libre-webui 0.15.1 → 0.16.0

package/backend/dist/services/pluginService.js

@@ -16,23 +16,78 @@
  */
 import fs from 'fs';
 import path from 'path';
+import { createHash } from 'crypto';
 import sanitize from 'sanitize-filename';
 import axios from 'axios';
 import pluginCredentialsService from './pluginCredentialsService.js';
 import pluginVariablesService from './pluginVariablesService.js';
+import pluginActivationService from './pluginActivationService.js';
 import { PluginCapabilityRegistryService } from './pluginCapabilityRegistryService.js';
 import { PluginEmbeddingService } from './pluginEmbeddingService.js';
 import { PluginImageGenerationService } from './pluginImageGenerationService.js';
 import { PluginTTSService } from './pluginTTSService.js';
 import { applyPluginDefinitionPolicy, buildPluginChatPayload, convertProviderResponse, getOpenAICompatibleSamplingParameters, resolvePluginChatParameters, toOpenAICompatibleMessages, } from '../utils/pluginChatAdapter.js';
-import { streamAnthropicResponse, streamOpenAICompatibleResponse, } from '../utils/pluginStreamAdapter.js';
-import { applyModelEndpointTemplate, assertSafePluginEndpoint, buildPluginAuthHeaders, buildPluginModelDiscoveryHeaders, pluginRequiresApiKey, resolvePluginEndpoint, resolvePluginModelsEndpoint, validatePluginEndpointOverride, validatePluginModel, } from '../utils/pluginValidation.js';
+import { streamAnthropicResponse, streamOpenAICompatibleResponse, streamOpenAIResponsesResponse, } from '../utils/pluginStreamAdapter.js';
+import { applyModelEndpointTemplate, assertSafePluginEndpoint, buildPluginAuthHeaders, buildPluginModelDiscoveryHeaders, pluginRequiresApiKey, resolvePluginApiConfig, resolvePluginEndpoint, resolvePluginModelsEndpoint, validatePluginModel, } from '../utils/pluginValidation.js';
 import { createLogger } from '../utils/logger.js';
 import { resolveBundledPluginsDir } from '../utils/packagePaths.js';
+import { getDatabaseSafe } from '../db.js';
+import { createOpenAIResponsesStateScope, createPluginCredentialFingerprint, OPENAI_RESPONSES_INCOMPLETE_REASON_METADATA_KEY, } from '../utils/openAIResponsesAdapter.js';
+import { getPluginConnectionVariableNames } from '../utils/pluginConnectionVariables.js';
+import { getPluginDefinitionFingerprint, matchesBundledPluginTrustAnchor, } from '../utils/pluginDefinitionTrust.js';
 const logger = createLogger('plugins');
-class PluginService {
+function getPluginRoutingAuthProjection(plugin) {
+    const capabilityEndpoints = Object.entries((plugin.capabilities || {}))
+        .sort(([left], [right]) => left.localeCompare(right))
+        .map(([name, value]) => {
+        const capability = value && typeof value === 'object'
+            ? value
+            : {};
+        const config = capability.config && typeof capability.config === 'object'
+            ? capability.config
+            : {};
+        return {
+            name,
+            endpoint: capability.endpoint ?? null,
+            endpoint_variable: config.endpoint_variable ?? capability.endpoint_variable ?? null,
+        };
+    });
+    const definitions = new Map((plugin.variables || []).map(definition => [definition.name, definition]));
+    const connectionVariables = Array.from(getPluginConnectionVariableNames(plugin), name => {
+        const definition = definitions.get(name);
+        if (!definition)
+            return null;
+        return {
+            name: definition.name,
+            type: definition.type,
+            label: definition.label,
+            description: definition.description ?? null,
+            default: definition.default ?? null,
+            required: definition.required ?? null,
+            sensitive: definition.sensitive ?? null,
+            options: definition.options ?? null,
+            min: definition.min ?? null,
+            max: definition.max ?? null,
+        };
+    });
+    return JSON.stringify({
+        endpoint: plugin.endpoint,
+        base_url: plugin.base_url ?? null,
+        api_path: plugin.api_path ?? null,
+        api_mode: plugin.api_mode ?? null,
+        auth: {
+            header: plugin.auth.header,
+            prefix: plugin.auth.prefix ?? '',
+            key_env: plugin.auth.key_env,
+        },
+        capabilityEndpoints,
+        connectionVariables,
+    });
+}
+export class PluginService {
     constructor() {
-        this.activePluginIds = new Set();
+        this.discoveredModelsCache = new Map();
+        this.bundledRoutingProjectionCache = new Map();
         this.bundledPluginsDir = resolveBundledPluginsDir(import.meta.url);
         this.legacyPluginsDir = path.join(process.cwd(), 'plugins');
         this.pluginsDir =
@@ -42,67 +97,280 @@ class PluginService {
                     : this.legacyPluginsDir);
         this.pluginReadDirs = Array.from(new Set([this.bundledPluginsDir, this.legacyPluginsDir, this.pluginsDir]));
         this.ensurePluginsDirectory();
-        this.loadActivePlugins();
+        pluginActivationService.migrateLegacyStatus([this.pluginsDir, this.legacyPluginsDir], pluginId => this.canMigrateLegacyActivation(pluginId));
         this.embeddingService = new PluginEmbeddingService({
-            getAllPlugins: () => this.getAllPlugins(),
+            getAllPlugins: userId => this.getActivePlugins(userId),
             getApiKey: (plugin, userId) => this.getApiKey(plugin, userId),
             getPluginVariables: (plugin, userId) => this.getPluginVariables(plugin, userId),
             validateEndpointUrl: endpoint => this.validateEndpointUrl(endpoint),
         });
         this.ttsService = new PluginTTSService({
-            getAllPlugins: () => this.getAllPlugins(),
-            getPlugin: id => this.getPlugin(id),
+            getAllPlugins: userId => this.getActivePlugins(userId),
+            getPlugin: (id, userId) => this.getPlugin(id, userId),
             getApiKey: (plugin, userId) => this.getApiKey(plugin, userId),
             getPluginVariables: (plugin, userId) => this.getPluginVariables(plugin, userId),
             validateEndpointUrl: endpoint => this.validateEndpointUrl(endpoint),
         });
         this.imageGenerationService = new PluginImageGenerationService({
-            getAllPlugins: () => this.getAllPlugins(),
-            getPlugin: id => this.getPlugin(id),
+            getAllPlugins: userId => this.getActivePlugins(userId),
+            getPlugin: (id, userId) => this.getPlugin(id, userId),
             getApiKey: (plugin, userId) => this.getApiKey(plugin, userId),
             getPluginVariables: (plugin, userId) => this.getPluginVariables(plugin, userId),
             validateEndpointUrl: endpoint => this.validateEndpointUrl(endpoint),
         });
         this.capabilityRegistryService = new PluginCapabilityRegistryService({
-            getAllPlugins: () => this.getAllPlugins(),
+            getAllPlugins: userId => this.getActivePlugins(userId),
             getApiKey: (plugin, userId) => this.getApiKey(plugin, userId),
         });
     }
+    discoveredModelsCacheKey(pluginId, userId) {
+        return `${userId}:${pluginId}`;
+    }
+    getDiscoveredModels(pluginId, userId) {
+        const effectiveUserId = userId || 'default';
+        const cacheKey = this.discoveredModelsCacheKey(pluginId, effectiveUserId);
+        if (this.discoveredModelsCache.has(cacheKey)) {
+            return this.discoveredModelsCache.get(cacheKey) || undefined;
+        }
+        const db = getDatabaseSafe();
+        if (!db) {
+            this.discoveredModelsCache.set(cacheKey, null);
+            return undefined;
+        }
+        try {
+            const row = db
+                .prepare('SELECT models_json FROM plugin_discovered_models WHERE user_id = ? AND plugin_id = ?')
