@aigne/secrets 0.1.1-beta → 0.1.1-beta.2

package/CHANGELOG.md

@@ -1,5 +1,19 @@
 # Changelog
 
+## [0.1.1-beta.2](https://github.com/AIGNE-io/aigne-framework/compare/secrets-v0.1.1-beta.1...secrets-v0.1.1-beta.2) (2025-11-27)
+
+
+### Bug Fixes
+
+* **secrets:** improve keyring availability detection with environment checks ([#778](https://github.com/AIGNE-io/aigne-framework/issues/778)) ([75dceab](https://github.com/AIGNE-io/aigne-framework/commit/75dceabeb7d6fd8c057759f003e703a2ebb41afd))
+
+## [0.1.1-beta.1](https://github.com/AIGNE-io/aigne-framework/compare/secrets-v0.1.1-beta...secrets-v0.1.1-beta.1) (2025-11-26)
+
+
+### Bug Fixes
+
+* **cli:** use sequential migration to handle keyring and callback file save ([#776](https://github.com/AIGNE-io/aigne-framework/issues/776)) ([da0db46](https://github.com/AIGNE-io/aigne-framework/commit/da0db46597b76cc0f41d604fd51bcd64931f0315))
+
 ## [0.1.1-beta](https://github.com/AIGNE-io/aigne-framework/compare/secrets-v0.1.0...secrets-v0.1.1-beta) (2025-11-26)
 
 

package/lib/cjs/keytar.d.ts

@@ -5,6 +5,8 @@ export declare class KeyringStore extends BaseSecretStore {
     private serviceName;
     private defaultAccount;
     private _forceUnavailable;
+    private _environmentChecked;
+    private _environmentReady;
     constructor(options: StoreOptions);
     available(): Promise<boolean>;
     setItem(key: string, value: ItemInfo): Promise<any>;

package/lib/cjs/keytar.js

@@ -34,24 +34,40 @@ var __importStar = (this && this.__importStar) || (function () {
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.KeyringStore = void 0;
+const logger_js_1 = require("@aigne/core/utils/logger.js");
 const base_js_1 = require("./base.js");
-const DEFAULT_SERVICE_NAME = "-secrets";
+const util_js_1 = require("./util.js");
+const DEFAULT_SERVICE_NAME = "-api-key";
 const DEFAULT_ACCOUNT_NAME_FOR_DEFAULT = "-default";
 class KeyringStore extends base_js_1.BaseSecretStore {
     _impl = null;
     serviceName;
     defaultAccount;
     _forceUnavailable;
+    _environmentChecked = false;
+    _environmentReady = false;
     constructor(options) {
         super();
-        const { serviceName, forceUnavailable = false } = options;
+        const { serviceName, forceKeytarUnavailable = false } = options;
         this.serviceName = `${serviceName}${DEFAULT_SERVICE_NAME}`;
         this.defaultAccount = `${serviceName}${DEFAULT_ACCOUNT_NAME_FOR_DEFAULT}`;
-        this._forceUnavailable = !!forceUnavailable;
+        this._forceUnavailable = !!forceKeytarUnavailable;
     }
     async available() {
         if (this._forceUnavailable)
             return false;
+        // Check environment prerequisites before attempting to load the module
+        if (!this._environmentChecked) {
+            const { ready, reason } = (0, util_js_1.isKeyringEnvironmentReady)();
+            this._environmentReady = ready;
+            if (!ready) {
+                logger_js_1.logger.warn(`Keyring environment not ready: ${reason}`);
+            }
+            this._environmentChecked = true;
+        }
+        if (!this._environmentReady) {
+            return false;
+        }
         try {
             if (!this._impl) {
                 const module = await Promise.resolve().then(() => __importStar(require("@zowe/secrets-for-zowe-sdk")));
@@ -62,7 +78,8 @@ class KeyringStore extends base_js_1.BaseSecretStore {
                 typeof this._impl.setPassword === "function" &&
                 typeof this._impl.deletePassword === "function");
         }
-        catch {
+        catch (error) {
+            logger_js_1.logger.error(`Failed to load keyring: ${error.message}`);
             return false;
         }
     }

