@capybara-hq/kernel 0.1.0-rc.6 → 0.1.0-rc.8

package/dist/catalog/marketplaces.service.js

@@ -496,6 +496,25 @@ let MarketplacesService = class MarketplacesService {
         await this.writeAdd(actor, id, { ...input, name, form, url }, opts);
         return this.get(id);
     }
+    /**
+     * The read-only checks of {@link add}, for the `Platform` tool's precheck (before the card): the
+     * name, URL and git fields as `add` checks them (throws `validation_failed`), then the source
+     * that has the same URL and ref already, if any (adding a duplicate is allowed; the tool points
+     * the agent at the existing source instead).
+     */
+    async checkAdd(input) {
+        this.checkName(input.name);
+        const { form, url } = marketplaceForm(input.url);
+        this.checkUrls(url, []);
+        this.checkGitFields(form, input.ref ?? null, []);
+        const same = await this.db
+            .selectFrom("marketplaces")
+            .select(["id", "name"])
+            .where("url", "=", url)
+            .where("ref", input.ref === undefined ? "is" : "=", input.ref ?? null)
+            .executeTakeFirst();
+        return same ?? null;
+    }
     async writeAdd(actor, id, input, opts) {
         const { name, url, form } = input;
         const t = this.db;
@@ -639,6 +658,7 @@ let MarketplacesService = class MarketplacesService {
                 ...(set.url !== undefined && { url: set.url }),
                 ...(set.form !== undefined && { form: set.form }),
                 ...(set.ref !== undefined && { ref: set.ref }),
+                ...opts.auditDetail,
             },
         });
     }
@@ -667,7 +687,7 @@ let MarketplacesService = class MarketplacesService {
             ...(opts.actorTokenId !== undefined && { actorTokenId: opts.actorTokenId }),
             action: "marketplace.removed",
             target: id,
-            detail: { name: row.name, url: row.url },
+            detail: { name: row.name, url: row.url, ...opts.auditDetail },
         });
     }
     /**
@@ -1204,6 +1224,7 @@ let MarketplacesService = class MarketplacesService {
                     from: cur.last_status,
                     to: status,
                     ...(lastError !== null && { error: lastError }),
+                    ...opts.auditDetail,
                 },
             });
         }

