@red-hat-developer-hub/backstage-plugin-extensions-backend 0.14.0

package/dist/installation/InstallationDataService.cjs.js

@@ -0,0 +1,124 @@
+'use strict';
+
+var catalogModel = require('@backstage/catalog-model');
+var FileInstallationStorage = require('./FileInstallationStorage.cjs.js');
+var InstallationInitError = require('../errors/InstallationInitError.cjs.js');
+var ConfigFormatError = require('../errors/ConfigFormatError.cjs.js');
+
+class InstallationDataService {
+  constructor(extensionsApi, _installationStorage, initializationError) {
+    this.extensionsApi = extensionsApi;
+    this._installationStorage = _installationStorage;
+    this.initializationError = initializationError;
+  }
+  get installationStorage() {
+    if (!this._installationStorage) {
+      throw new Error("Installation storage is not initialized", {
+        cause: this.initializationError
+      });
+    }
+    return this._installationStorage;
+  }
+  static fromConfig(deps) {
+    const { config, extensionsApi, logger } = deps;
+    const serviceWithInitializationError = (reason, message, cause) => {
+      if (reason === InstallationInitError.InstallationInitErrorReason.INSTALLATION_DISABLED_IN_PRODUCTION || reason === InstallationInitError.InstallationInitErrorReason.INSTALLATION_DISABLED) {
+        logger.warn(message);
+      } else {
+        logger.error(
+          `Installation feature is disabled. Error while loading data: ${message}`
+        );
+      }
+      return new InstallationDataService(
+        extensionsApi,
+        undefined,
+        new InstallationInitError.InstallationInitError(reason, message, cause)
+      );
+    };
+    try {
+      const node_env = process.env.NODE_ENV ?? "development";
+      if (node_env === "production") {
+        return serviceWithInitializationError(
+          InstallationInitError.InstallationInitErrorReason.INSTALLATION_DISABLED_IN_PRODUCTION,
+          "Installation feature is disabled in production"
+        );
+      }
+      const installationEnabled = config.getOptionalBoolean(
+        "extensions.installation.enabled"
+      );
+      if (!installationEnabled) {
+        return serviceWithInitializationError(
+          InstallationInitError.InstallationInitErrorReason.INSTALLATION_DISABLED,
+          "Installation feature is disabled under 'extensions.installation.enabled'"
+        );
+      }
+      const filePath = config.getOptionalString(
+        "extensions.installation.saveToSingleFile.file"
+      );
+      if (!filePath) {
+        return serviceWithInitializationError(
+          InstallationInitError.InstallationInitErrorReason.FILE_CONFIG_VALUE_MISSING,
+          "The 'extensions.installation.saveToSingleFile.file' config value is not being specified in the extensions configuration"
+        );
+      }
+      const storage = new FileInstallationStorage.FileInstallationStorage(filePath);
+      storage.initialize();
+      return new InstallationDataService(extensionsApi, storage);
+    } catch (e) {
+      let reason;
+      if (e instanceof InstallationInitError.InstallationInitError) {
+        reason = e.reason;
+      } else if (e instanceof ConfigFormatError.ConfigFormatError) {
+        reason = InstallationInitError.InstallationInitErrorReason.INVALID_CONFIG;
+      } else {
+        reason = InstallationInitError.InstallationInitErrorReason.UNKNOWN;
+      }
+      return serviceWithInitializationError(
+        reason,
+        e.message,
+        reason === InstallationInitError.InstallationInitErrorReason.UNKNOWN ? e : undefined
+      );
+    }
+  }
+  async getPluginDynamicArtifacts(plugin) {
+    const extensionsPackages = await this.extensionsApi.getPluginPackages(
+      plugin.metadata.namespace ?? catalogModel.DEFAULT_NAMESPACE,
+      plugin.metadata.name
+    );
+    return new Set(
+      extensionsPackages.flatMap(
+        (p) => p.spec?.dynamicArtifact ? [p.spec.dynamicArtifact] : []
+      )
+    );
+  }
+  getInitializationError() {
+    return this.initializationError;
+  }
+  getPackageConfig(packageDynamicArtifact) {
+    return this.installationStorage.getPackage(packageDynamicArtifact);
+  }
+  async getPluginConfig(plugin) {
+    const dynamicArtifacts = await this.getPluginDynamicArtifacts(plugin);
+    return this.installationStorage.getPackages(dynamicArtifacts);
+  }
+  updatePackageConfig(packageDynamicArtifact, newConfig) {
+    this.installationStorage.updatePackage(packageDynamicArtifact, newConfig);
+  }
+  async updatePluginConfig(plugin, newConfig) {
+    const dynamicArtifacts = await this.getPluginDynamicArtifacts(plugin);
+    this.installationStorage.updatePackages(dynamicArtifacts, newConfig);
+  }
+  setPackageDisabled(packageDynamicArtifact, disabled) {
+    this.installationStorage.setPackageDisabled(
+      packageDynamicArtifact,
+      disabled
+    );
+  }
+  async setPluginDisabled(plugin, disabled) {
+    const dynamicArtifacts = await this.getPluginDynamicArtifacts(plugin);
+    this.installationStorage.setPackagesDisabled(dynamicArtifacts, disabled);
+  }
+}
+
+exports.InstallationDataService = InstallationDataService;