+                .get(effectiveUserId, pluginId);
+            if (!row) {
+                this.discoveredModelsCache.set(cacheKey, null);
+                return undefined;
+            }
+            const parsed = JSON.parse(row.models_json);
+            const models = Array.isArray(parsed)
+                ? Array.from(new Set(parsed.filter((model) => typeof model === 'string' && model.length > 0)))
+                : [];
+            if (models.length === 0) {
+                this.discoveredModelsCache.set(cacheKey, null);
+                return undefined;
+            }
+            this.discoveredModelsCache.set(cacheKey, models);
+            return models;
+        }
+        catch (error) {
+            logger.warn('Failed to read discovered models for plugin %s:', pluginId, error);
+            this.discoveredModelsCache.set(cacheKey, null);
+            return undefined;
+        }
+    }
+    storeDiscoveredModels(pluginId, models, userId) {
+        const effectiveUserId = userId || 'default';
+        const uniqueModels = Array.from(new Set(models));
+        const cacheKey = this.discoveredModelsCacheKey(pluginId, effectiveUserId);
+        this.discoveredModelsCache.set(cacheKey, uniqueModels);
+        const db = getDatabaseSafe();
+        if (!db)
+            return;
+        try {
+            db.prepare(`INSERT INTO plugin_discovered_models
+          (user_id, plugin_id, models_json, updated_at)
+         VALUES (?, ?, ?, ?)
+         ON CONFLICT(user_id, plugin_id) DO UPDATE SET
+          models_json = excluded.models_json,
+          updated_at = excluded.updated_at`).run(effectiveUserId, pluginId, JSON.stringify(uniqueModels), Date.now());
+        }
+        catch (error) {
+            logger.warn('Failed to persist discovered models for plugin %s:', pluginId, error);
+        }
+    }
+    clearDiscoveredModels(pluginId, userId) {
+        const db = getDatabaseSafe();
+        if (userId) {
+            this.discoveredModelsCache.set(this.discoveredModelsCacheKey(pluginId, userId), null);
+            if (!db)
+                return;
+            try {
+                db.prepare('DELETE FROM plugin_discovered_models WHERE user_id = ? AND plugin_id = ?').run(userId, pluginId);
+            }
+            catch (error) {
+                logger.warn('Failed to clear discovered models for plugin %s:', pluginId, error);
+            }
+            return;
+        }
+        for (const key of this.discoveredModelsCache.keys()) {
+            if (key.endsWith(`:${pluginId}`)) {
+                this.discoveredModelsCache.delete(key);
+            }
+        }
+        if (!db)
+            return;
+        try {
+            db.prepare('DELETE FROM plugin_discovered_models WHERE plugin_id = ?').run(pluginId);
+        }
+        catch (error) {
+            logger.warn('Failed to clear discovered models for plugin %s:', pluginId, error);
+        }
+    }
+    applyDiscoveredModels(plugin, userId) {
+        if (!this.canUseStoredConnectionOverrides(userId) &&
+            pluginVariablesService.hasStoredConnectionOverride(plugin.id, userId, plugin.variables, getPluginConnectionVariableNames(plugin))) {
+            return plugin;
+        }
+        const models = this.getDiscoveredModels(plugin.id, userId);
+        return models ? { ...plugin, model_map: [...models] } : plugin;
+    }
     ensurePluginsDirectory() {
         if (!fs.existsSync(this.pluginsDir)) {
             fs.mkdirSync(this.pluginsDir, { recursive: true });
         }
     }
-    loadActivePlugins() {
-        const statusDirs = Array.from(new Set([this.pluginsDir, this.legacyPluginsDir]));
-        for (const statusDir of statusDirs) {
-            const statusFile = path.join(statusDir, '.status.json');
-            if (!fs.existsSync(statusFile)) {
-                continue;
-            }
-            try {
-                const status = JSON.parse(fs.readFileSync(statusFile, 'utf8'));
-                if (Array.isArray(status.activePlugins)) {
-                    this.activePluginIds = new Set(status.activePlugins);
-                }
-                else if (status.activePlugin) {
-                    // Legacy support for single active plugin
-                    this.activePluginIds = new Set([status.activePlugin]);
-                }
-                return;
+    bundledPluginPath(id) {
+        return path.resolve(this.bundledPluginsDir, `${sanitize(id)}.json`);
+    }
+    isAnchoredBundledDefinition(plugin, filePath) {
+        return (path.resolve(filePath) === this.bundledPluginPath(plugin.id) &&
+            matchesBundledPluginTrustAnchor(plugin));
+    }
+    isPluginDefinitionApproved(plugin, filePath) {
+        if (this.isAnchoredBundledDefinition(plugin, filePath)) {
+            return true;
+        }
+        const db = getDatabaseSafe();
+        if (!db)
+            return false;
+        try {
+            const row = db
+                .prepare(`SELECT definition_fingerprint, source_path
+           FROM plugin_definition_approvals
+           WHERE plugin_id = ?`)
+                .get(plugin.id);
+            return (row?.definition_fingerprint ===
+                getPluginDefinitionFingerprint(plugin) &&
+                row.source_path === path.resolve(filePath));
+        }
+        catch (error) {
+            logger.warn('Failed to inspect definition approval for plugin %s:', plugin.id, error);
+            return false;
+        }
+    }
+    approvePluginDefinition(plugin, filePath, userId) {
+        if (!this.canUseStoredConnectionOverrides(userId)) {
+            throw new Error('Administrator approval is required');
+        }
+        const db = getDatabaseSafe();
+        if (!db) {
+            throw new Error('Database not available for plugin approval');
+        }
+        db.prepare(`INSERT INTO plugin_definition_approvals
+         (plugin_id, definition_fingerprint, source_path,
+          approved_by_user_id, approved_at)
+       VALUES (?, ?, ?, ?, ?)
