@zhin.js/host-http 1.1.0 → 1.1.1

package/lib/console-rpc-extended/workroom-rpc.js

@@ -0,0 +1,104 @@
+import { errorMessage, optionalRpcText, optionalRpcTextArray, requiredRpcBoolean, requiredRpcInteger, requiredRpcText, requiredRpcValue, } from './rpc-values.js';
+export async function mutateWorkroomProfile(type, data, ctx) {
+    const control = ctx.workroomProfileControl;
+    if (!control)
+        return { error: 'Workroom Profile authority control is unavailable' };
+    for (const forbidden of [
+        'authenticatedPrincipalId', 'principalId', 'decision', 'governance', 'approval', 'authority',
+    ]) {
+        if (forbidden in data)
+            return { error: `Console Workroom Profile request cannot carry ${forbidden}` };
+    }
+    if (type === 'workroom.profile.status') {
+        try {
+            return { data: await control.getPlanningStatus(requiredRpcText(data.projectId, 'projectId'), ctx.authenticatedPrincipal) };
+        }
+        catch (error) {
+            return { error: errorMessage(error) };
+        }
+    }
+    const principal = ctx.authenticatedPrincipal;
+    if (!principal)
+        return { error: 'Workroom Profile control requires an authenticated principal' };
+    try {
+        const operationId = requiredRpcText(data.operationId, 'operationId');
+        if (type === 'workroom.profile.bootstrap') {
+            const projectId = requiredRpcText(data.projectId, 'projectId');
+            const includeTools = optionalRpcTextArray(data.includeTools, 'includeTools');
+            const includeSkills = optionalRpcTextArray(data.includeSkills, 'includeSkills');
+            return { data: await control.bootstrapPlanning(Object.freeze({
+                    operationId,
+                    projectId,
+                    expectedRegistryRevision: requiredRpcInteger(data.expectedRegistryRevision, 'expectedRegistryRevision', -1),
+                    ...(includeTools ? { includeTools } : {}),
+                    ...(includeSkills ? { includeSkills } : {}),
+                }), principal) };
+        }
+        if (type === 'workroom.profile.pack.publish') {
+            return { data: await control.publishPack(Object.freeze({ operationId, pack: requiredRpcValue(data.pack, 'pack') }), principal) };
+        }
+        const projectId = requiredRpcText(data.projectId, 'projectId');
+        if (type === 'workroom.profile.policy.publish') {
+            const expectedPreviousDigest = optionalRpcText(data.expectedPreviousDigest, 'expectedPreviousDigest');
+            return { data: await control.publishPlanningPolicy(Object.freeze({
+                    operationId,
+                    projectId,
+                    profileRevisionId: requiredRpcText(data.profileRevisionId, 'profileRevisionId'),
+                    revision: requiredRpcInteger(data.revision, 'revision'),
+                    ...(expectedPreviousDigest ? { expectedPreviousDigest } : {}),
+                    policy: requiredRpcValue(data.policy, 'policy'),
+                }), principal) };
+        }
+        const common = {
+            operationId,
+            projectId,
+            expectedRegistryRevision: requiredRpcInteger(data.expectedRegistryRevision, 'expectedRegistryRevision', -1),
+            overlay: requiredRpcValue(data.overlay, 'overlay'),
+            activate: requiredRpcBoolean(data.activate, 'activate'),
+        };
+        return type === 'workroom.profile.rollback'
+            ? { data: await control.publishRollback(Object.freeze({
+                    ...common,
+                    restoredFromRevisionId: requiredRpcText(data.restoredFromRevisionId, 'restoredFromRevisionId'),
+                }), principal) }
+            : { data: await control.publishProfile(Object.freeze(common), principal) };
+    }
+    catch (error) {
+        return { error: errorMessage(error) };
+    }
+}
+export async function mutateWorkroomKnowledge(type, data, ctx) {
+    const control = ctx.workroomKnowledgeControl;
+    if (!control)
+        return { error: 'Workroom Knowledge control is unavailable' };
+    for (const forbidden of [
+        'authenticatedPrincipalId', 'principalId', 'ownerPrincipalId', 'source', 'decision',
