@synap-core/eve 0.1.0

package/dist/dist-C2QB4IKT.js

@@ -0,0 +1,340 @@
+import { createRequire as __eveCreateRequire } from 'module'; const require = __eveCreateRequire(import.meta.url);
+import {
+  AGENTS,
+  AiModeSchema,
+  AiProviderSchema,
+  BuilderEngineSchema,
+  ConfigManager,
+  CredentialsManager,
+  DEFAULT_HERMES_CONFIG,
+  EVE_BACKGROUND_ACTIONS,
+  EntityStateManager,
+  LEGACY_CODER_ENGINE_SLUGS,
+  PIPELINE_AGENT_TYPES,
+  PIPELINE_PERSONALITIES,
+  PodProviderError,
+  SetupProfileKindSchema,
+  SetupProfileSchema,
+  UsbSetupManifestSchema,
+  VERSION,
+  agentsToProvision,
+  allAgentTypes,
+  assigneeForAction,
+  buildAndPackageImage,
+  buildConfigDebugPayload,
+  buildDiscoveryDebugPayload,
+  buildEventsDebugPayload,
+  buildMaterializedDebugPayload,
+  configManager,
+  configureChannel,
+  createAllowedEmbedOriginChecker,
+  credentialsManager,
+  deployToCoolify,
+  describePodProviderResult,
+  detectAppConfig,
+  detectCoolifyEnvironments,
+  detectCoolifyTargets,
+  disableChannel,
+  discoverAndBackfillPodConfig,
+  discoverAndBackfillPodUrl,
+  discoverPodConfig,
+  ensureOpenWebuiBootstrapSecrets,
+  ensureSynapLoopbackOverride,
+  entityStateManager,
+  findCoolifyAppByName,
+  formatHardwareReport,
+  getAccessUrls,
+  getAppImageName,
+  getCoolifyTargetsFromEnv,
+  getServerIp,
+  getSetupProfilePath,
+  isAllowedEmbedOrigin,
+  isValidEveBackgroundAction,
+  listCoolifyApps,
+  listEveBackgroundActions,
+  migrateStateDirectory,
+  probeHardware,
+  pruneOldImagesForRepo,
+  readChannelStatus,
+  readSetupProfile,
+  readUsbSetupManifest,
+  redactSecrets,
+  resetPodUrlCache,
+  resolveAgent,
+  resolvePipelinePersonality,
+  resolvePodUrl,
+  resolvePodUrlDetailed,
+  runStateCoherenceChecks,
+  setPodProviderEnabled,
+  syncCoolifyAppImage,
+  upsertPodProvider,
+  validateChannelCredentials,
+  writeOpenwebuiEnv,
+  writeSetupProfile,
+  writeUsbSetupManifest
+} from "./chunk-5TBV2VHZ.js";
+import {
+  configStore
+} from "./chunk-ROKIQIEX.js";
+import {
+  AI_CONSUMERS,
+  AI_CONSUMERS_NEEDING_RECREATE,
+  COMPONENTS,
+  DEFAULT_HUB_PATH,
+  EVE_DASHBOARD_SERVICE,
+  POD_DEPLOY_DIR_CANDIDATES,
+  SYNAP_BACKEND_CONTAINERS,
+  SYNAP_BACKEND_INTERNAL_URL,
+  addonComponentIds,
+  allComponentIds,
+  buildOpenwebuiManagedConfig,
+  buildOpenwebuiModelSources,
+  connectTraefikToEveNetwork,
+  copySynapSkillIntoClaudeProject,
+  defaultSkillsDir,
+  ensureEveSkillsLayout,
+  findPodDeployDir,
+  formatExtrasSummary,
+  generateSynapPlugin,
+  getAdminJwt,
+  getAdminJwtPostHealth,
+  getAdminJwtPostHealthDetailed,
+  getAdminReadyStatus,
+  getConfig,
+  getConfigDetailed,
+  getStatus,
+  hasAnyProvider,
+  isLoopbackUrl,
+  isSynapLoopbackReachable,
+  listModelSources,
+  pickPrimaryProvider,
+  probeAdminAuth,
+  provisionOwuiUserInSynap,
+  publicComponentUrl,
+  pushSynapFunctionsToOpenwebui,
+  pushSynapSkillsToOpenwebuiPrompts,
+  reconcile,
+  reconcileOpenwebuiManagedConfig,
+  reconcileOpenwebuiManagedConfigViaAdmin,
+  reconcileOpenwebuiManagedConfigViaAdminDetailed,
+  registerModelSource,
+  registerOpenwebuiAdminApi,
+  registerSynapAsOpenwebuiToolServer,
+  resetSynapLoopbackProbeCache,
+  resolveComponent,
+  resolveHubBaseUrl,
+  resolveOpenwebuiAdminUrl,
+  resolveSynapUrl,
+  resolveSynapUrlOnHost,
+  restartBackendContainer,
+  restartHermesIfRunning,
+  saveConfig,
+  saveConfigDetailed,
+  selectedIds,
+  serviceComponents,
+  syncOpenwebuiExtras,
+  syncOwuiUsersToSynap,
+  syncSynapKnowledgeToOpenwebui,
+  upsertAllModelSources,
+  validateBaseDomain,
+  waitForHealth,
+  waitForHealthDetailed,
+  wireAllInstalledComponents,
+  wireComponentAi,
+  writeBuilderProjectEnv,
+  writeClaudeCodeSettings,
+  writeHermesConfigYaml,
+  writeHermesEnvFile,
+  writeSandboxEnvFile
+} from "./chunk-O5WTCVMZ.js";
+import {
+  DEFAULT_CODE_ENGINE,
+  clearCpUserSession,
+  ensureSecretValue,
+  isCpSessionStale,
+  readAgentKey,
+  readAgentKeyOrLegacy,
+  readAgentKeyOrLegacySync,
+  readCodeEngine,
+  readCpUserSession,
+  readEveSecrets,
+  secretsPath,
+  writeAgentKey,
+  writeCodeEngine,
+  writeCpUserSession,
+  writeEveSecrets
+} from "./chunk-T7GCAJK5.js";
+import {
+  appendOperationalEvent,
+  getEveEventsPath,
+  getEveStateHome,
+  getEveStatePath,
+  readOperationalEvents
+} from "./chunk-HRF6TNXX.js";
+import "./chunk-FAE5UZFE.js";
+import "./chunk-D7P3IYYR.js";
+export {
+  AGENTS,
+  AI_CONSUMERS,
+  AI_CONSUMERS_NEEDING_RECREATE,
+  AiModeSchema,
+  AiProviderSchema,
+  BuilderEngineSchema,
+  COMPONENTS,
+  ConfigManager,
+  CredentialsManager,
+  DEFAULT_CODE_ENGINE,
+  DEFAULT_HERMES_CONFIG,
+  DEFAULT_HUB_PATH,
+  EVE_BACKGROUND_ACTIONS,
+  EVE_DASHBOARD_SERVICE,
+  EntityStateManager,
+  LEGACY_CODER_ENGINE_SLUGS,
