@trenchwork/erosolar 1.1.29 → 1.1.30

package/dist/core/secretStore.js

@@ -1,259 +0,0 @@
-import { existsSync, mkdirSync, readFileSync, renameSync, writeFileSync } from 'node:fs';
-import { homedir } from 'node:os';
-import { dirname, join, resolve } from 'node:path';
-const SECRET_DEFINITIONS = [
-    {
-        id: 'DEEPSEEK_API_KEY',
-        label: 'DeepSeek API Key',
-        description: 'Required to run DeepSeek Reasoner or Chat models.',
-        envVar: 'DEEPSEEK_API_KEY',
-        providers: ['deepseek'],
-    },
-    {
-        id: 'TAVILY_API_KEY',
-        label: 'Tavily API Key',
-        description: 'Required: WebSearch and WebExtract provider. Get yours at https://tavily.com',
-        envVar: 'TAVILY_API_KEY',
-        providers: [],
-    },
-];
-const envAgiHome = process.env['EROSOLAR_HOME'];
-const SECRET_DIR = envAgiHome ? resolve(envAgiHome) : join(homedir(), '.erosolar');
-const SECRET_FILE = join(SECRET_DIR, 'secrets.json');
-export class MissingSecretError extends Error {
-    secret;
-    constructor(secret) {
-        super(`${secret.label} is not configured.`);
-        this.secret = secret;
-        this.name = 'MissingSecretError';
-    }
-}
-export function listSecretDefinitions() {
-    return [...SECRET_DEFINITIONS];
-}
-export function getSecretDefinition(id) {
-    return SECRET_DEFINITIONS.find((entry) => entry.id === id) ?? null;
-}
-export function getSecretValue(id) {
-    const envValue = sanitize(process.env[id]);
-    if (envValue) {
-        return envValue;
-    }
-    const store = readSecretStore();
-    const storedValue = sanitize(store[id]);
-    if (!storedValue) {
-        return null;
-    }
-    process.env[id] = storedValue;
-    return storedValue;
-}
-/**
- * Load all stored secrets into process.env at startup.
- * This ensures secrets are available before any provider checks.
- *
- * IMPORTANT: Stored secrets always take precedence over environment variables
- * for provider API keys. This ensures keys set via /secrets are used even if
- * the user has old/stale keys exported in their shell environment.
- */
-export function loadAllSecrets() {
-    const store = readSecretStore();
-    for (const definition of SECRET_DEFINITIONS) {
-        const storedValue = sanitize(store[definition.id]);
-        if (storedValue) {
-            // Stored value (set via /secrets) wins over a stale env export.
-            process.env[definition.id] = storedValue;
-        }
-    }
-}
-export function setSecretValue(id, rawValue) {
-    const value = sanitize(rawValue);
-    if (!value) {
-        throw new Error('Secret value cannot be blank.');
-    }
-    const store = readSecretStore();
-    store[id] = value;
-    writeSecretStore(store);
-    process.env[id] = value;
-}
-export function maskSecret(value) {
-    if (!value) {
-        return '';
-    }
-    if (value.length <= 4) {
-        return '*'.repeat(value.length);
-    }
-    const suffix = value.slice(-4);
-    const prefix = '*'.repeat(Math.max(0, value.length - 4));
-    return `${prefix}${suffix}`;
-}
-export function ensureSecretForProvider(provider) {
-    const definition = findDefinitionForProvider(provider);
-    const value = getSecretValue(definition.id);
-    if (!value) {
-        throw new MissingSecretError(definition);
-    }
-    process.env[definition.envVar] = value;
-    return value;
-}
-export function getSecretDefinitionForProvider(provider) {
-    return SECRET_DEFINITIONS.find((entry) => entry.providers.includes(provider)) ?? null;
-}
-function readSecretStore() {
-    if (!existsSync(SECRET_FILE)) {
-        return {};
-    }
-    try {
-        const content = readFileSync(SECRET_FILE, 'utf8');
-        const parsed = JSON.parse(content);
-        if (parsed && typeof parsed === 'object') {
-            return parsed;
-        }
-    }
-    catch {
-        return {};
-    }
-    return {};
-}
-function writeSecretStore(store) {
-    const directory = dirname(SECRET_FILE);
-    // Same posture as auth.ts: 0o700 on the dir, 0o600 on the file. The
-    // payload contains DeepSeek / Tavily / etc. API keys; on shared boxes
-    // anything looser leaves them readable to other local users.
-    mkdirSync(directory, { recursive: true, mode: 0o700 });
-    const payload = JSON.stringify(store, null, 2);
-    // Atomic write: stage to a tmp file then rename. Without this, two
-    // concurrent CLIs writing the secret store at the same moment can
-    // produce a half-written file that subsequent reads parse as `{}`.
-    const tmp = `${SECRET_FILE}.${process.pid}.${Date.now()}.tmp`;
-    writeFileSync(tmp, `${payload}
-`, { mode: 0o600 });
-    renameSync(tmp, SECRET_FILE);
-}
-function findDefinitionForProvider(provider) {
-    const definition = getSecretDefinitionForProvider(provider);
-    if (!definition) {
