@keel_flow/setup 0.2.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 jglasskatz
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/dist/encryption-key.d.ts

@@ -0,0 +1,19 @@
+export interface EncryptionKeyStatus {
+    source: "env" | "file" | "generated" | "missing";
+    path?: string;
+    warning?: string;
+}
+export declare function readEncryptionKey(opts?: {
+    keyFile?: string;
+}): {
+    hex: string;
+    status: EncryptionKeyStatus;
+} | null;
+export declare function ensureEncryptionKey(opts?: {
+    keyFile?: string;
+}): {
+    hex: string;
+    status: EncryptionKeyStatus;
+};
+export declare function maskKey(value: string): string;
+//# sourceMappingURL=encryption-key.d.ts.map

package/dist/encryption-key.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"encryption-key.d.ts","sourceRoot":"","sources":["../src/encryption-key.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,KAAK,GAAG,MAAM,GAAG,WAAW,GAAG,SAAS,CAAC;IACjD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,wBAAgB,iBAAiB,CAAC,IAAI,GAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG;IAClE,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,mBAAmB,CAAC;CAC7B,GAAG,IAAI,CAgBP;AAED,wBAAgB,mBAAmB,CAAC,IAAI,GAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG;IACpE,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,mBAAmB,CAAC;CAC7B,CAwBA;AAMD,wBAAgB,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAG7C"}

package/dist/encryption-key.js

@@ -0,0 +1,52 @@
+import { randomBytes } from "crypto";
+import { existsSync, readFileSync, writeFileSync, chmodSync, mkdirSync } from "fs";
+import { join, dirname } from "path";
+const HEX_PATTERN = /^[0-9a-fA-F]{64}$/;
+export function readEncryptionKey(opts = {}) {
+    const envKey = process.env["KEEL_TOKEN_ENCRYPTION_KEY"];
+    if (envKey && HEX_PATTERN.test(envKey)) {
+        return { hex: envKey, status: { source: "env" } };
+    }
+    const keyFile = opts.keyFile ?? defaultKeyFilePath();
+    if (existsSync(keyFile)) {
+        const onDisk = readFileSync(keyFile, "utf-8").trim();
+        if (HEX_PATTERN.test(onDisk)) {
+            return { hex: onDisk, status: { source: "file", path: keyFile } };
+        }
+        return null;
+    }
+    return null;
+}
+export function ensureEncryptionKey(opts = {}) {
+    const existing = readEncryptionKey(opts);
+    if (existing)
+        return existing;
+    const keyFile = opts.keyFile ?? defaultKeyFilePath();
+    mkdirSync(dirname(keyFile), { recursive: true });
+    const hex = randomBytes(32).toString("hex");
+    writeFileSync(keyFile, hex + "\n", { mode: 0o600 });
+    try {
+        chmodSync(keyFile, 0o600);
+    }
+    catch {
+        // best effort on platforms without POSIX mode
+    }
+    return {
+        hex,
+        status: {
+            source: "generated",
+            path: keyFile,
+            warning: `Generated a new 32-byte encryption key at ${keyFile}. ` +
+                "BACK THIS UP OFF-MACHINE — losing it makes every stored secret unrecoverable.",
+        },
+    };
+}
+function defaultKeyFilePath() {
+    return join(process.cwd(), ".keel", "encryption-key");
+}
+export function maskKey(value) {
+    if (value.length <= 8)
+        return "•".repeat(value.length);
+    return value.slice(0, 3) + "•".repeat(Math.max(4, value.length - 7)) + value.slice(-4);
+}
+//# sourceMappingURL=encryption-key.js.map

