@tianshu-ai/tianshu 0.3.0

package/packages/server/dist/core/plugins/builtin-loader.d.ts

@@ -0,0 +1,56 @@
+import { type ServerPluginModuleResolver } from "./registry.js";
+/**
+ * Resolver that can re-scan the builtins directory on demand. The
+ * registry holds onto a single resolver across the server's
+ * lifetime; without re-scan support, dropping a new plugin
+ * directory at runtime would never be picked up because the
+ * resolver's module map is fixed at server boot.
+ *
+ * `reload()` is what `POST /api/plugins/refresh` calls (alongside
+ * the registry's per-tenant invalidate) so adding a builtin = drop
+ * a directory + run sync:plugins + click Refresh.
+ */
+export interface ReloadingResolver {
+    resolve(entry: string): Promise<import("@tianshu/plugin-sdk").PluginServerModule | null>;
+    reload(): Promise<void>;
+}
+export interface BuiltinLoaderOpts {
+    /**
+     * Directory to scan. Each subdirectory is a plugin (must contain
+     * `manifest.json`). Conventionally this is the repo's top-level
+     * `plugins/` (where source lives) — `dist/` paths are derived from
+     * each manifest's location. Pre-build (`npm run build` at the repo
+     * root) is required before this resolver works in production.
+     */
+    pluginsRoot: string;
+    /**
+     * Optional log sink. Defaults to console. Tests pass a noop / spy.
+     */
+    log?: (level: "info" | "warn", msg: string) => void;
+}
+/**
+ * Build a {@link ServerPluginModuleResolver} by scanning `pluginsRoot`,
+ * loading each plugin's compiled server module, and mapping the
+ * `manifest.server.entry` string → module.
+ *
+ * Async because module loading uses dynamic `import()`. Call this
+ * once at server boot and reuse the resolver for the registry.
+ *
+ * For dev / catalog-install scenarios where a new plugin directory
+ * appears after server boot, prefer {@link buildReloadingBuiltinResolver}
+ * which exposes a `reload()` method that re-scans on demand.
+ */
+export declare function buildBuiltinResolver(opts: BuiltinLoaderOpts): Promise<ServerPluginModuleResolver>;
+/**
+ * Like {@link buildBuiltinResolver} but the returned resolver has a
+ * `reload()` method that re-scans the plugins directory and
+ * replaces its internal module map. Used by
+ * `POST /api/plugins/refresh`.
+ *
+ * Modules already imported by Node's ESM cache are reused on reload
+ * (same URL = same module). Dropped plugins are removed from the
+ * map but the underlying module objects stay live in the ESM cache;
+ * v0 doesn't try to evict them.
+ */
+export declare function buildReloadingBuiltinResolver(opts: BuiltinLoaderOpts): Promise<ReloadingResolver>;
+//# sourceMappingURL=builtin-loader.d.ts.map

package/packages/server/dist/core/plugins/builtin-loader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"builtin-loader.d.ts","sourceRoot":"","sources":["../../../src/core/plugins/builtin-loader.ts"],"names":[],"mappings":"AA6BA,OAAO,EAAqB,KAAK,0BAA0B,EAAE,MAAM,eAAe,CAAC;AAEnF;;;;;;;;;;GAUG;AACH,MAAM,WAAW,iBAAiB;IAChC,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,qBAAqB,EAAE,kBAAkB,GAAG,IAAI,CAAC,CAAC;IACzF,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACzB;AAED,MAAM,WAAW,iBAAiB;IAChC;;;;;;OAMG;IACH,WAAW,EAAE,MAAM,CAAC;IACpB;;OAEG;IACH,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CACrD;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,oBAAoB,CACxC,IAAI,EAAE,iBAAiB,GACtB,OAAO,CAAC,0BAA0B,CAAC,CAGrC;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,6BAA6B,CACjD,IAAI,EAAE,iBAAiB,GACtB,OAAO,CAAC,iBAAiB,CAAC,CAU5B"}

