happy2 0.0.9 → 0.0.11

package/packages/happy2-server/dist/modules/plugin/pluginInstallationList.js

@@ -0,0 +1,19 @@
+import { eq } from "drizzle-orm";
+import { pluginInstallations, plugins } from "../schema.js";
+import { userRequireServerAdmin } from "../chat/userRequireServerAdmin.js";
+import { pluginInstallationSelection } from "./impl/installationSelection.js";
+import { asPluginInstallation } from "./impl/asInstallation.js";
+/**
+ * Lists durable system plugin installations and their latest lifecycle state for an active server administrator.
+ * This read-only action does not mutate durable state and centralizes authorization before installation health is joined into the catalog.
+ */
+export async function pluginInstallationList(executor, actorUserId) {
+    await userRequireServerAdmin(executor, actorUserId);
+    const rows = await executor
+        .select(pluginInstallationSelection)
+        .from(pluginInstallations)
+        .innerJoin(plugins, eq(pluginInstallations.pluginId, plugins.id))
+        .orderBy(pluginInstallations.installedAt, pluginInstallations.id);
+    return rows.map(asPluginInstallation);
+}
+//# sourceMappingURL=pluginInstallationList.js.map

package/packages/happy2-server/dist/modules/plugin/pluginInstallationList.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pluginInstallationList.js","sourceRoot":"","sources":["../../../sources/modules/plugin/pluginInstallationList.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,mBAAmB,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAC5D,OAAO,EAAE,sBAAsB,EAAE,MAAM,mCAAmC,CAAC;AAE3E,OAAO,EAAE,2BAA2B,EAAE,MAAM,iCAAiC,CAAC;AAC9E,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAEhE;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CACxC,QAAyB,EACzB,WAAmB;IAEnB,MAAM,sBAAsB,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IACpD,MAAM,IAAI,GAAG,MAAM,QAAQ;SACtB,MAAM,CAAC,2BAA2B,CAAC;SACnC,IAAI,CAAC,mBAAmB,CAAC;SACzB,SAAS,CAAC,OAAO,EAAE,EAAE,CAAC,mBAAmB,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;SAChE,OAAO,CAAC,mBAAmB,CAAC,WAAW,EAAE,mBAAmB,CAAC,EAAE,CAAC,CAAC;IACtE,OAAO,IAAI,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;AAC1C,CAAC"}

package/packages/happy2-server/dist/modules/plugin/pluginInstallationListIds.d.ts

@@ -0,0 +1,7 @@
+import type { DrizzleExecutor } from "../drizzle.js";
+/**
+ * Lists every durable plugin installation id so the lifecycle worker can reconcile all runtimes after server startup.
+ * This read-only worker boundary does not mutate durable state and avoids coupling restart recovery to catalog availability.
+ */
+export declare function pluginInstallationListIds(executor: DrizzleExecutor): Promise<string[]>;
+//# sourceMappingURL=pluginInstallationListIds.d.ts.map

package/packages/happy2-server/dist/modules/plugin/pluginInstallationListIds.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pluginInstallationListIds.d.ts","sourceRoot":"","sources":["../../../sources/modules/plugin/pluginInstallationListIds.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAGrD;;;GAGG;AACH,wBAAsB,yBAAyB,CAAC,QAAQ,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAM5F"}

package/packages/happy2-server/dist/modules/plugin/pluginInstallationListIds.js

@@ -0,0 +1,13 @@
+import { pluginInstallations } from "../schema.js";
+/**
+ * Lists every durable plugin installation id so the lifecycle worker can reconcile all runtimes after server startup.
+ * This read-only worker boundary does not mutate durable state and avoids coupling restart recovery to catalog availability.
+ */
+export async function pluginInstallationListIds(executor) {
+    const rows = await executor
+        .select({ id: pluginInstallations.id })
+        .from(pluginInstallations)
+        .orderBy(pluginInstallations.installedAt, pluginInstallations.id);
+    return rows.map(({ id }) => id);
+}
+//# sourceMappingURL=pluginInstallationListIds.js.map

package/packages/happy2-server/dist/modules/plugin/pluginInstallationListIds.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pluginInstallationListIds.js","sourceRoot":"","sources":["../../../sources/modules/plugin/pluginInstallationListIds.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAEnD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,QAAyB;IACrE,MAAM,IAAI,GAAG,MAAM,QAAQ;SACtB,MAAM,CAAC,EAAE,EAAE,EAAE,mBAAmB,CAAC,EAAE,EAAE,CAAC;SACtC,IAAI,CAAC,mBAAmB,CAAC;SACzB,OAAO,CAAC,mBAAmB,CAAC,WAAW,EAAE,mBAAmB,CAAC,EAAE,CAAC,CAAC;IACtE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;AACpC,CAAC"}

package/packages/happy2-server/dist/modules/plugin/pluginInstallationListReadyMcpIds.d.ts

@@ -0,0 +1,7 @@
+import type { DrizzleExecutor } from "../drizzle.js";
+/**
+ * Lists ready MCP-backed plugin installation identities for agent function discovery and execution.
+ * This worker-facing read excludes skills-only and unhealthy installations so Rig receives only callable durable functions.
+ */
+export declare function pluginInstallationListReadyMcpIds(executor: DrizzleExecutor): Promise<string[]>;
+//# sourceMappingURL=pluginInstallationListReadyMcpIds.d.ts.map

package/packages/happy2-server/dist/modules/plugin/pluginInstallationListReadyMcpIds.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pluginInstallationListReadyMcpIds.d.ts","sourceRoot":"","sources":["../../../sources/modules/plugin/pluginInstallationListReadyMcpIds.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAGrD;;;GAGG;AACH,wBAAsB,iCAAiC,CACnD,QAAQ,EAAE,eAAe,GAC1B,OAAO,CAAC,MAAM,EAAE,CAAC,CAanB"}

package/packages/happy2-server/dist/modules/plugin/pluginInstallationListReadyMcpIds.js

