feat(plugin-distribution): Introduce builtin plugin distribution management

- Added `distribution` field to plugin manifest to distinguish between `marketplace` and `builtin` plugins.
- Implemented server-side governance to restrict management actions on `builtin` plugins, ensuring they are automatically installed, enabled, and upgraded during startup.
- Updated plugin management UI to hide `builtin` plugins from ordinary management views, allowing only read-only access through controlled diagnostic queries.
- Enhanced plugin lifecycle management to ensure `builtin` plugins adhere to specific governance rules, including dependency checks and upgrade protocols.
- Refactored related specifications and tasks to align with the new distribution model, ensuring comprehensive coverage in API responses and frontend behavior.
- Updated documentation and tests to reflect changes in plugin management and governance.

Author: gqcn

apps/lina-core/api/job/v1/job_create.go

@@ -27,7 +27,7 @@ type JobPayload struct {
 	MaxConcurrency       int                 `json:"maxConcurrency" d:"1" v:"min:1|max:100" dc:"Maximum number of concurrencies; effective when concurrency=parallel" eg:"1"`
 	MaxExecutions        int                 `json:"maxExecutions" d:"0" v:"min:0" dc:"Maximum number of executions: 0 = no limit" eg:"0"`
 	Status               Status              `json:"status" d:"disabled" v:"required|in:enabled,disabled" dc:"Task status: enabled=enabled disabled=disabled; paused_by_plugin is a system managed state and does not allow writing when creating or editing" eg:"enabled"`
-	LogRetentionOverride *LogRetentionOption `json:"logRetentionOverride" dc:"Task-level log retention policy; if not passed, follow the system parameter cron.log.retention" eg:"{\"mode\":\"days\",\"value\":60}"`
+	LogRetentionOverride *LogRetentionOption `json:"logRetentionOverride" dc:"Task-level log retention policy; if not passed, follow the system parameter sys.cron.log.retention" eg:"{\"mode\":\"days\",\"value\":60}"`
 }
 
 // CreateReq defines the request for creating one scheduled job.

apps/lina-core/api/plugin/plugin.go

@@ -9,6 +9,15 @@ const (
 	PluginTypeDynamic PluginType = "dynamic"
 )
 
+// PluginDistribution identifies the host governance model for plugin delivery.
+type PluginDistribution string
+
+// Supported plugin distribution governance values.
+const (
+	PluginDistributionMarketplace PluginDistribution = "marketplace"
+	PluginDistributionBuiltin     PluginDistribution = "builtin"
+)
+
 // RuntimeState identifies whether discovered plugin files match effective state.
 type RuntimeState string
 

apps/lina-core/api/plugin/v1/plugin.go

@@ -18,6 +18,8 @@ type ListReq struct {
 	Type      PluginType               `json:"type" dc:"Filter by plugin type: source=source plugin dynamic=dynamic plugin, if not passed, all will be queried; the current dynamic plugin implementation only supports WASM" eg:"dynamic"`
 	Status    *statusflag.Enabled      `json:"status" dc:"Filter by enabled status: 1=enabled 0=disabled, if not passed, query all" eg:"1"`
 	Installed *statusflag.Installation `json:"installed" dc:"Filter by installation status: 1=Installed 0=Not installed, if not uploaded, query all" eg:"1"`
+	// IncludeBuiltin includes project built-in source plugins for read-only diagnostics. The default false value hides builtin plugins from ordinary plugin management.
+	IncludeBuiltin bool `json:"includeBuiltin" dc:"Whether to include builtin plugins in this read-only diagnostic list query; default false hides builtin plugins from ordinary plugin management" eg:"false"`
 }
 
