@jingyi0605/codingns 0.8.1 → 0.8.5

package/dist/server/storage/repositories/plugin-permission-grant-repository.js

@@ -0,0 +1,142 @@
+export class PluginPermissionGrantRepository {
+    db;
+    constructor(db) {
+        this.db = db;
+    }
+    create(record) {
+        this.db
+            .prepare(`INSERT INTO plugin_permission_grants (
+           id,
+           plugin_id,
+           workspace_id,
+           permission_key,
+           scope_type,
+           scope_path,
+           grant_mode,
+           granted_by_user_id,
+           runtime_session_id,
+           created_at,
+           expires_at,
+           revoked_at
+         ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`)
+            .run(record.id, record.pluginId, record.workspaceId, record.permissionKey, record.scopeType, record.scopePath, record.grantMode, record.grantedByUserId, record.runtimeSessionId, record.createdAt, record.expiresAt, record.revokedAt);
+        return record;
+    }
+    findById(id) {
+        const row = this.db
+            .prepare(`SELECT
+           id,
+           plugin_id,
+           workspace_id,
+           permission_key,
+           scope_type,
+           scope_path,
+           grant_mode,
+           granted_by_user_id,
+           runtime_session_id,
+           created_at,
+           expires_at,
+           revoked_at
+         FROM plugin_permission_grants
+         WHERE id = ?`)
+            .get(id);
+        return row ? mapPluginPermissionGrantRow(row) : null;
+    }
+    listByPluginAndWorkspace(pluginId, workspaceId) {
+        return this.db
+            .prepare(`SELECT
+           id,
+           plugin_id,
+           workspace_id,
+           permission_key,
+           scope_type,
+           scope_path,
+           grant_mode,
+           granted_by_user_id,
+           runtime_session_id,
+           created_at,
+           expires_at,
+           revoked_at
+         FROM plugin_permission_grants
+         WHERE plugin_id = ?
+           AND workspace_id = ?
+         ORDER BY created_at DESC`)
+            .all(pluginId, workspaceId)
+            .map((row) => mapPluginPermissionGrantRow(row));
+    }
+    listActiveByPluginAndWorkspace(pluginId, workspaceId, referenceAt) {
+        return this.db
+            .prepare(`SELECT
+           id,
+           plugin_id,
+           workspace_id,
+           permission_key,
+           scope_type,
+           scope_path,
+           grant_mode,
+           granted_by_user_id,
+           runtime_session_id,
+           created_at,
+           expires_at,
+           revoked_at
+         FROM plugin_permission_grants
+         WHERE plugin_id = ?
+           AND workspace_id = ?
+           AND revoked_at IS NULL
+           AND (expires_at IS NULL OR expires_at > ?)
+         ORDER BY created_at DESC`)
+            .all(pluginId, workspaceId, referenceAt)
+            .map((row) => mapPluginPermissionGrantRow(row));
+    }
+    listActiveByPluginWorkspaceAndPermission(pluginId, workspaceId, permissionKey, referenceAt) {
+        return this.db
+            .prepare(`SELECT
+           id,
+           plugin_id,
+           workspace_id,
+           permission_key,
+           scope_type,
+           scope_path,
+           grant_mode,
+           granted_by_user_id,
+           runtime_session_id,
+           created_at,
+           expires_at,
+           revoked_at
+         FROM plugin_permission_grants
+         WHERE plugin_id = ?
+           AND workspace_id = ?
+           AND permission_key = ?
+           AND revoked_at IS NULL
+           AND (expires_at IS NULL OR expires_at > ?)
+         ORDER BY created_at DESC`)
+            .all(pluginId, workspaceId, permissionKey, referenceAt)
+            .map((row) => mapPluginPermissionGrantRow(row));
+    }
+    revokeById(id, revokedAt) {
+        this.db
+            .prepare(`UPDATE plugin_permission_grants
+         SET revoked_at = ?
+         WHERE id = ?
+           AND revoked_at IS NULL`)
+            .run(revokedAt, id);
+        return this.findById(id);
+    }
+}
+function mapPluginPermissionGrantRow(row) {
+    return {
+        id: row.id,
+        pluginId: row.plugin_id,
+        workspaceId: row.workspace_id,
+        permissionKey: row.permission_key,
+        scopeType: row.scope_type,
+        scopePath: row.scope_path,
+        grantMode: row.grant_mode,
+        grantedByUserId: row.granted_by_user_id,
+        runtimeSessionId: row.runtime_session_id,
+        createdAt: row.created_at,
+        expiresAt: row.expires_at,
+        revokedAt: row.revoked_at
+    };
+}
+//# sourceMappingURL=plugin-permission-grant-repository.js.map

