@defai.digital/ax-cli 4.4.7 → 4.4.11

package/dist/utils/encryption.d.ts

@@ -1,86 +0,0 @@
-/**
- * API Key Encryption Utilities
- *
- * Provides secure encryption/decryption for API keys stored in configuration
- * files (REQ-SEC-003).
- *
- * Uses Node.js crypto module with:
- * - AES-256-GCM for encryption (authenticated encryption)
- * - PBKDF2 for key derivation from machine-specific identifier
- * - Random IV for each encryption
- * - Authentication tag verification
- *
- * SECURITY NOTE:
- * This encryption protects against casual browsing and accidental exposure.
- * It is NOT designed to protect against determined attackers with machine access.
- * See README.md "Security & API Key Handling" section for full threat model and best practices.
- *
- * @module encryption
- */
-/**
- * Encrypted value format
- * SECURITY FIX: Salt now stored separately to maintain full entropy
- */
-export interface EncryptedValue {
-    encrypted: string;
-    iv: string;
-    salt: string;
-    tag: string;
-    version: number;
-}
-/**
- * Encrypt a string value (typically an API key).
- *
- * @param plaintext - The value to encrypt
- * @returns Encrypted value object with iv, tag, and encrypted data
- */
-export declare function encrypt(plaintext: string): EncryptedValue;
-/**
- * Decrypt an encrypted value.
- *
- * @param encryptedValue - The encrypted value object
- * @returns Decrypted plaintext
- * @throws Error if decryption fails (wrong machine, corrupted data, etc.)
- */
-export declare function decrypt(encryptedValue: EncryptedValue): string;
-/**
- * Check if a value is encrypted (has the expected structure).
- * SECURITY FIX: Use constant-time comparison to prevent timing attacks
- *
- * @param value - Value to check
- * @returns True if value appears to be encrypted
- */
-export declare function isEncrypted(value: unknown): value is EncryptedValue;
-/**
- * Encrypt an object's sensitive fields.
- *
- * @param obj - Object containing sensitive fields
- * @param fieldsToEncrypt - Array of field names to encrypt
- * @returns New object with encrypted fields
- */
-export declare function encryptFields<T extends Record<string, any>>(obj: T, fieldsToEncrypt: string[]): T;
-/**
- * Decrypt an object's encrypted fields.
- *
- * @param obj - Object containing encrypted fields
- * @param fieldsToDecrypt - Array of field names to decrypt
- * @returns New object with decrypted fields
- */
-export declare function decryptFields<T extends Record<string, any>>(obj: T, fieldsToDecrypt: string[]): T;
-/**
- * Test if encryption is working (for diagnostics).
- *
- * @returns True if encryption/decryption round-trip works
- */
-export declare function testEncryption(): boolean;
-/**
- * Get encryption info for diagnostics.
- */
-export declare function getEncryptionInfo(): {
-    algorithm: string;
-    keyLength: number;
-    ivLength: number;
-    pbkdf2Iterations: number;
-    version: number;
-    machineId: string;
-};

package/dist/utils/encryption.js

@@ -1,236 +0,0 @@
-/**
- * API Key Encryption Utilities
- *
- * Provides secure encryption/decryption for API keys stored in configuration
- * files (REQ-SEC-003).
- *
- * Uses Node.js crypto module with:
- * - AES-256-GCM for encryption (authenticated encryption)
- * - PBKDF2 for key derivation from machine-specific identifier
- * - Random IV for each encryption
- * - Authentication tag verification
- *
- * SECURITY NOTE:
- * This encryption protects against casual browsing and accidental exposure.
- * It is NOT designed to protect against determined attackers with machine access.
- * See README.md "Security & API Key Handling" section for full threat model and best practices.
- *
- * @module encryption
- */
-import crypto from 'crypto';
-import os from 'os';
-import { extractErrorMessage } from './error-handler.js';
-/**
- * Encryption configuration
- */
-const ENCRYPTION_CONFIG = {
-    algorithm: 'aes-256-gcm',
-    keyLength: 32, // 256 bits
-    ivLength: 16, // 128 bits
-    saltLength: 32, // 256 bits
-    tagLength: 16, // 128 bits
-    pbkdf2Iterations: 600000, // OWASP 2024 recommendation (updated from 100000)
-    version: 1,
-};
-/**
- * Get a machine-specific identifier for key derivation.
