happy2 0.0.13 → 0.0.14

package/packages/happy2-server/dist/modules/plugin/impl/managementRequestSelection.d.ts

@@ -0,0 +1,345 @@
+export declare const pluginManagementRequestSelection: {
+    id: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+        name: "id";
+        tableName: "plugin_management_requests";
+        dataType: "string";
+        columnType: "SQLiteText";
+        data: string;
+        driverParam: string;
+        notNull: true;
+        hasDefault: false;
+        isPrimaryKey: true;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: [string, ...string[]];
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+    }, {}, {
+        length: number | undefined;
+    }>;
+    action: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+        name: "action";
+        tableName: "plugin_management_requests";
+        dataType: "string";
+        columnType: "SQLiteText";
+        data: string;
+        driverParam: string;
+        notNull: true;
+        hasDefault: false;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: [string, ...string[]];
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+    }, {}, {
+        length: number | undefined;
+    }>;
+    status: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+        name: "status";
+        tableName: "plugin_management_requests";
+        dataType: "string";
+        columnType: "SQLiteText";
+        data: string;
+        driverParam: string;
+        notNull: true;
+        hasDefault: true;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: [string, ...string[]];
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+    }, {}, {
+        length: number | undefined;
+    }>;
+    chatId: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+        name: "chat_id";
+        tableName: "plugin_management_requests";
+        dataType: "string";
+        columnType: "SQLiteText";
+        data: string;
+        driverParam: string;
+        notNull: true;
+        hasDefault: false;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: [string, ...string[]];
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+    }, {}, {
+        length: number | undefined;
+    }>;
+    agentUserId: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+        name: "agent_user_id";
+        tableName: "plugin_management_requests";
+        dataType: "string";
+        columnType: "SQLiteText";
+        data: string;
+        driverParam: string;
+        notNull: false;
+        hasDefault: false;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: [string, ...string[]];
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+    }, {}, {
+        length: number | undefined;
+    }>;
+    requesterInstallationId: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+        name: "requester_installation_id";
+        tableName: "plugin_management_requests";
+        dataType: "string";
+        columnType: "SQLiteText";
+        data: string;
+        driverParam: string;
+        notNull: false;
+        hasDefault: false;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: [string, ...string[]];
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+    }, {}, {
+        length: number | undefined;
+    }>;
+    displayName: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+        name: "display_name";
+        tableName: "plugin_management_requests";
+        dataType: "string";
+        columnType: "SQLiteText";
+        data: string;
+        driverParam: string;
+        notNull: true;
+        hasDefault: false;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: [string, ...string[]];
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+    }, {}, {
+        length: number | undefined;
+    }>;
+    shortName: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+        name: "short_name";
+        tableName: "plugin_management_requests";
+        dataType: "string";
+        columnType: "SQLiteText";
+        data: string;
+        driverParam: string;
+        notNull: true;
+        hasDefault: false;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: [string, ...string[]];
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+    }, {}, {
+        length: number | undefined;
+    }>;
+    description: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+        name: "description";
+        tableName: "plugin_management_requests";
+        dataType: "string";
+        columnType: "SQLiteText";
+        data: string;
+        driverParam: string;
+        notNull: true;
+        hasDefault: false;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: [string, ...string[]];
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+    }, {}, {
+        length: number | undefined;
+    }>;
+    reason: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+        name: "reason";
+        tableName: "plugin_management_requests";
+        dataType: "string";
+        columnType: "SQLiteText";
+        data: string;
+        driverParam: string;
+        notNull: false;
+        hasDefault: false;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: [string, ...string[]];
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+    }, {}, {
+        length: number | undefined;
+    }>;
+    sourceKind: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+        name: "source_kind";
+        tableName: "plugin_management_requests";
+        dataType: "string";
+        columnType: "SQLiteText";
+        data: string;
+        driverParam: string;
+        notNull: false;
+        hasDefault: false;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: [string, ...string[]];
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+    }, {}, {
+        length: number | undefined;
+    }>;
+    sourceReference: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+        name: "source_reference";
+        tableName: "plugin_management_requests";
+        dataType: "string";
+        columnType: "SQLiteText";
+        data: string;
+        driverParam: string;
+        notNull: false;
+        hasDefault: false;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: [string, ...string[]];
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+    }, {}, {
+        length: number | undefined;
+    }>;
+    targetInstallationId: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+        name: "target_installation_id";
+        tableName: "plugin_management_requests";
+        dataType: "string";
+        columnType: "SQLiteText";
+        data: string;
+        driverParam: string;
+        notNull: false;
+        hasDefault: false;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: [string, ...string[]];
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+    }, {}, {
+        length: number | undefined;
+    }>;
+    installationId: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+        name: "installation_id";
+        tableName: "plugin_management_requests";
+        dataType: "string";
+        columnType: "SQLiteText";
+        data: string;
+        driverParam: string;
+        notNull: false;
+        hasDefault: false;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: [string, ...string[]];
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+    }, {}, {
+        length: number | undefined;
+    }>;
+    resolvedByUserId: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+        name: "resolved_by_user_id";
+        tableName: "plugin_management_requests";
+        dataType: "string";
+        columnType: "SQLiteText";
+        data: string;
+        driverParam: string;
+        notNull: false;
+        hasDefault: false;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: [string, ...string[]];
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+    }, {}, {
+        length: number | undefined;
+    }>;
+    resolvedAt: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+        name: "resolved_at";
+        tableName: "plugin_management_requests";
+        dataType: "string";
+        columnType: "SQLiteText";
+        data: string;
+        driverParam: string;
+        notNull: false;
+        hasDefault: false;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: [string, ...string[]];
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+    }, {}, {
+        length: number | undefined;
+    }>;
+    lastError: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+        name: "last_error";
+        tableName: "plugin_management_requests";
+        dataType: "string";
+        columnType: "SQLiteText";
+        data: string;
+        driverParam: string;
+        notNull: false;
+        hasDefault: false;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: [string, ...string[]];
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+    }, {}, {
+        length: number | undefined;
+    }>;
+    createdAt: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+        name: "created_at";
+        tableName: "plugin_management_requests";
+        dataType: "string";
+        columnType: "SQLiteText";
+        data: string;
+        driverParam: string;
+        notNull: true;
+        hasDefault: true;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: [string, ...string[]];
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+    }, {}, {
+        length: number | undefined;
+    }>;
+};
+//# sourceMappingURL=managementRequestSelection.d.ts.map