@@ -0,0 +1,16 @@
+import { and, eq, sql } from "drizzle-orm";
+import { pluginInstallations, plugins } from "../schema.js";
+/**
+ * Lists ready MCP-backed plugin installation identities for agent function discovery and execution.
+ * This worker-facing read excludes skills-only and unhealthy installations so Rig receives only callable durable functions.
+ */
+export async function pluginInstallationListReadyMcpIds(executor) {
+    const rows = await executor
+        .select({ id: pluginInstallations.id })
+        .from(pluginInstallations)
+        .innerJoin(plugins, eq(pluginInstallations.pluginId, plugins.id))
+        .where(and(eq(pluginInstallations.status, "ready"), sql `json_type(${plugins.manifestJson}, '$.mcp') IS NOT NULL`))
+        .orderBy(pluginInstallations.installedAt, pluginInstallations.id);
+    return rows.map(({ id }) => id);
+}
+//# sourceMappingURL=pluginInstallationListReadyMcpIds.js.map

package/packages/happy2-server/dist/modules/plugin/pluginInstallationListReadyMcpIds.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pluginInstallationListReadyMcpIds.js","sourceRoot":"","sources":["../../../sources/modules/plugin/pluginInstallationListReadyMcpIds.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAE3C,OAAO,EAAE,mBAAmB,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAE5D;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,iCAAiC,CACnD,QAAyB;IAEzB,MAAM,IAAI,GAAG,MAAM,QAAQ;SACtB,MAAM,CAAC,EAAE,EAAE,EAAE,mBAAmB,CAAC,EAAE,EAAE,CAAC;SACtC,IAAI,CAAC,mBAAmB,CAAC;SACzB,SAAS,CAAC,OAAO,EAAE,EAAE,CAAC,mBAAmB,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;SAChE,KAAK,CACF,GAAG,CACC,EAAE,CAAC,mBAAmB,CAAC,MAAM,EAAE,OAAO,CAAC,EACvC,GAAG,CAAA,aAAa,OAAO,CAAC,YAAY,wBAAwB,CAC/D,CACJ;SACA,OAAO,CAAC,mBAAmB,CAAC,WAAW,EAAE,mBAAmB,CAAC,EAAE,CAAC,CAAC;IACtE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;AACpC,CAAC"}

package/packages/happy2-server/dist/modules/plugin/pluginInstallationUpdateStatus.d.ts

@@ -0,0 +1,15 @@
+import type { DrizzleExecutor } from "../drizzle.js";
+import type { MutationHint } from "../chat/types.js";
+import type { PluginInstallationStatus } from "./types.js";
+/**
+ * Commits a worker-observed lifecycle state to pluginInstallations and appends its matching sync event.
+ * The transaction makes asynchronous preparation and health transitions durable and reactive without letting the worker mutate tables directly.
+ */
+export declare function pluginInstallationUpdateStatus(executor: DrizzleExecutor, input: {
+    installationId: string;
+    status: PluginInstallationStatus;
+    detail: string;
+    error?: string;
+    runtimeImageTag?: string;
+}): Promise<MutationHint>;
+//# sourceMappingURL=pluginInstallationUpdateStatus.d.ts.map

package/packages/happy2-server/dist/modules/plugin/pluginInstallationUpdateStatus.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pluginInstallationUpdateStatus.d.ts","sourceRoot":"","sources":["../../../sources/modules/plugin/pluginInstallationUpdateStatus.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAMrD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAC;AAE3D;;;GAGG;AACH,wBAAsB,8BAA8B,CAChD,QAAQ,EAAE,eAAe,EACzB,KAAK,EAAE;IACH,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,wBAAwB,CAAC;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,eAAe,CAAC,EAAE,MAAM,CAAC;CAC5B,GACF,OAAO,CAAC,YAAY,CAAC,CAwBvB"}

package/packages/happy2-server/dist/modules/plugin/pluginInstallationUpdateStatus.js

@@ -0,0 +1,37 @@
+import { eq, sql } from "drizzle-orm";
+import { withTransaction } from "../drizzle.js";
+import { pluginInstallations } from "../schema.js";
+import { syncSequenceNext } from "../sync/syncSequenceNext.js";
+import { syncEventInsert } from "../sync/syncEventInsert.js";
+import { areaHint } from "../chat/areaHint.js";
+/**
+ * Commits a worker-observed lifecycle state to pluginInstallations and appends its matching sync event.
+ * The transaction makes asynchronous preparation and health transitions durable and reactive without letting the worker mutate tables directly.
+ */
+export async function pluginInstallationUpdateStatus(executor, input) {
+    return withTransaction(executor, async (tx) => {
+        const sequence = await syncSequenceNext(tx);
+        const [updated] = await tx
+            .update(pluginInstallations)
+            .set({
+            status: input.status,
+            statusDetail: input.detail,
+            lastError: input.error ?? null,
+            runtimeImageTag: input.runtimeImageTag,
+            syncSequence: sequence,
+            updatedAt: sql `CURRENT_TIMESTAMP`,
+            readyAt: input.status === "ready" ? sql `CURRENT_TIMESTAMP` : null,
+        })
+            .where(eq(pluginInstallations.id, input.installationId))
+            .returning({ id: pluginInstallations.id });
+        if (!updated)
+            throw new Error("Plugin installation disappeared during status update");
+        await syncEventInsert(tx, {
+            sequence,
+            kind: `plugin.${input.status}`,
+            entityId: input.installationId,
+        });
+        return areaHint(sequence, "plugins");
+    });
+}
+//# sourceMappingURL=pluginInstallationUpdateStatus.js.map

