@elisym/sdk 0.13.0 → 0.15.0

package/dist/node.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/primitives/encryption.ts","../src/agent-store/writer.ts","../src/config/global-schema.ts","../src/config/global.ts"],"names":["randomBytes","scryptSync","createCipheriv","Buffer","createDecipheriv","path","mkdir","dirname","writeFile","rename","z","readFile","YAML"],"mappings":";;;;;;;;;;;;;;AAcA,IAAM,MAAA,GAAS,eAAA;AACf,IAAM,WAAA,GAAc,EAAA;AACpB,IAAM,SAAA,GAAY,EAAA;AAClB,IAAM,UAAA,GAAa,EAAA;AACnB,IAAM,UAAA,GAAa,EAAA;AAEnB,IAAM,WAAW,CAAA,IAAK,EAAA;AACtB,IAAM,QAAA,GAAW,CAAA;AACjB,IAAM,QAAA,GAAW,CAAA;AACjB,IAAM,aAAA,GAAgB,GAAA,GAAM,QAAA,GAAW,QAAA,GAAW,CAAA;AAG3C,SAAS,YAAY,KAAA,EAAwB;AAClD,EAAA,OAAO,KAAA,CAAM,WAAW,MAAM,CAAA;AAChC;AAGO,SAAS,aAAA,CAAc,WAAmB,UAAA,EAA4B;AAC3E,EAAA,IAAI,CAAC,UAAA,EAAY;AACf,IAAA,MAAM,IAAI,MAAM,+BAA+B,CAAA;AAAA,EACjD;AAEA,EAAA,MAAM,IAAA,GAAOA,mBAAY,WAAW,CAAA;AACpC,EAAA,MAAM,GAAA,GAAMC,iBAAA,CAAW,UAAA,EAAY,IAAA,EAAM,UAAA,EAAY;AAAA,IACnD,CAAA,EAAG,QAAA;AAAA,IACH,CAAA,EAAG,QAAA;AAAA,IACH,CAAA,EAAG,QAAA;AAAA,IACH,MAAA,EAAQ;AAAA,GACT,CAAA;AACD,EAAA,MAAM,EAAA,GAAKD,mBAAY,SAAS,CAAA;AAEhC,EAAA,MAAM,MAAA,GAASE,qBAAA,CAAe,aAAA,EAAe,GAAA,EAAK,EAAE,CAAA;AACpD,EAAA,MAAM,SAAA,GAAYC,aAAA,CAAO,MAAA,CAAO,CAAC,MAAA,CAAO,MAAA,CAAO,SAAA,EAAW,MAAM,CAAA,EAAG,MAAA,CAAO,KAAA,EAAO,CAAC,CAAA;AAClF,EAAA,MAAM,GAAA,GAAM,OAAO,UAAA,EAAW;AAE9B,EAAA,MAAM,OAAA,GAAUA,cAAO,MAAA,CAAO,CAAC,MAAM,EAAA,EAAI,SAAA,EAAW,GAAG,CAAC,CAAA;AACxD,EAAA,OAAO,MAAA,GAAS,OAAA,CAAQ,QAAA,CAAS,QAAQ,CAAA;AAC3C;AAGO,SAAS,aAAA,CAAc,WAAmB,UAAA,EAA4B;AAC3E,EAAA,IAAI,CAAC,WAAA,CAAY,SAAS,CAAA,EAAG;AAC3B,IAAA,MAAM,IAAI,MAAM,wDAAwD,CAAA;AAAA,EAC1E;AACA,EAAA,IAAI,CAAC,UAAA,EAAY;AACf,IAAA,MAAM,IAAI,MAAM,+BAA+B,CAAA;AAAA,EACjD;AAEA,EAAA,MAAM,OAAA,GAAUA,cAAO,IAAA,CAAK,SAAA,CAAU,MAAM,MAAA,CAAO,MAAM,GAAG,QAAQ,CAAA;AACpE,EAAA,IAAI,OAAA,CAAQ,MAAA,GAAS,WAAA,GAAc,SAAA,GAAY,UAAA,EAAY;AACzD,IAAA,MAAM,IAAI,MAAM,iCAAiC,CAAA;AAAA,EACnD;AAEA,EAAA,MAAM,IAAA,GAAO,OAAA,CAAQ,QAAA,CAAS,CAAA,EAAG,WAAW,CAAA;AAC5C,EAAA,MAAM,EAAA,GAAK,OAAA,CAAQ,QAAA,CAAS,WAAA,EAAa,cAAc,SAAS,CAAA;AAChE,EAAA,MAAM,GAAA,GAAM,OAAA,CAAQ,QAAA,CAAS,OAAA,CAAQ,SAAS,UAAU,CAAA;AACxD,EAAA,MAAM,aAAa,OAAA,CAAQ,QAAA,CAAS,cAAc,SAAA,EAAW,OAAA,CAAQ,SAAS,UAAU,CAAA;AAExF,EAAA,MAAM,GAAA,GAAMF,iBAAA,CAAW,UAAA,EAAY,IAAA,EAAM,UAAA,EAAY;AAAA,IACnD,CAAA,EAAG,QAAA;AAAA,IACH,CAAA,EAAG,QAAA;AAAA,IACH,CAAA,EAAG,QAAA;AAAA,IACH,MAAA,EAAQ;AAAA,GACT,CAAA;AAED,EAAA,MAAM,QAAA,GAAWG,uBAAA,CAAiB,aAAA,EAAe,GAAA,EAAK,EAAE,CAAA;AACxD,EAAA,QAAA,CAAS,WAAW,GAAG,CAAA;AAEvB,EAAA,IAAI;AACF,IAAA,MAAM,SAAA,GAAYD,aAAA,CAAO,MAAA,CAAO,CAAC,QAAA,CAAS,MAAA,CAAO,UAAU,CAAA,EAAG,QAAA,CAAS,KAAA,EAAO,CAAC,CAAA;AAC/E,IAAA,OAAO,SAAA,CAAU,SAAS,MAAM,CAAA;AAAA,EAClC,CAAA,CAAA,MAAQ;AACN,IAAA,MAAM,IAAI,MAAM,wDAAwD,CAAA;AAAA,EAC1E;AACF;ACwCA,eAAsB,eAAA,CACpBE,MAAA,EACA,IAAA,EACA,IAAA,EACe;AACf,EAAA,MAAMC,eAAMC,YAAA,CAAQF,MAAI,GAAG,EAAE,SAAA,EAAW,MAAM,CAAA;AAC9C,EAAA,MAAM,OAAA,GAAU,GAAGA,MAAI,CAAA,KAAA,EAAQL,mBAAY,CAAC,CAAA,CAAE,QAAA,CAAS,KAAK,CAAC,CAAA,CAAA;AAC7D,EAAA,MAAMQ,kBAAA,CAAU,OAAA,EAAS,IAAA,EAAM,EAAE,MAAM,CAAA;AACvC,EAAA,IAAI;AACF,IAAA,MAAMC,eAAA,CAAO,SAASJ,MAAI,CAAA;AAAA,EAC5B,SAAS,CAAA,EAAG;AAEV,IAAA,IAAI;AACF,MAAA,MAAM,EAAE,MAAA,EAAO,GAAI,MAAM,OAAO,aAAkB,CAAA;AAClD,MAAA,MAAM,OAAO,OAAO,CAAA;AAAA,IACtB,CAAA,CAAA,MAAQ;AAAA,IAER;AACA,IAAA,MAAM,CAAA;AAAA,EACR;AACF;AC1IO,IAAM,4BAAA,GAA+BK,MACzC,MAAA,CAAO;AAAA,EACN,KAAA,EAAOA,KAAA,CAAE,IAAA,CAAK,CAAC,QAAQ,CAAC,CAAA;AAAA,EACxB,KAAA,EAAOA,KAAA,CACJ,MAAA,EAAO,CACP,GAAA,CAAI,CAAC,CAAA,CACL,GAAA,CAAI,EAAE,CAAA,CACN,KAAA,CAAM,aAAA,EAAe,sCAAsC,CAAA;AAAA,EAC9D,IAAA,EAAMA,KAAA,CAAE,MAAA,EAAO,CAAE,GAAA,CAAI,CAAC,CAAA,CAAE,GAAA,CAAI,EAAE,CAAA,CAAE,QAAA,EAAS;AAAA,EACzC,QAAQA,KAAA,CAAE,MAAA,EAAO,CAAE,QAAA,GAAW,MAAA;AAChC,CAAC,EACA,MAAA,EAAO;AAEH,IAAM,kBAAA,GAAqBA,MAC/B,MAAA,CAAO;AAAA,EACN,oBAAA,EAAsBA,MAAE,KAAA,CAAM,4BAA4B,EAAE,GAAA,CAAI,EAAE,EAAE,QAAA;AACtE,CAAC,EACA,MAAA,EAAO;;;ACPV,SAAS,SAAS,CAAA,EAAqB;AACrC,EAAA,OACE,OAAO,MAAM,QAAA,IAAY,CAAA,KAAM,QAAQ,MAAA,IAAU,CAAA,IAAM,EAAuB,IAAA,KAAS,QAAA;AAE3F;AAOA,eAAsB,iBAAiB,IAAA,EAAqC;AAC1E,EAAA,IAAI,GAAA;AACJ,EAAA,IAAI;AACF,IAAA,GAAA,GAAM,MAAMC,iBAAA,CAAS,IAAA,EAAM,OAAO,CAAA;AAAA,EACpC,SAAS,CAAA,EAAG;AACV,IAAA,IAAI,QAAA,CAAS,CAAC,CAAA,EAAG;AACf,MAAA,OAAO,EAAC;AAAA,IACV;AACA,IAAA,MAAM,CAAA;AAAA,EACR;AACA,EAAA,IAAI,GAAA,CAAI,IAAA,EAAK,KAAM,EAAA,EAAI;AACrB,IAAA,OAAO,EAAC;AAAA,EACV;AACA,EAAA,MAAM,MAAA,GAAkBC,sBAAAA,CAAK,KAAA,CAAM,GAAG,CAAA;AACtC,EAAA,OAAO,kBAAA,CAAmB,KAAA,CAAM,MAAA,IAAU,EAAE,CAAA;AAC9C;AAGA,eAAsB,iBAAA,CAAkB,MAAc,MAAA,EAAqC;AACzF,EAAA,MAAM,SAAA,GAAY,kBAAA,CAAmB,KAAA,CAAM,MAAM,CAAA;AACjD,EAAA,MAAM,IAAA,GAAOA,sBAAAA,CAAK,SAAA,CAAU,SAAS,CAAA;AACrC,EAAA,MAAM,eAAA,CAAgB,IAAA,EAAM,IAAA,EAAM,GAAK,CAAA;AACzC","file":"node.cjs","sourcesContent":["/**\n * Secret encryption/decryption for agent config files.\n * Uses scrypt (KDF) + AES-256-GCM (cipher).\n * Format: \"encrypted:v1:\" + base64(salt[16] + iv[12] + ciphertext + tag[16])\n *\n * scrypt params: N=2^17, r=8, p=1 (~128 MB RAM per derivation).\n *\n * Node.js/Bun only - not available in browsers. Reachable only via the\n * '@elisym/sdk/node' subpath, which browser bundlers will not resolve.\n */\n\nimport { Buffer } from 'node:buffer';\nimport { createCipheriv, createDecipheriv, randomBytes, scryptSync } from 'node:crypto';\n\nconst PREFIX = 'encrypted:v1:';\nconst SALT_LENGTH = 16;\nconst IV_LENGTH = 12;\nconst TAG_LENGTH = 16;\nconst KEY_LENGTH = 32; // AES-256\n// v1: N=2^17 (OWASP minimum). v2 will use N=2^20 with format migration.\nconst SCRYPT_N = 2 ** 17;\nconst SCRYPT_R = 8;\nconst SCRYPT_P = 1;\nconst SCRYPT_MAXMEM = 128 * SCRYPT_N * SCRYPT_R * 2; // 2x the minimum required memory\n\n/** Check if a value is encrypted (has the encrypted:v1: prefix). */\nexport function isEncrypted(value: string): boolean {\n  return value.startsWith(PREFIX);\n}\n\n/** Encrypt a plaintext secret with a passphrase. Returns \"encrypted:v1:base64...\". Node.js/Bun only. */\nexport function encryptSecret(plaintext: string, passphrase: string): string {\n  if (!passphrase) {\n    throw new Error('Passphrase must not be empty.');\n  }\n\n  const salt = randomBytes(SALT_LENGTH);\n  const key = scryptSync(passphrase, salt, KEY_LENGTH, {\n    N: SCRYPT_N,\n    r: SCRYPT_R,\n    p: SCRYPT_P,\n    maxmem: SCRYPT_MAXMEM,\n  });\n  const iv = randomBytes(IV_LENGTH);\n\n  const cipher = createCipheriv('aes-256-gcm', key, iv);\n  const encrypted = Buffer.concat([cipher.update(plaintext, 'utf8'), cipher.final()]);\n  const tag = cipher.getAuthTag();\n\n  const payload = Buffer.concat([salt, iv, encrypted, tag]);\n  return PREFIX + payload.toString('base64');\n}\n\n/** Decrypt an encrypted secret with a passphrase. Throws on wrong passphrase or corrupted data. Node.js/Bun only. */\nexport function decryptSecret(encrypted: string, passphrase: string): string {\n  if (!isEncrypted(encrypted)) {\n    throw new Error('Value is not encrypted (missing encrypted:v1: prefix).');\n  }\n  if (!passphrase) {\n    throw new Error('Passphrase must not be empty.');\n  }\n\n  const payload = Buffer.from(encrypted.slice(PREFIX.length), 'base64');\n  if (payload.length < SALT_LENGTH + IV_LENGTH + TAG_LENGTH) {\n    throw new Error('Encrypted payload is too short.');\n  }\n\n  const salt = payload.subarray(0, SALT_LENGTH);\n  const iv = payload.subarray(SALT_LENGTH, SALT_LENGTH + IV_LENGTH);\n  const tag = payload.subarray(payload.length - TAG_LENGTH);\n  const ciphertext = payload.subarray(SALT_LENGTH + IV_LENGTH, payload.length - TAG_LENGTH);\n\n  const key = scryptSync(passphrase, salt, KEY_LENGTH, {\n    N: SCRYPT_N,\n    r: SCRYPT_R,\n    p: SCRYPT_P,\n    maxmem: SCRYPT_MAXMEM,\n  });\n\n  const decipher = createDecipheriv('aes-256-gcm', key, iv);\n  decipher.setAuthTag(tag);\n\n  try {\n    const decrypted = Buffer.concat([decipher.update(ciphertext), decipher.final()]);\n    return decrypted.toString('utf8');\n  } catch {\n    throw new Error('Decryption failed. Wrong passphrase or corrupted data.');\n  }\n}\n","/**\n * Write agent files: elisym.yaml, .secrets.json, .gitignore, and create agent dirs.\n */\n\nimport { randomBytes } from 'node:crypto';\nimport { mkdir, rename, writeFile } from 'node:fs/promises';\nimport { dirname, join } from 'node:path';\nimport YAML from 'yaml';\nimport { encryptSecret, isEncrypted } from '../primitives/encryption';\nimport { agentPaths, type AgentPaths } from './paths';\nimport { elisymRootFor, type AgentSource } from './resolver';\nimport { ElisymYamlSchema, SecretsSchema, type ElisymYaml, type Secrets } from './schema';\n\nconst GITIGNORE_CONTENT = [\n  '# elisym private state - do not commit.',\n  '.secrets.json',\n  '.media-cache.json',\n  '.jobs.json',\n  '.jobs.json.corrupt.*',\n  '.customer-history.json',\n  '.contacts.json',\n  '',\n].join('\\n');\n\nexport interface CreateAgentDirOptions {\n  target: AgentSource;\n  name: string;\n  cwd: string;\n  /**\n   * For `target: 'project'`: if no .elisym/ dir exists above cwd,\n   * where should we create one? Defaults to cwd.\n   */\n  projectRoot?: string;\n}\n\nexport interface CreatedAgentDir {\n  dir: string;\n  paths: AgentPaths;\n  source: AgentSource;\n  createdNewElisymRoot: boolean;\n}\n\n/**\n * Create (or reuse) the directory layout for a new agent. Idempotent: if the\n * agent directory already exists, returns its paths without overwriting.\n * Writes `.gitignore` in project-local .elisym/ on first creation.