@wordrhyme/plugin 0.1.0-alpha.5

package/dist/react.d.ts

@@ -0,0 +1,145 @@
+import React from 'react';
+import { P as PluginMediaInfo } from './types-8P7XyoyQ.js';
+import './globalization.js';
+import 'decimal.js';
+import './release-CyapqJ3z.js';
+import 'zod';
+import './time.js';
+
+/**
+ * React utilities for plugin admin UIs.
+ *
+ * At runtime, this module is shared via Module Federation from the admin host.
+ * Plugins should configure MF shared with `import: false` for this package.
+ */
+
+/**
+ * Called by the Admin Host at startup to inject the host's tRPC React client.
+ * Plugin code should NOT call this directly.
+ * @internal
+ */
+declare function __setTrpc(trpc: any): void;
+/**
+ * Hook for plugin components to access their tRPC namespace with React Query hooks.
+ * Must be called within a component rendered inside the Admin Host.
+ *
+ * @param pluginId - Short plugin ID (e.g., 'storage-s3') or full ID (e.g., 'com.wordrhyme.storage-s3')
+ * @returns tRPC proxy with useQuery/useMutation hooks
+ *
+ * @example
+ * ```tsx
+ * import { usePluginTrpc } from '@wordrhyme/plugin/react';
+ *
+ * function MyPluginPage() {
+ *     const api = usePluginTrpc('my-plugin');
+ *     const { data, isLoading } = api.listItems.useQuery();
+ *     const createItem = api.createItem.useMutation();
+ * }
+ * ```
+ */
+declare function usePluginTrpc(pluginId: string): any;
+/**
+ * Hook for plugin components to access the Admin Host's root tRPC React client.
+ * Useful for shared host capabilities such as currency, media, auth, etc.
+ */
+declare function useHostTrpc(): any;
+interface PluginI18nValue {
+    locale: string;
+    timezone: string;
+    isLoading: boolean;
+    t: (key: string, paramsOrDefault?: Record<string, string | number> | string) => string;
+    addNamespace: (namespace: string) => void;
+}
+declare const PluginI18nContext: React.Context<PluginI18nValue>;
+declare function usePluginTranslation(pluginId: string, customNamespace?: string): {
+    t: (key: string, paramsOrDefault?: Record<string, string | number> | string) => string;
+    locale: string;
+    timezone: string;
+    isLoading: boolean;
+    namespace: string;
+};
+interface PluginSlotProps {
+    /** Slot name, e.g. 'shop.product.detail.actions' */
+    name: string;
+    /** React props passed to extensions rendered in this slot */
+    props?: Record<string, unknown>;
+    /** @deprecated Use props. Kept for legacy plugin slot call sites. */
+    context?: Record<string, unknown>;
+    /** Layout mode */
+    layout?: 'inline' | 'stack' | 'tabs' | 'grid';
+    /** Additional CSS class */
+    className?: string;
+    /** Fallback when no extensions registered */
+    fallback?: React.ReactNode;
+}
+/**
+ * Called by the Admin Host at startup to inject the PluginSlot component.
+ * Plugin code should NOT call this directly.
+ * @internal
+ */
+declare function __setPluginSlot(component: React.ComponentType<PluginSlotProps>): void;
+/**
+ * Renders all plugin extensions registered for the given slot.
+ *
+ * @example
+ * ```tsx
+ * import { PluginSlot } from '@wordrhyme/plugin/react';
+ *
+ * function ProductDetailPage({ productId }) {
+ *     return (
+ *         <div>
+ *             <h1>Product Detail</h1>
+ *             <PluginSlot
+ *                 name="shop.product.detail.actions"
+ *                 layout="inline"
+ *                 props={{ productId }}
+ *             />
+ *         </div>
+ *     );
+ * }
+ * ```
+ */
+declare function PluginSlot(props: PluginSlotProps): React.ReactElement | null;
+/**
+ * Minimal ability interface for plugin permission checks.
+ * Matches CASL MongoAbility.can() signature.
+ */
+interface PluginAbility {
+    can(action: string, subject: string): boolean;
+}
+/**
+ * React Context for ability — shared between host and plugins.
+ * Host injects via AbilityBridge, plugins consume via usePluginAbility.
+ */
+declare const PluginAbilityContext: React.Context<PluginAbility>;
+/**
+ * Hook for plugin components to check permissions.
+ *
+ * @example
+ * ```tsx
+ * import { usePluginAbility } from '@wordrhyme/plugin/react';
+ *
+ * function MyPluginPage() {
+ *     const ability = usePluginAbility();
+ *     const canCreate = ability.can('create', 'PluginResource');
+ *     const canDelete = ability.can('delete', 'PluginResource');
+ * }
+ * ```
+ */
+declare function usePluginAbility(): PluginAbility;
+
+interface MediaPickerOptions {
+    presentation?: 'dialog' | 'drawer';
+    mode?: 'single' | 'multi';
+    category?: 'all' | 'image' | 'document' | 'video' | 'audio' | 'archive' | 'other';
+    onSelect: (media: PluginMediaInfo[]) => void;
+}
+/**
+ * Hook to open the global Media Picker dialog (rendered by Admin Host).
