@within-7/minto 0.1.7 → 0.3.0

package/dist/utils/credentials/EncryptedFileStore.js

@@ -0,0 +1,157 @@
+import {
+  createCipheriv,
+  createDecipheriv,
+  randomBytes,
+  scryptSync
+} from "crypto";
+import {
+  readFileSync,
+  writeFileSync,
+  existsSync,
+  chmodSync,
+  mkdirSync
+} from "fs";
+import { join } from "path";
+import { homedir, hostname } from "os";
+import { debug as debugLogger } from "../debugLogger.js";
+const ALGORITHM = "aes-256-gcm";
+const SALT = "minto-credentials-salt-v1";
+const CREDENTIALS_DIR = join(homedir(), ".minto");
+const CREDENTIALS_FILE = join(CREDENTIALS_DIR, "credentials.enc");
+function getMachineId() {
+  const username = process.env.USER || process.env.USERNAME || "unknown";
+  const machineHostname = hostname();
+  const homeDir = homedir();
+  return `${machineHostname}:${username}:${homeDir}`;
+}
+class EncryptedFileStore {
+  /**
+   * Derive a consistent encryption key from the machine ID using scrypt KDF
+   */
+  getEncryptionKey() {
+    const machineId = getMachineId();
+    return scryptSync(machineId, SALT, 32);
+  }
+  /**
+   * Ensure credentials directory exists with proper permissions
+   */
+  ensureCredentialsDir() {
+    if (!existsSync(CREDENTIALS_DIR)) {
+      mkdirSync(CREDENTIALS_DIR, { mode: 448, recursive: true });
+    }
+  }
+  /**
+   * Load and decrypt credentials from disk
+   */
+  loadCredentials() {
+    if (!existsSync(CREDENTIALS_FILE)) {
+      debugLogger.state("CREDENTIALS_FILE_NOT_FOUND", {
+        path: CREDENTIALS_FILE
+      });
+      return {};
+    }
+    try {
+      const encryptedData = readFileSync(CREDENTIALS_FILE);
+      if (encryptedData.length < 32) {
+        debugLogger.warn("CREDENTIALS_FILE_TOO_SHORT", {
+          path: CREDENTIALS_FILE,
+          size: encryptedData.length
+        });
+        return {};
+      }
+      const iv = encryptedData.subarray(0, 16);
+      const authTag = encryptedData.subarray(16, 32);
+      const encrypted = encryptedData.subarray(32);
+      const key = this.getEncryptionKey();
+      const decipher = createDecipheriv(ALGORITHM, key, iv);
+      decipher.setAuthTag(authTag);
+      const decrypted = Buffer.concat([
+        decipher.update(encrypted),
+        decipher.final()
+      ]);
+      const credentials = JSON.parse(decrypted.toString("utf-8"));
+      debugLogger.state("CREDENTIALS_LOADED", {
+        path: CREDENTIALS_FILE,
+        count: Object.keys(credentials).length
+      });
+      return credentials;
+    } catch (error) {
+      const errorMsg = error instanceof Error ? error.message : String(error);
+      debugLogger.error("CREDENTIALS_LOAD_ERROR", {
+        path: CREDENTIALS_FILE,
+        error: errorMsg,
+        errorType: error instanceof Error ? error.constructor.name : typeof error
+      });
+      return {};
+    }
+  }
+  /**
+   * Encrypt and save credentials to disk
+   */
+  saveCredentials(credentials) {
+    try {
+      this.ensureCredentialsDir();
+      const key = this.getEncryptionKey();
+      const iv = randomBytes(16);
+      const cipher = createCipheriv(ALGORITHM, key, iv);
+      const plaintext = JSON.stringify(credentials);
+      const encrypted = Buffer.concat([
+        cipher.update(plaintext, "utf-8"),
+        cipher.final()
+      ]);
+      const authTag = cipher.getAuthTag();
+      const combined = Buffer.concat([iv, authTag, encrypted]);
+      writeFileSync(CREDENTIALS_FILE, combined);
+      chmodSync(CREDENTIALS_FILE, 384);
+      debugLogger.state("CREDENTIALS_SAVED", {
+        path: CREDENTIALS_FILE,
+        size: combined.length
+      });
+    } catch (error) {
+      const errorMsg = error instanceof Error ? error.message : String(error);
+      debugLogger.error("CREDENTIALS_SAVE_ERROR", {
+        path: CREDENTIALS_FILE,
+        error: errorMsg
+      });
+      throw error;
+    }
+  }
+  /**
+   * Generate a composite key for storing credentials
+   */
+  makeKey(service, account) {
+    return `${service}:${account}`;
+  }
+  async get(service, account) {
+    const credentials = this.loadCredentials();
+    const key = this.makeKey(service, account);
+    return credentials[key] ?? null;
+  }
+  async set(service, account, password) {
+    const credentials = this.loadCredentials();
+    credentials[this.makeKey(service, account)] = password;
+    this.saveCredentials(credentials);
+  }
+  async delete(service, account) {
+    const credentials = this.loadCredentials();
+    const key = this.makeKey(service, account);
+    delete credentials[key];
+    this.saveCredentials(credentials);
+  }
+  async findCredentials(service) {
+    const credentials = this.loadCredentials();
+    const prefix = `${service}:`;
+    const results = [];
+    for (const [key, password] of Object.entries(credentials)) {
+      if (key.startsWith(prefix)) {
+        const account = key.slice(prefix.length);
+        results.push({ account, password });
+      }
+    }
+    return results;
+  }
+}
+export {
+  EncryptedFileStore
+};
+//# sourceMappingURL=EncryptedFileStore.js.map

