openlearn-next 0.7.5 → 0.7.7

package/dist/server.cjs

@@ -3578,6 +3578,19 @@ var init_errors2 = __esm({
 function scopedId(scopeType, scopeId, key) {
   return `${scopeType}\0${scopeId}\0${key}`;
 }
+function getSharedState(db2, manifestId) {
+  let byManifest = sharedStates.get(db2);
+  if (!byManifest) {
+    byManifest = /* @__PURE__ */ new Map();
+    sharedStates.set(db2, byManifest);
+  }
+  let state = byManifest.get(manifestId);
+  if (!state) {
+    state = { values: /* @__PURE__ */ new Map(), instances: /* @__PURE__ */ new Set() };
+    byManifest.set(manifestId, state);
+  }
+  return state;
+}
 function normalizeWriteScope(scope) {
   const scopeType = scope?.scopeType ?? "platform";
   const scopeId = scope?.scopeId?.trim() ?? "";
@@ -3586,21 +3599,29 @@ function normalizeWriteScope(scope) {
   }
   return { scopeType, scopeId: scopeType === "platform" ? "" : scopeId };
 }
-var CONFIG_SCOPE_TYPES, ConfigService;
+var CONFIG_SCOPE_TYPES, sharedStates, instanceCleanup, ConfigService;
 var init_config_service = __esm({
   "packages/core/plugin-host/config-service.ts"() {
     "use strict";
     CONFIG_SCOPE_TYPES = ["platform", "school", "class"];
+    sharedStates = /* @__PURE__ */ new WeakMap();
+    instanceCleanup = new FinalizationRegistry(
+      ({ state, ref }) => {
+        state.instances.delete(ref);
+      }
+    );
     ConfigService = class _ConfigService {
       constructor(db2, manifest) {
-        /** In-memory cache (scoped key → value). `null` 表示「明确没有值」，避免反复查询。 */
-        this.values = /* @__PURE__ */ new Map();
-        /** Change listeners. */
+        /** Change listeners（每个实例独立，广播时按实例分发）。 */
         this.listeners = /* @__PURE__ */ new Set();
         this.tableEnsured = false;
         this.db = db2;
         this.manifestId = manifest.id;
         this.schema = manifest.configuration?.properties ?? {};
+        this.state = getSharedState(db2, manifest.id);
+        const ref = new WeakRef(this);
+        this.state.instances.add(ref);
+        instanceCleanup.register(this, { state: this.state, ref });
       }
       static {
         this.KEY_PREFIX = "config:";
@@ -3663,21 +3684,21 @@ var init_config_service = __esm({
       }
       readScoped(key, scopeType, scopeId) {
         const cacheKey2 = scopedId(scopeType, scopeId, key);
-        if (this.values.has(cacheKey2)) {
-          const cached3 = this.values.get(cacheKey2);
+        if (this.state.values.has(cacheKey2)) {
+          const cached3 = this.state.values.get(cacheKey2);
           return cached3 === null ? { found: false } : { found: true, value: cached3 };
         }
         const row = this.queryScoped(key, scopeType, scopeId);
         if (!row) {
-          this.values.set(cacheKey2, null);
+          this.state.values.set(cacheKey2, null);
           return { found: false };
         }
         try {
           const parsed = JSON.parse(row.value);
-          this.values.set(cacheKey2, parsed);
+          this.state.values.set(cacheKey2, parsed);
           return { found: true, value: parsed };
         } catch {
-          this.values.set(cacheKey2, row.value);
+          this.state.values.set(cacheKey2, row.value);
           return { found: true, value: row.value };
         }
       }
@@ -3693,21 +3714,21 @@ var init_config_service = __esm({
       }
       readLegacyPlatformValue(key) {
         const cacheKey2 = scopedId("platform", "", `legacy:${key}`);
-        if (this.values.has(cacheKey2)) {
-          const cached3 = this.values.get(cacheKey2);
+        if (this.state.values.has(cacheKey2)) {
+          const cached3 = this.state.values.get(cacheKey2);
           return cached3 === null ? { found: false } : { found: true, value: cached3 };
