happy2 0.0.13 → 0.0.15

package/packages/happy2-server/dist/modules/plugin/pluginInstallationGetContainerName.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pluginInstallationGetContainerName.js","sourceRoot":"","sources":["../../../sources/modules/plugin/pluginInstallationGetContainerName.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AAEjC,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAEzC;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kCAAkC,CACpD,QAAyB,EACzB,cAAsB;IAEtB,MAAM,CAAC,YAAY,CAAC,GAAG,MAAM,QAAQ;SAChC,MAAM,CAAC,EAAE,aAAa,EAAE,mBAAmB,CAAC,aAAa,EAAE,CAAC;SAC5D,IAAI,CAAC,mBAAmB,CAAC;SACzB,KAAK,CAAC,EAAE,CAAC,mBAAmB,CAAC,EAAE,EAAE,cAAc,CAAC,CAAC;SACjD,KAAK,CAAC,CAAC,CAAC,CAAC;IACd,IAAI,CAAC,YAAY;QAAE,MAAM,IAAI,WAAW,CAAC,WAAW,EAAE,mCAAmC,CAAC,CAAC;IAC3F,OAAO,YAAY,CAAC,aAAa,IAAI,SAAS,CAAC;AACnD,CAAC"}

package/packages/happy2-server/dist/modules/plugin/pluginInstallationGetRequestUninstallContext.d.ts

@@ -0,0 +1,13 @@
+import type { DrizzleExecutor } from "../drizzle.js";
+import { type PluginSource } from "./types.js";
+/** Returns one installed plugin's non-secret immutable package coordinates and does not mutate durable state. This boundary lets a capability-authorized request snapshot trusted metadata without exposing variables or repository-style access. */
+export declare function pluginInstallationGetRequestUninstallContext(executor: DrizzleExecutor, installationId: string): Promise<{
+    pluginId: string;
+    displayName: string;
+    shortName: string;
+    description: string;
+    packageDigest: string;
+    packageDirectory: string;
+    source: PluginSource;
+}>;
+//# sourceMappingURL=pluginInstallationGetRequestUninstallContext.d.ts.map

package/packages/happy2-server/dist/modules/plugin/pluginInstallationGetRequestUninstallContext.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pluginInstallationGetRequestUninstallContext.d.ts","sourceRoot":"","sources":["../../../sources/modules/plugin/pluginInstallationGetRequestUninstallContext.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAErD,OAAO,EAAe,KAAK,YAAY,EAAE,MAAM,YAAY,CAAC;AAE5D,qPAAqP;AACrP,wBAAsB,4CAA4C,CAC9D,QAAQ,EAAE,eAAe,EACzB,cAAc,EAAE,MAAM,GACvB,OAAO,CAAC;IACP,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,MAAM,CAAC;IACzB,MAAM,EAAE,YAAY,CAAC;CACxB,CAAC,CA4BD"}

package/packages/happy2-server/dist/modules/plugin/pluginInstallationGetRequestUninstallContext.js

@@ -0,0 +1,35 @@
+import { eq } from "drizzle-orm";
+import { pluginInstallations, plugins } from "../schema.js";
+import { PluginError } from "./types.js";
+/** Returns one installed plugin's non-secret immutable package coordinates and does not mutate durable state. This boundary lets a capability-authorized request snapshot trusted metadata without exposing variables or repository-style access. */
+export async function pluginInstallationGetRequestUninstallContext(executor, installationId) {
+    const [row] = await executor
+        .select({
+        pluginId: plugins.id,
+        displayName: plugins.displayName,
+        shortName: plugins.shortName,
+        description: plugins.description,
+        packageDigest: plugins.packageDigest,
+        packageDirectory: plugins.packageDirectory,
+        sourceKind: plugins.sourceKind,
+        sourceReference: plugins.sourceReference,
+    })
+        .from(pluginInstallations)
+        .innerJoin(plugins, eq(plugins.id, pluginInstallations.pluginId))
+        .where(eq(pluginInstallations.id, installationId))
+        .limit(1);
+    if (!row)
+        throw new PluginError("not_found", "Plugin installation was not found");
+    if (row.sourceKind !== "builtin" && row.sourceKind !== "archive" && row.sourceKind !== "link")
+        throw new Error(`Unknown plugin source kind ${row.sourceKind}`);
+    return {
+        pluginId: row.pluginId,
+        displayName: row.displayName,
+        shortName: row.shortName,
+        description: row.description,
+        packageDigest: row.packageDigest,
+        packageDirectory: row.packageDirectory,
+        source: { kind: row.sourceKind, reference: row.sourceReference },
+    };
+}
+//# sourceMappingURL=pluginInstallationGetRequestUninstallContext.js.map

package/packages/happy2-server/dist/modules/plugin/pluginInstallationGetRequestUninstallContext.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pluginInstallationGetRequestUninstallContext.js","sourceRoot":"","sources":["../../../sources/modules/plugin/pluginInstallationGetRequestUninstallContext.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AAEjC,OAAO,EAAE,mBAAmB,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAC5D,OAAO,EAAE,WAAW,EAAqB,MAAM,YAAY,CAAC;AAE5D,qPAAqP;AACrP,MAAM,CAAC,KAAK,UAAU,4CAA4C,CAC9D,QAAyB,EACzB,cAAsB;IAUtB,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,QAAQ;SACvB,MAAM,CAAC;QACJ,QAAQ,EAAE,OAAO,CAAC,EAAE;QACpB,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;QAC1C,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,eAAe,EAAE,OAAO,CAAC,eAAe;KAC3C,CAAC;SACD,IAAI,CAAC,mBAAmB,CAAC;SACzB,SAAS,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,mBAAmB,CAAC,QAAQ,CAAC,CAAC;SAChE,KAAK,CAAC,EAAE,CAAC,mBAAmB,CAAC,EAAE,EAAE,cAAc,CAAC,CAAC;SACjD,KAAK,CAAC,CAAC,CAAC,CAAC;IACd,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,WAAW,CAAC,WAAW,EAAE,mCAAmC,CAAC,CAAC;IAClF,IAAI,GAAG,CAAC,UAAU,KAAK,SAAS,IAAI,GAAG,CAAC,UAAU,KAAK,SAAS,IAAI,GAAG,CAAC,UAAU,KAAK,MAAM;QACzF,MAAM,IAAI,KAAK,CAAC,8BAA8B,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;IACpE,OAAO;QACH,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,aAAa,EAAE,GAAG,CAAC,aAAa;QAChC,gBAAgB,EAAE,GAAG,CAAC,gBAAgB;QACtC,MAAM,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,UAAU,EAAE,SAAS,EAAE,GAAG,CAAC,eAAe,EAAE;KACnE,CAAC;AACN,CAAC"}

package/packages/happy2-server/dist/modules/plugin/pluginInstallationGetRuntimeConfiguration.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pluginInstallationGetRuntimeConfiguration.d.ts","sourceRoot":"","sources":["../../../sources/modules/plugin/pluginInstallationGetRuntimeConfiguration.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAOrD,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AAC1D,OAAO,EAAe,KAAK,0BAA0B,EAAE,MAAM,YAAY,CAAC;AAI1E;;;GAGG;AACH,wBAAsB,yCAAyC,CAC3D,QAAQ,EAAE,eAAe,EACzB,eAAe,EAAE,qBAAqB,EACtC,cAAc,EAAE,MAAM,GACvB,OAAO,CAAC,0BAA0B,CAAC,CAoIrC"}
+{"version":3,"file":"pluginInstallationGetRuntimeConfiguration.d.ts","sourceRoot":"","sources":["../../../sources/modules/plugin/pluginInstallationGetRuntimeConfiguration.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAOrD,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AAC1D,OAAO,EAAe,KAAK,0BAA0B,EAAE,MAAM,YAAY,CAAC;AAK1E;;;GAGG;AACH,wBAAsB,yCAAyC,CAC3D,QAAQ,EAAE,eAAe,EACzB,eAAe,EAAE,qBAAqB,EACtC,cAAc,EAAE,MAAM,GACvB,OAAO,CAAC,0BAA0B,CAAC,CA8IrC"}

package/packages/happy2-server/dist/modules/plugin/pluginInstallationGetRuntimeConfiguration.js

