@stigmer/server 3.15.3-dev.20260914121148 → 3.16.0

package/dist/domain/plugin/controller.js

@@ -0,0 +1,493 @@
+/**
+ * Plugin controller — the Plugin kind's command and query sides. A plugin
+ * is the unit of install: `push` reads an Agent Plugins archive and
+ * materialises skills, MCP servers, an agent and workflows in the
+ * organization as the installing caller (push.ts holds the steps and the
+ * install discipline); `delete` removes them through their own chains;
+ * `updateVisibility` moves the plugin and every member together;
+ * `listMembers` derives membership from the label on the children;
+ * `getByReference` and `listVersions` are the shared content-addressed
+ * version steps bound to the plugin's digest and manifest version.
+ *
+ * Wiring mirrors the skill controller's: the store and the archive store
+ * are required; the transfer lane is an OPTIONAL modelled state (absent,
+ * createArtifactUploadUrl answers FailedPrecondition and push accepts
+ * inline bytes only); the materializer is a lazy provider because the
+ * in-process clients it rides exist only after the routes this controller
+ * is registered in.
+ *
+ * Proven by __tests__/plugin.test.ts (composed-server round-trips) and
+ * plugin.conformance.test.ts (CONFORMANCE_TARGET=local, local-postgres).
+ */
+import { create, fromBinary } from "@bufbuild/protobuf";
+import { AgentSchema } from "@stigmer/protos/ai/stigmer/agentic/agent/v1/api_pb";
+import { PluginSchema } from "@stigmer/protos/ai/stigmer/agentic/plugin/v1/api_pb";
+import { PluginCommandController } from "@stigmer/protos/ai/stigmer/agentic/plugin/v1/command_pb";
+import { ListPluginMembersResponseSchema, ListPluginVersionsResponseSchema, PluginArtifactUploadUrlSchema, PluginMemberSchema, PluginVersionEntrySchema, PushPluginRequestSchema, } from "@stigmer/protos/ai/stigmer/agentic/plugin/v1/io_pb";
+import { PluginQueryController } from "@stigmer/protos/ai/stigmer/agentic/plugin/v1/query_pb";
+import { WorkflowSchema } from "@stigmer/protos/ai/stigmer/agentic/workflow/v1/api_pb";
+import { ApiResourceKind } from "@stigmer/protos/ai/stigmer/commons/apiresource/apiresourcekind/api_resource_kind_pb";
+import { IamPermission } from "@stigmer/protos/ai/stigmer/iam/v1/enum_pb";
+import { MAX_ZIP_SIZE } from "../../archive/limits.js";
+import { failedPreconditionError, internalError, invalidArgumentError, notFoundError, } from "../../pipeline/errors.js";
+import { apiResourceKindKey } from "../../pipeline/interceptors/apiresource.js";
+import { callerIdentityOf } from "../../pipeline/interceptors/auth.js";
+import { newPipeline } from "../../pipeline/pipeline.js";
+import { RequestContext } from "../../pipeline/request-context.js";
+import { newCleanupIamPoliciesStep, newRecordVisibilityBeforeUpdateStep, newUpdateVisibilityTuplesStep, } from "../../pipeline/steps/authorization-tuples.js";
+import { authorizeResolvedResource, newAuthorizeStep, } from "../../pipeline/steps/authorize.js";
+import { setAuditFieldsForUpdate } from "../../pipeline/steps/defaults.js";
+import { newDeleteResourceStep, newExtractResourceIdStep, newLoadExistingForDeleteStep, } from "../../pipeline/steps/delete.js";
+import { newDeleteSearchIndexStep } from "../../pipeline/steps/index-search.js";
+import { EXISTING_RESOURCE_KEY } from "../../pipeline/steps/load-existing.js";
+import { TARGET_RESOURCE_KEY, newLoadTargetStep, } from "../../pipeline/steps/load-target.js";
+import { collectSpecReferences } from "../../pipeline/steps/references.js";
+import { newResolveArtifactSourceStep } from "../../pipeline/steps/resolve-artifact-source.js";
+import { newValidateProtoStep } from "../../pipeline/steps/validation.js";
+import { newValidateVisibilityUpdateStep } from "../../pipeline/steps/validate-visibility.js";
+import { newDeleteVersionArchivesStep } from "../../pipeline/steps/version-archive.js";
+import { LIST_VERSIONS_RESOURCE_ID_KEY, LIST_VERSIONS_RESPONSE_KEY, newLoadAndMapVersionsStep, newLoadByReferenceWithVersionStep, newResolveBySlugForVersionsStep, } from "../../pipeline/steps/version-history.js";
+import { newAuthorizeVisibilityTransitionStep } from "../../pipeline/steps/visibility-gates.js";
+import { metadataOf } from "../../pipeline/steps/shapes.js";
+import { uploadUrl } from "../skill/transfer/handler.js";
+import { TRANSFER_LANE_NOT_CONFIGURED } from "./constants.js";
+import { findMembers } from "./members.js";
+import { PLUGIN_CONVERGED_KEY, PLUGIN_KEY, EXISTING_PLUGIN_KEY, newArchiveCurrentPluginStep, newBuildInitialPluginStep, newCheckAndStoreArtifactStep, newFinalizePluginStatusStep, newFindExistingPluginBySlugStep, newGateAndHashArchiveStep, newGeneratePluginIdIfNeededStep, newGuardPluginVisibilityStep, newIndexPluginSearchStep, newMaterializeMembersStep, newParseOverlayDocumentsStep, newPlanMaterializationStep, newPluginPushAuthorizationTuplesStep, newPopulatePluginFieldsStep, newReadPluginPackageStep, newRemoveDroppedMembersStep, newResolveConvergenceStep, newSanitizePluginMetadataStep, newStorePluginStep, orderForDeletion, pluginLiveTag, } from "./push.js";
+import { pluginSearchExtractor } from "./search-extractor.js";
+/** Registers both plugin services on the router (routes stage). */
+export function registerPluginServices(router, deps) {
+    router.service(PluginCommandController, {
+        push: (req, ctx) => push(deps, req, ctx),
+        createArtifactUploadUrl: (req, ctx) => createArtifactUploadUrl(deps, req, ctx),
+        updateVisibility: (input, ctx) => updateVisibility(deps, input, ctx),
+        delete: (id, ctx) => deletePlugin(deps, id, ctx),
+    });
+    router.service(PluginQueryController, {
+        get: (id, ctx) => get(deps, id, ctx),
+        getByReference: (ref, ctx) => getByReference(deps, ref, ctx),
+        listMembers: (id, ctx) => listMembers(deps, id, ctx),
+        listVersions: (req, ctx) => listVersions(deps, req, ctx),
+    });
+}
+function kindOf(ctx) {
+    return ctx.values.get(apiResourceKindKey);
+}
+// ─── push ────────────────────────────────────────────────────────────────
+/**
+ * Push — the plan chain, then the install chain unless the plan found the
+ * stored plugin already converged (push.ts holds the shape). Returns the
+ * head from context: the pipeline's message type is the request.
