@within-7/minto 0.4.2 → 0.4.3

package/dist/utils/conversationRecovery.js

@@ -1,54 +0,0 @@
-import fs from "fs/promises";
-import { logError } from "./log.js";
-async function loadMessagesFromLog(logPath, tools) {
-  try {
-    const content = await fs.readFile(logPath, "utf-8");
-    const messages = JSON.parse(content);
-    return deserializeMessages(messages, tools);
-  } catch (error) {
-    logError(`Failed to load messages from ${logPath}: ${error}`);
-    throw new Error(`Failed to load messages from log: ${error}`);
-  }
-}
-function deserializeProgressMessage(serialized, tools) {
-  return {
-    type: "progress",
-    uuid: serialized.uuid,
-    toolUseID: serialized.toolUseID,
-    // Convert Array back to Set
-    siblingToolUseIDs: new Set(serialized.siblingToolUseIDs || []),
-    // Restore content (AssistantMessage)
-    content: serialized.content,
-    // Restore tools reference - use current tools since saved tools may be stale
-    tools,
-    // normalizedMessages will be empty - they were not persisted to avoid circular refs
-    // This is OK because they're only used for live display, not for resume logic
-    normalizedMessages: []
-  };
-}
-function deserializeMessages(messages, tools) {
-  const toolMap = new Map(tools.map((tool) => [tool.name, tool]));
-  return messages.map((message) => {
-    if (message.type === "progress") {
-      return deserializeProgressMessage(message, tools);
-    }
-    const clonedMessage = JSON.parse(JSON.stringify(message));
-    if (clonedMessage.toolCalls) {
-      clonedMessage.toolCalls = clonedMessage.toolCalls.map((toolCall) => {
-        if (toolCall.tool && typeof toolCall.tool === "string") {
-          const actualTool = toolMap.get(toolCall.tool);
-          if (actualTool) {
-            toolCall.tool = actualTool;
-          }
-        }
-        return toolCall;
-      });
-    }
-    return clonedMessage;
-  });
-}
-export {
-  deserializeMessages,
-  loadMessagesFromLog
-};
-//# sourceMappingURL=conversationRecovery.js.map

package/dist/utils/conversationRecovery.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../src/utils/conversationRecovery.ts"],
-  "sourcesContent": ["import fs from 'fs/promises'\nimport { logError } from './log'\nimport { Tool } from '@tool'\nimport { ProgressMessage } from '@query'\n\n/**\n * Load messages from a log file\n * @param logPath Path to the log file\n * @param tools Available tools for deserializing tool usage\n * @returns Array of deserialized messages\n */\nexport async function loadMessagesFromLog(\n  logPath: string,\n  tools: Tool[],\n): Promise<any[]> {\n  try {\n    const content = await fs.readFile(logPath, 'utf-8')\n    const messages = JSON.parse(content)\n    return deserializeMessages(messages, tools)\n  } catch (error) {\n    logError(`Failed to load messages from ${logPath}: ${error}`)\n    throw new Error(`Failed to load messages from log: ${error}`)\n  }\n}\n\n/**\n * Deserialize a progress message from its serialized format.\n * Converts siblingToolUseIDs from Array back to Set, and reconnects tools.\n */\nfunction deserializeProgressMessage(\n  serialized: any,\n  tools: Tool[],\n): ProgressMessage {\n  return {\n    type: 'progress',\n    uuid: serialized.uuid,\n    toolUseID: serialized.toolUseID,\n    // Convert Array back to Set\n    siblingToolUseIDs: new Set(serialized.siblingToolUseIDs || []),\n    // Restore content (AssistantMessage)\n    content: serialized.content,\n    // Restore tools reference - use current tools since saved tools may be stale\n    tools: tools,\n    // normalizedMessages will be empty - they were not persisted to avoid circular refs\n    // This is OK because they're only used for live display, not for resume logic\n    normalizedMessages: [],\n  }\n}\n\n/**\n * Deserialize messages from a saved format, reconnecting any tool references\n * @param messages The serialized message array\n * @param tools Available tools to reconnect\n * @returns Deserialized messages with reconnected tool references\n */\nexport function deserializeMessages(messages: any[], tools: Tool[]): any[] {\n  // Map of tool names to actual tool instances for reconnection\n  const toolMap = new Map(tools.map(tool => [tool.name, tool]))\n\n  return messages.map(message => {\n    // Handle progress messages specially - they need Set reconstruction\n    if (message.type === 'progress') {\n      return deserializeProgressMessage(message, tools)\n    }\n\n    // Deep clone the message to avoid mutation issues\n    const clonedMessage = JSON.parse(JSON.stringify(message))\n\n    // If the message has tool calls, reconnect them to actual tool instances\n    if (clonedMessage.toolCalls) {\n      clonedMessage.toolCalls = clonedMessage.toolCalls.map((toolCall: any) => {\n        // Reconnect tool reference if it exists\n        if (toolCall.tool && typeof toolCall.tool === 'string') {\n          const actualTool = toolMap.get(toolCall.tool)\n          if (actualTool) {\n            toolCall.tool = actualTool\n          }\n        }\n        return toolCall\n      })\n    }\n\n    return clonedMessage\n  })\n}\n"],
-  "mappings": "AAAA,OAAO,QAAQ;AACf,SAAS,gBAAgB;AAUzB,eAAsB,oBACpB,SACA,OACgB;AAChB,MAAI;AACF,UAAM,UAAU,MAAM,GAAG,SAAS,SAAS,OAAO;AAClD,UAAM,WAAW,KAAK,MAAM,OAAO;AACnC,WAAO,oBAAoB,UAAU,KAAK;AAAA,EAC5C,SAAS,OAAO;AACd,aAAS,gCAAgC,OAAO,KAAK,KAAK,EAAE;AAC5D,UAAM,IAAI,MAAM,qCAAqC,KAAK,EAAE;AAAA,EAC9D;AACF;AAMA,SAAS,2BACP,YACA,OACiB;AACjB,SAAO;AAAA,IACL,MAAM;AAAA,IACN,MAAM,WAAW;AAAA,IACjB,WAAW,WAAW;AAAA;AAAA,IAEtB,mBAAmB,IAAI,IAAI,WAAW,qBAAqB,CAAC,CAAC;AAAA;AAAA,IAE7D,SAAS,WAAW;AAAA;AAAA,IAEpB;AAAA;AAAA;AAAA,IAGA,oBAAoB,CAAC;AAAA,EACvB;AACF;AAQO,SAAS,oBAAoB,UAAiB,OAAsB;AAEzE,QAAM,UAAU,IAAI,IAAI,MAAM,IAAI,UAAQ,CAAC,KAAK,MAAM,IAAI,CAAC,CAAC;AAE5D,SAAO,SAAS,IAAI,aAAW;AAE7B,QAAI,QAAQ,SAAS,YAAY;AAC/B,aAAO,2BAA2B,SAAS,KAAK;AAAA,IAClD;AAGA,UAAM,gBAAgB,KAAK,MAAM,KAAK,UAAU,OAAO,CAAC;AAGxD,QAAI,cAAc,WAAW;AAC3B,oBAAc,YAAY,cAAc,UAAU,IAAI,CAAC,aAAkB;AAEvE,YAAI,SAAS,QAAQ,OAAO,SAAS,SAAS,UAAU;AACtD,gBAAM,aAAa,QAAQ,IAAI,SAAS,IAAI;AAC5C,cAAI,YAAY;AACd,qBAAS,OAAO;AAAA,UAClB;AAAA,QACF;AACA,eAAO;AAAA,MACT,CAAC;AAAA,IACH;AAEA,WAAO;AAAA,EACT,CAAC;AACH;",
-  "names": []
-}