package/dist/utils/credentials/EncryptedFileStore.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/utils/credentials/EncryptedFileStore.ts"],
+  "sourcesContent": ["import {\n  createCipheriv,\n  createDecipheriv,\n  randomBytes,\n  scryptSync,\n} from 'crypto'\nimport {\n  readFileSync,\n  writeFileSync,\n  existsSync,\n  chmodSync,\n  mkdirSync,\n} from 'fs'\nimport { join, dirname } from 'path'\nimport { homedir, hostname } from 'os'\nimport type { CredentialStore } from './CredentialStore'\nimport { debug as debugLogger } from '../debugLogger'\n\nconst ALGORITHM = 'aes-256-gcm'\nconst SALT = 'minto-credentials-salt-v1'\nconst CREDENTIALS_DIR = join(homedir(), '.minto')\nconst CREDENTIALS_FILE = join(CREDENTIALS_DIR, 'credentials.enc')\n\n/**\n * Get a machine identifier for deterministic key derivation.\n * Uses hostname + username + homedir to create a stable machine-specific identifier.\n */\nfunction getMachineId(): string {\n  const username = process.env.USER || process.env.USERNAME || 'unknown'\n  const machineHostname = hostname()\n  const homeDir = homedir()\n  return `${machineHostname}:${username}:${homeDir}`\n}\n\n/**\n * Encrypted file-based credential store using AES-256-GCM encryption.\n * Credentials are stored in ~/.minto/credentials.enc with machine-specific encryption.\n */\nexport class EncryptedFileStore implements CredentialStore {\n  /**\n   * Derive a consistent encryption key from the machine ID using scrypt KDF\n   */\n  private getEncryptionKey(): Buffer {\n    const machineId = getMachineId()\n    // scrypt(password, salt, keylen, options)\n    return scryptSync(machineId, SALT, 32)\n  }\n\n  /**\n   * Ensure credentials directory exists with proper permissions\n   */\n  private ensureCredentialsDir(): void {\n    if (!existsSync(CREDENTIALS_DIR)) {\n      mkdirSync(CREDENTIALS_DIR, { mode: 0o700, recursive: true })\n    }\n  }\n\n  /**\n   * Load and decrypt credentials from disk\n   */\n  private loadCredentials(): Record<string, string> {\n    if (!existsSync(CREDENTIALS_FILE)) {\n      debugLogger.state('CREDENTIALS_FILE_NOT_FOUND', {\n        path: CREDENTIALS_FILE,\n      })\n      return {}\n    }\n\n    try {\n      const encryptedData = readFileSync(CREDENTIALS_FILE)\n\n      // Format: iv (16) + authTag (16) + encryptedContent\n      if (encryptedData.length < 32) {\n        debugLogger.warn('CREDENTIALS_FILE_TOO_SHORT', {\n          path: CREDENTIALS_FILE,\n          size: encryptedData.length,\n        })\n        return {}\n      }\n\n      const iv = encryptedData.subarray(0, 16)\n      const authTag = encryptedData.subarray(16, 32)\n      const encrypted = encryptedData.subarray(32)\n\n      const key = this.getEncryptionKey()\n      const decipher = createDecipheriv(ALGORITHM, key, iv)\n      decipher.setAuthTag(authTag)\n\n      const decrypted = Buffer.concat([\n        decipher.update(encrypted),\n        decipher.final(),\n      ])\n\n      const credentials = JSON.parse(decrypted.toString('utf-8'))\n      debugLogger.state('CREDENTIALS_LOADED', {\n        path: CREDENTIALS_FILE,\n        count: Object.keys(credentials).length,\n      })\n\n      return credentials as Record<string, string>\n    } catch (error) {\n      const errorMsg = error instanceof Error ? error.message : String(error)\n      debugLogger.error('CREDENTIALS_LOAD_ERROR', {\n        path: CREDENTIALS_FILE,\n        error: errorMsg,\n        errorType:\n          error instanceof Error ? error.constructor.name : typeof error,\n      })\n      return {}\n    }\n  }\n\n  /**\n   * Encrypt and save credentials to disk\n   */\n  private saveCredentials(credentials: Record<string, string>): void {\n    try {\n      this.ensureCredentialsDir()\n\n      const key = this.getEncryptionKey()\n      const iv = randomBytes(16)\n      const cipher = createCipheriv(ALGORITHM, key, iv)\n\n      const plaintext = JSON.stringify(credentials)\n      const encrypted = Buffer.concat([\n        cipher.update(plaintext, 'utf-8'),\n        cipher.final(),\n      ])\n      const authTag = cipher.getAuthTag()\n\n      // Format: iv (16) + authTag (16) + encryptedContent\n      const combined = Buffer.concat([iv, authTag, encrypted])\n\n      writeFileSync(CREDENTIALS_FILE, combined)\n      // Set strict permissions: readable/writable only by owner\n      chmodSync(CREDENTIALS_FILE, 0o600)\n\n      debugLogger.state('CREDENTIALS_SAVED', {\n        path: CREDENTIALS_FILE,\n        size: combined.length,\n      })\n    } catch (error) {\n      const errorMsg = error instanceof Error ? error.message : String(error)\n      debugLogger.error('CREDENTIALS_SAVE_ERROR', {\n        path: CREDENTIALS_FILE,\n        error: errorMsg,\n      })\n      throw error\n    }\n  }\n\n  /**\n   * Generate a composite key for storing credentials\n   */\n  private makeKey(service: string, account: string): string {\n    return `${service}:${account}`\n  }\n\n  async get(service: string, account: string): Promise<string | null> {\n    const credentials = this.loadCredentials()\n    const key = this.makeKey(service, account)\n    return credentials[key] ?? null\n  }\n\n  async set(service: string, account: string, password: string): Promise<void> {\n    const credentials = this.loadCredentials()\n    credentials[this.makeKey(service, account)] = password\n    this.saveCredentials(credentials)\n  }\n\n  async delete(service: string, account: string): Promise<void> {\n    const credentials = this.loadCredentials()\n    const key = this.makeKey(service, account)\n    delete credentials[key]\n    this.saveCredentials(credentials)\n  }\n\n  async findCredentials(\n    service: string,\n  ): Promise<{ account: string; password: string }[]> {\n    const credentials = this.loadCredentials()\n    const prefix = `${service}:`\n    const results: { account: string; password: string }[] = []\n\n    for (const [key, password] of Object.entries(credentials)) {\n      if (key.startsWith(prefix)) {\n        const account = key.slice(prefix.length)\n        results.push({ account, password })\n      }\n    }\n\n    return results\n  }\n}\n"],
+  "mappings": "AAAA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,YAAqB;AAC9B,SAAS,SAAS,gBAAgB;AAElC,SAAS,SAAS,mBAAmB;AAErC,MAAM,YAAY;AAClB,MAAM,OAAO;AACb,MAAM,kBAAkB,KAAK,QAAQ,GAAG,QAAQ;AAChD,MAAM,mBAAmB,KAAK,iBAAiB,iBAAiB;AAMhE,SAAS,eAAuB;AAC9B,QAAM,WAAW,QAAQ,IAAI,QAAQ,QAAQ,IAAI,YAAY;AAC7D,QAAM,kBAAkB,SAAS;AACjC,QAAM,UAAU,QAAQ;AACxB,SAAO,GAAG,eAAe,IAAI,QAAQ,IAAI,OAAO;AAClD;AAMO,MAAM,mBAA8C;AAAA;AAAA;AAAA;AAAA,EAIjD,mBAA2B;AACjC,UAAM,YAAY,aAAa;AAE/B,WAAO,WAAW,WAAW,MAAM,EAAE;AAAA,EACvC;AAAA;AAAA;AAAA;AAAA,EAKQ,uBAA6B;AACnC,QAAI,CAAC,WAAW,eAAe,GAAG;AAChC,gBAAU,iBAAiB,EAAE,MAAM,KAAO,WAAW,KAAK,CAAC;AAAA,IAC7D;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKQ,kBAA0C;AAChD,QAAI,CAAC,WAAW,gBAAgB,GAAG;AACjC,kBAAY,MAAM,8BAA8B;AAAA,QAC9C,MAAM;AAAA,MACR,CAAC;AACD,aAAO,CAAC;AAAA,IACV;AAEA,QAAI;AACF,YAAM,gBAAgB,aAAa,gBAAgB;AAGnD,UAAI,cAAc,SAAS,IAAI;AAC7B,oBAAY,KAAK,8BAA8B;AAAA,UAC7C,MAAM;AAAA,UACN,MAAM,cAAc;AAAA,QACtB,CAAC;AACD,eAAO,CAAC;AAAA,MACV;AAEA,YAAM,KAAK,cAAc,SAAS,GAAG,EAAE;AACvC,YAAM,UAAU,cAAc,SAAS,IAAI,EAAE;AAC7C,YAAM,YAAY,cAAc,SAAS,EAAE;AAE3C,YAAM,MAAM,KAAK,iBAAiB;AAClC,YAAM,WAAW,iBAAiB,WAAW,KAAK,EAAE;AACpD,eAAS,WAAW,OAAO;AAE3B,YAAM,YAAY,OAAO,OAAO;AAAA,QAC9B,SAAS,OAAO,SAAS;AAAA,QACzB,SAAS,MAAM;AAAA,MACjB,CAAC;AAED,YAAM,cAAc,KAAK,MAAM,UAAU,SAAS,OAAO,CAAC;AAC1D,kBAAY,MAAM,sBAAsB;AAAA,QACtC,MAAM;AAAA,QACN,OAAO,OAAO,KAAK,WAAW,EAAE;AAAA,MAClC,CAAC;AAED,aAAO;AAAA,IACT,SAAS,OAAO;AACd,YAAM,WAAW,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AACtE,kBAAY,MAAM,0BAA0B;AAAA,QAC1C,MAAM;AAAA,QACN,OAAO;AAAA,QACP,WACE,iBAAiB,QAAQ,MAAM,YAAY,OAAO,OAAO;AAAA,MAC7D,CAAC;AACD,aAAO,CAAC;AAAA,IACV;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKQ,gBAAgB,aAA2C;AACjE,QAAI;AACF,WAAK,qBAAqB;AAE1B,YAAM,MAAM,KAAK,iBAAiB;AAClC,YAAM,KAAK,YAAY,EAAE;AACzB,YAAM,SAAS,eAAe,WAAW,KAAK,EAAE;AAEhD,YAAM,YAAY,KAAK,UAAU,WAAW;AAC5C,YAAM,YAAY,OAAO,OAAO;AAAA,QAC9B,OAAO,OAAO,WAAW,OAAO;AAAA,QAChC,OAAO,MAAM;AAAA,MACf,CAAC;AACD,YAAM,UAAU,OAAO,WAAW;AAGlC,YAAM,WAAW,OAAO,OAAO,CAAC,IAAI,SAAS,SAAS,CAAC;AAEvD,oBAAc,kBAAkB,QAAQ;AAExC,gBAAU,kBAAkB,GAAK;AAEjC,kBAAY,MAAM,qBAAqB;AAAA,QACrC,MAAM;AAAA,QACN,MAAM,SAAS;AAAA,MACjB,CAAC;AAAA,IACH,SAAS,OAAO;AACd,YAAM,WAAW,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AACtE,kBAAY,MAAM,0BAA0B;AAAA,QAC1C,MAAM;AAAA,QACN,OAAO;AAAA,MACT,CAAC;AACD,YAAM;AAAA,IACR;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKQ,QAAQ,SAAiB,SAAyB;AACxD,WAAO,GAAG,OAAO,IAAI,OAAO;AAAA,EAC9B;AAAA,EAEA,MAAM,IAAI,SAAiB,SAAyC;AAClE,UAAM,cAAc,KAAK,gBAAgB;AACzC,UAAM,MAAM,KAAK,QAAQ,SAAS,OAAO;AACzC,WAAO,YAAY,GAAG,KAAK;AAAA,EAC7B;AAAA,EAEA,MAAM,IAAI,SAAiB,SAAiB,UAAiC;AAC3E,UAAM,cAAc,KAAK,gBAAgB;AACzC,gBAAY,KAAK,QAAQ,SAAS,OAAO,CAAC,IAAI;AAC9C,SAAK,gBAAgB,WAAW;AAAA,EAClC;AAAA,EAEA,MAAM,OAAO,SAAiB,SAAgC;AAC5D,UAAM,cAAc,KAAK,gBAAgB;AACzC,UAAM,MAAM,KAAK,QAAQ,SAAS,OAAO;AACzC,WAAO,YAAY,GAAG;AACtB,SAAK,gBAAgB,WAAW;AAAA,EAClC;AAAA,EAEA,MAAM,gBACJ,SACkD;AAClD,UAAM,cAAc,KAAK,gBAAgB;AACzC,UAAM,SAAS,GAAG,OAAO;AACzB,UAAM,UAAmD,CAAC;AAE1D,eAAW,CAAC,KAAK,QAAQ,KAAK,OAAO,QAAQ,WAAW,GAAG;AACzD,UAAI,IAAI,WAAW,MAAM,GAAG;AAC1B,cAAM,UAAU,IAAI,MAAM,OAAO,MAAM;AACvC,gBAAQ,KAAK,EAAE,SAAS,SAAS,CAAC;AAAA,MACpC;AAAA,IACF;AAEA,WAAO;AAAA,EACT;AACF;",
+  "names": []
+}

