negotium 0.22.3 → 0.22.4

package/dist/agent-helpers.js

@@ -1807,6 +1807,9 @@ function initializeApiMessagesSchema() {
   try {
     db.exec("ALTER TABLE api_messages ADD COLUMN subagent_card TEXT");
   } catch {}
+  try {
+    db.exec("ALTER TABLE api_messages ADD COLUMN vault_secret_request TEXT");
+  } catch {}
   db.exec("CREATE INDEX IF NOT EXISTS idx_api_messages_topic ON api_messages(topic_id)");
   db.exec("CREATE INDEX IF NOT EXISTS idx_api_messages_thread_root ON api_messages(thread_root_id)");
 }
@@ -1843,6 +1846,7 @@ function rowToDto(r) {
     askUserQuestion: r.ask_user_question ? JSON.parse(r.ask_user_question) : undefined,
     tellCard: r.tell_card ? JSON.parse(r.tell_card) : undefined,
     subagentCard: r.subagent_card ? JSON.parse(r.subagent_card) : undefined,
+    vaultSecretRequest: r.vault_secret_request ? JSON.parse(r.vault_secret_request) : undefined,
     mentions: r.mentions ? JSON.parse(r.mentions) : undefined,
     threadRootId: r.thread_root_id ?? undefined,
     createdAt: r.created_at
@@ -1864,9 +1868,9 @@ function appendApiMessage(msg, options = {}) {
   let inserted = false;
   db.transaction(() => {
     const result = db.query(`INSERT INTO api_messages
-         (id, topic_id, parent_id, author_id, source_adapter, source_node, source_message_id, text, query_id, agent_type, model, attachments, usage, deleted, edited_at, reactions, kind, ask_user_question, tell_card, subagent_card, mentions, thread_root_id, created_at)
-       VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
-       ON CONFLICT(id) DO NOTHING`).run(msg.id, msg.topicId, msg.parentId ?? null, msg.authorId, msg.sourceAdapter ?? null, msg.sourceNode ?? null, msg.sourceMessageId ?? null, msg.text, msg.queryId ?? null, msg.agentType ?? null, msg.model ?? null, msg.attachments ? JSON.stringify(msg.attachments) : null, msg.usage ? JSON.stringify(msg.usage) : null, msg.deleted ? 1 : 0, msg.editedAt ?? null, msg.reactions?.length ? JSON.stringify(msg.reactions) : null, msg.kind ?? null, msg.askUserQuestion ? JSON.stringify(msg.askUserQuestion) : null, msg.tellCard ? JSON.stringify(msg.tellCard) : null, msg.subagentCard ? JSON.stringify(msg.subagentCard) : null, msg.mentions?.length ? JSON.stringify(msg.mentions) : null, msg.threadRootId ?? null, msg.createdAt);
+         (id, topic_id, parent_id, author_id, source_adapter, source_node, source_message_id, text, query_id, agent_type, model, attachments, usage, deleted, edited_at, reactions, kind, ask_user_question, tell_card, subagent_card, vault_secret_request, mentions, thread_root_id, created_at)
+       VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+       ON CONFLICT(id) DO NOTHING`).run(msg.id, msg.topicId, msg.parentId ?? null, msg.authorId, msg.sourceAdapter ?? null, msg.sourceNode ?? null, msg.sourceMessageId ?? null, msg.text, msg.queryId ?? null, msg.agentType ?? null, msg.model ?? null, msg.attachments ? JSON.stringify(msg.attachments) : null, msg.usage ? JSON.stringify(msg.usage) : null, msg.deleted ? 1 : 0, msg.editedAt ?? null, msg.reactions?.length ? JSON.stringify(msg.reactions) : null, msg.kind ?? null, msg.askUserQuestion ? JSON.stringify(msg.askUserQuestion) : null, msg.tellCard ? JSON.stringify(msg.tellCard) : null, msg.subagentCard ? JSON.stringify(msg.subagentCard) : null, msg.vaultSecretRequest ? JSON.stringify(msg.vaultSecretRequest) : null, msg.mentions?.length ? JSON.stringify(msg.mentions) : null, msg.threadRootId ?? null, msg.createdAt);
     inserted = Number(result.changes ?? 0) > 0;
     if (inserted && updateTopicLastMessageAt && !msg.deleted) {
       db.query(`UPDATE api_topics
@@ -3926,6 +3930,16 @@ function vaultListDecryptableValues(userId) {
   }
   return entries;
 }
+function vaultSet(userId, key, value, description = "") {
+  const normalizedKey = normalizeVaultKey(key);
+  activeVaultDatabase().prepare(`INSERT INTO vault (user_id, key, value, description) VALUES (?, ?, ?, ?)
