@rubytech/create-maxy-code 0.1.38 → 0.1.40

package/payload/platform/lib/anthropic-key/dist/index.js

@@ -0,0 +1,232 @@
+"use strict";
+/**
+ * Centralised Anthropic API key management.
+ *
+ * Provides read/write/validate operations for the Anthropic API key
+ * used by the public agent. All consumers import from this module
+ * instead of inlining the env-var-then-file lookup pattern.
+ *
+ * Follows the same shape as cloudflare/mcp/src/lib/cloudflared.ts
+ * (readToken, writeToken, hasToken, validateToken).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.readKey = readKey;
+exports.writeKey = writeKey;
+exports.hasKey = hasKey;
+exports.deleteKey = deleteKey;
+exports.validateKey = validateKey;
+exports.keyFilePath = keyFilePath;
+const index_js_1 = require("../../models/dist/index.js");
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
+const node_os_1 = require("node:os");
+// ---------------------------------------------------------------------------
+// Path resolution — lazy, cached
+//
+// The key file lives at ~/{configDir}/.anthropic-api-key where configDir
+// is read from brand.json. Resolution strategy:
+//   1. PLATFORM_ROOT env var → brand.json → configDir  (MCP servers)
+//   2. MAXY_PLATFORM_ROOT env var → brand.json → configDir  (UI/Next.js)
+//   3. Fall back to .maxy  (dev environment, neither env var set)
+// ---------------------------------------------------------------------------
+let cachedKeyFilePath = null;
+function resolveKeyFilePath() {
+    if (cachedKeyFilePath)
+        return cachedKeyFilePath;
+    let configDirName = ".maxy"; // default for dev
+    const platformRoot = process.env.PLATFORM_ROOT ?? process.env.MAXY_PLATFORM_ROOT;
+    if (platformRoot) {
+        const brandPath = (0, node_path_1.join)(platformRoot, "config", "brand.json");
+        if (!(0, node_fs_1.existsSync)(brandPath)) {
+            throw new Error(`brand.json not found at ${brandPath} — platform not properly installed`);
+        }
+        try {
+            const brand = JSON.parse((0, node_fs_1.readFileSync)(brandPath, "utf-8"));
+            if (!brand.configDir) {
+                throw new Error(`brand.json at ${brandPath} is missing the configDir field`);
+            }
+            configDirName = brand.configDir;
+        }
+        catch (err) {
+            if (err instanceof SyntaxError) {
+                throw new Error(`brand.json at ${brandPath} is not valid JSON: ${err.message}`);
+            }
+            throw err;
+        }
+    }
+    cachedKeyFilePath = (0, node_path_1.resolve)((0, node_os_1.homedir)(), configDirName, ".anthropic-api-key");
+    return cachedKeyFilePath;
+}
+// ---------------------------------------------------------------------------
+// readKey — two-tier lookup: env var → file
+//
+// Returns the key string or null if unavailable. Never throws on
+// missing/unreadable key — callers handle null per their context.
+// ---------------------------------------------------------------------------
+function readKey() {
+    const envKey = process.env.ANTHROPIC_API_KEY;
+    if (envKey && envKey.trim()) {
+        return envKey.trim();
+    }
+    let keyFilePath;
+    try {
+        keyFilePath = resolveKeyFilePath();
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        console.error(`[anthropic-key] path resolution failed: ${msg}`);
+        return null;
+    }
+    if (envKey !== undefined) {
+        // env var was set but empty — log and fall through to file
+        console.error(`[anthropic-key] ANTHROPIC_API_KEY env var is set but empty, falling back to file`);
+    }
+    try {
+        const raw = (0, node_fs_1.readFileSync)(keyFilePath, "utf-8").trim();
+        if (!raw) {
+            console.error(`[anthropic-key] key file exists but is empty: ${keyFilePath}`);
+            return null;
+        }
+        return raw;
+    }
+    catch (err) {
+        const code = err instanceof Error && "code" in err
+            ? err.code
+            : undefined;
+        if (code === "ENOENT") {
+            // File does not exist — expected on fresh installs
+            console.error(`[anthropic-key] no key available (env var unset, file not found: ${keyFilePath})`);
+        }
+        else {
+            const msg = err instanceof Error ? err.message : String(err);
+            console.error(`[anthropic-key] failed to read key file ${keyFilePath}: ${msg}`);
+        }
+        return null;
+    }
+}
+// ---------------------------------------------------------------------------
+// writeKey — validate format and write with restricted permissions
+// ---------------------------------------------------------------------------
+function writeKey(key) {
+    const trimmed = key.trim();
+    if (!trimmed.startsWith("sk-ant-")) {
+        throw new Error("Invalid key format. Must start with sk-ant-.");
+    }
+    if (trimmed.length < 90) {
+        throw new Error("Invalid key format. Must be at least 90 characters.");
+    }
+    const keyFilePath = resolveKeyFilePath();
+    (0, node_fs_1.mkdirSync)((0, node_path_1.dirname)(keyFilePath), { recursive: true });
+    (0, node_fs_1.writeFileSync)(keyFilePath, trimmed, { mode: 0o600 });
+    console.error(`[anthropic-key] key written to ${keyFilePath}`);
+}
+// ---------------------------------------------------------------------------
+// hasKey — thin check, no validation
+// ---------------------------------------------------------------------------
+function hasKey() {
+    return readKey() !== null;
+}
+// ---------------------------------------------------------------------------
+// deleteKey — remove the stored key file; idempotent on ENOENT
+//
+// Throws on unexpected fs errors (EACCES, EBUSY, EPERM) so callers can
+// surface a structured failure. ENOENT is treated as a no-op because the
+// intended post-condition ("no key file on disk") is already satisfied.
