@josharsh/demon-cli 0.1.0

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAEnC,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAA;AACnC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AACpC,OAAO,EAAE,YAAY,EAAE,MAAM,IAAI,CAAA;AAEjC,gCAAgC;AAChC,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;AACzD,IAAI,OAAO,GAAG,OAAO,CAAA;AACrB,IAAI,CAAC;IACH,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,cAAc,CAAC,CAAA;IACrD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAwB,CAAA;IAC7E,OAAO,GAAG,GAAG,CAAC,OAAO,CAAA;AACvB,CAAC;AAAC,MAAM,CAAC;IACP,iCAAiC;AACnC,CAAC;AAED,gFAAgF;AAChF,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAChD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AAClD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAChD,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAA;AACpD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAA;AACtD,OAAO,EACL,mBAAmB,EACnB,oBAAoB,EACpB,sBAAsB,GACvB,MAAM,yBAAyB,CAAA;AAChC,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,kBAAkB,GACnB,MAAM,uBAAuB,CAAA;AAC9B,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AAExE,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAA;AAE7B,OAAO;KACJ,IAAI,CAAC,OAAO,CAAC;KACb,WAAW,CAAC,wEAAwE,CAAC;KACrF,OAAO,CAAC,OAAO,EAAE,eAAe,EAAE,sBAAsB,CAAC;KACzD,MAAM,CAAC,WAAW,EAAE,6BAA6B,CAAC;KAClD,IAAI,CAAC,WAAW,EAAE,CAAC,WAAW,EAAE,EAAE;IACjC,IAAI,WAAW,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;QAC/B,OAAO,CAAC,GAAG,CAAC,eAAe,GAAG,OAAO,CAAA;IACvC,CAAC;AACH,CAAC,CAAC,CAAA;AAEJ,iEAAiE;AACjE,OAAO;KACJ,OAAO,CAAC,MAAM,CAAC;KACf,WAAW,CAAC,mDAAmD,CAAC;KAChE,MAAM,CAAC,KAAK,IAAI,EAAE;IACjB,IAAI,CAAC;QACH,MAAM,WAAW,EAAE,CAAA;IACrB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,WAAW,CAAC,GAAG,CAAC,CAAA;IAClB,CAAC;AACH,CAAC,CAAC,CAAA;AAEJ,iEAAiE;AACjE,OAAO;KACJ,OAAO,CAAC,sBAAsB,CAAC;KAC/B,WAAW,CACV,kFAAkF,CACnF;KACA,MAAM,CAAC,WAAW,EAAE,0DAA0D,CAAC;KAC/E,MAAM,CAAC,QAAQ,EAAE,8CAA8C,CAAC;KAChE,MAAM,CAAC,uBAAuB,EAAE,uCAAuC,CAAC;KACxE,MAAM,CAAC,iBAAiB,EAAE,qDAAqD,CAAC;KAChF,MAAM,CAAC,WAAW,EAAE,2DAA2D,CAAC;KAChF,MAAM,CAAC,KAAK,EAAE,YAAoB,EAAE,OAMpC,EAAE,EAAE;IACH,IAAI,CAAC;QACH,MAAM,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAA;IAC3C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,WAAW,CAAC,GAAG,CAAC,CAAA;IAClB,CAAC;AACH,CAAC,CAAC,CAAA;AAEJ,iEAAiE;AACjE,OAAO;KACJ,OAAO,CAAC,aAAa,CAAC;KACtB,WAAW,CAAC,8BAA8B,CAAC;KAC3C,MAAM,CAAC,aAAa,EAAE,iCAAiC,CAAC;KACxD,MAAM,CAAC,KAAK,EAAE,IAAY,EAAE,OAA4B,EAAE,EAAE;IAC3D,IAAI,CAAC;QACH,MAAM,WAAW,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;IAClC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,WAAW,CAAC,GAAG,CAAC,CAAA;IAClB,CAAC;AACH,CAAC,CAAC,CAAA;AAEJ,iEAAiE;AACjE,OAAO;KACJ,OAAO,CAAC,gBAAgB,CAAC;KACzB,WAAW,CAAC,sEAAsE,CAAC;KACnF,MAAM,CAAC,KAAK,EAAE,IAAY,EAAE,EAAE;IAC7B,IAAI,CAAC;QACH,MAAM,cAAc,CAAC,IAAI,CAAC,CAAA;IAC5B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,WAAW,CAAC,GAAG,CAAC,CAAA;IAClB,CAAC;AACH,CAAC,CAAC,CAAA;AAEJ,iEAAiE;AACjE,OAAO;KACJ,OAAO,CAAC,kBAAkB,CAAC;KAC3B,WAAW,CAAC,4CAA4C,CAAC;KACzD,MAAM,CAAC,KAAK,EAAE,IAAY,EAAE,EAAE;IAC7B,IAAI,CAAC;QACH,MAAM,gBAAgB,CAAC,IAAI,CAAC,CAAA;IAC9B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,WAAW,CAAC,GAAG,CAAC,CAAA;IAClB,CAAC;AACH,CAAC,CAAC,CAAA;AAEJ,iEAAiE;AACjE,OAAO;KACJ,OAAO,CAAC,IAAI,CAAC;KACb,WAAW,CAAC,kCAAkC,CAAC;KAC/C,MAAM,CAAC,KAAK,IAAI,EAAE;IACjB,IAAI,CAAC;QACH,MAAM,SAAS,EAAE,CAAA;IACnB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,WAAW,CAAC,GAAG,CAAC,CAAA;IAClB,CAAC;AACH,CAAC,CAAC,CAAA;AAEJ,iEAAiE;AACjE,OAAO;KACJ,OAAO,CAAC,eAAe,CAAC;KACxB,WAAW,CAAC,0CAA0C,CAAC;KACvD,MAAM,CAAC,KAAK,EAAE,IAAY,EAAE,EAAE;IAC7B,IAAI,CAAC;QACH,MAAM,aAAa,CAAC,IAAI,CAAC,CAAA;IAC3B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,WAAW,CAAC,GAAG,CAAC,CAAA;IAClB,CAAC;AACH,CAAC,CAAC,CAAA;AAEJ,iEAAiE;AACjE,OAAO;KACJ,OAAO,CAAC,aAAa,CAAC;KACtB,WAAW,CAAC,uBAAuB,CAAC;KACpC,MAAM,CAAC,cAAc,EAAE,gCAAgC,CAAC;KACxD,MAAM,CAAC,qBAAqB,EAAE,uCAAuC,EAAE,IAAI,CAAC;KAC5E,MAAM,CAAC,OAAO,EAAE,6CAA6C,CAAC;KAC9D,MAAM,CAAC,KAAK,EAAE,IAAY,EAAE,OAA4D,EAAE,EAAE;IAC3F,IAAI,CAAC;QACH,MAAM,WAAW,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;IAClC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,WAAW,CAAC,GAAG,CAAC,CAAA;IAClB,CAAC;AACH,CAAC,CAAC,CAAA;AAEJ,iEAAiE;AACjE,OAAO;KACJ,OAAO,CAAC,gBAAgB,CAAC;KACzB,WAAW,CAAC,qDAAqD,CAAC;KAClE,MAAM,CAAC,oBAAoB,EAAE,+CAA+C,EAAE,IAAI,CAAC;KACnF,MAAM,CAAC,QAAQ,EAAE,iBAAiB,CAAC;KACnC,MAAM,CAAC,KAAK,EAAE,IAAY,EAAE,OAA0C,EAAE,EAAE;IACzE,IAAI,CAAC;QACH,MAAM,cAAc,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;IACrC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,WAAW,CAAC,GAAG,CAAC,CAAA;IAClB,CAAC;AACH,CAAC,CAAC,CAAA;AAEJ,iEAAiE;AACjE,MAAM,SAAS,GAAG,OAAO;KACtB,OAAO,CAAC,WAAW,CAAC;KACpB,WAAW,CAAC,0DAA0D,CAAC,CAAA;AAE1E,SAAS;KACN,OAAO,CAAC,YAAY,CAAC;KACrB,WAAW,CAAC,0CAA0C,CAAC;KACvD,MAAM,CAAC,KAAK,EAAE,IAAa,EAAE,EAAE;IAC9B,IAAI,CAAC;QACH,MAAM,mBAAmB,CAAC,IAAI,CAAC,CAAA;IACjC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,WAAW,CAAC,GAAG,CAAC,CAAA;IAClB,CAAC;AACH,CAAC,CAAC,CAAA;AAEJ,SAAS;KACN,OAAO,CAAC,MAAM,CAAC;KACf,WAAW,CAAC,2BAA2B,CAAC;KACxC,MAAM,CAAC,KAAK,IAAI,EAAE;IACjB,IAAI,CAAC;QACH,MAAM,oBAAoB,EAAE,CAAA;IAC9B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,WAAW,CAAC,GAAG,CAAC,CAAA;IAClB,CAAC;AACH,CAAC,CAAC,CAAA;AAEJ,SAAS;KACN,OAAO,CAAC,eAAe,CAAC;KACxB,WAAW,CAAC,uCAAuC,CAAC;KACpD,MAAM,CAAC,KAAK,EAAE,IAAY,EAAE,EAAE;IAC7B,IAAI,CAAC;QACH,MAAM,sBAAsB,CAAC,IAAI,CAAC,CAAA;IACpC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,WAAW,CAAC,GAAG,CAAC,CAAA;IAClB,CAAC;AACH,CAAC,CAAC,CAAA;AAEJ,iEAAiE;AACjE,MAAM,OAAO,GAAG,OAAO;KACpB,OAAO,CAAC,SAAS,CAAC;KAClB,WAAW,CAAC,kDAAkD,CAAC,CAAA;AAElE,OAAO;KACJ,OAAO,CAAC,mBAAmB,CAAC;KAC5B,WAAW,CAAC,kDAAkD,CAAC;KAC/D,MAAM,CAAC,KAAK,EAAE,GAAW,EAAE,KAAc,EAAE,EAAE;IAC5C,IAAI,CAAC;QACH,MAAM,iBAAiB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;IACrC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,WAAW,CAAC,GAAG,CAAC,CAAA;IAClB,CAAC;AACH,CAAC,CAAC,CAAA;AAEJ,OAAO;KACJ,OAAO,CAAC,WAAW,CAAC;KACpB,WAAW,CAAC,gCAAgC,CAAC;KAC7C,MAAM,CAAC,KAAK,EAAE,GAAW,EAAE,EAAE;IAC5B,IAAI,CAAC;QACH,MAAM,iBAAiB,CAAC,GAAG,CAAC,CAAA;IAC9B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,WAAW,CAAC,GAAG,CAAC,CAAA;IAClB,CAAC;AACH,CAAC,CAAC,CAAA;AAEJ,OAAO;KACJ,OAAO,CAAC,MAAM,CAAC;KACf,WAAW,CAAC,kDAAkD,CAAC;KAC/D,MAAM,CAAC,KAAK,IAAI,EAAE;IACjB,IAAI,CAAC;QACH,MAAM,kBAAkB,EAAE,CAAA;IAC5B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,WAAW,CAAC,GAAG,CAAC,CAAA;IAClB,CAAC;AACH,CAAC,CAAC,CAAA;AAEJ,iEAAiE;AACjE,OAAO,CAAC,EAAE,CAAC,mBAAmB,EAAE,CAAC,GAAG,EAAE,EAAE;IACtC,OAAO,CAAC,KAAK,CAAC,yBAAyB,EAAE,GAAG,CAAC,OAAO,CAAC,CAAA;IACrD,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe,KAAK,OAAO,EAAE,CAAC;QAC5C,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;IAC1B,CAAC;IACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;AACjB,CAAC,CAAC,CAAA;AAEF,OAAO,CAAC,EAAE,CAAC,oBAAoB,EAAE,CAAC,MAAM,EAAE,EAAE;IAC1C,OAAO,CAAC,KAAK,CAAC,0BAA0B,EAAE,MAAM,CAAC,CAAA;IACjD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;AACjB,CAAC,CAAC,CAAA;AAEF,SAAS,WAAW,CAAC,GAAY;IAC/B,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;IAChE,OAAO,CAAC,KAAK,CAAC,cAAc,OAAO,IAAI,CAAC,CAAA;IACxC,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe,KAAK,OAAO,IAAI,GAAG,YAAY,KAAK,EAAE,CAAC;QACpE,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;IAC1B,CAAC;IACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;AACjB,CAAC;AAED,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA"}