         }
         try {
           const row = this.db.prepare("SELECT value FROM plugin_storage WHERE plugin_id = ? AND key = ?").get(this.manifestId, _ConfigService.KEY_PREFIX + key);
           if (!row) {
-            this.values.set(cacheKey2, null);
+            this.state.values.set(cacheKey2, null);
             return { found: false };
           }
           const parsed = JSON.parse(row.value);
-          this.values.set(cacheKey2, parsed);
+          this.state.values.set(cacheKey2, parsed);
           return { found: true, value: parsed };
         } catch {
-          this.values.set(cacheKey2, null);
+          this.state.values.set(cacheKey2, null);
           return { found: false };
         }
       }
@@ -3763,8 +3784,8 @@ var init_config_service = __esm({
         const { scopeType, scopeId } = normalizeWriteScope(scope);
         this.assertScopeAllowed(key, scopeType);
         const cacheKey2 = scopedId(scopeType, scopeId, key);
-        const previous = this.values.get(cacheKey2);
-        this.values.set(cacheKey2, value);
+        const previous = this.state.values.get(cacheKey2);
+        this.state.values.set(cacheKey2, value);
         try {
           this.ensureTable();
           this.db.prepare(
@@ -3775,16 +3796,32 @@ var init_config_service = __esm({
           ).run(this.manifestId, scopeType, scopeId, key, JSON.stringify(value), Date.now());
         } catch (e) {
           if (previous === void 0) {
-            this.values.delete(cacheKey2);
+            this.state.values.delete(cacheKey2);
           } else {
-            this.values.set(cacheKey2, previous);
+            this.state.values.set(cacheKey2, previous);
           }
           throw e;
         }
-        for (const listener of this.listeners) {
-          try {
-            listener(key, value, previous === null ? void 0 : previous);
-          } catch {
+        this.broadcast(key, value, previous ?? void 0);
+      }
+      /**
+       * 通知所有共享同一 db + manifest.id 的活跃实例（含自身）。
+       *
+       * 管理端通过临时实例写入时，运行中插件的 `onChange` 也因此能收到。
+       * 已回收的实例在遍历时顺手清理。
+       */
+      broadcast(key, newValue, oldValue) {
+        for (const ref of this.state.instances) {
+          const instance = ref.deref();
+          if (!instance) {
+            this.state.instances.delete(ref);
+            continue;
+          }
+          for (const listener of instance.listeners) {
+            try {
+              listener(key, newValue, oldValue);
+            } catch {
+            }
           }
         }
       }
@@ -3817,11 +3854,12 @@ var init_config_service = __esm({
        * 插件在 `activate()` 里通常会马上读配置，提前填充避免每条配置一次查询。
        */
       loadFromDB() {
+        this.state.values.clear();
         try {
           const rows = this.db.prepare(`SELECT scope_type, scope_id, key, value FROM ${_ConfigService.TABLE} WHERE plugin_id = ?`).all(this.manifestId);
           for (const row of rows) {
             const scopeType = CONFIG_SCOPE_TYPES.includes(row.scope_type) ? row.scope_type : "platform";
-            this.values.set(scopedId(scopeType, row.scope_id ?? "", row.key), this.parseStored(row.value));
+            this.state.values.set(scopedId(scopeType, row.scope_id ?? "", row.key), this.parseStored(row.value));
           }
         } catch {
         }
@@ -3830,7 +3868,7 @@ var init_config_service = __esm({
           const rows = this.db.prepare(`SELECT key, value FROM plugin_storage WHERE plugin_id = ? AND key LIKE ?`).all(this.manifestId, prefix + "%");
           for (const row of rows) {
             const key = row.key.slice(prefix.length);
-            this.values.set(scopedId("platform", "", `legacy:${key}`), this.parseStored(row.value));