+ */
+async function push(deps, req, ctx) {
+    const reqCtx = new RequestContext(PushPluginRequestSchema, req, callerIdentityOf(ctx), kindOf(ctx));
+    await newPipeline("plugin-push-plan", deps.logger)
+        .addStep(newAuthorizeStep(PluginCommandController.method.push, deps.authorizer))
+        .addStep(newValidateProtoStep())
+        .addStep(newResolveArtifactSourceStep(deps.transferLane?.slots, {
+        source: (input) => ({
+            artifact: input.artifact,
+            artifactUploadRef: input.artifactUploadRef,
+        }),
+        laneNotConfigured: TRANSFER_LANE_NOT_CONFIGURED,
+    }))
+        .addStep(newGateAndHashArchiveStep())
+        .addStep(newReadPluginPackageStep())
+        .addStep(newBuildInitialPluginStep())
+        .addStep(newFindExistingPluginBySlugStep(deps.store))
+        .addStep(newGeneratePluginIdIfNeededStep())
+        .addStep(newParseOverlayDocumentsStep())
+        .addStep(newSanitizePluginMetadataStep(deps.authorizer))
+        .addStep(newPlanMaterializationStep(deps.store, deps.authorizer))
+        .addStep(newGuardPluginVisibilityStep(deps.authorizer))
+        .addStep(newResolveConvergenceStep())
+        .build()
+        .execute(reqCtx);
+    if (reqCtx.get(PLUGIN_CONVERGED_KEY) === true) {
+        return reqCtx.get(EXISTING_PLUGIN_KEY);
+    }
+    await newPipeline("plugin-push-install", deps.logger)
+        .addStep(newCheckAndStoreArtifactStep(deps.artifactStorage))
+        .addStep(newPopulatePluginFieldsStep())
+        .addStep(newArchiveCurrentPluginStep(deps.store, deps.logger))
+        .addStep(newStorePluginStep(deps.store, "StorePlugin"))
+        .addStep(newMaterializeMembersStep(deps.store, deps.materializerProvider, deps.logger))
+        .addStep(newRemoveDroppedMembersStep(deps.store, deps.materializerProvider, deps.logger))
+        .addStep(newFinalizePluginStatusStep())
+        .addStep(newStorePluginStep(deps.store, "StorePluginReady"))
+        .addStep(newPluginPushAuthorizationTuplesStep(deps.authorizationLifecycle, deps.logger))
+        .addStep(newIndexPluginSearchStep(deps.store, deps.logger))
+        .build()
+        .execute(reqCtx);
+    return reqCtx.get(PLUGIN_KEY);
+}
+// ─── createArtifactUploadUrl ─────────────────────────────────────────────
+/**
+ * Mints a short-lived, single-use upload URL over the shared slots; an
+ * over-limit declaration is refused with the limit BEFORE any bytes move.
+ */
+async function createArtifactUploadUrl(deps, req, ctx) {
+    const lane = deps.transferLane;
+    if (lane === undefined) {
+        throw failedPreconditionError(TRANSFER_LANE_NOT_CONFIGURED);
+    }
+    const reqCtx = new RequestContext(PluginCommandController.method.createArtifactUploadUrl.input, req, callerIdentityOf(ctx), kindOf(ctx));
+    await newPipeline("plugin-create-artifact-upload-url", deps.logger)
+        .addStep(newAuthorizeStep(PluginCommandController.method.createArtifactUploadUrl, deps.authorizer))
+        .addStep(newValidateProtoStep())
+        .build()
+        .execute(reqCtx);
+    if (req.sizeBytes > BigInt(MAX_ZIP_SIZE)) {
+        throw invalidArgumentError(`plugin archive size ${req.sizeBytes} bytes exceeds the ${MAX_ZIP_SIZE}-byte (100MB) archive limit`);
+    }
+    let minted;
+    try {
+        minted = lane.slots.mint(Number(req.sizeBytes));
+    }
+    catch (error) {
+        throw internalError(error, "failed to mint upload reference");
+    }
+    return create(PluginArtifactUploadUrlSchema, {
+        url: uploadUrl(lane.baseUrl, minted.ref),
+        artifactUploadRef: minted.ref,
+        ttlSeconds: Math.trunc(minted.ttlMs / 1000),
+    });
+}
+// ─── updateVisibility ────────────────────────────────────────────────────
+const UPDATE_VISIBILITY_PLUGIN_KEY = "updateVisibilityPlugin";
+/**
+ * A targeted metadata update on the plugin, then the same level on every
+ * member through its kind's own updateVisibility door, in-process as the
+ * caller. Load runs before level validation so NOT_FOUND wins.
+ */
+async function updateVisibility(deps, input, ctx) {
+    const reqCtx = new RequestContext(PluginCommandController.method.updateVisibility.input, input, callerIdentityOf(ctx), kindOf(ctx));
+    await newPipeline("plugin-update-visibility", deps.logger)
+        .addStep(newAuthorizeStep(PluginCommandController.method.updateVisibility, deps.authorizer))
+        .addStep(newValidateProtoStep())
+        .addStep(newLoadPluginByIdStep(deps.store, UPDATE_VISIBILITY_PLUGIN_KEY))
+        .addStep(newRecordVisibilityBeforeUpdateStep(UPDATE_VISIBILITY_PLUGIN_KEY))
+        .addStep(newValidateVisibilityUpdateStep())
+        .addStep(newAuthorizeVisibilityTransitionStep(UPDATE_VISIBILITY_PLUGIN_KEY, deps.authorizer))
+        .addStep(newSetPluginVisibilityStep())
+        .addStep(newPersistPluginStep(deps.store, UPDATE_VISIBILITY_PLUGIN_KEY, "PersistPluginForVisibilityUpdate"))
+        .addStep(newUpdateVisibilityTuplesStep(deps.authorizationLifecycle, UPDATE_VISIBILITY_PLUGIN_KEY))
+        .addStep(newFanOutVisibilityToMembersStep(deps.store, deps.materializerProvider))
+        .addStep(newIndexPluginStep(deps.store, deps.logger, UPDATE_VISIBILITY_PLUGIN_KEY, "IndexPluginAfterVisibilityUpdate"))
+        .build()
+        .execute(reqCtx);
+    return reqCtx.get(UPDATE_VISIBILITY_PLUGIN_KEY);
+}
+/** Loads the plugin by resource_id; ANY load failure → NotFound. */
+function newLoadPluginByIdStep(store, key) {
+    return {
+        name: "LoadPluginForVisibilityUpdate",
+        async execute(ctx) {
+            let plugin;
+            try {
+                plugin = await store.getResource(ctx.apiResourceKind, ctx.input.resourceId, PluginSchema);
+            }
+            catch {
+                throw notFoundError("plugin", ctx.input.resourceId);
+            }
+            ctx.set(key, plugin);
+        },
+    };
+}
+/** Sets metadata.visibility and stamps the StatusAudit slot (#540). */
+function newSetPluginVisibilityStep() {
+    return {
+        name: "SetPluginVisibility",
+        execute(ctx) {
+            const plugin = ctx.get(UPDATE_VISIBILITY_PLUGIN_KEY);
+            if (plugin.metadata !== undefined) {
+                plugin.metadata.visibility = ctx.input.visibility;
+            }
+            setAuditFieldsForUpdate(PluginSchema, plugin, "status_audit", ctx.callerIdentity);
+        },
+    };
+}
+/** The plugin's level, applied to every member through its own door. */
+function newFanOutVisibilityToMembersStep(store, materializerProvider) {
+    return {
+        name: "FanOutVisibilityToMembers",
+        async execute(ctx) {
+            const plugin = ctx.get(UPDATE_VISIBILITY_PLUGIN_KEY);
+            const members = await membersOf(store, plugin);
+            const materializer = materializerProvider();
+            for (const member of members) {
+                await materializer.updateVisibility(member.kind, member.id, ctx.input.visibility, ctx.callerIdentity);
+            }
+        },
+    };
+}
+const DELETE_MEMBERS_KEY = "deletePluginMembers";
+/**
+ * Delete — refuses while a resource outside the plugin references a
+ * member, then removes members through their own chains (agent first,
+ * then the rest in reverse materialisation order), then the head.
