@termix-ssh/plugin-sdk 1.0.11 → 1.0.13

package/dist/host/{use-permissions-GYCBY2AU.js → use-permissions-ISEDRY3J.js}

@@ -7,8 +7,8 @@ import {
   resetPermissionsCache,
   setPermissionsForTesting,
   usePermissions
-} from "./chunk-LSWB3ZZV.js";
-import "./chunk-YC2MAKSP.js";
+} from "./chunk-T2PZWXFJ.js";
+import "./chunk-YGYBM7SQ.js";
 export {
   hasPermission,
   loadPermissionChecker,

package/dist/manifest.d.ts

@@ -10,6 +10,7 @@
  * made a manifest look like it declared something it did not.
  */
 import { type PluginEnvVar } from "./docs.js";
+export { validateThemeCss } from "./theme-css.js";
 export { ENV_NAME_PATTERN, MAX_ENV_DESCRIPTION_LENGTH, pluginDocsPage, pluginDocsUrl, pluginEnvVars, type PluginEnvVar, } from "./docs.js";
 /**
  * The plugin API this build implements. A minor bump adds to the API and
@@ -19,7 +20,7 @@ export { ENV_NAME_PATTERN, MAX_ENV_DESCRIPTION_LENGTH, pluginDocsPage, pluginDoc
  * "^1.2" needs 1.2 or later). engine.termix is checked against the core
  * version by the server.
  */
-export declare const PLUGIN_API_VERSION = "1.3.0";
+export declare const PLUGIN_API_VERSION = "1.5.0";
 /** The API major, the default engine.api for a new plugin. */
 export declare const SUPPORTED_PLUGIN_API_VERSION: string;
 /** Whether this build's plugin API satisfies a manifest's engine.api. */
@@ -265,6 +266,41 @@ export interface PluginAuthContribution {
     /** Keyboard-interactive handler ids, e.g. "warpgate". */
     keyboardInteractive?: string[];
 }
+/** A layout id or theme id: short, lowercase, used as a CSS class for themes. */
+export declare const LOOK_ID_PATTERN: RegExp;
+/**
+ * A whole-app layout the frontend registers with app.registerLayout. Needs
+ * the ui:layout capability. Declared here so core can list and choose it
+ * before any plugin code runs.
+ */
+export interface PluginLayoutContribution {
+    id: string;
+    /** i18n key in the plugin's namespace, or plain text. */
+    label: string;
+    description?: string;
+    /** Theme picked with this layout when nobody chose one. */
+    defaultTheme?: string;
+    /** The layout a default-look plugin starts with. */
+    default?: boolean;
+}
+/**
+ * A theme: one CSS file of token rules scoped under `.<id>`, applied as a
+ * class on <html>. Needs the ui:theme capability. No code runs for a theme.
+ */
+export interface PluginThemeContribution {
+    id: string;
+    /** i18n key in the plugin's namespace, or plain text. */
+    label: string;
+    mode: "light" | "dark";
+    /** Path of the CSS file inside the plugin. */
+    css: string;
+    /** Colors the theme picker previews it with. */
+    swatch?: {
+        background: string;
+        panel: string;
+        text: string;
+    };
+}
 export interface PluginContributions {
     tabs?: PluginTabContribution[];
     panels?: PluginViewContribution[];
@@ -323,6 +359,10 @@ export interface PluginContributions {
      * ctx.credentials.resolveHostProtocol.
      */
     protocols?: PluginProtocolContribution[];
+    /** Whole-app layouts. Needs the ui:layout capability. */
+    layouts?: PluginLayoutContribution[];
+    /** Themes. Needs the ui:theme capability. */
+    themes?: PluginThemeContribution[];
 }
 /** A field a protocol login carries besides username and password. */
 export interface PluginProtocolCredentialField {
@@ -460,7 +500,16 @@ export interface PluginManifest {
     nativeDependencies?: string[];
     /** How a linked desktop treats this plugin. Defaults to "mirror". */
     desktop?: PluginDesktopMode;
+    /**
+     * "desktop": the plugin only loads on a desktop app's own embedded backend,
+     * never on a server. It implies desktop "local" and may declare desktop:local.
+     */
+    runtime?: PluginRuntime;
 }
+export type PluginRuntime = "desktop";
+export declare const PLUGIN_RUNTIMES: readonly PluginRuntime[];
+/** The desktop mode a manifest resolves to. */
+export declare function resolvePluginDesktopMode(m: Pick<PluginManifest, "desktop" | "runtime">): PluginDesktopMode;
 export declare const DEFAULT_BACKEND_ENTRY = "dist/backend.js";
 export declare const DEFAULT_FRONTEND_ENTRY = "dist/frontend.js";
 export declare const DEFAULT_LOCALES_DIR = "locales";

