@wrongstack/cli 1.0.19 → 1.0.26

package/dist/chunk-DR2OXU46.js

@@ -1,174 +0,0 @@
-
-// src/provider-config-utils.ts
-import { FsError } from "@wrongstack/core/types";
-import { expectDefined } from "@wrongstack/core/utils";
-import * as fs from "node:fs/promises";
-import { decryptConfigSecrets, encryptConfigSecrets } from "@wrongstack/core/security";
-import { atomicWrite, color } from "@wrongstack/core/utils";
-import { isSetupProvider as isSetupProviderId } from "@wrongstack/providers";
-import { nowIso } from "@wrongstack/primitives";
-function normalizeKeys(cfg) {
-  if (Array.isArray(cfg.apiKeys) && cfg.apiKeys.length > 0) {
-    return cfg.apiKeys.map((k) => ({ ...k }));
-  }
-  if (typeof cfg.apiKey === "string" && cfg.apiKey.length > 0) {
-    return [{ label: "default", apiKey: cfg.apiKey, createdAt: "" }];
-  }
-  return [];
-}
-function writeKeysBack(cfg, keys) {
-  if (keys.length === 0) {
-    delete cfg.apiKeys;
-    delete cfg.apiKey;
-    delete cfg.activeKey;
-    return;
-  }
-  cfg.apiKeys = keys;
-  const active = keys.find((k) => k.label === cfg.activeKey) ?? expectDefined(keys[0]);
-  delete cfg.apiKey;
-  if (!cfg.activeKey || !keys.some((k) => k.label === cfg.activeKey)) {
-    cfg.activeKey = active.label;
-  }
-}
-function resolveActiveApiKey(cfg) {
-  if (Array.isArray(cfg.apiKeys) && cfg.apiKeys.length > 0) {
-    const active = cfg.activeKey ? cfg.apiKeys.find((k) => k.label === cfg.activeKey) : void 0;
-    return (active ?? cfg.apiKeys[0])?.apiKey;
-  }
-  return cfg.apiKey && cfg.apiKey.length > 0 ? cfg.apiKey : void 0;
-}
-function isLoopbackBaseUrl(baseUrl) {
-  if (!baseUrl) return false;
-  try {
-    let host = new URL(baseUrl).hostname.toLowerCase();
-    host = host.replace(/^\[|\]$/g, "");
-    return host === "localhost" || host === "::1" || host === "0.0.0.0" || /^127\./.test(host);
-  } catch {
-    return false;
-  }
-}
-function providerCanRunWithoutSavedKey(cfg) {
-  return isLoopbackBaseUrl(cfg.baseUrl) && (!cfg.envVars || cfg.envVars.length === 0);
-}
-function hasUsableSavedProvider(cfg) {
-  return resolveActiveApiKey(cfg) !== void 0 || providerCanRunWithoutSavedKey(cfg);
-}
-function clearStaleProviderDefaults(config) {
-  const providerId = typeof config["provider"] === "string" ? config["provider"] : void 0;
-  if (!providerId) return;
-  const providers = config["providers"];
-  if (isSetupProviderId(providerId)) {
-    delete config["provider"];
-    delete config["model"];
-    if (providers) delete providers[providerId];
-    return;
-  }
-  const provider = providers?.[providerId];
-  if (!provider || !hasUsableSavedProvider(provider)) {
-    delete config["provider"];
-    delete config["model"];
-    return;
-  }
-  const modelId = typeof config["model"] === "string" ? config["model"] : void 0;
-  if (modelId && Array.isArray(provider.models) && provider.models.length > 0 && !provider.models.includes(modelId)) {
-    delete config["model"];
-  }
-}
-function activeLabel(cfg, keys) {
-  if (cfg.activeKey && keys.some((k) => k.label === cfg.activeKey)) return cfg.activeKey;
-  return keys[0]?.label;
-}
-function maskedKey(key) {
-  if (!key) return color.dim("\u2014");
-  if (key.length <= 8) return color.dim("\u2022".repeat(key.length));
-  const head = key.slice(0, 4);
-  const tail = key.slice(-4);
-  return `${color.dim(head + "\u2026")}${tail}`;
-}
-async function loadConfigProviders(configPath, vault, opts) {
-  const warn = opts?.warn;
-  const targetPath = opts?.profileConfigPath ?? configPath;
-  let raw;
-  try {
-    raw = await fs.readFile(targetPath, "utf8");
-  } catch (err) {
