@quantiya/codevibe-codex-plugin 1.0.0

package/dist/crypto-service.js

@@ -0,0 +1,278 @@
+"use strict";
+//
+// crypto-service.ts
+// CodeVibe Codex Plugin
+//
+// End-to-end encryption service using ECDH P-256 and AES-256-GCM
+//
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.cryptoService = exports.CryptoService = exports.ENCRYPTION_VERSION = exports.CryptoError = void 0;
+const crypto = __importStar(require("crypto"));
+// Errors that can occur during cryptographic operations
+class CryptoError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'CryptoError';
+    }
+}
+exports.CryptoError = CryptoError;
+// Current encryption version for future algorithm upgrades
+exports.ENCRYPTION_VERSION = 1;
+// HKDF info string for key derivation
+const HKDF_INFO = 'CodeVibe E2E v1';
+/**
+ * Service for end-to-end encryption operations
+ */
+class CryptoService {
+    constructor() { }
+    static getInstance() {
+        if (!CryptoService.instance) {
+            CryptoService.instance = new CryptoService();
+        }
+        return CryptoService.instance;
+    }
+    // MARK: - Key Generation
+    /**
+     * Generate a new ECDH P-256 key pair
+     * @returns Object with privateKey (PEM), publicKey (base64 raw)
+     */
+    generateKeyPair() {
+        const ecdh = crypto.createECDH('prime256v1');
+        ecdh.generateKeys();
+        // Get raw public key (uncompressed format without 0x04 prefix for compatibility)
+        const publicKeyRaw = ecdh.getPublicKey();
+        const publicKeyBase64 = publicKeyRaw.subarray(1).toString('base64'); // Skip 0x04 prefix
+        // Get private key as raw bytes
+        const privateKeyRaw = ecdh.getPrivateKey();
+        const privateKeyBase64 = privateKeyRaw.toString('base64');
+        return {
+            privateKey: privateKeyBase64,
+            publicKey: publicKeyBase64,
+        };
+    }
+    /**
+     * Generate a random 256-bit session key
+     * @returns Base64-encoded session key
+     */
+    generateSessionKey() {
+        const keyData = crypto.randomBytes(32); // 256 bits
+        return keyData.toString('base64');
+    }
+    // MARK: - Key Derivation
+    /**
+     * Derive a shared secret using ECDH and HKDF
+     * @param privateKeyBase64 Our private key (base64)
+     * @param publicKeyBase64 Other party's public key (base64)
+     * @returns 256-bit derived key as Buffer
+     */
+    deriveSharedKey(privateKeyBase64, publicKeyBase64) {
+        try {
+            const ecdh = crypto.createECDH('prime256v1');
+            const privateKeyRaw = Buffer.from(privateKeyBase64, 'base64');
+            ecdh.setPrivateKey(privateKeyRaw);
+            // Add 0x04 prefix for uncompressed public key format
+            const publicKeyRaw = Buffer.concat([
+                Buffer.from([0x04]),
+                Buffer.from(publicKeyBase64, 'base64'),
+            ]);
+            const sharedSecret = ecdh.computeSecret(publicKeyRaw);
+            // Derive key using HKDF-SHA256
+            const derivedKey = crypto.hkdfSync('sha256', sharedSecret, Buffer.alloc(0), // Empty salt
+            Buffer.from(HKDF_INFO, 'utf8'), 32 // 256 bits
+            );
+            return Buffer.from(derivedKey);
+        }
+        catch (error) {
+            throw new CryptoError(`Failed to derive shared key: ${error}`);
+        }
+    }
+    // MARK: - Session Key Encryption
+    /**
+     * Encrypt a session key for a target device using ECDH
+     * @param sessionKeyBase64 The session key to encrypt (base64)
+     * @param targetPublicKeyBase64 Target device's public key (base64)
+     * @returns EncryptedSessionKey containing encrypted key and ephemeral public key
+     */
+    encryptSessionKey(sessionKeyBase64, targetPublicKeyBase64) {
+        // Generate ephemeral key pair for this encryption
+        const ephemeralKeyPair = this.generateKeyPair();
+        // Derive shared key using ephemeral private + target public
+        const sharedKey = this.deriveSharedKey(ephemeralKeyPair.privateKey, targetPublicKeyBase64);
+        // Encrypt session key with derived key
+        const sessionKeyData = Buffer.from(sessionKeyBase64, 'base64');
+        const encryptedData = this.encrypt(sessionKeyData, sharedKey);
+        return {
+            encryptedKey: encryptedData.toString('base64'),
+            ephemeralPublicKey: ephemeralKeyPair.publicKey,
+        };
+    }
+    /**
+     * Decrypt a session key using our private key
+     * @param encryptedSessionKey The encrypted session key data
+     * @param privateKeyBase64 Our device's private key (base64)
+     * @returns Decrypted session key (base64)
+     */
+    decryptSessionKey(encryptedSessionKey, privateKeyBase64) {
+        // Derive shared key using our private + ephemeral public
+        const sharedKey = this.deriveSharedKey(privateKeyBase64, encryptedSessionKey.ephemeralPublicKey);
+        // Decrypt session key
+        const encryptedData = Buffer.from(encryptedSessionKey.encryptedKey, 'base64');