package/dist/catalog/org-catalog.controller.d.ts

@@ -5,40 +5,10 @@ import { type OrgContext } from "../orgs/org.guard.js";
 import type { ConnectorDetail, ToolIssue } from "../tools/connectors.service.js";
 import type { MarketplaceImportResult } from "./catalog.service.js";
 import type { CatalogIcon, OrgCatalogDetail, OrgCatalogItem, OrgInstallResult } from "./catalog-content.js";
+import { CatalogMarketplaceRequestBody, CatalogRequestBody, CatalogRequestsListQuery, OrgPluginInstallBody, OrgPluginSwitchBody } from "./org-catalog.schemas.js";
 import { OrgCatalogService } from "./org-catalog.service.js";
 import { PluginInstaller, type PluginInstallView, type UninstallPreview, type UninstallReport } from "./plugin-install.js";
 import { CatalogRequestsService, type CatalogRequestView } from "./requests.service.js";
-declare const RequestBody: z.ZodObject<{
-    kind: z.ZodEnum<{
-        access: "access";
-        enable: "enable";
-    }>;
-    note: z.ZodOptional<z.ZodString>;
-}, z.core.$strict>;
-/** An org admin's request for a marketplace entry not in the catalog yet. */
-declare const MarketplaceRequestBody: z.ZodObject<{
-    marketplaceId: z.ZodString;
-    name: z.ZodString;
-    version: z.ZodString;
-    note: z.ZodOptional<z.ZodString>;
-}, z.core.$strict>;
-/**
- * The org install body: template input, the extension's org config. No version: an org installs the
- * platform version (one per deployment, ruling P2-17).
- */
-declare const InstallBody: z.ZodObject<{
-    connectors: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
-        name: z.ZodOptional<z.ZodString>;
-        slug: z.ZodOptional<z.ZodString>;
-        endpoint: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
-        credential: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
-        client: z.ZodOptional<z.ZodObject<{
-            clientId: z.ZodString;
-            clientSecret: z.ZodOptional<z.ZodString>;
-        }, z.core.$strict>>;
-    }, z.core.$strict>>>;
-    extensionConfig: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
-}, z.core.$strict>;
 /** The connectors body (ruling P2-10): the input of missing connectors, by template id, as at install. */
 declare const ConnectorsBody: z.ZodObject<{
     inputs: z.ZodObject<{
@@ -70,24 +40,6 @@ declare const TemplateConnectorBody: z.ZodObject<{
         }, z.core.$strict>>;
     }, z.core.$strict>;
 }, z.core.$strict>;
-/** The switch body: on (with the install inputs), or off (with the preview's hash to confirm). */
-declare const SwitchBody: z.ZodObject<{
-    enabled: z.ZodBoolean;
-    inputs: z.ZodOptional<z.ZodObject<{
-        connectors: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
-            name: z.ZodOptional<z.ZodString>;
-            slug: z.ZodOptional<z.ZodString>;
-            endpoint: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
-            credential: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
-            client: z.ZodOptional<z.ZodObject<{
-                clientId: z.ZodString;
-                clientSecret: z.ZodOptional<z.ZodString>;
-            }, z.core.$strict>>;
-        }, z.core.$strict>>>;
-        extensionConfig: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
-    }, z.core.$strict>>;
-    confirm: z.ZodOptional<z.ZodString>;
-}, z.core.$strict>;
 /**
  * 条目图标的响应头：图标可能是 SVG（可含脚本），只许网页以 `<img>` 显示；直接打开时 CSP sandbox 禁止脚本与一切外部
  * 请求，nosniff 防浏览器按内容另行判型。
@@ -97,14 +49,6 @@ declare const DecideBody: z.ZodObject<{
     approve: z.ZodBoolean;
     reason: z.ZodOptional<z.ZodString>;
 }, z.core.$strict>;
-declare const AdminListQuery: z.ZodObject<{
-    status: z.ZodOptional<z.ZodEnum<{
-        approved: "approved";
-        cancelled: "cancelled";
-        pending: "pending";
-        rejected: "rejected";
-    }>>;
-}, z.core.$strip>;
 /**
  * The platform catalog from an organization's view (`/api/v1/orgs/:orgId/...`, human users only):
  * - `GET catalog` (`catalog.read`, member and up; members do not see disabled items);
@@ -150,23 +94,23 @@ export declare class OrgCatalogController {
      * A request for an item (spec §5.1): `enable` (members and up, an item that is off) or `access`
      * (org admins, a `named` item shown to the org) -> 201 `{ request }`.
      */
-    request(principal: Principal, org: OrgContext, itemId: string, body: z.infer<typeof RequestBody>): Promise<{
+    request(principal: Principal, org: OrgContext, itemId: string, body: z.infer<typeof CatalogRequestBody>): Promise<{
         request: CatalogRequestView;
     }>;
     /**
      * An org admin asks for a marketplace entry to be imported (deployment setting
      * `orgMarketplaceBrowse`) -> 201 `{ request }`.
      */
-    marketplaceRequest(principal: Principal, org: OrgContext, body: z.infer<typeof MarketplaceRequestBody>): Promise<{
+    marketplaceRequest(principal: Principal, org: OrgContext, body: z.infer<typeof CatalogMarketplaceRequestBody>): Promise<{
         request: CatalogRequestView;
     }>;
-    setSwitch(principal: Principal, org: OrgContext, itemId: string, body: z.infer<typeof SwitchBody>): Promise<{
+    setSwitch(principal: Principal, org: OrgContext, itemId: string, body: z.infer<typeof OrgPluginSwitchBody>): Promise<{
         item: OrgCatalogItem;
     } | {
         preview: UninstallPreview;
         confirm: string;
     }>;
-    install(principal: Principal, org: OrgContext, itemId: string, body: z.infer<typeof InstallBody>, reply: FastifyReply): Promise<Omit<OrgInstallResult, "status">>;
+    install(principal: Principal, org: OrgContext, itemId: string, body: z.infer<typeof OrgPluginInstallBody>, reply: FastifyReply): Promise<Omit<OrgInstallResult, "status">>;
     /**
      * Creates the connectors an installed plugin is missing (ruling P2-10: a connector template on
      * in the org without a connector there, e.g. added by a platform update; the plugin shows
@@ -209,7 +153,7 @@ export declare class OrgCatalogController {
 export declare class AdminCatalogRequestsController {
     private readonly requests;
     constructor(requests: CatalogRequestsService);
-    list(q: z.infer<typeof AdminListQuery>): Promise<{
+    list(q: z.infer<typeof CatalogRequestsListQuery>): Promise<{
         requests: CatalogRequestView[];
     }>;
     decide(principal: Principal, id: string, body: z.infer<typeof DecideBody>): Promise<{

