happy2 0.0.13 → 0.0.15

package/packages/happy2-server/dist/modules/plugin/pluginManagementRequestCompleteInstall.js

@@ -0,0 +1,44 @@
+import { and, eq, sql } from "drizzle-orm";
+import { withTransaction } from "../drizzle.js";
+import { chatAdvanceWithSequence } from "../chat/chatAdvanceWithSequence.js";
+import { chatAppendAudit } from "../chat/chatAppendAudit.js";
+import { chatHint } from "../chat/chatHint.js";
+import { pluginManagementRequests } from "../schema.js";
+import { syncSequenceNext } from "../sync/syncSequenceNext.js";
+/** Finalizes a claimed pluginManagementRequests install as approved or failed and advances the originating chats point in one transaction. This completion boundary makes the runtime outcome, audit evidence, and reactive card resolution converge durably. */
+export async function pluginManagementRequestCompleteInstall(executor, input) {
+    return withTransaction(executor, async (tx) => {
+        const status = input.error ? "failed" : "approved";
+        const updated = await tx
+            .update(pluginManagementRequests)
+            .set({
+            status,
+            lastError: input.error,
+            resolvedAt: sql `CURRENT_TIMESTAMP`,
+            updatedAt: sql `CURRENT_TIMESTAMP`,
+        })
+            .where(and(eq(pluginManagementRequests.id, input.requestId), eq(pluginManagementRequests.chatId, input.chatId), eq(pluginManagementRequests.status, "processing"), eq(pluginManagementRequests.installationId, input.installationId)))
+            .returning({ id: pluginManagementRequests.id });
+        if (updated.length !== 1)
+            throw new Error("Claimed plugin install request was not found");
+        await chatAppendAudit(tx, {
+            actorUserId: input.actorUserId,
+            action: input.error ? "plugin.install_failed" : "plugin.install_approved",
+            targetType: "plugin_management_request",
+            targetId: input.requestId,
+            chatId: input.chatId,
+            after: {
+                installationId: input.installationId,
+                ...(input.error ? { error: input.error } : {}),
+            },
+        });
+        const sequence = await syncSequenceNext(tx);
+        await tx
+            .update(pluginManagementRequests)
+            .set({ syncSequence: sequence })
+            .where(eq(pluginManagementRequests.id, input.requestId));
+        const mutation = await chatAdvanceWithSequence(tx, sequence, input.actorUserId, input.chatId, input.error ? "plugin.install_failed" : "plugin.install_approved", input.requestId);
+        return chatHint(sequence, input.chatId, mutation.pts);
+    });
+}
+//# sourceMappingURL=pluginManagementRequestCompleteInstall.js.map

package/packages/happy2-server/dist/modules/plugin/pluginManagementRequestCompleteInstall.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pluginManagementRequestCompleteInstall.js","sourceRoot":"","sources":["../../../sources/modules/plugin/pluginManagementRequestCompleteInstall.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAE3C,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,uBAAuB,EAAE,MAAM,oCAAoC,CAAC;AAC7E,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAE/C,OAAO,EAAE,wBAAwB,EAAE,MAAM,cAAc,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAE/D,iQAAiQ;AACjQ,MAAM,CAAC,KAAK,UAAU,sCAAsC,CACxD,QAAyB,EACzB,KAMC;IAED,OAAO,eAAe,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;QAC1C,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC;QACnD,MAAM,OAAO,GAAG,MAAM,EAAE;aACnB,MAAM,CAAC,wBAAwB,CAAC;aAChC,GAAG,CAAC;YACD,MAAM;YACN,SAAS,EAAE,KAAK,CAAC,KAAK;YACtB,UAAU,EAAE,GAAG,CAAA,mBAAmB;YAClC,SAAS,EAAE,GAAG,CAAA,mBAAmB;SACpC,CAAC;aACD,KAAK,CACF,GAAG,CACC,EAAE,CAAC,wBAAwB,CAAC,EAAE,EAAE,KAAK,CAAC,SAAS,CAAC,EAChD,EAAE,CAAC,wBAAwB,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,EACjD,EAAE,CAAC,wBAAwB,CAAC,MAAM,EAAE,YAAY,CAAC,EACjD,EAAE,CAAC,wBAAwB,CAAC,cAAc,EAAE,KAAK,CAAC,cAAc,CAAC,CACpE,CACJ;aACA,SAAS,CAAC,EAAE,EAAE,EAAE,wBAAwB,CAAC,EAAE,EAAE,CAAC,CAAC;QACpD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAC1F,MAAM,eAAe,CAAC,EAAE,EAAE;YACtB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,yBAAyB;YACzE,UAAU,EAAE,2BAA2B;YACvC,QAAQ,EAAE,KAAK,CAAC,SAAS;YACzB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,KAAK,EAAE;gBACH,cAAc,EAAE,KAAK,CAAC,cAAc;gBACpC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACjD;SACJ,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,EAAE,CAAC,CAAC;QAC5C,MAAM,EAAE;aACH,MAAM,CAAC,wBAAwB,CAAC;aAChC,GAAG,CAAC,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC;aAC/B,KAAK,CAAC,EAAE,CAAC,wBAAwB,CAAC,EAAE,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;QAC7D,MAAM,QAAQ,GAAG,MAAM,uBAAuB,CAC1C,EAAE,EACF,QAAQ,EACR,KAAK,CAAC,WAAW,EACjB,KAAK,CAAC,MAAM,EACZ,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,yBAAyB,EACjE,KAAK,CAAC,SAAS,CAClB,CAAC;QACF,OAAO,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;AACP,CAAC"}

package/packages/happy2-server/dist/modules/plugin/pluginManagementRequestCompleteUninstall.d.ts

@@ -0,0 +1,10 @@
+import type { DrizzleExecutor } from "../drizzle.js";
+import type { MutationHint } from "../chat/types.js";
+/** Finalizes a claimed pluginManagementRequests uninstall as approved or failed and advances the originating chats point in one transaction. This completion boundary records the runtime-removal outcome with audit and reactive card evidence. */
+export declare function pluginManagementRequestCompleteUninstall(executor: DrizzleExecutor, input: {
+    actorUserId: string;
+    chatId: string;
+    requestId: string;
+    error?: string;
+}): Promise<MutationHint>;
+//# sourceMappingURL=pluginManagementRequestCompleteUninstall.d.ts.map

package/packages/happy2-server/dist/modules/plugin/pluginManagementRequestCompleteUninstall.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pluginManagementRequestCompleteUninstall.d.ts","sourceRoot":"","sources":["../../../sources/modules/plugin/pluginManagementRequestCompleteUninstall.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAKrD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAIrD,oPAAoP;AACpP,wBAAsB,wCAAwC,CAC1D,QAAQ,EAAE,eAAe,EACzB,KAAK,EAAE;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,GAClF,OAAO,CAAC,YAAY,CAAC,CA2CvB"}

package/packages/happy2-server/dist/modules/plugin/pluginManagementRequestCompleteUninstall.js

