredBy: pluginId,
+            });
+        },
+        registerLoginLink: (options) => {
+            assertValidLoginLink(pluginId, options);
+            for (const existing of registry.loginLinks) {
+                if (existing.registeredBy === pluginId &&
+                    existing.key === options.key) {
+                    throw DuplicateRegistrationError.alreadyRegistered({
+                        kind: "login link",
+                        identifier: `${pluginId}:${options.key}`,
+                    });
+                }
+            }
+            registry.loginLinks.push({
+                ...options,
+                registeredBy: pluginId,
+            });
+        },
+        registerScheduledTask: (task) => {
+            assertValidScheduledTask(pluginId, task);
+            for (const existing of registry.scheduledTasks) {
+                if (existing.registeredBy === pluginId && existing.id === task.id) {
+                    throw DuplicateRegistrationError.alreadyRegistered({
+                        kind: "scheduled task",
+                        identifier: `${pluginId}:${task.id}`,
+                    });
+                }
+            }
+            registry.scheduledTasks.push({
+                ...task,
+                registeredBy: pluginId,
+            });
+        },
+        registerTemplateDep: (kind, { load }) => {
+            if (RESERVED_DEP_KIND_NAMES.has(kind)) {
+                // Reserved framework keys would silently no-op at request time
+                // since the merger skips them on theme/template traversal.
+                throw PluginContextError.templateDepKindReserved({
+                    pluginId,
+                    kind,
+                });
+            }
+            const existing = registry.templateDeps.get(kind);
+            if (existing) {
+                throw DuplicateRegistrationError.alreadyRegistered({
+                    kind: "template dep",
+                    identifier: kind,
+                });
+            }
+            // Erase the per-kind generic at storage time — the typed view is
+            // recovered when `defineTemplate` looks the loader up by kind.
+            const erased = load;
+            registry.templateDeps.set(kind, {
+                kind,
+                load: erased,
+                registeredBy: pluginId,
+            });
+        },
+    };
+    if (extensions && extensions.size > 0) {
+        const target = ctx;
+        for (const [key, value] of extensions) {
+            if (key in target) {
+                throw PluginContextError.extensionShadowsBuiltin({ key });
+            }
+            target[key] = value;
+        }
+    }
+    return ctx;
+}
+// Three meta-box registrations (entry/term/user) only differ in their
+// target Map and the human-facing kind label — extracted into a
+// factory so the call sites read as data, not three near-identical
+// blocks.
+function makeMetaBoxRegistrar(map, kind, pluginId) {
+    return (id, options) => {
+        if (map.has(id))
+            throw DuplicateRegistrationError.alreadyRegistered({
+                kind,
+                identifier: id,
+            });
+        assertMetaBoxFields(kind, id, options.fields);
+        map.set(id, {
+            ...options,
+            id,
+            registeredBy: pluginId,
+        });
+    };
+}
+//# sourceMappingURL=setup-context.js.map