package/dist/providers/config.d.ts

@@ -0,0 +1,8 @@
+import type { GlobalConfig } from '../types.js';
+export interface ConfigManager {
+    get(): Promise<GlobalConfig>;
+    set(updates: Partial<GlobalConfig>): Promise<void>;
+    isFirstRun(): Promise<boolean>;
+}
+export declare function createConfigManager(): ConfigManager;
+//# sourceMappingURL=config.d.ts.map

package/dist/providers/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/providers/config.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAU/C,MAAM,WAAW,aAAa;IAC5B,GAAG,IAAI,OAAO,CAAC,YAAY,CAAC,CAAA;IAC5B,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,YAAY,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAClD,UAAU,IAAI,OAAO,CAAC,OAAO,CAAC,CAAA;CAC/B;AAED,wBAAgB,mBAAmB,IAAI,aAAa,CAqBnD"}

package/dist/providers/config.js

@@ -0,0 +1,31 @@
+import { join } from 'path';
+import { homedir } from 'os';
+import fs from 'fs-extra';
+import { demonDir } from '../utils/paths.js';
+const CONFIG_PATH = join(demonDir(), 'config.json');
+const DEFAULT_CONFIG = {
+    defaultModel: 'claude-sonnet-4-6',
+    defaultProvider: 'anthropic',
+    demonDir: join(homedir(), '.demon'),
+};
+export function createConfigManager() {
+    return {
+        async get() {
+            if (!(await fs.pathExists(CONFIG_PATH))) {
+                return { ...DEFAULT_CONFIG };
+            }
+            const saved = await fs.readJson(CONFIG_PATH);
+            return { ...DEFAULT_CONFIG, ...saved };
+        },
+        async set(updates) {
+            const current = await this.get();
+            const next = { ...current, ...updates };
+            await fs.ensureDir(demonDir());
+            await fs.writeJson(CONFIG_PATH, next, { spaces: 2 });
+        },
+        async isFirstRun() {
+            return !(await fs.pathExists(CONFIG_PATH));
+        },
+    };
+}
+//# sourceMappingURL=config.js.map

package/dist/providers/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/providers/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAC3B,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAA;AAC5B,OAAO,EAAE,MAAM,UAAU,CAAA;AACzB,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAA;AAG5C,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,EAAE,EAAE,aAAa,CAAC,CAAA;AAEnD,MAAM,cAAc,GAAiB;IACnC,YAAY,EAAE,mBAAmB;IACjC,eAAe,EAAE,WAAW;IAC5B,QAAQ,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC;CACpC,CAAA;AAQD,MAAM,UAAU,mBAAmB;IACjC,OAAO;QACL,KAAK,CAAC,GAAG;YACP,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC;gBACxC,OAAO,EAAE,GAAG,cAAc,EAAE,CAAA;YAC9B,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,WAAW,CAA0B,CAAA;YACrE,OAAO,EAAE,GAAG,cAAc,EAAE,GAAG,KAAK,EAAE,CAAA;QACxC,CAAC;QAED,KAAK,CAAC,GAAG,CAAC,OAA8B;YACtC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,GAAG,EAAE,CAAA;YAChC,MAAM,IAAI,GAAG,EAAE,GAAG,OAAO,EAAE,GAAG,OAAO,EAAE,CAAA;YACvC,MAAM,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC,CAAA;YAC9B,MAAM,EAAE,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAA;QACtD,CAAC;QAED,KAAK,CAAC,UAAU;YACd,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAA;QAC5C,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/providers/credentials.d.ts

@@ -0,0 +1,5 @@
+import type { DemonManifest } from '../types.js';
+import type { ProviderRegistry } from './registry.js';
+import type { SecretsStore } from './secrets.js';
+export declare function resolveCredentials(manifest: DemonManifest, registry: ProviderRegistry, secrets: SecretsStore): Promise<Map<string, Record<string, string>>>;
+//# sourceMappingURL=credentials.d.ts.map

package/dist/providers/credentials.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials.d.ts","sourceRoot":"","sources":["../../src/providers/credentials.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAChD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAA;AACrD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAmBhD,wBAAsB,kBAAkB,CACtC,QAAQ,EAAE,aAAa,EACvB,QAAQ,EAAE,gBAAgB,EAC1B,OAAO,EAAE,YAAY,GACpB,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAoD9C"}

