dsh-env-manager-plugin 0.0.0-stage → 0.1.1

package/lib/transport/http.js

@@ -0,0 +1,217 @@
+import { EnvManagerError } from '../domain/errors.js';
+import { isRecordKind } from '../domain/constants.js';
+const MAX_BODY = 2 * 1024 * 1024;
+function statusFor(code) {
+    switch (code) {
+        case 'FORBIDDEN':
+            return 403;
+        case 'ENV_NOT_FOUND':
+        case 'SERVICE_NOT_FOUND':
+        case 'DEPLOYMENT_NOT_FOUND':
+        case 'RULE_PROFILE_NOT_FOUND':
+        case 'BINDING_NOT_FOUND':
+        case 'HOST_NOT_FOUND':
+        case 'CLUSTER_NOT_FOUND':
+            return 404;
+        case 'RECORD_IN_USE':
+        case 'BINDING_CONFLICT':
+        case 'DEPLOYMENT_AMBIGUOUS':
+        case 'DUPLICATE_ID':
+            return 409;
+        case 'RECORD_TOO_LARGE':
+            return 413;
+        case 'POLICY_DENIED':
+            return 403;
+        case 'CREDENTIAL_UNAVAILABLE':
+            return 503;
+        case 'INVALID_ARGUMENT':
+        case 'RECORD_INVALID':
+        case 'RULE_TEMPLATE_INVALID':
+        case 'RULE_UNDEFINED_VARIABLE':
+        case 'RULE_CYCLE':
+        case 'RULE_PATH_TRAVERSAL':
+        case 'PARAMETER_RESOLUTION_FAILED':
+        case 'SKILL_UNAVAILABLE':
+            return 400;
+        case 'INTERNAL_ERROR':
+        case 'STORAGE_UNWRITABLE':
+            return 500;
+        default:
+            return 500;
+    }
+}
+async function readBody(req) {
+    return await new Promise((resolve, reject) => {
+        let size = 0;
+        const chunks = [];
+        req.on('data', (chunk) => {
+            size += chunk.length;
+            if (size > MAX_BODY) {
+                reject(new EnvManagerError('RECORD_TOO_LARGE', 'Request body exceeds 2 MiB'));
+                req.destroy();
+                return;
+            }
+            chunks.push(chunk);
+        });
+        req.on('end', () => {
+            try {
+                const text = Buffer.concat(chunks).toString('utf8');
+                resolve(text ? JSON.parse(text) : {});
+            }
+            catch {
+                reject(new EnvManagerError('INVALID_ARGUMENT', 'Request body must be valid JSON'));
+            }
+        });
+        req.on('error', reject);
+    });
+}
+function send(res, status, value) {
+    const body = JSON.stringify(value);
+    res.writeHead(status, {
+        'content-type': 'application/json; charset=utf-8',
+        'content-length': Buffer.byteLength(body),
+        'cache-control': 'no-store',
+        'x-content-type-options': 'nosniff',
+    });
+    res.end(body);
+}
+export function registerHttpTransport(ctx, app, logger) {
+    const webServer = ctx.get('webServer');
+    if (!webServer) {
+        logger.warn('webServer is unavailable; the panel transport is disabled');
+        return () => undefined;
+    }
+    const disposer = webServer.register({
+        kind: 'prefix',
+        path: '/env-manager/api',
+        handler: async (req, res) => {
+            try {
+                const url = new URL(req.url ?? '/', 'http://localhost');
+                if (url.pathname !== '/env-manager/api') {
+                    send(res, 404, { ok: false, error: { code: 'NOT_FOUND', message: 'Unknown endpoint' } });
+                    return;
+                }
+                if (req.method !== 'POST') {
+                    res.setHeader('allow', 'POST');
+                    send(res, 405, { ok: false, error: { code: 'METHOD_NOT_ALLOWED', message: 'Use POST' } });
+                    return;