+ * Children first so a failure leaves a plugin whose remaining members are
+ * still listed; a retry converges. Returns the deleted plugin.
+ */
+async function deletePlugin(deps, id, ctx) {
+    const reqCtx = new RequestContext(PluginCommandController.method.delete.input, id, callerIdentityOf(ctx), kindOf(ctx));
+    await newPipeline("plugin-delete", deps.logger)
+        .addStep(newAuthorizeStep(PluginCommandController.method.delete, deps.authorizer))
+        .addStep(newValidateProtoStep())
+        .addStep(newExtractResourceIdStep())
+        .addStep(newLoadExistingForDeleteStep(deps.store, PluginSchema))
+        .addStep(newGuardMembersUnreferencedStep(deps.store))
+        .addStep(newCascadeDeleteMembersStep(deps.materializerProvider, deps.logger))
+        .addStep(newDeleteVersionArchivesStep(deps.store, deps.logger, {
+        stepName: "DeletePluginArchives",
+        noun: "plugin",
+    }))
+        .addStep(newDeleteResourceStep(deps.store))
+        .addStep(newCleanupIamPoliciesStep(deps.authorizationLifecycle, deps.logger))
+        .addStep(newDeleteSearchIndexStep(deps.store, deps.logger))
+        .build()
+        .execute(reqCtx);
+    const deleted = reqCtx.get(EXISTING_RESOURCE_KEY);
+    if (deleted === undefined) {
+        throw internalError(new Error("deleted plugin not found in context"), "deleted plugin not found in context");
+    }
+    return deleted;
+}
+/**
+ * GuardMembersUnreferenced — a user's own agent or workflow that
+ * references a member blocks the uninstall, naming the referrers: a
+ * dangling `skill_ref` found at the next session is the worse outcome.
+ * Members referencing each other are the plugin's business and pass.
+ */
+function newGuardMembersUnreferencedStep(store) {
+    return {
+        name: "GuardMembersUnreferenced",
+        async execute(ctx) {
+            const plugin = ctx.get(EXISTING_RESOURCE_KEY);
+            const members = await membersOf(store, plugin);
+            ctx.set(DELETE_MEMBERS_KEY, members);
+            if (members.length === 0) {
+                return;
+            }
+            const org = plugin.metadata?.org ?? "";
+            const memberKeys = new Set(members.map((member) => `${member.kind}:${member.slug}`));
+            const memberIds = new Set(members.map((member) => member.id));
+            const referrers = [];
+            for (const { kind, schema, noun } of [
+                { kind: ApiResourceKind.agent, schema: AgentSchema, noun: "agent" },
+                {
+                    kind: ApiResourceKind.workflow,
+                    schema: WorkflowSchema,
+                    noun: "workflow",
+                },
+            ]) {
+                let rows;
+                try {
+                    rows = await store.listResources(kind);
+                }
+                catch (error) {
+                    throw internalError(error, `failed to list ${noun}s for the plugin reference check`);
+                }
+                for (const raw of rows) {
+                    const resource = fromBinary(schema, raw);
+                    const metadata = metadataOf(resource);
+                    if (metadata === undefined ||
+                        metadata.org !== org ||
+                        memberIds.has(metadata.id)) {
+                        continue;
+                    }
+                    const hit = collectSpecReferences(schema, resource).some((ref) => (ref.org === "" || ref.org === org) &&
+                        memberKeys.has(`${ref.kind}:${ref.slug}`));
+                    if (hit) {
+                        referrers.push(`${noun} '${metadata.slug}'`);
+                    }
+                }
+            }
+            if (referrers.length > 0) {
+                throw failedPreconditionError(`plugin '${plugin.metadata?.slug ?? ""}' is still used by ${referrers.sort().join(", ")}; ` +
+                    "detach them from the plugin's skills and servers first");
+            }
+        },
+    };
+}
+/** CascadeDeleteMembers — every member through its own delete chain, agent first. */
+function newCascadeDeleteMembersStep(materializerProvider, logger) {
+    return {
+        name: "CascadeDeleteMembers",
+        async execute(ctx) {
+            const plugin = ctx.get(EXISTING_RESOURCE_KEY);
+            const members = ctx.get(DELETE_MEMBERS_KEY);
+            const materializer = materializerProvider();
+            for (const member of orderForDeletion(members)) {
+                await materializer.deleteByKind(member.kind, member.id, ctx.callerIdentity);
+            }
+            if (members.length > 0) {
+                logger.info("Deleted plugin members", {
+                    pluginId: plugin.metadata?.id ?? "",
+                    members: members.map((member) => `${ApiResourceKind[member.kind]}:${member.slug}`),
+                });
+            }
+        },
+    };
+}
+// ─── queries ─────────────────────────────────────────────────────────────
+async function get(deps, id, ctx) {
+    const reqCtx = new RequestContext(PluginQueryController.method.get.input, id, callerIdentityOf(ctx), kindOf(ctx));
+    await newPipeline("plugin-get", deps.logger)
+        .addStep(newAuthorizeStep(PluginQueryController.method.get, deps.authorizer))
+        .addStep(newValidateProtoStep())
+        .addStep(newLoadTargetStep(deps.store, PluginSchema))
+        .build()
+        .execute(reqCtx);
+    return reqCtx.get(TARGET_RESOURCE_KEY);
+}
+/** Where a plugin keeps its hash and its tag, and how its history renders. */
+const pluginVersionBinding = {
+    kind: ApiResourceKind.plugin,
+    schema: PluginSchema,
+    noun: "plugin",
+    headHashOf: (plugin) => plugin.status?.digest ?? "",
+    liveTagOf: pluginLiveTag,
+    input: (req) => req,
+    mapEntry: (plugin, isCurrent, tag) => {
+        const entry = create(PluginVersionEntrySchema, { isCurrent, tag });
+        if (plugin.status !== undefined) {
+            entry.digest = plugin.status.digest;
+            entry.artifactStorageKey = plugin.status.artifactStorageKey;
+            const specAudit = plugin.status.audit?.specAudit;
+            if (specAudit !== undefined) {
+                entry.pushedAt = specAudit.updatedAt ?? specAudit.createdAt;
+                entry.pushedBy = specAudit.updatedBy ?? specAudit.createdBy;
+            }
+        }
+        if (plugin.metadata?.version !== undefined) {
+            entry.message = plugin.metadata.version.message;
+        }
+        return entry;
+    },
+    response: (versions, nextPageToken, totalCount) => create(ListPluginVersionsResponseSchema, {
+        versions,
+        nextPageToken,
+        totalCount,
+    }),
+};
+/**
+ * GetByReference — slug + org with the version ladder, then can_view on
+ * the RESOLVED plugin (the input carries no id, so the annotation skips
+ * and the handler authorizes mid-chain, the ListVersions pattern).