package/dist/utils/credentials/index.js

@@ -0,0 +1,37 @@
+import { EncryptedFileStore } from "./EncryptedFileStore.js";
+let store = null;
+const SERVICE_NAME = "minto-api";
+function getCredentialStore() {
+  if (!store) {
+    store = new EncryptedFileStore();
+  }
+  return store;
+}
+function resetCredentialStore() {
+  store = null;
+}
+async function getApiKey(modelName) {
+  return getCredentialStore().get(SERVICE_NAME, modelName);
+}
+async function setApiKey(modelName, apiKey) {
+  return getCredentialStore().set(SERVICE_NAME, modelName, apiKey);
+}
+async function deleteApiKey(modelName) {
+  return getCredentialStore().delete(SERVICE_NAME, modelName);
+}
+async function findAllApiKeys() {
+  const credentials = await getCredentialStore().findCredentials(SERVICE_NAME);
+  return credentials.map(({ account, password }) => ({
+    modelName: account,
+    apiKey: password
+  }));
+}
+export {
+  deleteApiKey,
+  findAllApiKeys,
+  getApiKey,
+  getCredentialStore,
+  resetCredentialStore,
+  setApiKey
+};
+//# sourceMappingURL=index.js.map

package/dist/utils/credentials/index.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/utils/credentials/index.ts"],
+  "sourcesContent": ["import { EncryptedFileStore } from './EncryptedFileStore'\nimport type { CredentialStore } from './CredentialStore'\n\n// Current credential store implementation (using encrypted files)\n// In Phase 2, this can be extended to support keytar for native OS keychains\nlet store: CredentialStore | null = null\n\nconst SERVICE_NAME = 'minto-api'\n\n/**\n * Get the current credential store instance\n * Currently uses encrypted file storage; will be extended to support keytar in Phase 2\n */\nexport function getCredentialStore(): CredentialStore {\n  if (!store) {\n    store = new EncryptedFileStore()\n  }\n  return store\n}\n\n/**\n * Reset the credential store (primarily for testing)\n */\nexport function resetCredentialStore(): void {\n  store = null\n}\n\n/**\n * Retrieve an API key for a specific model from the credential store.\n * Returns null if the key is not found.\n *\n * @param modelName The name of the model to retrieve the API key for\n * @returns The API key or null if not stored in credential store\n */\nexport async function getApiKey(modelName: string): Promise<string | null> {\n  return getCredentialStore().get(SERVICE_NAME, modelName)\n}\n\n/**\n * Store an API key for a specific model in the credential store.\n * This stores the key securely in encrypted storage.\n *\n * @param modelName The name of the model\n * @param apiKey The API key to store\n */\nexport async function setApiKey(\n  modelName: string,\n  apiKey: string,\n): Promise<void> {\n  return getCredentialStore().set(SERVICE_NAME, modelName, apiKey)\n}\n\n/**\n * Delete an API key for a specific model from the credential store.\n *\n * @param modelName The name of the model\n */\nexport async function deleteApiKey(modelName: string): Promise<void> {\n  return getCredentialStore().delete(SERVICE_NAME, modelName)\n}\n\n/**\n * Find all stored API keys for the service\n *\n * @returns Array of model names and their API keys\n */\nexport async function findAllApiKeys(): Promise<\n  { modelName: string; apiKey: string }[]\n> {\n  const credentials = await getCredentialStore().findCredentials(SERVICE_NAME)\n  return credentials.map(({ account, password }) => ({\n    modelName: account,\n    apiKey: password,\n  }))\n}\n"],
+  "mappings": "AAAA,SAAS,0BAA0B;AAKnC,IAAI,QAAgC;AAEpC,MAAM,eAAe;AAMd,SAAS,qBAAsC;AACpD,MAAI,CAAC,OAAO;AACV,YAAQ,IAAI,mBAAmB;AAAA,EACjC;AACA,SAAO;AACT;AAKO,SAAS,uBAA6B;AAC3C,UAAQ;AACV;AASA,eAAsB,UAAU,WAA2C;AACzE,SAAO,mBAAmB,EAAE,IAAI,cAAc,SAAS;AACzD;AASA,eAAsB,UACpB,WACA,QACe;AACf,SAAO,mBAAmB,EAAE,IAAI,cAAc,WAAW,MAAM;AACjE;AAOA,eAAsB,aAAa,WAAkC;AACnE,SAAO,mBAAmB,EAAE,OAAO,cAAc,SAAS;AAC5D;AAOA,eAAsB,iBAEpB;AACA,QAAM,cAAc,MAAM,mBAAmB,EAAE,gBAAgB,YAAY;AAC3E,SAAO,YAAY,IAAI,CAAC,EAAE,SAAS,SAAS,OAAO;AAAA,IACjD,WAAW;AAAA,IACX,QAAQ;AAAA,EACV,EAAE;AACJ;",
+  "names": []
+}