+        'governance', 'approval', 'authority', 'body', 'content',
+    ]) {
+        if (forbidden in data)
+            return { error: `Console Workroom Knowledge request cannot carry ${forbidden}` };
+    }
+    try {
+        const projectId = requiredRpcText(data.projectId, 'projectId');
+        if (type === 'workroom.knowledge.get')
+            return { data: await control.read(projectId) };
+        const principal = ctx.authenticatedPrincipal;
+        if (!principal)
+            return { error: 'Workroom Knowledge mutation requires an authenticated principal' };
+        const common = {
+            operationId: requiredRpcText(data.operationId, 'operationId'), projectId,
+            expectedRevision: requiredRpcInteger(data.expectedRevision, 'expectedRevision', -1),
+        };
+        if (type === 'workroom.knowledge.rollback') {
+            return { data: await control.rollback(Object.freeze({
+                    ...common, restoreRevision: requiredRpcInteger(data.restoreRevision, 'restoreRevision', 0),
+                }), principal) };
+        }
+        if (!Array.isArray(data.entries))
+            throw new Error('entries is invalid');
+        return { data: await control.publish(Object.freeze({ ...common, entries: structuredClone(data.entries) }), principal) };
+    }
+    catch (error) {
+        return { error: errorMessage(error) };
+    }
+}

package/lib/console-rpc.d.ts

@@ -1,7 +1,7 @@
 import type { AuthScope } from './token-registry.js';
 import type { DatabaseHostConsole } from '@zhin.js/plugin-runtime';
-import { type ConsoleEndpointSummary } from '@zhin.js/console-protocol';
-import { type ConsoleRpcExtendedCtx } from './console-rpc-extended.js';
+import { type ConsoleConfigSource, type ConsoleEndpointSummary } from '@zhin.js/console-protocol';
+import { type ConsoleRpcExtendedCtx } from './console-rpc-extended/index.js';
 /**
  * Console RPC 请求结构：未锚定 endpoint 的会话地址（结构对齐
  * `Omit<ConversationRef,'endpoint'>`；host/http 架构分层不允许依赖
@@ -22,6 +22,62 @@ export type RuntimeConsoleRpcMessage = {
     readonly [key: string]: unknown;
 };
 export type RuntimeConsoleRpcReply = Record<string, unknown>;
+export interface PluginInstallPlan {
+    readonly packageName: string;
+    readonly instanceKey: string;
+    readonly alreadyDeclared: boolean;
+    readonly alreadyInstalled: boolean;
+    readonly restartRequired: boolean;
+    readonly changes: Readonly<{
+        readonly packageManifest: 'unchanged' | 'add-plugin';
+        readonly config: 'unchanged' | 'create-entry' | 'schema-required';
+    }>;
+    readonly warnings: readonly string[];
+}
+export interface PluginUninstallPlan {
+    readonly packageName: string;
+    readonly instanceKey: string;
+    readonly installed: boolean;
+    readonly declared: boolean;
+    readonly hasConfig: boolean;
+    readonly restartRequired: boolean;
+}
+export interface PluginUpdatePlan {
+    readonly packageName: string;
+    readonly instanceKey: string;
+    readonly currentVersion: string | null;
+    readonly targetVersion: string;
+    readonly installed: boolean;
+    readonly declared: boolean;
+    readonly alreadyCurrent: boolean;
+    readonly restartRequired: boolean;
+}
+export interface PluginManagementPort {
+    planInstall(packageName: string): Promise<PluginInstallPlan>;
+    install?(packageName: string, expectedRevision?: string): Promise<Readonly<{
+        readonly plan: PluginInstallPlan;
+        readonly restartRequired: boolean;
+    }>>;
+    planUninstall?(packageName: string): Promise<PluginUninstallPlan>;
+    uninstall?(packageName: string, expectedRevision?: string): Promise<Readonly<{
+        readonly plan: PluginUninstallPlan;
+        readonly restartRequired: boolean;
+    }>>;
+    planUpdate?(packageName: string, targetVersion: string): Promise<PluginUpdatePlan>;
+    update?(packageName: string, targetVersion: string, expectedRevision?: string): Promise<Readonly<{
+        readonly plan: PluginUpdatePlan;
+        readonly installedVersion: string;
+        readonly restartRequired: boolean;
+    }>>;
+}
+export interface PluginConfigValidation {
+    readonly valid: boolean;
