@vetta-org/plugin-sdk 0.1.1 → 0.3.0

package/dist/permissions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"permissions.d.ts","sourceRoot":"","sources":["../src/permissions.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,gBAAgB,GACzB,gBAAgB,GAChB,sBAAsB,GACtB,sBAAsB,GACtB,sBAAsB,GACtB,iBAAiB,GACjB,mBAAmB,GACnB,mBAAmB,GACnB,uBAAuB,GACvB,8BAA8B,GAC9B,+BAA+B,GAC/B,0BAA0B,GAC1B,gBAAgB,GAChB,oBAAoB,GACpB,qBAAqB,GACrB,mBAAmB,GACnB,qBAAqB,GACrB,yBAAyB,GACzB,0BAA0B,GAC1B,gCAAgC,GAChC,sBAAsB,GACtB,mBAAmB,GACnB,qBAAqB,GACrB,sBAAsB,GACtB,2BAA2B,GAC3B,kBAAkB,GAClB,mBAAmB,GACnB,6BAA6B,GAC7B,yBAAyB,GACzB,sBAAsB,GACtB,2BAA2B,GAC3B,SAAS,GACT,UAAU,GACV,eAAe,GACf,cAAc,GACd,eAAe,GACf,eAAe,GACf,gBAAgB,CAAC","sourcesContent":["export type PluginPermission =\n\t| \"ui.slot.global\"\n\t| \"ui.slot.file-preview\"\n\t| \"ui.slot.activity-tab\"\n\t| \"ui.slot.input-action\"\n\t| \"ui.slot.message\"\n\t| \"ui.slot.tool-call\"\n\t| \"ui.slot.turn-card\"\n\t| \"ui.shortcuts.register\"\n\t| \"ui.file-explorer.decorations\"\n\t| \"ui.file-explorer.context-menu\"\n\t| \"ui.file-explorer.toolbar\"\n\t| \"workspace.read\"\n\t| \"agent.session.read\"\n\t| \"agent.session.write\"\n\t| \"agent.command.run\"\n\t| \"agent.command.spawn\"\n\t| \"agent.systemPrompt.read\"\n\t| \"agent.systemPrompt.write\"\n\t| \"agent.systemPrompt.fullControl\"\n\t| \"agent.skills.control\"\n\t| \"agent.mcp.control\"\n\t| \"agent.tools.control\"\n\t| \"agent.tools.register\"\n\t| \"agent.toolHandler.execute\"\n\t| \"agent.state.read\"\n\t| \"agent.state.write\"\n\t| \"agent.continuation.register\"\n\t| \"agent.runtime.configure\"\n\t| \"app.actions.register\"\n\t| \"app.actionHandler.execute\"\n\t| \"fs.read\"\n\t| \"fs.write\"\n\t| \"network.fetch\"\n\t| \"storage.read\"\n\t| \"storage.write\"\n\t| \"settings.read\"\n\t| \"settings.write\";\n"]}
+{"version":3,"file":"permissions.d.ts","sourceRoot":"","sources":["../src/permissions.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,kBAAkB,k1CA6DrB,CAAC;AAEX,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAC","sourcesContent":["export const PLUGIN_PERMISSIONS = [\n\t\"ui.slot.global\",\n\t\"ui.slot.ability-detail\",\n\t\"ui.slot.file-preview\",\n\t\"ui.slot.activity-tab\",\n\t\"ui.slot.input-action\",\n\t\"ui.slot.message\",\n\t\"ui.slot.tool-call\",\n\t\"ui.slot.turn-card\",\n\t\"ui.slot.workspace-view\",\n\t\"ui.slot.new-session-context\",\n\t\"ui.shortcuts.register\",\n\t\"conversation.draft.read\",\n\t\"ui.file-explorer.decorations\",\n\t\"ui.file-explorer.context-menu\",\n\t\"ui.file-explorer.toolbar\",\n\t\"workspace.read\",\n\t\"agent.session.read\",\n\t\"agent.session.write\",\n\t\"agent.command.run\",\n\t\"agent.command.spawn\",\n\t\"capture.offscreen\",\n\t\"browser.read\",\n\t\"browser.open\",\n\t\"browser.interact\",\n\t\"browser.profile.persist\",\n\t\"browser.attach\",\n\t\"browser.runtime.manage\",\n\t\"agent.systemPrompt.read\",\n\t\"agent.systemPrompt.write\",\n\t\"agent.systemPrompt.fullControl\",\n\t\"agent.skills.control\",\n\t\"agent.mcp.control\",\n\t\"agent.tools.control\",\n\t\"agent.tools.register\",\n\t\"agent.toolHandler.execute\",\n\t\"agent.hooks.register\",\n\t\"agent.hookHandler.execute\",\n\t\"agent.state.read\",\n\t\"agent.state.write\",\n\t\"agent.continuation.register\",\n\t\"agent.runtime.configure\",\n\t\"app.actions.register\",\n\t\"app.actionHandler.execute\",\n\t\"ai.models.list\",\n\t\"ai.complete\",\n\t\"models.manage\",\n\t\"fs.read\",\n\t\"fs.write\",\n\t\"network.fetch\",\n\t\"storage.read\",\n\t\"storage.write\",\n\t\"media.generate\",\n\t\"media.provider.register\",\n\t\"ai.ocr.recognize\",\n\t\"ai.ocr.provider.register\",\n\t\"settings.read\",\n\t\"settings.write\",\n\t\"secrets.read\",\n\t\"secrets.write\",\n\t\"shell.openExternal\",\n] as const;\n\nexport type PluginPermission = (typeof PLUGIN_PERMISSIONS)[number];\n"]}

package/dist/permissions.js

@@ -1,2 +1,63 @@
-export {};
+export const PLUGIN_PERMISSIONS = [
+    "ui.slot.global",
+    "ui.slot.ability-detail",
+    "ui.slot.file-preview",
+    "ui.slot.activity-tab",
+    "ui.slot.input-action",
+    "ui.slot.message",
+    "ui.slot.tool-call",
+    "ui.slot.turn-card",
+    "ui.slot.workspace-view",
+    "ui.slot.new-session-context",
+    "ui.shortcuts.register",
+    "conversation.draft.read",
+    "ui.file-explorer.decorations",
+    "ui.file-explorer.context-menu",
+    "ui.file-explorer.toolbar",
+    "workspace.read",
+    "agent.session.read",
+    "agent.session.write",
+    "agent.command.run",
+    "agent.command.spawn",
+    "capture.offscreen",
+    "browser.read",
+    "browser.open",
+    "browser.interact",
+    "browser.profile.persist",
+    "browser.attach",
+    "browser.runtime.manage",
+    "agent.systemPrompt.read",
+    "agent.systemPrompt.write",
+    "agent.systemPrompt.fullControl",
+    "agent.skills.control",
+    "agent.mcp.control",
+    "agent.tools.control",
+    "agent.tools.register",
+    "agent.toolHandler.execute",
+    "agent.hooks.register",
+    "agent.hookHandler.execute",
+    "agent.state.read",
+    "agent.state.write",
+    "agent.continuation.register",
+    "agent.runtime.configure",
+    "app.actions.register",
+    "app.actionHandler.execute",
+    "ai.models.list",
+    "ai.complete",
+    "models.manage",
+    "fs.read",
+    "fs.write",
+    "network.fetch",
+    "storage.read",
+    "storage.write",
+    "media.generate",
+    "media.provider.register",
+    "ai.ocr.recognize",
+    "ai.ocr.provider.register",
+    "settings.read",
+    "settings.write",
+    "secrets.read",
+    "secrets.write",
+    "shell.openExternal",
+];
 //# sourceMappingURL=permissions.js.map

