@rudderhq/server 0.7.18 → 0.7.19-canary.0

package/dist/services/plugin-archive-native.js

@@ -0,0 +1,170 @@
+import { resolveNativeCommand } from "@rudderhq/agent-runtime-utils";
+import { execFile } from "node:child_process";
+import { existsSync, promises as fs } from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+import { promisify } from "node:util";
+const execFileAsync = promisify(execFile);
+const PROTOCOL_VERSION = 1;
+// HTTP accepts a 10 MiB compressed ZIP; PLUGIN.IMPORT.001 allows 100 MiB after expansion.
+const MAX_ARCHIVE_BYTES = 10 * 1024 * 1024;
+const MAX_PLUGIN_BYTES = 100 * 1024 * 1024;
+const MAX_FILE_BYTES = 2 * 1024 * 1024;
+const MAX_FILES = 500;
+const MAX_EXPANSION_RATIO = 100;
+const MAX_OUTPUT_BYTES = 170 * 1024 * 1024;
+const DEFAULT_TIMEOUT_MS = 30_000;
+const INPUT_ERROR_CODES = new Set([
+    "plugin_archive_size_limit",
+    "plugin_archive_invalid",
+    "plugin_archive_path_invalid",
+    "plugin_archive_path_unsafe",
+    "plugin_archive_file_count_limit",
+    "plugin_archive_file_size_limit",
+    "plugin_archive_expansion_limit",
+    "plugin_archive_total_size_limit",
+    "plugin_archive_duplicate_path",
+    "plugin_archive_size_mismatch",
+    "plugin_archive_read_failed",
+    "plugin_archive_empty",
+]);
+export class PluginArchiveNativeError extends Error {
+    code;
+    fallbackAllowed;
+    inputRejected;
+    constructor(code, fallbackAllowed, inputRejected) {
+        super(`Native Plugin archive inspection failed: ${code}`);
+        this.code = code;
+        this.fallbackAllowed = fallbackAllowed;
+        this.inputRejected = inputRejected;
+    }
+}
+function decodeBase64(value) {
+    const compact = value.replace(/\s/g, "");
+    if (!/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/.test(compact)) {
+        throw new PluginArchiveNativeError("plugin_archive_base64_invalid", false, true);
+    }
+    return Buffer.from(compact, "base64");
+}
+export function resolveNativePluginArchiveBinary() {
+    const configured = process.env.RUDDER_NATIVE_PLUGIN_ARCHIVE_PATH?.trim()
+        || process.env.RUDDER_NATIVE_ARCHIVE_PATH?.trim();
+    if (configured)
+        return path.resolve(configured);
+    const binaryName = process.platform === "win32" ? "rudder-native.exe" : "rudder-native";
+    const moduleDir = path.dirname(fileURLToPath(import.meta.url));
+    const target = process.platform === "darwin"
+        ? `${process.arch === "arm64" ? "aarch64" : "x86_64"}-apple-darwin`
+        : process.platform === "win32"
+            ? `${process.arch === "arm64" ? "aarch64" : "x86_64"}-pc-windows-msvc`
+            : `${process.arch === "arm64" ? "aarch64" : "x86_64"}-unknown-linux-gnu`;
+    const resourcesPath = process.env.RUDDER_DESKTOP_RESOURCES_PATH?.trim()
+        || (typeof process.resourcesPath === "string"
+            ? process.resourcesPath
+            : "");
+    const candidates = [
+        path.resolve(moduleDir, "../../../native/target/debug", binaryName),
+        path.resolve(moduleDir, "../../../../native/target/debug", binaryName),
+        path.resolve(moduleDir, "../../../native", target, binaryName),
+        resourcesPath ? path.resolve(resourcesPath, "native", target, binaryName) : "",
+    ].filter(Boolean);
+    return candidates.find((candidate) => existsSync(candidate)) ?? candidates[0];
+}
+function timeoutMs() {
+    const configured = Number(process.env.RUDDER_NATIVE_PLUGIN_ARCHIVE_TIMEOUT_MS ?? DEFAULT_TIMEOUT_MS);
+    return Number.isFinite(configured) ? Math.max(10, Math.min(DEFAULT_TIMEOUT_MS, Math.floor(configured))) : DEFAULT_TIMEOUT_MS;
+}
+function parseFiles(response) {
+    if (response.ok !== true
+        || response.operation !== "inspectPluginArchive"
+        || response.protocolVersion !== PROTOCOL_VERSION
+        || !Array.isArray(response.files)) {
+        throw new PluginArchiveNativeError("plugin_archive_envelope_mismatch", true, false);
+    }
+    return response.files.map((file) => {
+        if (!file || typeof file !== "object" || Array.isArray(file)) {
+            throw new PluginArchiveNativeError("plugin_archive_file_envelope_invalid", true, false);
+        }
+        const record = file;
+        if (typeof record.path !== "string" || typeof record.content !== "string" || record.encoding !== "base64") {
+            throw new PluginArchiveNativeError("plugin_archive_file_envelope_invalid", true, false);
+        }
+        return { path: record.path, content: record.content, encoding: "base64" };
+    });
+}
+export async function inspectPluginArchiveNative(input, signal) {
+    const archive = decodeBase64(input.content);
+    if (archive.byteLength > MAX_ARCHIVE_BYTES) {
+        throw new PluginArchiveNativeError("plugin_archive_size_limit", false, true);
+    }
+    const staging = await fs.mkdtemp(path.join(os.tmpdir(), "rudder-plugin-archive-"));
+    const archivePath = path.join(staging, "input.zip");
+    try {
+        await fs.writeFile(archivePath, archive);
+        const command = resolveNativeCommand(resolveNativePluginArchiveBinary(), [
+            "plugin",
+            "inspect-archive",
+            archivePath,
+            String(MAX_ARCHIVE_BYTES),
