@withbuddi/buddi 0.1.0-pre.24 → 0.1.0-pre.26

package/packages/gateway/dist/mlxh.js

@@ -0,0 +1,98 @@
+/**
+ * mlxh, the local MLX model server, from the gateway's side: is it running
+ * here, what does it serve, and how long a prompt will it take.
+ *
+ * Asked from the gateway, never from the page, for the reason Ollama is: the
+ * dashboard reaches no host but its own, and the answer is about the machine
+ * buddi runs on. Two read-only calls, `GET /mlxh/info` and `GET /v1/models`;
+ * nothing here ever sends mlxh a prompt.
+ */
+import { MLXH_BASE_URL, MLXH_DEFAULT_MAX_PROMPT_TOKENS } from '@buddi/core';
+import { createHttpTransport } from '@buddi/runtime';
+/** How long the probe waits: mlxh's own callers of /mlxh/info give up after about 2 s. */
+export const MLXH_TIMEOUT_MS = 2_000;
+/** One connection per probe, nothing pooled. */
+const mlxhTransport = createHttpTransport({ idleTimeoutMs: MLXH_TIMEOUT_MS });
+/** Where mlxh answers: the `MLXH_BASE_URL` override, else its default address. */
+export function mlxhBaseUrl(env = {}) {
+    const raw = env.MLXH_BASE_URL?.trim();
+    return (raw || MLXH_BASE_URL).replace(/\/+$/, '');
+}
+const record = (value) => value && typeof value === 'object' && !Array.isArray(value) ? value : undefined;
+const count = (value) => typeof value === 'number' && Number.isInteger(value) && value >= 0 ? value : undefined;
+const cleanId = (value) => typeof value === 'string' && value.trim() !== '' && value.length <= 150 && !/[\x00-\x1f\x7f]/.test(value) ? value : undefined;
+/**
+ * Ask mlxh whether it is running, what it has installed, and what it loaded.
+ * Never throws: nothing answering, a refusal, or two seconds gone are all
+ * `running: false`.
+ */
+export async function probeMlxh(opts = {}) {
+    const transport = opts.transport ?? mlxhTransport;
+    const baseUrl = (opts.baseUrl ?? MLXH_BASE_URL).replace(/\/+$/, '');
+    const origin = baseUrl.replace(/\/v1$/, '');
+    const signal = AbortSignal.timeout(opts.timeoutMs ?? MLXH_TIMEOUT_MS);
+    const ask = async (url) => {
+        try {
+            const res = await transport(url, { method: 'GET', headers: { Accept: 'application/json' }, signal, maxBytes: 1024 * 1024 });
+            if (!res.ok)
+                return undefined;
+            return record(await res.json());
+        }
+        catch {
+            return undefined;
+        }
+    };
+    const [info, list] = await Promise.all([ask(`${origin}/mlxh/info`), ask(`${baseUrl}/models`)]);
+    if (!info && !list)
+        return { running: false, baseUrl, manager: false, models: [] };
+    const workers = new Map();
+    for (const w of Array.isArray(info?.workers) ? info.workers : []) {
+        const row = record(w);
+        const id = cleanId(row?.model);
+        if (row && id && row.state !== 'exited')
+            workers.set(id, row);
+    }
+    const ids = [];
+    for (const m of Array.isArray(list?.data) ? list.data : []) {
+        const id = cleanId(record(m)?.id);
+        if (id && !ids.includes(id))
+            ids.push(id);
+    }
+    // The manager lists its models by name too; a pinned server names its one.
+    for (const name of Array.isArray(info?.models) ? info.models : []) {
+        const id = cleanId(name);
+        if (id && !ids.includes(id))
+            ids.push(id);
+    }
+    const pinned = cleanId(info?.model);
+    if (pinned && !ids.includes(pinned))
+        ids.push(pinned);
+    const manager = info?.manager === true || info?.model_kind === 'manager';
+    const models = ids.slice(0, 200).map((id) => {
+        const worker = workers.get(id);
+        const kindRaw = worker?.model_kind ?? (!manager && id === pinned ? info?.model_kind : undefined);
+        const kind = kindRaw === 'language' || kindRaw === 'image' ? kindRaw : undefined;
+        return { id, loaded: !!worker || (!manager && id === pinned), ...(kind ? { kind } : {}) };
+    });
+    const settings = record(info?.settings);
+    const maxPromptTokens = count(settings?.max_prompt_tokens) ?? count(info?.max_prompt_tokens);
+    const idle = info?.worker_idle_timeout_s;
+    const version = typeof info?.version === 'string' && info.version.length <= 40 ? info.version : undefined;
+    return {
+        running: true, baseUrl, manager, models,
+        ...(maxPromptTokens !== undefined ? { maxPromptTokens } : {}),
+        ...(typeof idle === 'number' && Number.isFinite(idle) && idle >= 0 ? { workerIdleTimeoutS: idle } : {}),
+        ...(version ? { version } : {}),
+    };
+}
+/**
+ * The window buddi gives an mlxh model: the server's `max_prompt_tokens` when
+ * it reported one, else mlxh's default. Null when the server turned the limit
+ * off, so buddi's own table for the model decides.
+ */
+export function mlxhWindow(probe) {
+    if (probe.maxPromptTokens === 0)
+        return null;
+    return probe.maxPromptTokens ?? MLXH_DEFAULT_MAX_PROMPT_TOKENS;
+}
+//# sourceMappingURL=mlxh.js.map

package/packages/gateway/dist/mlxh.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mlxh.js","sourceRoot":"","sources":["../src/mlxh.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,aAAa,EAAE,8BAA8B,EAAE,MAAM,aAAa,CAAC;AAC5E,OAAO,EAAE,mBAAmB,EAAsB,MAAM,gBAAgB,CAAC;AAEzE,0FAA0F;AAC1F,MAAM,CAAC,MAAM,eAAe,GAAG,KAAK,CAAC;AAErC,gDAAgD;AAChD,MAAM,aAAa,GAAkB,mBAAmB,CAAC,EAAE,aAAa,EAAE,eAAe,EAAE,CAAC,CAAC;AA0B7F,kFAAkF;AAClF,MAAM,UAAU,WAAW,CAAC,MAA8D,EAAE;IAC1F,MAAM,GAAG,GAAG,GAAG,CAAC,aAAa,EAAE,IAAI,EAAE,CAAC;IACtC,OAAO,CAAC,GAAG,IAAI,aAAa,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACpD,CAAC;AAED,MAAM,MAAM,GAAG,CAAC,KAAc,EAAuC,EAAE,CACrE,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAE,KAAiC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/G,MAAM,KAAK,GAAG,CAAC,KAAc,EAAsB,EAAE,CACnD,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACzF,MAAM,OAAO,GAAG,CAAC,KAAc,EAAsB,EAAE,CACrD,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC,MAAM,IAAI,GAAG,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAEhI;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,OAA4E,EAAE;IAE9E,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,aAAa,CAAC;IAClD,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,aAAa,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACpE,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,IAAI,eAAe,CAAC,CAAC;IACtE,MAAM,GAAG,GAAG,KAAK,EAAE,GAAW,EAAgD,EAAE;QAC9E,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,GAAG,IAAI,EAAE,CAAC,CAAC;YAC5H,IAAI,CAAC,GAAG,CAAC,EAAE;gBAAE,OAAO,SAAS,CAAC;YAC9B,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QAClC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,SAAS,CAAC;QAAC,CAAC;IAC/B,CAAC,CAAC;IACF,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,MAAM,YAAY,CAAC,EAAE,GAAG,CAAC,GAAG,OAAO,SAAS,CAAC,CAAC,CAAC,CAAC;IAC/F,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IAEnF,MAAM,OAAO,GAAG,IAAI,GAAG,EAAmC,CAAC;IAC3D,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QACjE,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACtB,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC/B,IAAI,GAAG,IAAI,EAAE,IAAI,GAAG,CAAC,KAAK,KAAK,QAAQ;YAAE,