@@ -3,6 +3,7 @@ import { agentImages, pluginInstallations, pluginInstallationVariables, plugins,
 import { PluginError } from "./types.js";
 import { installedManifest } from "./impl/installedManifest.js";
 import { effectiveContainer } from "./impl/effectiveContainer.js";
+import { pluginPermissionsParse, pluginPermissionsValidate } from "./impl/apiPermissions.js";
 /**
  * Resolves one installed manifest into its private runtime configuration, revealing encrypted values only for process environment or remote header materialization.
  * This read-only boundary does not mutate durable state and keeps secret recovery out of routes, catalog projections, and lifecycle orchestration.
@@ -18,9 +19,11 @@ export async function pluginInstallationGetRuntimeConfiguration(executor, secret
         packageDirectory: plugins.packageDirectory,
         containerName: pluginInstallations.containerName,
         containerInstanceId: pluginInstallations.containerInstanceId,
+        grantedPermissionsJson: pluginInstallations.grantedPermissionsJson,
         containerImageId: pluginInstallations.containerImageId,
         selectedImageTag: agentImages.dockerTag,
         selectedImageStatus: agentImages.status,
+        selectedImageDeletedAt: agentImages.deletedAt,
     })
         .from(pluginInstallations)
         .innerJoin(plugins, eq(pluginInstallations.pluginId, plugins.id))
@@ -98,7 +101,10 @@ export async function pluginInstallationGetRuntimeConfiguration(executor, secret
         imageTag = `happy2-plugin:${row.packageDigest.replace(/^sha256:/, "")}`;
     }
     else {
-        if (!row.containerImageId || !row.selectedImageTag || row.selectedImageStatus !== "ready")
+        if (!row.containerImageId ||
+            !row.selectedImageTag ||
+            row.selectedImageStatus !== "ready" ||
+            row.selectedImageDeletedAt)
             throw new PluginError("broken_configuration", "Selected plugin container image is missing or not ready");
         imageTag = row.selectedImageTag;
     }
@@ -116,7 +122,7 @@ export async function pluginInstallationGetRuntimeConfiguration(executor, secret
         containerInstanceId: row.containerInstanceId ?? undefined,
         imageTag,
         ...(localContainer.dockerfile ? { bundledDockerfile: localContainer.dockerfile } : {}),
-        permissions: localContainer.permissions,
+        permissions: pluginPermissionsValidate(pluginPermissionsParse(row.grantedPermissionsJson), localContainer.permissions),
     };
 }
 //# sourceMappingURL=pluginInstallationGetRuntimeConfiguration.js.map

package/packages/happy2-server/dist/modules/plugin/pluginInstallationGetRuntimeConfiguration.js.map

