happy2 0.0.9 → 0.0.12

package/packages/happy2-server/dist/modules/plugin/pluginMcpToolsReplace.js

@@ -0,0 +1,71 @@
+import { eq } from "drizzle-orm";
+import { withTransaction } from "../drizzle.js";
+import { areaHint } from "../chat/areaHint.js";
+import { pluginInstallations, pluginMcpTools } from "../schema.js";
+import { syncEventInsert } from "../sync/syncEventInsert.js";
+import { syncSequenceNext } from "../sync/syncSequenceNext.js";
+import { MAX_PLUGIN_MCP_TOOLS, PluginError } from "./types.js";
+const MAX_TOOL_JSON_BYTES = 1024 * 1024;
+/**
+ * Atomically replaces one installation's pluginMcpTools rows and pluginInstallations sync timestamp after a successful runtime discovery.
+ * The complete replacement and matching plugin sync event share one transaction so readers never observe a partial tool set.
+ */
+export async function pluginMcpToolsReplace(executor, installationId, tools) {
+    if (tools.length > MAX_PLUGIN_MCP_TOOLS)
+        throw new PluginError("broken_configuration", "Plugin MCP exposes too many tools");
+    const names = new Set();
+    const rows = tools.map((tool) => {
+        if (!tool.name || tool.name.length > 256 || names.has(tool.name))
+            throw new PluginError("broken_configuration", `Plugin MCP tool name is invalid or duplicated: ${tool.name}`);
+        names.add(tool.name);
+        return {
+            installationId,
+            name: tool.name,
+            title: boundedOptional(tool.title, "title", 512),
+            description: boundedOptional(tool.description, "description", 16_384),
+            inputSchemaJson: boundedJson(tool.inputSchema, "input schema"),
+            outputSchemaJson: tool.outputSchema
+                ? boundedJson(tool.outputSchema, "output schema")
+                : null,
+            annotationsJson: tool.annotations ? boundedJson(tool.annotations, "annotations") : null,
+        };
+    });
+    return withTransaction(executor, async (tx) => {
+        const [installation] = await tx
+            .select({ id: pluginInstallations.id })
+            .from(pluginInstallations)
+            .where(eq(pluginInstallations.id, installationId))
+            .limit(1);
+        if (!installation)
+            throw new PluginError("not_found", "Plugin installation was not found");
+        const syncedAt = new Date().toISOString();
+        await tx.delete(pluginMcpTools).where(eq(pluginMcpTools.installationId, installationId));
+        if (rows.length)
+            await tx.insert(pluginMcpTools).values(rows.map((row) => ({ ...row, syncedAt })));
+        const sequence = await syncSequenceNext(tx);
+        await tx
+            .update(pluginInstallations)
+            .set({ mcpToolsSyncedAt: syncedAt, syncSequence: sequence, updatedAt: syncedAt })
+            .where(eq(pluginInstallations.id, installationId));
+        await syncEventInsert(tx, {
+            sequence,
+            kind: "plugin.mcp_tools_synced",
+            entityId: installationId,
+        });
+        return areaHint(sequence, "plugins");
+    });
+}
+function boundedOptional(value, name, maximum) {
+    if (value === undefined)
+        return null;
+    if (value.length > maximum || value.includes("\u0000"))
+        throw new PluginError("broken_configuration", `Plugin MCP tool ${name} is too large`);
+    return value;
+}
+function boundedJson(value, name) {
+    const json = JSON.stringify(value);
+    if (Buffer.byteLength(json, "utf8") > MAX_TOOL_JSON_BYTES)
+        throw new PluginError("broken_configuration", `Plugin MCP tool ${name} is too large`);
+    return json;
+}
+//# sourceMappingURL=pluginMcpToolsReplace.js.map

package/packages/happy2-server/dist/modules/plugin/pluginMcpToolsReplace.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pluginMcpToolsReplace.js","sourceRoot":"","sources":["../../../sources/modules/plugin/pluginMcpToolsReplace.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AAEjC,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAE/C,OAAO,EAAE,mBAAmB,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACnE,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,EAAE,oBAAoB,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAW/D,MAAM,mBAAmB,GAAG,IAAI,GAAG,IAAI,CAAC;AAExC;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACvC,QAAyB,EACzB,cAAsB,EACtB,KAAoC;IAEpC,IAAI,KAAK,CAAC,MAAM,GAAG,oBAAoB;QACnC,MAAM,IAAI,WAAW,CAAC,sBAAsB,EAAE,mCAAmC,CAAC,CAAC;IACvF,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QAC5B,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;YAC5D,MAAM,IAAI,WAAW,CACjB,sBAAsB,EACtB,kDAAkD,IAAI,CAAC,IAAI,EAAE,CAChE,CAAC;QACN,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrB,OAAO;YACH,cAAc;YACd,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,KAAK,EAAE,eAAe,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC;YAChD,WAAW,EAAE,eAAe,CAAC,IAAI,CAAC,WAAW,EAAE,aAAa,EAAE,MAAM,CAAC;YACrE,eAAe,EAAE,WAAW,CAAC,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC;YAC9D,gBAAgB,EAAE,IAAI,CAAC,YAAY;gBAC/B,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,YAAY,EAAE,eAAe,CAAC;gBACjD,CAAC,CAAC,IAAI;YACV,eAAe,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI;SAC1F,CAAC;IACN,CAAC,CAAC,CAAC;IACH,OAAO,eAAe,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;QAC1C,MAAM,CAAC,YAAY,CAAC,GAAG,MAAM,EAAE;aAC1B,MAAM,CAAC,EAAE,EAAE,EAAE,mBAAmB,CAAC,EAAE,EAAE,CAAC;aACtC,IAAI,CAAC,mBAAmB,CAAC;aACzB,KAAK,CAAC,EAAE,CAAC,mBAAmB,CAAC,EAAE,EAAE,cAAc,CAAC,CAAC;aACjD,KAAK,CAAC,CAAC,CAAC,CAAC;QACd,IAAI,CAAC,YAAY;YAAE,MAAM,IAAI,WAAW,CAAC,WAAW,EAAE,mCAAmC,CAAC,CAAC;QAC3F,MAAM,QAAQ,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC1C,MAAM,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,cAAc,CAAC,cAAc,EAAE,cAAc,CAAC,CAAC,CAAC;QACzF,IAAI,IAAI,CAAC,MAAM;YACX,MAAM,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC;QACtF,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,EAAE,CAAC,CAAC;QAC5C,MAAM,EAAE;aACH,MAAM,CAAC,mBAAmB,CAAC;aAC3B,GAAG,CAAC,EAAE,gBAAgB,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;aAChF,KAAK,CAAC,EAAE,CAAC,mBAAmB,CAAC,EAAE,EAAE,cAAc,CAAC,CAAC,CAAC;QACvD,MAAM,eAAe,CAAC,EAAE,EAAE;YACtB,QAAQ;YACR,IAAI,EAAE,yBAAyB;YAC/B,QAAQ,EAAE,cAAc;SAC3B,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;AACP,CAAC;AAED,SAAS,eAAe,CAAC,KAAyB,EAAE,IAAY,EAAE,OAAe;IAC7E,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACrC,IAAI,KAAK,CAAC,MAAM,GAAG,OAAO,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAClD,MAAM,IAAI,WAAW,CAAC,sBAAsB,EAAE,mBAAmB,IAAI,eAAe,CAAC,CAAC;IAC1F,OAAO,KAAK,CAAC;AACjB,CAAC;AAED,SAAS,WAAW,CAAC,KAA8B,EAAE,IAAY;IAC7D,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACnC,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,mBAAmB;QACrD,MAAM,IAAI,WAAW,CAAC,sBAAsB,EAAE,mBAAmB,IAAI,eAAe,CAAC,CAAC;IAC1F,OAAO,IAAI,CAAC;AAChB,CAAC"}