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;IAChE,CAAC;IACD,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QAC3D,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAClC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC5C,CAAC;IACD,2EAA2E;IAC3E,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QAClE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QACzB,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC5C,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACpC,IAAI,MAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAEtD,MAAM,OAAO,GAAG,IAAI,EAAE,OAAO,KAAK,IAAI,IAAI,IAAI,EAAE,UAAU,KAAK,SAAS,CAAC;IACzE,MAAM,MAAM,GAAgB,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE;QACvD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC/B,MAAM,OAAO,GAAG,MAAM,EAAE,UAAU,IAAI,CAAC,CAAC,OAAO,IAAI,EAAE,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACjG,MAAM,IAAI,GAAG,OAAO,KAAK,UAAU,IAAI,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;QACjF,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,OAAO,IAAI,EAAE,KAAK,MAAM,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IAC5F,CAAC,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACxC,MAAM,eAAe,GAAG,KAAK,CAAC,QAAQ,EAAE,iBAAiB,CAAC,IAAI,KAAK,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;IAC7F,MAAM,IAAI,GAAG,IAAI,EAAE,qBAAqB,CAAC;IACzC,MAAM,OAAO,GAAG,OAAO,IAAI,EAAE,OAAO,KAAK,QAAQ,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IAC1G,OAAO;QACL,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM;QACvC,GAAG,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,GAAG,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvG,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAChC,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,KAAyC;IAClE,IAAI,KAAK,CAAC,eAAe,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7C,OAAO,KAAK,CAAC,eAAe,IAAI,8BAA8B,CAAC;AACjE,CAAC"}

package/packages/gateway/dist/owner-secrets.d.ts

@@ -2,20 +2,23 @@
  * Owner secrets at the composition root (docs/owner-secrets.md §7,
  * docs/plugin-host-api.md §4.2, §6).
  *
- * Two jobs at start, both once:
+ * Three jobs at start, all once:
  *
+ *  - **Adopt the mailbox `.env` used to name** (`GMAIL_USER`, its password
+ *    `GMAIL_APP_PASSWORD`) as a Settings → Email account — `adoptEnvMailbox`.
+ *    After that buddi reads no mailbox from the environment.
  *  - **Adopt what the email plugin kept.** Each mailbox's password lived in
- *    the vault under the account row's `secret_name` (`EMAIL_<address>_<hash>`,
- *    or `GMAIL_APP_PASSWORD` for the account `.env` names) and was copied into
- *    `process.env` for the plugin to read. Each becomes an owner secret of the
- *    same name, bound to `email.account` with the account's id as its target,
- *    pre-approved. Idempotent; an old entry is deleted only after the new one
- *    reads back.
+ *    the vault under the account row's `secret_name` (`EMAIL_<address>_<hash>`)
+ *    and was copied into `process.env` for the plugin to read. Each becomes an
+ *    owner secret of the same name, bound to `email.account` with the
+ *    account's id as its target, pre-approved. Idempotent; an old entry is
+ *    deleted only after the new one reads back.
  *  - **Clear what nothing reads any more** from `process.env`: the mailbox
  *    passwords. What else can go, and what cannot yet, is said on
  *    `mailboxSecretNames`.
  */
 import { type AdoptOutcome, type SecretDestination, type Vault } from '@buddi/core';
+import type { SecretsPort } from '@buddi/tool-mcp';
 import type { Pool } from 'pg';
 /**
  * The provider accounts' destination (docs/owner-secrets.md §3, §7):
@@ -46,6 +49,73 @@ export declare function ownerSecretVault(vault: Vault, pool: Pick<Pool, 'query'>
  * the removal rather than leaving a live credential behind.
  */
 export declare function deleteAccountSecret(pool: Pick<Pool, 'query'>, vault: Vault | undefined, secretRef: string | undefined): Promise<void>;
+/** The two `.env` lines that used to name a mailbox. Read once, by `adoptEnvMailbox`, and never again. */
+export declare const LEGACY_USER_VAR = "GMAIL_USER";
+export declare const LEGACY_PASSWORD_VAR = "GMAIL_APP_PASSWORD";
+/**
+ * The `email.settings` key that records the adoption ran to an end. With it
+ * there, `.env` is not read for a mailbox again — not even to re-create one
+ * the owner later removed in Settings while the old lines were still there.
+ */
+export declare const ENV_MAILBOX_ADOPTED_KEY = "env_mailbox_adopted";
+export type EnvMailboxAdoption = 
+/** Adopted, or found nothing to adopt, on an earlier start: `.env` is not read. */
+{
+    outcome: 'done';
+}
+/** `GMAIL_USER` is not set: nothing to adopt, and nothing will be. */
+ | {
+    outcome: 'none';
+}
+/** Adopted on this start: the account exists and its password moved. */
+ | {
+    outcome: 'adopted';
+    address: string;
+    accountId: string;
+}
+/** A Settings → Email account of that address already exists; nothing touched. */
+ | {
+    outcome: 'exists';
+    address: string;
+}
+/** No readable password (or no vault to keep one in): nothing created. */
+ | {
+    outcome: 'no-password';
+    address: string;
+    reason: string;
+};
+/**
+ * Adopt the mailbox `.env` names as a Settings → Email account, once, at start
+ * (the pattern of `adoptProviderAccountSecrets`).
+ *
+ * Buddi used to seed an account from `GMAIL_USER` on every boot, its password
+ * named `GMAIL_APP_PASSWORD` (in `.env`, in the vault, or — since owner
+ * secrets — an owner secret of that name bound to the account). Now only
+ * accounts added in Settings exist, so this turns that mailbox into one:
+ *
+ *  - The password is looked for where it may be: an owner secret already under
+ *    the account's own name (a start that stopped half way), the owner secret
+ *    `GMAIL_APP_PASSWORD`, the raw vault entry of that name, then `.env`.
+ *    None readable: nothing is created, and the caller says to add it in
+ *    Settings → Email.
+ *  - **Continuity.** Everything the mailbox has — folders and their UID
+ *    cursors, messages, threads, triage, drafts, rules — is keyed by the
+ *    account row's id, and the old seed's row is converted in place
+ *    (`writeGmailAccount`), so the id does not change and nothing is re-read,
+ *    re-triaged or dropped. There is nothing to re-key.
+ *  - The password moves to where a page-added account keeps it: the owner
+ *    secret `secretNameFor(address)`, bound to `email.account` with the row's
+ *    id, pre-approved. An owner secret `GMAIL_APP_PASSWORD` is *renamed* (same
+ *    id, same vault entry, its history kept); otherwise the value is written
+ *    under the new name and read back before the row changes hands, and the
+ *    raw vault entry goes last. `.env` is the owner's file and is not touched.
+ *
+ * Once: a run that adopts, finds the address already added in Settings, or
+ * finds no `GMAIL_USER` at all records that in `email.settings`
+ * (`ENV_MAILBOX_ADOPTED_KEY`), and every later start answers `done` without
+ * reading `.env`. Only a missing password leaves it to try again next start.
