mirror of
https://github.com/binaricat/Netcatty.git
synced 2026-09-09 15:47:51 +00:00
13fa68a720
* feat(plugins): add sync providers and encrypted sidecar sync
Implement PR 8 of the plugin platform (#2269): namespaced sync Providers
with provider.sync, encrypted-object storage operations, WebDAV through the
shared storage surface, dynamic cloud provider IDs, and non-cascade sidecars
for sync:true plugin settings plus account/CRDT baselines.
Related to #2269
* fix(plugins): wire sync providers and sidecars into production paths
Close PR 8 integration gaps: dynamic plugin provider registry and
getConnectedAdapter createPluginStorage, WebDAV through EncryptedObjectStorage,
cloud payload collect/apply for pluginSidecars, and IPC/preload bridges.
Related to #2269
* fix(plugins): preserve WebDAV auth reuse and resourceId through EOS wrap
encryptedObjectStorageAsCloudAdapter now reports initiallyAuthenticated when
config exists (matching raw WebDAVAdapter) so getConnectedAdapter reuses the
cached instance, and preserves/refreshes resourceId from the backing adapter
instead of always forcing the default object key.
Related to #2269
* fix(plugins): address Codex PR 8 review findings
Carry pluginSidecars through merge/convergent uploads, lazy-connect before
object I/O with revision-aware writes, fail closed on sidecar collect errors,
expose connectPluginProvider, preserve remote timestamps, and drop deleted
installed-plugin settings from collection.
Related to #2269
* fix(plugins): close remaining Codex P1/P2 sync issues
Lazy stream cancel for inline sync reads, must-not-exist conditional writes,
three-way sidecar merge for local resets, validated apply path for settings,
and merge remote sidecars into convergent uploads.
Related to #2269
* fix(plugins): harden sidecar collect/apply and write verification
Preserve last-known sidecars when the host is offline, apply remote
deletions for installed plugins, force convergent upload on sidecar
divergence, verify plugin object writes, and pick plugin providers in
auto-sync startup checks.
Related to #2269
* fix(plugins): close remaining Codex sidecar/sync path gaps
Include sidecars in auto-sync payload and hash, keep explicit empty bundles,
fail apply when host is offline, require getCapabilities, and carry merged
sidecars into convergent local apply/upload decisions.
Related to #2269
* fix(plugins): close Codex P1 sidecar collect/apply/merge gaps
Treat null host responses as unavailable, persist collected settings into
the non-cascade table, retain decoded convergent payloads, use three-way
sidecar merge for deletions, and fail apply only on operational errors.
Also treat non-empty plugin sidecars as meaningful sync data and re-run
auto-sync when plugin contributions change.
Related to #2269
* fix(plugins): close remaining Codex P1 sidecar and provider gaps
Replay offline-cached sidecars before collect, keep explicit empty
sidecar fields after three-way merge, thread sidecars through convergent
conflict/downgrade materialization, keep gated-off plugin providers from
joining sync as connected, and rebind plugin EOS sessions after runtime
replacement.
Related to #2269
* fix(plugins): separate pending remote sidecars from last-known cache
Replay only host-offline remote applies into the DB, keep last-known as
upload fallback, use contribution reset for deleted settings, probe real
plugin host readiness, rebind storage events for plugin providers, clear
plugin bases on reset, and swallow disconnect rejections.
Related to #2269
* fix(plugins): hydrate retained sidecars and gate missing providers
Materialize installed-plugin settings from retained sidecars before
collect pruning, clear sidecars on setting reset, fail closed when
pending remote replay fails, and only restore plugin providers that are
contribution-available. Also initialize dynamic provider counters on
connect.
Related to #2269
* fix(plugins): surface plugin sync providers and preserve conflict sidecars
Collect live sidecars before convergent conflict apply/upload, include
dynamic providers in status and disconnect paths, and list plugin sync
providers in Cloud Sync settings for connect/disconnect.
Related to #2269
* fix(plugins): per-provider sidecar baselines and safer collect/UI
Merge convergent sidecars against each provider's own baseline, keep
retained settings in sidecars without unvalidated plugin_settings writes,
guard isConnectDisabled for never-connected plugins, and fall back plugin
provider labels/icons in the status popup.
Related to #2269
* fix(plugins): correct plugin provider discovery and sidecar reverify
Read nested contribution metadata for sync provider cards, gate empty-config
connects, enforce single-provider disconnect for plugins, and re-verify after
sidecar-only convergent uploads so baselines track the post-write payload.
Related to #2269
* fix(plugins): refresh sync provider availability from live contributions
Replace the contribution-available provider ID set when plugins change so
disabled or uninstalled sync providers leave the auto-sync ready set and
drop to disconnected with config retained.