+        const decryptedData = this.decrypt(encryptedData, sharedKey);
+        return decryptedData.toString('base64');
+    }
+    // MARK: - Content Encryption/Decryption
+    /**
+     * Encrypt content using AES-256-GCM
+     * @param content String content to encrypt
+     * @param sessionKeyBase64 Session key (base64)
+     * @returns Base64-encoded ciphertext (nonce + ciphertext + tag)
+     */
+    encryptContent(content, sessionKeyBase64) {
+        const sessionKey = Buffer.from(sessionKeyBase64, 'base64');
+        const contentData = Buffer.from(content, 'utf8');
+        const encryptedData = this.encrypt(contentData, sessionKey);
+        return encryptedData.toString('base64');
+    }
+    /**
+     * Decrypt content using AES-256-GCM
+     * @param encryptedContent Base64-encoded ciphertext
+     * @param sessionKeyBase64 Session key (base64)
+     * @returns Decrypted string content
+     */
+    decryptContent(encryptedContent, sessionKeyBase64) {
+        const sessionKey = Buffer.from(sessionKeyBase64, 'base64');
+        const encryptedData = Buffer.from(encryptedContent, 'base64');
+        const decryptedData = this.decrypt(encryptedData, sessionKey);
+        return decryptedData.toString('utf8');
+    }
+    /**
+     * Encrypt JSON-serializable metadata
+     * @param metadata Object to encrypt
+     * @param sessionKeyBase64 Session key (base64)
+     * @returns Base64-encoded encrypted JSON
+     */
+    encryptMetadata(metadata, sessionKeyBase64) {
+        const jsonString = JSON.stringify(metadata);
+        return this.encryptContent(jsonString, sessionKeyBase64);
+    }
+    /**
+     * Decrypt encrypted metadata
+     * @param encryptedMetadata Base64-encoded encrypted JSON
+     * @param sessionKeyBase64 Session key (base64)
+     * @returns Decrypted object
+     */
+    decryptMetadata(encryptedMetadata, sessionKeyBase64) {
+        const jsonString = this.decryptContent(encryptedMetadata, sessionKeyBase64);
+        return JSON.parse(jsonString);
+    }
+    // MARK: - Binary Data Encryption (for attachments)
+    /**
+     * Encrypt binary data using AES-256-GCM
+     * @param data Binary data to encrypt (Buffer)
+     * @param sessionKeyBase64 Session key (base64)
+     * @returns Encrypted data (Buffer containing nonce + ciphertext + tag)
+     */
+    encryptData(data, sessionKeyBase64) {
+        const sessionKey = Buffer.from(sessionKeyBase64, 'base64');
+        return this.encrypt(data, sessionKey);
+    }
+    /**
+     * Decrypt binary data using AES-256-GCM
+     * @param encryptedData Encrypted data (Buffer containing nonce + ciphertext + tag)
+     * @param sessionKeyBase64 Session key (base64)
+     * @returns Decrypted binary data (Buffer)
+     */
+    decryptData(encryptedData, sessionKeyBase64) {
+        const sessionKey = Buffer.from(sessionKeyBase64, 'base64');
+        return this.decrypt(encryptedData, sessionKey);
+    }
+    // MARK: - Low-level Encryption
+    /**
+     * Encrypt data using AES-256-GCM
+     * @param data Data to encrypt
+     * @param key Symmetric key (32 bytes)
+     * @returns Combined nonce + ciphertext + tag
+     */
+    encrypt(data, key) {
+        // Generate random 12-byte nonce (IV)
+        const nonce = crypto.randomBytes(12);
+        const cipher = crypto.createCipheriv('aes-256-gcm', key, nonce);
+        const ciphertext = Buffer.concat([cipher.update(data), cipher.final()]);
+        const tag = cipher.getAuthTag();
+        // Combine: nonce (12 bytes) + ciphertext + tag (16 bytes)
+        return Buffer.concat([nonce, ciphertext, tag]);
+    }
+    /**
+     * Decrypt data using AES-256-GCM
+     * @param data Combined nonce + ciphertext + tag
+     * @param key Symmetric key (32 bytes)
+     * @returns Decrypted data
+     */
+    decrypt(data, key) {
+        // Extract: nonce (12 bytes) + ciphertext + tag (16 bytes)
+        const nonce = data.subarray(0, 12);
+        const tag = data.subarray(data.length - 16);
+        const ciphertext = data.subarray(12, data.length - 16);
+        const decipher = crypto.createDecipheriv('aes-256-gcm', key, nonce);
+        decipher.setAuthTag(tag);
+        try {
+            const decrypted = Buffer.concat([decipher.update(ciphertext), decipher.final()]);
+            return decrypted;
+        }
+        catch (error) {
+            throw new CryptoError('Decryption failed: Invalid ciphertext or authentication tag');
+        }
+    }
+    // MARK: - Key Serialization
+    /**
+     * Serialize a private key for storage
+     * Note: Private key is already base64 from generateKeyPair
+     */
+    serializePrivateKey(privateKeyBase64) {
+        return privateKeyBase64;
+    }
+    /**
+     * Deserialize a private key from storage
+     * Note: Private key is already base64
+     */
+    deserializePrivateKey(base64) {
+        return base64;
+    }
+}
+exports.CryptoService = CryptoService;
+// Export singleton instance
+exports.cryptoService = CryptoService.getInstance();
+//# sourceMappingURL=crypto-service.js.map

