Rebuild SCUM plugin data ownership

platform/service/plugin_data.go

@@ -0,0 +1,73 @@
+package service
+
+import (
+	"strings"
+
+	"browser.local/platform/domain"
+	"browser.local/platform/repo"
+)
+
+func (svc *CoreService) ListPluginDataForSession(sessionID string, filter domain.PluginDataFilter) ([]domain.PluginDataRecord, error) {
+	if err := svc.authorizePluginData(sessionID, filter.PluginID, filter.ServerInstanceID, filter.Collection); err != nil {
+		return nil, err
+	}
+	values, err := svc.store.PluginDataRecords().List(filter)
+	if err != nil {
+		return nil, err
+	}
+	if filter.Limit > 0 && len(values) > filter.Limit {
+		values = values[:filter.Limit]
+	}
+	return values, nil
+}
+
+func (svc *CoreService) PutPluginDataForSession(sessionID string, value domain.PluginDataRecord) (domain.PluginDataRecord, error) {
+	if err := svc.authorizePluginData(sessionID, value.PluginID, value.ServerInstanceID, value.Collection); err != nil {
+		return domain.PluginDataRecord{}, err
+	}
+	if strings.TrimSpace(value.Key) == "" {
+		return domain.PluginDataRecord{}, validationError("plugin data key is required")
+	}
+	if value.Value == nil {
+		return domain.PluginDataRecord{}, validationError("plugin data value is required")
+	}
+	value.ID = pluginDataID(value.ServerInstanceID, value.PluginID, value.Collection, value.Key)
+	stamp := svc.now()
+	existing, err := svc.store.PluginDataRecords().Get(value.ID)
+	if err == repo.ErrNotFound {
+		value.CreatedAt, value.UpdatedAt = stamp, stamp
+		if err := svc.store.PluginDataRecords().Create(value); err != nil {
+			return domain.PluginDataRecord{}, err
+		}
+		return domain.CopyPluginDataRecord(value), nil
+	}
+	if err != nil {
+		return domain.PluginDataRecord{}, err
+	}
+	existing.Value, existing.UpdatedAt = domain.CopyGameClientBridgePayload(value.Value), stamp
+	if err := svc.store.PluginDataRecords().Update(existing); err != nil {
+		return domain.PluginDataRecord{}, err
+	}
+	return domain.CopyPluginDataRecord(existing), nil
+}
+
+func (svc *CoreService) authorizePluginData(sessionID, pluginID, serverInstanceID, collection string) error {
+	if strings.TrimSpace(pluginID) == "" || strings.TrimSpace(serverInstanceID) == "" || strings.TrimSpace(collection) == "" {
+		return validationError("pluginId, serverInstanceId, and collection are required")
+	}
+	if err := svc.authorizeServerLifecycle(sessionID, serverInstanceID); err != nil {
+		return err
+	}
+	instance, err := svc.store.ServerInstances().Get(serverInstanceID)
+	if err != nil {
+		return err
+	}
+	if instance.PluginID != pluginID {
+		return ErrForbidden
+	}
+	return nil
+}
+
+func pluginDataID(serverID, pluginID, collection, key string) string {
+	return "plugin-data-" + fingerprintID(serverID, pluginID+"\x00"+collection+"\x00"+key)
+}