happy2 0.0.9 → 0.0.12

package/packages/happy2-server/dist/modules/plugin/impl/pluginSelection.d.ts

@@ -0,0 +1,339 @@
+export declare const pluginSelection: {
+    id: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+        name: "id";
+        tableName: "plugins";
+        dataType: "string";
+        columnType: "SQLiteText";
+        data: string;
+        driverParam: string;
+        notNull: true;
+        hasDefault: false;
+        isPrimaryKey: true;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: [string, ...string[]];
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+    }, {}, {
+        length: number | undefined;
+    }>;
+    displayName: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+        name: "display_name";
+        tableName: "plugins";
+        dataType: "string";
+        columnType: "SQLiteText";
+        data: string;
+        driverParam: string;
+        notNull: true;
+        hasDefault: false;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: [string, ...string[]];
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+    }, {}, {
+        length: number | undefined;
+    }>;
+    shortName: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+        name: "short_name";
+        tableName: "plugins";
+        dataType: "string";
+        columnType: "SQLiteText";
+        data: string;
+        driverParam: string;
+        notNull: true;
+        hasDefault: false;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: [string, ...string[]];
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+    }, {}, {
+        length: number | undefined;
+    }>;
+    description: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+        name: "description";
+        tableName: "plugins";
+        dataType: "string";
+        columnType: "SQLiteText";
+        data: string;
+        driverParam: string;
+        notNull: true;
+        hasDefault: false;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: [string, ...string[]];
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+    }, {}, {
+        length: number | undefined;
+    }>;
+    sourceKind: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+        name: "source_kind";
+        tableName: "plugins";
+        dataType: "string";
+        columnType: "SQLiteText";
+        data: string;
+        driverParam: string;
+        notNull: true;
+        hasDefault: false;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: [string, ...string[]];
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+    }, {}, {
+        length: number | undefined;
+    }>;
+    sourceReference: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+        name: "source_reference";
+        tableName: "plugins";
+        dataType: "string";
+        columnType: "SQLiteText";
+        data: string;
+        driverParam: string;
+        notNull: true;
+        hasDefault: false;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: [string, ...string[]];
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+    }, {}, {
+        length: number | undefined;
+    }>;
+    sourceVersion: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+        name: "source_version";
+        tableName: "plugins";
+        dataType: "string";
+        columnType: "SQLiteText";
+        data: string;
+        driverParam: string;
+        notNull: true;
+        hasDefault: false;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: [string, ...string[]];
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+    }, {}, {
+        length: number | undefined;
+    }>;
+    packageDigest: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+        name: "package_digest";
+        tableName: "plugins";
+        dataType: "string";
+        columnType: "SQLiteText";
+        data: string;
+        driverParam: string;
+        notNull: true;
+        hasDefault: false;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: [string, ...string[]];
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+    }, {}, {
+        length: number | undefined;
+    }>;
+    manifestJson: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+        name: "manifest_json";
+        tableName: "plugins";
+        dataType: "string";
+        columnType: "SQLiteText";
+        data: string;
+        driverParam: string;
+        notNull: true;
+        hasDefault: false;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: [string, ...string[]];
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+    }, {}, {
+        length: number | undefined;
+    }>;
+    imageContentType: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+        name: "image_content_type";
+        tableName: "plugins";
+        dataType: "string";
+        columnType: "SQLiteText";
+        data: string;
+        driverParam: string;
+        notNull: true;
+        hasDefault: false;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: [string, ...string[]];
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+    }, {}, {
+        length: number | undefined;
+    }>;
+    imageSize: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+        name: "image_size";
+        tableName: "plugins";
+        dataType: "number";
+        columnType: "SQLiteInteger";
+        data: number;
+        driverParam: number;
+        notNull: true;
+        hasDefault: false;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: undefined;
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+    }, {}, {}>;
+    imageWidth: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+        name: "image_width";
+        tableName: "plugins";
+        dataType: "number";
+        columnType: "SQLiteInteger";
+        data: number;
+        driverParam: number;
+        notNull: true;
+        hasDefault: false;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: undefined;
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+    }, {}, {}>;
+    imageHeight: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+        name: "image_height";
+        tableName: "plugins";
+        dataType: "number";
+        columnType: "SQLiteInteger";
+        data: number;
+        driverParam: number;
+        notNull: true;
+        hasDefault: false;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: undefined;
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+    }, {}, {}>;
+    imageThumbhash: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+        name: "image_thumbhash";
+        tableName: "plugins";
+        dataType: "string";
+        columnType: "SQLiteText";
+        data: string;
+        driverParam: string;
+        notNull: true;
+        hasDefault: false;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: [string, ...string[]];
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+    }, {}, {
+        length: number | undefined;
+    }>;
+    imageChecksumSha256: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+        name: "image_checksum_sha256";
+        tableName: "plugins";
+        dataType: "string";
+        columnType: "SQLiteText";
+        data: string;
+        driverParam: string;
+        notNull: true;
+        hasDefault: false;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: [string, ...string[]];
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+    }, {}, {
+        length: number | undefined;
+    }>;
+    installedByUserId: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+        name: "installed_by_user_id";
+        tableName: "plugins";
+        dataType: "string";
+        columnType: "SQLiteText";
+        data: string;
+        driverParam: string;
+        notNull: false;
+        hasDefault: false;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: [string, ...string[]];
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+    }, {}, {
+        length: number | undefined;
+    }>;
+    installedAt: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+        name: "installed_at";
+        tableName: "plugins";
+        dataType: "string";
+        columnType: "SQLiteText";
+        data: string;
+        driverParam: string;
+        notNull: true;
+        hasDefault: true;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: [string, ...string[]];
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+    }, {}, {
+        length: number | undefined;
+    }>;
+    updatedAt: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+        name: "updated_at";
+        tableName: "plugins";
+        dataType: "string";
+        columnType: "SQLiteText";
+        data: string;
+        driverParam: string;
+        notNull: true;
+        hasDefault: true;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: [string, ...string[]];
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+    }, {}, {
+        length: number | undefined;
+    }>;
+};
+//# sourceMappingURL=pluginSelection.d.ts.map

