@su-record/vibe 2.7.9 → 2.7.11

package/dist/infra/lib/sync/oauth.js

@@ -0,0 +1,157 @@
+/**
+ * vibe sync — Google OAuth (drive.appdata) 플로우
+ */
+import http from 'http';
+import crypto from 'crypto';
+import { exec } from 'child_process';
+import { getSyncClientId, getSyncClientSecret, SYNC_REDIRECT_URI, SYNC_REDIRECT_PATH, SYNC_SCOPES, SYNC_OAUTH_AUTH_URL, SYNC_OAUTH_TOKEN_URL, SYNC_OAUTH_USERINFO_URL, SYNC_OAUTH_TIMEOUT_MS, } from './constants.js';
+import { loadSyncAuth, saveSyncAuth } from './storage.js';
+function generatePKCE() {
+    const verifier = crypto.randomBytes(32).toString('base64url');
+    const challenge = crypto.createHash('sha256').update(verifier).digest('base64url');
+    return { verifier, challenge };
+}
+function encodeState(payload) {
+    return Buffer.from(JSON.stringify(payload), 'utf8').toString('base64url');
+}
+function decodeState(state) {
+    const normalized = state.replace(/-/g, '+').replace(/_/g, '/');
+    const padded = normalized.padEnd(normalized.length + ((4 - (normalized.length % 4)) % 4), '=');
+    return JSON.parse(Buffer.from(padded, 'base64').toString('utf8'));
+}
+function openBrowser(url) {
+    const platform = process.platform;
+    const cmd = platform === 'darwin' ? 'open' : platform === 'win32' ? 'start' : 'xdg-open';
+    exec(`${cmd} "${url}"`, (err) => {
+        if (err) {
+            console.warn('Could not open browser:', err.message);
+            console.log('Open this URL manually:', url);
+        }
+    });
+}
+/**
+ * 로그인 플로우: 브라우저 오픈 → 콜백에서 code 수신 → 토큰 교환 → 저장
+ */
+export async function runSyncLogin() {
+    const clientId = getSyncClientId();
+    const clientSecret = getSyncClientSecret();
+    const pkce = generatePKCE();
+    const authUrl = new URL(SYNC_OAUTH_AUTH_URL);
+    authUrl.searchParams.set('client_id', clientId);
+    authUrl.searchParams.set('response_type', 'code');
+    authUrl.searchParams.set('redirect_uri', SYNC_REDIRECT_URI);
+    authUrl.searchParams.set('scope', SYNC_SCOPES.join(' '));
+    authUrl.searchParams.set('code_challenge', pkce.challenge);
+    authUrl.searchParams.set('code_challenge_method', 'S256');
+    authUrl.searchParams.set('state', encodeState({ verifier: pkce.verifier }));
+    authUrl.searchParams.set('access_type', 'offline');
+    authUrl.searchParams.set('prompt', 'consent');
+    const [code, stateParam] = await new Promise((resolve, reject) => {
+        const port = new URL(SYNC_REDIRECT_URI).port;
+        const server = http.createServer((req, res) => {
+            const url = new URL(req.url ?? '/', `http://localhost`);
+            if (url.pathname !== SYNC_REDIRECT_PATH) {
+                res.writeHead(404).end();
+                return;
+            }
+            const codeParam = url.searchParams.get('code');
+            const stateParam = url.searchParams.get('state');
+            const errorParam = url.searchParams.get('error');
+            res.writeHead(200, { 'Content-Type': 'text/html; charset=utf-8' });
+            res.end('<script>window.close()</script><p>로그인 완료. 이 창을 닫아도 됩니다.</p>');
+            server.close();
+            if (errorParam) {
+                reject(new Error(`OAuth error: ${errorParam}`));
+                return;
+            }
+            if (!codeParam || !stateParam) {
+                reject(new Error('Missing code or state'));
+                return;
+            }
+            resolve([codeParam, stateParam]);
+        });
+        server.listen(port, () => {
+            openBrowser(authUrl.toString());
+        });
+        setTimeout(() => {
+            server.close();
+            reject(new Error('OAuth timeout (5 min)'));
+        }, SYNC_OAUTH_TIMEOUT_MS);
+    });
+    const { verifier } = decodeState(stateParam);
+    const tokens = await exchangeCodeForTokens(code, verifier, clientId, clientSecret);
+    const existing = loadSyncAuth();
+    const encryptionKey = existing?.encryptionKey ?? crypto.randomBytes(32).toString('base64');
+    const storage = {
+        version: 1,
+        accessToken: tokens.access_token,
+        refreshToken: tokens.refresh_token ?? existing?.refreshToken ?? '',
+        expires: Date.now() + tokens.expires_in * 1000 - 60000,
+        email: tokens.email,
+        encryptionKey,
+    };
+    saveSyncAuth(storage);
+    return { email: tokens.email };
+}
+async function exchangeCodeForTokens(code, verifier, clientId, clientSecret) {
+    const body = new URLSearchParams({
+        client_id: clientId,
+        code,
+        grant_type: 'authorization_code',
+        redirect_uri: SYNC_REDIRECT_URI,
+        code_verifier: verifier,
+    });
+    if (clientSecret)
+        body.set('client_secret', clientSecret);
+    const res = await fetch(SYNC_OAUTH_TOKEN_URL, {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
+        body: body.toString(),
+    });
+    if (!res.ok)
+        throw new Error(`Token exchange failed: ${await res.text()}`);
+    const tokenPayload = (await res.json());
+    let email;
+    const userRes = await fetch(SYNC_OAUTH_USERINFO_URL, {
+        headers: { Authorization: `Bearer ${tokenPayload.access_token}` },
+    });
+    if (userRes.ok) {
+        const user = (await userRes.json());
+        email = user.email;
+    }
+    return { ...tokenPayload, email };
+}
+export async function refreshSyncAccessToken() {
+    const auth = loadSyncAuth();
+    if (!auth?.refreshToken)
+        throw new Error('Not logged in. Run: vibe sync login');
+    const clientId = getSyncClientId();
+    const clientSecret = getSyncClientSecret();
+    const body = new URLSearchParams({
+        grant_type: 'refresh_token',
+        refresh_token: auth.refreshToken,
+        client_id: clientId,
+    });
+    if (clientSecret)
+        body.set('client_secret', clientSecret);
+    const res = await fetch(SYNC_OAUTH_TOKEN_URL, {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
+        body: body.toString(),
+    });
+    if (!res.ok)
+        throw new Error(`Token refresh failed: ${await res.text()}`);
+    const data = (await res.json());
+    const expires = Date.now() + data.expires_in * 1000 - 60000;
+    saveSyncAuth({ ...auth, accessToken: data.access_token, expires });
+    return data.access_token;
+}
+export async function getSyncAccessToken() {
+    const auth = loadSyncAuth();
+    if (!auth)
+        throw new Error('Not logged in. Run: vibe sync login');
+    if (auth.expires > Date.now() + 60000)
+        return auth.accessToken;
+    return refreshSyncAccessToken();
+}
+//# sourceMappingURL=oauth.js.map