package/packages/server/dist/core/plugins/builtin-loader.js

@@ -0,0 +1,153 @@
+// File-scan loader for builtin server modules (ADR-0004 §15).
+//
+// Replaces the hand-maintained `moduleMapResolver({...})` in index.ts.
+// The discovery walk reads `<plugins-root>/<id>/manifest.json`,
+// resolves each plugin's `server.entry` to a real ESM module by
+// looking up the matching `<plugins-root>/<id>/dist/server.js` file
+// (or whatever `package.json#exports['./server']` says, if a more
+// elaborate package layout is needed later).
+//
+// What this is NOT:
+// - A third-party plugin runtime. The scan is restricted to a known
+//   `pluginsRoot` directory the host operator chose. Catalog-installed
+//   tenant plugins still go through the dynamic-import path that v1+
+//   will add separately.
+// - A hot-reloader. ESM module cache is per-URL; toggling enabled →
+//   disabled → enabled re-uses the same module. v0 doesn't try to
+//   evict cached modules — restart the server to pick up code changes
+//   in a builtin's `dist/`.
+//
+// Failure modes are non-fatal: a bad manifest, missing dist file, or
+// missing `default` export logs a warning and is skipped. The plugin
+// will then surface as `state: "failed"` via the registry's normal
+// "server.entry not registered" path, which the Plugin Manager UI
+// already renders.
+import fs from "node:fs";
+import path from "node:path";
+import { pathToFileURL } from "node:url";
+import { moduleMapResolver } from "./registry.js";
+/**
+ * Build a {@link ServerPluginModuleResolver} by scanning `pluginsRoot`,
+ * loading each plugin's compiled server module, and mapping the
+ * `manifest.server.entry` string → module.
+ *
+ * Async because module loading uses dynamic `import()`. Call this
+ * once at server boot and reuse the resolver for the registry.
+ *
+ * For dev / catalog-install scenarios where a new plugin directory
+ * appears after server boot, prefer {@link buildReloadingBuiltinResolver}
+ * which exposes a `reload()` method that re-scans on demand.
+ */
+export async function buildBuiltinResolver(opts) {
+    const map = await scanPlugins(opts);
+    return moduleMapResolver(map);
+}
+/**
+ * Like {@link buildBuiltinResolver} but the returned resolver has a
+ * `reload()` method that re-scans the plugins directory and
+ * replaces its internal module map. Used by
+ * `POST /api/plugins/refresh`.
+ *
+ * Modules already imported by Node's ESM cache are reused on reload
+ * (same URL = same module). Dropped plugins are removed from the
+ * map but the underlying module objects stay live in the ESM cache;
+ * v0 doesn't try to evict them.
+ */
+export async function buildReloadingBuiltinResolver(opts) {
+    let map = await scanPlugins(opts);
+    return {
+        async resolve(entry) {
+            return map[entry] ?? null;
+        },
+        async reload() {
+            map = await scanPlugins(opts);
+        },
+    };
+}
+async function scanPlugins(opts) {
+    const log = opts.log ?? defaultLog;
+    const map = {};
+    if (!fs.existsSync(opts.pluginsRoot)) {
+        log("info", `[builtin-loader] no plugins dir at ${opts.pluginsRoot}; nothing to load`);
+        return map;
+    }
+    const ids = fs
+        .readdirSync(opts.pluginsRoot, { withFileTypes: true })
+        .filter((d) => d.isDirectory() && !d.name.startsWith(".") && !d.name.startsWith("_"))
+        .map((d) => d.name)
+        .sort();
+    for (const id of ids) {
+        const pluginDir = path.join(opts.pluginsRoot, id);
+        const manifestPath = path.join(pluginDir, "manifest.json");
+        if (!fs.existsSync(manifestPath))
+            continue;
+        let manifest;
+        try {
+            manifest = JSON.parse(fs.readFileSync(manifestPath, "utf8"));
+        }
+        catch (err) {
+            log("warn", `[builtin-loader] ${id}: bad manifest.json (${describe(err)})`);
+            continue;
+        }
+        const serverEntry = manifest.server?.entry;
+        if (typeof serverEntry !== "string" || serverEntry.length === 0) {
+            // Client-only plugin — nothing to register on the server side.
+            continue;
+        }
+        const distFile = path.join(pluginDir, "dist", "server.js");
+        let stat;
+        try {
+            stat = fs.statSync(distFile);
+        }
+        catch {
+            log("warn", `[builtin-loader] ${id}: ${distFile} missing — run \`npm run build\` to compile builtin plugins`);
+            continue;
+        }
+        let mod = null;
+        try {
+            // Cache-bust the import URL with the dist file's mtime so a
+            // POST /api/plugins/refresh after `npm run build -w plugins/<id>`
+            // actually re-imports the new code instead of returning the
+            // ESM cache's stale copy. Without this, plugin authors had to
+            // restart the entire server to see plugin changes (the
+            // "3 tsx instances fighting" pain we hit on 2026-06-06).
+            const importUrl = `${pathToFileURL(distFile).href}?v=${stat.mtimeMs}`;
+            const imported = (await import(importUrl));
+            mod =
+                "activate" in imported && typeof imported.activate === "function"
+                    ? imported
+                    : "default" in imported && imported.default
+                        ? imported.default
+                        : null;
+        }
+        catch (err) {
+            log("warn", `[builtin-loader] ${id}: failed to import ${distFile} (${describe(err)})`);
+            continue;
+        }
+        if (!mod || typeof mod.activate !== "function") {
+            log("warn", `[builtin-loader] ${id}: ${distFile} did not export an activate() — skipping`);
+            continue;
+        }
+        if (map[serverEntry]) {
+            log("warn", `[builtin-loader] ${id}: server.entry "${serverEntry}" already registered by another plugin — skipping`);
+            continue;
+        }
+        map[serverEntry] = mod;
+        log("info", `[builtin-loader] loaded ${id} → ${serverEntry}`);
+    }
+    return map;
+}
+function defaultLog(level, msg) {
+    if (level === "info") {
+        // eslint-disable-next-line no-console
+        console.log(msg);
+    }
+    else {
+        // eslint-disable-next-line no-console
+        console.warn(msg);
+    }
+}
+function describe(err) {
+    return err instanceof Error ? err.message : String(err);
+}
+//# sourceMappingURL=builtin-loader.js.map

