@capybara-hq/kernel 0.1.0-rc.26 → 0.1.0-rc.28

package/dist/app.js

@@ -1,5 +1,6 @@
 import "reflect-metadata";
 import { NestFactory } from "@nestjs/core";
+import { GitGateway } from "./git/gateway.js";
 import { createKernelAdapter } from "./http/adapter.js";
 import { createHttpApp } from "./http/app.js";
 import { NestLogAdapter } from "./http/nest-logger.js";
@@ -26,6 +27,7 @@ export async function buildKernelApp(config, options = {}) {
             log: logger,
             servePlugins: config.roles.includes("api") || config.roles.includes("gateway"),
             ...(gateway !== undefined && { gateway }),
+            ...(config.roles.includes("api") && { git: app.get(GitGateway, { strict: false }) }),
             replicaId: config.http.replicaId === undefined ? undefined : String(config.http.replicaId),
             packageMaxBytes: config.packages.maxBytes,
         }, app));

package/dist/catalog/catalog-content.d.ts

@@ -77,6 +77,19 @@ export interface OrgCatalogTemplate {
      * install wizard does not ask for it (an org admin sets it up when switching it on).
      */
     defaultOff: boolean;
+    /**
+     * On for this org if the plugin is installed (or wanted on by its scope): the template's own
+     * switch, its scope and `defaultEnabled` evaluated with the plugin installed, so a default-on
+     * template of a plugin this org has not installed reads true too (the install creates its
+     * connector).
+     */
+    on: boolean;
+    /**
+     * The org already has a live connector made from this template (a switch-off kept it because an
+     * agent uses it): the install takes that connector back instead of creating one, so it does not
+     * ask for the template's input.
+     */
+    connected: boolean;
     /**
      * The template's setup guide in the item's latest version (`GET …/catalog/:itemId/guides/
      * :guideId`), null without one (spec 2026-11-09-setup-guides-v2-design.md §9.3).
@@ -118,7 +131,11 @@ export interface OrgCatalogDetail {
  * A connector template as an org sees it (the install wizard and the upgrade preview's inputs):
  * presets and editable paths, no credentials.
  */
-export declare function orgTemplateView(id: string, file: ConnectorTemplateFile, guide?: OrgCatalogTemplate["guide"]): OrgCatalogTemplate;
+export declare function orgTemplateView(id: string, file: ConnectorTemplateFile, o?: {
+    guide?: OrgCatalogTemplate["guide"];
+    on?: boolean;
+    connected?: boolean;
+}): OrgCatalogTemplate;
 /** An item's icon (the latest version's plugin icon). */
 export interface CatalogIcon {
     data: Uint8Array;

package/dist/catalog/catalog-content.js

@@ -16,7 +16,7 @@ import { satisfiesRange } from "./versions.js";
  * A connector template as an org sees it (the install wizard and the upgrade preview's inputs):
  * presets and editable paths, no credentials.
  */
-export function orgTemplateView(id, file, guide = null) {
+export function orgTemplateView(id, file, o = {}) {
     const t = file.template;
     return {
         id,
@@ -30,7 +30,9 @@ export function orgTemplateView(id, file, guide = null) {
         ownership: t.ownership ??
             (typeof t.auth.ownership === "string" ? t.auth.ownership : null),
         defaultOff: file.defaultEnabled === false,
-        guide,
+        on: o.on ?? true,
+        connected: o.connected ?? false,
+        guide: o.guide ?? null,
     };
 }
 const iconNotFound = () => new ApiError("catalog.icon_not_found", "This catalog item has no icon");
@@ -265,6 +267,7 @@ export function templateConnectorInput(deps, template, ref, input, defaultName,
         endpoint,
         auth,
         ...(credential !== undefined && { credential }),
+        ...(template.git !== undefined && { git: template.git }),
         template: {
             ...ref,
             ...(template.defaultToolPolicies !== undefined && {

package/dist/catalog/catalog-scope.service.js

@@ -1067,8 +1067,9 @@ let CatalogScopeService = class CatalogScopeService {
                     orgId: org.id,
                     orgName: org.name,
                     agents: p.agents.map((a) => ({ id: a.id, name: a.name })),
-                    // The sync's uninstall keeps the connectors the install created as the org's own
-                    connectorsKept: p.components.filter((c) => c.kind === "connector" && c.created).length,
+                    // A switch-off keeps every connector recorded on the install but disables it with the
+                    // plugin (spec §5 rule 8); reused ones (created: false) are disabled too
+                    connectorsKept: p.components.filter((c) => c.kind === "connector").length,
                 });
                 continue;
             }