Related to #2269
* fix(plugins): preserve sidecars in backups, pending queue, and migration
Attach last-known plugin sidecars to protective local vault backups, fail
operationally when pending/last-known storage writes are rejected, carry
sidecars through convergent migration publish, and reject trailing garbage
on encrypted object parse.
Related to #2269
* fix(plugins): abort conflict collect failures and merge migration sidecars
Rethrow operational sidecar collection errors during convergent conflict
resolution, LWW-union all local/provider sidecars during convergent
migration, re-collect last-known after apply, and prefer live host collect
for protective local vault backups.
Related to #2269
* fix(plugins): restore pluginBridge tests, fix import path, union downgrade sidecars
Correct SettingsSyncTab dynamic import path so production builds resolve,
add ipcMain.on to the plugin bridge test double, union all provider
sidecars on convergent downgrade, keep empty last-known resets, and skip
force-delete when contribution reset validation rejects.
Related to #2269
* fix(plugins): abort backup collect failures and honor empty remote wipes
Only fall back to last-known sidecars when the host is unavailable during
protective backups, treat explicit empty remote sidecar bundles as
authoritative wipes, remove lint-blocking anys from harness tests, and
use a stable equal-timestamp sidecar tie-break.
Related to #2269
* fix(plugins): include sidecars in equality, preserve merge base on reconnect
Compare pluginSidecars in cloudSyncPayloadsEqual for migration freshness,
clear plugin merge state only when account/resource changes on reconnect,
cancel accepted sync read streams on failure, and stop re-connecting the
plugin EOS adapter on every I/O.
Related to #2269
* fix(plugins): drop cached adapters on contribution refresh
Invalidate plugin sync adapters when live contributions change so a
restarted runtime gets a fresh connect, take offline any non-disconnected
missing providers, and latch version-change backups only after cancellation
checks pass.
Related to #2269
* fix(plugins): preserve omitted sidecars and hydrate on plugin enable
Treat missing pluginSidecars as legacy/unsupported in three-way merge
(only explicit empty is a wipe), hydrate retained settings when a plugin
enables, and re-enable retained provider configs when contributions return.
Related to #2269
* fix(plugins): keep newer retained sidecars over older stored settings
When collection merges existing sidecars with plugin_settings rows, prefer
the newer updatedAt so a schema-rejected remote value retained only in
the sidecar table is not overwritten by a stale local setting.
Related to #2269
* fix(plugins): seal plugin provider config and clear base on config change
Encrypt opaque plugin provider configuration before persistence, clear
merge state when reconnect configuration changes, and stream sync objects
below a base64-safe inline threshold so control-plane JSON stays in budget.
Related to #2269
* fix(plugins): seal plugin configs by provider id and hydrate before start
Encrypt plugin provider configuration only for non-builtin provider IDs
so field-name collisions cannot skip sealing, hydrate retained sidecars
before plugin enable starts the runtime, and stop tearing down live
adapters on no-op availability refreshes.
Related to #2269
* fix(plugins): seal scalar configs, safe inline reads, stable config fingerprint
Encrypt any non-builtin plugin configuration JSON shape, enforce the
base64-safe inline read cutoff, and compare reconnect configurations with
order-independent fingerprints so merge bases are not cleared spuriously.
Related to #2269
* fix(plugins): thread sync credentials and harden availability checks
Pass SyncConnectPayload.credential through the object-storage and IPC host
path, treat only null/undefined config as missing, and avoid wiping the
plugin provider availability catalog on transient discovery failures.
Related to #2269
* fix(plugins): unblock schema-required sync connect and scalar configs
Add a JSON config dialog for plugin sync providers that declare a
required configurationSchema, reuse retained configs on reconnect, and
treat falsy scalar configs as present in readiness and adapter lookup.
Related to #2269
* fix(plugins): rebind sync adapters on contribution refresh
Drop cached plugin sync adapters when live contributions still include
the provider so replaced runtimes get a fresh connect, and seal falsy
scalar plugin configs with nullish presence checks end-to-end.
Related to #2269
* fix(plugins): apply sidecars under current declared setting scopes
When a plugin update changes a syncable setting scope, write under the
live declaration and drop the obsolete scope row so collection does not
republish duplicates.
Related to #2269
* fix(plugins): seal config envelopes and stabilize provider counters
Use an unambiguous host-owned sealed-config envelope, initialize
dynamic-provider sequence counters before cross-window decrypt, keep
three-way sidecar deletions during convergent migration, and create the
sidecar table for existing schema-1 plugin databases.
