@bevel-software/platform-core-backend 0.14.0 → 0.19.0

package/dist/modules/plugins/plugins.service.d.ts

@@ -3,6 +3,8 @@ import type { IAccessControl } from '../access/access-control.interface.js';
 import type { ISkillService } from '../skills/skills.contract.js';
 import type { IToolManualService } from '../tool-manuals/tool-manuals.contract.js';
 import type { PluginCatalogEntry, IPluginIndexService } from './plugins.contract.js';
+import type { PluginLinkIndex } from './plugin-links.js';
+import type { PluginSource } from './discovery/plugin-source.js';
 /**
  * The plugin index: every plugin folder in the default-branch KB, with its
  * caller-independent totals and access principals.
@@ -34,8 +36,24 @@ export declare class PluginIndexService implements IPluginIndexService {
     private readonly skillService;
     private readonly toolManualService;
     private readonly kbDirName;
+    /** Where plugins come from — the one discovery every catalog shares. */
+    private readonly source;
+    /**
+     * The link index, when the deployment has one: a plugin's skill count is
+     * then inline PLUS linked. Optional so hosts composing their own service
+     * set (and older tests) keep the inline-only count.
+     */
+    private readonly links?;
     private readonly cache;
-    constructor(workspaceService: WorkspaceService, accessControl: IAccessControl, skillService: ISkillService, toolManualService: IToolManualService, kbDirName: string, now?: () => number);
+    constructor(workspaceService: WorkspaceService, accessControl: IAccessControl, skillService: ISkillService, toolManualService: IToolManualService, kbDirName: string, 
+    /** Where plugins come from — the one discovery every catalog shares. */
+    source: PluginSource, now?: () => number, 
+    /**
+     * The link index, when the deployment has one: a plugin's skill count is
+     * then inline PLUS linked. Optional so hosts composing their own service
+     * set (and older tests) keep the inline-only count.
+     */
+    links?: PluginLinkIndex | undefined);
     invalidate(): void;
     catalog(): Promise<PluginCatalogEntry[]>;
     /**
@@ -50,11 +68,72 @@ export declare class PluginIndexService implements IPluginIndexService {
     * without storing it.
     */
     private build;
-    /** name → repo-relative plugin folder (always a single-element list). */
+    /**
+     * name → repo-relative plugin folder (always a single-element list), from
+     * the configured source. Personal folders live under Plugins/ but are not
+     * plugins: one exists per person, private by construction, and listing them
+     * would put a locked row per employee in everyone's index. `exists` is the
+     * source's existence rule (see `DiscoveredPlugin`) — for native plugins,
+     * the `access.md` the class doc describes.
+     */
     private scanFolders;
-    private countSkills;
+    /**
+     * Two counts from ONE read of the link index — the membership is built
+     * once per cold catalog, not once per count: `TtlCache` has no
+     * single-flight, so two concurrent readers of an empty cache would each
+     * discover the tree and resolve every linked skill's access.
+     *
+     *  - `skillCounts`: with links, a skill counts for EVERY plugin that holds
+     *    it — inline in its folder, or linked from a manifest. Personal folders
+     *    are already absent from the membership (they are places, not plugins).
+     *  - `brokenLinkCounts`: how many linked skills each plugin's members
+     *    cannot read — memberships reported as linked but not granted. From the
+     *    UNFILTERED index, so the count reaches the plugin's managers even when
+     *    the missing grant locks them out of the skill too.
+     *
+     * Without a link index: skills bucket by folder, and no link can be broken.
+     */
+    private countThroughLinks;
+    /**
+     * Tools belong to the plugin whose FOLDER holds them — matched by path
+     * prefix against the discovered folders, not by `pluginOfPath`'s
+     * second-segment rule, so a dialect plugin nested three folders deep still
+     * counts the servers its bundle expands.
+     *
+     * And to every plugin one of whose LINKED ROOTS holds them. A root is a
+     * skill folder or a folder of skills, and a `.tool` manual sitting beside
+     * those skills reaches the plugin the same way they do — the plugin's page
+     * lists it, so the plugin's total has to count it. Once per plugin: a root
+     * inside the plugin's own folder says nothing the folder did not say first.
+     *
+     * Without a link index, inline only — the same degradation `countThroughLinks`
+     * makes for skills. A host that composes no link index has asked for totals
+     * that count what each plugin's folder holds, and a catalog that counted a
+     * plugin's linked tools while leaving its linked skills out would describe a
+     * plugin that exists nowhere.
+     */
     private countTools;
+    /**
+     * What the plugin's own access.md says of itself — see
+     * `PluginCatalogEntry.isPrivate`. Read from disk rather than through the
+     * resolver: the mark reflects the file's frontmatter as written. An
+     * ABSENT file makes no statement (false: a plugin discovered by its
+     * manifest may have no rules yet); any other failure to read it is a real
+     * one and propagates, so the catalog never claims a privacy verdict it
+     * could not inspect — `build` degrades the whole read, as for any fault.
+     */
+    private readsAsPrivate;
 }
 /** The default-branch workspace id every plugin resolution runs against. */
 export declare function pluginsWorkspaceId(): string;
+/**
+ * A plugin folder's path BELOW the plugins root: `GTM`, or `teams/deep`.
+ *
+ * The key a join request is cut by — its branch, and the row that records it
+ * — so it lives here rather than in any one of the three places that need to
+ * compute it. The whole path, not the basename, so two plugins whose folders
+ * share a basename can never share a branch; and it survives a rename of the
+ * plugin's identity, which moves no folder.
+ */
+export declare function pluginFolderBelowRoot(folder: string): string;
 //# sourceMappingURL=plugins.service.d.ts.map