+//# sourceMappingURL=InstallationDataService.cjs.js.map

package/dist/installation/InstallationDataService.cjs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"InstallationDataService.cjs.js","sources":["../../src/installation/InstallationDataService.ts"],"sourcesContent":["/*\n * Copyright The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport {\n  ExtensionsApi,\n  ExtensionsPlugin,\n} from '@red-hat-developer-hub/backstage-plugin-extensions-common';\nimport { DEFAULT_NAMESPACE } from '@backstage/catalog-model';\nimport {\n  FileInstallationStorage,\n  InstallationStorage,\n} from './FileInstallationStorage';\nimport type { Config } from '@backstage/config';\nimport {\n  InstallationInitError,\n  InstallationInitErrorReason,\n  InstallationInitErrorReasonKeys,\n} from '../errors/InstallationInitError';\nimport { LoggerService } from '@backstage/backend-plugin-api';\nimport { ConfigFormatError } from '../errors/ConfigFormatError';\n\nexport class InstallationDataService {\n  private constructor(\n    private readonly extensionsApi: ExtensionsApi,\n    private readonly _installationStorage?: InstallationStorage,\n    private readonly initializationError?: InstallationInitError,\n  ) {}\n\n  private get installationStorage(): InstallationStorage {\n    if (!this._installationStorage) {\n      throw new Error('Installation storage is not initialized', {\n        cause: this.initializationError,\n      });\n    }\n    return this._installationStorage;\n  }\n\n  static fromConfig(deps: {\n    config: Config;\n    extensionsApi: ExtensionsApi;\n    logger: LoggerService;\n  }): InstallationDataService {\n    const { config, extensionsApi, logger } = deps;\n\n    const serviceWithInitializationError = (\n      reason: InstallationInitErrorReasonKeys,\n      message: string,\n      cause?: Error,\n    ): InstallationDataService => {\n      if (\n        reason ===\n          InstallationInitErrorReason.INSTALLATION_DISABLED_IN_PRODUCTION ||\n        reason === InstallationInitErrorReason.INSTALLATION_DISABLED\n      ) {\n        logger.warn(message);\n      } else {\n        logger.error(\n          `Installation feature is disabled. Error while loading data: ${message}`,\n        );\n      }\n      return new InstallationDataService(\n        extensionsApi,\n        undefined,\n        new InstallationInitError(reason, message, cause),\n      );\n    };\n\n    try {\n      const node_env = process.env.NODE_ENV ?? 'development';\n      if (node_env === 'production') {\n        return serviceWithInitializationError(\n          InstallationInitErrorReason.INSTALLATION_DISABLED_IN_PRODUCTION,\n          'Installation feature is disabled in production',\n        );\n      }\n\n      const installationEnabled = config.getOptionalBoolean(\n        'extensions.installation.enabled',\n      );\n      if (!installationEnabled) {\n        return serviceWithInitializationError(\n          InstallationInitErrorReason.INSTALLATION_DISABLED,\n          \"Installation feature is disabled under 'extensions.installation.enabled'\",\n        );\n      }\n\n      const filePath = config.getOptionalString(\n        'extensions.installation.saveToSingleFile.file',\n      );\n      if (!filePath) {\n        return serviceWithInitializationError(\n          InstallationInitErrorReason.FILE_CONFIG_VALUE_MISSING,\n          \"The 'extensions.installation.saveToSingleFile.file' config value is not being specified in the extensions configuration\",\n        );\n      }\n\n      const storage = new FileInstallationStorage(filePath);\n      storage.initialize();\n      return new InstallationDataService(extensionsApi, storage);\n    } catch (e) {\n      let reason: InstallationInitErrorReasonKeys;\n      if (e instanceof InstallationInitError) {\n        reason = e.reason;\n      } else if (e instanceof ConfigFormatError) {\n        reason = InstallationInitErrorReason.INVALID_CONFIG;\n      } else {\n        reason = InstallationInitErrorReason.UNKNOWN;\n      }\n      return serviceWithInitializationError(\n        reason,\n        e.message,\n        reason === InstallationInitErrorReason.UNKNOWN ? e : undefined,\n      );\n    }\n  }\n\n  private async getPluginDynamicArtifacts(\n    plugin: ExtensionsPlugin,\n  ): Promise<Set<string>> {\n    const extensionsPackages = await this.extensionsApi.getPluginPackages(\n      plugin.metadata.namespace ?? DEFAULT_NAMESPACE,\n      plugin.metadata.name,\n    );\n\n    return new Set(\n      extensionsPackages.flatMap(p =>\n        p.spec?.dynamicArtifact ? [p.spec.dynamicArtifact] : [],\n      ),\n    );\n  }\n\n  getInitializationError(): InstallationInitError | undefined {\n    return this.initializationError;\n  }\n\n  getPackageConfig(packageDynamicArtifact: string): string | undefined {\n    return this.installationStorage.getPackage(packageDynamicArtifact);\n  }\n\n  async getPluginConfig(plugin: ExtensionsPlugin): Promise<string | undefined> {\n    const dynamicArtifacts = await this.getPluginDynamicArtifacts(plugin);\n    return this.installationStorage.getPackages(dynamicArtifacts);\n  }\n\n  updatePackageConfig(packageDynamicArtifact: string, newConfig: string): void {\n    this.installationStorage.updatePackage(packageDynamicArtifact, newConfig);\n  }\n\n  async updatePluginConfig(\n    plugin: ExtensionsPlugin,\n    newConfig: string,\n  ): Promise<void> {\n    const dynamicArtifacts = await this.getPluginDynamicArtifacts(plugin);\n    this.installationStorage.updatePackages(dynamicArtifacts, newConfig);\n  }\n\n  setPackageDisabled(packageDynamicArtifact: string, disabled: boolean) {\n    this.installationStorage.setPackageDisabled(\n      packageDynamicArtifact,\n      disabled,\n    );\n  }\n\n  async setPluginDisabled(plugin: ExtensionsPlugin, disabled: boolean) {\n    const dynamicArtifacts = await this.getPluginDynamicArtifacts(plugin);\n    this.installationStorage.setPackagesDisabled(dynamicArtifacts, disabled);\n  }\n}\n"],"names":["InstallationInitErrorReason","InstallationInitError","FileInstallationStorage","ConfigFormatError","DEFAULT_NAMESPACE"],"mappings":";;;;;;;AAkCO,MAAM,uBAAwB,CAAA;AAAA,EAC3B,WAAA,CACW,aACA,EAAA,oBAAA,EACA,mBACjB,EAAA;AAHiB,IAAA,IAAA,CAAA,aAAA,GAAA,aAAA;AACA,IAAA,IAAA,CAAA,oBAAA,GAAA,oBAAA;AACA,IAAA,IAAA,CAAA,mBAAA,GAAA,mBAAA;AAAA;AAChB,EAEH,IAAY,mBAA2C,GAAA;AACrD,IAAI,IAAA,CAAC,KAAK,oBAAsB,EAAA;AAC9B,MAAM,MAAA,IAAI,MAAM,yCAA2C,EAAA;AAAA,QACzD,OAAO,IAAK,CAAA;AAAA,OACb,CAAA;AAAA;AAEH,IAAA,OAAO,IAAK,CAAA,oBAAA;AAAA;AACd,EAEA,OAAO,WAAW,IAIU,EAAA;AAC1B,IAAA,MAAM,EAAE,MAAA,EAAQ,aAAe,EAAA,MAAA,EAAW,GAAA,IAAA;AAE1C,IAAA,MAAM,8BAAiC,GAAA,CACrC,MACA,EAAA,OAAA,EACA,KAC4B,KAAA;AAC5B,MAAA,IACE,MACE,KAAAA,iDAAA,CAA4B,mCAC9B,IAAA,MAAA,KAAWA,kDAA4B,qBACvC,EAAA;AACA,QAAA,MAAA,CAAO,KAAK,OAAO,CAAA;AAAA,OACd,MAAA;AACL,QAAO,MAAA,CAAA,KAAA;AAAA,UACL,+DAA+D,OAAO,CAAA;AAAA,SACxE;AAAA;AAEF,MAAA,OAAO,IAAI,uBAAA;AAAA,QACT,aAAA;AAAA,QACA,SAAA;AAAA,QACA,IAAIC,2CAAA,CAAsB,MAAQ,EAAA,OAAA,EAAS,KAAK;AAAA,OAClD;AAAA,KACF;AAEA,IAAI,IAAA;AACF,MAAM,MAAA,QAAA,GAAW,OAAQ,CAAA,GAAA,CAAI,QAAY,IAAA,aAAA;AACzC,MAAA,IAAI,aAAa,YAAc,EAAA;AAC7B,QAAO,OAAA,8BAAA;AAAA,UACLD,iDAA4B,CAAA,mCAAA;AAAA,UAC5B;AAAA,SACF;AAAA;AAGF,MAAA,MAAM,sBAAsB,MAAO,CAAA,kBAAA;AAAA,QACjC;AAAA,OACF;AACA,MAAA,IAAI,CAAC,mBAAqB,EAAA;AACxB,QAAO,OAAA,8BAAA;AAAA,UACLA,iDAA4B,CAAA,qBAAA;AAAA,UAC5B;AAAA,SACF;AAAA;AAGF,MAAA,MAAM,WAAW,MAAO,CAAA,iBAAA;AAAA,QACtB;AAAA,OACF;AACA,MAAA,IAAI,CAAC,QAAU,EAAA;AACb,QAAO,OAAA,8BAAA;AAAA,UACLA,iDAA4B,CAAA,yBAAA;AAAA,UAC5B;AAAA,SACF;AAAA;AAGF,MAAM,MAAA,OAAA,GAAU,IAAIE,+CAAA,CAAwB,QAAQ,CAAA;AACpD,MAAA,OAAA,CAAQ,UAAW,EAAA;AACnB,MAAO,OAAA,IAAI,uBAAwB,CAAA,aAAA,EAAe,OAAO,CAAA;AAAA,aAClD,CAAG,EAAA;AACV,MAAI,IAAA,MAAA;AACJ,MAAA,IAAI,aAAaD,2CAAuB,EAAA;AACtC,QAAA,MAAA,GAAS,CAAE,CAAA,MAAA;AAAA,OACb,MAAA,IAAW,aAAaE,mCAAmB,EAAA;AACzC,QAAA,MAAA,GAASH,iDAA4B,CAAA,cAAA;AAAA,OAChC,MAAA;AACL,QAAA,MAAA,GAASA,iDAA4B,CAAA,OAAA;AAAA;AAEvC,MAAO,OAAA,8BAAA;AAAA,QACL,MAAA;AAAA,QACA,CAAE,CAAA,OAAA;AAAA,QACF,MAAA,KAAWA,iDAA4B,CAAA,OAAA,GAAU,CAAI,GAAA;AAAA,OACvD;AAAA;AACF;AACF,EAEA,MAAc,0BACZ,MACsB,EAAA;AACtB,IAAM,MAAA,kBAAA,GAAqB,MAAM,IAAA,CAAK,aAAc,CAAA,iBAAA;AAAA,MAClD,MAAA,CAAO,SAAS,SAAa,IAAAI,8BAAA;AAAA,MAC7B,OAAO,QAAS,CAAA;AAAA,KAClB;AAEA,IAAA,OAAO,IAAI,GAAA;AAAA,MACT,kBAAmB,CAAA,OAAA;AAAA,QAAQ,CAAA,CAAA,KACzB,EAAE,IAAM,EAAA,eAAA,GAAkB,CAAC,CAAE,CAAA,IAAA,CAAK,eAAe,CAAA,GAAI;AAAC;AACxD,KACF;AAAA;AACF,EAEA,sBAA4D,GAAA;AAC1D,IAAA,OAAO,IAAK,CAAA,mBAAA;AAAA;AACd,EAEA,iBAAiB,sBAAoD,EAAA;AACnE,IAAO,OAAA,IAAA,CAAK,mBAAoB,CAAA,UAAA,CAAW,sBAAsB,CAAA;AAAA;AACnE,EAEA,MAAM,gBAAgB,MAAuD,EAAA;AAC3E,IAAA,MAAM,gBAAmB,GAAA,MAAM,IAAK,CAAA,yBAAA,CAA0B,MAAM,CAAA;AACpE,IAAO,OAAA,IAAA,CAAK,mBAAoB,CAAA,WAAA,CAAY,gBAAgB,CAAA;AAAA;AAC9D,EAEA,mBAAA,CAAoB,wBAAgC,SAAyB,EAAA;AAC3E,IAAK,IAAA,CAAA,mBAAA,CAAoB,aAAc,CAAA,sBAAA,EAAwB,SAAS,CAAA;AAAA;AAC1E,EAEA,MAAM,kBACJ,CAAA,MAAA,EACA,SACe,EAAA;AACf,IAAA,MAAM,gBAAmB,GAAA,MAAM,IAAK,CAAA,yBAAA,CAA0B,MAAM,CAAA;AACpE,IAAK,IAAA,CAAA,mBAAA,CAAoB,cAAe,CAAA,gBAAA,EAAkB,SAAS,CAAA;AAAA;AACrE,EAEA,kBAAA,CAAmB,wBAAgC,QAAmB,EAAA;AACpE,IAAA,IAAA,CAAK,mBAAoB,CAAA,kBAAA;AAAA,MACvB,sBAAA;AAAA,MACA;AAAA,KACF;AAAA;AACF,EAEA,MAAM,iBAAkB,CAAA,MAAA,EAA0B,QAAmB,EAAA;AACnE,IAAA,MAAM,gBAAmB,GAAA,MAAM,IAAK,CAAA,yBAAA,CAA0B,MAAM,CAAA;AACpE,IAAK,IAAA,CAAA,mBAAA,CAAoB,mBAAoB,CAAA,gBAAA,EAAkB,QAAQ,CAAA;AAAA;AAE3E;;;;"}

package/dist/permissions/rules.cjs.js

@@ -0,0 +1,43 @@
+'use strict';
+
+var pluginPermissionNode = require('@backstage/plugin-permission-node');
+var zod = require('zod');
+var backstagePluginExtensionsCommon = require('@red-hat-developer-hub/backstage-plugin-extensions-common');
+
+const extensionsPermissionResourceRef = pluginPermissionNode.createPermissionResourceRef().with({
+  pluginId: "extensions",
+  resourceType: backstagePluginExtensionsCommon.RESOURCE_TYPE_EXTENSIONS_PLUGIN
+});
+const hasPluginName = pluginPermissionNode.createPermissionRule({
+  name: "HAS_NAME",
+  description: "Should allow users to install the plugin with specified name",
+  resourceRef: extensionsPermissionResourceRef,
+  paramsSchema: zod.z.object({
+    pluginNames: zod.z.string().array().optional().describe("List of plugin names or titles to match on")
+  }),
+  apply: (plugin, { pluginNames }) => {
+    return pluginNames && pluginNames.length > 0 ? pluginNames?.some(
