@usine/gateway 0.0.0-stage → 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Philippe L'ATTENTION
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,113 @@
-# Temporary Holding Version
+# @usine/gateway
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+The service on the gateway host in front of usine's worker VMs ([ADR 0027](../../docs/adr/0027-gateway-credential-proxy.md), [#223](https://github.com/basaltbytes/usine/issues/223)). Worker VMs have no public address, GitHub token, or API key. They reach GitHub through the gateway, which adds the credential. They reach an LLM provider the same way if the gateway has that provider's API key, and otherwise with the harness's own login through the gateway's forward proxy, which allows only allowlisted hosts: package registries and the harness login hosts. [Workers and the gateway](https://docs.usine.dev/architecture/workers-and-gateway/) describes the deployment.
+
+The gateway serves:
+
+- **A reverse proxy** for workers on the private network. `git.<domain>` serves git smart HTTP at `/OWNER/REPO.git` and the GitHub REST and GraphQL API under `/api/`, as GitHub Enterprise Server does, so `gh` works with `GH_HOST=git.<domain>`. It adds the installation token that the executor attached for that worker and repo. `llm.<domain>` serves the Anthropic API under `/anthropic` and an OpenAI-compatible API under `/openai` with the gateway's API key. Other hosts are refused; the forward proxy serves the allowlisted ones.
+- **A forward proxy** for `HTTPS_PROXY` and `HTTP_PROXY`: `CONNECT` on port 443 for HTTPS and absolute-form requests for plain HTTP mirrors, to allowlisted hosts only. A tunnel opens only if the client's TLS ClientHello names the CONNECT host. A ClientHello naming another host or none, an encrypted ClientHello, or non-TLS bytes end the tunnel (`server-name-mismatch`, `server-name-missing`, `not-tls`). It resolves each name itself and refuses private, loopback, and link-local addresses. Before a plain HTTP request leaves, it removes `X-Usine-Gateway-Token` and any `Authorization` or `x-api-key` value that is a caller token, and leaves other credentials alone.
+- **An admin API** for the executor: attach, renew, detach, and list a worker's repo credentials, and list the [LLM providers](#llm-providers) it has credentials for. It requires the admin token as a bearer token. Attachments are kept in memory; the executor attaches again when it renews or restarts. A [reload](#reload) keeps them.
+
+Refused requests log `Gateway refused a request` at warning level, with the reason, host, client address, and the caller token's worker. Forwarded requests log at info with the worker, repo, method, path, and status. No token, key, or request body is logged.
+
+## Install
+
+`@usine/gateway` is on npm from 0.1.0. On the gateway host, this installs it with its `usine-gateway` command in `node_modules/.bin`:
+
+```sh
+npm install --omit=dev @usine/gateway
+```
+
+To run an unreleased build, pack it in a usine checkout with the `@usine/core` it depends on, whose published version can lag, and install both tarballs with one `npm install`:
+
+```sh
+pnpm build
+pnpm --filter @usine/core --filter @usine/gateway pack --pack-destination .
+npm install --omit=dev ./usine-core-<version>.tgz ./usine-gateway-<version>.tgz
+```
+
+On Hetzner Cloud, `gateway.sh install` does either on the gateway VM and restarts the service; see [`infra/hetzner/gateway/README.md`](../../infra/hetzner/gateway/README.md).
+
+## Entry points
+
+| Import | Contents |
+| --- | --- |
+| `@usine/gateway` | The platform-free core: `GatewaySettings`, `SettingsInForce` (the allowlist and LLM providers that a reload replaces), `Attachments`, `CallerTokens`, `GatewayProxy` (the reverse proxy as an `HttpServerRequest` handler), `adminRoutes` (the admin API for an `HttpRouter`), `gatewayServices`, the egress allowlist parser, and the domain records. It needs an `HttpClient` that leaves `content-encoding` alone. |
+| `@usine/gateway/admin` | `GatewayAdminApi`, the admin API contract for `HttpApiClient.make` in the executor, with the records a client sends and reads (`AttachRequest`, `InstallationCredential`, `Attached`, `AttachmentId`, `CallerToken`, `Detached`, `AttachmentList`, `LlmProviderList`) and `GATEWAY_TOKEN_HEADER`. |
+| `@usine/gateway/node` | `gatewayLayer` (the three servers on Node, with undici upstream), `gatewayFromEnvironment`, `settingsFromEnvironment`, `GatewayAddresses`, and `GatewayReload`. |
+| `usine-gateway` | The gateway VM's command. It reads the settings below, reloads on SIGHUP, and logs one JSON object per line. |
+
+`GatewayDomain` is re-exported from `@usine/core/worker`; gateway settings and worker configuration share its lowercase DNS domain schema.
+
+## Attachments and caller tokens
+
+At the start of an attempt, the executor attaches the attempt's installation token for the worker and repo, with its expiry:
+
+```http
+POST /v1/attachments
+Authorization: Bearer <admin token>
+
+{"worker": "worker-one", "repository": "acme/demo",
+ "credential": {"_tag": "InstallationCredential", "token": "ghs_..."},
+ "expiresAt": "2026-10-13T18:00:00Z"}
+```
+
+The response has the attachment without the token, including its assigned `id`, and a caller token, which the executor gives the attempt's children in place of every credential. The caller token names the attachment id, worker, and repo, and is signed with the gateway's caller key. Each attempt gets its own attachment, even on a shared worker and repo.
+
+Before the installation token expires, the executor renews with `PUT /v1/attachments/<id>` and the same body with the new token. The response has the same caller token, so children keep working, and after a gateway restart the renewal stores the attachment again under its id. `DELETE /v1/attachments/<id>` detaches; `GET /v1/attachments` lists attachments in force.
+
+A caller token works only while its attachment is in force. After a detach or token expiry, every request with it is refused, LLM requests included, and a new attach for the same worker and repo gets a new id, so the old token stays refused (`stale-caller-token`). A request whose path names another repo than the token is refused. An `AnonymousCredential` attachment adds no credential, which is enough to read a public repo.
+
+A child sends its caller token wherever its tool sends a credential: the `X-Usine-Gateway-Token` header, `Authorization` as `Bearer`, `token`, or `Basic` (password), or `x-api-key`. The gateway removes all of them before forwarding.