package/dist/catalog/org-catalog.controller.js

@@ -14,54 +14,14 @@ import { createZodDto } from "../infra/validation/create-zod-dto.js";
 import { ZBody, ZQuery } from "../infra/validation/zod-params.js";
 import { CurrentOrg, OrgAction } from "../orgs/org.guard.js";
 import { roleAtLeast } from "../orgs/roles.js";
-import { CredentialValue } from "../tools/connectors.controller.js";
+import { CatalogConnectorInput, CatalogMarketplaceRequestBody, CatalogRequestBody, CatalogRequestsListQuery, OrgPluginInstallBody, OrgPluginSwitchBody, } from "./org-catalog.schemas.js";
 import { OrgCatalogService } from "./org-catalog.service.js";
 import { PluginInstaller, } from "./plugin-install.js";
 import { CatalogRequestsService } from "./requests.service.js";
-const RequestBody = z
-    .object({
-    kind: z.enum(["access", "enable"]),
-    note: z.string().max(1000).optional(),
-})
-    .strict();
-/** An org admin's request for a marketplace entry not in the catalog yet. */
-const MarketplaceRequestBody = z
-    .object({
-    marketplaceId: z.string().min(1).max(100),
-    name: z.string().min(1).max(214),
-    version: z.string().min(1).max(256),
-    note: z.string().max(1000).optional(),
-})
-    .strict();
-const ConnectorInput = z
-    .object({
-    name: z.string().trim().min(1).max(80).optional(),
-    slug: z.string().max(24).optional(),
-    endpoint: z.record(z.string(), z.unknown()).optional(),
-    credential: CredentialValue.optional(),
-    client: z
-        .object({
-        clientId: z.string().min(1).max(500),
-        clientSecret: z.string().min(1).max(4000).optional(),
-    })
-        .strict()
-        .optional(),
-})
-    .strict();
-/**
- * The org install body: template input, the extension's org config. No version: an org installs the
- * platform version (one per deployment, ruling P2-17).
- */
-const InstallBody = z
-    .object({
-    connectors: z.record(z.string(), ConnectorInput).optional(),
-    extensionConfig: z.record(z.string(), z.unknown()).optional(),
-})
-    .strict();
 /** The connectors body (ruling P2-10): the input of missing connectors, by template id, as at install. */
 const ConnectorsBody = z
     .object({
-    inputs: z.object({ connectors: z.record(z.string(), ConnectorInput) }).strict(),
+    inputs: z.object({ connectors: z.record(z.string(), CatalogConnectorInput) }).strict(),
 })
     .strict();
 /**
@@ -71,18 +31,7 @@ const ConnectorsBody = z
 const TemplateConnectorBody = z
     .object({
     name: z.string().trim().min(1).max(80).optional(),
-    config: ConnectorInput.omit({ name: true }),
-})
-    .strict();
-/** The switch body: on (with the install inputs), or off (with the preview's hash to confirm). */
-const SwitchBody = z
-    .object({
-    enabled: z.boolean(),
-    inputs: InstallBody.optional(),
-    confirm: z
-        .string()
-        .regex(/^[0-9a-f]{64}$/)
-        .optional(),
+    config: CatalogConnectorInput.omit({ name: true }),
 })
     .strict();
 /**
@@ -100,24 +49,21 @@ export async function sendCatalogIcon(reply, icon) {