package/dist/encryption-key.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"encryption-key.js","sourceRoot":"","sources":["../src/encryption-key.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AACrC,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AACnF,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAErC,MAAM,WAAW,GAAG,mBAAmB,CAAC;AAQxC,MAAM,UAAU,iBAAiB,CAAC,OAA6B,EAAE;IAI/D,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;IACxD,IAAI,MAAM,IAAI,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACvC,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;IACpD,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,kBAAkB,EAAE,CAAC;IACrD,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;QACrD,IAAI,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAC7B,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC;QACpE,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,OAA6B,EAAE;IAIjE,MAAM,QAAQ,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACzC,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAE9B,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,kBAAkB,EAAE,CAAC;IACrD,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACjD,MAAM,GAAG,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC5C,aAAa,CAAC,OAAO,EAAE,GAAG,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACpD,IAAI,CAAC;QACH,SAAS,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,8CAA8C;IAChD,CAAC;IAED,OAAO;QACL,GAAG;QACH,MAAM,EAAE;YACN,MAAM,EAAE,WAAW;YACnB,IAAI,EAAE,OAAO;YACb,OAAO,EACL,6CAA6C,OAAO,IAAI;gBACxD,+EAA+E;SAClF;KACF,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB;IACzB,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,gBAAgB,CAAC,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,KAAa;IACnC,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC;QAAE,OAAO,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACvD,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AACzF,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,5 @@
+export { KEY_REGISTRY, SecretCategorySchema, findKeySpec, keysByCategory, } from "./key-specs.js";
+export type { KeySpec, SecretCategory, TestResult } from "./key-specs.js";
+export { WALKTHROUGH_STEPS, getStep, nextStep, prevStep, } from "./walkthrough.js";
+export type { StepId, WalkthroughStep } from "./walkthrough.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,YAAY,EACZ,oBAAoB,EACpB,WAAW,EACX,cAAc,GACf,MAAM,gBAAgB,CAAC;AACxB,YAAY,EAAE,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAE1E,OAAO,EACL,iBAAiB,EACjB,OAAO,EACP,QAAQ,EACR,QAAQ,GACT,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC"}

package/dist/index.js

@@ -0,0 +1,3 @@
+export { KEY_REGISTRY, SecretCategorySchema, findKeySpec, keysByCategory, } from "./key-specs.js";
+export { WALKTHROUGH_STEPS, getStep, nextStep, prevStep, } from "./walkthrough.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,YAAY,EACZ,oBAAoB,EACpB,WAAW,EACX,cAAc,GACf,MAAM,gBAAgB,CAAC;AAGxB,OAAO,EACL,iBAAiB,EACjB,OAAO,EACP,QAAQ,EACR,QAAQ,GACT,MAAM,kBAAkB,CAAC"}

package/dist/key-specs.d.ts

@@ -0,0 +1,25 @@
+import { z } from "zod";
+export declare const SecretCategorySchema: z.ZodEnum<["llm", "embedding", "rerank", "integration", "system"]>;
+export type SecretCategory = z.infer<typeof SecretCategorySchema>;
+export interface KeySpec {
+    name: string;
+    category: SecretCategory;
+    description: string;
+    required: boolean;
+    docsUrl?: string;
+    shapeHint: string;
+    validateShape: (value: string) => {
+        ok: boolean;
+        reason?: string;
+    };
+    test: (value: string) => Promise<TestResult>;
+}
+export interface TestResult {
+    ok: boolean;
+    detail: string;
+    latencyMs: number;
+}
+export declare const KEY_REGISTRY: KeySpec[];
+export declare function findKeySpec(name: string): KeySpec | undefined;
+export declare function keysByCategory(): Record<SecretCategory, KeySpec[]>;
+//# sourceMappingURL=key-specs.d.ts.map

package/dist/key-specs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"key-specs.d.ts","sourceRoot":"","sources":["../src/key-specs.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,oBAAoB,oEAM/B,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE,MAAM,WAAW,OAAO;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,cAAc,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,OAAO,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACnE,IAAI,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;CAC9C;AAED,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACnB;AAwLD,eAAO,MAAM,YAAY,EAAE,OAAO,EAQjC,CAAC;AAEF,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAE7D;AAED,wBAAgB,cAAc,IAAI,MAAM,CAAC,cAAc,EAAE,OAAO,EAAE,CAAC,CAUlE"}

