@runcore-sh/runcore 0.4.0 → 0.5.0

package/dist/vault/personal.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"personal.js","sourceRoot":"","sources":["../../src/vault/personal.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EACL,cAAc,EACd,eAAe,EACf,eAAe,EACf,gBAAgB,GACjB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAE5C,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;AAC3C,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAC;AAEzD,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC;IACjC,OAAO,EAAE,gBAAgB;IACzB,QAAQ,EAAE,KAAK;IACf,YAAY,EACV,kFAAkF;CACrF,CAAC,CAAC;AAoBH,gFAAgF;AAEhF,oEAAoE;AACpE,IAAI,KAAK,GAA4B,IAAI,GAAG,EAAE,CAAC;AAC/C,IAAI,MAAM,GAAG,KAAK,CAAC;AAEnB,gFAAgF;AAEhF,SAAS,YAAY,CAAC,GAAY;IAChC,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAClD,MAAM,CAAC,GAAG,GAA8B,CAAC;IACzC,OAAO,CACL,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ;QAC3B,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ;QAC3B,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ;QAC9B,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,CAChC,CAAC;AACJ,CAAC;AAED,iFAAiF;AACjF,KAAK,UAAU,OAAO;IACpB,MAAM,gBAAgB,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;IAChD,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,UAAU,CAAC,CAAC;IAC/C,KAAK,GAAG,IAAI,GAAG,EAAE,CAAC;IAElB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACzC,qBAAqB;YACrB,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,SAAS,IAAI,MAAM;gBAAE,SAAS;YAC1E,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC;gBAAE,SAAS;YACpC,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;gBACjC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC7B,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YAClC,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,uBAAuB;QACzB,CAAC;IACH,CAAC;IACD,MAAM,GAAG,IAAI,CAAC;AAChB,CAAC;AAED,6CAA6C;AAC7C,KAAK,UAAU,YAAY;IACzB,IAAI,CAAC,MAAM;QAAE,MAAM,OAAO,EAAE,CAAC;AAC/B,CAAC;AAED,gFAAgF;AAEhF;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB;IACrC,MAAM,OAAO,EAAE,CAAC;AAClB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,KAAa;IAEb,MAAM,YAAY,EAAE,CAAC;IACrB,OAAO,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC;AAClC,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,KAAa,EACb,KAAa,EACb,QAAuB;IAEvB,MAAM,YAAY,EAAE,CAAC;IACrB,MAAM,KAAK,GAAe;QACxB,KAAK;QACL,KAAK;QACL,QAAQ;QACR,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,MAAM,EAAE,QAAQ;KACjB,CAAC;IACF,MAAM,eAAe,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;IACzD,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACxB,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,QAAwB;IAExB,MAAM,YAAY,EAAE,CAAC;IACrB,MAAM,OAAO,GAIR,EAAE,CAAC;IACR,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;QACnC,IAAI,QAAQ,IAAI,KAAK,CAAC,QAAQ,KAAK,QAAQ;YAAE,SAAS;QACtD,OAAO,CAAC,IAAI,CAAC;YACX,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,SAAS,EAAE,KAAK,CAAC,SAAS;SAC3B,CAAC,CAAC;IACL,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,KAAa;IACrD,MAAM,YAAY,EAAE,CAAC;IACrB,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAClC,IAAI,CAAC,QAAQ;QAAE,OAAO,KAAK,CAAC;IAE5B,MAAM,SAAS,GAAe;QAC5B,GAAG,QAAQ;QACX,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,MAAM,EAAE,UAAU;KACnB,CAAC;IACF,MAAM,eAAe,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC;IAC7D,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACpB,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,MAAgB;IAEhB,MAAM,YAAY,EAAE,CAAC;IACrB,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC3B,IAAI,KAAK;YAAE,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB;IACxC,MAAM,YAAY,EAAE,CAAC;IACrB,MAAM,KAAK,GAAa,CAAC,WAAW,CAAC,CAAC;IACtC,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;QACnC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;IACpC,CAAC;IACD,MAAM,eAAe,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IACzC,OAAO,KAAK,CAAC,IAAI,CAAC;AACpB,CAAC"}

package/dist/vault/policy.js

@@ -1,159 +0,0 @@
-/**
- * Vault Policy Loader — classifies brain paths into access tiers.
- *
- * Reads brain/vault.policy.yaml and caches on first load.
- * Tiers: open | community | secured. Default from `default_tier` field.
