dineway 0.1.9 → 0.1.12

package/src/astro/routes/api/admin/plugins/[id]/index.ts

@@ -1,38 +0,0 @@
-/**
- * Plugin management single plugin endpoint
- *
- * GET /_dineway/api/admin/plugins/:id - Get plugin details
- */
-
-import type { APIRoute } from "astro";
-
-import { requirePerm } from "#api/authorize.js";
-import { apiError, unwrapResult } from "#api/error.js";
-import { handlePluginGet } from "#api/index.js";
-
-export const prerender = false;
-
-export const GET: APIRoute = async ({ params, locals }) => {
-	const { dineway, user } = locals;
-	const { id } = params;
-
-	if (!dineway?.db) {
-		return apiError("NOT_CONFIGURED", "Dineway is not initialized", 500);
-	}
-
-	const denied = requirePerm(user, "plugins:read");
-	if (denied) return denied;
-
-	if (!id) {
-		return apiError("INVALID_REQUEST", "Plugin ID required", 400);
-	}
-
-	const result = await handlePluginGet(
-		dineway.db,
-		dineway.configuredPlugins,
-		id,
-		dineway.config.marketplace,
-	);
-
-	return unwrapResult(result);
-};

package/src/astro/routes/api/admin/plugins/[id]/uninstall.ts

@@ -1,98 +0,0 @@
-/**
- * Marketplace plugin uninstall endpoint
- *
- * POST /_dineway/api/admin/plugins/:id/uninstall - Uninstall a marketplace plugin
- */
-
-import type { APIRoute } from "astro";
-import { z } from "zod";
-
-import { requirePerm } from "#api/authorize.js";
-import { apiError, unwrapResult } from "#api/error.js";
-import {
-	ensureWorkflowHitlRouteRequest,
-	hitlRequiredRouteError,
-	resolveHitlRouteActor,
-} from "#api/hitl-route-helpers.js";
-import { handleMarketplaceUninstall, handlePluginList } from "#api/index.js";
-import { isParseError, parseOptionalBody } from "#api/parse.js";
-import {
-	logPluginActivity,
-	pluginApiRouteSource,
-	PluginHitlPayloadBuilder,
-	RiskPolicyEvaluator,
-} from "#site-context/index.js";
-
-export const prerender = false;
-
-const uninstallBodySchema = z.object({
-	deleteData: z.boolean().optional(),
-	hitlRequestId: z.string().min(1).optional(),
-});
-
-export const POST: APIRoute = async ({ params, request, locals }) => {
-	const { dineway, user } = locals;
-	const { id } = params;
-
-	if (!dineway?.db) {
-		return apiError("NOT_CONFIGURED", "Dineway is not initialized", 500);
-	}
-
-	const denied = requirePerm(user, "plugins:manage");
-	if (denied) return denied;
-
-	if (!id) {
-		return apiError("INVALID_REQUEST", "Plugin ID required", 400);
-	}
-
-	const body = await parseOptionalBody(request, uninstallBodySchema, {});
-	if (isParseError(body)) return body;
-
-	const actor = resolveHitlRouteActor(locals);
-	let approvedHitlRequestId: string | null = null;
-	const current = await handlePluginList(
-		dineway.db,
-		dineway.configuredPlugins,
-		dineway.config.marketplace,
-	);
-	if (!current.success) return unwrapResult(current);
-	const plugin = current.data.items.find((item) => item.id === id && item.source === "marketplace");
-	if (plugin) {
-		const action = await new PluginHitlPayloadBuilder().buildUninstallRequest(plugin, {
-			deleteData: body.deleteData ?? false,
-		});
-		const decision = await new RiskPolicyEvaluator({
-			db: dineway.db,
-			handlers: dineway,
-		}).evaluateWorkflowHitl({
-			actor: actor.identity,
-			hitlRequestId: body.hitlRequestId,
-			action,
-		});
-		if (!decision.allowed) {
-			const ensured = await ensureWorkflowHitlRouteRequest(dineway.db, locals, decision.action);
-			return hitlRequiredRouteError(decision, ensured);
-		}
-		approvedHitlRequestId = decision.required ? decision.hitlRequest.id : null;
-	}
-
-	const result = await handleMarketplaceUninstall(dineway.db, dineway.storage, id, {
-		deleteData: body.deleteData ?? false,
-	});
-
-	if (!result.success) return unwrapResult(result);
-
-	await dineway.syncMarketplacePlugins();
-	await logPluginActivity(dineway.db, locals, {
-		action: "uninstalled",
-		pluginId: id,
-		...pluginApiRouteSource("uninstalled"),
-		summary: `Uninstalled plugin ${id}`,
-		detail: {
-			deleteData: body.deleteData ?? false,
-			hitlRequestId: approvedHitlRequestId,
-		},
-	});
-
-	return unwrapResult(result);
-};

