feat(*): 插件中心与模型协议 - 完善声明式协议运行时并增加功能开放控制

backend/internal/handler/plugin.go

@@ -1,16 +1,89 @@
 package handler
 
 import (
+	"io"
 	"net/http"
 	"strconv"
+	"strings"
 
+	"infinite-canvas/backend/internal/model"
 	"infinite-canvas/backend/internal/service"
 
 	"github.com/gin-gonic/gin"
 )
 
 func RegisterPluginRoutes(r *gin.RouterGroup, svc *service.Service) {
-	r.GET("/plugins/eagle/library", func(c *gin.Context) {
+	pluginRoutes := r.Group("/plugins")
+	pluginRoutes.Use(requirePluginCenterAccess(svc))
+	// The frontend plugin center is the single management surface. Protocol
+	// plugins are returned as kind=protocol records alongside UI plugins.
+	pluginRoutes.GET("", func(c *gin.Context) {
+		user, err := currentUser(c, svc)
+		if err != nil {
+			failService(c, err)
+			return
+		}
+		plugins, err := svc.PluginsForUser(user)
+		if err != nil {
+			failService(c, err)
+			return
+		}
+		ok(c, gin.H{"plugins": plugins})
+	})
+	pluginRoutes.POST("", func(c *gin.Context) {
+		user, err := currentUser(c, svc)
+		if err != nil {
+			failService(c, err)
+			return
+		}
+		if err := svc.RequireAdmin(user); err != nil {
+			failService(c, err)
+			return
+		}
+		c.Request.Body = http.MaxBytesReader(c.Writer, c.Request.Body, 512<<10)
+		var data []byte
+		if strings.HasPrefix(strings.ToLower(c.GetHeader("Content-Type")), "multipart/form-data") {
+			file, _, fileErr := c.Request.FormFile("file")
+			if fileErr != nil {
+				fail(c, http.StatusBadRequest, fileErr)
+				return
+			}
+			defer file.Close()
+			data, err = io.ReadAll(io.LimitReader(file, 512<<10+1))
+		} else {
+			data, err = io.ReadAll(io.LimitReader(c.Request.Body, 512<<10+1))
+		}
+		if err != nil {
+			fail(c, http.StatusBadRequest, err)
+			return
+		}
+		plugin, err := svc.InstallPlugin(data)
+		if err != nil {
+			failService(c, err)
+			return
+		}
+		ok(c, gin.H{"plugin": plugin})
+	})
+	pluginRoutes.POST("/:id/enable", pluginToggle(svc, true))
+	pluginRoutes.POST("/:id/disable", pluginToggle(svc, false))
+	pluginRoutes.DELETE("/:id", func(c *gin.Context) {
+		user, err := currentUser(c, svc)
+		if err != nil {
+			failService(c, err)
+			return
+		}
+		if err := svc.RequireAdmin(user); err != nil {
+			failService(c, err)
+			return
+		}
+		if err := svc.UninstallPlugin(c.Param("id")); err != nil {
+			failService(c, err)
+			return
+		}
+		ok(c, gin.H{"deleted": true})
+	})
+
+	pluginRoutes.GET("/eagle/library", func(c *gin.Context) {
 		if _, err := currentUser(c, svc); err != nil {
 			failService(c, err)
 			return
@@ -23,7 +96,7 @@ func RegisterPluginRoutes(r *gin.RouterGroup, svc *service.Service) {
 		library.LibraryPath = ""
 		ok(c, gin.H{"library": library})
 	})
-	r.GET("/plugins/eagle/items", func(c *gin.Context) {
+	pluginRoutes.GET("/eagle/items", func(c *gin.Context) {
 		if _, err := currentUser(c, svc); err != nil {
 			failService(c, err)
 			return
@@ -37,7 +110,7 @@ func RegisterPluginRoutes(r *gin.RouterGroup, svc *service.Service) {
 		}
 		ok(c, gin.H{"items": items})
 	})
-	r.GET("/plugins/eagle/items/:itemId/file", func(c *gin.Context) {
+	pluginRoutes.GET("/eagle/items/:itemId/file", func(c *gin.Context) {
 		if _, err := currentUser(c, svc); err != nil {
 			failService(c, err)
 			return
@@ -53,7 +126,7 @@ func RegisterPluginRoutes(r *gin.RouterGroup, svc *service.Service) {
 		c.Header("Content-Disposition", "attachment; filename=\""+file.Name+"\"")
 		c.DataFromReader(http.StatusOK, file.Size, file.MimeType, file.Body, nil)
 	})
-	r.GET("/plugins/eagle/items/:itemId/thumbnail", func(c *gin.Context) {
+	pluginRoutes.GET("/eagle/items/:itemId/thumbnail", func(c *gin.Context) {
 		if _, err := currentUser(c, svc); err != nil {
 			failService(c, err)
 			return
@@ -68,7 +141,7 @@ func RegisterPluginRoutes(r *gin.RouterGroup, svc *service.Service) {
 		c.Header("X-Content-Type-Options", "nosniff")
 		c.DataFromReader(http.StatusOK, file.Size, file.MimeType, file.Body, nil)
 	})
-	r.POST("/plugins/eagle/items", func(c *gin.Context) {
+	pluginRoutes.POST("/eagle/items", func(c *gin.Context) {
 		if _, err := currentUser(c, svc); err != nil {
 			failService(c, err)
 			return
@@ -86,7 +159,7 @@ func RegisterPluginRoutes(r *gin.RouterGroup, svc *service.Service) {
 		}
 		ok(c, gin.H{"item": item})
 	})
-	r.POST("/plugins/eagle/folders", func(c *gin.Context) {
+	pluginRoutes.POST("/eagle/folders", func(c *gin.Context) {
 		if _, err := currentUser(c, svc); err != nil {
 			failService(c, err)
 			return
@@ -107,3 +180,44 @@ func RegisterPluginRoutes(r *gin.RouterGroup, svc *service.Service) {
 		ok(c, gin.H{"created": true})
 	})
 }
+
+func requirePluginCenterAccess(svc *service.Service) gin.HandlerFunc {
+	return func(c *gin.Context) {
+		user, err := currentUser(c, svc)
+		if err != nil {
+			failService(c, err)
+			c.Abort()
+			return
+		}
+		if user.Role == model.UserRoleAdmin {
+			c.Next()
+			return
+		}
+		if err := svc.RequireFeature(service.FeaturePluginCenter); err != nil {
+			failService(c, err)
+			c.Abort()
+			return
+		}
+		c.Next()
+	}
+}
+
+func pluginToggle(svc *service.Service, enabled bool) gin.HandlerFunc {
+	return func(c *gin.Context) {
+		user, err := currentUser(c, svc)
+		if err != nil {
+			failService(c, err)
+			return
+		}
+		if err := svc.RequireAdmin(user); err != nil {
+			failService(c, err)
+			return
+		}
+		plugin, err := svc.SetPluginEnabled(c.Param("id"), enabled)
+		if err != nil {
+			failService(c, err)
+			return
+		}
+		ok(c, gin.H{"plugin": plugin})
+	}
+}