donguri-journal 0.1.0

package/dist/modules/core.js

@@ -0,0 +1,386 @@
+/**
+ * Core module — registers the built-in tools (capture / query / recall / review
+ * / patterns / reindex / originals / management). It is just another
+ * `JournalModule`; opt-in modules register the same way.
+ */
+import { statSync } from "node:fs";
+import { z } from "zod";
+import { errorResult, jsonResult } from "../kernel/result.js";
+import { surfacePatterns } from "../review/patterns.js";
+import { generateReview } from "../review/review.js";
+/** Decode strict, canonical base64; returns null for malformed input. */
+function decodeBase64Strict(input) {
+    const cleaned = input.replace(/\s+/g, "");
+    if (cleaned.length === 0 || cleaned.length % 4 !== 0 || !/^[A-Za-z0-9+/]*={0,2}$/.test(cleaned)) {
+        return null;
+    }
+    const buf = Buffer.from(cleaned, "base64");
+    return buf.toString("base64") === cleaned ? buf : null;
+}
+/** Result with an optional PNG chart followed by the structured JSON payload. */
+function richResult(png, payload) {
+    const content = [];
+    if (png) {
+        content.push({ type: "image", data: png.toString("base64"), mimeType: "image/png" });
+    }
+    content.push({ type: "text", text: JSON.stringify(payload, null, 2) });
+    return { content };
+}
+export const coreModule = {
+    id: "core",
+    register(ctx) {
+        const { server, store, originals, config } = ctx;
+        server.registerTool("capture", {
+            title: "Capture a memory (stash an acorn)",
+            description: "Stash something into the user's long-term journal memory. Call this PROACTIVELY and " +
+                "with low friction whenever the user shares something worth remembering — a thought, an " +
+                "event, a decision, a link, a photo, a voice note — without interrogating them for " +
+                "details. For images / audio / URLs, YOU (the multimodal model) extract a faithful text " +
+                "description and pass it as `body`; this server does not process media. Put a pointer to " +
+                "the original (file path / URL) in `original_ref`. When the user shares an actual file " +
+                "(an attached image, an audio clip), ALSO send the raw bytes as base64 in `original_data` " +
+                "(with `original_mime` / `original_filename`): the server stores the verbatim original " +
+                "locally and sets `original_ref` for you, so it can be re-viewed later via get_original. " +
+                "Set `occurred_at` when the event happened at a different time than now (e.g. 'yesterday', " +
+                "'last week'); otherwise it defaults to the capture time. Identical captures are " +
+                "de-duplicated automatically.",
+            inputSchema: {
+                body: z
+                    .string()
+                    .min(1)
+                    .describe("The text to index and recall later. For non-text sources, this is your faithful " +
+                    "extracted description/transcript of the original."),
+                source_kind: z
+                    .enum(["text", "image", "audio", "url", "note"])
+                    .optional()
+                    .describe("What the memory originated from. Defaults to 'text'."),
+                original_ref: z
+                    .string()
+                    .optional()
+                    .describe("Pointer to an externally-held original (file path or URL). Omit when sending " +
+                    "`original_data` — the server fills this in with the stored reference."),
+                original_data: z
+                    .string()
+                    .optional()
+                    .describe("Base64-encoded raw bytes of the original artifact (image/audio/file). When present, " +
+                    "the server saves it verbatim and overwrites `original_ref` with the stored ref."),
+                original_mime: z
+                    .string()
+                    .optional()
+                    .describe("MIME type of `original_data`, e.g. 'image/png', 'audio/mpeg'."),
+                original_filename: z
+                    .string()
+                    .optional()
+                    .describe("Optional original filename; used to pick the stored file extension."),
+                extraction_state: z
+                    .enum(["verbatim", "llm_extracted"])
+                    .optional()
+                    .describe("'verbatim' when `body` is the original text; 'llm_extracted' when you derived it " +
+                    "from media/a URL (lossy, may be re-extracted later). Defaults to 'verbatim'."),
+                tags: z.array(z.string()).optional().describe("Optional labels for structured lookup."),
+                meta: z
+                    .record(z.unknown())
+                    .optional()
+                    .describe("Optional structured metadata (e.g. mood, location, people)."),
+                occurred_at: z
+                    .string()
+                    .datetime({ offset: true })
+                    .optional()
+                    .describe("ISO-8601 timestamp (e.g. 2026-06-20T09:00:00Z) of when the event actually " +
+                    "happened, if different from now. Must include a time so range queries stay correct."),
+            },
+        }, async (args) => {
+            const { original_data, original_mime, original_filename, ...entry } = args;
+            if (!original_data || original_data.length === 0) {
+                // Text-only capture (or an external original_ref passed through as-is).
+                return jsonResult(await store.insert(entry));
+            }
+            // Coarse guard avoids decoding an absurd payload; the exact size check is
+            // on the decoded length, so a valid base64 right at the limit is not
+            // over-rejected.
+            const tooLarge = errorResult(`original_data exceeds the maximum allowed size (${config.maxOriginalBytes} bytes)`);
+            if (original_data.length > config.maxOriginalBytes * 2) {
+                return tooLarge;
+            }
+            const bytes = decodeBase64Strict(original_data);
+            if (!bytes) {
+                return errorResult("original_data is not valid base64");
+            }
+            if (bytes.length > config.maxOriginalBytes) {
+                return tooLarge;
+            }
+            // Insert the entry FIRST, then save + attach the original, so a dedupe
+            // (or an insert failure) can never leave a saved-but-unreferenced original.
+            entry.original_ref = undefined;
+            const result = await store.insert(entry);
+            const existingRef = result.deduped ? store.getOriginalRef(result.id) : null;
+            if (existingRef) {
+                return jsonResult({ ...result, original_ref: existingRef });
+            }
+            const saved = await originals.save({
+                data: bytes,
+                mime: original_mime,
+                filename: original_filename,
+            });
+            const attached = store.attachOriginalIfAbsent(result.id, saved.ref);
+            if (attached) {
+                return jsonResult({ ...result, original_ref: saved.ref });
+            }
+            // Not attached: either the row already had an original (return that), or
+            // the row vanished between insert and save — report honestly rather than
+            // claim a ref we didn't store. The unreferenced content-addressed blob is
+            // left for a future orphan sweep (never wrongly deleted, as it may be shared).