package/packages/happy2-server/dist/modules/plugin/pluginRemoveMissingBuiltins.d.ts

@@ -0,0 +1,14 @@
+import type { DrizzleExecutor } from "../drizzle.js";
+import type { MutationHint } from "../chat/types.js";
+/**
+ * Removes system plugins whose built-in source is no longer present, including their pluginInstallations and cascade-owned pluginInstallationVariables.
+ * The transaction records syncEvents for the deleted plugin identities so startup pruning is durable and clients can reconcile the plugins area.
+ */
+export declare function pluginRemoveMissingBuiltins(executor: DrizzleExecutor, availableSourceReferences: readonly string[]): Promise<{
+    hint?: MutationHint;
+    plugins: Array<{
+        pluginId: string;
+        containerNames: string[];
+    }>;
+}>;
+//# sourceMappingURL=pluginRemoveMissingBuiltins.d.ts.map

package/packages/happy2-server/dist/modules/plugin/pluginRemoveMissingBuiltins.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pluginRemoveMissingBuiltins.d.ts","sourceRoot":"","sources":["../../../sources/modules/plugin/pluginRemoveMissingBuiltins.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAGrD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAKrD;;;GAGG;AACH,wBAAsB,2BAA2B,CAC7C,QAAQ,EAAE,eAAe,EACzB,yBAAyB,EAAE,SAAS,MAAM,EAAE,GAC7C,OAAO,CAAC;IACP,IAAI,CAAC,EAAE,YAAY,CAAC;IACpB,OAAO,EAAE,KAAK,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAC;CAClE,CAAC,CAwCD"}

package/packages/happy2-server/dist/modules/plugin/pluginRemoveMissingBuiltins.js

@@ -0,0 +1,51 @@
+import { eq, inArray } from "drizzle-orm";
+import { withTransaction } from "../drizzle.js";
+import { areaHint } from "../chat/areaHint.js";
+import { pluginInstallations, plugins } from "../schema.js";
+import { syncEventInsert } from "../sync/syncEventInsert.js";
+import { syncSequenceNext } from "../sync/syncSequenceNext.js";
+/**
+ * Removes system plugins whose built-in source is no longer present, including their pluginInstallations and cascade-owned pluginInstallationVariables.
+ * The transaction records syncEvents for the deleted plugin identities so startup pruning is durable and clients can reconcile the plugins area.
+ */
+export async function pluginRemoveMissingBuiltins(executor, availableSourceReferences) {
+    return withTransaction(executor, async (tx) => {
+        const available = new Set(availableSourceReferences);
+        const builtins = await tx
+            .select({ id: plugins.id, sourceReference: plugins.sourceReference })
+            .from(plugins)
+            .where(eq(plugins.sourceKind, "builtin"));
+        const missing = builtins.filter(({ sourceReference }) => !available.has(sourceReference));
+        if (missing.length === 0)
+            return { plugins: [] };
+        const pluginIds = missing.map(({ id }) => id);
+        const installations = await tx
+            .select({
+            pluginId: pluginInstallations.pluginId,
+            containerName: pluginInstallations.containerName,
+        })
+            .from(pluginInstallations)
+            .where(inArray(pluginInstallations.pluginId, pluginIds));
+        await tx
+            .delete(pluginInstallations)
+            .where(inArray(pluginInstallations.pluginId, pluginIds));
+        await tx.delete(plugins).where(inArray(plugins.id, pluginIds));
+        const sequence = await syncSequenceNext(tx);
+        for (const { id } of missing)
+            await syncEventInsert(tx, {
+                sequence,
+                kind: "plugin.builtin_removed",
+                entityId: id,
+            });
+        return {
+            hint: areaHint(sequence, "plugins"),
+            plugins: missing.map(({ id }) => ({
+                pluginId: id,
+                containerNames: installations
+                    .filter(({ pluginId, containerName }) => pluginId === id && containerName)
+                    .map(({ containerName }) => containerName),
+            })),
+        };
+    });
+}
+//# sourceMappingURL=pluginRemoveMissingBuiltins.js.map

