@withbuddi/buddi 0.1.0-pre.35 → 0.1.0-pre.37

package/packages/core/dist/plugin/sign-in.js

@@ -0,0 +1,54 @@
+/**
+ * A plugin's OAuth sign-in (host API 1.28, docs/plugin-host-api.md §4.2
+ * secrets, docs/owner-secrets.md §3 `http.bearer`).
+ *
+ * The providers a plugin may sign the owner in to, as data: where consent is
+ * asked, where tokens are exchanged and refreshed, and the hosts the tokens
+ * may be sent to. A plugin names a provider by id and never an endpoint, so a
+ * refresh token only ever goes back to the provider that issued it, and an
+ * access token only ever to that provider's API hosts.
+ *
+ * Pure: names, data and one error class a plugin can recognise.
+ */
+/**
+ * Google: a Desktop-app client (PKCE, a loopback redirect), offline access so
+ * a refresh token comes back, and consent asked every time so a second
+ * sign-in gets a refresh token too (Google gives one only on consent).
+ */
+export const OAUTH_PROVIDERS = {
+    google: {
+        label: 'Google',
+        authorizationEndpoint: 'https://accounts.google.com/o/oauth2/v2/auth',
+        tokenEndpoint: 'https://oauth2.googleapis.com/token',
+        authorizeExtra: { access_type: 'offline', prompt: 'consent', include_granted_scopes: 'false' },
+        apiHosts: ['www.googleapis.com'],
+    },
+};
+/**
+ * A request with `auth: { as: 'bearer' }` found the sign-in no longer works:
+ * the provider refused the refresh (revoked, expired — Google's testing-mode
+ * tokens last seven days — or the password changed). The owner signs in again;
+ * nothing a plugin retries will help. Recognise it by `code`, not `instanceof`:
+ * a plugin may load its own copy of this module.
+ */
+export class SignInExpiredError extends Error {
+    secret;
+    name = 'SignInExpiredError';
+    code = 'sign-in-expired';
+    constructor(secret, message = `the sign-in kept as "${secret}" no longer works; the owner signs in again`) {
+        super(message);
+        this.secret = secret;
+    }
+}
+export function isSignInExpired(err) {
+    return typeof err === 'object' && err !== null && err.code === 'sign-in-expired';
+}
+/** Whether a host is one a pattern names: the same, or under its `*.` domain. */
+export function oauthHostCovered(pattern, host) {
+    const p = pattern.toLowerCase();
+    const h = host.toLowerCase();
+    if (p.startsWith('*.'))
+        return h.endsWith(p.slice(1)) && h.length > p.length - 1;
+    return p === h;
+}
+//# sourceMappingURL=sign-in.js.map

package/packages/core/dist/plugin/sign-in.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sign-in.js","sourceRoot":"","sources":["../../src/plugin/sign-in.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAaH;;;;GAIG;AACH,MAAM,CAAC,MAAM,eAAe,GAA4C;IACtE,MAAM,EAAE;QACN,KAAK,EAAE,QAAQ;QACf,qBAAqB,EAAE,8CAA8C;QACrE,aAAa,EAAE,qCAAqC;QACpD,cAAc,EAAE,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,sBAAsB,EAAE,OAAO,EAAE;QAC9F,QAAQ,EAAE,CAAC,oBAAoB,CAAC;KACjC;CACF,CAAC;AAuCF;;;;;;GAMG;AACH,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAIhC;IAHO,IAAI,GAAG,oBAAoB,CAAC;IACrC,IAAI,GAAG,iBAAiB,CAAC;IAClC,YACW,MAAc,EACvB,OAAO,GAAG,wBAAwB,MAAM,6CAA6C;QAErF,KAAK,CAAC,OAAO,CAAC,CAAC;QAHN,WAAM,GAAN,MAAM,CAAQ;IAIzB,CAAC;CACF;AAED,MAAM,UAAU,eAAe,CAAC,GAAY;IAC1C,OAAO,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,IAAK,GAA0B,CAAC,IAAI,KAAK,iBAAiB,CAAC;AAC3G,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,gBAAgB,CAAC,OAAe,EAAE,IAAY;IAC5D,MAAM,CAAC,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IAChC,MAAM,CAAC,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IAC7B,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;IACjF,OAAO,CAAC,KAAK,CAAC,CAAC;AACjB,CAAC"}

package/packages/core/dist/plugin/uses.d.ts

@@ -11,7 +11,7 @@
  * Pure: names, the owner's words for each, and the comparisons.
  */
 /** Every area a plugin may declare. `files:library` is `files`, over the whole library. */
-export declare const PLUGIN_USES: readonly ["http", "accounts", "files", "files:library", "memory", "proposals", "schedule", "secrets", "owner:notify", "owner:channel", "owner:places"];
+export declare const PLUGIN_USES: readonly ["http", "accounts", "files", "files:library", "memory", "proposals", "schedule", "secrets", "owner:notify", "owner:channel", "owner:places", "assets"];
 export type PluginUse = (typeof PLUGIN_USES)[number];
 /**
  * The line the owner reads on the install card for each area, in the spec's

package/packages/core/dist/plugin/uses.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"uses.d.ts","sourceRoot":"","sources":["../../src/plugin/uses.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,2FAA2F;AAC3F,eAAO,MAAM,WAAW,wJAYd,CAAC;AAEX,MAAM,MAAM,SAAS,GAAG,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC;AAErD;;;;GAIG;AACH,eAAO,MAAM,gBAAgB,EAAE,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAYhE,CAAC;AAEF,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,SAAS,CAE9D;AAED;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAC7B,KAAK,EAAE,OAAO,EACd,KAAK,EAAE,MAAM,GACZ;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,SAAS,EAAE,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAiBlE;AAED,8DAA8D;AAC9D,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,SAAS,SAAS,EAAE,EAC5B,KAAK,EAAE,SAAS,SAAS,EAAE,GAC1B;IAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IAAC,OAAO,EAAE,SAAS,EAAE,CAAA;CAAE,CAK9C;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,SAAS,SAAS,EAAE,EAC9B,GAAG,EAAE,SAAS,SAAS,EAAE,GACxB,MAAM,GAAG,SAAS,CAQpB"}
+{"version":3,"file":"uses.d.ts","sourceRoot":"","sources":["../../src/plugin/uses.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,2FAA2F;AAC3F,eAAO,MAAM,WAAW,kKAad,CAAC;AAEX,MAAM,MAAM,SAAS,GAAG,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC;AAErD;;;;GAIG;AACH,eAAO,MAAM,gBAAgB,EAAE,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAahE,CAAC;AAEF,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,SAAS,CAE9D;AAED;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAC7B,KAAK,EAAE,OAAO,EACd,KAAK,EAAE,MAAM,GACZ;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,SAAS,EAAE,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAiBlE;AAED,8DAA8D;AAC9D,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,SAAS,SAAS,EAAE,EAC5B,KAAK,EAAE,SAAS,SAAS,EAAE,GAC1B;IAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IAAC,OAAO,EAAE,SAAS,EAAE,CAAA;CAAE,CAK9C;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,SAAS,SAAS,EAAE,EAC9B,GAAG,EAAE,SAAS,SAAS,EAAE,GACxB,MAAM,GAAG,SAAS,CAQpB"}

package/packages/core/dist/plugin/uses.js

@@ -23,6 +23,7 @@ export const PLUGIN_USES = [
     'owner:notify',
     'owner:channel',
     'owner:places',
+    'assets',
 ];
 /**
  * The line the owner reads on the install card for each area, in the spec's
@@ -41,6 +42,7 @@ export const PLUGIN_USE_WORDS = {
     'owner:notify': 'can send you messages when you are away',
     'owner:channel': 'adds a way for buddi to reach you',
     'owner:places': 'reads your places (Home, Work…) and their addresses',
+    assets: 'keeps small images it fetched, like logos',
 };
 export function isPluginUse(value) {
     return typeof value === 'string' && PLUGIN_USES.includes(value);