+            this.state.values.set(scopedId("platform", "", `legacy:${key}`), this.parseStored(row.value));
           }
         } catch {
         }
@@ -3842,9 +3880,9 @@ var init_config_service = __esm({
           return raw;
         }
       }
-      /** 测试/诊断：当前缓存里的作用域条目数。 */
+      /** 测试/诊断：当前共享缓存里的作用域条目数。 */
       cachedEntryCount() {
-        return this.values.size;
+        return this.state.values.size;
       }
     };
   }
@@ -4549,14 +4587,33 @@ function wrapProcessManager(processService, tracker, pluginId, processOwnerLooku
     })
   };
 }
-function wrapActionRegistry(actionRegistry, tracker, pluginId) {
+function wrapActionRegistry(actionRegistry, tracker, pluginId, manifestId) {
+  const prefix = manifestId || pluginId;
+  const isKernel = prefix.startsWith("@openlearn/");
   return {
     register: createSafeFunction((descriptor) => {
-      return Promise.resolve(actionRegistry.register(descriptor)).then(() => {
+      const commandType = descriptor.commandType;
+      const prefixed = isKernel || !commandType || commandType.startsWith(`${prefix}.`) ? commandType : `${prefix}.${commandType}`;
+      const effectiveDescriptor = prefixed !== commandType ? { ...descriptor, commandType: prefixed } : descriptor;
+      return Promise.resolve(actionRegistry.register(effectiveDescriptor)).then(() => {
+        if (prefixed !== commandType) {
+          Promise.resolve(
+            actionRegistry.register({
+              ...descriptor,
+              id: `${descriptor.id}__raw_alias`,
+              exposeToAgent: false
+            })
+          ).catch(() => {
+          });
+        }
         tracker.track(pluginId, {
           dispose: () => {
-            Promise.resolve(actionRegistry.unregister(descriptor.id)).catch(() => {
+            Promise.resolve(actionRegistry.unregister(effectiveDescriptor.id)).catch(() => {
             });
+            if (prefixed !== commandType) {
+              Promise.resolve(actionRegistry.unregister(`${descriptor.id}__raw_alias`)).catch(() => {
+              });
+            }
           }
         });
       });
@@ -4797,7 +4854,7 @@ async function buildContext(serviceRegistry, tracker, pluginId, manifest, db2, s
     // 可选方法，mock 或旧部署可缺省 —— 缺省时 isOwnProcess 退化为「不拦截」，与旧行为一致。
     typeof processService.getProcessOwner === "function" ? (processId) => processService.getProcessOwner(processId) : void 0
   );
-  const wrappedActionRegistry = wrapActionRegistry(actionRegistryService, tracker, pluginId);
+  const wrappedActionRegistry = wrapActionRegistry(actionRegistryService, tracker, pluginId, manifest.id);
   const wrappedCapability = wrapCapability(capabilityService);
   const wrappedStorage = wrapStorage(storageService, db2, manifest.id);
   const wrappedAI = wrapAI(aiService, pluginId, tracker);
@@ -8442,10 +8499,28 @@ var init_service_host = __esm({
             const actionRegistry = service;
             if (msg.method === "register") {
               const [descriptor] = effectiveArgs;
-              await actionRegistry.register(descriptor);
-              this.registeredActionIds.add(descriptor.id);
-              if (typeof descriptor?.commandType === "string") {
-                this.registeredActionCommandTypes.set(descriptor.id, descriptor.commandType);
+              const pluginId = this.pluginId || this.pluginActorId.replace(/^plugin:/, "");
+              const isKernel = pluginId.startsWith("@openlearn/");
+              const rawCommandType = descriptor.commandType;
+              const prefixed = isKernel || !rawCommandType || rawCommandType.startsWith(`${pluginId}.`) ? rawCommandType : resolvePluginCommandType(rawCommandType, pluginId);
