@withbuddi/buddi 0.1.0-pre.17 → 0.1.0-pre.19

package/packages/core/dist/uninstall.js

@@ -0,0 +1,109 @@
+/**
+ * `buddi uninstall`, the part a packaged install and a source checkout share:
+ * print what will go, ask once, take the last backup, remove each thing, and
+ * say what could not be removed.
+ *
+ * What goes differs by installation, so each builds its own plan (the
+ * launcher in `@buddi/install`, the CLI for a checkout) and hands it here.
+ *
+ * This module is deliberately a leaf: no imports, no path constants, no
+ * environment. That is what lets `@buddi/install` take a value import from it
+ * (through the `@buddi/core/uninstall` subpath) without loading anything that
+ * reads the environment before `environment()` has run.
+ */
+/** Print the plan, ask, prepare, remove. 0 when everything went; 1 otherwise. */
+export async function runUninstallPlan(plan, opts, io) {
+    if (plan.steps.length === 0) {
+        io.log('Nothing of buddi is installed here, so there is nothing to remove.');
+        if (plan.last !== undefined)
+            io.log(plan.last);
+        return 0;
+    }
+    io.log(plan.heading);
+    for (const step of plan.steps)
+        io.log(`  - ${step.line}`);
+    for (const note of plan.notes)
+        io.log(note);
+    if (!opts.yes) {
+        const typed = await io.ask('Type yes to remove all of this: ');
+        if (typed === undefined) {
+            io.error('Nothing was removed: there is no terminal to ask. Run buddi uninstall --yes to remove it without asking.');
+            return 1;
+        }
+        if (typed.trim().toLowerCase() !== 'yes') {
+            io.log('Nothing was removed.');
+            return 1;
+        }
+    }
+    if (plan.prepare) {
+        try {
+            for (const line of await plan.prepare())
+                io.log(line);
+        }
+        catch (error) {
+            io.error(`${sentence(error)} Nothing was removed.`);
+            return 1;
+        }
+    }
+    const failed = [];
+    for (const step of plan.steps) {
+        try {
+            await step.run();
+            io.log(`Removed ${step.line}.`);
+        }
+        catch (error) {
+            if (step.bestEffort)
+                io.log(`Could not remove ${step.line}: ${sentence(error)} Nothing else depends on it.`);
+            else
+                failed.push(`Could not remove ${step.line}: ${sentence(error)}`);
+        }
+    }
+    for (const line of failed)
+        io.error(line);
+    if (failed.length > 0)
+        io.error('Everything else was removed. Fix the above and run buddi uninstall again.');
+    if (plan.last !== undefined)
+        io.log(plan.last);
+    return failed.length > 0 ? 1 : 0;
+}
+function sentence(error) {
+    const text = (error instanceof Error ? error.message : String(error)).trim();
+    return /[.!?]$/.test(text) ? text : `${text}.`;
+}
+/**
+ * Delete every keychain entry under `service`: each name, then the index the
+ * keychain vault keeps of them (`buddi.index`, see `vault/keychain.ts`).
+ * Missing is fine (44); anything else — a locked keychain — throws, naming
+ * the entry and never a value.
+ */
+export async function purgeKeychain(service, names, run) {
+    const refused = [];
+    for (const name of [...names, 'buddi.index']) {
+        const res = await run(['delete-generic-password', '-s', service, '-a', name]);
+        if (res.code !== 0 && res.code !== 44)
+            refused.push(`${name} (security exit ${res.code})`);
+    }
+    if (refused.length > 0) {
+        throw new Error(`the keychain refused to delete ${refused.join(', ')}. Unlock it with: security unlock-keychain ~/Library/Keychains/login.keychain-db`);
+    }
+}
+/**
+ * Empty the Telegram bot's command menu: the default scope and each paired
+ * chat, which is where buddi publishes it. An empty list is what Telegram
+ * takes as "no menu". Throws on the first refusal. The caller passes the
+ * shared transport: nothing here goes out through the global `fetch`.
+ */
+export async function clearTelegramMenu(token, chatIds, http) {
+    const scopes = [{ type: 'default' }, ...chatIds.map((id) => ({ type: 'chat', chat_id: id }))];
+    for (const scope of scopes) {
+        const response = await http(`https://api.telegram.org/bot${token}/setMyCommands`, {
+            method: 'POST',
+            headers: { 'content-type': 'application/json' },
+            body: JSON.stringify({ commands: [], scope }),
+            signal: AbortSignal.timeout(10_000),
+        });
+        if (!response.ok)
+            throw new Error(`Telegram answered ${response.status}`);
+    }
+}
+//# sourceMappingURL=uninstall.js.map

