mu-agent-bridge 1.0.5 → 1.0.13

package/dist/src-ts/plugin-manager.js

@@ -1,4 +1,7 @@
 "use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.PluginManager = void 0;
 const promises_1 = require("node:fs/promises");
@@ -11,6 +14,9 @@ const agent_1 = require("./agent");
 const plugin_manifest_1 = require("./plugin-manifest");
 const version_manager_1 = require("./version-manager");
 const plugin_catalog_1 = require("./plugin-catalog");
+const log_store_1 = require("./log-store");
+const channel_sessions_1 = require("./channel-sessions");
+const _2020_1 = __importDefault(require("ajv/dist/2020"));
 const logger = { info() { }, warn() { }, error() { } };
 const execFileAsync = (0, node_util_1.promisify)(node_child_process_1.execFile);
 class PluginManager {
@@ -20,11 +26,58 @@ class PluginManager {
     root;
     messages = [];
     versions;
+    logs;
+    sessions;
     constructor(options) {
         this.options = options;
         this.root = (0, node_path_1.resolve)(options.pluginsDir);
         this.versions = options.versions ?? new version_manager_1.VersionManager({ stateDir: options.stateDir });
+        this.logs = new log_store_1.LogStore((0, node_path_1.join)(options.stateDir, "logs"));
+        this.sessions = new channel_sessions_1.ChannelSessions(options.stateDir);
     }
+    log(level, message, fields, source = "mab") { this.logs.append({ time: new Date().toISOString(), level, source, message, ...(fields ? { fields } : {}) }); }
+    async updatePolicy() { try {
+        const value = JSON.parse(await (0, promises_1.readFile)((0, node_path_1.join)(this.options.stateDir, "update-policy.json"), "utf8"));
+        return isUpdatePolicy(value) ? value : { mode: "auto-install" };
+    }
+    catch {
+        return { mode: "auto-install" };
+    } }
+    async saveUpdatePolicy(policy) { if (!isUpdatePolicy(policy))
+        throw new agent_1.AgentError("更新策略无效"); await (0, promises_1.mkdir)(this.options.stateDir, { recursive: true }); await (0, promises_1.writeFile)((0, node_path_1.join)(this.options.stateDir, "update-policy.json"), JSON.stringify(policy, null, 2)); this.log("info", `插件更新策略已设置：${policy.mode}`, undefined, "升级策略"); }
+    async downloadPackage(packageName, version) {
+        if (!/^agent-bridge-[a-z0-9-]+$/.test(packageName))
+            throw new agent_1.AgentError("仅支持 agent-bridge-* npm 包名");
+        if (version && !/^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?$/.test(version))
+            throw new agent_1.AgentError("插件版本号无效");
+        const target = (0, node_path_1.join)(this.options.stateDir, "downloads", packageName, version ?? "latest");
+        await (0, promises_1.rm)(target, { recursive: true, force: true });
+        await (0, promises_1.mkdir)(target, { recursive: true });
+        this.log("info", `开始下载插件：${packageName}`, { version }, "插件升级");
+        try {
+            const spec = version ? `${packageName}@${version}` : packageName;
+            if (process.platform === "win32")
+                await execFileAsync("npm.cmd", ["install", "--prefix", target, "--no-save", "--ignore-scripts", spec], { shell: true });
+            else
+                await execFileAsync("npm", ["install", "--prefix", target, "--no-save", "--ignore-scripts", spec]);
+            const candidate = (0, node_path_1.join)(target, "node_modules", packageName);
+            const meta = JSON.parse(await (0, promises_1.readFile)((0, node_path_1.join)(candidate, "package.json"), "utf8"));
+            if (meta.name !== packageName || !meta.version || (version && meta.version !== version) || !meta.agentBridge?.plugin)
+                throw new agent_1.AgentError("npm 包声明无效");
+            const manifest = (0, plugin_manifest_1.validateManifest)(JSON.parse(await (0, promises_1.readFile)((0, node_path_1.resolve)(candidate, meta.agentBridge.plugin), "utf8")), candidate);
+            if (manifest.id !== packageName.slice("agent-bridge-".length) || manifest.version !== meta.version)
+                throw new agent_1.AgentError("npm 包与插件清单不匹配");
+            this.validateCandidate(manifest, meta.agentBridge);
+            this.log("info", `插件下载完成：${manifest.id}`, { packageName, version: meta.version }, "插件升级");
+            return target;
+        }
+        catch (error) {