package/dist/modules/plugins/plugins.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"plugins.service.d.ts","sourceRoot":"","sources":["../../../src/modules/plugins/plugins.service.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AAE1E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uCAAuC,CAAC;AAC5E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAClE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,0CAA0C,CAAC;AAEnF,OAAO,KAAK,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAIrF;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,qBAAa,kBAAmB,YAAW,mBAAmB;IAI1D,OAAO,CAAC,QAAQ,CAAC,gBAAgB;IACjC,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,YAAY;IAC7B,OAAO,CAAC,QAAQ,CAAC,iBAAiB;IAClC,OAAO,CAAC,QAAQ,CAAC,SAAS;IAP5B,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAiC;gBAGpC,gBAAgB,EAAE,gBAAgB,EAClC,aAAa,EAAE,cAAc,EAC7B,YAAY,EAAE,aAAa,EAC3B,iBAAiB,EAAE,kBAAkB,EACrC,SAAS,EAAE,MAAM,EAClC,GAAG,GAAE,MAAM,MAAiB;IAK9B,UAAU,IAAI,IAAI;IAIZ,OAAO,IAAI,OAAO,CAAC,kBAAkB,EAAE,CAAC;IAkB7C;;;;;;;;;;MAUE;YACW,KAAK;IAyCnB,yEAAyE;YAC3D,WAAW;YAkCX,WAAW;YAMX,UAAU;CAGzB;AAaD,4EAA4E;AAC5E,wBAAgB,kBAAkB,IAAI,MAAM,CAE3C"}
+{"version":3,"file":"plugins.service.d.ts","sourceRoot":"","sources":["../../../src/modules/plugins/plugins.service.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AAE1E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uCAAuC,CAAC;AAC5E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAClE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,0CAA0C,CAAC;AAEnF,OAAO,KAAK,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AACrF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACzD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAcjE;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,qBAAa,kBAAmB,YAAW,mBAAmB;IAI1D,OAAO,CAAC,QAAQ,CAAC,gBAAgB;IACjC,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,YAAY;IAC7B,OAAO,CAAC,QAAQ,CAAC,iBAAiB;IAClC,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,wEAAwE;IACxE,OAAO,CAAC,QAAQ,CAAC,MAAM;IAEvB;;;;OAIG;IACH,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC;IAhBzB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAiC;gBAGpC,gBAAgB,EAAE,gBAAgB,EAClC,aAAa,EAAE,cAAc,EAC7B,YAAY,EAAE,aAAa,EAC3B,iBAAiB,EAAE,kBAAkB,EACrC,SAAS,EAAE,MAAM;IAClC,wEAAwE;IACvD,MAAM,EAAE,YAAY,EACrC,GAAG,GAAE,MAAM,MAAiB;IAC5B;;;;OAIG;IACc,KAAK,CAAC,EAAE,eAAe,YAAA;IAK1C,UAAU,IAAI,IAAI;IAIZ,OAAO,IAAI,OAAO,CAAC,kBAAkB,EAAE,CAAC;IAqB7C;;;;;;;;;;MAUE;YACW,KAAK;IA+CnB;;;;;;;OAOG;YACW,WAAW;IAuBzB;;;;;;;;;;;;;;;OAeG;YACW,iBAAiB;IAsB/B;;;;;;;;;;;;;;;;;OAiBG;YACW,UAAU;IAmBxB;;;;;;;;OAQG;YACW,cAAc;CAQ7B;AAkBD,4EAA4E;AAC5E,wBAAgB,kBAAkB,IAAI,MAAM,CAE3C;AAED;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAE5D"}