package/dist/server/storage/repositories/plugin-permission-grant-repository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-permission-grant-repository.js","sourceRoot":"","sources":["../../../../src/storage/repositories/plugin-permission-grant-repository.ts"],"names":[],"mappings":"AASA,MAAM,OAAO,+BAA+B;IACb;IAA7B,YAA6B,EAAqB;QAArB,OAAE,GAAF,EAAE,CAAmB;IAAG,CAAC;IAEtD,MAAM,CAAC,MAA6B;QAClC,IAAI,CAAC,EAAE;aACJ,OAAO,CACN;;;;;;;;;;;;;uDAa+C,CAChD;aACA,GAAG,CACF,MAAM,CAAC,EAAE,EACT,MAAM,CAAC,QAAQ,EACf,MAAM,CAAC,WAAW,EAClB,MAAM,CAAC,aAAa,EACpB,MAAM,CAAC,SAAS,EAChB,MAAM,CAAC,SAAS,EAChB,MAAM,CAAC,SAAS,EAChB,MAAM,CAAC,eAAe,EACtB,MAAM,CAAC,gBAAgB,EACvB,MAAM,CAAC,SAAS,EAChB,MAAM,CAAC,SAAS,EAChB,MAAM,CAAC,SAAS,CACjB,CAAC;QAEJ,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,QAAQ,CAAC,EAAU;QACjB,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE;aAChB,OAAO,CACN;;;;;;;;;;;;;;sBAcc,CACf;aACA,GAAG,CAAC,EAAE,CAAyC,CAAC;QAEnD,OAAO,GAAG,CAAC,CAAC,CAAC,2BAA2B,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACvD,CAAC;IAED,wBAAwB,CAAC,QAAgB,EAAE,WAAmB;QAC5D,OAAO,IAAI,CAAC,EAAE;aACX,OAAO,CACN;;;;;;;;;;;;;;;;kCAgB0B,CAC3B;aACA,GAAG,CAAC,QAAQ,EAAE,WAAW,CAAC;aAC1B,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,2BAA2B,CAAC,GAA+B,CAAC,CAAC,CAAC;IAChF,CAAC;IAED,8BAA8B,CAAC,QAAgB,EAAE,WAAmB,EAAE,WAAmB;QACvF,OAAO,IAAI,CAAC,EAAE;aACX,OAAO,CACN;;;;;;;;;;;;;;;;;;kCAkB0B,CAC3B;aACA,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE,WAAW,CAAC;aACvC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,2BAA2B,CAAC,GAA+B,CAAC,CAAC,CAAC;IAChF,CAAC;IAED,wCAAwC,CACtC,QAAgB,EAChB,WAAmB,EACnB,aAAkC,EAClC,WAAmB;QAEnB,OAAO,IAAI,CAAC,EAAE;aACX,OAAO,CACN;;;;;;;;;;;;;;;;;;;kCAmB0B,CAC3B;aACA,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE,aAAa,EAAE,WAAW,CAAC;aACtD,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,2BAA2B,CAAC,GAA+B,CAAC,CAAC,CAAC;IAChF,CAAC;IAED,UAAU,CAAC,EAAU,EAAE,SAAiB;QACtC,IAAI,CAAC,EAAE;aACJ,OAAO,CACN;;;kCAG0B,CAC3B;aACA,GAAG,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QAEtB,OAAO,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAC3B,CAAC;CACF;AAiBD,SAAS,2BAA2B,CAAC,GAA6B;IAChE,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,QAAQ,EAAE,GAAG,CAAC,SAAS;QACvB,WAAW,EAAE,GAAG,CAAC,YAAY;QAC7B,aAAa,EAAE,GAAG,CAAC,cAAc;QACjC,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,eAAe,EAAE,GAAG,CAAC,kBAAkB;QACvC,gBAAgB,EAAE,GAAG,CAAC,kBAAkB;QACxC,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,SAAS,EAAE,GAAG,CAAC,UAAU;KAC1B,CAAC;AACJ,CAAC"}

package/dist/server/storage/repositories/plugin-run-repository.d.ts

@@ -0,0 +1,10 @@
+import type Database from "better-sqlite3";
+import type { PluginRun } from "../../types/domain.js";
+export declare class PluginRunRepository {
+    private readonly db;
+    constructor(db: Database.Database);
+    create(record: PluginRun): PluginRun;
+    update(record: PluginRun): PluginRun;
+    findById(id: string): PluginRun | null;
+    listByPluginId(pluginId: string, limit?: number): PluginRun[];
+}

