@fluxra-ai/fluxra-cli 0.1.0

package/dist/core/locking/profile-lock.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Profile-level locking mechanism
+ */
+export interface ProfileLock {
+    profileName: string;
+    lockPath: string;
+    pid: number;
+    acquiredAt: string;
+}
+/**
+ * Get the lock file path for a profile
+ */
+export declare function getLockPath(profileName: string): string;
+/**
+ * Try to acquire a profile lock
+ * Returns lock object if successful, null if already locked
+ */
+export declare function acquireLock(profileName: string): ProfileLock | null;
+/**
+ * Release a profile lock
+ */
+export declare function releaseLock(lock: ProfileLock): void;
+/**
+ * Execute a function with a profile lock
+ * Automatically acquires and releases the lock
+ */
+export declare function withLock<T>(profileName: string, fn: () => T): T;
+/**
+ * Check if a profile is currently locked
+ */
+export declare function isProfileLocked(profileName: string): boolean;
+//# sourceMappingURL=profile-lock.d.ts.map

package/dist/core/locking/profile-lock.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile-lock.d.ts","sourceRoot":"","sources":["../../../src/core/locking/profile-lock.ts"],"names":[],"mappings":"AAAA;;GAEG;AAMH,MAAM,WAAW,WAAW;IAC1B,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAEvD;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,WAAW,EAAE,MAAM,GAAG,WAAW,GAAG,IAAI,CAwCnE;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,WAAW,GAAG,IAAI,CAQnD;AAED;;;GAGG;AACH,wBAAgB,QAAQ,CAAC,CAAC,EACxB,WAAW,EAAE,MAAM,EACnB,EAAE,EAAE,MAAM,CAAC,GACV,CAAC,CAeH;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAkB5D"}

package/dist/core/locking/profile-lock.js

@@ -0,0 +1,104 @@
+/**
+ * Profile-level locking mechanism
+ */
+import fs from 'node:fs';
+import path from 'node:path';
+import { getProfilePath } from '../filesystem/paths.js';
+/**
+ * Get the lock file path for a profile
+ */
+export function getLockPath(profileName) {
+    return path.join(getProfilePath(profileName), '.lock');
+}
+/**
+ * Try to acquire a profile lock
+ * Returns lock object if successful, null if already locked
+ */
+export function acquireLock(profileName) {
+    const lockPath = getLockPath(profileName);
+    const pid = process.pid;
+    const acquiredAt = new Date().toISOString();
+    // Check if lock exists and is still valid (process alive)
+    if (fs.existsSync(lockPath)) {
+        try {
+            const lockContent = fs.readFileSync(lockPath, 'utf-8');
+            const existingLock = JSON.parse(lockContent);
+            // Check if the process that created the lock is still running
+            try {
+                // Signal 0 checks if process exists without actually sending a signal
+                process.kill(existingLock.pid, 0);
+                // Process is alive, lock is valid
+                return null;
+            }
+            catch {
+                // Process is dead, stale lock - remove it
+                console.warn('Removing stale lock file');
+                fs.unlinkSync(lockPath);
+            }
+        }
+        catch {
+            // Invalid lock file - remove it
+            fs.unlinkSync(lockPath);
+        }
+    }
+    // Acquire lock
+    const lock = {
+        profileName,
+        lockPath,
+        pid,
+        acquiredAt,
+    };
+    fs.writeFileSync(lockPath, JSON.stringify(lock, null, 2), 'utf-8');
+    return lock;
+}
+/**
+ * Release a profile lock
+ */
+export function releaseLock(lock) {
+    try {
+        if (fs.existsSync(lock.lockPath)) {
+            fs.unlinkSync(lock.lockPath);
+        }
+    }
+    catch {
+        // Lock already removed, ignore
+    }
+}
+/**
+ * Execute a function with a profile lock
+ * Automatically acquires and releases the lock
+ */
+export function withLock(profileName, fn) {
+    const lock = acquireLock(profileName);
+    if (!lock) {
+        throw new Error(`Profile '${profileName}' is locked by another process. ` +
+            'Wait for the other operation to complete or remove the lock file manually.');
+    }
+    try {
+        return fn();
+    }
+    finally {
+        releaseLock(lock);
+    }
+}
+/**
+ * Check if a profile is currently locked
+ */
+export function isProfileLocked(profileName) {
+    const lockPath = getLockPath(profileName);
+    if (!fs.existsSync(lockPath)) {
+        return false;
+    }
+    try {
+        const lockContent = fs.readFileSync(lockPath, 'utf-8');
+        const existingLock = JSON.parse(lockContent);
+        // Check if process is still running
+        process.kill(existingLock.pid, 0);
+        return true;
+    }
+    catch {
+        // Stale lock or invalid file
+        return false;
+    }
+}
+//# sourceMappingURL=profile-lock.js.map