Related to #2269
* fix(plugins): avoid mid-sync adapter drops and sidecar resurrection
Keep plugin adapters across setting-only contribution refreshes and
rebind sessions on ensureConnected; stop preserving local-only missing
plugin sidecars when remote already mentions the plugin; compare configs
with nullish semantics across windows; swallow quick-connect failures
after toasting.
Related to #2269
* fix(plugins): restore remoteKeys for installed sidecar resets
Reintroduce the remote key set used when dropping installed-plugin
settings the remote no longer carries so applyFromSync cannot throw
after replacing the sidecar table.
Related to #2269
* fix(plugins): honor conflict policy and re-key scoped sidecars
Pass preferCloud/preferLocal into three-way sidecar merge, use
per-provider baselines on convergent downgrade so local resets are not
resurrected, and re-key applied settings under the current declared
scope coordinates.
Related to #2269
* fix(plugins): keep strategy on final sidecar merge and block dual legacy
Pass preferCloud/preferLocal through the final verified sidecar merge,
avoid auto-reactivating a retained plugin while another legacy provider
is already connected, cache plugin adapters only after initializeSync,
and preserve explicit null configuration values.
Related to #2269
* fix(plugins): strip plugin avatars and protect last-known sidecars
Do not load plugin-supplied avatar URLs in the main renderer, and avoid
overwriting last-known sidecars with an unmerged remote bundle when the
post-apply collect fails or is non-authoritative.
Related to #2269
* fix(plugins): strip top-bar plugin avatars and stop always-rebind
Hide plugin avatar URLs in the sync status popover, drop always-on
rebindSession for plugin adapters, and read convergent mode from the
local config module when deciding whether to auto-reactivate providers.
Related to #2269
* fix(plugins): use window.netcatty for sync IPC and allow null configs
Read plugin sync and sidecar APIs from the production preload global,
and treat an explicit config property (including JSON null) as present
for readiness and adapter lookup.
Related to #2269
* fix(plugins): close residual Codex P2 sync edge cases
Three-way merge sidecars during v2 convergent migration so local
resets are not resurrected, preserve explicit null plugin configs on
adapter rebuild, rebind EOS sessions after I/O failure for replaced
runtimes, and accept the public inlineObjectBytes limit on readObject.
Related to #2269
* fix(plugins): keep inline read cutoff under control-plane budget
Restore the base64-safe inline cutoff so advertised-size reads cannot
overflow the 128 KiB provider JSON envelope; providers near the public
inlineObjectBytes limit must stream.
Related to #2269
* fix(plugins): harden sidecar empty-vault, hydrate LWW, and credential seals
Close remaining Codex/review gaps for PR8: keep empty sidecar shells from
bypassing upload guards, skip startup hydrate when local settings are newer,
seal/validate durable plugin credential refs, and cover schema 1→2 migration.
Co-authored-by: Cursor <cursoragent@cursor.com>
* fix(plugins): rebind plugin sync sessions and keep null configs
Address Codex P2 on 8ae52c54: re-issue connect after runtime replacement,
and treat stored config:null as present in the dashboard reconnect path.
Co-authored-by: Cursor <cursoragent@cursor.com>
* fix(plugins): defer empty sidecar last-known until sync succeeds
Keep prior non-empty last-known across an authoritative empty collect so the
empty-vault guard can still recognize a plugin-only reset, then commit the
empty cache after a successful upload.
Co-authored-by: Cursor <cursoragent@cursor.com>
* fix(plugins): avoid restricted localStorage global in sidecar test
Bind the mock to a local binding so eslint no-restricted-globals stays clean.
Co-authored-by: Cursor <cursoragent@cursor.com>
* fix(plugins): commit applied sidecar cache and reset orphan settings
Prefer merged payload sidecars when updating last-known after sync, and clear
syncable plugin_settings that lack sidecar rows on authoritative remote deletes.
Co-authored-by: Cursor <cursoragent@cursor.com>
* fix(plugins): reseal marker-shaped plugin configs instead of skipping
Exact __netcatty_plugin_config_v1 collisions no longer bypass encryption; trusted
host envelopes are unwrapped then resealed, and false collisions are sealed whole.
Co-authored-by: Cursor <cursoragent@cursor.com>
* fix(plugins): keep merged sidecars in last-known after apply collect fails
Return applyFromSync entries from IPC and use them when follow-up collect fails,
so preserved missing-plugin rows are not dropped from the offline upload cache.
Co-authored-by: Cursor <cursoragent@cursor.com>
* fix(plugins): delete stale-scope settings at stored coordinates on reset
After resetSetting against the current declared scope, also remove the row at
the sidecar's stored scope so scope migrations cannot republish remote deletes.