+ * Returns an imperative API `openDialog(options)`.
+ */
+declare function useMediaPicker(): {
+    openDialog: (options: MediaPickerOptions) => void;
+};
+
+export { type MediaPickerOptions, type PluginAbility, PluginAbilityContext, PluginI18nContext, type PluginI18nValue, PluginSlot, type PluginSlotProps, __setPluginSlot, __setTrpc, useHostTrpc, useMediaPicker, usePluginAbility, usePluginTranslation, usePluginTrpc };

package/dist/react.js

@@ -0,0 +1,94 @@
+// src/react.ts
+import React from "react";
+var _trpc = null;
+function __setTrpc(trpc) {
+  _trpc = trpc;
+}
+function usePluginTrpc(pluginId) {
+  if (!_trpc) {
+    throw new Error(
+      "[plugin/react] tRPC not initialized. Ensure plugin is loaded within Admin Host context."
+    );
+  }
+  const normalizedId = pluginId.replace(/^com\.wordrhyme\./, "").replace(/\./g, "-");
+  return _trpc.pluginApis[normalizedId];
+}
+function useHostTrpc() {
+  if (!_trpc) {
+    throw new Error(
+      "[plugin/react] tRPC not initialized. Ensure plugin is loaded within Admin Host context."
+    );
+  }
+  return _trpc;
+}
+var defaultI18n = {
+  locale: "en-US",
+  timezone: "UTC",
+  isLoading: false,
+  t: (key, paramsOrDefault) => typeof paramsOrDefault === "string" ? paramsOrDefault : key,
+  addNamespace: () => void 0
+};
+var PluginI18nContext = React.createContext(defaultI18n);
+function normalizePluginNamespace(pluginId) {
+  return `plugin.${pluginId}`;
+}
+function usePluginTranslation(pluginId, customNamespace) {
+  const namespace = customNamespace || normalizePluginNamespace(pluginId);
+  const i18n = React.useContext(PluginI18nContext);
+  React.useEffect(() => {
+    i18n.addNamespace(namespace);
+  }, [i18n, namespace]);
+  const t = React.useCallback(
+    (key, paramsOrDefault) => {
+      const fullKey = key.startsWith(`${namespace}.`) ? key : `${namespace}.${key}`;
+      return i18n.t(fullKey, paramsOrDefault);
+    },
+    [i18n, namespace]
+  );
+  return React.useMemo(
+    () => ({ t, locale: i18n.locale, timezone: i18n.timezone, isLoading: i18n.isLoading, namespace }),
+    [t, i18n.locale, i18n.timezone, i18n.isLoading, namespace]
+  );
+}
+var _PluginSlotImpl = null;
+function __setPluginSlot(component) {
+  _PluginSlotImpl = component;
+}
+function PluginSlot(props) {
+  if (!_PluginSlotImpl) {
+    return null;
+  }
+  return React.createElement(_PluginSlotImpl, props);
+}
+var defaultAbility = { can: () => true };
+var PluginAbilityContext = React.createContext(defaultAbility);
+function usePluginAbility() {
+  return React.useContext(PluginAbilityContext);
+}
+function useMediaPicker() {
+  return {
+    openDialog: (options) => {
+      if (typeof window !== "undefined") {
+        const picker = window.__WORDRHYME_MEDIA_PICKER__ || window.__OMNIDS_MEDIA_PICKER__;
+        if (picker) {
+          picker.open(options);
+          return;
+        }
+      }
+      console.warn("[plugin/react] Media Picker is not mounted by the Admin Host.");
+    }
+  };
+}
+export {
+  PluginAbilityContext,
+  PluginI18nContext,
+  PluginSlot,
+  __setPluginSlot,
+  __setTrpc,
+  useHostTrpc,
+  useMediaPicker,
+  usePluginAbility,
+  usePluginTranslation,
+  usePluginTrpc
+};
+//# sourceMappingURL=react.js.map

package/dist/react.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/react.ts"],"sourcesContent":["/**\n * React utilities for plugin admin UIs.\n *\n * At runtime, this module is shared via Module Federation from the admin host.\n * Plugins should configure MF shared with `import: false` for this package.\n */\nimport React from 'react';\n\n// eslint-disable-next-line @typescript-eslint/no-explicit-any\nlet _trpc: any = null;\n\n/**\n * Called by the Admin Host at startup to inject the host's tRPC React client.\n * Plugin code should NOT call this directly.\n * @internal\n */\n// eslint-disable-next-line @typescript-eslint/no-explicit-any\nexport function __setTrpc(trpc: any) {\n    _trpc = trpc;\n}\n\n/**\n * Hook for plugin components to access their tRPC namespace with React Query hooks.