package/dist/utils/credentials/CredentialStore.js

@@ -1 +0,0 @@
-//# sourceMappingURL=CredentialStore.js.map

package/dist/utils/credentials/CredentialStore.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": [],
-  "sourcesContent": [],
-  "mappings": "",
-  "names": []
-}

package/dist/utils/credentials/EncryptedFileStore.js

@@ -1,157 +0,0 @@
-import {
-  createCipheriv,
-  createDecipheriv,
-  randomBytes,
-  scryptSync
-} from "crypto";
-import {
-  readFileSync,
-  writeFileSync,
-  existsSync,
-  chmodSync,
-  mkdirSync
-} from "fs";
-import { join } from "path";
-import { homedir, hostname } from "os";
-import { debug as debugLogger } from "../debugLogger.js";
-const ALGORITHM = "aes-256-gcm";
-const SALT = "minto-credentials-salt-v1";
-const CREDENTIALS_DIR = join(homedir(), ".minto");
-const CREDENTIALS_FILE = join(CREDENTIALS_DIR, "credentials.enc");
-function getMachineId() {
-  const username = process.env.USER || process.env.USERNAME || "unknown";
-  const machineHostname = hostname();
-  const homeDir = homedir();
-  return `${machineHostname}:${username}:${homeDir}`;
-}
-class EncryptedFileStore {
-  /**
-   * Derive a consistent encryption key from the machine ID using scrypt KDF
-   */
-  getEncryptionKey() {
-    const machineId = getMachineId();
-    return scryptSync(machineId, SALT, 32);
-  }
-  /**
-   * Ensure credentials directory exists with proper permissions
-   */
-  ensureCredentialsDir() {
-    if (!existsSync(CREDENTIALS_DIR)) {
-      mkdirSync(CREDENTIALS_DIR, { mode: 448, recursive: true });
-    }
-  }
-  /**
-   * Load and decrypt credentials from disk
-   */
-  loadCredentials() {
-    if (!existsSync(CREDENTIALS_FILE)) {
-      debugLogger.state("CREDENTIALS_FILE_NOT_FOUND", {
-        path: CREDENTIALS_FILE
-      });
-      return {};
-    }
-    try {
-      const encryptedData = readFileSync(CREDENTIALS_FILE);
-      if (encryptedData.length < 32) {
-        debugLogger.warn("CREDENTIALS_FILE_TOO_SHORT", {
-          path: CREDENTIALS_FILE,
-          size: encryptedData.length
-        });
-        return {};
-      }
-      const iv = encryptedData.subarray(0, 16);
-      const authTag = encryptedData.subarray(16, 32);
-      const encrypted = encryptedData.subarray(32);
-      const key = this.getEncryptionKey();
-      const decipher = createDecipheriv(ALGORITHM, key, iv);
-      decipher.setAuthTag(authTag);
-      const decrypted = Buffer.concat([
-        decipher.update(encrypted),
-        decipher.final()
-      ]);
-      const credentials = JSON.parse(decrypted.toString("utf-8"));
-      debugLogger.state("CREDENTIALS_LOADED", {
-        path: CREDENTIALS_FILE,
-        count: Object.keys(credentials).length
-      });
-      return credentials;
-    } catch (error) {
-      const errorMsg = error instanceof Error ? error.message : String(error);
-      debugLogger.error("CREDENTIALS_LOAD_ERROR", {
-        path: CREDENTIALS_FILE,
-        error: errorMsg,
-        errorType: error instanceof Error ? error.constructor.name : typeof error
-      });
-      return {};
-    }
-  }
-  /**
-   * Encrypt and save credentials to disk
-   */
-  saveCredentials(credentials) {
-    try {
-      this.ensureCredentialsDir();
-      const key = this.getEncryptionKey();
-      const iv = randomBytes(16);
-      const cipher = createCipheriv(ALGORITHM, key, iv);
-      const plaintext = JSON.stringify(credentials);
-      const encrypted = Buffer.concat([
-        cipher.update(plaintext, "utf-8"),
-        cipher.final()
-      ]);
-      const authTag = cipher.getAuthTag();
-      const combined = Buffer.concat([iv, authTag, encrypted]);
-      writeFileSync(CREDENTIALS_FILE, combined);
-      chmodSync(CREDENTIALS_FILE, 384);
-      debugLogger.state("CREDENTIALS_SAVED", {
-        path: CREDENTIALS_FILE,
-        size: combined.length
-      });
-    } catch (error) {
-      const errorMsg = error instanceof Error ? error.message : String(error);
-      debugLogger.error("CREDENTIALS_SAVE_ERROR", {
-        path: CREDENTIALS_FILE,
-        error: errorMsg
-      });
-      throw error;
-    }
-  }
-  /**
-   * Generate a composite key for storing credentials
-   */
-  makeKey(service, account) {
-    return `${service}:${account}`;
-  }
-  async get(service, account) {
-    const credentials = this.loadCredentials();
-    const key = this.makeKey(service, account);
-    return credentials[key] ?? null;
-  }
-  async set(service, account, password) {
-    const credentials = this.loadCredentials();
-    credentials[this.makeKey(service, account)] = password;
-    this.saveCredentials(credentials);
-  }
-  async delete(service, account) {
-    const credentials = this.loadCredentials();
-    const key = this.makeKey(service, account);
-    delete credentials[key];
-    this.saveCredentials(credentials);
-  }
-  async findCredentials(service) {
-    const credentials = this.loadCredentials();
-    const prefix = `${service}:`;
-    const results = [];
-    for (const [key, password] of Object.entries(credentials)) {
-      if (key.startsWith(prefix)) {
-        const account = key.slice(prefix.length);
-        results.push({ account, password });
-      }
-    }
-    return results;
-  }
-}
-export {
-  EncryptedFileStore
-};
-//# sourceMappingURL=EncryptedFileStore.js.map