+            String(MAX_FILE_BYTES),
+            String(MAX_PLUGIN_BYTES),
+            String(MAX_FILES),
+            String(MAX_EXPANSION_RATIO),
+        ]);
+        let stdout;
+        let stderr;
+        try {
+            const result = await execFileAsync(command.command, command.args, {
+                encoding: "utf8",
+                timeout: timeoutMs(),
+                maxBuffer: MAX_OUTPUT_BYTES,
+                windowsHide: true,
+                signal,
+            });
+            stdout = result.stdout;
+            stderr = result.stderr;
+        }
+        catch (error) {
+            const details = error;
+            const output = typeof details.stdout === "string" ? details.stdout : "";
+            const lines = output.trim().split(/\r?\n/).filter(Boolean);
+            if (lines.length === 1) {
+                try {
+                    const parsed = JSON.parse(lines[0]);
+                    if (typeof parsed.errorCode === "string") {
+                        const inputRejected = INPUT_ERROR_CODES.has(parsed.errorCode);
+                        throw new PluginArchiveNativeError(parsed.errorCode, !inputRejected, inputRejected);
+                    }
+                }
+                catch (parsedError) {
+                    if (parsedError instanceof PluginArchiveNativeError)
+                        throw parsedError;
+                }
+            }
+            if (details.name === "AbortError")
+                throw new PluginArchiveNativeError("plugin_archive_cancelled", false, false);
+            if (details.killed || details.signal === "SIGTERM" || details.code === "ETIMEDOUT") {
+                throw new PluginArchiveNativeError("plugin_archive_timeout", true, false);
+            }
+            throw new PluginArchiveNativeError("plugin_archive_process_failed", true, false);
+        }
+        if (stderr.trim())
+            throw new PluginArchiveNativeError("plugin_archive_unexpected_stderr", true, false);
+        const lines = stdout.trim().split(/\r?\n/).filter(Boolean);
+        if (lines.length !== 1)
+            throw new PluginArchiveNativeError("plugin_archive_response_line_count", true, false);
+        let response;
+        try {
+            response = JSON.parse(lines[0]);
+        }
+        catch {
+            throw new PluginArchiveNativeError("plugin_archive_malformed_json", true, false);
+        }
+        return parseFiles(response);
+    }
+    finally {
+        await fs.rm(staging, { recursive: true, force: true });
+    }
+}
+//# sourceMappingURL=plugin-archive-native.js.map

package/dist/services/plugin-archive-native.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-archive-native.js","sourceRoot":"","sources":["../../src/services/plugin-archive-native.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAErE,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACrD,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAC1C,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAC3B,0FAA0F;AAC1F,MAAM,iBAAiB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAC3C,MAAM,gBAAgB,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC;AAC3C,MAAM,cAAc,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AACvC,MAAM,SAAS,GAAG,GAAG,CAAC;AACtB,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAChC,MAAM,gBAAgB,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC;AAC3C,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAElC,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC;IAChC,2BAA2B;IAC3B,wBAAwB;IACxB,6BAA6B;IAC7B,4BAA4B;IAC5B,iCAAiC;IACjC,gCAAgC;IAChC,gCAAgC;IAChC,iCAAiC;IACjC,+BAA+B;IAC/B,8BAA8B;IAC9B,4BAA4B;IAC5B,sBAAsB;CACvB,CAAC,CAAC;AAUH,MAAM,OAAO,wBAAyB,SAAQ,KAAK;IAEtC;IACA;IACA;IAHX,YACW,IAAY,EACZ,eAAwB,EACxB,aAAsB;QAE/B,KAAK,CAAC,4CAA4C,IAAI,EAAE,CAAC,CAAC;QAJjD,SAAI,GAAJ,IAAI,CAAQ;QACZ,oBAAe,GAAf,eAAe,CAAS;QACxB,kBAAa,GAAb,aAAa,CAAS;IAGjC,CAAC;CACF;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACzC,IAAI,CAAC,kEAAkE,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACtF,MAAM,IAAI,wBAAwB,CAAC,+BAA+B,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;IACnF,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;AACxC,CAAC;AAED,MAAM,UAAU,gCAAgC;IAC9C,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,iCAAiC,EAAE,IAAI,EAAE;WACnE,OAAO,CAAC,GAAG,CAAC,0BAA0B,EAAE,IAAI,EAAE,CAAC;IACpD,IAAI,UAAU;QAAE,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAChD,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,eAAe,CAAC;IACxF,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/D,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,KAAK,QAAQ;QAC1C,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,eAAe;QACnE,CAAC,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO;YAC5B,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,kBAAkB;YACtE,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,oBAAoB,CAAC;IAC7E,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,6BAA6B,EAAE,IAAI,EAAE;WAClE,CAAC,OAAQ,OAAwD,CAAC,aAAa,KAAK,QAAQ;YAC7F,CAAC,CAAE,OAAsD,CAAC,aAAa;YACvE,CAAC,CAAC,EAAE,CAAC,CAAC;IACV,MAAM,UAAU,GAAG;QACjB,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