@lobu/gateway 2.8.0

package/dist/auth/provider-catalog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-catalog.js","sourceRoot":"","sources":["../../src/auth/provider-catalog.ts"],"names":[],"mappings":";;;AAeA,8DAMC;AArBD,qCAAkE;AAClE,4DAGkC;AAGlC,gEAA0F;AAE1F,MAAM,MAAM,GAAG,IAAA,mBAAY,EAAC,kBAAkB,CAAC,CAAC;AAEhD;;;GAGG;AACI,KAAK,UAAU,yBAAyB,CAC7C,kBAAsC,EACtC,OAAe;IAEf,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC;IACxE,OAAO,CAAA,QAAQ,aAAR,QAAQ,uBAAR,QAAQ,CAAE,kBAAkB,KAAI,EAAE,CAAC;AAC5C,CAAC;AAED;;;;;;GAMG;AACH,MAAa,sBAAsB;IACjC,YACU,kBAAsC,EACtC,mBAAwC;QADxC,uBAAkB,GAAlB,kBAAkB,CAAoB;QACtC,wBAAmB,GAAnB,mBAAmB,CAAqB;IAC/C,CAAC;IAEJ;;OAEG;IACH,oBAAoB;QAClB,OAAO,IAAA,uCAAuB,GAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,KAAK,KAAK,CAAC,CAAC;IAC7E,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,mBAAmB,CAAC,OAAe;QACvC,MAAM,SAAS,GAAG,MAAM,yBAAyB,CAC/C,IAAI,CAAC,kBAAkB,EACvB,OAAO,CACR,CAAC;QACF,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAEtC,MAAM,UAAU,GAAG,IAAA,uCAAuB,GAAE,CAAC;QAC7C,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAEpE,OAAO,SAAS;aACb,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC;aACzC,MAAM,CAAC,CAAC,CAAC,EAA4B,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC;IAC9D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,qBAAqB,CAAC,OAAe;QACzC,OAAO,yBAAyB,CAAC,IAAI,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC;IACrE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe,CACnB,OAAe,EACf,UAAkB,EAClB,MAAoC;;QAEpC,MAAM,UAAU,GAAG,IAAA,uCAAuB,GAAE,CAAC;QAC7C,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,UAAU,CAAC,CAAC;QACnE,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,qBAAqB,UAAU,EAAE,CAAC,CAAC;QACrD,CAAC;QAED,MAAM,EAAE,aAAa,EAAE,iBAAiB,EAAE,GACxC,MAAM,IAAI,CAAC,kBAAkB,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;QAC5D,MAAM,SAAS,GAAG,CAAA,iBAAiB,aAAjB,iBAAiB,uBAAjB,iBAAiB,CAAE,kBAAkB,KAAI,EAAE,CAAC;QAE9D,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,UAAU,KAAK,UAAU,CAAC,EAAE,CAAC;YACzD,MAAM,CAAC,IAAI,CACT,YAAY,UAAU,gCAAgC,OAAO,EAAE,CAChE,CAAC;YACF,OAAO;QACT,CAAC;QAED,MAAM,KAAK,mBACT,UAAU,EACV,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,IACpB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAC9B,CAAC;QACF,MAAM,sBAAsB,GAAG,CAAC,GAAG,SAAS,EAAE,KAAK,CAAC,CAAC;QACrD,MAAM,UAAU,GAAG,IAAA,8DAA4C,EAAC;YAC9D,KAAK,EAAE,MAAA,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAE,KAAK,mCAAI,iBAAiB,aAAjB,iBAAiB,uBAAjB,iBAAiB,CAAE,KAAK;YACvD,cAAc,EACZ,MAAA,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAE,cAAc,mCAAI,iBAAiB,aAAjB,iBAAiB,uBAAjB,iBAAiB,CAAE,cAAc;YACpE,wBAAwB,EACtB,MAAA,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAE,wBAAwB,mCACvC,iBAAiB,aAAjB,iBAAiB,uBAAjB,iBAAiB,CAAE,wBAAwB;YAC7C,kBAAkB,EAAE,sBAAsB;SAC3C,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,kBAAkB,CAAC,cAAc,CAAC,OAAO,kBAClD,kBAAkB,EAAE,sBAAsB,IACvC,UAAU,EACb,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,sBAAsB,UAAU,cAAc,OAAO,EAAE,CAAC,CAAC;IACvE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,iBAAiB,CAAC,OAAe,EAAE,UAAkB;;QACzD,MAAM,EAAE,aAAa,EAAE,iBAAiB,EAAE,GACxC,MAAM,IAAI,CAAC,kBAAkB,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;QAC5D,MAAM,SAAS,GAAG,CAAA,iBAAiB,aAAjB,iBAAiB,uBAAjB,iBAAiB,CAAE,kBAAkB,KAAI,EAAE,CAAC;QAE9D,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,UAAU,KAAK,UAAU,CAAC,CAAC;QACxE,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,CAAC,MAAM,EAAE,CAAC;YACzC,MAAM,CAAC,IAAI,CACT,YAAY,UAAU,4BAA4B,OAAO,wBAAwB,CAClF,CAAC;YACF,OAAO;QACT,CAAC;QAED,2CAA2C;QAC3C,MAAM,IAAI,CAAC,mBAAmB,CAAC,sBAAsB,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QAC3E,MAAM,UAAU,GAAG,IAAA,8DAA4C,EAAC;YAC9D,KAAK,EAAE,MAAA,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAE,KAAK,mCAAI,iBAAiB,aAAjB,iBAAiB,uBAAjB,iBAAiB,CAAE,KAAK;YACvD,cAAc,EACZ,MAAA,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAE,cAAc,mCAAI,iBAAiB,aAAjB,iBAAiB,uBAAjB,iBAAiB,CAAE,cAAc;YACpE,wBAAwB,EACtB,MAAA,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAE,wBAAwB,mCACvC,iBAAiB,aAAjB,iBAAiB,uBAAjB,iBAAiB,CAAE,wBAAwB;YAC7C,kBAAkB,EAAE,QAAQ;SAC7B,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,kBAAkB,CAAC,cAAc,CAAC,OAAO,kBAClD,kBAAkB,EAAE,QAAQ,IACzB,UAAU,EACb,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,wBAAwB,UAAU,cAAc,OAAO,EAAE,CAAC,CAAC;IACzE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,oBAAoB,CACxB,KAAa,EACb,SAAiC;QAEjC,MAAM,UAAU,GAAG,SAAS,IAAI,IAAA,uCAAuB,GAAE,CAAC;QAC1D,KAAK,MAAM,QAAQ,IAAI,UAAU,EAAE,CAAC;YAClC,IAAI,CAAC,QAAQ,CAAC,eAAe;gBAAE,SAAS;YACxC,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,eAAe,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;YACvD,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,KAAK,KAAK,CAAC,EAAE,CAAC;gBAC/C,OAAO,QAAQ,CAAC;YAClB,CAAC;QACH,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,gBAAgB,CAAC,OAAe,EAAE,UAAoB;;QAC1D,MAAM,EAAE,aAAa,EAAE,iBAAiB,EAAE,GACxC,MAAM,IAAI,CAAC,kBAAkB,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;QAC5D,MAAM,SAAS,GAAG,CAAA,iBAAiB,aAAjB,iBAAiB,uBAAjB,iBAAiB,CAAE,kBAAkB,KAAI,EAAE,CAAC;QAE9D,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;QAEzE,8CAA8C;QAC9C,KAAK,MAAM,EAAE,IAAI,UAAU,EAAE,CAAC;YAC5B,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;gBAC1B,MAAM,IAAI,KAAK,CAAC,YAAY,EAAE,mBAAmB,CAAC,CAAC;YACrD,CAAC;QACH,CAAC;QAED,MAAM,SAAS,GAAG,UAAU;aACzB,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;aACjC,MAAM,CAAC,CAAC,EAAE,EAA2B,EAAE,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC;QAE7D,iFAAiF;QACjF,KAAK,MAAM,EAAE,IAAI,SAAS,EAAE,CAAC;YAC3B,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC;gBACxC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACrB,CAAC;QACH,CAAC;QACD,MAAM,UAAU,GAAG,IAAA,8DAA4C,EAAC;YAC9D,KAAK,EAAE,MAAA,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAE,KAAK,mCAAI,iBAAiB,aAAjB,iBAAiB,uBAAjB,iBAAiB,CAAE,KAAK;YACvD,cAAc,EACZ,MAAA,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAE,cAAc,mCAAI,iBAAiB,aAAjB,iBAAiB,uBAAjB,iBAAiB,CAAE,cAAc;YACpE,wBAAwB,EACtB,MAAA,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAE,wBAAwB,mCACvC,iBAAiB,aAAjB,iBAAiB,uBAAjB,iBAAiB,CAAE,wBAAwB;YAC7C,kBAAkB,EAAE,SAAS;SAC9B,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,kBAAkB,CAAC,cAAc,CAAC,OAAO,kBAClD,kBAAkB,EAAE,SAAS,IAC1B,UAAU,EACb,CAAC;QAEH,MAAM,CAAC,IAAI,CACT,iCAAiC,OAAO,KAAK,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACrE,CAAC;IACJ,CAAC;CACF;AA7LD,wDA6LC"}