+
+## LLM providers
+
+`GET /v1/providers` lists the providers the gateway has a credential for, with each credential's kind, never the credential:
+
+```json
+{"providers": [{"provider": "anthropic", "credential": "api-key"}]}
+```
+
+`credential` is `api-key` for `ANTHROPIC_API_KEY` and `OPENAI_API_KEY`, and `subscription` for `USINE_GATEWAY_ANTHROPIC_SUBSCRIPTION_TOKEN`. Providers without a credential are absent. The list follows a [reload](#reload). The executor reads it when it checks a worker whose `llm_providers` lists `anthropic`, so usage counts Claude Code children on the gateway's API key in the API keys pool, not the Claude plan ([ADR 0013](../../docs/adr/0013-cost-accounting-native-meters-guardrails.md)). Gateways released before this endpoint answer 404.
+
+## Worker environment
+
+`infra/hetzner/gateway/worker-cloud-init.yaml` sets up the machine. For each attempt, the executor adds the caller token and sends each variable that contains it over the SSH connection, not the command line; the worker's sshd accepts them with `AcceptEnv`. The Claude Code row applies if the gateway has the Anthropic credential; otherwise Claude Code, like Codex, uses its login on the worker and `HTTPS_PROXY`. The Codex row is what a Codex child would need to use the gateway's OpenAI route; the executor doesn't set it ([#235](https://github.com/basaltbytes/usine/issues/235)).
+
+| Tool | Setting |
+| --- | --- |
+| git | remote `http://git.<domain>/OWNER/REPO.git`; `GIT_CONFIG_KEY_0=http.http://git.<domain>/.extraHeader`, `GIT_CONFIG_VALUE_0="X-Usine-Gateway-Token: <caller token>"`, and `url.http://git.<domain>/.insteadOf` for `https://github.com/` and `https://git.<domain>/` |
+| gh | `GH_HOST=git.<domain>`, `GH_ENTERPRISE_TOKEN=<caller token>`, `GH_TOKEN=<caller token>`; gh's config sets `http_unix_socket: /run/usine-gateway/http.sock`, which `systemd-socket-proxyd` forwards to the gateway, because gh speaks only HTTPS to a custom host but plain HTTP over a socket |
+| Claude Code | `ANTHROPIC_BASE_URL=http://llm.<domain>/anthropic`, `ANTHROPIC_AUTH_TOKEN=<caller token>` |
+| Codex | a `model_provider` with `base_url = "http://llm.<domain>/openai/v1"`, `env_key` naming a variable that contains the caller token, `wire_api = "responses"` |
+| package managers, harness logins | `HTTPS_PROXY` and `HTTP_PROXY` set to `http://<gateway>:3128`, `NO_PROXY=<domain>` |
+
+A client that sends every request through `HTTPS_PROXY`, as Claude Code does, still reaches `git.<domain>` and `llm.<domain>`: the forward proxy sends their port 80 requests to the reverse proxy.
+
+## Configuration
+
+The [CLI reference](https://docs.usine.dev/reference/configuration/cli/) lists every `usine-gateway` variable, with defaults and the environment file rules. Changing `USINE_GATEWAY_CALLER_KEY` invalidates every caller token.
+
+The gateway sends `ANTHROPIC_API_KEY` as `x-api-key` on `/anthropic`, `USINE_GATEWAY_ANTHROPIC_SUBSCRIPTION_TOKEN` (from `claude setup-token`) as a bearer token with the OAuth beta flag, and `OPENAI_API_KEY` as a bearer token on `/openai`. `USINE_GATEWAY_OPENAI_UPSTREAM` can be any OpenAI-compatible provider. Run the placeholder swap test in [Tests](#tests) before you rely on the subscription token. A provider without a credential is refused with `provider-not-configured`.
+
+## Reload
+
+On SIGHUP, `usine-gateway` rereads its environment files and allowlist, and replaces the egress allowlist and the LLM provider settings: `ANTHROPIC_API_KEY`, `USINE_GATEWAY_ANTHROPIC_SUBSCRIPTION_TOKEN`, `OPENAI_API_KEY`, both upstreams, and `USINE_GATEWAY_EGRESS_ALLOWLIST`. Under systemd, `ExecReload=kill -HUP $MAINPID` makes `systemctl reload usine-gateway` send it.
+
+Attachments, the admin API, listening sockets, and open tunnels stay, so running attempts keep their GitHub and LLM requests. An open tunnel stays until a side closes it; each new `CONNECT` or plain HTTP request uses the new allowlist, and each later LLM request the new key. The domain, listeners, admin token, and caller key change only with a restart. A reload that finds one of them changed logs `Settings changed that take effect only after a restart` at warning level with the variable names, and applies the rest.
+
+Each reload ends with `Reloaded the gateway settings`, which gives the environment files, the allowlist path and rule count, whether the allowlist and providers were reloaded or kept, and the names, never values, of changed provider settings (`changed`). Unusable input keeps what's in force:
+
+| Problem | The reload keeps | Log line, at error level |
+| --- | --- | --- |
+| The allowlist can't be read or doesn't parse | The previous allowlist | `Kept the previous egress allowlist`, with the path, the line, and the problem |
+| A provider setting is invalid, or both Anthropic credentials are set | The previous providers | `Kept the previous LLM providers` |
+| An environment file can't be read | Everything | `Kept the gateway settings: an environment file could not be read`, with the path |
+
+`systemctl reload` returns before the reload ends; the journal has the result. Variables from the process environment at startup don't change, so a gateway without environment files reloads only its allowlist.
+
+## Tests
+
+`pnpm --filter @usine/gateway test` runs the unit tests and an end-to-end test that starts the gateway on loopback ports, clones `octocat/Hello-World` through it, calls `gh api` through a Unix socket as a worker does, and opens a tunnel to `registry.npmjs.org`. It needs network access but no secret.
+
+`pnpm --filter @usine/gateway test:placeholder-swap` checks whether Claude Code works when the worker has only a caller token as `CLAUDE_CODE_OAUTH_TOKEN` and the gateway sends a subscription token instead. It needs `claude` on `PATH`. The first case runs Claude Code against a local stand-in for the Anthropic API and checks what reached it. The second runs against `api.anthropic.com` with the real token in `CLAUDE_CODE_OAUTH_TOKEN`, and is skipped without it.