 // ListRes is the response for querying plugin list.
@@ -38,6 +40,7 @@ type PluginListItem struct {
 	AbnormalReason          RuntimeAbnormalReason     `json:"abnormalReason,omitempty" dc:"Stable diagnostic reason when runtimeState is abnormal" eg:"discovered_version_lower_than_effective"`
 	LastUpgradeFailure      *PluginUpgradeFailureItem `json:"lastUpgradeFailure,omitempty" dc:"Latest observable runtime upgrade failure summary for list diagnosis" eg:"{}"`
 	Type                    PluginType                `json:"type" dc:"Plugin first-level type: source=source plugin dynamic=dynamic plugin" eg:"source"`
+	Distribution            PluginDistribution        `json:"distribution" dc:"Plugin distribution governance type: marketplace=ordinary managed plugin builtin=project built-in source plugin" eg:"marketplace"`
 	Description             string                    `json:"description" dc:"Plugin description" eg:"Source plugin that provides left-side menu pages and public/protected routing examples"`
 	Installed               statusflag.Installation   `json:"installed" dc:"Installation status: 1=installed 0=not installed; the source plugin can still be in the uninstalled state by default after being discovered by the host" eg:"1"`
 	InstalledAt             *int64                    `json:"installedAt" dc:"Plugin installation time as Unix timestamp in milliseconds, empty if it is not installed" eg:"1767240000000"`
@@ -66,6 +69,7 @@ type PluginItem struct {
 	AbnormalReason          RuntimeAbnormalReason        `json:"abnormalReason,omitempty" dc:"Stable diagnostic reason when runtimeState is abnormal" eg:"discovered_version_lower_than_effective"`
 	LastUpgradeFailure      *PluginUpgradeFailureItem    `json:"lastUpgradeFailure,omitempty" dc:"Latest observable runtime upgrade failure details" eg:"{}"`
 	Type                    PluginType                   `json:"type" dc:"Plugin first-level type: source=source plugin dynamic=dynamic plugin" eg:"source"`
+	Distribution            PluginDistribution           `json:"distribution" dc:"Plugin distribution governance type: marketplace=ordinary managed plugin builtin=project built-in source plugin" eg:"marketplace"`
 	Description             string                       `json:"description" dc:"Plugin description" eg:"Source plugin that provides left-side menu pages and public/protected routing examples"`
 	Installed               statusflag.Installation      `json:"installed" dc:"Installation status: 1=installed 0=not installed; the source plugin can still be in the uninstalled state by default after being discovered by the host" eg:"1"`
 	InstalledAt             *int64                       `json:"installedAt" dc:"Plugin installation time as Unix timestamp in milliseconds, empty if it is not installed" eg:"1767240000000"`

apps/lina-core/api/plugin/v1/plugin_list.go

@@ -447,8 +447,14 @@ func startHTTPRuntime(ctx context.Context, runtime *httpRuntime) error {
 func startHTTPRuntimeBeforeSourceRoutes(ctx context.Context, runtime *httpRuntime) error {
 	runtime.clusterSvc.Start(ctx)
 
-	// Auto-enable and source-upgrade drift scanning run before plugin routes and
-	// cron jobs are registered so plugin management can surface runtime state.
+	// Builtin reconciliation, auto-enable, and source-upgrade drift scanning run
+	// before plugin routes and cron jobs are registered so plugin management can
+	// surface runtime state.
+	if err := startupstats.Observe(ctx, startupstats.PhasePluginBootstrapBuiltin, func() error {
+		return runtime.pluginSvc.BootstrapBuiltinPlugins(ctx)
+	}); err != nil {
+		return err
+	}
 	if err := startupstats.Observe(ctx, startupstats.PhasePluginBootstrapAutoEnable, func() error {
 		return runtime.pluginSvc.BootstrapAutoEnable(ctx)
 	}); err != nil {

apps/lina-core/internal/cmd/internal/httpstartup/httpstartup_runtime.go

@@ -32,6 +32,7 @@ func TestLogHTTPStartupSummaryEmitsFieldsWithoutSQL(t *testing.T) {
 	collector.Add(startupstats.CounterPluginScans, 1)
 	collector.Add(startupstats.CounterPluginSyncChanged, 2)
 	collector.Add(startupstats.CounterPluginSyncNoop, 3)
+	collector.RecordPhase(startupstats.PhasePluginBootstrapBuiltin, 9)
 	collector.RecordPhase(startupstats.PhasePluginBootstrapAutoEnable, 12)
 	collector.RecordPhase(startupstats.PhasePluginStartupConsistency, 4)
 

