@stigmer/server 3.15.3-dev.20260914100347 → 3.15.3-dev.20260916211208

package/dist/domain/plugin/push.d.ts

@@ -0,0 +1,133 @@
+import type { Plugin } from "@stigmer/protos/ai/stigmer/agentic/plugin/v1/api_pb";
+import type { PushPluginRequestSchema } from "@stigmer/protos/ai/stigmer/agentic/plugin/v1/io_pb";
+import { ApiResourceVisibility } from "@stigmer/protos/ai/stigmer/commons/apiresource/enum_pb";
+import type { Logger } from "../../boot/logger.js";
+import type { ContentAddressedArchiveStore } from "../../archive/content-store.js";
+import type { Authorizer } from "../../extensions/authorizer.js";
+import type { ResourceAuthorizationLifecycle } from "../../extensions/resource-authorization.js";
+import type { PipelineStep } from "../../pipeline/pipeline.js";
+import type { RequestContext } from "../../pipeline/request-context.js";
+import type { Store } from "../../store/interface.js";
+import type { PluginIdentity } from "./materialize/identity.js";
+import type { PluginMaterializerProvider } from "./materialize/ports.js";
+import type { Member } from "./members.js";
+type PushDesc = typeof PushPluginRequestSchema;
+export declare const PLUGIN_KEY = "plugin";
+export declare const PLUGIN_ARCHIVE_KEY = "pluginArchive";
+export declare const PLUGIN_PACKAGE_KEY = "pluginPackage";
+export declare const PLUGIN_LIBRARY_WARNINGS_KEY = "pluginLibraryWarnings";
+export declare const EXISTING_PLUGIN_KEY = "existingPlugin";
+export declare const SHOULD_CREATE_PLUGIN_KEY = "shouldCreatePlugin";
+export declare const PLUGIN_OVERLAYS_KEY = "pluginOverlays";
+export declare const PLUGIN_PLAN_KEY = "pluginPlan";
+export declare const EXISTING_MEMBERS_KEY = "pluginExistingMembers";
+export declare const PLUGIN_CONVERGED_KEY = "pluginConverged";
+export declare const ARTIFACT_STORAGE_KEY_KEY = "artifactStorageKey";
+/**
+ * GateAndHashArchive — the ZIP gate over the shared archive plumbing:
+ * size ceiling, hash, prefilter, structural budgets, and the lazy reader
+ * the library reads through. Every gate failure is one InvalidArgument arm.
+ */
+export declare function newGateAndHashArchiveStep(): PipelineStep<PushDesc>;
+/**
+ * ReadPluginPackage — the library reads the package; a refusal lists every
+ * problem in the sentences `stigmer validate -f` prints, so an author who
+ * skipped the offline check reads the same words here.
+ */
+export declare function newReadPluginPackageStep(): PipelineStep<PushDesc>;
+/**
+ * BuildInitialPlugin — the scaffold: org from the request, name and slug
+ * from the manifest. The id and every status field come later.
+ */
+export declare function newBuildInitialPluginStep(): PipelineStep<PushDesc>;
+/** FindExistingBySlug — push is upsert-by-slug: an existing plugin's id is adopted. */
+export declare function newFindExistingPluginBySlugStep(store: Store): PipelineStep<PushDesc>;
+/** GenerateIDIfNeeded — plg_{ulid} for new plugins; upgrades keep theirs. */
+export declare function newGeneratePluginIdIfNeededStep(): PipelineStep<PushDesc>;
+/** ParseOverlayDocuments — the `ai.stigmer/` documents become protos, strictly. */
+export declare function newParseOverlayDocumentsStep(): PipelineStep<PushDesc>;
+/** SanitizePluginMetadata — what an overlay author may not say (overlay/sanitize.ts). */
+export declare function newSanitizePluginMetadataStep(authorizer: Authorizer): PipelineStep<PushDesc>;
+/** The plugin as its members see it, from the head and the archive. */
+export declare function identityOf(plugin: Plugin, digest: string, visibility: ApiResourceVisibility): PluginIdentity;
+/** The level this push installs at: the request's, or the kind's default. */
+export declare function requestedVisibility(ctx: RequestContext<PushDesc>): ApiResourceVisibility;
+/**
+ * PlanMaterialization — everything the push will write, checked whole:
+ * every child slug against the organization (free, ours, or refused
+ * naming the holder), the caller's permission for every member kind, and
+ * the plugin's current members for the convergence and drop decisions.
+ */
+export declare function newPlanMaterializationStep(store: Store, authorizer: Authorizer): PipelineStep<PushDesc>;
+/**
+ * GuardPluginVisibility — the requested level must be one the plugin and
+ * every planned member kind support, and PUBLIC needs the operator grant
+ * (the one owner of that question, shared with every other create door).
+ * Each member's own chain will check again in-process; refusing here keeps
+ * the head from being written before the answer is known.