+      (name) => name.toLowerCase() === plugin.metadata.title?.toLowerCase() || name.toLowerCase() === plugin.metadata.name.toLowerCase()
+    ) : true;
+  },
+  toQuery: ({ pluginNames }) => ({ key: "name", values: pluginNames })
+});
+const hasAnnotation = pluginPermissionNode.createPermissionRule({
+  name: "HAS_ANNOTATION",
+  description: "Should allow users to install the plugin with specified annotation",
+  resourceRef: extensionsPermissionResourceRef,
+  paramsSchema: zod.z.object({
+    annotation: zod.z.string().describe("Name of the annotation to match on"),
+    value: zod.z.string().optional().describe("Value of the annotation to match on")
+  }),
+  apply: (plugin, params) => !!plugin.metadata.annotations?.hasOwnProperty(params.annotation) && (params.value === undefined ? true : plugin.metadata.annotations?.[params.annotation] === params.value),
+  toQuery: ({ annotation, value }) => ({
+    key: annotation,
+    values: value ? [value] : undefined
+  })
+});
+const rules = { hasPluginName, hasAnnotation };
+
+exports.extensionsPermissionResourceRef = extensionsPermissionResourceRef;
+exports.rules = rules;
+//# sourceMappingURL=rules.cjs.js.map

package/dist/permissions/rules.cjs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rules.cjs.js","sources":["../../src/permissions/rules.ts"],"sourcesContent":["/*\n * Copyright The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport {\n  createPermissionResourceRef,\n  createPermissionRule,\n} from '@backstage/plugin-permission-node';\nimport { z } from 'zod';\nimport {\n  ExtensionsPlugin,\n  RESOURCE_TYPE_EXTENSIONS_PLUGIN,\n} from '@red-hat-developer-hub/backstage-plugin-extensions-common';\n\nexport type ExtentionFilter = {\n  key: string;\n  values: Array<string> | undefined;\n};\n\nexport type ExtentionFilters =\n  | { anyOf: ExtentionFilters[] }\n  | { allOf: ExtentionFilters[] }\n  | { not: ExtentionFilters }\n  | ExtentionFilter;\n\nexport const extensionsPermissionResourceRef = createPermissionResourceRef<\n  ExtensionsPlugin,\n  ExtentionFilter\n>().with({\n  pluginId: 'extensions',\n  resourceType: RESOURCE_TYPE_EXTENSIONS_PLUGIN,\n});\n\nexport type ExtensionParams = {\n  annotation: string;\n  value?: string;\n  pluginNames?: string[];\n};\n\nconst hasPluginName = createPermissionRule({\n  name: 'HAS_NAME',\n  description: 'Should allow users to install the plugin with specified name',\n  resourceRef: extensionsPermissionResourceRef,\n\n  paramsSchema: z.object({\n    pluginNames: z\n      .string()\n      .array()\n      .optional()\n      .describe('List of plugin names or titles to match on'),\n  }),\n  apply: (plugin: ExtensionsPlugin, { pluginNames }) => {\n    return pluginNames && pluginNames.length > 0\n      ? pluginNames?.some(\n          name =>\n            name.toLowerCase() === plugin.metadata.title?.toLowerCase() ||\n            name.toLowerCase() === plugin.metadata.name.toLowerCase(),\n        )\n      : true;\n  },\n  toQuery: ({ pluginNames }) => ({ key: 'name', values: pluginNames }),\n});\n\nconst hasAnnotation = createPermissionRule({\n  name: 'HAS_ANNOTATION',\n  description:\n    'Should allow users to install the plugin with specified annotation',\n  resourceRef: extensionsPermissionResourceRef,\n  paramsSchema: z.object({\n    annotation: z.string().describe('Name of the annotation to match on'),\n    value: z\n      .string()\n      .optional()\n      .describe('Value of the annotation to match on'),\n  }),\n  apply: (plugin: ExtensionsPlugin, params: ExtensionParams) =>\n    !!plugin.metadata.annotations?.hasOwnProperty(params.annotation) &&\n    (params.value === undefined\n      ? true\n      : plugin.metadata.annotations?.[params.annotation] === params.value),\n  toQuery: ({ annotation, value }) => ({\n    key: annotation,\n    values: value ? [value] : undefined,\n  }),\n});\n\nexport const rules = { hasPluginName, hasAnnotation };\n"],"names":["createPermissionResourceRef","RESOURCE_TYPE_EXTENSIONS_PLUGIN","createPermissionRule","z"],"mappings":";;;;;;AAqCa,MAAA,+BAAA,GAAkCA,gDAG7C,EAAA,CAAE,IAAK,CAAA;AAAA,EACP,QAAU,EAAA,YAAA;AAAA,EACV,YAAc,EAAAC;AAChB,CAAC;AAQD,MAAM,gBAAgBC,yCAAqB,CAAA;AAAA,EACzC,IAAM,EAAA,UAAA;AAAA,EACN,WAAa,EAAA,8DAAA;AAAA,EACb,WAAa,EAAA,+BAAA;AAAA,EAEb,YAAA,EAAcC,MAAE,MAAO,CAAA;AAAA,IACrB,WAAA,EAAaA,MACV,MAAO,EAAA,CACP,OACA,CAAA,QAAA,EACA,CAAA,QAAA,CAAS,4CAA4C;AAAA,GACzD,CAAA;AAAA,EACD,KAAO,EAAA,CAAC,MAA0B,EAAA,EAAE,aAAkB,KAAA;AACpD,IAAA,OAAO,WAAe,IAAA,WAAA,CAAY,MAAS,GAAA,CAAA,GACvC,WAAa,EAAA,IAAA;AAAA,MACX,CACE,IAAA,KAAA,IAAA,CAAK,WAAY,EAAA,KAAM,OAAO,QAAS,CAAA,KAAA,EAAO,WAAY,EAAA,IAC1D,KAAK,WAAY,EAAA,KAAM,MAAO,CAAA,QAAA,CAAS,KAAK,WAAY;AAAA,KAE5D,GAAA,IAAA;AAAA,GACN;AAAA,EACA,OAAA,EAAS,CAAC,EAAE,WAAA,QAAmB,EAAE,GAAA,EAAK,MAAQ,EAAA,MAAA,EAAQ,WAAY,EAAA;AACpE,CAAC,CAAA;AAED,MAAM,gBAAgBD,yCAAqB,CAAA;AAAA,EACzC,IAAM,EAAA,gBAAA;AAAA,EACN,WACE,EAAA,oEAAA;AAAA,EACF,WAAa,EAAA,+BAAA;AAAA,EACb,YAAA,EAAcC,MAAE,MAAO,CAAA;AAAA,IACrB,UAAY,EAAAA,KAAA,CAAE,MAAO,EAAA,CAAE,SAAS,oCAAoC,CAAA;AAAA,IACpE,OAAOA,KACJ,CAAA,MAAA,GACA,QAAS,EAAA,CACT,SAAS,qCAAqC;AAAA,GAClD,CAAA;AAAA,EACD,KAAA,EAAO,CAAC,MAA0B,EAAA,MAAA,KAChC,CAAC,CAAC,MAAA,CAAO,QAAS,CAAA,WAAA,EAAa,cAAe,CAAA,MAAA,CAAO,UAAU,CAC9D,KAAA,MAAA,CAAO,KAAU,KAAA,SAAA,GACd,IACA,GAAA,MAAA,CAAO,SAAS,WAAc,GAAA,MAAA,CAAO,UAAU,CAAA,KAAM,MAAO,CAAA,KAAA,CAAA;AAAA,EAClE,OAAS,EAAA,CAAC,EAAE,UAAA,EAAY,OAAa,MAAA;AAAA,IACnC,GAAK,EAAA,UAAA;AAAA,IACL,MAAQ,EAAA,KAAA,GAAQ,CAAC,KAAK,CAAI,GAAA;AAAA,GAC5B;AACF,CAAC,CAAA;AAEY,MAAA,KAAA,GAAQ,EAAE,aAAA,EAAe,aAAc;;;;;"}