package/packages/server/dist/core/plugins/builtin-loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"builtin-loader.js","sourceRoot":"","sources":["../../../src/core/plugins/builtin-loader.ts"],"names":[],"mappings":"AAAA,8DAA8D;AAC9D,EAAE;AACF,uEAAuE;AACvE,gEAAgE;AAChE,gEAAgE;AAChE,oEAAoE;AACpE,kEAAkE;AAClE,6CAA6C;AAC7C,EAAE;AACF,oBAAoB;AACpB,oEAAoE;AACpE,uEAAuE;AACvE,qEAAqE;AACrE,yBAAyB;AACzB,oEAAoE;AACpE,kEAAkE;AAClE,sEAAsE;AACtE,4BAA4B;AAC5B,EAAE;AACF,qEAAqE;AACrE,qEAAqE;AACrE,mEAAmE;AACnE,kEAAkE;AAClE,mBAAmB;AAEnB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,iBAAiB,EAAmC,MAAM,eAAe,CAAC;AAiCnF;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,IAAuB;IAEvB,MAAM,GAAG,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC;IACpC,OAAO,iBAAiB,CAAC,GAAG,CAAC,CAAC;AAChC,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,IAAuB;IAEvB,IAAI,GAAG,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC;IAClC,OAAO;QACL,KAAK,CAAC,OAAO,CAAC,KAAa;YACzB,OAAO,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC;QAC5B,CAAC;QACD,KAAK,CAAC,MAAM;YACV,GAAG,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC;QAChC,CAAC;KACF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,WAAW,CACxB,IAAuB;IAEvB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,UAAU,CAAC;IACnC,MAAM,GAAG,GAAuC,EAAE,CAAC;IAEnD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QACrC,GAAG,CAAC,MAAM,EAAE,sCAAsC,IAAI,CAAC,WAAW,mBAAmB,CAAC,CAAC;QACvF,OAAO,GAAG,CAAC;IACb,CAAC;IAED,MAAM,GAAG,GAAG,EAAE;SACX,WAAW,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;SACtD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;SACpF,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;SAClB,IAAI,EAAE,CAAC;IAEV,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;QACrB,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QAClD,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;QAC3D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC;YAAE,SAAS;QAE3C,IAAI,QAAwD,CAAC;QAC7D,IAAI,CAAC;YACH,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC;QAC/D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,MAAM,EAAE,oBAAoB,EAAE,wBAAwB,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC5E,SAAS;QACX,CAAC;QAED,MAAM,WAAW,GAAG,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC;QAC3C,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAChE,+DAA+D;YAC/D,SAAS;QACX,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;QAC3D,IAAI,IAAI,CAAC;QACT,IAAI,CAAC;YACH,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,GAAG,CACD,MAAM,EACN,oBAAoB,EAAE,KAAK,QAAQ,6DAA6D,CACjG,CAAC;YACF,SAAS;QACX,CAAC;QAED,IAAI,GAAG,GAA8B,IAAI,CAAC;QAC1C,IAAI,CAAC;YACH,4DAA4D;YAC5D,kEAAkE;YAClE,4DAA4D;YAC5D,8DAA8D;YAC9D,uDAAuD;YACvD,yDAAyD;YACzD,MAAM,SAAS,GAAG,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC,IAAI,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;YACtE,MAAM,QAAQ,GAAG,CAAC,MAAM,MAAM,CAAC,SAAS,CAAC,CAEnB,CAAC;YACvB,GAAG;gBACD,UAAU,IAAI,QAAQ,IAAI,OAAO,QAAQ,CAAC,QAAQ,KAAK,UAAU;oBAC/D,CAAC,CAAE,QAA+B;oBAClC,CAAC,CAAC,SAAS,IAAI,QAAQ,IAAI,QAAQ,CAAC,OAAO;wBACzC,CAAC,CAAC,QAAQ,CAAC,OAAO;wBAClB,CAAC,CAAC,IAAI,CAAC;QACf,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,MAAM,EAAE,oBAAoB,EAAE,sBAAsB,QAAQ,KAAK,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACvF,SAAS;QACX,CAAC;QAED,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,CAAC,QAAQ,KAAK,UAAU,EAAE,CAAC;YAC/C,GAAG,CACD,MAAM,EACN,oBAAoB,EAAE,KAAK,QAAQ,0CAA0C,CAC9E,CAAC;YACF,SAAS;QACX,CAAC;QAED,IAAI,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;YACrB,GAAG,CACD,MAAM,EACN,oBAAoB,EAAE,mBAAmB,WAAW,mDAAmD,CACxG,CAAC;YACF,SAAS;QACX,CAAC;QAED,GAAG,CAAC,WAAW,CAAC,GAAG,GAAG,CAAC;QACvB,GAAG,CAAC,MAAM,EAAE,2BAA2B,EAAE,MAAM,WAAW,EAAE,CAAC,CAAC;IAChE,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,UAAU,CAAC,KAAsB,EAAE,GAAW;IACrD,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;QACrB,sCAAsC;QACtC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACnB,CAAC;SAAM,CAAC;QACN,sCAAsC;QACtC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACpB,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,GAAY;IAC5B,OAAO,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AAC1D,CAAC"}