package/dist/server/storage/repositories/plugin-run-repository.js

@@ -0,0 +1,111 @@
+export class PluginRunRepository {
+    db;
+    constructor(db) {
+        this.db = db;
+    }
+    create(record) {
+        this.db
+            .prepare(`INSERT INTO plugin_runs (
+           id,
+           plugin_id,
+           workspace_id,
+           runtime_session_id,
+           trigger_kind,
+           action_id,
+           status,
+           input_summary_json,
+           output_summary_json,
+           error_code,
+           error_message,
+           started_at,
+           finished_at,
+           created_at
+         ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`)
+            .run(record.id, record.pluginId, record.workspaceId, record.runtimeSessionId, record.triggerKind, record.actionId, record.status, record.inputSummaryJson, record.outputSummaryJson, record.errorCode, record.errorMessage, record.startedAt, record.finishedAt, record.createdAt);
+        return record;
+    }
+    update(record) {
+        this.db
+            .prepare(`UPDATE plugin_runs
+         SET plugin_id = ?,
+             workspace_id = ?,
+             runtime_session_id = ?,
+             trigger_kind = ?,
+             action_id = ?,
+             status = ?,
+             input_summary_json = ?,
+             output_summary_json = ?,
+             error_code = ?,
+             error_message = ?,
+             started_at = ?,
+             finished_at = ?
+         WHERE id = ?`)
+            .run(record.pluginId, record.workspaceId, record.runtimeSessionId, record.triggerKind, record.actionId, record.status, record.inputSummaryJson, record.outputSummaryJson, record.errorCode, record.errorMessage, record.startedAt, record.finishedAt, record.id);
+        return record;
+    }
+    findById(id) {
+        const row = this.db
+            .prepare(`SELECT
+           id,
+           plugin_id,
+           workspace_id,
+           runtime_session_id,
+           trigger_kind,
+           action_id,
+           status,
+           input_summary_json,
+           output_summary_json,
+           error_code,
+           error_message,
+           started_at,
+           finished_at,
+           created_at
+         FROM plugin_runs
+         WHERE id = ?`)
+            .get(id);
+        return row ? mapPluginRunRow(row) : null;
+    }
+    listByPluginId(pluginId, limit = 50) {
+        return this.db
+            .prepare(`SELECT
+           id,
+           plugin_id,
+           workspace_id,
+           runtime_session_id,
+           trigger_kind,
+           action_id,
+           status,
+           input_summary_json,
+           output_summary_json,
+           error_code,
+           error_message,
+           started_at,
+           finished_at,
+           created_at
+         FROM plugin_runs
+         WHERE plugin_id = ?
+         ORDER BY created_at DESC
+         LIMIT ?`)
+            .all(pluginId, limit)
+            .map((row) => mapPluginRunRow(row));
+    }
+}
+function mapPluginRunRow(row) {
+    return {
+        id: row.id,
+        pluginId: row.plugin_id,
+        workspaceId: row.workspace_id,
+        runtimeSessionId: row.runtime_session_id,
+        triggerKind: row.trigger_kind,
+        actionId: row.action_id,
+        status: row.status,
+        inputSummaryJson: row.input_summary_json,
+        outputSummaryJson: row.output_summary_json,
+        errorCode: row.error_code,
+        errorMessage: row.error_message,
+        startedAt: row.started_at,
+        finishedAt: row.finished_at,
+        createdAt: row.created_at
+    };
+}
+//# sourceMappingURL=plugin-run-repository.js.map