package/dist/plugin.cjs.js

@@ -0,0 +1,61 @@
+'use strict';
+
+var backendPluginApi = require('@backstage/backend-plugin-api');
+var catalogClient = require('@backstage/catalog-client');
+var backendDynamicFeatureService = require('@backstage/backend-dynamic-feature-service');
+var backstagePluginExtensionsCommon = require('@red-hat-developer-hub/backstage-plugin-extensions-common');
+var router = require('./router.cjs.js');
+var InstallationDataService = require('./installation/InstallationDataService.cjs.js');
+
+const extensionsPlugin = backendPluginApi.createBackendPlugin({
+  pluginId: "extensions",
+  register(env) {
+    env.registerInit({
+      deps: {
+        auth: backendPluginApi.coreServices.auth,
+        config: backendPluginApi.coreServices.rootConfig,
+        httpAuth: backendPluginApi.coreServices.httpAuth,
+        httpRouter: backendPluginApi.coreServices.httpRouter,
+        discovery: backendPluginApi.coreServices.discovery,
+        logger: backendPluginApi.coreServices.logger,
+        permissions: backendPluginApi.coreServices.permissions,
+        pluginProvider: backendDynamicFeatureService.dynamicPluginsServiceRef
+      },
+      async init({
+        pluginProvider,
+        auth,
+        config,
+        httpAuth,
+        httpRouter,
+        discovery,
+        logger,
+        permissions
+      }) {
+        const catalogApi = new catalogClient.CatalogClient({ discoveryApi: discovery });
+        const extensionsApi = new backstagePluginExtensionsCommon.ExtensionsCatalogClient({
+          auth,
+          catalogApi
+        });
+        const installationDataService = InstallationDataService.InstallationDataService.fromConfig({
+          config,
+          extensionsApi,
+          logger
+        });
+        httpRouter.use(
+          await router.createRouter({
+            httpAuth,
+            installationDataService,
+            extensionsApi,
+            permissions,
+            pluginProvider,
+            logger,
+            config
+          })
+        );
+      }
+    });
+  }
+});
+
+exports.extensionsPlugin = extensionsPlugin;
+//# sourceMappingURL=plugin.cjs.js.map

package/dist/plugin.cjs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin.cjs.js","sources":["../src/plugin.ts"],"sourcesContent":["/*\n * Copyright The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport {\n  coreServices,\n  createBackendPlugin,\n} from '@backstage/backend-plugin-api';\nimport { CatalogClient } from '@backstage/catalog-client';\nimport { dynamicPluginsServiceRef } from '@backstage/backend-dynamic-feature-service';\n\nimport {\n  ExtensionsApi,\n  ExtensionsCatalogClient,\n} from '@red-hat-developer-hub/backstage-plugin-extensions-common';\n\nimport { createRouter } from './router';\nimport { InstallationDataService } from './installation/InstallationDataService';\n\n/**\n * Extensions backend plugin\n *\n * @public\n */\nexport const extensionsPlugin = createBackendPlugin({\n  pluginId: 'extensions',\n  register(env) {\n    env.registerInit({\n      deps: {\n        auth: coreServices.auth,\n        config: coreServices.rootConfig,\n        httpAuth: coreServices.httpAuth,\n        httpRouter: coreServices.httpRouter,\n        discovery: coreServices.discovery,\n        logger: coreServices.logger,\n        permissions: coreServices.permissions,\n        pluginProvider: dynamicPluginsServiceRef,\n      },\n      async init({\n        pluginProvider,\n        auth,\n        config,\n        httpAuth,\n        httpRouter,\n        discovery,\n        logger,\n        permissions,\n      }) {\n        const catalogApi = new CatalogClient({ discoveryApi: discovery });\n\n        const extensionsApi: ExtensionsApi = new ExtensionsCatalogClient({\n          auth,\n          catalogApi,\n        });\n\n        const installationDataService: InstallationDataService =\n          InstallationDataService.fromConfig({\n            config,\n            extensionsApi,\n            logger,\n          });\n\n        httpRouter.use(\n          await createRouter({\n            httpAuth,\n            installationDataService,\n            extensionsApi,\n            permissions,\n            pluginProvider,\n            logger,\n            config,\n          }),\n        );\n      },\n    });\n  },\n});\n\n/**\n * @public\n * @deprecated Use extensionsPlugin instead\n */\nexport const markerplacePlugin = extensionsPlugin;\n"],"names":["createBackendPlugin","coreServices","dynamicPluginsServiceRef","CatalogClient","ExtensionsCatalogClient","InstallationDataService","createRouter"],"mappings":";;;;;;;;;AAoCO,MAAM,mBAAmBA,oCAAoB,CAAA;AAAA,EAClD,QAAU,EAAA,YAAA;AAAA,EACV,SAAS,GAAK,EAAA;AACZ,IAAA,GAAA,CAAI,YAAa,CAAA;AAAA,MACf,IAAM,EAAA;AAAA,QACJ,MAAMC,6BAAa,CAAA,IAAA;AAAA,QACnB,QAAQA,6BAAa,CAAA,UAAA;AAAA,QACrB,UAAUA,6BAAa,CAAA,QAAA;AAAA,QACvB,YAAYA,6BAAa,CAAA,UAAA;AAAA,QACzB,WAAWA,6BAAa,CAAA,SAAA;AAAA,QACxB,QAAQA,6BAAa,CAAA,MAAA;AAAA,QACrB,aAAaA,6BAAa,CAAA,WAAA;AAAA,QAC1B,cAAgB,EAAAC;AAAA,OAClB;AAAA,MACA,MAAM,IAAK,CAAA;AAAA,QACT,cAAA;AAAA,QACA,IAAA;AAAA,QACA,MAAA;AAAA,QACA,QAAA;AAAA,QACA,UAAA;AAAA,QACA,SAAA;AAAA,QACA,MAAA;AAAA,QACA;AAAA,OACC,EAAA;AACD,QAAA,MAAM,aAAa,IAAIC,2BAAA,CAAc,EAAE,YAAA,EAAc,WAAW,CAAA;AAEhE,QAAM,MAAA,aAAA,GAA+B,IAAIC,uDAAwB,CAAA;AAAA,UAC/D,IAAA;AAAA,UACA;AAAA,SACD,CAAA;AAED,QAAM,MAAA,uBAAA,GACJC,gDAAwB,UAAW,CAAA;AAAA,UACjC,MAAA;AAAA,UACA,aAAA;AAAA,UACA;AAAA,SACD,CAAA;AAEH,QAAW,UAAA,CAAA,GAAA;AAAA,UACT,MAAMC,mBAAa,CAAA;AAAA,YACjB,QAAA;AAAA,YACA,uBAAA;AAAA,YACA,aAAA;AAAA,YACA,WAAA;AAAA,YACA,cAAA;AAAA,YACA,MAAA;AAAA,YACA;AAAA,WACD;AAAA,SACH;AAAA;AACF,KACD,CAAA;AAAA;AAEL,CAAC;;;;"}

