@withbuddi/buddi 0.1.0-pre.39 → 0.1.0-pre.41

package/node_modules/@buddi/gateway/dist/web/passphrase-notice.js

@@ -0,0 +1,112 @@
+/**
+ * The backup passphrase, shown to the owner once, when it starts to matter.
+ *
+ * It is not part of first run: nothing is locked with it until the first
+ * backup. Once an encrypted backup exists (scheduled or taken by hand), Home
+ * shows the six words in a card that stays until the owner presses "I saved
+ * it", and the same words go once to Telegram when a phone is paired, with
+ * the advice to delete the message once they are saved. After that the words
+ * are behind Settings → Backup's Reveal (and the PIN, when there is one).
+ *
+ * What was said and acknowledged is one dashboard setting; the words
+ * themselves are never written anywhere but the vault and that one message.
+ */
+import { readWebSetting } from '@buddi/core';
+export const PASSPHRASE_NOTICE_KEY = 'backup.passphraseNotice';
+/** The message Telegram gets, once. */
+export function passphraseTelegramText(phrase) {
+    return [
+        'buddi took its first backup. These six words open your backups, and only you have them:',
+        '',
+        phrase,
+        '',
+        'Write them down somewhere safe, then delete this message.',
+    ].join('\n');
+}
+export async function readNoticeState(pool) {
+    const value = await readWebSetting(pool, PASSPHRASE_NOTICE_KEY);
+    return value !== null && typeof value === 'object' ? value : {};
+}
+/**
+ * Merge `patch` into the stored state in one statement, so "I saved it" and
+ * the Telegram delivery (which waits on a send in between) never write back
+ * a stale copy of each other's fields. `keep: true` lets a field already
+ * stored win (the first acknowledgement stays the one recorded).
+ */
+async function mergeNoticeState(pool, patch, options = {}) {
+    const stored = `(case when jsonb_typeof(core.web_settings.value) = 'object' then core.web_settings.value else '{}'::jsonb end)`;
+    const merged = options.keep ? `excluded.value || ${stored}` : `${stored} || excluded.value`;
+    const { rows } = await pool.query(`insert into core.web_settings (key, value, updated_at)
+     values ($1, $2::jsonb, now())
+     on conflict (key) do update set value = ${merged}, updated_at = now()
+     returning value`, [PASSPHRASE_NOTICE_KEY, JSON.stringify(patch)]);
+    const value = rows[0]?.value;
+    return value !== null && typeof value === 'object' ? value : patch;
+}
+/** Is there a backup locked with the passphrase yet? */
+async function hasEncryptedBackup(deps) {
+    const listed = await deps.listBackups().catch(() => null);
+    if (listed?.status !== 200)
+        return false;
+    const archives = listed.body.archives ?? [];
+    return archives.some((archive) => archive.encrypted === true || (typeof archive.name === 'string' && archive.name.endsWith('.age')));
+}
+async function words(deps) {
+    const reply = await deps.passphrase().catch(() => null);
+    const phrase = reply?.status === 200 ? reply.body.passphrase : undefined;
+    return typeof phrase === 'string' && phrase.trim() !== '' ? phrase : undefined;
+}
+/**
+ * What Home's card shows: the words, until they are acknowledged. With
+ * `words: false` (a PIN is set) the card is due but the words are not sent:
+ * it asks for the PIN and reveals them through POST …/passphrase/reveal.
+ */
+export async function passphraseNotice(deps, options = {}) {
+    const state = await readNoticeState(deps.pool);
+    if (state.acknowledgedAt !== undefined)
+        return { show: false };
+    if (!(await hasEncryptedBackup(deps)))
+        return { show: false };
+    const phrase = await words(deps);
+    if (phrase === undefined)
+        return { show: false };
+    return options.words === false ? { show: true, needsPin: true } : { show: true, passphrase: phrase };
+}
+/** "I saved it": the card goes, for good. */
+export async function acknowledgePassphrase(deps) {
+    return await mergeNoticeState(deps.pool, { acknowledgedAt: (deps.now ?? (() => new Date()))().toISOString() }, { keep: true });
+}
+/**
+ * The Telegram message, once: after the first encrypted backup, to the paired
+ * phone. Nothing paired then means nothing is sent later either (the words
+ * are on Home and in Settings → Backup). A send that failed is tried again on
+ * the next pass. Returns what it did.
