@capybara-hq/kernel 0.1.0-rc.0 → 0.1.0-rc.2

package/dist/catalog/plugin-import.d.ts

@@ -1,17 +1,23 @@
-import { type AgentTemplate, type AgentTemplateTier, type Connector, type LocalizedName, type Logger } from "@capybara-hq/plugin-sdk";
-import type { KernelConfig } from "../config/schema.js";
-import type { KernelDb } from "../db/kernel-schema.js";
+import { type AgentTemplate, type AgentTemplateTier, type LocalizedName } from "@capybara-hq/plugin-sdk";
 import { ApiError } from "../errors.js";
-import type { ExtensionAdminOps } from "../extensions/admin-ops.js";
-import type { ExtensionInstalls } from "../extensions/installs.js";
+import { ExtensionAdminOps } from "../extensions/admin-ops.js";
+import { ExtensionBlobs } from "../extensions/blobs.js";
+import { ExtensionInstalls } from "../extensions/installs.js";
+import { PluginApproveLock, PluginInstallLock } from "../extensions/locks.js";
 import { ExtensionPackageError } from "../extensions/package.js";
 import { type PackageWarning, type PermissionGroup, type PermissionItem } from "../extensions/permission-view.js";
-import type { ExtensionSource } from "../extensions/sources.js";
+import { ExtensionRegistry } from "../extensions/registry.js";
+import { EnterpriseAdminLock } from "../identity/enterprise-admin.js";
+import { KernelConfigService } from "../infra/config/kernel-config.service.js";
+import { KernelDb } from "../infra/database/kernel-db.js";
+import { TransactionHost } from "../infra/database/transaction-host.js";
+import type { KernelLogger } from "../log.js";
 import type { ProvenanceResult } from "../packages/provenance.js";
-import type { StorageService } from "../storage/storage.service.js";
-import { type ActorOpts, type CatalogItemView, type PermissionsMismatch, type SourceDetail } from "./catalog.service.js";
+import { type PrefixedStorage, StorageService } from "../storage/storage.service.js";
+import type { ActorOpts, CatalogItemView, PermissionsMismatch, SourceDetail } from "./catalog.service.js";
 import { type ClaudeEntryOverlay } from "./claude/manifest.js";
 import { type TranslationReport } from "./claude/report.js";
+import { CatalogItemLock } from "./locks.js";
 import { PluginPackageError } from "./plugin-package.js";
 /**
  * Enterprise import of a plugin (package ecosystem spec §4.3): one review for every plugin, whatever
@@ -246,38 +252,58 @@ export interface ReviewProvenance {
     provenance: ProvenanceResult;
     warning?: "repository_mismatch";
 }
-export interface PluginImportDeps {
-    db: KernelDb;
-    config: () => KernelConfig;
-    storage: StorageService;
-    installs: Pick<ExtensionInstalls, "ingest" | "fetchNpm" | "fetchProvenance">;
-    ops: Pick<ExtensionAdminOps, "install" | "enable">;
-    /** Reads a package from the package store (confirm recomputes the permission set). */
-    blobs: {
-        get(sha256: string): Promise<Uint8Array>;
-    };
-    /** Config-declared extension names -> source. */
-    declared: () => ReadonlyMap<string, ExtensionSource>;
-    /** The connector `kind` provided by extension `plugin` loaded on this replica. */
-    findConnector: (plugin: string, kind: string) => Connector | undefined;
-    /** The version of an extension loaded on this replica (templates' `pluginVersion` is checked). */
-    pluginVersion?: (plugin: string) => string | undefined;
-    /**
-     * false: this process loads no connectors (the CLI), so a template of an unknown connector gets
-     * only the static endpoint checks and `endpointChecked: false`; the org install re-checks it
-     * against the loaded connector. Default true (the HTTP path).
-     */
-    connectorsLoaded?: boolean;
-    log: Pick<Logger, "info" | "warn" | "error">;
-}
 /**
  * The API error of a plugin package that cannot be read in a catalog path: the pre-0.1.0 format ->
  * `catalog.legacy_format`, anything else -> `catalog.invalid_manifest` (issues as details).
