@taico/taico 0.7.0 → 0.8.1

package/dist/public/beta/index.html

@@ -18,7 +18,7 @@
 
     <link rel="icon" type="image/svg+xml" href="/beta/roo-favicon.svg" />
     <title>taico — Home</title>
-    <script type="module" crossorigin src="/beta/assets/index-tTf096QG.js"></script>
+    <script type="module" crossorigin src="/beta/assets/index-BO6PlAsO.js"></script>
     <link rel="stylesheet" crossorigin href="/beta/assets/index-DIzh0pTC.css">
   </head>
   <body>

package/dist/public/index.html

@@ -18,8 +18,8 @@
   <meta name="apple-mobile-web-app-capable" content="yes" />
   <meta name="apple-mobile-web-app-status-bar-style" content="default" />
   <title>taico</title>
-  <script type="module" crossorigin src="/assets/index-DRkJsm_M.js"></script>
-  <link rel="stylesheet" crossorigin href="/assets/index-ChunDgwd.css">
+  <script type="module" crossorigin src="/assets/index-G5Ht4law.js"></script>
+  <link rel="stylesheet" crossorigin href="/assets/index-NjAtMwFI.css">
 </head>
 
 <body>

package/dist/public/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@taico/ui",
   "private": true,
-  "version": "0.7.0",
+  "version": "0.8.0",
   "type": "module",
   "scripts": {
     "dev": "vite",
@@ -12,9 +12,9 @@
   },
   "dependencies": {
     "@radix-ui/react-dialog": "^1.1.15",
-    "@taico/client": "^0.7.0",
-    "@taico/events": "^0.7.0",
-    "@taico/shared": "^0.7.0",
+    "@taico/client": "^0.8.0",
+    "@taico/events": "^0.8.0",
+    "@taico/shared": "^0.8.0",
     "lucide-react": "^1.11.0",
     "marked-react": "^4.0.0",
     "react": "^19.2.0",

package/dist/search/index/search-embeddings.service.js

@@ -110,6 +110,8 @@ function buildEmbeddingModel(config, modelId) {
                 return null;
             }
             return (0, openai_compatible_1.createOpenAICompatible)({ name: config.type, baseURL, apiKey }).textEmbeddingModel(modelId);
+        case enums_1.AiProviderType.CHATGPT_SUBSCRIPTION:
+            return null;
     }
 }
 //# sourceMappingURL=search-embeddings.service.js.map

package/dist/search/index/search-embeddings.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"search-embeddings.service.js","sourceRoot":"","sources":["../../../src/search/index/search-embeddings.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAAA,2CAAoD;AACpD,2BAAsD;AACtD,iDAAoD;AACpD,2CAA8C;AAC9C,yDAAqD;AACrD,2CAA8C;AAC9C,iEAAmE;AACnE,qCAAwC;AACxC,gGAAwF;AAExF,oDAAoE;AACpE,8EAI6C;AAS7C,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAItB,IAAM,uBAAuB,+BAA7B,MAAM,uBAAuB;IAKL;IAJZ,MAAM,GAAG,IAAI,eAAM,CAAC,yBAAuB,CAAC,IAAI,CAAC,CAAC;IAElD,UAAU,GAAG,IAAI,GAAG,EAAoB,CAAC;IAE1D,YAA6B,wBAAkD;QAAlD,6BAAwB,GAAxB,wBAAwB,CAA0B;IAAG,CAAC;IAGnF,KAAK,CAAC,YAAY;QAChB,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAAC,OAAO,CAAC,kBAAU,CAAC,UAAU,CAAC,CAAC;YACrF,MAAM,KAAK,GAAG,mBAAmB,CAAC,SAAS,CAAC,QAAQ,EAAE,SAAS,CAAC,OAAO,CAAC,CAAC;YACzE,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,OAAO,IAAI,CAAC;YACd,CAAC;YACD,OAAO;gBACL,KAAK;gBACL,GAAG,EAAE,GAAG,SAAS,CAAC,QAAQ,CAAC,EAAE,IAAI,SAAS,CAAC,OAAO,EAAE;gBACpD,OAAO,EAAE,SAAS,CAAC,OAAO;aAC3B,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;gBAChB,OAAO,EAAE,2BAA2B;gBACpC,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAGD,KAAK,CAAC,cAAc,CAAC,QAAgC,EAAE,KAAe;QACpE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,IAAA,cAAS,EAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QACjF,OAAO,UAAU,CAAC;IACpB,CAAC;IAMD,KAAK,CAAC,UAAU,CACd,QAAgC,EAChC,KAAa,EACb,OAAmD;QAEnD,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW;YAC/B,CAAC,CAAC,aAAa,OAAO,CAAC,WAAW,YAAY,KAAK,EAAE;YACrD,CAAC,CAAC,KAAK,CAAC;QACV,MAAM,QAAQ,GAAG,GAAG,QAAQ,CAAC,GAAG,KAAK,KAAK,EAAE,CAAC;QAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC7C,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,IAAA,UAAK,EAAC;YAChC,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,KAAK;YAEL,UAAU,EAAE,CAAC;YACb,WAAW,EAAE,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC;SACpD,CAAC,CAAC;QAEH,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QACzC,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,GAAG,gBAAgB,EAAE,CAAC;YAC5C,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAe,CAAC,CAAC;QACxE,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;CACF,CAAA;AAtEY,0DAAuB;kCAAvB,uBAAuB;IADnC,IAAA,mBAAU,GAAE;qCAM4C,sDAAwB;GALpE,uBAAuB,CAsEnC;AAED,SAAS,mBAAmB,CAAC,MAA8B,EAAE,OAAe;IAC1E,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,SAAS,CAAC;IAC1C,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,SAAS,CAAC;IAE5C,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,KAAK,sBAAc,CAAC,MAAM;YACxB,OAAO,IAAA,qBAAY,EAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;QAEvE,KAAK,sBAAc,CAAC,MAAM;YACxB,OAAO,IAAA,qBAAY,EAAC,EAAE,MAAM,EAAE,MAAM,IAAI,IAAA,wCAAmB,GAAE,EAAE,OAAO,EAAE,CAAC,CAAC,kBAAkB,CAC1F,OAAO,CACR,CAAC;QAEJ,KAAK,sBAAc,CAAC,aAAa,CAAC,CAAC,CAAC;YAClC,MAAM,WAAW,GAAG,MAAM,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAA6B,CAAC,CAAC,CAAC,SAAS,CAAC;YACzF,OAAO,IAAA,4BAAY,EAAC;gBAClB,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,IAAA,yCAAoB,GAAE;gBACjD,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,IAAA,0CAAqB,GAAE;gBACpD,iBAAiB,EAAE,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS;aAC7D,CAAC,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;QACjC,CAAC;QAED,KAAK,sBAAc,CAAC,GAAG;YACrB,OAAO,IAAA,eAAS,EAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;QAEpE,KAAK,sBAAc,CAAC,SAAS;YAC3B,OAAO,IAAA,2BAAe,EAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;QAE1E,KAAK,sBAAc,CAAC,iBAAiB;YACnC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,IAAI,CAAC;YACd,CAAC;YACD,OAAO,IAAA,0CAAsB,EAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,kBAAkB,CACtF,OAAO,CACR,CAAC;IACN,CAAC;AACH,CAAC"}
+{"version":3,"file":"search-embeddings.service.js","sourceRoot":"","sources":["../../../src/search/index/search-embeddings.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAAA,2CAAoD;AACpD,2BAAsD;AACtD,iDAAoD;AACpD,2CAA8C;AAC9C,yDAAqD;AACrD,2CAA8C;AAC9C,iEAAmE;AACnE,qCAAwC;AACxC,gGAAwF;AAExF,oDAAoE;AACpE,8EAI6C;AAS7C,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAItB,IAAM,uBAAuB,+BAA7B,MAAM,uBAAuB;IAKL;IAJZ,MAAM,GAAG,IAAI,eAAM,CAAC,yBAAuB,CAAC,IAAI,CAAC,CAAC;IAElD,UAAU,GAAG,IAAI,GAAG,EAAoB,CAAC;IAE1D,YAA6B,wBAAkD;QAAlD,6BAAwB,GAAxB,wBAAwB,CAA0B;IAAG,CAAC;IAGnF,KAAK,CAAC,YAAY;QAChB,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAAC,OAAO,CAAC,kBAAU,CAAC,UAAU,CAAC,CAAC;YACrF,MAAM,KAAK,GAAG,mBAAmB,CAAC,SAAS,CAAC,QAAQ,EAAE,SAAS,CAAC,OAAO,CAAC,CAAC;YACzE,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,OAAO,IAAI,CAAC;YACd,CAAC;YACD,OAAO;gBACL,KAAK;gBACL,GAAG,EAAE,GAAG,SAAS,CAAC,QAAQ,CAAC,EAAE,IAAI,SAAS,CAAC,OAAO,EAAE;gBACpD,OAAO,EAAE,SAAS,CAAC,OAAO;aAC3B,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;gBAChB,OAAO,EAAE,2BAA2B;gBACpC,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAGD,KAAK,CAAC,cAAc,CAAC,QAAgC,EAAE,KAAe;QACpE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,IAAA,cAAS,EAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QACjF,OAAO,UAAU,CAAC;IACpB,CAAC;IAMD,KAAK,CAAC,UAAU,CACd,QAAgC,EAChC,KAAa,EACb,OAAmD;QAEnD,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW;YAC/B,CAAC,CAAC,aAAa,OAAO,CAAC,WAAW,YAAY,KAAK,EAAE;YACrD,CAAC,CAAC,KAAK,CAAC;QACV,MAAM,QAAQ,GAAG,GAAG,QAAQ,CAAC,GAAG,KAAK,KAAK,EAAE,CAAC;QAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC7C,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,IAAA,UAAK,EAAC;YAChC,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,KAAK;YAEL,UAAU,EAAE,CAAC;YACb,WAAW,EAAE,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC;SACpD,CAAC,CAAC;QAEH,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QACzC,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,GAAG,gBAAgB,EAAE,CAAC;YAC5C,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAe,CAAC,CAAC;QACxE,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;CACF,CAAA;AAtEY,0DAAuB;kCAAvB,uBAAuB;IADnC,IAAA,mBAAU,GAAE;qCAM4C,sDAAwB;GALpE,uBAAuB,CAsEnC;AAED,SAAS,mBAAmB,CAAC,MAA8B,EAAE,OAAe;IAC1E,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,SAAS,CAAC;IAC1C,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,SAAS,CAAC;IAE5C,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,KAAK,sBAAc,CAAC,MAAM;YACxB,OAAO,IAAA,qBAAY,EAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;QAEvE,KAAK,sBAAc,CAAC,MAAM;YACxB,OAAO,IAAA,qBAAY,EAAC,EAAE,MAAM,EAAE,MAAM,IAAI,IAAA,wCAAmB,GAAE,EAAE,OAAO,EAAE,CAAC,CAAC,kBAAkB,CAC1F,OAAO,CACR,CAAC;QAEJ,KAAK,sBAAc,CAAC,aAAa,CAAC,CAAC,CAAC;YAClC,MAAM,WAAW,GAAG,MAAM,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAA6B,CAAC,CAAC,CAAC,SAAS,CAAC;YACzF,OAAO,IAAA,4BAAY,EAAC;gBAClB,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,IAAA,yCAAoB,GAAE;gBACjD,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,IAAA,0CAAqB,GAAE;gBACpD,iBAAiB,EAAE,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS;aAC7D,CAAC,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;QACjC,CAAC;QAED,KAAK,sBAAc,CAAC,GAAG;YACrB,OAAO,IAAA,eAAS,EAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;QAEpE,KAAK,sBAAc,CAAC,SAAS;YAC3B,OAAO,IAAA,2BAAe,EAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;QAE1E,KAAK,sBAAc,CAAC,iBAAiB;YACnC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,IAAI,CAAC;YACd,CAAC;YACD,OAAO,IAAA,0CAAsB,EAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,kBAAkB,CACtF,OAAO,CACR,CAAC;QAEJ,KAAK,sBAAc,CAAC,oBAAoB;YAEtC,OAAO,IAAI,CAAC;IAChB,CAAC;AACH,CAAC"}