package/dist/utils/credentials/migration.js

@@ -0,0 +1,82 @@
+import { getGlobalConfig, saveGlobalConfig } from "../config.js";
+import { setApiKey } from "./index.js";
+import { debug as debugLogger } from "../debugLogger.js";
+async function migrateApiKeysToEncrypted() {
+  const config = getGlobalConfig();
+  let migrated = 0;
+  let skipped = 0;
+  const errors = [];
+  if (!config.modelProfiles || config.modelProfiles.length === 0) {
+    debugLogger.state("MIGRATION_NO_PROFILES", {});
+    return { migrated: 0, errors: [], skipped: 0 };
+  }
+  try {
+    debugLogger.state("MIGRATION_START", {
+      profileCount: config.modelProfiles.length
+    });
+    const migratedProfiles = await Promise.all(
+      config.modelProfiles.map(async (profile) => {
+        if (!profile.apiKey) {
+          skipped++;
+          return profile;
+        }
+        if (profile.apiKey.startsWith("encrypted:")) {
+          debugLogger.state("MIGRATION_SKIP_ALREADY_ENCRYPTED", {
+            modelName: profile.modelName
+          });
+          skipped++;
+          return profile;
+        }
+        try {
+          await setApiKey(profile.modelName, profile.apiKey);
+          const migratedProfile = {
+            ...profile,
+            apiKey: `encrypted:${profile.modelName}`
+          };
+          debugLogger.state("MIGRATION_SUCCESS", {
+            modelName: profile.modelName,
+            provider: profile.provider
+          });
+          migrated++;
+          return migratedProfile;
+        } catch (error) {
+          const errorMsg = error instanceof Error ? error.message : String(error);
+          const errorText = `Failed to migrate ${profile.modelName}: ${errorMsg}`;
+          errors.push(errorText);
+          debugLogger.error("MIGRATION_PROFILE_ERROR", {
+            modelName: profile.modelName,
+            error: errorMsg
+          });
+          return profile;
+        }
+      })
+    );
+    if (migrated > 0) {
+      const updatedConfig = {
+        ...config,
+        modelProfiles: migratedProfiles
+      };
+      saveGlobalConfig(updatedConfig);
+      debugLogger.state("MIGRATION_CONFIG_SAVED", {
+        profilesMigrated: migrated,
+        profilesSkipped: skipped
+      });
+    }
+    debugLogger.state("MIGRATION_COMPLETE", {
+      migrated,
+      skipped,
+      errors: errors.length
+    });
+  } catch (error) {
+    const errorMsg = error instanceof Error ? error.message : String(error);
+    debugLogger.error("MIGRATION_FATAL_ERROR", {
+      error: errorMsg
+    });
+    errors.push(`Fatal migration error: ${errorMsg}`);
+  }
+  return { migrated, errors, skipped };
+}
+export {
+  migrateApiKeysToEncrypted
+};
+//# sourceMappingURL=migration.js.map

package/dist/utils/credentials/migration.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/utils/credentials/migration.ts"],
+  "sourcesContent": ["import { getGlobalConfig, saveGlobalConfig, type GlobalConfig } from '../config'\nimport { setApiKey } from './index'\nimport { debug as debugLogger } from '../debugLogger'\n\nexport interface MigrationResult {\n  migrated: number\n  errors: string[]\n  skipped: number\n}\n\n/**\n * Migrate API keys from plaintext config to encrypted credential store.\n * This function:\n * 1. Reads all model profiles from the global config\n * 2. For each profile with a plaintext apiKey (not already encrypted):\n *    - Stores the key in the encrypted credential store\n *    - Updates the config to use the `encrypted:modelName` reference\n * 3. Saves the updated config\n *\n * After migration, the actual API keys are removed from the config file and stored\n * securely in ~/.minto/credentials.enc\n *\n * @returns Migration result with counts of migrated, skipped, and error entries\n */\nexport async function migrateApiKeysToEncrypted(): Promise<MigrationResult> {\n  const config = getGlobalConfig()\n  let migrated = 0\n  let skipped = 0\n  const errors: string[] = []\n\n  if (!config.modelProfiles || config.modelProfiles.length === 0) {\n    debugLogger.state('MIGRATION_NO_PROFILES', {})\n    return { migrated: 0, errors: [], skipped: 0 }\n  }\n\n  try {\n    debugLogger.state('MIGRATION_START', {\n      profileCount: config.modelProfiles.length,\n    })\n\n    // Process each model profile\n    const migratedProfiles = await Promise.all(\n      config.modelProfiles.map(async profile => {\n        if (!profile.apiKey) {\n          skipped++\n          return profile\n        }\n\n        // Skip if already encrypted\n        if (profile.apiKey.startsWith('encrypted:')) {\n          debugLogger.state('MIGRATION_SKIP_ALREADY_ENCRYPTED', {\n            modelName: profile.modelName,\n          })\n          skipped++\n          return profile\n        }\n\n        try {\n          // Store the plaintext key in encrypted credential store\n          await setApiKey(profile.modelName, profile.apiKey)\n\n          // Update the profile to reference the encrypted key\n          const migratedProfile = {\n            ...profile,\n            apiKey: `encrypted:${profile.modelName}`,\n          }\n\n          debugLogger.state('MIGRATION_SUCCESS', {\n            modelName: profile.modelName,\n            provider: profile.provider,\n          })\n\n          migrated++\n          return migratedProfile\n        } catch (error) {\n          const errorMsg =\n            error instanceof Error ? error.message : String(error)\n          const errorText = `Failed to migrate ${profile.modelName}: ${errorMsg}`\n          errors.push(errorText)\n          debugLogger.error('MIGRATION_PROFILE_ERROR', {\n            modelName: profile.modelName,\n            error: errorMsg,\n          })\n          // Return unchanged profile on error\n          return profile\n        }\n      }),\n    )\n\n    // Save the migrated config only if something changed\n    if (migrated > 0) {\n      const updatedConfig: GlobalConfig = {\n        ...config,\n        modelProfiles: migratedProfiles,\n      }\n      saveGlobalConfig(updatedConfig)\n      debugLogger.state('MIGRATION_CONFIG_SAVED', {\n        profilesMigrated: migrated,\n        profilesSkipped: skipped,\n      })\n    }\n\n    debugLogger.state('MIGRATION_COMPLETE', {\n      migrated,\n      skipped,\n      errors: errors.length,\n    })\n  } catch (error) {\n    const errorMsg = error instanceof Error ? error.message : String(error)\n    debugLogger.error('MIGRATION_FATAL_ERROR', {\n      error: errorMsg,\n    })\n    errors.push(`Fatal migration error: ${errorMsg}`)\n  }\n\n  return { migrated, errors, skipped }\n}\n"],
+  "mappings": "AAAA,SAAS,iBAAiB,wBAA2C;AACrE,SAAS,iBAAiB;AAC1B,SAAS,SAAS,mBAAmB;AAsBrC,eAAsB,4BAAsD;AAC1E,QAAM,SAAS,gBAAgB;AAC/B,MAAI,WAAW;AACf,MAAI,UAAU;AACd,QAAM,SAAmB,CAAC;AAE1B,MAAI,CAAC,OAAO,iBAAiB,OAAO,cAAc,WAAW,GAAG;AAC9D,gBAAY,MAAM,yBAAyB,CAAC,CAAC;AAC7C,WAAO,EAAE,UAAU,GAAG,QAAQ,CAAC,GAAG,SAAS,EAAE;AAAA,EAC/C;AAEA,MAAI;AACF,gBAAY,MAAM,mBAAmB;AAAA,MACnC,cAAc,OAAO,cAAc;AAAA,IACrC,CAAC;AAGD,UAAM,mBAAmB,MAAM,QAAQ;AAAA,MACrC,OAAO,cAAc,IAAI,OAAM,YAAW;AACxC,YAAI,CAAC,QAAQ,QAAQ;AACnB;AACA,iBAAO;AAAA,QACT;AAGA,YAAI,QAAQ,OAAO,WAAW,YAAY,GAAG;AAC3C,sBAAY,MAAM,oCAAoC;AAAA,YACpD,WAAW,QAAQ;AAAA,UACrB,CAAC;AACD;AACA,iBAAO;AAAA,QACT;AAEA,YAAI;AAEF,gBAAM,UAAU,QAAQ,WAAW,QAAQ,MAAM;AAGjD,gBAAM,kBAAkB;AAAA,YACtB,GAAG;AAAA,YACH,QAAQ,aAAa,QAAQ,SAAS;AAAA,UACxC;AAEA,sBAAY,MAAM,qBAAqB;AAAA,YACrC,WAAW,QAAQ;AAAA,YACnB,UAAU,QAAQ;AAAA,UACpB,CAAC;AAED;AACA,iBAAO;AAAA,QACT,SAAS,OAAO;AACd,gBAAM,WACJ,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AACvD,gBAAM,YAAY,qBAAqB,QAAQ,SAAS,KAAK,QAAQ;AACrE,iBAAO,KAAK,SAAS;AACrB,sBAAY,MAAM,2BAA2B;AAAA,YAC3C,WAAW,QAAQ;AAAA,YACnB,OAAO;AAAA,UACT,CAAC;AAED,iBAAO;AAAA,QACT;AAAA,MACF,CAAC;AAAA,IACH;AAGA,QAAI,WAAW,GAAG;AAChB,YAAM,gBAA8B;AAAA,QAClC,GAAG;AAAA,QACH,eAAe;AAAA,MACjB;AACA,uBAAiB,aAAa;AAC9B,kBAAY,MAAM,0BAA0B;AAAA,QAC1C,kBAAkB;AAAA,QAClB,iBAAiB;AAAA,MACnB,CAAC;AAAA,IACH;AAEA,gBAAY,MAAM,sBAAsB;AAAA,MACtC;AAAA,MACA;AAAA,MACA,QAAQ,OAAO;AAAA,IACjB,CAAC;AAAA,EACH,SAAS,OAAO;AACd,UAAM,WAAW,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AACtE,gBAAY,MAAM,yBAAyB;AAAA,MACzC,OAAO;AAAA,IACT,CAAC;AACD,WAAO,KAAK,0BAA0B,QAAQ,EAAE;AAAA,EAClD;AAEA,SAAO,EAAE,UAAU,QAAQ,QAAQ;AACrC;",
+  "names": []
+}