+  PIPELINE_AGENT_TYPES,
+  PIPELINE_PERSONALITIES,
+  POD_DEPLOY_DIR_CANDIDATES,
+  PodProviderError,
+  SYNAP_BACKEND_CONTAINERS,
+  SYNAP_BACKEND_INTERNAL_URL,
+  SetupProfileKindSchema,
+  SetupProfileSchema,
+  UsbSetupManifestSchema,
+  VERSION,
+  addonComponentIds,
+  agentsToProvision,
+  allAgentTypes,
+  allComponentIds,
+  appendOperationalEvent,
+  assigneeForAction,
+  buildAndPackageImage,
+  buildConfigDebugPayload,
+  buildDiscoveryDebugPayload,
+  buildEventsDebugPayload,
+  buildMaterializedDebugPayload,
+  buildOpenwebuiManagedConfig,
+  buildOpenwebuiModelSources,
+  clearCpUserSession,
+  configManager,
+  configStore,
+  configureChannel,
+  connectTraefikToEveNetwork,
+  copySynapSkillIntoClaudeProject,
+  createAllowedEmbedOriginChecker,
+  credentialsManager,
+  defaultSkillsDir,
+  deployToCoolify,
+  describePodProviderResult,
+  detectAppConfig,
+  detectCoolifyEnvironments,
+  detectCoolifyTargets,
+  disableChannel,
+  discoverAndBackfillPodConfig,
+  discoverAndBackfillPodUrl,
+  discoverPodConfig,
+  ensureEveSkillsLayout,
+  ensureOpenWebuiBootstrapSecrets,
+  ensureSecretValue,
+  ensureSynapLoopbackOverride,
+  entityStateManager,
+  findCoolifyAppByName,
+  findPodDeployDir,
+  formatExtrasSummary,
+  formatHardwareReport,
+  generateSynapPlugin,
+  getAccessUrls,
+  getAdminJwt,
+  getAdminJwtPostHealth,
+  getAdminJwtPostHealthDetailed,
+  getAdminReadyStatus,
+  getAppImageName,
+  getConfig,
+  getConfigDetailed,
+  getCoolifyTargetsFromEnv,
+  getEveEventsPath,
+  getEveStateHome,
+  getEveStatePath,
+  getServerIp,
+  getSetupProfilePath,
+  getStatus,
+  hasAnyProvider,
+  isAllowedEmbedOrigin,
+  isCpSessionStale,
+  isLoopbackUrl,
+  isSynapLoopbackReachable,
+  isValidEveBackgroundAction,
+  listCoolifyApps,
+  listEveBackgroundActions,
+  listModelSources,
+  migrateStateDirectory,
+  pickPrimaryProvider,
+  probeAdminAuth,
+  probeHardware,
+  provisionOwuiUserInSynap,
+  pruneOldImagesForRepo,
+  publicComponentUrl,
+  pushSynapFunctionsToOpenwebui,
+  pushSynapSkillsToOpenwebuiPrompts,
+  readAgentKey,
+  readAgentKeyOrLegacy,
+  readAgentKeyOrLegacySync,
+  readChannelStatus,
+  readCodeEngine,
+  readCpUserSession,
+  readEveSecrets,
+  readOperationalEvents,
+  readSetupProfile,
+  readUsbSetupManifest,
+  reconcile,
+  reconcileOpenwebuiManagedConfig,
+  reconcileOpenwebuiManagedConfigViaAdmin,
+  reconcileOpenwebuiManagedConfigViaAdminDetailed,
+  redactSecrets,
+  registerModelSource,
+  registerOpenwebuiAdminApi,
+  registerSynapAsOpenwebuiToolServer,
+  resetPodUrlCache,
+  resetSynapLoopbackProbeCache,
+  resolveAgent,
+  resolveComponent,
+  resolveHubBaseUrl,
+  resolveOpenwebuiAdminUrl,
+  resolvePipelinePersonality,
+  resolvePodUrl,
+  resolvePodUrlDetailed,
+  resolveSynapUrl,
+  resolveSynapUrlOnHost,
+  restartBackendContainer,
+  restartHermesIfRunning,
+  runStateCoherenceChecks,
+  saveConfig,
+  saveConfigDetailed,
+  secretsPath,
+  selectedIds,
+  serviceComponents,
+  setPodProviderEnabled,
+  syncCoolifyAppImage,
+  syncOpenwebuiExtras,
+  syncOwuiUsersToSynap,
+  syncSynapKnowledgeToOpenwebui,
+  upsertAllModelSources,
+  upsertPodProvider,
+  validateBaseDomain,
+  validateChannelCredentials,
+  waitForHealth,
+  waitForHealthDetailed,
+  wireAllInstalledComponents,
+  wireComponentAi,
+  writeAgentKey,
+  writeBuilderProjectEnv,
+  writeClaudeCodeSettings,
+  writeCodeEngine,
+  writeCpUserSession,
+  writeEveSecrets,
+  writeHermesConfigYaml,
+  writeHermesEnvFile,
+  writeOpenwebuiEnv,
+  writeSandboxEnvFile,
+  writeSetupProfile,
+  writeUsbSetupManifest
+};
+//# sourceMappingURL=dist-C2QB4IKT.js.map

package/dist/dist-C2QB4IKT.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/dist-DEIUVZ57.js

@@ -0,0 +1,299 @@
+import { createRequire as __eveCreateRequire } from 'module'; const require = __eveCreateRequire(import.meta.url);
+import "./chunk-D7P3IYYR.js";
+
+// ../@eve/mouth/dist/index.js
+import { execFile } from "child_process";
+import { promisify } from "util";
+import { randomBytes } from "crypto";
+import { mkdtemp, writeFile, rm } from "fs/promises";
+import { tmpdir } from "os";
+import { join } from "path";
+import { execFile as execFile2 } from "child_process";
+import { promisify as promisify2 } from "util";
+import { randomBytes as randomBytes2 } from "crypto";
+var execFileAsync = promisify(execFile);
+var STALWART_IMAGE = "stalwartlabs/stalwart:v0.16";
+var STALWART_CONTAINER = "eve-mouth-stalwart";
+var PUBLIC_TCP_PORTS = [25, 465, 587, 993, 995];
+var LOOPBACK_TCP_PORTS = [143, 110, 4190];
+var STALWART_PUBLIC_PORTS = PUBLIC_TCP_PORTS;
+var StalwartService = class {
+  config;
+  constructor(config = {}) {
+    this.config = config;
+  }
+  /** True if the Stalwart container is running. */