package/dist/crypto-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto-service.js","sourceRoot":"","sources":["../src/crypto-service.ts"],"names":[],"mappings":";AAAA,EAAE;AACF,oBAAoB;AACpB,wBAAwB;AACxB,EAAE;AACF,iEAAiE;AACjE,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEF,+CAAiC;AAGjC,wDAAwD;AACxD,MAAa,WAAY,SAAQ,KAAK;IACpC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,aAAa,CAAC;IAC5B,CAAC;CACF;AALD,kCAKC;AAED,2DAA2D;AAC9C,QAAA,kBAAkB,GAAG,CAAC,CAAC;AAEpC,sCAAsC;AACtC,MAAM,SAAS,GAAG,iBAAiB,CAAC;AAEpC;;GAEG;AACH,MAAa,aAAa;IAGxB,gBAAuB,CAAC;IAExB,MAAM,CAAC,WAAW;QAChB,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,CAAC;YAC5B,aAAa,CAAC,QAAQ,GAAG,IAAI,aAAa,EAAE,CAAC;QAC/C,CAAC;QACD,OAAO,aAAa,CAAC,QAAQ,CAAC;IAChC,CAAC;IAED,yBAAyB;IAEzB;;;OAGG;IACH,eAAe;QACb,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;QAC7C,IAAI,CAAC,YAAY,EAAE,CAAC;QAEpB,iFAAiF;QACjF,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QACzC,MAAM,eAAe,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,mBAAmB;QAExF,+BAA+B;QAC/B,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QAC3C,MAAM,gBAAgB,GAAG,aAAa,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAE1D,OAAO;YACL,UAAU,EAAE,gBAAgB;YAC5B,SAAS,EAAE,eAAe;SAC3B,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,kBAAkB;QAChB,MAAM,OAAO,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW;QACnD,OAAO,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACpC,CAAC;IAED,yBAAyB;IAEzB;;;;;OAKG;IACH,eAAe,CAAC,gBAAwB,EAAE,eAAuB;QAC/D,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;YAC7C,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC;YAC9D,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,CAAC;YAElC,qDAAqD;YACrD,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC;gBACjC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC;gBACnB,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,QAAQ,CAAC;aACvC,CAAC,CAAC;YAEH,MAAM,YAAY,GAAG,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;YAEtD,+BAA+B;YAC/B,MAAM,UAAU,GAAG,MAAM,CAAC,QAAQ,CAChC,QAAQ,EACR,YAAY,EACZ,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,aAAa;YAC9B,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,EAC9B,EAAE,CAAC,WAAW;aACf,CAAC;YAEF,OAAO,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACjC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,WAAW,CAAC,gCAAgC,KAAK,EAAE,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;IAED,iCAAiC;IAEjC;;;;;OAKG;IACH,iBAAiB,CACf,gBAAwB,EACxB,qBAA6B;QAE7B,kDAAkD;QAClD,MAAM,gBAAgB,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;QAEhD,4DAA4D;QAC5D,MAAM,SAAS,GAAG,IAAI,CAAC,eAAe,CACpC,gBAAgB,CAAC,UAAU,EAC3B,qBAAqB,CACtB,CAAC;QAEF,uCAAuC;QACvC,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC;QAC/D,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,SAAS,CAAC,CAAC;QAE9D,OAAO;YACL,YAAY,EAAE,aAAa,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAC9C,kBAAkB,EAAE,gBAAgB,CAAC,SAAS;SAC/C,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACH,iBAAiB,CACf,mBAAwC,EACxC,gBAAwB;QAExB,yDAAyD;QACzD,MAAM,SAAS,GAAG,IAAI,CAAC,eAAe,CACpC,gBAAgB,EAChB,mBAAmB,CAAC,kBAAkB,CACvC,CAAC;QAEF,sBAAsB;QACtB,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;QAC9E,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;QAE7D,OAAO,aAAa,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC1C,CAAC;IAED,wCAAwC;IAExC;;;;;OAKG;IACH,cAAc,CAAC,OAAe,EAAE,gBAAwB;QACtD,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC;QAC3D,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACjD,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;QAC5D,OAAO,aAAa,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC1C,CAAC;IAED;;;;;OAKG;IACH,cAAc,CAAC,gBAAwB,EAAE,gBAAwB;QAC/D,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC;QAC3D,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC;QAC9D,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;QAC9D,OAAO,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACxC,CAAC;IAED;;;;;OAKG;IACH,eAAe,CACb,QAA6B,EAC7B,gBAAwB;QAExB,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAC5C,OAAO,IAAI,CAAC,cAAc,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAC;IAC3D,CAAC;IAED;;;;;OAKG;IACH,eAAe,CACb,iBAAyB,EACzB,gBAAwB;QAExB,MAAM,UAAU,GAAG,IAAI,CAAC,cAAc,CAAC,iBAAiB,EAAE,gBAAgB,CAAC,CAAC;QAC5E,OAAO,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAChC,CAAC;IAED,mDAAmD;IAEnD;;;;;OAKG;IACH,WAAW,CAAC,IAAY,EAAE,gBAAwB;QAChD,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC;QAC3D,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACxC,CAAC;IAED;;;;;OAKG;IACH,WAAW,CAAC,aAAqB,EAAE,gBAAwB;QACzD,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC;QAC3D,OAAO,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;IACjD,CAAC;IAED,+BAA+B;IAE/B;;;;;OAKG;IACK,OAAO,CAAC,IAAY,EAAE,GAAW;QACvC,qCAAqC;QACrC,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QAErC,MAAM,MAAM,GAAG,MAAM,CAAC,cAAc,CAAC,aAAa,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;QAChE,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QACxE,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QAEhC,