- *
- * Hand-rolled YAML parser (no external deps). Reuses pattern from
- * sensitive-registry.ts.
- */
-import { readFile } from "node:fs/promises";
-import { readFileSync, existsSync } from "node:fs";
-import { join } from "node:path";
-import { matchAnyGlob } from "../lib/glob-match.js";
-import { createLogger } from "../utils/logger.js";
-const log = createLogger("vault.policy");
-import { BRAIN_DIR } from "../lib/paths.js";
-const POLICY_FILE = join(BRAIN_DIR, "vault.policy.yaml");
-// ── Cache ────────────────────────────────────────────────────────────────────
-let cached = null;
-// ── YAML parser ──────────────────────────────────────────────────────────────
-/**
- * Parse the vault.policy.yaml format. Expects:
- *   owner: <string>
- *   tiers:
- *     open:
- *       - pattern
- *     community:
- *       - pattern
- *     secured:
- *       - pattern
- *   default_tier: <tier>
- */
-function parseVaultPolicy(raw) {
-    const lines = raw.split("\n");
-    let owner = "";
-    let defaultTier = "community";
-    const tiers = { open: [], community: [], secured: [] };
-    let currentTier = null;
-    for (const line of lines) {
-        const trimmed = line.trimEnd();
-        // Skip comments and empty lines
-        if (!trimmed || trimmed.match(/^\s*#/))
-            continue;
-        // Top-level key: value
-        const topKv = trimmed.match(/^(\w[\w_]*)\s*:\s*(.+)$/);
-        if (topKv) {
-            const [, key, val] = topKv;
-            const unquoted = val.replace(/^["']|["']$/g, "").trim();
-            if (key === "owner")
-                owner = unquoted;
-            else if (key === "default_tier") {
-                if (unquoted === "open" || unquoted === "community" || unquoted === "secured") {
-                    defaultTier = unquoted;
-                }
-            }
-            currentTier = null;
-            continue;
-        }
-        // Tier header (indented under tiers:)
-        const tierHeader = trimmed.match(/^\s+(open|community|secured)\s*:\s*$/);
-        if (tierHeader) {
-            currentTier = tierHeader[1];
-            continue;
-        }
-        // List item under a tier
-        const listItem = trimmed.match(/^\s+-\s+(.+)$/);
-        if (listItem && currentTier) {
-            const pattern = listItem[1].replace(/^["']|["']$/g, "").trim();
-            tiers[currentTier].push(pattern);
-            continue;
-        }
-        // "tiers:" header line (no value)
-        if (trimmed.match(/^tiers\s*:\s*$/)) {
-            currentTier = null;
-            continue;
-        }
-    }
-    return { owner, tiers, defaultTier };
-}
-// ── Public API ───────────────────────────────────────────────────────────────
-/**
- * Load and cache the vault policy. Returns cached on subsequent calls.
- */
-export async function loadVaultPolicy() {
-    if (cached)
-        return cached;
-    try {
-        const raw = await readFile(POLICY_FILE, "utf-8");
-        cached = parseVaultPolicy(raw);
-        log.info("Vault policy loaded", {
-            owner: cached.owner,
-            open: cached.tiers.open.length,
-            community: cached.tiers.community.length,
-            secured: cached.tiers.secured.length,
-        });
-    }
-    catch (err) {
-        if (err.code === "ENOENT") {
-            log.warn("No vault.policy.yaml found — defaulting all paths to community");
-        }
-        else {
-            log.warn("Failed to parse vault.policy.yaml", { error: err.message });
-        }
-        cached = { owner: "", tiers: { open: [], community: [], secured: [] }, defaultTier: "community" };
-    }
-    return cached;
-}
-/**
- * Synchronous load — for use where async is not available.
- */
-export function loadVaultPolicySync() {
-    if (cached)
-        return cached;
-    try {
-        if (existsSync(POLICY_FILE)) {
-            const raw = readFileSync(POLICY_FILE, "utf-8");
-            cached = parseVaultPolicy(raw);
-        }
-        else {
-            cached = { owner: "", tiers: { open: [], community: [], secured: [] }, defaultTier: "community" };
-        }
-    }
-    catch {
-        cached = { owner: "", tiers: { open: [], community: [], secured: [] }, defaultTier: "community" };
-    }
-    return cached;
-}
-/**
- * Get the cached policy (loads synchronously if not yet cached).
- */
-export function getVaultPolicy() {
-    if (!cached)
-        loadVaultPolicySync();
-    return cached;
-}
-/**
- * Classify a brain-relative path into a vault tier.