package/dist/admin/api.d.ts

@@ -0,0 +1,206 @@
+import { Schema } from "effect";
+import { HttpApi, HttpApiEndpoint, HttpApiError, HttpApiGroup, HttpApiMiddleware, HttpApiSecurity } from "effect/unstable/httpapi";
+import { type Attachment, AttachmentAlreadyExpired, AttachmentConflict } from "../attachment/attachment.ts";
+import { type LlmProviders } from "../llm/llm.ts";
+export { AttachmentId, InstallationCredential } from "../attachment/attachment.ts";
+export { CallerToken, GATEWAY_TOKEN_HEADER } from "../caller/caller.ts";
+declare const AttachRequest_base: Schema.Class<AttachRequest, Schema.Struct<{
+    readonly worker: Schema.brand<Schema.String, "WorkerName">;
+    readonly repository: Schema.brand<Schema.String, "RepositoryName">;
+    readonly credential: Schema.Union<readonly [typeof import("../attachment/attachment.ts").InstallationCredential, typeof import("../attachment/attachment.ts").AnonymousCredential]>;
+    readonly expiresAt: Schema.DateTimeUtc;
+}>, {}>;
+/** A request to attach one Attempt's credential for one Worker and repository until it expires. */
+export declare class AttachRequest extends AttachRequest_base {
+}
+declare const AttachmentSummary_base: Schema.Class<AttachmentSummary, Schema.Struct<{
+    readonly id: Schema.brand<Schema.String, "AttachmentId">;
+    readonly worker: Schema.brand<Schema.String, "WorkerName">;
+    readonly repository: Schema.brand<Schema.String, "RepositoryName">;
+    readonly credential: Schema.Literals<readonly ["InstallationCredential", "AnonymousCredential"]>;
+    readonly expiresAt: Schema.DateTimeUtc;
+}>, {}>;
+/** An attachment without its token. */
+export declare class AttachmentSummary extends AttachmentSummary_base {
+    static fromAttachment(attachment: Attachment): AttachmentSummary;
+}
+declare const Attached_base: Schema.Class<Attached, Schema.Struct<{
+    readonly attachment: typeof AttachmentSummary;
+    readonly callerToken: Schema.Redacted<Schema.NonEmptyString>;
+}>, {}>;
+/**
+ * The response to an attach or renew: the attachment and the Worker VM's caller token.
+ * Renewing the same attachment ID returns the same token.
+ */
+export declare class Attached extends Attached_base {
+}
+declare const Detached_base: Schema.Class<Detached, Schema.Struct<{
+    readonly detached: Schema.Boolean;
+}>, {}>;
+/** The response to a detach. `detached` is whether the attachment existed. */
+export declare class Detached extends Detached_base {
+}
+declare const AttachmentList_base: Schema.Class<AttachmentList, Schema.Struct<{
+    readonly attachments: Schema.$Array<typeof AttachmentSummary>;
+}>, {}>;
+export declare class AttachmentList extends AttachmentList_base {
+}
+declare const LlmProviderSummary_base: Schema.Class<LlmProviderSummary, Schema.Struct<{
+    readonly provider: Schema.Literals<readonly ["anthropic", "openai"]>;
+    readonly credential: Schema.Literals<readonly ["api-key", "subscription"]>;
+}>, {}>;
+/** An LLM provider the Gateway has a credential for, with the credential kind but not the credential. */
+export declare class LlmProviderSummary extends LlmProviderSummary_base {
+}
+declare const LlmProviderList_base: Schema.Class<LlmProviderList, Schema.Struct<{
+    readonly providers: Schema.$Array<typeof LlmProviderSummary>;
+}>, {}>;
+/** The LLM providers the Gateway forwards to, with each credential kind. Providers without a credential aren't listed. */
+export declare class LlmProviderList extends LlmProviderList_base {
+    static fromProviders({ anthropic, openai }: LlmProviders): LlmProviderList;
+}
+declare const AdminAuthorization_base: HttpApiMiddleware.ServiceClass<AdminAuthorization, "@usine/gateway/AdminAuthorization", {
+    requires: never;
+    provides: never;
+    error: typeof HttpApiError.Unauthorized;
+    clientError: never;
+    requiredForClient: false;
+    security: {
+        readonly bearer: HttpApiSecurity.Http;
+    };
+}, HttpApiMiddleware.HttpApiMiddlewareSecurity<{
+    readonly bearer: HttpApiSecurity.Http;
+}, never, typeof HttpApiError.Unauthorized, never>>;
+/**
+ * Middleware that requires the admin token as a bearer token on every admin request, and
+ * responds with 401 otherwise. Clients add the header themselves, for example with
+ * `HttpClientRequest.bearerToken`.
+ */
+export declare class AdminAuthorization extends AdminAuthorization_base {
+}
+/**
+ * The admin API the executor uses to attach, renew, and detach a Worker VM's GitHub credential
+ * for an Attempt, and to read the Gateway's LLM provider credential kinds (ADR 0013).
+ * Attachments are in memory; after a Gateway restart, the executor's next renewal re-creates
+ * each one under the same ID, so caller tokens stay valid.