+ */
+async function getByReference(deps, ref, ctx) {
+    const reqCtx = new RequestContext(PluginQueryController.method.getByReference.input, ref, callerIdentityOf(ctx), kindOf(ctx));
+    await newPipeline("plugin-get-by-reference", deps.logger)
+        .addStep(newAuthorizeStep(PluginQueryController.method.getByReference, deps.authorizer))
+        .addStep(newValidateProtoStep())
+        .addStep(newLoadByReferenceWithVersionStep(deps.store, pluginVersionBinding, "LoadPluginByReference"))
+        .addStep({
+        name: "AuthorizeResolvedPlugin",
+        async execute(stepCtx) {
+            const resolved = stepCtx.get(TARGET_RESOURCE_KEY);
+            await authorizeResolvedResource(deps.authorizer, stepCtx.callerIdentity, {
+                permission: IamPermission.can_view,
+                resourceKind: ApiResourceKind.plugin,
+                resourceId: resolved.metadata?.id ?? "",
+            }, "unauthorized to get plugin");
+        },
+    })
+        .build()
+        .execute(reqCtx);
+    return reqCtx.get(TARGET_RESOURCE_KEY);
+}
+const LIST_MEMBERS_RESPONSE_KEY = "listMembersResponse";
+/** ListMembers — the four label scans, in materialisation order. */
+async function listMembers(deps, id, ctx) {
+    const reqCtx = new RequestContext(PluginQueryController.method.listMembers.input, id, callerIdentityOf(ctx), kindOf(ctx));
+    await newPipeline("plugin-list-members", deps.logger)
+        .addStep(newAuthorizeStep(PluginQueryController.method.listMembers, deps.authorizer))
+        .addStep(newValidateProtoStep())
+        .addStep(newLoadTargetStep(deps.store, PluginSchema))
+        .addStep({
+        name: "ListPluginMembers",
+        async execute(stepCtx) {
+            const plugin = stepCtx.get(TARGET_RESOURCE_KEY);
+            const members = await membersOf(deps.store, plugin);
+            stepCtx.set(LIST_MEMBERS_RESPONSE_KEY, create(ListPluginMembersResponseSchema, {
+                members: members.map((member) => create(PluginMemberSchema, {
+                    kind: member.kind,
+                    id: member.id,
+                    slug: member.slug,
+                    name: member.name,
+                })),
+            }));
+        },
+    })
+        .build()
+        .execute(reqCtx);
+    return reqCtx.get(LIST_MEMBERS_RESPONSE_KEY);
+}
+/** ListVersions — resolve by slug, authorize the resolved plugin, map audit records, paginate. */
+async function listVersions(deps, req, ctx) {
+    const reqCtx = new RequestContext(PluginQueryController.method.listVersions.input, req, callerIdentityOf(ctx), kindOf(ctx));
+    await newPipeline("plugin-list-versions", deps.logger)
+        .addStep(newAuthorizeStep(PluginQueryController.method.listVersions, deps.authorizer))
+        .addStep(newValidateProtoStep())
+        .addStep(newResolveBySlugForVersionsStep(deps.store, pluginVersionBinding, "ResolvePluginBySlug"))
+        .addStep({
+        name: "AuthorizeResolvedPlugin",
+        async execute(stepCtx) {
+            await authorizeResolvedResource(deps.authorizer, stepCtx.callerIdentity, {
+                permission: IamPermission.can_view,
+                resourceKind: ApiResourceKind.plugin,
+                resourceId: stepCtx.get(LIST_VERSIONS_RESOURCE_ID_KEY),
+            }, "unauthorized to view plugin version history");
+        },
+    })
+        .addStep(newLoadAndMapVersionsStep(deps.store, pluginVersionBinding, "LoadAndMapVersions"))
+        .build()
+        .execute(reqCtx);
+    return reqCtx.get(LIST_VERSIONS_RESPONSE_KEY);
+}
+// ─── shared helpers ──────────────────────────────────────────────────────
+async function membersOf(store, plugin) {
+    try {
+        return await findMembers(store, plugin.metadata?.id ?? "", plugin.metadata?.org ?? "");
+    }
+    catch (error) {
+        throw internalError(error, "failed to list plugin members");
+    }
+}
+function newPersistPluginStep(store, key, stepName) {
+    return {
+        name: stepName,
+        async execute(ctx) {
+            const plugin = ctx.get(key);
+            try {
+                await store.saveResource(ctx.apiResourceKind, plugin.metadata?.id ?? "", PluginSchema, plugin);
+            }
+            catch (error) {
+                throw internalError(error, "failed to save plugin");
+            }
+        },
+    };
+}
+/** Re-indexes after a change (visibility is indexed); best-effort. */
+function newIndexPluginStep(store, logger, key, stepName) {
+    return {
+        name: stepName,
+        async execute(ctx) {
+            const plugin = ctx.get(key);
+            const entry = pluginSearchExtractor.getSearchIndexEntry(plugin);
+            if (entry === undefined) {
+                return;
+            }
+            try {
+                await store.upsertSearchIndex(ctx.apiResourceKind, plugin.metadata?.id ?? "", entry);
+            }
+            catch (error) {
+                logger.warn(`${stepName}: failed (best-effort)`, {
+                    id: plugin.metadata?.id ?? "",
+                    error: error instanceof Error ? error.message : String(error),
+                });
+            }
+        },
+    };
+}
+//# sourceMappingURL=controller.js.map

