happy2 0.0.12 → 0.0.14

package/packages/happy2-server/dist/modules/plugin/pluginInstallationList.js.map

@@ -1 +1 @@
-{"version":3,"file":"pluginInstallationList.js","sourceRoot":"","sources":["../../../sources/modules/plugin/pluginInstallationList.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,mBAAmB,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAC5D,OAAO,EAAE,sBAAsB,EAAE,MAAM,mCAAmC,CAAC;AAE3E,OAAO,EAAE,2BAA2B,EAAE,MAAM,iCAAiC,CAAC;AAC9E,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAEhE;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CACxC,QAAyB,EACzB,WAAmB;IAEnB,MAAM,sBAAsB,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IACpD,MAAM,IAAI,GAAG,MAAM,QAAQ;SACtB,MAAM,CAAC,2BAA2B,CAAC;SACnC,IAAI,CAAC,mBAAmB,CAAC;SACzB,SAAS,CAAC,OAAO,EAAE,EAAE,CAAC,mBAAmB,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;SAChE,OAAO,CAAC,mBAAmB,CAAC,WAAW,EAAE,mBAAmB,CAAC,EAAE,CAAC,CAAC;IACtE,OAAO,IAAI,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;AAC1C,CAAC"}
+{"version":3,"file":"pluginInstallationList.js","sourceRoot":"","sources":["../../../sources/modules/plugin/pluginInstallationList.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,mBAAmB,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAC5D,OAAO,EAAE,qBAAqB,EAAE,MAAM,wCAAwC,CAAC;AAE/E,OAAO,EAAE,2BAA2B,EAAE,MAAM,iCAAiC,CAAC;AAC9E,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAEhE;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CACxC,QAAyB,EACzB,WAAmB;IAEnB,MAAM,qBAAqB,CAAC,QAAQ,EAAE,WAAW,EAAE,eAAe,CAAC,CAAC;IACpE,MAAM,IAAI,GAAG,MAAM,QAAQ;SACtB,MAAM,CAAC,2BAA2B,CAAC;SACnC,IAAI,CAAC,mBAAmB,CAAC;SACzB,SAAS,CAAC,OAAO,EAAE,EAAE,CAAC,mBAAmB,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;SAChE,OAAO,CAAC,mBAAmB,CAAC,WAAW,EAAE,mBAAmB,CAAC,EAAE,CAAC,CAAC;IACtE,OAAO,IAAI,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;AAC1C,CAAC"}

package/packages/happy2-server/dist/modules/plugin/pluginInstallationPermissionsUpdate.d.ts

@@ -0,0 +1,18 @@
+import type { DrizzleExecutor } from "../drizzle.js";
+import type { MutationHint } from "../chat/types.js";
+import type { PluginHostPermission, PluginInstallationSummary } from "./types.js";
+/**
+ * Replaces one pluginInstallations row's user-approved API grants while enforcing its immutable manifest declarations.
+ * A changed grant set invalidates the current container incarnation and queues runtime reactivation in the same audited sync transaction so old tokens stop authorizing immediately.
+ */
+export declare function pluginInstallationPermissionsUpdate(executor: DrizzleExecutor, input: {
+    actorUserId: string;
+    installationId: string;
+    permissions: readonly PluginHostPermission[];
+}): Promise<{
+    changed: boolean;
+    containerName?: string;
+    hint?: MutationHint;
+    installation: PluginInstallationSummary;
+}>;
+//# sourceMappingURL=pluginInstallationPermissionsUpdate.d.ts.map

package/packages/happy2-server/dist/modules/plugin/pluginInstallationPermissionsUpdate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pluginInstallationPermissionsUpdate.d.ts","sourceRoot":"","sources":["../../../sources/modules/plugin/pluginInstallationPermissionsUpdate.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAIrD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAKrD,OAAO,KAAK,EAAE,oBAAoB,EAAE,yBAAyB,EAAE,MAAM,YAAY,CAAC;AAQlF;;;GAGG;AACH,wBAAsB,mCAAmC,CACrD,QAAQ,EAAE,eAAe,EACzB,KAAK,EAAE;IACH,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,SAAS,oBAAoB,EAAE,CAAC;CAChD,GACF,OAAO,CAAC;IACP,OAAO,EAAE,OAAO,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,IAAI,CAAC,EAAE,YAAY,CAAC;IACpB,YAAY,EAAE,yBAAyB,CAAC;CAC3C,CAAC,CAoED"}

package/packages/happy2-server/dist/modules/plugin/pluginInstallationPermissionsUpdate.js

@@ -0,0 +1,92 @@
+import { eq, sql } from "drizzle-orm";
+import { withTransaction } from "../drizzle.js";
+import { chatAppendAudit } from "../chat/chatAppendAudit.js";
+import { areaHint } from "../chat/areaHint.js";
+import { userRequirePermission } from "../permission/userRequirePermission.js";
+import { pluginInstallations, plugins } from "../schema.js";
+import { syncEventInsert } from "../sync/syncEventInsert.js";
+import { syncSequenceNext } from "../sync/syncSequenceNext.js";
+import { PluginError } from "./types.js";
+import { asPluginInstallation } from "./impl/asInstallation.js";
+import { effectiveContainer } from "./impl/effectiveContainer.js";
+import { installedManifest } from "./impl/installedManifest.js";
+import { pluginInstallationSelection } from "./impl/installationSelection.js";
+import { pluginPermissionsParse, pluginPermissionsValidate } from "./impl/apiPermissions.js";
+/**
+ * Replaces one pluginInstallations row's user-approved API grants while enforcing its immutable manifest declarations.
+ * A changed grant set invalidates the current container incarnation and queues runtime reactivation in the same audited sync transaction so old tokens stop authorizing immediately.
+ */
+export async function pluginInstallationPermissionsUpdate(executor, input) {
+    return withTransaction(executor, async (tx) => {
+        await userRequirePermission(tx, input.actorUserId, "managePlugins");
+        const [current] = await tx
+            .select({
+            ...pluginInstallationSelection,
+            manifestJson: plugins.manifestJson,
+            containerName: pluginInstallations.containerName,
+        })
+            .from(pluginInstallations)
+            .innerJoin(plugins, eq(pluginInstallations.pluginId, plugins.id))
+            .where(eq(pluginInstallations.id, input.installationId))
+            .limit(1);
+        if (!current)
+            throw new PluginError("not_found", "Plugin installation was not found");
+        const manifest = installedManifest(current.manifestJson);
+        const declared = effectiveContainer(manifest)?.permissions ?? [];
+        const granted = pluginPermissionsValidate(input.permissions, declared);
+        const before = pluginPermissionsParse(current.grantedPermissionsJson);
+        if (samePermissions(before, granted))
+            return {
+                changed: false,
+                ...(current.containerName ? { containerName: current.containerName } : {}),
+                installation: asPluginInstallation(current),
+            };
+        const sequence = await syncSequenceNext(tx);
+        await tx
+            .update(pluginInstallations)
+            .set({
+            grantedPermissionsJson: JSON.stringify(granted),
+            status: current.containerName ? "preparing" : current.status,
+            statusDetail: current.containerName
+                ? "Plugin runtime is queued to apply changed API permissions."
+                : current.statusDetail,
+            containerInstanceId: null,
+            syncSequence: sequence,
+            updatedAt: sql `CURRENT_TIMESTAMP`,
+            readyAt: current.containerName ? null : current.readyAt,
+        })
+            .where(eq(pluginInstallations.id, input.installationId));
+        await chatAppendAudit(tx, {
+            actorUserId: input.actorUserId,
+            action: "plugin.permissions_updated",
+            targetType: "plugin_installation",
+            targetId: input.installationId,
+            before: { grantedPermissions: before },
+            after: { grantedPermissions: granted },
+        });
+        await syncEventInsert(tx, {
+            sequence,
+            kind: "plugin.permissions_updated",
+            entityId: input.installationId,
+            actorUserId: input.actorUserId,
+        });
+        const [updated] = await tx
+            .select(pluginInstallationSelection)
+            .from(pluginInstallations)
+            .innerJoin(plugins, eq(pluginInstallations.pluginId, plugins.id))
+            .where(eq(pluginInstallations.id, input.installationId))
+            .limit(1);
+        if (!updated)
+            throw new Error("Plugin installation disappeared after permission update");
+        return {
+            changed: true,
+            ...(current.containerName ? { containerName: current.containerName } : {}),
+            hint: areaHint(sequence, "plugins"),
+            installation: asPluginInstallation(updated),
+        };
+    });
+}
+function samePermissions(left, right) {
+    return left.length === right.length && left.every((permission) => right.includes(permission));
+}
+//# sourceMappingURL=pluginInstallationPermissionsUpdate.js.map