+ */
+export declare function adoptEnvMailbox(pool: Pool, vault: Vault | undefined, env: NodeJS.ProcessEnv): Promise<EnvMailboxAdoption>;
 export interface MailboxAdoption {
     /** Account address → what happened to its password. Never a value. */
     outcomes: Record<string, AdoptOutcome | 'failed'>;
@@ -53,7 +123,7 @@ export interface MailboxAdoption {
     problems: string[];
 }
 /** Move every mailbox password into an owner secret bound to its login. */
-export declare function adoptMailboxSecrets(pool: Pool, vault: Vault | undefined, env: NodeJS.ProcessEnv): Promise<MailboxAdoption>;
+export declare function adoptMailboxSecrets(pool: Pool, vault: Vault | undefined): Promise<MailboxAdoption>;
 /**
  * What the gateway removes from `process.env` once it has started, and why the
  * rest stays for now (host API §6; the whole list is step 4's).
@@ -67,7 +137,7 @@ export declare function adoptMailboxSecrets(pool: Pool, vault: Vault | undefined
  *  - `BUDDI_VAULT_KEY`: every `createVault({ env: process.env })` made per
  *    request — provider settings and accounts, Telegram setup, the web token,
  *    recovery, backups. The file vault reads the key on each open.
- *  - `ANTHROPIC_API_KEY`, `CLAUDE_CODE_OAUTH_TOKEN`, `OPENAI_API_KEY`: provider
+ *  - `OPENAI_API_KEY`: provider
  *    resolution per agent (`providerFor`) and model-account reloads.
  *  - `TELEGRAM_BOT_TOKEN`: every `notifyOwner`, and Telegram started from the
  *    dashboard.
@@ -94,4 +164,23 @@ export interface ProviderAccountAdoption {
  * own keys are not bindable (§6) and their rows carry `legacyEnv`.
  */
 export declare function adoptProviderAccountSecrets(pool: Pool, vault: Vault | undefined): Promise<ProviderAccountAdoption>;
+/**
+ * A connection's pasted token (docs/connections.md, "Connect"), as an owner
+ * secret bound to core's `http.header` destination for that connection's host
+ * and header, pre-approved: the owner pasted it on that connection's own
+ * screen. A read is one recorded use through `useOwnerSecret`, answered only
+ * for the bound host and header — the same core-internal delivery the `http`
+ * area uses — so Settings → Secrets lists it, its last use and its binding.
+ */
+/**
+ * A program's secret variable (docs/connections.md, "A program on this
+ * computer"): `mcp.env`, under the connections plugin's own name. The target
+ * is the connection and the variable's name; the value goes into the
+ * program's environment when it starts, and nowhere else. Core never calls
+ * `deliver`: the connections service asks through `useOwnerSecret` with its
+ * own delivery, like `http.header`.
+ */
+export declare const MCP_ENV_KIND = "mcp.env";
+export declare function registerMcpEnvDestination(): void;
+export declare function connectionSecrets(pool: Pool, vault: Vault | undefined): SecretsPort | undefined;
 //# sourceMappingURL=owner-secrets.d.ts.map

package/packages/gateway/dist/owner-secrets.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"owner-secrets.d.ts","sourceRoot":"","sources":["../src/owner-secrets.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EAKL,KAAK,YAAY,EACjB,KAAK,iBAAiB,EACtB,KAAK,KAAK,EACX,MAAM,aAAa,CAAC;AAErB,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC;AAK/B;;;;;;GAMG;AACH,eAAO,MAAM,sBAAsB,sBAAsB,CAAC;AAE1D,wBAAgB,2BAA2B,CACzC,aAAa,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC;AAC/C,yFAAyF;AACzF,QAAQ,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,MAAM,GAC/B,iBAAiB,CAiBnB;AAED;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,KAAK,CAsB/E;AAED;;;;;GAKG;AACH,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,EACzB,KAAK,EAAE,KAAK,GAAG,SAAS,EACxB,SAAS,EAAE,MAAM,GAAG,SAAS,GAC5B,OAAO,CAAC,IAAI,CAAC,CAaf;AAED,MAAM,WAAW,eAAe;IAC9B,sEAAsE;IACtE,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,GAAG,QAAQ,CAAC,CAAC;IAClD,oEAAoE;IACpE,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,2EAA2E;AAC3E,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,IAAI,EACV,KAAK,EAAE,KAAK,GAAG,SAAS,EACxB,GAAG,EAAE,MAAM,CAAC,UAAU,GACrB,OAAO,CAAC,eAAe,CAAC,CAyB1B;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,EAAE,kBAAkB,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,EAAE,CAI1G;AAED,iFAAiF;AACjF,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,EAAE,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,EAAE,CAS/F;AAED,MAAM,WAAW,uBAAuB;IACtC,mEAAmE;IACnE,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,GAAG,QAAQ,GAAG,SAAS,CAAC,CAAC;IAC9D,oEAAoE;IACpE,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED;;;;;;;;;GASG;AACH,wBAAsB,2BAA2B,CAC/C,IAAI,EAAE,IAAI,EACV,KAAK,EAAE,KAAK,GAAG,SAAS,GACvB,OAAO,CAAC,uBAAuB,CAAC,CA6BlC"}
+{"version":3,"file":"owner-secrets.d.ts","sourceRoot":"","sources":["../src/owner-secrets.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,EAWL,KAAK,YAAY,EACjB,KAAK,iBAAiB,EACtB,KAAK,KAAK,EACX,MAAM,aAAa,CAAC;AAErB,OAAO,KAAK,EAAa,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC9D,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC;AAK/B;;;;;;GAMG;AACH,eAAO,MAAM,sBAAsB,sBAAsB,CAAC;AAE1D,wBAAgB,2BAA2B,CACzC,aAAa,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC;AAC/C,yFAAyF;AACzF,QAAQ,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,MAAM,GAC/B,iBAAiB,CAiBnB;AAED;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,KAAK,CAsB/E;AAED;;;;;GAKG;AACH,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,EACzB,KAAK,EAAE,KAAK,GAAG,SAAS,EACxB,SAAS,EAAE,MAAM,GAAG,SAAS,GAC5B,OAAO,CAAC,IAAI,CAAC,CAaf;AAED,0GAA0G;AAC1G,eAAO,MAAM,eAAe,eAAe,CAAC;AAC5C,eAAO,MAAM,mBAAmB,uBAAuB,CAAC;AAExD;;;;GAIG;AACH,eAAO,MAAM,uBAAuB,wBAAwB,CAAC;AAE7D,MAAM,MAAM,kBAAkB;AAC5B,mFAAmF;AACjF;IAAE,OAAO,EAAE,MAAM,CAAA;CAAE;AACrB,sEAAsE;GACpE;IAAE,OAAO,EAAE,MAAM,CAAA;CAAE;AACrB,wEAAwE;GACtE;IAAE,OAAO,EAAE,SAAS,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE;AAC5D,kFAAkF;GAChF;IAAE,OAAO,EAAE,QAAQ,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE;AACxC,0EAA0E;GACxE;IAAE,OAAO,EAAE,aAAa,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAWhE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,wBAAsB,eAAe,CACnC,IAAI,EAAE,IAAI,EACV,KAAK,EAAE,KAAK,GAAG,SAAS,EACxB,GAAG,EAAE,MAAM,CAAC,UAAU,GACrB,OAAO,CAAC,kBAAkB,CAAC,CAyE7B;AAED,MAAM,WAAW,eAAe;IAC9B,sEAAsE;IACtE,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,GAAG,QAAQ,CAAC,CAAC;IAClD,oEAAoE;IACpE,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,2EAA2E;AAC3E,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,IAAI,EACV,KAAK,EAAE,KAAK,GAAG,SAAS,GACvB,OAAO,CAAC,eAAe,CAAC,CAyB1B;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,EAAE,kBAAkB,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,EAAE,CAK1G;AAED,iFAAiF;AACjF,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,EAAE,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,EAAE,CAS/F;AAED,MAAM,WAAW,uBAAuB;IACtC,mEAAmE;IACnE,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,GAAG,QAAQ,GAAG,SAAS,CAAC,CAAC;IAC9D,oEAAoE;IACpE,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED;;;;;;;;;GASG;AACH,wBAAsB,2BAA2B,CAC/C,IAAI,EAAE,IAAI,EACV,KAAK,EAAE,KAAK,GAAG,SAAS,GACvB,OAAO,CAAC,uBAAuB,CAAC,CA6BlC;AAED;;;;;;;GAOG;AACH;;;;;;;GAOG;AACH,eAAO,MAAM,YAAY,YAAY,CAAC;AAQtC,wBAAgB,yBAAyB,IAAI,IAAI,CAiBhD;AAED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,GAAG,SAAS,GAAG,WAAW,GAAG,SAAS,CAqD/F"}

package/packages/gateway/dist/owner-secrets.js

@@ -2,21 +2,23 @@
  * Owner secrets at the composition root (docs/owner-secrets.md §7,
  * docs/plugin-host-api.md §4.2, §6).