package/dist/utils/credentials/EncryptedFileStore.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../src/utils/credentials/EncryptedFileStore.ts"],
-  "sourcesContent": ["import {\n  createCipheriv,\n  createDecipheriv,\n  randomBytes,\n  scryptSync,\n} from 'crypto'\nimport {\n  readFileSync,\n  writeFileSync,\n  existsSync,\n  chmodSync,\n  mkdirSync,\n} from 'fs'\nimport { join, dirname } from 'path'\nimport { homedir, hostname } from 'os'\nimport type { CredentialStore } from './CredentialStore'\nimport { debug as debugLogger } from '../debugLogger'\n\nconst ALGORITHM = 'aes-256-gcm'\nconst SALT = 'minto-credentials-salt-v1'\nconst CREDENTIALS_DIR = join(homedir(), '.minto')\nconst CREDENTIALS_FILE = join(CREDENTIALS_DIR, 'credentials.enc')\n\n/**\n * Get a machine identifier for deterministic key derivation.\n * Uses hostname + username + homedir to create a stable machine-specific identifier.\n */\nfunction getMachineId(): string {\n  const username = process.env.USER || process.env.USERNAME || 'unknown'\n  const machineHostname = hostname()\n  const homeDir = homedir()\n  return `${machineHostname}:${username}:${homeDir}`\n}\n\n/**\n * Encrypted file-based credential store using AES-256-GCM encryption.\n * Credentials are stored in ~/.minto/credentials.enc with machine-specific encryption.\n */\nexport class EncryptedFileStore implements CredentialStore {\n  /**\n   * Derive a consistent encryption key from the machine ID using scrypt KDF\n   */\n  private getEncryptionKey(): Buffer {\n    const machineId = getMachineId()\n    // scrypt(password, salt, keylen, options)\n    return scryptSync(machineId, SALT, 32)\n  }\n\n  /**\n   * Ensure credentials directory exists with proper permissions\n   */\n  private ensureCredentialsDir(): void {\n    if (!existsSync(CREDENTIALS_DIR)) {\n      mkdirSync(CREDENTIALS_DIR, { mode: 0o700, recursive: true })\n    }\n  }\n\n  /**\n   * Load and decrypt credentials from disk\n   */\n  private loadCredentials(): Record<string, string> {\n    if (!existsSync(CREDENTIALS_FILE)) {\n      debugLogger.state('CREDENTIALS_FILE_NOT_FOUND', {\n        path: CREDENTIALS_FILE,\n      })\n      return {}\n    }\n\n    try {\n      const encryptedData = readFileSync(CREDENTIALS_FILE)\n\n      // Format: iv (16) + authTag (16) + encryptedContent\n      if (encryptedData.length < 32) {\n        debugLogger.warn('CREDENTIALS_FILE_TOO_SHORT', {\n          path: CREDENTIALS_FILE,\n          size: encryptedData.length,\n        })\n        return {}\n      }\n\n      const iv = encryptedData.subarray(0, 16)\n      const authTag = encryptedData.subarray(16, 32)\n      const encrypted = encryptedData.subarray(32)\n\n      const key = this.getEncryptionKey()\n      const decipher = createDecipheriv(ALGORITHM, key, iv)\n      decipher.setAuthTag(authTag)\n\n      const decrypted = Buffer.concat([\n        decipher.update(encrypted),\n        decipher.final(),\n      ])\n\n      const credentials = JSON.parse(decrypted.toString('utf-8'))\n      debugLogger.state('CREDENTIALS_LOADED', {\n        path: CREDENTIALS_FILE,\n        