package/dist/secrets/secret-storage-format.d.ts

@@ -0,0 +1,5 @@
+export type StoredSecretClassification = 'encrypted' | 'plaintext' | 'ambiguous';
+export declare function parseKeyHex(keyHex: string): Buffer;
+export declare function decryptEnvelope(value: string, key: Buffer): string;
+export declare function encryptEnvelope(plaintext: string, key: Buffer): string;
+export declare function classifyStoredSecret(stored: string, key: Buffer): StoredSecretClassification;

package/dist/secrets/secret-storage-format.js

@@ -0,0 +1,101 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.parseKeyHex = parseKeyHex;
+exports.decryptEnvelope = decryptEnvelope;
+exports.encryptEnvelope = encryptEnvelope;
+exports.classifyStoredSecret = classifyStoredSecret;
+const crypto = __importStar(require("crypto"));
+const ALGORITHM = 'aes-256-gcm';
+const IV_LENGTH = 12;
+const TAG_LENGTH = 16;
+const KEY_LENGTH = 32;
+function parseKeyHex(keyHex) {
+    if (!/^[0-9a-fA-F]{64}$/.test(keyHex)) {
+        throw new Error(`Encryption key must be ${KEY_LENGTH * 2} hex characters (${KEY_LENGTH} bytes).`);
+    }
+    return Buffer.from(keyHex, 'hex');
+}
+function isCanonicalBase64(value) {
+    return Buffer.from(value, 'base64').toString('base64') === value;
+}
+function hasEnvelopeShape(value) {
+    const parts = value.split(':');
+    if (parts.length !== 3)
+        return false;
+    const [iv, tag, ciphertext] = parts;
+    if (!isCanonicalBase64(iv) || !isCanonicalBase64(tag))
+        return false;
+    if (!isCanonicalBase64(ciphertext))
+        return false;
+    return (Buffer.from(iv, 'base64').length === IV_LENGTH &&
+        Buffer.from(tag, 'base64').length === TAG_LENGTH);
+}
+function decryptEnvelope(value, key) {
+    const [ivB64, tagB64, ciphertextB64] = value.split(':');
+    const decipher = crypto.createDecipheriv(ALGORITHM, key, Buffer.from(ivB64, 'base64'), { authTagLength: TAG_LENGTH });
+    decipher.setAuthTag(Buffer.from(tagB64, 'base64'));
+    return Buffer.concat([
+        decipher.update(Buffer.from(ciphertextB64, 'base64')),
+        decipher.final(),
+    ]).toString('utf8');
+}
+function encryptEnvelope(plaintext, key) {
+    const iv = crypto.randomBytes(IV_LENGTH);
+    const cipher = crypto.createCipheriv(ALGORITHM, key, iv, {
+        authTagLength: TAG_LENGTH,
+    });
+    const ciphertext = Buffer.concat([
+        cipher.update(plaintext, 'utf8'),
+        cipher.final(),
+    ]);
+    return [
+        iv.toString('base64'),
+        cipher.getAuthTag().toString('base64'),
+        ciphertext.toString('base64'),
+    ].join(':');
+}
+function classifyStoredSecret(stored, key) {
+    if (!hasEnvelopeShape(stored))
+        return 'plaintext';
+    try {
+        decryptEnvelope(stored, key);
+        return 'encrypted';
+    }
+    catch {
+        return 'ambiguous';
+    }
+}
+//# sourceMappingURL=secret-storage-format.js.map