@@ -1 +1 @@
-{"version":3,"file":"pluginInstallationGetRuntimeConfiguration.js","sourceRoot":"","sources":["../../../sources/modules/plugin/pluginInstallationGetRuntimeConfiguration.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AAEjC,OAAO,EACH,WAAW,EACX,mBAAmB,EACnB,2BAA2B,EAC3B,OAAO,GACV,MAAM,cAAc,CAAC;AAEtB,OAAO,EAAE,WAAW,EAAmC,MAAM,YAAY,CAAC;AAC1E,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAElE;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,yCAAyC,CAC3D,QAAyB,EACzB,eAAsC,EACtC,cAAsB;IAEtB,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,QAAQ;SACvB,MAAM,CAAC;QACJ,EAAE,EAAE,mBAAmB,CAAC,EAAE;QAC1B,QAAQ,EAAE,OAAO,CAAC,EAAE;QACpB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;QAC1C,aAAa,EAAE,mBAAmB,CAAC,aAAa;QAChD,mBAAmB,EAAE,mBAAmB,CAAC,mBAAmB;QAC5D,gBAAgB,EAAE,mBAAmB,CAAC,gBAAgB;QACtD,gBAAgB,EAAE,WAAW,CAAC,SAAS;QACvC,mBAAmB,EAAE,WAAW,CAAC,MAAM;KAC1C,CAAC;SACD,IAAI,CAAC,mBAAmB,CAAC;SACzB,SAAS,CAAC,OAAO,EAAE,EAAE,CAAC,mBAAmB,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;SAChE,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,mBAAmB,CAAC,gBAAgB,CAAC,CAAC;SAC/E,KAAK,CAAC,EAAE,CAAC,mBAAmB,CAAC,EAAE,EAAE,cAAc,CAAC,CAAC;SACjD,KAAK,CAAC,CAAC,CAAC,CAAC;IACd,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,WAAW,CAAC,WAAW,EAAE,mCAAmC,CAAC,CAAC;IAClF,MAAM,QAAQ,GAAG,iBAAiB,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IACrD,MAAM,gBAAgB,GAAG;QACrB,cAAc,EAAE,GAAG,CAAC,EAAE;QACtB,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,gBAAgB,EAAE,GAAG,CAAC,gBAAgB;QACtC,aAAa,EAAE,GAAG,CAAC,aAAa;KACnC,CAAC;IACF,IAAI,CAAC,QAAQ,CAAC,SAAS,IAAI,CAAC,QAAQ,CAAC,GAAG;QAAE,OAAO,EAAE,GAAG,gBAAgB,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;IAC9F,MAAM,YAAY,GAAG,MAAM,QAAQ;SAC9B,MAAM,CAAC;QACJ,GAAG,EAAE,2BAA2B,CAAC,GAAG;QACpC,IAAI,EAAE,2BAA2B,CAAC,IAAI;QACtC,SAAS,EAAE,2BAA2B,CAAC,SAAS;QAChD,gBAAgB,EAAE,2BAA2B,CAAC,gBAAgB;KACjE,CAAC;SACD,IAAI,CAAC,2BAA2B,CAAC;SACjC,KAAK,CAAC,EAAE,CAAC,2BAA2B,CAAC,cAAc,EAAE,cAAc,CAAC,CAAC,CAAC;IAC3E,MAAM,WAAW,GAA2B,EAAE,CAAC;IAC/C,KAAK,MAAM,UAAU,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC;QAC1C,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,GAAG,KAAK,UAAU,CAAC,GAAG,CAAC,CAAC;QACxE,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,IAAI,KAAK,UAAU,CAAC,IAAI;YAC9C,MAAM,IAAI,WAAW,CACjB,sBAAsB,EACtB,mBAAmB,UAAU,CAAC,GAAG,mCAAmC,CACvE,CAAC;QACN,IAAI,UAAU,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC/B,IAAI,CAAC,QAAQ,CAAC,gBAAgB;gBAC1B,MAAM,IAAI,WAAW,CACjB,sBAAsB,EACtB,iBAAiB,UAAU,CAAC,GAAG,aAAa,CAC/C,CAAC;YACN,IAAI,CAAC;gBACD,WAAW,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,MAAM,eAAe,CAAC,MAAM,CACtD,QAAQ,CAAC,gBAAgB,EACzB,EAAE,cAAc,EAAE,GAAG,EAAE,UAAU,CAAC,GAAG,EAAE,CAC1C,CAAC;YACN,CAAC;YAAC,MAAM,CAAC;gBACL,MAAM,IAAI,WAAW,CACjB,sBAAsB,EACtB,iBAAiB,UAAU,CAAC,GAAG,sBAAsB,CACxD,CAAC;YACN,CAAC;QACL,CAAC;aAAM,CAAC;YACJ,IAAI,CAAC,QAAQ,CAAC,SAAS;gBACnB,MAAM,IAAI,WAAW,CACjB,sBAAsB,EACtB,mBAAmB,UAAU,CAAC,GAAG,aAAa,CACjD,CAAC;YACN,WAAW,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC,SAAS,CAAC;QACrD,CAAC;IACL,CAAC;IACD,IAAI,QAAQ,CAAC,GAAG,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;QAClC,MAAM,OAAO,GAAG,MAAM,CAAC,WAAW,CAC9B,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC;YAC1D,GAAG;YACH,QAAQ,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC,MAAM,EAAE,QAAgB,EAAE,EAAE;gBAC5D,MAAM,KAAK,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;gBACpC,IAAI,KAAK,KAAK,SAAS;oBACnB,MAAM,IAAI,WAAW,CACjB,sBAAsB,EACtB,iDAAiD,QAAQ,EAAE,CAC9D,CAAC;gBACN,OAAO,KAAK,CAAC;YACjB,CAAC,CAAC;SACL,CAAC,CACL,CAAC;QACF,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC3D,MAAM,IAAI,WAAW,CACjB,sBAAsB,EACtB,sDAAsD,CACzD,CAAC;QACN,OAAO;YACH,GAAG,gBAAgB;YACnB,IAAI,EAAE,QAAQ;YACd,GAAG,EAAE,QAAQ,CAAC,GAAG,CAAC,GAAG;YACrB,OAAO;SACV,CAAC;IACN,CAAC;IACD,MAAM,cAAc,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IACpD,IAAI,CAAC,cAAc;QACf,MAAM,IAAI,WAAW,CAAC,sBAAsB,EAAE,wCAAwC,CAAC,CAAC;IAC5F,IAAI,CAAC,GAAG,CAAC,aAAa;QAClB,MAAM,IAAI,WAAW,CAAC,sBAAsB,EAAE,kCAAkC,CAAC,CAAC;IACtF,IAAI,QAAgB,CAAC;IACrB,IAAI,cAAc,CAAC,UAAU,EAAE,CAAC;QAC5B,QAAQ,GAAG,iBAAiB,GAAG,CAAC,aAAa,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,EAAE,CAAC;IAC5E,CAAC;SAAM,CAAC;QACJ,IAAI,CAAC,GAAG,CAAC,gBAAgB,IAAI,CAAC,GAAG,CAAC,gBAAgB,IAAI,GAAG,CAAC,mBAAmB,KAAK,OAAO;YACrF,MAAM,IAAI,WAAW,CACjB,sBAAsB,EACtB,yDAAyD,CAC5D,CAAC;QACN,QAAQ,GAAG,GAAG,CAAC,gBAAgB,CAAC;IACpC,CAAC;IACD,OAAO;QACH,GAAG,gBAAgB;QACnB,IAAI,EAAE,OAAO;QACb,GAAG,CAAC,cAAc,CAAC,OAAO;YACtB,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,cAAc,CAAC,OAAO,EAAE,IAAI,EAAE,cAAc,CAAC,IAAI,EAAE,EAAE;YAC7E,CAAC,CAAC,EAAE,CAAC;QACT,GAAG,CAAC,QAAQ,CAAC,GAAG,EAAE,IAAI,KAAK,OAAO;YAC9B,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE;YACrE,CAAC,CAAC,EAAE,CAAC;QACT,WAAW;QACX,aAAa,EAAE,GAAG,CAAC,aAAa;QAChC,mBAAmB,EAAE,GAAG,CAAC,mBAAmB,IAAI,SAAS;QACzD,QAAQ;QACR,GAAG,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,cAAc,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtF,WAAW,EAAE,cAAc,CAAC,WAAW;KAC1C,CAAC;AACN,CAAC"}
+{"version":3,"file":"pluginInstallationGetRuntimeConfiguration.js","sourceRoot":"","sources":["../../../sources/modules/plugin/pluginInstallationGetRuntimeConfiguration.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AAEjC,OAAO,EACH,WAAW,EACX,mBAAmB,EACnB,2BAA2B,EAC3B,OAAO,GACV,MAAM,cAAc,CAAC;AAEtB,OAAO,EAAE,WAAW,EAAmC,MAAM,YAAY,CAAC;AAC1E,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAClE,OAAO,EAAE,sBAAsB,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AAE7F;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,yCAAyC,CAC3D,QAAyB,EACzB,eAAsC,EACtC,cAAsB;IAEtB,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,QAAQ;SACvB,MAAM,CAAC;QACJ,EAAE,EAAE,mBAAmB,CAAC,EAAE;QAC1B,QAAQ,EAAE,OAAO,CAAC,EAAE;QACpB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;QAC1C,aAAa,EAAE,mBAAmB,CAAC,aAAa;QAChD,mBAAmB,EAAE,mBAAmB,CAAC,mBAAmB;QAC5D,sBAAsB,EAAE,mBAAmB,CAAC,sBAAsB;QAClE,gBAAgB,EAAE,mBAAmB,CAAC,gBAAgB;QACtD,gBAAgB,EAAE,WAAW,CAAC,SAAS;QACvC,mBAAmB,EAAE,WAAW,CAAC,MAAM;QACvC,sBAAsB,EAAE,WAAW,CAAC,SAAS;KAChD,CAAC;SACD,IAAI,CAAC,mBAAmB,CAAC;SACzB,SAAS,CAAC,OAAO,EAAE,EAAE,CAAC,mBAAmB,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;SAChE,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,mBAAmB,CAAC,gBAAgB,CAAC,CAAC;SAC/E,KAAK,CAAC,EAAE,CAAC,mBAAmB,CAAC,EAAE,EAAE,cAAc,CAAC,CAAC;SACjD,KAAK,CAAC,CAAC,CAAC,CAAC;IACd,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,WAAW,CAAC,WAAW,EAAE,mCAAmC,CAAC,CAAC;IAClF,MAAM,QAAQ,GAAG,iBAAiB,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IACrD,MAAM,gBAAgB,GAAG;QACrB,cAAc,EAAE,GAAG,CAAC,EAAE;QACtB,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,gBAAgB,EAAE,GAAG,CAAC,gBAAgB;QACtC,aAAa,EAAE,GAAG,CAAC,aAAa;KACnC,CAAC;IACF,IAAI,CAAC,QAAQ,CAAC,SAAS,IAAI,CAAC,QAAQ,CAAC,GAAG;QAAE,OAAO,EAAE,GAAG,gBAAgB,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;IAC9F,MAAM,YAAY,GAAG,MAAM,QAAQ;SAC9B,MAAM,CAAC;QACJ,GAAG,EAAE,2BAA2B,CAAC,GAAG;QACpC,IAAI,EAAE,2BAA2B,CAAC,IAAI;QACtC,SAAS,EAAE,2BAA2B,CAAC,SAAS;QAChD,gBAAgB,EAAE,2BAA2B,CAAC,gBAAgB;KACjE,CAAC;SACD,IAAI,CAAC,2BAA2B,CAAC;SACjC,KAAK,CAAC,EAAE,CAAC,2BAA2B,CAAC,cAAc,EAAE,cAAc,CAAC,CAAC,CAAC;IAC3E,MAAM,WAAW,GAA2B,EAAE,CAAC;IAC/C,KAAK,MAAM,UAAU,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC;QAC1C,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,GAAG,KAAK,UAAU,CAAC,GAAG,CAAC,CAAC;QACxE,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,IAAI,KAAK,UAAU,CAAC,IAAI;YAC9C,MAAM,IAAI,WAAW,CACjB,sBAAsB,EACtB,mBAAmB,UAAU,CAAC,GAAG,mCAAmC,CACvE,CAAC;QACN,IAAI,UAAU,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC/B,IAAI,CAAC,QAAQ,CAAC,gBAAgB;gBAC1B,MAAM,IAAI,WAAW,CACjB,sBAAsB,EACtB,iBAAiB,UAAU,CAAC,GAAG,aAAa,CAC/C,CAAC;YACN,IAAI,CAAC;gBACD,WAAW,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,MAAM,eAAe,CAAC,MAAM,CACtD,QAAQ,CAAC,gBAAgB,EACzB,EAAE,cAAc,EAAE,GAAG,EAAE,UAAU,CAAC,GAAG,EAAE,CAC1C,CAAC;YACN,CAAC;YAAC,MAAM,CAAC;gBACL,MAAM,IAAI,WAAW,CACjB,sBAAsB,EACtB,iBAAiB,UAAU,CAAC,GAAG,sBAAsB,CACxD,CAAC;YACN,CAAC;QACL,CAAC;aAAM,CAAC;YACJ,IAAI,CAAC,QAAQ,CAAC,SAAS;gBACnB,MAAM,IAAI,WAAW,CACjB,sBAAsB,EACtB,mBAAmB,UAAU,CAAC,GAAG,aAAa,CACjD,CAAC;YACN,WAAW,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC,SAAS,CAAC;QACrD,CAAC;IACL,CAAC;IACD,IAAI,QAAQ,CAAC,GAAG,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;QAClC,MAAM,OAAO,GAAG,MAAM,CAAC,WAAW,CAC9B,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC;YAC1D,GAAG;YACH,QAAQ,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC,MAAM,EAAE,QAAgB,EAAE,EAAE;gBAC5D,MAAM,KAAK,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;gBACpC,IAAI,KAAK,KAAK,SAAS;oBACnB,MAAM,IAAI,WAAW,CACjB,sBAAsB,EACtB,iDAAiD,QAAQ,EAAE,CAC9D,CAAC;gBACN,OAAO,KAAK,CAAC;YACjB,CAAC,CAAC;SACL,CAAC,CACL,CAAC;QACF,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC3D,MAAM,IAAI,WAAW,CACjB,sBAAsB,EACtB,sDAAsD,CACzD,CAAC;QACN,OAAO;YACH,GAAG,gBAAgB;YACnB,IAAI,EAAE,QAAQ;YACd,GAAG,EAAE,QAAQ,CAAC,GAAG,CAAC,GAAG;YACrB,OAAO;SACV,CAAC;IACN,CAAC;IACD,MAAM,cAAc,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IACpD,IAAI,CAAC,cAAc;QACf,MAAM,IAAI,WAAW,CAAC,sBAAsB,EAAE,wCAAwC,CAAC,CAAC;IAC5F,IAAI,CAAC,GAAG,CAAC,aAAa;QAClB,MAAM,IAAI,WAAW,CAAC,sBAAsB,EAAE,kCAAkC,CAAC,CAAC;IACtF,IAAI,QAAgB,CAAC;IACrB,IAAI,cAAc,CAAC,UAAU,EAAE,CAAC;QAC5B,QAAQ,GAAG,iBAAiB,GAAG,CAAC,aAAa,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,EAAE,CAAC;IAC5E,CAAC;SAAM,CAAC;QACJ,IACI,CAAC,GAAG,CAAC,gBAAgB;YACrB,CAAC,GAAG,CAAC,gBAAgB;YACrB,GAAG,CAAC,mBAAmB,KAAK,OAAO;YACnC,GAAG,CAAC,sBAAsB;YAE1B,MAAM,IAAI,WAAW,CACjB,sBAAsB,EACtB,yDAAyD,CAC5D,CAAC;QACN,QAAQ,GAAG,GAAG,CAAC,gBAAgB,CAAC;IACpC,CAAC;IACD,OAAO;QACH,GAAG,gBAAgB;QACnB,IAAI,EAAE,OAAO;QACb,GAAG,CAAC,cAAc,CAAC,OAAO;YACtB,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,cAAc,CAAC,OAAO,EAAE,IAAI,EAAE,cAAc,CAAC,IAAI,EAAE,EAAE;YAC7E,CAAC,CAAC,EAAE,CAAC;QACT,GAAG,CAAC,QAAQ,CAAC,GAAG,EAAE,IAAI,KAAK,OAAO;YAC9B,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE;YACrE,CAAC,CAAC,EAAE,CAAC;QACT,WAAW;QACX,aAAa,EAAE,GAAG,CAAC,aAAa;QAChC,mBAAmB,EAAE,GAAG,CAAC,mBAAmB,IAAI,SAAS;QACzD,QAAQ;QACR,GAAG,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,cAAc,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtF,WAAW,EAAE,yBAAyB,CAClC,sBAAsB,CAAC,GAAG,CAAC,sBAAsB,CAAC,EAClD,cAAc,CAAC,WAAW,CAC7B;KACJ,CAAC;AACN,CAAC"}

package/packages/happy2-server/dist/modules/plugin/pluginInstallationGetUninstallContext.d.ts

