@nac3/forge-cli 0.2.0-alpha.1

package/dist/vault/catalog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalog.js","sourceRoot":"","sources":["../../src/vault/catalog.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAU,CAAC;AAgCxF,0CAA0C;AAC1C,KAAK,UAAU,UAAU,CACvB,GAAW,EACX,IAAiB,EACjB,SAAiB;IAEjB,MAAM,IAAI,GAAG,IAAI,eAAe,EAAE,CAAC;IACnC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;IACxD,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACtB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QAC/D,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC;IAC7E,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;IAC5E,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;AACH,CAAC;AAED,gCAAgC;AAEhC,MAAM,UAAU,GAA6B,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;IACjE,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,6BAA6B,EAAE;QACxD,OAAO,EAAE,EAAE,aAAa,EAAE,QAAQ,GAAG,KAAK,EAAE,MAAM,EAAE,6BAA6B;YACtE,YAAY,EAAE,aAAa,EAAE;KACzC,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IACnB,IAAI,CAAC,CAAC,GAAG;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC;IACpF,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC;IACjF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC;AACrG,CAAC,CAAC;AAEF,MAAM,UAAU,GAA6B,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;IACjE,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,gCAAgC,EAAE;QAC3D,OAAO,EAAE,EAAE,eAAe,EAAE,KAAK,EAAE,YAAY,EAAE,aAAa,EAAE;KACjE,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IACnB,IAAI,CAAC,CAAC,GAAG;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC;IACpF,OAAO,CAAC,CAAC,MAAM,KAAK,GAAG;QACrB,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE;QACrD,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC;AAClG,CAAC,CAAC;AAEF,MAAM,aAAa,GAA6B,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;IACpE;;6DAEyD;IACzD,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,eAAe,GAAG,KAAK,CAAC;IACnE,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,oCAAoC,EAAE;QAC/D,OAAO,EAAE;YACP,aAAa,EAAE,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAC9D,YAAY,EAAE,aAAa;SAC5B;KACF,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IACnB,IAAI,CAAC,CAAC,GAAG;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC;IACpF,OAAO,CAAC,CAAC,MAAM,KAAK,GAAG;QACrB,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE;QACrD,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC;AAClG,CAAC,CAAC;AAEF,oCAAoC;AAEpC,MAAM,OAAO,GAA6B,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;IAC9D,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,qCAAqC,EAAE;QAChE,OAAO,EAAE,EAAE,aAAa,EAAE,SAAS,GAAG,KAAK,EAAE,MAAM,EAAE,kBAAkB;YAC5D,YAAY,EAAE,aAAa,EAAE;KACzC,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IACnB,IAAI,CAAC,CAAC,GAAG;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC;IACpF,OAAO,CAAC,CAAC,MAAM,KAAK,GAAG;QACrB,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE;QACrD,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC;AAClG,CAAC,CAAC;AAEF,MAAM,QAAQ,GAA6B,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;IAC/D;;4BAEwB;IACxB,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,iCAAiC,EAAE;QAC5D,MAAM,EAAE,SAAS;QACjB,OAAO,EAAE,EAAE,aAAa,EAAE,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAC9E,YAAY,EAAE,aAAa,EAAE;KACzC,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IACnB,IAAI,CAAC,CAAC,GAAG;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC;IACpF,OAAO,CAAC,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG;QACzC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE;QAC1D,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC;AAClG,CAAC,CAAC;AAEF,MAAM,UAAU,GAA6B,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;IACjE;;;oEAGgE;IAChE,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,iCAAiC,EAAE;QAC5D,OAAO,EAAE,EAAE,aAAa,EAAE,SAAS,GAAG,KAAK,EAAE,YAAY,EAAE,aAAa,EAAE;KAC3E,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IACnB,IAAI,CAAC,CAAC,GAAG;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC;IACpF,OAAO,CAAC,CAAC,MAAM,KAAK,GAAG;QACrB,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE;QACrD,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC;AAClG,CAAC,CAAC;AAEF,8BAA8B;AAE9B,MAAM,aAAa,GAA6B,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;IAClE;gEAC4D;IAC5D,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,uCAAuC,EAAE;QAClE,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,WAAW,EAAE,GAAG,EAAE,mBAAmB,EAAE,YAAY;YACnD,cAAc,EAAE,kBAAkB,EAAE,YAAY,EAAE,aAAa;SAChE;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,KAAK,EAAE,2BAA2B;YAClC,UAAU,EAAE,CAAC;YACb,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;SAC9C,CAAC;KACH,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IACnB,IAAI,CAAC,CAAC,GAAG;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC;IACpF;2DACuD;IACvD,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC;IACjF,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACzC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC;IACrG,CAAC;IACD;;wBAEoB;IACpB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,2BAA2B,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC;AACvG,CAAC,CAAC;AAEF,MAAM,UAAU,GAA6B,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;IAC/D,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,kCAAkC,EAAE;QAC7D,OAAO,EAAE,EAAE,aAAa,EAAE,SAAS,GAAG,GAAG,EAAE,YAAY,EAAE,aAAa,EAAE;KACzE,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IACnB,IAAI,CAAC,CAAC,GAAG;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC;IACpF,OAAO,CAAC,CAAC,MAAM,KAAK,GAAG;QACrB,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE;QACrD,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC;AAClG,CAAC,CAAC;AAEF,MAAM,cAAc,GAA6B,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;IACnE,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,mCAAmC,EAAE;QAC9D,OAAO,EAAE,EAAE,YAAY,EAAE,GAAG,EAAE,YAAY,EAAE,aAAa,EAAE;KAC5D,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IACnB,IAAI,CAAC,CAAC,GAAG;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC;IACpF,OAAO,CAAC,CAAC,MAAM,KAAK,GAAG;QACrB,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE;QACrD,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC;AAClG,CAAC,CAAC;AAEF,MAAM,eAAe,GAA6B,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;IACpE;;;0CAGsC;IACtC,IAAI,MAAM,GAAoD,IAAI,CAAC;IACnE,IAAI,CAAC;QAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,cAAc,CAAC,CAAC;IAC1D,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,iBAAiB,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;QACzE,OAAO;YACL,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;YACpB,MAAM,EAAE,4CAA4C;YACpD,UAAU,EAAE,CAAC;SACd,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,EAAE,MAAM,EAAE,oCAAoC,EAAE,CAAC;AAChG,CAAC,CAAC;AAEF,iCAAiC;AAEjC,MAAM,OAAO,GAA6B,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE;IAChE;6DACyD;IACzD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC;QACpC,MAAM,EAAE,8CAA8C,EAAE,CAAC;AACpE,CAAC,CAAC;AAEF,+BAA+B;AAE/B,MAAM,SAAS,GAA6B,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;IAChE,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,iCAAiC,EAAE;QAC5D,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,aAAa,EAAE,SAAS,GAAG,KAAK,EAAE,YAAY,EAAE,aAAa,EAAE;KAC3E,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IACnB,IAAI,CAAC,CAAC,GAAG;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC;IACpF,IAAI,IAAI,GAAqC,EAAE,CAAC;IAChD,IAAI,CAAC;QAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;IAClE,OAAO,IAAI,CAAC,EAAE;QACZ,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE;QAC1D,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,IAAI,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC;AAChH,CAAC,CAAC;AAEF,MAAM,WAAW,GAA6B,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;IAClE,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,uCAAuC,EAAE;QAClE,OAAO,EAAE,EAAE,aAAa,EAAE,MAAM,GAAG,KAAK,EAAE,YAAY,EAAE,aAAa,EAAE;KACxE,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IACnB,IAAI,CAAC,CAAC,GAAG;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC;IACpF,OAAO,CAAC,CAAC,MAAM,KAAK,GAAG;QACrB,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE;QACrD,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC;AAClG,CAAC,CAAC;AAEF,MAAM,UAAU,GAA6B,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;IAC/D,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,mCAAmC,EAAE;QAC9D,OAAO,EAAE,EAAE,aAAa,EAAE,SAAS,GAAG,GAAG,EAAE,YAAY,EAAE,aAAa,EAAE;KACzE,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IACnB,IAAI,CAAC,CAAC,GAAG;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC;IACpF,OAAO,CAAC,CAAC,MAAM,KAAK,GAAG;QACrB,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE;QACrD,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC;AAClG,CAAC,CAAC;AAEF,MAAM,YAAY,GAA6B,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;IACjE,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,oCAAoC,EAAE;QAC/D,OAAO,EAAE,EAAE,aAAa,EAAE,SAAS,GAAG,GAAG,EAAE,YAAY,EAAE,aAAa,EAAE;KACzE,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IACnB,IAAI,CAAC,CAAC,GAAG;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC;IACpF,OAAO,CAAC,CAAC,MAAM,KAAK,GAAG;QACrB,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE;QACrD,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC;AAClG,CAAC,CAAC;AAEF,MAAM,UAAU,GAA6B,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;IACjE,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,gCAAgC,EAAE;QAC3D,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,cAAc,EAAE,kBAAkB;YACxD,YAAY,EAAE,aAAa,EAAE;QACxC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC;KACrD,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IACnB,IAAI,CAAC,CAAC,GAAG;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC;IACpF,OAAO,CAAC,CAAC,MAAM,KAAK,GAAG;QACrB,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE;QACrD,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC;AAClG,CAAC,CAAC;AAEF,MAAM,UAAU,GAA6B,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;IACjE,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,oCAAoC,EAAE;QAC/D,OAAO,EAAE,EAAE,aAAa,EAAE,SAAS,GAAG,KAAK,EAAE,gBAAgB,EAAE,YAAY;YAChE,YAAY,EAAE,aAAa,EAAE;KACzC,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IACnB,IAAI,CAAC,CAAC,GAAG;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC;IACpF,OAAO,CAAC,CAAC,MAAM,KAAK,GAAG;QACrB,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE;QACrD,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC;AAClG,CAAC,CAAC;AAEF,MAAM,SAAS,GAA6B,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;IAChE,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