package/src/astro/routes/api/admin/plugins/[id]/update.ts

@@ -1,154 +0,0 @@
-/**
- * Marketplace plugin update endpoint
- *
- * POST /_dineway/api/admin/plugins/:id/update - Update a marketplace plugin
- */
-
-import type { APIRoute } from "astro";
-import { z } from "zod";
-
-import { requirePerm } from "#api/authorize.js";
-import { apiError, unwrapResult } from "#api/error.js";
-import {
-	ensureWorkflowHitlRouteRequest,
-	hitlRequiredRouteError,
-	resolveHitlRouteActor,
-} from "#api/hitl-route-helpers.js";
-import { handleMarketplaceUpdate, handleMarketplaceUpdatePreview } from "#api/index.js";
-import { isParseError, parseOptionalBody } from "#api/parse.js";
-import {
-	logPluginActivity,
-	pluginApiRouteSource,
-	PluginHitlPayloadBuilder,
-	RiskPolicyEvaluator,
-} from "#site-context/index.js";
-
-export const prerender = false;
-
-const updateBodySchema = z.object({
-	version: z.string().min(1).optional(),
-	confirmCapabilityChanges: z.boolean().optional(),
-	confirmRouteVisibilityChanges: z.boolean().optional(),
-	hitlRequestId: z.string().min(1).optional(),
-});
-
-export const POST: APIRoute = async ({ params, request, locals }) => {
-	const { dineway, user } = locals;
-	const { id } = params;
-
-	if (!dineway?.db) {
-		return apiError("NOT_CONFIGURED", "Dineway is not initialized", 500);
-	}
-
-	const denied = requirePerm(user, "plugins:manage");
-	if (denied) return denied;
-
-	if (!id) {
-		return apiError("INVALID_REQUEST", "Plugin ID required", 400);
-	}
-
-	const body = await parseOptionalBody(request, updateBodySchema, {});
-	if (isParseError(body)) return body;
-	const actor = resolveHitlRouteActor(locals);
-	const evaluator = new RiskPolicyEvaluator({
-		db: dineway.db,
-		handlers: dineway,
-	});
-	let approvedHitlRequestId: string | null = null;
-	let previewDiffs: { hasCapabilityChanges: boolean; hasNewPublicRoutes: boolean } | null = null;
-
-	if (evaluator.requiresWorkflowHitl(actor.identity)) {
-		if (!body.version) {
-			return apiError(
-				"VALIDATION_ERROR",
-				"API-token marketplace updates require an explicit version so the reviewed target is immutable.",
-				400,
-			);
-		}
-
-		const preview = await handleMarketplaceUpdatePreview(
-			dineway.db,
-			dineway.storage,
-			dineway.config.marketplace,
-			id,
-			{ version: body.version },
-		);
-		if (!preview.success) return unwrapResult(preview);
-
-		const action = await new PluginHitlPayloadBuilder().buildMarketplaceUpdateRequest({
-			id: preview.data.pluginId,
-			name: preview.data.name,