+            await (0, promises_1.rm)(target, { recursive: true, force: true });
+            this.log("error", `插件下载失败：${packageName}`, { error: error instanceof Error ? error.message : String(error) }, "插件升级");
+            throw error;
+        }
+    }
+    async cachedPackage(packageName, version) { const target = (0, node_path_1.join)(this.options.stateDir, "downloads", packageName, version ?? "latest"); return (0, node_fs_1.existsSync)((0, node_path_1.join)(target, "node_modules", packageName)) ? target : undefined; }
     async discover() {
         await (0, promises_1.mkdir)(this.root, { recursive: true });
         await this.discoverNpmPackages();
@@ -48,7 +101,7 @@ class PluginManager {
         }
         return this.list();
     }
-    list() { return [...this.plugins.values()].map(({ record }) => ({ ...record, capabilities: [...record.capabilities] })); }
+    list() { return [...this.plugins.values()].map(({ record }) => ({ ...record, capabilities: [...record.capabilities], dependencyStatus: this.dependencyStatus(record) })); }
     packageInfo(id) {
         const record = this.plugins.get(id)?.record;
         if (!record)
@@ -78,15 +131,15 @@ class PluginManager {
         if (!(0, node_path_1.resolve)(loaded.record.path).startsWith((0, node_path_1.resolve)(this.options.stateDir, "npm")))
             throw new agent_1.AgentError("内置插件不能通过 npm 升级");
         const prefix = (0, node_path_1.join)(this.options.stateDir, "npm", packageName);
-        const staging = (0, node_path_1.join)(this.options.stateDir, "npm", `.staging-${packageName}-${Date.now()}`);
+        const cached = await this.cachedPackage(packageName, version);
+        const staging = cached ?? (0, node_path_1.join)(this.options.stateDir, "npm", `.staging-${packageName}-${Date.now()}`);
         const backup = `${prefix}.backup-${Date.now()}`;
+        let stopped = false;
+        this.log("info", `开始升级插件：${id}`, { packageName, version }, "插件升级");
         await (0, promises_1.mkdir)(staging, { recursive: true });
         try {
-            const spec = version ? `${packageName}@${version}` : packageName;
-            if (process.platform === "win32")
-                await execFileAsync("npm.cmd", ["install", "--prefix", staging, "--no-save", "--ignore-scripts", spec]);
-            else
-                await execFileAsync("npm", ["install", "--prefix", staging, "--no-save", "--ignore-scripts", spec]);
+            if (!cached)
+                await this.downloadPackage(packageName, version).then((downloaded) => (0, promises_1.rename)(downloaded, staging));
             const candidate = (0, node_path_1.join)(staging, "node_modules", packageName);
             const meta = JSON.parse(await (0, promises_1.readFile)((0, node_path_1.join)(candidate, "package.json"), "utf8"));
             if (meta.name !== packageName || !meta.version || (version && meta.version !== version))
@@ -96,7 +149,9 @@ class PluginManager {
             const manifest = (0, plugin_manifest_1.validateManifest)(JSON.parse(await (0, promises_1.readFile)((0, node_path_1.resolve)(candidate, meta.agentBridge.plugin), "utf8")), candidate);
             if (manifest.id !== id || manifest.version !== meta.version)
                 throw new agent_1.AgentError("npm 包插件 ID 或版本不匹配");
+            this.validateCandidate(manifest, meta.agentBridge);
             await this.stop(id, "reload");
+            stopped = true;
             await (0, promises_1.rename)(prefix, backup);
             await (0, promises_1.rename)(staging, prefix);
             this.plugins.delete(id);
@@ -105,6 +160,7 @@ class PluginManager {
             const record = this.plugins.get(id).record;
             await this.versions.checkPackage(packageName, record.version);
             await (0, promises_1.rm)(backup, { recursive: true, force: true });
+            this.log("info", `插件升级成功：${id}`, { packageName, version: record.version }, "插件升级");
             return record;
         }
         catch (error) {
@@ -113,12 +169,15 @@ class PluginManager {
                 await (0, promises_1.rm)(prefix, { recursive: true, force: true });
                 await (0, promises_1.rename)(backup, prefix);
             }
-            this.plugins.delete(id);
-            try {
-                await this.discoverManagedPackages();