package/packages/happy2-server/dist/modules/plugin/impl/managementRequestSelection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"managementRequestSelection.d.ts","sourceRoot":"","sources":["../../../../sources/modules/plugin/impl/managementRequestSelection.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,gCAAgC;IACzC,EAAE;;;;;;;;;;;;;;;;;;;IACF,MAAM;;;;;;;;;;;;;;;;;;;IACN,MAAM;;;;;;;;;;;;;;;;;;;IACN,MAAM;;;;;;;;;;;;;;;;;;;IACN,WAAW;;;;;;;;;;;;;;;;;;;IACX,uBAAuB;;;;;;;;;;;;;;;;;;;IACvB,WAAW;;;;;;;;;;;;;;;;;;;IACX,SAAS;;;;;;;;;;;;;;;;;;;IACT,WAAW;;;;;;;;;;;;;;;;;;;IACX,MAAM;;;;;;;;;;;;;;;;;;;IACN,UAAU;;;;;;;;;;;;;;;;;;;IACV,eAAe;;;;;;;;;;;;;;;;;;;IACf,oBAAoB;;;;;;;;;;;;;;;;;;;IACpB,cAAc;;;;;;;;;;;;;;;;;;;IACd,gBAAgB;;;;;;;;;;;;;;;;;;;IAChB,UAAU;;;;;;;;;;;;;;;;;;;IACV,SAAS;;;;;;;;;;;;;;;;;;;IACT,SAAS;;;;;;;;;;;;;;;;;;;CACZ,CAAC"}

package/packages/happy2-server/dist/modules/plugin/impl/managementRequestSelection.js