+            const existing = store.getOriginalRef(result.id);
+            if (existing) {
+                return jsonResult({ ...result, original_ref: existing });
+            }
+            return errorResult("The entry was removed before its original could be attached.");
+        });
+        server.registerTool("query_entries", {
+            title: "Query entries by time / tag / kind",
+            description: "Structured lookup over the journal for PRECISE, filterable questions: a date or date " +
+                "range, a tag, a source kind. Use this for 'what did I write last week', 'show my notes " +
+                "tagged work', BuJo-style weekly/monthly reviews — anything answerable by filters rather " +
+                "than meaning. Choose `time_field`: 'created_at' (when captured) or 'occurred_at' (when " +
+                "the event happened). For meaning-based 'have I thought about X before' questions, use " +
+                "recall_related instead.",
+            inputSchema: {
+                since: z
+                    .string()
+                    .datetime({ offset: true })
+                    .optional()
+                    .describe("ISO-8601 timestamp; lower bound (inclusive)."),
+                until: z
+                    .string()
+                    .datetime({ offset: true })
+                    .optional()
+                    .describe("ISO-8601 timestamp; upper bound (inclusive)."),
+                source_kind: z.string().optional().describe("Filter by source kind."),
+                tag: z.string().optional().describe("Filter to entries carrying this tag."),
+                time_field: z
+                    .enum(["created_at", "occurred_at"])
+                    .optional()
+                    .describe("Which timestamp to filter and sort by. Defaults to 'created_at'."),
+                limit: z.number().int().optional().describe("Max rows (1-500, default 50)."),
+            },
+        }, async (args) => {
+            const entries = store.query(args);
+            return jsonResult({ count: entries.length, entries });
+        });
+        server.registerTool("recall_related", {
+            title: "Recall related memories (dig up acorns)",
+            description: "Semantic search: find past entries related in MEANING to a query, even with different " +
+                "wording. Call this PROACTIVELY when the user reflects, wonders, or revisits a topic " +
+                "('have I felt this before?', 'what was that idea about...') so you can surface relevant " +
+                "past memories. For exact date/tag filtering use query_entries instead. Results are " +
+                "ordered by similarity (smaller `distance` = closer).",
+            inputSchema: {
+                query: z.string().min(1).describe("Natural-language description of what to recall."),
+                k: z
+                    .number()
+                    .int()
+                    .optional()
+                    .describe("How many neighbours to return (1-100, default 10)."),
+            },
+        }, async (args) => {
+            const hits = await store.recall(args.query, args.k);
+            return jsonResult({ count: hits.length, hits });
+        });
+        server.registerTool("generate_review", {
+            title: "Generate a time-window review",
+            description: "Produce a reflective review of a period — call this when the user wants to look back " +
+                "('how was my week?', 'review this month', daily/weekly/monthly check-ins, BuJo-style " +
+                "migration). Returns structured aggregates (totals, busiest day, source kinds, top tags), " +
+                "presentation hints, and — when there are entries to plot — an attached PNG chart of " +
+                "activity over time (otherwise structured data only). Show the chart if present and weave " +
+                "the aggregates into a short reflective summary — do not just dump the numbers. Pick " +
+                "`period` (day/week/month), or pass BOTH `since` and `until` for an explicit custom range " +
+                "(one without the other is an error). `time_field` selects when-captured vs when-it-happened.",
+            inputSchema: {
+                period: z
+                    .enum(["day", "week", "month"])
+                    .optional()
+                    .describe("Calendar window containing `anchor`. Defaults to 'week'. Ignored if since+until given."),
+                anchor: z
+                    .string()
+                    .datetime({ offset: true })
+                    .optional()
+                    .describe("ISO-8601 point in time the period is computed around. Defaults to now."),
+                since: z
+                    .string()
+                    .datetime({ offset: true })
+                    .optional()
+                    .describe("ISO-8601 lower bound for an explicit custom window (use with `until`)."),
+                until: z
+                    .string()
+                    .datetime({ offset: true })
+                    .optional()
+                    .describe("ISO-8601 upper bound for an explicit custom window (use with `since`)."),
+                time_field: z
+                    .enum(["created_at", "occurred_at"])
+                    .optional()
+                    .describe("Which timestamp to window by. Defaults to 'created_at'."),
+            },
+        }, async (args) => {
+            const out = await generateReview(store, args);
+            return richResult(out.chartPng, {
+                structured: out.structured,
+                presentation_hints: out.presentation_hints,
+            });
+        });
+        server.registerTool("surface_patterns", {
+            title: "Surface recurring themes (echoes)",
+            description: "Detect recurring themes — recent entries that echo something the user wrote BEFORE. Call " +
+                "this when the user reflects on habits or patterns ('do I keep coming back to this?', " +
+                "'am I in a rut?') or proactively during reviews. For each recent entry it finds " +
+                "semantically similar older entries; returns the echo clusters (with distances), " +
+                "presentation hints, and — when any echoes are found — an attached PNG chart of the " +
+                "strongest echoes (otherwise structured data only). Each echo is a CANDIDATE recurrence — " +
+                "judge relevance yourself and present gently, don't over-claim.",
+            inputSchema: {
+                lookback_days: z
+                    .number()
+                    .int()
+                    .optional()
+                    .describe("How far back to treat entries as 'recent' (1-3650, default 30)."),
+                max_recent: z
+                    .number()
+                    .int()
+                    .optional()
+                    .describe("Max recent entries to examine (1-200, default 50)."),
+                per_entry: z
+                    .number()
+                    .int()
+                    .optional()
+                    .describe("Neighbours considered per recent entry (1-20, default 5)."),
+                max_distance: z
+                    .number()
+                    .optional()
+                    .describe("Distance cutoff; only closer echoes are kept (default 1.3, smaller = stricter)."),
+            },
+        }, async (args) => {
+            const out = await surfacePatterns(store, args);
+            return richResult(out.chartPng, {
+                structured: out.structured,
+                presentation_hints: out.presentation_hints,
+            });
+        });
+        server.registerTool("reindex", {
+            title: "Rebuild the semantic search index",
+            description: "Maintenance operation: rebuild the vector index from the original entries using the " +
+                "current embedding backend. Use this after switching the embedding model — the server " +
+                "logs a warning on startup when the active model no longer matches what the index was " +
+                "built with, because vectors from different models are not comparable. Originals are " +
+                "never touched; only the disposable index is rebuilt, then re-recall works again. May " +
+                "take a while for large journals. Not part of normal capture/recall — only run it when " +
+                "the user asks to reindex or after a backend change.",
+            inputSchema: {},
+        }, async () => {
+            const result = await store.reindex();
+            return jsonResult(result);
+        });
+        server.registerTool("get_original", {
+            title: "Fetch a stored original artifact (re-view the acorn)",
+            description: "Retrieve the verbatim original (image / audio / file) that was saved at capture time, by " +
+                "its `original_ref` (e.g. 'local:<sha256>' from an entry). Images are returned inline " +
+                "so you (the multimodal LLM) can look again and, if needed, RE-EXTRACT text from them; " +
+                "other types return metadata only. Use this after recall_related / query_entries " +
+                "surfaces an entry whose original you want to actually see again.",
+            inputSchema: {
+                original_ref: z
+                    .string()
+                    .min(1)
+                    .describe("The entry's original_ref, e.g. 'local:<sha256>'."),
+            },
+        }, async ({ original_ref }) => {
+            const loaded = await originals.get(original_ref);
+            if (!loaded) {
+                return jsonResult({ found: false, original_ref });
+            }
+            // Never return the absolute filesystem path (it leaks home dir /
+            // username). Images come back inline; other types return metadata only
+            // (opening non-renderable originals is the management UI's job).