+    readonly errors: readonly {
+        readonly path: string;
+        readonly message: string;
+    }[];
+    readonly missingEnv: readonly string[];
+}
 export type RuntimeConsolePage = {
     readonly id: string;
     readonly localName: string;
@@ -35,17 +91,16 @@ export type RuntimeConsoleRpcContext = {
     readonly authScope: AuthScope;
     listPages(): Promise<readonly RuntimeConsolePage[]>;
     /** Optional project config accessors for read-only config RPCs. */
-    readConfigYaml?(): Promise<string>;
-    listPluginKeys?(): Promise<readonly string[]>;
+    readConfigSource?(): Promise<ConsoleConfigSource>;
     readConfigDocument?(): Promise<Record<string, unknown>>;
-    /**
-     * Full-scope write: replace project config file contents (YAML or JSON text).
-     * Runtime Host does not hot-reload the process — callers should restart.
-     */
-    writeConfigYaml?(yaml: string): Promise<void>;
+    /** Full-scope, revision-checked replacement of the active Root config source. */
+    replaceConfigSource?(source: string, expectedRevision: string): Promise<{
+        readonly revision: string;
+        readonly restartRequired: boolean;
+    }>;
     /**
      * Full-scope write: set `document[pluginName] = data` and persist.
-     * Returns whether a process restart is required (always true without ConfigFeature).
+     * Returns whether a process restart is required.
      */
     setConfigKey?(pluginName: string, data: unknown): Promise<{
         restartRequired: boolean;
@@ -54,6 +109,10 @@ export type RuntimeConsoleRpcContext = {
     setPluginEnabled?(instanceKey: string, enabled: boolean): Promise<Readonly<{
         disabled: readonly string[];
     }>>;
+    /** Read-only install planning shared by Console Web and CLI surfaces. */
+    pluginManagement?: PluginManagementPort;
+    validatePluginConfig?(pluginName: string, data: unknown): Promise<PluginConfigValidation>;
+    diagnosePlugin?(pluginName: string): Promise<unknown>;
     /** Atomic, revision-checked runtime Workroom Catalog read/write. */
     readWorkroomCatalog?(): Promise<Readonly<{
         agents: Readonly<Record<string, unknown>>;
@@ -83,8 +142,8 @@ export type RuntimeConsoleRpcContext = {
     getSchema?(pluginName?: string): Promise<unknown>;
     getAllSchemas?(): Promise<Record<string, unknown>>;
     /** Optional Adapter endpoint Console surface (Sandbox / Remote Console). */
-    listEndpoints?(): Promise<readonly RuntimeEndpointSummary[]>;
-    getEndpoint?(adapter: string, endpointKey: string): Promise<RuntimeEndpointSummary | null>;
+    listEndpoints?(): Promise<readonly ConsoleEndpointSummary[]>;
+    getEndpoint?(adapter: string, endpointKey: string): Promise<ConsoleEndpointSummary | null>;
     sendEndpointMessage?(input: RuntimeEndpointSendInput): Promise<{
         messageId: string;
     }>;
@@ -102,9 +161,6 @@ export type RuntimeConsoleRpcContext = {
     /** Extended RPC surface（cron/schedule、endpoint 社交/inbox），fullScope 由 authScope 推导。 */
     extended?: Omit<ConsoleRpcExtendedCtx, 'fullScope'>;
 };
-export type RuntimeEndpointPhase = NonNullable<ConsoleEndpointSummary['phase']>;
-/** @deprecated Prefer `ConsoleEndpointSummary` from `@zhin.js/console-protocol`. */
-export type RuntimeEndpointSummary = ConsoleEndpointSummary;
 export type RuntimeDatabaseInfo = {
     readonly dialect: string | null;
     readonly connected: boolean;

package/lib/console-rpc.js

@@ -1,11 +1,9 @@
-import { assertDemoConsoleRpcAllowed, endpointSendResult, normalizeConsoleRpcMessage, } from '@zhin.js/console-protocol';
-import { dispatchExtendedConsoleRpc } from './console-rpc-extended.js';
-/** `$channel_type`/`$channel_id`/`$parent` wire 字段 → 会话地址（RPC 边界组帧）。 */
+import { CONFIG_RPC, ENDPOINT_RPC, assertDemoConsoleRpcAllowed, } from '@zhin.js/console-protocol';
+import { dispatchExtendedConsoleRpc } from './console-rpc-extended/index.js';
+import { dispatchPluginConsoleRpc } from './console-plugin-rpc.js';
+/** Canonical Console wire fields → runtime conversation address. */
 function wireConversation(channelType, channelId, parent) {
-    // console 旧 wire 允许 channel_id 自带场景前缀（`group:123`），解析结果优先
