happy2 0.0.5 → 0.0.11

package/packages/happy2-server/dist/modules/operations/json.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"json.js","sourceRoot":"","sources":["../../../sources/modules/operations/json.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,IAAI,CAAC,KAAc;IAC/B,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AAC9D,CAAC"}

package/packages/happy2-server/dist/modules/operations/number.d.ts

@@ -0,0 +1,2 @@
+export declare function number(value: unknown, fallback?: number): number;
+//# sourceMappingURL=number.d.ts.map

package/packages/happy2-server/dist/modules/operations/number.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"number.d.ts","sourceRoot":"","sources":["../../../sources/modules/operations/number.ts"],"names":[],"mappings":"AAAA,wBAAgB,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CAMhE"}

package/packages/happy2-server/dist/modules/operations/number.js

@@ -0,0 +1,12 @@
+export function number(value, fallback) {
+    if (typeof value === "number")
+        return value;
+    if (typeof value === "bigint")
+        return Number(value);
+    if (typeof value === "string" && /^-?\d+$/.test(value))
+        return Number(value);
+    if (fallback !== undefined)
+        return fallback;
+    throw new Error("Expected database integer value");
+}
+//# sourceMappingURL=number.js.map

package/packages/happy2-server/dist/modules/operations/number.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"number.js","sourceRoot":"","sources":["../../../sources/modules/operations/number.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,MAAM,CAAC,KAAc,EAAE,QAAiB;IACpD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IACpD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7E,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IAC5C,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;AACvD,CAAC"}

package/packages/happy2-server/dist/modules/operations/optionalText.d.ts

@@ -0,0 +1,2 @@
+export declare function optionalText(value: unknown): string | undefined;
+//# sourceMappingURL=optionalText.d.ts.map

package/packages/happy2-server/dist/modules/operations/optionalText.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"optionalText.d.ts","sourceRoot":"","sources":["../../../sources/modules/operations/optionalText.ts"],"names":[],"mappings":"AACA,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAE/D"}

package/packages/happy2-server/dist/modules/operations/optionalText.js

@@ -0,0 +1,5 @@
+import { text } from "./text.js";
+export function optionalText(value) {
+    return value === null || value === undefined ? undefined : text(value);
+}
+//# sourceMappingURL=optionalText.js.map

package/packages/happy2-server/dist/modules/operations/optionalText.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"optionalText.js","sourceRoot":"","sources":["../../../sources/modules/operations/optionalText.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,MAAM,UAAU,YAAY,CAAC,KAAc;IACvC,OAAO,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC3E,CAAC"}

package/packages/happy2-server/dist/modules/operations/page.d.ts

@@ -0,0 +1,3 @@
+import { type Page } from "./types.js";
+export declare function page<R extends Record<string, unknown>, T>(rows: R[], limit: number, map: (row: R) => T, timestamp?: (item: T) => string, id?: (item: T) => string): Page<T>;
+//# sourceMappingURL=page.d.ts.map

package/packages/happy2-server/dist/modules/operations/page.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"page.d.ts","sourceRoot":"","sources":["../../../sources/modules/operations/page.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,IAAI,EAAE,MAAM,YAAY,CAAC;AACvC,wBAAgB,IAAI,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC,EACrD,IAAI,EAAE,CAAC,EAAE,EACT,KAAK,EAAE,MAAM,EACb,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,EAClB,SAAS,GAAE,CAAC,IAAI,EAAE,CAAC,KAAK,MAKT,EACf,EAAE,GAAE,CAAC,IAAI,EAAE,CAAC,KAAK,MAKT,GACT,IAAI,CAAC,CAAC,CAAC,CAQT"}

package/packages/happy2-server/dist/modules/operations/page.js

@@ -0,0 +1,12 @@
+import { encodeCursor } from "./impl/encodeCursor.js";
+import {} from "./types.js";
+export function page(rows, limit, map, timestamp = (item) => item.createdAt, id = (item) => item.id) {
+    const hasMore = rows.length > limit;
+    const items = rows.slice(0, limit).map(map);
+    const last = items.at(-1);
+    return {
+        items,
+        nextCursor: hasMore && last ? encodeCursor(timestamp(last), id(last)) : undefined,
+    };
+}
+//# sourceMappingURL=page.js.map

package/packages/happy2-server/dist/modules/operations/page.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"page.js","sourceRoot":"","sources":["../../../sources/modules/operations/page.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAa,MAAM,YAAY,CAAC;AACvC,MAAM,UAAU,IAAI,CAChB,IAAS,EACT,KAAa,EACb,GAAkB,EAClB,SAAS,GAAwB,CAAC,IAAI,EAAE,EAAE,CAElC,IAGH,CAAC,SAAS,EACf,EAAE,GAAwB,CAAC,IAAI,EAAE,EAAE,CAE3B,IAGH,CAAC,EAAE;IAER,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;IACpC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC5C,MAAM,IAAI,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1B,OAAO;QACH,KAAK;QACL,UAAU,EAAE,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS;KACpF,CAAC;AACN,CAAC"}