-                await this.start(id);
+            if (stopped) {
+                this.plugins.delete(id);
+                try {
+                    await this.discoverManagedPackages();
+                    await this.start(id);
+                }
+                catch { /* 回滚后仍无法启动时保留原错误 */ }
             }
-            catch { /* 回滚后仍无法启动时保留原错误 */ }
+            this.log("error", `插件升级失败并已回滚：${id}`, { packageName, error: error instanceof Error ? error.message : String(error) }, "插件升级");
             throw error;
         }
     }
@@ -139,9 +198,10 @@ class PluginManager {
         if (await this.existsDir(prefix))
             throw new agent_1.AgentError("插件包已经安装");
         await (0, promises_1.mkdir)(prefix, { recursive: true });
+        this.log("info", `开始安装插件：${packageName}`, undefined, "插件安装");
         try {
             if (process.platform === "win32")
-                await execFileAsync("npm.cmd", ["install", "--prefix", prefix, "--no-save", "--ignore-scripts", packageName]);
+                await execFileAsync("npm.cmd", ["install", "--prefix", prefix, "--no-save", "--ignore-scripts", packageName], { shell: true });
             else
                 await execFileAsync("npm", ["install", "--prefix", prefix, "--no-save", "--ignore-scripts", packageName]);
             const directory = (0, node_path_1.join)(prefix, "node_modules", name);
@@ -154,14 +214,17 @@ class PluginManager {
             const manifest = (0, plugin_manifest_1.validateManifest)(JSON.parse(await (0, promises_1.readFile)(manifestFile, "utf8")), directory);
             if (manifest.id !== name.slice("agent-bridge-".length) || manifest.version !== meta.version || (meta.agentBridge.type && meta.agentBridge.type !== manifest.type))
                 throw new agent_1.AgentError("npm 包与插件清单不匹配");
+            this.validateCandidate(manifest, meta.agentBridge);
             await this.discoverDirectory(directory, name, manifestFile);
             const record = this.plugins.get(manifest.id)?.record;
             if (!record)
                 throw new agent_1.AgentError("插件发现失败");
+            this.log("info", `插件安装成功：${manifest.id}`, { packageName, version: record.version }, "插件安装");
             return record;
         }
         catch (error) {
             await (0, promises_1.rm)(prefix, { recursive: true, force: true });
+            this.log("error", `插件安装失败：${packageName}`, { error: error instanceof Error ? error.message : String(error) }, "插件安装");
             throw error;
         }
     }
@@ -176,12 +239,31 @@ class PluginManager {
         await this.discover();
         return this.plugins.get(manifest.id).record;
     }
-    async start(id) {
+    async start(id) { await this.startWithDependencies(id, new Set()); }
+    async startWithDependencies(id, path) {
         const loaded = this.plugins.get(id);
         if (!loaded)
             throw new agent_1.AgentError(`unknown plugin: ${id}`);
         if (loaded.instance && loaded.record.status === "ready")
             return;
+        if (path.has(id)) {
+            const reason = `插件存在循环依赖：${[...path, id].join(" -> ")}`;
+            loaded.record.status = "failed";
+            loaded.record.error = reason;
+            throw new agent_1.AgentError(reason);
+        }
+        const compatibility = this.checkCompatibility(loaded.record);
+        loaded.record.compatibility = compatibility;
+        if (!compatibility.ok) {
+            loaded.record.status = "failed";
+            loaded.record.error = compatibility.reason;
+            this.log("error", `插件兼容性检查失败：${id}`, { reason: compatibility.reason }, "插件生命周期");
+            throw new agent_1.AgentError(compatibility.reason);
+        }
+        const next = new Set(path);
+        next.add(id);
+        for (const dependency of Object.keys(loaded.record.manifest.dependencies ?? {}))
+            await this.startWithDependencies(dependency, next);
         loaded.record.status = "starting";
         try {
             const instance = await this.load(loaded.record);
@@ -194,10 +276,10 @@ class PluginManager {
             }
             catch { /* defaults */ }
             const pluginLogger = {
-                info: (message, fields) => { this.options.logger?.info(message, fields); if (fields?.direction && typeof fields.text === "string")
