@commit451/salamander 1.2.0 → 1.3.0

package/dist/services/crypto.d.ts

@@ -0,0 +1,52 @@
+export interface KeyPair {
+    publicKey: string;
+    privateKey: string;
+}
+export interface EncryptedMessage {
+    encryptedData: string;
+    iv: string;
+    tag: string;
+}
+export declare class CryptoService {
+    private static readonly ALGORITHM;
+    private static readonly IV_LENGTH;
+    private static readonly TAG_LENGTH;
+    private static readonly KEY_LENGTH;
+    /**
+     * Generate an ECDH key pair for key exchange
+     */
+    static generateECDHKeyPair(): KeyPair;
+    /**
+     * Derive a shared secret from ECDH key exchange
+     */
+    static deriveSharedSecret(privateKey: string, publicKey: string): string;
+    /**
+     * Encrypt a message using AES-256-GCM
+     */
+    static encrypt(message: string, key: string): EncryptedMessage;
+    /**
+     * Decrypt a message using AES-256-GCM
+     */
+    static decrypt(encryptedMessage: EncryptedMessage, key: string): string;
+    /**
+     * Generate a random 256-bit key for symmetric encryption
+     */
+    static generateRandomKey(): string;
+    /**
+     * Check if a message appears to be encrypted
+     */
+    static isEncrypted(message: string): boolean;
+    /**
+     * Safely encrypt a message, handling both string and object inputs
+     */
+    static safeEncrypt(data: any, key: string): string;
+    /**
+     * Safely decrypt a message, throwing error if decryption fails
+     */
+    static safeDecrypt(encryptedData: string, key: string): string;
+    /**
+     * Create a hash of the key for identification purposes
+     */
+    static createKeyHash(key: string): string;
+}
+//# sourceMappingURL=crypto.d.ts.map

package/dist/services/crypto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.d.ts","sourceRoot":"","sources":["../../src/services/crypto.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,OAAO;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,gBAAgB;IAC7B,aAAa,EAAE,MAAM,CAAC;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,EAAE,MAAM,CAAC;CACf;AAED,qBAAa,aAAa;IACtB,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAiB;IAClD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAM;IACvC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAM;IACxC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAM;IAExC;;OAEG;IACH,MAAM,CAAC,mBAAmB,IAAI,OAAO;IAUrC;;OAEG;IACH,MAAM,CAAC,kBAAkB,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM;IAYxE;;OAEG;IACH,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,gBAAgB;IAmB9D;;OAEG;IACH,MAAM,CAAC,OAAO,CAAC,gBAAgB,EAAE,gBAAgB,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM;IAevE;;OAEG;IACH,MAAM,CAAC,iBAAiB,IAAI,MAAM;IAKlC;;OAEG;IACH,MAAM,CAAC,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO;IAS5C;;OAEG;IACH,MAAM,CAAC,WAAW,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM;IAMlD;;OAEG;IACH,MAAM,CAAC,WAAW,CAAC,aAAa,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM;IAS9D;;OAEG;IACH,MAAM,CAAC,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM;CAG5C"}

