@synoikia/core 0.1.0

package/dist/testing/index.js

@@ -0,0 +1,174 @@
+import { cpSync, existsSync, mkdirSync, mkdtempSync, readFileSync, rmSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import path from 'node:path';
+import { parseManifest } from '@synoikia/plugin-sdk';
+import { and, eq } from 'drizzle-orm';
+import { createAppContext } from '../app.js';
+import { setGroupLevel, updateOperation } from '../catalog/groups.js';
+import { createRule } from '../catalog/rules.js';
+import { loadConfig } from '../config/env.js';
+import { ConflictError } from '../errors.js';
+import { secretFieldNames } from '../instances/connection.js';
+import { auditLog, operations, pendingApprovals, plugins, registryEntries } from '../db/schema.js';
+import { executeCode, searchCode } from '../runtime/index.js';
+/** Copies what a release ships (manifest, package.json, the entry's top-level path) into `root/<id>`. */
+function stagePlugin(pluginDir, manifest, root) {
+    const entry = path.join(pluginDir, manifest.entry);
+    if (!existsSync(entry)) {
+        throw new Error(`${manifest.id}: entry ${manifest.entry} not found in ${pluginDir}. Build the plugin first.`);
+    }
+    const dest = path.join(root, manifest.id);
+    mkdirSync(dest, { recursive: true });
+    const top = path.normalize(manifest.entry).split(path.sep)[0];
+    for (const name of new Set(['manifest.json', 'package.json', top])) {
+        const from = path.join(pluginDir, name);
+        if (existsSync(from))
+            cpSync(from, path.join(dest, name), { recursive: true });
+    }
+    return dest;
+}
+export async function startPluginHarness(opts) {
+    const manifest = parseManifest(JSON.parse(readFileSync(path.join(opts.pluginDir, 'manifest.json'), 'utf8')));
+    const work = mkdtempSync(path.join(tmpdir(), `synoikia-harness-${manifest.id}-`));
+    let ctx;
+    try {
+        const pluginsDir = path.join(work, 'plugins');
+        stagePlugin(opts.pluginDir, manifest, pluginsDir);
+        ctx = await createAppContext(loadConfig({
+            DATA_DIR: path.join(work, 'data'),
+            CORE_PLUGINS_DIR: pluginsDir,
+            CORE_PLUGINS_AUTOENABLE: 'true',
+        }), { memoryDb: true, supervisor: opts.supervisor ?? { initTimeoutMs: 5000, rpcTimeoutMs: 10_000 } });
+        const row = ctx.db.select().from(plugins).where(eq(plugins.pluginId, manifest.id)).get();
+        if (row?.status !== 'ok') {
+            throw new Error(`${manifest.id} was not loaded: ${row ? `${row.status}: ${row.statusError}` : 'not discovered'}`);
+        }
+        const instanceId = (await ctx.instances.create({ pluginId: manifest.id, slug: opts.slug ?? manifest.id, connection: opts.connection })).id;
+        if (opts.sync ?? true)
+            await ctx.instances.syncNow(instanceId);
+        return harness(ctx, manifest, instanceId, work);
+    }
+    catch (err) {
+        await ctx?.stop();
+        rmSync(work, { recursive: true, force: true });
+        throw err;
+    }
+}
+function harness(ctx, manifest, instanceId, work) {
+    const approvalErrors = [];
+    const operation = (key) => {
+        const op = ctx.db
+            .select()
+            .from(operations)
+            .where(and(eq(operations.instanceId, instanceId), eq(operations.key, key)))
+            .get();
+        if (!op)
+            throw new Error(`No operation ${key} in the synced catalog`);
+        return op;
+    };
+    const caller = (opts = {}) => {
+        const onApproval = opts.onApproval;
+        return {
+            client: { kind: 'mcp_client', id: 'harness' },
+            principal: { ceiling: 'write' },
+            mcpSessionId: 'harness-session',
+            prompts: onApproval
+                ? {
+                    url: async (req) => {
+                        // Decide after the prompt returns, as a human on the approval page would.
+                        setTimeout(() => void decide(req.approvalId, req.message, onApproval), 10);
+                        return { action: 'accept' };