@@ -0,0 +1,41 @@
+import { and, eq, sql } from "drizzle-orm";
+import { withTransaction } from "../drizzle.js";
+import { chatAdvanceWithSequence } from "../chat/chatAdvanceWithSequence.js";
+import { chatAppendAudit } from "../chat/chatAppendAudit.js";
+import { chatHint } from "../chat/chatHint.js";
+import { pluginManagementRequests } from "../schema.js";
+import { syncSequenceNext } from "../sync/syncSequenceNext.js";
+/** Finalizes a claimed pluginManagementRequests uninstall as approved or failed and advances the originating chats point in one transaction. This completion boundary records the runtime-removal outcome with audit and reactive card evidence. */
+export async function pluginManagementRequestCompleteUninstall(executor, input) {
+    return withTransaction(executor, async (tx) => {
+        const status = input.error ? "failed" : "approved";
+        const updated = await tx
+            .update(pluginManagementRequests)
+            .set({
+            status,
+            lastError: input.error,
+            resolvedAt: sql `CURRENT_TIMESTAMP`,
+            updatedAt: sql `CURRENT_TIMESTAMP`,
+        })
+            .where(and(eq(pluginManagementRequests.id, input.requestId), eq(pluginManagementRequests.chatId, input.chatId), eq(pluginManagementRequests.status, "processing")))
+            .returning({ id: pluginManagementRequests.id });
+        if (updated.length !== 1)
+            throw new Error("Claimed plugin uninstall request was not found");
+        await chatAppendAudit(tx, {
+            actorUserId: input.actorUserId,
+            action: input.error ? "plugin.uninstall_failed" : "plugin.uninstall_approved",
+            targetType: "plugin_management_request",
+            targetId: input.requestId,
+            chatId: input.chatId,
+            after: input.error ? { error: input.error } : undefined,
+        });
+        const sequence = await syncSequenceNext(tx);
+        await tx
+            .update(pluginManagementRequests)
+            .set({ syncSequence: sequence })
+            .where(eq(pluginManagementRequests.id, input.requestId));
+        const mutation = await chatAdvanceWithSequence(tx, sequence, input.actorUserId, input.chatId, input.error ? "plugin.uninstall_failed" : "plugin.uninstall_approved", input.requestId);
+        return chatHint(sequence, input.chatId, mutation.pts);
+    });
+}
+//# sourceMappingURL=pluginManagementRequestCompleteUninstall.js.map

package/packages/happy2-server/dist/modules/plugin/pluginManagementRequestCompleteUninstall.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pluginManagementRequestCompleteUninstall.js","sourceRoot":"","sources":["../../../sources/modules/plugin/pluginManagementRequestCompleteUninstall.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAE3C,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,uBAAuB,EAAE,MAAM,oCAAoC,CAAC;AAC7E,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAE/C,OAAO,EAAE,wBAAwB,EAAE,MAAM,cAAc,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAE/D,oPAAoP;AACpP,MAAM,CAAC,KAAK,UAAU,wCAAwC,CAC1D,QAAyB,EACzB,KAAiF;IAEjF,OAAO,eAAe,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;QAC1C,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC;QACnD,MAAM,OAAO,GAAG,MAAM,EAAE;aACnB,MAAM,CAAC,wBAAwB,CAAC;aAChC,GAAG,CAAC;YACD,MAAM;YACN,SAAS,EAAE,KAAK,CAAC,KAAK;YACtB,UAAU,EAAE,GAAG,CAAA,mBAAmB;YAClC,SAAS,EAAE,GAAG,CAAA,mBAAmB;SACpC,CAAC;aACD,KAAK,CACF,GAAG,CACC,EAAE,CAAC,wBAAwB,CAAC,EAAE,EAAE,KAAK,CAAC,SAAS,CAAC,EAChD,EAAE,CAAC,wBAAwB,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,EACjD,EAAE,CAAC,wBAAwB,CAAC,MAAM,EAAE,YAAY,CAAC,CACpD,CACJ;aACA,SAAS,CAAC,EAAE,EAAE,EAAE,wBAAwB,CAAC,EAAE,EAAE,CAAC,CAAC;QACpD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QAC5F,MAAM,eAAe,CAAC,EAAE,EAAE;YACtB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,2BAA2B;YAC7E,UAAU,EAAE,2BAA2B;YACvC,QAAQ,EAAE,KAAK,CAAC,SAAS;YACzB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS;SAC1D,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,EAAE,CAAC,CAAC;QAC5C,MAAM,EAAE;aACH,MAAM,CAAC,wBAAwB,CAAC;aAChC,GAAG,CAAC,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC;aAC/B,KAAK,CAAC,EAAE,CAAC,wBAAwB,CAAC,EAAE,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;QAC7D,MAAM,QAAQ,GAAG,MAAM,uBAAuB,CAC1C,EAAE,EACF,QAAQ,EACR,KAAK,CAAC,WAAW,EACjB,KAAK,CAAC,MAAM,EACZ,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,2BAA2B,EACrE,KAAK,CAAC,SAAS,CAClB,CAAC;QACF,OAAO,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;AACP,CAAC"}

package/packages/happy2-server/dist/modules/plugin/pluginManagementRequestCreateInstall.d.ts

@@ -0,0 +1,26 @@
+import type { DrizzleExecutor } from "../drizzle.js";
+import type { MutationHint } from "../chat/types.js";
+import { type PluginManagementRequestSummary } from "./types.js";
+/** Creates one idempotent pluginManagementRequests install for an immutable staged package and advances the originating chats point in one transaction. This boundary binds audit and reactive approval evidence to the exact agent call before installation authority exists. */
+export declare function pluginManagementRequestCreateInstall(executor: DrizzleExecutor, input: {
+    id: string;
+    actorUserId: string;
+    agentUserId: string;
+    callId: string;
+    chatId: string;
+    requesterInstallationId: string;
+    displayName: string;
+    shortName: string;
+    description: string;
+    reason?: string;
+    sourceKind: "archive" | "link";
+    sourceReference: string;
+    packageDigest: string;
+    packageDirectory: string;
+    installationId: string;
+}): Promise<{
+    created: boolean;
+    hint?: MutationHint;
+    request: PluginManagementRequestSummary;
+}>;
+//# sourceMappingURL=pluginManagementRequestCreateInstall.d.ts.map

package/packages/happy2-server/dist/modules/plugin/pluginManagementRequestCreateInstall.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pluginManagementRequestCreateInstall.d.ts","sourceRoot":"","sources":["../../../sources/modules/plugin/pluginManagementRequestCreateInstall.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAMrD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAKrD,OAAO,EAAe,KAAK,8BAA8B,EAAE,MAAM,YAAY,CAAC;AAE9E,kRAAkR;AAClR,wBAAsB,oCAAoC,CACtD,QAAQ,EAAE,eAAe,EACzB,KAAK,EAAE;IACH,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,uBAAuB,EAAE,MAAM,CAAC;IAChC,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,SAAS,GAAG,MAAM,CAAC;IAC/B,eAAe,EAAE,MAAM,CAAC;IACxB,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,MAAM,CAAC;IACzB,cAAc,EAAE,MAAM,CAAC;CAC1B,GACF,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,IAAI,CAAC,EAAE,YAAY,CAAC;IAAC,OAAO,EAAE,8BAA8B,CAAA;CAAE,CAAC,CA8E7F"}

package/packages/happy2-server/dist/modules/plugin/pluginManagementRequestCreateInstall.js