@@ -0,0 +1,6 @@
+import type { DrizzleExecutor } from "../drizzle.js";
+/** Authorizes an administrator and returns the process-local resources for one installation without mutating durable state. This boundary lets orchestration stop the exact runtime before the later pluginInstallations deletion. */
+export declare function pluginInstallationGetUninstallContext(executor: DrizzleExecutor, actorUserId: string, installationId: string): Promise<{
+    containerName?: string;
+}>;
+//# sourceMappingURL=pluginInstallationGetUninstallContext.d.ts.map

package/packages/happy2-server/dist/modules/plugin/pluginInstallationGetUninstallContext.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pluginInstallationGetUninstallContext.d.ts","sourceRoot":"","sources":["../../../sources/modules/plugin/pluginInstallationGetUninstallContext.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAKrD,sOAAsO;AACtO,wBAAsB,qCAAqC,CACvD,QAAQ,EAAE,eAAe,EACzB,WAAW,EAAE,MAAM,EACnB,cAAc,EAAE,MAAM,GACvB,OAAO,CAAC;IAAE,aAAa,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CASrC"}

package/packages/happy2-server/dist/modules/plugin/pluginInstallationGetUninstallContext.js

@@ -0,0 +1,17 @@
+import { eq } from "drizzle-orm";
+import { pluginInstallations } from "../schema.js";
+import { userRequireServerAdmin } from "../chat/userRequireServerAdmin.js";
+import { PluginError } from "./types.js";
+/** Authorizes an administrator and returns the process-local resources for one installation without mutating durable state. This boundary lets orchestration stop the exact runtime before the later pluginInstallations deletion. */
+export async function pluginInstallationGetUninstallContext(executor, actorUserId, installationId) {
+    await userRequireServerAdmin(executor, actorUserId);
+    const [row] = await executor
+        .select({ containerName: pluginInstallations.containerName })
+        .from(pluginInstallations)
+        .where(eq(pluginInstallations.id, installationId))
+        .limit(1);
+    if (!row)
+        throw new PluginError("not_found", "Plugin installation was not found");
+    return row.containerName ? { containerName: row.containerName } : {};
+}
+//# sourceMappingURL=pluginInstallationGetUninstallContext.js.map

package/packages/happy2-server/dist/modules/plugin/pluginInstallationGetUninstallContext.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pluginInstallationGetUninstallContext.js","sourceRoot":"","sources":["../../../sources/modules/plugin/pluginInstallationGetUninstallContext.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AAEjC,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,sBAAsB,EAAE,MAAM,mCAAmC,CAAC;AAC3E,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAEzC,sOAAsO;AACtO,MAAM,CAAC,KAAK,UAAU,qCAAqC,CACvD,QAAyB,EACzB,WAAmB,EACnB,cAAsB;IAEtB,MAAM,sBAAsB,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IACpD,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,QAAQ;SACvB,MAAM,CAAC,EAAE,aAAa,EAAE,mBAAmB,CAAC,aAAa,EAAE,CAAC;SAC5D,IAAI,CAAC,mBAAmB,CAAC;SACzB,KAAK,CAAC,EAAE,CAAC,mBAAmB,CAAC,EAAE,EAAE,cAAc,CAAC,CAAC;SACjD,KAAK,CAAC,CAAC,CAAC,CAAC;IACd,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,WAAW,CAAC,WAAW,EAAE,mCAAmC,CAAC,CAAC;IAClF,OAAO,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AACzE,CAAC"}

package/packages/happy2-server/dist/modules/plugin/pluginInstallationPermissionsUpdate.d.ts

@@ -0,0 +1,18 @@
+import type { DrizzleExecutor } from "../drizzle.js";
+import type { MutationHint } from "../chat/types.js";
+import type { PluginHostPermission, PluginInstallationSummary } from "./types.js";
+/**
+ * Replaces one pluginInstallations row's user-approved API grants while enforcing its immutable manifest declarations.
+ * A changed grant set invalidates the current container incarnation and queues runtime reactivation in the same audited sync transaction so old tokens stop authorizing immediately.
+ */
+export declare function pluginInstallationPermissionsUpdate(executor: DrizzleExecutor, input: {
+    actorUserId: string;
+    installationId: string;
+    permissions: readonly PluginHostPermission[];
+}): Promise<{
+    changed: boolean;
+    containerName?: string;
+    hint?: MutationHint;
+    installation: PluginInstallationSummary;
+}>;
+//# sourceMappingURL=pluginInstallationPermissionsUpdate.d.ts.map

package/packages/happy2-server/dist/modules/plugin/pluginInstallationPermissionsUpdate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pluginInstallationPermissionsUpdate.d.ts","sourceRoot":"","sources":["../../../sources/modules/plugin/pluginInstallationPermissionsUpdate.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAIrD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAKrD,OAAO,KAAK,EAAE,oBAAoB,EAAE,yBAAyB,EAAE,MAAM,YAAY,CAAC;AAQlF;;;GAGG;AACH,wBAAsB,mCAAmC,CACrD,QAAQ,EAAE,eAAe,EACzB,KAAK,EAAE;IACH,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,SAAS,oBAAoB,EAAE,CAAC;CAChD,GACF,OAAO,CAAC;IACP,OAAO,EAAE,OAAO,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,IAAI,CAAC,EAAE,YAAY,CAAC;IACpB,YAAY,EAAE,yBAAyB,CAAC;CAC3C,CAAC,CAoED"}

package/packages/happy2-server/dist/modules/plugin/pluginInstallationPermissionsUpdate.js

@@ -0,0 +1,92 @@
+import { eq, sql } from "drizzle-orm";
+import { withTransaction } from "../drizzle.js";
+import { chatAppendAudit } from "../chat/chatAppendAudit.js";
+import { areaHint } from "../chat/areaHint.js";
+import { userRequirePermission } from "../permission/userRequirePermission.js";
+import { pluginInstallations, plugins } from "../schema.js";
+import { syncEventInsert } from "../sync/syncEventInsert.js";
+import { syncSequenceNext } from "../sync/syncSequenceNext.js";
+import { PluginError } from "./types.js";
+import { asPluginInstallation } from "./impl/asInstallation.js";
+import { effectiveContainer } from "./impl/effectiveContainer.js";
+import { installedManifest } from "./impl/installedManifest.js";
+import { pluginInstallationSelection } from "./impl/installationSelection.js";
+import { pluginPermissionsParse, pluginPermissionsValidate } from "./impl/apiPermissions.js";
+/**
+ * Replaces one pluginInstallations row's user-approved API grants while enforcing its immutable manifest declarations.
+ * A changed grant set invalidates the current container incarnation and queues runtime reactivation in the same audited sync transaction so old tokens stop authorizing immediately.
+ */
+export async function pluginInstallationPermissionsUpdate(executor, input) {
+    return withTransaction(executor, async (tx) => {
+        await userRequirePermission(tx, input.actorUserId, "managePlugins");
+        const [current] = await tx
+            .select({
+            ...pluginInstallationSelection,
+            manifestJson: plugins.manifestJson,
+            containerName: pluginInstallations.containerName,
+        })
+            .from(pluginInstallations)
+            .innerJoin(plugins, eq(pluginInstallations.pluginId, plugins.id))
+            .where(eq(pluginInstallations.id, input.installationId))
+            .limit(1);
+        if (!current)
+            throw new PluginError("not_found", "Plugin installation was not found");
+        const manifest = installedManifest(current.manifestJson);
+        const declared = effectiveContainer(manifest)?.permissions ?? [];
+        const granted = pluginPermissionsValidate(input.permissions, declared);
+        const before = pluginPermissionsParse(current.grantedPermissionsJson);
+        if (samePermissions(before, granted))
+            return {
+                changed: false,
+                ...(current.containerName ? { containerName: current.containerName } : {}),
+                installation: asPluginInstallation(current),
+            };
+        const sequence = await syncSequenceNext(tx);
+        await tx
+            .update(pluginInstallations)
+            .set({
+            grantedPermissionsJson: JSON.stringify(granted),
+            status: current.containerName ? "preparing" : current.status,
+            statusDetail: current.containerName
+                ? "Plugin runtime is queued to apply changed API permissions."
+                : current.statusDetail,
+            containerInstanceId: null,
+            syncSequence: sequence,
+            updatedAt: sql `CURRENT_TIMESTAMP`,
+            readyAt: current.containerName ? null : current.readyAt,
+        })
+            .where(eq(pluginInstallations.id, input.installationId));
+        await chatAppendAudit(tx, {
+            actorUserId: input.actorUserId,
+            action: "plugin.permissions_updated",
+            targetType: "plugin_installation",
+            targetId: input.installationId,
+            before: { grantedPermissions: before },
+            after: { grantedPermissions: granted },
+        });
+        await syncEventInsert(tx, {
+            sequence,
+            kind: "plugin.permissions_updated",
+            entityId: input.installationId,
+            actorUserId: input.actorUserId,
+        });
+        const [updated] = await tx
+            .select(pluginInstallationSelection)
+            .from(pluginInstallations)
+            .innerJoin(plugins, eq(pluginInstallations.pluginId, plugins.id))
+            .where(eq(pluginInstallations.id, input.installationId))
+            .limit(1);
+        if (!updated)
+            throw new Error("Plugin installation disappeared after permission update");
+        return {
+            changed: true,
+            ...(current.containerName ? { containerName: current.containerName } : {}),
+            hint: areaHint(sequence, "plugins"),
+            installation: asPluginInstallation(updated),
+        };
+    });
+}
+function samePermissions(left, right) {
+    return left.length === right.length && left.every((permission) => right.includes(permission));
+}
+//# sourceMappingURL=pluginInstallationPermissionsUpdate.js.map