-    const prefixed = /^(private|group|channel|direct|c2c|temp):(.+)$/iu.exec(channelId);
-    const rawKind = channelType || prefixed?.[1] || 'private';
-    const kind = rawKind === 'group' || rawKind === 'channel' ? rawKind : 'private';
+    const kind = channelType === 'group' || channelType === 'channel' ? channelType : 'private';
     const wire = parent && typeof parent === 'object'
         ? parent
         : undefined;
@@ -13,7 +11,7 @@ function wireConversation(channelType, channelId, parent) {
     const parentId = typeof wire?.id === 'string' && wire.id ? wire.id : undefined;
     return {
         kind,
-        id: prefixed ? prefixed[2] : channelId,
+        id: channelId,
         ...(parentKind && parentId ? { parent: { kind: parentKind, id: parentId } } : {}),
     };
 }
@@ -28,7 +26,6 @@ export async function dispatchRuntimeConsoleRpc(message, ctx) {
     const emit = (payload) => {
         payloads.push(payload);
     };
-    message = normalizeConsoleRpcMessage(message);
     const type = String(message.type ?? '');
     const requestId = message.requestId;
     if (ctx.authScope === 'demo') {
@@ -48,6 +45,11 @@ export async function dispatchRuntimeConsoleRpc(message, ctx) {
             return payloads;
         }
     }
+    const pluginReply = await dispatchPluginConsoleRpc(type, message, ctx);
+    if (pluginReply !== undefined) {
+        emit(pluginReply);
+        return payloads;
+    }
     switch (type) {
         case 'ping':
             emit({ type: 'pong', requestId });
@@ -73,11 +75,12 @@ export async function dispatchRuntimeConsoleRpc(message, ctx) {
             emit({ requestId, data: pages });
             return payloads;
         }
-        case 'config:get-yaml': {
+        case CONFIG_RPC.GET_SOURCE: {
             try {
-                const yaml = ctx.readConfigYaml ? await ctx.readConfigYaml() : '';
-                const pluginKeys = ctx.listPluginKeys ? await ctx.listPluginKeys() : [];
-                emit({ requestId, data: { yaml, pluginKeys } });
+                const config = ctx.readConfigSource
+                    ? await ctx.readConfigSource()
+                    : { source: '', format: 'yaml', revision: '', configKeys: [] };
+                emit({ requestId, data: config });
             }
             catch (error) {
                 emit({
@@ -87,7 +90,7 @@ export async function dispatchRuntimeConsoleRpc(message, ctx) {
             }
             return payloads;
         }
-        case 'config:get-all': {
+        case CONFIG_RPC.GET_ALL: {
             try {
                 const document = ctx.readConfigDocument ? await ctx.readConfigDocument() : {};
                 emit({ requestId, data: document });
@@ -100,11 +103,9 @@ export async function dispatchRuntimeConsoleRpc(message, ctx) {
             }
             return payloads;
         }
-        case 'config:get': {
+        case CONFIG_RPC.GET: {
             try {
-                // 兼容 console UI 的 data:{plugin} / data:{key} 形状
-                const data = (message.data ?? {});
-                const key = String(message.key ?? message.pluginName ?? data.pluginName ?? data.plugin ?? data.key ?? '');
+                const key = String(message.pluginName ?? '');
                 const document = ctx.readConfigDocument ? await ctx.readConfigDocument() : {};
                 emit({ requestId, data: key ? document[key] : document });
             }
@@ -151,22 +152,33 @@ export async function dispatchRuntimeConsoleRpc(message, ctx) {
             }
             return payloads;
         }
-        case 'config:save-yaml': {
+        case CONFIG_RPC.REPLACE_SOURCE: {
             try {
-                const yaml = message.yaml;
-                if (typeof yaml !== 'string') {
-                    emit({ requestId, error: 'yaml field is required' });
+                const source = message.source;
+                const expectedRevision = message.expectedRevision;
+                if (typeof source !== 'string') {
+                    emit({ requestId, error: 'source field is required' });
+                    return payloads;
+                }
+                if (typeof expectedRevision !== 'string' || !/^[a-f0-9]{64}$/u.test(expectedRevision)) {