@@ -0,0 +1,22 @@
+import { pluginManagementRequests } from "../../schema.js";
+export const pluginManagementRequestSelection = {
+    id: pluginManagementRequests.id,
+    action: pluginManagementRequests.action,
+    status: pluginManagementRequests.status,
+    chatId: pluginManagementRequests.chatId,
+    agentUserId: pluginManagementRequests.agentUserId,
+    requesterInstallationId: pluginManagementRequests.requesterInstallationId,
+    displayName: pluginManagementRequests.displayName,
+    shortName: pluginManagementRequests.shortName,
+    description: pluginManagementRequests.description,
+    reason: pluginManagementRequests.reason,
+    sourceKind: pluginManagementRequests.sourceKind,
+    sourceReference: pluginManagementRequests.sourceReference,
+    targetInstallationId: pluginManagementRequests.targetInstallationId,
+    installationId: pluginManagementRequests.installationId,
+    resolvedByUserId: pluginManagementRequests.resolvedByUserId,
+    resolvedAt: pluginManagementRequests.resolvedAt,
+    lastError: pluginManagementRequests.lastError,
+    createdAt: pluginManagementRequests.createdAt,
+};
+//# sourceMappingURL=managementRequestSelection.js.map

package/packages/happy2-server/dist/modules/plugin/impl/managementRequestSelection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"managementRequestSelection.js","sourceRoot":"","sources":["../../../../sources/modules/plugin/impl/managementRequestSelection.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAC;AAE3D,MAAM,CAAC,MAAM,gCAAgC,GAAG;IAC5C,EAAE,EAAE,wBAAwB,CAAC,EAAE;IAC/B,MAAM,EAAE,wBAAwB,CAAC,MAAM;IACvC,MAAM,EAAE,wBAAwB,CAAC,MAAM;IACvC,MAAM,EAAE,wBAAwB,CAAC,MAAM;IACvC,WAAW,EAAE,wBAAwB,CAAC,WAAW;IACjD,uBAAuB,EAAE,wBAAwB,CAAC,uBAAuB;IACzE,WAAW,EAAE,wBAAwB,CAAC,WAAW;IACjD,SAAS,EAAE,wBAAwB,CAAC,SAAS;IAC7C,WAAW,EAAE,wBAAwB,CAAC,WAAW;IACjD,MAAM,EAAE,wBAAwB,CAAC,MAAM;IACvC,UAAU,EAAE,wBAAwB,CAAC,UAAU;IAC/C,eAAe,EAAE,wBAAwB,CAAC,eAAe;IACzD,oBAAoB,EAAE,wBAAwB,CAAC,oBAAoB;IACnE,cAAc,EAAE,wBAAwB,CAAC,cAAc;IACvD,gBAAgB,EAAE,wBAAwB,CAAC,gBAAgB;IAC3D,UAAU,EAAE,wBAAwB,CAAC,UAAU;IAC/C,SAAS,EAAE,wBAAwB,CAAC,SAAS;IAC7C,SAAS,EAAE,wBAAwB,CAAC,SAAS;CAChD,CAAC"}

package/packages/happy2-server/dist/modules/plugin/packageLinkDownloader.d.ts

@@ -0,0 +1,16 @@
+import type { WebhookUrlPolicy } from "../integrations/ssrf.js";
+export interface PluginPackageLinkDownload {
+    body: Buffer;
+    url: string;
+}
+export interface PluginPackageLinkDownloader {
+    download(url: string, signal?: AbortSignal): Promise<PluginPackageLinkDownload>;
+}
+/** Downloads bounded plugin ZIP links through the server's public-address policy with DNS-pinned HTTPS sockets and revalidated redirects. */
+export declare class NodePluginPackageLinkDownloader implements PluginPackageLinkDownloader {
+    private readonly policy;
+    constructor(policy: WebhookUrlPolicy);
+    download(url: string, signal?: AbortSignal): Promise<PluginPackageLinkDownload>;
+    private downloadFollowing;
+}
+//# sourceMappingURL=packageLinkDownloader.d.ts.map

package/packages/happy2-server/dist/modules/plugin/packageLinkDownloader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"packageLinkDownloader.d.ts","sourceRoot":"","sources":["../../../sources/modules/plugin/packageLinkDownloader.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAMhE,MAAM,WAAW,yBAAyB;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,2BAA2B;IACxC,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAAC;CACnF;AAED,6IAA6I;AAC7I,qBAAa,+BAAgC,YAAW,2BAA2B;IACnE,OAAO,CAAC,QAAQ,CAAC,MAAM;IAAnC,YAA6B,MAAM,EAAE,gBAAgB,EAAI;IAEnD,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAUpF;YAEa,iBAAiB;CAoBlC"}