+ */
+export async function telegramPassphraseOnce(deps) {
+    const state = await readNoticeState(deps.pool);
+    if (state.telegramAt !== undefined && state.telegram !== 'failed')
+        return 'done';
+    if (!(await hasEncryptedBackup(deps)))
+        return 'waiting';
+    const at = (deps.now ?? (() => new Date()))().toISOString();
+    if (!deps.sendTelegram) {
+        await mergeNoticeState(deps.pool, { telegramAt: at, telegram: 'not-paired' });
+        return 'not-paired';
+    }
+    const phrase = await words(deps);
+    if (phrase === undefined)
+        return 'waiting';
+    try {
+        await deps.sendTelegram(passphraseTelegramText(phrase));
+        await mergeNoticeState(deps.pool, { telegramAt: at, telegram: 'sent' });
+        return 'sent';
+    }
+    catch (error) {
+        const notPaired = error?.code === 'owner-not-paired' || error?.code === 'telegram-not-configured';
+        await mergeNoticeState(deps.pool, { telegramAt: at, telegram: notPaired ? 'not-paired' : 'failed' });
+        if (!notPaired)
+            deps.log?.(`backup passphrase: the Telegram message did not go: ${error instanceof Error ? error.message : String(error)}`);
+        return notPaired ? 'not-paired' : 'failed';
+    }
+}
+//# sourceMappingURL=passphrase-notice.js.map

package/node_modules/@buddi/gateway/dist/web/passphrase-notice.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"passphrase-notice.js","sourceRoot":"","sources":["../../src/web/passphrase-notice.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,cAAc,EAAkB,MAAM,aAAa,CAAC;AAG7D,MAAM,CAAC,MAAM,qBAAqB,GAAG,yBAAyB,CAAC;AAsB/D,uCAAuC;AACvC,MAAM,UAAU,sBAAsB,CAAC,MAAc;IACnD,OAAO;QACL,yFAAyF;QACzF,EAAE;QACF,MAAM;QACN,EAAE;QACF,2DAA2D;KAC5D,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAe;IACnD,MAAM,KAAK,GAAG,MAAM,cAAc,CAAwB,IAAI,EAAE,qBAAqB,CAAC,CAAC;IACvF,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AAClE,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,gBAAgB,CAAC,IAAe,EAAE,KAA4B,EAAE,UAA8B,EAAE;IAC7G,MAAM,MAAM,GAAG,gHAAgH,CAAC;IAChI,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,qBAAqB,MAAM,EAAE,CAAC,CAAC,CAAC,GAAG,MAAM,oBAAoB,CAAC;IAC5F,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAC/B;;+CAE2C,MAAM;qBAChC,EACjB,CAAC,qBAAqB,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAC/C,CAAC;IACF,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,KAA0C,CAAC;IAClE,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;AACrE,CAAC;AAED,wDAAwD;AACxD,KAAK,UAAU,kBAAkB,CAAC,IAA0B;IAC1D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IAC1D,IAAI,MAAM,EAAE,MAAM,KAAK,GAAG;QAAE,OAAO,KAAK,CAAC;IACzC,MAAM,QAAQ,GAAI,MAAM,CAAC,IAAsE,CAAC,QAAQ,IAAI,EAAE,CAAC;IAC/G,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,SAAS,KAAK,IAAI,IAAI,CAAC,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AACvI,CAAC;AAED,KAAK,UAAU,KAAK,CAAC,IAA0B;IAC7C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IACxD,MAAM,MAAM,GAAG,KAAK,EAAE,MAAM,KAAK,GAAG,CAAC,CAAC,CAAE,KAAK,CAAC,IAAiC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;IACvG,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AACjF,CAAC;AAID;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAA0B,EAAE,UAA+B,EAAE;IAClG,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/C,IAAI,KAAK,CAAC,cAAc,KAAK,SAAS;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IAC/D,IAAI,CAAC,CAAC,MAAM,kBAAkB,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IAC9D,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;IACjC,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IACjD,OAAO,OAAO,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;AACvG,CAAC;AAED,6CAA6C;AAC7C,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,IAAgD;IAC1F,OAAO,MAAM,gBAAgB,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,cAAc,EAAE,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,WAAW,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;AACjI,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,IAA0B;IACrE,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/C,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS,IAAI,KAAK,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC;IACjF,IAAI,CAAC,CAAC,MAAM,kBAAkB,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IACxD,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC;IAC5D,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;QACvB,MAAM,gBAAgB,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC,CAAC;QAC9E,OAAO,YAAY,CAAC;IACtB,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;IACjC,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC3C,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,YAAY,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC,CAAC;QACxD,MAAM,gBAAgB,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QACxE,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,SAAS,GAAI,KAAmC,EAAE,IAAI,KAAK,kBAAkB,IAAK,KAAmC,EAAE,IAAI,KAAK,yBAAyB,CAAC;QAChK,MAAM,gBAAgB,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;QACrG,IAAI,CAAC,SAAS;YAAE,IAAI,CAAC,GAAG,EAAE,CAAC,uDAAuD,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC5I,OAAO,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC7C,CAAC;AACH,CAAC"}

package/node_modules/@buddi/gateway/dist/web/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/web/server.ts"],"names":[],"mappings":"AAuEA,OAAO,EAAyB,KAAK,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAC/E,OAAO,EAAwB,KAAK,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAItF,OAAO,EAAiD,KAAK,aAAa,EAAE,KAAK,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAgBzH,OAAO,EAQL,KAAK,eAAe,EAErB,MAAM,eAAe,CAAC;AAYvB,OAAO,EAAgB,KAAK,eAAe,EAAE,KAAK,MAAM,EAAE,KAAK,cAAc,EAAE,MAAM,WAAW,CAAC;AAEjG,OAAO,KAAK,EAAE,YAAY,EAAE,UAAU,EAAY,eAAe,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AACrG,OAAO,EAAwL,KAAK,YAAY,EAAE,MAAM,aAAa,CAAC;AAEtO,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC;AAC/B,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAC7D,OAAO,EAAiB,KAAK,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AA4BzE,OAAO,EAKL,OAAO,EAKP,KAAK,WAAW,EACjB,MAAM,WAAW,CAAC;AAEnB,OAAO,EAAE,UAAU,EAAuC,MAAM,cAAc,CAAC;AAC/E,OAAO,EAAoD,KAAK,SAAS,EAAE,MAAM,aAAa,CAAC;AAC/F,OAAO,EASL,KAAK,gBAAgB,EACrB,KAAK,cAAc,EACpB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAQL,KAAK,IAAI,EACV,MAAM,wBAAwB,CAAC;AAEhC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAEpD,OAAO,EAUL,KAAK,SAAS,EAGf,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAyB,KAAK,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAEhG,OAAO,EAAiB,KAAK,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAIlE,OAAO,EAAqB,KAAK,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAsC3E,OAAO,EAIL,KAAK,YAAY,EAClB,MAAM,eAAe,CAAC;AAcvB,OAAO,EAcL,KAAK,aAAa,EACnB,MAAM,cAAc,