+                }
+                const contentType = req.headers['content-type'] ?? '';
+                if (!String(contentType).toLowerCase().includes('application/json')) {
+                    send(res, 415, {
+                        ok: false,
+                        error: { code: 'UNSUPPORTED_MEDIA_TYPE', message: 'Content-Type must be application/json' },
+                    });
+                    return;
+                }
+                if (req.headers['x-env-manager-request'] !== '1') {
+                    send(res, 403, {
+                        ok: false,
+                        error: { code: 'FORBIDDEN', message: 'Missing x-env-manager-request header' },
+                    });
+                    return;
+                }
+                const origin = req.headers.origin;
+                if (origin) {
+                    let sameOrigin = false;
+                    try {
+                        sameOrigin = new URL(origin).host === req.headers.host;
+                    }
+                    catch {
+                        sameOrigin = false;
+                    }
+                    if (!sameOrigin) {
+                        send(res, 403, { ok: false, error: { code: 'FORBIDDEN', message: 'Cross-origin request rejected' } });
+                        return;
+                    }
+                }
+                const body = (await readBody(req));
+                if (typeof body.op !== 'string') {
+                    throw new EnvManagerError('INVALID_ARGUMENT', 'Body must contain a string op');
+                }
+                const payload = (body.payload ?? {});
+                const data = await dispatch(body.op, payload);
+                send(res, 200, { ok: true, data });
+            }
+            catch (error) {
+                const envError = error instanceof EnvManagerError
+                    ? error
+                    : new EnvManagerError('INTERNAL_ERROR', error instanceof Error ? error.message : String(error));
+                logger.warn(`HTTP ${envError.code}: ${envError.message}`);
+                send(res, statusFor(envError.code), {
+                    ok: false,
+                    error: {
+                        code: envError.code,
+                        message: envError.message,
+                        details: envError.details,
+                    },
+                });
+            }
+        },
+    });
+    async function dispatch(op, payload) {
+        switch (op) {
+            case 'meta':
+                return app.meta();
+            case 'list': {
+                if (!isRecordKind(payload.kind)) {
+                    throw new EnvManagerError('INVALID_ARGUMENT', `Unknown record kind "${payload.kind}"`);
+                }
+                return app.list(payload.kind);
+            }
+            case 'get':
+                if (!isRecordKind(payload.kind)) {
+                    throw new EnvManagerError('INVALID_ARGUMENT', `Unknown record kind "${payload.kind}"`);
+                }
+                return app.get(payload.kind, String(payload.id ?? ''));
+            case 'find':
+                return app.find(String(payload.query ?? ''));
+            case 'save': {
+                if (!isRecordKind(payload.kind)) {
+                    throw new EnvManagerError('INVALID_ARGUMENT', `Unknown record kind "${payload.kind}"`);
+                }
+                if (typeof payload.yaml === 'string') {
+                    return app.saveYaml(payload.kind, payload.yaml, {
