@aitne/shared 0.1.0

package/dist/secret-client-file.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-client-file.js","sourceRoot":"","sources":["../src/secret-client-file.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,EACd,gBAAgB,EAChB,WAAW,EACX,MAAM,EACN,eAAe,GAChB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,QAAQ,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACnG,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAKlC,2EAA2E;AAC3E,2DAA2D;AAC3D,MAAM,WAAW,GAAG,SAAS,CAAC,MAAM,CAKhB,CAAC;AAErB,MAAM,SAAS,GAAG,aAAa,CAAC;AAChC,MAAM,UAAU,GAAG,EAAE,CAAC,CAAC,WAAW;AAClC,MAAM,SAAS,GAAG,EAAE,CAAC,CAAC,kBAAkB;AACxC,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,wBAAwB;AACjD,MAAM,WAAW,GAAG,EAAE,CAAC,CAAC,WAAW;AACnC,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,oDAAoD;AAC/E,MAAM,iBAAiB,GAAG,CAAC,CAAC;AAC5B,MAAM,sBAAsB,GAAG,CAAC,CAAC;AA8BjC;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,OAAO,gBAAgB;IACV,UAAU,CAAS;IACnB,cAAc,CAAS;IAExC;;;OAGG;IACH,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,cAAsB,EAAE,UAAmB;QAC7D,MAAM,MAAM,GAAG,IAAI,gBAAgB,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;QAChE,MAAM,MAAM,CAAC,gBAAgB,EAAE,CAAC;QAChC,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,yDAAyD;IACzD,YAAY,cAAsB,EAAE,UAAmB;QACrD,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;QACrC,IAAI,CAAC,UAAU,GAAG,UAAU,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,iBAAiB,EAAE,SAAS,CAAC,CAAC;QAC9E,SAAS,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,CAAC;IAEO,QAAQ,CAAC,UAAkB;QACjC,IAAI,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CAAC,wBAAwB,UAAU,EAAE,CAAC,CAAC;QACxD,CAAC;QACD,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,UAAU,MAAM,CAAC,CAAC;IACpD,CAAC;IAEO,cAAc;QACpB,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;IAC/C,CAAC;IAEO,KAAK,CAAC,SAAS,CAAC,IAAY;QAClC,OAAO,MAAM,WAAW,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,EAAE,UAAU,EAAE;YAC9D,CAAC,EAAE,WAAW;YACd,CAAC,EAAE,iBAAiB;YACpB,CAAC,EAAE,sBAAsB;SAC1B,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,gBAAgB;QAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;QACvC,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YACzB,MAAM,MAAM,GAAmB,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;YAC3E,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YAC7C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YAC3C,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACjD,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,CAAC;gBACxC,MAAM,IAAI,KAAK,CACb,gGAAgG,CACjG,CAAC;YACJ,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,GAAG,WAAW,CAAC,WAAW,CAAC,CAAC;YACtC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YACxC,MAAM,OAAO,GAAmB;gBAC9B,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAC1B,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;aAC3B,CAAC;YACF,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;QAC3F,CAAC;IACH,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,UAAkB;QAC1B,OAAO,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC;IAC/C,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,UAAkB;QAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QACvC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QAEnC,MAAM,MAAM,GAAyB,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;QAC7E,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC7C,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QACzC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACnD,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QAEzD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACvC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,SAAS,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;QACtD,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAE7B,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QACjF,OAAO,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,UAAkB,EAAE,KAAa;QACzC,MAAM,IAAI,GAAG,WAAW,CAAC,WAAW,CAAC,CAAC;QACtC,MAAM,EAAE,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;QAClC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAEvC,MAAM,MAAM,GAAG,cAAc,CAAC,SAAS,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;QAClD,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QACjF,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QAEpC,MAAM,OAAO,GAAyB;YACpC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;YAC1B,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC;YACtB,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC;YAChC,UAAU,EAAE,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC;SACtC,CAAC;QACF,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;IAC5G,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,UAAkB;QAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QACvC,IAAI,UAAU,CAAC,IAAI,CAAC;YAAE,UAAU,CAAC,IAAI,CAAC,CAAC;IACzC,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CACnC,UAAmB;IAEnB,2CAA2C;IAC3C,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,CAAC;QACnC,OAAO,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;IACxC,CAAC;IAED,uBAAuB;IACvB,MAAM,GAAG,GAAG,UAAU,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,iBAAiB,EAAE,SAAS,CAAC,CAAC;IACxE,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;IAC7C,IAAI,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAC5B,wEAAwE;QACxE,uEAAuE;QACvE,MAAM,IAAI,GAAG,QAAQ,CAAC,WAAW,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC;QAChD,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;YACrC,MAAM,IAAI,KAAK,CACb,gCAAgC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,2BAA2B;gBAC3E,uBAAuB,WAAW,EAAE,CACrC,CAAC;QACJ,CAAC;QACD,OAAO,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;IACnD,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/secret-client-linux.d.ts

