@aiwg/cli 2026.10.7 → 2026.10.8

package/dist/src/cli/handlers/cost-report.js

@@ -1,6 +1,7 @@
 /** OpenRouter fleet cost-report CLI handler. @issue #1187 */
 import os from 'node:os';
 import path from 'node:path';
+import { sensitiveInputOptions } from '../../auth/sensitive-input.js';
 import { FleetConfigMissingError, formatFleetSpendReport, generateFleetSpendReport, } from '../../cost/fleet-report.js';
 function option(args, name) {
     const index = args.indexOf(name);
@@ -9,10 +10,11 @@ function option(args, name) {
 }
 function usage() {
     return [
-        'Usage: aiwg cost-report (--fleet | --key <key_ref>) [--source openrouter] [--config <fleet.yaml>] [--json]',
+        'Usage: aiwg cost-report (--fleet | --key <key_ref> [--key-store <name>]) [--source openrouter] [--config <fleet.yaml>] [--json]',
         '',
         'Reads bot-to-key references from ~/.config/aiwg/fleet.yaml and credentials from',
         '~/.config/aiwg/keys/<key_ref> or AIWG_OPENROUTER_KEY_<KEY_REF>.',
+        'Use --key-store <name> for one key, or per-entry key_store references in fleet YAML.',
         '',
         'AIWG observes and correlates spend; OpenRouter enforces all key limits and caps.',
     ].join('\n');
@@ -40,6 +42,9 @@ export const costReportHandler = {
             ? path.resolve(ctx.cwd, configuredPath)
             : path.join(os.homedir(), '.config', 'aiwg', 'fleet.yaml');
         try {
+            const keyStore = sensitiveInputOptions(ctx.args, 'key').store;
+            if (keyStore !== undefined && !keyRef)
+                return { exitCode: 2, message: '--key-store requires --key <key_ref>; use per-entry key_store references for --fleet.' };
             const capValue = option(ctx.args, '--monthly-cap');
             const cap = capValue === undefined ? 0 : Number(capValue);
             if (!Number.isFinite(cap) || cap < 0)
@@ -53,6 +58,7 @@ export const costReportHandler = {
                             bot: option(ctx.args, '--bot') ?? keyRef,
                             machine: option(ctx.args, '--machine') ?? os.hostname(),
                             key_ref: keyRef,
+                            ...(keyStore !== undefined ? { key_store: keyStore } : {}),
                             monthly_cap: cap,
                         }],
                 } : {}),

package/dist/src/cli/handlers/decision.js

@@ -1,12 +1,12 @@
 import { resolveSensitiveInput, sensitiveInputOptions } from '../../auth/sensitive-input.js';
 import { decisionPricing } from '../../decision/pricing.js';
-import { ATTRIBUTION_FIELD_PATTERN, DecisionAskUsageError, decisionCapabilities, DecisionLedgerSinceError, decisionLedgerHistory, decisionLedgerStats, evaluateRequestPath, listPatterns, livePlan, MAX_ATTRIBUTION_FIELD_LENGTH, materializeSyntheticClassificationSetup, parseDecisionLedgerSince, readDecisionContextFile, runDecisionOffloadCheckpoint, runOfflinePattern, setupJev, showPattern, syntheticClassificationSetup, validateDecisionInput, } from '../../decision/driver.js';
+import { ATTRIBUTION_FIELD_PATTERN, DecisionAskUsageError, decisionCapabilities, DecisionLedgerSinceError, decisionLedgerHistory, decisionLedgerStats, rotateDecisionLedger, parseDecisionLedgerRetention, evaluateRequestPath, listPatterns, livePlan, MAX_ATTRIBUTION_FIELD_LENGTH, materializeSyntheticClassificationSetup, parseDecisionLedgerSince, readDecisionContextFile, runDecisionOffloadCheckpoint, runOfflinePattern, setupJev, showPattern, syntheticClassificationSetup, validateDecisionInput, } from '../../decision/driver.js';
 function jsonResult(value, exitCode = 0) {
     return { exitCode, message: JSON.stringify(value, null, 2), rawOutput: true };
 }
 function usage() {
     return [