package/dist/catalog/marketplaces.service.d.ts

@@ -188,7 +188,7 @@ export declare function headsToResolve(entries: readonly MarketplaceEntry[], imp
 /** The host versions (an entry's `minKernel` is judged against them). */
 export declare const HOST_VERSIONS: {
     readonly kernel: string;
-    readonly sdk: "0.1.0-rc.20";
+    readonly sdk: "0.1.0-rc.21";
 };
 /** Whether this deployment satisfies the entry's `minKernel`. */
 export declare const entryCompatible: (e: Pick<MarketplaceEntry, "minKernel">) => boolean;

package/dist/catalog/org-catalog.service.js

@@ -273,11 +273,17 @@ let OrgCatalogService = class OrgCatalogService {
             throw itemNotFound();
         const m = v.manifest;
         const templates = await readCatalogTemplates(this.storage, v);
-        // where each template's page finds its setup guide (spec 2026-11-09-setup-guides-v2 §9.3)
+        // Which templates are on in this org now: the install asks for the input of those, a
+        // default-off one an admin switched on included
+        const on = await connectorTemplatesOn(this.db, orgId, itemId, templates.map((t) => t.id));
+        // Where each template's page finds its setup guide (spec 2026-11-09-setup-guides-v2 §9.3)
         const guideOf = (templateId) => {
             const g = templateGuideOf(m, templateId);
             return g ? { itemId, guideId: g.id } : null;
         };
+        // A template whose connector an earlier switch-off kept: the install reuses it, so the wizard
+        // does not ask for its input
+        const connected = await this.pluginInstaller.connectedTemplates(orgId, itemId);
         // Providers the install would switch on first (a refusal is the install's to report)
         const implied = await this.pluginInstaller
             .impliedProviders(orgId, m, templates, m.dependencies ?? [])
@@ -290,7 +296,11 @@ let OrgCatalogService = class OrgCatalogService {
             item,
             hasIcon: m.icon !== undefined,
             extension: m.extension ? m.name : null,
-            templates: templates.map((t) => orgTemplateView(t.id, t.file, guideOf(t.id))),
+            templates: templates.map((t) => orgTemplateView(t.id, t.file, {
+                guide: guideOf(t.id),
+                on: on.has(t.id),
+                connected: connected.has(t.id),
+            })),
             dependencies: [
                 ...(m.dependencies ?? []).map((d) => ({ name: d.name, range: d.version })),
                 ...implied.map((d) => ({ name: d.name, range: d.range, implied: true })),
@@ -298,7 +308,7 @@ let OrgCatalogService = class OrgCatalogService {
             skills: (m.skills ?? []).map((s) => packagePath(s.path)),
             agents: (m.agents ?? []).map((a) => packagePath(a.path)),
             missingTemplates: item.installed !== null && item.state === "needs_config"
-                ? ((await this.pluginInstaller.missingConnectors(orgId, itemId))?.templates ?? []).map((t) => orgTemplateView(t.id, t.file, guideOf(t.id)))
+                ? ((await this.pluginInstaller.missingConnectors(orgId, itemId))?.templates ?? []).map((t) => orgTemplateView(t.id, t.file, { guide: guideOf(t.id), on: true }))
                 : [],
         };
     }