+       ON CONFLICT(plugin_id) DO UPDATE SET
+         definition_fingerprint = excluded.definition_fingerprint,
+         source_path = excluded.source_path,
+         approved_by_user_id = excluded.approved_by_user_id,
+         approved_at = excluded.approved_at`).run(plugin.id, getPluginDefinitionFingerprint(plugin), path.resolve(filePath), userId, Date.now());
+    }
+    removePluginDefinitionApproval(pluginId) {
+        const db = getDatabaseSafe();
+        if (!db)
+            return;
+        db.prepare('DELETE FROM plugin_definition_approvals WHERE plugin_id = ?').run(pluginId);
+    }
+    revokePluginDefinitionConsent(pluginId) {
+        const db = getDatabaseSafe();
+        if (!db) {
+            throw new Error('Database not available for plugin approval');
+        }
+        db.transaction(() => {
+            db.prepare('DELETE FROM plugin_activations WHERE plugin_id = ?').run(pluginId);
+            db.prepare('DELETE FROM plugin_definition_approvals WHERE plugin_id = ?').run(pluginId);
+        })();
+    }
+    canMigrateLegacyActivation(pluginId) {
+        const effectivePath = this.resolveEffectivePluginFilePath(pluginId);
+        if (!effectivePath)
+            return false;
+        try {
+            const parsedPlugin = JSON.parse(fs.readFileSync(effectivePath, 'utf8'));
+            return (this.validatePlugin(parsedPlugin) &&
+                parsedPlugin.id === pluginId &&
+                this.isAnchoredBundledDefinition(parsedPlugin, effectivePath));
+        }
+        catch {
+            return false;
+        }
+    }
+    resolveEffectivePluginFilePath(id) {
+        const sanitizedId = sanitize(id);
+        if (!sanitizedId || sanitizedId !== id)
+            return null;
+        for (const pluginsDir of [...this.pluginReadDirs].reverse()) {
+            const resolvedDirectory = path.resolve(pluginsDir);
+            const candidate = path.resolve(pluginsDir, `${sanitizedId}.json`);
+            if (candidate.startsWith(resolvedDirectory) && fs.existsSync(candidate)) {
+                return candidate;
             }
-            catch (error) {
-                logger.error('Failed to load plugin status:', error);
+        }
+        return null;
+    }
+    getBundledRoutingProjection(id) {
+        if (this.bundledRoutingProjectionCache.has(id)) {
+            return this.bundledRoutingProjectionCache.get(id) ?? null;
+        }
+        const sanitizedId = sanitize(id);
+        if (!sanitizedId || sanitizedId !== id)
+            return null;
+        const bundledDirectory = path.resolve(this.bundledPluginsDir);
+        const bundledPath = this.bundledPluginPath(sanitizedId);
+        if (!bundledPath.startsWith(bundledDirectory) ||
+            !fs.existsSync(bundledPath)) {
+            this.bundledRoutingProjectionCache.set(id, null);
+            return null;
+        }
+        try {
+            const parsedPlugin = JSON.parse(fs.readFileSync(bundledPath, 'utf8'));
+            if (!this.validatePlugin(parsedPlugin) ||
+                parsedPlugin.id !== sanitizedId ||
+                !matchesBundledPluginTrustAnchor(parsedPlugin)) {
+                this.bundledRoutingProjectionCache.set(id, null);
+                return null;
             }
+            const projection = getPluginRoutingAuthProjection(applyPluginDefinitionPolicy(parsedPlugin));
+            this.bundledRoutingProjectionCache.set(id, projection);
+            return projection;
+        }
+        catch (error) {
+            logger.warn('Failed to inspect bundled routing for plugin %s:', id, error);
+            this.bundledRoutingProjectionCache.set(id, null);
+            return null;
         }
     }
-    saveActivePlugins() {
-        const statusFile = path.join(this.pluginsDir, '.status.json');
-        const status = {
-            activePlugins: Array.from(this.activePluginIds),
-            lastUpdated: new Date().toISOString(),
-        };
-        fs.writeFileSync(statusFile, JSON.stringify(status, null, 2));
+    usesTrustedBundledRouting(plugin) {
+        const effectivePath = this.resolveEffectivePluginFilePath(plugin.id);
+        const bundledPath = this.bundledPluginPath(plugin.id);
+        if (!effectivePath || effectivePath !== bundledPath)
+            return false;
+        const bundledProjection = this.getBundledRoutingProjection(plugin.id);
+        return (bundledProjection !== null &&
+            getPluginRoutingAuthProjection(plugin) === bundledProjection);
+    }
+    isPluginActive(pluginId, userId) {
+        return pluginActivationService.getActivePluginIds(userId).has(pluginId);
+    }
+    canUseStoredConnectionOverrides(userId) {
+        const db = getDatabaseSafe();
+        if (!db)
+            return false;
+        try {
+            const row = db
+                .prepare('SELECT role FROM users WHERE id = ?')