Co-authored-by: Cursor <cursoragent@cursor.com>
* fix(plugins): close sync-provider credential, stream, and sidecar gaps
Make SecretRef usable end-to-end via lease-bound network.request, keep
renderer/main transfers abortable and bounded, and stop sidecar
last-known/pending from corrupting backups and conflict apply.
Co-authored-by: Cursor <cursoragent@cursor.com>
* fix(plugins): harden single-provider, secret schema, and conditional conflicts
Keep legacy restart from dual-connecting providers, extract writeOnly schema
secrets into OS storage, and surface conditional-write precondition failures
as conflict UI instead of a generic sync error.
Co-authored-by: Cursor <cursoragent@cursor.com>
* fix(plugins): dedupe sync type imports for lint
Co-authored-by: Cursor <cursoragent@cursor.com>
* fix: address Codex review on PR #2713
* fix(plugins): wait for sidecar host before version backup latch
Defer the one-shot upgrade snapshot until the plugin sidecar host is ready (or a short grace), and catch getDataHash failures so pending/baseline paths do not reject unhandled.
Co-authored-by: Cursor <cursoragent@cursor.com>
* fix(plugins): require sidecar grace before version backup
Always wait for contributions/grace tick before the upgrade snapshot, and only latch after a non-cancelled attempt so cleanup cannot suppress retries.
Co-authored-by: Cursor <cursoragent@cursor.com>
---------
Co-authored-by: Cursor <cursoragent@cursor.com>
Co-authored-by: netcatty-bot <308658023+netcatty-bot@users.noreply.github.com>
378 lines
15 KiB
JavaScript
378 lines
15 KiB
JavaScript
import { readFile, mkdir, writeFile } from "node:fs/promises";
|
|
import path from "node:path";
|
|
import process from "node:process";
|
|
import { fileURLToPath } from "node:url";
|
|
|
|
const rootDir = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "..");
|
|
const schemaPath = path.join(
|
|
rootDir,
|
|
"packages/plugin-contract/schema/plugin-contract.schema.json",
|
|
);
|
|
const generatedTypesPath = path.join(
|
|
rootDir,
|
|
"packages/plugin-contract/src/generated/plugin-contract.ts",
|
|
);
|
|
const generatedLimitsPath = path.join(
|
|
rootDir,
|
|
"packages/plugin-contract/src/generated/plugin-contract-limits.ts",
|
|
);
|
|
const electronBundlePath = path.join(
|
|
rootDir,
|
|
"electron/plugins/generated/plugin-contract.schema.json",
|
|
);
|
|
const checkOnly = process.argv.includes("--check");
|
|
const typescriptTypeOverrides = new Map([
|
|
[
|
|
"ActivationEvent",
|
|
'"onStartupFinished" | `onCommand:${ContributionId}` | `onView:${ContributionId}` | `onProvider:${ContributionId}`',
|
|
],
|
|
[
|
|
"PluginHostProtocol",
|
|
"`plugin:${ContributionId}`",
|
|
],
|
|
[
|
|
"ImporterGroupDraft",
|
|
"string | { path: string; label?: string } | { path?: string; label: string }",
|
|
],
|
|
[
|
|
"ImporterHostDraft",
|
|
`({
|
|
id?: string;
|
|
label?: string;
|
|
username?: string;
|
|
group?: string;
|
|
tags?: Array<string>;
|
|
os?: "linux" | "windows" | "macos";
|
|
deviceType?: "general" | "network";
|
|
identityId?: string;
|
|
identityFileId?: string;
|
|
telnetIdentityId?: string;
|
|
notes?: string;
|
|
theme?: string;
|
|
sftpEncoding?: string;
|
|
sftpFileProtocol?: "auto" | "sftp" | "scp";
|
|
moshEnabled?: boolean;
|
|
etEnabled?: boolean;
|
|
telnetEnabled?: boolean;
|
|
sftpSudo?: boolean;
|
|
requiresMfa?: boolean;
|
|
useSshAgent?: boolean;
|
|
identitiesOnly?: boolean;
|
|
agentForwarding?: boolean;
|
|
x11Forwarding?: boolean;
|
|
showLineTimestamps?: boolean;
|
|
disableDynamicTabTitle?: boolean;
|
|