+ */
+export declare const GatewayAdminApi: HttpApi.HttpApi<"GatewayAdminApi", HttpApiGroup.HttpApiGroup<"attachments", HttpApiEndpoint.HttpApiEndpoint<"detach", "DELETE", "/v1/attachments/:id", Schema.toCodecStringTree<Schema.Struct<{
+    id: Schema.brand<Schema.String, "AttachmentId">;
+}>>, never, never, never, Schema.toCodecJson<typeof Detached>, never, AdminAuthorization, never> | HttpApiEndpoint.HttpApiEndpoint<"list", "GET", "/v1/attachments", never, never, never, never, Schema.toCodecJson<typeof AttachmentList>, never, AdminAuthorization, never> | HttpApiEndpoint.HttpApiEndpoint<"attach", "POST", "/v1/attachments", never, never, Schema.toCodecJson<Schema.decodeTo<Schema.declareConstructor<AttachRequest, {
+    readonly worker: string;
+    readonly repository: string;
+    readonly credential: {
+        readonly _tag: "InstallationCredential";
+        readonly token: import("effect/Redacted").Redacted<string>;
+    } | {
+        readonly _tag: "AnonymousCredential";
+    };
+    readonly expiresAt: import("effect/DateTime").Utc;
+}, readonly [Schema.Struct<{
+    readonly worker: Schema.brand<Schema.String, "WorkerName">;
+    readonly repository: Schema.brand<Schema.String, "RepositoryName">;
+    readonly credential: Schema.Union<readonly [typeof import("../attachment/attachment.ts").InstallationCredential, typeof import("../attachment/attachment.ts").AnonymousCredential]>;
+    readonly expiresAt: Schema.DateTimeUtc;
+}>], {
+    readonly worker: string & import("effect/Brand").Brand<"WorkerName">;
+    readonly repository: string & import("effect/Brand").Brand<"RepositoryName">;
+    readonly credential: {
+        readonly _tag: "InstallationCredential";
+        readonly token: import("effect/Redacted").Redacted<string>;
+    } | {
+        readonly _tag: "AnonymousCredential";
+    };
+    readonly expiresAt: import("effect/DateTime").Utc;
+}>, Schema.Struct<{
+    readonly worker: Schema.brand<Schema.String, "WorkerName">;
+    readonly repository: Schema.brand<Schema.String, "RepositoryName">;
+    readonly credential: Schema.Union<readonly [typeof import("../attachment/attachment.ts").InstallationCredential, typeof import("../attachment/attachment.ts").AnonymousCredential]>;
+    readonly expiresAt: Schema.DateTimeUtc;
+}>, never, never>>, never, Schema.toCodecJson<typeof Attached>, Schema.toCodecJson<Schema.decodeTo<Schema.declareConstructor<AttachmentAlreadyExpired, {
+    readonly _tag: "AttachmentAlreadyExpired";
+    readonly worker: string;
+    readonly repository: string;
+    readonly expiresAt: import("effect/DateTime").Utc;
+}, readonly [Schema.TaggedStruct<"AttachmentAlreadyExpired", {
+    readonly worker: Schema.brand<Schema.String, "WorkerName">;
+    readonly repository: Schema.brand<Schema.String, "RepositoryName">;
+    readonly expiresAt: Schema.DateTimeUtc;
+}>], {
+    readonly _tag: "AttachmentAlreadyExpired";
+    readonly worker: string & import("effect/Brand").Brand<"WorkerName">;
+    readonly repository: string & import("effect/Brand").Brand<"RepositoryName">;
+    readonly expiresAt: import("effect/DateTime").Utc;
+}>, Schema.TaggedStruct<"AttachmentAlreadyExpired", {
+    readonly worker: Schema.brand<Schema.String, "WorkerName">;
+    readonly repository: Schema.brand<Schema.String, "RepositoryName">;
+    readonly expiresAt: Schema.DateTimeUtc;
+}>, never, never>>, AdminAuthorization, never> | HttpApiEndpoint.HttpApiEndpoint<"renew", "PUT", "/v1/attachments/:id", Schema.toCodecStringTree<Schema.Struct<{
+    id: Schema.brand<Schema.String, "AttachmentId">;
+}>>, never, Schema.toCodecJson<Schema.decodeTo<Schema.declareConstructor<AttachRequest, {
+    readonly worker: string;
+    readonly repository: string;
+    readonly credential: {
+        readonly _tag: "InstallationCredential";
+        readonly token: import("effect/Redacted").Redacted<string>;
+    } | {
+        readonly _tag: "AnonymousCredential";
+    };
+    readonly expiresAt: import("effect/DateTime").Utc;
+}, readonly [Schema.Struct<{
+    readonly worker: Schema.brand<Schema.String, "WorkerName">;
+    readonly repository: Schema.brand<Schema.String, "RepositoryName">;
+    readonly credential: Schema.Union<readonly [typeof import("../attachment/attachment.ts").InstallationCredential, typeof import("../attachment/attachment.ts").AnonymousCredential]>;
+    readonly expiresAt: Schema.DateTimeUtc;
+}>], {
+    readonly worker: string & import("effect/Brand").Brand<"WorkerName">;
+    readonly repository: string & import("effect/Brand").Brand<"RepositoryName">;
+    readonly credential: {
+        readonly _tag: "InstallationCredential";
+        readonly token: import("effect/Redacted").Redacted<string>;
+    } | {
+        readonly _tag: "AnonymousCredential";
+    };
+    readonly expiresAt: import("effect/DateTime").Utc;
+}>, Schema.Struct<{
+    readonly worker: Schema.brand<Schema.String, "WorkerName">;
+    readonly repository: Schema.brand<Schema.String, "RepositoryName">;
+    readonly credential: Schema.Union<readonly [typeof import("../attachment/attachment.ts").InstallationCredential, typeof import("../attachment/attachment.ts").AnonymousCredential]>;
+    readonly expiresAt: Schema.DateTimeUtc;
+}>, never, never>>, never, Schema.toCodecJson<typeof Attached>, Schema.toCodecJson<Schema.decodeTo<Schema.declareConstructor<AttachmentAlreadyExpired, {
+    readonly _tag: "AttachmentAlreadyExpired";
+    readonly worker: string;
+    readonly repository: string;
+    readonly expiresAt: import("effect/DateTime").Utc;
+}, readonly [Schema.TaggedStruct<"AttachmentAlreadyExpired", {
+    readonly worker: Schema.brand<Schema.String, "WorkerName">;
+    readonly repository: Schema.brand<Schema.String, "RepositoryName">;
+    readonly expiresAt: Schema.DateTimeUtc;
+}>], {
+    readonly _tag: "AttachmentAlreadyExpired";
+    readonly worker: string & import("effect/Brand").Brand<"WorkerName">;
+    readonly repository: string & import("effect/Brand").Brand<"RepositoryName">;
+    readonly expiresAt: import("effect/DateTime").Utc;
+}>, Schema.TaggedStruct<"AttachmentAlreadyExpired", {
+    readonly worker: Schema.brand<Schema.String, "WorkerName">;
+    readonly repository: Schema.brand<Schema.String, "RepositoryName">;
+    readonly expiresAt: Schema.DateTimeUtc;
+}>, never, never> | Schema.decodeTo<Schema.declareConstructor<AttachmentConflict, {
+    readonly _tag: "AttachmentConflict";