package/dist/providers/credentials.js

@@ -0,0 +1,69 @@
+import { PROVIDER_FIELDS } from './registry.js';
+// Environment variable fallbacks keyed by provider name
+const ENV_FALLBACKS = {
+    github: { GITHUB_TOKEN: process.env.GITHUB_TOKEN ?? '' },
+    slack: { WEBHOOK_URL: process.env.SLACK_WEBHOOK_URL ?? '' },
+    anthropic: { ANTHROPIC_API_KEY: process.env.ANTHROPIC_API_KEY ?? '' },
+    openai: { OPENAI_API_KEY: process.env.OPENAI_API_KEY ?? '' },
+    openrouter: { OPENROUTER_API_KEY: process.env.OPENROUTER_API_KEY ?? '' },
+    groq: { GROQ_API_KEY: process.env.GROQ_API_KEY ?? '' },
+    linear: { LINEAR_API_KEY: process.env.LINEAR_API_KEY ?? '' },
+    pagerduty: {
+        PAGERDUTY_API_KEY: process.env.PAGERDUTY_API_KEY ?? '',
+        PAGERDUTY_ROUTING_KEY: process.env.PAGERDUTY_ROUTING_KEY ?? '',
+    },
+    sendgrid: { SENDGRID_API_KEY: process.env.SENDGRID_API_KEY ?? '' },
+};
+export async function resolveCredentials(manifest, registry, secrets) {
+    // Collect all provider names referenced in the manifest
+    const providerNames = new Set();
+    for (const action of manifest.actions) {
+        if (action.provider)
+            providerNames.add(action.provider);
+    }
+    for (const watcher of manifest.watch) {
+        if (watcher.type.startsWith('github'))
+            providerNames.add('github');
+    }
+    const result = new Map();
+    const demonSecrets = await secrets.getAll(manifest.name);
+    for (const providerName of providerNames) {
+        const merged = {};
+        // 1. Start with env var fallbacks for known providers
+        const envDefaults = ENV_FALLBACKS[providerName];
+        if (envDefaults) {
+            for (const [key, value] of Object.entries(envDefaults)) {
+                if (value)
+                    merged[key] = value;
+            }
+        }
+        // 2. Layer in stored provider credentials (override env)
+        const stored = await registry.load(providerName);
+        if (stored?.credentials) {
+            for (const [key, value] of Object.entries(stored.credentials)) {
+                if (value)
+                    merged[key] = value;
+            }
+        }
+        // 3. Layer in per-demon secrets (highest priority)
+        // Demon secrets may be raw key=value pairs or prefixed PROVIDER_KEY
+        const fields = PROVIDER_FIELDS[providerName] ?? [];
+        for (const field of fields) {
+            // Check exact field name in demon secrets
+            if (demonSecrets[field])
+                merged[field] = demonSecrets[field];
+            // Also check PROVIDER_FIELD format e.g. GITHUB_GITHUB_TOKEN unlikely but supported
+            const prefixed = `${providerName.toUpperCase()}_${field}`;
+            if (demonSecrets[prefixed])
+                merged[field] = demonSecrets[prefixed];
+        }
+        // Any demon secret key that matches a known field for this provider
+        for (const [key, value] of Object.entries(demonSecrets)) {
+            if (fields.includes(key) && value)
+                merged[key] = value;
+        }
+        result.set(providerName, merged);
+    }
+    return result;
+}
+//# sourceMappingURL=credentials.js.map

package/dist/providers/credentials.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials.js","sourceRoot":"","sources":["../../src/providers/credentials.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAE/C,wDAAwD;AACxD,MAAM,aAAa,GAA2C;IAC5D,MAAM,EAAE,EAAE,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,EAAE;IACxD,KAAK,EAAE,EAAE,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,EAAE,EAAE;IAC3D,SAAS,EAAE,EAAE,iBAAiB,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,EAAE,EAAE;IACrE,MAAM,EAAE,EAAE,cAAc,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,EAAE,EAAE;IAC5D,UAAU,EAAE,EAAE,kBAAkB,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,EAAE,EAAE;IACxE,IAAI,EAAE,EAAE,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,EAAE;IACtD,MAAM,EAAE,EAAE,cAAc,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,EAAE,EAAE;IAC5D,SAAS,EAAE;QACT,iBAAiB,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,EAAE;QACtD,qBAAqB,EAAE,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,EAAE;KAC/D;IACD,QAAQ,EAAE,EAAE,gBAAgB,EAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,EAAE,EAAE;CACnE,CAAA;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,QAAuB,EACvB,QAA0B,EAC1B,OAAqB;IAErB,wDAAwD;IACxD,MAAM,aAAa,GAAG,IAAI,GAAG,EAAU,CAAA;IACvC,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;QACtC,IAAI,MAAM,CAAC,QAAQ;YAAE,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;IACzD,CAAC;IACD,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;QACrC,IAAI,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;YAAE,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;IACpE,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkC,CAAA;IAExD,MAAM,YAAY,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;IAExD,KAAK,MAAM,YAAY,IAAI,aAAa,EAAE,CAAC;QACzC,MAAM,MAAM,GAA2B,EAAE,CAAA;QAEzC,sDAAsD;QACtD,MAAM,WAAW,GAAG,aAAa,CAAC,YAAY,CAAC,CAAA;QAC/C,IAAI,WAAW,EAAE,CAAC;YAChB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;gBACvD,IAAI,KAAK;oBAAE,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAA;YAChC,CAAC;QACH,CAAC;QAED,yDAAyD;QACzD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;QAChD,IAAI,MAAM,EAAE,WAAW,EAAE,CAAC;YACxB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC9D,IAAI,KAAK;oBAAE,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAA;YAChC,CAAC;QACH,CAAC;QAED,mDAAmD;QACnD,oEAAoE;QACpE,MAAM,MAAM,GAAG,eAAe,CAAC,YAAY,CAAC,IAAI,EAAE,CAAA;QAClD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,0CAA0C;YAC1C,IAAI,YAAY,CAAC,KAAK,CAAC;gBAAE,MAAM,CAAC,KAAK,CAAC,GAAG,YAAY,CAAC,KAAK,CAAC,CAAA;YAC5D,mFAAmF;YACnF,MAAM,QAAQ,GAAG,GAAG,YAAY,CAAC,WAAW,EAAE,IAAI,KAAK,EAAE,CAAA;YACzD,IAAI,YAAY,CAAC,QAAQ,CAAC;gBAAE,MAAM,CAAC,KAAK,CAAC,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAA;QACpE,CAAC;QACD,oEAAoE;QACpE,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;YACxD,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK;gBAAE,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAA;QACxD,CAAC;QAED,MAAM,CAAC,GAAG,CAAC,YAAY,EAAE,MAAM,CAAC,CAAA;IAClC,CAAC;IAED,OAAO,MAAM,CAAA;AACf,CAAC"}

package/dist/providers/registry.d.ts

@@ -0,0 +1,12 @@
+import type { ProviderCredentials } from '../types.js';
+declare const PROVIDER_FIELDS: Record<string, string[]>;
+export { PROVIDER_FIELDS };
+export interface ProviderRegistry {
+    save(name: string, credentials: ProviderCredentials): Promise<void>;
+    load(name: string): Promise<ProviderCredentials | null>;
+    list(): Promise<ProviderCredentials[]>;
+    remove(name: string): Promise<void>;
+    exists(name: string): Promise<boolean>;
+}
+export declare function createProviderRegistry(): ProviderRegistry;
+//# sourceMappingURL=registry.d.ts.map

