@evermore.work/server 2026.509.0-canary.0

package/dist/services/plugin-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-registry.d.ts","sourceRoot":"","sources":["../../src/services/plugin-registry.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,mBAAmB,CAAC;AAC5C,OAAO,EAIL,cAAc,EAIf,MAAM,mBAAmB,CAAC;AAC3B,OAAO,KAAK,EACV,wBAAwB,EACxB,YAAY,EACZ,aAAa,EACb,kBAAkB,EAClB,kBAAkB,EAClB,iBAAiB,EACjB,qBAAqB,EAErB,iBAAiB,EAIjB,eAAe,EACf,kBAAkB,EAClB,mBAAmB,EACnB,2BAA2B,EAC5B,MAAM,uBAAuB,CAAC;AAsB/B;;;;;;;;;;;GAWG;AACH,wBAAgB,qBAAqB,CAAC,EAAE,EAAE,EAAE;IAmCxC,4DAA4D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAO5D;;;OAGG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAQH,uCAAuC;2BAChB,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAOnC,0CAA0C;kBAxDjB,MAAM;;;;;;;;;;;;;;;IA2D/B,qDAAqD;0BAnDpB,MAAM;;;;;;;;;;;;;;;IAwDvC;;;;;;OAMG;qBACoB,aAAa,YAAY,wBAAwB;;;;;;;;;;;;;;;IAuDxE;;;OAGG;iBAEG,MAAM,QACJ;QACJ,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,QAAQ,CAAC,EAAE,wBAAwB,CAAC;KACrC;;;;;;;;;;;;;;;IA0BH,qEAAqE;uBAC5C,MAAM,SAAS,kBAAkB;;;;;;;;;;;;;;;IAkB1D;;;;;;OAMG;oBACmB,MAAM;;;;;;;;;;;;;;;IA2B5B,kDAAkD;0BAC5B,MAAM;;;;;;;;IAO5B;;;;OAIG;6BAC4B,MAAM,SAAS,kBAAkB;;;;;;;;IAiChE;;;OAGG;4BAC2B,MAAM,SAAS,iBAAiB;;;;;;;;IAkC9D;;;OAGG;+BAC8B,MAAM,aAAa,MAAM,GAAG,IAAI;;;;;;;;IAWjE,oCAAoC;6BACL,MAAM;;;;;;;;IAWrC,+CAA+C;mCAChB,MAAM,aAAa,MAAM,KAAG,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC;IAUhG,wDAAwD;sCAE5C,MAAM,aACL,MAAM,SACV;QAAE,OAAO,CAAC,EAAE,OAAO,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,KAC7F,OAAO,CAAC,qBAAqB,CAAC;IA0CjC;;;;;;OAMG;6BACsB,MAAM,UAAU,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAc1D;;;;;;;OAOG;sCAES,MAAM,cACJ,MAAM,cACN,MAAM;;;;;;;;;;;;;IAcpB;;;;;;;OAOG;6BAES,MAAM,SACT,IAAI,CAAC,OAAO,cAAc,CAAC,YAAY,EAAE,IAAI,GAAG,UAAU,GAAG,WAAW,GAAG,WAAW,CAAC;;;;;;;;;;;;;IAsChG;;;;;OAKG;uBACsB,MAAM;;;;;;;;;;;;;IAU/B;;;;;OAKG;yBACkB,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAO3B;;;;;;OAMG;4BACqB,MAAM,UAAU,MAAM;;;;;;;;;;;IAO9C;;;;;;;OAOG;0BAES,MAAM,UACR,MAAM,SACP;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,eAAe,CAAA;KAAE;;;;;;;;;;;IAiCvD;;;;;;;OAOG;6BAES,MAAM,SACT,MAAM,WACJ,mBAAmB;;;;;;;;;;;;;IAc9B;;;;;;OAMG;0BAEM,MAAM,SACN;QACL,MAAM,EAAE,kBAAkB,CAAC;QAC3B,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;QAChB,SAAS,CAAC,EAAE,IAAI,CAAC;QACjB,UAAU,CAAC,EAAE,IAAI,CAAC;KACnB;;;;;;;;;;;;;IAYH;;;;;;;OAOG;sCAES,MAAM,cACJ,MAAM,SACX;QACL,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACjC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;KAClC;;;;;;;;;;;;;;IAgBH;;;;;;OAMG;wCAEW,MAAM,SACX;QACL,MAAM,EAAE,2BAA2B,CAAC;QACpC,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,SAAS,CAAC,EAAE,IAAI,CAAC;QACjB,UAAU,CAAC,EAAE,IAAI,CAAC;KACnB;;;;;;;;;;;;;;EAUN"}

package/dist/services/plugin-registry.js

@@ -0,0 +1,581 @@
+import { asc, eq, ne, sql, and } from "drizzle-orm";
+import { plugins, pluginConfig, pluginCompanySettings, pluginEntities, pluginJobs, pluginJobRuns, pluginWebhookDeliveries, } from "@evermore.work/db";
+import { conflict, notFound } from "../errors.js";
+// ---------------------------------------------------------------------------
+// Helpers
+// ---------------------------------------------------------------------------
+/**
+ * Detect if a Postgres error is a unique-constraint violation on the
+ * `plugins_plugin_key_idx` unique index.
+ */
+function isPluginKeyConflict(error) {
+    if (typeof error !== "object" || error === null)
+        return false;
+    const err = error;
+    const constraint = err.constraint ?? err.constraint_name;
+    return err.code === "23505" && constraint === "plugins_plugin_key_idx";
+}
+// ---------------------------------------------------------------------------
+// Service
+// ---------------------------------------------------------------------------
+/**
+ * PluginRegistry – CRUD operations for the `plugins` and `plugin_config`
+ * tables.  Follows the same factory-function pattern used by the rest of
+ * the Evermore service layer.
+ *
+ * This is the lowest-level persistence layer for plugins. Higher-level
+ * concerns such as lifecycle state-machine enforcement and capability
+ * gating are handled by {@link pluginLifecycleManager} and
+ * {@link pluginCapabilityValidator} respectively.