package/dist/core/locking/profile-lock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile-lock.js","sourceRoot":"","sources":["../../../src/core/locking/profile-lock.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AASxD;;GAEG;AACH,MAAM,UAAU,WAAW,CAAC,WAAmB;IAC7C,OAAO,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC,CAAC;AACzD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,WAAmB;IAC7C,MAAM,QAAQ,GAAG,WAAW,CAAC,WAAW,CAAC,CAAC;IAC1C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IACxB,MAAM,UAAU,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAE5C,0DAA0D;IAC1D,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5B,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACvD,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAgB,CAAC;YAE5D,8DAA8D;YAC9D,IAAI,CAAC;gBACH,sEAAsE;gBACtE,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;gBAElC,kCAAkC;gBAClC,OAAO,IAAI,CAAC;YACd,CAAC;YAAC,MAAM,CAAC;gBACP,0CAA0C;gBAC1C,OAAO,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;gBACzC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,gCAAgC;YAChC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IAED,eAAe;IACf,MAAM,IAAI,GAAgB;QACxB,WAAW;QACX,QAAQ;QACR,GAAG;QACH,UAAU;KACX,CAAC;IAEF,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IAEnE,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,WAAW,CAAC,IAAiB;IAC3C,IAAI,CAAC;QACH,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YACjC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,+BAA+B;IACjC,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,QAAQ,CACtB,WAAmB,EACnB,EAAW;IAEX,MAAM,IAAI,GAAG,WAAW,CAAC,WAAW,CAAC,CAAC;IAEtC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CACb,YAAY,WAAW,kCAAkC;YACzD,4EAA4E,CAC7E,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,OAAO,EAAE,EAAE,CAAC;IACd,CAAC;YAAS,CAAC;QACT,WAAW,CAAC,IAAI,CAAC,CAAC;IACpB,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,WAAmB;IACjD,MAAM,QAAQ,GAAG,WAAW,CAAC,WAAW,CAAC,CAAC;IAE1C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACvD,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAgB,CAAC;QAE5D,oCAAoC;QACpC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAClC,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,6BAA6B;QAC7B,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/core/profiles/profile-service.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Profile service - lifecycle management for profiles
+ */
+import type { ProfileMetadata } from './profile-types.js';
+/**
+ * Create a new profile
+ */
+export declare function createProfile(name: string, options?: {
+    setDefault?: boolean;
+    baseUrl?: string;
+    environment?: string;
+}): ProfileMetadata;
+/**
+ * List all profiles
+ */
+export declare function listProfiles(): Array<{
+    name: string;
+    metadata: ProfileMetadata;
+}>;
+/**
+ * Set the default profile
+ */
+export declare function useProfile(name: string): void;
+/**
+ * Show profile details
+ */
+export declare function showProfile(name: string): {
+    metadata: ProfileMetadata;
+    hasSecrets: boolean;
+};
+/**
+ * Get the active profile name (from global config or first available)
+ */
+export declare function getActiveProfile(): string | undefined;
+//# sourceMappingURL=profile-service.d.ts.map