package/dist/utils/exit.js

@@ -0,0 +1,73 @@
+import { PersistentShell } from "./PersistentShell.js";
+import { shutdownMCPClients } from "../services/mcpClient.js";
+let isShuttingDown = false;
+function resetCursor() {
+  const cursorShow = "\x1B[?25h";
+  const terminal = process.stderr.isTTY ? process.stderr : process.stdout.isTTY ? process.stdout : void 0;
+  terminal?.write(`\x1B[?25h${cursorShow}`);
+}
+async function gracefulExit(code = 0) {
+  if (isShuttingDown) {
+    return;
+  }
+  isShuttingDown = true;
+  try {
+    resetCursor();
+  } catch {
+  }
+  try {
+    PersistentShell.getInstance().close();
+  } catch {
+  }
+  try {
+    await shutdownMCPClients();
+  } catch {
+  }
+  process.exit(code);
+}
+function setupExitHandlers() {
+  process.on("SIGINT", () => {
+    gracefulExit(0);
+  });
+  process.on("SIGTERM", () => {
+    gracefulExit(0);
+  });
+  process.on("SIGBREAK", () => {
+    gracefulExit(0);
+  });
+  process.on("exit", () => {
+    try {
+      resetCursor();
+    } catch {
+    }
+    try {
+      PersistentShell.getInstance().close();
+    } catch {
+    }
+  });
+  process.on("unhandledRejection", (err) => {
+    const isTimeoutError = err instanceof Error && (err.name === "TimeoutError" || err.message?.includes("timed out") || err.message?.includes("timeout"));
+    const isDOMTimeoutError = err && typeof err === "object" && "name" in err && err.name === "TimeoutError";
+    if (isTimeoutError || isDOMTimeoutError) {
+      console.error(
+        "\u26A0\uFE0F  Operation timed out:",
+        err instanceof Error ? err.message : err
+      );
+      console.error(
+        "   The operation will be retried or skipped. You can continue working."
+      );
+      return;
+    }
+    console.error("Unhandled rejection:", err);
+    gracefulExit(1);
+  });
+  process.on("uncaughtException", (err) => {
+    console.error("Uncaught exception:", err);
+    gracefulExit(1);
+  });
+}
+export {
+  gracefulExit,
+  setupExitHandlers
+};
+//# sourceMappingURL=exit.js.map

package/dist/utils/exit.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../src/utils/exit.ts"],
+  "sourcesContent": ["/**\n * Graceful exit utilities\n *\n * Provides a centralized way to exit the application gracefully,\n * ensuring resources are cleaned up properly.\n *\n * NOTE: Cost summary is now handled by useCostSummary() in cost-tracker.ts\n * which matches Kode-cli's implementation exactly.\n */\n\nimport { PersistentShell } from './PersistentShell'\nimport { shutdownMCPClients } from '../services/mcpClient'\n\n// Track if we're already shutting down to prevent multiple cleanup attempts\nlet isShuttingDown = false\n\n/**\n * Reset cursor visibility\n */\nfunction resetCursor() {\n  const cursorShow = '\\x1B[?25h'\n  const terminal = process.stderr.isTTY\n    ? process.stderr\n    : process.stdout.isTTY\n      ? process.stdout\n      : undefined\n  terminal?.write(`\\u001B[?25h${cursorShow}`)\n}\n\n/**\n * Exit gracefully with proper cleanup\n *\n * NOTE: Cost summary is NOT printed here. It's handled by useCostSummary()\n * hook's process.on('exit') handler, matching Kode-cli's pattern.\n *\n * @param code Exit code (default: 0)\n */\nexport async function gracefulExit(code = 0): Promise<void> {\n  if (isShuttingDown) {\n    return\n  }\n  isShuttingDown = true\n\n  try {\n    resetCursor()\n  } catch {}\n\n  try {\n    PersistentShell.getInstance().close()\n  } catch {}\n\n  try {\n    await shutdownMCPClients()\n  } catch {}\n\n  process.exit(code)\n}\n\n/**\n * Setup exit handlers for various signals and events\n * Should be called once during application initialization\n *\n * NOTE: Cost summary output is handled by useCostSummary() in cost-tracker.ts,\n * NOT here. This matches Kode-cli's architecture.\n */\nexport function setupExitHandlers(): void {\n  // Handle graceful shutdown signals\n  process.on('SIGINT', () => {\n    gracefulExit(0)\n  })\n\n  process.on('SIGTERM', () => {\n    gracefulExit(0)\n  })\n\n  // Windows CTRL+BREAK\n  process.on('SIGBREAK', () => {\n    gracefulExit(0)\n  })\n\n  // Final cleanup on exit (cost summary handled by useCostSummary)\n  process.on('exit', () => {\n    try {\n      resetCursor()\n    } catch {}\n    try {\n      PersistentShell.getInstance().close()\n    } catch {}\n  })\n\n  // Handle unhandled rejections\n  process.on('unhandledRejection', err => {\n    // Check if this is a timeout error that we can handle gracefully\n    const isTimeoutError =\n      err instanceof Error &&\n      (err.name === 'TimeoutError' ||\n        err.message?.includes('timed out') ||\n        err.message?.includes('timeout'))\n\n    const isDOMTimeoutError =\n      err &&\n      typeof err === 'object' &&\n      'name' in err &&\n      (err as { name: string }).name === 'TimeoutError'\n\n    if (isTimeoutError || isDOMTimeoutError) {\n      // Log timeout errors but don't exit - they're often recoverable\n      console.error(\n        '\u26A0\uFE0F  Operation timed out:',\n        err instanceof Error ? err.message : err,\n      )\n      console.error(\n        '   The operation will be retried or skipped. You can continue working.',\n      )\n      return\n    }\n\n    // For other unhandled rejections, log and exit\n    console.error('Unhandled rejection:', err)\n    gracefulExit(1)\n  })\n\n  // Handle uncaught exceptions\n  process.on('uncaughtException', err => {\n    console.error('Uncaught exception:', err)\n    gracefulExit(1)\n  })\n}\n"],
+  "mappings": "AAUA,SAAS,uBAAuB;AAChC,SAAS,0BAA0B;AAGnC,IAAI,iBAAiB;AAKrB,SAAS,cAAc;AACrB,QAAM,aAAa;AACnB,QAAM,WAAW,QAAQ,OAAO,QAC5B,QAAQ,SACR,QAAQ,OAAO,QACb,QAAQ,SACR;AACN,YAAU,MAAM,YAAc,UAAU,EAAE;AAC5C;AAUA,eAAsB,aAAa,OAAO,GAAkB;AAC1D,MAAI,gBAAgB;AAClB;AAAA,EACF;AACA,mBAAiB;AAEjB,MAAI;AACF,gBAAY;AAAA,EACd,QAAQ;AAAA,EAAC;AAET,MAAI;AACF,oBAAgB,YAAY,EAAE,MAAM;AAAA,EACtC,QAAQ;AAAA,EAAC;AAET,MAAI;AACF,UAAM,mBAAmB;AAAA,EAC3B,QAAQ;AAAA,EAAC;AAET,UAAQ,KAAK,IAAI;AACnB;AASO,SAAS,oBAA0B;AAExC,UAAQ,GAAG,UAAU,MAAM;AACzB,iBAAa,CAAC;AAAA,EAChB,CAAC;AAED,UAAQ,GAAG,WAAW,MAAM;AAC1B,iBAAa,CAAC;AAAA,EAChB,CAAC;AAGD,UAAQ,GAAG,YAAY,MAAM;AAC3B,iBAAa,CAAC;AAAA,EAChB,CAAC;AAGD,UAAQ,GAAG,QAAQ,MAAM;AACvB,QAAI;AACF,kBAAY;AAAA,IACd,QAAQ;AAAA,IAAC;AACT,QAAI;AACF,sBAAgB,YAAY,EAAE,MAAM;AAAA,IACtC,QAAQ;AAAA,IAAC;AAAA,EACX,CAAC;AAGD,UAAQ,GAAG,sBAAsB,SAAO;AAEtC,UAAM,iBACJ,eAAe,UACd,IAAI,SAAS,kBACZ,IAAI,SAAS,SAAS,WAAW,KACjC,IAAI,SAAS,SAAS,SAAS;AAEnC,UAAM,oBACJ,OACA,OAAO,QAAQ,YACf,UAAU,OACT,IAAyB,SAAS;AAErC,QAAI,kBAAkB,mBAAmB;AAEvC,cAAQ;AAAA,QACN;AAAA,QACA,eAAe,QAAQ,IAAI,UAAU;AAAA,MACvC;AACA,cAAQ;AAAA,QACN;AAAA,MACF;AACA;AAAA,IACF;AAGA,YAAQ,MAAM,wBAAwB,GAAG;AACzC,iBAAa,CAAC;AAAA,EAChB,CAAC;AAGD,UAAQ,GAAG,qBAAqB,SAAO;AACrC,YAAQ,MAAM,uBAAuB,GAAG;AACxC,iBAAa,CAAC;AAAA,EAChB,CAAC;AACH;",
+  "names": []
+}