package/dist/modules/plugins/plugins.service.js

@@ -1,6 +1,10 @@
-import path from 'node:path';
 import fs from 'node:fs/promises';
-import { DEFAULT_BRANCH, PLUGINS_DIR, pluginOfPath, isPersonalPluginFolder, } from '@bevel-software/platform-shared';
+import { logger } from '../../shared/logging.js';
+const log = logger('plugins');
+import path from 'node:path';
+import { DEFAULT_BRANCH, } from '@bevel-software/platform-shared';
+import { isPrivateAccessMd } from '../access-model/access-grammar.js';
+import { isAbsence } from '../../shared/fs.contract.js';
 import { workspaceIdForBranch } from '../../shared/workspace-id.js';
 import { TtlCache } from '../../shared/ttl-cache.js';
 const CACHE_TTL_MS = 60_000;
@@ -35,13 +39,25 @@ export class PluginIndexService {
     skillService;
     toolManualService;
     kbDirName;
+    source;
+    links;
     cache;
-    constructor(workspaceService, accessControl, skillService, toolManualService, kbDirName, now = Date.now) {
+    constructor(workspaceService, accessControl, skillService, toolManualService, kbDirName, 
+    /** Where plugins come from — the one discovery every catalog shares. */
+    source, now = Date.now, 
+    /**
+     * The link index, when the deployment has one: a plugin's skill count is
+     * then inline PLUS linked. Optional so hosts composing their own service
+     * set (and older tests) keep the inline-only count.
+     */
+    links) {
         this.workspaceService = workspaceService;
         this.accessControl = accessControl;
         this.skillService = skillService;
         this.toolManualService = toolManualService;
         this.kbDirName = kbDirName;
+        this.source = source;
+        this.links = links;
         this.cache = new TtlCache(CACHE_TTL_MS, now);
     }
     invalidate() {
@@ -51,6 +67,9 @@ export class PluginIndexService {
         const cached = this.cache.get();
         if (cached)
             return cached;
+        // See `TtlCache.begin`: taken before the read so an `invalidate()` that
+        // lands mid-build discards this result instead of being overwritten by it.
+        const token = this.cache.begin();
         const entries = await this.build();
         // A failed scan and a KB with genuinely no plugin folders both serve `[]`,
         // but only the second is a fact worth holding for the TTL. Caching the
@@ -61,7 +80,7 @@ export class PluginIndexService {
         // and the next caller retries.
         if (entries === null)
             return [];
-        this.cache.set(entries);
+        this.cache.set(entries, token);
         return entries;
     }
     // --- internal --------------------------------------------------------------
@@ -80,88 +99,187 @@ export class PluginIndexService {
         try {
             const wsId = (await this.workspaceService.getOrCreateForBranch(DEFAULT_BRANCH)).id;
             const kbRoot = path.join(await this.workspaceService.getWorkspacePath(wsId), this.kbDirName);
-            const folders = await this.scanFolders(kbRoot);
-            if (folders.size === 0)
+            const scanned = await this.scanFolders(kbRoot);
+            if (scanned.size === 0)
                 return [];
-            const [skillCounts, toolCounts] = await Promise.all([
-                this.countSkills(),
-                this.countTools(),
+            const folders = new Map([...scanned].map(([name, p]) => [name, p.folders]));
+            const [{ skillCounts, brokenLinkCounts }, toolCounts] = await Promise.all([
+                this.countThroughLinks(folders),
+                this.countTools(scanned),
             ]);
             const entries = [];
             for (const [name, pluginFolders] of folders) {
                 // One folder, one access boundary — the folder IS the plugin.
                 const [primary] = pluginFolders;
-                const [owners, writers, readers] = await Promise.all([
+                const [owners, writers, readers, isPrivate] = await Promise.all([
                     this.accessControl.eligibleOwners(wsId, primary),
                     this.accessControl.eligibleWriters(wsId, primary),
                     this.accessControl.eligibleReaders(wsId, primary),
+                    this.readsAsPrivate(path.join(kbRoot, primary, 'access.md')),
                 ]);
                 entries.push({
                     name,
+                    displayName: scanned.get(name)?.displayName ?? name,
                     folders: pluginFolders,
+                    linkedRoots: scanned.get(name)?.linkedRoots ?? [],
+                    linksAreManaged: scanned.get(name)?.linksAreManaged ?? false,
                     skillCount: skillCounts.get(name) ?? 0,
                     toolCount: toolCounts.get(name) ?? 0,
+                    brokenLinks: brokenLinkCounts.get(name) ?? 0,
                     owners,
                     writers,
                     readers,
+                    isPrivate,
+                    warnings: scanned.get(name)?.warnings ?? [],
                 });
             }
             return entries.sort((a, b) => a.name.localeCompare(b.name));
         }
         catch (err) {
-            console.warn(`[plugins] plugin index unavailable: ${err instanceof Error ? err.message : String(err)}`);
+            log.warn(`plugin index unavailable: ${err instanceof Error ? err.message : String(err)}`);
             return null;
         }
     }
-    /** name → repo-relative plugin folder (always a single-element list). */
+    /**
+     * name → repo-relative plugin folder (always a single-element list), from
+     * the configured source. Personal folders live under Plugins/ but are not
+     * plugins: one exists per person, private by construction, and listing them
+     * would put a locked row per employee in everyone's index. `exists` is the
+     * source's existence rule (see `DiscoveredPlugin`) — for native plugins,
+     * the `access.md` the class doc describes.
+     */
     async scanFolders(kbRoot) {
         const byName = new Map();
-        let children;
-        try {
-            children = await fs.readdir(path.join(kbRoot, PLUGINS_DIR), { withFileTypes: true });
+        const discovered = await this.source.discover(kbRoot);
+        for (const w of discovered.warnings)
+            log.warn(w);
+        for (const plugin of discovered.plugins) {
+            if (plugin.personal || !plugin.exists)
+                continue;
+            byName.set(plugin.name, {
+                folders: [plugin.folder],
+                linkedRoots: plugin.linkedRoots,
+                linksAreManaged: plugin.linksAreManaged,
+                displayName: plugin.displayName,
+                // Discovery prefixes what it says about one plugin with that
+                // plugin's folder; the page names the plugin already, so the
+                // prefix goes. Whatever names no folder (an unreadable registry)
+                // stays in the log alone.
+                warnings: discovered.warnings
+                    .filter((w) => w.startsWith(`${plugin.folder}: `) || w.startsWith(`${plugin.folder}/`))
+                    .map((w) => w.slice(plugin.folder.length).replace(/^[:/]\s*/, '')),
+            });
         }
-        catch {
-            return byName; // a KB without a `Plugins/` root simply has no plugins
+        return byName;
+    }
+    /**
+     * Two counts from ONE read of the link index — the membership is built
+     * once per cold catalog, not once per count: `TtlCache` has no