package/dist/key-specs.js

@@ -0,0 +1,204 @@
+import { z } from "zod";
+export const SecretCategorySchema = z.enum([
+    "llm",
+    "embedding",
+    "rerank",
+    "integration",
+    "system",
+]);
+function isNonEmpty(v) {
+    return v.trim().length > 0 ? { ok: true } : { ok: false, reason: "Empty value" };
+}
+async function timed(fn) {
+    const start = Date.now();
+    const result = await fn();
+    return { result, latencyMs: Date.now() - start };
+}
+async function testHttpAuth(url, headers, okStatuses = [200, 401, 403]) {
+    const { result, latencyMs } = await timed(async () => {
+        try {
+            const res = await fetch(url, { method: "GET", headers });
+            return { status: res.status, ok: res.ok };
+        }
+        catch (err) {
+            return { status: 0, ok: false, error: String(err) };
+        }
+    });
+    if (!okStatuses.includes(result.status)) {
+        return {
+            ok: false,
+            detail: result.status === 0
+                ? `Network error: ${"error" in result ? result.error : "unknown"}`
+                : `Unexpected status ${result.status}`,
+            latencyMs,
+        };
+    }
+    if (result.status === 401 || result.status === 403) {
+        return { ok: false, detail: `Authentication rejected (${result.status})`, latencyMs };
+    }
+    return { ok: true, detail: `${result.status} OK`, latencyMs };
+}
+const ANTHROPIC = {
+    name: "ANTHROPIC_API_KEY",
+    category: "llm",
+    description: "Anthropic API key. Used by the orchestrator and spec-compliance judge.",
+    required: false,
+    docsUrl: "https://platform.claude.com/settings/keys",
+    shapeHint: "sk-ant-…",
+    validateShape(v) {
+        if (!v.startsWith("sk-ant-"))
+            return { ok: false, reason: "Expected prefix `sk-ant-`" };
+        if (v.length < 20)
+            return { ok: false, reason: "Suspiciously short" };
+        return { ok: true };
+    },
+    test(value) {
+        return testHttpAuth("https://api.anthropic.com/v1/models", {
+            "x-api-key": value,
+            "anthropic-version": "2023-06-01",
+        }, [200]);
+    },
+};
+const OPENAI = {
+    name: "OPENAI_API_KEY",
+    category: "llm",
+    description: "OpenAI API key, or an OpenAI-compatible key (DeepSeek / Kimi / Together / Groq / Ollama). Pair with OPENAI_BASE_URL to point at non-OpenAI endpoints.",
+    required: false,
+    docsUrl: "https://platform.openai.com/api-keys",
+    shapeHint: "sk-… or sk-proj-…",
+    validateShape(v) {
+        if (!v.startsWith("sk-"))
+            return { ok: false, reason: "Expected prefix `sk-`" };
+        if (v.length < 20)
+            return { ok: false, reason: "Suspiciously short" };
+        return { ok: true };
+    },
+    async test(value) {
+        const baseUrl = process.env["OPENAI_BASE_URL"] ?? "https://api.openai.com/v1";
+        return testHttpAuth(`${baseUrl.replace(/\/$/, "")}/models`, {
+            Authorization: `Bearer ${value}`,
+        }, [200]);
+    },
+};
+const VOYAGE = {
+    name: "VOYAGE_API_KEY",
+    category: "embedding",
+    description: "Voyage AI API key for voyage-context-3 (recommended default embedding model).",
+    required: false,
+    docsUrl: "https://docs.voyageai.com/docs/api-key-and-installation",
+    shapeHint: "pa-…",
+    validateShape: isNonEmpty,
+    async test(value) {
+        return timed(async () => {
+            try {
+                const res = await fetch("https://api.voyageai.com/v1/embeddings", {
+                    method: "POST",
+                    headers: {
+                        Authorization: `Bearer ${value}`,
+                        "Content-Type": "application/json",