-        throw new Error(`No secret configuration for provider "${provider}".`);
-    }
-    return definition;
-}
-function sanitize(value) {
-    if (typeof value !== 'string') {
-        return null;
-    }
-    const trimmed = value.trim();
-    return trimmed.length ? trimmed : null;
-}
-// ============================================================================
-// Secret Sanitization for Error Messages
-// ============================================================================
-/**
- * Known API key patterns to detect and sanitize in error messages.
- * These patterns match common API key formats from various providers.
- */
-const API_KEY_PATTERNS = [
-    // Anthropic API keys: sk-ant-api03-...
-    /sk-ant-api\d{2}-[A-Za-z0-9_-]{20,}/g,
-    // OpenAI API keys: sk-proj-... or sk-...
-    /sk-(?:proj-)?[A-Za-z0-9_-]{20,}/g,
-    // Generic Bearer tokens in headers
-    /Bearer\s+[A-Za-z0-9_.-]{20,}/gi,
-    // x-api-key header values
-    /x-api-key['":\s]+[A-Za-z0-9_.-]{20,}/gi,
-    // API keys in URLs (key=value pattern)
-    /[?&](?:key|api_key|apiKey|api-key|token|access_token)=([A-Za-z0-9_.-]{16,})/gi,
-    // DeepSeek keys
-    /sk-[a-f0-9]{32,}/gi,
-    // xAI/Grok keys
-    /xai-[A-Za-z0-9_-]{20,}/gi,
-    // Google/Gemini API keys (AIza...)
-    /AIza[A-Za-z0-9_-]{30,}/g,
-    // Generic long alphanumeric tokens that look like API keys
-    /(?:api[_-]?key|token|secret|password|credential)['"]?\s*[:=]\s*['"]?([A-Za-z0-9_.-]{20,})['"]?/gi,
-];
-/**
- * Sanitize error messages to remove potential API keys and secrets.
- * This prevents accidental token leakage in logs, error reports, and console output.
- *
- * @param message - The error message or string to sanitize
- * @returns The sanitized string with secrets replaced by [REDACTED]
- */
-export function sanitizeErrorMessage(message) {
-    if (!message || typeof message !== 'string') {
-        return message;
-    }
-    let sanitized = message;
-    // Apply all API key patterns
-    for (const pattern of API_KEY_PATTERNS) {
-        // Reset lastIndex for global patterns
-        pattern.lastIndex = 0;
-        sanitized = sanitized.replace(pattern, (match) => {
-            // For patterns with capture groups, try to preserve context
-            if (match.includes('=') || match.includes(':')) {
-                const separator = match.includes('=') ? '=' : ':';
-                const parts = match.split(separator);
-                if (parts.length === 2) {
-                    return `${parts[0]}${separator}[REDACTED]`;
-                }
-            }
-            return '[REDACTED]';
-        });
-    }
-    // Additionally sanitize any env var values that are currently loaded
-    sanitized = sanitizeAgainstLoadedSecrets(sanitized);
-    return sanitized;
-}
-/**
- * Sanitize a string against currently loaded secret values.
- * This catches any secrets that might not match the pattern-based detection.
- */
-function sanitizeAgainstLoadedSecrets(message) {
-    const secretNames = [
-        'DEEPSEEK_API_KEY',
-        'TAVILY_API_KEY',
-    ];
-    let sanitized = message;
-    for (const name of secretNames) {
-        const value = process.env[name];
-        if (value && value.length >= 4) {
-            // Only sanitize if the value appears in the message
-            // Use a case-sensitive exact match to avoid false positives
-            if (sanitized.includes(value)) {
-                sanitized = sanitized.split(value).join('[REDACTED]');
-            }
-            // Also sanitize partial matches (first 8 chars + last 4 chars pattern)
-            if (value.length >= 12) {
-                const partialPattern = `${value.substring(0, 8)}...${value.substring(value.length - 4)}`;
-                if (sanitized.includes(partialPattern)) {
-                    sanitized = sanitized.split(partialPattern).join('[REDACTED_PARTIAL]');
-                }
-            }
-        }
-    }
-    return sanitized;
-}
-/**
- * Sanitize an Error object's message and stack trace.
- * Returns a new error message string with secrets removed.
- */
-export function sanitizeError(error) {
-    const message = sanitizeErrorMessage(error.message);
-    const stack = error.stack ? sanitizeErrorMessage(error.stack) : '';
-    if (stack && stack !== message) {
-        return `${message}\n${stack}`;
-    }
-    return message;
-}
-/**
- * Create a safe error message from an unknown error value.
- * Ensures no secrets are leaked regardless of error type.
- */
-export function safeErrorMessage(error) {
-    if (error instanceof Error) {
-        return sanitizeErrorMessage(error.message);
-    }
-    if (typeof error === 'string') {
-        return sanitizeErrorMessage(error);
-    }
-    return 'Unknown error occurred';
-}
-//# sourceMappingURL=secretStore.js.map