+     * single-flight, so two concurrent readers of an empty cache would each
+     * discover the tree and resolve every linked skill's access.
+     *
+     *  - `skillCounts`: with links, a skill counts for EVERY plugin that holds
+     *    it — inline in its folder, or linked from a manifest. Personal folders
+     *    are already absent from the membership (they are places, not plugins).
+     *  - `brokenLinkCounts`: how many linked skills each plugin's members
+     *    cannot read — memberships reported as linked but not granted. From the
+     *    UNFILTERED index, so the count reaches the plugin's managers even when
+     *    the missing grant locks them out of the skill too.
+     *
+     * Without a link index: skills bucket by folder, and no link can be broken.
+     */
+    async countThroughLinks(folders) {
+        const skillCounts = new Map();
+        const brokenLinkCounts = new Map();
+        if (!this.links) {
+            // `undefined` is the documented GLOBAL, unfiltered mode — counts are a
+            // property of the plugin, not of who is asking.
+            return {
+                skillCounts: bucketByFolder(await this.skillService.listSkills(undefined), folders),
+                brokenLinkCounts,
+            };
         }
-        const candidates = children.filter((child) => child.isDirectory() &&
-            !child.name.startsWith('.') &&
-            // Personal folders live under Plugins/ but are not plugins: one exists
-            // per person, private by construction, and listing them would put a
-            // locked row per employee in everyone's index.
-            !isPersonalPluginFolder(child.name));
-        // A plugin exists exactly when its folder carries an `access.md` (see the
-        // class doc) — stat that file, don't trust the directory.
-        const verdicts = await Promise.all(candidates.map(async (child) => {
-            try {
-                return (await fs.stat(path.join(kbRoot, PLUGINS_DIR, child.name, 'access.md'))).isFile();
+        for (const memberships of (await this.links.membership()).bySkill.values()) {
+            for (const m of memberships) {
+                skillCounts.set(m.name, (skillCounts.get(m.name) ?? 0) + 1);
+                if (m.linked && !m.granted)
+                    brokenLinkCounts.set(m.name, (brokenLinkCounts.get(m.name) ?? 0) + 1);
             }
-            catch {
-                return false;
-            }
-        }));
-        candidates.forEach((child, i) => {
-            if (verdicts[i])
-                byName.set(child.name, [`${PLUGINS_DIR}/${child.name}`]);
-        });
-        return byName;
+        }
+        return { skillCounts, brokenLinkCounts };
     }
-    async countSkills() {
-        // `undefined` is the documented GLOBAL, unfiltered mode — counts are a
-        // property of the plugin, not of who is asking.
-        return bucketByPlugin(await this.skillService.listSkills(undefined));
+    /**
+     * Tools belong to the plugin whose FOLDER holds them — matched by path
+     * prefix against the discovered folders, not by `pluginOfPath`'s
+     * second-segment rule, so a dialect plugin nested three folders deep still
+     * counts the servers its bundle expands.
+     *
+     * And to every plugin one of whose LINKED ROOTS holds them. A root is a
+     * skill folder or a folder of skills, and a `.tool` manual sitting beside
+     * those skills reaches the plugin the same way they do — the plugin's page
+     * lists it, so the plugin's total has to count it. Once per plugin: a root
+     * inside the plugin's own folder says nothing the folder did not say first.
+     *
+     * Without a link index, inline only — the same degradation `countThroughLinks`
+     * makes for skills. A host that composes no link index has asked for totals
+     * that count what each plugin's folder holds, and a catalog that counted a
+     * plugin's linked tools while leaving its linked skills out would describe a
+     * plugin that exists nowhere.
+     */
+    async countTools(scanned) {
+        const counts = new Map();
+        const plugins = [...scanned].map(([name, p]) => ({
+            name,
+            folders: p.folders,
+            roots: this.links ? p.linkedRoots : [],
+        }));
+        const bump = (name) => counts.set(name, (counts.get(name) ?? 0) + 1);
+        for (const tool of await this.toolManualService.listAllSummaries()) {
+            const inline = plugins.find((p) => p.folders.some((f) => tool.path.startsWith(`${f}/`)));
+            if (inline)
+                bump(inline.name);
+            for (const p of plugins) {
+                if (p === inline)
+                    continue;
+                if (p.roots.some((root) => tool.path.startsWith(`${root}/`)))
+                    bump(p.name);
+            }
+        }
+        return counts;
     }
-    async countTools() {
-        return bucketByPlugin(await this.toolManualService.listAllSummaries());
+    /**
+     * What the plugin's own access.md says of itself — see
+     * `PluginCatalogEntry.isPrivate`. Read from disk rather than through the
+     * resolver: the mark reflects the file's frontmatter as written. An
+     * ABSENT file makes no statement (false: a plugin discovered by its
+     * manifest may have no rules yet); any other failure to read it is a real
+     * one and propagates, so the catalog never claims a privacy verdict it
+     * could not inspect — `build` degrades the whole read, as for any fault.
+     */
+    async readsAsPrivate(accessMdPath) {
+        try {
+            return isPrivateAccessMd(await fs.readFile(accessMdPath, 'utf8'));
+        }
+        catch (err) {
+            if (isAbsence(err))
+                return false;
+            throw err;
+        }
     }
 }
-/** Count items per plugin folder name; ungrouped items (`null`) count nowhere. */
-function bucketByPlugin(items) {
+/**
+ * Count items per plugin by FOLDER PREFIX against the discovered folders —
+ * not by `pluginOfPath`'s second-segment rule, which would file a nested
+ * plugin's skills under its grouping folder. Items in no plugin count nowhere.
+ */
+function bucketByFolder(items, folders) {
     const counts = new Map();
+    const byFolder = [...folders.entries()].map(([name, [folder]]) => ({ name, prefix: `${folder}/` }));
     for (const item of items) {
-        const plugin = pluginOfPath(item.path);
-        if (plugin === null)
+        const owner = byFolder.find((f) => item.path.startsWith(f.prefix));
+        if (!owner)
             continue;
-        counts.set(plugin, (counts.get(plugin) ?? 0) + 1);
+        counts.set(owner.name, (counts.get(owner.name) ?? 0) + 1);
     }
     return counts;
 }
@@ -169,4 +287,16 @@ function bucketByPlugin(items) {
 export function pluginsWorkspaceId() {
     return workspaceIdForBranch(DEFAULT_BRANCH);
 }
+/**
+ * A plugin folder's path BELOW the plugins root: `GTM`, or `teams/deep`.
+ *
+ * The key a join request is cut by — its branch, and the row that records it
+ * — so it lives here rather than in any one of the three places that need to
+ * compute it. The whole path, not the basename, so two plugins whose folders
+ * share a basename can never share a branch; and it survives a rename of the
+ * plugin's identity, which moves no folder.
+ */
+export function pluginFolderBelowRoot(folder) {
+    return folder.slice(folder.indexOf('/') + 1);
+}
 //# sourceMappingURL=plugins.service.js.map