package/dist/secrets/secret-storage-format.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-storage-format.js","sourceRoot":"","sources":["../../src/secrets/secret-storage-format.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAwBA,kCAOC;AAkBD,0CAaC;AAED,0CAcC;AAED,oDAWC;AA3FD,+CAAiC;AAEjC,MAAM,SAAS,GAAG,aAAa,CAAC;AAChC,MAAM,SAAS,GAAG,EAAE,CAAC;AACrB,MAAM,UAAU,GAAG,EAAE,CAAC;AACtB,MAAM,UAAU,GAAG,EAAE,CAAC;AAmBtB,SAAgB,WAAW,CAAC,MAAc;IACxC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CACb,0BAA0B,UAAU,GAAG,CAAC,oBAAoB,UAAU,UAAU,CACjF,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAa;IACtC,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,KAAK,CAAC;AACnE,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAa;IACrC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACrC,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,UAAU,CAAC,GAAG,KAAK,CAAC;IACpC,IAAI,CAAC,iBAAiB,CAAC,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACpE,IAAI,CAAC,iBAAiB,CAAC,UAAU,CAAC;QAAE,OAAO,KAAK,CAAC;IACjD,OAAO,CACL,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC,MAAM,KAAK,SAAS;QAC9C,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,MAAM,KAAK,UAAU,CACjD,CAAC;AACJ,CAAC;AAED,SAAgB,eAAe,CAAC,KAAa,EAAE,GAAW;IACxD,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,aAAa,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACxD,MAAM,QAAQ,GAAG,MAAM,CAAC,gBAAgB,CACtC,SAAS,EACT,GAAG,EACH,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,EAC5B,EAAE,aAAa,EAAE,UAAU,EAAE,CAC9B,CAAC;IACF,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;IACnD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;QACrD,QAAQ,CAAC,KAAK,EAAE;KACjB,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AACtB,CAAC;AAED,SAAgB,eAAe,CAAC,SAAiB,EAAE,GAAW;IAC5D,MAAM,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;IACzC,MAAM,MAAM,GAAG,MAAM,CAAC,cAAc,CAAC,SAAS,EAAE,GAAG,EAAE,EAAE,EAAE;QACvD,aAAa,EAAE,UAAU;KAC1B,CAAC,CAAC;IACH,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC;QAC/B,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC;QAChC,MAAM,CAAC,KAAK,EAAE;KACf,CAAC,CAAC;IACH,OAAO;QACL,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC;QACrB,MAAM,CAAC,UAAU,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC;QACtC,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC;KAC9B,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACd,CAAC;AAED,SAAgB,oBAAoB,CAClC,MAAc,EACd,GAAW;IAEX,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC;QAAE,OAAO,WAAW,CAAC;IAClD,IAAI,CAAC;QACH,eAAe,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAC7B,OAAO,WAAW,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,WAAW,CAAC;IACrB,CAAC;AACH,CAAC"}

package/dist/secrets/secret-storage-format.spec.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/secrets/secret-storage-format.spec.js

@@ -0,0 +1,32 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const secret_storage_format_1 = require("./secret-storage-format");
+describe('secret-storage-format', () => {
+    const key = (0, secret_storage_format_1.parseKeyHex)('11'.repeat(32));
+    const otherKey = (0, secret_storage_format_1.parseKeyHex)('22'.repeat(32));
+    it('round-trips with the envelope format', () => {
+        const encrypted = (0, secret_storage_format_1.encryptEnvelope)('sk-test-value', key);
+        expect(encrypted.split(':')).toHaveLength(3);
+        expect((0, secret_storage_format_1.decryptEnvelope)(encrypted, key)).toBe('sk-test-value');
+    });
+    it('classifies a freshly encrypted value as encrypted', () => {
+        expect((0, secret_storage_format_1.classifyStoredSecret)((0, secret_storage_format_1.encryptEnvelope)('x', key), key)).toBe('encrypted');
+    });
+    it('classifies ordinary API keys as plaintext', () => {
+        expect((0, secret_storage_format_1.classifyStoredSecret)('sk-proj-abc123', key)).toBe('plaintext');
+        expect((0, secret_storage_format_1.classifyStoredSecret)('a:b:c', key)).toBe('plaintext');
+    });
+    it('flags envelope-shaped values that do not authenticate as ambiguous', () => {
+        const encryptedWithOtherKey = (0, secret_storage_format_1.encryptEnvelope)('x', otherKey);
+        expect((0, secret_storage_format_1.classifyStoredSecret)(encryptedWithOtherKey, key)).toBe('ambiguous');
+        const iv = Buffer.alloc(12, 1).toString('base64');
+        const tag = Buffer.alloc(16, 2).toString('base64');
+        const ct = Buffer.from('not-real').toString('base64');
+        expect((0, secret_storage_format_1.classifyStoredSecret)(`${iv}:${tag}:${ct}`, key)).toBe('ambiguous');
+    });
+    it('rejects keys that are not 32 bytes of hex', () => {
+        expect(() => (0, secret_storage_format_1.parseKeyHex)('abc')).toThrow();
+        expect(() => (0, secret_storage_format_1.parseKeyHex)('zz'.repeat(32))).toThrow();
+    });
+});
+//# sourceMappingURL=secret-storage-format.spec.js.map

package/dist/secrets/secret-storage-format.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-storage-format.spec.js","sourceRoot":"","sources":["../../src/secrets/secret-storage-format.spec.ts"],"names":[],"mappings":";;AAAA,mEAKiC;AAEjC,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;IACrC,MAAM,GAAG,GAAG,IAAA,mCAAW,EAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IACzC,MAAM,QAAQ,GAAG,IAAA,mCAAW,EAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAE9C,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,MAAM,SAAS,GAAG,IAAA,uCAAe,EAAC,eAAe,EAAE,GAAG,CAAC,CAAC;QACxD,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC7C,MAAM,CAAC,IAAA,uCAAe,EAAC,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC3D,MAAM,CAAC,IAAA,4CAAoB,EAAC,IAAA,uCAAe,EAAC,GAAG,EAAE,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAC/D,WAAW,CACZ,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,CAAC,IAAA,4CAAoB,EAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACtE,MAAM,CAAC,IAAA,4CAAoB,EAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oEAAoE,EAAE,GAAG,EAAE;QAC5E,MAAM,qBAAqB,GAAG,IAAA,uCAAe,EAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAC7D,MAAM,CAAC,IAAA,4CAAoB,EAAC,qBAAqB,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAE3E,MAAM,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAClD,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACnD,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACtD,MAAM,CAAC,IAAA,4CAAoB,EAAC,GAAG,EAAE,IAAI,GAAG,IAAI,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,CAAC,GAAG,EAAE,CAAC,IAAA,mCAAW,EAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;QAC3C,MAAM,CAAC,GAAG,EAAE,CAAC,IAAA,mCAAW,EAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;IACvD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/secrets/secrets-encryption.service.d.ts

@@ -3,6 +3,7 @@ export declare class SecretsEncryptionService {
     private readonly key;
     private readonly allowPlaintextStorage;
     constructor();
+    isEncrypting(): boolean;
     private assertEnabled;
     encrypt(plaintext: string): string;
     decrypt(encryptedValue: string): string;

package/dist/secrets/secrets-encryption.service.js

@@ -88,6 +88,9 @@ let SecretsEncryptionService = SecretsEncryptionService_1 = class SecretsEncrypt
                 `If using encryption, set SECRETS_ENCRYPTION_KEY to a ${KEY_LENGTH * 2}-character hex string (${KEY_LENGTH} bytes).`);
         }
     }
+    isEncrypting() {
+        return this.key !== null;
+    }
     assertEnabled() {
         if (!this.key && !this.allowPlaintextStorage) {
             throw new secrets_errors_1.SecretsFeatureDisabledError();