package/packages/happy2-server/dist/modules/plugin/packageLinkDownloader.js

@@ -0,0 +1,67 @@
+import { request } from "node:https";
+const MAX_ARCHIVE_BYTES = 20 * 1024 * 1024;
+const DOWNLOAD_TIMEOUT_MS = 20_000;
+const MAX_REDIRECTS = 3;
+/** Downloads bounded plugin ZIP links through the server's public-address policy with DNS-pinned HTTPS sockets and revalidated redirects. */
+export class NodePluginPackageLinkDownloader {
+    policy;
+    constructor(policy) {
+        this.policy = policy;
+    }
+    async download(url, signal) {
+        const timeout = AbortSignal.timeout(DOWNLOAD_TIMEOUT_MS);
+        const bounded = signal ? AbortSignal.any([signal, timeout]) : timeout;
+        try {
+            return await this.downloadFollowing(url, bounded, 0);
+        }
+        catch (error) {
+            if (timeout.aborted && !signal?.aborted)
+                throw new Error("Plugin link download timed out");
+            throw error;
+        }
+    }
+    async downloadFollowing(input, signal, redirects) {
+        const resolved = await this.policy.resolveForDelivery(input);
+        const response = await downloadPinned(resolved.url, resolved.addresses[0], signal);
+        if (response.statusCode >= 300 && response.statusCode < 400 && response.location) {
+            if (redirects >= MAX_REDIRECTS)
+                throw new Error("Plugin link redirected too many times");
+            return this.downloadFollowing(new URL(response.location, resolved.url).toString(), signal, redirects + 1);
+        }
+        if (response.statusCode < 200 || response.statusCode >= 300)
+            throw new Error(`Plugin link returned HTTP ${response.statusCode}`);
+        return { body: response.body, url: resolved.url };
+    }
+}
+function downloadPinned(input, address, signal) {
+    const url = new URL(input);
+    return new Promise((resolve, reject) => {
+        const requestHandle = request(url, {
+            headers: { accept: "application/zip, application/octet-stream" },
+            lookup: (_hostname, _options, callback) => callback(null, address.address, address.family),
+            signal,
+        }, (response) => {
+            const chunks = [];
+            let bytes = 0;
+            response.on("data", (chunk) => {
+                bytes += chunk.byteLength;
+                if (bytes > MAX_ARCHIVE_BYTES) {
+                    response.destroy(new Error("Plugin link exceeds 20 MiB"));
+                    return;
+                }
+                chunks.push(chunk);
+            });
+            response.once("error", reject);
+            response.once("end", () => resolve({
+                body: Buffer.concat(chunks),
+                ...(typeof response.headers.location === "string"
+                    ? { location: response.headers.location }
+                    : {}),
+                statusCode: response.statusCode ?? 0,
+            }));
+        });
+        requestHandle.once("error", reject);
+        requestHandle.end();
+    });
+}
+//# sourceMappingURL=packageLinkDownloader.js.map