-    if (err.code !== "ENOENT") {
-      warn?.(`Could not read ${targetPath}: ${err.message}. Treating as empty.`);
-    }
-    return {};
-  }
-  let parsed;
-  try {
-    parsed = JSON.parse(raw);
-  } catch (err) {
-    warn?.(`Config at ${targetPath} is not valid JSON: ${err.message}`);
-    return {};
-  }
-  const decrypted = decryptConfigSecrets(parsed, vault);
-  return decrypted.providers ?? {};
-}
-var configMutationChain = Promise.resolve();
-function queueConfigMutation(mutate) {
-  const run = configMutationChain.then(mutate, mutate);
-  configMutationChain = run.then(
-    () => void 0,
-    () => void 0
-  );
-  return run;
-}
-async function mutateConfigProviders(configPath, vault, mutator, profileConfigPath) {
-  await queueConfigMutation(async () => {
-    const targetPath = profileConfigPath ?? configPath;
-    let raw;
-    let fileExists = true;
-    try {
-      raw = await fs.readFile(targetPath, "utf8");
-    } catch (err) {
-      if (err.code !== "ENOENT") {
-        throw new FsError({
-          message: `Refusing to mutate ${configPath}: ${err.message}`,
-          code: "FS_READ_FAILED",
-          path: targetPath,
-          context: { operation: "mutateConfigProviders", phase: "read" },
-          cause: err
-        });
-      }
-      fileExists = false;
-      raw = "{}";
-    }
-    let parsed;
-    try {
-      parsed = JSON.parse(raw);
-    } catch (err) {
-      if (fileExists) {
-        throw new FsError({
-          message: `Refusing to overwrite corrupt config at ${targetPath} (${err.message}). Fix or move the file aside before retrying.`,
-          code: "FS_READ_FAILED",
-          path: targetPath,
-          context: { operation: "mutateConfigProviders", phase: "parse" },
-          cause: err
-        });
-      }
-      parsed = {};
-    }
-    const decrypted = decryptConfigSecrets(parsed, vault);
-    const providers = decrypted.providers ?? {};
-    mutator(providers, decrypted);
-    decrypted.providers = providers;
-    clearStaleProviderDefaults(decrypted);
-    const encrypted = encryptConfigSecrets(decrypted, vault);
-    await atomicWrite(targetPath, JSON.stringify(encrypted, null, 2), { mode: 384 });
-  });
-}
-
-export {
-  normalizeKeys,
-  writeKeysBack,
-  resolveActiveApiKey,
-  activeLabel,
-  maskedKey,
-  loadConfigProviders,
-  mutateConfigProviders,
-  nowIso
-};
-//# sourceMappingURL=chunk-DR2OXU46.js.map

package/dist/chunk-JACOMTIH.js

@@ -1,275 +0,0 @@
-
-// src/settings-menu.ts
-import * as fs from "node:fs/promises";
-import * as path from "node:path";
-import { decryptConfigSecrets, encryptConfigSecrets } from "@wrongstack/core/security";
-import { ConfigError, ERROR_CODES, FsError } from "@wrongstack/core/types";
-import { atomicWrite, deepMerge } from "@wrongstack/core/utils";
-function resolvePersistPath(deps) {
-  if (deps.forceGlobal) return deps.profileConfigPath;
-  const scope = deps.configStore.get().configScope;
-  if (scope === "project" && deps.inProjectConfigPath) {
-    return deps.inProjectConfigPath;
-  }
-  return deps.profileConfigPath;
-}
-function resolveActualTarget(deps, decrypted, fallbackPath) {
-  if (deps.forceGlobal) return deps.profileConfigPath;
-  const newScope = decrypted.configScope;
-  const newProfileName = decrypted.activeProfile;
-  const effectiveProfilePath = newProfileName && deps.resolveProfilePath ? deps.resolveProfilePath(newProfileName) : deps.profileConfigPath;
-  if (newScope === "project" && deps.inProjectConfigPath) {
-    return deps.inProjectConfigPath;
-  }
-  if (newScope === "global") {
-    return effectiveProfilePath;