package/dist/catalog/plugin-install.d.ts

@@ -56,16 +56,18 @@ export interface UninstallReport {
         /** A dependency install still wanted on in the org by its own scope: it stays, standalone. */
          | "wanted_by_scope"
         /**
-         * A connector the install created, kept by a scope sync uninstall (the plugin disabled or its
-         * scope narrowed, spec §5 rule 8): it stays as the org's own, with its credentials.
+         * A connector recorded on the install (created there, or taken back from an earlier
+         * switch-off): kept with its endpoint and credentials but switched off with the plugin
+         * (spec §5 rule 8); switching the plugin back on switches it back on.
          */
-         | "org_owned";
+         | "disabled_with_plugin";
     }[];
 }
 /**
  * What switching a plugin off would do, read without changing anything: its components, the ones the
- * uninstall rules would keep for a reason visible beforehand (a component that pre-existed, or one an
- * agent uses), and the agents that use the plugin's skills, connectors or agent templates.
+ * uninstall rules would keep for a reason visible beforehand (a component that pre-existed, one an
+ * agent uses, a connector kept but switched off with the plugin), and the agents that use the
+ * plugin's skills, connectors or agent templates.
  */
 export interface UninstallPreview {
     installId: string;
@@ -211,7 +213,7 @@ export interface UninstallCtx {
         actorTokenId?: string;
         auditDetail?: AuditDetail;
     };
-    /** Uninstalled by the plugin scope sync: the connectors it created stay as the org's own. */
+    /** Uninstalled by the plugin scope sync (a deployment-level disable or a narrowed scope). */
     via?: "scope";
 }
 /**
@@ -434,7 +436,9 @@ export declare class PluginInstaller {
      * lock, one transaction). Removes only components with created=true:
      * - a skill is kept when an agent names it (an inline sub-agent template's `skills`;
      *   used_by_agents) or another plugin install in this org uses it too (used_by_other_install);
-     * - a connector is kept when an agent references it (used_by_agents);
+     * - a connector recorded on the install (created there, or taken back from an earlier switch-off)
+     *   is kept with its endpoint and credentials but switched off with the plugin
+     *   (disabled_with_plugin, spec §5 rule 8); switching the plugin back on switches it back on;
      * - an extension is kept when another plugin install uses it too (used_by_other_install), a
      *   connector still uses a connector it provides (used_by_connectors), or another enabled
      *   extension depends on it (used_by_plugins);
@@ -462,7 +466,8 @@ export declare class PluginInstaller {
      * The uninstall's one transaction; the extensions it disabled are notified once it commits. A
      * scope sync uninstall (`via: "scope"`) re-checks under the org row lock that the item is still
      * not wanted in the org and that no other live install depends on it ({@link ScopeStillWanted},
-     * nothing written), and keeps the connectors it created as the org's own (`org_owned`).
+     * nothing written). Connectors recorded on the install are kept but switched off with the plugin
+     * (spec §5 rule 8), whichever uninstall path leads here.
      */
     private writeUninstall;
     /**
@@ -487,12 +492,12 @@ export declare class PluginInstaller {
      */
     uninstallIn(orgId: string, actor: string | null, installId: string, ctx: UninstallCtx): Promise<"missing" | "kept" | "removed" | "wanted_by_scope">;
     /**
-     * The uninstall rules for one component an install created (a skill, connector or extension;
-     * dependency installs recurse through {@link uninstallIn}), in the caller's transaction: kept
-     * when an agent uses the skill / connector (`used_by_agents`), when another live install outside
-     * `removing` has it (`used_by_other_install`, ownership handed over to the oldest one, so the
-     * uninstall order doesn't change the result), when a connector still uses the extension's
-     * connector kind (`used_by_connectors`) or another enabled extension depends on it
+     * The uninstall rules for one component an install created, in the caller's transaction (see
+     * {@link uninstall}); connectors go through the switch-off branch in {@link uninstallIn} instead,
+     * except in a rollback. Kept when an agent uses the skill (`used_by_agents`), when another live
+     * install outside `removing` has it (`used_by_other_install`, ownership handed over to the oldest
+     * one, so the uninstall order doesn't change the result), when a connector still uses the
+     * extension's connector kind (`used_by_connectors`) or another enabled extension depends on it
      * (`used_by_plugins`); otherwise removed (`removed`, or `gone` when it no longer existed). Used
      * by uninstall and by an upgrade's removals.
      */
@@ -540,6 +545,20 @@ export declare class PluginInstaller {
             file: ConnectorTemplateFile;
         }[];
     } | undefined>;
+    /**
+     * The org's live connectors made from one of the item's connector templates, oldest first
+     * (`templateId` picks one): an uninstall keeps a connector its agents use, and the plugin's next
+     * switch-on reuses it.
+     */
+    private liveTemplateConnectors;
+    /** {@link liveTemplateConnectors} for one template. */
+    private liveTemplateConnector;
+    /**
+     * The org's connector templates it already has a live connector for, by template id: the install
+     * takes that connector back instead of creating one, so the org item detail tells the wizard not
+     * to ask for their input (the same join as {@link liveTemplateConnector}).
+     */
+    connectedTemplates(orgId: string, itemId: string): Promise<Set<string>>;
     /**
      * Creates the connectors an installed plugin is missing (ruling P2-10, `POST …/catalog/:itemId/
      * connectors`): `input.connectors` names some of {@link missingConnectors}' templates with the
@@ -590,8 +609,10 @@ export declare class PluginInstaller {
      * skills and agent templates are platform components (phase 2): the ones on in the org through
      * the plugin (`follow`) go off with it, so the agents using them (by the platform id or an
      * unpinned org copy linked to it) are listed, also for the dependency installs it created that
-     * go with it; ledger rows of earlier installs' org copies are not removed and not listed (an
-     * uninstall keeps legacy copies, like the platform update keeps copies of removed components).
+     * go with it; the connectors recorded on it are listed as kept but disabled with it
+     * (`disabled_with_plugin`) and their users as affected. Ledger rows of earlier installs' org
+     * copies are not removed and not listed (an uninstall keeps legacy copies, like the platform
+     * update keeps copies of removed components).
      */
     previewUninstall(orgId: string, installId: string): Promise<UninstallPreview>;
     /**