\n * Must be called within a component rendered inside the Admin Host.\n *\n * @param pluginId - Short plugin ID (e.g., 'storage-s3') or full ID (e.g., 'com.wordrhyme.storage-s3')\n * @returns tRPC proxy with useQuery/useMutation hooks\n *\n * @example\n * ```tsx\n * import { usePluginTrpc } from '@wordrhyme/plugin/react';\n *\n * function MyPluginPage() {\n *     const api = usePluginTrpc('my-plugin');\n *     const { data, isLoading } = api.listItems.useQuery();\n *     const createItem = api.createItem.useMutation();\n * }\n * ```\n */\nexport function usePluginTrpc(pluginId: string) {\n    if (!_trpc) {\n        throw new Error(\n            '[plugin/react] tRPC not initialized. ' +\n            'Ensure plugin is loaded within Admin Host context.',\n        );\n    }\n    const normalizedId = pluginId\n        .replace(/^com\\.wordrhyme\\./, '')\n        .replace(/\\./g, '-');\n    // eslint-disable-next-line @typescript-eslint/no-explicit-any\n    return (_trpc as any).pluginApis[normalizedId];\n}\n\n/**\n * Hook for plugin components to access the Admin Host's root tRPC React client.\n * Useful for shared host capabilities such as currency, media, auth, etc.\n */\n// eslint-disable-next-line @typescript-eslint/no-explicit-any\nexport function useHostTrpc(): any {\n    if (!_trpc) {\n        throw new Error(\n            '[plugin/react] tRPC not initialized. ' +\n            'Ensure plugin is loaded within Admin Host context.',\n        );\n    }\n    return _trpc;\n}\n\n// ============================================================\n// I18n — host translation bridge\n// ============================================================\n\nexport interface PluginI18nValue {\n    locale: string;\n    timezone: string;\n    isLoading: boolean;\n    t: (key: string, paramsOrDefault?: Record<string, string | number> | string) => string;\n    addNamespace: (namespace: string) => void;\n}\n\nconst defaultI18n: PluginI18nValue = {\n    locale: 'en-US',\n    timezone: 'UTC',\n    isLoading: false,\n    t: (key, paramsOrDefault) => (typeof paramsOrDefault === 'string' ? paramsOrDefault : key),\n    addNamespace: () => undefined,\n};\n\nexport const PluginI18nContext = React.createContext<PluginI18nValue>(defaultI18n);\n\nfunction normalizePluginNamespace(pluginId: string): string {\n    return `plugin.${pluginId}`;\n}\n\nexport function usePluginTranslation(pluginId: string, customNamespace?: string) {\n    const namespace = customNamespace || normalizePluginNamespace(pluginId);\n    const i18n = React.useContext(PluginI18nContext);\n\n    React.useEffect(() => {\n        i18n.addNamespace(namespace);\n    }, [i18n, namespace]);\n\n    const t = React.useCallback(\n        (key: string, paramsOrDefault?: Record<string, string | number> | string): string => {\n            const fullKey = key.startsWith(`${namespace}.`) ? key : `${namespace}.${key}`;\n            return i18n.t(fullKey, paramsOrDefault);\n        },\n        [i18n, namespace],\n    );\n\n    return React.useMemo(\n        () => ({ t, locale: i18n.locale, timezone: i18n.timezone, isLoading: i18n.isLoading, namespace }),\n        [t, i18n.locale, i18n.timezone, i18n.isLoading, namespace],\n    );\n}\n\n// ============================================================\n// PluginSlot — runtime-injected from Admin Host\n// ============================================================\n\nexport interface PluginSlotProps {\n    /** Slot name, e.g. 'shop.product.detail.actions' */\n    name: string;\n    /** React props passed to extensions rendered in this slot */\n    props?: Record<string, unknown>;\n    /** @deprecated Use props. Kept for legacy plugin slot call sites. */\n    context?: Record<string, unknown>;\n    /** Layout mode */\n    layout?: 'inline' | 'stack' | 'tabs' | 'grid';\n    /** Additional CSS class */\n    className?: string;\n    /** Fallback when no extensions registered */\n    fallback?: React.ReactNode;\n}\n\n// eslint-disable-next-line @typescript-eslint/no-explicit-any\nlet _PluginSlotImpl: React.ComponentType<PluginSlotProps> | null = null;\n\n/**\n * Called by the Admin Host at startup to inject the PluginSlot component.