package/dist/plugin/setup-context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup-context.js","sourceRoot":"","sources":["../../src/plugin/setup-context.ts"],"names":[],"mappings":"AAkDA,OAAO,EACL,2BAA2B,EAC3B,8BAA8B,GAC/B,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,6BAA6B,EAAE,MAAM,qBAAqB,CAAC;AACpE,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAO,EAAE,0BAA0B,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAC7E,OAAO,EACL,kBAAkB,EAClB,mBAAmB,EACnB,kBAAkB,EAClB,wBAAwB,EACxB,wBAAwB,EACxB,qBAAqB,EACrB,oBAAoB,EACpB,4BAA4B,EAC5B,qBAAqB,EACrB,0BAA0B,EAC1B,2BAA2B,EAC3B,wBAAwB,GACzB,MAAM,uBAAuB,CAAC;AAiQ/B,MAAM,UAAU,wBAAwB,CAAC,EACvC,QAAQ,EACR,KAAK,EACL,QAAQ,EACR,UAAU,GACc;IACxB,qEAAqE;IACrE,qEAAqE;IACrE,sEAAsE;IACtE,MAAM,cAAc,GAAG,CAAC,IAAkC,EAAQ,EAAE;QAClE,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,QAAQ,GAAG,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACrD,IAAI,QAAQ,EAAE,CAAC;gBACb,IAAI,QAAQ,CAAC,OAAO,KAAK,GAAG,CAAC,OAAO,EAAE,CAAC;oBACrC,MAAM,kBAAkB,CAAC,gCAAgC,CAAC;wBACxD,QAAQ;wBACR,OAAO,EAAE,GAAG,CAAC,IAAI;wBACjB,OAAO,EAAE,GAAG,CAAC,OAAO;wBACpB,eAAe,EAAE,QAAQ,CAAC,OAAO;wBACjC,aAAa,EAAE,QAAQ,CAAC,YAAY,IAAI,WAAW;qBACpD,CAAC,CAAC;gBACL,CAAC;gBACD,SAAS;YACX,CAAC;YACD,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,GAAG,GAAG,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,GAAG,GAA2B;QAClC,EAAE,EAAE,QAAQ;QAEZ,SAAS,EAAE,CAAC,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE;YAC/B,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC9D,CAAC;QAED,SAAS,EAAE,CAAC,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE;YAC/B,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC9D,CAAC;QAED,cAAc,EAAE,CAAC,SAAS,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE;YACzC,MAAM,QAAQ,GAAG,GAAG,QAAQ,IAAI,SAAS,EAAgB,CAAC;YAC1D,KAAK,CAAC,SAAS,CAAC,QAAQ,EAAE,EAA0B,EAAE;gBACpD,GAAG,OAAO;gBACV,MAAM,EAAE,QAAQ;aACjB,CAAC,CAAC;QACL,CAAC;QAED,cAAc,EAAE,CAAC,SAAS,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE;YACzC,MAAM,QAAQ,GAAG,GAAG,QAAQ,IAAI,SAAS,EAAgB,CAAC;YAC1D,KAAK,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,EAAE;gBAC5B,GAAG,OAAO;gBACV,MAAM,EAAE,QAAQ;aACjB,CAAC,CAAC;QACL,CAAC;QAED,iBAAiB,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE;YACnC,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC;gBAC/B,MAAM,0BAA0B,CAAC,iBAAiB,CAAC;oBACjD,IAAI,EAAE,YAAY;oBAClB,UAAU,EAAE,IAAI;iBACjB,CAAC,CAAC;YACL,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE;gBAC5B,GAAG,OAAO;gBACV,IAAI;gBACJ,YAAY,EAAE,QAAQ;aACvB,CAAC,CAAC;YACH,cAAc,CAAC,2BAA2B,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;QAC7D,CAAC;QAED,oBAAoB,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE;YACtC,IAAI,QAAQ,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC;gBACnC,MAAM,0BAA0B,CAAC,iBAAiB,CAAC;oBACjD,IAAI,EAAE,cAAc;oBACpB,UAAU,EAAE,IAAI;iBACjB,CAAC,CAAC;YACL,QAAQ,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,EAAE;gBAChC,GAAG,OAAO;gBACV,IAAI;gBACJ,YAAY,EAAE,QAAQ;aACvB,CAAC,CAAC;YACH,cAAc,CAAC,8BAA8B,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;QAChE,CAAC;QAED,oBAAoB,EAAE,oBAAoB,CACxC,QAAQ,CAAC,cAAc,EACvB,gBAAgB,EAChB,QAAQ,CACT;QACD,mBAAmB,EAAE,oBAAoB,CACvC,QAAQ,CAAC,aAAa,EACtB,eAAe,EACf,QAAQ,CACT;QACD,mBAAmB,EAAE,oBAAoB,CACvC,QAAQ,CAAC,aAAa,EACtB,eAAe,EACf,QAAQ,CACT;QAED,kBAAkB,EAAE,CAClB,IAAY,EACZ,gBACuE,EACvE,EAAE;YACF,IAAI,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBACpC,MAAM,0BAA0B,CAAC,iBAAiB,CAAC;oBACjD,IAAI,EAAE,YAAY;oBAClB,UAAU,EAAE,IAAI;iBACjB,CAAC,CAAC;YACL,CAAC;YACD,MAAM,QAAQ,GACZ,OAAO,gBAAgB,KAAK,QAAQ;gBAClC,CAAC,CAAC,EAAE,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,SAAS,EAAE;gBACzD,CAAC,CAAC;oBACE,OAAO,EAAE,gBAAgB,CAAC,OAAO;oBACjC,aAAa,EAAE,gBAAgB,CAAC,aAAa;iBAC9C,CAAC;YACR,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,EAAE;gBAC9B,IAAI;gBACJ,OAAO,EAAE,QAAQ,CAAC,OAAO;gBACzB,aAAa,EAAE,QAAQ,CAAC,aAAa;oBACnC,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,EAAE;oBAC7C,CAAC,CAAC,SAAS;gBACb,YAAY,EAAE,QAAQ;aACvB,CAAC,CAAC;QACL,CAAC;QAED,qBAAqB,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE;YACvC,qBAAqB,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAC;YAC9C,IAAI,QAAQ,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBACtC,MAAM,0BAA0B,CAAC,iBAAiB,CAAC;oBACjD,IAAI,EAAE,gBAAgB;oBACtB,UAAU,EAAE,IAAI;iBACjB,CAAC,CAAC;YACL,CAAC;YACD,mBAAmB,CAAC,gBAAgB,EAAE,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;YAC5D,QAAQ,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,EAAE;gBAChC,GAAG,OAAO;gBACV,