package/packages/happy2-server/dist/modules/plugin/pluginInstallationPermissionsUpdate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pluginInstallationPermissionsUpdate.js","sourceRoot":"","sources":["../../../sources/modules/plugin/pluginInstallationPermissionsUpdate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAEtC,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAE/C,OAAO,EAAE,qBAAqB,EAAE,MAAM,wCAAwC,CAAC;AAC/E,OAAO,EAAE,mBAAmB,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAE/D,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAClE,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,EAAE,2BAA2B,EAAE,MAAM,iCAAiC,CAAC;AAC9E,OAAO,EAAE,sBAAsB,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AAE7F;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,mCAAmC,CACrD,QAAyB,EACzB,KAIC;IAOD,OAAO,eAAe,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;QAC1C,MAAM,qBAAqB,CAAC,EAAE,EAAE,KAAK,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC;QACpE,MAAM,CAAC,OAAO,CAAC,GAAG,MAAM,EAAE;aACrB,MAAM,CAAC;YACJ,GAAG,2BAA2B;YAC9B,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,aAAa,EAAE,mBAAmB,CAAC,aAAa;SACnD,CAAC;aACD,IAAI,CAAC,mBAAmB,CAAC;aACzB,SAAS,CAAC,OAAO,EAAE,EAAE,CAAC,mBAAmB,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;aAChE,KAAK,CAAC,EAAE,CAAC,mBAAmB,CAAC,EAAE,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;aACvD,KAAK,CAAC,CAAC,CAAC,CAAC;QACd,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,WAAW,CAAC,WAAW,EAAE,mCAAmC,CAAC,CAAC;QACtF,MAAM,QAAQ,GAAG,iBAAiB,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QACzD,MAAM,QAAQ,GAAG,kBAAkB,CAAC,QAAQ,CAAC,EAAE,WAAW,IAAI,EAAE,CAAC;QACjE,MAAM,OAAO,GAAG,yBAAyB,CAAC,KAAK,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QACvE,MAAM,MAAM,GAAG,sBAAsB,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;QACtE,IAAI,eAAe,CAAC,MAAM,EAAE,OAAO,CAAC;YAChC,OAAO;gBACH,OAAO,EAAE,KAAK;gBACd,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1E,YAAY,EAAE,oBAAoB,CAAC,OAAO,CAAC;aAC9C,CAAC;QAEN,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,EAAE,CAAC,CAAC;QAC5C,MAAM,EAAE;aACH,MAAM,CAAC,mBAAmB,CAAC;aAC3B,GAAG,CAAC;YACD,sBAAsB,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;YAC/C,MAAM,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM;YAC5D,YAAY,EAAE,OAAO,CAAC,aAAa;gBAC/B,CAAC,CAAC,4DAA4D;gBAC9D,CAAC,CAAC,OAAO,CAAC,YAAY;YAC1B,mBAAmB,EAAE,IAAI;YACzB,YAAY,EAAE,QAAQ;YACtB,SAAS,EAAE,GAAG,CAAA,mBAAmB;YACjC,OAAO,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO;SAC1D,CAAC;aACD,KAAK,CAAC,EAAE,CAAC,mBAAmB,CAAC,EAAE,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC;QAC7D,MAAM,eAAe,CAAC,EAAE,EAAE;YACtB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,MAAM,EAAE,4BAA4B;YACpC,UAAU,EAAE,qBAAqB;YACjC,QAAQ,EAAE,KAAK,CAAC,cAAc;YAC9B,MAAM,EAAE,EAAE,kBAAkB,EAAE,MAAM,EAAE;YACtC,KAAK,EAAE,EAAE,kBAAkB,EAAE,OAAO,EAAE;SACzC,CAAC,CAAC;QACH,MAAM,eAAe,CAAC,EAAE,EAAE;YACtB,QAAQ;YACR,IAAI,EAAE,4BAA4B;YAClC,QAAQ,EAAE,KAAK,CAAC,cAAc;YAC9B,WAAW,EAAE,KAAK,CAAC,WAAW;SACjC,CAAC,CAAC;QACH,MAAM,CAAC,OAAO,CAAC,GAAG,MAAM,EAAE;aACrB,MAAM,CAAC,2BAA2B,CAAC;aACnC,IAAI,CAAC,mBAAmB,CAAC;aACzB,SAAS,CAAC,OAAO,EAAE,EAAE,CAAC,mBAAmB,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;aAChE,KAAK,CAAC,EAAE,CAAC,mBAAmB,CAAC,EAAE,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;aACvD,KAAK,CAAC,CAAC,CAAC,CAAC;QACd,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;QACzF,OAAO;YACH,OAAO,EAAE,IAAI;YACb,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1E,IAAI,EAAE,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAC;YACnC,YAAY,EAAE,oBAAoB,CAAC,OAAO,CAAC;SAC9C,CAAC;IACN,CAAC,CAAC,CAAC;AACP,CAAC;AAED,SAAS,eAAe,CACpB,IAAqC,EACrC,KAAsC;IAEtC,OAAO,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC;AAClG,CAAC"}

package/packages/happy2-server/dist/modules/plugin/pluginInstallationUninstall.d.ts

@@ -0,0 +1,16 @@
+import type { DrizzleExecutor } from "../drizzle.js";
+import type { MutationHint } from "../chat/types.js";
+/**
+ * Deletes one authorized plugin installation and its cascade-owned state, removing the plugin row when no installation remains.
+ * The transaction records actor provenance and a plugins sync event after PluginService has stopped process/container resources.
+ */
+export declare function pluginInstallationUninstall(executor: DrizzleExecutor, input: {
+    installationId: string;
+    actorUserId?: string;
+    actorInstallationId?: string;
+}): Promise<{
+    hint: MutationHint;
+    pluginId: string;
+    pluginRemoved: boolean;
+}>;
+//# sourceMappingURL=pluginInstallationUninstall.d.ts.map

package/packages/happy2-server/dist/modules/plugin/pluginInstallationUninstall.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pluginInstallationUninstall.d.ts","sourceRoot":"","sources":["../../../sources/modules/plugin/pluginInstallationUninstall.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAIrD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAOrD;;;GAGG;AACH,wBAAsB,2BAA2B,CAC7C,QAAQ,EAAE,eAAe,EACzB,KAAK,EAAE;IACH,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAChC,GACF,OAAO,CAAC;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,OAAO,CAAA;CAAE,CAAC,CAqD3E"}

package/packages/happy2-server/dist/modules/plugin/pluginInstallationUninstall.js