+            const base = { found: true, original_ref, mime: loaded.mime, bytes: loaded.data.length };
+            const content = [];
+            if (loaded.mime?.startsWith("image/")) {
+                content.push({
+                    type: "image",
+                    data: loaded.data.toString("base64"),
+                    mimeType: loaded.mime,
+                });
+            }
+            content.push({ type: "text", text: JSON.stringify(base, null, 2) });
+            return { content };
+        });
+        server.registerTool("delete_entry", {
+            title: "Delete an entry",
+            description: "Delete a journal entry by id. `mode: 'soft'` (default) sets a recoverable tombstone — the " +
+                "entry stops appearing in query/recall but can be restored. `mode: 'hard'` permanently " +
+                "purges the entry, its vector, and its original (when no other entry references it) and " +
+                "VACUUMs the database — use this to truly erase something captured by mistake (e.g. a " +
+                "secret). Hard delete is irreversible; confirm with the user before using it.",
+            inputSchema: {
+                id: z.number().int().describe("The entry id to delete."),
+                mode: z
+                    .enum(["soft", "hard"])
+                    .optional()
+                    .describe("'soft' (default, recoverable) or 'hard' (permanent erase)."),
+            },
+        }, async (args) => {
+            const mode = args.mode ?? "soft";
+            if (mode === "soft") {
+                return jsonResult({ id: args.id, mode, deleted: store.softDelete(args.id) });
+            }
+            // Hard delete: erase the orphaned original FIRST so a failure can't leave its
+            // bytes behind, then purge the row + vector and VACUUM.
+            const peek = store.peekHardDelete(args.id);
+            if (!peek.exists) {
+                return jsonResult({ id: args.id, mode, deleted: false });
+            }
+            let originalErased = null;
+            if (peek.orphan && peek.original_ref) {
+                try {
+                    originalErased = await originals.delete(peek.original_ref);
+                }
+                catch (err) {
+                    // Log details to stderr; keep the tool output generic (no raw exception).
+                    ctx.log("failed to erase original during hard delete:", err);
+                    return errorResult("Failed to erase the original; the entry was left intact so you can retry.");
+                }
+            }
+            // The original is already gone; if purge fails, the entry stays and the
+            // operation is safely retryable (a re-run re-purges; deleting an
+            // already-missing original is a no-op).
+            let deleted;
+            try {
+                deleted = store.purgeEntry(args.id);
+            }
+            catch (err) {
+                ctx.log("failed to purge entry after erasing original:", err);
+                return errorResult("Erased the original but failed to purge the entry; run delete again to finish.");
+            }
+            return jsonResult({ id: args.id, mode, deleted, original_erased: originalErased });
+        });
+        server.registerTool("storage_stats", {
+            title: "Storage statistics",
+            description: "Report how big the journal is: entry counts (active vs soft-deleted), vector count, " +
+                "breakdown by source kind and by month, the originals count + total bytes, and the database " +
+                "file size. Use this for capacity questions like 'how much have I stored?'.",
+            inputSchema: {},
+        }, async () => {
+            const entries = store.entryStats();
+            const originalsStats = await originals.stats();
+            // null (not 0) distinguishes a stat error from a genuinely empty DB; the
+            // absolute path is withheld to avoid leaking local filesystem details.
+            let dbBytes = null;
+            try {
+                dbBytes = statSync(config.dbPath).size;
+            }
+            catch {
+                dbBytes = null;
+            }
+            return jsonResult({ entries, originals: originalsStats, db_bytes: dbBytes });
+        });
+    },
+};
+//# sourceMappingURL=core.js.map