-        'Usage: aiwg decision <capabilities|status|patterns|validate|evaluate|setup|history|stats|pricing> [options]',
+        'Usage: aiwg decision <capabilities|status|patterns|validate|evaluate|setup|history|stats|rotate|pricing> [options]',
         '       aiwg decision ask --question "<q>" (--yes-no | --choices a,b,c | --scale 1-5) [--context <text> | --context-file <path> | --context-stdin] [--threshold 0.8] [--timeout-ms 15000] [--passes N] [--escalation-passes N] [--provider <id>] [--session <id>] [--caller <tag>] [--record-text] [--json]',
         '',
         'Commands:',
@@ -20,9 +20,10 @@ function usage() {
         '  setup synthetic-classification [--output-dir <dir>]',
         '  setup jev [--token-interactive | --token-stdin | --token-file <path> | --token-store <name> | --token-env <name>] [--region <r>] [--endpoint <url>] [--verify] [--remove]',
         '  ask --question "<q>" (--yes-no | --choices a,b,c | --scale 1-5) [--provider <id>] [--session <id>] [--caller <tag>] [--record-text]',
-        '  history [--since <date>] [--provider <id>] [--session <id>] [--kind yes-no|choices|scale] [--status answered|fallback] [--caller <tag>|<prefix>* | --no-caller] [--json]',
+        '  history [--since <date>] [--provider <id>] [--session <id>] [--kind yes-no|choices|scale] [--status answered|fallback] [--caller <tag>|<prefix>* | --no-caller] [--include-archives] [--json]',
         '  pricing [--refresh --model jev-X.Y.Z] [--dry-run] [--offline | --allow-snapshot] [--json]',
-        '  stats [--since <date>] [--provider <id>] [--session <id>] [--kind yes-no|choices|scale] [--status answered|fallback] [--caller <tag>|<prefix>* | --no-caller] [--group-by provider|session|kind|caller|passes|escalation] [--json]',
+        '  stats [--since <date>] [--provider <id>] [--session <id>] [--kind yes-no|choices|scale] [--status answered|fallback] [--caller <tag>|<prefix>* | --no-caller] [--group-by provider|session|kind|caller|passes|escalation] [--include-archives] [--json]',
+        '  rotate [--keep-last <Nd|N> | --all] [--to <path>] [--json]',
         '',
         'Notes:',
         '  Every COMPLETED `ask` call (CLI and MCP) appends one record to the decision',
@@ -42,9 +43,13 @@ function usage() {
         `  --session and --caller must match ${ATTRIBUTION_FIELD_PATTERN.source} (<= ${MAX_ATTRIBUTION_FIELD_LENGTH} characters).`,
         '  `history`/`stats` accept `--caller <tag>` (exact), `--caller \'<prefix>*\'` (prefix; the only wildcard), or `--no-caller` (records with no tag; not combinable with `--caller`).',
         '  `history`/`stats` reject unknown flags and positional arguments with exit 2.',
-        '  The ledger has no built-in retention: it grows without bound and the',
-        '  operator may truncate or delete it at any time; readers tolerate a missing',
-        '  file. The ledger trusts only the local filesystem under the project',
+        '  `rotate` keeps the last 90 days by default; --keep-last accepts days or a',
+        '  positive count. Rotating everything requires --all. Malformed lines stay',
+        '  inline unless --all is used. Archives are private .jsonl files beneath',
+        '  archive/decision/ in the resolved artifact root; --to must stay there.',
+        '  `history`/`stats` optionally read archives with --include-archives, offline.',
+        '  Appenders, rotation and readers share one cross-process lock.',
+        '  The ledger trusts only the local filesystem under the project',
         '  artifact root, owned by the same user running aiwg — it is not a defense',
         '  against a hostile process already running as that user.',
     ].join('\n');
@@ -207,7 +212,7 @@ function parseGroupBy(value) {
     return value;
 }