+                    },
+                    body: JSON.stringify({ input: ["ping"], model: "voyage-3-lite" }),
+                });
+                return res;
+            }
+            catch (err) {
+                return { ok: false, status: 0, error: String(err) };
+            }
+        }).then(({ result, latencyMs }) => {
+            const status = result.status;
+            if (status === 200)
+                return { ok: true, detail: "200 OK", latencyMs };
+            if (status === 401)
+                return { ok: false, detail: "Authentication rejected (401)", latencyMs };
+            return { ok: false, detail: `Unexpected status ${status}`, latencyMs };
+        });
+    },
+};
+const OPENAI_EMBEDDING = {
+    name: "OPENAI_EMBEDDING_API_KEY",
+    category: "embedding",
+    description: "Optional separate OpenAI key used only for embeddings (text-embedding-3-small/large). Falls back to OPENAI_API_KEY when unset.",
+    required: false,
+    shapeHint: "sk-…",
+    validateShape(v) {
+        if (!v.startsWith("sk-"))
+            return { ok: false, reason: "Expected prefix `sk-`" };
+        return { ok: true };
+    },
+    test(value) {
+        return testHttpAuth("https://api.openai.com/v1/models", {
+            Authorization: `Bearer ${value}`,
+        }, [200]);
+    },
+};
+const VOYAGE_RERANK = {
+    name: "VOYAGE_RERANK_API_KEY",
+    category: "rerank",
+    description: "Optional separate Voyage key for reranking only (voyage-rerank-2.5). Falls back to VOYAGE_API_KEY when unset. Reranking is enabled by KEEL_KB_RERANK=true.",
+    required: false,
+    shapeHint: "pa-…",
+    validateShape: isNonEmpty,
+    test: VOYAGE.test,
+};
+const GITHUB_PAT = {
+    name: "GITHUB_TOKEN",
+    category: "integration",
+    description: "GitHub personal access token. Used by `@keel_flow/extend` PR opener and any CI integration.",
+    required: false,
+    docsUrl: "https://github.com/settings/tokens",
+    shapeHint: "ghp_… or github_pat_…",
+    validateShape(v) {
+        if (v.startsWith("ghp_") || v.startsWith("github_pat_") || v.startsWith("ghs_")) {
+            return { ok: true };
+        }
+        return { ok: false, reason: "Expected prefix `ghp_`, `github_pat_`, or `ghs_`" };
+    },
+    test(value) {
+        return testHttpAuth("https://api.github.com/user", {
+            Authorization: `Bearer ${value}`,
+            "User-Agent": "keel-setup",
+            Accept: "application/vnd.github+json",
+        }, [200]);
+    },
+};
+const ENCRYPTION_KEY = {
+    name: "KEEL_TOKEN_ENCRYPTION_KEY",
+    category: "system",
+    description: "32-byte hex key used to encrypt stored secrets at rest. Auto-generated on first run; back it up off-machine.",
+    required: true,
+    shapeHint: "64 hex chars",
+    validateShape(v) {
+        if (!/^[0-9a-fA-F]{64}$/.test(v)) {
+            return { ok: false, reason: "Expected 64 hex chars (32 bytes)" };
+        }
+        return { ok: true };
+    },
+    async test() {
+        return { ok: true, detail: "shape-validated (no remote endpoint)", latencyMs: 0 };
+    },
+};
+export const KEY_REGISTRY = [
+    ANTHROPIC,
+    OPENAI,
+    VOYAGE,
+    OPENAI_EMBEDDING,
+    VOYAGE_RERANK,
+    GITHUB_PAT,
+    ENCRYPTION_KEY,
+];
+export function findKeySpec(name) {
+    return KEY_REGISTRY.find((k) => k.name === name);
+}
+export function keysByCategory() {
+    const out = {
+        llm: [],
+        embedding: [],
+        rerank: [],
+        integration: [],
+        system: [],
+    };
+    for (const k of KEY_REGISTRY)
+        out[k.category].push(k);
+    return out;
+}
+//# sourceMappingURL=key-specs.js.map