+ *
+ * @see PLUGIN_SPEC.md §21.3 — Required Tables
+ */
+export function pluginRegistryService(db) {
+    // -----------------------------------------------------------------------
+    // Internal helpers
+    // -----------------------------------------------------------------------
+    async function getById(id) {
+        return db
+            .select()
+            .from(plugins)
+            .where(eq(plugins.id, id))
+            .then((rows) => rows[0] ?? null);
+    }
+    async function getByKey(pluginKey) {
+        return db
+            .select()
+            .from(plugins)
+            .where(eq(plugins.pluginKey, pluginKey))
+            .then((rows) => rows[0] ?? null);
+    }
+    async function nextInstallOrder() {
+        const result = await db
+            .select({ maxOrder: sql `coalesce(max(${plugins.installOrder}), 0)` })
+            .from(plugins);
+        return (result[0]?.maxOrder ?? 0) + 1;
+    }
+    // -----------------------------------------------------------------------
+    // Public API
+    // -----------------------------------------------------------------------
+    return {
+        // ----- Read -----------------------------------------------------------
+        /** List all registered plugins ordered by install order. */
+        list: () => db
+            .select()
+            .from(plugins)
+            .orderBy(asc(plugins.installOrder)),
+        /**
+         * List installed plugins (excludes soft-deleted/uninstalled).
+         * Use for Plugin Manager and default API list so uninstalled plugins do not appear.
+         */
+        listInstalled: () => db
+            .select()
+            .from(plugins)
+            .where(ne(plugins.status, "uninstalled"))
+            .orderBy(asc(plugins.installOrder)),
+        /** List plugins filtered by status. */
+        listByStatus: (status) => db
+            .select()
+            .from(plugins)
+            .where(eq(plugins.status, status))
+            .orderBy(asc(plugins.installOrder)),
+        /** Get a single plugin by primary key. */
+        getById,
+        /** Get a single plugin by its unique `pluginKey`. */
+        getByKey,
+        // ----- Install / Register --------------------------------------------
+        /**
+         * Register (install) a new plugin.
+         *
+         * The caller is expected to have already resolved and validated the
+         * manifest from the package.  This method persists the plugin row and
+         * assigns the next install order.
+         */
+        install: async (input, manifest) => {
+            const existing = await getByKey(manifest.id);
+            if (existing) {
+                if (existing.status !== "uninstalled") {
+                    throw conflict(`Plugin already installed: ${manifest.id}`);
+                }
+                // Reinstall after soft-delete: reactivate the existing row so plugin-scoped
+                // data and references remain stable across uninstall/reinstall cycles.
+                return db
+                    .update(plugins)
+                    .set({
+                    packageName: input.packageName,
+                    packagePath: input.packagePath ?? null,
+                    version: manifest.version,
+                    apiVersion: manifest.apiVersion,
+                    categories: manifest.categories,
+                    manifestJson: manifest,
+                    status: "installed",
+                    lastError: null,
+                    updatedAt: new Date(),
+                })
+                    .where(eq(plugins.id, existing.id))
+                    .returning()
+                    .then((rows) => rows[0] ?? null);
+            }
+            const installOrder = await nextInstallOrder();
+            try {
+                const rows = await db
+                    .insert(plugins)
+                    .values({
+                    pluginKey: manifest.id,
+                    packageName: input.packageName,
+                    version: manifest.version,
+                    apiVersion: manifest.apiVersion,
+                    categories: manifest.categories,
+                    manifestJson: manifest,
+                    status: "installed",
+                    installOrder,
+                    packagePath: input.packagePath ?? null,
+                })
+                    .returning();
+                return rows[0];
+            }
+            catch (error) {
+                if (isPluginKeyConflict(error)) {
+                    throw conflict(`Plugin already installed: ${manifest.id}`);
+                }
+                throw error;
+            }
+        },
+        // ----- Update ---------------------------------------------------------
+        /**
+         * Update a plugin's manifest and version (e.g. on upgrade).
+         * The plugin must already exist.
+         */
+        update: async (id, data) => {
+            const plugin = await getById(id);
+            if (!plugin)
+                throw notFound("Plugin not found");
+            const setClause = {
+                updatedAt: new Date(),
+            };
+            if (data.packageName !== undefined)
+                setClause.packageName = data.packageName;
+            if (data.version !== undefined)
+                setClause.version = data.version;
+            if (data.manifest !== undefined) {
+                setClause.manifestJson = data.manifest;
+                setClause.apiVersion = data.manifest.apiVersion;
+                setClause.categories = data.manifest.categories;
+            }
+            return db
+                .update(plugins)
+                .set(setClause)
+                .where(eq(plugins.id, id))
+                .returning()
+                .then((rows) => rows[0] ?? null);
+        },
+        // ----- Status ---------------------------------------------------------
+        /** Update a plugin's lifecycle status and optional error message. */
+        updateStatus: async (id, input) => {
+            const plugin = await getById(id);
+            if (!plugin)
+                throw notFound("Plugin not found");
+            return db
+                .update(plugins)
+                .set({
+                status: input.status,
+                lastError: input.lastError ?? null,
+                updatedAt: new Date(),
+            })
+                .where(eq(plugins.id, id))
+                .returning()
+                .then((rows) => rows[0] ?? null);
+        },
+        // ----- Uninstall / Remove --------------------------------------------
+        /**
+         * Uninstall a plugin.
+         *
+         * When `removeData` is true the plugin row (and cascaded config) is
+         * hard-deleted.  Otherwise the status is set to `"uninstalled"` for
+         * a soft-delete that preserves the record.
+         */
+        uninstall: async (id, removeData = false) => {
+            const plugin = await getById(id);
+            if (!plugin)
+                throw notFound("Plugin not found");
+            if (removeData) {
+                // Hard delete – plugin_config cascades via FK onDelete
+                return db
+                    .delete(plugins)
+                    .where(eq(plugins.id, id))
+                    .returning()
+                    .then((rows) => rows[0] ?? null);
+            }
+            // Soft delete – mark as uninstalled
+            return db
+                .update(plugins)
+                .set({
+                status: "uninstalled",
+                updatedAt: new Date(),
+            })
+                .where(eq(plugins.id, id))
+                .returning()
+                .then((rows) => rows[0] ?? null);
+        },
+        // ----- Config ---------------------------------------------------------
+        /** Retrieve a plugin's instance configuration. */
+        getConfig: (pluginId) => db
+            .select()
+            .from(pluginConfig)
+            .where(eq(pluginConfig.pluginId, pluginId))
+            .then((rows) => rows[0] ?? null),
+        /**
+         * Create or fully replace a plugin's instance configuration.
