@vibesdotdev/config 0.0.1

package/dist/services/config-storage/service.d.ts

@@ -0,0 +1,63 @@
+/**
+ * Config Storage Service
+ *
+ * Unified configuration storage using runtime-resolved storage adapter.
+ * Provides credentials and config document CRUD through SqlDatabaseHandle.
+ */
+export type ConfigScope = 'global' | 'local' | 'project';
+export interface CredentialsInput {
+    environment: string;
+    apiKey?: string;
+    sessionToken?: string;
+    refreshToken?: string;
+    userId?: string;
+    email?: string;
+    name?: string;
+    expiresAt?: string;
+    metadata?: Record<string, unknown>;
+}
+export interface ConfigDocumentInput {
+    scope: ConfigScope;
+    content: Record<string, unknown>;
+    namespace?: string;
+    encrypted?: boolean;
+    changeReason?: string;
+}
+type StorageAdapter = {
+    getDatabaseConnection: () => unknown;
+    ensureReady: () => Promise<void>;
+};
+type Runtime = {
+    query: (kind: string) => {
+        withId: (id: string) => {
+            resolve: () => Promise<StorageAdapter>;
+        };
+    };
+};
+export declare class ConfigStorageService {
+    private sql;
+    private initPromise;
+    private runtime;
+    constructor(runtime: Runtime);
+    private ensureInitialized;
+    private createTables;
+    getCredentials(environment: string): Promise<CredentialsInput | null>;
+    setCredentials(input: CredentialsInput): Promise<void>;
+    deleteCredentials(environment: string): Promise<void>;
+    getDocument<T = Record<string, unknown>>(scope: ConfigScope, namespace?: string | null): Promise<T | null>;
+    getDocumentMerged<T = Record<string, unknown>>(scopes: ConfigScope[], namespace?: string | null): Promise<{
+        config: T;
+        sources: Array<{
+            scope: ConfigScope;
+            version: number;
+        }>;
+    }>;
+    setDocument(input: ConfigDocumentInput): Promise<void>;
+    mergeDocument(scope: ConfigScope, content: Record<string, unknown>, namespace?: string | null, changeReason?: string): Promise<void>;
+    deleteDocument(scope: ConfigScope, namespace?: string | null): Promise<void>;
+    close(): Promise<void>;
+}
+export declare function getConfigStorageService(runtime: Runtime): ConfigStorageService;
+export declare function resetConfigStorageService(): void;
+export {};
+//# sourceMappingURL=service.d.ts.map

package/dist/services/config-storage/service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../../src/services/config-storage/service.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAmBH,MAAM,MAAM,WAAW,GAAG,QAAQ,GAAG,OAAO,GAAG,SAAS,CAAC;AAEzD,MAAM,WAAW,gBAAgB;IAChC,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAED,MAAM,WAAW,mBAAmB;IACnC,KAAK,EAAE,WAAW,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;CACtB;AA4BD,KAAK,cAAc,GAAG;IACrB,qBAAqB,EAAE,MAAM,OAAO,CAAC;IACrC,WAAW,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CACjC,CAAC;AAEF,KAAK,OAAO,GAAG;IACd,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK;QACxB,MAAM,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK;YACvB,OAAO,EAAE,MAAM,OAAO,CAAC,cAAc,CAAC,CAAC;SACvC,CAAC;KACF,CAAC;CACF,CAAC;AAiCF,qBAAa,oBAAoB;IAChC,OAAO,CAAC,GAAG,CAAkC;IAC7C,OAAO,CAAC,WAAW,CAA8B;IACjD,OAAO,CAAC,OAAO,CAAU;gBAEb,OAAO,EAAE,OAAO;YAId,iBAAiB;IAa/B,OAAO,CAAC,YAAY;IAmCd,cAAc,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAiBrE,cAAc,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC;IA8CtD,iBAAiB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAKrD,WAAW,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,SAAS,GAAE,MAAM,GAAG,IAAW,GAAG,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC;IAgBhH,iBAAiB,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAClD,MAAM,EAAE,WAAW,EAAE,EACrB,SAAS,GAAE,MAAM,GAAG,IAAW,GAC7B,OAAO,CAAC;QAAE,MAAM,EAAE,CAAC,CAAC;QAAC,OAAO,EAAE,KAAK,CAAC;YAAE,KAAK,EAAE,WAAW,CAAC;YAAC,OAAO,EAAE,MAAM,CAAA;SAAE,CAAC,CAAA;KAAE,CAAC;IAwB5E,WAAW,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC;IA2BtD,aAAa,CAClB,KAAK,EAAE,WAAW,EAClB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,SAAS,GAAE,MAAM,GAAG,IAAW,EAC/B,YAAY,CAAC,EAAE,MAAM,GACnB,OAAO,CAAC,IAAI,CAAC;IAYV,cAAc,CAAC,KAAK,EAAE,WAAW,EAAE,SAAS,GAAE,MAAM,GAAG,IAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IASlF,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CAI5B;AAID,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,OAAO,GAAG,oBAAoB,CAK9E;AAED,wBAAgB,yBAAyB,IAAI,IAAI,CAEhD"}