package/dist/modules/core.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"core.js","sourceRoot":"","sources":["../../src/modules/core.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAErD,yEAAyE;AACzE,SAAS,kBAAkB,CAAC,KAAa;IACvC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC1C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAChG,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC3C,OAAO,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AACzD,CAAC;AAED,iFAAiF;AACjF,SAAS,UAAU,CAAC,GAAkB,EAAE,OAAgB;IACtD,MAAM,OAAO,GAET,EAAE,CAAC;IACP,IAAI,GAAG,EAAE,CAAC;QACR,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAC;IACvF,CAAC;IACD,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IACvE,OAAO,EAAE,OAAO,EAAE,CAAC;AACrB,CAAC;AAED,MAAM,CAAC,MAAM,UAAU,GAAkB;IACvC,EAAE,EAAE,MAAM;IACV,QAAQ,CAAC,GAAmB;QAC1B,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC;QAEjD,MAAM,CAAC,YAAY,CACjB,SAAS,EACT;YACE,KAAK,EAAE,mCAAmC;YAC1C,WAAW,EACT,sFAAsF;gBACtF,yFAAyF;gBACzF,oFAAoF;gBACpF,yFAAyF;gBACzF,0FAA0F;gBAC1F,wFAAwF;gBACxF,2FAA2F;gBAC3F,wFAAwF;gBACxF,0FAA0F;gBAC1F,4FAA4F;gBAC5F,kFAAkF;gBAClF,8BAA8B;YAChC,WAAW,EAAE;gBACX,IAAI,EAAE,CAAC;qBACJ,MAAM,EAAE;qBACR,GAAG,CAAC,CAAC,CAAC;qBACN,QAAQ,CACP,kFAAkF;oBAChF,mDAAmD,CACtD;gBACH,WAAW,EAAE,CAAC;qBACX,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;qBAC/C,QAAQ,EAAE;qBACV,QAAQ,CAAC,sDAAsD,CAAC;gBACnE,YAAY,EAAE,CAAC;qBACZ,MAAM,EAAE;qBACR,QAAQ,EAAE;qBACV,QAAQ,CACP,+EAA+E;oBAC7E,uEAAuE,CAC1E;gBACH,aAAa,EAAE,CAAC;qBACb,MAAM,EAAE;qBACR,QAAQ,EAAE;qBACV,QAAQ,CACP,sFAAsF;oBACpF,iFAAiF,CACpF;gBACH,aAAa,EAAE,CAAC;qBACb,MAAM,EAAE;qBACR,QAAQ,EAAE;qBACV,QAAQ,CAAC,+DAA+D,CAAC;gBAC5E,iBAAiB,EAAE,CAAC;qBACjB,MAAM,EAAE;qBACR,QAAQ,EAAE;qBACV,QAAQ,CAAC,qEAAqE,CAAC;gBAClF,gBAAgB,EAAE,CAAC;qBAChB,IAAI,CAAC,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC;qBACnC,QAAQ,EAAE;qBACV,QAAQ,CACP,mFAAmF;oBACjF,8EAA8E,CACjF;gBACH,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wCAAwC,CAAC;gBACvF,IAAI,EAAE,CAAC;qBACJ,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;qBACnB,QAAQ,EAAE;qBACV,QAAQ,CAAC,6DAA6D,CAAC;gBAC1E,WAAW,EAAE,CAAC;qBACX,MAAM,EAAE;qBACR,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;qBAC1B,QAAQ,EAAE;qBACV,QAAQ,CACP,4EAA4E;oBAC1E,qFAAqF,CACxF;aACJ;SACF,EACD,KAAK,EAAE,IAAI,EAAE,EAAE;YACb,MAAM,EAAE,aAAa,EAAE,aAAa,EAAE,iBAAiB,EAAE,GAAG,KAAK,EAAE,GAAG,IAAI,CAAC;YAC3E,IAAI,CAAC,aAAa,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACjD,wEAAwE;gBACxE,OAAO,UAAU,CAAC,MAAM,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YAC/C,CAAC;YACD,0EAA0E;YAC1E,qEAAqE;YACrE,iBAAiB;YACjB,MAAM,QAAQ,GAAG,WAAW,CAC1B,mDAAmD,MAAM,CAAC,gBAAgB,SAAS,CACpF,CAAC;YACF,IAAI,aAAa,CAAC,MAAM,GAAG,MAAM,CAAC,gBAAgB,GAAG,CAAC,EAAE,CAAC;gBACvD,OAAO,QAAQ,CAAC;YAClB,CAAC;YACD,MAAM,KAAK,GAAG,kBAAkB,CAAC,aAAa,CAAC,CAAC;YAChD,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,OAAO,WAAW,CAAC,mCAAmC,CAAC,CAAC;YAC1D,CAAC;YACD,IAAI,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,gBAAgB,EAAE,CAAC;gBAC3C,OAAO,QAAQ,CAAC;YAClB,CAAC;YACD,uEAAuE;YACvE,4EAA4E;YAC5E,KAAK,CAAC,YAAY,GAAG,SAAS,CAAC;YAC/B,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACzC,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAC5E,IAAI,WAAW,EAAE,CAAC;gBAChB,OAAO,UAAU,CAAC,EAAE,GAAG,MAAM,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC,CAAC;YAC9D,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC;gBACjC,IAAI,EAAE,KAAK;gBACX,IAAI,EAAE,aAAa;gBACnB,QAAQ,EAAE,iBAAiB;aAC5B,CAAC,CAAC;YACH,MAAM,QAAQ,GAAG,KAAK,CAAC,sBAAsB,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;YACpE,IAAI,QAAQ,EAAE,CAAC;gBACb,OAAO,UAAU,CAAC,EAAE,GAAG,MAAM,EAAE,YAAY,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;YAC5D,CAAC;YACD,yEAAyE;YACzE,yEAAyE;YACzE,0EAA0E;YAC1E,+EAA+E;YAC/E,MAAM,QAAQ,GAAG,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACjD,IAAI,QAAQ,EAAE,CAAC;gBACb,OAAO,UAAU,CAAC,EAAE,GAAG,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC3D,CAAC;YACD,OAAO,WAAW,CAAC,8DAA8D,CAAC,CAAC;QACrF,CAAC,CACF,CAAC;QAEF,MAAM,CAAC,YAAY,CACjB,eAAe,EACf;YACE,KAAK,EAAE,oCAAoC;YAC3C,WAAW,EACT,uFAAuF;gBACvF,yFAAyF;gBACzF,0FAA0F;gBAC1F,yFAAyF;gBACzF,wFAAwF;gBACxF,yBAAyB;YAC3B,WAAW,EAAE;gBACX,KAAK,EAAE,CAAC;qBACL,MAAM,EAAE;qBACR,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;qBAC1B,QAAQ,EAAE;qBACV,QAAQ,CAAC,8CAA8C,CAAC;gBAC3D,KAAK,EAAE,CAAC;qBACL,MAAM,EAAE;qBACR,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;qBAC1B,QAAQ,EAAE;qBACV,QAAQ,CAAC,8CAA8C,CAAC;gBAC3D,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wBAAwB,CAAC;gBACrE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,sCAAsC,CAAC;gBAC3E,UAAU,EAAE,CAAC;qBACV,IAAI,