package/dist/permissions.js.map

@@ -1 +1 @@
-{"version":3,"file":"permissions.js","sourceRoot":"","sources":["../src/permissions.ts"],"names":[],"mappings":"","sourcesContent":["export type PluginPermission =\n\t| \"ui.slot.global\"\n\t| \"ui.slot.file-preview\"\n\t| \"ui.slot.activity-tab\"\n\t| \"ui.slot.input-action\"\n\t| \"ui.slot.message\"\n\t| \"ui.slot.tool-call\"\n\t| \"ui.slot.turn-card\"\n\t| \"ui.shortcuts.register\"\n\t| \"ui.file-explorer.decorations\"\n\t| \"ui.file-explorer.context-menu\"\n\t| \"ui.file-explorer.toolbar\"\n\t| \"workspace.read\"\n\t| \"agent.session.read\"\n\t| \"agent.session.write\"\n\t| \"agent.command.run\"\n\t| \"agent.command.spawn\"\n\t| \"agent.systemPrompt.read\"\n\t| \"agent.systemPrompt.write\"\n\t| \"agent.systemPrompt.fullControl\"\n\t| \"agent.skills.control\"\n\t| \"agent.mcp.control\"\n\t| \"agent.tools.control\"\n\t| \"agent.tools.register\"\n\t| \"agent.toolHandler.execute\"\n\t| \"agent.state.read\"\n\t| \"agent.state.write\"\n\t| \"agent.continuation.register\"\n\t| \"agent.runtime.configure\"\n\t| \"app.actions.register\"\n\t| \"app.actionHandler.execute\"\n\t| \"fs.read\"\n\t| \"fs.write\"\n\t| \"network.fetch\"\n\t| \"storage.read\"\n\t| \"storage.write\"\n\t| \"settings.read\"\n\t| \"settings.write\";\n"]}
+{"version":3,"file":"permissions.js","sourceRoot":"","sources":["../src/permissions.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,kBAAkB,GAAG;IACjC,gBAAgB;IAChB,wBAAwB;IACxB,sBAAsB;IACtB,sBAAsB;IACtB,sBAAsB;IACtB,iBAAiB;IACjB,mBAAmB;IACnB,mBAAmB;IACnB,wBAAwB;IACxB,6BAA6B;IAC7B,uBAAuB;IACvB,yBAAyB;IACzB,8BAA8B;IAC9B,+BAA+B;IAC/B,0BAA0B;IAC1B,gBAAgB;IAChB,oBAAoB;IACpB,qBAAqB;IACrB,mBAAmB;IACnB,qBAAqB;IACrB,mBAAmB;IACnB,cAAc;IACd,cAAc;IACd,kBAAkB;IAClB,yBAAyB;IACzB,gBAAgB;IAChB,wBAAwB;IACxB,yBAAyB;IACzB,0BAA0B;IAC1B,gCAAgC;IAChC,sBAAsB;IACtB,mBAAmB;IACnB,qBAAqB;IACrB,sBAAsB;IACtB,2BAA2B;IAC3B,sBAAsB;IACtB,2BAA2B;IAC3B,kBAAkB;IAClB,mBAAmB;IACnB,6BAA6B;IAC7B,yBAAyB;IACzB,sBAAsB;IACtB,2BAA2B;IAC3B,gBAAgB;IAChB,aAAa;IACb,eAAe;IACf,SAAS;IACT,UAAU;IACV,eAAe;IACf,cAAc;IACd,eAAe;IACf,gBAAgB;IAChB,yBAAyB;IACzB,kBAAkB;IAClB,0BAA0B;IAC1B,eAAe;IACf,gBAAgB;IAChB,cAAc;IACd,eAAe;IACf,oBAAoB;CACX,CAAC","sourcesContent":["export const PLUGIN_PERMISSIONS = [\n\t\"ui.slot.global\",\n\t\"ui.slot.ability-detail\",\n\t\"ui.slot.file-preview\",\n\t\"ui.slot.activity-tab\",\n\t\"ui.slot.input-action\",\n\t\"ui.slot.message\",\n\t\"ui.slot.tool-call\",\n\t\"ui.slot.turn-card\",\n\t\"ui.slot.workspace-view\",\n\t\"ui.slot.new-session-context\",\n\t\"ui.shortcuts.register\",\n\t\"conversation.draft.read\",\n\t\"ui.file-explorer.decorations\",\n\t\"ui.file-explorer.context-menu\",\n\t\"ui.file-explorer.toolbar\",\n\t\"workspace.read\",\n\t\"agent.session.read\",\n\t\"agent.session.write\",\n\t\"agent.command.run\",\n\t\"agent.command.spawn\",\n\t\"capture.offscreen\",\n\t\"browser.read\",\n\t\"browser.open\",\n\t\"browser.interact\",\n\t\"browser.profile.persist\",\n\t\"browser.attach\",\n\t\"browser.runtime.manage\",\n\t\"agent.systemPrompt.read\",\n\t\"agent.systemPrompt.write\",\n\t\"agent.systemPrompt.fullControl\",\n\t\"agent.skills.control\",\n\t\"agent.mcp.control\",\n\t\"agent.tools.control\",\n\t\"agent.tools.register\",\n\t\"agent.toolHandler.execute\",\n\t\"agent.hooks.register\",\n\t\"agent.hookHandler.execute\",\n\t\"agent.state.read\",\n\t\"agent.state.write\",\n\t\"agent.continuation.register\",\n\t\"agent.runtime.configure\",\n\t\"app.actions.register\",\n\t\"app.actionHandler.execute\",\n\t\"ai.models.list\",\n\t\"ai.complete\",\n\t\"models.manage\",\n\t\"fs.read\",\n\t\"fs.write\",\n\t\"network.fetch\",\n\t\"storage.read\",\n\t\"storage.write\",\n\t\"media.generate\",\n\t\"media.provider.register\",\n\t\"ai.ocr.recognize\",\n\t\"ai.ocr.provider.register\",\n\t\"settings.read\",\n\t\"settings.write\",\n\t\"secrets.read\",\n\t\"secrets.write\",\n\t\"shell.openExternal\",\n] as const;\n\nexport type PluginPermission = (typeof PLUGIN_PERMISSIONS)[number];\n"]}

package/dist/prompt-attachment.d.ts

@@ -1,14 +1,38 @@
+export type PluginPromptContextJsonValue = null | boolean | number | string | PluginPromptContextJsonValue[] | {
+    [key: string]: PluginPromptContextJsonValue;
+};
+/** Versioned, JSON-safe application state attached to an outgoing prompt. */
+export interface PluginPromptContext<TPayload extends object = object> {
+    /** Namespaced context contract, for example `vetta.content-creation.node-selection`. */
+    schema: string;
+    version: number;
+    payload: TPayload;
+}
+/**
+ * Validate a plugin-owned context before handing it to the host. The generic
+ * preserves the plugin's domain type while the runtime guard enforces a
+ * bounded, serializable cross-plugin contract.
+ */
+export declare function definePluginPromptContext<TPayload extends object>(context: PluginPromptContext<TPayload>): PluginPromptContext<TPayload>;
 /**
- * One-shot plugin-owned context attached to the next outgoing prompt.
- *
- * The host renders only the label/icon, merges metadata and hidden instructions
- * at send time, then clears the attachment. Domain payloads stay in plugin
- * storage or out-of-band references.
+ * Plugin-owned context shown in the input bar and attached to outgoing prompts.
+ * Legacy metadata/instructions remain supported; new domain data should use
+ * the structured `context` field instead of encoding state in instructions.
  */
-export interface PluginPromptAttachment {
+export interface PluginPromptAttachment<TPayload extends object = object> {
     id: string;
     label: string;
+    /**
+     * 附件里的条目，宿主逐条渲染成一枚名字。省略时就是 `[label]`。
+     *
+     * 存在的理由是一次附件常常指向多个对象（三个设计画框、两个节点），把它们挤进
+     * 一条 label 就只剩「3 个画框」这种数不出是哪几个的说法。
+     */
+    labels?: string[];
     icon?: string;
+    /** Defaults to `once`; `sticky` remains attached until explicitly cleared. */
+    lifecycle?: "once" | "sticky";
+    context?: PluginPromptContext<TPayload>;
     instructions?: string[];
     metadata?: Record<string, unknown>;
 }

