happy2 0.0.12 → 0.0.14

package/packages/happy2-server/dist/routes/permissions.js

@@ -0,0 +1,207 @@
+import { CollaborationError } from "../modules/chat/types.js";
+import { roleCreate } from "../modules/permission/roleCreate.js";
+import { roleDelete } from "../modules/permission/roleDelete.js";
+import { roleList } from "../modules/permission/roleList.js";
+import { roleUpdate } from "../modules/permission/roleUpdate.js";
+import { permissions, } from "../modules/permission/types.js";
+import { userPermissionGet } from "../modules/permission/userPermissionGet.js";
+import { userPermissionUpdate } from "../modules/permission/userPermissionUpdate.js";
+import { userRoleAssign } from "../modules/permission/userRoleAssign.js";
+import { userRoleUnassign } from "../modules/permission/userRoleUnassign.js";
+import { realtimeTopics } from "../modules/realtime/index.js";
+const MAX_ID_LENGTH = 128;
+const MAX_ROLE_NAME_LENGTH = 100;
+const MAX_ROLE_DESCRIPTION_LENGTH = 1_000;
+export function registerPermissionRoutes(app, auth, executor, pubsub) {
+    app.get("/v0/admin/roles", authenticated(auth, async (_request, _reply, actorUserId) => ({
+        permissions,
+        roles: await roleList(executor, actorUserId),
+    })));
+    app.post("/v0/admin/roles/createRole", authenticated(auth, async (request, reply, actorUserId) => {
+        const body = requestBody(request, ["name", "description", "permissions"]);
+        const result = await roleCreate(executor, {
+            actorUserId,
+            name: requiredText(body, "name", MAX_ROLE_NAME_LENGTH),
+            description: optionalText(body, "description", MAX_ROLE_DESCRIPTION_LENGTH),
+            permissions: permissionList(body, "permissions"),
+        });
+        await publishPermissionMutation(request, pubsub, actorUserId, result.mutation);
+        return reply.code(201).send({ role: result.role, sync: result.mutation.sync });
+    }));
+    app.post("/v0/admin/roles/:roleId/updateRole", authenticated(auth, async (request, _reply, actorUserId) => {
+        const body = requestBody(request, ["name", "description", "permissions"]);
+        if (Object.keys(body).length === 0)
+            throw new InvalidRequest("At least one role field is required");
+        const mutation = await roleUpdate(executor, {
+            actorUserId,
+            roleId: pathId(request, "roleId"),
+            ...(has(body, "name")
+                ? { name: requiredText(body, "name", MAX_ROLE_NAME_LENGTH) }
+                : {}),
+            ...(has(body, "description")
+                ? {
+                    description: body.description === null
+                        ? null
+                        : requiredText(body, "description", MAX_ROLE_DESCRIPTION_LENGTH),
+                }
+                : {}),
+            ...(has(body, "permissions")
+                ? { permissions: permissionList(body, "permissions") }
+                : {}),
+        });
+        await publishPermissionMutation(request, pubsub, actorUserId, mutation);
+        return { sync: mutation.sync };
+    }));
+    app.post("/v0/admin/roles/:roleId/deleteRole", authenticated(auth, async (request, _reply, actorUserId) => {
+        emptyBody(request);
+        const mutation = await roleDelete(executor, {
+            actorUserId,
+            roleId: pathId(request, "roleId"),
+        });
+        await publishPermissionMutation(request, pubsub, actorUserId, mutation);
+        return { sync: mutation.sync };
+    }));
+    app.get("/v0/admin/users/:userId/permissions", authenticated(auth, async (request, _reply, actorUserId) => ({
+        permissions: await userPermissionGet(executor, {
+            actorUserId,
+            userId: pathId(request, "userId"),
+        }),
+    })));
+    app.post("/v0/admin/users/:userId/updatePermissions", authenticated(auth, async (request, _reply, actorUserId) => {
+        const body = requestBody(request, ["permissions"]);
+        const mutation = await userPermissionUpdate(executor, {
+            actorUserId,
+            userId: pathId(request, "userId"),
+            permissions: permissionList(body, "permissions"),
+        });
+        await publishPermissionMutation(request, pubsub, actorUserId, mutation);
+        return { sync: mutation.sync };
+    }));
+    app.post("/v0/admin/users/:userId/assignRole", authenticated(auth, async (request, _reply, actorUserId) => {
+        const body = requestBody(request, ["roleId"]);
+        const mutation = await userRoleAssign(executor, {
+            actorUserId,
+            userId: pathId(request, "userId"),
+            roleId: id(body.roleId, "roleId"),
+        });
+        await publishPermissionMutation(request, pubsub, actorUserId, mutation);
+        return { sync: mutation.sync };
+    }));
