@capybara-hq/kernel 0.1.0-rc.1 → 0.1.0-rc.2

package/dist/catalog/catalog.service.d.ts

@@ -1,13 +1,15 @@
-import { type Connector, type ConnectorTemplateSpec, type LocalizedName, type PluginManifest } from "@capybara-hq/plugin-sdk";
-import { type Transaction } from "kysely";
-import type { KernelConfig } from "../config/schema.js";
-import type { KernelDatabase, KernelDb, SourceFormat } from "../db/kernel-schema.js";
-import type { ExtensionAdminOps } from "../extensions/admin-ops.js";
-import type { ExtensionInstalls } from "../extensions/installs.js";
+import { type LocalizedName, type PluginManifest } from "@capybara-hq/plugin-sdk";
+import type { SourceFormat } from "../db/kernel-schema.js";
+import { ExtensionAdminOps } from "../extensions/admin-ops.js";
+import { ExtensionInstalls } from "../extensions/installs.js";
 import type { AdminExtensionView } from "../extensions/permission-view.js";
-import type { StorageService } from "../storage/storage.service.js";
+import { EnterpriseAdminLock } from "../identity/enterprise-admin.js";
+import { KernelConfigService } from "../infra/config/kernel-config.service.js";
+import { KernelDb } from "../infra/database/kernel-db.js";
+import { TransactionHost } from "../infra/database/transaction-host.js";
 import type { TranslationReport } from "./claude/report.js";
-import type { PluginImport, PluginReview } from "./plugin-import.js";
+import { MarketplacesService } from "./marketplaces.service.js";
+import { PluginImport, type PluginReview } from "./plugin-import.js";
 /** Item policy (C22): allow (default for new imports) / needs_approval / disabled (no new installs; existing ones stay). */
 export type CatalogPolicy = "allow" | "needs_approval" | "disabled";
 /** A catalog item (list entry). Every item is a plugin. */
@@ -117,29 +119,10 @@ export interface CatalogItemDetail {
     };
     versions: CatalogItemVersionView[];
 }
-export interface CatalogServiceDeps {
-    db: KernelDb;
-    config: () => KernelConfig;
-    installs: Pick<ExtensionInstalls, "fetchMarketplacePackage" | "fetchProvenance">;
-    ops: Pick<ExtensionAdminOps, "install">;
-    /** Plugin import (a marketplace entry goes through its prepare). */
-    pluginImport: Pick<PluginImport, "prepare" | "prepareGit">;
-    /** The token of an enterprise marketplace (sent only to its URL's origin). */
-    marketplaceToken: (marketplaceId: string) => Promise<string | undefined>;
-    /** Downloads a marketplace archive source, verified against its integrity. */
-    fetchArchive: (archive: {
-        url: string;
-        integrity: string;
-    }, signal?: AbortSignal) => Promise<{
-        bytes: Uint8Array;
-        integrity: string;
-    }>;
-}
 /** Audits carry the PAT when a personal token made the call. */
 export interface ActorOpts {
     actorTokenId?: string;
 }
-type Trx = Transaction<KernelDatabase>;
 /**
  * The marketplace's permission summary differs from the keys computed from the package (a warning,
  * never a refusal; C26): `missing` = asked by the package, not listed; `extra` = listed, not asked.
@@ -168,14 +151,6 @@ export declare function repoOwner(url: string): string;
  * leading zero are not valid semver.
  */
 export declare const gitFallbackVersion: (commit: string) => string;
-/**
- * The object storage prefix of one import (relative to `deployment/`):
- * `directory/<itemId>/<version>/<importId>/`. Each import gets a new `importId`, so the losing one of
- * two concurrent imports of the same version never overwrites the committed version's files; reads
- * always go through the `object_prefix` stored on the version row. Build metadata's `+` is written
- * as `_` (a `+` in a key can turn into a space through URL query encoding).
- */
-export declare const catalogObjectPrefix: (itemId: string, version: string, importId: string) => string;
 /** Default / largest page size of the list. */
 export declare const CATALOG_LIST_DEFAULT_LIMIT = 200;
 export declare const CATALOG_LIST_MAX_LIMIT = 1000;
@@ -186,8 +161,28 @@ export declare const CATALOG_LIST_MAX_LIMIT = 1000;
  * extension on the deployment, and prepares marketplace imports. Stateless, shared by every replica.