CAAC;AAoBtB,OAAO,EAAsB,KAAK,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAK/E,OAAO,EAAyD,KAAK,QAAQ,EAAE,MAAM,aAAa,CAAC;AA6CnG,qFAAqF;AACrF,eAAO,MAAM,eAAe,QAAS,CAAC;AACtC,MAAM,WAAW,aAAa;IAC5B;;;OAGG;IACH,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,0GAA0G;IAC1G,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,aAAa,CAAC,EAAE,MAAM,aAAa,CAAC;IACpC,sFAAsF;IACtF,UAAU,CAAC,EAAE,QAAQ,CAAC;IACtB,gFAAgF;IAChF,OAAO,CAAC,EAAE,iBAAiB,CAAC;IAC5B,IAAI,EAAE,IAAI,CAAC;IACX,QAAQ,EAAE,YAAY,CAAC;IACvB,OAAO,EAAE,YAAY,CAAC;IACtB,GAAG,EAAE,eAAe,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,IAAI,CAAC;IAChB,MAAM,EAAE,SAAS,CAAC;IAClB,6EAA6E;IAC7E,KAAK,EAAE,MAAM,CAAC;IACd,6CAA6C;IAC7C,IAAI,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC;IAC9B;;;OAGG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,GAAG,SAAS,CAAC;IACpC,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC;;;OAGG;IACH,OAAO,CAAC,EAAE,aAAa,GAAG,SAAS,CAAC;IACpC;;;;;;OAMG;IACH,QAAQ,CAAC,EAAE,eAAe,GAAG,SAAS,CAAC;IACvC;;;;OAIG;IACH,WAAW,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,YAAY,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,SAAS,CAAC;IACpE,iEAAiE;IACjE,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B;;;OAGG;IACH,WAAW,CAAC,EAAE,kBAAkB,GAAG,SAAS,CAAC;IAC7C;;;OAGG;IACH,YAAY,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;IACjE;;;;;OAKG;IACH,UAAU,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACjC,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC,GAAG,SAAS,CAAC;IAC3C;;;;;;;;OAQG;IACH,IAAI,CAAC,EAAE,IAAI,CAAC,WAAW,EAAE,MAAM,GAAG,SAAS,GAAG,UAAU,GAAG,KAAK,GAAG,KAAK,GAAG,UAAU,GAAG,KAAK,CAAC,CAAC;IAC/F;;;OAGG;IACH,SAAS,CAAC,EAAE,iBAAiB,CAAC;IAC9B;;;OAGG;IACH,SAAS,CAAC,EAAE;QACV,KAAK,CAAC,EAAE,cAAc,CAAC;QACvB,IAAI,CAAC,EAAE,MAAM,OAAO,CAAC;YAAE,SAAS,EAAE,OAAO,CAAC;YAAC,IAAI,EAAE,gBAAgB,GAAG,IAAI,CAAA;SAAE,CAAC,CAAC;KAC7E,GAAG,SAAS,CAAC;IACd;;;OAGG;IACH,UAAU,CAAC,EAAE;QACX,IAAI,CAAC,EAAE,IAAI,CAAC;QACZ;;;;WAIG;QACH,GAAG,CAAC,EAAE;YAAE,SAAS,CAAC,EAAE,aAAa,GAAG,SAAS,CAAC;YAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;SAAE,GAAG,SAAS,CAAC;QAC1F,MAAM,CAAC,EAAE,oBAAoB,GAAG,SAAS,CAAC;QAC1C,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,GAAG,SAAS,CAAC;QACvC,KAAK,CAAC,EAAE,IAAI,CAAC,SAAS,EAAE,QAAQ,GAAG,QAAQ,GAAG,OAAO,CAAC,GAAG,SAAS,CAAC;KACpE,GAAG,SAAS,CAAC;CACf;AAED,MAAM,WAAW,SAAS;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,gFAAgF;IAChF,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ;;;;OAIG;IACH,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B;;;OAGG;IACH,OAAO,EAAE,OAAO,CAAC;IACjB,qDAAqD;IACrD,IAAI,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC3B,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAED;;;;;;GAMG;AACH,oHAAoH;AACpH,eAAO,MAAM,aAAa,oBAAoB,CAAC;AAyB/C,0EAA0E;AAC1E,wBAAgB,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAE7D;AAED;;;GAGG;AACH,wBAAgB,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,CAAC,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,KAAK,IAAI,CAAC,GAAG,SAAS,CAE5G;AAsDD,wBAAgB,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAE7D;AAED,wDAAwD;AACxD,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS,CAEnE;AAED,yDAAyD;AACzD,eAAO,MAAM,YAAY,MAAM,CAAC;AAEhC,8EAA8E;AAC9E,eAAO,MAAM,qBAAqB,KAAK,CAAC;AAExC,+DAA+D;AAC/D,eAAO,MAAM,kBAAkB,KAAK,CAAC;AACrC,eAAO,MAAM,sBAAsB,QAAS,CAAC;AAE7C,wBAAgB,YAAY,CAAC,IAAI,EAAE,aAAa,GAAG,MAAM,CAizHxD;AAED