package/packages/happy2-server/dist/modules/operations/parseJson.d.ts

@@ -0,0 +1,2 @@
+export declare function parseJson(value: unknown): unknown;
+//# sourceMappingURL=parseJson.d.ts.map

package/packages/happy2-server/dist/modules/operations/parseJson.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"parseJson.d.ts","sourceRoot":"","sources":["../../../sources/modules/operations/parseJson.ts"],"names":[],"mappings":"AACA,wBAAgB,SAAS,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAQjD"}

package/packages/happy2-server/dist/modules/operations/parseJson.js

@@ -0,0 +1,13 @@
+import { optionalText } from "./optionalText.js";
+export function parseJson(value) {
+    const raw = optionalText(value);
+    if (raw === undefined)
+        return undefined;
+    try {
+        return JSON.parse(raw);
+    }
+    catch {
+        return undefined;
+    }
+}
+//# sourceMappingURL=parseJson.js.map

package/packages/happy2-server/dist/modules/operations/parseJson.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"parseJson.js","sourceRoot":"","sources":["../../../sources/modules/operations/parseJson.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,MAAM,UAAU,SAAS,CAAC,KAAc;IACpC,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IAChC,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACxC,IAAI,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,SAAS,CAAC;IACrB,CAAC;AACL,CAAC"}

package/packages/happy2-server/dist/modules/operations/text.d.ts

@@ -0,0 +1,2 @@
+export declare function text(value: unknown): string;
+//# sourceMappingURL=text.d.ts.map

package/packages/happy2-server/dist/modules/operations/text.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"text.d.ts","sourceRoot":"","sources":["../../../sources/modules/operations/text.ts"],"names":[],"mappings":"AAAA,wBAAgB,IAAI,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAI3C"}

package/packages/happy2-server/dist/modules/operations/text.js

@@ -0,0 +1,8 @@
+export function text(value) {
+    if (typeof value === "string")
+        return value;
+    if (typeof value === "number" || typeof value === "bigint")
+        return String(value);
+    throw new Error("Expected database text value");
+}
+//# sourceMappingURL=text.js.map

package/packages/happy2-server/dist/modules/operations/text.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"text.js","sourceRoot":"","sources":["../../../sources/modules/operations/text.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,IAAI,CAAC,KAAc;IAC/B,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IACjF,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;AACpD,CAAC"}

package/packages/happy2-server/dist/modules/operations/types.d.ts

@@ -15,6 +15,9 @@ export interface OperationsSyncHint {
     }>;
     areas: string[];
 }
+export interface ClaimedDataExport extends DataExportJob {
+    claimStartedAt: string;
+}
 export interface AuditLogEntry {
     id: string;
     actorUserId?: string;