0DAA0D;QAC1D,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC;IACjD,CAAC;IAED;;;;;OAKG;IACK,OAAO,CAAC,IAAY,EAAE,GAAW;QACvC,0DAA0D;QAC1D,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACnC,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;QAC5C,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;QAEvD,MAAM,QAAQ,GAAG,MAAM,CAAC,gBAAgB,CAAC,aAAa,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;QACpE,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QAEzB,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YACjF,OAAO,SAAS,CAAC;QACnB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,WAAW,CAAC,6DAA6D,CAAC,CAAC;QACvF,CAAC;IACH,CAAC;IAED,4BAA4B;IAE5B;;;OAGG;IACH,mBAAmB,CAAC,gBAAwB;QAC1C,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IAED;;;OAGG;IACH,qBAAqB,CAAC,MAAc;QAClC,OAAO,MAAM,CAAC;IAChB,CAAC;CACF;AApRD,sCAoRC;AAED,4BAA4B;AACf,QAAA,aAAa,GAAG,aAAa,CAAC,WAAW,EAAE,CAAC"}

package/dist/event-mapper.d.ts

@@ -0,0 +1,24 @@
+import { CreateEventInput } from '@quantiya/codevibe-core';
+import { CodexLogEntry } from './types';
+/**
+ * Map a Codex log entry to a CodeVibe event
+ * Returns null if the entry should not be synced
+ */
+export declare function mapLogEntryToEvent(entry: CodexLogEntry, sessionId: string): CreateEventInput | null;
+/**
+ * Clear pending calls (call on session end)
+ */
+export declare function clearPendingCalls(): void;
+/**
+ * Get count of pending calls (for approval detection)
+ */
+export declare function getPendingCallsCount(): number;
+/**
+ * Get pending call info by ID
+ */
+export declare function getPendingCall(callId: string): {
+    name: string;
+    input: string;
+    eventId: string;
+} | undefined;
+//# sourceMappingURL=event-mapper.d.ts.map

package/dist/event-mapper.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"event-mapper.d.ts","sourceRoot":"","sources":["../src/event-mapper.ts"],"names":[],"mappings":"AACA,OAAO,EAA0B,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAEnF,OAAO,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAexC;;;GAGG;AACH,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,aAAa,EACpB,SAAS,EAAE,MAAM,GAChB,gBAAgB,GAAG,IAAI,CA0LzB;AAoED;;GAEG;AACH,wBAAgB,iBAAiB,IAAI,IAAI,CAExC;AAED;;GAEG;AACH,wBAAgB,oBAAoB,IAAI,MAAM,CAE7C;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAE3G"}

package/dist/event-mapper.js

@@ -0,0 +1,268 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.mapLogEntryToEvent = mapLogEntryToEvent;
+exports.clearPendingCalls = clearPendingCalls;
+exports.getPendingCallsCount = getPendingCallsCount;
+exports.getPendingCall = getPendingCall;
+const uuid_1 = require("uuid");
+const codevibe_core_1 = require("@quantiya/codevibe-core");
+const logger_1 = require("./logger");
+/**
+ * Maps Codex JSONL log entries to CodeVibe events
+ *
+ * Codex log entry types:
+ * - session_meta: Session metadata (handled by watcher)
+ * - event_msg: User/agent messages, reasoning, token counts
+ * - response_item: Function calls and outputs
+ * - turn_context: Turn metadata (ignored)
+ */
+// Track pending function calls to match with outputs
+const pendingCalls = new Map();
+/**
+ * Map a Codex log entry to a CodeVibe event
+ * Returns null if the entry should not be synced
+ */
+function mapLogEntryToEvent(entry, sessionId) {
+    const base = {
+        sessionId,
+        source: codevibe_core_1.EventSource.DESKTOP,
+    };
+    // Handle event_msg types
+    if (entry.type === 'event_msg' && entry.payload) {
+        const payloadType = entry.payload.type;
+        switch (payloadType) {
+            case 'user_message':
+                return {
+                    ...base,
+                    type: codevibe_core_1.EventType.USER_PROMPT,
+                    content: entry.payload.message || '',
+                    metadata: {
+                        images: entry.payload.images || [],
+                    },
+                };
+            case 'agent_message':
+                return {
+                    ...base,
+                    type: codevibe_core_1.EventType.ASSISTANT_RESPONSE,
+                    content: entry.payload.message || '',
+                };
+            case 'agent_reasoning':
+                // Send as REASONING event type for visual indicator in iOS
+                return {
+                    ...base,
+                    type: codevibe_core_1.EventType.REASONING,
+                    content: entry.payload.text || '',
+                };
+            case 'token_count':
+                // Skip token counts - could be used for metadata updates
+                logger_1.logger.debug('Skipping token_count entry');
+                return null;
+            default:
+                logger_1.logger.debug('Unknown event_msg type', { type: payloadType });
+                return null;
+        }
+    }
+    // Handle response_item types (tool calls)
+    if (entry.type === 'response_item' && entry.payload) {
+        const itemType = entry.payload.type;
+        // Function call start (shell commands, etc.)