,8BAA8B,EAAE,UAAU,CAAC;QACnE,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,iCAAiC,EAAE,UAAU,CAAC;QACtE,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,iBAAiB,EAAE,MAAM,EAAE,UAAU,CAAC;QAC9D,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE;KAC/E,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAClB,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC,CAAE,CAAC;AACjF,CAAC;AAED,SAAS,SAAS;IAChB,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,uCAAuC,IAAI,kBAAkB,CAAC,CAAC;IACrG,OAAO,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,kBAAkB,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC;AAC/H,CAAC;AAED,SAAS,UAAU,CAAC,QAAwB;IAC1C,IAAI,QAAQ,CAAC,EAAE,KAAK,IAAI;WACnB,QAAQ,CAAC,SAAS,KAAK,sBAAsB;WAC7C,QAAQ,CAAC,eAAe,KAAK,gBAAgB;WAC7C,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,wBAAwB,CAAC,kCAAkC,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IACtF,CAAC;IACD,OAAO,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACjC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7D,MAAM,IAAI,wBAAwB,CAAC,sCAAsC,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QAC1F,CAAC;QACD,MAAM,MAAM,GAAG,IAA+B,CAAC;QAC/C,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC1G,MAAM,IAAI,wBAAwB,CAAC,sCAAsC,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QAC1F,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;IAC5E,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,KAAiC,EACjC,MAAoB;IAEpB,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC5C,IAAI,OAAO,CAAC,UAAU,GAAG,iBAAiB,EAAE,CAAC;QAC3C,MAAM,IAAI,wBAAwB,CAAC,2BAA2B,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;IAC/E,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,wBAAwB,CAAC,CAAC,CAAC;IACnF,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IACpD,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,SAAS,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QACzC,MAAM,OAAO,GAAG,oBAAoB,CAAC,gCAAgC,EAAE,EAAE;YACvE,QAAQ;YACR,iBAAiB;YACjB,WAAW;YACX,MAAM,CAAC,iBAAiB,CAAC;YACzB,MAAM,CAAC,cAAc,CAAC;YACtB,MAAM,CAAC,gBAAgB,CAAC;YACxB,MAAM,CAAC,SAAS,CAAC;YACjB,MAAM,CAAC,mBAAmB,CAAC;SAC5B,CAAC,CAAC;QACH,IAAI,MAAc,CAAC;QACnB,IAAI,MAAc,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE;gBAChE,QAAQ,EAAE,MAAM;gBAChB,OAAO,EAAE,SAAS,EAAE;gBACpB,SAAS,EAAE,gBAAgB;gBAC3B,WAAW,EAAE,IAAI;gBACjB,MAAM;aACP,CAAC,CAAC;YACH,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;YACvB,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QACzB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,KAAmH,CAAC;YACpI,MAAM,MAAM,GAAG,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;YACxE,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAC3D,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACvB,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAE,CAAmB,CAAC;oBACvD,IAAI,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;wBACzC,MAAM,aAAa,GAAG,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;wBAC9D,MAAM,IAAI,wBAAwB,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC;oBACtF,CAAC;gBACH,CAAC;gBAAC,OAAO,WAAW,EAAE,CAAC;oBACrB,IAAI,WAAW,YAAY,wBAAwB;wBAAE,MAAM,WAAW,CAAC;gBACzE,CAAC;YACH,CAAC;YACD,IAAI,OAAO,CAAC,IAAI,KAAK,YAAY;gBAAE,MAAM,IAAI,wBAAwB,CAAC,0BAA0B,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;YAChH,IAAI,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;gBACnF,MAAM,IAAI,wBAAwB,CAAC,wBAAwB,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;YAC5E,CAAC;YACD,MAAM,IAAI,wBAAwB,CAAC,+BAA+B,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QACnF,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,EAAE;YAAE,MAAM,IAAI,wBAAwB,CAAC,kCAAkC,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QACvG,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC3D,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,wBAAwB,CAAC,oCAAoC,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QAC9G,IAAI,QAAwB,CAAC;QAC7B,IAAI,CAAC;YACH,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAE,CAAmB,CAAC;QACrD,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,wBAAwB,CAAC,+BAA+B,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QACnF,CAAC;QACD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC;IAC9B,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACzD,CAAC;AACH,CAAC"}

package/dist/services/plugin-archive-node.d.ts

@@ -0,0 +1,3 @@
+import type { RudderPluginPackageFileInput } from "@rudderhq/shared";
+export declare function unzipPluginPackageNode(content: string, label: string, stripPluginRoot: boolean): RudderPluginPackageFileInput[];
+//# sourceMappingURL=plugin-archive-node.d.ts.map

package/dist/services/plugin-archive-node.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-archive-node.d.ts","sourceRoot":"","sources":["../../src/services/plugin-archive-node.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,kBAAkB,CAAC;AAmBrE,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,OAAO,GAAG,4BAA4B,EAAE,CAuE/H"}

package/dist/services/plugin-archive-node.js

@@ -0,0 +1,97 @@
+import { Unzip, UnzipInflate, UnzipPassThrough } from "fflate";
+import { unprocessable } from "../errors.js";
+// HTTP accepts a 10 MiB compressed ZIP; PLUGIN.IMPORT.001 allows 100 MiB after expansion.