package/dist/core/secretStore.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"secretStore.js","sourceRoot":"","sources":["../../src/core/secretStore.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACzF,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAmBnD,MAAM,kBAAkB,GAAuB;IAC7C;QACE,EAAE,EAAE,kBAAkB;QACtB,KAAK,EAAE,kBAAkB;QACzB,WAAW,EAAE,mDAAmD;QAChE,MAAM,EAAE,kBAAkB;QAC1B,SAAS,EAAE,CAAC,UAAU,CAAC;KACxB;IACD;QACE,EAAE,EAAE,gBAAgB;QACpB,KAAK,EAAE,gBAAgB;QACvB,WAAW,EAAE,8EAA8E;QAC3F,MAAM,EAAE,gBAAgB;QACxB,SAAS,EAAE,EAAE;KACd;CACF,CAAC;AAEF,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;AAChD,MAAM,UAAU,GAAG,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,CAAC,CAAC;AACnF,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;AAErD,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IACf;IAA5B,YAA4B,MAAwB;QAClD,KAAK,CAAC,GAAG,MAAM,CAAC,KAAK,qBAAqB,CAAC,CAAC;QADlB,WAAM,GAAN,MAAM,CAAkB;QAElD,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF;AAED,MAAM,UAAU,qBAAqB;IACnC,OAAO,CAAC,GAAG,kBAAkB,CAAC,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,EAAc;IAChD,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,CAAC,IAAI,IAAI,CAAC;AACrE,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,EAAc;IAC3C,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAC3C,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,MAAM,KAAK,GAAG,eAAe,EAAE,CAAC;IAChC,MAAM,WAAW,GAAG,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;IACxC,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,CAAC;IAC9B,OAAO,WAAW,CAAC;AACrB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc;IAC5B,MAAM,KAAK,GAAG,eAAe,EAAE,CAAC;IAChC,KAAK,MAAM,UAAU,IAAI,kBAAkB,EAAE,CAAC;QAC5C,MAAM,WAAW,GAAG,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;QACnD,IAAI,WAAW,EAAE,CAAC;YAChB,gEAAgE;YAChE,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,GAAG,WAAW,CAAC;QAC3C,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,EAAc,EAAE,QAAgB;IAC7D,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACjC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACnD,CAAC;IAED,MAAM,KAAK,GAAG,eAAe,EAAE,CAAC;IAChC,KAAK,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC;IAClB,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACxB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAAa;IACtC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;QACtB,OAAO,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAClC,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/B,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;IACzD,OAAO,GAAG,MAAM,GAAG,MAAM,EAAE,CAAC;AAC9B,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,QAAoB;IAC1D,MAAM,UAAU,GAAG,yBAAyB,CAAC,QAAQ,CAAC,CAAC;IACvD,MAAM,KAAK,GAAG,cAAc,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IAC5C,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,kBAAkB,CAAC,UAAU,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC;IACvC,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,QAAoB;IACjE,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,IAAI,IAAI,CAAC;AACxF,CAAC;AAED,SAAS,eAAe;IACtB,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAC7B,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QAClD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACnC,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YACzC,OAAO,MAAyB,CAAC;QACnC,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAsB;IAC9C,MAAM,SAAS,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACvC,oEAAoE;IACpE,sEAAsE;IACtE,6DAA6D;IAC7D,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACvD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAC/C,mEAAmE;IACnE,kEAAkE;IAClE,mEAAmE;IACnE,MAAM,GAAG,GAAG,GAAG,WAAW,IAAI,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC;IAC9D,aAAa,CAAC,GAAG,EAAE,GAAG,OAAO;CAC9B,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAClB,UAAU,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,yBAAyB,CAAC,QAAoB;IACrD,MAAM,UAAU,GAAG,8BAA8B,CAAC,QAAQ,CAAC,CAAC;IAC5D,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CAAC,yCAAyC,QAAQ,IAAI,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;AACzC,CAAC;AAED,+EAA+E;AAC/E,yCAAyC;AACzC,+EAA+E;AAE/E;;;GAGG;AACH,MAAM,gBAAgB,GAAa;IACjC,uCAAuC;IACvC,qCAAqC;IACrC,yCAAyC;IACzC,kCAAkC;IAClC,mCAAmC;IACnC,gCAAgC;IAChC,0BAA0B;IAC1B,wCAAwC;IACxC,uCAAuC;IACvC,+EAA+E;IAC/E,gBAAgB;IAChB,oBAAoB;IACpB,gBAAgB;IAChB,0BAA0B;IAC1B,mCAAmC;IACnC,yBAAyB;IACzB,2DAA2D;IAC3D,kGAAkG;CACnG,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAAe;IAClD,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC5C,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,IAAI,SAAS,GAAG,OAAO,CAAC;IAExB,6BAA6B;IAC7B,KAAK,MAAM,OAAO,IAAI,gBAAgB,EAAE,CAAC;QACvC,sCAAsC;QACtC,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;QACtB,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YAC/C,4DAA4D;YAC5D,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC/C,MAAM,SAAS,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;gBAClD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;gBACrC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACvB,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,SAAS,YAAY,CAAC;gBAC7C,CAAC;YACH,CAAC;YACD,OAAO,YAAY,CAAC;QACtB,CAAC,CAAC,CAAC;IACL,CAAC;IAED,qEAAqE;IACrE,SAAS,GAAG,4BAA4B,CAAC,SAAS,CAAC,CAAC;IAEpD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,SAAS,4BAA4B,CAAC,OAAe;IACnD,MAAM,WAAW,GAAiB;QAChC,kBAAkB;QAClB,gBAAgB;KACjB,CAAC;IAEF,IAAI,SAAS,GAAG,OAAO,CAAC;IAExB,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,KAAK,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;YAC/B,oDAAoD;YACpD,4DAA4D;YAC5D,IAAI,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC9B,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YACxD,CAAC;YAED,uEAAuE;YACvE,IAAI,KAAK,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;gBACvB,MAAM,cAAc,GAAG,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC;gBACzF,IAAI,SAAS,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;oBACvC,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;gBACzE,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,KAAY;IACxC,MAAM,OAAO,GAAG,oBAAoB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACpD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,oBAAoB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAEnE,IAAI,KAAK,IAAI,KAAK,KAAK,OAAO,EAAE,CAAC;QAC/B,OAAO,GAAG,OAAO,KAAK,KAAK,EAAE,CAAC;IAChC,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;QAC3B,OAAO,oBAAoB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC7C,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,oBAAoB,CAAC,KAAK,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,wBAAwB,CAAC;AAClC,CAAC"}