+                        dryRun: Boolean(payload.dryRun),
+                        actor: 'ui',
+                    });
+                }
+                return app.save(payload.kind, payload.record, {
+                    dryRun: Boolean(payload.dryRun),
+                    actor: 'ui',
+                });
+            }
+            case 'remove':
+                if (!isRecordKind(payload.kind)) {
+                    throw new EnvManagerError('INVALID_ARGUMENT', `Unknown record kind "${payload.kind}"`);
+                }
+                return app.remove(payload.kind, String(payload.id ?? ''), 'ui', {
+                    dryRun: Boolean(payload.dryRun),
+                });
+            case 'validate':
+            case 'diagnostics':
+                return app.validate();
+            case 'credential':
+                return app.setCredential(String(payload.ref ?? ''), typeof payload.value === 'string' ? payload.value : '');
+            case 'credentialUnset':
+                return app.unsetCredential(String(payload.ref ?? ''));
+            case 'resolve':
+                return app.resolve({
+                    environmentId: String(payload.environmentId ?? ''),
+                    serviceId: String(payload.serviceId ?? ''),
+                    deploymentId: payload.deploymentId ? String(payload.deploymentId) : undefined,
+                });
+            case 'route':
+                return app.route({
+                    operation: String(payload.operation ?? ''),
+                    environmentId: String(payload.environmentId ?? ''),
+                    serviceId: payload.serviceId ? String(payload.serviceId) : undefined,
+                    deploymentId: payload.deploymentId ? String(payload.deploymentId) : undefined,
+                });
+            default:
+                throw new EnvManagerError('INVALID_ARGUMENT', `Unknown operation "${op}"`);
+        }
+    }
+    return disposer;
+}
+//# sourceMappingURL=http.js.map

package/lib/transport/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../../src/transport/http.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAA;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAA;AAGrD,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAA;AAEhC,SAAS,SAAS,CAAC,IAAY;IAC7B,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,WAAW;YACd,OAAO,GAAG,CAAA;QACZ,KAAK,eAAe,CAAC;QACrB,KAAK,mBAAmB,CAAC;QACzB,KAAK,sBAAsB,CAAC;QAC5B,KAAK,wBAAwB,CAAC;QAC9B,KAAK,mBAAmB,CAAC;QACzB,KAAK,gBAAgB,CAAC;QACtB,KAAK,mBAAmB;YACtB,OAAO,GAAG,CAAA;QACZ,KAAK,eAAe,CAAC;QACrB,KAAK,kBAAkB,CAAC;QACxB,KAAK,sBAAsB,CAAC;QAC5B,KAAK,cAAc;YACjB,OAAO,GAAG,CAAA;QACZ,KAAK,kBAAkB;YACrB,OAAO,GAAG,CAAA;QACZ,KAAK,eAAe;YAClB,OAAO,GAAG,CAAA;QACZ,KAAK,wBAAwB;YAC3B,OAAO,GAAG,CAAA;QACZ,KAAK,kBAAkB,CAAC;QACxB,KAAK,gBAAgB,CAAC;QACtB,KAAK,uBAAuB,CAAC;QAC7B,KAAK,yBAAyB,CAAC;QAC/B,KAAK,YAAY,CAAC;QAClB,KAAK,qBAAqB,CAAC;QAC3B,KAAK,6BAA6B,CAAC;QACnC,KAAK,mBAAmB;YACtB,OAAO,GAAG,CAAA;QACZ,KAAK,gBAAgB,CAAC;QACtB,KAAK,oBAAoB;YACvB,OAAO,GAAG,CAAA;QACZ;YACE,OAAO,GAAG,CAAA;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,GAAoB;IAC1C,OAAO,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC3C,IAAI,IAAI,GAAG,CAAC,CAAA;QACZ,MAAM,MAAM,GAAa,EAAE,CAAA;QAC3B,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YAC/B,IAAI,IAAI,KAAK,CAAC,MAAM,CAAA;YACpB,IAAI,IAAI,GAAG,QAAQ,EAAE,CAAC;gBACpB,MAAM,CAAC,IAAI,eAAe,CAAC,kBAAkB,EAAE,4BAA4B,CAAC,CAAC,CAAA;gBAC7E,GAAG,CAAC,OAAO,EAAE,CAAA;gBACb,OAAM;YACR,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACpB,CAAC,CAAC,CAAA;QACF,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YACjB,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;gBACnD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;YACvC,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,CAAC,IAAI,eAAe,CAAC,kBAAkB,EAAE,iCAAiC,CAAC,CAAC,CAAA;YACpF,CAAC;QACH,CAAC,CAAC,CAAA;QACF,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;IACzB,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,IAAI,CAAC,GAAmB,EAAE,MAAc,EAAE,KAAc;IAC/D,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;IAClC,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE;QACpB,cAAc,EAAE,iCAAiC;QACjD,gBAAgB,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC;QACzC,eAAe,EAAE,UAAU;QAC3B,wBAAwB,EAAE,SAAS;KACpC,CAAC,CAAA;IACF,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;AACf,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,GAAQ,EAAE,GAAQ,EAAE,MAAc;IACtE,MAAM,SAAS,GAAG,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;IACtC,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,CAAC,IAAI,CAAC,2DAA2D,CAAC,CAAA;QACxE,OAAO,GAAG,EAAE,CAAC,SAAS,CAAA;IACxB,CAAC;IAED,MAAM,QAAQ,GAAG,SAAS,CAAC,QAAQ,CAAC;QAClC,IAAI,EAAE,QAAQ;QACd,IAAI,EAAE,kBAAkB;QACxB,OAAO,EAAE,KAAK,EAAE,GAAoB,EAAE,GAAmB,EAAE,EAAE;YAC3D,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAA;gBACvD,IAAI,GAAG,CAAC,QAAQ,KAAK,kBAAkB,EAAE,CAAC;oBACxC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,kBAAkB,EAAE,EAAE,CAAC,CAAA;oBACxF,OAAM;gBACR,CAAC;gBACD,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;oBAC1B,GAAG,CAAC,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;oBAC9B,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,CAAC,CAAA;oBACzF,OAAM;gBACR,CAAC;gBACD,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,EAAE,CAAA;gBACrD,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;oBACpE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE;wBACb,EAAE,EAAE,KAAK;wBACT,KAAK,EAAE,EAAE,IAAI,EAAE,wBAAwB,EAAE,OAAO,EAAE,uCAAuC,EAAE;qBAC5F,CAAC,CAAA;oBACF,OAAM;gBACR,CAAC;gBACD,IAAI,GAAG,CAAC,OAAO,CAAC,uBAAuB,CAAC,KAAK,GAAG,EAAE,CAAC;oBACjD,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE;wBACb,EAAE,EAAE,KAAK;wBACT,KAAK,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,sCAAsC,EAAE;qBAC9E,CAAC,CAAA;oBACF,OAAM;gBACR,CAAC;gBACD,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAA;gBACjC,IAAI,MAAM,EAAE,CAAC;oBACX,IAAI,UAAU,GAAG,KAAK,CAAA;oBACtB,IAAI,CAAC;wBACH,UAAU,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,OAAO,CAAC,IAAI,CAAA;oBACxD,CAAC;oBAAC,MAAM,CAAC;wBACP,UAAU,GAAG,KAAK,CAAA;oBACpB,CAAC;oBACD,IAAI,CAAC,UAAU,EAAE,CAAC;wBAChB,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,+BAA+B,EAAE,EAAE,CAAC,CAAA;wBACrG,OAAM;oBACR,CAAC;gBACH,CAAC;gBAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAwC,CAAA;gBACzE,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;oBAChC,MAAM,IAAI,eAAe,CAAC,kBAAkB,EAAE,+BAA+B,CAAC,CAAA;gBAChF,CAAC;gBACD,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAwB,CAAA;gBAC3D,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,CAAC,CAAA;gBAC7C,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;YACpC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,QAAQ,GACZ,KAAK,YAAY,eAAe;oBAC9B,CAAC,CAAC,KAAK;oBACP,CAAC,CAAC,IAAI,eAAe,CACjB,gBAAgB,EAChB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CACvD,CAAA;gBACP,MAAM,CAAC,IAAI,CAAC,QAAQ,QAAQ,CAAC,IAAI,KAAK,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAA;gBACzD,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE;oBAClC,EAAE,EAAE,KAAK;oBACT,KAAK,EAAE;wBACL