package/dist/modules/plugins/plugins.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"plugins.service.js","sourceRoot":"","sources":["../../../src/modules/plugins/plugins.service.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAElC,OAAO,EACL,cAAc,EACd,WAAW,EACX,YAAY,EACZ,sBAAsB,GACvB,MAAM,iCAAiC,CAAC;AAEzC,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAIpE,OAAO,EAAE,QAAQ,EAAE,MAAM,2BAA2B,CAAC;AAGrD,MAAM,YAAY,GAAG,MAAM,CAAC;AAE5B;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,OAAO,kBAAkB;IAIV;IACA;IACA;IACA;IACA;IAPF,KAAK,CAAiC;IAEvD,YACmB,gBAAkC,EAClC,aAA6B,EAC7B,YAA2B,EAC3B,iBAAqC,EACrC,SAAiB,EAClC,MAAoB,IAAI,CAAC,GAAG;QALX,qBAAgB,GAAhB,gBAAgB,CAAkB;QAClC,kBAAa,GAAb,aAAa,CAAgB;QAC7B,iBAAY,GAAZ,YAAY,CAAe;QAC3B,sBAAiB,GAAjB,iBAAiB,CAAoB;QACrC,cAAS,GAAT,SAAS,CAAQ;QAGlC,IAAI,CAAC,KAAK,GAAG,IAAI,QAAQ,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;IAC/C,CAAC;IAED,UAAU;QACR,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;IAC1B,CAAC;IAED,KAAK,CAAC,OAAO;QACX,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QAChC,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;QAC1B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QACnC,2EAA2E;QAC3E,uEAAuE;QACvE,yEAAyE;QACzE,mEAAmE;QACnE,2EAA2E;QAC3E,yEAAyE;QACzE,+BAA+B;QAC/B,IAAI,OAAO,KAAK,IAAI;YAAE,OAAO,EAAE,CAAC;QAChC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACxB,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,8EAA8E;IAE7E;;;;;;;;;;MAUE;IACK,KAAK,CAAC,KAAK;QACjB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,gBAAgB,CAAC,oBAAoB,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC;YACnF,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,gBAAgB,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;YAE7F,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;YAC/C,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC;gBAAE,OAAO,EAAE,CAAC;YAElC,MAAM,CAAC,WAAW,EAAE,UAAU,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;gBAClD,IAAI,CAAC,WAAW,EAAE;gBAClB,IAAI,CAAC,UAAU,EAAE;aAClB,CAAC,CAAC;YAEH,MAAM,OAAO,GAAyB,EAAE,CAAC;YACzC,KAAK,MAAM,CAAC,IAAI,EAAE,aAAa,CAAC,IAAI,OAAO,EAAE,CAAC;gBAC5C,8DAA8D;gBAC9D,MAAM,CAAC,OAAO,CAAC,GAAG,aAAa,CAAC;gBAChC,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;oBACnD,IAAI,CAAC,aAAa,CAAC,cAAc,CAAC,IAAI,EAAE,OAAO,CAAC;oBAChD,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC;oBACjD,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC;iBAClD,CAAC,CAAC;gBACH,OAAO,CAAC,IAAI,CAAC;oBACX,IAAI;oBACJ,OAAO,EAAE,aAAa;oBACtB,UAAU,EAAE,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;oBACtC,SAAS,EAAE,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;oBACpC,MAAM;oBACN,OAAO;oBACP,OAAO;iBACR,CAAC,CAAC;YACL,CAAC;YACD,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAC9D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CACV,uCAAuC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAC1F,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,yEAAyE;IACjE,KAAK,CAAC,WAAW,CAAC,MAAc;QACtC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAoB,CAAC;QAC3C,IAAI,QAAkB,CAAC;QACvB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QACvF,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,MAAM,CAAC,CAAC,uDAAuD;QACxE,CAAC;QACD,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,CAChC,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,CAAC,WAAW,EAAE;YACnB,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAC3B,uEAAuE;YACvE,oEAAoE;YACpE,+CAA+C;YAC/C,CAAC,sBAAsB,CAAC,KAAK,CAAC,IAAI,CAAC,CACtC,CAAC;QACF,0EAA0E;QAC1E,0DAA0D;QAC1D,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,CAChC,UAAU,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;YAC7B,IAAI,CAAC;gBACH,OAAO,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,EAAE,KAAK,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;YAC3F,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC,CAAC,CACH,CAAC;QACF,UAAU,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE;YAC9B,IAAI,QAAQ,CAAC,CAAC,CAAC;gBAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,GAAG,WAAW,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAC5E,CAAC,CAAC,CAAC;QACH,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,KAAK,CAAC,WAAW;QACvB,uEAAuE;QACvE,gDAAgD;QAChD,OAAO,cAAc,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;IACvE,CAAC;IAEO,KAAK,CAAC,UAAU;QACtB,OAAO,cAAc,CAAC,MAAM,IAAI,CAAC,iBAAiB,CAAC,gBAAgB,EAAE,CAAC,CAAC;IACzE,CAAC;CACF;AAED,kFAAkF;AAClF,SAAS,cAAc,CAAC,KAAyB;IAC/C,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,MAAM,KAAK,IAAI;YAAE,SAAS;QAC9B,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACpD,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,kBAAkB;IAChC,OAAO,oBAAoB,CAAC,cAAc,CAAC,CAAC;AAC9C,CAAC"}
+{"version":3,"file":"plugins.service.js","sourceRoot":"","sources":["../../../src/modules/plugins/plugins.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AAEjD,MAAM,GAAG,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;AAC9B,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EACL,cAAc,GACf,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,iBAAiB,EAAE,MAAM,mCAAmC,CAAC;AACtE,OAAO,EAAE,SAAS,EAAE,MAAM,6BAA6B,CAAC;AAExD,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAIpE,OAAO,EAAE,QAAQ,EAAE,MAAM,2BAA2B,CAAC;AAKrD,MAAM,YAAY,GAAG,MAAM,CAAC;AAY5B;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,OAAO,kBAAkB;IAIV;IACA;IACA;IACA;IACA;IAEA;IAOA;IAhBF,KAAK,CAAiC;IAEvD,YACmB,gBAAkC,EAClC,aAA6B,EAC7B,YAA2B,EAC3B,iBAAqC,EACrC,SAAiB;IAClC,wEAAwE;IACvD,MAAoB,EACrC,MAAoB,IAAI,CAAC,GAAG;IAC5B;;;;OAIG;IACc,KAAuB;QAbvB,qBAAgB,GAAhB,gBAAgB,CAAkB;QAClC,kBAAa,GAAb,aAAa,CAAgB;QAC7B,iBAAY,GAAZ,YAAY,CAAe;QAC3B,sBAAiB,GAAjB,iBAAiB,CAAoB;QACrC,cAAS,GAAT,SAAS,CAAQ;QAEjB,WAAM,GAAN,MAAM,CAAc;QAOpB,UAAK,GAAL,KAAK,CAAkB;QAExC,IAAI,CAAC,KAAK,GAAG,IAAI,QAAQ,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;IAC/C,CAAC;IAED,UAAU;QACR,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;IAC1B,CAAC;IAED,KAAK,CAAC,OAAO;QACX,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QAChC,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;QAC1B,wEAAwE;QACxE,2EAA2E;QAC3E,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACjC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QACnC,2EAA2E;QAC3E,uEAAuE;QACvE,yEAAyE;QACzE,mEAAmE;QACnE,2EAA2E;QAC3E,yEAAyE;QACzE,+BAA+B;QAC/B,IAAI,OAAO,KAAK,IAAI;YAAE,OAAO,EAAE,CAAC;QAChC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC/B,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,8EAA8E;IAE7E;;;;;;;;;;MAUE;IACK,KAAK,CAAC,KAAK;QACjB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,gBAAgB,CAAC,oBAAoB,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC;YACnF,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,gBAAgB,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;YAE7F,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;YAC/C,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC;gBAAE,OAAO,EAAE,CAAC;YAClC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YAE5E,MAAM,CAAC,EAAE,WAAW,EAAE,gBAAgB,EAAE,EAAE,UAAU,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;gBACxE,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC;gBAC/B,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;aACzB,CAAC,CAAC;YAEH,MAAM,OAAO,GAAyB,EAAE,CAAC;YACzC,KAAK,MAAM,CAAC,IAAI,EAAE,aAAa,CAAC,IAAI,OAAO,EAAE,CAAC;gBAC5C,8DAA8D;gBAC9D,MAAM,CAAC,OAAO,CAAC,GAAG,aAAa,CAAC;gBAChC,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;oBAC9D,IAAI,CAAC,aAAa,CAAC,cAAc,CAAC,IAAI,EAAE,OAAO,CAAC;oBAChD,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC;oBACjD,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC;oBACjD,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;iBAC7D,CAAC,CAAC;gBACH,OAAO,CAAC,IAAI,CAAC;oBACX,IAAI;oBACJ,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,WAAW,IAAI,IAAI;oBACnD,OAAO,EAAE,aAAa;oBACtB,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,WAAW,IAAI,EAAE;oBACjD,eAAe,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,eAAe,IAAI,KAAK;oBAC5D,UAAU,EAAE,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;oBACtC,SAAS,EAAE,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;oBACpC,WAAW,EAAE,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;oBAC5C,MAAM;oBACN,OAAO;oBACP,OAAO;oBACP,SAAS;oBACT,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,QAAQ,IAAI,EAAE;iBAC5C,CAAC,CAAC;YACL,CAAC;YACD,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAC9D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,IAAI,CAAC,6BAA6B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC1F,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;;;;OAOG;IACK,KAAK,CAAC,WAAW,CAAC,MAAc;QACtC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAyB,CAAC;QAChD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACtD,KAAK,MAAM,CAAC,IAAI,UAAU,CAAC,QAAQ;YAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjD,KAAK,MAAM,MAAM,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;YACxC,IAAI,MAAM,CAAC,QAAQ,IAAI,CAAC,MAAM,CAAC,MAAM;gBAAE,SAAS;YAChD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE;gBACtB,OAAO,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC;gBACxB,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,eAAe,EAAE,MAAM,CAAC,eAAe;gBACvC,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,6DAA6D;gBAC7D,6DAA6D;gBAC7D,iEAAiE;gBACjE,0BAA0B;gBAC1B,QAAQ,EAAE,UAAU,CAAC,QAAQ;qBAC1B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,MAAM,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;qBACtF,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;aACrE,CAAC,CAAC;QACL,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACK,KAAK,CAAC,iBAAiB,CAC7B,OAA8B;QAE9B,MAAM,WAAW,GAAG,IAAI,GAAG,EAAkB,CAAC;QAC9C,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAkB,CAAC;QACnD,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YAChB,uEAAuE;YACvE,gDAAgD;YAChD,OAAO;gBACL,WAAW,EAAE,cAAc,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC;gBACnF,gBAAgB;aACjB,CAAC;QACJ,CAAC;QACD,KAAK,MAAM,WAAW,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YAC3E,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;gBAC5B,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;gBAC5D,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,OAAO;oBAAE,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACpG,CAAC;QACH,CAAC;QACD,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,CAAC;IAC3C,CAAC;IAED;;;;;;;;;;;;;;;;;OAiBG;IACK,KAAK,CAAC,UAAU,CAAC,OAAmC;QAC1D,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;QACzC,MAAM,OAAO,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC/C,IAAI;YACJ,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE;SACvC,CAAC,CAAC,CAAC;QACJ,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAC7E,KAAK,MAAM,IAAI,IAAI,MAAM,IAAI,CAAC,iBAAiB,CAAC,gBAAgB,EAAE,EAAE,CAAC;YACnE,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACzF,IAAI,MAAM;gBAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC9B,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;gBACxB,IAAI,CAAC,KAAK,MAAM;oBAAE,SAAS;gBAC3B,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC;oBAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAC7E,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;;;;;;OAQG;IACK,KAAK,CAAC,cAAc,CAAC,YAAoB;QAC/C,IAAI,CAAC;YACH,OAAO,iBAAiB,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC;QACpE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,SAAS,CAAC,GAAG,CAAC;gBAAE,OAAO,KAAK,CAAC;YACjC,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;CACF;AAED;;;;GAIG;AACH,SAAS,cAAc,CAAC,KAAyB,EAAE,OAA8B;IAC/E,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,MAAM,QAAQ,GAAG,CAAC,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC;IACpG,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;QACnE,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,kBAAkB;IAChC,OAAO,oBAAoB,CAAC,cAAc,CAAC,CAAC;AAC9C,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,qBAAqB,CAAC,MAAc;IAClD,OAAO,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;AAC/C,CAAC"}