 const HISTORY_VALUE_FLAGS = ['--since', '--provider', '--session', '--kind', '--status', '--caller'];
-const HISTORY_BOOL_FLAGS = ['--json', '--no-caller'];
+const HISTORY_BOOL_FLAGS = ['--json', '--no-caller', '--include-archives'];
 const STATS_VALUE_FLAGS = [...HISTORY_VALUE_FLAGS, '--group-by'];
 const STATS_BOOL_FLAGS = HISTORY_BOOL_FLAGS;
 /**
@@ -269,6 +274,7 @@ function parseLedgerFilters(args) {
         kind: parseKindFilter(takeOption(args, '--kind')),
         status: parseStatusFilter(takeOption(args, '--status')),
         ...parseCallerFilter(args),
+        ...(args.includes('--include-archives') ? { includeArchives: true } : {}),
     };
 }
 /** One header line stating the caller filter, shown only when one is set. */
@@ -323,6 +329,23 @@ async function decisionStats(ctx) {
     ]);
     return { exitCode: 0, message: [...header, ...lines].join('\n'), rawOutput: true };
 }
+async function decisionRotate(ctx) {
+    const args = ctx.args.slice(1);
+    assertLedgerArgs(args, ['--keep-last', '--to'], ['--all', '--json']);
+    const keepLast = args.includes('--keep-last') ? takeRequiredOption(args, '--keep-last') : undefined;
+    const all = args.includes('--all');
+    try {
+        parseDecisionLedgerRetention(keepLast, all);
+    }
+    catch (error) {
+        throw new DecisionAskUsageError('invalid-retention', error instanceof Error ? error.message : String(error));
+    }
+    const result = await rotateDecisionLedger({ projectRoot: ctx.cwd, keepLast, all,
+        to: args.includes('--to') ? takeRequiredOption(args, '--to') : undefined });
+    if (args.includes('--json'))
+        return jsonResult(result);
+    return { exitCode: 0, rawOutput: true, message: `Archived ${result.archived} line(s)${result.archivePath ? ` to ${result.archivePath}` : ''}; retained ${result.retained} line(s) inline (${result.malformed} malformed).` };
+}
 async function executeDecision(ctx) {
     const [command, subcommand, ...rest] = ctx.args;
     const options = { cwd: ctx.cwd, frameworkRoot: ctx.frameworkRoot, env: process.env };
@@ -335,6 +358,8 @@ async function executeDecision(ctx) {
             return await decisionAsk(ctx);
         if (command === 'history')
             return await decisionHistory(ctx);
+        if (command === 'rotate')
+            return await decisionRotate(ctx);
         if (command === 'pricing') {
             const args = ctx.args.slice(1);
             assertLedgerArgs(args, ['--model'], ['--refresh', '--dry-run', '--offline', '--allow-snapshot', '--json']);

package/dist/src/cli/handlers/local-executor.js

@@ -21,9 +21,22 @@ import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'fs';
 import { createHash, randomUUID } from 'crypto';
 import { pathToFileURL } from 'node:url';
 import { projectAiwgPath } from '../../config/project-artifacts.js';
+import { resolveSensitiveInput, sensitiveInputOptions } from '../../auth/sensitive-input.js';
 const DEFAULT_PORT = 8200;
 const DEFAULT_BIND = '127.0.0.1';
 const DEFAULT_AIWG_SERVE = 'http://127.0.0.1:7337';
+/** Optional input: no source keeps registration/cache behavior, even at a terminal. */
+export async function resolveLocalExecutorToken(args, dependencies = {}) {
+    const source = sensitiveInputOptions(args, 'token');
+    const environment = dependencies.environment ?? process.env;
+    const explicit = source.interactive || source.stdin || source.file !== undefined || source.store !== undefined || source.env !== undefined;
+    if (!explicit) {
+        if (!environment.AIWG_EXECUTOR_TOKEN)
+            return undefined;
+        source.env = 'AIWG_EXECUTOR_TOKEN';
+    }
+    return resolveSensitiveInput(source, { ...dependencies, environment });
+}
 /**
  * Resolve or generate-once the executor identity.