package/dist/catalog/plugin-install.js

@@ -356,8 +356,11 @@ let PluginInstaller = class PluginInstaller {
         catch (e) {
             if (!(e instanceof InstallFailure))
                 throw e;
-            // A dependency another install is still installing: retryable, a 409 as it is
-            if (e.cause instanceof ApiError && e.cause.code === "plugin.install_in_progress") {
+            // Retryable: a dependency another install is still installing, or the connector this install
+            // would reuse went away meanwhile: a 409 as it is, with the message saying what to do
+            if (e.cause instanceof ApiError &&
+                (e.cause.code === "plugin.install_in_progress" ||
+                    e.cause.code === "catalog.connector_removed")) {
                 throw e.cause;
             }
             const dep = e.dependency.length > 0 ? ` in dependency ${e.dependency.join(" > ")}` : "";
@@ -484,6 +487,10 @@ let PluginInstaller = class PluginInstaller {
                 // The kernel installs only what needs no org input (the scope sync's `needs_config` rule)
                 if (actor === null)
                     throw systemNeedsInput(manifest.name);
+                // An earlier switch-off kept this template's connector: the install takes it back, so its
+                // input is not asked for here (the connector keeps its endpoint and credentials)
+                if ((await this.liveTemplateConnector(orgId, itemId, ct.id)) !== undefined)
+                    continue;
                 connectors.set(ct.id, this.planConnector(actor, { itemId, version, name: manifest.name }, ct, input, at, approvedBy));
             }
         }
@@ -743,9 +750,29 @@ let PluginInstaller = class PluginInstaller {
             }
             step = "connectors";
             for (const ct of plan.templates) {
+                // An earlier switch-off kept this template's connector (its agents use it): the plugin
+                // takes it back instead of creating a second one, whose default slug the first holds
+                const existing = await this.liveTemplateConnector(orgId, itemId, ct.id);
+                if (existing !== undefined) {
+                    // Switching the plugin back on switches back on the connectors it switched off; one an
+                    // admin disabled by hand stays off
+                    await this.connectors.enableIfPluginDisabledIn(orgId, existing, itemId);
+                    await record({
+                        kind: "connector",
+                        ref: existing,
+                        created: false,
+                        skillVersion: null,
+                        templateId: ct.id,
+                    });
+                    continue;
+                }
                 const ci = plan.connectors.get(ct.id);
-                if (!ci)
-                    throw new ApiError("internal", `Connector template ${ct.id} was not planned`);
+                if (!ci) {
+                    // The plan skipped this template's input because a live connector existed, and it went
+                    // away since (deleted between planning and this step): fail honestly, so the person
+                    // retries and the new plan asks for the input
+                    throw new ApiError("catalog.connector_removed", `The connector this install would reuse for connector template ${ct.id} was removed meanwhile; start the install again`);
+                }
                 if (actor === null)
                     throw systemNeedsInput(manifest.name);
                 const r = await this.connectors.create(orgId, actor, ci, opts.actorTokenId);
@@ -1069,7 +1096,9 @@ let PluginInstaller = class PluginInstaller {
      * lock, one transaction). Removes only components with created=true:
      * - a skill is kept when an agent names it (an inline sub-agent template's `skills`;
      *   used_by_agents) or another plugin install in this org uses it too (used_by_other_install);
-     * - a connector is kept when an agent references it (used_by_agents);
+     * - a connector recorded on the install (created there, or taken back from an earlier switch-off)
+     *   is kept with its endpoint and credentials but switched off with the plugin
+     *   (disabled_with_plugin, spec §5 rule 8); switching the plugin back on switches it back on;
      * - an extension is kept when another plugin install uses it too (used_by_other_install), a
      *   connector still uses a connector it provides (used_by_connectors), or another enabled
      *   extension depends on it (used_by_plugins);
@@ -1095,7 +1124,8 @@ let PluginInstaller = class PluginInstaller {
      * The uninstall's one transaction; the extensions it disabled are notified once it commits. A
      * scope sync uninstall (`via: "scope"`) re-checks under the org row lock that the item is still
      * not wanted in the org and that no other live install depends on it ({@link ScopeStillWanted},
-     * nothing written), and keeps the connectors it created as the org's own (`org_owned`).
+     * nothing written). Connectors recorded on the install are kept but switched off with the plugin