package/packages/happy2-server/dist/modules/operations/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../sources/modules/operations/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,mBAAmB,GAAG,SAAS,GAAG,WAAW,GAAG,WAAW,GAAG,UAAU,CAAC;AAErF,qBAAa,eAAgB,SAAQ,KAAK;IAElC,QAAQ,CAAC,IAAI,EAAE,mBAAmB;IADtC,YACa,IAAI,EAAE,mBAAmB,EAClC,OAAO,EAAE,MAAM,EAIlB;CACJ;AAED,MAAM,WAAW,IAAI,CAAC,CAAC;IACnB,KAAK,EAAE,CAAC,EAAE,CAAC;IACX,UAAU,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,kBAAkB;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC9C,KAAK,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,MAAM,WAAW,aAAa;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,MAAM,SAAS,GAAG,QAAQ,GAAG,SAAS,GAAG,SAAS,CAAC;AAEzD,MAAM,WAAW,UAAU;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,SAAS,CAAC;CACrB;AAED,MAAM,MAAM,sBAAsB,GAAG,MAAM,GAAG,WAAW,GAAG,UAAU,GAAG,WAAW,CAAC;AACrF,MAAM,MAAM,oBAAoB,GAC1B,MAAM,GACN,UAAU,GACV,gBAAgB,GAChB,aAAa,GACb,KAAK,GACL,OAAO,GACP,aAAa,CAAC;AAEpB,MAAM,WAAW,gBAAgB;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,sBAAsB,CAAC;IAC/B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,gBAAgB;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,oBAAoB,CAAC;IAC7B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,MAAM,cAAc,GAAG,WAAW,GAAG,aAAa,GAAG,WAAW,GAAG,cAAc,CAAC;AACxF,MAAM,MAAM,gBAAgB,GACtB,SAAS,GACT,SAAS,GACT,UAAU,GACV,QAAQ,GACR,WAAW,GACX,SAAS,CAAC;AAEhB,2FAA2F;AAC3F,MAAM,WAAW,aAAa;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,IAAI,EAAE,cAAc,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,gBAAgB,CAAC;IACzB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,MAAM,YAAY,GAAG,SAAS,GAAG,SAAS,GAAG,UAAU,GAAG,QAAQ,GAAG,SAAS,CAAC;AAErF,MAAM,WAAW,YAAY;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,eAAe,EAAE,MAAM,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,YAAY,CAAC;IACrB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,MAAM,cAAc,GAAG,UAAU,GAAG,OAAO,GAAG,MAAM,GAAG,aAAa,GAAG,OAAO,GAAG,SAAS,CAAC;AACjG,MAAM,MAAM,kBAAkB,GAAG,SAAS,GAAG,UAAU,GAAG,QAAQ,CAAC;AAEnE,MAAM,WAAW,YAAY;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,cAAc,CAAC;IACtB,MAAM,EAAE,kBAAkB,CAAC;IAC3B,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,mBAAmB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC;IACzB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,CAAC;CAC1B"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../sources/modules/operations/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,mBAAmB,GAAG,SAAS,GAAG,WAAW,GAAG,WAAW,GAAG,UAAU,CAAC;AAErF,qBAAa,eAAgB,SAAQ,KAAK;IAElC,QAAQ,CAAC,IAAI,EAAE,mBAAmB;IADtC,YACa,IAAI,EAAE,mBAAmB,EAClC,OAAO,EAAE,MAAM,EAIlB;CACJ;AAED,MAAM,WAAW,IAAI,CAAC,CAAC;IACnB,KAAK,EAAE,CAAC,EAAE,CAAC;IACX,UAAU,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,kBAAkB;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC9C,KAAK,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,MAAM,WAAW,iBAAkB,SAAQ,aAAa;IACpD,cAAc,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,aAAa;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,MAAM,SAAS,GAAG,QAAQ,GAAG,SAAS,GAAG,SAAS,CAAC;AAEzD,MAAM,WAAW,UAAU;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,SAAS,CAAC;CACrB;AAED,MAAM,MAAM,sBAAsB,GAAG,MAAM,GAAG,WAAW,GAAG,UAAU,GAAG,WAAW,CAAC;AACrF,MAAM,MAAM,oBAAoB,GAC1B,MAAM,GACN,UAAU,GACV,gBAAgB,GAChB,aAAa,GACb,KAAK,GACL,OAAO,GACP,aAAa,CAAC;AAEpB,MAAM,WAAW,gBAAgB;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,sBAAsB,CAAC;IAC/B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,gBAAgB;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,oBAAoB,CAAC;IAC7B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,MAAM,cAAc,GAAG,WAAW,GAAG,aAAa,GAAG,WAAW,GAAG,cAAc,CAAC;AACxF,MAAM,MAAM,gBAAgB,GACtB,SAAS,GACT,SAAS,GACT,UAAU,GACV,QAAQ,GACR,WAAW,GACX,SAAS,CAAC;AAEhB,2FAA2F;AAC3F,MAAM,WAAW,aAAa;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,IAAI,EAAE,cAAc,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,gBAAgB,CAAC;IACzB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,MAAM,YAAY,GAAG,SAAS,GAAG,SAAS,GAAG,UAAU,GAAG,QAAQ,GAAG,SAAS,CAAC;AAErF,MAAM,WAAW,YAAY;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,eAAe,EAAE,MAAM,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,YAAY,CAAC;IACrB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,MAAM,cAAc,GAAG,UAAU,GAAG,OAAO,GAAG,MAAM,GAAG,aAAa,GAAG,OAAO,GAAG,SAAS,CAAC;AACjG,MAAM,MAAM,kBAAkB,GAAG,SAAS,GAAG,UAAU,GAAG,QAAQ,CAAC;AAEnE,MAAM,WAAW,YAAY;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,cAAc,CAAC;IACtB,MAAM,EAAE,kBAAkB,CAAC;IAC3B,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,mBAAmB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC;IACzB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,CAAC;CAC1B"}

package/packages/happy2-server/dist/modules/operations/userRequireOperationsActive.d.ts