package/packages/happy2-server/dist/modules/plugin/pluginRemoveMissingBuiltins.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pluginRemoveMissingBuiltins.js","sourceRoot":"","sources":["../../../sources/modules/plugin/pluginRemoveMissingBuiltins.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAE1C,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAE/C,OAAO,EAAE,mBAAmB,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAE/D;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC7C,QAAyB,EACzB,yBAA4C;IAK5C,OAAO,eAAe,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;QAC1C,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,yBAAyB,CAAC,CAAC;QACrD,MAAM,QAAQ,GAAG,MAAM,EAAE;aACpB,MAAM,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,eAAe,EAAE,OAAO,CAAC,eAAe,EAAE,CAAC;aACpE,IAAI,CAAC,OAAO,CAAC;aACb,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC;QAC9C,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,eAAe,EAAE,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC;QAC1F,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;QAEjD,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;QAC9C,MAAM,aAAa,GAAG,MAAM,EAAE;aACzB,MAAM,CAAC;YACJ,QAAQ,EAAE,mBAAmB,CAAC,QAAQ;YACtC,aAAa,EAAE,mBAAmB,CAAC,aAAa;SACnD,CAAC;aACD,IAAI,CAAC,mBAAmB,CAAC;aACzB,KAAK,CAAC,OAAO,CAAC,mBAAmB,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC;QAC7D,MAAM,EAAE;aACH,MAAM,CAAC,mBAAmB,CAAC;aAC3B,KAAK,CAAC,OAAO,CAAC,mBAAmB,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC;QAC7D,MAAM,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC;QAE/D,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,EAAE,CAAC,CAAC;QAC5C,KAAK,MAAM,EAAE,EAAE,EAAE,IAAI,OAAO;YACxB,MAAM,eAAe,CAAC,EAAE,EAAE;gBACtB,QAAQ;gBACR,IAAI,EAAE,wBAAwB;gBAC9B,QAAQ,EAAE,EAAE;aACf,CAAC,CAAC;QACP,OAAO;YACH,IAAI,EAAE,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAC;YACnC,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;gBAC9B,QAAQ,EAAE,EAAE;gBACZ,cAAc,EAAE,aAAa;qBACxB,MAAM,CAAC,CAAC,EAAE,QAAQ,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC,QAAQ,KAAK,EAAE,IAAI,aAAa,CAAC;qBACzE,GAAG,CAAC,CAAC,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC,aAAc,CAAC;aAClD,CAAC,CAAC;SACN,CAAC;IACN,CAAC,CAAC,CAAC;AACP,CAAC"}

package/packages/happy2-server/dist/modules/plugin/runtime.d.ts

@@ -0,0 +1,56 @@
+import type { Transport } from "@modelcontextprotocol/sdk/shared/transport.js";
+import type { AgentSandboxRuntimeResolver } from "../sandbox/index.js";
+export interface PluginLocalPrepareInput {
+    build?: {
+        contextDirectory: string;
+        dockerfile: string;
+        tag: string;
+    };
+    containerName: string;
+    imageTag: string;
+    installationId: string;
+    containerInstanceId: string;
+    existingContainerInstanceId?: string;
+}
+export interface PluginLocalOpenInput {
+    args: readonly string[];
+    command: string;
+    containerName: string;
+    environment: Readonly<Record<string, string>>;
+}
+export interface PluginLocalCommandHandle {
+    wait: Promise<{
+        exitCode: number | null;
+        signal: NodeJS.Signals | null;
+    }>;
+    close(): void;
+}
+export interface PluginMcpRuntime {
+    prepareLocal(input: PluginLocalPrepareInput, signal?: AbortSignal): Promise<{
+        containerInstanceId: string;
+        imageTag: string;
+        reused: boolean;
+    }>;
+    startLocalCommand(input: PluginLocalOpenInput, signal?: AbortSignal): Promise<PluginLocalCommandHandle>;
+    monitorLocalCommand(containerName: string, signal?: AbortSignal): Promise<PluginLocalCommandHandle>;
+    openLocal(input: PluginLocalOpenInput, signal?: AbortSignal): Promise<Transport>;
+    isLocalRunning?(containerName: string, installationId: string, containerInstanceId: string): Promise<boolean>;
+    removeLocal(containerName: string): Promise<void>;
+}
+/** Runs stdio MCP packages in dedicated containers owned by the selected local sandbox provider. */
+export declare class SandboxPluginMcpRuntime implements PluginMcpRuntime {
+    private readonly provider;
+    constructor(provider: AgentSandboxRuntimeResolver);
+    prepareLocal(input: PluginLocalPrepareInput, signal?: AbortSignal): Promise<{
+        containerInstanceId: string;
+        imageTag: string;
+        reused: boolean;
+    }>;
+    openLocal(input: PluginLocalOpenInput, signal?: AbortSignal): Promise<Transport>;
+    startLocalCommand(input: PluginLocalOpenInput, signal?: AbortSignal): Promise<PluginLocalCommandHandle>;
+    monitorLocalCommand(containerName: string, signal?: AbortSignal): Promise<PluginLocalCommandHandle>;
+    removeLocal(containerName: string): Promise<void>;
+    isLocalRunning(containerName: string, installationId: string, containerInstanceId: string): Promise<boolean>;
+    private localProvider;
+}
+//# sourceMappingURL=runtime.d.ts.map