+const MAX_ARCHIVE_BYTES = 10 * 1024 * 1024;
+const MAX_PLUGIN_BYTES = 100 * 1024 * 1024;
+const MAX_FILE_BYTES = 2 * 1024 * 1024;
+const MAX_PATH_CHARS = 1_024;
+const MAX_ARCHIVE_RATIO = 100;
+function decodeBase64(value, label) {
+    const compact = value.replace(/\s/g, "");
+    if (!/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/.test(compact)) {
+        throw unprocessable(`Invalid base64 content for ${label}`);
+    }
+    return Buffer.from(compact, "base64");
+}
+export function unzipPluginPackageNode(content, label, stripPluginRoot) {
+    const archive = decodeBase64(content, label);
+    if (archive.byteLength > MAX_ARCHIVE_BYTES)
+        throw unprocessable("Plugin archive exceeds the 10 MiB transport limit");
+    const files = [];
+    let totalBytes = 0;
+    let failure = null;
+    const unzip = new Unzip((file) => {
+        if (failure || file.name.endsWith("/"))
+            return;
+        if (Array.from(file.name).length > MAX_PATH_CHARS || /[\u0000-\u001f\u007f-\u009f]/u.test(file.name)) {
+            failure = new Error(`Plugin archive path is invalid: ${file.name}`);
+            file.terminate();
+            return;
+        }
+        if (files.length >= 500) {
+            failure = new Error("Plugin archive exceeds the 500-file V1 limit");
+            file.terminate();
+            return;
+        }
+        if (file.originalSize !== undefined && file.originalSize > MAX_FILE_BYTES) {
+            failure = new Error(`Plugin archive entry exceeds 2 MiB: ${file.name}`);
+            file.terminate();
+            return;
+        }
+        if (file.size && file.originalSize && file.originalSize / file.size > MAX_ARCHIVE_RATIO) {
+            failure = new Error(`Plugin archive entry exceeds the ${MAX_ARCHIVE_RATIO}:1 expansion limit: ${file.name}`);
+            file.terminate();
+            return;
+        }
+        const chunks = [];
+        let entryBytes = 0;
+        file.ondata = (error, data, final) => {
+            if (failure)
+                return;
+            if (error) {
+                failure = error;
+                return;
+            }
+            entryBytes += data.byteLength;
+            totalBytes += data.byteLength;
+            if (entryBytes > MAX_FILE_BYTES || totalBytes > MAX_PLUGIN_BYTES) {
+                failure = new Error(entryBytes > MAX_FILE_BYTES
+                    ? `Plugin archive entry exceeds 2 MiB: ${file.name}`
+                    : "Plugin archive exceeds the 100 MiB expansion limit");
+                file.terminate();
+                return;
+            }
+            chunks.push(Buffer.from(data));
+            if (final) {
+                files.push({ path: file.name, content: Buffer.concat(chunks).toString("base64"), encoding: "base64" });
+            }
+        };
+        file.start();
+    });
+    unzip.register(UnzipInflate);
+    unzip.register(UnzipPassThrough);
+    try {
+        unzip.push(archive, true);
+    }
+    catch (error) {
+        throw unprocessable(`Invalid ZIP Plugin archive: ${error instanceof Error ? error.message : String(error)}`);
+    }
+    const archiveFailure = failure;
+    if (archiveFailure)
+        throw unprocessable(archiveFailure.message);
+    if (files.length === 0)
+        throw unprocessable("Invalid ZIP Plugin archive: archive contains no files");
+    if (totalBytes > archive.byteLength * MAX_ARCHIVE_RATIO) {
+        throw unprocessable(`Plugin archive exceeds the ${MAX_ARCHIVE_RATIO}:1 expansion limit`);
+    }
+    if (!stripPluginRoot || files.some((file) => file.path === ".codex-plugin/plugin.json"))
+        return files;
+    const manifests = files.filter((file) => file.path.endsWith("/.codex-plugin/plugin.json"));
+    if (manifests.length !== 1)
+        return files;
+    const prefix = manifests[0].path.slice(0, -".codex-plugin/plugin.json".length);
+    if (!files.every((file) => file.path.startsWith(prefix)))
+        return files;
+    return files.map((file) => ({ ...file, path: file.path.slice(prefix.length) }));
+}
+//# sourceMappingURL=plugin-archive-node.js.map