+       ON CONFLICT (user_id, key) DO UPDATE
+         SET value = excluded.value, description = excluded.description`).run(userId, normalizedKey, encryptVaultValue(userId, normalizedKey, value, vaultMasterKey), description);
+}
+function vaultHasKey(userId, key) {
+  const row = activeVaultDatabase().prepare("SELECT 1 FROM vault WHERE user_id = ? AND key = ?").get(userId, normalizeVaultKey(key));
+  return row != null;
+}
 function vaultGetValue(userId, key) {
   const normalizedKey = normalizeVaultKey(key);
   const row = activeVaultDatabase().prepare("SELECT key, value FROM vault WHERE user_id = ? AND key = ?").get(userId, normalizedKey);
@@ -3984,7 +3998,7 @@ function redactVaultSecrets(userId, text) {
   }
   return redacted;
 }
-var vaultDb, vaultMasterKey, VAULT_VALUE_MAX_BYTES;
+var vaultDb, vaultMasterKey, VAULT_KEY_PATTERN, VAULT_VALUE_MIN_BYTES = 4, VAULT_VALUE_MAX_BYTES, VAULT_DESCRIPTION_MAX_LENGTH = 500;
 var init_vault = __esm(async () => {
   init_config();
   init_vault_crypto();
@@ -3993,6 +4007,7 @@ var init_vault = __esm(async () => {
     init_storage_host()
   ]);
   vaultMasterKey = VAULT_MASTER_KEY;
+  VAULT_KEY_PATTERN = /^[A-Z][A-Z0-9_]{0,127}$/;
   VAULT_VALUE_MAX_BYTES = 64 * 1024;
 });
 
@@ -5215,7 +5230,7 @@ var init_codex = __esm(async () => {
 });
 
 // ../../packages/core/src/version.ts
-var NEGOTIUM_VERSION = "0.22.3";
+var NEGOTIUM_VERSION = "0.22.4";
 
 // ../../packages/core/src/agents/codex-native-multi-agent.ts
 import { spawn as spawn2 } from "child_process";
@@ -18305,6 +18320,548 @@ var init_topic_config = __esm(async () => {
   await init_api_topic_config();
 });
 
+// ../../packages/core/src/storage/vault-request-gates.ts
+function initializeVaultRequestGateSchema() {
+  db.exec(`
+    CREATE TABLE IF NOT EXISTS vault_request_gates (
+      gate_id TEXT PRIMARY KEY,
+      topic_id TEXT NOT NULL REFERENCES api_topics(id) ON DELETE CASCADE,
+      query_id TEXT,
+      idempotency_key TEXT NOT NULL,
+      body_hash TEXT NOT NULL,
+      message_id TEXT NOT NULL UNIQUE,
+      owner_id TEXT NOT NULL,
+      state TEXT NOT NULL,
+      outcome TEXT,
+      answered_by TEXT,
+      claim_source TEXT,
+      created_at TEXT NOT NULL,
+      updated_at TEXT NOT NULL
+    );
+    CREATE INDEX IF NOT EXISTS idx_vault_request_gates_idempotency
+      ON vault_request_gates(topic_id, idempotency_key, created_at);
+    CREATE UNIQUE INDEX IF NOT EXISTS idx_vault_request_gates_active_key
+      ON vault_request_gates(topic_id, idempotency_key)
+      WHERE state IN ('pending', 'claimed');
+  `);
+}
+function fromRow2(row) {
+  return {
+    gateId: row.gate_id,
+    topicId: row.topic_id,
+    queryId: row.query_id ?? undefined,
+    idempotencyKey: row.idempotency_key,
+    bodyHash: row.body_hash,
+    messageId: row.message_id,
+    ownerId: row.owner_id,
+    state: row.state,
+    outcome: row.outcome ?? undefined,
+    answeredBy: row.answered_by ?? undefined
+  };
+}
+function latestGate2(topicId, idempotencyKey) {
+  const row = db.query(`SELECT * FROM vault_request_gates
+       WHERE topic_id = ? AND idempotency_key = ?
+       ORDER BY rowid DESC LIMIT 1`).get(topicId, idempotencyKey);
+  return row ? fromRow2(row) : null;
+}
+function expireVaultCard(topicId, messageId, editedAt) {
+  const row = db.query(`SELECT vault_secret_request FROM api_messages
+       WHERE topic_id = ? AND id = ? AND deleted = 0 AND kind = 'vault_secret_request'`).get(topicId, messageId);
+  if (!row?.vault_secret_request)
+    return null;
+  const request = JSON.parse(row.vault_secret_request);
+  if (request.status !== "pending")
+    return null;
+  const expired = { ...request, status: "expired" };
+  db.query(`UPDATE api_messages SET vault_secret_request = ?, edited_at = ?
+     WHERE topic_id = ? AND id = ? AND deleted = 0 AND kind = 'vault_secret_request'`).run(JSON.stringify(expired), editedAt, topicId, messageId);
+  return { topicId, messageId, vaultSecretRequest: expired, editedAt };
+}
+function prepareVaultRequestGate(args) {
+  return db.transaction(() => {
+    const latest = latestGate2(args.topicId, args.idempotencyKey);
+    if (latest?.bodyHash !== undefined && latest.bodyHash !== args.bodyHash) {
+      return { outcome: "conflict", gate: latest };
+    }
+    if (latest?.state === "answered")
+      return { outcome: "replay", gate: latest };
+    if (latest && (latest.state === "pending" || latest.state === "claimed")) {
+      return { outcome: "pending", gate: latest };
+    }
+    db.query(`INSERT INTO vault_request_gates
+       (gate_id, topic_id, query_id, idempotency_key, body_hash, message_id, owner_id, state, created_at, updated_at)
+       VALUES (?, ?, ?, ?, ?, ?, ?, 'pending', ?, ?)`).run(args.gateId, args.topicId, args.queryId ?? null, args.idempotencyKey, args.bodyHash, args.messageId, args.ownerId, args.now, args.now);
+    return {
+      outcome: "created",
+      gate: {
+        gateId: args.gateId,
+        topicId: args.topicId,
+        queryId: args.queryId,
+        idempotencyKey: args.idempotencyKey,
+        bodyHash: args.bodyHash,
+        messageId: args.messageId,
+        ownerId: args.ownerId,
+        state: "pending"
+      }
+    };
+  }).immediate();
+}
+function quarantineVaultRequestGate(gateId, ownerId, now = new Date().toISOString()) {
+  return db.transaction(() => {
+    const row = db.query("SELECT * FROM vault_request_gates WHERE gate_id = ?").get(gateId);
+    if (!row || row.owner_id !== ownerId || !["pending", "claimed"].includes(row.state)) {
+      return null;
+    }
+    const result = db.query(`UPDATE vault_request_gates SET state = 'quarantined', updated_at = ?
