aimeat 2.7.0 → 3.1.0

package/dist/src/services/extension-ctx.js

@@ -0,0 +1,347 @@
+/**
+ * @file src/services/extension-ctx.ts
+ * @description The ONE builder for the sandbox capability object. Every road into
+ *   `executeExtensionAction` gets its `ExtensionCtx` from here, so the guards are part of the
+ *   context rather than something each caller has to remember.
+ *
+ *   Why this file exists: the context used to be assembled by hand at four call sites, and each copy
+ *   forgot something different. The REST door enforced the memory quota, the scheduler did not (the
+ *   June H-5 fix landed on two of the three write paths). Three of four used safeFetch, the scheduler
+ *   used a bare fetch, so a scheduled extension had no SSRF guard at all. The identical
+ *   `emailPolicy === 'unrestricted'` branch was typed out three times. Five findings in the August
+ *   2026 audit are one missing line in one of those copies, which is what a shared implementation
+ *   with per-caller guards always produces eventually.
+ *
+ *   The split: the CORE (memory, fetch, log) is built here and always carries its guards. The
+ *   OPTIONAL capabilities (files, notify, email, buy, wallet, consent, trust) are passed in, because
+ *   what a road can offer genuinely differs — a scheduled run has no caller to notify, an MCP call
+ *   has no HTTP response to write a paywall refusal into. A capability the caller cannot offer is
+ *   simply absent, and the guest sees `undefined`, which is the contract ExtensionCtx already had.
+ * @structure
+ *   - ExtensionCtxDeps — what a caller must supply, and what it may
+ *   - buildExtensionCtx() — the core with guards applied, merged with the optional parts
+ *   - decodeBody() — the shared charset detection the three copies each had their own version of
+ * @usage
+ *   const ctx = buildExtensionCtx({ config, storage, extMemoryOwner, caller, extConfig, log, files });
+ *   await executeExtensionAction(script, ctx, …);
+ * @version-history
+ *   v1.1.0 — 2026-08-11 — sandboxLimits(): the memory/timeout/API-call arithmetic, which both doors
+ *     had written out themselves. The MCP copy used max(declared, cap), turning the node ceiling
+ *     into a floor.
+ *   v1.0.0 — 2026-08-10 — Initial (August 2026 audit step 4: one sandbox context, one set of guards).
+ */
+import { randomUUID } from 'node:crypto';
+import { enforceExtensionMemoryLimits } from './quota.js';
+import { extensionCrossNotify, safeNotificationLink } from './extension-notify.js';
+import { notify } from './notify.js';
+import { safeFetch } from '../utils/url-validator.js';
+import { parseGAII } from '../utils/gaii.js';
+import { logger } from '../utils/logger.js';
+/** How long one guest-initiated outbound call may take. Same ceiling every copy used. */
+const FETCH_TIMEOUT_MS = 30_000;
+/** Does the buffer contain a well-formed UTF-8 multibyte sequence? Used to overrule a charset label
+ *  that says otherwise, which is what a CDN doing its own transcoding leaves behind. */
+function looksLikeUtf8(buf) {
+    const bytes = new Uint8Array(buf);
+    for (let i = 0; i < bytes.length - 1; i++) {
+        if (bytes[i] >= 0xC2 && bytes[i] <= 0xDF && (bytes[i + 1] & 0xC0) === 0x80)
+            return true;
+        if (bytes[i] >= 0xE0 && bytes[i] <= 0xEF && i + 2 < bytes.length &&
+            (bytes[i + 1] & 0xC0) === 0x80 && (bytes[i + 2] & 0xC0) === 0x80)
+            return true;
+    }
+    return false;
+}
+/** Read a response body as text, honouring the charset from the header or the document prolog.
+ *  Extracted because each hand-built context carried its own copy and they had drifted: three had
+ *  the mislabelled-encoding guard below and the MCP one did not, so the same feed that reads
+ *  correctly over REST came back as mojibake through a tool call. */
+async function decodeBody(resp) {
+    const buf = await resp.arrayBuffer();
+    const ct = resp.headers.get('content-type') || '';
+    let charset = (/charset=([^\s;]+)/i.exec(ct)?.[1] ?? '').toLowerCase();
+    if (!charset) {
+        const peek = new TextDecoder('ascii').decode(buf.slice(0, 512));
+        const xml = /encoding=['"]([^'"]+)['"]/i.exec(peek)?.[1];
+        const meta = /<meta[^>]+charset=["']?([^\s"';>]+)/i.exec(peek)?.[1];
+        charset = (xml || meta || 'utf-8').toLowerCase();
+    }
+    // A document that declares latin-1 but carries valid UTF-8 bytes is mislabelled, not latin-1.