@@ -0,0 +1,71 @@
+import { eq } from "drizzle-orm";
+import { withTransaction } from "../drizzle.js";
+import { chatAppendAudit } from "../chat/chatAppendAudit.js";
+import { areaHint } from "../chat/areaHint.js";
+import { userRequirePermission } from "../permission/userRequirePermission.js";
+import { pluginInstallations, plugins } from "../schema.js";
+import { syncEventInsert } from "../sync/syncEventInsert.js";
+import { syncSequenceNext } from "../sync/syncSequenceNext.js";
+import { PluginError } from "./types.js";
+/**
+ * Deletes one authorized plugin installation and its cascade-owned state, removing the plugin row when no installation remains.
+ * The transaction records actor provenance and a plugins sync event after PluginService has stopped process/container resources.
+ */
+export async function pluginInstallationUninstall(executor, input) {
+    return withTransaction(executor, async (tx) => {
+        if (input.actorUserId)
+            await userRequirePermission(tx, input.actorUserId, "managePlugins");
+        else if (!input.actorInstallationId)
+            throw new PluginError("forbidden", "Plugin installation authority is required");
+        const [installation] = await tx
+            .select({
+            id: pluginInstallations.id,
+            pluginId: pluginInstallations.pluginId,
+            shortName: plugins.shortName,
+            sourceVersion: plugins.sourceVersion,
+        })
+            .from(pluginInstallations)
+            .innerJoin(plugins, eq(pluginInstallations.pluginId, plugins.id))
+            .where(eq(pluginInstallations.id, input.installationId))
+            .limit(1);
+        if (!installation)
+            throw new PluginError("not_found", "Plugin installation was not found");
+        await tx
+            .delete(pluginInstallations)
+            .where(eq(pluginInstallations.id, input.installationId));
+        const [remaining] = await tx
+            .select({ id: pluginInstallations.id })
+            .from(pluginInstallations)
+            .where(eq(pluginInstallations.pluginId, installation.pluginId))
+            .limit(1);
+        const pluginRemoved = !remaining;
+        if (pluginRemoved)
+            await tx.delete(plugins).where(eq(plugins.id, installation.pluginId));
+        await chatAppendAudit(tx, {
+            actorUserId: input.actorUserId,
+            action: "plugin.uninstalled",
+            targetType: "plugin_installation",
+            targetId: input.installationId,
+            before: {
+                pluginId: installation.pluginId,
+                shortName: installation.shortName,
+                actorInstallationId: input.actorInstallationId,
+                version: installation.sourceVersion,
+            },
+            after: { pluginRemoved },
+        });
+        const sequence = await syncSequenceNext(tx);
+        await syncEventInsert(tx, {
+            sequence,
+            kind: "plugin.uninstalled",
+            entityId: input.installationId,
+            actorUserId: input.actorUserId,
+        });
+        return {
+            hint: areaHint(sequence, "plugins"),
+            pluginId: installation.pluginId,
+            pluginRemoved,
+        };
+    });
+}
+//# sourceMappingURL=pluginInstallationUninstall.js.map

package/packages/happy2-server/dist/modules/plugin/pluginInstallationUninstall.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pluginInstallationUninstall.js","sourceRoot":"","sources":["../../../sources/modules/plugin/pluginInstallationUninstall.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AAEjC,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAE/C,OAAO,EAAE,qBAAqB,EAAE,MAAM,wCAAwC,CAAC;AAC/E,OAAO,EAAE,mBAAmB,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAEzC;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC7C,QAAyB,EACzB,KAIC;IAED,OAAO,eAAe,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;QAC1C,IAAI,KAAK,CAAC,WAAW;YAAE,MAAM,qBAAqB,CAAC,EAAE,EAAE,KAAK,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC;aACtF,IAAI,CAAC,KAAK,CAAC,mBAAmB;YAC/B,MAAM,IAAI,WAAW,CAAC,WAAW,EAAE,2CAA2C,CAAC,CAAC;QACpF,MAAM,CAAC,YAAY,CAAC,GAAG,MAAM,EAAE;aAC1B,MAAM,CAAC;YACJ,EAAE,EAAE,mBAAmB,CAAC,EAAE;YAC1B,QAAQ,EAAE,mBAAmB,CAAC,QAAQ;YACtC,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,aAAa,EAAE,OAAO,CAAC,aAAa;SACvC,CAAC;aACD,IAAI,CAAC,mBAAmB,CAAC;aACzB,SAAS,CAAC,OAAO,EAAE,EAAE,CAAC,mBAAmB,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;aAChE,KAAK,CAAC,EAAE,CAAC,mBAAmB,CAAC,EAAE,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;aACvD,KAAK,CAAC,CAAC,CAAC,CAAC;QACd,IAAI,CAAC,YAAY;YAAE,MAAM,IAAI,WAAW,CAAC,WAAW,EAAE,mCAAmC,CAAC,CAAC;QAC3F,MAAM,EAAE;aACH,MAAM,CAAC,mBAAmB,CAAC;aAC3B,KAAK,CAAC,EAAE,CAAC,mBAAmB,CAAC,EAAE,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC;QAC7D,MAAM,CAAC,SAAS,CAAC,GAAG,MAAM,EAAE;aACvB,MAAM,CAAC,EAAE,EAAE,EAAE,mBAAmB,CAAC,EAAE,EAAE,CAAC;aACtC,IAAI,CAAC,mBAAmB,CAAC;aACzB,KAAK,CAAC,EAAE,CAAC,mBAAmB,CAAC,QAAQ,EAAE,YAAY,CAAC,QAAQ,CAAC,CAAC;aAC9D,KAAK,CAAC,CAAC,CAAC,CAAC;QACd,MAAM,aAAa,GAAG,CAAC,SAAS,CAAC;QACjC,IAAI,aAAa;YAAE,MAAM,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC;QACzF,MAAM,eAAe,CAAC,EAAE,EAAE;YACtB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,MAAM,EAAE,oBAAoB;YAC5B,UAAU,EAAE,qBAAqB;YACjC,QAAQ,EAAE,KAAK,CAAC,cAAc;YAC9B,MAAM,EAAE;gBACJ,QAAQ,EAAE,YAAY,CAAC,QAAQ;gBAC/B,SAAS,EAAE,YAAY,CAAC,SAAS;gBACjC,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;gBAC9C,OAAO,EAAE,YAAY,CAAC,aAAa;aACtC;YACD,KAAK,EAAE,EAAE,aAAa,EAAE;SAC3B,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,EAAE,CAAC,CAAC;QAC5C,MAAM,eAAe,CAAC,EAAE,EAAE;YACtB,QAAQ;YACR,IAAI,EAAE,oBAAoB;YAC1B,QAAQ,EAAE,KAAK,CAAC,cAAc;YAC9B,WAAW,EAAE,KAAK,CAAC,WAAW;SACjC,CAAC,CAAC;QACH,OAAO;YACH,IAAI,EAAE,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAC;YACnC,QAAQ,EAAE,YAAY,CAAC,QAAQ;YAC/B,aAAa;SAChB,CAAC;IACN,CAAC,CAAC,CAAC;AACP,CAAC"}

package/packages/happy2-server/dist/modules/plugin/pluginManagementRequestBeginInstall.d.ts

@@ -0,0 +1,21 @@
+import type { DrizzleExecutor } from "../drizzle.js";
+import type { MutationHint } from "../chat/types.js";
+import { type PluginSource } from "./types.js";
+export interface PluginManagementRequestInstallWork {
+    id: string;
+    chatId: string;
+    installationId: string;
+    packageDigest: string;
+    packageDirectory: string;
+    source: Extract<PluginSource, {
+        kind: "archive" | "link";
+    }>;
+    hint: MutationHint;
+}
+/** Claims one pending pluginManagementRequests install by changing it to processing for an active chat-member administrator. This durable state boundary serializes approval before filesystem and runtime side effects begin. */
+export declare function pluginManagementRequestBeginInstall(executor: DrizzleExecutor, input: {
+    actorUserId: string;
+    chatId: string;
+    requestId: string;
+}): Promise<PluginManagementRequestInstallWork>;
+//# sourceMappingURL=pluginManagementRequestBeginInstall.d.ts.map

package/packages/happy2-server/dist/modules/plugin/pluginManagementRequestBeginInstall.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pluginManagementRequestBeginInstall.d.ts","sourceRoot":"","sources":["../../../sources/modules/plugin/pluginManagementRequestBeginInstall.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAKrD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAIrD,OAAO,EAAe,KAAK,YAAY,EAAE,MAAM,YAAY,CAAC;AAE5D,MAAM,WAAW,kCAAkC;IAC/C,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,MAAM,CAAC;IACzB,MAAM,EAAE,OAAO,CAAC,YAAY,EAAE;QAAE,IAAI,EAAE,SAAS,GAAG,MAAM,CAAA;KAAE,CAAC,CAAC;IAC5D,IAAI,EAAE,YAAY,CAAC;CACtB;AAED,kOAAkO;AAClO,wBAAsB,mCAAmC,CACrD,QAAQ,EAAE,eAAe,EACzB,KAAK,EAAE;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAClE,OAAO,CAAC,kCAAkC,CAAC,CA6E7C"}

package/packages/happy2-server/dist/modules/plugin/pluginManagementRequestBeginInstall.js