package/dist/core/profiles/profile-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile-service.d.ts","sourceRoot":"","sources":["../../../src/core/profiles/profile-service.ts"],"names":[],"mappings":"AAAA;;GAEG;AAWH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAI1D;;GAEG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE;IACnD,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;CACjB,GAAG,eAAe,CAqDvB;AAED;;GAEG;AACH,wBAAgB,YAAY,IAAI,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,eAAe,CAAA;CAAE,CAAC,CA4BjF;AAED;;GAEG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAO7C;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG;IAAE,QAAQ,EAAE,eAAe,CAAC;IAAC,UAAU,EAAE,OAAO,CAAA;CAAE,CAa5F;AAED;;GAEG;AACH,wBAAgB,gBAAgB,IAAI,MAAM,GAAG,SAAS,CAGrD"}

package/dist/core/profiles/profile-service.js

@@ -0,0 +1,119 @@
+/**
+ * Profile service - lifecycle management for profiles
+ */
+import fs from 'node:fs';
+import path from 'node:path';
+import { getProfilePath, getProfileMetaPath, getStateDir, getModuleDir, ensureDir, } from '../filesystem/paths.js';
+import { ProfileMetadataSchema } from './profile-types.js';
+import { loadGlobalConfig, updateGlobalConfig } from '../config/global-config.js';
+/**
+ * Create a new profile
+ */
+export function createProfile(name, options = {}) {
+    // Validate profile name
+    if (!name || name.trim().length === 0) {
+        throw new Error('Profile name cannot be empty');
+    }
+    if (name.includes('/') || name.includes('\\')) {
+        throw new Error('Profile name cannot contain path separators');
+    }
+    // Check if profile already exists
+    const metaPath = getProfileMetaPath(name);
+    if (fs.existsSync(metaPath)) {
+        throw new Error(`Profile '${name}' already exists`);
+    }
+    // Create profile directories
+    const profileDir = getProfilePath(name);
+    ensureDir(profileDir);
+    ensureDir(getStateDir(name));
+    ensureDir(getModuleDir(name, 'chat'));
+    // Create profile metadata
+    const now = new Date().toISOString();
+    const metadata = {
+        name,
+        environment: options.environment || 'production',
+        baseUrl: options.baseUrl,
+        createdAt: now,
+        updatedAt: now,
+    };
+    fs.writeFileSync(metaPath, JSON.stringify(metadata, null, 2), 'utf-8');
+    // Create empty secrets file
+    const secretsPath = path.join(profileDir, 'secrets.enc.json');
+    if (!fs.existsSync(secretsPath)) {
+        fs.writeFileSync(secretsPath, JSON.stringify({}, null, 2), 'utf-8');
+        // Set strict permissions (owner read/write only)
+        try {
+            fs.chmodSync(secretsPath, 0o600);
+        }
+        catch {
+            // Permission change may not be supported on all systems
+            console.warn('Warning: Could not set strict permissions on secrets file');
+        }
+    }
+    // Set as default if requested
+    if (options.setDefault) {
+        updateGlobalConfig({ defaultProfile: name });
+    }
+    return metadata;
+}
+/**
+ * List all profiles
+ */
+export function listProfiles() {
+    const profilesDir = getProfilePath(''); // Gets profiles root
+    const parentDir = path.dirname(profilesDir);
+    if (!fs.existsSync(profilesDir)) {
+        return [];
+    }
+    const entries = fs.readdirSync(profilesDir, { withFileTypes: true });
+    const profiles = [];
+    for (const entry of entries) {
+        if (entry.isDirectory()) {
+            const metaPath = getProfileMetaPath(entry.name);
+            if (fs.existsSync(metaPath)) {
+                try {
+                    const raw = fs.readFileSync(metaPath, 'utf-8');
+                    const parsed = JSON.parse(raw);
+                    const metadata = ProfileMetadataSchema.parse(parsed);
+                    profiles.push({ name: entry.name, metadata });
+                }
+                catch (error) {
+                    console.warn(`Warning: Could not read profile '${entry.name}': ${error instanceof Error ? error.message : String(error)}`);
+                }
+            }
+        }
+    }
+    return profiles;
+}
+/**
+ * Set the default profile
+ */
+export function useProfile(name) {
+    const metaPath = getProfileMetaPath(name);
+    if (!fs.existsSync(metaPath)) {
+        throw new Error(`Profile '${name}' does not exist`);
+    }
+    updateGlobalConfig({ defaultProfile: name });
+}
+/**
+ * Show profile details
+ */
+export function showProfile(name) {
+    const metaPath = getProfileMetaPath(name);
+    if (!fs.existsSync(metaPath)) {
+        throw new Error(`Profile '${name}' does not exist`);
+    }
+    const raw = fs.readFileSync(metaPath, 'utf-8');
+    const metadata = ProfileMetadataSchema.parse(JSON.parse(raw));
+    const secretsPath = path.join(getProfilePath(name), 'secrets.enc.json');
+    const hasSecrets = fs.existsSync(secretsPath);
+    return { metadata, hasSecrets };
+}
+/**
+ * Get the active profile name (from global config or first available)
+ */
+export function getActiveProfile() {
+    const config = loadGlobalConfig();
+    return config.defaultProfile;
+}
+//# sourceMappingURL=profile-service.js.map