@@ -0,0 +1,10 @@
+import { type DrizzleExecutor } from "../drizzle.js";
+/**
+ * Returns the identifier and role of a non-deleted profile backed by an active, unbanned, non-deleted account.
+ * Operations actions reuse this projection so self-service and administrator flows share the same account-eligibility boundary.
+ */
+export declare function userRequireOperationsActive(executor: DrizzleExecutor, userId: string): Promise<{
+    id: string;
+    role: string;
+}>;
+//# sourceMappingURL=userRequireOperationsActive.d.ts.map

package/packages/happy2-server/dist/modules/operations/userRequireOperationsActive.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"userRequireOperationsActive.d.ts","sourceRoot":"","sources":["../../../sources/modules/operations/userRequireOperationsActive.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,eAAe,EAAE,MAAM,eAAe,CAAC;AAKrD;;;GAGG;AACH,wBAAsB,2BAA2B,CAAC,QAAQ,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM;;;GAmB1F"}

package/packages/happy2-server/dist/modules/operations/userRequireOperationsActive.js

@@ -0,0 +1,22 @@
+import {} from "../drizzle.js";
+import { OperationsError } from "./types.js";
+import { accounts, users } from "../schema.js";
+import { and, eq, isNull } from "drizzle-orm";
+/**
+ * Returns the identifier and role of a non-deleted profile backed by an active, unbanned, non-deleted account.
+ * Operations actions reuse this projection so self-service and administrator flows share the same account-eligibility boundary.
+ */
+export async function userRequireOperationsActive(executor, userId) {
+    const [row] = await executor
+        .select({
+        id: users.id,
+        role: users.role,
+    })
+        .from(users)
+        .innerJoin(accounts, eq(accounts.id, users.accountId))
+        .where(and(eq(users.id, userId), isNull(users.deletedAt), eq(accounts.active, 1), isNull(accounts.bannedAt), isNull(accounts.deletedAt)));
+    if (!row)
+        throw new OperationsError("not_found", "User was not found");
+    return row;
+}
+//# sourceMappingURL=userRequireOperationsActive.js.map

package/packages/happy2-server/dist/modules/operations/userRequireOperationsActive.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"userRequireOperationsActive.js","sourceRoot":"","sources":["../../../sources/modules/operations/userRequireOperationsActive.ts"],"names":[],"mappings":"AAAA,OAAO,EAAwB,MAAM,eAAe,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAE9C;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,QAAyB,EAAE,MAAc;IACvF,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,QAAQ;SACvB,MAAM,CAAC;QACJ,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,IAAI,EAAE,KAAK,CAAC,IAAI;KACnB,CAAC;SACD,IAAI,CAAC,KAAK,CAAC;SACX,SAAS,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;SACrD,KAAK,CACF,GAAG,CACC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,MAAM,CAAC,EACpB,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,EACvB,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,EACtB,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,EACzB,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAC7B,CACJ,CAAC;IACN,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,eAAe,CAAC,WAAW,EAAE,oBAAoB,CAAC,CAAC;IACvE,OAAO,GAAG,CAAC;AACf,CAAC"}

package/packages/happy2-server/dist/modules/operations/userRequireOperationsAdmin.d.ts

@@ -0,0 +1,7 @@
+import { type DrizzleExecutor } from "../drizzle.js";
+/**
+ * Requires an active account-backed user profile with the server administrator role for privileged operations work.
+ * Separating this role check from ordinary active-user validation gives backup, retention, export, and moderation actions one authorization rule.
+ */
+export declare function userRequireOperationsAdmin(executor: DrizzleExecutor, userId: string): Promise<void>;
+//# sourceMappingURL=userRequireOperationsAdmin.d.ts.map

package/packages/happy2-server/dist/modules/operations/userRequireOperationsAdmin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"userRequireOperationsAdmin.d.ts","sourceRoot":"","sources":["../../../sources/modules/operations/userRequireOperationsAdmin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,eAAe,EAAE,MAAM,eAAe,CAAC;AAGrD;;;GAGG;AACH,wBAAsB,0BAA0B,CAC5C,QAAQ,EAAE,eAAe,EACzB,MAAM,EAAE,MAAM,GACf,OAAO,CAAC,IAAI,CAAC,CAIf"}

package/packages/happy2-server/dist/modules/operations/userRequireOperationsAdmin.js

