Alex Dunmow b6d40ed8ac feat: bootstrap block/pluginsdk — the proto-first plugin SDK (P1)
Bootstrap the plugin-facing SDK module so the fleet migration (P2) becomes a
mechanical block/core/X -> block/pluginsdk/X import rewrite.

- abi/proto/v1: the single source-of-truth ABI proto tree, copied from the cms
  authoring source (cms/backend/abi/proto/v1) with go_package retargeted to
  git.dev.alexdunmow.com/block/pluginsdk/abi/v1;abiv1. Kills the hand-kept
  cms/core proto duplication (audit gap 4).
- abi/v1: generated Go bindings (buf generate); byte-identical to core's abi/v1
  save the embedded go_package path.
- plugin/ (registration + DI surface), plugin/wasmguest/** (transport shim,
  caps stubs, bnwasm db driver, testdata fixtures + golden .pb), and the
  guest-facing type packages: blocks (+builtin/shared/tags), templates
  (+pongo/bn), auth, settings, content, gating, crypto, rbac, video, ai,
  subscriptions, menus, datasources. Internal imports rewritten core ->
  pluginsdk; zero block/core references remain.
- README/AGENTS(+CLAUDE symlink)/Makefile: proto is the contract, Go is one
  binding; no replace directives; templates/bn is a synced copy authored in cms.

Spec: cms docs/superpowers/specs/2026-07-07-proto-first-plugin-sdk-design.md

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-07-07 10:51:00 +08:00

52 lines
1.8 KiB
Go

package caps
import (
"context"
abiv1 "git.dev.alexdunmow.com/block/pluginsdk/abi/v1"
"git.dev.alexdunmow.com/block/pluginsdk/gating"
"github.com/google/uuid"
)
// gatingStub implements gating.Gating over gating.* capability calls.
type gatingStub struct{ base }
var _ gating.Gating = (*gatingStub)(nil)
func (s *gatingStub) GetSubscriberTierLevel(ctx context.Context, userID uuid.UUID) (int, error) {
resp := &abiv1.GatingGetSubscriberTierLevelResponse{}
req := &abiv1.GatingGetSubscriberTierLevelRequest{UserId: userID.String()}
if err := s.invoke(ctx, "get_subscriber_tier_level", req, resp); err != nil {
return 0, err
}
return int(resp.GetLevel()), nil
}
// EvaluateAccess mirrors the host's decision. The rule evaluation is a pure,
// deterministic function (gating.EvaluateAccess) so the interface exposes no
// error channel; the call still crosses the boundary to keep host and guest
// on identical logic, and falls back to the local pure function if the
// transport is unavailable.
func (s *gatingStub) EvaluateAccess(userTierLevel int, rule *gating.AccessRule) gating.AccessResult {
req := &abiv1.GatingEvaluateAccessRequest{UserTierLevel: int32(userTierLevel)}
if rule != nil {
req.Rule = &abiv1.AccessRule{
MinTierLevel: int32(rule.MinTierLevel),
OverrideTierId: rule.OverrideTierID,
TeaserMode: rule.TeaserMode,
TeaserPercent: int32(rule.TeaserPercent),
}
}
resp := &abiv1.GatingEvaluateAccessResponse{}
if err := s.invoke(context.Background(), "evaluate_access", req, resp); err != nil {
return gating.EvaluateAccess(userTierLevel, rule)
}
r := resp.GetResult()
return gating.AccessResult{
HasAccess: r.GetHasAccess(),
TeaserMode: r.GetTeaserMode(),
TeaserPercent: int(r.GetTeaserPercent()),
RequiredLevel: int(r.GetRequiredLevel()),
}
}