+    readonly id: string;
+    readonly worker: string;
+    readonly repository: string;
+}, readonly [Schema.TaggedStruct<"AttachmentConflict", {
+    readonly id: Schema.brand<Schema.String, "AttachmentId">;
+    readonly worker: Schema.brand<Schema.String, "WorkerName">;
+    readonly repository: Schema.brand<Schema.String, "RepositoryName">;
+}>], {
+    readonly _tag: "AttachmentConflict";
+    readonly id: string & import("effect/Brand").Brand<"AttachmentId">;
+    readonly worker: string & import("effect/Brand").Brand<"WorkerName">;
+    readonly repository: string & import("effect/Brand").Brand<"RepositoryName">;
+}>, Schema.TaggedStruct<"AttachmentConflict", {
+    readonly id: Schema.brand<Schema.String, "AttachmentId">;
+    readonly worker: Schema.brand<Schema.String, "WorkerName">;
+    readonly repository: Schema.brand<Schema.String, "RepositoryName">;
+}>, never, never>>, AdminAuthorization, never>, false> | HttpApiGroup.HttpApiGroup<"llm", HttpApiEndpoint.HttpApiEndpoint<"providers", "GET", "/v1/providers", never, never, never, never, Schema.toCodecJson<typeof LlmProviderList>, never, AdminAuthorization, never>, false>>;
+//# sourceMappingURL=api.d.ts.map

package/dist/admin/api.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../../src/admin/api.ts"],"names":[],"mappings":"AAEA,OAAO,EAAU,MAAM,EAAE,MAAM,QAAQ,CAAC;AACxC,OAAO,EACL,OAAO,EACP,eAAe,EACf,YAAY,EACZ,YAAY,EACZ,iBAAiB,EACjB,eAAe,EAChB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,KAAK,UAAU,EACf,wBAAwB,EACxB,kBAAkB,EAGnB,MAAM,6BAA6B,CAAC;AAErC,OAAO,EAIL,KAAK,YAAY,EAElB,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAE,YAAY,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AACnF,OAAO,EAAE,WAAW,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;;;;;;;AAExE,mGAAmG;AACnG,qBAAa,aAAc,SAAQ,kBAKjC;CAAG;;;;;;;;AAEL,uCAAuC;AACvC,qBAAa,iBAAkB,SAAQ,sBAQrC;IACA,MAAM,CAAC,cAAc,CAAC,UAAU,EAAE,UAAU,GAAG,iBAAiB,CAQ/D;CACF;;;;;AAED;;;GAGG;AACH,qBAAa,QAAS,SAAQ,aAG5B;CAAG;;;;AAEL,8EAA8E;AAC9E,qBAAa,QAAS,SAAQ,aAE5B;CAAG;;;;AAEL,qBAAa,cAAe,SAAQ,mBAElC;CAAG;;;;;AAEL,yGAAyG;AACzG,qBAAa,kBAAmB,SAAQ,uBAKtC;CAAG;;;;AAEL,0HAA0H;AAC1H,qBAAa,eAAgB,SAAQ,oBAInC;IACA,MAAM,CAAC,aAAa,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,YAAY,GAAG,eAAe,CAczE;CACF;;;;;;;;;;;;;AAED;;;;GAIG;AACH,qBAAa,kBAAmB,SAAQ,uBAGvC;CAAG;AAIJ;;;;;GAKG;AACH,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iRA2B3B,CAAC"}

package/dist/admin/api.js

@@ -0,0 +1,105 @@
+import { RepositoryName } from "@usine/core/repository";
+import { GatewayCredentialKind, WorkerName } from "@usine/core/worker";
+import { Option, Schema } from "effect";
+import { HttpApi, HttpApiEndpoint, HttpApiError, HttpApiGroup, HttpApiMiddleware, HttpApiSecurity, } from "effect/unstable/httpapi";
+import { AttachmentAlreadyExpired, AttachmentConflict, AttachmentCredential, AttachmentId, } from "../attachment/attachment.js";
+import { CallerToken } from "../caller/caller.js";
+import { credentialKind, LlmProviderName, } from "../llm/llm.js";
+export { AttachmentId, InstallationCredential } from "../attachment/attachment.js";
+export { CallerToken, GATEWAY_TOKEN_HEADER } from "../caller/caller.js";
+/** A request to attach one Attempt's credential for one Worker and repository until it expires. */
+export class AttachRequest extends Schema.Class("@usine/gateway/AttachRequest")({
+    worker: WorkerName,
+    repository: RepositoryName,
+    credential: AttachmentCredential,
+    expiresAt: Schema.DateTimeUtc,
+}) {
+}
+/** An attachment without its token. */
+export class AttachmentSummary extends Schema.Class("@usine/gateway/AttachmentSummary")({
+    id: AttachmentId,
+    worker: WorkerName,
+    repository: RepositoryName,
+    credential: Schema.Literals(["InstallationCredential", "AnonymousCredential"]),
+    expiresAt: Schema.DateTimeUtc,
+}) {
+    static fromAttachment(attachment) {
+        return new AttachmentSummary({
+            id: attachment.id,
+            worker: attachment.worker,
+            repository: attachment.repository,
+            credential: attachment.credential._tag,
+            expiresAt: attachment.expiresAt,
+        });
+    }
+}
+/**
+ * The response to an attach or renew: the attachment and the Worker VM's caller token.
+ * Renewing the same attachment ID returns the same token.
+ */
+export class Attached extends Schema.Class("@usine/gateway/Attached")({
+    attachment: AttachmentSummary,
+    callerToken: CallerToken,
+}) {
+}
+/** The response to a detach. `detached` is whether the attachment existed. */
+export class Detached extends Schema.Class("@usine/gateway/Detached")({
+    detached: Schema.Boolean,
+}) {
+}
+export class AttachmentList extends Schema.Class("@usine/gateway/AttachmentList")({
+    attachments: Schema.Array(AttachmentSummary),
+}) {
+}
+/** An LLM provider the Gateway has a credential for, with the credential kind but not the credential. */
+export class LlmProviderSummary extends Schema.Class("@usine/gateway/LlmProviderSummary")({
+    provider: LlmProviderName,
+    credential: GatewayCredentialKind,
+}) {
+}
+/** The LLM providers the Gateway forwards to, with each credential kind. Providers without a credential aren't listed. */
+export class LlmProviderList extends Schema.Class("@usine/gateway/LlmProviderList")({
+    providers: Schema.Array(LlmProviderSummary),
+}) {
+    static fromProviders({ anthropic, openai }) {
+        const listed = (provider, configured) => Option.toArray(Option.map(configured, (held) => new LlmProviderSummary({ provider, credential: credentialKind(held) })));
+        return new LlmProviderList({
+            providers: [...listed("anthropic", anthropic), ...listed("openai", openai)],
+        });
+    }
+}
+/**
+ * Middleware that requires the admin token as a bearer token on every admin request, and
+ * responds with 401 otherwise. Clients add the header themselves, for example with
+ * `HttpClientRequest.bearerToken`.
+ */
+export class AdminAuthorization extends HttpApiMiddleware.Service()("@usine/gateway/AdminAuthorization", { error: HttpApiError.Unauthorized, security: { bearer: HttpApiSecurity.bearer } }) {
+}
+const strict = { parseOptions: { onExcessProperty: "error" } };
+/**
+ * The admin API the executor uses to attach, renew, and detach a Worker VM's GitHub credential
+ * for an Attempt, and to read the Gateway's LLM provider credential kinds (ADR 0013).