\n * Plugin code should NOT call this directly.\n * @internal\n */\nexport function __setPluginSlot(component: React.ComponentType<PluginSlotProps>) {\n    _PluginSlotImpl = component;\n}\n\n/**\n * Renders all plugin extensions registered for the given slot.\n *\n * @example\n * ```tsx\n * import { PluginSlot } from '@wordrhyme/plugin/react';\n *\n * function ProductDetailPage({ productId }) {\n *     return (\n *         <div>\n *             <h1>Product Detail</h1>\n *             <PluginSlot\n *                 name=\"shop.product.detail.actions\"\n *                 layout=\"inline\"\n *                 props={{ productId }}\n *             />\n *         </div>\n *     );\n * }\n * ```\n */\nexport function PluginSlot(props: PluginSlotProps): React.ReactElement | null {\n    if (!_PluginSlotImpl) {\n        // Silently render nothing if host hasn't injected yet\n        return null;\n    }\n    return React.createElement(_PluginSlotImpl, props);\n}\n\n// Ability — runtime-injected from Admin Host (CASL permission)\n// ============================================================\n\n/**\n * Minimal ability interface for plugin permission checks.\n * Matches CASL MongoAbility.can() signature.\n */\nexport interface PluginAbility {\n    can(action: string, subject: string): boolean;\n}\n\n/** Default allow-all ability (when host hasn't injected) */\nconst defaultAbility: PluginAbility = { can: () => true };\n\n/**\n * React Context for ability — shared between host and plugins.\n * Host injects via AbilityBridge, plugins consume via usePluginAbility.\n */\nexport const PluginAbilityContext = React.createContext<PluginAbility>(defaultAbility);\n\n/**\n * Hook for plugin components to check permissions.\n *\n * @example\n * ```tsx\n * import { usePluginAbility } from '@wordrhyme/plugin/react';\n *\n * function MyPluginPage() {\n *     const ability = usePluginAbility();\n *     const canCreate = ability.can('create', 'PluginResource');\n *     const canDelete = ability.can('delete', 'PluginResource');\n * }\n * ```\n */\nexport function usePluginAbility(): PluginAbility {\n    return React.useContext(PluginAbilityContext);\n}\n\n// ============================================================\n// Media Picker — accesses global imperative API\n// ============================================================\n\nimport type { PluginMediaInfo } from './types';\n\n// Define the options for the global MediaPicker\nexport interface MediaPickerOptions {\n  presentation?: 'dialog' | 'drawer'; // Where to open the picker\n  mode?: 'single' | 'multi';\n  category?: 'all' | 'image' | 'document' | 'video' | 'audio' | 'archive' | 'other';\n  onSelect: (media: PluginMediaInfo[]) => void;\n}\n\n/**\n * Hook to open the global Media Picker dialog (rendered by Admin Host).\n * Returns an imperative API `openDialog(options)`.\n */\nexport function useMediaPicker() {\n    return {\n        openDialog: (options: MediaPickerOptions) => {\n            // eslint-disable-next-line @typescript-eslint/ban-ts-comment\n            // @ts-ignore\n            if (typeof window !== 'undefined') {\n                // eslint-disable-next-line @typescript-eslint/ban-ts-comment\n                // @ts-ignore\n                const picker = window.__WORDRHYME_MEDIA_PICKER__ || window.