@withbuddi/buddi 0.1.0-pre.24 → 0.1.0-pre.26

package/node_modules/@buddi/gateway/dist/web/recovery.d.ts

@@ -1,7 +1,13 @@
+import { type Vault } from '@buddi/core';
 import type { Pool } from 'pg';
 export interface RecoverySecret {
+    /** The name the credential is kept under. Shown small, for the curious; never a value. */
     name: string;
     kind: 'account' | 'telegram' | 'plugin';
+    /** What it is, in words: "Gemini — API key", "Telegram — bot token". */
+    label: string;
+    /** The model account this is the credential of, so the page can open that account. */
+    accountId?: string;
     settingsRoute: string;
 }
 export interface RecoveryPlugin {
@@ -9,6 +15,8 @@ export interface RecoveryPlugin {
     version: string;
     source: string;
     installed: boolean;
+    /** `<npm name>@<version>` when it came from a registry: what Settings → Plugins can stage again. */
+    install?: string;
 }
 export interface RecoveryGrant {
     id: string;
@@ -36,6 +44,8 @@ export interface RecoveryView {
 export interface RecoveryDeps {
     pool: Pool;
     env: NodeJS.ProcessEnv;
+    /** Injected in tests; this machine's own vault otherwise. */
+    vault?: Vault | undefined;
     /** Where leaving recovery says what it dropped. Optional; defaults to stderr. */
     log?: ((line: string) => void) | undefined;
 }

package/node_modules/@buddi/gateway/dist/web/recovery.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"recovery.d.ts","sourceRoot":"","sources":["../../src/web/recovery.ts"],"names":[],"mappings":"AAqCA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC;AAG/B,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,SAAS,GAAG,UAAU,GAAG,QAAQ,CAAC;IACxC,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,OAAO,CAAC;IAChB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,SAAS,EAAE;QACT,OAAO,EAAE,cAAc,EAAE,CAAC;QAC1B,OAAO,EAAE,cAAc,EAAE,CAAC;QAC1B,OAAO,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAC;YAAC,SAAS,EAAE,MAAM,CAAC;YAAC,aAAa,EAAE,MAAM,CAAA;SAAE,CAAC;QACtF,MAAM,EAAE,aAAa,EAAE,CAAC;KACzB,CAAC;CACH;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,IAAI,CAAC;IACX,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;IACvB,iFAAiF;IACjF,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC,GAAG,SAAS,CAAC;CAC5C;AAqBD;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,CAOxD;AAuFD,6EAA6E;AAC7E,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CA2BjG;AAED,MAAM,WAAW,UAAU;IACzB,WAAW,EAAE,OAAO,CAAC;IACrB;;;;OAIG;IACH,UAAU,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;CAClC;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,OAAO,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,gBAAgB,EAAE,MAAM,CAAC;IACzB,aAAa,EAAE,MAAM,CAAC;CACvB;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,YAAY,EAClB,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,UAAU,EACjB,GAAG,EAAE,IAAI,GACR,OAAO,CAAC,WAAW,CAAC,CAuCtB;AAED,uEAAuE;AACvE,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,MAAM,GAAG,SAAS,CAGzE"}
+{"version":3,"file":"recovery.d.ts","sourceRoot":"","sources":["../../src/web/recovery.ts"],"names":[],"mappings":"AA4BA,OAAO,EAWL,KAAK,KAAK,EACX,MAAM,aAAa,CAAC;AACrB,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC;AAK/B,MAAM,WAAW,cAAc;IAC7B,0FAA0F;IAC1F,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,SAAS,GAAG,UAAU,GAAG,QAAQ,CAAC;IACxC,wEAAwE;IACxE,KAAK,EAAE,MAAM,CAAC;IACd,sFAAsF;IACtF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,OAAO,CAAC;IACnB,oGAAoG;IACpG,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,OAAO,CAAC;IAChB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,SAAS,EAAE;QACT,OAAO,EAAE,cAAc,EAAE,CAAC;QAC1B,OAAO,EAAE,cAAc,EAAE,CAAC;QAC1B,OAAO,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAC;YAAC,SAAS,EAAE,MAAM,CAAC;YAAC,aAAa,EAAE,MAAM,CAAA;SAAE,CAAC;QACtF,MAAM,EAAE,aAAa,EAAE,CAAC;KACzB,CAAC;CACH;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,IAAI,CAAC;IACX,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;IACvB,6DAA6D;IAC7D,KAAK,CAAC,EAAE,KAAK,GAAG,SAAS,CAAC;IAC1B,iFAAiF;IACjF,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC,GAAG,SAAS,CAAC;CAC5C;AAmFD;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,CAOxD;AA2GD,6EAA6E;AAC7E,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CA2BjG;AAED,MAAM,WAAW,UAAU;IACzB,WAAW,EAAE,OAAO,CAAC;IACrB;;;;OAIG;IACH,UAAU,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;CAClC;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,OAAO,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,gBAAgB,EAAE,MAAM,CAAC;IACzB,aAAa,EAAE,MAAM,CAAC;CACvB;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,YAAY,EAClB,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,UAAU,EACjB,GAAG,EAAE,IAAI,GACR,OAAO,CAAC,WAAW,CAAC,CAuCtB;AAED,uEAAuE;AACvE,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,MAAM,GAAG,SAAS,CAGzE"}

package/node_modules/@buddi/gateway/dist/web/recovery.js

@@ -8,8 +8,11 @@
  *
  *  - **secrets.** No backup contains a secret value, by design. So every
  *    provider account, the Telegram token and anything the restored `.env`
- *    marked as living in the vault is checked against the vault on *this*
- *    machine, and what is missing is listed with a link to where to paste it.
+ *    marked as living in the vault is looked up the way the runtime reads it
+ *    on *this* machine — owner secret first, raw vault entry, then the
+ *    environment — and only what buddi truly cannot read is listed, with a
+ *    link to where it is fixed. A name in the vault's list proves nothing: an
+ *    adopted credential is kept under `owner-secret:<id>`, not its name.
  *  - **plugins.** `plugins.json` came back in the archive; what is installed
  *    here is whatever this build has. The difference is the list.