package/packages/happy2-server/dist/modules/plugin/pluginInstallationUpdateStatus.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pluginInstallationUpdateStatus.js","sourceRoot":"","sources":["../../../sources/modules/plugin/pluginInstallationUpdateStatus.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAEtC,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAI/C;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAChD,QAAyB,EACzB,KAMC;IAED,OAAO,eAAe,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;QAC1C,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,EAAE,CAAC,CAAC;QAC5C,MAAM,CAAC,OAAO,CAAC,GAAG,MAAM,EAAE;aACrB,MAAM,CAAC,mBAAmB,CAAC;aAC3B,GAAG,CAAC;YACD,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,YAAY,EAAE,KAAK,CAAC,MAAM;YAC1B,SAAS,EAAE,KAAK,CAAC,KAAK,IAAI,IAAI;YAC9B,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,YAAY,EAAE,QAAQ;YACtB,SAAS,EAAE,GAAG,CAAA,mBAAmB;YACjC,OAAO,EAAE,KAAK,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAA,mBAAmB,CAAC,CAAC,CAAC,IAAI;SACpE,CAAC;aACD,KAAK,CAAC,EAAE,CAAC,mBAAmB,CAAC,EAAE,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;aACvD,SAAS,CAAC,EAAE,EAAE,EAAE,mBAAmB,CAAC,EAAE,EAAE,CAAC,CAAC;QAC/C,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;QACtF,MAAM,eAAe,CAAC,EAAE,EAAE;YACtB,QAAQ;YACR,IAAI,EAAE,UAAU,KAAK,CAAC,MAAM,EAAE;YAC9B,QAAQ,EAAE,KAAK,CAAC,cAAc;SACjC,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;AACP,CAAC"}

package/packages/happy2-server/dist/modules/plugin/pluginList.d.ts

@@ -0,0 +1,8 @@
+import type { DrizzleExecutor } from "../drizzle.js";
+import type { SystemPluginSummary } from "./types.js";
+/**
+ * Lists durable system plugins and their persisted package-image metadata for an active server administrator.
+ * This read-only boundary does not mutate durable state and keeps catalog packages distinct from reusable installed plugin identities.
+ */
+export declare function pluginList(executor: DrizzleExecutor, actorUserId: string): Promise<SystemPluginSummary[]>;
+//# sourceMappingURL=pluginList.d.ts.map

package/packages/happy2-server/dist/modules/plugin/pluginList.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pluginList.d.ts","sourceRoot":"","sources":["../../../sources/modules/plugin/pluginList.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAKrD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAEtD;;;GAGG;AACH,wBAAsB,UAAU,CAC5B,QAAQ,EAAE,eAAe,EACzB,WAAW,EAAE,MAAM,GACpB,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAOhC"}

package/packages/happy2-server/dist/modules/plugin/pluginList.js

@@ -0,0 +1,17 @@
+import { plugins } from "../schema.js";
+import { userRequireServerAdmin } from "../chat/userRequireServerAdmin.js";
+import { asSystemPlugin } from "./impl/asPlugin.js";
+import { pluginSelection } from "./impl/pluginSelection.js";
+/**
+ * Lists durable system plugins and their persisted package-image metadata for an active server administrator.
+ * This read-only boundary does not mutate durable state and keeps catalog packages distinct from reusable installed plugin identities.
+ */
+export async function pluginList(executor, actorUserId) {
+    await userRequireServerAdmin(executor, actorUserId);
+    const rows = await executor
+        .select(pluginSelection)
+        .from(plugins)
+        .orderBy(plugins.installedAt, plugins.id);
+    return rows.map(asSystemPlugin);
+}
+//# sourceMappingURL=pluginList.js.map

package/packages/happy2-server/dist/modules/plugin/pluginList.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pluginList.js","sourceRoot":"","sources":["../../../sources/modules/plugin/pluginList.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,EAAE,sBAAsB,EAAE,MAAM,mCAAmC,CAAC;AAC3E,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAG5D;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC5B,QAAyB,EACzB,WAAmB;IAEnB,MAAM,sBAAsB,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IACpD,MAAM,IAAI,GAAG,MAAM,QAAQ;SACtB,MAAM,CAAC,eAAe,CAAC;SACvB,IAAI,CAAC,OAAO,CAAC;SACb,OAAO,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;IAC9C,OAAO,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;AACpC,CAAC"}

package/packages/happy2-server/dist/modules/plugin/pluginRemoveMissingBuiltins.d.ts

@@ -0,0 +1,14 @@
+import type { DrizzleExecutor } from "../drizzle.js";
+import type { MutationHint } from "../chat/types.js";
+/**
+ * Removes system plugins whose built-in source is no longer present, including their pluginInstallations and cascade-owned pluginInstallationVariables.
+ * The transaction records syncEvents for the deleted plugin identities so startup pruning is durable and clients can reconcile the plugins area.
+ */
+export declare function pluginRemoveMissingBuiltins(executor: DrizzleExecutor, availableSourceReferences: readonly string[]): Promise<{
+    hint?: MutationHint;
+    plugins: Array<{
+        pluginId: string;
+        containerNames: string[];
+    }>;
+}>;
+//# sourceMappingURL=pluginRemoveMissingBuiltins.d.ts.map

package/packages/happy2-server/dist/modules/plugin/pluginRemoveMissingBuiltins.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pluginRemoveMissingBuiltins.d.ts","sourceRoot":"","sources":["../../../sources/modules/plugin/pluginRemoveMissingBuiltins.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAGrD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAKrD;;;GAGG;AACH,wBAAsB,2BAA2B,CAC7C,QAAQ,EAAE,eAAe,EACzB,yBAAyB,EAAE,SAAS,MAAM,EAAE,GAC7C,OAAO,CAAC;IACP,IAAI,CAAC,EAAE,YAAY,CAAC;IACpB,OAAO,EAAE,KAAK,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAC;CAClE,CAAC,CAwCD"}

package/packages/happy2-server/dist/modules/plugin/pluginRemoveMissingBuiltins.js