package/dist/server/storage/repositories/plugin-run-repository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-run-repository.js","sourceRoot":"","sources":["../../../../src/storage/repositories/plugin-run-repository.ts"],"names":[],"mappings":"AAIA,MAAM,OAAO,mBAAmB;IACD;IAA7B,YAA6B,EAAqB;QAArB,OAAE,GAAF,EAAE,CAAmB;IAAG,CAAC;IAEtD,MAAM,CAAC,MAAiB;QACtB,IAAI,CAAC,EAAE;aACJ,OAAO,CACN;;;;;;;;;;;;;;;6DAeqD,CACtD;aACA,GAAG,CACF,MAAM,CAAC,EAAE,EACT,MAAM,CAAC,QAAQ,EACf,MAAM,CAAC,WAAW,EAClB,MAAM,CAAC,gBAAgB,EACvB,MAAM,CAAC,WAAW,EAClB,MAAM,CAAC,QAAQ,EACf,MAAM,CAAC,MAAM,EACb,MAAM,CAAC,gBAAgB,EACvB,MAAM,CAAC,iBAAiB,EACxB,MAAM,CAAC,SAAS,EAChB,MAAM,CAAC,YAAY,EACnB,MAAM,CAAC,SAAS,EAChB,MAAM,CAAC,UAAU,EACjB,MAAM,CAAC,SAAS,CACjB,CAAC;QAEJ,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,CAAC,MAAiB;QACtB,IAAI,CAAC,EAAE;aACJ,OAAO,CACN;;;;;;;;;;;;;sBAac,CACf;aACA,GAAG,CACF,MAAM,CAAC,QAAQ,EACf,MAAM,CAAC,WAAW,EAClB,MAAM,CAAC,gBAAgB,EACvB,MAAM,CAAC,WAAW,EAClB,MAAM,CAAC,QAAQ,EACf,MAAM,CAAC,MAAM,EACb,MAAM,CAAC,gBAAgB,EACvB,MAAM,CAAC,iBAAiB,EACxB,MAAM,CAAC,SAAS,EAChB,MAAM,CAAC,YAAY,EACnB,MAAM,CAAC,SAAS,EAChB,MAAM,CAAC,UAAU,EACjB,MAAM,CAAC,EAAE,CACV,CAAC;QAEJ,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,QAAQ,CAAC,EAAU;QACjB,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE;aAChB,OAAO,CACN;;;;;;;;;;;;;;;;sBAgBc,CACf;aACA,GAAG,CAAC,EAAE,CAA6B,CAAC;QAEvC,OAAO,GAAG,CAAC,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3C,CAAC;IAED,cAAc,CAAC,QAAgB,EAAE,KAAK,GAAG,EAAE;QACzC,OAAO,IAAI,CAAC,EAAE;aACX,OAAO,CACN;;;;;;;;;;;;;;;;;;iBAkBS,CACV;aACA,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC;aACpB,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,eAAe,CAAC,GAAmB,CAAC,CAAC,CAAC;IACxD,CAAC;CACF;AAmBD,SAAS,eAAe,CAAC,GAAiB;IACxC,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,QAAQ,EAAE,GAAG,CAAC,SAAS;QACvB,WAAW,EAAE,GAAG,CAAC,YAAY;QAC7B,gBAAgB,EAAE,GAAG,CAAC,kBAAkB;QACxC,WAAW,EAAE,GAAG,CAAC,YAAY;QAC7B,QAAQ,EAAE,GAAG,CAAC,SAAS;QACvB,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,gBAAgB,EAAE,GAAG,CAAC,kBAAkB;QACxC,iBAAiB,EAAE,GAAG,CAAC,mBAAmB;QAC1C,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,YAAY,EAAE,GAAG,CAAC,aAAa;QAC/B,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,UAAU,EAAE,GAAG,CAAC,WAAW;QAC3B,SAAS,EAAE,GAAG,CAAC,UAAU;KAC1B,CAAC;AACJ,CAAC"}

package/dist/server/storage/repositories/plugin-runtime-session-repository.d.ts

@@ -0,0 +1,10 @@
+import type Database from "better-sqlite3";
+import type { PluginRuntimeSession } from "../../types/domain.js";
+export declare class PluginRuntimeSessionRepository {
+    private readonly db;
+    constructor(db: Database.Database);
+    create(record: PluginRuntimeSession): PluginRuntimeSession;
+    update(record: PluginRuntimeSession): PluginRuntimeSession;
+    findById(id: string): PluginRuntimeSession | null;
+    listByPluginId(pluginId: string, limit?: number): PluginRuntimeSession[];
+}