package/packages/happy2-server/dist/modules/plugin/runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../../sources/modules/plugin/runtime.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,+CAA+C,CAAC;AAC/E,OAAO,KAAK,EACR,2BAA2B,EAG9B,MAAM,qBAAqB,CAAC;AAQ7B,MAAM,WAAW,uBAAuB;IACpC,KAAK,CAAC,EAAE;QAAE,gBAAgB,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;IACtE,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;IACvB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,2BAA2B,CAAC,EAAE,MAAM,CAAC;CACxC;AAED,MAAM,WAAW,oBAAoB;IACjC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACjD;AAED,MAAM,WAAW,wBAAwB;IACrC,IAAI,EAAE,OAAO,CAAC;QAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC,OAAO,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;IAC1E,KAAK,IAAI,IAAI,CAAC;CACjB;AAED,MAAM,WAAW,gBAAgB;IAC7B,YAAY,CACR,KAAK,EAAE,uBAAuB,EAC9B,MAAM,CAAC,EAAE,WAAW,GACrB,OAAO,CAAC;QAAE,mBAAmB,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IAC/E,iBAAiB,CACb,KAAK,EAAE,oBAAoB,EAC3B,MAAM,CAAC,EAAE,WAAW,GACrB,OAAO,CAAC,wBAAwB,CAAC,CAAC;IACrC,mBAAmB,CACf,aAAa,EAAE,MAAM,EACrB,MAAM,CAAC,EAAE,WAAW,GACrB,OAAO,CAAC,wBAAwB,CAAC,CAAC;IACrC,SAAS,CAAC,KAAK,EAAE,oBAAoB,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IACjF,cAAc,CAAC,CACX,aAAa,EAAE,MAAM,EACrB,cAAc,EAAE,MAAM,EACtB,mBAAmB,EAAE,MAAM,GAC5B,OAAO,CAAC,OAAO,CAAC,CAAC;IACpB,WAAW,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACrD;AAED,oGAAoG;AACpG,qBAAa,uBAAwB,YAAW,gBAAgB;IAChD,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAArC,YAA6B,QAAQ,EAAE,2BAA2B,EAAI;IAEhE,YAAY,CACd,KAAK,EAAE,uBAAuB,EAC9B,MAAM,CAAC,EAAE,WAAW,GACrB,OAAO,CAAC;QAAE,mBAAmB,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,OAAO,CAAA;KAAE,CAAC,CA4C7E;IAEK,SAAS,CAAC,KAAK,EAAE,oBAAoB,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,SAAS,CAAC,CAmBrF;IAEK,iBAAiB,CACnB,KAAK,EAAE,oBAAoB,EAC3B,MAAM,CAAC,EAAE,WAAW,GACrB,OAAO,CAAC,wBAAwB,CAAC,CAuBnC;IAEK,mBAAmB,CACrB,aAAa,EAAE,MAAM,EACrB,MAAM,CAAC,EAAE,WAAW,GACrB,OAAO,CAAC,wBAAwB,CAAC,CAiBnC;IAEK,WAAW,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAEtD;IAEK,cAAc,CAChB,aAAa,EAAE,MAAM,EACrB,cAAc,EAAE,MAAM,EACtB,mBAAmB,EAAE,MAAM,GAC5B,OAAO,CAAC,OAAO,CAAC,CAOlB;YAEa,aAAa;CAmB9B"}

package/packages/happy2-server/dist/modules/plugin/runtime.js

@@ -0,0 +1,147 @@
+import { PluginError } from "./types.js";
+import { NdjsonStreamTransport } from "./utils/ndjsonStreamTransport.js";
+const COMMAND_MONITOR_STARTUP_CHECKS = 20;
+const COMMAND_MONITOR_STARTUP_INTERVAL_MS = 50;
+const COMMAND_MONITOR_STEADY_INTERVAL_MS = 5_000;
+/** Runs stdio MCP packages in dedicated containers owned by the selected local sandbox provider. */
+export class SandboxPluginMcpRuntime {
+    provider;
+    constructor(provider) {
+        this.provider = provider;
+    }
+    async prepareLocal(input, signal) {
+        const provider = await this.localProvider();
+        if (!provider.createPluginSandbox)
+            throw new PluginError("broken_configuration", `${provider.displayName} does not support plugin containers`);
+        if (input.build && input.build.tag !== input.imageTag)
+            throw new Error("Plugin build and runtime image tags must match");
+        const existing = await provider.inspectPluginSandbox?.(input.containerName, signal);
+        if (existing?.running &&
+            existing.installationId === input.installationId &&
+            existing.containerInstanceId === input.existingContainerInstanceId)
+            return {
+                containerInstanceId: existing.containerInstanceId,
+                imageTag: input.imageTag,
+                reused: true,
+            };
+        await provider.removeSandbox(input.containerName);
+        if (input.build)
+            await provider.buildImage({
+                buildContext: input.build.contextDirectory,
+                dockerfile: input.build.dockerfile,
+                tag: input.build.tag,
+            }, { signal });
+        await provider.createPluginSandbox({
+            containerName: input.containerName,
+            containerInstanceId: input.containerInstanceId,
+            imageTag: input.imageTag,
+            installationId: input.installationId,
+        }, signal);
+        return {
+            containerInstanceId: input.containerInstanceId,
+            imageTag: input.imageTag,
+            reused: false,
+        };
+    }
+    async openLocal(input, signal) {
+        const provider = await this.localProvider();
+        let handle;
+        try {
+            handle = provider.attachTerminal({
+                containerName: input.containerName,
+                command: [input.command, ...input.args],
+                environment: input.environment,
+            }, signal);
+        }
+        catch (error) {
+            throw new PluginError("broken_configuration", error instanceof Error ? error.message : "Plugin environment is invalid");
+        }
+        return new NdjsonStreamTransport(handle);
+    }
+    async startLocalCommand(input, signal) {
+        const provider = await this.localProvider();
+        if (!provider.startPluginCommand)
+            throw new PluginError("broken_configuration", `${provider.displayName} does not support persistent plugin commands`);
+        try {
+            await provider.startPluginCommand({
+                containerName: input.containerName,
+                command: [input.command, ...input.args],
+                environment: input.environment,
+            }, signal);
+            return await this.monitorLocalCommand(input.containerName, signal);
+        }
+        catch (error) {
+            throw new PluginError("broken_configuration", error instanceof Error ? error.message : "Plugin command could not start");
+        }
+    }
+    async monitorLocalCommand(containerName, signal) {
+        const provider = await this.localProvider();
+        if (!provider.isPluginCommandRunning)
+            throw new PluginError("broken_configuration", `${provider.displayName} cannot monitor persistent plugin commands`);
+        const controller = new AbortController();
+        const abort = () => controller.abort();
+        signal?.addEventListener("abort", abort, { once: true });
+        const wait = monitorPluginCommand(provider, containerName, controller.signal).finally(() => signal?.removeEventListener("abort", abort));
+        return {
+            wait,
+            close: () => controller.abort(),
+        };
+    }
+    async removeLocal(containerName) {
+        await (await this.localProvider()).removeSandbox(containerName);
+    }
+    async isLocalRunning(containerName, installationId, containerInstanceId) {
+        const state = await (await this.localProvider()).inspectPluginSandbox?.(containerName);
+        return Boolean(state?.running &&
+            state.installationId === installationId &&
+            state.containerInstanceId === containerInstanceId);
+    }
+    async localProvider() {
+        let provider;
+        try {
+            provider = (await this.provider());
+        }
+        catch (error) {
+            throw new PluginError("broken_configuration", error instanceof Error
+                ? error.message
+                : "A local sandbox provider is not configured");
+        }
+        if (provider.locality !== "local")
+            throw new PluginError("broken_configuration", "Container plugins require a local sandbox provider");
+        return provider;
+    }
+}
+async function monitorPluginCommand(provider, containerName, signal) {
+    let completedChecks = 0;
+    while (!signal.aborted) {
+        try {
+            if (!(await provider.isPluginCommandRunning(containerName, signal)))
+                return { exitCode: null, signal: null };
+        }
+        catch {
+            if (signal.aborted)
+                break;
+            // A temporary OCI daemon failure must not revoke a still-running incarnation.
+        }
+        completedChecks += 1;
+        await monitorDelay(signal, completedChecks < COMMAND_MONITOR_STARTUP_CHECKS
+            ? COMMAND_MONITOR_STARTUP_INTERVAL_MS
+            : COMMAND_MONITOR_STEADY_INTERVAL_MS);
+    }
+    return { exitCode: null, signal: "SIGTERM" };
+}
+function monitorDelay(signal, milliseconds) {
+    if (signal.aborted)
+        return Promise.resolve();
+    return new Promise((resolve) => {
+        const timeout = setTimeout(finish, milliseconds);
+        const abort = () => finish();
+        function finish() {
+            clearTimeout(timeout);
+            signal.removeEventListener("abort", abort);
+            resolve();
+        }
+        signal.addEventListener("abort", abort, { once: true });
+    });
+}
+//# sourceMappingURL=runtime.js.map