package/packages/happy2-server/dist/modules/plugin/impl/pluginSelection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pluginSelection.d.ts","sourceRoot":"","sources":["../../../../sources/modules/plugin/impl/pluginSelection.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,eAAe;IACxB,EAAE;;;;;;;;;;;;;;;;;;;IACF,WAAW;;;;;;;;;;;;;;;;;;;IACX,SAAS;;;;;;;;;;;;;;;;;;;IACT,WAAW;;;;;;;;;;;;;;;;;;;IACX,UAAU;;;;;;;;;;;;;;;;;;;IACV,eAAe;;;;;;;;;;;;;;;;;;;IACf,aAAa;;;;;;;;;;;;;;;;;;;IACb,aAAa;;;;;;;;;;;;;;;;;;;IACb,YAAY;;;;;;;;;;;;;;;;;;;IACZ,gBAAgB;;;;;;;;;;;;;;;;;;;IAChB,SAAS;;;;;;;;;;;;;;;;;IACT,UAAU;;;;;;;;;;;;;;;;;IACV,WAAW;;;;;;;;;;;;;;;;;IACX,cAAc;;;;;;;;;;;;;;;;;;;IACd,mBAAmB;;;;;;;;;;;;;;;;;;;IACnB,iBAAiB;;;;;;;;;;;;;;;;;;;IACjB,WAAW;;;;;;;;;;;;;;;;;;;IACX,SAAS;;;;;;;;;;;;;;;;;;;CACZ,CAAC"}

package/packages/happy2-server/dist/modules/plugin/impl/pluginSelection.js

@@ -0,0 +1,22 @@
+import { plugins } from "../../schema.js";
+export const pluginSelection = {
+    id: plugins.id,
+    displayName: plugins.displayName,
+    shortName: plugins.shortName,
+    description: plugins.description,
+    sourceKind: plugins.sourceKind,
+    sourceReference: plugins.sourceReference,
+    sourceVersion: plugins.sourceVersion,
+    packageDigest: plugins.packageDigest,
+    manifestJson: plugins.manifestJson,
+    imageContentType: plugins.imageContentType,
+    imageSize: plugins.imageSize,
+    imageWidth: plugins.imageWidth,
+    imageHeight: plugins.imageHeight,
+    imageThumbhash: plugins.imageThumbhash,
+    imageChecksumSha256: plugins.imageChecksumSha256,
+    installedByUserId: plugins.installedByUserId,
+    installedAt: plugins.installedAt,
+    updatedAt: plugins.updatedAt,
+};
+//# sourceMappingURL=pluginSelection.js.map