count: Object.keys(credentials).length,\n      })\n\n      return credentials as Record<string, string>\n    } catch (error) {\n      const errorMsg = error instanceof Error ? error.message : String(error)\n      debugLogger.error('CREDENTIALS_LOAD_ERROR', {\n        path: CREDENTIALS_FILE,\n        error: errorMsg,\n        errorType:\n          error instanceof Error ? error.constructor.name : typeof error,\n      })\n      return {}\n    }\n  }\n\n  /**\n   * Encrypt and save credentials to disk\n   */\n  private saveCredentials(credentials: Record<string, string>): void {\n    try {\n      this.ensureCredentialsDir()\n\n      const key = this.getEncryptionKey()\n      const iv = randomBytes(16)\n      const cipher = createCipheriv(ALGORITHM, key, iv)\n\n      const plaintext = JSON.stringify(credentials)\n      const encrypted = Buffer.concat([\n        cipher.update(plaintext, 'utf-8'),\n        cipher.final(),\n      ])\n      const authTag = cipher.getAuthTag()\n\n      // Format: iv (16) + authTag (16) + encryptedContent\n      const combined = Buffer.concat([iv, authTag, encrypted])\n\n      writeFileSync(CREDENTIALS_FILE, combined)\n      // Set strict permissions: readable/writable only by owner\n      chmodSync(CREDENTIALS_FILE, 0o600)\n\n      debugLogger.state('CREDENTIALS_SAVED', {\n        path: CREDENTIALS_FILE,\n        size: combined.length,\n      })\n    } catch (error) {\n      const errorMsg = error instanceof Error ? error.message : String(error)\n      debugLogger.error('CREDENTIALS_SAVE_ERROR', {\n        path: CREDENTIALS_FILE,\n        error: errorMsg,\n      })\n      throw error\n    }\n  }\n\n  /**\n   * Generate a composite key for storing credentials\n   */\n  private makeKey(service: string, account: string): string {\n    return `${service}:${account}`\n  }\n\n  async get(service: string, account: string): Promise<string | null> {\n    const credentials = this.loadCredentials()\n    const key = this.makeKey(service, account)\n    return credentials[key] ?? null\n  }\n\n  async set(service: string, account: string, password: string): Promise<void> {\n    const credentials = this.loadCredentials()\n    credentials[this.makeKey(service, account)] = password\n    this.saveCredentials(credentials)\n  }\n\n  async delete(service: string, account: string): Promise<void> {\n    const credentials = this.loadCredentials()\n    const key = this.makeKey(service, account)\n    delete credentials[key]\n    this.saveCredentials(credentials)\n  }\n\n  async findCredentials(\n    service: string,\n  ): Promise<{ account: string; password: string }[]> {\n    const credentials = this.loadCredentials()\n    const prefix = `${service}:`\n    const results: { account: string; password: string }[] = []\n\n    for (const [key, password] of Object.entries(credentials)) {\n      if (key.startsWith(prefix)) {\n        const account = key.slice(prefix.length)\n        results.push({ account, password })\n      }\n    }\n\n    return results\n  }\n}\n"],