package/packages/server/dist/core/plugins/discovery.d.ts

@@ -0,0 +1,28 @@
+import type { PluginManifest } from "@tianshu/plugin-sdk";
+export type PluginSource = "builtin" | "tenant";
+export interface DiscoveredPlugin {
+    source: PluginSource;
+    /** Absolute path to the plugin directory. */
+    dir: string;
+    manifest: PluginManifest;
+}
+export interface FailedManifest {
+    source: PluginSource;
+    dir: string;
+    pluginId: string | null;
+    issues: string[];
+}
+export interface DiscoveryResult {
+    plugins: DiscoveredPlugin[];
+    failed: FailedManifest[];
+}
+export interface DiscoveryOpts {
+    /** Override the builtinConfig directory. Resolves the BUILTIN_CONFIG_DIR
+     *  env if not given, finally falling back to packages/server/builtinConfig. */
+    builtinConfigDir?: string;
+    /** Override the tenant home dir base. Optional — defaults to TIANSHU_HOME. */
+    home?: string;
+}
+export declare function getBuiltinConfigDir(): string;
+export declare function discoverPlugins(tenantId: string, opts?: DiscoveryOpts): DiscoveryResult;
+//# sourceMappingURL=discovery.d.ts.map

package/packages/server/dist/core/plugins/discovery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"discovery.d.ts","sourceRoot":"","sources":["../../../src/core/plugins/discovery.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAI1D,MAAM,MAAM,YAAY,GAAG,SAAS,GAAG,QAAQ,CAAC;AAEhD,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,YAAY,CAAC;IACrB,6CAA6C;IAC7C,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,cAAc,CAAC;CAC1B;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,YAAY,CAAC;IACrB,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,gBAAgB,EAAE,CAAC;IAC5B,MAAM,EAAE,cAAc,EAAE,CAAC;CAC1B;AAED,MAAM,WAAW,aAAa;IAC5B;mFAC+E;IAC/E,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,8EAA8E;IAC9E,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,wBAAgB,mBAAmB,IAAI,MAAM,CAQ5C;AAED,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,GAAE,aAAkB,GAAG,eAAe,CAoB3F"}