  *
- * Two jobs at start, both once:
+ * Three jobs at start, all once:
  *
+ *  - **Adopt the mailbox `.env` used to name** (`GMAIL_USER`, its password
+ *    `GMAIL_APP_PASSWORD`) as a Settings → Email account — `adoptEnvMailbox`.
+ *    After that buddi reads no mailbox from the environment.
  *  - **Adopt what the email plugin kept.** Each mailbox's password lived in
- *    the vault under the account row's `secret_name` (`EMAIL_<address>_<hash>`,
- *    or `GMAIL_APP_PASSWORD` for the account `.env` names) and was copied into
- *    `process.env` for the plugin to read. Each becomes an owner secret of the
- *    same name, bound to `email.account` with the account's id as its target,
- *    pre-approved. Idempotent; an old entry is deleted only after the new one
- *    reads back.
+ *    the vault under the account row's `secret_name` (`EMAIL_<address>_<hash>`)
+ *    and was copied into `process.env` for the plugin to read. Each becomes an
+ *    owner secret of the same name, bound to `email.account` with the
+ *    account's id as its target, pre-approved. Idempotent; an old entry is
+ *    deleted only after the new one reads back.
  *  - **Clear what nothing reads any more** from `process.env`: the mailbox
  *    passwords. What else can go, and what cannot yet, is said on
  *    `mailboxSecretNames`.
  */
-import { adoptVaultEntry, deleteOwnerSecret, findSecret, ownerSecretVaultName, } from '@buddi/core';
-import { ACCOUNT_KIND, GMAIL_SECRET_NAME, listAccounts } from '@buddi/tool-email';
+import { adoptVaultEntry, deleteOwnerSecret, findSecret, ownerSecretVaultName, putOwnerSecret, registerSecretDestination, renameOwnerSecret, VAULT_PLACEHOLDER, useOwnerSecret, } from '@buddi/core';
+import { ACCOUNT_KIND, listAccounts, secretNameFor, writeGmailAccount } from '@buddi/tool-email';
 /** The shape of a page-added mailbox's old vault name (`secretNameFor`). Not `EMAIL_BACKFILL`. */
 const MAILBOX_SECRET_RE = /^EMAIL_[A-Z0-9_]+_[0-9a-f]{8}$/;
 /**
@@ -103,8 +105,132 @@ export async function deleteAccountSecret(pool, vault, secretRef) {
         throw new Error(`the credential of "${secretRef}" could not be removed from the vault`);
     }
 }
+/** The two `.env` lines that used to name a mailbox. Read once, by `adoptEnvMailbox`, and never again. */
+export const LEGACY_USER_VAR = 'GMAIL_USER';
+export const LEGACY_PASSWORD_VAR = 'GMAIL_APP_PASSWORD';
+/**
+ * The `email.settings` key that records the adoption ran to an end. With it
+ * there, `.env` is not read for a mailbox again — not even to re-create one
+ * the owner later removed in Settings while the old lines were still there.
+ */
+export const ENV_MAILBOX_ADOPTED_KEY = 'env_mailbox_adopted';
+/** A value that is really there: not empty, not the `"<vault>"` marker `import-env` leaves. */
+function realValue(raw) {
+    if (typeof raw !== 'string')
+        return null;
+    const trimmed = raw.trim();
+    const unquoted = trimmed.replace(/^(["'])(.*)\1$/, '$2');
+    if (trimmed === '' || unquoted === VAULT_PLACEHOLDER)
+        return null;
+    return trimmed;
+}
+/**
+ * Adopt the mailbox `.env` names as a Settings → Email account, once, at start
+ * (the pattern of `adoptProviderAccountSecrets`).
+ *
+ * Buddi used to seed an account from `GMAIL_USER` on every boot, its password
+ * named `GMAIL_APP_PASSWORD` (in `.env`, in the vault, or — since owner
+ * secrets — an owner secret of that name bound to the account). Now only
+ * accounts added in Settings exist, so this turns that mailbox into one:
+ *
+ *  - The password is looked for where it may be: an owner secret already under
+ *    the account's own name (a start that stopped half way), the owner secret
+ *    `GMAIL_APP_PASSWORD`, the raw vault entry of that name, then `.env`.
+ *    None readable: nothing is created, and the caller says to add it in
+ *    Settings → Email.
+ *  - **Continuity.** Everything the mailbox has — folders and their UID
+ *    cursors, messages, threads, triage, drafts, rules — is keyed by the
+ *    account row's id, and the old seed's row is converted in place
+ *    (`writeGmailAccount`), so the id does not change and nothing is re-read,
+ *    re-triaged or dropped. There is nothing to re-key.
+ *  - The password moves to where a page-added account keeps it: the owner
+ *    secret `secretNameFor(address)`, bound to `email.account` with the row's
+ *    id, pre-approved. An owner secret `GMAIL_APP_PASSWORD` is *renamed* (same
+ *    id, same vault entry, its history kept); otherwise the value is written
+ *    under the new name and read back before the row changes hands, and the
+ *    raw vault entry goes last. `.env` is the owner's file and is not touched.
+ *
+ * Once: a run that adopts, finds the address already added in Settings, or
+ * finds no `GMAIL_USER` at all records that in `email.settings`
+ * (`ENV_MAILBOX_ADOPTED_KEY`), and every later start answers `done` without
+ * reading `.env`. Only a missing password leaves it to try again next start.
+ */
+export async function adoptEnvMailbox(pool, vault, env) {
+    let marked;
+    try {
+        ({ rows: marked } = await pool.query(`select 1 from email.settings where key = $1`, [ENV_MAILBOX_ADOPTED_KEY]));
+    }
+    catch (err) {
+        // No email schema: the mail plugin is not installed here, so there is no
+        // mailbox to adopt into.