;;;GAGG;AACH,wBAAsB,cAAc,CAClC,IAAI,EAAE,IAAI,CAAC,aAAa,EAAE,OAAO,CAAC,GAAG;IAAE,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,GACtD,OAAO,CAAC,SAAS,CAAC,CAqEpB"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/web/server.ts"],"names":[],"mappings":"AAuEA,OAAO,EAAyB,KAAK,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAC/E,OAAO,EAAwB,KAAK,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAItF,OAAO,EAAiD,KAAK,aAAa,EAAE,KAAK,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAiBzH,OAAO,EAQL,KAAK,eAAe,EAErB,MAAM,eAAe,CAAC;AAYvB,OAAO,EAAgB,KAAK,eAAe,EAAE,KAAK,MAAM,EAAE,KAAK,cAAc,EAAE,MAAM,WAAW,CAAC;AAEjG,OAAO,KAAK,EAAE,YAAY,EAAE,UAAU,EAAY,eAAe,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AACrG,OAAO,EAAwL,KAAK,YAAY,EAAE,MAAM,aAAa,CAAC;AAEtO,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC;AAC/B,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAC7D,OAAO,EAAiB,KAAK,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AA4BzE,OAAO,EAKL,OAAO,EAKP,KAAK,WAAW,EACjB,MAAM,WAAW,CAAC;AAEnB,OAAO,EAAE,UAAU,EAAuC,MAAM,cAAc,CAAC;AAC/E,OAAO,EAAoD,KAAK,SAAS,EAAE,MAAM,aAAa,CAAC;AAC/F,OAAO,EASL,KAAK,gBAAgB,EACrB,KAAK,cAAc,EACpB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAQL,KAAK,IAAI,EACV,MAAM,wBAAwB,CAAC;AAEhC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAEpD,OAAO,EAUL,KAAK,SAAS,EAGf,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAyB,KAAK,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAEhG,OAAO,EAAiB,KAAK,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAIlE,OAAO,EAAqB,KAAK,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAsC3E,OAAO,EAIL,KAAK,YAAY,EAClB,MAAM,eAAe,CAAC;AAcvB,OAAO,EAcL,KAAK,aAAa,EACnB,MAAM,cAAc,CAAC;AAoBtB,OAAO,EAAsB,KAAK,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAK/E,OAAO,EAAyD,KAAK,QAAQ,EAAE,MAAM,aAAa,CAAC;AAgDnG,qFAAqF;AACrF,eAAO,MAAM,eAAe,QAAS,CAAC;AACtC,MAAM,WAAW,aAAa;IAC5B;;;OAGG;IACH,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,0GAA0G;IAC1G,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,aAAa,CAAC,EAAE,MAAM,aAAa,CAAC;IACpC,sFAAsF;IACtF,UAAU,CAAC,EAAE,QAAQ,CAAC;IACtB,gFAAgF;IAChF,OAAO,CAAC,EAAE,iBAAiB,CAAC;IAC5B,IAAI,EAAE,IAAI,CAAC;IACX,QAAQ,EAAE,YAAY,CAAC;IACvB,OAAO,EAAE,YAAY,CAAC;IACtB,GAAG,EAAE,eAAe,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,IAAI,CAAC;IAChB,MAAM,EAAE,SAAS,CAAC;IAClB,6EAA6E;IAC7E,KAAK,EAAE,MAAM,CAAC;IACd,6CAA6C;IAC7C,IAAI,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC;IAC9B;;;OAGG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,GAAG,SAAS,CAAC;IACpC,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC;;;OAGG;IACH,OAAO,CAAC,EAAE,aAAa,GAAG,SAAS,CAAC;IACpC;;;;;;OAMG;IACH,QAAQ,CAAC,EAAE,eAAe,GAAG,SAAS,CAAC;IACvC;;;;OAIG;IACH,WAAW,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,YAAY,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,SAAS,CAAC;IACpE,iEAAiE;IACjE,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B;;;OAGG;IACH,WAAW,CAAC,EAAE,kBAAkB,GAAG,SAAS,CAAC;IAC7C;;;OAGG;IACH,YAAY,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;IACjE;;;;;OAKG;IACH,UAAU,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACjC,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC,GAAG,SAAS,CAAC;IAC3C;;;;;;;;OAQG;IACH,IAAI,CAAC,EAAE,IAAI,CAAC,WAAW,EAAE,MAAM,GAAG,SAAS,GAAG,UAAU,GAAG,KAAK,GAAG,KAAK,GAAG,UAAU,GAAG,KAAK,CAAC,CAAC;IAC/F;;;OAGG;IACH,SAAS,CAAC,EAAE,iBAAiB,CAAC;IAC9B;;;OAGG;IACH,SAAS,CAAC,EAAE;QACV,KAAK,CAAC,EAAE,cAAc,CAAC;QACvB,IAAI,CAAC,EAAE,MAAM,OAAO,CAAC;YAAE,SAAS,EAAE,OAAO,CAAC;YAAC,IAAI,EAAE,gBAAgB,GAAG,IAAI,CAAA;SAAE,CAAC,CAAC;KAC7E,GAAG,SAAS,CAAC;IACd;;;OAGG;IACH,UAAU,CAAC,EAAE;QACX,IAAI,CAAC,EAAE,IAAI,CAAC;QACZ;;;;WAIG;QACH,GAAG,CAAC,EAAE;YAAE,SAAS,CAAC,EAAE,aAAa,GAAG,SAAS,CAAC;YAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;SAAE,GAAG,SAAS,CAAC;QAC1F,MAAM,CAAC,EAAE,oBAAoB,GAAG,SAAS,CAAC;QAC1C,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,GAAG,SAAS,CAAC;QACvC,KAAK,CAAC,EAAE,IAAI,CAAC,SAAS,EAAE,QAAQ,GAAG,QAAQ,GAAG,OAAO,CAAC,GAAG,SAAS,CAAC;KACpE,GAAG,SAAS,CAAC;CACf;AAED,MAAM,WAAW,SAAS;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,gFAAgF;IAChF,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ;;;;OAIG;IACH,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B;;;OAGG;IACH,OAAO,EAAE,OAAO,CAAC;IACjB,qDAAqD;IACrD,IAAI,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC3B,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAED;;;;;;GAMG;AACH,oHAAoH;AACpH,eAAO,MAAM,aAAa,oBAAoB,CAAC;AAyB/C,0EAA0E;AAC1E,wBAAgB,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAE7D;AAED;;;GAGG;AACH,wBAAgB,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,CAAC,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,KAAK,IAAI,CAAC,GAAG,SAAS,CAE5G;AAsDD,wBAAgB,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAE7D;AAED,wDAAwD;AACxD,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS,CAEnE;AAED,yDAAyD;AACzD,eAAO,MAAM,YAAY,MAAM,CAAC;AAEhC,8EAA8E;AAC9E,eAAO,MAAM,qBAAqB,KAAK,CAAC;AAExC,+DAA+D;AAC/D,eAAO,MAAM,kBAAkB,KAAK,CAAC;AACrC,eAAO,MAAM,sBAAsB,QAAS,CAAC;AAE7C,wBAAgB,YAAY,CAAC,IAAI,EAAE,aAAa,GAAG,MAAM,CA42HxD;AAED;;;GAGG;AACH,wBAAsB,cAAc,CAClC,IAAI,EAAE,IAAI,CAAC,aAAa,EAAE,OAAO,CAAC,GAAG;IAAE,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,GACtD,OAAO,CAAC,SAAS,CAAC,CAqEpB"}

package/node_modules/@buddi/gateway/dist/web/server.js

@@ -60,8 +60,8 @@ import { agentSearchPath, EXAMPLES_AGENTS_DIR } from '../agents/catalog.js';
 import { setDelegatesFromWeb } from './write.js';
 import { mlxhBaseUrl, probeMlxh } from '../mlxh.js';
 import { PullRefusal, createOllamaPulls, ollamaMachine } from '../ollama-local.js';
-import { OnboardingRefusal, WEB_ONBOARDING_STEPS, WEB_ONBOARDING_SURFACE, claimOpeningTurn, createFirstAgent, OLLAMA_BASE_URL, probeOllama, readOnboarding, rebindBrain, updateFirstAgent, withFirstRunFacts, readFirstAgentPersona } from './onboarding.js';
-import { TakeOnRefusal, readTakeOn, startTakeOn } from './take-on.js';
+import { OnboardingRefusal, hasOwnerAgent, WEB_ONBOARDING_STEPS, WEB_ONBOARDING_SURFACE, claimOpeningTurn, createFirstAgent, OLLAMA_BASE_URL, probeOllama, readOnboarding, rebindBrain, updateFirstAgent, withFirstRunFacts, readFirstAgentPersona } from './onboarding.js';
+import { TakeOnRefusal, readTakeOn, readTakeOnOffers, startTakeOn } from './take-on.js';
 import { TelegramWebError, saveTelegramToken, telegramBot, telegramDevices, telegramPairing, telegramStatus, unpairTelegramDevice, } from './telegram.js';
 import { PAGE_ROUTE, sendPageFile, actOnPage, actRateLimited, listPageDescriptors, runPageQuery, } from './pages.js';
 import { listSecrets, ownerLoginKey, ownerLoginNames, ownerLoginStore, secretUses, secretsAct } from './secrets.js';
@@ -136,6 +136,9 @@ import { StreamBudget, frame, resumeCursor, streamConversation } from './stream.