package/packages/happy2-server/dist/modules/plugin/runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.js","sourceRoot":"","sources":["../../../sources/modules/plugin/runtime.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,qBAAqB,EAAE,MAAM,kCAAkC,CAAC;AAEzE,MAAM,8BAA8B,GAAG,EAAE,CAAC;AAC1C,MAAM,mCAAmC,GAAG,EAAE,CAAC;AAC/C,MAAM,kCAAkC,GAAG,KAAK,CAAC;AA6CjD,oGAAoG;AACpG,MAAM,OAAO,uBAAuB;IACH,QAAQ;IAArC,YAA6B,QAAqC;wBAArC,QAAQ;IAAgC,CAAC;IAEtE,KAAK,CAAC,YAAY,CACd,KAA8B,EAC9B,MAAoB;QAEpB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QAC5C,IAAI,CAAC,QAAQ,CAAC,mBAAmB;YAC7B,MAAM,IAAI,WAAW,CACjB,sBAAsB,EACtB,GAAG,QAAQ,CAAC,WAAW,qCAAqC,CAC/D,CAAC;QACN,IAAI,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC,GAAG,KAAK,KAAK,CAAC,QAAQ;YACjD,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACtE,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,oBAAoB,EAAE,CAAC,KAAK,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;QACpF,IACI,QAAQ,EAAE,OAAO;YACjB,QAAQ,CAAC,cAAc,KAAK,KAAK,CAAC,cAAc;YAChD,QAAQ,CAAC,mBAAmB,KAAK,KAAK,CAAC,2BAA2B;YAElE,OAAO;gBACH,mBAAmB,EAAE,QAAQ,CAAC,mBAAmB;gBACjD,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,MAAM,EAAE,IAAI;aACf,CAAC;QACN,MAAM,QAAQ,CAAC,aAAa,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QAClD,IAAI,KAAK,CAAC,KAAK;YACX,MAAM,QAAQ,CAAC,UAAU,CACrB;gBACI,YAAY,EAAE,KAAK,CAAC,KAAK,CAAC,gBAAgB;gBAC1C,UAAU,EAAE,KAAK,CAAC,KAAK,CAAC,UAAU;gBAClC,GAAG,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG;aACvB,EACD,EAAE,MAAM,EAAE,CACb,CAAC;QACN,MAAM,QAAQ,CAAC,mBAAmB,CAC9B;YACI,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;YAC9C,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,cAAc,EAAE,KAAK,CAAC,cAAc;SACvC,EACD,MAAM,CACT,CAAC;QACF,OAAO;YACH,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;YAC9C,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,MAAM,EAAE,KAAK;SAChB,CAAC;IACN,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,KAA2B,EAAE,MAAoB;QAC7D,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QAC5C,IAAI,MAA6B,CAAC;QAClC,IAAI,CAAC;YACD,MAAM,GAAG,QAAQ,CAAC,cAAc,CAC5B;gBACI,aAAa,EAAE,KAAK,CAAC,aAAa;gBAClC,OAAO,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC;gBACvC,WAAW,EAAE,KAAK,CAAC,WAAW;aACjC,EACD,MAAM,CACT,CAAC;QACN,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,MAAM,IAAI,WAAW,CACjB,sBAAsB,EACtB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,+BAA+B,CAC3E,CAAC;QACN,CAAC;QACD,OAAO,IAAI,qBAAqB,CAAC,MAAM,CAAC,CAAC;IAC7C,CAAC;IAED,KAAK,CAAC,iBAAiB,CACnB,KAA2B,EAC3B,MAAoB;QAEpB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QAC5C,IAAI,CAAC,QAAQ,CAAC,kBAAkB;YAC5B,MAAM,IAAI,WAAW,CACjB,sBAAsB,EACtB,GAAG,QAAQ,CAAC,WAAW,8CAA8C,CACxE,CAAC;QACN,IAAI,CAAC;YACD,MAAM,QAAQ,CAAC,kBAAkB,CAC7B;gBACI,aAAa,EAAE,KAAK,CAAC,aAAa;gBAClC,OAAO,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC;gBACvC,WAAW,EAAE,KAAK,CAAC,WAAW;aACjC,EACD,MAAM,CACT,CAAC;YACF,OAAO,MAAM,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;QACvE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,MAAM,IAAI,WAAW,CACjB,sBAAsB,EACtB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,gCAAgC,CAC5E,CAAC;QACN,CAAC;IACL,CAAC;IAED,KAAK,CAAC,mBAAmB,CACrB,aAAqB,EACrB,MAAoB;QAEpB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QAC5C,IAAI,CAAC,QAAQ,CAAC,sBAAsB;YAChC,MAAM,IAAI,WAAW,CACjB,sBAAsB,EACtB,GAAG,QAAQ,CAAC,WAAW,4CAA4C,CACtE,CAAC;QACN,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QACvC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACzD,MAAM,IAAI,GAAG,oBAAoB,CAAC,QAAQ,EAAE,aAAa,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CACvF,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAC9C,CAAC;QACF,OAAO;YACH,IAAI;YACJ,KAAK,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE;SAClC,CAAC;IACN,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,aAAqB;QACnC,MAAM,CAAC,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,aAAa,CAAC,aAAa,CAAC,CAAC;IACpE,CAAC;IAED,KAAK,CAAC,cAAc,CAChB,aAAqB,EACrB,cAAsB,EACtB,mBAA2B;QAE3B,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,oBAAoB,EAAE,CAAC,aAAa,CAAC,CAAC;QACvF,OAAO,OAAO,CACV,KAAK,EAAE,OAAO;YACd,KAAK,CAAC,cAAc,KAAK,cAAc;YACvC,KAAK,CAAC,mBAAmB,KAAK,mBAAmB,CACpD,CAAC;IACN,CAAC;IAEO,KAAK,CAAC,aAAa;QACvB,IAAI,QAAyB,CAAC;QAC9B,IAAI,CAAC;YACD,QAAQ,GAAG,CAAC,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAoB,CAAC;QAC1D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,MAAM,IAAI,WAAW,CACjB,sBAAsB,EACtB,KAAK,YAAY,KAAK;gBAClB,CAAC,CAAC,KAAK,CAAC,OAAO;gBACf,CAAC,CAAC,4CAA4C,CACrD,CAAC;QACN,CAAC;QACD,IAAI,QAAQ,CAAC,QAAQ,KAAK,OAAO;YAC7B,MAAM,IAAI,WAAW,CACjB,sBAAsB,EACtB,oDAAoD,CACvD,CAAC;QACN,OAAO,QAAQ,CAAC;IACpB,CAAC;CACJ;AAED,KAAK,UAAU,oBAAoB,CAC/B,QAAyB,EACzB,aAAqB,EACrB,MAAmB;IAEnB,IAAI,eAAe,GAAG,CAAC,CAAC;IACxB,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACrB,IAAI,CAAC;YACD,IAAI,CAAC,CAAC,MAAM,QAAQ,CAAC,sBAAuB,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;gBAChE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QAChD,CAAC;QAAC,MAAM,CAAC;YACL,IAAI,MAAM,CAAC,OAAO;gBAAE,MAAM;YAC1B,8EAA8E;QAClF,CAAC;QACD,eAAe,IAAI,CAAC,CAAC;QACrB,MAAM,YAAY,CACd,MAAM,EACN,eAAe,GAAG,8BAA8B;YAC5C,CAAC,CAAC,mCAAmC;YACrC,CAAC,CAAC,kCAAkC,CAC3C,CAAC;IACN,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;AACjD,CAAC;AAED,SAAS,YAAY,CAAC,MAAmB,EAAE,YAAoB;IAC3D,IAAI,MAAM,CAAC,OAAO;QAAE,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC7C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC3B,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;QACjD,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,MAAM,EAAE,CAAC;QAC7B,SAAS,MAAM;YACX,YAAY,CAAC,OAAO,CAAC,CAAC;YACtB,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAC3C,OAAO,EAAE,CAAC;QACd,CAAC;QACD,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;AACP,CAAC"}