+        if (err.code === '42P01' || err.code === '3F000')
+            return { outcome: 'none' };
+        throw err;
+    }
+    if (marked.length > 0)
+        return { outcome: 'done' };
+    const finished = async (result) => {
+        const address = 'address' in result ? result.address : null;
+        await pool.query(`insert into email.settings (key, value, updated_at) values ($1, $2::jsonb, now())
+       on conflict (key) do nothing`, [ENV_MAILBOX_ADOPTED_KEY, JSON.stringify({ outcome: result.outcome, address })]);
+        return result;
+    };
+    const address = env[LEGACY_USER_VAR]?.trim().toLowerCase();
+    if (!address)
+        return finished({ outcome: 'none' });
+    const { rows } = await pool.query(`select id::text as id, added_via from email.accounts where address = $1`, [address]);
+    const row = rows[0];
+    if (row !== undefined && row.added_via !== 'env')
+        return finished({ outcome: 'exists', address });
+    const name = secretNameFor(address);
+    if (vault === undefined) {
+        return { outcome: 'no-password', address, reason: 'this installation has no vault to keep its password in' };
+    }
+    const ownerValue = async (secretName) => {
+        const secret = await findSecret(pool, secretName);
+        if (secret === null)
+            return null;
+        const value = realValue(await vault.get(ownerSecretVaultName(secret.id)).catch(() => null));
+        return value === null ? null : { id: secret.id, value };
+    };
+    const resumed = await ownerValue(name);
+    const legacyOwner = resumed === null ? await ownerValue(LEGACY_PASSWORD_VAR) : null;
+    const rawVault = resumed === null && legacyOwner === null
+        ? realValue(await vault.get(LEGACY_PASSWORD_VAR).catch(() => null))
+        : null;
+    const value = resumed?.value ?? legacyOwner?.value ?? rawVault ?? realValue(env[LEGACY_PASSWORD_VAR]);
+    if (value === null) {
+        return { outcome: 'no-password', address, reason: `${LEGACY_PASSWORD_VAR} is not readable` };
+    }
+    // The row first when there is none, because the binding names its id; a
+    // password that cannot be kept takes a new row back out.
+    const inserted = row === undefined;
+    const accountId = row?.id ?? (await writeGmailAccount(pool, address)).id;
+    try {
+        if (legacyOwner !== null)
+            await renameOwnerSecret(pool, LEGACY_PASSWORD_VAR, name);
+        const kept = await putOwnerSecret(pool, vault, {
+            name,
+            value,
+            bindings: [{ kind: ACCOUNT_KIND, target: accountId, rule: 'pre-approved' }],
+        });
+        if ((await vault.get(ownerSecretVaultName(kept.id))) !== value) {
+            throw new Error(`the owner secret "${name}" did not read back`);
+        }
+    }
+    catch (err) {
+        if (inserted)
+            await pool.query(`delete from email.accounts where id = $1::uuid`, [accountId]).catch(() => { });
+        throw err;
+    }
+    // The row changes hands only now, with its password already where it looks.
+    await writeGmailAccount(pool, address);
+    if (rawVault !== null)
+        await vault.delete(LEGACY_PASSWORD_VAR).catch(() => false);
+    return finished({ outcome: 'adopted', address, accountId });
+}
 /** Move every mailbox password into an owner secret bound to its login. */
-export async function adoptMailboxSecrets(pool, vault, env) {
+export async function adoptMailboxSecrets(pool, vault) {
     const result = { outcomes: {}, problems: [] };
     if (vault === undefined) {
         result.problems.push('this installation has no vault, so mailbox passwords cannot become owner secrets');
@@ -113,14 +239,15 @@ export async function adoptMailboxSecrets(pool, vault, env) {
     for (const account of await listAccounts(pool, { enabledOnly: false })) {
         if (account.authMode !== 'app-password')
             continue;
+        // A row the old `.env` seed left and `adoptEnvMailbox` could not adopt:
+        // its password is not readable, and the page is where it comes back.
+        if (account.addedVia === 'env')
+            continue;
         try {
             result.outcomes[account.address] = await adoptVaultEntry(pool, vault, {
                 from: account.secretName,
                 name: account.secretName,
                 bindings: [{ kind: ACCOUNT_KIND, target: account.id, rule: 'pre-approved' }],
-                // The account `.env` names may still have its password there, the
-                // day-1 path. Adopted the same way; `.env` is the owner's file.
-                fallback: account.secretName === GMAIL_SECRET_NAME ? env[GMAIL_SECRET_NAME] : undefined,
             });
         }
         catch (err) {
@@ -143,7 +270,7 @@ export async function adoptMailboxSecrets(pool, vault, env) {
  *  - `BUDDI_VAULT_KEY`: every `createVault({ env: process.env })` made per
  *    request — provider settings and accounts, Telegram setup, the web token,
  *    recovery, backups. The file vault reads the key on each open.
- *  - `ANTHROPIC_API_KEY`, `CLAUDE_CODE_OAUTH_TOKEN`, `OPENAI_API_KEY`: provider
+ *  - `OPENAI_API_KEY`: provider
  *    resolution per agent (`providerFor`) and model-account reloads.
  *  - `TELEGRAM_BOT_TOKEN`: every `notifyOwner`, and Telegram started from the
  *    dashboard.
@@ -151,7 +278,8 @@ export async function adoptMailboxSecrets(pool, vault, env) {
  *  - `BUDDI_DB_PASSWORD`: assembled into `DATABASE_URL`, cleared with it.
  */
 export function mailboxSecretNames(env, accountSecretNames) {
-    const names = new Set([GMAIL_SECRET_NAME, ...accountSecretNames]);
+    // `GMAIL_APP_PASSWORD` too: nothing reads it after `adoptEnvMailbox`.
+    const names = new Set([LEGACY_PASSWORD_VAR, ...accountSecretNames]);
     for (const name of Object.keys(env))
         if (MAILBOX_SECRET_RE.test(name))
             names.add(name);
@@ -205,4 +333,98 @@ export async function adoptProviderAccountSecrets(pool, vault) {
     }
     return result;
 }
+/**
+ * A connection's pasted token (docs/connections.md, "Connect"), as an owner
+ * secret bound to core's `http.header` destination for that connection's host
+ * and header, pre-approved: the owner pasted it on that connection's own
+ * screen. A read is one recorded use through `useOwnerSecret`, answered only
+ * for the bound host and header — the same core-internal delivery the `http`
+ * area uses — so Settings → Secrets lists it, its last use and its binding.
+ */
+/**
+ * A program's secret variable (docs/connections.md, "A program on this
+ * computer"): `mcp.env`, under the connections plugin's own name. The target
+ * is the connection and the variable's name; the value goes into the
+ * program's environment when it starts, and nowhere else. Core never calls
+ * `deliver`: the connections service asks through `useOwnerSecret` with its
+ * own delivery, like `http.header`.