package/packages/happy2-server/dist/modules/plugin/packageLinkDownloader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"packageLinkDownloader.js","sourceRoot":"","sources":["../../../sources/modules/plugin/packageLinkDownloader.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAGrC,MAAM,iBAAiB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAC3C,MAAM,mBAAmB,GAAG,MAAM,CAAC;AACnC,MAAM,aAAa,GAAG,CAAC,CAAC;AAWxB,6IAA6I;AAC7I,MAAM,OAAO,+BAA+B;IACX,MAAM;IAAnC,YAA6B,MAAwB;sBAAxB,MAAM;IAAqB,CAAC;IAEzD,KAAK,CAAC,QAAQ,CAAC,GAAW,EAAE,MAAoB;QAC5C,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;QACzD,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;QACtE,IAAI,CAAC;YACD,OAAO,MAAM,IAAI,CAAC,iBAAiB,CAAC,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;QACzD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,IAAI,OAAO,CAAC,OAAO,IAAI,CAAC,MAAM,EAAE,OAAO;gBACnC,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;YACtD,MAAM,KAAK,CAAC;QAChB,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAC3B,KAAa,EACb,MAA+B,EAC/B,SAAiB;QAEjB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;QAC7D,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAE,EAAE,MAAM,CAAC,CAAC;QACpF,IAAI,QAAQ,CAAC,UAAU,IAAI,GAAG,IAAI,QAAQ,CAAC,UAAU,GAAG,GAAG,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;YAC/E,IAAI,SAAS,IAAI,aAAa;gBAC1B,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;YAC7D,OAAO,IAAI,CAAC,iBAAiB,CACzB,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EACnD,MAAM,EACN,SAAS,GAAG,CAAC,CAChB,CAAC;QACN,CAAC;QACD,IAAI,QAAQ,CAAC,UAAU,GAAG,GAAG,IAAI,QAAQ,CAAC,UAAU,IAAI,GAAG;YACvD,MAAM,IAAI,KAAK,CAAC,6BAA6B,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;QACxE,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,CAAC;IACtD,CAAC;CACJ;AAED,SAAS,cAAc,CACnB,KAAa,EACb,OAA2C,EAC3C,MAAoB;IAEpB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAC3B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACnC,MAAM,aAAa,GAAG,OAAO,CACzB,GAAG,EACH;YACI,OAAO,EAAE,EAAE,MAAM,EAAE,2CAA2C,EAAE;YAChE,MAAM,EAAE,CAAC,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,CACtC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC;YACnD,MAAM;SACT,EACD,CAAC,QAAQ,EAAE,EAAE;YACT,MAAM,MAAM,GAAa,EAAE,CAAC;YAC5B,IAAI,KAAK,GAAG,CAAC,CAAC;YACd,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;gBAClC,KAAK,IAAI,KAAK,CAAC,UAAU,CAAC;gBAC1B,IAAI,KAAK,GAAG,iBAAiB,EAAE,CAAC;oBAC5B,QAAQ,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC,CAAC;oBAC1D,OAAO;gBACX,CAAC;gBACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACvB,CAAC,CAAC,CAAC;YACH,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC/B,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,CACtB,OAAO,CAAC;gBACJ,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;gBAC3B,GAAG,CAAC,OAAO,QAAQ,CAAC,OAAO,CAAC,QAAQ,KAAK,QAAQ;oBAC7C,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE;oBACzC,CAAC,CAAC,EAAE,CAAC;gBACT,UAAU,EAAE,QAAQ,CAAC,UAAU,IAAI,CAAC;aACvC,CAAC,CACL,CAAC;QACN,CAAC,CACJ,CAAC;QACF,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACpC,aAAa,CAAC,GAAG,EAAE,CAAC;IACxB,CAAC,CAAC,CAAC;AACP,CAAC"}

package/packages/happy2-server/dist/modules/plugin/packageStore.d.ts

@@ -1,4 +1,9 @@
-import type { PluginPackage } from "./types.js";
+import type { PluginPackage, PluginSource } from "./types.js";
+import type { PluginReadySkillPackage } from "./pluginSkillPackageListReady.js";
+export interface PreparedPluginPackage {
+    plugin: PluginPackage;
+    cleanup(): Promise<void>;
+}
 /** Persists one exact package snapshot per system plugin so catalog changes cannot mutate installed metadata or files. */
 export declare class PluginPackageStore {
     private readonly root;
@@ -7,6 +12,13 @@ export declare class PluginPackageStore {
         packageDirectory: string;
         imageStorageKey: string;
     }>;
+    prepareArchive(archive: Buffer, source: PluginSource): Promise<PreparedPluginPackage>;
+    stageRequest(plugin: PluginPackage, requestId: string): Promise<string>;
+    loadRequest(requestId: string, recordedDirectory: string, source: PluginSource, packageDigest: string): Promise<PluginPackage>;
+    loadInstalled(pluginId: string, recordedDirectory: string, shortName: string, packageDigest: string, source: PluginSource): Promise<PluginPackage>;
+    readRequestImage(requestId: string, recordedDirectory: string, source: PluginSource, packageDigest: string): Promise<Buffer>;
+    removeRequest(requestId: string): Promise<void>;
+    syncSkills(installed: readonly PluginReadySkillPackage[], agentHome: string): Promise<void>;
     remove(pluginId: string): Promise<void>;
     cleanupTemporary(): Promise<void>;
     createDownloadDirectory(): Promise<string>;
@@ -24,5 +36,6 @@ export declare class PluginPackageStore {
     readImage(pluginId: string, recordedDirectory: string, imageStorageKey: string, shortName: string, packageDigest: string): Promise<Buffer>;
     private path;
     private load;
+    private requestPath;
 }
 //# sourceMappingURL=packageStore.d.ts.map