+              const effectiveDescriptor = prefixed !== rawCommandType ? { ...descriptor, commandType: prefixed } : descriptor;
+              await actionRegistry.register(effectiveDescriptor);
+              this.registeredActionIds.add(effectiveDescriptor.id);
+              if (typeof effectiveDescriptor?.commandType === "string") {
+                this.registeredActionCommandTypes.set(effectiveDescriptor.id, effectiveDescriptor.commandType);
+              }
+              if (prefixed !== rawCommandType) {
+                try {
+                  const aliasId = `${descriptor.id}__raw_alias`;
+                  await actionRegistry.register({
+                    ...descriptor,
+                    id: aliasId,
+                    exposeToAgent: false
+                  });
+                  this.registeredActionIds.add(aliasId);
+                  this.registeredActionCommandTypes.set(aliasId, rawCommandType);
+                } catch {
+                }
               }
               transport.postMessage({
                 type: "result",
@@ -8456,8 +8531,14 @@ var init_service_host = __esm({
             } else if (msg.method === "unregister") {
               const [actionId] = msg.args;
               await actionRegistry.unregister(actionId);
+              try {
+                await actionRegistry.unregister(`${actionId}__raw_alias`);
+              } catch {
+              }
               this.registeredActionIds.delete(actionId);
+              this.registeredActionIds.delete(`${actionId}__raw_alias`);
               this.registeredActionCommandTypes.delete(actionId);
+              this.registeredActionCommandTypes.delete(`${actionId}__raw_alias`);
               transport.postMessage({
                 type: "result",
                 invokeId: msg.invokeId,
@@ -15190,6 +15271,26 @@ var BuiltinPlugin = {
       "page_meta"
       // 分页与大纲元数据
     ];
+    const isAllowedElementType = (type) => {
+      if (!type || typeof type !== "string") return false;
+      if (KNOWN_ELEMENT_TYPES2.includes(type)) return true;
+      if (type.includes("/") || type.startsWith("plugin:") || type.startsWith("ext-") || type.startsWith("plugin-")) {
+        return true;
+      }
+      try {
+        const reg = pluginHost?.getContributionRegistry?.();
+        if (reg) {
+          const paletteItems = reg.getBySlot("editor.palette_item") || [];
+          if (paletteItems.some((item) => item.type === type || item.id === type)) return true;
+          const renderers = reg.getBySlot("whiteboard.renderer") || [];
+          if (renderers.some((item) => item.targetType === type || item.id === type || item.elementType === type)) {
+            return true;
+          }
+        }
+      } catch {
+      }
+      return false;
+    };
     await actionRegistry.register({
       id: "core-whiteboard-draw",
       commandType: drawWhiteboardCmdType,
@@ -15213,8 +15314,8 @@ var BuiltinPlugin = {
     await commandBus.registerHandler(drawWhiteboardCmdType, {
       async execute(command) {
         const payload = command.payload;
-        if (!KNOWN_ELEMENT_TYPES2.includes(payload.type)) {
-          const hint = payload.type === "quiz" ? "" : payload.type && (payload.type.includes("quiz") || payload.type.includes("question")) ? ` \u63D0\u793A\uFF1A\u521B\u5EFA\u6D4B\u9A8C\u8BF7\u4F7F\u7528 quiz.create \u6216 quiz_pro.create \u5DE5\u5177\u3002` : ` \u5DF2\u77E5\u7C7B\u578B\uFF1A${KNOWN_ELEMENT_TYPES2.join(", ")}\u3002`;
+        if (!isAllowedElementType(payload.type)) {
+          const hint = payload.type === "quiz" ? "" : payload.type && (payload.type.includes("quiz") || payload.type.includes("question")) ? ` \u63D0\u793A\uFF1A\u521B\u5EFA\u6D4B\u9A8C\u8BF7\u4F7F\u7528 quiz.create \u6216 quiz_pro.create \u5DE5\u5177\u3002` : ` \u5DF2\u77E5\u7C7B\u578B\uFF1A${KNOWN_ELEMENT_TYPES2.join(", ")}\uFF0C\u6216\u63D2\u4EF6\u6269\u5C55\u56FE\u5143 (\u5982 ext-xxx/yyy)\u3002`;