package/dist/services/crypto.js

@@ -0,0 +1,104 @@
+import * as crypto from 'node:crypto';
+export class CryptoService {
+    static ALGORITHM = 'aes-256-gcm';
+    static IV_LENGTH = 16;
+    static TAG_LENGTH = 16;
+    static KEY_LENGTH = 32;
+    /**
+     * Generate an ECDH key pair for key exchange
+     */
+    static generateECDHKeyPair() {
+        const ecdh = crypto.createECDH('secp256k1');
+        ecdh.generateKeys();
+        return {
+            publicKey: ecdh.getPublicKey('base64'),
+            privateKey: ecdh.getPrivateKey('base64')
+        };
+    }
+    /**
+     * Derive a shared secret from ECDH key exchange
+     */
+    static deriveSharedSecret(privateKey, publicKey) {
+        const ecdh = crypto.createECDH('secp256k1');
+        ecdh.setPrivateKey(privateKey, 'base64');
+        const sharedSecret = ecdh.computeSecret(publicKey, 'base64');
+        // Use HKDF to derive a proper encryption key
+        const derivedKey = crypto.hkdfSync('sha256', sharedSecret, '', 'salamander-e2e-encryption', CryptoService.KEY_LENGTH);
+        return Buffer.from(derivedKey).toString('base64');
+    }
+    /**
+     * Encrypt a message using AES-256-GCM
+     */
+    static encrypt(message, key) {
+        const keyBuffer = Buffer.from(key, 'base64');
+        const iv = crypto.randomBytes(CryptoService.IV_LENGTH);
+        const cipher = crypto.createCipheriv(CryptoService.ALGORITHM, keyBuffer, iv);
+        cipher.setAAD(Buffer.from('salamander'));
+        let encryptedData = cipher.update(message, 'utf8', 'base64');
+        encryptedData += cipher.final('base64');
+        const tag = cipher.getAuthTag();
+        return {
+            encryptedData,
+            iv: iv.toString('base64'),
+            tag: tag.toString('base64')
+        };
+    }
+    /**
+     * Decrypt a message using AES-256-GCM
+     */
+    static decrypt(encryptedMessage, key) {
+        const keyBuffer = Buffer.from(key, 'base64');
+        const iv = Buffer.from(encryptedMessage.iv, 'base64');
+        const tag = Buffer.from(encryptedMessage.tag, 'base64');
+        const decipher = crypto.createDecipheriv(CryptoService.ALGORITHM, keyBuffer, iv);
+        decipher.setAAD(Buffer.from('salamander'));
+        decipher.setAuthTag(tag);
+        let decryptedData = decipher.update(encryptedMessage.encryptedData, 'base64', 'utf8');
+        decryptedData += decipher.final('utf8');
+        return decryptedData;
+    }
+    /**
+     * Generate a random 256-bit key for symmetric encryption
+     */
+    static generateRandomKey() {
+        const key = crypto.randomBytes(CryptoService.KEY_LENGTH);
+        return key.toString('base64');
+    }
+    /**
+     * Check if a message appears to be encrypted
+     */
+    static isEncrypted(message) {
+        try {
+            const parsed = JSON.parse(message);
+            return parsed.encryptedData && parsed.iv && parsed.tag;
+        }
+        catch {
+            return false;
+        }
+    }
+    /**
+     * Safely encrypt a message, handling both string and object inputs
+     */
+    static safeEncrypt(data, key) {
+        const message = typeof data === 'string' ? data : JSON.stringify(data);
+        const encrypted = this.encrypt(message, key);
+        return JSON.stringify(encrypted);
+    }
+    /**
+     * Safely decrypt a message, throwing error if decryption fails
+     */
+    static safeDecrypt(encryptedData, key) {
+        if (!this.isEncrypted(encryptedData)) {
+            throw new Error('Message is not encrypted - encryption is required');
+        }
+        const encryptedMessage = JSON.parse(encryptedData);
+        return this.decrypt(encryptedMessage, key);
+    }
+    /**
+     * Create a hash of the key for identification purposes
+     */
+    static createKeyHash(key) {
+        return crypto.createHash('sha256').update(key).digest('hex').substring(0, 16);
+    }
+}
+//# sourceMappingURL=crypto.js.map

package/dist/services/crypto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.js","sourceRoot":"","sources":["../../src/services/crypto.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AAatC,MAAM,OAAO,aAAa;IACd,MAAM,CAAU,SAAS,GAAG,aAAa,CAAC;IAC1C,MAAM,CAAU,SAAS,GAAG,EAAE,CAAC;IAC/B,MAAM,CAAU,UAAU,GAAG,EAAE,CAAC;IAChC,MAAM,CAAU,UAAU,GAAG,EAAE,CAAC;IAExC;;OAEG;IACH,MAAM,CAAC,mBAAmB;QACtB,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;QAC5C,IAAI,CAAC,YAAY,EAAE,CAAC;QAEpB,OAAO;YACH,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC;YACtC,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC;SAC3C,CAAC;IACN,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,kBAAkB,CAAC,UAAkB,EAAE,SAAiB;QAC3D,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;QAC5C,IAAI,CAAC,aAAa,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QAEzC,MAAM,YAAY,GAAG,IAAI,CAAC,aAAa,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QAE7D,6CAA6C;QAC7C,MAAM,UAAU,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,YAAY,EAAE,EAAE,EAAE,2BAA2B,EAAE,aAAa,CAAC,UAAU,CAAC,CAAC;QAEtH,OAAO,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACtD,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,OAAO,CAAC,OAAe,EAAE,GAAW;QACvC,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAC7C,MAAM,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;QAEvD,MAAM,MAAM,GAAG,MAAM,CAAC,cAAc,CAAC,aAAa,CAAC,SAAS,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;QAC7E,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;QAEzC,IAAI,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC7D,aAAa,IAAI,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAExC,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QAEhC,OAAO;YACH,aAAa;YACb,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC;YACzB,GAAG,EAAE,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC;SAC9B,CAAC;IACN,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,OAAO,CAAC,gBAAkC,EAAE,GAAW;QAC1D,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAC7C,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QACtD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAExD,MAAM,QAAQ,GAAG,MAAM,CAAC,gBAAgB,CAAC,aAAa,CAAC,SAAS,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;QACjF,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;QAC3C,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QAEzB,IAAI,aAAa,GAAG,QAAQ,CAAC,MAAM,CAAC,gBAAgB,CAAC,aAAa,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;QACtF,aAAa,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAExC,OAAO,aAAa,CAAC;IACzB,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,iBAAiB;QACpB,MAAM,GAAG,GAAG,MAAM,CAAC,WAAW,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;QACzD,OAAO,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAClC,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,WAAW,CAAC,OAAe;QAC9B,IAAI,CAAC;YACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACnC,OAAO,MAAM,CAAC,aAAa,IAAI,MAAM,CAAC,EAAE,IAAI,MAAM,CAAC,GAAG,CAAC;QAC3D,CAAC;QAAC,MAAM,CAAC;YACL,OAAO,KAAK,CAAC;QACjB,CAAC;IACL,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,WAAW,CAAC,IAAS,EAAE,GAAW;QACrC,MAAM,OAAO,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACvE,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAC7C,OAAO,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IACrC,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,WAAW,CAAC,aAAqB,EAAE,GAAW;QACjD,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;QACzE,CAAC;QAED,MAAM,gBAAgB,GAAqB,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QACrE,OAAO,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC;IAC/C,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,aAAa,CAAC,GAAW;QAC5B,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAClF,CAAC"}