package/dist/utils/format.js

@@ -13,12 +13,13 @@ function wrapText(text, width) {
   return lines;
 }
 function formatDuration(ms) {
-  if (ms < 6e4) {
-    return `${(ms / 1e3).toFixed(1)}s`;
+  const totalSeconds = Math.floor(ms / 1e3);
+  if (totalSeconds < 60) {
+    return `${totalSeconds}s`;
   }
-  const hours = Math.floor(ms / 36e5);
-  const minutes = Math.floor(ms % 36e5 / 6e4);
-  const seconds = (ms % 6e4 / 1e3).toFixed(1);
+  const hours = Math.floor(totalSeconds / 3600);
+  const minutes = Math.floor(totalSeconds % 3600 / 60);
+  const seconds = totalSeconds % 60;
   if (hours > 0) {
     return `${hours}h ${minutes}m ${seconds}s`;
   }
@@ -33,9 +34,76 @@ function formatNumber(number) {
     maximumFractionDigits: 1
   }).format(number).toLowerCase();
 }
+function formatTokens(tokens) {
+  if (tokens < 1e3) {
+    return `${tokens} tokens`;
+  }
+  return `${formatNumber(tokens)} tokens`;
+}
+function formatContextUsage(usedTokens, maxTokens) {
+  const percentage = usedTokens / maxTokens * 100;
+  const formatted = formatNumber(usedTokens);
+  if (percentage <= 50) {
+    return `${formatted}/${formatNumber(maxTokens)} (${percentage.toFixed(0)}%)`;
+  } else if (percentage <= 80) {
+    return `${formatted}/${formatNumber(maxTokens)} (${percentage.toFixed(0)}% \u26A0\uFE0F)`;
+  } else {
+    return `${formatted}/${formatNumber(maxTokens)} (${percentage.toFixed(0)}% \u{1F534})`;
+  }
+}
+function formatTimestamp(timestamp) {
+  const date = typeof timestamp === "number" ? new Date(timestamp) : timestamp;
+  return date.toLocaleTimeString("en-US", {
+    hour: "numeric",
+    minute: "2-digit",
+    hour12: true
+  });
+}
+function formatUrl(url, maxLength = 60) {
+  try {
+    const decoded = decodeURIComponent(url);
+    if (decoded.length <= maxLength) {
+      return decoded;
+    }
+    const urlObj = new URL(decoded);
+    const host = urlObj.host;
+    const pathStart = urlObj.pathname.slice(0, 20);
+    const remaining = maxLength - host.length - pathStart.length - 6;
+    if (remaining > 10) {
+      const pathEnd = urlObj.pathname.slice(-remaining);
+      return `${host}${pathStart}...${pathEnd}`;
+    }
+    return decoded.slice(0, maxLength - 3) + "...";
+  } catch {
+    if (url.length <= maxLength) return url;
+    return url.slice(0, maxLength - 3) + "...";
+  }
+}
+function truncateText(text, maxLength = 80) {
+  if (!text) return "";
+  const trimmed = text.trim().replace(/\n+/g, " ").replace(/\s+/g, " ");
+  if (trimmed.length <= maxLength) return trimmed;
+  return trimmed.slice(0, maxLength - 3) + "...";
+}
+function formatTokenUsage(inputTokens, outputTokens) {
+  const parts = [];
+  if (inputTokens != null && inputTokens > 0) {
+    parts.push(`\u2191 ${formatNumber(inputTokens)}`);
+  }
+  if (outputTokens != null && outputTokens > 0) {
+    parts.push(`\u2193 ${formatNumber(outputTokens)}`);
+  }
+  return parts.join(" \xB7 ");
+}
 export {
+  formatContextUsage,
   formatDuration,
   formatNumber,
+  formatTimestamp,
+  formatTokenUsage,
+  formatTokens,
+  formatUrl,
+  truncateText,
   wrapText
 };
 //# sourceMappingURL=format.js.map