package/packages/happy2-server/dist/modules/plugin/pluginInstallationPermissionsUpdate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pluginInstallationPermissionsUpdate.js","sourceRoot":"","sources":["../../../sources/modules/plugin/pluginInstallationPermissionsUpdate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAEtC,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAE/C,OAAO,EAAE,qBAAqB,EAAE,MAAM,wCAAwC,CAAC;AAC/E,OAAO,EAAE,mBAAmB,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAE/D,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAClE,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,EAAE,2BAA2B,EAAE,MAAM,iCAAiC,CAAC;AAC9E,OAAO,EAAE,sBAAsB,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AAE7F;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,mCAAmC,CACrD,QAAyB,EACzB,KAIC;IAOD,OAAO,eAAe,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;QAC1C,MAAM,qBAAqB,CAAC,EAAE,EAAE,KAAK,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC;QACpE,MAAM,CAAC,OAAO,CAAC,GAAG,MAAM,EAAE;aACrB,MAAM,CAAC;YACJ,GAAG,2BAA2B;YAC9B,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,aAAa,EAAE,mBAAmB,CAAC,aAAa;SACnD,CAAC;aACD,IAAI,CAAC,mBAAmB,CAAC;aACzB,SAAS,CAAC,OAAO,EAAE,EAAE,CAAC,mBAAmB,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;aAChE,KAAK,CAAC,EAAE,CAAC,mBAAmB,CAAC,EAAE,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;aACvD,KAAK,CAAC,CAAC,CAAC,CAAC;QACd,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,WAAW,CAAC,WAAW,EAAE,mCAAmC,CAAC,CAAC;QACtF,MAAM,QAAQ,GAAG,iBAAiB,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QACzD,MAAM,QAAQ,GAAG,kBAAkB,CAAC,QAAQ,CAAC,EAAE,WAAW,IAAI,EAAE,CAAC;QACjE,MAAM,OAAO,GAAG,yBAAyB,CAAC,KAAK,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QACvE,MAAM,MAAM,GAAG,sBAAsB,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;QACtE,IAAI,eAAe,CAAC,MAAM,EAAE,OAAO,CAAC;YAChC,OAAO;gBACH,OAAO,EAAE,KAAK;gBACd,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1E,YAAY,EAAE,oBAAoB,CAAC,OAAO,CAAC;aAC9C,CAAC;QAEN,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,EAAE,CAAC,CAAC;QAC5C,MAAM,EAAE;aACH,MAAM,CAAC,mBAAmB,CAAC;aAC3B,GAAG,CAAC;YACD,sBAAsB,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;YAC/C,MAAM,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM;YAC5D,YAAY,EAAE,OAAO,CAAC,aAAa;gBAC/B,CAAC,CAAC,4DAA4D;gBAC9D,CAAC,CAAC,OAAO,CAAC,YAAY;YAC1B,mBAAmB,EAAE,IAAI;YACzB,YAAY,EAAE,QAAQ;YACtB,SAAS,EAAE,GAAG,CAAA,mBAAmB;YACjC,OAAO,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO;SAC1D,CAAC;aACD,KAAK,CAAC,EAAE,CAAC,mBAAmB,CAAC,EAAE,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC;QAC7D,MAAM,eAAe,CAAC,EAAE,EAAE;YACtB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,MAAM,EAAE,4BAA4B;YACpC,UAAU,EAAE,qBAAqB;YACjC,QAAQ,EAAE,KAAK,CAAC,cAAc;YAC9B,MAAM,EAAE,EAAE,kBAAkB,EAAE,MAAM,EAAE;YACtC,KAAK,EAAE,EAAE,kBAAkB,EAAE,OAAO,EAAE;SACzC,CAAC,CAAC;QACH,MAAM,eAAe,CAAC,EAAE,EAAE;YACtB,QAAQ;YACR,IAAI,EAAE,4BAA4B;YAClC,QAAQ,EAAE,KAAK,CAAC,cAAc;YAC9B,WAAW,EAAE,KAAK,CAAC,WAAW;SACjC,CAAC,CAAC;QACH,MAAM,CAAC,OAAO,CAAC,GAAG,MAAM,EAAE;aACrB,MAAM,CAAC,2BAA2B,CAAC;aACnC,IAAI,CAAC,mBAAmB,CAAC;aACzB,SAAS,CAAC,OAAO,EAAE,EAAE,CAAC,mBAAmB,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;aAChE,KAAK,CAAC,EAAE,CAAC,mBAAmB,CAAC,EAAE,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;aACvD,KAAK,CAAC,CAAC,CAAC,CAAC;QACd,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;QACzF,OAAO;YACH,OAAO,EAAE,IAAI;YACb,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1E,IAAI,EAAE,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAC;YACnC,YAAY,EAAE,oBAAoB,CAAC,OAAO,CAAC;SAC9C,CAAC;IACN,CAAC,CAAC,CAAC;AACP,CAAC;AAED,SAAS,eAAe,CACpB,IAAqC,EACrC,KAAsC;IAEtC,OAAO,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC;AAClG,CAAC"}

package/packages/happy2-server/dist/modules/plugin/pluginInstallationUninstall.d.ts

@@ -0,0 +1,16 @@
+import type { DrizzleExecutor } from "../drizzle.js";
+import type { MutationHint } from "../chat/types.js";
+/**
+ * Deletes one authorized plugin installation and its cascade-owned state, removing the plugin row when no installation remains.
+ * The transaction records actor provenance and a plugins sync event after PluginService has stopped process/container resources.
+ */
+export declare function pluginInstallationUninstall(executor: DrizzleExecutor, input: {
+    installationId: string;
+    actorUserId?: string;
+    actorInstallationId?: string;
+}): Promise<{
+    hint: MutationHint;
+    pluginId: string;
+    pluginRemoved: boolean;
+}>;
+//# sourceMappingURL=pluginInstallationUninstall.d.ts.map

package/packages/happy2-server/dist/modules/plugin/pluginInstallationUninstall.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pluginInstallationUninstall.d.ts","sourceRoot":"","sources":["../../../sources/modules/plugin/pluginInstallationUninstall.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAIrD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAOrD;;;GAGG;AACH,wBAAsB,2BAA2B,CAC7C,QAAQ,EAAE,eAAe,EACzB,KAAK,EAAE;IACH,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAChC,GACF,OAAO,CAAC;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,OAAO,CAAA;CAAE,CAAC,CAqD3E"}

package/packages/happy2-server/dist/modules/plugin/pluginInstallationUninstall.js