package/dist/services/plugin-archive-node.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-archive-node.js","sourceRoot":"","sources":["../../src/services/plugin-archive-node.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,QAAQ,CAAC;AAC/D,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAE7C,0FAA0F;AAC1F,MAAM,iBAAiB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAC3C,MAAM,gBAAgB,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC;AAC3C,MAAM,cAAc,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AACvC,MAAM,cAAc,GAAG,KAAK,CAAC;AAC7B,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAE9B,SAAS,YAAY,CAAC,KAAa,EAAE,KAAa;IAChD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACzC,IAAI,CAAC,kEAAkE,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACtF,MAAM,aAAa,CAAC,8BAA8B,KAAK,EAAE,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;AACxC,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,OAAe,EAAE,KAAa,EAAE,eAAwB;IAC7F,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC7C,IAAI,OAAO,CAAC,UAAU,GAAG,iBAAiB;QAAE,MAAM,aAAa,CAAC,mDAAmD,CAAC,CAAC;IACrH,MAAM,KAAK,GAAmC,EAAE,CAAC;IACjD,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,IAAI,OAAO,GAAiB,IAAI,CAAC;IACjC,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE;QAC/B,IAAI,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,OAAO;QAC/C,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,cAAc,IAAI,+BAA+B,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACrG,OAAO,GAAG,IAAI,KAAK,CAAC,mCAAmC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;YACpE,IAAI,CAAC,SAAS,EAAE,CAAC;YACjB,OAAO;QACT,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;YACxB,OAAO,GAAG,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;YACpE,IAAI,CAAC,SAAS,EAAE,CAAC;YACjB,OAAO;QACT,CAAC;QACD,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS,IAAI,IAAI,CAAC,YAAY,GAAG,cAAc,EAAE,CAAC;YAC1E,OAAO,GAAG,IAAI,KAAK,CAAC,uCAAuC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;YACxE,IAAI,CAAC,SAAS,EAAE,CAAC;YACjB,OAAO;QACT,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,IAAI,GAAG,iBAAiB,EAAE,CAAC;YACxF,OAAO,GAAG,IAAI,KAAK,CAAC,oCAAoC,iBAAiB,uBAAuB,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;YAC7G,IAAI,CAAC,SAAS,EAAE,CAAC;YACjB,OAAO;QACT,CAAC;QACD,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,UAAU,GAAG,CAAC,CAAC;QACnB,IAAI,CAAC,MAAM,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE;YACnC,IAAI,OAAO;gBAAE,OAAO;YACpB,IAAI,KAAK,EAAE,CAAC;gBACV,OAAO,GAAG,KAAK,CAAC;gBAChB,OAAO;YACT,CAAC;YACD,UAAU,IAAI,IAAI,CAAC,UAAU,CAAC;YAC9B,UAAU,IAAI,IAAI,CAAC,UAAU,CAAC;YAC9B,IAAI,UAAU,GAAG,cAAc,IAAI,UAAU,GAAG,gBAAgB,EAAE,CAAC;gBACjE,OAAO,GAAG,IAAI,KAAK,CAAC,UAAU,GAAG,cAAc;oBAC7C,CAAC,CAAC,uCAAuC,IAAI,CAAC,IAAI,EAAE;oBACpD,CAAC,CAAC,oDAAoD,CAAC,CAAC;gBAC1D,IAAI,CAAC,SAAS,EAAE,CAAC;gBACjB,OAAO;YACT,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;YAC/B,IAAI,KAAK,EAAE,CAAC;gBACV,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;YACzG,CAAC;QACH,CAAC,CAAC;QACF,IAAI,CAAC,KAAK,EAAE,CAAC;IACf,CAAC,CAAC,CAAC;IACH,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;IAC7B,KAAK,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC;IACjC,IAAI,CAAC;QACH,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC5B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,aAAa,CAAC,+BAA+B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC/G,CAAC;IACD,MAAM,cAAc,GAAG,OAAuB,CAAC;IAC/C,IAAI,cAAc;QAAE,MAAM,aAAa,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;IAChE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,aAAa,CAAC,uDAAuD,CAAC,CAAC;IACrG,IAAI,UAAU,GAAG,OAAO,CAAC,UAAU,GAAG,iBAAiB,EAAE,CAAC;QACxD,MAAM,aAAa,CAAC,8BAA8B,iBAAiB,oBAAoB,CAAC,CAAC;IAC3F,CAAC;IACD,IAAI,CAAC,eAAe,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,2BAA2B,CAAC;QAAE,OAAO,KAAK,CAAC;IACtG,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,4BAA4B,CAAC,CAAC,CAAC;IAC3F,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACzC,MAAM,MAAM,GAAG,SAAS,CAAC,CAAC,CAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,2BAA2B,CAAC,MAAM,CAAC,CAAC;IAChF,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACvE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;AAClF,CAAC"}

package/dist/services/rudder-plugins.d.ts

@@ -88,7 +88,7 @@ export declare function rudderPluginService(db: Db, mcpOptions: ManagedMcpConnec
         locator?: string | null;
         metadata?: Record<string, unknown>;
     }) => Promise<RudderPluginImportReport>>[2]) => Promise<RudderPluginImportReport>;
-    inspectArchive: (orgId: string, input: InspectRudderPluginArchive) => Promise<RudderPluginImportReport>;
+    inspectArchive: (orgId: string, input: InspectRudderPluginArchive, signal?: AbortSignal) => Promise<RudderPluginImportReport>;
     install: (orgId: string, reportId: string, enabled?: boolean, confirmAccessExpansion?: boolean, skillConflictStrategy?: RudderPluginSkillConflictStrategy) => Promise<RudderInstalledPlugin>;
     listInstalled: (orgId: string) => Promise<RudderInstalledPlugin[]>;
     listMcpUiResources: (orgId: string, pluginId: string, componentId: string) => Promise<RudderMcpUiResource[]>;