package/dist/services/key-manager.d.ts

@@ -0,0 +1,45 @@
+import { KeyPair } from './crypto.js';
+export declare class KeyManagerService {
+    private static readonly KEYS_STORAGE_KEY;
+    private static readonly KEY_EXPIRY_DAYS;
+    /**
+     * Initialize keys for a new runner
+     */
+    static initializeRunnerKeys(runnerId: string): Promise<KeyPair>;
+    /**
+     * Complete the key exchange with the Flutter app's public key
+     */
+    static completeKeyExchange(runnerId: string, flutterPublicKey: string): Promise<string>;
+    /**
+     * Get the shared secret for encryption/decryption
+     */
+    static getSharedSecret(runnerId: string): Promise<string | null>;
+    /**
+     * Get the CLI's public key for a runner
+     */
+    static getPublicKey(runnerId: string): Promise<string | null>;
+    /**
+     * Check if keys exist and are properly initialized for a runner
+     */
+    static hasValidKeys(runnerId: string): Promise<boolean>;
+    /**
+     * Rotate keys for a runner (generate new key pair)
+     */
+    static rotateKeys(runnerId: string): Promise<KeyPair>;
+    /**
+     * Remove keys for a runner (when runner is deleted)
+     */
+    static removeRunnerKeys(runnerId: string): Promise<void>;
+    /**
+     * Get all runners that have encryption keys
+     */
+    static getEncryptedRunnerIds(): Promise<string[]>;
+    /**
+     * Cleanup expired keys
+     */
+    static cleanupExpiredKeys(): Promise<number>;
+    private static getRunnerKeys;
+    private static storeRunnerKeys;
+    private static getAllStoredKeys;
+}
+//# sourceMappingURL=key-manager.d.ts.map

package/dist/services/key-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"key-manager.d.ts","sourceRoot":"","sources":["../../src/services/key-manager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgB,OAAO,EAAC,MAAM,aAAa,CAAC;AAUnD,qBAAa,iBAAiB;IAC1B,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAA4B;IACpE,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAM;IAE7C;;OAEG;WACU,oBAAoB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAYrE;;OAEG;WACU,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAoB7F;;OAEG;WACU,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAetE;;OAEG;WACU,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAKnE;;OAEG;WACU,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAK7D;;OAEG;WACU,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAK3D;;OAEG;WACU,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAM9D;;OAEG;WACU,qBAAqB,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;IAQvD;;OAEG;WACU,kBAAkB,IAAI,OAAO,CAAC,MAAM,CAAC;mBAwB7B,aAAa;mBAKb,eAAe;mBAMf,gBAAgB;CAGxC"}