package/dist/server/storage/repositories/plugin-runtime-session-repository.js

@@ -0,0 +1,86 @@
+export class PluginRuntimeSessionRepository {
+    db;
+    constructor(db) {
+        this.db = db;
+    }
+    create(record) {
+        this.db
+            .prepare(`INSERT INTO plugin_runtime_sessions (
+           id,
+           plugin_id,
+           workspace_id,
+           opened_by_user_id,
+           source,
+           status,
+           created_at,
+           updated_at,
+           closed_at
+         ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)`)
+            .run(record.id, record.pluginId, record.workspaceId, record.openedByUserId, record.source, record.status, record.createdAt, record.updatedAt, record.closedAt);
+        return record;
+    }
+    update(record) {
+        this.db
+            .prepare(`UPDATE plugin_runtime_sessions
+         SET plugin_id = ?,
+             workspace_id = ?,
+             opened_by_user_id = ?,
+             source = ?,
+             status = ?,
+             updated_at = ?,
+             closed_at = ?
+         WHERE id = ?`)
+            .run(record.pluginId, record.workspaceId, record.openedByUserId, record.source, record.status, record.updatedAt, record.closedAt, record.id);
+        return record;
+    }
+    findById(id) {
+        const row = this.db
+            .prepare(`SELECT
+           id,
+           plugin_id,
+           workspace_id,
+           opened_by_user_id,
+           source,
+           status,
+           created_at,
+           updated_at,
+           closed_at
+         FROM plugin_runtime_sessions
+         WHERE id = ?`)
+            .get(id);
+        return row ? mapPluginRuntimeSessionRow(row) : null;
+    }
+    listByPluginId(pluginId, limit = 50) {
+        return this.db
+            .prepare(`SELECT
+           id,
+           plugin_id,
+           workspace_id,
+           opened_by_user_id,
+           source,
+           status,
+           created_at,
+           updated_at,
+           closed_at
+         FROM plugin_runtime_sessions
+         WHERE plugin_id = ?
+         ORDER BY created_at DESC
+         LIMIT ?`)
+            .all(pluginId, limit)
+            .map((row) => mapPluginRuntimeSessionRow(row));
+    }
+}
+function mapPluginRuntimeSessionRow(row) {
+    return {
+        id: row.id,
+        pluginId: row.plugin_id,
+        workspaceId: row.workspace_id,
+        openedByUserId: row.opened_by_user_id,
+        source: row.source,
+        status: row.status,
+        createdAt: row.created_at,
+        updatedAt: row.updated_at,
+        closedAt: row.closed_at
+    };
+}
+//# sourceMappingURL=plugin-runtime-session-repository.js.map

package/dist/server/storage/repositories/plugin-runtime-session-repository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-runtime-session-repository.js","sourceRoot":"","sources":["../../../../src/storage/repositories/plugin-runtime-session-repository.ts"],"names":[],"mappings":"AAQA,MAAM,OAAO,8BAA8B;IACZ;IAA7B,YAA6B,EAAqB;QAArB,OAAE,GAAF,EAAE,CAAmB;IAAG,CAAC;IAEtD,MAAM,CAAC,MAA4B;QACjC,IAAI,CAAC,EAAE;aACJ,OAAO,CACN;;;;;;;;;;8CAUsC,CACvC;aACA,GAAG,CACF,MAAM,CAAC,EAAE,EACT,MAAM,CAAC,QAAQ,EACf,MAAM,CAAC,WAAW,EAClB,MAAM,CAAC,cAAc,EACrB,MAAM,CAAC,MAAM,EACb,MAAM,CAAC,MAAM,EACb,MAAM,CAAC,SAAS,EAChB,MAAM,CAAC,SAAS,EAChB,MAAM,CAAC,QAAQ,CAChB,CAAC;QAEJ,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,CAAC,MAA4B;QACjC,IAAI,CAAC,EAAE;aACJ,OAAO,CACN;;;;;;;;sBAQc,CACf;aACA,GAAG,CACF,MAAM,CAAC,QAAQ,EACf,MAAM,CAAC,WAAW,EAClB,MAAM,CAAC,cAAc,EACrB,MAAM,CAAC,MAAM,EACb,MAAM,CAAC,MAAM,EACb,MAAM,CAAC,SAAS,EAChB,MAAM,CAAC,QAAQ,EACf,MAAM,CAAC,EAAE,CACV,CAAC;QAEJ,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,QAAQ,CAAC,EAAU;QACjB,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE;aAChB,OAAO,CACN;;;;;;;;;;;sBAWc,CACf;aACA,GAAG,CAAC,EAAE,CAAwC,CAAC;QAElD,OAAO,GAAG,CAAC,CAAC,CAAC,0BAA0B,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACtD,CAAC;IAED,cAAc,CAAC,QAAgB,EAAE,KAAK,GAAG,EAAE;QACzC,OAAO,IAAI,CAAC,EAAE;aACX,OAAO,CACN;;;;;;;;;;;;;iBAaS,CACV;aACA,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC;aACpB,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,0BAA0B,CAAC,GAA8B,CAAC,CAAC,CAAC;IAC9E,CAAC;CACF;AAcD,SAAS,0BAA0B,CAAC,GAA4B;IAC9D,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,QAAQ,EAAE,GAAG,CAAC,SAAS;QACvB,WAAW,EAAE,GAAG,CAAC,YAAY;QAC7B,cAAc,EAAE,GAAG,CAAC,iBAAiB;QACrC,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,QAAQ,EAAE,GAAG,CAAC,SAAS;KACxB,CAAC;AACJ,CAAC"}