pinned?: boolean;
|
|
autoOpenSftpPanel?: boolean;
|
|
sftpFollowTerminalCwd?: boolean;
|
|
port?: number;
|
|
telnetPort?: number;
|
|
etPort?: number;
|
|
keepaliveInterval?: number;
|
|
keepaliveCountMax?: number;
|
|
} & ({
|
|
hostname: string;
|
|
protocol?: "ssh" | "telnet" | "mosh" | "et" | "local" | "serial";
|
|
pluginConnection?: never;
|
|
} | {
|
|
hostname?: string;
|
|
protocol: PluginHostProtocol;
|
|
pluginConnection: ImporterPluginConnectionDraft;
|
|
}))`,
|
|
],
|
|
[
|
|
"ImporterKeyDraft",
|
|
`({
|
|
id?: string;
|
|
label: string;
|
|
type: "RSA" | "ECDSA" | "ED25519";
|
|
publicKey?: string;
|
|
certificate?: string;
|
|
passphrase?: string;
|
|
category?: "key" | "certificate" | "identity";
|
|
} & ({
|
|
privateKey: string;
|
|
filePath?: never;
|
|
} | {
|
|
privateKey?: never;
|
|
filePath: string;
|
|
}))`,
|
|
],
|
|
]);
|
|
|
|
const schemaText = await readFile(schemaPath, "utf8");
|
|
const schema = JSON.parse(schemaText);
|
|
|
|
if (schema.$schema !== "https://json-schema.org/draft/2020-12/schema") {
|
|
throw new Error("Plugin contract must use JSON Schema 2020-12");
|
|
}
|
|
if (!schema.$id?.includes("/0.1.0-internal/")) {
|
|
throw new Error("Plugin contract $id must include the internal API version");
|
|
}
|
|
if (!schema.$defs || typeof schema.$defs !== "object") {
|
|
throw new Error("Plugin contract must define $defs");
|
|
}
|
|
const jsonValueLimits = schema.$defs.JsonValueLimits?.const;
|
|
if (!Number.isSafeInteger(jsonValueLimits?.maxDepth) || jsonValueLimits.maxDepth < 1) {
|
|
throw new Error("JsonValueLimits.maxDepth must be a positive safe integer");
|
|
}
|
|
if (!Number.isSafeInteger(jsonValueLimits?.maxNodes) || jsonValueLimits.maxNodes < 1) {
|
|
throw new Error("JsonValueLimits.maxNodes must be a positive safe integer");
|
|
}
|
|
const wireIntegerLimits = schema.$defs.WireIntegerLimits?.const;
|
|
if (wireIntegerLimits?.maxSafeInteger !== Number.MAX_SAFE_INTEGER) {
|
|
throw new Error("WireIntegerLimits.maxSafeInteger must equal Number.MAX_SAFE_INTEGER");
|
|
}
|
|
const rpcLimits = schema.$defs.RpcLimits?.const;
|
|
if (!Number.isSafeInteger(rpcLimits?.maxJsonBytes) || rpcLimits.maxJsonBytes < 1) {
|
|
throw new Error("RpcLimits.maxJsonBytes must be a positive safe integer");
|
|
}
|
|
for (const [definitionName, minimum] of [
|
|
["SafeUnsignedInteger", 0],
|
|
["SafePositiveInteger", 1],
|
|
]) {
|
|
const definition = schema.$defs[definitionName];
|
|
if (definition?.type !== "integer"
|
|
|| definition.minimum !== minimum
|
|
|| definition.maximum !== wireIntegerLimits.maxSafeInteger) {
|
|
throw new Error(
|
|
`${definitionName} must be bounded from ${minimum} through WireIntegerLimits.maxSafeInteger`,
|
|
);
|
|
}
|
|
}
|
|
const rpcErrorCodes = [
|
|
...(schema.$defs.JsonRpcStandardErrorCode?.enum ?? []),
|
|
...(schema.$defs.PluginWireErrorCode?.enum ?? []),
|
|
];
|
|
if (rpcErrorCodes.length === 0
|
|
|| rpcErrorCodes.some((code) => !Number.isSafeInteger(code))
|
|
|| new Set(rpcErrorCodes).size !== rpcErrorCodes.length) {
|
|
throw new Error("RPC error code definitions must contain unique safe integers");
|
|
}
|
|
const streamLimits = schema.$defs.StreamLimits?.const;
|
|
if (!Number.isSafeInteger(streamLimits?.maxFrameJsonBytes)
|
|
|| streamLimits.maxFrameJsonBytes < streamLimits?.maxChunkBytes) {
|
|
throw new Error("StreamLimits.maxFrameJsonBytes must cover one maximum stream chunk");
|
|
}
|
|
const terminalInterceptorLimits = schema.$defs.TerminalInterceptorLimits?.const;
|
|
if (!Number.isSafeInteger(terminalInterceptorLimits?.maxChunkBytes)