package/dist/manifest.js

@@ -12,6 +12,7 @@
 import semver from "semver";
 import { isKnownCapability } from "./capabilities.js";
 import { ENV_NAME_PATTERN, MAX_ENV_DESCRIPTION_LENGTH, pluginDocsUrl, } from "./docs.js";
+export { validateThemeCss } from "./theme-css.js";
 export { ENV_NAME_PATTERN, MAX_ENV_DESCRIPTION_LENGTH, pluginDocsPage, pluginDocsUrl, pluginEnvVars, } from "./docs.js";
 /**
  * The plugin API this build implements. A minor bump adds to the API and
@@ -21,7 +22,7 @@ export { ENV_NAME_PATTERN, MAX_ENV_DESCRIPTION_LENGTH, pluginDocsPage, pluginDoc
  * "^1.2" needs 1.2 or later). engine.termix is checked against the core
  * version by the server.
  */
-export const PLUGIN_API_VERSION = "1.3.0";
+export const PLUGIN_API_VERSION = "1.5.0";
 /** The API major, the default engine.api for a new plugin. */
 export const SUPPORTED_PLUGIN_API_VERSION = String(semver.major(PLUGIN_API_VERSION));
 /** Whether this build's plugin API satisfies a manifest's engine.api. */
@@ -168,6 +169,8 @@ export const SETTINGS_FIELD_TYPES = [
     "custom",
 ];
 export const SETTINGS_SCOPES = ["admin", "user", "host"];
+/** A layout id or theme id: short, lowercase, used as a CSS class for themes. */
+export const LOOK_ID_PATTERN = /^[a-z][a-z0-9-]{1,39}$/;
 /** Protocol ids core keeps for itself. */
 export const RESERVED_PROTOCOL_IDS = ["ssh"];
 /** Login keys a declared credential field may not reuse. */
@@ -189,6 +192,11 @@ export const PLUGIN_DESKTOP_MODES = [
     "local",
     "server",
 ];
+export const PLUGIN_RUNTIMES = ["desktop"];
+/** The desktop mode a manifest resolves to. */
+export function resolvePluginDesktopMode(m) {
+    return m.desktop ?? (m.runtime === "desktop" ? "local" : "mirror");
+}
 export const DEFAULT_BACKEND_ENTRY = "dist/backend.js";
 export const DEFAULT_FRONTEND_ENTRY = "dist/frontend.js";
 export const DEFAULT_LOCALES_DIR = "locales";
@@ -224,6 +232,7 @@ const ALLOWED_TOP_LEVEL = new Set([
     "platforms",
     "nativeDependencies",
     "desktop",
+    "runtime",
 ]);
 const ALLOWED_CONTRIBUTES = new Set([
     "tabs",
@@ -243,6 +252,8 @@ const ALLOWED_CONTRIBUTES = new Set([
     "uses",
     "keybindingActions",
     "protocols",
+    "layouts",
+    "themes",
 ]);
 const ALLOWED_SETTINGS_FIELD = [
     "key",
@@ -360,6 +371,15 @@ export function validateManifest(manifest) {
         !PLUGIN_DESKTOP_MODES.includes(m.desktop)) {
         errors.push(`Field "desktop" must be one of: ${PLUGIN_DESKTOP_MODES.join(", ")}`);
     }
+    if (m.runtime !== undefined &&
+        !PLUGIN_RUNTIMES.includes(m.runtime)) {
+        errors.push(`Field "runtime" must be one of: ${PLUGIN_RUNTIMES.join(", ")}`);
+    }
+    if (m.runtime === "desktop" &&
+        m.desktop !== undefined &&
+        m.desktop !== "local") {
+        errors.push(`A "desktop" runtime plugin must use desktop "local"`);
+    }
     validateDependencyMap(m.dependencies, "dependencies", errors);
     validateDependencyMap(m.optionalDependencies, "optionalDependencies", errors);
     validateProvides(m.provides, errors);
@@ -734,6 +754,81 @@ function validateContributes(contributes, pluginId, errors) {
     validateUiPresets(contributes.uiPresets, errors);
     validateKeybindingActions(contributes.keybindingActions, errors);
     validateProtocols(contributes.protocols, errors);
+    validateLayouts(contributes.layouts, errors);
+    validateThemes(contributes.themes, errors);
+}
+/** An array of objects with unique look ids; calls `each` for every valid entry. */
+function validateLookList(value, field, allowed, errors, each) {
+    if (value === undefined)
+        return;
+    if (!Array.isArray(value)) {
+        errors.push(`Field "contributes.${field}" must be an array`);
+        return;
+    }
+    const seen = new Set();
+    value.forEach((raw, index) => {