,6BAA6B,EAAE;QACxD,OAAO,EAAE,EAAE,eAAe,EAAE,KAAK,EAAE,YAAY,EAAE,aAAa,EAAE;KACjE,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IACnB,IAAI,CAAC,CAAC,GAAG;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC;IACpF,OAAO,CAAC,CAAC,MAAM,KAAK,GAAG;QACrB,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE;QACrD,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC;AAClG,CAAC,CAAC;AAEF,MAAM,UAAU,GAA6B,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE;IACnE;;uCAEmC;IACnC,MAAM,EAAE,GAAG,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC1C,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACxB,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,kEAAkE;YACpE,CAAC,CAAC,8CAA8C;QAC3D,UAAU,EAAE,CAAC,EAAE,CAAC;AAC3B,CAAC,CAAC;AAEF,SAAS,YAAY,CAAC,QAAgB;IACpC,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,CAAC;IACzB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACpC,IAAI,MAAM,CAAC,OAAO;YAAE,OAAO,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAChE,IAAI,MAAM,CAAC,KAAK;YAAE,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAC5D,IAAI,MAAM,CAAC,MAAM;YAAE,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAChE,CAAC;IAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;IAC9B,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AAChC,CAAC;AAED,4DAA4D;AAC5D,MAAM,CAAC,MAAM,YAAY,GAAuB;IAC9C,UAAU;IACV,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM;QAClC,WAAW,EAAE,qDAAqD;QAClE,SAAS,EAAE,oCAAoC;QAC/C,IAAI,EAAE,UAAU,EAAE;IACpB,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM;QAClC,WAAW,EAAE,wCAAwC;QACrD,SAAS,EAAE,2DAA2D;QACtE,IAAI,EAAE,UAAU,EAAE;IACpB,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE,MAAM;QACrC,WAAW,EAAE,sDAAsD;QACnE,SAAS,EAAE,uDAAuD;QAClE,IAAI,EAAE,aAAa,EAAE;IACvB,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM;QAC7B,WAAW,EAAE,qDAAqD,EAAE;IAEtE,cAAc;IACd,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,UAAU;QACnC,WAAW,EAAE,6CAA6C;QAC1D,SAAS,EAAE,yCAAyC;QACpD,IAAI,EAAE,OAAO,EAAE;IACjB,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,UAAU;QACpC,WAAW,EAAE,qCAAqC;QAClD,SAAS,EAAE,wCAAwC;QACnD,IAAI,EAAE,QAAQ,EAAE;IAClB,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,UAAU;QACrC,WAAW,EAAE,sCAAsC,EAAE;IACvD,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,UAAU;QACtC,WAAW,EAAE,iCAAiC;QAC9C,SAAS,EAAE,0CAA0C;QACrD,IAAI,EAAE,UAAU,EAAE;IACpB,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,UAAU;QACxC,WAAW,EAAE,sDAAsD,EAAE;IAEvE,QAAQ;IACR,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI;QAC7B,WAAW,EAAE,8BAA8B;QAC3C,SAAS,EAAE,6CAA6C;QACxD,IAAI,EAAE,aAAa,EAAE;IACvB,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI;QAC1B,WAAW,EAAE,oCAAoC;QACjD,SAAS,EAAE,sCAAsC;QACjD,IAAI,EAAE,UAAU,EAAE;IACpB,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,IAAI;QAC9B,WAAW,EAAE,oBAAoB;QACjC,SAAS,EAAE,6CAA6C;QACxD,IAAI,EAAE,cAAc,EAAE;IACxB,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,IAAI;QAChC,WAAW,EAAE,uEAAuE;QACpF,SAAS,EAAE,4DAA4D;QACvE,IAAI,EAAE,eAAe,EAAE;IAEzB,WAAW;IACX,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,OAAO;QACxC,WAAW,EAAE,2BAA2B;QACxC,SAAS,EAAE,+DAA+D;QAC1E,IAAI,EAAE,OAAO,EAAE;IACjB,EAAE,IAAI,EAAE,uBAAuB,EAAE,IAAI,EAAE,OAAO;QAC5C,WAAW,EAAE,uDAAuD;QACpE,IAAI,EAAE,OAAO,EAAE;IACjB,EAAE,IAAI,EAAE,qBAAqB,EAAE,IAAI,EAAE,OAAO;QAC1C,WAAW,EAAE,0BAA0B;QACvC,SAAS,EAAE,4DAA4D;QACvE,IAAI,EAAE,eAAe,CAAC,+BAA+B,EAAE;IACzD,EAAE,IAAI,EAAE,yBAAyB,EAAE,IAAI,EAAE,OAAO;QAC9C,WAAW,EAAE,mEAAmE,EAAE;IAEpF,SAAS;IACT,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE,KAAK;QACpC,WAAW,EAAE,0BAA0B;QACvC,SAAS,EAAE,4BAA4B;QACvC,IAAI,EAAE,SAAS,EAAE;IACnB,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,KAAK;QACtC,WAAW,EAAE,gDAAgD;QAC7D,SAAS,EAAE,6CAA6C;QACxD,IAAI,EAAE,WAAW,EAAE;IACrB,EAAE,IAAI,EAAE,oBAAoB,EAAE,IAAI,EAAE,KAAK;QACvC,WAAW,EAAE,0BAA0B;QACvC,SAAS,EAAE,6BAA6B,EAAE;IAC5C,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,KAAK;QACtC,WAAW,EAAE,kCAAkC;QAC/C,SAAS,EAAE,6BAA6B;QACxC,IAAI,EAAE,UAAU,EAAE;IACpB,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,KAAK;QACtC,WAAW,EAAE,4CAA4C;QACzD,SAAS,EAAE,sCAAsC;QACjD,IAAI,EAAE,UAAU,EAAE;IACpB,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE,KAAK;QACrC,WAAW,EAAE,yBAAyB;QACtC,SAAS,EAAE,4CAA4C;QACvD,IAAI,EAAE,YAAY,EAAE;IACtB,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE,KAAK;QACpC,WAAW,EAAE,iBAAiB;QAC9B,SAAS,EAAE,uDAAuD,EAAE;IACtE,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,KAAK;QACjC,WAAW,EAAE,gBAAgB;QAC7B,SAAS,EAAE,iCAAiC;QAC5C,IAAI,EAAE,UAAU,EAAE;IACpB,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,KAAK;QACjC,WAAW,EAAE,qCAAqC;QAClD,SAAS,EAAE,4CAA4C;QACvD,IAAI,EAAE,UAAU,EAAE;IACpB,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,KAAK;QAChC,WAAW,EAAE,6BAA6B;QAC1C,SAAS,EAAE,gCAAgC;QAC3C,IAAI,EAAE,SAAS,EAAE;CACpB,CAAC;AAEF;8CAC8C;AAC9C,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;AACnD,CAAC;AAED;wBACwB;AACxB,MAAM,UAAU,SAAS,CAAC,IAAY;IACpC,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IAClC,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC;AACvC,CAAC;AAED,2CAA2C;AAC3C,MAAM,UAAU,aAAa;IAC3B,MAAM,GAAG,GAAyC;QAChD,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE;KAC/D,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,YAAY;QAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/vault/crypto.d.ts