+     * (spec §5 rule 8), whichever uninstall path leads here.
      */
     async writeUninstall(orgId, actor, installId, opts, sw) {
         const { via, ...actorOpts } = opts;
@@ -1296,6 +1326,11 @@ let PluginInstaller = class PluginInstaller {
         // failed (already rolled back) and a stale installing (a replica crashed midway) are cleaned up
         // as a rollback
         const rollbackMode = row.status !== "installed" && row.status !== "upgrading";
+        // A dependency install removed by a failed install's (or a crashed upgrade's) rollback removes
+        // what it created, like the rolled-back install itself: it is a rollback, not a switch-off
+        const connectorRollback = rollbackMode ||
+            ctx.reason === "plugin_install_rollback" ||
+            ctx.reason === "plugin_upgrade_cleanup";
         const comps = await t
             .selectFrom("plugin_install_components")
             .select(["kind", "ref", "created", "skill_version"])
@@ -1338,6 +1373,15 @@ let PluginInstaller = class PluginInstaller {
                 created = now.created;
             }
             const comp = { kind: c.kind, ref: c.ref, created, skillVersion: c.skill_version };
+            // A connector of a switch-off is kept with its endpoint and credentials but switched off
+            // with the plugin (spec §5 rule 8), whether this install created it or took it back from an
+            // earlier switch-off; switching the plugin back on re-enables it. A rollback keeps removing
+            // what the install created (below).
+            if (c.kind === "connector" && !connectorRollback) {
+                await this.connectors.disableWithPluginIn(orgId, c.ref, row.item_id);
+                keep("disabled_with_plugin");
+                continue;
+            }
             // Skills and agent templates of earlier installs (org copies, now linked to the platform
             // components, phase 2) stay: the plugin's components go off in the org with the install
             if ((c.kind === "skill" || c.kind === "agent_template") && !rollbackMode)
@@ -1365,12 +1409,8 @@ let PluginInstaller = class PluginInstaller {
                     keep("wanted_by_scope");
                 continue;
             }
-            // A scope sync uninstall leaves the connectors to the org (spec §5 rule 8): the component row
-            // goes with the install row, so nothing removes them later
-            if (c.kind === "connector" && ctx.via === "scope" && !rollbackMode) {
-                keep("org_owned");
-                continue;
-            }
+            // A scope sync uninstall is a switch-off too: its connectors are disabled above with the
+            // plugin, like an org admin's switch-off.
             const reason = rollbackMode ? "plugin_install_cleanup" : (ctx.reason ?? "plugin_uninstall");
             const outcome = await this.decideRemovalIn(orgId, actor, comp, removing, agentRefs, reason);
             if (outcome === "removed")
@@ -1400,12 +1440,12 @@ let PluginInstaller = class PluginInstaller {
         return "removed";
     }
     /**
-     * The uninstall rules for one component an install created (a skill, connector or extension;
-     * dependency installs recurse through {@link uninstallIn}), in the caller's transaction: kept
-     * when an agent uses the skill / connector (`used_by_agents`), when another live install outside
-     * `removing` has it (`used_by_other_install`, ownership handed over to the oldest one, so the
-     * uninstall order doesn't change the result), when a connector still uses the extension's
-     * connector kind (`used_by_connectors`) or another enabled extension depends on it
+     * The uninstall rules for one component an install created, in the caller's transaction (see
+     * {@link uninstall}); connectors go through the switch-off branch in {@link uninstallIn} instead,
+     * except in a rollback. Kept when an agent uses the skill (`used_by_agents`), when another live
+     * install outside `removing` has it (`used_by_other_install`, ownership handed over to the oldest
+     * one, so the uninstall order doesn't change the result), when a connector still uses the
+     * extension's connector kind (`used_by_connectors`) or another enabled extension depends on it
      * (`used_by_plugins`); otherwise removed (`removed`, or `gone` when it no longer existed). Used
      * by uninstall and by an upgrade's removals.
      */
@@ -1657,6 +1697,38 @@ let PluginInstaller = class PluginInstaller {
             templates: all.filter((t) => on.has(t.id) && !made.has(t.id)),
         };
     }
+    /**
+     * The org's live connectors made from one of the item's connector templates, oldest first
+     * (`templateId` picks one): an uninstall keeps a connector its agents use, and the plugin's next
+     * switch-on reuses it.
+     */
+    async liveTemplateConnectors(orgId, itemId, templateId) {
+        let q = this.db
+            .selectFrom("connectors as c")
+            .innerJoin("platform_connector_templates as p", "p.id", "c.platform_template_id")