package/dist/providers/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/providers/registry.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAA;AAEtD,QAAA,MAAM,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAU7C,CAAA;AAED,OAAO,EAAE,eAAe,EAAE,CAAA;AAE1B,MAAM,WAAW,gBAAgB;IAC/B,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACnE,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAAA;IACvD,IAAI,IAAI,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAAA;IACtC,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACnC,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;CACvC;AAED,wBAAgB,sBAAsB,IAAI,gBAAgB,CA2CzD"}

package/dist/providers/registry.js

@@ -0,0 +1,58 @@
+import fs from 'fs-extra';
+import { providerPath, providersDir } from '../utils/paths.js';
+const PROVIDER_FIELDS = {
+    github: ['GITHUB_TOKEN'],
+    slack: ['WEBHOOK_URL'],
+    anthropic: ['ANTHROPIC_API_KEY'],
+    openai: ['OPENAI_API_KEY'],
+    openrouter: ['OPENROUTER_API_KEY'],
+    groq: ['GROQ_API_KEY'],
+    linear: ['LINEAR_API_KEY'],
+    pagerduty: ['PAGERDUTY_API_KEY', 'PAGERDUTY_ROUTING_KEY'],
+    sendgrid: ['SENDGRID_API_KEY'],
+};
+export { PROVIDER_FIELDS };
+export function createProviderRegistry() {
+    return {
+        async save(name, credentials) {
+            await fs.ensureDir(providersDir());
+            const path = providerPath(name);
+            await fs.writeJson(path, credentials, { spaces: 2 });
+            await fs.chmod(path, 0o600);
+        },
+        async load(name) {
+            const path = providerPath(name);
+            if (!(await fs.pathExists(path)))
+                return null;
+            return fs.readJson(path);
+        },
+        async list() {
+            await fs.ensureDir(providersDir());
+            const dir = providersDir();
+            const files = await fs.readdir(dir);
+            const results = [];
+            for (const file of files) {
+                if (!file.endsWith('.json'))
+                    continue;
+                try {
+                    const data = await fs.readJson(`${dir}/${file}`);
+                    results.push(data);
+                }
+                catch {
+                    // skip malformed files
+                }
+            }
+            return results;
+        },
+        async remove(name) {
+            const path = providerPath(name);
+            if (await fs.pathExists(path)) {
+                await fs.remove(path);
+            }
+        },
+        async exists(name) {
+            return fs.pathExists(providerPath(name));
+        },
+    };
+}
+//# sourceMappingURL=registry.js.map

package/dist/providers/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/providers/registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,UAAU,CAAA;AACzB,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAG9D,MAAM,eAAe,GAA6B;IAChD,MAAM,EAAE,CAAC,cAAc,CAAC;IACxB,KAAK,EAAE,CAAC,aAAa,CAAC;IACtB,SAAS,EAAE,CAAC,mBAAmB,CAAC;IAChC,MAAM,EAAE,CAAC,gBAAgB,CAAC;IAC1B,UAAU,EAAE,CAAC,oBAAoB,CAAC;IAClC,IAAI,EAAE,CAAC,cAAc,CAAC;IACtB,MAAM,EAAE,CAAC,gBAAgB,CAAC;IAC1B,SAAS,EAAE,CAAC,mBAAmB,EAAE,uBAAuB,CAAC;IACzD,QAAQ,EAAE,CAAC,kBAAkB,CAAC;CAC/B,CAAA;AAED,OAAO,EAAE,eAAe,EAAE,CAAA;AAU1B,MAAM,UAAU,sBAAsB;IACpC,OAAO;QACL,KAAK,CAAC,IAAI,CAAC,IAAY,EAAE,WAAgC;YACvD,MAAM,EAAE,CAAC,SAAS,CAAC,YAAY,EAAE,CAAC,CAAA;YAClC,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,CAAA;YAC/B,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,WAAW,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAA;YACpD,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;QAC7B,CAAC;QAED,KAAK,CAAC,IAAI,CAAC,IAAY;YACrB,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,CAAA;YAC/B,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAA;YAC7C,OAAO,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAiC,CAAA;QAC1D,CAAC;QAED,KAAK,CAAC,IAAI;YACR,MAAM,EAAE,CAAC,SAAS,CAAC,YAAY,EAAE,CAAC,CAAA;YAClC,MAAM,GAAG,GAAG,YAAY,EAAE,CAAA;YAC1B,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;YACnC,MAAM,OAAO,GAA0B,EAAE,CAAA;YACzC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;oBAAE,SAAQ;gBACrC,IAAI,CAAC;oBACH,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,CAAA;oBAChD,OAAO,CAAC,IAAI,CAAC,IAA2B,CAAC,CAAA;gBAC3C,CAAC;gBAAC,MAAM,CAAC;oBACP,uBAAuB;gBACzB,CAAC;YACH,CAAC;YACD,OAAO,OAAO,CAAA;QAChB,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,IAAY;YACvB,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,CAAA;YAC/B,IAAI,MAAM,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC9B,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;YACvB,CAAC;QACH,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,IAAY;YACvB,OAAO,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAA;QAC1C,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/providers/secrets.d.ts