+         WHERE gate_id = ? AND owner_id = ? AND state IN ('pending', 'claimed')`).run(now, gateId, ownerId);
+    if (Number(result.changes ?? 0) === 0)
+      return null;
+    return expireVaultCard(row.topic_id, row.message_id, now);
+  }).immediate();
+}
+function quarantineForeignVaultRequestGates(liveOwnerIds, now = new Date().toISOString()) {
+  return db.transaction(() => {
+    const rows = db.query(`SELECT * FROM vault_request_gates
+         WHERE state IN ('pending', 'claimed')`).all();
+    const updates = [];
+    for (const row of rows) {
+      if (liveOwnerIds.has(row.owner_id))
+        continue;
+      if (row.state === "claimed" && row.outcome && row.answered_by) {
+        db.query(`UPDATE vault_request_gates SET state = 'answered', updated_at = ?
+           WHERE gate_id = ? AND state = 'claimed'`).run(now, row.gate_id);
+        continue;
+      }
+      const result = db.query(`UPDATE vault_request_gates SET state = 'quarantined', updated_at = ?
+           WHERE gate_id = ? AND state IN ('pending', 'claimed')`).run(now, row.gate_id);
+      if (Number(result.changes ?? 0) === 0)
+        continue;
+      const update = expireVaultCard(row.topic_id, row.message_id, now);
+      if (update)
+        updates.push(update);
+    }
+    const legacyCards = db.query(`SELECT m.topic_id, m.id
+         FROM api_messages m
+         LEFT JOIN vault_request_gates g ON g.message_id = m.id
+         WHERE m.kind = 'vault_secret_request'
+           AND m.deleted = 0
+           AND g.gate_id IS NULL`).all();
+    for (const card of legacyCards) {
+      const update = expireVaultCard(card.topic_id, card.id, now);
+      if (update)
+        updates.push(update);
+    }
+    return updates;
+  }).immediate();
+}
+function claimVaultRequestGateAndAnswer(args) {
+  return db.transaction(() => {
+    const row = db.query(`SELECT * FROM vault_request_gates
+         WHERE topic_id = ? AND message_id = ?
+         ORDER BY rowid DESC LIMIT 1`).get(args.topicId, args.messageId);
+    if (!row || row.owner_id !== args.ownerId || row.state !== "pending") {
+      return { outcome: "unavailable" };
+    }
+    const message = db.query(`SELECT vault_secret_request FROM api_messages
+         WHERE topic_id = ? AND id = ? AND deleted = 0 AND kind = 'vault_secret_request'`).get(args.topicId, args.messageId);
+    if (!message?.vault_secret_request)
+      return { outcome: "unavailable" };
+    const request = JSON.parse(message.vault_secret_request);
+    if (request.status !== "pending")
+      return { outcome: "unavailable" };
+    const claimed = db.query(`UPDATE vault_request_gates
+         SET state = 'answered', outcome = ?, answered_by = ?, claim_source = ?, updated_at = ?
+         WHERE gate_id = ? AND owner_id = ? AND state = 'pending'`).run(args.outcome, args.userId, args.source, args.now, row.gate_id, args.ownerId);
+    if (Number(claimed.changes ?? 0) === 0)
+      return { outcome: "unavailable" };
+    const answered = {
+      ...request,
+      status: args.outcome,
+      answeredBy: args.userId
+    };
+    db.query(`UPDATE api_messages SET vault_secret_request = ?, edited_at = ?
+       WHERE topic_id = ? AND id = ? AND deleted = 0 AND kind = 'vault_secret_request'`).run(JSON.stringify(answered), args.now, args.topicId, args.messageId);
+    return {
+      outcome: "claimed",
+      gate: fromRow2({
+        ...row,
+        state: "answered",
+        outcome: args.outcome,
+        answered_by: args.userId
+      }),
+      vaultSecretRequest: answered,
+      editedAt: args.now
+    };
+  }).immediate();
+}
+function cancelVaultRequestGate(topicId, messageId, ownerId, now = new Date().toISOString()) {
+  return db.transaction(() => {
+    const row = db.query(`SELECT * FROM vault_request_gates
+         WHERE topic_id = ? AND message_id = ? ORDER BY rowid DESC LIMIT 1`).get(topicId, messageId);
+    if (!row || row.owner_id !== ownerId || row.state !== "pending")
+      return null;
+    const result = db.query(`UPDATE vault_request_gates SET state = 'cancelled', updated_at = ?