CAAC,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC;qBACnC,QAAQ,EAAE;qBACV,QAAQ,CAAC,kEAAkE,CAAC;gBAC/E,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,+BAA+B,CAAC;aAC7E;SACF,EACD,KAAK,EAAE,IAAI,EAAE,EAAE;YACb,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAClC,OAAO,UAAU,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;QACxD,CAAC,CACF,CAAC;QAEF,MAAM,CAAC,YAAY,CACjB,gBAAgB,EAChB;YACE,KAAK,EAAE,yCAAyC;YAChD,WAAW,EACT,wFAAwF;gBACxF,sFAAsF;gBACtF,0FAA0F;gBAC1F,qFAAqF;gBACrF,sDAAsD;YACxD,WAAW,EAAE;gBACX,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,iDAAiD,CAAC;gBACpF,CAAC,EAAE,CAAC;qBACD,MAAM,EAAE;qBACR,GAAG,EAAE;qBACL,QAAQ,EAAE;qBACV,QAAQ,CAAC,oDAAoD,CAAC;aAClE;SACF,EACD,KAAK,EAAE,IAAI,EAAE,EAAE;YACb,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;YACpD,OAAO,UAAU,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAClD,CAAC,CACF,CAAC;QAEF,MAAM,CAAC,YAAY,CACjB,iBAAiB,EACjB;YACE,KAAK,EAAE,+BAA+B;YACtC,WAAW,EACT,uFAAuF;gBACvF,uFAAuF;gBACvF,2FAA2F;gBAC3F,sFAAsF;gBACtF,2FAA2F;gBAC3F,sFAAsF;gBACtF,2FAA2F;gBAC3F,8FAA8F;YAChG,WAAW,EAAE;gBACX,MAAM,EAAE,CAAC;qBACN,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;qBAC9B,QAAQ,EAAE;qBACV,QAAQ,CACP,wFAAwF,CACzF;gBACH,MAAM,EAAE,CAAC;qBACN,MAAM,EAAE;qBACR,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;qBAC1B,QAAQ,EAAE;qBACV,QAAQ,CAAC,wEAAwE,CAAC;gBACrF,KAAK,EAAE,CAAC;qBACL,MAAM,EAAE;qBACR,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;qBAC1B,QAAQ,EAAE;qBACV,QAAQ,CAAC,wEAAwE,CAAC;gBACrF,KAAK,EAAE,CAAC;qBACL,MAAM,EAAE;qBACR,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;qBAC1B,QAAQ,EAAE;qBACV,QAAQ,CAAC,wEAAwE,CAAC;gBACrF,UAAU,EAAE,CAAC;qBACV,IAAI,CAAC,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC;qBACnC,QAAQ,EAAE;qBACV,QAAQ,CAAC,yDAAyD,CAAC;aACvE;SACF,EACD,KAAK,EAAE,IAAI,EAAE,EAAE;YACb,MAAM,GAAG,GAAG,MAAM,cAAc,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YAC9C,OAAO,UAAU,CAAC,GAAG,CAAC,QAAQ,EAAE;gBAC9B,UAAU,EAAE,GAAG,CAAC,UAAU;gBAC1B,kBAAkB,EAAE,GAAG,CAAC,kBAAkB;aAC3C,CAAC,CAAC;QACL,CAAC,CACF,CAAC;QAEF,MAAM,CAAC,YAAY,CACjB,kBAAkB,EAClB;YACE,KAAK,EAAE,mCAAmC;YAC1C,WAAW,EACT,2FAA2F;gBAC3F,uFAAuF;gBACvF,kFAAkF;gBAClF,kFAAkF;gBAClF,qFAAqF;gBACrF,2FAA2F;gBAC3F,gEAAgE;YAClE,WAAW,EAAE;gBACX,aAAa,EAAE,CAAC;qBACb,MAAM,EAAE;qBACR,GAAG,EAAE;qBACL,QAAQ,EAAE;qBACV,QAAQ,CAAC,iEAAiE,CAAC;gBAC9E,UAAU,EAAE,CAAC;qBACV,MAAM,EAAE;qBACR,GAAG,EAAE;qBACL,QAAQ,EAAE;qBACV,QAAQ,CAAC,oDAAoD,CAAC;gBACjE,SAAS,EAAE,CAAC;qBACT,MAAM,EAAE;qBACR,GAAG,EAAE;qBACL,QAAQ,EAAE;qBACV,QAAQ,CAAC,2DAA2D,CAAC;gBACxE,YAAY,EAAE,CAAC;qBACZ,MAAM,EAAE;qBACR,QAAQ,EAAE;qBACV,QAAQ,CACP,iFAAiF,CAClF;aACJ;SACF,EACD,KAAK,EAAE,IAAI,EAAE,EAAE;YACb,MAAM,GAAG,GAAG,MAAM,eAAe,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YAC/C,OAAO,UAAU,CAAC,GAAG,CAAC,QAAQ,EAAE;gBAC9B,UAAU,EAAE,GAAG,CAAC,UAAU;gBAC1B,kBAAkB,EAAE,GAAG,CAAC,kBAAkB;aAC3C,CAAC,CAAC;QACL,CAAC,CACF,CAAC;QAEF,MAAM,CAAC,YAAY,CACjB,SAAS,EACT;YACE,KAAK,EAAE,mCAAmC;YAC1C,WAAW,EACT,sFAAsF;gBACtF,uFAAuF;gBACvF,uFAAuF;gBACvF,sFAAsF;gBACtF,uFAAuF;gBACvF,wFAAwF;gBACxF,qDAAqD;YACvD,WAAW,EAAE,EAAE;SAChB,EACD,KAAK,IAAI,EAAE;YACT,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC;YACrC,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC;QAC5B,CAAC,CACF,CAAC;QAEF,MAAM,CAAC,YAAY,CACjB,cAAc,EACd;YACE,KAAK,EAAE,sDAAsD;YAC7D,WAAW,EACT,2FAA2F;gBAC3F,uFAAuF;gBACvF,wFAAwF;gBACxF,kFAAkF;gBAClF,kEAAkE;YACpE,WAAW,EAAE;gBACX,YAAY,EAAE,CAAC;qBACZ,MAAM,EAAE;qBACR,GAAG,CAAC,CAAC,CAAC;qBACN,QAAQ,CAAC,kDAAkD,CAAC;aAChE;SACF,EACD,KAAK,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE;YACzB,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YACjD,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,OAAO,UAAU,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;YACpD,CAAC;YACD,iEAAiE;YACjE,uEAAuE;YACvE,iEAAiE;YACjE,MAAM,IAAI,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACzF,MAAM,OAAO,GAET,EAAE,CAAC;YACP,IAAI,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACtC,OAAO,CAAC,IAAI,CAAC;oBACX,IAAI,EAAE,OAAO;oBACb,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;oBACpC,QAAQ,EAAE,MAAM,CAAC,IAAI;iBACtB,CAAC,CAAC;YACL,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;YACpE,OAAO,EAAE,OAAO,EAAE,CAAC;QACrB,CAAC,CACF,CAAC;QAEF,MAAM,CAAC,YAAY,CACjB,cAAc,EACd;YACE,KAAK,EAAE,iBAAiB;YACxB,WAAW,EACT,4FAA4F;gBAC5F,wFAAwF;gBACxF,yFAAyF;gBACzF,uFAAuF;gBACvF,8EAA8E;YAChF,WAAW,EAAE;gBACX,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,yBAAyB,CAAC;gBACxD,IAAI,EAAE,CAAC;qBACJ,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