@@ -0,0 +1,51 @@
+import { eq, inArray } from "drizzle-orm";
+import { withTransaction } from "../drizzle.js";
+import { areaHint } from "../chat/areaHint.js";
+import { pluginInstallations, plugins } from "../schema.js";
+import { syncEventInsert } from "../sync/syncEventInsert.js";
+import { syncSequenceNext } from "../sync/syncSequenceNext.js";
+/**
+ * Removes system plugins whose built-in source is no longer present, including their pluginInstallations and cascade-owned pluginInstallationVariables.
+ * The transaction records syncEvents for the deleted plugin identities so startup pruning is durable and clients can reconcile the plugins area.
+ */
+export async function pluginRemoveMissingBuiltins(executor, availableSourceReferences) {
+    return withTransaction(executor, async (tx) => {
+        const available = new Set(availableSourceReferences);
+        const builtins = await tx
+            .select({ id: plugins.id, sourceReference: plugins.sourceReference })
+            .from(plugins)
+            .where(eq(plugins.sourceKind, "builtin"));
+        const missing = builtins.filter(({ sourceReference }) => !available.has(sourceReference));
+        if (missing.length === 0)
+            return { plugins: [] };
+        const pluginIds = missing.map(({ id }) => id);
+        const installations = await tx
+            .select({
+            pluginId: pluginInstallations.pluginId,
+            containerName: pluginInstallations.containerName,
+        })
+            .from(pluginInstallations)
+            .where(inArray(pluginInstallations.pluginId, pluginIds));
+        await tx
+            .delete(pluginInstallations)
+            .where(inArray(pluginInstallations.pluginId, pluginIds));
+        await tx.delete(plugins).where(inArray(plugins.id, pluginIds));
+        const sequence = await syncSequenceNext(tx);
+        for (const { id } of missing)
+            await syncEventInsert(tx, {
+                sequence,
+                kind: "plugin.builtin_removed",
+                entityId: id,
+            });
+        return {
+            hint: areaHint(sequence, "plugins"),
+            plugins: missing.map(({ id }) => ({
+                pluginId: id,
+                containerNames: installations
+                    .filter(({ pluginId, containerName }) => pluginId === id && containerName)
+                    .map(({ containerName }) => containerName),
+            })),
+        };
+    });
+}
+//# sourceMappingURL=pluginRemoveMissingBuiltins.js.map

package/packages/happy2-server/dist/modules/plugin/pluginRemoveMissingBuiltins.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pluginRemoveMissingBuiltins.js","sourceRoot":"","sources":["../../../sources/modules/plugin/pluginRemoveMissingBuiltins.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAE1C,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAE/C,OAAO,EAAE,mBAAmB,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAE/D;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC7C,QAAyB,EACzB,yBAA4C;IAK5C,OAAO,eAAe,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;QAC1C,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,yBAAyB,CAAC,CAAC;QACrD,MAAM,QAAQ,GAAG,MAAM,EAAE;aACpB,MAAM,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,eAAe,EAAE,OAAO,CAAC,eAAe,EAAE,CAAC;aACpE,IAAI,CAAC,OAAO,CAAC;aACb,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC;QAC9C,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,eAAe,EAAE,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC;QAC1F,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;QAEjD,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;QAC9C,MAAM,aAAa,GAAG,MAAM,EAAE;aACzB,MAAM,CAAC;YACJ,QAAQ,EAAE,mBAAmB,CAAC,QAAQ;YACtC,aAAa,EAAE,mBAAmB,CAAC,aAAa;SACnD,CAAC;aACD,IAAI,CAAC,mBAAmB,CAAC;aACzB,KAAK,CAAC,OAAO,CAAC,mBAAmB,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC;QAC7D,MAAM,EAAE;aACH,MAAM,CAAC,mBAAmB,CAAC;aAC3B,KAAK,CAAC,OAAO,CAAC,mBAAmB,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC;QAC7D,MAAM,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC;QAE/D,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,EAAE,CAAC,CAAC;QAC5C,KAAK,MAAM,EAAE,EAAE,EAAE,IAAI,OAAO;YACxB,MAAM,eAAe,CAAC,EAAE,EAAE;gBACtB,QAAQ;gBACR,IAAI,EAAE,wBAAwB;gBAC9B,QAAQ,EAAE,EAAE;aACf,CAAC,CAAC;QACP,OAAO;YACH,IAAI,EAAE,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAC;YACnC,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;gBAC9B,QAAQ,EAAE,EAAE;gBACZ,cAAc,EAAE,aAAa;qBACxB,MAAM,CAAC,CAAC,EAAE,QAAQ,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC,QAAQ,KAAK,EAAE,IAAI,aAAa,CAAC;qBACzE,GAAG,CAAC,CAAC,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC,aAAc,CAAC;aAClD,CAAC,CAAC;SACN,CAAC;IACN,CAAC,CAAC,CAAC;AACP,CAAC"}