package/dist/secrets/secrets-encryption.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"secrets-encryption.service.js","sourceRoot":"","sources":["../../src/secrets/secrets-encryption.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,2CAAoD;AACpD,+CAAiC;AACjC,qDAG8B;AAC9B,4DAAsE;AAEtE,MAAM,SAAS,GAAG,aAAa,CAAC;AAChC,MAAM,SAAS,GAAG,EAAE,CAAC;AACrB,MAAM,UAAU,GAAG,EAAE,CAAC;AACtB,MAAM,UAAU,GAAG,EAAE,CAAC;AAmBf,IAAM,wBAAwB,gCAA9B,MAAM,wBAAwB;IAClB,MAAM,GAAG,IAAI,eAAM,CAAC,0BAAwB,CAAC,IAAI,CAAC,CAAC;IACnD,GAAG,CAAgB;IACnB,qBAAqB,CAAU;IAEhD;QACE,IAAI,CAAC,IAAA,6BAAgB,GAAE,EAAE,CAAC;YAGxB,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,sEAAsE;gBACpE,iEAAiE,CACpE,CAAC;YACF,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC;YAChB,IAAI,CAAC,qBAAqB,GAAG,KAAK,CAAC;YACnC,OAAO;QACT,CAAC;QAED,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC;QAClD,MAAM,gBAAgB,GAAG,IAAA,gDAAmC,GAAE,CAAC;QAE/D,IAAI,MAAM,EAAE,CAAC;YAEX,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YAC7C,IAAI,SAAS,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;gBACpC,MAAM,IAAI,KAAK,CACb,oCAAoC,UAAU,GAAG,CAAC,0BAA0B,UAAU,gBAAgB,SAAS,CAAC,MAAM,SAAS,CAChI,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,GAAG,GAAG,SAAS,CAAC;YACrB,IAAI,CAAC,qBAAqB,GAAG,KAAK,CAAC;YAGnC,IAAI,gBAAgB,EAAE,CAAC;gBACrB,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,4EAA4E;oBAC1E,yDAAyD,CAC5D,CAAC;YACJ,CAAC;QACH,CAAC;aAAM,IAAI,gBAAgB,EAAE,CAAC;YAE5B,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,kIAAkI,CACnI,CAAC;YACF,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC;YAChB,IAAI,CAAC,qBAAqB,GAAG,IAAI,CAAC;QACpC,CAAC;aAAM,CAAC;YAEN,MAAM,IAAI,KAAK,CACb,wGAAwG;gBACtG,wDAAwD,UAAU,GAAG,CAAC,0BAA0B,UAAU,UAAU,CACvH,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,aAAa;QACnB,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,qBAAqB,EAAE,CAAC;YAC7C,MAAM,IAAI,4CAA2B,EAAE,CAAC;QAC1C,CAAC;IACH,CAAC;IAOD,OAAO,CAAC,SAAiB;QACvB,IAAI,CAAC,aAAa,EAAE,CAAC;QACrB,IAAI,IAAI,CAAC,qBAAqB,EAAE,CAAC;YAC/B,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QACzC,MAAM,MAAM,GAAG,MAAM,CAAC,cAAc,CAAC,SAAS,EAAE,IAAI,CAAC,GAAI,EAAE,EAAE,EAAE;YAC7D,aAAa,EAAE,UAAU;SAC1B,CAAC,CAAC;QAEH,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC;YAC/B,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC;YAChC,MAAM,CAAC,KAAK,EAAE;SACf,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QAGpC,OAAO;YACL,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC;YACrB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAC1B,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC;SAC9B,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACd,CAAC;IAOD,OAAO,CAAC,cAAsB;QAC5B,IAAI,CAAC,aAAa,EAAE,CAAC;QACrB,IAAI,IAAI,CAAC,qBAAqB,EAAE,CAAC;YAC/B,OAAO,cAAc,CAAC;QACxB,CAAC;QACD,MAAM,KAAK,GAAG,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QACpD,CAAC;QAED,MAAM,CAAC,KAAK,EAAE,UAAU,EAAE,aAAa,CAAC,GAAG,KAAK,CAAC;QACjD,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QACxC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QAClD,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;QAExD,MAAM,QAAQ,GAAG,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,IAAI,CAAC,GAAI,EAAE,EAAE,EAAE;YACjE,aAAa,EAAE,UAAU;SAC1B,CAAC,CAAC;QACH,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAE7B,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC;YAC9B,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC;YAC3B,QAAQ,CAAC,KAAK,EAAE;SACjB,CAAC,CAAC;QAEH,OAAO,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACpC,CAAC;CACF,CAAA;AA1HY,4DAAwB;mCAAxB,wBAAwB;IADpC,IAAA,mBAAU,GAAE;;GACA,wBAAwB,CA0HpC"}
+{"version":3,"file":"secrets-encryption.service.js","sourceRoot":"","sources":["../../src/secrets/secrets-encryption.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,2CAAoD;AACpD,+CAAiC;AACjC,qDAG8B;AAC9B,4DAAsE;AAEtE,MAAM,SAAS,GAAG,aAAa,CAAC;AAChC,MAAM,SAAS,GAAG,EAAE,CAAC;AACrB,MAAM,UAAU,GAAG,EAAE,CAAC;AACtB,MAAM,UAAU,GAAG,EAAE,CAAC;AAmBf,IAAM,wBAAwB,gCAA9B,MAAM,wBAAwB;IAClB,MAAM,GAAG,IAAI,eAAM,CAAC,0BAAwB,CAAC,IAAI,CAAC,CAAC;IACnD,GAAG,CAAgB;IACnB,qBAAqB,CAAU;IAEhD;QACE,IAAI,CAAC,IAAA,6BAAgB,GAAE,EAAE,CAAC;YAGxB,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,sEAAsE;gBACpE,iEAAiE,CACpE,CAAC;YACF,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC;YAChB,IAAI,CAAC,qBAAqB,GAAG,KAAK,CAAC;YACnC,OAAO;QACT,CAAC;QAED,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC;QAClD,MAAM,gBAAgB,GAAG,IAAA,gDAAmC,GAAE,CAAC;QAE/D,IAAI,MAAM,EAAE,CAAC;YAEX,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YAC7C,IAAI,SAAS,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;gBACpC,MAAM,IAAI,KAAK,CACb,oCAAoC,UAAU,GAAG,CAAC,0BAA0B,UAAU,gBAAgB,SAAS,CAAC,MAAM,SAAS,CAChI,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,GAAG,GAAG,SAAS,CAAC;YACrB,IAAI,CAAC,qBAAqB,GAAG,KAAK,CAAC;YAGnC,IAAI,gBAAgB,EAAE,CAAC;gBACrB,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,4EAA4E;oBAC1E,yDAAyD,CAC5D,CAAC;YACJ,CAAC;QACH,CAAC;aAAM,IAAI,gBAAgB,EAAE,CAAC;YAE5B,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,kIAAkI,CACnI,CAAC;YACF,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC;YAChB,IAAI,CAAC,qBAAqB,GAAG,IAAI,CAAC;QACpC,CAAC;aAAM,CAAC;YAEN,MAAM,IAAI,KAAK,CACb,wGAAwG;gBACtG,wDAAwD,UAAU,GAAG,CAAC,0BAA0B,UAAU,UAAU,CACvH,CAAC;QACJ,CAAC;IACH,CAAC;IAGD,YAAY;QACV,OAAO,IAAI,CAAC,GAAG,KAAK,IAAI,CAAC;IAC3B,CAAC;IAEO,aAAa;QACnB,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,qBAAqB,EAAE,CAAC;YAC7C,MAAM,IAAI,4CAA2B,EAAE,CAAC;QAC1C,CAAC;IACH,CAAC;IAOD,OAAO,CAAC,SAAiB;QACvB,IAAI,CAAC,aAAa,EAAE,CAAC;QACrB,IAAI,IAAI,CAAC,qBAAqB,EAAE,CAAC;YAC/B,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QACzC,MAAM,MAAM,GAAG,MAAM,CAAC,cAAc,CAAC,SAAS,EAAE,IAAI,CAAC,GAAI,EAAE,EAAE,EAAE;YAC7D,aAAa,EAAE,UAAU;SAC1B,CAAC,CAAC;QAEH,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC;YAC/B,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC;YAChC,MAAM,CAAC,KAAK,EAAE;SACf,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QAGpC,OAAO;YACL,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC;YACrB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAC1B,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC;SAC9B,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACd,CAAC;IAOD,OAAO,CAAC,cAAsB;QAC5B,IAAI,CAAC,aAAa,EAAE,CAAC;QACrB,IAAI,IAAI,CAAC,qBAAqB,EAAE,CAAC;YAC/B,OAAO,cAAc,CAAC;QACxB,CAAC;QACD,MAAM,KAAK,GAAG,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QACpD,CAAC;QAED,MAAM,CAAC,KAAK,EAAE,UAAU,EAAE,aAAa,CAAC,GAAG,KAAK,CAAC;QACjD,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QACxC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QAClD,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;QAExD,MAAM,QAAQ,GAAG,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,IAAI,CAAC,GAAI,EAAE,EAAE,EAAE;YACjE,aAAa,EAAE,UAAU;SAC1B,CAAC,CAAC;QACH,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAE7B,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC;YAC9B,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC;YAC3B,QAAQ,CAAC,KAAK,EAAE;SACjB,CAAC,CAAC;QAEH,OAAO,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACpC,CAAC;CACF,CAAA;AA/HY,4DAAwB;mCAAxB,wBAAwB;IADpC,IAAA,mBAAU,GAAE;;GACA,wBAAwB,CA+HpC"}