,IAAI,EAAE,QAAQ,CAAC,IAAI;wBACnB,OAAO,EAAE,QAAQ,CAAC,OAAO;wBACzB,OAAO,EAAE,QAAQ,CAAC,OAAO;qBAC1B;iBACF,CAAC,CAAA;YACJ,CAAC;QACH,CAAC;KACF,CAAC,CAAA;IAEF,KAAK,UAAU,QAAQ,CAAC,EAAU,EAAE,OAA4B;QAC9D,QAAQ,EAAE,EAAE,CAAC;YACX,KAAK,MAAM;gBACT,OAAO,GAAG,CAAC,IAAI,EAAE,CAAA;YACnB,KAAK,MAAM,CAAC,CAAC,CAAC;gBACZ,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;oBAChC,MAAM,IAAI,eAAe,CAAC,kBAAkB,EAAE,wBAAwB,OAAO,CAAC,IAAI,GAAG,CAAC,CAAA;gBACxF,CAAC;gBACD,OAAO,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;YAC/B,CAAC;YACD,KAAK,KAAK;gBACR,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;oBAChC,MAAM,IAAI,eAAe,CAAC,kBAAkB,EAAE,wBAAwB,OAAO,CAAC,IAAI,GAAG,CAAC,CAAA;gBACxF,CAAC;gBACD,OAAO,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;YACxD,KAAK,MAAM;gBACT,OAAO,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAA;YAC9C,KAAK,MAAM,CAAC,CAAC,CAAC;gBACZ,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;oBAChC,MAAM,IAAI,eAAe,CAAC,kBAAkB,EAAE,wBAAwB,OAAO,CAAC,IAAI,GAAG,CAAC,CAAA;gBACxF,CAAC;gBACD,IAAI,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;oBACrC,OAAO,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE;wBAC9C,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC;wBAC/B,KAAK,EAAE,IAAI;qBACZ,CAAC,CAAA;gBACJ,CAAC;gBACD,OAAO,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,EAAE;oBAC5C,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC;oBAC/B,KAAK,EAAE,IAAI;iBACZ,CAAC,CAAA;YACJ,CAAC;YACD,KAAK,QAAQ;gBACX,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;oBAChC,MAAM,IAAI,eAAe,CAAC,kBAAkB,EAAE,wBAAwB,OAAO,CAAC,IAAI,GAAG,CAAC,CAAA;gBACxF,CAAC;gBACD,OAAO,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE;oBAC9D,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC;iBAChC,CAAC,CAAA;YACJ,KAAK,UAAU,CAAC;YAChB,KAAK,aAAa;gBAChB,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAA;YACvB,KAAK,YAAY;gBACf,OAAO,GAAG,CAAC,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;YAC7G,KAAK,iBAAiB;gBACpB,OAAO,GAAG,CAAC,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,CAAA;YACvD,KAAK,SAAS;gBACZ,OAAO,GAAG,CAAC,OAAO,CAAC;oBACjB,aAAa,EAAE,MAAM,CAAC,OAAO,CAAC,aAAa,IAAI,EAAE,CAAC;oBAClD,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC;oBAC1C,YAAY,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS;iBAC9E,CAAC,CAAA;YACJ,KAAK,OAAO;gBACV,OAAO,GAAG,CAAC,KAAK,CAAC;oBACf,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC;oBAC1C,aAAa,EAAE,MAAM,CAAC,OAAO,CAAC,aAAa,IAAI,EAAE,CAAC;oBAClD,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS;oBACpE,YAAY,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS;iBAC9E,CAAC,CAAA;YACJ;gBACE,MAAM,IAAI,eAAe,CAAC,kBAAkB,EAAE,sBAAsB,EAAE,GAAG,CAAC,CAAA;QAC9E,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAA;AACjB,CAAC"}

package/locale/en.json

@@ -0,0 +1,6 @@
+{
+  "meta": {
+    "title": "DSH Environment Manager",
+    "description": "Manages enterprise environments, services, deployments and operation-skill bindings for DSH sessions."
+  }
+}

package/locale/zh.json

@@ -0,0 +1,6 @@
+{
+  "meta": {
+    "title": "DSH 环境管理器",
+    "description": "为 DSH 会话管理企业环境、服务、部署实例以及操作与 Skill 的绑定关系。"
+  }
+}

package/package.json

@@ -1,6 +1,101 @@
-{
-  "name": "dsh-env-manager-plugin",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+{
+  "name": "dsh-env-manager-plugin",
+  "version": "0.1.1",
+  "type": "module",
+  "description": "Environment registry, service catalog and operation-to-Skill routing for DSH.",
+  "author": "zhiwuli0228",