@@ -0,0 +1,82 @@
+/**
+ * Vault cryptographic primitives.
+ *
+ * The vault encrypts user-provided credentials (Anthropic API key,
+ * Whisper key, ElevenLabs key, GitHub token, npm token, voiceprint
+ * embedding, etc) under a master key derived from a stable machine
+ * fingerprint + a per-install random salt.
+ *
+ * Threat model addressed:
+ *   - Casual reads of the vault file from disk by other processes
+ *     or accidental sync to cloud storage. The encrypted blob is
+ *     useless without the master key.
+ *   - Tampering: AES-256-GCM auth tag catches any modification.
+ *
+ * NOT addressed (intentional, per ROADMAP_VOICE_FORGE_2026_05_23.md
+ * sec 2.1):
+ *   - Theft of the entire machine. Anyone with root + the disk +
+ *     the same hostname/MAC/etc CAN re-derive the key. The vault is
+ *     not a defense against a compromised host. It is a defense
+ *     against accidental exposure (chat logs, cloud sync, etc).
+ *
+ * Loud failures per ROADMAP sec 12.2: tampered ciphertext throws,
+ * wrong-key decryption throws, short blobs throw, key length
+ * mismatches throw.
+ *
+ * ASCII-only.
+ */
+/**
+ * Stable per-machine identity. Used as the entropy source for the
+ * vault master key, combined with a per-install random salt.
+ *
+ * Fields chosen to survive reboot but change when the user changes
+ * machine. None of them are secrets -- the secret is the SALT (and
+ * the scrypt work factor).
+ */
+export interface MachineFingerprint {
+    hostname: string;
+    primaryMacAddress: string;
+    platform: string;
+    arch: string;
+    username: string;
+}
+/**
+ * Compute the current machine's fingerprint. Optional override lets
+ * tests inject deterministic values.
+ */
+export declare function computeMachineFingerprint(override?: Partial<MachineFingerprint>): MachineFingerprint;
+/**
+ * Derive a 32-byte AES key from the fingerprint + per-install salt.
+ * Deterministic for the same inputs -- the vault file is openable
+ * across processes on the same machine without persisting the key
+ * anywhere.
+ */
+export declare function deriveVaultKey(fingerprint: MachineFingerprint, salt: Buffer): Buffer;
+/**
+ * Encrypt a UTF-8 plaintext under the given key. Returns a single
+ * buffer with the layout:
+ *
+ *   [12 bytes IV][N bytes ciphertext][16 bytes auth tag]
+ *
+ * The IV is fresh on every call so encrypting the same plaintext
+ * twice produces different blobs.
+ */
+export declare function encrypt(plaintext: string, key: Buffer): Buffer;
+/**
+ * Decrypt a blob produced by encrypt(). Throws loudly on:
+ *   - key length mismatch
+ *   - blob too short
+ *   - auth tag mismatch (tampered ciphertext or wrong key)
+ *
+ * Never returns a partial / placeholder string.
+ */
+export declare function decrypt(blob: Buffer, key: Buffer): string;
+/**
+ * Generate a fresh 16-byte salt for a new vault install. Caller
+ * is responsible for persisting it to ~/.yujin-forge/vault.salt
+ * (or wherever the vault store decides).
+ */
+export declare function generateSalt(): Buffer;
+/** Exported as a constant for tests + future migrations. */
+export declare const VAULT_CRYPTO_VERSION = 1;
+//# sourceMappingURL=crypto.d.ts.map