package/packages/happy2-server/dist/modules/plugin/secrets.d.ts

@@ -0,0 +1,17 @@
+export interface PluginSecretContext {
+    installationId: string;
+    key: string;
+}
+export interface PluginSecretProtector {
+    protect(secret: string, context: PluginSecretContext): Promise<string>;
+    reveal(ciphertext: string, context: PluginSecretContext): Promise<string>;
+}
+/** Authenticated envelope dedicated to recoverable plugin environment variables. */
+export declare class AesGcmPluginSecretProtector implements PluginSecretProtector {
+    private readonly key;
+    constructor(key: Uint8Array);
+    static fromBase64(value: string): AesGcmPluginSecretProtector;
+    protect(secret: string, context: PluginSecretContext): Promise<string>;
+    reveal(envelope: string, context: PluginSecretContext): Promise<string>;
+}
+//# sourceMappingURL=secrets.d.ts.map

package/packages/happy2-server/dist/modules/plugin/secrets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.d.ts","sourceRoot":"","sources":["../../../sources/modules/plugin/secrets.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,mBAAmB;IAChC,cAAc,EAAE,MAAM,CAAC;IACvB,GAAG,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,qBAAqB;IAClC,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACvE,MAAM,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CAC7E;AAED,oFAAoF;AACpF,qBAAa,2BAA4B,YAAW,qBAAqB;IACrE,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAS;IAE7B,YAAY,GAAG,EAAE,UAAU,EAG1B;IAED,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,2BAA2B,CAG5D;IAEK,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,MAAM,CAAC,CAQ3E;IAEK,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,MAAM,CAAC,CAmB5E;CACJ"}