package/packages/core/dist/plugin/uses.js.map

@@ -1 +1 @@
-{"version":3,"file":"uses.js","sourceRoot":"","sources":["../../src/plugin/uses.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,2FAA2F;AAC3F,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,MAAM;IACN,UAAU;IACV,OAAO;IACP,eAAe;IACf,QAAQ;IACR,WAAW;IACX,UAAU;IACV,SAAS;IACT,cAAc;IACd,eAAe;IACf,cAAc;CACN,CAAC;AAIX;;;;GAIG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAwC;IACnE,IAAI,EAAE,oBAAoB;IAC1B,QAAQ,EAAE,+BAA+B;IACzC,KAAK,EAAE,mCAAmC;IAC1C,eAAe,EAAE,wCAAwC;IACzD,MAAM,EAAE,oDAAoD;IAC5D,SAAS,EAAE,gBAAgB;IAC3B,QAAQ,EAAE,6BAA6B;IACvC,OAAO,EAAE,8BAA8B;IACvC,cAAc,EAAE,yCAAyC;IACzD,eAAe,EAAE,mCAAmC;IACpD,cAAc,EAAE,qDAAqD;CACtE,CAAC;AAEF,MAAM,UAAU,WAAW,CAAC,KAAc;IACxC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAK,WAAiC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACzF,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,eAAe,CAC7B,KAAc,EACd,KAAa;IAEb,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IACzE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,KAAK,2DAA2D,EAAE,CAAC;IACrG,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3D,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EACL,GAAG,KAAK,UAAU,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU;gBAC5E,GAAG,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,eAAe,kBAAkB;gBAC9E,mBAAmB,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;SAC9C,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,KAAoB,CAAC,CAAC;IAC5C,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;AACzE,CAAC;AAED,8DAA8D;AAC9D,MAAM,UAAU,gBAAgB,CAC9B,MAA4B,EAC5B,KAA2B;IAE3B,OAAO;QACL,KAAK,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAChF,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;KACnF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAChC,MAAc,EACd,QAA8B,EAC9B,GAAyB;IAEzB,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,gBAAgB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC3D,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACjE,MAAM,IAAI,GAAG,CAAC,IAA0B,EAAU,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACvG,OAAO,CACL,WAAW,MAAM,2BAA2B,IAAI,CAAC,QAAQ,CAAC,yBAAyB,IAAI,CAAC,GAAG,CAAC,GAAG;QAC/F,iGAAiG,CAClG,CAAC;AACJ,CAAC"}
+{"version":3,"file":"uses.js","sourceRoot":"","sources":["../../src/plugin/uses.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,2FAA2F;AAC3F,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,MAAM;IACN,UAAU;IACV,OAAO;IACP,eAAe;IACf,QAAQ;IACR,WAAW;IACX,UAAU;IACV,SAAS;IACT,cAAc;IACd,eAAe;IACf,cAAc;IACd,QAAQ;CACA,CAAC;AAIX;;;;GAIG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAwC;IACnE,IAAI,EAAE,oBAAoB;IAC1B,QAAQ,EAAE,+BAA+B;IACzC,KAAK,EAAE,mCAAmC;IAC1C,eAAe,EAAE,wCAAwC;IACzD,MAAM,EAAE,oDAAoD;IAC5D,SAAS,EAAE,gBAAgB;IAC3B,QAAQ,EAAE,6BAA6B;IACvC,OAAO,EAAE,8BAA8B;IACvC,cAAc,EAAE,yCAAyC;IACzD,eAAe,EAAE,mCAAmC;IACpD,cAAc,EAAE,qDAAqD;IACrE,MAAM,EAAE,2CAA2C;CACpD,CAAC;AAEF,MAAM,UAAU,WAAW,CAAC,KAAc;IACxC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAK,WAAiC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACzF,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,eAAe,CAC7B,KAAc,EACd,KAAa;IAEb,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IACzE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,KAAK,2DAA2D,EAAE,CAAC;IACrG,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3D,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EACL,GAAG,KAAK,UAAU,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU;gBAC5E,GAAG,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,eAAe,kBAAkB;gBAC9E,mBAAmB,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;SAC9C,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,KAAoB,CAAC,CAAC;IAC5C,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;AACzE,CAAC;AAED,8DAA8D;AAC9D,MAAM,UAAU,gBAAgB,CAC9B,MAA4B,EAC5B,KAA2B;IAE3B,OAAO;QACL,KAAK,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAChF,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;KACnF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAChC,MAAc,EACd,QAA8B,EAC9B,GAAyB;IAEzB,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,gBAAgB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC3D,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACjE,MAAM,IAAI,GAAG,CAAC,IAA0B,EAAU,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACvG,OAAO,CACL,WAAW,MAAM,2BAA2B,IAAI,CAAC,QAAQ,CAAC,yBAAyB,IAAI,CAAC,GAAG,CAAC,GAAG;QAC/F,iGAAiG,CAClG,CAAC;AACJ,CAAC"}

package/packages/core/dist/plugin/version.d.ts

@@ -8,7 +8,7 @@
  * than this buddi has is refused when it is staged, before anything of it runs.
  */
 /** What this build's `ctx.buddi.version` says. */
-export declare const HOST_API_VERSION = "1.25";
+export declare const HOST_API_VERSION = "1.28";
 /**
  * Why a plugin asking for `range` cannot run on a host at `have`, or undefined
  * when it can.

package/packages/core/dist/plugin/version.js

@@ -8,7 +8,7 @@
  * than this buddi has is refused when it is staged, before anything of it runs.
  */
 /** What this build's `ctx.buddi.version` says. */
-export const HOST_API_VERSION = '1.25';
+export const HOST_API_VERSION = '1.28';
 function parseVersion(text) {
     const match = /^(\d+)(?:\.(\d+))?(?:\.\d+)?$/.exec(text.trim());
     if (match === null)

package/packages/core/dist/plugin-assets.d.ts

@@ -0,0 +1,21 @@
+import { type EnvLike } from './artifacts/store.js';
+import { type AssetImageCodec, type AssetSize, type PluginAsset } from './plugin/assets.js';
+export * from './plugin/assets.js';
+/** `<data>/plugin-assets`. */
+export declare function assetsRoot(env?: EnvLike): string;
+/** Every asset a plugin keeps, by key. */
+export declare function listPluginAssets(plugin: string, env?: EnvLike): Promise<PluginAsset[]>;
+/**
+ * Decode, re-encode and keep one asset under `key`, replacing what was
+ * there. Refused, as an `AssetRefusal` with the sentence why, for a bad key,
+ * an SVG, a type buddi does not read, more than 256 KB in, an image the codec
+ * cannot read, or a plugin over its 20 MB.
+ */
+export declare function putPluginAsset(plugin: string, key: string, bytes: Buffer, mime: string, codec: AssetImageCodec | undefined, env?: EnvLike): Promise<PluginAsset>;
+/** Delete one asset. False when there was none. */
+export declare function deletePluginAsset(plugin: string, key: string, env?: EnvLike): Promise<boolean>;
+/** The stored PNG for one size, or null when there is none. */
+export declare function readPluginAsset(plugin: string, key: string, size: AssetSize, env?: EnvLike): Promise<Buffer | null>;
+/** Remove every asset a plugin kept: when the plugin is removed. Never throws for a missing directory. */
+export declare function removePluginAssets(plugin: string, env?: EnvLike): Promise<void>;
+//# sourceMappingURL=plugin-assets.d.ts.map