package/dist/infra/lib/sync/oauth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.js","sourceRoot":"","sources":["../../../../src/infra/lib/sync/oauth.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,MAAM,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AACrC,OAAO,EACL,eAAe,EACf,mBAAmB,EACnB,iBAAiB,EACjB,kBAAkB,EAClB,WAAW,EACX,mBAAmB,EACnB,oBAAoB,EACpB,uBAAuB,EACvB,qBAAqB,GACtB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,YAAY,EAAE,YAAY,EAAwB,MAAM,cAAc,CAAC;AAiBhF,SAAS,YAAY;IACnB,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC9D,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACnF,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;AACjC,CAAC;AAED,SAAS,WAAW,CAAC,OAAqB;IACxC,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAC5E,CAAC;AAED,SAAS,WAAW,CAAC,KAAa;IAChC,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC/D,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC/F,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAiB,CAAC;AACpF,CAAC;AAED,SAAS,WAAW,CAAC,GAAW;IAC9B,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;IAClC,MAAM,GAAG,GAAG,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC;IACzF,IAAI,CAAC,GAAG,GAAG,KAAK,GAAG,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE;QAC9B,IAAI,GAAG,EAAE,CAAC;YACR,OAAO,CAAC,IAAI,CAAC,yBAAyB,EAAG,GAAa,CAAC,OAAO,CAAC,CAAC;YAChE,OAAO,CAAC,GAAG,CAAC,yBAAyB,EAAE,GAAG,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY;IAChC,MAAM,QAAQ,GAAG,eAAe,EAAE,CAAC;IACnC,MAAM,YAAY,GAAG,mBAAmB,EAAE,CAAC;IAC3C,MAAM,IAAI,GAAG,YAAY,EAAE,CAAC;IAE5B,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,mBAAmB,CAAC,CAAC;IAC7C,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IAChD,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;IAClD,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,iBAAiB,CAAC,CAAC;IAC5D,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACzD,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,gBAAgB,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IAC3D,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,uBAAuB,EAAE,MAAM,CAAC,CAAC;IAC1D,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,WAAW,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;IAC5E,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;IACnD,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IAE9C,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,GAAG,MAAM,IAAI,OAAO,CAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACjF,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC;QAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YAC5C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAC;YACxD,IAAI,GAAG,CAAC,QAAQ,KAAK,kBAAkB,EAAE,CAAC;gBACxC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;gBACzB,OAAO;YACT,CAAC;YACD,MAAM,SAAS,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAC/C,MAAM,UAAU,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACjD,MAAM,UAAU,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACjD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE,CAAC,CAAC;YACnE,GAAG,CAAC,GAAG,CACL,6DAA6D,CAC9D,CAAC;YACF,MAAM,CAAC,KAAK,EAAE,CAAC;YACf,IAAI,UAAU,EAAE,CAAC;gBACf,MAAM,CAAC,IAAI,KAAK,CAAC,gBAAgB,UAAU,EAAE,CAAC,CAAC,CAAC;gBAChD,OAAO;YACT,CAAC;YACD,IAAI,CAAC,SAAS,IAAI,CAAC,UAAU,EAAE,CAAC;gBAC9B,MAAM,CAAC,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC;gBAC3C,OAAO;YACT,CAAC;YACD,OAAO,CAAC,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC;QACnC,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE;YACvB,WAAW,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;QAClC,CAAC,CAAC,CAAC;QAEH,UAAU,CAAC,GAAG,EAAE;YACd,MAAM,CAAC,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC;QAC7C,CAAC,EAAE,qBAAqB,CAAC,CAAC;IAC5B,CAAC,CAAC,CAAC;IAEH,MAAM,EAAE,QAAQ,EAAE,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;IAC7C,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;IACnF,MAAM,QAAQ,GAAG,YAAY,EAAE,CAAC;IAChC,MAAM,aAAa,GAAG,QAAQ,EAAE,aAAa,IAAI,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAE3F,MAAM,OAAO,GAAoB;QAC/B,OAAO,EAAE,CAAC;QACV,WAAW,EAAE,MAAM,CAAC,YAAY;QAChC,YAAY,EAAE,MAAM,CAAC,aAAa,IAAI,QAAQ,EAAE,YAAY,IAAI,EAAE;QAClE,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,UAAU,GAAG,IAAI,GAAG,KAAK;QACtD,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,aAAa;KACd,CAAC;IACF,YAAY,CAAC,OAAO,CAAC,CAAC;IACtB,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;AACjC,CAAC;AAED,KAAK,UAAU,qBAAqB,CAClC,IAAY,EACZ,QAAgB,EAChB,QAAgB,EAChB,YAAoB;IAEpB,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC;QAC/B,SAAS,EAAE,QAAQ;QACnB,IAAI;QACJ,UAAU,EAAE,oBAAoB;QAChC,YAAY,EAAE,iBAAiB;QAC/B,aAAa,EAAE,QAAQ;KACxB,CAAC,CAAC;IACH,IAAI,YAAY;QAAE,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,YAAY,CAAC,CAAC;IAC1D,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,oBAAoB,EAAE;QAC5C,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;QAChE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE;KACtB,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,MAAM,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAC3E,MAAM,YAAY,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAkB,CAAC;IACzD,IAAI,KAAyB,CAAC;IAC9B,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,uBAAuB,EAAE;QACnD,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,YAAY,CAAC,YAAY,EAAE,EAAE;KAClE,CAAC,CAAC;IACH,IAAI,OAAO,CAAC,EAAE,EAAE,CAAC;QACf,MAAM,IAAI,GAAG,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,CAAuB,CAAC;QAC1D,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;IACrB,CAAC;IACD,OAAO,EAAE,GAAG,YAAY,EAAE,KAAK,EAAE,CAAC;AACpC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB;IAC1C,MAAM,IAAI,GAAG,YAAY,EAAE,CAAC;IAC5B,IAAI,CAAC,IAAI,EAAE,YAAY;QAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IAChF,MAAM,QAAQ,GAAG,eAAe,EAAE,CAAC;IACnC,MAAM,YAAY,GAAG,mBAAmB,EAAE,CAAC;IAC3C,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC;QAC/B,UAAU,EAAE,eAAe;QAC3B,aAAa,EAAE,IAAI,CAAC,YAAY;QAChC,SAAS,EAAE,QAAQ;KACpB,CAAC,CAAC;IACH,IAAI,YAAY;QAAE,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,YAAY,CAAC,CAAC;IAC1D,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,oBAAoB,EAAE;QAC5C,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;QAChE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE;KACtB,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,MAAM,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAC1E,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAkB,CAAC;IACjD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,UAAU,GAAG,IAAI,GAAG,KAAK,CAAC;IAC5D,YAAY,CAAC,EAAE,GAAG,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,YAAY,EAAE,OAAO,EAAE,CAAC,CAAC;IACnE,OAAO,IAAI,CAAC,YAAY,CAAC;AAC3B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB;IACtC,MAAM,IAAI,GAAG,YAAY,EAAE,CAAC;IAC5B,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IAClE,IAAI,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;QAAE,OAAO,IAAI,CAAC,WAAW,CAAC;IAC/D,OAAO,sBAAsB,EAAE,CAAC;AAClC,CAAC"}