+                    emit({ requestId, error: 'expectedRevision is required' });
                     return payloads;
                 }
-                if (!ctx.writeConfigYaml) {
+                if (!ctx.replaceConfigSource) {
                     emit({ requestId, error: 'Config write is not configured' });
                     return payloads;
                 }
-                await ctx.writeConfigYaml(yaml);
+                const result = await ctx.replaceConfigSource(source, expectedRevision);
                 ctx.publishEvent?.('config:updated', { pluginName: null, keys: [] });
                 emit({
                     requestId,
-                    data: { success: true, message: '配置已保存，需重启生效' },
+                    data: {
+                        success: true,
+                        ...result,
+                        message: result.restartRequired
+                            ? '配置已保存，需重启进程才能生效'
+                            : '配置已保存',
+                    },
                 });
             }
             catch (error) {
@@ -177,7 +189,7 @@ export async function dispatchRuntimeConsoleRpc(message, ctx) {
             }
             return payloads;
         }
-        case 'config:set': {
+        case CONFIG_RPC.SET: {
             try {
                 const pluginName = message.pluginName;
                 if (typeof pluginName !== 'string' || !pluginName) {
@@ -188,6 +200,17 @@ export async function dispatchRuntimeConsoleRpc(message, ctx) {
                     emit({ requestId, error: 'Config write is not configured' });
                     return payloads;
                 }
+                if (ctx.validatePluginConfig) {
+                    const validation = await ctx.validatePluginConfig(pluginName, message.data);
+                    if (!validation.valid) {
+                        emit({
+                            requestId,
+                            error: '配置校验失败',
+                            data: validation,
+                        });
+                        return payloads;
+                    }
+                }
                 const result = await ctx.setConfigKey(pluginName, message.data);
                 ctx.publishEvent?.('config:updated', {
                     pluginName,
@@ -340,10 +363,9 @@ export async function dispatchRuntimeConsoleRpc(message, ctx) {
         }
         case 'schema:get': {
             try {
-                // 兼容 console UI 的 data:{plugin} / data:{pluginName} 形状（SDK 发顶层 pluginName）
-                const data = (message.data ?? {});
-                const candidate = message.pluginName ?? data.pluginName ?? data.plugin;
-                const pluginName = typeof candidate === 'string' ? candidate : undefined;
+                const pluginName = typeof message.pluginName === 'string'
+                    ? message.pluginName
+                    : undefined;
                 const schema = ctx.getSchema ? await ctx.getSchema(pluginName) : null;
                 emit({ requestId, data: schema });
             }
@@ -575,11 +597,11 @@ export async function dispatchRuntimeConsoleRpc(message, ctx) {
         }
         case 'endpoint.info': {
             try {
-                const data = message;
-                const adapter = String(data.$adapter ?? '');
-                const endpointKey = String(data.$endpoint ?? '');
+                const data = recordField(message.data) ?? message;
+                const adapter = String(data.adapter ?? '');
+                const endpointKey = String(data.endpointKey ?? '');
                 if (!adapter || !endpointKey) {
-                    emit({ requestId, error: '$adapter and $endpoint required' });
+                    emit({ requestId, error: 'adapter and endpointKey are required' });
                     return payloads;
                 }
                 if (!ctx.getEndpoint) {
@@ -601,19 +623,68 @@ export async function dispatchRuntimeConsoleRpc(message, ctx) {
             }
             return payloads;
         }
+        case ENDPOINT_RPC.TEST: {
+            const data = recordField(message.data) ?? message;