+// Per Task 531 learning, never use `{ force: true }` — it swallows the
+// error classes that matter (permission, busy) and leaves the caller
+// believing removal succeeded.
+// ---------------------------------------------------------------------------
+function deleteKey() {
+    const keyFilePath = resolveKeyFilePath();
+    try {
+        (0, node_fs_1.unlinkSync)(keyFilePath);
+        console.error(`[anthropic-key] deleteKey: removed ${keyFilePath}`);
+    }
+    catch (err) {
+        const code = err instanceof Error && "code" in err
+            ? err.code
+            : undefined;
+        if (code === "ENOENT") {
+            console.error(`[anthropic-key] deleteKey: nothing to remove (ENOENT): ${keyFilePath}`);
+            return;
+        }
+        const msg = err instanceof Error ? err.message : String(err);
+        console.error(`[anthropic-key] deleteKey: failed to remove ${keyFilePath}: ${msg}`);
+        throw err;
+    }
+}
+async function validateKey(key) {
+    const effectiveKey = key ?? readKey();
+    if (!effectiveKey) {
+        return {
+            status: "missing",
+            message: "No API key available (env var unset, file missing or empty).",
+        };
+    }
+    const start = Date.now();
+    try {
+        const res = await fetch("https://api.anthropic.com/v1/messages", {
+            method: "POST",
+            headers: {
+                "Content-Type": "application/json",
+                "x-api-key": effectiveKey,
+                "anthropic-version": "2023-06-01",
+            },
+            body: JSON.stringify({
+                model: index_js_1.HAIKU_MODEL,
+                max_tokens: 1,
+                messages: [{ role: "user", content: "hi" }],
+            }),
+            signal: AbortSignal.timeout(10000),
+        });
+        const latency = Date.now() - start;
+        if (res.ok || res.status === 429) {
+            // Consume the response body to release the connection back to the pool.
+            await res.text();
+            console.error(`[anthropic-key] validate: valid (${res.status}, ${latency}ms)`);
+            return {
+                status: "valid",
+                message: "API key is working. Credits available.",
+            };
+        }
+        const body = await res.text();
+        if (/credit balance|billing|purchase credits/i.test(body)) {
+            console.error(`[anthropic-key] validate: billing (${res.status}, ${latency}ms)`);
+            return {
+                status: "billing",
+                message: "API key is valid but credit balance is too low. The user must add credits at console.anthropic.com under Plans & Billing, or enable auto-top-up.",
+            };
+        }
+        if (res.status === 401 ||
+            res.status === 403 ||
+            /authentication_error|permission_error/i.test(body)) {
+            console.error(`[anthropic-key] validate: auth_error (${res.status}, ${latency}ms)`);
+            return {
+                status: "auth_error",
+                message: "API key was rejected. It may be invalid, revoked, or expired. The user should create a new key at console.anthropic.com/settings/keys.",
+            };
+        }
+        console.error(`[anthropic-key] validate: error (${res.status}, ${latency}ms)`);
+        return {
+            status: "error",
+            message: `Could not verify API key. Anthropic returned ${res.status}. This may be a temporary outage — try again later.`,