+         * If a config row already exists for the plugin it is replaced;
+         * otherwise a new row is inserted.
+         */
+        upsertConfig: async (pluginId, input) => {
+            const plugin = await getById(pluginId);
+            if (!plugin)
+                throw notFound("Plugin not found");
+            const existing = await db
+                .select()
+                .from(pluginConfig)
+                .where(eq(pluginConfig.pluginId, pluginId))
+                .then((rows) => rows[0] ?? null);
+            if (existing) {
+                return db
+                    .update(pluginConfig)
+                    .set({
+                    configJson: input.configJson,
+                    lastError: null,
+                    updatedAt: new Date(),
+                })
+                    .where(eq(pluginConfig.pluginId, pluginId))
+                    .returning()
+                    .then((rows) => rows[0]);
+            }
+            return db
+                .insert(pluginConfig)
+                .values({
+                pluginId,
+                configJson: input.configJson,
+            })
+                .returning()
+                .then((rows) => rows[0]);
+        },
+        /**
+         * Partially update a plugin's instance configuration via shallow merge.
+         * If no config row exists yet one is created with the supplied values.
+         */
+        patchConfig: async (pluginId, input) => {
+            const plugin = await getById(pluginId);
+            if (!plugin)
+                throw notFound("Plugin not found");
+            const existing = await db
+                .select()
+                .from(pluginConfig)
+                .where(eq(pluginConfig.pluginId, pluginId))
+                .then((rows) => rows[0] ?? null);
+            if (existing) {
+                const merged = { ...existing.configJson, ...input.configJson };
+                return db
+                    .update(pluginConfig)
+                    .set({
+                    configJson: merged,
+                    lastError: null,
+                    updatedAt: new Date(),
+                })
+                    .where(eq(pluginConfig.pluginId, pluginId))
+                    .returning()
+                    .then((rows) => rows[0]);
+            }
+            return db
+                .insert(pluginConfig)
+                .values({
+                pluginId,
+                configJson: input.configJson,
+            })
+                .returning()
+                .then((rows) => rows[0]);
+        },
+        /**
+         * Record an error against a plugin's config (e.g. validation failure
+         * against the plugin's instanceConfigSchema).
+         */
+        setConfigError: async (pluginId, lastError) => {
+            const rows = await db
+                .update(pluginConfig)
+                .set({ lastError, updatedAt: new Date() })
+                .where(eq(pluginConfig.pluginId, pluginId))
+                .returning();
+            if (rows.length === 0)
+                throw notFound("Plugin config not found");
+            return rows[0];
+        },
+        /** Delete a plugin's config row. */
+        deleteConfig: async (pluginId) => {
+            const rows = await db
+                .delete(pluginConfig)
+                .where(eq(pluginConfig.pluginId, pluginId))
+                .returning();
+            return rows[0] ?? null;
+        },
+        // ----- Company settings ----------------------------------------------
+        /** Retrieve company-scoped plugin settings. */
+        getCompanySettings: (pluginId, companyId) => db
+            .select()
+            .from(pluginCompanySettings)
+            .where(and(eq(pluginCompanySettings.pluginId, pluginId), eq(pluginCompanySettings.companyId, companyId)))
+            .then((rows) => rows[0] ?? null),
+        /** Create or replace company-scoped plugin settings. */
+        upsertCompanySettings: async (pluginId, companyId, input) => {
+            const plugin = await getById(pluginId);
+            if (!plugin)
+                throw notFound("Plugin not found");
+            const existing = await db
+                .select()
+                .from(pluginCompanySettings)
+                .where(and(eq(pluginCompanySettings.pluginId, pluginId), eq(pluginCompanySettings.companyId, companyId)))
+                .then((rows) => rows[0] ?? null);
+            if (existing) {
+                return db
+                    .update(pluginCompanySettings)
+                    .set({
+                    enabled: input.enabled ?? existing.enabled,
+                    settingsJson: input.settingsJson,
+                    lastError: input.lastError ?? null,
+                    updatedAt: new Date(),
+                })
+                    .where(eq(pluginCompanySettings.id, existing.id))
+                    .returning()
+                    .then((rows) => rows[0]);
+            }
+            return db
+                .insert(pluginCompanySettings)
+                .values({
+                pluginId,
+                companyId,
+                enabled: input.enabled ?? true,
+                settingsJson: input.settingsJson,
+                lastError: input.lastError ?? null,
+            })
+                .returning()
+                .then((rows) => rows[0]);
+        },
+        // ----- Entities -------------------------------------------------------
+        /**
+         * List persistent entity mappings owned by a specific plugin, with filtering and pagination.
+         *
+         * @param pluginId - The UUID of the plugin.
+         * @param query - Optional filters (type, externalId) and pagination (limit, offset).
+         * @returns A list of matching `PluginEntityRecord` objects.
+         */
+        listEntities: (pluginId, query) => {
+            const conditions = [eq(pluginEntities.pluginId, pluginId)];
+            if (query?.entityType)
+                conditions.push(eq(pluginEntities.entityType, query.entityType));
+            if (query?.externalId)
+                conditions.push(eq(pluginEntities.externalId, query.externalId));
+            return db
+                .select()
+                .from(pluginEntities)
+                .where(and(...conditions))
+                .orderBy(asc(pluginEntities.createdAt))
+                .limit(query?.limit ?? 100)
+                .offset(query?.offset ?? 0);
+        },
+        /**
+         * Look up a plugin-owned entity mapping by its external identifier.
+         *
+         * @param pluginId - The UUID of the plugin.
+         * @param entityType - The type of entity (e.g., 'project', 'issue').
+         * @param externalId - The identifier in the external system.
+         * @returns The matching `PluginEntityRecord` or null.
+         */
+        getEntityByExternalId: (pluginId, entityType, externalId) => db
+            .select()
+            .from(pluginEntities)
+            .where(and(eq(pluginEntities.pluginId, pluginId), eq(pluginEntities.entityType, entityType), eq(pluginEntities.externalId, externalId)))
+            .then((rows) => rows[0] ?? null),
+        /**
+         * Create or update a persistent mapping between a Evermore object and an
+         * external entity.
+         *
+         * @param pluginId - The UUID of the plugin.
+         * @param input - The entity data to persist.
+         * @returns The newly created or updated `PluginEntityRecord`.