package/dist/infra/lib/sync/storage.d.ts

@@ -0,0 +1,21 @@
+/**
+ * vibe sync — sync OAuth 토큰 저장/로드 (sync-auth.json)
+ */
+export interface SyncAuthTokens {
+    accessToken: string;
+    refreshToken: string;
+    expires: number;
+    email?: string;
+}
+export interface SyncAuthStorage {
+    version: number;
+    accessToken: string;
+    refreshToken: string;
+    expires: number;
+    email?: string;
+    encryptionKey?: string;
+}
+export declare function getSyncAuthPath(): string;
+export declare function loadSyncAuth(): SyncAuthStorage | null;
+export declare function saveSyncAuth(data: SyncAuthStorage): void;
+//# sourceMappingURL=storage.d.ts.map

package/dist/infra/lib/sync/storage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.d.ts","sourceRoot":"","sources":["../../../../src/infra/lib/sync/storage.ts"],"names":[],"mappings":"AAAA;;GAEG;AAMH,MAAM,WAAW,cAAc;IAC7B,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,wBAAgB,eAAe,IAAI,MAAM,CAExC;AAQD,wBAAgB,YAAY,IAAI,eAAe,GAAG,IAAI,CASrD;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,eAAe,GAAG,IAAI,CAIxD"}

package/dist/infra/lib/sync/storage.js

@@ -0,0 +1,32 @@
+/**
+ * vibe sync — sync OAuth 토큰 저장/로드 (sync-auth.json)
+ */
+import fs from 'fs';
+import path from 'path';
+import { getGlobalConfigDir } from '../llm/auth/ConfigManager.js';
+export function getSyncAuthPath() {
+    return path.join(getGlobalConfigDir(), 'sync-auth.json');
+}
+function ensureDir(dir) {
+    if (!fs.existsSync(dir)) {
+        fs.mkdirSync(dir, { recursive: true });
+    }
+}
+export function loadSyncAuth() {
+    try {
+        const p = getSyncAuthPath();
+        if (!fs.existsSync(p))
+            return null;
+        const content = fs.readFileSync(p, 'utf-8');
+        return JSON.parse(content);
+    }
+    catch {
+        return null;
+    }
+}
+export function saveSyncAuth(data) {
+    const p = getSyncAuthPath();
+    ensureDir(path.dirname(p));
+    fs.writeFileSync(p, JSON.stringify(data, null, 2), { encoding: 'utf-8', mode: 0o600 });
+}
+//# sourceMappingURL=storage.js.map

package/dist/infra/lib/sync/storage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.js","sourceRoot":"","sources":["../../../../src/infra/lib/sync/storage.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAkBlE,MAAM,UAAU,eAAe;IAC7B,OAAO,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,EAAE,gBAAgB,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,SAAS,CAAC,GAAW;IAC5B,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,YAAY;IAC1B,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,eAAe,EAAE,CAAC;QAC5B,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QACnC,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QAC5C,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAoB,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAqB;IAChD,MAAM,CAAC,GAAG,eAAe,EAAE,CAAC;IAC5B,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3B,EAAE,CAAC,aAAa,CAAC,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AACzF,CAAC"}

package/dist/infra/orchestrator/AgentManager.js

@@ -151,18 +151,18 @@ export class AgentManager {
      * 리뷰 프롬프트 생성
      */
     buildReviewPrompt(agent, filePaths) {
-        return `You are a ${agent.name}. Review the following files for issues in your domain:
-
-Files to review:
-${filePaths.map(f => `- ${f}`).join('\n')}
-
-${agent.content}
-
-Provide findings in this format:
-- Priority: P1 (Critical), P2 (Important), P3 (Nice-to-have)
-- Category: Your specialty area
-- Location: file:line
-- Issue: Description
+        return `You are a ${agent.name}. Review the following files for issues in your domain:
+
+Files to review:
+${filePaths.map(f => `- ${f}`).join('\n')}
+
+${agent.content}
+
+Provide findings in this format:
+- Priority: P1 (Critical), P2 (Important), P3 (Nice-to-have)
+- Category: Your specialty area
+- Location: file:line
+- Issue: Description
 - Fix: Recommendation`;
     }
     /**