IAAI;gBACJ,YAAY,EAAE,QAAQ;aACvB,CAAC,CAAC;QACL,CAAC;QAED,oBAAoB,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE;YACtC,qBAAqB,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC;YAC7C,IAAI,QAAQ,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBACrC,MAAM,0BAA0B,CAAC,iBAAiB,CAAC;oBACjD,IAAI,EAAE,eAAe;oBACrB,UAAU,EAAE,IAAI;iBACjB,CAAC,CAAC;YACL,CAAC;YACD,KAAK,MAAM,SAAS,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;gBACvC,qBAAqB,CAAC,0BAA0B,EAAE,SAAS,CAAC,CAAC;YAC/D,CAAC;YACD,IAAI,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;gBAC3D,MAAM,kBAAkB,CAAC,0BAA0B,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;YAChE,CAAC;YACD,QAAQ,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,EAAE;gBAC/B,GAAG,OAAO;gBACV,IAAI;gBACJ,YAAY,EAAE,QAAQ;aACvB,CAAC,CAAC;QACL,CAAC;QAED,mBAAmB,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE;YAChD,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC;gBACzB,OAAO;gBACP,MAAM;gBACN,QAAQ,EAAE,OAAO,EAAE,QAAQ,IAAI,6BAA6B;gBAC5D,YAAY,EAAE,QAAQ;aACvB,CAAC,CAAC;QACL,CAAC;QAED,iBAAiB,EAAE,CAAC,MAAM,EAAE,EAAE;YAC5B,IAAI,mBAAmB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACtC,MAAM,kBAAkB,CAAC,oCAAoC,CAAC;oBAC5D,QAAQ;oBACR,cAAc,EAAE,CAAC,GAAG,mBAAmB,CAAC;iBACzC,CAAC,CAAC;YACL,CAAC;YACD,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACtC,MAAM,0BAA0B,CAAC,iBAAiB,CAAC;oBACjD,IAAI,EAAE,mBAAmB;oBACzB,UAAU,EAAE,QAAQ;iBACrB,CAAC,CAAC;YACL,CAAC;YACD,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC5C,CAAC;QAED,eAAe,EAAE,CAAC,IAAI,EAAE,EAAE;YACxB,IACE,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;gBAClC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAChC,CAAC;gBACD,MAAM,0BAA0B,CAAC,iBAAiB,CAAC;oBACjD,IAAI,EAAE,UAAU;oBAChB,UAAU,EAAE,IAAI,CAAC,IAAI;iBACtB,CAAC,CAAC;YACL,CAAC;YACD,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC,CAAC;QACrE,CAAC;QAED,aAAa,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE;YACjD,0BAA0B,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YAC3C,KAAK,MAAM,QAAQ,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC;gBAC1C,IACE,QAAQ,CAAC,QAAQ,KAAK,QAAQ;oBAC9B,QAAQ,CAAC,MAAM,KAAK,MAAM;oBAC1B,QAAQ,CAAC,IAAI,KAAK,IAAI,EACtB,CAAC;oBACD,MAAM,kBAAkB,CAAC,cAAc,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;gBACtE,CAAC;YACH,CAAC;YACD,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC;gBACtB,QAAQ;gBACR,MAAM;gBACN,IAAI;gBACJ,IAAI;gBACJ,OAAO;aACR,CAAC,CAAC;QACL,CAAC;QAED,oBAAoB,EAAE,CAAC,OAAO,EAAE,EAAE;YAChC,2BAA2B,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;YACpD,yEAAyE;YACzE,kEAAkE;YAClE,QAAQ,CAAC,aAAa,CAAC,IAAI,CAAC;gBAC1B,GAAG,OAAO;gBACV,QAAQ;gBACR,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,KAAK;aAChC,CAAC,CAAC;QACL,CAAC;QAED,iBAAiB,EAAE,CAAC,OAAO,EAAE,EAAE;YAC7B,wBAAwB,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;YACjD,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC1C,MAAM,0BAA0B,CAAC,iBAAiB,CAAC;oBACjD,IAAI,EAAE,YAAY;oBAClB,UAAU,EAAE,OAAO,CAAC,IAAI;iBACzB,CAAC,CAAC;YACL,CAAC;YACD,kBAAkB,CAChB,QAAQ,EACR,eAAe,OAAO,CAAC,IAAI,GAAG,EAC9B,OAAO,CAAC,SAAS,CAClB,CAAC;YACF,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;gBAChB,MAAM,OAAO,GACX,OAAO,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,QAAQ;oBACnC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK;oBACnB,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC3B,qBAAqB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAC3C,CAAC;YACD,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE;gBACpC,GAAG,OAAO;gBACV,YAAY,EAAE,QAAQ;aACvB,CAAC,CAAC;QACL,CAAC;QAED,uBAAuB,EAAE,CAAC,OAAO,EAAE,EAAE;YACnC,kBAAkB,CAAC,qBAAqB,EAAE,OAAO,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;YAChE,IAAI,QAAQ,CAAC,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;gBAC9C,MAAM,0BAA0B,CAAC,iBAAiB,CAAC;oBACjD,IAAI,EAAE,kBAAkB;oBACxB,UAAU,EAAE,OAAO,CAAC,EAAE;iBACvB,CAAC,CAAC;YACL,CAAC;YACD,kBAAkB,CAChB,QAAQ,EACR,qBAAqB,OAAO,CAAC,EAAE,GAAG,EAClC,OAAO,CAAC,SAAS,CAClB,CAAC;YACF,QAAQ,CAAC,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE;gBACxC,GAAG,OAAO;gBACV,YAAY,EAAE,QAAQ;aACvB,CAAC,CAAC;QACL,CAAC;QAED,iBAAiB,EAAE,CAAC,OAAO,EAAE,EAAE;YAC7B,wBAAwB,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;YACjD,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC1C,MAAM,0BAA0B,CAAC,iBAAiB,CAAC;oBACjD,IAAI,EAAE,YAAY;oBAClB,UAAU,EAAE,OAAO,CAAC,IAAI;iBACzB,CAAC,CAAC;YACL,CAAC;YACD,kBAAkB,CAChB,QAAQ,EACR,eAAe,OAAO,CAAC,IAAI,GAAG,EAC9B,OAAO,CAAC,SAAS,CAClB,CAAC;YACF,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE;gBACpC,GAAG,OAAO;gBACV,YAAY,EAAE,QAAQ;aACvB,CAAC,CAAC;QACL,CAAC;QAED,aAAa,EAAE,CAAC,IAAI,EAAE,EAAE;YACtB,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACvC,MAAM,0BAA0B,CAAC,iBAAiB,CAAC;oBACjD,IAAI,EAAE,OAAO;oBACb,UAAU,EAAE,IAAI,CAAC,IAAI;iBACtB,CAAC,CAAC;YACL,CAAC;YACD,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC,CAAC;QACvE,CAAC;QAED,YAAY,EAAE,CAAC,IAAI,EAAE,EAAE;YACrB,IAAI,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACtC,MAAM,0BAA0B,CAAC,iBAAiB,CAAC;oBACjD,IAAI,EAAE,MAAM;oBACZ,UAAU,EAAE,IAAI,CAAC,IAAI;iBACtB,CAAC,CAAC;YACL,CAAC;YACD,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC,CAAC;QACtE,CAAC;QAED,iBAAiB,EAAE,CAAC,IAAI,EAAE,EAAE;YAC1B,IAAI,QAAQ,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC3C,MAAM,0BAA0B,CAAC,iBAAiB,CAAC;oBACjD,IAAI,EAAE,WAAW;oBACjB,UAAU,EAAE,IAAI,CAAC,IAAI;iBACtB,CAAC,CAAC;YACL,CAAC;YACD,QAAQ,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC3E,CAAC;QAED,eAAe,EAAE,CAAC,IAAI,EAAE,EAAE;YACxB,IAAI,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACzC,MAAM,0BAA0B,CAAC,iBAAiB,CAAC;oBACjD,IAAI,EAAE,SAAS;oBACf,UAAU,EAAE,IAAI,CAAC,IAAI;iBACtB,CAAC,CAAC;YACL,CAAC;YACD,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC,CAAC;QACzE,CAAC;QAED,qBAAqB,EAAE,CAAC,OAAO,EAAE,EAAE;YACjC,4BAA4B,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;YACrD,IAAI,QAAQ,CAAC,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC9C,MAAM,0BAA0B,CAAC,iBAAiB,CAAC;oBACjD,IAAI,EAAE,gBAAgB;oBACtB,UAAU,EAAE,OAAO,CAAC,IAAI;iBACzB,CAAC,CAAC;YACL,CAAC;YACD,gEAAgE;YAChE,mEAAmE;YACnE,YAAY;YACZ,QAAQ,CAAC,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE;gBACxC,GAAG,OAAO;gBACV,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,IAAI;gBACtC,YAAY,EAAE,QAAQ;aACvB,CAAC,CAAC;QACL,CAAC;QAED,iBAAiB,EAAE,CAAC,OAAO,EAAE,EAAE;YAC7B,oBAAoB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACxC,KAAK,MAAM,QAAQ,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC;gBAC3C,IACE,QAAQ,CAAC,YAAY,KAAK,QAAQ;oBAClC,QAAQ,CAAC,GAAG,KAAK,OAAO,CAAC,GAAG,EAC5B,CAAC;oBACD,MAAM,0BAA0B,CAAC,iBAAiB,CAAC;wBACjD,IAAI,EAAE,YAAY;wBAClB,UAAU,EAAE,GAAG,QAAQ,IAAI,OAAO,CAAC,GAAG,EAAE;qBACzC,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YACD,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC;gBACvB,GAAG,OAAO;gBACV,YAAY,EAAE,QAAQ;aACvB,CAAC,CAAC;QACL,CAAC;QAED,qBAAqB,EAAE,CAAC,IAAI,EAAE,EAAE;YAC9B,wBAAwB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YACzC,KAAK,MAAM,QAAQ,IAAI,QAAQ,CAAC,cAAc,EAAE,CAAC;gBAC/C,IAAI,QAAQ,CAAC,YAAY,KAAK,QAAQ,IAAI,QAAQ,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,EAAE,CAAC;oBAClE,MAAM,0BAA0B,CAAC,iBAAiB,CAAC;wBACjD,IAAI,EAAE,gBAAgB;wBACtB,UAAU,EAAE,GAAG,QAAQ,IAAI,IAAI,CAAC,EAAE,EAAE;qBACrC,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YACD,QAAQ,CAAC,cAAc,CAAC,IAAI,CAAC;gBAC3B,GAAG,IAAI;gBACP,YAAY,EAAE,QAAQ;aACvB,CAAC,CAAC;QACL,CAAC;QAED,mBAAmB,EAAE,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;YACtC,IAAI,uBAAuB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBACtC,+DAA+D;gBAC/D,2DAA2D;gBAC3D,MAAM,kBAAkB,CAAC,uBAAuB,CAAC;oBAC/C,QAAQ;oBACR,IAAI;iBACL,CAAC,CAAC;YACL,CAAC;YACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACjD,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,0BAA0B,CAAC,iBAAiB,CAAC;oBACjD,IAAI,EAAE,cAAc;oBACpB,UAAU,EAAE,IAAI;iBACjB,CAAC,CAAC;YACL,CAAC;YACD,iEAAiE;YACjE,+DAA+D;YAC/D,MAAM,MAAM,GAAG,IAAgD,CAAC;YAChE,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,EAAE;gBAC9B,IAAI;gBACJ,IAAI,EAAE,MAAM;gBACZ,YAAY,EAAE,QAAQ;aACvB,CAAC,CAAC;QACL,CAAC;KACF,CAAC;IAEF,IAAI,UAAU,IAAI,UAAU,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;QACtC,MAAM,MAAM,GAAG,GAAyC,CAAC;QACzD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,UAAU,EAAE,CAAC;YACtC,IAAI,GAAG,IAAI,MAAM,EAAE,CAAC;gBAClB,MAAM,kBAAkB,CAAC,uBAAuB,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;YAC5D,CAAC;YACD,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACtB,CAAC;IACH,CAAC;IAED,OAAO,GAAyB,CAAC;AACnC,CAAC;AAED,sEAAsE;AACtE,gEAAgE;AAChE,mEAAmE;AACnE,UAAU;AACV,SAAS,oBAAoB,CAG3B,GAAqD,EACrD,IAAY,EACZ,QAAgB;IAEhB,OAAO,CAAC,EAAE,EAAE,OAAO,EAAE,EAAE;QACrB,IAAI,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACb,MAAM,0BAA0B,CAAC,iBAAiB,CAAC;gBACjD,IAAI;gBACJ,UAAU,EAAE,EAAE;aACf,CAAC,CAAC;QACL,mBAAmB,CAAC,IAAI,EAAE,EAAE,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QAC9C,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE;YACV,GAAI,OAAwB;YAC5B,EAAE;YACF,YAAY,EAAE,QAAQ;SACvB,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC"}