 const DecideBody = z
     .object({ approve: z.boolean(), reason: z.string().max(1000).optional() })
     .strict();
-const AdminListQuery = z.object({
-    status: z.enum(["pending", "approved", "rejected", "cancelled"]).optional(),
-});
-class CatalogRequestsQuery extends createZodDto(AdminListQuery, "CatalogRequestsQuery") {
+class CatalogRequestsQuery extends createZodDto(CatalogRequestsListQuery, "CatalogRequestsQuery") {
 }
 class CatalogDecideBody extends createZodDto(DecideBody, "CatalogDecideBody") {
 }
-class OrgPluginInstallBody extends createZodDto(InstallBody, "OrgPluginInstallBody") {
+class OrgPluginInstallBodyDto extends createZodDto(OrgPluginInstallBody, "OrgPluginInstallBody") {
 }
 class OrgPluginConnectorsBody extends createZodDto(ConnectorsBody, "OrgPluginConnectorsBody") {
 }
-class OrgPluginSwitchBody extends createZodDto(SwitchBody, "OrgPluginSwitchBody") {
+class OrgPluginSwitchBodyDto extends createZodDto(OrgPluginSwitchBody, "OrgPluginSwitchBody") {
 }
 class OrgTemplateConnectorBody extends createZodDto(TemplateConnectorBody, "OrgTemplateConnectorBody") {
 }
-class CatalogRequestBody extends createZodDto(RequestBody, "CatalogRequestBody") {
+class CatalogRequestBodyDto extends createZodDto(CatalogRequestBody, "CatalogRequestBody") {
 }
-class CatalogMarketplaceRequestBody extends createZodDto(MarketplaceRequestBody, "CatalogMarketplaceRequestBody") {
+class CatalogMarketplaceRequestBodyDto extends createZodDto(CatalogMarketplaceRequestBody, "CatalogMarketplaceRequestBody") {
 }
 /**
  * The platform catalog from an organization's view (`/api/v1/orgs/:orgId/...`, human users only):
@@ -289,7 +235,7 @@ __decorate([
     __param(0, CurrentPrincipal()),
     __param(1, CurrentOrg()),
     __param(2, Param("itemId")),
-    __param(3, ZBody(CatalogRequestBody))
+    __param(3, ZBody(CatalogRequestBodyDto))
 ], OrgCatalogController.prototype, "request", null);
 __decorate([
     Post("marketplace-requests"),
@@ -297,7 +243,7 @@ __decorate([
     OrgAction("catalog.decide"),
     __param(0, CurrentPrincipal()),
     __param(1, CurrentOrg()),
-    __param(2, ZBody(CatalogMarketplaceRequestBody))
+    __param(2, ZBody(CatalogMarketplaceRequestBodyDto))
 ], OrgCatalogController.prototype, "marketplaceRequest", null);
 __decorate([
     Put("catalog/:itemId/switch"),
@@ -305,7 +251,7 @@ __decorate([
     __param(0, CurrentPrincipal()),
     __param(1, CurrentOrg()),
     __param(2, Param("itemId")),
-    __param(3, ZBody(OrgPluginSwitchBody))
+    __param(3, ZBody(OrgPluginSwitchBodyDto))
 ], OrgCatalogController.prototype, "setSwitch", null);
 __decorate([
     Post("catalog/:itemId/install"),
@@ -313,7 +259,7 @@ __decorate([
     __param(0, CurrentPrincipal()),
     __param(1, CurrentOrg()),
     __param(2, Param("itemId")),
-    __param(3, ZBody(OrgPluginInstallBody)),
+    __param(3, ZBody(OrgPluginInstallBodyDto)),
     __param(4, Res({ passthrough: true }))
 ], OrgCatalogController.prototype, "install", null);
 __decorate([