- * Checks secured first (most restrictive), then open, then community.
- * Falls back to default_tier if no pattern matches.
- */
-export function classifyPath(relPath) {
-    const policy = getVaultPolicy();
-    // Check most restrictive first
-    if (matchAnyGlob(policy.tiers.secured, relPath))
-        return "secured";
-    if (matchAnyGlob(policy.tiers.open, relPath))
-        return "open";
-    if (matchAnyGlob(policy.tiers.community, relPath))
-        return "community";
-    return policy.defaultTier;
-}
-/**
- * Force reload of vault policy (e.g. after policy file changes).
- */
-export async function reloadVaultPolicy() {
-    cached = null;
-    return loadVaultPolicy();
-}
-//# sourceMappingURL=policy.js.map

package/dist/vault/policy.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../src/vault/policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAW,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,MAAM,GAAG,GAAG,YAAY,CAAC,cAAc,CAAC,CAAC;AAEzC,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;AAgBzD,gFAAgF;AAEhF,IAAI,MAAM,GAAuB,IAAI,CAAC;AAEtC,gFAAgF;AAEhF;;;;;;;;;;;GAWG;AACH,SAAS,gBAAgB,CAAC,GAAW;IACnC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAE9B,IAAI,KAAK,GAAG,EAAE,CAAC;IACf,IAAI,WAAW,GAAc,WAAW,CAAC;IACzC,MAAM,KAAK,GAAyB,EAAE,IAAI,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IAE7E,IAAI,WAAW,GAAqB,IAAI,CAAC;IAEzC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;QAE/B,gCAAgC;QAChC,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;YAAE,SAAS;QAEjD,uBAAuB;QACvB,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC;QACvD,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,KAAK,CAAC;YAC3B,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YACxD,IAAI,GAAG,KAAK,OAAO;gBAAE,KAAK,GAAG,QAAQ,CAAC;iBACjC,IAAI,GAAG,KAAK,cAAc,EAAE,CAAC;gBAChC,IAAI,QAAQ,KAAK,MAAM,IAAI,QAAQ,KAAK,WAAW,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;oBAC9E,WAAW,GAAG,QAAQ,CAAC;gBACzB,CAAC;YACH,CAAC;YACD,WAAW,GAAG,IAAI,CAAC;YACnB,SAAS;QACX,CAAC;QAED,sCAAsC;QACtC,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAAC;QACzE,IAAI,UAAU,EAAE,CAAC;YACf,WAAW,GAAG,UAAU,CAAC,CAAC,CAAc,CAAC;YACzC,SAAS;QACX,CAAC;QAED,yBAAyB;QACzB,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;QAChD,IAAI,QAAQ,IAAI,WAAW,EAAE,CAAC;YAC5B,MAAM,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YAC/D,KAAK,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACjC,SAAS;QACX,CAAC;QAED,kCAAkC;QAClC,IAAI,OAAO,CAAC,KAAK,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACpC,WAAW,GAAG,IAAI,CAAC;YACnB,SAAS;QACX,CAAC;IACH,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;AACvC,CAAC;AAED,gFAAgF;AAEhF;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe;IACnC,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAC1B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QACjD,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;QAC/B,GAAG,CAAC,IAAI,CAAC,qBAAqB,EAAE;YAC9B,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM;YAC9B,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM;YACxC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM;SACrC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC1B,GAAG,CAAC,IAAI,CAAC,gEAAgE,CAAC,CAAC;QAC7E,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,IAAI,CAAC,mCAAmC,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACxE,CAAC;QACD,MAAM,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC;IACpG,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB;IACjC,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAC1B,IAAI,CAAC;QACH,IAAI,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;YAC5B,MAAM,GAAG,GAAG,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;YAC/C,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;QACjC,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC;QACpG,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC;IACpG,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc;IAC5B,IAAI,CAAC,MAAM;QAAE,mBAAmB,EAAE,CAAC;IACnC,OAAO,MAAO,CAAC;AACjB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,OAAe;IAC1C,MAAM,MAAM,GAAG,cAAc,EAAE,CAAC;IAEhC,+BAA+B;IAC/B,IAAI,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC;QAAE,OAAO,SAAS,CAAC;IAClE,IAAI,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC;QAAE,OAAO,MAAM,CAAC;IAC5D,IAAI,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,OAAO,CAAC;QAAE,OAAO,WAAW,CAAC;IAEtE,OAAO,MAAM,CAAC,WAAW,CAAC;AAC5B,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB;IACrC,MAAM,GAAG,IAAI,CAAC;IACd,OAAO,eAAe,EAAE,CAAC;AAC3B,CAAC"}

package/dist/vault/store.js

@@ -1,122 +0,0 @@
-/**
- * Encrypted key vault.