package/dist/services/rudder-plugins.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"rudder-plugins.d.ts","sourceRoot":"","sources":["../../src/services/rudder-plugins.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,cAAc,CAAC;AAavC,OAAO,KAAK,EACV,gCAAgC,EAChC,mBAAmB,EACnB,0BAA0B,EAC1B,qBAAqB,EAErB,mBAAmB,EAGnB,qBAAqB,EAErB,wBAAwB,EAExB,iCAAiC,EAClC,MAAM,kBAAkB,CAAC;AAO1B,OAAO,KAAK,EAAE,kCAAkC,EAAE,MAAM,8BAA8B,CAAC;AAiBvF,KAAK,YAAY,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,QAAQ,CAAA;CAAE,CAAC;AAC1E,KAAK,YAAY,GAAG,IAAI,CAAC,wBAAwB,EAAE,IAAI,GAAG,OAAO,GAAG,WAAW,GAAG,YAAY,GAAG,aAAa,GAAG,QAAQ,GAAG,QAAQ,GAAG,WAAW,CAAC,CAAC;AAujBpJ,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,mBAAmB;;eAxc5D,YAAY,EAAE;eACd,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC;oBACd,MAAM;gBACV,MAAM;;;cAodU;;;;;;;;;QAAkB;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE;;EAG5E;AAED,wBAAgB,iCAAiC,CAAC,KAAK,EAAE,0BAA0B;;eA5d1E,YAAY,EAAE;eACd,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC;oBACd,MAAM;gBACV,MAAM;;;cAodU;;;;;;;;;QAAkB;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE;;EAY5E;AAED,wBAAgB,mBAAmB,CAAC,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,kCAAkC;wCA08BvC,MAAM,YAAY,MAAM;kCA9yB9B,MAAM,SAAS,gCAAgC;0BAu8BvD,MAAM,YAAY,MAAM,eAAe,MAAM,SAAS;QAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE;6BArDtG,MAAM,YAAY,MAAM,YAAY,MAAM,EAAE;4BAsB7C,MAAM,YAAY,MAAM,eAAe,MAAM;;;;;;;;;;;;;;;;;;uBArIlD,MAAM,KAAG,OAAO,CAAC,qBAAqB,CAAC;6BA9pBjC,MAAM,YAAY,MAAM;0BAie3B,MAAM,YAAY,MAAM;qBAxnB7B,MAAM,SAAS,mBAAmB,WAAW,UAAU,SApI5E,MAAM,SACN,mBAAmB,UAClB;QACN,IAAI,EAAE,wBAAwB,CAAC,YAAY,CAAC,CAAC;QAC7C,KAAK,EAAE,MAAM,CAAC;QACd,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACxB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KACpC,KACA,OAAO,CAAC,wBAAwB,CAAC,CA4H2E,CAAC,CAAC,CAAC,KAAG,OAAO,CAAC,wBAAwB,CAAC;4BAIjH,MAAM,SAAS,0BAA0B;qBAiWrE,MAAM,YACH,MAAM,+EAGQ,iCAAiC,KACxD,OAAO,CAAC,qBAAqB,CAAC;2BAwMG,MAAM,KAAG,OAAO,CAAC,qBAAqB,EAAE,CAAC;gCA+cpE,MAAM,YACH,MAAM,eACH,MAAM,KAClB,OAAO,CAAC,mBAAmB,EAAE,CAAC;+BAuBxB,MAAM,YACH,MAAM,eACH,MAAM,OACd,MAAM;;;;;;;sBAoDkB,MAAM,YAAY,MAAM;wBA3OtB,MAAM,YAAY,MAAM,WAAW,OAAO;;2BA3O/B,MAAM;uBAqclB,MAAM,YAAY,MAAM;;;;EAkDzD"}
+{"version":3,"file":"rudder-plugins.d.ts","sourceRoot":"","sources":["../../src/services/rudder-plugins.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,cAAc,CAAC;AAavC,OAAO,KAAK,EACV,gCAAgC,EAChC,mBAAmB,EACnB,0BAA0B,EAC1B,qBAAqB,EAErB,mBAAmB,EAGnB,qBAAqB,EAErB,wBAAwB,EAExB,iCAAiC,EAClC,MAAM,kBAAkB,CAAC;AAO1B,OAAO,KAAK,EAAE,kCAAkC,EAAE,MAAM,8BAA8B,CAAC;AAqBvF,KAAK,YAAY,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,QAAQ,CAAA;CAAE,CAAC;AAC1E,KAAK,YAAY,GAAG,IAAI,CAAC,wBAAwB,EAAE,IAAI,GAAG,OAAO,GAAG,WAAW,GAAG,YAAY,GAAG,aAAa,GAAG,QAAQ,GAAG,QAAQ,GAAG,WAAW,CAAC,CAAC;AA2epJ,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,mBAAmB;;eAxc5D,YAAY,EAAE;eACd,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC;oBACd,MAAM;gBACV,MAAM;;;cAodU;;;;;;;;;QAAkB;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE;;EAG5E;AAED,wBAAgB,iCAAiC,CAAC,KAAK,EAAE,0BAA0B;;eA5d1E,YAAY,EAAE;eACd,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC;oBACd,MAAM;gBACV,MAAM;;;cAodU;;;;;;;;;QAAkB;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE;;EAY5E;AAuBD,wBAAgB,mBAAmB,CAAC,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,kCAAkC;wCA89BvC,MAAM,YAAY,MAAM;kCA9yB9B,MAAM,SAAS,gCAAgC;0BAu8BvD,MAAM,YAAY,MAAM,eAAe,MAAM,SAAS;QAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE;6BArDtG,MAAM,YAAY,MAAM,YAAY,MAAM,EAAE;4BAsB7C,MAAM,YAAY,MAAM,eAAe,MAAM;;;;;;;;;;;;;;;;;;uBArIlD,MAAM,KAAG,OAAO,CAAC,qBAAqB,CAAC;6BA9pBjC,MAAM,YAAY,MAAM;0BAie3B,MAAM,YAAY,MAAM;qBA5oB7B,MAAM,SAAS,mBAAmB,WAAW,UAAU,SApI5E,MAAM,SACN,mBAAmB,UAClB;QACN,IAAI,EAAE,wBAAwB,CAAC,YAAY,CAAC,CAAC;QAC7C,KAAK,EAAE,MAAM,CAAC;QACd,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACxB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KACpC,KACA,OAAO,CAAC,wBAAwB,CAAC,CA4H2E,CAAC,CAAC,CAAC,KAAG,OAAO,CAAC,wBAAwB,CAAC;4BAIjH,MAAM,SAAS,0BAA0B,WAAW,WAAW;qBAqX3F,MAAM,YACH,MAAM,+EAGQ,iCAAiC,KACxD,OAAO,CAAC,qBAAqB,CAAC;2BAwMG,MAAM,KAAG,OAAO,CAAC,qBAAqB,EAAE,CAAC;gCA+cpE,MAAM,YACH,MAAM,eACH,MAAM,KAClB,OAAO,CAAC,mBAAmB,EAAE,CAAC;+BAuBxB,MAAM,YACH,MAAM,eACH,MAAM,OACd,MAAM;;;;;;;sBAoDkB,MAAM,YAAY,MAAM;wBA3OtB,MAAM,YAAY,MAAM,WAAW,OAAO;;2BA3O/B,MAAM;uBAqclB,MAAM,YAAY,MAAM;;;;EAkDzD"}

package/dist/services/rudder-plugins.js

@@ -1,16 +1,17 @@
 import { agentEnabledSkills, agents, appBuilderApps, installedPlugins, mcpConnections as mcpConnectionRows, organizationSkills, pluginComponentLinks, pluginImportReports, pluginPackages, pluginSources, } from "@rudderhq/db";
+import { resolveRudderNativeCapability } from "@rudderhq/shared";
 import { and, asc, eq, inArray, ne } from "drizzle-orm";
-import { Unzip, UnzipInflate, UnzipPassThrough } from "fflate";
 import { createHash } from "node:crypto";
 import path from "node:path";
 import { conflict, notFound, unprocessable } from "../errors.js";
 import { agentEnabledSkillsService } from "./agent-enabled-skills.js";
 import { managedMcpConnectionService } from "./mcp/managed-connections.js";
 import { organizationSkillService } from "./organization-skills.js";