+         */
+        upsertEntity: async (pluginId, input) => {
+            // Drizzle doesn't support pg-specific onConflictDoUpdate easily in the insert() call
+            // with complex where clauses, so we do it manually.
+            const existing = await db
+                .select()
+                .from(pluginEntities)
+                .where(and(eq(pluginEntities.pluginId, pluginId), eq(pluginEntities.entityType, input.entityType), eq(pluginEntities.externalId, input.externalId ?? "")))
+                .then((rows) => rows[0] ?? null);
+            if (existing) {
+                return db
+                    .update(pluginEntities)
+                    .set({
+                    ...input,
+                    updatedAt: new Date(),
+                })
+                    .where(eq(pluginEntities.id, existing.id))
+                    .returning()
+                    .then((rows) => rows[0]);
+            }
+            return db
+                .insert(pluginEntities)
+                .values({
+                ...input,
+                pluginId,
+            })
+                .returning()
+                .then((rows) => rows[0]);
+        },
+        /**
+         * Delete a specific plugin-owned entity mapping by its internal UUID.
+         *
+         * @param id - The UUID of the entity record.
+         * @returns The deleted record, or null if not found.
+         */
+        deleteEntity: async (id) => {
+            const rows = await db
+                .delete(pluginEntities)
+                .where(eq(pluginEntities.id, id))
+                .returning();
+            return rows[0] ?? null;
+        },
+        // ----- Jobs -----------------------------------------------------------
+        /**
+         * List all scheduled jobs registered for a specific plugin.
+         *
+         * @param pluginId - The UUID of the plugin.
+         * @returns A list of `PluginJobRecord` objects.
+         */
+        listJobs: (pluginId) => db
+            .select()
+            .from(pluginJobs)
+            .where(eq(pluginJobs.pluginId, pluginId))
+            .orderBy(asc(pluginJobs.jobKey)),
+        /**
+         * Look up a plugin job by its unique job key.
+         *
+         * @param pluginId - The UUID of the plugin.
+         * @param jobKey - The key defined in the plugin manifest.
+         * @returns The matching `PluginJobRecord` or null.
+         */
+        getJobByKey: (pluginId, jobKey) => db
+            .select()
+            .from(pluginJobs)
+            .where(and(eq(pluginJobs.pluginId, pluginId), eq(pluginJobs.jobKey, jobKey)))
+            .then((rows) => rows[0] ?? null),
+        /**
+         * Register or update a scheduled job for a plugin.
+         *
+         * @param pluginId - The UUID of the plugin.
+         * @param jobKey - The unique key for the job.
+         * @param input - The schedule (cron) and optional status.
+         * @returns The updated or created `PluginJobRecord`.
+         */
+        upsertJob: async (pluginId, jobKey, input) => {
+            const existing = await db
+                .select()
+                .from(pluginJobs)
+                .where(and(eq(pluginJobs.pluginId, pluginId), eq(pluginJobs.jobKey, jobKey)))
+                .then((rows) => rows[0] ?? null);
+            if (existing) {
+                return db
+                    .update(pluginJobs)
+                    .set({
+                    schedule: input.schedule,
+                    status: input.status ?? existing.status,
+                    updatedAt: new Date(),
+                })
+                    .where(eq(pluginJobs.id, existing.id))
+                    .returning()
+                    .then((rows) => rows[0]);
+            }
+            return db
+                .insert(pluginJobs)
+                .values({
+                pluginId,
+                jobKey,
+                schedule: input.schedule,
+                status: input.status ?? "active",
+            })
+                .returning()
+                .then((rows) => rows[0]);
+        },
+        /**
+         * Record the start of a specific job execution.
+         *
+         * @param pluginId - The UUID of the plugin.
+         * @param jobId - The UUID of the parent job record.
+         * @param trigger - What triggered this run (e.g., 'schedule', 'manual').
+         * @returns The newly created `PluginJobRunRecord` in 'pending' status.
+         */
+        createJobRun: async (pluginId, jobId, trigger) => {
+            return db
+                .insert(pluginJobRuns)
+                .values({
+                pluginId,
+                jobId,
+                trigger,
+                status: "pending",
+            })
+                .returning()
+                .then((rows) => rows[0]);
+        },
+        /**
+         * Update the status, duration, and logs of a job execution record.
+         *
+         * @param runId - The UUID of the job run.
+         * @param input - The update fields (status, error, duration, etc.).
+         * @returns The updated `PluginJobRunRecord`.
+         */
+        updateJobRun: async (runId, input) => {
+            return db
+                .update(pluginJobRuns)
+                .set(input)
+                .where(eq(pluginJobRuns.id, runId))
+                .returning()
+                .then((rows) => rows[0] ?? null);
+        },
+        // ----- Webhooks -------------------------------------------------------
+        /**
+         * Create a record for an incoming webhook delivery.
+         *
+         * @param pluginId - The UUID of the receiving plugin.
+         * @param webhookKey - The endpoint key defined in the manifest.
+         * @param input - The payload, headers, and optional external ID.
+         * @returns The newly created `PluginWebhookDeliveryRecord` in 'pending' status.
+         */
+        createWebhookDelivery: async (pluginId, webhookKey, input) => {
+            return db
+                .insert(pluginWebhookDeliveries)
+                .values({
+                pluginId,
+                webhookKey,
+                externalId: input.externalId,
+                payload: input.payload,
+                headers: input.headers ?? {},
+                status: "pending",
+            })
+                .returning()
+                .then((rows) => rows[0]);
+        },
+        /**
+         * Update the status and processing metrics of a webhook delivery.
+         *
+         * @param deliveryId - The UUID of the delivery record.
+         * @param input - The update fields (status, error, duration, etc.).
+         * @returns The updated `PluginWebhookDeliveryRecord`.