package/packages/happy2-server/dist/modules/plugin/secrets.js

@@ -0,0 +1,56 @@
+import { createCipheriv, createDecipheriv, randomBytes } from "node:crypto";
+const CIPHER = "aes-256-gcm";
+const CONTEXT = Buffer.from("happy2:plugin-variable:v1", "utf8");
+/** Authenticated envelope dedicated to recoverable plugin environment variables. */
+export class AesGcmPluginSecretProtector {
+    key;
+    constructor(key) {
+        if (key.byteLength !== 32)
+            throw new TypeError("Plugin secret key must be 32 bytes");
+        this.key = Buffer.from(key);
+    }
+    static fromBase64(value) {
+        if (!value)
+            throw new TypeError("Plugin secret key is required");
+        return new AesGcmPluginSecretProtector(Buffer.from(value, "base64url"));
+    }
+    async protect(secret, context) {
+        if (!secret)
+            throw new TypeError("Plugin secret must not be empty");
+        const nonce = randomBytes(12);
+        const cipher = createCipheriv(CIPHER, this.key, nonce);
+        cipher.setAAD(aad(context));
+        const ciphertext = Buffer.concat([cipher.update(secret, "utf8"), cipher.final()]);
+        const tag = cipher.getAuthTag();
+        return `v1.${nonce.toString("base64url")}.${ciphertext.toString("base64url")}.${tag.toString("base64url")}`;
+    }
+    async reveal(envelope, context) {
+        const [version, nonceValue, ciphertextValue, tagValue, unexpected] = envelope.split(".");
+        if (version !== "v1" || !nonceValue || !ciphertextValue || !tagValue || unexpected)
+            throw new Error("Invalid plugin secret envelope");
+        try {
+            const decipher = createDecipheriv(CIPHER, this.key, Buffer.from(nonceValue, "base64url"));
+            decipher.setAAD(aad(context));
+            decipher.setAuthTag(Buffer.from(tagValue, "base64url"));
+            return Buffer.concat([
+                decipher.update(Buffer.from(ciphertextValue, "base64url")),
+                decipher.final(),
+            ]).toString("utf8");
+        }
+        catch {
+            throw new Error("Plugin secret could not be authenticated");
+        }
+    }
+}
+function aad(context) {
+    if (!context.installationId || !context.key)
+        throw new TypeError("Plugin secret context is required");
+    return Buffer.concat([
+        CONTEXT,
+        Buffer.from("\0", "utf8"),
+        Buffer.from(context.installationId, "utf8"),
+        Buffer.from("\0", "utf8"),
+        Buffer.from(context.key, "utf8"),
+    ]);
+}
+//# sourceMappingURL=secrets.js.map

package/packages/happy2-server/dist/modules/plugin/secrets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.js","sourceRoot":"","sources":["../../../sources/modules/plugin/secrets.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE5E,MAAM,MAAM,GAAG,aAAa,CAAC;AAC7B,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,2BAA2B,EAAE,MAAM,CAAC,CAAC;AAYjE,oFAAoF;AACpF,MAAM,OAAO,2BAA2B;IACnB,GAAG,CAAS;IAE7B,YAAY,GAAe;QACvB,IAAI,GAAG,CAAC,UAAU,KAAK,EAAE;YAAE,MAAM,IAAI,SAAS,CAAC,oCAAoC,CAAC,CAAC;QACrF,IAAI,CAAC,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChC,CAAC;IAED,MAAM,CAAC,UAAU,CAAC,KAAa;QAC3B,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,SAAS,CAAC,+BAA+B,CAAC,CAAC;QACjE,OAAO,IAAI,2BAA2B,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,CAAC;IAC5E,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,MAAc,EAAE,OAA4B;QACtD,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,SAAS,CAAC,iCAAiC,CAAC,CAAC;QACpE,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;QAC9B,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACvD,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;QAC5B,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAClF,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QAChC,OAAO,MAAM,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;IAChH,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,QAAgB,EAAE,OAA4B;QACvD,MAAM,CAAC,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,QAAQ,EAAE,UAAU,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACzF,IAAI,OAAO,KAAK,IAAI,IAAI,CAAC,UAAU,IAAI,CAAC,eAAe,IAAI,CAAC,QAAQ,IAAI,UAAU;YAC9E,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QACtD,IAAI,CAAC;YACD,MAAM,QAAQ,GAAG,gBAAgB,CAC7B,MAAM,EACN,IAAI,CAAC,GAAG,EACR,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CACvC,CAAC;YACF,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;YAC9B,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC;YACxD,OAAO,MAAM,CAAC,MAAM,CAAC;gBACjB,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC;gBAC1D,QAAQ,CAAC,KAAK,EAAE;aACnB,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACxB,CAAC;QAAC,MAAM,CAAC;YACL,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAChE,CAAC;IACL,CAAC;CACJ;AAED,SAAS,GAAG,CAAC,OAA4B;IACrC,IAAI,CAAC,OAAO,CAAC,cAAc,IAAI,CAAC,OAAO,CAAC,GAAG;QACvC,MAAM,IAAI,SAAS,CAAC,mCAAmC,CAAC,CAAC;IAC7D,OAAO,MAAM,CAAC,MAAM,CAAC;QACjB,OAAO;QACP,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC;QACzB,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,MAAM,CAAC;QAC3C,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC;QACzB,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC;KACnC,CAAC,CAAC;AACP,CAAC"}

package/packages/happy2-server/dist/modules/plugin/secrets.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=secrets.test.d.ts.map

package/packages/happy2-server/dist/modules/plugin/secrets.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.test.d.ts","sourceRoot":"","sources":["../../../sources/modules/plugin/secrets.test.ts"],"names":[],"mappings":""}

package/packages/happy2-server/dist/modules/plugin/secrets.test.js

@@ -0,0 +1,14 @@
+import { randomBytes } from "node:crypto";
+import { describe, expect, it } from "vitest";
+import { AesGcmPluginSecretProtector } from "./secrets.js";
+describe("AesGcmPluginSecretProtector", () => {
+    it("binds ciphertext to its installation and variable key", async () => {
+        const protector = new AesGcmPluginSecretProtector(randomBytes(32));
+        const context = { installationId: "cplugin", key: "API_TOKEN" };
+        const encrypted = await protector.protect("secret-value", context);
+        await expect(protector.reveal(encrypted, context)).resolves.toBe("secret-value");
+        await expect(protector.reveal(encrypted, { ...context, key: "OTHER_TOKEN" })).rejects.toThrow("could not be authenticated");
+        expect(encrypted).not.toContain("secret-value");
+    });
+});
+//# sourceMappingURL=secrets.test.js.map

package/packages/happy2-server/dist/modules/plugin/secrets.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.test.js","sourceRoot":"","sources":["../../../sources/modules/plugin/secrets.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,2BAA2B,EAAE,MAAM,cAAc,CAAC;AAE3D,QAAQ,CAAC,6BAA6B,EAAE,GAAG,EAAE;IACzC,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;QACnE,MAAM,SAAS,GAAG,IAAI,2BAA2B,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC;QACnE,MAAM,OAAO,GAAG,EAAE,cAAc,EAAE,SAAS,EAAE,GAAG,EAAE,WAAW,EAAE,CAAC;QAChE,MAAM,SAAS,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;QAEnE,MAAM,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QACjF,MAAM,MAAM,CACR,SAAS,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,GAAG,OAAO,EAAE,GAAG,EAAE,aAAa,EAAE,CAAC,CAClE,CAAC,OAAO,CAAC,OAAO,CAAC,4BAA4B,CAAC,CAAC;QAChD,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC"}