package/packages/happy2-server/dist/modules/plugin/runtime.d.ts

@@ -0,0 +1,37 @@
+import type { Transport } from "@modelcontextprotocol/sdk/shared/transport.js";
+import type { AgentSandboxRuntimeResolver } from "../sandbox/index.js";
+export interface PluginLocalPrepareInput {
+    build?: {
+        contextDirectory: string;
+        dockerfile: string;
+        tag: string;
+    };
+    containerName: string;
+    imageTag: string;
+    installationId: string;
+}
+export interface PluginLocalOpenInput {
+    args: readonly string[];
+    command: string;
+    containerName: string;
+    environment: Readonly<Record<string, string>>;
+}
+export interface PluginMcpRuntime {
+    prepareLocal(input: PluginLocalPrepareInput, signal?: AbortSignal): Promise<{
+        imageTag: string;
+    }>;
+    openLocal(input: PluginLocalOpenInput, signal?: AbortSignal): Promise<Transport>;
+    removeLocal(containerName: string): Promise<void>;
+}
+/** Runs stdio MCP packages in dedicated containers owned by the selected local sandbox provider. */
+export declare class SandboxPluginMcpRuntime implements PluginMcpRuntime {
+    private readonly provider;
+    constructor(provider: AgentSandboxRuntimeResolver);
+    prepareLocal(input: PluginLocalPrepareInput, signal?: AbortSignal): Promise<{
+        imageTag: string;
+    }>;
+    openLocal(input: PluginLocalOpenInput, signal?: AbortSignal): Promise<Transport>;
+    removeLocal(containerName: string): Promise<void>;
+    private localProvider;
+}
+//# sourceMappingURL=runtime.d.ts.map

package/packages/happy2-server/dist/modules/plugin/runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../../sources/modules/plugin/runtime.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,+CAA+C,CAAC;AAC/E,OAAO,KAAK,EACR,2BAA2B,EAG9B,MAAM,qBAAqB,CAAC;AAI7B,MAAM,WAAW,uBAAuB;IACpC,KAAK,CAAC,EAAE;QAAE,gBAAgB,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;IACtE,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,oBAAoB;IACjC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACjD;AAED,MAAM,WAAW,gBAAgB;IAC7B,YAAY,CACR,KAAK,EAAE,uBAAuB,EAC9B,MAAM,CAAC,EAAE,WAAW,GACrB,OAAO,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACjC,SAAS,CAAC,KAAK,EAAE,oBAAoB,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IACjF,WAAW,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACrD;AAED,oGAAoG;AACpG,qBAAa,uBAAwB,YAAW,gBAAgB;IAChD,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAArC,YAA6B,QAAQ,EAAE,2BAA2B,EAAI;IAEhE,YAAY,CACd,KAAK,EAAE,uBAAuB,EAC9B,MAAM,CAAC,EAAE,WAAW,GACrB,OAAO,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC,CA4B/B;IAEK,SAAS,CAAC,KAAK,EAAE,oBAAoB,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,SAAS,CAAC,CAmBrF;IAEK,WAAW,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAEtD;YAEa,aAAa;CAmB9B"}

package/packages/happy2-server/dist/modules/plugin/runtime.js

@@ -0,0 +1,62 @@
+import { PluginError } from "./types.js";
+import { NdjsonStreamTransport } from "./utils/ndjsonStreamTransport.js";
+/** Runs stdio MCP packages in dedicated containers owned by the selected local sandbox provider. */
+export class SandboxPluginMcpRuntime {
+    provider;
+    constructor(provider) {
+        this.provider = provider;
+    }
+    async prepareLocal(input, signal) {
+        const provider = await this.localProvider();
+        if (!provider.createPluginSandbox)
+            throw new PluginError("broken_configuration", `${provider.displayName} does not support plugin containers`);
+        if (input.build && input.build.tag !== input.imageTag)
+            throw new Error("Plugin build and runtime image tags must match");
+        await provider.removeSandbox(input.containerName);
+        if (input.build)
+            await provider.buildImage({
+                buildContext: input.build.contextDirectory,
+                dockerfile: input.build.dockerfile,
+                tag: input.build.tag,
+            }, { signal });
+        await provider.createPluginSandbox({
+            containerName: input.containerName,
+            imageTag: input.imageTag,
+            installationId: input.installationId,
+        }, signal);
+        return { imageTag: input.imageTag };
+    }
+    async openLocal(input, signal) {
+        const provider = await this.localProvider();
+        let handle;
+        try {
+            handle = provider.attachTerminal({
+                containerName: input.containerName,
+                command: [input.command, ...input.args],
+                environment: input.environment,
+            }, signal);
+        }
+        catch (error) {
+            throw new PluginError("broken_configuration", error instanceof Error ? error.message : "Plugin environment is invalid");
+        }
+        return new NdjsonStreamTransport(handle);
+    }
+    async removeLocal(containerName) {
+        await (await this.localProvider()).removeSandbox(containerName);
+    }
+    async localProvider() {
+        let provider;
+        try {
+            provider = (await this.provider());
+        }
+        catch (error) {
+            throw new PluginError("broken_configuration", error instanceof Error
+                ? error.message
+                : "A local sandbox provider is not configured");
+        }
+        if (provider.locality !== "local")
+            throw new PluginError("broken_configuration", "Stdio MCP plugins require a local sandbox provider");
+        return provider;
+    }
+}
+//# sourceMappingURL=runtime.js.map