+    app.post("/v0/admin/users/:userId/unassignRole", authenticated(auth, async (request, _reply, actorUserId) => {
+        const body = requestBody(request, ["roleId"]);
+        const mutation = await userRoleUnassign(executor, {
+            actorUserId,
+            userId: pathId(request, "userId"),
+            roleId: id(body.roleId, "roleId"),
+        });
+        await publishPermissionMutation(request, pubsub, actorUserId, mutation);
+        return { sync: mutation.sync };
+    }));
+}
+function authenticated(auth, handler) {
+    return async (request, reply) => {
+        const current = await auth.authenticate(request);
+        if (!current)
+            return reply.code(401).send({ error: "unauthorized" });
+        try {
+            return await handler(request, reply, current.user.id);
+        }
+        catch (error) {
+            if (error instanceof InvalidRequest)
+                return reply.code(400).send({ error: "invalid_request", message: error.message });
+            if (error instanceof CollaborationError)
+                return reply
+                    .code(error.code === "invalid"
+                    ? 400
+                    : error.code === "forbidden"
+                        ? 403
+                        : error.code === "not_found"
+                            ? 404
+                            : 409)
+                    .send({ error: error.code, message: error.message });
+            throw error;
+        }
+    };
+}
+async function publishPermissionMutation(request, pubsub, actorUserId, mutation) {
+    const event = { type: "sync", ...mutation.sync };
+    const topics = mutation.broadcast
+        ? [realtimeTopics.server]
+        : [...new Set([actorUserId, ...mutation.affectedUserIds])].map(realtimeTopics.user);
+    const batchSize = 32;
+    for (let index = 0; index < topics.length; index += batchSize) {
+        const results = await Promise.allSettled(topics.slice(index, index + batchSize).map((topic) => pubsub.publish(topic, event)));
+        for (const result of results)
+            if (result.status === "rejected")
+                request.log.warn({ err: result.reason }, "Could not publish permission sync hint");
+    }
+}
+function requestBody(request, allowed) {
+    const body = record(request.body, "Request body");
+    const unexpected = Object.keys(body).find((key) => !allowed.includes(key));
+    if (unexpected)
+        throw new InvalidRequest(`Unexpected request body field: ${unexpected}`);
+    return body;
+}
+function emptyBody(request) {
+    if (request.body === undefined || request.body === null)
+        return;
+    requestBody(request, []);
+}
+function pathId(request, key) {
+    return id(record(request.params, "Path parameters")[key], key);
+}
+function permissionList(body, key) {
+    const value = body[key];
+    if (!Array.isArray(value))
+        throw new InvalidRequest(`${key} must be an array`);
+    if (new Set(value).size !== value.length)
+        throw new InvalidRequest(`${key} must not contain duplicates`);
+    for (const permission of value)
+        if (typeof permission !== "string" || !permissions.includes(permission))
+            throw new InvalidRequest(`${key} contains an unknown permission`);
+    const selected = new Set(value);
+    return permissions.filter((permission) => selected.has(permission));
+}
+function requiredText(body, key, maximum) {
+    const value = body[key];
+    if (typeof value !== "string")
+        throw new InvalidRequest(`${key} must be a string`);
+    const trimmed = value.trim();
+    if (!trimmed || trimmed.length > maximum || hasControlCharacters(trimmed))
+        throw new InvalidRequest(`${key} must be between 1 and ${maximum} safe characters`);
+    return trimmed;
+}
+function optionalText(body, key, maximum) {
+    if (!has(body, key) || body[key] === null)
+        return undefined;
+    return requiredText(body, key, maximum);
+}
+function id(value, name) {
+    if (typeof value !== "string" ||
+        !value ||
+        value.length > MAX_ID_LENGTH ||
+        value.trim() !== value ||
+        hasControlCharacters(value))
+        throw new InvalidRequest(`${name} must be a valid identifier`);
+    return value;
+}
+function record(value, name) {
+    if (!value || typeof value !== "object" || Array.isArray(value))
+        throw new InvalidRequest(`${name} must be an object`);
+    return value;
+}
+function has(body, key) {
+    return Object.prototype.hasOwnProperty.call(body, key);
+}
+function hasControlCharacters(value) {
+    for (const character of value) {
+        const code = character.codePointAt(0);
+        if (code < 0x20 || code === 0x7f)
+            return true;
+    }
+    return false;
+}
+class InvalidRequest extends Error {
+}