package/packages/core/dist/uninstall.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"uninstall.js","sourceRoot":"","sources":["../src/uninstall.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAoCH,iFAAiF;AACjF,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAAmB,EAAE,IAAsB,EAAE,EAAe;IACjG,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,EAAE,CAAC,GAAG,CAAC,oEAAoE,CAAC,CAAC;QAC7E,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;YAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/C,OAAO,CAAC,CAAC;IACX,CAAC;IACD,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACrB,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK;QAAE,EAAE,CAAC,GAAG,CAAC,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IAC1D,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK;QAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC5C,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QACd,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC;QAC/D,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,EAAE,CAAC,KAAK,CAAC,0GAA0G,CAAC,CAAC;YACrH,OAAO,CAAC,CAAC;QACX,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,KAAK,EAAE,CAAC;YACzC,EAAE,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;YAC/B,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC;IACD,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,IAAI,CAAC;YACH,KAAK,MAAM,IAAI,IAAI,MAAM,IAAI,CAAC,OAAO,EAAE;gBAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACxD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,EAAE,CAAC,KAAK,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;YACpD,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC;IACD,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC;YACjB,EAAE,CAAC,GAAG,CAAC,WAAW,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,IAAI,CAAC,UAAU;gBAAE,EAAE,CAAC,GAAG,CAAC,oBAAoB,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;;gBACxG,MAAM,CAAC,IAAI,CAAC,oBAAoB,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACxE,CAAC;IACH,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,MAAM;QAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1C,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,EAAE,CAAC,KAAK,CAAC,2EAA2E,CAAC,CAAC;IAC7G,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;QAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/C,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACnC,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,MAAM,IAAI,GAAG,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC7E,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC;AACjD,CAAC;AAKD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAAe,EAAE,KAAwB,EAAE,GAAgB;IAC7F,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,KAAK,EAAE,aAAa,CAAC,EAAE,CAAC;QAC7C,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,CAAC,yBAAyB,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;QAC9E,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC,IAAI,GAAG,CAAC,IAAI,KAAK,EAAE;YAAE,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,mBAAmB,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC;IAC7F,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,kCAAkC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,kFAAkF,CAAC,CAAC;IAC1J,CAAC;AACH,CAAC;AAQD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,KAAa,EAAE,OAA0B,EAAE,IAAmB;IACpG,MAAM,MAAM,GAAmC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IAC9H,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,+BAA+B,KAAK,gBAAgB,EAAE;YAChF,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;YAC7C,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;SACpC,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAC5E,CAAC;AACH,CAAC"}

package/packages/core/dist/vault/file.js

@@ -3,8 +3,8 @@
  *
  * The file holds AES-256-GCM ciphertext; the key is derived with scrypt from
  * `BUDDI_VAULT_KEY`, which is held *outside* the file and outside the database
- * — that is the whole point (ARCHITECTURE.md: "encrypted with keys held outside
- * the DB"). No key means locked, not readable-anyway.
+ * — that is the whole point (docs/architecture.md, "Secrets and operations").
+ * No key means locked, not readable-anyway.
  *
  * Each secret is sealed on its own, so reading one never decrypts the rest and
  * a corrupted entry cannot take the vault down with it.