package/dist/catalog/org-catalog.schemas.d.ts

@@ -0,0 +1,79 @@
+import { z } from "zod";
+import type { RouteSchemas } from "../platform/route-schemas.js";
+export declare const CatalogRequestBody: z.ZodObject<{
+    kind: z.ZodEnum<{
+        access: "access";
+        enable: "enable";
+    }>;
+    note: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+/** An org admin's request for a marketplace entry not in the catalog yet. */
+export declare const CatalogMarketplaceRequestBody: z.ZodObject<{
+    marketplaceId: z.ZodString;
+    name: z.ZodString;
+    version: z.ZodString;
+    note: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export declare const CatalogConnectorInput: z.ZodObject<{
+    name: z.ZodOptional<z.ZodString>;
+    slug: z.ZodOptional<z.ZodString>;
+    endpoint: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    credential: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    client: z.ZodOptional<z.ZodObject<{
+        clientId: z.ZodString;
+        clientSecret: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+/**
+ * The org install body: template input, the extension's org config. No version: an org installs the
+ * platform version (one per deployment, ruling P2-17).
+ */
+export declare const OrgPluginInstallBody: z.ZodObject<{
+    connectors: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+        name: z.ZodOptional<z.ZodString>;
+        slug: z.ZodOptional<z.ZodString>;
+        endpoint: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        credential: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        client: z.ZodOptional<z.ZodObject<{
+            clientId: z.ZodString;
+            clientSecret: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>>;
+    }, z.core.$strict>>>;
+    extensionConfig: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+}, z.core.$strict>;
+/** The switch body: on (with the install inputs), or off (with the preview's hash to confirm). */
+export declare const OrgPluginSwitchBody: z.ZodObject<{
+    enabled: z.ZodBoolean;
+    inputs: z.ZodOptional<z.ZodObject<{
+        connectors: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+            name: z.ZodOptional<z.ZodString>;
+            slug: z.ZodOptional<z.ZodString>;
+            endpoint: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+            credential: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+            client: z.ZodOptional<z.ZodObject<{
+                clientId: z.ZodString;
+                clientSecret: z.ZodOptional<z.ZodString>;
+            }, z.core.$strict>>;
+        }, z.core.$strict>>>;
+        extensionConfig: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    }, z.core.$strict>>;
+    confirm: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+/** `:itemId` as the routes take it (`@Param`). */
+export declare const CatalogItemPathParams: z.ZodObject<{
+    itemId: z.ZodString;
+}, z.core.$strip>;
+/** `:installId` as the uninstall route takes it (`@Param`). */
+export declare const PluginInstallPathParams: z.ZodObject<{
+    installId: z.ZodString;
+}, z.core.$strip>;
+/** The super admin's request list filter. */
+export declare const CatalogRequestsListQuery: z.ZodObject<{
+    status: z.ZodOptional<z.ZodEnum<{
+        approved: "approved";
+        cancelled: "cancelled";
+        pending: "pending";
+        rejected: "rejected";
+    }>>;
+}, z.core.$strip>;
+export declare const ORG_CATALOG_ROUTES: readonly RouteSchemas[];

package/dist/catalog/org-catalog.schemas.js

@@ -0,0 +1,82 @@
+import { z } from "zod";
+import { CredentialValue } from "../tools/connectors.schemas.js";
+export const CatalogRequestBody = z
+    .object({
+    kind: z.enum(["access", "enable"]),
+    note: z.string().max(1000).optional(),
+})
+    .strict();
+/** An org admin's request for a marketplace entry not in the catalog yet. */
+export const CatalogMarketplaceRequestBody = z
+    .object({
+    marketplaceId: z.string().min(1).max(100),
+    name: z.string().min(1).max(214),
+    version: z.string().min(1).max(256),
+    note: z.string().max(1000).optional(),
+})
+    .strict();
+export const CatalogConnectorInput = z
+    .object({
+    name: z.string().trim().min(1).max(80).optional(),
+    slug: z.string().max(24).optional(),
+    endpoint: z.record(z.string(), z.unknown()).optional(),
+    credential: CredentialValue.optional(),
+    client: z
+        .object({
+        clientId: z.string().min(1).max(500),
+        clientSecret: z.string().min(1).max(4000).optional(),
+    })
+        .strict()
+        .optional(),
+})
+    .strict();
+/**
+ * The org install body: template input, the extension's org config. No version: an org installs the
+ * platform version (one per deployment, ruling P2-17).
+ */
+export const OrgPluginInstallBody = z
+    .object({
+    connectors: z.record(z.string(), CatalogConnectorInput).optional(),
+    extensionConfig: z.record(z.string(), z.unknown()).optional(),
+})
+    .strict();
+/** The switch body: on (with the install inputs), or off (with the preview's hash to confirm). */
+export const OrgPluginSwitchBody = z
+    .object({
+    enabled: z.boolean(),
+    inputs: OrgPluginInstallBody.optional(),
+    confirm: z
+        .string()
+        .regex(/^[0-9a-f]{64}$/)
+        .optional(),
+})
+    .strict();
+/** `:itemId` as the routes take it (`@Param`). */
+export const CatalogItemPathParams = z.object({ itemId: z.string().min(1) });
+/** `:installId` as the uninstall route takes it (`@Param`). */
+export const PluginInstallPathParams = z.object({ installId: z.string().min(1) });
+/** The super admin's request list filter. */
+export const CatalogRequestsListQuery = z.object({
+    status: z.enum(["pending", "approved", "rejected", "cancelled"]).optional(),
+});
+export const ORG_CATALOG_ROUTES = [
+    { route: "GET /api/v1/orgs/:orgId/catalog" },
+    { route: "GET /api/v1/orgs/:orgId/catalog/:itemId", params: CatalogItemPathParams },
+    {
+        route: "POST /api/v1/orgs/:orgId/catalog/:itemId/requests",
+        params: CatalogItemPathParams,
+        body: CatalogRequestBody,
+    },
+    { route: "POST /api/v1/orgs/:orgId/marketplace-requests", body: CatalogMarketplaceRequestBody },
+    {
+        route: "PUT /api/v1/orgs/:orgId/catalog/:itemId/switch",
+        params: CatalogItemPathParams,
+        body: OrgPluginSwitchBody,
+    },
+    { route: "GET /api/v1/orgs/:orgId/plugin-installs" },
+    {
+        route: "DELETE /api/v1/orgs/:orgId/plugin-installs/:installId",
+        params: PluginInstallPathParams,
+    },
+    { route: "GET /api/v1/admin/catalog/requests", query: CatalogRequestsListQuery },
+];