package/packages/core/dist/plugin-assets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-assets.d.ts","sourceRoot":"","sources":["../src/plugin-assets.ts"],"names":[],"mappings":"AAmBA,OAAO,EAAkB,KAAK,OAAO,EAAE,MAAM,sBAAsB,CAAC;AACpE,OAAO,EAML,KAAK,eAAe,EACpB,KAAK,SAAS,EACd,KAAK,WAAW,EACjB,MAAM,oBAAoB,CAAC;AAE5B,cAAc,oBAAoB,CAAC;AAEnC,8BAA8B;AAC9B,wBAAgB,UAAU,CAAC,GAAG,GAAE,OAAqB,GAAG,MAAM,CAE7D;AAoBD,0CAA0C;AAC1C,wBAAsB,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,GAAE,OAAqB,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,CAyBzG;AAED;;;;;GAKG;AACH,wBAAsB,cAAc,CAClC,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,eAAe,GAAG,SAAS,EAClC,GAAG,GAAE,OAAqB,GACzB,OAAO,CAAC,WAAW,CAAC,CAwBtB;AAED,mDAAmD;AACnD,wBAAsB,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,GAAE,OAAqB,GAAG,OAAO,CAAC,OAAO,CAAC,CAajH;AAED,+DAA+D;AAC/D,wBAAsB,eAAe,CACnC,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,SAAS,EACf,GAAG,GAAE,OAAqB,GACzB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAQxB;AAED,0GAA0G;AAC1G,wBAAsB,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,GAAE,OAAqB,GAAG,OAAO,CAAC,IAAI,CAAC,CAElG"}

package/packages/core/dist/plugin-assets.js

@@ -0,0 +1,140 @@
+/**
+ * Plugin assets (host API 1.27, docs/plugin-host-api.md §4.2 `assets`): small
+ * images a plugin fetched — an outlet's logo — kept by core and served by
+ * buddi, so the dashboard draws them without ever reaching the host they
+ * came from.
+ *
+ * A plugin hands over bytes; core decodes them and writes PNGs it encoded
+ * itself, at 64 and 128 pixels, under `<data>/plugin-assets/<plugin>/`. Only
+ * those files are ever served (`/api/plugin-assets/<plugin>/<key>`), with
+ * `image/png`, `nosniff` and the sandboxing CSP: nothing a plugin wrote
+ * byte-for-byte reaches a page. The directory is core's, not the plugin's own
+ * (`dir`), and it is removed with the plugin.
+ *
+ * Decoding is not done here: core carries no image library. The composition
+ * root hands one in (`configurePluginHost({ images })`), as it hands in the
+ * HTTP transport; a process without one refuses `put` in a sentence.
+ */
+import { mkdir, readdir, readFile, rename, rm, stat, writeFile } from 'node:fs/promises';
+import path from 'node:path';
+import { resolveDataDir } from './artifacts/store.js';
+import { ASSET_QUOTA_BYTES, ASSET_SIZES, AssetRefusal, assetInputProblem, isAssetKey, } from './plugin/assets.js';
+export * from './plugin/assets.js';
+/** `<data>/plugin-assets`. */
+export function assetsRoot(env = process.env) {
+    return path.join(resolveDataDir(env), 'plugin-assets');
+}
+function pluginDir(plugin, env) {
+    if (!/^[a-z][a-z0-9_-]{0,63}$/.test(plugin))
+        throw new AssetRefusal(`"${plugin}" is not a plugin name`);
+    return path.join(assetsRoot(env), plugin);
+}
+function fileOf(dir, key, size) {
+    return path.join(dir, `${key}.${size}.png`);
+}
+function checkKey(key) {
+    if (!isAssetKey(key)) {
+        throw new AssetRefusal(`"${String(key)}" is not an asset key (lower-case letters, digits, ".", "_" and "-", at most 96 characters)`);
+    }
+    return key;
+}
+/** Every asset a plugin keeps, by key. */
+export async function listPluginAssets(plugin, env = process.env) {
+    const dir = pluginDir(plugin, env);
+    let names;
+    try {
+        names = await readdir(dir);
+    }
+    catch (err) {
+        if (err.code === 'ENOENT')
+            return [];
+        throw err;
+    }
+    const byKey = new Map();
+    for (const name of names.sort()) {
+        const match = /^(.+)\.(64|128)\.png$/.exec(name);
+        if (!match || !isAssetKey(match[1]))
+            continue;
+        const info = await stat(path.join(dir, name)).catch(() => null);
+        if (!info)
+            continue;
+        const key = match[1];
+        const seen = byKey.get(key);
+        const at = info.mtime.toISOString();
+        byKey.set(key, {
+            key,
+            bytes: (seen?.bytes ?? 0) + info.size,
+            updatedAt: seen && seen.updatedAt > at ? seen.updatedAt : at,
+        });
+    }
+    return [...byKey.values()];
+}
+/**
+ * Decode, re-encode and keep one asset under `key`, replacing what was
+ * there. Refused, as an `AssetRefusal` with the sentence why, for a bad key,
+ * an SVG, a type buddi does not read, more than 256 KB in, an image the codec
+ * cannot read, or a plugin over its 20 MB.
+ */
+export async function putPluginAsset(plugin, key, bytes, mime, codec, env = process.env) {
+    checkKey(key);
+    const problem = assetInputProblem(bytes, mime);
+    if (problem)
+        throw new AssetRefusal(`${plugin}: ${problem}`);
+    if (!codec)
+        throw new AssetRefusal('This process cannot keep plugin assets (no image codec was configured).');
+    const encoded = await codec.normalise(bytes, mime);
+    const dir = pluginDir(plugin, env);
+    const size = ASSET_SIZES.reduce((sum, s) => sum + (encoded[s]?.length ?? 0), 0);
+    const kept = await listPluginAssets(plugin, env);
+    const others = kept.filter((a) => a.key !== key).reduce((sum, a) => sum + a.bytes, 0);
+    if (others + size > ASSET_QUOTA_BYTES) {
+        throw new AssetRefusal(`${plugin} keeps ${others} bytes of assets; this one would pass its ${ASSET_QUOTA_BYTES / 1024 / 1024} MB (delete some first)`);
+    }
+    await mkdir(dir, { recursive: true });
+    for (const s of ASSET_SIZES) {
+        const png = encoded[s];
+        if (!png)
+            throw new AssetRefusal(`${plugin}: the image could not be drawn at ${s} px`);
+        // Written beside and renamed over: a page never reads half a file.
+        const target = fileOf(dir, key, s);
+        const temp = `${target}.${process.pid}.tmp`;
+        await writeFile(temp, png);
+        await rename(temp, target);
+    }
+    return { key, bytes: size, updatedAt: new Date().toISOString() };
+}
+/** Delete one asset. False when there was none. */
+export async function deletePluginAsset(plugin, key, env = process.env) {
+    checkKey(key);
+    const dir = pluginDir(plugin, env);
+    let removed = false;
+    for (const s of ASSET_SIZES) {
+        try {
+            await rm(fileOf(dir, key, s));
+            removed = true;
+        }
+        catch (err) {
+            if (err.code !== 'ENOENT')
+                throw err;
+        }
+    }
+    return removed;
+}
+/** The stored PNG for one size, or null when there is none. */
+export async function readPluginAsset(plugin, key, size, env = process.env) {
+    if (!isAssetKey(key) || !ASSET_SIZES.includes(size))
+        return null;
+    try {
+        return await readFile(fileOf(pluginDir(plugin, env), key, size));
+    }
+    catch (err) {
+        if (err.code === 'ENOENT' || err instanceof AssetRefusal)
+            return null;
+        throw err;
+    }
+}
+/** Remove every asset a plugin kept: when the plugin is removed. Never throws for a missing directory. */
+export async function removePluginAssets(plugin, env = process.env) {
+    await rm(pluginDir(plugin, env), { recursive: true, force: true });
+}
+//# sourceMappingURL=plugin-assets.js.map