+  async isRunning() {
+    try {
+      const { stdout } = await execFileAsync("docker", [
+        "ps",
+        "--filter",
+        `name=^${STALWART_CONTAINER}$`,
+        "--format",
+        "{{.Names}}"
+      ]);
+      return stdout.trim() === STALWART_CONTAINER;
+    } catch {
+      return false;
+    }
+  }
+  /** True if a container with this name exists in any state (running or stopped). */
+  async exists() {
+    try {
+      const { stdout } = await execFileAsync("docker", [
+        "ps",
+        "-aq",
+        "--filter",
+        `name=^${STALWART_CONTAINER}$`
+      ]);
+      return stdout.trim().length > 0;
+    } catch {
+      return false;
+    }
+  }
+  /** Ensure the shared Docker bridge exists; ignores "already exists". */
+  async ensureNetwork() {
+    try {
+      await execFileAsync("docker", ["network", "create", "eve-network"]);
+    } catch {
+    }
+  }
+  /**
+   * Install + start the Stalwart container. Returns the bootstrap admin
+   * password (generated when not supplied, `undefined` when the container was
+   * already up so the caller never clobbers a stored secret with '').
+   *
+   * Idempotent: a stopped container with the same name is started rather than
+   * recreated (a bare `docker run --name` would otherwise fail on the conflict).
+   */
+  async install(config) {
+    const merged = { ...this.config, ...config };
+    if (await this.isRunning()) {
+      console.log("Stalwart is already running");
+      return { adminPassword: merged.adminPassword || void 0 };
+    }
+    await this.ensureNetwork();
+    if (await this.exists()) {
+      console.log("Stalwart container exists but is stopped \u2014 starting it");
+      await this.start();
+      return { adminPassword: merged.adminPassword || void 0 };
+    }
+    const adminPassword = merged.adminPassword && merged.adminPassword.trim().length > 0 ? merged.adminPassword : randomBytes(18).toString("base64url");
+    console.log(`Pulling Stalwart image (${STALWART_IMAGE})...`);
+    await execFileAsync("docker", ["pull", STALWART_IMAGE]);
+    const dir = await mkdtemp(join(tmpdir(), "eve-stalwart-"));
+    const envFile = join(dir, "stalwart.env");
+    await writeFile(envFile, `STALWART_RECOVERY_ADMIN=admin:${adminPassword}
+`, { mode: 384 });
+    const portArgs = [
+      ...PUBLIC_TCP_PORTS.flatMap((p) => ["-p", `${p}:${p}`]),
+      ...LOOPBACK_TCP_PORTS.flatMap((p) => ["-p", `127.0.0.1:${p}:${p}`])
+    ];
+    try {
+      console.log("Starting Stalwart...");
+      await execFileAsync("docker", [
+        "run",
+        "-d",
+        "--name",
+        STALWART_CONTAINER,
+        "--restart",
+        "unless-stopped",
+        "--network",
+        "eve-network",
+        ...portArgs,
+        "--env-file",
+        envFile,
+        ...merged.publicUrl ? ["-e", `STALWART_PUBLIC_URL=${merged.publicUrl}`] : [],
+        "-v",
+        "stalwart-etc:/etc/stalwart",
+        "-v",
+        "stalwart-data:/var/lib/stalwart",
+        STALWART_IMAGE
+      ]);
+    } finally {
+      await rm(dir, { recursive: true, force: true });
+    }
+    return { adminPassword };
+  }
+  async start() {
+    if (await this.isRunning()) {
+      console.log("Stalwart is already running");
+      return;
+    }
+    await execFileAsync("docker", ["start", STALWART_CONTAINER]);
+    console.log("Stalwart started");
+  }
+  async stop() {
+    await execFileAsync("docker", ["stop", STALWART_CONTAINER]);
+    console.log("Stalwart stopped");
+  }
+};
+var execFileAsync2 = promisify2(execFile2);
+var BULWARK_IMAGE = "ghcr.io/bulwarkmail/webmail:latest";
+var BULWARK_CONTAINER = "eve-mouth-bulwark";
+var BulwarkService = class {
+  config;
+  constructor(config = {}) {
+    this.config = config;
+  }
+  async isRunning() {
+    try {
+      const { stdout } = await execFileAsync2("docker", [
+        "ps",
+        "--filter",
+        `name=^${BULWARK_CONTAINER}$`,
+        "--format",
+        "{{.Names}}"
+      ]);
+      return stdout.trim() === BULWARK_CONTAINER;
+    } catch {
+      return false;
+    }
+  }
+  async exists() {
+    try {
+      const { stdout } = await execFileAsync2("docker", [
+        "ps",
+        "-aq",
+        "--filter",
+        `name=^${BULWARK_CONTAINER}$`
+      ]);
+      return stdout.trim().length > 0;
+    } catch {
+      return false;
+    }
+  }
+  async ensureNetwork() {
+    try {
+      await execFileAsync2("docker", ["network", "create", "eve-network"]);
+    } catch {
+    }
+  }
+  /**
+   * Install + start Bulwark. Returns the SESSION_SECRET actually used
+   * (generated when not supplied, `undefined` when the container was already
+   * up) so the caller can persist it without clobbering a stored value.