+        const where = `contributes.${field}[${index}]`;
+        if (!isPlainObject(raw)) {
+            errors.push(`${where} must be an object`);
+            return;
+        }
+        rejectUnknown(raw, allowed, where, errors);
+        if (typeof raw.id !== "string" || !LOOK_ID_PATTERN.test(raw.id)) {
+            errors.push(`${where}.id must match ${LOOK_ID_PATTERN} (lowercase letters, digits, dashes)`);
+        }
+        else {
+            if (seen.has(raw.id))
+                errors.push(`${where}.id duplicates "${raw.id}"`);
+            seen.add(raw.id);
+        }
+        requireString(raw.label, `${where}.label`, errors);
+        each(raw, where);
+    });
+}
+function validateLayouts(value, errors) {
+    validateLookList(value, "layouts", ["id", "label", "description", "defaultTheme", "default"], errors, (raw, where) => {
+        if (raw.description !== undefined)
+            requireString(raw.description, `${where}.description`, errors);
+        if (raw.defaultTheme !== undefined &&
+            (typeof raw.defaultTheme !== "string" ||
+                !LOOK_ID_PATTERN.test(raw.defaultTheme))) {
+            errors.push(`${where}.defaultTheme must be a theme id`);
+        }
+        if (raw.default !== undefined && typeof raw.default !== "boolean") {
+            errors.push(`${where}.default must be a boolean`);
+        }
+    });
+    if (Array.isArray(value) &&
+        value.filter((raw) => isPlainObject(raw) && raw.default === true).length > 1) {
+        errors.push('Only one entry in "contributes.layouts" may set default');
+    }
+}
+const HEX_COLOR = /^#[0-9a-fA-F]{3,8}$/;
+function validateThemes(value, errors) {
+    validateLookList(value, "themes", ["id", "label", "mode", "css", "swatch"], errors, (raw, where) => {
+        if (raw.mode !== "light" && raw.mode !== "dark") {
+            errors.push(`${where}.mode must be "light" or "dark"`);
+        }
+        if (requireString(raw.css, `${where}.css`, errors)) {
+            requireRelativePath(raw.css, `${where}.css`, errors);
+            if (!raw.css.endsWith(".css")) {
+                errors.push(`${where}.css must be a .css file`);
+            }
+        }
+        if (raw.swatch !== undefined) {
+            if (!isPlainObject(raw.swatch)) {
+                errors.push(`${where}.swatch must be an object`);
+                return;
+            }
+            rejectUnknown(raw.swatch, ["background", "panel", "text"], `${where}.swatch`, errors);
+            for (const key of ["background", "panel", "text"]) {
+                const color = raw.swatch[key];
+                if (typeof color !== "string" || !HEX_COLOR.test(color)) {
+                    errors.push(`${where}.swatch.${key} must be a hex color`);
+                }
+            }
+        }
+    });
 }
 export const PROTOCOL_ID_PATTERN = /^[a-z][a-z0-9-]{0,31}$/;
 export const PROTOCOL_FIELD_KEY_PATTERN = /^[a-zA-Z][a-zA-Z0-9]{0,31}$/;
@@ -1595,6 +1690,14 @@ export function parseManifest(raw) {
     if (contributesAuth && !manifest.capabilities.includes("auth:provide")) {
         errors.push('contributes.auth needs the "auth:provide" capability in the capabilities array');
     }
+    if ((manifest.contributes?.layouts?.length ?? 0) > 0 &&
+        !manifest.capabilities.includes("ui:layout")) {
+        errors.push('contributes.layouts needs the "ui:layout" capability in the capabilities array');
+    }
+    if ((manifest.contributes?.themes?.length ?? 0) > 0 &&
+        !manifest.capabilities.includes("ui:theme")) {
+        errors.push('contributes.themes needs the "ui:theme" capability in the capabilities array');
+    }
     for (const secret of manifest.requiresSecret ?? []) {
         if (secret.plugin === manifest.id) {
             errors.push(`requiresSecret["${secret.key}"] points at this plugin; use ctx.secrets.get instead`);