package/dist/core/sessionStorage.d.ts

@@ -1,10 +0,0 @@
-export interface SessionStorage {
-    ensureDir(path: string): void;
-    writeFile(path: string, content: string): void;
-    readFile(path: string): string;
-    exists(path: string): boolean;
-}
-export declare function setSessionStorage(storage: SessionStorage): void;
-export declare function getSessionStorage(): SessionStorage;
-export declare function createInMemorySessionStorage(): SessionStorage;
-//# sourceMappingURL=sessionStorage.d.ts.map

package/dist/core/sessionStorage.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"sessionStorage.d.ts","sourceRoot":"","sources":["../../src/core/sessionStorage.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,cAAc;IAC7B,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/C,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;IAC/B,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;CAC/B;AAoBD,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,cAAc,GAAG,IAAI,CAE/D;AAED,wBAAgB,iBAAiB,IAAI,cAAc,CAElD;AAED,wBAAgB,4BAA4B,IAAI,cAAc,CAoB7D"}

package/dist/core/sessionStorage.js

@@ -1,46 +0,0 @@
-import { mkdirSync, readFileSync, writeFileSync, existsSync } from 'node:fs';
-import { dirname } from 'node:path';
-const fsStorage = {
-    ensureDir(path) {
-        mkdirSync(path, { recursive: true });
-    },
-    writeFile(path, content) {
-        mkdirSync(dirname(path), { recursive: true });
-        writeFileSync(path, content, 'utf8');
-    },
-    readFile(path) {
-        return readFileSync(path, 'utf8');
-    },
-    exists(path) {
-        return existsSync(path);
-    },
-};
-let activeStorage = fsStorage;
-export function setSessionStorage(storage) {
-    activeStorage = storage;
-}
-export function getSessionStorage() {
-    return activeStorage;
-}
-export function createInMemorySessionStorage() {
-    const files = new Map();
-    return {
-        ensureDir(_path) {
-            // no-op for memory
-        },
-        writeFile(path, content) {
-            files.set(path, content);
-        },
-        readFile(path) {
-            const content = files.get(path);
-            if (content === undefined) {
-                throw new Error(`File not found: ${path}`);
-            }
-            return content;
-        },
-        exists(path) {
-            return files.has(path);
-        },
-    };
-}
-//# sourceMappingURL=sessionStorage.js.map