+            const adapter = stringField(data, 'adapter');
+            const endpointKey = stringField(data, 'endpointKey');
+            if (!adapter || !endpointKey) {
+                emit({ requestId, error: 'adapter and endpointKey are required' });
+                return payloads;
+            }
+            if (!ctx.getEndpoint) {
+                emit({ requestId, error: 'Endpoint registry is not configured' });
+                return payloads;
+            }
+            const startedAt = Date.now();
+            try {
+                const endpoint = await ctx.getEndpoint(adapter, endpointKey);
+                if (!endpoint) {
+                    emit({ requestId, data: {
+                            reachable: false,
+                            connected: false,
+                            phase: 'unconfigured',
+                            latencyMs: Date.now() - startedAt,
+                            message: 'Endpoint 未注册到当前 generation',
+                        } });
+                    return payloads;
+                }
+                emit({ requestId, data: {
+                        reachable: endpoint.connected && endpoint.status === 'online',
+                        connected: endpoint.connected,
+                        status: endpoint.status,
+                        phase: endpoint.phase ?? (endpoint.connected ? 'online' : 'pending'),
+                        pendingLogin: endpoint.pendingLogin ?? false,
+                        latencyMs: Date.now() - startedAt,
+                        message: endpoint.connected
+                            ? 'Endpoint 已连接'
+                            : endpoint.pendingLogin
+                                ? 'Endpoint 等待登录操作'
+                                : 'Endpoint 当前离线',
+                    } });
+            }
+            catch (error) {
+                emit({ requestId, data: {
+                        reachable: false,
+                        connected: false,
+                        phase: 'failed',
+                        latencyMs: Date.now() - startedAt,
+                        message: error instanceof Error ? error.message : String(error),
+                    } });
+            }
+            return payloads;
+        }
         case 'endpoint.send_message': {
             try {
-                const data = message;
-                const adapter = String(data.$adapter ?? '');
-                const endpointKey = String(data.$endpoint ?? '');
-                const channelId = String(data.$channel_id ?? '');
-                const channelType = String(data.$channel_type ?? '');
-                const content = data.$content;
-                // channelType 可省：wireConversation 归一为 private（与旧 RPC 行为对齐）。
-                if (!adapter || !endpointKey || !channelId || content === undefined) {
+                const data = recordField(message.data) ?? message;
+                const adapter = String(data.adapter ?? '');
+                const endpointKey = String(data.endpointKey ?? '');
+                const channelId = String(data.channelId ?? data.id ?? '');
+                const channelType = String(data.channelType ?? data.type ?? '');
+                const content = data.content;
+                if (!adapter || !endpointKey || !channelId || !channelType || content === undefined) {
                     emit({
                         requestId,
-                        error: '$adapter, $endpoint, $channel_id, $content required',
+                        error: 'adapter, endpointKey, channelId, channelType, and content are required',
                     });
                     return payloads;
                 }
@@ -624,11 +695,10 @@ export async function dispatchRuntimeConsoleRpc(message, ctx) {
                 const result = await ctx.sendEndpointMessage({
                     adapter,
                     endpointKey,
-                    conversation: wireConversation(channelType, channelId, data.$parent),
+                    conversation: wireConversation(channelType, channelId, data.parent),
                     content,
                 });
-                // Legacy contract: { message_id }. Keep messageId for new callers.
