@wordrhyme/plugin 0.1.0-alpha.10

package/dist/admin/index.d.ts

@@ -0,0 +1,19 @@
+import * as _trpc_client from '@trpc/client';
+
+declare function createBrowserTrpcClient<TRouter>(url: string): _trpc_client.TRPCClient<TRouter>;
+type BrowserTrpcClient<TRouter> = ReturnType<typeof createBrowserTrpcClient<TRouter>>;
+/**
+ * Factory to create a typed tRPC client for a plugin's admin UI.
+ * Automatically resolves the plugin's normalized ID to the correct URL prefix.
+ *
+ * Usage: `const api = createPluginTrpcClient<ShopRouter>('shop')`
+ */
+declare function createPluginTrpcClient<TRouter>(pluginId: string): BrowserTrpcClient<TRouter>;
+/**
+ * Factory to create a typed tRPC client for the admin host root router.
+ *
+ * Usage: `const hostApi = createHostTrpcClient<AppRouter>()`
+ */
+declare function createHostTrpcClient<TRouter>(): _trpc_client.TRPCClient<TRouter>;
+
+export { createHostTrpcClient, createPluginTrpcClient };

package/dist/admin/index.js

@@ -0,0 +1,42 @@
+import {
+  CLIENT_TIME_ZONE_HEADER,
+  getClientTimeZone
+} from "../chunk-6GDCFR67.js";
+
+// src/admin/trpc-client.ts
+import { createTRPCClient, httpBatchLink } from "@trpc/client";
+function createBrowserTrpcClient(url) {
+  return createTRPCClient({
+    links: [
+      httpBatchLink({
+        url,
+        headers() {
+          const timezone = getClientTimeZone();
+          return timezone ? { [CLIENT_TIME_ZONE_HEADER]: timezone } : {};
+        },
+        fetch(url2, options) {
+          return globalThis.fetch(url2, {
+            ...options,
+            credentials: "include"
+          });
+        }
+      })
+    ]
+  });
+}
+function normalizePluginId(pluginId) {
+  return pluginId.replace(/^com\.wordrhyme\./, "").replace(/\./g, "-");
+}
+function createPluginTrpcClient(pluginId) {
+  const normalizedId = normalizePluginId(pluginId);
+  const rootClient = createBrowserTrpcClient("/trpc");
+  return rootClient.pluginApis[normalizedId];
+}
+function createHostTrpcClient() {
+  return createBrowserTrpcClient("/trpc");
+}
+export {
+  createHostTrpcClient,
+  createPluginTrpcClient
+};
+//# sourceMappingURL=index.js.map

package/dist/admin/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/admin/trpc-client.ts"],"sourcesContent":["import { createTRPCClient, httpBatchLink } from '@trpc/client';\nimport { CLIENT_TIME_ZONE_HEADER, getClientTimeZone } from '../time';\n\nfunction createBrowserTrpcClient<TRouter>(url: string) {\n    // @ts-expect-error -- generic factory; Router constraint is satisfied by consumer's type argument\n    return createTRPCClient<TRouter>({\n        links: [\n            httpBatchLink({\n                url,\n                headers() {\n                    const timezone = getClientTimeZone();\n                    return timezone ? { [CLIENT_TIME_ZONE_HEADER]: timezone } : {};\n                },\n                fetch(url, options) {\n                    return globalThis.fetch(url as Parameters<typeof globalThis.fetch>[0], {\n                        ...