@tianshu-ai/tianshu 0.3.0

package/packages/server/dist/lsp/manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manager.d.ts","sourceRoot":"","sources":["../../src/lsp/manager.ts"],"names":[],"mappings":"AAuCA,OAAO,EACL,YAAY,EACZ,eAAe,EACf,KAAK,kBAAkB,EACxB,MAAM,wBAAwB,CAAC;AAQhC,KAAK,aAAa,GAAG;IACnB,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5B,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5B,KAAK,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CAC9B,CAAC;AAQF,MAAM,WAAW,iBAAiB;IAChC,mCAAmC;IACnC,GAAG,CAAC,EAAE,aAAa,CAAC;IACpB,kCAAkC;IAClC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,8BAA8B;IAC9B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;kDAG8C;IAC9C,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB;wDACoD;IACpD,mBAAmB,EAAE,MAAM,CAAC;IAC5B,6DAA6D;IAC7D,QAAQ,EAAE,MAAM,CAAC;IACjB;uEACmE;IACnE,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,cAAc;IAC7B;iEAC6D;IAC7D,IAAI,EAAE,MAAM,CAAC;IACb;;iCAE6B;IAC7B,SAAS,EAAE,OAAO,CAAC;IACnB;;;mDAG+C;IAC/C,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAcD,qBAAa,UAAU;IACrB,OAAO,CAAC,IAAI,CAEV;IACF,OAAO,CAAC,IAAI,CAAgC;IAC5C,gDAAgD;IAChD,OAAO,CAAC,GAAG,CAAgB;IAC3B,OAAO,CAAC,YAAY,CAAmC;IACvD,OAAO,CAAC,gBAAgB,CAAqB;IAC7C,2CAA2C;IAC3C,OAAO,CAAC,OAAO,CAAC,CAAiB;gBAErB,IAAI,GAAE,iBAAsB;IAgBxC;;;0DAGsD;IAChD,iBAAiB,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,cAAc,CAAC;IA8DtE,iDAAiD;IAC3C,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAQ/B,sDAAsD;IACtD,QAAQ,IAAI,MAAM;IAMlB,OAAO,CAAC,eAAe;IA6CvB;;;mEAG+D;IAC/D,OAAO,CAAC,WAAW;YA2BL,WAAW;IAmCzB,OAAO,CAAC,QAAQ;IAMhB,OAAO,CAAC,WAAW;IASnB,OAAO,CAAC,cAAc;IAqBtB,OAAO,CAAC,SAAS;CAYlB;AAuBD,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,KAAK,kBAAkB,EAAE,CAAC"}

package/packages/server/dist/lsp/manager.js

@@ -0,0 +1,300 @@
+// LSPManager — host-level service that owns LSP client lifecycles.
+// Plugins (currently `files` for edit/write diagnostics; later
+// possibly workboard or a refactor plugin) call into the manager
+// via a small typed interface and never touch raw LSP state.
+//
+// Responsibilities:
+//   1. **Tenant isolation.** Each pool entry is keyed by
+//      (tenantId, languageId, workspaceRoot). Two tenants editing
+//      same-named files at independent paths get independent
+//      processes — there is no shared LSP instance.
+//   2. **Root resolution.** Walk up from the edited file looking
+//      for the language's root markers (`tsconfig.json`, `go.mod`,
+//      `pyproject.toml`, …). Stop at the tenant workspace root —
+//      we never hand a server a root above the tenant boundary,
+//      ever.
+//   3. **Pool & eviction.** LRU-cap at N per tenant + N global.
+//      Idle eviction after IDLE_MS so a tenant that opens 8
+//      languages briefly doesn't pay the resident cost forever.
+//   4. **Bootstrap.** First time a `(language)` is needed and the
+//      binary is missing on PATH, run the documented install
+//      command once per host process. On failure, surface a clear
+//      "diagnostics-unavailable: <reason>" so callers can pass it
+//      through to the agent. We do not retry.