+                    },
+                }
+                : undefined,
+        };
+    };
+    const decide = async (id, message, onApproval) => {
+        const pending = ctx.db.select().from(pendingApprovals).where(eq(pendingApprovals.id, id)).get();
+        const operationKey = ctx.db.select().from(operations).where(eq(operations.id, pending.operationId)).get().key;
+        let decided = false;
+        const approval = {
+            id,
+            operationKey,
+            message,
+            pending,
+            approve(confirm) {
+                ctx.approvals.decide(id, { approve: true, confirm, decidedBy: 'harness' });
+                decided = true;
+            },
+            deny() {
+                ctx.approvals.decide(id, { approve: false, decidedBy: 'harness' });
+                decided = true;
+            },
+        };
+        try {
+            await onApproval(approval);
+            if (!decided)
+                throw new Error(`onApproval left approval ${id} (${operationKey}) open`);
+        }
+        catch (err) {
+            approvalErrors.push(err);
+            if (!decided)
+                ctx.approvals.decide(id, { approve: false, decidedBy: 'harness' });
+        }
+    };
+    return {
+        ctx,
+        instanceId,
+        manifest,
+        approvalErrors,
+        execute: (code, opts) => executeCode(ctx.gateDeps(), ctx.instances.runtime(instanceId), caller(opts), code),
+        search: (code) => searchCode(ctx.gateDeps(), ctx.instances.runtime(instanceId), caller(), code),
+        setGroupLevel(group, level) {
+            try {
+                setGroupLevel(ctx.db, instanceId, group, level);
+            }
+            catch (err) {
+                // Raising to write must acknowledge the writes it lets through: take the list core offers,
+                // as an admin confirming the portal's dialog does.
+                if (!(err instanceof ConflictError) || err.code !== 'acknowledgement_mismatch')
+                    throw err;
+                const expected = err.details.expected.map((o) => o.id);
+                setGroupLevel(ctx.db, instanceId, group, level, { acknowledge: expected });
+            }
+        },
+        setOperationLevel(key, level) {
+            updateOperation(ctx.db, instanceId, operation(key).id, { level });
+        },
+        addRule({ operation: key, match, reason }) {
+            return createRule(ctx.db, ctx.instances.runtime(instanceId).manifest, instanceId, {
+                operationId: operation(key).id,
+                match,
+                reason,
+            });
+        },
+        operation,
+        operations: () => ctx.db.select().from(operations).where(eq(operations.instanceId, instanceId)).all(),
+        registry: () => ctx.db.select().from(registryEntries).where(eq(registryEntries.instanceId, instanceId)).all(),
+        audit(filter = {}) {
+            const rows = ctx.db.select().from(auditLog).where(eq(auditLog.instanceId, instanceId)).all();
+            return filter.operationKey ? rows.filter((a) => a.operationKey === filter.operationKey) : rows;
+        },
+        instance: () => ctx.instances.get(instanceId),
+        testConnection: (connection) => ctx.instances.testConnection(instanceId, splitConnection(manifest, connection)),
+        syncNow: () => ctx.instances.syncNow(instanceId),
+        async stop() {
+            await ctx.stop();
+            rmSync(work, { recursive: true, force: true });
+        },
+    };
+}
+/** `testConnection` takes config and secrets apart; the manifest's `writeOnly` fields are the secrets. */
+function splitConnection(manifest, connection) {
+    const secretNames = new Set(secretFieldNames(manifest));
+    const config = {};
+    const secrets = {};
+    for (const [k, v] of Object.entries(connection)) {
+        if (secretNames.has(k))
+            secrets[k] = String(v);
+        else
+            config[k] = v;
+    }
+    return { config, secrets };
+}
+//# sourceMappingURL=index.js.map