+//# sourceMappingURL=permissions.js.map

package/packages/happy2-server/dist/routes/permissions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions.js","sourceRoot":"","sources":["../../sources/routes/permissions.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAE9D,OAAO,EAAE,UAAU,EAAE,MAAM,qCAAqC,CAAC;AACjE,OAAO,EAAE,UAAU,EAAE,MAAM,qCAAqC,CAAC;AACjE,OAAO,EAAE,QAAQ,EAAE,MAAM,mCAAmC,CAAC;AAC7D,OAAO,EAAE,UAAU,EAAE,MAAM,qCAAqC,CAAC;AACjE,OAAO,EACH,WAAW,GAGd,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,iBAAiB,EAAE,MAAM,4CAA4C,CAAC;AAC/E,OAAO,EAAE,oBAAoB,EAAE,MAAM,+CAA+C,CAAC;AACrF,OAAO,EAAE,cAAc,EAAE,MAAM,yCAAyC,CAAC;AACzE,OAAO,EAAE,gBAAgB,EAAE,MAAM,2CAA2C,CAAC;AAC7E,OAAO,EAAE,cAAc,EAAmC,MAAM,8BAA8B,CAAC;AAE/F,MAAM,aAAa,GAAG,GAAG,CAAC;AAC1B,MAAM,oBAAoB,GAAG,GAAG,CAAC;AACjC,MAAM,2BAA2B,GAAG,KAAK,CAAC;AAE1C,MAAM,UAAU,wBAAwB,CACpC,GAAoB,EACpB,IAAiB,EACjB,QAAyB,EACzB,MAAc;IAEd,GAAG,CAAC,GAAG,CACH,iBAAiB,EACjB,aAAa,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC;QAC1D,WAAW;QACX,KAAK,EAAE,MAAM,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC;KAC/C,CAAC,CAAC,CACN,CAAC;IACF,GAAG,CAAC,IAAI,CACJ,4BAA4B,EAC5B,aAAa,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE;QACtD,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,aAAa,EAAE,aAAa,CAAC,CAAC,CAAC;QAC1E,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,QAAQ,EAAE;YACtC,WAAW;YACX,IAAI,EAAE,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,oBAAoB,CAAC;YACtD,WAAW,EAAE,YAAY,CAAC,IAAI,EAAE,aAAa,EAAE,2BAA2B,CAAC;YAC3E,WAAW,EAAE,cAAc,CAAC,IAAI,EAAE,aAAa,CAAC;SACnD,CAAC,CAAC;QACH,MAAM,yBAAyB,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC/E,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;IACnF,CAAC,CAAC,CACL,CAAC;IACF,GAAG,CAAC,IAAI,CACJ,oCAAoC,EACpC,aAAa,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE;QACvD,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,aAAa,EAAE,aAAa,CAAC,CAAC,CAAC;QAC1E,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;YAC9B,MAAM,IAAI,cAAc,CAAC,qCAAqC,CAAC,CAAC;QACpE,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,QAAQ,EAAE;YACxC,WAAW;YACX,MAAM,EAAE,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC;YACjC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC;gBACjB,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,oBAAoB,CAAC,EAAE;gBAC5D,CAAC,CAAC,EAAE,CAAC;YACT,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,aAAa,CAAC;gBACxB,CAAC,CAAC;oBACI,WAAW,EACP,IAAI,CAAC,WAAW,KAAK,IAAI;wBACrB,CAAC,CAAC,IAAI;wBACN,CAAC,CAAC,YAAY,CAAC,IAAI,EAAE,aAAa,EAAE,2BAA2B,CAAC;iBAC3E;gBACH,CAAC,CAAC,EAAE,CAAC;YACT,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,aAAa,CAAC;gBACxB,CAAC,CAAC,EAAE,WAAW,EAAE,cAAc,CAAC,IAAI,EAAE,aAAa,CAAC,EAAE;gBACtD,CAAC,CAAC,EAAE,CAAC;SACZ,CAAC,CAAC;QACH,MAAM,yBAAyB,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;QACxE,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC;IACnC,CAAC,CAAC,CACL,CAAC;IACF,GAAG,CAAC,IAAI,CACJ,oCAAoC,EACpC,aAAa,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE;QACvD,SAAS,CAAC,OAAO,CAAC,CAAC;QACnB,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,QAAQ,EAAE;YACxC,WAAW;YACX,MAAM,EAAE,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC;SACpC,CAAC,CAAC;QACH,MAAM,yBAAyB,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;QACxE,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC;IACnC,CAAC,CAAC,CACL,CAAC;IACF,GAAG,CAAC,GAAG,CACH,qCAAqC,EACrC,aAAa,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC;QACzD,WAAW,EAAE,MAAM,iBAAiB,CAAC,QAAQ,EAAE;YAC3C,WAAW;YACX,MAAM,EAAE,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC;SACpC,CAAC;KACL,CAAC,CAAC,CACN,CAAC;IACF,GAAG,CAAC,IAAI,CACJ,2CAA2C,EAC3C,aAAa,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE;QACvD,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC;QACnD,MAAM,QAAQ,GAAG,MAAM,oBAAoB,CAAC,QAAQ,EAAE;YAClD,WAAW;YACX,MAAM,EAAE,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC;YACjC,WAAW,EAAE,cAAc,CAAC,IAAI,EAAE,aAAa,CAAC;SACnD,CAAC,CAAC;QACH,MAAM,yBAAyB,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;QACxE,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC;IACnC,CAAC,CAAC,CACL,CAAC;IACF,GAAG,CAAC,IAAI,CACJ,oCAAoC,EACpC,aAAa,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE;QACvD,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC9C,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,QAAQ,EAAE;YAC5C,WAAW;YACX,MAAM,EAAE,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC;YACjC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC;SACpC,CAAC,CAAC;QACH,MAAM,yBAAyB,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;QACxE,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC;IACnC,CAAC,CAAC,CACL,CAAC;IACF,GAAG,CAAC,IAAI,CACJ,sCAAsC,EACtC,aAAa,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE;QACvD,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC9C,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,QAAQ,EAAE;YAC9C,WAAW;YACX,MAAM,EAAE,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC;YACjC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC;SACpC,CAAC,CAAC;QACH,MAAM,yBAAyB,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;QACxE,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC;IACnC,CAAC,CAAC,CACL,CAAC;AACN,CAAC;AAQD,SAAS,aAAa,CAAC,IAAiB,EAAE,OAA6B;IACnE,OAAO,KAAK,EAAE,OAAuB,EAAE,KAAmB,EAAoB,EAAE;QAC5E,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QACjD,IAAI,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;QACrE,IAAI,CAAC;YACD,OAAO,MAAM,OAAO,CAAC,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC1D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,IAAI,KAAK,YAAY,cAAc;gBAC/B,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YACtF,IAAI,KAAK,YAAY,kBAAkB;gBACnC,OAAO,KAAK;qBACP,IAAI,CACD,KAAK,CAAC,IAAI,KAAK,SAAS;oBACpB,CAAC,CAAC,GAAG;oBACL,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,WAAW;wBAC1B,CAAC,CAAC,GAAG;wBACL,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,WAAW;4BAC1B,CAAC,CAAC,GAAG;4BACL,CAAC,CAAC,GAAG,CAChB;qBACA,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YAC7D,MAAM,KAAK,CAAC;QAChB,CAAC;IACL,CAAC,CAAC;AACN,CAAC;AAED,KAAK,UAAU,yBAAyB,CACpC,OAAuB,EACvB,MAAc,EACd,WAAmB,EACnB,QAA4B;IAE5B,MAAM,KAAK,GAAkB,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;IAChE,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS;QAC7B,CAAC,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC;QACzB,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,GAAG,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;IACxF,MAAM,SAAS,GAAG,EAAE,CAAC;IACrB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,IAAI,SAAS,EAAE,CAAC;QAC5D,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CACpC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,GAAG,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CACtF,CAAC;QACF,KAAK,MAAM,MAAM,IAAI,OAAO;YACxB,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU;gBAC5B,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,EAAE,wCAAwC,CAAC,CAAC;IAC/F,CAAC;AACL,CAAC;AAED,SAAS,WAAW,CAAC,OAAuB,EAAE,OAA0B;IACpE,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;IAClD,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3E,IAAI,UAAU;QAAE,MAAM,IAAI,cAAc,CAAC,kCAAkC,UAAU,EAAE,CAAC,CAAC;IACzF,OAAO,IAAI,CAAC;AAChB,CAAC;AAED,SAAS,SAAS,CAAC,OAAuB;IACtC,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,CAAC,IAAI,KAAK,IAAI;QAAE,OAAO;IAChE,WAAW,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,MAAM,CAAC,OAAuB,EAAE,GAAW;IAChD,OAAO,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;AACnE,CAAC;AAED,SAAS,cAAc,CAAC,IAA6B,EAAE,GAAW;IAC9D,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;IACxB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,cAAc,CAAC,GAAG,GAAG,mBAAmB,CAAC,CAAC;IAC/E,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM;QACpC,MAAM,IAAI,cAAc,CAAC,GAAG,GAAG,8BAA8B,CAAC,CAAC;IACnE,KAAK,MAAM,UAAU,IAAI,KAAK;QAC1B,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,UAAwB,CAAC;YACjF,MAAM,IAAI,cAAc,CAAC,GAAG,GAAG,iCAAiC,CAAC,CAAC;IAC1E,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,KAAqB,CAAC,CAAC;IAChD,OAAO,WAAW,CAAC,MAAM,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,YAAY,CAAC,IAA6B,EAAE,GAAW,EAAE,OAAe;IAC7E,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;IACxB,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,MAAM,IAAI,cAAc,CAAC,GAAG,GAAG,mBAAmB,CAAC,CAAC;IACnF,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,OAAO,IAAI,oBAAoB,CAAC,OAAO,CAAC;QACrE,MAAM,IAAI,cAAc,CAAC,GAAG,GAAG,0BAA0B,OAAO,kBAAkB,CAAC,CAAC;IACxF,OAAO,OAAO,CAAC;AACnB,CAAC;AAED,SAAS,YAAY,CACjB,IAA6B,EAC7B,GAAW,EACX,OAAe;IAEf,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5D,OAAO,YAAY,CAAC,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;AAC5C,CAAC;AAED,SAAS,EAAE,CAAC,KAAc,EAAE,IAAY;IACpC,IACI,OAAO,KAAK,KAAK,QAAQ;QACzB,CAAC,KAAK;QACN,KAAK,CAAC,MAAM,GAAG,aAAa;QAC5B,KAAK,CAAC,IAAI,EAAE,KAAK,KAAK;QACtB,oBAAoB,CAAC,KAAK,CAAC;QAE3B,MAAM,IAAI,cAAc,CAAC,GAAG,IAAI,6BAA6B,CAAC,CAAC;IACnE,OAAO,KAAK,CAAC;AACjB,CAAC;AAED,SAAS,MAAM,CAAC,KAAc,EAAE,IAAY;IACxC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAC3D,MAAM,IAAI,cAAc,CAAC,GAAG,IAAI,oBAAoB,CAAC,CAAC;IAC1D,OAAO,KAAgC,CAAC;AAC5C,CAAC;AAED,SAAS,GAAG,CAAC,IAA6B,EAAE,GAAW;IACnD,OAAO,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAa;IACvC,KAAK,MAAM,SAAS,IAAI,KAAK,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC,CAAE,CAAC;QACvC,IAAI,IAAI,GAAG,IAAI,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;IAClD,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC;AAED,MAAM,cAAe,SAAQ,KAAK;CAAG"}

package/packages/happy2-server/dist/routes/pluginHost.d.ts

@@ -1,6 +1,7 @@
 import { type FastifyInstance } from "fastify";