+         WHERE gate_id = ? AND owner_id = ? AND state = 'pending'`).run(now, row.gate_id, ownerId);
+    if (Number(result.changes ?? 0) === 0)
+      return null;
+    return expireVaultCard(topicId, messageId, now);
+  }).immediate();
+}
+var init_vault_request_gates = __esm(async () => {
+  await __promiseAll([
+    init_forum_db(),
+    init_storage_host()
+  ]);
+  registerStorageSchemaInitializer(initializeVaultRequestGateSchema, 32);
+});
+
+// ../../packages/core/src/agents/mcp-tools/request-vault.ts
+import { createHash as createHash12, randomUUID as randomUUID17 } from "crypto";
+import { z as z4 } from "zod";
+function requestBodyHash(key, description) {
+  return createHash12("sha256").update(JSON.stringify({ key, description })).digest("hex");
+}
+function answerToolResult2(key, outcome) {
+  if (outcome === "no_answer") {
+    return errorResult("The AI turn ended before the user answered.");
+  }
+  if (outcome === "declined") {
+    return errorResult(`User declined to provide a value for ${key}.`);
+  }
+  return textResult(`User stored a value for ${key} in the vault. Reference it as {{${key}}} directly in supported transient tool inputs. Never ask the user to repeat the raw value in chat.`);
+}
+function createRequestVaultRuntime(host) {
+  const pendingRequests = new Map;
+  const { ownerId } = host.runtime;
+  const createId = () => host.runtime.createId();
+  const now = () => host.runtime.now();
+  const isProcessLeaseAlive = (lease) => host.durability.processLeases.isAlive(lease);
+  let gateOwnerLease = null;
+  function broadcastGateUpdates(updates) {
+    for (const update of updates)
+      host.messaging.publication.publishCardUpdate(update);
+  }
+  function startGateOwner() {
+    if (gateOwnerLease)
+      return;
+    gateOwnerLease = host.durability.processLeases.acquire(`${VAULT_GATE_LEASE_ROLE_PREFIX}${ownerId}`, ownerId);
+    if (!gateOwnerLease)
+      throw new Error("failed to acquire the vault-request gate owner lease");
+  }
+  function stopGateOwner() {
+    gateOwnerLease?.stop();
+    gateOwnerLease = null;
+  }
+  function reconcilePendingGates() {
+    startGateOwner();
+    host.durability.processLeases.removeDead(VAULT_GATE_LEASE_ROLE_PREFIX);
+    const liveOwners = new Set(host.durability.processLeases.list(VAULT_GATE_LEASE_ROLE_PREFIX).filter(isProcessLeaseAlive).map((lease) => lease.ownerId));
+    const updates = host.durability.gates.quarantineForeign(liveOwners, now());
+    broadcastGateUpdates(updates);
+    return updates.length;
+  }
+  function answerPendingRequest(topicId, messageId, userId, value) {
+    reconcilePendingGates();
+    const topic = host.topics.getTopic(topicId);
+    if (!topic?.participants.some((participant) => participant.userId === userId)) {
+      return { ok: false, error: "User is not a member of this topic." };
+    }
+    const existing = host.messaging.persistence.getMessage(topicId, messageId);
+    const request = existing?.kind === "vault_secret_request" ? existing.vaultSecretRequest : undefined;
+    if (!existing || existing.deleted || !request) {
+      return { ok: false, error: "Vault request card not found." };
+    }
+    if (request.status !== "pending") {
+      return { ok: false, error: "This request is no longer awaiting an answer." };
+    }
+    const pending = pendingRequests.get(messageId);
+    if (!pending || pending.topicId !== topicId) {
+      return { ok: false, error: "This request is no longer awaiting an answer." };
+    }
+    const declining = value === null;
+    if (!declining) {
+      const bytes = Buffer.byteLength(value, "utf8");
+      if (bytes < VAULT_VALUE_MIN_BYTES || bytes > VAULT_VALUE_MAX_BYTES) {
+        return {
+          ok: false,
+          error: `Value must be between ${VAULT_VALUE_MIN_BYTES} and ${VAULT_VALUE_MAX_BYTES} bytes.`
+        };
+      }
+    }
+    if (!declining) {
+      try {
+        host.vault.set(userId, pending.key, value, pending.description);
+      } catch (error) {
+        return {
+          ok: false,
+          error: `Failed to store the value: ${error instanceof Error ? error.message : String(error)}`
+        };
+      }
+    }
+    const outcome = declining ? "declined" : "fulfilled";
+    let claim;
+    try {
+      claim = host.durability.gates.claimAndAnswer({
+        topicId,
+        messageId,
+        outcome,
+        userId,
+        ownerId,
+        source: "host-control",
+        now: now()
+      });
+    } catch {
+      return { ok: false, error: "This request could not be claimed safely. Retry once." };
+    }
+    if (claim.outcome !== "claimed") {
+      return { ok: false, error: "This request is no longer awaiting an answer." };
+    }
+    pendingRequests.delete(messageId);
+    const answerMessage = {
+      id: createId(),
+      topicId,
+      authorId: userId,
+      text: outcome === "fulfilled" ? `Provided a value for ${pending.key}.` : `Declined to provide a value for ${pending.key}.`,
+      parentId: messageId,
+      ...existing.threadRootId ? { threadRootId: existing.threadRootId } : {},
+      createdAt: now()
+    };
+    try {
+      host.messaging.publication.publishCardUpdate({
+        topicId,
+        messageId,
+        vaultSecretRequest: claim.vaultSecretRequest,
+        editedAt: claim.editedAt
+      });
+      host.messaging.persistence.appendMessage(answerMessage);
+      host.messaging.publication.publishMessage(topicId, answerMessage);
+    } catch {}
+    pending.resolve({ outcome, userId });
+    return { ok: true, queryId: pending.queryId, outcome, answerMessage };
+  }
+  function cancelPendingRequests(topicId, queryId) {
+    for (const [messageId, pending] of pendingRequests) {
+      if (pending.topicId === topicId && pending.queryId === queryId) {
+        pendingRequests.delete(messageId);
+        const update = host.durability.gates.cancel(topicId, messageId, ownerId, now());
+        if (update)
+          broadcastGateUpdates([update]);
+        pending.resolve({ outcome: "no_answer", userId: "" });
+      }
+    }
+  }
+  function appendRequestMessage(ctx, key, description, messageId) {
+    const cfg = host.topics.getConfig(ctx.topicId);
+    const vaultSecretRequest = { key, description, status: "pending" };
+    const message = {
+      id: messageId,
+      topicId: ctx.topicId,
+      authorId: "ai",
+      text: `Vault secret requested: ${key}`,
+      queryId: ctx.queryId,