+   *
+   * Idempotent: a stopped container is started rather than recreated.
+   */
+  async install(config) {
+    const merged = { ...this.config, ...config };
+    if (await this.isRunning()) {
+      console.log("Bulwark is already running");
+      return { sessionSecret: merged.sessionSecret || void 0 };
+    }
+    await this.ensureNetwork();
+    if (await this.exists()) {
+      console.log("Bulwark container exists but is stopped \u2014 starting it");
+      await this.start();
+      return { sessionSecret: merged.sessionSecret || void 0 };
+    }
+    const sessionSecret = merged.sessionSecret && merged.sessionSecret.trim().length > 0 ? merged.sessionSecret : randomBytes2(32).toString("hex");
+    console.log(`Pulling Bulwark image (${BULWARK_IMAGE})...`);
+    await execFileAsync2("docker", ["pull", BULWARK_IMAGE]);
+    console.log("Starting Bulwark...");
+    await execFileAsync2("docker", [
+      "run",
+      "-d",
+      "--name",
+      BULWARK_CONTAINER,
+      "--restart",
+      "unless-stopped",
+      "--network",
+      "eve-network",
+      "-e",
+      `SESSION_SECRET=${sessionSecret}`,
+      "-e",
+      "ADMIN_CONFIG_DIR=/data/admin",
+      ...merged.jmapUrl ? ["-e", `JMAP_SERVER_URL=${merged.jmapUrl}`] : [],
+      "-v",
+      "bulwark-data:/data",
+      BULWARK_IMAGE
+    ]);
+    return { sessionSecret };
+  }
+  async start() {
+    if (await this.isRunning()) {
+      console.log("Bulwark is already running");
+      return;
+    }
+    await execFileAsync2("docker", ["start", BULWARK_CONTAINER]);
+    console.log("Bulwark started");
+  }
+  async stop() {
+    await execFileAsync2("docker", ["stop", BULWARK_CONTAINER]);
+    console.log("Bulwark stopped");
+  }
+};
+var STALWART_INTERNAL_URL = "http://eve-mouth-stalwart:8080";
+var StalwartAdmin = class {
+  baseUrl;
+  authHeader;
+  constructor(config) {
+    this.baseUrl = (config.baseUrl ?? STALWART_INTERNAL_URL).replace(/\/$/, "");
+    const user = config.adminUser ?? "admin";
+    this.authHeader = "Basic " + Buffer.from(`${user}:${config.adminPassword}`).toString("base64");
+  }
+  async request(method, path, body) {
+    const res = await fetch(`${this.baseUrl}${path}`, {
+      method,
+      headers: {
+        Authorization: this.authHeader,
+        "Content-Type": "application/json",
+        Accept: "application/json"
+      },
+      body: body === void 0 ? void 0 : JSON.stringify(body)
+    });
+    if (!res.ok) {
+      const text = await res.text().catch(() => "");
+      throw new Error(`Stalwart API ${method} ${path} \u2192 ${res.status} ${res.statusText}${text ? `: ${text}` : ""}`);
+    }
+    if (res.status === 204) return void 0;
+    return await res.json().catch(() => void 0);
+  }
+  /** True if Stalwart's liveness endpoint responds 2xx. */
+  async isLive() {
+    try {
+      const res = await fetch(`${this.baseUrl}/healthz/live`);
+      return res.ok;
+    } catch {
+      return false;
+    }
+  }
+  /** Create a local domain (idempotent on the caller's side — 409 surfaces as an error). */
+  async createDomain(name) {
+    await this.request("POST", "/api/principal", { type: "domain", name });
+  }
+  /** Create an individual mailbox account. */
+  async createAccount(input) {
+    await this.request("POST", "/api/principal", {
+      type: "individual",
+      name: input.email,
+      secrets: [input.password],
+      emails: [input.email],
+      ...input.description ? { description: input.description } : {}
+    });
+  }
+  /** List principals, optionally filtered by type ("individual" | "domain" | …). */
+  async listPrincipals(type) {
+    const qs = type ? `?type=${encodeURIComponent(type)}` : "";
+    const data = await this.request(
+      "GET",
+      `/api/principal${qs}`
+    );
+    if (Array.isArray(data)) return data;
+    return data?.items ?? [];
+  }
+};
+export {
+  BULWARK_CONTAINER,
+  BULWARK_IMAGE,
+  BulwarkService,
+  STALWART_CONTAINER,
+  STALWART_IMAGE,
+  STALWART_INTERNAL_URL,
+  STALWART_PUBLIC_PORTS,