- * Uses hostname + platform + arch to create a unique-per-machine string.
- *
- * Note: This is not cryptographically strong protection (attacker with file
- * access can derive the key), but it prevents casual browsing of config files
- * and provides defense in depth.
- */
-function getMachineIdentifier() {
-    const hostname = os.hostname();
-    const platform = os.platform();
-    const arch = os.arch();
-    // Combine machine-specific data
-    return `${hostname}-${platform}-${arch}`;
-}
-/**
- * Derive an encryption key from machine identifier and salt using PBKDF2.
- *
- * @param salt - Salt for key derivation
- * @returns Derived encryption key
- */
-function deriveKey(salt) {
-    const machineId = getMachineIdentifier();
-    return crypto.pbkdf2Sync(machineId, salt, ENCRYPTION_CONFIG.pbkdf2Iterations, ENCRYPTION_CONFIG.keyLength, 'sha256');
-}
-/**
- * Encrypt a string value (typically an API key).
- *
- * @param plaintext - The value to encrypt
- * @returns Encrypted value object with iv, tag, and encrypted data
- */
-export function encrypt(plaintext) {
-    // Generate random salt and IV
-    const salt = crypto.randomBytes(ENCRYPTION_CONFIG.saltLength);
-    const iv = crypto.randomBytes(ENCRYPTION_CONFIG.ivLength);
-    // Derive key from machine identifier
-    const key = deriveKey(salt);
-    // Create cipher
-    const cipher = crypto.createCipheriv(ENCRYPTION_CONFIG.algorithm, key, iv);
-    // Encrypt the plaintext
-    let encrypted = cipher.update(plaintext, 'utf8', 'base64');
-    encrypted += cipher.final('base64');
-    // Get authentication tag
-    const tag = cipher.getAuthTag();
-    // SECURITY FIX: Store salt separately to maintain full entropy
-    // Concatenating salt with IV reduces effective entropy and enables rainbow table attacks
-    return {
-        encrypted,
-        iv: iv.toString('base64'),
-        salt: salt.toString('base64'), // Store separately
-        tag: tag.toString('base64'),
-        version: ENCRYPTION_CONFIG.version,
-    };
-}
-/**
- * Decrypt an encrypted value.
- *
- * @param encryptedValue - The encrypted value object
- * @returns Decrypted plaintext
- * @throws Error if decryption fails (wrong machine, corrupted data, etc.)
- */
-export function decrypt(encryptedValue) {
-    try {
-        // Check version
-        if (encryptedValue.version !== ENCRYPTION_CONFIG.version) {
-            throw new Error(`Unsupported encryption version: ${encryptedValue.version}`);
-        }
-        // SECURITY FIX: Support both old format (salt+IV concatenated) and new format (separate fields)
-        // This maintains backward compatibility while improving security
-        let salt;
-        let iv;
-        if ('salt' in encryptedValue && encryptedValue.salt) {
-            // New format: salt stored separately (more secure)
-            salt = Buffer.from(encryptedValue.salt, 'base64');
-            iv = Buffer.from(encryptedValue.iv, 'base64');
-        }
-        else {
-            // Old format: salt and IV concatenated (legacy support)
-            const saltAndIv = Buffer.from(encryptedValue.iv, 'base64');
-            if (saltAndIv.length !== ENCRYPTION_CONFIG.saltLength + ENCRYPTION_CONFIG.ivLength) {
-                throw new Error('Invalid encrypted data: incorrect salt/IV length');
-            }
-            salt = saltAndIv.subarray(0, ENCRYPTION_CONFIG.saltLength);
-            iv = saltAndIv.subarray(ENCRYPTION_CONFIG.saltLength);
-        }
-        // Derive key from machine identifier
-        const key = deriveKey(salt);
-        // Create decipher
-        const decipher = crypto.createDecipheriv(ENCRYPTION_CONFIG.algorithm, key, iv);
-        // Set authentication tag
-        const tag = Buffer.from(encryptedValue.tag, 'base64');
-        decipher.setAuthTag(tag);
-        // Decrypt
-        let decrypted = decipher.update(encryptedValue.encrypted, 'base64', 'utf8');
-        decrypted += decipher.final('utf8');
-        return decrypted;
-    }
-    catch (error) {
-        // SECURITY FIX: Avoid information leakage in error messages
-        // Only log detailed errors when DEBUG env var is set to prevent leaking crypto details
-        if (process.env.DEBUG || process.env.AX_DEBUG) {
-            console.error('[DEBUG] Decryption error:', error);
-        }
-        // Generic error message without revealing encryption implementation details
-        throw new Error('Failed to decrypt API key. ' +
-            'Please check your configuration or re-enter your API key.');
-    }
-}
-/**
- * Check if a value is encrypted (has the expected structure).