package/dist/modules/plugins/plugins.tools.d.ts

@@ -0,0 +1,25 @@
+import type { IToolRegistry, UtcpTool } from '../tool-registry/tool.contract.js';
+/**
+ * The two plugin tools an agent has, both surfaces — DESCRIPTIONS of the
+ * app's own creation endpoints, not a second implementation of them:
+ *
+ *  - `my_plugin`     → `POST /api/plugins/personal`
+ *  - `create_plugin` → `POST /api/plugins`
+ *
+ * The endpoints are the same ones the New plugin button and the first-visit
+ * personal-folder ensure call; they sit behind a gate that admits an agent's
+ * connection key as well as a session (`keyOrSessionAuth`), so one route
+ * serves both. Without these an agent asked to "put my skills in Hexis" had
+ * nowhere to write: the personal folder is created lazily by the web app
+ * under a name derived from the user's id, and a non-admin's plain write
+ * under the plugins root is refused by the root rules.
+ *
+ * Every rule the app enforces — names, reserved prefixes, twins, where a
+ * plugin may go, the one commit — is the endpoint's, so it holds for an
+ * agent exactly as for a person; a refusal comes back as the endpoint's own
+ * 4xx with its message.
+ */
+export declare function registerPluginsTools(registry: IToolRegistry): void;
+export declare const MY_PLUGIN: UtcpTool;
+export declare const CREATE_PLUGIN: UtcpTool;
+//# sourceMappingURL=plugins.tools.d.ts.map