\n */\nexport async function createAgentDir(options: CreateAgentDirOptions): Promise<CreatedAgentDir> {\n  const { target, name, cwd, projectRoot } = options;\n\n  const existingRoot = elisymRootFor(target, cwd);\n  let elisymRoot: string;\n  let createdNewElisymRoot = false;\n\n  if (existingRoot) {\n    elisymRoot = existingRoot;\n  } else if (target === 'project') {\n    elisymRoot = join(projectRoot ?? cwd, '.elisym');\n    createdNewElisymRoot = true;\n  } else {\n    throw new Error('homeElisymDir should always exist conceptually - this is unreachable');\n  }\n\n  const agentDir = join(elisymRoot, name);\n  const mode = target === 'home' ? 0o700 : 0o755;\n  await mkdir(agentDir, { recursive: true, mode });\n  await mkdir(join(agentDir, 'skills'), { recursive: true, mode });\n\n  if (target === 'project') {\n    const gitignorePath = join(elisymRoot, '.gitignore');\n    await writeFileIfMissing(gitignorePath, GITIGNORE_CONTENT, 0o644);\n  }\n\n  return {\n    dir: agentDir,\n    paths: agentPaths(agentDir),\n    source: target,\n    createdNewElisymRoot,\n  };\n}\n\n/** Write elisym.yaml atomically. Validates via Zod before writing. */\nexport async function writeYaml(agentDir: string, yaml: ElisymYaml): Promise<void> {\n  const validated = ElisymYamlSchema.parse(yaml);\n  const body = YAML.stringify(validated);\n  const target = agentPaths(agentDir).yaml;\n  await writeFileAtomic(target, body, 0o644);\n}\n\n/**\n * Write .secrets.json atomically. If `passphrase` is given, encrypts all\n * plaintext secret fields (already-encrypted values are left as-is).\n */\nexport async function writeSecrets(\n  agentDir: string,\n  secrets: Secrets,\n  passphrase?: string,\n): Promise<void> {\n  const validated = SecretsSchema.parse(secrets);\n  const finalSecrets: Secrets = {\n    ...validated,\n    nostr_secret_key: maybeEncrypt(validated.nostr_secret_key, passphrase),\n    solana_secret_key: validated.solana_secret_key\n      ? maybeEncrypt(validated.solana_secret_key, passphrase)\n      : undefined,\n    anthropic_api_key: validated.anthropic_api_key\n      ? maybeEncrypt(validated.anthropic_api_key, passphrase)\n      : undefined,\n    openai_api_key: validated.openai_api_key\n      ? maybeEncrypt(validated.openai_api_key, passphrase)\n      : undefined,\n  };\n  const body = JSON.stringify(finalSecrets, null, 2) + '\\n';\n  const target = agentPaths(agentDir).secrets;\n  await writeFileAtomic(target, body, 0o600);\n}\n\nfunction maybeEncrypt(value: string, passphrase: string | undefined): string {\n  if (!passphrase) {\n    return value;\n  }\n  if (isEncrypted(value)) {\n    return value;\n  }\n  return encryptSecret(value, passphrase);\n}\n\n/** Atomic write: temp file + rename. Preserves mode. */\nexport async function writeFileAtomic(\n  path: string,\n  data: string | Buffer,\n  mode: number,\n): Promise<void> {\n  await mkdir(dirname(path), { recursive: true });\n  const tmpPath = `${path}.tmp.${randomBytes(6).toString('hex')}`;\n  await writeFile(tmpPath, data, { mode });\n  try {\n    await rename(tmpPath, path);\n  } catch (e) {\n    // Best-effort cleanup of temp file on rename failure.\n    try {\n      const { unlink } = await import('node:fs/promises');\n      await unlink(tmpPath);\n    } catch {\n      /* ignore */\n    }\n    throw e;\n  }\n}\n\nasync function writeFileIfMissing(path: string, data: string, mode: number): Promise<void> {\n  try {\n    await writeFile(path, data, { mode, flag: 'wx' });\n  } catch (e: unknown) {\n    // wx fails with EEXIST if file exists - that's fine.\n    if (!isEexist(e)) {\n      throw e;\n    }\n  }\n}\n\nfunction isEexist(e: unknown): boolean {\n  return (\n    typeof e === 'object' && e !== null && 'code' in e && (e as { code: string }).code === 'EEXIST'\n  );\n}\n","/**\n * Zod schemas and types for `~/.elisym/config.yaml`.\n *\n * Split from `./global` so the schemas can be re-exported from the\n * browser-safe `@elisym/sdk` entry point without dragging in `node:fs/promises`\n * (which the loader/writer in `./global` needs).\n */\n\nimport { z } from 'zod';\n\nexport const SessionSpendLimitEntrySchema = z\n  .object({\n    chain: z.enum(['solana']),\n    token: z\n      .string()\n      .min(1)\n      .max(16)\n      .regex(/^[a-z0-9]+$/, 'token must be lowercase alphanumeric'),\n    mint: z.string().min(1).max(64).optional(),\n    amount: z.number().positive().finite(),\n  })\n  .strict();\n\nexport const GlobalConfigSchema = z\n  .object({\n    session_spend_limits: z.array(SessionSpendLimitEntrySchema).max(16).optional(),\n  })\n  .strict();\n\nexport type SessionSpendLimitEntry = z.infer<typeof SessionSpendLimitEntrySchema>;\nexport type GlobalConfig = z.infer<typeof GlobalConfigSchema>;\n","/**\n * Global (not per-agent) config stored at `~/.elisym/config.yaml`.\n *\n * Node.js/Bun only - reads and writes the filesystem. Browser code must not\n * import this module; import the schemas from `./global-schema` instead, or\n * the loader/writer from `@elisym/sdk/node`.\n */\n\nimport { readFile } from 'node:fs/promises';\nimport YAML from 'yaml';\nimport { writeFileAtomic } from '../agent-store/writer';\nimport { GlobalConfigSchema, type GlobalConfig } from './global-schema';\n\nexport {\n  GlobalConfigSchema,\n  SessionSpendLimitEntrySchema,\n  type GlobalConfig,\n  type SessionSpendLimitEntry,\n} from './global-schema';\n\nfunction isEnoent(e: unknown): boolean {\n  return (\n    typeof e === 'object' && e !== null && 'code' in e && (e as { code: string }).code === 'ENOENT'\n  );\n}\n\n/**\n * Read and validate `~/.elisym/config.yaml`. Returns `{}` if missing. Throws\n * on malformed YAML or schema violations — the MCP server treats these as fatal\n * at startup rather than silently ignoring bad overrides.\n */\nexport async function loadGlobalConfig(path: string): Promise<GlobalConfig> {\n  let raw: string;\n  try {\n    raw = await readFile(path, 'utf-8');\n  } catch (e) {\n    if (isEnoent(e)) {\n      return {};\n    }\n    throw e;\n  }\n  if (raw.trim() === '') {\n    return {};\n  }\n  const parsed: unknown = YAML.parse(raw);\n  return GlobalConfigSchema.parse(parsed ?? {});\n}\n\n/** Write the config YAML atomically. Validates via Zod before writing. */\nexport async function writeGlobalConfig(path: string, config: GlobalConfig): Promise<void> {\n  const validated = GlobalConfigSchema.parse(config);\n  const body = YAML.stringify(validated);\n  await writeFileAtomic(path, body, 0o644);\n}\n"]}
+{"version":3,"sources":["../src/primitives/encryption.ts","../src/agent-store/writer.ts","../src/config/global-schema.ts","../src/config/global.ts"],"names":["randomBytes","scryptSync","createCipheriv","Buffer","createDecipheriv","path","mkdir","dirname","writeFile","rename","z","readFile","YAML"],"mappings":";;;;;;;;;;;;;;AAcA,IAAM,MAAA,GAAS,eAAA;AACf,IAAM,WAAA,GAAc,EAAA;AACpB,IAAM,SAAA,GAAY,EAAA;AAClB,IAAM,UAAA,GAAa,EAAA;AACnB,IAAM,UAAA,GAAa,EAAA;AAEnB,IAAM,WAAW,CAAA,IAAK,EAAA;AACtB,IAAM,QAAA,GAAW,CAAA;AACjB,IAAM,QAAA,GAAW,CAAA;AACjB,IAAM,aAAA,GAAgB,GAAA,GAAM,QAAA,GAAW,QAAA,GAAW,CAAA;AAG3C,SAAS,YAAY,KAAA,EAAwB;AAClD,EAAA,OAAO,KAAA,CAAM,WAAW,MAAM,CAAA;AAChC;AAGO,SAAS,aAAA,CAAc,WAAmB,UAAA,EAA4B;AAC3E,EAAA,IAAI,CAAC,UAAA,EAAY;AACf,IAAA,MAAM,IAAI,MAAM,+BAA+B,CAAA;AAAA,EACjD;AAEA,EAAA,MAAM,IAAA,GAAOA,mBAAY,WAAW,CAAA;AACpC,EAAA,MAAM,GAAA,GAAMC,iBAAA,CAAW,UAAA,EAAY,IAAA,EAAM,UAAA,EAAY;AAAA,IACnD,CAAA,EAAG,QAAA;AAAA,IACH,CAAA,EAAG,QAAA;AAAA,IACH,CAAA,EAAG,QAAA;AAAA,IACH,MAAA,EAAQ;AAAA,GACT,CAAA;AACD,EAAA,MAAM,EAAA,GAAKD,mBAAY,SAAS,CAAA;AAEhC,EAAA,MAAM,MAAA,GAASE,qBAAA,CAAe,aAAA,EAAe,GAAA,EAAK,EAAE,CAAA;AACpD,EAAA,MAAM,SAAA,GAAYC,aAAA,CAAO,MAAA,CAAO,CAAC,MAAA,CAAO,MAAA,CAAO,SAAA,EAAW,MAAM,CAAA,EAAG,MAAA,CAAO,KAAA,EAAO,CAAC,CAAA;AAClF,EAAA,MAAM,GAAA,GAAM,OAAO,UAAA,EAAW;AAE9B,EAAA,MAAM,OAAA,GAAUA,cAAO,MAAA,CAAO,CAAC,MAAM,EAAA,EAAI,SAAA,EAAW,GAAG,CAAC,CAAA;AACxD,EAAA,OAAO,MAAA,GAAS,OAAA,CAAQ,QAAA,CAAS,QAAQ,CAAA;AAC3C;AAGO,SAAS,aAAA,CAAc,WAAmB,UAAA,EAA4B;AAC3E,EAAA,IAAI,CAAC,WAAA,CAAY,SAAS,CAAA,EAAG;AAC3B,IAAA,MAAM,IAAI,MAAM,wDAAwD,CAAA;AAAA,EAC1E;AACA,EAAA,IAAI,CAAC,UAAA,EAAY;AACf,IAAA,MAAM,IAAI,MAAM,+BAA+B,CAAA;AAAA,EACjD;AAEA,EAAA,MAAM,OAAA,GAAUA,cAAO,IAAA,CAAK,SAAA,CAAU,MAAM,MAAA,CAAO,MAAM,GAAG,QAAQ,CAAA;AACpE,EAAA,IAAI,OAAA,CAAQ,MAAA,GAAS,WAAA,GAAc,SAAA,GAAY,UAAA,EAAY;AACzD,IAAA,MAAM,IAAI,MAAM,iCAAiC,CAAA;AAAA,EACnD;AAEA,EAAA,MAAM,IAAA,GAAO,OAAA,CAAQ,QAAA,CAAS,CAAA,EAAG,WAAW,CAAA;AAC5C,EAAA,MAAM,EAAA,GAAK,OAAA,CAAQ,QAAA,CAAS,WAAA,EAAa,cAAc,SAAS,CAAA;AAChE,EAAA,MAAM,GAAA,GAAM,OAAA,CAAQ,QAAA,CAAS,OAAA,CAAQ,SAAS,UAAU,CAAA;AACxD,EAAA,MAAM,aAAa,OAAA,CAAQ,QAAA,CAAS,cAAc,SAAA,EAAW,OAAA,CAAQ,SAAS,UAAU,CAAA;AAExF,EAAA,MAAM,GAAA,GAAMF,iBAAA,CAAW,UAAA,EAAY,IAAA,EAAM,UAAA,EAAY;AAAA,IACnD,CAAA,EAAG,QAAA;AAAA,IACH,CAAA,EAAG,QAAA;AAAA,IACH,CAAA,EAAG,QAAA;AAAA,IACH,MAAA,EAAQ;AAAA,GACT,CAAA;AAED,EAAA,MAAM,QAAA,GAAWG,uBAAA,CAAiB,aAAA,EAAe,GAAA,EAAK,EAAE,CAAA;AACxD,EAAA,QAAA,CAAS,WAAW,GAAG,CAAA;AAEvB,EAAA,IAAI;AACF,IAAA,MAAM,SAAA,GAAYD,aAAA,CAAO,MAAA,CAAO,CAAC,QAAA,CAAS,MAAA,CAAO,UAAU,CAAA,EAAG,QAAA,CAAS,KAAA,EAAO,CAAC,CAAA;AAC/E,IAAA,OAAO,SAAA,CAAU,SAAS,MAAM,CAAA;AAAA,EAClC,CAAA,CAAA,MAAQ;AACN,IAAA,MAAM,IAAI,MAAM,wDAAwD,CAAA;AAAA,EAC1E;AACF;ACgDA,eAAsB,eAAA,CACpBE,MAAA,EACA,IAAA,EACA,IAAA,EACe;AACf,EAAA,MAAMC,eAAMC,YAAA,CAAQF,MAAI,GAAG,EAAE,SAAA,EAAW,MAAM,CAAA;AAC9C,EAAA,MAAM,OAAA,GAAU,GAAGA,MAAI,CAAA,KAAA,EAAQL,mBAAY,CAAC,CAAA,CAAE,QAAA,CAAS,KAAK,CAAC,CAAA,CAAA;AAC7D,EAAA,MAAMQ,kBAAA,CAAU,OAAA,EAAS,IAAA,EAAM,EAAE,MAAM,CAAA;AACvC,EAAA,IAAI;AACF,IAAA,MAAMC,eAAA,CAAO,SAASJ,MAAI,CAAA;AAAA,EAC5B,SAAS,CAAA,EAAG;AAEV,IAAA,IAAI;AACF,MAAA,MAAM,EAAE,MAAA,EAAO,GAAI,MAAM,OAAO,aAAkB,CAAA;AAClD,MAAA,MAAM,OAAO,OAAO,CAAA;AAAA,IACtB,CAAA,CAAA,MAAQ;AAAA,IAER;AACA,IAAA,MAAM,CAAA;AAAA,EACR;AACF;AClJO,IAAM,4BAAA,GAA+BK,MACzC,MAAA,CAAO;AAAA,EACN,KAAA,EAAOA,KAAA,CAAE,IAAA,CAAK,CAAC,QAAQ,CAAC,CAAA;AAAA,EACxB,KAAA,EAAOA,KAAA,CACJ,MAAA,EAAO,CACP,GAAA,CAAI,CAAC,CAAA,CACL,GAAA,CAAI,EAAE,CAAA,CACN,KAAA,CAAM,aAAA,EAAe,sCAAsC,CAAA;AAAA,EAC9D,IAAA,EAAMA,KAAA,CAAE,MAAA,EAAO,CAAE,GAAA,CAAI,CAAC,CAAA,CAAE,GAAA,CAAI,EAAE,CAAA,CAAE,QAAA,EAAS;AAAA,EACzC,QAAQA,KAAA,CAAE,MAAA,EAAO,CAAE,QAAA,GAAW,MAAA;AAChC,CAAC,EACA,MAAA,EAAO;AAEH,IAAM,kBAAA,GAAqBA,MAC/B,MAAA,CAAO;AAAA,EACN,oBAAA,EAAsBA,MAAE,KAAA,CAAM,4BAA4B,EAAE,GAAA,CAAI,EAAE,EAAE,QAAA;AACtE,CAAC,EACA,MAAA,EAAO;;;ACPV,SAAS,SAAS,CAAA,EAAqB;AACrC,EAAA,OACE,OAAO,MAAM,QAAA,IAAY,CAAA,KAAM,QAAQ,MAAA,IAAU,CAAA,IAAM,EAAuB,IAAA,KAAS,QAAA;AAE3F;AAOA,eAAsB,iBAAiB,IAAA,EAAqC;AAC1E,EAAA,IAAI,GAAA;AACJ,EAAA,IAAI;AACF,IAAA,GAAA,GAAM,MAAMC,iBAAA,CAAS,IAAA,EAAM,OAAO,CAAA;AAAA,EACpC,SAAS,CAAA,EAAG;AACV,IAAA,IAAI,QAAA,CAAS,CAAC,CAAA,EAAG;AACf,MAAA,OAAO,EAAC;AAAA,IACV;AACA,IAAA,MAAM,CAAA;AAAA,EACR;AACA,EAAA,IAAI,GAAA,CAAI,IAAA,EAAK,KAAM,EAAA,EAAI;AACrB,IAAA,OAAO,EAAC;AAAA,EACV;AACA,EAAA,MAAM,MAAA,GAAkBC,sBAAAA,CAAK,KAAA,CAAM,GAAG,CAAA;AACtC,EAAA,OAAO,kBAAA,CAAmB,KAAA,CAAM,MAAA,IAAU,EAAE,CAAA;AAC9C;AAGA,eAAsB,iBAAA,CAAkB,MAAc,MAAA,EAAqC;AACzF,EAAA,MAAM,SAAA,GAAY,kBAAA,CAAmB,KAAA,CAAM,MAAM,CAAA;AACjD,EAAA,MAAM,IAAA,GAAOA,sBAAAA,CAAK,SAAA,CAAU,SAAS,CAAA;AACrC,EAAA,MAAM,eAAA,CAAgB,IAAA,EAAM,IAAA,EAAM,GAAK,CAAA;AACzC","file":"node.cjs","sourcesContent":["/**\n * Secret encryption/decryption for agent config files.