package/packages/core/dist/plugin-assets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-assets.js","sourceRoot":"","sources":["../src/plugin-assets.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACzF,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,cAAc,EAAgB,MAAM,sBAAsB,CAAC;AACpE,OAAO,EACL,iBAAiB,EACjB,WAAW,EACX,YAAY,EACZ,iBAAiB,EACjB,UAAU,GAIX,MAAM,oBAAoB,CAAC;AAE5B,cAAc,oBAAoB,CAAC;AAEnC,8BAA8B;AAC9B,MAAM,UAAU,UAAU,CAAC,MAAe,OAAO,CAAC,GAAG;IACnD,OAAO,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,eAAe,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,SAAS,CAAC,MAAc,EAAE,GAAY;IAC7C,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,YAAY,CAAC,IAAI,MAAM,wBAAwB,CAAC,CAAC;IACxG,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;AAC5C,CAAC;AAED,SAAS,MAAM,CAAC,GAAW,EAAE,GAAW,EAAE,IAAe;IACvD,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,IAAI,IAAI,MAAM,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,QAAQ,CAAC,GAAY;IAC5B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,YAAY,CACpB,IAAI,MAAM,CAAC,GAAG,CAAC,6FAA6F,CAC7G,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,0CAA0C;AAC1C,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,MAAc,EAAE,MAAe,OAAO,CAAC,GAAG;IAC/E,MAAM,GAAG,GAAG,SAAS,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACnC,IAAI,KAAe,CAAC;IACpB,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,CAAC;QAChE,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAuB,CAAC;IAC7C,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;QAChC,MAAM,KAAK,GAAG,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjD,IAAI,CAAC,KAAK,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAAE,SAAS;QAC9C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAChE,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;QACtB,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5B,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;QACpC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE;YACb,GAAG;YACH,KAAK,EAAE,CAAC,IAAI,EAAE,KAAK,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI;YACrC,SAAS,EAAE,IAAI,IAAI,IAAI,CAAC,SAAS,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE;SAC7D,CAAC,CAAC;IACL,CAAC;IACD,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;AAC7B,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,MAAc,EACd,GAAW,EACX,KAAa,EACb,IAAY,EACZ,KAAkC,EAClC,MAAe,OAAO,CAAC,GAAG;IAE1B,QAAQ,CAAC,GAAG,CAAC,CAAC;IACd,MAAM,OAAO,GAAG,iBAAiB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAC/C,IAAI,OAAO;QAAE,MAAM,IAAI,YAAY,CAAC,GAAG,MAAM,KAAK,OAAO,EAAE,CAAC,CAAC;IAC7D,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,YAAY,CAAC,yEAAyE,CAAC,CAAC;IAC9G,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACnD,MAAM,GAAG,GAAG,SAAS,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACnC,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAChF,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACjD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACtF,IAAI,MAAM,GAAG,IAAI,GAAG,iBAAiB,EAAE,CAAC;QACtC,MAAM,IAAI,YAAY,CAAC,GAAG,MAAM,UAAU,MAAM,6CAA6C,iBAAiB,GAAG,IAAI,GAAG,IAAI,yBAAyB,CAAC,CAAC;IACzJ,CAAC;IACD,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtC,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACvB,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,YAAY,CAAC,GAAG,MAAM,qCAAqC,CAAC,KAAK,CAAC,CAAC;QACvF,mEAAmE;QACnE,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;QACnC,MAAM,IAAI,GAAG,GAAG,MAAM,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;QAC5C,MAAM,SAAS,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC3B,MAAM,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC7B,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;AACnE,CAAC;AAED,mDAAmD;AACnD,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,MAAc,EAAE,GAAW,EAAE,MAAe,OAAO,CAAC,GAAG;IAC7F,QAAQ,CAAC,GAAG,CAAC,CAAC;IACd,MAAM,GAAG,GAAG,SAAS,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACnC,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;QAC5B,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;YAC9B,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,GAAG,CAAC;QAClE,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,+DAA+D;AAC/D,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,MAAc,EACd,GAAW,EACX,IAAe,EACf,MAAe,OAAO,CAAC,GAAG;IAE1B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAE,WAAiC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACxF,IAAI,CAAC;QACH,OAAO,MAAM,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;IACnE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,IAAI,GAAG,YAAY,YAAY;YAAE,OAAO,IAAI,CAAC;QACjG,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,0GAA0G;AAC1G,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,MAAc,EAAE,MAAe,OAAO,CAAC,GAAG;IACjF,MAAM,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AACrE,CAAC"}

package/packages/core/dist/provider-accounts.d.ts

@@ -36,6 +36,13 @@ export declare function isMlxhAccount(row: {
     kind: string;
     baseUrl: string;
 }, mlxhBaseUrl?: string): boolean;
+/** Where Ollama answers on this machine, by default. */
+export declare const OLLAMA_LOCAL_PORT = "11434";
+/**
+ * Whether an address is the Ollama on this machine: any loopback address on
+ * Ollama's port. Ollama Cloud and an Ollama elsewhere on the network are not.
+ */
+export declare function isLocalOllamaUrl(baseUrl: string): boolean;
 export interface ProviderAccount {
     id: string;
     label: string;

package/packages/core/dist/provider-accounts.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"provider-accounts.d.ts","sourceRoot":"","sources":["../src/provider-accounts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgB,KAAK,YAAY,EAAE,KAAK,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAEvF,kFAAkF;AAClF,MAAM,MAAM,mBAAmB,GAAG,WAAW,GAAG,QAAQ,GAAG,mBAAmB,GAAG,OAAO,CAAC;AACzF,MAAM,MAAM,mBAAmB,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,GAAG,iBAAiB,GAAG,YAAY,CAAC;AAEpG;;;;GAIG;AACH,eAAO,MAAM,wBAAwB,0BAA0B,CAAC;AAEhE;;;;;GAKG;AACH,eAAO,MAAM,eAAe,6DAA6D,CAAC;AAC1F,eAAO,MAAM,cAAc,uCAAuC,CAAC;AAEnE;;;;GAIG;AACH,eAAO,MAAM,aAAa,6BAA6B,CAAC;AACxD;;;;GAIG;AACH,eAAO,MAAM,8BAA8B,OAAO,CAAC;AAEnD;;;GAGG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,EAAE,WAAW,GAAE,MAAsB,GAAG,OAAO,CAQlH;AACD,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,mBAAmB,CAAC;IAC1B,IAAI,EAAE,mBAAmB,CAAC;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;;;OAMG;IACH,mBAAmB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACrC;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,mBAAmB,GAAG,YAAY,CAEvE;AAED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,mBAAmB,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAIhG;AAED,oFAAoF;AACpF,wBAAgB,cAAc,CAAC,IAAI,EAAE,mBAAmB,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAahF;AAED,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,gBAAgB,CAqBvH;AAED;;;GAGG;AACH,MAAM,WAAW,sBAAsB;IACrC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,mBAAmB,CAAC;IAC1B,OAAO,EAAE,OAAO,CAAC;IACjB,wDAAwD;IACxD,UAAU,EAAE,OAAO,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC7B;AAED,0EAA0E;AAC1E,MAAM,WAAW,iBAAiB;IAChC,gFAAgF;IAChF,MAAM,EAAE,MAAM,CAAC;IACf,oCAAoC;IACpC,UAAU,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,UAAU,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACvD,IAAI,CAAC,EAAE,WAAW,GAAG,WAAW,GAAG,WAAW,CAAC;IAC/C,yFAAyF;IACzF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,2FAA2F;AAC3F,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,sBAAsB;IACrC,IAAI,IAAI,sBAAsB,EAAE,CAAC;IACjC;;;OAGG;IACH,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC3F;;;;OAIG;IACH,gBAAgB,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,YAAY,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACrH;;;;OAIG;IACH,kBAAkB,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;CACxF"}
+{"version":3,"file":"provider-accounts.d.ts","sourceRoot":"","sources":["../src/provider-accounts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgB,KAAK,YAAY,EAAE,KAAK,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAEvF,kFAAkF;AAClF,MAAM,MAAM,mBAAmB,GAAG,WAAW,GAAG,QAAQ,GAAG,mBAAmB,GAAG,OAAO,CAAC;AACzF,MAAM,MAAM,mBAAmB,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,GAAG,iBAAiB,GAAG,YAAY,CAAC;AAEpG;;;;GAIG;AACH,eAAO,MAAM,wBAAwB,0BAA0B,CAAC;AAEhE;;;;;GAKG;AACH,eAAO,MAAM,eAAe,6DAA6D,CAAC;AAC1F,eAAO,MAAM,cAAc,uCAAuC,CAAC;AAEnE;;;;GAIG;AACH,eAAO,MAAM,aAAa,6BAA6B,CAAC;AACxD;;;;GAIG;AACH,eAAO,MAAM,8BAA8B,OAAO,CAAC;AAEnD;;;GAGG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,EAAE,WAAW,GAAE,MAAsB,GAAG,OAAO,CAQlH;AACD,wDAAwD;AACxD,eAAO,MAAM,iBAAiB,UAAU,CAAC;AAEzC;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAOzD;AAED,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,mBAAmB,CAAC;IAC1B,IAAI,EAAE,mBAAmB,CAAC;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;;;OAMG;IACH,mBAAmB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACrC;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,mBAAmB,GAAG,YAAY,CAEvE;AAED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,mBAAmB,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAIhG;AAED,oFAAoF;AACpF,wBAAgB,cAAc,CAAC,IAAI,EAAE,mBAAmB,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAahF;AAED,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,gBAAgB,CAqBvH;AAED;;;GAGG;AACH,MAAM,WAAW,sBAAsB;IACrC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,mBAAmB,CAAC;IAC1B,OAAO,EAAE,OAAO,CAAC;IACjB,wDAAwD;IACxD,UAAU,EAAE,OAAO,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC7B;AAED,0EAA0E;AAC1E,MAAM,WAAW,iBAAiB;IAChC,gFAAgF;IAChF,MAAM,EAAE,MAAM,CAAC;IACf,oCAAoC;IACpC,UAAU,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,UAAU,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACvD,IAAI,CAAC,EAAE,WAAW,GAAG,WAAW,GAAG,WAAW,CAAC;IAC/C,yFAAyF;IACzF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,2FAA2F;AAC3F,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,sBAAsB;IACrC,IAAI,IAAI,sBAAsB,EAAE,CAAC;IACjC;;;OAGG;IACH,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC3F;;;;OAIG;IACH,gBAAgB,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,YAAY,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACrH;;;;OAIG;IACH,kBAAkB,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;CACxF"}