package/dist/testing/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/testing/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC3F,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAErD,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACtC,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAE7C,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACtE,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAC9D,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,gBAAgB,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAGnG,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAmE9D,yGAAyG;AACzG,SAAS,WAAW,CAAC,SAAiB,EAAE,QAAkB,EAAE,IAAY;IACtE,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;IACnD,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,GAAG,QAAQ,CAAC,EAAE,WAAW,QAAQ,CAAC,KAAK,iBAAiB,SAAS,2BAA2B,CAAC,CAAC;IAChH,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;IAC1C,SAAS,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACrC,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;IAC/D,KAAK,MAAM,IAAI,IAAI,IAAI,GAAG,CAAC,CAAC,eAAe,EAAE,cAAc,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;QACnE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QACxC,IAAI,UAAU,CAAC,IAAI,CAAC;YAAE,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACjF,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,IAA0B;IACjE,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IAC7G,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,oBAAoB,QAAQ,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IAClF,IAAI,GAA2B,CAAC;IAChC,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QAC9C,WAAW,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;QAClD,GAAG,GAAG,MAAM,gBAAgB,CAC1B,UAAU,CAAC;YACT,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC;YACjC,gBAAgB,EAAE,UAAU;YAC5B,uBAAuB,EAAE,MAAM;SAChC,CAAC,EACF,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,EAAE,CACjG,CAAC;QACF,MAAM,GAAG,GAAG,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;QACzF,IAAI,GAAG,EAAE,MAAM,KAAK,IAAI,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,GAAG,QAAQ,CAAC,EAAE,oBAAoB,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,MAAM,KAAK,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,gBAAgB,EAAE,CAAC,CAAC;QACpH,CAAC;QACD,MAAM,UAAU,GAAG,CACjB,MAAM,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,QAAQ,CAAC,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CACnH,CAAC,EAAE,CAAC;QACL,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI;YAAE,MAAM,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAC/D,OAAO,OAAO,CAAC,GAAG,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;IAClD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,EAAE,IAAI,EAAE,CAAC;QAClB,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/C,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,OAAO,CAAC,GAAe,EAAE,QAAkB,EAAE,UAAkB,EAAE,IAAY;IACpF,MAAM,cAAc,GAAc,EAAE,CAAC;IACrC,MAAM,SAAS,GAAG,CAAC,GAAW,EAAE,EAAE;QAChC,MAAM,EAAE,GAAG,GAAG,CAAC,EAAE;aACd,MAAM,EAAE;aACR,IAAI,CAAC,UAAU,CAAC;aAChB,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;aAC1E,GAAG,EAAE,CAAC;QACT,IAAI,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,GAAG,wBAAwB,CAAC,CAAC;QACtE,OAAO,EAAE,CAAC;IACZ,CAAC,CAAC;IAEF,MAAM,MAAM,GAAG,CAAC,OAAuB,EAAE,EAAiB,EAAE;QAC1D,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;QACnC,OAAO;YACL,MAAM,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,SAAS,EAAE;YAC7C,SAAS,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE;YAC/B,YAAY,EAAE,iBAAiB;YAC/B,OAAO,EAAE,UAAU;gBACjB,CAAC,CAAC;oBACE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;wBACjB,0EAA0E;wBAC1E,UAAU,CAAC,GAAG,EAAE,CAAC,KAAK,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,OAAO,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC,CAAC;wBAC3E,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;oBAC9B,CAAC;iBACF;gBACH,CAAC,CAAC,SAAS;SACd,CAAC;IACJ,CAAC,CAAC;IAEF,MAAM,MAAM,GAAG,KAAK,EAAE,EAAU,EAAE,OAAe,EAAE,UAAqD,EAAE,EAAE;QAC1G,MAAM,OAAO,GAAG,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,gBAAgB,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,EAAG,CAAC;QACjG,MAAM,YAAY,GAAG,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,EAAG,CAAC,GAAG,CAAC;QAC/G,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,QAAQ,GAAoB;YAChC,EAAE;YACF,YAAY;YACZ,OAAO;YACP,OAAO;YACP,OAAO,CAAC,OAAO;gBACb,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC;gBAC3E,OAAO,GAAG,IAAI,CAAC;YACjB,CAAC;YACD,IAAI;gBACF,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC;gBACnE,OAAO,GAAG,IAAI,CAAC;YACjB,CAAC;SACF,CAAC;QACF,IAAI,CAAC;YACH,MAAM,UAAU,CAAC,QAAQ,CAAC,CAAC;YAC3B,IAAI,CAAC,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,EAAE,KAAK,YAAY,QAAQ,CAAC,CAAC;QACzF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACzB,IAAI,CAAC,OAAO;gBAAE,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC;QACnF,CAAC;IACH,CAAC,CAAC;IAEF,OAAO;QACL,GAAG;QACH,UAAU;QACV,QAAQ;QACR,cAAc;QACd,OAAO,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC;QAC3G,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,EAAE,IAAI,CAAC;QAC/F,aAAa,CAAC,KAAK,EAAE,KAAK;YACxB,IAAI,CAAC;gBACH,aAAa,CAAC,GAAG,CAAC,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;YAClD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,2FAA2F;gBAC3F,mDAAmD;gBACnD,IAAI,CAAC,CAAC,GAAG,YAAY,aAAa,CAAC,IAAI,GAAG,CAAC,IAAI,KAAK,0BAA0B;oBAAE,MAAM,GAAG,CAAC;gBAC1F,MAAM,QAAQ,GAAI,GAAG,CAAC,OAA0C,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBAC3F,aAAa,CAAC,GAAG,CAAC,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC7E,CAAC;QACH,CAAC;QACD,iBAAiB,CAAC,GAAG,EAAE,KAAK;YAC1B,eAAe,CAAC,GAAG,CAAC,EAAE,EAAE,UAAU,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QACpE,CAAC;QACD,OAAO,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE;YACvC,OAAO,UAAU,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE;gBAChF,WAAW,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,EAAE;gBAC9B,KAAK;gBACL,MAAM;aACP,CAAC,CAAC;QACL,CAAC;QACD,SAAS;QACT,UAAU,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC,GAAG,EAAE;QACrG,QAAQ,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,eAAe,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC,GAAG,EAAE;QAC7G,KAAK,CAAC,MAAM,GAAG,EAAE;YACf,MAAM,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;YAC7F,OAAO,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACjG,CAAC;QACD,QAAQ,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC;QAC7C,cAAc,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,cAAc,CAAC,UAAU,EAAE,eAAe,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAC/G,OAAO,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,UAAU,CAAC;QAChD,KAAK,CAAC,IAAI;YACR,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;YACjB,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACjD,CAAC;KACF,CAAC;AACJ,CAAC;AAED,0GAA0G;AAC1G,SAAS,eAAe,CAAC,QAAkB,EAAE,UAAmC;IAC9E,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC;IACxD,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QAChD,IAAI,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,OAAO,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;;YAC1C,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AAC7B,CAAC"}