package/dist/auth/provider-model-options.d.ts

@@ -0,0 +1,3 @@
+import { type ModelOption } from "../modules/module-system";
+export declare function collectProviderModelOptions(agentId: string, userId: string): Promise<Record<string, ModelOption[]>>;
+//# sourceMappingURL=provider-model-options.d.ts.map

package/dist/auth/provider-model-options.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-model-options.d.ts","sourceRoot":"","sources":["../../src/auth/provider-model-options.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,KAAK,WAAW,EACjB,MAAM,0BAA0B,CAAC;AAIlC,wBAAsB,2BAA2B,CAC/C,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC,CA6BxC"}

package/dist/auth/provider-model-options.js

@@ -0,0 +1,29 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.collectProviderModelOptions = collectProviderModelOptions;
+const core_1 = require("@lobu/core");
+const module_system_1 = require("../modules/module-system");
+const logger = (0, core_1.createLogger)("provider-model-options");
+async function collectProviderModelOptions(agentId, userId) {
+    const modules = (0, module_system_1.getModelProviderModules)();
+    const results = {};
+    await Promise.all(modules.map(async (mod) => {
+        try {
+            if (typeof mod.getModelOptions !== "function") {
+                results[mod.providerId] = [];
+                return;
+            }
+            const options = await mod.getModelOptions(agentId, userId);
+            results[mod.providerId] = Array.isArray(options) ? options : [];
+        }
+        catch (error) {
+            results[mod.providerId] = [];
+            logger.warn({
+                providerId: mod.providerId,
+                error: error instanceof Error ? error.message : String(error),
+            }, "Failed to collect model options for provider");
+        }
+    }));
+    return results;
+}
+//# sourceMappingURL=provider-model-options.js.map

package/dist/auth/provider-model-options.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-model-options.js","sourceRoot":"","sources":["../../src/auth/provider-model-options.ts"],"names":[],"mappings":";;AAQA,kEAgCC;AAxCD,qCAA0C;AAC1C,4DAGkC;AAElC,MAAM,MAAM,GAAG,IAAA,mBAAY,EAAC,wBAAwB,CAAC,CAAC;AAE/C,KAAK,UAAU,2BAA2B,CAC/C,OAAe,EACf,MAAc;IAEd,MAAM,OAAO,GAAG,IAAA,uCAAuB,GAAE,CAAC;IAE1C,MAAM,OAAO,GAAkC,EAAE,CAAC;IAElD,MAAM,OAAO,CAAC,GAAG,CACf,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QACxB,IAAI,CAAC;YACH,IAAI,OAAO,GAAG,CAAC,eAAe,KAAK,UAAU,EAAE,CAAC;gBAC9C,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC;gBAC7B,OAAO;YACT,CAAC;YAED,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,eAAe,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC3D,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QAClE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC;YAC7B,MAAM,CAAC,IAAI,CACT;gBACE,UAAU,EAAE,GAAG,CAAC,UAAU;gBAC1B,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,EACD,8CAA8C,CAC/C,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CACH,CAAC;IAEF,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/auth/settings/agent-settings-store.d.ts