package/dist/ssh-keys.d.ts

@@ -0,0 +1,29 @@
+/**
+ * SSH key helpers for plugins that make, check or deploy keys: generate a key
+ * pair, tell what a key is, derive a public key and check a pair belongs
+ * together. Pure functions over ssh2, which the host supplies. Core keeps its
+ * own copy for the connect pipeline.
+ */
+export type SshKeyKind = "ssh-ed25519" | "ssh-rsa" | "ecdsa-sha2-nistp256";
+export interface GeneratedSshKeyPair {
+    privateKey: string;
+    publicKey: string;
+    keyType: SshKeyKind;
+}
+export interface GenerateSshKeyPairOptions {
+    /** RSA only. 2048 to 8192, default 4096. */
+    bits?: number;
+    passphrase?: string;
+    comment?: string;
+}
+/** Makes a new key pair; the public half is one authorized_keys line. */
+export declare function generateSshKeyPair(type: SshKeyKind, options?: GenerateSshKeyPairOptions): GeneratedSshKeyPair;
+/** The key's algorithm, like "ssh-ed25519", or null when it cannot be read. */
+export declare function detectSshKeyType(key: string, passphrase?: string): string | null;
+/** The authorized_keys line for a private key, or null. */
+export declare function publicKeyFromPrivate(privateKey: string, passphrase?: string): string | null;
+/** Whether a public key line belongs to the private key. */
+export declare function validateSshKeyPair(privateKey: string, publicKey: string, passphrase?: string): {
+    isValid: boolean;
+    error?: string;
+};

package/dist/ssh-keys.js

@@ -0,0 +1,85 @@
+/**
+ * SSH key helpers for plugins that make, check or deploy keys: generate a key
+ * pair, tell what a key is, derive a public key and check a pair belongs
+ * together. Pure functions over ssh2, which the host supplies. Core keeps its
+ * own copy for the connect pipeline.
+ */
+import ssh2 from "ssh2";
+/** Makes a new key pair; the public half is one authorized_keys line. */
+export function generateSshKeyPair(type, options = {}) {
+    const algorithm = type === "ssh-rsa" ? "rsa" : type === "ssh-ed25519" ? "ed25519" : "ecdsa";
+    if (type !== "ssh-rsa" &&
+        type !== "ssh-ed25519" &&
+        type !== "ecdsa-sha2-nistp256") {
+        throw new Error(`Unsupported key type: ${String(type)}`);
+    }
+    const generateOptions = {
+        comment: options.comment ?? "",
+    };
+    if (options.passphrase) {
+        generateOptions.passphrase = options.passphrase;
+        generateOptions.cipher = "aes256-ctr";
+    }
+    if (type === "ssh-rsa") {
+        const bits = options.bits ?? 4096;
+        if (!Number.isInteger(bits) || bits < 2048 || bits > 8192) {
+            throw new Error("RSA keys need 2048 to 8192 bits");
+        }
+        generateOptions.bits = bits;
+    }
+    if (type === "ecdsa-sha2-nistp256")
+        generateOptions.bits = 256;
+    const pair = ssh2.utils.generateKeyPairSync(algorithm, generateOptions);
+    return {
+        privateKey: pair.private,
+        publicKey: pair.public.trim(),
+        keyType: type,
+    };
+}
+function parse(key, passphrase) {
+    const parsed = ssh2.utils.parseKey(key.trim(), passphrase || undefined);
+    const first = Array.isArray(parsed) ? parsed[0] : parsed;
+    if (!first || first instanceof Error) {
+        throw first instanceof Error ? first : new Error("Not a readable SSH key");
+    }
+    return first;
+}
+/** The key's algorithm, like "ssh-ed25519", or null when it cannot be read. */
+export function detectSshKeyType(key, passphrase) {
+    try {
+        return parse(key, passphrase).type;
+    }
+    catch {
+        return null;
+    }
+}
+/** The authorized_keys line for a private key, or null. */
+export function publicKeyFromPrivate(privateKey, passphrase) {
+    try {
+        const parsed = parse(privateKey, passphrase);
+        return `${parsed.type} ${parsed.getPublicSSH().toString("base64")}`;
+    }
+    catch {
+        return null;
+    }
+}
+/** Whether a public key line belongs to the private key. */
+export function validateSshKeyPair(privateKey, publicKey, passphrase) {
+    try {
+        const priv = parse(privateKey, passphrase);
+        const pub = parse(publicKey);
+        const same = priv.getPublicSSH().equals(pub.getPublicSSH());
+        return same
+            ? { isValid: true }
+            : {
+                isValid: false,
+                error: "The public key does not match the private key",
+            };
+    }
+    catch (error) {
+        return {
+            isValid: false,
+            error: error instanceof Error ? error.message : String(error),
+        };
+    }
+}