package/packages/happy2-server/dist/modules/plugin/runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.js","sourceRoot":"","sources":["../../../sources/modules/plugin/runtime.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,qBAAqB,EAAE,MAAM,kCAAkC,CAAC;AAyBzE,oGAAoG;AACpG,MAAM,OAAO,uBAAuB;IACH,QAAQ;IAArC,YAA6B,QAAqC;wBAArC,QAAQ;IAAgC,CAAC;IAEtE,KAAK,CAAC,YAAY,CACd,KAA8B,EAC9B,MAAoB;QAEpB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QAC5C,IAAI,CAAC,QAAQ,CAAC,mBAAmB;YAC7B,MAAM,IAAI,WAAW,CACjB,sBAAsB,EACtB,GAAG,QAAQ,CAAC,WAAW,qCAAqC,CAC/D,CAAC;QACN,IAAI,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC,GAAG,KAAK,KAAK,CAAC,QAAQ;YACjD,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACtE,MAAM,QAAQ,CAAC,aAAa,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QAClD,IAAI,KAAK,CAAC,KAAK;YACX,MAAM,QAAQ,CAAC,UAAU,CACrB;gBACI,YAAY,EAAE,KAAK,CAAC,KAAK,CAAC,gBAAgB;gBAC1C,UAAU,EAAE,KAAK,CAAC,KAAK,CAAC,UAAU;gBAClC,GAAG,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG;aACvB,EACD,EAAE,MAAM,EAAE,CACb,CAAC;QACN,MAAM,QAAQ,CAAC,mBAAmB,CAC9B;YACI,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,cAAc,EAAE,KAAK,CAAC,cAAc;SACvC,EACD,MAAM,CACT,CAAC;QACF,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC;IACxC,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,KAA2B,EAAE,MAAoB;QAC7D,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QAC5C,IAAI,MAA6B,CAAC;QAClC,IAAI,CAAC;YACD,MAAM,GAAG,QAAQ,CAAC,cAAc,CAC5B;gBACI,aAAa,EAAE,KAAK,CAAC,aAAa;gBAClC,OAAO,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC;gBACvC,WAAW,EAAE,KAAK,CAAC,WAAW;aACjC,EACD,MAAM,CACT,CAAC;QACN,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,MAAM,IAAI,WAAW,CACjB,sBAAsB,EACtB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,+BAA+B,CAC3E,CAAC;QACN,CAAC;QACD,OAAO,IAAI,qBAAqB,CAAC,MAAM,CAAC,CAAC;IAC7C,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,aAAqB;QACnC,MAAM,CAAC,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,aAAa,CAAC,aAAa,CAAC,CAAC;IACpE,CAAC;IAEO,KAAK,CAAC,aAAa;QACvB,IAAI,QAAyB,CAAC;QAC9B,IAAI,CAAC;YACD,QAAQ,GAAG,CAAC,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAoB,CAAC;QAC1D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,MAAM,IAAI,WAAW,CACjB,sBAAsB,EACtB,KAAK,YAAY,KAAK;gBAClB,CAAC,CAAC,KAAK,CAAC,OAAO;gBACf,CAAC,CAAC,4CAA4C,CACrD,CAAC;QACN,CAAC;QACD,IAAI,QAAQ,CAAC,QAAQ,KAAK,OAAO;YAC7B,MAAM,IAAI,WAAW,CACjB,sBAAsB,EACtB,oDAAoD,CACvD,CAAC;QACN,OAAO,QAAQ,CAAC;IACpB,CAAC;CACJ"}

package/packages/happy2-server/dist/modules/plugin/secrets.d.ts

@@ -0,0 +1,17 @@
+export interface PluginSecretContext {
+    installationId: string;
+    key: string;
+}
+export interface PluginSecretProtector {
+    protect(secret: string, context: PluginSecretContext): Promise<string>;
+    reveal(ciphertext: string, context: PluginSecretContext): Promise<string>;
+}
+/** Authenticated envelope dedicated to recoverable plugin environment variables. */
+export declare class AesGcmPluginSecretProtector implements PluginSecretProtector {
+    private readonly key;
+    constructor(key: Uint8Array);
+    static fromBase64(value: string): AesGcmPluginSecretProtector;
+    protect(secret: string, context: PluginSecretContext): Promise<string>;
+    reveal(envelope: string, context: PluginSecretContext): Promise<string>;
+}
+//# sourceMappingURL=secrets.d.ts.map

package/packages/happy2-server/dist/modules/plugin/secrets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.d.ts","sourceRoot":"","sources":["../../../sources/modules/plugin/secrets.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,mBAAmB;IAChC,cAAc,EAAE,MAAM,CAAC;IACvB,GAAG,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,qBAAqB;IAClC,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACvE,MAAM,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CAC7E;AAED,oFAAoF;AACpF,qBAAa,2BAA4B,YAAW,qBAAqB;IACrE,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAS;IAE7B,YAAY,GAAG,EAAE,UAAU,EAG1B;IAED,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,2BAA2B,CAG5D;IAEK,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,MAAM,CAAC,CAQ3E;IAEK,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,MAAM,CAAC,CAmB5E;CACJ"}