+ */
+export const MCP_ENV_KIND = 'mcp.env';
+function asEnvTarget(target) {
+    if (typeof target !== 'object' || target === null)
+        return undefined;
+    const { connection, variable } = target;
+    return typeof connection === 'string' && typeof variable === 'string' ? { connection, variable } : undefined;
+}
+export function registerMcpEnvDestination() {
+    registerSecretDestination('mcp', {
+        kind: MCP_ENV_KIND,
+        maxRule: 'pre-approved',
+        checkTarget(target, bound) {
+            const asked = asEnvTarget(target);
+            const kept = asEnvTarget(bound);
+            return asked !== undefined && kept !== undefined && asked.connection === kept.connection && asked.variable === kept.variable;
+        },
+        describe(target) {
+            const asked = asEnvTarget(target);
+            return asked === undefined ? 'a connected program\'s environment' : `the ${asked.variable} variable of a program on this computer`;
+        },
+        deliver() {
+            throw new Error('mcp.env delivers through the connections service itself, never through a destination');
+        },
+    });
+}
+export function connectionSecrets(pool, vault) {
+    if (vault === undefined)
+        return undefined;
+    const host = { version: '0.0', plugin: 'http' };
+    const mcpHost = { version: '0.0', plugin: 'mcp' };
+    registerMcpEnvDestination();
+    return {
+        async putEnv(name, value, target) {
+            await putOwnerSecret(pool, vault, {
+                name,
+                value,
+                bindings: [{ kind: MCP_ENV_KIND, target: { connection: target.connection, variable: target.variable }, rule: 'pre-approved' }],
+            });
+        },
+        async envValue(name, target) {
+            let value;
+            const result = await useOwnerSecret({ pool, vault, plugin: 'mcp', buddi: mcpHost, now: () => new Date(), deliverInto: (delivered) => { value = delivered; } }, { name, kind: MCP_ENV_KIND, target: { connection: target.connection, variable: target.variable } });
+            if ('done' in result && value !== undefined)
+                return value;
+            if ('pending' in result)
+                throw new Error(`"${name}" waits for the owner's approval.`);
+            throw new Error('refused' in result ? result.refused : `"${name}" was not delivered.`);
+        },
+        async put(name, value, target) {
+            await putOwnerSecret(pool, vault, {
+                name,
+                value,
+                bindings: [{ kind: 'http.header', target: { host: target.host.toLowerCase(), header: target.header }, rule: 'pre-approved' }],
+            });
+        },
+        async value(name, target) {
+            let value;
+            const result = await useOwnerSecret({
+                pool,
+                vault,
+                plugin: 'http',
+                buddi: host,
+                now: () => new Date(),
+                deliverInto: (delivered) => {
+                    value = delivered;
+                },
+            }, { name, kind: 'http.header', target: { host: target.host.toLowerCase(), header: target.header } });
+            if ('done' in result && value !== undefined)
+                return value;
+            if ('pending' in result)
+                throw new Error(`"${name}" waits for the owner's approval.`);
+            throw new Error('refused' in result ? result.refused : `"${name}" was not delivered.`);
+        },
+        async remove(name) {
+            await deleteOwnerSecret(pool, vault, name);
+        },
+    };
+}
 //# sourceMappingURL=owner-secrets.js.map

package/packages/gateway/dist/owner-secrets.js.map

@@ -1 +1 @@
-{"version":3,"file":"owner-secrets.js","sourceRoot":"","sources":["../src/owner-secrets.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EACL,eAAe,EACf,iBAAiB,EACjB,UAAU,EACV,oBAAoB,GAIrB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAGlF,kGAAkG;AAClG,MAAM,iBAAiB,GAAG,gCAAgC,CAAC;AAE3D;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,mBAAmB,CAAC;AAE1D,MAAM,UAAU,2BAA2B,CACzC,aAA+C;AAC/C,yFAAyF;AACzF,QAAgC;IAEhC,OAAO;QACL,IAAI,EAAE,sBAAsB;QAC5B,OAAO,EAAE,cAAc;QACvB,KAAK,CAAC,WAAW,CAAC,MAAM;YACtB,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,MAAM,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;QACrE,CAAC;QACD,QAAQ,CAAC,MAAM;YACb,OAAO,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC;QAC9E,CAAC;QACD,OAAO;YACL,sEAAsE;YACtE,qEAAqE;YACrE,yCAAyC;YACzC,MAAM,IAAI,KAAK,CAAC,oFAAoF,CAAC,CAAC;QACxG,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAY,EAAE,IAAyB;IACtE,MAAM,WAAW,GAAG,KAAK,EAAE,IAAY,EAA0B,EAAE;QACjE,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC5C,OAAO,MAAM,EAAE,EAAE,IAAI,IAAI,CAAC;IAC5B,CAAC,CAAC;IACF,OAAO;QACL,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,KAAK,CAAC,GAAG,CAAC,IAAI;YACZ,MAAM,EAAE,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC;YACnC,OAAO,EAAE,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,oBAAoB,CAAC,EAAE,CAAC,CAAC,CAAC;QAC7E,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK;YACnB,MAAM,EAAE,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC;YACnC,IAAI,EAAE,KAAK,IAAI;gBAAE,MAAM,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;;gBACzC,MAAM,KAAK,CAAC,GAAG,CAAC,oBAAoB,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;QACxD,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,IAAI;YACf,MAAM,EAAE,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC;YACnC,OAAO,EAAE,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,oBAAoB,CAAC,EAAE,CAAC,CAAC,CAAC;QACnF,CAAC;QACD,IAAI,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE;KACzB,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,IAAyB,EACzB,KAAwB,EACxB,SAA6B;IAE7B,IAAI,KAAK,KAAK,SAAS,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO;IAC3D,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IACnE,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,MAAM,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC9B,OAAO;IACT,CAAC;IACD,MAAM,iBAAiB,CAAC,IAAI,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;IACnE,6EAA6E;IAC7E,yBAAyB;IACzB,IAAI,CAAC,MAAM,KAAK,CAAC,GAAG,CAAC,oBAAoB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,sBAAsB,SAAS,uCAAuC,CAAC,CAAC;IAC1F,CAAC;AACH,CAAC;AASD,2EAA2E;AAC3E,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,IAAU,EACV,KAAwB,EACxB,GAAsB;IAEtB,MAAM,MAAM,GAAoB,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IAC/D,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,kFAAkF,CAAC,CAAC;QACzG,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,KAAK,MAAM,OAAO,IAAI,MAAM,YAAY,CAAC,IAAI,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QACvE,IAAI,OAAO,CAAC,QAAQ,KAAK,cAAc;YAAE,SAAS;QAClD,IAAI,CAAC;YACH,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,MAAM,eAAe,CAAC,IAAI,EAAE,KAAK,EAAE;gBACpE,IAAI,EAAE,OAAO,CAAC,UAAU;gBACxB,IAAI,EAAE,OAAO,CAAC,UAAU;gBACxB,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;gBAC5E,kEAAkE;gBAClE,gEAAgE;gBAChE,QAAQ,EAAE,OAAO,CAAC,UAAU,KAAK,iBAAiB,CAAC,CAAC,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,SAAS;aACxF,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,QAAQ,CAAC;YAC5C,MAAM,CAAC,QAAQ,CAAC,IAAI,CAClB,GAAG,OAAO,CAAC,OAAO,sCAAsC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAC5G,