package/packages/happy2-server/dist/modules/plugin/impl/pluginSelection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pluginSelection.js","sourceRoot":"","sources":["../../../../sources/modules/plugin/impl/pluginSelection.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAE1C,MAAM,CAAC,MAAM,eAAe,GAAG;IAC3B,EAAE,EAAE,OAAO,CAAC,EAAE;IACd,WAAW,EAAE,OAAO,CAAC,WAAW;IAChC,SAAS,EAAE,OAAO,CAAC,SAAS;IAC5B,WAAW,EAAE,OAAO,CAAC,WAAW;IAChC,UAAU,EAAE,OAAO,CAAC,UAAU;IAC9B,eAAe,EAAE,OAAO,CAAC,eAAe;IACxC,aAAa,EAAE,OAAO,CAAC,aAAa;IACpC,aAAa,EAAE,OAAO,CAAC,aAAa;IACpC,YAAY,EAAE,OAAO,CAAC,YAAY;IAClC,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;IAC1C,SAAS,EAAE,OAAO,CAAC,SAAS;IAC5B,UAAU,EAAE,OAAO,CAAC,UAAU;IAC9B,WAAW,EAAE,OAAO,CAAC,WAAW;IAChC,cAAc,EAAE,OAAO,CAAC,cAAc;IACtC,mBAAmB,EAAE,OAAO,CAAC,mBAAmB;IAChD,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;IAC5C,WAAW,EAAE,OAAO,CAAC,WAAW;IAChC,SAAS,EAAE,OAAO,CAAC,SAAS;CAC/B,CAAC"}

package/packages/happy2-server/dist/modules/plugin/index.d.ts

@@ -0,0 +1,3 @@
+export { PluginCatalog, pluginCatalogLoad, pluginPackageLoad } from "./catalog.js";
+export * from "./types.js";
+//# sourceMappingURL=index.d.ts.map

package/packages/happy2-server/dist/modules/plugin/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../sources/modules/plugin/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACnF,cAAc,YAAY,CAAC"}

package/packages/happy2-server/dist/modules/plugin/index.js

@@ -0,0 +1,3 @@
+export { PluginCatalog, pluginCatalogLoad, pluginPackageLoad } from "./catalog.js";
+export * from "./types.js";
+//# sourceMappingURL=index.js.map

package/packages/happy2-server/dist/modules/plugin/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../sources/modules/plugin/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACnF,cAAc,YAAY,CAAC"}

package/packages/happy2-server/dist/modules/plugin/packageStore.d.ts

@@ -0,0 +1,15 @@
+import type { PluginPackage } from "./types.js";
+/** Persists one exact package snapshot per system plugin so catalog changes cannot mutate installed metadata or files. */
+export declare class PluginPackageStore {
+    private readonly root;
+    constructor(root: string);
+    install(plugin: PluginPackage, pluginId: string): Promise<{
+        packageDirectory: string;
+        imageStorageKey: string;
+    }>;
+    remove(pluginId: string): Promise<void>;
+    verify(pluginId: string, recordedDirectory: string, shortName: string, packageDigest: string): Promise<void>;
+    readImage(pluginId: string, recordedDirectory: string, imageStorageKey: string, shortName: string, packageDigest: string): Promise<Buffer>;
+    private path;
+}
+//# sourceMappingURL=packageStore.d.ts.map

package/packages/happy2-server/dist/modules/plugin/packageStore.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"packageStore.d.ts","sourceRoot":"","sources":["../../../sources/modules/plugin/packageStore.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAEhD,0HAA0H;AAC1H,qBAAa,kBAAkB;IACf,OAAO,CAAC,QAAQ,CAAC,IAAI;IAAjC,YAA6B,IAAI,EAAE,MAAM,EAAI;IAEvC,OAAO,CACT,MAAM,EAAE,aAAa,EACrB,QAAQ,EAAE,MAAM,GACjB,OAAO,CAAC;QAAE,gBAAgB,EAAE,MAAM,CAAC;QAAC,eAAe,EAAE,MAAM,CAAA;KAAE,CAAC,CAyChE;IAEK,MAAM,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAE5C;IAEK,MAAM,CACR,QAAQ,EAAE,MAAM,EAChB,iBAAiB,EAAE,MAAM,EACzB,SAAS,EAAE,MAAM,EACjB,aAAa,EAAE,MAAM,GACtB,OAAO,CAAC,IAAI,CAAC,CAYf;IAEK,SAAS,CACX,QAAQ,EAAE,MAAM,EAChB,iBAAiB,EAAE,MAAM,EACzB,eAAe,EAAE,MAAM,EACvB,SAAS,EAAE,MAAM,EACjB,aAAa,EAAE,MAAM,GACtB,OAAO,CAAC,MAAM,CAAC,CAKjB;IAED,OAAO,CAAC,IAAI;CAQf"}