package/dist/domain/plugin/controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"controller.js","sourceRoot":"","sources":["../../../src/domain/plugin/controller.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAGxD,OAAO,EAAE,WAAW,EAAE,MAAM,oDAAoD,CAAC;AACjF,OAAO,EAAE,YAAY,EAAE,MAAM,qDAAqD,CAAC;AAEnF,OAAO,EAAE,uBAAuB,EAAE,MAAM,yDAAyD,CAAC;AAClG,OAAO,EACL,+BAA+B,EAC/B,gCAAgC,EAChC,6BAA6B,EAC7B,kBAAkB,EAClB,wBAAwB,EACxB,uBAAuB,GACxB,MAAM,oDAAoD,CAAC;AAW5D,OAAO,EAAE,qBAAqB,EAAE,MAAM,uDAAuD,CAAC;AAC9F,OAAO,EAAE,cAAc,EAAE,MAAM,uDAAuD,CAAC;AACvF,OAAO,EAAE,eAAe,EAAE,MAAM,qFAAqF,CAAC;AAKtH,OAAO,EAAE,aAAa,EAAE,MAAM,2CAA2C,CAAC;AAG1E,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAIvD,OAAO,EACL,uBAAuB,EACvB,aAAa,EACb,oBAAoB,EACpB,aAAa,GACd,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,kBAAkB,EAAE,MAAM,4CAA4C,CAAC;AAChF,OAAO,EAAE,gBAAgB,EAAE,MAAM,qCAAqC,CAAC;AACvE,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAEzD,OAAO,EAAE,cAAc,EAAE,MAAM,mCAAmC,CAAC;AACnE,OAAO,EACL,yBAAyB,EACzB,mCAAmC,EACnC,6BAA6B,GAC9B,MAAM,8CAA8C,CAAC;AACtD,OAAO,EACL,yBAAyB,EACzB,gBAAgB,GACjB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAC3E,OAAO,EACL,qBAAqB,EACrB,wBAAwB,EACxB,4BAA4B,GAC7B,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,wBAAwB,EAAE,MAAM,sCAAsC,CAAC;AAChF,OAAO,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAC;AAC9E,OAAO,EACL,mBAAmB,EACnB,iBAAiB,GAClB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EAAE,qBAAqB,EAAE,MAAM,oCAAoC,CAAC;AAC3E,OAAO,EAAE,4BAA4B,EAAE,MAAM,iDAAiD,CAAC;AAC/F,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,EAAE,+BAA+B,EAAE,MAAM,6CAA6C,CAAC;AAC9F,OAAO,EAAE,4BAA4B,EAAE,MAAM,yCAAyC,CAAC;AACvF,OAAO,EACL,6BAA6B,EAC7B,0BAA0B,EAC1B,yBAAyB,EACzB,iCAAiC,EACjC,+BAA+B,GAChC,MAAM,yCAAyC,CAAC;AAEjD,OAAO,EAAE,oCAAoC,EAAE,MAAM,0CAA0C,CAAC;AAChG,OAAO,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAC;AAE5D,OAAO,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAC;AAEzD,OAAO,EAAE,4BAA4B,EAAE,MAAM,gBAAgB,CAAC;AAE9D,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAE3C,OAAO,EACL,oBAAoB,EACpB,UAAU,EACV,mBAAmB,EACnB,2BAA2B,EAC3B,yBAAyB,EACzB,4BAA4B,EAC5B,2BAA2B,EAC3B,+BAA+B,EAC/B,yBAAyB,EACzB,+BAA+B,EAC/B,4BAA4B,EAC5B,wBAAwB,EACxB,yBAAyB,EACzB,4BAA4B,EAC5B,0BAA0B,EAC1B,oCAAoC,EACpC,2BAA2B,EAC3B,wBAAwB,EACxB,2BAA2B,EAC3B,yBAAyB,EACzB,6BAA6B,EAC7B,kBAAkB,EAClB,gBAAgB,EAChB,aAAa,GACd,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAkB9D,mEAAmE;AACnE,MAAM,UAAU,sBAAsB,CACpC,MAAqB,EACrB,IAA0B;IAE1B,MAAM,CAAC,OAAO,CAAC,uBAAuB,EAAE;QACtC,IAAI,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC;QACxC,uBAAuB,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CACpC,uBAAuB,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC;QACzC,gBAAgB,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,gBAAgB,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC;QACpE,MAAM,EAAE,CAAC,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,EAAE,GAAG,CAAC;KACjD,CAAC,CAAC;IACH,MAAM,CAAC,OAAO,CAAC,qBAAqB,EAAE;QACpC,GAAG,EAAE,CAAC,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,EAAE,GAAG,CAAC;QACpC,cAAc,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC;QAC5D,WAAW,EAAE,CAAC,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,EAAE,EAAE,GAAG,CAAC;QACpD,YAAY,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC;KACzD,CAAC,CAAC;AACL,CAAC;AAED,SAAS,MAAM,CAAC,GAAmB;IACjC,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;AAC5C,CAAC;AAED,4EAA4E;AAE5E;;;;GAIG;AACH,KAAK,UAAU,IAAI,CACjB,IAA0B,EAC1B,GAAsB,EACtB,GAAmB;IAEnB,MAAM,MAAM,GAAG,IAAI,cAAc,CAC/B,uBAAuB,EACvB,GAAG,EACH,gBAAgB,CAAC,GAAG,CAAC,EACrB,MAAM,CAAC,GAAG,CAAC,CACZ,CAAC;IACF,MAAM,WAAW,CACf,kBAAkB,EAClB,IAAI,CAAC,MAAM,CACZ;SACE,OAAO,CACN,gBAAgB,CAAC,uBAAuB,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,CACvE;SACA,OAAO,CAAC,oBAAoB,EAAE,CAAC;SAC/B,OAAO,CACN,4BAA4B,CAC1B,IAAI,CAAC,YAAY,EAAE,KAAK,EACxB;QACE,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YAClB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;SAC3C,CAAC;QACF,iBAAiB,EAAE,4BAA4B;KAChD,CACF,CACF;SACA,OAAO,CAAC,yBAAyB,EAAE,CAAC;SACpC,OAAO,CAAC,wBAAwB,EAAE,CAAC;SACnC,OAAO,CAAC,yBAAyB,EAAE,CAAC;SACpC,OAAO,CAAC,+BAA+B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;SACpD,OAAO,CAAC,+BAA+B,EAAE,CAAC;SAC1C,OAAO,CAAC,4BAA4B,EAAE,CAAC;SACvC,OAAO,CAAC,6BAA6B,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;SACvD,OAAO,CAAC,0BAA0B,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;SAChE,OAAO,CAAC,4BAA4B,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;SACtD,OAAO,CAAC,yBAAyB,EAAE,CAAC;SACpC,KAAK,EAAE;SACP,OAAO,CAAC,MAAM,CAAC,CAAC;IAEnB,IAAI,MAAM,CAAC,GAAG,CAAC,oBAAoB,CAAC,KAAK,IAAI,EAAE,CAAC;QAC9C,OAAO,MAAM,CAAC,GAAG,CAAC,mBAAmB,CAAW,CAAC;IACnD,CAAC;IAED,MAAM,WAAW,CACf,qBAAqB,EACrB,IAAI,CAAC,MAAM,CACZ;SACE,OAAO,CAAC,4BAA4B,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;SAC3D,OAAO,CAAC,2BAA2B,EAAE,CAAC;SACtC,OAAO,CAAC,2BAA2B,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;SAC7D,OAAO,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;SACtD,OAAO,CACN,yBAAyB,CACvB,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,oBAAoB,EACzB,IAAI,CAAC,MAAM,CACZ,CACF;SACA,OAAO,CACN,2BAA2B,CACzB,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,oBAAoB,EACzB,IAAI,CAAC,MAAM,CACZ,CACF;SACA,OAAO,CAAC,2BAA2B,EAAE,CAAC;SACtC,OAAO,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,EAAE,kBAAkB,CAAC,CAAC;SAC3D,OAAO,CACN,oCAAoC,CAClC,IAAI,CAAC,sBAAsB,EAC3B,IAAI,CAAC,MAAM,CACZ,CACF;SACA,OAAO,CAAC,wBAAwB,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;SAC1D,KAAK,EAAE;SACP,OAAO,CAAC,MAAM,CAAC,CAAC;IACnB,OAAO,MAAM,CAAC,GAAG,CAAC,UAAU,CAAW,CAAC;AAC1C,CAAC;AAED,4EAA4E;AAE5E;;;GAGG;AACH,KAAK,UAAU,uBAAuB,CACpC,IAA0B,EAC1B,GAAyC,EACzC,GAAmB;IAEnB,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC;IAC/B,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,MAAM,uBAAuB,CAAC,4BAA4B,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,cAAc,CAC/B,uBAAuB,CAAC,MAAM,CAAC,uBAAuB,CAAC,KAAK,EAC5D,GAAG,EACH,gBAAgB,CAAC,GAAG,CAAC,EACrB,MAAM,CAAC,GAAG,CAAC,CACZ,CAAC;IACF,MAAM,WAAW,CAEf,mCAAmC,EAAE,IAAI,CAAC,MAAM,CAAC;SAChD,OAAO,CACN,gBAAgB,CACd,uBAAuB,CAAC,MAAM,CAAC,uBAAuB,EACtD,IAAI,CAAC,UAAU,CAChB,CACF;SACA,OAAO,CAAC,oBAAoB,EAAE,CAAC;SAC/B,KAAK,EAAE;SACP,OAAO,CAAC,MAAM,CAAC,CAAC;IAEnB,IAAI,GAAG,CAAC,SAAS,GAAG,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;QACzC,MAAM,oBAAoB,CACxB,uBAAuB,GAAG,CAAC,SAAS,sBAAsB,YAAY,6BAA6B,CACpG,CAAC;IACJ,CAAC;IACD,IAAI,MAAsC,CAAC;IAC3C,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;IAClD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,aAAa,CAAC,KAAK,EAAE,iCAAiC,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,MAAM,CAAC,6BAA6B,EAAE;QAC3C,GAAG,EAAE,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC;QACxC,iBAAiB,EAAE,MAAM,CAAC,GAAG;QAC7B,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,GAAG,IAAI,CAAC;KAC5C,CAAC,CAAC;AACL,CAAC;AAED,4EAA4E;AAE5E,MAAM,4BAA4B,GAAG,wBAAwB,CAAC;AAI9D;;;;GAIG;AACH,KAAK,UAAU,gBAAgB,CAC7B,IAA0B,EAC1B,KAA4B,EAC5B,GAAmB;IAEnB,MAAM,MAAM,GAAG,IAAI,cAAc,CAC/B,uBAAuB,CAAC,MAAM,CAAC,gBAAgB,CAAC,KAAK,EACrD,KAAK,EACL,gBAAgB,CAAC,GAAG,CAAC,EACrB,MAAM,CAAC,GAAG,CAAC,CACZ,CAAC;IACF,MAAM,WAAW,CACf,0BAA0B,EAC1B,IAAI,CAAC,MAAM,CACZ;SACE,OAAO,CACN,gBAAgB,CACd,uBAAuB,CAAC,MAAM,CAAC,gBAAgB,EAC/C,IAAI,CAAC,UAAU,CAChB,CACF;SACA,OAAO,CAAC,oBAAoB,EAAE,CAAC;SAC/B,OAAO,CAAC,qBAAqB,CAAC,IAAI,CAAC,KAAK,EAAE,4BAA4B,CAAC,CAAC;SACxE,OAAO,CAAC,mCAAmC,CAAC,4BAA4B,CAAC,CAAC;SAC1E,OAAO,CAAC,+BAA+B,EAAE,CAAC;SAC1C,OAAO,CACN,oCAAoC,CAClC,4BAA4B,EAC5B,IAAI,CAAC,UAAU,CAChB,CACF;SACA,OAAO,CAAC,0BAA0B,EAAE,CAAC;SACrC,OAAO,CACN,oBAAoB,CAClB,IAAI,CAAC,KAAK,EACV,4BAA4B,EAC5B,kCAAkC,CACnC,CACF;SACA,OAAO,CACN,6BAA6B,CAC3B,IAAI,CAAC,sBAAsB,EAC3B,4BAA4B,CAC7B,CACF;SACA,OAAO,CACN,gCAAgC,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,oBAAoB,CAAC,CACxE;SACA,OAAO,CACN,kBAAkB,CAChB,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,MAAM,EACX,4BAA4B,EAC5B,kCAAkC,CACnC,CACF;SACA,KAAK,EAAE;SACP,OAAO,CAAC,MAAM,CAAC,CAAC;IACnB,OAAO,MAAM,CAAC,GAAG,CAAC,4BAA4B,CAAW,CAAC;AAC5D,CAAC;AAED,oEAAoE;AACpE,SAAS,qBAAqB,CAC5B,KAAY,EACZ,GAAW;IAEX,OAAO;QACL,IAAI,EAAE,+BAA+B;QACrC,KAAK,CAAC,OAAO,CAAC,GAAyC;YACrD,IAAI,MAAc,CAAC;YACnB,IAAI,CAAC;gBACH,MAAM,GAAG,MAAM,KAAK,CAAC,WAAW,CAC9B,GAAG,CAAC,eAAe,EACnB,GAAG,CAAC,KAAK,CAAC,UAAU,EACpB,YAAY,CACb,CAAC;YACJ,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,aAAa,CAAC,QAAQ,EAAE,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YACtD,CAAC;YACD,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACvB,CAAC;KACF,CAAC;AACJ,CAAC;AAED,uEAAuE;AACvE,SAAS,0BAA0B;IACjC,OAAO;QACL,IAAI,EAAE,qBAAqB;QAC3B,OAAO,CAAC,GAAyC;YAC/C,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,4BAA4B,CAAW,CAAC;YAC/D,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAClC,MAAM,CAAC,QAAQ,CAAC,UAAU,GAAG,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC;YACpD,CAAC;YACD,uBAAuB,CACrB,YAAY,EACZ,MAAM,EACN,cAAc,EACd,GAAG,CAAC,cAAc,CACnB,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED,wEAAwE;AACxE,SAAS,gCAAgC,CACvC,KAAY,EACZ,oBAAgD;IAEhD,OAAO;QACL,IAAI,EAAE,2BAA2B;QACjC,KAAK,CAAC,OAAO,CAAC,GAAyC;YACrD,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,4BAA4B,CAAW,CAAC;YAC/D,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YAC/C,MAAM,YAAY,GAAG,oBAAoB,EAAE,CAAC;YAC5C,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;gBAC7B,MAAM,YAAY,CAAC,gBAAgB,CACjC,MAAM,CAAC,IAAI,EACX,MAAM,CAAC,EAAE,EACT,GAAG,CAAC,KAAK,CAAC,UAAU,EACpB,GAAG,CAAC,cAAc,CACnB,CAAC;YACJ,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAKD,MAAM,kBAAkB,GAAG,qBAAqB,CAAC;AAEjD;;;;;;GAMG;AACH,KAAK,UAAU,YAAY,CACzB,IAA0B,EAC1B,EAAY,EACZ,GAAmB;IAEnB,MAAM,MAAM,GAAG,IAAI,cAAc,CAC/B,uBAAuB,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAC3C,EAAE,EACF,gBAAgB,CAAC,GAAG,CAAC,EACrB,MAAM,CAAC,GAAG,CAAC,CACZ,CAAC;IACF,MAAM,WAAW,CAAa,eAAe,EAAE,IAAI,CAAC,MAAM,CAAC;SACxD,OAAO,CACN,gBAAgB,CAAC,uBAAuB,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,CACzE;SACA,OAAO,CAAC,oBAAoB,EAAE,CAAC;SAC/B,OAAO,CAAC,wBAAwB,EAAE,CAAC;SACnC,OAAO,CAAC,4BAA4B,CAAC,IAAI,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;SAC/D,OAAO,CAAC,+BAA+B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;SACpD,OAAO,CACN,2BAA2B,CAAC,IAAI,CAAC,oBAAoB,EAAE,IAAI,CAAC,MAAM,CAAC,CACpE;SACA,OAAO,CACN,4BAA4B,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE;QACpD,QAAQ,EAAE,sBAAsB;QAChC,IAAI,EAAE,QAAQ;KACf,CAAC,CACH;SACA,OAAO,CAAC,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;SAC1C,OAAO,CACN,yBAAyB,CAAC,IAAI,CAAC,sBAAsB,EAAE,IAAI,CAAC,MAAM,CAAC,CACpE;SACA,OAAO,CAAC,wBAAwB,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;SAC1D,KAAK,EAAE;SACP,OAAO,CAAC,MAAM,CAAC,CAAC;IACnB,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;IAClD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,MAAM,aAAa,CACjB,IAAI,KAAK,CAAC,qCAAqC,CAAC,EAChD,qCAAqC,CACtC,CAAC;IACJ,CAAC;IACD,OAAO,OAAiB,CAAC;AAC3B,CAAC;AAED;;;;;GAKG;AACH,SAAS,+BAA+B,CACtC,KAAY;IAEZ,OAAO;QACL,IAAI,EAAE,0BAA0B;QAChC,KAAK,CAAC,OAAO,CAAC,GAA+B;YAC3C,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,qBAAqB,CAAW,CAAC;YACxD,