(options as RequestInit),\n                        credentials: 'include',\n                    });\n                },\n            }),\n        ],\n    });\n}\n\ntype BrowserTrpcClient<TRouter> = ReturnType<typeof createBrowserTrpcClient<TRouter>>;\n\nfunction normalizePluginId(pluginId: string) {\n    return pluginId.replace(/^com\\.wordrhyme\\./, '').replace(/\\./g, '-');\n}\n\n/**\n * Factory to create a typed tRPC client for a plugin's admin UI.\n * Automatically resolves the plugin's normalized ID to the correct URL prefix.\n *\n * Usage: `const api = createPluginTrpcClient<ShopRouter>('shop')`\n */\nexport function createPluginTrpcClient<TRouter>(pluginId: string) {\n    const normalizedId = normalizePluginId(pluginId);\n    const rootClient = createBrowserTrpcClient<any>('/trpc') as any;\n\n    return rootClient.pluginApis[normalizedId] as BrowserTrpcClient<TRouter>;\n}\n\n/**\n * Factory to create a typed tRPC client for the admin host root router.\n *\n * Usage: `const hostApi = createHostTrpcClient<AppRouter>()`\n */\nexport function createHostTrpcClient<TRouter>() {\n    return createBrowserTrpcClient<TRouter>('/trpc');\n}\n"],"mappings":";;;;;;AAAA,SAAS,kBAAkB,qBAAqB;AAGhD,SAAS,wBAAiC,KAAa;AAEnD,SAAO,iBAA0B;AAAA,IAC7B,OAAO;AAAA,MACH,cAAc;AAAA,QACV;AAAA,QACA,UAAU;AACN,gBAAM,WAAW,kBAAkB;AACnC,iBAAO,WAAW,EAAE,CAAC,uBAAuB,GAAG,SAAS,IAAI,CAAC;AAAA,QACjE;AAAA,QACA,MAAMA,MAAK,SAAS;AAChB,iBAAO,WAAW,MAAMA,MAA+C;AAAA,YACnE,GAAI;AAAA,YACJ,aAAa;AAAA,UACjB,CAAC;AAAA,QACL;AAAA,MACJ,CAAC;AAAA,IACL;AAAA,EACJ,CAAC;AACL;AAIA,SAAS,kBAAkB,UAAkB;AACzC,SAAO,SAAS,QAAQ,qBAAqB,EAAE,EAAE,QAAQ,OAAO,GAAG;AACvE;AAQO,SAAS,uBAAgC,UAAkB;AAC9D,QAAM,eAAe,kBAAkB,QAAQ;AAC/C,QAAM,aAAa,wBAA6B,OAAO;AAEvD,SAAO,WAAW,WAAW,YAAY;AAC7C;AAOO,SAAS,uBAAgC;AAC5C,SAAO,wBAAiC,OAAO;AACnD;","names":["url"]}

package/dist/artifact.d.ts

@@ -0,0 +1,17 @@
+import { P as PluginManifest } from './manifest-CTFX-h0w.js';
+import { P as PluginRelease } from './release-BDJeO54k.js';
+import 'zod';
+
+declare const MAX_PLUGIN_ARCHIVE_BYTES: number;
+declare const MAX_PLUGIN_EXTRACTED_BYTES: number;
+declare const MAX_PLUGIN_ARCHIVE_FILES = 5000;
+declare function pluginArtifactSha256(data: Uint8Array): string;
+interface InspectedPluginArtifact {
+    manifest: PluginManifest;
+    release: PluginRelease;
+    entries: Record<string, Uint8Array>;
+    archiveSha256: string;
+}
+declare function inspectPluginArtifact(data: Uint8Array): InspectedPluginArtifact;
+