+  StalwartAdmin,
+  StalwartService
+};
+//# sourceMappingURL=dist-DEIUVZ57.js.map

package/dist/dist-DEIUVZ57.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../@eve/mouth/dist/index.js"],"sourcesContent":["// src/lib/stalwart.ts\nimport { execFile } from \"child_process\";\nimport { promisify } from \"util\";\nimport { randomBytes } from \"crypto\";\nimport { mkdtemp, writeFile, rm } from \"fs/promises\";\nimport { tmpdir } from \"os\";\nimport { join } from \"path\";\nvar execFileAsync = promisify(execFile);\nvar STALWART_IMAGE = \"stalwartlabs/stalwart:v0.16\";\nvar STALWART_CONTAINER = \"eve-mouth-stalwart\";\nvar PUBLIC_TCP_PORTS = [25, 465, 587, 993, 995];\nvar LOOPBACK_TCP_PORTS = [143, 110, 4190];\nvar STALWART_PUBLIC_PORTS = PUBLIC_TCP_PORTS;\nvar StalwartService = class {\n  config;\n  constructor(config = {}) {\n    this.config = config;\n  }\n  /** True if the Stalwart container is running. */\n  async isRunning() {\n    try {\n      const { stdout } = await execFileAsync(\"docker\", [\n        \"ps\",\n        \"--filter\",\n        `name=^${STALWART_CONTAINER}$`,\n        \"--format\",\n        \"{{.Names}}\"\n      ]);\n      return stdout.trim() === STALWART_CONTAINER;\n    } catch {\n      return false;\n    }\n  }\n  /** True if a container with this name exists in any state (running or stopped). */\n  async exists() {\n    try {\n      const { stdout } = await execFileAsync(\"docker\", [\n        \"ps\",\n        \"-aq\",\n        \"--filter\",\n        `name=^${STALWART_CONTAINER}$`\n      ]);\n      return stdout.trim().length > 0;\n    } catch {\n      return false;\n    }\n  }\n  /** Ensure the shared Docker bridge exists; ignores \"already exists\". */\n  async ensureNetwork() {\n    try {\n      await execFileAsync(\"docker\", [\"network\", \"create\", \"eve-network\"]);\n    } catch {\n    }\n  }\n  /**\n   * Install + start the Stalwart container. Returns the bootstrap admin\n   * password (generated when not supplied, `undefined` when the container was\n   * already up so the caller never clobbers a stored secret with '').\n   *\n   * Idempotent: a stopped container with the same name is started rather than\n   * recreated (a bare `docker run --name` would otherwise fail on the conflict).\n   */\n  async install(config) {\n    const merged = { ...this.config, ...config };\n    if (await this.isRunning()) {\n      console.log(\"Stalwart is already running\");\n      return { adminPassword: merged.adminPassword || void 0 };\n    }\n    await this.ensureNetwork();\n    if (await this.exists()) {\n      console.log(\"Stalwart container exists but is stopped \\u2014 starting it\");\n      await this.start();\n      return { adminPassword: merged.adminPassword || void 0 };\n    }\n    const adminPassword = merged.adminPassword && merged.adminPassword.trim().length > 0 ? merged.adminPassword : randomBytes(18).toString(\"base64url\");\n    console.log(`Pulling Stalwart image (${STALWART_IMAGE})...`);\n    await execFileAsync(\"docker\", [\"pull\", STALWART_IMAGE]);\n    const dir = await mkdtemp(join(tmpdir(), \"eve-stalwart-\"));\n    const envFile = join(dir, \"stalwart.env\");\n    await writeFile(envFile, `STALWART_RECOVERY_ADMIN=admin:${adminPassword}\n`, { mode: 384 });\n    const portArgs = [\n      ...PUBLIC_TCP_PORTS.flatMap((p) => [\"-p\", `${p}:${p}`]),\n      ...LOOPBACK_TCP_PORTS.flatMap((p) => [\"-p\", `127.0.0.1:${p}:${p}`])\n    ];\n    try {\n      console.log(\"Starting Stalwart...