-                emit({ requestId, data: endpointSendResult(result.messageId) });
+                emit({ requestId, data: { messageId: result.messageId } });
             }
             catch (error) {
                 emit({
@@ -661,42 +731,6 @@ export async function dispatchRuntimeConsoleRpc(message, ctx) {
             }
             return payloads;
         }
-        case 'plugin:set-enabled': {
-            try {
-                const instanceKey = typeof message.instanceKey === 'string' ? message.instanceKey : '';
-                const enabled = message.enabled;
-                if (!instanceKey || typeof enabled !== 'boolean') {
-                    emit({ requestId, error: 'instanceKey and boolean enabled are required' });
-                    return payloads;
-                }
-                if (!ctx.setPluginEnabled) {
-                    emit({ requestId, error: 'Plugin lifecycle management is not configured' });
-                    return payloads;
-                }
-                const lifecycle = await ctx.setPluginEnabled(instanceKey, enabled);
-                ctx.publishEvent?.('plugin:lifecycle-updated', { instanceKey, enabled });
-                emit({
-                    requestId,
-                    data: {
-                        success: true,
-                        instanceKey,
-                        enabled,
-                        disabled: lifecycle.disabled,
-                        restartRequired: true,
-                        message: `${instanceKey} 已${enabled ? '启用' : '停用'}，Host 正在重启`,
-                    },
-                });
-                if (ctx.requestRestart) {
-                    setTimeout(() => {
-                        void Promise.resolve(ctx.requestRestart?.()).catch(() => undefined);
-                    }, 500);
-                }
-            }
-            catch (error) {
-                emit({ requestId, error: error instanceof Error ? error.message : String(error) });
-            }
-            return payloads;
-        }
         default:
             if (type.startsWith('db:')) {
                 emit({

package/lib/index.d.ts

@@ -5,7 +5,8 @@ export { timingSafeEqualString } from './timing-safe-equal.js';
 export { createConsoleEventHub, consoleEventHubToken, type ConsoleEventHub, } from './console-events.js';
 export { buildOpenApiDocument, patternToOpenApiPath, routeRequiresBearerAuth, type BuildOpenApiOptions, type ListedRoute, type OpenApiParameter, type RouteMeta, } from './openapi.js';
 export { HttpBodyError, readJsonBody, } from './json-body.js';
-export { dispatchRuntimeConsoleRpc, isDemoHttpAllowed, pickRpcReply, type RuntimeConsolePage, type RuntimeConsoleRpcContext, type RuntimeConsoleRpcMessage, type RuntimeConsoleRpcReply, type RuntimeEndpointSendInput, type RuntimeEndpointSummary, } from './console-rpc.js';
+export { dispatchRuntimeConsoleRpc, isDemoHttpAllowed, pickRpcReply, type RuntimeConsolePage, type RuntimeConsoleRpcContext, type RuntimeConsoleRpcMessage, type RuntimeConsoleRpcReply, type RuntimeEndpointSendInput, type PluginInstallPlan, type PluginUninstallPlan, type PluginUpdatePlan, type PluginManagementPort, type PluginConfigValidation, } from './console-rpc.js';
+export { dispatchPluginConsoleRpc } from './console-plugin-rpc.js';
 export { buildProjectFileTree, FILE_MANAGER_ALLOWED, FILE_MANAGER_BLOCKED, isProjectPathAllowed, listEnvFiles, readProjectFile, saveProjectFile, type FileTreeNode, } from './project-files.js';
 export { registerConsoleRestPages, type ConsoleAgentIntrospection, type ConsoleAgentRuntime, type ConsoleAgentSessionTree, type ConsoleRestCtx, type ConsoleRestPagesOptions, } from './console-rest-pages.js';
-export { dispatchExtendedConsoleRpc, type ConsoleRpcExtendedCtx, type ConsoleScheduleEngine, type ConsoleWorkroomProfileControlPort, type ConsoleWorkroomKnowledgeControlPort, type ExtendedRpcResult, } from './console-rpc-extended.js';