package/packages/core/dist/provider-accounts.js

@@ -43,6 +43,21 @@ export function isMlxhAccount(row, mlxhBaseUrl = MLXH_BASE_URL) {
         return false;
     }
 }
+/** Where Ollama answers on this machine, by default. */
+export const OLLAMA_LOCAL_PORT = '11434';
+/**
+ * Whether an address is the Ollama on this machine: any loopback address on
+ * Ollama's port. Ollama Cloud and an Ollama elsewhere on the network are not.
+ */
+export function isLocalOllamaUrl(baseUrl) {
+    try {
+        const url = new URL(baseUrl);
+        return ['localhost', '127.0.0.1', '[::1]'].includes(url.hostname) && url.port === OLLAMA_LOCAL_PORT;
+    }
+    catch {
+        return false;
+    }
+}
 export function accountProtocol(kind) {
     return kind === 'anthropic' ? 'anthropic' : 'openai';
 }

package/packages/core/dist/provider-accounts.js.map

@@ -1 +1 @@
-{"version":3,"file":"provider-accounts.js","sourceRoot":"","sources":["../src/provider-accounts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAA4C,MAAM,eAAe,CAAC;AAMvF;;;;GAIG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,uBAAuB,CAAC;AAEhE;;;;;GAKG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,0DAA0D,CAAC;AAC1F,MAAM,CAAC,MAAM,cAAc,GAAG,oCAAoC,CAAC;AAEnE;;;;GAIG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,0BAA0B,CAAC;AACxD;;;;GAIG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,IAAI,CAAC;AAEnD;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,GAAsC,EAAE,cAAsB,aAAa;IACvG,IAAI,GAAG,CAAC,IAAI,KAAK,mBAAmB;QAAE,OAAO,KAAK,CAAC;IACnD,MAAM,IAAI,GAAG,CAAC,GAAW,EAAU,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC9D,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC,aAAa,CAAC;QAAE,OAAO,IAAI,CAAC;IACtG,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACjC,OAAO,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM,CAAC;IAC3F,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,KAAK,CAAC;IAAC,CAAC;AAC3B,CAAC;AAoBD,MAAM,UAAU,eAAe,CAAC,IAAyB;IACvD,OAAO,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC;AACvD,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,IAAyB,EAAE,KAAa;IAC1E,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,4CAA4C,CAAC;IAC9H,8EAA8E;IAC9E,OAAO,IAAI,KAAK,mBAAmB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC;AAC/F,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,cAAc,CAAC,IAAyB,EAAE,KAAc;IACtE,MAAM,KAAK,GAAG,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,2BAA2B,CAAC;IAC1I,IAAI,IAAI,KAAK,mBAAmB,EAAE,CAAC;QACjC,IAAI,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,KAAK,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;QAC7H,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QAAC,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IAAC,CAAC;IACjG,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;IAChJ,MAAM,QAAQ,GAAG,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC5E,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,QAAQ,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IACnJ,IAAI,GAAG,CAAC,QAAQ,KAAK,GAAG;QAAE,GAAG,CAAC,QAAQ,GAAG,KAAK,CAAC;IAC/C,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAC5C,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,OAAwB,EAAE,KAAa,EAAE,MAAqB;IACnG,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,yFAAyF,CAAC,CAAC;IACvK,IAAI,CAAC,OAAO,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACvE,MAAM,OAAO,GAAG,mBAAmB,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACzD,IAAI,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;IACtC,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,KAAK,iBAAiB,CAAC;IACxD,IAAI,YAAY,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW;QAAE,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;IAC/H,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,CAAC,IAAI,KAAK,mBAAmB;QAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC7H,IAAI,OAAO,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QAClC,IAAI,OAAO,CAAC,IAAI,KAAK,mBAAmB,IAAI,cAAc,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,wBAAwB;YAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;QACvL,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QAC3E,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,wBAAwB,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;IAClJ,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;IAClI,OAAO;QACL,IAAI,EAAE,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC;QACnC,OAAO,EAAE,cAAc,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC;QACtD,cAAc,EAAE,YAAY,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS;QAC/D,MAAM,EAAE,MAAM,IAAI,EAAE,EAAE,KAAK;QAC3B,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,mBAAmB,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACtE,CAAC;AACJ,CAAC"}
+{"version":3,"file":"provider-accounts.js","sourceRoot":"","sources":["../src/provider-accounts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAA4C,MAAM,eAAe,CAAC;AAMvF;;;;GAIG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,uBAAuB,CAAC;AAEhE;;;;;GAKG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,0DAA0D,CAAC;AAC1F,MAAM,CAAC,MAAM,cAAc,GAAG,oCAAoC,CAAC;AAEnE;;;;GAIG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,0BAA0B,CAAC;AACxD;;;;GAIG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,IAAI,CAAC;AAEnD;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,GAAsC,EAAE,cAAsB,aAAa;IACvG,IAAI,GAAG,CAAC,IAAI,KAAK,mBAAmB;QAAE,OAAO,KAAK,CAAC;IACnD,MAAM,IAAI,GAAG,CAAC,GAAW,EAAU,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC9D,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC,aAAa,CAAC;QAAE,OAAO,IAAI,CAAC;IACtG,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACjC,OAAO,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM,CAAC;IAC3F,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,KAAK,CAAC;IAAC,CAAC;AAC3B,CAAC;AACD,wDAAwD;AACxD,MAAM,CAAC,MAAM,iBAAiB,GAAG,OAAO,CAAC;AAEzC;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAe;IAC9C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;QAC7B,OAAO,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,IAAI,KAAK,iBAAiB,CAAC;IACtG,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAqBD,MAAM,UAAU,eAAe,CAAC,IAAyB;IACvD,OAAO,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC;AACvD,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,IAAyB,EAAE,KAAa;IAC1E,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,4CAA4C,CAAC;IAC9H,8EAA8E;IAC9E,OAAO,IAAI,KAAK,mBAAmB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC;AAC/F,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,cAAc,CAAC,IAAyB,EAAE,KAAc;IACtE,MAAM,KAAK,GAAG,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,2BAA2B,CAAC;IAC1I,IAAI,IAAI,KAAK,mBAAmB,EAAE,CAAC;QACjC,IAAI,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,KAAK,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;QAC7H,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QAAC,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IAAC,CAAC;IACjG,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;IAChJ,MAAM,QAAQ,GAAG,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC5E,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,QAAQ,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IACnJ,IAAI,GAAG,CAAC,QAAQ,KAAK,GAAG;QAAE,GAAG,CAAC,QAAQ,GAAG,KAAK,CAAC;IAC/C,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAC5C,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,OAAwB,EAAE,KAAa,EAAE,MAAqB;IACnG,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,yFAAyF,CAAC,CAAC;IACvK,IAAI,CAAC,OAAO,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACvE,MAAM,OAAO,GAAG,mBAAmB,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACzD,IAAI,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;IACtC,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,KAAK,iBAAiB,CAAC;IACxD,IAAI,YAAY,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW;QAAE,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;IAC/H,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,CAAC,IAAI,KAAK,mBAAmB;QAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC7H,IAAI,OAAO,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QAClC,IAAI,OAAO,CAAC,IAAI,KAAK,mBAAmB,IAAI,cAAc,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,wBAAwB;YAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;QACvL,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QAC3E,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,wBAAwB,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;IAClJ,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;IAClI,OAAO;QACL,IAAI,EAAE,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC;QACnC,OAAO,EAAE,cAAc,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC;QACtD,cAAc,EAAE,YAAY,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS;QAC/D,MAAM,EAAE,MAAM,IAAI,EAAE,EAAE,KAAK;QAC3B,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,mBAAmB,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACtE,CAAC;AACJ,CAAC"}