\n * Uses scrypt (KDF) + AES-256-GCM (cipher).\n * Format: \"encrypted:v1:\" + base64(salt[16] + iv[12] + ciphertext + tag[16])\n *\n * scrypt params: N=2^17, r=8, p=1 (~128 MB RAM per derivation).\n *\n * Node.js/Bun only - not available in browsers. Reachable only via the\n * '@elisym/sdk/node' subpath, which browser bundlers will not resolve.\n */\n\nimport { Buffer } from 'node:buffer';\nimport { createCipheriv, createDecipheriv, randomBytes, scryptSync } from 'node:crypto';\n\nconst PREFIX = 'encrypted:v1:';\nconst SALT_LENGTH = 16;\nconst IV_LENGTH = 12;\nconst TAG_LENGTH = 16;\nconst KEY_LENGTH = 32; // AES-256\n// v1: N=2^17 (OWASP minimum). v2 will use N=2^20 with format migration.\nconst SCRYPT_N = 2 ** 17;\nconst SCRYPT_R = 8;\nconst SCRYPT_P = 1;\nconst SCRYPT_MAXMEM = 128 * SCRYPT_N * SCRYPT_R * 2; // 2x the minimum required memory\n\n/** Check if a value is encrypted (has the encrypted:v1: prefix). */\nexport function isEncrypted(value: string): boolean {\n  return value.startsWith(PREFIX);\n}\n\n/** Encrypt a plaintext secret with a passphrase. Returns \"encrypted:v1:base64...\". Node.js/Bun only. */\nexport function encryptSecret(plaintext: string, passphrase: string): string {\n  if (!passphrase) {\n    throw new Error('Passphrase must not be empty.');\n  }\n\n  const salt = randomBytes(SALT_LENGTH);\n  const key = scryptSync(passphrase, salt, KEY_LENGTH, {\n    N: SCRYPT_N,\n    r: SCRYPT_R,\n    p: SCRYPT_P,\n    maxmem: SCRYPT_MAXMEM,\n  });\n  const iv = randomBytes(IV_LENGTH);\n\n  const cipher = createCipheriv('aes-256-gcm', key, iv);\n  const encrypted = Buffer.concat([cipher.update(plaintext, 'utf8'), cipher.final()]);\n  const tag = cipher.getAuthTag();\n\n  const payload = Buffer.concat([salt, iv, encrypted, tag]);\n  return PREFIX + payload.toString('base64');\n}\n\n/** Decrypt an encrypted secret with a passphrase. Throws on wrong passphrase or corrupted data. Node.js/Bun only. */\nexport function decryptSecret(encrypted: string, passphrase: string): string {\n  if (!isEncrypted(encrypted)) {\n    throw new Error('Value is not encrypted (missing encrypted:v1: prefix).');\n  }\n  if (!passphrase) {\n    throw new Error('Passphrase must not be empty.');\n  }\n\n  const payload = Buffer.from(encrypted.slice(PREFIX.length), 'base64');\n  if (payload.length < SALT_LENGTH + IV_LENGTH + TAG_LENGTH) {\n    throw new Error('Encrypted payload is too short.');\n  }\n\n  const salt = payload.subarray(0, SALT_LENGTH);\n  const iv = payload.subarray(SALT_LENGTH, SALT_LENGTH + IV_LENGTH);\n  const tag = payload.subarray(payload.length - TAG_LENGTH);\n  const ciphertext = payload.subarray(SALT_LENGTH + IV_LENGTH, payload.length - TAG_LENGTH);\n\n  const key = scryptSync(passphrase, salt, KEY_LENGTH, {\n    N: SCRYPT_N,\n    r: SCRYPT_R,\n    p: SCRYPT_P,\n    maxmem: SCRYPT_MAXMEM,\n  });\n\n  const decipher = createDecipheriv('aes-256-gcm', key, iv);\n  decipher.setAuthTag(tag);\n\n  try {\n    const decrypted = Buffer.concat([decipher.update(ciphertext), decipher.final()]);\n    return decrypted.toString('utf8');\n  } catch {\n    throw new Error('Decryption failed. Wrong passphrase or corrupted data.');\n  }\n}\n","/**\n * Write agent files: elisym.yaml, .secrets.json, .gitignore, and create agent dirs.\n */\n\nimport { randomBytes } from 'node:crypto';\nimport { mkdir, rename, writeFile } from 'node:fs/promises';\nimport { dirname, join } from 'node:path';\nimport YAML from 'yaml';\nimport { encryptSecret, isEncrypted } from '../primitives/encryption';\nimport { agentPaths, type AgentPaths } from './paths';\nimport { elisymRootFor, type AgentSource } from './resolver';\nimport { ElisymYamlSchema, SecretsSchema, type ElisymYaml, type Secrets } from './schema';\n\nconst GITIGNORE_CONTENT = [\n  '# elisym private state - do not commit.',\n  '.secrets.json',\n  '.media-cache.json',\n  '.jobs.json',\n  '.jobs.json.corrupt.*',\n  '.customer-history.json',\n  '.contacts.json',\n  '',\n].join('\\n');\n\nexport interface CreateAgentDirOptions {\n  target: AgentSource;\n  name: string;\n  cwd: string;\n  /**\n   * For `target: 'project'`: if no .elisym/ dir exists above cwd,\n   * where should we create one? Defaults to cwd.\n   */\n  projectRoot?: string;\n}\n\nexport interface CreatedAgentDir {\n  dir: string;\n  paths: AgentPaths;\n  source: AgentSource;\n  createdNewElisymRoot: boolean;\n}\n\n/**\n * Create (or reuse) the directory layout for a new agent. Idempotent: if the\n * agent directory already exists, returns its paths without overwriting.\n * Writes `.gitignore` in project-local .elisym/ on first creation.\n */\nexport async function createAgentDir(options: CreateAgentDirOptions): Promise<CreatedAgentDir> {\n  const { target, name, cwd, projectRoot } = options;\n\n  const existingRoot = elisymRootFor(target, cwd);\n  let elisymRoot: string;\n  let createdNewElisymRoot = false;\n\n  if (existingRoot) {\n    elisymRoot = existingRoot;\n  } else if (target === 'project') {\n    elisymRoot = join(projectRoot ?? cwd, '.elisym');\n    createdNewElisymRoot = true;\n  } else {\n    throw new Error('homeElisymDir should always exist conceptually - this is unreachable');\n  }\n\n  const agentDir = join(elisymRoot, name);\n  const mode = target === 'home' ? 0o700 : 0o755;\n  await mkdir(agentDir, { recursive: true, mode });\n  await mkdir(join(agentDir, 'skills'), { recursive: true, mode });\n\n  if (target === 'project') {\n    const gitignorePath = join(elisymRoot, '.gitignore');\n    await writeFileIfMissing(gitignorePath, GITIGNORE_CONTENT, 0o644);\n  }\n\n  return {\n    dir: agentDir,\n    paths: agentPaths(agentDir),\n    source: target,\n    createdNewElisymRoot,\n  };\n}\n\n/** Write elisym.yaml atomically. Validates via Zod before writing. */\nexport async function writeYaml(agentDir: string, yaml: ElisymYaml): Promise<void> {\n  const validated = ElisymYamlSchema.parse(yaml);\n  const body = YAML.stringify(validated);\n  const target = agentPaths(agentDir).yaml;\n  await writeFileAtomic(target, body, 0o644);\n}\n\n/**\n * Write .secrets.json atomically. If `passphrase` is given, encrypts all\n * plaintext secret fields (already-encrypted values are left as-is).\n * Generic over `llm_api_keys` so any registered provider's key is\n * encrypted without per-provider plumbing here.\n */\nexport async function writeSecrets(\n  agentDir: string,\n  secrets: Secrets,\n  passphrase?: string,\n): Promise<void> {\n  const validated = SecretsSchema.parse(secrets);\n  let encryptedLlmKeys: Record<string, string> | undefined;\n  if (validated.llm_api_keys) {\n    encryptedLlmKeys = {};\n    for (const [providerId, value] of Object.entries(validated.llm_api_keys)) {\n      if (value) {\n        encryptedLlmKeys[providerId] = maybeEncrypt(value, passphrase);\n      }\n    }\n    if (Object.keys(encryptedLlmKeys).length === 0) {\n      encryptedLlmKeys = undefined;\n    }\n  }\n  const finalSecrets: Secrets = {\n    nostr_secret_key: maybeEncrypt(validated.nostr_secret_key, passphrase),\n    solana_secret_key: validated.solana_secret_key\n      ? maybeEncrypt(validated.solana_secret_key, passphrase)\n      : undefined,\n    llm_api_keys: encryptedLlmKeys,\n  };\n  const body = JSON.stringify(finalSecrets, null, 2) + '\\n';\n  const target = agentPaths(agentDir).secrets;\n  await writeFileAtomic(target, body, 0o600);\n}\n\nfunction maybeEncrypt(value: string, passphrase: string | undefined): string {\n  if (!passphrase) {\n    return value;\n  }\n  if (isEncrypted(value)) {\n    return value;\n  }\n  return encryptSecret(value, passphrase);\n}\n\n/** Atomic write: temp file + rename. Preserves mode. */\nexport async function writeFileAtomic(\n  path: string,\n  data: string | Buffer,\n  mode: number,\n): Promise<void> {\n  await mkdir(dirname(path), { recursive: true });\n  const tmpPath = `${path}.tmp.${randomBytes(6).toString('hex')}`;\n  await writeFile(tmpPath, data, { mode });\n  try {\n    await rename(tmpPath, path);\n  } catch (e) {\n    // Best-effort cleanup of temp file on rename failure.\n    try {\n      const { unlink } = await import('node:fs/promises');\n      await unlink(tmpPath);\n    } catch {\n      /* ignore */\n    }\n    throw e;\n  }\n}\n\nasync function writeFileIfMissing(path: string, data: string, mode: number): Promise<void> {\n  try {\n    await writeFile(path, data, { mode, flag: 'wx' });\n  } catch (e: unknown) {\n    // wx fails with EEXIST if file exists - that's fine.