 import type { DrizzleExecutor } from "../modules/drizzle.js";
 import type { PluginService } from "../modules/plugin/service.js";
+import type { AgentService } from "../modules/agents/index.js";
 /** Builds the capability-only HTTP surface exposed to local plugin containers. */
-export declare function createPluginHostApi(executor: DrizzleExecutor, plugins: PluginService, logger: boolean): FastifyInstance;
+export declare function createPluginHostApi(executor: DrizzleExecutor, plugins: PluginService, logger: boolean, agents?: Pick<AgentService, "prepareTurns" | "startTurn">): FastifyInstance;
 //# sourceMappingURL=pluginHost.d.ts.map

package/packages/happy2-server/dist/routes/pluginHost.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pluginHost.d.ts","sourceRoot":"","sources":["../../sources/routes/pluginHost.ts"],"names":[],"mappings":"AAAA,OAAgB,EAAE,KAAK,eAAe,EAAuB,MAAM,SAAS,CAAC;AAC7E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAE7D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAGlE,kFAAkF;AAClF,wBAAgB,mBAAmB,CAC/B,QAAQ,EAAE,eAAe,EACzB,OAAO,EAAE,aAAa,EACtB,MAAM,EAAE,OAAO,GAChB,eAAe,CAuBjB"}
+{"version":3,"file":"pluginHost.d.ts","sourceRoot":"","sources":["../../sources/routes/pluginHost.ts"],"names":[],"mappings":"AAAA,OAAgB,EAAE,KAAK,eAAe,EAA0C,MAAM,SAAS,CAAC;AAChG,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAE7D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAElE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAQ/D,kFAAkF;AAClF,wBAAgB,mBAAmB,CAC/B,QAAQ,EAAE,eAAe,EACzB,OAAO,EAAE,aAAa,EACtB,MAAM,EAAE,OAAO,EACf,MAAM,CAAC,EAAE,IAAI,CAAC,YAAY,EAAE,cAAc,GAAG,WAAW,CAAC,GAC1D,eAAe,CAkKjB"}

package/packages/happy2-server/dist/routes/pluginHost.js

@@ -1,14 +1,15 @@
 import Fastify, {} from "fastify";
 import { pluginInstallationListForHost } from "../modules/plugin/pluginInstallationListForHost.js";
-import { PluginError } from "../modules/plugin/types.js";
+import { CollaborationError } from "../modules/chat/types.js";
+import { PluginError, pluginHostPermissions, } from "../modules/plugin/types.js";
 /** Builds the capability-only HTTP surface exposed to local plugin containers. */
-export function createPluginHostApi(executor, plugins, logger) {
+export function createPluginHostApi(executor, plugins, logger, agents) {
     const app = Fastify({ logger });
     app.get("/plugins", async (request, reply) => {
         try {
-            const installationId = await plugins.authorizeHost(bearerToken(request), "plugins:list");
+            const claims = await plugins.authorizeHost(bearerToken(request), "plugins:list");
             return {
-                installationId,
+                installationId: claims.installationId,
                 plugins: await pluginInstallationListForHost(executor),
             };
         }
@@ -18,13 +19,144 @@ export function createPluginHostApi(executor, plugins, logger) {
             throw error;
         }
     });
+    app.post("/chats/updateChat", async (request, reply) => {
+        try {
+            return await plugins.chatUpdate(bearerToken(request), requiredHeader(request, "x-happy2-chat-token", "Plugin chat token is required"), chatUpdateInput(request.body));
+        }
+        catch (error) {
+            const response = handled(reply, error);
+            if (response)
+                return response;
+            throw error;
+        }
+    });
+    app.post("/plugins/install", async (request, reply) => {
+        try {
+            const { installationId: actorInstallationId } = await plugins.authorizeHost(bearerToken(request), "plugins:install");
+            const body = object(request.body, "Request body");
+            only(body, ["shortName", "variables", "containerImageId", "permissions"]);
+            const installation = await plugins.install({
+                actorInstallationId,
+                shortName: shortName(body.shortName),
+                variables: variables(body.variables),
+                permissions: permissions(body.permissions),
+                ...(body.containerImageId === undefined
+                    ? {}
+                    : { containerImageId: identifier(body.containerImageId, "containerImageId") }),
+            });
+            return reply.code(202).send({ installation });
+        }
+        catch (error) {
+            const response = handled(reply, error);
+            if (response)
+                return response;
+            throw error;
+        }
+    });
+    app.post("/channels/updateMembers", async (request, reply) => {
+        try {
+            return await plugins.channelMembersUpdate(bearerToken(request), requiredHeader(request, "x-happy2-chat-token", "Plugin chat token is required"), channelMembersUpdateInput(request.body));
+        }
+        catch (error) {