package/dist/core/sessionStorage.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"sessionStorage.js","sourceRoot":"","sources":["../../src/core/sessionStorage.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AASpC,MAAM,SAAS,GAAmB;IAChC,SAAS,CAAC,IAAY;QACpB,SAAS,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvC,CAAC;IACD,SAAS,CAAC,IAAY,EAAE,OAAe;QACrC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9C,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IACvC,CAAC;IACD,QAAQ,CAAC,IAAY;QACnB,OAAO,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACpC,CAAC;IACD,MAAM,CAAC,IAAY;QACjB,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;CACF,CAAC;AAEF,IAAI,aAAa,GAAmB,SAAS,CAAC;AAE9C,MAAM,UAAU,iBAAiB,CAAC,OAAuB;IACvD,aAAa,GAAG,OAAO,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,iBAAiB;IAC/B,OAAO,aAAa,CAAC;AACvB,CAAC;AAED,MAAM,UAAU,4BAA4B;IAC1C,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;IACxC,OAAO;QACL,SAAS,CAAC,KAAa;YACrB,mBAAmB;QACrB,CAAC;QACD,SAAS,CAAC,IAAY,EAAE,OAAe;YACrC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC3B,CAAC;QACD,QAAQ,CAAC,IAAY;YACnB,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAChC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,MAAM,IAAI,KAAK,CAAC,mBAAmB,IAAI,EAAE,CAAC,CAAC;YAC7C,CAAC;YACD,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,MAAM,CAAC,IAAY;YACjB,OAAO,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACzB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/core/sessionStore.d.ts

@@ -1,35 +0,0 @@
-import type { ConversationMessage, ProviderId } from './types.js';
-import type { ProfileName } from '../config.js';
-export interface SessionSummary {
-    id: string;
-    title: string;
-    profile: ProfileName;
-    provider: ProviderId;
-    model: string;
-    createdAt: string;
-    updatedAt: string;
-    messageCount: number;
-    workspaceRoot?: string;
-}
-export interface StoredSession extends SessionSummary {
-    messages: ConversationMessage[];
-    scrollbackBuffer?: string[];
-}
-export interface SaveSessionOptions {
-    id?: string | null;
-    title?: string | null;
-    profile: ProfileName;
-    provider: ProviderId;
-    model: string;
-    workspaceRoot?: string | null;
-    messages: ConversationMessage[];
-    scrollbackBuffer?: string[];
-}
-export declare function listSessions(profile?: ProfileName): SessionSummary[];
-export declare function saveSessionSnapshot(options: SaveSessionOptions): SessionSummary;
-export declare function loadSessionById(id: string): StoredSession | null;
-export declare function deleteSession(id: string): boolean;
-export declare function saveAutosaveSnapshot(profile: ProfileName, options: Omit<SaveSessionOptions, 'profile'>): void;
-export declare function loadAutosaveSnapshot(profile: ProfileName): StoredSession | null;
-export declare function clearAutosaveSnapshot(profile: ProfileName): void;
-//# sourceMappingURL=sessionStore.d.ts.map

package/dist/core/sessionStore.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"sessionStore.d.ts","sourceRoot":"","sources":["../../src/core/sessionStore.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,mBAAmB,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAClE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAShD,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,WAAW,CAAC;IACrB,QAAQ,EAAE,UAAU,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,aAAc,SAAQ,cAAc;IACnD,QAAQ,EAAE,mBAAmB,EAAE,CAAC;IAChC,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC7B;AAED,MAAM,WAAW,kBAAkB;IACjC,EAAE,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,OAAO,EAAE,WAAW,CAAC;IACrB,QAAQ,EAAE,UAAU,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,QAAQ,EAAE,mBAAmB,EAAE,CAAC;IAChC,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC7B;AAMD,wBAAgB,YAAY,CAAC,OAAO,CAAC,EAAE,WAAW,GAAG,cAAc,EAAE,CASpE;AAED,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,kBAAkB,GAAG,cAAc,CAmC/E;AAED,wBAAgB,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,aAAa,GAAG,IAAI,CAWhE;AAED,wBAAgB,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAgBjD;AAED,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,WAAW,EACpB,OAAO,EAAE,IAAI,CAAC,kBAAkB,EAAE,SAAS,CAAC,GAC3C,IAAI,CAeN;AAED,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,WAAW,GAAG,aAAa,GAAG,IAAI,CAO/E;AAED,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,WAAW,GAAG,IAAI,CAMhE"}