|
|
|| terminalInterceptorLimits.maxChunkBytes < 1
|
|
|| !Number.isSafeInteger(terminalInterceptorLimits?.maxWindowBytes)
|
|
|| terminalInterceptorLimits.maxWindowBytes < terminalInterceptorLimits.maxChunkBytes) {
|
|
throw new Error("TerminalInterceptorLimits must define bounded chunk and window sizes");
|
|
}
|
|
const importerLimits = schema.$defs.ImporterLimits?.const;
|
|
if (!Number.isSafeInteger(importerLimits?.maxInputBytes)
|
|
|| !Number.isSafeInteger(importerLimits?.maxOutputBytes)
|
|
|| !Number.isSafeInteger(importerLimits?.maxRecordBytes)
|
|
|| !Number.isSafeInteger(importerLimits?.maxRecords)
|
|
|| importerLimits.maxInputBytes < 1
|
|
|| importerLimits.maxOutputBytes < 1
|
|
|| importerLimits.maxRecordBytes < 1
|
|
|| importerLimits.maxRecordBytes > importerLimits.maxOutputBytes
|
|
|| importerLimits.maxRecords < 1) {
|
|
throw new Error("ImporterLimits must define positive bounded input, output, record, and count limits");
|
|
}
|
|
const syncLimits = schema.$defs.SyncLimits?.const;
|
|
if (!Number.isSafeInteger(syncLimits?.maxObjectBytes)
|
|
|| !Number.isSafeInteger(syncLimits?.maxObjectKeyLength)
|
|
|| !Number.isSafeInteger(syncLimits?.maxRevisionLength)
|
|
|| !Number.isSafeInteger(syncLimits?.inlineObjectBytes)
|
|
|| syncLimits.maxObjectBytes < 1
|
|
|| syncLimits.maxObjectKeyLength < 1
|
|
|| syncLimits.maxRevisionLength < 1
|
|
|| syncLimits.inlineObjectBytes < 1
|
|
|| syncLimits.inlineObjectBytes > syncLimits.maxObjectBytes) {
|
|
throw new Error("SyncLimits must define positive bounded object, key, revision, and inline size limits");
|
|
}
|
|
for (const [name, minimum, maximum] of [
|
|
["TerminalInterceptorChunkByteLength", 0, terminalInterceptorLimits.maxChunkBytes],
|
|
["TerminalInterceptorWindowBytes", 1, terminalInterceptorLimits.maxWindowBytes],
|
|
["TerminalInterceptorCreditBytes", 0, terminalInterceptorLimits.maxWindowBytes],
|
|
]) {
|
|
const definition = schema.$defs[name];
|
|
if (definition?.type !== "integer"
|
|
|| definition.minimum !== minimum
|
|
|| definition.maximum !== maximum) {
|
|
throw new Error(`${name} must match the canonical TerminalInterceptorLimits range`);
|
|
}
|
|
}
|
|
const streamIdDefinition = schema.$defs.StreamId;
|
|
if (!Number.isSafeInteger(streamLimits?.maxStreamIdLength)
|
|
|| streamLimits.maxStreamIdLength < 1
|
|
|| streamIdDefinition?.type !== "string"
|
|
|| streamIdDefinition.minLength !== 1
|
|
|| streamIdDefinition.maxLength !== streamLimits.maxStreamIdLength) {
|
|
throw new Error("StreamId must match the canonical StreamLimits.maxStreamIdLength");
|
|
}
|
|
const streamFrameBranches = schema.$defs.StreamFrame?.oneOf;
|
|
if (!Array.isArray(streamFrameBranches)
|
|
|| streamFrameBranches.length === 0
|
|
|| streamFrameBranches.some(
|
|
(branch) => branch?.properties?.streamId?.$ref !== "#/$defs/StreamId",
|
|
)) {
|
|
throw new Error("Every StreamFrame branch must use the canonical StreamId definition");
|
|
}
|
|
for (const [name, minimum, maximum] of [
|
|
["StreamChunkByteLength", 0, streamLimits?.maxChunkBytes],
|
|
["StreamWindowBytes", streamLimits?.minWindowBytes, streamLimits?.maxWindowBytes],
|
|
["StreamCreditBytes", 1, streamLimits?.maxCreditBytes],
|
|
]) {
|
|
if (!Number.isSafeInteger(minimum)
|
|
|| !Number.isSafeInteger(maximum)
|
|
|| minimum < 0
|
|
|| maximum < minimum) {
|
|
throw new Error(`StreamLimits contains an invalid range for ${name}`);
|
|
}
|
|
const definition = schema.$defs[name];
|
|
if (definition?.type !== "integer"
|
|
|| definition.minimum !== minimum
|
|