__OMNIDS_MEDIA_PICKER__;\n                if (picker) {\n                    picker.open(options);\n                    return;\n                }\n            }\n            console.warn('[plugin/react] Media Picker is not mounted by the Admin Host.');\n        }\n    };\n}\n"],"mappings":";AAMA,OAAO,WAAW;AAGlB,IAAI,QAAa;AAQV,SAAS,UAAU,MAAW;AACjC,UAAQ;AACZ;AAoBO,SAAS,cAAc,UAAkB;AAC5C,MAAI,CAAC,OAAO;AACR,UAAM,IAAI;AAAA,MACN;AAAA,IAEJ;AAAA,EACJ;AACA,QAAM,eAAe,SAChB,QAAQ,qBAAqB,EAAE,EAC/B,QAAQ,OAAO,GAAG;AAEvB,SAAQ,MAAc,WAAW,YAAY;AACjD;AAOO,SAAS,cAAmB;AAC/B,MAAI,CAAC,OAAO;AACR,UAAM,IAAI;AAAA,MACN;AAAA,IAEJ;AAAA,EACJ;AACA,SAAO;AACX;AAcA,IAAM,cAA+B;AAAA,EACjC,QAAQ;AAAA,EACR,UAAU;AAAA,EACV,WAAW;AAAA,EACX,GAAG,CAAC,KAAK,oBAAqB,OAAO,oBAAoB,WAAW,kBAAkB;AAAA,EACtF,cAAc,MAAM;AACxB;AAEO,IAAM,oBAAoB,MAAM,cAA+B,WAAW;AAEjF,SAAS,yBAAyB,UAA0B;AACxD,SAAO,UAAU,QAAQ;AAC7B;AAEO,SAAS,qBAAqB,UAAkB,iBAA0B;AAC7E,QAAM,YAAY,mBAAmB,yBAAyB,QAAQ;AACtE,QAAM,OAAO,MAAM,WAAW,iBAAiB;AAE/C,QAAM,UAAU,MAAM;AAClB,SAAK,aAAa,SAAS;AAAA,EAC/B,GAAG,CAAC,MAAM,SAAS,CAAC;AAEpB,QAAM,IAAI,MAAM;AAAA,IACZ,CAAC,KAAa,oBAAuE;AACjF,YAAM,UAAU,IAAI,WAAW,GAAG,SAAS,GAAG,IAAI,MAAM,GAAG,SAAS,IAAI,GAAG;AAC3E,aAAO,KAAK,EAAE,SAAS,eAAe;AAAA,IAC1C;AAAA,IACA,CAAC,MAAM,SAAS;AAAA,EACpB;AAEA,SAAO,MAAM;AAAA,IACT,OAAO,EAAE,GAAG,QAAQ,KAAK,QAAQ,UAAU,KAAK,UAAU,WAAW,KAAK,WAAW,UAAU;AAAA,IAC/F,CAAC,GAAG,KAAK,QAAQ,KAAK,UAAU,KAAK,WAAW,SAAS;AAAA,EAC7D;AACJ;AAsBA,IAAI,kBAA+D;AAO5D,SAAS,gBAAgB,WAAiD;AAC7E,oBAAkB;AACtB;AAuBO,SAAS,WAAW,OAAmD;AAC1E,MAAI,CAAC,iBAAiB;AAElB,WAAO;AAAA,EACX;AACA,SAAO,MAAM,cAAc,iBAAiB,KAAK;AACrD;AAcA,IAAM,iBAAgC,EAAE,KAAK,MAAM,KAAK;AAMjD,IAAM,uBAAuB,MAAM,cAA6B,cAAc;AAgB9E,SAAS,mBAAkC;AAC9C,SAAO,MAAM,WAAW,oBAAoB;AAChD;AAoBO,SAAS,iBAAiB;AAC7B,SAAO;AAAA,IACH,YAAY,CAAC,YAAgC;AAGzC,UAAI,OAAO,WAAW,aAAa;AAG/B,cAAM,SAAS,OAAO,8BAA8B,OAAO;AAC3D,YAAI,QAAQ;AACR,iBAAO,KAAK,OAAO;AACnB;AAAA,QACJ;AAAA,MACJ;AACA,cAAQ,KAAK,+DAA+D;AAAA,IAChF;AAAA,EACJ;AACJ;","names":[]}

package/dist/release-CyapqJ3z.d.ts

@@ -0,0 +1,230 @@
+import { z } from 'zod';
+
+declare const PLUGIN_ARCHIVE_MEDIA_TYPE = "application/vnd.wordrhyme.plugin+zip";
+declare const PLUGIN_RELEASE_SCHEMA_VERSION: 1;
+declare const REGISTRY_CATALOG_SIGNATURE_DOMAIN = "wordrhyme.registry-catalog-page.v1\0";
+declare const pluginArchivePathSchema: z.ZodString;
+declare const pluginReleaseFileSchema: z.ZodObject<{
+    path: z.ZodString;
+    size: z.ZodNumber;
+    sha256: z.ZodString;
+}, z.core.$strip>;
+declare const pluginReleaseSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    pluginId: z.ZodString;
+    version: z.ZodString;
+    createdAt: z.ZodISODateTime;
+    mediaType: z.ZodLiteral<"application/vnd.wordrhyme.plugin+zip">;
+    files: z.ZodArray<z.ZodObject<{
+        path: z.ZodString;
+        size: z.ZodNumber;
+        sha256: z.ZodString;
+    }, z.core.$strip>>;
+    sbom: z.ZodObject<{
+        path: z.ZodString;
+        format: z.ZodLiteral<"spdx-json">;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+declare const pluginSignatureSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    pluginId: z.ZodString;
+    version: z.ZodString;
+    algorithm: z.ZodLiteral<"ed25519">;
+    keyId: z.ZodString;
+    signedAt: z.ZodISODateTime;
+    releaseSha256: z.ZodString;
+    signature: z.ZodString;
+}, z.core.$strip>;
+declare const registryReleaseEnvelopeSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    pluginId: z.ZodString;
+    version: z.ZodString;
+    publisherId: z.ZodString;
+    state: z.ZodLiteral<"published">;
+    trustLevel: z.ZodEnum<{
+        first_party: "first_party";
+        third_party: "third_party";
+    }>;
+    artifactUrl: z.ZodURL;
+    artifactSha256: z.ZodString;
+    releaseSha256: z.ZodString;
+    publishedAt: z.ZodISODateTime;
+}, z.core.$strip>;
+declare const registrySignatureSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    algorithm: z.ZodLiteral<"ed25519">;
+    keyId: z.ZodString;
+    signedAt: z.ZodISODateTime;
+    envelopeSha256: z.ZodString;
+    signature: z.ZodString;
+}, z.core.$strip>;
+declare const registryCatalogPageEnvelopeSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    snapshotId: z.ZodString;
+    generatedAt: z.ZodISODateTime;
+    cursor: z.ZodNullable<z.ZodString>;
+    nextCursor: z.ZodNullable<z.ZodString>;
+    releasesSha256: z.ZodString;
+}, z.core.$strip>;
+/**
+ * The Registry signature contract intentionally uses an explicit field order.