+      agentType: ctx.agent,
+      model: ctx.model ?? cfg?.model ?? "unknown",
+      kind: "vault_secret_request",
+      vaultSecretRequest,
+      ...ctx.threadRootId ? { threadRootId: ctx.threadRootId } : {},
+      createdAt: now()
+    };
+    host.messaging.persistence.appendMessage(message);
+    return message;
+  }
+  async function requestVaultSecret(ctx, input) {
+    if (ctx.unsupportedSurface) {
+      return errorResult("Error: this surface cannot mask secret input safely (there is no password field here, so a typed value would land in plaintext chat history). Ask the user to provide this value from the Terminal app or Otium instead.");
+    }
+    reconcilePendingGates();
+    const topic = host.topics.getTopic(ctx.topicId);
+    if (!topic)
+      return errorResult(`Error: topic '${ctx.topicId}' not found.`);
+    if (!topic.participants.some((participant) => participant.userId === ctx.userId)) {
+      return errorResult("Error: user is not a member of this topic.");
+    }
+    if (typeof input.key !== "string" || !input.key.trim()) {
+      return errorResult("Error: key is required.");
+    }
+    const key = normalizeVaultKey(input.key);
+    if (!VAULT_KEY_PATTERN.test(key)) {
+      return errorResult("Error: key must start with a letter and contain only uppercase letters, digits, and underscores (max 128 chars).");
+    }
+    if (typeof input.description !== "string" || !input.description.trim()) {
+      return errorResult("Error: description is required so the user knows what to type.");
+    }
+    const description = input.description.trim().slice(0, MAX_DESCRIPTION_CHARS);
+    if (input.idempotency_key !== undefined && (typeof input.idempotency_key !== "string" || !input.idempotency_key.trim())) {
+      return errorResult("Error: idempotency_key must be a non-empty string.");
+    }
+    const rawIdempotencyKey = typeof input.idempotency_key === "string" ? input.idempotency_key.trim() : createId();
+    if (rawIdempotencyKey.length > MAX_IDEMPOTENCY_KEY_CHARS2) {
+      return errorResult(`Error: idempotency_key must be at most ${MAX_IDEMPOTENCY_KEY_CHARS2} characters.`);
+    }
+    const bodyHash = requestBodyHash(key, description);
+    const createGate = () => {
+      const suffix = createId();
+      return host.durability.gates.prepare({
+        gateId: `vault-request-gate-${suffix}`,
+        topicId: ctx.topicId,
+        queryId: ctx.queryId,
+        idempotencyKey: rawIdempotencyKey,
+        bodyHash,
+        messageId: `vault-request-${ctx.queryId ?? "runtime"}-${suffix}`,
+        ownerId,
+        now: now()
+      });
+    };
+    let prepared = createGate();
+    if (prepared.outcome === "conflict") {
+      return errorResult("Error: idempotency_conflict. The same idempotency_key was already used with a different key or description.");
+    }
+    if (prepared.outcome === "replay") {
+      if (!prepared.gate.outcome || !prepared.gate.answeredBy) {
+        return errorResult("Error: the stored request_vault_secret replay is incomplete.");
+      }
+      return answerToolResult2(key, prepared.gate.outcome);
+    }
+    if (prepared.outcome === "pending") {
+      if (prepared.gate.ownerId !== ownerId) {
+        return errorResult("Error: this request_vault_secret is pending in another healthy runtime process.");
+      }
+      const existingPending = pendingRequests.get(prepared.gate.messageId);
+      if (existingPending)
+        return answerToolResult2(key, (await existingPending.promise).outcome);
+      if (prepared.gate.state === "claimed") {
+        return errorResult("Error: this request_vault_secret is already being finalized.");
+      }
+      const update = host.durability.gates.quarantine(prepared.gate.gateId, ownerId, now());
+      if (update)
+        broadcastGateUpdates([update]);
+      prepared = createGate();
+    }
+    if (prepared.outcome !== "created") {
+      return errorResult("Error: failed to create a durable request_vault_secret gate.");
+    }
+    if (host.vault.hasKey(ctx.userId, key)) {
+      host.durability.gates.quarantine(prepared.gate.gateId, ownerId, now());
+      return errorResult(`Error: vault key '${key}' already exists. Pick a different key, or ask the user to update it from their Vault manager.`);
+    }
+    let message;
+    try {
+      message = appendRequestMessage(ctx, key, description, prepared.gate.messageId);
+    } catch (error) {
+      host.durability.gates.quarantine(prepared.gate.gateId, ownerId, now());
+      return errorResult(`Error: failed to persist request_vault_secret: ${error instanceof Error ? error.message : String(error)}`);
+    }
+    let resolveAnswer;
+    const promise = new Promise((resolve17) => {
+      resolveAnswer = resolve17;
+    });
+    pendingRequests.set(message.id, {
+      topicId: ctx.topicId,
+      queryId: ctx.queryId,
+      messageId: message.id,
+      key,
+      description,
+      promise,
+      resolve: resolveAnswer
+    });
+    try {
+      host.messaging.publication.publishMessage(ctx.topicId, message);
+    } catch (error) {
+      pendingRequests.delete(message.id);
+      try {
+        host.durability.gates.quarantine(prepared.gate.gateId, ownerId, now());
+      } catch {}
+      return errorResult(`Error: failed to publish request_vault_secret: ${error instanceof Error ? error.message : String(error)}`);
+    }
+    return answerToolResult2(key, (await promise).outcome);
+  }
+  function createToolDefinition(ctx) {
+    return {
+      name: "request_vault_secret",
+      description: "Ask the user to store a brand-new secret value in their Vault. You choose the key name and a short description of what to paste; the user types only the value on a surface that can mask it, and you never see the raw value. Use this instead of asking the user to paste a secret directly into chat. After it succeeds, reference the value as {{KEY}} in supported transient tool inputs.",
+      schema: {
+        key: z4.string().describe("New Vault key name, e.g. STRIPE_API_KEY. Letters/digits/underscores, must start with a letter."),
+        description: z4.string().max(MAX_DESCRIPTION_CHARS).describe("One sentence telling the user what value to paste and where it's from."),
+        idempotency_key: z4.string().max(MAX_IDEMPOTENCY_KEY_CHARS2).optional().describe("Optional retry key. Reusing it with the same key/description replays the existing result; reusing it with different content fails.")