package/dist/prompt-attachment.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"prompt-attachment.d.ts","sourceRoot":"","sources":["../src/prompt-attachment.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,MAAM,WAAW,sBAAsB;IACtC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC","sourcesContent":["/**\n * One-shot plugin-owned context attached to the next outgoing prompt.\n *\n * The host renders only the label/icon, merges metadata and hidden instructions\n * at send time, then clears the attachment. Domain payloads stay in plugin\n * storage or out-of-band references.\n */\nexport interface PluginPromptAttachment {\n\tid: string;\n\tlabel: string;\n\ticon?: string;\n\tinstructions?: string[];\n\tmetadata?: Record<string, unknown>;\n}\n"]}
+{"version":3,"file":"prompt-attachment.d.ts","sourceRoot":"","sources":["../src/prompt-attachment.ts"],"names":[],"mappings":"AAcA,MAAM,MAAM,4BAA4B,GACrC,IAAI,GACJ,OAAO,GACP,MAAM,GACN,MAAM,GACN,4BAA4B,EAAE,GAC9B;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,4BAA4B,CAAA;CAAE,CAAC;AAEnD,6EAA6E;AAC7E,MAAM,WAAW,mBAAmB,CAAC,QAAQ,SAAS,MAAM,GAAG,MAAM;IACpE,wFAAwF;IACxF,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,QAAQ,CAAC;CAClB;AAED;;;;GAIG;AACH,wBAAgB,yBAAyB,CAAC,QAAQ,SAAS,MAAM,EAChE,OAAO,EAAE,mBAAmB,CAAC,QAAQ,CAAC,GACpC,mBAAmB,CAAC,QAAQ,CAAC,CAS/B;AAWD;;;;GAIG;AACH,MAAM,WAAW,sBAAsB,CAAC,QAAQ,SAAS,MAAM,GAAG,MAAM;IACvE,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd;;;;;OAKG;IACH,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,8EAA8E;IAC9E,SAAS,CAAC,EAAE,MAAM,GAAG,QAAQ,CAAC;IAC9B,OAAO,CAAC,EAAE,mBAAmB,CAAC,QAAQ,CAAC,CAAC;IACxC,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC","sourcesContent":["import { Type } from \"@sinclair/typebox\";\nimport { Value } from \"@sinclair/typebox/value\";\n\nconst MAX_PLUGIN_PROMPT_CONTEXT_BYTES = 256 * 1024;\n\nconst PluginPromptContextSchema = Type.Object(\n\t{\n\t\tschema: Type.String({ minLength: 1, maxLength: 160 }),\n\t\tversion: Type.Integer({ minimum: 1 }),\n\t\tpayload: Type.Record(Type.String(), Type.Unknown()),\n\t},\n\t{ additionalProperties: false },\n);\n\nexport type PluginPromptContextJsonValue =\n\t| null\n\t| boolean\n\t| number\n\t| string\n\t| PluginPromptContextJsonValue[]\n\t| { [key: string]: PluginPromptContextJsonValue };\n\n/** Versioned, JSON-safe application state attached to an outgoing prompt. */\nexport interface PluginPromptContext<TPayload extends object = object> {\n\t/** Namespaced context contract, for example `vetta.content-creation.node-selection`. */\n\tschema: string;\n\tversion: number;\n\tpayload: TPayload;\n}\n\n/**\n * Validate a plugin-owned context before handing it to the host. The generic\n * preserves the plugin's domain type while the runtime guard enforces a\n * bounded, serializable cross-plugin contract.\n */\nexport function definePluginPromptContext<TPayload extends object>(\n\tcontext: PluginPromptContext<TPayload>,\n): PluginPromptContext<TPayload> {\n\tif (!Value.Check(PluginPromptContextSchema, context) || !isJsonValue(context.payload)) {\n\t\tthrow new Error(\"Plugin prompt context must be a versioned JSON object\");\n\t}\n\tconst serialized = JSON.stringify(context);\n\tif (new TextEncoder().encode(serialized).byteLength > MAX_PLUGIN_PROMPT_CONTEXT_BYTES) {\n\t\tthrow new Error(`Plugin prompt context exceeds ${MAX_PLUGIN_PROMPT_CONTEXT_BYTES} bytes`);\n\t}\n\treturn context;\n}\n\nfunction isJsonValue(value: unknown): value is PluginPromptContextJsonValue {\n\tif (value === null || typeof value === \"string\" || typeof value === \"boolean\") return true;\n\tif (typeof value === \"number\") return Number.isFinite(value);\n\tif (Array.isArray(value)) return value.every(isJsonValue);\n\tif (typeof value !== \"object\") return false;\n\tconst prototype = Object.getPrototypeOf(value);\n\treturn (prototype === Object.prototype || prototype === null) && Object.values(value).every(isJsonValue);\n}\n\n/**\n * Plugin-owned context shown in the input bar and attached to outgoing prompts.\n * Legacy metadata/instructions remain supported; new domain data should use\n * the structured `context` field instead of encoding state in instructions.\n */\nexport interface PluginPromptAttachment<TPayload extends object = object> {\n\tid: string;\n\tlabel: string;\n\t/**\n\t * 附件里的条目，宿主逐条渲染成一枚名字。省略时就是 `[label]`。\n\t *\n\t * 存在的理由是一次附件常常指向多个对象（三个设计画框、两个节点），把它们挤进\n\t * 一条 label 就只剩「3 个画框」这种数不出是哪几个的说法。\n\t */\n\tlabels?: string[];\n\ticon?: string;\n\t/** Defaults to `once`; `sticky` remains attached until explicitly cleared. */\n\tlifecycle?: \"once\" | \"sticky\";\n\tcontext?: PluginPromptContext<TPayload>;\n\tinstructions?: string[];\n\tmetadata?: Record<string, unknown>;\n}\n"]}

package/dist/prompt-attachment.js

@@ -1,2 +1,36 @@
-export {};
+import { Type } from "@sinclair/typebox";
+import { Value } from "@sinclair/typebox/value";
+const MAX_PLUGIN_PROMPT_CONTEXT_BYTES = 256 * 1024;
+const PluginPromptContextSchema = Type.Object({
+    schema: Type.String({ minLength: 1, maxLength: 160 }),
+    version: Type.Integer({ minimum: 1 }),
+    payload: Type.Record(Type.String(), Type.Unknown()),
+}, { additionalProperties: false });
+/**
+ * Validate a plugin-owned context before handing it to the host. The generic
+ * preserves the plugin's domain type while the runtime guard enforces a
+ * bounded, serializable cross-plugin contract.
+ */
+export function definePluginPromptContext(context) {
+    if (!Value.Check(PluginPromptContextSchema, context) || !isJsonValue(context.payload)) {
+        throw new Error("Plugin prompt context must be a versioned JSON object");
+    }
+    const serialized = JSON.stringify(context);
+    if (new TextEncoder().encode(serialized).byteLength > MAX_PLUGIN_PROMPT_CONTEXT_BYTES) {
+        throw new Error(`Plugin prompt context exceeds ${MAX_PLUGIN_PROMPT_CONTEXT_BYTES} bytes`);
+    }
+    return context;
+}
+function isJsonValue(value) {
+    if (value === null || typeof value === "string" || typeof value === "boolean")
+        return true;
+    if (typeof value === "number")
+        return Number.isFinite(value);
+    if (Array.isArray(value))
+        return value.every(isJsonValue);
+    if (typeof value !== "object")
+        return false;
+    const prototype = Object.getPrototypeOf(value);
+    return (prototype === Object.prototype || prototype === null) && Object.values(value).every(isJsonValue);
+}
 //# sourceMappingURL=prompt-attachment.js.map

package/dist/prompt-attachment.js.map

@@ -1 +1 @@
-{"version":3,"file":"prompt-attachment.js","sourceRoot":"","sources":["../src/prompt-attachment.ts"],"names":[],"mappings":"","sourcesContent":["/**\n * One-shot plugin-owned context attached to the next outgoing prompt.\n *\n * The host renders only the label/icon, merges metadata and hidden instructions\n * at send time, then clears the attachment. Domain payloads stay in plugin\n * storage or out-of-band references.\n */\nexport interface PluginPromptAttachment {\n\tid: string;\n\tlabel: string;\n\ticon?: string;\n\tinstructions?: string[];\n\tmetadata?: Record<string, unknown>;\n}\n"]}
+{"version":3,"file":"prompt-attachment.js","sourceRoot":"","sources":["../src/prompt-attachment.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,MAAM,yBAAyB,CAAC;AAEhD,MAAM,+BAA+B,GAAG,GAAG,GAAG,IAAI,CAAC;AAEnD,MAAM,yBAAyB,GAAG,IAAI,CAAC,MAAM,CAC5C;IACC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;IACrD,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;IACrC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;CACnD,EACD,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAC/B,CAAC;AAkBF;;;;GAIG;AACH,MAAM,UAAU,yBAAyB,CACxC,OAAsC,EACN;IAChC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,yBAAyB,EAAE,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACvF,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC1E,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IAC3C,IAAI,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,UAAU,GAAG,+BAA+B,EAAE,CAAC;QACvF,MAAM,IAAI,KAAK,CAAC,iCAAiC,+BAA+B,QAAQ,CAAC,CAAC;IAC3F,CAAC;IACD,OAAO,OAAO,CAAC;AAAA,CACf;AAED,SAAS,WAAW,CAAC,KAAc,EAAyC;IAC3E,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAC3F,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC7D,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAC1D,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,MAAM,SAAS,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IAC/C,OAAO,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS,IAAI,SAAS,KAAK,IAAI,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;AAAA,CACzG","sourcesContent":["import { Type } from \"@sinclair/typebox\";\nimport { Value } from \"@sinclair/typebox/value\";\n\nconst MAX_PLUGIN_PROMPT_CONTEXT_BYTES = 256 * 1024;\n\nconst PluginPromptContextSchema = Type.Object(\n\t{\n\t\tschema: Type.String({ minLength: 1, maxLength: 160 }),\n\t\tversion: Type.Integer({ minimum: 1 }),\n\t\tpayload: Type.Record(Type.String(), Type.Unknown()),\n\t},\n\t{ additionalProperties: false },\n);\n\nexport type PluginPromptContextJsonValue =\n\t| null\n\t| boolean\n\t| number\n\t| string\n\t| PluginPromptContextJsonValue[]\n\t| { [key: string]: PluginPromptContextJsonValue };\n\n/** Versioned, JSON-safe application state attached to an outgoing prompt. */\nexport interface PluginPromptContext<TPayload extends object = object> {\n\t/** Namespaced context contract, for example `vetta.content-creation.node-selection`. */\n\tschema: string;\n\tversion: number;\n\tpayload: TPayload;\n}\n\n/**\n * Validate a plugin-owned context before handing it to the host. The generic\n * preserves the plugin's domain type while the runtime guard enforces a\n * bounded, serializable cross-plugin contract.\n */\nexport function definePluginPromptContext<TPayload extends object>(\n\tcontext: PluginPromptContext<TPayload>,\n): PluginPromptContext<TPayload> {\n\tif (!Value.Check(PluginPromptContextSchema, context) || !isJsonValue(context.payload)) {\n\t\tthrow new Error(\"Plugin prompt context must be a versioned JSON object\");\n\t}\n\tconst serialized = JSON.stringify(context);\n\tif (new TextEncoder().encode(serialized).byteLength > MAX_PLUGIN_PROMPT_CONTEXT_BYTES) {\n\t\tthrow new Error(`Plugin prompt context exceeds ${MAX_PLUGIN_PROMPT_CONTEXT_BYTES} bytes`);\n\t}\n\treturn context;\n}\n\nfunction isJsonValue(value: unknown): value is PluginPromptContextJsonValue {\n\tif (value === null || typeof value === \"string\" || typeof value === \"boolean\") return true;\n\tif (typeof value === \"number\") return Number.isFinite(value);\n\tif (Array.isArray(value)) return value.every(isJsonValue);\n\tif (typeof value !== \"object\") return false;\n\tconst prototype = Object.getPrototypeOf(value);\n\treturn (prototype === Object.prototype || prototype === null) && Object.values(value).every(isJsonValue);\n}\n\n/**\n * Plugin-owned context shown in the input bar and attached to outgoing prompts.\n * Legacy metadata/instructions remain supported; new domain data should use\n * the structured `context` field instead of encoding state in instructions.\n */\nexport interface PluginPromptAttachment<TPayload extends object = object> {\n\tid: string;\n\tlabel: string;\n\t/**\n\t * 附件里的条目，宿主逐条渲染成一枚名字。省略时就是 `[label]`。\n\t *\n\t * 存在的理由是一次附件常常指向多个对象（三个设计画框、两个节点），把它们挤进\n\t * 一条 label 就只剩「3 个画框」这种数不出是哪几个的说法。\n\t */\n\tlabels?: string[];\n\ticon?: string;\n\t/** Defaults to `once`; `sticky` remains attached until explicitly cleared. */\n\tlifecycle?: \"once\" | \"sticky\";\n\tcontext?: PluginPromptContext<TPayload>;\n\tinstructions?: string[];\n\tmetadata?: Record<string, unknown>;\n}\n"]}