           throw new Error(`\u4E0D\u652F\u6301\u7684\u5143\u7D20\u7C7B\u578B "${payload.type}"\u3002${hint}`);
         }
         const elementId = (0, import_uuid7.v7)();
@@ -15456,7 +15557,7 @@ var BuiltinPlugin = {
         );
         const batchInsert = db2.transaction(() => {
           for (const el of elements) {
-            if (!KNOWN_ELEMENT_TYPES2.includes(el.type)) {
+            if (!isAllowedElementType(el.type)) {
               throw new Error(`\u4E0D\u652F\u6301\u7684\u5143\u7D20\u7C7B\u578B "${el.type}"\u3002\u5DF2\u77E5\u7C7B\u578B\uFF1A${KNOWN_ELEMENT_TYPES2.join(", ")}`);
             }
             const elementId = (0, import_uuid7.v7)();
@@ -18989,6 +19090,19 @@ function trustedInlineAllowlist(env = process.env) {
     (env.OPENLEARN_TRUSTED_INLINE_PLUGINS ?? "").split(",").map((item) => item.trim()).filter((item) => item.length > 0)
   );
 }
+function matchesTrustedInlinePattern(pattern, manifestId) {
+  if (!manifestId) return false;
+  if (pattern === "*") return true;
+  if (pattern.endsWith("*")) return manifestId.startsWith(pattern.slice(0, -1));
+  return pattern === manifestId;
+}
+function isInTrustedInlineAllowlist(manifestId, env = process.env) {
+  if (!manifestId) return false;
+  for (const pattern of trustedInlineAllowlist(env)) {
+    if (matchesTrustedInlinePattern(pattern, manifestId)) return true;
+  }
+  return false;
+}
 function builtinPluginsDir() {
   try {
     const url = import_meta5.url;
@@ -19011,7 +19125,7 @@ function isInsideBuiltinPluginsDir(sourcePath, builtinDir = builtinPluginsDir())
 }
 function isTrustedInProcessPlugin(manifestId, env = process.env, sourcePath) {
   if (isInsideBuiltinPluginsDir(sourcePath)) return true;
-  if (manifestId && trustedInlineAllowlist(env).has(manifestId)) return true;
+  if (isInTrustedInlineAllowlist(manifestId, env)) return true;
   if (env.VITEST && env.OPENLEARN_ENFORCE_PLUGIN_ISOLATION !== "1") return true;
   return false;
 }
@@ -20999,7 +21113,7 @@ var import_node_fs11 = __toESM(require("node:fs"), 1);
 var import_node_path13 = __toESM(require("node:path"), 1);
 var import_node_url5 = require("node:url");
 var import_meta7 = {};
-var FALLBACK_VERSION = "0.7.5";
+var FALLBACK_VERSION = "0.7.7";
 function readPlatformVersion() {
   const bases = [];
   if (typeof __dirname !== "undefined") bases.push(__dirname);
@@ -32805,11 +32919,17 @@ function validateStartupEnv(env = process.env) {
         severity: "warning",
         message: "OPENLEARN_TRUSTED_INLINE_PLUGINS \u53EA\u542B\u7A7A\u767D/\u9017\u53F7\uFF0C\u7B49\u540C\u4E8E\u672A\u914D\u7F6E\u3002"
       });
+    } else if (ids.includes("*")) {
+      warnings.push({
+        key: "OPENLEARN_TRUSTED_INLINE_PLUGINS",
+        severity: "warning",
+        message: "OPENLEARN_TRUSTED_INLINE_PLUGINS \u542B\u901A\u914D\u7B26 `*`\uFF1A**\u6240\u6709**\u63D2\u4EF6\u90FD\u88AB\u89C6\u4E3A\u53D7\u4FE1\uFF0C\u53EF\u5728\u8FDB\u7A0B\u5185\u4EE5 inline/worker \u8FD0\u884C\uFF08\u542B\u65E5\u540E\u5B89\u88C5\u7684\u4EFB\u610F\u7B2C\u4E09\u65B9\u5305\uFF09\u3002\u5B83\u4EEC\u4E0E\u5BBF\u4E3B\u5171\u4EAB\u73AF\u5883\u53D8\u91CF\u4E0E\u7F51\u7EDC\u6808\uFF0C\u51FA\u7AD9\u7F51\u7EDC\u62E6\u622A\u5BF9\u5B83\u4EEC\u4E0D\u751F\u6548\uFF0C\u672A\u6355\u83B7\u5F02\u5E38\u53EF\u62D6\u57AE\u670D\u52A1\u3002\u4EC5\u9650\u672C\u5730\u5F00\u53D1\uFF1B\u751F\u4EA7\u73AF\u5883\u8BF7\u6539\u4E3A\u7CBE\u786E id \u6216\u524D\u7F00\u5F0F\uFF08\u5982 `@ext/*`\uFF09\u3002"
+      });
     } else if (isProduction) {
       warnings.push({
         key: "OPENLEARN_TRUSTED_INLINE_PLUGINS",