package/dist/router.cjs.js

@@ -0,0 +1,364 @@
+'use strict';
+
+var express = require('express');
+var Router = require('express-promise-router');
+var errors = require('@backstage/errors');
+var pluginPermissionCommon = require('@backstage/plugin-permission-common');
+var backstagePluginExtensionsCommon = require('@red-hat-developer-hub/backstage-plugin-extensions-common');
+var pluginPermissionNode = require('@backstage/plugin-permission-node');
+var createSearchParams = require('./utils/createSearchParams.cjs.js');
+var removeVerboseSpecContent = require('./utils/removeVerboseSpecContent.cjs.js');
+var rules = require('./permissions/rules.cjs.js');
+var permissionUtils = require('./utils/permissionUtils.cjs.js');
+var ConfigFormatError = require('./errors/ConfigFormatError.cjs.js');
+var rootHttpRouter = require('@backstage/backend-defaults/rootHttpRouter');
+
+function _interopDefaultCompat (e) { return e && typeof e === 'object' && 'default' in e ? e : { default: e }; }
+
+var express__default = /*#__PURE__*/_interopDefaultCompat(express);
+var Router__default = /*#__PURE__*/_interopDefaultCompat(Router);
+
+async function createRouter(options) {
+  const {
+    httpAuth,
+    extensionsApi,
+    permissions,
+    installationDataService,
+    pluginProvider,
+    logger,
+    config
+  } = options;
+  const requireInitializedInstallationDataService = (_req, _res, next) => {
+    const error = installationDataService.getInitializationError();
+    if (error) {
+      throw error;
+    }
+    next();
+  };
+  const router = Router__default.default();
+  const permissionsIntegrationRouter = pluginPermissionNode.createPermissionIntegrationRouter({
+    resourceType: backstagePluginExtensionsCommon.RESOURCE_TYPE_EXTENSIONS_PLUGIN,
+    permissions: backstagePluginExtensionsCommon.extensionsPermissions,
+    rules: Object.values(rules.rules)
+  });
+  router.use(express__default.default.json());
+  router.use(permissionsIntegrationRouter);
+  const authorizeConditional = async (request, permission) => {
+    const credentials = await httpAuth.credentials(request);
+    let decision;
+    if (!permission) {
+      return { result: pluginPermissionCommon.AuthorizeResult.ALLOW };
+    }
+    if (permission.type === "resource") {
+      decision = (await permissions.authorizeConditional([{ permission }], {
+        credentials
+      }))[0];
+    } else {
+      decision = (await permissions.authorize([{ permission }], {
+        credentials
+      }))[0];
+    }
+    return decision;
+  };
+  const getAuthorizedPlugin = async (request, permission) => {
+    const decision = await authorizeConditional(request, permission);
+    if (decision.result === pluginPermissionCommon.AuthorizeResult.DENY) {
+      throw new errors.NotAllowedError(
+        `Not allowed to ${permission.attributes.action} the configuration of ${request.params.namespace}:${request.params.name}`
+      );
+    }
+    const plugin = await extensionsApi.getPluginByName(
+      request.params.namespace,
+      request.params.name
+    );
+    const hasAccess = decision.result === pluginPermissionCommon.AuthorizeResult.ALLOW || decision.result === pluginPermissionCommon.AuthorizeResult.CONDITIONAL && permissionUtils.matches(plugin, decision.conditions);
+    if (!hasAccess) {
+      throw new errors.NotAllowedError(
+        `Not allowed to ${permission.attributes.action} the configuration of ${request.params.namespace}:${request.params.name}`
+      );
+    }
+    return plugin;
+  };
+  const getAuthorizedPackage = async (request, permission) => {
+    const decision = await authorizeConditional(request, permission);
+    if (decision.result === pluginPermissionCommon.AuthorizeResult.DENY) {
+      throw new errors.NotAllowedError(
+        `Not allowed to ${permission.attributes.action} the configuration of ${request.params.namespace}:${request.params.name}`
+      );
+    }
+    const packagePlugins = await extensionsApi.getPackagePlugins(
+      request.params.namespace,
+      request.params.name
+    );
+    const hasAccess = decision.result === pluginPermissionCommon.AuthorizeResult.ALLOW || decision.result === pluginPermissionCommon.AuthorizeResult.CONDITIONAL && packagePlugins.some((plugin) => permissionUtils.matches(plugin, decision.conditions));
+    if (!hasAccess) {
+      throw new errors.NotAllowedError(