|| definition.maximum !== maximum) {
|
|
throw new Error(`${name} must match the canonical StreamLimits range`);
|
|
}
|
|
}
|
|
|
|
function quoteProperty(name) {
|
|
return /^[A-Za-z_$][A-Za-z0-9_$]*$/.test(name) ? name : JSON.stringify(name);
|
|
}
|
|
|
|
function literal(value) {
|
|
return JSON.stringify(value);
|
|
}
|
|
|
|
function referenceName(reference) {
|
|
const prefix = "#/$defs/";
|
|
if (typeof reference !== "string" || !reference.startsWith(prefix)) {
|
|
throw new Error(`Unsupported schema reference: ${String(reference)}`);
|
|
}
|
|
return decodeURIComponent(reference.slice(prefix.length));
|
|
}
|
|
|
|
function schemaTypeToTs(node, level = 0) {
|
|
if (node === true) return "unknown";
|
|
if (node === false) return "never";
|
|
if (!node || typeof node !== "object") return "unknown";
|
|
if ("$ref" in node) return referenceName(node.$ref);
|
|
if ("const" in node) return literal(node.const);
|
|
if (Array.isArray(node.enum)) return node.enum.map(literal).join(" | ") || "never";
|
|
|
|
for (const keyword of ["oneOf", "anyOf"]) {
|
|
if (Array.isArray(node[keyword])) {
|
|
return node[keyword].map((entry) => `(${schemaTypeToTs(entry, level)})`).join(" | ");
|
|
}
|
|
}
|
|
if (Array.isArray(node.allOf)) {
|
|
return node.allOf.map((entry) => `(${schemaTypeToTs(entry, level)})`).join(" & ");
|
|
}
|
|
if (Array.isArray(node.type)) {
|
|
return node.type.map((entry) => schemaTypeToTs({ ...node, type: entry }, level)).join(" | ");
|
|
}
|
|
|
|
if (node.type === "null") return "null";
|
|
if (node.type === "string") return "string";
|
|
if (node.type === "number" || node.type === "integer") return "number";
|
|
if (node.type === "boolean") return "boolean";
|
|
if (node.type === "array") {
|
|
return `Array<${schemaTypeToTs(node.items ?? true, level)}>`;
|
|
}
|
|
if (node.type === "object" || node.properties || node.additionalProperties) {
|
|
const properties = node.properties ?? {};
|
|
const entries = Object.entries(properties);
|
|
const required = new Set(node.required ?? []);
|
|
const additional = node.additionalProperties;
|
|
|
|
if (entries.length === 0) {
|
|
if (additional && typeof additional === "object") {
|
|
return `{ [key: string]: ${schemaTypeToTs(additional, level)} }`;
|
|
}
|
|
return additional === false ? "Record<string, never>" : "Record<string, unknown>";
|
|
}
|
|
|
|
const indent = " ".repeat(level + 1);
|
|
const closingIndent = " ".repeat(level);
|
|
const body = entries.map(([name, propertySchema]) => {
|
|
const optional = required.has(name) ? "" : "?";
|
|
return `${indent}${quoteProperty(name)}${optional}: ${schemaTypeToTs(propertySchema, level + 1)};`;
|
|
});
|
|
let objectType = `{\n${body.join("\n")}\n${closingIndent}}`;
|
|
if (additional && typeof additional === "object") {
|
|
objectType = `(${objectType} & Record<string, ${schemaTypeToTs(additional, level)}>)`;
|
|
} else if (additional === true) {
|
|
objectType = `(${objectType} & Record<string, unknown>)`;
|
|
}
|
|
return objectType;
|
|
}
|
|
return "unknown";
|
|
}
|
|
|
|
const definitionNames = Object.keys(schema.$defs).sort((left, right) =>
|
|
left.localeCompare(right, "en"),
|
|
);
|
|
const generatedTypes = [
|
|
"// This file is generated from schema/plugin-contract.schema.json.",
|
|
"// Run `npm run generate:plugin-contract` after changing the contract.",
|
|
"// Do not edit this file directly.",
|
|
"",
|
|
...definitionNames.flatMap((name) => [
|
|
`export type ${name} = ${typescriptTypeOverrides.get(name) ?? schemaTypeToTs(schema.$defs[name])};`,
|
|
"",
|
|
]),
|
|