package/packages/happy2-server/dist/modules/plugin/packageStore.js

@@ -0,0 +1,90 @@
+import { randomUUID } from "node:crypto";
+import { cp, lstat, mkdir, readFile, realpath, rename, rm } from "node:fs/promises";
+import { join, resolve, sep } from "node:path";
+import { pluginPackageLoad } from "./catalog.js";
+/** Persists one exact package snapshot per system plugin so catalog changes cannot mutate installed metadata or files. */
+export class PluginPackageStore {
+    root;
+    constructor(root) {
+        this.root = root;
+    }
+    async install(plugin, pluginId) {
+        await mkdir(this.root, { recursive: true, mode: 0o700 });
+        const destination = this.path(pluginId);
+        const staging = resolve(this.root, `.${pluginId}.staging-${randomUUID()}`);
+        await rm(staging, { force: true, recursive: true });
+        try {
+            await cp(plugin.directory, staging, {
+                recursive: true,
+                errorOnExist: true,
+                force: false,
+            });
+            const copied = await pluginPackageLoad(staging, plugin.source.reference);
+            if (copied.packageDigest !== plugin.packageDigest)
+                throw new Error("Plugin package changed while its system snapshot was copied");
+            if (await pathExists(destination)) {
+                await this.verify(pluginId, destination, plugin.manifest.shortName, plugin.packageDigest);
+            }
+            else {
+                try {
+                    await rename(staging, destination);
+                }
+                catch (publishError) {
+                    if (!(await pathExists(destination)))
+                        throw publishError;
+                    await this.verify(pluginId, destination, plugin.manifest.shortName, plugin.packageDigest);
+                }
+            }
+            return {
+                packageDirectory: await realpath(destination),
+                imageStorageKey: `${pluginId}/plugin.png`,
+            };
+        }
+        finally {
+            await rm(staging, { force: true, recursive: true });
+        }
+    }
+    async remove(pluginId) {
+        await rm(this.path(pluginId), { force: true, recursive: true });
+    }
+    async verify(pluginId, recordedDirectory, shortName, packageDigest) {
+        const [canonicalRoot, storedDirectory, actualDirectory] = await Promise.all([
+            realpath(this.root),
+            realpath(this.path(pluginId)),
+            realpath(recordedDirectory),
+        ]);
+        const expectedDirectory = resolve(canonicalRoot, pluginId);
+        if (storedDirectory !== expectedDirectory || actualDirectory !== expectedDirectory)
+            throw new Error("Installed plugin package is outside the plugin package store");
+        const plugin = await pluginPackageLoad(actualDirectory, shortName);
+        if (plugin.packageDigest !== packageDigest)
+            throw new Error("Installed plugin package no longer matches its recorded digest");
+    }
+    async readImage(pluginId, recordedDirectory, imageStorageKey, shortName, packageDigest) {
+        await this.verify(pluginId, recordedDirectory, shortName, packageDigest);
+        if (imageStorageKey !== `${pluginId}/plugin.png`)
+            throw new Error("Installed plugin image storage key is invalid");
+        return readFile(join(this.path(pluginId), "plugin.png"));
+    }
+    path(pluginId) {
+        if (!/^[a-z0-9]+$/.test(pluginId))
+            throw new Error("Invalid system plugin id");
+        const destination = resolve(this.root, pluginId);
+        const root = resolve(this.root);
+        if (!destination.startsWith(`${root}${sep}`))
+            throw new Error("Invalid plugin package path");
+        return join(root, pluginId);
+    }
+}
+async function pathExists(path) {
+    try {
+        await lstat(path);
+        return true;
+    }
+    catch (error) {
+        if (error.code === "ENOENT")
+            return false;
+        throw error;
+    }
+}
+//# sourceMappingURL=packageStore.js.map