package/dist/version.d.ts

@@ -0,0 +1,2 @@
+/** The core's own version, from package.json (src/ and dist/ both sit one level below it). */
+export declare const CORE_VERSION: string;

package/dist/version.js

@@ -0,0 +1,4 @@
+import { readFileSync } from 'node:fs';
+/** The core's own version, from package.json (src/ and dist/ both sit one level below it). */
+export const CORE_VERSION = JSON.parse(readFileSync(new URL('../package.json', import.meta.url), 'utf8')).version;
+//# sourceMappingURL=version.js.map

package/dist/version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.js","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAEvC,8FAA8F;AAC9F,MAAM,CAAC,MAAM,YAAY,GACvB,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,GAAG,CAAC,iBAAiB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAC7E,CAAC,OAAO,CAAC"}

package/drizzle/0000_init.sql

@@ -0,0 +1,334 @@
+CREATE TABLE `approval_links` (
+	`token_hash` text PRIMARY KEY NOT NULL,
+	`approval_id` text NOT NULL,
+	`action` text NOT NULL,
+	`expires_at` integer NOT NULL,
+	`used_at` integer,
+	FOREIGN KEY (`approval_id`) REFERENCES `pending_approvals`(`id`) ON UPDATE no action ON DELETE cascade
+);
+--> statement-breakpoint
+CREATE TABLE `audit_log` (
+	`id` integer PRIMARY KEY AUTOINCREMENT NOT NULL,
+	`at` integer NOT NULL,
+	`kind` text NOT NULL,
+	`instance_id` text,
+	`operation_key` text,
+	`classification` text,
+	`decision` text,
+	`actor_kind` text NOT NULL,
+	`actor_id` text,
+	`decided_by` text,
+	`decided_via` text,
+	`params` text,
+	`resolved_targets` text,
+	`result_status` text,
+	`duration_ms` integer,
+	`detail` text
+);
+--> statement-breakpoint
+CREATE INDEX `audit_at_idx` ON `audit_log` (`at`);--> statement-breakpoint
+CREATE INDEX `audit_instance_at_idx` ON `audit_log` (`instance_id`,`at`);--> statement-breakpoint
+CREATE TABLE `guides` (
+	`id` text PRIMARY KEY NOT NULL,
+	`instance_id` text NOT NULL,
+	`operation_id` text NOT NULL,
+	`version` text NOT NULL,
+	`content` text NOT NULL,
+	`fetched_at` integer NOT NULL,
+	FOREIGN KEY (`instance_id`) REFERENCES `plugin_instances`(`id`) ON UPDATE no action ON DELETE cascade,
+	FOREIGN KEY (`operation_id`) REFERENCES `operations`(`id`) ON UPDATE no action ON DELETE cascade
+);
+--> statement-breakpoint
+CREATE TABLE `mcp_tokens` (
+	`id` text PRIMARY KEY NOT NULL,
+	`name` text NOT NULL,
+	`token_hash` text NOT NULL,
+	`scope` text NOT NULL,
+	`created_by` text,
+	`created_at` integer DEFAULT (unixepoch() * 1000) NOT NULL,
+	`expires_at` integer,
+	`last_used_at` integer,
+	`revoked_at` integer,
+	FOREIGN KEY (`created_by`) REFERENCES `users`(`id`) ON UPDATE no action ON DELETE no action
+);
+--> statement-breakpoint
+CREATE UNIQUE INDEX `mcp_tokens_token_hash_unique` ON `mcp_tokens` (`token_hash`);--> statement-breakpoint
+CREATE TABLE `notifier_channels` (
+	`id` text PRIMARY KEY NOT NULL,
+	`kind` text NOT NULL,
+	`name` text NOT NULL,
+	`config` text NOT NULL,
+	`secrets_enc` blob,
+	`events` text NOT NULL,
+	`instance_filter` text,
+	`enabled` integer DEFAULT true NOT NULL,
+	`last_sent_at` integer,
+	`last_error` text
+);
+--> statement-breakpoint
+CREATE TABLE `oauth_clients` (
+	`id` text PRIMARY KEY NOT NULL,
+	`client_id` text NOT NULL,
+	`client_secret_hash` text,
+	`name` text NOT NULL,
+	`redirect_uris` text NOT NULL,