package/packages/happy2-server/dist/modules/plugin/secrets.js

@@ -0,0 +1,56 @@
+import { createCipheriv, createDecipheriv, randomBytes } from "node:crypto";
+const CIPHER = "aes-256-gcm";
+const CONTEXT = Buffer.from("happy2:plugin-variable:v1", "utf8");
+/** Authenticated envelope dedicated to recoverable plugin environment variables. */
+export class AesGcmPluginSecretProtector {
+    key;
+    constructor(key) {
+        if (key.byteLength !== 32)
+            throw new TypeError("Plugin secret key must be 32 bytes");
+        this.key = Buffer.from(key);
+    }
+    static fromBase64(value) {
+        if (!value)
+            throw new TypeError("Plugin secret key is required");
+        return new AesGcmPluginSecretProtector(Buffer.from(value, "base64url"));
+    }
+    async protect(secret, context) {
+        if (!secret)
+            throw new TypeError("Plugin secret must not be empty");
+        const nonce = randomBytes(12);
+        const cipher = createCipheriv(CIPHER, this.key, nonce);
+        cipher.setAAD(aad(context));
+        const ciphertext = Buffer.concat([cipher.update(secret, "utf8"), cipher.final()]);
+        const tag = cipher.getAuthTag();
+        return `v1.${nonce.toString("base64url")}.${ciphertext.toString("base64url")}.${tag.toString("base64url")}`;
+    }
+    async reveal(envelope, context) {
+        const [version, nonceValue, ciphertextValue, tagValue, unexpected] = envelope.split(".");
+        if (version !== "v1" || !nonceValue || !ciphertextValue || !tagValue || unexpected)
+            throw new Error("Invalid plugin secret envelope");
+        try {
+            const decipher = createDecipheriv(CIPHER, this.key, Buffer.from(nonceValue, "base64url"));
+            decipher.setAAD(aad(context));
+            decipher.setAuthTag(Buffer.from(tagValue, "base64url"));
+            return Buffer.concat([
+                decipher.update(Buffer.from(ciphertextValue, "base64url")),
+                decipher.final(),
+            ]).toString("utf8");
+        }
+        catch {
+            throw new Error("Plugin secret could not be authenticated");
+        }
+    }
+}
+function aad(context) {
+    if (!context.installationId || !context.key)
+        throw new TypeError("Plugin secret context is required");
+    return Buffer.concat([
+        CONTEXT,
+        Buffer.from("\0", "utf8"),
+        Buffer.from(context.installationId, "utf8"),
+        Buffer.from("\0", "utf8"),
+        Buffer.from(context.key, "utf8"),
+    ]);
+}
+//# sourceMappingURL=secrets.js.map

package/packages/happy2-server/dist/modules/plugin/secrets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.js","sourceRoot":"","sources":["../../../sources/modules/plugin/secrets.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE5E,MAAM,MAAM,GAAG,aAAa,CAAC;AAC7B,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,2BAA2B,EAAE,MAAM,CAAC,CAAC;AAYjE,oFAAoF;AACpF,MAAM,OAAO,2BAA2B;IACnB,GAAG,CAAS;IAE7B,YAAY,GAAe;QACvB,IAAI,GAAG,CAAC,UAAU,KAAK,EAAE;YAAE,MAAM,IAAI,SAAS,CAAC,oCAAoC,CAAC,CAAC;QACrF,IAAI,CAAC,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChC,CAAC;IAED,MAAM,CAAC,UAAU,CAAC,KAAa;QAC3B,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,SAAS,CAAC,+BAA+B,CAAC,CAAC;QACjE,OAAO,IAAI,2BAA2B,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,CAAC;IAC5E,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,MAAc,EAAE,OAA4B;QACtD,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,SAAS,CAAC,iCAAiC,CAAC,CAAC;QACpE,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;QAC9B,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACvD,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;QAC5B,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAClF,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QAChC,OAAO,MAAM,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;IAChH,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,QAAgB,EAAE,OAA4B;QACvD,MAAM,CAAC,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,QAAQ,EAAE,UAAU,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACzF,IAAI,OAAO,KAAK,IAAI,IAAI,CAAC,UAAU,IAAI,CAAC,eAAe,IAAI,CAAC,QAAQ,IAAI,UAAU;YAC9E,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QACtD,IAAI,CAAC;YACD,MAAM,QAAQ,GAAG,gBAAgB,CAC7B,MAAM,EACN,IAAI,CAAC,GAAG,EACR,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CACvC,CAAC;YACF,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;YAC9B,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC;YACxD,OAAO,MAAM,CAAC,MAAM,CAAC;gBACjB,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC;gBAC1D,QAAQ,CAAC,KAAK,EAAE;aACnB,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACxB,CAAC;QAAC,MAAM,CAAC;YACL,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAChE,CAAC;IACL,CAAC;CACJ;AAED,SAAS,GAAG,CAAC,OAA4B;IACrC,IAAI,CAAC,OAAO,CAAC,cAAc,IAAI,CAAC,OAAO,CAAC,GAAG;QACvC,MAAM,IAAI,SAAS,CAAC,mCAAmC,CAAC,CAAC;IAC7D,OAAO,MAAM,CAAC,MAAM,CAAC;QACjB,OAAO;QACP,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC;QACzB,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,MAAM,CAAC;QAC3C,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC;QACzB,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC;KACnC,CAAC,CAAC;AACP,CAAC"}

package/packages/happy2-server/dist/modules/plugin/secrets.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=secrets.test.d.ts.map

package/packages/happy2-server/dist/modules/plugin/secrets.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.test.d.ts","sourceRoot":"","sources":["../../../sources/modules/plugin/secrets.test.ts"],"names":[],"mappings":""}

package/packages/happy2-server/dist/modules/plugin/secrets.test.js

@@ -0,0 +1,14 @@
+import { randomBytes } from "node:crypto";
+import { describe, expect, it } from "vitest";
+import { AesGcmPluginSecretProtector } from "./secrets.js";
+describe("AesGcmPluginSecretProtector", () => {
+    it("binds ciphertext to its installation and variable key", async () => {
+        const protector = new AesGcmPluginSecretProtector(randomBytes(32));
+        const context = { installationId: "cplugin", key: "API_TOKEN" };
+        const encrypted = await protector.protect("secret-value", context);
+        await expect(protector.reveal(encrypted, context)).resolves.toBe("secret-value");
+        await expect(protector.reveal(encrypted, { ...context, key: "OTHER_TOKEN" })).rejects.toThrow("could not be authenticated");
+        expect(encrypted).not.toContain("secret-value");
+    });
+});
+//# sourceMappingURL=secrets.test.js.map