+                .get(userId || 'default');
+            return row?.role === 'admin';
+        }
+        catch (error) {
+            logger.warn('Failed to resolve plugin routing permission:', error);
+            return false;
+        }
     }
     /**
      * Get API key for a plugin from database (per-user) or environment variable (fallback)
@@ -111,7 +379,57 @@ class PluginService {
      * @returns The API key or null if not found
      */
     getApiKey(plugin, userId) {
-        return pluginCredentialsService.getApiKey(plugin.id, plugin.auth.key_env, userId);
+        const hasHonoredConnectionOverride = this.canUseStoredConnectionOverrides(userId) &&
+            pluginVariablesService.hasStoredConnectionOverride(plugin.id, userId, plugin.variables, getPluginConnectionVariableNames(plugin));
+        const usesTrustedBundledRouting = this.usesTrustedBundledRouting(plugin);
+        const allowTrustedFallback = usesTrustedBundledRouting && !hasHonoredConnectionOverride;
+        return pluginCredentialsService.getApiKey(plugin.id, plugin.auth.key_env, userId, {
+            allowEnvironmentFallback: allowTrustedFallback,
+            expectedRoutingAuthFingerprint: this.getCredentialRoutingAuthFingerprint(plugin, userId),
+            allowLegacyUnboundCredential: allowTrustedFallback,
+        });
+    }
+    /**
+     * Bind a user credential to the exact routing/authentication contract in
+     * effect when they save it. Generation controls are intentionally excluded.
+     */
+    getCredentialRoutingAuthFingerprint(plugin, userId) {
+        const variables = this.getPluginVariables(plugin, userId);
+        const effectiveConnectionValues = Array.from(getPluginConnectionVariableNames(plugin), name => {
+            const definition = plugin.variables?.find(candidate => candidate.name === name);
+            if (!definition)
+                return null;
+            return {
+                name,
+                value: variables[name] ?? definition.default ?? '',
+            };
+        });
+        const effectivePath = this.resolveEffectivePluginFilePath(plugin.id);
+        let effectiveDefinitionFingerprint = getPluginDefinitionFingerprint(plugin);
+        if (effectivePath) {
+            try {
+                const effectiveDefinition = JSON.parse(fs.readFileSync(effectivePath, 'utf8'));
+                if (this.validatePlugin(effectiveDefinition) &&
+                    effectiveDefinition.id === plugin.id) {
+                    effectiveDefinitionFingerprint =
+                        getPluginDefinitionFingerprint(effectiveDefinition);
+                }
+            }
+            catch {
+                // Keep the in-memory fingerprint. A missing/invalid source is already
+                // excluded from normal plugin loading and cannot gain trust here.
+            }
+        }
+        const fingerprintInput = JSON.stringify({
+            plugin_id: plugin.id,
+            plugin_type: plugin.type,
+            trusted_bundled_source: this.usesTrustedBundledRouting(plugin),
+            effective_source_path: effectivePath ? path.resolve(effectivePath) : null,
+            effective_definition_fingerprint: effectiveDefinitionFingerprint,
+            routing_auth_projection: getPluginRoutingAuthProjection(plugin),
+            effective_connection_values: effectiveConnectionValues,
+        });
+        return createHash('sha256').update(fingerprintInput).digest('hex');
     }
     /**
      * Get resolved variable values for a plugin (decrypted, typed).
@@ -120,34 +438,58 @@ class PluginService {
         if (!plugin.variables || plugin.variables.length === 0) {
             return {};
         }
-        return pluginVariablesService.getResolvedVariables(plugin.id, plugin.variables, userId);
+        const variables = pluginVariablesService.getResolvedVariables(plugin.id, plugin.variables, userId);
+        if (this.canUseStoredConnectionOverrides(userId))
+            return variables;
+        return Object.fromEntries(Object.entries(variables).map(([name, value]) => {
+            if (!getPluginConnectionVariableNames(plugin).has(name)) {
+                return [name, value];
+            }
+            const definition = plugin.variables?.find(candidate => candidate.name === name);
+            return [name, definition?.default ?? ''];
+        }));
     }
     /**
-     * Validate an endpoint URL for safety (SSRF protection).
-     * Returns the URL string if valid, or null if invalid.
+     * Validate an endpoint override as an absolute HTTP or HTTPS URL.
+     * Returns the URL string if valid and throws for an invalid explicit value.
      */
     validateEndpointUrl(endpoint) {
-        return validatePluginEndpointOverride(endpoint);
+        return resolvePluginEndpoint('', endpoint);
+    }
+    /**
+     * Resolve and validate routing before credential lookup. The credential
+     * service's custom-route policy is integrated separately; keeping this
+     * boundary ordered prevents a rejected override from ever selecting an
+     * environment credential.
+     */
+    resolveOperationEndpoint(plugin, userId) {
+        return resolvePluginApiConfig(plugin, this.getPluginVariables(plugin, userId)).endpoint;
     }
     /**
-     * Attempt to auto-discover available models from a plugin's base endpoint.
+     * Attempt to auto-discover available models from a plugin's full API endpoint.
      * Resolves the provider's model-list endpoint and updates the plugin's model_map.
      * Falls back silently to the existing model_map if the endpoint is unavailable.
      */
     async discoverModels(pluginId, userId) {
-        const plugin = this.getPlugin(pluginId);
+        const plugin = this.getPlugin(pluginId, userId);
         if (!plugin)
             return [];
         const pluginVars = this.getPluginVariables(plugin, userId);
-        const endpointOverride = pluginVars.endpoint;
-        const effectiveEndpoint = (endpointOverride && this.validateEndpointUrl(endpointOverride)) ||
-            plugin.endpoint;
+        const { endpoint: effectiveEndpoint } = resolvePluginApiConfig(plugin, pluginVars);
+        const modelsEndpoint = resolvePluginModelsEndpoint(effectiveEndpoint, typeof pluginVars.models_endpoint === 'string'
+            ? pluginVars.models_endpoint
+            : undefined);
+        assertSafePluginEndpoint(modelsEndpoint, 'model discovery endpoint');
         const apiKey = this.getApiKey(plugin, userId);
+        if (pluginRequiresApiKey(plugin) && !apiKey) {
+            return plugin.model_map;
+        }
         const headers = buildPluginModelDiscoveryHeaders(plugin, apiKey);
         try {
-            const response = await axios.get(resolvePluginModelsEndpoint(effectiveEndpoint), {
+            const response = await axios.get(modelsEndpoint, {
                 headers,
                 timeout: 5000,
+                maxRedirects: 0,
             });
             if (response.data?.data && Array.isArray(response.data.data)) {
                 const models = response.data.data
@@ -155,21 +497,7 @@ class PluginService {
                     .filter((id) => typeof id === 'string');
                 if (models.length > 0) {
                     logger.debug('[Plugin] Auto-discovered %d models for %s:', models.length, pluginId, models);
-                    // Update the plugin file with discovered models
-                    plugin.model_map = models;
-                    const safeId = pluginId.replace(/[^a-zA-Z0-9_.-]/g, '');
-                    if (safeId !== pluginId)
-                        throw new Error('Invalid plugin ID');
-                    const filePath = path.resolve(this.pluginsDir, `${safeId}.json`);
-                    if (!filePath.startsWith(path.resolve(this.pluginsDir))) {
-                        throw new Error('Path traversal detected');
-                    }
-                    const pluginData = fs.existsSync(filePath)
-                        ? JSON.parse(fs.readFileSync(filePath, 'utf8'))
-                        : plugin;
-                    pluginData.model_map = models;
-                    pluginData.updated_at = Date.now();
-                    fs.writeFileSync(filePath, JSON.stringify(pluginData, null, 2));
+                    this.storeDiscoveredModels(pluginId, models, userId);
                     return models;
                 }
             }
@@ -180,8 +508,9 @@ class PluginService {
         return plugin.model_map;
     }
     // List all installed plugins
-    getAllPlugins() {
+    getAllPlugins(userId) {
         const plugins = new Map();
+        const activePluginIds = pluginActivationService.getActivePluginIds(userId);
         for (const pluginsDir of this.pluginReadDirs) {
             if (!fs.existsSync(pluginsDir)) {
                 continue;
@@ -190,18 +519,36 @@ class PluginService {
                 const files = fs.readdirSync(pluginsDir);
                 for (const file of files) {
                     if (file.endsWith('.json') && !file.startsWith('.')) {
+                        const filenameId = path.basename(file, '.json');
                         try {
                             const filePath = path.join(pluginsDir, file);
                             const content = fs.readFileSync(filePath, 'utf8');
                             const parsedPlugin = JSON.parse(content);
                             // Validate plugin structure
-                            if (this.validatePlugin(parsedPlugin)) {
+                            if (this.validatePlugin(parsedPlugin) &&
+                                parsedPlugin.id === filenameId) {
+                                if (!this.isPluginDefinitionApproved(parsedPlugin, filePath)) {
+                                    // A later writable definition shadows an earlier bundled
+                                    // definition even while quarantined.