-			description: preview.data.description,
-			authorName: preview.data.authorName,
-			version: preview.data.version,
-			minDinewayVersion: preview.data.minDinewayVersion,
-			bundleSize: preview.data.bundleSize,
-			checksum: preview.data.checksum,
-			changelog: preview.data.changelog,
-			capabilities: preview.data.capabilities,
-			status: preview.data.status,
-			auditVerdict: preview.data.auditVerdict,
-			imageAuditVerdict: preview.data.imageAuditVerdict,
-			publishedAt: preview.data.publishedAt,
-			oldVersion: preview.data.oldVersion,
-			capabilityChanges: preview.data.capabilityChanges,
-			routeVisibilityChanges: preview.data.routeVisibilityChanges,
-		});
-		const decision = await evaluator.evaluateWorkflowHitl({
-			actor: actor.identity,
-			hitlRequestId: body.hitlRequestId,
-			action,
-		});
-		if (!decision.allowed) {
-			const ensured = await ensureWorkflowHitlRouteRequest(dineway.db, locals, decision.action);
-			return hitlRequiredRouteError(decision, ensured);
-		}
-		approvedHitlRequestId = decision.hitlRequest.id;
-		previewDiffs = {
-			hasCapabilityChanges:
-				preview.data.capabilityChanges.added.length > 0 ||
-				preview.data.capabilityChanges.removed.length > 0,
-			hasNewPublicRoutes: preview.data.routeVisibilityChanges.newlyPublic.length > 0,
-		};
-	}
-
-	const result = await handleMarketplaceUpdate(
-		dineway.db,
-		dineway.storage,
-		dineway.getSandboxRunner(),
-		dineway.config.marketplace,
-		id,
-		{
-			version: body.version,
-			confirmCapabilityChanges: previewDiffs
-				? previewDiffs.hasCapabilityChanges || body.confirmCapabilityChanges === true
-				: body.confirmCapabilityChanges,
-			confirmRouteVisibilityChanges: previewDiffs
-				? previewDiffs.hasNewPublicRoutes || body.confirmRouteVisibilityChanges === true
-				: body.confirmRouteVisibilityChanges,
-		},
-	);
-
-	if (!result.success) return unwrapResult(result);
-
-	await dineway.syncMarketplacePlugins();
-	await logPluginActivity(dineway.db, locals, {
-		action: "updated",
-		pluginId: id,
-		...pluginApiRouteSource("updated"),
-		summary: `Updated plugin ${id}`,
-		detail: {
-			version: result.data.newVersion,
-			oldVersion: result.data.oldVersion,
-			confirmedCapabilityChanges: previewDiffs
-				? previewDiffs.hasCapabilityChanges
-				: (body.confirmCapabilityChanges ?? false),
-			confirmedRouteVisibilityChanges: previewDiffs
-				? previewDiffs.hasNewPublicRoutes
-				: (body.confirmRouteVisibilityChanges ?? false),
-			hitlRequestId: approvedHitlRequestId,
-		},
-	});
-
-	return unwrapResult(result);
-};