@@ -0,0 +1,78 @@
+import { and, eq } from "drizzle-orm";
+import { withTransaction } from "../drizzle.js";
+import { chatAppendAudit } from "../chat/chatAppendAudit.js";
+import { chatAdvanceWithSequence } from "../chat/chatAdvanceWithSequence.js";
+import { chatGetAccess } from "../chat/chatGetAccess.js";
+import { chatHint } from "../chat/chatHint.js";
+import { pluginManagementRequests } from "../schema.js";
+import { syncSequenceNext } from "../sync/syncSequenceNext.js";
+import { asPluginManagementRequest } from "./impl/asManagementRequest.js";
+import { pluginManagementRequestSelection } from "./impl/managementRequestSelection.js";
+import { PluginError } from "./types.js";
+/** Creates one idempotent pluginManagementRequests install for an immutable staged package and advances the originating chats point in one transaction. This boundary binds audit and reactive approval evidence to the exact agent call before installation authority exists. */
+export async function pluginManagementRequestCreateInstall(executor, input) {
+    return withTransaction(executor, async (tx) => {
+        const access = await chatGetAccess(tx, input.actorUserId, input.chatId, true);
+        if (!access)
+            throw new PluginError("forbidden", "The originating user cannot access this chat");
+        const [existing] = await tx
+            .select(pluginManagementRequestSelection)
+            .from(pluginManagementRequests)
+            .where(and(eq(pluginManagementRequests.requesterInstallationId, input.requesterInstallationId), eq(pluginManagementRequests.callId, input.callId), eq(pluginManagementRequests.action, "install")))
+            .limit(1);
+        if (existing)
+            return { created: false, request: asPluginManagementRequest(existing) };
+        await tx.insert(pluginManagementRequests).values({
+            id: input.id,
+            action: "install",
+            status: "pending",
+            chatId: input.chatId,
+            actorUserId: input.actorUserId,
+            agentUserId: input.agentUserId,
+            requesterInstallationId: input.requesterInstallationId,
+            callId: input.callId,
+            displayName: input.displayName,
+            shortName: input.shortName,
+            description: input.description,
+            reason: input.reason,
+            sourceKind: input.sourceKind,
+            sourceReference: input.sourceReference,
+            packageDigest: input.packageDigest,
+            packageDirectory: input.packageDirectory,
+            installationId: input.installationId,
+        });
+        await chatAppendAudit(tx, {
+            actorUserId: input.actorUserId,
+            action: "plugin.install_requested",
+            targetType: "plugin_management_request",
+            targetId: input.id,
+            chatId: input.chatId,
+            after: {
+                agentUserId: input.agentUserId,
+                requesterInstallationId: input.requesterInstallationId,
+                shortName: input.shortName,
+                sourceKind: input.sourceKind,
+                sourceReference: input.sourceReference,
+            },
+        });
+        const sequence = await syncSequenceNext(tx);
+        await tx
+            .update(pluginManagementRequests)
+            .set({ syncSequence: sequence })
+            .where(eq(pluginManagementRequests.id, input.id));
+        const mutation = await chatAdvanceWithSequence(tx, sequence, input.actorUserId, input.chatId, "plugin.install_requested", input.id);
+        const [created] = await tx
+            .select(pluginManagementRequestSelection)
+            .from(pluginManagementRequests)
+            .where(eq(pluginManagementRequests.id, input.id))
+            .limit(1);
+        if (!created)
+            throw new Error("Plugin management request projection was not found");
+        return {
+            created: true,
+            hint: chatHint(sequence, input.chatId, mutation.pts),
+            request: asPluginManagementRequest(created),
+        };
+    });
+}
+//# sourceMappingURL=pluginManagementRequestCreateInstall.js.map

package/packages/happy2-server/dist/modules/plugin/pluginManagementRequestCreateInstall.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pluginManagementRequestCreateInstall.js","sourceRoot":"","sources":["../../../sources/modules/plugin/pluginManagementRequestCreateInstall.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AAEtC,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAE,uBAAuB,EAAE,MAAM,oCAAoC,CAAC;AAC7E,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACzD,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAE/C,OAAO,EAAE,wBAAwB,EAAE,MAAM,cAAc,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,EAAE,yBAAyB,EAAE,MAAM,+BAA+B,CAAC;AAC1E,OAAO,EAAE,gCAAgC,EAAE,MAAM,sCAAsC,CAAC;AACxF,OAAO,EAAE,WAAW,EAAuC,MAAM,YAAY,CAAC;AAE9E,kRAAkR;AAClR,MAAM,CAAC,KAAK,UAAU,oCAAoC,CACtD,QAAyB,EACzB,KAgBC;IAED,OAAO,eAAe,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;QAC1C,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,EAAE,EAAE,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC9E,IAAI,CAAC,MAAM;YACP,MAAM,IAAI,WAAW,CAAC,WAAW,EAAE,8CAA8C,CAAC,CAAC;QACvF,MAAM,CAAC,QAAQ,CAAC,GAAG,MAAM,EAAE;aACtB,MAAM,CAAC,gCAAgC,CAAC;aACxC,IAAI,CAAC,wBAAwB,CAAC;aAC9B,KAAK,CACF,GAAG,CACC,EAAE,CACE,wBAAwB,CAAC,uBAAuB,EAChD,KAAK,CAAC,uBAAuB,CAChC,EACD,EAAE,CAAC,wBAAwB,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,EACjD,EAAE,CAAC,wBAAwB,CAAC,MAAM,EAAE,SAAS,CAAC,CACjD,CACJ;aACA,KAAK,CAAC,CAAC,CAAC,CAAC;QACd,IAAI,QAAQ;YAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,yBAAyB,CAAC,QAAQ,CAAC,EAAE,CAAC;QACtF,MAAM,EAAE,CAAC,MAAM,CAAC,wBAAwB,CAAC,CAAC,MAAM,CAAC;YAC7C,EAAE,EAAE,KAAK,CAAC,EAAE;YACZ,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,uBAAuB,EAAE,KAAK,CAAC,uBAAuB;YACtD,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;YACxC,cAAc,EAAE,KAAK,CAAC,cAAc;SACvC,CAAC,CAAC;QACH,MAAM,eAAe,CAAC,EAAE,EAAE;YACtB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,MAAM,EAAE,0BAA0B;YAClC,UAAU,EAAE,2BAA2B;YACvC,QAAQ,EAAE,KAAK,CAAC,EAAE;YAClB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,KAAK,EAAE;gBACH,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,uBAAuB,EAAE,KAAK,CAAC,uBAAuB;gBACtD,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,eAAe,EAAE,KAAK,CAAC,eAAe;aACzC;SACJ,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,EAAE,CAAC,CAAC;QAC5C,MAAM,EAAE;aACH,MAAM,CAAC,wBAAwB,CAAC;aAChC,GAAG,CAAC,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC;aAC/B,KAAK,CAAC,EAAE,CAAC,wBAAwB,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;QACtD,MAAM,QAAQ,GAAG,MAAM,uBAAuB,CAC1C,EAAE,EACF,QAAQ,EACR,KAAK,CAAC,WAAW,EACjB,KAAK,CAAC,MAAM,EACZ,0BAA0B,EAC1B,KAAK,CAAC,EAAE,CACX,CAAC;QACF,MAAM,CAAC,OAAO,CAAC,GAAG,MAAM,EAAE;aACrB,MAAM,CAAC,gCAAgC,CAAC;aACxC,IAAI,CAAC,wBAAwB,CAAC;aAC9B,KAAK,CAAC,EAAE,CAAC,wBAAwB,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;aAChD,KAAK,CAAC,CAAC,CAAC,CAAC;QACd,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QACpF,OAAO;YACH,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,CAAC;YACpD,OAAO,EAAE,yBAAyB,CAAC,OAAO,CAAC;SAC9C,CAAC;IACN,CAAC,CAAC,CAAC;AACP,CAAC"}