package/dist/infra/orchestrator/AgentRegistry.js

@@ -57,36 +57,36 @@ export class AgentRegistry {
         }
         this.initializeSchema();
         // Prepare statements
-        this.insertStmt = this.db.prepare(`
-      INSERT INTO agent_executions (id, task_id, agent_name, prompt, status, model, started_at, session_id, created_at)
-      VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)
+        this.insertStmt = this.db.prepare(`
+      INSERT INTO agent_executions (id, task_id, agent_name, prompt, status, model, started_at, session_id, created_at)
+      VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)
     `);
-        this.updateCompleteStmt = this.db.prepare(`
-      UPDATE agent_executions SET status = 'completed', result = ?, duration = ?, completed_at = ? WHERE id = ?
+        this.updateCompleteStmt = this.db.prepare(`
+      UPDATE agent_executions SET status = 'completed', result = ?, duration = ?, completed_at = ? WHERE id = ?
     `);
-        this.updateFailStmt = this.db.prepare(`
-      UPDATE agent_executions SET status = 'failed', error = ?, duration = ?, completed_at = ? WHERE id = ?
+        this.updateFailStmt = this.db.prepare(`
+      UPDATE agent_executions SET status = 'failed', error = ?, duration = ?, completed_at = ? WHERE id = ?
     `);
     }
     initializeSchema() {
-        this.db.exec(`
-      CREATE TABLE IF NOT EXISTS agent_executions (
-        id TEXT PRIMARY KEY,
-        task_id TEXT NOT NULL,
-        agent_name TEXT NOT NULL,
-        prompt TEXT,
-        result TEXT,
-        status TEXT NOT NULL DEFAULT 'pending',
-        duration INTEGER,
-        model TEXT,
-        started_at INTEGER NOT NULL,
-        completed_at INTEGER,
-        session_id TEXT,
-        error TEXT,
-        created_at INTEGER NOT NULL DEFAULT (strftime('%s','now') * 1000)
-      );
-      CREATE INDEX IF NOT EXISTS idx_status ON agent_executions(status);
-      CREATE INDEX IF NOT EXISTS idx_agent_name ON agent_executions(agent_name);
+        this.db.exec(`
+      CREATE TABLE IF NOT EXISTS agent_executions (
+        id TEXT PRIMARY KEY,
+        task_id TEXT NOT NULL,
+        agent_name TEXT NOT NULL,
+        prompt TEXT,
+        result TEXT,
+        status TEXT NOT NULL DEFAULT 'pending',
+        duration INTEGER,
+        model TEXT,
+        started_at INTEGER NOT NULL,
+        completed_at INTEGER,
+        session_id TEXT,
+        error TEXT,
+        created_at INTEGER NOT NULL DEFAULT (strftime('%s','now') * 1000)
+      );
+      CREATE INDEX IF NOT EXISTS idx_status ON agent_executions(status);
+      CREATE INDEX IF NOT EXISTS idx_agent_name ON agent_executions(agent_name);
     `);
     }
     recordStart(execution) {
@@ -102,45 +102,45 @@ export class AgentRegistry {
         this.updateFailStmt.run(maskedError, duration, Date.now(), id);
     }
     getIncompleteExecutions() {
-        const stmt = this.db.prepare(`
-      SELECT id, task_id as taskId, agent_name as agentName, status, duration, model,
-             started_at as startedAt, completed_at as completedAt, error, created_at as createdAt
-      FROM agent_executions WHERE status = 'running' ORDER BY started_at ASC
+        const stmt = this.db.prepare(`
+      SELECT id, task_id as taskId, agent_name as agentName, status, duration, model,
+             started_at as startedAt, completed_at as completedAt, error, created_at as createdAt
+      FROM agent_executions WHERE status = 'running' ORDER BY started_at ASC
     `);
         return stmt.all();
     }
     markOrphaned(olderThanMs) {
         const cutoff = Date.now() - olderThanMs;
-        const stmt = this.db.prepare(`
-      UPDATE agent_executions SET status = 'failed', error = 'Orphaned (process crash)',
-             completed_at = ? WHERE status = 'running' AND started_at < ?
+        const stmt = this.db.prepare(`
+      UPDATE agent_executions SET status = 'failed', error = 'Orphaned (process crash)',
+             completed_at = ? WHERE status = 'running' AND started_at < ?
     `);
         const result = stmt.run(Date.now(), cutoff);
         return result.changes;
     }
     getHistory(limit = 50, agentName) {
         if (agentName) {
-            const stmt = this.db.prepare(`
-        SELECT id, task_id as taskId, agent_name as agentName, status, duration, model,
-               started_at as startedAt, completed_at as completedAt, error, created_at as createdAt
-        FROM agent_executions WHERE agent_name = ? ORDER BY created_at DESC LIMIT ?
+            const stmt = this.db.prepare(`
+        SELECT id, task_id as taskId, agent_name as agentName, status, duration, model,