apps/lina-core/internal/cmd/internal/httpstartup/httpstartup_runtime_test.go

@@ -15,13 +15,14 @@ import (
 // List scans plugins and returns current synchronized status list.
 func (c *ControllerV1) List(ctx context.Context, req *v1.ListReq) (res *v1.ListRes, err error) {
 	out, err := c.pluginSvc.List(ctx, pluginsvc.ListInput{
-		PageNum:   req.PageNum,
-		PageSize:  req.PageSize,
-		ID:        req.Id,
-		Name:      req.Name,
-		Type:      string(req.Type),
-		Status:    enabledPtrToInt(req.Status),
-		Installed: installationPtrToInt(req.Installed),
+		PageNum:        req.PageNum,
+		PageSize:       req.PageSize,
+		ID:             req.Id,
+		Name:           req.Name,
+		Type:           string(req.Type),
+		Status:         enabledPtrToInt(req.Status),
+		Installed:      installationPtrToInt(req.Installed),
+		IncludeBuiltin: req.IncludeBuiltin,
 	})
 	if err != nil {
 		return nil, err
@@ -60,6 +61,7 @@ func (c *ControllerV1) buildPluginListItemResponse(
 		AbnormalReason:          v1.RuntimeAbnormalReason(item.AbnormalReason.String()),
 		LastUpgradeFailure:      buildPluginUpgradeFailureItem(item.LastUpgradeFailure),
 		Type:                    v1.PluginType(item.Type),
+		Distribution:            v1.PluginDistribution(item.Distribution),
 		Description:             item.Description,
 		Installed:               statusflag.Installation(item.Installed),
 		InstalledAt:             item.InstalledAt,
@@ -98,6 +100,7 @@ func (c *ControllerV1) buildPluginItemResponse(
 		AbnormalReason:          v1.RuntimeAbnormalReason(item.AbnormalReason.String()),
 		LastUpgradeFailure:      buildPluginUpgradeFailureItem(item.LastUpgradeFailure),
 		Type:                    v1.PluginType(item.Type),
+		Distribution:            v1.PluginDistribution(item.Distribution),
 		Description:             item.Description,
 		Installed:               statusflag.Installation(item.Installed),
 		InstalledAt:             item.InstalledAt,

apps/lina-core/internal/controller/plugin/plugin_v1_list.go

@@ -3,7 +3,12 @@
 
 package plugin
 
-import "testing"
+import (
+	"testing"
+
+	v1 "lina-core/api/plugin/v1"
+	pluginsvc "lina-core/internal/service/plugin"
+)
 
 // TestBuildAutoEnableManagedSetNormalizesPluginIDs verifies startup-managed
 // plugin IDs are trimmed and de-duplicated before list projection uses them.
@@ -28,3 +33,22 @@ func TestBuildAutoEnableManagedSetNormalizesPluginIDs(t *testing.T) {
 		t.Fatal("expected blank plugin ID to be ignored")
 	}
 }
+
+// TestBuildPluginListItemResponseIncludesDistribution verifies API projection
+// exposes plugin distribution governance metadata.
+func TestBuildPluginListItemResponseIncludesDistribution(t *testing.T) {
+	controller := &ControllerV1{}
+	pluginItem := &pluginsvc.PluginItem{}
+	pluginItem.Id = "plugin-dev-controller-builtin"
+	pluginItem.Name = "Controller Builtin"
+	pluginItem.Type = string(v1.PluginTypeSource)
+	pluginItem.Distribution = string(v1.PluginDistributionBuiltin)
+
+	item := controller.buildPluginListItemResponse(pluginItem, false)
+	if item == nil {
+		t.Fatal("expected plugin list item response")
+	}
+	if item.Distribution != v1.PluginDistributionBuiltin {
+		t.Fatalf("expected builtin distribution in API projection, got %q", item.Distribution)
+	}
+}