+ * Do not replace this with JSON.stringify(input): callers may construct the
+ * same envelope with a different property insertion order.
+ */
+declare function canonicalRegistryReleaseEnvelope(input: RegistryReleaseEnvelope): string;
+declare function registryReleaseSignaturePayload(input: RegistryReleaseEnvelope): Uint8Array;
+declare function canonicalRegistryCatalogPageEnvelope(input: RegistryCatalogPageEnvelope): string;
+declare function registryCatalogPageSignaturePayload(input: RegistryCatalogPageEnvelope): Uint8Array;
+declare const pluginRegistryReleaseSchema: z.ZodObject<{
+    pluginId: z.ZodString;
+    version: z.ZodString;
+    publisherId: z.ZodString;
+    state: z.ZodEnum<{
+        archived: "archived";
+        published: "published";
+        suspended: "suspended";
+        removed: "removed";
+    }>;
+    trustLevel: z.ZodEnum<{
+        first_party: "first_party";
+        third_party: "third_party";
+    }>;
+    manifest: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+    release: z.ZodObject<{
+        schemaVersion: z.ZodLiteral<1>;
+        pluginId: z.ZodString;
+        version: z.ZodString;
+        createdAt: z.ZodISODateTime;
+        mediaType: z.ZodLiteral<"application/vnd.wordrhyme.plugin+zip">;
+        files: z.ZodArray<z.ZodObject<{
+            path: z.ZodString;
+            size: z.ZodNumber;
+            sha256: z.ZodString;
+        }, z.core.$strip>>;
+        sbom: z.ZodObject<{
+            path: z.ZodString;
+            format: z.ZodLiteral<"spdx-json">;
+        }, z.core.$strip>;
+    }, z.core.$strip>;
+    artifactUrl: z.ZodURL;
+    artifactSha256: z.ZodString;
+    releaseSha256: z.ZodString;
+    publisherSignature: z.ZodNullable<z.ZodObject<{
+        schemaVersion: z.ZodLiteral<1>;
+        pluginId: z.ZodString;
+        version: z.ZodString;
+        algorithm: z.ZodLiteral<"ed25519">;
+        keyId: z.ZodString;
+        signedAt: z.ZodISODateTime;
+        releaseSha256: z.ZodString;
+        signature: z.ZodString;
+    }, z.core.$strip>>;
+    signature: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+        schemaVersion: z.ZodLiteral<1>;
+        pluginId: z.ZodString;
+        version: z.ZodString;
+        algorithm: z.ZodLiteral<"ed25519">;
+        keyId: z.ZodString;
+        signedAt: z.ZodISODateTime;
+        releaseSha256: z.ZodString;
+        signature: z.ZodString;
+    }, z.core.$strip>>>;
+    registrySignature: z.ZodObject<{
+        schemaVersion: z.ZodLiteral<1>;
+        algorithm: z.ZodLiteral<"ed25519">;
+        keyId: z.ZodString;
+        signedAt: z.ZodISODateTime;
+        envelopeSha256: z.ZodString;
+        signature: z.ZodString;
+    }, z.core.$strip>;
+    publishedAt: z.ZodISODateTime;
+}, z.core.$strip>;
+declare const pluginRegistryCatalogSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    snapshotId: z.ZodString;
+    generatedAt: z.ZodISODateTime;
+    releases: z.ZodArray<z.ZodObject<{
+        pluginId: z.ZodString;
+        version: z.ZodString;
+        publisherId: z.ZodString;
+        state: z.ZodEnum<{
+            archived: "archived";
+            published: "published";
+            suspended: "suspended";
+            removed: "removed";
+        }>;
+        trustLevel: z.ZodEnum<{
+            first_party: "first_party";
+            third_party: "third_party";
+        }>;
+        manifest: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+        release: z.ZodObject<{
+            schemaVersion: z.ZodLiteral<1>;
+            pluginId: z.ZodString;
+            version: z.ZodString;
+            createdAt: z.ZodISODateTime;
+            mediaType: z.ZodLiteral<"application/vnd.wordrhyme.plugin+zip">;
+            files: z.ZodArray<z.ZodObject<{
+                path: z.ZodString;
+                size: z.ZodNumber;
+                sha256: z.ZodString;
+            }, z.core.$strip>>;
+            sbom: z.ZodObject<{
+                path: z.ZodString;
+                format: z.ZodLiteral<"spdx-json">;
+            }, z.core.$strip>;
+        }, z.core.$strip>;
+        artifactUrl: z.ZodURL;
+        artifactSha256: z.ZodString;
+        releaseSha256: z.ZodString;
+        publisherSignature: z.ZodNullable<z.ZodObject<{
+            schemaVersion: z.ZodLiteral<1>;
+            pluginId: z.ZodString;
+            version: z.ZodString;
+            algorithm: z.ZodLiteral<"ed25519">;