+    if (charset !== 'utf-8' && charset !== 'utf8' && looksLikeUtf8(buf))
+        charset = 'utf-8';
+    try {
+        return new TextDecoder(charset === 'utf8' ? 'utf-8' : charset).decode(buf);
+    }
+    catch {
+        // An unknown label is the document's problem, not a reason to fail the call: fall back to
+        // utf-8 and let the extension see the bytes it can.
+        logger.warn('extension ctx: unknown charset, decoding as utf-8', { charset });
+        return new TextDecoder('utf-8').decode(buf);
+    }
+}
+/**
+ * The wallet a sandboxed script may spend from: the caller's own balance and nobody else's.
+ *
+ * Two guards, and the MCP copy had neither of them at full strength: a non-positive or non-finite
+ * amount is refused (a negative one would MINT morsels rather than spend them), and a single call
+ * cannot exceed `extensionMaxDebitPerCall`. The HTTP door capped the per-call debit and the MCP door
+ * did not, so the same script spending through a tool call had no ceiling at all.
+ *
+ * hold, release and transfer are deliberately absent: an extension moves its caller's money forward,
+ * never anyone else's, and never in a way that outlives the call.
+ */
+export function buildExtensionWallet(deps) {
+    const { config, storage, callerGaii, extName, trackingScope } = deps;
+    const prefix = trackingScope ? `ext:${extName}:${trackingScope}` : `ext:${extName}`;
+    return {
+        consume: async (amount, reason) => {
+            if (!Number.isFinite(amount) || amount <= 0) {
+                throw new Error('INVALID_AMOUNT: consume amount must be a positive number');
+            }
+            if (amount > config.extensionMaxDebitPerCall) {
+                throw new Error(`DEBIT_LIMIT: max ${config.extensionMaxDebitPerCall} morsels per call`);
+            }
+            const debited = await storage.debitBalance(callerGaii, amount);
+            if (!debited)
+                return { success: false, error: 'Insufficient balance' };
+            await storage.addTransaction({
+                id: `ext-tx-${randomUUID()}`,
+                gaii: callerGaii,
+                type: 'extension_consume',
+                amount: -amount,
+                trackingCode: `${prefix}:${reason}`,
+                timestamp: new Date().toISOString(),
+            });
+            return { success: true };
+        },
+        getBalance: async () => {
+            const parsed = parseGAII(callerGaii);
+            if (!parsed)
+                return 0;
+            const ghii = await storage.getGHIIByOwner(parsed.owner);
+            return ghii?.morselBalance ?? 0;
+        },
+    };
+}
+/**
+ * The owner-facing notification capability: a record in the recipient's own `notifications.{owner}`
+ * key, plus the header bell and web push. `opts.to` hands off to the cross-owner path, which has its
+ * own consent check.
+ *
+ * The recipient differs by road and that difference is real: a request notifies its caller, a
+ * scheduled run notifies whoever installed the extension, because there is nobody else present.
+ */
+export function buildExtensionNotify(deps) {
+    const { storage, config, extName, recipientGaii, recipientOwner } = deps;
+    return async (message, opts) => {
+        if (opts?.to)
+            return extensionCrossNotify(storage, config, extName, opts.to, message, opts);
+        const key = `notifications.${recipientOwner}`;
+        const existing = await storage.getMemory(recipientGaii, key);
+        const list = Array.isArray(existing?.value) ? existing.value : [];
+        list.push({
+            id: randomUUID(),
+            message,
+            title: opts?.title || extName,
+            priority: opts?.priority || 'normal',
+            channel: opts?.channel || 'extension',
+            source: extName,
+            read: false,
+            createdAt: new Date().toISOString(),
+        });
+        const now = new Date().toISOString();
+        await storage.setMemory({
+            key, ownerGaii: recipientGaii, value: list.slice(-100),
+            visibility: 'private', tags: ['notifications'], ttlHours: null,
+            version: (existing?.version || 0) + 1,
+            createdAt: existing?.createdAt || now, updatedAt: now,
+        });
+        // Surface it where the owner actually looks. safeNotificationLink keeps a guest-supplied
+        // link on this node: the scheduler copy sidestepped that by ignoring opts.link entirely,
+        // which was safe but meant a scheduled notification could not deep-link anywhere.
+        const recipientGhii = recipientOwner.includes('@') ? recipientOwner : `${recipientOwner}@${config.nodeId}`;
+        void notify(storage, recipientGhii, {
+            type: 'extension', title: opts?.title || extName, body: message,
+            link: safeNotificationLink(config, opts?.link, '/v1/profile?tab=extensions'),
+        });
+        return true;
+    };
+}
+/**
+ * The tiered email capability, which is the one place a sandboxed script can reach a stranger.
+ * Three ways to be allowed, checked in this order:
+ *   Tier 2 — the operator set `emailPolicy: 'unrestricted'` on this extension's config. Only the
+ *            operator can write that, and manifest config strips `__` keys, so a guest cannot.
+ *   Tier 0 — the recipient IS the owner's own verified notification address.
