@axiom-lattice/gateway 4.8.1 → 4.8.3

package/dist/index.mjs

@@ -4499,17 +4499,7 @@ async function importApply(request, reply) {
 import { serializePluginMeta } from "@axiom-lattice/core";
 
 // src/services/plugins/tenantPluginResolver.ts
-import { PluginRegistry as PluginRegistry2, getSandboxPluginCatalog as getSandboxPluginCatalog2, mergePluginSources } from "@axiom-lattice/core";
-async function listTenantPlugins(tenantId) {
-  let tenantPlugins = [];
-  try {
-    tenantPlugins = (await getSandboxPluginCatalog2().ensureLoaded(tenantId)).plugins;
-  } catch {
-    tenantPlugins = [];
-  }
-  const globalPlugins = PluginRegistry2.list().map((type) => PluginRegistry2.get(type)).filter((p) => Boolean(p));
-  return mergePluginSources(globalPlugins, tenantPlugins);
-}
+import { listTenantPlugins } from "@axiom-lattice/core";
 async function resolveTenantPluginByType(tenantId, type) {
   return (await listTenantPlugins(tenantId)).find((p) => p.meta.type === type);
 }
@@ -7656,6 +7646,15 @@ function registerMetricsServerConfigRoutes(app2) {
 // src/controllers/connections.ts
 import { ConnectionRegistry } from "@axiom-lattice/core";
 import { z as z2 } from "zod";
+
+// src/services/plugins/connectionSecretFields.ts
+import { connectionSecretFields } from "@axiom-lattice/core";
+function secretFieldsForConnection(plugin) {
+  const keys2 = connectionSecretFields(plugin);
+  return keys2.length > 0 ? keys2 : void 0;
+}
+
+// src/controllers/connections.ts
 var createBody = z2.object({
   type: z2.string().min(1),
   key: z2.string().min(1),
@@ -7677,25 +7676,6 @@ function getTenant(request) {
 async function getTenantPlugin(request, type) {
   return resolveTenantPluginByType(getTenant(request), type);
 }
-function maskSecrets(config) {
-  const sensitive = /* @__PURE__ */ new Set([
-    "password",
-    "secret",
-    "token",
-    "apikey",
-    "api_key",
-    "session",
-    "privatekey",
-    "private_key",
-    "accesskey",
-    "access_key"
-  ]);
-  const out = {};
-  for (const [k, v] of Object.entries(config)) {
-    out[k] = sensitive.has(k.toLowerCase()) ? "********" : v;
-  }
-  return out;
-}
 async function resolveConfig(type, body, tenantId) {
   if (body.key) {
     const entry = await ConnectionRegistry.get(type, body.key, tenantId);
@@ -7712,22 +7692,24 @@ function connectionRoutes(fastify2) {
     const entries = await ConnectionRegistry.list(type, getTenant(request));
     return reply.send({
       success: true,
-      data: { records: entries.map((e) => ({ ...e, config: maskSecrets(e.config) })), total: entries.length }
+      data: { records: entries, total: entries.length }
     });
   });
   fastify2.post("/api/connections", async (request, reply) => {
     const parsed = createBody.parse(request.body);
+    const plugin = await getTenantPlugin(request, parsed.type);
     const entry = await ConnectionRegistry.create({
       tenantId: getTenant(request),
       type: parsed.type,
       key: parsed.key,
       name: parsed.name,
       description: parsed.description,
-      config: parsed.config
+      config: parsed.config,
+      secretFields: secretFieldsForConnection(plugin)
     });
     return reply.status(201).send({
       success: true,
-      data: { ...entry, config: maskSecrets(entry.config) }
+      data: entry
     });
   });
   fastify2.put("/api/connections/:key", async (request, reply) => {
@@ -7738,16 +7720,18 @@ function connectionRoutes(fastify2) {
     const tenantId = getTenant(request);
     const existing = await ConnectionRegistry.get(type, key, tenantId);
     if (!existing) return reply.status(404).send({ error: "not found" });
+    const plugin = await getTenantPlugin(request, type);
     const updates = {};
     if (body.name !== void 0) updates.name = body.name;
     if (body.description !== void 0) updates.description = body.description;
     if (body.config) {
       updates.config = { ...existing.config, ...body.config };
+      updates.secretFields = secretFieldsForConnection(plugin);
     }
     const entry = await ConnectionRegistry.update(tenantId, type, key, updates);
     return reply.send({
       success: true,
-      data: { ...entry, config: maskSecrets(entry?.config ?? {}) }
+      data: entry
     });
   });
   fastify2.delete("/api/connections/:key", async (request, reply) => {
@@ -8308,7 +8292,7 @@ import {
   parseMcpUiRef
 } from "@axiom-lattice/protocols";
 import {
-  getSandboxPluginCatalog as getSandboxPluginCatalog3,
+  getSandboxPluginCatalog as getSandboxPluginCatalog2,
   mcpManager as mcpManager2
 } from "@axiom-lattice/core";
 
@@ -8674,9 +8658,9 @@ function createDefaultPluginBackend() {
   return {
     resolvePlugin: (tenantId, type) => resolveTenantPluginByType(tenantId, type),
     catalog: {
-      readPluginFile: (tenantId, pluginType, relPath) => getSandboxPluginCatalog3().readPluginFile(tenantId, pluginType, relPath),
-      getValidatedManifest: (tenantId, pluginType) => getSandboxPluginCatalog3().getValidatedManifest(tenantId, pluginType),
-      getExecutor: () => getSandboxPluginCatalog3().getExecutor()
+      readPluginFile: (tenantId, pluginType, relPath) => getSandboxPluginCatalog2().readPluginFile(tenantId, pluginType, relPath),
+      getValidatedManifest: (tenantId, pluginType) => getSandboxPluginCatalog2().getValidatedManifest(tenantId, pluginType),
+      getExecutor: () => getSandboxPluginCatalog2().getExecutor()
     }
   };
 }
@@ -23900,7 +23884,8 @@ var connectionRegistration = {
         key: c2.key,
         name: c2.name,
         description: c2.description,
-        config: c2.config
+        config: c2.config,
+        secretFields: c2.secretFields
       }
     }));
   },
@@ -23944,13 +23929,15 @@ var connectionRegistration = {
       } catch {
       }
     }
+    const secretFields = Array.isArray(d.secretFields) ? d.secretFields : secretFieldsForConnection(await resolveTenantPluginByType(tenantId, type));
     await store.create({
       tenantId,
       type,
       key,
       name: d.name,
       description: d.description,
-      config: d.config
+      config: d.config,
+      secretFields
     });
     return { newId: void 0 };
   }
@@ -25125,7 +25112,7 @@ import {
   agentLatticeManager as agentLatticeManager5,
   configurePluginCatalogSync,
   PLUGIN_CATALOG_CHANGED_TOPIC,
-  getSandboxPluginCatalog as getSandboxPluginCatalog4
+  getSandboxPluginCatalog as getSandboxPluginCatalog3
 } from "@axiom-lattice/core";
 
 // src/channels/ChannelInfrastructure.ts
@@ -26348,7 +26335,7 @@ var start = async (config) => {
         }),
         [PLUGIN_CATALOG_CHANGED_TOPIC]: async (payload) => {
           const tenantId = payload?.tenantId;
-          if (typeof tenantId === "string" && tenantId.length > 0) getSandboxPluginCatalog4().invalidate(tenantId);
+          if (typeof tenantId === "string" && tenantId.length > 0) getSandboxPluginCatalog3().invalidate(tenantId);
         }
       },
       log: logger6