+                                    plugins.delete(parsedPlugin.id);
+                                    continue;
+                                }
                                 const plugin = applyPluginDefinitionPolicy(parsedPlugin);
-                                plugin.active = this.activePluginIds.has(plugin.id);
-                                plugins.set(plugin.id, plugin);
+                                plugin.active = activePluginIds.has(plugin.id);
+                                plugins.set(plugin.id, this.applyDiscoveredModels(plugin, userId));
+                            }
+                            else if (parsedPlugin.id !== filenameId) {
+                                plugins.delete(filenameId);
+                                logger.warn('Ignoring plugin %s because its declared ID does not match its filename', file);
+                            }
+                            else {
+                                plugins.delete(filenameId);
                             }
                         }
                         catch (error) {
+                            // Invalid JSON in an effective same-ID writable file must fail
+                            // closed instead of revealing an earlier bundled definition.
+                            plugins.delete(filenameId);
                             logger.error(`Failed to load plugin ${file}:`, error);
                         }
                     }
@@ -214,39 +561,40 @@ class PluginService {
         return Array.from(plugins.values());
     }
     // Get a specific plugin by ID
-    getPlugin(id) {
+    getPlugin(id, userId) {
         // Sanitize the ID to prevent path traversal
         const sanitizedId = sanitize(id);
         if (!sanitizedId || sanitizedId !== id) {
             logger.error('Invalid plugin ID provided:', id);
             return null;
         }
-        for (const pluginsDir of [...this.pluginReadDirs].reverse()) {
-            const filePath = path.resolve(pluginsDir, `${sanitizedId}.json`);
-            if (!filePath.startsWith(path.resolve(pluginsDir)) ||
-                !fs.existsSync(filePath)) {
-                continue;
-            }
-            try {
-                const content = fs.readFileSync(filePath, 'utf8');
-                const parsedPlugin = JSON.parse(content);
-                if (this.validatePlugin(parsedPlugin)) {
-                    const plugin = applyPluginDefinitionPolicy(parsedPlugin);
-                    plugin.active = this.activePluginIds.has(plugin.id);
-                    return plugin;
-                }
-            }
-            catch (error) {
-                logger.error('Failed to load plugin %s:', sanitizedId, error);
+        const filePath = this.resolveEffectivePluginFilePath(sanitizedId);
+        if (!filePath)
+            return null;
+        try {
+            const content = fs.readFileSync(filePath, 'utf8');
+            const parsedPlugin = JSON.parse(content);
+            if (this.validatePlugin(parsedPlugin) &&
+                parsedPlugin.id === sanitizedId &&
+                this.isPluginDefinitionApproved(parsedPlugin, filePath)) {
+                const plugin = applyPluginDefinitionPolicy(parsedPlugin);
+                plugin.active = this.isPluginActive(plugin.id, userId);
+                return this.applyDiscoveredModels(plugin, userId);
             }
         }
+        catch (error) {
+            logger.error('Failed to load plugin %s:', sanitizedId, error);
+        }
         return null;
     }
     // Install or update a plugin
-    installPlugin(pluginData) {
+    installPlugin(pluginData, approvedByUserId) {
         if (!this.validatePlugin(pluginData)) {
             throw new Error('Invalid plugin structure');
         }
+        if (!this.canUseStoredConnectionOverrides(approvedByUserId)) {
+            throw new Error('Administrator approval is required');
+        }
         const now = Date.now();
         const plugin = {
             ...pluginData,
@@ -261,7 +609,25 @@ class PluginService {
         if (!filePath.startsWith(path.resolve(this.pluginsDir))) {
             throw new Error('Path traversal detected');
         }
-        fs.writeFileSync(filePath, JSON.stringify(plugin, null, 2));
+        // Revoke definition approval and every user's activation before replacing
+        // bytes on disk. Any crash or write failure therefore leaves the provider
+        // quarantined and inactive.