+            keyId: z.ZodString;
+            signedAt: z.ZodISODateTime;
+            releaseSha256: z.ZodString;
+            signature: z.ZodString;
+        }, z.core.$strip>>;
+        signature: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+            schemaVersion: z.ZodLiteral<1>;
+            pluginId: z.ZodString;
+            version: z.ZodString;
+            algorithm: z.ZodLiteral<"ed25519">;
+            keyId: z.ZodString;
+            signedAt: z.ZodISODateTime;
+            releaseSha256: z.ZodString;
+            signature: z.ZodString;
+        }, z.core.$strip>>>;
+        registrySignature: z.ZodObject<{
+            schemaVersion: z.ZodLiteral<1>;
+            algorithm: z.ZodLiteral<"ed25519">;
+            keyId: z.ZodString;
+            signedAt: z.ZodISODateTime;
+            envelopeSha256: z.ZodString;
+            signature: z.ZodString;
+        }, z.core.$strip>;
+        publishedAt: z.ZodISODateTime;
+    }, z.core.$strip>>;
+    nextCursor: z.ZodNullable<z.ZodString>;
+    catalogSignature: z.ZodObject<{
+        schemaVersion: z.ZodLiteral<1>;
+        algorithm: z.ZodLiteral<"ed25519">;
+        keyId: z.ZodString;
+        signedAt: z.ZodISODateTime;
+        envelopeSha256: z.ZodString;
+        signature: z.ZodString;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+declare function registryCatalogReleasesPayload(input: PluginRegistryRelease[]): Uint8Array;
+type PluginReleaseFile = z.infer<typeof pluginReleaseFileSchema>;
+type PluginRelease = z.infer<typeof pluginReleaseSchema>;
+type PluginSignature = z.infer<typeof pluginSignatureSchema>;
+type RegistryReleaseEnvelope = z.infer<typeof registryReleaseEnvelopeSchema>;
+type RegistrySignature = z.infer<typeof registrySignatureSchema>;
+type RegistryCatalogPageEnvelope = z.infer<typeof registryCatalogPageEnvelopeSchema>;
+type PluginRegistryRelease = z.infer<typeof pluginRegistryReleaseSchema>;
+type PluginRegistryCatalog = z.infer<typeof pluginRegistryCatalogSchema>;
+
+export { type PluginRelease as P, type RegistryReleaseEnvelope as R, type RegistrySignature as a, type RegistryCatalogPageEnvelope as b, PLUGIN_ARCHIVE_MEDIA_TYPE as c, PLUGIN_RELEASE_SCHEMA_VERSION as d, type PluginRegistryCatalog as e, type PluginRegistryRelease as f, type PluginReleaseFile as g, type PluginSignature as h, REGISTRY_CATALOG_SIGNATURE_DOMAIN as i, canonicalRegistryCatalogPageEnvelope as j, canonicalRegistryReleaseEnvelope as k, pluginRegistryCatalogSchema as l, pluginRegistryReleaseSchema as m, pluginReleaseFileSchema as n, pluginReleaseSchema as o, pluginArchivePathSchema as p, pluginSignatureSchema as q, registryCatalogPageEnvelopeSchema as r, registryCatalogPageSignaturePayload as s, registryCatalogReleasesPayload as t, registryReleaseEnvelopeSchema as u, registryReleaseSignaturePayload as v, registrySignatureSchema as w };

package/dist/server.d.ts

@@ -0,0 +1,114 @@
+export { createPluginContext, pluginProcedure, pluginRouter } from './trpc.js';
+import { a as PluginContext } from './types-8P7XyoyQ.js';
+export { H as HookContext, n as HookTransaction } from './types-8P7XyoyQ.js';
+import { DateRangeResolver } from './time.js';
+export { inferRouterInputs, inferRouterOutputs } from '@trpc/server';
+export { E as ENTITY_EXTENSION_VALUES_SAVE_HOOK_ID, a as EXTENSION_PROJECT_SAVE_HOOK_ID, b as EntityExtensionProjectionValue, c as EntityExtensionValueSaveHandler, d as EntityExtensionValueSavePayload, e as EntityExtensionValueSaveResult, f as entityExtensions, r as registerEntityExtensionValueSaver } from './entity-extensions-B5BbZH-m.js';
+import './globalization.js';
+import 'decimal.js';
+import './release-CyapqJ3z.js';
+import 'zod';
+import './manifest-CPSCN_Ft.js';
+
+interface PluginRuntimeRequestContext {
+    requestId?: string | undefined;
+    organizationId?: string | undefined;
+    originalOrganizationId?: string | undefined;
+    userId?: string | undefined;
+    user?: PluginContext['user'];
+    userRole?: string | undefined;
+    userRoles?: string[] | undefined;
+    currentTeamId?: string | undefined;
+    locale?: string | undefined;
+    currency?: string | undefined;
+    timezone?: string | undefined;
+    clientTimeZone?: string | undefined;
+    resolveDateRange?: DateRangeResolver | undefined;
+    actorType?: PluginContext['actorType'] | 'api-token';
+    isSystemContext?: boolean | undefined;