package/packages/happy2-server/dist/modules/plugin/packageStore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"packageStore.js","sourceRoot":"","sources":["../../../sources/modules/plugin/packageStore.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AACpF,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAGjD,0HAA0H;AAC1H,MAAM,OAAO,kBAAkB;IACE,IAAI;IAAjC,YAA6B,IAAY;oBAAZ,IAAI;IAAW,CAAC;IAE7C,KAAK,CAAC,OAAO,CACT,MAAqB,EACrB,QAAgB;QAEhB,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACzD,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACxC,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,QAAQ,YAAY,UAAU,EAAE,EAAE,CAAC,CAAC;QAC3E,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACpD,IAAI,CAAC;YACD,MAAM,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE;gBAChC,SAAS,EAAE,IAAI;gBACf,YAAY,EAAE,IAAI;gBAClB,KAAK,EAAE,KAAK;aACf,CAAC,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YACzE,IAAI,MAAM,CAAC,aAAa,KAAK,MAAM,CAAC,aAAa;gBAC7C,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;YACnF,IAAI,MAAM,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;gBAChC,MAAM,IAAI,CAAC,MAAM,CACb,QAAQ,EACR,WAAW,EACX,MAAM,CAAC,QAAQ,CAAC,SAAS,EACzB,MAAM,CAAC,aAAa,CACvB,CAAC;YACN,CAAC;iBAAM,CAAC;gBACJ,IAAI,CAAC;oBACD,MAAM,MAAM,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;gBACvC,CAAC;gBAAC,OAAO,YAAY,EAAE,CAAC;oBACpB,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,WAAW,CAAC,CAAC;wBAAE,MAAM,YAAY,CAAC;oBACzD,MAAM,IAAI,CAAC,MAAM,CACb,QAAQ,EACR,WAAW,EACX,MAAM,CAAC,QAAQ,CAAC,SAAS,EACzB,MAAM,CAAC,aAAa,CACvB,CAAC;gBACN,CAAC;YACL,CAAC;YACD,OAAO;gBACH,gBAAgB,EAAE,MAAM,QAAQ,CAAC,WAAW,CAAC;gBAC7C,eAAe,EAAE,GAAG,QAAQ,aAAa;aAC5C,CAAC;QACN,CAAC;gBAAS,CAAC;YACP,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,CAAC;IACL,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,QAAgB;QACzB,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpE,CAAC;IAED,KAAK,CAAC,MAAM,CACR,QAAgB,EAChB,iBAAyB,EACzB,SAAiB,EACjB,aAAqB;QAErB,MAAM,CAAC,aAAa,EAAE,eAAe,EAAE,eAAe,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACxE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;YACnB,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC7B,QAAQ,CAAC,iBAAiB,CAAC;SAC9B,CAAC,CAAC;QACH,MAAM,iBAAiB,GAAG,OAAO,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;QAC3D,IAAI,eAAe,KAAK,iBAAiB,IAAI,eAAe,KAAK,iBAAiB;YAC9E,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;QACpF,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,eAAe,EAAE,SAAS,CAAC,CAAC;QACnE,IAAI,MAAM,CAAC,aAAa,KAAK,aAAa;YACtC,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;IAC1F,CAAC;IAED,KAAK,CAAC,SAAS,CACX,QAAgB,EAChB,iBAAyB,EACzB,eAAuB,EACvB,SAAiB,EACjB,aAAqB;QAErB,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,iBAAiB,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;QACzE,IAAI,eAAe,KAAK,GAAG,QAAQ,aAAa;YAC5C,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;QACrE,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,YAAY,CAAC,CAAC,CAAC;IAC7D,CAAC;IAEO,IAAI,CAAC,QAAgB;QACzB,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAC/E,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QACjD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,GAAG,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACnD,OAAO,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAChC,CAAC;CACJ;AAED,KAAK,UAAU,UAAU,CAAC,IAAY;IAClC,IAAI,CAAC;QACD,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;QAClB,OAAO,IAAI,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACb,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QACrE,MAAM,KAAK,CAAC;IAChB,CAAC;AACL,CAAC"}

package/packages/happy2-server/dist/modules/plugin/pluginAuthorizeManagement.d.ts