package/dist/utils/format.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/utils/format.tsx"],
-  "sourcesContent": ["export function wrapText(text: string, width: number): string[] {\n  const lines: string[] = []\n  let currentLine = ''\n\n  for (const char of text) {\n    // Important: we need the spread to properly count multi-plane UTF-8 characters (eg. \uD805\uDE96)\n    if ([...currentLine].length < width) {\n      currentLine += char\n    } else {\n      lines.push(currentLine)\n      currentLine = char\n    }\n  }\n\n  if (currentLine) lines.push(currentLine)\n  return lines\n}\n\nexport function formatDuration(ms: number): string {\n  if (ms < 60000) {\n    return `${(ms / 1000).toFixed(1)}s`\n  }\n\n  const hours = Math.floor(ms / 3600000)\n  const minutes = Math.floor((ms % 3600000) / 60000)\n  const seconds = ((ms % 60000) / 1000).toFixed(1)\n\n  if (hours > 0) {\n    return `${hours}h ${minutes}m ${seconds}s`\n  }\n  if (minutes > 0) {\n    return `${minutes}m ${seconds}s`\n  }\n  return `${seconds}s`\n}\n\nexport function formatNumber(number: number): string {\n  return new Intl.NumberFormat('en', {\n    notation: 'compact',\n    maximumFractionDigits: 1,\n  })\n    .format(number) // eg. \"1321\" => \"1.3K\"\n    .toLowerCase() // eg. \"1.3K\" => \"1.3k\"\n}\n"],
-  "mappings": "AAAO,SAAS,SAAS,MAAc,OAAyB;AAC9D,QAAM,QAAkB,CAAC;AACzB,MAAI,cAAc;AAElB,aAAW,QAAQ,MAAM;AAEvB,QAAI,CAAC,GAAG,WAAW,EAAE,SAAS,OAAO;AACnC,qBAAe;AAAA,IACjB,OAAO;AACL,YAAM,KAAK,WAAW;AACtB,oBAAc;AAAA,IAChB;AAAA,EACF;AAEA,MAAI,YAAa,OAAM,KAAK,WAAW;AACvC,SAAO;AACT;AAEO,SAAS,eAAe,IAAoB;AACjD,MAAI,KAAK,KAAO;AACd,WAAO,IAAI,KAAK,KAAM,QAAQ,CAAC,CAAC;AAAA,EAClC;AAEA,QAAM,QAAQ,KAAK,MAAM,KAAK,IAAO;AACrC,QAAM,UAAU,KAAK,MAAO,KAAK,OAAW,GAAK;AACjD,QAAM,WAAY,KAAK,MAAS,KAAM,QAAQ,CAAC;AAE/C,MAAI,QAAQ,GAAG;AACb,WAAO,GAAG,KAAK,KAAK,OAAO,KAAK,OAAO;AAAA,EACzC;AACA,MAAI,UAAU,GAAG;AACf,WAAO,GAAG,OAAO,KAAK,OAAO;AAAA,EAC/B;AACA,SAAO,GAAG,OAAO;AACnB;AAEO,SAAS,aAAa,QAAwB;AACnD,SAAO,IAAI,KAAK,aAAa,MAAM;AAAA,IACjC,UAAU;AAAA,IACV,uBAAuB;AAAA,EACzB,CAAC,EACE,OAAO,MAAM,EACb,YAAY;AACjB;",
+  "sourcesContent": ["export function wrapText(text: string, width: number): string[] {\n  const lines: string[] = []\n  let currentLine = ''\n\n  for (const char of text) {\n    // Important: we need the spread to properly count multi-plane UTF-8 characters (eg. \uD805\uDE96)\n    if ([...currentLine].length < width) {\n      currentLine += char\n    } else {\n      lines.push(currentLine)\n      currentLine = char\n    }\n  }\n\n  if (currentLine) lines.push(currentLine)\n  return lines\n}\n\nexport function formatDuration(ms: number): string {\n  const totalSeconds = Math.floor(ms / 1000)\n\n  if (totalSeconds < 60) {\n    return `${totalSeconds}s`\n  }\n\n  const hours = Math.floor(totalSeconds / 3600)\n  const minutes = Math.floor((totalSeconds % 3600) / 60)\n  const seconds = totalSeconds % 60\n\n  if (hours > 0) {\n    return `${hours}h ${minutes}m ${seconds}s`\n  }\n  if (minutes > 0) {\n    return `${minutes}m ${seconds}s`\n  }\n  return `${seconds}s`\n}\n\nexport function formatNumber(number: number): string {\n  return new Intl.NumberFormat('en', {\n    notation: 'compact',\n    maximumFractionDigits: 1,\n  })\n    .format(number) // eg. \"1321\" => \"1.3K\"\n    .toLowerCase() // eg. \"1.3K\" => \"1.3k\"\n}\n\n/**\n * Format token count for display (e.g., 42000 -> \"42k tokens\")\n * More descriptive than formatNumber for token-specific contexts\n */\nexport function formatTokens(tokens: number): string {\n  if (tokens < 1000) {\n    return `${tokens} tokens`\n  }\n  return `${formatNumber(tokens)} tokens`\n}\n\n/**\n * Format context usage as percentage with visual indicator\n */\nexport function formatContextUsage(\n  usedTokens: number,\n  maxTokens: number,\n): string {\n  const percentage = (usedTokens / maxTokens) * 100\n  const formatted = formatNumber(usedTokens)\n\n  if (percentage <= 50) {\n    return `${formatted}/${formatNumber(maxTokens)} (${percentage.toFixed(0)}%)`\n  } else if (percentage <= 80) {\n    return `${formatted}/${formatNumber(maxTokens)} (${percentage.toFixed(0)}% \u26A0\uFE0F)`\n  } else {\n    return `${formatted}/${formatNumber(maxTokens)} (${percentage.toFixed(0)}% \uD83D\uDD34)`\n  }\n}\n\n/**\n * Format timestamp for display (e.g., \"12:20 AM\")\n * Uses 12-hour format with AM/PM indicator like Claude Code\n */\nexport function formatTimestamp(timestamp: number | Date): string {\n  const date = typeof timestamp === 'number' ? new Date(timestamp) : timestamp\n  return date.toLocaleTimeString('en-US', {\n    hour: 'numeric',\n    minute: '2-digit',\n    hour12: true,\n  })\n}\n\n/**\n * Format URL for display\n * - Decodes URL-encoded characters for readability\n * - Truncates to max length with ellipsis\n * - Shows host + path truncated\n */\nexport function formatUrl(url: string, maxLength: number = 60): string {\n  try {\n    // Decode URL-encoded characters\n    const decoded = decodeURIComponent(url)\n\n    // Truncate if too long\n    if (decoded.length <= maxLength) {\n      return decoded\n    }\n\n    // Try to preserve host and beginning of path\n    const urlObj = new URL(decoded)\n    const host = urlObj.host\n    const pathStart = urlObj.pathname.slice(0, 20)\n\n    // Format: host/path.../end\n    const remaining = maxLength - host.length - pathStart.length - 6 // \"...\" x2\n    if (remaining > 10) {\n      const pathEnd = urlObj.pathname.slice(-remaining)\n      return `${host}${pathStart}...${pathEnd}`\n    }\n\n    // Fallback: simple truncation\n    return decoded.slice(0, maxLength - 3) + '...'\n  } catch {\n    // If URL parsing fails, just truncate\n    if (url.length <= maxLength) return url\n    return url.slice(0, maxLength - 3) + '...'\n  }\n}\n\n/**\n * Truncate text to a maximum length with ellipsis\n */\nexport function truncateText(text: string, maxLength: number = 80): string {\n  if (!text) return ''\n  const trimmed = text.trim().replace(/\\n+/g, ' ').replace(/\\s+/g, ' ')\n  if (trimmed.length <= maxLength) return trimmed\n  return trimmed.slice(0, maxLength - 3) + '...'\n}\n\n/**\n * Format token usage with up/down arrows for input/output\n * e.g., \"\u2191 8.2k \u00B7 \u2193 1.2k\"\n */\nexport function formatTokenUsage(\n  inputTokens?: number,\n  outputTokens?: number,\n): string {\n  const parts: string[] = []\n  if (inputTokens != null && inputTokens > 0) {\n    parts.push(`\u2191 ${formatNumber(inputTokens)}`)\n  }\n  if (outputTokens != null && outputTokens > 0) {\n    parts.push(`\u2193 ${formatNumber(outputTokens)}`)\n  }\n  return parts.join(' \u00B7 ')\n}\n"],
+  "mappings": "AAAO,SAAS,SAAS,MAAc,OAAyB;AAC9D,QAAM,QAAkB,CAAC;AACzB,MAAI,cAAc;AAElB,aAAW,QAAQ,MAAM;AAEvB,QAAI,CAAC,GAAG,WAAW,EAAE,SAAS,OAAO;AACnC,qBAAe;AAAA,IACjB,OAAO;AACL,YAAM,KAAK,WAAW;AACtB,oBAAc;AAAA,IAChB;AAAA,EACF;AAEA,MAAI,YAAa,OAAM,KAAK,WAAW;AACvC,SAAO;AACT;AAEO,SAAS,eAAe,IAAoB;AACjD,QAAM,eAAe,KAAK,MAAM,KAAK,GAAI;AAEzC,MAAI,eAAe,IAAI;AACrB,WAAO,GAAG,YAAY;AAAA,EACxB;AAEA,QAAM,QAAQ,KAAK,MAAM,eAAe,IAAI;AAC5C,QAAM,UAAU,KAAK,MAAO,eAAe,OAAQ,EAAE;AACrD,QAAM,UAAU,eAAe;AAE/B,MAAI,QAAQ,GAAG;AACb,WAAO,GAAG,KAAK,KAAK,OAAO,KAAK,OAAO;AAAA,EACzC;AACA,MAAI,UAAU,GAAG;AACf,WAAO,GAAG,OAAO,KAAK,OAAO;AAAA,EAC/B;AACA,SAAO,GAAG,OAAO;AACnB;AAEO,SAAS,aAAa,QAAwB;AACnD,SAAO,IAAI,KAAK,aAAa,MAAM;AAAA,IACjC,UAAU;AAAA,IACV,uBAAuB;AAAA,EACzB,CAAC,EACE,OAAO,MAAM,EACb,YAAY;AACjB;AAMO,SAAS,aAAa,QAAwB;AACnD,MAAI,SAAS,KAAM;AACjB,WAAO,GAAG,MAAM;AAAA,EAClB;AACA,SAAO,GAAG,aAAa,MAAM,CAAC;AAChC;AAKO,SAAS,mBACd,YACA,WACQ;AACR,QAAM,aAAc,aAAa,YAAa;AAC9C,QAAM,YAAY,aAAa,UAAU;AAEzC,MAAI,cAAc,IAAI;AACpB,WAAO,GAAG,SAAS,IAAI,aAAa,SAAS,CAAC,KAAK,WAAW,QAAQ,CAAC,CAAC;AAAA,EAC1E,WAAW,cAAc,IAAI;AAC3B,WAAO,GAAG,SAAS,IAAI,aAAa,SAAS,CAAC,KAAK,WAAW,QAAQ,CAAC,CAAC;AAAA,EAC1E,OAAO;AACL,WAAO,GAAG,SAAS,IAAI,aAAa,SAAS,CAAC,KAAK,WAAW,QAAQ,CAAC,CAAC;AAAA,EAC1E;AACF;AAMO,SAAS,gBAAgB,WAAkC;AAChE,QAAM,OAAO,OAAO,cAAc,WAAW,IAAI,KAAK,SAAS,IAAI;AACnE,SAAO,KAAK,mBAAmB,SAAS;AAAA,IACtC,MAAM;AAAA,IACN,QAAQ;AAAA,IACR,QAAQ;AAAA,EACV,CAAC;AACH;AAQO,SAAS,UAAU,KAAa,YAAoB,IAAY;AACrE,MAAI;AAEF,UAAM,UAAU,mBAAmB,GAAG;AAGtC,QAAI,QAAQ,UAAU,WAAW;AAC/B,aAAO;AAAA,IACT;AAGA,UAAM,SAAS,IAAI,IAAI,OAAO;AAC9B,UAAM,OAAO,OAAO;AACpB,UAAM,YAAY,OAAO,SAAS,MAAM,GAAG,EAAE;AAG7C,UAAM,YAAY,YAAY,KAAK,SAAS,UAAU,SAAS;AAC/D,QAAI,YAAY,IAAI;AAClB,YAAM,UAAU,OAAO,SAAS,MAAM,CAAC,SAAS;AAChD,aAAO,GAAG,IAAI,GAAG,SAAS,MAAM,OAAO;AAAA,IACzC;AAGA,WAAO,QAAQ,MAAM,GAAG,YAAY,CAAC,IAAI;AAAA,EAC3C,QAAQ;AAEN,QAAI,IAAI,UAAU,UAAW,QAAO;AACpC,WAAO,IAAI,MAAM,GAAG,YAAY,CAAC,IAAI;AAAA,EACvC;AACF;AAKO,SAAS,aAAa,MAAc,YAAoB,IAAY;AACzE,MAAI,CAAC,KAAM,QAAO;AAClB,QAAM,UAAU,KAAK,KAAK,EAAE,QAAQ,QAAQ,GAAG,EAAE,QAAQ,QAAQ,GAAG;AACpE,MAAI,QAAQ,UAAU,UAAW,QAAO;AACxC,SAAO,QAAQ,MAAM,GAAG,YAAY,CAAC,IAAI;AAC3C;AAMO,SAAS,iBACd,aACA,cACQ;AACR,QAAM,QAAkB,CAAC;AACzB,MAAI,eAAe,QAAQ,cAAc,GAAG;AAC1C,UAAM,KAAK,UAAK,aAAa,WAAW,CAAC,EAAE;AAAA,EAC7C;AACA,MAAI,gBAAgB,QAAQ,eAAe,GAAG;AAC5C,UAAM,KAAK,UAAK,aAAa,YAAY,CAAC,EAAE;AAAA,EAC9C;AACA,SAAO,MAAM,KAAK,QAAK;AACzB;",
   "names": []
 }