  *  - **pending work.** Counts the restore took at the moment it loaded, so the
@@ -23,24 +26,79 @@
 import { existsSync } from 'node:fs';
 import { readFile } from 'node:fs/promises';
 import path from 'node:path';
-import { createVault, describeSource, leaveRecovery, listToolPermissions, pluginsFilePath, readPluginsFile, readRecovery, revokeToolPermission, } from '@buddi/core';
+import { createVault, describeSource, envValue, leaveRecovery, listToolPermissions, pluginsFilePath, readPluginsFile, readRecovery, revokeToolPermission, } from '@buddi/core';
 import { agentSearchPath, installedManifests } from '../agents/catalog.js';
+import { readOllamaDevice } from '../ollama-accounts.js';
+import { ownerSecretVault } from '../owner-secrets.js';
 const ACCOUNTS_ROUTE = '#/settings/accounts';
-const SYSTEM_ROUTE = '#/settings/system';
+const TELEGRAM_ROUTE = '#/settings/telegram';
+const SECRETS_ROUTE = '#/settings/secrets';
 /** Names that are a model credential wherever they turn up. */
-const MODEL_SECRETS = new Set(['ANTHROPIC_API_KEY', 'CLAUDE_CODE_OAUTH_TOKEN', 'OPENAI_API_KEY']);
-/** The names this machine's vault actually holds. Never a value. */
-async function vaultNames(env) {
-    const vault = createVault({ env });
-    if (!vault)
-        return new Set();
+const MODEL_SECRETS = new Set(['OPENAI_API_KEY']);
+/**
+ * Names a restored `.env` may mark that the owner never pastes on a page: the
+ * database's own credentials and the vault's key. A gateway that is serving
+ * this page is already using them, so listing them would only ever be wrong.
+ */
+const RUNNING_PROVES = new Set(['DATABASE_URL', 'BUDDI_DB_PASSWORD', 'BUDDI_VAULT_KEY']);
+/** What the known names are, in words. Anything else is shown by its name. */
+const SECRET_WORDS = {
+    OPENAI_API_KEY: 'OpenAI — API key',
+    TELEGRAM_BOT_TOKEN: 'Telegram — bot token',
+    TAVILY_API_KEY: 'Tavily — search key',
+    BRAVE_SEARCH_API_KEY: 'Brave Search — search key',
+};
+const AUTH_WORDS = {
+    'api-key': 'API key',
+    chatgpt: 'ChatGPT sign-in',
+    'anthropic-oauth': 'Claude sign-in',
+    'device-key': 'Ollama device key',
+};
+function openVault(deps) {
+    if (deps.vault)
+        return deps.vault;
     try {
-        return new Set(await vault.list());
+        return createVault({ env: deps.env });
     }
     catch {
-        // A locked vault is the same problem the checklist is about; treating it
-        // as "nothing is there" lists everything, which is the safe direction.
-        return new Set();
+        return undefined;
+    }
+}
+/**
+ * Whether buddi can read a credential by this name the way the runtime does:
+ * the owner secret of that name when one exists (`owner-secret:<id>` in the
+ * vault, which is where every adopted account key and plugin secret lives
+ * now), else the raw vault entry. Only ever a yes or no; the value never
+ * leaves this function. A locked or failing vault is "no", the safe direction.
+ */
+async function readable(vault, pool, name) {
+    if (!vault || name === '')
+        return null;
+    try {
+        const value = await ownerSecretVault(vault, pool).get(name);
+        return value !== null && value.trim() !== '' ? value : null;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Mirrors `ProviderAccountService#secret` and its "configured" rule: the
+ * credential through the owner-secret-aware vault, then a migrated account's
+ * own named environment variable; an Ollama device counts once connected.
+ */
+async function accountHasCredential(vault, deps, row) {
+    const raw = row.secret_ref ? await readable(vault, deps.pool, row.secret_ref) : null;
+    const value = raw ?? (row.legacy_env ? envValue(deps.env, row.legacy_env) ?? null : null);
+    if (value === null)
+        return false;
+    if (row.auth !== 'device-key')
+        return true;
+    try {
+        return readOllamaDevice(value).connectedAt !== null;
+    }
+    catch {
+        return false;
     }
 }
 /**
@@ -60,31 +118,52 @@ export function vaultMarkersIn(envText) {
     return names;
 }
 async function missingSecrets(deps) {
-    const held = await vaultNames(deps.env);
+    const vault = openVault(deps);
     const out = [];
-    const add = (name, kind, settingsRoute) => {
-        if (held.has(name) || (deps.env[name] ?? '').trim() !== '')
-            return;
-        if (out.some((s) => s.name === name))
-            return;
-        out.push({ name, kind, settingsRoute });
-    };
-    // Every account that needs a credential and whose credential is not here.
+    const listed = (name) => name !== '' && out.some((s) => s.name === name);
+    // Every account the runtime could not get a credential for.
+    let rows = [];
     try {
-        const { rows } = await deps.pool.query(`select secret_ref, auth, label from core.provider_accounts
-        where enabled and not deleting and auth <> 'none'`);
-        for (const row of rows) {
-            add(row.secret_ref ?? `credential for ${row.label}`, 'account', ACCOUNTS_ROUTE);
-        }
+        ({ rows } = await deps.pool.query(`select id, kind, auth, label, secret_ref, legacy_env from core.provider_accounts
+        where enabled and not deleting and auth <> 'none' order by created_at, id`));
     }
     catch {
         // No accounts table is an installation that predates them, not an error.
     }
+    for (const row of rows) {
+        if (await accountHasCredential(vault, deps, row))
+            continue;
+        const name = row.secret_ref ?? row.legacy_env ?? '';
+        if (listed(name))
+            continue;
+        out.push({
+            name,
+            kind: 'account',
+            label: `${row.label} — ${AUTH_WORDS[row.auth] ?? row.auth}`,
+            accountId: row.id,
+            settingsRoute: `${ACCOUNTS_ROUTE}?account=${encodeURIComponent(row.id)}`,
+        });
+    }
+    /*
+     * Anything else by name: the environment the gateway started with (a real
+     * value, not the `<vault>` marker), then the owner secret or vault entry of
+     * that name — where the dashboard saves the bot token and where every plugin
+     * key lives since the host API.