  * Written to `.aiwg/local-executor/identity.json` so restarts reuse the same
@@ -122,6 +135,14 @@ export const localExecutorServeHandler = {
         // The subcommand is: `aiwg local-executor serve [flags]`
         // ctx.args[0] === 'serve' (consumed by router) or flags directly
         const flagArgs = ctx.args[0] === 'serve' ? ctx.args.slice(1) : ctx.args;
+        let preexistingToken;
+        try {
+            preexistingToken = await resolveLocalExecutorToken(flagArgs);
+        }
+        catch (error) {
+            return { exitCode: 1, message: error.message };
+        }
+        const redact = (message) => preexistingToken ? message.split(preexistingToken).join('[REDACTED]') : message;
         const opts = parseLocalExecutorArgs(flagArgs);
         warnIfNonLoopback(opts.bind);
         // ── Dynamic imports (same pattern as serve.ts) ──────────────────────────
@@ -138,7 +159,7 @@ export const localExecutorServeHandler = {
         }
         catch (err) {
             return {
-                message: `Failed to load executor-shim: ${err.message}`,
+                message: `Failed to load executor-shim: ${redact(err.message)}`,
                 exitCode: 1,
             };
         }
@@ -148,7 +169,7 @@ export const localExecutorServeHandler = {
         }
         catch (err) {
             return {
-                message: `Failed to load DaemonSupervisor: ${err.message}`,
+                message: `Failed to load DaemonSupervisor: ${redact(err.message)}`,
                 exitCode: 1,
             };
         }
@@ -208,7 +229,7 @@ export const localExecutorServeHandler = {
             restBase,
             wsBase,
             aiwgServeUrl: opts.aiwgServe,
-            token: process.env['AIWG_EXECUTOR_TOKEN'],
+            token: preexistingToken,
             tokenPath: projectAiwgPath(process.cwd(), 'local-executor', 'tokens', `${createHash('sha256').update(`${opts.aiwgServe}\0${opts.executorId}`).digest('hex')}.json`),
         });
         // Register with aiwg-serve
@@ -218,7 +239,7 @@ export const localExecutorServeHandler = {
         }
         catch (err) {
             return {
-                message: `Failed to register with aiwg-serve at ${opts.aiwgServe}: ${err.message}\n` +
+                message: `Failed to register with aiwg-serve at ${opts.aiwgServe}: ${redact(err.message)}\n` +
                     'Is aiwg serve running? Start it with: aiwg serve --no-open',
                 exitCode: 1,
             };
@@ -235,7 +256,7 @@ export const localExecutorServeHandler = {
         catch (err) {
             await shim.deregister();
             return {
-                message: `Failed to start executor server: ${err.message}`,
+                message: `Failed to start executor server: ${redact(err.message).split(token).join('[REDACTED]')}`,
                 exitCode: 1,
             };
         }
@@ -304,9 +325,15 @@ export const localExecutorHandler = {
                 '  --aiwg-serve <url>      Registration target (default: http://127.0.0.1:7337)\n' +
                 '  --max-concurrency <n>   Max concurrent missions (default: 4)\n' +
                 '  --executor-id <uuid>    Override stable executor ID\n' +
+                '  --token-interactive     Read optional existing bearer without echo\n' +
+                '  --token-stdin           Read optional existing bearer from stdin\n' +
+                '  --token-file <path>     Read optional existing bearer from a private file\n' +
+                '  --token-store <name>    Read optional existing bearer from the OS store\n' +
+                '  --token-env <NAME>      Read optional existing bearer from a named variable\n' +
                 '\n' +
                 'Environment:\n' +
-                '  AIWG_SERVE_ENDPOINT     Override --aiwg-serve default\n');
+                '  AIWG_SERVE_ENDPOINT     Override --aiwg-serve default\n' +
+                '  AIWG_EXECUTOR_TOKEN     Optional preexisting executor bearer\n');
             return { exitCode: 0 };
         }
         return {

package/dist/src/cost/fleet-report.js

@@ -1,7 +1,7 @@
 /**
  * OpenRouter fleet spend observation and local activity correlation.
  *
- * Secrets are resolved only from the process environment or the user's
+ * Secrets are resolved from named sources or the user's
  * ~/.config/aiwg/keys directory. Fleet configuration contains references,
  * never credential values.