\n    if (!isEexist(e)) {\n      throw e;\n    }\n  }\n}\n\nfunction isEexist(e: unknown): boolean {\n  return (\n    typeof e === 'object' && e !== null && 'code' in e && (e as { code: string }).code === 'EEXIST'\n  );\n}\n","/**\n * Zod schemas and types for `~/.elisym/config.yaml`.\n *\n * Split from `./global` so the schemas can be re-exported from the\n * browser-safe `@elisym/sdk` entry point without dragging in `node:fs/promises`\n * (which the loader/writer in `./global` needs).\n */\n\nimport { z } from 'zod';\n\nexport const SessionSpendLimitEntrySchema = z\n  .object({\n    chain: z.enum(['solana']),\n    token: z\n      .string()\n      .min(1)\n      .max(16)\n      .regex(/^[a-z0-9]+$/, 'token must be lowercase alphanumeric'),\n    mint: z.string().min(1).max(64).optional(),\n    amount: z.number().positive().finite(),\n  })\n  .strict();\n\nexport const GlobalConfigSchema = z\n  .object({\n    session_spend_limits: z.array(SessionSpendLimitEntrySchema).max(16).optional(),\n  })\n  .strict();\n\nexport type SessionSpendLimitEntry = z.infer<typeof SessionSpendLimitEntrySchema>;\nexport type GlobalConfig = z.infer<typeof GlobalConfigSchema>;\n","/**\n * Global (not per-agent) config stored at `~/.elisym/config.yaml`.\n *\n * Node.js/Bun only - reads and writes the filesystem. Browser code must not\n * import this module; import the schemas from `./global-schema` instead, or\n * the loader/writer from `@elisym/sdk/node`.\n */\n\nimport { readFile } from 'node:fs/promises';\nimport YAML from 'yaml';\nimport { writeFileAtomic } from '../agent-store/writer';\nimport { GlobalConfigSchema, type GlobalConfig } from './global-schema';\n\nexport {\n  GlobalConfigSchema,\n  SessionSpendLimitEntrySchema,\n  type GlobalConfig,\n  type SessionSpendLimitEntry,\n} from './global-schema';\n\nfunction isEnoent(e: unknown): boolean {\n  return (\n    typeof e === 'object' && e !== null && 'code' in e && (e as { code: string }).code === 'ENOENT'\n  );\n}\n\n/**\n * Read and validate `~/.elisym/config.yaml`. Returns `{}` if missing. Throws\n * on malformed YAML or schema violations — the MCP server treats these as fatal\n * at startup rather than silently ignoring bad overrides.\n */\nexport async function loadGlobalConfig(path: string): Promise<GlobalConfig> {\n  let raw: string;\n  try {\n    raw = await readFile(path, 'utf-8');\n  } catch (e) {\n    if (isEnoent(e)) {\n      return {};\n    }\n    throw e;\n  }\n  if (raw.trim() === '') {\n    return {};\n  }\n  const parsed: unknown = YAML.parse(raw);\n  return GlobalConfigSchema.parse(parsed ?? {});\n}\n\n/** Write the config YAML atomically. Validates via Zod before writing. */\nexport async function writeGlobalConfig(path: string, config: GlobalConfig): Promise<void> {\n  const validated = GlobalConfigSchema.parse(config);\n  const body = YAML.stringify(validated);\n  await writeFileAtomic(path, body, 0o644);\n}\n"]}

package/dist/node.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/primitives/encryption.ts","../src/agent-store/writer.ts","../src/config/global-schema.ts","../src/config/global.ts"],"names":["randomBytes","YAML"],"mappings":";;;;;;;;AAcA,IAAM,MAAA,GAAS,eAAA;AACf,IAAM,WAAA,GAAc,EAAA;AACpB,IAAM,SAAA,GAAY,EAAA;AAClB,IAAM,UAAA,GAAa,EAAA;AACnB,IAAM,UAAA,GAAa,EAAA;AAEnB,IAAM,WAAW,CAAA,IAAK,EAAA;AACtB,IAAM,QAAA,GAAW,CAAA;AACjB,IAAM,QAAA,GAAW,CAAA;AACjB,IAAM,aAAA,GAAgB,GAAA,GAAM,QAAA,GAAW,QAAA,GAAW,CAAA;AAG3C,SAAS,YAAY,KAAA,EAAwB;AAClD,EAAA,OAAO,KAAA,CAAM,WAAW,MAAM,CAAA;AAChC;AAGO,SAAS,aAAA,CAAc,WAAmB,UAAA,EAA4B;AAC3E,EAAA,IAAI,CAAC,UAAA,EAAY;AACf,IAAA,MAAM,IAAI,MAAM,+BAA+B,CAAA;AAAA,EACjD;AAEA,EAAA,MAAM,IAAA,GAAO,YAAY,WAAW,CAAA;AACpC,EAAA,MAAM,GAAA,GAAM,UAAA,CAAW,UAAA,EAAY,IAAA,EAAM,UAAA,EAAY;AAAA,IACnD,CAAA,EAAG,QAAA;AAAA,IACH,CAAA,EAAG,QAAA;AAAA,IACH,CAAA,EAAG,QAAA;AAAA,IACH,MAAA,EAAQ;AAAA,GACT,CAAA;AACD,EAAA,MAAM,EAAA,GAAK,YAAY,SAAS,CAAA;AAEhC,EAAA,MAAM,MAAA,GAAS,cAAA,CAAe,aAAA,EAAe,GAAA,EAAK,EAAE,CAAA;AACpD,EAAA,MAAM,SAAA,GAAY,MAAA,CAAO,MAAA,CAAO,CAAC,MAAA,CAAO,MAAA,CAAO,SAAA,EAAW,MAAM,CAAA,EAAG,MAAA,CAAO,KAAA,EAAO,CAAC,CAAA;AAClF,EAAA,MAAM,GAAA,GAAM,OAAO,UAAA,EAAW;AAE9B,EAAA,MAAM,OAAA,GAAU,OAAO,MAAA,CAAO,CAAC,MAAM,EAAA,EAAI,SAAA,EAAW,GAAG,CAAC,CAAA;AACxD,EAAA,OAAO,MAAA,GAAS,OAAA,CAAQ,QAAA,CAAS,QAAQ,CAAA;AAC3C;AAGO,SAAS,aAAA,CAAc,WAAmB,UAAA,EAA4B;AAC3E,EAAA,IAAI,CAAC,WAAA,CAAY,SAAS,CAAA,EAAG;AAC3B,IAAA,MAAM,IAAI,MAAM,wDAAwD,CAAA;AAAA,EAC1E;AACA,EAAA,IAAI,CAAC,UAAA,EAAY;AACf,IAAA,MAAM,IAAI,MAAM,+BAA+B,CAAA;AAAA,EACjD;AAEA,EAAA,MAAM,OAAA,GAAU,OAAO,IAAA,CAAK,SAAA,CAAU,MAAM,MAAA,CAAO,MAAM,GAAG,QAAQ,CAAA;AACpE,EAAA,IAAI,OAAA,CAAQ,MAAA,GAAS,WAAA,GAAc,SAAA,GAAY,UAAA,EAAY;AACzD,IAAA,MAAM,IAAI,MAAM,iCAAiC,CAAA;AAAA,EACnD;AAEA,EAAA,MAAM,IAAA,GAAO,OAAA,CAAQ,QAAA,CAAS,CAAA,EAAG,WAAW,CAAA;AAC5C,EAAA,MAAM,EAAA,GAAK,OAAA,CAAQ,QAAA,CAAS,WAAA,EAAa,cAAc,SAAS,CAAA;AAChE,EAAA,MAAM,GAAA,GAAM,OAAA,CAAQ,QAAA,CAAS,OAAA,CAAQ,SAAS,UAAU,CAAA;AACxD,EAAA,MAAM,aAAa,OAAA,CAAQ,QAAA,CAAS,cAAc,SAAA,EAAW,OAAA,CAAQ,SAAS,UAAU,CAAA;AAExF,EAAA,MAAM,GAAA,GAAM,UAAA,CAAW,UAAA,EAAY,IAAA,EAAM,UAAA,EAAY;AAAA,IACnD,CAAA,EAAG,QAAA;AAAA,IACH,CAAA,EAAG,QAAA;AAAA,IACH,CAAA,EAAG,QAAA;AAAA,IACH,MAAA,EAAQ;AAAA,GACT,CAAA;AAED,EAAA,MAAM,QAAA,GAAW,gBAAA,CAAiB,aAAA,EAAe,GAAA,EAAK,EAAE,CAAA;AACxD,EAAA,QAAA,CAAS,WAAW,GAAG,CAAA;AAEvB,EAAA,IAAI;AACF,IAAA,MAAM,SAAA,GAAY,MAAA,CAAO,MAAA,CAAO,CAAC,QAAA,CAAS,MAAA,CAAO,UAAU,CAAA,EAAG,QAAA,CAAS,KAAA,EAAO,CAAC,CAAA;AAC/E,IAAA,OAAO,SAAA,CAAU,SAAS,MAAM,CAAA;AAAA,EAClC,CAAA,CAAA,MAAQ;AACN,IAAA,MAAM,IAAI,MAAM,wDAAwD,CAAA;AAAA,EAC1E;AACF;ACwCA,eAAsB,eAAA,CACpB,IAAA,EACA,IAAA,EACA,IAAA,EACe;AACf,EAAA,MAAM,MAAM,OAAA,CAAQ,IAAI,GAAG,EAAE,SAAA,EAAW,MAAM,CAAA;AAC9C,EAAA,MAAM,OAAA,GAAU,GAAG,IAAI,CAAA,KAAA,EAAQA,YAAY,CAAC,CAAA,CAAE,QAAA,CAAS,KAAK,CAAC,CAAA,CAAA;AAC7D,EAAA,MAAM,SAAA,CAAU,OAAA,EAAS,IAAA,EAAM,EAAE,MAAM,CAAA;AACvC,EAAA,IAAI;AACF,IAAA,MAAM,MAAA,CAAO,SAAS,IAAI,CAAA;AAAA,EAC5B,SAAS,CAAA,EAAG;AAEV,IAAA,IAAI;AACF,MAAA,MAAM,EAAE,MAAA,EAAO,GAAI,MAAM,OAAO,kBAAkB,CAAA;AAClD,MAAA,MAAM,OAAO,OAAO,CAAA;AAAA,IACtB,CAAA,CAAA,MAAQ;AAAA,IAER;AACA,IAAA,MAAM,CAAA;AAAA,EACR;AACF;AC1IO,IAAM,4BAAA,GAA+B,EACzC,MAAA,CAAO;AAAA,EACN,KAAA,EAAO,CAAA,CAAE,IAAA,CAAK,CAAC,QAAQ,CAAC,CAAA;AAAA,EACxB,KAAA,EAAO,CAAA,CACJ,MAAA,EAAO,CACP,GAAA,CAAI,CAAC,CAAA,CACL,GAAA,CAAI,EAAE,CAAA,CACN,KAAA,CAAM,aAAA,EAAe,sCAAsC,CAAA;AAAA,EAC9D,IAAA,EAAM,CAAA,CAAE,MAAA,EAAO,CAAE,GAAA,CAAI,CAAC,CAAA,CAAE,GAAA,CAAI,EAAE,CAAA,CAAE,QAAA,EAAS;AAAA,EACzC,QAAQ,CAAA,CAAE,MAAA,EAAO,CAAE,QAAA,GAAW,MAAA;AAChC,CAAC,EACA,MAAA,EAAO;AAEH,IAAM,kBAAA,GAAqB,EAC/B,MAAA,CAAO;AAAA,EACN,oBAAA,EAAsB,EAAE,KAAA,CAAM,4BAA4B,EAAE,GAAA,CAAI,EAAE,EAAE,QAAA;AACtE,CAAC,EACA,MAAA,EAAO;;;ACPV,SAAS,SAAS,CAAA,EAAqB;AACrC,EAAA,OACE,OAAO,MAAM,QAAA,IAAY,CAAA,KAAM,QAAQ,MAAA,IAAU,CAAA,IAAM,EAAuB,IAAA,KAAS,QAAA;AAE3F;AAOA,eAAsB,iBAAiB,IAAA,EAAqC;AAC1E,EAAA,IAAI,GAAA;AACJ,EAAA,IAAI;AACF,IAAA,GAAA,GAAM,MAAM,QAAA,CAAS,IAAA,EAAM,OAAO,CAAA;AAAA,EACpC,SAAS,CAAA,EAAG;AACV,IAAA,IAAI,QAAA,CAAS,CAAC,CAAA,EAAG;AACf,MAAA,OAAO,EAAC;AAAA,IACV;AACA,IAAA,MAAM,CAAA;AAAA,EACR;AACA,EAAA,IAAI,GAAA,CAAI,IAAA,EAAK,KAAM,EAAA,EAAI;AACrB,IAAA,OAAO,EAAC;AAAA,EACV;AACA,EAAA,MAAM,MAAA,GAAkBC,KAAAA,CAAK,KAAA,CAAM,GAAG,CAAA;AACtC,EAAA,OAAO,kBAAA,CAAmB,KAAA,CAAM,MAAA,IAAU,EAAE,CAAA;AAC9C;AAGA,eAAsB,iBAAA,CAAkB,MAAc,MAAA,EAAqC;AACzF,EAAA,MAAM,SAAA,GAAY,kBAAA,CAAmB,KAAA,CAAM,MAAM,CAAA;AACjD,EAAA,MAAM,IAAA,GAAOA,KAAAA,CAAK,SAAA,CAAU,SAAS,CAAA;AACrC,EAAA,MAAM,eAAA,CAAgB,IAAA,EAAM,IAAA,EAAM,GAAK,CAAA;AACzC","file":"node.js","sourcesContent":["/**\n * Secret encryption/decryption for agent config files.\n * Uses scrypt (KDF) + AES-256-GCM (cipher).\n * Format: \"encrypted:v1:\" + base64(salt[16] + iv[12] + ciphertext + tag[16])\n *\n * scrypt params: N=2^17, r=8, p=1 (~128 MB RAM per derivation).\n *\n * Node.js/Bun only - not available in browsers. Reachable only via the\n * '@elisym/sdk/node' subpath, which browser bundlers will not resolve.\n */\n\nimport { Buffer } from 'node:buffer';\nimport { createCipheriv, createDecipheriv, randomBytes, scryptSync } from 'node:crypto';\n\nconst PREFIX = 'encrypted:v1:';\nconst SALT_LENGTH = 16;\nconst IV_LENGTH = 12;\nconst TAG_LENGTH = 16;\nconst KEY_LENGTH = 32; // AES-256\n// v1: N=2^17 (OWASP minimum). v2 will use N=2^20 with format migration.\nconst SCRYPT_N = 2 ** 17;\nconst SCRYPT_R = 8;\nconst SCRYPT_P = 1;\nconst SCRYPT_MAXMEM = 128 * SCRYPT_N * SCRYPT_R * 2; // 2x the minimum required memory\n\n/** Check if a value is encrypted (has the encrypted:v1: prefix). */\nexport function isEncrypted(value: string): boolean {\n  return value.startsWith(PREFIX);\n}\n\n/** Encrypt a plaintext secret with a passphrase. Returns \"encrypted:v1:base64...