  */
 export declare function catalogPackageError(e: PluginPackageError | ExtensionPackageError): ApiError;
 export declare class PluginImport {
-    private readonly d;
-    constructor(d: PluginImportDeps);
+    private readonly kdb;
+    /** The enterprise admin lock (identity/enterprise-admin.ts): joins the caller's transaction. */
+    private readonly adminLock;
+    private readonly installLock;
+    private readonly approveLock;
+    private readonly itemLock;
+    private readonly config;
+    private readonly installs;
+    private readonly ops;
+    /** Reads a package from the package store (confirm recomputes the permission set). */
+    private readonly blobs;
+    /** Config-declared names, loaded connectors and extension versions (the extension registry). */
+    private readonly registry;
+    private readonly log;
+    readonly txHost: TransactionHost;
+    /** Where plugin files go (the kernel's object storage; the CLI's own, see {@link useCliStorage}). */
+    private files;
+    /**
+     * false: this process loads no connectors (the CLI), so a template of an unknown connector gets
+     * only the static endpoint checks and `endpointChecked: false`; the org install re-checks it
+     * against the loaded connector.
+     */
+    private connectorsLoaded;
+    constructor(kdb: KernelDb, 
+    /** The enterprise admin lock (identity/enterprise-admin.ts): joins the caller's transaction. */
+    adminLock: EnterpriseAdminLock, installLock: PluginInstallLock, approveLock: PluginApproveLock, itemLock: CatalogItemLock, config: KernelConfigService, storage: StorageService, installs: ExtensionInstalls, ops: ExtensionAdminOps, 
+    /** Reads a package from the package store (confirm recomputes the permission set). */
+    blobs: ExtensionBlobs, 
+    /** Config-declared names, loaded connectors and extension versions (the extension registry). */
+    registry: ExtensionRegistry, log: KernelLogger, txHost: TransactionHost);
+    /** The kernel-schema handle of the current context (the transaction, else the pool). */
+    private get db();
+    /**
+     * CLI only (like `ExtensionHost.noteInspected`): plugin files go to the object store the CLI set
+     * up itself, and connector templates get static checks only (the CLI loads no connector). Called
+     * once, right after the command's context is created.
+     */
+    useCliStorage(storage: PrefixedStorage): void;
+    /**
+     * The enterprise-admin re-check under the lock, in the caller's transaction. `actor` null is the
+     * CLI (the operator of the deployment: no account to re-check, audits carry no actor), like
+     * `ExtensionInstalls.ingest`.
+     */
+    private authorizeActor;
+    /** The re-check alone, in a transaction of its own (before anything is written). */
+    private authorize;
     /**
      * Reads, checks and stages a plugin (see the file header). Returns the staging id and review.
      * `fallback` (a marketplace archive): a tgz without plugin.json may be skills only, named,
@@ -332,6 +358,8 @@ export declare class PluginImport {
      * (required with an extension: it is stored in the package store); `size` is recorded.
      */
     private prepareContents;
+    /** The staging row and the `catalog.plugin_staged` audit, the actor re-checked under the lock. */
+    private writeStaging;
     /** Fetches a plugin from the configured npm registry (verified by `dist.integrity`), then prepares it. */
     prepareNpm(actor: string | null, input: {
         package: string;
@@ -370,6 +398,12 @@ export declare class PluginImport {
          */
         pinnedSuggestions?: string[];
     }, opts?: ActorOpts): Promise<PluginConfirmResult>;
+    /**
+     * The confirm's transaction: the staging row consumed, the extension's action recomputed under
+     * its install lock (stale -> `plugin.review_stale`), its snapshot approved, and the catalog
+     * version written under the item name's lock.
+     */
+    private commit;
     /**
      * Writes the extension's permission snapshot for the version being imported (source web; cli
      * without an actor; bootstrap for the bootstrap step), after
@@ -398,6 +432,11 @@ export declare class PluginImport {
      * round); concurrent replicas skip each other's rows (`SKIP LOCKED`). Returns the rows deleted.
      */
     cleanupExpired(): Promise<number>;
+    /**
+     * One expired staging row (row lock, `SKIP LOCKED`): its objects, then the row; false when another
+     * replica has it or it is gone.
+     */
+    private cleanupOne;
     /** npm / marketplace imports: the package must be the one that was asked for. */
     private checkExpected;
     /** A config-declared extension's name cannot be taken by an imported plugin. */