+        this.revokePluginDefinitionConsent(plugin.id);
+        this.clearDiscoveredModels(plugin.id);
+        const temporaryPath = path.resolve(this.pluginsDir, `.${safeId}.${process.pid}.${Date.now()}.tmp`);
+        try {
+            fs.writeFileSync(temporaryPath, JSON.stringify(plugin, null, 2), {
+                flag: 'wx',
+            });
+            fs.renameSync(temporaryPath, filePath);
+        }
+        catch (error) {
+            if (fs.existsSync(temporaryPath)) {
+                fs.unlinkSync(temporaryPath);
+            }
+            throw error;
+        }
+        this.approvePluginDefinition(plugin, filePath, approvedByUserId);
         return plugin;
     }
     // Delete a plugin
@@ -278,7 +644,8 @@ class PluginService {
             logger.error('Plugin ID failed sanitization:', id);
             return false;
         }
-        const writablePluginDirs = Array.from(new Set([this.pluginsDir, this.legacyPluginsDir]));
+        const bundledDirectory = path.resolve(this.bundledPluginsDir);
+        const writablePluginDirs = Array.from(new Set([this.pluginsDir, this.legacyPluginsDir])).filter(pluginsDir => path.resolve(pluginsDir) !== bundledDirectory);
         const filePath = writablePluginDirs
             .map(pluginsDir => path.resolve(pluginsDir, `${sanitizedId}.json`))
             .find(candidate => fs.existsSync(candidate));
@@ -288,13 +655,12 @@ class PluginService {
         }
         try {
             fs.unlinkSync(filePath);
-            // If this was an active plugin, deactivate it
-            if (this.activePluginIds.has(id)) {
-                this.activePluginIds.delete(id);
-                this.saveActivePlugins();
-            }
+            pluginActivationService.deletePlugin(id);
+            this.removePluginDefinitionApproval(id);
             // Clean up stored variables
             pluginVariablesService.deletePluginVariables(id);
+            pluginCredentialsService.deleteAllPluginCredentials(id);
+            this.clearDiscoveredModels(id);
             return true;
         }
         catch (error) {
@@ -303,38 +669,52 @@ class PluginService {
         }
     }
     // Activate a plugin
-    activatePlugin(id) {
-        const plugin = this.getPlugin(id);
+    async activatePlugin(id, userId) {
+        const plugin = this.getPlugin(id, userId);
         if (!plugin) {
             throw new Error('Plugin not found');
         }
-        this.activePluginIds.add(id);
-        this.saveActivePlugins();
-        // Trigger model discovery in background (non-blocking)
-        this.discoverModels(id).catch(() => { });
+        if (!pluginActivationService.activate(id, userId)) {
+            throw new Error('Failed to persist plugin activation');
+        }
+        // Wait for discovery so the activation response and the UI's first reload
+        // observe the same user-scoped model catalog.
+        await this.discoverModels(id, userId).catch(() => { });
         return true;
     }
     // Deactivate a specific plugin
-    deactivatePlugin(id) {
-        if (id) {
-            this.activePluginIds.delete(id);
-        }
-        else {
-            // Legacy: deactivate all plugins
-            this.activePluginIds.clear();
-        }
-        this.saveActivePlugins();
-        return true;
+    deactivatePlugin(id, userId) {
+        // The legacy no-ID route now deactivates all plugins only for this user.
+        return pluginActivationService.deactivate(id, userId);
     }
     // Get the active plugin for a specific model
-    getActivePluginForModel(model, userId) {
+    getActivePluginForModel(model, userId, pluginId) {
+        if (pluginId) {
+            const plugin = this.getPlugin(pluginId, userId);
+            if (!plugin) {
+                throw new Error(`Plugin not found: ${pluginId}`);
+            }
+            if (!this.isPluginActive(pluginId, userId)) {
+                throw new Error(`Plugin is not active: ${pluginId}`);
+            }
+            if (!plugin.model_map.includes(model)) {
+                throw new Error(`Model ${model} is not supported by plugin ${pluginId}`);
+            }
+            this.resolveOperationEndpoint(plugin, userId);
+            const apiKey = this.getApiKey(plugin, userId);
+            if (pluginRequiresApiKey(plugin) && !apiKey) {
+                throw new Error(`API key not found for plugin ${pluginId} (save a provider credential in Settings)`);
+            }
+            return plugin;
+        }
         // Only route through plugins the user explicitly activated.
-        const activePlugins = this.getActivePlugins();
+        const activePlugins = this.getActivePlugins(userId);
         // Find the active plugin that supports this model
         for (const plugin of activePlugins) {
             if (plugin.model_map.includes(model)) {
                 // Local OpenAI-compatible servers can explicitly opt out of auth by
                 // leaving both auth fields empty.
+                this.resolveOperationEndpoint(plugin, userId);
                 const apiKey = this.getApiKey(plugin, userId);
                 if (pluginRequiresApiKey(plugin) && !apiKey) {
                     continue;
@@ -345,52 +725,57 @@ class PluginService {
         return null;
     }
     // Get all currently active plugins
-    getActivePlugins() {
-        const allPlugins = this.getAllPlugins();
-        const activePlugins = allPlugins.filter(plugin => this.activePluginIds.has(plugin.id));
+    getActivePlugins(userId) {
+        const allPlugins = this.getAllPlugins(userId);
+        const activePlugins = allPlugins.filter(plugin => plugin.active);
         return activePlugins;
     }
     // Legacy method for backward compatibility - returns first active plugin
-    getActivePlugin() {
-        const activePlugins = this.getActivePlugins();
+    getActivePlugin(userId) {
+        const activePlugins = this.getActivePlugins(userId);
         return activePlugins.length > 0 ? activePlugins[0] : null;
     }
     // Get plugin status
-    getPluginStatus() {
-        const plugins = this.getAllPlugins();
+    getPluginStatus(userId) {
+        const plugins = this.getAllPlugins(userId);
         return plugins.map(plugin => ({
             id: plugin.id,
             active: plugin.active || false,
-            available: true, // Could be enhanced to check endpoint availability
+            available: !pluginRequiresApiKey(plugin) ||
+                this.getApiKey(plugin, userId) !== null,
         }));
     }
     // Execute a chat request through the active plugin
-    async executePluginRequest(model, messages, options = {}, userId) {
+    async executePluginRequest(model, messages, options = {}, userId, pluginId) {
         validatePluginModel(model);
-        const activePlugin = this.getActivePluginForModel(model, userId);
+        const activePlugin = this.getActivePluginForModel(model, userId, pluginId);
         if (!activePlugin) {
             throw new Error(`No active plugin found for model: ${model}`);
         }
         if (!activePlugin.model_map.includes(model)) {
             throw new Error(`Model ${model} is not supported by plugin ${activePlugin.id}`);
         }