package/dist/server/storage/sqlite/client.d.ts

@@ -1,6 +1,6 @@
-import Database from "better-sqlite3";
+import type { BetterSqliteDatabase } from "../../shared/runtime/better-sqlite3.js";
 export interface DatabaseClient {
-    db: Database.Database;
+    db: BetterSqliteDatabase;
     close: () => void;
 }
 export declare function createDatabaseClient(databasePath: string): DatabaseClient;

package/dist/server/storage/sqlite/client.js

@@ -1,6 +1,6 @@
 import fs from "node:fs";
 import path from "node:path";
-import Database from "better-sqlite3";
+import Database from "../../shared/runtime/better-sqlite3.js";
 export function createDatabaseClient(databasePath) {
     if (databasePath !== ":memory:") {
         fs.mkdirSync(path.dirname(databasePath), { recursive: true });
@@ -51,6 +51,10 @@ export function createDatabaseClient(databasePath) {
     ensureAssistantAutomationSchema(db);
     ensureAssistantSandboxSchema(db);
     ensureDocumentTemplateSchema(db);
+    ensurePluginRegistrySchema(db);
+    ensurePluginRuntimeSessionSchema(db);
+    ensurePluginPermissionGrantSchema(db);
+    ensurePluginRunSchema(db);
     ensureOpsTargetWorkspaceSchema(db);
     ensureButlerInboxSchema(db);
     ensureButlerFollowUpTaskSchema(db);
@@ -244,6 +248,251 @@ function ensureAuthDeviceSchema(db) {
         db.exec("ALTER TABLE auth_devices ADD COLUMN user_agent TEXT");
     }
 }
+function ensurePluginRegistrySchema(db) {
+    db.exec(`
+    CREATE TABLE IF NOT EXISTS plugin_definitions (
+      id TEXT PRIMARY KEY,
+      version TEXT NOT NULL,
+      name TEXT NOT NULL,
+      install_root TEXT NOT NULL,
+      manifest_json TEXT NOT NULL,
+      has_frontend INTEGER NOT NULL DEFAULT 0 CHECK (has_frontend IN (0, 1)),
+      has_backend INTEGER NOT NULL DEFAULT 0 CHECK (has_backend IN (0, 1)),
+      created_at TEXT NOT NULL,
+      updated_at TEXT NOT NULL
+    );
+
+    CREATE INDEX IF NOT EXISTS idx_plugin_definitions_name
+      ON plugin_definitions(name);
+    CREATE INDEX IF NOT EXISTS idx_plugin_definitions_updated_at
+      ON plugin_definitions(updated_at DESC);
+
+    CREATE TABLE IF NOT EXISTS plugin_enablements (
+      plugin_id TEXT PRIMARY KEY,
+      enabled INTEGER NOT NULL DEFAULT 0 CHECK (enabled IN (0, 1)),
+      enabled_by_user_id TEXT,
+      enabled_at TEXT,
+      disabled_by_user_id TEXT,
+      disabled_at TEXT,
+      reason TEXT,
+      updated_at TEXT NOT NULL,
+      FOREIGN KEY (plugin_id) REFERENCES plugin_definitions(id) ON DELETE CASCADE,
+      FOREIGN KEY (enabled_by_user_id) REFERENCES auth_users(id),
+      FOREIGN KEY (disabled_by_user_id) REFERENCES auth_users(id)
+    );
+
+    CREATE INDEX IF NOT EXISTS idx_plugin_enablements_enabled
+      ON plugin_enablements(enabled);
+
+    CREATE TABLE IF NOT EXISTS plugin_audit_events (
+      id TEXT PRIMARY KEY,
+      plugin_id TEXT NOT NULL,
+      workspace_id TEXT,
+      event_type TEXT NOT NULL CHECK (
+        event_type IN (
+          'plugin.registered',
+          'plugin.registration_failed',
+          'plugin.enabled',
+          'plugin.disabled',
+          'plugin.permission_granted',
+          'plugin.permission_revoked',
+          'plugin.permission_denied',
+          'plugin.action_invoked',
+          'plugin.action_rejected',
+          'plugin.schedule_triggered',
+          'plugin.schedule_retry_scheduled',
+          'plugin.schedule_skipped',
+          'plugin.frontend_loaded',
+          'plugin.scope_rejected',
+          'plugin.desktop_call'
+        )