package/dist/quickjs.d.ts

@@ -0,0 +1,147 @@
+import type { ConversationScenario } from "./scenario.js";
+import type { PluginNetworkRequest, PluginNetworkResponse } from "./network.js";
+import type { PluginPutBlobInput, PluginStoredBlob, PluginStoredBlobRef } from "./storage.js";
+import type { PluginActivityTabRetention } from "./ui.js";
+export type PluginDeclarativeTextTone = "default" | "muted" | "success" | "warning" | "danger";
+export interface PluginDeclarativeStack {
+    type: "stack";
+    direction?: "vertical" | "horizontal";
+    gap?: "small" | "medium" | "large";
+    children: PluginDeclarativeNode[];
+}
+export interface PluginDeclarativeSection {
+    type: "section";
+    title?: string;
+    description?: string;
+    children: PluginDeclarativeNode[];
+}
+export interface PluginDeclarativeText {
+    type: "text";
+    text: string;
+    style?: "body" | "heading" | "caption" | "code";
+    tone?: PluginDeclarativeTextTone;
+}
+export interface PluginDeclarativeButton {
+    type: "button";
+    label: string;
+    action: string;
+    variant?: "primary" | "secondary" | "outline" | "destructive";
+    disabled?: boolean;
+}
+export interface PluginDeclarativeInput {
+    type: "input";
+    action: string;
+    label?: string;
+    value?: string;
+    placeholder?: string;
+    inputType?: "text" | "password" | "number";
+    disabled?: boolean;
+}
+export interface PluginDeclarativeTextarea {
+    type: "textarea";
+    action: string;
+    label?: string;
+    value?: string;
+    placeholder?: string;
+    disabled?: boolean;
+}
+export interface PluginDeclarativeSelectOption {
+    value: string;
+    label: string;
+}
+export interface PluginDeclarativeSelect {
+    type: "select";
+    action: string;
+    label?: string;
+    value?: string;
+    placeholder?: string;
+    options: PluginDeclarativeSelectOption[];
+    disabled?: boolean;
+}
+export interface PluginDeclarativeSwitch {
+    type: "switch";
+    action: string;
+    label: string;
+    checked?: boolean;
+    disabled?: boolean;
+}
+export interface PluginDeclarativeDivider {
+    type: "divider";
+}
+/** Serializable UI rendered exclusively with host-owned components. */
+export type PluginDeclarativeNode = PluginDeclarativeStack | PluginDeclarativeSection | PluginDeclarativeText | PluginDeclarativeButton | PluginDeclarativeInput | PluginDeclarativeTextarea | PluginDeclarativeSelect | PluginDeclarativeSwitch | PluginDeclarativeDivider;
+export interface PluginQuickJsActivityTab {
+    id: string;
+    label: string;
+    view: PluginDeclarativeNode;
+    scope_use?: readonly ConversationScenario[];
+    initiallyVisible?: boolean;
+    /** Defaults to `"warm"`; see PluginActivityTabContribution. */
+    retention?: PluginActivityTabRetention;
+}
+export interface PluginDeclarativeActionEvent {
+    tabId: string;
+    action: string;
+    kind: "press" | "change";
+    value?: string | number | boolean;
+}
+/**
+ * Public contract exposed as the frozen `vetta` global inside a QuickJS plugin.
+ * QuickJS entry scripts are classic scripts and must not import host modules.
+ */
+export interface PluginQuickJsApi {
+    activate(handler: (context: PluginQuickJsContext) => void): void;
+    deactivate(handler: () => void): void;
+}
+export interface PluginQuickJsContext {
+    plugin: {
+        id: string;
+        version: string;
+        iconUrl?: string;
+    };
+    permissions: {
+        has(permission: string): boolean;
+    };
+    ui: {
+        registerActivityTab(contribution: PluginQuickJsActivityTab): void;
+        updateActivityTab(tabId: string, view: PluginDeclarativeNode): void;
+        onAction(action: string, handler: (event: PluginDeclarativeActionEvent) => void | Promise<void>): void;
+        openActivityTab(tabId: string, options?: {
+            width?: number | "max";
+            cwd?: string;
+        }): void;
+        setActivityTabVisible(tabId: string, visible: boolean, options?: {
+            cwd?: string;
+        }): void;
+        notify(options: {
+            message: string;
+            title?: string;
+            variant?: "info" | "success" | "warning" | "error";
+            durationMs?: number;
+        }): void;
+    };
+    network: {
+        request<T = unknown>(request: PluginNetworkRequest): Promise<PluginNetworkResponse<T>>;
+    };
+    storage: {
+        readJson<T = unknown>(key: string): Promise<T | null>;
+        writeJson(key: string, value: unknown): Promise<void>;
+        list(prefix?: string): Promise<string[]>;
+        readFile(path: string): Promise<string | null>;
+        writeFile(path: string, data: string): Promise<void>;
+        putBlob(input: PluginPutBlobInput): Promise<PluginStoredBlobRef>;
+        readBlob(id: string): Promise<PluginStoredBlob | null>;
+        getBlobRef(id: string): Promise<PluginStoredBlobRef | null>;
+    };
+    settings: {
+        get<T = unknown>(key: string): T | undefined;
+        getAll(): Record<string, unknown>;
+        onChange(handler: (values: Record<string, unknown>) => void): void;
+    };
+    i18n: {
+        locale: string;
+        t(key: string, params?: Record<string, string | number>): Promise<string>;
+        onChange(handler: (locale: string) => void): void;
+    };
+}
+//# sourceMappingURL=quickjs.d.ts.map