+        if (itemType === 'function_call') {
+            const { name, arguments: args, call_id } = entry.payload;
+            // Parse arguments
+            let parsedArgs = {};
+            try {
+                parsedArgs = JSON.parse(args || '{}');
+            }
+            catch {
+                parsedArgs = { raw: args };
+            }
+            // Generate event ID so we can update it later
+            const eventId = (0, uuid_1.v4)();
+            // Store for matching with output
+            pendingCalls.set(call_id, {
+                name,
+                input: args,
+                eventId,
+            });
+            // Map tool name to friendly name
+            const toolName = mapToolName(name);
+            const content = formatToolCallContent(name, parsedArgs);
+            return {
+                ...base,
+                type: codevibe_core_1.EventType.TOOL_USE,
+                content,
+                metadata: {
+                    toolName,
+                    toolInput: parsedArgs,
+                    callId: call_id,
+                    status: 'running',
+                },
+            };
+        }
+        // Function call output
+        if (itemType === 'function_call_output') {
+            const { call_id, output } = entry.payload;
+            const pending = pendingCalls.get(call_id);
+            pendingCalls.delete(call_id);
+            const toolName = pending?.name ? mapToolName(pending.name) : 'Tool';
+            const truncatedOutput = truncateOutput(output, 500);
+            return {
+                ...base,
+                type: codevibe_core_1.EventType.TOOL_USE,
+                content: `${toolName} completed:\n${truncatedOutput}`,
+                metadata: {
+                    toolName,
+                    toolOutput: output,
+                    callId: call_id,
+                    status: 'completed',
+                },
+            };
+        }
+        // Custom tool call (file edits with apply_patch)
+        if (itemType === 'custom_tool_call') {
+            const { name, call_id, input, status } = entry.payload;
+            // Store for matching with output
+            pendingCalls.set(call_id, {
+                name,
+                input,
+                eventId: (0, uuid_1.v4)(),
+            });
+            // Parse the patch to extract file info
+            const fileInfo = extractFileFromPatch(input);
+            const content = fileInfo
+                ? `Editing: ${fileInfo.filePath}`
+                : `Applying patch`;
+            return {
+                ...base,
+                type: codevibe_core_1.EventType.TOOL_USE,
+                content,
+                metadata: {
+                    toolName: 'Edit',
+                    toolInput: input,
+                    callId: call_id,
+                    status: status || 'running',
+                    filePath: fileInfo?.filePath,
+                    diff: input,
+                },
+            };
+        }
+        // Custom tool call output
+        if (itemType === 'custom_tool_call_output') {
+            const { call_id, output } = entry.payload;
+            const pending = pendingCalls.get(call_id);
+            pendingCalls.delete(call_id);
+            // Parse output JSON
+            let parsedOutput = {};
+            try {
+                parsedOutput = JSON.parse(output || '{}');
+            }
+            catch {
+                parsedOutput = { raw: output };
+            }
+            const success = parsedOutput.output?.includes('Success') || !parsedOutput.error;
+            return {
+                ...base,
+                type: codevibe_core_1.EventType.TOOL_USE,
+                content: success ? 'File edit applied successfully' : `Edit failed: ${parsedOutput.error || 'Unknown error'}`,
+                metadata: {
+                    toolName: 'Edit',
+                    toolOutput: parsedOutput,
+                    callId: call_id,
+                    status: 'completed',
+                    success,
+                },
+            };
+        }
+        logger_1.logger.debug('Unknown response_item type', { type: itemType });
+        return null;
+    }
+    // Skip turn_context and other types
+    if (entry.type === 'turn_context') {
+        logger_1.logger.debug('Skipping turn_context entry');
+        return null;
+    }
+    logger_1.logger.debug('Unhandled log entry type', { type: entry.type });
+    return null;
+}
+/**
+ * Map Codex tool names to friendly display names
+ */
+function mapToolName(name) {
+    const mapping = {
+        'shell_command': 'Bash',
+        'shell': 'Bash',
+        'apply_patch': 'Edit',
+        'write_file': 'Write',
+        'read_file': 'Read',
+        'list_files': 'Glob',
+        'search_files': 'Grep',
+        'web_search': 'WebSearch',
+        'web_fetch': 'WebFetch',
+    };
+    return mapping[name] || name;
+}
+/**
+ * Format tool call content for display
+ */
+function formatToolCallContent(name, args) {
+    switch (name) {
+        case 'shell_command':
+        case 'shell':
+            return `Running: ${args.command || 'command'}`;
+        case 'read_file':
+            return `Reading: ${args.file_path || args.path || 'file'}`;
+        case 'write_file':
+            return `Writing: ${args.file_path || args.path || 'file'}`;
+        case 'list_files':
+            return `Listing: ${args.path || '.'}`;
+        case 'search_files':
+            return `Searching for: ${args.pattern || args.query || 'pattern'}`;
+        case 'web_search':
+            return `Searching web: ${args.query || 'query'}`;
+        default:
+            return `Running ${mapToolName(name)}`;
+    }
+}
+/**
+ * Extract file path from patch content
+ * Patch format: *** Begin Patch\n*** Update File: path\n...