@@ -0,0 +1,26 @@
+import type { PersonalAgentKeychainClient } from "./keychain-helper-client.js";
+/**
+ * Secret client backed by libsecret (`secret-tool` CLI).
+ *
+ * Uses GNOME Keyring (or KWallet via the libsecret backend) to store
+ * secrets in the user's login keyring. Requires `libsecret-tools`
+ * (`secret-tool`) to be installed.
+ *
+ * Secrets are stored with attributes:
+ *   service = "personal-agent"
+ *   key     = <secretName>
+ *
+ * `secret-tool store` reads the value from stdin (not command args),
+ * preventing the secret from appearing in process listings.
+ * `secret-tool lookup` outputs the value to stdout.
+ * Both use `execFileAsync` / `execWithStdin` with argument arrays —
+ * no shell interpolation, injection-safe.
+ */
+export declare class LinuxSecretClient implements PersonalAgentKeychainClient {
+    private validateName;
+    has(secretName: string): Promise<boolean>;
+    get(secretName: string): Promise<string | null>;
+    set(secretName: string, value: string): Promise<void>;
+    delete(secretName: string): Promise<void>;
+}
+//# sourceMappingURL=secret-client-linux.d.ts.map

package/dist/secret-client-linux.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-client-linux.d.ts","sourceRoot":"","sources":["../src/secret-client-linux.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,6BAA6B,CAAC;AAK/E;;;;;;;;;;;;;;;;GAgBG;AACH,qBAAa,iBAAkB,YAAW,2BAA2B;IACnE,OAAO,CAAC,YAAY;IAMd,GAAG,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAIzC,GAAG,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAY/C,GAAG,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAcrD,MAAM,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAUhD"}

package/dist/secret-client-linux.js

@@ -0,0 +1,63 @@
+import { execFile } from "node:child_process";
+import { promisify } from "node:util";
+import { execWithStdin } from "./exec-with-stdin.js";
+const execFileAsync = promisify(execFile);
+/**
+ * Secret client backed by libsecret (`secret-tool` CLI).
+ *
+ * Uses GNOME Keyring (or KWallet via the libsecret backend) to store
+ * secrets in the user's login keyring. Requires `libsecret-tools`
+ * (`secret-tool`) to be installed.
+ *
+ * Secrets are stored with attributes:
+ *   service = "personal-agent"
+ *   key     = <secretName>
+ *
+ * `secret-tool store` reads the value from stdin (not command args),
+ * preventing the secret from appearing in process listings.
+ * `secret-tool lookup` outputs the value to stdout.
+ * Both use `execFileAsync` / `execWithStdin` with argument arrays —
+ * no shell interpolation, injection-safe.
+ */
+export class LinuxSecretClient {
+    validateName(secretName) {
+        if (/[/\\]/.test(secretName)) {
+            throw new Error(`Invalid secret name: ${secretName}`);
+        }
+    }
+    async has(secretName) {
+        return (await this.get(secretName)) !== null;
+    }
+    async get(secretName) {
+        this.validateName(secretName);
+        try {
+            const { stdout } = await execFileAsync("secret-tool", [
+                "lookup", "service", "personal-agent", "key", secretName,
+            ], { encoding: "utf8", timeout: 5_000 });
+            return stdout.replace(/\n$/, "");
+        }
+        catch {
+            return null;
+        }
+    }
+    async set(secretName, value) {
+        this.validateName(secretName);
+        // secret-tool store reads the password from stdin
+        await execWithStdin("secret-tool", [
+            "store", "--label", `PersonalAgent: ${secretName}`,
+            "service", "personal-agent", "key", secretName,
+        ], value, { timeout: 5_000 });
+    }
+    async delete(secretName) {
+        this.validateName(secretName);
+        try {
+            await execFileAsync("secret-tool", [
+                "clear", "service", "personal-agent", "key", secretName,
+            ], { encoding: "utf8", timeout: 5_000 });
+        }
+        catch {
+            // not found — treat as success
+        }
+    }
+}
+//# sourceMappingURL=secret-client-linux.js.map