\");\n      await execFileAsync(\"docker\", [\n        \"run\",\n        \"-d\",\n        \"--name\",\n        STALWART_CONTAINER,\n        \"--restart\",\n        \"unless-stopped\",\n        \"--network\",\n        \"eve-network\",\n        ...portArgs,\n        \"--env-file\",\n        envFile,\n        ...merged.publicUrl ? [\"-e\", `STALWART_PUBLIC_URL=${merged.publicUrl}`] : [],\n        \"-v\",\n        \"stalwart-etc:/etc/stalwart\",\n        \"-v\",\n        \"stalwart-data:/var/lib/stalwart\",\n        STALWART_IMAGE\n      ]);\n    } finally {\n      await rm(dir, { recursive: true, force: true });\n    }\n    return { adminPassword };\n  }\n  async start() {\n    if (await this.isRunning()) {\n      console.log(\"Stalwart is already running\");\n      return;\n    }\n    await execFileAsync(\"docker\", [\"start\", STALWART_CONTAINER]);\n    console.log(\"Stalwart started\");\n  }\n  async stop() {\n    await execFileAsync(\"docker\", [\"stop\", STALWART_CONTAINER]);\n    console.log(\"Stalwart stopped\");\n  }\n};\n\n// src/lib/bulwark.ts\nimport { execFile as execFile2 } from \"child_process\";\nimport { promisify as promisify2 } from \"util\";\nimport { randomBytes as randomBytes2 } from \"crypto\";\nvar execFileAsync2 = promisify2(execFile2);\nvar BULWARK_IMAGE = \"ghcr.io/bulwarkmail/webmail:latest\";\nvar BULWARK_CONTAINER = \"eve-mouth-bulwark\";\nvar BulwarkService = class {\n  config;\n  constructor(config = {}) {\n    this.config = config;\n  }\n  async isRunning() {\n    try {\n      const { stdout } = await execFileAsync2(\"docker\", [\n        \"ps\",\n        \"--filter\",\n        `name=^${BULWARK_CONTAINER}$`,\n        \"--format\",\n        \"{{.Names}}\"\n      ]);\n      return stdout.trim() === BULWARK_CONTAINER;\n    } catch {\n      return false;\n    }\n  }\n  async exists() {\n    try {\n      const { stdout } = await execFileAsync2(\"docker\", [\n        \"ps\",\n        \"-aq\",\n        \"--filter\",\n        `name=^${BULWARK_CONTAINER}$`\n      ]);\n      return stdout.trim().length > 0;\n    } catch {\n      return false;\n    }\n  }\n  async ensureNetwork() {\n    try {\n      await execFileAsync2(\"docker\", [\"network\", \"create\", \"eve-network\"]);\n    } catch {\n    }\n  }\n  /**\n   * Install + start Bulwark. Returns the SESSION_SECRET actually used\n   * (generated when not supplied, `undefined` when the container was already\n   * up) so the caller can persist it without clobbering a stored value.\n   *\n   * Idempotent: a stopped container is started rather than recreated.\n   */\n  async install(config) {\n    const merged = { ...this.config, ...config };\n    if (await this.isRunning()) {\n      console.log(\"Bulwark is already running\");\n      return { sessionSecret: merged.sessionSecret || void 0 };\n    }\n    await this.ensureNetwork();\n    if (await this.exists()) {\n      console.log(\"Bulwark container exists but is stopped \\u2014 starting it\");\n      await this.start();\n      return { sessionSecret: merged.sessionSecret || void 0 };\n    }\n    const sessionSecret = merged.sessionSecret && merged.sessionSecret.trim().length > 0 ? merged.sessionSecret : randomBytes2(32).toString(\"hex\");\n    console.log(`Pulling Bulwark image (${BULWARK_IMAGE})...`);\n    await execFileAsync2(\"docker\", [\"pull\", BULWARK_IMAGE]);\n    console.log(\"Starting Bulwark...\");\n    await execFileAsync2(\"docker\", [\n      \"run\",\n      \"-d\",\n      \"--name\",\n      BULWARK_CONTAINER,\n      \"--restart\",\n      \"unless-stopped\",\n      \"--network\",\n      \"eve-network\",\n      \"-e\",\n      `SESSION_SECRET=${sessionSecret}`,\n      \"-e\",\n      \"ADMIN_CONFIG_DIR=/data/admin\",\n      ...merged.jmapUrl ? [\"-e\", `JMAP_SERVER_URL=${merged.jmapUrl}`] : [],\n      \"-v\",\n      \"bulwark-data:/data\",\n      BULWARK_IMAGE\n    ]);\n    return { sessionSecret };\n  }\n  async start() {\n    if (await this.isRunning()) {\n      console.log(\"Bulwark is already running\");\n      return;\n    }\n    await execFileAsync2(\"docker\", [\"start\", BULWARK_CONTAINER]);\n    console.log(\"Bulwark started\");\n  }\n  async stop() {\n    await execFileAsync2(\"docker\", [\"stop\", BULWARK_CONTAINER]);\n    console.log(\"Bulwark stopped\");\n  }\n};\n\n// src/lib/admin.ts\nvar STALWART_INTERNAL_URL = \"http://eve-mouth-stalwart:8080\";\nvar StalwartAdmin = class {\n  baseUrl;\n  authHeader;\n  constructor(config) {\n    this.baseUrl = (config.baseUrl ?? STALWART_INTERNAL_URL).replace(/\\/$/, \"\");\n    const user = config.adminUser ?? \"admin\";\n    this.authHeader = \"Basic \" + Buffer.from(`${user}:${config.adminPassword}`).toString(\"base64\");\n  }\n  async request(method, path, body) {\n    const res = await fetch(`${this.baseUrl}${path}`, {\n      method,\n      headers: {\n        Authorization: this.authHeader,\n        \"Content-Type\": \"application/json\",\n        Accept: \"application/json\"\n      },\n      body: body === void 0 ? void 0 : JSON.stringify(body)\n    });\n    if (!res.ok) {\n      const text = await res.text().catch(() => \"\");\n      throw new Error(`Stalwart API ${method} ${path} \\u2192 ${res.status} ${res.statusText}${text ? `: ${text}` : \"\"}`);\n    }\n    if (res.status === 204) return void 0;\n    return await res.json().catch(() => void 0);\n  }\n  /** True if Stalwart's liveness endpoint responds 2xx. */\n  async isLive() {\n    try {\n      const res = await fetch(`${this.baseUrl}/healthz/live`);\n      return res.ok;\n    } catch {\n      return false;\n    }\n  }\n  /** Create a local domain (idempotent on the caller's side — 409 surfaces as an error). */\n  async createDomain(name) {\n    await this.request(\"POST\", \"/api/principal\", { type: \"domain\", name });\n  }\n  /** Create an individual mailbox account. */\n  async createAccount(input) {\n    await this.request(\"POST\", \"/api/principal\", {\n      type: \"individual\",\n      name: input.email,\n      secrets: [input.password],\n      emails: [input.email],\n      ...input.description ? { description: input.description } : {}\n    });\n  }\n  /** List principals, optionally filtered by type (\"individual\" | \"domain\" | …). */\n  async listPrincipals(type) {\n    const qs = type ? `?type=${encodeURIComponent(type)}` : \"\";\n    const data = await this.request(\n      \"GET\",\n      `/api/principal${qs}`\n    );\n    if (Array.isArray(data)) return data;\n    return data?.items ?? [];\n  }\n};\nexport {\n  BULWARK_CONTAINER,\n  BULWARK_IMAGE,\n  BulwarkService,\n  STALWART_CONTAINER,\n  STALWART_IMAGE,\n  STALWART_INTERNAL_URL,\n  STALWART_PUBLIC_PORTS,\n  StalwartAdmin,\n  StalwartService\n};\n"],"mappings":";;;;AACA,SAAS,gBAAgB;AACzB,SAAS,iBAAiB;AAC1B,SAAS,mBAAmB;AAC5B,SAAS,SAAS,WAAW,UAAU;AACvC,SAAS,cAAc;AACvB,SAAS,YAAY;AAwHrB,SAAS,YAAY,iBAAiB;AACtC,SAAS,aAAa,kBAAkB;AACxC,SAAS,eAAe,oBAAoB;AAzH5C,IAAI,gBAAgB,UAAU,QAAQ;AACtC,IAAI,iBAAiB;AACrB,IAAI,qBAAqB;AACzB,IAAI,mBAAmB,CAAC,IAAI,KAAK,KAAK,KAAK,GAAG;AAC9C,IAAI,qBAAqB,CAAC,KAAK,KAAK,IAAI;AACxC,IAAI,wBAAwB;AAC5B,IAAI,kBAAkB,MAAM;AAAA,EAC1B;AAAA,EACA,YAAY,SAAS,CAAC,GAAG;AACvB,SAAK,SAAS;AAAA,EAChB;AAAA;AAAA,EAEA,MAAM,YAAY;AAChB,QAAI;AACF,YAAM,EAAE,OAAO,IAAI,MAAM,cAAc,UAAU;AAAA,QAC/C;AAAA,QACA;AAAA,QACA,SAAS,kBAAkB;AAAA,QAC3B;AAAA,QACA;AAAA,MACF,CAAC;AACD,aAAO,OAAO,KAAK,MAAM;AAAA,IAC3B,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF;AAAA;AAAA,EAEA,MAAM,SAAS;AACb,QAAI;AACF,YAAM,EAAE,OAAO,IAAI,MAAM,cAAc,UAAU;AAAA,QAC/C;AAAA,QACA;AAAA,QACA;AAAA,QACA,SAAS,kBAAkB;AAAA,MAC7B,CAAC;AACD,aAAO,OAAO,KAAK,EAAE,SAAS;AAAA,IAChC,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF;AAAA;AAAA,EAEA,MAAM,gBAAgB;AACpB,QAAI;AACF,YAAM,cAAc,UAAU,CAAC,WAAW,UAAU,aAAa,CAAC;AAAA,IACpE,QAAQ;AAAA,IACR;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAM,QAAQ,QAAQ;AACpB,UAAM,SAAS,EAAE,GAAG,KAAK,QAAQ,GAAG,OAAO;AAC3C,QAAI,MAAM,KAAK,UAAU,GAAG;AAC1B,cAAQ,IAAI,6BAA6B;AACzC,aAAO,EAAE,eAAe,OAAO,iBAAiB,OAAO;AAAA,IACzD;AACA,UAAM,KAAK,cAAc;AACzB,QAAI,MAAM,KAAK,OAAO,GAAG;AACvB,cAAQ,IAAI,6DAA6D;AACzE,YAAM,KAAK,MAAM;AACjB,aAAO,EAAE,eAAe,OAAO,iBAAiB,OAAO;AAAA,IACzD;AACA,UAAM,gBAAgB,OAAO,iBAAiB,OAAO,cAAc,KAAK,EAAE,SAAS,IAAI,OAAO,gBAAgB,YAAY,EAAE,EAAE,SAAS,WAAW;AAClJ,YAAQ,IAAI,2BAA2B,cAAc,MAAM;AAC3D,UAAM,cAAc,UAAU,CAAC,QAAQ,cAAc,CAAC;AACtD,UAAM,MAAM,MAAM,QAAQ,KAAK,OAAO,GAAG,eAAe,CAAC;AACzD,UAAM,UAAU,KAAK,KAAK,cAAc;AACxC,UAAM,UAAU,SAAS,iCAAiC,aAAa;AAAA,GACxE,EAAE,MAAM,IAAI,CAAC;AACZ,UAAM,WAAW;AAAA,MACf,GAAG,iBAAiB,QAAQ,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;AAAA,MACtD,GAAG,mBAAmB,QAAQ,CAAC,MAAM,CAAC,MAAM,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