+      ),
+      actor_user_id TEXT,
+      payload_json TEXT NOT NULL,
+      created_at TEXT NOT NULL,
+      FOREIGN KEY (workspace_id) REFERENCES workspaces(id),
+      FOREIGN KEY (actor_user_id) REFERENCES auth_users(id)
+    );
+
+    CREATE INDEX IF NOT EXISTS idx_plugin_audit_events_plugin_id
+      ON plugin_audit_events(plugin_id, created_at DESC);
+  `);
+    ensurePluginAuditEventForeignKeyCompatibility(db);
+}
+function ensurePluginAuditEventForeignKeyCompatibility(db) {
+    if (!tableExists(db, "plugin_audit_events")) {
+        return;
+    }
+    const table = db
+        .prepare(`SELECT sql
+       FROM sqlite_master
+       WHERE type = 'table'
+         AND name = 'plugin_audit_events'
+       LIMIT 1`)
+        .get();
+    const definition = table?.sql ?? "";
+    if (!definition.includes("REFERENCES plugin_definitions")) {
+        const supportsNewEvents = definition.includes("'plugin.permission_granted'") &&
+            definition.includes("'plugin.permission_revoked'") &&
+            definition.includes("'plugin.permission_denied'") &&
+            definition.includes("'plugin.schedule_triggered'") &&
+            definition.includes("'plugin.schedule_retry_scheduled'") &&
+            definition.includes("'plugin.schedule_skipped'");
+        if (supportsNewEvents) {
+            return;
+        }
+    }
+    db.exec(`
+    ALTER TABLE plugin_audit_events RENAME TO plugin_audit_events_legacy;
+
+    CREATE TABLE plugin_audit_events (
+      id TEXT PRIMARY KEY,
+      plugin_id TEXT NOT NULL,
+      workspace_id TEXT,
+      event_type TEXT NOT NULL CHECK (
+        event_type IN (
+          'plugin.registered',
+          'plugin.registration_failed',
+          'plugin.enabled',
+          'plugin.disabled',
+          'plugin.permission_granted',
+          'plugin.permission_revoked',
+          'plugin.permission_denied',
+          'plugin.action_invoked',
+          'plugin.action_rejected',
+          'plugin.schedule_triggered',
+          'plugin.schedule_retry_scheduled',
+          'plugin.schedule_skipped',
+          'plugin.frontend_loaded',
+          'plugin.scope_rejected',
+          'plugin.desktop_call'
+        )
+      ),
+      actor_user_id TEXT,
+      payload_json TEXT NOT NULL,
+      created_at TEXT NOT NULL,
+      FOREIGN KEY (workspace_id) REFERENCES workspaces(id),
+      FOREIGN KEY (actor_user_id) REFERENCES auth_users(id)
+    );
+
+    INSERT INTO plugin_audit_events (
+      id,
+      plugin_id,
+      workspace_id,
+      event_type,
+      actor_user_id,
+      payload_json,
+      created_at
+    )
+    SELECT
+      id,
+      plugin_id,
+      workspace_id,
+      event_type,
+      actor_user_id,
+      payload_json,
+      created_at
+    FROM plugin_audit_events_legacy;
+
+    DROP TABLE plugin_audit_events_legacy;
+
+    CREATE INDEX IF NOT EXISTS idx_plugin_audit_events_plugin_id
+      ON plugin_audit_events(plugin_id, created_at DESC);
+  `);
+}
+function ensurePluginRuntimeSessionSchema(db) {
+    db.exec(`
+    CREATE TABLE IF NOT EXISTS plugin_runtime_sessions (
+      id TEXT PRIMARY KEY,
+      plugin_id TEXT NOT NULL,
+      workspace_id TEXT NOT NULL,
+      opened_by_user_id TEXT NOT NULL,
+      source TEXT NOT NULL CHECK (source IN ('frontend', 'assistant', 'cli')),
+      status TEXT NOT NULL CHECK (status IN ('active', 'closed')),
+      created_at TEXT NOT NULL,
+      updated_at TEXT NOT NULL,
+      closed_at TEXT,
+      FOREIGN KEY (plugin_id) REFERENCES plugin_definitions(id) ON DELETE CASCADE,