+  "homepage": "https://github.com/zhiwuli0228/dsh-env-manager#readme",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/zhiwuli0228/dsh-env-manager.git"
+  },
+  "bugs": {
+    "url": "https://github.com/zhiwuli0228/dsh-env-manager/issues"
+  },
+  "exports": {
+    ".": "./index.js",
+    "./client": "./client.js",
+    "./locale/*.json": "./locale/*.json",
+    "./icon": "./icon.svg",
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "index.js",
+    "client.js",
+    "cordis.patch.yml",
+    "lib/",
+    "locale/*.json",
+    "icon.svg",
+    "README.md",
+    "LICENSE",
+    "docs/",
+    "scripts/repair-profile.mjs"
+  ],
+  "keywords": [
+    "dsh",
+    "dsh-plugin",
+    "environment",
+    "service-registry",
+    "ops"
+  ],
+  "license": "MIT",
+  "engines": {
+    "node": ">=20",
+    "dsh": ">=0.2.1-rc.5"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "dsh": {
+    "bundle": {
+      "patch": "./cordis.patch.yml"
+    },
+    "client": {
+      "platform": "web",
+      "immediately": true
+    }
+  },
+  "dependencies": {
+    "@deepseek-ai/schemastery": "^3.18.5",
+    "yaml": "^2.9.1",
+    "zod": "^4.6.7"
+  },
+  "devDependencies": {
+    "@deepseek-ai/cordis": "~4.0.5",
+    "@deepseek-ai/dsh-agent": "0.2.1-rc.5",
+    "@deepseek-ai/dsh-llm": "0.2.1-rc.5",
+    "@deepseek-ai/dsh-ptc-runtime": "0.2.1-rc.5",
+    "@deepseek-ai/dsh-sandbox": "0.2.1-rc.5",
+    "@deepseek-ai/dsh-sandbox-policy": "0.2.1-rc.5",
+    "@deepseek-ai/dsh-scope": "0.2.1-rc.5",
+    "@deepseek-ai/dsh-session": "0.2.1-rc.5",
+    "@deepseek-ai/dsh-system-prompt": "0.2.1-rc.5",
+    "@deepseek-ai/dsh-tools": "0.2.1-rc.5",
+    "@deepseek-ai/dsh-user-approval": "0.2.1-rc.5",
+    "@deepseek-ai/dsh-util-values": "0.2.1-rc.5",
+    "@deepseek-ai/dsh-working-directory": "0.2.1-rc.5",
+    "@types/node": "^24.19.2",
+    "typescript": "^5.9.3",
+    "vitest": "^3.2.7"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "check": "npm run typecheck && npm run build && npm test && node --check client.js && node --check index.js",
+    "repair:profile": "node scripts/repair-profile.mjs",
+    "prepack": "npm run build"
+  },
+  "main": "index.js",
+  "peerDependencies": {
+    "@deepseek-ai/cordis": "~4.0.5",
+    "@deepseek-ai/dsh-llm": "0.2.1-rc.5",
+    "@deepseek-ai/dsh-tools": "0.2.1-rc.5"
+  },
+  "peerDependenciesMeta": {
+    "@deepseek-ai/cordis": {
+      "optional": "true"
+    }
+  }
+}

package/scripts/repair-profile.mjs

@@ -0,0 +1,141 @@
+#!/usr/bin/env node
+/**
+ * Repair a DSH profile that has a duplicated or half-removed environment-manager
+ * bundle. This script only edits the profile's package.json; it never installs
+ * packages and never touches registry data under `data/`.
+ *
+ * Usage:
+ *   node scripts/repair-profile.mjs [--profile <name>] [--fix]
+ *
+ * Without --fix it reports problems and exits nonzero. With --fix it rewrites the
+ * package.json atomically after creating a timestamped backup.
+ */
+
+import fs from 'node:fs'
+import os from 'node:os'
+import path from 'node:path'
+
+const PLUGIN = 'dsh-env-manager-plugin'
+const LEGACY = 'dsh-env-manager'
+
+function pathEntryExists(candidate) {
+  try {
+    fs.lstatSync(candidate)
+    return true
+  } catch {
+    return false
+  }
+}
+
+const argv = process.argv.slice(2)
+const fix = argv.includes('--fix')
+const profileIndex = argv.indexOf('--profile')
+const profile =
+  profileIndex >= 0 && argv[profileIndex + 1]
+    ? argv[profileIndex + 1]
+    : process.env.DSH_PROFILE
+
+if (!profile) {
+  console.error('Missing profile. Pass --profile <name> or set DSH_PROFILE.')