@@ -0,0 +1,13 @@
+import {} from "../drizzle.js";
+import { OperationsError } from "./types.js";
+import { userRequireOperationsActive } from "./userRequireOperationsActive.js";
+/**
+ * Requires an active account-backed user profile with the server administrator role for privileged operations work.
+ * Separating this role check from ordinary active-user validation gives backup, retention, export, and moderation actions one authorization rule.
+ */
+export async function userRequireOperationsAdmin(executor, userId) {
+    const user = await userRequireOperationsActive(executor, userId);
+    if (user.role !== "admin")
+        throw new OperationsError("forbidden", "Administrator access is required");
+}
+//# sourceMappingURL=userRequireOperationsAdmin.js.map

package/packages/happy2-server/dist/modules/operations/userRequireOperationsAdmin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"userRequireOperationsAdmin.js","sourceRoot":"","sources":["../../../sources/modules/operations/userRequireOperationsAdmin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAwB,MAAM,eAAe,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,EAAE,2BAA2B,EAAE,MAAM,kCAAkC,CAAC;AAC/E;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC5C,QAAyB,EACzB,MAAc;IAEd,MAAM,IAAI,GAAG,MAAM,2BAA2B,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACjE,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO;QACrB,MAAM,IAAI,eAAe,CAAC,WAAW,EAAE,kCAAkC,CAAC,CAAC;AACnF,CAAC"}

package/packages/happy2-server/dist/modules/plugin/catalog.d.ts

@@ -0,0 +1,13 @@
+import type { PluginPackage } from "./types.js";
+/** Immutable lookup over validated plugin packages supplied by the built-in catalog. */
+export declare class PluginCatalog {
+    private readonly packages;
+    constructor(packages: readonly PluginPackage[]);
+    list(): PluginPackage[];
+    get(shortName: string): PluginPackage | undefined;
+}
+/** Loads and fully validates every child package in a built-in plugins directory. */
+export declare function pluginCatalogLoad(root: string): Promise<PluginCatalog>;
+/** Loads one built-in package while rejecting unsafe paths, malformed manifests, invalid skills, and non-square icons. */
+export declare function pluginPackageLoad(directory: string, sourceReference?: string): Promise<PluginPackage>;
+//# sourceMappingURL=catalog.d.ts.map

package/packages/happy2-server/dist/modules/plugin/catalog.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalog.d.ts","sourceRoot":"","sources":["../../../sources/modules/plugin/catalog.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAGR,aAAa,EAGhB,MAAM,YAAY,CAAC;AA8BpB,wFAAwF;AACxF,qBAAa,aAAa;IACtB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAqC;IAE9D,YAAY,QAAQ,EAAE,SAAS,aAAa,EAAE,EAQ7C;IAED,IAAI,IAAI,aAAa,EAAE,CAItB;IAED,GAAG,CAAC,SAAS,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS,CAEhD;CACJ;AAED,qFAAqF;AACrF,wBAAsB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAc5E;AAED,0HAA0H;AAC1H,wBAAsB,iBAAiB,CACnC,SAAS,EAAE,MAAM,EACjB,eAAe,SAAsB,GACtC,OAAO,CAAC,aAAa,CAAC,CAsDxB"}