package/dist/catalog/org-catalog.service.d.ts

@@ -1,4 +1,5 @@
 import { ExtensionRegistry } from "../extensions/registry.js";
+import { ExtensionAvailability } from "../extensions/unavailable.js";
 import { KernelDb } from "../infra/database/kernel-db.js";
 import { TransactionHost } from "../infra/database/transaction-host.js";
 import type { KernelLogger } from "../log.js";
@@ -35,9 +36,13 @@ export declare class OrgCatalogService {
     private readonly pluginInstaller;
     private readonly log;
     readonly txHost: TransactionHost;
+    /** Why a plugin's extension cannot run (the `unavailable` state's reason). */
+    private readonly availability;
     constructor(kdb: KernelDb, 
     /** The org row lock (orgs/org-lock.ts): joins the caller's transaction. */
-    orgLock: OrgLock, storage: StorageService, registry: ExtensionRegistry, pluginInstaller: PluginInstaller, log: KernelLogger, txHost: TransactionHost);
+    orgLock: OrgLock, storage: StorageService, registry: ExtensionRegistry, pluginInstaller: PluginInstaller, log: KernelLogger, txHost: TransactionHost, 
+    /** Why a plugin's extension cannot run (the `unavailable` state's reason). */
+    availability: ExtensionAvailability);
     /** The kernel-schema handle of the current context (the transaction, else the pool). */
     private get db();
     /**
@@ -99,7 +104,9 @@ export declare class OrgCatalogService {
      * install writes the switch row false in the uninstall's transaction (an `all` item then stays
      * off in the org); removing a failed or stale one writes none.
      */
-    uninstall(orgId: string, actor: string, installId: string, actorTokenId?: string): Promise<UninstallReport>;
+    uninstall(orgId: string, actor: string, installId: string, actorTokenId?: string, 
+    /** Merged into the audit detail (a write made through the Platform tool). */
+    auditDetail?: Record<string, unknown>): Promise<UninstallReport>;
     private itemOf;
     /**
      * Writes the org's switch row of the item under the org row lock. The item row is locked FOR