package/dist/core/profiles/profile-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile-service.js","sourceRoot":"","sources":["../../../src/core/profiles/profile-service.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EACL,cAAc,EACd,kBAAkB,EAClB,WAAW,EACX,YAAY,EACZ,SAAS,GACV,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAElF;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,UAIxC,EAAE;IACJ,wBAAwB;IACxB,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAClD,CAAC;IAED,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,CAAC;IAED,kCAAkC;IAClC,MAAM,QAAQ,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IAC1C,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,YAAY,IAAI,kBAAkB,CAAC,CAAC;IACtD,CAAC;IAED,6BAA6B;IAC7B,MAAM,UAAU,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IACxC,SAAS,CAAC,UAAU,CAAC,CAAC;IACtB,SAAS,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7B,SAAS,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IAEtC,0BAA0B;IAC1B,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,MAAM,QAAQ,GAAoB;QAChC,IAAI;QACJ,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,YAAY;QAChD,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,SAAS,EAAE,GAAG;QACd,SAAS,EAAE,GAAG;KACf,CAAC;IAEF,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IAEvE,4BAA4B;IAC5B,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,kBAAkB,CAAC,CAAC;IAC9D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAChC,EAAE,CAAC,aAAa,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QACpE,iDAAiD;QACjD,IAAI,CAAC;YACH,EAAE,CAAC,SAAS,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;QACnC,CAAC;QAAC,MAAM,CAAC;YACP,wDAAwD;YACxD,OAAO,CAAC,IAAI,CAAC,2DAA2D,CAAC,CAAC;QAC5E,CAAC;IACH,CAAC;IAED,8BAA8B;IAC9B,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;QACvB,kBAAkB,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/C,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY;IAC1B,MAAM,WAAW,GAAG,cAAc,CAAC,EAAE,CAAC,CAAC,CAAC,qBAAqB;IAC7D,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAE5C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAChC,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,WAAW,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IACrE,MAAM,QAAQ,GAAuD,EAAE,CAAC;IAExE,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,MAAM,QAAQ,GAAG,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAChD,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC5B,IAAI,CAAC;oBACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;oBAC/C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;oBAC/B,MAAM,QAAQ,GAAG,qBAAqB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;oBACrD,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;gBAChD,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,OAAO,CAAC,IAAI,CAAC,oCAAoC,KAAK,CAAC,IAAI,MAAM,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBAC7H,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,MAAM,QAAQ,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IAC1C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,YAAY,IAAI,kBAAkB,CAAC,CAAC;IACtD,CAAC;IAED,kBAAkB,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;AAC/C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,MAAM,QAAQ,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IAC1C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,YAAY,IAAI,kBAAkB,CAAC,CAAC;IACtD,CAAC;IAED,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC/C,MAAM,QAAQ,GAAG,qBAAqB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IAE9D,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,kBAAkB,CAAC,CAAC;IACxE,MAAM,UAAU,GAAG,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;IAE9C,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;AAClC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB;IAC9B,MAAM,MAAM,GAAG,gBAAgB,EAAE,CAAC;IAClC,OAAO,MAAM,CAAC,cAAc,CAAC;AAC/B,CAAC"}