+export { type InspectedPluginArtifact, MAX_PLUGIN_ARCHIVE_BYTES, MAX_PLUGIN_ARCHIVE_FILES, MAX_PLUGIN_EXTRACTED_BYTES, inspectPluginArtifact, pluginArtifactSha256 };

package/dist/artifact.js

@@ -0,0 +1,97 @@
+import {
+  pluginArchivePathSchema,
+  pluginReleaseSchema
+} from "./chunk-DY44Q4CK.js";
+import {
+  pluginManifestSchema
+} from "./chunk-3IM3FPTJ.js";
+import "./chunk-BI7E5CVM.js";
+
+// src/artifact.ts
+import { createHash } from "crypto";
+import { strFromU8, unzipSync } from "fflate";
+var MAX_PLUGIN_ARCHIVE_BYTES = 100 * 1024 * 1024;
+var MAX_PLUGIN_EXTRACTED_BYTES = 250 * 1024 * 1024;
+var MAX_PLUGIN_ARCHIVE_FILES = 5e3;
+var RELEASE_PATH = "release.json";
+var CHECKSUM_PATH = "checksums.sha256";
+function verifyChecksums(entries, release) {
+  const raw = entries[CHECKSUM_PATH];
+  if (!raw) throw new Error(`plugin archive must contain ${CHECKSUM_PATH}`);
+  const checksums = /* @__PURE__ */ new Map();
+  for (const line of strFromU8(raw).split(/\r?\n/).filter(Boolean)) {
+    const match = /^([a-f0-9]{64}) {2}(.+)$/.exec(line);
+    if (!match) throw new Error(`invalid ${CHECKSUM_PATH} entry`);
+    const checksum = match[1];
+    const filePath = match[2];
+    pluginArchivePathSchema.parse(filePath);
+    if (checksums.has(filePath)) throw new Error(`duplicate ${CHECKSUM_PATH} entry: ${filePath}`);
+    checksums.set(filePath, checksum);
+  }
+  const expectedPaths = [...release.files.map((file) => file.path), RELEASE_PATH].sort();
+  if (checksums.size !== expectedPaths.length) {
+    throw new Error(`${CHECKSUM_PATH} does not match release contents`);
+  }
+  for (const filePath of expectedPaths) {
+    const content = entries[filePath];
+    if (!content || checksums.get(filePath) !== pluginArtifactSha256(content)) {
+      throw new Error(`${CHECKSUM_PATH} mismatch: ${filePath}`);
+    }
+  }
+}
+function pluginArtifactSha256(data) {
+  return createHash("sha256").update(data).digest("hex");
+}
+function inspectPluginArtifact(data) {
+  if (data.byteLength > MAX_PLUGIN_ARCHIVE_BYTES) {
+    throw new Error(`plugin archive exceeds ${MAX_PLUGIN_ARCHIVE_BYTES} bytes`);
+  }
+  const entries = unzipSync(data);
+  const paths = Object.keys(entries);
+  if (paths.length > MAX_PLUGIN_ARCHIVE_FILES) {
+    throw new Error(`plugin archive exceeds ${MAX_PLUGIN_ARCHIVE_FILES} files`);
+  }
+  let extractedBytes = 0;
+  for (const [filePath, content] of Object.entries(entries)) {
+    pluginArchivePathSchema.parse(filePath);
+    extractedBytes += content.byteLength;
+    if (extractedBytes > MAX_PLUGIN_EXTRACTED_BYTES) {
+      throw new Error(`plugin archive exceeds ${MAX_PLUGIN_EXTRACTED_BYTES} extracted bytes`);
+    }
+  }
+  const manifestData = entries["manifest.json"];
+  const releaseData = entries[RELEASE_PATH];