- * Stores API keys as AES-256-GCM encrypted JSON, same key used for sessions.
- * After loading, hydrates process.env so consumer modules need zero changes.
- */
-import { readFile, writeFile, mkdir } from "node:fs/promises";
-import { join } from "node:path";
-import { encrypt, decrypt } from "../auth/crypto.js";
-import { shouldHydrateKey } from "../integrations/gate.js";
-import { BRAIN_DIR } from "../lib/paths.js";
-const VAULT_DIR = join(BRAIN_DIR, "vault");
-const VAULT_FILE = join(VAULT_DIR, "keys.json");
-// In-memory cache — populated by loadVault, read by list/hydrate
-let vaultCache = {};
-/**
- * Load vault from encrypted file, populate cache and hydrate process.env.
- * Safe to call when file doesn't exist (starts empty).
- */
-export async function loadVault(key) {
-    try {
-        const raw = await readFile(VAULT_FILE, "utf-8");
-        const file = JSON.parse(raw);
-        const payload = {
-            ciphertext: file.ciphertext,
-            iv: file.iv,
-            authTag: file.authTag,
-        };
-        const plaintext = decrypt(payload, key);
-        vaultCache = JSON.parse(plaintext);
-    }
-    catch {
-        // File missing, corrupt, or wrong key — start fresh
-        vaultCache = {};
-    }
-    hydrateEnv();
-}
-/**
- * Encrypt and save the vault cache to disk. Fresh IV on every write.
- */
-async function saveVault(key) {
-    await mkdir(VAULT_DIR, { recursive: true });
-    const plaintext = JSON.stringify(vaultCache);
-    const payload = encrypt(plaintext, key);
-    const file = {
-        v: 1,
-        ciphertext: payload.ciphertext,
-        iv: payload.iv,
-        authTag: payload.authTag,
-    };
-    await writeFile(VAULT_FILE, JSON.stringify(file), "utf-8");
-}
-/**
- * Add or update a key in the vault. Persists immediately.
- */
-export async function setVaultKey(name, value, key, label) {
-    vaultCache[name] = { value, label };
-    await saveVault(key);
-    // Keep process.env in sync — but respect the integration gate
-    if (shouldHydrateKey(name)) {
-        process.env[name] = value;
-    }
-}
-/**
- * Remove a key from the vault. Persists immediately.
- */
-export async function deleteVaultKey(name, key) {
-    delete vaultCache[name];
-    await saveVault(key);
-    // Remove from process.env (reverts to .env value on next restart)
-    delete process.env[name];
-}
-/**
- * List vault keys — names and labels only, no values.
- */
-export function listVaultKeys() {
-    return Object.entries(vaultCache).map(([name, entry]) => ({
-        name,
-        label: entry.label,
-    }));
-}
-/**
- * Get all vault entries with values. Used for migration to credential store.
- */
-export function getVaultEntries() {
-    return Object.entries(vaultCache).map(([name, entry]) => ({
-        name,
-        value: entry.value,
-        label: entry.label,
-    }));
-}
-/**
- * Get vault entries that the agent (the chat LLM) is allowed to see in conversation.
- * Only keys starting with "CORE_" or "DASH_" are returned — these are non-secret values
- * the user explicitly wants the agent to reference (e.g. preferences, nicknames).
- *
- * SECURITY: Authentication secrets (PASSWORD, RECOVERY_QUESTION) are NEVER
- * exposed to the LLM. The password is verified at the crypto layer via its
- * SHA-256 hash in human.json — the LLM must never know or repeat it.
- */
-const NEVER_EXPOSE = new Set(["SAFE_WORD", "RECOVERY_QUESTION"]);
-export function getDashReadableVault() {
-    return Object.entries(vaultCache)
-        .filter(([name]) => (name.startsWith("CORE_") || name.startsWith("DASH_")) && !NEVER_EXPOSE.has(name))
-        .map(([name, entry]) => ({ name, value: entry.value, label: entry.label }));
-}
-/**
- * Push vault values into process.env, filtered by the integration gate.
- * Disabled integrations have their secrets actively removed from process.env.