+            .select(["p.template_id", "c.id"])
+            .where("c.org_id", "=", orgId)
+            .where("c.deleted_at", "is", null)
+            .where("p.catalog_item_id", "=", itemId);
+        if (templateId !== undefined)
+            q = q.where("p.template_id", "=", templateId);
+        const rows = await q.orderBy("c.created_at").orderBy("c.id").execute();
+        return rows.map((r) => ({ templateId: r.template_id, connectorId: r.id }));
+    }
+    /** {@link liveTemplateConnectors} for one template. */
+    async liveTemplateConnector(orgId, itemId, templateId) {
+        const [row] = await this.liveTemplateConnectors(orgId, itemId, templateId);
+        return row?.connectorId;
+    }
+    /**
+     * The org's connector templates it already has a live connector for, by template id: the install
+     * takes that connector back instead of creating one, so the org item detail tells the wizard not
+     * to ask for their input (the same join as {@link liveTemplateConnector}).
+     */
+    async connectedTemplates(orgId, itemId) {
+        const rows = await this.liveTemplateConnectors(orgId, itemId);
+        return new Set(rows.map((r) => r.templateId));
+    }
     /**
      * Creates the connectors an installed plugin is missing (ruling P2-10, `POST …/catalog/:itemId/
      * connectors`): `input.connectors` names some of {@link missingConnectors}' templates with the
@@ -1851,8 +1923,10 @@ let PluginInstaller = class PluginInstaller {
      * skills and agent templates are platform components (phase 2): the ones on in the org through
      * the plugin (`follow`) go off with it, so the agents using them (by the platform id or an
      * unpinned org copy linked to it) are listed, also for the dependency installs it created that
-     * go with it; ledger rows of earlier installs' org copies are not removed and not listed (an
-     * uninstall keeps legacy copies, like the platform update keeps copies of removed components).
+     * go with it; the connectors recorded on it are listed as kept but disabled with it
+     * (`disabled_with_plugin`) and their users as affected. Ledger rows of earlier installs' org
+     * copies are not removed and not listed (an uninstall keeps legacy copies, like the platform
+     * update keeps copies of removed components).
      */
     async previewUninstall(orgId, installId) {
         if (!UUID_RE.test(installId))
@@ -1885,13 +1959,23 @@ let PluginInstaller = class PluginInstaller {
         };
         const kept = [];
         /**
-         * The agents using what goes with an install: connectors it created (they stay, kept for the
-         * agents) and the plugin's platform skills and agent templates on in the org through it
-         * (`follow`; by the platform id or an unpinned org copy linked to it). Dependency installs it
-         * created go with it unless their own scope wants them (Task 7: their components count too).
+         * The agents using what goes with an install: the connectors recorded on it (they are kept
+         * but disabled with the plugin, so their tools stop) and the plugin's platform skills and
+         * agent templates on in the org through it (`follow`; by the platform id or an unpinned org
+         * copy linked to it). Dependency installs it created go with it unless their own scope wants
+         * them (Task 7: their components count too).
          */
         const visit = async (itemId, rows, top, seen) => {
             for (const c of rows) {
+                // Every connector of the install, created here or taken back, is kept and disabled with
+                // the plugin (a rollback's preview is not shown): it is not removed, and its users lose it
+                if (c.kind === "connector") {
+                    if (top)
+                        kept.push({ kind: c.kind, ref: c.ref, reason: "disabled_with_plugin" });
+                    for (const a of agents.filter((x) => x.connectors.has(c.ref)))
+                        use(a, c.kind, c.ref);
+                    continue;
+                }
                 if (!c.created) {
                     if (top)
                         kept.push({ kind: c.kind, ref: c.ref, reason: "pre_existing" });
@@ -1916,17 +2000,7 @@ let PluginInstaller = class PluginInstaller {
                     seen.add(c.ref);
                     const sub = (await ledger(c.ref)).filter((x) => x.kind !== "skill" && x.kind !== "agent_template");
                     await visit(dep.item_id, sub, false, seen);
-                    continue;
                 }
-                if (c.kind !== "connector")
-                    continue;
-                const users = agents.filter((a) => a.connectors.has(c.ref));
-                if (users.length === 0)
-                    continue;
-                if (top)
-                    kept.push({ kind: c.kind, ref: c.ref, reason: "used_by_agents" });
-                for (const a of users)
-                    use(a, c.kind, c.ref);
             }
             for (const kind of ["skill", "agent_template"]) {
                 const platform = await loadComponents(t, kind, { itemId });