+                info: (message, fields) => { this.log("info", message, fields, id); this.options.logger?.info(message, fields); if (fields?.direction && typeof fields.text === "string")
                     this.recordMessage(id, fields.direction, fields.text, typeof fields.peer === "string" ? fields.peer : undefined, typeof fields.agentAid === "string" ? fields.agentAid : undefined); },
-                warn: (message, fields) => (this.options.logger ?? logger).warn(message, fields),
-                error: (message, fields) => (this.options.logger ?? logger).error(message, fields),
+                warn: (message, fields) => { this.log("warn", message, fields, id); (this.options.logger ?? logger).warn(message, fields); },
+                error: (message, fields) => { this.log("error", message, fields, id); (this.options.logger ?? logger).error(message, fields); },
             };
             await instance.activate({
                 dataDir,
@@ -213,17 +295,28 @@ class PluginManager {
                 ingress: {
                     publish: async (message) => {
                         const target = message.agentPlugin || "qwenwork";
-                        const response = await this.handle(target, { task: message.text, sessionId: `${message.channel}:${message.peerId}` });
-                        await message.reply(response.text);
+                        this.recordMessage(target, "request", message.text, message.peerId);
+                        try {
+                            const response = await this.sessions.run(message, target, (sessionId) => this.handle(target, { task: message.text, sessionId }));
+                            await message.reply(response.text);
+                            this.recordMessage(target, "reply", response.text, message.peerId);
+                        }
+                        catch (error) {
+                            this.recordMessage(target, "error", error instanceof Error ? error.message : String(error), message.peerId);
+                            throw error;
+                        }
                     },
                 },
             });
             loaded.instance = instance;
             loaded.record.status = "ready";
+            loaded.record.error = undefined;
+            this.log("info", `插件已启动：${id}`, { version: loaded.record.version }, "插件生命周期");
         }
         catch (error) {
             loaded.record.status = "failed";
             loaded.record.error = error instanceof Error ? error.message : String(error);
+            this.log("error", `插件启动失败：${id}`, { error: loaded.record.error }, "插件生命周期");
             throw error;
         }
     }
@@ -244,12 +337,17 @@ class PluginManager {
         else
             this.unregisterHttpRoutes(id);
         loaded.record.status = "disabled";
+        this.log("info", `插件已停止：${id}`, { reason }, "插件生命周期");
+        await this.logs.flush();
     }
     async reload(id) { await this.stop(id, "reload"); await this.start(id); }
     async uninstall(id) {
         const loaded = this.plugins.get(id);
         if (!loaded)
             throw new agent_1.AgentError(`unknown plugin: ${id}`);
+        const users = [...this.plugins.values()].filter(({ record }) => Object.prototype.hasOwnProperty.call(record.manifest.dependencies ?? {}, id)).map(({ record }) => record.id);
+        if (users.length)
+            throw new agent_1.AgentError(`插件 ${id} 仍被依赖：${users.join("、")}`);
         const path = (0, node_path_1.resolve)(loaded.record.path);
         const packageName = (0, node_path_1.basename)(path);
         const managedPrefix = (0, node_path_1.resolve)(this.options.stateDir, "npm", packageName);
@@ -263,29 +361,42 @@ class PluginManager {
         await (0, promises_1.rm)(isManaged ? managedPrefix : path, { recursive: true, force: true });
         this.plugins.delete(id);
     }
-    async saveConfig(id, config) { if (!this.plugins.has(id))
-        throw new agent_1.AgentError(`unknown plugin: ${id}`); const dir = (0, node_path_1.join)(this.options.stateDir, id); await (0, promises_1.mkdir)(dir, { recursive: true }); await (0, promises_1.writeFile)((0, node_path_1.join)(dir, "config.json"), JSON.stringify(config, null, 2)); }
-    async setAid(id, aid) { await this.saveConfig(id, { ...await this.config(id), aid }); }