package/packages/core/dist/questions/types.d.ts

@@ -1,5 +1,5 @@
 export declare const QUESTION_TTL_MS: number;
-export declare const MAX_QUESTION_OPTIONS = 5;
+export declare const MAX_QUESTION_OPTIONS = 6;
 export declare const MAX_QUESTION_LABEL = 48;
 export interface QuestionOption {
     id: string;

package/packages/core/dist/questions/types.js

@@ -1,5 +1,5 @@
 export const QUESTION_TTL_MS = 30 * 60_000;
-export const MAX_QUESTION_OPTIONS = 5;
+export const MAX_QUESTION_OPTIONS = 6;
 export const MAX_QUESTION_LABEL = 48;
 export const QUESTION_COLUMNS = 'id, agent_id, conversation_id, question, options, allow_other, created_at, expires_at, answered_at, answered_via, answer';
 const iso = (value) => value == null ? null : value instanceof Date ? value.toISOString() : String(value);

package/packages/core/dist/queue/jobs.d.ts

@@ -9,8 +9,10 @@
  *    `lease_owner = $worker and state = 'leased'`. That is the fence: a worker
  *    whose lease expired and was reclaimed elsewhere updates nothing and is
  *    told so (`false` / `null`), instead of writing over the new owner's run.
- *  - `releaseStaleLeases` is startup recovery *and* the running sweep — a lease
- *    that outlived its process goes back to `pending` with its attempt spent.
+ *  - `interruptLeases` is startup recovery, the running sweep and the
+ *    shutdown release — a lease that outlived its run is settled: requeued
+ *    once when the run had done nothing yet, failed with the reason otherwise.
+ *    (`releaseStaleLeases` is the older, unconditional put-back.)
  */
 import type { Pool } from 'pg';
 import { type FailureClass } from './retry-policy.js';
@@ -114,6 +116,59 @@ export declare function resumeJob(pool: Pool, jobId: string, input?: ResumeInput
  * process that dies mid-job cannot loop forever on the installation's behalf.
  */
 export declare function releaseStaleLeases(pool: Pool, now: Date): Promise<number>;
+/** Why a lease is being taken back from a run that never finished. */
+export declare const INTERRUPTED_REASON = "interrupted by a restart";
+export type InterruptScope = 
+/** Every lease whose expiry passed: the holder stopped heartbeating. */
+{
+    expiredBy: Date;
+}
+/**
+ * Start-up recovery: every lease that expired, and every lease held by a
+ * previous boot of this worker family (`holderPrefix`), whatever its expiry —
+ * a restart takes seconds, the lease lasts minutes, and the process that
+ * held it is gone either way.
+ */
+ | {
+    expiredBy: Date;
+    self: string;
+    holderPrefix: string;
+}
+/** Graceful shutdown: the leases this worker holds. */
+ | {
+    heldBy: string;
+};
+export type InterruptedJob = Job & {
+    /** True when the job went back on the queue; false when it failed for the owner. */
+    requeued: boolean;
+    /** Non-auto tools this attempt had already called (its side effects). */
+    acted: string[];
+};
+/**
+ * Take back the leases of runs that will never report, and settle each one.
+ *
+ * The retry policy is the run's own record: an attempt that had not yet
+ * called a tool with an effect (any tier but `auto`, or an `auto` tool marked
+ * `sideEffect`, read from the `tool.called` events carrying this job's id
+ * since its latest claim) and whose report was not delivered (a
+ * `mission.delivered` event for its occurrence or conversation) goes
+ * back on the queue — once. One that had acted, or that was already requeued
+ * after an interruption, or that has no attempts left, fails with the reason in
+ * `last_error`, where Activity → Jobs shows it; a mission occurrence it was
+ * running is closed as failed with the same reason. Nothing is re-run that
+ * might send, buy or write a second time without the owner deciding.
+ *
+ * Every write is fenced on the holder the candidate query saw, so a lease
+ * reclaimed in between is left alone. The attempt stays spent.
+ */
+export declare function interruptLeases(pool: Pool, scope: InterruptScope, detail?: string, opts?: {
+    /**
+     * False when the attempt may still be running in this process (its
+     * handler ignored the stop): putting it back would let the next start run
+     * it beside the one still going, so it fails instead.
+     */
+    requeue?: boolean;
+}): Promise<InterruptedJob[]>;
 /**
  * Stop a job for good. Anything not already finished can be cancelled, and so
  * can a failed one: "failed" is the queue waiting for a human, and giving up