package/dist/core/sessionStore.js

@@ -1,191 +0,0 @@
-import { randomUUID } from 'node:crypto';
-import { mkdirSync, readdirSync, readFileSync, rmSync, statSync, writeFileSync } from 'node:fs';
-import { join } from 'node:path';
-import { homedir } from 'node:os';
-const dataRoot = process.env['EROSOLAR_DATA_DIR']?.trim() ||
-    process.env['EROSOLAR_DATA_DIR']?.trim() ||
-    join(homedir(), '.erosolar');
-const sessionsDir = join(dataRoot, 'sessions');
-const indexPath = join(sessionsDir, 'index.json');
-export function listSessions(profile) {
-    const index = readIndex();
-    const entries = Object.values(index.entries);
-    const filtered = profile ? entries.filter((entry) => entry.profile === profile) : entries;
-    return filtered.sort((a, b) => {
-        const aTime = Date.parse(a.updatedAt ?? '') || 0;
-        const bTime = Date.parse(b.updatedAt ?? '') || 0;
-        return bTime - aTime;
-    });
-}
-export function saveSessionSnapshot(options) {
-    ensureDirectory();
-    if (!Array.isArray(options.messages)) {
-        throw new Error('Session snapshots must include the entire message history array.');
-    }
-    const index = readIndex();
-    const now = new Date().toISOString();
-    const existingId = options.id ?? null;
-    const summaryId = existingId && index.entries[existingId] ? existingId : randomUUID();
-    const previous = index.entries[summaryId];
-    const summary = {
-        id: summaryId,
-        title: sanitizeTitle(options.title) ?? previous?.title ?? buildDefaultTitle(options.messages),
-        profile: options.profile,
-        provider: options.provider,
-        model: options.model,
-        workspaceRoot: options.workspaceRoot ?? previous?.workspaceRoot ?? undefined,
-        createdAt: previous?.createdAt ?? now,
-        updatedAt: now,
-        messageCount: options.messages.length,
-    };
-    const payload = {
-        ...summary,
-        messages: options.messages,
-        ...(options.scrollbackBuffer && { scrollbackBuffer: options.scrollbackBuffer }),
-    };
-    writeFileSync(getSessionPath(summaryId), JSON.stringify(payload, null, 2), 'utf8');
-    index.entries[summaryId] = summary;
-    writeIndex(index);
-    return summary;
-}
-export function loadSessionById(id) {
-    if (!id) {
-        return null;
-    }
-    try {
-        const raw = readFileSync(getSessionPath(id), 'utf8');
-        const parsed = JSON.parse(raw);
-        return parsed;
-    }
-    catch {
-        return null;
-    }
-}
-export function deleteSession(id) {
-    if (!id) {
-        return false;
-    }
-    const index = readIndex();
-    if (!index.entries[id]) {
-        return false;
-    }
-    try {
-        rmSync(getSessionPath(id), { force: true });
-    }
-    catch {
-        // ignore
-    }
-    delete index.entries[id];
-    writeIndex(index);
-    return true;
-}
-export function saveAutosaveSnapshot(profile, options) {
-    ensureDirectory();
-    const payload = {
-        id: `autosave-${profile}`,
-        profile,
-        provider: options.provider,
-        model: options.model,
-        workspaceRoot: options.workspaceRoot ?? undefined,
-        createdAt: new Date().toISOString(),
-        updatedAt: new Date().toISOString(),
-        title: sanitizeTitle(options.title) ?? buildDefaultTitle(options.messages),
-        messageCount: options.messages.length,
-        messages: options.messages,
-    };
-    writeFileSync(getAutosavePath(profile), JSON.stringify(payload, null, 2), 'utf8');
-}
-export function loadAutosaveSnapshot(profile) {
-    try {
-        const raw = readFileSync(getAutosavePath(profile), 'utf8');
-        return JSON.parse(raw);
-    }
-    catch {
-        return null;
-    }
-}
-export function clearAutosaveSnapshot(profile) {
-    try {
-        rmSync(getAutosavePath(profile), { force: true });
-    }
-    catch {
-        // ignore
-    }
-}
-function readIndex() {
-    ensureDirectory();
-    try {
-        const raw = readFileSync(indexPath, 'utf8');
-        const parsed = JSON.parse(raw);
-        if (!parsed || typeof parsed !== 'object' || typeof parsed.entries !== 'object') {
-            return { entries: {} };
-        }
-        return { entries: { ...parsed.entries } };
-    }
-    catch {
-        return { entries: {} };
-    }
-}
-function writeIndex(index) {
-    ensureDirectory();
-    writeFileSync(indexPath, JSON.stringify(index, null, 2), 'utf8');
-}
-function ensureDirectory() {
-    mkdirSync(sessionsDir, { recursive: true });
-}
-function getSessionPath(id) {
-    return join(sessionsDir, `${id}.json`);
-}
-function getAutosavePath(profile) {
-    return join(sessionsDir, `${profile}-autosave.json`);
-}
-function sanitizeTitle(value) {
-    if (typeof value !== 'string') {
-        return null;
-    }
-    const trimmed = value.trim();
-    if (!trimmed) {
-        return null;
-    }
-    return trimmed.slice(0, 160);
-}
-function buildDefaultTitle(messages) {
-    for (const message of messages) {
-        if (message.role !== 'user') {
-            continue;
-        }
-        const condensed = message.content.trim().replace(/\s+/g, ' ');
-        if (condensed) {
-            return condensed.slice(0, 160);
-        }
-    }
-    return `Session ${new Date().toLocaleString()}`;
-}
-function pruneOrphans() {
-    try {
-        ensureDirectory();
-        const index = readIndex();
-        const known = new Set(Object.keys(index.entries));
-        for (const file of readdirSync(sessionsDir)) {
-            if (!file.endsWith('.json')) {
-                continue;
-            }
-            if (file === 'index.json' || file.includes('-autosave')) {
-                continue;
-            }
-            const id = file.slice(0, -5);
-            if (!known.has(id)) {
-                const candidate = join(sessionsDir, file);
-                const stats = statSync(candidate);
-                if (stats.isFile()) {
-                    rmSync(candidate, { force: true });
-                }
-            }
-        }
-    }
-    catch {
-        // best-effort cleanup
-    }
-}
-pruneOrphans();
-//# sourceMappingURL=sessionStore.js.map