package/dist/catalog/plugin-upgrade.js

@@ -689,6 +689,7 @@ let PlatformPluginUpdater = class PlatformPluginUpdater {
         const input = {
             endpoint,
             auth: template.auth,
+            ...(template.git !== undefined && { git: template.git }),
             template: {
                 itemId,
                 version,

package/dist/channels/actions.d.ts

@@ -35,7 +35,10 @@ export declare class ChannelCardActions {
     private readonly deps;
     constructor(deps: ChannelCardActionsDeps);
     handle(connectionId: string, e: CardActionEvent): Promise<void>;
-    /** Whether the approval `id` of the org is a network ask. */
+    /**
+     * Whether the approval `id` of the org is a network or git push ask (each the asked person's
+     * own, decided by them in person).
+     */
     private isNetworkAsk;
 }
 export {};

package/dist/channels/actions.js

@@ -130,7 +130,10 @@ export class ChannelCardActions {
         // row is the child's, which has no delivery of its own
         await this.deps.outbound.enqueue(card.conversation_id);
     }
-    /** Whether the approval `id` of the org is a network ask. */
+    /**
+     * Whether the approval `id` of the org is a network or git push ask (each the asked person's
+     * own, decided by them in person).
+     */
     async isNetworkAsk(orgId, id) {
         const r = await this.deps.db
             .selectFrom("approvals")
@@ -138,6 +141,6 @@ export class ChannelCardActions {
             .where("id", "=", id)
             .where("org_id", "=", orgId)
             .executeTakeFirst();
-        return r?.kind === "network";
+        return r?.kind === "network" || r?.kind === "git";
     }
 }