package/packages/happy2-server/dist/modules/plugin/catalog.js

@@ -0,0 +1,359 @@
+import { createHash } from "node:crypto";
+import { lstat, readFile, readdir, realpath } from "node:fs/promises";
+import { basename, join, relative, resolve, sep } from "node:path";
+import sharp from "sharp";
+import { rgbaToThumbHash } from "thumbhash";
+import { parseDocument } from "yaml";
+import { StrictWebhookUrlPolicy } from "../integrations/ssrf.js";
+const MAX_PACKAGE_FILES = 1_000;
+const MAX_PACKAGE_BYTES = 20 * 1024 * 1024;
+const MAX_FILE_BYTES = 5 * 1024 * 1024;
+const MAX_ICON_DIMENSION = 4_096;
+const SHORT_NAME = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
+const ENV_KEY = /^[A-Z_][A-Z0-9_]*$/;
+const SKILL_NAME = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
+const VERSION = /^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-([0-9A-Za-z-]+(?:\.[0-9A-Za-z-]+)*))?(?:\+([0-9A-Za-z-]+(?:\.[0-9A-Za-z-]+)*))?$/;
+const HEADER_NAME = /^[!#$%&'*+.^_`|~0-9A-Za-z-]+$/;
+const RESERVED_REMOTE_HEADERS = new Set([
+    "__proto__",
+    "accept",
+    "connection",
+    "constructor",
+    "content-length",
+    "content-type",
+    "host",
+    "mcp-protocol-version",
+    "proxy-authorization",
+    "prototype",
+    "te",
+    "trailer",
+    "transfer-encoding",
+    "upgrade",
+    "user-agent",
+]);
+/** Immutable lookup over validated plugin packages supplied by the built-in catalog. */
+export class PluginCatalog {
+    packages;
+    constructor(packages) {
+        const indexed = new Map();
+        for (const plugin of packages) {
+            if (indexed.has(plugin.manifest.shortName))
+                throw new Error(`Duplicate plugin shortName ${plugin.manifest.shortName}`);
+            indexed.set(plugin.manifest.shortName, plugin);
+        }
+        this.packages = indexed;
+    }
+    list() {
+        return [...this.packages.values()].sort((left, right) => left.manifest.displayName.localeCompare(right.manifest.displayName));
+    }
+    get(shortName) {
+        return this.packages.get(shortName);
+    }
+}
+/** Loads and fully validates every child package in a built-in plugins directory. */
+export async function pluginCatalogLoad(root) {
+    let entries;
+    try {
+        entries = await readdir(root, { withFileTypes: true });
+    }
+    catch (error) {
+        if (error.code === "ENOENT")
+            return new PluginCatalog([]);
+        throw error;
+    }
+    const packages = await Promise.all(entries
+        .filter((entry) => entry.isDirectory())
+        .map((entry) => pluginPackageLoad(join(root, entry.name), entry.name)));
+    return new PluginCatalog(packages);
+}
+/** Loads one built-in package while rejecting unsafe paths, malformed manifests, invalid skills, and non-square icons. */
+export async function pluginPackageLoad(directory, sourceReference = basename(directory)) {
+    const canonicalDirectory = await realpath(directory);
+    const files = await packageFiles(canonicalDirectory);
+    const manifestBuffer = files.get("plugin.json");
+    const iconBuffer = files.get("plugin.png");
+    if (!manifestBuffer)
+        throw new Error(`${sourceReference}: plugin.json is required`);
+    if (!iconBuffer)
+        throw new Error(`${sourceReference}: plugin.png is required`);
+    const manifest = manifestParse(manifestBuffer.toString("utf8"), sourceReference);
+    if (manifest.shortName !== sourceReference)
+        throw new Error(`${sourceReference}: shortName must match the package directory name`);
+    const iconImage = sharp(iconBuffer, { limitInputPixels: 16_777_216 });
+    const icon = await iconImage.metadata();
+    if (icon.format !== "png" ||
+        !icon.width ||
+        icon.width !== icon.height ||
+        icon.width > MAX_ICON_DIMENSION)
+        throw new Error(`${sourceReference}: plugin.png must be a square PNG up to 4096 pixels`);
+    const skills = await skillsParse(files, sourceReference);
+    if (!manifest.mcp && skills.length === 0)
+        throw new Error(`${sourceReference}: a plugin must contain at least one skill or MCP server`);
+    if (manifest.mcp?.type === "stdio" && manifest.mcp.container)
+        requirePackageFile(files, manifest.mcp.container.dockerfile, sourceReference);
+    const thumbhashInput = await iconImage
+        .clone()
+        .resize(100, 100, { fit: "inside", withoutEnlargement: true })
+        .ensureAlpha()
+        .raw()
+        .toBuffer({ resolveWithObject: true });
+    return {
+        manifest,
+        skills,
+        directory: canonicalDirectory,
+        iconPath: join(canonicalDirectory, "plugin.png"),
+        image: {
+            contentType: "image/png",
+            size: iconBuffer.byteLength,
+            width: icon.width,
+            height: icon.height,
+            thumbhash: Buffer.from(rgbaToThumbHash(thumbhashInput.info.width, thumbhashInput.info.height, thumbhashInput.data)).toString("base64url"),
+            checksumSha256: createHash("sha256").update(iconBuffer).digest("hex"),
+        },
+        packageDigest: digest(files),
+        source: { kind: "builtin", reference: sourceReference },
+    };
+}
+async function packageFiles(directory) {
+    const result = new Map();
+    let totalBytes = 0;
+    const visit = async (current) => {
+        const entries = await readdir(current, { withFileTypes: true });
+        for (const entry of entries.sort((a, b) => a.name.localeCompare(b.name))) {
+            const path = join(current, entry.name);