-    async recordCreatedAid(aid) {
-        const file = (0, node_path_1.join)(this.options.stateDir, "created-aids.json");
-        await (0, promises_1.mkdir)(this.options.stateDir, { recursive: true });
-        let aids = [];
-        try {
-            aids = JSON.parse(await (0, promises_1.readFile)(file, "utf8"));
-        }
-        catch { /* 首次记录 */ }
-        if (!aids.includes(aid))
-            await (0, promises_1.writeFile)(file, JSON.stringify([...aids, aid].sort(), null, 2));
-    }
-    async createdAids() {
+    async saveConfig(id, config) {
+        const loaded = this.plugins.get(id);
+        if (!loaded)
+            throw new agent_1.AgentError(`unknown plugin: ${id}`);
+        if (!config || typeof config !== "object" || Array.isArray(config))
+            throw new agent_1.AgentError("插件配置必须是对象");
+        const previous = await this.config(id);
+        const merged = { ...previous, ...config };
+        await this.validateConfig(loaded.record, merged);
+        const dir = (0, node_path_1.join)(this.options.stateDir, id);
+        await (0, promises_1.mkdir)(dir, { recursive: true });
+        await (0, promises_1.writeFile)((0, node_path_1.join)(dir, "config.json"), JSON.stringify(merged, null, 2));
+        const action = await this.reloadStrategy(loaded.record);
         try {
-            const aids = JSON.parse(await (0, promises_1.readFile)((0, node_path_1.join)(this.options.stateDir, "created-aids.json"), "utf8"));
-            return Array.isArray(aids) ? aids.filter((aid) => typeof aid === "string") : [];
+            if (action === "hot" && loaded.instance && typeof loaded.instance.reloadConfig === "function")
+                await loaded.instance.reloadConfig(merged);
+            else if (action === "reload" && loaded.instance)
+                await this.reload(id);
+            else if (action === "hot" && loaded.instance)
+                throw new agent_1.AgentError("插件未提供 hot 配置重载接口");
+            this.log("info", `插件配置已保存：${id}`, { action }, "插件配置");
+            return { action, restartRequired: action === "restart" };
         }
-        catch {
-            return [];
+        catch (error) {
+            await (0, promises_1.writeFile)((0, node_path_1.join)(dir, "config.json"), JSON.stringify(previous, null, 2));
+            if (action === "reload" && !loaded.instance) {
+                try {
+                    await this.start(id);
+                }
+                catch { /* 保留原始错误 */ }
+            }
+            this.log("error", `插件配置重载失败：${id}`, { action, error: error instanceof Error ? error.message : String(error) }, "插件配置");
+            throw error;
         }
     }
+    async setAid(id, aid) { await this.saveConfig(id, { ...await this.config(id), aid }); }
     async config(id) { if (!this.plugins.has(id))
         throw new agent_1.AgentError(`unknown plugin: ${id}`); try {
         return JSON.parse(await (0, promises_1.readFile)((0, node_path_1.join)(this.options.stateDir, id, "config.json"), "utf8"));
@@ -293,6 +404,30 @@ class PluginManager {
     catch {
         return {};
     } }
+    async reloadStrategy(record) { if (!record.manifest.configSchema)
+        return "reload"; try {
+        const schema = JSON.parse(await (0, promises_1.readFile)((0, node_path_1.resolve)(record.path, record.manifest.configSchema), "utf8"));
+        const value = schema["x-agent-bridge"]?.reload;
+        return value === "hot" || value === "restart" ? value : "reload";
+    }
+    catch {
+        return "reload";
+    } }
+    async validateConfig(record, config) { if (!config || typeof config !== "object" || Array.isArray(config))
+        throw new agent_1.AgentError("插件配置必须是对象"); if (!record.manifest.configSchema)
+        return; try {
+        const schema = JSON.parse(await (0, promises_1.readFile)((0, node_path_1.resolve)(record.path, record.manifest.configSchema), "utf8"));
+        const { ["x-agent-bridge"]: _metadata, ...validationSchema } = schema;
+        const ajv = new _2020_1.default({ allErrors: true, strict: false });
+        const validator = ajv.compile(validationSchema);
+        if (!validator(config))
+            throw new agent_1.AgentError(`插件配置无效：${ajv.errorsText(validator.errors)}`);
+    }
