@zhin.js/host-http 1.2.0 → 1.2.1

package/lib/console-plugin-rpc.d.ts

@@ -1,7 +1,14 @@
 import type { RuntimeConsoleRpcContext, RuntimeConsoleRpcMessage, RuntimeConsoleRpcReply } from './console-rpc.js';
+/**
+ * Refusal of the global plugin switch (`plugin:set-enabled`, `feature.set-enabled` at `global`)
+ * by an instance: the switch is a gateway transaction (stop → write `disable_plugins` → start,
+ * rollback on failure) and is never written by the instance itself (ADR 0054 §4).
+ */
+export declare const PLUGIN_SWITCH_REQUIRES_GATEWAY = "\u63D2\u4EF6\u5168\u5C40\u542F\u505C\u7531\u7BA1\u7406\u7F51\u5173\u6267\u884C\uFF08\u505C\u6B62\u5B9E\u4F8B \u2192 \u5199\u5165 disable_plugins \u2192 \u542F\u52A8\uFF0C\u5931\u8D25\u56DE\u6EDA\uFF09\uFF1A\u8BF7\u5728 zhin start \u542F\u52A8\u7684 Console \u4E2D\u64CD\u4F5C\uFF0C\u6216\u8FD0\u884C zhin enable / zhin disable <\u63D2\u4EF6>";
 /**
  * Dispatches the plugin-management slice; undefined means the type belongs elsewhere. Package
  * installs / updates / uninstalls are not handled in the instance: they are gateway dependency
- * transactions (`gateway.packages.*`, ADR 0054 §4) that stop the instance first.
+ * transactions (`gateway.packages.*`, ADR 0054 §4) that stop the instance first, and so is the
+ * global plugin switch (`plugin:set-enabled`, refused here).
  */
 export declare function dispatchPluginConsoleRpc(type: string, message: RuntimeConsoleRpcMessage, ctx: RuntimeConsoleRpcContext): Promise<RuntimeConsoleRpcReply | undefined>;

package/lib/console-plugin-rpc.js

@@ -1,39 +1,24 @@
 import { PLUGIN_RPC } from '@zhin.js/console-protocol';
+/**
+ * Refusal of the global plugin switch (`plugin:set-enabled`, `feature.set-enabled` at `global`)
+ * by an instance: the switch is a gateway transaction (stop → write `disable_plugins` → start,
+ * rollback on failure) and is never written by the instance itself (ADR 0054 §4).
+ */
+export const PLUGIN_SWITCH_REQUIRES_GATEWAY = '插件全局启停由管理网关执行（停止实例 → 写入 disable_plugins → 启动，失败回滚）：请在 zhin start 启动的 Console 中操作，或运行 zhin enable / zhin disable <插件>';
 /**
  * Dispatches the plugin-management slice; undefined means the type belongs elsewhere. Package
  * installs / updates / uninstalls are not handled in the instance: they are gateway dependency
- * transactions (`gateway.packages.*`, ADR 0054 §4) that stop the instance first.
+ * transactions (`gateway.packages.*`, ADR 0054 §4) that stop the instance first, and so is the
+ * global plugin switch (`plugin:set-enabled`, refused here).
  */
 export async function dispatchPluginConsoleRpc(type, message, ctx) {
     const requestId = message.requestId;
     try {
         switch (type) {
-            case PLUGIN_RPC.SET_ENABLED: {
-                const instanceKey = stringField(message, 'instanceKey');
-                const enabled = message.enabled;
-                if (!instanceKey || typeof enabled !== 'boolean') {
-                    return { requestId, error: 'instanceKey and boolean enabled are required' };
-                }
-                if (!ctx.setPluginEnabled) {
-                    return { requestId, error: 'Plugin lifecycle management is not configured' };
-                }
-                const lifecycle = await ctx.setPluginEnabled(instanceKey, enabled);
-                ctx.publishEvent?.('plugin:lifecycle-updated', { instanceKey, enabled });
-                if (ctx.requestRestart) {
-                    setTimeout(() => void Promise.resolve(ctx.requestRestart?.()).catch(() => undefined), 500);
-                }
-                return {
-                    requestId,
-                    data: {
-                        success: true,
-                        instanceKey,
-                        enabled,
-                        disabled: lifecycle.disabled,
-                        restartRequired: true,
-                        message: `${instanceKey} 已${enabled ? '启用' : '停用'}，Host 正在重启`,
-                    },
-                };
-            }
+            case PLUGIN_RPC.SET_ENABLED:
+                // Global plugin on / off is a management gateway transaction (ADR 0054 §4): the gateway
+                // answers it before forwarding. Reaching the instance means no gateway is in front.
+                return { requestId, error: PLUGIN_SWITCH_REQUIRES_GATEWAY };
             case PLUGIN_RPC.INSPECT:
             case PLUGIN_RPC.APPLY:
             case PLUGIN_RPC.PLAN_VERIFICATION:

package/lib/console-rpc.d.ts

@@ -166,10 +166,6 @@ export type RuntimeConsoleRpcContext = {
     /** Full-scope project read (`config:get-project`); masked unless `reveal`. */
     readProjectConfig?(request: import('@zhin.js/console-protocol').ConsoleConfigProjectReadRequest): Promise<import('@zhin.js/console-protocol').ConsoleConfigProjectRead>;
     applyConfig?(expectedRevision: string): Promise<import('@zhin.js/console-protocol').ConsoleConfigApplyResult>;
-    /** Persist a declared child Plugin lifecycle state. Takes effect after restart. */
-    setPluginEnabled?(instanceKey: string, enabled: boolean): Promise<Readonly<{
-        disabled: readonly string[];
-    }>>;
     /** Read-only install planning shared by Console Web and CLI surfaces. */
     pluginManagement?: PluginManagementPort;
     validatePluginConfig?(pluginName: string, data: unknown): Promise<PluginConfigValidation>;

package/lib/index.d.ts

@@ -11,7 +11,7 @@ export { buildOpenApiDocument, patternToOpenApiPath, routeRequiresBearerAuth, ty
 export { HttpBodyError, readBodyBytes, readJsonBody, readTextBody, type HttpBodyReadOptions, } from './json-body.js';
 export { createResponseStream, emptyResponse, jsonResponse, SSE_HEADERS, type HttpResponseStream, type HttpResponseStreamOptions, } from '@zhin.js/host-http-contract';
 export { dispatchRuntimeConsoleRpc, pickRpcReply, type RuntimeConsolePage, type RuntimeConsoleRpcContext, type RuntimeConsoleRpcMessage, type RuntimeConsoleRpcReply, type RuntimeEndpointSendInput, type PluginInstallPlan, type PluginUninstallPlan, type PluginUpdatePlan, type PluginManagementPort, type PluginManagementState, type PluginVerificationResult, type PluginVerificationPlan, type PluginConfigValidation, } from './console-rpc.js';
-export { dispatchPluginConsoleRpc } from './console-plugin-rpc.js';
+export { dispatchPluginConsoleRpc, PLUGIN_SWITCH_REQUIRES_GATEWAY } from './console-plugin-rpc.js';
 export { buildProjectFileTree, FILE_MANAGER_ALLOWED, FILE_MANAGER_BLOCKED, isProjectPathAllowed, listEnvFiles, readProjectFile, saveProjectFile, type FileTreeNode, } from './project-files.js';
 export { registerConsoleRestPages, type ConsoleAgentIntrospection, type ConsoleAgentRuntime, type ConsoleAgentSessionTree, type ConsoleRestCtx, type ConsoleRestPagesOptions, } from './console-rest-pages.js';
 export { dispatchExtendedConsoleRpc, type ConsoleRpcExtendedCtx, type ConsoleScheduleEngine, type ConsoleWorkroomProfileControlPort, type ConsoleWorkroomKnowledgeControlPort, type ExtendedRpcResult, } from './console-rpc-extended/index.js';

package/lib/index.js

@@ -10,7 +10,7 @@ export { buildOpenApiDocument, patternToOpenApiPath, routeRequiresBearerAuth, }
 export { HttpBodyError, readBodyBytes, readJsonBody, readTextBody, } from './json-body.js';
 export { createResponseStream, emptyResponse, jsonResponse, SSE_HEADERS, } from '@zhin.js/host-http-contract';
 export { dispatchRuntimeConsoleRpc, pickRpcReply, } from './console-rpc.js';
-export { dispatchPluginConsoleRpc } from './console-plugin-rpc.js';
+export { dispatchPluginConsoleRpc, PLUGIN_SWITCH_REQUIRES_GATEWAY } from './console-plugin-rpc.js';
 export { buildProjectFileTree, FILE_MANAGER_ALLOWED, FILE_MANAGER_BLOCKED, isProjectPathAllowed, listEnvFiles, readProjectFile, saveProjectFile, } from './project-files.js';
 export { registerConsoleRestPages, } from './console-rest-pages.js';
 export { dispatchExtendedConsoleRpc, } from './console-rpc-extended/index.js';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zhin.js/host-http",
-  "version": "1.2.0",
+  "version": "1.2.1",
   "description": "Minimal HTTP and WebSocket host for Plugin Runtime (no Koa)",
   "type": "module",
   "main": "./lib/index.js",
@@ -25,7 +25,7 @@
   ],
   "dependencies": {
     "ws": "^8.21.1",
-    "@zhin.js/console-protocol": "1.2.0",
+    "@zhin.js/console-protocol": "1.2.1",
     "@zhin.js/host-http-contract": "1.2.0",
     "@zhin.js/logger": "1.1.3",
     "@zhin.js/schedule": "1.1.5",

package/src/console-plugin-rpc.ts

@@ -5,10 +5,18 @@ import type {
   RuntimeConsoleRpcReply,
 } from './console-rpc.js';
 