@@ -0,0 +1,7 @@
+import type { DrizzleExecutor } from "../drizzle.js";
+/**
+ * Requires an active server administrator before plugin package or configuration work begins.
+ * This read-only authorization boundary does not mutate durable state and prevents unauthorised callers from triggering package-copy or lifecycle side effects.
+ */
+export declare function pluginAuthorizeManagement(executor: DrizzleExecutor, actorUserId: string): Promise<void>;
+//# sourceMappingURL=pluginAuthorizeManagement.d.ts.map

package/packages/happy2-server/dist/modules/plugin/pluginAuthorizeManagement.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pluginAuthorizeManagement.d.ts","sourceRoot":"","sources":["../../../sources/modules/plugin/pluginAuthorizeManagement.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAGrD;;;GAGG;AACH,wBAAsB,yBAAyB,CAC3C,QAAQ,EAAE,eAAe,EACzB,WAAW,EAAE,MAAM,GACpB,OAAO,CAAC,IAAI,CAAC,CAEf"}

package/packages/happy2-server/dist/modules/plugin/pluginAuthorizeManagement.js

@@ -0,0 +1,9 @@
+import { userRequireServerAdmin } from "../chat/userRequireServerAdmin.js";
+/**
+ * Requires an active server administrator before plugin package or configuration work begins.
+ * This read-only authorization boundary does not mutate durable state and prevents unauthorised callers from triggering package-copy or lifecycle side effects.
+ */
+export async function pluginAuthorizeManagement(executor, actorUserId) {
+    await userRequireServerAdmin(executor, actorUserId);
+}
+//# sourceMappingURL=pluginAuthorizeManagement.js.map

package/packages/happy2-server/dist/modules/plugin/pluginAuthorizeManagement.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pluginAuthorizeManagement.js","sourceRoot":"","sources":["../../../sources/modules/plugin/pluginAuthorizeManagement.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,sBAAsB,EAAE,MAAM,mCAAmC,CAAC;AAE3E;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC3C,QAAyB,EACzB,WAAmB;IAEnB,MAAM,sBAAsB,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;AACxD,CAAC"}

package/packages/happy2-server/dist/modules/plugin/pluginCatalogList.d.ts

@@ -0,0 +1,9 @@
+import type { DrizzleExecutor } from "../drizzle.js";
+import type { PluginCatalog } from "./catalog.js";
+import type { PluginCatalogItem } from "./types.js";
+/**
+ * Projects the validated built-in catalog together with administrator-visible installation health and update availability.
+ * This read-only boundary does not mutate durable state; it joins package metadata to authorized installation summaries without exposing configured values.
+ */
+export declare function pluginCatalogList(executor: DrizzleExecutor, catalog: PluginCatalog, actorUserId: string): Promise<PluginCatalogItem[]>;
+//# sourceMappingURL=pluginCatalogList.d.ts.map

package/packages/happy2-server/dist/modules/plugin/pluginCatalogList.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pluginCatalogList.d.ts","sourceRoot":"","sources":["../../../sources/modules/plugin/pluginCatalogList.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAGlD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAGpD;;;GAGG;AACH,wBAAsB,iBAAiB,CACnC,QAAQ,EAAE,eAAe,EACzB,OAAO,EAAE,aAAa,EACtB,WAAW,EAAE,MAAM,GACpB,OAAO,CAAC,iBAAiB,EAAE,CAAC,CA0D9B"}