package/dist/key-specs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"key-specs.js","sourceRoot":"","sources":["../src/key-specs.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,IAAI,CAAC;IACzC,KAAK;IACL,WAAW;IACX,QAAQ;IACR,aAAa;IACb,QAAQ;CACT,CAAC,CAAC;AAoBH,SAAS,UAAU,CAAC,CAAS;IAC3B,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;AACnF,CAAC;AAED,KAAK,UAAU,KAAK,CAAI,EAAoB;IAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACzB,MAAM,MAAM,GAAG,MAAM,EAAE,EAAE,CAAC;IAC1B,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC;AACnD,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,GAAW,EACX,OAA+B,EAC/B,UAAU,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC;IAE5B,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,KAAK,CAAC,KAAK,IAAI,EAAE;QACnD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;YACzD,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC;QAC5C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QACtD,CAAC;IACH,CAAC,CAAC,CAAC;IACH,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QACxC,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;gBACzB,CAAC,CAAC,kBAAkB,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,EAAE;gBAClE,CAAC,CAAC,qBAAqB,MAAM,CAAC,MAAM,EAAE;YACxC,SAAS;SACV,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACnD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,4BAA4B,MAAM,CAAC,MAAM,GAAG,EAAE,SAAS,EAAE,CAAC;IACxF,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,KAAK,EAAE,SAAS,EAAE,CAAC;AAChE,CAAC;AAED,MAAM,SAAS,GAAY;IACzB,IAAI,EAAE,mBAAmB;IACzB,QAAQ,EAAE,KAAK;IACf,WAAW,EAAE,wEAAwE;IACrF,QAAQ,EAAE,KAAK;IACf,OAAO,EAAE,2CAA2C;IACpD,SAAS,EAAE,UAAU;IACrB,aAAa,CAAC,CAAC;QACb,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,2BAA2B,EAAE,CAAC;QACxF,IAAI,CAAC,CAAC,MAAM,GAAG,EAAE;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;QACtE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;IACD,IAAI,CAAC,KAAK;QACR,OAAO,YAAY,CAAC,qCAAqC,EAAE;YACzD,WAAW,EAAE,KAAK;YAClB,mBAAmB,EAAE,YAAY;SAClC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACZ,CAAC;CACF,CAAC;AAEF,MAAM,MAAM,GAAY;IACtB,IAAI,EAAE,gBAAgB;IACtB,QAAQ,EAAE,KAAK;IACf,WAAW,EACT,uJAAuJ;IACzJ,QAAQ,EAAE,KAAK;IACf,OAAO,EAAE,sCAAsC;IAC/C,SAAS,EAAE,mBAAmB;IAC9B,aAAa,CAAC,CAAC;QACb,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC;QAChF,IAAI,CAAC,CAAC,MAAM,GAAG,EAAE;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;QACtE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,KAAK;QACd,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,2BAA2B,CAAC;QAC9E,OAAO,YAAY,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,SAAS,EAAE;YAC1D,aAAa,EAAE,UAAU,KAAK,EAAE;SACjC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACZ,CAAC;CACF,CAAC;AAEF,MAAM,MAAM,GAAY;IACtB,IAAI,EAAE,gBAAgB;IACtB,QAAQ,EAAE,WAAW;IACrB,WAAW,EACT,+EAA+E;IACjF,QAAQ,EAAE,KAAK;IACf,OAAO,EAAE,yDAAyD;IAClE,SAAS,EAAE,MAAM;IACjB,aAAa,EAAE,UAAU;IACzB,KAAK,CAAC,IAAI,CAAC,KAAK;QACd,OAAO,KAAK,CAAC,KAAK,IAAI,EAAE;YACtB,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