package/dist/testing/setup.js

@@ -89,6 +89,7 @@ globalThis.__termixTestPluginHost = {
     useHostStatus: () => null,
     useCurrentUser: () => null,
     useTheme: () => ({ theme: "dark" }),
+    useShell: () => null,
     toast: { success: noop, error: noop, info: noop, warning: noop },
     getApi: () => ({
         get: offline,

package/dist/testing.d.ts

@@ -7,7 +7,7 @@
  *
  * The vitest config these run under comes from @termix-ssh/plugin-sdk/vitest-preset.
  */
-import type { PluginContext } from "./backend.js";
+import type { PluginAuditEntry, PluginContext, PluginDesktopLocal } from "./backend.js";
 import type { HostActionContribution, TermixApp } from "./frontend.js";
 import type { PluginManifest } from "./manifest.js";
 import type { PluginTableDefinition } from "./db.js";
@@ -25,7 +25,7 @@ export interface FakeWsRoute {
 import type { PluginLoginMethod, PluginVerifiedIdentity, PluginSecondFactor, PluginSshAuthProvider, PluginSshConnectOptions, PluginSshHost, PluginHostSummary, PluginShareableUser, PluginShareableRole, PluginSshKeyCredential, PluginSshKeyCredentialInput } from "./backend.js";
 import type { SyncEntityRegistration } from "./backend.js";
 import type { PluginDatabase } from "./backend.js";
-import type { PluginExternalClientRequest, PluginProtocolTarget, PluginHostStatusEntry, PluginNotification, PluginNotificationChannel, PluginNotifyHub, PluginFetchInit, PluginBinarySpec, PluginTlsCertificateInfo, PluginTlsStatus, PluginSummary, PluginKeyboardInteractiveHandler, PluginProcessHandle, PluginProcessOptions } from "./backend.js";
+import type { PluginExternalClientRequest, PluginProtocolTarget, PluginHostProbeTarget, PluginHostStatusEntry, PluginActivityProvider, PluginHostStatusProvider, PluginNotification, PluginNotificationChannel, PluginNotifyHub, PluginFetchInit, PluginBinarySpec, PluginTlsCertificateInfo, PluginTlsStatus, PluginSummary, PluginKeyboardInteractiveHandler, PluginProcessHandle, PluginProcessOptions } from "./backend.js";
 /** A timer registered through ctx.schedule, run by hand with runScheduled. */
 export interface FakeScheduledJob {
     kind: "every" | "after";
@@ -42,6 +42,8 @@ export interface FakeContextOptions {
     settings?: Record<string, unknown>;
     /** Seed for the core settings ctx.settings.readCore can reach. */
     coreSettings?: Record<string, string>;
+    /** What ctx.files.dataDir() answers. Defaults to /tmp/<pluginId>. */
+    dataDir?: string;
     /** What ctx.ssh.connect and withConnection hand back as the client. */
     sshClient?: unknown;
     /** A real database behind ctx.db, usually createTestDb().database. */
@@ -75,8 +77,18 @@ export interface FakeContextOptions {
     sshKeyCredentials?: PluginSshKeyCredential[];
     /** What ctx.desktop.available() answers. Defaults to false. */
     desktopAvailable?: boolean;
+    /** What ctx.desktop.local is. Calls throw when this is not given. */
+    desktopLocal?: PluginDesktopLocal;
+    /** The stored audit lines ctx.audit.list and exportBatches serve. */
+    auditEntries?: PluginAuditEntry[];
     /** What ctx.hosts.status.get and check answer, by host id. */
     hostStatuses?: Record<number, PluginHostStatusEntry>;
+    /** What ctx.hosts.probeTargets answers. */
+    probeTargets?: PluginHostProbeTarget[];
+    /** Host ids ctx.hosts.sessionActive answers true for. */
+    activeSessions?: number[];
+    /** What ctx.network.tcpProbe and ctx.ssh.probe answer. Defaults to false. */
+    reachable?: (target: string | number, port?: number) => boolean;
     /** The acting user's channels, what ctx.notify.channels answers. */
     notificationChannels?: PluginNotificationChannel[];