package/dist/utils/generators.js

@@ -1,3 +1,4 @@
+import { debug } from "./debugLogger.js";
 const NO_VALUE = Symbol("NO_VALUE");
 async function lastX(as) {
   let lastValue = NO_VALUE;
@@ -9,35 +10,104 @@ async function lastX(as) {
   }
   return lastValue;
 }
-async function* all(generators, concurrencyCap = Infinity) {
+async function* all(generators, concurrencyCap = Infinity, abortSignal) {
+  let generatorIdCounter = 0;
+  const generatorIds = /* @__PURE__ */ new Map();
+  const activeGenerators = /* @__PURE__ */ new Set();
   const next = (generator) => {
+    let id = generatorIds.get(generator);
+    if (id === void 0) {
+      id = generatorIdCounter++;
+      generatorIds.set(generator, id);
+    }
+    activeGenerators.add(generator);
     const promise = generator.next().then(({ done, value }) => ({
       done,
       value,
       generator,
-      promise
+      promise,
+      id
     }));
     return promise;
   };
+  const terminateAll = async () => {
+    debug.flow("ALL_GENERATORS_ABORT", {
+      activeCount: activeGenerators.size
+    });
+    for (const gen of activeGenerators) {
+      try {
+        await gen.return(void 0);
+      } catch {
+      }
+    }
+    activeGenerators.clear();
+  };
   const waiting = [...generators];
   const promises = /* @__PURE__ */ new Set();
+  debug.flow("ALL_GENERATORS_START", {
+    totalGenerators: generators.length,
+    concurrencyCap,
+    hasAbortSignal: !!abortSignal
+  });
+  if (abortSignal?.aborted) {
+    debug.flow("ALL_GENERATORS_ALREADY_ABORTED", {});
+    return;
+  }
   while (promises.size < concurrencyCap && waiting.length > 0) {
     const gen = waiting.shift();
     promises.add(next(gen));
   }
+  debug.flow("ALL_GENERATORS_INITIAL_BATCH", {
+    activeCount: promises.size,
+    waitingCount: waiting.length
+  });
+  let yieldCount = 0;
+  let completedCount = 0;
   while (promises.size > 0) {
-    const { done, value, generator, promise } = await Promise.race(promises);
+    if (abortSignal?.aborted) {
+      debug.flow("ALL_GENERATORS_ABORT_DETECTED", {
+        completedCount,
+        remainingActive: promises.size
+      });
+      await terminateAll();
+      return;
+    }
+    const { done, value, generator, promise, id } = await Promise.race(promises);
     promises.delete(promise);
+    if (abortSignal?.aborted) {
+      debug.flow("ALL_GENERATORS_ABORT_AFTER_RACE", {
+        completedCount,
+        remainingActive: promises.size
+      });
+      await terminateAll();
+      return;
+    }
     if (!done) {
       promises.add(next(generator));
       if (value !== void 0) {
+        yieldCount++;
         yield value;
       }
-    } else if (waiting.length > 0) {
-      const nextGen = waiting.shift();
-      promises.add(next(nextGen));
+    } else {
+      completedCount++;
+      activeGenerators.delete(generator);
+      debug.flow("ALL_GENERATOR_COMPLETED", {
+        generatorId: id,
+        completedCount,
+        remainingActive: promises.size,
+        waitingCount: waiting.length
+      });
+      if (waiting.length > 0) {
+        const nextGen = waiting.shift();
+        promises.add(next(nextGen));
+      }
     }
   }
+  debug.flow("ALL_GENERATORS_DONE", {
+    totalGenerators: generators.length,
+    totalYields: yieldCount,
+    totalCompleted: completedCount
+  });
 }
 export {
   all,