- * Called after loadVault so consumer modules (LLM, search) pick them up.
- */
-export function hydrateEnv() {
-    for (const [name, entry] of Object.entries(vaultCache)) {
-        if (shouldHydrateKey(name)) {
-            process.env[name] = entry.value;
-        }
-        else {
-            // Actively remove blocked keys — they may have been set by a prior hydration
-            delete process.env[name];
-        }
-    }
-}
-//# sourceMappingURL=store.js.map

package/dist/vault/store.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"store.js","sourceRoot":"","sources":["../../src/vault/store.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAyB,MAAM,mBAAmB,CAAC;AAC5E,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAE5C,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;AAC3C,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;AAgBhD,iEAAiE;AACjE,IAAI,UAAU,GAAc,EAAE,CAAC;AAE/B;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,GAAW;IACzC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAChD,MAAM,IAAI,GAAkB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC5C,MAAM,OAAO,GAAqB;YAChC,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,OAAO,EAAE,IAAI,CAAC,OAAO;SACtB,CAAC;QACF,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACxC,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAc,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,oDAAoD;QACpD,UAAU,GAAG,EAAE,CAAC;IAClB,CAAC;IACD,UAAU,EAAE,CAAC;AACf,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,SAAS,CAAC,GAAW;IAClC,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5C,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IAC7C,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IACxC,MAAM,IAAI,GAAkB;QAC1B,CAAC,EAAE,CAAC;QACJ,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,EAAE,EAAE,OAAO,CAAC,EAAE;QACd,OAAO,EAAE,OAAO,CAAC,OAAO;KACzB,CAAC;IACF,MAAM,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;AAC7D,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,IAAY,EACZ,KAAa,EACb,GAAW,EACX,KAAc;IAEd,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IACpC,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC;IACrB,8DAA8D;IAC9D,IAAI,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3B,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;IAC5B,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAAY,EAAE,GAAW;IAC5D,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC;IACxB,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC;IACrB,kEAAkE;IAClE,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAC3B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa;IAC3B,OAAO,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;QACxD,IAAI;QACJ,KAAK,EAAE,KAAK,CAAC,KAAK;KACnB,CAAC,CAAC,CAAC;AACN,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe;IAC7B,OAAO,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;QACxD,IAAI;QACJ,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,KAAK,EAAE,KAAK,CAAC,KAAK;KACnB,CAAC,CAAC,CAAC;AACN,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,mBAAmB,CAAC,CAAC,CAAC;AAEjE,MAAM,UAAU,oBAAoB;IAClC,OAAO,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC;SAC9B,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;SACrG,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;AAChF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,UAAU;IACxB,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QACvD,IAAI,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3B,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC;QAClC,CAAC;aAAM,CAAC;YACN,6EAA6E;YAC7E,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/vault/transfer.js

@@ -1,188 +0,0 @@
-/**
- * Vault portable export/import.
- *
- * DPAPI ties session keys to the Windows user profile, making vault secrets
- * non-portable. This module provides passphrase-based export/import so
- * secrets can move across machines and operating systems.
- *
- * Export format: self-describing JSON envelope (.vault) with AES-256-GCM
- * encrypted payload, key derived via PBKDF2 from a case-sensitive passphrase.