package/packages/happy2-server/dist/modules/plugin/pluginCatalogList.js

@@ -0,0 +1,64 @@
+import { pluginInstallationList } from "./pluginInstallationList.js";
+import { pluginList } from "./pluginList.js";
+import { effectiveContainer } from "./impl/effectiveContainer.js";
+/**
+ * Projects the validated built-in catalog together with administrator-visible installation health and update availability.
+ * This read-only boundary does not mutate durable state; it joins package metadata to authorized installation summaries without exposing configured values.
+ */
+export async function pluginCatalogList(executor, catalog, actorUserId) {
+    const [installations, systemPlugins] = await Promise.all([
+        pluginInstallationList(executor, actorUserId),
+        pluginList(executor, actorUserId),
+    ]);
+    const systemByShortName = new Map(systemPlugins.map((plugin) => [plugin.shortName, plugin]));
+    return catalog.list().map((plugin) => {
+        const systemPlugin = systemByShortName.get(plugin.manifest.shortName);
+        const catalogMcp = plugin.manifest.mcp;
+        const catalogContainer = effectiveContainer(plugin.manifest);
+        const mcp = systemPlugin
+            ? systemPlugin.mcp
+            : catalogMcp
+                ? {
+                    type: catalogMcp.type,
+                    container: catalogMcp.type === "remote"
+                        ? "none"
+                        : catalogContainer?.dockerfile
+                            ? "bundled"
+                            : "selection_required",
+                }
+                : undefined;
+        const container = systemPlugin
+            ? systemPlugin.container
+            : catalogContainer
+                ? {
+                    image: catalogContainer.dockerfile
+                        ? "bundled"
+                        : "selection_required",
+                    command: Boolean(catalogContainer.command),
+                    permissions: catalogContainer.permissions,
+                }
+                : undefined;
+        return {
+            displayName: plugin.manifest.displayName,
+            shortName: plugin.manifest.shortName,
+            description: plugin.manifest.description,
+            version: plugin.manifest.version,
+            packageDigest: plugin.packageDigest,
+            iconUrl: `/v0/admin/plugins/${plugin.manifest.shortName}/icon`,
+            skills: plugin.skills,
+            variables: systemPlugin?.variables ?? plugin.manifest.variables,
+            ...(mcp ? { mcp } : {}),
+            ...(container ? { container } : {}),
+            ...(systemPlugin
+                ? {
+                    systemPlugin: {
+                        ...systemPlugin,
+                        updateAvailable: systemPlugin.packageDigest !== plugin.packageDigest,
+                        installations: installations.filter(({ pluginId }) => pluginId === systemPlugin.id),
+                    },
+                }
+                : {}),
+        };
+    });
+}
+//# sourceMappingURL=pluginCatalogList.js.map

package/packages/happy2-server/dist/modules/plugin/pluginCatalogList.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pluginCatalogList.js","sourceRoot":"","sources":["../../../sources/modules/plugin/pluginCatalogList.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AACrE,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAE7C,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAElE;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACnC,QAAyB,EACzB,OAAsB,EACtB,WAAmB;IAEnB,MAAM,CAAC,aAAa,EAAE,aAAa,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACrD,sBAAsB,CAAC,QAAQ,EAAE,WAAW,CAAC;QAC7C,UAAU,CAAC,QAAQ,EAAE,WAAW,CAAC;KACpC,CAAC,CAAC;IACH,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IAC7F,OAAO,OAAO,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;QACjC,MAAM,YAAY,GAAG,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QACtE,MAAM,UAAU,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;QACvC,MAAM,gBAAgB,GAAG,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC7D,MAAM,GAAG,GAAG,YAAY;YACpB,CAAC,CAAC,YAAY,CAAC,GAAG;YAClB,CAAC,CAAC,UAAU;gBACV,CAAC,CAAC;oBACI,IAAI,EAAE,UAAU,CAAC,IAAI;oBACrB,SAAS,EACL,UAAU,CAAC,IAAI,KAAK,QAAQ;wBACxB,CAAC,CAAE,MAAgB;wBACnB,CAAC,CAAC,gBAAgB,EAAE,UAAU;4BAC5B,CAAC,CAAE,SAAmB;4BACtB,CAAC,CAAE,oBAA8B;iBAC9C;gBACH,CAAC,CAAC,SAAS,CAAC;QAClB,MAAM,SAAS,GAAG,YAAY;YAC1B,CAAC,CAAC,YAAY,CAAC,SAAS;YACxB,CAAC,CAAC,gBAAgB;gBAChB,CAAC,CAAC;oBACI,KAAK,EAAE,gBAAgB,CAAC,UAAU;wBAC9B,CAAC,CAAE,SAAmB;wBACtB,CAAC,CAAE,oBAA8B;oBACrC,OAAO,EAAE,OAAO,CAAC,gBAAgB,CAAC,OAAO,CAAC;oBAC1C,WAAW,EAAE,gBAAgB,CAAC,WAAW;iBAC5C;gBACH,CAAC,CAAC,SAAS,CAAC;QAClB,OAAO;YACH,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,WAAW;YACxC,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,SAAS;YACpC,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,WAAW;YACxC,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO;YAChC,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,OAAO,EAAE,qBAAqB,MAAM,CAAC,QAAQ,CAAC,SAAS,OAAO;YAC9D,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,SAAS,EAAE,YAAY,EAAE,SAAS,IAAI,MAAM,CAAC,QAAQ,CAAC,SAAS;YAC/D,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvB,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnC,GAAG,CAAC,YAAY;gBACZ,CAAC,CAAC;oBACI,YAAY,EAAE;wBACV,GAAG,YAAY;wBACf,eAAe,EAAE,YAAY,CAAC,aAAa,KAAK,MAAM,CAAC,aAAa;wBACpE,aAAa,EAAE,aAAa,CAAC,MAAM,CAC/B,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,QAAQ,KAAK,YAAY,CAAC,EAAE,CACjD;qBACJ;iBACJ;gBACH,CAAC,CAAC,EAAE,CAAC;SACZ,CAAC;IACN,CAAC,CAAC,CAAC;AACP,CAAC"}

package/packages/happy2-server/dist/modules/plugin/pluginContainerInstanceAuthorize.d.ts