+  if (!manifestData || !releaseData) {
+    throw new Error("plugin archive must contain manifest.json and release.json");
+  }
+  const manifest = pluginManifestSchema.parse(JSON.parse(strFromU8(manifestData)));
+  const release = pluginReleaseSchema.parse(JSON.parse(strFromU8(releaseData)));
+  if (manifest.pluginId !== release.pluginId || manifest.version !== release.version) {
+    throw new Error("manifest and release identities do not match");
+  }
+  for (const file of release.files) {
+    const content = entries[file.path];
+    if (!content) throw new Error(`release file is missing: ${file.path}`);
+    if (content.byteLength !== file.size || pluginArtifactSha256(content) !== file.sha256) {
+      throw new Error(`release file checksum mismatch: ${file.path}`);
+    }
+  }
+  verifyChecksums(entries, release);
+  const allowedPaths = /* @__PURE__ */ new Set([
+    ...release.files.map((file) => file.path),
+    RELEASE_PATH,
+    CHECKSUM_PATH,
+    "signature.json"
+  ]);
+  const undeclared = paths.find((filePath) => !allowedPaths.has(filePath));
+  if (undeclared) throw new Error(`archive contains undeclared file: ${undeclared}`);
+  return { manifest, release, entries, archiveSha256: pluginArtifactSha256(data) };
+}
+export {
+  MAX_PLUGIN_ARCHIVE_BYTES,
+  MAX_PLUGIN_ARCHIVE_FILES,
+  MAX_PLUGIN_EXTRACTED_BYTES,
+  inspectPluginArtifact,
+  pluginArtifactSha256
+};
+//# sourceMappingURL=artifact.js.map

package/dist/artifact.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/artifact.ts"],"sourcesContent":["import { createHash } from \"node:crypto\";\nimport { strFromU8, unzipSync } from \"fflate\";\nimport { type PluginManifest, pluginManifestSchema } from \"./manifest\";\nimport { type PluginRelease, pluginArchivePathSchema, pluginReleaseSchema } from \"./release\";\n\nexport const MAX_PLUGIN_ARCHIVE_BYTES = 100 * 1024 * 1024;\nexport const MAX_PLUGIN_EXTRACTED_BYTES = 250 * 1024 * 1024;\nexport const MAX_PLUGIN_ARCHIVE_FILES = 5_000;\n\nconst RELEASE_PATH = \"release.json\";\nconst CHECKSUM_PATH = \"checksums.sha256\";\n\nfunction verifyChecksums(entries: Record<string, Uint8Array>, release: PluginRelease): void {\n    const raw = entries[CHECKSUM_PATH];\n    if (!raw) throw new Error(`plugin archive must contain ${CHECKSUM_PATH}`);\n\n    const checksums = new Map<string, string>();\n    for (const line of strFromU8(raw).split(/\\r?\\n/).filter(Boolean)) {\n        const match = /^([a-f0-9]{64}) {2}(.+)$/.exec(line);\n        if (!match) throw new Error(`invalid ${CHECKSUM_PATH} entry`);\n        const checksum = match[1]!;\n        const filePath = match[2]!;\n        pluginArchivePathSchema.parse(filePath);\n        if (checksums.has(filePath)) throw new Error(`duplicate ${CHECKSUM_PATH} entry: ${filePath}`);\n        checksums.set(filePath, checksum);\n    }\n\n    const expectedPaths = [...release.files.map((file) => file.path), RELEASE_PATH].sort();\n    if (checksums.size !