@@ -0,0 +1,112 @@
+import { type AuthProfile, BaseRedisStore, type InstalledProvider, type McpServerConfig, type NetworkConfig, type NixConfig, type PluginsConfig, type SkillsConfig, type ToolsConfig } from "@lobu/core";
+import type Redis from "ioredis";
+import type { ModelSelectionState, ProviderModelPreferences } from "./model-selection";
+/**
+ * Agent settings - configurable per agentId via web UI
+ * Stored in Redis at agent:settings:{agentId}
+ */
+export interface AgentSettings {
+    /** Claude model to use (e.g., claude-sonnet-4, claude-opus-4) */
+    model?: string;
+    /** Model selection mode (auto provider/default model vs pinned provider/model). */
+    modelSelection?: ModelSelectionState;
+    /** Per-provider preferred model for auto mode. */
+    providerModelPreferences?: ProviderModelPreferences;
+    /** Network access configuration */
+    networkConfig?: NetworkConfig;
+    /** Nix environment configuration */
+    nixConfig?: NixConfig;
+    /** Additional MCP servers */
+    mcpServers?: Record<string, McpServerConfig>;
+    /** Internal marker: MCP IDs already acknowledged to the user in chat */
+    mcpInstallNotified?: Record<string, number>;
+    /** Workspace identity/instruction files (markdown content) */
+    soulMd?: string;
+    /** Workspace user-specific context (markdown content) */
+    userMd?: string;
+    /** Workspace agent identity description (markdown content) */
+    identityMd?: string;
+    /** Skills configuration - enabled skills from skills.sh */
+    skillsConfig?: SkillsConfig;
+    /** Tool permission configuration - allowed/denied tools */
+    toolsConfig?: ToolsConfig;
+    /** OpenClaw plugin configuration */
+    pluginsConfig?: PluginsConfig;
+    /** Ordered auth profiles (index 0 = primary). Used for multi-provider credential management. */
+    authProfiles?: AuthProfile[];
+    /** Installed providers for this agent (index 0 = primary). */
+    installedProviders?: InstalledProvider[];
+    /** Enable verbose logging (show tool calls, reasoning, etc.) */
+    verboseLogging?: boolean;
+    /** Template agent this sandbox was cloned from (for credential fallback) */
+    templateAgentId?: string;
+    /** Last updated timestamp */
+    updatedAt: number;
+}
+export interface AgentSettingsContext {
+    localSettings: AgentSettings | null;
+    effectiveSettings: AgentSettings | null;
+    templateAgentId?: string;
+}
+/**
+ * Store and retrieve agent settings from Redis
+ * Pattern: agent:settings:{agentId}
+ *
+ * Settings are stored per agentId (e.g., "telegram-6570514069", "slack-g-C12345")
+ */
+export declare class AgentSettingsStore extends BaseRedisStore<AgentSettings> {
+    private readonly encryptionAvailable;
+    constructor(redis: Redis);
+    /**
+     * Get settings for an agent
+     * Returns null if no settings configured
+     */
+    getSettings(agentId: string): Promise<AgentSettings | null>;
+    /**
+     * Get effective settings for an agent, with template agent fallback.
+     * For sandbox agents, inherits from the template agent when own settings
+     * are missing or have no providers configured.
+     */
+    getEffectiveSettings(agentId: string): Promise<AgentSettings | null>;
+    getSettingsContext(agentId: string): Promise<AgentSettingsContext>;
+    /**
+     * Resolve the template agent ID for a sandbox agent.
+     * Chain: settings.templateAgentId → metadata.parentConnectionId → connection.templateAgentId
+     */
+    private resolveTemplateAgentId;
+    /**
+     * Save settings for an agent
+     * Overwrites existing settings
+     */
+    saveSettings(agentId: string, settings: Omit<AgentSettings, "updatedAt">): Promise<void>;
+    /**
+     * Update specific settings fields (partial update)
+     */
+    updateSettings(agentId: string, updates: Partial<Omit<AgentSettings, "updatedAt">>): Promise<void>;
+    /**
+     * Delete settings for an agent
+     */
+    deleteSettings(agentId: string): Promise<void>;
+    /**
+     * Find all sandbox agent IDs that reference a given template agent.
+     */
+    findSandboxAgentIds(templateAgentId: string): Promise<string[]>;
+    /**
+     * Check if agent has any settings configured
+     */
+    hasSettings(agentId: string): Promise<boolean>;
+    /**
+     * Find the first agent that has installed providers configured.
+     * Used to find a template for ephemeral agents.
+     */
+    findTemplateAgentId(): Promise<string | null>;
+    protected serialize(value: AgentSettings): string;
+    private canEncryptSensitiveValues;
+    private migrateSettingsInPlace;
+    private encryptSettingsForStorage;
+    private decryptSettingsForRuntime;
+    private encryptSensitiveValue;
+    private decryptSensitiveValue;
+    private looksLikeLegacyEncryptedValue;
+}
+//# sourceMappingURL=agent-settings-store.d.ts.map

package/dist/auth/settings/agent-settings-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-settings-store.d.ts","sourceRoot":"","sources":["../../../src/auth/settings/agent-settings-store.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,WAAW,EAChB,cAAc,EAGd,KAAK,iBAAiB,EACtB,KAAK,eAAe,EACpB,KAAK,aAAa,EAClB,KAAK,SAAS,EACd,KAAK,aAAa,EAClB,KAAK,YAAY,EAGjB,KAAK,WAAW,EACjB,MAAM,YAAY,CAAC;AACpB,OAAO,KAAK,KAAK,MAAM,SAAS,CAAC;AACjC,OAAO,KAAK,EACV,mBAAmB,EACnB,wBAAwB,EACzB,MAAM,mBAAmB,CAAC;AAS3B;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC5B,iEAAiE;IACjE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,mFAAmF;IACnF,cAAc,CAAC,EAAE,mBAAmB,CAAC;IACrC,kDAAkD;IAClD,wBAAwB,CAAC,EAAE,wBAAwB,CAAC;IACpD,mCAAmC;IACnC,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,oCAAoC;IACpC,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,6BAA6B;IAC7B,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IAC7C,wEAAwE;IACxE,kBAAkB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5C,8DAA8D;IAC9D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,yDAAyD;IACzD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,8DAA8D;IAC9D,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,2DAA2D;IAC3D,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,2DAA2D;IAC3D,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,oCAAoC;IACpC,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,gGAAgG;IAChG,YAAY,CAAC,EAAE,WAAW,EAAE,CAAC;IAC7B,8DAA8D;IAC9D,kBAAkB,CAAC,EAAE,iBAAiB,EAAE,CAAC;IACzC,gEAAgE;IAChE,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,4EAA4E;IAC5E,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,6BAA6B;IAC7B,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,oBAAoB;IACnC,aAAa,EAAE,aAAa,GAAG,IAAI,CAAC;IACpC,iBAAiB,EAAE,aAAa,GAAG,IAAI,CAAC;IACxC,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;;;;GAKG;AACH,qBAAa,kBAAmB,SAAQ,cAAc,CAAC,aAAa,CAAC;IACnE,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAU;gBAElC,KAAK,EAAE,KAAK;IAUxB;;;OAGG;IACG,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;IA+BjE;;;;OAIG;IACG,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;IAKpE,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC;IA2CxE;;;OAGG;YACW,sBAAsB;IAyBpC;;;OAGG;IACG,YAAY,CAChB,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC,GACzC,OAAO,CAAC,IAAI,CAAC;IAUhB;;OAEG;IACG,cAAc,CAClB,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC,GACjD,OAAO,CAAC,IAAI,CAAC;IAYhB;;OAEG;IACG,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAMpD;;OAEG;IACG,mBAAmB,CAAC,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAqBrE;;OAEG;IACG,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAKpD;;;OAGG;IACG,mBAAmB,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;cAsBhC,SAAS,CAAC,KAAK,EAAE,aAAa,GAAG,MAAM;IAS1D,OAAO,CAAC,yBAAyB;YAYnB,sBAAsB;IAqDpC,OAAO,CAAC,yBAAyB;IAkDjC,OAAO,CAAC,yBAAyB;IAgEjC,OAAO,CAAC,qBAAqB;IAU7B,OAAO,CAAC,qBAAqB;IAuC7B,OAAO,CAAC,6BAA6B;CAYtC"}