package/packages/happy2-server/dist/modules/plugin/packageStore.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"packageStore.d.ts","sourceRoot":"","sources":["../../../sources/modules/plugin/packageStore.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAEhD,0HAA0H;AAC1H,qBAAa,kBAAkB;IACf,OAAO,CAAC,QAAQ,CAAC,IAAI;IAAjC,YAA6B,IAAI,EAAE,MAAM,EAAI;IAEvC,OAAO,CACT,MAAM,EAAE,aAAa,EACrB,QAAQ,EAAE,MAAM,GACjB,OAAO,CAAC;QAAE,gBAAgB,EAAE,MAAM,CAAC;QAAC,eAAe,EAAE,MAAM,CAAA;KAAE,CAAC,CA0ChE;IAEK,MAAM,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAE5C;IAEK,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC,CAetC;IAEK,uBAAuB,IAAI,OAAO,CAAC,MAAM,CAAC,CAG/C;IAEK,uBAAuB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAM9D;IAEK,OAAO,CAAC,MAAM,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAelF;IAEK,iBAAiB,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAM5D;IAEK,kBAAkB,CAAC,QAAQ,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAOlF;IAEK,kBAAkB,CACpB,QAAQ,EAAE,MAAM,EAChB,iBAAiB,EAAE,MAAM,EACzB,SAAS,EAAE,MAAM,EACjB,aAAa,EAAE,MAAM,GACtB,OAAO,CAAC,MAAM,CAAC,CAoBjB;IAEK,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAMzD;IAEK,MAAM,CACR,QAAQ,EAAE,MAAM,EAChB,iBAAiB,EAAE,MAAM,EACzB,SAAS,EAAE,MAAM,EACjB,aAAa,EAAE,MAAM,GACtB,OAAO,CAAC,IAAI,CAAC,CAEf;IAEK,SAAS,CACX,QAAQ,EAAE,MAAM,EAChB,iBAAiB,EAAE,MAAM,EACzB,SAAS,EAAE,MAAM,EACjB,aAAa,EAAE,MAAM,EACrB,SAAS,EAAE,MAAM,EACjB,cAAc,EAAE,MAAM,EACtB,MAAM,CAAC,EAAE,WAAW,GACrB,OAAO,CAAC;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAWlD;IAEK,SAAS,CACX,QAAQ,EAAE,MAAM,EAChB,iBAAiB,EAAE,MAAM,EACzB,eAAe,EAAE,MAAM,EACvB,SAAS,EAAE,MAAM,EACjB,aAAa,EAAE,MAAM,GACtB,OAAO,CAAC,MAAM,CAAC,CAKjB;IAED,OAAO,CAAC,IAAI;YASE,IAAI;CAoBrB"}
+{"version":3,"file":"packageStore.d.ts","sourceRoot":"","sources":["../../../sources/modules/plugin/packageStore.