package/dist/vault/crypto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.d.ts","sourceRoot":"","sources":["../../src/vault/crypto.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAgCH;;;;;;;GAOG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;GAGG;AACH,wBAAgB,yBAAyB,CACvC,QAAQ,CAAC,EAAE,OAAO,CAAC,kBAAkB,CAAC,GACrC,kBAAkB,CA0BpB;AAiBD;;;;;GAKG;AACH,wBAAgB,cAAc,CAC5B,WAAW,EAAE,kBAAkB,EAC/B,IAAI,EAAE,MAAM,GACX,MAAM,CAaR;AAED;;;;;;;;GAQG;AACH,wBAAgB,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAY9D;AAED;;;;;;;GAOG;AACH,wBAAgB,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CA0BzD;AAED;;;;GAIG;AACH,wBAAgB,YAAY,IAAI,MAAM,CAErC;AAED,4DAA4D;AAC5D,eAAO,MAAM,oBAAoB,IAAI,CAAC"}

package/dist/vault/crypto.js

@@ -0,0 +1,173 @@
+/**
+ * Vault cryptographic primitives.
+ *
+ * The vault encrypts user-provided credentials (Anthropic API key,
+ * Whisper key, ElevenLabs key, GitHub token, npm token, voiceprint
+ * embedding, etc) under a master key derived from a stable machine
+ * fingerprint + a per-install random salt.
+ *
+ * Threat model addressed:
+ *   - Casual reads of the vault file from disk by other processes
+ *     or accidental sync to cloud storage. The encrypted blob is
+ *     useless without the master key.
+ *   - Tampering: AES-256-GCM auth tag catches any modification.
+ *
+ * NOT addressed (intentional, per ROADMAP_VOICE_FORGE_2026_05_23.md
+ * sec 2.1):
+ *   - Theft of the entire machine. Anyone with root + the disk +
+ *     the same hostname/MAC/etc CAN re-derive the key. The vault is
+ *     not a defense against a compromised host. It is a defense
+ *     against accidental exposure (chat logs, cloud sync, etc).
+ *
+ * Loud failures per ROADMAP sec 12.2: tampered ciphertext throws,
+ * wrong-key decryption throws, short blobs throw, key length
+ * mismatches throw.
+ *
+ * ASCII-only.
+ */
+import { createCipheriv, createDecipheriv, randomBytes, scryptSync, } from 'node:crypto';
+import { arch as osArch, hostname as osHostname, networkInterfaces, platform as osPlatform, userInfo, } from 'node:os';
+/** AES-256-GCM. */
+const ALGORITHM = 'aes-256-gcm';
+const KEY_LENGTH = 32;
+const IV_LENGTH = 12;
+const AUTH_TAG_LENGTH = 16;
+/** scrypt params: 2^14 ops, r=8, p=1. Cost ~60ms on typical
+ *  developer hardware -- enough to slow down brute-force without
+ *  hurting interactive UX. */
+const SCRYPT_COST = 16384;
+const SCRYPT_BLOCK = 8;
+const SCRYPT_PARALLEL = 1;
+const SCRYPT_MAXMEM = 64 * 1024 * 1024;
+/** Salt minimum size. Anything below is rejected loudly. */
+const MIN_SALT_BYTES = 16;
+/**
+ * Compute the current machine's fingerprint. Optional override lets
+ * tests inject deterministic values.
+ */
+export function computeMachineFingerprint(override) {
+    const ifaces = networkInterfaces();
+    let mac = '';
+    /* First non-internal, non-zero MAC wins. Stable across reboots
+       on the same hardware; changes when the user swaps to a new
+       laptop, which is exactly what we want for the vault contract
+       ("works on this machine; reinstall on a fresh machine =
+       re-enter credentials"). */
+    for (const name of Object.keys(ifaces).sort()) {
+        const entries = ifaces[name];
+        if (!entries)
+            continue;
+        for (const entry of entries) {
+            if (!entry.internal && entry.mac && entry.mac !== '00:00:00:00:00:00') {
+                mac = entry.mac;
+                break;
+            }
+        }
+        if (mac)
+            break;
+    }
+    return {
+        hostname: override?.hostname ?? osHostname(),
+        primaryMacAddress: override?.primaryMacAddress ?? mac,
+        platform: override?.platform ?? osPlatform(),
+        arch: override?.arch ?? osArch(),
+        username: override?.username ?? userInfo().username,
+    };
+}
+/**
+ * Stable string serialisation of a fingerprint. Used as the
+ * scrypt passphrase. The order matters: re-orders would produce
+ * different keys, breaking existing vaults.
+ */
+function fingerprintToString(fp) {
+    return [
+        fp.hostname,
+        fp.primaryMacAddress,
+        fp.platform,
+        fp.arch,
+        fp.username,
+    ].join('|');
+}
+/**
+ * Derive a 32-byte AES key from the fingerprint + per-install salt.
+ * Deterministic for the same inputs -- the vault file is openable
+ * across processes on the same machine without persisting the key
+ * anywhere.
+ */
+export function deriveVaultKey(fingerprint, salt) {
+    if (salt.length < MIN_SALT_BYTES) {
+        throw new Error('vault salt must be at least ' + MIN_SALT_BYTES + ' bytes (got ' + salt.length + ')');
+    }
+    const passphrase = fingerprintToString(fingerprint);
+    return scryptSync(passphrase, salt, KEY_LENGTH, {
+        N: SCRYPT_COST,
+        r: SCRYPT_BLOCK,
+        p: SCRYPT_PARALLEL,
+        maxmem: SCRYPT_MAXMEM,
+    });
+}
+/**
+ * Encrypt a UTF-8 plaintext under the given key. Returns a single
+ * buffer with the layout:
+ *
+ *   [12 bytes IV][N bytes ciphertext][16 bytes auth tag]
+ *
+ * The IV is fresh on every call so encrypting the same plaintext
+ * twice produces different blobs.
+ */
+export function encrypt(plaintext, key) {
+    if (key.length !== KEY_LENGTH) {
+        throw new Error('vault key must be exactly ' + KEY_LENGTH + ' bytes (got ' + key.length + ')');
+    }
+    const iv = randomBytes(IV_LENGTH);
+    const cipher = createCipheriv(ALGORITHM, key, iv);
+    const ciphertext = Buffer.concat([
+        cipher.update(plaintext, 'utf-8'),
+        cipher.final(),
+    ]);
+    const authTag = cipher.getAuthTag();
+    return Buffer.concat([iv, ciphertext, authTag]);
+}
+/**
+ * Decrypt a blob produced by encrypt(). Throws loudly on:
+ *   - key length mismatch
+ *   - blob too short
+ *   - auth tag mismatch (tampered ciphertext or wrong key)
+ *
+ * Never returns a partial / placeholder string.
+ */
+export function decrypt(blob, key) {
+    if (key.length !== KEY_LENGTH) {
+        throw new Error('vault key must be exactly ' + KEY_LENGTH + ' bytes (got ' + key.length + ')');
+    }
+    if (blob.length < IV_LENGTH + AUTH_TAG_LENGTH) {
+        throw new Error('vault blob too short to be a valid AES-GCM payload (got ' + blob.length
+            + ' bytes, need at least ' + (IV_LENGTH + AUTH_TAG_LENGTH) + ')');
+    }
+    const iv = blob.subarray(0, IV_LENGTH);
+    const authTag = blob.subarray(blob.length - AUTH_TAG_LENGTH);
+    const ciphertext = blob.subarray(IV_LENGTH, blob.length - AUTH_TAG_LENGTH);
+    const decipher = createDecipheriv(ALGORITHM, key, iv);
+    decipher.setAuthTag(authTag);
+    try {
+        return Buffer.concat([
+            decipher.update(ciphertext),
+            decipher.final(),
+        ]).toString('utf-8');
+    }
+    catch (err) {
+        throw new Error('vault decryption failed (auth tag mismatch -- ciphertext tampered or wrong key): '
+            + (err instanceof Error ? err.message : String(err)));
+    }
+}
+/**
+ * Generate a fresh 16-byte salt for a new vault install. Caller
+ * is responsible for persisting it to ~/.yujin-forge/vault.salt
+ * (or wherever the vault store decides).
+ */
+export function generateSalt() {
+    return randomBytes(MIN_SALT_BYTES);
+}
+/** Exported as a constant for tests + future migrations. */
+export const VAULT_CRYPTO_VERSION = 1;
+//# sourceMappingURL=crypto.js.map