,wCAAwC,EAAE;oBAChE,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE;wBACP,aAAa,EAAE,UAAU,KAAK,EAAE;wBAChC,cAAc,EAAE,kBAAkB;qBACnC;oBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC;iBAClE,CAAC,CAAC;gBACH,OAAO,GAAG,CAAC;YACb,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAyB,CAAC;YAC7E,CAAC;QACH,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE;YAChC,MAAM,MAAM,GAAI,MAAmB,CAAC,MAAM,CAAC;YAC3C,IAAI,MAAM,KAAK,GAAG;gBAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;YACrE,IAAI,MAAM,KAAK,GAAG;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,+BAA+B,EAAE,SAAS,EAAE,CAAC;YAC7F,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,qBAAqB,MAAM,EAAE,EAAE,SAAS,EAAE,CAAC;QACzE,CAAC,CAAC,CAAC;IACL,CAAC;CACF,CAAC;AAEF,MAAM,gBAAgB,GAAY;IAChC,IAAI,EAAE,0BAA0B;IAChC,QAAQ,EAAE,WAAW;IACrB,WAAW,EACT,gIAAgI;IAClI,QAAQ,EAAE,KAAK;IACf,SAAS,EAAE,MAAM;IACjB,aAAa,CAAC,CAAC;QACb,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC;QAChF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;IACD,IAAI,CAAC,KAAK;QACR,OAAO,YAAY,CAAC,kCAAkC,EAAE;YACtD,aAAa,EAAE,UAAU,KAAK,EAAE;SACjC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACZ,CAAC;CACF,CAAC;AAEF,MAAM,aAAa,GAAY;IAC7B,IAAI,EAAE,uBAAuB;IAC7B,QAAQ,EAAE,QAAQ;IAClB,WAAW,EACT,4JAA4J;IAC9J,QAAQ,EAAE,KAAK;IACf,SAAS,EAAE,MAAM;IACjB,aAAa,EAAE,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC,IAAI;CAClB,CAAC;AAEF,MAAM,UAAU,GAAY;IAC1B,IAAI,EAAE,cAAc;IACpB,QAAQ,EAAE,aAAa;IACvB,WAAW,EACT,6FAA6F;IAC/F,QAAQ,EAAE,KAAK;IACf,OAAO,EAAE,oCAAoC;IAC7C,SAAS,EAAE,uBAAuB;IAClC,aAAa,CAAC,CAAC;QACb,IAAI,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YAChF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACtB,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,kDAAkD,EAAE,CAAC;IACnF,CAAC;IACD,IAAI,CAAC,KAAK;QACR,OAAO,YAAY,CAAC,6BAA6B,EAAE;YACjD,aAAa,EAAE,UAAU,KAAK,EAAE;YAChC,YAAY,EAAE,YAAY;YAC1B,MAAM,EAAE,6BAA6B;SACtC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACZ,CAAC;CACF,CAAC;AAEF,MAAM,cAAc,GAAY;IAC9B,IAAI,EAAE,2BAA2B;IACjC,QAAQ,EAAE,QAAQ;IAClB,WAAW,EACT,8GAA8G;IAChH,QAAQ,EAAE,IAAI;IACd,SAAS,EAAE,cAAc;IACzB,aAAa,CAAC,CAAC;QACb,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YACjC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,kCAAkC,EAAE,CAAC;QACnE,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;IACD,KAAK,CAAC,IAAI;QACR,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,sCAAsC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IACpF,CAAC;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,YAAY,GAAc;IACrC,SAAS;IACT,MAAM;IACN,MAAM;IACN,gBAAgB;IAChB,aAAa;IACb,UAAU;IACV,cAAc;CACf,CAAC;AAEF,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;AACnD,CAAC;AAED,MAAM,UAAU,cAAc;IAC5B,MAAM,GAAG,GAAsC;QAC7C,GAAG,EAAE,EAAE;QACP,SAAS,EAAE,EAAE;QACb,MAAM,EAAE,EAAE;QACV,WAAW,EAAE,EAAE;QACf,MAAM,EAAE,EAAE;KACX,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,YAAY;QAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACtD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/server.d.ts