package/dist/quickjs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"quickjs.d.ts","sourceRoot":"","sources":["../src/quickjs.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAC1D,OAAO,KAAK,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AAChF,OAAO,KAAK,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAC9F,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,SAAS,CAAC;AAE1D,MAAM,MAAM,yBAAyB,GAAG,SAAS,GAAG,OAAO,GAAG,SAAS,GAAG,SAAS,GAAG,QAAQ,CAAC;AAE/F,MAAM,WAAW,sBAAsB;IACtC,IAAI,EAAE,OAAO,CAAC;IACd,SAAS,CAAC,EAAE,UAAU,GAAG,YAAY,CAAC;IACtC,GAAG,CAAC,EAAE,OAAO,GAAG,QAAQ,GAAG,OAAO,CAAC;IACnC,QAAQ,EAAE,qBAAqB,EAAE,CAAC;CAClC;AAED,MAAM,WAAW,wBAAwB;IACxC,IAAI,EAAE,SAAS,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,qBAAqB,EAAE,CAAC;CAClC;AAED,MAAM,WAAW,qBAAqB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,GAAG,MAAM,CAAC;IAChD,IAAI,CAAC,EAAE,yBAAyB,CAAC;CACjC;AAED,MAAM,WAAW,uBAAuB;IACvC,IAAI,EAAE,QAAQ,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,SAAS,GAAG,WAAW,GAAG,SAAS,GAAG,aAAa,CAAC;IAC9D,QAAQ,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,sBAAsB;IACtC,IAAI,EAAE,OAAO,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,GAAG,UAAU,GAAG,QAAQ,CAAC;IAC3C,QAAQ,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,yBAAyB;IACzC,IAAI,EAAE,UAAU,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,6BAA6B;IAC7C,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,uBAAuB;IACvC,IAAI,EAAE,QAAQ,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,6BAA6B,EAAE,CAAC;IACzC,QAAQ,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,uBAAuB;IACvC,IAAI,EAAE,QAAQ,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,wBAAwB;IACxC,IAAI,EAAE,SAAS,CAAC;CAChB;AAED,uEAAuE;AACvE,MAAM,MAAM,qBAAqB,GAC9B,sBAAsB,GACtB,wBAAwB,GACxB,qBAAqB,GACrB,uBAAuB,GACvB,sBAAsB,GACtB,yBAAyB,GACzB,uBAAuB,GACvB,uBAAuB,GACvB,wBAAwB,CAAC;AAE5B,MAAM,WAAW,wBAAwB;IACxC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,qBAAqB,CAAC;IAC5B,SAAS,CAAC,EAAE,SAAS,oBAAoB,EAAE,CAAC;IAC5C,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,+DAA+D;IAC/D,SAAS,CAAC,EAAE,0BAA0B,CAAC;CACvC;AAED,MAAM,WAAW,4BAA4B;IAC5C,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,OAAO,GAAG,QAAQ,CAAC;IACzB,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;CAClC;AAED;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAChC,QAAQ,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE,oBAAoB,KAAK,IAAI,GAAG,IAAI,CAAC;IACjE,UAAU,CAAC,OAAO,EAAE,MAAM,IAAI,GAAG,IAAI,CAAC;CACtC;AAED,MAAM,WAAW,oBAAoB;IACpC,MAAM,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC1D,WAAW,EAAE;QAAE,GAAG,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,CAAC;IAClD,EAAE,EAAE;QACH,mBAAmB,CAAC,YAAY,EAAE,wBAAwB,GAAG,IAAI,CAAC;QAClE,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,qBAAqB,GAAG,IAAI,CAAC;QACpE,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,4BAA4B,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;QACvG,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;YAAE,KAAK,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC;YAAC,GAAG,CAAC,EAAE,MAAM,CAAA;SAAE,GAAG,IAAI,CAAC;QACzF,qBAAqB,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE;YAAE,GAAG,CAAC,EAAE,MAAM,CAAA;SAAE,GAAG,IAAI,CAAC;QACzF,MAAM,CAAC,OAAO,EAAE;YACf,OAAO,EAAE,MAAM,CAAC;YAChB,KAAK,CAAC,EAAE,MAAM,CAAC;YACf,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,GAAG,OAAO,CAAC;YACnD,UAAU,CAAC,EAAE,MAAM,CAAC;SACpB,GAAG,IAAI,CAAC;KACT,CAAC;IACF,OAAO,EAAE;QACR,OAAO,CAAC,CAAC,GAAG,OAAO,EAAE,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,CAAC;KACvF,CAAC;IACF,OAAO,EAAE;QACR,QAAQ,CAAC,CAAC,GAAG,OAAO,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;QACtD,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QACtD,IAAI,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QACzC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;QAC/C,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QACrD,OAAO,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;QACjE,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAAC;QACvD,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAAC;KAC5D,CAAC;IACF,QAAQ,EAAE;QACT,GAAG,CAAC,CAAC,GAAG,OAAO,EAAE,GAAG,EAAE,MAAM,GAAG,CAAC,GAAG,SAAS,CAAC;QAC7C,MAAM,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAClC,QAAQ,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,GAAG,IAAI,CAAC;KACnE,CAAC;IACF,IAAI,EAAE;QACL,MAAM,EAAE,MAAM,CAAC;QACf,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;QAC1E,QAAQ,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,IAAI,GAAG,IAAI,CAAC;KAClD,CAAC;CACF","sourcesContent":["import type { ConversationScenario } from \"./scenario.js\";\nimport type { PluginNetworkRequest, PluginNetworkResponse } from \"./network.js\";\nimport type { PluginPutBlobInput, PluginStoredBlob, PluginStoredBlobRef } from \"./storage.js\";\nimport type { PluginActivityTabRetention } from \"./ui.js\";\n\nexport type PluginDeclarativeTextTone = \"default\" | \"muted\" | \"success\" | \"warning\" | \"danger\";\n\nexport interface PluginDeclarativeStack {\n\ttype: \"stack\";\n\tdirection?: \"vertical\" | \"horizontal\";\n\tgap?: \"small\" | \"medium\" | \"large\";\n\tchildren: PluginDeclarativeNode[];\n}\n\nexport interface PluginDeclarativeSection {\n\ttype: \"section\";\n\ttitle?: string;\n\tdescription?: string;\n\tchildren: PluginDeclarativeNode[];\n}\n\nexport interface PluginDeclarativeText {\n\ttype: \"text\";\n\ttext: string;\n\tstyle?: \"body\" | \"heading\" | \"caption\" | \"code\";\n\ttone?: PluginDeclarativeTextTone;\n}\n\nexport interface PluginDeclarativeButton {\n\ttype: \"button\";\n\tlabel: string;\n\taction: string;\n\tvariant?: \"primary\" | \"secondary\" | \"outline\" | \"destructive\";\n\tdisabled?: boolean;\n}\n\nexport interface PluginDeclarativeInput {\n\ttype: \"input\";\n\taction: string;\n\tlabel?: string;\n\tvalue?: string;\n\tplaceholder?: string;\n\tinputType?: \"text\" | \"password\" | \"number\";\n\tdisabled?: boolean;\n}\n\nexport interface PluginDeclarativeTextarea {\n\ttype: \"textarea\";\n\taction: string;\n\tlabel?: string;\n\tvalue?: string;\n\tplaceholder?: string;\n\tdisabled?: boolean;\n}\n\nexport interface PluginDeclarativeSelectOption {\n\tvalue: string;\n\tlabel: string;\n}\n\nexport interface PluginDeclarativeSelect {\n\ttype: \"select\";\n\taction: string;\n\tlabel?: string;\n\tvalue?: string;\n\tplaceholder?: string;\n\toptions: PluginDeclarativeSelectOption[];\n\tdisabled?: boolean;\n}\n\nexport interface PluginDeclarativeSwitch {\n\ttype: \"switch\";\n\taction: string;\n\tlabel: string;\n\tchecked?: boolean;\n\tdisabled?: boolean;\n}\n\nexport interface PluginDeclarativeDivider {\n\ttype: \"divider\";\n}\n\n/** Serializable UI rendered exclusively with host-owned components. */\nexport type PluginDeclarativeNode =\n\t| PluginDeclarativeStack\n\t| PluginDeclarativeSection\n\t| PluginDeclarativeText\n\t| PluginDeclarativeButton\n\t| PluginDeclarativeInput\n\t| PluginDeclarativeTextarea\n\t| PluginDeclarativeSelect\n\t| PluginDeclarativeSwitch\n\t| PluginDeclarativeDivider;\n\nexport interface PluginQuickJsActivityTab {\n\tid: string;\n\tlabel: string;\n\tview: PluginDeclarativeNode;\n\tscope_use?: readonly ConversationScenario[];\n\tinitiallyVisible?: boolean;\n\t/** Defaults to `\"warm\"`; see PluginActivityTabContribution. */\n\tretention?: PluginActivityTabRetention;\n}\n\nexport interface PluginDeclarativeActionEvent {\n\ttabId: string;\n\taction: string;\n\tkind: \"press\" | \"change\";\n\tvalue?: string | number | boolean;\n}\n\n/**\n * Public contract exposed as the frozen `vetta` global inside a QuickJS plugin.\n * QuickJS entry scripts are classic scripts and must not import host modules.\n */\nexport interface PluginQuickJsApi {\n\tactivate(handler: (context: PluginQuickJsContext) => void): void;\n\tdeactivate(handler: () => void): void;\n}\n\nexport interface PluginQuickJsContext {\n\tplugin: { id: string; version: string; iconUrl?: string };\n\tpermissions: { has(permission: string): boolean };\n\tui: {\n\t\tregisterActivityTab(contribution: PluginQuickJsActivityTab): void;\n\t\tupdateActivityTab(tabId: string, view: PluginDeclarativeNode): void;\n\t\tonAction(action: string, handler: (event: PluginDeclarativeActionEvent) => void | Promise<void>): void;\n\t\topenActivityTab(tabId: string, options?: { width?: number | \"max\"; cwd?: string }): void;\n\t\tsetActivityTabVisible(tabId: string, visible: boolean, options?: { cwd?: string }): void;\n\t\tnotify(options: {\n\t\t\tmessage: string;\n\t\t\ttitle?: string;\n\t\t\tvariant?: \"info\" | \"success\" | \"warning\" | \"error\";\n\t\t\tdurationMs?: number;\n\t\t}): void;\n\t};\n\tnetwork: {\n\t\trequest<T = unknown>(request: PluginNetworkRequest): Promise<PluginNetworkResponse<T>>;\n\t};\n\tstorage: {\n\t\treadJson<T = unknown>(key: string): Promise<T | null>;\n\t\twriteJson(key: string, value: unknown): Promise<void>;\n\t\tlist(prefix?: string): Promise<string[]>;\n\t\treadFile(path: string): Promise<string | null>;\n\t\twriteFile(path: string, data: string): Promise<void>;\n\t\tputBlob(input: PluginPutBlobInput): Promise<PluginStoredBlobRef>;\n\t\treadBlob(id: string): Promise<PluginStoredBlob | null>;\n\t\tgetBlobRef(id: string): Promise<PluginStoredBlobRef | null>;\n\t};\n\tsettings: {\n\t\tget<T = unknown>(key: string): T | undefined;\n\t\tgetAll(): Record<string, unknown>;\n\t\tonChange(handler: (values: Record<string, unknown>) => void): void;\n\t};\n\ti18n: {\n\t\tlocale: string;\n\t\tt(key: string, params?: Record<string, string | number>): Promise<string>;\n\t\tonChange(handler: (locale: string) => void): void;\n\t};\n}\n"]}