-  "mappings": "AAAA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,YAAqB;AAC9B,SAAS,SAAS,gBAAgB;AAElC,SAAS,SAAS,mBAAmB;AAErC,MAAM,YAAY;AAClB,MAAM,OAAO;AACb,MAAM,kBAAkB,KAAK,QAAQ,GAAG,QAAQ;AAChD,MAAM,mBAAmB,KAAK,iBAAiB,iBAAiB;AAMhE,SAAS,eAAuB;AAC9B,QAAM,WAAW,QAAQ,IAAI,QAAQ,QAAQ,IAAI,YAAY;AAC7D,QAAM,kBAAkB,SAAS;AACjC,QAAM,UAAU,QAAQ;AACxB,SAAO,GAAG,eAAe,IAAI,QAAQ,IAAI,OAAO;AAClD;AAMO,MAAM,mBAA8C;AAAA;AAAA;AAAA;AAAA,EAIjD,mBAA2B;AACjC,UAAM,YAAY,aAAa;AAE/B,WAAO,WAAW,WAAW,MAAM,EAAE;AAAA,EACvC;AAAA;AAAA;AAAA;AAAA,EAKQ,uBAA6B;AACnC,QAAI,CAAC,WAAW,eAAe,GAAG;AAChC,gBAAU,iBAAiB,EAAE,MAAM,KAAO,WAAW,KAAK,CAAC;AAAA,IAC7D;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKQ,kBAA0C;AAChD,QAAI,CAAC,WAAW,gBAAgB,GAAG;AACjC,kBAAY,MAAM,8BAA8B;AAAA,QAC9C,MAAM;AAAA,MACR,CAAC;AACD,aAAO,CAAC;AAAA,IACV;AAEA,QAAI;AACF,YAAM,gBAAgB,aAAa,gBAAgB;AAGnD,UAAI,cAAc,SAAS,IAAI;AAC7B,oBAAY,KAAK,8BAA8B;AAAA,UAC7C,MAAM;AAAA,UACN,MAAM,cAAc;AAAA,QACtB,CAAC;AACD,eAAO,CAAC;AAAA,MACV;AAEA,YAAM,KAAK,cAAc,SAAS,GAAG,EAAE;AACvC,YAAM,UAAU,cAAc,SAAS,IAAI,EAAE;AAC7C,YAAM,YAAY,cAAc,SAAS,EAAE;AAE3C,YAAM,MAAM,KAAK,iBAAiB;AAClC,YAAM,WAAW,iBAAiB,WAAW,KAAK,EAAE;AACpD,eAAS,WAAW,OAAO;AAE3B,YAAM,YAAY,OAAO,OAAO;AAAA,QAC9B,SAAS,OAAO,SAAS;AAAA,QACzB,SAAS,MAAM;AAAA,MACjB,CAAC;AAED,YAAM,cAAc,KAAK,MAAM,UAAU,SAAS,OAAO,CAAC;AAC1D,kBAAY,MAAM,sBAAsB;AAAA,QACtC,MAAM;AAAA,QACN,OAAO,OAAO,KAAK,WAAW,EAAE;AAAA,MAClC,CAAC;AAED,aAAO;AAAA,IACT,SAAS,OAAO;AACd,YAAM,WAAW,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AACtE,kBAAY,MAAM,0BAA0B;AAAA,QAC1C,MAAM;AAAA,QACN,OAAO;AAAA,QACP,WACE,iBAAiB,QAAQ,MAAM,YAAY,OAAO,OAAO;AAAA,MAC7D,CAAC;AACD,aAAO,CAAC;AAAA,IACV;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKQ,gBAAgB,aAA2C;AACjE,QAAI;AACF,WAAK,qBAAqB;AAE1B,YAAM,MAAM,KAAK,iBAAiB;AAClC,YAAM,KAAK,YAAY,EAAE;AACzB,YAAM,SAAS,eAAe,WAAW,KAAK,EAAE;AAEhD,YAAM,YAAY,KAAK,UAAU,WAAW;AAC5C,YAAM,YAAY,OAAO,OAAO;AAAA,QAC9B,OAAO,OAAO,WAAW,OAAO;AAAA,QAChC,OAAO,MAAM;AAAA,MACf,CAAC;AACD,YAAM,UAAU,OAAO,WAAW;AAGlC,YAAM,WAAW,OAAO,OAAO,CAAC,IAAI,SAAS,SAAS,CAAC;AAEvD,oBAAc,kBAAkB,QAAQ;AAExC,gBAAU,kBAAkB,GAAK;AAEjC,kBAAY,MAAM,qBAAqB;AAAA,QACrC,MAAM;AAAA,QACN,MAAM,SAAS;AAAA,MACjB,CAAC;AAAA,IACH,SAAS,OAAO;AACd,YAAM,WAAW,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AACtE,kBAAY,MAAM,0BAA0B;AAAA,QAC1C,MAAM;AAAA,QACN,OAAO;AAAA,MACT,CAAC;AACD,YAAM;AAAA,IACR;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKQ,QAAQ,SAAiB,SAAyB;AACxD,WAAO,GAAG,OAAO,IAAI,OAAO;AAAA,EAC9B;AAAA,EAEA,MAAM,IAAI,SAAiB,SAAyC;AAClE,UAAM,cAAc,KAAK,gBAAgB;AACzC,UAAM,MAAM,KAAK,QAAQ,SAAS,OAAO;AACzC,WAAO,YAAY,GAAG,KAAK;AAAA,EAC7B;AAAA,EAEA,MAAM,IAAI,SAAiB,SAAiB,UAAiC;AAC3E,UAAM,cAAc,KAAK,gBAAgB;AACzC,gBAAY,KAAK,QAAQ,SAAS,OAAO,CAAC,IAAI;AAC9C,SAAK,gBAAgB,WAAW;AAAA,EAClC;AAAA,EAEA,MAAM,OAAO,SAAiB,SAAgC;AAC5D,UAAM,cAAc,KAAK,gBAAgB;AACzC,UAAM,MAAM,KAAK,QAAQ,SAAS,OAAO;AACzC,WAAO,YAAY,GAAG;AACtB,SAAK,gBAAgB,WAAW;AAAA,EAClC;AAAA,EAEA,MAAM,gBACJ,SACkD;AAClD,UAAM,cAAc,KAAK,gBAAgB;AACzC,UAAM,SAAS,GAAG,OAAO;AACzB,UAAM,UAAmD,CAAC;AAE1D,eAAW,CAAC,KAAK,QAAQ,KAAK,OAAO,QAAQ,WAAW,GAAG;AACzD,UAAI,IAAI,WAAW,MAAM,GAAG;AAC1B,cAAM,UAAU,IAAI,MAAM,OAAO,MAAM;AACvC,gBAAQ,KAAK,EAAE,SAAS,SAAS,CAAC;AAAA,MACpC;AAAA,IACF;AAEA,WAAO;AAAA,EACT;AACF;",
-  "names": []
-}