package/src/astro/routes/api/admin/plugins/index.ts

@@ -1,32 +0,0 @@
-/**
- * Plugin management list endpoint
- *
- * GET /_dineway/api/admin/plugins - List all configured plugins with state
- */
-
-import type { APIRoute } from "astro";
-
-import { requirePerm } from "#api/authorize.js";
-import { apiError, unwrapResult } from "#api/error.js";
-import { handlePluginList } from "#api/index.js";
-
-export const prerender = false;
-
-export const GET: APIRoute = async ({ locals }) => {
-	const { dineway, user } = locals;
-
-	if (!dineway?.db) {
-		return apiError("NOT_CONFIGURED", "Dineway is not initialized", 500);
-	}
-
-	const denied = requirePerm(user, "plugins:read");
-	if (denied) return denied;
-
-	const result = await handlePluginList(
-		dineway.db,
-		dineway.configuredPlugins,
-		dineway.config.marketplace,
-	);
-
-	return unwrapResult(result);
-};

package/src/astro/routes/api/admin/plugins/marketplace/[id]/icon.ts

@@ -1,62 +0,0 @@
-/**
- * Marketplace plugin icon proxy
- *
- * GET /_dineway/api/admin/plugins/marketplace/:id/icon - Proxy icon from marketplace
- *
- * Avoids CORS/auth issues when the marketplace service is behind
- * external auth or on a different origin.
- * The admin UI uses this instead of linking directly.
- */
-
-import type { APIRoute } from "astro";
-
-import { requirePerm } from "#api/authorize.js";
-import { apiError } from "#api/error.js";
-
-export const prerender = false;
-
-export const GET: APIRoute = async ({ params, url, locals }) => {
-	const { dineway, user } = locals;
-	const { id } = params;
-
-	if (!dineway?.db) {
-		return apiError("NOT_CONFIGURED", "Dineway is not initialized", 500);
-	}
-
-	const denied = requirePerm(user, "plugins:read");
-	if (denied) return denied;
-
-	const marketplaceUrl = dineway.config.marketplace;
-	if (!marketplaceUrl || !id) {
-		return apiError("NOT_CONFIGURED", "Marketplace not configured", 400);
-	}
-
-	const width = url.searchParams.get("w");
-	const target = new URL(`/api/v1/plugins/${encodeURIComponent(id)}/icon`, marketplaceUrl);
-	if (width) target.searchParams.set("w", width);
-
-	try {
-		const resp = await fetch(target.href);
-		if (!resp.ok) {
-			// Allowlist: only forward Content-Type from upstream.
-			// Never copy all upstream headers (denylist approach leaks
-			// headers we haven't anticipated).
-			return new Response(resp.body, {
-				status: resp.status,
-				headers: {
-					"Content-Type": resp.headers.get("Content-Type") ?? "application/octet-stream",
-					"Cache-Control": "private, no-store",
-				},
-			});
-		}
-
-		return new Response(resp.body, {
-			headers: {
-				"Content-Type": resp.headers.get("Content-Type") ?? "image/png",
-				"Cache-Control": "private, no-store",
-			},
-		});
-	} catch {
-		return apiError("PROXY_ERROR", "Failed to fetch icon", 502);
-	}
-};

package/src/astro/routes/api/admin/plugins/marketplace/[id]/index.ts

@@ -1,33 +0,0 @@
-/**
- * Marketplace plugin detail proxy endpoint
- *
- * GET /_dineway/api/admin/plugins/marketplace/:id - Get plugin details
- */
-
-import type { APIRoute } from "astro";
-
-import { requirePerm } from "#api/authorize.js";
-import { apiError, unwrapResult } from "#api/error.js";
-import { handleMarketplaceGetPlugin } from "#api/index.js";
-
-export const prerender = false;
-
-export const GET: APIRoute = async ({ params, locals }) => {
-	const { dineway, user } = locals;
-	const { id } = params;
-
-	if (!dineway?.db) {
-		return apiError("NOT_CONFIGURED", "Dineway is not initialized", 500);
-	}
-
-	const denied = requirePerm(user, "plugins:read");
-	if (denied) return denied;
-
-	if (!id) {
-		return apiError("INVALID_REQUEST", "Plugin ID required", 400);
-	}
-
-	const result = await handleMarketplaceGetPlugin(dineway.config.marketplace, id);
-
-	return unwrapResult(result);
-};

