fluxplugin 1.0.0 → 1.0.2

package/README.md

@@ -9,6 +9,7 @@ cd my-app && npm install
 npm run dev:web        # browser mode, no Electron needed
 npm run dev            # Electron, plugins hot-reload
 npm run plugin:new orders -- -t backend   # scaffold a plugin in ./plugins
+npx fluxplugin init my-app --tailwindcss  # …or preconfigure Tailwind
 npm run build && npm start
 ```
 
@@ -36,15 +37,39 @@ export default definePlugin({                      import { usePluginIPC } from
   preload: { orders: { count: "orders.count" } },    meta: { title: "Orders", menu: { label: "Orders" } } }] });
 });
 ```
-More: [ARCHITECTURE](docs/ARCHITECTURE.md) · [SECURITY](docs/SECURITY.md) · [PLUGIN-AUTHORS](docs/PLUGIN-AUTHORS.md) · [RELEASE](docs/RELEASE.md)
+## What you get out of the box
+Custom **title bar + menu bar** that adapts to macOS / Windows / Linux · **search** (commands, pages, plugin providers) ·
+**notifications** (bell + toasts) · **themes** (light/dark/system + plugin themes) · icons · command palette · plugin manager with a
+store-style page per plugin (icon, screenshots, YouTube video, Markdown description) · plugins shipped as **JavaScript only** ·
+optional **Tailwind v4** · permissions, signatures, rollback · a **plugin store** (GitHub by default, or your own) with `fluxplugin publish`.
+
+## Docs
+**[STORE](docs/STORE.md)** (develop → publish → install; your own store) · **[CUSTOMIZING](docs/CUSTOMIZING.md)** (add your own APIs, permissions, hooks, title/menu bar, search, notifications, themes, Tailwind) ·
+[PLUGIN-AUTHORS](docs/PLUGIN-AUTHORS.md) · [TROUBLESHOOTING](docs/TROUBLESHOOTING.md) · [ARCHITECTURE](docs/ARCHITECTURE.md) · [SECURITY](docs/SECURITY.md) · [RELEASE](docs/RELEASE.md)
+
+## What `fluxplugin init` generates
+All application code lives in `src/app`, in layers (`shared` → `main` / `preload` / `renderer`):
+```
+src/app/
+  shared/     constants.ts · types.ts            (depends on nothing)
+  main/       index.ts (Electron) · web.ts (browser) · framework.ts · operations.ts · window.ts · paths.ts
+  preload/    index.ts
+  renderer/   index.tsx · bootstrap.ts · extension-points.ts · routes.ts · App.tsx
+              providers/ · shell/ · pages/ · hooks/ · services/ · styles/
+plugins/      loaded at startup
+```
 