+ */
+function extractFileFromPatch(input) {
+    if (!input)
+        return null;
+    // Match "*** Update File: path" or "*** Add File: path"
+    const match = input.match(/\*\*\* (?:Update|Add|Delete) File: (.+)/);
+    if (match) {
+        return { filePath: match[1].trim() };
+    }
+    return null;
+}
+/**
+ * Truncate output for display
+ */
+function truncateOutput(output, maxLength) {
+    if (!output)
+        return '';
+    if (output.length <= maxLength)
+        return output;
+    return output.substring(0, maxLength) + '...';
+}
+/**
+ * Clear pending calls (call on session end)
+ */
+function clearPendingCalls() {
+    pendingCalls.clear();
+}
+/**
+ * Get count of pending calls (for approval detection)
+ */
+function getPendingCallsCount() {
+    return pendingCalls.size;
+}
+/**
+ * Get pending call info by ID
+ */
+function getPendingCall(callId) {
+    return pendingCalls.get(callId);
+}
+//# sourceMappingURL=event-mapper.js.map

package/dist/event-mapper.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"event-mapper.js","sourceRoot":"","sources":["../src/event-mapper.ts"],"names":[],"mappings":";;AAsBA,gDA6LC;AAuED,8CAEC;AAKD,oDAEC;AAKD,wCAEC;AA1SD,+BAAoC;AACpC,2DAAmF;AACnF,qCAAkC;AAGlC;;;;;;;;GAQG;AAEH,qDAAqD;AACrD,MAAM,YAAY,GAAG,IAAI,GAAG,EAA4D,CAAC;AAEzF;;;GAGG;AACH,SAAgB,kBAAkB,CAChC,KAAoB,EACpB,SAAiB;IAEjB,MAAM,IAAI,GAAG;QACX,SAAS;QACT,MAAM,EAAE,2BAAW,CAAC,OAAO;KAC5B,CAAC;IAEF,yBAAyB;IACzB,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QAChD,MAAM,WAAW,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAEvC,QAAQ,WAAW,EAAE,CAAC;YACpB,KAAK,cAAc;gBACjB,OAAO;oBACL,GAAG,IAAI;oBACP,IAAI,EAAE,yBAAS,CAAC,WAAW;oBAC3B,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE;oBACpC,QAAQ,EAAE;wBACR,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE;qBACnC;iBACF,CAAC;YAEJ,KAAK,eAAe;gBAClB,OAAO;oBACL,GAAG,IAAI;oBACP,IAAI,EAAE,yBAAS,CAAC,kBAAkB;oBAClC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE;iBACrC,CAAC;YAEJ,KAAK,iBAAiB;gBACpB,2DAA2D;gBAC3D,OAAO;oBACL,GAAG,IAAI;oBACP,IAAI,EAAE,yBAAS,CAAC,SAAS;oBACzB,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE;iBAClC,CAAC;YAEJ,KAAK,aAAa;gBAChB,yDAAyD;gBACzD,eAAM,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC;gBAC3C,OAAO,IAAI,CAAC;YAEd;gBACE,eAAM,CAAC,KAAK,CAAC,wBAAwB,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;gBAC9D,OAAO,IAAI,CAAC;QAChB,CAAC;IACH,CAAC;IAED,0CAA0C;IAC1C,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QACpD,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAEpC,6CAA6C;QAC7C,IAAI,QAAQ,KAAK,eAAe,EAAE,CAAC;YACjC,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC;YAEzD,kBAAkB;YAClB,IAAI,UAAU,GAAQ,EAAE,CAAC;YACzB,IAAI,CAAC;gBACH,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC;YACxC,CAAC;YAAC,MAAM,CAAC;gBACP,UAAU,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;YAC7B,CAAC;YAED,8CAA8C;YAC9C,MAAM,OAAO,GAAG,IAAA,SAAM,GAAE,CAAC;YAEzB,iCAAiC;YACjC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE;gBACxB,IAAI;gBACJ,KAAK,EAAE,IAAI;gBACX,OAAO;aACR,CAAC,CAAC;YAEH,iCAAiC;YACjC,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;YACnC,MAAM,OAAO,GAAG,qBAAqB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;YAExD,OAAO;gBACL,GAAG,IAAI;gBACP,IAAI,EAAE,yBAAS,CAAC,QAAQ;gBACxB,OAAO;gBACP,QAAQ,EAAE;oBACR,QAAQ;oBACR,SAAS,EAAE,UAAU;oBACrB,MAAM,EAAE,OAAO;oBACf,MAAM,EAAE,SAAS;iBAClB;aACF,CAAC;QACJ,CAAC;QAED,uBAAuB;QACvB,IAAI,QAAQ,KAAK,sBAAsB,EAAE,CAAC;YACxC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC;YAC1C,MAAM,OAAO,GAAG,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAC1C,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAE7B,MAAM,QAAQ,GAAG,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;YACpE,MAAM,eAAe,GAAG,cAAc,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAEpD,OAAO;gBACL,GAAG,IAAI;gBACP,IAAI,EAAE,yBAAS,CAAC,QAAQ;gBACxB,OAAO,EAAE,GAAG,QAAQ,gBAAgB,eAAe,EAAE;gBACrD,QAAQ,EAAE;oBACR,QAAQ;oBACR,UAAU,EAAE,MAAM;oBAClB,MAAM,EAAE,OAAO;oBACf,MAAM,EAAE,WAAW;iBACpB;aACF,CAAC;QACJ,CAAC;QAED,iDAAiD;QACjD,IAAI,QAAQ,KAAK,kBAAkB,EAAE,CAAC;YACpC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC;YAEvD,iCAAiC;YACjC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE;gBACxB,IAAI;gBACJ,KAAK;gBACL,OAAO,EAAE,IAAA,SAAM,GAAE;aAClB,CAAC,CAAC;YAEH,uCAAuC;YACvC,MAAM,QAAQ,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;YAC7C,MAAM,OAAO,GAAG,QAAQ;gBACtB,CAAC,CAAC,YAAY,QAAQ,CAAC,QAAQ,EAAE;gBACjC,CAAC,CAAC,gBAAgB,CAAC;YAErB,OAAO;gBACL,GAAG,IAAI;gBACP,IAAI,EAAE,yBAAS,CAAC,QAAQ;gBACxB,OAAO;gBACP,QAAQ,EAAE;oBACR,QAAQ,EAAE,MAAM;oBAChB,SAAS,EAAE,KAAK;oBAChB,MAAM,EAAE,OAAO;oBACf,MAAM,EAAE,MAAM,IAAI,SAAS;oBAC3B,QAAQ,EAAE,QAAQ,EAAE,QAAQ;oBAC5B,IAAI,EAAE,KAAK;iBACZ;aACF,CAAC;QACJ,CAAC;QAED,0BAA0B;QAC1B,IAAI,QAAQ,KAAK,yBAAyB,EAAE,CAAC;YAC3C,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC;YAC1C,MAAM,OAAO,GAAG,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAC1C,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAE7B,oBAAoB;YACpB,IAAI,YAAY,GAAQ,EAAE,CAAC;YAC3B,IAAI,CAAC;gBACH,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC;YAC5C,CAAC;YAAC,MAAM,CAAC;gBACP,YAAY,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC;YACjC,CAAC;YAED,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,EAAE,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC;YAEhF,OAAO;gBACL,GAAG,IAAI;gBACP,IAAI,EAAE,yBAAS,CAAC,QAAQ;gBACxB,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,gCAAgC,CAAC,CAAC,CAAC,gBAAgB,YAAY,CAAC,KAAK,IAAI,eAAe,EAAE;gBAC7G,QAAQ,EAAE;oBACR,QAAQ,EAAE,MAAM;oBAChB,UAAU,EAAE,YAAY;oBACxB,MAAM,EAAE,OAAO;oBACf,MAAM,EAAE,WAAW;oBACnB,OAAO;iBACR;aACF,CAAC;QACJ,CAAC;QAED,eAAM,CAAC,KAAK,CAAC,4BAA4B,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC/D,OAAO,IAAI,CAAC;IACd,CAAC;IAED,oCAAoC;IACpC,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;QAClC,eAAM,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;QAC5C,OAAO,IAAI,CAAC;IACd,CAAC;IAED,eAAM,CAAC,KAAK,CAAC,0BAA0B,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IAC/D,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,SAAS,WAAW,CAAC,IAAY;IAC/B,MAAM,OAAO,GAA2B;QACtC,eAAe,EAAE,MAAM;QACvB,OAAO,EAAE,MAAM;QACf,aAAa,EAAE,MAAM;QACrB,YAAY,EAAE,OAAO;QACrB,WAAW,EAAE,MAAM;QACnB,YAAY,EAAE,MAAM;QACpB,cAAc,EAAE,MAAM;QACtB,YAAY,EAAE,WAAW;QACzB,WAAW,EAAE,UAAU;KACxB,CAAC;IACF,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC;AAC/B,CAAC;AAED;;GAEG;AACH,SAAS,qBAAqB,CAAC,IAAY,EAAE,IAAS;IACpD,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,eAAe,CAAC;QACrB,KAAK,OAAO;YACV,OAAO,YAAY,IAAI,CAAC,OAAO,IAAI,SAAS,EAAE,CAAC;QACjD,KAAK,WAAW;YACd,OAAO,YAAY,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,IAAI,IAAI,MAAM,EAAE,CAAC;QAC7D,KAAK,YAAY;YACf,OAAO,YAAY,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,IAAI,IAAI,MAAM,EAAE,CAAC;QAC7D,KAAK,YAAY;YACf,OAAO,YAAY,IAAI,CAAC,IAAI,IAAI,GAAG,EAAE,CAAC;QACxC,KAAK,cAAc;YACjB,OAAO,kBAAkB,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,KAAK,IAAI,SAAS,EAAE,CAAC;QACrE,KAAK,YAAY;YACf,