+//   5. **diagnoseAfterEdit().** The single entry point edit/write
+//      tools use: hand a file path + new contents, get back a
+//      formatted diagnostic block (or undefined if LSP wasn't
+//      able to help).
+//
+// Anti-goals:
+//   - LSP completion / hover / go-to-def. Out of scope for v0.1.
+//   - Workspace mirroring. We only push files the agent edits.
+//   - Sandbox-internal LSP. v0.1 LSP only sees host paths under
+//     /data/workspaces/<tenantId>/.
+import { execSync, spawnSync } from "node:child_process";
+import fs from "node:fs";
+import path from "node:path";
+import { LSPClient } from "./client.js";
+import { formatDiagnostics } from "./format.js";
+import { allLanguages, languageForFile, } from "./language-registry.js";
+const DIAGNOSTICS_TIMEOUT_MS = 3_000;
+const DIAGNOSTICS_DEBOUNCE_MS = 150;
+const DEFAULT_PER_TENANT_CAP = 8;
+const DEFAULT_GLOBAL_CAP = 64;
+const IDLE_EVICTION_MS = 10 * 60 * 1000;
+const noLog = {
+    info: () => { },
+    warn: () => { },
+    error: () => { },
+};
+export class LSPManager {
+    opts;
+    pool = new Map();
+    /** LRU order: most recently used at the end. */
+    lru = [];
+    installState = new Map();
+    installAttempted = new Set();
+    /** Background eviction interval handle. */
+    sweeper;
+    constructor(opts = {}) {
+        this.opts = {
+            log: opts.log ?? noLog,
+            perTenantCap: opts.perTenantCap ?? DEFAULT_PER_TENANT_CAP,
+            globalCap: opts.globalCap ?? DEFAULT_GLOBAL_CAP,
+            enabled: opts.enabled ?? true,
+        };
+        if (this.opts.enabled) {
+            // Periodic idle sweep; cheap and bounded.
+            this.sweeper = setInterval(() => this.sweepIdle(), Math.max(IDLE_EVICTION_MS / 4, 30_000)).unref?.();
+        }
+    }
+    /** Edit/write tool entry point. Returns a diagnose result; the
+     *  caller should append `result.text` to the tool output if
+     *  non-empty, and surface `result.unavailable` (if set) as a
+     *  one-liner. Never throws — we catch and degrade. */
+    async diagnoseAfterEdit(input) {
+        if (!this.opts.enabled) {
+            return { text: "", hasErrors: false };
+        }
+        try {
+            const lang = languageForFile(input.filePath);
+            if (!lang) {
+                return { text: "", hasErrors: false };
+            }
+            // Boundary check FIRST — we don't want to spawn an install
+            // (or anything else) for a file we'd have refused anyway.
+            const root = this.resolveRoot(input.filePath, input.tenantWorkspaceRoot, lang);
+            if (!root) {
+                return {
+                    text: "",
+                    hasErrors: false,
+                    unavailable: "file is outside the tenant workspace boundary",
+                };
+            }
+            // Install gate. Only block on the first attempt per host.
+            const installed = this.ensureInstalled(lang);
+            if (!installed.ok) {
+                return {
+                    text: "",
+                    hasErrors: false,
+                    unavailable: `${lang.displayName} not available: ${installed.reason}`,
+                };
+            }
+            const entry = await this.getOrCreate(input.tenantId, lang, root);
+            const editedAt = Date.now();
+            entry.client.notifyChanged(input.filePath, input.contents);
+            // Small debounce so a server that publishes synchronously
+            // on didChange has time to dispatch its message.