+         */
+        updateWebhookDelivery: async (deliveryId, input) => {
+            return db
+                .update(pluginWebhookDeliveries)
+                .set(input)
+                .where(eq(pluginWebhookDeliveries.id, deliveryId))
+                .returning()
+                .then((rows) => rows[0] ?? null);
+        },
+    };
+}
+//# sourceMappingURL=plugin-registry.js.map

package/dist/services/plugin-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-registry.js","sourceRoot":"","sources":["../../src/services/plugin-registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAEpD,OAAO,EACL,OAAO,EACP,YAAY,EACZ,qBAAqB,EACrB,cAAc,EACd,UAAU,EACV,aAAa,EACb,uBAAuB,GACxB,MAAM,mBAAmB,CAAC;AAmB3B,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAElD,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E;;;GAGG;AACH,SAAS,mBAAmB,CAAC,KAAc;IACzC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC9D,MAAM,GAAG,GAAG,KAAyE,CAAC;IACtF,MAAM,UAAU,GAAG,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,eAAe,CAAC;IACzD,OAAO,GAAG,CAAC,IAAI,KAAK,OAAO,IAAI,UAAU,KAAK,wBAAwB,CAAC;AACzE,CAAC;AAED,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,qBAAqB,CAAC,EAAM;IAC1C,0EAA0E;IAC1E,mBAAmB;IACnB,0EAA0E;IAE1E,KAAK,UAAU,OAAO,CAAC,EAAU;QAC/B,OAAO,EAAE;aACN,MAAM,EAAE;aACR,IAAI,CAAC,OAAO,CAAC;aACb,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;aACzB,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;IACrC,CAAC;IAED,KAAK,UAAU,QAAQ,CAAC,SAAiB;QACvC,OAAO,EAAE;aACN,MAAM,EAAE;aACR,IAAI,CAAC,OAAO,CAAC;aACb,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;aACvC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;IACrC,CAAC;IAED,KAAK,UAAU,gBAAgB;QAC7B,MAAM,MAAM,GAAG,MAAM,EAAE;aACpB,MAAM,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAQ,gBAAgB,OAAO,CAAC,YAAY,OAAO,EAAE,CAAC;aAC5E,IAAI,CAAC,OAAO,CAAC,CAAC;QACjB,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IACxC,CAAC;IAED,0EAA0E;IAC1E,aAAa;IACb,0EAA0E;IAE1E,OAAO;QACL,yEAAyE;QAEzE,4DAA4D;QAC5D,IAAI,EAAE,GAAG,EAAE,CACT,EAAE;aACC,MAAM,EAAE;aACR,IAAI,CAAC,OAAO,CAAC;aACb,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAEvC;;;WAGG;QACH,aAAa,EAAE,GAAG,EAAE,CAClB,EAAE;aACC,MAAM,EAAE;aACR,IAAI,CAAC,OAAO,CAAC;aACb,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;aACxC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAEvC,uCAAuC;QACvC,YAAY,EAAE,CAAC,MAAoB,EAAE,EAAE,CACrC,EAAE;aACC,MAAM,EAAE;aACR,IAAI,CAAC,OAAO,CAAC;aACb,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;aACjC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAEvC,0CAA0C;QAC1C,OAAO;QAEP,qDAAqD;QACrD,QAAQ;QAER,wEAAwE;QAExE;;;;;;WAMG;QACH,OAAO,EAAE,KAAK,EAAE,KAAoB,EAAE,QAAkC,EAAE,EAAE;YAC1E,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YAC7C,IAAI,QAAQ,EAAE,CAAC;gBACb,IAAI,QAAQ,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;oBACtC,MAAM,QAAQ,CAAC,6BAA6B,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC7D,CAAC;gBAED,4EAA4E;gBAC5E,uEAAuE;gBACvE,OAAO,EAAE;qBACN,MAAM,CAAC,OAAO,CAAC;qBACf,GAAG,CAAC;oBACH,WAAW,EAAE,KAAK,CAAC,WAAW;oBAC9B,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,IAAI;oBACtC,OAAO,EAAE,QAAQ,CAAC,OAAO;oBACzB,UAAU,EAAE,QAAQ,CAAC,UAAU;oBAC/B,UAAU,EAAE,QAAQ,CAAC,UAAU;oBAC/B,YAAY,EAAE,QAAQ;oBACtB,MAAM,EAAE,WAA2B;oBACnC,SAAS,EAAE,IAAI;oBACf,SAAS,EAAE,IAAI,IAAI,EAAE;iBACtB,CAAC;qBACD,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;qBAClC,SAAS,EAAE;qBACX,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;YACrC,CAAC;YAED,MAAM,YAAY,GAAG,MAAM,gBAAgB,EAAE,CAAC;YAE9C,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,EAAE;qBAClB,MAAM,CAAC,OAAO,CAAC;qBACf,MAAM,CAAC;oBACN,SAAS,EAAE,QAAQ,CAAC,EAAE;oBACtB,WAAW,EAAE,KAAK,CAAC,WAAW;oBAC9B,OAAO,EAAE,QAAQ,CAAC,OAAO;oBACzB,UAAU,EAAE,QAAQ,CAAC,UAAU;oBAC/B,UAAU,EAAE,QAAQ,CAAC,UAAU;oBAC/B,YAAY,EAAE,QAAQ;oBACtB,MAAM,EAAE,WAA2B;oBACnC,YAAY;oBACZ,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,IAAI;iBACvC,CAAC;qBACD,SAAS,EAAE,CAAC;gBACf,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC;YACjB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,mBAAmB,CAAC,KAAK,CAAC,EAAE,CAAC;oBAC/B,MAAM,QAAQ,CAAC,6BAA6B,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC7D,CAAC;gBACD,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;QAED,yEAAyE;QAEzE;;;WAGG;QACH,MAAM,EAAE,KAAK,EACX,EAAU,EACV,IAIC,EACD,EAAE;YACF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,EAAE,CAAC,CAAC;YACjC,IAAI,CAAC,MAAM;gBAAE,MAAM,QAAQ,CAAC,kBAAkB,CAAC,CAAC;YAEhD,MAAM,SAAS,GAA+D;gBAC5E,SAAS,EAAE,IAAI,IAAI,EAAE;aACtB,CAAC;YACF,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS;gBAAE,SAAS,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;YAC7E,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS;gBAAE,SAAS,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