package/dist/services/key-manager.js

@@ -0,0 +1,123 @@
+import { CryptoService } from './crypto.js';
+import { StorageService } from '../utils/storage.js';
+export class KeyManagerService {
+    static KEYS_STORAGE_KEY = 'salamander_runner_keys';
+    static KEY_EXPIRY_DAYS = 30;
+    /**
+     * Initialize keys for a new runner
+     */
+    static async initializeRunnerKeys(runnerId) {
+        const ecdhKeyPair = CryptoService.generateECDHKeyPair();
+        const runnerKeys = {
+            ecdhKeyPair,
+            createdAt: Date.now()
+        };
+        await this.storeRunnerKeys(runnerId, runnerKeys);
+        return ecdhKeyPair;
+    }
+    /**
+     * Complete the key exchange with the Flutter app's public key
+     */
+    static async completeKeyExchange(runnerId, flutterPublicKey) {
+        const runnerKeys = await this.getRunnerKeys(runnerId);
+        if (!runnerKeys) {
+            throw new Error(`No keys found for runner ${runnerId}`);
+        }
+        // Derive shared secret using our private key and Flutter's public key
+        const sharedSecret = CryptoService.deriveSharedSecret(runnerKeys.ecdhKeyPair.privateKey, flutterPublicKey);
+        // Update stored keys with shared secret
+        runnerKeys.sharedSecret = sharedSecret;
+        runnerKeys.keyHash = CryptoService.createKeyHash(sharedSecret);
+        await this.storeRunnerKeys(runnerId, runnerKeys);
+        return sharedSecret;
+    }
+    /**
+     * Get the shared secret for encryption/decryption
+     */
+    static async getSharedSecret(runnerId) {
+        const runnerKeys = await this.getRunnerKeys(runnerId);
+        if (!runnerKeys?.sharedSecret) {
+            return null;
+        }
+        // Check if keys are expired
+        const daysSinceCreation = (Date.now() - runnerKeys.createdAt) / (1000 * 60 * 60 * 24);
+        if (daysSinceCreation > this.KEY_EXPIRY_DAYS) {
+            console.warn(`Keys for runner ${runnerId} have expired. Consider key rotation.`);
+        }
+        return runnerKeys.sharedSecret;
+    }
+    /**
+     * Get the CLI's public key for a runner
+     */
+    static async getPublicKey(runnerId) {
+        const runnerKeys = await this.getRunnerKeys(runnerId);
+        return runnerKeys?.ecdhKeyPair.publicKey ?? null;
+    }
+    /**
+     * Check if keys exist and are properly initialized for a runner
+     */
+    static async hasValidKeys(runnerId) {
+        const runnerKeys = await this.getRunnerKeys(runnerId);
+        return !!(runnerKeys?.ecdhKeyPair && runnerKeys?.sharedSecret);
+    }
+    /**
+     * Rotate keys for a runner (generate new key pair)
+     */
+    static async rotateKeys(runnerId) {
+        console.log(`Rotating keys for runner ${runnerId}`);
+        return await this.initializeRunnerKeys(runnerId);
+    }
+    /**
+     * Remove keys for a runner (when runner is deleted)
+     */
+    static async removeRunnerKeys(runnerId) {
+        const allKeys = await this.getAllStoredKeys();
+        delete allKeys[runnerId];
+        await StorageService.set(this.KEYS_STORAGE_KEY, allKeys);
+    }
+    /**
+     * Get all runners that have encryption keys
+     */
+    static async getEncryptedRunnerIds() {
+        const allKeys = await this.getAllStoredKeys();
+        return Object.keys(allKeys).filter(runnerId => {
+            const keys = allKeys[runnerId];
+            return keys?.sharedSecret;
+        });
+    }
+    /**
+     * Cleanup expired keys
+     */
+    static async cleanupExpiredKeys() {
+        const allKeys = await this.getAllStoredKeys();
+        const now = Date.now();
+        let cleanedCount = 0;
+        const updatedKeys = {};
+        for (const [runnerId, keys] of Object.entries(allKeys)) {
+            const daysSinceCreation = (now - keys.createdAt) / (1000 * 60 * 60 * 24);
+            if (daysSinceCreation <= this.KEY_EXPIRY_DAYS) {
+                updatedKeys[runnerId] = keys;
+            }
+            else {
+                cleanedCount++;
+                console.log(`Cleaned up expired keys for runner ${runnerId}`);
+            }
+        }
+        await StorageService.set(this.KEYS_STORAGE_KEY, updatedKeys);
+        return cleanedCount;
+    }
+    // Private helper methods
+    static async getRunnerKeys(runnerId) {
+        const allKeys = await this.getAllStoredKeys();
+        return allKeys[runnerId] ?? null;
+    }
+    static async storeRunnerKeys(runnerId, keys) {
+        const allKeys = await this.getAllStoredKeys();
+        allKeys[runnerId] = keys;
+        await StorageService.set(this.KEYS_STORAGE_KEY, allKeys);
+    }
+    static async getAllStoredKeys() {
+        return (await StorageService.get(this.KEYS_STORAGE_KEY)) ?? {};
+    }
+}
+//# sourceMappingURL=key-manager.js.map