@@ -0,0 +1,71 @@
+import { eq } from "drizzle-orm";
+import { withTransaction } from "../drizzle.js";
+import { chatAppendAudit } from "../chat/chatAppendAudit.js";
+import { areaHint } from "../chat/areaHint.js";
+import { userRequirePermission } from "../permission/userRequirePermission.js";
+import { pluginInstallations, plugins } from "../schema.js";
+import { syncEventInsert } from "../sync/syncEventInsert.js";
+import { syncSequenceNext } from "../sync/syncSequenceNext.js";
+import { PluginError } from "./types.js";
+/**
+ * Deletes one authorized plugin installation and its cascade-owned state, removing the plugin row when no installation remains.
+ * The transaction records actor provenance and a plugins sync event after PluginService has stopped process/container resources.
+ */
+export async function pluginInstallationUninstall(executor, input) {
+    return withTransaction(executor, async (tx) => {
+        if (input.actorUserId)
+            await userRequirePermission(tx, input.actorUserId, "managePlugins");
+        else if (!input.actorInstallationId)
+            throw new PluginError("forbidden", "Plugin installation authority is required");
+        const [installation] = await tx
+            .select({
+            id: pluginInstallations.id,
+            pluginId: pluginInstallations.pluginId,
+            shortName: plugins.shortName,
+            sourceVersion: plugins.sourceVersion,
+        })
+            .from(pluginInstallations)
+            .innerJoin(plugins, eq(pluginInstallations.pluginId, plugins.id))
+            .where(eq(pluginInstallations.id, input.installationId))
+            .limit(1);
+        if (!installation)
+            throw new PluginError("not_found", "Plugin installation was not found");
+        await tx
+            .delete(pluginInstallations)
+            .where(eq(pluginInstallations.id, input.installationId));
+        const [remaining] = await tx
+            .select({ id: pluginInstallations.id })
+            .from(pluginInstallations)
+            .where(eq(pluginInstallations.pluginId, installation.pluginId))
+            .limit(1);
+        const pluginRemoved = !remaining;
+        if (pluginRemoved)
+            await tx.delete(plugins).where(eq(plugins.id, installation.pluginId));
+        await chatAppendAudit(tx, {
+            actorUserId: input.actorUserId,
+            action: "plugin.uninstalled",
+            targetType: "plugin_installation",
+            targetId: input.installationId,
+            before: {
+                pluginId: installation.pluginId,
+                shortName: installation.shortName,
+                actorInstallationId: input.actorInstallationId,
+                version: installation.sourceVersion,
+            },
+            after: { pluginRemoved },
+        });
+        const sequence = await syncSequenceNext(tx);
+        await syncEventInsert(tx, {
+            sequence,
+            kind: "plugin.uninstalled",
+            entityId: input.installationId,
+            actorUserId: input.actorUserId,
+        });
+        return {
+            hint: areaHint(sequence, "plugins"),
+            pluginId: installation.pluginId,
+            pluginRemoved,
+        };
+    });
+}
+//# sourceMappingURL=pluginInstallationUninstall.js.map

package/packages/happy2-server/dist/modules/plugin/pluginInstallationUninstall.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pluginInstallationUninstall.js","sourceRoot":"","sources":["../../../sources/modules/plugin/pluginInstallationUninstall.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AAEjC,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAE/C,OAAO,EAAE,qBAAqB,EAAE,MAAM,wCAAwC,CAAC;AAC/E,OAAO,EAAE,mBAAmB,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAEzC;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC7C,QAAyB,EACzB,KAIC;IAED,OAAO,eAAe,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;QAC1C,IAAI,KAAK,CAAC,WAAW;YAAE,MAAM,qBAAqB,CAAC,EAAE,EAAE,KAAK,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC;aACtF,IAAI,CAAC,KAAK,CAAC,mBAAmB;YAC/B,MAAM,IAAI,WAAW,CAAC,WAAW,EAAE,2CAA2C,CAAC,CAAC;QACpF,MAAM,CAAC,YAAY,CAAC,GAAG,MAAM,EAAE;aAC1B,MAAM,CAAC;YACJ,EAAE,EAAE,mBAAmB,CAAC,EAAE;YAC1B,QAAQ,EAAE,mBAAmB,CAAC,QAAQ;YACtC,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,aAAa,EAAE,OAAO,CAAC,aAAa;SACvC,CAAC;aACD,IAAI,CAAC,mBAAmB,CAAC;aACzB,SAAS,CAAC,OAAO,EAAE,EAAE,CAAC,mBAAmB,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;aAChE,KAAK,CAAC,EAAE,CAAC,mBAAmB,CAAC,EAAE,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;aACvD,KAAK,CAAC,CAAC,CAAC,CAAC;QACd,IAAI,CAAC,YAAY;YAAE,MAAM,IAAI,WAAW,CAAC,WAAW,EAAE,mCAAmC,CAAC,CAAC;QAC3F,MAAM,EAAE;aACH,MAAM,CAAC,mBAAmB,CAAC;aAC3B,KAAK,CAAC,EAAE,CAAC,mBAAmB,CAAC,EAAE,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC;QAC7D,MAAM,CAAC,SAAS,CAAC,GAAG,MAAM,EAAE;aACvB,MAAM,CAAC,EAAE,EAAE,EAAE,mBAAmB,CAAC,EAAE,EAAE,CAAC;aACtC,IAAI,CAAC,mBAAmB,CAAC;aACzB,KAAK,CAAC,EAAE,CAAC,mBAAmB,CAAC,QAAQ,EAAE,YAAY,CAAC,QAAQ,CAAC,CAAC;aAC9D,KAAK,CAAC,CAAC,CAAC,CAAC;QACd,MAAM,aAAa,GAAG,CAAC,SAAS,CAAC;QACjC,IAAI,aAAa;YAAE,MAAM,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC;QACzF,MAAM,eAAe,CAAC,EAAE,EAAE;YACtB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,MAAM,EAAE,oBAAoB;YAC5B,UAAU,EAAE,qBAAqB;YACjC,QAAQ,EAAE,KAAK,CAAC,cAAc;YAC9B,MAAM,EAAE;gBACJ,QAAQ,EAAE,YAAY,CAAC,QAAQ;gBAC/B,SAAS,EAAE,YAAY,CAAC,SAAS;gBACjC,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;gBAC9C,OAAO,EAAE,YAAY,CAAC,aAAa;aACtC;YACD,KAAK,EAAE,EAAE,aAAa,EAAE;SAC3B,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,EAAE,CAAC,CAAC;QAC5C,MAAM,eAAe,CAAC,EAAE,EAAE;YACtB,QAAQ;YACR,IAAI,EAAE,oBAAoB;YAC1B,QAAQ,EAAE,KAAK,CAAC,cAAc;YAC9B,WAAW,EAAE,KAAK,CAAC,WAAW;SACjC,CAAC,CAAC;QACH,OAAO;YACH,IAAI,EAAE,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAC;YACnC,QAAQ,EAAE,YAAY,CAAC,QAAQ;YAC/B,aAAa;SAChB,CAAC;IACN,CAAC,CAAC,CAAC;AACP,CAAC"}