+        };
+    }
+    catch (err) {
+        const latency = Date.now() - start;
+        const msg = err instanceof Error ? err.message : String(err);
+        console.error(`[anthropic-key] validate: error (network failure, ${latency}ms): ${msg}`);
+        return {
+            status: "error",
+            message: `Could not reach the Anthropic API: ${msg}. Check network connectivity.`,
+        };
+    }
+}
+// ---------------------------------------------------------------------------
+// keyFilePath — expose the resolved path for callers that need it
+// (e.g., existsSync checks, user-facing messages about the key location)
+// ---------------------------------------------------------------------------
+function keyFilePath() {
+    return resolveKeyFilePath();
+}
+//# sourceMappingURL=index.js.map

package/payload/platform/lib/anthropic-key/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;;GASG;;AAoEH,0BAiDC;AAMD,4BAiBC;AAMD,wBAEC;AAaD,8BAsBC;AAiBD,kCAsFC;AAOD,kCAEC;AArSD,yDAAyD;AACzD,qCAMiB;AACjB,yCAAmD;AACnD,qCAAkC;AAElC,8EAA8E;AAC9E,iCAAiC;AACjC,EAAE;AACF,yEAAyE;AACzE,gDAAgD;AAChD,qEAAqE;AACrE,yEAAyE;AACzE,kEAAkE;AAClE,8EAA8E;AAE9E,IAAI,iBAAiB,GAAkB,IAAI,CAAC;AAE5C,SAAS,kBAAkB;IACzB,IAAI,iBAAiB;QAAE,OAAO,iBAAiB,CAAC;IAEhD,IAAI,aAAa,GAAG,OAAO,CAAC,CAAC,kBAAkB;IAC/C,MAAM,YAAY,GAChB,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;IAE9D,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,SAAS,GAAG,IAAA,gBAAI,EAAC,YAAY,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;QAC7D,IAAI,CAAC,IAAA,oBAAU,EAAC,SAAS,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CACb,2BAA2B,SAAS,oCAAoC,CACzE,CAAC;QACJ,CAAC;QACD,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAA,sBAAY,EAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;YAC3D,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;gBACrB,MAAM,IAAI,KAAK,CACb,iBAAiB,SAAS,iCAAiC,CAC5D,CAAC;YACJ,CAAC;YACD,aAAa,GAAG,KAAK,CAAC,SAAS,CAAC;QAClC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,WAAW,EAAE,CAAC;gBAC/B,MAAM,IAAI,KAAK,CACb,iBAAiB,SAAS,uBAAuB,GAAG,CAAC,OAAO,EAAE,CAC/D,CAAC;YACJ,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED,iBAAiB,GAAG,IAAA,mBAAO,EAAC,IAAA,iBAAO,GAAE,EAAE,aAAa,EAAE,oBAAoB,CAAC,CAAC;IAC5E,OAAO,iBAAiB,CAAC;AAC3B,CAAC;AAED,8EAA8E;AAC9E,4CAA4C;AAC5C,EAAE;AACF,iEAAiE;AACjE,kEAAkE;AAClE,8EAA8E;AAE9E,SAAgB,OAAO;IACrB,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;IAC7C,IAAI,MAAM,IAAI,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;QAC5B,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;IACvB,CAAC;IAED,IAAI,WAAmB,CAAC;IACxB,IAAI,CAAC;QACH,WAAW,GAAG,kBAAkB,EAAE,CAAC;IACrC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,OAAO,CAAC,KAAK,CAAC,2CAA2C,GAAG,EAAE,CAAC,CAAC;QAChE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,2DAA2D;QAC3D,OAAO,CAAC,KAAK,CACX,kFAAkF,CACnF,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAA,sBAAY,EAAC,WAAW,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;QACtD,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,CAAC,KAAK,CACX,iDAAiD,WAAW,EAAE,CAC/D,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,IAAI,GACR,GAAG,YAAY,KAAK,IAAI,MAAM,IAAI,GAAG;YACnC,CAAC,CAAE,GAA6B,CAAC,IAAI;YACrC,CAAC,CAAC,SAAS,CAAC;QAChB,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtB,mDAAmD;YACnD,OAAO,CAAC,KAAK,CACX,oEAAoE,WAAW,GAAG,CACnF,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,OAAO,CAAC,KAAK,CACX,2CAA2C,WAAW,KAAK,GAAG