 import { ensureWebToken, verifyTicket } from './token.js';
 import { MAX_UPLOAD_BYTES, readUpload } from './upload.js';
 import { LOCKED_BODY, LockUnavailable, allowedWhileLocked, clientOf, createLock } from './lock.js';
+import { acknowledgePassphrase, passphraseNotice } from './passphrase-notice.js';
+import { cliToolRoute } from './cli-tool.js';
+import { createTokenStore, uninstallBackupRoute, uninstallJobRoute, uninstallPlanRoute, uninstallRoute as removeBuddiRoute, withoutPassphrase } from './uninstall.js';
 import { matchApiRoute, TOKEN_REFUSALS } from './api-routes.js';
 import { QUIET_UNAVAILABLE_TEXT, pluginCommands } from './composer.js';
 import { createEngagementHooks } from '../missions/engagement.js';
@@ -370,6 +373,8 @@ export function createWebApp(deps) {
         },
         recoveryActive: () => inRecovery(deps.pool),
     });
+    /** Remove buddi from this Mac: the token its plan mints (web/uninstall.ts). */
+    const uninstallTokens = createTokenStore();
     const lock = createLock({ pool: deps.pool, sessions, now: deps.now, get timezone() { return deps.timezone; }, widgets, needsYou, log });
     const openStreams = new Map();
     /*
@@ -1214,12 +1219,21 @@ export function createWebApp(deps) {
             examplesDir: EXAMPLES_AGENTS_DIR,
             reload: () => deps.catalog.reload?.(),
             registry: deps.registry,
+            offers: (opts) => readTakeOnOffers({ env: deps.env ?? process.env, log }, opts),
         });
         /** What the backup routes need: the environment, and somewhere to log. */
         const backupDeps = () => ({
             env: deps.env ?? process.env,
             log,
         });
+        /** Home's passphrase card: the backups, the words, and where "I saved it" is kept. */
+        const noticeDeps = () => ({
+            pool: deps.pool,
+            listBackups: () => listBackups(backupDeps()),
+            passphrase: () => passphraseRoute(backupDeps(), 'GET'),
+            now: deps.now,
+            log,
+        });
         /** What the plugin page routes need: the registry, and the owner's context. */
         const pagesDeps = () => ({ registry: deps.registry, ctx: deps.ctx, now: deps.now, log });
         const agentOffersDeps = () => ({
@@ -1320,7 +1334,9 @@ export function createWebApp(deps) {
             if (view.state !== 'pending') {
                 return { status: 409, message: 'This buddi has already been set up. Restore from Settings, where it asks you to confirm.' };
             }
-            if (!view.needs.agent) {
+            // Any agent of the owner's, a teammate a plugin proposed included: it is
+            // a private file a restore would overwrite. Wider than `needs.agent`.
+            if (hasOwnerAgent(deps.catalog)) {
                 return { status: 409, message: 'This buddi already has an agent. Restore from Settings, where it asks you to confirm.' };
             }
             return null;
@@ -1928,8 +1944,21 @@ export function createWebApp(deps) {
                     return reply(res, await listBackups(backupDeps()));
                 case '/api/backups/schedule':
                     return reply(res, await scheduleRoute(backupDeps(), 'GET'));
-                case '/api/backups/passphrase':
+                case '/api/backups/passphrase': {
+                    // Behind the PIN when there is one: Settings → Backup reveals it with POST …/reveal.
+                    const allowed = await lock.verify(undefined);
+                    if (!allowed.ok)
+                        return sendJson(res, 403, { error: 'Type your PIN to see the passphrase.', needsPin: true });
                     return reply(res, await passphraseRoute(backupDeps(), 'GET'));
+                }
+                /* Home's card after the first encrypted backup, until "I saved it" (web/passphrase-notice.ts). */
+                /* The words, so from this computer only, and behind the PIN when there is one (the card then reveals with POST …/reveal). */
+                case '/api/backups/passphrase/notice': {
+                    if (session.via !== 'local')
+                        return sendJson(res, 403, { error: 'The passphrase shows on the computer buddi runs on.' });
+                    const allowed = await lock.verify(undefined);
+                    return sendJson(res, 200, await passphraseNotice(noticeDeps(), { words: allowed.ok }));
+                }
                 /*
                  * Plugins: what is installed, what is staged and waiting to be read,
                  * and the trust sentence the page shows above the install field. A
@@ -1972,7 +2001,7 @@ export function createWebApp(deps) {
                 case '/api/secrets/uses':
                     return reply(res, await secretUses(secretsDeps(), url));
                 case '/api/onboarding':