         severity: "warning",
-        message: `\u751F\u4EA7\u73AF\u5883\u4FE1\u4EFB\u4E86 ${ids.length} \u4E2A\u63D2\u4EF6\u5728**\u8FDB\u7A0B\u5185**\u8FD0\u884C\uFF1A${ids.join(", ")}\u3002 \u5B83\u4EEC\u4E0E\u5BBF\u4E3B\u5171\u4EAB\u73AF\u5883\u53D8\u91CF\u4E0E\u7F51\u7EDC\u6808\uFF0C\u51FA\u7AD9\u7F51\u7EDC\u62E6\u622A\u5BF9\u5B83\u4EEC\u4E0D\u751F\u6548\u3002 \u786E\u8BA4\u8FD9\u662F\u6709\u610F\u4E3A\u4E4B\uFF1B\u5426\u5219\u6E05\u7A7A\u8BE5\u53D8\u91CF\u8BA9\u5B83\u4EEC\u56DE\u5230 process \u5B50\u8FDB\u7A0B\u9694\u79BB\u3002`
+        message: `\u751F\u4EA7\u73AF\u5883\u4FE1\u4EFB\u4E86 ${ids.length} \u4E2A\u6761\u76EE\u5728**\u8FDB\u7A0B\u5185**\u8FD0\u884C\uFF1A${ids.join(", ")}\u3002 \u5B83\u4EEC\u4E0E\u5BBF\u4E3B\u5171\u4EAB\u73AF\u5883\u53D8\u91CF\u4E0E\u7F51\u7EDC\u6808\uFF0C\u51FA\u7AD9\u7F51\u7EDC\u62E6\u622A\u5BF9\u5B83\u4EEC\u4E0D\u751F\u6548\u3002 \u786E\u8BA4\u8FD9\u662F\u6709\u610F\u4E3A\u4E4B\uFF1B\u5426\u5219\u6E05\u7A7A\u8BE5\u53D8\u91CF\u8BA9\u5B83\u4EEC\u56DE\u5230 process \u5B50\u8FDB\u7A0B\u9694\u79BB\u3002`
       });
     }
   }
@@ -33633,6 +33753,7 @@ var normalizeToolSchema = (schema) => {
 };
 var buildOpenAITools = (callerRole) => {
   let actions = kernelContainer.actionRegistry.getAllActions();
+  actions = actions.filter((action) => action.exposeToAgent !== false);
   if (callerRole === "student") {
     actions = actions.filter((action) => {
       const cap = action.capabilityRequired || "";
@@ -36042,6 +36163,142 @@ post({ type: 'ready' });
 </script>
 </body></html>`;
 
+// server/utils/plugin-view-bridge.ts
+var PLUGIN_VIEW_CSP = "sandbox allow-scripts allow-forms allow-downloads; frame-ancestors 'self'; default-src 'self' 'unsafe-inline' data: blob: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: https:; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' data: blob: https:; style-src-attr 'unsafe-inline'; connect-src 'self' blob: data: https:;";
+var PLUGIN_VIEW_BRIDGE_JS = `(function () {
+  'use strict';
+  const CHANNEL = 'ol-plugin-view';
+  let targetOrigin = '*';
+  const pending = new Map();
+  const initCallbacks = [];
+  const contextUpdateCallbacks = [];
+  let currentContext = null;
+
+  function post(msg) {
+    if (window.parent && window.parent !== window) {
+      window.parent.postMessage(Object.assign({ channel: CHANNEL }, msg), targetOrigin);
+    }
+  }
+
+  function call(op, args) {
+    const callId = Math.random().toString(16).slice(2) + Date.now().toString(16);
+    return new Promise(function (resolve, reject) {
+      pending.set(callId, { resolve: resolve, reject: reject });
+      post({ type: 'call', callId: callId, op: op, args: args || [] });
+    });
+  }
+
+  window.addEventListener('message', function (event) {
+    const data = event.data;
+    if (!data || data.channel !== CHANNEL) return;
+    if (event.source !== window.parent) return;
+
+    if (data.type === 'init') {
+      currentContext = data.payload || {};
+      targetOrigin = event.origin && event.origin !== 'null' ? event.origin : '*';
+      for (let i = 0; i < initCallbacks.length; i++) {
+        try {
+          initCallbacks[i](currentContext);
+        } catch (e) {
+          console.error('[OpenLearnPluginBridge] init callback error:', e);
+        }
+      }
+      return;
+    }
+
+    if (data.type === 'context-update') {
+      currentContext = Object.assign({}, currentContext, data.payload || {});
+      for (let i = 0; i < contextUpdateCallbacks.length; i++) {
+        try {
+          contextUpdateCallbacks[i](currentContext);
+        } catch (e) {
+          console.error('[OpenLearnPluginBridge] contextUpdate callback error:', e);
+        }
+      }
+      return;
+    }
+
+    if (data.type === 'reply') {
