plugin-inventory.ts

/**
 * Project-local managed plugin inventory
 * @description SRP: resolve the physical plugin roots declared by an installed project's
 * marketplace.json, and assert the loader runs from its own physical managed root.
 * Ported 1:1 from project-plugin-inventory.mjs.
 */
import fs from "node:fs";
import path from "node:path";
import type { MarketplaceManifest, PluginManifest } from "../interfaces/marketplace";
import { validateMarketplaceEntry } from "./marketplace-sources";

type RealPathKind = "directory" | "file";

function requireRealPath(target: string, kind: RealPathKind): void {
	const stat = fs.lstatSync(target);
	const isExpectedType = kind === "directory" ? stat.isDirectory() : stat.isFile();
	if (stat.isSymbolicLink() || !isExpectedType) {
		throw new Error(`${target} must be a real ${kind}, not a symlink`);
	}
}

/** Require the loader to be the physical managed root below the current project. */
export function assertProjectManagedRoot(managedRoot: string, projectRoot: string): void {
	const cursorRoot = path.resolve(projectRoot, ".cursor");
	const projectManagedRoot = path.join(cursorRoot, "fusengine");
	requireRealPath(cursorRoot, "directory");
	requireRealPath(projectManagedRoot, "directory");
	if (fs.realpathSync(projectManagedRoot) !== fs.realpathSync(managedRoot)) {
		throw new Error("loader must run from its physical project-local managed root");
	}
}

/** Resolve exactly the safe physical plugin roots declared by an installed marketplace. */
export function resolvePluginPaths(managedRoot: string): string[] {
	const pluginsRoot = path.join(managedRoot, "plugins");
	const marketplacePath = path.join(managedRoot, "marketplace.json");
	requireRealPath(managedRoot, "directory");
	requireRealPath(pluginsRoot, "directory");
	requireRealPath(marketplacePath, "file");
	const pluginsRootPhysical = fs.realpathSync(pluginsRoot);
	const marketplace = JSON.parse(fs.readFileSync(marketplacePath, "utf8")) as MarketplaceManifest;
	if (!Array.isArray(marketplace.plugins)) throw new Error("installed marketplace plugins must be an array");

	const seen = new Set<string>();
	return marketplace.plugins.map((entry: unknown) => {
		const identity = validateMarketplaceEntry(entry);
		if (seen.has(identity.name)) throw new Error(`duplicate marketplace plugin name: ${identity.name}`);
		seen.add(identity.name);
		const pluginPath = path.join(pluginsRoot, identity.name);
		requireRealPath(pluginPath, "directory");
		const pluginPhysical = fs.realpathSync(pluginPath);
		if (path.dirname(pluginPhysical) !== pluginsRootPhysical) {
			throw new Error(`plugin root resolves outside managed plugins: ${identity.name}`);
		}
		const metadataPath = path.join(pluginPath, ".cursor-plugin");
		requireRealPath(metadataPath, "directory");
		const manifestPath = path.join(metadataPath, "plugin.json");
		requireRealPath(manifestPath, "file");
		const plugin = JSON.parse(fs.readFileSync(manifestPath, "utf8")) as PluginManifest;
		if (plugin.name !== identity.name) throw new Error(`plugin identity mismatch: ${identity.name}`);
		return pluginPhysical;
	});
}