package/dist/core/sessionStore.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"sessionStore.js","sourceRoot":"","sources":["../../src/core/sessionStore.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAChG,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAIlC,MAAM,QAAQ,GACZ,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,EAAE,IAAI,EAAE;IACxC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,EAAE,IAAI,EAAE;IACxC,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,CAAC,CAAC;AAC/B,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;AAC/C,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;AAkClD,MAAM,UAAU,YAAY,CAAC,OAAqB;IAChD,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;IAC1B,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IAC1F,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QAC5B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC;QACjD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC;QACjD,OAAO,KAAK,GAAG,KAAK,CAAC;IACvB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,OAA2B;IAC7D,eAAe,EAAE,CAAC;IAClB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;IACtF,CAAC;IAED,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;IAC1B,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,MAAM,UAAU,GAAG,OAAO,CAAC,EAAE,IAAI,IAAI,CAAC;IACtC,MAAM,SAAS,GACb,UAAU,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC;IACtE,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAE1C,MAAM,OAAO,GAAmB;QAC9B,EAAE,EAAE,SAAS;QACb,KAAK,EAAE,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,QAAQ,EAAE,KAAK,IAAI,iBAAiB,CAAC,OAAO,CAAC,QAAQ,CAAC;QAC7F,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,aAAa,EAAE,OAAO,CAAC,aAAa,IAAI,QAAQ,EAAE,aAAa,IAAI,SAAS;QAC5E,SAAS,EAAE,QAAQ,EAAE,SAAS,IAAI,GAAG;QACrC,SAAS,EAAE,GAAG;QACd,YAAY,EAAE,OAAO,CAAC,QAAQ,CAAC,MAAM;KACtC,CAAC;IAEF,MAAM,OAAO,GAAkB;QAC7B,GAAG,OAAO;QACV,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,GAAG,CAAC,OAAO,CAAC,gBAAgB,IAAI,EAAE,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,EAAE,CAAC;KAChF,CAAC;IAEF,aAAa,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IACnF,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,OAAO,CAAC;IACnC,UAAU,CAAC,KAAK,CAAC,CAAC;IAClB,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,EAAU;IACxC,IAAI,CAAC,EAAE,EAAE,CAAC;QACR,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,cAAc,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;QACrD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAkB,CAAC;QAChD,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,EAAU;IACtC,IAAI,CAAC,EAAE,EAAE,CAAC;QACR,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;IAC1B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;QACvB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC;QACH,MAAM,CAAC,cAAc,CAAC,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,SAAS;IACX,CAAC;IACD,OAAO,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACzB,UAAU,CAAC,KAAK,CAAC,CAAC;IAClB,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,OAAoB,EACpB,OAA4C;IAE5C,eAAe,EAAE,CAAC;IAClB,MAAM,OAAO,GAAkB;QAC7B,EAAE,EAAE,YAAY,OAAO,EAAE;QACzB,OAAO;QACP,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,aAAa,EAAE,OAAO,CAAC,aAAa,IAAI,SAAS;QACjD,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,KAAK,EAAE,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,iBAAiB,CAAC,OAAO,CAAC,QAAQ,CAAC;QAC1E,YAAY,EAAE,OAAO,CAAC,QAAQ,CAAC,MAAM;QACrC,QAAQ,EAAE,OAAO,CAAC,QAAQ;KAC3B,CAAC;IACF,aAAa,CAAC,eAAe,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;AACpF,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,OAAoB;IACvD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,eAAe,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC;QAC3D,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAkB,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,OAAoB;IACxD,IAAI,CAAC;QACH,MAAM,CAAC,eAAe,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,SAAS;IACX,CAAC;AACH,CAAC;AAED,SAAS,SAAS;IAChB,eAAe,EAAE,CAAC;IAClB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAiB,CAAC;QAC/C,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YAChF,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;QACzB,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,EAAE,GAAG,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IACzB,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,KAAmB;IACrC,eAAe,EAAE,CAAC;IAClB,aAAa,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;AACnE,CAAC;AAED,SAAS,eAAe;IACtB,SAAS,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,cAAc,CAAC,EAAU;IAChC,OAAO,IAAI,CAAC,WAAW,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,eAAe,CAAC,OAAoB;IAC3C,OAAO,IAAI,CAAC,WAAW,EAAE,GAAG,OAAO,gBAAgB,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,aAAa,CAAC,KAAgC;IACrD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,iBAAiB,CAAC,QAA+B;IACxD,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC5B,SAAS;QACX,CAAC;QACD,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAC9D,IAAI,SAAS,EAAE,CAAC;YACd,OAAO,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;IACD,OAAO,WAAW,IAAI,IAAI,EAAE,CAAC,cAAc,EAAE,EAAE,CAAC;AAClD,CAAC;AAED,SAAS,YAAY;IACnB,IAAI,CAAC;QACH,eAAe,EAAE,CAAC;QAClB,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;QAC1B,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAClD,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,WAAW,CAAC,EAAE,CAAC;YAC5C,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC5B,SAAS;YACX,CAAC;YACD,IAAI,IAAI,KAAK,YAAY,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;gBACxD,SAAS;YACX,CAAC;YACD,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YAC7B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;gBACnB,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;gBAC1C,MAAM,KAAK,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC;gBAClC,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;oBACnB,MAAM,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBACrC,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,sBAAsB;IACxB,CAAC;AACH,CAAC;AAED,YAAY,EAAE,CAAC"}