+	`registered_via` text NOT NULL,
+	`created_at` integer DEFAULT (unixepoch() * 1000) NOT NULL,
+	`revoked_at` integer
+);
+--> statement-breakpoint
+CREATE UNIQUE INDEX `oauth_clients_client_id_unique` ON `oauth_clients` (`client_id`);--> statement-breakpoint
+CREATE TABLE `oauth_codes` (
+	`code_hash` text PRIMARY KEY NOT NULL,
+	`grant_id` text NOT NULL,
+	`code_challenge` text NOT NULL,
+	`redirect_uri` text NOT NULL,
+	`resources` text NOT NULL,
+	`expires_at` integer NOT NULL,
+	`used_at` integer,
+	FOREIGN KEY (`grant_id`) REFERENCES `oauth_grants`(`id`) ON UPDATE no action ON DELETE cascade
+);
+--> statement-breakpoint
+CREATE TABLE `oauth_grants` (
+	`id` text PRIMARY KEY NOT NULL,
+	`client_id` text NOT NULL,
+	`user_id` text NOT NULL,
+	`resources` text NOT NULL,
+	`created_at` integer DEFAULT (unixepoch() * 1000) NOT NULL,
+	`revoked_at` integer,
+	FOREIGN KEY (`client_id`) REFERENCES `oauth_clients`(`id`) ON UPDATE no action ON DELETE cascade,
+	FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON UPDATE no action ON DELETE cascade
+);
+--> statement-breakpoint
+CREATE TABLE `oauth_tokens` (
+	`token_hash` text PRIMARY KEY NOT NULL,
+	`grant_id` text NOT NULL,
+	`kind` text NOT NULL,
+	`family_id` text NOT NULL,
+	`resources` text NOT NULL,
+	`expires_at` integer NOT NULL,
+	`revoked_at` integer,
+	FOREIGN KEY (`grant_id`) REFERENCES `oauth_grants`(`id`) ON UPDATE no action ON DELETE cascade
+);
+--> statement-breakpoint
+CREATE TABLE `oidc_config` (
+	`id` integer PRIMARY KEY NOT NULL,
+	`issuer` text NOT NULL,
+	`client_id` text NOT NULL,
+	`client_secret_enc` blob,
+	`scopes` text DEFAULT 'openid email profile' NOT NULL,
+	`allow_policy` text,
+	`auto_provision` integer DEFAULT false NOT NULL,
+	`enabled` integer DEFAULT false NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE `operation_group_aliases` (
+	`instance_id` text NOT NULL,
+	`plugin_group` text NOT NULL,
+	`group_key` text NOT NULL,
+	FOREIGN KEY (`instance_id`) REFERENCES `plugin_instances`(`id`) ON UPDATE no action ON DELETE cascade
+);
+--> statement-breakpoint
+CREATE UNIQUE INDEX `operation_group_aliases_idx` ON `operation_group_aliases` (`instance_id`,`plugin_group`);--> statement-breakpoint
+CREATE TABLE `operation_groups` (
+	`id` text PRIMARY KEY NOT NULL,
+	`instance_id` text NOT NULL,
+	`key` text NOT NULL,
+	`label` text NOT NULL,
+	`level` text DEFAULT 'read' NOT NULL,
+	`level_changed_at` integer,
+	`level_changed_by` text,
+	`first_seen_at` integer NOT NULL,
+	`stale` integer DEFAULT false NOT NULL,
+	FOREIGN KEY (`instance_id`) REFERENCES `plugin_instances`(`id`) ON UPDATE no action ON DELETE cascade,
+	FOREIGN KEY (`level_changed_by`) REFERENCES `users`(`id`) ON UPDATE no action ON DELETE no action
+);
+--> statement-breakpoint
+CREATE UNIQUE INDEX `operation_groups_instance_key_idx` ON `operation_groups` (`instance_id`,`key`);--> statement-breakpoint
+CREATE TABLE `operations` (
+	`id` text PRIMARY KEY NOT NULL,
+	`instance_id` text NOT NULL,
+	`key` text NOT NULL,
+	`display_name` text,
+	`kind` text NOT NULL,
+	`plugin_group` text NOT NULL,
+	`group_id` text NOT NULL,
+	`tag` text,
+	`classification` text NOT NULL,
+	`classification_source` text NOT NULL,
+	`inferred_classification` text NOT NULL,
+	`inferred_reason` text NOT NULL,