package/packages/happy2-server/dist/modules/plugin/pluginList.d.ts

@@ -1,7 +1,7 @@
 import type { DrizzleExecutor } from "../drizzle.js";
 import type { SystemPluginSummary } from "./types.js";
 /**
- * Lists durable system plugins and their persisted package-image metadata for an active server administrator.
+ * Lists durable system plugins and package-image metadata after requiring managePlugins permission.
  * This read-only boundary does not mutate durable state and keeps catalog packages distinct from reusable installed plugin identities.
  */
 export declare function pluginList(executor: DrizzleExecutor, actorUserId: string): Promise<SystemPluginSummary[]>;

package/packages/happy2-server/dist/modules/plugin/pluginList.js

@@ -1,13 +1,13 @@
 import { plugins } from "../schema.js";
-import { userRequireServerAdmin } from "../chat/userRequireServerAdmin.js";
+import { userRequirePermission } from "../permission/userRequirePermission.js";
 import { asSystemPlugin } from "./impl/asPlugin.js";
 import { pluginSelection } from "./impl/pluginSelection.js";
 /**
- * Lists durable system plugins and their persisted package-image metadata for an active server administrator.
+ * Lists durable system plugins and package-image metadata after requiring managePlugins permission.
  * This read-only boundary does not mutate durable state and keeps catalog packages distinct from reusable installed plugin identities.
  */
 export async function pluginList(executor, actorUserId) {
-    await userRequireServerAdmin(executor, actorUserId);
+    await userRequirePermission(executor, actorUserId, "managePlugins");
     const rows = await executor
         .select(pluginSelection)
         .from(plugins)

package/packages/happy2-server/dist/modules/plugin/pluginList.js.map

@@ -1 +1 @@
-{"version":3,"file":"pluginList.js","sourceRoot":"","sources":["../../../sources/modules/plugin/pluginList.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,EAAE,sBAAsB,EAAE,MAAM,mCAAmC,CAAC;AAC3E,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAG5D;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC5B,QAAyB,EACzB,WAAmB;IAEnB,MAAM,sBAAsB,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IACpD,MAAM,IAAI,GAAG,MAAM,QAAQ;SACtB,MAAM,CAAC,eAAe,CAAC;SACvB,IAAI,CAAC,OAAO,CAAC;SACb,OAAO,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;IAC9C,OAAO,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;AACpC,CAAC"}
+{"version":3,"file":"pluginList.js","sourceRoot":"","sources":["../../../sources/modules/plugin/pluginList.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,EAAE,qBAAqB,EAAE,MAAM,wCAAwC,CAAC;AAC/E,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAG5D;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC5B,QAAyB,EACzB,WAAmB;IAEnB,MAAM,qBAAqB,CAAC,QAAQ,EAAE,WAAW,EAAE,eAAe,CAAC,CAAC;IACpE,MAAM,IAAI,GAAG,MAAM,QAAQ;SACtB,MAAM,CAAC,eAAe,CAAC;SACvB,IAAI,CAAC,OAAO,CAAC;SACb,OAAO,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;IAC9C,OAAO,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;AACpC,CAAC"}

package/packages/happy2-server/dist/modules/plugin/pluginManagementRequestBeginInstall.d.ts

@@ -0,0 +1,21 @@
+import type { DrizzleExecutor } from "../drizzle.js";
+import type { MutationHint } from "../chat/types.js";
+import { type PluginSource } from "./types.js";
+export interface PluginManagementRequestInstallWork {
+    id: string;
+    chatId: string;
+    installationId: string;
+    packageDigest: string;
+    packageDirectory: string;
+    source: Extract<PluginSource, {
+        kind: "archive" | "link";
+    }>;
+    hint: MutationHint;
+}
+/** Claims one pending pluginManagementRequests install by changing it to processing for an active chat-member administrator. This durable state boundary serializes approval before filesystem and runtime side effects begin. */
+export declare function pluginManagementRequestBeginInstall(executor: DrizzleExecutor, input: {
+    actorUserId: string;
+    chatId: string;
+    requestId: string;
+}): Promise<PluginManagementRequestInstallWork>;
+//# sourceMappingURL=pluginManagementRequestBeginInstall.d.ts.map

package/packages/happy2-server/dist/modules/plugin/pluginManagementRequestBeginInstall.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pluginManagementRequestBeginInstall.d.ts","sourceRoot":"","sources":["../../../sources/modules/plugin/pluginManagementRequestBeginInstall.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAKrD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAIrD,OAAO,EAAe,KAAK,YAAY,EAAE,MAAM,YAAY,CAAC;AAE5D,MAAM,WAAW,kCAAkC;IAC/C,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,MAAM,CAAC;IACzB,MAAM,EAAE,OAAO,CAAC,YAAY,EAAE;QAAE,IAAI,EAAE,SAAS,GAAG,MAAM,CAAA;KAAE,CAAC,CAAC;IAC5D,IAAI,EAAE,YAAY,CAAC;CACtB;AAED,kOAAkO;AAClO,wBAAsB,mCAAmC,CACrD,QAAQ,EAAE,eAAe,EACzB,KAAK,EAAE;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAClE,OAAO,CAAC,kCAAkC,CAAC,CA6E7C"}

package/packages/happy2-server/dist/modules/plugin/pluginManagementRequestBeginInstall.js

@@ -0,0 +1,71 @@
+import { and, eq, sql } from "drizzle-orm";
+import { withTransaction } from "../drizzle.js";
+import { chatGetAccess } from "../chat/chatGetAccess.js";
+import { chatAdvanceWithSequence } from "../chat/chatAdvanceWithSequence.js";
+import { chatHint } from "../chat/chatHint.js";
+import { userRequireServerAdmin } from "../chat/userRequireServerAdmin.js";
+import { pluginManagementRequests } from "../schema.js";
+import { syncSequenceNext } from "../sync/syncSequenceNext.js";
+import { PluginError } from "./types.js";
+/** Claims one pending pluginManagementRequests install by changing it to processing for an active chat-member administrator. This durable state boundary serializes approval before filesystem and runtime side effects begin. */
+export async function pluginManagementRequestBeginInstall(executor, input) {
+    return withTransaction(executor, async (tx) => {
+        await userRequireServerAdmin(tx, input.actorUserId);
+        if (!(await chatGetAccess(tx, input.actorUserId, input.chatId, true)))
+            throw new PluginError("forbidden", "Chat membership is required");
+        const [row] = await tx
+            .select({
+            id: pluginManagementRequests.id,
+            action: pluginManagementRequests.action,
+            status: pluginManagementRequests.status,
+            chatId: pluginManagementRequests.chatId,
+            sourceKind: pluginManagementRequests.sourceKind,
+            sourceReference: pluginManagementRequests.sourceReference,
+            packageDigest: pluginManagementRequests.packageDigest,
+            packageDirectory: pluginManagementRequests.packageDirectory,
+            installationId: pluginManagementRequests.installationId,
+        })
+            .from(pluginManagementRequests)
+            .where(and(eq(pluginManagementRequests.id, input.requestId), eq(pluginManagementRequests.chatId, input.chatId)))
+            .limit(1);
+        if (!row)
+            throw new PluginError("not_found", "Plugin management request was not found");
+        if (row.action !== "install")
+            throw new PluginError("conflict", "Request is not an install");
+        if (row.status !== "pending")
+            throw new PluginError("conflict", `Plugin request is already ${row.status}`);
+        if ((row.sourceKind !== "archive" && row.sourceKind !== "link") ||
+            !row.sourceReference ||
+            !row.packageDigest ||
+            !row.packageDirectory ||
+            !row.installationId)
+            throw new Error("Plugin install request has incomplete package metadata");
+        const updated = await tx
+            .update(pluginManagementRequests)
+            .set({
+            status: "processing",
+            resolvedByUserId: input.actorUserId,
+            updatedAt: sql `CURRENT_TIMESTAMP`,
+        })
+            .where(and(eq(pluginManagementRequests.id, input.requestId), eq(pluginManagementRequests.status, "pending")))
+            .returning({ id: pluginManagementRequests.id });
+        if (updated.length !== 1)
+            throw new PluginError("conflict", "Plugin request was already resolved");
+        const sequence = await syncSequenceNext(tx);
+        await tx
+            .update(pluginManagementRequests)
+            .set({ syncSequence: sequence })
+            .where(eq(pluginManagementRequests.id, input.requestId));
+        const mutation = await chatAdvanceWithSequence(tx, sequence, input.actorUserId, input.chatId, "plugin.install_processing", input.requestId);
+        return {
+            id: row.id,
+            chatId: row.chatId,
+            installationId: row.installationId,
+            packageDigest: row.packageDigest,
+            packageDirectory: row.packageDirectory,
+            source: { kind: row.sourceKind, reference: row.sourceReference },
+            hint: chatHint(sequence, input.chatId, mutation.pts),
+        };
+    });
+}
+//# sourceMappingURL=pluginManagementRequestBeginInstall.js.map