@@ -0,0 +1,10 @@
+import type { DrizzleExecutor } from "../drizzle.js";
+/**
+ * Resolves a signed plugin capability only while its exact durable container incarnation remains the ready installation authority.
+ * This database check makes replacement or invalidation revoke every token issued for an older incarnation without persisting token material.
+ */
+export declare function pluginContainerInstanceAuthorize(executor: DrizzleExecutor, installationId: string, containerInstanceId: string): Promise<{
+    installationId: string;
+    containerName: string;
+} | undefined>;
+//# sourceMappingURL=pluginContainerInstanceAuthorize.d.ts.map

package/packages/happy2-server/dist/modules/plugin/pluginContainerInstanceAuthorize.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pluginContainerInstanceAuthorize.d.ts","sourceRoot":"","sources":["../../../sources/modules/plugin/pluginContainerInstanceAuthorize.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAGrD;;;GAGG;AACH,wBAAsB,gCAAgC,CAClD,QAAQ,EAAE,eAAe,EACzB,cAAc,EAAE,MAAM,EACtB,mBAAmB,EAAE,MAAM,GAC5B,OAAO,CAAC;IAAE,cAAc,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAAC,CAkBxE"}

package/packages/happy2-server/dist/modules/plugin/pluginContainerInstanceAuthorize.js

@@ -0,0 +1,20 @@
+import { and, eq } from "drizzle-orm";
+import { pluginInstallations } from "../schema.js";
+/**
+ * Resolves a signed plugin capability only while its exact durable container incarnation remains the ready installation authority.
+ * This database check makes replacement or invalidation revoke every token issued for an older incarnation without persisting token material.
+ */
+export async function pluginContainerInstanceAuthorize(executor, installationId, containerInstanceId) {
+    const [row] = await executor
+        .select({
+        installationId: pluginInstallations.id,
+        containerName: pluginInstallations.containerName,
+    })
+        .from(pluginInstallations)
+        .where(and(eq(pluginInstallations.id, installationId), eq(pluginInstallations.containerInstanceId, containerInstanceId), eq(pluginInstallations.status, "ready")))
+        .limit(1);
+    return row?.containerName
+        ? { installationId: row.installationId, containerName: row.containerName }
+        : undefined;
+}
+//# sourceMappingURL=pluginContainerInstanceAuthorize.js.map

package/packages/happy2-server/dist/modules/plugin/pluginContainerInstanceAuthorize.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pluginContainerInstanceAuthorize.js","sourceRoot":"","sources":["../../../sources/modules/plugin/pluginContainerInstanceAuthorize.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AAEtC,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAEnD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,gCAAgC,CAClD,QAAyB,EACzB,cAAsB,EACtB,mBAA2B;IAE3B,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,QAAQ;SACvB,MAAM,CAAC;QACJ,cAAc,EAAE,mBAAmB,CAAC,EAAE;QACtC,aAAa,EAAE,mBAAmB,CAAC,aAAa;KACnD,CAAC;SACD,IAAI,CAAC,mBAAmB,CAAC;SACzB,KAAK,CACF,GAAG,CACC,EAAE,CAAC,mBAAmB,CAAC,EAAE,EAAE,cAAc,CAAC,EAC1C,EAAE,CAAC,mBAAmB,CAAC,mBAAmB,EAAE,mBAAmB,CAAC,EAChE,EAAE,CAAC,mBAAmB,CAAC,MAAM,EAAE,OAAO,CAAC,CAC1C,CACJ;SACA,KAAK,CAAC,CAAC,CAAC,CAAC;IACd,OAAO,GAAG,EAAE,aAAa;QACrB,CAAC,CAAC,EAAE,cAAc,EAAE,GAAG,CAAC,cAAc,EAAE,aAAa,EAAE,GAAG,CAAC,aAAa,EAAE;QAC1E,CAAC,CAAC,SAAS,CAAC;AACpB,CAAC"}