@@ -0,0 +1,9 @@
+export interface SecretsStore {
+    set(demonName: string, key: string, value: string): Promise<void>;
+    get(demonName: string, key: string): Promise<string | null>;
+    getAll(demonName: string): Promise<Record<string, string>>;
+    list(demonName: string): Promise<string[]>;
+    remove(demonName: string, key: string): Promise<void>;
+}
+export declare function createSecretsStore(): SecretsStore;
+//# sourceMappingURL=secrets.d.ts.map

package/dist/providers/secrets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.d.ts","sourceRoot":"","sources":["../../src/providers/secrets.ts"],"names":[],"mappings":"AAQA,MAAM,WAAW,YAAY;IAC3B,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACjE,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAA;IAC3D,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;IAC1D,IAAI,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;IAC1C,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CACtD;AAED,wBAAgB,kBAAkB,IAAI,YAAY,CAyCjD"}

package/dist/providers/secrets.js

@@ -0,0 +1,44 @@
+import { join } from 'path';
+import fs from 'fs-extra';
+import { secretsDir } from '../utils/paths.js';
+function secretPath(demonName) {
+    return join(secretsDir(), `${demonName}.json`);
+}
+export function createSecretsStore() {
+    async function readSecrets(demonName) {
+        const path = secretPath(demonName);
+        if (!(await fs.pathExists(path)))
+            return {};
+        return fs.readJson(path);
+    }
+    async function writeSecrets(demonName, data) {
+        await fs.ensureDir(secretsDir());
+        const path = secretPath(demonName);
+        await fs.writeJson(path, data, { spaces: 2 });
+        await fs.chmod(path, 0o600);
+    }
+    return {
+        async set(demonName, key, value) {
+            const data = await readSecrets(demonName);
+            data[key] = value;
+            await writeSecrets(demonName, data);
+        },
+        async get(demonName, key) {
+            const data = await readSecrets(demonName);
+            return data[key] ?? null;
+        },
+        async getAll(demonName) {
+            return readSecrets(demonName);
+        },
+        async list(demonName) {
+            const data = await readSecrets(demonName);
+            return Object.keys(data);
+        },
+        async remove(demonName, key) {
+            const data = await readSecrets(demonName);
+            delete data[key];
+            await writeSecrets(demonName, data);
+        },
+    };
+}
+//# sourceMappingURL=secrets.js.map

package/dist/providers/secrets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.js","sourceRoot":"","sources":["../../src/providers/secrets.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAC3B,OAAO,EAAE,MAAM,UAAU,CAAA;AACzB,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AAE9C,SAAS,UAAU,CAAC,SAAiB;IACnC,OAAO,IAAI,CAAC,UAAU,EAAE,EAAE,GAAG,SAAS,OAAO,CAAC,CAAA;AAChD,CAAC;AAUD,MAAM,UAAU,kBAAkB;IAChC,KAAK,UAAU,WAAW,CAAC,SAAiB;QAC1C,MAAM,IAAI,GAAG,UAAU,CAAC,SAAS,CAAC,CAAA;QAClC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YAAE,OAAO,EAAE,CAAA;QAC3C,OAAO,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAoC,CAAA;IAC7D,CAAC;IAED,KAAK,UAAU,YAAY,CAAC,SAAiB,EAAE,IAA4B;QACzE,MAAM,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,CAAC,CAAA;QAChC,MAAM,IAAI,GAAG,UAAU,CAAC,SAAS,CAAC,CAAA;QAClC,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAA;QAC7C,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;IAC7B,CAAC;IAED,OAAO;QACL,KAAK,CAAC,GAAG,CAAC,SAAiB,EAAE,GAAW,EAAE,KAAa;YACrD,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,SAAS,CAAC,CAAA;YACzC,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAA;YACjB,MAAM,YAAY,CAAC,SAAS,EAAE,IAAI,CAAC,CAAA;QACrC,CAAC;QAED,KAAK,CAAC,GAAG,CAAC,SAAiB,EAAE,GAAW;YACtC,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,SAAS,CAAC,CAAA;YACzC,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAA;QAC1B,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,SAAiB;YAC5B,OAAO,WAAW,CAAC,SAAS,CAAC,CAAA;QAC/B,CAAC;QAED,KAAK,CAAC,IAAI,CAAC,SAAiB;YAC1B,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,SAAS,CAAC,CAAA;YACzC,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC1B,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,SAAiB,EAAE,GAAW;YACzC,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,SAAS,CAAC,CAAA;YACzC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAA;YAChB,MAAM,YAAY,CAAC,SAAS,EAAE,IAAI,CAAC,CAAA;QACrC,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/providers/system-auth.d.ts

@@ -0,0 +1,8 @@
+export interface DetectedAuth {
+    provider: string;
+    source: string;
+    credentials: Record<string, string>;
+}
+export declare function detectSystemAuth(provider: string): DetectedAuth | null;
+export declare function detectAllSystemAuth(): DetectedAuth[];
+//# sourceMappingURL=system-auth.d.ts.map

package/dist/providers/system-auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"system-auth.d.ts","sourceRoot":"","sources":["../../src/providers/system-auth.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,EAAE,MAAM,CAAA;IACd,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CACpC;AAwID,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI,CA2CtE;AAED,wBAAgB,mBAAmB,IAAI,YAAY,EAAE,CAQpD"}