package/dist/services/key-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"key-manager.js","sourceRoot":"","sources":["../../src/services/key-manager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,aAAa,EAAU,MAAM,aAAa,CAAC;AACnD,OAAO,EAAC,cAAc,EAAC,MAAM,qBAAqB,CAAC;AASnD,MAAM,OAAO,iBAAiB;IAClB,MAAM,CAAU,gBAAgB,GAAG,wBAAwB,CAAC;IAC5D,MAAM,CAAU,eAAe,GAAG,EAAE,CAAC;IAE7C;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAAC,QAAgB;QAC9C,MAAM,WAAW,GAAG,aAAa,CAAC,mBAAmB,EAAE,CAAC;QAExD,MAAM,UAAU,GAAe;YAC3B,WAAW;YACX,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACxB,CAAC;QAEF,MAAM,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QACjD,OAAO,WAAW,CAAC;IACvB,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,mBAAmB,CAAC,QAAgB,EAAE,gBAAwB;QACvE,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QACtD,IAAI,CAAC,UAAU,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,4BAA4B,QAAQ,EAAE,CAAC,CAAC;QAC5D,CAAC;QAED,sEAAsE;QACtE,MAAM,YAAY,GAAG,aAAa,CAAC,kBAAkB,CACjD,UAAU,CAAC,WAAW,CAAC,UAAU,EACjC,gBAAgB,CACnB,CAAC;QAEF,wCAAwC;QACxC,UAAU,CAAC,YAAY,GAAG,YAAY,CAAC;QACvC,UAAU,CAAC,OAAO,GAAG,aAAa,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;QAE/D,MAAM,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QACjD,OAAO,YAAY,CAAC;IACxB,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,QAAgB;QACzC,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QACtD,IAAI,CAAC,UAAU,EAAE,YAAY,EAAE,CAAC;YAC5B,OAAO,IAAI,CAAC;QAChB,CAAC;QAED,4BAA4B;QAC5B,MAAM,iBAAiB,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;QACtF,IAAI,iBAAiB,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;YAC3C,OAAO,CAAC,IAAI,CAAC,mBAAmB,QAAQ,uCAAuC,CAAC,CAAC;QACrF,CAAC;QAED,OAAO,UAAU,CAAC,YAAY,CAAC;IACnC,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,QAAgB;QACtC,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QACtD,OAAO,UAAU,EAAE,WAAW,CAAC,SAAS,IAAI,IAAI,CAAC;IACrD,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,QAAgB;QACtC,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QACtD,OAAO,CAAC,CAAC,CAAC,UAAU,EAAE,WAAW,IAAI,UAAU,EAAE,YAAY,CAAC,CAAC;IACnE,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,QAAgB;QACpC,OAAO,CAAC,GAAG,CAAC,4BAA4B,QAAQ,EAAE,CAAC,CAAC;QACpD,OAAO,MAAM,IAAI,CAAC,oBAAoB,CAAC,QAAQ,CAAC,CAAC;IACrD,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,QAAgB;QAC1C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC9C,OAAO,OAAO,CAAC,QAAQ,CAAC,CAAC;QACzB,MAAM,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAC;IAC7D,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,qBAAqB;QAC9B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC9C,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE;YAC1C,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;YAC/B,OAAO,IAAI,EAAE,YAAY,CAAC;QAC9B,CAAC,CAAC,CAAC;IACP,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,kBAAkB;QAC3B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC9C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,YAAY,GAAG,CAAC,CAAC;QAErB,MAAM,WAAW,GAA+B,EAAE,CAAC;QAEnD,KAAK,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YACrD,MAAM,iBAAiB,GAAG,CAAC,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;YAEzE,IAAI,iBAAiB,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;gBAC5C,WAAW,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC;YACjC,CAAC;iBAAM,CAAC;gBACJ,YAAY,EAAE,CAAC;gBACf,OAAO,CAAC,GAAG,CAAC,sCAAsC,QAAQ,EAAE,CAAC,CAAC;YAClE,CAAC;QACL,CAAC;QAED,MAAM,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,gBAAgB,EAAE,WAAW,CAAC,CAAC;QAC7D,OAAO,YAAY,CAAC;IACxB,CAAC;IAED,yBAAyB;IAEjB,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,QAAgB;QAC/C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC9C,OAAO,OAAO,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC;IACrC,CAAC;IAEO,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,QAAgB,EAAE,IAAgB;QACnE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC9C,OAAO,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC;QACzB,MAAM,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAC;IAC7D,CAAC;IAEO,MAAM,CAAC,KAAK,CAAC,gBAAgB;QACjC,OAAO,CAAC,MAAM,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,IAAI,EAAE,CAAC;IACnE,CAAC"}

package/dist/services/multi-device-key-manager.d.ts

@@ -0,0 +1,56 @@
+import { type DeviceKey } from '../types/runner.js';
+export declare class MultiDeviceKeyManagerService {
+    private static readonly KEYS_STORAGE_KEY;
+    private static readonly KEY_EXPIRY_DAYS;
+    /**
+     * Initialize keys for a new runner (CLI side)
+     */
+    static initializeRunnerKeys(runnerId: string): Promise<{
+        publicKey: string;
+        privateKey: string;
+    }>;
+    /**
+     * Register a new device and derive shared secret
+     */
+    static registerDevice(runnerId: string, deviceKey: DeviceKey): Promise<string>;
+    /**
+     * Remove a device from the runner
+     */
+    static removeDevice(runnerId: string, deviceId: string): Promise<void>;
+    /**
+     * Get shared secret for specific device
+     */
+    static getSharedSecret(runnerId: string, deviceId: string): Promise<string | null>;
+    /**
+     * Get all registered device IDs for a runner
+     */
+    static getRegisteredDevices(runnerId: string): Promise<string[]>;
+    /**
+     * Encrypt command for specific device
+     */
+    static encryptForDevice(runnerId: string, deviceId: string, command: string): Promise<string>;
+    /**
+     * Encrypt command for all registered devices
+     */
+    static encryptForAllDevices(runnerId: string, command: string): Promise<Record<string, string>>;
+    /**
+     * Decrypt command from specific device
+     */
+    static decryptFromDevice(runnerId: string, deviceId: string, encryptedCommand: string): Promise<string>;
+    /**
+     * Check if runner has any registered devices
+     */
+    static hasRegisteredDevices(runnerId: string): Promise<boolean>;
+    /**
+     * Clean up all keys for a runner
+     */
+    static removeRunnerKeys(runnerId: string): Promise<void>;
+    /**
+     * Get CLI's public key for a runner
+     */
+    static getCliPublicKey(runnerId: string): Promise<string | null>;
+    private static getRunnerKeys;
+    private static storeRunnerKeys;
+    private static getAllStoredKeys;
+}
+//# sourceMappingURL=multi-device-key-manager.d.ts.map

