botinabox 2.16.17 → 2.16.18

package/dist/core/orchestrator/secret-store.d.ts

@@ -41,6 +41,17 @@ export declare class SecretStore {
     set(input: SecretInput): Promise<SecretMeta>;
     get(name: string, environment?: string): Promise<string | null>;
     getMeta(name: string, environment?: string): Promise<SecretMeta | null>;
+    /**
+     * Fetch the most recently created live row for (name, environment).
+     *
+     * `set()` keeps this to a single row in steady state, but we still pick the
+     * newest in JS rather than rely on a SQL `LIMIT 1` (nondeterministic without
+     * an ORDER BY) or a dialect/version-specific `orderBy` form: legacy data
+     * written before the upsert fix can still have duplicate live rows, and JS
+     * sorting resolves them deterministically across SQLite and Postgres. (Same
+     * cross-dialect-sort rationale as the chat memory resolver.)
+     */
+    private _latestRow;
     list(): Promise<SecretMeta[]>;
     rotate(name: string, newValue: string, environment?: string): Promise<void>;
     delete(name: string, environment?: string): Promise<void>;

package/dist/index.js

@@ -7524,35 +7524,65 @@ var SecretStore = class {
     this.encKey = encryptionKey ? deriveEncKey(encryptionKey) : null;
   }
   async set(input) {
-    const id = uuidv42();
-    const data = { ...input, id };
-    if (this.encKey && data.value) {
-      data.value = encryptValue(data.value, this.encKey);
+    const environment = input.environment ?? "production";
+    const value = this.encKey && input.value ? encryptValue(input.value, this.encKey) : input.value;
+    const existing = await this.db.query("secrets", {
+      where: { name: input.name, environment },
+      filters: [{ col: "deleted_at", op: "isNull" }],
+      limit: 1
+    });
+    if (existing.length > 0) {
+      const id2 = existing[0].id;
+      const changes = {
+        value,
+        environment,
+        updated_at: (/* @__PURE__ */ new Date()).toISOString()
+      };
+      if (input.type !== void 0) changes.type = input.type;
+      if (input.description !== void 0) changes.description = input.description;
+      await this.db.update("secrets", id2, changes);
+      await this.hooks.emit("secret.updated", { name: input.name });
+      const updated = await this.db.get("secrets", id2);
+      return this._toMeta(updated);
     }
-    await this.db.insert("secrets", data);
+    const id = uuidv42();
+    await this.db.insert("secrets", { ...input, id, value, environment });
     await this.hooks.emit("secret.created", { name: input.name });
     const inserted = await this.db.get("secrets", id);
     return this._toMeta(inserted);
   }
   async get(name, environment = "production") {
-    const rows = await this.db.query("secrets", {
-      where: { name, environment },
-      filters: [{ col: "deleted_at", op: "isNull" }],
-      limit: 1
-    });
-    if (rows.length === 0) return null;
+    const row = await this._latestRow(name, environment);
+    if (!row) return null;
     await this.hooks.emit("secret.accessed", { name, environment });
-    const raw = rows[0].value ?? null;
+    const raw = row.value ?? null;
     if (raw && this.encKey) return decryptValue(raw, this.encKey);
     return raw;
   }
   async getMeta(name, environment = "production") {
+    const row = await this._latestRow(name, environment);
+    return row ? this._toMeta(row) : null;
+  }
+  /**
+   * Fetch the most recently created live row for (name, environment).
+   *
+   * `set()` keeps this to a single row in steady state, but we still pick the
+   * newest in JS rather than rely on a SQL `LIMIT 1` (nondeterministic without
+   * an ORDER BY) or a dialect/version-specific `orderBy` form: legacy data
+   * written before the upsert fix can still have duplicate live rows, and JS
+   * sorting resolves them deterministically across SQLite and Postgres. (Same
+   * cross-dialect-sort rationale as the chat memory resolver.)
+   */
+  async _latestRow(name, environment) {
     const rows = await this.db.query("secrets", {
       where: { name, environment },
-      filters: [{ col: "deleted_at", op: "isNull" }],
-      limit: 1
+      filters: [{ col: "deleted_at", op: "isNull" }]
     });
-    return rows.length > 0 ? this._toMeta(rows[0]) : null;
+    if (rows.length === 0) return void 0;
+    rows.sort(
+      (a, b) => String(b.created_at ?? "").localeCompare(String(a.created_at ?? ""))
+    );
+    return rows[0];
   }
   async list() {
     const rows = await this.db.query("secrets", {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "botinabox",
-  "version": "2.16.17",
+  "version": "2.16.18",
   "description": "Bot in a Box — framework for building multi-agent bots",
   "type": "module",
   "main": "./dist/index.js",