- */
-import { pbkdf2Sync, randomBytes, createHash } from "node:crypto";
-import { writeFile, readFile, mkdir } from "node:fs/promises";
-import { join } from "node:path";
-import { encrypt, decrypt } from "../auth/crypto.js";
-import { getVaultEntries, setVaultKey } from "./store.js";
-import { readBrainLines, appendBrainLine } from "../lib/brain-io.js";
-import { getEncryptionKey } from "../lib/key-store.js";
-import { getInstanceName } from "../instance.js";
-import { BRAIN_DIR } from "../lib/paths.js";
-// ── Constants ────────────────────────────────────────────────────────────────
-const VAULT_DIR = join(BRAIN_DIR, "vault");
-const CRED_FILE = join(BRAIN_DIR, "vault", "credentials.enc.jsonl");
-const PERSONAL_FILE = join(BRAIN_DIR, "vault", "personal.enc.jsonl");
-const FORMAT = "core-vault-export";
-const VERSION = 1;
-const ITERATIONS = 600_000;
-const KEY_LENGTH = 32;
-const SALT_LENGTH = 16;
-// ── Key derivation (case-sensitive, unlike password) ─────────────────────────
-function deriveExportKey(passphrase, salt) {
-    return pbkdf2Sync(passphrase, salt, ITERATIONS, KEY_LENGTH, "sha256");
-}
-function hashKey(key) {
-    return createHash("sha256").update(key).digest("hex");
-}
-// ── Helpers ──────────────────────────────────────────────────────────────────
-/** Read JSONL entries, skipping schema headers. */
-async function readJsonlEntries(filePath) {
-    const lines = await readBrainLines(filePath);
-    const entries = [];
-    for (const line of lines) {
-        try {
-            const obj = JSON.parse(line);
-            if (obj._schema)
-                continue;
-            entries.push(obj);
-        }
-        catch {
-            // skip malformed
-        }
-    }
-    return entries;
-}
-/** Deduplicate credentials by id (last occurrence wins), filter active only. */
-function deduplicateCredentials(creds) {
-    const map = new Map();
-    for (const c of creds) {
-        if (c.id)
-            map.set(c.id, c);
-    }
-    return Array.from(map.values()).filter((c) => c.status !== "archived");
-}
-/** Deduplicate personal fields by field name (last wins), filter active. */
-function deduplicatePersonal(entries) {
-    const map = new Map();
-    for (const e of entries) {
-        if (e.status === "archived") {
-            map.delete(e.field);
-        }
-        else {
-            map.set(e.field, e);
-        }
-    }
-    return Array.from(map.values());
-}
-// ── Export ────────────────────────────────────────────────────────────────────
-export async function exportVault(passphrase, outputDir) {
-    const sessionKey = getEncryptionKey();
-    if (!sessionKey)
-        throw new Error("Not authenticated — session key not set");
-    // Collect secrets
-    const vaultKeys = getVaultEntries();
-    const rawCredentials = await readJsonlEntries(CRED_FILE);
-    const credentials = deduplicateCredentials(rawCredentials);
-    const rawPersonal = await readJsonlEntries(PERSONAL_FILE);
-    const personalFields = deduplicatePersonal(rawPersonal);
-    const payload = { vaultKeys, credentials, personalFields };
-    // Derive export key (case-sensitive)
-    const salt = randomBytes(SALT_LENGTH);
-    const exportKey = deriveExportKey(passphrase, salt);
-    const keyHash = hashKey(exportKey);
-    // Encrypt
-    const encrypted = encrypt(JSON.stringify(payload), exportKey);
-    const envelope = {
-        format: FORMAT,
-        version: VERSION,
-        exportedAt: new Date().toISOString(),
-        sourceInstance: getInstanceName(),
-        salt: salt.toString("hex"),
-        iterations: ITERATIONS,
-        keyHash,
-        payload: encrypted,
-    };
-    // Write file
-    const dir = outputDir ?? VAULT_DIR;
-    await mkdir(dir, { recursive: true });
-    const timestamp = new Date().toISOString().replace(/[:.]/g, "-");
-    const filePath = join(dir, `export-${timestamp}.vault`);
-    await writeFile(filePath, JSON.stringify(envelope, null, 2), "utf-8");
-    return {
-        filePath,
-        stats: {
-            vaultKeys: vaultKeys.length,
-            credentials: credentials.length,
-            personalFields: personalFields.length,
-        },
-    };
-}
-// ── Verify ───────────────────────────────────────────────────────────────────
-export async function verifyExport(filePath, passphrase) {
-    const payload = await decryptEnvelope(filePath, passphrase);
-    return {
-        message: "Export verified successfully",
-        stats: {
-            vaultKeys: payload.vaultKeys.length,