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,kBAAkB,CAAC,GAAsB,EAAE,kBAAqC;IAC9F,MAAM,KAAK,GAAG,IAAI,GAAG,CAAS,CAAC,iBAAiB,EAAE,GAAG,kBAAkB,CAAC,CAAC,CAAC;IAC1E,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,IAAI,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACvF,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,oBAAoB,CAAC,GAAsB,EAAE,KAAwB;IACnF,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC;YACpD,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC;YACjB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AASD;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,IAAU,EACV,KAAwB;IAExB,MAAM,MAAM,GAA4B,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IACvE,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,6FAA6F,CAAC,CAAC;QACpH,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAC/B;gEAC4D,CAC7D,CAAC;IACF,KAAK,MAAM,GAAG,IAAI,IAAyF,EAAE,CAAC;QAC5G,IAAI,GAAG,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;YAC3B,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,SAAS,CAAC;YACpC,SAAS;QACX,CAAC;QACD,IAAI,CAAC;YACH,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,eAAe,CAAC,IAAI,EAAE,KAAK,EAAE;gBAC3D,IAAI,EAAE,GAAG,CAAC,SAAS;gBACnB,IAAI,EAAE,GAAG,CAAC,SAAS;gBACnB,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,sBAAsB,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;aACnF,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC;YACnC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAClB,GAAG,GAAG,CAAC,KAAK,wCAAwC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CACxG,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}
+{"version":3,"file":"owner-secrets.js","sourceRoot":"","sources":["../src/owner-secrets.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,EACL,eAAe,EACf,iBAAiB,EACjB,UAAU,EACV,oBAAoB,EACpB,cAAc,EACd,yBAAyB,EACzB,iBAAiB,EACjB,iBAAiB,EACjB,cAAc,GAKf,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAIjG,kGAAkG;AAClG,MAAM,iBAAiB,GAAG,gCAAgC,CAAC;AAE3D;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,mBAAmB,CAAC;AAE1D,MAAM,UAAU,2BAA2B,CACzC,aAA+C;AAC/C,yFAAyF;AACzF,QAAgC;IAEhC,OAAO;QACL,IAAI,EAAE,sBAAsB;QAC5B,OAAO,EAAE,cAAc;QACvB,KAAK,CAAC,WAAW,CAAC,MAAM;YACtB,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,MAAM,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;QACrE,CAAC;QACD,QAAQ,CAAC,MAAM;YACb,OAAO,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC;QAC9E,CAAC;QACD,OAAO;YACL,sEAAsE;YACtE,qEAAqE;YACrE,yCAAyC;YACzC,MAAM,IAAI,KAAK,CAAC,oFAAoF,CAAC,CAAC;QACxG,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAY,EAAE,IAAyB;IACtE,MAAM,WAAW,GAAG,KAAK,EAAE,IAAY,EAA0B,EAAE;QACjE,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC5C,OAAO,MAAM,EAAE,EAAE,IAAI,IAAI,CAAC;IAC5B,CAAC,CAAC;IACF,OAAO;QACL,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,KAAK,CAAC,GAAG,CAAC,IAAI;YACZ,MAAM,EAAE,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC;YACnC,OAAO,EAAE,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,oBAAoB,CAAC,EAAE,CAAC,CAAC,CAAC;QAC7E,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK;YACnB,MAAM,EAAE,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC;YACnC,IAAI,EAAE,KAAK,IAAI;gBAAE,MAAM,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;;gBACzC,MAAM,KAAK,CAAC,GAAG,CAAC,oBAAoB,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;QACxD,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,IAAI;YACf,MAAM,EAAE,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC;YACnC,OAAO,EAAE,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,oBAAoB,CAAC,EAAE,CAAC,CAAC,CAAC;QACnF,CAAC;QACD,IAAI,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE;KACzB,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,IAAyB,EACzB,KAAwB,EACxB,SAA6B;IAE7B,IAAI,KAAK,KAAK,SAAS,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO;IAC3D,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IACnE,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,MAAM,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC9B,OAAO;IACT,CAAC;IACD,MAAM,iBAAiB,CAAC,IAAI,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;IACnE,6EAA6E;IAC7E,yBAAyB;IACzB,IAAI,CAAC,MAAM,KAAK,CAAC,GAAG,CAAC,oBAAoB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,sBAAsB,SAAS,uCAAuC,CAAC,CAAC;IAC1F,CAAC;AACH,CAAC;AAED,0GAA0G;AAC1G,MAAM,CAAC,MAAM,eAAe,GAAG,YAAY,CAAC;AAC5C,MAAM,CAAC,MAAM,mBAAmB,GAAG,oBAAoB,CAAC;AAExD;;;;GAIG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,qBAAqB,CAAC;AAc7D,+FAA+F;AAC/F,SAAS,SAAS,CAAC,GAA8B;IAC/C,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACzC,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAC;IACzD,IAAI,OAAO,KAAK,EAAE,IAAI,QAAQ,KAAK,iBAAiB;QAAE,OAAO,IAAI,CAAC;IAClE,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,IAAU,EACV,KAAwB,EACxB,GAAsB;IAEtB,IAAI,MAAiB,CAAC;IACtB,IAAI,CAAC;QACH,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,6CAA6C,EAAE,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC;IAClH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,yEAAyE;QACzE,yBAAyB;QACzB,IAAK,GAAyB,CAAC,IAAI,KAAK,OAAO,IAAK,GAAyB,CAAC,IAAI,KAAK,OAAO;YAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;QAC3H,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAClD,MAAM,QAAQ,GAAG,KAAK,EAAE,MAA0B,EAA+B,EAAE;QACjF,MAAM,OAAO,GAAG,SAAS,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;QAC5D,MAAM,IAAI,CAAC,KAAK,CACd;oCAC8B,EAC9B,CAAC,uBAAuB,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,CAChF,CAAC;QACF,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IAEF,MAAM,OAAO,GAAG,GAAG,CAAC,eAAe,CAAC,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3D,IAAI,CAAC,OAAO;QAAE,OAAO,QAAQ,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;IAEnD,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAC/B,yEAAyE,EACzE,CAAC,OAAO,CAAC,CACV,CAAC;IACF,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,SAAS,KAAK,KAAK;QAAE,OAAO,QAAQ,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;IAElG,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IACpC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,EAAE,wDAAwD,EAAE,CAAC;IAC/G,CAAC;IACD,MAAM,UAAU,GAAG,KAAK,EAAE,UAAkB,EAAiD,EAAE;QAC7F,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAClD,IAAI,MAAM,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QACjC,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,KAAK,CAAC,GAAG,CAAC,oBAAoB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5F,OAAO,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC;IAC1D,CAAC,CAAC;IACF,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,WAAW,GAAG,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,UAAU,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACpF,MAAM,QAAQ,GAAG,OAAO,KAAK,IAAI,IAAI,WAAW,KAAK,IAAI;QACvD,CAAC,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QACnE,CAAC,CAAC,IAAI,CAAC;IACT,MAAM,KAAK,GAAG,OAAO,EAAE,KAAK,IAAI,WAAW,EAAE,KAAK,IAAI,QAAQ,IAAI,SAAS,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC;IACtG,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,mBAAmB,kBAAkB,EAAE,CAAC;IAC/F,CAAC;IAED,wEAAwE;IACxE,yDAAyD;IACzD,MAAM,QAAQ,GAAG,GAAG,KAAK,SAAS,CAAC;IACnC,MAAM,SAAS,GAAG,GAAG,EAAE,EAAE,IAAI,CAAC,MAAM,iBAAiB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;IACzE,IAAI,CAAC;QACH,IAAI,WAAW,KAAK,IAAI;YAAE,MAAM,iBAAiB,CAAC,IAAI,EAAE,mBAAmB,EAAE,IAAI,CAAC,CAAC;QACnF,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