package/packages/happy2-server/dist/modules/plugin/pluginManagementRequestCreateUninstall.d.ts

@@ -0,0 +1,25 @@
+import type { DrizzleExecutor } from "../drizzle.js";
+import type { MutationHint } from "../chat/types.js";
+import { type PluginManagementRequestSummary, type PluginSource } from "./types.js";
+/** Creates one idempotent pluginManagementRequests uninstall with a validated metadata snapshot and advances the originating chats point in one transaction. This boundary binds human review and audit evidence to the exact agent call and installation target. */
+export declare function pluginManagementRequestCreateUninstall(executor: DrizzleExecutor, input: {
+    id: string;
+    actorUserId: string;
+    agentUserId: string;
+    callId: string;
+    chatId: string;
+    requesterInstallationId: string;
+    targetInstallationId: string;
+    displayName: string;
+    shortName: string;
+    description: string;
+    reason?: string;
+    source: PluginSource;
+    packageDigest: string;
+    packageDirectory: string;
+}): Promise<{
+    created: boolean;
+    hint?: MutationHint;
+    request: PluginManagementRequestSummary;
+}>;
+//# sourceMappingURL=pluginManagementRequestCreateUninstall.d.ts.map

package/packages/happy2-server/dist/modules/plugin/pluginManagementRequestCreateUninstall.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pluginManagementRequestCreateUninstall.d.ts","sourceRoot":"","sources":["../../../sources/modules/plugin/pluginManagementRequestCreateUninstall.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAMrD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAKrD,OAAO,EAAe,KAAK,8BAA8B,EAAE,KAAK,YAAY,EAAE,MAAM,YAAY,CAAC;AAEjG,qQAAqQ;AACrQ,wBAAsB,sCAAsC,CACxD,QAAQ,EAAE,eAAe,EACzB,KAAK,EAAE;IACH,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,uBAAuB,EAAE,MAAM,CAAC;IAChC,oBAAoB,EAAE,MAAM,CAAC;IAC7B,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,YAAY,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,MAAM,CAAC;CAC5B,GACF,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,IAAI,CAAC,EAAE,YAAY,CAAC;IAAC,OAAO,EAAE,8BAA8B,CAAA;CAAE,CAAC,CA4E7F"}

package/packages/happy2-server/dist/modules/plugin/pluginManagementRequestCreateUninstall.js

@@ -0,0 +1,76 @@
+import { and, eq } from "drizzle-orm";
+import { withTransaction } from "../drizzle.js";
+import { chatAdvanceWithSequence } from "../chat/chatAdvanceWithSequence.js";
+import { chatAppendAudit } from "../chat/chatAppendAudit.js";
+import { chatGetAccess } from "../chat/chatGetAccess.js";
+import { chatHint } from "../chat/chatHint.js";
+import { pluginManagementRequests } from "../schema.js";
+import { syncSequenceNext } from "../sync/syncSequenceNext.js";
+import { asPluginManagementRequest } from "./impl/asManagementRequest.js";
+import { pluginManagementRequestSelection } from "./impl/managementRequestSelection.js";
+import { PluginError } from "./types.js";
+/** Creates one idempotent pluginManagementRequests uninstall with a validated metadata snapshot and advances the originating chats point in one transaction. This boundary binds human review and audit evidence to the exact agent call and installation target. */
+export async function pluginManagementRequestCreateUninstall(executor, input) {
+    return withTransaction(executor, async (tx) => {
+        if (!(await chatGetAccess(tx, input.actorUserId, input.chatId, true)))
+            throw new PluginError("forbidden", "The originating user cannot access this chat");
+        const [existing] = await tx
+            .select(pluginManagementRequestSelection)
+            .from(pluginManagementRequests)
+            .where(and(eq(pluginManagementRequests.requesterInstallationId, input.requesterInstallationId), eq(pluginManagementRequests.callId, input.callId), eq(pluginManagementRequests.action, "uninstall")))
+            .limit(1);
+        if (existing)
+            return { created: false, request: asPluginManagementRequest(existing) };
+        await tx.insert(pluginManagementRequests).values({
+            id: input.id,
+            action: "uninstall",
+            status: "pending",
+            chatId: input.chatId,
+            actorUserId: input.actorUserId,
+            agentUserId: input.agentUserId,
+            requesterInstallationId: input.requesterInstallationId,
+            callId: input.callId,
+            displayName: input.displayName,
+            shortName: input.shortName,
+            description: input.description,
+            reason: input.reason,
+            sourceKind: input.source.kind,
+            sourceReference: input.source.reference,
+            packageDigest: input.packageDigest,
+            packageDirectory: input.packageDirectory,
+            targetInstallationId: input.targetInstallationId,
+        });
+        await chatAppendAudit(tx, {
+            actorUserId: input.actorUserId,
+            action: "plugin.uninstall_requested",
+            targetType: "plugin_management_request",
+            targetId: input.id,
+            chatId: input.chatId,
+            after: {
+                agentUserId: input.agentUserId,
+                requesterInstallationId: input.requesterInstallationId,
+                targetInstallationId: input.targetInstallationId,
+                shortName: input.shortName,
+            },
+        });
+        const sequence = await syncSequenceNext(tx);
+        await tx
+            .update(pluginManagementRequests)
+            .set({ syncSequence: sequence })
+            .where(eq(pluginManagementRequests.id, input.id));
+        const mutation = await chatAdvanceWithSequence(tx, sequence, input.actorUserId, input.chatId, "plugin.uninstall_requested", input.id);
+        const [created] = await tx
+            .select(pluginManagementRequestSelection)
+            .from(pluginManagementRequests)
+            .where(eq(pluginManagementRequests.id, input.id))
+            .limit(1);
+        if (!created)
+            throw new Error("Plugin uninstall request projection was not found");
+        return {
+            created: true,
+            hint: chatHint(sequence, input.chatId, mutation.pts),
+            request: asPluginManagementRequest(created),
+        };
+    });
+}
+//# sourceMappingURL=pluginManagementRequestCreateUninstall.js.map