package/dist/services/config-storage/service.js

@@ -0,0 +1,234 @@
+/**
+ * Config Storage Service
+ *
+ * Unified configuration storage using runtime-resolved storage adapter.
+ * Provides credentials and config document CRUD through SqlDatabaseHandle.
+ */
+import { randomUUID } from 'crypto';
+import { join } from 'path';
+const CONFIG_DB_PATH = join('.vibes', 'config.db');
+const CONFIG_NAMESPACE = 'config';
+async function createStorageAdapter(runtime) {
+    const adapter = await runtime.query('storage/adapter').withId(CONFIG_NAMESPACE).resolve();
+    await adapter.ensureReady();
+    return adapter;
+}
+function getSqlHandle(adapter) {
+    return adapter.getDatabaseConnection();
+}
+function deepMerge(target, source) {
+    const result = { ...target };
+    for (const key of Object.keys(source)) {
+        const sourceValue = source[key];
+        const targetValue = result[key];
+        if (sourceValue !== null &&
+            typeof sourceValue === 'object' &&
+            !Array.isArray(sourceValue) &&
+            targetValue !== null &&
+            typeof targetValue === 'object' &&
+            !Array.isArray(targetValue)) {
+            result[key] = deepMerge(targetValue, sourceValue);
+        }
+        else {
+            result[key] = sourceValue;
+        }
+    }
+    return result;
+}
+export class ConfigStorageService {
+    sql = null;
+    initPromise = null;
+    runtime;
+    constructor(runtime) {
+        this.runtime = runtime;
+    }
+    async ensureInitialized() {
+        if (this.sql)
+            return this.sql;
+        if (!this.initPromise) {
+            this.initPromise = (async () => {
+                const adapter = await createStorageAdapter(this.runtime);
+                this.sql = getSqlHandle(adapter);
+                this.createTables();
+            })();
+        }
+        await this.initPromise;
+        return this.sql;
+    }
+    createTables() {
+        if (!this.sql)
+            return;
+        this.sql.exec(`
+			CREATE TABLE IF NOT EXISTS credentials (
+				id TEXT PRIMARY KEY,
+				environment TEXT NOT NULL UNIQUE,
+				api_key TEXT,
+				session_token TEXT,
+				refresh_token TEXT,
+				user_id TEXT,
+				email TEXT,
+				name TEXT,
+				expires_at TEXT,
+				metadata TEXT,
+				created_at TEXT NOT NULL DEFAULT (datetime('now')),
+				updated_at TEXT NOT NULL DEFAULT (datetime('now'))
+			);
+			CREATE INDEX IF NOT EXISTS idx_credentials_environment ON credentials(environment);
+
+			CREATE TABLE IF NOT EXISTS config_documents (
+				id TEXT PRIMARY KEY,
+				scope TEXT NOT NULL CHECK(scope IN ('global', 'local', 'project')),
+				namespace TEXT,
+				content TEXT NOT NULL DEFAULT '{}',
+				version INTEGER NOT NULL DEFAULT 1,
+				encrypted INTEGER NOT NULL DEFAULT 0,
+				created_at TEXT NOT NULL DEFAULT (datetime('now')),
+				updated_at TEXT NOT NULL DEFAULT (datetime('now')),
+				UNIQUE(scope, namespace)
+			);
+			CREATE INDEX IF NOT EXISTS idx_config_documents_scope ON config_documents(scope);
+			CREATE INDEX IF NOT EXISTS idx_config_documents_namespace ON config_documents(namespace);
+		`);
+    }
+    async getCredentials(environment) {
+        const sql = await this.ensureInitialized();
+        const row = sql.query('SELECT * FROM credentials WHERE environment = ?').get(environment);
+        if (!row)
+            return null;
+        return {
+            environment: row.environment,
+            apiKey: row.api_key ?? undefined,
+            sessionToken: row.session_token ?? undefined,
+            refreshToken: row.refresh_token ?? undefined,
+            userId: row.user_id ?? undefined,
+            email: row.email ?? undefined,
+            name: row.name ?? undefined,
+            expiresAt: row.expires_at ?? undefined,
+            metadata: row.metadata ? JSON.parse(row.metadata) : undefined
+        };
+    }
+    async setCredentials(input) {
+        const sql = await this.ensureInitialized();
+        const now = new Date().toISOString();
+        const existing = sql.query('SELECT id FROM credentials WHERE environment = ?').get(input.environment);
+        if (existing) {
+            sql.query(`UPDATE credentials SET
+					api_key = ?, session_token = ?, refresh_token = ?,
+					user_id = ?, email = ?, name = ?, expires_at = ?,
+					metadata = ?, updated_at = ?
+					WHERE environment = ?`).run(input.apiKey ?? null, input.sessionToken ?? null, input.refreshToken ?? null, input.userId ?? null, input.email ?? null, input.name ?? null, input.expiresAt ?? null, input.metadata ? JSON.stringify(input.metadata) : null, now, input.environment);
+        }
+        else {
+            sql.query(`INSERT INTO credentials
