@runeya/runeya 2.0.130 → 2.0.131

package/{chunk-K2KSZRSI.js → chunk-CVVAQTMF.js}

@@ -23,7 +23,7 @@ import {
   serviceStore,
   setProjectServices,
   setProjectVault
-} from "./chunk-J2L6VONF.js";
+} from "./chunk-GAK3Q3J4.js";
 import {
   atomicWriteSecure,
   fingerprintFiles,
@@ -36,7 +36,7 @@ import {
   COMPANION_RELAY_OPEN,
   ProjectSchema,
   extractCompanionRelay
-} from "./chunk-7GBSCYXU.js";
+} from "./chunk-IYPYVSY5.js";
 import {
   allVaultRoots,
   ensureLocalVault,
@@ -2037,7 +2037,7 @@ async function runCompanionForTurn(conversationId) {
   if (!hasNew) {
     return skip(conversationId, "nothingNew", `rien de neuf \xE0 relire (${messageCount} messages)`);
   }
-  const { startCliSession } = await import("./chat-6ETYBINN.js");
+  const { startCliSession } = await import("./chat-VIVAFYYS.js");
   const companionConv = await ensureCompanionConversation(conv);
   const isFirstTurn = (companionConv.messages?.length ?? 0) === 0;
   const exchange = formatExchange(conv.messages, from);
@@ -2152,7 +2152,7 @@ async function deliverToMainConversation(conv, message) {
 async function attemptDelivery(conv, message) {
   if (await writeToLivePty(conv.id, message)) return "pty";
   try {
-    const { startCliSession } = await import("./chat-6ETYBINN.js");
+    const { startCliSession } = await import("./chat-VIVAFYYS.js");
     await startCliSession(conv.runner, conv.id, message, { jwt: await signJwt() });
     return "headless";
   } catch (err) {
@@ -2175,7 +2175,7 @@ async function writeToLivePty(conversationId, message) {
 }
 async function companionSettings() {
   try {
-    const { settingsManager } = await import("./settings-manager-XD6U4QN3.js");
+    const { settingsManager } = await import("./settings-manager-3LMN34IT.js");
     const settings = await settingsManager.getSettings();
     return settings.companion ?? { enabledByDefault: false };
   } catch {
@@ -2317,4 +2317,4 @@ export {
   runCompanionNow,
   initCompanion
 };
-//# sourceMappingURL=chunk-K2KSZRSI.js.map
+//# sourceMappingURL=chunk-CVVAQTMF.js.map

package/{chunk-J2L6VONF.js → chunk-GAK3Q3J4.js}

@@ -16,7 +16,7 @@ import {
   TraefikConfigSchema,
   WS_RECONNECT_MAX,
   WS_RECONNECT_MIN
-} from "./chunk-7GBSCYXU.js";
+} from "./chunk-IYPYVSY5.js";
 import {
   allVaultRoots,
   env,
@@ -30,6 +30,10 @@ import {
   vaultFor,
   vaultIdOfRoot
 } from "./chunk-ZFELQG4B.js";
+import {
+  decryptValueWith,
+  encryptValueWith
+} from "./chunk-4RMM2OUU.js";
 
 // ../server/src/services/agent-manager.ts
 import { EventEmitter as EventEmitter2 } from "events";
@@ -584,60 +588,18 @@ import { readFile as readFile2, rm } from "fs/promises";
 import { join as join2 } from "path";
 
 // ../server/src/services/crypto-helpers.ts
-import { randomBytes as randomBytes2, createCipheriv as createCipheriv2, createDecipheriv as createDecipheriv2 } from "crypto";
-var ALGORITHM2 = "aes-256-gcm";
-function encryptValueWith(key, plaintext) {
-  const iv = randomBytes2(16);
-  const cipher = createCipheriv2(ALGORITHM2, key, iv);
-  let enc = cipher.update(plaintext, "utf-8", "hex");
-  enc += cipher.final("hex");
-  const authTag = cipher.getAuthTag().toString("hex");
-  return `${iv.toString("hex")}:${authTag}:${enc}`;
-}
-function decryptValueWith(key, encrypted) {
-  const parts = encrypted.split(":");
-  if (parts.length !== 3) throw new Error("Invalid encrypted value format \u2014 expected iv:authTag:ciphertext");
-  const [ivHex, authTagHex, ciphertext] = parts;
-  if (!/^[0-9a-f]+$/i.test(ivHex) || !/^[0-9a-f]+$/i.test(authTagHex) || ciphertext !== "" && !/^[0-9a-f]+$/i.test(ciphertext)) {
-    throw new Error("Invalid hex in encrypted value \u2014 possible data corruption");
-  }
-  const decipher = createDecipheriv2(ALGORITHM2, key, Buffer.from(ivHex, "hex"), { authTagLength: 16 });
-  decipher.setAuthTag(Buffer.from(authTagHex, "hex"));
-  let dec = decipher.update(ciphertext, "hex", "utf-8");
-  dec += decipher.final("utf-8");
-  return dec;
-}
 function encryptValue(plaintext, vault) {
-  const maybeKey = getEncryptionKey(vault);
-  if (!maybeKey) {
-    throw new Error("Encryption key not loaded \u2014 please provide the key via setup UI");
-  }
-  const key = maybeKey;
-  const iv = randomBytes2(16);
-  const cipher = createCipheriv2(ALGORITHM2, key, iv);
-  let enc = cipher.update(plaintext, "utf-8", "hex");
-  enc += cipher.final("hex");
-  const authTag = cipher.getAuthTag().toString("hex");
-  return `${iv.toString("hex")}:${authTag}:${enc}`;
+  return encryptValueWith(requireKey(vault), plaintext);
 }
 function decryptValue(encrypted, vault) {
-  const parts = encrypted.split(":");
-  if (parts.length !== 3) throw new Error("Invalid encrypted value format \u2014 expected iv:authTag:ciphertext");
-  const [ivHex, authTagHex, ciphertext] = parts;
-  if (!/^[0-9a-f]+$/i.test(ivHex) || !/^[0-9a-f]+$/i.test(authTagHex) || ciphertext !== "" && !/^[0-9a-f]+$/i.test(ciphertext)) {
-    throw new Error("Invalid hex in encrypted value \u2014 possible data corruption");
-  }
-  const maybeKey = getEncryptionKey(vault);
-  if (!maybeKey) {
+  return decryptValueWith(requireKey(vault), encrypted);
+}
+function requireKey(vault) {
+  const key = getEncryptionKey(vault);
+  if (!key) {
     throw new Error("Encryption key not loaded \u2014 please provide the key via setup UI");
   }
-  const key = maybeKey;
-  const iv = Buffer.from(ivHex, "hex");
-  const decipher = createDecipheriv2(ALGORITHM2, key, iv, { authTagLength: 16 });
-  decipher.setAuthTag(Buffer.from(authTagHex, "hex"));
-  let dec = decipher.update(ciphertext, "hex", "utf-8");
-  dec += decipher.final("utf-8");
-  return dec;
+  return key;
 }
 function stableEncryptValue(plaintext, existingEncrypted, vault) {
   if (existingEncrypted) {
@@ -3112,8 +3074,6 @@ export {
   clearVaultLock,
   ensureEncryptionKey,
   setEncryptionKey,
-  encryptValueWith,
-  decryptValueWith,
   encryptValue,
   decryptValue,
   stableEncryptValue,
@@ -3152,4 +3112,4 @@ export {
   traefikManager,
   agentManager
 };
-//# sourceMappingURL=chunk-J2L6VONF.js.map
+//# sourceMappingURL=chunk-GAK3Q3J4.js.map