+ *   Tier 1 — the owner granted an `extension_email` consent naming this extension.
+ * Anything else is refused and logged. Written once here because it was written three times before,
+ * and a rule about who may be emailed is not a thing to keep re-deriving.
+ */
+export function buildExtensionEmail(deps) {
+    const { storage, config, extName, extConfig, ownerName, emailService } = deps;
+    return async (to, subject, body) => {
+        if (!emailService?.enabled) {
+            logger.warn(`[ext:${extName}] Email not available (SMTP not configured)`);
+            return false;
+        }
+        if (extConfig?.emailPolicy === 'unrestricted') {
+            return emailService.sendNotification(to, subject, body);
+        }
+        const ownerGhii = ownerName.includes('@') ? ownerName : `${ownerName}@${config.nodeId}`;
+        const ghiiRec = await storage.getGHII(ownerGhii);
+        if (ghiiRec?.notificationEmail === to && ghiiRec.emailVerifiedAt) {
+            return emailService.sendNotification(to, subject, body);
+        }
+        const consents = await storage.listConsents(ownerGhii, { status: 'active' });
+        if (consents.some(c => c.purpose === 'extension_email' && c.dataPattern === `ext:${extName}`)) {
+            return emailService.sendNotification(to, subject, body);
+        }
+        logger.warn(`[ext:${extName}] Email blocked: no authorization for recipient`);
+        return false;
+    };
+}
+/** An email capability for a road that genuinely cannot send one. Returns false rather than being
+ *  absent, so a script that calls `ctx.email(…)` gets the answer it always got instead of a
+ *  TypeError. MCP uses this. */
+export function unavailableEmail(extName, reason) {
+    return async () => {
+        logger.warn(`[ext:${extName}] Email not available (${reason})`);
+        return false;
+    };
+}
+/**
+ * How much memory, time and outbound calls one action may have. The declared numbers are a request,
+ * the node's configured maxima are the answer, and the small floors keep a manifest that asks for
+ * nothing from getting a sandbox too small to start in.
+ *
+ * The order of min and max is the whole point. The MCP door computed max(declared, cap), which turns
+ * the node ceiling into a FLOOR: an extension declaring a 60-second timeout got 60 seconds, and every
+ * extension got at least the node maximum memory and API budget. Written once here so the ceiling
+ * stays a ceiling on every road into the sandbox.
+ */
+export function sandboxLimits(declared, config) {
+    return {
+        memoryMb: Math.min(Math.max(declared.memoryMb, 16), config.extensionMaxMemoryMb),
+        timeoutMs: Math.min(Math.max(declared.timeoutMs, 1000), config.extensionTimeoutMs),
+        maxApiCalls: Math.min(Math.max(declared.maxApiCalls, 10), config.extensionMaxApiCalls),
+    };
+}
+/**
+ * Build the sandbox context. The three capabilities in the core are the ones that carry a guard, and
+ * they are built here precisely so no road can be given a context without them.
+ */
+export function buildExtensionCtx(deps) {
+    const { config, storage, extMemoryOwner, logPrefix } = deps;
+    const ctx = {
+        memory: {
+            get: async (key) => {
+                const record = await storage.getMemory(extMemoryOwner, key);
+                return record ? record.value : null;
+            },
+            // GUARD (June H-5): the per-value size and per-key count limits. Enforcing this only in
+            // the REST wrapper left the scheduler able to fill the database on a clock, repeatably,
+            // which is why it belongs to the context and not to the caller.
+            set: async (key, value, opts) => {
+                await enforceExtensionMemoryLimits(config, storage, extMemoryOwner, key, value);
+                const existing = await storage.getMemory(extMemoryOwner, key);
+                const now = new Date().toISOString();
+                await storage.setMemory({
+                    key,
+                    ownerGaii: extMemoryOwner,
+                    value,
+                    // Default 'public' is the historical contract every extension was written
+                    // against; 'private' is opt-in for a key holding somebody's personal data.
+                    visibility: opts?.visibility === 'private' ? 'private' : 'public',
+                    tags: [],
+                    ttlHours: null,
+                    version: existing ? existing.version + 1 : 1,
+                    createdAt: existing ? existing.createdAt : now,
+                    updatedAt: now,
+                });
+            },
+            search: async (prefix) => {
+                const records = await storage.listMemory(extMemoryOwner, { prefix });
+                return records.map(r => ({ key: r.key, value: r.value }));
+            },
+            delete: async (key) => storage.deleteMemory(extMemoryOwner, key),
+            getPublic: async (namespace, key) => {
+                let record = await storage.getMemory(namespace, key);
+                // A bare owner name resolves through that owner's agents. One IN query rather than
+                // one lookup per agent: the per-agent loop was the older shape and it is still in
+                // the scheduler copy this builder replaces.