package/dist/secret-client-linux.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-client-linux.js","sourceRoot":"","sources":["../src/secret-client-linux.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAErD,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAE1C;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,OAAO,iBAAiB;IACpB,YAAY,CAAC,UAAkB;QACrC,IAAI,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CAAC,wBAAwB,UAAU,EAAE,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,UAAkB;QAC1B,OAAO,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,KAAK,IAAI,CAAC;IAC/C,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,UAAkB;QAC1B,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;QAC9B,IAAI,CAAC;YACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,aAAa,EAAE;gBACpD,QAAQ,EAAE,SAAS,EAAE,gBAAgB,EAAE,KAAK,EAAE,UAAU;aACzD,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;YACzC,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACnC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,UAAkB,EAAE,KAAa;QACzC,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;QAC9B,kDAAkD;QAClD,MAAM,aAAa,CACjB,aAAa,EACb;YACE,OAAO,EAAE,SAAS,EAAE,kBAAkB,UAAU,EAAE;YAClD,SAAS,EAAE,gBAAgB,EAAE,KAAK,EAAE,UAAU;SAC/C,EACD,KAAK,EACL,EAAE,OAAO,EAAE,KAAK,EAAE,CACnB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,UAAkB;QAC7B,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;QAC9B,IAAI,CAAC;YACH,MAAM,aAAa,CAAC,aAAa,EAAE;gBACjC,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,KAAK,EAAE,UAAU;aACxD,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3C,CAAC;QAAC,MAAM,CAAC;YACP,+BAA+B;QACjC,CAAC;IACH,CAAC;CACF"}

package/dist/secret-client-windows.d.ts

@@ -0,0 +1,37 @@
+import type { PersonalAgentKeychainClient } from "./keychain-helper-client.js";
+/**
+ * Secret client backed by Windows DPAPI (Data Protection API).
+ *
+ * Secrets are encrypted using PowerShell's `ConvertTo-SecureString` /
+ * `ConvertFrom-SecureString` which wraps DPAPI by default (when `-Key`
+ * is omitted). Each secret is stored as a `.dpapi` file containing the
+ * DPAPI-encrypted string.
+ *
+ * DPAPI properties:
+ * - Uses the current Windows user's credentials as the encryption key
+ * - Only the same user on the same machine can decrypt
+ * - No additional installs required — built into PowerShell
+ *
+ * Security: All values are passed via stdin to avoid command injection.
+ * The PowerShell script reads from `[System.Console]::In.ReadToEnd()`,
+ * never from string interpolation in the script body.
+ */
+export declare class WindowsDpapiSecretClient implements PersonalAgentKeychainClient {
+    private readonly secretsDir;
+    private readonly psBinary;
+    /**
+     * @param secretsDir Override for `~/.personal-agent/secrets` (tests).
+     * @param psBinary   PowerShell executable name. Defaults to
+     *   `powershell.exe` (Windows PowerShell 5.1, ships with every modern
+     *   Windows). The factory may pass `pwsh.exe` when 5.1 is unavailable
+     *   (PowerShell-Core-only setups, Windows Server Core). Both expose the
+     *   `ConvertTo-SecureString` / DPAPI surface this client relies on.
+     */
+    constructor(secretsDir?: string, psBinary?: string);
+    private filePath;
+    has(secretName: string): Promise<boolean>;
+    get(secretName: string): Promise<string | null>;
+    set(secretName: string, value: string): Promise<void>;
+    delete(secretName: string): Promise<void>;
+}
+//# sourceMappingURL=secret-client-windows.d.ts.map