+     */
+    const add = async (name, kind, settingsRoute) => {
+        if (listed(name) || RUNNING_PROVES.has(name))
+            return;
+        if (envValue(deps.env, name) !== undefined)
+            return;
+        if ((await readable(vault, deps.pool, name)) !== null)
+            return;
+        out.push({ name, kind, label: SECRET_WORDS[name] ?? name, settingsRoute });
+    };
     // A bot that was paired on the old machine but has no token on this one.
     try {
-        const { rows } = await deps.pool.query(`select count(*)::text as n from core.surface_identities where surface = 'telegram'`);
-        if (Number(rows[0]?.n ?? '0') > 0)
-            add('TELEGRAM_BOT_TOKEN', 'telegram', SYSTEM_ROUTE);
+        const { rows: paired } = await deps.pool.query(`select count(*)::text as n from core.surface_identities where surface = 'telegram'`);
+        if (Number(paired[0]?.n ?? '0') > 0)
+            await add('TELEGRAM_BOT_TOKEN', 'telegram', TELEGRAM_ROUTE);
     }
     catch {
         /* same */
@@ -95,11 +174,11 @@ async function missingSecrets(deps) {
         const text = await readFile(envFile, 'utf8').catch(() => '');
         for (const name of vaultMarkersIn(text)) {
             if (name === 'TELEGRAM_BOT_TOKEN')
-                add(name, 'telegram', SYSTEM_ROUTE);
+                await add(name, 'telegram', TELEGRAM_ROUTE);
             else if (MODEL_SECRETS.has(name))
-                add(name, 'account', ACCOUNTS_ROUTE);
+                await add(name, 'account', ACCOUNTS_ROUTE);
             else
-                add(name, 'plugin', SYSTEM_ROUTE);
+                await add(name, 'plugin', SECRETS_ROUTE);
         }
     }
     return out;
@@ -127,6 +206,7 @@ function pluginsFromArchive(env) {
             version: p.version,
             source: describeSource(p.source),
             installed: installed.has(p.name),
+            ...(p.source.kind === 'registry' ? { install: `${p.source.name}@${p.source.version}` } : {}),
         }));
     }
     catch {

package/node_modules/@buddi/gateway/dist/web/recovery.js.map

@@ -1 +1 @@
-{"version":3,"file":"recovery.js","sourceRoot":"","sources":["../../src/web/recovery.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EACL,WAAW,EACX,cAAc,EACd,aAAa,EACb,mBAAmB,EACnB,eAAe,EACf,eAAe,EACf,YAAY,EACZ,oBAAoB,GAGrB,MAAM,aAAa,CAAC;AAErB,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AA0C3E,MAAM,cAAc,GAAG,qBAAqB,CAAC;AAC7C,MAAM,YAAY,GAAG,mBAAmB,CAAC;AAEzC,+DAA+D;AAC/D,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,mBAAmB,EAAE,yBAAyB,EAAE,gBAAgB,CAAC,CAAC,CAAC;AAElG,oEAAoE;AACpE,KAAK,UAAU,UAAU,CAAC,GAAsB;IAC9C,MAAM,KAAK,GAAsB,WAAW,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;IACtD,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,GAAG,EAAE,CAAC;IAC7B,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,yEAAyE;QACzE,uEAAuE;QACvE,OAAO,IAAI,GAAG,EAAE,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,OAAe;IAC5C,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1C,MAAM,KAAK,GAAG,wEAAwE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClG,IAAI,KAAK;YAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAW,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,IAAkB;IAC9C,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACxC,MAAM,GAAG,GAAqB,EAAE,CAAC;IACjC,MAAM,GAAG,GAAG,CAAC,IAAY,EAAE,IAA4B,EAAE,aAAqB,EAAQ,EAAE;QACtF,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE;YAAE,OAAO;QACnE,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC;YAAE,OAAO;QAC7C,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC;IAC1C,CAAC,CAAC;IAEF,0EAA0E;IAC1E,IAAI,CAAC;QACH,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CACpC;0DACoD,CACrD,CAAC;QACF,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,GAAG,CAAC,GAAG,CAAC,UAAU,IAAI,kBAAkB,GAAG,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,cAAc,CAAC,CAAC;QAClF,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,yEAAyE;IAC3E,CAAC;IAED,yEAAyE;IACzE,IAAI,CAAC;QACH,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CACpC,oFAAoF,CACrF,CAAC;QACF,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC;YAAE,GAAG,CAAC,oBAAoB,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC;IACzF,CAAC;IAAC,MAAM,CAAC;QACP,UAAU;IACZ,CAAC;IAED,6DAA6D;IAC7D,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC;IACxC,IAAI,OAAO,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QAC7D,KAAK,MAAM,IAAI,IAAI,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;YACxC,IAAI,IAAI,KAAK,oBAAoB;gBAAE,GAAG,CAAC,IAAI,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC;iBAClE,IAAI,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,GAAG,CAAC,IAAI,EAAE,SAAS,EAAE,cAAc,CAAC,CAAC;;gBAClE,GAAG,CAAC,IAAI,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;QACzC,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,kBAAkB,CAAC,GAAsB;IAChD,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IACpC,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACtE,MAAM,IAAI,GAAG,GAAG,CAAC,cAAc,EAAE,IAAI,EAAE,CAAC;IACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,uBAAuB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7E,MAAM,IAAI,GAAG,QAAQ,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;IACjH,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;QACnC,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC9B,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC;YAChC,SAAS,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;SACjC,CAAC,CAAC,CAAC;IACN,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,UAA0B;IAC3C,MAAM,KAAK,GAAG,UAAU,CAAC,cAAc,KAAK,EAAE,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,kBAAkB,CAAC;IAC3F,OAAO;QACL,EAAE,EAAE,UAAU,CAAC,EAAE;QACjB,KAAK,EAAE,UAAU,CAAC,OAAO;QACzB,IAAI,EAAE,UAAU,CAAC,IAAI;QACrB,KAAK;QACL,WAAW,EAAE,GAAG,UAAU,CAAC,OAAO,YAAY,UAAU,CAAC,IAAI,OAAO,KAAK,aAAa,UAAU,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE;KAC1H,CAAC;AACJ,CAAC;AAED,6EAA6E;AAC7E,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAAkB,EAAE,OAAe;IACxE,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5C,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QAC5B,OAAO;YACL,MAAM,EAAE,KAAK;YACb,