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC9D,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAEhF,MAAM,WAAW,qBAAqB;IAClC,MAAM,EAAE,aAAa,CAAC;IACtB,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5B;AAED,0HAA0H;AAC1H,qBAAa,kBAAkB;IACf,OAAO,CAAC,QAAQ,CAAC,IAAI;IAAjC,YAA6B,IAAI,EAAE,MAAM,EAAI;IAEvC,OAAO,CACT,MAAM,EAAE,aAAa,EACrB,QAAQ,EAAE,MAAM,GACjB,OAAO,CAAC;QAAE,gBAAgB,EAAE,MAAM,CAAC;QAAC,eAAe,EAAE,MAAM,CAAA;KAAE,CAAC,CA0ChE;IAEK,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAsB1F;IAEK,YAAY,CAAC,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAe5E;IAEK,WAAW,CACb,SAAS,EAAE,MAAM,EACjB,iBAAiB,EAAE,MAAM,EACzB,MAAM,EAAE,YAAY,EACpB,aAAa,EAAE,MAAM,GACtB,OAAO,CAAC,aAAa,CAAC,CAcxB;IAEK,aAAa,CACf,QAAQ,EAAE,MAAM,EAChB,iBAAiB,EAAE,MAAM,EACzB,SAAS,EAAE,MAAM,EACjB,aAAa,EAAE,MAAM,EACrB,MAAM,EAAE,YAAY,GACrB,OAAO,CAAC,aAAa,CAAC,CAGxB;IAEK,gBAAgB,CAClB,SAAS,EAAE,MAAM,EACjB,iBAAiB,EAAE,MAAM,EACzB,MAAM,EAAE,YAAY,EACpB,aAAa,EAAE,MAAM,GACtB,OAAO,CAAC,MAAM,CAAC,CAGjB;IAEK,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAEpD;IAEK,UAAU,CACZ,SAAS,EAAE,SAAS,uBAAuB,EAAE,EAC7C,SAAS,EAAE,MAAM,GAClB,OAAO,CAAC,IAAI,CAAC,CAsCf;IAEK,MAAM,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAE5C;IAEK,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC,CAetC;IAEK,uBAAuB,IAAI,OAAO,CAAC,MAAM,CAAC,CAG/C;IAEK,uBAAuB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAM9D;IAEK,OAAO,CAAC,MAAM,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAelF;IAEK,iBAAiB,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAM5D;IAEK,kBAAkB,CAAC,QAAQ,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAOlF;IAEK,kBAAkB,CACpB,QAAQ,EAAE,MAAM,EAChB,iBAAiB,EAAE,MAAM,EACzB,SAAS,EAAE,MAAM,EACjB,aAAa,EAAE,MAAM,GACtB,OAAO,CAAC,MAAM,CAAC,CAoBjB;IAEK,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAMzD;IAEK,MAAM,CACR,QAAQ,EAAE,MAAM,EAChB,iBAAiB,EAAE,MAAM,EACzB,SAAS,EAAE,MAAM,EACjB,aAAa,EAAE,MAAM,GACtB,OAAO,CAAC,IAAI,CAAC,CAEf;IAEK,SAAS,CACX,QAAQ,EAAE,MAAM,EAChB,iBAAiB,EAAE,MAAM,EACzB,SAAS,EAAE,MAAM,EACjB,aAAa,EAAE,MAAM,EACrB,SAAS,EAAE,MAAM,EACjB,cAAc,EAAE,MAAM,EACtB,MAAM,CAAC,EAAE,WAAW,GACrB,OAAO,CAAC;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAWlD;IAEK,SAAS,CACX,QAAQ,EAAE,MAAM,EAChB,iBAAiB,EAAE,MAAM,EACzB,eAAe,EAAE,MAAM,EACvB,SAAS,EAAE,MAAM,EACjB,aAAa,EAAE,MAAM,GACtB,OAAO,CAAC,MAAM,CAAC,CAKjB;IAED,OAAO,CAAC,IAAI;YASE,IAAI;IAqBlB,OAAO,CAAC,WAAW;CAQtB"}