+            const info = await lstat(path);
+            if (info.isSymbolicLink())
+                throw new Error(`Plugin packages may not contain symlinks: ${path}`);
+            if (info.isDirectory()) {
+                await visit(path);
+                continue;
+            }
+            if (!info.isFile())
+                throw new Error(`Plugin packages may contain only files: ${path}`);
+            if (info.size > MAX_FILE_BYTES)
+                throw new Error(`Plugin package file is too large: ${path}`);
+            if (result.size >= MAX_PACKAGE_FILES)
+                throw new Error("Plugin package has too many files");
+            totalBytes += info.size;
+            if (totalBytes > MAX_PACKAGE_BYTES)
+                throw new Error("Plugin package is too large");
+            const name = relative(directory, path).split(sep).join("/");
+            result.set(name, await readFile(path));
+        }
+    };
+    await visit(directory);
+    return result;
+}
+function manifestParse(source, label) {
+    let value;
+    try {
+        value = JSON.parse(source);
+    }
+    catch {
+        throw new Error(`${label}: plugin.json must contain valid JSON`);
+    }
+    const record = object(value, `${label}: plugin.json`);
+    only(record, [
+        "schemaVersion",
+        "version",
+        "displayName",
+        "shortName",
+        "description",
+        "variables",
+        "mcp",
+    ]);
+    if (record.schemaVersion !== 1)
+        throw new Error(`${label}: schemaVersion must be 1`);
+    const version = string(record.version, "version", 64);
+    const versionMatch = VERSION.exec(version);
+    if (!versionMatch ||
+        versionMatch[4]
+            ?.split(".")
+            .some((identifier) => /^\d+$/.test(identifier) && identifier.length > 1 && identifier.startsWith("0")))
+        throw new Error(`${label}: version must be a valid SemVer version`);
+    const shortName = string(record.shortName, "shortName", 64);
+    if (!SHORT_NAME.test(shortName))
+        throw new Error(`${label}: shortName is invalid`);
+    const variables = variableDefinitions(record.variables, label);
+    const parsedMcp = record.mcp === undefined ? undefined : mcp(record.mcp, variables, label);
+    if (!parsedMcp && variables.length)
+        throw new Error(`${label}: variables require an MCP server definition`);
+    return {
+        schemaVersion: 1,
+        version,
+        displayName: string(record.displayName, "displayName", 100),
+        shortName,
+        description: string(record.description, "description", 1_000),
+        variables,
+        ...(parsedMcp ? { mcp: parsedMcp } : {}),
+    };
+}
+function variableDefinitions(value, label) {
+    if (value === undefined)
+        return [];
+    if (!Array.isArray(value) || value.length > 64)
+        throw new Error(`${label}: variables must be an array with at most 64 entries`);
+    const seen = new Set();
+    return value.map((item, index) => {
+        const record = object(item, `variables[${index}]`);
+        only(record, ["key", "displayName", "description", "kind"]);
+        const key = string(record.key, `variables[${index}].key`, 128);
+        if (!ENV_KEY.test(key))
+            throw new Error(`${label}: variable key ${key} is invalid`);
+        if (seen.has(key))
+            throw new Error(`${label}: duplicate variable key ${key}`);
+        seen.add(key);
+        if (record.kind !== "text" && record.kind !== "secret")
+            throw new Error(`${label}: variable ${key} kind must be text or secret`);
+        return {
+            key,
+            displayName: string(record.displayName, `${key}.displayName`, 100),
+            description: string(record.description, `${key}.description`, 1_000),
+            kind: record.kind,
+        };
+    });
+}
+function mcp(value, variables, label) {
+    const record = object(value, "mcp");
+    if (record.type === "stdio") {
+        only(record, ["type", "command", "args", "container"]);
+        const container = record.container === undefined ? undefined : object(record.container, "mcp.container");
+        if (container)
+            only(container, ["dockerfile"]);
+        return {
+            type: "stdio",
+            command: string(record.command, "mcp.command", 1_000),
+            args: stringArray(record.args, "mcp.args", 128, 4_096),
+            ...(container
+                ? {
+                    container: {
+                        dockerfile: relativePath(container.dockerfile, "mcp.container.dockerfile"),
+                    },
+                }
+                : {}),
+        };
+    }
+    if (record.type === "remote") {
+        only(record, ["type", "url", "headers"]);
+        const url = string(record.url, "mcp.url", 4_096);
+        let normalizedUrl;
+        try {
+            normalizedUrl = new StrictWebhookUrlPolicy().validateForStorage(url);
+        }
+        catch (error) {
+            throw new Error(`${label}: ${error instanceof Error ? error.message : "remote MCP URL is invalid"}`);
+        }
+        const headersRecord = record.headers === undefined ? {} : object(record.headers, "mcp.headers");
+        const headers = Object.create(null);
+        const headerNames = new Set();
+        const declared = new Set(variables.map(({ key }) => key));
+        const referenced = new Set();
+        for (const [key, raw] of Object.entries(headersRecord)) {
+            if (!HEADER_NAME.test(key))
