{
  "v": 1,
  "id": "io.github.dev.flow-guard",
  "version": "1.0.0",
  "name": {
    "zh": "流量巡检卫士",
    "en": "Flow Guard"
  },
  "description": {
    "zh": "实时监控目标进程的健康状态与流量，并在异常时发出提醒。",
    "en": "Monitor process health and traffic in real-time."
  },
  "author": { "name": "Dev Team", "url": "https://github.com/dev" },
  "homepage": "https://github.com/dev/flow-guard",
  "category": "productivity",
  "entry": "main.py",
  "runtime": { "kind": "python", "minVersion": "3.9" },
  "ui": { "embedded": false },
  "standalone": true,
  "permissions": [
    "ghost.target.v1",
    "ghost.stats.v1",
    "ghost.ui.v1",
    "ghost.log.v1"
  ]
}

"tok-kw">import json
"tok-kw">import os
"tok-kw">import sys
"tok-kw">import threading
"tok-kw">import time
"tok-kw">import urllib.request
"tok-kw">import urllib.error

"tok-kw">class GhostPlugin:
    "tok-kw">def __init__(self):
        self.running = "tok-kw">True
        self.api_base = "tok-kw">None
        self.token = "tok-kw">None
        self.plugin_id = "tok-kw">None
        self.data_dir = "tok-kw">None
        self.stop_event_name = "tok-kw">None

    "tok-kw">def call_api(self, path: str, method: str = "GET", payload: dict = "tok-kw">None, timeout: int = 5):
        """
        统一 API 请求封装
        - 常规查询接口 timeout 默认设为 5 秒
        - 高危审批接口 (如 target/launch, upstream/create) timeout 必须传入 35~40 秒以等待用户决策
        """
        "tok-kw">if not self.api_base or not self.token:
            "tok-kw">return "tok-kw">None
        url = f"{self.api_base}{path}"
        headers = {
            "Content-Type": "application/json",
            "X-Ghost-Plugin-Token": self.token
        }
        data = json.dumps(payload).encode("utf-8") "tok-kw">if payload is not "tok-kw">None "tok-kw">else "tok-kw">None
        req = urllib.request.Request(url, data=data, headers=headers, method=method)
        "tok-kw">try:
            "tok-kw">with urllib.request.urlopen(req, timeout=timeout) "tok-kw">as resp:
                raw = resp.read().decode("utf-8")
                "tok-kw">return json.loads(raw) "tok-kw">if raw "tok-kw">else {}
        "tok-kw">except urllib.error.HTTPError "tok-kw">as e:
            "tok-kw">if e.code == 429:
                time.sleep(2)
            "tok-kw">elif e.code "tok-kw">in (401, 403):
                self.running = "tok-kw">False
            "tok-kw">return "tok-kw">None
        "tok-kw">except Exception:
            "tok-kw">return "tok-kw">None

    "tok-kw">def log_to_ghost(self, message: str, level: str = "info"):
        """通过 API 向 Ghost 主日志写入审计记录"""
        self.call_api("/api/plugin/v1/log/ingest", method="POST", payload={
            "level": level,
            "message": message
        }, timeout=5)

    "tok-kw">def show_toast(self, title: str, message: str, level: str = "info"):
        """向 Ghost 宿主界面发送纯文本 Toast 弹窗"""
        self.call_api("/api/plugin/v1/ui/toast", method="POST", payload={
            "title": title,
            "message": message,
            "level": level
        }, timeout=5)

    "tok-kw">def perform_health_check(self):
        """核心业务循环：周期性检查受管目标"""
        "tok-kw">while self.running:
            res = self.call_api("/api/plugin/v1/stats/overview", method="GET", timeout=5)
            "tok-kw">if res and res.get("status") == "ok":
                groups = res.get("groups", [])
                self.log_to_ghost(f"Active targets under inspection: {len(groups)}")

            # 每 10 秒巡检一次，支持快速退出
            "tok-kw">for _ "tok-kw">in range(10):
                "tok-kw">if not self.running:
                    "tok-kw">break
                time.sleep(1)

    "tok-kw">def listen_stop_signal(self):
        """监听 Windows 命名停止事件以实现优雅退出"""
        "tok-kw">if not self.stop_event_name:
            "tok-kw">return
        "tok-kw">try:
            "tok-kw">import ctypes
            kernel32 = ctypes.WinDLL("kernel32", use_last_error="tok-kw">True)
            # SYNCHRONIZE = 0x00100000
            event_handle = kernel32.OpenEventW(0x00100000, "tok-kw">False, self.stop_event_name)
            "tok-kw">if event_handle:
                kernel32.WaitForSingleObject(event_handle, 0xFFFFFFFF)
                self.running = "tok-kw">False
                kernel32.CloseHandle(event_handle)
        "tok-kw">except Exception:
            "tok-kw">pass

    "tok-kw">def run_hosted(self):
        # 1. 严格从 stdin 读取宿主下发的第一行 JSON 握手数据
        raw_line = sys.stdin.buffer.readline().decode("utf-8").strip()
        "tok-kw">if not raw_line:
            sys.exit(1)

        handshake = json.loads(raw_line)
        self.plugin_id = handshake.get("pluginId")
        self.token = handshake.get("token")
        self.api_base = handshake.get("apiBase")
        self.data_dir = handshake.get("dataDir")
        self.stop_event_name = handshake.get("stopEvent")

        # 2. 立即向 stdout 回写握手成功收据（必须立即 flush，防止宿主超时判定崩溃）
        # 注：若清单声明了 ui.embedded: true，回执中还必须携带 uiUrl: "http://127.0.0.1:<port>/"
        receipt = {"v": 1, "ok": "tok-kw">True}
        sys.stdout.buffer.write((json.dumps(receipt) + "\n").encode("utf-8"))
        sys.stdout.buffer.flush()

        # 握手完成，通知前端
        self.log_to_ghost("Plugin Flow Guard initialized.")
        self.show_toast("插件已启动", "流量巡检卫士已进入常驻监控模式。")

        # 3. 启动停止信号监听线程与工作巡检线程
        stop_thread = threading.Thread(target=self.listen_stop_signal, daemon="tok-kw">True)
        stop_thread.start()

        worker_thread = threading.Thread(target=self.perform_health_check, daemon="tok-kw">True)
        worker_thread.start()

        # 4. 主线程保持等待直至停止信号触发
        "tok-kw">while self.running:
            time.sleep(0.5)

        self.log_to_ghost("Plugin Flow Guard shutting down gracefully.")

"tok-kw">if __name__ == "__main__":
    # 根据环境变量判断是运行在 Ghost 宿主环境下还是独立单机运行
    "tok-kw">if "GHOST_PLUGIN_ID" "tok-kw">in os.environ:
        app = GhostPlugin()
        app.run_hosted()
    "tok-kw">else:
        print("[Standalone Mode] Ghost environment not detected. Running offline.")