- * SECURITY FIX: Use constant-time comparison to prevent timing attacks
- *
- * @param value - Value to check
- * @returns True if value appears to be encrypted
- */
-export function isEncrypted(value) {
-    if (typeof value !== 'object' || value === null) {
-        return false;
-    }
-    const obj = value;
-    // SECURITY FIX: Perform all checks without short-circuiting to prevent timing attacks
-    // Timing attacks could reveal which fields are encrypted by measuring execution time
-    const hasEncrypted = typeof obj.encrypted === 'string';
-    const hasIv = typeof obj.iv === 'string';
-    const hasTag = typeof obj.tag === 'string';
-    const hasVersion = typeof obj.version === 'number';
-    // Use bitwise AND instead of logical AND to prevent short-circuit evaluation
-    // This ensures constant-time execution regardless of which fields are present
-    // Convert booleans to numbers (0 or 1) for bitwise operations
-    return !!((hasEncrypted ? 1 : 0) & (hasIv ? 1 : 0) & (hasTag ? 1 : 0) & (hasVersion ? 1 : 0));
-}
-/**
- * Encrypt an object's sensitive fields.
- *
- * @param obj - Object containing sensitive fields
- * @param fieldsToEncrypt - Array of field names to encrypt
- * @returns New object with encrypted fields
- */
-export function encryptFields(obj, fieldsToEncrypt) {
-    const result = { ...obj };
-    for (const field of fieldsToEncrypt) {
-        if (field in result && typeof result[field] === 'string') {
-            // Don't re-encrypt already encrypted values
-            if (!isEncrypted(result[field])) {
-                result[field] = encrypt(result[field]);
-            }
-        }
-    }
-    return result;
-}
-/**
- * Decrypt an object's encrypted fields.
- *
- * @param obj - Object containing encrypted fields
- * @param fieldsToDecrypt - Array of field names to decrypt
- * @returns New object with decrypted fields
- */
-export function decryptFields(obj, fieldsToDecrypt) {
-    const result = { ...obj };
-    for (const field of fieldsToDecrypt) {
-        if (field in result && isEncrypted(result[field])) {
-            try {
-                result[field] = decrypt(result[field]);
-            }
-            catch (error) {
-                // If decryption fails, leave the field as-is and let caller handle it
-                console.error(`Failed to decrypt field "${field}":`, extractErrorMessage(error));
-            }
-        }
-    }
-    return result;
-}
-/**
- * Test if encryption is working (for diagnostics).
- *
- * @returns True if encryption/decryption round-trip works
- */
-export function testEncryption() {
-    try {
-        const testValue = 'test-api-key-12345';
-        const encrypted = encrypt(testValue);
-        const decrypted = decrypt(encrypted);
-        return decrypted === testValue;
-    }
-    catch {
-        return false;
-    }
-}
-/**
- * Get encryption info for diagnostics.