+					(id, environment, api_key, session_token, refresh_token,
+					 user_id, email, name, expires_at, metadata, created_at, updated_at)
+					VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`).run(randomUUID(), input.environment, input.apiKey ?? null, input.sessionToken ?? null, input.refreshToken ?? null, input.userId ?? null, input.email ?? null, input.name ?? null, input.expiresAt ?? null, input.metadata ? JSON.stringify(input.metadata) : null, now, now);
+        }
+    }
+    async deleteCredentials(environment) {
+        const sql = await this.ensureInitialized();
+        sql.query('DELETE FROM credentials WHERE environment = ?').run(environment);
+    }
+    async getDocument(scope, namespace = null) {
+        const sql = await this.ensureInitialized();
+        let row;
+        if (namespace === null) {
+            row = sql.query('SELECT * FROM config_documents WHERE scope = ? AND namespace IS NULL').get(scope) ?? null;
+        }
+        else {
+            row = sql.query('SELECT * FROM config_documents WHERE scope = ? AND namespace = ?').get(scope, namespace) ?? null;
+        }
+        if (!row)
+            return null;
+        try {
+            return JSON.parse(row.content);
+        }
+        catch {
+            return null;
+        }
+    }
+    async getDocumentMerged(scopes, namespace = null) {
+        const sql = await this.ensureInitialized();
+        let merged = {};
+        const sources = [];
+        for (const scope of scopes) {
+            let row;
+            if (namespace === null) {
+                row = sql.query('SELECT * FROM config_documents WHERE scope = ? AND namespace IS NULL').get(scope) ?? null;
+            }
+            else {
+                row = sql.query('SELECT * FROM config_documents WHERE scope = ? AND namespace = ?').get(scope, namespace) ?? null;
+            }
+            if (row) {
+                try {
+                    const content = JSON.parse(row.content);
+                    merged = deepMerge(merged, content);
+                    sources.push({ scope, version: row.version });
+                }
+                catch {
+                    // Skip malformed content
+                }
+            }
+        }
+        return { config: merged, sources };
+    }
+    async setDocument(input) {
+        const sql = await this.ensureInitialized();
+        const now = new Date().toISOString();
+        const namespace = input.namespace ?? null;
+        let existing;
+        if (namespace === null) {
+            existing = sql.query('SELECT * FROM config_documents WHERE scope = ? AND namespace IS NULL').get(input.scope) ?? null;
+        }
+        else {
+            existing = sql.query('SELECT * FROM config_documents WHERE scope = ? AND namespace = ?').get(input.scope, namespace) ?? null;
+        }
+        const content = JSON.stringify(input.content);
+        const encrypted = input.encrypted ? 1 : 0;
+        if (existing) {
+            sql.query(`UPDATE config_documents SET
+					content = ?, version = version + 1, encrypted = ?, updated_at = ?
+					WHERE id = ?`).run(content, encrypted, now, existing.id);
+        }
+        else {
+            sql.query(`INSERT INTO config_documents
+					(id, scope, namespace, content, version, encrypted, created_at, updated_at)
+					VALUES (?, ?, ?, ?, 1, ?, ?, ?)`).run(randomUUID(), input.scope, namespace, content, encrypted, now, now);
+        }
+    }
+    async mergeDocument(scope, content, namespace = null, changeReason) {
+        const existing = await this.getDocument(scope, namespace);
+        const merged = deepMerge(existing || {}, content);
+        await this.setDocument({
+            scope,
+            namespace: namespace ?? undefined,
+            content: merged,
+            encrypted: false,
+            changeReason
+        });
+    }
+    async deleteDocument(scope, namespace = null) {
+        const sql = await this.ensureInitialized();
+        if (namespace === null) {
+            sql.query('DELETE FROM config_documents WHERE scope = ? AND namespace IS NULL').run(scope);
+        }
+        else {
+            sql.query('DELETE FROM config_documents WHERE scope = ? AND namespace = ?').run(scope, namespace);
+        }
+    }
+    async close() {
+        this.sql = null;
+        this.initPromise = null;
+    }
+}
+let instance = null;
+export function getConfigStorageService(runtime) {
+    if (!instance) {
+        instance = new ConfigStorageService(runtime);
+    }
+    return instance;
+}
+export function resetConfigStorageService() {
+    instance = null;
+}
+//# sourceMappingURL=service.js.map