+                throw new Error(`${label}: invalid MCP header name ${key}`);
+            const normalizedKey = key.toLowerCase();
+            if (RESERVED_REMOTE_HEADERS.has(normalizedKey))
+                throw new Error(`${label}: MCP header ${key} is managed by Happy`);
+            if (headerNames.has(normalizedKey))
+                throw new Error(`${label}: duplicate MCP header name ${key}`);
+            headerNames.add(normalizedKey);
+            const template = string(raw, `mcp.headers.${key}`, 8_192, false);
+            if (/\r|\n/.test(template))
+                throw new Error(`${label}: MCP header values may not contain newlines`);
+            for (const match of template.matchAll(/\$\{([^}]+)\}/g))
+                if (!declared.has(match[1]))
+                    throw new Error(`${label}: MCP header ${key} references undeclared variable ${match[1]}`);
+                else
+                    referenced.add(match[1]);
+            headers[key] = template;
+        }
+        const unused = variables.find(({ key }) => !referenced.has(key));
+        if (unused)
+            throw new Error(`${label}: remote MCP variable ${unused.key} is not used by a header template`);
+        return { type: "remote", url: normalizedUrl, headers };
+    }
+    throw new Error(`${label}: mcp.type must be stdio or remote`);
+}
+async function skillsParse(files, label) {
+    const skillFiles = [...files.keys()].filter((name) => /^skills\/[^/]+\/SKILL\.md$/.test(name));
+    const unexpected = [...files.keys()].find((name) => name.startsWith("skills/") && name.split("/").length < 3);
+    if (unexpected)
+        throw new Error(`${label}: skill files must live below skills/<name>/`);
+    const skillDirectories = new Set([...files.keys()]
+        .filter((name) => name.startsWith("skills/"))
+        .map((name) => name.split("/")[1])
+        .filter(Boolean));
+    for (const directory of skillDirectories)
+        if (!skillFiles.includes(`skills/${directory}/SKILL.md`))
+            throw new Error(`${label}: skills/${directory}/SKILL.md is required`);
+    return skillFiles.sort().map((path) => {
+        const directory = path.split("/")[1];
+        if (!SKILL_NAME.test(directory))
+            throw new Error(`${label}: invalid skill directory ${directory}`);
+        const source = files.get(path).toString("utf8");
+        const match = source.match(/^---\r?\n([\s\S]*?)\r?\n---(?:\r?\n|$)/);
+        if (!match)
+            throw new Error(`${label}: ${path} requires YAML frontmatter`);
+        const document = parseDocument(match[1], { uniqueKeys: true });
+        if (document.errors.length)
+            throw new Error(`${label}: ${path} has invalid YAML frontmatter`);
+        const frontmatter = object(document.toJSON(), `${path} frontmatter`);
+        const name = string(frontmatter.name, `${path} name`, 64);
+        const description = string(frontmatter.description, `${path} description`, 1_024);
+        if (name !== directory)
+            throw new Error(`${label}: ${path} name must match its parent directory`);
+        if (!SKILL_NAME.test(name))
+            throw new Error(`${label}: ${path} has an invalid skill name`);
+        return { name, description, directory: `skills/${directory}` };
+    });
+}
+function requirePackageFile(files, path, label) {
+    if (!files.has(path))
+        throw new Error(`${label}: referenced package file ${path} does not exist`);
+}
+function relativePath(value, name) {
+    const path = string(value, name, 1_000);
+    const normalized = path.replaceAll("\\", "/");
+    if (normalized.startsWith("/") ||
+        normalized.split("/").some((part) => !part || part === "." || part === "..") ||
+        resolve("/plugin", normalized).split(sep).join("/").startsWith("/plugin/") === false)
+        throw new Error(`${name} must be a safe package-relative path`);
+    return normalized;
+}
+function digest(files) {
+    const hash = createHash("sha256");
+    for (const [name, contents] of [...files.entries()].sort(([a], [b]) => a.localeCompare(b))) {
+        hash.update(name, "utf8");
+        hash.update("\0");
+        hash.update(String(contents.byteLength), "utf8");
+        hash.update("\0");
+        hash.update(contents);
+    }
+    return `sha256:${hash.digest("hex")}`;
+}
+function object(value, name) {
+    if (!value || typeof value !== "object" || Array.isArray(value))
+        throw new Error(`${name} must be an object`);
+    return value;
+}
+function only(value, allowed) {
+    const unexpected = Object.keys(value).find((key) => !allowed.includes(key));
+    if (unexpected)
+        throw new Error(`Unexpected field ${unexpected}`);
+}
+function string(value, name, maximum, trim = true) {
+    if (typeof value !== "string")
+        throw new Error(`${name} must be a string`);
+    const normalized = trim ? value.trim() : value;
+    if (!normalized || normalized.length > maximum || normalized.includes("\u0000"))
+        throw new Error(`${name} must contain between 1 and ${maximum} characters`);
+    return normalized;
+}
+function stringArray(value, name, maximumItems, maximumLength) {
+    if (value === undefined)
+        return [];
+    if (!Array.isArray(value) || value.length > maximumItems)
+        throw new Error(`${name} must be an array with at most ${maximumItems} entries`);
+    return value.map((item, index) => string(item, `${name}[${index}]`, maximumLength, false));
+}
+//# sourceMappingURL=catalog.js.map