@@ -0,0 +1,3 @@
+export { ensureEncryptionKey, readEncryptionKey, maskKey, } from "./encryption-key.js";
+export type { EncryptionKeyStatus } from "./encryption-key.js";
+//# sourceMappingURL=server.d.ts.map

package/dist/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,EACnB,iBAAiB,EACjB,OAAO,GACR,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC"}

package/dist/server.js

@@ -0,0 +1,2 @@
+export { ensureEncryptionKey, readEncryptionKey, maskKey, } from "./encryption-key.js";
+//# sourceMappingURL=server.js.map

package/dist/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,EACnB,iBAAiB,EACjB,OAAO,GACR,MAAM,qBAAqB,CAAC"}

package/dist/walkthrough.d.ts

@@ -0,0 +1,14 @@
+import { type KeySpec } from "./key-specs.js";
+export type StepId = "welcome" | "llm" | "embedding" | "integrations" | "done";
+export interface WalkthroughStep {
+    id: StepId;
+    title: string;
+    blurb: string;
+    keys: KeySpec[];
+    requireAtLeastOne: boolean;
+}
+export declare const WALKTHROUGH_STEPS: WalkthroughStep[];
+export declare function nextStep(current: StepId): StepId | null;
+export declare function prevStep(current: StepId): StepId | null;
+export declare function getStep(id: StepId): WalkthroughStep;
+//# sourceMappingURL=walkthrough.d.ts.map

package/dist/walkthrough.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"walkthrough.d.ts","sourceRoot":"","sources":["../src/walkthrough.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgB,KAAK,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAE5D,MAAM,MAAM,MAAM,GAAG,SAAS,GAAG,KAAK,GAAG,WAAW,GAAG,cAAc,GAAG,MAAM,CAAC;AAE/E,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,OAAO,EAAE,CAAC;IAChB,iBAAiB,EAAE,OAAO,CAAC;CAC5B;AAED,eAAO,MAAM,iBAAiB,EAAE,eAAe,EA0C9C,CAAC;AAEF,wBAAgB,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAKvD;AAED,wBAAgB,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAKvD;AAED,wBAAgB,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,eAAe,CAInD"}

package/dist/walkthrough.js

@@ -0,0 +1,59 @@
+import { KEY_REGISTRY } from "./key-specs.js";
+export const WALKTHROUGH_STEPS = [
+    {
+        id: "welcome",
+        title: "Welcome to Keel",
+        blurb: "Keel needs a few keys to talk to LLM providers and (optionally) external services. We'll walk through the required ones and skip optional ones unless you want them. You can edit anything later at /settings/keys.",
+        keys: [],
+        requireAtLeastOne: false,
+    },
+    {
+        id: "llm",
+        title: "LLM provider",
+        blurb: "Pick at least one LLM provider. Anthropic via your Pro/Max subscription is the recommended path; OpenAI-compatible covers DeepSeek / Kimi / Together / Groq / Ollama.",
+        keys: KEY_REGISTRY.filter((k) => k.category === "llm"),
+        requireAtLeastOne: true,
+    },
+    {
+        id: "embedding",
+        title: "Embeddings (optional)",
+        blurb: "voyage-context-3 is the recommended embedding model. If no key is configured, Keel falls back to a local MiniLM model (no external API needed, lower quality).",
+        keys: KEY_REGISTRY.filter((k) => k.category === "embedding"),
+        requireAtLeastOne: false,
+    },
+    {
+        id: "integrations",
+        title: "Integrations (optional)",
+        blurb: "GitHub PAT enables the extend-flow PR opener. Rerank API key enables KEEL_KB_RERANK=true.",
+        keys: KEY_REGISTRY.filter((k) => k.category === "integration" || k.category === "rerank"),
+        requireAtLeastOne: false,
+    },
+    {
+        id: "done",
+        title: "Done",
+        blurb: "Setup complete. You can revisit any of these at /settings/keys.",
+        keys: [],
+        requireAtLeastOne: false,
+    },
+];
+export function nextStep(current) {
+    const idx = WALKTHROUGH_STEPS.findIndex((s) => s.id === current);
+    if (idx < 0 || idx >= WALKTHROUGH_STEPS.length - 1)
+        return null;
+    const next = WALKTHROUGH_STEPS[idx + 1];
+    return next ? next.id : null;
+}
+export function prevStep(current) {
+    const idx = WALKTHROUGH_STEPS.findIndex((s) => s.id === current);
+    if (idx <= 0)
+        return null;
+    const prev = WALKTHROUGH_STEPS[idx - 1];
+    return prev ? prev.id : null;
+}
+export function getStep(id) {
+    const step = WALKTHROUGH_STEPS.find((s) => s.id === id);
+    if (!step)
+        throw new Error(`Unknown step: ${id}`);
+    return step;
+}
+//# sourceMappingURL=walkthrough.js.map