,EAAE,CACjE,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,mEAAmE;AACnE,8EAA8E;AAE9E,SAAgB,QAAQ,CAAC,GAAW;IAClC,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CACb,8CAA8C,CAC/C,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CACb,qDAAqD,CACtD,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAAG,kBAAkB,EAAE,CAAC;IACzC,IAAA,mBAAS,EAAC,IAAA,mBAAO,EAAC,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACrD,IAAA,uBAAa,EAAC,WAAW,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACrD,OAAO,CAAC,KAAK,CAAC,kCAAkC,WAAW,EAAE,CAAC,CAAC;AACjE,CAAC;AAED,8EAA8E;AAC9E,qCAAqC;AACrC,8EAA8E;AAE9E,SAAgB,MAAM;IACpB,OAAO,OAAO,EAAE,KAAK,IAAI,CAAC;AAC5B,CAAC;AAED,8EAA8E;AAC9E,+DAA+D;AAC/D,EAAE;AACF,uEAAuE;AACvE,yEAAyE;AACzE,wEAAwE;AACxE,uEAAuE;AACvE,qEAAqE;AACrE,+BAA+B;AAC/B,8EAA8E;AAE9E,SAAgB,SAAS;IACvB,MAAM,WAAW,GAAG,kBAAkB,EAAE,CAAC;IACzC,IAAI,CAAC;QACH,IAAA,oBAAU,EAAC,WAAW,CAAC,CAAC;QACxB,OAAO,CAAC,KAAK,CAAC,sCAAsC,WAAW,EAAE,CAAC,CAAC;IACrE,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,IAAI,GACR,GAAG,YAAY,KAAK,IAAI,MAAM,IAAI,GAAG;YACnC,CAAC,CAAE,GAA6B,CAAC,IAAI;YACrC,CAAC,CAAC,SAAS,CAAC;QAChB,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtB,OAAO,CAAC,KAAK,CACX,0DAA0D,WAAW,EAAE,CACxE,CAAC;YACF,OAAO;QACT,CAAC;QACD,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,OAAO,CAAC,KAAK,CACX,+CAA+C,WAAW,KAAK,GAAG,EAAE,CACrE,CAAC;QACF,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAiBM,KAAK,UAAU,WAAW,CAAC,GAAY;IAC5C,MAAM,YAAY,GAAG,GAAG,IAAI,OAAO,EAAE,CAAC;IACtC,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,OAAO;YACL,MAAM,EAAE,SAAS;YACjB,OAAO,EAAE,8DAA8D;SACxE,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACzB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,uCAAuC,EAAE;YAC/D,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,WAAW,EAAE,YAAY;gBACzB,mBAAmB,EAAE,YAAY;aAClC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,KAAK,EAAE,sBAAW;gBAClB,UAAU,EAAE,CAAC;gBACb,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;aAC5C,CAAC;YACF,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC;SACnC,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;QAEnC,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACjC,wEAAwE;YACxE,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;YACjB,OAAO,CAAC,KAAK,CACX,oCAAoC,GAAG,CAAC,MAAM,KAAK,OAAO,KAAK,CAChE,CAAC;YACF,OAAO;gBACL,MAAM,EAAE,OAAO;gBACf,OAAO,EAAE,wCAAwC;aAClD,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAE9B,IAAI,0CAA0C,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1D,OAAO,CAAC,KAAK,CACX,sCAAsC,GAAG,CAAC,MAAM,KAAK,OAAO,KAAK,CAClE,CAAC;YACF,OAAO;gBACL,MAAM,EAAE,SAAS;gBACjB,OAAO,EACL,kJAAkJ;aACrJ,CAAC;QACJ,CAAC;QAED,IACE,GAAG,CAAC,MAAM,KAAK,GAAG;YAClB,GAAG,CAAC,MAAM,KAAK,GAAG;YAClB,wCAAwC,CAAC,IAAI,CAAC,IAAI,CAAC,EACnD,CAAC;YACD,OAAO,CAAC,KAAK,CACX,yCAAyC,GAAG,CAAC,MAAM,KAAK,OAAO,KAAK,CACrE,CAAC;YACF,OAAO;gBACL,MAAM,EAAE,YAAY;gBACpB,OAAO,EACL,wIAAwI;aAC3I,CAAC;QACJ,CAAC;QAED,OAAO,CAAC,KAAK,CACX,oCAAoC,GAAG,CAAC,MAAM,KAAK,OAAO,KAAK,CAChE,CAAC;QACF,OAAO;YACL,MAAM,EAAE,OAAO;YACf,OAAO,EAAE,gDAAgD,GAAG,CAAC,MAAM,qDAAqD;SACzH,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;QACnC,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,OAAO,CAAC,KAAK,CACX,qDAAqD,OAAO,QAAQ,GAAG,EAAE,CAC1E,CAAC;QACF,OAAO;YACL,MAAM,EAAE,OAAO;YACf,OAAO,EAAE,sCAAsC,GAAG,+BAA+B;SAClF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,kEAAkE;AAClE,yEAAyE;AACzE,8EAA8E;AAE9E,SAAgB,WAAW;IACzB,OAAO,kBAAkB,EAAE,CAAC;AAC9B,CAAC"}