- */
-export function getEncryptionInfo() {
-    return {
-        algorithm: ENCRYPTION_CONFIG.algorithm,
-        keyLength: ENCRYPTION_CONFIG.keyLength,
-        ivLength: ENCRYPTION_CONFIG.ivLength,
-        pbkdf2Iterations: ENCRYPTION_CONFIG.pbkdf2Iterations,
-        version: ENCRYPTION_CONFIG.version,
-        machineId: getMachineIdentifier(),
-    };
-}
-//# sourceMappingURL=encryption.js.map

package/dist/utils/encryption.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"encryption.js","sourceRoot":"","sources":["../../src/utils/encryption.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,MAAM,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAczD;;GAEG;AACH,MAAM,iBAAiB,GAAG;IACxB,SAAS,EAAE,aAAsB;IACjC,SAAS,EAAE,EAAE,EAAE,WAAW;IAC1B,QAAQ,EAAE,EAAE,EAAE,WAAW;IACzB,UAAU,EAAE,EAAE,EAAE,WAAW;IAC3B,SAAS,EAAE,EAAE,EAAE,WAAW;IAC1B,gBAAgB,EAAE,MAAM,EAAE,kDAAkD;IAC5E,OAAO,EAAE,CAAC;CACX,CAAC;AAEF;;;;;;;GAOG;AACH,SAAS,oBAAoB;IAC3B,MAAM,QAAQ,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC;IAC/B,MAAM,QAAQ,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC;IAC/B,MAAM,IAAI,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC;IAEvB,gCAAgC;IAChC,OAAO,GAAG,QAAQ,IAAI,QAAQ,IAAI,IAAI,EAAE,CAAC;AAC3C,CAAC;AAED;;;;;GAKG;AACH,SAAS,SAAS,CAAC,IAAY;IAC7B,MAAM,SAAS,GAAG,oBAAoB,EAAE,CAAC;IAEzC,OAAO,MAAM,CAAC,UAAU,CACtB,SAAS,EACT,IAAI,EACJ,iBAAiB,CAAC,gBAAgB,EAClC,iBAAiB,CAAC,SAAS,EAC3B,QAAQ,CACT,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,OAAO,CAAC,SAAiB;IACvC,8BAA8B;IAC9B,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC;IAC9D,MAAM,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAE1D,qCAAqC;IACrC,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAE5B,gBAAgB;IAChB,MAAM,MAAM,GAAG,MAAM,CAAC,cAAc,CAClC,iBAAiB,CAAC,SAAS,EAC3B,GAAG,EACH,EAAE,CACH,CAAC;IAEF,wBAAwB;IACxB,IAAI,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC3D,SAAS,IAAI,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAEpC,yBAAyB;IACzB,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;IAEhC,+DAA+D;IAC/D,yFAAyF;IACzF,OAAO;QACL,SAAS;QACT,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC;QACzB,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,mBAAmB;QAClD,GAAG,EAAE,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC3B,OAAO,EAAE,iBAAiB,CAAC,OAAO;KACnC,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,OAAO,CAAC,cAA8B;IACpD,IAAI,CAAC;QACH,gBAAgB;QAChB,IAAI,cAAc,CAAC,OAAO,KAAK,iBAAiB,CAAC,OAAO,EAAE,CAAC;YACzD,MAAM,IAAI,KAAK,CACb,mCAAmC,cAAc,CAAC,OAAO,EAAE,CAC5D,CAAC;QACJ,CAAC;QAED,gGAAgG;QAChG,iEAAiE;QACjE,IAAI,IAAY,CAAC;QACjB,IAAI,EAAU,CAAC;QAEf,IAAI,MAAM,IAAI,cAAc,IAAI,cAAc,CAAC,IAAI,EAAE,CAAC;YACpD,mDAAmD;YACnD,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YAClD,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QAChD,CAAC;aAAM,CAAC;YACN,wDAAwD;YACxD,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;YAC3D,IAAI,SAAS,CAAC,MAAM,KAAK,iBAAiB,CAAC,UAAU,GAAG,iBAAiB,CAAC,QAAQ,EAAE,CAAC;gBACnF,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;YACtE,CAAC;YACD,IAAI,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC,EAAE,iBAAiB,CAAC,UAAU,CAAC,CAAC;YAC3D,EAAE,GAAG,SAAS,CAAC,QAAQ,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC;QACxD,CAAC;QAED,qCAAqC;QACrC,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QAE5B,kBAAkB;QAClB,MAAM,QAAQ,GAAG,MAAM,CAAC,gBAAgB,CACtC,iBAAiB,CAAC,SAAS,EAC3B,GAAG,EACH,EAAE,CACH,CAAC;QAEF,yBAAyB;QACzB,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QACtD,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QAEzB,UAAU;QACV,IAAI,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,cAAc,CAAC,SAAS,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC5E,SAAS,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAEpC,OAAO,SAAS,CAAC;IACnB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,4DAA4D;QAC5D,uFAAuF;QACvF,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;YAC9C,OAAO,CAAC,KAAK,CAAC,2BAA2B,EAAE,KAAK,CAAC,CAAC;QACpD,CAAC;QAED,4EAA4E;QAC5E,MAAM,IAAI,KAAK,CACb,6BAA6B;YAC7B,2DAA2D,CAC5D,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,WAAW,CAAC,KAAc;IACxC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAChD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,GAAG,GAAG,KAAY,CAAC;IAEzB,sFAAsF;IACtF,qFAAqF;IACrF,MAAM,YAAY,GAAG,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,CAAC;IACvD,MAAM,KAAK,GAAG,OAAO,GAAG,CAAC,EAAE,KAAK,QAAQ,CAAC;IACzC,MAAM,MAAM,GAAG,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ,CAAC;IAC3C,MAAM,UAAU,GAAG,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,CAAC;IAEnD,6EAA6E;IAC7E,8EAA8E;IAC9E,8DAA8D;IAC9D,OAAO,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAChG,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAC3B,GAAM,EACN,eAAyB;IAEzB,MAAM,MAAM,GAAwB,EAAE,GAAG,GAAG,EAAE,CAAC;IAE/C,KAAK,MAAM,KAAK,IAAI,eAAe,EAAE,CAAC;QACpC,IAAI,KAAK,IAAI,MAAM,IAAI,OAAO,MAAM,CAAC,KAAK,CAAC,KAAK,QAAQ,EAAE,CAAC;YACzD,4CAA4C;YAC5C,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;gBAChC,MAAM,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YACzC,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,MAAW,CAAC;AACrB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAC3B,GAAM,EACN,eAAyB;IAEzB,MAAM,MAAM,GAAwB,EAAE,GAAG,GAAG,EAAE,CAAC;IAE/C,KAAK,MAAM,KAAK,IAAI,eAAe,EAAE,CAAC;QACpC,IAAI,KAAK,IAAI,MAAM,IAAI,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YAClD,IAAI,CAAC;gBACH,MAAM,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YACzC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,sEAAsE;gBACtE,OAAO,CAAC,KAAK,CAAC,4BAA4B,KAAK,IAAI,EAAE,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC;YACnF,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,MAAW,CAAC;AACrB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc;IAC5B,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,oBAAoB,CAAC;QACvC,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;QACrC,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;QACrC,OAAO,SAAS,KAAK,SAAS,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB;IAQ/B,OAAO;QACL,SAAS,EAAE,iBAAiB,CAAC,SAAS;QACtC,SAAS,EAAE,iBAAiB,CAAC,SAAS;QACtC,QAAQ,EAAE,iBAAiB,CAAC,QAAQ;QACpC,gBAAgB,EAAE,iBAAiB,CAAC,gBAAgB;QACpD,OAAO,EAAE,iBAAiB,CAAC,OAAO;QAClC,SAAS,EAAE,oBAAoB,EAAE;KAClC,CAAC;AACJ,CAAC"}

package/dist/utils/enhanced-error-messages.d.ts

@@ -1,33 +0,0 @@
-/**
- * Enhanced Error Messages
- * Provides user-friendly, actionable error messages with clear recovery paths
- * Phase 5: Error Message Improvements
- */
-import { ErrorCategory } from './error-handler.js';
-/**
- * Format an error message with user-friendly structure
- */
-export declare function formatEnhancedError(category: ErrorCategory, operation: string, errorMessage: string, options?: {
-    filePath?: string;
-    statusCode?: number;
-    errorCode?: string;
-    details?: string;
-}): string;
-/**
- * Create a user-friendly error for common scenarios
- */
-export declare function createFriendlyError(category: ErrorCategory, operation: string, error: unknown, options?: {
-    filePath?: string;
-    details?: string;
-}): string;
-/**
- * Quick helper functions for common error scenarios
- */
-export declare const FriendlyErrors: {
-    fileNotFound: (filePath: string) => string;
-    permissionDenied: (filePath: string) => string;
-    apiKeyInvalid: () => string;
-    rateLimitExceeded: () => string;
-    mcpConnectionFailed: (serverName: string) => string;
-    commandNotFound: (command: string) => string;
-};