package/packages/core/dist/vault/keychain.js

@@ -42,7 +42,7 @@ export const defaultRunSecurity = (args) => new Promise((resolve, reject) => {
 });
 function failed(action, name, res) {
     if (LOCKED_CODES.has(res.code)) {
-        return new VaultLockedError(`the keychain refused to ${action} ${name} (security exit ${res.code}) — unlock the login keychain and try again`);
+        return new VaultLockedError(`the keychain refused to ${action} ${name} (security exit ${res.code}) — unlock it with: security unlock-keychain ~/Library/Keychains/login.keychain-db, then try again`);
     }
     // `stderr` from `security` names the service and account, never the value.
     return new VaultUnavailableError(`keychain ${action} of ${name} failed (security exit ${res.code}): ${res.stderr.trim() || 'no detail'}`);

package/packages/core/dist/vault/keychain.js.map

@@ -1 +1 @@
-{"version":3,"file":"keychain.js","sourceRoot":"","sources":["../../src/vault/keychain.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,aAAa,EACb,gBAAgB,EAChB,qBAAqB,GAEtB,MAAM,YAAY,CAAC;AAEpB,gFAAgF;AAChF,MAAM,CAAC,MAAM,aAAa,GAAG,aAAa,CAAC;AAE3C,iDAAiD;AACjD,MAAM,aAAa,GAAG,EAAE,CAAC;AACzB,mFAAmF;AACnF,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;AAW3C,MAAM,CAAC,MAAM,kBAAkB,GAAgB,CAAC,IAAI,EAAE,EAAE,CACtD,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;IAC9B,QAAQ,CAAC,UAAU,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;QAC5E,MAAM,IAAI,GAAI,GAAiD,EAAE,IAAI,CAAC;QACtE,IAAI,GAAG,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,SAAS,CAAC,EAAE,CAAC;YACrD,mEAAmE;YACnE,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACrD,MAAM,CAAC,IAAI,qBAAqB,CAAC,+CAA+C,CAAC,CAAC,CAAC;gBACnF,OAAO;YACT,CAAC;QACH,CAAC;QACD,OAAO,CAAC;YACN,IAAI,EAAE,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACnD,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC;YAC5B,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC;SAC7B,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAOL,SAAS,MAAM,CAAC,MAAc,EAAE,IAAY,EAAE,GAAc;IAC1D,IAAI,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/B,OAAO,IAAI,gBAAgB,CACzB,2BAA2B,MAAM,IAAI,IAAI,mBAAmB,GAAG,CAAC,IAAI,6CAA6C,CAClH,CAAC;IACJ,CAAC;IACD,2EAA2E;IAC3E,OAAO,IAAI,qBAAqB,CAC9B,YAAY,MAAM,OAAO,IAAI,0BAA0B,GAAG,CAAC,IAAI,MAAM,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,WAAW,EAAE,CACxG,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,OAA6B,EAAE;IACjE,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,aAAa,CAAC;IAC9C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,kBAAkB,CAAC;IAE3C,MAAM,IAAI,GAAG,KAAK,EAAE,OAAe,EAA0B,EAAE;QAC7D,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,CAAC,uBAAuB,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;QACrF,IAAI,GAAG,CAAC,IAAI,KAAK,aAAa;YAAE,OAAO,IAAI,CAAC;QAC5C,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC;YAAE,MAAM,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;QACvD,8EAA8E;QAC9E,OAAO,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACvC,CAAC,CAAC;IAEF,MAAM,GAAG,GAAG,KAAK,EAAE,OAAe,EAAE,KAAa,EAAiB,EAAE;QAClE,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC;YACpB,sBAAsB;YACtB,IAAI;YACJ,IAAI;YACJ,OAAO;YACP,IAAI;YACJ,OAAO;YACP,IAAI;YACJ,KAAK;SACN,CAAC,CAAC;QACH,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC;YAAE,MAAM,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;IAC1D,CAAC,CAAC;IAEF,MAAM,IAAI,GAAG,KAAK,EAAE,OAAe,EAAoB,EAAE;QACvD,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,CAAC,yBAAyB,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;QACjF,IAAI,GAAG,CAAC,IAAI,KAAK,aAAa;YAAE,OAAO,KAAK,CAAC;QAC7C,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC;YAAE,MAAM,MAAM,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;QACzD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IAEF,MAAM,KAAK,GAAG,KAAK,IAAuB,EAAE;QAC1C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,CAAC;QACtC,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE;YAAE,OAAO,EAAE,CAAC;QACjD,IAAI,CAAC;YACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACxC,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/F,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,UAAU,GAAG,KAAK,EAAE,IAAuB,EAAiB,EAAE;QAClE,MAAM,GAAG,CAAC,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACtE,CAAC,CAAC;IAEF,OAAO;QACL,IAAI,EAAE,UAAU;QAChB,KAAK,CAAC,GAAG,CAAC,IAAI;YACZ,OAAO,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC;QACtC,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK;YACnB,gBAAgB,CAAC,IAAI,CAAC,CAAC;YACvB,iBAAiB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YAC/B,MAAM,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACvB,MAAM,IAAI,GAAG,MAAM,KAAK,EAAE,CAAC;YAC3B,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;gBAAE,MAAM,UAAU,CAAC,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;QAC9D,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,IAAI;YACf,gBAAgB,CAAC,IAAI,CAAC,CAAC;YACvB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;YACjC,MAAM,IAAI,GAAG,MAAM,KAAK,EAAE,CAAC;YAC3B,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;gBAAE,MAAM,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC;YAC1E,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,KAAK,CAAC,IAAI;YACR,OAAO,CAAC,MAAM,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,aAAa,CAAC,CAAC,IAAI,EAAE,CAAC;QACnE,CAAC;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"keychain.js","sourceRoot":"","sources":["../../src/vault/keychain.