+               started_at as startedAt, completed_at as completedAt, error, created_at as createdAt
+        FROM agent_executions WHERE agent_name = ? ORDER BY created_at DESC LIMIT ?
       `);
             return stmt.all(agentName, limit);
         }
-        const stmt = this.db.prepare(`
-      SELECT id, task_id as taskId, agent_name as agentName, status, duration, model,
-             started_at as startedAt, completed_at as completedAt, error, created_at as createdAt
-      FROM agent_executions ORDER BY created_at DESC LIMIT ?
+        const stmt = this.db.prepare(`
+      SELECT id, task_id as taskId, agent_name as agentName, status, duration, model,
+             started_at as startedAt, completed_at as completedAt, error, created_at as createdAt
+      FROM agent_executions ORDER BY created_at DESC LIMIT ?
     `);
         return stmt.all(limit);
     }
     getAgentStats(agentName) {
-        const stmt = this.db.prepare(`
-      SELECT COUNT(*) as total,
-             SUM(CASE WHEN status = 'completed' THEN 1 ELSE 0 END) as completed,
-             SUM(CASE WHEN status = 'failed' THEN 1 ELSE 0 END) as failed,
-             AVG(CASE WHEN duration IS NOT NULL THEN duration END) as avgDuration
-      FROM agent_executions WHERE agent_name = ?
+        const stmt = this.db.prepare(`
+      SELECT COUNT(*) as total,
+             SUM(CASE WHEN status = 'completed' THEN 1 ELSE 0 END) as completed,
+             SUM(CASE WHEN status = 'failed' THEN 1 ELSE 0 END) as failed,
+             AVG(CASE WHEN duration IS NOT NULL THEN duration END) as avgDuration
+      FROM agent_executions WHERE agent_name = ?
     `);
         const row = stmt.get(agentName);
         return {
@@ -153,21 +153,21 @@ export class AgentRegistry {
     }
     getGlobalStats() {
         // Overall stats
-        const overallStmt = this.db.prepare(`
-      SELECT COUNT(*) as total,
-             SUM(CASE WHEN status = 'completed' THEN 1 ELSE 0 END) as completed,
-             SUM(CASE WHEN status = 'failed' THEN 1 ELSE 0 END) as failed,
-             AVG(CASE WHEN duration IS NOT NULL THEN duration END) as avgDuration
-      FROM agent_executions
+        const overallStmt = this.db.prepare(`
+      SELECT COUNT(*) as total,
+             SUM(CASE WHEN status = 'completed' THEN 1 ELSE 0 END) as completed,
+             SUM(CASE WHEN status = 'failed' THEN 1 ELSE 0 END) as failed,
+             AVG(CASE WHEN duration IS NOT NULL THEN duration END) as avgDuration
+      FROM agent_executions
     `);
         const overall = overallStmt.get();
         // By agent
-        const byAgentStmt = this.db.prepare(`
-      SELECT agent_name as agentName, COUNT(*) as total,
-             SUM(CASE WHEN status = 'completed' THEN 1 ELSE 0 END) as completed,
-             SUM(CASE WHEN status = 'failed' THEN 1 ELSE 0 END) as failed,
-             AVG(CASE WHEN duration IS NOT NULL THEN duration END) as avgDuration
-      FROM agent_executions GROUP BY agent_name
+        const byAgentStmt = this.db.prepare(`
+      SELECT agent_name as agentName, COUNT(*) as total,
+             SUM(CASE WHEN status = 'completed' THEN 1 ELSE 0 END) as completed,
+             SUM(CASE WHEN status = 'failed' THEN 1 ELSE 0 END) as failed,
+             AVG(CASE WHEN duration IS NOT NULL THEN duration END) as avgDuration
+      FROM agent_executions GROUP BY agent_name
     `);
         const agentRows = byAgentStmt.all();
         const byAgent = {};
@@ -181,10 +181,10 @@ export class AgentRegistry {
             };
         }
         // By model
-        const byModelStmt = this.db.prepare(`
-      SELECT model, COUNT(*) as count,
-             AVG(CASE WHEN duration IS NOT NULL THEN duration END) as avgDuration
-      FROM agent_executions WHERE model IS NOT NULL GROUP BY model
+        const byModelStmt = this.db.prepare(`
+      SELECT model, COUNT(*) as count,
+             AVG(CASE WHEN duration IS NOT NULL THEN duration END) as avgDuration
+      FROM agent_executions WHERE model IS NOT NULL GROUP BY model
     `);
         const modelRows = byModelStmt.all();
         const byModel = {};
@@ -203,9 +203,9 @@ export class AgentRegistry {
     }
     cleanup(ttlMs = DEFAULT_CLEANUP_TTL_MS) {
         const cutoff = Date.now() - ttlMs;
-        const stmt = this.db.prepare(`
-      DELETE FROM agent_executions
-      WHERE (status = 'completed' OR status = 'failed') AND completed_at < ?
+        const stmt = this.db.prepare(`
+      DELETE FROM agent_executions
+      WHERE (status = 'completed' OR status = 'failed') AND completed_at < ?
     `);
         const result = stmt.run(cutoff);
         return result.changes;