+    catch (error) {
+        if (error instanceof agent_1.AgentError)
+            throw error;
+        throw new agent_1.AgentError(`插件配置校验失败：${error instanceof Error ? error.message : String(error)}`);
+    } }
     async health(id) { const loaded = this.plugins.get(id); if (!loaded)
         throw new agent_1.AgentError(`unknown plugin: ${id}`); if (!loaded.instance)
         return { status: loaded.record.status }; return loaded.instance.health(); }
@@ -450,12 +585,77 @@ class PluginManager {
             const manifest = (0, plugin_manifest_1.validateManifest)(JSON.parse(await (0, promises_1.readFile)(manifestFile, "utf8")), directory);
             if (this.plugins.has(manifest.id))
                 return;
-            this.plugins.set(manifest.id, { record: { id: manifest.id, version: manifest.version, type: manifest.type ?? "other", displayName: manifest.displayName ?? manifest.id, status: "discovered", capabilities: manifest.capabilities, manifest, path: directory } });
+            let packageName;
+            let publisher;
+            let coreConstraint;
+            try {
+                const packageJson = JSON.parse(await (0, promises_1.readFile)((0, node_path_1.join)(directory, "package.json"), "utf8"));
+                packageName = packageJson.name;
+                publisher = packageJson._npmUser?.name ?? packageJson.maintainers?.[0]?.name;
+                coreConstraint = packageJson.agentBridge?.requires?.["mu-agent-bridge"];
+                const declared = packageJson.agentBridge?.requires?.plugins;
+                if (declared && JSON.stringify(declared) !== JSON.stringify(manifest.dependencies ?? {}))
+                    throw new agent_1.AgentError("npm 包与插件清单的依赖声明冲突");
+            }
+            catch (error) {
+                if (error instanceof agent_1.AgentError)
+                    throw error; /* 内置插件没有 npm 元数据 */
+            }
+            const coreVersion = require((0, node_path_1.resolve)(__dirname, "../../package.json")).version;
+            const error = coreConstraint && !(0, version_manager_1.satisfiesVersion)(coreVersion, coreConstraint) ? `核心版本 ${coreVersion} 不满足插件要求 ${coreConstraint}` : undefined;
+            const trustedNames = new Set((process.env.AGENT_BRIDGE_TRUSTED_PACKAGES ?? "").split(",").map((name) => name.trim()).filter(Boolean));
+            const trusted = Boolean(packageName && trustedNames.has(packageName));
+            this.plugins.set(manifest.id, { record: { id: manifest.id, version: manifest.version, type: manifest.type ?? "other", displayName: manifest.displayName ?? manifest.id, status: error ? "failed" : "discovered", capabilities: manifest.capabilities, manifest, path: directory, ...(packageName ? { packageName, publisher, trusted, autoUpdate: trusted } : {}), ...(coreConstraint ? { coreConstraint } : {}), ...(error ? { error } : {}) } });
         }
         catch (error) {
             throw new agent_1.AgentError(`invalid plugin ${label}: ${error instanceof Error ? error.message : String(error)}`, { cause: error });
         }
     }
+    checkCompatibility(record) {
+        const coreVersion = require((0, node_path_1.resolve)(__dirname, "../../package.json")).version;
+        if (record.coreConstraint && !(0, version_manager_1.satisfiesVersion)(coreVersion, record.coreConstraint))
+            return { ok: false, reason: `核心版本 ${coreVersion} 不满足插件要求 ${record.coreConstraint}` };
+        for (const [id, range] of Object.entries(record.manifest.dependencies ?? {})) {
+            const dependency = this.plugins.get(id)?.record;
+            if (!dependency)
+                return { ok: false, reason: `缺少插件依赖：${id}` };
+            if (!(0, version_manager_1.satisfiesVersion)(dependency.version, range))
+                return { ok: false, reason: `插件依赖 ${id}@${dependency.version} 不满足 ${range}` };
+        }
+        return { ok: true };
+    }
+    validateCandidate(manifest, metadata) {
+        const declared = metadata?.requires?.plugins;
+        if (declared && (Object.keys(declared).length !== Object.keys(manifest.dependencies ?? {}).length || Object.entries(declared).some(([id, range]) => manifest.dependencies?.[id] !== range)))
+            throw new agent_1.AgentError("npm 包与插件清单的依赖声明冲突");