;qBACtB,QAAQ,EAAE;qBACV,QAAQ,CAAC,4DAA4D,CAAC;aAC1E;SACF,EACD,KAAK,EAAE,IAAI,EAAE,EAAE;YACb,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,MAAM,CAAC;YACjC,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;gBACpB,OAAO,UAAU,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;YAC/E,CAAC;YACD,8EAA8E;YAC9E,wDAAwD;YACxD,MAAM,IAAI,GAAG,KAAK,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC3C,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACjB,OAAO,UAAU,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;YAC3D,CAAC;YACD,IAAI,cAAc,GAAmB,IAAI,CAAC;YAC1C,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;gBACrC,IAAI,CAAC;oBACH,cAAc,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;gBAC7D,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,0EAA0E;oBAC1E,GAAG,CAAC,GAAG,CAAC,8CAA8C,EAAE,GAAG,CAAC,CAAC;oBAC7D,OAAO,WAAW,CAChB,2EAA2E,CAC5E,CAAC;gBACJ,CAAC;YACH,CAAC;YACD,wEAAwE;YACxE,iEAAiE;YACjE,wCAAwC;YACxC,IAAI,OAAgB,CAAC;YACrB,IAAI,CAAC;gBACH,OAAO,GAAG,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACtC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,GAAG,CAAC,GAAG,CAAC,+CAA+C,EAAE,GAAG,CAAC,CAAC;gBAC9D,OAAO,WAAW,CAChB,gFAAgF,CACjF,CAAC;YACJ,CAAC;YACD,OAAO,UAAU,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,CAAC,CAAC;QACrF,CAAC,CACF,CAAC;QAEF,MAAM,CAAC,YAAY,CACjB,eAAe,EACf;YACE,KAAK,EAAE,oBAAoB;YAC3B,WAAW,EACT,sFAAsF;gBACtF,6FAA6F;gBAC7F,4EAA4E;YAC9E,WAAW,EAAE,EAAE;SAChB,EACD,KAAK,IAAI,EAAE;YACT,MAAM,OAAO,GAAG,KAAK,CAAC,UAAU,EAAE,CAAC;YACnC,MAAM,cAAc,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC;YAC/C,yEAAyE;YACzE,uEAAuE;YACvE,IAAI,OAAO,GAAkB,IAAI,CAAC;YAClC,IAAI,CAAC;gBACH,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC;YACzC,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,GAAG,IAAI,CAAC;YACjB,CAAC;YACD,OAAO,UAAU,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;QAC/E,CAAC,CACF,CAAC;IACJ,CAAC;CACF,CAAC"}

package/dist/modules/plugins.d.ts

@@ -0,0 +1,2 @@
+import type { JournalModule } from "../kernel/module.js";
+export declare const pluginsModule: JournalModule;

package/dist/modules/plugins.js

@@ -0,0 +1,177 @@
+/**
+ * Plugins module — agent-driven plugin lifecycle over MCP (no user CLI).
+ *
+ * Local install is supported now: point install_plugin at a plugin directory,
+ * review the declared capabilities, then confirm. On confirm the plugin is
+ * copied in, recorded as enabled, and loaded at runtime — because registering
+ * tools emits `tools/list_changed`, its tools appear without restarting the
+ * client. A hosted registry (list_available_plugins) comes in a later step.
+ */
+import { existsSync } from "node:fs";
+import { cp, mkdir, rm } from "node:fs/promises";
+import { z } from "zod";
+import { assertAbsoluteDir, isValidPluginId, loadPluginConfig, loadPluginModule, pluginDir, readManifest, savePluginConfig, } from "../kernel/plugin.js";
+import { errorResult, jsonResult } from "../kernel/result.js";
+export const pluginsModule = {
+    id: "plugins",
+    register(ctx) {
+        const { server, config } = ctx;
+        server.registerTool("list_installed_plugins", {
+            title: "List installed plugins",
+            description: "List the plugins installed into this journal, with their enabled state, version, and " +
+                "declared capabilities. Use this to see what extra tools are available or to check " +
+                "before installing/uninstalling.",
+            inputSchema: {},
+        }, async () => {
+            let cfg;
+            try {
+                cfg = await loadPluginConfig(config.pluginsConfigPath);
+            }
+            catch (err) {
+                return errorResult(err instanceof Error ? err.message : String(err));
+            }
+            const plugins = [];
+            for (const entry of cfg.plugins) {
+                if (!isValidPluginId(entry.id)) {
+                    plugins.push({ id: entry.id, enabled: entry.enabled, invalid: true });
+                    continue;
+                }
+                let name;
+                let version;
+                let capabilities = [];
+                try {
+                    const manifest = await readManifest(pluginDir(ctx, entry.id));
+                    name = manifest.name;
+                    version = manifest.version;
+                    capabilities = manifest.capabilities;
+                }
+                catch {
+                    // Manifest unreadable (dir removed manually): still list the id.