+            await sleep(DIAGNOSTICS_DEBOUNCE_MS);
+            const diags = await entry.client.waitForDiagnostics(input.filePath, editedAt, DIAGNOSTICS_TIMEOUT_MS);
+            if (!diags) {
+                return { text: "", hasErrors: false };
+            }
+            const text = formatDiagnostics(diags);
+            const hasErrors = diags.some((d) => (d.severity ?? 1) === 1);
+            return { text, hasErrors };
+        }
+        catch (err) {
+            this.opts.log.error(`lsp: diagnoseAfterEdit failed: ${err.message}`);
+            return {
+                text: "",
+                hasErrors: false,
+                unavailable: `LSP error: ${err.message}`,
+            };
+        }
+    }
+    /** Shut every pooled client down. Idempotent. */
+    async shutdown() {
+        if (this.sweeper)
+            clearInterval(this.sweeper);
+        const entries = [...this.pool.values()];
+        this.pool.clear();
+        this.lru = [];
+        await Promise.all(entries.map((e) => e.client.close()));
+    }
+    /** Test/debug surface: number of pooled processes. */
+    poolSize() {
+        return this.pool.size;
+    }
+    // ─── Internals ──────────────────────────────────────────────
+    ensureInstalled(lang) {
+        const cached = this.installState.get(lang.id);
+        if (cached === "ok")
+            return { ok: true };
+        if (cached === "install-failed") {
+            return { ok: false, reason: "install previously failed" };
+        }
+        if (whichSync(lang.command)) {
+            this.installState.set(lang.id, "ok");
+            return { ok: true };
+        }
+        if (this.installAttempted.has(lang.id)) {
+            this.installState.set(lang.id, "install-failed");
+            return { ok: false, reason: "binary not on PATH after install attempt" };
+        }
+        this.installAttempted.add(lang.id);
+        this.opts.log.info(`lsp: ${lang.displayName} missing — running '${lang.installCommand}'`);
+        try {
+            // Inherit stdio so the user can see install progress; we
+            // don't capture output. Synchronous because install is a
+            // first-edit blocking concern.
+            execSync(lang.installCommand, { stdio: "inherit" });
+        }
+        catch (err) {
+            this.opts.log.error(`lsp: install of ${lang.displayName} failed: ${err.message}`);
+            this.installState.set(lang.id, "install-failed");
+            return { ok: false, reason: `install command failed` };
+        }
+        if (!whichSync(lang.command)) {
+            this.installState.set(lang.id, "install-failed");
+            return {
+                ok: false,
+                reason: `${lang.command} still not on PATH after install`,
+            };
+        }
+        this.installState.set(lang.id, "ok");
+        return { ok: true };
+    }
+    /** Walk up from `filePath` to find the closest root marker for
+     *  this language, never crossing `tenantRoot`. Returns
+     *  `tenantRoot` if no marker found before the boundary.
+     *  Returns undefined if `filePath` is outside `tenantRoot`. */
+    resolveRoot(filePath, tenantRoot, lang) {
+        const tenantNorm = path.resolve(tenantRoot);
+        const fileNorm = path.resolve(filePath);
+        if (fileNorm !== tenantNorm &&
+            !fileNorm.startsWith(tenantNorm + path.sep)) {
+            return undefined;
+        }
+        let dir = path.dirname(fileNorm);
+        while (true) {
+            for (const marker of lang.rootMarkers) {
+                if (fs.existsSync(path.join(dir, marker))) {
+                    return dir;
+                }
+            }
+            if (dir === tenantNorm)
+                return tenantNorm;
+            const parent = path.dirname(dir);
+            if (parent === dir)
+                return tenantNorm; // hit fs root
+            dir = parent;
+        }
+    }
+    async getOrCreate(tenantId, lang, root) {
+        const key = poolKey(tenantId, lang.id, root);
+        let entry = this.pool.get(key);
+        if (entry && entry.client.isClosed()) {
+            // Server died since we last looked. Drop and recreate.
+            this.removeEntry(key);
+            entry = undefined;
+        }
+        if (entry) {
+            this.touchLru(key);
+            return entry;
+        }
+        // Capacity check. Per-tenant first, then global.
