feat: init plugin framework + object storage plugin (#2198)

* plugins as simple sidebar items + route trees

* wip

* wip

* wip

* refactor(plugins): extract store plugin and create mesh-sdk package

- Move store components from mesh app to mesh-plugin-store package
- Create @decocms/mesh-sdk package with shared hooks (useConnection, useToolCall, useMcp, etc.)
- Add PluginContext system with typed tool caller support
- Add PluginLayout for consistent plugin rendering with connection selection
- Support partial context for empty states via usePluginContext({ partial: true })
- Move ReadmeViewer and GitHub utilities to @deco/ui
- Clean up unused store routes and components from mesh app

* same react version for everyone

* fix pkg import

* rename constant

* fix css gen

* refactor: revert store to core app + create object storage plugin

Part 1: Revert Store Changes
- Move store components back from mesh-plugin-store to apps/mesh/
- Restore store routes in mesh app router
- Delete packages/mesh-plugin-store package
- Keep plugin infrastructure (PluginContext, PluginLayout, mesh-sdk)

Part 2: Create Object Storage Plugin
- Add OBJECT_STORAGE_BINDING in packages/bindings with tools:
  - LIST_OBJECTS, GET_OBJECT_METADATA, GET_PRESIGNED_URL
  - PUT_PRESIGNED_URL, DELETE_OBJECT, DELETE_OBJECTS
- Create packages/mesh-plugin-object-storage with:
  - File browser UI with list view
  - Breadcrumb navigation
  - Upload/download via presigned URLs
  - Single and batch delete
  - Infinite scroll pagination
- Register plugin in apps/mesh/src/web/plugins.ts

* fix: restore store sidebar item and missing files from main

- Add Store back to sidebar navigation
- Restore use-gateway-system-prompt.ts, use-system.ts, theme-provider.tsx
- Restore public-config.ts API route
- Restore ThemeConfig in core/config.ts
- Add gatewaySystemPrompts to LOCALSTORAGE_KEYS
- Add publicConfig to KEYS

* some reverts

* fix

* rn

* wip

* plugin is a flag for the org

* fix

* fixes

* now the ui is good

* fixes

* fix intersection objserver usage

* rename my migration

* remove unused stuff

* update defaults

* minor ui fixes

Author: viktormarinho

apps/docs/package.json

@@ -20,8 +20,6 @@
     "@astrojs/mdx": "^4.3.1",
     "@astrojs/react": "^4.3.0",
     "@tailwindcss/vite": "^4.0.7",
-    "@types/react": "^19.1.8",
-    "@types/react-dom": "^19.1.6",
     "astro": "^5.6.1",
     "lucide-react": "^0.525.0",
     "react": "^19.2.0",

apps/mesh/migrations/020-enabled-plugins.ts

@@ -0,0 +1,15 @@
+import { Kysely } from "kysely";
+
+export async function up(db: Kysely<unknown>): Promise<void> {
+  await db.schema
+    .alterTable("organization_settings")
+    .addColumn("enabled_plugins", "text")
+    .execute();
+}
+
+export async function down(db: Kysely<unknown>): Promise<void> {
+  await db.schema
+    .alterTable("organization_settings")
+    .dropColumn("enabled_plugins")
+    .execute();
+}

apps/mesh/migrations/index.ts

@@ -18,6 +18,7 @@ import * as migration016downstreamtokenclientinfo from "./016-downstream-token-c
 import * as migration017downstreamtokenremoveuserid from "./017-downstream-token-remove-userid.ts";
 import * as migration018dropgatewaytoolselectionstrategy from "./018-drop-gateway-tool-selection-strategy.ts";
 import * as migration019removegatewayisdefault from "./019-remove-gateway-is-default.ts";
+import * as migration020enabledplugins from "./020-enabled-plugins.ts";
 
 const migrations = {
   "001-initial-schema": migration001initialschema,
@@ -40,6 +41,7 @@ const migrations = {
   "018-drop-gateway-tool-selection-strategy":
     migration018dropgatewaytoolselectionstrategy,
   "019-remove-gateway-is-default": migration019removegatewayisdefault,
+  "020-enabled-plugins": migration020enabledplugins,
 } satisfies Record<string, Migration>;
 
 export default migrations;