\". Node.js/Bun only. */\nexport function encryptSecret(plaintext: string, passphrase: string): string {\n  if (!passphrase) {\n    throw new Error('Passphrase must not be empty.');\n  }\n\n  const salt = randomBytes(SALT_LENGTH);\n  const key = scryptSync(passphrase, salt, KEY_LENGTH, {\n    N: SCRYPT_N,\n    r: SCRYPT_R,\n    p: SCRYPT_P,\n    maxmem: SCRYPT_MAXMEM,\n  });\n  const iv = randomBytes(IV_LENGTH);\n\n  const cipher = createCipheriv('aes-256-gcm', key, iv);\n  const encrypted = Buffer.concat([cipher.update(plaintext, 'utf8'), cipher.final()]);\n  const tag = cipher.getAuthTag();\n\n  const payload = Buffer.concat([salt, iv, encrypted, tag]);\n  return PREFIX + payload.toString('base64');\n}\n\n/** Decrypt an encrypted secret with a passphrase. Throws on wrong passphrase or corrupted data. Node.js/Bun only. */\nexport function decryptSecret(encrypted: string, passphrase: string): string {\n  if (!isEncrypted(encrypted)) {\n    throw new Error('Value is not encrypted (missing encrypted:v1: prefix).');\n  }\n  if (!passphrase) {\n    throw new Error('Passphrase must not be empty.');\n  }\n\n  const payload = Buffer.from(encrypted.slice(PREFIX.length), 'base64');\n  if (payload.length < SALT_LENGTH + IV_LENGTH + TAG_LENGTH) {\n    throw new Error('Encrypted payload is too short.');\n  }\n\n  const salt = payload.subarray(0, SALT_LENGTH);\n  const iv = payload.subarray(SALT_LENGTH, SALT_LENGTH + IV_LENGTH);\n  const tag = payload.subarray(payload.length - TAG_LENGTH);\n  const ciphertext = payload.subarray(SALT_LENGTH + IV_LENGTH, payload.length - TAG_LENGTH);\n\n  const key = scryptSync(passphrase, salt, KEY_LENGTH, {\n    N: SCRYPT_N,\n    r: SCRYPT_R,\n    p: SCRYPT_P,\n    maxmem: SCRYPT_MAXMEM,\n  });\n\n  const decipher = createDecipheriv('aes-256-gcm', key, iv);\n  decipher.setAuthTag(tag);\n\n  try {\n    const decrypted = Buffer.concat([decipher.update(ciphertext), decipher.final()]);\n    return decrypted.toString('utf8');\n  } catch {\n    throw new Error('Decryption failed. Wrong passphrase or corrupted data.');\n  }\n}\n","/**\n * Write agent files: elisym.yaml, .secrets.json, .gitignore, and create agent dirs.\n */\n\nimport { randomBytes } from 'node:crypto';\nimport { mkdir, rename, writeFile } from 'node:fs/promises';\nimport { dirname, join } from 'node:path';\nimport YAML from 'yaml';\nimport { encryptSecret, isEncrypted } from '../primitives/encryption';\nimport { agentPaths, type AgentPaths } from './paths';\nimport { elisymRootFor, type AgentSource } from './resolver';\nimport { ElisymYamlSchema, SecretsSchema, type ElisymYaml, type Secrets } from './schema';\n\nconst GITIGNORE_CONTENT = [\n  '# elisym private state - do not commit.',\n  '.secrets.json',\n  '.media-cache.json',\n  '.jobs.json',\n  '.jobs.json.corrupt.*',\n  '.customer-history.json',\n  '.contacts.json',\n  '',\n].join('\\n');\n\nexport interface CreateAgentDirOptions {\n  target: AgentSource;\n  name: string;\n  cwd: string;\n  /**\n   * For `target: 'project'`: if no .elisym/ dir exists above cwd,\n   * where should we create one? Defaults to cwd.\n   */\n  projectRoot?: string;\n}\n\nexport interface CreatedAgentDir {\n  dir: string;\n  paths: AgentPaths;\n  source: AgentSource;\n  createdNewElisymRoot: boolean;\n}\n\n/**\n * Create (or reuse) the directory layout for a new agent. Idempotent: if the\n * agent directory already exists, returns its paths without overwriting.\n * Writes `.gitignore` in project-local .elisym/ on first creation.\n */\nexport async function createAgentDir(options: CreateAgentDirOptions): Promise<CreatedAgentDir> {\n  const { target, name, cwd, projectRoot } = options;\n\n  const existingRoot = elisymRootFor(target, cwd);\n  let elisymRoot: string;\n  let createdNewElisymRoot = false;\n\n  if (existingRoot) {\n    elisymRoot = existingRoot;\n  } else if (target === 'project') {\n    elisymRoot = join(projectRoot ?? cwd, '.elisym');\n    createdNewElisymRoot = true;\n  } else {\n    throw new Error('homeElisymDir should always exist conceptually - this is unreachable');\n  }\n\n  const agentDir = join(elisymRoot, name);\n  const mode = target === 'home' ? 0o700 : 0o755;\n  await mkdir(agentDir, { recursive: true, mode });\n  await mkdir(join(agentDir, 'skills'), { recursive: true, mode });\n\n  if (target === 'project') {\n    const gitignorePath = join(elisymRoot, '.gitignore');\n    await writeFileIfMissing(gitignorePath, GITIGNORE_CONTENT, 0o644);\n  }\n\n  return {\n    dir: agentDir,\n    paths: agentPaths(agentDir),\n    source: target,\n    createdNewElisymRoot,\n  };\n}\n\n/** Write elisym.yaml atomically. Validates via Zod before writing. */\nexport async function writeYaml(agentDir: string, yaml: ElisymYaml): Promise<void> {\n  const validated = ElisymYamlSchema.parse(yaml);\n  const body = YAML.stringify(validated);\n  const target = agentPaths(agentDir).yaml;\n  await writeFileAtomic(target, body, 0o644);\n}\n\n/**\n * Write .secrets.json atomically. If `passphrase` is given, encrypts all\n * plaintext secret fields (already-encrypted values are left as-is).\n */\nexport async function writeSecrets(\n  agentDir: string,\n  secrets: Secrets,\n  passphrase?: string,\n): Promise<void> {\n  const validated = SecretsSchema.parse(secrets);\n  const finalSecrets: Secrets = {\n    ...validated,\n    nostr_secret_key: maybeEncrypt(validated.nostr_secret_key, passphrase),\n    solana_secret_key: validated.solana_secret_key\n      ? maybeEncrypt(validated.solana_secret_key, passphrase)\n      : undefined,\n    anthropic_api_key: validated.anthropic_api_key\n      ? maybeEncrypt(validated.anthropic_api_key, passphrase)\n      : undefined,\n    openai_api_key: validated.openai_api_key\n      ? maybeEncrypt(validated.openai_api_key, passphrase)\n      : undefined,\n  };\n  const body = JSON.stringify(finalSecrets, null, 2) + '\\n';\n  const target = agentPaths(agentDir).secrets;\n  await writeFileAtomic(target, body, 0o600);\n}\n\nfunction maybeEncrypt(value: string, passphrase: string | undefined): string {\n  if (!passphrase) {\n    return value;\n  }\n  if (isEncrypted(value)) {\n    return value;\n  }\n  return encryptSecret(value, passphrase);\n}\n\n/** Atomic write: temp file + rename. Preserves mode. */\nexport async function writeFileAtomic(\n  path: string,\n  data: string | Buffer,\n  mode: number,\n): Promise<void> {\n  await mkdir(dirname(path), { recursive: true });\n  const tmpPath = `${path}.tmp.${randomBytes(6).toString('hex')}`;\n  await writeFile(tmpPath, data, { mode });\n  try {\n    await rename(tmpPath, path);\n  } catch (e) {\n    // Best-effort cleanup of temp file on rename failure.\n    try {\n      const { unlink } = await import('node:fs/promises');\n      await unlink(tmpPath);\n    } catch {\n      /* ignore */\n    }\n    throw e;\n  }\n}\n\nasync function writeFileIfMissing(path: string, data: string, mode: number): Promise<void> {\n  try {\n    await writeFile(path, data, { mode, flag: 'wx' });\n  } catch (e: unknown) {\n    // wx fails with EEXIST if file exists - that's fine.\n    if (!isEexist(e)) {\n      throw e;\n    }\n  }\n}\n\nfunction isEexist(e: unknown): boolean {\n  return (\n    typeof e === 'object' && e !== null && 'code' in e && (e as { code: string }).code === 'EEXIST'\n  );\n}\n","/**\n * Zod schemas and types for `~/.elisym/config.yaml`.\n *\n * Split from `./global` so the schemas can be re-exported from the\n * browser-safe `@elisym/sdk` entry point without dragging in `node:fs/promises`\n * (which the loader/writer in `./global` needs).\n */\n\nimport { z } from 'zod';\n\nexport const SessionSpendLimitEntrySchema = z\n  .object({\n    chain: z.enum(['solana']),\n    token: z\n      .string()\n      .min(1)\n      .max(16)\n      .regex(/^[a-z0-9]+$/, 'token must be lowercase alphanumeric'),\n    mint: z.string().min(1).max(64).optional(),\n    amount: z.number().positive().finite(),\n  })\n  .strict();\n\nexport const GlobalConfigSchema = z\n  .object({\n    session_spend_limits: z.array(SessionSpendLimitEntrySchema).max(16).optional(),\n  })\n  .strict();\n\nexport type SessionSpendLimitEntry = z.infer<typeof SessionSpendLimitEntrySchema>;\nexport type GlobalConfig = z.infer<typeof GlobalConfigSchema>;\n","/**\n * Global (not per-agent) config stored at `~/.elisym/config.yaml`.\n *\n * Node.js/Bun only - reads and writes the filesystem. Browser code must not\n * import this module; import the schemas from `./global-schema` instead, or\n * the loader/writer from `@elisym/sdk/node`.\n */\n\nimport { readFile } from 'node:fs/promises';\nimport YAML from 'yaml';\nimport { writeFileAtomic } from '../agent-store/writer';\nimport { GlobalConfigSchema, type GlobalConfig } from './global-schema';\n\nexport {\n  GlobalConfigSchema,\n  SessionSpendLimitEntrySchema,\n  type GlobalConfig,\n  type SessionSpendLimitEntry,\n} from './global-schema';\n\nfunction isEnoent(e: unknown): boolean {\n  return (\n    typeof e === 'object' && e !== null && 'code' in e && (e as { code: string }).code === 'ENOENT'\n  );\n}\n\n/**\n * Read and validate `~/.elisym/config.yaml`. Returns `{}` if missing. Throws\n * on malformed YAML or schema violations — the MCP server treats these as fatal\n * at startup rather than silently ignoring bad overrides.\n */\nexport async function loadGlobalConfig(path: string): Promise<GlobalConfig> {\n  let raw: string;\n  try {\n    raw = await readFile(path, 'utf-8');\n  } catch (e) {\n    if (isEnoent(e)) {\n      return {};\n    }\n    throw e;\n  }\n  if (raw.trim() === '') {\n    return {};\n  }\n  const parsed: unknown = YAML.parse(raw);\n  return GlobalConfigSchema.parse(parsed ?? {});\n}\n\n/** Write the config YAML atomically. Validates via Zod before writing. */\nexport async function writeGlobalConfig(path: string, config: GlobalConfig): Promise<void> {\n  const validated = GlobalConfigSchema.parse(config);\n  const body = YAML.stringify(validated);\n  await writeFileAtomic(path, body, 0o644);\n}\n"]}