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI;YACzD,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI;YACrC,SAAS,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;SACvH,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAsB,CAAC,CAAC;IACjG,OAAO;QACL,MAAM,EAAE,IAAI;QACZ,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,WAAW,EAAE;QAC1C,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,SAAS,EAAE;YACT,OAAO,EAAE,MAAM,cAAc,CAAC,IAAI,CAAC;YACnC,OAAO,EAAE,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC;YACrC,OAAO,EAAE;gBACP,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI;gBACxB,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,QAAQ;gBAChC,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,SAAS;gBAClC,aAAa,EAAE,KAAK,CAAC,OAAO,CAAC,aAAa;aAC3C;YACD,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC;SAC9B;KACF,CAAC;AACJ,CAAC;AAmBD;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,IAAkB,EAClB,OAAe,EACf,KAAiB,EACjB,GAAS;IAET,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5C,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QAC5B,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,EAAE,gBAAgB,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,CAAC;IAChF,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAChE,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,IAAI,gBAAgB,GAAG,CAAC,CAAC;IACzB,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;QACtB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAChC;0DACoD,EACpD,CAAC,GAAG,CAAC,CACN,CAAC;QACF,WAAW,GAAG,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC;QACjC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CACrC,qEAAqE,CACtE,CAAC;QACF,gBAAgB,GAAG,SAAS,CAAC,QAAQ,IAAI,CAAC,CAAC;IAC7C,CAAC;IACD,IAAI,aAAa,GAAG,CAAC,CAAC;IACtB,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACnC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACvC,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAsB,CAAC,CAAC;QACjG,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;gBAAE,SAAS;YACjC,IAAI,MAAM,oBAAoB,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;gBAC7D,aAAa,IAAI,CAAC,CAAC;gBACnB,OAAO,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;YACjD,CAAC;QACH,CAAC;IACH,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACjD,GAAG,CACD,6BAA6B,WAAW,sBAAsB,gBAAgB,wBAAwB;QACpG,GAAG,aAAa,oBAAoB,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAC7F,CAAC;IACF,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,gBAAgB,EAAE,aAAa,EAAE,CAAC;AAChE,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,cAAc,CAAC,GAAsB;IACnD,MAAM,IAAI,GAAG,GAAG,CAAC,cAAc,EAAE,IAAI,EAAE,CAAC;IACxC,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACxD,CAAC"}
+{"version":3,"file":"recovery.js","sourceRoot":"","sources":["../../src/web/recovery.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EACL,WAAW,EACX,cAAc,EACd,QAAQ,EACR,aAAa,EACb,mBAAmB,EACnB,eAAe,EACf,eAAe,EACf,YAAY,EACZ,oBAAoB,GAGrB,MAAM,aAAa,CAAC;AAErB,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC3E,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAmDvD,MAAM,cAAc,GAAG,qBAAqB,CAAC;AAC7C,MAAM,cAAc,GAAG,qBAAqB,CAAC;AAC7C,MAAM,aAAa,GAAG,oBAAoB,CAAC;AAE3C,+DAA+D;AAC/D,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC;AAElD;;;;GAIG;AACH,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,mBAAmB,EAAE,iBAAiB,CAAC,CAAC,CAAC;AAEzF,8EAA8E;AAC9E,MAAM,YAAY,GAA2B;IAC3C,cAAc,EAAE,kBAAkB;IAClC,kBAAkB,EAAE,sBAAsB;IAC1C,cAAc,EAAE,qBAAqB;IACrC,oBAAoB,EAAE,2BAA2B;CAClD,CAAC;AAEF,MAAM,UAAU,GAA2B;IACzC,SAAS,EAAE,SAAS;IACpB,OAAO,EAAE,iBAAiB;IAC1B,iBAAiB,EAAE,gBAAgB;IACnC,YAAY,EAAE,mBAAmB;CAClC,CAAC;AAEF,SAAS,SAAS,CAAC,IAAkB;IACnC,IAAI,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC,KAAK,CAAC;IAClC,IAAI,CAAC;QACH,OAAO,WAAW,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,QAAQ,CAAC,KAAwB,EAAE,IAAU,EAAE,IAAY;IACxE,IAAI,CAAC,KAAK,IAAI,IAAI,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IACvC,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC5D,OAAO,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAWD;;;;GAIG;AACH,KAAK,UAAU,oBAAoB,CAAC,KAAwB,EAAE,IAAkB,EAAE,GAAe;IAC/F,MAAM,GAAG,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACrF,MAAM,KAAK,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC1F,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACjC,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY;QAAE,OAAO,IAAI,CAAC;IAC3C,IAAI,CAAC;QACH,OAAO,gBAAgB,CAAC,KAAK,CAAC,CAAC,WAAW,KAAK,IAAI,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,OAAe;IAC5C,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1C,MAAM,KAAK,GAAG,wEAAwE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClG,IAAI,KAAK;YAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAW,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,IAAkB;IAC9C,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC9B,MAAM,GAAG,GAAqB,EAAE,CAAC;IACjC,MAAM,MAAM,GAAG,CAAC,IAAY,EAAW,EAAE,CAAC,IAAI,KAAK,EAAE,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IAE1F,4DAA4D;IAC5D,IAAI,IAAI,GAAiB,EAAE,CAAC;IAC5B,IAAI,CAAC;QACH,CAAC,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAC/B;kFAC4E,CAC7E,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,yEAAyE;IAC3E,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,MAAM,oBAAoB,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC;YAAE,SAAS;QAC3D,MAAM,IAAI,GAAG,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC;QACpD,IAAI,MAAM,CAAC,IAAI,CAAC;YAAE,SAAS;QAC3B,GAAG,CAAC,IAAI,CAAC;YACP,IAAI;YACJ,IAAI,EAAE,SAAS;YACf,KAAK,EAAE,GAAG,GAAG,CAAC,KAAK,MAAM,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,IAAI,EAAE;YAC3D,SAAS,EAAE,GAAG,CAAC,EAAE;YACjB,aAAa,EAAE,GAAG,cAAc,YAAY,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE;SACzE,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACH,MAAM,GAAG,GAAG,KAAK,EAAE,IAAY,EAAE,IAA4B,EAAE,aAAqB,EAAiB,EAAE;QACrG,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO;QACrD,IAAI,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,SAAS;YAAE,OAAO;QACnD,IAAI,CAAC,MAAM,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,KAAK,IAAI;YAAE,OAAO;QAC9D,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,YAAY,