package/packages/happy2-server/dist/modules/plugin/pluginManagementRequestCreateUninstall.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pluginManagementRequestCreateUninstall.js","sourceRoot":"","sources":["../../../sources/modules/plugin/pluginManagementRequestCreateUninstall.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AAEtC,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,uBAAuB,EAAE,MAAM,oCAAoC,CAAC;AAC7E,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACzD,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAE/C,OAAO,EAAE,wBAAwB,EAAE,MAAM,cAAc,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,EAAE,yBAAyB,EAAE,MAAM,+BAA+B,CAAC;AAC1E,OAAO,EAAE,gCAAgC,EAAE,MAAM,sCAAsC,CAAC;AACxF,OAAO,EAAE,WAAW,EAA0D,MAAM,YAAY,CAAC;AAEjG,qQAAqQ;AACrQ,MAAM,CAAC,KAAK,UAAU,sCAAsC,CACxD,QAAyB,EACzB,KAeC;IAED,OAAO,eAAe,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;QAC1C,IAAI,CAAC,CAAC,MAAM,aAAa,CAAC,EAAE,EAAE,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YACjE,MAAM,IAAI,WAAW,CAAC,WAAW,EAAE,8CAA8C,CAAC,CAAC;QACvF,MAAM,CAAC,QAAQ,CAAC,GAAG,MAAM,EAAE;aACtB,MAAM,CAAC,gCAAgC,CAAC;aACxC,IAAI,CAAC,wBAAwB,CAAC;aAC9B,KAAK,CACF,GAAG,CACC,EAAE,CACE,wBAAwB,CAAC,uBAAuB,EAChD,KAAK,CAAC,uBAAuB,CAChC,EACD,EAAE,CAAC,wBAAwB,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,EACjD,EAAE,CAAC,wBAAwB,CAAC,MAAM,EAAE,WAAW,CAAC,CACnD,CACJ;aACA,KAAK,CAAC,CAAC,CAAC,CAAC;QACd,IAAI,QAAQ;YAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,yBAAyB,CAAC,QAAQ,CAAC,EAAE,CAAC;QACtF,MAAM,EAAE,CAAC,MAAM,CAAC,wBAAwB,CAAC,CAAC,MAAM,CAAC;YAC7C,EAAE,EAAE,KAAK,CAAC,EAAE;YACZ,MAAM,EAAE,WAAW;YACnB,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,uBAAuB,EAAE,KAAK,CAAC,uBAAuB;YACtD,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI;YAC7B,eAAe,EAAE,KAAK,CAAC,MAAM,CAAC,SAAS;YACvC,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;YACxC,oBAAoB,EAAE,KAAK,CAAC,oBAAoB;SACnD,CAAC,CAAC;QACH,MAAM,eAAe,CAAC,EAAE,EAAE;YACtB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,MAAM,EAAE,4BAA4B;YACpC,UAAU,EAAE,2BAA2B;YACvC,QAAQ,EAAE,KAAK,CAAC,EAAE;YAClB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,KAAK,EAAE;gBACH,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,uBAAuB,EAAE,KAAK,CAAC,uBAAuB;gBACtD,oBAAoB,EAAE,KAAK,CAAC,oBAAoB;gBAChD,SAAS,EAAE,KAAK,CAAC,SAAS;aAC7B;SACJ,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,EAAE,CAAC,CAAC;QAC5C,MAAM,EAAE;aACH,MAAM,CAAC,wBAAwB,CAAC;aAChC,GAAG,CAAC,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC;aAC/B,KAAK,CAAC,EAAE,CAAC,wBAAwB,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;QACtD,MAAM,QAAQ,GAAG,MAAM,uBAAuB,CAC1C,EAAE,EACF,QAAQ,EACR,KAAK,CAAC,WAAW,EACjB,KAAK,CAAC,MAAM,EACZ,4BAA4B,EAC5B,KAAK,CAAC,EAAE,CACX,CAAC;QACF,MAAM,CAAC,OAAO,CAAC,GAAG,MAAM,EAAE;aACrB,MAAM,CAAC,gCAAgC,CAAC;aACxC,IAAI,CAAC,wBAAwB,CAAC;aAC9B,KAAK,CAAC,EAAE,CAAC,wBAAwB,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;aAChD,KAAK,CAAC,CAAC,CAAC,CAAC;QACd,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;QACnF,OAAO;YACH,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,CAAC;YACpD,OAAO,EAAE,yBAAyB,CAAC,OAAO,CAAC;SAC9C,CAAC;IACN,CAAC,CAAC,CAAC;AACP,CAAC"}

package/packages/happy2-server/dist/modules/plugin/pluginManagementRequestDeny.d.ts

@@ -0,0 +1,11 @@
+import type { DrizzleExecutor } from "../drizzle.js";
+import type { MutationHint } from "../chat/types.js";
+import type { PluginManagementRequestAction } from "./types.js";
+/** Denies one pending pluginManagementRequests row and advances the originating chats point for a chat-member administrator in one transaction. This resolution boundary keeps authorization, audit evidence, and the reactive card state consistent. */
+export declare function pluginManagementRequestDeny(executor: DrizzleExecutor, input: {
+    actorUserId: string;
+    chatId: string;
+    requestId: string;
+    action: PluginManagementRequestAction;
+}): Promise<MutationHint>;
+//# sourceMappingURL=pluginManagementRequestDeny.d.ts.map

package/packages/happy2-server/dist/modules/plugin/pluginManagementRequestDeny.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pluginManagementRequestDeny.d.ts","sourceRoot":"","sources":["../../../sources/modules/plugin/pluginManagementRequestDeny.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAMrD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAKrD,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,YAAY,CAAC;AAEhE,yPAAyP;AACzP,wBAAsB,2BAA2B,CAC7C,QAAQ,EAAE,eAAe,EACzB,KAAK,EAAE;IACH,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,6BAA6B,CAAC;CACzC,GACF,OAAO,CAAC,YAAY,CAAC,CAiDvB"}

package/packages/happy2-server/dist/modules/plugin/pluginManagementRequestDeny.js