+        `Not allowed to ${permission.attributes.action} the configuration of ${request.params.namespace}:${request.params.name}`
+      );
+    }
+    return await extensionsApi.getPackageByName(
+      request.params.namespace,
+      request.params.name
+    );
+  };
+  router.get("/collections", async (req, res) => {
+    const request = backstagePluginExtensionsCommon.decodeGetEntitiesRequest(createSearchParams.createSearchParams(req));
+    const collections = await extensionsApi.getCollections(request);
+    res.json(collections);
+  });
+  router.get("/collections/facets", async (req, res) => {
+    const request = backstagePluginExtensionsCommon.decodeGetEntityFacetsRequest(createSearchParams.createSearchParams(req));
+    const facets = await extensionsApi.getCollectionsFacets(request);
+    res.json(facets);
+  });
+  router.get("/collection/:namespace/:name", async (req, res) => {
+    const collection = await extensionsApi.getCollectionByName(
+      req.params.namespace,
+      req.params.name
+    );
+    res.json(collection);
+  });
+  router.get("/collection/:namespace/:name/plugins", async (req, res) => {
+    const plugins2 = await extensionsApi.getCollectionPlugins(
+      req.params.namespace,
+      req.params.name
+    );
+    removeVerboseSpecContent.removeVerboseSpecContent(plugins2);
+    res.json(plugins2);
+  });
+  router.get("/packages", async (req, res) => {
+    const request = backstagePluginExtensionsCommon.decodeGetEntitiesRequest(createSearchParams.createSearchParams(req));
+    const packages = await extensionsApi.getPackages(request);
+    removeVerboseSpecContent.removeVerboseSpecContent(packages.items);
+    res.json(packages);
+  });
+  router.get("/packages/facets", async (req, res) => {
+    const request = backstagePluginExtensionsCommon.decodeGetEntityFacetsRequest(createSearchParams.createSearchParams(req));
+    const facets = await extensionsApi.getPackagesFacets(request);
+    res.json(facets);
+  });
+  router.get("/package/:namespace/:name", async (req, res) => {
+    res.json(
+      await extensionsApi.getPackageByName(
+        req.params.namespace,
+        req.params.name
+      )
+    );
+  });
+  router.get(
+    "/package/:namespace/:name/configuration",
+    requireInitializedInstallationDataService,
+    async (req, res) => {
+      const extensionsPackage = await getAuthorizedPackage(
+        req,
+        backstagePluginExtensionsCommon.extensionsPluginReadPermission
+      );
+      if (!extensionsPackage.spec?.dynamicArtifact) {
+        throw new Error(
+          `Package catalog entity ${extensionsPackage.metadata.name} is missing 'spec.dynamicArtifact'`
+        );
+      }
+      const result = installationDataService.getPackageConfig(
+        extensionsPackage.spec?.dynamicArtifact
+      );
+      res.status(200).json({ configYaml: result });
+    }
+  );
+  router.post(
+    "/package/:namespace/:name/configuration",
+    requireInitializedInstallationDataService,
+    async (req, res) => {
+      const extensionsPackage = await getAuthorizedPackage(
+        req,
+        backstagePluginExtensionsCommon.extensionsPluginWritePermission
+      );
+      if (!extensionsPackage.spec?.dynamicArtifact) {
+        throw new Error(
+          `Package ${extensionsPackage.metadata.name} is missing 'spec.dynamicArtifact'`
+        );
+      }
+      const newConfig = req.body.configYaml;
+      if (!newConfig) {
+        throw new errors.InputError("'configYaml' object must be present");
+      }
+      try {
+        installationDataService.updatePackageConfig(
+          extensionsPackage.spec.dynamicArtifact,
+          newConfig
+        );
+      } catch (e) {
+        if (e instanceof ConfigFormatError.ConfigFormatError) {
+          throw new errors.InputError(e.message);
+        }
+        throw e;
+      }
+      res.status(200).json({ status: "OK" });
+    }
+  );
+  router.get("/environment", async (_req, res) => {
+    res.status(200).json({
+      nodeEnv: process.env.NODE_ENV || "development"
+    });
+  });
+  router.patch(
+    "/package/:namespace/:name/configuration/disable",
+    requireInitializedInstallationDataService,
+    async (req, res) => {
+      const extensionsPackage = await getAuthorizedPackage(
+        req,
+        backstagePluginExtensionsCommon.extensionsPluginWritePermission
+      );
+      if (!extensionsPackage.spec?.dynamicArtifact) {
+        throw new Error(
+          `Package catalog entity ${extensionsPackage.metadata.name} is missing 'spec.dynamicArtifact'`
+        );
+      }
+      const disabled = req.body.disabled;
+      if (typeof disabled !== "boolean") {
+        throw new errors.InputError("'disabled' must be present boolean");
+      }
+      installationDataService.setPackageDisabled(
+        extensionsPackage.spec.dynamicArtifact,
+        disabled
+      );
+      res.status(200).json({ status: "OK" });
+    }
+  );
+  router.get("/plugins", async (req, res) => {
+    const request = backstagePluginExtensionsCommon.decodeGetEntitiesRequest(createSearchParams.createSearchParams(req));
+    const plugins2 = await extensionsApi.getPlugins(request);
