mirror of
https://github.com/stablyai/orca.git
synced 2026-11-14 09:57:48 +00:00
Neil
4ee788a725
* feat(plugins): build-less TS/TSX plugins, typings and authoring tools - Plugin frames transpile .ts/.tsx/.mts/.jsx on load (sucrase on a shared worker thread with a 2 s budget, cached in main), resolve relative imports to exact files, and refuse bare package imports by name. Components and html panel/editor entries may be .ts/.tsx. - orca plugin types writes typings for the components orca module, window.orca, worker activate(orca), host.call and events into .orca/types, from one host-typings generator. - orca plugin create --template components; templates omit publisher and target 1.4.246. - orca plugin release-entry, dev inspect and restart; validate:plugin checks named files. - Guest console errors reach orca plugin logs; dev workers restart on edits; the dev watcher ignores .git, .orca and node_modules; Git and folder installs cannot replace catalog installs. - examples/plugins/hello-tsx, docs, and the plugin-buildless-tsx e2e spec. * ci: run the Windows parity probes with one tsgo checker tsconfig.node peaks near 22 GB with tsgo's default four checkers (each holds its own types) and about 16 GB with one; the 16 GB Windows runner paged the native probe past its 900 s timeout once this branch's package.json change triggered the job. One checker gives the same diagnostics (verified locally with --parity-only); the timing benchmark is unchanged.
23 lines
1.1 KiB
TypeScript
23 lines
1.1 KiB
TypeScript
import { hasDeclarativePluginContributions } from '../../shared/plugins/approval/plugin-consent-fingerprint'
|
|
import { hashPluginTree } from './plugin-content-hash'
|
|
import { pluginTreeHashMatches } from './plugin-content-integrity'
|
|
import type { ValidDiscoveredPlugin } from './plugin-discovery'
|
|
|
|
/** Declarative bytes execute later, so every read must still match the tree
|
|
* identity the user reviewed rather than a cached discovery-time snapshot. */
|
|
export async function verifyDeclarativePluginContent(plugin: ValidDiscoveredPlugin): Promise<void> {
|
|
if (!hasDeclarativePluginContributions(plugin.manifest)) {
|
|
return
|
|
}
|
|
if (!plugin.consentContentHash) {
|
|
throw new Error(`plugin ${plugin.pluginKey} has no declarative consent content identity`)
|
|
}
|
|
const actual = await hashPluginTree(plugin.rootDir, { devFolder: plugin.isDev })
|
|
if (!actual.ok) {
|
|
throw new Error(`plugin ${plugin.pluginKey} declarative content is unreadable: ${actual.error}`)
|
|
}
|
|
if (!pluginTreeHashMatches(actual.hash, plugin.consentContentHash)) {
|
|
throw new Error(`plugin ${plugin.pluginKey} declarative content changed since it was reviewed`)
|
|
}
|
|
}
|