  *
@@ -11,6 +11,7 @@ import { promises as fs } from 'node:fs';
 import os from 'node:os';
 import path from 'node:path';
 import { load as loadYaml } from 'js-yaml';
+import { resolveSensitiveInput } from '../auth/sensitive-input.js';
 const OPENROUTER_API = 'https://openrouter.ai/api/v1';
 const KEY_REF_PATTERN = /^[A-Za-z0-9][A-Za-z0-9._-]*$/;
 const SECRET_FIELD_PATTERN = /(?:api[_-]?key|token|secret|credential|authorization)/i;
@@ -60,6 +61,9 @@ function validateFleetConfig(value) {
         if (!KEY_REF_PATTERN.test(entry.key_ref)) {
             throw new Error(`fleet[${index}].key_ref contains unsupported characters.`);
         }
+        if (entry.key_store !== undefined && (typeof entry.key_store !== 'string' || !/^[A-Za-z0-9][A-Za-z0-9_.-]{0,127}$/.test(entry.key_store))) {
+            throw new Error(`fleet[${index}].key_store must name a native-store entry (1–128 letters, digits, dots, underscores or hyphens).`);
+        }
         if (typeof entry.monthly_cap !== 'number' || !Number.isFinite(entry.monthly_cap) || entry.monthly_cap < 0) {
             throw new Error(`fleet[${index}].monthly_cap must be a non-negative number.`);
         }
@@ -73,6 +77,7 @@ function validateFleetConfig(value) {
             bot: entry.bot.trim(),
             machine: entry.machine.trim(),
             key_ref: entry.key_ref,
+            ...(entry.key_store !== undefined ? { key_store: entry.key_store } : {}),
             monthly_cap: entry.monthly_cap,
         };
     });
@@ -101,10 +106,16 @@ export async function loadFleetKey(keyRef, options = {}) {
     if (!KEY_REF_PATTERN.test(keyRef))
         throw new Error('Invalid key_ref.');
     const env = options.env ?? process.env;
+    const dependencies = { environment: env, readStore: options.readStore, isTTY: false };
+    // An explicit reference is scoped to this entry. Never probe a global key or
+    // another bot's store when the selected source is unavailable.
+    if (options.store !== undefined) {
+        return resolveSensitiveInput({ prefix: 'key', store: options.store }, dependencies);
+    }
     const environmentName = keyEnvironmentName(keyRef);
     const environmentValue = env[environmentName]?.trim();
     if (environmentValue)
-        return environmentValue;
+        return resolveSensitiveInput({ prefix: 'key', env: environmentName }, dependencies);
     const homeDir = options.homeDir ?? os.homedir();
     const keyDirectory = path.resolve(homeDir, '.config', 'aiwg', 'keys');
     const keyPath = path.resolve(keyDirectory, keyRef);
@@ -116,7 +127,7 @@ export async function loadFleetKey(keyRef, options = {}) {
     }
     catch (error) {
         if (error.code === 'ENOENT') {
-            throw new Error(`No secure credential directory exists for key_ref '${keyRef}'; use ${environmentName} or create ~/.config/aiwg/keys with mode 0700.`);
+            throw new Error(`No secure credential directory exists for key_ref '${keyRef}'; use ${environmentName}, --key-store <name> (fleet: key_store), or create ~/.config/aiwg/keys with mode 0700.`);
         }
         throw error;
     }
@@ -129,27 +140,12 @@ export async function loadFleetKey(keyRef, options = {}) {
     if (typeof process.getuid === 'function' && directoryStat.uid !== process.getuid()) {
         throw new Error('The AIWG credential directory must be owned by the current user.');
     }
-    let stat;
     try {
-        stat = await fs.lstat(keyPath);
+        return await resolveSensitiveInput({ prefix: 'key', file: keyPath }, dependencies);
     }
     catch (error) {
-        if (error.code === 'ENOENT') {
-            throw new Error(`No credential found for key_ref '${keyRef}' in the secure key directory or ${environmentName}.`);
-        }
-        throw error;
-    }
-    if (stat.isSymbolicLink() || !stat.isFile())
-        throw new Error(`Credential for key_ref '${keyRef}' must be a regular file, not a symlink.`);
-    if ((stat.mode & 0o077) !== 0)
-        throw new Error(`Credential file for key_ref '${keyRef}' must not be accessible by group or other users.`);
-    if (typeof process.getuid === 'function' && stat.uid !== process.getuid()) {
-        throw new Error(`Credential file for key_ref '${keyRef}' must be owned by the current user.`);
+        throw new Error(`Credential for key_ref '${keyRef}': ${error.message} Use ${environmentName}, --key-store <name> (fleet: key_store), or a private ~/.config/aiwg/keys/<key_ref> file.`);
     }
-    const value = (await fs.readFile(keyPath, 'utf8')).trim();
-    if (!value)
-        throw new Error(`Credential file for key_ref '${keyRef}' is empty.`);
-    return value;
 }
 function parseActivityLog(raw) {
     const entries = [];
@@ -202,7 +198,9 @@ async function openRouterGet(endpoint, key, options) {
     }
     if (!payload || typeof payload !== 'object' || !payload.data)
         throw new Error('OpenRouter returned an invalid response.');
-    return payload.data;
+    // Generation metadata can reflect a request header in free-text fields. Keep
+    // such content out of both structured and human-readable reports.