package/packages/happy2-server/dist/modules/plugin/pluginManagementRequestBeginInstall.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pluginManagementRequestBeginInstall.js","sourceRoot":"","sources":["../../../sources/modules/plugin/pluginManagementRequestBeginInstall.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAE3C,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACzD,OAAO,EAAE,uBAAuB,EAAE,MAAM,oCAAoC,CAAC;AAC7E,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAE/C,OAAO,EAAE,sBAAsB,EAAE,MAAM,mCAAmC,CAAC;AAC3E,OAAO,EAAE,wBAAwB,EAAE,MAAM,cAAc,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,EAAE,WAAW,EAAqB,MAAM,YAAY,CAAC;AAY5D,kOAAkO;AAClO,MAAM,CAAC,KAAK,UAAU,mCAAmC,CACrD,QAAyB,EACzB,KAAiE;IAEjE,OAAO,eAAe,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;QAC1C,MAAM,sBAAsB,CAAC,EAAE,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;QACpD,IAAI,CAAC,CAAC,MAAM,aAAa,CAAC,EAAE,EAAE,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YACjE,MAAM,IAAI,WAAW,CAAC,WAAW,EAAE,6BAA6B,CAAC,CAAC;QACtE,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE;aACjB,MAAM,CAAC;YACJ,EAAE,EAAE,wBAAwB,CAAC,EAAE;YAC/B,MAAM,EAAE,wBAAwB,CAAC,MAAM;YACvC,MAAM,EAAE,wBAAwB,CAAC,MAAM;YACvC,MAAM,EAAE,wBAAwB,CAAC,MAAM;YACvC,UAAU,EAAE,wBAAwB,CAAC,UAAU;YAC/C,eAAe,EAAE,wBAAwB,CAAC,eAAe;YACzD,aAAa,EAAE,wBAAwB,CAAC,aAAa;YACrD,gBAAgB,EAAE,wBAAwB,CAAC,gBAAgB;YAC3D,cAAc,EAAE,wBAAwB,CAAC,cAAc;SAC1D,CAAC;aACD,IAAI,CAAC,wBAAwB,CAAC;aAC9B,KAAK,CACF,GAAG,CACC,EAAE,CAAC,wBAAwB,CAAC,EAAE,EAAE,KAAK,CAAC,SAAS,CAAC,EAChD,EAAE,CAAC,wBAAwB,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CACpD,CACJ;aACA,KAAK,CAAC,CAAC,CAAC,CAAC;QACd,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,WAAW,CAAC,WAAW,EAAE,yCAAyC,CAAC,CAAC;QACxF,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS;YACxB,MAAM,IAAI,WAAW,CAAC,UAAU,EAAE,2BAA2B,CAAC,CAAC;QACnE,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS;YACxB,MAAM,IAAI,WAAW,CAAC,UAAU,EAAE,6BAA6B,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;QACjF,IACI,CAAC,GAAG,CAAC,UAAU,KAAK,SAAS,IAAI,GAAG,CAAC,UAAU,KAAK,MAAM,CAAC;YAC3D,CAAC,GAAG,CAAC,eAAe;YACpB,CAAC,GAAG,CAAC,aAAa;YAClB,CAAC,GAAG,CAAC,gBAAgB;YACrB,CAAC,GAAG,CAAC,cAAc;YAEnB,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;QAC9E,MAAM,OAAO,GAAG,MAAM,EAAE;aACnB,MAAM,CAAC,wBAAwB,CAAC;aAChC,GAAG,CAAC;YACD,MAAM,EAAE,YAAY;YACpB,gBAAgB,EAAE,KAAK,CAAC,WAAW;YACnC,SAAS,EAAE,GAAG,CAAA,mBAAmB;SACpC,CAAC;aACD,KAAK,CACF,GAAG,CACC,EAAE,CAAC,wBAAwB,CAAC,EAAE,EAAE,KAAK,CAAC,SAAS,CAAC,EAChD,EAAE,CAAC,wBAAwB,CAAC,MAAM,EAAE,SAAS,CAAC,CACjD,CACJ;aACA,SAAS,CAAC,EAAE,EAAE,EAAE,wBAAwB,CAAC,EAAE,EAAE,CAAC,CAAC;QACpD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YACpB,MAAM,IAAI,WAAW,CAAC,UAAU,EAAE,qCAAqC,CAAC,CAAC;QAC7E,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,EAAE,CAAC,CAAC;QAC5C,MAAM,EAAE;aACH,MAAM,CAAC,wBAAwB,CAAC;aAChC,GAAG,CAAC,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC;aAC/B,KAAK,CAAC,EAAE,CAAC,wBAAwB,CAAC,EAAE,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;QAC7D,MAAM,QAAQ,GAAG,MAAM,uBAAuB,CAC1C,EAAE,EACF,QAAQ,EACR,KAAK,CAAC,WAAW,EACjB,KAAK,CAAC,MAAM,EACZ,2BAA2B,EAC3B,KAAK,CAAC,SAAS,CAClB,CAAC;QACF,OAAO;YACH,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,cAAc,EAAE,GAAG,CAAC,cAAc;YAClC,aAAa,EAAE,GAAG,CAAC,aAAa;YAChC,gBAAgB,EAAE,GAAG,CAAC,gBAAgB;YACtC,MAAM,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,UAAU,EAAE,SAAS,EAAE,GAAG,CAAC,eAAe,EAAE;YAChE,IAAI,EAAE,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,CAAC;SACvD,CAAC;IACN,CAAC,CAAC,CAAC;AACP,CAAC"}

package/packages/happy2-server/dist/modules/plugin/pluginManagementRequestBeginUninstall.d.ts