+        this.evictIfOverCap(tenantId);
+        const client = new LSPClient({ language: lang, root, log: this.opts.log });
+        await client.init();
+        entry = {
+            key,
+            tenantId,
+            language: lang,
+            root,
+            client,
+            createdAt: Date.now(),
+        };
+        this.pool.set(key, entry);
+        this.lru.push(key);
+        return entry;
+    }
+    touchLru(key) {
+        const idx = this.lru.indexOf(key);
+        if (idx >= 0)
+            this.lru.splice(idx, 1);
+        this.lru.push(key);
+    }
+    removeEntry(key) {
+        const entry = this.pool.get(key);
+        if (!entry)
+            return;
+        this.pool.delete(key);
+        const idx = this.lru.indexOf(key);
+        if (idx >= 0)
+            this.lru.splice(idx, 1);
+        void entry.client.close();
+    }
+    evictIfOverCap(addingTenantId) {
+        const tenantEntries = [...this.pool.values()].filter((e) => e.tenantId === addingTenantId);
+        while (tenantEntries.length >= this.opts.perTenantCap) {
+            // Oldest in LRU among this tenant.
+            const oldest = this.lru.find((k) => {
+                const e = this.pool.get(k);
+                return e !== undefined && e.tenantId === addingTenantId;
+            });
+            if (!oldest)
+                break;
+            this.removeEntry(oldest);
+            const idx = tenantEntries.findIndex((e) => e.key === oldest);
+            if (idx >= 0)
+                tenantEntries.splice(idx, 1);
+        }
+        while (this.pool.size >= this.opts.globalCap && this.lru.length > 0) {
+            const oldest = this.lru[0];
+            this.removeEntry(oldest);
+        }
+    }
+    sweepIdle() {
+        for (const [key, entry] of this.pool) {
+            if (entry.client.idleMs() > IDLE_EVICTION_MS) {
+                this.opts.log.info(`lsp: evicting idle ${entry.language.id} for tenant ${entry.tenantId}`);
+                this.removeEntry(key);
+            }
+            else if (entry.client.isClosed()) {
+                this.removeEntry(key);
+            }
+        }
+    }
+}
+function poolKey(tenantId, langId, root) {
+    return `${tenantId}::${langId}::${root}`;
+}
+function whichSync(cmd) {
+    // Cross-platform "is this binary on PATH". Avoid posix-only `which`.
+    const probe = process.platform === "win32" ? "where" : "command";
+    const args = process.platform === "win32" ? [cmd] : ["-v", cmd];
+    try {
+        const r = spawnSync(probe, args, { stdio: "ignore" });
+        return r.status === 0;
+    }
+    catch {
+        return false;
+    }
+}
+function sleep(ms) {
+    return new Promise((r) => setTimeout(r, ms));
+}
+// Re-export for callers that want to inspect the registry directly.
+export { allLanguages, languageForFile };
+//# sourceMappingURL=manager.js.map

package/packages/server/dist/lsp/manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manager.js","sourceRoot":"","sources":["../../src/lsp/manager.ts"],"names":[],"mappings":"AAAA,mEAAmE;AACnE,+DAA+D;AAC/D,iEAAiE;AACjE,6DAA6D;AAC7D,EAAE;AACF,oBAAoB;AACpB,yDAAyD;AACzD,kEAAkE;AAClE,6DAA6D;AAC7D,oDAAoD;AACpD,iEAAiE;AACjE,mEAAmE;AACnE,iEAAiE;AACjE,gEAAgE;AAChE,aAAa;AACb,gEAAgE;AAChE,4DAA4D;AAC5D,gEAAgE;AAChE,kEAAkE;AAClE,6DAA6D;AAC7D,kEAAkE;AAClE,kEAAkE;AAClE,8CAA8C;AAC9C,kEAAkE;AAClE,8DAA8D;AAC9D,8DAA8D;AAC9D,sBAAsB;AACtB,EAAE;AACF,cAAc;AACd,iEAAiE;AACjE,+DAA+D;AAC/D,gEAAgE;AAChE,oCAAoC;AAEpC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EACL,YAAY,EACZ,eAAe,GAEhB,MAAM,wBAAwB,CAAC;AAEhC,MAAM,sBAAsB,GAAG,KAAK,CAAC;AACrC,MAAM,uBAAuB,GAAG,GAAG,CAAC;AACpC,MAAM,sBAAsB,GAAG,CAAC,CAAC;AACjC,MAAM,kBAAkB,GAAG,EAAE,CAAC;AAC9B,MAAM,gBAAgB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAQxC,MAAM,KAAK,GAAkB;IAC3B,IAAI,EAAE,GAAG