+/**
+ * Refusal of the global plugin switch (`plugin:set-enabled`, `feature.set-enabled` at `global`)
+ * by an instance: the switch is a gateway transaction (stop → write `disable_plugins` → start,
+ * rollback on failure) and is never written by the instance itself (ADR 0054 §4).
+ */
+export const PLUGIN_SWITCH_REQUIRES_GATEWAY = '插件全局启停由管理网关执行（停止实例 → 写入 disable_plugins → 启动，失败回滚）：请在 zhin start 启动的 Console 中操作，或运行 zhin enable / zhin disable <插件>';
+
 /**
  * Dispatches the plugin-management slice; undefined means the type belongs elsewhere. Package
  * installs / updates / uninstalls are not handled in the instance: they are gateway dependency
- * transactions (`gateway.packages.*`, ADR 0054 §4) that stop the instance first.
+ * transactions (`gateway.packages.*`, ADR 0054 §4) that stop the instance first, and so is the
+ * global plugin switch (`plugin:set-enabled`, refused here).
  */
 export async function dispatchPluginConsoleRpc(
   type: string,
@@ -18,32 +26,10 @@ export async function dispatchPluginConsoleRpc(
   const requestId = message.requestId as number | string | undefined;
   try {
     switch (type) {
-      case PLUGIN_RPC.SET_ENABLED: {
-        const instanceKey = stringField(message, 'instanceKey');
-        const enabled = message.enabled;
-        if (!instanceKey || typeof enabled !== 'boolean') {
-          return { requestId, error: 'instanceKey and boolean enabled are required' };
-        }
-        if (!ctx.setPluginEnabled) {
-          return { requestId, error: 'Plugin lifecycle management is not configured' };
-        }
-        const lifecycle = await ctx.setPluginEnabled(instanceKey, enabled);
-        ctx.publishEvent?.('plugin:lifecycle-updated', { instanceKey, enabled });
-        if (ctx.requestRestart) {
-          setTimeout(() => void Promise.resolve(ctx.requestRestart?.()).catch(() => undefined), 500);
-        }
-        return {
-          requestId,
-          data: {
-            success: true,
-            instanceKey,
-            enabled,
-            disabled: lifecycle.disabled,
-            restartRequired: true,
-            message: `${instanceKey} 已${enabled ? '启用' : '停用'}，Host 正在重启`,
-          },
-        };
-      }
+      case PLUGIN_RPC.SET_ENABLED:
+        // Global plugin on / off is a management gateway transaction (ADR 0054 §4): the gateway
+        // answers it before forwarding. Reaching the instance means no gateway is in front.
+        return { requestId, error: PLUGIN_SWITCH_REQUIRES_GATEWAY };
       case PLUGIN_RPC.INSPECT:
       case PLUGIN_RPC.APPLY:
       case PLUGIN_RPC.PLAN_VERIFICATION:

package/src/console-rpc.ts

@@ -187,11 +187,6 @@ export type RuntimeConsoleRpcContext = {
   /** Full-scope project read (`config:get-project`); masked unless `reveal`. */
   readProjectConfig?(request: import('@zhin.js/console-protocol').ConsoleConfigProjectReadRequest): Promise<import('@zhin.js/console-protocol').ConsoleConfigProjectRead>;
   applyConfig?(expectedRevision: string): Promise<import('@zhin.js/console-protocol').ConsoleConfigApplyResult>;
-  /** Persist a declared child Plugin lifecycle state. Takes effect after restart. */
-  setPluginEnabled?(
-    instanceKey: string,
-    enabled: boolean,
-  ): Promise<Readonly<{ disabled: readonly string[] }>>;
   /** Read-only install planning shared by Console Web and CLI surfaces. */
   pluginManagement?: PluginManagementPort;
   validatePluginConfig?(pluginName: string, data: unknown): Promise<PluginConfigValidation>;

package/src/index.ts

@@ -109,7 +109,7 @@ export {
   type PluginVerificationPlan,
   type PluginConfigValidation,
 } from './console-rpc.js';
-export { dispatchPluginConsoleRpc } from './console-plugin-rpc.js';
+export { dispatchPluginConsoleRpc, PLUGIN_SWITCH_REQUIRES_GATEWAY } from './console-plugin-rpc.js';
 export {
   buildProjectFileTree,
   FILE_MANAGER_ALLOWED,