package/dist/channels/cards.d.ts

@@ -1,6 +1,6 @@
 import { type ChannelCard, type FormAnswer, type InputForm, type OutboundMessage } from "@capybara-hq/plugin-sdk";
 import type { KernelSchemaDb } from "../db/kernel-schema.js";
-import type { ApprovalsService, ApprovalView, NetworkAskView } from "../tools/approvals.service.js";
+import type { ApprovalsService, ApprovalView, GitAskView, NetworkAskView } from "../tools/approvals.service.js";
 import { type ToolInfo } from "../tools/info.js";
 import type { ToolRegistry } from "../tools/registry.js";
 import { type ChannelLocale } from "./phrases.js";
@@ -62,6 +62,12 @@ export interface NetworkCardText {
  * are redacted by `redact` (the connection's secret values); the description stays on the web.
  */
 export declare function networkCardText(detail: Pick<NetworkAskView, "hosts" | "command">, locale: ChannelLocale, redact?: (s: string) => string): NetworkCardText;
+/**
+ * A git push ask's card text (sandbox git credentials spec §7): the title names the repository;
+ * the preview is `<host>/<repo>`, the refs (`refs/heads/` dropped) and the command clipped to
+ * {@link CARD_SUMMARY_MAX}. Model-controlled values are redacted by `redact`.
+ */
+export declare function gitCardText(detail: Pick<GitAskView, "host" | "repo" | "refs" | "command">, locale: ChannelLocale, redact?: (s: string) => string): NetworkCardText;
 /**
  * The approval card in the approval's current state; undefined when the approval does not exist.
  * A role escalation offers only "once". A network ask names its hosts and command and labels its

package/dist/channels/cards.js

@@ -194,6 +194,28 @@ export function networkCardText(detail, locale, redact = (s) => s) {
         },
     };
 }
+/**
+ * A git push ask's card text (sandbox git credentials spec §7): the title names the repository;
+ * the preview is `<host>/<repo>`, the refs (`refs/heads/` dropped) and the command clipped to
+ * {@link CARD_SUMMARY_MAX}. Model-controlled values are redacted by `redact`.
+ */
+export function gitCardText(detail, locale, redact = (s) => s) {
+    const repo = redact(detail.repo);
+    const refs = detail.refs.map((r) => redact(r.replace(/^refs\/heads\//, "")));
+    const command = cut(redact((detail.command ?? "").trim()), CARD_SUMMARY_MAX);
+    return {
+        title: phrase("gitTitle", locale).replace("{repo}", repo),
+        inputPreview: [
+            `${redact(detail.host)}/${repo}`,
+            ...(refs.length > 0 ? [refs.join(", ")] : []),
+            ...(command !== "" ? ["", command] : []),
+        ].join("\n"),
+        scopeLabels: {
+            once: phrase("gitAllowOnce", locale),
+            always: phrase("gitAllowAlways", locale),
+        },
+    };
+}
 /**
  * The approval card in the approval's current state; undefined when the approval does not exist.
  * A role escalation offers only "once". A network ask names its hosts and command and labels its
@@ -204,7 +226,12 @@ export async function approvalCard(d, approvalId, base, locale, redact) {
     if (!v)
         return undefined;
     const decidedBy = await displayName(d.db, v.decidedBy);
-    const network = v.kind === "network" && v.detail !== null ? networkCardText(v.detail, locale, redact) : null;
+    // a network or git ask names what it asks about instead of a tool call (same card shape)
+    const network = v.kind === "network" && v.detail !== null
+        ? networkCardText(v.detail, locale, redact)
+        : v.kind === "git" && v.git != null
+            ? gitCardText(v.git, locale, redact)
+            : null;
     const display = v.summary === null && network === null
         ? (await toolInfo({ db: d.db, registry: d.registry }, v.orgId, [v.toolKey]))[0]
         : undefined;

package/dist/channels/phrases.d.ts

@@ -116,6 +116,21 @@ export declare const CHANNEL_PHRASES: {
         readonly zh: "这台设备一直允许";
         readonly en: "Always allow on this device";
     };
+    /** A git push ask's card title (`{repo}`; sandbox git credentials spec §7). */
+    readonly gitTitle: {
+        readonly zh: "智能体想推送到 {repo}，允许吗？";
+        readonly en: "The agent wants to push to {repo}. Allow?";
+    };
+    /** A git push ask's 「once」 button. */
+    readonly gitAllowOnce: {
+        readonly zh: "这次允许";
+        readonly en: "Allow this time";
+    };
+    /** A git push ask's 「always」 button: the person's standing allow for the repository. */
+    readonly gitAllowAlways: {
+        readonly zh: "这个仓库一直允许";
+        readonly en: "Always allow this repository";
+    };
     /** 提问卡片的随附文本。 */
     readonly questionTitle: {
         readonly zh: "需要你的回答";