package/dist/utils/credentials/index.js

@@ -1,51 +0,0 @@
-import { EncryptedFileStore } from "./EncryptedFileStore.js";
-import * as secureKeyStorage from "../secureKeyStorage.js";
-let store = null;
-const SERVICE_NAME = "minto-api";
-function getCredentialStore() {
-  if (!store) {
-    store = new EncryptedFileStore();
-  }
-  return store;
-}
-function resetCredentialStore() {
-  store = null;
-}
-async function getApiKey(modelName) {
-  try {
-    const key = secureKeyStorage.getApiKey(`${SERVICE_NAME}:${modelName}`);
-    if (key) return key;
-  } catch {
-  }
-  return getCredentialStore().get(SERVICE_NAME, modelName);
-}
-async function setApiKey(modelName, apiKey) {
-  try {
-    secureKeyStorage.storeApiKey(`${SERVICE_NAME}:${modelName}`, apiKey);
-  } catch {
-  }
-  return getCredentialStore().set(SERVICE_NAME, modelName, apiKey);
-}
-async function deleteApiKey(modelName) {
-  try {
-    secureKeyStorage.deleteApiKey(`${SERVICE_NAME}:${modelName}`);
-  } catch {
-  }
-  return getCredentialStore().delete(SERVICE_NAME, modelName);
-}
-async function findAllApiKeys() {
-  const credentials = await getCredentialStore().findCredentials(SERVICE_NAME);
-  return credentials.map(({ account, password }) => ({
-    modelName: account,
-    apiKey: password
-  }));
-}
-export {
-  deleteApiKey,
-  findAllApiKeys,
-  getApiKey,
-  getCredentialStore,
-  resetCredentialStore,
-  setApiKey
-};
-//# sourceMappingURL=index.js.map

package/dist/utils/credentials/index.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../src/utils/credentials/index.ts"],
-  "sourcesContent": ["import { EncryptedFileStore } from './EncryptedFileStore'\nimport type { CredentialStore } from './CredentialStore'\nimport * as secureKeyStorage from '../secureKeyStorage'\n\n// Credential store with keychain support on macOS.\n// Uses secureKeyStorage (keychain + encrypted file fallback) as primary,\n// with EncryptedFileStore as the secondary implementation for the CredentialStore interface.\nlet store: CredentialStore | null = null\n\nconst SERVICE_NAME = 'minto-api'\n\n/**\n * Get the current credential store instance.\n * Uses EncryptedFileStore for the CredentialStore interface.\n */\nexport function getCredentialStore(): CredentialStore {\n  if (!store) {\n    store = new EncryptedFileStore()\n  }\n  return store\n}\n\n/**\n * Reset the credential store (primarily for testing)\n */\nexport function resetCredentialStore(): void {\n  store = null\n}\n\n/**\n * Retrieve an API key for a specific model.\n * Tries secureKeyStorage (keychain on macOS) first, falls back to EncryptedFileStore.\n *\n * @param modelName The name of the model to retrieve the API key for\n * @returns The API key or null if not found\n */\nexport async function getApiKey(modelName: string): Promise<string | null> {\n  // Try secureKeyStorage first (uses keychain on macOS, encrypted file fallback)\n  try {\n    const key = secureKeyStorage.getApiKey(`${SERVICE_NAME}:${modelName}`)\n    if (key) return key\n  } catch {\n    // Keychain unavailable, fall through to EncryptedFileStore\n  }\n  return getCredentialStore().get(SERVICE_NAME, modelName)\n}\n\n/**\n * Store an API key for a specific model.\n * Stores in both secureKeyStorage and EncryptedFileStore for redundancy.\n *\n * @param modelName The name of the model\n * @param apiKey The API key to store\n */\nexport async function setApiKey(\n  modelName: string,\n  apiKey: string,\n): Promise<void> {\n  // Store in secureKeyStorage (keychain on macOS, encrypted file fallback)\n  try {\n    secureKeyStorage.storeApiKey(`${SERVICE_NAME}:${modelName}`, apiKey)\n  } catch {\n    // Best-effort \u2014 fall through to EncryptedFileStore\n  }\n  return getCredentialStore().set(SERVICE_NAME, modelName, apiKey)\n}\n\n/**\n * Delete an API key for a specific model from all stores.\n *\n * @param modelName The name of the model\n */\nexport async function deleteApiKey(modelName: string): Promise<void> {\n  // Remove from secureKeyStorage\n  try {\n    secureKeyStorage.deleteApiKey(`${SERVICE_NAME}:${modelName}`)\n  } catch {\n    // Best-effort\n  }\n  return getCredentialStore().delete(SERVICE_NAME, modelName)\n}\n\n/**\n * Find all stored API keys for the service\n *\n * @returns Array of model names and their API keys\n */\nexport async function findAllApiKeys(): Promise<\n  { modelName: string; apiKey: string }[]\n> {\n  const credentials = await getCredentialStore().findCredentials(SERVICE_NAME)\n  return credentials.map(({ account, password }) => ({\n    modelName: account,\n    apiKey: password,\n  }))\n}\n"],
-  "mappings": "AAAA,SAAS,0BAA0B;AAEnC,YAAY,sBAAsB;AAKlC,IAAI,QAAgC;AAEpC,MAAM,eAAe;AAMd,SAAS,qBAAsC;AACpD,MAAI,CAAC,OAAO;AACV,YAAQ,IAAI,mBAAmB;AAAA,EACjC;AACA,SAAO;AACT;AAKO,SAAS,uBAA6B;AAC3C,UAAQ;AACV;AASA,eAAsB,UAAU,WAA2C;AAEzE,MAAI;AACF,UAAM,MAAM,iBAAiB,UAAU,GAAG,YAAY,IAAI,SAAS,EAAE;AACrE,QAAI,IAAK,QAAO;AAAA,EAClB,QAAQ;AAAA,EAER;AACA,SAAO,mBAAmB,EAAE,IAAI,cAAc,SAAS;AACzD;AASA,eAAsB,UACpB,WACA,QACe;AAEf,MAAI;AACF,qBAAiB,YAAY,GAAG,YAAY,IAAI,SAAS,IAAI,MAAM;AAAA,EACrE,QAAQ;AAAA,EAER;AACA,SAAO,mBAAmB,EAAE,IAAI,cAAc,WAAW,MAAM;AACjE;AAOA,eAAsB,aAAa,WAAkC;AAEnE,MAAI;AACF,qBAAiB,aAAa,GAAG,YAAY,IAAI,SAAS,EAAE;AAAA,EAC9D,QAAQ;AAAA,EAER;AACA,SAAO,mBAAmB,EAAE,OAAO,cAAc,SAAS;AAC5D;AAOA,eAAsB,iBAEpB;AACA,QAAM,cAAc,MAAM,mBAAmB,EAAE,gBAAgB,YAAY;AAC3E,SAAO,YAAY,IAAI,CAAC,EAAE,SAAS,SAAS,OAAO;AAAA,IACjD,WAAW;AAAA,IACX,QAAQ;AAAA,EACV,EAAE;AACJ;",
-  "names": []
-}