+                if (!record && !namespace.includes('@') && !namespace.includes('#') && !namespace.startsWith('ext:')) {
+                    const agents = await storage.getAgentsByOwner(namespace);
+                    const rows = await storage.listMemoryForOwners(agents.map(a => a.gaii), { prefix: key });
+                    const byGaii = new Map(rows.filter(r => r.key === key).map(r => [r.ownerGaii, r]));
+                    for (const agent of agents) {
+                        const r = byGaii.get(agent.gaii);
+                        if (r) {
+                            record = r;
+                            break;
+                        }
+                    }
+                }
+                // An ext: namespace is world-readable by design, so only 'public' leaves it.
+                return (record && record.visibility === 'public') ? record.value : null;
+            },
+        },
+        // GUARD (June H-3): safeFetch validates the URL and re-validates every redirect hop. A bare
+        // fetch here is an SSRF hole with a script the owner installed on the other end of it, and
+        // the scheduler copy had exactly that.
+        fetch: async (url, opts) => {
+            const resp = await safeFetch(url, {
+                method: opts?.method || 'GET',
+                headers: opts?.headers,
+                body: opts?.body,
+                signal: AbortSignal.timeout(FETCH_TIMEOUT_MS),
+            });
+            const text = await decodeBody(resp);
+            const headers = {};
+            resp.headers.forEach((v, k) => { headers[k] = v; });
+            return { status: resp.status, ok: resp.ok, text, headers };
+        },
+        caller: deps.caller,
+        config: deps.extConfig,
+        // A wallet is per-road: a request can spend the caller's balance, a scheduled run has
+        // nobody's balance to spend, so it gets the empty object it always had.
+        wallet: deps.wallet ?? {},
+        // consent and trust were byte-identical in all four copies and have no per-road variance.
+        consent: {
+            check: async (gaii, scope) => {
+                const consents = await storage.listConsents(gaii, { status: 'active' });
+                return consents.some(c => c.purpose === scope);
+            },
+            require: async (gaii, scope) => {
+                const consents = await storage.listConsents(gaii, { status: 'active' });
+                if (!consents.some(c => c.purpose === scope)) {
+                    throw new Error(`CONSENT_REQUIRED: ${scope}`);
+                }
+            },
+        },
+        trust: {
+            getScore: async (gaii) => {
+                const agent = await storage.getAgent(gaii);
+                return agent?.trustScore ?? 0;
+            },
+        },
+        log: {
+            info: (msg, data) => logger.info(`${logPrefix} ${msg}`, data),
+            warn: (msg, data) => logger.warn(`${logPrefix} ${msg}`, data),
+            error: (msg, data) => logger.error(`${logPrefix} ${msg}`, data),
+        },
+    };
+    // Optional capabilities: attached only when the caller can honestly provide them, so the guest
+    // sees `undefined` rather than a function that fails at the far end.
+    if (deps.instance)
+        ctx.instance = deps.instance;
+    if (deps.files)
+        ctx.files = deps.files;
+    if (deps.buy)
+        ctx.buy = deps.buy;
+    if (deps.notify)
+        ctx.notify = deps.notify;
+    if (deps.email)
+        ctx.email = deps.email;
+    return ctx;
+}
+//# sourceMappingURL=extension-ctx.js.map

package/dist/src/services/extension-ctx.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"extension-ctx.js","sourceRoot":"","sources":["../../../src/services/extension-ctx.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAKzC,OAAO,EAAE,4BAA4B,EAAE,MAAM,YAAY,CAAC;AAC1D,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AACnF,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AACtD,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAE5C,yFAAyF;AACzF,MAAM,gBAAgB,GAAG,MAAM,CAAC;AAwBhC;wFACwF;AACxF,SAAS,aAAa,CAAC,GAAgB;IACnC,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC;IAClC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QACxC,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QACxF,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM;YAC5D,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;IACtF,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC;AAED;;;qEAGqE;AACrE,KAAK,UAAU,UAAU,CAAC,IAA+D;IACrF,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;IACrC,