package/dist/infra/orchestrator/MultiLlmResearch.js

@@ -11,19 +11,19 @@ export function createMultiLlmPrompts(feature, techStack) {
     const stackStr = techStack.length > 0 ? techStack.join(', ') : 'the project';
     return {
         bestPractices: {
-            gpt: `Best practices for implementing "${feature}" with ${stackStr}.
-Focus on: architecture patterns, code conventions, design patterns.
+            gpt: `Best practices for implementing "${feature}" with ${stackStr}.
+Focus on: architecture patterns, code conventions, design patterns.
 Return JSON: { patterns: string[], antiPatterns: string[], libraries: string[] }`,
-            gemini: `Best practices for implementing "${feature}" with ${stackStr}.
-Focus on: latest trends, framework updates, modern approaches.
+            gemini: `Best practices for implementing "${feature}" with ${stackStr}.
+Focus on: latest trends, framework updates, modern approaches.
 Return JSON: { patterns: string[], antiPatterns: string[], libraries: string[] }`
         },
         security: {
-            gpt: `Security considerations for "${feature}" with ${stackStr}.
-Focus on: CVE database, known vulnerabilities, exploit patterns.
+            gpt: `Security considerations for "${feature}" with ${stackStr}.
+Focus on: CVE database, known vulnerabilities, exploit patterns.
 Return JSON: { vulnerabilities: string[], mitigations: string[], checklist: string[] }`,
-            gemini: `Security advisories for "${feature}" with ${stackStr}.
-Focus on: latest patches, recent incidents, security best practices.
+            gemini: `Security advisories for "${feature}" with ${stackStr}.
+Focus on: latest patches, recent incidents, security best practices.
 Return JSON: { advisories: string[], patches: string[], incidents: string[] }`
         }
     };

package/dist/infra/orchestrator/SwarmOrchestrator.test.js

@@ -10,14 +10,14 @@ describe('SwarmOrchestrator', () => {
             expect(analysis.score).toBeLessThan(10);
         });
         it('복잡한 프롬프트는 높은 복잡도', async () => {
-            const complexPrompt = `
-        Implement a complete login feature:
-        1. Create the login form UI with React
-        2. Add form validation with Zod
-        3. Implement the API endpoint with authentication
-        4. Add error handling and loading states
-        5. Write unit tests for all components
-        6. Add security measures against CSRF
+            const complexPrompt = `
+        Implement a complete login feature:
+        1. Create the login form UI with React
+        2. Add form validation with Zod
+        3. Implement the API endpoint with authentication
+        4. Add error handling and loading states
+        5. Write unit tests for all components
+        6. Add security measures against CSRF
       `;
             const analysis = await analyzeTaskComplexity(complexPrompt);
             expect(analysis.score).toBeGreaterThan(15);
@@ -29,10 +29,10 @@ describe('SwarmOrchestrator', () => {
             expect(analysis.factors).toContain('5-files');
         });
         it('숫자 목록은 분할 제안 생성', async () => {
-            const prompt = `
-        1. First do this task
-        2. Then do second task
-        3. Finally do third task
+            const prompt = `
+        1. First do this task
+        2. Then do second task
+        3. Finally do third task
       `;
             const analysis = await analyzeTaskComplexity(prompt);
             expect(analysis.suggestedSplits?.length).toBeGreaterThanOrEqual(2);
@@ -65,10 +65,10 @@ describe('SwarmOrchestrator', () => {
         it('maxDepth 도달 시 분할 안함', async () => {
             // maxDepth: 0으로 설정하면 분할하지 않음
             const orchestrator = new SwarmOrchestrator({
-                prompt: `
-          1. Task one
-          2. Task two
-          3. Task three
+                prompt: `
+          1. Task one
+          2. Task two
+          3. Task three
         `,
                 maxDepth: 0
             });