apps/mesh/package.json

@@ -50,6 +50,7 @@
     "@deco/ui": "workspace:*",
     "@decocms/better-auth": "1.5.17",
     "@decocms/bindings": "workspace:*",
+    "@decocms/mesh-sdk": "workspace:*",
     "@decocms/runtime": "workspace:*",
     "@decocms/vite-plugin": "workspace:*",
     "@hookform/resolvers": "^5.2.2",
@@ -84,8 +85,6 @@
     "@tiptap/suggestion": "^3.13.0",
     "@types/bun": "^1.3.1",
     "@types/pg": "^8.15.6",
-    "@types/react": "^19.2.2",
-    "@types/react-dom": "^19.2.2",
     "@vercel/nft": "^1.1.1",
     "@vitejs/plugin-react": "^5.1.0",
     "ai": "^6.0.1",
@@ -117,7 +116,8 @@
     "vite-tsconfig-paths": "^5.1.4",
     "zod": "^4.0.0",
     "zod-from-json-schema": "^0.5.2",
-    "zustand": "^5.0.9"
+    "zustand": "^5.0.9",
+    "mesh-plugin-object-storage": "workspace:*"
   },
   "module": "src/index.ts",
   "keywords": [

apps/mesh/src/storage/organization-settings.ts

@@ -25,31 +25,43 @@ export class OrganizationSettingsStorage
           ? JSON.parse(record.sidebar_items)
           : record.sidebar_items
         : null,
+      enabled_plugins: record.enabled_plugins
+        ? typeof record.enabled_plugins === "string"
+          ? JSON.parse(record.enabled_plugins)
+          : record.enabled_plugins
+        : null,
       createdAt: record.createdAt,
       updatedAt: record.updatedAt,
     };
   }
 
   async upsert(
     organizationId: string,
-    data?: Partial<Pick<OrganizationSettings, "sidebar_items">>,
+    data?: Partial<
+      Pick<OrganizationSettings, "sidebar_items" | "enabled_plugins">
+    >,
   ): Promise<OrganizationSettings> {
     const now = new Date().toISOString();
     const sidebarItemsJson = data?.sidebar_items
       ? JSON.stringify(data.sidebar_items)
       : null;
+    const enabledPluginsJson = data?.enabled_plugins
+      ? JSON.stringify(data.enabled_plugins)
+      : null;
 
     await this.db
       .insertInto("organization_settings")
       .values({
         organizationId,
         sidebar_items: sidebarItemsJson,
+        enabled_plugins: enabledPluginsJson,
         createdAt: now,
         updatedAt: now,
       })
       .onConflict((oc) =>
         oc.column("organizationId").doUpdateSet({
           sidebar_items: sidebarItemsJson ? sidebarItemsJson : undefined,
+          enabled_plugins: enabledPluginsJson ? enabledPluginsJson : undefined,
           updatedAt: now,
         }),
       )
@@ -61,6 +73,7 @@ export class OrganizationSettingsStorage
       return {
         organizationId,
         sidebar_items: data?.sidebar_items ?? null,
+        enabled_plugins: data?.enabled_plugins ?? null,
         createdAt: now,
         updatedAt: now,
       };

apps/mesh/src/storage/ports.ts

@@ -40,7 +40,9 @@ export interface OrganizationSettingsStoragePort {
   get(organizationId: string): Promise<OrganizationSettings | null>;
   upsert(
     organizationId: string,
-    data?: Partial<Pick<OrganizationSettings, "sidebar_items">>,
+    data?: Partial<
+      Pick<OrganizationSettings, "sidebar_items" | "enabled_plugins">
+    >,
   ): Promise<OrganizationSettings>;
 }
 

apps/mesh/src/storage/types.ts

@@ -127,13 +127,15 @@ export interface SidebarItem {
 export interface OrganizationSettingsTable {
   organizationId: string;
   sidebar_items: JsonArray<SidebarItem[]> | null;
+  enabled_plugins: JsonArray<string[]> | null;
   createdAt: ColumnType<Date, Date | string, never>;
   updatedAt: ColumnType<Date, Date | string, Date | string>;
 }
 
 export interface OrganizationSettings {
   organizationId: string;
   sidebar_items: SidebarItem[] | null;
+  enabled_plugins: string[] | null;
   createdAt: Date | string;
   updatedAt: Date | string;
 }

apps/mesh/src/tools/client.ts

@@ -1,7 +1,20 @@
+/**
+ * Tool caller utilities re-exported from mesh-sdk for backwards compatibility.
+ * New code should import from @decocms/mesh-sdk directly.
+ */
+
 import type { ToolBinder } from "@/core/define-tool";
 import type z from "zod";
 import type { MCPMeshTools } from "./index.ts";
 