-            credentials: payload.credentials.length,
-            personalFields: payload.personalFields.length,
-        },
-    };
-}
-// ── Import ───────────────────────────────────────────────────────────────────
-export async function importVault(filePath, passphrase, strategy = "skip", sessionKey) {
-    const payload = await decryptEnvelope(filePath, passphrase);
-    let skipped = 0;
-    // Import vault keys
-    const existingKeys = new Set(getVaultEntries().map((e) => e.name));
-    for (const entry of payload.vaultKeys) {
-        if (existingKeys.has(entry.name)) {
-            if (strategy === "skip") {
-                skipped++;
-                continue;
-            }
-            if (strategy === "rename") {
-                const renamed = `${entry.name}_imported`;
-                await setVaultKey(renamed, entry.value, sessionKey, entry.label);
-                continue;
-            }
-            // overwrite — fall through
-        }
-        await setVaultKey(entry.name, entry.value, sessionKey, entry.label);
-    }
-    // Import credentials (append-only JSONL)
-    for (const cred of payload.credentials) {
-        await appendBrainLine(CRED_FILE, JSON.stringify(cred));
-    }
-    // Import personal fields (append-only JSONL)
-    for (const field of payload.personalFields) {
-        await appendBrainLine(PERSONAL_FILE, JSON.stringify(field));
-    }
-    return {
-        stats: {
-            vaultKeys: payload.vaultKeys.length,
-            credentials: payload.credentials.length,
-            personalFields: payload.personalFields.length,
-            skipped,
-        },
-    };
-}
-// ── Shared decrypt ───────────────────────────────────────────────────────────
-async function decryptEnvelope(filePath, passphrase) {
-    const raw = await readFile(filePath, "utf-8");
-    const envelope = JSON.parse(raw);
-    if (envelope.format !== FORMAT) {
-        throw new Error(`Unknown export format: ${envelope.format}`);
-    }
-    if (envelope.version !== VERSION) {
-        throw new Error(`Unsupported export version: ${envelope.version}`);
-    }
-    const salt = Buffer.from(envelope.salt, "hex");
-    const exportKey = deriveExportKey(passphrase, salt);
-    // Fast wrong-passphrase detection
-    if (hashKey(exportKey) !== envelope.keyHash) {
-        throw new Error("Wrong passphrase");
-    }
-    const plaintext = decrypt(envelope.payload, exportKey);
-    return JSON.parse(plaintext);
-}
-//# sourceMappingURL=transfer.js.map

package/dist/vault/transfer.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"transfer.js","sourceRoot":"","sources":["../../src/vault/transfer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAClE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAyB,MAAM,mBAAmB,CAAC;AAC5E,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrE,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAGjD,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAE5C,gFAAgF;AAEhF,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;AAC3C,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,uBAAuB,CAAC,CAAC;AACpE,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,oBAAoB,CAAC,CAAC;AAErE,MAAM,MAAM,GAAG,mBAAmB,CAAC;AACnC,MAAM,OAAO,GAAG,CAAC,CAAC;AAClB,MAAM,UAAU,GAAG,OAAO,CAAC;AAC3B,MAAM,UAAU,GAAG,EAAE,CAAC;AACtB,MAAM,WAAW,GAAG,EAAE,CAAC;AAiDvB,gFAAgF;AAEhF,SAAS,eAAe,CAAC,UAAkB,EAAE,IAAY;IACvD,OAAO,UAAU,CAAC,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,OAAO,CAAC,GAAW;IAC1B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACxD,CAAC;AAED,gFAAgF;AAEhF,mDAAmD;AACnD,KAAK,UAAU,gBAAgB,CAAI,QAAgB;IACjD,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,QAAQ,CAAC,CAAC;IAC7C,MAAM,OAAO,GAAQ,EAAE,CAAC;IACxB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC7B,IAAI,GAAG,CAAC,OAAO;gBAAE,SAAS;YAC1B,OAAO,CAAC,IAAI,CAAC,GAAQ,CAAC,CAAC;QACzB,CAAC;QAAC,MAAM,CAAC;YACP,iBAAiB;QACnB,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,gFAAgF;AAChF,SAAS,sBAAsB,CAAC,KAAmB;IACjD,MAAM,GAAG,GAAG,IAAI,GAAG,EAAsB,CAAC;IAC1C,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,CAAC,EAAE;YAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IAC7B,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC;AACzE,CAAC;AAED,4EAA4E;AAC5E,SAAS,mBAAmB,CAAC,OAAqB;IAChD,MAAM,GAAG,GAAG,IAAI,GAAG,EAAsB,CAAC;IAC1C,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,CAAC,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YAC5B,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;AAClC,CAAC;AAED,iFAAiF;AAEjF,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,UAAkB,EAClB,SAAkB;IAElB,MAAM,UAAU,GAAG,gBAAgB,EAAE,CAAC;IACtC,IAAI,CAAC,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAE5E,kBAAkB;IAClB,MAAM,SAAS,GAAG,eAAe,EAAE,CAAC;IACpC,MAAM,cAAc,GAAG,MAAM,gBAAgB,CAAa,SAAS,CAAC,CAAC;IACrE,MAAM,WAAW,GAAG,sBAAsB,CAAC,cAAc,CAAC,CAAC;IAC3D,MAAM,WAAW,GAAG,MAAM,gBAAgB,CAAa,aAAa,CAAC,CAAC;IACtE,MAAM,cAAc,GAAG,mBAAmB,CAAC,WAAW,CAAC,CAAC;IAExD,MAAM,OAAO,GAAuB,EAAE,SAAS,EAAE,WAAW,EAAE,cAAc,EAAE,CAAC;IAE/E,qCAAqC;IACrC,MAAM,IAAI,GAAG,WAAW,CAAC,WAAW,CAAC,CAAC;IACtC,MAAM,SAAS,GAAG,eAAe,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IACpD,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IAEnC,UAAU;IACV,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,SAAS,CAAC,CAAC;IAE9D,MAAM,QAAQ,GAAwB;QACpC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,OAAO;QAChB,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACpC,cAAc,EAAE,eAAe,EAAE;QACjC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAC1B,UAAU,EAAE,UAAU;QACtB,OAAO;QACP,OAAO,EAAE,SAAS;KACnB,CAAC;IAEF,aAAa;IACb,MAAM,GAAG,GAAG,SAAS,IAAI,SAAS,CAAC;IACnC,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtC,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IACjE,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,UAAU,SAAS,QAAQ,CAAC,CAAC;IACxD,MAAM,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IAEtE,OAAO;QACL,QAAQ;QACR,KAAK,EAAE;YACL,SAAS,EAAE,SAAS,CAAC,MAAM;YAC3B,WAAW,EAAE,WAAW,CAAC,MAAM;YAC/B,cAAc,EAAE,cAAc,CAAC,MAAM;SACtC;KACF,CAAC;AACJ,CAAC;AAED,gFAAgF;AAEhF,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,QAAgB,EAChB,UAAkB;IAElB,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAC5D,OAAO;QACL,OAAO,EAAE,8BAA8B;QACvC,KAAK,EAAE;YACL,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,MAAM;YACnC,WAAW,EAAE,OAAO,CAAC,WAAW,CAAC,MAAM;YACvC,cAAc,EAAE,OAAO,CAAC,cAAc,CAAC,MAAM;SAC9C;KACF,CAAC;AACJ,CAAC;AAED,gFAAgF;AAEhF,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,QAAgB,EAChB,UAAkB,EAClB,WAA6B,MAAM,EACnC,UAAkB;IAElB,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAC5D,IAAI,OAAO,GAAG,CAAC,CAAC;IAEhB,oBAAoB;IACpB,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,eAAe,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACnE,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;QACtC,IAAI,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACjC,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;gBAAC,OAAO,EAAE,CAAC;gBAAC,SAAS;YAAC,CAAC;YACjD,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBAC1B,MAAM,OAAO,GAAG,GAAG,KAAK,CAAC,IAAI,WAAW,CAAC;gBACzC,MAAM,WAAW,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,EAAE,UAAU,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;gBACjE,SAAS;YACX,CAAC;YACD,2BAA2B;QAC7B,CAAC;QACD,MAAM,WAAW,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,EAAE,UAAU,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IACtE,CAAC;IAED,yCAAyC;IACzC,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;QACvC,MAAM,eAAe,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;IACzD,CAAC;IAED,6CAA6C;IAC7C,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;QAC3C,MAAM,eAAe,CAAC,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;IAC9D,CAAC;IAED,OAAO;QACL,KAAK,EAAE;YACL,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,MAAM;YACnC,WAAW,EAAE,OAAO,CAAC,WAAW,CAAC,MAAM;YACvC,cAAc,EAAE,OAAO,CAAC,cAAc,CAAC,MAAM;YAC7C,OAAO;SACR;KACF,CAAC;AACJ,CAAC;AAED,gFAAgF;AAEhF,KAAK,UAAU,eAAe,CAC5B,QAAgB,EAChB,UAAkB;IAElB,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC9C,MAAM,QAAQ,GAAwB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAEtD,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,0BAA0B,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,QAAQ,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,+BAA+B,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IACrE,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC/C,MAAM,SAAS,GAAG,eAAe,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IAEpD,kCAAkC;IAClC,IAAI,OAAO,CAAC,SAAS,CAAC,KAAK,QAAQ,CAAC,OAAO,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;IACtC,CAAC;IAED,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IACvD,OAAO,IAAI,CAAC,KAAK,CAAC,SAAS,CAAuB,CAAC;AACrD,CAAC"}

package/dist/volumes/index.js

@@ -1,2 +0,0 @@
-export { VolumeManager } from "./manager.js";
-//# sourceMappingURL=index.js.map

package/dist/volumes/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/volumes/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC"}