package/dist/plugin/validation/component-ref.d.ts

@@ -0,0 +1,2 @@
+export declare function assertComponentRef(pluginId: string, descriptor: string, ref: unknown): void;
+//# sourceMappingURL=component-ref.d.ts.map

package/dist/plugin/validation/component-ref.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"component-ref.d.ts","sourceRoot":"","sources":["../../../src/plugin/validation/component-ref.ts"],"names":[],"mappings":"AAEA,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,EAClB,GAAG,EAAE,OAAO,GACX,IAAI,CAIN"}

package/dist/plugin/validation/component-ref.js

@@ -0,0 +1,7 @@
+import { PluginContextError } from "../errors.js";
+export function assertComponentRef(pluginId, descriptor, ref) {
+    if (typeof ref !== "string" || ref.length === 0) {
+        throw PluginContextError.invalidComponentRef({ pluginId, descriptor });
+    }
+}
+//# sourceMappingURL=component-ref.js.map

package/dist/plugin/validation/component-ref.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"component-ref.js","sourceRoot":"","sources":["../../../src/plugin/validation/component-ref.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAElD,MAAM,UAAU,kBAAkB,CAChC,QAAgB,EAChB,UAAkB,EAClB,GAAY;IAEZ,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChD,MAAM,kBAAkB,CAAC,mBAAmB,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC;IACzE,CAAC;AACH,CAAC"}

package/dist/plugin/validation/identifiers.d.ts

@@ -0,0 +1,7 @@
+export declare function assertValidFieldTypeName(pluginId: string, type: string): void;
+export declare function assertValidLookupAdapterKind(pluginId: string, kind: string): void;
+export declare const SETTINGS_NAME_RE: RegExp;
+export declare function assertValidIdentifier(kind: string, name: string): void;
+export declare function assertNamespacedId(kind: string, id: string, pluginId: string): void;
+export declare function assertValidNavGroupId(pluginId: string, id: string): void;
+//# sourceMappingURL=identifiers.d.ts.map

package/dist/plugin/validation/identifiers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"identifiers.d.ts","sourceRoot":"","sources":["../../../src/plugin/validation/identifiers.ts"],"names":[],"mappings":"AAKA,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAS7E;AAED,wBAAgB,4BAA4B,CAC1C,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,GACX,IAAI,CASN;AASD,eAAO,MAAM,gBAAgB,QAAsB,CAAC;AAGpD,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAetE;AAOD,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,MAAM,EACZ,EAAE,EAAE,MAAM,EACV,QAAQ,EAAE,MAAM,GACf,IAAI,CAsBN;AAED,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,IAAI,CAexE"}