@@ -0,0 +1,12 @@
+import type { DrizzleExecutor } from "../drizzle.js";
+import type { MutationHint } from "../chat/types.js";
+/** Claims one pending pluginManagementRequests uninstall by changing it to processing for a chat-member administrator. This durable state boundary serializes approval and returns the exact installation target for runtime removal. */
+export declare function pluginManagementRequestBeginUninstall(executor: DrizzleExecutor, input: {
+    actorUserId: string;
+    chatId: string;
+    requestId: string;
+}): Promise<{
+    targetInstallationId: string;
+    hint: MutationHint;
+}>;
+//# sourceMappingURL=pluginManagementRequestBeginUninstall.d.ts.map

package/packages/happy2-server/dist/modules/plugin/pluginManagementRequestBeginUninstall.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pluginManagementRequestBeginUninstall.d.ts","sourceRoot":"","sources":["../../../sources/modules/plugin/pluginManagementRequestBeginUninstall.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAKrD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAMrD,yOAAyO;AACzO,wBAAsB,qCAAqC,CACvD,QAAQ,EAAE,eAAe,EACzB,KAAK,EAAE;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAClE,OAAO,CAAC;IAAE,oBAAoB,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,YAAY,CAAA;CAAE,CAAC,CA2D/D"}

package/packages/happy2-server/dist/modules/plugin/pluginManagementRequestBeginUninstall.js

@@ -0,0 +1,56 @@
+import { and, eq, sql } from "drizzle-orm";
+import { withTransaction } from "../drizzle.js";
+import { chatGetAccess } from "../chat/chatGetAccess.js";
+import { chatAdvanceWithSequence } from "../chat/chatAdvanceWithSequence.js";
+import { chatHint } from "../chat/chatHint.js";
+import { userRequireServerAdmin } from "../chat/userRequireServerAdmin.js";
+import { pluginManagementRequests } from "../schema.js";
+import { syncSequenceNext } from "../sync/syncSequenceNext.js";
+import { PluginError } from "./types.js";
+/** Claims one pending pluginManagementRequests uninstall by changing it to processing for a chat-member administrator. This durable state boundary serializes approval and returns the exact installation target for runtime removal. */
+export async function pluginManagementRequestBeginUninstall(executor, input) {
+    return withTransaction(executor, async (tx) => {
+        await userRequireServerAdmin(tx, input.actorUserId);
+        if (!(await chatGetAccess(tx, input.actorUserId, input.chatId, true)))
+            throw new PluginError("forbidden", "Chat membership is required");
+        const [row] = await tx
+            .select({
+            action: pluginManagementRequests.action,
+            status: pluginManagementRequests.status,
+            targetInstallationId: pluginManagementRequests.targetInstallationId,
+        })
+            .from(pluginManagementRequests)
+            .where(and(eq(pluginManagementRequests.id, input.requestId), eq(pluginManagementRequests.chatId, input.chatId)))
+            .limit(1);
+        if (!row)
+            throw new PluginError("not_found", "Plugin management request was not found");
+        if (row.action !== "uninstall")
+            throw new PluginError("conflict", "Request is not an uninstall");
+        if (row.status !== "pending")
+            throw new PluginError("conflict", `Plugin request is already ${row.status}`);
+        if (!row.targetInstallationId)
+            throw new Error("Plugin uninstall request has no target");
+        const updated = await tx
+            .update(pluginManagementRequests)
+            .set({
+            status: "processing",
+            resolvedByUserId: input.actorUserId,
+            updatedAt: sql `CURRENT_TIMESTAMP`,
+        })
+            .where(and(eq(pluginManagementRequests.id, input.requestId), eq(pluginManagementRequests.status, "pending")))
+            .returning({ id: pluginManagementRequests.id });
+        if (updated.length !== 1)
+            throw new PluginError("conflict", "Plugin request was already resolved");
+        const sequence = await syncSequenceNext(tx);
+        await tx
+            .update(pluginManagementRequests)
+            .set({ syncSequence: sequence })
+            .where(eq(pluginManagementRequests.id, input.requestId));
+        const mutation = await chatAdvanceWithSequence(tx, sequence, input.actorUserId, input.chatId, "plugin.uninstall_processing", input.requestId);
+        return {
+            targetInstallationId: row.targetInstallationId,
+            hint: chatHint(sequence, input.chatId, mutation.pts),
+        };
+    });
+}
+//# sourceMappingURL=pluginManagementRequestBeginUninstall.js.map

package/packages/happy2-server/dist/modules/plugin/pluginManagementRequestBeginUninstall.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pluginManagementRequestBeginUninstall.js","sourceRoot":"","sources":["../../../sources/modules/plugin/pluginManagementRequestBeginUninstall.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAE3C,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACzD,OAAO,EAAE,uBAAuB,EAAE,MAAM,oCAAoC,CAAC;AAC7E,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAE/C,OAAO,EAAE,sBAAsB,EAAE,MAAM,mCAAmC,CAAC;AAC3E,OAAO,EAAE,wBAAwB,EAAE,MAAM,cAAc,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAEzC,yOAAyO;AACzO,MAAM,CAAC,KAAK,UAAU,qCAAqC,CACvD,QAAyB,EACzB,KAAiE;IAEjE,OAAO,eAAe,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;QAC1C,MAAM,sBAAsB,CAAC,EAAE,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;QACpD,IAAI,CAAC,CAAC,MAAM,aAAa,CAAC,EAAE,EAAE,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YACjE,MAAM,IAAI,WAAW,CAAC,WAAW,EAAE,6BAA6B,CAAC,CAAC;QACtE,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE;aACjB,MAAM,CAAC;YACJ,MAAM,EAAE,wBAAwB,CAAC,MAAM;YACvC,MAAM,EAAE,wBAAwB,CAAC,MAAM;YACvC,oBAAoB,EAAE,wBAAwB,CAAC,oBAAoB;SACtE,CAAC;aACD,IAAI,CAAC,wBAAwB,CAAC;aAC9B,KAAK,CACF,GAAG,CACC,EAAE,CAAC,wBAAwB,CAAC,EAAE,EAAE,KAAK,CAAC,SAAS,CAAC,EAChD,EAAE,CAAC,wBAAwB,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CACpD,CACJ;aACA,KAAK,CAAC,CAAC,CAAC,CAAC;QACd,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,WAAW,CAAC,WAAW,EAAE,yCAAyC,CAAC,CAAC;QACxF,IAAI,GAAG,CAAC,MAAM,KAAK,WAAW;YAC1B,MAAM,IAAI,WAAW,CAAC,UAAU,EAAE,6BAA6B,CAAC,CAAC;QACrE,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS;YACxB,MAAM,IAAI,WAAW,CAAC,UAAU,EAAE,6BAA6B,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;QACjF,IAAI,CAAC,GAAG,CAAC,oBAAoB;YAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QACzF,MAAM,OAAO,GAAG,MAAM,EAAE;aACnB,MAAM,CAAC,wBAAwB,CAAC;aAChC,GAAG,CAAC;YACD,MAAM,EAAE,YAAY;YACpB,gBAAgB,EAAE,KAAK,CAAC,WAAW;YACnC,SAAS,EAAE,GAAG,CAAA,mBAAmB;SACpC,CAAC;aACD,KAAK,CACF,GAAG,CACC,EAAE,CAAC,wBAAwB,CAAC,EAAE,EAAE,KAAK,CAAC,SAAS,CAAC,EAChD,EAAE,CAAC,wBAAwB,CAAC,MAAM,EAAE,SAAS,CAAC,CACjD,CACJ;aACA,SAAS,CAAC,EAAE,EAAE,EAAE,wBAAwB,CAAC,EAAE,EAAE,CAAC,CAAC;QACpD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YACpB,MAAM,IAAI,WAAW,CAAC,UAAU,EAAE,qCAAqC,CAAC,CAAC;QAC7E,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,EAAE,CAAC,CAAC;QAC5C,MAAM,EAAE;aACH,MAAM,CAAC,wBAAwB,CAAC;aAChC,GAAG,CAAC,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC;aAC/B,KAAK,CAAC,EAAE,CAAC,wBAAwB,CAAC,EAAE,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;QAC7D,MAAM,QAAQ,GAAG,MAAM,uBAAuB,CAC1C,EAAE,EACF,QAAQ,EACR,KAAK,CAAC,WAAW,EACjB,KAAK,CAAC,MAAM,EACZ,6BAA6B,EAC7B,KAAK,CAAC,SAAS,CAClB,CAAC;QACF,OAAO;YACH,oBAAoB,EAAE,GAAG,CAAC,oBAAoB;YAC9C,IAAI,EAAE,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,CAAC;SACvD,CAAC;IACN,CAAC,CAAC,CAAC;AACP,CAAC"}

