⚡ 初始提交 - FutureOSS v1.0 插件化运行时框架

一切皆为插件的开发者工具运行时框架

🧩 核心特性:
  - 插件热插拔 (importlib 动态加载)
  - 依赖自动解析 (拓扑排序 + 循环检测)
  - 企业级稳定 (熔断/降级/重试/隔离)
  - 事件驱动 (发布/订阅事件总线)
  - 完整配置 (YAML 配置 + 热重载)

oss/plugin/loader.py

@@ -0,0 +1,125 @@
+"""插件加载器 - 加载基础插件（带沙箱隔离）"""
+import sys
+import importlib.util
+from pathlib import Path
+from typing import Any, Optional
+
+from oss.plugin.types import Plugin
+
+
+class Sandbox:
+    """沙箱隔离"""
+
+    def __init__(self):
+        self._restricted_builtins = {
+            "__builtins__": {
+                "True": True,
+                "False": False,
+                "None": None,
+                "dict": dict,
+                "list": list,
+                "str": str,
+                "int": int,
+                "float": float,
+                "bool": bool,
+                "tuple": tuple,
+                "set": set,
+                "len": len,
+                "range": range,
+                "enumerate": enumerate,
+                "zip": zip,
+                "map": map,
+                "filter": filter,
+                "sorted": sorted,
+                "reversed": reversed,
+                "min": min,
+                "max": max,
+                "sum": sum,
+                "abs": abs,
+                "round": round,
+                "isinstance": isinstance,
+                "issubclass": issubclass,
+                "type": type,
+                "id": id,
+                "hash": hash,
+                "repr": repr,
+                "str": str,
+                "int": int,
+                "float": float,
+                "list": list,
+                "dict": dict,
+                "set": set,
+                "tuple": tuple,
+                "print": print,
+            }
+        }
+
+    def get_safe_globals(self) -> dict:
+        """获取安全的 globals"""
+        return dict(self._restricted_builtins)
+
+
+class PluginLoader:
+    """插件加载器（带沙箱隔离）"""
+
+    def __init__(self, enable_sandbox: bool = True):
+        self.loaded: dict[str, Any] = {}
+        self.sandbox = Sandbox() if enable_sandbox else None
+
+    def load_core_plugin(self, plugin_name: str, store_dir: str = "store") -> Optional[dict[str, Any]]:
+        """加载核心插件（不受沙箱限制）"""
+        plugin_dir = Path(store_dir) / "@{FutureOSS}" / plugin_name
+        return self._load_plugin(plugin_name, plugin_dir, use_sandbox=False, allow_relative=True)
+
+    def load_sandbox_plugin(self, plugin_dir: Path) -> Optional[dict[str, Any]]:
+        """加载沙箱插件"""
+        plugin_name = plugin_dir.name
+        result = self._load_plugin(plugin_name, plugin_dir, use_sandbox=True, allow_relative=True)
+        return result
+
+    def _load_plugin(self, plugin_name: str, plugin_dir: Path, use_sandbox: bool = True, allow_relative: bool = False) -> Optional[dict[str, Any]]:
+        """加载插件"""
+        if not (plugin_dir / "main.py").exists():
+            return None
+
+        # 清理插件名（去掉 } 等）
+        clean_name = plugin_name.rstrip("}")
+        module_name = f"plugin.{clean_name}"
+        spec = importlib.util.spec_from_file_location(module_name, str(plugin_dir / "main.py"))
+        module = importlib.util.module_from_spec(spec)
+        module.__package__ = module_name
+        module.__path__ = [str(plugin_dir)]  # 启用相对导入子模块
+        sys.modules[spec.name] = module
+
+        # 沙箱模式：限制内置函数
+        if use_sandbox and self.sandbox:
+            safe_globals = self.sandbox.get_safe_globals()
+            # 允许导入框架模块
+            safe_globals["__builtins__"]["__import__"] = self._safe_import
+            spec.loader.exec_module(module)
+        else:
+            spec.loader.exec_module(module)
+
+        if not hasattr(module, "New"):
+            return None
+
+        instance = module.New()
+        self.loaded[clean_name] = {
+            "instance": instance,
+            "module": module,
+            "path": str(plugin_dir),
+            "name": clean_name,  # 存储清理后的名称
+        }
+        return self.loaded[clean_name]
+
+    @staticmethod
+    def _safe_import(name: str, globals: dict = None, locals: dict = None, fromlist: tuple = (), level: int = 0):
+        """安全导入：只允许导入框架模块、标准库子集和插件自身模块"""
+        allowed_prefixes = ("oss.", "json.", "time.", "datetime.", "enum.", "typing.", "dataclasses.", "pathlib.", "mimetypes.", "http.", "threading.", "socket.", "asyncio.", "websockets.", "re.", "urllib.", "shutil.", "string.", "io.", "base64.", "hashlib.", "hmac.", "secrets.", "math.", "random.", "collections.", "functools.", "itertools.", "operator.", "copy.", "pprint.", "textwrap.", "unicodedata.", "struct.", "codecs.", "locale.", "gettext.", "logging.", "warnings.", "contextlib.", "abc.", "atexit.", "traceback.", "linecache.", "tokenize.", "keyword.", "ast.", "dis.", "inspect.", "types.", "__future__.", "importlib.", "pkgutil.", "sys.", "os.", "stat.", "glob.", "tempfile.", "fnmatch.", "csv.", "configparser.", "argparse.", "html.", "xml.", "email.", "mailbox.", "mimetypes.", "binascii.", "zlib.", "gzip.", "bz2.", "lzma.", "zipfile.", "tarfile.", "sqlite3.", "zlib.")
+        if any(name.startswith(p) for p in allowed_prefixes):
+            return __import__(name, globals, locals, fromlist, level)
+        # 允许相对导入（插件自身模块）
+        if level > 0:
+            return __import__(name, globals, locals, fromlist, level)
+        raise ImportError(f"插件不允许导入模块: {name}")
+