package/dist/secrets/secrets.module.js

@@ -25,7 +25,7 @@ exports.SecretsModule = SecretsModule = __decorate([
         ],
         controllers: [secrets_controller_1.SecretsController],
         providers: [secrets_service_1.SecretsService, secrets_encryption_service_1.SecretsEncryptionService],
-        exports: [secrets_service_1.SecretsService],
+        exports: [secrets_service_1.SecretsService, secrets_encryption_service_1.SecretsEncryptionService],
     })
 ], SecretsModule);
 //# sourceMappingURL=secrets.module.js.map

package/dist/secrets/secrets.module.js.map

@@ -1 +1 @@
-{"version":3,"file":"secrets.module.js","sourceRoot":"","sources":["../../src/secrets/secrets.module.ts"],"names":[],"mappings":";;;;;;;;;AAAA,2CAAwC;AACxC,6CAAgD;AAChD,mDAA+C;AAC/C,uDAAmD;AACnD,6DAAyD;AACzD,6EAAwE;AACxE,0EAAqE;AAW9D,IAAM,aAAa,GAAnB,MAAM,aAAa;CAAG,CAAA;AAAhB,sCAAa;wBAAb,aAAa;IATzB,IAAA,eAAM,EAAC;QACN,OAAO,EAAE;YACP,uBAAa,CAAC,UAAU,CAAC,CAAC,4BAAY,CAAC,CAAC;YACxC,qCAAgB;SACjB;QACD,WAAW,EAAE,CAAC,sCAAiB,CAAC;QAChC,SAAS,EAAE,CAAC,gCAAc,EAAE,qDAAwB,CAAC;QACrD,OAAO,EAAE,CAAC,gCAAc,CAAC;KAC1B,CAAC;GACW,aAAa,CAAG"}
+{"version":3,"file":"secrets.module.js","sourceRoot":"","sources":["../../src/secrets/secrets.module.ts"],"names":[],"mappings":";;;;;;;;;AAAA,2CAAwC;AACxC,6CAAgD;AAChD,mDAA+C;AAC/C,uDAAmD;AACnD,6DAAyD;AACzD,6EAAwE;AACxE,0EAAqE;AAW9D,IAAM,aAAa,GAAnB,MAAM,aAAa;CAAG,CAAA;AAAhB,sCAAa;wBAAb,aAAa;IATzB,IAAA,eAAM,EAAC;QACN,OAAO,EAAE;YACP,uBAAa,CAAC,UAAU,CAAC,CAAC,4BAAY,CAAC,CAAC;YACxC,qCAAgB;SACjB;QACD,WAAW,EAAE,CAAC,sCAAiB,CAAC;QAChC,SAAS,EAAE,CAAC,gCAAc,EAAE,qDAAwB,CAAC;QACrD,OAAO,EAAE,CAAC,gCAAc,EAAE,qDAAwB,CAAC;KACpD,CAAC;GACW,aAAa,CAAG"}

package/dist/threads/agent/chat-model.factory.d.ts

@@ -1,5 +1,7 @@
 import { LanguageModel } from 'ai';
 import { AiProvidersService } from "../../ai-providers/ai-providers.service";
+import { OnBehalfOf } from "../../ai-providers/dto/service/ai-providers.service.types";
+import { ChatgptSubscriptionService } from "../../ai-providers/chatgpt-subscription/chatgpt-subscription.service";
 import { AiModelSelectionsService } from "../../ai-providers/ai-model-selections.service";
 import { AiModelJob } from "../../ai-providers/enums";
 type ProviderOptions = Record<string, Record<string, string | number | boolean | null>>;
@@ -8,16 +10,19 @@ export type ResolvedChatModel = {
     providerType: string;
     modelId: string;
     providerOptions?: ProviderOptions;
+    requiresStreaming?: boolean;
 };
 export type ResolveChatModelInput = {
     job: AiModelJob;
     aiProviderId?: string | null;
     modelId?: string | null;
+    onBehalfOf?: OnBehalfOf;
 };
 export declare class ChatModelFactory {
     private readonly aiProvidersService;
     private readonly aiModelSelectionsService;
-    constructor(aiProvidersService: AiProvidersService, aiModelSelectionsService: AiModelSelectionsService);
+    private readonly chatgptSubscription;
+    constructor(aiProvidersService: AiProvidersService, aiModelSelectionsService: AiModelSelectionsService, chatgptSubscription: ChatgptSubscriptionService);
     resolve(input: ResolveChatModelInput): Promise<ResolvedChatModel>;
     private build;
     private buildVertex;

package/dist/threads/agent/chat-model.factory.js

@@ -14,10 +14,12 @@ const common_1 = require("@nestjs/common");
 const anthropic_1 = require("@ai-sdk/anthropic");
 const google_1 = require("@ai-sdk/google");
 const google_vertex_1 = require("@ai-sdk/google-vertex");
+const anthropic_2 = require("@ai-sdk/google-vertex/anthropic");
 const openai_1 = require("@ai-sdk/openai");
 const openai_compatible_1 = require("@ai-sdk/openai-compatible");
 const xai_1 = require("@ai-sdk/xai");
 const ai_providers_service_1 = require("../../ai-providers/ai-providers.service");
+const chatgpt_subscription_service_1 = require("../../ai-providers/chatgpt-subscription/chatgpt-subscription.service");
 const ai_model_selections_service_1 = require("../../ai-providers/ai-model-selections.service");
 const enums_1 = require("../../ai-providers/enums");
 const ai_providers_errors_1 = require("../../ai-providers/errors/ai-providers.errors");
@@ -25,19 +27,21 @@ const google_environment_1 = require("../../ai-providers/google-environment");
 let ChatModelFactory = class ChatModelFactory {
     aiProvidersService;
     aiModelSelectionsService;
-    constructor(aiProvidersService, aiModelSelectionsService) {
+    chatgptSubscription;
+    constructor(aiProvidersService, aiModelSelectionsService, chatgptSubscription) {
         this.aiProvidersService = aiProvidersService;
         this.aiModelSelectionsService = aiModelSelectionsService;
+        this.chatgptSubscription = chatgptSubscription;
     }
     async resolve(input) {
         if (input.aiProviderId && input.modelId) {
             const config = await this.aiProvidersService.getAiProviderConfigById(input.aiProviderId);
-            return this.build(config, input.modelId);
+            return this.build(config, input.modelId, input);
         }
         const selection = await this.aiModelSelectionsService.resolve(input.job);
-        return this.build(selection.provider, selection.modelId);
+        return this.build(selection.provider, selection.modelId, input);
     }
-    build(config, modelId) {
+    async build(config, modelId, input) {
         const apiKey = config.apiKey ?? undefined;
         const baseURL = config.baseUrl ?? undefined;
         switch (config.type) {
@@ -77,6 +81,22 @@ let ChatModelFactory = class ChatModelFactory {
                     providerType: config.type,
                     modelId,
                 };
+            case enums_1.AiProviderType.CHATGPT_SUBSCRIPTION:
+                if (!enums_1.USER_CONNECTED_PROVIDER_JOBS.includes(input.job) ||
+                    !input.onBehalfOf ||
+                    (input.job === enums_1.AiModelJob.USER_SMALL_TASKS && input.onBehalfOf.automated)) {
+                    throw new ai_providers_errors_1.AiProviderJobNotAllowedError(config.id, input.job);
+                }
+                return {
+                    model: await this.chatgptSubscription.modelForTurn({
+                        providerId: config.id,
+                        modelId,
+                        onBehalfOf: input.onBehalfOf,
+                    }),
+                    providerType: config.type,
+                    modelId,
+                    requiresStreaming: true,
+                };
         }
     }
     buildVertex(config, modelId) {
@@ -89,18 +109,22 @@ let ChatModelFactory = class ChatModelFactory {
                 throw new ai_providers_errors_1.AiProviderNotConfiguredError(config.id);
             }
         }
-        const vertex = (0, google_vertex_1.createVertex)({
+        const settings = {
             project: config.project ?? (0, google_environment_1.vertexProjectFromEnv)(),
             location: config.location ?? (0, google_environment_1.vertexLocationFromEnv)(),
             googleAuthOptions: credentials ? { credentials } : undefined,
-        });
-        return { model: vertex(modelId), providerType: enums_1.AiProviderType.GOOGLE_VERTEX, modelId };
+        };
+        const model = (0, google_environment_1.isVertexAnthropicModelId)(modelId)
+            ? (0, anthropic_2.createVertexAnthropic)(settings)(modelId)
+            : (0, google_vertex_1.createVertex)(settings)(modelId);
+        return { model, providerType: enums_1.AiProviderType.GOOGLE_VERTEX, modelId };
     }
 };
 exports.ChatModelFactory = ChatModelFactory;
 exports.ChatModelFactory = ChatModelFactory = __decorate([
     (0, common_1.Injectable)(),
     __metadata("design:paramtypes", [ai_providers_service_1.AiProvidersService,
-        ai_model_selections_service_1.AiModelSelectionsService])
+        ai_model_selections_service_1.AiModelSelectionsService,
+        chatgpt_subscription_service_1.ChatgptSubscriptionService])
 ], ChatModelFactory);
 //# sourceMappingURL=chat-model.factory.js.map