].join("\n");
|
|
const generatedLimits = [
|
|
"// This file is generated from schema/plugin-contract.schema.json.",
|
|
"// Run `npm run generate:plugin-contract` after changing the contract.",
|
|
"// Do not edit this file directly.",
|
|
"",
|
|
`export const PLUGIN_JSON_MAX_DEPTH = ${jsonValueLimits.maxDepth} as const;`,
|
|
`export const PLUGIN_JSON_MAX_NODES = ${jsonValueLimits.maxNodes} as const;`,
|
|
`export const PLUGIN_WIRE_MAX_SAFE_INTEGER = ${wireIntegerLimits.maxSafeInteger} as const;`,
|
|
`export const PLUGIN_RPC_MAX_JSON_BYTES = ${rpcLimits.maxJsonBytes} as const;`,
|
|
`export const PLUGIN_RPC_ERROR_CODES = ${JSON.stringify(rpcErrorCodes)} as const;`,
|
|
`export const PLUGIN_STREAM_MAX_ID_LENGTH = ${streamLimits.maxStreamIdLength} as const;`,
|
|
`export const PLUGIN_STREAM_MAX_CHUNK_BYTES = ${streamLimits.maxChunkBytes} as const;`,
|
|
`export const PLUGIN_STREAM_MAX_FRAME_JSON_BYTES = ${streamLimits.maxFrameJsonBytes} as const;`,
|
|
`export const PLUGIN_STREAM_MIN_WINDOW_BYTES = ${streamLimits.minWindowBytes} as const;`,
|
|
`export const PLUGIN_STREAM_MAX_WINDOW_BYTES = ${streamLimits.maxWindowBytes} as const;`,
|
|
`export const PLUGIN_STREAM_MAX_CREDIT_BYTES = ${streamLimits.maxCreditBytes} as const;`,
|
|
`export const PLUGIN_TERMINAL_INTERCEPTOR_MAX_CHUNK_BYTES = ${terminalInterceptorLimits.maxChunkBytes} as const;`,
|
|
`export const PLUGIN_TERMINAL_INTERCEPTOR_MAX_WINDOW_BYTES = ${terminalInterceptorLimits.maxWindowBytes} as const;`,
|
|
`export const PLUGIN_IMPORTER_MAX_INPUT_BYTES = ${importerLimits.maxInputBytes} as const;`,
|
|
`export const PLUGIN_IMPORTER_MAX_OUTPUT_BYTES = ${importerLimits.maxOutputBytes} as const;`,
|
|
`export const PLUGIN_IMPORTER_MAX_RECORD_BYTES = ${importerLimits.maxRecordBytes} as const;`,
|
|
`export const PLUGIN_IMPORTER_MAX_RECORDS = ${importerLimits.maxRecords} as const;`,
|
|
`export const PLUGIN_SYNC_MAX_OBJECT_BYTES = ${syncLimits.maxObjectBytes} as const;`,
|
|
`export const PLUGIN_SYNC_MAX_OBJECT_KEY_LENGTH = ${syncLimits.maxObjectKeyLength} as const;`,
|
|
`export const PLUGIN_SYNC_MAX_REVISION_LENGTH = ${syncLimits.maxRevisionLength} as const;`,
|
|
`export const PLUGIN_SYNC_INLINE_OBJECT_BYTES = ${syncLimits.inlineObjectBytes} as const;`,
|
|
"",
|
|
].join("\n");
|
|
const normalizedSchema = `${JSON.stringify(schema, null, 2)}\n`;
|
|
|
|
async function assertCurrent(filePath, expected, label) {
|
|
let actual;
|
|
try {
|
|
actual = await readFile(filePath, "utf8");
|
|
} catch {
|
|
throw new Error(`${label} is missing. Run npm run generate:plugin-contract.`);
|
|
}
|
|
if (actual !== expected) {
|
|
throw new Error(`${label} is out of date. Run npm run generate:plugin-contract.`);
|
|
}
|
|
}
|
|
|
|
if (checkOnly) {
|
|
await assertCurrent(generatedTypesPath, generatedTypes, "Generated plugin TypeScript contract");
|
|
await assertCurrent(generatedLimitsPath, generatedLimits, "Generated plugin JSON limits");
|
|
await assertCurrent(electronBundlePath, normalizedSchema, "Electron plugin schema bundle");
|
|
console.log("Plugin contract generated artifacts are current.");
|
|
} else {
|
|
await mkdir(path.dirname(generatedTypesPath), { recursive: true });
|
|
await mkdir(path.dirname(electronBundlePath), { recursive: true });
|
|
await Promise.all([
|
|
writeFile(generatedTypesPath, generatedTypes, "utf8"),
|
|
writeFile(generatedLimitsPath, generatedLimits, "utf8"),
|
|
writeFile(electronBundlePath, normalizedSchema, "utf8"),
|
|
]);
|
|
console.log("Generated plugin TypeScript contract and Electron schema bundle.");
|
|
}
|