package/dist/auth/settings/agent-settings-store.js

@@ -0,0 +1,376 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AgentSettingsStore = void 0;
+const core_1 = require("@lobu/core");
+const ENCRYPTED_VALUE_PREFIX = "enc:v1:";
+/**
+ * Store and retrieve agent settings from Redis
+ * Pattern: agent:settings:{agentId}
+ *
+ * Settings are stored per agentId (e.g., "telegram-6570514069", "slack-g-C12345")
+ */
+class AgentSettingsStore extends core_1.BaseRedisStore {
+    constructor(redis) {
+        super({
+            redis,
+            keyPrefix: "agent:settings",
+            loggerName: "agent-settings-store",
+        });
+        this.encryptionAvailable = this.canEncryptSensitiveValues();
+    }
+    /**
+     * Get settings for an agent
+     * Returns null if no settings configured
+     */
+    async getSettings(agentId) {
+        const key = this.buildKey(agentId);
+        try {
+            const data = await this.redis.get(key);
+            if (!data) {
+                return null;
+            }
+            const parsed = (0, core_1.safeJsonParse)(data);
+            if (!parsed) {
+                this.logger.warn("Failed to parse agent settings from Redis", { key });
+                return null;
+            }
+            const { settings, needsMigration } = this.decryptSettingsForRuntime(parsed);
+            if (needsMigration) {
+                await this.migrateSettingsInPlace(key, settings, data);
+            }
+            return settings;
+        }
+        catch (error) {
+            this.logger.error("Failed to get settings from Redis", {
+                error: error instanceof Error ? error.message : String(error),
+                key,
+            });
+            return null;
+        }
+    }
+    /**
+     * Get effective settings for an agent, with template agent fallback.
+     * For sandbox agents, inherits from the template agent when own settings
+     * are missing or have no providers configured.
+     */
+    async getEffectiveSettings(agentId) {
+        const context = await this.getSettingsContext(agentId);
+        return context.effectiveSettings;
+    }
+    async getSettingsContext(agentId) {
+        const localSettings = await this.getSettings(agentId);
+        // Resolve template agent ID
+        const templateAgentId = await this.resolveTemplateAgentId(agentId, localSettings);
+        if (!templateAgentId) {
+            return { localSettings, effectiveSettings: localSettings };
+        }
+        const templateSettings = await this.getSettings(templateAgentId);
+        if (!templateSettings) {
+            return {
+                localSettings,
+                effectiveSettings: localSettings,
+                templateAgentId,
+            };
+        }
+        // Merge: own settings override template, but inherit missing fields
+        if (!localSettings) {
+            return {
+                localSettings,
+                effectiveSettings: Object.assign(Object.assign({}, templateSettings), { templateAgentId }),
+                templateAgentId,
+            };
+        }
+        return {
+            localSettings,
+            effectiveSettings: Object.assign(Object.assign(Object.assign({}, templateSettings), Object.fromEntries(Object.entries(localSettings).filter(([, v]) => v !== undefined))), { templateAgentId }),
+            templateAgentId,
+        };
+    }
+    /**
+     * Resolve the template agent ID for a sandbox agent.
+     * Chain: settings.templateAgentId → metadata.parentConnectionId → connection.templateAgentId
+     */
+    async resolveTemplateAgentId(agentId, settings) {
+        if (settings === null || settings === void 0 ? void 0 : settings.templateAgentId)
+            return settings.templateAgentId;
+        try {
+            // Check metadata for parentConnectionId
+            const metaRaw = await this.redis.get(`agent_metadata:${agentId}`);
+            if (!metaRaw)
+                return undefined;
+            const meta = (0, core_1.safeJsonParse)(metaRaw);
+            if (!(meta === null || meta === void 0 ? void 0 : meta.parentConnectionId))
+                return undefined;
+            // Check connection for templateAgentId
+            const connRaw = await this.redis.get(`connection:${meta.parentConnectionId}`);
+            if (!connRaw)
+                return undefined;
+            const conn = (0, core_1.safeJsonParse)(connRaw);
+            return conn === null || conn === void 0 ? void 0 : conn.templateAgentId;
+        }
+        catch (_a) {
+            return undefined;
+        }
+    }
+    /**
+     * Save settings for an agent
+     * Overwrites existing settings
+     */
+    async saveSettings(agentId, settings) {
+        const key = this.buildKey(agentId);
+        const fullSettings = Object.assign(Object.assign({}, settings), { updatedAt: Date.now() });
+        await this.set(key, fullSettings);
+        this.logger.info(`Saved settings for agent ${agentId}`);
+    }
+    /**
+     * Update specific settings fields (partial update)
+     */
+    async updateSettings(agentId, updates) {
+        const existing = await this.getSettings(agentId);
+        const merged = Object.assign(Object.assign(Object.assign({}, existing), updates), { updatedAt: Date.now() });
+        const key = this.buildKey(agentId);
+        await this.set(key, merged);
+        this.logger.info(`Updated settings for agent ${agentId}`);
+    }
+    /**
+     * Delete settings for an agent
+     */
+    async deleteSettings(agentId) {
+        const key = this.buildKey(agentId);
+        await this.delete(key);
+        this.logger.info(`Deleted settings for agent ${agentId}`);
+    }
+    /**
+     * Find all sandbox agent IDs that reference a given template agent.
+     */
+    async findSandboxAgentIds(templateAgentId) {
+        const prefix = `${this.keyPrefix}:`;
+        const keys = await this.scanByPrefix(prefix);
+        const sandboxIds = [];
+        for (const key of keys) {
+            try {
+                const raw = await this.redis.get(key);
+                if (!raw)
+                    continue;
+                const parsed = (0, core_1.safeJsonParse)(raw);
+                if ((parsed === null || parsed === void 0 ? void 0 : parsed.templateAgentId) === templateAgentId) {
+                    sandboxIds.push(key.slice(prefix.length));
+                }
+            }
+            catch (_a) {
+                // Skip unparseable entries
+            }
+        }
+        return sandboxIds;
+    }
+    /**
+     * Check if agent has any settings configured
+     */
+    async hasSettings(agentId) {
+        const key = this.buildKey(agentId);
+        return this.exists(key);
+    }
+    /**
+     * Find the first agent that has installed providers configured.
+     * Used to find a template for ephemeral agents.
+     */
+    async findTemplateAgentId() {
+        const prefix = `${this.keyPrefix}:`;
+        const keys = await this.scanByPrefix(prefix);
+        for (const key of keys) {
+            try {
+                const data = await this.redis.get(key);
+                if (!data)
+                    continue;
+                const parsed = (0, core_1.safeJsonParse)(data);
+                if ((parsed === null || parsed === void 0 ? void 0 : parsed.installedProviders) &&
+                    parsed.installedProviders.length > 0) {
+                    // Extract agentId from key: "agent:settings:{agentId}"
+                    return key.slice(prefix.length);
+                }
+            }
+            catch (_a) {
+                /* skip unparseable key */
+            }
+        }
+        return null;
+    }
+    serialize(value) {
+        const encrypted = this.encryptSettingsForStorage(value);