+    removeVerboseSpecContent.removeVerboseSpecContent(plugins2.items);
+    res.json(plugins2);
+  });
+  router.get("/plugins/facets", async (req, res) => {
+    const request = backstagePluginExtensionsCommon.decodeGetEntityFacetsRequest(createSearchParams.createSearchParams(req));
+    const facets = await extensionsApi.getPluginFacets(request);
+    res.json(facets);
+  });
+  router.get("/plugins/configure", async (_req, res) => {
+    const isPluginInstallationEnabled = config.getOptionalBoolean("extensions.installation.enabled") ?? false;
+    res.json({ enabled: isPluginInstallationEnabled });
+  });
+  router.get("/plugin/:namespace/:name", async (req, res) => {
+    const plugin = await extensionsApi.getPluginByName(
+      req.params.namespace,
+      req.params.name
+    );
+    res.json(plugin);
+  });
+  router.get(
+    "/plugin/:namespace/:name/configuration/authorize",
+    async (req, res) => {
+      const [readDecision, installDecision] = await Promise.all([
+        authorizeConditional(req, backstagePluginExtensionsCommon.extensionsPluginReadPermission),
+        authorizeConditional(req, backstagePluginExtensionsCommon.extensionsPluginWritePermission)
+      ]);
+      if (readDecision.result === pluginPermissionCommon.AuthorizeResult.DENY && installDecision.result === pluginPermissionCommon.AuthorizeResult.DENY) {
+        res.status(200).json({ read: "DENY", write: "DENY" });
+        return;
+      }
+      let authorizedActions = {};
+      let plugin;
+      const evaluateConditional = async (decision, action) => {
+        if (decision.result === pluginPermissionCommon.AuthorizeResult.CONDITIONAL) {
+          if (!plugin) {
+            plugin = await extensionsApi.getPluginByName(
+              req.params.namespace,
+              req.params.name
+            );
+          }
+          if (permissionUtils.matches(plugin, decision.conditions)) {
+            authorizedActions = { ...authorizedActions, [action]: "ALLOW" };
+          }
+        } else if (decision.result === pluginPermissionCommon.AuthorizeResult.ALLOW) {
+          authorizedActions = { ...authorizedActions, [action]: "ALLOW" };
+        }
+      };
+      await Promise.all([
+        evaluateConditional(readDecision, "read"),
+        evaluateConditional(installDecision, "write")
+      ]);
+      if (Object.keys(authorizedActions).length === 0) {
+        res.status(200).json({ read: "DENY", write: "DENY" });
+      } else {
+        res.status(200).json(authorizedActions);
+      }
+    }
+  );
+  router.get(
+    "/plugin/:namespace/:name/configuration",
+    requireInitializedInstallationDataService,
+    async (req, res) => {
+      const plugin = await getAuthorizedPlugin(
+        req,
+        backstagePluginExtensionsCommon.extensionsPluginReadPermission
+      );
+      const result = await installationDataService.getPluginConfig(plugin);
+      res.status(200).json({ configYaml: result });
+    }
+  );
+  router.post(
+    "/plugin/:namespace/:name/configuration",
+    requireInitializedInstallationDataService,
+    async (req, res) => {
+      const plugin = await getAuthorizedPlugin(
+        req,
+        backstagePluginExtensionsCommon.extensionsPluginWritePermission
+      );
+      const newConfig = req.body.configYaml;
+      if (!newConfig) {
+        throw new errors.InputError("'configYaml' object must be present");
+      }
+      try {
+        await installationDataService.updatePluginConfig(plugin, newConfig);
+      } catch (e) {
+        if (e instanceof ConfigFormatError.ConfigFormatError) {
+          throw new errors.InputError(e.message);
+        }
+        throw e;
+      }
+      res.status(200).json({ status: "OK" });
+    }
+  );
+  router.patch(
+    "/plugin/:namespace/:name/configuration/disable",
+    requireInitializedInstallationDataService,
+    async (req, res) => {
+      const plugin = await getAuthorizedPlugin(
+        req,
+        backstagePluginExtensionsCommon.extensionsPluginWritePermission
+      );
+      const disabled = req.body.disabled;
+      if (typeof disabled !== "boolean") {
+        throw new errors.InputError("'disabled' must be present boolean");
+      }
+      await installationDataService.setPluginDisabled(plugin, disabled);
+      res.status(200).json({ status: "OK" });
+    }
+  );
+  router.get("/plugin/:namespace/:name/packages", async (req, res) => {
+    const packages = await extensionsApi.getPluginPackages(
+      req.params.namespace,
+      req.params.name
+    );
+    res.json(packages);
+  });
+  const plugins = pluginProvider.plugins();
+  const dynamicPlugins = plugins.map((p) => {
+    if (p.platform === "node") {
+      const { installer, ...rest } = p;
+      return rest;
+    }
+    return p;
+  });
+  router.get("/loaded-plugins", async (req, response) => {
+    await httpAuth.credentials(req, { allow: ["user", "service"] });
+    response.send(dynamicPlugins);
+  });
+  const middleware = rootHttpRouter.MiddlewareFactory.create({ logger, config });
+  router.use(middleware.error());
+  return router;
+}
+
+exports.createRouter = createRouter;
+//# sourceMappingURL=router.cjs.js.map