package/packages/happy2-server/dist/modules/plugin/pluginManagementRequestCompleteInstall.d.ts

@@ -0,0 +1,11 @@
+import type { DrizzleExecutor } from "../drizzle.js";
+import type { MutationHint } from "../chat/types.js";
+/** Finalizes a claimed pluginManagementRequests install as approved or failed and advances the originating chats point in one transaction. This completion boundary makes the runtime outcome, audit evidence, and reactive card resolution converge durably. */
+export declare function pluginManagementRequestCompleteInstall(executor: DrizzleExecutor, input: {
+    actorUserId: string;
+    requestId: string;
+    chatId: string;
+    installationId: string;
+    error?: string;
+}): Promise<MutationHint>;
+//# sourceMappingURL=pluginManagementRequestCompleteInstall.d.ts.map

package/packages/happy2-server/dist/modules/plugin/pluginManagementRequestCompleteInstall.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pluginManagementRequestCompleteInstall.d.ts","sourceRoot":"","sources":["../../../sources/modules/plugin/pluginManagementRequestCompleteInstall.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAKrD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAIrD,iQAAiQ;AACjQ,wBAAsB,sCAAsC,CACxD,QAAQ,EAAE,eAAe,EACzB,KAAK,EAAE;IACH,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,CAAC,EAAE,MAAM,CAAC;CAClB,GACF,OAAO,CAAC,YAAY,CAAC,CA+CvB"}

package/packages/happy2-server/dist/modules/plugin/pluginManagementRequestCompleteInstall.js

@@ -0,0 +1,44 @@
+import { and, eq, sql } from "drizzle-orm";
+import { withTransaction } from "../drizzle.js";
+import { chatAdvanceWithSequence } from "../chat/chatAdvanceWithSequence.js";
+import { chatAppendAudit } from "../chat/chatAppendAudit.js";
+import { chatHint } from "../chat/chatHint.js";
+import { pluginManagementRequests } from "../schema.js";
+import { syncSequenceNext } from "../sync/syncSequenceNext.js";
+/** Finalizes a claimed pluginManagementRequests install as approved or failed and advances the originating chats point in one transaction. This completion boundary makes the runtime outcome, audit evidence, and reactive card resolution converge durably. */
+export async function pluginManagementRequestCompleteInstall(executor, input) {
+    return withTransaction(executor, async (tx) => {
+        const status = input.error ? "failed" : "approved";
+        const updated = await tx
+            .update(pluginManagementRequests)
+            .set({
+            status,
+            lastError: input.error,
+            resolvedAt: sql `CURRENT_TIMESTAMP`,
+            updatedAt: sql `CURRENT_TIMESTAMP`,
+        })
+            .where(and(eq(pluginManagementRequests.id, input.requestId), eq(pluginManagementRequests.chatId, input.chatId), eq(pluginManagementRequests.status, "processing"), eq(pluginManagementRequests.installationId, input.installationId)))
+            .returning({ id: pluginManagementRequests.id });
+        if (updated.length !== 1)
+            throw new Error("Claimed plugin install request was not found");
+        await chatAppendAudit(tx, {
+            actorUserId: input.actorUserId,
+            action: input.error ? "plugin.install_failed" : "plugin.install_approved",
+            targetType: "plugin_management_request",
+            targetId: input.requestId,
+            chatId: input.chatId,
+            after: {
+                installationId: input.installationId,
+                ...(input.error ? { error: input.error } : {}),
+            },
+        });
+        const sequence = await syncSequenceNext(tx);
+        await tx
+            .update(pluginManagementRequests)
+            .set({ syncSequence: sequence })
+            .where(eq(pluginManagementRequests.id, input.requestId));
+        const mutation = await chatAdvanceWithSequence(tx, sequence, input.actorUserId, input.chatId, input.error ? "plugin.install_failed" : "plugin.install_approved", input.requestId);
+        return chatHint(sequence, input.chatId, mutation.pts);
+    });
+}
+//# sourceMappingURL=pluginManagementRequestCompleteInstall.js.map

package/packages/happy2-server/dist/modules/plugin/pluginManagementRequestCompleteInstall.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pluginManagementRequestCompleteInstall.js","sourceRoot":"","sources":["../../../sources/modules/plugin/pluginManagementRequestCompleteInstall.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAE3C,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,uBAAuB,EAAE,MAAM,oCAAoC,CAAC;AAC7E,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAE/C,OAAO,EAAE,wBAAwB,EAAE,MAAM,cAAc,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAE/D,iQAAiQ;AACjQ,MAAM,CAAC,KAAK,UAAU,sCAAsC,CACxD,QAAyB,EACzB,KAMC;IAED,OAAO,eAAe,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;QAC1C,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC;QACnD,MAAM,OAAO,GAAG,MAAM,EAAE;aACnB,MAAM,CAAC,wBAAwB,CAAC;aAChC,GAAG,CAAC;YACD,MAAM;YACN,SAAS,EAAE,KAAK,CAAC,KAAK;YACtB,UAAU,EAAE,GAAG,CAAA,mBAAmB;YAClC,SAAS,EAAE,GAAG,CAAA,mBAAmB;SACpC,CAAC;aACD,KAAK,CACF,GAAG,CACC,EAAE,CAAC,wBAAwB,CAAC,EAAE,EAAE,KAAK,CAAC,SAAS,CAAC,EAChD,EAAE,CAAC,wBAAwB,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,EACjD,EAAE,CAAC,wBAAwB,CAAC,MAAM,EAAE,YAAY,CAAC,EACjD,EAAE,CAAC,wBAAwB,CAAC,cAAc,EAAE,KAAK,CAAC,cAAc,CAAC,CACpE,CACJ;aACA,SAAS,CAAC,EAAE,EAAE,EAAE,wBAAwB,CAAC,EAAE,EAAE,CAAC,CAAC;QACpD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAC1F,MAAM,eAAe,CAAC,EAAE,EAAE;YACtB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,yBAAyB;YACzE,UAAU,EAAE,2BAA2B;YACvC,QAAQ,EAAE,KAAK,CAAC,SAAS;YACzB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,KAAK,EAAE;gBACH,cAAc,EAAE,KAAK,CAAC,cAAc;gBACpC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACjD;SACJ,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,EAAE,CAAC,CAAC;QAC5C,MAAM,EAAE;aACH,MAAM,CAAC,wBAAwB,CAAC;aAChC,GAAG,CAAC,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC;aAC/B,KAAK,CAAC,EAAE,CAAC,wBAAwB,CAAC,EAAE,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;QAC7D,MAAM,QAAQ,GAAG,MAAM,uBAAuB,CAC1C,EAAE,EACF,QAAQ,EACR,KAAK,CAAC,WAAW,EACjB,KAAK,CAAC,MAAM,EACZ,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,yBAAyB,EACjE,KAAK,CAAC,SAAS,CAClB,CAAC;QACF,OAAO,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;AACP,CAAC"}

package/packages/happy2-server/dist/modules/plugin/pluginManagementRequestCompleteUninstall.d.ts