 ## Status — read this
-* **Verified:** 121 automated tests; typecheck strict; the packed tarball installed into a *freshly generated app*
-  (`init` → `npm install` → typecheck → `build` → run in browser mode); a Playwright E2E against that app with
-  3 plugins (menus, slots, extension points, hooks, validated IPC, push events, live enable/disable, palette, manager UI);
-  `plugin new` + `build` hot-loads into a running app.
-* **Not verified:** a real Electron binary (unavailable in the build sandbox). `main.ts`/`preload.ts` templates and
-  `attachElectron` follow the Electron API and are tested against fakes — expect small adjustments on first `npm run dev`.
-* **Not published:** the package is not on npm. Run the steps in `docs/RELEASE.md`; check the name is free first.
-* **Security:** plugin `main` code is not sandboxed (permissions are an API contract). Read `docs/SECURITY.md`.
-* **Not done:** per-plugin process isolation, hosted marketplace (only the `PluginRegistry` abstraction + local/HTTP), Tailwind wiring in the starter.
+* **Verified:** ~140 automated tests and strict typecheck; the packed tarball installed into freshly generated apps (default and
+  `--tailwindcss`) → build → run; the generated app run in **real Electron 44** (Linux/Xvfb) *with Electron's install script blocked*
+  (auto-download works): custom title bar, plugin menus, search, notifications, theme, plugin page (icon/README), no Node leak
+  into the page; a Playwright E2E in a browser with 3 plugins.
+* **Store:** publish → search → install is tested end to end against an in-process imitation of the GitHub API (release, asset upload,
+  topics, checksum, tampering, rate limit, pruning of `.map`/`.ts`), the GitHub search request shape was confirmed against the real API
+  (read-only, HTTP 200), and installing from a custom HTTP store was run through the app's UI. **`fluxplugin publish` itself has not been run
+  against real github.com** (no credentials here): try it with `--dry-run` first, then on a throw-away repository.
+* **Not verified:** Windows and macOS runs (only Linux was available — the OS-specific branches follow Electron's documented API:
+  `hiddenInset` on macOS, `titleBarOverlay` on Windows/Linux); installers/auto-update (electron-builder/forge not set up);
+  YouTube playback itself (no internet video in the test environment — the embed URL and sandboxed iframe are asserted).
+* **Not published** on npm — see `docs/RELEASE.md`. **Security:** plugin `main` code is not sandboxed (see `docs/SECURITY.md`).
+* **Not done:** per-plugin process isolation, hosted marketplace (only `PluginRegistry` + local/HTTP), OS-level (native) notifications.