;AAAA,IACpE;AACA,QAAI;AACF,cAAQ,IAAI,sBAAsB;AAClC,YAAM,cAAc,UAAU;AAAA,QAC5B;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA,GAAG;AAAA,QACH;AAAA,QACA;AAAA,QACA,GAAG,OAAO,YAAY,CAAC,MAAM,uBAAuB,OAAO,SAAS,EAAE,IAAI,CAAC;AAAA,QAC3E;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF,CAAC;AAAA,IACH,UAAE;AACA,YAAM,GAAG,KAAK,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAAA,IAChD;AACA,WAAO,EAAE,cAAc;AAAA,EACzB;AAAA,EACA,MAAM,QAAQ;AACZ,QAAI,MAAM,KAAK,UAAU,GAAG;AAC1B,cAAQ,IAAI,6BAA6B;AACzC;AAAA,IACF;AACA,UAAM,cAAc,UAAU,CAAC,SAAS,kBAAkB,CAAC;AAC3D,YAAQ,IAAI,kBAAkB;AAAA,EAChC;AAAA,EACA,MAAM,OAAO;AACX,UAAM,cAAc,UAAU,CAAC,QAAQ,kBAAkB,CAAC;AAC1D,YAAQ,IAAI,kBAAkB;AAAA,EAChC;AACF;AAMA,IAAI,iBAAiB,WAAW,SAAS;AACzC,IAAI,gBAAgB;AACpB,IAAI,oBAAoB;AACxB,IAAI,iBAAiB,MAAM;AAAA,EACzB;AAAA,EACA,YAAY,SAAS,CAAC,GAAG;AACvB,SAAK,SAAS;AAAA,EAChB;AAAA,EACA,MAAM,YAAY;AAChB,QAAI;AACF,YAAM,EAAE,OAAO,IAAI,MAAM,eAAe,UAAU;AAAA,QAChD;AAAA,QACA;AAAA,QACA,SAAS,iBAAiB;AAAA,QAC1B;AAAA,QACA;AAAA,MACF,CAAC;AACD,aAAO,OAAO,KAAK,MAAM;AAAA,IAC3B,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF;AAAA,EACA,MAAM,SAAS;AACb,QAAI;AACF,YAAM,EAAE,OAAO,IAAI,MAAM,eAAe,UAAU;AAAA,QAChD;AAAA,QACA;AAAA,QACA;AAAA,QACA,SAAS,iBAAiB;AAAA,MAC5B,CAAC;AACD,aAAO,OAAO,KAAK,EAAE,SAAS;AAAA,IAChC,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF;AAAA,EACA,MAAM,gBAAgB;AACpB,QAAI;AACF,YAAM,eAAe,UAAU,CAAC,WAAW,UAAU,aAAa,CAAC;AAAA,IACrE,QAAQ;AAAA,IACR;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,QAAQ,QAAQ;AACpB,UAAM,SAAS,EAAE,GAAG,KAAK,QAAQ,GAAG,OAAO;AAC3C,QAAI,MAAM,KAAK,UAAU,GAAG;AAC1B,cAAQ,IAAI,4BAA4B;AACxC,aAAO,EAAE,eAAe,OAAO,iBAAiB,OAAO;AAAA,IACzD;AACA,UAAM,KAAK,cAAc;AACzB,QAAI,MAAM,KAAK,OAAO,GAAG;AACvB,cAAQ,IAAI,4DAA4D;AACxE,YAAM,KAAK,MAAM;AACjB,aAAO,EAAE,eAAe,OAAO,iBAAiB,OAAO;AAAA,IACzD;AACA,UAAM,gBAAgB,OAAO,iBAAiB,OAAO,cAAc,KAAK,EAAE,SAAS,IAAI,OAAO,gBAAgB,aAAa,EAAE,EAAE,SAAS,KAAK;AAC7I,YAAQ,IAAI,0BAA0B,aAAa,MAAM;AACzD,UAAM,eAAe,UAAU,CAAC,QAAQ,aAAa,CAAC;AACtD,YAAQ,IAAI,qBAAqB;AACjC,UAAM,eAAe,UAAU;AAAA,MAC7B;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,kBAAkB,aAAa;AAAA,MAC/B;AAAA,MACA;AAAA,MACA,GAAG,OAAO,UAAU,CAAC,MAAM,mBAAmB,OAAO,OAAO,EAAE,IAAI,CAAC;AAAA,MACnE;AAAA,MACA;AAAA,MACA;AAAA,IACF,CAAC;AACD,WAAO,EAAE,cAAc;AAAA,EACzB;AAAA,EACA,MAAM,QAAQ;AACZ,QAAI,MAAM,KAAK,UAAU,GAAG;AAC1B,cAAQ,IAAI,4BAA4B;AACxC;AAAA,IACF;AACA,UAAM,eAAe,UAAU,CAAC,SAAS,iBAAiB,CAAC;AAC3D,YAAQ,IAAI,iBAAiB;AAAA,EAC/B;AAAA,EACA,MAAM,OAAO;AACX,UAAM,eAAe,UAAU,CAAC,QAAQ,iBAAiB,CAAC;AAC1D,YAAQ,IAAI,iBAAiB;AAAA,EAC/B;AACF;AAGA,IAAI,wBAAwB;AAC5B,IAAI,gBAAgB,MAAM;AAAA,EACxB;AAAA,EACA;AAAA,EACA,YAAY,QAAQ;AAClB,SAAK,WAAW,OAAO,WAAW,uBAAuB,QAAQ,OAAO,EAAE;AAC1E,UAAM,OAAO,OAAO,aAAa;AACjC,SAAK,aAAa,WAAW,OAAO,KAAK,GAAG,IAAI,IAAI,OAAO,aAAa,EAAE,EAAE,SAAS,QAAQ;AAAA,EAC/F;AAAA,EACA,MAAM,QAAQ,QAAQ,MAAM,MAAM;AAChC,UAAM,MAAM,MAAM,MAAM,GAAG,KAAK,OAAO,GAAG,IAAI,IAAI;AAAA,MAChD;AAAA,MACA,SAAS;AAAA,QACP,eAAe,KAAK;AAAA,QACpB,gBAAgB;AAAA,QAChB,QAAQ;AAAA,MACV;AAAA,MACA,MAAM,SAAS,SAAS,SAAS,KAAK,UAAU,IAAI;AAAA,IACtD,CAAC;AACD,QAAI,CAAC,IAAI,IAAI;AACX,YAAM,OAAO,MAAM,IAAI,KAAK,EAAE,MAAM,MAAM,EAAE;AAC5C,YAAM,IAAI,MAAM,gBAAgB,MAAM,IAAI,IAAI,WAAW,IAAI,MAAM,IAAI,IAAI,UAAU,GAAG,OAAO,KAAK,IAAI,KAAK,EAAE,EAAE;AAAA,IACnH;AACA,QAAI,IAAI,WAAW,IAAK,QAAO;AAC/B,WAAO,MAAM,IAAI,KAAK,EAAE,MAAM,MAAM,MAAM;AAAA,EAC5C;AAAA;AAAA,EAEA,MAAM,SAAS;AACb,QAAI;AACF,YAAM,MAAM,MAAM,MAAM,GAAG,KAAK,OAAO,eAAe;AACtD,aAAO,IAAI;AAAA,IACb,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF;AAAA;AAAA,EAEA,MAAM,aAAa,MAAM;AACvB,UAAM,KAAK,QAAQ,QAAQ,kBAAkB,EAAE,MAAM,UAAU,KAAK,CAAC;AAAA,EACvE;AAAA;AAAA,EAEA,MAAM,cAAc,OAAO;AACzB,UAAM,KAAK,QAAQ,QAAQ,kBAAkB;AAAA,MAC3C,MAAM;AAAA,MACN,MAAM,MAAM;AAAA,MACZ,SAAS,CAAC,MAAM,QAAQ;AAAA,MACxB,QAAQ,CAAC,MAAM,KAAK;AAAA,MACpB,GAAG,MAAM,cAAc,EAAE,aAAa,MAAM,YAAY,IAAI,CAAC;AAAA,IAC/D,CAAC;AAAA,EACH;AAAA;AAAA,EAEA,MAAM,eAAe,MAAM;AACzB,UAAM,KAAK,OAAO,SAAS,mBAAmB,IAAI,CAAC,KAAK;AACxD,UAAM,OAAO,MAAM,KAAK;AAAA,MACtB;AAAA,MACA,iBAAiB,EAAE;AAAA,IACrB;AACA,QAAI,MAAM,QAAQ,IAAI,EAAG,QAAO;AAChC,WAAO,MAAM,SAAS,CAAC;AAAA,EACzB;AACF;","names":[]}