+ * Attachments are in memory; after a Gateway restart, the executor's next renewal re-creates
+ * each one under the same ID, so caller tokens stay valid.
+ */
+export const GatewayAdminApi = HttpApi.make("GatewayAdminApi").add(HttpApiGroup.make("attachments")
+    .add(HttpApiEndpoint.post("attach", "/v1/attachments", {
+    payload: AttachRequest.annotate(strict),
+    success: Attached,
+    error: AttachmentAlreadyExpired.annotate({ httpApiStatus: 422 }),
+}), HttpApiEndpoint.put("renew", "/v1/attachments/:id", {
+    params: { id: AttachmentId },
+    payload: AttachRequest.annotate(strict),
+    success: Attached,
+    error: [
+        AttachmentAlreadyExpired.annotate({ httpApiStatus: 422 }),
+        AttachmentConflict.annotate({ httpApiStatus: 409 }),
+    ],
+}), HttpApiEndpoint.delete("detach", "/v1/attachments/:id", {
+    params: { id: AttachmentId },
+    success: Detached,
+}), HttpApiEndpoint.get("list", "/v1/attachments", { success: AttachmentList }))
+    .middleware(AdminAuthorization), HttpApiGroup.make("llm")
+    .add(HttpApiEndpoint.get("providers", "/v1/providers", { success: LlmProviderList }))
+    .middleware(AdminAuthorization));
+//# sourceMappingURL=api.js.map

package/dist/admin/api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api.js","sourceRoot":"","sources":["../../src/admin/api.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAE,qBAAqB,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACvE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AACxC,OAAO,EACL,OAAO,EACP,eAAe,EACf,YAAY,EACZ,YAAY,EACZ,iBAAiB,EACjB,eAAe,GAChB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAEL,wBAAwB,EACxB,kBAAkB,EAClB,oBAAoB,EACpB,YAAY,GACb,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAEL,cAAc,EACd,eAAe,GAGhB,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAE,YAAY,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AACnF,OAAO,EAAE,WAAW,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAExE,mGAAmG;AACnG,MAAM,OAAO,aAAc,SAAQ,MAAM,CAAC,KAAK,CAAgB,8BAA8B,CAAC,CAAC;IAC7F,MAAM,EAAE,UAAU;IAClB,UAAU,EAAE,cAAc;IAC1B,UAAU,EAAE,oBAAoB;IAChC,SAAS,EAAE,MAAM,CAAC,WAAW;CAC9B,CAAC;CAAG;AAEL,uCAAuC;AACvC,MAAM,OAAO,iBAAkB,SAAQ,MAAM,CAAC,KAAK,CACjD,kCAAkC,CACnC,CAAC;IACA,EAAE,EAAE,YAAY;IAChB,MAAM,EAAE,UAAU;IAClB,UAAU,EAAE,cAAc;IAC1B,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,wBAAwB,EAAE,qBAAqB,CAAC,CAAC;IAC9E,SAAS,EAAE,MAAM,CAAC,WAAW;CAC9B,CAAC;IACA,MAAM,CAAC,cAAc,CAAC,UAAsB;QAC1C,OAAO,IAAI,iBAAiB,CAAC;YAC3B,EAAE,EAAE,UAAU,CAAC,EAAE;YACjB,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,UAAU,EAAE,UAAU,CAAC,UAAU;YACjC,UAAU,EAAE,UAAU,CAAC,UAAU,CAAC,IAAI;YACtC,SAAS,EAAE,UAAU,CAAC,SAAS;SAChC,CAAC,CAAC;IACL,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,OAAO,QAAS,SAAQ,MAAM,CAAC,KAAK,CAAW,yBAAyB,CAAC,CAAC;IAC9E,UAAU,EAAE,iBAAiB;IAC7B,WAAW,EAAE,WAAW;CACzB,CAAC;CAAG;AAEL,8EAA8E;AAC9E,MAAM,OAAO,QAAS,SAAQ,MAAM,CAAC,KAAK,CAAW,yBAAyB,CAAC,CAAC;IAC9E,QAAQ,EAAE,MAAM,CAAC,OAAO;CACzB,CAAC;CAAG;AAEL,MAAM,OAAO,cAAe,SAAQ,MAAM,CAAC,KAAK,CAAiB,+BAA+B,CAAC,CAAC;IAChG,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC;CAC7C,CAAC;CAAG;AAEL,yGAAyG;AACzG,MAAM,OAAO,kBAAmB,SAAQ,MAAM,CAAC,KAAK,CAClD,mCAAmC,CACpC,CAAC;IACA,QAAQ,EAAE,eAAe;IACzB,UAAU,EAAE,qBAAqB;CAClC,CAAC;CAAG;AAEL,0HAA0H;AAC1H,MAAM,OAAO,eAAgB,SAAQ,MAAM,CAAC,KAAK,CAC/C,gCAAgC,CACjC,CAAC;IACA,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC;CAC5C,CAAC;IACA,MAAM,CAAC,aAAa,CAAC,EAAE,SAAS,EAAE,MAAM,EAAgB;QACtD,MAAM,MAAM,GAAG,CACb,QAAyB,EACzB,UAA6D,EAC7D,EAAE,CACF,MAAM,CAAC,OAAO,CACZ,MAAM,CAAC,GAAG,CACR,UAAU,EACV,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,kBAAkB,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC,CACjF,CACF,CAAC;QACJ,OAAO,IAAI,eAAe,CAAC;YACzB,SAAS,EAAE,CAAC,GAAG,MAAM,CAAC,WAAW,EAAE,SAAS,CAAC,EAAE,GAAG,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;SAC5E,CAAC,CAAC;IACL,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,OAAO,kBAAmB,SAAQ,iBAAiB,CAAC,OAAO,EAAsB,CACrF,mCAAmC,EACnC,EAAE,KAAK,EAAE,YAAY,CAAC,YAAY,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,eAAe,CAAC,MAAM,EAAE,EAAE,CACnF;CAAG;AAEJ,MAAM,MAAM,GAAG,EAAE,YAAY,EAAE,EAAE,gBAAgB,EAAE,OAAO,EAAE,EAAW,CAAC;AAExE;;;;;GAKG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,GAAG,CAChE,YAAY,CAAC,IAAI,CAAC,aAAa,CAAC;KAC7B,GAAG,CACF,eAAe,CAAC,IAAI,CAAC,QAAQ,EAAE,iBAAiB,EAAE;IAChD,OAAO,EAAE,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC;IACvC,OAAO,EAAE,QAAQ;IACjB,KAAK,EAAE,wBAAwB,CAAC,QAAQ,CAAC,EAAE,aAAa,EAAE,GAAG,EAAE,CAAC;CACjE,CAAC,EACF,eAAe,CAAC,GAAG,CAAC,OAAO,EAAE,qBAAqB,EAAE;IAClD,MAAM,EAAE,EAAE,EAAE,EAAE,YAAY,EAAE;IAC5B,OAAO,EAAE,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC;IACvC,OAAO,EAAE,QAAQ;IACjB,KAAK,EAAE;QACL,wBAAwB,CAAC,QAAQ,CAAC,EAAE,aAAa,EAAE,GAAG,EAAE,CAAC;QACzD,kBAAkB,CAAC,QAAQ,CAAC,EAAE,aAAa,EAAE,GAAG,EAAE,CAAC;KACpD;CACF,CAAC,EACF,eAAe,CAAC,MAAM,CAAC,QAAQ,EAAE,qBAAqB,EAAE;IACtD,MAAM,EAAE,EAAE,EAAE,EAAE,YAAY,EAAE;IAC5B,OAAO,EAAE,QAAQ;CAClB,CAAC,EACF,eAAe,CAAC,GAAG,CAAC,MAAM,EAAE,iBAAiB,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC,CAC5E;KACA,UAAU,CAAC,kBAAkB,CAAC,EACjC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC;KACrB,GAAG,CAAC,eAAe,CAAC,GAAG,CAAC,WAAW,EAAE,eAAe,EAAE,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC,CAAC;KACpF,UAAU,CAAC,kBAAkB,CAAC,CAClC,CAAC"}