@@ -0,0 +1,48 @@
+import { and, eq, sql } from "drizzle-orm";
+import { withTransaction } from "../drizzle.js";
+import { chatAdvanceWithSequence } from "../chat/chatAdvanceWithSequence.js";
+import { chatAppendAudit } from "../chat/chatAppendAudit.js";
+import { chatGetAccess } from "../chat/chatGetAccess.js";
+import { chatHint } from "../chat/chatHint.js";
+import { userRequireServerAdmin } from "../chat/userRequireServerAdmin.js";
+import { pluginManagementRequests } from "../schema.js";
+import { syncSequenceNext } from "../sync/syncSequenceNext.js";
+import { PluginError } from "./types.js";
+/** Denies one pending pluginManagementRequests row and advances the originating chats point for a chat-member administrator in one transaction. This resolution boundary keeps authorization, audit evidence, and the reactive card state consistent. */
+export async function pluginManagementRequestDeny(executor, input) {
+    return withTransaction(executor, async (tx) => {
+        await userRequireServerAdmin(tx, input.actorUserId);
+        if (!(await chatGetAccess(tx, input.actorUserId, input.chatId, true)))
+            throw new PluginError("forbidden", "Chat membership is required");
+        const updated = await tx
+            .update(pluginManagementRequests)
+            .set({
+            status: "denied",
+            resolvedByUserId: input.actorUserId,
+            resolvedAt: sql `CURRENT_TIMESTAMP`,
+            updatedAt: sql `CURRENT_TIMESTAMP`,
+        })
+            .where(and(eq(pluginManagementRequests.id, input.requestId), eq(pluginManagementRequests.chatId, input.chatId), eq(pluginManagementRequests.action, input.action), eq(pluginManagementRequests.status, "pending")))
+            .returning({
+            id: pluginManagementRequests.id,
+            action: pluginManagementRequests.action,
+        });
+        if (updated.length !== 1)
+            throw new PluginError("conflict", `Plugin ${input.action} request is not pending`);
+        await chatAppendAudit(tx, {
+            actorUserId: input.actorUserId,
+            action: `plugin.${updated[0].action}_denied`,
+            targetType: "plugin_management_request",
+            targetId: input.requestId,
+            chatId: input.chatId,
+        });
+        const sequence = await syncSequenceNext(tx);
+        await tx
+            .update(pluginManagementRequests)
+            .set({ syncSequence: sequence })
+            .where(eq(pluginManagementRequests.id, input.requestId));
+        const mutation = await chatAdvanceWithSequence(tx, sequence, input.actorUserId, input.chatId, `plugin.${updated[0].action}_denied`, input.requestId);
+        return chatHint(sequence, input.chatId, mutation.pts);
+    });
+}
+//# sourceMappingURL=pluginManagementRequestDeny.js.map

package/packages/happy2-server/dist/modules/plugin/pluginManagementRequestDeny.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pluginManagementRequestDeny.js","sourceRoot":"","sources":["../../../sources/modules/plugin/pluginManagementRequestDeny.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAE3C,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,uBAAuB,EAAE,MAAM,oCAAoC,CAAC;AAC7E,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACzD,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAE/C,OAAO,EAAE,sBAAsB,EAAE,MAAM,mCAAmC,CAAC;AAC3E,OAAO,EAAE,wBAAwB,EAAE,MAAM,cAAc,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAGzC,yPAAyP;AACzP,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC7C,QAAyB,EACzB,KAKC;IAED,OAAO,eAAe,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;QAC1C,MAAM,sBAAsB,CAAC,EAAE,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;QACpD,IAAI,CAAC,CAAC,MAAM,aAAa,CAAC,EAAE,EAAE,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YACjE,MAAM,IAAI,WAAW,CAAC,WAAW,EAAE,6BAA6B,CAAC,CAAC;QACtE,MAAM,OAAO,GAAG,MAAM,EAAE;aACnB,MAAM,CAAC,wBAAwB,CAAC;aAChC,GAAG,CAAC;YACD,MAAM,EAAE,QAAQ;YAChB,gBAAgB,EAAE,KAAK,CAAC,WAAW;YACnC,UAAU,EAAE,GAAG,CAAA,mBAAmB;YAClC,SAAS,EAAE,GAAG,CAAA,mBAAmB;SACpC,CAAC;aACD,KAAK,CACF,GAAG,CACC,EAAE,CAAC,wBAAwB,CAAC,EAAE,EAAE,KAAK,CAAC,SAAS,CAAC,EAChD,EAAE,CAAC,wBAAwB,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,EACjD,EAAE,CAAC,wBAAwB,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,EACjD,EAAE,CAAC,wBAAwB,CAAC,MAAM,EAAE,SAAS,CAAC,CACjD,CACJ;aACA,SAAS,CAAC;YACP,EAAE,EAAE,wBAAwB,CAAC,EAAE;YAC/B,MAAM,EAAE,wBAAwB,CAAC,MAAM;SAC1C,CAAC,CAAC;QACP,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YACpB,MAAM,IAAI,WAAW,CAAC,UAAU,EAAE,UAAU,KAAK,CAAC,MAAM,yBAAyB,CAAC,CAAC;QACvF,MAAM,eAAe,CAAC,EAAE,EAAE;YACtB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,MAAM,EAAE,UAAU,OAAO,CAAC,CAAC,CAAE,CAAC,MAAM,SAAS;YAC7C,UAAU,EAAE,2BAA2B;YACvC,QAAQ,EAAE,KAAK,CAAC,SAAS;YACzB,MAAM,EAAE,KAAK,CAAC,MAAM;SACvB,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,EAAE,CAAC,CAAC;QAC5C,MAAM,EAAE;aACH,MAAM,CAAC,wBAAwB,CAAC;aAChC,GAAG,CAAC,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC;aAC/B,KAAK,CAAC,EAAE,CAAC,wBAAwB,CAAC,EAAE,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;QAC7D,MAAM,QAAQ,GAAG,MAAM,uBAAuB,CAC1C,EAAE,EACF,QAAQ,EACR,KAAK,CAAC,WAAW,EACjB,KAAK,CAAC,MAAM,EACZ,UAAU,OAAO,CAAC,CAAC,CAAE,CAAC,MAAM,SAAS,EACrC,KAAK,CAAC,SAAS,CAClB,CAAC;QACF,OAAO,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;AACP,CAAC"}

package/packages/happy2-server/dist/modules/plugin/pluginManagementRequestGetPackage.d.ts

@@ -0,0 +1,12 @@
+import type { DrizzleExecutor } from "../drizzle.js";
+import { type PluginSource } from "./types.js";
+export interface PluginManagementRequestPackage {
+    id: string;
+    chatId: string;
+    packageDigest: string;
+    packageDirectory: string;
+    source: PluginSource;
+}
+/** Returns the private staged-package coordinates for one visible approval and does not mutate durable state. This boundary lets the package store integrity-check an image or approved operation without exposing filesystem paths through routes. */
+export declare function pluginManagementRequestGetPackage(executor: DrizzleExecutor, actorUserId: string, chatId: string, requestId: string): Promise<PluginManagementRequestPackage>;
+//# sourceMappingURL=pluginManagementRequestGetPackage.d.ts.map

package/packages/happy2-server/dist/modules/plugin/pluginManagementRequestGetPackage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pluginManagementRequestGetPackage.d.ts","sourceRoot":"","sources":["../../../sources/modules/plugin/pluginManagementRequestGetPackage.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAGrD,OAAO,EAAe,KAAK,YAAY,EAAE,MAAM,YAAY,CAAC;AAE5D,MAAM,WAAW,8BAA8B;IAC3C,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,MAAM,CAAC;IACzB,MAAM,EAAE,YAAY,CAAC;CACxB;AAED,uPAAuP;AACvP,wBAAsB,iCAAiC,CACnD,QAAQ,EAAE,eAAe,EACzB,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,GAClB,OAAO,CAAC,8BAA8B,CAAC,CAyCzC"}

package/packages/happy2-server/dist/modules/plugin/pluginManagementRequestGetPackage.js