@@ -0,0 +1,71 @@
+import { and, eq, sql } from "drizzle-orm";
+import { withTransaction } from "../drizzle.js";
+import { chatGetAccess } from "../chat/chatGetAccess.js";
+import { chatAdvanceWithSequence } from "../chat/chatAdvanceWithSequence.js";
+import { chatHint } from "../chat/chatHint.js";
+import { userRequireServerAdmin } from "../chat/userRequireServerAdmin.js";
+import { pluginManagementRequests } from "../schema.js";
+import { syncSequenceNext } from "../sync/syncSequenceNext.js";
+import { PluginError } from "./types.js";
+/** Claims one pending pluginManagementRequests install by changing it to processing for an active chat-member administrator. This durable state boundary serializes approval before filesystem and runtime side effects begin. */
+export async function pluginManagementRequestBeginInstall(executor, input) {
+    return withTransaction(executor, async (tx) => {
+        await userRequireServerAdmin(tx, input.actorUserId);
+        if (!(await chatGetAccess(tx, input.actorUserId, input.chatId, true)))
+            throw new PluginError("forbidden", "Chat membership is required");
+        const [row] = await tx
+            .select({
+            id: pluginManagementRequests.id,
+            action: pluginManagementRequests.action,
+            status: pluginManagementRequests.status,
+            chatId: pluginManagementRequests.chatId,
+            sourceKind: pluginManagementRequests.sourceKind,
+            sourceReference: pluginManagementRequests.sourceReference,
+            packageDigest: pluginManagementRequests.packageDigest,
+            packageDirectory: pluginManagementRequests.packageDirectory,
+            installationId: pluginManagementRequests.installationId,
+        })
+            .from(pluginManagementRequests)
+            .where(and(eq(pluginManagementRequests.id, input.requestId), eq(pluginManagementRequests.chatId, input.chatId)))
+            .limit(1);
+        if (!row)
+            throw new PluginError("not_found", "Plugin management request was not found");
+        if (row.action !== "install")
+            throw new PluginError("conflict", "Request is not an install");
+        if (row.status !== "pending")
+            throw new PluginError("conflict", `Plugin request is already ${row.status}`);
+        if ((row.sourceKind !== "archive" && row.sourceKind !== "link") ||
+            !row.sourceReference ||
+            !row.packageDigest ||
+            !row.packageDirectory ||
+            !row.installationId)
+            throw new Error("Plugin install request has incomplete package metadata");
+        const updated = await tx
+            .update(pluginManagementRequests)
+            .set({
+            status: "processing",
+            resolvedByUserId: input.actorUserId,
+            updatedAt: sql `CURRENT_TIMESTAMP`,
+        })
+            .where(and(eq(pluginManagementRequests.id, input.requestId), eq(pluginManagementRequests.status, "pending")))
+            .returning({ id: pluginManagementRequests.id });
+        if (updated.length !== 1)
+            throw new PluginError("conflict", "Plugin request was already resolved");
+        const sequence = await syncSequenceNext(tx);
+        await tx
+            .update(pluginManagementRequests)
+            .set({ syncSequence: sequence })
+            .where(eq(pluginManagementRequests.id, input.requestId));
+        const mutation = await chatAdvanceWithSequence(tx, sequence, input.actorUserId, input.chatId, "plugin.install_processing", input.requestId);
+        return {
+            id: row.id,
+            chatId: row.chatId,
+            installationId: row.installationId,
+            packageDigest: row.packageDigest,
+            packageDirectory: row.packageDirectory,
+            source: { kind: row.sourceKind, reference: row.sourceReference },
+            hint: chatHint(sequence, input.chatId, mutation.pts),
+        };
+    });
+}
+//# sourceMappingURL=pluginManagementRequestBeginInstall.js.map

package/packages/happy2-server/dist/modules/plugin/pluginManagementRequestBeginInstall.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pluginManagementRequestBeginInstall.js","sourceRoot":"","sources":["../../../sources/modules/plugin/pluginManagementRequestBeginInstall.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAE3C,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACzD,OAAO,EAAE,uBAAuB,EAAE,MAAM,oCAAoC,CAAC;AAC7E,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAE/C,OAAO,EAAE,sBAAsB,EAAE,MAAM,mCAAmC,CAAC;AAC3E,OAAO,EAAE,wBAAwB,EAAE,MAAM,cAAc,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,EAAE,WAAW,EAAqB,MAAM,YAAY,CAAC;AAY5D,kOAAkO;AAClO,MAAM,CAAC,KAAK,UAAU,mCAAmC,CACrD,QAAyB,EACzB,KAAiE;IAEjE,OAAO,eAAe,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;QAC1C,MAAM,sBAAsB,CAAC,EAAE,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;QACpD,IAAI,CAAC,CAAC,MAAM,aAAa,CAAC,EAAE,EAAE,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YACjE,MAAM,IAAI,WAAW,CAAC,WAAW,EAAE,6BAA6B,CAAC,CAAC;QACtE,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE;aACjB,MAAM,CAAC;YACJ,EAAE,EAAE,wBAAwB,CAAC,EAAE;YAC/B,MAAM,EAAE,wBAAwB,CAAC,MAAM;YACvC,MAAM,EAAE,wBAAwB,CAAC,MAAM;YACvC,MAAM,EAAE,wBAAwB,CAAC,MAAM;YACvC,UAAU,EAAE,wBAAwB,CAAC,UAAU;YAC/C,eAAe,EAAE,wBAAwB,CAAC,eAAe;YACzD,aAAa,EAAE,wBAAwB,CAAC,aAAa;YACrD,gBAAgB,EAAE,wBAAwB,CAAC,gBAAgB;YAC3D,cAAc,EAAE,wBAAwB,CAAC,cAAc;SAC1D,CAAC;aACD,IAAI,CAAC,wBAAwB,CAAC;aAC9B,KAAK,CACF,GAAG,CACC,EAAE,CAAC,wBAAwB,CAAC,EAAE,EAAE,KAAK,CAAC,SAAS,CAAC,EAChD,EAAE,CAAC,wBAAwB,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CACpD,CACJ;aACA,KAAK,CAAC,CAAC,CAAC,CAAC;QACd,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,WAAW,CAAC,WAAW,EAAE,yCAAyC,CAAC,CAAC;QACxF,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS;YACxB,MAAM,IAAI,WAAW,CAAC,UAAU,EAAE,2BAA2B,CAAC,CAAC;QACnE,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS;YACxB,MAAM,IAAI,WAAW,CAAC,UAAU,EAAE,6BAA6B,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;QACjF,IACI,CAAC,GAAG,CAAC,UAAU,KAAK,SAAS,IAAI,GAAG,CAAC,UAAU,KAAK,MAAM,CAAC;YAC3D,CAAC,GAAG,CAAC,eAAe;YACpB,CAAC,GAAG,CAAC,aAAa;YAClB,CAAC,GAAG,CAAC,gBAAgB;YACrB,CAAC,GAAG,CAAC,cAAc;YAEnB,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;QAC9E,MAAM,OAAO,GAAG,MAAM,EAAE;aACnB,MAAM,CAAC,wBAAwB,CAAC;aAChC,GAAG,CAAC;YACD,MAAM,EAAE,YAAY;YACpB,gBAAgB,EAAE,KAAK,CAAC,WAAW;YACnC,SAAS,EAAE,GAAG,CAAA,mBAAmB;SACpC,CAAC;aACD,KAAK,CACF,GAAG,CACC,EAAE,CAAC,wBAAwB,CAAC,EAAE,EAAE,KAAK,CAAC,SAAS,CAAC,EAChD,EAAE,CAAC,wBAAwB,CAAC,MAAM,EAAE,SAAS,CAAC,CACjD,CACJ;aACA,SAAS,CAAC,EAAE,EAAE,EAAE,wBAAwB,CAAC,EAAE,EAAE,CAAC,CAAC;QACpD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YACpB,MAAM,IAAI,WAAW,CAAC,UAAU,EAAE,qCAAqC,CAAC,CAAC;QAC7E,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,EAAE,CAAC,CAAC;QAC5C,MAAM,EAAE;aACH,MAAM,CAAC,wBAAwB,CAAC;aAChC,GAAG,CAAC,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC;aAC/B,KAAK,CAAC,EAAE,CAAC,wBAAwB,CAAC,EAAE,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;QAC7D,MAAM,QAAQ,GAAG,MAAM,uBAAuB,CAC1C,EAAE,EACF,QAAQ,EACR,KAAK,CAAC,WAAW,EACjB,KAAK,CAAC,MAAM,EACZ,2BAA2B,EAC3B,KAAK,CAAC,SAAS,CAClB,CAAC;QACF,OAAO;YACH,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,cAAc,EAAE,GAAG,CAAC,cAAc;YAClC,aAAa,EAAE,GAAG,CAAC,aAAa;YAChC,gBAAgB,EAAE,GAAG,CAAC,gBAAgB;YACtC,MAAM,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,UAAU,EAAE,SAAS,EAAE,GAAG,CAAC,eAAe,EAAE;YAChE,IAAI,EAAE,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,CAAC;SACvD,CAAC;IACN,CAAC,CAAC,CAAC;AACP,CAAC"}

package/packages/happy2-server/dist/modules/plugin/pluginManagementRequestBeginUninstall.d.ts

@@ -0,0 +1,12 @@
+import type { DrizzleExecutor } from "../drizzle.js";
+import type { MutationHint } from "../chat/types.js";
+/** Claims one pending pluginManagementRequests uninstall by changing it to processing for a chat-member administrator. This durable state boundary serializes approval and returns the exact installation target for runtime removal. */
+export declare function pluginManagementRequestBeginUninstall(executor: DrizzleExecutor, input: {
+    actorUserId: string;
+    chatId: string;
+    requestId: string;
+}): Promise<{
+    targetInstallationId: string;
+    hint: MutationHint;
+}>;
+//# sourceMappingURL=pluginManagementRequestBeginUninstall.d.ts.map

package/packages/happy2-server/dist/modules/plugin/pluginManagementRequestBeginUninstall.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pluginManagementRequestBeginUninstall.d.ts","sourceRoot":"","sources":["../../../sources/modules/plugin/pluginManagementRequestBeginUninstall.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAKrD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAMrD,yOAAyO;AACzO,wBAAsB,qCAAqC,CACvD,QAAQ,EAAE,eAAe,EACzB,KAAK,EAAE;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAClE,OAAO,CAAC;IAAE,oBAAoB,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,YAAY,CAAA;CAAE,CAAC,CA2D/D"}

package/packages/happy2-server/dist/modules/plugin/pluginManagementRequestBeginUninstall.js