package/dist/catalog/org-catalog.service.js

@@ -10,6 +10,7 @@ var __param = (this && this.__param) || function (paramIndex, decorator) {
 import { Inject, Injectable } from "@nestjs/common";
 import { ApiError } from "../errors.js";
 import { ExtensionRegistry } from "../extensions/registry.js";
+import { ExtensionAvailability } from "../extensions/unavailable.js";
 import { KernelDb } from "../infra/database/kernel-db.js";
 import { TransactionHost } from "../infra/database/transaction-host.js";
 import { Transactional } from "../infra/database/transactional.decorator.js";
@@ -47,9 +48,12 @@ let OrgCatalogService = class OrgCatalogService {
     pluginInstaller;
     log;
     txHost;
+    availability;
     constructor(kdb, 
     /** The org row lock (orgs/org-lock.ts): joins the caller's transaction. */
-    orgLock, storage, registry, pluginInstaller, log, txHost) {
+    orgLock, storage, registry, pluginInstaller, log, txHost, 
+    /** Why a plugin's extension cannot run (the `unavailable` state's reason). */
+    availability) {
         this.kdb = kdb;
         this.orgLock = orgLock;
         this.storage = storage;
@@ -57,6 +61,7 @@ let OrgCatalogService = class OrgCatalogService {
         this.pluginInstaller = pluginInstaller;
         this.log = log;
         this.txHost = txHost;
+        this.availability = availability;
     }
     /** The kernel-schema handle of the current context (the transaction, else the pool). */
     get db() {
@@ -158,6 +163,16 @@ let OrgCatalogService = class OrgCatalogService {
         const configured = new Set(configs.map((c) => c.plugin));
         const owners = await ownersOf(this.db, items.flatMap((i) => (i.owner_org_id === null ? [] : [i.owner_org_id])));
         const loaded = new Map(this.registry.manifests().map((x) => [x.name, x]));
+        // the extensions of the latest versions that are not loaded: why (the `unavailable` reason)
+        const extensionOf = (i) => {
+            const v = versions.find((x) => x.item_id === i.id && x.version === i.latest_version);
+            const m = v?.manifest;
+            return m?.extension ? m.name : undefined;
+        };
+        const unloaded = await this.availability.unavailable(items.flatMap((i) => {
+            const n = extensionOf(i);
+            return n === undefined ? [] : [n];
+        }));
         const out = [];
         for (const i of items) {
             // Another org sees only an org-owned plugin's applied version, never one its owner
@@ -172,12 +187,23 @@ let OrgCatalogService = class OrgCatalogService {
             const scope = i.builtin ? "all" : i.scope;
             const wanted = wantedOn(i, inList.has(i.id), sw.get(i.id) ?? null);
             let state;
+            let reason;
+            const extName = extensionOf(i);
+            const why = extName === undefined ? undefined : unloaded.get(extName);
             if (i.awaiting_confirmation)
                 state = "awaiting_confirmation";
-            else if (i.disabled)
+            else if (i.disabled) {
                 state = "unavailable";
+                reason = "plugin_disabled";
+            }
             else if (requestable(i, inList.has(i.id)))
                 state = "not_offered";
+            // not installed here and its extension cannot run: switching it on would fail (spec §14.2
+            // problem 1); an installed one keeps its state (an org admin can still switch it off)
+            else if (!a && why !== undefined) {
+                state = "unavailable";
+                reason = why.reason;
+            }
             else if (a) {
                 // An on connector template without a connector here (ruling P2-10)
                 const missing = await this.pluginInstaller.missingConnectors(orgId, i.id);
@@ -208,6 +234,7 @@ let OrgCatalogService = class OrgCatalogService {
                 scope,
                 builtin: i.builtin,
                 state,
+                ...(reason !== undefined && { reason }),
                 switchable: state !== "not_offered" && state !== "awaiting_confirmation" && switchable(i),
                 notDeployed: latest !== undefined && undeployed.has(i.id),
                 installed: a
@@ -467,7 +494,9 @@ let OrgCatalogService = class OrgCatalogService {
      * install writes the switch row false in the uninstall's transaction (an `all` item then stays
      * off in the org); removing a failed or stale one writes none.
      */
-    async uninstall(orgId, actor, installId, actorTokenId) {
+    async uninstall(orgId, actor, installId, actorTokenId, 
+    /** Merged into the audit detail (a write made through the Platform tool). */
+    auditDetail) {
         if (!UUID_RE.test(installId))
             throw new ApiError("plugin.install_not_found", "Plugin install not found");
         const row = await this.db
@@ -482,7 +511,10 @@ let OrgCatalogService = class OrgCatalogService {
         if (row !== undefined && live && !switchable(row)) {
             throw new ApiError("plugin.scope_locked", "This plugin is built in: it is on for every organization and cannot be uninstalled here");
         }
-        return this.pluginInstaller.uninstall(orgId, actor, installId, actorTokenId !== undefined ? { actorTokenId } : {}, 
+        return this.pluginInstaller.uninstall(orgId, actor, installId, {
+            ...(actorTokenId !== undefined && { actorTokenId }),
+            ...(auditDetail !== undefined && { auditDetail }),
+        }, 
         // only a live install was on: removing a failed or stale one writes no switch row, so an
         // item its scope wants stays wanted and the sync installs it again
         row !== undefined && live ? {} : undefined);
@@ -546,6 +578,7 @@ OrgCatalogService = __decorate([
     __param(3, Inject(ExtensionRegistry)),
     __param(4, Inject(PluginInstaller)),
     __param(5, Inject(KERNEL_LOGGER)),
-    __param(6, Inject(TransactionHost))
+    __param(6, Inject(TransactionHost)),
+    __param(7, Inject(ExtensionAvailability))
 ], OrgCatalogService);
 export { OrgCatalogService };