+            const response = handled(reply, error);
+            if (response)
+                return response;
+            throw error;
+        }
+    });
+    app.post("/plugins/uninstall", async (request, reply) => {
+        try {
+            const { installationId: actorInstallationId } = await plugins.authorizeHost(bearerToken(request), "plugins:uninstall");
+            const body = object(request.body, "Request body");
+            only(body, ["installationId"]);
+            await plugins.uninstallInstallation({
+                actorInstallationId,
+                installationId: identifier(body.installationId, "installationId"),
+            });
+            return { uninstalled: true };
+        }
+        catch (error) {
+            const response = handled(reply, error);
+            if (response)
+                return response;
+            throw error;
+        }
+    });
+    app.post("/plugin-install-requests", async (request, reply) => {
+        try {
+            const claims = await plugins.authorizeHost(bearerToken(request), "plugins:request-install");
+            if (!claims.agentCall)
+                throw new PluginError("forbidden", "Plugin install requests require an active Happy agent call");
+            const body = object(request.body, "Request body");
+            only(body, ["sourceUrl", "reason"]);
+            if (typeof body.sourceUrl !== "string" || body.sourceUrl.length > 4_096)
+                throw new PluginError("broken_configuration", "sourceUrl must be a plugin ZIP URL");
+            const reason = optionalString(body.reason, "reason", 1_000);
+            const approval = await plugins.requestInstallLink({
+                requesterInstallationId: claims.installationId,
+                agentCall: claims.agentCall,
+                url: body.sourceUrl,
+                ...(reason ? { reason } : {}),
+            });
+            return reply.code(202).send({ approval });
+        }
+        catch (error) {
+            const response = handled(reply, error);
+            if (response)
+                return response;
+            throw error;
+        }
+    });
+    app.post("/plugin-uninstall-requests", async (request, reply) => {
+        try {
+            const claims = await plugins.authorizeHost(bearerToken(request), "plugins:request-uninstall");
+            if (!claims.agentCall)
+                throw new PluginError("forbidden", "Plugin uninstall requests require an active Happy agent call");
+            const body = object(request.body, "Request body");
+            only(body, ["installationId", "reason"]);
+            const installationId = identifier(body.installationId, "installationId");
+            const reason = optionalString(body.reason, "reason", 1_000);
+            const approval = await plugins.requestUninstall({
+                requesterInstallationId: claims.installationId,
+                agentCall: claims.agentCall,
+                targetInstallationId: installationId,
+                ...(reason ? { reason } : {}),
+            });
+            return reply.code(202).send({ approval });
+        }
+        catch (error) {
+            const response = handled(reply, error);
+            if (response)
+                return response;
+            throw error;
+        }
+    });
+    app.post("/channels/createChannel", async (request, reply) => {
+        try {
+            const result = await plugins.channelCreate(bearerToken(request), requiredHeader(request, "x-happy2-chat-token", "Plugin chat token is required"), channelCreateInput(request.body), agents);
+            return reply.code(201).send(result);
+        }
+        catch (error) {
+            const response = handled(reply, error);
+            if (response)
+                return response;
+            throw error;
+        }
+    });
     app.setErrorHandler((error, request, reply) => {
         request.log.error(error);
-        if (!reply.sent)
+        if (!reply.sent && !handled(reply, error))
             reply.code(500).send({ error: "internal_server_error" });
     });
     return app;
 }
+function optionalString(value, name, maximum) {
+    if (value === undefined)
+        return undefined;
+    if (typeof value !== "string" || !value.trim() || value.length > maximum)
+        throw new PluginHostRequestError(`${name} must contain between 1 and ${maximum} characters`);
+    return value.trim();
+}
 function bearerToken(request) {
     const authorization = request.headers.authorization;
     if (!authorization?.startsWith("Bearer ") || authorization.length > 4_096)
@@ -34,4 +166,223 @@ function bearerToken(request) {
         throw new PluginError("forbidden", "Plugin runtime token is required");
     return token;
 }