package/dist/secret-client-windows.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-client-windows.d.ts","sourceRoot":"","sources":["../src/secret-client-windows.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,6BAA6B,CAAC;AAG/E;;;;;;;;;;;;;;;;GAgBG;AACH,qBAAa,wBAAyB,YAAW,2BAA2B;IAC1E,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAElC;;;;;;;OAOG;gBACS,UAAU,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM;IAMlD,OAAO,CAAC,QAAQ;IAOV,GAAG,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAIzC,GAAG,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAyB/C,GAAG,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAoBrD,MAAM,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAIhD"}

package/dist/secret-client-windows.js

@@ -0,0 +1,82 @@
+import { existsSync, mkdirSync, readFileSync, unlinkSync, writeFileSync } from "node:fs";
+import { join } from "node:path";
+import { homedir } from "node:os";
+import { execWithStdin } from "./exec-with-stdin.js";
+/**
+ * Secret client backed by Windows DPAPI (Data Protection API).
+ *
+ * Secrets are encrypted using PowerShell's `ConvertTo-SecureString` /
+ * `ConvertFrom-SecureString` which wraps DPAPI by default (when `-Key`
+ * is omitted). Each secret is stored as a `.dpapi` file containing the
+ * DPAPI-encrypted string.
+ *
+ * DPAPI properties:
+ * - Uses the current Windows user's credentials as the encryption key
+ * - Only the same user on the same machine can decrypt
+ * - No additional installs required — built into PowerShell
+ *
+ * Security: All values are passed via stdin to avoid command injection.
+ * The PowerShell script reads from `[System.Console]::In.ReadToEnd()`,
+ * never from string interpolation in the script body.
+ */
+export class WindowsDpapiSecretClient {
+    secretsDir;
+    psBinary;
+    /**
+     * @param secretsDir Override for `~/.personal-agent/secrets` (tests).
+     * @param psBinary   PowerShell executable name. Defaults to
+     *   `powershell.exe` (Windows PowerShell 5.1, ships with every modern
+     *   Windows). The factory may pass `pwsh.exe` when 5.1 is unavailable
+     *   (PowerShell-Core-only setups, Windows Server Core). Both expose the
+     *   `ConvertTo-SecureString` / DPAPI surface this client relies on.
+     */
+    constructor(secretsDir, psBinary) {
+        this.secretsDir = secretsDir ?? join(homedir(), ".personal-agent", "secrets");
+        this.psBinary = psBinary ?? "powershell.exe";
+        mkdirSync(this.secretsDir, { recursive: true });
+    }
+    filePath(name) {
+        if (/[/\\]/.test(name)) {
+            throw new Error(`Invalid secret name: ${name}`);
+        }
+        return join(this.secretsDir, `${name}.dpapi`);
+    }
+    async has(secretName) {
+        return existsSync(this.filePath(secretName));
+    }
+    async get(secretName) {
+        const path = this.filePath(secretName);
+        if (!existsSync(path))
+            return null;
+        const encrypted = readFileSync(path, "utf-8").trim();
+        // DPAPI decrypt: ConvertTo-SecureString → Marshal to plaintext
+        // Value is passed via stdin to avoid injection
+        const script = [
+            "$enc = [System.Console]::In.ReadToEnd().Trim()",
+            "$ss = ConvertTo-SecureString $enc",
+            "$bstr = [System.Runtime.InteropServices.Marshal]::SecureStringToBSTR($ss)",
+            "try { [System.Runtime.InteropServices.Marshal]::PtrToStringAuto($bstr) }",
+            "finally { [System.Runtime.InteropServices.Marshal]::ZeroFreeBSTR($bstr) }",
+        ].join("; ");
+        const { stdout } = await execWithStdin(this.psBinary, ["-NoProfile", "-NonInteractive", "-Command", script], encrypted, { timeout: 10_000 });
+        return stdout.trimEnd();
+    }
+    async set(secretName, value) {
+        // Validate early — filePath() checks path traversal but is called late
+        const outPath = this.filePath(secretName);
+        // DPAPI encrypt: stdin → SecureString → encrypted string
+        const script = [
+            "$plain = [System.Console]::In.ReadToEnd()",
+            "$ss = ConvertTo-SecureString $plain -AsPlainText -Force",
+            "ConvertFrom-SecureString $ss",
+        ].join("; ");
+        const { stdout } = await execWithStdin(this.psBinary, ["-NoProfile", "-NonInteractive", "-Command", script], value, { timeout: 10_000 });
+        writeFileSync(outPath, stdout.trim(), "utf-8");
+    }
+    async delete(secretName) {
+        const path = this.filePath(secretName);
+        if (existsSync(path))
+            unlinkSync(path);
+    }
+}
+//# sourceMappingURL=secret-client-windows.js.map