@@ -0,0 +1,42 @@
+import { and, eq } from "drizzle-orm";
+import { chatGetAccess } from "../chat/chatGetAccess.js";
+import { pluginManagementRequests } from "../schema.js";
+import { PluginError } from "./types.js";
+/** Returns the private staged-package coordinates for one visible approval and does not mutate durable state. This boundary lets the package store integrity-check an image or approved operation without exposing filesystem paths through routes. */
+export async function pluginManagementRequestGetPackage(executor, actorUserId, chatId, requestId) {
+    if (!(await chatGetAccess(executor, actorUserId, chatId, true)))
+        throw new PluginError("forbidden", "Chat membership is required");
+    const [row] = await executor
+        .select({
+        id: pluginManagementRequests.id,
+        chatId: pluginManagementRequests.chatId,
+        action: pluginManagementRequests.action,
+        status: pluginManagementRequests.status,
+        sourceKind: pluginManagementRequests.sourceKind,
+        sourceReference: pluginManagementRequests.sourceReference,
+        packageDigest: pluginManagementRequests.packageDigest,
+        packageDirectory: pluginManagementRequests.packageDirectory,
+    })
+        .from(pluginManagementRequests)
+        .where(and(eq(pluginManagementRequests.id, requestId), eq(pluginManagementRequests.chatId, chatId)))
+        .limit(1);
+    if (!row)
+        throw new PluginError("not_found", "Plugin management request was not found");
+    if (row.status !== "pending" && row.status !== "processing")
+        throw new PluginError("not_found", "Plugin management request image is no longer retained");
+    if ((row.sourceKind !== "archive" &&
+        row.sourceKind !== "builtin" &&
+        row.sourceKind !== "link") ||
+        !row.sourceReference ||
+        !row.packageDigest ||
+        !row.packageDirectory)
+        throw new Error("Plugin management request has incomplete package metadata");
+    return {
+        id: row.id,
+        chatId: row.chatId,
+        packageDigest: row.packageDigest,
+        packageDirectory: row.packageDirectory,
+        source: { kind: row.sourceKind, reference: row.sourceReference },
+    };
+}
+//# sourceMappingURL=pluginManagementRequestGetPackage.js.map

package/packages/happy2-server/dist/modules/plugin/pluginManagementRequestGetPackage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pluginManagementRequestGetPackage.js","sourceRoot":"","sources":["../../../sources/modules/plugin/pluginManagementRequestGetPackage.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AAEtC,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACzD,OAAO,EAAE,wBAAwB,EAAE,MAAM,cAAc,CAAC;AACxD,OAAO,EAAE,WAAW,EAAqB,MAAM,YAAY,CAAC;AAU5D,uPAAuP;AACvP,MAAM,CAAC,KAAK,UAAU,iCAAiC,CACnD,QAAyB,EACzB,WAAmB,EACnB,MAAc,EACd,SAAiB;IAEjB,IAAI,CAAC,CAAC,MAAM,aAAa,CAAC,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;QAC3D,MAAM,IAAI,WAAW,CAAC,WAAW,EAAE,6BAA6B,CAAC,CAAC;IACtE,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,QAAQ;SACvB,MAAM,CAAC;QACJ,EAAE,EAAE,wBAAwB,CAAC,EAAE;QAC/B,MAAM,EAAE,wBAAwB,CAAC,MAAM;QACvC,MAAM,EAAE,wBAAwB,CAAC,MAAM;QACvC,MAAM,EAAE,wBAAwB,CAAC,MAAM;QACvC,UAAU,EAAE,wBAAwB,CAAC,UAAU;QAC/C,eAAe,EAAE,wBAAwB,CAAC,eAAe;QACzD,aAAa,EAAE,wBAAwB,CAAC,aAAa;QACrD,gBAAgB,EAAE,wBAAwB,CAAC,gBAAgB;KAC9D,CAAC;SACD,IAAI,CAAC,wBAAwB,CAAC;SAC9B,KAAK,CACF,GAAG,CACC,EAAE,CAAC,wBAAwB,CAAC,EAAE,EAAE,SAAS,CAAC,EAC1C,EAAE,CAAC,wBAAwB,CAAC,MAAM,EAAE,MAAM,CAAC,CAC9C,CACJ;SACA,KAAK,CAAC,CAAC,CAAC,CAAC;IACd,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,WAAW,CAAC,WAAW,EAAE,yCAAyC,CAAC,CAAC;IACxF,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,GAAG,CAAC,MAAM,KAAK,YAAY;QACvD,MAAM,IAAI,WAAW,CAAC,WAAW,EAAE,uDAAuD,CAAC,CAAC;IAChG,IACI,CAAC,GAAG,CAAC,UAAU,KAAK,SAAS;QACzB,GAAG,CAAC,UAAU,KAAK,SAAS;QAC5B,GAAG,CAAC,UAAU,KAAK,MAAM,CAAC;QAC9B,CAAC,GAAG,CAAC,eAAe;QACpB,CAAC,GAAG,CAAC,aAAa;QAClB,CAAC,GAAG,CAAC,gBAAgB;QAErB,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;IACjF,OAAO;QACH,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,aAAa,EAAE,GAAG,CAAC,aAAa;QAChC,gBAAgB,EAAE,GAAG,CAAC,gBAAgB;QACtC,MAAM,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,UAAU,EAAE,SAAS,EAAE,GAAG,CAAC,eAAe,EAAE;KACnE,CAAC;AACN,CAAC"}

package/packages/happy2-server/dist/modules/plugin/pluginManagementRequestList.d.ts

@@ -0,0 +1,5 @@
+import type { DrizzleExecutor } from "../drizzle.js";
+import { type PluginManagementRequestSummary } from "./types.js";
+/** Lists durable plugin approval cards for one accessible chat and does not mutate durable state. This projection boundary requires active membership while excluding staged filesystem paths and other private package internals. */
+export declare function pluginManagementRequestList(executor: DrizzleExecutor, actorUserId: string, chatId: string): Promise<PluginManagementRequestSummary[]>;
+//# sourceMappingURL=pluginManagementRequestList.d.ts.map

package/packages/happy2-server/dist/modules/plugin/pluginManagementRequestList.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pluginManagementRequestList.d.ts","sourceRoot":"","sources":["../../../sources/modules/plugin/pluginManagementRequestList.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAKrD,OAAO,EAAe,KAAK,8BAA8B,EAAE,MAAM,YAAY,CAAC;AAE9E,sOAAsO;AACtO,wBAAsB,2BAA2B,CAC7C,QAAQ,EAAE,eAAe,EACzB,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,MAAM,GACf,OAAO,CAAC,8BAA8B,EAAE,CAAC,CAS3C"}

package/packages/happy2-server/dist/modules/plugin/pluginManagementRequestList.js