@@ -0,0 +1,10 @@
+import type { DrizzleExecutor } from "../drizzle.js";
+import type { MutationHint } from "../chat/types.js";
+/** Finalizes a claimed pluginManagementRequests uninstall as approved or failed and advances the originating chats point in one transaction. This completion boundary records the runtime-removal outcome with audit and reactive card evidence. */
+export declare function pluginManagementRequestCompleteUninstall(executor: DrizzleExecutor, input: {
+    actorUserId: string;
+    chatId: string;
+    requestId: string;
+    error?: string;
+}): Promise<MutationHint>;
+//# sourceMappingURL=pluginManagementRequestCompleteUninstall.d.ts.map

package/packages/happy2-server/dist/modules/plugin/pluginManagementRequestCompleteUninstall.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pluginManagementRequestCompleteUninstall.d.ts","sourceRoot":"","sources":["../../../sources/modules/plugin/pluginManagementRequestCompleteUninstall.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAKrD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAIrD,oPAAoP;AACpP,wBAAsB,wCAAwC,CAC1D,QAAQ,EAAE,eAAe,EACzB,KAAK,EAAE;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,GAClF,OAAO,CAAC,YAAY,CAAC,CA2CvB"}

package/packages/happy2-server/dist/modules/plugin/pluginManagementRequestCompleteUninstall.js

@@ -0,0 +1,41 @@
+import { and, eq, sql } from "drizzle-orm";
+import { withTransaction } from "../drizzle.js";
+import { chatAdvanceWithSequence } from "../chat/chatAdvanceWithSequence.js";
+import { chatAppendAudit } from "../chat/chatAppendAudit.js";
+import { chatHint } from "../chat/chatHint.js";
+import { pluginManagementRequests } from "../schema.js";
+import { syncSequenceNext } from "../sync/syncSequenceNext.js";
+/** Finalizes a claimed pluginManagementRequests uninstall as approved or failed and advances the originating chats point in one transaction. This completion boundary records the runtime-removal outcome with audit and reactive card evidence. */
+export async function pluginManagementRequestCompleteUninstall(executor, input) {
+    return withTransaction(executor, async (tx) => {
+        const status = input.error ? "failed" : "approved";
+        const updated = await tx
+            .update(pluginManagementRequests)
+            .set({
+            status,
+            lastError: input.error,
+            resolvedAt: sql `CURRENT_TIMESTAMP`,
+            updatedAt: sql `CURRENT_TIMESTAMP`,
+        })
+            .where(and(eq(pluginManagementRequests.id, input.requestId), eq(pluginManagementRequests.chatId, input.chatId), eq(pluginManagementRequests.status, "processing")))
+            .returning({ id: pluginManagementRequests.id });
+        if (updated.length !== 1)
+            throw new Error("Claimed plugin uninstall request was not found");
+        await chatAppendAudit(tx, {
+            actorUserId: input.actorUserId,
+            action: input.error ? "plugin.uninstall_failed" : "plugin.uninstall_approved",
+            targetType: "plugin_management_request",
+            targetId: input.requestId,
+            chatId: input.chatId,
+            after: input.error ? { error: input.error } : undefined,
+        });
+        const sequence = await syncSequenceNext(tx);
+        await tx
+            .update(pluginManagementRequests)
+            .set({ syncSequence: sequence })
+            .where(eq(pluginManagementRequests.id, input.requestId));
+        const mutation = await chatAdvanceWithSequence(tx, sequence, input.actorUserId, input.chatId, input.error ? "plugin.uninstall_failed" : "plugin.uninstall_approved", input.requestId);
+        return chatHint(sequence, input.chatId, mutation.pts);
+    });
+}
+//# sourceMappingURL=pluginManagementRequestCompleteUninstall.js.map

package/packages/happy2-server/dist/modules/plugin/pluginManagementRequestCompleteUninstall.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pluginManagementRequestCompleteUninstall.js","sourceRoot":"","sources":["../../../sources/modules/plugin/pluginManagementRequestCompleteUninstall.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAE3C,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,uBAAuB,EAAE,MAAM,oCAAoC,CAAC;AAC7E,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAE/C,OAAO,EAAE,wBAAwB,EAAE,MAAM,cAAc,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAE/D,oPAAoP;AACpP,MAAM,CAAC,KAAK,UAAU,wCAAwC,CAC1D,QAAyB,EACzB,KAAiF;IAEjF,OAAO,eAAe,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;QAC1C,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC;QACnD,MAAM,OAAO,GAAG,MAAM,EAAE;aACnB,MAAM,CAAC,wBAAwB,CAAC;aAChC,GAAG,CAAC;YACD,MAAM;YACN,SAAS,EAAE,KAAK,CAAC,KAAK;YACtB,UAAU,EAAE,GAAG,CAAA,mBAAmB;YAClC,SAAS,EAAE,GAAG,CAAA,mBAAmB;SACpC,CAAC;aACD,KAAK,CACF,GAAG,CACC,EAAE,CAAC,wBAAwB,CAAC,EAAE,EAAE,KAAK,CAAC,SAAS,CAAC,EAChD,EAAE,CAAC,wBAAwB,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,EACjD,EAAE,CAAC,wBAAwB,CAAC,MAAM,EAAE,YAAY,CAAC,CACpD,CACJ;aACA,SAAS,CAAC,EAAE,EAAE,EAAE,wBAAwB,CAAC,EAAE,EAAE,CAAC,CAAC;QACpD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QAC5F,MAAM,eAAe,CAAC,EAAE,EAAE;YACtB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,2BAA2B;YAC7E,UAAU,EAAE,2BAA2B;YACvC,QAAQ,EAAE,KAAK,CAAC,SAAS;YACzB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS;SAC1D,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,EAAE,CAAC,CAAC;QAC5C,MAAM,EAAE;aACH,MAAM,CAAC,wBAAwB,CAAC;aAChC,GAAG,CAAC,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC;aAC/B,KAAK,CAAC,EAAE,CAAC,wBAAwB,CAAC,EAAE,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;QAC7D,MAAM,QAAQ,GAAG,MAAM,uBAAuB,CAC1C,EAAE,EACF,QAAQ,EACR,KAAK,CAAC,WAAW,EACjB,KAAK,CAAC,MAAM,EACZ,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,2BAA2B,EACrE,KAAK,CAAC,SAAS,CAClB,CAAC;QACF,OAAO,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;AACP,CAAC"}