feat: provide v2 Plugin Component contracts and offline validation

Validate exact Component interfaces and static Tool/DCDL schemas without guest execution. Share canonical archive packing and independent package/artifact verification; build real pure and HTTPS PDK fixtures and retire v1/Service authoring stubs.
2026-10-28 13:31:47 +09:00
parent 06883c51b7
commit 2d195f4058
40 changed files with 3056 additions and 1662 deletions
@@ -0,0 +1,25 @@
+package yoi:host@1.0.0;
+
+/// Grant-bound one-shot HTTP request host API. Importing this interface does not grant
+/// authority; package grants are checked before registration/execution and on
+/// every host call.
+interface request {
+  request: func(request-json: string) -> string;
+}
+
+/// Grant-bound host-owned WebSocket API. Authority requires a manifest `host_api.websocket`
+/// target and an enablement grant; messages are delivered only by explicit bounded recv calls.
+/// v1 supports text messages only and rejects guest-supplied handshake headers.
+interface websocket {
+  open: func(request-json: string) -> string;
+  send-text: func(handle: u32, text: string) -> string;
+  recv: func(handle: u32, timeout-ms: u32) -> string;
+  close: func(handle: u32) -> string;
+}
+
+/// Grant-bound filesystem host API. No ambient WASI filesystem is exposed.
+interface fs {
+  read: func(request-json: string) -> string;
+  %list: func(request-json: string) -> string;
+  write: func(request-json: string) -> string;
+}