,IAAI,EAAE,KAAK,EAAE;YAC7C,IAAI;YACJ,KAAK;YACL,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;SAC5E,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,KAAK,CAAC,GAAG,CAAC,oBAAoB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC;YAC/D,MAAM,IAAI,KAAK,CAAC,qBAAqB,IAAI,qBAAqB,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,QAAQ;YAAE,MAAM,IAAI,CAAC,KAAK,CAAC,gDAAgD,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAC9G,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,4EAA4E;IAC5E,MAAM,iBAAiB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACvC,IAAI,QAAQ,KAAK,IAAI;QAAE,MAAM,KAAK,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;IAClF,OAAO,QAAQ,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;AAC9D,CAAC;AASD,2EAA2E;AAC3E,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,IAAU,EACV,KAAwB;IAExB,MAAM,MAAM,GAAoB,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IAC/D,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,kFAAkF,CAAC,CAAC;QACzG,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,KAAK,MAAM,OAAO,IAAI,MAAM,YAAY,CAAC,IAAI,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QACvE,IAAI,OAAO,CAAC,QAAQ,KAAK,cAAc;YAAE,SAAS;QAClD,wEAAwE;QACxE,qEAAqE;QACrE,IAAI,OAAO,CAAC,QAAQ,KAAK,KAAK;YAAE,SAAS;QACzC,IAAI,CAAC;YACH,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,MAAM,eAAe,CAAC,IAAI,EAAE,KAAK,EAAE;gBACpE,IAAI,EAAE,OAAO,CAAC,UAAU;gBACxB,IAAI,EAAE,OAAO,CAAC,UAAU;gBACxB,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;aAC7E,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,QAAQ,CAAC;YAC5C,MAAM,CAAC,QAAQ,CAAC,IAAI,CAClB,GAAG,OAAO,CAAC,OAAO,sCAAsC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAC5G,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,kBAAkB,CAAC,GAAsB,EAAE,kBAAqC;IAC9F,sEAAsE;IACtE,MAAM,KAAK,GAAG,IAAI,GAAG,CAAS,CAAC,mBAAmB,EAAE,GAAG,kBAAkB,CAAC,CAAC,CAAC;IAC5E,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,IAAI,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACvF,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,oBAAoB,CAAC,GAAsB,EAAE,KAAwB;IACnF,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC;YACpD,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC;YACjB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AASD;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,IAAU,EACV,KAAwB;IAExB,MAAM,MAAM,GAA4B,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IACvE,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,6FAA6F,CAAC,CAAC;QACpH,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAC/B;gEAC4D,CAC7D,CAAC;IACF,KAAK,MAAM,GAAG,IAAI,IAAyF,EAAE,CAAC;QAC5G,IAAI,GAAG,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;YAC3B,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,SAAS,CAAC;YACpC,SAAS;QACX,CAAC;QACD,IAAI,CAAC;YACH,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,eAAe,CAAC,IAAI,EAAE,KAAK,EAAE;gBAC3D,IAAI,EAAE,GAAG,CAAC,SAAS;gBACnB,IAAI,EAAE,GAAG,CAAC,SAAS;gBACnB,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,sBAAsB,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;aACnF,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC;YACnC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAClB,GAAG,GAAG,CAAC,KAAK,wCAAwC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CACxG,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;GAOG;AACH;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,SAAS,CAAC;AAEtC,SAAS,WAAW,CAAC,MAAe;IAClC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IACpE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,MAAiC,CAAC;IACnE,OAAO,OAAO,UAAU,KAAK,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/G,CAAC;AAED,MAAM,UAAU,yBAAyB;IACvC,yBAAyB,CAAC,KAAK,EAAE;QAC/B,IAAI,EAAE,YAAY;QAClB,OAAO,EAAE,cAAc;QACvB,WAAW,CAAC,MAAM,EAAE,KAAK;YACvB,MAAM,KAAK,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;YAClC,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;YAChC,OAAO,KAAK,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI,CAAC,UAAU,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ,CAAC;QAC/H,CAAC;QACD,QAAQ,CAAC,MAAM;YACb,MAAM,KAAK,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;YAClC,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,oCAAoC,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,QAAQ,yCAAyC,CAAC;QACrI,CAAC;QACD,OAAO;YACL,MAAM,IAAI,KAAK,CAAC,sFAAsF,CAAC,CAAC;QAC1G,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,IAAU,EAAE,KAAwB;IACpE,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,MAAM,IAAI,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAA0B,CAAC;IACxE,MAAM,OAAO,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAA0B,CAAC;IAC1E,yBAAyB,EAAE,CAAC;IAC5B,OAAO;QACL,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM;YAC9B,MAAM,cAAc,CAAC,IAAI,EAAE,KAAK,EAAE;gBAChC,IAAI;gBACJ,KAAK;gBACL,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;aAC/H,CAAC,CAAC;QACL,CAAC;QACD,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM;YACzB,IAAI,KAAyB,CAAC;YAC9B,MAAM,MAAM,GAAG,MAAM,cAAc,CACjC,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,EAAE,WAAW,EAAE,CAAC,SAAS,EAAE,EAAE,GAAG,KAAK,GAAG,SAAS,CAAC,CAAC,CAAC,EAAE,EACzH,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAE,CACnG,CAAC;YACF,IAAI,MAAM,IAAI,MAAM,IAAI,KAAK,KAAK,SAAS;gBAAE,OAAO,KAAK,CAAC;YAC1D,IAAI,SAAS,IAAI,MAAM;gBAAE,MAAM,IAAI,KAAK,CAAC,IAAI,IAAI,mCAAmC,CAAC,CAAC;YACtF,MAAM,IAAI,KAAK,CAAC,SAAS,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,IAAI,sBAAsB,CAAC,CAAC;QACzF,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM;YAC3B,MAAM,cAAc,CAAC,IAAI,EAAE,KAAK,EAAE;gBAChC,IAAI;gBACJ,KAAK;gBACL,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;aAC9H,CAAC,CAAC;QACL,CAAC;QACD,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM;YACtB,IAAI,KAAyB,CAAC;YAC9B,MAAM,MAAM,GAAG,MAAM,cAAc,CACjC;gBACE,IAAI;gBACJ,KAAK;gBACL,MAAM,EAAE,MAAM;gBACd,KAAK,EAAE,IAAI;gBACX,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE;gBACrB,WAAW,EAAE,CAAC,SAAS,EAAE,EAAE;oBACzB,KAAK,GAAG,SAAS,CAAC;gBACpB,CAAC;aACF,EACD,EAAE,IAAI,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,EAAE,CAClG,CAAC;YACF,IAAI,MAAM,IAAI,MAAM,IAAI,KAAK,KAAK,SAAS;gBAAE,OAAO,KAAK,CAAC;YAC1D,IAAI,SAAS,IAAI,MAAM;gBAAE,MAAM,IAAI,KAAK,CAAC,IAAI,IAAI,mCAAmC,CAAC,CAAC;YACtF,MAAM,IAAI,KAAK,CAAC,SAAS,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,IAAI,sBAAsB,CAAC,CAAC;QACzF,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,IAAI;YACf,MAAM,iBAAiB,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QAC7C,CAAC;KACF,CAAC;AACJ,CAAC"}

package/packages/gateway/dist/plugins/stage.d.ts

@@ -101,6 +101,8 @@ export interface StagedPlugin {
         name: string;
         version: string;
     };
+    /** Where that record came from, when this update takes the new version from somewhere else. */
+    previousSource?: PluginSource;
     /**
      * The name the file had on the owner's machine, when this stage came from an
      * upload rather than from a path they typed.
@@ -137,6 +139,8 @@ export interface StageOptions {
     };
     /** Set by `updatePlugin`: the areas the installed version declared. */
     previousUses?: PluginUse[];
+    /** Set by `updatePlugin`: where the installed version came from. */
+    previousSource?: PluginSource;
     now?: () => Date;
     /** Skip the dependency install. Only the fixtures that have none use it. */
     skipDependencies?: boolean;