package/dist/vault/crypto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.js","sourceRoot":"","sources":["../../src/vault/crypto.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,EACL,cAAc,EACd,gBAAgB,EAChB,WAAW,EACX,UAAU,GACX,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,IAAI,IAAI,MAAM,EACd,QAAQ,IAAI,UAAU,EACtB,iBAAiB,EACjB,QAAQ,IAAI,UAAU,EACtB,QAAQ,GACT,MAAM,SAAS,CAAC;AAEjB,mBAAmB;AACnB,MAAM,SAAS,GAAG,aAAa,CAAC;AAChC,MAAM,UAAU,GAAG,EAAE,CAAC;AACtB,MAAM,SAAS,GAAG,EAAE,CAAC;AACrB,MAAM,eAAe,GAAG,EAAE,CAAC;AAC3B;;8BAE8B;AAC9B,MAAM,WAAW,GAAG,KAAK,CAAC;AAC1B,MAAM,YAAY,GAAG,CAAC,CAAC;AACvB,MAAM,eAAe,GAAG,CAAC,CAAC;AAC1B,MAAM,aAAa,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAEvC,4DAA4D;AAC5D,MAAM,cAAc,GAAG,EAAE,CAAC;AAkB1B;;;GAGG;AACH,MAAM,UAAU,yBAAyB,CACvC,QAAsC;IAEtC,MAAM,MAAM,GAAG,iBAAiB,EAAE,CAAC;IACnC,IAAI,GAAG,GAAG,EAAE,CAAC;IACb;;;;iCAI6B;IAC7B,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QAC9C,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,CAAC,OAAO;YAAE,SAAS;QACvB,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,CAAC,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,GAAG,IAAI,KAAK,CAAC,GAAG,KAAK,mBAAmB,EAAE,CAAC;gBACtE,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC;gBAChB,MAAM;YACR,CAAC;QACH,CAAC;QACD,IAAI,GAAG;YAAE,MAAM;IACjB,CAAC;IACD,OAAO;QACL,QAAQ,EAAY,QAAQ,EAAE,QAAQ,IAAc,UAAU,EAAE;QAChE,iBAAiB,EAAG,QAAQ,EAAE,iBAAiB,IAAK,GAAG;QACvD,QAAQ,EAAY,QAAQ,EAAE,QAAQ,IAAc,UAAU,EAAE;QAChE,IAAI,EAAgB,QAAQ,EAAE,IAAI,IAAkB,MAAM,EAAE;QAC5D,QAAQ,EAAY,QAAQ,EAAE,QAAQ,IAAc,QAAQ,EAAE,CAAC,QAAQ;KACxE,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,mBAAmB,CAAC,EAAsB;IACjD,OAAO;QACL,EAAE,CAAC,QAAQ;QACX,EAAE,CAAC,iBAAiB;QACpB,EAAE,CAAC,QAAQ;QACX,EAAE,CAAC,IAAI;QACP,EAAE,CAAC,QAAQ;KACZ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAC5B,WAA+B,EAC/B,IAAY;IAEZ,IAAI,IAAI,CAAC,MAAM,GAAG,cAAc,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CACb,8BAA8B,GAAG,cAAc,GAAG,cAAc,GAAG,IAAI,CAAC,MAAM,GAAG,GAAG,CACrF,CAAC;IACJ,CAAC;IACD,MAAM,UAAU,GAAG,mBAAmB,CAAC,WAAW,CAAC,CAAC;IACpD,OAAO,UAAU,CAAC,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE;QAC9C,CAAC,EAAE,WAAW;QACd,CAAC,EAAE,YAAY;QACf,CAAC,EAAE,eAAe;QAClB,MAAM,EAAE,aAAa;KACtB,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,OAAO,CAAC,SAAiB,EAAE,GAAW;IACpD,IAAI,GAAG,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,4BAA4B,GAAG,UAAU,GAAG,cAAc,GAAG,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC;IACjG,CAAC;IACD,MAAM,EAAE,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,cAAc,CAAC,SAAS,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;IAClD,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC;QAC/B,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC;QACjC,MAAM,CAAC,KAAK,EAAE;KACf,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;IACpC,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;AAClD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,OAAO,CAAC,IAAY,EAAE,GAAW;IAC/C,IAAI,GAAG,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,4BAA4B,GAAG,UAAU,GAAG,cAAc,GAAG,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC;IACjG,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,GAAG,SAAS,GAAG,eAAe,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CACb,0DAA0D,GAAG,IAAI,CAAC,MAAM;cACtE,wBAAwB,GAAG,CAAC,SAAS,GAAG,eAAe,CAAC,GAAG,GAAG,CACjE,CAAC;IACJ,CAAC;IACD,MAAM,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IACvC,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,GAAG,eAAe,CAAC,CAAC;IAC7D,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC,MAAM,GAAG,eAAe,CAAC,CAAC;IAC3E,MAAM,QAAQ,GAAG,gBAAgB,CAAC,SAAS,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;IACtD,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IAC7B,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC;YAC3B,QAAQ,CAAC,KAAK,EAAE;SACjB,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACvB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,mFAAmF;cACjF,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CACrD,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,YAAY;IAC1B,OAAO,WAAW,CAAC,cAAc,CAAC,CAAC;AACrC,CAAC;AAED,4DAA4D;AAC5D,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC"}

package/dist/vault/git_askpass.d.ts

@@ -0,0 +1,26 @@
+export interface AskPassHandle {
+    /** Path to the temporary askpass script. */
+    scriptPath: string;
+    /** Env vars to merge into the child's environment. */
+    env: Record<string, string>;
+    /** Delete the temp script. Safe to call multiple times. */
+    cleanup: () => Promise<void>;
+}
+/**
+ * Prepare a GIT_ASKPASS script + env that injects `token` as
+ * the password for `username` (default 'x-access-token').
+ *
+ * Caller pattern:
+ *
+ *   const ap = await prepareGitAskpass(token);
+ *   try {
+ *     await exec('git', ['push', ...], {
+ *       cwd: dir,
+ *       env: { ...process.env, ...ap.env },
+ *     });
+ *   } finally {
+ *     await ap.cleanup();
+ *   }
+ */
+export declare function prepareGitAskpass(token: string, username?: string): Promise<AskPassHandle>;
+//# sourceMappingURL=git_askpass.d.ts.map