+  process.exit(2)
+}
+
+const dshHome = process.env.DSH_HOME || path.join(os.homedir(), '.dsh')
+const profileDir = path.join(dshHome, 'profiles', profile)
+const packagePath = path.join(profileDir, 'package.json')
+
+if (!fs.existsSync(packagePath)) {
+  console.error(`Profile package.json not found: ${packagePath}`)
+  process.exit(2)
+}
+
+let pkg
+try {
+  pkg = JSON.parse(fs.readFileSync(packagePath, 'utf8'))
+} catch (error) {
+  console.error(`Cannot parse ${packagePath}: ${error.message}`)
+  process.exit(2)
+}
+
+const dependencies = pkg.dependencies && typeof pkg.dependencies === 'object' ? pkg.dependencies : {}
+const profileConfig = pkg.dsh?.profile
+const bundles = Array.isArray(profileConfig?.bundles) ? profileConfig.bundles : []
+const pluginEntries = bundles.filter((entry) => entry === PLUGIN).length
+const legacyEntries = bundles.filter((entry) => entry === LEGACY).length
+const dependencyEntries = Object.prototype.hasOwnProperty.call(dependencies, PLUGIN)
+const legacyDependency = Object.prototype.hasOwnProperty.call(dependencies, LEGACY)
+const pluginLib = path.join(profileDir, 'node_modules', PLUGIN, 'lib', 'index.js')
+const legacyLink = path.join(profileDir, 'node_modules', LEGACY)
+
+const problems = []
+if (pluginEntries > 1) {
+  problems.push(`${PLUGIN} appears ${pluginEntries} times in dsh.profile.bundles`)
+}
+if (legacyEntries > 0) {
+  problems.push(`legacy ${LEGACY} still appears in dsh.profile.bundles`)
+}
+if (legacyDependency) {
+  problems.push(`legacy ${LEGACY} is still a dependency`)
+}
+if (dependencyEntries && pluginEntries === 0) {
+  problems.push(`${PLUGIN} is a dependency but missing from dsh.profile.bundles`)
+}
+if (dependencyEntries && !fs.existsSync(pluginLib)) {
+  problems.push(`installed package is missing ${pluginLib}`)
+}
+if (legacyLink && pathEntryExists(legacyLink)) {
+  problems.push(`stale legacy node_modules entry exists: ${legacyLink}`)
+}
+
+console.log(`profile: ${profileDir}`)
+console.log(`package: ${packagePath}`)
+if (problems.length === 0) {
+  console.log('OK: one plugin dependency and one bundle entry; build output present.')
+  process.exit(0)
+}
+
+console.log('Problems:')
+for (const problem of problems) console.log(`- ${problem}`)
+
+if (!fix) {
+  console.log('Run again with --fix to repair package.json (registry data is untouched).')
+  process.exit(1)
+}
+
+const timestamp = new Date().toISOString().replace(/[:.]/g, '-')
+const backupPath = `${packagePath}.bak-repair-${timestamp}`
+fs.copyFileSync(packagePath, backupPath)
+
+const nextBundles = []
+let seenPlugin = false
+for (const entry of bundles) {
+  if (entry === LEGACY) continue
+  if (entry === PLUGIN) {
+    if (seenPlugin) continue
+    seenPlugin = true
+  }
+  nextBundles.push(entry)
+}
+if (dependencyEntries && !seenPlugin) nextBundles.push(PLUGIN)
+
+const nextDependencies = { ...dependencies }
+delete nextDependencies[LEGACY]
+pkg.dependencies = nextDependencies
+pkg.dsh = pkg.dsh || {}
+pkg.dsh.profile = pkg.dsh.profile || {}
+pkg.dsh.profile.bundles = nextBundles
+
+const temporary = `${packagePath}.tmp-repair-${process.pid}`
+fs.writeFileSync(temporary, `${JSON.stringify(pkg, null, 2)}\n`, 'utf8')
+fs.renameSync(temporary, packagePath)
+
+console.log(`Backup: ${backupPath}`)
+console.log('Repaired package.json. Restart DSH, then reinstall with plugin_manager if needed.')
+if (legacyLink && pathEntryExists(legacyLink)) {
+  console.log(`Warning: remove the stale link manually after verifying it: ${legacyLink}`)
+}
+if (dependencyEntries && !fs.existsSync(pluginLib)) {
+  console.error(`Still missing after repair: ${pluginLib}`)
+  console.error('Reinstall the bundle with plugin_manager; do not copy files by hand.')
+  process.exit(1)
+}