+                }
+                plugins.push({ id: entry.id, enabled: entry.enabled, name, version, capabilities });
+            }
+            return jsonResult({ count: plugins.length, plugins });
+        });
+        server.registerTool("install_plugin", {
+            title: "Install a plugin",
+            description: "Install a donguri-journal plugin from a local directory. This runs third-party code " +
+                "in-process, so it is a TWO-STEP, consented action: first call with just `source` to " +
+                "get the plugin's manifest and DECLARED CAPABILITIES; present those to the user; only " +
+                "after they approve, call again with `confirm: true`. On confirm the plugin is copied " +
+                "in, enabled, and loaded immediately (its tools become available without a restart).",
+            inputSchema: {
+                source: z
+                    .string()
+                    .min(1)
+                    .describe("Absolute path to the plugin directory (contains donguri.plugin.json)."),
+                confirm: z
+                    .boolean()
+                    .optional()
+                    .describe("Set true ONLY after the user approves the manifest + capabilities."),
+            },
+        }, async ({ source, confirm }) => {
+            try {
+                assertAbsoluteDir(source);
+            }
+            catch (err) {
+                return errorResult(err instanceof Error ? err.message : String(err));
+            }
+            let manifest;
+            try {
+                manifest = await readManifest(source);
+            }
+            catch (err) {
+                return errorResult(`invalid plugin: ${err instanceof Error ? err.message : String(err)}`);
+            }
+            if (!confirm) {
+                return jsonResult({
+                    requires_confirmation: true,
+                    manifest: {
+                        id: manifest.id,
+                        name: manifest.name,
+                        version: manifest.version,
+                        description: manifest.description,
+                        capabilities: manifest.capabilities,
+                    },
+                    message: "Show the user the name, version and capabilities. Install runs third-party code — " +
+                        "call install_plugin again with confirm: true only after they approve.",
+                });
+            }
+            const dest = pluginDir(ctx, manifest.id);
+            if (existsSync(dest)) {
+                return errorResult(`plugin '${manifest.id}' is already installed; uninstall it first`);
+            }
+            let cfgBefore;
+            try {
+                cfgBefore = await loadPluginConfig(config.pluginsConfigPath);
+            }
+            catch (err) {
+                return errorResult(err instanceof Error ? err.message : String(err));
+            }
+            try {
+                await mkdir(config.pluginsDir, { recursive: true });
+                await cp(source, dest, { recursive: true });
+                const next = {
+                    plugins: [
+                        ...cfgBefore.plugins.filter((p) => p.id !== manifest.id),
+                        { id: manifest.id, enabled: true },
+                    ],
+                };
+                await savePluginConfig(config.pluginsConfigPath, next);
+                const mod = await loadPluginModule(dest, manifest);
+                await mod.register(ctx);
+            }
+            catch (err) {
+                // Full rollback covering mkdir/cp/save/load: remove any copied files
+                // and restore the prior config.
+                await rm(dest, { recursive: true, force: true }).catch(() => { });
+                await savePluginConfig(config.pluginsConfigPath, cfgBefore).catch(() => { });
+                ctx.log(`install failed for ${manifest.id}:`, err);
+                return errorResult(`failed to install plugin: ${err instanceof Error ? err.message : String(err)}`);
+            }
+            return jsonResult({
+                installed: manifest.id,
+                version: manifest.version,
+                message: "Installed and active — its tools are now available.",
+            });
+        });
+        server.registerTool("uninstall_plugin", {
+            title: "Uninstall a plugin",
+            description: "Remove an installed plugin by id: deletes it from disk and the plugin registry. Note: " +
+                "tools it already registered stay available until the server restarts.",
+            inputSchema: {
+                id: z.string().min(1).describe("The plugin id to uninstall."),
+            },
+        }, async ({ id }) => {
+            if (!isValidPluginId(id)) {
+                return errorResult("invalid plugin id");
+            }
+            let cfg;
+            try {
+                cfg = await loadPluginConfig(config.pluginsConfigPath);
+            }
+            catch (err) {
+                return errorResult(err instanceof Error ? err.message : String(err));
+            }
+            const wasInstalled = cfg.plugins.some((p) => p.id === id);
+            try {
+                // Delete from disk BEFORE updating the registry, so a failed rm can't
+                // leave an unlisted-but-present directory that blocks reinstall.
+                await rm(pluginDir(ctx, id), { recursive: true, force: true });
+                await savePluginConfig(config.pluginsConfigPath, {
+                    plugins: cfg.plugins.filter((p) => p.id !== id),
+                });
+            }
+            catch (err) {
+                ctx.log(`uninstall failed for ${id}:`, err);
+                return errorResult(`failed to uninstall plugin: ${err instanceof Error ? err.message : String(err)}`);
+            }
+            return jsonResult({
+                uninstalled: id,
+                was_installed: wasInstalled,
+                note: "Removed from disk. Any already-registered tools remain until the server restarts.",
+            });
+        });
+    },
+};
+//# sourceMappingURL=plugins.js.map