+{"version":3,"sources":["../src/primitives/encryption.ts","../src/agent-store/writer.ts","../src/config/global-schema.ts","../src/config/global.ts"],"names":["randomBytes","YAML"],"mappings":";;;;;;;;AAcA,IAAM,MAAA,GAAS,eAAA;AACf,IAAM,WAAA,GAAc,EAAA;AACpB,IAAM,SAAA,GAAY,EAAA;AAClB,IAAM,UAAA,GAAa,EAAA;AACnB,IAAM,UAAA,GAAa,EAAA;AAEnB,IAAM,WAAW,CAAA,IAAK,EAAA;AACtB,IAAM,QAAA,GAAW,CAAA;AACjB,IAAM,QAAA,GAAW,CAAA;AACjB,IAAM,aAAA,GAAgB,GAAA,GAAM,QAAA,GAAW,QAAA,GAAW,CAAA;AAG3C,SAAS,YAAY,KAAA,EAAwB;AAClD,EAAA,OAAO,KAAA,CAAM,WAAW,MAAM,CAAA;AAChC;AAGO,SAAS,aAAA,CAAc,WAAmB,UAAA,EAA4B;AAC3E,EAAA,IAAI,CAAC,UAAA,EAAY;AACf,IAAA,MAAM,IAAI,MAAM,+BAA+B,CAAA;AAAA,EACjD;AAEA,EAAA,MAAM,IAAA,GAAO,YAAY,WAAW,CAAA;AACpC,EAAA,MAAM,GAAA,GAAM,UAAA,CAAW,UAAA,EAAY,IAAA,EAAM,UAAA,EAAY;AAAA,IACnD,CAAA,EAAG,QAAA;AAAA,IACH,CAAA,EAAG,QAAA;AAAA,IACH,CAAA,EAAG,QAAA;AAAA,IACH,MAAA,EAAQ;AAAA,GACT,CAAA;AACD,EAAA,MAAM,EAAA,GAAK,YAAY,SAAS,CAAA;AAEhC,EAAA,MAAM,MAAA,GAAS,cAAA,CAAe,aAAA,EAAe,GAAA,EAAK,EAAE,CAAA;AACpD,EAAA,MAAM,SAAA,GAAY,MAAA,CAAO,MAAA,CAAO,CAAC,MAAA,CAAO,MAAA,CAAO,SAAA,EAAW,MAAM,CAAA,EAAG,MAAA,CAAO,KAAA,EAAO,CAAC,CAAA;AAClF,EAAA,MAAM,GAAA,GAAM,OAAO,UAAA,EAAW;AAE9B,EAAA,MAAM,OAAA,GAAU,OAAO,MAAA,CAAO,CAAC,MAAM,EAAA,EAAI,SAAA,EAAW,GAAG,CAAC,CAAA;AACxD,EAAA,OAAO,MAAA,GAAS,OAAA,CAAQ,QAAA,CAAS,QAAQ,CAAA;AAC3C;AAGO,SAAS,aAAA,CAAc,WAAmB,UAAA,EAA4B;AAC3E,EAAA,IAAI,CAAC,WAAA,CAAY,SAAS,CAAA,EAAG;AAC3B,IAAA,MAAM,IAAI,MAAM,wDAAwD,CAAA;AAAA,EAC1E;AACA,EAAA,IAAI,CAAC,UAAA,EAAY;AACf,IAAA,MAAM,IAAI,MAAM,+BAA+B,CAAA;AAAA,EACjD;AAEA,EAAA,MAAM,OAAA,GAAU,OAAO,IAAA,CAAK,SAAA,CAAU,MAAM,MAAA,CAAO,MAAM,GAAG,QAAQ,CAAA;AACpE,EAAA,IAAI,OAAA,CAAQ,MAAA,GAAS,WAAA,GAAc,SAAA,GAAY,UAAA,EAAY;AACzD,IAAA,MAAM,IAAI,MAAM,iCAAiC,CAAA;AAAA,EACnD;AAEA,EAAA,MAAM,IAAA,GAAO,OAAA,CAAQ,QAAA,CAAS,CAAA,EAAG,WAAW,CAAA;AAC5C,EAAA,MAAM,EAAA,GAAK,OAAA,CAAQ,QAAA,CAAS,WAAA,EAAa,cAAc,SAAS,CAAA;AAChE,EAAA,MAAM,GAAA,GAAM,OAAA,CAAQ,QAAA,CAAS,OAAA,CAAQ,SAAS,UAAU,CAAA;AACxD,EAAA,MAAM,aAAa,OAAA,CAAQ,QAAA,CAAS,cAAc,SAAA,EAAW,OAAA,CAAQ,SAAS,UAAU,CAAA;AAExF,EAAA,MAAM,GAAA,GAAM,UAAA,CAAW,UAAA,EAAY,IAAA,EAAM,UAAA,EAAY;AAAA,IACnD,CAAA,EAAG,QAAA;AAAA,IACH,CAAA,EAAG,QAAA;AAAA,IACH,CAAA,EAAG,QAAA;AAAA,IACH,MAAA,EAAQ;AAAA,GACT,CAAA;AAED,EAAA,MAAM,QAAA,GAAW,gBAAA,CAAiB,aAAA,EAAe,GAAA,EAAK,EAAE,CAAA;AACxD,EAAA,QAAA,CAAS,WAAW,GAAG,CAAA;AAEvB,EAAA,IAAI;AACF,IAAA,MAAM,SAAA,GAAY,MAAA,CAAO,MAAA,CAAO,CAAC,QAAA,CAAS,MAAA,CAAO,UAAU,CAAA,EAAG,QAAA,CAAS,KAAA,EAAO,CAAC,CAAA;AAC/E,IAAA,OAAO,SAAA,CAAU,SAAS,MAAM,CAAA;AAAA,EAClC,CAAA,CAAA,MAAQ;AACN,IAAA,MAAM,IAAI,MAAM,wDAAwD,CAAA;AAAA,EAC1E;AACF;ACgDA,eAAsB,eAAA,CACpB,IAAA,EACA,IAAA,EACA,IAAA,EACe;AACf,EAAA,MAAM,MAAM,OAAA,CAAQ,IAAI,GAAG,EAAE,SAAA,EAAW,MAAM,CAAA;AAC9C,EAAA,MAAM,OAAA,GAAU,GAAG,IAAI,CAAA,KAAA,EAAQA,YAAY,CAAC,CAAA,CAAE,QAAA,CAAS,KAAK,CAAC,CAAA,CAAA;AAC7D,EAAA,MAAM,SAAA,CAAU,OAAA,EAAS,IAAA,EAAM,EAAE,MAAM,CAAA;AACvC,EAAA,IAAI;AACF,IAAA,MAAM,MAAA,CAAO,SAAS,IAAI,CAAA;AAAA,EAC5B,SAAS,CAAA,EAAG;AAEV,IAAA,IAAI;AACF,MAAA,MAAM,EAAE,MAAA,EAAO,GAAI,MAAM,OAAO,kBAAkB,CAAA;AAClD,MAAA,MAAM,OAAO,OAAO,CAAA;AAAA,IACtB,CAAA,CAAA,MAAQ;AAAA,IAER;AACA,IAAA,MAAM,CAAA;AAAA,EACR;AACF;AClJO,IAAM,4BAAA,GAA+B,EACzC,MAAA,CAAO;AAAA,EACN,KAAA,EAAO,CAAA,CAAE,IAAA,CAAK,CAAC,QAAQ,CAAC,CAAA;AAAA,EACxB,KAAA,EAAO,CAAA,CACJ,MAAA,EAAO,CACP,GAAA,CAAI,CAAC,CAAA,CACL,GAAA,CAAI,EAAE,CAAA,CACN,KAAA,CAAM,aAAA,EAAe,sCAAsC,CAAA;AAAA,EAC9D,IAAA,EAAM,CAAA,CAAE,MAAA,EAAO,CAAE,GAAA,CAAI,CAAC,CAAA,CAAE,GAAA,CAAI,EAAE,CAAA,CAAE,QAAA,EAAS;AAAA,EACzC,QAAQ,CAAA,CAAE,MAAA,EAAO,CAAE,QAAA,GAAW,MAAA;AAChC,CAAC,EACA,MAAA,EAAO;AAEH,IAAM,kBAAA,GAAqB,EAC/B,MAAA,CAAO;AAAA,EACN,oBAAA,EAAsB,EAAE,KAAA,CAAM,4BAA4B,EAAE,GAAA,CAAI,EAAE,EAAE,QAAA;AACtE,CAAC,EACA,MAAA,EAAO;;;ACPV,SAAS,SAAS,CAAA,EAAqB;AACrC,EAAA,OACE,OAAO,MAAM,QAAA,IAAY,CAAA,KAAM,QAAQ,MAAA,IAAU,CAAA,IAAM,EAAuB,IAAA,KAAS,QAAA;AAE3F;AAOA,eAAsB,iBAAiB,IAAA,EAAqC;AAC1E,EAAA,IAAI,GAAA;AACJ,EAAA,IAAI;AACF,IAAA,GAAA,GAAM,MAAM,QAAA,CAAS,IAAA,EAAM,OAAO,CAAA;AAAA,EACpC,SAAS,CAAA,EAAG;AACV,IAAA,IAAI,QAAA,CAAS,CAAC,CAAA,EAAG;AACf,MAAA,OAAO,EAAC;AAAA,IACV;AACA,IAAA,MAAM,CAAA;AAAA,EACR;AACA,EAAA,IAAI,GAAA,CAAI,IAAA,EAAK,KAAM,EAAA,EAAI;AACrB,IAAA,OAAO,EAAC;AAAA,EACV;AACA,EAAA,MAAM,MAAA,GAAkBC,KAAAA,CAAK,KAAA,CAAM,GAAG,CAAA;AACtC,EAAA,OAAO,kBAAA,CAAmB,KAAA,CAAM,MAAA,IAAU,EAAE,CAAA;AAC9C;AAGA,eAAsB,iBAAA,CAAkB,MAAc,MAAA,EAAqC;AACzF,EAAA,MAAM,SAAA,GAAY,kBAAA,CAAmB,KAAA,CAAM,MAAM,CAAA;AACjD,EAAA,MAAM,IAAA,GAAOA,KAAAA,CAAK,SAAA,CAAU,SAAS,CAAA;AACrC,EAAA,MAAM,eAAA,CAAgB,IAAA,EAAM,IAAA,EAAM,GAAK,CAAA;AACzC","file":"node.js","sourcesContent":["/**\n * Secret encryption/decryption for agent config files.\n * Uses scrypt (KDF) + AES-256-GCM (cipher).\n * Format: \"encrypted:v1:\" + base64(salt[16] + iv[12] + ciphertext + tag[16])\n *\n * scrypt params: N=2^17, r=8, p=1 (~128 MB RAM per derivation).\n *\n * Node.js/Bun only - not available in browsers. Reachable only via the\n * '@elisym/sdk/node' subpath, which browser bundlers will not resolve.\n */\n\nimport { Buffer } from 'node:buffer';\nimport { createCipheriv, createDecipheriv, randomBytes, scryptSync } from 'node:crypto';\n\nconst PREFIX = 'encrypted:v1:';\nconst SALT_LENGTH = 16;\nconst IV_LENGTH = 12;\nconst TAG_LENGTH = 16;\nconst KEY_LENGTH = 32; // AES-256\n// v1: N=2^17 (OWASP minimum). v2 will use N=2^20 with format migration.\nconst SCRYPT_N = 2 ** 17;\nconst SCRYPT_R = 8;\nconst SCRYPT_P = 1;\nconst SCRYPT_MAXMEM = 128 * SCRYPT_N * SCRYPT_R * 2; // 2x the minimum required memory\n\n/** Check if a value is encrypted (has the encrypted:v1: prefix). */\nexport function isEncrypted(value: string): boolean {\n  return value.startsWith(PREFIX);\n}\n\n/** Encrypt a plaintext secret with a passphrase. Returns \"encrypted:v1:base64...\". Node.js/Bun only. */\nexport function encryptSecret(plaintext: string, passphrase: string): string {\n  if (!passphrase) {\n    throw new Error('Passphrase must not be empty.');\n  }\n\n  const salt = randomBytes(SALT_LENGTH);\n  const key = scryptSync(passphrase, salt, KEY_LENGTH, {\n    N: SCRYPT_N,\n    r: SCRYPT_R,\n    p: SCRYPT_P,\n    maxmem: SCRYPT_MAXMEM,\n  });\n  const iv = randomBytes(IV_LENGTH);\n\n  const cipher = createCipheriv('aes-256-gcm', key, iv);\n  const encrypted = Buffer.concat([cipher.update(plaintext, 'utf8'), cipher.final()]);\n  const tag = cipher.getAuthTag();\n\n  const payload = Buffer.concat([salt, iv, encrypted, tag]);\n  return PREFIX + payload.toString('base64');\n}\n\n/** Decrypt an encrypted secret with a passphrase. Throws on wrong passphrase or corrupted data. Node.js/Bun only. */\nexport function decryptSecret(encrypted: string, passphrase: string): string {\n  if (!isEncrypted(encrypted)) {\n    throw new Error('Value is not encrypted (missing encrypted:v1: prefix).');\n  }\n  if (!passphrase) {\n    throw new Error('Passphrase must not be empty.');\n  }\n\n  const payload = Buffer.from(encrypted.slice(PREFIX.length), 'base64');\n  if (payload.length < SALT_LENGTH + IV_LENGTH + TAG_LENGTH) {\n    throw new Error('Encrypted payload is too short.');\n  }\n\n  const salt = payload.subarray(0, SALT_LENGTH);\n  const iv = payload.subarray(SALT_LENGTH, SALT_LENGTH + IV_LENGTH);\n  const tag = payload.subarray(payload.length - TAG_LENGTH);\n  const ciphertext = payload.subarray(SALT_LENGTH + IV_LENGTH, payload.length - TAG_LENGTH);\n\n  const key = scryptSync(passphrase, salt, KEY_LENGTH, {\n    N: SCRYPT_N,\n    r: SCRYPT_R,\n    p: SCRYPT_P,\n    maxmem: SCRYPT_MAXMEM,\n  });\n\n  const decipher = createDecipheriv('aes-256-gcm', key, iv);\n  decipher.setAuthTag(tag);\n\n  try {\n    const decrypted = Buffer.concat([decipher.update(ciphertext), decipher.final()]);\n    return decrypted.toString('utf8');\n  } catch {\n    throw new Error('Decryption failed. Wrong passphrase or corrupted data.');\n  }\n}\n","/**\n * Write agent files: elisym.yaml, .secrets.json, .gitignore, and create agent dirs.\n */\n\nimport { randomBytes } from 'node:crypto';\nimport { mkdir, rename, writeFile } from 'node:fs/promises';\nimport { dirname, join } from 'node:path';\nimport YAML from 'yaml';\nimport { encryptSecret, isEncrypted } from '../primitives/encryption';\nimport { agentPaths, type AgentPaths } from './paths';\nimport { elisymRootFor, type AgentSource } from './resolver';\nimport { ElisymYamlSchema, SecretsSchema, type ElisymYaml, type Secrets } from './schema';\n\nconst GITIGNORE_CONTENT = [\n  '# elisym private state - do not commit.',\n  '.secrets.json',\n  '.media-cache.json',\n  '.jobs.json',\n  '.jobs.json.corrupt.*',\n  '.customer-history.json',\n  '.contacts.json',\n  '',\n].join('\\n');\n\nexport interface CreateAgentDirOptions {\n  target: AgentSource;\n  name: string;\n  cwd: string;\n  /**\n   * For `target: 'project'`: if no .elisym/ dir exists above cwd,\n   * where should we create one? Defaults to cwd.\n   */\n  projectRoot?: string;\n}\n\nexport interface CreatedAgentDir {\n  dir: string;\n  paths: AgentPaths;\n  source: AgentSource;\n  createdNewElisymRoot: boolean;\n}\n\n/**\n * Create (or reuse) the directory layout for a new agent. Idempotent: if the\n * agent directory already exists, returns its paths without overwriting.\n * Writes `.gitignore` in project-local .elisym/ on first creation.\n */\nexport async function createAgentDir(options: CreateAgentDirOptions): Promise<CreatedAgentDir> {\n  const { target, name, cwd, projectRoot } = options;\n\n  const existingRoot = elisymRootFor(target, cwd);\n  let elisymRoot: string;\n  let createdNewElisymRoot = false;\n\n  if (existingRoot) {\n    elisymRoot = existingRoot;\n  } else if (target === 'project') {\n    elisymRoot = join(projectRoot ?? cwd, '.elisym');\n    createdNewElisymRoot = true;\n  } else {\n    throw new Error('homeElisymDir should always exist conceptually - this is unreachable');\n  }\n\n  const agentDir = join(elisymRoot, name);\n  const mode = target === 'home' ? 