+      },
+      async handler(input) {
+        return requestVaultSecret(ctx, input);
+      }
+    };
+  }
+  return {
+    startGateOwner,
+    stopGateOwner,
+    reconcilePendingGates,
+    answerPendingRequest,
+    cancelPendingRequests,
+    createToolDefinition
+  };
+}
+function cancelPendingVaultSecretRequests(topicId, queryId) {
+  defaultRequestVaultRuntime.cancelPendingRequests(topicId, queryId);
+}
+var MAX_DESCRIPTION_CHARS, MAX_IDEMPOTENCY_KEY_CHARS2 = 200, VAULT_GATE_OWNER_ID, VAULT_GATE_LEASE_ROLE_PREFIX = "vault-request-gate:", defaultRequestVaultDurabilityHost, defaultRequestVaultRuntime;
+var init_request_vault = __esm(async () => {
+  init_common();
+  await __promiseAll([
+    init_bus(),
+    init_api_messages(),
+    init_api_topic_config(),
+    init_api_topics(),
+    init_runtime_process_leases(),
+    init_vault(),
+    init_vault_request_gates()
+  ]);
+  MAX_DESCRIPTION_CHARS = VAULT_DESCRIPTION_MAX_LENGTH;
+  VAULT_GATE_OWNER_ID = `request-vault-${process.pid}-${randomUUID17()}`;
+  defaultRequestVaultDurabilityHost = {
+    gates: {
+      prepare: prepareVaultRequestGate,
+      claimAndAnswer: claimVaultRequestGateAndAnswer,
+      cancel: cancelVaultRequestGate,
+      quarantine: quarantineVaultRequestGate,
+      quarantineForeign: quarantineForeignVaultRequestGates
+    },
+    processLeases: {
+      acquire: (role, ownerId) => acquireRuntimeProcessLease(role, { ownerId }),
+      list: listRuntimeProcessLeases,
+      isAlive: isRuntimeProcessLeaseAlive,
+      removeDead: removeDeadRuntimeProcessLeases
+    }
+  };
+  defaultRequestVaultRuntime = createRequestVaultRuntime({
+    messaging: {
+      persistence: {
+        getMessage: getApiMessage,
+        appendMessage: appendApiMessage
+      },
+      publication: {
+        publishMessage: (topicId, message) => WsHub.get().broadcastMessage(topicId, message),
+        publishCardUpdate: (update) => WsHub.get().broadcastMessageUpdated(update.topicId, update.messageId, {
+          vaultSecretRequest: update.vaultSecretRequest,
+          editedAt: update.editedAt
+        })
+      }
+    },
+    topics: {
+      getTopic,
+      getConfig: getApiTopicConfig
+    },
+    vault: {
+      hasKey: vaultHasKey,
+      set: vaultSet
+    },
+    durability: defaultRequestVaultDurabilityHost,
+    runtime: {
+      ownerId: VAULT_GATE_OWNER_ID,
+      createId: randomUUID17,
+      now: () => new Date().toISOString()
+    }
+  });
+});
+
 // ../../packages/core/src/mcp/peer-bridge.ts
 function flushPeerRuntimeEvents(localTopicId) {
   return activeBridge2?.flushEvents?.(localTopicId) ?? Promise.resolve(true);
@@ -18679,7 +19236,7 @@ var init_visuals = __esm(async () => {
 });
 
 // ../../packages/core/src/runtime/turn-event-stream.ts
-import { randomUUID as randomUUID17 } from "crypto";
+import { randomUUID as randomUUID18 } from "crypto";
 import { realpathSync as realpathSync6, statSync as statSync9 } from "fs";
 import { isAbsolute as isAbsolute7, resolve as resolve18 } from "path";
 function sessionEventMatchesCurrentExecution(topicId, queryId, agent, model) {
@@ -18786,7 +19343,7 @@ async function runTurnEventStream(topicId, topicTitle, queryId, events, control,
     if (silent || !text2.trim())
       return null;
     const message = {
-      id: randomUUID17(),
+      id: randomUUID18(),
       topicId,
       authorId: "ai",
       text: text2,
@@ -19266,6 +19823,7 @@ ${JSON.stringify(event.input ?? {})}`);
     const stillCurrent = getRoomQuery(roomId)?.queryId === queryId;
     clearRoomQuery(roomId, queryId);
     cancelPendingAskUserQuestions(topicId, queryId);
+    cancelPendingVaultSecretRequests(topicId, queryId);
     if (stillCurrent && roomId === topicId)
       clearQueryState(userId, topicId, topicTitle);
     if (!silent && stillCurrent)
@@ -19309,6 +19867,7 @@ var init_turn_event_stream = __esm(async () => {
     init_idle_archiver(),
     init_idle_compact(),
     init_ask_user(),
+    init_request_vault(),
     init_spawn_subagent(),
     init_registry(),
     init_bus(),
@@ -19463,7 +20022,7 @@ __export(exports_turn_runner, {
   FALLBACK_ORDER: () => FALLBACK_ORDER,
   AGENT_DISPLAY_NAME: () => AGENT_DISPLAY_NAME
 });
-import { randomUUID as randomUUID18 } from "crypto";
+import { randomUUID as randomUUID19 } from "crypto";
 import { existsSync as existsSync22, mkdirSync as mkdirSync19, readdirSync as readdirSync5, statSync as statSync10 } from "fs";
 import { join as join31 } from "path";
 function withDefaultPlaywright(configuredMcp, isManager) {
@@ -19488,7 +20047,7 @@ ${reminderPrompt}` };
 }
 function appendSystemMessage(topicId, text2, threadRootId) {
   const message = {
-    id: randomUUID18(),
+    id: randomUUID19(),
     topicId,
     authorId: "system",
     text: text2,
@@ -19510,7 +20069,7 @@ function notifyPlaywrightUnavailable(topicId) {
 }
 function appendAskReplyMessage(topicId, text2, sourceLabel, body, kind, agentType, threadRootId) {
   const message = {
-    id: randomUUID18(),
+    id: randomUUID19(),
     topicId,
     authorId: "ai",
     text: text2,
@@ -20031,7 +20590,7 @@ function startAiTurn(params) {
   const askReplySources = params.askReplySources;
   const sessionRetried = params._sessionRetried === true;
   const emptyResponseRetried = params._emptyResponseRetried === true;
-  const queryId = asTurnId(params._queryId ?? randomUUID18());
+  const queryId = asTurnId(params._queryId ?? randomUUID19());
   const roomId = turnConcurrency === "isolated" ? isolatedTurnRoomId(topicId, queryId) : asTurnSlotKey(topicId);
   const currentRuntimeEpoch = getRuntimeTopicEpoch(topic.id);
   const runtimeEpoch = params._runtimeEpoch ?? currentRuntimeEpoch;
@@ -20802,7 +21361,7 @@ function triggerTopicAiTurn(topicId, userId, prompt, agentType, opts) {