package/lib/cjs/types.d.ts

@@ -9,7 +9,7 @@ export interface GetDefaultOptions {
 export interface StoreOptions {
     filepath?: string;
     serviceName: string;
-    forceUnavailable?: boolean;
+    forceKeytarUnavailable?: boolean;
 }
 export type ItemInfo = {
     [key: string]: any;

package/lib/cjs/util.d.ts

@@ -0,0 +1,4 @@
+export declare function isKeyringEnvironmentReady(): {
+    ready: boolean;
+    reason?: string;
+};

package/lib/cjs/util.js

@@ -0,0 +1,57 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isKeyringEnvironmentReady = isKeyringEnvironmentReady;
+const node_fs_1 = require("node:fs");
+function isWSL() {
+    if (process.platform !== "linux")
+        return false;
+    // env checks
+    if (process.env.WSL_DISTRO_NAME || process.env.WSL_INTEROP)
+        return true;
+    try {
+        const v = (0, node_fs_1.readFileSync)("/proc/version", "utf8").toLowerCase();
+        if (v.includes("microsoft") || v.includes("wsl"))
+            return true;
+    }
+    catch { }
+    try {
+        const r = (0, node_fs_1.readFileSync)("/proc/sys/kernel/osrelease", "utf8").toLowerCase();
+        if (r.includes("microsoft") || r.includes("wsl"))
+            return true;
+    }
+    catch { }
+    // some WSL setups have /run/WSL or other hints
+    if ((0, node_fs_1.existsSync)("/run/WSL") || (0, node_fs_1.existsSync)("/run/WSL/"))
+        return true;
+    return false;
+}
+function isDBusAvailable() {
+    return !!process.env.DBUS_SESSION_BUS_ADDRESS;
+}
+function isDisplayAvailable() {
+    return !!(process.env.DISPLAY || process.env.WAYLAND_DISPLAY);
+}
+function isKeyringEnvironmentReady() {
+    if (process.platform === "win32")
+        return { ready: true };
+    if (process.platform === "darwin")
+        return { ready: true };
+    if (process.platform === "linux") {
+        if (!process.env.CI) {
+            if (isWSL()) {
+                return { ready: false, reason: "Detected WSL (no GNOME keyring by default)" };
+            }
+            // Check for D-Bus (required for libsecret)
+            if (!isDBusAvailable()) {
+                return { ready: false, reason: "D-Bus not available" };
+            }
+            // Check for display server (most keyring services need it)
+            if (!isDisplayAvailable()) {
+                return { ready: false, reason: "Display not available" };
+            }
+        }
+        return { ready: true };
+    }
+    // Unknown platform
+    return { ready: false, reason: `Unsupported platform: ${process.platform}` };
+}

package/lib/esm/keytar.d.ts

@@ -5,6 +5,8 @@ export declare class KeyringStore extends BaseSecretStore {
     private serviceName;
     private defaultAccount;
     private _forceUnavailable;
+    private _environmentChecked;
+    private _environmentReady;
     constructor(options: StoreOptions);
     available(): Promise<boolean>;
     setItem(key: string, value: ItemInfo): Promise<any>;