+        const pluginVars = this.getPluginVariables(activePlugin, userId);
+        const { apiMode, endpoint: effectiveEndpoint } = resolvePluginApiConfig(activePlugin, pluginVars);
+        const processedEndpoint = applyModelEndpointTemplate(effectiveEndpoint, model);
+        assertSafePluginEndpoint(processedEndpoint, 'endpoint URL constructed');
         const apiKey = this.getApiKey(activePlugin, userId);
         if (pluginRequiresApiKey(activePlugin) && !apiKey) {
-            throw new Error(`API key not found for plugin ${activePlugin.id} (set via Settings or ${activePlugin.auth.key_env} env var)`);
+            throw new Error(`API key not found for plugin ${activePlugin.id} (save a provider credential in Settings)`);
         }
-        const pluginVars = this.getPluginVariables(activePlugin, userId);
-        const effectiveEndpoint = resolvePluginEndpoint(activePlugin.endpoint, pluginVars.endpoint);
+        const providerStateScope = apiMode === 'responses'
+            ? createOpenAIResponsesStateScope(activePlugin.id, model, processedEndpoint, createPluginCredentialFingerprint(apiKey))
+            : undefined;
         const headers = buildPluginAuthHeaders(activePlugin, apiKey);
-        const { payload, headers: payloadHeaders } = buildPluginChatPayload(activePlugin, model, messages, options, pluginVars, false);
+        const { payload, headers: payloadHeaders } = buildPluginChatPayload(activePlugin, model, messages, options, pluginVars, false, apiMode, providerStateScope);
         Object.assign(headers, payloadHeaders);
-        const processedEndpoint = applyModelEndpointTemplate(effectiveEndpoint, model);
-        assertSafePluginEndpoint(processedEndpoint, 'endpoint URL constructed');
         try {
             const response = await axios.post(processedEndpoint, payload, {
                 headers,
                 timeout: 60000, // 60 second timeout
+                maxRedirects: 0,
             });
-            return convertProviderResponse(activePlugin, response.data, model);
+            return convertProviderResponse(activePlugin, response.data, model, apiMode, providerStateScope);
         }
         catch (error) {
             logger.error(`Plugin request failed for ${activePlugin.id}:`, error);
@@ -412,27 +797,32 @@ class PluginService {
      * Returns an async generator that yields SSE delta content strings.
      * Also collects tool_calls from the stream.
      */
-    async *executePluginStreamRequest(model, messages, options = {}, userId) {
+    async *executePluginStreamRequest(model, messages, options = {}, userId, pluginId) {
         validatePluginModel(model);
-        const activePlugin = this.getActivePluginForModel(model, userId);
+        const activePlugin = this.getActivePluginForModel(model, userId, pluginId);
         if (!activePlugin) {
             throw new Error(`No active plugin found for model: ${model}`);
         }
         if (!activePlugin.model_map.includes(model)) {
             throw new Error(`Model ${model} is not supported by plugin ${activePlugin.id}`);
         }
+        const pluginVars = this.getPluginVariables(activePlugin, userId);
+        const { apiMode, endpoint: effectiveEndpoint } = resolvePluginApiConfig(activePlugin, pluginVars);
+        const processedEndpoint = applyModelEndpointTemplate(effectiveEndpoint, model);
+        assertSafePluginEndpoint(processedEndpoint);
         const apiKey = this.getApiKey(activePlugin, userId);
         if (pluginRequiresApiKey(activePlugin) && !apiKey) {
-            throw new Error(`API key not found for plugin ${activePlugin.id} (set via Settings or ${activePlugin.auth.key_env} env var)`);
+            throw new Error(`API key not found for plugin ${activePlugin.id} (save a provider credential in Settings)`);
         }
-        const pluginVars = this.getPluginVariables(activePlugin, userId);
-        const effectiveEndpoint = resolvePluginEndpoint(activePlugin.endpoint, pluginVars.endpoint);
+        const providerStateScope = apiMode === 'responses'
+            ? createOpenAIResponsesStateScope(activePlugin.id, model, processedEndpoint, createPluginCredentialFingerprint(apiKey))
+            : undefined;
         const headers = buildPluginAuthHeaders(activePlugin, apiKey);
         let payload;
-        if (activePlugin.id === 'anthropic') {
-            const anthropicRequest = buildPluginChatPayload(activePlugin, model, messages, options, pluginVars, true);
-            payload = anthropicRequest.payload;
-            Object.assign(headers, anthropicRequest.headers);
+        if (activePlugin.id === 'anthropic' || apiMode === 'responses') {
+            const pluginRequest = buildPluginChatPayload(activePlugin, model, messages, options, pluginVars, true, apiMode, providerStateScope);
+            payload = pluginRequest.payload;
+            Object.assign(headers, pluginRequest.headers);
         }
         else {
             const params = resolvePluginChatParameters(options, pluginVars);
@@ -445,54 +835,152 @@ class PluginService {
                 stream: true,
             };
         }
-        const processedEndpoint = applyModelEndpointTemplate(effectiveEndpoint, model);
-        assertSafePluginEndpoint(processedEndpoint);
         const response = await fetch(processedEndpoint, {
             method: 'POST',
             headers,
             body: JSON.stringify(payload),
+            redirect: 'error',
         });
         if (activePlugin.id === 'anthropic') {
             yield* streamAnthropicResponse(response);
         }
+        else if (apiMode === 'responses') {
+            const contentType = response.headers.get('content-type') || '';
+            if (!contentType.includes('text/event-stream')) {
+                if (!response.ok) {
+                    const errorText = await response.text();
+                    throw new Error(`Plugin API error: ${response.status} - ${errorText.slice(0, 200)}`);
+                }
+                const normalized = convertProviderResponse(activePlugin, (await response.json()), model, apiMode, providerStateScope);
+                const choice = normalized.choices[0];
+                const message = choice?.message;
+                if (typeof message?.content === 'string' && message.content) {
+                    yield { type: 'content', content: message.content };
+                }
+                if (typeof message?.reasoning_content === 'string' &&
+                    message.reasoning_content) {
+                    yield {
+                        type: 'reasoning',
+                        content: message.reasoning_content,
+                    };
+                }
+                for (const call of message?.tool_calls || []) {
+                    yield {
+                        type: 'tool_call',
+                        toolCall: {
+                            id: call.id,
+                            name: call.function.name,
+                            arguments: call.function.arguments,
+                            ...(call.providerMetadata
+                                ? { providerMetadata: call.providerMetadata }
+                                : {}),
+                        },
+                    };
+                }
+                if (normalized.usage) {