package/packages/core/dist/queue/jobs.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"jobs.d.ts","sourceRoot":"","sources":["../../src/queue/jobs.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC;AAG/B,OAAO,EAIL,KAAK,YAAY,EAClB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAOL,KAAK,GAAG,EAER,KAAK,QAAQ,EACd,MAAM,YAAY,CAAC;AAEpB,MAAM,MAAM,YAAY,GAAG;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,IAAI,CAAC;IAChB;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,CAAC;AAEF,kEAAkE;AAClE,wBAAsB,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,CAiC3E;AAED,MAAM,MAAM,UAAU,GAAG;IACvB,+EAA+E;IAC/E,MAAM,EAAE,MAAM,CAAC;IACf,kDAAkD;IAClD,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1B,GAAG,EAAE,IAAI,CAAC;IACV,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF;;;;;GAKG;AACH,wBAAsB,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,CAkCjF;AAED;;;;GAIG;AACH,wBAAsB,SAAS,CAC7B,IAAI,EAAE,IAAI,EACV,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,OAAO,CAAC,CASlB;AAED,yDAAyD;AACzD,wBAAsB,WAAW,CAC/B,IAAI,EAAE,IAAI,EACV,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,EACd,MAAM,CAAC,EAAE,OAAO,GACf,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,CAsBrB;AAED,MAAM,MAAM,SAAS,GAAG;IACtB,qEAAqE;IACrE,KAAK,EAAE,OAAO,CAAC;IACf,uEAAuE;IACvE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,cAAc,CAAC,EAAE;QAAE,KAAK,EAAE,YAAY,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;CAC1D,CAAC;AAEF;;;;GAIG;AACH,wBAAsB,OAAO,CAC3B,IAAI,EAAE,IAAI,EACV,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,EACb,KAAK,GAAE,SAA2B,GACjC,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,CA0CrB;AAED;;;;GAIG;AACH,MAAM,MAAM,YAAY,GAAG;IACzB;;;;;OAKG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACxC,CAAC;AAEF,wBAAsB,UAAU,CAC9B,IAAI,EAAE,IAAI,EACV,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,IAAI,GAAE,YAAiB,GACtB,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,CAuBrB;AAED,MAAM,MAAM,WAAW,GAAG;IACxB;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,sEAAsE;IACtE,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB,CAAC;AAEF,6CAA6C;AAC7C,wBAAsB,SAAS,CAC7B,IAAI,EAAE,IAAI,EACV,KAAK,EAAE,MAAM,EACb,KAAK,GAAE,WAAgB,GACtB,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,CAwBrB;AAED;;;;;GAKG;AACH,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAqB/E;AAED;;;;GAIG;AACH,wBAAsB,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,CAoB9E;AAED;;;;;;;;GAQG;AACH,wBAAsB,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,CA2B7E;AAED,wBAAsB,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,CAM3E;AAED,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,CAMxF;AAED,MAAM,MAAM,aAAa,GAAG;IAC1B,KAAK,CAAC,EAAE,QAAQ,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,yCAAyC;IACzC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,GAAG,WAAW,CAAC;IAC9B,0FAA0F;IAC1F,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB,CAAC;AAEF,kDAAkD;AAClD,wBAAsB,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,GAAE,aAAkB,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,CAcpF;AAED,MAAM,WAAW,iBAAiB;IAChC,gEAAgE;IAChE,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1B,uDAAuD;IACvD,KAAK,EAAE,IAAI,CAAC;IACZ;;;;;OAKG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,qDAAqD;IACrD,KAAK,CAAC,EAAE,IAAI,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;GAMG;AACH,wBAAsB,YAAY,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,CAuBvF;AAED;;;;;;GAMG;AACH,wBAAsB,SAAS,CAC7B,IAAI,EAAE,IAAI,EACV,KAAK,GAAE;IACL,KAAK,CAAC,EAAE,QAAQ,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,wEAAwE;IACxE,GAAG,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACxB,qFAAqF;IACrF,MAAM,CAAC,EAAE,MAAM,GAAG,WAAW,CAAC;CAC1B,GACL,OAAO,CAAC,GAAG,EAAE,CAAC,CA6ChB;AAED;;;;;;GAMG;AACH,MAAM,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,GAAG;IAAE,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC;AAEzE,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,SAAS,CAAC,CAiBrE;AAED;;;;;;GAMG;AACH,wBAAsB,WAAW,CAC/B,IAAI,EAAE,IAAI,EACV,KAAK,EAAE;IAAE,GAAG,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAAC,GAAG,CAAC,EAAE,OAAO,CAAC;IAAC,EAAE,CAAC,EAAE,MAAM,CAAA;CAAE,GAC7D,OAAO,CAAC,GAAG,EAAE,CAAC,CAehB;AAED,sEAAsE;AACtE,wBAAsB,aAAa,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,CAYtF"}
+{"version":3,"file":"jobs.d.ts","sourceRoot":"","sources":["../../src/queue/jobs.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC;AAG/B,OAAO,EAIL,KAAK,YAAY,EAClB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAOL,KAAK,GAAG,EAER,KAAK,QAAQ,EACd,MAAM,YAAY,CAAC;AAEpB,MAAM,MAAM,YAAY,GAAG;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,IAAI,CAAC;IAChB;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,CAAC;AAEF,kEAAkE;AAClE,wBAAsB,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,CAiC3E;AAED,MAAM,MAAM,UAAU,GAAG;IACvB,+EAA+E;IAC/E,MAAM,EAAE,MAAM,CAAC;IACf,kDAAkD;IAClD,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1B,GAAG,EAAE,IAAI,CAAC;IACV,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF;;;;;GAKG;AACH,wBAAsB,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,CAkCjF;AAED;;;;GAIG;AACH,wBAAsB,SAAS,CAC7B,IAAI,EAAE,IAAI,EACV,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,OAAO,CAAC,CASlB;AAED,yDAAyD;AACzD,wBAAsB,WAAW,CAC/B,IAAI,EAAE,IAAI,EACV,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,EACd,MAAM,CAAC,EAAE,OAAO,GACf,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,CAsBrB;AAED,MAAM,MAAM,SAAS,GAAG;IACtB,qEAAqE;IACrE,KAAK,EAAE,OAAO,CAAC;IACf,uEAAuE;IACvE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,cAAc,CAAC,EAAE;QAAE,KAAK,EAAE,YAAY,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;CAC1D,CAAC;AAEF;;;;GAIG;AACH,wBAAsB,OAAO,CAC3B,IAAI,EAAE,IAAI,EACV,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,EACb,KAAK,GAAE,SAA2B,GACjC,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,CA0CrB;AAED;;;;GAIG;AACH,MAAM,MAAM,YAAY,GAAG;IACzB;;;;;OAKG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACxC,CAAC;AAEF,wBAAsB,UAAU,CAC9B,IAAI,EAAE,IAAI,EACV,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,IAAI,GAAE,YAAiB,GACtB,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,CAuBrB;AAED,MAAM,MAAM,WAAW,GAAG;IACxB;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,sEAAsE;IACtE,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB,CAAC;AAEF,6CAA6C;AAC7C,wBAAsB,SAAS,CAC7B,IAAI,EAAE,IAAI,EACV,KAAK,EAAE,MAAM,EACb,KAAK,GAAE,WAAgB,GACtB,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,CAwBrB;AAED;;;;;GAKG;AACH,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAqB/E;AAED,sEAAsE;AACtE,eAAO,MAAM,kBAAkB,6BAA6B,CAAC;AAE7D,MAAM,MAAM,cAAc;AACxB,wEAAwE;AACtE;IAAE,SAAS,EAAE,IAAI,CAAA;CAAE;AACrB;;;;;GAKG;GACD;IAAE,SAAS,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE;AACzD,uDAAuD;GACrD;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEvB,MAAM,MAAM,cAAc,GAAG,GAAG,GAAG;IACjC,oFAAoF;IACpF,QAAQ,EAAE,OAAO,CAAC;IAClB,yEAAyE;IACzE,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB,CAAC;AAEF;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,eAAe,CACnC,IAAI,EAAE,IAAI,EACV,KAAK,EAAE,cAAc,EACrB,MAAM,CAAC,EAAE,MAAM,EACf,IAAI,GAAE;IACJ;;;;OAIG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;CACd,GACL,OAAO,CAAC,cAAc,EAAE,CAAC,CAkH3B;AAED;;;;GAIG;AACH,wBAAsB,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,CAoB9E;AAED;;;;;;;;GAQG;AACH,wBAAsB,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,CA2B7E;AAED,wBAAsB,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,CAM3E;AAED,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,CAMxF;AAED,MAAM,MAAM,aAAa,GAAG;IAC1B,KAAK,CAAC,EAAE,QAAQ,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,yCAAyC;IACzC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,GAAG,WAAW,CAAC;IAC9B,0FAA0F;IAC1F,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB,CAAC;AAEF,kDAAkD;AAClD,wBAAsB,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,GAAE,aAAkB,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,CAcpF;AAED,MAAM,WAAW,iBAAiB;IAChC,gEAAgE;IAChE,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1B,uDAAuD;IACvD,KAAK,EAAE,IAAI,CAAC;IACZ;;;;;OAKG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,qDAAqD;IACrD,KAAK,CAAC,EAAE,IAAI,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;GAMG;AACH,wBAAsB,YAAY,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,CAuBvF;AAED;;;;;;GAMG;AACH,wBAAsB,SAAS,CAC7B,IAAI,EAAE,IAAI,EACV,KAAK,GAAE;IACL,KAAK,CAAC,EAAE,QAAQ,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,wEAAwE;IACxE,GAAG,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACxB,qFAAqF;IACrF,MAAM,CAAC,EAAE,MAAM,GAAG,WAAW,CAAC;CAC1B,GACL,OAAO,CAAC,GAAG,EAAE,CAAC,CA6ChB;AAED;;;;;;GAMG;AACH,MAAM,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,GAAG;IAAE,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC;AAEzE,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,SAAS,CAAC,CAiBrE;AAED;;;;;;GAMG;AACH,wBAAsB,WAAW,CAC/B,IAAI,EAAE,IAAI,EACV,KAAK,EAAE;IAAE,GAAG,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAAC,GAAG,CAAC,EAAE,OAAO,CAAC;IAAC,EAAE,CAAC,EAAE,MAAM,CAAA;CAAE,GAC7D,OAAO,CAAC,GAAG,EAAE,CAAC,CAehB;AAED,sEAAsE;AACtE,wBAAsB,aAAa,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,CAYtF"}

