Files
NebulaShell/oss/plugin/loader.py
Falck 76147bae94 初始提交 - FutureOSS v1.0 插件化运行时框架
一切皆为插件的开发者工具运行时框架

🧩 核心特性:
  - 插件热插拔 (importlib 动态加载)
  - 依赖自动解析 (拓扑排序 + 循环检测)
  - 企业级稳定 (熔断/降级/重试/隔离)
  - 事件驱动 (发布/订阅事件总线)
  - 完整配置 (YAML 配置 + 热重载)
2026-04-06 09:57:10 +08:00

126 lines
5.2 KiB
Python

"""插件加载器 - 加载基础插件(带沙箱隔离)"""
import sys
import importlib.util
from pathlib import Path
from typing import Any, Optional
from oss.plugin.types import Plugin
class Sandbox:
"""沙箱隔离"""
def __init__(self):
self._restricted_builtins = {
"__builtins__": {
"True": True,
"False": False,
"None": None,
"dict": dict,
"list": list,
"str": str,
"int": int,
"float": float,
"bool": bool,
"tuple": tuple,
"set": set,
"len": len,
"range": range,
"enumerate": enumerate,
"zip": zip,
"map": map,
"filter": filter,
"sorted": sorted,
"reversed": reversed,
"min": min,
"max": max,
"sum": sum,
"abs": abs,
"round": round,
"isinstance": isinstance,
"issubclass": issubclass,
"type": type,
"id": id,
"hash": hash,
"repr": repr,
"str": str,
"int": int,
"float": float,
"list": list,
"dict": dict,
"set": set,
"tuple": tuple,
"print": print,
}
}
def get_safe_globals(self) -> dict:
"""获取安全的 globals"""
return dict(self._restricted_builtins)
class PluginLoader:
"""插件加载器(带沙箱隔离)"""
def __init__(self, enable_sandbox: bool = True):
self.loaded: dict[str, Any] = {}
self.sandbox = Sandbox() if enable_sandbox else None
def load_core_plugin(self, plugin_name: str, store_dir: str = "store") -> Optional[dict[str, Any]]:
"""加载核心插件(不受沙箱限制)"""
plugin_dir = Path(store_dir) / "@{FutureOSS}" / plugin_name
return self._load_plugin(plugin_name, plugin_dir, use_sandbox=False, allow_relative=True)
def load_sandbox_plugin(self, plugin_dir: Path) -> Optional[dict[str, Any]]:
"""加载沙箱插件"""
plugin_name = plugin_dir.name
result = self._load_plugin(plugin_name, plugin_dir, use_sandbox=True, allow_relative=True)
return result
def _load_plugin(self, plugin_name: str, plugin_dir: Path, use_sandbox: bool = True, allow_relative: bool = False) -> Optional[dict[str, Any]]:
"""加载插件"""
if not (plugin_dir / "main.py").exists():
return None
# 清理插件名(去掉 } 等)
clean_name = plugin_name.rstrip("}")
module_name = f"plugin.{clean_name}"
spec = importlib.util.spec_from_file_location(module_name, str(plugin_dir / "main.py"))
module = importlib.util.module_from_spec(spec)
module.__package__ = module_name
module.__path__ = [str(plugin_dir)] # 启用相对导入子模块
sys.modules[spec.name] = module
# 沙箱模式:限制内置函数
if use_sandbox and self.sandbox:
safe_globals = self.sandbox.get_safe_globals()
# 允许导入框架模块
safe_globals["__builtins__"]["__import__"] = self._safe_import
spec.loader.exec_module(module)
else:
spec.loader.exec_module(module)
if not hasattr(module, "New"):
return None
instance = module.New()
self.loaded[clean_name] = {
"instance": instance,
"module": module,
"path": str(plugin_dir),
"name": clean_name, # 存储清理后的名称
}
return self.loaded[clean_name]
@staticmethod
def _safe_import(name: str, globals: dict = None, locals: dict = None, fromlist: tuple = (), level: int = 0):
"""安全导入:只允许导入框架模块、标准库子集和插件自身模块"""
allowed_prefixes = ("oss.", "json.", "time.", "datetime.", "enum.", "typing.", "dataclasses.", "pathlib.", "mimetypes.", "http.", "threading.", "socket.", "asyncio.", "websockets.", "re.", "urllib.", "shutil.", "string.", "io.", "base64.", "hashlib.", "hmac.", "secrets.", "math.", "random.", "collections.", "functools.", "itertools.", "operator.", "copy.", "pprint.", "textwrap.", "unicodedata.", "struct.", "codecs.", "locale.", "gettext.", "logging.", "warnings.", "contextlib.", "abc.", "atexit.", "traceback.", "linecache.", "tokenize.", "keyword.", "ast.", "dis.", "inspect.", "types.", "__future__.", "importlib.", "pkgutil.", "sys.", "os.", "stat.", "glob.", "tempfile.", "fnmatch.", "csv.", "configparser.", "argparse.", "html.", "xml.", "email.", "mailbox.", "mimetypes.", "binascii.", "zlib.", "gzip.", "bz2.", "lzma.", "zipfile.", "tarfile.", "sqlite3.", "zlib.")
if any(name.startswith(p) for p in allowed_prefixes):
return __import__(name, globals, locals, fromlist, level)
# 允许相对导入(插件自身模块)
if level > 0:
return __import__(name, globals, locals, fromlist, level)
raise ImportError(f"插件不允许导入模块: {name}")