package/dist/secret-client-windows.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-client-windows.js","sourceRoot":"","sources":["../src/secret-client-windows.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACzF,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAElC,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAErD;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,OAAO,wBAAwB;IAClB,UAAU,CAAS;IACnB,QAAQ,CAAS;IAElC;;;;;;;OAOG;IACH,YAAY,UAAmB,EAAE,QAAiB;QAChD,IAAI,CAAC,UAAU,GAAG,UAAU,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,iBAAiB,EAAE,SAAS,CAAC,CAAC;QAC9E,IAAI,CAAC,QAAQ,GAAG,QAAQ,IAAI,gBAAgB,CAAC;QAC7C,SAAS,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,CAAC;IAEO,QAAQ,CAAC,IAAY;QAC3B,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,wBAAwB,IAAI,EAAE,CAAC,CAAC;QAClD,CAAC;QACD,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,IAAI,QAAQ,CAAC,CAAC;IAChD,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,UAAkB;QAC1B,OAAO,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC;IAC/C,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,UAAkB;QAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QACvC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QAEnC,MAAM,SAAS,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;QAErD,+DAA+D;QAC/D,+CAA+C;QAC/C,MAAM,MAAM,GAAG;YACb,gDAAgD;YAChD,mCAAmC;YACnC,2EAA2E;YAC3E,0EAA0E;YAC1E,2EAA2E;SAC5E,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEb,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CACpC,IAAI,CAAC,QAAQ,EACb,CAAC,YAAY,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,CAAC,EACrD,SAAS,EACT,EAAE,OAAO,EAAE,MAAM,EAAE,CACpB,CAAC;QACF,OAAO,MAAM,CAAC,OAAO,EAAE,CAAC;IAC1B,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,UAAkB,EAAE,KAAa;QACzC,uEAAuE;QACvE,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QAE1C,yDAAyD;QACzD,MAAM,MAAM,GAAG;YACb,2CAA2C;YAC3C,yDAAyD;YACzD,8BAA8B;SAC/B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEb,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CACpC,IAAI,CAAC,QAAQ,EACb,CAAC,YAAY,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,CAAC,EACrD,KAAK,EACL,EAAE,OAAO,EAAE,MAAM,EAAE,CACpB,CAAC;QACF,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,OAAO,CAAC,CAAC;IACjD,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,UAAkB;QAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QACvC,IAAI,UAAU,CAAC,IAAI,CAAC;YAAE,UAAU,CAAC,IAAI,CAAC,CAAC;IACzC,CAAC;CACF"}

package/dist/secret-redaction.d.ts

@@ -0,0 +1,3 @@
+export declare const SENSITIVE_KEY_PATTERN: RegExp;
+export declare function redactSensitiveString(input: string, replacement?: string): string;
+//# sourceMappingURL=secret-redaction.d.ts.map

package/dist/secret-redaction.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-redaction.d.ts","sourceRoot":"","sources":["../src/secret-redaction.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,qBAAqB,QAAwG,CAAC;AAwB3I,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,MAAM,EACb,WAAW,SAAe,GACzB,MAAM,CAMR"}