package/dist/vault/git_askpass.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"git_askpass.d.ts","sourceRoot":"","sources":["../../src/vault/git_askpass.ts"],"names":[],"mappings":"AAmCA,MAAM,WAAW,aAAa;IAC5B,4CAA4C;IAC5C,UAAU,EAAE,MAAM,CAAC;IACnB,sDAAsD;IACtD,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5B,2DAA2D;IAC3D,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9B;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,iBAAiB,CACrC,KAAK,EAAE,MAAM,EACb,QAAQ,GAAE,MAAyB,GAClC,OAAO,CAAC,aAAa,CAAC,CAkDxB"}

package/dist/vault/git_askpass.js

@@ -0,0 +1,104 @@
+/**
+ * GIT_ASKPASS helper (SQ 0.11).
+ *
+ * Lets `git push` / `git pull` / `git clone` authenticate
+ * with a token from the vault **without** putting that token
+ * in argv, in the remote URL, or in any persistent on-disk
+ * config. The flow:
+ *
+ *  1. We write a tiny script to a temp file with mode 0o700.
+ *  2. The script prints either the username or the token
+ *     depending on the prompt git asks (parsed from argv[1]).
+ *  3. We spawn git with GIT_ASKPASS set to that script's path
+ *     and GIT_TERMINAL_PROMPT=0 so git refuses to fall back to
+ *     stdin (which would otherwise hang in the panel).
+ *  4. The token is passed to the script via the env var
+ *     YF_GIT_TOKEN -- visible only inside the child process
+ *     tree, never in our own argv.
+ *  5. On exit (success or failure), we delete the script file.
+ *
+ * Compared with the old "URL with x-access-token:TOKEN@"
+ * approach this:
+ *   - keeps the token out of process argv (where `ps -ef`
+ *     could see it before),
+ *   - keeps the token out of the remote URL (where a stray
+ *     `git remote -v` would leak it),
+ *   - lets the redactor in the SAME process clean any token
+ *     that leaks into stderr (git error messages with URLs).
+ *
+ * ASCII-only.
+ */
+import { promises as fs } from 'node:fs';
+import os from 'node:os';
+import path from 'node:path';
+import { randomBytes } from 'node:crypto';
+/**
+ * Prepare a GIT_ASKPASS script + env that injects `token` as
+ * the password for `username` (default 'x-access-token').
+ *
+ * Caller pattern:
+ *
+ *   const ap = await prepareGitAskpass(token);
+ *   try {
+ *     await exec('git', ['push', ...], {
+ *       cwd: dir,
+ *       env: { ...process.env, ...ap.env },
+ *     });
+ *   } finally {
+ *     await ap.cleanup();
+ *   }
+ */
+export async function prepareGitAskpass(token, username = 'x-access-token') {
+    if (typeof token !== 'string' || token.length === 0) {
+        throw new Error('prepareGitAskpass: token must be a non-empty string');
+    }
+    const suffix = randomBytes(6).toString('hex');
+    const isWindows = process.platform === 'win32';
+    const scriptName = 'yf-askpass-' + suffix + (isWindows ? '.cmd' : '.sh');
+    const scriptPath = path.join(os.tmpdir(), scriptName);
+    /* The askpass protocol: git calls the script with the
+     * prompt as argv[1]. Examples:
+     *   "Username for 'https://github.com': "
+     *   "Password for 'https://x-access-token@github.com': "
+     * We print the token for anything that looks like a
+     * password prompt; otherwise we print the username. */
+    let body;
+    if (isWindows) {
+        body =
+            '@echo off\r\n'
+                + 'echo %1 | findstr /I "password" >nul\r\n'
+                + 'if %errorlevel%==0 (echo %YF_GIT_TOKEN%) else (echo %YF_GIT_USERNAME%)\r\n';
+    }
+    else {
+        body =
+            '#!/bin/sh\n'
+                + 'case "$1" in\n'
+                + '  *[Pp]assword*) printf "%s" "$YF_GIT_TOKEN" ;;\n'
+                + '  *)             printf "%s" "$YF_GIT_USERNAME" ;;\n'
+                + 'esac\n';
+    }
+    await fs.writeFile(scriptPath, body, { mode: 0o700 });
+    /* On POSIX, mode at write time is enough. On Windows, .cmd
+     * is executable by virtue of the extension. */
+    let cleaned = false;
+    const cleanup = async () => {
+        if (cleaned)
+            return;
+        cleaned = true;
+        try {
+            await fs.unlink(scriptPath);
+        }
+        catch { /* best effort */ }
+    };
+    return {
+        scriptPath,
+        env: {
+            GIT_ASKPASS: scriptPath,
+            GIT_TERMINAL_PROMPT: '0',
+            YF_GIT_TOKEN: token,
+            YF_GIT_USERNAME: username,
+        },
+        cleanup,
+    };
+}
+//# sourceMappingURL=git_askpass.js.map