package/dist/modules/plugins/plugins.tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugins.tools.d.ts","sourceRoot":"","sources":["../../../src/modules/plugins/plugins.tools.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,mCAAmC,CAAC;AAGjF;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,aAAa,GAAG,IAAI,CAKlE;AAeD,eAAO,MAAM,SAAS,EAAE,QActB,CAAC;AAEH,eAAO,MAAM,aAAa,EAAE,QA4B1B,CAAC"}

package/dist/modules/plugins/plugins.tools.js

@@ -0,0 +1,82 @@
+import { toolDef } from '../tool-helpers/tool-def.js';
+/**
+ * The two plugin tools an agent has, both surfaces — DESCRIPTIONS of the
+ * app's own creation endpoints, not a second implementation of them:
+ *
+ *  - `my_plugin`     → `POST /api/plugins/personal`
+ *  - `create_plugin` → `POST /api/plugins`
+ *
+ * The endpoints are the same ones the New plugin button and the first-visit
+ * personal-folder ensure call; they sit behind a gate that admits an agent's
+ * connection key as well as a session (`keyOrSessionAuth`), so one route
+ * serves both. Without these an agent asked to "put my skills in Hexis" had
+ * nowhere to write: the personal folder is created lazily by the web app
+ * under a name derived from the user's id, and a non-admin's plain write
+ * under the plugins root is refused by the root rules.
+ *
+ * Every rule the app enforces — names, reserved prefixes, twins, where a
+ * plugin may go, the one commit — is the endpoint's, so it holds for an
+ * agent exactly as for a person; a refusal comes back as the endpoint's own
+ * 4xx with its message.
+ */
+export function registerPluginsTools(registry) {
+    registry.registerExternalTool(MY_PLUGIN);
+    registry.registerInternalTool(MY_PLUGIN);
+    registry.registerExternalTool(CREATE_PLUGIN);
+    registry.registerInternalTool(CREATE_PLUGIN);
+}
+/** The endpoint's answer, `ProvisionedPlugin` — see `PluginProvisionService`. */
+const PROVISIONED_OUTPUT = {
+    type: 'object',
+    properties: {
+        path: { type: 'string', description: 'The plugin folder, repo-relative (e.g. `Plugins/personal-abc`, `Plugins/Teams/GTM`) — the path the file tools address.' },
+        skillsDir: { type: 'string', description: 'Where its skills go: `<path>/skills`. Each skill is a subfolder holding a `SKILL.md`.' },
+        folder: { type: 'string', description: 'The same folder as its path below the plugins root.' },
+        name: { type: 'string', description: 'The plugin identity (its manifest name), as grants and the marketplace spell it.' },
+        displayName: { type: 'string', description: 'What people see it called — the manifest `displayName`, exactly as persisted: for `create_plugin`, the name that was asked for, trimmed; for `my_plugin`, the personal folder\'s own label.' },
+        created: { type: 'boolean', description: 'False when the folder already existed.' },
+    },
+};
+export const MY_PLUGIN = toolDef({
+    name: 'my_plugin',
+    description: "The caller's own private plugin — their personal space in the knowledge base, created on first use. " +
+        'Returns its folder and where skills go inside it (`skillsDir`); write a skill there as ' +
+        '`<skillsDir>/<skill-name>/SKILL.md` with the file tools, opening with the Agent Skills frontmatter ' +
+        '(`name`, `description`, and `metadata.version` such as `"1.0.0"`). Readable only by its owner — not even admins — and ' +
+        'never listed as a shared plugin. Idempotent: calling it again returns the same folder.',
+    path: '/api/plugins/personal',
+    inputs: { type: 'object', properties: {}, additionalProperties: false },
+    outputs: PROVISIONED_OUTPUT,
+    // `write`: both make folders and commit — a read-scoped caller's manual
+    // must not advertise them (see `isWriteTool` in the manual routes).
+    tags: ['plugins', 'skills', 'write'],
+});
+export const CREATE_PLUGIN = toolDef({
+    name: 'create_plugin',
+    description: "Create a shared plugin under the plugins root, exactly as the app's New plugin button does: the caller " +
+        'runs it (read, write and owner), and it is discoverable by everyone so people can ask to join. Pass ' +
+        '`parent` to make it inside an existing grouping folder under the plugins root (e.g. `Teams`); a plugin ' +
+        'cannot be made inside another plugin. Returns the folder and where its skills go. A refusal carries ' +
+        '`error` in words. 4xx means the input will not do: 409 when a plugin of that name (or its identifier) ' +
+        'exists, 422 for a name the knowledge base cannot carry or a parent that may not hold a plugin, 404 when ' +
+        'the parent folder is not there. 503 means the plugin list could not be read completely just now — ' +
+        'nothing is wrong with the input; try again shortly.',
+    path: '/api/plugins',
+    inputs: {
+        type: 'object',
+        properties: {
+            name: { type: 'string', minLength: 1, description: 'The plugin name, e.g. `Design`. Becomes the folder name and the display name people see; its identifier is the kebab-case slug.' },
+            parent: {
+                type: 'string',
+                description: 'Optional grouping folder below the plugins root to create it in, e.g. `Teams` or `Teams/EU`. Omit for the root.',
+            },
+        },
+        required: ['name'],
+        additionalProperties: false,
+    },
+    outputs: PROVISIONED_OUTPUT,
+    // `write`: both make folders and commit — a read-scoped caller's manual
+    // must not advertise them (see `isWriteTool` in the manual routes).
+    tags: ['plugins', 'skills', 'write'],
+});
+//# sourceMappingURL=plugins.tools.js.map

