Method ListRemotePlugins

server/handler_remote.go:28–56

============================================================================= Remote Resource Discovery RPCs ============================================================================= ListRemotePlugins returns plugins installed on the server. Security (L12): Filters by role — admin sees all, user

(ctx context.Context, req *pb.ListRemotePluginsRequest)

// ListRemotePlugins returns plugins installed on the server.
// Security (L12): Filters by role — admin sees all, user sees non-internal, readonly sees none.
func (h *Handler) ListRemotePlugins(ctx context.Context, req *pb.ListRemotePluginsRequest) (*pb.ListRemotePluginsResponse, error) {
	if h.pluginManager == nil {
		return &pb.ListRemotePluginsResponse{}, nil
	}

	// Access control based on role
	user := UserFromContext(ctx)
	if user != nil && user.Role == RoleReadonly {
		return &pb.ListRemotePluginsResponse{}, nil // readonly sees nothing
	}

	plist := h.pluginManager.GetPlugins()
	result := make([]*pb.PluginInfo, 0, len(plist))
	for _, p := range plist {
		// Filter internal plugins (prefixed with _) for non-admin users
		if user != nil && user.Role != RoleAdmin && strings.HasPrefix(p.Name(), "_") {
			continue
		}
		result = append(result, &pb.PluginInfo{
			Name:        p.Name(),
			Description: p.Description(),
			Usage:       p.Usage(),
			Version:     p.Version(),
			Schema:      p.Schema(),
		})
	}

	return &pb.ListRemotePluginsResponse{Plugins: result}, nil
}

// ListRemoteAgents returns all agents available on the server.
func (h *Handler) ListRemoteAgents(ctx context.Context, req *pb.ListRemoteAgentsRequest) (*pb.ListRemoteAgentsResponse, error) {