  */
 export declare class CatalogService {
-    private readonly d;
-    constructor(d: CatalogServiceDeps);
+    private readonly kdb;
+    /** The enterprise admin lock (identity/enterprise-admin.ts): joins the caller's transaction. */
+    private readonly adminLock;
+    private readonly config;
+    private readonly installs;
+    private readonly ops;
+    /** Plugin import (a marketplace entry goes through its prepare). */
+    private readonly pluginImport;
+    /** The token of an enterprise marketplace (sent only to its URL's origin). */
+    private readonly marketplaces;
+    readonly txHost: TransactionHost;
+    constructor(kdb: KernelDb, 
+    /** The enterprise admin lock (identity/enterprise-admin.ts): joins the caller's transaction. */
+    adminLock: EnterpriseAdminLock, config: KernelConfigService, installs: ExtensionInstalls, ops: ExtensionAdminOps, 
+    /** Plugin import (a marketplace entry goes through its prepare). */
+    pluginImport: PluginImport, 
+    /** The token of an enterprise marketplace (sent only to its URL's origin). */
+    marketplaces: MarketplacesService, txHost: TransactionHost);
+    /** The kernel-schema handle of the current context (the transaction, else the pool). */
+    private get db();
+    /** Downloads a marketplace archive source, verified against its integrity. */
+    private fetchArchive;
     /**
      * Prepares the import of one marketplace entry (C25 / C26, spec §5.2): `version` defaults to the
      * newest compatible version the marketplace lists for `name`; the entry must be compatible with
@@ -259,6 +254,7 @@ export declare class CatalogService {
      * missing -> `catalog.item_not_found`.
      */
     setPolicy(actor: string, itemId: string, policy: CatalogPolicy, opts?: ActorOpts): Promise<CatalogItemView>;
+    private writePolicy;
     /**
      * Deletes the item (soft delete, audit `catalog.removed`; requests still pending are cancelled in
      * the same transaction): versions and stored files are kept (installed components still refer to
@@ -266,6 +262,7 @@ export declare class CatalogService {
      * item. Deleted / missing -> `catalog.item_not_found`.
      */
     remove(actor: string, itemId: string, opts?: ActorOpts): Promise<void>;
+    private writeRemove;
     /**
      * Installs the extension of one version of an item on the deployment
      * (`ExtensionAdminOps.install`: a new install is disabled, a version change keeps the desired
@@ -277,154 +274,3 @@ export declare class CatalogService {
     installToDeployment(actor: string, itemId: string, version: string, opts?: ActorOpts): Promise<AdminExtensionView>;
     private view;
 }
-/**
- * Checks a connector template against the loaded connector `c` (problem paths start with `at`): the
- * endpoint matches its `endpointSchema` and carries no credential-like headers / query / URL user
- * info (the same rule as connector installs); every `editableEndpoint` path exists in the endpoint
- * schema.
- */
-export declare function templateProblems(c: Connector, t: ConnectorTemplateSpec, at: string): string[];
-/** Writes the files to `deployment/<prefix><path>` ({@link PUT_CONCURRENCY} at a time). */
-export declare function putCatalogFiles(storage: StorageService, prefix: string, files: {
-    path: string;
-    size: number;
-    data: Uint8Array;
-}[]): Promise<void>;
-/** Compares the marketplace's permission summary with the computed keys ({@link PermissionsMismatch}). */
-export declare function permissionsMismatch(declared: string[] | undefined, actual: string[] | undefined): PermissionsMismatch;
-/** The fields the list shows (the item's publisher / description / displayName). */
-export interface CatalogListing {
-    publisher: string;
-    description: string;
-    displayName: LocalizedName | null;
-}
-/** Input of {@link writeCatalogVersion}. */
-export interface CatalogVersionWrite {
-    /** null: the CLI (no account). */
-    actor: string | null;
-    actorTokenId?: string;
-    name: string;
-    /** null: a git plugin without package.json. */
-    packageName: string | null;
-    /**
-     * The version recorded (from {@link precheckCatalogImport}: the plugin's own, or with build
-     * metadata when that release was imported with other content).