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;IAClD,IAAI,OAAO,GAAG,CAAC,oBAAoB,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACvE,IAAI,CAAC,OAAO,EAAE,CAAC;QACX,MAAM,IAAI,GAAG,IAAI,WAAW,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QAChE,MAAM,GAAG,GAAG,4BAA4B,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACzD,MAAM,IAAI,GAAG,sCAAsC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACpE,OAAO,GAAG,CAAC,GAAG,IAAI,IAAI,IAAI,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;IACrD,CAAC;IACD,8FAA8F;IAC9F,IAAI,OAAO,KAAK,OAAO,IAAI,OAAO,KAAK,MAAM,IAAI,aAAa,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,OAAO,CAAC;IACvF,IAAI,CAAC;QACD,OAAO,IAAI,WAAW,CAAC,OAAO,KAAK,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC/E,CAAC;IAAC,MAAM,CAAC;QACL,0FAA0F;QAC1F,oDAAoD;QACpD,MAAM,CAAC,IAAI,CAAC,mDAAmD,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;QAC9E,OAAO,IAAI,WAAW,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAChD,CAAC;AACL,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAQpC;IACG,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,aAAa,EAAE,GAAG,IAAI,CAAC;IACrE,MAAM,MAAM,GAAG,aAAa,CAAC,CAAC,CAAC,OAAO,OAAO,IAAI,aAAa,EAAE,CAAC,CAAC,CAAC,OAAO,OAAO,EAAE,CAAC;IACpF,OAAO;QACH,OAAO,EAAE,KAAK,EAAE,MAAc,EAAE,MAAc,EAAE,EAAE;YAC9C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,EAAE,CAAC;gBAC1C,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;YAChF,CAAC;YACD,IAAI,MAAM,GAAG,MAAM,CAAC,wBAAwB,EAAE,CAAC;gBAC3C,MAAM,IAAI,KAAK,CAAC,oBAAoB,MAAM,CAAC,wBAAwB,mBAAmB,CAAC,CAAC;YAC5F,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;YAC/D,IAAI,CAAC,OAAO;gBAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC;YACvE,MAAM,OAAO,CAAC,cAAc,CAAC;gBACzB,EAAE,EAAE,UAAU,UAAU,EAAE,EAAE;gBAC5B,IAAI,EAAE,UAAU;gBAChB,IAAI,EAAE,mBAAmB;gBACzB,MAAM,EAAE,CAAC,MAAM;gBACf,YAAY,EAAE,GAAG,MAAM,IAAI,MAAM,EAAE;gBACnC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACtC,CAAC,CAAC;YACH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC7B,CAAC;QACD,UAAU,EAAE,KAAK,IAAI,EAAE;YACnB,MAAM,MAAM,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;YACrC,IAAI,CAAC,MAAM;gBAAE,OAAO,CAAC,CAAC;YACtB,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACxD,OAAO,IAAI,EAAE,aAAa,IAAI,CAAC,CAAC;QACpC,CAAC;KACJ,CAAC;AACN,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAQpC;IACG,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,GAAG,IAAI,CAAC;IACzE,OAAO,KAAK,EAAE,OAAO,EAAE,IAA0F,EAAE,EAAE;QACjH,IAAI,IAAI,EAAE,EAAE;YAAE,OAAO,oBAAoB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;QAE5F,MAAM,GAAG,GAAG,iBAAiB,cAAc,EAAE,CAAC;QAC9C,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC;QAC7D,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,CAAE,QAAQ,CAAC,KAAmB,CAAC,CAAC,CAAC,EAAE,CAAC;QACjF,IAAI,CAAC,IAAI,CAAC;YACN,EAAE,EAAE,UAAU,EAAE;YAChB,OAAO;YACP,KAAK,EAAE,IAAI,EAAE,KAAK,IAAI,OAAO;YAC7B,QAAQ,EAAE,IAAI,EAAE,QAAQ,IAAI,QAAQ;YACpC,OAAO,EAAE,IAAI,EAAE,OAAO,IAAI,WAAW;YACrC,MAAM,EAAE,OAAO;YACf,IAAI,EAAE,KAAK;YACX,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACtC,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,MAAM,OAAO,CAAC,SAAS,CAAC;YACpB,GAAG,EAAE,SAAS,EAAE,aAAa,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC;YACtD,UAAU,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,eAAe,CAAC,EAAE,QAAQ,EAAE,IAAI;YAC9D,OAAO,EAAE,CAAC,QAAQ,EAAE,OAAO,IAAI,CAAC,CAAC,GAAG,CAAC;YACrC,SAAS,EAAE,QAAQ,EAAE,SAAS,IAAI,GAAG,EAAE,SAAS,EAAE,GAAG;SACxD,CAAC,CAAC;QAEH,yFAAyF;QACzF,yFAAyF;QACzF,kFAAkF;QAClF,MAAM,aAAa,GAAG,cAAc,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,GAAG,cAAc,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAC3G,KAAK,MAAM,CAAC,OAAO,EAAE,aAAa,EAAE;YAChC,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,IAAI,OAAO,EAAE,IAAI,EAAE,OAAO;YAC/D,IAAI,EAAE,oBAAoB,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,4BAA4B,CAAC;SAC/E,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IAChB,CAAC,CAAC;AACN,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAQnC;IACG,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,GAAG,IAAI,CAAC;IAC9E,OAAO,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;QAC/B,IAAI,CAAC,YAAY,EAAE,OAAO,EAAE,CAAC;YACzB,MAAM,CAAC,IAAI,CAAC,QAAQ,OAAO,6CAA6C,CAAC,CAAC;YAC1E,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,IAAI,SAAS,EAAE,WAAW,KAAK,cAAc,EAAE,CAAC;YAC5C,OAAO,YAAY,CAAC,gBAAgB,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;QAC5D,CAAC;QACD,MAAM,SAAS,GAAG,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,SAAS,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QACxF,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACjD,IAAI,OAAO,EAAE,iBAAiB,KAAK,EAAE,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;YAC/D,OAAO,YAAY,CAAC,gBAAgB,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;QAC5D,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC7E,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,iBAAiB,IAAI,CAAC,CAAC,WAAW,KAAK,OAAO,OAAO,EAAE,CAAC,EAAE,CAAC;YAC5F,OAAO,YAAY,CAAC,gBAAgB,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;QAC5D,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,QAAQ,OAAO,iDAAiD,CAAC,CAAC;QAC9E,OAAO,KAAK,CAAC;IACjB,CAAC,CAAC;AACN,CAAC;AAED;;gCAEgC;AAChC,MAAM,UAAU,gBAAgB,CAAC,OAAe,EAAE,MAAc;IAC5D,OAAO,KAAK,IAAI,EAAE;QACd,MAAM,CAAC,IAAI,CAAC,QAAQ,OAAO,0BAA0B,MAAM,GAAG,CAAC,CAAC;QAChE,OAAO,KAAK,CAAC;IACjB,CAAC,CAAC;AACN,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,aAAa,CACzB,QAAsE,EACtE,MAAoB;IAEpB,OAAO;QACH,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE,CAAC,EAAE,MAAM,CAAC,oBAAoB,CAAC;QAChF,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,kBAAkB,CAAC;QAClF,WAAW,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC,EAAE,MAAM,CAAC,oBAAoB,CAAC;KACzF,CAAC;AACN,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAsB;IACpD,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC;IAE5D,MAAM,GAAG,GAAiB;QACtB,MAAM,EAAE;YACJ,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;gBACf,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC;gBAC5D,OAAO,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;YACxC,CAAC;YAED,wFAAwF;YACxF,wFAAwF;YACxF,gEAAgE;YAChE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBAC5B,MAAM,4BAA4B,CAAC,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;gBAChF,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC;gBAC9D,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;gBACrC,MAAM,OAAO,CAAC,SAAS,CAAC;oBACpB,GAAG;oBACH,SAAS,EAAE,cAAc;oBACzB,KAAK;oBACL,0EAA0E;oBAC1E,2EAA2E;oBAC3E,UAAU,EAAE,IAAI,EAAE,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ;oBACjE,IAAI,EAAE,EAAE;oBACR,QAAQ,EAAE,IAAI;oBACd,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;oBAC5C,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG;oBAC9C,SAAS,EAAE,GAAG;iBACjB,CAAC,CAAC;YACP,CAAC;YAED,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;gBACrB,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;gBACrE,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YAC9D,CAAC;YAED,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC,cAAc,EAAE,GAAG,CAAC;YAEhE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE;gBAChC,IAAI,MAAM,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;gBACrD,mFAAmF;gBACnF,kFAAkF;gBAClF,4CAA4C;gBAC5C,IAAI,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;oBACnG,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;oBACzD,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,mBAAmB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;oBACzF,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;oBACnF,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;wBACzB,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;wBACjC,IAAI,CAAC,EAAE,CAAC;4BAAC,MAAM,GAAG,CAAC,CAAC;4BAAC,MAAM;wBAAC,CAAC;oBACjC,CAAC;gBACL,CAAC;gBACD,6EAA6E;gBAC7E,OAAO,CAAC,MAAM,IAAI,MAAM,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;YAC5E,CAAC;SACJ;QAED,4FAA4F;QAC5F,2FAA2F;QAC3F,uCAAuC;QACvC,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;YACvB,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE;gBAC9B,MAAM,EAAE,IAAI,EAAE,MAAM,IAAI,KAAK;gBAC7B,OAAO,EAAE,IAAI,EAAE,OAAO;gBACtB,IAAI,EAAE,IAAI,EAAE,IAAI;gBAChB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,gBAAgB,CAAC;aAChD,CAAC,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC;YACpC,MAAM,OAAO,GAA2B,EAAE,CAAC;YAC3C,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACpD,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QAC/D,CAAC;QAED,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,MAAM,EAAE,IAAI,CAAC,SAAS;QAEtB,sFAAsF;QACtF,wEAAwE;QACxE,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,EAAE;QAEzB,0FAA0F;QAC1F,OAAO,EAAE;YACL,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE;gBACzB,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;gBACxE,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,KAAK,CAAC,CAAC;YACnD,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE;gBAC3B,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;gBACxE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,KAAK,CAAC,EAAE,CAAC;oBAC3C,MAAM,IAAI,KAAK,CAAC,qBAAqB,KAAK,EAAE,CAAC,CAAC;gBAClD,CAAC;YACL,CAAC;SACJ;QACD,KAAK,EAAE;YACH,QAAQ,EAAE,KAAK,EAAE,IAAY,EAAE,EAAE;gBAC7B,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;gBAC3C,OAAO,KAAK,EAAE