   if (!opts?.silent && !opts?.hideInjectMessage) {
     const now = new Date().toISOString();
     const injectMsg = {
-      id: opts?.requestId ? `tell-${opts.requestId}` : `tell-${randomUUID18()}`,
+      id: opts?.requestId ? `tell-${opts.requestId}` : `tell-${randomUUID19()}`,
       topicId,
       authorId: opts?.injectAuthorId ?? userId,
       sourceAdapter: opts?.injectSourceAdapter,
@@ -20924,7 +21483,7 @@ var init_turn_runner = __esm(async () => {
 });
 
 // ../../packages/core/src/agents/mcp-tools/spawn-subagent.ts
-import { z as z4 } from "zod";
+import { z as z5 } from "zod";
 function activeQueryUserId(topic) {
   return topic?.participants.find((participant) => hasActiveQuery(participant.userId, topic.id))?.userId;
 }
@@ -21491,7 +22050,7 @@ ${card.task}${reportInstruction}`;
         name: "start_subagent",
         description: "Start a prepared descendant subagent task.",
         schema: {
-          topic_id: z4.string().describe("Prepared subagent room id.")
+          topic_id: z5.string().describe("Prepared subagent room id.")
         },
         async handler(input) {
           const result = ownedSubagentTree(ctx);
@@ -21511,7 +22070,7 @@ ${card.task}${reportInstruction}`;
         name: "delete_subagent",
         description: "Permanently delete one descendant subagent room managed by the current room. " + "This removes its conversation, workspace, runtime state, and topic. Keep it when follow-up work is likely.",
         schema: {
-          topic_id: z4.string().describe("Exact subagent room id returned by list_subagents; names are not accepted.")
+          topic_id: z5.string().describe("Exact subagent room id returned by list_subagents; names are not accepted.")
         },
         async handler(input) {
           const result = ownedSubagentTree(ctx);
@@ -21535,8 +22094,8 @@ ${card.task}${reportInstruction}`;
         name: "grant_subagent_tell",
         description: "Allow one descendant subagent to tell_session another topic in this managed subagent tree. " + "Direct-parent reporting is always allowed and does not need a grant.",
         schema: {
-          subagent_topic_id: z4.string().describe("Source descendant subagent topic id."),
-          target_topic_id: z4.string().describe("Target topic id: this manager room or another descendant in its tree.")
+          subagent_topic_id: z5.string().describe("Source descendant subagent topic id."),
+          target_topic_id: z5.string().describe("Target topic id: this manager room or another descendant in its tree.")
         },
         async handler(input) {
           const result = ownedSubagentTree(ctx);
@@ -21561,8 +22120,8 @@ ${card.task}${reportInstruction}`;
         name: "revoke_subagent_tell",
         description: "Remove an extra tell_session connection previously granted to a descendant subagent.",
         schema: {
-          subagent_topic_id: z4.string().describe("Source descendant subagent topic id."),
-          target_topic_id: z4.string().describe("Granted target topic id.")
+          subagent_topic_id: z5.string().describe("Source descendant subagent topic id."),
+          target_topic_id: z5.string().describe("Granted target topic id.")
         },
         async handler(input) {
           const result = ownedSubagentTree(ctx);
@@ -21584,18 +22143,18 @@ ${card.task}${reportInstruction}`;
   }
   function createSpawnSubagentToolDefinition(ctx, options = {}) {
     const executionOverrideSchema = options.executionOverrides === false ? {} : {
-      agent: z4.enum(["claude", "codex", "maestro"]).optional().describe("Agent backend override. Defaults to this room's agent."),
-      model: z4.string().optional().describe(`Best-fit model override from the system prompt catalog. Omit agent+model to inherit ${ctx.agent}/${ctx.model ?? "default"}; overriding agent without model uses that agent's default.`)
+      agent: z5.enum(["claude", "codex", "maestro"]).optional().describe("Agent backend override. Defaults to this room's agent."),
+      model: z5.string().optional().describe(`Best-fit model override from the system prompt catalog. Omit agent+model to inherit ${ctx.agent}/${ctx.model ?? "default"}; overriding agent without model uses that agent's default.`)
     };
     return {
       name: "spawn_subagent",
       description: "Delegate a self-contained task to a subagent that works in its own new agent room. " + "Returns immediately; the subagent runs in the background and reports according to report_mode. " + "The fresh room has no parent conversation history; it receives the task plus the selected or inherited topic memory. " + "Use for parallelizable or long-running side work. Do not use provider built-in Task/Agent subagents.",
       schema: {
-        task: z4.string().describe("Self-contained task brief. The worker has topic memory but no parent conversation history, so include all task-specific context."),
-        name: z4.string().optional().describe("Short name for the subagent room. Auto-generated when omitted."),
+        task: z5.string().describe("Self-contained task brief. The worker has topic memory but no parent conversation history, so include all task-specific context."),
+        name: z5.string().optional().describe("Short name for the subagent room. Auto-generated when omitted."),
         ...executionOverrideSchema,
-        memory_topic: z4.string().optional().describe("Optional knowledge source: an accessible topic id/title or topic/*.md brief. Defaults to the parent room's effective topic brief."),
-        report_mode: z4.enum(["auto", "tell", "status-only"]).optional().describe("Completion reporting: auto injects the final result, tell requires tell_session, status-only updates only the lifecycle card.")