+        const compatibility = this.checkCompatibility({ id: manifest.id, version: manifest.version, type: manifest.type ?? "other", displayName: manifest.displayName ?? manifest.id, status: "discovered", capabilities: manifest.capabilities, manifest, path: "", coreConstraint: metadata?.requires?.["mu-agent-bridge"] });
+        if (!compatibility.ok)
+            throw new agent_1.AgentError(compatibility.reason);
+        for (const { record } of this.plugins.values()) {
+            const range = record.manifest.dependencies?.[manifest.id];
+            if (range && !(0, version_manager_1.satisfiesVersion)(manifest.version, range))
+                throw new agent_1.AgentError(`插件 ${record.id} 要求 ${manifest.id}@${range}，候选版本为 ${manifest.version}`);
+        }
+    }
+    dependencyStatus(record) {
+        const statuses = [];
+        for (const [id, range] of Object.entries(record.manifest.dependencies ?? {})) {
+            const dependency = this.plugins.get(id)?.record;
+            if (!dependency)
+                statuses.push(`缺少 ${id}`);
+            else if (!(0, version_manager_1.satisfiesVersion)(dependency.version, range))
+                statuses.push(`${id}@${dependency.version} 不满足 ${range}`);
+        }
+        if (this.hasCycle(record.id))
+            statuses.push("存在循环依赖");
+        return statuses;
+    }
+    hasCycle(id) {
+        const visit = (current, path) => { if (path.has(current))
+            return true; const record = this.plugins.get(current)?.record; if (!record)
+            return false; const next = new Set(path); next.add(current); return Object.keys(record.manifest.dependencies ?? {}).some((dependency) => visit(dependency, next)); };
+        return visit(id, new Set());
+    }
     async exists(path) { try {
         await (0, promises_1.readFile)((0, node_path_1.join)(path, "plugin.json"));
         return true;
@@ -472,3 +672,4 @@ class PluginManager {
     } }
 }
 exports.PluginManager = PluginManager;
+function isUpdatePolicy(value) { return Boolean(value && typeof value === "object" && ["auto-install", "download-only", "manual"].includes(value.mode)); }

package/dist/src-ts/plugin-manifest.js

@@ -25,6 +25,10 @@ function validateManifest(value, baseDir) {
         throw new agent_1.AgentError("插件类型与能力不匹配");
     if (m.process && m.process !== "in-process" && m.process !== "isolated")
         throw new agent_1.AgentError("invalid plugin process");
+    if (m.managementPage !== undefined && ((m.type ?? inferredType) !== "channel" || m.managementPage !== `/abweb/channels/${m.id}`))
+        throw new agent_1.AgentError("插件管理页面路径无效");
+    if (m.dependencies && (!m.dependencies || typeof m.dependencies !== "object" || Array.isArray(m.dependencies) || Object.entries(m.dependencies).some(([id, range]) => !/^[a-z][a-z0-9-]{1,63}$/.test(id) || typeof range !== "string" || !range.trim())))
+        throw new agent_1.AgentError("插件依赖声明无效");
     if (baseDir) {
         const root = (0, node_path_1.resolve)(baseDir);
         const target = (0, node_path_1.resolve)(root, m.entry);
@@ -32,5 +36,5 @@ function validateManifest(value, baseDir) {
         if ((0, node_path_1.isAbsolute)(m.entry) || rel.startsWith(`..${node_path_1.sep}`) || rel === "..")
             throw new agent_1.AgentError("plugin entry path escapes plugin directory");
     }
-    return { id: m.id, version: m.version, displayName: m.displayName ?? m.id, type: m.type ?? inferredType, entry: m.entry, apiVersion: m.apiVersion, process: m.process ?? "in-process", capabilities: [...m.capabilities], configSchema: m.configSchema, routes: m.routes };
+    return { id: m.id, version: m.version, displayName: m.displayName ?? m.id, type: m.type ?? inferredType, entry: m.entry, apiVersion: m.apiVersion, process: m.process ?? "in-process", capabilities: [...m.capabilities], configSchema: m.configSchema, routes: m.routes, ...(m.dependencies ? { dependencies: { ...m.dependencies } } : {}), ...(m.managementPage ? { managementPage: m.managementPage } : {}) };
 }

package/dist/src-ts/plugins/abweb/index.js

@@ -5,7 +5,7 @@ const node_fs_1 = require("node:fs");
 const node_path_1 = require("node:path");
 const MANIFEST = {
     id: "abweb",
-    version: "1.0.1",
+    version: "1.0.4",
     displayName: "Agent Bridge Web",
     entry: "dist/index.js",
     apiVersion: "1",