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC;IAC7E,CAAC,CAAC;IAEF,yEAAyE;IACzE,IAAI,CAAC;QACH,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAC5C,oFAAoF,CACrF,CAAC;QACF,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC;YAAE,MAAM,GAAG,CAAC,oBAAoB,EAAE,UAAU,EAAE,cAAc,CAAC,CAAC;IACnG,CAAC;IAAC,MAAM,CAAC;QACP,UAAU;IACZ,CAAC;IAED,6DAA6D;IAC7D,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC;IACxC,IAAI,OAAO,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QAC7D,KAAK,MAAM,IAAI,IAAI,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;YACxC,IAAI,IAAI,KAAK,oBAAoB;gBAAE,MAAM,GAAG,CAAC,IAAI,EAAE,UAAU,EAAE,cAAc,CAAC,CAAC;iBAC1E,IAAI,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,MAAM,GAAG,CAAC,IAAI,EAAE,SAAS,EAAE,cAAc,CAAC,CAAC;;gBACxE,MAAM,GAAG,CAAC,IAAI,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,kBAAkB,CAAC,GAAsB;IAChD,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IACpC,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACtE,MAAM,IAAI,GAAG,GAAG,CAAC,cAAc,EAAE,IAAI,EAAE,CAAC;IACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,uBAAuB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7E,MAAM,IAAI,GAAG,QAAQ,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;IACjH,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;QACnC,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC9B,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC;YAChC,SAAS,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;YAChC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC7F,CAAC,CAAC,CAAC;IACN,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,UAA0B;IAC3C,MAAM,KAAK,GAAG,UAAU,CAAC,cAAc,KAAK,EAAE,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,kBAAkB,CAAC;IAC3F,OAAO;QACL,EAAE,EAAE,UAAU,CAAC,EAAE;QACjB,KAAK,EAAE,UAAU,CAAC,OAAO;QACzB,IAAI,EAAE,UAAU,CAAC,IAAI;QACrB,KAAK;QACL,WAAW,EAAE,GAAG,UAAU,CAAC,OAAO,YAAY,UAAU,CAAC,IAAI,OAAO,KAAK,aAAa,UAAU,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE;KAC1H,CAAC;AACJ,CAAC;AAED,6EAA6E;AAC7E,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAAkB,EAAE,OAAe;IACxE,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5C,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QAC5B,OAAO;YACL,MAAM,EAAE,KAAK;YACb,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI;YACzD,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI;YACrC,SAAS,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;SACvH,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAsB,CAAC,CAAC;IACjG,OAAO;QACL,MAAM,EAAE,IAAI;QACZ,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,WAAW,EAAE;QAC1C,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,SAAS,EAAE;YACT,OAAO,EAAE,MAAM,cAAc,CAAC,IAAI,CAAC;YACnC,OAAO,EAAE,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC;YACrC,OAAO,EAAE;gBACP,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI;gBACxB,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,QAAQ;gBAChC,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,SAAS;gBAClC,aAAa,EAAE,KAAK,CAAC,OAAO,CAAC,aAAa;aAC3C;YACD,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC;SAC9B;KACF,CAAC;AACJ,CAAC;AAmBD;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,IAAkB,EAClB,OAAe,EACf,KAAiB,EACjB,GAAS;IAET,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5C,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QAC5B,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,EAAE,gBAAgB,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,CAAC;IAChF,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAChE,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,IAAI,gBAAgB,GAAG,CAAC,CAAC;IACzB,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;QACtB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAChC;0DACoD,EACpD,CAAC,GAAG,CAAC,CACN,CAAC;QACF,WAAW,GAAG,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC;QACjC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CACrC,qEAAqE,CACtE,CAAC;QACF,gBAAgB,GAAG,SAAS,CAAC,QAAQ,IAAI,CAAC,CAAC;IAC7C,CAAC;IACD,IAAI,aAAa,GAAG,CAAC,CAAC;IACtB,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACnC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACvC,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAsB,CAAC,CAAC;QACjG,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;gBAAE,SAAS;YACjC,IAAI,MAAM,oBAAoB,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;gBAC7D,aAAa,IAAI,CAAC,CAAC;gBACnB,OAAO,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;YACjD,CAAC;QACH,CAAC;IACH,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACjD,GAAG,CACD,6BAA6B,WAAW,sBAAsB,gBAAgB,wBAAwB;QACpG,GAAG,aAAa,oBAAoB,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAC7F,CAAC;IACF,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,gBAAgB,EAAE,aAAa,EAAE,CAAC;AAChE,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,cAAc,CAAC,GAAsB;IACnD,MAAM,IAAI,GAAG,GAAG,CAAC,cAAc,EAAE,IAAI,EAAE,CAAC;IACxC,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACxD,CAAC"}

package/node_modules/@buddi/gateway/dist/web/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/web/server.ts"],"names":[],"mappings":"AAmDA,OAAO,EAAyB,KAAK,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAC/E,OAAO,EAAwB,KAAK,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAgBtF,OAAO,EAQL,KAAK,eAAe,EAErB,MAAM,eAAe,CAAC;AAWvB,OAAO,EAAsC,KAAK,MAAM,EAAuB,MAAM,WAAW,CAAC;AAEjG,OAAO,KAAK,EAAE,YAAY,EAAE,UAAU,EAAY,eAAe,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AACrG,OAAO,EAA4G,KAAK,YAAY,EAAE,MAAM,aAAa,CAAC;AAC1J,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC;AAC/B,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAC7D,OAAO,EAAiB,KAAK,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAwBzE,OAAO,EAKL,OAAO,EAKP,KAAK,WAAW,EACjB,MAAM,WAAW,CAAC;AAEnB,OAAO,EAAE,UAAU,EAAuC,MAAM,cAAc,CAAC;AAC/E,OAAO,EAAoD,KAAK,SAAS,EAAE,MAAM,aAAa,CAAC;AAC/F,OAAO,EAUL,KAAK,gBAAgB,EACrB,KAAK,cAAc,EACpB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAqB,KAAK,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAqC3E,OAAO,EAIL,KAAK,YAAY,EAClB,MAAM,eAAe,CAAC;AAcvB,OAAO,EAaL,KAAK,aAAa,EACnB,MAAM,cAAc,CAAC;AAoCtB,qFAAqF;AACrF,eAAO,MAAM,eAAe,QAAS,CAAC;AACtC,MAAM,WAAW,aAAa;IAC5B,gFAAgF;IAChF,OAAO,CAAC,EAAE,iBAAiB,CAAC;IAC5B,IAAI,EAAE,IAAI,CAAC;IACX,QAAQ,EAAE,YAAY,CAAC;IACvB,OAAO,EAAE,YAAY,CAAC;IACtB,GAAG,EAAE,eAAe,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,IAAI,CAAC;IAChB,MAAM,EAAE,SAAS,CAAC;IAClB,6EAA6E;IAC7E,KAAK,EAAE,MAAM,CAAC;IACd,6CAA6C;IAC7C,IAAI,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC;IAC9B;;;OAGG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,GAAG,SAAS,CAAC;IACpC,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC;;;OAGG;IACH,OAAO,CAAC,EAAE,aAAa,GAAG,SAAS,CAAC;IACpC;;;;;;OAMG;IACH,QAAQ,CAAC,EAAE,eAAe,GAAG,SAAS,CAAC;IACvC;;;;OAIG;IACH,WAAW,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,YAAY,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,SAAS,CAAC;IACpE,iEAAiE;IACjE,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B;;;OAGG;IACH,WAAW,CAAC,EAAE,kBAAkB,GAAG,SAAS,CAAC;IAC7C;;;OAGG;IACH,YAAY,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;IACjE;;;;;OAKG;IACH,UAAU,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACjC,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC,GAAG,SAAS,CAAC;IAC3C;;;;;;;;OAQG;IACH,IAAI,CAAC,EAAE,IAAI,CAAC,WAAW,EAAE,MAAM,GAAG,SAAS,GAAG,UAAU,GAAG,KAAK,GAAG,KAAK,GAAG,UAAU,GAAG,KAAK,CAAC,CAAC;IAC/F;;;OAGG;IACH,SAAS,CAAC,EAAE,iBAAiB,CAAC;IAC9B;;;OAGG;IACH,SAAS,CAAC,EAAE;QACV,KAAK,CAAC,EAAE,cAAc,CAAC;QACvB,IAAI,CAAC,EAAE,MAAM,OAAO,CAAC;YAAE,SAAS,EAAE,OAAO,CAAC;YAAC,IAAI,EAAE,gBAAgB,GAAG,IAAI,CAAA;SAAE,CAAC,CAAC;KAC7E,GAAG,SAAS,CAAC;CACf;AAED,MAAM,WAAW,SAAS;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,gFAAgF;IAChF,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ;;;;OAIG;IACH,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,qDAAqD;IACrD,IAAI,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC3B,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAED;;;;;;GAMG;AACH,oHAAoH;AACpH,eAAO,MAAM,aAAa,oBAAoB,CAAC;AA4D/C,wBAAgB,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAE7D;AAED,wDAAwD;AACxD,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS,CAEnE;AAED,yDAAyD;AACzD,eAAO,MAAM,YAAY,MAAM,CAAC;AAEhC,8EAA8E;AAC9E,eAAO,MAAM,qBAAqB,KAAK,CAAC;AAExC,+DAA+D;AAC/D,eAAO,MAAM,kBAAkB,KAAK,CAAC;AACrC,eAAO,MAAM,sBAAsB,QAAS,CAAC;AAE7C,wBAAgB,YAAY,CAAC,IAAI,EAAE,aAAa,GAAG,MAAM,CAmiFxD;AAED;;;GAGG;AACH,wBAAsB,cAAc,CAClC,IAAI,EAAE,IAAI,CAAC,aAAa,EAAE,OAAO,CAAC,GAAG;IAAE,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,GACtD,OAAO,CAAC,SAAS,CAAC,CA4DpB"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/web/server.ts"],"names":[],"mappings":"AAmDA,OAAO,EAAyB,KAAK,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAC/E,OAAO,EAAwB,KAAK,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAmBtF,OAAO,EAQL,KAAK,eAAe,EAErB,MAAM,eAAe,CAAC;AAWvB,OAAO,EAAsC,KAAK,MAAM,EAAuB,MAAM,WAAW,CAAC;AAEjG,OAAO,KAAK,EAAE,YAAY,EAAE,UAAU,EAAY,eAAe,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AACrG,OAAO,EAA4G,KAAK,YAAY,EAAE,MAAM,aAAa,CAAC;AAC1J,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC;AAC/B,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAC7D,OAAO,EAAiB,KAAK,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAwBzE,OAAO,EAKL,OAAO,EAKP,KAAK,WAAW,EACjB,MAAM,WAAW,CAAC;AAEnB,OAAO,EAAE,UAAU,EAAuC,MAAM,cAAc,CAAC;AAC/E,OAAO,EAAoD,KAAK,SAAS,EAAE,MAAM,aAAa,CAAC;AAC/F,OAAO,EAUL,KAAK,gBAAgB,EACrB,KAAK,cAAc,EACpB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAqB,KAAK,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAqC3E,OAAO,EAIL,KAAK,YAAY,EAClB,MAAM,eAAe,CAAC;AAcvB,OAAO,EAaL,KAAK,aAAa,EACnB,MAAM,cAAc,CAAC;AAoCtB,qFAAqF;AACrF,eAAO,MAAM,eAAe,QAAS,CAAC;AACtC,MAAM,WAAW,aAAa;IAC5B,gFAAgF;IAChF,OAAO,CAAC,EAAE,iBAAiB,CAAC;IAC5B,IAAI,EAAE,IAAI,CAAC;IACX,QAAQ,EAAE,YAAY,CAAC;IACvB,OAAO,EAAE,YAAY,CAAC;IACtB,GAAG,EAAE,eAAe,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,IAAI,CAAC;IAChB,MAAM,EAAE,SAAS,CAAC;IAClB,6EAA6E;IAC7E,KAAK,EAAE,MAAM,CAAC;IACd,6CAA6C;IAC7C,IAAI,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC;IAC9B;;;OAGG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,GAAG,SAAS,CAAC;IACpC,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC;;;OAGG;IACH,OAAO,CAAC,EAAE,aAAa,GAAG,SAAS,CAAC;IACpC;;;;;;OAMG;IACH,QAAQ,CAAC,EAAE,eAAe,GAAG,SAAS,CAAC;IACvC;;;;OAIG;IACH,WAAW,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,YAAY,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,SAAS,CAAC;IACpE,iEAAiE;IACjE,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B;;;OAGG;IACH,WAAW,CAAC,EAAE,kBAAkB,GAAG,SAAS,CAAC;IAC7C;;;OAGG;IACH,YAAY,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;IACjE;;;;;OAKG;IACH,UAAU,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACjC,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC,GAAG,SAAS,CAAC;IAC3C;;;;;;;;OAQG;IACH,IAAI,CAAC,EAAE,IAAI,CAAC,WAAW,EAAE,MAAM,GAAG,SAAS,GAAG,UAAU,GAAG,KAAK,GAAG,KAAK,GAAG,UAAU,GAAG,KAAK,CAAC,CAAC;IAC/F;;;OAGG;IACH,SAAS,CAAC,EAAE,iBAAiB,CAAC;IAC9B;;;OAGG;IACH,SAAS,CAAC,EAAE;QACV,KAAK,CAAC,EAAE,cAAc,CAAC;QACvB,IAAI,CAAC,EAAE,MAAM,OAAO,CAAC;YAAE,SAAS,EAAE,OAAO,CAAC;YAAC,IAAI,EAAE,gBAAgB,GAAG,IAAI,CAAA;SAAE,CAAC,CAAC;KAC7E,GAAG,SAAS,CAAC;CACf;AAED,MAAM,WAAW,SAAS;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,gFAAgF;IAChF,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ;;;;OAIG;IACH,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,qDAAqD;IACrD,IAAI,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC3B,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAED;;;;;;GAMG;AACH,oHAAoH;AACpH,eAAO,MAAM,aAAa,oBAAoB,CAAC;AA4D/C,wBAAgB,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAE7D;AAED,wDAAwD;AACxD,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS,CAEnE;AAED,yDAAyD;AACzD,eAAO,MAAM,YAAY,MAAM,CAAC;AAEhC,8EAA8E;AAC9E,eAAO,MAAM,qBAAqB,KAAK,CAAC;AAExC,+DAA+D;AAC/D,eAAO,MAAM,kBAAkB,KAAK,CAAC;AACrC,eAAO,MAAM,sBAAsB,QAAS,CAAC;AAE7C,wBAAgB,YAAY,CAAC,IAAI,EAAE,aAAa,GAAG,MAAM,CA4mFxD;AAED;;;GAGG;AACH,wBAAsB,cAAc,CAClC,IAAI,EAAE,IAAI,CAAC,aAAa,EAAE,OAAO,CAAC,GAAG;IAAE,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,GACtD,OAAO,CAAC,SAAS,CAAC,CA4DpB"}

package/node_modules/@buddi/gateway/dist/web/server.js

@@ -41,7 +41,7 @@
  * No `Access-Control-*` header is ever emitted, and `OPTIONS` is refused: a
  * page on another origin gets no preflight and no permission.