package/dist/core/profiles/profile-types.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Profile metadata types and schema
+ */
+import { z } from 'zod';
+export declare const ProfileMetadataSchema: z.ZodObject<{
+    name: z.ZodString;
+    agentId: z.ZodOptional<z.ZodString>;
+    environment: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+    baseUrl: z.ZodOptional<z.ZodString>;
+    createdAt: z.ZodString;
+    updatedAt: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    name: string;
+    environment: string;
+    createdAt: string;
+    updatedAt: string;
+    agentId?: string | undefined;
+    baseUrl?: string | undefined;
+}, {
+    name: string;
+    createdAt: string;
+    updatedAt: string;
+    agentId?: string | undefined;
+    environment?: string | undefined;
+    baseUrl?: string | undefined;
+}>;
+export type ProfileMetadata = z.infer<typeof ProfileMetadataSchema>;
+//# sourceMappingURL=profile-types.d.ts.map

package/dist/core/profiles/profile-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile-types.d.ts","sourceRoot":"","sources":["../../../src/core/profiles/profile-types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;EAOhC,CAAC;AAEH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC"}

package/dist/core/profiles/profile-types.js

@@ -0,0 +1,13 @@
+/**
+ * Profile metadata types and schema
+ */
+import { z } from 'zod';
+export const ProfileMetadataSchema = z.object({
+    name: z.string().min(1).max(100),
+    agentId: z.string().optional(),
+    environment: z.string().optional().default('production'),
+    baseUrl: z.string().url().optional(),
+    createdAt: z.string().datetime(),
+    updatedAt: z.string().datetime(),
+});
+//# sourceMappingURL=profile-types.js.map

package/dist/core/profiles/profile-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile-types.js","sourceRoot":"","sources":["../../../src/core/profiles/profile-types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAChC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC;IACxD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACpC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACjC,CAAC,CAAC"}

package/dist/core/secrets/secrets-service.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Secrets service - secure storage and retrieval
+ */
+import type { Secrets } from './secrets-types.js';
+/**
+ * Load secrets for a profile
+ */
+export declare function loadSecrets(profileName: string): Secrets;
+/**
+ * Save secrets for a profile with strict permissions
+ */
+export declare function saveSecrets(profileName: string, secrets: Secrets): void;
+/**
+ * Update specific secret fields
+ */
+export declare function updateSecrets(profileName: string, updates: Partial<Secrets>): Secrets;
+/**
+ * Clear all secrets for a profile
+ */
+export declare function clearSecrets(profileName: string): void;
+/**
+ * Check if secrets file exists
+ */
+export declare function hasSecrets(profileName: string): boolean;
+//# sourceMappingURL=secrets-service.d.ts.map

package/dist/core/secrets/secrets-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets-service.d.ts","sourceRoot":"","sources":["../../../src/core/secrets/secrets-service.ts"],"names":[],"mappings":"AAAA;;GAEG;AAMH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAGlD;;GAEG;AACH,wBAAgB,WAAW,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAiBxD;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,IAAI,CAevE;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAKrF;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAEtD;AAED;;GAEG;AACH,wBAAgB,UAAU,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAGvD"}