package/packages/server/dist/core/plugins/discovery.js

@@ -0,0 +1,97 @@
+// Plugin discovery — scans the builtin and tenant plugin directories,
+// parses manifests, and produces a deterministic merged list per
+// ADR-0003 §3 (tenant manifest with same id replaces builtin; new id
+// in tenant adds a tenant-only plugin).
+//
+// Discovery does NOT activate. Activation runs separately so a bad
+// manifest is just one row marked failed in /api/plugins; the rest of
+// the boot keeps going.
+import fs from "node:fs";
+import path from "node:path";
+import { getTenantSharedDir } from "../paths.js";
+import { parseManifest, PluginManifestError } from "./manifest.js";
+export function getBuiltinConfigDir() {
+    const env = process.env.BUILTIN_CONFIG_DIR?.trim();
+    if (env)
+        return path.resolve(env);
+    // Resolve relative to this file at runtime: dist/core/plugins/discovery.js
+    // → ../../../builtinConfig (server package root).
+    // For ESM we can't use __dirname; rely on import.meta.url.
+    const here = new URL(".", import.meta.url).pathname;
+    return path.resolve(here, "..", "..", "..", "builtinConfig");
+}
+export function discoverPlugins(tenantId, opts = {}) {
+    const builtinDir = opts.builtinConfigDir ?? getBuiltinConfigDir();
+    const tenantDir = path.join(getTenantSharedDir(tenantId, opts.home), "config", "plugins");
+    const builtin = scanPluginDir(path.join(builtinDir, "plugins"), "builtin");
+    const tenant = scanPluginDir(tenantDir, "tenant");
+    // Tenant manifests override builtin by id; new ids merge in.
+    const byId = new Map();
+    for (const p of builtin.plugins)
+        byId.set(p.manifest.id, p);
+    for (const p of tenant.plugins)
+        byId.set(p.manifest.id, p);
+    const plugins = [...byId.values()].sort((a, b) => a.manifest.id < b.manifest.id ? -1 : a.manifest.id > b.manifest.id ? 1 : 0);
+    return {
+        plugins,
+        failed: [...builtin.failed, ...tenant.failed],
+    };
+}
+function scanPluginDir(dir, source) {
+    if (!fs.existsSync(dir))
+        return { plugins: [], failed: [] };
+    const entries = fs.readdirSync(dir, { withFileTypes: true });
+    const plugins = [];
+    const failed = [];
+    for (const e of entries) {
+        if (!e.isDirectory())
+            continue;
+        if (e.name.startsWith(".") || e.name.startsWith("_"))
+            continue;
+        const pluginDir = path.join(dir, e.name);
+        const manifestPath = path.join(pluginDir, "manifest.json");
+        if (!fs.existsSync(manifestPath))
+            continue;
+        let raw;
+        try {
+            raw = JSON.parse(fs.readFileSync(manifestPath, "utf8"));
+        }
+        catch (err) {
+            failed.push({
+                source,
+                dir: pluginDir,
+                pluginId: null,
+                issues: [`failed to parse manifest.json: ${err instanceof Error ? err.message : String(err)}`],
+            });
+            continue;
+        }
+        try {
+            const manifest = parseManifest(raw);
+            if (manifest.id !== e.name) {
+                failed.push({
+                    source,
+                    dir: pluginDir,
+                    pluginId: manifest.id,
+                    issues: [`manifest.id "${manifest.id}" must match directory name "${e.name}"`],
+                });
+                continue;
+            }
+            plugins.push({ source, dir: pluginDir, manifest });
+        }
+        catch (err) {
+            if (err instanceof PluginManifestError) {