,UAAU,IAAI,CAAC,CAAC;YAClC,CAAC;SACJ;QAED,GAAG,EAAE;YACD,IAAI,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,SAAS,IAAI,GAAG,EAAE,EAAE,IAAI,CAAC;YAC7D,IAAI,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,SAAS,IAAI,GAAG,EAAE,EAAE,IAAI,CAAC;YAC7D,KAAK,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,SAAS,IAAI,GAAG,EAAE,EAAE,IAAI,CAAC;SAClE;KACJ,CAAC;IAEF,+FAA+F;IAC/F,qEAAqE;IACrE,IAAI,IAAI,CAAC,QAAQ;QAAE,GAAG,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;IAChD,IAAI,IAAI,CAAC,KAAK;QAAE,GAAG,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;IACvC,IAAI,IAAI,CAAC,GAAG;QAAE,GAAG,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;IACjC,IAAI,IAAI,CAAC,MAAM;QAAE,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IAC1C,IAAI,IAAI,CAAC,KAAK;QAAE,GAAG,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;IAEvC,OAAO,GAAG,CAAC;AACf,CAAC"}

package/dist/src/services/extension-lifecycle.d.ts

@@ -0,0 +1,109 @@
+/**
+ * @file src/services/extension-lifecycle.ts
+ * @description The write half of an extension's life: storing an install or a redeploy, switching one
+ *   on, switching it off, and removing it together with everything it left behind.
+ *
+ *   Two doors do all four. Over HTTP that is POST/PUT /v1/extensions plus the activate, deactivate
+ *   and DELETE routes in routes/extensions/crud.ts; over MCP it is the aimeat_extension_* tools in
+ *   mcp/extensions.ts. Manifest validation was already shared (routes/extensions/manifest.ts) and the
+ *   in-place code swap was already shared (extension-upsert.ts). Everything around those two stayed
+ *   copied, and the copies had stopped being the same code:
+ *
+ *   - Deleting over MCP removed the row and nothing else. The HTTP door removes the extension's
+ *     scheduled jobs first, then empties its `ext:{name}` namespace and every `ext:{name}.{instance}`
+ *     namespace beside it. So an extension uninstalled by an agent left cron jobs registered against
+ *     a name that no longer resolved, and left its stored data unreachable while it still counted
+ *     against the node.
+ *   - Activating over MCP wrote the status field. The HTTP door also registers the schedules the
+ *     manifest declares and runs the extension's `@activate` jobs, which is what makes a scheduled
+ *     extension start running at all. Switched on by an agent, it never started its clock.
+ *   - Deactivating over MCP wrote the status field and left the scheduled jobs registered, so a
+ *     switched-off extension kept firing on its cron.
+ *   - Installing over MCP prepared secrets with prepareSecretConfigForWrite, which carries a stored
+ *     secret forward when the new manifest omits its value; PUT called encryptSecretFields directly,
+ *     which does not. The same redeploy kept a secret through one door and erased it through the
+ *     other.
+ *
+ *   None of those failed loudly. That is the shape of this class of bug: the surface answers with the
+ *   record it wrote, and the part that did not happen stays invisible until somebody asks why the
+ *   schedule stopped or where the data went.
+ * @structure
+ *   - writeExtensionRecord() — create or upsert: quota, secret preparation, idempotency, projection
+ *   - activateExtension() — status, schedule registration from the manifest, @activate jobs
+ *   - deactivateExtension() — status, schedule removal
+ *   - uninstallExtension() — schedules, `ext:` and instance memory, then the row
+ * @usage
+ *   const out = await writeExtensionRecord({ storage, config, scheduler }, record,
+ *     { existing, ownerName, actor, isOperator });
+ *   if (!out.ok) return refuse(out.code, out.message);
+ * @version-history
+ *   v1.0.0 — 2026-08-11 — Extracted in the August 2026 one-capability-one-implementation audit,
+ *     after the MCP tools were found writing extensions through storage directly.
+ */
+import type { AimeatConfig } from '../config.js';
+import type { Storage, ExtensionRecord } from '../storage/interface.js';
+import type { Scheduler } from './scheduler.js';
+export interface ExtensionLifecycleDeps {
+    storage: Storage;
+    config: AimeatConfig;
+    /** Absent on a door with no scheduler wired; then schedules are neither registered nor removed. */
+    scheduler?: Scheduler | null;
+}
+export interface ExtensionWriteContext {
+    /**
+     * The stored record this write lands on, or null for a fresh install. Both doors already read it
+     * to decide whether the caller may write here, so it is passed in rather than read twice: the
+     * permission decision and the write must be made about the same row.
