Method ExecuteRemotePlugin

server/handler_remote.go:194–227

ExecuteRemotePlugin executes a plugin on the server and returns the output. Security (C1): Requires at least "user" role — readonly users cannot execute plugins.

(ctx context.Context, req *pb.ExecuteRemotePluginRequest)

// ExecuteRemotePlugin executes a plugin on the server and returns the output.
// Security (C1): Requires at least "user" role — readonly users cannot execute plugins.
func (h *Handler) ExecuteRemotePlugin(ctx context.Context, req *pb.ExecuteRemotePluginRequest) (*pb.ExecuteRemotePluginResponse, error) {
	// Access control: readonly users cannot execute plugins
	if user := UserFromContext(ctx); user != nil && !user.HasRole(RoleUser) {
		return nil, status.Errorf(codes.PermissionDenied, "insufficient permissions: role %q cannot execute plugins", user.Role)
	}

	if h.pluginManager == nil {
		return nil, status.Errorf(codes.Unavailable, "%s", i18n.T("server.remote.plugin_unavailable"))
	}
	if req.PluginName == "" {
		return nil, status.Errorf(codes.InvalidArgument, "%s", i18n.T("server.remote.plugin_name_required"))
	}

	plugin, ok := h.pluginManager.GetPlugin(req.PluginName)
	if !ok {
		return nil, status.Errorf(codes.NotFound, "%s", i18n.T("server.remote.plugin_not_found", req.PluginName))
	}

	h.logger.Info(i18n.T("server.remote.plugin_executing"),
		zap.String("plugin", req.PluginName),
		zap.Strings("args", req.Args),
	)

	output, err := plugin.Execute(ctx, req.Args)
	resp := &pb.ExecuteRemotePluginResponse{
		Output: output,
		Done:   true,
	}
	if err != nil {
		resp.Error = err.Error()
	}

	return resp, nil
}

// DownloadPlugin streams the plugin binary to the client.
func (h *Handler) DownloadPlugin(req *pb.DownloadPluginRequest, stream pb.ChatCLIService_DownloadPluginServer) error {