-                    return sendJson(res, 200, await readOnboarding(onboardingDeps()));
+                    return sendJson(res, 200, await readOnboarding(onboardingDeps(), { withOffers: true }));
                 /*
                  * Is Ollama running on this machine? Asked from here, never from the
                  * page: the dashboard bundle reaches no host but its own, and the
@@ -2051,10 +2080,28 @@ export function createWebApp(deps) {
             }
             const upgradeJob = /^\/api\/upgrade\/jobs\/([0-9a-f-]{36})$/i.exec(path);
             if (upgradeJob)
-                return reply(res, await upgradeJobRoute(versionDeps(), upgradeJob[1]));
+                return reply(res, withoutPassphrase(await upgradeJobRoute(versionDeps(), upgradeJob[1])));
             const backupJob = /^\/api\/backups\/jobs\/([0-9a-f-]{36})$/i.exec(path);
             if (backupJob)
-                return reply(res, await backupJobRoute(backupDeps(), backupJob[1]));
+                return reply(res, withoutPassphrase(await backupJobRoute(backupDeps(), backupJob[1])));
+            /* buddi.app's command line tool: whether it is installed, from this computer only. */
+            if (path === '/api/system/cli') {
+                if (session.via !== 'local')
+                    return sendJson(res, 403, { error: 'Change this from the computer buddi runs on.' });
+                return reply(res, await cliToolRoute(deps.env ?? process.env, 'GET'));
+            }
+            /* Remove buddi from this Mac: the plan (with its token) and the last backup's job, from this computer only. */
+            if (path === '/api/system/uninstall') {
+                if (session.via !== 'local')
+                    return sendJson(res, 403, { error: 'Remove buddi from the computer it runs on.' });
+                return reply(res, await uninstallPlanRoute({ env: deps.env ?? process.env, now: deps.now }, uninstallTokens));
+            }
+            const uninstallJob = /^\/api\/system\/uninstall\/jobs\/([0-9a-f-]{36})$/i.exec(path);
+            if (uninstallJob) {
+                if (session.via !== 'local')
+                    return sendJson(res, 403, { error: 'Remove buddi from the computer it runs on.' });
+                return reply(res, await uninstallJobRoute({ env: deps.env ?? process.env }, uninstallJob[1]));
+            }
             const catalogueJob = /^\/api\/catalogue\/jobs\/([0-9a-f-]{36})$/i.exec(path);
             if (catalogueJob)
                 return reply(res, catalogueJobRoute(catalogueJob[1]));
@@ -3351,6 +3398,27 @@ export function createWebApp(deps) {
             return reply(res, await upgradeRoute(versionDeps(), body));
         if (path === '/api/backups')
             return reply(res, await createBackupRoute(backupDeps(), body));
+        if (path === '/api/backups/passphrase/notice')
+            return sendJson(res, 200, await acknowledgePassphrase({ pool: deps.pool, now: deps.now }));
+        if (path === '/api/system/cli') {
+            if (session.via !== 'local')
+                return sendJson(res, 403, { error: 'Change this from the computer buddi runs on.' });
+            return reply(res, await cliToolRoute(deps.env ?? process.env, 'POST'));
+        }
+        if (path === '/api/system/uninstall/backup' || path === '/api/system/uninstall') {
+            if (session.via !== 'local')
+                return sendJson(res, 403, { error: 'Remove buddi from the computer it runs on.' });
+            const uninstallDeps = { env: deps.env ?? process.env, now: deps.now };
+            return reply(res, path === '/api/system/uninstall/backup'
+                ? await uninstallBackupRoute(uninstallDeps, uninstallTokens, body)
+                : await removeBuddiRoute(uninstallDeps, uninstallTokens, body));
+        }
+        if (path === '/api/backups/passphrase/reveal') {
+            const allowed = await lock.verify(body.pin);
+            if (!allowed.ok)
+                return sendJson(res, allowed.status, allowed.body);
+            return reply(res, await passphraseRoute(backupDeps(), 'GET'));
+        }
         if (path === '/api/backups/verify')
             return reply(res, await verifyBackupRoute(backupDeps(), body));
         if (path === '/api/backups/restore') {
@@ -3650,8 +3718,9 @@ export function createWebApp(deps) {
                 });
             }
             catch (error) {
-                if (error instanceof OnboardingRefusal)
-                    return sendJson(res, error.status, { error: error.message });
+                if (error instanceof OnboardingRefusal) {
+                    return sendJson(res, error.status, { error: error.message, ...(error.code ? { code: error.code } : {}) });
+                }
                 return sendJson(res, 500, { error: error instanceof Error ? error.message : 'The agent could not be written.' });
             }
         }