+function requiredHeader(request, name, message) {
+    const raw = request.headers[name];
+    const value = Array.isArray(raw) ? raw[0] : raw;
+    if (!value || value.length > 4_096)
+        throw new PluginError("forbidden", message);
+    return value;
+}
+function chatUpdateInput(value) {
+    if (!value || typeof value !== "object" || Array.isArray(value))
+        throw new PluginHostRequestError("Request body must be an object");
+    const body = value;
+    if (Object.keys(body).some((key) => key !== "title" && key !== "description"))
+        throw new PluginHostRequestError("Request body contains an unknown field");
+    if (!("title" in body) && !("description" in body))
+        throw new PluginHostRequestError("At least one chat field is required");
+    let title;
+    if ("title" in body) {
+        if (typeof body.title !== "string")
+            throw new PluginHostRequestError("title must be a string");
+        title = body.title.trim();
+        if (!title || title.length > 100)
+            throw new PluginHostRequestError("title must contain 1-100 characters");
+    }
+    let description;
+    if ("description" in body) {
+        if (body.description === null)
+            description = null;
+        else {
+            if (typeof body.description !== "string")
+                throw new PluginHostRequestError("description must be a string or null");
+            const normalized = body.description.trim();
+            if (normalized.length > 500)
+                throw new PluginHostRequestError("description must contain at most 500 characters");
+            description = normalized || null;
+        }
+    }
+    return {
+        ...(title === undefined ? {} : { title }),
+        ...(description === undefined ? {} : { description }),
+    };
+}
+function shortName(value) {
+    if (typeof value !== "string" || !/^[a-z0-9]+(?:-[a-z0-9]+)*$/.test(value))
+        throw new PluginHostRequestError("shortName is invalid");
+    return value;
+}
+function identifier(value, name) {
+    if (typeof value !== "string" || !value || value.length > 128 || /\s/.test(value))
+        throw new PluginHostRequestError(`${name} must be a valid identifier`);
+    return value;
+}
+function variables(value) {
+    const record = value === undefined ? {} : object(value, "variables");
+    if (Object.keys(record).length > 64)
+        throw new PluginHostRequestError("variables has too many entries");
+    const result = {};
+    for (const [key, item] of Object.entries(record)) {
+        if (!/^[A-Z_][A-Z0-9_]*$/.test(key) || typeof item !== "string")
+            throw new PluginHostRequestError("variables must map environment keys to string values");
+        result[key] = item;
+    }
+    return result;
+}
+function permissions(value) {
+    if (value === undefined)
+        return [];
+    if (!Array.isArray(value) || value.length > pluginHostPermissions.length)
+        throw new PluginHostRequestError("permissions must be an array");
+    const result = [];
+    for (const permission of value) {
+        if (typeof permission !== "string" ||
+            !pluginHostPermissions.includes(permission))
+            throw new PluginHostRequestError("permissions contains an unknown plugin permission");
+        if (result.includes(permission))
+            throw new PluginHostRequestError(`permissions contains duplicate ${permission}`);
+        result.push(permission);
+    }
+    return result;
+}
+function object(value, name) {
+    if (!value || typeof value !== "object" || Array.isArray(value))
+        throw new PluginHostRequestError(`${name} must be an object`);
+    return value;
+}
+function channelMembersUpdateInput(value) {
+    const body = bodyRecord(value);
+    onlyBodyKeys(body, ["add", "remove"]);
+    const add = userCapabilities(body.add, "add");
+    const remove = userCapabilities(body.remove, "remove");
+    if (!add.length && !remove.length)
+        throw new PluginHostRequestError("At least one user must be added or removed");
+    const addIds = new Set(add.map(({ id }) => id));
+    if (remove.some(({ id }) => addIds.has(id)))
+        throw new PluginHostRequestError("A user cannot be both added and removed");
+    return { add, remove };
+}
+function channelCreateInput(value) {
+    const body = bodyRecord(value);
+    onlyBodyKeys(body, ["name", "description", "idempotencyKey", "members", "initialMessage"]);
+    const name = requiredTrimmedString(body.name, "name", 100);
+    let description;
+    if (body.description !== undefined)
+        description = requiredTrimmedString(body.description, "description", 500);
+    const members = userCapabilities(body.members, "members");
+    const idempotencyKey = body.idempotencyKey === undefined
+        ? undefined
+        : requiredToken(body.idempotencyKey, "idempotencyKey", 128);