,EAAE,GAAE,CAAC;IACd,IAAI,EAAE,GAAG,EAAE,GAAE,CAAC;IACd,KAAK,EAAE,GAAG,EAAE,GAAE,CAAC;CAChB,CAAC;AAuDF,MAAM,OAAO,UAAU;IACb,IAAI,CAEV;IACM,IAAI,GAAG,IAAI,GAAG,EAAqB,CAAC;IAC5C,gDAAgD;IACxC,GAAG,GAAa,EAAE,CAAC;IACnB,YAAY,GAAG,IAAI,GAAG,EAAwB,CAAC;IAC/C,gBAAgB,GAAG,IAAI,GAAG,EAAU,CAAC;IAC7C,2CAA2C;IACnC,OAAO,CAAkB;IAEjC,YAAY,OAA0B,EAAE;QACtC,IAAI,CAAC,IAAI,GAAG;YACV,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,KAAK;YACtB,YAAY,EAAE,IAAI,CAAC,YAAY,IAAI,sBAAsB;YACzD,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,kBAAkB;YAC/C,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,IAAI;SAC9B,CAAC;QACF,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YACtB,0CAA0C;YAC1C,IAAI,CAAC,OAAO,GAAG,WAAW,CACxB,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,EACtB,IAAI,CAAC,GAAG,CAAC,gBAAgB,GAAG,CAAC,EAAE,MAAM,CAAC,CACvC,CAAC,KAAK,EAAE,EAAE,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;0DAGsD;IACtD,KAAK,CAAC,iBAAiB,CAAC,KAAoB;QAC1C,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YACvB,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;QACxC,CAAC;QACD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,eAAe,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC7C,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;YACxC,CAAC;YACD,2DAA2D;YAC3D,0DAA0D;YAC1D,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAC3B,KAAK,CAAC,QAAQ,EACd,KAAK,CAAC,mBAAmB,EACzB,IAAI,CACL,CAAC;YACF,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,OAAO;oBACL,IAAI,EAAE,EAAE;oBACR,SAAS,EAAE,KAAK;oBAChB,WAAW,EAAE,+CAA+C;iBAC7D,CAAC;YACJ,CAAC;YACD,0DAA0D;YAC1D,MAAM,SAAS,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;YAC7C,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;gBAClB,OAAO;oBACL,IAAI,EAAE,EAAE;oBACR,SAAS,EAAE,KAAK;oBAChB,WAAW,EAAE,GAAG,IAAI,CAAC,WAAW,mBAAmB,SAAS,CAAC,MAAM,EAAE;iBACtE,CAAC;YACJ,CAAC;YAED,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;YACjE,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAC5B,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC3D,0DAA0D;YAC1D,iDAAiD;YACjD,MAAM,KAAK,CAAC,uBAAuB,CAAC,CAAC;YACrC,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,kBAAkB,CACjD,KAAK,CAAC,QAAQ,EACd,QAAQ,EACR,sBAAsB,CACvB,CAAC;YACF,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;YACxC,CAAC;YACD,MAAM,IAAI,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;YACtC,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;YAC7D,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;QAC7B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CACjB,kCAAmC,GAAa,CAAC,OAAO,EAAE,CAC3D,CAAC;YACF,OAAO;gBACL,IAAI,EAAE,EAAE;gBACR,SAAS,EAAE,KAAK;gBAChB,WAAW,EAAE,cAAe,GAAa,CAAC,OAAO,EAAE;aACpD,CAAC;QACJ,CAAC;IACH,CAAC;IAED,iDAAiD;IACjD,KAAK,CAAC,QAAQ;QACZ,IAAI,IAAI,CAAC,OAAO;YAAE,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC9C,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QACxC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QAClB,IAAI,CAAC,GAAG,GAAG,EAAE,CAAC;QACd,MAAM,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAC1D,CAAC;IAED,sDAAsD;IACtD,QAAQ;QACN,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;IACxB,CAAC;IAED,+DAA+D;IAEvD,eAAe,CACrB,IAAwB;QAExB,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC9C,IAAI,MAAM,KAAK,IAAI;YAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACzC,IAAI,MAAM,KAAK,gBAAgB,EAAE,CAAC;YAChC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,2BAA2B,EAAE,CAAC;QAC5D,CAAC;QAED,IAAI,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC5B,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YACrC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACtB,CAAC;QAED,IAAI,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;YACvC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,gBAAgB,CAAC,CAAC;YACjD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,0CAA0C,EAAE,CAAC;