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YAC/C,GAAG,CAAC,GAAG,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC;YACrC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACzB,OAAO;YACT,CAAC;YACD,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,EAAE,GAAG,IAAI,EAAE,CAAC;YACvC,MAAM,UAAU,GAAG,IAAI,GAAG,CACxB,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,CACzD,CAAC;YACF,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;YAC9D,MAAM,SAAS,GAAa,EAAE,CAAC;YAC/B,KAAK,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI;gBACnC,EAAE,IAAI,EAAE,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE;gBACnE;oBACE,IAAI,EAAE,eAAe,CAAC,QAAQ;oBAC9B,MAAM,EAAE,cAAc;oBACtB,IAAI,EAAE,UAAU;iBACjB;aACF,EAAE,CAAC;gBACF,IAAI,IAAkB,CAAC;gBACvB,IAAI,CAAC;oBACH,IAAI,GAAG,MAAM,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;gBACzC,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,aAAa,CACjB,KAAK,EACL,kBAAkB,IAAI,kCAAkC,CACzD,CAAC;gBACJ,CAAC;gBACD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;oBACvB,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;oBACzC,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;oBACtC,IACE,QAAQ,KAAK,SAAS;wBACtB,QAAQ,CAAC,GAAG,KAAK,GAAG;wBACpB,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,EAC1B,CAAC;wBACD,SAAS;oBACX,CAAC;oBACD,MAAM,GAAG,GAAG,qBAAqB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,IAAI,CACtD,CAAC,GAAG,EAAE,EAAE,CACN,CAAC,GAAG,CAAC,GAAG,KAAK,EAAE,IAAI,GAAG,CAAC,GAAG,KAAK,GAAG,CAAC;wBACnC,UAAU,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,CAC5C,CAAC;oBACF,IAAI,GAAG,EAAE,CAAC;wBACR,SAAS,CAAC,IAAI,CAAC,GAAG,IAAI,KAAK,QAAQ,CAAC,IAAI,GAAG,CAAC,CAAC;oBAC/C,CAAC;gBACH,CAAC;YACH,CAAC;YACD,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACzB,MAAM,uBAAuB,CAC3B,WAAW,MAAM,CAAC,QAAQ,EAAE,IAAI,IAAI,EAAE,sBAAsB,SAAS,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;oBACzF,wDAAwD,CAC3D,CAAC;YACJ,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED,qFAAqF;AACrF,SAAS,2BAA2B,CAClC,oBAAgD,EAChD,MAAc;IAEd,OAAO;QACL,IAAI,EAAE,sBAAsB;QAC5B,KAAK,CAAC,OAAO,CAAC,GAA+B;YAC3C,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,qBAAqB,CAAW,CAAC;YACxD,MAAM,OAAO,GAAG,GAAG,CAAC,GAAG,CAAC,kBAAkB,CAAa,CAAC;YACxD,MAAM,YAAY,GAAG,oBAAoB,EAAE,CAAC;YAC5C,KAAK,MAAM,MAAM,IAAI,gBAAgB,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC/C,MAAM,YAAY,CAAC,YAAY,CAC7B,MAAM,CAAC,IAAI,EACX,MAAM,CAAC,EAAE,EACT,GAAG,CAAC,cAAc,CACnB,CAAC;YACJ,CAAC;YACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACvB,MAAM,CAAC,IAAI,CAAC,wBAAwB,EAAE;oBACpC,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE;oBACnC,OAAO,EAAE,OAAO,CAAC,GAAG,CAClB,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,EAAE,CAC7D;iBACF,CAAC,CAAC;YACL,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED,4EAA4E;AAE5E,KAAK,UAAU,GAAG,CAChB,IAA0B,EAC1B,EAAY,EACZ,GAAmB;IAEnB,MAAM,MAAM,GAAG,IAAI,cAAc,CAC/B,qBAAqB,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,EACtC,EAAE,EACF,gBAAgB,CAAC,GAAG,CAAC,EACrB,MAAM,CAAC,GAAG,CAAC,CACZ,CAAC;IACF,MAAM,WAAW,CACf,YAAY,EACZ,IAAI,CAAC,MAAM,CACZ;SACE,OAAO,CACN,gBAAgB,CAAC,qBAAqB,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,UAAU,CAAC,CACpE;SACA,OAAO,CAAC,oBAAoB,EAAE,CAAC;SAC/B,OAAO,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;SACpD,KAAK,EAAE;SACP,OAAO,CAAC,MAAM,CAAC,CAAC;IACnB,OAAO,MAAM,CAAC,GAAG,CAAC,mBAAmB,CAAW,CAAC;AACnD,CAAC;AAID,8EAA8E;AAC9E,MAAM,oBAAoB,GAKtB;IACF,IAAI,EAAE,eAAe,CAAC,MAAM;IAC5B,MAAM,EAAE,YAAY;IACpB,IAAI,EAAE,QAAQ;IACd,UAAU,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,IAAI,EAAE;IACnD,SAAS,EAAE,aAAa;IACxB,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG;IACnB,QAAQ,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE;QACnC,MAAM,KAAK,GAAG,MAAM,CAAC,wBAAwB,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;QACnE,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAChC,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;YACpC,KAAK,CAAC,kBAAkB,GAAG,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC;YAC5D,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC;YACjD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;gBAC5B,KAAK,CAAC,QAAQ,GAAG,SAAS,CAAC,SAAS,IAAI,SAAS,CAAC,SAAS,CAAC;gBAC5D,KAAK,CAAC,QAAQ,GAAG,SAAS,CAAC,SAAS,IAAI,SAAS,CAAC,SAAS,CAAC;YAC9D,CAAC;QACH,CAAC;QACD,IAAI,MAAM,CAAC,QAAQ,EAAE,OAAO,KAAK,SAAS,EAAE,CAAC;YAC3C,KAAK,CAAC,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC;QAClD,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,QAAQ,EAAE,CAAC,QAAQ,EAAE,aAAa,EAAE,UAAU,EAAE,EAAE,CAChD,MAAM,CAAC,gCAAgC,EAAE;QACvC,QAAQ;QACR,aAAa;QACb,UAAU;KACX,CAAC;CACL,CAAC;AAEF;;;;GAIG;AACH,KAAK,UAAU,cAAc,CAC3B,IAA0B,EAC1B,GAAyB,EACzB,GAAmB;IAEnB,MAAM,MAAM,GAAG,IAAI,cAAc,CAC/B,qBAAqB,CAAC,MAAM,CAAC,cAAc,CAAC,KAAK,EACjD,GAAG,EACH,gBAAgB,CAAC,GAAG,CAAC,EACrB,MAAM,CAAC,GAAG,CAAC,CACZ,CAAC;IACF,MAAM,WAAW,CACf,yBAAyB,EACzB,IAAI,CAAC,MAAM,CACZ;SACE,OAAO,CACN,gBAAgB,CACd,qBAAqB,CAAC,MAAM,CAAC,cAAc,EAC3C,IAAI,CAAC,UAAU,CAChB,CACF;SACA,OAAO,CAAC,oBAAoB,EAAE,CAAC;SAC/B,OAAO,CACN,iCAAiC,CAC/B,IAAI,CAAC,KAAK,EACV,oBAAoB,EACpB,uBAAuB,CACxB,CACF;SACA,OAAO,CAAC;QACP,IAAI,EAAE,yBAAyB;QAC/B,KAAK,CAAC,OAAO,CAAC,OAAO;YACnB,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAW,CAAC;YAC5D,MAAM,yBAAyB,CAC7B,IAAI,CAAC,UAAU,EACf,OAAO,CAAC,cAAc,EACtB;gBACE,UAAU,EAAE,aAAa,CAAC,QAAQ;gBAClC,YAAY,EAAE,eAAe,CAAC,MAAM;gBACpC,UAAU,EAAE,QAAQ,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE;aACxC,EACD,4BAA4B,CAC7B,CAAC;QACJ,CAAC;KACF,CAAC;SACD,KAAK,EAAE;SACP,OAAO,CAAC,MAAM,CAAC,CAAC;IACnB,OAAO,MAAM,CAAC,GAAG,CAAC,mBAAmB,CAAW,CAAC;AACnD,CAAC;AAED,MAAM,yBAAyB,GAAG,qBAAqB,CAAC;AAExD,oEAAoE;AACpE,KAAK,UAAU,WAAW,CACxB,IAA0B,EAC1B,EAAY,EACZ,GAAmB;IAEnB,MAAM,MAAM,GAAG,IAAI,cAAc,CAC/B,qBAAqB,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,EAC9C,EAAE,EACF,gBAAgB,CAAC,GAAG,CAAC,EACrB,MAAM,CAAC,GAAG,CAAC,CACZ,CAAC;IACF,MAAM,WAAW,CACf,qBAAqB,EACrB,IAAI,CAAC,MAAM,CACZ;SACE,OAAO,CACN,gBAAgB,CACd,qBAAqB,CAAC,MAAM,CAAC,WAAW,EACxC,IAAI,CAAC,UAAU,CAChB,CACF;SACA,OAAO,CAAC,oBAAoB,EAAE,CAAC;SAC/B,OAAO,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;SACpD,OAAO,CAAC;QACP,IAAI,EAAE,mBAAmB;QACzB,KAAK,CAAC,OAAO,CAAC,OAAO;YACnB,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAW,CAAC;YAC1D,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YACpD,OAAO,CAAC,GAAG,CACT,yBAAyB,EACzB,MAAM,CAAC,+BAA+B,EAAE;gBACtC,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAC9B,MAAM,CAAC,kBAAkB,EAAE;oBACzB,IAAI,EAAE,MAAM,CAAC,IAAI;oBACjB,EAAE,EAAE,MAAM,CAAC,EAAE;oBACb,IAAI,EAAE,MAAM,CAAC,IAAI;oBACjB,IAAI,EAAE,MAAM,CAAC,IAAI;iBAClB,CAAC,CACH;aACF,CAAC,CACH,CAAC;QACJ,CAAC;KACF,CAAC;SACD,KAAK,EAAE;SACP,OAAO,CAAC,MAAM,CAAC,CAAC;IACnB,OAAO,MAAM,CAAC,GAAG,CAAC,yBAAyB,CAA8B,CAAC;AAC5E,CAAC;AAED,kGAAkG;AAClG,KAAK,UAAU,YAAY,CACzB,IAA0B,EAC1B,GAA4B,EAC5B,GAAmB;IAEnB,MAAM,MAAM,GAAG,IAAI,cAAc,CAC/B,qBAAqB,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,EAC/C,GAAG,EACH,gBAAgB,CAAC,GAAG,CAAC,EACrB,MAAM,CAAC,GAAG,CAAC,CACZ,CAAC;IACF,MAAM,WAAW,CAAmB,sBAAsB,EAAE,IAAI,CAAC,MAAM,CAAC;SACrE,OAAO,CACN,gBAAgB,CACd,qBAAqB,CAAC,MAAM,CAAC,YAAY,EACzC,IAAI,CAAC,UAAU,CAChB,CACF;SACA,OAAO,CAAC,oBAAoB,EAAE,CAAC;SAC/B,OAAO,CACN,+BAA+B,CAC7B,IAAI,CAAC,KAAK,EACV,oBAAoB,EACpB,qBAAqB,CACtB,CACF;SACA,OAAO,CAAC;QACP,IAAI,EAAE,yBAAyB;QAC/B,KAAK,CAAC,OAAO,CAAC,OAAO;YACnB,MAAM,yBAAyB,CAC7B,IAAI,CAAC,UAAU,EACf,OAAO,CAAC,cAAc,EACtB;gBACE,UAAU,EAAE,aAAa,CAAC,QAAQ;gBAClC,YAAY,EAAE,eAAe,CAAC,MAAM;gBACpC,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAW;aACjE,EACD,6CAA6C,CAC9C,CAAC;QACJ,CAAC;KACF,CAAC;SACD,OAAO,CACN,yBAAyB,CACvB,IAAI,CAAC,KAAK,EACV,oBAAoB,EACpB,oBAAoB,CACrB,CACF;SACA,KAAK,EAAE;SACP,OAAO,CAAC,MAAM,CAAC,CAAC;IACnB,OAAO,MAAM,CAAC,GAAG,CAAC,0BAA0B,CAA+B,CAAC;AAC9E,CAAC;AAED,4EAA4E;AAE5E,KAAK,UAAU,SAAS,CAAC,KAAY,EAAE,MAAc;IACnD,IAAI,CAAC;QACH,OAAO,MAAM,WAAW,CACtB,KAAK,EACL,MAAM,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,EACzB,MAAM,CAAC,QAAQ,EAAE,GAAG,IAAI,EAAE,CAC3B,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,aAAa,CAAC,KAAK,EAAE,+BAA+B,CAAC,CAAC;IAC9D,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAC3B,KAAY,EACZ,GAAW,EACX,QAAgB;IAEhB,OAAO;QACL,IAAI,EAAE,QAAQ;QACd,KAAK,CAAC,OAAO,CAAC,GAAyB;YACrC,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,CAAW,CAAC;YACtC,IAAI,CAAC;gBACH,MAAM,KAAK,CAAC,YAAY,CACtB,GAAG,CAAC,eAAe,EACnB,MAAM,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,EACzB,YAAY,EACZ,MAAM,CACP,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,aAAa,CAAC,KAAK,EAAE,uBAAuB,CAAC,CAAC;YACtD,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED,sEAAsE;AACtE,SAAS,kBAAkB,CACzB,KAAY,EACZ,MAAc,EACd,GAAW,EACX,QAAgB;IAEhB,OAAO;QACL,IAAI,EAAE,QAAQ;QACd,KAAK,CAAC,OAAO,CAAC,GAAyB;YACrC,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,CAAW,CAAC;YACtC,MAAM,KAAK,GAAG,qBAAqB,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;YAChE,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,OAAO;YACT,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,KAAK,CAAC,iBAAiB,CAC3B,GAAG,CAAC,eAAe,EACnB,MAAM,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,EACzB,KAAK,CACN,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,IAAI,CAAC,GAAG,QAAQ,wBAAwB,EAAE;oBAC/C,EAAE,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE;oBAC7B,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;iBAC9D,CAAC,CAAC;YACL,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/domain/plugin/materialize/agent.d.ts

@@ -0,0 +1,13 @@
+import type { PluginPackage } from "@stigmer/plugin-package";
+import type { Agent } from "@stigmer/protos/ai/stigmer/agentic/agent/v1/api_pb";
+import type { PluginWarning } from "@stigmer/protos/ai/stigmer/agentic/plugin/v1/status_pb";
+import type { PluginIdentity } from "./identity.js";
+export interface PlannedAgent {
+    readonly name: string;
+    readonly slug: string;
+    readonly resource: Agent;
+}
+/** Whether the plugin materialises an agent at all. */
+export declare function carriesAgent(plugin: PluginPackage): boolean;
+export declare function planAgent(plugin: PluginPackage, overlayAgent: Agent | undefined, identity: PluginIdentity, warnings: PluginWarning[]): PlannedAgent | undefined;
+//# sourceMappingURL=agent.d.ts.map

package/dist/domain/plugin/materialize/agent.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent.d.ts","sourceRoot":"","sources":["../../../../src/domain/plugin/materialize/agent.ts"],"names":[],"mappings":"AA0BA,OAAO,KAAK,EAAE,aAAa,EAAkB,MAAM,yBAAyB,CAAC;AAE7E,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,oDAAoD,CAAC;AAShF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,wDAAwD,CAAC;AAU5F,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAIpD,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC;CAC1B;AAED,uDAAuD;AACvD,wBAAgB,YAAY,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAM3D;AAED,wBAAgB,SAAS,CACvB,MAAM,EAAE,aAAa,EACrB,YAAY,EAAE,KAAK,GAAG,SAAS,EAC/B,QAAQ,EAAE,cAAc,EACxB,QAAQ,EAAE,aAAa,EAAE,GACxB,YAAY,GAAG,SAAS,CAwD1B"}