package/dist/services/multi-device-key-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"multi-device-key-manager.d.ts","sourceRoot":"","sources":["../../src/services/multi-device-key-manager.ts"],"names":[],"mappings":"AAEA,OAAO,EAAC,KAAK,SAAS,EAAC,MAAM,oBAAoB,CAAC;AASlD,qBAAa,4BAA4B;IACrC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAkC;IAC1E,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAM;IAE7C;;OAEG;WACU,oBAAoB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAC,CAAC;IAcrG;;OAEG;WACU,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC;IA6BpF;;OAEG;WACU,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAa5E;;OAEG;WACU,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAexF;;OAEG;WACU,oBAAoB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAStE;;OAEG;WACU,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IASnG;;OAEG;WACU,oBAAoB,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAuBrG;;OAEG;WACU,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAS7G;;OAEG;WACU,oBAAoB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAKrE;;OAEG;WACU,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAO9D;;OAEG;WACU,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;mBAOjD,aAAa;mBAKb,eAAe;mBAMf,gBAAgB;CAGxC"}

package/dist/services/multi-device-key-manager.js

@@ -0,0 +1,159 @@
+import { CryptoService } from './crypto.js';
+import { StorageService } from '../utils/storage.js';
+export class MultiDeviceKeyManagerService {
+    static KEYS_STORAGE_KEY = 'salamander_multi_device_keys';
+    static KEY_EXPIRY_DAYS = 30;
+    /**
+     * Initialize keys for a new runner (CLI side)
+     */
+    static async initializeRunnerKeys(runnerId) {
+        const ecdhKeyPair = CryptoService.generateECDHKeyPair();
+        const keyData = {
+            ecdhKeyPair,
+            sharedSecrets: {},
+            keyHashes: {},
+            createdAt: Date.now()
+        };
+        await this.storeRunnerKeys(runnerId, keyData);
+        return ecdhKeyPair;
+    }
+    /**
+     * Register a new device and derive shared secret
+     */
+    static async registerDevice(runnerId, deviceKey) {
+        const keyData = await this.getRunnerKeys(runnerId);
+        if (!keyData) {
+            throw new Error(`No keys found for runner ${runnerId}`);
+        }
+        // Derive shared secret with this device
+        const sharedSecret = CryptoService.deriveSharedSecret(keyData.ecdhKeyPair.privateKey, deviceKey.publicKey);
+        const keyHash = CryptoService.createKeyHash(sharedSecret);
+        // Verify the key hash matches what the device expects
+        if (keyHash !== deviceKey.keyHash) {
+            throw new Error('Key hash mismatch during device registration');
+        }
+        // Store the shared secret for this device
+        keyData.sharedSecrets[deviceKey.deviceId] = sharedSecret;
+        keyData.keyHashes[deviceKey.deviceId] = keyHash;
+        await this.storeRunnerKeys(runnerId, keyData);
+        console.log(`✓ Device ${deviceKey.deviceId} registered for runner ${runnerId}`);
+        return sharedSecret;
+    }
+    /**
+     * Remove a device from the runner
+     */
+    static async removeDevice(runnerId, deviceId) {
+        const keyData = await this.getRunnerKeys(runnerId);
+        if (!keyData) {
+            return; // No keys to clean up
+        }
+        delete keyData.sharedSecrets[deviceId];
+        delete keyData.keyHashes[deviceId];
+        await this.storeRunnerKeys(runnerId, keyData);
+        console.log(`Device ${deviceId} removed from runner ${runnerId}`);
+    }
+    /**
+     * Get shared secret for specific device
+     */
+    static async getSharedSecret(runnerId, deviceId) {
+        const keyData = await this.getRunnerKeys(runnerId);
+        if (!keyData) {
+            return null;
+        }
+        // Check if keys are expired
+        const daysSinceCreation = (Date.now() - keyData.createdAt) / (1000 * 60 * 60 * 24);
+        if (daysSinceCreation > this.KEY_EXPIRY_DAYS) {
+            console.warn(`Keys for runner ${runnerId} have expired. Consider key rotation.`);
+        }
+        return keyData.sharedSecrets[deviceId] || null;
+    }
+    /**
+     * Get all registered device IDs for a runner
+     */
+    static async getRegisteredDevices(runnerId) {
+        const keyData = await this.getRunnerKeys(runnerId);
+        if (!keyData) {
+            return [];
+        }
+        return Object.keys(keyData.sharedSecrets);
+    }
+    /**
+     * Encrypt command for specific device
+     */
+    static async encryptForDevice(runnerId, deviceId, command) {
+        const sharedSecret = await this.getSharedSecret(runnerId, deviceId);
+        if (!sharedSecret) {
+            throw new Error(`No shared secret found for device ${deviceId} on runner ${runnerId}`);
+        }
+        return CryptoService.safeEncrypt(command, sharedSecret);
+    }
+    /**
+     * Encrypt command for all registered devices
+     */
+    static async encryptForAllDevices(runnerId, command) {
+        const keyData = await this.getRunnerKeys(runnerId);
+        if (!keyData) {
+            throw new Error(`No keys found for runner ${runnerId}`);
+        }
+        const encryptedCommands = {};
+        for (const [deviceId, sharedSecret] of Object.entries(keyData.sharedSecrets)) {
+            try {
+                encryptedCommands[deviceId] = CryptoService.safeEncrypt(command, sharedSecret);
+            }
+            catch (error) {
+                console.warn(`Failed to encrypt command for device ${deviceId}: ${error}`);
+            }
+        }
+        if (Object.keys(encryptedCommands).length === 0) {
+            throw new Error(`No devices registered for runner ${runnerId}`);
+        }
+        return encryptedCommands;
+    }
+    /**
+     * Decrypt command from specific device
+     */
+    static async decryptFromDevice(runnerId, deviceId, encryptedCommand) {
+        const sharedSecret = await this.getSharedSecret(runnerId, deviceId);
+        if (!sharedSecret) {
+            throw new Error(`No shared secret found for device ${deviceId} on runner ${runnerId}`);
+        }
+        return CryptoService.safeDecrypt(encryptedCommand, sharedSecret);
+    }
+    /**
+     * Check if runner has any registered devices
+     */
+    static async hasRegisteredDevices(runnerId) {
+        const devices = await this.getRegisteredDevices(runnerId);
+        return devices.length > 0;
+    }
+    /**
+     * Clean up all keys for a runner
+     */
+    static async removeRunnerKeys(runnerId) {
+        const allKeys = await this.getAllStoredKeys();
+        delete allKeys[runnerId];
+        await StorageService.set(this.KEYS_STORAGE_KEY, allKeys);
+        console.log(`Cleaned up all keys for runner ${runnerId}`);
+    }
+    /**
+     * Get CLI's public key for a runner
+     */
+    static async getCliPublicKey(runnerId) {
+        const keyData = await this.getRunnerKeys(runnerId);
+        return keyData?.ecdhKeyPair.publicKey || null;
+    }
+    // Private helper methods
+    static async getRunnerKeys(runnerId) {
+        const allKeys = await this.getAllStoredKeys();
+        return allKeys[runnerId] || null;
+    }
+    static async storeRunnerKeys(runnerId, keys) {
+        const allKeys = await this.getAllStoredKeys();
+        allKeys[runnerId] = keys;
+        await StorageService.set(this.KEYS_STORAGE_KEY, allKeys);
+    }
+    static async getAllStoredKeys() {
+        return (await StorageService.get(this.KEYS_STORAGE_KEY)) ?? {};
+    }
+}
+//# sourceMappingURL=multi-device-key-manager.js.map