+        const json = (0, core_1.safeJsonStringify)(encrypted);
+        if (json === null) {
+            throw new Error("Failed to serialize value to JSON");
+        }
+        return json;
+    }
+    canEncryptSensitiveValues() {
+        try {
+            const probe = "agent-settings-store-encryption-probe";
+            return (0, core_1.decrypt)((0, core_1.encrypt)(probe)) === probe;
+        }
+        catch (_a) {
+            this.logger.warn("ENCRYPTION_KEY not configured or invalid - auth profile credentials will be stored unencrypted");
+            return false;
+        }
+    }
+    async migrateSettingsInPlace(key, settings, originalRaw) {
+        if (!this.encryptionAvailable) {
+            return;
+        }
+        try {
+            await this.redis.watch(key);
+            const currentRaw = await this.redis.get(key);
+            if (currentRaw !== originalRaw) {
+                await this.redis.unwatch();
+                this.logger.info("Skipped credentials migration due to concurrent settings update", { key });
+                return;
+            }
+            const serialized = this.serialize(settings);
+            const result = await this.redis.multi().set(key, serialized).exec();
+            if (!result) {
+                this.logger.info("Skipped credentials migration due to concurrent settings update", { key });
+                return;
+            }
+            this.logger.info("Migrated agent settings credentials to encrypted format", {
+                key,
+            });
+        }
+        catch (error) {
+            try {
+                await this.redis.unwatch();
+            }
+            catch (_a) {
+                // Ignore cleanup failures.
+            }
+            this.logger.warn("Failed migrating plaintext agent settings credentials", {
+                error: error instanceof Error ? error.message : String(error),
+                key,
+            });
+        }
+    }
+    encryptSettingsForStorage(settings) {
+        let result = settings;
+        // Encrypt auth profile credentials
+        if (Array.isArray(settings.authProfiles) &&
+            settings.authProfiles.length > 0) {
+            let profilesChanged = false;
+            const authProfiles = settings.authProfiles.map((profile) => {
+                var _a;
+                const encryptedCredential = this.encryptSensitiveValue(profile.credential);
+                const credentialChanged = encryptedCredential !== profile.credential;
+                let metadataChanged = false;
+                let metadata = profile.metadata;
+                if ((_a = profile.metadata) === null || _a === void 0 ? void 0 : _a.refreshToken) {
+                    const encryptedRefreshToken = this.encryptSensitiveValue(profile.metadata.refreshToken);
+                    if (encryptedRefreshToken !== profile.metadata.refreshToken) {
+                        metadataChanged = true;
+                        metadata = Object.assign(Object.assign({}, profile.metadata), { refreshToken: encryptedRefreshToken });
+                    }
+                }
+                if (!credentialChanged && !metadataChanged) {
+                    return profile;
+                }
+                profilesChanged = true;
+                return Object.assign(Object.assign({}, profile), { credential: encryptedCredential, metadata });
+            });
+            if (profilesChanged) {
+                result = Object.assign(Object.assign({}, result), { authProfiles });
+            }
+        }
+        return result;
+    }
+    decryptSettingsForRuntime(settings) {
+        let result = settings;
+        let changed = false;
+        let needsMigration = false;
+        // Decrypt auth profile credentials
+        if (Array.isArray(settings.authProfiles) &&
+            settings.authProfiles.length > 0) {
+            let profilesChanged = false;
+            const authProfiles = settings.authProfiles.map((profile) => {
+                var _a;
+                const credential = this.decryptSensitiveValue(profile.credential);
+                let metadata = profile.metadata;
+                let metadataChanged = false;
+                if ((_a = profile.metadata) === null || _a === void 0 ? void 0 : _a.refreshToken) {
+                    const refreshToken = this.decryptSensitiveValue(profile.metadata.refreshToken);
+                    if (refreshToken.value !== profile.metadata.refreshToken) {
+                        metadataChanged = true;
+                        metadata = Object.assign(Object.assign({}, profile.metadata), { refreshToken: refreshToken.value });
+                    }
+                    needsMigration || (needsMigration = refreshToken.needsMigration);
+                }
+                if (credential.value !== profile.credential || metadataChanged) {
+                    profilesChanged = true;
+                }
+                needsMigration || (needsMigration = credential.needsMigration);
+                if (!metadataChanged && credential.value === profile.credential) {
+                    return profile;
+                }
+                return Object.assign(Object.assign({}, profile), { credential: credential.value, metadata });
+            });
+            if (profilesChanged) {
+                changed = true;
+                result = Object.assign(Object.assign({}, result), { authProfiles });
+            }
+        }
+        if (!changed) {
+            return { settings, needsMigration };
+        }
+        return { settings: result, needsMigration };
+    }
+    encryptSensitiveValue(value) {
+        if (!this.encryptionAvailable) {
+            return value;
+        }
+        if (value.startsWith(ENCRYPTED_VALUE_PREFIX)) {
+            return value;
+        }
+        return `${ENCRYPTED_VALUE_PREFIX}${(0, core_1.encrypt)(value)}`;
+    }
+    decryptSensitiveValue(value) {
+        if (value.startsWith(ENCRYPTED_VALUE_PREFIX)) {
+            if (!this.encryptionAvailable) {
+                return { value, needsMigration: false };
+            }
+            try {
+                const decrypted = (0, core_1.decrypt)(value.slice(ENCRYPTED_VALUE_PREFIX.length));
+                return { value: decrypted, needsMigration: false };
+            }
+            catch (error) {
+                this.logger.warn("Dropping undecryptable credential (ENCRYPTION_KEY changed?)", { error: error instanceof Error ? error.message : String(error) });
+                return { value: "", needsMigration: false };
+            }
+        }
+        if (this.encryptionAvailable && this.looksLikeLegacyEncryptedValue(value)) {
+            try {
+                const decrypted = (0, core_1.decrypt)(value);
+                return { value: decrypted, needsMigration: true };
+            }
+            catch (error) {
+                this.logger.warn("Failed to decrypt legacy auth profile credential value", {
+                    error: error instanceof Error ? error.message : String(error),
+                });
+                return { value, needsMigration: false };
+            }
+        }
+        return {
+            value,
+            needsMigration: this.encryptionAvailable,
+        };
+    }
+    looksLikeLegacyEncryptedValue(value) {
+        const [iv, tag, encrypted, ...rest] = value.split(":");
+        if (rest.length > 0)
+            return false;
+        if (!iv || !tag || !encrypted)
+            return false;
+        return (iv.length === 24 &&
+            tag.length === 32 &&
+            /^[0-9a-f]+$/i.test(iv) &&
+            /^[0-9a-f]+$/i.test(tag) &&
+            /^[0-9a-f]+$/i.test(encrypted));
+    }
+}
+exports.AgentSettingsStore = AgentSettingsStore;
+//# sourceMappingURL=agent-settings-store.js.map