+      const waiter = pending.get(data.callId);
+      if (!waiter) return;
+      pending.delete(data.callId);
+      if (data.ok) {
+        waiter.resolve(data.value);
+      } else {
+        waiter.reject(new Error(data.error || 'bridge call failed'));
+      }
+      return;
+    }
+  });
+
+  const bridge = {
+    CHANNEL: CHANNEL,
+    onInit: function (callback) {
+      if (typeof callback === 'function') {
+        if (currentContext) {
+          try {
+            callback(currentContext);
+          } catch (e) {
+            console.error('[OpenLearnPluginBridge] onInit callback error:', e);
+          }
+        }
+        initCallbacks.push(callback);
+      }
+      return bridge;
+    },
+    onContextUpdate: function (callback) {
+      if (typeof callback === 'function') {
+        contextUpdateCallbacks.push(callback);
+      }
+      return bridge;
+    },
+    getContext: function () {
+      return currentContext;
+    },
+    ui: {
+      toast: function (message, type) {
+        return call('ui.toast', [message, type || 'info']);
+      },
+      showToast: function (message, type) {
+        return call('ui.toast', [message, type || 'info']);
+      },
+      resize: function (height) {
+        post({ type: 'resize', height: Number(height) || 0 });
+      },
+    },
+    invokeCommand: function (type, payload) {
+      return call('command.invoke', [type, payload]);
+    },
+    api: {
+      get: function (path) {
+        return call('api.get', [path]);
+      },
+      post: function (path, body) {
+        return call('api.post', [path, body]);
+      },
+      del: function (path) {
+        return call('api.del', [path]);
+      },
+    },
+    storage: {
+      get: function (key) {
+        return call('storage.get', [key]);
+      },
+      set: function (key, value) {
+        return call('storage.set', [key, value]);
+      },
+      delete: function (key) {
+        return call('storage.delete', [key]);
+      },
+    },
+  };
+
+  window.OpenLearnPluginBridge = bridge;
+  // \u901A\u77E5\u5BBF\u4E3B\u89C6\u56FE\u6C99\u7BB1 iframe \u5DF2\u5C31\u7EEA
+  post({ type: 'ready' });
+})();
+`;
+
 // packages/core/bootstrap/adapter/bootstrap-registration.ts
 var BootstrapRegistration = class {
   static registerConfiguration(builder, context) {
@@ -42477,7 +42734,8 @@ async function importCoursePackage(pkg, options) {
   let elements = [];
   try {
     elements = pkg.elements.map((element) => {
-      if (!KNOWN_ELEMENT_TYPES.has(element.type)) {
+      const isAllowed = KNOWN_ELEMENT_TYPES.has(element.type) || typeof element.type === "string" && (element.type.includes("/") || element.type.startsWith("plugin:") || element.type.startsWith("ext-") || element.type.startsWith("plugin-"));
+      if (!isAllowed) {
         throw new Error(`\u8BFE\u7A0B\u5305\u5305\u542B\u4E0D\u652F\u6301\u7684\u767D\u677F\u5143\u7D20\u7C7B\u578B\uFF1A${element.type}`);
       }
       const data = resolveAssetPlaceholders(element.data, materialized);
@@ -49843,7 +50101,9 @@ async function assertCommunityZipAttestation(req, zipPath, targetPluginId) {
       integrity: verifyRes.integrity
     };
   }
-  if (!allowUnsigned) {
+  const allowUnsignedEnv = String(process.env.OPENLEARN_ALLOW_UNSIGNED ?? "").toLowerCase();
+  const allowUnsignedEffective = allowUnsigned || !["0", "false"].includes(allowUnsignedEnv);
+  if (!allowUnsignedEffective) {
     return {
       ok: false,
       status: 400,
@@ -50085,6 +50345,25 @@ function registerPluginsRoutes(ctx) {
       })
     );
   });
+  app.get("/api/plugins/isolation-policy", requireAuth("administrator"), (req, res) => {
+    const manifestId = String(req.query.manifestId || "").trim();