0o700 : 0o755;\n  await mkdir(agentDir, { recursive: true, mode });\n  await mkdir(join(agentDir, 'skills'), { recursive: true, mode });\n\n  if (target === 'project') {\n    const gitignorePath = join(elisymRoot, '.gitignore');\n    await writeFileIfMissing(gitignorePath, GITIGNORE_CONTENT, 0o644);\n  }\n\n  return {\n    dir: agentDir,\n    paths: agentPaths(agentDir),\n    source: target,\n    createdNewElisymRoot,\n  };\n}\n\n/** Write elisym.yaml atomically. Validates via Zod before writing. */\nexport async function writeYaml(agentDir: string, yaml: ElisymYaml): Promise<void> {\n  const validated = ElisymYamlSchema.parse(yaml);\n  const body = YAML.stringify(validated);\n  const target = agentPaths(agentDir).yaml;\n  await writeFileAtomic(target, body, 0o644);\n}\n\n/**\n * Write .secrets.json atomically. If `passphrase` is given, encrypts all\n * plaintext secret fields (already-encrypted values are left as-is).\n * Generic over `llm_api_keys` so any registered provider's key is\n * encrypted without per-provider plumbing here.\n */\nexport async function writeSecrets(\n  agentDir: string,\n  secrets: Secrets,\n  passphrase?: string,\n): Promise<void> {\n  const validated = SecretsSchema.parse(secrets);\n  let encryptedLlmKeys: Record<string, string> | undefined;\n  if (validated.llm_api_keys) {\n    encryptedLlmKeys = {};\n    for (const [providerId, value] of Object.entries(validated.llm_api_keys)) {\n      if (value) {\n        encryptedLlmKeys[providerId] = maybeEncrypt(value, passphrase);\n      }\n    }\n    if (Object.keys(encryptedLlmKeys).length === 0) {\n      encryptedLlmKeys = undefined;\n    }\n  }\n  const finalSecrets: Secrets = {\n    nostr_secret_key: maybeEncrypt(validated.nostr_secret_key, passphrase),\n    solana_secret_key: validated.solana_secret_key\n      ? maybeEncrypt(validated.solana_secret_key, passphrase)\n      : undefined,\n    llm_api_keys: encryptedLlmKeys,\n  };\n  const body = JSON.stringify(finalSecrets, null, 2) + '\\n';\n  const target = agentPaths(agentDir).secrets;\n  await writeFileAtomic(target, body, 0o600);\n}\n\nfunction maybeEncrypt(value: string, passphrase: string | undefined): string {\n  if (!passphrase) {\n    return value;\n  }\n  if (isEncrypted(value)) {\n    return value;\n  }\n  return encryptSecret(value, passphrase);\n}\n\n/** Atomic write: temp file + rename. Preserves mode. */\nexport async function writeFileAtomic(\n  path: string,\n  data: string | Buffer,\n  mode: number,\n): Promise<void> {\n  await mkdir(dirname(path), { recursive: true });\n  const tmpPath = `${path}.tmp.${randomBytes(6).toString('hex')}`;\n  await writeFile(tmpPath, data, { mode });\n  try {\n    await rename(tmpPath, path);\n  } catch (e) {\n    // Best-effort cleanup of temp file on rename failure.\n    try {\n      const { unlink } = await import('node:fs/promises');\n      await unlink(tmpPath);\n    } catch {\n      /* ignore */\n    }\n    throw e;\n  }\n}\n\nasync function writeFileIfMissing(path: string, data: string, mode: number): Promise<void> {\n  try {\n    await writeFile(path, data, { mode, flag: 'wx' });\n  } catch (e: unknown) {\n    // wx fails with EEXIST if file exists - that's fine.\n    if (!isEexist(e)) {\n      throw e;\n    }\n  }\n}\n\nfunction isEexist(e: unknown): boolean {\n  return (\n    typeof e === 'object' && e !== null && 'code' in e && (e as { code: string }).code === 'EEXIST'\n  );\n}\n","/**\n * Zod schemas and types for `~/.elisym/config.yaml`.\n *\n * Split from `./global` so the schemas can be re-exported from the\n * browser-safe `@elisym/sdk` entry point without dragging in `node:fs/promises`\n * (which the loader/writer in `./global` needs).\n */\n\nimport { z } from 'zod';\n\nexport const SessionSpendLimitEntrySchema = z\n  .object({\n    chain: z.enum(['solana']),\n    token: z\n      .string()\n      .min(1)\n      .max(16)\n      .regex(/^[a-z0-9]+$/, 'token must be lowercase alphanumeric'),\n    mint: z.string().min(1).max(64).optional(),\n    amount: z.number().positive().finite(),\n  })\n  .strict();\n\nexport const GlobalConfigSchema = z\n  .object({\n    session_spend_limits: z.array(SessionSpendLimitEntrySchema).max(16).optional(),\n  })\n  .strict();\n\nexport type SessionSpendLimitEntry = z.infer<typeof SessionSpendLimitEntrySchema>;\nexport type GlobalConfig = z.infer<typeof GlobalConfigSchema>;\n","/**\n * Global (not per-agent) config stored at `~/.elisym/config.yaml`.\n *\n * Node.js/Bun only - reads and writes the filesystem. Browser code must not\n * import this module; import the schemas from `./global-schema` instead, or\n * the loader/writer from `@elisym/sdk/node`.\n */\n\nimport { readFile } from 'node:fs/promises';\nimport YAML from 'yaml';\nimport { writeFileAtomic } from '../agent-store/writer';\nimport { GlobalConfigSchema, type GlobalConfig } from './global-schema';\n\nexport {\n  GlobalConfigSchema,\n  SessionSpendLimitEntrySchema,\n  type GlobalConfig,\n  type SessionSpendLimitEntry,\n} from './global-schema';\n\nfunction isEnoent(e: unknown): boolean {\n  return (\n    typeof e === 'object' && e !== null && 'code' in e && (e as { code: string }).code === 'ENOENT'\n  );\n}\n\n/**\n * Read and validate `~/.elisym/config.yaml`. Returns `{}` if missing. Throws\n * on malformed YAML or schema violations — the MCP server treats these as fatal\n * at startup rather than silently ignoring bad overrides.\n */\nexport async function loadGlobalConfig(path: string): Promise<GlobalConfig> {\n  let raw: string;\n  try {\n    raw = await readFile(path, 'utf-8');\n  } catch (e) {\n    if (isEnoent(e)) {\n      return {};\n    }\n    throw e;\n  }\n  if (raw.trim() === '') {\n    return {};\n  }\n  const parsed: unknown = YAML.parse(raw);\n  return GlobalConfigSchema.parse(parsed ?? {});\n}\n\n/** Write the config YAML atomically. Validates via Zod before writing. */\nexport async function writeGlobalConfig(path: string, config: GlobalConfig): Promise<void> {\n  const validated = GlobalConfigSchema.parse(config);\n  const body = YAML.stringify(validated);\n  await writeFileAtomic(path, body, 0o644);\n}\n"]}

package/dist/rateLimiter-CoEmZkSX.d.cts

@@ -0,0 +1,45 @@
+/**
+ * Sliding-window rate limiter keyed by an arbitrary string (typically a
+ * customer pubkey). Each key gets at most `maxPerWindow` requests inside a
+ * rolling `windowMs`. Stale timestamps are pruned lazily on every `check`.
+ * When the tracked-key set grows past `maxKeys`, the least-recently-used
+ * key is evicted so an attacker cannot exhaust memory by cycling keys.
+ *
+ * Thread-safety: not required. Designed for single-threaded JS consumers
+ * (Node/Bun event loops, browser main thread). No timers - pruning happens
+ * inside `check` and `prune`.
+ */
+interface SlidingWindowLimiterOptions {
+    /** Rolling window width, in ms. */
+    windowMs: number;
+    /** Max hits allowed per key inside the window. */
+    maxPerWindow: number;
+    /** Cap on total tracked keys. LRU-evicted past this cap. */
+    maxKeys: number;
+}
+interface RateLimitDecision {
+    allowed: boolean;
+    /** Wall-clock timestamp (ms) when the limit window will reset for this key. */
+    resetAt: number;
+    /** Number of hits inside the current window after this call (or the attempted hit if denied). */
+    count: number;
+}
+interface SlidingWindowLimiter {
+    /** Record a hit against `key`; return whether it was allowed. */
+    check(key: string, now?: number): RateLimitDecision;
+    /**
+     * Inspect the current state for `key` without recording a hit. Useful
+     * when a single request must clear multiple limiters and callers want
+     * to avoid double-counting against one limiter after another denies.
+     */
+    peek(key: string, now?: number): RateLimitDecision;
+    /** Drop entries whose windows have fully elapsed. Bounded memory hygiene. */
+    prune(now?: number): void;
+    /** Current number of tracked keys. */
+    size(): number;
+    /** Clear all state. */
+    reset(): void;
+}
+declare function createSlidingWindowLimiter(options: SlidingWindowLimiterOptions): SlidingWindowLimiter;
+
+export { type RateLimitDecision as R, type SlidingWindowLimiter as S, type SlidingWindowLimiterOptions as a, createSlidingWindowLimiter as c };

package/dist/rateLimiter-CoEmZkSX.d.ts

@@ -0,0 +1,45 @@
+/**
+ * Sliding-window rate limiter keyed by an arbitrary string (typically a
+ * customer pubkey). Each key gets at most `maxPerWindow` requests inside a
+ * rolling `windowMs`. Stale timestamps are pruned lazily on every `check`.
+ * When the tracked-key set grows past `maxKeys`, the least-recently-used
+ * key is evicted so an attacker cannot exhaust memory by cycling keys.
+ *
+ * Thread-safety: not required. Designed for single-threaded JS consumers
+ * (Node/Bun event loops, browser main thread). No timers - pruning happens
+ * inside `check` and `prune`.
+ */
+interface SlidingWindowLimiterOptions {
+    /** Rolling window width, in ms. */
+    windowMs: number;
+    /** Max hits allowed per key inside the window. */
+    maxPerWindow: number;
+    /** Cap on total tracked keys. LRU-evicted past this cap. */
+    maxKeys: number;
+}
+interface RateLimitDecision {
+    allowed: boolean;
+    /** Wall-clock timestamp (ms) when the limit window will reset for this key. */
+    resetAt: number;
+    /** Number of hits inside the current window after this call (or the attempted hit if denied). */
+    count: number;
+}
+interface SlidingWindowLimiter {
+    /** Record a hit against `key`; return whether it was allowed. */
+    check(key: string, now?: number): RateLimitDecision;
+    /**
+     * Inspect the current state for `key` without recording a hit. Useful
+     * when a single request must clear multiple limiters and callers want
+     * to avoid double-counting against one limiter after another denies.