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,aAAa,EACb,gBAAgB,EAChB,qBAAqB,GAEtB,MAAM,YAAY,CAAC;AAEpB,gFAAgF;AAChF,MAAM,CAAC,MAAM,aAAa,GAAG,aAAa,CAAC;AAE3C,iDAAiD;AACjD,MAAM,aAAa,GAAG,EAAE,CAAC;AACzB,mFAAmF;AACnF,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;AAW3C,MAAM,CAAC,MAAM,kBAAkB,GAAgB,CAAC,IAAI,EAAE,EAAE,CACtD,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;IAC9B,QAAQ,CAAC,UAAU,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;QAC5E,MAAM,IAAI,GAAI,GAAiD,EAAE,IAAI,CAAC;QACtE,IAAI,GAAG,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,SAAS,CAAC,EAAE,CAAC;YACrD,mEAAmE;YACnE,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACrD,MAAM,CAAC,IAAI,qBAAqB,CAAC,+CAA+C,CAAC,CAAC,CAAC;gBACnF,OAAO;YACT,CAAC;QACH,CAAC;QACD,OAAO,CAAC;YACN,IAAI,EAAE,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACnD,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC;YAC5B,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC;SAC7B,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAOL,SAAS,MAAM,CAAC,MAAc,EAAE,IAAY,EAAE,GAAc;IAC1D,IAAI,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/B,OAAO,IAAI,gBAAgB,CACzB,2BAA2B,MAAM,IAAI,IAAI,mBAAmB,GAAG,CAAC,IAAI,oGAAoG,CACzK,CAAC;IACJ,CAAC;IACD,2EAA2E;IAC3E,OAAO,IAAI,qBAAqB,CAC9B,YAAY,MAAM,OAAO,IAAI,0BAA0B,GAAG,CAAC,IAAI,MAAM,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,WAAW,EAAE,CACxG,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,OAA6B,EAAE;IACjE,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,aAAa,CAAC;IAC9C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,kBAAkB,CAAC;IAE3C,MAAM,IAAI,GAAG,KAAK,EAAE,OAAe,EAA0B,EAAE;QAC7D,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,CAAC,uBAAuB,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;QACrF,IAAI,GAAG,CAAC,IAAI,KAAK,aAAa;YAAE,OAAO,IAAI,CAAC;QAC5C,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC;YAAE,MAAM,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;QACvD,8EAA8E;QAC9E,OAAO,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACvC,CAAC,CAAC;IAEF,MAAM,GAAG,GAAG,KAAK,EAAE,OAAe,EAAE,KAAa,EAAiB,EAAE;QAClE,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC;YACpB,sBAAsB;YACtB,IAAI;YACJ,IAAI;YACJ,OAAO;YACP,IAAI;YACJ,OAAO;YACP,IAAI;YACJ,KAAK;SACN,CAAC,CAAC;QACH,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC;YAAE,MAAM,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;IAC1D,CAAC,CAAC;IAEF,MAAM,IAAI,GAAG,KAAK,EAAE,OAAe,EAAoB,EAAE;QACvD,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,CAAC,yBAAyB,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;QACjF,IAAI,GAAG,CAAC,IAAI,KAAK,aAAa;YAAE,OAAO,KAAK,CAAC;QAC7C,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC;YAAE,MAAM,MAAM,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;QACzD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IAEF,MAAM,KAAK,GAAG,KAAK,IAAuB,EAAE;QAC1C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,CAAC;QACtC,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE;YAAE,OAAO,EAAE,CAAC;QACjD,IAAI,CAAC;YACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACxC,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/F,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,UAAU,GAAG,KAAK,EAAE,IAAuB,EAAiB,EAAE;QAClE,MAAM,GAAG,CAAC,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACtE,CAAC,CAAC;IAEF,OAAO;QACL,IAAI,EAAE,UAAU;QAChB,KAAK,CAAC,GAAG,CAAC,IAAI;YACZ,OAAO,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC;QACtC,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK;YACnB,gBAAgB,CAAC,IAAI,CAAC,CAAC;YACvB,iBAAiB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YAC/B,MAAM,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACvB,MAAM,IAAI,GAAG,MAAM,KAAK,EAAE,CAAC;YAC3B,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;gBAAE,MAAM,UAAU,CAAC,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;QAC9D,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,IAAI;YACf,gBAAgB,CAAC,IAAI,CAAC,CAAC;YACvB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;YACjC,MAAM,IAAI,GAAG,MAAM,KAAK,EAAE,CAAC;YAC3B,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;gBAAE,MAAM,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC;YAC1E,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,KAAK,CAAC,IAAI;YACR,OAAO,CAAC,MAAM,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,aAAa,CAAC,CAAC,IAAI,EAAE,CAAC;QACnE,CAAC;KACF,CAAC;AACJ,CAAC"}