+import { inspectPluginArchiveNative, PluginArchiveNativeError, } from "./plugin-archive-native.js";
+import { unzipPluginPackageNode } from "./plugin-archive-node.js";
 import { enabledAgentIdsFromMetadata, inheritedPluginSkillAgentIds, organizationSkillSelectionKey, organizationSkillSelectionKeys, selectedAgentIdsForSkill, } from "./rudder-plugin-agent-bindings.js";
-const MAX_PLUGIN_BYTES = 10 * 1024 * 1024;
+const MAX_PLUGIN_BYTES = 100 * 1024 * 1024;
 const MAX_FILE_BYTES = 2 * 1024 * 1024;
-const MAX_ARCHIVE_RATIO = 100;
 const MAX_MCP_UI_HTML_BYTES = 2 * 1024 * 1024;
 const SENSITIVE_KEY = /(?:authorization|api[_-]?key|password|secret|token|cookie)/i;
 function asRecord(value) {
@@ -37,89 +38,6 @@ function decodeInputFile(file) {
     }
     return Buffer.from(compact, "base64");
 }
-function decodeBase64(value, label) {
-    const compact = value.replace(/\s/g, "");
-    if (!/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/.test(compact)) {
-        throw unprocessable(`Invalid base64 content for ${label}`);
-    }
-    return Buffer.from(compact, "base64");
-}
-function unzipPackageFiles(content, label, stripPluginRoot) {
-    const archive = decodeBase64(content, label);
-    if (archive.byteLength > MAX_PLUGIN_BYTES)
-        throw unprocessable("Plugin archive exceeds the 10 MiB V1 limit");
-    const files = [];
-    let totalBytes = 0;
-    let failure = null;
-    const unzip = new Unzip((file) => {
-        if (failure || file.name.endsWith("/"))
-            return;
-        if (files.length >= 500) {
-            failure = new Error("Plugin archive exceeds the 500-file V1 limit");
-            file.terminate();
-            return;
-        }
-        if (file.originalSize !== undefined && file.originalSize > MAX_FILE_BYTES) {
-            failure = new Error(`Plugin archive entry exceeds 2 MiB: ${file.name}`);
-            file.terminate();
-            return;
-        }
-        if (file.size && file.originalSize && file.originalSize / file.size > MAX_ARCHIVE_RATIO) {
-            failure = new Error(`Plugin archive entry exceeds the ${MAX_ARCHIVE_RATIO}:1 expansion limit: ${file.name}`);
-            file.terminate();
-            return;
-        }
-        const chunks = [];
-        let entryBytes = 0;
-        file.ondata = (error, data, final) => {
-            if (failure)
-                return;
-            if (error) {
-                failure = error;
-                return;
-            }
-            entryBytes += data.byteLength;
-            totalBytes += data.byteLength;
-            if (entryBytes > MAX_FILE_BYTES || totalBytes > MAX_PLUGIN_BYTES) {
-                failure = new Error(entryBytes > MAX_FILE_BYTES
-                    ? `Plugin archive entry exceeds 2 MiB: ${file.name}`
-                    : "Plugin archive exceeds the 10 MiB V1 expansion limit");
-                file.terminate();
-                return;
-            }
-            chunks.push(Buffer.from(data));
-            if (final) {
-                files.push({ path: file.name, content: Buffer.concat(chunks).toString("base64"), encoding: "base64" });
-            }
-        };
-        file.start();
-    });
-    unzip.register(UnzipInflate);
-    unzip.register(UnzipPassThrough);
-    try {
-        unzip.push(archive, true);
-    }
-    catch (error) {
-        throw unprocessable(`Invalid ZIP Plugin archive: ${error instanceof Error ? error.message : String(error)}`);
-    }
-    const archiveFailure = failure;
-    if (archiveFailure)
-        throw unprocessable(archiveFailure.message);
-    if (files.length === 0)
-        throw unprocessable("Invalid ZIP Plugin archive: archive contains no files");
-    if (totalBytes > archive.byteLength * MAX_ARCHIVE_RATIO) {
-        throw unprocessable(`Plugin archive exceeds the ${MAX_ARCHIVE_RATIO}:1 expansion limit`);
-    }
-    if (!stripPluginRoot || files.some((file) => file.path === ".codex-plugin/plugin.json"))
-        return files;
-    const manifests = files.filter((file) => file.path.endsWith("/.codex-plugin/plugin.json"));
-    if (manifests.length !== 1)
-        return files;
-    const prefix = manifests[0].path.slice(0, -".codex-plugin/plugin.json".length);
-    if (!files.every((file) => file.path.startsWith(prefix)))
-        return files;
-    return files.map((file) => ({ ...file, path: file.path.slice(prefix.length) }));
-}
 function normalizeFiles(input) {
     if (input.files.length > 500)
         throw unprocessable("Plugin package exceeds the 500-file V1 limit");
@@ -150,7 +68,7 @@ function normalizeFiles(input) {
             throw unprocessable(`Plugin file exceeds 2 MiB: ${normalized}`);
         totalBytes += content.byteLength;
         if (totalBytes > MAX_PLUGIN_BYTES)