+     */
+    peek(key: string, now?: number): RateLimitDecision;
+    /** Drop entries whose windows have fully elapsed. Bounded memory hygiene. */
+    prune(now?: number): void;
+    /** Current number of tracked keys. */
+    size(): number;
+    /** Clear all state. */
+    reset(): void;
+}
+declare function createSlidingWindowLimiter(options: SlidingWindowLimiterOptions): SlidingWindowLimiter;
+
+export { type RateLimitDecision as R, type SlidingWindowLimiter as S, type SlidingWindowLimiterOptions as a, createSlidingWindowLimiter as c };

package/dist/skills.cjs

@@ -13,303 +13,7 @@ function _interopDefault (e) { return e && e.__esModule ? e : { default: e }; }
 var YAML__default = /*#__PURE__*/_interopDefault(YAML);
 var Decimal__default = /*#__PURE__*/_interopDefault(Decimal);
 
-// src/skills/llmClient.ts
-var LLM_TIMEOUT_MS = 12e4;
-var MAX_RETRIES = 2;
-var RETRYABLE_STATUSES = /* @__PURE__ */ new Set([429, 500, 502, 503, 504]);
-var DEFAULT_MAX_TOKENS = 4096;
-var DEFAULT_ANTHROPIC_MODEL = "claude-haiku-4-5-20251001";
-var DEFAULT_OPENAI_MODEL = "gpt-4o-mini";
-function createAbortError() {
-  const err = new Error("The operation was aborted");
-  err.name = "AbortError";
-  return err;
-}
-function sleepWithSignal(ms, signal) {
-  if (signal?.aborted) {
-    return Promise.reject(createAbortError());
-  }
-  if (!signal) {
-    return new Promise((resolve2) => setTimeout(resolve2, ms));
-  }
-  return new Promise((resolve2, reject) => {
-    const cleanup = () => {
-      clearTimeout(timer);
-      signal.removeEventListener("abort", onAbort);
-    };
-    const onAbort = () => {
-      cleanup();
-      reject(createAbortError());
-    };
-    const timer = setTimeout(() => {
-      cleanup();
-      resolve2();
-    }, ms);
-    signal.addEventListener("abort", onAbort, { once: true });
-  });
-}
-async function fetchWithTimeout(url, init, signal) {
-  if (signal?.aborted) {
-    throw createAbortError();
-  }
-  const controller = new AbortController();
-  const timer = setTimeout(() => controller.abort(), LLM_TIMEOUT_MS);
-  const onAbort = () => controller.abort();
-  signal?.addEventListener("abort", onAbort, { once: true });
-  try {
-    return await fetch(url, { ...init, signal: controller.signal });
-  } finally {
-    clearTimeout(timer);
-    signal?.removeEventListener("abort", onAbort);
-  }
-}
-async function fetchWithRetry(url, init, signal) {
-  for (let attempt = 0; ; attempt++) {
-    let response;
-    try {
-      response = await fetchWithTimeout(url, init, signal);
-    } catch (error) {
-      const name = error instanceof Error ? error.name : "";
-      if (attempt >= MAX_RETRIES || name === "AbortError") {
-        throw error;
-      }
-      await sleepWithSignal(Math.min(1e3 * 2 ** attempt, 8e3), signal);
-      continue;
-    }
-    if (response.ok || attempt >= MAX_RETRIES || !RETRYABLE_STATUSES.has(response.status)) {
-      return response;
-    }
-    const retryAfter = response.headers.get("retry-after");
-    const delay = retryAfter ? Math.min(parseInt(retryAfter, 10) * 1e3 || 1e3 * 2 ** attempt, 3e4) : Math.min(1e3 * 2 ** attempt, 8e3);
-    await response.body?.cancel().catch(() => void 0);
-    await sleepWithSignal(delay, signal);
-  }
-}
-var AnthropicClient = class {
-  constructor(config) {
-    this.config = config;
-  }
-  async complete(systemPrompt, userInput, signal) {
-    const response = await fetchWithRetry(
-      "https://api.anthropic.com/v1/messages",
-      {
-        method: "POST",
-        headers: {
-          "Content-Type": "application/json",
-          "x-api-key": this.config.apiKey,
-          "anthropic-version": "2023-06-01"
-        },
-        body: JSON.stringify({
-          model: this.config.model,
-          max_tokens: this.config.maxTokens,
-          system: systemPrompt,
-          messages: [{ role: "user", content: userInput }]
-        })
-      },
-      signal
-    );
-    if (!response.ok) {
-      throw new Error(`Anthropic API error: ${response.status} ${await response.text()}`);
-    }
-    const data = await response.json();
-    const textBlock = data.content?.find((block) => block.type === "text");
-    return textBlock?.text ?? "";
-  }
-  async completeWithTools(systemPrompt, messages, tools, signal) {
-    const anthropicTools = tools.map((tool) => ({
-      name: tool.name,
-      description: tool.description,
-      input_schema: {
-        type: "object",
-        properties: Object.fromEntries(
-          tool.parameters.map((param) => [
-            param.name,
-            { type: "string", description: param.description }
-          ])
-        ),
-        required: tool.parameters.filter((param) => param.required).map((param) => param.name)
-      }
-    }));
-    const response = await fetchWithRetry(
-      "https://api.anthropic.com/v1/messages",
-      {
-        method: "POST",
-        headers: {
-          "Content-Type": "application/json",
-          "x-api-key": this.config.apiKey,
-          "anthropic-version": "2023-06-01"
-        },
-        body: JSON.stringify({
-          model: this.config.model,
-          max_tokens: this.config.maxTokens,
-          system: systemPrompt,
-          messages,
-          tools: anthropicTools
-        })
-      },
-      signal
-    );
-    if (!response.ok) {
-      throw new Error(`Anthropic API error: ${response.status} ${await response.text()}`);
-    }
-    const data = await response.json();
-    const content = data.content ?? [];
-    const toolUses = content.filter((block) => block.type === "tool_use");
-    if (toolUses.length > 0) {
-      const calls = toolUses.map((block) => ({
-        id: block.id ?? "",
-        name: block.name ?? "",
-        arguments: block.input ?? {}
-      }));
-      return {
-        type: "tool_use",
-        calls,
-        assistantMessage: { role: "assistant", content }
-      };
-    }
-    const textBlock = content.find((block) => block.type === "text");
-    return { type: "text", text: textBlock?.text ?? "" };
-  }
-  formatToolResultMessages(results) {
-    return [
-      {
-        role: "user",
-        content: results.map((result) => ({
-          type: "tool_result",
-          tool_use_id: result.callId,
-          content: result.content
-        }))
-      }
-    ];
-  }
-};
-var OpenAIClient = class {
-  constructor(config) {
-    this.config = config;
-  }
-  isReasoningModel() {
-    return /^o\d/.test(this.config.model);
-  }
-  async complete(systemPrompt, userInput, signal) {
-    const reasoning = this.isReasoningModel();
-    const response = await fetchWithRetry(
-      "https://api.openai.com/v1/chat/completions",
-      {
-        method: "POST",
-        headers: {
-          "Content-Type": "application/json",
-          Authorization: `Bearer ${this.config.apiKey}`
-        },
-        body: JSON.stringify({
-          model: this.config.model,
-          ...reasoning ? { max_completion_tokens: this.config.maxTokens } : { max_tokens: this.config.maxTokens },
-          messages: [
-            { role: reasoning ? "developer" : "system", content: systemPrompt },
-            { role: "user", content: userInput }
-          ]
-        })
-      },
-      signal
-    );
-    if (!response.ok) {
-      throw new Error(`OpenAI API error: ${response.status} ${await response.text()}`);
-    }
-    const data = await response.json();
-    return data.choices?.[0]?.message?.content ?? "";
-  }
-  async completeWithTools(systemPrompt, messages, tools, signal) {
-    const openaiTools = tools.map((tool) => ({
-      type: "function",
-      function: {
-        name: tool.name,
-        description: tool.description,
-        parameters: {
-          type: "object",
-          properties: Object.fromEntries(
-            tool.parameters.map((param) => [
-              param.name,
-              { type: "string", description: param.description }
-            ])
-          ),
-          required: tool.parameters.filter((param) => param.required).map((param) => param.name)
-        }
-      }
-    }));
-    const reasoning = this.isReasoningModel();
-    const response = await fetchWithRetry(
-      "https://api.openai.com/v1/chat/completions",
-      {
-        method: "POST",
-        headers: {
-          "Content-Type": "application/json",
-          Authorization: `Bearer ${this.config.apiKey}`
-        },
-        body: JSON.stringify({
-          model: this.config.model,
-          ...reasoning ? { max_completion_tokens: this.config.maxTokens } : { max_tokens: this.config.maxTokens },
-          messages: [
-            { role: reasoning ? "developer" : "system", content: systemPrompt },
-            ...messages
-          ],
-          tools: openaiTools
-        })
-      },
-      signal
-    );
-    if (!response.ok) {
-      throw new Error(`OpenAI API error: ${response.status} ${await response.text()}`);
-    }
-    const data = await response.json();
-    const message = data.choices?.[0]?.message;
-    const toolCalls = message?.tool_calls ?? [];
-    if (toolCalls.length > 0) {
-      const calls = toolCalls.map((call) => {
-        let args;
-        try {
-          args = JSON.parse(call.function?.arguments ?? "{}");
-        } catch {
-          args = {};
-        }
-        return { id: call.id ?? "", name: call.function?.name ?? "", arguments: args };
-      });
-      return { type: "tool_use", calls, assistantMessage: message };
-    }
-    return { type: "text", text: message?.content ?? "" };
-  }
-  formatToolResultMessages(results) {
-    return results.map((result) => ({
-      role: "tool",
-      tool_call_id: result.callId,
-      content: result.content
-    }));
-  }
-};
-function createAnthropicClient(config) {
-  if (!config.apiKey) {
-    throw new Error("ANTHROPIC_API_KEY is required for skill runtime");
-  }
-  return new AnthropicClient({
-    apiKey: config.apiKey,
-    model: config.model ?? DEFAULT_ANTHROPIC_MODEL,
-    maxTokens: config.maxTokens ?? DEFAULT_MAX_TOKENS
-  });
-}
-function createOpenAIClient(config) {
-  if (!config.apiKey) {
-    throw new Error("OPENAI_API_KEY is required for skill runtime");
-  }
-  return new OpenAIClient({
-    apiKey: config.apiKey,
-    model: config.model ?? DEFAULT_OPENAI_MODEL,
-    maxTokens: config.maxTokens ?? DEFAULT_MAX_TOKENS
-  });
-}
-function createLlmClient(config) {
-  if (config.provider === "openai") {
-    return createOpenAIClient(config);
-  }
-  return createAnthropicClient(config);
-}
+// src/skills/scriptSkill.ts
 var MAX_SCRIPT_OUTPUT = 1e6;
 var DEFAULT_SCRIPT_TIMEOUT_MS = 6e4;
 function runScript(cmd, args, opts) {
@@ -688,7 +392,6 @@ function parseAssetAmount(asset, human) {
 Decimal__default.default.clone({ toExpNeg: -100, toExpPos: 100, precision: 50 });
 
 // src/skills/loader.ts
-var VALID_PROVIDERS = ["anthropic", "openai"];
 var MAX_TOKENS_LIMIT = 2e5;
 var DEFAULT_MAX_TOOL_ROUNDS = 10;
 var VALID_MODES = [
@@ -860,13 +563,8 @@ function validateLlmOverride(skillName, frontmatter, mode) {
   }
   const override = {};
   if (hasProvider && hasModel) {
-    if (typeof frontmatter.provider !== "string") {
-      throw new Error(`SKILL.md "${skillName}": "provider" must be a string`);
-    }
-    if (!VALID_PROVIDERS.includes(frontmatter.provider)) {
-      throw new Error(
-        `SKILL.md "${skillName}": invalid provider "${frontmatter.provider}". Allowed: ${VALID_PROVIDERS.join(", ")}`
-      );
+    if (typeof frontmatter.provider !== "string" || frontmatter.provider.length === 0) {
+      throw new Error(`SKILL.md "${skillName}": "provider" must be a non-empty string`);
     }
     if (typeof frontmatter.model !== "string" || frontmatter.model.length === 0) {
       throw new Error(`SKILL.md "${skillName}": "model" must be a non-empty string`);
@@ -884,6 +582,33 @@ function validateLlmOverride(skillName, frontmatter, mode) {
   }
   return override;
 }
+var MAX_RATE_LIMIT_WINDOW_SECS = 86400;
+var MAX_RATE_LIMIT_PER_WINDOW = 1e4;
+function validateRateLimit(skillName, raw) {
+  if (raw === void 0 || raw === null) {
+    return void 0;
+  }
+  if (typeof raw !== "object") {
+    throw new Error(`SKILL.md "${skillName}": "rate_limit" must be an object`);
+  }
+  const record = raw;
+  const perWindowSecs = record.per_window_secs;
+  const maxPerWindow = record.max_per_window;
+  if (typeof perWindowSecs !== "number" || !Number.isInteger(perWindowSecs) || perWindowSecs < 1 || perWindowSecs > MAX_RATE_LIMIT_WINDOW_SECS) {
+    throw new Error(
+      `SKILL.md "${skillName}": "rate_limit.per_window_secs" must be an integer between 1 and ${MAX_RATE_LIMIT_WINDOW_SECS}`
+    );
+  }
+  if (typeof maxPerWindow !== "number" || !Number.isInteger(maxPerWindow) || maxPerWindow < 1 || maxPerWindow > MAX_RATE_LIMIT_PER_WINDOW) {
+    throw new Error(
+      `SKILL.md "${skillName}": "rate_limit.max_per_window" must be an integer between 1 and ${MAX_RATE_LIMIT_PER_WINDOW}`
+    );
+  }
+  return {
+    perWindowMs: perWindowSecs * 1e3,
+    maxPerWindow
+  };
+}
 function validateScriptTimeoutMs(skillName, raw) {
   if (raw === void 0 || raw === null) {
     return void 0;
@@ -1026,6 +751,7 @@ function validateSkillFrontmatter(frontmatter, systemPrompt, options = {}) {
   const image = typeof frontmatter.image === "string" ? frontmatter.image : void 0;
   const imageFile = typeof frontmatter.image_file === "string" ? frontmatter.image_file : void 0;
   const llmOverride = validateLlmOverride(frontmatter.name, frontmatter, mode);
+  const rateLimit = validateRateLimit(frontmatter.name, frontmatter.rate_limit);
   return {
     name: frontmatter.name,
     description: frontmatter.description,
@@ -1042,7 +768,8 @@ function validateSkillFrontmatter(frontmatter, systemPrompt, options = {}) {
     outputFile,
     script,
     scriptArgs,
-    scriptTimeoutMs
+    scriptTimeoutMs,
+    rateLimit
   };
 }
 function buildSkillFromParsed(parsed, skillDir, logger) {
@@ -1154,9 +881,6 @@ exports.MAX_STATIC_FILE_SIZE = MAX_STATIC_FILE_SIZE;
 exports.ScriptSkill = ScriptSkill;
 exports.StaticFileSkill = StaticFileSkill;
 exports.StaticScriptSkill = StaticScriptSkill;
-exports.createAnthropicClient = createAnthropicClient;
-exports.createLlmClient = createLlmClient;
-exports.createOpenAIClient = createOpenAIClient;
 exports.loadSkillsFromDir = loadSkillsFromDir;
 exports.parseSkillMd = parseSkillMd;
 exports.resolveInsidePath = resolveInsidePath;