+                failed.push({ source, dir: pluginDir, pluginId: err.pluginId, issues: err.issues });
+            }
+            else {
+                failed.push({
+                    source,
+                    dir: pluginDir,
+                    pluginId: null,
+                    issues: [err instanceof Error ? err.message : String(err)],
+                });
+            }
+        }
+    }
+    return { plugins, failed };
+}
+//# sourceMappingURL=discovery.js.map

package/packages/server/dist/core/plugins/discovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"discovery.js","sourceRoot":"","sources":["../../../src/core/plugins/discovery.ts"],"names":[],"mappings":"AAAA,sEAAsE;AACtE,iEAAiE;AACjE,qEAAqE;AACrE,wCAAwC;AACxC,EAAE;AACF,mEAAmE;AACnE,sEAAsE;AACtE,wBAAwB;AAExB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AA+BnE,MAAM,UAAU,mBAAmB;IACjC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,IAAI,EAAE,CAAC;IACnD,IAAI,GAAG;QAAE,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAClC,2EAA2E;IAC3E,kDAAkD;IAClD,2DAA2D;IAC3D,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC;IACpD,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,eAAe,CAAC,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,QAAgB,EAAE,OAAsB,EAAE;IACxE,MAAM,UAAU,GAAG,IAAI,CAAC,gBAAgB,IAAI,mBAAmB,EAAE,CAAC;IAClE,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;IAE1F,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,EAAE,SAAS,CAAC,CAAC;IAC3E,MAAM,MAAM,GAAG,aAAa,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAElD,6DAA6D;IAC7D,MAAM,IAAI,GAAG,IAAI,GAAG,EAA4B,CAAC;IACjD,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,OAAO;QAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IAC5D,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO;QAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IAE3D,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAC/C,CAAC,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAC3E,CAAC;IAEF,OAAO;QACL,OAAO;QACP,MAAM,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC;KAC9C,CAAC;AACJ,CAAC;AAOD,SAAS,aAAa,CAAC,GAAW,EAAE,MAAoB;IACtD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IAC5D,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7D,MAAM,OAAO,GAAuB,EAAE,CAAC;IACvC,MAAM,MAAM,GAAqB,EAAE,CAAC;IACpC,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE;YAAE,SAAS;QAC/B,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAC/D,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QACzC,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;QAC3D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC;YAAE,SAAS;QAC3C,IAAI,GAAY,CAAC;QACjB,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC;QAC1D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CAAC;gBACV,MAAM;gBACN,GAAG,EAAE,SAAS;gBACd,QAAQ,EAAE,IAAI;gBACd,MAAM,EAAE,CAAC,kCAAkC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;aAC/F,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;YACpC,IAAI,QAAQ,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;gBAC3B,MAAM,CAAC,IAAI,CAAC;oBACV,MAAM;oBACN,GAAG,EAAE,SAAS;oBACd,QAAQ,EAAE,QAAQ,CAAC,EAAE;oBACrB,MAAM,EAAE,CAAC,gBAAgB,QAAQ,CAAC,EAAE,gCAAgC,CAAC,CAAC,IAAI,GAAG,CAAC;iBAC/E,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC;QACrD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,mBAAmB,EAAE,CAAC;gBACvC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;YACtF,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,IAAI,CAAC;oBACV,MAAM;oBACN,GAAG,EAAE,SAAS;oBACd,QAAQ,EAAE,IAAI;oBACd,MAAM,EAAE,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;iBAC3D,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;AAC7B,CAAC"}