package/dist/infra/orchestrator/parallelResearch.js

@@ -17,45 +17,45 @@ export function createResearchTasks(feature, techStack = []) {
         {
             name: 'best-practices-agent',
             category: 'best-practices',
-            prompt: `Research best practices for implementing "${feature}" with ${stackStr}. Focus on:
-1. Industry-standard patterns
-2. Common pitfalls to avoid
-3. Recommended libraries/tools
-4. Testing strategies
-
+            prompt: `Research best practices for implementing "${feature}" with ${stackStr}. Focus on:
+1. Industry-standard patterns
+2. Common pitfalls to avoid
+3. Recommended libraries/tools
+4. Testing strategies
+
 Provide actionable recommendations.`
         },
         {
             name: 'framework-docs-agent',
             category: 'framework-docs',
-            prompt: `Find the latest documentation for ${stackStr} related to "${feature}". Include:
-1. Official API references
-2. Configuration options
-3. Migration guides if applicable
-4. Code examples from official docs
-
+            prompt: `Find the latest documentation for ${stackStr} related to "${feature}". Include:
+1. Official API references
+2. Configuration options
+3. Migration guides if applicable
+4. Code examples from official docs
+
 Use context7 MCP if available for up-to-date documentation.`
         },
         {
             name: 'codebase-patterns-agent',
             category: 'codebase-patterns',
-            prompt: `Analyze the current codebase for patterns related to "${feature}". Look for:
-1. Similar existing implementations
-2. Established conventions
-3. Reusable utilities
-4. Potential conflicts or dependencies
-
+            prompt: `Analyze the current codebase for patterns related to "${feature}". Look for:
+1. Similar existing implementations
+2. Established conventions
+3. Reusable utilities
+4. Potential conflicts or dependencies
+
 Use Glob and Grep to search the codebase.`
         },
         {
             name: 'security-advisory-agent',
             category: 'security-advisory',
-            prompt: `Review security considerations for "${feature}" with ${stackStr}. Check:
-1. OWASP Top 10 relevance
-2. Authentication/authorization requirements
-3. Data validation needs
-4. Known vulnerabilities in dependencies
-
+            prompt: `Review security considerations for "${feature}" with ${stackStr}. Check:
+1. OWASP Top 10 relevance
+2. Authentication/authorization requirements
+3. Data validation needs
+4. Known vulnerabilities in dependencies
+
 Provide security recommendations.`
         }
     ];

package/dist/infra/policy/Evidence.d.ts

@@ -0,0 +1,30 @@
+/**
+ * EvidenceStore - Record all policy evaluations and decisions
+ * Phase 3: Policy Engine
+ *
+ * SQLite storage with auto-masking of sensitive data
+ */
+import { EvidenceRecord, EvidenceEventType, EvaluationResult } from './types.js';
+import { LogLevel } from '../../daemon/types.js';
+export declare class EvidenceStore {
+    private db;
+    private logger;
+    constructor(logger: (level: LogLevel, message: string, data?: unknown) => void, dbPath?: string);
+    /** Record a generic evidence entry */
+    record(entry: Omit<EvidenceRecord, 'id' | 'createdAt'>): number;
+    /** Record a policy evaluation */
+    recordEvaluation(jobId: string, result: EvaluationResult): number;
+    /** Get evidence for a job */
+    getByJob(jobId: string): EvidenceRecord[];
+    /** Get evidence by event type */
+    getByType(eventType: EvidenceEventType, limit?: number): EvidenceRecord[];
+    /** Get recent evidence */
+    getRecent(limit?: number): EvidenceRecord[];
+    /** Cleanup old evidence */
+    cleanup(maxAgeDays?: number): number;
+    close(): void;
+    private initTables;
+    private maskSensitive;
+    private rowToRecord;
+}
+//# sourceMappingURL=Evidence.d.ts.map

package/dist/infra/policy/Evidence.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Evidence.d.ts","sourceRoot":"","sources":["../../../src/infra/policy/Evidence.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAMH,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AACjF,OAAO,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AAgBjD,qBAAa,aAAa;IACxB,OAAO,CAAC,EAAE,CAAoB;IAC9B,OAAO,CAAC,MAAM,CAA6D;gBAGzE,MAAM,EAAE,CAAC,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,KAAK,IAAI,EAClE,MAAM,CAAC,EAAE,MAAM;IAejB,sCAAsC;IACtC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,cAAc,EAAE,IAAI,GAAG,WAAW,CAAC,GAAG,MAAM;IAkB/D,iCAAiC;IACjC,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,gBAAgB,GAAG,MAAM;IAejE,6BAA6B;IAC7B,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,cAAc,EAAE;IAQzC,iCAAiC;IACjC,SAAS,CAAC,SAAS,EAAE,iBAAiB,EAAE,KAAK,GAAE,MAAW,GAAG,cAAc,EAAE;IAQ7E,0BAA0B;IAC1B,SAAS,CAAC,KAAK,GAAE,MAAW,GAAG,cAAc,EAAE;IAQ/C,2BAA2B;IAC3B,OAAO,CAAC,UAAU,GAAE,MAAW,GAAG,MAAM;IAWxC,KAAK,IAAI,IAAI;IAQb,OAAO,CAAC,UAAU;IAmBlB,OAAO,CAAC,aAAa;IAerB,OAAO,CAAC,WAAW;CAYpB"}