package/dist/{node/chunks/chunk-XPLGAEBH.js → browser/chunks/chunk-TL63576R.js}

@@ -1,81 +1,3 @@
-var __defProp = Object.defineProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-
-// src/core/index.ts
-var core_exports = {};
-__export(core_exports, {
-  BUILTIN_PERMISSIONS: () => BUILTIN_PERMISSIONS,
-  CHANNELS: () => CHANNELS,
-  CommandRegistry: () => CommandRegistry,
-  DisposableStore: () => DisposableStore,
-  EventBus: () => EventBus,
-  ExtensionPointRegistry: () => ExtensionPointRegistry,
-  FRAMEWORK_ENGINE_KEY: () => FRAMEWORK_ENGINE_KEY,
-  FRAMEWORK_VERSION: () => FRAMEWORK_VERSION,
-  FrameworkError: () => FrameworkError,
-  HookCancelledError: () => HookCancelledError,
-  HookSystem: () => HookSystem,
-  IpcError: () => IpcError,
-  IpcRegistry: () => IpcRegistry,
-  LifecycleError: () => LifecycleError,
-  LogStore: () => LogStore,
-  MGMT: () => MGMT,
-  MemoryStorageBackend: () => MemoryStorageBackend,
-  MenuRegistry: () => MenuRegistry,
-  PermissionDeniedError: () => PermissionDeniedError,
-  PermissionManager: () => PermissionManager,
-  PluginManager: () => PluginManager,
-  PreloadRegistry: () => PreloadRegistry,
-  Registry: () => Registry,
-  RouteRegistry: () => RouteRegistry,
-  ServiceRegistry: () => ServiceRegistry,
-  SlotRegistry: () => SlotRegistry,
-  StyleRegistry: () => StyleRegistry,
-  TimeoutError: () => TimeoutError,
-  ValidationError: () => ValidationError,
-  activationOrderFor: () => activationOrderFor,
-  buildDependencyGraph: () => buildDependencyGraph,
-  compareVersions: () => compareVersions,
-  createPluginConfig: () => createPluginConfig,
-  createPluginState: () => createPluginState,
-  createPluginStorage: () => createPluginStorage,
-  defineCommand: () => defineCommand,
-  defineComponent: () => defineComponent,
-  defineEvent: () => defineEvent,
-  defineHook: () => defineHook,
-  defineIPC: () => defineIPC,
-  defineIpcContract: () => defineIpcContract,
-  defineMenu: () => defineMenu,
-  definePlugin: () => definePlugin,
-  defineRoute: () => defineRoute,
-  defineService: () => defineService,
-  dependentsOf: () => dependentsOf,
-  describeIssue: () => describeIssue,
-  errorMessage: () => errorMessage,
-  hasPluginApi: () => hasPluginApi,
-  isValidRange: () => isValidRange,
-  isValidVersion: () => isValidVersion,
-  manifestSchema: () => manifestSchema,
-  matchesPattern: () => matchesPattern,
-  menuLocations: () => menuLocations,
-  normalizePath: () => normalizePath,
-  parseOrThrow: () => parseOrThrow,
-  parseVersion: () => parseVersion,
-  pluginApi: () => pluginApi,
-  preloadMember: () => preloadMember,
-  routePatternMatches: () => routePatternMatches,
-  s: () => s,
-  satisfies: () => satisfies,
-  scopeCss: () => scopeCss,
-  serializeError: () => serializeError,
-  toDisposable: () => toDisposable,
-  validateManifest: () => validateManifest,
-  withTimeout: () => withTimeout
-});
-
 // src/core/common.ts
 var toDisposable = (fn) => {
   let done = false;
@@ -603,6 +525,18 @@ var manifestSchema = s.object({
   repository: s.union(s.string(), s.object({ type: s.string().optional(), url: s.string() })).optional(),
   license: s.string().optional(),
   icon: s.string().optional(),
+  /** Wide image shown at the top of the plugin page (png/jpg/webp/svg inside the plugin). */
+  banner: s.string().optional(),
+  /** Screenshots shown in a gallery (paths inside the plugin). */
+  screenshots: s.array(s.string()).default([]),
+  /** Detailed description as Markdown (default: ./README.md). Rendered safely: no raw HTML. */
+  readme: s.string().optional(),
+  /** Explanation video (https URL; YouTube and Vimeo are embedded, other hosts become a link). */
+  video: s.string({ pattern: /^https:\/\/\S+$/ }).optional(),
+  categories: s.array(s.string()).default([]),
+  keywords: s.array(s.string()).default([]),
+  /** Extra links: docs, support, changelog, funding... */
+  links: s.record(s.string({ pattern: /^https:\/\/\S+$/ })).default({}),
   /** Entry executed in the Electron main process. */
   main: s.string().optional(),
   /** Entry executed in the preload context (sandbox-compatible, no Node). */
@@ -659,6 +593,25 @@ function validateManifest(raw, opts = {}) {
   }
   return { ok: issues.length === 0, manifest: issues.length ? void 0 : manifest, issues, warnings };
 }
+function videoEmbedUrl(url) {
+  if (!url) return void 0;
+  let u;
+  try {
+    u = new URL(url);
+  } catch {
+    return void 0;
+  }
+  const host = u.hostname.replace(/^www\./, "");
+  let id;
+  if (host === "youtu.be") id = u.pathname.slice(1);
+  else if (host === "youtube.com" || host === "m.youtube.com") id = u.searchParams.get("v") ?? (/^\/(embed|shorts)\//.test(u.pathname) ? u.pathname.split("/")[2] : void 0);
+  if (id && /^[\w-]{6,20}$/.test(id)) return `https://www.youtube-nocookie.com/embed/${id}`;
+  if (host === "vimeo.com" || host === "player.vimeo.com") {
+    const vid = u.pathname.split("/").filter(Boolean).pop();
+    if (vid && /^\d+$/.test(vid)) return `https://player.vimeo.com/video/${vid}`;
+  }
+  return void 0;
+}
 
 // src/core/events.ts
 function matchesPattern(pattern, name) {
@@ -1795,6 +1748,70 @@ var defineEvent = (name, handler, opts = {}) => ({ name, handler, ...opts });
 var defineComponent = (c) => c;
 var defineMenu = (m) => m;
 