+                    yield {
+                        type: 'usage',
+                        usage: {
+                            promptTokens: normalized.usage.prompt_tokens,
+                            completionTokens: normalized.usage.completion_tokens,
+                            totalTokens: normalized.usage.total_tokens,
+                        },
+                    };
+                }
+                const incompleteReason = typeof normalized.providerMetadata?.[OPENAI_RESPONSES_INCOMPLETE_REASON_METADATA_KEY] === 'string'
+                    ? normalized.providerMetadata[OPENAI_RESPONSES_INCOMPLETE_REASON_METADATA_KEY]
+                    : undefined;
+                yield {
+                    type: 'done',
+                    ...(incompleteReason
+                        ? { doneReason: `incomplete:${incompleteReason}` }
+                        : {}),
+                    ...(normalized.providerMetadata
+                        ? { providerMetadata: normalized.providerMetadata }
+                        : {}),
+                };
+            }
+            else {
+                yield* streamOpenAIResponsesResponse(response, providerStateScope);
+            }
+        }
         else {
             yield* streamOpenAICompatibleResponse(response);
         }
     }
     // Validate plugin structure
     validatePlugin(plugin) {
-        return (typeof plugin === 'object' &&
-            plugin !== null &&
-            typeof plugin.id === 'string' &&
-            typeof plugin.name === 'string' &&
-            typeof plugin.type === 'string' &&
-            typeof plugin.endpoint === 'string' &&
-            typeof plugin.auth === 'object' &&
-            plugin.auth !== null &&
-            typeof plugin.auth.header === 'string' &&
-            typeof plugin.auth.key_env === 'string' &&
-            (plugin.auth
-                .prefix === undefined ||
-                typeof plugin.auth.prefix === 'string') &&
-            Array.isArray(plugin.model_map) &&
-            plugin.model_map.length > 0);
+        const pluginRecord = typeof plugin === 'object' && plugin !== null
+            ? plugin
+            : null;
+        const variables = pluginRecord?.variables;
+        const variableNames = variables === undefined
+            ? []
+            : Array.isArray(variables)
+                ? variables.map(variable => typeof variable === 'object' &&
+                    variable !== null &&
+                    typeof variable.name === 'string'
+                    ? variable.name
+                    : null)
+                : [null];
+        const hasUniqueVariableNames = !variableNames.includes(null) &&
+            new Set(variableNames).size === variableNames.length;
+        return (pluginRecord !== null &&
+            hasUniqueVariableNames &&
+            typeof pluginRecord.id === 'string' &&
+            typeof pluginRecord.name === 'string' &&
+            typeof pluginRecord.type === 'string' &&
+            typeof pluginRecord.endpoint === 'string' &&
+            (pluginRecord.api_mode === undefined ||
+                pluginRecord.api_mode === 'chat_completions' ||
+                pluginRecord.api_mode === 'responses') &&
+            (pluginRecord.base_url === undefined ||
+                typeof pluginRecord.base_url === 'string') &&
+            (pluginRecord.api_path === undefined ||
+                typeof pluginRecord.api_path === 'string') &&
+            typeof pluginRecord.auth === 'object' &&
+            pluginRecord.auth !== null &&
+            typeof pluginRecord.auth.header ===
+                'string' &&
+            typeof pluginRecord.auth.key_env ===
+                'string' &&
+            (pluginRecord.auth.prefix === undefined ||
+                typeof pluginRecord.auth.prefix ===
+                    'string') &&
+            Array.isArray(pluginRecord.model_map) &&
+            pluginRecord.model_map.length > 0);
     }
     // Export plugin to JSON
-    exportPlugin(id) {
-        return this.getPlugin(id);
+    exportPlugin(id, userId) {
+        return this.getPlugin(id, userId);
     }
     // Import plugin from JSON data
-    importPlugin(pluginData) {
+    importPlugin(pluginData, approvedByUserId) {
         // Validate and clean the plugin data
         if (!this.validatePlugin(pluginData)) {
             throw new Error('Invalid plugin data');
         }
         // Check if plugin already exists
-        const existingPlugin = this.getPlugin(pluginData.id);
-        if (existingPlugin) {
-            throw new Error(`Plugin with ID ${pluginData.id} already exists`);
+        const existingPluginPath = this.resolveEffectivePluginFilePath(pluginData.id);
+        if (existingPluginPath) {
+            try {
+                const existingPlugin = JSON.parse(fs.readFileSync(existingPluginPath, 'utf8'));
+                if (this.validatePlugin(existingPlugin) &&
+                    existingPlugin.id === pluginData.id &&
+                    this.isPluginDefinitionApproved(existingPlugin, existingPluginPath)) {
+                    throw new Error(`Plugin with ID ${pluginData.id} already exists`);
+                }
+            }
+            catch (error) {
+                if (error instanceof Error &&
+                    error.message.includes('already exists')) {
+                    throw error;
+                }
+                // Invalid and unapproved legacy definitions may be replaced by this
+                // authenticated administrator import.
+            }
         }
-        return this.installPlugin(pluginData);
+        return this.installPlugin(pluginData, approvedByUserId);
     }
     // ============================================
     // Capability Methods
@@ -515,20 +1003,20 @@ class PluginService {
     async executeTTSRequest(model, input, options = {}) {
         return this.ttsService.executeTTSRequest(model, input, options);
     }
-    getTTSConfig(pluginId) {
-        return this.ttsService.getTTSConfig(pluginId);
+    getTTSConfig(pluginId, userId) {
+        return this.ttsService.getTTSConfig(pluginId, userId);
     }
-    getPluginForImageGen(model) {
-        return this.imageGenerationService.getPluginForImageGen(model);
+    getPluginForImageGen(model, pluginId, userId) {
+        return this.imageGenerationService.getPluginForImageGen(model, pluginId, userId);
     }
-    getAvailableImageGenModels() {
-        return this.imageGenerationService.getAvailableImageGenModels();
+    getAvailableImageGenModels(userId) {
+        return this.imageGenerationService.getAvailableImageGenModels(userId);
     }
-    async executeImageGenRequest(model, prompt, options = {}) {
+    async executeImageGenRequest(model, prompt, options) {
         return this.imageGenerationService.executeImageGenRequest(model, prompt, options);
     }
-    getImageGenConfig(pluginId) {
-        return this.imageGenerationService.getImageGenConfig(pluginId);
+    getImageGenConfig(pluginId, userId) {
+        return this.imageGenerationService.getImageGenConfig(pluginId, userId);
     }
     getPluginsByCapability(capabilityType, userId) {
         return this.capabilityRegistryService.getPluginsByCapability(capabilityType, userId);