package/dist/plugin/validation/identifiers.js

@@ -0,0 +1,92 @@
+import { MAX_PLUGIN_ID_LENGTH, PLUGIN_ID_RE } from "../define.js";
+import { PluginContextError } from "../errors.js";
+const IDENTIFIER_NAME_RE = /^[a-z][a-z0-9_-]*$/;
+export function assertValidFieldTypeName(pluginId, type) {
+    if (!IDENTIFIER_NAME_RE.test(type) || type.length > 64) {
+        throw PluginContextError.invalidFieldTypeName({
+            pluginId,
+            type,
+            pattern: IDENTIFIER_NAME_RE.source,
+            maxLength: 64,
+        });
+    }
+}
+export function assertValidLookupAdapterKind(pluginId, kind) {
+    if (!IDENTIFIER_NAME_RE.test(kind) || kind.length > 64) {
+        throw PluginContextError.invalidLookupAdapterKind({
+            pluginId,
+            kind,
+            pattern: IDENTIFIER_NAME_RE.source,
+            maxLength: 64,
+        });
+    }
+}
+// Keep page / group / field names portable: ASCII identifier that
+// starts with a letter, then letters/digits/underscores. Hyphens /
+// dots are excluded so testids, URL params, and storage keys stay
+// portable across SQLite / future MySQL without quoting. Length cap
+// mirrors the valibot `settingsIdentifierSchema` on the RPC side so a
+// plugin can't register a name its own `settings.get` / `.upsert`
+// calls would then reject.
+export const SETTINGS_NAME_RE = /^[a-z][a-z0-9_]*$/;
+const MAX_SETTINGS_IDENTIFIER_LENGTH = 64;
+export function assertValidIdentifier(kind, name) {
+    if (name.length > MAX_SETTINGS_IDENTIFIER_LENGTH) {
+        throw PluginContextError.identifierTooLong({
+            kind,
+            name,
+            maxLength: MAX_SETTINGS_IDENTIFIER_LENGTH,
+        });
+    }
+    if (!SETTINGS_NAME_RE.test(name)) {
+        throw PluginContextError.identifierShapeInvalid({
+            kind,
+            name,
+            pattern: SETTINGS_NAME_RE.source,
+        });
+    }
+}
+// Namespaced `<plugin>:<name>` shape. Both segments allow the hyphen
+// plugin ids use. The namespace must be the registering plugin's id so
+// one plugin can't squat another's ids in the shared, id-keyed registry.
+const NAMESPACED_ID_RE = /^[a-z][a-z0-9_-]*:[a-z][a-z0-9_-]*$/;
+export function assertNamespacedId(kind, id, pluginId) {
+    if (id.length > MAX_SETTINGS_IDENTIFIER_LENGTH) {
+        throw PluginContextError.identifierTooLong({
+            kind,
+            name: id,
+            maxLength: MAX_SETTINGS_IDENTIFIER_LENGTH,
+        });
+    }
+    if (!NAMESPACED_ID_RE.test(id)) {
+        throw PluginContextError.identifierShapeInvalid({
+            kind,
+            name: id,
+            pattern: NAMESPACED_ID_RE.source,
+        });
+    }
+    if (id.slice(0, id.indexOf(":")) !== pluginId) {
+        throw PluginContextError.identifierNamespaceMismatch({
+            kind,
+            name: id,
+            pluginId,
+        });
+    }
+}
+export function assertValidNavGroupId(pluginId, id) {
+    if (id.length === 0 || id.length > MAX_PLUGIN_ID_LENGTH) {
+        throw PluginContextError.invalidNavGroupIdLength({
+            pluginId,
+            id,
+            maxLength: MAX_PLUGIN_ID_LENGTH,
+        });
+    }
+    if (!PLUGIN_ID_RE.test(id)) {
+        throw PluginContextError.invalidNavGroupIdShape({
+            pluginId,
+            id,
+            pattern: PLUGIN_ID_RE.source,
+        });
+    }
+}
+//# sourceMappingURL=identifiers.js.map