package/dist/modules/plugins.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugins.js","sourceRoot":"","sources":["../../src/modules/plugins.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAEL,iBAAiB,EACjB,eAAe,EACf,gBAAgB,EAChB,gBAAgB,EAChB,SAAS,EACT,YAAY,EACZ,gBAAgB,GACjB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAE9D,MAAM,CAAC,MAAM,aAAa,GAAkB;IAC1C,EAAE,EAAE,SAAS;IACb,QAAQ,CAAC,GAAmB;QAC1B,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC;QAE/B,MAAM,CAAC,YAAY,CACjB,wBAAwB,EACxB;YACE,KAAK,EAAE,wBAAwB;YAC/B,WAAW,EACT,uFAAuF;gBACvF,oFAAoF;gBACpF,iCAAiC;YACnC,WAAW,EAAE,EAAE;SAChB,EACD,KAAK,IAAI,EAAE;YACT,IAAI,GAAiB,CAAC;YACtB,IAAI,CAAC;gBACH,GAAG,GAAG,MAAM,gBAAgB,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;YACzD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,WAAW,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YACvE,CAAC;YACD,MAAM,OAAO,GAOR,EAAE,CAAC;YACR,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;gBAChC,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;oBAC/B,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;oBACtE,SAAS;gBACX,CAAC;gBACD,IAAI,IAAwB,CAAC;gBAC7B,IAAI,OAA2B,CAAC;gBAChC,IAAI,YAAY,GAAa,EAAE,CAAC;gBAChC,IAAI,CAAC;oBACH,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;oBAC9D,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;oBACrB,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;oBAC3B,YAAY,GAAG,QAAQ,CAAC,YAAY,CAAC;gBACvC,CAAC;gBAAC,MAAM,CAAC;oBACP,iEAAiE;gBACnE,CAAC;gBACD,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC,CAAC;YACtF,CAAC;YACD,OAAO,UAAU,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;QACxD,CAAC,CACF,CAAC;QAEF,MAAM,CAAC,YAAY,CACjB,gBAAgB,EAChB;YACE,KAAK,EAAE,kBAAkB;YACzB,WAAW,EACT,sFAAsF;gBACtF,sFAAsF;gBACtF,uFAAuF;gBACvF,uFAAuF;gBACvF,qFAAqF;YACvF,WAAW,EAAE;gBACX,MAAM,EAAE,CAAC;qBACN,MAAM,EAAE;qBACR,GAAG,CAAC,CAAC,CAAC;qBACN,QAAQ,CAAC,uEAAuE,CAAC;gBACpF,OAAO,EAAE,CAAC;qBACP,OAAO,EAAE;qBACT,QAAQ,EAAE;qBACV,QAAQ,CAAC,oEAAoE,CAAC;aAClF;SACF,EACD,KAAK,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE;YAC5B,IAAI,CAAC;gBACH,iBAAiB,CAAC,MAAM,CAAC,CAAC;YAC5B,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,WAAW,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YACvE,CAAC;YACD,IAAI,QAAkD,CAAC;YACvD,IAAI,CAAC;gBACH,QAAQ,GAAG,MAAM,YAAY,CAAC,MAAM,CAAC,CAAC;YACxC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,WAAW,CAAC,mBAAmB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC5F,CAAC;YAED,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,UAAU,CAAC;oBAChB,qBAAqB,EAAE,IAAI;oBAC3B,QAAQ,EAAE;wBACR,EAAE,EAAE,QAAQ,CAAC,EAAE;wBACf,IAAI,EAAE,QAAQ,CAAC,IAAI;wBACnB,OAAO,EAAE,QAAQ,CAAC,OAAO;wBACzB,WAAW,EAAE,QAAQ,CAAC,WAAW;wBACjC,YAAY,EAAE,QAAQ,CAAC,YAAY;qBACpC;oBACD,OAAO,EACL,oFAAoF;wBACpF,uEAAuE;iBAC1E,CAAC,CAAC;YACL,CAAC;YAED,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;YACzC,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;gBACrB,OAAO,WAAW,CAAC,WAAW,QAAQ,CAAC,EAAE,4CAA4C,CAAC,CAAC;YACzF,CAAC;YAED,IAAI,SAAuB,CAAC;YAC5B,IAAI,CAAC;gBACH,SAAS,GAAG,MAAM,gBAAgB,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;YAC/D,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,WAAW,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YACvE,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBACpD,MAAM,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC5C,MAAM,IAAI,GAAiB;oBACzB,OAAO,EAAE;wBACP,GAAG,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,QAAQ,CAAC,EAAE,CAAC;wBACxD,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;qBACnC;iBACF,CAAC;gBACF,MAAM,gBAAgB,CAAC,MAAM,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAC;gBACvD,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;gBACnD,MAAM,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YAC1B,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,qEAAqE;gBACrE,gCAAgC;gBAChC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;gBACjE,MAAM,gBAAgB,CAAC,MAAM,CAAC,iBAAiB,EAAE,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;gBAC5E,GAAG,CAAC,GAAG,CAAC,sBAAsB,QAAQ,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;gBACnD,OAAO,WAAW,CAChB,6BAA6B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAChF,CAAC;YACJ,CAAC;YAED,OAAO,UAAU,CAAC;gBAChB,SAAS,EAAE,QAAQ,CAAC,EAAE;gBACtB,OAAO,EAAE,QAAQ,CAAC,OAAO;gBACzB,OAAO,EAAE,qDAAqD;aAC/D,CAAC,CAAC;QACL,CAAC,CACF,CAAC;QAEF,MAAM,CAAC,YAAY,CACjB,kBAAkB,EAClB;YACE,KAAK,EAAE,oBAAoB;YAC3B,WAAW,EACT,wFAAwF;gBACxF,uEAAuE;YACzE,WAAW,EAAE;gBACX,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,6BAA6B,CAAC;aAC9D;SACF,EACD,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE;YACf,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC,EAAE,CAAC;gBACzB,OAAO,WAAW,CAAC,mBAAmB,CAAC,CAAC;YAC1C,CAAC;YACD,IAAI,GAAiB,CAAC;YACtB,IAAI,CAAC;gBACH,GAAG,GAAG,MAAM,gBAAgB,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;YACzD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,WAAW,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YACvE,CAAC;YACD,MAAM,YAAY,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;YAC1D,IAAI,CAAC;gBACH,sEAAsE;gBACtE,iEAAiE;gBACjE,MAAM,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC/D,MAAM,gBAAgB,CAAC,MAAM,CAAC,iBAAiB,EAAE;oBAC/C,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;iBAChD,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,GAAG,CAAC,GAAG,CAAC,wBAAwB,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;gBAC5C,OAAO,WAAW,CAChB,+BAA+B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAClF,CAAC;YACJ,CAAC;YACD,OAAO,UAAU,CAAC;gBAChB,WAAW,EAAE,EAAE;gBACf,aAAa,EAAE,YAAY;gBAC3B,IAAI,EAAE,mFAAmF;aAC1F,CAAC,CAAC;QACL,CAAC,CACF,CAAC;IACJ,CAAC;CACF,CAAC"}

package/dist/originals/store.d.ts

@@ -0,0 +1,50 @@
+export interface SaveOriginalInput {
+    data: Buffer;
+    mime?: string;
+    filename?: string;
+}
+export interface SavedOriginal {
+    /** Reference stored in entries.original_ref, e.g. "local:<sha256>". */
+    ref: string;
+    bytes: number;
+    mime?: string;
+}
+export interface LoadedOriginal {
+    data: Buffer;
+    mime?: string;
+    /** Absolute path on disk (originals live on the same machine as the server). */
+    path: string;
+}
+export interface OriginalsStats {
+    count: number;
+    bytes: number;
+}
+export interface OriginalStore {
+    readonly kind: string;
+    save(input: SaveOriginalInput): Promise<SavedOriginal>;
+    /** Load a previously saved original, or null if the ref is unknown to this store. */
+    get(ref: string): Promise<LoadedOriginal | null>;
+    /** Remove an original (and its sidecar). Returns true if a blob was deleted. */
+    delete(ref: string): Promise<boolean>;
+    /** Aggregate count + total bytes of stored originals. */
+    stats(): Promise<OriginalsStats>;
+}
+/**
+ * Content-addressed store under a local directory. Each original is stored as a
+ * blob named `<sha256>` plus a `<sha256>.json` sidecar holding its MIME type and
+ * original filename.
+ */
+export declare class LocalDirStore implements OriginalStore {
+    #private;
+    readonly kind = "local";
+    constructor(baseDir: string);
+    save(input: SaveOriginalInput): Promise<SavedOriginal>;
+    get(ref: string): Promise<LoadedOriginal | null>;
+    delete(ref: string): Promise<boolean>;
+    stats(): Promise<OriginalsStats>;
+}
+/**
+ * Choose an original store. Today this is always the local directory; an Eagle
+ * backend (when JOURNAL_EAGLE_API is set) can be slotted in here later.
+ */
+export declare function createOriginalStore(baseDir?: string): OriginalStore;