package/dist/walkthrough.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"walkthrough.js","sourceRoot":"","sources":["../src/walkthrough.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAgB,MAAM,gBAAgB,CAAC;AAY5D,MAAM,CAAC,MAAM,iBAAiB,GAAsB;IAClD;QACE,EAAE,EAAE,SAAS;QACb,KAAK,EAAE,iBAAiB;QACxB,KAAK,EACH,qNAAqN;QACvN,IAAI,EAAE,EAAE;QACR,iBAAiB,EAAE,KAAK;KACzB;IACD;QACE,EAAE,EAAE,KAAK;QACT,KAAK,EAAE,cAAc;QACrB,KAAK,EACH,uKAAuK;QACzK,IAAI,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,KAAK,CAAC;QACtD,iBAAiB,EAAE,IAAI;KACxB;IACD;QACE,EAAE,EAAE,WAAW;QACf,KAAK,EAAE,uBAAuB;QAC9B,KAAK,EACH,gKAAgK;QAClK,IAAI,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,WAAW,CAAC;QAC5D,iBAAiB,EAAE,KAAK;KACzB;IACD;QACE,EAAE,EAAE,cAAc;QAClB,KAAK,EAAE,yBAAyB;QAChC,KAAK,EACH,2FAA2F;QAC7F,IAAI,EAAE,YAAY,CAAC,MAAM,CACvB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,aAAa,IAAI,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAC/D;QACD,iBAAiB,EAAE,KAAK;KACzB;IACD;QACE,EAAE,EAAE,MAAM;QACV,KAAK,EAAE,MAAM;QACb,KAAK,EAAE,iEAAiE;QACxE,IAAI,EAAE,EAAE;QACR,iBAAiB,EAAE,KAAK;KACzB;CACF,CAAC;AAEF,MAAM,UAAU,QAAQ,CAAC,OAAe;IACtC,MAAM,GAAG,GAAG,iBAAiB,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,OAAO,CAAC,CAAC;IACjE,IAAI,GAAG,GAAG,CAAC,IAAI,GAAG,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAChE,MAAM,IAAI,GAAG,iBAAiB,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;IACxC,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,OAAe;IACtC,MAAM,GAAG,GAAG,iBAAiB,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,OAAO,CAAC,CAAC;IACjE,IAAI,GAAG,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1B,MAAM,IAAI,GAAG,iBAAiB,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;IACxC,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,EAAU;IAChC,MAAM,IAAI,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IACxD,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAC;IAClD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/package.json

@@ -0,0 +1,43 @@
+{
+  "name": "@keel_flow/setup",
+  "version": "0.2.0",
+  "private": false,
+  "type": "module",
+  "publishConfig": {
+    "access": "public"
+  },
+  "files": [
+    "dist"
+  ],
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "import": "./dist/index.js",
+      "require": "./dist/index.js",
+      "types": "./dist/index.d.ts"
+    },
+    "./server": {
+      "import": "./dist/server.js",
+      "require": "./dist/server.js",
+      "types": "./dist/server.d.ts"
+    }
+  },
+  "dependencies": {
+    "zod": "^3.23.0"
+  },
+  "devDependencies": {
+    "@types/node": "^25.9.1",
+    "@typescript-eslint/eslint-plugin": "^8.0.0",
+    "@typescript-eslint/parser": "^8.0.0",
+    "eslint": "^9.0.0",
+    "typescript": "^5.5.0",
+    "vitest": "^2.0.0"
+  },
+  "scripts": {
+    "build": "tsc",
+    "typecheck": "tsc --noEmit",
+    "test": "vitest run",
+    "lint": "eslint src"
+  }
+}