package/dist/plugin/validation/identifiers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identifiers.js","sourceRoot":"","sources":["../../../src/plugin/validation/identifiers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAClE,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAElD,MAAM,kBAAkB,GAAG,oBAAoB,CAAC;AAEhD,MAAM,UAAU,wBAAwB,CAAC,QAAgB,EAAE,IAAY;IACrE,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QACvD,MAAM,kBAAkB,CAAC,oBAAoB,CAAC;YAC5C,QAAQ;YACR,IAAI;YACJ,OAAO,EAAE,kBAAkB,CAAC,MAAM;YAClC,SAAS,EAAE,EAAE;SACd,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC1C,QAAgB,EAChB,IAAY;IAEZ,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QACvD,MAAM,kBAAkB,CAAC,wBAAwB,CAAC;YAChD,QAAQ;YACR,IAAI;YACJ,OAAO,EAAE,kBAAkB,CAAC,MAAM;YAClC,SAAS,EAAE,EAAE;SACd,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,kEAAkE;AAClE,mEAAmE;AACnE,kEAAkE;AAClE,oEAAoE;AACpE,sEAAsE;AACtE,kEAAkE;AAClE,2BAA2B;AAC3B,MAAM,CAAC,MAAM,gBAAgB,GAAG,mBAAmB,CAAC;AACpD,MAAM,8BAA8B,GAAG,EAAE,CAAC;AAE1C,MAAM,UAAU,qBAAqB,CAAC,IAAY,EAAE,IAAY;IAC9D,IAAI,IAAI,CAAC,MAAM,GAAG,8BAA8B,EAAE,CAAC;QACjD,MAAM,kBAAkB,CAAC,iBAAiB,CAAC;YACzC,IAAI;YACJ,IAAI;YACJ,SAAS,EAAE,8BAA8B;SAC1C,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACjC,MAAM,kBAAkB,CAAC,sBAAsB,CAAC;YAC9C,IAAI;YACJ,IAAI;YACJ,OAAO,EAAE,gBAAgB,CAAC,MAAM;SACjC,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,qEAAqE;AACrE,uEAAuE;AACvE,yEAAyE;AACzE,MAAM,gBAAgB,GAAG,qCAAqC,CAAC;AAE/D,MAAM,UAAU,kBAAkB,CAChC,IAAY,EACZ,EAAU,EACV,QAAgB;IAEhB,IAAI,EAAE,CAAC,MAAM,GAAG,8BAA8B,EAAE,CAAC;QAC/C,MAAM,kBAAkB,CAAC,iBAAiB,CAAC;YACzC,IAAI;YACJ,IAAI,EAAE,EAAE;YACR,SAAS,EAAE,8BAA8B;SAC1C,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;QAC/B,MAAM,kBAAkB,CAAC,sBAAsB,CAAC;YAC9C,IAAI;YACJ,IAAI,EAAE,EAAE;YACR,OAAO,EAAE,gBAAgB,CAAC,MAAM;SACjC,CAAC,CAAC;IACL,CAAC;IACD,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;QAC9C,MAAM,kBAAkB,CAAC,2BAA2B,CAAC;YACnD,IAAI;YACJ,IAAI,EAAE,EAAE;YACR,QAAQ;SACT,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,QAAgB,EAAE,EAAU;IAChE,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,oBAAoB,EAAE,CAAC;QACxD,MAAM,kBAAkB,CAAC,uBAAuB,CAAC;YAC/C,QAAQ;YACR,EAAE;YACF,SAAS,EAAE,oBAAoB;SAChC,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;QAC3B,MAAM,kBAAkB,CAAC,sBAAsB,CAAC;YAC9C,QAAQ;YACR,EAAE;YACF,OAAO,EAAE,YAAY,CAAC,MAAM;SAC7B,CAAC,CAAC;IACL,CAAC;AACH,CAAC"}

package/dist/plugin/validation/index.d.ts

@@ -0,0 +1,7 @@
+export * from "./component-ref.js";
+export * from "./identifiers.js";
+export * from "./login-link.js";
+export * from "./meta-box-fields.js";
+export * from "./paths.js";
+export * from "./scheduled-task.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/plugin/validation/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/plugin/validation/index.ts"],"names":[],"mappings":"AAAA,cAAc,oBAAoB,CAAC;AACnC,cAAc,kBAAkB,CAAC;AACjC,cAAc,iBAAiB,CAAC;AAChC,cAAc,sBAAsB,CAAC;AACrC,cAAc,YAAY,CAAC;AAC3B,cAAc,qBAAqB,CAAC"}

package/dist/plugin/validation/index.js

@@ -0,0 +1,7 @@
+export * from "./component-ref.js";
+export * from "./identifiers.js";
+export * from "./login-link.js";
+export * from "./meta-box-fields.js";
+export * from "./paths.js";
+export * from "./scheduled-task.js";
+//# sourceMappingURL=index.js.map

package/dist/plugin/validation/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/plugin/validation/index.ts"],"names":[],"mappings":"AAAA,cAAc,oBAAoB,CAAC;AACnC,cAAc,kBAAkB,CAAC;AACjC,cAAc,iBAAiB,CAAC;AAChC,cAAc,sBAAsB,CAAC;AACrC,cAAc,YAAY,CAAC;AAC3B,cAAc,qBAAqB,CAAC"}

package/dist/plugin/validation/login-link.d.ts

@@ -0,0 +1,3 @@
+import type { LoginLinkOptions } from "../manifest.js";
+export declare function assertValidLoginLink(pluginId: string, options: LoginLinkOptions): void;
+//# sourceMappingURL=login-link.d.ts.map

package/dist/plugin/validation/login-link.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"login-link.d.ts","sourceRoot":"","sources":["../../../src/plugin/validation/login-link.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAUvD,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,gBAAgB,GACxB,IAAI,CAmCN"}