package/src/astro/routes/api/admin/plugins/marketplace/[id]/install.ts

@@ -1,135 +0,0 @@
-/**
- * Marketplace plugin install endpoint
- *
- * POST /_dineway/api/admin/plugins/marketplace/:id/install - Install a marketplace plugin
- */
-
-import type { APIRoute } from "astro";
-import { z } from "zod";
-
-import { requirePerm } from "#api/authorize.js";
-import { apiError, handleError, unwrapResult } from "#api/error.js";
-import {
-	ensureWorkflowHitlRouteRequest,
-	hitlRequiredRouteError,
-	resolveHitlRouteActor,
-} from "#api/hitl-route-helpers.js";
-import { handleMarketplaceInstall, handleMarketplaceInstallPreview } from "#api/index.js";
-import { isParseError, parseOptionalBody } from "#api/parse.js";
-import {
-	logPluginActivity,
-	pluginApiRouteSource,
-	PluginHitlPayloadBuilder,
-	RiskPolicyEvaluator,
-} from "#site-context/index.js";
-
-export const prerender = false;
-
-const installBodySchema = z.object({
-	version: z.string().min(1).optional(),
-	hitlRequestId: z.string().min(1).optional(),
-});
-
-export const POST: APIRoute = async ({ params, request, locals }) => {
-	try {
-		const { dineway, user } = locals;
-		const { id } = params;
-
-		if (!dineway?.db) {
-			return apiError("NOT_CONFIGURED", "Dineway is not initialized", 500);
-		}
-
-		const denied = requirePerm(user, "plugins:manage");
-		if (denied) return denied;
-
-		if (!id) {
-			return apiError("INVALID_REQUEST", "Plugin ID required", 400);
-		}
-
-		const body = await parseOptionalBody(request, installBodySchema, {});
-		if (isParseError(body)) return body;
-		const actor = resolveHitlRouteActor(locals);
-		const evaluator = new RiskPolicyEvaluator({
-			db: dineway.db,
-			handlers: dineway,
-		});
-		let approvedHitlRequestId: string | null = null;
-
-		if (evaluator.requiresWorkflowHitl(actor.identity)) {
-			if (!body.version) {
-				return apiError(
-					"VALIDATION_ERROR",
-					"API-token marketplace installs require an explicit version so the reviewed target is immutable.",
-					400,
-				);
-			}
-
-			const preview = await handleMarketplaceInstallPreview(dineway.config.marketplace, id, {
-				version: body.version,
-				siteOrigin: new URL(request.url).origin,
-			});
-			if (!preview.success) return unwrapResult(preview);
-
-			const action = await new PluginHitlPayloadBuilder().buildInstallRequest({
-				id: preview.data.pluginId,
-				name: preview.data.name,
-				description: preview.data.description,
-				authorName: preview.data.authorName,
-				version: preview.data.version,
-				minDinewayVersion: preview.data.minDinewayVersion,
-				bundleSize: preview.data.bundleSize,
-				checksum: preview.data.checksum,
-				changelog: preview.data.changelog,
-				capabilities: preview.data.capabilities,
-				status: preview.data.status,
-				auditVerdict: preview.data.auditVerdict,
-				imageAuditVerdict: preview.data.imageAuditVerdict,
-				publishedAt: preview.data.publishedAt,
-			});
-			const decision = await evaluator.evaluateWorkflowHitl({
-				actor: actor.identity,
-				hitlRequestId: body.hitlRequestId,
-				action,
-			});
-			if (!decision.allowed) {
-				const ensured = await ensureWorkflowHitlRouteRequest(dineway.db, locals, decision.action);
-				return hitlRequiredRouteError(decision, ensured);
-			}
-			approvedHitlRequestId = decision.hitlRequest.id;
-		}
-
-		const configuredPluginIds = new Set<string>(
-			dineway.configuredPlugins.map((p: { id: string }) => p.id),
-		);
-
-		const siteOrigin = new URL(request.url).origin;
-
-		const result = await handleMarketplaceInstall(
-			dineway.db,
-			dineway.storage,
-			dineway.getSandboxRunner(),
-			dineway.config.marketplace,
-			id,
-			{ version: body.version, configuredPluginIds, siteOrigin },
-		);
-
-		if (!result.success) return unwrapResult(result);
-
-		await dineway.syncMarketplacePlugins();
-		await logPluginActivity(dineway.db, locals, {
-			action: "installed",
-			pluginId: id,
-			...pluginApiRouteSource("installed"),
-			summary: `Installed plugin ${id}`,
-			detail: {
-				version: result.data.version,
-				hitlRequestId: approvedHitlRequestId,
-			},
-		});
-
-		return unwrapResult(result, 201);
-	} catch (error) {
-		console.error("[marketplace-install] Unhandled error:", error);
-		return handleError(error, "Failed to install plugin from marketplace", "INSTALL_FAILED");
-	}
-};