+    let initialMessage;
+    if (body.initialMessage !== undefined) {
+        const message = bodyRecord(body.initialMessage, "initialMessage");
+        onlyBodyKeys(message, ["audience", "text"], "initialMessage");
+        if (message.audience !== "agents" && message.audience !== "people")
+            throw new PluginHostRequestError("initialMessage.audience must be agents or people");
+        initialMessage = {
+            audience: message.audience,
+            text: requiredMessageText(message.text),
+        };
+    }
+    return {
+        name,
+        ...(description ? { description } : {}),
+        ...(idempotencyKey ? { idempotencyKey } : {}),
+        members,
+        ...(initialMessage ? { initialMessage } : {}),
+    };
+}
+function userCapabilities(value, name) {
+    if (value === undefined)
+        return [];
+    if (!Array.isArray(value) || value.length > 100)
+        throw new PluginHostRequestError(`${name} must be an array of at most 100 users`);
+    const result = value.map((entry, index) => {
+        const capability = bodyRecord(entry, `${name}[${index}]`);
+        onlyBodyKeys(capability, ["id", "token"], `${name}[${index}]`);
+        return {
+            id: requiredToken(capability.id, `${name}[${index}].id`, 128),
+            token: requiredToken(capability.token, `${name}[${index}].token`, 4_096),
+        };
+    });
+    if (new Set(result.map(({ id }) => id)).size !== result.length)
+        throw new PluginHostRequestError(`${name} contains a duplicate user`);
+    return result;
+}
+function bodyRecord(value, name = "Request body") {
+    if (!value || typeof value !== "object" || Array.isArray(value))
+        throw new PluginHostRequestError(`${name} must be an object`);
+    return value;
+}
+function only(value, allowed) {
+    const unexpected = Object.keys(value).find((key) => !allowed.includes(key));
+    if (unexpected)
+        throw new PluginHostRequestError(`Unexpected request field ${unexpected}`);
+}
+function onlyBodyKeys(body, allowed, name = "Request body") {
+    if (Object.keys(body).some((key) => !allowed.includes(key)))
+        throw new PluginHostRequestError(`${name} contains an unknown field`);
+}
+function requiredTrimmedString(value, name, maximum) {
+    if (typeof value !== "string")
+        throw new PluginHostRequestError(`${name} must be a string`);
+    const normalized = value.trim();
+    if (!normalized || normalized.length > maximum || hasControlCharacters(normalized))
+        throw new PluginHostRequestError(`${name} must contain 1-${maximum} characters`);
+    return normalized;
+}
+function requiredMessageText(value) {
+    if (typeof value !== "string")
+        throw new PluginHostRequestError("initialMessage.text must be a string");
+    if (value.length > 40_000)
+        throw new PluginHostRequestError("initialMessage.text must contain at most 40000 characters");
+    if (!value.trim() || hasControlCharacters(value, true))
+        throw new PluginHostRequestError("initialMessage.text is empty or contains unsupported characters");
+    return value;
+}
+function hasControlCharacters(value, allowLineBreaks = false) {
+    for (const character of value) {
+        const code = character.charCodeAt(0);
+        if (code === 127 || (code < 32 && !(allowLineBreaks && (code === 9 || code === 10))))
+            return true;
+    }
+    return false;
+}
+function requiredToken(value, name, maximum) {
+    if (typeof value !== "string" || !value || value.length > maximum)
+        throw new PluginHostRequestError(`${name} must contain 1-${maximum} characters`);
+    return value;
+}
+function handled(reply, error) {
+    if (error instanceof PluginError)
+        return reply
+            .code(error.code === "not_found"
+            ? 404
+            : error.code === "forbidden"
+                ? 403
+                : error.code === "not_ready"
+                    ? 503
+                    : error.code === "conflict"
+                        ? 409
+                        : 400)
+            .send({
+            error: error.code,
+            message: error.message,
+        });
+    if (error instanceof CollaborationError)
+        return reply
+            .code(error.code === "not_found"
+            ? 404
+            : error.code === "forbidden"
+                ? 403
+                : error.code === "conflict"
+                    ? 409
+                    : 400)
+            .send({ error: error.code, message: error.message });
+    if (error instanceof PluginHostRequestError)
+        return reply.code(400).send({ error: "invalid_request", message: error.message });
+    return undefined;
+}
+class PluginHostRequestError extends Error {
+}
 //# sourceMappingURL=pluginHost.js.map