package/packages/core/dist/vault/resolve.d.ts

@@ -1,9 +1,9 @@
 /**
  * Resolving one secret: vault first, environment second.
  *
- * The environment is the *documented day-1 fallback* (ARCHITECTURE.md,
- * "Credential kinds": «Secrets come from the vault; in the day-1 build they
- * come from `.env` via an explicit env-name reference»), not an accident — but
+ * The environment is the *documented fallback* (docs/architecture.md,
+ * "Credential kinds": «Credentials come from the vault, or from `.env` by
+ * explicit name»), not an accident — but
  * it is a fallback, so a secret the owner moved into the keychain wins over a
  * stale copy left in `.env`.
  *

package/packages/core/dist/vault/resolve.js

@@ -1,9 +1,9 @@
 /**
  * Resolving one secret: vault first, environment second.
  *
- * The environment is the *documented day-1 fallback* (ARCHITECTURE.md,
- * "Credential kinds": «Secrets come from the vault; in the day-1 build they
- * come from `.env` via an explicit env-name reference»), not an accident — but
+ * The environment is the *documented fallback* (docs/architecture.md,
+ * "Credential kinds": «Credentials come from the vault, or from `.env` by
+ * explicit name»), not an accident — but
  * it is a fallback, so a secret the owner moved into the keychain wins over a
  * stale copy left in `.env`.
  *

package/packages/core/dist/vault/types.d.ts

@@ -1,5 +1,5 @@
 /**
- * The vault port (ARCHITECTURE.md, "Secrets and operations").
+ * The vault port (docs/architecture.md, "Secrets and operations").
  *
  * A secrets *table* would hand mail and model credentials to anyone with the
  * database file, so secrets never live in Postgres. They live in the OS

package/packages/core/dist/vault/types.js

@@ -1,5 +1,5 @@
 /**
- * The vault port (ARCHITECTURE.md, "Secrets and operations").
+ * The vault port (docs/architecture.md, "Secrets and operations").
  *
  * A secrets *table* would hand mail and model credentials to anyone with the
  * database file, so secrets never live in Postgres. They live in the OS