package/dist/modules/plugins/plugins.tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugins.tools.js","sourceRoot":"","sources":["../../../src/modules/plugins/plugins.tools.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,MAAM,6BAA6B,CAAC;AAEtD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,oBAAoB,CAAC,QAAuB;IAC1D,QAAQ,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC;IACzC,QAAQ,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC;IACzC,QAAQ,CAAC,oBAAoB,CAAC,aAAa,CAAC,CAAC;IAC7C,QAAQ,CAAC,oBAAoB,CAAC,aAAa,CAAC,CAAC;AAC/C,CAAC;AAED,iFAAiF;AACjF,MAAM,kBAAkB,GAAG;IACzB,IAAI,EAAE,QAAQ;IACd,UAAU,EAAE;QACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,wHAAwH,EAAE;QAC/J,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,uFAAuF,EAAE;QACnI,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,qDAAqD,EAAE;QAC9F,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,kFAAkF,EAAE;QACzH,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,6LAA6L,EAAE;QAC3O,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,wCAAwC,EAAE;KACpF;CACO,CAAC;AAEX,MAAM,CAAC,MAAM,SAAS,GAAa,OAAO,CAAC;IACzC,IAAI,EAAE,WAAW;IACjB,WAAW,EACT,sGAAsG;QACtG,yFAAyF;QACzF,qGAAqG;QACrG,wHAAwH;QACxH,wFAAwF;IAC1F,IAAI,EAAE,uBAAuB;IAC7B,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE,oBAAoB,EAAE,KAAK,EAAE;IACvE,OAAO,EAAE,kBAAkB;IAC3B,wEAAwE;IACxE,oEAAoE;IACpE,IAAI,EAAE,CAAC,SAAS,EAAE,QAAQ,EAAE,OAAO,CAAC;CACrC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,aAAa,GAAa,OAAO,CAAC;IAC7C,IAAI,EAAE,eAAe;IACrB,WAAW,EACT,yGAAyG;QACzG,sGAAsG;QACtG,yGAAyG;QACzG,sGAAsG;QACtG,wGAAwG;QACxG,0GAA0G;QAC1G,oGAAoG;QACpG,qDAAqD;IACvD,IAAI,EAAE,cAAc;IACpB,MAAM,EAAE;QACN,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE;YACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE,WAAW,EAAE,iIAAiI,EAAE;YACtL,MAAM,EAAE;gBACN,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,iHAAiH;aAC/H;SACF;QACD,QAAQ,EAAE,CAAC,MAAM,CAAC;QAClB,oBAAoB,EAAE,KAAK;KAC5B;IACD,OAAO,EAAE,kBAAkB;IAC3B,wEAAwE;IACxE,oEAAoE;IACpE,IAAI,EAAE,CAAC,SAAS,EAAE,QAAQ,EAAE,OAAO,CAAC;CACrC,CAAC,CAAC"}

package/dist/modules/plugins/teams.routes.d.ts

@@ -0,0 +1,42 @@
+import express from 'express';
+import type { IAccessControl } from '../access/access-control.interface.js';
+import type { ISkillService } from '../skills/skills.contract.js';
+import type { IToolManualService } from '../tool-manuals/tool-manuals.contract.js';
+import type { IPluginIndexService } from './plugins.contract.js';
+/**
+ * What one team can use, by id — the Library's "Your teams" lens.
+ *
+ * A team is a group from the active group source (`groups.yaml`, or the
+ * IdP-synced file), and what it can use is what being IN it lets a person
+ * read: the plugins whose rules admit the group, the skills those plugins
+ * link or hold, a shared skill whose own folder names the group, the tools
+ * declared in an admitted plugin. The verdict is the resolver's own
+ * (`canReadAsGroupBatch`), so a grant reached through a role that lists the
+ * group, or through `plugin/<name>/read` on a skill the group's plugin links,
+ * counts exactly as it does for a member.
+ *
+ * Every id is ALSO gated on the caller: a skill or tool the caller cannot
+ * read is not named here, however the team stands, and a plugin appears only
+ * when the caller could see it on the index (a member, or able to discover
+ * it). The lens never widens what the catalog already shows the caller — it
+ * slices it.
+ *
+ * The list opens with `Everyone`: not a group, the built-in org-wide
+ * principal — what a signed-in person in no group at all can use, which is
+ * what `read: everyone` (or a public plugin) reaches. Same slice, same
+ * caller gate, asked of the resolver as `canReadAsEveryoneBatch`. The name
+ * cannot collide with a group's: `everyone` is reserved by the grammar.
+ */
+export interface TeamAccess {
+    name: string;
+    /** Plugin identities (manifest names) the team's members can read. */
+    plugins: string[];
+    /** Skill names. */
+    skills: string[];
+    /** Tool slugs. */
+    tools: string[];
+}
+/** The org-wide entry's name — the built-in `everyone` principal, as the sidebar spells it. */
+export declare const EVERYONE_TEAM = "Everyone";
+export declare function createTeamsRoutes(accessControl: IAccessControl, pluginIndex: IPluginIndexService, skillService: Pick<ISkillService, 'listSkills'>, toolManuals: Pick<IToolManualService, 'listAllSummaries'>): express.Router;
+//# sourceMappingURL=teams.routes.d.ts.map

package/dist/modules/plugins/teams.routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"teams.routes.d.ts","sourceRoot":"","sources":["../../../src/modules/plugins/teams.routes.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,MAAM,SAAS,CAAC;AAK9B,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uCAAuC,CAAC;AAC5E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAClE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,0CAA0C,CAAC;AACnF,OAAO,KAAK,EAAE,mBAAmB,EAAsB,MAAM,uBAAuB,CAAC;AAGrF;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,sEAAsE;IACtE,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,mBAAmB;IACnB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,kBAAkB;IAClB,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,+FAA+F;AAC/F,eAAO,MAAM,aAAa,aAAa,CAAC;AAExC,wBAAgB,iBAAiB,CAC/B,aAAa,EAAE,cAAc,EAC7B,WAAW,EAAE,mBAAmB,EAChC,YAAY,EAAE,IAAI,CAAC,aAAa,EAAE,YAAY,CAAC,EAC/C,WAAW,EAAE,IAAI,CAAC,kBAAkB,EAAE,kBAAkB,CAAC,GACxD,OAAO,CAAC,MAAM,CAmEhB"}