package/dist/utils/credentials/migration.js

@@ -1,82 +0,0 @@
-import { getGlobalConfig, saveGlobalConfig } from "../config.js";
-import { setApiKey } from "./index.js";
-import { debug as debugLogger } from "../debugLogger.js";
-async function migrateApiKeysToEncrypted() {
-  const config = getGlobalConfig();
-  let migrated = 0;
-  let skipped = 0;
-  const errors = [];
-  if (!config.modelProfiles || config.modelProfiles.length === 0) {
-    debugLogger.state("MIGRATION_NO_PROFILES", {});
-    return { migrated: 0, errors: [], skipped: 0 };
-  }
-  try {
-    debugLogger.state("MIGRATION_START", {
-      profileCount: config.modelProfiles.length
-    });
-    const migratedProfiles = await Promise.all(
-      config.modelProfiles.map(async (profile) => {
-        if (!profile.apiKey) {
-          skipped++;
-          return profile;
-        }
-        if (profile.apiKey.startsWith("encrypted:")) {
-          debugLogger.state("MIGRATION_SKIP_ALREADY_ENCRYPTED", {
-            modelName: profile.modelName
-          });
-          skipped++;
-          return profile;
-        }
-        try {
-          await setApiKey(profile.modelName, profile.apiKey);
-          const migratedProfile = {
-            ...profile,
-            apiKey: `encrypted:${profile.modelName}`
-          };
-          debugLogger.state("MIGRATION_SUCCESS", {
-            modelName: profile.modelName,
-            provider: profile.provider
-          });
-          migrated++;
-          return migratedProfile;
-        } catch (error) {
-          const errorMsg = error instanceof Error ? error.message : String(error);
-          const errorText = `Failed to migrate ${profile.modelName}: ${errorMsg}`;
-          errors.push(errorText);
-          debugLogger.error("MIGRATION_PROFILE_ERROR", {
-            modelName: profile.modelName,
-            error: errorMsg
-          });
-          return profile;
-        }
-      })
-    );
-    if (migrated > 0) {
-      const updatedConfig = {
-        ...config,
-        modelProfiles: migratedProfiles
-      };
-      saveGlobalConfig(updatedConfig);
-      debugLogger.state("MIGRATION_CONFIG_SAVED", {
-        profilesMigrated: migrated,
-        profilesSkipped: skipped
-      });
-    }
-    debugLogger.state("MIGRATION_COMPLETE", {
-      migrated,
-      skipped,
-      errors: errors.length
-    });
-  } catch (error) {
-    const errorMsg = error instanceof Error ? error.message : String(error);
-    debugLogger.error("MIGRATION_FATAL_ERROR", {
-      error: errorMsg
-    });
-    errors.push(`Fatal migration error: ${errorMsg}`);
-  }
-  return { migrated, errors, skipped };
-}
-export {
-  migrateApiKeysToEncrypted
-};
-//# sourceMappingURL=migration.js.map