package/dist/quickjs.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=quickjs.js.map

package/dist/quickjs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"quickjs.js","sourceRoot":"","sources":["../src/quickjs.ts"],"names":[],"mappings":"","sourcesContent":["import type { ConversationScenario } from \"./scenario.js\";\nimport type { PluginNetworkRequest, PluginNetworkResponse } from \"./network.js\";\nimport type { PluginPutBlobInput, PluginStoredBlob, PluginStoredBlobRef } from \"./storage.js\";\nimport type { PluginActivityTabRetention } from \"./ui.js\";\n\nexport type PluginDeclarativeTextTone = \"default\" | \"muted\" | \"success\" | \"warning\" | \"danger\";\n\nexport interface PluginDeclarativeStack {\n\ttype: \"stack\";\n\tdirection?: \"vertical\" | \"horizontal\";\n\tgap?: \"small\" | \"medium\" | \"large\";\n\tchildren: PluginDeclarativeNode[];\n}\n\nexport interface PluginDeclarativeSection {\n\ttype: \"section\";\n\ttitle?: string;\n\tdescription?: string;\n\tchildren: PluginDeclarativeNode[];\n}\n\nexport interface PluginDeclarativeText {\n\ttype: \"text\";\n\ttext: string;\n\tstyle?: \"body\" | \"heading\" | \"caption\" | \"code\";\n\ttone?: PluginDeclarativeTextTone;\n}\n\nexport interface PluginDeclarativeButton {\n\ttype: \"button\";\n\tlabel: string;\n\taction: string;\n\tvariant?: \"primary\" | \"secondary\" | \"outline\" | \"destructive\";\n\tdisabled?: boolean;\n}\n\nexport interface PluginDeclarativeInput {\n\ttype: \"input\";\n\taction: string;\n\tlabel?: string;\n\tvalue?: string;\n\tplaceholder?: string;\n\tinputType?: \"text\" | \"password\" | \"number\";\n\tdisabled?: boolean;\n}\n\nexport interface PluginDeclarativeTextarea {\n\ttype: \"textarea\";\n\taction: string;\n\tlabel?: string;\n\tvalue?: string;\n\tplaceholder?: string;\n\tdisabled?: boolean;\n}\n\nexport interface PluginDeclarativeSelectOption {\n\tvalue: string;\n\tlabel: string;\n}\n\nexport interface PluginDeclarativeSelect {\n\ttype: \"select\";\n\taction: string;\n\tlabel?: string;\n\tvalue?: string;\n\tplaceholder?: string;\n\toptions: PluginDeclarativeSelectOption[];\n\tdisabled?: boolean;\n}\n\nexport interface PluginDeclarativeSwitch {\n\ttype: \"switch\";\n\taction: string;\n\tlabel: string;\n\tchecked?: boolean;\n\tdisabled?: boolean;\n}\n\nexport interface PluginDeclarativeDivider {\n\ttype: \"divider\";\n}\n\n/** Serializable UI rendered exclusively with host-owned components. */\nexport type PluginDeclarativeNode =\n\t| PluginDeclarativeStack\n\t| PluginDeclarativeSection\n\t| PluginDeclarativeText\n\t| PluginDeclarativeButton\n\t| PluginDeclarativeInput\n\t| PluginDeclarativeTextarea\n\t| PluginDeclarativeSelect\n\t| PluginDeclarativeSwitch\n\t| PluginDeclarativeDivider;\n\nexport interface PluginQuickJsActivityTab {\n\tid: string;\n\tlabel: string;\n\tview: PluginDeclarativeNode;\n\tscope_use?: readonly ConversationScenario[];\n\tinitiallyVisible?: boolean;\n\t/** Defaults to `\"warm\"`; see PluginActivityTabContribution. */\n\tretention?: PluginActivityTabRetention;\n}\n\nexport interface PluginDeclarativeActionEvent {\n\ttabId: string;\n\taction: string;\n\tkind: \"press\" | \"change\";\n\tvalue?: string | number | boolean;\n}\n\n/**\n * Public contract exposed as the frozen `vetta` global inside a QuickJS plugin.\n * QuickJS entry scripts are classic scripts and must not import host modules.\n */\nexport interface PluginQuickJsApi {\n\tactivate(handler: (context: PluginQuickJsContext) => void): void;\n\tdeactivate(handler: () => void): void;\n}\n\nexport interface PluginQuickJsContext {\n\tplugin: { id: string; version: string; iconUrl?: string };\n\tpermissions: { has(permission: string): boolean };\n\tui: {\n\t\tregisterActivityTab(contribution: PluginQuickJsActivityTab): void;\n\t\tupdateActivityTab(tabId: string, view: PluginDeclarativeNode): void;\n\t\tonAction(action: string, handler: (event: PluginDeclarativeActionEvent) => void | Promise<void>): void;\n\t\topenActivityTab(tabId: string, options?: { width?: number | \"max\"; cwd?: string }): void;\n\t\tsetActivityTabVisible(tabId: string, visible: boolean, options?: { cwd?: string }): void;\n\t\tnotify(options: {\n\t\t\tmessage: string;\n\t\t\ttitle?: string;\n\t\t\tvariant?: \"info\" | \"success\" | \"warning\" | \"error\";\n\t\t\tdurationMs?: number;\n\t\t}): void;\n\t};\n\tnetwork: {\n\t\trequest<T = unknown>(request: PluginNetworkRequest): Promise<PluginNetworkResponse<T>>;\n\t};\n\tstorage: {\n\t\treadJson<T = unknown>(key: string): Promise<T | null>;\n\t\twriteJson(key: string, value: unknown): Promise<void>;\n\t\tlist(prefix?: string): Promise<string[]>;\n\t\treadFile(path: string): Promise<string | null>;\n\t\twriteFile(path: string, data: string): Promise<void>;\n\t\tputBlob(input: PluginPutBlobInput): Promise<PluginStoredBlobRef>;\n\t\treadBlob(id: string): Promise<PluginStoredBlob | null>;\n\t\tgetBlobRef(id: string): Promise<PluginStoredBlobRef | null>;\n\t};\n\tsettings: {\n\t\tget<T = unknown>(key: string): T | undefined;\n\t\tgetAll(): Record<string, unknown>;\n\t\tonChange(handler: (values: Record<string, unknown>) => void): void;\n\t};\n\ti18n: {\n\t\tlocale: string;\n\t\tt(key: string, params?: Record<string, string | number>): Promise<string>;\n\t\tonChange(handler: (locale: string) => void): void;\n\t};\n}\n"]}

package/dist/secrets.d.ts

@@ -0,0 +1,27 @@
+import type { Disposable } from "./disposable.js";
+/**
+ * Encrypted, per-plugin secret storage (`secrets.read` / `secrets.write`).
+ *
+ * Values are kept in the host credential vault rather than the plugin's private
+ * JSON storage, so API keys and tokens stay encrypted at rest. Ownership is
+ * derived from the calling plugin's capability session: a plugin can only read
+ * and write its own secrets, never another plugin's.
+ *
+ * Use it for credentials only. Ordinary configuration belongs in a plugin file
+ * such as `settings.json`, serialized by the plugin and validated in its own
+ * workspace view (ADR-0105).
+ */
+export interface PluginSecretsApi {
+    /** Resolved secret, or `undefined` when unset or the vault is unavailable. */
+    get(key: string): Promise<string | undefined>;
+    /** Whether a value is stored, without decrypting it. */
+    has(key: string): Promise<boolean>;
+    /** Stored key names only — never the values. */
+    keys(): Promise<string[]>;
+    /** Store a secret. Writing an empty string deletes it. */
+    set(key: string, value: string): Promise<void>;
+    delete(key: string): Promise<void>;
+    /** Fired when this plugin's secrets change, with the affected key names. */
+    onChange(listener: (keys: readonly string[]) => void): Disposable;
+}
+//# sourceMappingURL=secrets.d.ts.map

package/dist/secrets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.d.ts","sourceRoot":"","sources":["../src/secrets.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAElD;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,gBAAgB;IAChC,8EAA8E;IAC9E,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC9C,wDAAwD;IACxD,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACnC,kDAAgD;IAChD,IAAI,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC1B,0DAA0D;IAC1D,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/C,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnC,4EAA4E;IAC5E,QAAQ,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,KAAK,IAAI,GAAG,UAAU,CAAC;CAClE","sourcesContent":["import type { Disposable } from \"./disposable.js\";\n\n/**\n * Encrypted, per-plugin secret storage (`secrets.read` / `secrets.write`).\n *\n * Values are kept in the host credential vault rather than the plugin's private\n * JSON storage, so API keys and tokens stay encrypted at rest. Ownership is\n * derived from the calling plugin's capability session: a plugin can only read\n * and write its own secrets, never another plugin's.\n *\n * Use it for credentials only. Ordinary configuration belongs in a plugin file\n * such as `settings.json`, serialized by the plugin and validated in its own\n * workspace view (ADR-0105).\n */\nexport interface PluginSecretsApi {\n\t/** Resolved secret, or `undefined` when unset or the vault is unavailable. */\n\tget(key: string): Promise<string | undefined>;\n\t/** Whether a value is stored, without decrypting it. */\n\thas(key: string): Promise<boolean>;\n\t/** Stored key names only — never the values. */\n\tkeys(): Promise<string[]>;\n\t/** Store a secret. Writing an empty string deletes it. */\n\tset(key: string, value: string): Promise<void>;\n\tdelete(key: string): Promise<void>;\n\t/** Fired when this plugin's secrets change, with the affected key names. */\n\tonChange(listener: (keys: readonly string[]) => void): Disposable;\n}\n"]}