package/packages/server/dist/core/plugins/index.d.ts

@@ -0,0 +1,6 @@
+export * from "./manifest.js";
+export * from "./discovery.js";
+export * from "./registry.js";
+export * from "./builtin-loader.js";
+export * from "./secrets.js";
+//# sourceMappingURL=index.d.ts.map

package/packages/server/dist/core/plugins/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/core/plugins/index.ts"],"names":[],"mappings":"AAAA,cAAc,eAAe,CAAC;AAC9B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC;AAC9B,cAAc,qBAAqB,CAAC;AACpC,cAAc,cAAc,CAAC"}

package/packages/server/dist/core/plugins/index.js

@@ -0,0 +1,6 @@
+export * from "./manifest.js";
+export * from "./discovery.js";
+export * from "./registry.js";
+export * from "./builtin-loader.js";
+export * from "./secrets.js";
+//# sourceMappingURL=index.js.map

package/packages/server/dist/core/plugins/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/core/plugins/index.ts"],"names":[],"mappings":"AAAA,cAAc,eAAe,CAAC;AAC9B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC;AAC9B,cAAc,qBAAqB,CAAC;AACpC,cAAc,cAAc,CAAC"}

package/packages/server/dist/core/plugins/manifest.d.ts

@@ -0,0 +1,9 @@
+import type { PluginManifest } from "@tianshu/plugin-sdk";
+export declare class PluginManifestError extends Error {
+    readonly pluginId: string | null;
+    readonly issues: string[];
+    readonly code: "PLUGIN_MANIFEST_INVALID";
+    constructor(pluginId: string | null, issues: string[]);
+}
+export declare function parseManifest(raw: unknown): PluginManifest;
+//# sourceMappingURL=manifest.d.ts.map

package/packages/server/dist/core/plugins/manifest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.d.ts","sourceRoot":"","sources":["../../../src/core/plugins/manifest.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAUV,cAAc,EASf,MAAM,qBAAqB,CAAC;AAG7B,qBAAa,mBAAoB,SAAQ,KAAK;aAG1B,QAAQ,EAAE,MAAM,GAAG,IAAI;aACvB,MAAM,EAAE,MAAM,EAAE;IAHlC,QAAQ,CAAC,IAAI,EAAG,yBAAyB,CAAU;gBAEjC,QAAQ,EAAE,MAAM,GAAG,IAAI,EACvB,MAAM,EAAE,MAAM,EAAE;CAOnC;AAUD,wBAAgB,aAAa,CAAC,GAAG,EAAE,OAAO,GAAG,cAAc,CA4E1D"}