package/dist/services/config-storage/service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.js","sourceRoot":"","sources":["../../../src/services/config-storage/service.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACpC,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAa5B,MAAM,cAAc,GAAG,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;AACnD,MAAM,gBAAgB,GAAG,QAAQ,CAAC;AA+DlC,KAAK,UAAU,oBAAoB,CAAC,OAAgB;IACnD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,OAAO,EAAE,CAAC;IAC1F,MAAM,OAAO,CAAC,WAAW,EAAE,CAAC;IAC5B,OAAO,OAAO,CAAC;AAChB,CAAC;AAED,SAAS,YAAY,CAAC,OAAuB;IAC5C,OAAO,OAAO,CAAC,qBAAqB,EAAuB,CAAC;AAC7D,CAAC;AAED,SAAS,SAAS,CAAC,MAA+B,EAAE,MAA+B;IAClF,MAAM,MAAM,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC;IAC7B,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACvC,MAAM,WAAW,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,WAAW,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QAChC,IACC,WAAW,KAAK,IAAI;YACpB,OAAO,WAAW,KAAK,QAAQ;YAC/B,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC;YAC3B,WAAW,KAAK,IAAI;YACpB,OAAO,WAAW,KAAK,QAAQ;YAC/B,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,EAC1B,CAAC;YACF,MAAM,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC,WAAsC,EAAE,WAAsC,CAAC,CAAC;QACzG,CAAC;aAAM,CAAC;YACP,MAAM,CAAC,GAAG,CAAC,GAAG,WAAW,CAAC;QAC3B,CAAC;IACF,CAAC;IACD,OAAO,MAAM,CAAC;AACf,CAAC;AAED,MAAM,OAAO,oBAAoB;IACxB,GAAG,GAA6B,IAAI,CAAC;IACrC,WAAW,GAAyB,IAAI,CAAC;IACzC,OAAO,CAAU;IAEzB,YAAY,OAAgB;QAC3B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACxB,CAAC;IAEO,KAAK,CAAC,iBAAiB;QAC9B,IAAI,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC,GAAG,CAAC;QAC9B,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACvB,IAAI,CAAC,WAAW,GAAG,CAAC,KAAK,IAAI,EAAE;gBAC9B,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACzD,IAAI,CAAC,GAAG,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;gBACjC,IAAI,CAAC,YAAY,EAAE,CAAC;YACrB,CAAC,CAAC,EAAE,CAAC;QACN,CAAC;QACD,MAAM,IAAI,CAAC,WAAW,CAAC;QACvB,OAAO,IAAI,CAAC,GAAI,CAAC;IAClB,CAAC;IAEO,YAAY;QACnB,IAAI,CAAC,IAAI,CAAC,GAAG;YAAE,OAAO;QACtB,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8Bb,CAAC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,WAAmB;QACvC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC3C,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAA2B,iDAAiD,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACpH,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QACtB,OAAO;YACN,WAAW,EAAE,GAAG,CAAC,WAAW;YAC5B,MAAM,EAAE,GAAG,CAAC,OAAO,IAAI,SAAS;YAChC,YAAY,EAAE,GAAG,CAAC,aAAa,IAAI,SAAS;YAC5C,YAAY,EAAE,GAAG,CAAC,aAAa,IAAI,SAAS;YAC5C,MAAM,EAAE,GAAG,CAAC,OAAO,IAAI,