sub2api

7,597 Commits 43 Branches 62 Tags

3 Commits

Include renames

Author	SHA1	Message	Date
shaw	29eead917f	feat(pluginapi): HostService 账号目录返回结构化只读元数据纯宿主侧改动，向后兼容。 - 契约(pkg/pluginapi/v1/plugin.proto，已重新生成)：ListAccounts 增补 repeated AccountInfo accounts（保留 account_ids 向后兼容），新增 metadata_json 只读快照字段。HostServiceAPIVersion 1→2（InitHostServices 运行时协商，加法式，旧调用方忽略新字段即可）。 - 权限边界：可见范围由清单能力经 pluginCapabilityAccountScopeGrants 推导， ListAccounts 与 ResolveOutboundIdentity 均以该范围为权威边界。 - metadata_json 采用 denylist：剥离 Credentials 与含反向引用的关联对象 Groups/AccountGroups（避免 encoding/json 循环引用），其余字段自动透传，数据模型新增非机密字段无需改宿主。测试：范围/元数据/无凭据泄漏用例、denylist 反射护栏 + 循环引用安全断言、纵深过滤用例； build/vet/gofmt、-tags unit 与 -race 全绿。	2026-09-20 11:26:19 +08:00
shaw	c63bd14a02	feat(plugin): generic host services + read-only status bridge channel Extend the local plugin system's host<->plugin contract with generic, capability-neutral facilities, so transport plugins can be built on top without embedding plugin-specific logic in the host. Host services (plugin dials a broker-provided HostService gRPC): - per-plugin namespaced KV store (key/value size and TTL bounded) - account directory: ListAccounts + ResolveOutboundIdentity, restricted to the accounts a plugin's declared capability already covers - InitHostServices lifecycle hook; plugins that don't implement it run unchanged and are simply offered no host services Read-only runtime status channel: - HealthResponse gains an opaque, plugin-defined status_json produced passively (no config apply, no upstream call, no side effects) - GET /admin/plugins/:id/status (ungated) and the plugin.status UI-bridge verb map to Health, so a status UI can poll live state without a step-up prompt or a "test" side effect - config.test no longer force-shows a host success toast; the plugin UI owns result presentation, so plugins that read status do not spam toasts Document the UI-bridge verb taxonomy (read vs mutate/test gating) and the status contract under pkg/pluginapi.	2026-09-19 11:25:56 +08:00
shaw	40ea3aebad	feat: add OAuth outbound transport plugin system	2026-08-24 09:03:37 +08:00

Author

SHA1

Message

Date

shaw

29eead917f

feat(pluginapi): HostService 账号目录返回结构化只读元数据

纯宿主侧改动，向后兼容。

- 契约(pkg/pluginapi/v1/plugin.proto，已重新生成)：ListAccounts 增补
  repeated AccountInfo accounts（保留 account_ids 向后兼容），新增 metadata_json
  只读快照字段。HostServiceAPIVersion 1→2（InitHostServices 运行时协商，加法式，
  旧调用方忽略新字段即可）。
- 权限边界：可见范围由清单能力经 pluginCapabilityAccountScopeGrants 推导，
  ListAccounts 与 ResolveOutboundIdentity 均以该范围为权威边界。
- metadata_json 采用 denylist：剥离 Credentials 与含反向引用的关联对象
  Groups/AccountGroups（避免 encoding/json 循环引用），其余字段自动透传，
  数据模型新增非机密字段无需改宿主。

测试：范围/元数据/无凭据泄漏用例、denylist 反射护栏 + 循环引用安全断言、纵深过滤用例；
build/vet/gofmt、-tags unit 与 -race 全绿。

2026-09-20 11:26:19 +08:00

shaw

c63bd14a02

feat(plugin): generic host services + read-only status bridge channel

Extend the local plugin system's host<->plugin contract with generic,
capability-neutral facilities, so transport plugins can be built on top
without embedding plugin-specific logic in the host.

Host services (plugin dials a broker-provided HostService gRPC):
- per-plugin namespaced KV store (key/value size and TTL bounded)
- account directory: ListAccounts + ResolveOutboundIdentity, restricted to
  the accounts a plugin's declared capability already covers
- InitHostServices lifecycle hook; plugins that don't implement it run
  unchanged and are simply offered no host services

Read-only runtime status channel:
- HealthResponse gains an opaque, plugin-defined status_json produced
  passively (no config apply, no upstream call, no side effects)
- GET /admin/plugins/:id/status (ungated) and the plugin.status UI-bridge
  verb map to Health, so a status UI can poll live state without a step-up
  prompt or a "test" side effect
- config.test no longer force-shows a host success toast; the plugin UI owns
  result presentation, so plugins that read status do not spam toasts

Document the UI-bridge verb taxonomy (read vs mutate/test gating) and the
status contract under pkg/pluginapi.

2026-09-19 11:25:56 +08:00

shaw

40ea3aebad

feat: add OAuth outbound transport plugin system

2026-08-24 09:03:37 +08:00