package/dist/core/secrets/secrets-service.js

@@ -0,0 +1,67 @@
+/**
+ * Secrets service - secure storage and retrieval
+ */
+import fs from 'node:fs';
+import { z } from 'zod';
+import { getSecretsPath, getProfilePath, ensureDir } from '../filesystem/paths.js';
+import { SecretsSchema } from './secrets-types.js';
+/**
+ * Load secrets for a profile
+ */
+export function loadSecrets(profileName) {
+    const secretsPath = getSecretsPath(profileName);
+    if (!fs.existsSync(secretsPath)) {
+        return {};
+    }
+    try {
+        const raw = fs.readFileSync(secretsPath, 'utf-8');
+        const parsed = JSON.parse(raw);
+        return SecretsSchema.parse(parsed);
+    }
+    catch (error) {
+        if (error instanceof z.ZodError) {
+            throw new Error(`Invalid secrets file for profile '${profileName}': ${error.errors.map(e => e.message).join(', ')}`);
+        }
+        throw new Error(`Failed to load secrets for profile '${profileName}': ${error instanceof Error ? error.message : String(error)}`);
+    }
+}
+/**
+ * Save secrets for a profile with strict permissions
+ */
+export function saveSecrets(profileName, secrets) {
+    const profileDir = getProfilePath(profileName);
+    ensureDir(profileDir);
+    const secretsPath = getSecretsPath(profileName);
+    const validated = SecretsSchema.parse(secrets);
+    // Write with strict permissions (owner read/write only)
+    fs.writeFileSync(secretsPath, JSON.stringify(validated, null, 2), 'utf-8');
+    try {
+        fs.chmodSync(secretsPath, 0o600);
+    }
+    catch {
+        console.warn('Warning: Could not set strict permissions on secrets file');
+    }
+}
+/**
+ * Update specific secret fields
+ */
+export function updateSecrets(profileName, updates) {
+    const current = loadSecrets(profileName);
+    const merged = { ...current, ...updates };
+    saveSecrets(profileName, merged);
+    return merged;
+}
+/**
+ * Clear all secrets for a profile
+ */
+export function clearSecrets(profileName) {
+    saveSecrets(profileName, {});
+}
+/**
+ * Check if secrets file exists
+ */
+export function hasSecrets(profileName) {
+    const secretsPath = getSecretsPath(profileName);
+    return fs.existsSync(secretsPath);
+}
+//# sourceMappingURL=secrets-service.js.map

package/dist/core/secrets/secrets-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets-service.js","sourceRoot":"","sources":["../../../src/core/secrets/secrets-service.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AAEzB,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAEnF,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAEnD;;GAEG;AACH,MAAM,UAAU,WAAW,CAAC,WAAmB;IAC7C,MAAM,WAAW,GAAG,cAAc,CAAC,WAAW,CAAC,CAAC;IAEhD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAChC,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QAClD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,OAAO,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACrC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,CAAC,CAAC,QAAQ,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CAAC,qCAAqC,WAAW,MAAM,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACvH,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,uCAAuC,WAAW,MAAM,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACpI,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,WAAW,CAAC,WAAmB,EAAE,OAAgB;IAC/D,MAAM,UAAU,GAAG,cAAc,CAAC,WAAW,CAAC,CAAC;IAC/C,SAAS,CAAC,UAAU,CAAC,CAAC;IAEtB,MAAM,WAAW,GAAG,cAAc,CAAC,WAAW,CAAC,CAAC;IAChD,MAAM,SAAS,GAAG,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAE/C,wDAAwD;IACxD,EAAE,CAAC,aAAa,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IAE3E,IAAI,CAAC;QACH,EAAE,CAAC,SAAS,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,IAAI,CAAC,2DAA2D,CAAC,CAAC;IAC5E,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,WAAmB,EAAE,OAAyB;IAC1E,MAAM,OAAO,GAAG,WAAW,CAAC,WAAW,CAAC,CAAC;IACzC,MAAM,MAAM,GAAG,EAAE,GAAG,OAAO,EAAE,GAAG,OAAO,EAAE,CAAC;IAC1C,WAAW,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IACjC,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,WAAmB;IAC9C,WAAW,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;AAC/B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,UAAU,CAAC,WAAmB;IAC5C,MAAM,WAAW,GAAG,cAAc,CAAC,WAAW,CAAC,CAAC;IAChD,OAAO,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;AACpC,CAAC"}