package/dist/catalog/org-extension.controller.d.ts

@@ -6,6 +6,7 @@ import { OrgOverrides, type OrgOverrideView } from "../extensions/org-overrides.
 import { type Principal } from "../identity/principal.js";
 import { type OrgContext } from "../orgs/org.guard.js";
 import { type OrgToolSwitch, OrgToolSwitches, type OrgToolSwitchResult } from "../tools/org-tool-switches.js";
+import { OrgExtensionParams as ExtensionParams, OrgExtensionToolParams as ToolParams, OrgToolSwitchPut as ToolSwitchPut } from "./org-extension.schemas.js";
 import { OrgExtensionSwitch } from "./org-extension-switch.js";
 import type { UninstallPreview } from "./plugin-install.js";
 declare const PutBody: z.ZodObject<{
@@ -26,18 +27,6 @@ declare const OverridesPut: z.ZodObject<{
 declare const OverridesTake: z.ZodObject<{
     paths: z.ZodArray<z.ZodString>;
 }, z.core.$strict>;
-declare const ToolSwitchPut: z.ZodObject<{
-    enabled: z.ZodBoolean;
-    confirm: z.ZodOptional<z.ZodString>;
-}, z.core.$strict>;
-/** Route parameters of the overrides and tool switch routes (decision R20). */
-declare const ExtensionParams: z.ZodObject<{
-    extension: z.ZodString;
-}, z.core.$strip>;
-declare const ToolParams: z.ZodObject<{
-    extension: z.ZodString;
-    tool: z.ZodString;
-}, z.core.$strip>;
 /**
  * One extension of the org list: the org view plus the plugin's display name and the extension
  * points it provides (`channel@1`, `web-search@1`, … the names only, also for members).

package/dist/catalog/org-extension.controller.js

@@ -18,6 +18,7 @@ import { ZBody, ZParam } from "../infra/validation/zod-params.js";
 import { CurrentOrg, OrgAction } from "../orgs/org.guard.js";
 import { roleAtLeast } from "../orgs/roles.js";
 import { OrgToolSwitches, } from "../tools/org-tool-switches.js";
+import { OrgExtensionParams as ExtensionParams, OrgExtensionToolParams as ToolParams, OrgToolSwitchPut as ToolSwitchPut, } from "./org-extension.schemas.js";
 import { OrgExtensionSwitch } from "./org-extension-switch.js";
 const PutBody = z
     .object({
@@ -57,18 +58,8 @@ const OverridesPut = z
 const OverridesTake = z
     .object({ paths: z.array(z.string().min(1).max(256)).min(1).max(200) })
     .strict();
-const ToolSwitchPut = z
-    .object({
-    enabled: z.boolean(),
-    /** The hash of the switch-off preview, to confirm turning the tool off. */
-    confirm: z.string().min(1).max(128).optional(),
-})
-    .strict();
 class OrgToolSwitchPutBody extends createZodDto(ToolSwitchPut, "OrgToolSwitchPutBody") {
 }
-/** Route parameters of the overrides and tool switch routes (decision R20). */
-const ExtensionParams = z.object({ extension: z.string().min(1).max(64) });
-const ToolParams = ExtensionParams.extend({ tool: z.string().min(1).max(64) });
 class OrgExtensionParamsDto extends createZodDto(ExtensionParams, "OrgExtensionParams") {
 }
 class OrgExtensionToolParamsDto extends createZodDto(ToolParams, "OrgExtensionToolParams") {