== expectedPaths.length) {\n        throw new Error(`${CHECKSUM_PATH} does not match release contents`);\n    }\n    for (const filePath of expectedPaths) {\n        const content = entries[filePath];\n        if (!content || checksums.get(filePath) !== pluginArtifactSha256(content)) {\n            throw new Error(`${CHECKSUM_PATH} mismatch: ${filePath}`);\n        }\n    }\n}\n\nexport function pluginArtifactSha256(data: Uint8Array): string {\n    return createHash(\"sha256\").update(data).digest(\"hex\");\n}\n\nexport interface InspectedPluginArtifact {\n    manifest: PluginManifest;\n    release: PluginRelease;\n    entries: Record<string, Uint8Array>;\n    archiveSha256: string;\n}\n\nexport function inspectPluginArtifact(data: Uint8Array): InspectedPluginArtifact {\n    if (data.byteLength > MAX_PLUGIN_ARCHIVE_BYTES) {\n        throw new Error(`plugin archive exceeds ${MAX_PLUGIN_ARCHIVE_BYTES} bytes`);\n    }\n\n    const entries = unzipSync(data);\n    const paths = Object.keys(entries);\n    if (paths.length > MAX_PLUGIN_ARCHIVE_FILES) {\n        throw new Error(`plugin archive exceeds ${MAX_PLUGIN_ARCHIVE_FILES} files`);\n    }\n\n    let extractedBytes = 0;\n    for (const [filePath, content] of Object.entries(entries)) {\n        pluginArchivePathSchema.parse(filePath);\n        extractedBytes += content.byteLength;\n        if (extractedBytes > MAX_PLUGIN_EXTRACTED_BYTES) {\n            throw new Error(`plugin archive exceeds ${MAX_PLUGIN_EXTRACTED_BYTES} extracted bytes`);\n        }\n    }\n\n    const manifestData = entries[\"manifest.json\"];\n    const releaseData = entries[RELEASE_PATH];\n    if (!manifestData || !releaseData) {\n        throw new Error(\"plugin archive must contain manifest.json and release.json\");\n    }\n\n    const manifest = pluginManifestSchema.parse(JSON.parse(strFromU8(manifestData)));\n    const release = pluginReleaseSchema.parse(JSON.parse(strFromU8(releaseData)));\n    if (manifest.pluginId !== release.pluginId || manifest.version !== release.version) {\n        throw new Error(\"manifest and release identities do not match\");\n    }\n\n    for (const file of release.files) {\n        const content = entries[file.path];\n        if (!content) throw new Error(`release file is missing: ${file.path}`);\n        if (content.byteLength !== file.size || pluginArtifactSha256(content) !