package/dist/threads/agent/chat-model.factory.js.map

@@ -1 +1 @@
-{"version":3,"file":"chat-model.factory.js","sourceRoot":"","sources":["../../../src/threads/agent/chat-model.factory.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAA4C;AAE5C,iDAAoD;AACpD,2CAA8C;AAC9C,yDAAqD;AACrD,2CAA8C;AAC9C,iEAAmE;AACnE,qCAAwC;AACxC,kFAA2E;AAE3E,gGAAwF;AACxF,oDAAoE;AACpE,uFAA2F;AAC3F,8EAI6C;AAsBtC,IAAM,gBAAgB,GAAtB,MAAM,gBAAgB;IAER;IACA;IAFnB,YACmB,kBAAsC,EACtC,wBAAkD;QADlD,uBAAkB,GAAlB,kBAAkB,CAAoB;QACtC,6BAAwB,GAAxB,wBAAwB,CAA0B;IAClE,CAAC;IAEJ,KAAK,CAAC,OAAO,CAAC,KAA4B;QACxC,IAAI,KAAK,CAAC,YAAY,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YACxC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,uBAAuB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;YACzF,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QAC3C,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACzE,OAAO,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ,EAAE,SAAS,CAAC,OAAO,CAAC,CAAC;IAC3D,CAAC;IAEO,KAAK,CAAC,MAA8B,EAAE,OAAe;QAC3D,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,SAAS,CAAC;QAC1C,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,SAAS,CAAC;QAE5C,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;YACpB,KAAK,sBAAc,CAAC,MAAM;gBACxB,OAAO;oBACL,KAAK,EAAE,IAAA,qBAAY,EAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC;oBACjD,YAAY,EAAE,MAAM,CAAC,IAAI;oBACzB,OAAO;oBAEP,eAAe,EAAE,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;iBAC9C,CAAC;YAEJ,KAAK,sBAAc,CAAC,SAAS;gBAC3B,OAAO;oBACL,KAAK,EAAE,IAAA,2BAAe,EAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC;oBACpD,YAAY,EAAE,MAAM,CAAC,IAAI;oBACzB,OAAO;iBACR,CAAC;YAEJ,KAAK,sBAAc,CAAC,MAAM;gBACxB,OAAO;oBACL,KAAK,EAAE,IAAA,qBAAY,EAAC,EAAE,MAAM,EAAE,MAAM,IAAI,IAAA,wCAAmB,GAAE,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC;oBAClF,YAAY,EAAE,MAAM,CAAC,IAAI;oBACzB,OAAO;iBACR,CAAC;YAEJ,KAAK,sBAAc,CAAC,aAAa;gBAC/B,OAAO,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YAE3C,KAAK,sBAAc,CAAC,GAAG;gBACrB,OAAO;oBACL,KAAK,EAAE,IAAA,eAAS,EAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC;oBAC9C,YAAY,EAAE,MAAM,CAAC,IAAI;oBACzB,OAAO;iBACR,CAAC;YAEJ,KAAK,sBAAc,CAAC,iBAAiB;gBACnC,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,MAAM,IAAI,kDAA4B,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACpD,CAAC;gBACD,OAAO;oBACL,KAAK,EAAE,IAAA,0CAAsB,EAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC;oBAC9E,YAAY,EAAE,MAAM,CAAC,IAAI;oBACzB,OAAO;iBACR,CAAC;QACN,CAAC;IACH,CAAC;IAMO,WAAW,CAAC,MAA8B,EAAE,OAAe;QACjE,IAAI,WAAgD,CAAC;QACrD,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAClB,IAAI,CAAC;gBACH,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC1C,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,IAAI,kDAA4B,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACpD,CAAC;QACH,CAAC;QAED,MAAM,MAAM,GAAG,IAAA,4BAAY,EAAC;YAC1B,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,IAAA,yCAAoB,GAAE;YACjD,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,IAAA,0CAAqB,GAAE;YACpD,iBAAiB,EAAE,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS;SAC7D,CAAC,CAAC;QAEH,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,YAAY,EAAE,sBAAc,CAAC,aAAa,EAAE,OAAO,EAAE,CAAC;IACzF,CAAC;CACF,CAAA;AAxFY,4CAAgB;2BAAhB,gBAAgB;IAD5B,IAAA,mBAAU,GAAE;qCAG4B,yCAAkB;QACZ,sDAAwB;GAH1D,gBAAgB,CAwF5B"}
+{"version":3,"file":"chat-model.factory.js","sourceRoot":"","sources":["../../../src/threads/agent/chat-model.factory.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAA4C;AAE5C,iDAAoD;AACpD,2CAA8C;AAC9C,yDAAqD;AACrD,+DAAwE;AACxE,2CAA8C;AAC9C,iEAAmE;AACnE,qCAAwC;AACxC,kFAA2E;AAK3E,uHAAgH;AAChH,gGAAwF;AACxF,oDAIgC;AAChC,uFAGqD;AACrD,8EAK6C;AAoCtC,IAAM,gBAAgB,GAAtB,MAAM,gBAAgB;IAER;IACA;IACA;IAHnB,YACmB,kBAAsC,EACtC,wBAAkD,EAClD,mBAA+C;QAF/C,uBAAkB,GAAlB,kBAAkB,CAAoB;QACtC,6BAAwB,GAAxB,wBAAwB,CAA0B;QAClD,wBAAmB,GAAnB,mBAAmB,CAA4B;IAC/D,CAAC;IAEJ,KAAK,CAAC,OAAO,CAAC,KAA4B;QACxC,IAAI,KAAK,CAAC,YAAY,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YACxC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,uBAAuB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;YACzF,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAClD,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACzE,OAAO,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ,EAAE,SAAS,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAClE,CAAC;IAEO,KAAK,CAAC,KAAK,CACjB,MAA8B,EAC9B,OAAe,EACf,KAA4B;QAE5B,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,SAAS,CAAC;QAC1C,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,SAAS,CAAC;QAE5C,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;YACpB,KAAK,sBAAc,CAAC,MAAM;gBACxB,OAAO;oBACL,KAAK,EAAE,IAAA,qBAAY,EAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC;oBACjD,YAAY,EAAE,MAAM,CAAC,IAAI;oBACzB,OAAO;oBAEP,eAAe,EAAE,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;iBAC9C,CAAC;YAEJ,KAAK,sBAAc,CAAC,SAAS;gBAC3B,OAAO;oBACL,KAAK,EAAE,IAAA,2BAAe,EAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC;oBACpD,YAAY,EAAE,MAAM,CAAC,IAAI;oBACzB,OAAO;iBACR,CAAC;YAEJ,KAAK,sBAAc,CAAC,MAAM;gBACxB,OAAO;oBACL,KAAK,EAAE,IAAA,qBAAY,EAAC,EAAE,MAAM,EAAE,MAAM,IAAI,IAAA,wCAAmB,GAAE,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC;oBAClF,YAAY,EAAE,MAAM,CAAC,IAAI;oBACzB,OAAO;iBACR,CAAC;YAEJ,KAAK,sBAAc,CAAC,aAAa;gBAC/B,OAAO,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YAE3C,KAAK,sBAAc,CAAC,GAAG;gBACrB,OAAO;oBACL,KAAK,EAAE,IAAA,eAAS,EAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC;oBAC9C,YAAY,EAAE,MAAM,CAAC,IAAI;oBACzB,OAAO;iBACR,CAAC;YAEJ,KAAK,sBAAc,CAAC,iBAAiB;gBACnC,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,MAAM,IAAI,kDAA4B,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACpD,CAAC;gBACD,OAAO;oBACL,KAAK,EAAE,IAAA,0CAAsB,EAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC;oBAC9E,YAAY,EAAE,MAAM,CAAC,IAAI;oBACzB,OAAO;iBACR,CAAC;YAEJ,KAAK,sBAAc,CAAC,oBAAoB;gBAItC,IACE,CAAC,oCAA4B,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC;oBACjD,CAAC,KAAK,CAAC,UAAU;oBACjB,CAAC,KAAK,CAAC,GAAG,KAAK,kBAAU,CAAC,gBAAgB,IAAI,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,EACzE,CAAC;oBACD,MAAM,IAAI,kDAA4B,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;gBAC/D,CAAC;gBACD,OAAO;oBACL,KAAK,EAAE,MAAM,IAAI,CAAC,mBAAmB,CAAC,YAAY,CAAC;wBACjD,UAAU,EAAE,MAAM,CAAC,EAAE;wBACrB,OAAO;wBACP,UAAU,EAAE,KAAK,CAAC,UAAU;qBAC7B,CAAC;oBACF,YAAY,EAAE,MAAM,CAAC,IAAI;oBACzB,OAAO;oBACP,iBAAiB,EAAE,IAAI;iBACxB,CAAC;QACN,CAAC;IACH,CAAC;IAUO,WAAW,CAAC,MAA8B,EAAE,OAAe;QACjE,IAAI,WAAgD,CAAC;QACrD,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAClB,IAAI,CAAC;gBACH,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC1C,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,IAAI,kDAA4B,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACpD,CAAC;QACH,CAAC;QAED,MAAM,QAAQ,GAAG;YACf,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,IAAA,yCAAoB,GAAE;YACjD,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,IAAA,0CAAqB,GAAE;YACpD,iBAAiB,EAAE,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS;SAC7D,CAAC;QAEF,MAAM,KAAK,GAAG,IAAA,6CAAwB,EAAC,OAAO,CAAC;YAC7C,CAAC,CAAC,IAAA,iCAAqB,EAAC,QAAQ,CAAC,CAAC,OAAO,CAAC;YAC1C,CAAC,CAAC,IAAA,4BAAY,EAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,CAAC;QAEpC,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,sBAAc,CAAC,aAAa,EAAE,OAAO,EAAE,CAAC;IACxE,CAAC;CACF,CAAA;AA3HY,4CAAgB;2BAAhB,gBAAgB;IAD5B,IAAA,mBAAU,GAAE;qCAG4B,yCAAkB;QACZ,sDAAwB;QAC7B,yDAA0B;GAJvD,gBAAgB,CA2H5B"}