package/packages/happy2-server/dist/modules/plugin/packageStore.js

@@ -1,6 +1,7 @@
 import { randomUUID } from "node:crypto";
 import { cp, lstat, mkdir, mkdtemp, readFile, readdir, realpath, rename, rm, } from "node:fs/promises";
-import { join, resolve, sep } from "node:path";
+import { dirname, join, resolve, sep } from "node:path";
+import { pluginArchiveExtract } from "./archive.js";
 import { pluginPackageLoadInstalled, pluginPackageLoadSource } from "./catalog.js";
 /** Persists one exact package snapshot per system plugin so catalog changes cannot mutate installed metadata or files. */
 export class PluginPackageStore {
@@ -45,6 +46,107 @@ export class PluginPackageStore {
             await rm(staging, { force: true, recursive: true });
         }
     }
+    async prepareArchive(archive, source) {
+        await mkdir(this.root, { recursive: true, mode: 0o700 });
+        const temporary = resolve(this.root, `.incoming-${randomUUID()}`);
+        try {
+            const [candidate] = await pluginArchiveExtract(archive, temporary, "zip");
+            if (!candidate)
+                throw new Error("Plugin ZIP does not contain a package");
+            const loaded = await pluginPackageLoadSource(candidate.directory, source);
+            const plugin = source.kind === "archive"
+                ? {
+                    ...loaded,
+                    source: { kind: "archive", reference: loaded.packageDigest },
+                }
+                : loaded;
+            return {
+                plugin,
+                cleanup: () => rm(temporary, { force: true, recursive: true }),
+            };
+        }
+        catch (error) {
+            await rm(temporary, { force: true, recursive: true });
+            throw error;
+        }
+    }
+    async stageRequest(plugin, requestId) {
+        const destination = this.requestPath(requestId);
+        await mkdir(dirname(destination), { recursive: true, mode: 0o700 });
+        await rm(destination, { force: true, recursive: true });
+        await cp(plugin.directory, destination, {
+            recursive: true,
+            errorOnExist: true,
+            force: false,
+        });
+        const copied = await pluginPackageLoadSource(destination, plugin.source);
+        if (copied.packageDigest !== plugin.packageDigest) {
+            await rm(destination, { force: true, recursive: true });
+            throw new Error("Plugin package changed while its approval snapshot was copied");
+        }
+        return realpath(destination);
+    }
+    async loadRequest(requestId, recordedDirectory, source, packageDigest) {
+        const destination = this.requestPath(requestId);
+        const [requestRoot, actual, recorded] = await Promise.all([
+            realpath(resolve(this.root, ".requests")),
+            realpath(destination),
+            realpath(recordedDirectory),
+        ]);
+        const expected = resolve(requestRoot, requestId);
+        if (actual !== expected || recorded !== expected)
+            throw new Error("Pending plugin package is outside the request package store");
+        const plugin = await pluginPackageLoadSource(actual, source);
+        if (plugin.packageDigest !== packageDigest)
+            throw new Error("Pending plugin package no longer matches its recorded digest");
+        return plugin;
+    }
+    async loadInstalled(pluginId, recordedDirectory, shortName, packageDigest, source) {
+        await this.verify(pluginId, recordedDirectory, shortName, packageDigest);
+        return pluginPackageLoadInstalled(recordedDirectory, source, shortName);
+    }
+    async readRequestImage(requestId, recordedDirectory, source, packageDigest) {
+        const plugin = await this.loadRequest(requestId, recordedDirectory, source, packageDigest);
+        return readFile(plugin.iconPath);
+    }
+    async removeRequest(requestId) {
+        await rm(this.requestPath(requestId), { force: true, recursive: true });
+    }
+    async syncSkills(installed, agentHome) {
+        const targetRoot = resolve(agentHome, ".agents", "skills", "happy2-plugins");
+        const staging = resolve(agentHome, ".agents", `.happy2-skills-${randomUUID()}`);
+        await rm(staging, { force: true, recursive: true });
+        await mkdir(staging, { recursive: true, mode: 0o700 });
+        const desired = new Set();
+        try {
+            for (const item of installed) {
+                const plugin = await this.loadInstalled(item.pluginId, item.packageDirectory, item.shortName, item.packageDigest, item.source);
+                for (const skill of plugin.skills) {
+                    const directory = `${item.pluginId}-${skill.name}`;
+                    desired.add(directory);
+                    await cp(join(plugin.directory, skill.directory), join(staging, directory), {
+                        recursive: true,
+                        errorOnExist: true,
+                        force: false,
+                    });
+                }
+            }
+            await mkdir(targetRoot, { recursive: true, mode: 0o700 });
+            for (const entry of await readdir(targetRoot, { withFileTypes: true })) {
+                if (desired.has(entry.name))
+                    continue;
+                await rm(join(targetRoot, entry.name), { force: true, recursive: true });
+            }
+            for (const directory of [...desired].sort()) {
+                const destination = join(targetRoot, directory);
+                await rm(destination, { force: true, recursive: true });
+                await rename(join(staging, directory), destination);
+            }
+        }
+        finally {
+            await rm(staging, { force: true, recursive: true });
+        }
+    }
     async remove(pluginId) {
         await rm(this.path(pluginId), { force: true, recursive: true });
     }
@@ -178,6 +280,15 @@ export class PluginPackageStore {
             throw new Error("Installed plugin package no longer matches its recorded digest");
         return plugin;
     }
+    requestPath(requestId) {
+        if (!/^[a-z0-9]+$/.test(requestId))
+            throw new Error("Invalid plugin request id");
+        const destination = resolve(this.root, ".requests", requestId);
+        const requestRoot = resolve(this.root, ".requests");
+        if (!destination.startsWith(`${requestRoot}${sep}`))
+            throw new Error("Invalid plugin request package path");
+        return destination;
+    }
 }
 async function installedSource(directory, shortName) {
     // The source identity does not affect package validation or digest; callers have already