  */
-import { focusRoute, listNotificationsRoute, markSeenRoute, notificationSettingsRoute, presenceRoute, testChannelRoute } from './notifications.js';
+import { agentMuteRoute, focusRoute, listNotificationsRoute, markSeenRoute, notificationSettingsRoute, presenceRoute, testChannelRoute } from './notifications.js';
 import { catalogSkillLookup, discardProposalFromWeb, keepProposalFromWeb, readProposals, registryChangeLookup } from './proposals.js';
 import { latestDigest, readDigestSchedule, setDigestSchedule } from '../agents/learning-digest.js';
 import { readAgentSkills, removeLearnedSkillFromWeb } from '../agents/learned-skills.js';
@@ -54,7 +54,9 @@ import { ProviderAccountError } from '../provider-accounts.js';
 import { listBrowserProfiles, listInstalledApps } from './apps.js';
 import { agentSearchPath, EXAMPLES_AGENTS_DIR } from '../agents/catalog.js';
 import { setDelegatesFromWeb } from './write.js';
+import { mlxhBaseUrl, probeMlxh } from '../mlxh.js';
 import { OnboardingRefusal, WEB_ONBOARDING_STEPS, WEB_ONBOARDING_SURFACE, claimOpeningTurn, createFirstAgent, probeOllama, readOnboarding, rebindBrain, updateFirstAgent, withFirstRunFacts, readFirstAgentPersona } from './onboarding.js';
+import { TakeOnRefusal, readTakeOn, startTakeOn } from './take-on.js';
 import { TelegramWebError, saveTelegramToken, telegramBot, telegramDevices, telegramPairing, telegramStatus, unpairTelegramDevice, } from './telegram.js';
 import { PAGE_ROUTE, sendPageFile, actOnPage, listPageDescriptors, runPageQuery, } from './pages.js';
 import { listSecrets, secretUses, secretsAct } from './secrets.js';
@@ -99,7 +101,7 @@ import { dismissAgentOffer, isPendingAccept, raiseAgentOffers, readAgentOffers,
 import { currentVersion, upgradeJobRoute, upgradeRoute, versionCheckRoute, versionRoute, } from './version.js';
 import { leaveRecoveryMode, readRecoveryView } from './recovery.js';
 import { readRail, setRailPageHidden } from './rail.js';
-import { BUILD_MISSING, serveAsset } from './static.js';
+import { BUILD_MISSING, serveAsset, serveShellAtRoot } from './static.js';
 import { StreamBudget, resumeCursor, streamConversation } from './stream.js';
 import { ensureWebToken, verifyTicket } from './token.js';
 import { MAX_UPLOAD_BYTES, readUpload } from './upload.js';
@@ -465,7 +467,7 @@ export function createWebApp(deps) {
          * state is checked there against the session that started the sign-in.
          */
         if ((method === 'GET' || method === 'HEAD') && url.pathname === CONNECTIONS_CALLBACK_PATH) {
-            const served = await serveAsset(res, assetsDir, '/index.html');
+            const served = await serveShellAtRoot(res, assetsDir);
             if (!served.served)
                 sendText(res, 503, BUILD_MISSING);
             return;
@@ -496,7 +498,8 @@ export function createWebApp(deps) {
             });
         }
         const cookies = parseCookies(req.headers.cookie);
-        let session = sessions.get(cookies[sessionCookieName(cookiePort(req))], scope, now);
+        const presentedSession = cookies[sessionCookieName(cookiePort(req))];
+        let session = sessions.get(presentedSession, scope, now);
         /*
          * A Tailscale session is re-confirmed on every single request.
          *
@@ -517,7 +520,7 @@ export function createWebApp(deps) {
                 hand.revoke((lease) => lease === session.id);
                 if (limiter.blocked(key, now))
                     return sendEmpty(res, 429);
-                limiter.fail(key, now);
+                limiter.failCredential(key, presentedSession ?? '', now);
                 return sendEmpty(res, 401);
             }
         }
@@ -561,9 +564,17 @@ export function createWebApp(deps) {
             // Rate-limit failed authentication, not authenticated traffic. A stale
             // tab behind the same proxy must not lock out a valid recovery ticket
             // or an already authenticated owner (nor direct local access).
+            //
+            // Only a request that presented a credential is an attempt. One with no
+            // cookie at all (a reconnect check, a health probe) guessed nothing, and
+            // the same stale cookie counts once however often it is sent: all tailnet
+            // and tunnel traffic shares 127.0.0.1, so a forgotten tab must not be
+            // able to lock the owner out of every way in.