package/dist/secret-redaction.js

@@ -0,0 +1,31 @@
+export const SENSITIVE_KEY_PATTERN = /(token|secret|password|apikey|api_key|authorization|bearer|credentials|refresh_token|access_token)/i;
+const SECRET_VALUE_PATTERNS = [
+    /\bsk-ant-[A-Za-z0-9\-_]+\b/g,
+    // OpenAI-style sk-* keys (sk-, sk-proj-, sk-svcacct-).
+    /\bsk-[A-Za-z0-9_\-]{30,}\b/g,
+    // Stripe (sk_live_*, sk_test_*, pk_live_*, pk_test_*, rk_*, restricted keys).
+    /\b[srp]k_(?:live|test)_[A-Za-z0-9]{20,}\b/g,
+    // Google API keys: AIza prefix, 39 chars total.
+    /\bAIza[0-9A-Za-z_-]{35}\b/g,
+    /\bxoxb-[A-Za-z0-9\-]+\b/g,
+    /\bxapp-[A-Za-z0-9\-]+\b/g,
+    // Slack user tokens (xoxp-) — not all redactors carry this; explicit.
+    /\bxoxp-[A-Za-z0-9\-]+\b/g,
+    /\bgh[pous]_[A-Za-z0-9]+\b/g,
+    /\bX-Read-Token:\s*[A-Za-z0-9_-]{20,}\b/gi,
+    /\bBearer\s+[A-Za-z0-9_\-]{20,}\b/g,
+    /\b[A-Fa-f0-9]{32,}\b/g,
+    // Ordering matters: base64-with-padding must run BEFORE the generic
+    // 32+ word-char pattern, otherwise the word-char match consumes the
+    // alphabetic portion and leaves a trailing `=` visible.
+    /\b[A-Za-z0-9+/]{40,}={0,2}(?![A-Za-z0-9+/=])/g,
+    /\b[A-Za-z0-9_-]{32,}(?![A-Za-z0-9_-])/g,
+];
+export function redactSensitiveString(input, replacement = "[REDACTED]") {
+    let output = input;
+    for (const pattern of SECRET_VALUE_PATTERNS) {
+        output = output.replace(pattern, replacement);
+    }
+    return output;
+}
+//# sourceMappingURL=secret-redaction.js.map

package/dist/secret-redaction.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-redaction.js","sourceRoot":"","sources":["../src/secret-redaction.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,qBAAqB,GAAG,qGAAqG,CAAC;AAC3I,MAAM,qBAAqB,GAAG;IAC5B,6BAA6B;IAC7B,uDAAuD;IACvD,6BAA6B;IAC7B,8EAA8E;IAC9E,4CAA4C;IAC5C,gDAAgD;IAChD,4BAA4B;IAC5B,0BAA0B;IAC1B,0BAA0B;IAC1B,sEAAsE;IACtE,0BAA0B;IAC1B,4BAA4B;IAC5B,0CAA0C;IAC1C,mCAAmC;IACnC,uBAAuB;IACvB,oEAAoE;IACpE,oEAAoE;IACpE,wDAAwD;IACxD,+CAA+C;IAC/C,wCAAwC;CAChC,CAAC;AAEX,MAAM,UAAU,qBAAqB,CACnC,KAAa,EACb,WAAW,GAAG,YAAY;IAE1B,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,KAAK,MAAM,OAAO,IAAI,qBAAqB,EAAE,CAAC;QAC5C,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/skill-curation/decision-language.d.ts

@@ -0,0 +1,6 @@
+export declare function containsDecisionLanguage(value: string): boolean;
+export declare function noDecisionLanguage(value: string): boolean;
+export declare function noEmbeddedMarkers(value: string): boolean;
+export declare const DECISION_LANGUAGE_MESSAGE = "convention rules cannot use imperative decision language (when/if/must/always/never). Restate as a description of the convention, not an instruction.";
+export declare const EMBEDDED_MARKER_MESSAGE = "free-text fields cannot embed CURATION/safety/integration_modes/mode markers";
+//# sourceMappingURL=decision-language.d.ts.map

package/dist/skill-curation/decision-language.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"decision-language.d.ts","sourceRoot":"","sources":["../../src/skill-curation/decision-language.ts"],"names":[],"mappings":"AAsBA,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAE/D;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAEzD;AAUD,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAExD;AAED,eAAO,MAAM,yBAAyB,0JACmH,CAAC;AAE1J,eAAO,MAAM,uBAAuB,iFAC4C,CAAC"}