package/dist/services/multi-device-key-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"multi-device-key-manager.js","sourceRoot":"","sources":["../../src/services/multi-device-key-manager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,aAAa,EAAC,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAC,cAAc,EAAC,MAAM,qBAAqB,CAAC;AAUnD,MAAM,OAAO,4BAA4B;IAC7B,MAAM,CAAU,gBAAgB,GAAG,8BAA8B,CAAC;IAClE,MAAM,CAAU,eAAe,GAAG,EAAE,CAAC;IAE7C;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAAC,QAAgB;QAC9C,MAAM,WAAW,GAAG,aAAa,CAAC,mBAAmB,EAAE,CAAC;QAExD,MAAM,OAAO,GAAkB;YAC3B,WAAW;YACX,aAAa,EAAE,EAAE;YACjB,SAAS,EAAE,EAAE;YACb,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACxB,CAAC;QAEF,MAAM,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC9C,OAAO,WAAW,CAAC;IACvB,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,QAAgB,EAAE,SAAoB;QAC9D,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QACnD,IAAI,CAAC,OAAO,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,4BAA4B,QAAQ,EAAE,CAAC,CAAC;QAC5D,CAAC;QAED,wCAAwC;QACxC,MAAM,YAAY,GAAG,aAAa,CAAC,kBAAkB,CACjD,OAAO,CAAC,WAAW,CAAC,UAAU,EAC9B,SAAS,CAAC,SAAS,CACtB,CAAC;QAEF,MAAM,OAAO,GAAG,aAAa,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;QAE1D,sDAAsD;QACtD,IAAI,OAAO,KAAK,SAAS,CAAC,OAAO,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;QACpE,CAAC;QAED,0CAA0C;QAC1C,OAAO,CAAC,aAAa,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,YAAY,CAAC;QACzD,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,OAAO,CAAC;QAEhD,MAAM,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAE9C,OAAO,CAAC,GAAG,CAAC,YAAY,SAAS,CAAC,QAAQ,0BAA0B,QAAQ,EAAE,CAAC,CAAC;QAChF,OAAO,YAAY,CAAC;IACxB,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,QAAgB,EAAE,QAAgB;QACxD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QACnD,IAAI,CAAC,OAAO,EAAE,CAAC;YACX,OAAO,CAAC,sBAAsB;QAClC,CAAC;QAED,OAAO,OAAO,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QACvC,OAAO,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAEnC,MAAM,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC9C,OAAO,CAAC,GAAG,CAAC,UAAU,QAAQ,wBAAwB,QAAQ,EAAE,CAAC,CAAC;IACtE,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,QAAgB,EAAE,QAAgB;QAC3D,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QACnD,IAAI,CAAC,OAAO,EAAE,CAAC;YACX,OAAO,IAAI,CAAC;QAChB,CAAC;QAED,4BAA4B;QAC5B,MAAM,iBAAiB,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;QACnF,IAAI,iBAAiB,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;YAC3C,OAAO,CAAC,IAAI,CAAC,mBAAmB,QAAQ,uCAAuC,CAAC,CAAC;QACrF,CAAC;QAED,OAAO,OAAO,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC;IACnD,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAAC,QAAgB;QAC9C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QACnD,IAAI,CAAC,OAAO,EAAE,CAAC;YACX,OAAO,EAAE,CAAC;QACd,CAAC;QAED,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IAC9C,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,QAAgB,EAAE,QAAgB,EAAE,OAAe;QAC7E,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACpE,IAAI,CAAC,YAAY,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,qCAAqC,QAAQ,cAAc,QAAQ,EAAE,CAAC,CAAC;QAC3F,CAAC;QAED,OAAO,aAAa,CAAC,WAAW,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IAC5D,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAAC,QAAgB,EAAE,OAAe;QAC/D,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QACnD,IAAI,CAAC,OAAO,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,4BAA4B,QAAQ,EAAE,CAAC,CAAC;QAC5D,CAAC;QAED,MAAM,iBAAiB,GAA2B,EAAE,CAAC;QAErD,KAAK,MAAM,CAAC,QAAQ,EAAE,YAAY,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;YAC3E,IAAI,CAAC;gBACD,iBAAiB,CAAC,QAAQ,CAAC,GAAG,aAAa,CAAC,WAAW,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;YACnF,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACb,OAAO,CAAC,IAAI,CAAC,wCAAwC,QAAQ,KAAK,KAAK,EAAE,CAAC,CAAC;YAC/E,CAAC;QACL,CAAC;QAED,IAAI,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9C,MAAM,IAAI,KAAK,CAAC,oCAAoC,QAAQ,EAAE,CAAC,CAAC;QACpE,CAAC;QAED,OAAO,iBAAiB,CAAC;IAC7B,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,QAAgB,EAAE,QAAgB,EAAE,gBAAwB;QACvF,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACpE,IAAI,CAAC,YAAY,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,qCAAqC,QAAQ,cAAc,QAAQ,EAAE,CAAC,CAAC;QAC3F,CAAC;QAED,OAAO,aAAa,CAAC,WAAW,CAAC,gBAAgB,EAAE,YAAY,CAAC,CAAC;IACrE,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAAC,QAAgB;QAC9C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,QAAQ,CAAC,CAAC;QAC1D,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;IAC9B,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,QAAgB;QAC1C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC9C,OAAO,OAAO,CAAC,QAAQ,CAAC,CAAC;QACzB,MAAM,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAC;QACzD,OAAO,CAAC,GAAG,CAAC,kCAAkC,QAAQ,EAAE,CAAC,CAAC;IAC9D,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,QAAgB;QACzC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QACnD,OAAO,OAAO,EAAE,WAAW,CAAC,SAAS,IAAI,IAAI,CAAC;IAClD,CAAC;IAED,yBAAyB;IAEjB,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,QAAgB;QAC/C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC9C,OAAO,OAAO,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC;IACrC,CAAC;IAEO,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,QAAgB,EAAE,IAAmB;QACtE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC9C,OAAO,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC;QACzB,MAAM,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAC;IAC7D,CAAC;IAEO,MAAM,CAAC,KAAK,CAAC,gBAAgB;QACjC,OAAO,CAAC,MAAM,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,IAAI,EAAE,CAAC;IACnE,CAAC"}