@@ -0,0 +1,18 @@
+import { desc, eq } from "drizzle-orm";
+import { chatGetAccess } from "../chat/chatGetAccess.js";
+import { pluginManagementRequests } from "../schema.js";
+import { asPluginManagementRequest } from "./impl/asManagementRequest.js";
+import { pluginManagementRequestSelection } from "./impl/managementRequestSelection.js";
+import { PluginError } from "./types.js";
+/** Lists durable plugin approval cards for one accessible chat and does not mutate durable state. This projection boundary requires active membership while excluding staged filesystem paths and other private package internals. */
+export async function pluginManagementRequestList(executor, actorUserId, chatId) {
+    if (!(await chatGetAccess(executor, actorUserId, chatId, true)))
+        throw new PluginError("forbidden", "Chat membership is required");
+    const rows = await executor
+        .select(pluginManagementRequestSelection)
+        .from(pluginManagementRequests)
+        .where(eq(pluginManagementRequests.chatId, chatId))
+        .orderBy(desc(pluginManagementRequests.createdAt), desc(pluginManagementRequests.id));
+    return rows.map(asPluginManagementRequest);
+}
+//# sourceMappingURL=pluginManagementRequestList.js.map

package/packages/happy2-server/dist/modules/plugin/pluginManagementRequestList.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pluginManagementRequestList.js","sourceRoot":"","sources":["../../../sources/modules/plugin/pluginManagementRequestList.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AAEvC,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACzD,OAAO,EAAE,wBAAwB,EAAE,MAAM,cAAc,CAAC;AACxD,OAAO,EAAE,yBAAyB,EAAE,MAAM,+BAA+B,CAAC;AAC1E,OAAO,EAAE,gCAAgC,EAAE,MAAM,sCAAsC,CAAC;AACxF,OAAO,EAAE,WAAW,EAAuC,MAAM,YAAY,CAAC;AAE9E,sOAAsO;AACtO,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC7C,QAAyB,EACzB,WAAmB,EACnB,MAAc;IAEd,IAAI,CAAC,CAAC,MAAM,aAAa,CAAC,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;QAC3D,MAAM,IAAI,WAAW,CAAC,WAAW,EAAE,6BAA6B,CAAC,CAAC;IACtE,MAAM,IAAI,GAAG,MAAM,QAAQ;SACtB,MAAM,CAAC,gCAAgC,CAAC;SACxC,IAAI,CAAC,wBAAwB,CAAC;SAC9B,KAAK,CAAC,EAAE,CAAC,wBAAwB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;SAClD,OAAO,CAAC,IAAI,CAAC,wBAAwB,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,wBAAwB,CAAC,EAAE,CAAC,CAAC,CAAC;IAC1F,OAAO,IAAI,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;AAC/C,CAAC"}

package/packages/happy2-server/dist/modules/plugin/pluginManagementRequestListTerminalIds.d.ts

@@ -0,0 +1,4 @@
+import type { DrizzleExecutor } from "../drizzle.js";
+/** Lists terminal pluginManagementRequests whose staged package directories can be reclaimed and does not mutate durable state. This restart-cleanup boundary prevents resolved approval snapshots from accumulating after a process stops between resolution and filesystem cleanup. */
+export declare function pluginManagementRequestListTerminalIds(executor: DrizzleExecutor): Promise<string[]>;
+//# sourceMappingURL=pluginManagementRequestListTerminalIds.d.ts.map

package/packages/happy2-server/dist/modules/plugin/pluginManagementRequestListTerminalIds.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pluginManagementRequestListTerminalIds.d.ts","sourceRoot":"","sources":["../../../sources/modules/plugin/pluginManagementRequestListTerminalIds.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAGrD,yRAAyR;AACzR,wBAAsB,sCAAsC,CACxD,QAAQ,EAAE,eAAe,GAC1B,OAAO,CAAC,MAAM,EAAE,CAAC,CAMnB"}

package/packages/happy2-server/dist/modules/plugin/pluginManagementRequestListTerminalIds.js

@@ -0,0 +1,11 @@
+import { inArray } from "drizzle-orm";
+import { pluginManagementRequests } from "../schema.js";
+/** Lists terminal pluginManagementRequests whose staged package directories can be reclaimed and does not mutate durable state. This restart-cleanup boundary prevents resolved approval snapshots from accumulating after a process stops between resolution and filesystem cleanup. */
+export async function pluginManagementRequestListTerminalIds(executor) {
+    const rows = await executor
+        .select({ id: pluginManagementRequests.id })
+        .from(pluginManagementRequests)
+        .where(inArray(pluginManagementRequests.status, ["approved", "denied", "failed"]));
+    return rows.map(({ id }) => id);
+}
+//# sourceMappingURL=pluginManagementRequestListTerminalIds.js.map

package/packages/happy2-server/dist/modules/plugin/pluginManagementRequestListTerminalIds.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pluginManagementRequestListTerminalIds.js","sourceRoot":"","sources":["../../../sources/modules/plugin/pluginManagementRequestListTerminalIds.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAEtC,OAAO,EAAE,wBAAwB,EAAE,MAAM,cAAc,CAAC;AAExD,yRAAyR;AACzR,MAAM,CAAC,KAAK,UAAU,sCAAsC,CACxD,QAAyB;IAEzB,MAAM,IAAI,GAAG,MAAM,QAAQ;SACtB,MAAM,CAAC,EAAE,EAAE,EAAE,wBAAwB,CAAC,EAAE,EAAE,CAAC;SAC3C,IAAI,CAAC,wBAAwB,CAAC;SAC9B,KAAK,CAAC,OAAO,CAAC,wBAAwB,CAAC,MAAM,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;IACvF,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;AACpC,CAAC"}

package/packages/happy2-server/dist/modules/plugin/pluginManagementRequestRecoverProcessing.d.ts

@@ -0,0 +1,5 @@
+import type { DrizzleExecutor } from "../drizzle.js";
+import type { MutationHint } from "../chat/types.js";
+/** Resolves pluginManagementRequests left processing by a stopped complete-server process according to the durable installation outcome. This restart boundary prevents approval cards from remaining permanently claimed while preserving audit and reactive chat evidence for the recovered terminal state. */
+export declare function pluginManagementRequestRecoverProcessing(executor: DrizzleExecutor): Promise<MutationHint[]>;
+//# sourceMappingURL=pluginManagementRequestRecoverProcessing.d.ts.map

package/packages/happy2-server/dist/modules/plugin/pluginManagementRequestRecoverProcessing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pluginManagementRequestRecoverProcessing.d.ts","sourceRoot":"","sources":["../../../sources/modules/plugin/pluginManagementRequestRecoverProcessing.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAKrD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAIrD,iTAAiT;AACjT,wBAAsB,wCAAwC,CAC1D,QAAQ,EAAE,eAAe,GAC1B,OAAO,CAAC,YAAY,EAAE,CAAC,CA+EzB"}