+     */
+    existing: ExtensionRecord | null;
+    /** The bare owner name of the caller, for the per-owner install ceiling. */
+    ownerName: string;
+    /** Who is recorded as having created re-registered schedule jobs. */
+    actor: string;
+    /** Operators bypass the per-owner ceiling and not the node-wide one. */
+    isOperator: boolean;
+}
+export type ExtensionWriteOutcome = {
+    ok: true;
+    record: ExtensionRecord;
+    action: 'installed' | 'updated' | 'unchanged';
+    reinitialized: boolean;
+} | {
+    ok: false;
+    status: number;
+    code: string;
+    message: string;
+};
+/**
+ * Store a validated extension record: create it, or replace an installed one in place.
+ *
+ * The caller owns the policy above this — whether an existing name may be replaced at all (POST
+ * refuses, PUT allows, the MCP tool wants `update: true`) and who is allowed to write here. This owns
+ * what happens once that is settled: the install ceilings, secret handling, the no-op shortcut, the
+ * swap and the EXCHANGE re-projection.
+ *
+ * Mutates `record.config` in place with the storage-ready value, as both doors always have.
+ */
+export declare function writeExtensionRecord(deps: ExtensionLifecycleDeps, record: ExtensionRecord, ctx: ExtensionWriteContext): Promise<ExtensionWriteOutcome>;
+/**
+ * Switch an extension on.
+ *
+ * Three things, not one: the status field, the schedules the manifest declares, and the `@activate`
+ * jobs that do an extension's first run. An extension whose status says active but whose schedules
+ * were never registered looks installed and working and does nothing on its clock.
+ *
+ * `ext` is the record as stored BEFORE the update, because its config carries the `__schedules` this
+ * reads. Returns the updated record, or null when the row went away underneath.
+ */
+export declare function activateExtension(deps: ExtensionLifecycleDeps, ext: ExtensionRecord, actor: string): Promise<ExtensionRecord | null>;
+/** Switch an extension off, and stop its clock with it. */
+export declare function deactivateExtension(deps: ExtensionLifecycleDeps, name: string): Promise<ExtensionRecord | null>;
+/**
+ * Remove an extension and everything it accumulated: its scheduled jobs, its `ext:{name}` memory, and
+ * the `ext:{name}.{instanceId}` memory of each of its instances.
+ *
+ * The row alone is not the extension. A job left registered fires against a name that no longer
+ * resolves, and a namespace left behind is data nobody can reach and nobody can list.
+ */
+export declare function uninstallExtension(deps: ExtensionLifecycleDeps, name: string): Promise<boolean>;
+//# sourceMappingURL=extension-lifecycle.d.ts.map

package/dist/src/services/extension-lifecycle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"extension-lifecycle.d.ts","sourceRoot":"","sources":["../../../src/services/extension-lifecycle.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AACH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,KAAK,EAAE,OAAO,EAAE,eAAe,EAAsB,MAAM,yBAAyB,CAAC;AAC5F,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAUhD,MAAM,WAAW,sBAAsB;IACnC,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,YAAY,CAAC;IACrB,mGAAmG;IACnG,SAAS,CAAC,EAAE,SAAS,GAAG,IAAI,CAAC;CAChC;AAED,MAAM,WAAW,qBAAqB;IAClC;;;;OAIG;IACH,QAAQ,EAAE,eAAe,GAAG,IAAI,CAAC;IACjC,4EAA4E;IAC5E,SAAS,EAAE,MAAM,CAAC;IAClB,qEAAqE;IACrE,KAAK,EAAE,MAAM,CAAC;IACd,wEAAwE;IACxE,UAAU,EAAE,OAAO,CAAC;CACvB;AAED,MAAM,MAAM,qBAAqB,GAC3B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,eAAe,CAAC;IAAC,MAAM,EAAE,WAAW,GAAG,SAAS,GAAG,WAAW,CAAC;IAAC,aAAa,EAAE,OAAO,CAAA;CAAE,GAC5G;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAoBnE;;;;;;;;;GASG;AACH,wBAAsB,oBAAoB,CACtC,IAAI,EAAE,sBAAsB,EAC5B,MAAM,EAAE,eAAe,EACvB,GAAG,EAAE,qBAAqB,GAC3B,OAAO,CAAC,qBAAqB,CAAC,CAwDhC;AASD;;;;;;;;;GASG;AACH,wBAAsB,iBAAiB,CACnC,IAAI,EAAE,sBAAsB,EAC5B,GAAG,EAAE,eAAe,EACpB,KAAK,EAAE,MAAM,GACd,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CA4CjC;AAED,2DAA2D;AAC3D,wBAAsB,mBAAmB,CACrC,IAAI,EAAE,sBAAsB,EAC5B,IAAI,EAAE,MAAM,GACb,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAKjC;AAED;;;;;;GAMG;AACH,wBAAsB,kBAAkB,CACpC,IAAI,EAAE,sBAAsB,EAC5B,IAAI,EAAE,MAAM,GACb,OAAO,CAAC,OAAO,CAAC,CA6BlB"}