package/dist/plugin/validation/login-link.js

@@ -0,0 +1,43 @@
+import { PluginContextError } from "../errors.js";
+// Lowercase alphanum + dash/underscore, 1–32 chars, must start with a
+// letter. Matches `OAUTH_PROVIDER_KEY_PATTERN` exactly so keys read
+// consistently across login-button surfaces. Leading-letter constraint
+// keeps the wire id `${pluginId}:${key}` from looking like an opaque
+// numeric identifier in logs.
+const LOGIN_LINK_KEY_RE = /^[a-z][a-z0-9_-]{0,31}$/;
+export function assertValidLoginLink(pluginId, options) {
+    if (!LOGIN_LINK_KEY_RE.test(options.key)) {
+        throw PluginContextError.invalidLoginLinkKey({
+            pluginId,
+            key: options.key,
+        });
+    }
+    if (options.label.length === 0) {
+        throw PluginContextError.loginLinkEmptyLabel({
+            pluginId,
+            key: options.key,
+        });
+    }
+    // CR/LF defense: label is rendered into HTML by the admin, but a
+    // future logger / audit-trail consumer might splice it into a
+    // line-oriented format. Block at the boundary.
+    if (/[\r\n]/.test(options.label)) {
+        throw PluginContextError.loginLinkLabelHasCrLf({
+            pluginId,
+            key: options.key,
+        });
+    }
+    // href must be a same-origin path or an https:// URL — block
+    // `javascript:`, `data:`, protocol-relative `//`, and other schemes
+    // a misconfigured or hostile plugin might surface.
+    const isSameOriginPath = options.href.startsWith("/") && !options.href.startsWith("//");
+    const isHttps = options.href.startsWith("https://");
+    if (!isSameOriginPath && !isHttps) {
+        throw PluginContextError.invalidLoginLinkHref({
+            pluginId,
+            key: options.key,
+            href: options.href,
+        });
+    }
+}
+//# sourceMappingURL=login-link.js.map

package/dist/plugin/validation/login-link.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"login-link.js","sourceRoot":"","sources":["../../../src/plugin/validation/login-link.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAElD,sEAAsE;AACtE,oEAAoE;AACpE,uEAAuE;AACvE,qEAAqE;AACrE,8BAA8B;AAC9B,MAAM,iBAAiB,GAAG,yBAAyB,CAAC;AAEpD,MAAM,UAAU,oBAAoB,CAClC,QAAgB,EAChB,OAAyB;IAEzB,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACzC,MAAM,kBAAkB,CAAC,mBAAmB,CAAC;YAC3C,QAAQ;YACR,GAAG,EAAE,OAAO,CAAC,GAAG;SACjB,CAAC,CAAC;IACL,CAAC;IACD,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,MAAM,kBAAkB,CAAC,mBAAmB,CAAC;YAC3C,QAAQ;YACR,GAAG,EAAE,OAAO,CAAC,GAAG;SACjB,CAAC,CAAC;IACL,CAAC;IACD,iEAAiE;IACjE,8DAA8D;IAC9D,+CAA+C;IAC/C,IAAI,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACjC,MAAM,kBAAkB,CAAC,qBAAqB,CAAC;YAC7C,QAAQ;YACR,GAAG,EAAE,OAAO,CAAC,GAAG;SACjB,CAAC,CAAC;IACL,CAAC;IACD,6DAA6D;IAC7D,oEAAoE;IACpE,mDAAmD;IACnD,MAAM,gBAAgB,GACpB,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IACjE,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;IACpD,IAAI,CAAC,gBAAgB,IAAI,CAAC,OAAO,EAAE,CAAC;QAClC,MAAM,kBAAkB,CAAC,oBAAoB,CAAC;YAC5C,QAAQ;YACR,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,IAAI,EAAE,OAAO,CAAC,IAAI;SACnB,CAAC,CAAC;IACL,CAAC;AACH,CAAC"}

package/dist/plugin/validation/meta-box-fields.d.ts

@@ -0,0 +1,6 @@
+import type { MetaBoxField } from "../manifest.js";
+export declare const META_FIELD_KEY_RE: RegExp;
+export declare const META_RESERVED_KEY_PREFIX = "__plumix_";
+export declare const MAX_FIELDS_PER_META_BOX = 200;
+export declare function assertMetaBoxFields(kind: string, id: string, fields: readonly MetaBoxField[]): void;
+//# sourceMappingURL=meta-box-fields.d.ts.map

package/dist/plugin/validation/meta-box-fields.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"meta-box-fields.d.ts","sourceRoot":"","sources":["../../../src/plugin/validation/meta-box-fields.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAMnD,eAAO,MAAM,iBAAiB,QAAsB,CAAC;AAMrD,eAAO,MAAM,wBAAwB,cAAc,CAAC;AAMpD,eAAO,MAAM,uBAAuB,MAAM,CAAC;AAE3C,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,MAAM,EACZ,EAAE,EAAE,MAAM,EACV,MAAM,EAAE,SAAS,YAAY,EAAE,GAC9B,IAAI,CAmCN"}