package/dist/providers/system-auth.js

@@ -0,0 +1,168 @@
+import { execSync } from 'child_process';
+import fs from 'fs-extra';
+import os from 'os';
+import path from 'path';
+function detectGitHub() {
+    // 1. gh CLI — best source, always fresh
+    try {
+        const token = execSync('gh auth token 2>/dev/null', {
+            stdio: ['pipe', 'pipe', 'pipe'],
+        })
+            .toString()
+            .trim();
+        if (token && (token.startsWith('gho_') || token.startsWith('ghp_') || token.startsWith('github_pat_'))) {
+            return { provider: 'github', source: 'gh CLI (gh auth token)', credentials: { token } };
+        }
+    }
+    catch { }
+    // 2. gh config file
+    try {
+        const hostsFile = path.join(os.homedir(), '.config', 'gh', 'hosts.yml');
+        if (fs.existsSync(hostsFile)) {
+            const content = fs.readFileSync(hostsFile, 'utf8');
+            const match = content.match(/oauth_token:\s*([^\s\n]+)/);
+            if (match?.[1]) {
+                return {
+                    provider: 'github',
+                    source: '~/.config/gh/hosts.yml',
+                    credentials: { token: match[1].trim() },
+                };
+            }
+        }
+    }
+    catch { }
+    // 3. Environment variables
+    const envToken = process.env.GH_TOKEN ?? process.env.GITHUB_TOKEN;
+    if (envToken) {
+        return {
+            provider: 'github',
+            source: '$GH_TOKEN / $GITHUB_TOKEN',
+            credentials: { token: envToken },
+        };
+    }
+    return null;
+}
+function detectAWS() {
+    if (process.env.AWS_ACCESS_KEY_ID && process.env.AWS_SECRET_ACCESS_KEY) {
+        return {
+            provider: 'bedrock',
+            source: 'AWS environment variables',
+            credentials: {
+                access_key_id: process.env.AWS_ACCESS_KEY_ID,
+                secret_access_key: process.env.AWS_SECRET_ACCESS_KEY,
+                region: process.env.AWS_REGION ?? 'us-east-1',
+            },
+        };
+    }
+    try {
+        const credFile = path.join(os.homedir(), '.aws', 'credentials');
+        if (fs.existsSync(credFile)) {
+            const content = fs.readFileSync(credFile, 'utf8');
+            const keyId = content.match(/aws_access_key_id\s*=\s*([^\s\n]+)/)?.[1];
+            const secret = content.match(/aws_secret_access_key\s*=\s*([^\s\n]+)/)?.[1];
+            const region = content.match(/region\s*=\s*([^\s\n]+)/)?.[1];
+            if (keyId && secret) {
+                return {
+                    provider: 'bedrock',
+                    source: '~/.aws/credentials',
+                    credentials: { access_key_id: keyId, secret_access_key: secret, region: region ?? 'us-east-1' },
+                };
+            }
+        }
+    }
+    catch { }
+    // Try aws CLI for SSO-based auth
+    try {
+        const identity = execSync('aws sts get-caller-identity 2>/dev/null', {
+            stdio: ['pipe', 'pipe', 'pipe'],
+        }).toString();
+        if (identity.includes('UserId')) {
+            return {
+                provider: 'bedrock',
+                source: 'AWS CLI (SSO/role)',
+                credentials: { profile: 'default', region: process.env.AWS_REGION ?? 'us-east-1' },
+            };
+        }
+    }
+    catch { }
+    return null;
+}
+function detectFromEnv(provider, envVars, field) {
+    for (const envVar of envVars) {
+        const value = process.env[envVar];
+        if (value) {
+            return { provider, source: `$${envVar}`, credentials: { [field]: value } };
+        }
+    }
+    return null;
+}
+function detectGCloud() {
+    // Check env var
+    const envKey = process.env.GOOGLE_API_KEY ?? process.env.GEMINI_API_KEY;
+    if (envKey) {
+        return {
+            provider: 'gemini',
+            source: '$GOOGLE_API_KEY / $GEMINI_API_KEY',
+            credentials: { api_key: envKey },
+        };
+    }
+    // Try gcloud application-default credentials
+    try {
+        const adcFile = path.join(os.homedir(), '.config', 'gcloud', 'application_default_credentials.json');
+        if (fs.existsSync(adcFile)) {
+            return {
+                provider: 'gemini',
+                source: 'gcloud application-default credentials',
+                credentials: { adc_path: adcFile },
+            };
+        }
+    }
+    catch { }
+    return null;
+}
+export function detectSystemAuth(provider) {
+    switch (provider) {
+        case 'github':
+            return detectGitHub();
+        case 'anthropic':
+            return detectFromEnv('anthropic', ['ANTHROPIC_API_KEY'], 'api_key');
+        case 'openai':
+            return detectFromEnv('openai', ['OPENAI_API_KEY'], 'api_key');
+        case 'openrouter':
+            return detectFromEnv('openrouter', ['OPENROUTER_API_KEY'], 'api_key');
+        case 'groq':
+            return detectFromEnv('groq', ['GROQ_API_KEY'], 'api_key');
+        case 'gemini':
+            return detectGCloud();
+        case 'mistral':
+            return detectFromEnv('mistral', ['MISTRAL_API_KEY'], 'api_key');
+        case 'bedrock':
+            return detectAWS();
+        case 'ollama':
+            // Ollama is local — just verify it's running
+            try {
+                execSync('curl -sf http://localhost:11434/api/tags 2>/dev/null', {
+                    stdio: ['pipe', 'pipe', 'pipe'],
+                });
+                return {
+                    provider: 'ollama',
+                    source: 'Local Ollama server (http://localhost:11434)',
+                    credentials: { base_url: 'http://localhost:11434' },
+                };
+            }
+            catch { }
+            return null;
+        default:
+            return null;
+    }
+}
+export function detectAllSystemAuth() {
+    const providers = [
+        'github', 'anthropic', 'openai', 'openrouter',
+        'groq', 'gemini', 'mistral', 'bedrock', 'ollama',
+    ];
+    return providers
+        .map(p => detectSystemAuth(p))
+        .filter((r) => r !== null);
+}
+//# sourceMappingURL=system-auth.js.map