;YACjE,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAChC,SAAS,CAAC,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC;gBACvC,SAAS,CAAC,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;gBAChD,SAAS,CAAC,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;YAClD,CAAC;YAED,OAAO,EAAE;iBACN,MAAM,CAAC,OAAO,CAAC;iBACf,GAAG,CAAC,SAAS,CAAC;iBACd,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;iBACzB,SAAS,EAAE;iBACX,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;QACrC,CAAC;QAED,yEAAyE;QAEzE,qEAAqE;QACrE,YAAY,EAAE,KAAK,EAAE,EAAU,EAAE,KAAyB,EAAE,EAAE;YAC5D,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,EAAE,CAAC,CAAC;YACjC,IAAI,CAAC,MAAM;gBAAE,MAAM,QAAQ,CAAC,kBAAkB,CAAC,CAAC;YAEhD,OAAO,EAAE;iBACN,MAAM,CAAC,OAAO,CAAC;iBACf,GAAG,CAAC;gBACH,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI;gBAClC,SAAS,EAAE,IAAI,IAAI,EAAE;aACtB,CAAC;iBACD,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;iBACzB,SAAS,EAAE;iBACX,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;QACrC,CAAC;QAED,wEAAwE;QAExE;;;;;;WAMG;QACH,SAAS,EAAE,KAAK,EAAE,EAAU,EAAE,UAAU,GAAG,KAAK,EAAE,EAAE;YAClD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,EAAE,CAAC,CAAC;YACjC,IAAI,CAAC,MAAM;gBAAE,MAAM,QAAQ,CAAC,kBAAkB,CAAC,CAAC;YAEhD,IAAI,UAAU,EAAE,CAAC;gBACf,uDAAuD;gBACvD,OAAO,EAAE;qBACN,MAAM,CAAC,OAAO,CAAC;qBACf,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;qBACzB,SAAS,EAAE;qBACX,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;YACrC,CAAC;YAED,oCAAoC;YACpC,OAAO,EAAE;iBACN,MAAM,CAAC,OAAO,CAAC;iBACf,GAAG,CAAC;gBACH,MAAM,EAAE,aAA6B;gBACrC,SAAS,EAAE,IAAI,IAAI,EAAE;aACtB,CAAC;iBACD,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;iBACzB,SAAS,EAAE;iBACX,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;QACrC,CAAC;QAED,yEAAyE;QAEzE,kDAAkD;QAClD,SAAS,EAAE,CAAC,QAAgB,EAAE,EAAE,CAC9B,EAAE;aACC,MAAM,EAAE;aACR,IAAI,CAAC,YAAY,CAAC;aAClB,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;aAC1C,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;QAEpC;;;;WAIG;QACH,YAAY,EAAE,KAAK,EAAE,QAAgB,EAAE,KAAyB,EAAE,EAAE;YAClE,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAC;YACvC,IAAI,CAAC,MAAM;gBAAE,MAAM,QAAQ,CAAC,kBAAkB,CAAC,CAAC;YAEhD,MAAM,QAAQ,GAAG,MAAM,EAAE;iBACtB,MAAM,EAAE;iBACR,IAAI,CAAC,YAAY,CAAC;iBAClB,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;iBAC1C,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;YAEnC,IAAI,QAAQ,EAAE,CAAC;gBACb,OAAO,EAAE;qBACN,MAAM,CAAC,YAAY,CAAC;qBACpB,GAAG,CAAC;oBACH,UAAU,EAAE,KAAK,CAAC,UAAU;oBAC5B,SAAS,EAAE,IAAI;oBACf,SAAS,EAAE,IAAI,IAAI,EAAE;iBACtB,CAAC;qBACD,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;qBAC1C,SAAS,EAAE;qBACX,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7B,CAAC;YAED,OAAO,EAAE;iBACN,MAAM,CAAC,YAAY,CAAC;iBACpB,MAAM,CAAC;gBACN,QAAQ;gBACR,UAAU,EAAE,KAAK,CAAC,UAAU;aAC7B,CAAC;iBACD,SAAS,EAAE;iBACX,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7B,CAAC;QAED;;;WAGG;QACH,WAAW,EAAE,KAAK,EAAE,QAAgB,EAAE,KAAwB,EAAE,EAAE;YAChE,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAC;YACvC,IAAI,CAAC,MAAM;gBAAE,MAAM,QAAQ,CAAC,kBAAkB,CAAC,CAAC;YAEhD,MAAM,QAAQ,GAAG,MAAM,EAAE;iBACtB,MAAM,EAAE;iBACR,IAAI,CAAC,YAAY,CAAC;iBAClB,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;iBAC1C,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;YAEnC,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,MAAM,GAAG,EAAE,GAAG,QAAQ,CAAC,UAAU,EAAE,GAAG,KAAK,CAAC,UAAU,EAAE,CAAC;gBAC/D,OAAO,EAAE;qBACN,MAAM,CAAC,YAAY,CAAC;qBACpB,GAAG,CAAC;oBACH,UAAU,EAAE,MAAM;oBAClB,SAAS,EAAE,IAAI;oBACf,SAAS,EAAE,IAAI,IAAI,EAAE;iBACtB,CAAC;qBACD,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;qBAC1C,SAAS,EAAE;qBACX,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7B,CAAC;YAED,OAAO,EAAE;iBACN,MAAM,CAAC,YAAY,CAAC;iBACpB,MAAM,CAAC;gBACN,QAAQ;gBACR,UAAU,EAAE,KAAK,CAAC,UAAU;aAC7B,CAAC;iBACD,SAAS,EAAE;iBACX,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7B,CAAC;QAED;;;WAGG;QACH,cAAc,EAAE,KAAK,EAAE,QAAgB,EAAE,SAAwB,EAAE,EAAE;YACnE,MAAM,IAAI,GAAG,MAAM,EAAE;iBAClB,MAAM,CAAC,YAAY,CAAC;iBACpB,GAAG,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;iBACzC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;iBAC1C,SAAS,EAAE,CAAC;YAEf,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;gBAAE,MAAM,QAAQ,CAAC,yBAAyB,CAAC,CAAC;YACjE,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC;QACjB,CAAC;QAED,oCAAoC;QACpC,YAAY,EAAE,KAAK,EAAE,QAAgB,EAAE,EAAE;YACvC,MAAM,IAAI,GAAG,MAAM,EAAE;iBAClB,MAAM,CAAC,YAAY,CAAC;iBACpB,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;iBAC1C,SAAS,EAAE,CAAC;YAEf,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;QACzB,CAAC;QAED,wEAAwE;QAExE,+CAA+C;QAC/C,kBAAkB,EAAE,CAAC,QAAgB,EAAE,SAAiB,EAAyC,EAAE,CACjG,EAAE;aACC,MAAM,EAAE;aACR,IAAI,CAAC,qBAAqB,CAAC;aAC3B,KAAK,CAAC,GAAG,