package/dist/secrets.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=secrets.js.map

package/dist/secrets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.js","sourceRoot":"","sources":["../src/secrets.ts"],"names":[],"mappings":"","sourcesContent":["import type { Disposable } from \"./disposable.js\";\n\n/**\n * Encrypted, per-plugin secret storage (`secrets.read` / `secrets.write`).\n *\n * Values are kept in the host credential vault rather than the plugin's private\n * JSON storage, so API keys and tokens stay encrypted at rest. Ownership is\n * derived from the calling plugin's capability session: a plugin can only read\n * and write its own secrets, never another plugin's.\n *\n * Use it for credentials only. Ordinary configuration belongs in a plugin file\n * such as `settings.json`, serialized by the plugin and validated in its own\n * workspace view (ADR-0105).\n */\nexport interface PluginSecretsApi {\n\t/** Resolved secret, or `undefined` when unset or the vault is unavailable. */\n\tget(key: string): Promise<string | undefined>;\n\t/** Whether a value is stored, without decrypting it. */\n\thas(key: string): Promise<boolean>;\n\t/** Stored key names only — never the values. */\n\tkeys(): Promise<string[]>;\n\t/** Store a secret. Writing an empty string deletes it. */\n\tset(key: string, value: string): Promise<void>;\n\tdelete(key: string): Promise<void>;\n\t/** Fired when this plugin's secrets change, with the affected key names. */\n\tonChange(listener: (keys: readonly string[]) => void): Disposable;\n}\n"]}

package/dist/service-provider.d.ts

@@ -0,0 +1,62 @@
+import type { Disposable } from "./disposable.js";
+export type PluginServicePhase = "disabled" | "installing" | "starting" | "ready" | "stopping" | "stopped" | "failed";
+export interface PluginServiceStatus {
+    serviceId: string;
+    phase: PluginServicePhase;
+    version: string;
+    installed: boolean;
+    message?: string;
+    recentOutput: string;
+}
+export interface PluginServiceConnection {
+    baseUrl: string;
+    /** Present only when the caller explicitly names a credential declared by its own service. */
+    credential?: string;
+}
+export interface PluginServiceHostPlatform {
+    tag: `${"win32" | "darwin" | "linux"}-${"x64" | "arm64"}`;
+}
+export interface PluginServiceArtifactPayload {
+    /** Must match one destination declared for the current platform in plugin.json. */
+    destination: string;
+    /** Base64-encoded archive bytes downloaded and verified by the plugin. */
+    data: string;
+}
+export interface PluginServiceRequest {
+    /** Root-relative path on this plugin-owned loopback service. Absolute URLs are rejected. */
+    path: string;
+    method?: "GET" | "POST" | "PUT" | "PATCH" | "DELETE";
+    credentialId?: string;
+    headers?: Record<string, string>;
+    body?: unknown;
+    responseType?: "json" | "text";
+    timeoutMs?: number;
+}
+export interface PluginServiceResponse<T = unknown> {
+    ok: boolean;
+    status: number;
+    statusText: string;
+    headers: Record<string, string>;
+    body: T;
+}
+export type PluginServiceDataEncoding = "utf8" | "base64";
+export interface PluginServiceApi {
+    /** Host platform used by the plugin to select its own runtime download. */
+    getPlatform(): Promise<PluginServiceHostPlatform>;
+    getStatus(serviceId: string): Promise<PluginServiceStatus>;
+    /** Atomically deploy plugin-downloaded artifacts after host-side safety verification. */
+    install(serviceId: string, artifacts: PluginServiceArtifactPayload[]): Promise<PluginServiceStatus>;
+    start(serviceId: string): Promise<PluginServiceStatus>;
+    stop(serviceId: string): Promise<PluginServiceStatus>;
+    restart(serviceId: string): Promise<PluginServiceStatus>;
+    connection(serviceId: string, credentialId?: string): Promise<PluginServiceConnection>;
+    request<T = unknown>(serviceId: string, request: PluginServiceRequest): Promise<PluginServiceResponse<T>>;
+    /** Read a file from this service's private data directory. Paths are root-relative. */
+    readDataFile(serviceId: string, path: string, encoding?: PluginServiceDataEncoding): Promise<string | null>;
+    /** Atomically replace a file in this service's private data directory. */
+    writeDataFile(serviceId: string, path: string, data: string, encoding?: PluginServiceDataEncoding): Promise<void>;
+    /** Report semantic readiness after the service's domain data has finished loading. */
+    reportReady(serviceId: string, ready: boolean): Promise<PluginServiceStatus>;
+    onStatusChange(listener: (status: PluginServiceStatus) => void): Disposable;
+}
+//# sourceMappingURL=service-provider.d.ts.map

package/dist/service-provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service-provider.d.ts","sourceRoot":"","sources":["../src/service-provider.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAElD,MAAM,MAAM,kBAAkB,GAC3B,UAAU,GACV,YAAY,GACZ,UAAU,GACV,OAAO,GACP,UAAU,GACV,SAAS,GACT,QAAQ,CAAC;AAEZ,MAAM,WAAW,mBAAmB;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,kBAAkB,CAAC;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,uBAAuB;IACvC,OAAO,EAAE,MAAM,CAAC;IAChB,8FAA8F;IAC9F,UAAU,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,yBAAyB;IACzC,GAAG,EAAE,GAAG,OAAO,GAAG,QAAQ,GAAG,OAAO,IAAI,KAAK,GAAG,OAAO,EAAE,CAAC;CAC1D;AAED,MAAM,WAAW,4BAA4B;IAC5C,mFAAmF;IACnF,WAAW,EAAE,MAAM,CAAC;IACpB,0EAA0E;IAC1E,IAAI,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,oBAAoB;IACpC,4FAA4F;IAC5F,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,OAAO,GAAG,QAAQ,CAAC;IACrD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC/B,SAAS,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,qBAAqB,CAAC,CAAC,GAAG,OAAO;IACjD,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,IAAI,EAAE,CAAC,CAAC;CACR;AAED,MAAM,MAAM,yBAAyB,GAAG,MAAM,GAAG,QAAQ,CAAC;AAE1D,MAAM,WAAW,gBAAgB;IAChC,2EAA2E;IAC3E,WAAW,IAAI,OAAO,CAAC,yBAAyB,CAAC,CAAC;IAClD,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAC3D,yFAAyF;IACzF,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,4BAA4B,EAAE,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACpG,KAAK,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACvD,IAAI,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACtD,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACzD,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;IACvF,OAAO,CAAC,CAAC,GAAG,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1G,uFAAuF;IACvF,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,yBAAyB,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC5G,0EAA0E;IAC1E,aAAa,CACZ,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EACZ,QAAQ,CAAC,EAAE,yBAAyB,GAClC,OAAO,CAAC,IAAI,CAAC,CAAC;IACjB,sFAAsF;IACtF,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAC7E,cAAc,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,mBAAmB,KAAK,IAAI,GAAG,UAAU,CAAC;CAC5E","sourcesContent":["import type { Disposable } from \"./disposable.js\";\n\nexport type PluginServicePhase =\n\t| \"disabled\"\n\t| \"installing\"\n\t| \"starting\"\n\t| \"ready\"\n\t| \"stopping\"\n\t| \"stopped\"\n\t| \"failed\";\n\nexport interface PluginServiceStatus {\n\tserviceId: string;\n\tphase: PluginServicePhase;\n\tversion: string;\n\tinstalled: boolean;\n\tmessage?: string;\n\trecentOutput: string;\n}\n\nexport interface PluginServiceConnection {\n\tbaseUrl: string;\n\t/** Present only when the caller explicitly names a credential declared by its own service. */\n\tcredential?: string;\n}\n\nexport interface PluginServiceHostPlatform {\n\ttag: `${\"win32\" | \"darwin\" | \"linux\"}-${\"x64\" | \"arm64\"}`;\n}\n\nexport interface PluginServiceArtifactPayload {\n\t/** Must match one destination declared for the current platform in plugin.json. */\n\tdestination: string;\n\t/** Base64-encoded archive bytes downloaded and verified by the plugin. */\n\tdata: string;\n}\n\nexport interface PluginServiceRequest {\n\t/** Root-relative path on this plugin-owned loopback service. Absolute URLs are rejected. */\n\tpath: string;\n\tmethod?: \"GET\" | \"POST\" | \"PUT\" | \"PATCH\" | \"DELETE\";\n\tcredentialId?: string;\n\theaders?: Record<string, string>;\n\tbody?: unknown;\n\tresponseType?: \"json\" | \"text\";\n\ttimeoutMs?: number;\n}\n\nexport interface PluginServiceResponse<T = unknown> {\n\tok: boolean;\n\tstatus: number;\n\tstatusText: string;\n\theaders: Record<string, string>;\n\tbody: T;\n}\n\nexport type PluginServiceDataEncoding = \"utf8\" | \"base64\";\n\nexport interface PluginServiceApi {\n\t/** Host platform used by the plugin to select its own runtime download. */\n\tgetPlatform(): Promise<PluginServiceHostPlatform>;\n\tgetStatus(serviceId: string): Promise<PluginServiceStatus>;\n\t/** Atomically deploy plugin-downloaded artifacts after host-side safety verification. */\n\tinstall(serviceId: string, artifacts: PluginServiceArtifactPayload[]): Promise<PluginServiceStatus>;\n\tstart(serviceId: string): Promise<PluginServiceStatus>;\n\tstop(serviceId: string): Promise<PluginServiceStatus>;\n\trestart(serviceId: string): Promise<PluginServiceStatus>;\n\tconnection(serviceId: string, credentialId?: string): Promise<PluginServiceConnection>;\n\trequest<T = unknown>(serviceId: string, request: PluginServiceRequest): Promise<PluginServiceResponse<T>>;\n\t/** Read a file from this service's private data directory. Paths are root-relative. */\n\treadDataFile(serviceId: string, path: string, encoding?: PluginServiceDataEncoding): Promise<string | null>;\n\t/** Atomically replace a file in this service's private data directory. */\n\twriteDataFile(\n\t\tserviceId: string,\n\t\tpath: string,\n\t\tdata: string,\n\t\tencoding?: PluginServiceDataEncoding,\n\t): Promise<void>;\n\t/** Report semantic readiness after the service's domain data has finished loading. */\n\treportReady(serviceId: string, ready: boolean): Promise<PluginServiceStatus>;\n\tonStatusChange(listener: (status: PluginServiceStatus) => void): Disposable;\n}\n"]}