+ */
+export declare function newGuardPluginVisibilityStep(authorizer: Authorizer): PipelineStep<PushDesc>;
+/**
+ * ResolveConvergence — the no-op decision: the stored plugin already IS
+ * this archive when its digest matches, it is READY, and every planned
+ * member exists stamped with the digest. Anything less installs.
+ */
+export declare function newResolveConvergenceStep(): PipelineStep<PushDesc>;
+/** CheckAndStoreArtifact — content-addressed dedupe: same digest reuses the stored copy. */
+export declare function newCheckAndStoreArtifactStep(artifactStorage: ContentAddressedArchiveStore): PipelineStep<PushDesc>;
+/**
+ * PopulatePluginFields — the manifest into the spec, the archive identity
+ * and INSTALLING into the status, the level, the metadata.version chain,
+ * and the audit stamping discipline: creates stamp both slots; updates copy
+ * the loaded head's slot pointers and stamp spec_audit only (a push is a
+ * definition change; the helper sets a fresh spec_audit, never mutating
+ * the copied pointer, #540).
+ */
+export declare function newPopulatePluginFieldsStep(): PipelineStep<PushDesc>;
+/**
+ * ArchiveCurrentPlugin — the shared versioning step bound to the plugin's
+ * digest and tag. The live tag IS the manifest version when it fits the
+ * tag pattern (the plan already warned when it does not), so the
+ * single-holder assignment and the getByReference ladder read one fact;
+ * the version is the manifest's word and is never cleared, so a failed
+ * tag assignment degrades to "reachable by digest" without touching the
+ * spec.
+ */
+export declare function newArchiveCurrentPluginStep(store: Store, logger: Logger): PipelineStep<PushDesc>;
+/** The tag a plugin head claims: its manifest version when the pattern admits it. */
+export declare function pluginLiveTag(plugin: Plugin): string;
+/** StorePlugin — persists the head; runs twice, before and after materialisation. */
+export declare function newStorePluginStep(store: Store, stepName: string): PipelineStep<PushDesc>;
+/**
+ * MaterializeMembers — skills, MCP servers, the agent, workflows, each
+ * through the in-process lane as the installing caller, in the order
+ * references resolve. An existing member whose level differs from the
+ * plugin's is moved through its kind's updateVisibility afterwards (apply
+ * preserves a stored level by contract). A child failure records FAILED on
+ * the head, persists it, and fails the request with the plugin named.
+ */
+export declare function newMaterializeMembersStep(store: Store, materializerProvider: PluginMaterializerProvider, logger: Logger): PipelineStep<PushDesc>;
+/**
+ * RemoveDroppedMembers — an upgrade whose archive no longer names a member
+ * deletes it through the member's own delete chain (agent first, so a
+ * workflow or a user's own resource still referencing it is judged by
+ * that chain, then the rest in reverse materialisation order).
+ */
+export declare function newRemoveDroppedMembersStep(store: Store, materializerProvider: PluginMaterializerProvider, logger: Logger): PipelineStep<PushDesc>;
+/** Cascade order: the agent first (it references the rest), then reverse materialisation order. */
+export declare function orderForDeletion(members: readonly Member[]): Member[];
+/**
+ * FinalizePluginStatus — the install receipt: counts, every warning (the
+ * library's and the plan's), READY.
+ */
+export declare function newFinalizePluginStatusStep(): PipelineStep<PushDesc>;
+/**
+ * PluginPushAuthorizationTuples — the tuple-lifecycle splice for the push
+ * lane, the skill push's shape: a genuine create fires the creation event;
+ * a re-push diffs the stored level against the pushed head.
