@almadar/workspace 0.2.5 → 0.2.6

package/dist/internal/backends/local.d.ts

@@ -20,4 +20,5 @@ export declare class LocalBackend implements WorkspaceBackend {
         isDirectory: boolean;
     }>;
     rename(srcAbs: string, dstAbs: string): Promise<void>;
+    chmod(absPath: string, mode: number): Promise<void>;
 }

package/dist/internal/backends/memory.d.ts

@@ -21,6 +21,7 @@ export declare class MemoryBackend implements WorkspaceBackend {
         isDirectory: boolean;
     }>;
     rename(srcAbs: string, dstAbs: string): Promise<void>;
+    chmod(): Promise<void>;
     getAll(): Map<string, string>;
     clear(): void;
 }

package/dist/internal/types.d.ts

@@ -35,6 +35,8 @@ export interface WorkspaceBackend {
      * exists; backend ensures `dstAbs`'s parent dir exists before move.
      */
     rename(srcAbs: string, dstAbs: string): Promise<void>;
+    /** Set file mode bits (e.g. `0o600` for a secrets file). No-op on backends without a real fs. */
+    chmod(absPath: string, mode: number): Promise<void>;
 }
 /**
  * The persisted marker that pins an `appId` to a workspace dir on disk.

package/dist/types.d.ts

@@ -7,6 +7,7 @@
  * @packageDocumentation
  */
 import type { JsonObject, JsonValue } from '@almadar/core';
+import type { ProviderConfig } from '@almadar/llm';
 import type { EmbedderPort, WorkspaceIndex } from './workspace-index/types.js';
 /**
  * The only extension point. Consumers register one observer via
@@ -236,3 +237,72 @@ export interface WorkspaceService {
     readonly index: WorkspaceIndex;
     dispose(): Promise<void>;
 }
+/**
+ * Non-secret account config, persisted to `~/.almadar/config.json`. Safe to
+ * inspect/sync. Secrets live in `credentials.json` (see {@link ProviderCredential}).
+ */
+export interface AccountConfig {
+    schemaVersion: 1;
+    /** ISO timestamp; absence signals the first-run setup hasn't completed. */
+    setupCompletedAt?: string;
+    defaultProvider: string;
+    defaultModel: string;
+    autonomy: 'full' | 'balanced' | 'cautious';
+    budget?: number;
+    /** Per-provider non-secret overrides, keyed by provider name. */
+    providers?: Record<string, {
+        baseUrl?: string;
+        model?: string;
+    }>;
+    /** Service endpoints (override the built-in defaults). */
+    services?: {
+        authUrl?: string;
+        builderUrl?: string;
+        masarUrl?: string;
+    };
+    /** Where the active config came from. */
+    source: 'local' | 'studio';
+}
+/** A single provider's secret, persisted to `~/.almadar/credentials.json` (chmod 600). */
+export interface ProviderCredential {
+    apiKey: string;
+}
+/** Studio-synced identity overlay, persisted to `~/.almadar/account.json`. Empty until login. */
+export interface AccountIdentity {
+    uid: string;
+    email?: string;
+    tier?: string;
+    teamId?: string | null;
+    syncedAt: string;
+}
+export interface OpenAccountOptions {
+    /** Home directory root. Defaults to `os.homedir()`. */
+    home?: string;
+    /** Storage backend. Defaults to `'local'` (real filesystem). */
+    backend?: 'local' | 'memory';
+}
+/**
+ * Account-level store rooted at `~/.almadar/`. Home-rooted and NOT sandboxed
+ * (unlike {@link WorkspaceService}); owns config + credentials + the Studio
+ * identity overlay. Construct via `openAccount`.
+ */
+export interface AccountService {
+    /** Absolute `~/.almadar` path. */
+    readonly root: string;
+    getConfig(): Promise<AccountConfig>;
+    setConfig(patch: Partial<AccountConfig>): Promise<void>;
+    getCredential(provider: string): Promise<ProviderCredential | null>;
+    setCredential(provider: string, cred: ProviderCredential): Promise<void>;
+    listCredentialedProviders(): Promise<string[]>;
+    readAccount(): Promise<AccountIdentity | null>;
+    writeAccount(identity: AccountIdentity): Promise<void>;
+    /**
+     * Resolve the explicit {@link ProviderConfig} for `provider` (stored apiKey +
+     * config baseUrl/model overrides), ready to pass into `@almadar/llm` / rabit.
+     * Returns null when no credential is stored for `provider`.
+     */
+    resolveProviderConfig(provider: string): Promise<ProviderConfig | null>;
+    /** True once setup completed AND at least one provider has a stored credential. */
+    isConfigured(): Promise<boolean>;
+    dispose(): Promise<void>;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@almadar/workspace",
-  "version": "0.2.5",
+  "version": "0.2.6",
   "description": "Storage-agnostic workspace primitives shared by Almadar consumers. One service, six exports, hidden paths, single observer. See docs/Almadar_Workspace.md.",
   "type": "module",
   "main": "./dist/index.js",