@@ -0,0 +1,56 @@
+import { and, eq, sql } from "drizzle-orm";
+import { withTransaction } from "../drizzle.js";
+import { chatGetAccess } from "../chat/chatGetAccess.js";
+import { chatAdvanceWithSequence } from "../chat/chatAdvanceWithSequence.js";
+import { chatHint } from "../chat/chatHint.js";
+import { userRequireServerAdmin } from "../chat/userRequireServerAdmin.js";
+import { pluginManagementRequests } from "../schema.js";
+import { syncSequenceNext } from "../sync/syncSequenceNext.js";
+import { PluginError } from "./types.js";
+/** Claims one pending pluginManagementRequests uninstall by changing it to processing for a chat-member administrator. This durable state boundary serializes approval and returns the exact installation target for runtime removal. */
+export async function pluginManagementRequestBeginUninstall(executor, input) {
+    return withTransaction(executor, async (tx) => {
+        await userRequireServerAdmin(tx, input.actorUserId);
+        if (!(await chatGetAccess(tx, input.actorUserId, input.chatId, true)))
+            throw new PluginError("forbidden", "Chat membership is required");
+        const [row] = await tx
+            .select({
+            action: pluginManagementRequests.action,
+            status: pluginManagementRequests.status,
+            targetInstallationId: pluginManagementRequests.targetInstallationId,
+        })
+            .from(pluginManagementRequests)
+            .where(and(eq(pluginManagementRequests.id, input.requestId), eq(pluginManagementRequests.chatId, input.chatId)))
+            .limit(1);
+        if (!row)
+            throw new PluginError("not_found", "Plugin management request was not found");
+        if (row.action !== "uninstall")
+            throw new PluginError("conflict", "Request is not an uninstall");
+        if (row.status !== "pending")
+            throw new PluginError("conflict", `Plugin request is already ${row.status}`);
+        if (!row.targetInstallationId)
+            throw new Error("Plugin uninstall request has no target");
+        const updated = await tx
+            .update(pluginManagementRequests)
+            .set({
+            status: "processing",
+            resolvedByUserId: input.actorUserId,
+            updatedAt: sql `CURRENT_TIMESTAMP`,
+        })
+            .where(and(eq(pluginManagementRequests.id, input.requestId), eq(pluginManagementRequests.status, "pending")))
+            .returning({ id: pluginManagementRequests.id });
+        if (updated.length !== 1)
+            throw new PluginError("conflict", "Plugin request was already resolved");
+        const sequence = await syncSequenceNext(tx);
+        await tx
+            .update(pluginManagementRequests)
+            .set({ syncSequence: sequence })
+            .where(eq(pluginManagementRequests.id, input.requestId));
+        const mutation = await chatAdvanceWithSequence(tx, sequence, input.actorUserId, input.chatId, "plugin.uninstall_processing", input.requestId);
+        return {
+            targetInstallationId: row.targetInstallationId,
+            hint: chatHint(sequence, input.chatId, mutation.pts),
+        };
+    });
+}
+//# sourceMappingURL=pluginManagementRequestBeginUninstall.js.map

package/packages/happy2-server/dist/modules/plugin/pluginManagementRequestBeginUninstall.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pluginManagementRequestBeginUninstall.js","sourceRoot":"","sources":["../../../sources/modules/plugin/pluginManagementRequestBeginUninstall.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAE3C,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACzD,OAAO,EAAE,uBAAuB,EAAE,MAAM,oCAAoC,CAAC;AAC7E,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAE/C,OAAO,EAAE,sBAAsB,EAAE,MAAM,mCAAmC,CAAC;AAC3E,OAAO,EAAE,wBAAwB,EAAE,MAAM,cAAc,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAEzC,yOAAyO;AACzO,MAAM,CAAC,KAAK,UAAU,qCAAqC,CACvD,QAAyB,EACzB,KAAiE;IAEjE,OAAO,eAAe,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;QAC1C,MAAM,sBAAsB,CAAC,EAAE,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;QACpD,IAAI,CAAC,CAAC,MAAM,aAAa,CAAC,EAAE,EAAE,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YACjE,MAAM,IAAI,WAAW,CAAC,WAAW,EAAE,6BAA6B,CAAC,CAAC;QACtE,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE;aACjB,MAAM,CAAC;YACJ,MAAM,EAAE,wBAAwB,CAAC,MAAM;YACvC,MAAM,EAAE,wBAAwB,CAAC,MAAM;YACvC,oBAAoB,EAAE,wBAAwB,CAAC,oBAAoB;SACtE,CAAC;aACD,IAAI,CAAC,wBAAwB,CAAC;aAC9B,KAAK,CACF,GAAG,CACC,EAAE,CAAC,wBAAwB,CAAC,EAAE,EAAE,KAAK,CAAC,SAAS,CAAC,EAChD,EAAE,CAAC,wBAAwB,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CACpD,CACJ;aACA,KAAK,CAAC,CAAC,CAAC,CAAC;QACd,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,WAAW,CAAC,WAAW,EAAE,yCAAyC,CAAC,CAAC;QACxF,IAAI,GAAG,CAAC,MAAM,KAAK,WAAW;YAC1B,MAAM,IAAI,WAAW,CAAC,UAAU,EAAE,6BAA6B,CAAC,CAAC;QACrE,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS;YACxB,MAAM,IAAI,WAAW,CAAC,UAAU,EAAE,6BAA6B,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;QACjF,IAAI,CAAC,GAAG,CAAC,oBAAoB;YAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QACzF,MAAM,OAAO,GAAG,MAAM,EAAE;aACnB,MAAM,CAAC,wBAAwB,CAAC;aAChC,GAAG,CAAC;YACD,MAAM,EAAE,YAAY;YACpB,gBAAgB,EAAE,KAAK,CAAC,WAAW;YACnC,SAAS,EAAE,GAAG,CAAA,mBAAmB;SACpC,CAAC;aACD,KAAK,CACF,GAAG,CACC,EAAE,CAAC,wBAAwB,CAAC,EAAE,EAAE,KAAK,CAAC,SAAS,CAAC,EAChD,EAAE,CAAC,wBAAwB,CAAC,MAAM,EAAE,SAAS,CAAC,CACjD,CACJ;aACA,SAAS,CAAC,EAAE,EAAE,EAAE,wBAAwB,CAAC,EAAE,EAAE,CAAC,CAAC;QACpD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YACpB,MAAM,IAAI,WAAW,CAAC,UAAU,EAAE,qCAAqC,CAAC,CAAC;QAC7E,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,EAAE,CAAC,CAAC;QAC5C,MAAM,EAAE;aACH,MAAM,CAAC,wBAAwB,CAAC;aAChC,GAAG,CAAC,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC;aAC/B,KAAK,CAAC,EAAE,CAAC,wBAAwB,CAAC,EAAE,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;QAC7D,MAAM,QAAQ,GAAG,MAAM,uBAAuB,CAC1C,EAAE,EACF,QAAQ,EACR,KAAK,CAAC,WAAW,EACjB,KAAK,CAAC,MAAM,EACZ,6BAA6B,EAC7B,KAAK,CAAC,SAAS,CAClB,CAAC;QACF,OAAO;YACH,oBAAoB,EAAE,GAAG,CAAC,oBAAoB;YAC9C,IAAI,EAAE,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,CAAC;SACvD,CAAC;IACN,CAAC,CAAC,CAAC;AACP,CAAC"}

package/packages/happy2-server/dist/modules/plugin/pluginManagementRequestCompleteInstall.d.ts

@@ -0,0 +1,11 @@
+import type { DrizzleExecutor } from "../drizzle.js";
+import type { MutationHint } from "../chat/types.js";
+/** Finalizes a claimed pluginManagementRequests install as approved or failed and advances the originating chats point in one transaction. This completion boundary makes the runtime outcome, audit evidence, and reactive card resolution converge durably. */
+export declare function pluginManagementRequestCompleteInstall(executor: DrizzleExecutor, input: {
+    actorUserId: string;
+    requestId: string;
+    chatId: string;
+    installationId: string;
+    error?: string;
+}): Promise<MutationHint>;
+//# sourceMappingURL=pluginManagementRequestCompleteInstall.d.ts.map

package/packages/happy2-server/dist/modules/plugin/pluginManagementRequestCompleteInstall.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pluginManagementRequestCompleteInstall.d.ts","sourceRoot":"","sources":["../../../sources/modules/plugin/pluginManagementRequestCompleteInstall.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAKrD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAIrD,iQAAiQ;AACjQ,wBAAsB,sCAAsC,CACxD,QAAQ,EAAE,eAAe,EACzB,KAAK,EAAE;IACH,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,CAAC,EAAE,MAAM,CAAC;CAClB,GACF,OAAO,CAAC,YAAY,CAAC,CA+CvB"}