package/dist/vault/git_askpass.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"git_askpass.js","sourceRoot":"","sources":["../../src/vault/git_askpass.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAW1C;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,KAAa,EACb,WAAmB,gBAAgB;IAEnC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;IACD,MAAM,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC9C,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC;IAC/C,MAAM,UAAU,GAAG,aAAa,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACzE,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,UAAU,CAAC,CAAC;IAEtD;;;;;2DAKuD;IACvD,IAAI,IAAY,CAAC;IACjB,IAAI,SAAS,EAAE,CAAC;QACd,IAAI;YACF,eAAe;kBACb,0CAA0C;kBAC1C,4EAA4E,CAAC;IACnF,CAAC;SAAM,CAAC;QACN,IAAI;YACF,aAAa;kBACX,gBAAgB;kBAChB,mDAAmD;kBACnD,sDAAsD;kBACtD,QAAQ,CAAC;IACf,CAAC;IACD,MAAM,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACtD;mDAC+C;IAE/C,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,MAAM,OAAO,GAAG,KAAK,IAAmB,EAAE;QACxC,IAAI,OAAO;YAAE,OAAO;QACpB,OAAO,GAAG,IAAI,CAAC;QACf,IAAI,CAAC;YAAC,MAAM,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;IAClE,CAAC,CAAC;IAEF,OAAO;QACL,UAAU;QACV,GAAG,EAAE;YACH,WAAW,EAAE,UAAU;YACvB,mBAAmB,EAAE,GAAG;YACxB,YAAY,EAAE,KAAK;YACnB,eAAe,EAAE,QAAQ;SAC1B;QACD,OAAO;KACR,CAAC;AACJ,CAAC"}

package/dist/vault/migrator.d.ts

@@ -0,0 +1,57 @@
+import { type SlotKind } from './catalog.js';
+export interface LegacyFinding {
+    /** Suggested slot name (vault-compatible). */
+    suggested_slot: string;
+    /** Kind inferred from the slot name (or 'custom'). */
+    kind: SlotKind;
+    /** Where the value came from. */
+    file: string;
+    line_number: number;
+    /** Original KEY=value line (before redaction). */
+    original_line: string;
+    /** Why we flagged this -- one of:
+     *    'pattern' (value matched a redactor regex)
+     *    'key_heuristic' (env key name looks credential-shaped)
+     *    'both'        */
+    reason: 'pattern' | 'key_heuristic' | 'both';
+    /** Patterns that hit (when reason includes 'pattern'). */
+    pattern_hits?: string[];
+}
+/** Suggested vault slot name from an env-style key.
+ *  Lowercase, snake_case, dropping the "AWS_" / "STRIPE_"
+ *  prefix when it duplicates the catalog name. */
+export declare function envKeyToSlot(envKey: string): string;
+/** Parse a single env-style line `KEY=VALUE` (with optional
+ *  comments + quoted values). Returns null when the line is
+ *  blank, comment-only, or not key=value. */
+export declare function parseEnvLine(line: string): {
+    key: string;
+    value: string;
+} | null;
+/** Classify a parsed env line. Returns null when not
+ *  credential-shaped.
+ *
+ *  IMPORTANT: `original_line` on the returned finding is
+ *  ALWAYS REDACTED. Safe to log, emit as JSON, surface in
+ *  chat. The raw value never leaves the source file -- the
+ *  applier reads it back from disk by file + line_number
+ *  when migration is committed. */
+export declare function classifyEnvEntry(parsed: {
+    key: string;
+    value: string;
+}, file: string, lineNumber: number, originalLine: string): LegacyFinding | null;
+/** Scan a single text file for legacy credentials. Returns
+ *  findings + the raw file content (so the caller can apply
+ *  in-place replacement). */
+export declare function scanLegacyFile(abs: string, rel: string): Promise<{
+    findings: LegacyFinding[];
+    content: string;
+}>;
+/** Walk a project for legacy credential files. */
+export declare function scanLegacyProject(projectRoot: string, extraTargets?: string[]): Promise<LegacyFinding[]>;
+/** Build a redacted copy of `content` -- replaces each
+ *  flagged value with a placeholder pointing back to the
+ *  vault slot. Idempotent (running twice does not double-
+ *  replace). */
+export declare function applyMigrationToContent(content: string, findings: LegacyFinding[]): string;
+//# sourceMappingURL=migrator.d.ts.map

package/dist/vault/migrator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"migrator.d.ts","sourceRoot":"","sources":["../../src/vault/migrator.ts"],"names":[],"mappings":"AAgCA,OAAO,EAAa,KAAK,QAAQ,EAAE,MAAM,cAAc,CAAC;AAExD,MAAM,WAAW,aAAa;IAC5B,8CAA8C;IAC9C,cAAc,EAAE,MAAM,CAAC;IACvB,sDAAsD;IACtD,IAAI,EAAY,QAAQ,CAAC;IACzB,iCAAiC;IACjC,IAAI,EAAY,MAAM,CAAC;IACvB,WAAW,EAAK,MAAM,CAAC;IACvB,kDAAkD;IAClD,aAAa,EAAG,MAAM,CAAC;IACvB;;;0BAGsB;IACtB,MAAM,EAAU,SAAS,GAAG,eAAe,GAAG,MAAM,CAAC;IACrD,0DAA0D;IAC1D,YAAY,CAAC,EAAG,MAAM,EAAE,CAAC;CAC1B;AAkBD;;kDAEkD;AAClD,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAWnD;AAED;;6CAE6C;AAC7C,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAkBhF;AAED;;;;;;;mCAOmC;AACnC,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,EACtC,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE,MAAM,EAClB,YAAY,EAAE,MAAM,GACnB,aAAa,GAAG,IAAI,CA0BtB;AAED;;6BAE6B;AAC7B,wBAAsB,cAAc,CAClC,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,MAAM,GACV,OAAO,CAAC;IAAE,QAAQ,EAAE,aAAa,EAAE,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,CAoCzD;AAED,kDAAkD;AAClD,wBAAsB,iBAAiB,CACrC,WAAW,EAAE,MAAM,EACnB,YAAY,GAAE,MAAM,EAAO,GAC1B,OAAO,CAAC,aAAa,EAAE,CAAC,CAW1B;AAED;;;gBAGgB;AAChB,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,aAAa,EAAE,GACxB,MAAM,CAkBR"}