package/dist/threads/agent/chat-model.factory.spec.js

@@ -11,6 +11,13 @@ jest.mock('src/ai-providers/ai-model-selections.service', () => ({
 jest.mock('src/ai-providers/errors/ai-providers.errors', () => ({
     AiProviderNotConfiguredError: class extends Error {
     },
+    AiProviderJobNotAllowedError: class extends Error {
+        code = 'AI_PROVIDER_JOB_NOT_ALLOWED';
+    },
+}));
+jest.mock('src/ai-providers/chatgpt-subscription/chatgpt-subscription.service', () => ({
+    ChatgptSubscriptionService: class {
+    },
 }));
 const GOOGLE_ENV_KEYS = [
     'GOOGLE_CLOUD_PROJECT',
@@ -35,8 +42,9 @@ describe('ChatModelFactory', () => {
             modelId: selectedModelId,
         }));
         const getAiProviderConfigById = jest.fn(async () => providerConfig(type));
-        const factory = new chat_model_factory_1.ChatModelFactory({ getAiProviderConfigById }, { resolve: resolveSelection });
-        return { factory, resolveSelection, getAiProviderConfigById };
+        const modelForTurn = jest.fn(async () => ({ modelId: 'plan-model' }));
+        const factory = new chat_model_factory_1.ChatModelFactory({ getAiProviderConfigById }, { resolve: resolveSelection }, { modelForTurn });
+        return { factory, resolveSelection, getAiProviderConfigById, modelForTurn };
     };
     beforeEach(() => {
         for (const key of GOOGLE_ENV_KEYS) {
@@ -56,6 +64,28 @@ describe('ChatModelFactory', () => {
             modelId: 'gemini-3.6-flash',
         });
     });
+    it('runs a Gemini model on Vertex AI through the Gemini API', async () => {
+        process.env.GOOGLE_CLOUD_PROJECT = 'my-project';
+        process.env.GOOGLE_CLOUD_LOCATION = 'global';
+        const { factory } = factoryFor(enums_1.AiProviderType.GOOGLE_VERTEX, 'gemini-3.6-flash');
+        const resolved = await factory.resolve({
+            job: enums_1.AiModelJob.CONVERSATION,
+            aiProviderId: 'provider-1',
+            modelId: 'gemini-3.6-flash',
+        });
+        const model = resolved.model;
+        expect(model.provider).toMatch(/vertex/i);
+        expect(model.provider).not.toMatch(/anthropic/i);
+    });
+    it.each(['claude-sonnet-4-5', 'claude-opus-4-1@20250805'])('runs %s on Vertex AI through the Anthropic API', async (modelId) => {
+        process.env.GOOGLE_CLOUD_PROJECT = 'my-project';
+        process.env.GOOGLE_CLOUD_LOCATION = 'us-east5';
+        const { factory } = factoryFor(enums_1.AiProviderType.GOOGLE_VERTEX, modelId);
+        const resolved = await factory.resolve({ job: enums_1.AiModelJob.CONVERSATION });
+        expect(resolved).toMatchObject({ providerType: enums_1.AiProviderType.GOOGLE_VERTEX, modelId });
+        expect(resolved.model.provider).toBe('googleVertex.anthropic.messages');
+        expect(resolved.model.modelId).toBe(modelId);
+    });
     it('builds an xAI model for a Grok provider', async () => {
         const { factory } = factoryFor(enums_1.AiProviderType.XAI, 'grok-4');
         const resolved = await factory.resolve({ job: enums_1.AiModelJob.CONVERSATION });
@@ -64,10 +94,17 @@ describe('ChatModelFactory', () => {
     });
     it("asks for the job's selection when the thread has no model of its own", async () => {
         const { factory, resolveSelection } = factoryFor(enums_1.AiProviderType.ANTHROPIC, 'claude-haiku-5-5');
-        const resolved = await factory.resolve({ job: enums_1.AiModelJob.QUICK_TASKS });
-        expect(resolveSelection).toHaveBeenCalledWith(enums_1.AiModelJob.QUICK_TASKS);
+        const resolved = await factory.resolve({ job: enums_1.AiModelJob.SYSTEM_SMALL_TASKS });
+        expect(resolveSelection).toHaveBeenCalledWith(enums_1.AiModelJob.SYSTEM_SMALL_TASKS);
         expect(resolved.modelId).toBe('claude-haiku-5-5');
     });
+    it.each([enums_1.AiModelJob.USER_SMALL_TASKS, enums_1.AiModelJob.SYSTEM_SMALL_TASKS])('runs %s on a provider with an API key, with or without a person', async (job) => {
+        const { factory } = factoryFor(enums_1.AiProviderType.ANTHROPIC, 'claude-haiku-5-5');
+        await expect(factory.resolve({ job })).resolves.toMatchObject({
+            providerType: enums_1.AiProviderType.ANTHROPIC,
+        });
+        await expect(factory.resolve({ job, onBehalfOf: { actorId: 'actor-1', automated: false } })).resolves.toMatchObject({ providerType: enums_1.AiProviderType.ANTHROPIC });
+    });
     it("uses the thread's own provider and model when both are set", async () => {
         const { factory, resolveSelection, getAiProviderConfigById } = factoryFor(enums_1.AiProviderType.ANTHROPIC, 'claude-haiku-5-5');
         const resolved = await factory.resolve({
@@ -79,5 +116,107 @@ describe('ChatModelFactory', () => {
         expect(resolveSelection).not.toHaveBeenCalled();
         expect(resolved.modelId).toBe('claude-opus-5-5');
     });
+    describe('a provider that runs on a person\u2019s own plan', () => {
+        const onBehalfOf = { actorId: 'actor-1', automated: false };
+        it('binds a thread turn to the person it is for and marks the model streaming-only', async () => {
+            const { factory, modelForTurn } = factoryFor(enums_1.AiProviderType.CHATGPT_SUBSCRIPTION, 'gpt-plan-large');
+            const resolved = await factory.resolve({ job: enums_1.AiModelJob.CONVERSATION, onBehalfOf });
+            expect(modelForTurn).toHaveBeenCalledWith({
+                providerId: 'provider-1',
+                modelId: 'gpt-plan-large',
+                onBehalfOf,
+            });
+            expect(resolved).toMatchObject({
+                providerType: enums_1.AiProviderType.CHATGPT_SUBSCRIPTION,
+                modelId: 'gpt-plan-large',
+                requiresStreaming: true,
+            });
+        });
+        it('honours a thread\u2019s own provider and model', async () => {
+            const { factory, modelForTurn, resolveSelection } = factoryFor(enums_1.AiProviderType.CHATGPT_SUBSCRIPTION, 'gpt-plan-large');
+            await factory.resolve({
+                job: enums_1.AiModelJob.CONVERSATION,
+                aiProviderId: 'provider-1',
+                modelId: 'gpt-plan-small',
+                onBehalfOf,
+            });
+            expect(resolveSelection).not.toHaveBeenCalled();
+            expect(modelForTurn).toHaveBeenCalledWith(expect.objectContaining({ modelId: 'gpt-plan-small', onBehalfOf }));
+        });
+        it('binds a middle manager run to the person it is for, as an unattended run', async () => {
+            const { factory, modelForTurn, resolveSelection } = factoryFor(enums_1.AiProviderType.CHATGPT_SUBSCRIPTION, 'gpt-plan-small');
+            const creator = { actorId: 'creator-1', automated: true };
+            const resolved = await factory.resolve({
+                job: enums_1.AiModelJob.MIDDLE_MANAGER,
+                onBehalfOf: creator,
+            });
+            expect(resolveSelection).toHaveBeenCalledWith(enums_1.AiModelJob.MIDDLE_MANAGER);
+            expect(modelForTurn).toHaveBeenCalledWith({
+                providerId: 'provider-1',
+                modelId: 'gpt-plan-small',
+                onBehalfOf: creator,
+            });
+            expect(resolved.requiresStreaming).toBe(true);
+        });
+        it('refuses a middle manager run that does not say who it is for', async () => {
+            const { factory, modelForTurn } = factoryFor(enums_1.AiProviderType.CHATGPT_SUBSCRIPTION, 'gpt-plan-small');
+            await expect(factory.resolve({ job: enums_1.AiModelJob.MIDDLE_MANAGER })).rejects.toMatchObject({
+                code: 'AI_PROVIDER_JOB_NOT_ALLOWED',
+            });
+            expect(modelForTurn).not.toHaveBeenCalled();
+        });
+        it('binds a user small task to the person who started it', async () => {
+            const { factory, modelForTurn, resolveSelection } = factoryFor(enums_1.AiProviderType.CHATGPT_SUBSCRIPTION, 'gpt-plan-small');
+            const resolved = await factory.resolve({
+                job: enums_1.AiModelJob.USER_SMALL_TASKS,
+                onBehalfOf,
+            });
+            expect(resolveSelection).toHaveBeenCalledWith(enums_1.AiModelJob.USER_SMALL_TASKS);
+            expect(modelForTurn).toHaveBeenCalledWith({
+                providerId: 'provider-1',
+                modelId: 'gpt-plan-small',
+                onBehalfOf,
+            });
+            expect(resolved.requiresStreaming).toBe(true);
+        });
+        it('refuses a user small task that does not say who started it', async () => {
+            const { factory, modelForTurn } = factoryFor(enums_1.AiProviderType.CHATGPT_SUBSCRIPTION, 'gpt-plan-small');
+            await expect(factory.resolve({ job: enums_1.AiModelJob.USER_SMALL_TASKS })).rejects.toMatchObject({
+                code: 'AI_PROVIDER_JOB_NOT_ALLOWED',
+            });
+            expect(modelForTurn).not.toHaveBeenCalled();
+        });
+        it('refuses an unattended user small task, even with consent recorded elsewhere', async () => {
+            const { factory, modelForTurn } = factoryFor(enums_1.AiProviderType.CHATGPT_SUBSCRIPTION, 'gpt-plan-small');
+            await expect(factory.resolve({
+                job: enums_1.AiModelJob.USER_SMALL_TASKS,
+                onBehalfOf: { actorId: 'creator-1', automated: true },
+            })).rejects.toMatchObject({ code: 'AI_PROVIDER_JOB_NOT_ALLOWED' });
+            expect(modelForTurn).not.toHaveBeenCalled();
+        });
+        it.each([
+            undefined,
+            { actorId: 'actor-1', automated: false },
+            { actorId: 'actor-1', automated: true },
+        ])('refuses a system small task whoever it names (%o)', async (forWhom) => {
+            const { factory, modelForTurn } = factoryFor(enums_1.AiProviderType.CHATGPT_SUBSCRIPTION, 'gpt-plan-small');
+            await expect(factory.resolve({ job: enums_1.AiModelJob.SYSTEM_SMALL_TASKS, onBehalfOf: forWhom })).rejects.toMatchObject({ code: 'AI_PROVIDER_JOB_NOT_ALLOWED' });
+            expect(modelForTurn).not.toHaveBeenCalled();
+        });
+        it('refuses the embeddings job even when told who it is for', async () => {
+            const { factory, modelForTurn } = factoryFor(enums_1.AiProviderType.CHATGPT_SUBSCRIPTION, 'gpt-plan-large');
+            await expect(factory.resolve({ job: enums_1.AiModelJob.EMBEDDINGS, onBehalfOf })).rejects.toMatchObject({
+                code: 'AI_PROVIDER_JOB_NOT_ALLOWED',
+            });
+            expect(modelForTurn).not.toHaveBeenCalled();
+        });
+        it('refuses a conversation call that does not say who it is for', async () => {
+            const { factory, modelForTurn } = factoryFor(enums_1.AiProviderType.CHATGPT_SUBSCRIPTION, 'gpt-plan-large');
+            await expect(factory.resolve({ job: enums_1.AiModelJob.CONVERSATION })).rejects.toMatchObject({
+                code: 'AI_PROVIDER_JOB_NOT_ALLOWED',
+            });
+            expect(modelForTurn).not.toHaveBeenCalled();
+        });
+    });
 });
 //# sourceMappingURL=chat-model.factory.spec.js.map