SAAS;YAChC,KAAK,EAAE,GAAG,CAAC,KAAK,IAAI,SAAS;YAC7B,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,SAAS;YAC3B,SAAS,EAAE,GAAG,CAAC,UAAU,IAAI,SAAS;YACtC,QAAQ,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;SAC7D,CAAC;IACH,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,KAAuB;QAC3C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC3C,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAA2B,kDAAkD,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAChI,IAAI,QAAQ,EAAE,CAAC;YACd,GAAG,CAAC,KAAK,CACR;;;;2BAIuB,CACvB,CAAC,GAAG,CACJ,KAAK,CAAC,MAAM,IAAI,IAAI,EACpB,KAAK,CAAC,YAAY,IAAI,IAAI,EAC1B,KAAK,CAAC,YAAY,IAAI,IAAI,EAC1B,KAAK,CAAC,MAAM,IAAI,IAAI,EACpB,KAAK,CAAC,KAAK,IAAI,IAAI,EACnB,KAAK,CAAC,IAAI,IAAI,IAAI,EAClB,KAAK,CAAC,SAAS,IAAI,IAAI,EACvB,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,EACtD,GAAG,EACH,KAAK,CAAC,WAAW,CACjB,CAAC;QACH,CAAC;aAAM,CAAC;YACP,GAAG,CAAC,KAAK,CACR;;;iDAG6C,CAC7C,CAAC,GAAG,CACJ,UAAU,EAAE,EACZ,KAAK,CAAC,WAAW,EACjB,KAAK,CAAC,MAAM,IAAI,IAAI,EACpB,KAAK,CAAC,YAAY,IAAI,IAAI,EAC1B,KAAK,CAAC,YAAY,IAAI,IAAI,EAC1B,KAAK,CAAC,MAAM,IAAI,IAAI,EACpB,KAAK,CAAC,KAAK,IAAI,IAAI,EACnB,KAAK,CAAC,IAAI,IAAI,IAAI,EAClB,KAAK,CAAC,SAAS,IAAI,IAAI,EACvB,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,EACtD,GAAG,EACH,GAAG,CACH,CAAC;QACH,CAAC;IACF,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,WAAmB;QAC1C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC3C,GAAG,CAAC,KAAK,CAAC,+CAA+C,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAC7E,CAAC;IAED,KAAK,CAAC,WAAW,CAA8B,KAAkB,EAAE,YAA2B,IAAI;QACjG,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC3C,IAAI,GAA6B,CAAC;QAClC,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;YACxB,GAAG,GAAG,GAAG,CAAC,KAAK,CAA8B,sEAAsE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC;QACzI,CAAC;aAAM,CAAC;YACP,GAAG,GAAG,GAAG,CAAC,KAAK,CAAsC,kEAAkE,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,CAAC,IAAI,IAAI,CAAC;QACxJ,CAAC;QACD,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QACtB,IAAI,CAAC;YACJ,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAM,CAAC;QACrC,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,IAAI,CAAC;QACb,CAAC;IACF,CAAC;IAED,KAAK,CAAC,iBAAiB,CACtB,MAAqB,EACrB,YAA2B,IAAI;QAE/B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC3C,IAAI,MAAM,GAA4B,EAAE,CAAC;QACzC,MAAM,OAAO,GAAmD,EAAE,CAAC;QACnE,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC5B,IAAI,GAA6B,CAAC;YAClC,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;gBACxB,GAAG,GAAG,GAAG,CAAC,KAAK,CAA8B,sEAAsE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC;YACzI,CAAC;iBAAM,CAAC;gBACP,GAAG,GAAG,GAAG,CAAC,KAAK,CAAsC,kEAAkE,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,CAAC,IAAI,IAAI,CAAC;YACxJ,CAAC;YACD,IAAI,GAAG,EAAE,CAAC;gBACT,IAAI,CAAC;oBACJ,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;oBACxC,MAAM,GAAG,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;oBACpC,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;gBAC/C,CAAC;gBAAC,MAAM,CAAC;oBACR,yBAAyB;gBAC1B,CAAC;YACF,CAAC;QACF,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,MAAW,EAAE,OAAO,EAAE,CAAC;IACzC,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,KAA0B;QAC3C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC3C,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,IAAI,CAAC;QAC1C,IAAI,QAAkC,CAAC;QACvC,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;YACxB,QAAQ,GAAG,GAAG,CAAC,KAAK,CAA8B,sEAAsE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC;QACpJ,CAAC;aAAM,CAAC;YACP,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAsC,kEAAkE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,SAAS,CAAC,IAAI,IAAI,CAAC;QACnK,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC9C,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1C,IAAI,QAAQ,EAAE,CAAC;YACd,GAAG,CAAC,KAAK,CACR;;kBAEc,CACd,CAAC,GAAG,CAAC,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC7C,CAAC;aAAM,CAAC;YACP,GAAG,CAAC,KAAK,CACR;;qCAEiC,CACjC,CAAC,GAAG,CAAC,UAAU,EAAE,EAAE,KAAK,CAAC,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;QAC3E,CAAC;IACF,CAAC;IAED,KAAK,CAAC,aAAa,CAClB,KAAkB,EAClB,OAAgC,EAChC,YAA2B,IAAI,EAC/B,YAAqB;QAErB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAA0B,KAAK,EAAE,SAAS,CAAC,CAAC;QACnF,MAAM,MAAM,GAAG,SAAS,CAAC,QAAQ,IAAI,EAAE,EAAE,OAAO,CAAC,CAAC;QAClD,MAAM,IAAI,CAAC,WAAW,CAAC;YACtB,KAAK;YACL,SAAS,EAAE,SAAS,IAAI,SAAS;YACjC,OAAO,EAAE,MAAM;YACf,SAAS,EAAE,KAAK;YAChB,YAAY;SACZ,CAAC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,KAAkB,EAAE,YAA2B,IAAI;QACvE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC3C,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;YACxB,GAAG,CAAC,KAAK,CAAC,oEAAoE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC5F,CAAC;aAAM,CAAC;YACP,GAAG,CAAC,KAAK,CAAC,gEAAgE,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QACnG,CAAC;IACF,CAAC;IAED,KAAK,CAAC,KAAK;QACV,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC;QAChB,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;IACzB,CAAC;CACD;AAED,IAAI,QAAQ,GAAgC,IAAI,CAAC;AAEjD,MAAM,UAAU,uBAAuB,CAAC,OAAgB;IACvD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACf,QAAQ,GAAG,IAAI,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,QAAQ,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,yBAAyB;IACxC,QAAQ,GAAG,IAAI,CAAC;AACjB,CAAC"}