+    principal?: PluginContext['principal'];
+    invoker?: string | undefined;
+    apiTokenId?: string | undefined;
+    apiTokenScopes?: string[] | undefined;
+}
+interface CreatePluginRuntimeContextInput {
+    pluginId: string;
+    request?: unknown;
+    response?: unknown;
+    requestContext?: PluginRuntimeRequestContext | undefined;
+}
+interface PluginRuntimeBridge {
+    createRequestContext(input: PluginRuntimeRequestContext): PluginRuntimeRequestContext;
+    createContext(input: CreatePluginRuntimeContextInput): Promise<PluginContext>;
+    runWithContext<T>(requestContext: PluginRuntimeRequestContext, callback: () => Promise<T> | T): Promise<T>;
+}
+declare function setPluginRuntimeBridge(bridge: PluginRuntimeBridge): void;
+declare function createPluginRuntimeRequestContext(input: PluginRuntimeRequestContext): PluginRuntimeRequestContext;
+declare function createPluginRuntimeContext(input: CreatePluginRuntimeContextInput): Promise<PluginContext>;
+declare function runWithPluginRuntimeContext<T>(requestContext: PluginRuntimeRequestContext, callback: () => Promise<T> | T): Promise<T>;
+
+type OAuthSettingScope = {
+    global?: boolean;
+};
+type OAuthSettings = Pick<PluginContext, 'settings' | 'organizationId' | 'userId'>;
+type OAuthQueryValue = string | number | boolean | null | undefined | readonly (string | number | boolean | null | undefined)[];
+type OAuthQueryParams = Record<string, OAuthQueryValue>;
+type OAuthStateRecord<TPayload extends Record<string, unknown> = Record<string, unknown>> = TPayload & {
+    createdAt: string;
+    expiresAt?: string;
+    userId?: string;
+    organizationId?: string;
+};
+interface CreateOAuthStateOptions<TPayload extends Record<string, unknown>> extends OAuthSettingScope {
+    keyPrefix: string;
+    payload: TPayload;
+    bytes?: number;
+    ttlSeconds?: number;
+    encrypted?: boolean;
+    includeContext?: boolean;
+    now?: Date;
+}
+interface ConsumeOAuthStateOptions extends OAuthSettingScope {
+    keyPrefix: string;
+    state: string;
+    deleteOnConsume?: boolean;
+    now?: Date;
+}
+interface VerifyQueryHmacSha256Options {
+    signatureKey?: string;
+    excludeKeys?: string[];
+    digest?: 'hex' | 'base64';
+}
+declare function buildOAuthCallbackPath(providerId: string): string;
+declare function buildOAuthCallbackUrl(providerId: string, baseUrl: string): string;
+declare function buildOAuthResultRedirect(path: string, params: Record<string, string | number | boolean | null | undefined>): string;
+declare function buildOAuthStateKey(keyPrefix: string, state: string): string;
+declare function maskOAuthSecret(value: string): string;
+declare function createOAuthState<TPayload extends Record<string, unknown>>(ctx: OAuthSettings, options: CreateOAuthStateOptions<TPayload>): Promise<{
+    state: string;
+    key: string;
+    payload: OAuthStateRecord<TPayload>;
+}>;
+declare function consumeOAuthState<TPayload extends Record<string, unknown> = Record<string, unknown>>(ctx: OAuthSettings, options: ConsumeOAuthStateOptions): Promise<OAuthStateRecord<TPayload>>;
+declare function verifyQueryHmacSha256(params: OAuthQueryParams, secret: string, options?: VerifyQueryHmacSha256Options): boolean;
+
+interface PluginPublicServiceRequest {
+    method: string;
+    path: string;
+    query: Record<string, string | string[]>;
+    headers: Record<string, string | undefined>;
+    body: unknown;
+    requestId: string;
+}
+interface PluginPublicServiceResponse {
+    status?: number;
+    headers?: Record<string, string>;
+    body?: unknown;
+}
+interface PluginPublicService {
+    name: string;
+    handle(request: PluginPublicServiceRequest, context: PluginContext): Promise<PluginPublicServiceResponse>;
+}
+declare function definePublicService(service: PluginPublicService): PluginPublicService;
+
+export { type CreatePluginRuntimeContextInput, type OAuthStateRecord, type PluginPublicService, type PluginPublicServiceRequest, type PluginPublicServiceResponse, type PluginRuntimeBridge, type PluginRuntimeRequestContext, buildOAuthCallbackPath, buildOAuthCallbackUrl, buildOAuthResultRedirect, buildOAuthStateKey, consumeOAuthState, createOAuthState, createPluginRuntimeContext, createPluginRuntimeRequestContext, definePublicService, maskOAuthSecret, runWithPluginRuntimeContext, setPluginRuntimeBridge, verifyQueryHmacSha256 };