+            if (!presentedSession)
+                return sendEmpty(res, 401);
             if (limiter.blocked(key, now))
                 return sendEmpty(res, 429);
-            limiter.fail(key, now);
+            limiter.failCredential(key, presentedSession, now);
             return sendEmpty(res, 401);
         }
         /*
@@ -643,6 +654,34 @@ export function createWebApp(deps) {
             registry: deps.registry,
             ...(deps.plugins ? { engine: deps.plugins } : {}),
         });
+        /** Is a mailbox connected? The email plugin's own read, the one Home's offer asks. */
+        const mailboxSet = async () => {
+            const answer = await runPageQuery(pagesDeps(), 'email', 'triage_offer', new URLSearchParams()).catch(() => null);
+            return answer?.status === 200 && answer.body?.data?.wanted === true;
+        };
+        /** First run's chapter 3: the market, the plugin engine, the live registry, the mailbox. */
+        const takeOnDeps = () => {
+            const live = deps.registry;
+            return {
+                pool: deps.pool,
+                env: deps.env ?? process.env,
+                log,
+                ...(deps.plugins ? { engine: deps.plugins } : {}),
+                ...(live.register && live.unregister && live.manifests ? { registry: deps.registry } : {}),
+                mailboxSet,
+                agentIds: () => deps.catalog.list().map((a) => a.id),
+            };
+        };
+        /** The weather at home in one line, for the hello, when the weather plugin answers. */
+        const weatherAtHome = async () => {
+            const answer = await runPageQuery(pagesDeps(), 'weather', 'today', new URLSearchParams()).catch(() => null);
+            const data = answer?.body?.data;
+            if (answer?.status !== 200 || !data || data.setUp !== true)
+                return null;
+            const parts = [data.now, data.sky, typeof data.highLow === 'string' && data.highLow !== '' ? `high / low ${data.highLow}` : '']
+                .filter((part) => typeof part === 'string' && part !== '');
+            return parts.length === 0 ? null : `${typeof data.place === 'string' ? `${data.place}: ` : ''}${parts.join(', ')}`;
+        };
         /**
          * May this installation still be restored over from the first-run screen?
          *
@@ -1142,9 +1181,15 @@ export function createWebApp(deps) {
                 }
                 case '/api/onboarding/ollama':
                     return sendJson(res, 200, await probeOllama());
+                // Is mlxh running here? The same question, asked the same way, of port 1060.
+                case '/api/onboarding/mlxh':
+                    return sendJson(res, 200, await probeMlxh({ baseUrl: mlxhBaseUrl(deps.env ?? process.env) }));
+                // Chapter 3's progress: per plugin, and what the handover card will say is waiting.
+                case '/api/onboarding/take-on':
+                    return sendJson(res, 200, await readTakeOn(takeOnDeps()));
                 case '/api/telegram':
                     return sendJson(res, 200, await telegramStatus(telegramDeps()));
-                // Settings → Notifications: which bot, and which phones talk to it.
+                // Settings → Telegram: which bot, and which phones talk to it.
                 case '/api/telegram/bot':
                     return sendJson(res, 200, await telegramBot(telegramDeps()));
                 case '/api/telegram/devices':
@@ -1806,6 +1851,8 @@ export function createWebApp(deps) {
             return reply(res, await presenceRoute(deps.pool, body, deps.now()));
         if (path === '/api/notifications/test')
             return reply(res, await testChannelRoute(body, deps.now()));
+        if (path === '/api/notifications/agent-mute')
+            return reply(res, await agentMuteRoute(deps.pool, body));
         const seen = /^\/api\/notifications\/([^/]+)\/seen$/.exec(path);
         if (seen)
             return reply(res, await markSeenRoute(deps.pool, decodeURIComponent(seen[1]), deps.now()));
@@ -2223,6 +2270,13 @@ export function createWebApp(deps) {
                     return sendJson(res, 400, { error: `\`${key}\` must be a string` });
                 }
             }
+            // Chapter 4 carries which of its rows were done: yes or no, nothing else.
+            const reachKeys = ['phone', 'mailbox', 'app', 'browser'];
+            if (body.reach !== undefined &&
+                (body.reach === null || typeof body.reach !== 'object' || Array.isArray(body.reach) ||
+                    Object.entries(body.reach).some(([key, value]) => !reachKeys.includes(key) || typeof value !== 'boolean'))) {
+                return sendJson(res, 400, { error: '`reach` must say yes or no for phone, mailbox, app and browser' });
+            }
             // The first step recorded is also what starts the record, with this
             // surface's name on it. Already in progress, done or skipped: unchanged.
             await beginOnboarding(deps.pool, WEB_ONBOARDING_SURFACE);
@@ -2230,9 +2284,24 @@ export function createWebApp(deps) {
             await setOnboardingDetails(deps.pool, {
                 ...(typeof body.conversationId === 'string' ? { conversationId: body.conversationId } : {}),
                 ...(typeof body.accountId === 'string' ? { accountId: body.accountId } : {}),
+                ...(body.reach !== undefined ? { reach: body.reach } : {}),
             });
             return sendJson(res, 200, await readOnboarding(onboardingDeps()));
         }
+        /*
+         * Chapter 3: what buddi takes on. Records the tiles and starts the By-buddi
+         * installs in the background; answers at once with a job per plugin.
+         */
+        if (path === '/api/onboarding/take-on') {
+            try {
+                return sendJson(res, 202, await startTakeOn(takeOnDeps(), body.tiles));
+            }
+            catch (error) {
+                if (error instanceof TakeOnRefusal)
+                    return sendJson(res, error.status, { error: error.message });
+                throw error;
+            }
+        }
         if (path === '/api/onboarding/complete' || path === '/api/onboarding/skip') {
             if (path.endsWith('/skip')) {
                 // The explicit bypass. It records that the owner declined, and it is
@@ -2664,7 +2733,14 @@ export function createWebApp(deps) {
                 agentId: decodeURIComponent(messages[1]),
                 ...(typeof body.conversationId === 'string' ? { conversationId: body.conversationId } : {}),
                 ...(typeof body.client === 'string' ? { client: body.client.trim() } : {}),
-                text: body.opening === true ? await withFirstRunFacts(onboardingDeps(), body.text) : body.text,
+                text: body.opening === true
+                    ? await withFirstRunFacts(onboardingDeps(), body.text, {
+                        weatherAtHome,
+                        mailboxSet,
+                        installed: async () => (await readTakeOn(takeOnDeps())).plugins.filter((p) => p.state === 'ready').map((p) => p.title),
+                        now: deps.now,
+                    })
+                    : body.text,
                 ...(ids ? { attachmentIds: ids } : {}),
                 ...(body.opening === true ? { opening: true } : {}),
             });