package/dist/services/config.d.ts

@@ -0,0 +1,3 @@
+export declare function loadConfigForScope(scope: 'global' | 'project'): Promise<Record<string, unknown>>;
+export declare function saveConfigForScope(config: Record<string, unknown>, scope: 'global' | 'project'): Promise<void>;
+//# sourceMappingURL=config.d.ts.map

package/dist/services/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/services/config.ts"],"names":[],"mappings":"AAaA,wBAAsB,kBAAkB,CACvC,KAAK,EAAE,QAAQ,GAAG,SAAS,GACzB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAWlC;AAED,wBAAsB,kBAAkB,CACvC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,KAAK,EAAE,QAAQ,GAAG,SAAS,GACzB,OAAO,CAAC,IAAI,CAAC,CAKf"}

package/dist/services/config.js

@@ -0,0 +1,30 @@
+import { existsSync, readFileSync, writeFileSync, mkdirSync } from 'fs';
+import { join } from 'path';
+import { homedir } from 'os';
+const VIBES_CONFIG_DIR = join(homedir(), '.config', 'vibes');
+const GLOBAL_CONFIG_FILE = join(VIBES_CONFIG_DIR, 'config.json');
+function ensureConfigDir() {
+    if (!existsSync(VIBES_CONFIG_DIR)) {
+        mkdirSync(VIBES_CONFIG_DIR, { recursive: true });
+    }
+}
+export async function loadConfigForScope(scope) {
+    ensureConfigDir();
+    if (scope === 'global' && existsSync(GLOBAL_CONFIG_FILE)) {
+        try {
+            const content = readFileSync(GLOBAL_CONFIG_FILE, 'utf-8');
+            return JSON.parse(content);
+        }
+        catch {
+            return {};
+        }
+    }
+    return {};
+}
+export async function saveConfigForScope(config, scope) {
+    ensureConfigDir();
+    if (scope === 'global') {
+        writeFileSync(GLOBAL_CONFIG_FILE, JSON.stringify(config, null, 2), 'utf-8');
+    }
+}
+//# sourceMappingURL=config.js.map

package/dist/services/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/services/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AACxE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAE7B,MAAM,gBAAgB,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;AAC7D,MAAM,kBAAkB,GAAG,IAAI,CAAC,gBAAgB,EAAE,aAAa,CAAC,CAAC;AAEjE,SAAS,eAAe;IACvB,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACnC,SAAS,CAAC,gBAAgB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,CAAC;AACF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACvC,KAA2B;IAE3B,eAAe,EAAE,CAAC;IAClB,IAAI,KAAK,KAAK,QAAQ,IAAI,UAAU,CAAC,kBAAkB,CAAC,EAAE,CAAC;QAC1D,IAAI,CAAC;YACJ,MAAM,OAAO,GAAG,YAAY,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC;YAC1D,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAA4B,CAAC;QACvD,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,EAAE,CAAC;QACX,CAAC;IACF,CAAC;IACD,OAAO,EAAE,CAAC;AACX,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACvC,MAA+B,EAC/B,KAA2B;IAE3B,eAAe,EAAE,CAAC;IAClB,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;QACxB,aAAa,CAAC,kBAAkB,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IAC7E,CAAC;AACF,CAAC"}