-            throw unprocessable("Plugin package exceeds the 10 MiB V1 limit");
+            throw unprocessable("Plugin package exceeds the 100 MiB limit");
         bytes.set(normalized, content);
     }
     const hash = createHash("sha256");
@@ -578,10 +496,30 @@ export function inspectRudderPluginArchivePackage(input) {
     return inspectRudderPluginPackage({
         sourceType: "local_upload",
         sourceLabel: input.sourceLabel,
-        files: unzipPackageFiles(input.content, input.filename, true)
+        files: unzipPluginPackageNode(input.content, input.filename, true)
             .map((file) => ({ ...file, encoding: file.encoding ?? "utf8" })),
     });
 }
+function pluginArchiveInputError(error) {
+    switch (error.code) {
+        case "plugin_archive_size_limit":
+            return unprocessable("Plugin archive exceeds the 10 MiB transport limit");
+        case "plugin_archive_file_count_limit":
+            return unprocessable("Plugin archive exceeds the 500-file V1 limit");
+        case "plugin_archive_file_size_limit":
+            return unprocessable("Plugin archive entry exceeds 2 MiB");
+        case "plugin_archive_expansion_limit":
+            return unprocessable("Plugin archive exceeds the 100:1 expansion limit");
+        case "plugin_archive_total_size_limit":
+            return unprocessable("Plugin archive exceeds the 100 MiB expansion limit");
+        case "plugin_archive_path_unsafe":
+            return unprocessable("Unsafe Plugin file path in archive");
+        case "plugin_archive_duplicate_path":
+            return unprocessable("Plugin package contains duplicate or case-colliding path");
+        default:
+            return unprocessable(`Invalid ZIP Plugin archive: ${error.code}`);
+    }
+}
 export function rudderPluginService(db, mcpOptions) {
     const skills = organizationSkillService(db);
     const enabledSkills = agentEnabledSkillsService(db);
@@ -693,8 +631,31 @@ export function rudderPluginService(db, mcpOptions) {
     async function inspect(orgId, input, source) {
         return inspectFromSource(orgId, input, source ?? { type: "local_upload", label: input.sourceLabel });
     }
-    async function inspectArchive(orgId, input) {
-        const files = unzipPackageFiles(input.content, input.filename, true);
+    async function inspectArchive(orgId, input, signal) {
+        signal?.throwIfAborted();
+        const policy = resolveRudderNativeCapability({
+            capability: "plugin-archive",
+            env: process.env,
+            legacyToggleEnvs: ["RUDDER_NATIVE_PLUGIN_ARCHIVE"],
+        });
+        let files;
+        if (policy.enabled) {
+            try {
+                files = await inspectPluginArchiveNative(input, signal);
+            }
+            catch (error) {
+                if (error instanceof PluginArchiveNativeError && error.inputRejected) {
+                    throw pluginArchiveInputError(error);
+                }
+                if (!policy.fallbackAllowed || signal?.aborted)
+                    throw error;
+                files = unzipPluginPackageNode(input.content, input.filename, true);
+            }
+        }
+        else {
+            files = unzipPluginPackageNode(input.content, input.filename, true);
+        }
+        signal?.throwIfAborted();
         return inspectFromSource(orgId, {
             sourceType: "local_upload",
             sourceLabel: input.sourceLabel,
@@ -729,12 +690,12 @@ export function rudderPluginService(db, mcpOptions) {
                 throw unprocessable(`Pinned Git marketplace fetch failed with HTTP ${response.status}`);
             const contentLength = Number(response.headers.get("content-length") ?? "0");
             if (Number.isFinite(contentLength) && contentLength > MAX_PLUGIN_BYTES) {
-                throw unprocessable("Pinned Git marketplace archive exceeds the 10 MiB V1 limit");
+                throw unprocessable("Pinned Git marketplace archive exceeds the 100 MiB limit");
             }
             const archive = Buffer.from(await response.arrayBuffer());
             if (archive.byteLength > MAX_PLUGIN_BYTES)
-                throw unprocessable("Pinned Git marketplace archive exceeds the 10 MiB V1 limit");
-            sourceFiles = unzipPackageFiles(archive.toString("base64"), `${repo}@${input.github.commit}.zip`, true);
+                throw unprocessable("Pinned Git marketplace archive exceeds the 100 MiB limit");
+            sourceFiles = unzipPluginPackageNode(archive.toString("base64"), `${repo}@${input.github.commit}.zip`, true);
             sourceType = "git";
             locator = `${repository.toString().replace(/\/$/, "")}#${input.github.commit}`;
             provenance = { repository: repository.toString(), commit: input.github.commit, immutable: true };