OAAO,kBAAkB,IAAI,CAAC,KAAK,IAAI,OAAO,EAAE,CAAC;QACnD;YACE,OAAO,WAAW,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;IAC1C,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,oBAAoB,CAAC,KAAa;IACzC,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IAExB,wDAAwD;IACxD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,yCAAyC,CAAC,CAAC;IACrE,IAAI,KAAK,EAAE,CAAC;QACV,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;IACvC,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,SAAS,cAAc,CAAC,MAAc,EAAE,SAAiB;IACvD,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IACvB,IAAI,MAAM,CAAC,MAAM,IAAI,SAAS;QAAE,OAAO,MAAM,CAAC;IAC9C,OAAO,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,SAAS,CAAC,GAAG,KAAK,CAAC;AAChD,CAAC;AAED;;GAEG;AACH,SAAgB,iBAAiB;IAC/B,YAAY,CAAC,KAAK,EAAE,CAAC;AACvB,CAAC;AAED;;GAEG;AACH,SAAgB,oBAAoB;IAClC,OAAO,YAAY,CAAC,IAAI,CAAC;AAC3B,CAAC;AAED;;GAEG;AACH,SAAgB,cAAc,CAAC,MAAc;IAC3C,OAAO,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AAClC,CAAC"}

package/dist/key-manager.d.ts

@@ -0,0 +1,87 @@
+import { EncryptedSessionKey } from './types';
+export declare class KeyManagerError extends Error {
+    constructor(message: string);
+}
+/**
+ * Manages device and session encryption keys
+ */
+export declare class KeyManager {
+    private static instance;
+    private deviceKey;
+    private sessionKeyCache;
+    private isRegistered;
+    private constructor();
+    static getInstance(): KeyManager;
+    /**
+     * Get or generate the device ID
+     */
+    getDeviceId(): string;
+    /**
+     * Get the current device's key pair, generating if needed
+     */
+    getOrCreateDeviceKeyPair(): {
+        privateKey: string;
+        publicKey: string;
+    };
+    /**
+     * Get the device's public key (base64)
+     */
+    getDevicePublicKey(): string;
+    /**
+     * Check if we have a device key
+     */
+    hasDeviceKey(): boolean;
+    /**
+     * Check if device key is registered with backend
+     */
+    getIsRegistered(): boolean;
+    /**
+     * Set registration status
+     */
+    setIsRegistered(registered: boolean): void;
+    /**
+     * Get session key for a session, decrypting from encryptedKeys if needed
+     */
+    getSessionKey(sessionId: string, encryptedKeys?: EncryptedSessionKey[]): string | null;
+    /**
+     * Generate and encrypt a new session key for all devices
+     */
+    createSessionKey(devicePublicKeys: Array<{
+        deviceId: string;
+        publicKey: string;
+    }>): {
+        sessionKey: string;
+        encryptedKeys: EncryptedSessionKey[];
+    };
+    /**
+     * Cache a session key (after successfully decrypting or creating)
+     */
+    cacheSessionKey(sessionId: string, sessionKey: string): void;
+    /**
+     * Clear cached session key (on session end)
+     */
+    clearSessionKey(sessionId: string): void;
+    /**
+     * Clear all cached session keys (on sign out)
+     */
+    clearAllSessionKeys(): void;
+    private ensureConfigDir;
+    private getKeyFilePath;
+    private loadDeviceKey;
+    private saveDeviceKey;
+    private generateAndStoreDeviceKey;
+    /**
+     * Get device name for registration
+     */
+    getDeviceName(): string;
+    /**
+     * Get platform for registration
+     */
+    getDevicePlatform(): string;
+    /**
+     * Clear all encryption data (on sign out)
+     */
+    clearAllData(): void;
+}
+export declare const keyManager: KeyManager;
+//# sourceMappingURL=key-manager.d.ts.map