+	`locked` integer DEFAULT false NOT NULL,
+	`excluded` integer DEFAULT false NOT NULL,
+	`locked_opt_in` integer DEFAULT false NOT NULL,
+	`write_acknowledged` integer DEFAULT false NOT NULL,
+	`acknowledged_at` integer,
+	`acknowledged_by` text,
+	`typed_confirmation` integer DEFAULT false NOT NULL,
+	`attestation_required` integer DEFAULT false NOT NULL,
+	`needs_review` integer DEFAULT false NOT NULL,
+	`match_profile` text,
+	`params_schema` text,
+	`docs` text,
+	`first_seen_at` integer NOT NULL,
+	`last_seen_at` integer NOT NULL,
+	`stale` integer DEFAULT false NOT NULL,
+	FOREIGN KEY (`instance_id`) REFERENCES `plugin_instances`(`id`) ON UPDATE no action ON DELETE cascade,
+	FOREIGN KEY (`group_id`) REFERENCES `operation_groups`(`id`) ON UPDATE no action ON DELETE no action,
+	FOREIGN KEY (`acknowledged_by`) REFERENCES `users`(`id`) ON UPDATE no action ON DELETE no action
+);
+--> statement-breakpoint
+CREATE UNIQUE INDEX `operations_instance_key_idx` ON `operations` (`instance_id`,`key`);--> statement-breakpoint
+CREATE INDEX `operations_group_idx` ON `operations` (`group_id`);--> statement-breakpoint
+CREATE TABLE `pending_approvals` (
+	`id` text PRIMARY KEY NOT NULL,
+	`instance_id` text NOT NULL,
+	`operation_id` text NOT NULL,
+	`params_display` text,
+	`params_hash` text NOT NULL,
+	`resolved_targets` text,
+	`summary` text NOT NULL,
+	`confirm_literal` text,
+	`diff` text,
+	`expected_hash` text,
+	`client_kind` text,
+	`client_id` text,
+	`mcp_session_id` text,
+	`requested_at` integer NOT NULL,
+	`expires_at` integer NOT NULL,
+	`status` text DEFAULT 'pending' NOT NULL,
+	`decided_by` text,
+	`decided_via` text,
+	`decided_at` integer,
+	FOREIGN KEY (`instance_id`) REFERENCES `plugin_instances`(`id`) ON UPDATE no action ON DELETE no action,
+	FOREIGN KEY (`operation_id`) REFERENCES `operations`(`id`) ON UPDATE no action ON DELETE no action
+);
+--> statement-breakpoint
+CREATE TABLE `plugin_instances` (
+	`id` text PRIMARY KEY NOT NULL,
+	`plugin_id` text NOT NULL,
+	`slug` text NOT NULL,
+	`display_name` text NOT NULL,
+	`enabled` integer DEFAULT true NOT NULL,
+	`config` text DEFAULT '{}' NOT NULL,
+	`secrets_enc` blob,
+	`auth_mode` text,
+	`settings` text DEFAULT '{}' NOT NULL,
+	`status` text DEFAULT 'stopped' NOT NULL,
+	`status_error` text,
+	`upstream_version` text,
+	`source_ref` text,
+	`last_synced_at` integer,
+	`last_sync_status` text,
+	`created_at` integer DEFAULT (unixepoch() * 1000) NOT NULL,
+	FOREIGN KEY (`plugin_id`) REFERENCES `plugins`(`id`) ON UPDATE no action ON DELETE no action
+);
+--> statement-breakpoint
+CREATE UNIQUE INDEX `plugin_instances_slug_unique` ON `plugin_instances` (`slug`);--> statement-breakpoint
+CREATE TABLE `plugin_repos` (
+	`id` text PRIMARY KEY NOT NULL,
+	`url` text NOT NULL,
+	`name` text,
+	`signing_mode` text NOT NULL,
+	`public_key` text,
+	`key_fingerprint` text,
+	`key_status` text DEFAULT 'ok' NOT NULL,
+	`index_cache` text,
+	`last_fetched_at` integer,
+	`last_fetch_error` text
+);
+--> statement-breakpoint
+CREATE UNIQUE INDEX `plugin_repos_url_unique` ON `plugin_repos` (`url`);--> statement-breakpoint
+CREATE TABLE `plugins` (
+	`id` text PRIMARY KEY NOT NULL,
+	`plugin_id` text NOT NULL,
+	`version` text NOT NULL,
+	`source` text NOT NULL,
+	`repo_id` text,
+	`path` text NOT NULL,
+	`sha256` text,