+      FOREIGN KEY (workspace_id) REFERENCES workspaces(id),
+      FOREIGN KEY (opened_by_user_id) REFERENCES auth_users(id)
+    );
+
+    CREATE INDEX IF NOT EXISTS idx_plugin_runtime_sessions_plugin_id
+      ON plugin_runtime_sessions(plugin_id, created_at DESC);
+    CREATE INDEX IF NOT EXISTS idx_plugin_runtime_sessions_workspace_id
+      ON plugin_runtime_sessions(workspace_id, created_at DESC);
+    CREATE INDEX IF NOT EXISTS idx_plugin_runtime_sessions_status
+      ON plugin_runtime_sessions(status, updated_at DESC);
+  `);
+}
+function ensurePluginPermissionGrantSchema(db) {
+    db.exec(`
+    CREATE TABLE IF NOT EXISTS plugin_permission_grants (
+      id TEXT PRIMARY KEY,
+      plugin_id TEXT NOT NULL,
+      workspace_id TEXT NOT NULL,
+      permission_key TEXT NOT NULL CHECK (
+        permission_key IN (
+          'workspace.read_file',
+          'workspace.list_dir',
+          'workspace.write_file',
+          'desktop.open_file',
+          'desktop.reveal_in_file_manager'
+        )
+      ),
+      scope_type TEXT NOT NULL CHECK (scope_type IN ('workspace', 'directory', 'file')),
+      scope_path TEXT,
+      grant_mode TEXT NOT NULL CHECK (grant_mode IN ('once', 'session', 'persistent')),
+      granted_by_user_id TEXT NOT NULL,
+      runtime_session_id TEXT,
+      created_at TEXT NOT NULL,
+      expires_at TEXT,
+      revoked_at TEXT,
+      FOREIGN KEY (plugin_id) REFERENCES plugin_definitions(id) ON DELETE CASCADE,
+      FOREIGN KEY (workspace_id) REFERENCES workspaces(id),
+      FOREIGN KEY (granted_by_user_id) REFERENCES auth_users(id),
+      FOREIGN KEY (runtime_session_id) REFERENCES plugin_runtime_sessions(id)
+    );
+
+    CREATE INDEX IF NOT EXISTS idx_plugin_permission_grants_plugin_workspace
+      ON plugin_permission_grants(plugin_id, workspace_id, permission_key, created_at DESC);
+    CREATE INDEX IF NOT EXISTS idx_plugin_permission_grants_runtime_session
+      ON plugin_permission_grants(runtime_session_id, created_at DESC);
+    CREATE INDEX IF NOT EXISTS idx_plugin_permission_grants_active
+      ON plugin_permission_grants(plugin_id, workspace_id, revoked_at, expires_at);
+  `);
+}
+function ensurePluginRunSchema(db) {
+    db.exec(`
+    CREATE TABLE IF NOT EXISTS plugin_runs (
+      id TEXT PRIMARY KEY,
+      plugin_id TEXT NOT NULL,
+      workspace_id TEXT NOT NULL,
+      runtime_session_id TEXT,
+      trigger_kind TEXT NOT NULL CHECK (trigger_kind IN ('frontend', 'cli', 'schedule', 'assistant')),
+      action_id TEXT,
+      status TEXT NOT NULL CHECK (status IN ('queued', 'running', 'succeeded', 'failed', 'rejected', 'cancelled')),
+      input_summary_json TEXT,
+      output_summary_json TEXT,
+      error_code TEXT,
+      error_message TEXT,
+      started_at TEXT,
+      finished_at TEXT,
+      created_at TEXT NOT NULL,
+      FOREIGN KEY (workspace_id) REFERENCES workspaces(id),
+      FOREIGN KEY (runtime_session_id) REFERENCES plugin_runtime_sessions(id)
+    );
+
+    CREATE INDEX IF NOT EXISTS idx_plugin_runs_plugin_id
+      ON plugin_runs(plugin_id, created_at DESC);
+  `);
+    const columns = db
+        .prepare("PRAGMA table_info(plugin_runs)")
+        .all();
+    if (!columns.some((column) => column.name === "runtime_session_id")) {
+        db.exec("ALTER TABLE plugin_runs ADD COLUMN runtime_session_id TEXT");
+    }
+}
 function ensureAuthLoginAttemptSchema(db) {
     const columns = db
         .prepare("PRAGMA table_info(auth_login_attempts)")