QAC3E,CAAC;QACD,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACnC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAChB,QAAQ,IAAI,CAAC,WAAW,uBAAuB,IAAI,CAAC,cAAc,GAAG,CACtE,CAAC;QACF,IAAI,CAAC;YACH,yDAAyD;YACzD,yDAAyD;YACzD,+BAA+B;YAC/B,QAAQ,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;QACtD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CACjB,mBAAmB,IAAI,CAAC,WAAW,YAAa,GAAa,CAAC,OAAO,EAAE,CACxE,CAAC;YACF,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,gBAAgB,CAAC,CAAC;YACjD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC;QACzD,CAAC;QACD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7B,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,gBAAgB,CAAC,CAAC;YACjD,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,kCAAkC;aAC1D,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QACrC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;IAED;;;mEAG+D;IACvD,WAAW,CACjB,QAAgB,EAChB,UAAkB,EAClB,IAAwB;QAExB,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACxC,IACE,QAAQ,KAAK,UAAU;YACvB,CAAC,QAAQ,CAAC,UAAU,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,EAC3C,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACjC,OAAO,IAAI,EAAE,CAAC;YACZ,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;gBACtC,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;oBAC1C,OAAO,GAAG,CAAC;gBACb,CAAC;YACH,CAAC;YACD,IAAI,GAAG,KAAK,UAAU;gBAAE,OAAO,UAAU,CAAC;YAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACjC,IAAI,MAAM,KAAK,GAAG;gBAAE,OAAO,UAAU,CAAC,CAAC,cAAc;YACrD,GAAG,GAAG,MAAM,CAAC;QACf,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,WAAW,CACvB,QAAgB,EAChB,IAAwB,EACxB,IAAY;QAEZ,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAC7C,IAAI,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;YACrC,uDAAuD;YACvD,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YACtB,KAAK,GAAG,SAAS,CAAC;QACpB,CAAC;QACD,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YACnB,OAAO,KAAK,CAAC;QACf,CAAC;QAED,iDAAiD;QACjD,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;QAE9B,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAC3E,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,KAAK,GAAG;YACN,GAAG;YACH,QAAQ;YACR,QAAQ,EAAE,IAAI;YACd,IAAI;YACJ,MAAM;YACN,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB,CAAC;QACF,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC1B,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACnB,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,QAAQ,CAAC,GAAW;QAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,GAAG,IAAI,CAAC;YAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACtC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;IAEO,WAAW,CAAC,GAAW;QAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,CAAC,KAAK;YAAE,OAAO;QACnB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACtB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,GAAG,IAAI,CAAC;YAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACtC,KAAK,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;IAC5B,CAAC;IAEO,cAAc,CAAC,cAAsB;QAC3C,MAAM,aAAa,GAAG,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAClD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,cAAc,CACrC,CAAC;QACF,OAAO,aAAa,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YACtD,mCAAmC;YACnC,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;gBACjC,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;gBAC3B,OAAO,CAAC,KAAK,SAAS,IAAI,CAAC,CAAC,QAAQ,KAAK,cAAc,CAAC;YAC1D,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,MAAM;gBAAE,MAAM;YACnB,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;YACzB,MAAM,GAAG,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,MAAM,CAAC,CAAC;YAC7D,IAAI,GAAG,IAAI,CAAC;gBAAE,aAAa,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAC7C,CAAC;QACD,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpE,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAE,CAAC;YAC5B,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;IAEO,SAAS;QACf,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACrC,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,gBAAgB,EAAE,CAAC;gBAC7C,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAChB,sBAAsB,KAAK,CAAC,QAAQ,CAAC,EAAE,eAAe,KAAK,CAAC,QAAQ,EAAE,CACvE,CAAC;gBACF,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YACxB,CAAC;iBAAM,IAAI,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;gBACnC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YACxB,CAAC;QACH,CAAC;IACH,CAAC;CACF;AAED,SAAS,OAAO,CAAC,QAAgB,EAAE,MAAc,EAAE,IAAY;IAC7D,OAAO,GAAG,QAAQ,KAAK,MAAM,KAAK,IAAI,EAAE,CAAC;AAC3C,CAAC;AAED,SAAS,SAAS,CAAC,GAAW;IAC5B,qEAAqE;IACrE,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IACjE,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAChE,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QACtD,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED,oEAAoE;AACpE,OAAO,EAAE,YAAY,EAAE,eAAe,EAA2B,CAAC"}

package/packages/server/dist/plugins-routes.d.ts

@@ -0,0 +1,96 @@
+import { Router } from "express";
+import { GlobalOps, McpManager, type TenantContext } from "./core/index.js";
+import { applyPluginSecretPatch, PluginRegistry } from "./core/plugins/index.js";
+import { CatalogClient } from "./catalog.js";
+export interface PluginsRouterOpts {
+    registry: PluginRegistry;
+    ops: GlobalOps;
+    /**
+     * Optional catalog client. When provided, mounts GET
+     * /plugins/catalog (and POST /plugins/catalog/refresh) so the
+     * Plugin Manager UI can list installable plugins. Tests skip this
+     * by leaving it undefined.
+     */
+    catalog?: CatalogClient;
+    /**
+     * Host-owned MCP manager. Optional so tests skipping MCP routes
+     * still mount this router cleanly. When omitted the
+     * `/mcp/servers` POST/PATCH/DELETE routes return 503.
+     */
+    mcpManager?: McpManager;
+    /**
+     * Optional callback invoked when a plugin's enabled/disabled
+     * state changes via PATCH /plugins/:id. The host wires this to
+     * (a) broadcast a `plugins_changed` WS event so chat shells
+     *     redraw + the agent gets told its tool surface moved, and
+     * (b) append a synthetic system message into the user's active
+     *     chat session so the LLM stops hallucinating tools that
+     *     just got disabled.
+     * Missing in tests — they don't run a chat surface.
+     */
+    onPluginsChanged?: (tenantId: string, userId: string, delta: import("./chat/ws-protocol.js").PluginsChangedDelta, direction: "enabled" | "disabled") => void;
+    /**
+     * ADR-0004 §16: optional hook called by `POST /api/plugins/refresh`
+     * before invalidating the registry cache. The host wires this up
+     * to {@link buildReloadingBuiltinResolver}'s `reload()` so a
+     * freshly-dropped plugin directory is picked up by the resolver
+     * the same way the registry already picks up the manifest.
+     *
+     * Optional so existing tests / non-reloading wirings still work.
+     */
+    reloadResolver?: () => Promise<void>;
+}
+/**
+ * Builds an Express router exposing `/plugins` (GET) and
+ * `/plugins/:id` (PATCH). Mount it where you want it, e.g.
+ *   app.use("/api", buildPluginsRouter({ registry, ops }));
+ */
+export declare function buildPluginsRouter(opts: PluginsRouterOpts): Router;
+/**
+ * Walk a posted plugin config object and split out the secret
+ * fields. Secret keys are dotted paths (matching the form's flat
+ * value map shape); we drop them from the cleartext object and
+ * collect them into a SecretPatch the caller hands to
+ * applyPluginSecretPatch.
+ *
+ * Two value shapes the form may submit per secret field:
+ *   - string  — user typed a new value; persist it.