+	`signature_verified` integer DEFAULT false NOT NULL,
+	`manifest` text NOT NULL,
+	`status` text NOT NULL,
+	`status_error` text,
+	`enabled` integer DEFAULT false NOT NULL,
+	`created_at` integer DEFAULT (unixepoch() * 1000) NOT NULL,
+	FOREIGN KEY (`repo_id`) REFERENCES `plugin_repos`(`id`) ON UPDATE no action ON DELETE no action
+);
+--> statement-breakpoint
+CREATE UNIQUE INDEX `plugins_plugin_id_unique` ON `plugins` (`plugin_id`);--> statement-breakpoint
+CREATE TABLE `pre_approval_hits` (
+	`id` integer PRIMARY KEY AUTOINCREMENT NOT NULL,
+	`rule_id` text NOT NULL,
+	`occurred_at` integer NOT NULL,
+	FOREIGN KEY (`rule_id`) REFERENCES `pre_approval_rules`(`id`) ON UPDATE no action ON DELETE cascade
+);
+--> statement-breakpoint
+CREATE INDEX `hits_rule_time_idx` ON `pre_approval_hits` (`rule_id`,`occurred_at`);--> statement-breakpoint
+CREATE TABLE `pre_approval_rules` (
+	`id` text PRIMARY KEY NOT NULL,
+	`instance_id` text NOT NULL,
+	`operation_id` text NOT NULL,
+	`match` text DEFAULT '[]' NOT NULL,
+	`rate_limit` integer,
+	`window_seconds` integer,
+	`expires_at` integer,
+	`reason` text NOT NULL,
+	`enabled` integer DEFAULT true NOT NULL,
+	`created_by` text,
+	`created_at` integer DEFAULT (unixepoch() * 1000) NOT NULL,
+	`updated_at` integer,
+	`last_triggered_at` integer,
+	FOREIGN KEY (`instance_id`) REFERENCES `plugin_instances`(`id`) ON UPDATE no action ON DELETE cascade,
+	FOREIGN KEY (`operation_id`) REFERENCES `operations`(`id`) ON UPDATE no action ON DELETE no action,
+	FOREIGN KEY (`created_by`) REFERENCES `users`(`id`) ON UPDATE no action ON DELETE no action
+);
+--> statement-breakpoint
+CREATE TABLE `registry_entries` (
+	`id` text PRIMARY KEY NOT NULL,
+	`instance_id` text NOT NULL,
+	`kind` text NOT NULL,
+	`ext_id` text NOT NULL,
+	`name` text NOT NULL,
+	`parent_ext_id` text,
+	`domain` text,
+	`attrs` text,
+	`stale` integer DEFAULT false NOT NULL,
+	`last_synced_at` integer NOT NULL,
+	FOREIGN KEY (`instance_id`) REFERENCES `plugin_instances`(`id`) ON UPDATE no action ON DELETE cascade
+);
+--> statement-breakpoint
+CREATE UNIQUE INDEX `registry_instance_kind_ext_idx` ON `registry_entries` (`instance_id`,`kind`,`ext_id`);--> statement-breakpoint
+CREATE TABLE `sessions` (
+	`id_hash` text PRIMARY KEY NOT NULL,
+	`user_id` text NOT NULL,
+	`kind` text NOT NULL,
+	`created_at` integer DEFAULT (unixepoch() * 1000) NOT NULL,
+	`last_seen_at` integer NOT NULL,
+	`expires_at` integer NOT NULL,
+	`ip` text,
+	`user_agent` text,
+	FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON UPDATE no action ON DELETE cascade
+);
+--> statement-breakpoint
+CREATE INDEX `sessions_user_idx` ON `sessions` (`user_id`);--> statement-breakpoint
+CREATE TABLE `settings` (
+	`key` text PRIMARY KEY NOT NULL,
+	`value` text NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE `users` (
+	`id` text PRIMARY KEY NOT NULL,
+	`username` text NOT NULL,
+	`password_hash` text,
+	`totp_secret_enc` blob,
+	`totp_enabled` integer DEFAULT false NOT NULL,
+	`recovery_codes_hash` text,
+	`oidc_issuer` text,
+	`oidc_subject` text,
+	`created_at` integer DEFAULT (unixepoch() * 1000) NOT NULL,
+	`last_login_at` integer,
+	`disabled` integer DEFAULT false NOT NULL
+);
+--> statement-breakpoint
+CREATE UNIQUE INDEX `users_username_unique` ON `users` (`username`);