package/dist/core/secrets/secrets-types.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Secret storage types and schema
+ */
+import { z } from 'zod';
+export declare const SecretsSchema: z.ZodObject<{
+    recoveryKey: z.ZodOptional<z.ZodString>;
+    activeApiKey: z.ZodOptional<z.ZodString>;
+    activeKeyId: z.ZodOptional<z.ZodString>;
+    accessToken: z.ZodOptional<z.ZodString>;
+    accessTokenExpiresAt: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    recoveryKey?: string | undefined;
+    activeApiKey?: string | undefined;
+    activeKeyId?: string | undefined;
+    accessToken?: string | undefined;
+    accessTokenExpiresAt?: string | undefined;
+}, {
+    recoveryKey?: string | undefined;
+    activeApiKey?: string | undefined;
+    activeKeyId?: string | undefined;
+    accessToken?: string | undefined;
+    accessTokenExpiresAt?: string | undefined;
+}>;
+export type Secrets = z.infer<typeof SecretsSchema>;
+/**
+ * Redacted version for debug output
+ */
+export declare function redactSecrets(secrets: Secrets): Record<string, string>;
+//# sourceMappingURL=secrets-types.d.ts.map

package/dist/core/secrets/secrets-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets-types.d.ts","sourceRoot":"","sources":["../../../src/core/secrets/secrets-types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;EAMxB,CAAC;AAEH,MAAM,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAEpD;;GAEG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAiBtE"}

package/dist/core/secrets/secrets-types.js

@@ -0,0 +1,33 @@
+/**
+ * Secret storage types and schema
+ */
+import { z } from 'zod';
+export const SecretsSchema = z.object({
+    recoveryKey: z.string().optional(),
+    activeApiKey: z.string().optional(),
+    activeKeyId: z.string().optional(),
+    accessToken: z.string().optional(),
+    accessTokenExpiresAt: z.string().datetime().optional(),
+});
+/**
+ * Redacted version for debug output
+ */
+export function redactSecrets(secrets) {
+    const redacted = {};
+    for (const key of Object.keys(secrets)) {
+        const value = secrets[key];
+        if (value) {
+            if (value.length <= 8) {
+                redacted[key] = '***';
+            }
+            else {
+                redacted[key] = value.substring(0, 4) + '...' + value.substring(value.length - 4);
+            }
+        }
+        else {
+            redacted[key] = '<not set>';
+        }
+    }
+    return redacted;
+}
+//# sourceMappingURL=secrets-types.js.map

package/dist/core/secrets/secrets-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets-types.js","sourceRoot":"","sources":["../../../src/core/secrets/secrets-types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CACvD,CAAC,CAAC;AAIH;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,OAAgB;IAC5C,MAAM,QAAQ,GAA2B,EAAE,CAAC;IAE5C,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,OAAO,CAAC,GAAoB,CAAC,CAAC;QAC5C,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;gBACtB,QAAQ,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YACxB,CAAC;iBAAM,CAAC;gBACN,QAAQ,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,KAAK,GAAG,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YACpF,CAAC;QACH,CAAC;aAAM,CAAC;YACN,QAAQ,CAAC,GAAG,CAAC,GAAG,WAAW,CAAC;QAC9B,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/core/sqlite/chat-schema.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Chat database schema and migrations
+ */
+import Database from 'better-sqlite3';
+export declare const CHAT_DB_VERSION = 1;
+/**
+ * Run chat database migrations
+ */
+export declare function runChatMigrations(db: Database.Database): void;
+/**
+ * Initialize chat database with schema
+ */
+export declare function initializeChatDb(db: Database.Database): void;
+//# sourceMappingURL=chat-schema.d.ts.map

package/dist/core/sqlite/chat-schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chat-schema.d.ts","sourceRoot":"","sources":["../../../src/core/sqlite/chat-schema.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,QAAQ,MAAM,gBAAgB,CAAC;AAGtC,eAAO,MAAM,eAAe,IAAI,CAAC;AA2KjC;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,GAAG,IAAI,CAE7D;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,GAAG,IAAI,CAE5D"}