package/packages/happy2-server/dist/modules/plugin/secrets.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.test.js","sourceRoot":"","sources":["../../../sources/modules/plugin/secrets.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,2BAA2B,EAAE,MAAM,cAAc,CAAC;AAE3D,QAAQ,CAAC,6BAA6B,EAAE,GAAG,EAAE;IACzC,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;QACnE,MAAM,SAAS,GAAG,IAAI,2BAA2B,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC;QACnE,MAAM,OAAO,GAAG,EAAE,cAAc,EAAE,SAAS,EAAE,GAAG,EAAE,WAAW,EAAE,CAAC;QAChE,MAAM,SAAS,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;QAEnE,MAAM,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QACjF,MAAM,MAAM,CACR,SAAS,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,GAAG,OAAO,EAAE,GAAG,EAAE,aAAa,EAAE,CAAC,CAClE,CAAC,OAAO,CAAC,OAAO,CAAC,4BAA4B,CAAC,CAAC;QAChD,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC"}

package/packages/happy2-server/dist/modules/plugin/service.d.ts

@@ -0,0 +1,52 @@
+import type { Transport } from "@modelcontextprotocol/sdk/shared/transport.js";
+import type { DrizzleExecutor } from "../drizzle.js";
+import type { PubSub } from "../realtime/index.js";
+import type { WebhookUrlPolicy } from "../integrations/ssrf.js";
+import type { WebhookTransport } from "../integrations/types.js";
+import type { PluginCatalog } from "./catalog.js";
+import type { PluginPackageStore } from "./packageStore.js";
+import type { PluginMcpRuntime } from "./runtime.js";
+import type { PluginSecretProtector } from "./secrets.js";
+import { type PluginFunctionDefinition, type PluginFunctionResult, type PluginInstallationSummary } from "./types.js";
+/** Coordinates durable plugin installs with asynchronous container preparation, MCP health probes, restart recovery, and local connection creation. */
+export declare class PluginService {
+    private readonly executor;
+    private readonly pubsub;
+    private readonly catalog;
+    private readonly packages;
+    private readonly secrets;
+    private readonly runtime;
+    private readonly urlPolicy;
+    private readonly remoteTransport;
+    private readonly onError;
+    private readonly activations;
+    private readonly localContainers;
+    private closed;
+    constructor(executor: DrizzleExecutor, pubsub: PubSub, catalog: PluginCatalog, packages: PluginPackageStore, secrets: PluginSecretProtector, runtime: PluginMcpRuntime, urlPolicy: WebhookUrlPolicy, remoteTransport: WebhookTransport, onError: (error: unknown) => void);
+    start(): Promise<void>;
+    install(input: {
+        actorUserId: string;
+        shortName: string;
+        variables: Readonly<Record<string, string>>;
+        containerImageId?: string;
+    }): Promise<PluginInstallationSummary>;
+    image(actorUserId: string, pluginId: string): Promise<{
+        body: Buffer;
+        contentType: string;
+        checksumSha256: string;
+    }>;
+    openLocal(installationId: string): Promise<Transport>;
+    listFunctions(signal?: AbortSignal): Promise<readonly PluginFunctionDefinition[]>;
+    private listFunctionsWithSignal;
+    callFunction(functionName: string, args: unknown, signal?: AbortSignal): Promise<PluginFunctionResult>;
+    private callFunctionWithSignal;
+    close(): Promise<void>;
+    private activate;
+    private withClient;
+    private runActivation;
+    private probeLocal;
+    private probeRemote;
+    private status;
+    private publish;
+}
+//# sourceMappingURL=service.d.ts.map

package/packages/happy2-server/dist/modules/plugin/service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../../sources/modules/plugin/service.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,+CAA+C,CAAC;AAE/E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAErD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAEnD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAChE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAUjE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAC5D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AACrD,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AAE1D,OAAO,EAEH,KAAK,wBAAwB,EAC7B,KAAK,oBAAoB,EACzB,KAAK,yBAAyB,EAEjC,MAAM,YAAY,CAAC;AAOpB,uJAAuJ;AACvJ,qBAAa,aAAa;IASlB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,eAAe;IAChC,OAAO,CAAC,QAAQ,CAAC,OAAO;IAhB5B,OAAO,CAAC,QAAQ,CAAC,WAAW,CAGxB;IACJ,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAqB;IACrD,OAAO,CAAC,MAAM,CAAS;IAEvB,YACqB,QAAQ,EAAE,eAAe,EACzB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,aAAa,EACtB,QAAQ,EAAE,kBAAkB,EAC5B,OAAO,EAAE,qBAAqB,EAC9B,OAAO,EAAE,gBAAgB,EACzB,SAAS,EAAE,gBAAgB,EAC3B,eAAe,EAAE,gBAAgB,EACjC,OAAO,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,EAClD;IAEE,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAkB3B;IAEK,OAAO,CAAC,KAAK,EAAE;QACjB,WAAW,EAAE,MAAM,CAAC;QACpB,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;QAC5C,gBAAgB,CAAC,EAAE,MAAM,CAAC;KAC7B,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAgCrC;IAEK,KAAK,CACP,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,GACjB,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,MAAM,CAAA;KAAE,CAAC,CAmBxE;IAEK,SAAS,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAc1D;IAEK,aAAa,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,SAAS,wBAAwB,EAAE,CAAC,CAOtF;YAEa,uBAAuB;IA6D/B,YAAY,CACd,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,OAAO,EACb,MAAM,CAAC,EAAE,WAAW,GACrB,OAAO,CAAC,oBAAoB,CAAC,CAmB/B;YAEa,sBAAsB;IA6D9B,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAU3B;IAED,OAAO,CAAC,QAAQ;YASF,UAAU;YAyCV,aAAa;YAwFb,UAAU;YA2BV,WAAW;YA2DX,MAAM;IAiBpB,OAAO,CAAC,OAAO;CAGlB"}