package/drizzle/0001_totp_last_step.sql

@@ -0,0 +1 @@
+ALTER TABLE `users` ADD `totp_last_step` integer;

package/drizzle/0002_access_levels.sql

@@ -0,0 +1,16 @@
+ALTER TABLE `mcp_tokens` ADD `access` text DEFAULT 'read' NOT NULL;--> statement-breakpoint
+ALTER TABLE `oauth_grants` ADD `access` text DEFAULT 'read' NOT NULL;--> statement-breakpoint
+ALTER TABLE `operations` ADD `level_override` text;--> statement-breakpoint
+-- Tokens and grants issued before access ceilings existed keep their read & write reach.
+UPDATE `mcp_tokens` SET `access` = 'write';--> statement-breakpoint
+UPDATE `oauth_grants` SET `access` = 'write';--> statement-breakpoint
+-- Exclusions become an explicit `none` level.
+UPDATE `operations` SET `level_override` = 'none' WHERE `excluded` = 1;--> statement-breakpoint
+-- Opted-in locked ops were callable (with approval) only while their group was at `write`.
+UPDATE `operations` SET `level_override` = 'ask'
+  WHERE `locked_opt_in` = 1 AND `excluded` = 0
+    AND `group_id` IN (SELECT `id` FROM `operation_groups` WHERE `level` = 'write');--> statement-breakpoint
+-- The old `write` level asked for approval on every write: that is now `ask`. Nothing starts auto-running.
+UPDATE `operation_groups` SET `level` = 'ask' WHERE `level` = 'write';--> statement-breakpoint
+-- Approvals decided in the removed portal inbox or via notification links were all made on a signed-in page.
+UPDATE `pending_approvals` SET `decided_via` = 'url' WHERE `decided_via` IN ('portal', 'link');

package/drizzle/0003_drop_exclusion_flags.sql

@@ -0,0 +1,2 @@
+ALTER TABLE `operations` DROP COLUMN `excluded`;--> statement-breakpoint
+ALTER TABLE `operations` DROP COLUMN `locked_opt_in`;

package/drizzle/0004_grant_instance_ids.sql

@@ -0,0 +1 @@
+ALTER TABLE `oauth_grants` ADD `instance_ids` text;

package/drizzle/0005_rule_strict_miss.sql

@@ -0,0 +1 @@
+ALTER TABLE `pre_approval_rules` ADD `strict_miss_at` integer;

package/drizzle/0006_attestation_waived.sql

@@ -0,0 +1 @@
+ALTER TABLE `operations` ADD `attestation_waived` integer DEFAULT false NOT NULL;