package/packages/core/dist/queue/jobs.js

@@ -193,6 +193,120 @@ export async function releaseStaleLeases(pool, now) {
     }
     return rows.length;
 }
+/** Why a lease is being taken back from a run that never finished. */
+export const INTERRUPTED_REASON = 'interrupted by a restart';
+/**
+ * Take back the leases of runs that will never report, and settle each one.
+ *
+ * The retry policy is the run's own record: an attempt that had not yet
+ * called a tool with an effect (any tier but `auto`, or an `auto` tool marked
+ * `sideEffect`, read from the `tool.called` events carrying this job's id
+ * since its latest claim) and whose report was not delivered (a
+ * `mission.delivered` event for its occurrence or conversation) goes
+ * back on the queue — once. One that had acted, or that was already requeued
+ * after an interruption, or that has no attempts left, fails with the reason in
+ * `last_error`, where Activity → Jobs shows it; a mission occurrence it was
+ * running is closed as failed with the same reason. Nothing is re-run that
+ * might send, buy or write a second time without the owner deciding.
+ *
+ * Every write is fenced on the holder the candidate query saw, so a lease
+ * reclaimed in between is left alone. The attempt stays spent.
+ */
+export async function interruptLeases(pool, scope, detail, opts = {}) {
+    const params = [];
+    let where;
+    if ('heldBy' in scope) {
+        params.push(scope.heldBy);
+        where = 'j.lease_owner = $1';
+    }
+    else if ('self' in scope) {
+        params.push(scope.expiredBy.toISOString(), scope.self, `${scope.holderPrefix}%`);
+        where = `j.lease_owner is distinct from $2 and (j.lease_until < $1::timestamptz or j.lease_owner like $3)`;
+    }
+    else {
+        params.push(scope.expiredBy.toISOString());
+        where = 'j.lease_until < $1::timestamptz';
+    }
+    const { rows: candidates } = await pool.query(`select j.id, j.lease_owner, j.attempts, j.max_attempts,
+       coalesce((select array_agg(distinct a.name order by a.name) from (
+          select e.payload->>'name' as name
+            from core.events e
+           where e.kind = 'tool.called'
+             and e.payload->>'jobId' = j.id::text
+             and (coalesce(e.payload->>'tier', 'gated') <> 'auto' or e.payload->>'sideEffect' = 'true')
+             and e.created_at >= coalesce((select max(c.created_at) from core.events c
+                  where c.kind = 'job.claimed' and c.payload->>'jobId' = j.id::text), j.created_at)
+          union all
+          -- An earlier version recorded calls without the job or the tier, so
+          -- one of those since this claim may be this run's: count it as acted.
+          select 'a tool call recorded by an earlier version'
+            from core.events e
+           where e.kind = 'tool.called'
+             and not (e.payload ? 'tier')
+             and (j.conversation_id is null or e.conversation_id is null or e.conversation_id = j.conversation_id)
+             and e.created_at >= coalesce((select max(c.created_at) from core.events c
+                  where c.kind = 'job.claimed' and c.payload->>'jobId' = j.id::text), j.created_at)
+          union all
+          select 'its report was delivered'
+            from core.events e
+           where e.kind = 'mission.delivered'
+             and ((j.payload->>'occurrenceId' is not null and e.payload->>'occurrenceId' = j.payload->>'occurrenceId')
+                  or (j.conversation_id is not null and e.conversation_id = j.conversation_id))
+             and e.created_at >= coalesce((select max(c.created_at) from core.events c
+                  where c.kind = 'job.claimed' and c.payload->>'jobId' = j.id::text), j.created_at)
+       ) a), '{}'::text[]) as acted,
+       (select count(*)::int from core.events e
+         where e.kind = 'job.interrupted' and e.payload->>'jobId' = j.id::text
+           and e.payload->>'requeued' = 'true') as requeues
+     from core.jobs j
+     where j.state = 'leased' and ${where}`, params);
+    const settled = [];
+    const why = detail ? `${INTERRUPTED_REASON} (${detail})` : INTERRUPTED_REASON;
+    for (const c of candidates) {
+        const acted = c.acted.filter((name) => typeof name === 'string' && name !== '');
+        const requeue = opts.requeue !== false && acted.length === 0 && c.requeues === 0 && c.attempts < c.max_attempts;
+        const message = requeue
+            ? `${why}; queued again`
+            : opts.requeue === false && acted.length === 0
+                ? `${why} while it was still running; not run again on its own, so it never runs twice at once. Retry it if it should run.`
+                : acted.length > 0
+                    ? `${why} after it had acted (${acted.join(', ')}); not run again on its own, so nothing happens twice. Retry it if it should run.`
+                    : c.requeues > 0
+                        ? `${why} a second time; not run again on its own. Retry it if it should run.`
+                        : `${why} on its last attempt.`;
+        const { rows } = await pool.query(`update core.jobs
+       set state = case when $3 then 'pending' else 'failed' end,
+           run_after = case when $3 then now() else run_after end,
+           last_error = $4,
+           lease_owner = null,
+           lease_until = null,
+           acknowledged_at = null,
+           acknowledged_by = null,
+           updated_at = now()
+       where id = $1::uuid and state = 'leased' and lease_owner is not distinct from $2
+       returning ${JOB_COLUMNS}`, [c.id, c.lease_owner, requeue, message]);
+        if (rows.length === 0)
+            continue;
+        const job = toJob(rows[0]);
+        await appendEvent(pool, 'job.interrupted', { jobId: job.id, kind: job.kind, holder: c.lease_owner, attempts: job.attempts, requeued: requeue, acted, reason: why }, job.conversationId ?? undefined);
+        if (!requeue) {
+            // A mission's occurrence is the run the owner sees on Missions; it closes
+            // with the job rather than staying claimed for a run that will not come.
+            const occurrenceId = job.payload?.occurrenceId;
+            if (typeof occurrenceId === 'string') {
+                await pool.query(`update core.occurrences set state = 'failed', finished_at = now(), error = $2
+            where id::text = $1 and state = 'claimed'`, [occurrenceId, message]);
+            }
+            await appendEvent(pool, 'job.failed', {
+                jobId: job.id, kind: job.kind, worker: c.lease_owner, attempts: job.attempts,
+                maxAttempts: job.maxAttempts, error: message, retrying: false,
+                failureClass: 'interrupted', failureReason: why,
+            }, job.conversationId ?? undefined);
+        }
+        settled.push({ ...job, requeued: requeue, acted });
+    }
+    return settled;
+}
 /**
  * Stop a job for good. Anything not already finished can be cancelled, and so
  * can a failed one: "failed" is the queue waiting for a human, and giving up