package/dist/auth/settings/agent-settings-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-settings-store.js","sourceRoot":"","sources":["../../../src/auth/settings/agent-settings-store.ts"],"names":[],"mappings":";;;AAAA,qCAcoB;AAOpB,MAAM,sBAAsB,GAAG,SAAS,CAAC;AAwDzC;;;;;GAKG;AACH,MAAa,kBAAmB,SAAQ,qBAA6B;IAGnE,YAAY,KAAY;QACtB,KAAK,CAAC;YACJ,KAAK;YACL,SAAS,EAAE,gBAAgB;YAC3B,UAAU,EAAE,sBAAsB;SACnC,CAAC,CAAC;QAEH,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC,yBAAyB,EAAE,CAAC;IAC9D,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,WAAW,CAAC,OAAe;QAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACnC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACvC,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,OAAO,IAAI,CAAC;YACd,CAAC;YAED,MAAM,MAAM,GAAG,IAAA,oBAAa,EAAgB,IAAI,CAAC,CAAC;YAClD,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,2CAA2C,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;gBACvE,OAAO,IAAI,CAAC;YACd,CAAC;YAED,MAAM,EAAE,QAAQ,EAAE,cAAc,EAAE,GAChC,IAAI,CAAC,yBAAyB,CAAC,MAAM,CAAC,CAAC;YAEzC,IAAI,cAAc,EAAE,CAAC;gBACnB,MAAM,IAAI,CAAC,sBAAsB,CAAC,GAAG,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;YACzD,CAAC;YAED,OAAO,QAAQ,CAAC;QAClB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,mCAAmC,EAAE;gBACrD,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;gBAC7D,GAAG;aACJ,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,oBAAoB,CAAC,OAAe;QACxC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;QACvD,OAAO,OAAO,CAAC,iBAAiB,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,OAAe;QACtC,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QAEtD,4BAA4B;QAC5B,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,sBAAsB,CACvD,OAAO,EACP,aAAa,CACd,CAAC;QACF,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,aAAa,EAAE,CAAC;QAC7D,CAAC;QAED,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,eAAe,CAAC,CAAC;QACjE,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACtB,OAAO;gBACL,aAAa;gBACb,iBAAiB,EAAE,aAAa;gBAChC,eAAe;aAChB,CAAC;QACJ,CAAC;QAED,oEAAoE;QACpE,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,OAAO;gBACL,aAAa;gBACb,iBAAiB,kCAAO,gBAAgB,KAAE,eAAe,GAAE;gBAC3D,eAAe;aAChB,CAAC;QACJ,CAAC;QAED,OAAO;YACL,aAAa;YACb,iBAAiB,EAAE,8CACd,gBAAgB,GAChB,MAAM,CAAC,WAAW,CACnB,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,CACjE,KACD,eAAe,GACC;YAClB,eAAe;SAChB,CAAC;IACJ,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,sBAAsB,CAClC,OAAe,EACf,QAA8B;QAE9B,IAAI,QAAQ,aAAR,QAAQ,uBAAR,QAAQ,CAAE,eAAe;YAAE,OAAO,QAAQ,CAAC,eAAe,CAAC;QAE/D,IAAI,CAAC;YACH,wCAAwC;YACxC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,kBAAkB,OAAO,EAAE,CAAC,CAAC;YAClE,IAAI,CAAC,OAAO;gBAAE,OAAO,SAAS,CAAC;YAC/B,MAAM,IAAI,GAAG,IAAA,oBAAa,EAAkC,OAAO,CAAC,CAAC;YACrE,IAAI,CAAC,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,kBAAkB,CAAA;gBAAE,OAAO,SAAS,CAAC;YAEhD,uCAAuC;YACvC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAClC,cAAc,IAAI,CAAC,kBAAkB,EAAE,CACxC,CAAC;YACF,IAAI,CAAC,OAAO;gBAAE,OAAO,SAAS,CAAC;YAC/B,MAAM,IAAI,GAAG,IAAA,oBAAa,EAA+B,OAAO,CAAC,CAAC;YAClE,OAAO,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,eAAe,CAAC;QAC/B,CAAC;QAAC,WAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,YAAY,CAChB,OAAe,EACf,QAA0C;QAE1C,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACnC,MAAM,YAAY,mCACb,QAAQ,KACX,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GACtB,CAAC;QACF,MAAM,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;QAClC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,4BAA4B,OAAO,EAAE,CAAC,CAAC;IAC1D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,cAAc,CAClB,OAAe,EACf,OAAkD;QAElD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QACjD,MAAM,MAAM,iDACP,QAAQ,GACR,OAAO,KACV,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GACtB,CAAC;QACF,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACnC,MAAM,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC5B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,8BAA8B,OAAO,EAAE,CAAC,CAAC;IAC5D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,cAAc,CAAC,OAAe;QAClC,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACnC,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACvB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,8BAA8B,OAAO,EAAE,CAAC,CAAC;IAC5D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,mBAAmB,CAAC,eAAuB;QAC/C,MAAM,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,GAAG,CAAC;QACpC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QAC7C,MAAM,UAAU,GAAa,EAAE,CAAC;QAEhC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBACtC,IAAI,CAAC,GAAG;oBAAE,SAAS;gBACnB,MAAM,MAAM,GAAG,IAAA,oBAAa,EAAgB,GAAG,CAAC,CAAC;gBACjD,IAAI,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,eAAe,MAAK,eAAe,EAAE,CAAC;oBAChD,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;gBAC5C,CAAC;YACH,CAAC;YAAC,WAAM,CAAC;gBACP,2BAA2B;YAC7B,CAAC;QACH,CAAC;QAED,OAAO,UAAU,CAAC;IACpB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW,CAAC,OAAe;QAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACnC,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,mBAAmB;QACvB,MAAM,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,GAAG,CAAC;QACpC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QAC7C,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBACvC,IAAI,CAAC,IAAI;oBAAE,SAAS;gBACpB,MAAM,MAAM,GAAG,IAAA,oBAAa,EAAgB,IAAI,CAAC,CAAC;gBAClD,IACE,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,kBAAkB;oBAC1B,MAAM,CAAC,kBAAkB,CAAC,MAAM,GAAG,CAAC,EACpC,CAAC;oBACD,uDAAuD;oBACvD,OAAO,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBAClC,CAAC;YACH,CAAC;YAAC,WAAM,CAAC;gBACP,0BAA0B;YAC5B,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAEkB,SAAS,CAAC,KAAoB;QAC/C,MAAM,SAAS,GAAG,IAAI,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC;QACxD,MAAM,IAAI,GAAG,IAAA,wBAAiB,EAAC,SAAS,CAAC,CAAC;QAC1C,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACvD,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,yBAAyB;QAC/B,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,uCAAuC,CAAC;YACtD,OAAO,IAAA,cAAO,EAAC,IAAA,cAAO,EAAC,KAAK,CAAC,CAAC,KAAK,KAAK,CAAC;QAC3C,CAAC;QAAC,WAAM,CAAC;YACP,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,gGAAgG,CACjG,CAAC;YACF,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,sBAAsB,CAClC,GAAW,EACX,QAAuB,EACvB,WAAmB;QAEnB,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC;YAC9B,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC5B,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC7C,IAAI,UAAU,KAAK,WAAW,EAAE,CAAC;gBAC/B,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;gBAC3B,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,iEAAiE,EACjE,EAAE,GAAG,EAAE,CACR,CAAC;gBACF,OAAO;YACT,CAAC;YAED,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;YAC5C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC;YACpE,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,iEAAiE,EACjE,EAAE,GAAG,EAAE,CACR,CAAC;gBACF,OAAO;YACT,CAAC;YAED,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,yDAAyD,EACzD;gBACE,GAAG;aACJ,CACF,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;YAC7B,CAAC;YAAC,WAAM,CAAC;gBACP,2BAA2B;YAC7B,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,uDAAuD,EACvD;gBACE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;gBAC7D,GAAG;aACJ,CACF,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,yBAAyB,CAAC,QAAuB;QACvD,IAAI,MAAM,GAAG,QAAQ,CAAC;QAEtB,mCAAmC;QACnC,IACE,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC;YACpC,QAAQ,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAChC,CAAC;YACD,IAAI,eAAe,GAAG,KAAK,CAAC;YAC5B,MAAM,YAAY,GAAG,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;;gBACzD,MAAM,mBAAmB,GAAG,IAAI,CAAC,qBAAqB,CACpD,OAAO,CAAC,UAAU,CACnB,CAAC;gBACF,MAAM,iBAAiB,GAAG,mBAAmB,KAAK,OAAO,CAAC,UAAU,CAAC;gBACrE,IAAI,eAAe,GAAG,KAAK,CAAC;gBAC5B,IAAI,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;gBAEhC,IAAI,MAAA,OAAO,CAAC,QAAQ,0CAAE,YAAY,EAAE,CAAC;oBACnC,MAAM,qBAAqB,GAAG,IAAI,CAAC,qBAAqB,CACtD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAC9B,CAAC;oBACF,IAAI,qBAAqB,KAAK,OAAO,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC;wBAC5D,eAAe,GAAG,IAAI,CAAC;wBACvB,QAAQ,mCACH,OAAO,CAAC,QAAQ,KACnB,YAAY,EAAE,qBAAqB,GACpC,CAAC;oBACJ,CAAC;gBACH,CAAC;gBAED,IAAI,CAAC,iBAAiB,IAAI,CAAC,eAAe,EAAE,CAAC;oBAC3C,OAAO,OAAO,CAAC;gBACjB,CAAC;gBAED,eAAe,GAAG,IAAI,CAAC;gBACvB,uCACK,OAAO,KACV,UAAU,EAAE,mBAAmB,EAC/B,QAAQ,IACR;YACJ,CAAC,CAAC,CAAC;YAEH,IAAI,eAAe,EAAE,CAAC;gBACpB,MAAM,mCAAQ,MAAM,KAAE,YAAY,GAAE,CAAC;YACvC,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,yBAAyB,CAAC,QAAuB;QAIvD,IAAI,MAAM,GAAG,QAAQ,CAAC;QACtB,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,cAAc,GAAG,KAAK,CAAC;QAE3B,mCAAmC;QACnC,IACE,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC;YACpC,QAAQ,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAChC,CAAC;YACD,IAAI,eAAe,GAAG,KAAK,CAAC;YAE5B,MAAM,YAAY,GAAG,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;;gBACzD,MAAM,UAAU,GAAG,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;gBAClE,IAAI,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;gBAChC,IAAI,eAAe,GAAG,KAAK,CAAC;gBAE5B,IAAI,MAAA,OAAO,CAAC,QAAQ,0CAAE,YAAY,EAAE,CAAC;oBACnC,MAAM,YAAY,GAAG,IAAI,CAAC,qBAAqB,CAC7C,OAAO,CAAC,QAAQ,CAAC,YAAY,CAC9B,CAAC;oBACF,IAAI,YAAY,CAAC,KAAK,KAAK,OAAO,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC;wBACzD,eAAe,GAAG,IAAI,CAAC;wBACvB,QAAQ,mCACH,OAAO,CAAC,QAAQ,KACnB,YAAY,EAAE,YAAY,CAAC,KAAK,GACjC,CAAC;oBACJ,CAAC;oBACD,cAAc,KAAd,cAAc,GAAK,YAAY,CAAC,cAAc,EAAC;gBACjD,CAAC;gBAED,IAAI,UAAU,CAAC,KAAK,KAAK,OAAO,CAAC,UAAU,IAAI,eAAe,EAAE,CAAC;oBAC/D,eAAe,GAAG,IAAI,CAAC;gBACzB,CAAC;gBAED,cAAc,KAAd,cAAc,GAAK,UAAU,CAAC,cAAc,EAAC;gBAE7C,IAAI,CAAC,eAAe,IAAI,UAAU,CAAC,KAAK,KAAK,OAAO,CAAC,UAAU,EAAE,CAAC;oBAChE,OAAO,OAAO,CAAC;gBACjB,CAAC;gBAED,uCACK,OAAO,KACV,UAAU,EAAE,UAAU,CAAC,KAAK,EAC5B,QAAQ,IACR;YACJ,CAAC,CAAC,CAAC;YAEH,IAAI,eAAe,EAAE,CAAC;gBACpB,OAAO,GAAG,IAAI,CAAC;gBACf,MAAM,mCAAQ,MAAM,KAAE,YAAY,GAAE,CAAC;YACvC,CAAC;QACH,CAAC;QAED,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC;QACtC,CAAC;QAED,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;IAC9C,CAAC;IAEO,qBAAqB,CAAC,KAAa;QACzC,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC;YAC9B,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,KAAK,CAAC,UAAU,CAAC,sBAAsB,CAAC,EAAE,CAAC;YAC7C,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,GAAG,sBAAsB,GAAG,IAAA,cAAO,EAAC,KAAK,CAAC,EAAE,CAAC;IACtD,CAAC;IAEO,qBAAqB,CAAC,KAAa;QACzC,IAAI,KAAK,CAAC,UAAU,CAAC,sBAAsB,CAAC,EAAE,CAAC;YAC7C,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC;gBAC9B,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC;YAC1C,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,SAAS,GAAG,IAAA,cAAO,EAAC,KAAK,CAAC,KAAK,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC,CAAC;gBACtE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC;YACrD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,6DAA6D,EAC7D,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAClE,CAAC;gBACF,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC;YAC9C,CAAC;QACH,CAAC;QAED,IAAI,IAAI,CAAC,mBAAmB,IAAI,IAAI,CAAC,6BAA6B,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1E,IAAI,CAAC;gBACH,MAAM,SAAS,GAAG,IAAA,cAAO,EAAC,KAAK,CAAC,CAAC;gBACjC,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;YACpD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,wDAAwD,EACxD;oBACE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;iBAC9D,CACF,CAAC;gBACF,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC;YAC1C,CAAC;QACH,CAAC;QAED,OAAO;YACL,KAAK;YACL,cAAc,EAAE,IAAI,CAAC,mBAAmB;SACzC,CAAC;IACJ,CAAC;IAEO,6BAA6B,CAAC,KAAa;QACjD,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACvD,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QAClC,IAAI,CAAC,EAAE,IAAI,CAAC,GAAG,IAAI,CAAC,SAAS;YAAE,OAAO,KAAK,CAAC;QAC5C,OAAO,CACL,EAAE,CAAC,MAAM,KAAK,EAAE;YAChB,GAAG,CAAC,MAAM,KAAK,EAAE;YACjB,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;YACvB,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC;YACxB,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,CAC/B,CAAC;IACJ,CAAC;CACF;AAjeD,gDAieC"}