+        memory_topic: z5.string().optional().describe("Optional knowledge source: an accessible topic id/title or topic/*.md brief. Defaults to the parent room's effective topic brief."),
+        report_mode: z5.enum(["auto", "tell", "status-only"]).optional().describe("Completion reporting: auto injects the final result, tell requires tell_session, status-only updates only the lifecycle card.")
       },
       async handler(input) {
         return createSubagent(ctx, input, true);
@@ -21607,14 +22166,14 @@ ${card.task}${reportInstruction}`;
       name: "create_subagent",
       description: "Create a prepared subagent room and task definition without starting its AI turn. " + "Use start_subagent when the team is ready to run it.",
       schema: {
-        task: z4.string().describe("Self-contained task brief for the subagent."),
-        name: z4.string().optional().describe("Short room name. Auto-generated when omitted."),
+        task: z5.string().describe("Self-contained task brief for the subagent."),
+        name: z5.string().optional().describe("Short room name. Auto-generated when omitted."),
         ...options.executionOverrides === false ? {} : {
-          agent: z4.enum(["claude", "codex", "maestro"]).optional(),
-          model: z4.string().optional()
+          agent: z5.enum(["claude", "codex", "maestro"]).optional(),
+          model: z5.string().optional()
         },
-        memory_topic: z4.string().optional().describe("Optional accessible topic id/title or topic/*.md brief to use as this worker's knowledge source. Defaults to the parent."),
-        report_mode: z4.enum(["auto", "tell", "status-only"]).optional()
+        memory_topic: z5.string().optional().describe("Optional accessible topic id/title or topic/*.md brief to use as this worker's knowledge source. Defaults to the parent."),
+        report_mode: z5.enum(["auto", "tell", "status-only"]).optional()
       },
       async handler(input) {
         return createSubagent(ctx, input, false);
@@ -22737,14 +23296,14 @@ await init_spawn_subagent();
 
 // ../../packages/core/src/agents/mcp-tools/visuals.ts
 init_common();
-import { z as z5 } from "zod";
+import { z as z6 } from "zod";
 var VISUALS_MCP_KEY = "visuals";
 var showHtmlTool = {
   name: "show_html",
   description: "Display charts, tables, or interactive HTML to the user in a sandboxed WebView side panel. Pass a complete, self-contained HTML string with inline CSS/JS. Local DOM interactions are supported. Links (<a href> to http/https URLs) are safe to include: a click opens the URL in the user's system browser. Network requests, external scripts, form posts, popups, and parent-window access are blocked.",
   schema: {
-    html: z5.string().describe("Complete, self-contained HTML document or fragment to render."),
-    title: z5.string().optional().describe("Optional title shown above the rendered card.")
+    html: z6.string().describe("Complete, self-contained HTML document or fragment to render."),
+    title: z6.string().optional().describe("Optional title shown above the rendered card.")
   },
   async handler() {
     return textResult("HTML card displayed to the user.");
@@ -22754,9 +23313,9 @@ var showMermaidTool = {
   name: "show_mermaid",
   description: "Render a Mermaid diagram in the user's visual side panel. Pass Mermaid DSL only, not markdown fences. Use this for flowcharts, sequence diagrams, class diagrams, state diagrams, ER diagrams, timelines, and architecture diagrams.",
   schema: {
-    code: z5.string().describe("Mermaid diagram source without markdown code fences."),
-    title: z5.string().optional().describe("Optional title shown above the rendered card."),
-    theme: z5.enum(["default", "neutral", "dark", "forest"]).optional().describe("Optional Mermaid theme. Defaults to neutral.")
+    code: z6.string().describe("Mermaid diagram source without markdown code fences."),
+    title: z6.string().optional().describe("Optional title shown above the rendered card."),
+    theme: z6.enum(["default", "neutral", "dark", "forest"]).optional().describe("Optional Mermaid theme. Defaults to neutral.")
   },
   async handler() {
     return textResult("Mermaid diagram displayed to the user.");
@@ -22766,10 +23325,10 @@ var showImageTool = {
   name: "show_image",
   description: "Display an image in the user's visual side panel. Provide either file_path for an image in the topic workspace, or file_id for an uploaded file already attached in this topic.",
   schema: {
-    file_path: z5.string().optional().describe("Absolute or workspace-relative path to an image file."),
-    file_id: z5.string().optional().describe("Full Otium uploaded file UUID for an image attached in this topic."),
-    title: z5.string().optional().describe("Optional title shown above the rendered card."),
-    alt: z5.string().optional().describe("Optional alt text for the image.")
+    file_path: z6.string().optional().describe("Absolute or workspace-relative path to an image file."),
+    file_id: z6.string().optional().describe("Full Otium uploaded file UUID for an image attached in this topic."),
+    title: z6.string().optional().describe("Optional title shown above the rendered card."),
+    alt: z6.string().optional().describe("Optional alt text for the image.")
   },
   async handler(input) {
     if (!input?.file_path && !input?.file_id) {
@@ -22855,4 +23414,4 @@ export {
   DEFAULT_SELF_CONFIG_PRODUCT
 };
 
-//# debugId=542C517135CF565064756E2164756E21
+//# debugId=A147953DF9A0AA1764756E2164756E21