package/packages/happy2-server/dist/modules/plugin/service.d.ts

@@ -0,0 +1,60 @@
+import type { Transport } from "@modelcontextprotocol/sdk/shared/transport.js";
+import type { DrizzleExecutor } from "../drizzle.js";
+import type { PubSub } from "../realtime/index.js";
+import type { WebhookUrlPolicy } from "../integrations/ssrf.js";
+import type { WebhookTransport } from "../integrations/types.js";
+import type { TokenService } from "../auth/tokens.js";
+import type { PluginCatalog } from "./catalog.js";
+import type { PluginPackageStore } from "./packageStore.js";
+import type { PluginMcpRuntime } from "./runtime.js";
+import type { PluginSecretProtector } from "./secrets.js";
+import { type PluginFunctionDefinition, type PluginFunctionResult, type PluginHostPermission, type PluginInstallationSummary } from "./types.js";
+/** Coordinates durable plugin installs with asynchronous container preparation, MCP health probes, restart recovery, and local connection creation. */
+export declare class PluginService {
+    private readonly executor;
+    private readonly pubsub;
+    private readonly catalog;
+    private readonly packages;
+    private readonly secrets;
+    private readonly runtime;
+    private readonly tokens;
+    private readonly urlPolicy;
+    private readonly remoteTransport;
+    private readonly hostApiUrl;
+    private readonly onError;
+    private readonly activations;
+    private readonly commandHandles;
+    private closed;
+    constructor(executor: DrizzleExecutor, pubsub: PubSub, catalog: PluginCatalog, packages: PluginPackageStore, secrets: PluginSecretProtector, runtime: PluginMcpRuntime, tokens: TokenService, urlPolicy: WebhookUrlPolicy, remoteTransport: WebhookTransport, hostApiUrl: string, onError: (error: unknown) => void);
+    start(): Promise<void>;
+    install(input: {
+        actorUserId: string;
+        shortName: string;
+        variables: Readonly<Record<string, string>>;
+        containerImageId?: string;
+    }): Promise<PluginInstallationSummary>;
+    image(actorUserId: string, pluginId: string): Promise<{
+        body: Buffer;
+        contentType: string;
+        checksumSha256: string;
+    }>;
+    openLocal(installationId: string): Promise<Transport>;
+    listFunctions(signal?: AbortSignal): Promise<readonly PluginFunctionDefinition[]>;
+    callFunction(functionName: string, args: unknown, signal?: AbortSignal): Promise<PluginFunctionResult>;
+    private callFunctionWithSignal;
+    authorizeHost(token: string, permission: PluginHostPermission): Promise<string>;
+    close(): Promise<void>;
+    private activate;
+    private withClient;
+    private runActivation;
+    private probeLocal;
+    private discoverTools;
+    private probeRemote;
+    private status;
+    private publish;
+    private closeCommand;
+    private monitorCommand;
+    private runtimeEnvironment;
+    private pluginRuntimeToken;
+}
+//# sourceMappingURL=service.d.ts.map

package/packages/happy2-server/dist/modules/plugin/service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../../sources/modules/plugin/service.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,+CAA+C,CAAC;AAC/E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAErD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAEnD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAChE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AActD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAC5D,OAAO,KAAK,EAA4B,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAC/E,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AAE1D,OAAO,EAGH,KAAK,wBAAwB,EAC7B,KAAK,oBAAoB,EACzB,KAAK,oBAAoB,EACzB,KAAK,yBAAyB,EAEjC,MAAM,YAAY,CAAC;AAOpB,uJAAuJ;AACvJ,qBAAa,aAAa;IASlB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,eAAe;IAChC,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,OAAO;IAlB5B,OAAO,CAAC,QAAQ,CAAC,WAAW,CAGxB;IACJ,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA+C;IAC9E,OAAO,CAAC,MAAM,CAAS;IAEvB,YACqB,QAAQ,EAAE,eAAe,EACzB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,aAAa,EACtB,QAAQ,EAAE,kBAAkB,EAC5B,OAAO,EAAE,qBAAqB,EAC9B,OAAO,EAAE,gBAAgB,EACzB,MAAM,EAAE,YAAY,EACpB,SAAS,EAAE,gBAAgB,EAC3B,eAAe,EAAE,gBAAgB,EACjC,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,EAClD;IAEE,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAkB3B;IAEK,OAAO,CAAC,KAAK,EAAE;QACjB,WAAW,EAAE,MAAM,CAAC;QACpB,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;QAC5C,gBAAgB,CAAC,EAAE,MAAM,CAAC;KAC7B,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAgCrC;IAEK,KAAK,CACP,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,GACjB,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,MAAM,CAAA;KAAE,CAAC,CAmBxE;IAEK,SAAS,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAkB1D;IAEK,aAAa,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,SAAS,wBAAwB,EAAE,CAAC,CAatF;IAEK,YAAY,CACd,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,OAAO,EACb,MAAM,CAAC,EAAE,WAAW,GACrB,OAAO,CAAC,oBAAoB,CAAC,CAmB/B;YAEa,sBAAsB;IAwC9B,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,oBAAoB,GAAG,OAAO,CAAC,MAAM,CAAC,CAiCpF;IAEK,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAM3B;IAED,OAAO,CAAC,QAAQ;YASF,UAAU;YA8CV,aAAa;YAuIb,UAAU;YAkBV,aAAa;YAyDb,WAAW;YAiBX,MAAM;IAmBpB,OAAO,CAAC,OAAO;IAIf,OAAO,CAAC,YAAY;IAOpB,OAAO,CAAC,cAAc;IAsBtB,OAAO,CAAC,kBAAkB;IAW1B,OAAO,CAAC,kBAAkB;CAW7B"}