package/dist/auth/settings/auth-profiles-manager.d.ts

@@ -0,0 +1,26 @@
+import { type AuthProfile } from "@lobu/core";
+import type { AgentSettingsStore } from "./agent-settings-store";
+export interface UpsertAuthProfileInput {
+    agentId: string;
+    provider: string;
+    credential: string;
+    authType: AuthProfile["authType"];
+    label: string;
+    model?: string;
+    metadata?: AuthProfile["metadata"];
+    makePrimary?: boolean;
+    id?: string;
+}
+export declare class AuthProfilesManager {
+    private readonly agentSettingsStore;
+    constructor(agentSettingsStore: AgentSettingsStore);
+    listProfiles(agentId: string): Promise<AuthProfile[]>;
+    hasProviderProfiles(agentId: string, provider: string): Promise<boolean>;
+    getProviderProfiles(agentId: string, provider: string): Promise<AuthProfile[]>;
+    getBestProfile(agentId: string, provider: string, model?: string): Promise<AuthProfile | null>;
+    upsertProfile(input: UpsertAuthProfileInput): Promise<AuthProfile>;
+    deleteProviderProfiles(agentId: string, provider: string, profileId?: string): Promise<void>;
+    private normalizeProfiles;
+}
+export declare function createAuthProfileLabel(providerDisplayName: string, credential: string, accountHint?: string): string;
+//# sourceMappingURL=auth-profiles-manager.d.ts.map

package/dist/auth/settings/auth-profiles-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-profiles-manager.d.ts","sourceRoot":"","sources":["../../../src/auth/settings/auth-profiles-manager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,WAAW,EAAgB,MAAM,YAAY,CAAC;AAC5D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAMjE,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,WAAW,CAAC,UAAU,CAAC,CAAC;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,WAAW,CAAC,UAAU,CAAC,CAAC;IACnC,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,EAAE,CAAC,EAAE,MAAM,CAAC;CACb;AAED,qBAAa,mBAAmB;IAClB,OAAO,CAAC,QAAQ,CAAC,kBAAkB;gBAAlB,kBAAkB,EAAE,kBAAkB;IAE7D,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IAMrD,mBAAmB,CACvB,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,OAAO,CAAC;IAKb,mBAAmB,CACvB,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,WAAW,EAAE,CAAC;IAKnB,cAAc,CAClB,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAChB,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IAkCxB,aAAa,CAAC,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,WAAW,CAAC;IAiFlE,sBAAsB,CAC1B,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAChB,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,IAAI,CAAC;IAmBhB,OAAO,CAAC,iBAAiB;CAY1B;AAED,wBAAgB,sBAAsB,CACpC,mBAAmB,EAAE,MAAM,EAC3B,UAAU,EAAE,MAAM,EAClB,WAAW,CAAC,EAAE,MAAM,GACnB,MAAM,CAWR"}