package/src/astro/routes/api/admin/plugins/marketplace/index.ts

@@ -1,38 +0,0 @@
-/**
- * Marketplace search proxy endpoint
- *
- * GET /_dineway/api/admin/plugins/marketplace - Search marketplace plugins
- */
-
-import type { APIRoute } from "astro";
-
-import { requirePerm } from "#api/authorize.js";
-import { apiError, unwrapResult } from "#api/error.js";
-import { handleMarketplaceSearch } from "#api/index.js";
-
-export const prerender = false;
-
-export const GET: APIRoute = async ({ url, locals }) => {
-	const { dineway, user } = locals;
-
-	if (!dineway?.db) {
-		return apiError("NOT_CONFIGURED", "Dineway is not initialized", 500);
-	}
-
-	const denied = requirePerm(user, "plugins:read");
-	if (denied) return denied;
-
-	const query = url.searchParams.get("q") ?? undefined;
-	const category = url.searchParams.get("category") ?? undefined;
-	const cursor = url.searchParams.get("cursor") ?? undefined;
-	const limitParam = url.searchParams.get("limit");
-	const limit = limitParam ? Math.min(Math.max(1, parseInt(limitParam, 10) || 50), 100) : undefined;
-
-	const result = await handleMarketplaceSearch(dineway.config.marketplace, query, {
-		category,
-		cursor,
-		limit,
-	});
-
-	return unwrapResult(result);
-};

package/src/astro/routes/api/admin/plugins/updates.ts

@@ -1,28 +0,0 @@
-/**
- * Marketplace update check endpoint
- *
- * GET /_dineway/api/admin/plugins/updates - Check for marketplace plugin updates
- */
-
-import type { APIRoute } from "astro";
-
-import { requirePerm } from "#api/authorize.js";
-import { apiError, unwrapResult } from "#api/error.js";
-import { handleMarketplaceUpdateCheck } from "#api/index.js";
-
-export const prerender = false;
-
-export const GET: APIRoute = async ({ locals }) => {
-	const { dineway, user } = locals;
-
-	if (!dineway?.db) {
-		return apiError("NOT_CONFIGURED", "Dineway is not initialized", 500);
-	}
-
-	const denied = requirePerm(user, "plugins:read");
-	if (denied) return denied;
-
-	const result = await handleMarketplaceUpdateCheck(dineway.db, dineway.config.marketplace);
-
-	return unwrapResult(result);
-};

package/src/astro/routes/api/admin/review-requests/[id]/index.ts

@@ -1,35 +0,0 @@
-/**
- * Admin review request detail
- *
- * GET /_dineway/api/admin/review-requests/:id - Get a review request
- */
-
-import type { APIRoute } from "astro";
-
-import { requirePerm } from "#api/authorize.js";
-import { apiError, handleError, requireDb, unwrapResult } from "#api/error.js";
-import { handleReviewRequestGet } from "#api/handlers/review-requests.js";
-
-export const prerender = false;
-
-export const GET: APIRoute = async ({ params, locals }) => {
-	const { dineway, user } = locals;
-	const { id } = params;
-
-	if (!id) {
-		return apiError("VALIDATION_ERROR", "Review request ID required", 400);
-	}
-
-	const dbErr = requireDb(dineway?.db);
-	if (dbErr) return dbErr;
-
-	const denied = requirePerm(user, "content:edit_any");
-	if (denied) return denied;
-
-	try {
-		const result = await handleReviewRequestGet(dineway.db, id);
-		return unwrapResult(result);
-	} catch (error) {
-		return handleError(error, "Failed to fetch review request", "REVIEW_REQUEST_GET_ERROR");
-	}
-};