     /**
@@ -164,6 +176,10 @@ export interface FakePluginContext {
     }) => Promise<Record<string, string>>;
     /** Everything the plugin registered through ctx.disposables. */
     disposals: Array<() => void | Promise<void>>;
+    /** Providers registered through ctx.hosts.status.provide. */
+    hostStatusProviders: PluginHostStatusProvider[];
+    /** Every provider passed to ctx.hosts.activity.provide that is still registered. */
+    activityProviders: PluginActivityProvider[];
     /** Topics emitted through ctx.events.emit, in order. */
     emitted: Array<{
         topic: string;
@@ -255,6 +271,8 @@ export interface FakePluginContext {
         challenges: Map<string, string>;
         renewers: number;
     };
+    /** Calls every ctx.audit.subscribe handler, like a line core just accepted. */
+    emitAudit: (entry: PluginAuditEntry) => void;
     /** Every ctx.audit.record entry, in order. */
     audits: Array<{
         action: string;
@@ -321,6 +339,8 @@ export interface MockContextOptions {
     settings?: Record<string, unknown>;
     /** Seed for the core settings readCore can reach. */
     coreSettings?: Record<string, string>;
+    /** What ctx.files.dataDir() answers. */
+    dataDir?: string;
     /** Acting user returned by currentActor and used by asUser. */
     actor?: string;
     /** What ctx.ssh.connect and withConnection hand back as the client. */
@@ -346,8 +366,18 @@ export interface MockContextOptions {
     sshKeyCredentials?: PluginSshKeyCredential[];
     /** What ctx.desktop.available() answers. */
     desktopAvailable?: boolean;
+    /** What ctx.desktop.local is. See FakeContextOptions. */
+    desktopLocal?: PluginDesktopLocal;
+    /** See FakeContextOptions. */
+    auditEntries?: PluginAuditEntry[];
     /** What ctx.hosts.status answers. See FakeContextOptions. */
     hostStatuses?: Record<number, PluginHostStatusEntry>;
+    /** What ctx.hosts.probeTargets answers. */
+    probeTargets?: PluginHostProbeTarget[];
+    /** Host ids ctx.hosts.sessionActive answers true for. */
+    activeSessions?: number[];
+    /** What ctx.network.tcpProbe and ctx.ssh.probe answer. */
+    reachable?: (target: string | number, port?: number) => boolean;
     /** The acting user's channels, what ctx.notify.channels answers. */
     notificationChannels?: PluginNotificationChannel[];
     /**
@@ -378,19 +408,6 @@ export interface MockPluginContext extends FakePluginContext {
     /** Capability ids checked during the test, in order, denied ones included. */
     checked: string[];
 }
-/**
- * A context double that gates on capabilities the way src/backend/plugins/ctx.ts
- * does, so a test can prove a plugin fails closed without a running server.
- *
- * The gates on today's ctx surface: kv:own on every ctx.kv call, db:own on
- * ctx.db, network:serve on ctx.http and ctx.ws, events:core on emitting a
- * topic outside the plugin's own namespace, settings:read-core on
- * ctx.settings.readCore, ssh:connect plus credentials:use on ctx.ssh,
- * notify:send on ctx.notify (notify:hub on serve), network:outbound on ctx.fetch, process:spawn on
- * ctx.process, system:tls on ctx.system, plugins:read on ctx.plugins, auth:provide on ctx.auth
- * (users:impersonate on issueUserToken), and users:read on ctx.users. Reading a plugin's own settings is deliberately
- * ungated. As the SDK grows a member, add its gate here in the same shape.
- */
 export declare function createMockCtx(options?: MockContextOptions): MockPluginContext;
 /** A sqlite handle as createTestDb exposes it. Structural, like better-sqlite3's. */
 export interface TestSqlite {