feat: make each plugin an npm workspace built by a termix-plugin CLI

packages/plugin-sdk/cli/lib/externals.mjs

@@ -0,0 +1,48 @@
+/**
+ * Host-provided packages.
+ *
+ * These ship with the Termix server and are never bundled into a plugin:
+ * bundling them would give each plugin its own copy of express or React, and
+ * a second ssh2 would mean a second set of native bindings. A plugin may
+ * depend on anything outside these lists, and that does get bundled.
+ *
+ * Node builtins are external automatically through platform: "node".
+ */
+
+export const BACKEND_EXTERNALS = [
+  "@termix/plugin-sdk",
+  "@termix/plugin-sdk/*",
+  "express",
+  "ssh2",
+  "ws",
+  "multer",
+  "cookie-parser",
+  "axios",
+  "jszip",
+  "guacamole-lite",
+  "@anthropic-ai/sdk",
+  "drizzle-orm",
+  "drizzle-orm/*",
+];
+
+export const FRONTEND_EXTERNALS = [
+  "react",
+  "react-dom",
+  "react/jsx-runtime",
+  "react-dom/client",
+  "@termix/plugin-sdk",
+  "@termix/plugin-sdk/*",
+  "i18next",
+  "react-i18next",
+  // Core-provided UI libraries. A7 serves these through the SDK ui entry.
+  "lucide-react",
+  "sonner",
+  "axios",
+  "cytoscape",
+  "react-cytoscapejs",
+  "guacamole-common-js",
+  "react-xtermjs",
+  "@xterm/*",
+  // Legacy: the shell's own modules, still reached by alias. A7 removes.
+  "@/*",
+];

packages/plugin-sdk/cli/lib/legacy-core-imports.mjs

@@ -0,0 +1,61 @@
+/**
+ * Legacy core imports: the debt D1 removes.
+ *
+ * Plugin code predates the SDK and still reaches core, and in one case a
+ * sibling plugin, by relative path. Those specifiers must stay out of the
+ * bundle and be rewritten to where the built server puts the target.
+ *
+ * The rewrite is output-relative, not source-relative. Every plugin bundles
+ * to plugins/<id>/dist/backend.js, which sits at the same depth the old
+ * per-file output did, so one prefix covers a source file at any nesting.
+ *
+ * Delete this file in D1, once every plugin reaches core through the SDK.
+ */
+
+// "../../../src/backend/" or "../../../../src/backend/", any depth.
+const CORE_BACKEND = /^(?:\.\.\/)+src\/backend\//;
+// Shared types. Mostly erased at compile, but automations imports a real
+// value (AUTOMATION_DEFINITION_VERSION), so this has to resolve at runtime.
+const CORE_TYPES = /^(?:\.\.\/)+src\/types\//;
+const CORE_UI = /^(?:\.\.\/)+src\/ui\//;
+// "../../../<other-plugin>/backend/" -- only plugins/ai/.../executor.ts today.
+// esbuild filters are Go RE2, which has no lookahead, so "src" is excluded in
+// the callback rather than the pattern.
+const CROSS_PLUGIN = /^(?:\.\.\/)+([a-z0-9-]+)\/(?:src\/)?backend\//;
+
+/** dist/plugins/<id>/dist/backend.js -> dist/backend/... */
+const COMPILED_CORE = "../../../backend/backend/";
+const COMPILED_TYPES = "../../../backend/types/";
+
+export function legacyCoreImports({ pluginId, platform }) {
+  return {
+    name: "legacy-core-imports",
+    setup(build) {
+      build.onResolve({ filter: CORE_BACKEND }, (args) => ({
+        path: args.path.replace(CORE_BACKEND, COMPILED_CORE),
+        external: true,
+      }));
+
+      build.onResolve({ filter: CORE_TYPES }, (args) => ({
+        path: args.path.replace(CORE_TYPES, COMPILED_TYPES),
+        external: true,
+      }));
+
+      // The shell's own modules. Only plugins/docker's frontend entry reaches
+      // core this way; every other frontend uses the "@/" alias, which is
+      // externalized by name. A7 removes both.
+      if (platform === "browser") {
+        build.onResolve({ filter: CORE_UI }, (args) => ({
+          path: args.path,
+          external: true,
+        }));
+      }
+
+      build.onResolve({ filter: CROSS_PLUGIN }, (args) => {
+        const [, other] = CROSS_PLUGIN.exec(args.path);
+        if (other === "src" || other === pluginId) return null;
+        return { path: `../../${other}/dist/backend.js`, external: true };
+      });
+    },
+  };
+}

packages/plugin-sdk/cli/lib/plugin-dir.mjs

@@ -0,0 +1,29 @@
+import fs from "node:fs";
+import path from "node:path";
+
+export function readManifest(cwd) {
+  const manifestPath = path.join(cwd, "manifest.json");
+  if (!fs.existsSync(manifestPath)) {
+    throw new Error(`No manifest.json in ${cwd}`);
+  }
+  try {
+    return JSON.parse(fs.readFileSync(manifestPath, "utf8"));
+  } catch (error) {
+    throw new Error(`manifest.json is not valid JSON: ${error.message}`);
+  }
+}
+
+/** The first of these that exists, or null. */
+export function resolveEntry(cwd, candidates) {
+  for (const candidate of candidates) {
+    const full = path.join(cwd, candidate);
+    if (fs.existsSync(full)) return full;
+  }
+  return null;
+}
+
+export function copyDir(from, to) {
+  if (!fs.existsSync(from)) return false;
+  fs.cpSync(from, to, { recursive: true });
+  return true;
+}