+// src/core/notifications.ts
+var NotificationCenter = class {
+  constructor(capacity = 200) {
+    this.capacity = capacity;
+  }
+  capacity;
+  items = [];
+  listeners = /* @__PURE__ */ new Set();
+  pushListeners = /* @__PURE__ */ new Set();
+  seq = 0;
+  version = 0;
+  push(input, owner = "host") {
+    const id = input.id ?? `${owner}#${Date.now().toString(36)}-${this.seq++}`;
+    this.items = this.items.filter((n) => n.id !== id);
+    const item = {
+      id,
+      title: input.title,
+      body: input.body,
+      level: input.level ?? "info",
+      actions: input.actions ?? [],
+      timeoutMs: input.timeoutMs ?? 5e3,
+      owner,
+      time: Date.now(),
+      read: false
+    };
+    this.items.unshift(item);
+    if (this.items.length > this.capacity) this.items.length = this.capacity;
+    this.changed();
+    for (const l of [...this.pushListeners]) l(item);
+    return { id, dismiss: () => this.dismiss(id) };
+  }
+  list() {
+    return this.items;
+  }
+  get unread() {
+    return this.items.filter((n) => !n.read).length;
+  }
+  markRead(id) {
+    for (const n of this.items) if (!id || n.id === id) n.read = true;
+    this.changed();
+  }
+  dismiss(id) {
+    this.items = this.items.filter((n) => n.id !== id);
+    this.changed();
+  }
+  clear() {
+    this.items = [];
+    this.changed();
+  }
+  subscribe = (l) => {
+    this.listeners.add(l);
+    return () => void this.listeners.delete(l);
+  };
+  /** Called for every new notification (toast host, native bridges, main→renderer forwarding). */
+  onPush(l) {
+    this.pushListeners.add(l);
+    return toDisposable(() => this.pushListeners.delete(l));
+  }
+  changed() {
+    this.version++;
+    for (const l of [...this.listeners]) l();
+  }
+};
+
 // src/core/manager.ts
 var DEFAULT_TIMEOUTS = { load: 15e3, initialize: 1e4, activate: 15e3, ready: 1e4, deactivate: 1e4, unload: 1e4 };
 var PluginManager = class {
@@ -1826,6 +1843,7 @@ var PluginManager = class {
   ipc = new IpcRegistry();
   preload = new PreloadRegistry();
   styles = new StyleRegistry();
+  notifications = new NotificationCenter();
   storageBackend;
   records = /* @__PURE__ */ new Map();
   states = /* @__PURE__ */ new Map();
@@ -1889,7 +1907,11 @@ var PluginManager = class {
       optionalDependencies: {},
       peerDependencies: {},
       engines: {},
-      contributes: {}
+      contributes: {},
+      screenshots: [],
+      categories: [],
+      keywords: [],
+      links: {}
     };
     const rec = {
       id,
@@ -2472,6 +2494,7 @@ var PluginManager = class {
         run: (op, input, exec) => (need("hooks", "hooks.run"), this.hooks.run(op, input, exec)),
         filter: (name, value, extra) => (need("hooks", "hooks.filter"), this.hooks.filter(name, value, extra))
       },
+      notifications: { push: (n) => (need("notifications", "notifications.push"), this.notifications.push(n, id)) },
       styles: { add: (st) => (need("styles", "styles.add"), track(this.styles.register(st, id))) },
       host: {
         has: (name) => this.hostApis.has(name),
@@ -2537,6 +2560,7 @@ var MGMT = {
   configSchema: "flux.plugins.config.schema",
   logs: "flux.plugins.logs",
   diagnostics: "flux.plugins.diagnostics",
+  details: "flux.plugins.details",
   changed: "flux.plugins.changed"
 };
 
@@ -2576,6 +2600,7 @@ export {
   menuLocations,
   manifestSchema,
   validateManifest,
+  videoEmbedUrl,
   matchesPattern,
   EventBus,
   HookSystem,
@@ -2613,11 +2638,11 @@ export {
   defineEvent,
   defineComponent,
   defineMenu,
+  NotificationCenter,
   PluginManager,
   routePatternMatches,
   CHANNELS,
   MGMT,
   pluginApi,
-  hasPluginApi,
-  core_exports
+  hasPluginApi
 };