+// Re-export from mesh-sdk
+export {
+  createToolCaller,
+  UNKNOWN_CONNECTION_ID,
+  type ToolCaller,
+} from "@decocms/mesh-sdk";
+
+// Mesh-specific types that stay here
 export type MCPClient<
   TDefinition extends readonly ToolBinder<z.ZodTypeAny, z.ZodTypeAny>[],
 > = {
@@ -14,84 +27,3 @@ export type MCPClient<
 };
 
 export type MeshClient = MCPClient<MCPMeshTools>;
-
-export const UNKNOWN_CONNECTION_ID = "UNKNOWN_CONNECTION_ID";
-
-const parseSSEResponseAsJson = async (response: Response) => {
-  /**
-   * example:
-   * 'event: message\ndata: {"result":{"content":[{"type":"text","text":"{\\"organizations\\":[{\\"id\\":\\"1\\",\\"name\\":\\"Organization 1\\",\\"slug\\":\\"organization-1\\",\\"createdAt\\":\\"2025-11-03T18:12:46.700Z\\"}]}"}],"structuredContent":{"organizations":[{"id":"1","name":"Organization 1","slug":"organization-1","createdAt":"2025-11-03T18:12:46.700Z"}]}},"jsonrpc":"2.0","id":1}\n\n'
-   */
-  const raw = await response.text();
-  const data = raw.split("\n").find((line) => line.startsWith("data: "));
-
-  if (!data) {
-    throw new Error("No data received from the server");
-  }
-
-  const json = JSON.parse(data.replace("data: ", ""));
-
-  return json;
-};
-
-/**
- * Type for a generic tool caller function
- */
-export type ToolCaller<TArgs = unknown, TOutput = unknown> = (
-  toolName: string,
-  args: TArgs,
-) => Promise<TOutput>;
-
-/**
- * Create a unified tool caller
- *
- * - If connectionId is provided: routes to /mcp/:connectionId (connection-specific tools)
- * - If connectionId is omitted/null: routes to /mcp (mesh API tools)
- *
- * This abstracts the routing logic so hooks don't need to know if they're
- * calling mesh tools or connection-specific tools.
- */
-export function createToolCaller<TArgs = unknown, TOutput = unknown>(
-  connectionId?: string,
-): ToolCaller<TArgs, TOutput> {
-  if (connectionId === UNKNOWN_CONNECTION_ID) {
-    return (async () => {}) as unknown as ToolCaller<TArgs, TOutput>;
-  }
-
-  const endpoint = connectionId ? `/mcp/${connectionId}` : "/mcp";
-
-  return async (toolName: string, args: TArgs): Promise<TOutput> => {
-    const response = await fetch(endpoint, {
-      method: "POST",
-      body: JSON.stringify({
-        jsonrpc: "2.0",
-        id: 1,
-        method: "tools/call",
-        params: {
-          name: toolName,
-          arguments: args,
-        },
-      }),
-      headers: {
-        "Content-Type": "application/json",
-        Accept: "application/json, text/event-stream",
-      },
-      credentials: "include",
-    });
-
-    if (!response.ok) {
-      throw new Error(`HTTP error! status: ${response.status}`);
-    }
-
-    const json =
-      response.headers.get("Content-Type") === "application/json"
-        ? await response.json()
-        : await parseSSEResponseAsJson(response);
-
-    if (json.result?.isError) {
-      throw new Error(json.result.content?.[0]?.text || "Tool call failed");
-    }
-
-    return json.result?.structuredContent || json.result;
-  };
-}

apps/mesh/src/tools/organization/settings-get.ts

@@ -12,6 +12,7 @@ export const ORGANIZATION_SETTINGS_GET = defineTool({
   outputSchema: z.object({
     organizationId: z.string(),
     sidebar_items: z.array(SidebarItemSchema).nullable().optional(),
+    enabled_plugins: z.array(z.string()).nullable().optional(),
     createdAt: z.string().datetime().optional().describe("ISO 8601 timestamp"),
     updatedAt: z.string().datetime().optional().describe("ISO 8601 timestamp"),
   }),

apps/mesh/src/tools/organization/settings-update.ts

@@ -10,11 +10,13 @@ export const ORGANIZATION_SETTINGS_UPDATE = defineTool({
   inputSchema: z.object({
     organizationId: z.string(),
     sidebar_items: z.array(SidebarItemSchema).optional(),
+    enabled_plugins: z.array(z.string()).optional(),
   }),
 
   outputSchema: z.object({
     organizationId: z.string(),
     sidebar_items: z.array(SidebarItemSchema).nullable().optional(),
+    enabled_plugins: z.array(z.string()).nullable().optional(),
     createdAt: z.string().datetime().describe("ISO 8601 timestamp"),
     updatedAt: z.string().datetime().describe("ISO 8601 timestamp"),
   }),
@@ -31,6 +33,7 @@ export const ORGANIZATION_SETTINGS_UPDATE = defineTool({
       input.organizationId,
       {
         sidebar_items: input.sidebar_items,
+        enabled_plugins: input.enabled_plugins,
       },
     );