package/dist/utils/credentials/migration.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../src/utils/credentials/migration.ts"],
-  "sourcesContent": ["import { getGlobalConfig, saveGlobalConfig, type GlobalConfig } from '../config'\nimport { setApiKey } from './index'\nimport { debug as debugLogger } from '../debugLogger'\n\nexport interface MigrationResult {\n  migrated: number\n  errors: string[]\n  skipped: number\n}\n\n/**\n * Migrate API keys from plaintext config to encrypted credential store.\n * This function:\n * 1. Reads all model profiles from the global config\n * 2. For each profile with a plaintext apiKey (not already encrypted):\n *    - Stores the key in the encrypted credential store\n *    - Updates the config to use the `encrypted:modelName` reference\n * 3. Saves the updated config\n *\n * After migration, the actual API keys are removed from the config file and stored\n * securely in ~/.minto/credentials.enc\n *\n * @returns Migration result with counts of migrated, skipped, and error entries\n */\nexport async function migrateApiKeysToEncrypted(): Promise<MigrationResult> {\n  const config = getGlobalConfig()\n  let migrated = 0\n  let skipped = 0\n  const errors: string[] = []\n\n  if (!config.modelProfiles || config.modelProfiles.length === 0) {\n    debugLogger.state('MIGRATION_NO_PROFILES', {})\n    return { migrated: 0, errors: [], skipped: 0 }\n  }\n\n  try {\n    debugLogger.state('MIGRATION_START', {\n      profileCount: config.modelProfiles.length,\n    })\n\n    // Process each model profile\n    const migratedProfiles = await Promise.all(\n      config.modelProfiles.map(async profile => {\n        if (!profile.apiKey) {\n          skipped++\n          return profile\n        }\n\n        // Skip if already encrypted\n        if (profile.apiKey.startsWith('encrypted:')) {\n          debugLogger.state('MIGRATION_SKIP_ALREADY_ENCRYPTED', {\n            modelName: profile.modelName,\n          })\n          skipped++\n          return profile\n        }\n\n        try {\n          // Store the plaintext key in encrypted credential store\n          await setApiKey(profile.modelName, profile.apiKey)\n\n          // Update the profile to reference the encrypted key\n          const migratedProfile = {\n            ...profile,\n            apiKey: `encrypted:${profile.modelName}`,\n          }\n\n          debugLogger.state('MIGRATION_SUCCESS', {\n            modelName: profile.modelName,\n            provider: profile.provider,\n          })\n\n          migrated++\n          return migratedProfile\n        } catch (error) {\n          const errorMsg =\n            error instanceof Error ? error.message : String(error)\n          const errorText = `Failed to migrate ${profile.modelName}: ${errorMsg}`\n          errors.push(errorText)\n          debugLogger.error('MIGRATION_PROFILE_ERROR', {\n            modelName: profile.modelName,\n            error: errorMsg,\n          })\n          // Return unchanged profile on error\n          return profile\n        }\n      }),\n    )\n\n    // Save the migrated config only if something changed\n    if (migrated > 0) {\n      const updatedConfig: GlobalConfig = {\n        ...config,\n        modelProfiles: migratedProfiles,\n      }\n      saveGlobalConfig(updatedConfig)\n      debugLogger.state('MIGRATION_CONFIG_SAVED', {\n        profilesMigrated: migrated,\n        profilesSkipped: skipped,\n      })\n    }\n\n    debugLogger.state('MIGRATION_COMPLETE', {\n      migrated,\n      skipped,\n      errors: errors.length,\n    })\n  } catch (error) {\n    const errorMsg = error instanceof Error ? error.message : String(error)\n    debugLogger.error('MIGRATION_FATAL_ERROR', {\n      error: errorMsg,\n    })\n    errors.push(`Fatal migration error: ${errorMsg}`)\n  }\n\n  return { migrated, errors, skipped }\n}\n"],
-  "mappings": "AAAA,SAAS,iBAAiB,wBAA2C;AACrE,SAAS,iBAAiB;AAC1B,SAAS,SAAS,mBAAmB;AAsBrC,eAAsB,4BAAsD;AAC1E,QAAM,SAAS,gBAAgB;AAC/B,MAAI,WAAW;AACf,MAAI,UAAU;AACd,QAAM,SAAmB,CAAC;AAE1B,MAAI,CAAC,OAAO,iBAAiB,OAAO,cAAc,WAAW,GAAG;AAC9D,gBAAY,MAAM,yBAAyB,CAAC,CAAC;AAC7C,WAAO,EAAE,UAAU,GAAG,QAAQ,CAAC,GAAG,SAAS,EAAE;AAAA,EAC/C;AAEA,MAAI;AACF,gBAAY,MAAM,mBAAmB;AAAA,MACnC,cAAc,OAAO,cAAc;AAAA,IACrC,CAAC;AAGD,UAAM,mBAAmB,MAAM,QAAQ;AAAA,MACrC,OAAO,cAAc,IAAI,OAAM,YAAW;AACxC,YAAI,CAAC,QAAQ,QAAQ;AACnB;AACA,iBAAO;AAAA,QACT;AAGA,YAAI,QAAQ,OAAO,WAAW,YAAY,GAAG;AAC3C,sBAAY,MAAM,oCAAoC;AAAA,YACpD,WAAW,QAAQ;AAAA,UACrB,CAAC;AACD;AACA,iBAAO;AAAA,QACT;AAEA,YAAI;AAEF,gBAAM,UAAU,QAAQ,WAAW,QAAQ,MAAM;AAGjD,gBAAM,kBAAkB;AAAA,YACtB,GAAG;AAAA,YACH,QAAQ,aAAa,QAAQ,SAAS;AAAA,UACxC;AAEA,sBAAY,MAAM,qBAAqB;AAAA,YACrC,WAAW,QAAQ;AAAA,YACnB,UAAU,QAAQ;AAAA,UACpB,CAAC;AAED;AACA,iBAAO;AAAA,QACT,SAAS,OAAO;AACd,gBAAM,WACJ,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AACvD,gBAAM,YAAY,qBAAqB,QAAQ,SAAS,KAAK,QAAQ;AACrE,iBAAO,KAAK,SAAS;AACrB,sBAAY,MAAM,2BAA2B;AAAA,YAC3C,WAAW,QAAQ;AAAA,YACnB,OAAO;AAAA,UACT,CAAC;AAED,iBAAO;AAAA,QACT;AAAA,MACF,CAAC;AAAA,IACH;AAGA,QAAI,WAAW,GAAG;AAChB,YAAM,gBAA8B;AAAA,QAClC,GAAG;AAAA,QACH,eAAe;AAAA,MACjB;AACA,uBAAiB,aAAa;AAC9B,kBAAY,MAAM,0BAA0B;AAAA,QAC1C,kBAAkB;AAAA,QAClB,iBAAiB;AAAA,MACnB,CAAC;AAAA,IACH;AAEA,gBAAY,MAAM,sBAAsB;AAAA,MACtC;AAAA,MACA;AAAA,MACA,QAAQ,OAAO;AAAA,IACjB,CAAC;AAAA,EACH,SAAS,OAAO;AACd,UAAM,WAAW,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AACtE,gBAAY,MAAM,yBAAyB;AAAA,MACzC,OAAO;AAAA,IACT,CAAC;AACD,WAAO,KAAK,0BAA0B,QAAQ,EAAE;AAAA,EAClD;AAEA,SAAO,EAAE,UAAU,QAAQ,QAAQ;AACrC;",
-  "names": []
-}