package/dist/providers/system-auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"system-auth.js","sourceRoot":"","sources":["../../src/providers/system-auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAA;AACxC,OAAO,EAAE,MAAM,UAAU,CAAA;AACzB,OAAO,EAAE,MAAM,IAAI,CAAA;AACnB,OAAO,IAAI,MAAM,MAAM,CAAA;AAQvB,SAAS,YAAY;IACnB,wCAAwC;IACxC,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,QAAQ,CAAC,2BAA2B,EAAE;YAClD,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;SAChC,CAAC;aACC,QAAQ,EAAE;aACV,IAAI,EAAE,CAAA;QACT,IAAI,KAAK,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC;YACvG,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,wBAAwB,EAAE,WAAW,EAAE,EAAE,KAAK,EAAE,EAAE,CAAA;QACzF,CAAC;IACH,CAAC;IAAC,MAAM,CAAC,CAAA,CAAC;IAEV,oBAAoB;IACpB,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,CAAC,CAAA;QACvE,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7B,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,CAAA;YAClD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAA;YACxD,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACf,OAAO;oBACL,QAAQ,EAAE,QAAQ;oBAClB,MAAM,EAAE,wBAAwB;oBAChC,WAAW,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE;iBACxC,CAAA;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC,CAAA,CAAC;IAEV,2BAA2B;IAC3B,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,CAAA;IACjE,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO;YACL,QAAQ,EAAE,QAAQ;YAClB,MAAM,EAAE,2BAA2B;YACnC,WAAW,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE;SACjC,CAAA;IACH,CAAC;IAED,OAAO,IAAI,CAAA;AACb,CAAC;AAED,SAAS,SAAS;IAChB,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,OAAO,CAAC,GAAG,CAAC,qBAAqB,EAAE,CAAC;QACvE,OAAO;YACL,QAAQ,EAAE,SAAS;YACnB,MAAM,EAAE,2BAA2B;YACnC,WAAW,EAAE;gBACX,aAAa,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB;gBAC5C,iBAAiB,EAAE,OAAO,CAAC,GAAG,CAAC,qBAAqB;gBACpD,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,WAAW;aAC9C;SACF,CAAA;IACH,CAAC;IAED,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,aAAa,CAAC,CAAA;QAC/D,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5B,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;YACjD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,oCAAoC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;YACtE,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,wCAAwC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;YAC3E,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,yBAAyB,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;YAC5D,IAAI,KAAK,IAAI,MAAM,EAAE,CAAC;gBACpB,OAAO;oBACL,QAAQ,EAAE,SAAS;oBACnB,MAAM,EAAE,oBAAoB;oBAC5B,WAAW,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,iBAAiB,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,IAAI,WAAW,EAAE;iBAChG,CAAA;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC,CAAA,CAAC;IAEV,iCAAiC;IACjC,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,QAAQ,CAAC,yCAAyC,EAAE;YACnE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;SAChC,CAAC,CAAC,QAAQ,EAAE,CAAA;QACb,IAAI,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAChC,OAAO;gBACL,QAAQ,EAAE,SAAS;gBACnB,MAAM,EAAE,oBAAoB;gBAC5B,WAAW,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,WAAW,EAAE;aACnF,CAAA;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC,CAAA,CAAC;IAEV,OAAO,IAAI,CAAA;AACb,CAAC;AAED,SAAS,aAAa,CACpB,QAAgB,EAChB,OAAiB,EACjB,KAAa;IAEb,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QACjC,IAAI,KAAK,EAAE,CAAC;YACV,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,MAAM,EAAE,EAAE,WAAW,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,CAAA;QAC5E,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,SAAS,YAAY;IACnB,gBAAgB;IAChB,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,CAAA;IACvE,IAAI,MAAM,EAAE,CAAC;QACX,OAAO;YACL,QAAQ,EAAE,QAAQ;YAClB,MAAM,EAAE,mCAAmC;YAC3C,WAAW,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE;SACjC,CAAA;IACH,CAAC;IAED,6CAA6C;IAC7C,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CACvB,EAAE,CAAC,OAAO,EAAE,EACZ,SAAS,EACT,QAAQ,EACR,sCAAsC,CACvC,CAAA;QACD,IAAI,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3B,OAAO;gBACL,QAAQ,EAAE,QAAQ;gBAClB,MAAM,EAAE,wCAAwC;gBAChD,WAAW,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE;aACnC,CAAA;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC,CAAA,CAAC;IAEV,OAAO,IAAI,CAAA;AACb,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,QAAgB;IAC/C,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,QAAQ;YACX,OAAO,YAAY,EAAE,CAAA;QAEvB,KAAK,WAAW;YACd,OAAO,aAAa,CAAC,WAAW,EAAE,CAAC,mBAAmB,CAAC,EAAE,SAAS,CAAC,CAAA;QAErE,KAAK,QAAQ;YACX,OAAO,aAAa,CAAC,QAAQ,EAAE,CAAC,gBAAgB,CAAC,EAAE,SAAS,CAAC,CAAA;QAE/D,KAAK,YAAY;YACf,OAAO,aAAa,CAAC,YAAY,EAAE,CAAC,oBAAoB,CAAC,EAAE,SAAS,CAAC,CAAA;QAEvE,KAAK,MAAM;YACT,OAAO,aAAa,CAAC,MAAM,EAAE,CAAC,cAAc,CAAC,EAAE,SAAS,CAAC,CAAA;QAE3D,KAAK,QAAQ;YACX,OAAO,YAAY,EAAE,CAAA;QAEvB,KAAK,SAAS;YACZ,OAAO,aAAa,CAAC,SAAS,EAAE,CAAC,iBAAiB,CAAC,EAAE,SAAS,CAAC,CAAA;QAEjE,KAAK,SAAS;YACZ,OAAO,SAAS,EAAE,CAAA;QAEpB,KAAK,QAAQ;YACX,6CAA6C;YAC7C,IAAI,CAAC;gBACH,QAAQ,CAAC,sDAAsD,EAAE;oBAC/D,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;iBAChC,CAAC,CAAA;gBACF,OAAO;oBACL,QAAQ,EAAE,QAAQ;oBAClB,MAAM,EAAE,8CAA8C;oBACtD,WAAW,EAAE,EAAE,QAAQ,EAAE,wBAAwB,EAAE;iBACpD,CAAA;YACH,CAAC;YAAC,MAAM,CAAC,CAAA,CAAC;YACV,OAAO,IAAI,CAAA;QAEb;YACE,OAAO,IAAI,CAAA;IACf,CAAC;AACH,CAAC;AAED,MAAM,UAAU,mBAAmB;IACjC,MAAM,SAAS,GAAG;QAChB,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE,YAAY;QAC7C,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ;KACjD,CAAA;IACD,OAAO,SAAS;SACb,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;SAC7B,MAAM,CAAC,CAAC,CAAC,EAAqB,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAA;AACjD,CAAC"}

package/dist/runtime/daemon.d.ts

@@ -0,0 +1,10 @@
+/**
+ * daemon.ts — Entry point for the daemon child process.
+ *
+ * Invoked as:
+ *   node dist/runtime/daemon.js <manifestPath> <stateFilePath>
+ *
+ * The CLI spawns this as a detached background process.
+ */
+export {};
+//# sourceMappingURL=daemon.d.ts.map

package/dist/runtime/daemon.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"daemon.d.ts","sourceRoot":"","sources":["../../src/runtime/daemon.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG"}