package/dist/services/runner.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runner.d.ts","sourceRoot":"","sources":["../../src/services/runner.ts"],"names":[],"mappings":"AAGA,OAAO,EAAa,oBAAoB,EAAC,MAAM,UAAU,CAAC;AAC1D,OAAO,EAAC,KAAK,gBAAgB,EAAE,KAAK,MAAM,EAAa,MAAM,oBAAoB,CAAC;AAKlF,qBAAa,aAAa;IACtB,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAa;WAE1C,aAAa,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;WAkBlC,YAAY,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,MAAM,CAAC;WAmDrD,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;WAK7C,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;WAMpD,wBAAwB,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;WAQ5F,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;WAOrE,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC;IAavF,MAAM,CAAC,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,KAAK,IAAI,GAAG,MAAM,IAAI;IA6B9F,OAAO,CAAC,MAAM,CAAC,WAAW;IAiB1B,OAAO,CAAC,MAAM,CAAC,eAAe;CAWjC"}
+{"version":3,"file":"runner.d.ts","sourceRoot":"","sources":["../../src/services/runner.ts"],"names":[],"mappings":"AAIA,OAAO,EAAa,oBAAoB,EAAC,MAAM,UAAU,CAAC;AAC1D,OAAO,EAAC,KAAK,gBAAgB,EAAE,KAAK,MAAM,EAAa,MAAM,oBAAoB,CAAC;AAKlF,qBAAa,aAAa;IACtB,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAa;WAE1C,aAAa,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;WAkBlC,YAAY,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,MAAM,CAAC;WAmDrD,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;WAK7C,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;WAMpD,wBAAwB,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;WAQ5F,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;WAOrE,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC;IAavF,MAAM,CAAC,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,KAAK,IAAI,GAAG,MAAM,IAAI;IAiE9F,OAAO,CAAC,MAAM,CAAC,WAAW;IAiB1B,OAAO,CAAC,MAAM,CAAC,eAAe;CAWjC"}