package/dist/core/sharedSecrets.d.ts

@@ -1,60 +0,0 @@
-/**
- * Firestore-backed shared secrets.
- *
- * Public CLI users don't bring their own DeepSeek key by default —
- * they sign in with Erosolar Auth and the CLI fetches a shared,
- * server-managed key from Firestore at `shared_secrets/{name}`.
- *
- * Resolution order for any provider key:
- *   1. process.env[NAME]                — explicit env override
- *   2. ~/.erosolar/secrets.json[NAME]   — user's own key via /secrets
- *   3. Firestore shared_secrets/{name}  — gated by Firebase Auth
- *
- * If steps 1+2 hit, we never make a Firestore call. The shared
- * fetch only runs when a key is genuinely missing AND the user is
- * already signed in (the CLI's `requireAuth()` happens earlier in
- * boot, so by the time we get here a valid ID token is available).
- *
- * The fetched value is written to process.env so every downstream
- * `requireEnv(...)` / `getSecretValue(...)` site sees it without
- * any additional plumbing. No on-disk cache — refetched on each
- * CLI startup. Firestore Spark-tier reads are cheap and this keeps
- * a rotated key from getting stuck in a stale local cache.
- */
-export type SharedSecretName = 'deepseek' | 'tavily';
-export type PrefetchOutcome = {
-    source: 'env';
-    secret: SharedSecretName;
-    value: string;
-} | {
-    source: 'saved';
-    secret: SharedSecretName;
-    value: string;
-} | {
-    source: 'shared';
-    secret: SharedSecretName;
-    value: string;
-} | {
-    source: 'unauthenticated';
-    secret: SharedSecretName;
-} | {
-    source: 'missing';
-    secret: SharedSecretName;
-    reason: string;
-};
-/**
- * Ensure the named provider key is present in process.env, fetching
- * from Firestore if needed. No-op when already set in env or saved
- * via /secrets. Returns a PrefetchOutcome describing where the value
- * came from (or why it's still missing).
- */
-export declare function ensureSharedSecret(name: SharedSecretName): Promise<PrefetchOutcome>;
-/**
- * Prefetch every shared secret the CLI knows about. Called once at
- * boot, after requireAuth() succeeds. Errors are returned, not
- * thrown — a missing shared key is a degraded-but-runnable state,
- * not a fatal one (the user can still bring their own via env or
- * `/secrets`).
- */
-export declare function prefetchAllSharedSecrets(): Promise<PrefetchOutcome[]>;
-//# sourceMappingURL=sharedSecrets.d.ts.map

package/dist/core/sharedSecrets.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"sharedSecrets.d.ts","sourceRoot":"","sources":["../../src/core/sharedSecrets.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAOH,MAAM,MAAM,gBAAgB,GAAG,UAAU,GAAG,QAAQ,CAAC;AAErD,MAAM,MAAM,eAAe,GACvB;IAAE,MAAM,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,gBAAgB,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAC1D;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,gBAAgB,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAC5D;IAAE,MAAM,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,gBAAgB,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAC7D;IAAE,MAAM,EAAE,iBAAiB,CAAC;IAAC,MAAM,EAAE,gBAAgB,CAAA;CAAE,GACvD;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,gBAAgB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AA6CpE;;;;;GAKG;AACH,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,eAAe,CAAC,CAkCzF;AAED;;;;;;GAMG;AACH,wBAAsB,wBAAwB,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC,CAO3E"}