+export { dispatchExtendedConsoleRpc, type ConsoleRpcExtendedCtx, type ConsoleScheduleEngine, type ConsoleWorkroomProfileControlPort, type ConsoleWorkroomKnowledgeControlPort, type ExtendedRpcResult, } from './console-rpc-extended/index.js';

package/lib/index.js

@@ -6,6 +6,7 @@ export { createConsoleEventHub, consoleEventHubToken, } from './console-events.j
 export { buildOpenApiDocument, patternToOpenApiPath, routeRequiresBearerAuth, } from './openapi.js';
 export { HttpBodyError, readJsonBody, } from './json-body.js';
 export { dispatchRuntimeConsoleRpc, isDemoHttpAllowed, pickRpcReply, } from './console-rpc.js';
+export { dispatchPluginConsoleRpc } from './console-plugin-rpc.js';
 export { buildProjectFileTree, FILE_MANAGER_ALLOWED, FILE_MANAGER_BLOCKED, isProjectPathAllowed, listEnvFiles, readProjectFile, saveProjectFile, } from './project-files.js';
 export { registerConsoleRestPages, } from './console-rest-pages.js';
-export { dispatchExtendedConsoleRpc, } from './console-rpc-extended.js';
+export { dispatchExtendedConsoleRpc, } from './console-rpc-extended/index.js';

package/lib/marketplace-registry.d.ts

@@ -0,0 +1,12 @@
+export interface MarketplaceRegistryOptions {
+    readonly fetchFn: typeof fetch;
+    readonly url: string;
+    readonly ttlMs: number;
+    readonly now?: () => number;
+}
+/** Host-owned plugin registry reader with TTL caching and request coalescing. */
+export declare class MarketplaceRegistry {
+    #private;
+    constructor(options: MarketplaceRegistryOptions);
+    list(): Promise<readonly unknown[]>;
+}

package/lib/marketplace-registry.js

@@ -0,0 +1,45 @@
+/** Host-owned plugin registry reader with TTL caching and request coalescing. */
+export class MarketplaceRegistry {
+    #fetch;
+    #url;
+    #ttlMs;
+    #now;
+    #snapshot;
+    #inflight;
+    constructor(options) {
+        this.#fetch = options.fetchFn;
+        this.#url = options.url;
+        this.#ttlMs = options.ttlMs;
+        this.#now = options.now ?? Date.now;
+    }
+    list() {
+        const snapshot = this.#snapshot;
+        if (snapshot && this.#now() < snapshot.expiresAt) {
+            return Promise.resolve(snapshot.plugins);
+        }
+        if (this.#inflight)
+            return this.#inflight;
+        const request = this.#load();
+        this.#inflight = request;
+        const clearInflight = () => {
+            if (this.#inflight === request)
+                this.#inflight = undefined;
+        };
+        void request.then(clearInflight, clearInflight);
+        return request;
+    }
+    async #load() {
+        const response = await this.#fetch(this.#url, {
+            signal: AbortSignal.timeout(30_000),
+        });
+        if (!response.ok)
+            throw new Error(`plugins.json fetch failed: ${response.status}`);
+        const json = (await response.json());
+        const plugins = Object.freeze([...(json.plugins ?? [])]);
+        this.#snapshot = Object.freeze({
+            plugins,
+            expiresAt: this.#now() + this.#ttlMs,
+        });
+        return plugins;
+    }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zhin.js/host-http",
-  "version": "1.1.0",
+  "version": "1.1.1",
   "description": "Minimal HTTP and WebSocket host for Plugin Runtime (no Koa)",
   "type": "module",
   "main": "./lib/index.js",
@@ -18,10 +18,10 @@
   ],
   "dependencies": {
     "ws": "^8.21.1",
-    "@zhin.js/console-protocol": "1.1.5",
+    "@zhin.js/logger": "1.1.1",
     "@zhin.js/host-http-contract": "1.1.0",
-    "@zhin.js/logger": "1.1.0",
-    "@zhin.js/plugin-runtime": "1.1.9"
+    "@zhin.js/console-protocol": "1.1.6",
+    "@zhin.js/plugin-runtime": "1.1.10"
   },
   "devDependencies": {
     "@types/node": "^26.1.2",