package/lib/esm/keytar.js

@@ -1,21 +1,37 @@
+import { logger } from "@aigne/core/utils/logger.js";
 import { BaseSecretStore } from "./base.js";
-const DEFAULT_SERVICE_NAME = "-secrets";
+import { isKeyringEnvironmentReady } from "./util.js";
+const DEFAULT_SERVICE_NAME = "-api-key";
 const DEFAULT_ACCOUNT_NAME_FOR_DEFAULT = "-default";
 export class KeyringStore extends BaseSecretStore {
     _impl = null;
     serviceName;
     defaultAccount;
     _forceUnavailable;
+    _environmentChecked = false;
+    _environmentReady = false;
     constructor(options) {
         super();
-        const { serviceName, forceUnavailable = false } = options;
+        const { serviceName, forceKeytarUnavailable = false } = options;
         this.serviceName = `${serviceName}${DEFAULT_SERVICE_NAME}`;
         this.defaultAccount = `${serviceName}${DEFAULT_ACCOUNT_NAME_FOR_DEFAULT}`;
-        this._forceUnavailable = !!forceUnavailable;
+        this._forceUnavailable = !!forceKeytarUnavailable;
     }
     async available() {
         if (this._forceUnavailable)
             return false;
+        // Check environment prerequisites before attempting to load the module
+        if (!this._environmentChecked) {
+            const { ready, reason } = isKeyringEnvironmentReady();
+            this._environmentReady = ready;
+            if (!ready) {
+                logger.warn(`Keyring environment not ready: ${reason}`);
+            }
+            this._environmentChecked = true;
+        }
+        if (!this._environmentReady) {
+            return false;
+        }
         try {
             if (!this._impl) {
                 const module = await import("@zowe/secrets-for-zowe-sdk");
@@ -26,7 +42,8 @@ export class KeyringStore extends BaseSecretStore {
                 typeof this._impl.setPassword === "function" &&
                 typeof this._impl.deletePassword === "function");
         }
-        catch {
+        catch (error) {
+            logger.error(`Failed to load keyring: ${error.message}`);
             return false;
         }
     }

package/lib/esm/types.d.ts

@@ -9,7 +9,7 @@ export interface GetDefaultOptions {
 export interface StoreOptions {
     filepath?: string;
     serviceName: string;
-    forceUnavailable?: boolean;
+    forceKeytarUnavailable?: boolean;
 }
 export type ItemInfo = {
     [key: string]: any;

package/lib/esm/util.d.ts

@@ -0,0 +1,4 @@
+export declare function isKeyringEnvironmentReady(): {
+    ready: boolean;
+    reason?: string;
+};

package/lib/esm/util.js

@@ -0,0 +1,54 @@
+import { existsSync, readFileSync } from "node:fs";
+function isWSL() {
+    if (process.platform !== "linux")
+        return false;
+    // env checks
+    if (process.env.WSL_DISTRO_NAME || process.env.WSL_INTEROP)
+        return true;
+    try {
+        const v = readFileSync("/proc/version", "utf8").toLowerCase();
+        if (v.includes("microsoft") || v.includes("wsl"))
+            return true;
+    }
+    catch { }
+    try {
+        const r = readFileSync("/proc/sys/kernel/osrelease", "utf8").toLowerCase();
+        if (r.includes("microsoft") || r.includes("wsl"))
+            return true;
+    }
+    catch { }
+    // some WSL setups have /run/WSL or other hints
+    if (existsSync("/run/WSL") || existsSync("/run/WSL/"))
+        return true;
+    return false;
+}
+function isDBusAvailable() {
+    return !!process.env.DBUS_SESSION_BUS_ADDRESS;
+}
+function isDisplayAvailable() {
+    return !!(process.env.DISPLAY || process.env.WAYLAND_DISPLAY);
+}
+export function isKeyringEnvironmentReady() {
+    if (process.platform === "win32")
+        return { ready: true };
+    if (process.platform === "darwin")
+        return { ready: true };
+    if (process.platform === "linux") {
+        if (!process.env.CI) {
+            if (isWSL()) {
+                return { ready: false, reason: "Detected WSL (no GNOME keyring by default)" };
+            }
+            // Check for D-Bus (required for libsecret)
+            if (!isDBusAvailable()) {
+                return { ready: false, reason: "D-Bus not available" };
+            }
+            // Check for display server (most keyring services need it)
+            if (!isDisplayAvailable()) {
+                return { ready: false, reason: "Display not available" };
+            }
+        }
+        return { ready: true };
+    }
+    // Unknown platform
+    return { ready: false, reason: `Unsupported platform: ${process.platform}` };
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aigne/secrets",
-  "version": "0.1.1-beta",
+  "version": "0.1.1-beta.2",
   "description": "Secure credential storage for AIGNE Hub API keys with system keyring and file-based fallback",
   "publishConfig": {
     "access": "public"
@@ -44,6 +44,7 @@
     }
   },
   "dependencies": {
+    "@aigne/core": "^1.69.0",
     "@zowe/secrets-for-zowe-sdk": "^8.29.4",
     "yaml": "^2.8.1"
   },