package/dist/skill-curation/decision-language.js

@@ -0,0 +1,38 @@
+// Decision-language linter (P22 §1.3, §1.4, §2.3 `decision_language_clean`).
+//
+// The optimizer agent submits typed JSON payloads describing knowledge
+// cartography (file layouts, routing tables, conventions). It MUST NOT
+// smuggle behavioural decision logic ("when X then Y", "must always do Z")
+// into free-text fields — those belong in framework code, not in
+// auto-curated skill content. Three layers of defence enforce this:
+//
+//   1. Zod refines on every free-text field at submission time.
+//   2. Smoke-test re-check on the rendered markdown.
+//   3. The optimizer-only skill body coaches paraphrase at proposal time.
+//
+// Patterns are intentionally narrow: descriptive prose like
+// "All entries follow the [YYYY-MM-DD] prefix" must pass.
+const DECISION_LANGUAGE_PATTERNS = [
+    /\bwhen\s+[a-z]+.*\bthen\b/i,
+    /\bif\s+[a-z]+.*\b(do|then|then\s+do)\b/i,
+    /\bbefore\s+[a-z]+.*\byou\s+(should|must|need)\b/i,
+    /\b(must|always|never)\b/i,
+];
+export function containsDecisionLanguage(value) {
+    return DECISION_LANGUAGE_PATTERNS.some((re) => re.test(value));
+}
+export function noDecisionLanguage(value) {
+    return !containsDecisionLanguage(value);
+}
+/** Embedded markers/anchors that the renderer would otherwise have to escape.
+ *  Reject at the API edge so a renderer regression cannot silently pass them
+ *  through into materialized SKILL.md (defence-in-depth). The first form
+ *  catches HTML comments that the daemon parses; the second catches the
+ *  `<integration_modes>` placeholder tag the SkillsCompiler substitutes. */
+const EMBEDDED_MARKER_PATTERN = /(<!--\s*(?:CURATION|safety|integration_modes|mode:|today_write_lock_id))|(<\s*integration_modes\b)/i;
+export function noEmbeddedMarkers(value) {
+    return !EMBEDDED_MARKER_PATTERN.test(value);
+}
+export const DECISION_LANGUAGE_MESSAGE = "convention rules cannot use imperative decision language (when/if/must/always/never). Restate as a description of the convention, not an instruction.";
+export const EMBEDDED_MARKER_MESSAGE = "free-text fields cannot embed CURATION/safety/integration_modes/mode markers";
+//# sourceMappingURL=decision-language.js.map

package/dist/skill-curation/decision-language.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"decision-language.js","sourceRoot":"","sources":["../../src/skill-curation/decision-language.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,EAAE;AACF,uEAAuE;AACvE,uEAAuE;AACvE,2EAA2E;AAC3E,iEAAiE;AACjE,oEAAoE;AACpE,EAAE;AACF,gEAAgE;AAChE,qDAAqD;AACrD,0EAA0E;AAC1E,EAAE;AACF,4DAA4D;AAC5D,0DAA0D;AAE1D,MAAM,0BAA0B,GAA0B;IACxD,4BAA4B;IAC5B,yCAAyC;IACzC,kDAAkD;IAClD,0BAA0B;CAC3B,CAAC;AAEF,MAAM,UAAU,wBAAwB,CAAC,KAAa;IACpD,OAAO,0BAA0B,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;AACjE,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAa;IAC9C,OAAO,CAAC,wBAAwB,CAAC,KAAK,CAAC,CAAC;AAC1C,CAAC;AAED;;;;4EAI4E;AAC5E,MAAM,uBAAuB,GAC3B,qGAAqG,CAAC;AAExG,MAAM,UAAU,iBAAiB,CAAC,KAAa;IAC7C,OAAO,CAAC,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,CAAC,MAAM,yBAAyB,GACpC,uJAAuJ,CAAC;AAE1J,MAAM,CAAC,MAAM,uBAAuB,GAClC,8EAA8E,CAAC"}