+ *   - { __secret: true, set: <bool> }  — the redacted shape
+ *     (form was rendered against an existing config and the user
+ *     didn't touch the field). Treated as a no-op so saving the
+ *     form without re-typing the key keeps the existing secret
+ *     intact.
+ *   - { __secret: true, clear: true }  — explicit clear; deletes
+ *     the secret from secrets/. (The form's "clear" button sends
+ *     this.)
+ */
+export declare function splitSecrets(body: Record<string, unknown>, secretKeys: Set<string>): {
+    plain: Record<string, unknown>;
+    secrets: Parameters<typeof applyPluginSecretPatch>[2];
+};
+export declare function listPluginsForTenant(registry: PluginRegistry, tenant: TenantContext): Promise<{
+    id: string;
+    version: string;
+    displayName: string;
+    description: string | null;
+    source: "tenant" | "builtin";
+    state: import("./core/plugins/registry.js").PluginState;
+    failedReason: string | null;
+    contributes: import("@tianshu/plugin-sdk").ContributesV1;
+    clientEntry: string | null;
+    /** Declarative form schema; UI uses this to render the config
+     *  panel. Null when the plugin doesn't expose user-editable
+     *  config. */
+    configSchema: import("@tianshu/plugin-sdk").PluginConfigSchema | null;
+    /** Current persisted config object — same shape the plugin sees
+     *  via PluginContext.pluginConfig, except `secret`-kind values
+     *  are replaced with `{ __secret: true, set: <bool> }` so the
+     *  browser never sees cleartext. */
+    config: Record<string, unknown>;
+    capabilities: {
+        provided: ("sandbox.taskPool" | "sandbox.shell" | "browser.cdp" | "host.agentLoop" | "host.sessionInbox" | "host.toolCatalog" | "host.skillCatalog" | "host.modelCatalog" | "host.lsp")[];
+        requires: ("sandbox.taskPool" | "sandbox.shell" | "browser.cdp" | "host.agentLoop" | "host.sessionInbox" | "host.toolCatalog" | "host.skillCatalog" | "host.modelCatalog" | "host.lsp")[];
+        missing: ("sandbox.taskPool" | "sandbox.shell" | "browser.cdp" | "host.agentLoop" | "host.sessionInbox" | "host.toolCatalog" | "host.skillCatalog" | "host.modelCatalog" | "host.lsp")[];
+    };
+}[]>;
+//# sourceMappingURL=plugins-routes.d.ts.map

package/packages/server/dist/plugins-routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugins-routes.d.ts","sourceRoot":"","sources":["../src/plugins-routes.ts"],"names":[],"mappings":"AASA,OAAgB,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC1C,OAAO,EACL,SAAS,EAGT,UAAU,EAGV,KAAK,aAAa,EACnB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,sBAAsB,EAGtB,cAAc,EAEf,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAwD7C,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,cAAc,CAAC;IACzB,GAAG,EAAE,SAAS,CAAC;IACf;;;;;OAKG;IACH,OAAO,CAAC,EAAE,aAAa,CAAC;IACxB;;;;OAIG;IACH,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB;;;;;;;;;OASG;IACH,gBAAgB,CAAC,EAAE,CACjB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,OAAO,uBAAuB,EAAE,mBAAmB,EAC1D,SAAS,EAAE,SAAS,GAAG,UAAU,KAC9B,IAAI,CAAC;IACV;;;;;;;;OAQG;IACH,cAAc,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CACtC;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,iBAAiB,GAAG,MAAM,CAqdlE;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,YAAY,CAC1B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,GACtB;IACD,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,OAAO,EAAE,UAAU,CAAC,OAAO,sBAAsB,CAAC,CAAC,CAAC,CAAC,CAAC;CACvD,CA2CA;AAED,wBAAsB,oBAAoB,CACxC,QAAQ,EAAE,cAAc,EACxB,MAAM,EAAE,aAAa;;;;;;;;;;IAwCnB;;kBAEc;;IAEd;;;wCAGoC;;;;;;;KASvC"}