CACR,EAAE,CAAC,qBAAqB,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAC5C,EAAE,CAAC,qBAAqB,CAAC,SAAS,EAAE,SAAS,CAAC,CAC/C,CAAC;aACD,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAA0C;QAE7E,wDAAwD;QACxD,qBAAqB,EAAE,KAAK,EAC1B,QAAgB,EAChB,SAAiB,EACjB,KAA8F,EAC9D,EAAE;YAClC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAC;YACvC,IAAI,CAAC,MAAM;gBAAE,MAAM,QAAQ,CAAC,kBAAkB,CAAC,CAAC;YAEhD,MAAM,QAAQ,GAAG,MAAM,EAAE;iBACtB,MAAM,EAAE;iBACR,IAAI,CAAC,qBAAqB,CAAC;iBAC3B,KAAK,CAAC,GAAG,CACR,EAAE,CAAC,qBAAqB,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAC5C,EAAE,CAAC,qBAAqB,CAAC,SAAS,EAAE,SAAS,CAAC,CAC/C,CAAC;iBACD,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;YAEnC,IAAI,QAAQ,EAAE,CAAC;gBACb,OAAO,EAAE;qBACN,MAAM,CAAC,qBAAqB,CAAC;qBAC7B,GAAG,CAAC;oBACH,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,QAAQ,CAAC,OAAO;oBAC1C,YAAY,EAAE,KAAK,CAAC,YAAY;oBAChC,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI;oBAClC,SAAS,EAAE,IAAI,IAAI,EAAE;iBACtB,CAAC;qBACD,KAAK,CAAC,EAAE,CAAC,qBAAqB,CAAC,EAAE,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;qBAChD,SAAS,EAAE;qBACX,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAmC,CAAC;YAC/D,CAAC;YAED,OAAO,EAAE;iBACN,MAAM,CAAC,qBAAqB,CAAC;iBAC7B,MAAM,CAAC;gBACN,QAAQ;gBACR,SAAS;gBACT,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,IAAI;gBAC9B,YAAY,EAAE,KAAK,CAAC,YAAY;gBAChC,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI;aACnC,CAAC;iBACD,SAAS,EAAE;iBACX,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAmC,CAAC;QAC/D,CAAC;QAED,yEAAyE;QAEzE;;;;;;WAMG;QACH,YAAY,EAAE,CAAC,QAAgB,EAAE,KAAyB,EAAE,EAAE;YAC5D,MAAM,UAAU,GAAG,CAAC,EAAE,CAAC,cAAc,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;YAC3D,IAAI,KAAK,EAAE,UAAU;gBAAE,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,cAAc,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;YACxF,IAAI,KAAK,EAAE,UAAU;gBAAE,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,cAAc,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;YAExF,OAAO,EAAE;iBACN,MAAM,EAAE;iBACR,IAAI,CAAC,cAAc,CAAC;iBACpB,KAAK,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC;iBACzB,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;iBACtC,KAAK,CAAC,KAAK,EAAE,KAAK,IAAI,GAAG,CAAC;iBAC1B,MAAM,CAAC,KAAK,EAAE,MAAM,IAAI,CAAC,CAAC,CAAC;QAChC,CAAC;QAED;;;;;;;WAOG;QACH,qBAAqB,EAAE,CACrB,QAAgB,EAChB,UAAkB,EAClB,UAAkB,EAClB,EAAE,CACF,EAAE;aACC,MAAM,EAAE;aACR,IAAI,CAAC,cAAc,CAAC;aACpB,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,cAAc,CAAC,QAAQ,EAAE,QAAQ,CAAC,EACrC,EAAE,CAAC,cAAc,CAAC,UAAU,EAAE,UAAU,CAAC,EACzC,EAAE,CAAC,cAAc,CAAC,UAAU,EAAE,UAAU,CAAC,CAC1C,CACF;aACA,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;QAEpC;;;;;;;WAOG;QACH,YAAY,EAAE,KAAK,EACjB,QAAgB,EAChB,KAA8F,EAC9F,EAAE;YACF,qFAAqF;YACrF,oDAAoD;YACpD,MAAM,QAAQ,GAAG,MAAM,EAAE;iBACtB,MAAM,EAAE;iBACR,IAAI,CAAC,cAAc,CAAC;iBACpB,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,cAAc,CAAC,QAAQ,EAAE,QAAQ,CAAC,EACrC,EAAE,CAAC,cAAc,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,EAC/C,EAAE,CAAC,cAAc,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,EAAE,CAAC,CACtD,CACF;iBACA,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;YAEnC,IAAI,QAAQ,EAAE,CAAC;gBACb,OAAO,EAAE;qBACN,MAAM,CAAC,cAAc,CAAC;qBACtB,GAAG,CAAC;oBACH,GAAG,KAAK;oBACR,SAAS,EAAE,IAAI,IAAI,EAAE;iBACtB,CAAC;qBACD,KAAK,CAAC,EAAE,CAAC,cAAc,CAAC,EAAE,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;qBACzC,SAAS,EAAE;qBACX,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7B,CAAC;YAED,OAAO,EAAE;iBACN,MAAM,CAAC,cAAc,CAAC;iBACtB,MAAM,CAAC;gBACN,GAAG,KAAK;gBACR,QAAQ;aACF,CAAC;iBACR,SAAS,EAAE;iBACX,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7B,CAAC;QAED;;;;;WAKG;QACH,YAAY,EAAE,KAAK,EAAE,EAAU,EAAE,EAAE;YACjC,MAAM,IAAI,GAAG,MAAM,EAAE;iBAClB,MAAM,CAAC,cAAc,CAAC;iBACtB,KAAK,CAAC,EAAE,CAAC,cAAc,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;iBAChC,SAAS,EAAE,CAAC;YACf,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;QACzB,CAAC;QAED,yEAAyE;QAEzE;;;;;WAKG;QACH,QAAQ,EAAE,CAAC,QAAgB,EAAE,EAAE,CAC7B,EAAE;aACC,MAAM,EAAE;aACR,IAAI,CAAC,UAAU,CAAC;aAChB,KAAK,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;aACxC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAEpC;;;;;;WAMG;QACH,WAAW,EAAE,CAAC,QAAgB,EAAE,MAAc,EAAE,EAAE,CAChD,EAAE;aACC,MAAM,EAAE;aACR,IAAI,CAAC,UAAU,CAAC;aAChB,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;aAC5E,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;QAEpC;;;;;;;WAOG;QACH,SAAS,EAAE,KAAK,EACd,QAAgB,EAChB,MAAc,EACd,KAAqD,EACrD,EAAE;YACF,MAAM,QAAQ,GAAG,MAAM,EAAE;iBACtB,MAAM,EAAE;iBACR,IAAI,CAAC,UAAU,CAAC;iBAChB,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;iBAC5E,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;YAEnC,IAAI,QAAQ,EAAE,CAAC;gBACb,OAAO,EAAE;qBACN,MAAM,CAAC,UAAU,CAAC;qBAClB,GAAG,CAAC;oBACH,QAAQ,EAAE,KAAK,CAAC,QAAQ;oBACxB,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,QAAQ,CAAC,MAAM;oBACvC,SAAS,EAAE,IAAI,IAAI,EAAE;iBACtB,CAAC;qBACD,KAAK,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;qBACrC,SAAS,EAAE;qBACX,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7B,CAAC;YAED,OAAO,EAAE;iBACN,MAAM,CAAC,UAAU,CAAC;iBAClB,MAAM,CAAC;gBACN,QAAQ;gBACR,MAAM;gBACN,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,QAAQ;aACjC,CAAC;iBACD,SAAS,EAAE;iBACX,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7B,CAAC;QAED;;;;;;;WAOG;QACH,YAAY,EAAE,KAAK,EACjB,QAAgB,EAChB,KAAa,EACb,OAA4B,EAC5B,EAAE;YACF,OAAO,EAAE;iBACN,MAAM,CAAC,aAAa,CAAC;iBACrB,MAAM,CAAC;gBACN,QAAQ;gBACR,KAAK;gBACL,OAAO;gBACP,MAAM,EAAE,SAAS;aAClB,CAAC;iBACD,SAAS,EAAE;iBACX,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7B,CAAC;QAED;;;;;;WAMG;QACH,YAAY,EAAE,KAAK,EACjB,KAAa,EACb,KAOC,EACD,EAAE;YACF,OAAO,EAAE;iBACN,MAAM,CAAC,aAAa,CAAC;iBACrB,GAAG,CAAC,KAAK,CAAC;iBACV,KAAK,CAAC,EAAE,CAAC,aAAa,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;iBAClC,SAAS,EAAE;iBACX,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;QACrC,CAAC;QAED,yEAAyE;QAEzE;;;;;;;WAOG;QACH,qBAAqB,EAAE,KAAK,EAC1B,QAAgB,EAChB,UAAkB,EAClB,KAIC,EACD,EAAE;YACF,OAAO,EAAE;iBACN,MAAM,CAAC,uBAAuB,CAAC;iBAC/B,MAAM,CAAC;gBACN,QAAQ;gBACR,UAAU;gBACV,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,EAAE;gBAC5B,MAAM,EAAE,SAAS;aAClB,CAAC;iBACD,SAAS,EAAE;iBACX,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7B,CAAC;QAED;;;;;;WAMG;QACH,qBAAqB,EAAE,KAAK,EAC1B,UAAkB,EAClB,KAMC,EACD,EAAE;YACF,OAAO,EAAE;iBACN,MAAM,CAAC,uBAAuB,CAAC;iBAC/B,GAAG,CAAC,KAAK,CAAC;iBACV,KAAK,CAAC,EAAE,CAAC,uBAAuB,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;iBACjD,SAAS,EAAE;iBACX,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;QACrC,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/services/plugin-runtime-sandbox.d.ts

@@ -0,0 +1,40 @@
+import type { EvermorePluginManifestV1 } from "@evermore.work/shared";
+import type { PluginCapabilityValidator } from "./plugin-capability-validator.js";
+export declare class PluginSandboxError extends Error {
+    constructor(message: string);
+}
+/**
+ * Sandbox runtime options used when loading a plugin worker module.
+ *
+ * `allowedModuleSpecifiers` controls which bare module specifiers are permitted.
+ * `allowedModules` provides concrete host-provided bindings for those specifiers.
+ */
+export interface PluginSandboxOptions {
+    entrypointPath: string;
+    allowedModuleSpecifiers?: ReadonlySet<string>;
+    allowedModules?: Readonly<Record<string, Record<string, unknown>>>;
+    allowedGlobals?: Record<string, unknown>;
+    timeoutMs?: number;
+}
+/**
+ * Operation-level runtime gate for plugin host API calls.
+ * Every host operation must be checked against manifest capabilities before execution.
+ */
+export interface CapabilityScopedInvoker {
+    invoke<T>(operation: string, fn: () => Promise<T> | T): Promise<T>;
+}
+interface LoadedModule {
+    namespace: Record<string, unknown>;
+}
+export declare function createCapabilityScopedInvoker(manifest: EvermorePluginManifestV1, validator: PluginCapabilityValidator): CapabilityScopedInvoker;
+/**
+ * Load a CommonJS plugin module in a VM context with explicit module import allow-listing.
+ *
+ * Security properties:
+ * - no implicit access to host globals like `process`
+ * - no unrestricted built-in module imports
+ * - relative imports are resolved only inside the plugin root directory
+ */
+export declare function loadPluginModuleInSandbox(options: PluginSandboxOptions): Promise<LoadedModule>;
+export {};
+//# sourceMappingURL=plugin-runtime-sandbox.d.ts.map

package/dist/services/plugin-runtime-sandbox.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-runtime-sandbox.d.ts","sourceRoot":"","sources":["../../src/services/plugin-runtime-sandbox.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AACtE,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,kCAAkC,CAAC;AAElF,qBAAa,kBAAmB,SAAQ,KAAK;gBAC/B,OAAO,EAAE,MAAM;CAI5B;AAED;;;;;GAKG;AACH,MAAM,WAAW,oBAAoB;IACnC,cAAc,EAAE,MAAM,CAAC;IACvB,uBAAuB,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAC9C,cAAc,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;IACnE,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACzC,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;GAGG;AACH,MAAM,WAAW,uBAAuB;IACtC,MAAM,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;CACpE;AAED,UAAU,YAAY;IACpB,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAkBD,wBAAgB,6BAA6B,CAC3C,QAAQ,EAAE,wBAAwB,EAClC,SAAS,EAAE,yBAAyB,GACnC,uBAAuB,CAOzB;AAED;;;;;;;GAOG;AACH,wBAAsB,yBAAyB,CAC7C,OAAO,EAAE,oBAAoB,GAC5B,OAAO,CAAC,YAAY,CAAC,CAkGvB"}