package/dist/admin/server.d.ts

@@ -0,0 +1,10 @@
+import { Layer } from "effect";
+import { Attachments } from "../attachment/store.ts";
+import { CallerTokens } from "../caller/caller.ts";
+import { GatewaySettings, SettingsInForce } from "../settings.ts";
+/**
+ * The admin API routes for an `HttpRouter`. Bind them to a loopback or private address; the
+ * executor connects through SSH.
+ */
+export declare const adminRoutes: Layer.Layer<never, never, import("effect/FileSystem").FileSystem | GatewaySettings | import("effect/unstable/http/Etag").Generator | import("effect/unstable/http/HttpPlatform").HttpPlatform | import("effect/unstable/http/HttpRouter").HttpRouter | import("effect/Path").Path | import("effect/unstable/http/HttpRouter").Request<"Requires", Attachments> | import("effect/unstable/http/HttpRouter").Request<"Requires", CallerTokens> | import("effect/unstable/http/HttpRouter").Request<"Requires", SettingsInForce>>;
+//# sourceMappingURL=server.d.ts.map

package/dist/admin/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/admin/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAU,KAAK,EAAY,MAAM,QAAQ,CAAC;AAGjD,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EAAgB,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACjE,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AA8GlE;;;GAGG;AACH,eAAO,MAAM,WAAW,ggBAGvB,CAAC"}

package/dist/admin/server.js

@@ -0,0 +1,79 @@
+import { Effect, Layer, Redacted } from "effect";
+import { HttpApiBuilder, HttpApiError } from "effect/unstable/httpapi";
+import { Attachment, newAttachmentId } from "../attachment/attachment.js";
+import { Attachments } from "../attachment/store.js";
+import { CallerClaims, CallerTokens } from "../caller/caller.js";
+import { GatewaySettings, SettingsInForce } from "../settings.js";
+import { AdminAuthorization, Attached, AttachmentList, AttachmentSummary, Detached, GatewayAdminApi, LlmProviderList, } from "./api.js";
+const encoder = new TextEncoder();
+const digest = (value) => Effect.promise(() => crypto.subtle.digest("SHA-256", encoder.encode(value))).pipe(Effect.map((bytes) => new Uint8Array(bytes)));
+/** Returns whether two digests are equal, in constant time. */
+const sameDigest = (left, right) => {
+    let difference = left.length ^ right.length;
+    for (let index = 0; index < Math.min(left.length, right.length); index++)
+        difference |= (left[index] ?? 0) ^ (right[index] ?? 0);
+    return difference === 0;
+};
+const authorization = Layer.effect(AdminAuthorization, Effect.gen(function* () {
+    const { adminToken } = yield* GatewaySettings;
+    const expected = yield* digest(Redacted.value(adminToken));
+    return {
+        bearer: (httpEffect, { credential, endpoint }) => Effect.gen(function* () {
+            const presented = yield* digest(Redacted.value(credential));
+            if (!sameDigest(expected, presented)) {
+                yield* Effect.logWarning("Gateway refused an admin request", {
+                    reason: "bad-admin-token",
+                    endpoint: endpoint.identifier,
+                });
+                return yield* new HttpApiError.Unauthorized({});
+            }
+            return yield* httpEffect;
+        }),
+    };
+}));
+/** Stores the attachment under `id` and returns its caller token. */
+const store = Effect.fn("GatewayAdmin.store")(function* (id, request) {
+    yield* Effect.annotateCurrentSpan({
+        attachment: id,
+        worker: request.worker,
+        repository: request.repository,
+    });
+    const attachments = yield* Attachments;
+    const callers = yield* CallerTokens;
+    const attachment = new Attachment({ id, ...request });
+    yield* attachments.attach(attachment);
+    const callerToken = yield* callers.issue(new CallerClaims({ attachment: id, worker: request.worker, repository: request.repository }));
+    return new Attached({ attachment: AttachmentSummary.fromAttachment(attachment), callerToken });
+});
+const attachmentHandlers = HttpApiBuilder.group(GatewayAdminApi, "attachments", (routes) => routes
+    .handle("attach", ({ payload }) => Effect.flatMap(newAttachmentId, (id) => store(id, payload)).pipe(
+// A new 128-bit ID can't belong to another attachment.