+ */
+export declare function newPluginPushAuthorizationTuplesStep(lifecycle: ResourceAuthorizationLifecycle | undefined, logger: Logger): PipelineStep<PushDesc>;
+/** IndexPluginSearch — search-index upsert, best-effort by contract. */
+export declare function newIndexPluginSearchStep(store: Store, logger: Logger): PipelineStep<PushDesc>;
+export {};
+//# sourceMappingURL=push.d.ts.map

package/dist/domain/plugin/push.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"push.d.ts","sourceRoot":"","sources":["../../../src/domain/plugin/push.ts"],"names":[],"mappings":"AAyCA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,qDAAqD,CAAC;AAClF,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,oDAAoD,CAAC;AAalG,OAAO,EAAE,qBAAqB,EAAE,MAAM,wDAAwD,CAAC;AAS/F,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,gCAAgC,CAAC;AACnF,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAC;AACjE,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,4CAA4C,CAAC;AAUjG,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC/D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mCAAmC,CAAC;AAiBxE,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,0BAA0B,CAAC;AAItD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAIhE,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,wBAAwB,CAAC;AAOzE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAO3C,KAAK,QAAQ,GAAG,OAAO,uBAAuB,CAAC;AAG/C,eAAO,MAAM,UAAU,WAAW,CAAC;AACnC,eAAO,MAAM,kBAAkB,kBAAkB,CAAC;AAClD,eAAO,MAAM,kBAAkB,kBAAkB,CAAC;AAClD,eAAO,MAAM,2BAA2B,0BAA0B,CAAC;AACnE,eAAO,MAAM,mBAAmB,mBAAmB,CAAC;AACpD,eAAO,MAAM,wBAAwB,uBAAuB,CAAC;AAC7D,eAAO,MAAM,mBAAmB,mBAAmB,CAAC;AACpD,eAAO,MAAM,eAAe,eAAe,CAAC;AAC5C,eAAO,MAAM,oBAAoB,0BAA0B,CAAC;AAC5D,eAAO,MAAM,oBAAoB,oBAAoB,CAAC;AACtD,eAAO,MAAM,wBAAwB,uBAAuB,CAAC;AAE7D;;;;GAIG;AACH,wBAAgB,yBAAyB,IAAI,YAAY,CAAC,QAAQ,CAAC,CAgBlE;AAED;;;;GAIG;AACH,wBAAgB,wBAAwB,IAAI,YAAY,CAAC,QAAQ,CAAC,CA2BjE;AAED;;;GAGG;AACH,wBAAgB,yBAAyB,IAAI,YAAY,CAAC,QAAQ,CAAC,CAuBlE;AAED,uFAAuF;AACvF,wBAAgB,+BAA+B,CAC7C,KAAK,EAAE,KAAK,GACX,YAAY,CAAC,QAAQ,CAAC,CA2BxB;AAED,6EAA6E;AAC7E,wBAAgB,+BAA+B,IAAI,YAAY,CAAC,QAAQ,CAAC,CAUxE;AAED,mFAAmF;AACnF,wBAAgB,4BAA4B,IAAI,YAAY,CAAC,QAAQ,CAAC,CAerE;AAED,yFAAyF;AACzF,wBAAgB,6BAA6B,CAC3C,UAAU,EAAE,UAAU,GACrB,YAAY,CAAC,QAAQ,CAAC,CAcxB;AAeD,uEAAuE;AACvE,wBAAgB,UAAU,CACxB,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,qBAAqB,GAChC,cAAc,CAShB;AAED,6EAA6E;AAC7E,wBAAgB,mBAAmB,CACjC,GAAG,EAAE,cAAc,CAAC,QAAQ,CAAC,GAC5B,qBAAqB,CAKvB;AAED;;;;;GAKG;AACH,wBAAgB,0BAA0B,CACxC,KAAK,EAAE,KAAK,EACZ,UAAU,EAAE,UAAU,GACrB,YAAY,CAAC,QAAQ,CAAC,CA8GxB;AAED;;;;;;GAMG;AACH,wBAAgB,4BAA4B,CAC1C,UAAU,EAAE,UAAU,GACrB,YAAY,CAAC,QAAQ,CAAC,CAmBxB;AAED;;;;GAIG;AACH,wBAAgB,yBAAyB,IAAI,YAAY,CAAC,QAAQ,CAAC,CAmBlE;AAED,4FAA4F;AAC5F,wBAAgB,4BAA4B,CAC1C,eAAe,EAAE,4BAA4B,GAC5C,YAAY,CAAC,QAAQ,CAAC,CAyBxB;AAED;;;;;;;GAOG;AACH,wBAAgB,2BAA2B,IAAI,YAAY,CAAC,QAAQ,CAAC,CA2DpE;AAED;;;;;;;;GAQG;AACH,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,KAAK,EACZ,MAAM,EAAE,MAAM,GACb,YAAY,CAAC,QAAQ,CAAC,CAoBxB;AAED,qFAAqF;AACrF,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAGpD;AAED,qFAAqF;AACrF,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,KAAK,EACZ,QAAQ,EAAE,MAAM,GACf,YAAY,CAAC,QAAQ,CAAC,CAiBxB;AAED;;;;;;;GAOG;AACH,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,KAAK,EACZ,oBAAoB,EAAE,0BAA0B,EAChD,MAAM,EAAE,MAAM,GACb,YAAY,CAAC,QAAQ,CAAC,CAwFxB;AAED;;;;;GAKG;AACH,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,KAAK,EACZ,oBAAoB,EAAE,0BAA0B,EAChD,MAAM,EAAE,MAAM,GACb,YAAY,CAAC,QAAQ,CAAC,CAuCxB;AAED,mGAAmG;AACnG,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,EAAE,CAUrE;AAED;;;GAGG;AACH,wBAAgB,2BAA2B,IAAI,YAAY,CAAC,QAAQ,CAAC,CA8BpE;AAED;;;;GAIG;AACH,wBAAgB,oCAAoC,CAClD,SAAS,EAAE,8BAA8B,GAAG,SAAS,EACrD,MAAM,EAAE,MAAM,GACb,YAAY,CAAC,QAAQ,CAAC,CAqDxB;AAED,wEAAwE;AACxE,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,KAAK,EACZ,MAAM,EAAE,MAAM,GACb,YAAY,CAAC,QAAQ,CAAC,CA0BxB"}