-     */
-    version: string;
-    /** The content digest of the plugin's files. */
-    contentDigest: string;
-    /** The normalized plugin.json. */
-    manifest: PluginManifest;
-    listing: CatalogListing;
-    /** The id of the item to create when there is none yet (the one the storage prefix used). */
-    newItemId: string;
-    source: {
-        source: CatalogVersionSource;
-        ref: string;
-        integrity?: string;
-        detail?: SourceDetail;
-    };
-    /** Imported from a marketplace: the item records it. */
-    marketplaceId?: string;
-    objectPrefix: string | null;
-    extensionSha256: string | null;
-    files: {
-        path: string;
-        size: number;
-        sha256: string;
-    }[];
-    size: number;
-    /** The format the plugin was read from (default `capybara`). */
-    sourceFormat?: SourceFormat;
-    /** The translation report of a Claude Code plugin. */
-    translation?: TranslationReport | null;
-    /** The root LICENSE text. */
-    licenseText?: string | null;
-    /** The root LICENSE was too long (or not UTF-8) to store. */
-    licenseTruncated?: boolean;
-    /** Merged into the detail of the `catalog.imported` audit. */
-    auditDetail?: Record<string, unknown>;
-}
-/** Takes the transaction-level advisory lock of an item name (concurrent imports of it serialize). */
-export declare function lockCatalogName(trx: Trx, name: string): Promise<void>;
-/**
- * The identity of a git source, `<host>/<repo>:<path>` (host lower case, no `.git`), or null when
- * the source is not git. An item without package.json is identified by it instead of a package name.
- */
-export declare function gitIdentity(detail: SourceDetail | undefined): string | null;
-/** What is being imported, as far as the version conflict rules need it. */
-export interface ImportIdentity {
-    packageName: string | null;
-    /** The plugin's own version (plugin.json, else the fallback of spec §5.3). */
-    version: string;
-    contentDigest: string;
-    integrity?: string;
-    detail?: SourceDetail;
-    marketplaceId?: string;
-}
-type ExistingVersion = {
-    version: string;
-    content_digest: string | null;
-    integrity: string | null;
-};
-/**
- * The version a new import records (Decision 6, spec §5.3): the plugin's own version, unless that
- * release is already imported. A version of the same release (equal but for build metadata) with
- * the same content (digest; for versions without one, the same integrity) -> `catalog.version_exists`
- * "already imported"; other content -> `<version>+git.<sha12>` (git) or `+sha256.<12>` (any other
- * source, the digest's first 12 hex), never overwriting the imported version. A git commit already
- * recorded with other content (a Claude Code plugin whose marketplace entry changed while its own
- * commit did not, see `claudeContentDigest`) falls back to `+sha256.<12>`.
- */
-export declare function recordedVersion(existing: ExistingVersion[], p: ImportIdentity): string;
-/**
- * Conflict precheck before writing (no lock; {@link writeCatalogVersion}'s re-check inside the
- * transaction is final): an item with the same name from another npm package (or, without one,
- * another git source) -> `catalog.name_conflict`; the release already imported with the same
- * content -> `catalog.version_exists`. Returns the existing item (undefined when there is none) and
- * the version to record ({@link recordedVersion}).
- */
-export declare function precheckCatalogImport(db: KernelDb, name: string, p: ImportIdentity): Promise<{
-    existing: {
-        id: string;
-    } | undefined;
-    version: string;
-}>;
-/**
- * Writes a catalog version in the caller's transaction (the caller has re-checked the enterprise
- * admin): takes the name's advisory lock, checks conflicts again (the same source; no version of
- * the release with the same content; `version` not taken meanwhile), creates the item when there is
- * none or adds the version (latest and display fields change only for a newer version, a version
- * equal but for build metadata being newer as the later import), and writes the version row (with
- * its content digest) and the `catalog.imported` audit. Returns the item id.
- */
-export declare function writeCatalogVersion(trx: Trx, w: CatalogVersionWrite): Promise<string>;
-/**
- * An extension name belongs to the npm package that first installed it (`extension_name_owners`,
- * Ruling P3): when another package owns it, the import is refused right away with
- * `extension.name_conflict` (the same code as at install), instead of failing only at deploy time.
- */
-export declare function assertPluginNameOwner(db: KernelDb | Trx, name: string, packageName: string | null): Promise<void>;
-/** What the marketplace says about a marketplace-imported item. */
-export interface MarketplaceStatus {
-    /** See {@link CatalogItemView.latestMarketplaceVersion}. */
-    latest: string | null;
-    /** See {@link CatalogItemView.contentChanged}. */
-    contentChanged: boolean;
-}
-export declare function itemView(i: {
-    id: string;
-    name: string;
-    publisher: string;
-    display_name: LocalizedName | null;
-    description: string;
-    policy: CatalogPolicy;
-    latest_version: string;
-    marketplace_id?: string | null;
-    updated_at: Date;
-}, versions: {
-    version: string;
-    source: string;
-    imported_at?: Date;
-}[], installs?: number, marketplace?: MarketplaceStatus): CatalogItemView;
-export {};