+    return JSON.parse(JSON.stringify(payload.data, (_name, value) => (typeof value === 'string' ? value.split(key).join('[REDACTED]') : value)));
 }
 function correlateGenerations(records) {
     const sessions = new Map();
@@ -223,7 +221,7 @@ function correlateGenerations(records) {
 }
 async function reportBot(entry, activity, options) {
     try {
-        const key = await loadFleetKey(entry.key_ref, options);
+        const key = await loadFleetKey(entry.key_ref, { ...options, store: entry.key_store });
         const keyData = await openRouterGet('/key', key, options);
         const spend = Number(keyData.usage_monthly ?? keyData.usage ?? 0);
         if (!Number.isFinite(spend) || spend < 0)

package/dist/src/decision/driver.js

@@ -4,12 +4,12 @@ import { mkdir, readFile, writeFile } from 'node:fs/promises';
 import path from 'node:path';
 import { fileURLToPath, pathToFileURL } from 'node:url';
 import { askDecision, setupJev, DecisionAskUsageError, readDecisionContextFile, validateDecisionAskInput, } from './ask.js';
-import { recordDecisionAsk, decisionLedgerHistory, decisionLedgerStats, resolveDecisionSessionId, resolveDecisionSession, DECISION_SESSION_ENV_VARS, parseDecisionLedgerSince, DecisionLedgerSinceError, DECISION_LEDGER_SCHEMA, DECISION_LEDGER_SCHEMA_V1, ATTRIBUTION_FIELD_PATTERN, MAX_ATTRIBUTION_FIELD_LENGTH, MAX_RECORDED_CHOICE_IDS, MAX_RECORD_TEXT_BYTES, MAX_LEDGER_RECORD_BYTES, DECISION_LEDGER_RECORD_TIMEOUT_MS, DECISION_SAVINGS_REASONING_ALLOWANCE_TOKENS, DECISION_SAVINGS_ESTIMATION_METHOD, buildDecisionLedgerRecord, appendDecisionLedgerRecord, filterDecisionLedgerRecords, } from './ledger.js';
+import { recordDecisionAsk, decisionLedgerHistory, decisionLedgerStats, rotateDecisionLedger, parseDecisionLedgerRetention, resolveDecisionSessionId, resolveDecisionSession, DECISION_SESSION_ENV_VARS, parseDecisionLedgerSince, DecisionLedgerSinceError, DECISION_LEDGER_SCHEMA, DECISION_LEDGER_SCHEMA_V1, ATTRIBUTION_FIELD_PATTERN, MAX_ATTRIBUTION_FIELD_LENGTH, MAX_RECORDED_CHOICE_IDS, MAX_RECORD_TEXT_BYTES, MAX_LEDGER_RECORD_BYTES, DECISION_LEDGER_RECORD_TIMEOUT_MS, DECISION_SAVINGS_REASONING_ALLOWANCE_TOKENS, DECISION_SAVINGS_ESTIMATION_METHOD, buildDecisionLedgerRecord, appendDecisionLedgerRecord, filterDecisionLedgerRecords, } from './ledger.js';
 export { DEFAULT_DECISION_SAVINGS_WEIGHTS, decisionSavingsWeights } from './savings.js';
 import { resolveActiveProvider } from '../cli/provider-resolution.js';
 export { appendDecisionOpportunity, buildDecisionOffloadSnapshot, decisionOffloadCategory, DECISION_OFFLOAD_CHECKPOINT_COVERAGE, DECISION_OFFLOAD_EXECUTABLE_COVERAGE, DECISION_OFFLOAD_SNAPSHOT_SCHEMA, DECISION_OPPORTUNITY_SCHEMA, runDecisionOffloadCheckpoint, } from './offload.js';
 import { assertDecisionEvaluateDispatcherConfig, decisionPatternPacks, getDecisionPatternPack, governedPatternArtifacts, listDecisionPatterns, patternInputSchema, patternOutputSchema, planLiveDecisionPattern, runOfflineDecisionPattern, validateAgainstSchema, validateDecisionDocument, validateDefinition, validateRuleset, } from './index.js';
-export { askDecision, setupJev, readDecisionContextFile, validateDecisionAskInput, DecisionAskUsageError, recordDecisionAsk, decisionLedgerHistory, decisionLedgerStats, resolveDecisionSessionId, resolveDecisionSession, DECISION_SESSION_ENV_VARS, parseDecisionLedgerSince, DecisionLedgerSinceError, DECISION_LEDGER_SCHEMA, DECISION_LEDGER_SCHEMA_V1, ATTRIBUTION_FIELD_PATTERN, MAX_ATTRIBUTION_FIELD_LENGTH, MAX_RECORDED_CHOICE_IDS, MAX_RECORD_TEXT_BYTES, MAX_LEDGER_RECORD_BYTES, DECISION_LEDGER_RECORD_TIMEOUT_MS, DECISION_SAVINGS_REASONING_ALLOWANCE_TOKENS, DECISION_SAVINGS_ESTIMATION_METHOD, buildDecisionLedgerRecord, appendDecisionLedgerRecord, filterDecisionLedgerRecords, resolveActiveProvider, };
+export { askDecision, setupJev, readDecisionContextFile, validateDecisionAskInput, DecisionAskUsageError, recordDecisionAsk, decisionLedgerHistory, decisionLedgerStats, rotateDecisionLedger, parseDecisionLedgerRetention, resolveDecisionSessionId, resolveDecisionSession, DECISION_SESSION_ENV_VARS, parseDecisionLedgerSince, DecisionLedgerSinceError, DECISION_LEDGER_SCHEMA, DECISION_LEDGER_SCHEMA_V1, ATTRIBUTION_FIELD_PATTERN, MAX_ATTRIBUTION_FIELD_LENGTH, MAX_RECORDED_CHOICE_IDS, MAX_RECORD_TEXT_BYTES, MAX_LEDGER_RECORD_BYTES, DECISION_LEDGER_RECORD_TIMEOUT_MS, DECISION_SAVINGS_REASONING_ALLOWANCE_TOKENS, DECISION_SAVINGS_ESTIMATION_METHOD, buildDecisionLedgerRecord, appendDecisionLedgerRecord, filterDecisionLedgerRecords, resolveActiveProvider, };
 const DECISION_ROOT = path.dirname(path.dirname(fileURLToPath(import.meta.url)));
 const VALIDATION_TARGETS = ['request', 'definition', 'ruleset', 'binding'];
 const OFFLINE_ADAPTER = 'agentic/code/addons/decision-engine/examples/fixture-jev-adapter.mjs';

package/dist/src/decision/jev-credentials.js

@@ -1,10 +1,11 @@
 import { resolveDecisionEnablement } from '../config/decision-config.js';
 import { constants } from 'node:fs';
-import { access, chmod, mkdir, readFile, rename, rm, stat, writeFile } from 'node:fs/promises';
+import { access, chmod, lstat, mkdir, rename, rm, stat, writeFile } from 'node:fs/promises';
 import os from 'node:os';
 import path from 'node:path';
 import { randomUUID } from 'node:crypto';
 import { JevCredentialError } from './adapters/jev.js';
+import { readPrivateValueFile } from '../auth/sensitive-input.js';
 export const JEV_CREDENTIAL_REF = 'typesafe-api';
 export const JEV_DEFAULT_REGION = 'us';
 function env(options) {
@@ -45,10 +46,22 @@ function parseRecord(raw) {
 async function readCredentialFile(options = {}) {
     const credentialPath = jevCredentialPath(options);
     try {
-        const [fileStat, parentStat] = await Promise.all([stat(credentialPath), stat(path.dirname(credentialPath))]);
-        if (isInsecureMode(fileStat.mode) || isInsecureMode(parentStat.mode))
-            throw new JevCredentialError('denied');
-        return parseRecord(await readFile(credentialPath, 'utf8'));
+        // Preserve the missing-file result and the existing directory requirement.
+        // The shared reader validates the opened descriptor, including ownership
+        // and link checks, before any credential record is parsed.
+        const [, parentStat] = await Promise.all([lstat(credentialPath), stat(path.dirname(credentialPath))]);
+        if (isInsecureMode(parentStat.mode)) {
+            throw Object.assign(new JevCredentialError('denied'), { message: 'Jev credential directory must not allow group or other access (chmod 700).' });
+        }
+        let raw;
+        try {
+            raw = await readPrivateValueFile(credentialPath, 'Jev credential file');
+        }
+        catch (error) {
+            // Shared private-file diagnostics contain no path or credential bytes.
+            throw Object.assign(new JevCredentialError('denied'), { message: error.message });
+        }
+        return parseRecord(raw);
     }
     catch (error) {
         if (error.code === 'ENOENT')