== file.sha256) {\n            throw new Error(`release file checksum mismatch: ${file.path}`);\n        }\n    }\n    verifyChecksums(entries, release);\n\n    const allowedPaths = new Set([\n        ...release.files.map((file) => file.path),\n        RELEASE_PATH,\n        CHECKSUM_PATH,\n        \"signature.json\",\n    ]);\n    const undeclared = paths.find((filePath) => !allowedPaths.has(filePath));\n    if (undeclared) throw new Error(`archive contains undeclared file: ${undeclared}`);\n\n    return { manifest, release, entries, archiveSha256: pluginArtifactSha256(data) };\n}\n"],"mappings":";;;;;;;;;;AAAA,SAAS,kBAAkB;AAC3B,SAAS,WAAW,iBAAiB;AAI9B,IAAM,2BAA2B,MAAM,OAAO;AAC9C,IAAM,6BAA6B,MAAM,OAAO;AAChD,IAAM,2BAA2B;AAExC,IAAM,eAAe;AACrB,IAAM,gBAAgB;AAEtB,SAAS,gBAAgB,SAAqC,SAA8B;AACxF,QAAM,MAAM,QAAQ,aAAa;AACjC,MAAI,CAAC,IAAK,OAAM,IAAI,MAAM,+BAA+B,aAAa,EAAE;AAExE,QAAM,YAAY,oBAAI,IAAoB;AAC1C,aAAW,QAAQ,UAAU,GAAG,EAAE,MAAM,OAAO,EAAE,OAAO,OAAO,GAAG;AAC9D,UAAM,QAAQ,2BAA2B,KAAK,IAAI;AAClD,QAAI,CAAC,MAAO,OAAM,IAAI,MAAM,WAAW,aAAa,QAAQ;AAC5D,UAAM,WAAW,MAAM,CAAC;AACxB,UAAM,WAAW,MAAM,CAAC;AACxB,4BAAwB,MAAM,QAAQ;AACtC,QAAI,UAAU,IAAI,QAAQ,EAAG,OAAM,IAAI,MAAM,aAAa,aAAa,WAAW,QAAQ,EAAE;AAC5F,cAAU,IAAI,UAAU,QAAQ;AAAA,EACpC;AAEA,QAAM,gBAAgB,CAAC,GAAG,QAAQ,MAAM,IAAI,CAAC,SAAS,KAAK,IAAI,GAAG,YAAY,EAAE,KAAK;AACrF,MAAI,UAAU,SAAS,cAAc,QAAQ;AACzC,UAAM,IAAI,MAAM,GAAG,aAAa,kCAAkC;AAAA,EACtE;AACA,aAAW,YAAY,eAAe;AAClC,UAAM,UAAU,QAAQ,QAAQ;AAChC,QAAI,CAAC,WAAW,UAAU,IAAI,QAAQ,MAAM,qBAAqB,OAAO,GAAG;AACvE,YAAM,IAAI,MAAM,GAAG,aAAa,cAAc,QAAQ,EAAE;AAAA,IAC5D;AAAA,EACJ;AACJ;AAEO,SAAS,qBAAqB,MAA0B;AAC3D,SAAO,WAAW,QAAQ,EAAE,OAAO,IAAI,EAAE,OAAO,KAAK;AACzD;AASO,SAAS,sBAAsB,MAA2C;AAC7E,MAAI,KAAK,aAAa,0BAA0B;AAC5C,UAAM,IAAI,MAAM,0BAA0B,wBAAwB,QAAQ;AAAA,EAC9E;AAEA,QAAM,UAAU,UAAU,IAAI;AAC9B,QAAM,QAAQ,OAAO,KAAK,OAAO;AACjC,MAAI,MAAM,SAAS,0BAA0B;AACzC,UAAM,IAAI,MAAM,0BAA0B,wBAAwB,QAAQ;AAAA,EAC9E;AAEA,MAAI,iBAAiB;AACrB,aAAW,CAAC,UAAU,OAAO,KAAK,OAAO,QAAQ,OAAO,GAAG;AACvD,4BAAwB,MAAM,QAAQ;AACtC,sBAAkB,QAAQ;AAC1B,QAAI,iBAAiB,4BAA4B;AAC7C,YAAM,IAAI,MAAM,0BAA0B,0BAA0B,kBAAkB;AAAA,IAC1F;AAAA,EACJ;AAEA,QAAM,eAAe,QAAQ,eAAe;AAC5C,QAAM,cAAc,QAAQ,YAAY;AACxC,MAAI,CAAC,gBAAgB,CAAC,aAAa;AAC/B,UAAM,IAAI,MAAM,4DAA4D;AAAA,EAChF;AAEA,QAAM,WAAW,qBAAqB,MAAM,KAAK,MAAM,UAAU,YAAY,CAAC,CAAC;AAC/E,QAAM,UAAU,oBAAoB,MAAM,KAAK,MAAM,UAAU,WAAW,CAAC,CAAC;AAC5E,MAAI,SAAS,aAAa,QAAQ,YAAY,SAAS,YAAY,QAAQ,SAAS;AAChF,UAAM,IAAI,MAAM,8CAA8C;AAAA,EAClE;AAEA,aAAW,QAAQ,QAAQ,OAAO;AAC9B,UAAM,UAAU,QAAQ,KAAK,IAAI;AACjC,QAAI,CAAC,QAAS,OAAM,IAAI,MAAM,4BAA4B,KAAK,IAAI,EAAE;AACrE,QAAI,QAAQ,eAAe,KAAK,QAAQ,qBAAqB,OAAO,MAAM,KAAK,QAAQ;AACnF,YAAM,IAAI,MAAM,mCAAmC,KAAK,IAAI,EAAE;AAAA,IAClE;AAAA,EACJ;AACA,kBAAgB,SAAS,OAAO;AAEhC,QAAM,eAAe,oBAAI,IAAI;AAAA,IACzB,GAAG,QAAQ,MAAM,IAAI,CAAC,SAAS,KAAK,IAAI;AAAA,IACxC;AAAA,IACA;AAAA,IACA;AAAA,EACJ,CAAC;AACD,QAAM,aAAa,MAAM,KAAK,CAAC,aAAa,CAAC,aAAa,IAAI,QAAQ,CAAC;AACvE,MAAI,WAAY,OAAM,IAAI,MAAM,qCAAqC,UAAU,EAAE;AAEjF,SAAO,EAAE,UAAU,SAAS,SAAS,eAAe,qBAAqB,IAAI,EAAE;AACnF;","names":[]}