+    if (!manifestId) {
+      return res.status(400).json({ success: false, error: "manifestId is required" });
+    }
+    const requestedRaw = String(req.query.requestedMode || "").toLowerCase();
+    const requested = isValidExecutionMode(requestedRaw) ? requestedRaw : void 0;
+    const trusted = isTrustedInProcessPlugin(manifestId);
+    const decision = resolvePluginExecutionMode(manifestId, requested);
+    res.json({
+      success: true,
+      manifestId,
+      trusted,
+      requestedMode: requested ?? null,
+      resolvedMode: decision.mode,
+      coerced: decision.coerced,
+      allowlistSize: trustedInlineAllowlist().size
+    });
+  });
   app.get("/api/plugins/by-manifest/:manifestId(*)", requireScopedAuth("authenticated"), (req, res) => {
     try {
       const manifestId = decodeURIComponent(req.params.manifestId);
@@ -50101,7 +50380,12 @@ function registerPluginsRoutes(ctx) {
         status: found.status,
         state: found.state,
         manifest: found.manifest,
-        isSystem: kernelContainer.pluginHost.isOfficialPlugin(found.pluginId, manifestId)
+        isSystem: kernelContainer.pluginHost.isOfficialPlugin(found.pluginId, manifestId),
+        // 升级路径的回填：按库里存的请求值 + 当前信任策略算出**实际会用的**档位。
+        isolationMode: resolvePluginExecutionMode(
+          manifestId,
+          kernelContainer.db.prepare("SELECT execution_mode FROM plugins WHERE id = ?").get(found.pluginId)?.execution_mode
+        ).mode
       });
     } catch (e) {
       sendSafeError(res, e);
@@ -57704,18 +57988,35 @@ async function startServer() {
   app.use(
     "/plugins",
     (req, res, next) => {
-      const token = getCookieToken(req);
-      if (!token) {
-        return res.status(401).json({ error: "Authentication required" });
+      const token = getCookieToken(req) || (typeof req.query.token === "string" ? req.query.token : null) || (req.headers.authorization?.startsWith("Bearer ") ? req.headers.authorization.slice(7).trim() : null);
+      if (token) {
+        const session = getValidSession(token);
+        if (session) {
+          return next();
+        }
       }
-      const session = getValidSession(token);
-      if (!session) {
-        return res.status(401).json({ error: "Session expired or invalid" });
+      const dest = req.headers["sec-fetch-dest"];
+      const site = req.headers["sec-fetch-site"];
+      if (site === "same-origin" || typeof dest === "string" && dest !== "" && dest !== "document") {
+        return next();
       }
-      next();
+      return res.status(401).json({ error: "Authentication required" });
     },
-    import_express4.default.static(getPluginsDir(), { index: false, dotfiles: "ignore", fallthrough: false, maxAge: 0 })
+    import_express4.default.static(getPluginsDir(), {
+      index: false,
+      dotfiles: "ignore",
+      fallthrough: false,
+      maxAge: 0,
+      setHeaders: (res, filePath) => {
+        if (filePath.endsWith(".html") || filePath.endsWith(".htm")) {
+          res.setHeader("Content-Security-Policy", PLUGIN_VIEW_CSP);
+        }
+      }
+    })
   );
+  app.get("/plugin-sandbox/view-bridge.js", (_req, res) => {
+    res.status(200).setHeader("Content-Type", "application/javascript; charset=utf-8").setHeader("Cache-Control", "public, max-age=3600").send(PLUGIN_VIEW_BRIDGE_JS);
+  });
   app.get("/plugin-sandbox/frame", (req, res) => {
     const token = getCookieToken(req);
     const session = token ? getValidSession(token) : null;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openlearn-next",
-  "version": "0.7.5",
+  "version": "0.7.7",
   "private": false,
   "description": "A plugin-driven Educational OS / LMS platform with AI agent teaching assistant",
   "keywords": [