package/dist/service-provider.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=service-provider.js.map

package/dist/service-provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service-provider.js","sourceRoot":"","sources":["../src/service-provider.ts"],"names":[],"mappings":"","sourcesContent":["import type { Disposable } from \"./disposable.js\";\n\nexport type PluginServicePhase =\n\t| \"disabled\"\n\t| \"installing\"\n\t| \"starting\"\n\t| \"ready\"\n\t| \"stopping\"\n\t| \"stopped\"\n\t| \"failed\";\n\nexport interface PluginServiceStatus {\n\tserviceId: string;\n\tphase: PluginServicePhase;\n\tversion: string;\n\tinstalled: boolean;\n\tmessage?: string;\n\trecentOutput: string;\n}\n\nexport interface PluginServiceConnection {\n\tbaseUrl: string;\n\t/** Present only when the caller explicitly names a credential declared by its own service. */\n\tcredential?: string;\n}\n\nexport interface PluginServiceHostPlatform {\n\ttag: `${\"win32\" | \"darwin\" | \"linux\"}-${\"x64\" | \"arm64\"}`;\n}\n\nexport interface PluginServiceArtifactPayload {\n\t/** Must match one destination declared for the current platform in plugin.json. */\n\tdestination: string;\n\t/** Base64-encoded archive bytes downloaded and verified by the plugin. */\n\tdata: string;\n}\n\nexport interface PluginServiceRequest {\n\t/** Root-relative path on this plugin-owned loopback service. Absolute URLs are rejected. */\n\tpath: string;\n\tmethod?: \"GET\" | \"POST\" | \"PUT\" | \"PATCH\" | \"DELETE\";\n\tcredentialId?: string;\n\theaders?: Record<string, string>;\n\tbody?: unknown;\n\tresponseType?: \"json\" | \"text\";\n\ttimeoutMs?: number;\n}\n\nexport interface PluginServiceResponse<T = unknown> {\n\tok: boolean;\n\tstatus: number;\n\tstatusText: string;\n\theaders: Record<string, string>;\n\tbody: T;\n}\n\nexport type PluginServiceDataEncoding = \"utf8\" | \"base64\";\n\nexport interface PluginServiceApi {\n\t/** Host platform used by the plugin to select its own runtime download. */\n\tgetPlatform(): Promise<PluginServiceHostPlatform>;\n\tgetStatus(serviceId: string): Promise<PluginServiceStatus>;\n\t/** Atomically deploy plugin-downloaded artifacts after host-side safety verification. */\n\tinstall(serviceId: string, artifacts: PluginServiceArtifactPayload[]): Promise<PluginServiceStatus>;\n\tstart(serviceId: string): Promise<PluginServiceStatus>;\n\tstop(serviceId: string): Promise<PluginServiceStatus>;\n\trestart(serviceId: string): Promise<PluginServiceStatus>;\n\tconnection(serviceId: string, credentialId?: string): Promise<PluginServiceConnection>;\n\trequest<T = unknown>(serviceId: string, request: PluginServiceRequest): Promise<PluginServiceResponse<T>>;\n\t/** Read a file from this service's private data directory. Paths are root-relative. */\n\treadDataFile(serviceId: string, path: string, encoding?: PluginServiceDataEncoding): Promise<string | null>;\n\t/** Atomically replace a file in this service's private data directory. */\n\twriteDataFile(\n\t\tserviceId: string,\n\t\tpath: string,\n\t\tdata: string,\n\t\tencoding?: PluginServiceDataEncoding,\n\t): Promise<void>;\n\t/** Report semantic readiness after the service's domain data has finished loading. */\n\treportReady(serviceId: string, ready: boolean): Promise<PluginServiceStatus>;\n\tonStatusChange(listener: (status: PluginServiceStatus) => void): Disposable;\n}\n"]}

package/dist/storage.d.ts

@@ -12,20 +12,60 @@ export interface PluginPutBlobInput {
     data: string;
     mimeType: string;
 }
+export interface PluginPutBlobFromFileInput {
+    id?: string;
+    file: File;
+    mimeType: string;
+}
+export type PluginStorageEncoding = "utf8" | "base64";
+export interface PluginStorageWrite {
+    path: string;
+    data: string;
+    encoding: PluginStorageEncoding;
+}
+export type PluginStorageChange = ({
+    type: "write";
+} & PluginStorageWrite) | {
+    type: "remove";
+    path: string;
+};
+export interface PluginStorageCommitOptions {
+    expectedRevision?: string;
+}
+export interface PluginStorageCommitResult {
+    revision: string;
+    changedPaths: string[];
+}
+export interface PluginStorageSnapshot {
+    revision: string;
+    files: Record<string, string | null>;
+}
 /**
  * Private persistent storage scoped to the current plugin.
  *
- * JSON keys and file paths are relative to the plugin namespace. Blob bytes are
- * base64 encoded at the bridge boundary and exposed through a host media URL.
+ * Paths are relative to the plugin namespace and are never given an implicit
+ * extension. Text and bytes use an explicit encoding at the bridge boundary;
+ * JSON is a plugin-level serialization choice. `commit()` publishes all file
+ * changes as one revision, and `readSnapshot()` reads several paths from the
+ * same revision. Blob bytes remain a separate media resource API.
  */
 export interface PluginStorageApi {
-    readJson<T>(key: string): Promise<T | null>;
-    writeJson(key: string, value: unknown): Promise<void>;
     list(prefix?: string): Promise<string[]>;
-    readFile(path: string): Promise<string | null>;
-    writeFile(path: string, data: string): Promise<void>;
+    readFile(path: string, encoding: PluginStorageEncoding): Promise<string | null>;
+    writeFile(path: string, data: string, encoding: PluginStorageEncoding): Promise<PluginStorageCommitResult>;
+    /** Atomically publish multiple private-file writes/removals as one plugin-scoped revision. */
+    commit(changes: readonly PluginStorageChange[], options?: PluginStorageCommitOptions): Promise<PluginStorageCommitResult>;
+    /** Read several private files from one committed revision. */
+    readSnapshot(paths: readonly string[], encoding: PluginStorageEncoding): Promise<PluginStorageSnapshot>;
     putBlob(input: PluginPutBlobInput): Promise<PluginStoredBlobRef>;
+    /** Copy a user-selected or dropped filesystem file without carrying its bytes through the renderer. */
+    putBlobFromFile(input: PluginPutBlobFromFileInput): Promise<PluginStoredBlobRef>;
     readBlob(id: string): Promise<PluginStoredBlob | null>;
     getBlobRef(id: string): Promise<PluginStoredBlobRef | null>;
+    /** Permanently delete one blob owned by this plugin namespace. */
+    deleteBlob(id: string): Promise<void>;
 }
+/** Optional JSON convenience helpers. The storage contract itself remains file/bytes based. */
+export declare function readJsonFile<T>(storage: PluginStorageApi, path: string): Promise<T | null>;
+export declare function writeJsonFile(storage: PluginStorageApi, path: string, value: unknown): Promise<PluginStorageCommitResult>;
 //# sourceMappingURL=storage.d.ts.map