package/dist/services/encryption.d.ts

@@ -0,0 +1,114 @@
+/**
+ * Config Encryption Service
+ *
+ * Production-grade encryption for sensitive configuration values.
+ * Uses AES-256-GCM for authenticated encryption with PBKDF2 key derivation.
+ *
+ * Features:
+ * - AES-256-GCM authenticated encryption
+ * - PBKDF2 key derivation (100k iterations)
+ * - Random IV and salt generation
+ * - Constant-time comparison helpers
+ * - Browser and Node.js compatible (Web Crypto API)
+ */
+import type { EncryptedValue, SerializedEncryptedValue, EncryptionOptions } from './schemas/encryption.schema.ts';
+export type { EncryptedValue, SerializedEncryptedValue, EncryptionOptions } from './schemas/encryption.schema.ts';
+/**
+ * Encrypt a string value using AES-256-GCM.
+ *
+ * @param value - The plaintext value to encrypt
+ * @param password - The encryption password/key
+ * @param options - Optional encryption parameters
+ * @returns EncryptedValue with all components needed for decryption
+ * @throws Error if encryption fails
+ *
+ * @example
+ * ```typescript
+ * const encrypted = await encrypt('my-secret-api-key', 'my-master-password');
+ * // Store encrypted object
+ * ```
+ */
+export declare function encrypt(value: string, password: string, options?: EncryptionOptions): Promise<EncryptedValue>;
+/**
+ * Decrypt an encrypted value using AES-256-GCM.
+ *
+ * @param encrypted - The encrypted value object
+ * @param password - The encryption password/key
+ * @returns The decrypted plaintext value
+ * @throws Error if decryption fails (wrong password, corrupted data, etc.)
+ *
+ * @example
+ * ```typescript
+ * const encrypted = {
+ *   ciphertext: '...',
+ *   iv: '...',
+ *   salt: '...',
+ *   tag: '...',
+ *   algorithm: 'aes-256-gcm',
+ *   iterations: 100000
+ * };
+ * const decrypted = await decrypt(encrypted, 'my-master-password');
+ * ```
+ */
+export declare function decrypt(encrypted: EncryptedValue, password: string): Promise<string>;
+/**
+ * Serialize an encrypted value to a compact JSON object for storage.
+ *
+ * @param encrypted - The encrypted value
+ * @returns Compact serialized format
+ */
+export declare function serializeEncrypted(encrypted: EncryptedValue): SerializedEncryptedValue;
+/**
+ * Deserialize a compact JSON object back to EncryptedValue format.
+ *
+ * @param serialized - The serialized encrypted value
+ * @returns EncryptedValue object
+ */
+export declare function deserializeEncrypted(serialized: SerializedEncryptedValue): EncryptedValue;
+/**
+ * Encrypt a value and serialize it to a JSON string for storage.
+ *
+ * @param value - The plaintext value
+ * @param password - The encryption password
+ * @returns JSON string of serialized encrypted value
+ */
+export declare function encryptToString(value: string, password: string): Promise<string>;
+/**
+ * Decrypt a value from its serialized JSON string format.
+ *
+ * @param encryptedString - JSON string from encryptToString
+ * @param password - The encryption password
+ * @returns The decrypted plaintext value
+ */
+export declare function decryptFromString(encryptedString: string, password: string): Promise<string>;
+/**
+ * Generate a secure random password of the specified length.
+ *
+ * @param length - Password length (default: 32)
+ * @returns Base64-encoded random string
+ */
+export declare function generateSecurePassword(length?: number): string;
+/**
+ * Hash a password for storage using SHA-256.
+ * This is NOT for encryption keys - use only for password verification.
+ *
+ * @param password - The password to hash
+ * @returns SHA-256 hash as hex string
+ */
+export declare function hashPassword(password: string): string;
+/**
+ * Verify a password against a stored hash.
+ *
+ * @param password - The password to verify
+ * @param hash - The stored hash
+ * @returns True if the password matches
+ */
+export declare function verifyPassword(password: string, hash: string): boolean;
+/**
+ * Check if a value appears to be an encrypted value.
+ *
+ * @param value - The value to check
+ * @returns True if the value looks like an encrypted config value
+ */
+export declare function isEncryptedValue(value: unknown): value is SerializedEncryptedValue;
+//# sourceMappingURL=encryption.d.ts.map

package/dist/services/encryption.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"encryption.d.ts","sourceRoot":"","sources":["../../src/services/encryption.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAYH,OAAO,KAAK,EAAE,cAAc,EAAE,wBAAwB,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AAElH,YAAY,EAAE,cAAc,EAAE,wBAAwB,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AAalH;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,OAAO,CAC5B,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE,iBAAsB,GAC7B,OAAO,CAAC,cAAc,CAAC,CA6BzB;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAsB,OAAO,CAAC,SAAS,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CA4B1F;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,cAAc,GAAG,wBAAwB,CAUtF;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,UAAU,EAAE,wBAAwB,GAAG,cAAc,CASzF;AAED;;;;;;GAMG;AACH,wBAAsB,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAItF;AAED;;;;;;GAMG;AACH,wBAAsB,iBAAiB,CAAC,eAAe,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAIlG;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,SAAK,GAAG,MAAM,CAE1D;AAED;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAErD;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAUtE;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,wBAAwB,CAYlF"}