+Effect.catchTag("AttachmentConflict", Effect.die)))
+    .handle("renew", ({ params, payload }) => store(params.id, payload))
+    .handle("detach", Effect.fn("GatewayAdmin.detach")(function* ({ params }) {
+    yield* Effect.annotateCurrentSpan({ attachment: params.id });
+    const attachments = yield* Attachments;
+    return new Detached({ detached: yield* attachments.detach(params.id) });
+}))
+    .handle("list", Effect.fn("GatewayAdmin.list")(function* () {
+    const attachments = yield* Attachments;
+    const current = yield* attachments.list();
+    return new AttachmentList({ attachments: current.map(AttachmentSummary.fromAttachment) });
+})));
+/** Handlers that return the current LLM providers, including changes from a reload. */
+const llmHandlers = HttpApiBuilder.group(GatewayAdminApi, "llm", (routes) => routes.handle("providers", Effect.fn("GatewayAdmin.providers")(function* () {
+    const { providers } = yield* (yield* SettingsInForce).current;
+    const list = LlmProviderList.fromProviders(providers);
+    yield* Effect.annotateCurrentSpan({
+        providers: list.providers
+            .map(({ provider, credential }) => `${provider}:${credential}`)
+            .join(","),
+    });
+    return list;
+})));
+/**
+ * The admin API routes for an `HttpRouter`. Bind them to a loopback or private address; the
+ * executor connects through SSH.
+ */
+export const adminRoutes = HttpApiBuilder.layer(GatewayAdminApi).pipe(Layer.provide([attachmentHandlers, llmHandlers]), Layer.provide(authorization));
+//# sourceMappingURL=server.js.map

package/dist/admin/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../../src/admin/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AACjD,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACvE,OAAO,EAAE,UAAU,EAAqB,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAC7F,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACjE,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAClE,OAAO,EACL,kBAAkB,EAElB,QAAQ,EACR,cAAc,EACd,iBAAiB,EACjB,QAAQ,EACR,eAAe,EACf,eAAe,GAChB,MAAM,UAAU,CAAC;AAElB,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;AAElC,MAAM,MAAM,GAAG,CAAC,KAAa,EAAE,EAAE,CAC/B,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAC/E,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC,CAC7C,CAAC;AAEJ,+DAA+D;AAC/D,MAAM,UAAU,GAAG,CAAC,IAAgB,EAAE,KAAiB,EAAW,EAAE;IAClE,IAAI,UAAU,GAAG,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IAC5C,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE;QACtE,UAAU,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IACzD,OAAO,UAAU,KAAK,CAAC,CAAC;AAC1B,CAAC,CAAC;AAEF,MAAM,aAAa,GAAG,KAAK,CAAC,MAAM,CAChC,kBAAkB,EAClB,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,EAAE,UAAU,EAAE,GAAG,KAAK,CAAC,CAAC,eAAe,CAAC;IAC9C,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;IAC3D,OAAO;QACL,MAAM,EAAE,CAAC,UAAU,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,EAAE,CAC/C,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YAClB,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;YAC5D,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE,CAAC;gBACrC,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,kCAAkC,EAAE;oBAC3D,MAAM,EAAE,iBAAiB;oBACzB,QAAQ,EAAE,QAAQ,CAAC,UAAU;iBAC9B,CAAC,CAAC;gBACH,OAAO,KAAK,CAAC,CAAC,IAAI,YAAY,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;YAClD,CAAC;YACD,OAAO,KAAK,CAAC,CAAC,UAAU,CAAC;QAC3B,CAAC,CAAC;KACL,CAAC;AACJ,CAAC,CAAC,CACH,CAAC;AAEF,qEAAqE;AACrE,MAAM,KAAK,GAAG,MAAM,CAAC,EAAE,CAAC,oBAAoB,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAgB,EAAE,OAAsB;IAC/F,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC;QAChC,UAAU,EAAE,EAAE;QACd,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,UAAU,EAAE,OAAO,CAAC,UAAU;KAC/B,CAAC,CAAC;IACH,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,WAAW,CAAC;IACvC,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC;IACpC,MAAM,UAAU,GAAG,IAAI,UAAU,CAAC,EAAE,EAAE,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;IACtD,KAAK,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACtC,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,CACtC,IAAI,YAAY,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAC7F,CAAC;IACF,OAAO,IAAI,QAAQ,CAAC,EAAE,UAAU,EAAE,iBAAiB,CAAC,cAAc,CAAC,UAAU,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC;AACjG,CAAC,CAAC,CAAC;AAEH,MAAM,kBAAkB,GAAG,cAAc,CAAC,KAAK,CAAC,eAAe,EAAE,aAAa,EAAE,CAAC,MAAM,EAAE,EAAE,CACzF,MAAM;KACH,MAAM,CAAC,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAChC,MAAM,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI;AAC9D,uDAAuD;AACvD,MAAM,CAAC,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC,GAAG,CAAC,CAClD,CACF;KACA,MAAM,CAAC,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;KACnE,MAAM,CACL,QAAQ,EACR,MAAM,CAAC,EAAE,CAAC,qBAAqB,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;IACpD,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;IAC7D,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,WAAW,CAAC;IACvC,OAAO,IAAI,QAAQ,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;AAC1E,CAAC,CAAC,CACH;KACA,MAAM,CACL,MAAM,EACN,MAAM,CAAC,EAAE,CAAC,mBAAmB,CAAC,CAAC,QAAQ,CAAC;IACtC,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,WAAW,CAAC;IACvC,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;IAC1C,OAAO,IAAI,cAAc,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;AAC5F,CAAC,CAAC,CACH,CACJ,CAAC;AAEF,uFAAuF;AACvF,MAAM,WAAW,GAAG,cAAc,CAAC,KAAK,CAAC,eAAe,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,EAAE,CAC1E,MAAM,CAAC,MAAM,CACX,WAAW,EACX,MAAM,CAAC,EAAE,CAAC,wBAAwB,CAAC,CAAC,QAAQ,CAAC;IAC3C,MAAM,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,eAAe,CAAC,CAAC,OAAO,CAAC;IAC9D,MAAM,IAAI,GAAG,eAAe,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;IACtD,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC;QAChC,SAAS,EAAE,IAAI,CAAC,SAAS;aACtB,GAAG,CAAC,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,GAAG,QAAQ,IAAI,UAAU,EAAE,CAAC;aAC9D,IAAI,CAAC,GAAG,CAAC;KACb,CAAC,CAAC;IACH,OAAO,IAAI,CAAC;AACd,CAAC,CAAC,CACH,CACF,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,cAAc,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,IAAI,CACnE,KAAK,CAAC,OAAO,CAAC,CAAC,kBAAkB,EAAE,WAAW,CAAC,CAAC,EAChD,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,CAC7B,CAAC"}