-  }
-  return fallbackPath;
-}
-function isProfileOrGlobalTarget(actualTarget, deps) {
-  return actualTarget === deps.profileConfigPath;
-}
-async function ensureProjectDir(filePath) {
-  const dir = path.dirname(filePath);
-  try {
-    await fs.mkdir(dir, { recursive: true });
-  } catch {
-  }
-}
-async function mergeWithDestinationIfExists(destPath, source, vault) {
-  let destRaw;
-  try {
-    destRaw = await fs.readFile(destPath, "utf8");
-  } catch (err) {
-    if (err.code === "ENOENT") {
-      return source;
-    }
-    throw err;
-  }
-  let destParsed;
-  try {
-    destParsed = JSON.parse(destRaw);
-  } catch (err) {
-    process.stderr.write(
-      JSON.stringify({
-        level: "warn",
-        event: "settings_menu_merge_skipped",
-        message: `Skipping merge into corrupt destination file: ${destPath}`,
-        timestamp: (/* @__PURE__ */ new Date()).toISOString()
-      }) + "\n"
-    );
-    void err;
-    return source;
-  }
-  const destDecrypted = decryptConfigSecrets(destParsed, vault);
-  return deepMerge(destDecrypted, source);
-}
-var PROJECT_SAFE_FIELDS = /* @__PURE__ */ new Set([
-  "provider",
-  "model",
-  "fallbackModels",
-  "fallbackBridge",
-  // Kept in sync with core's IN_PROJECT_ALLOWED_KEYS (config-loader.ts): these
-  // model-routing prefs are explicitly safe to READ from a per-project config,
-  // so the writer must not strip them — otherwise a scope=project /fallback
-  // profile/fav write (or a TUI full-config write under project scope) would be
-  // silently dropped while the loader would happily accept them on next boot.
-  "fallbackProfiles",
-  "favoriteModels",
-  "favoriteModelsOnly",
-  "modelAvailabilitySchedule",
-  "fallbackAuto",
-  "models",
-  "modelMatrix",
-  "maxConcurrent",
-  "autonomy",
-  "hints",
-  "nextPrediction",
-  "debugStream",
-  "configScope",
-  "yolo",
-  "features",
-  "context",
-  "log",
-  "session",
-  "indexing",
-  "tools",
-  "launch",
-  "circuitBreaker",
-  "adaptiveConcurrency",
-  "modelRuntime",
-  "Sage"
-]);
-function filterSafeForProject(cfg) {
-  const out = {};
-  for (const [key, value] of Object.entries(cfg)) {
-    if (PROJECT_SAFE_FIELDS.has(key)) {
-      out[key] = value;
-    }
-  }
-  return out;
-}
-async function persistAutonomySetting(deps, mutator) {
-  const targetPath = resolvePersistPath(deps);
-  await ensureProjectDir(targetPath);
-  let raw;
-  let fileExists = true;
-  try {
-    raw = await fs.readFile(targetPath, "utf8");
-  } catch (err) {
-    if (err.code !== "ENOENT") {
-      throw new FsError({
-        message: `Could not read ${targetPath}`,
-        code: ERROR_CODES.FS_READ_FAILED,
-        path: targetPath,
-        cause: err
-      });
-    }
-    fileExists = false;
-    raw = "{}";
-  }
-  let parsed;
-  try {
-    parsed = JSON.parse(raw);
-  } catch (err) {
-    if (fileExists) {
-      throw new ConfigError({
-        message: `Config at ${targetPath} is not valid JSON`,
-        code: ERROR_CODES.CONFIG_PARSE_FAILED,
-        context: { path: targetPath },
-        cause: err
-      });
-    }
-    parsed = {};
-  }
-  const decrypted = decryptConfigSecrets(parsed, deps.vault);
-  const autonomy = decrypted.autonomy ?? {};
-  mutator(
-    autonomy
-  );
-  decrypted.autonomy = autonomy;
-  const actualTarget = resolveActualTarget(deps, decrypted, targetPath);
-  if (actualTarget !== targetPath) {
-    await ensureProjectDir(actualTarget);
-  }
-  const effectiveConfig = actualTarget !== targetPath ? await mergeWithDestinationIfExists(actualTarget, decrypted, deps.vault) : decrypted;
-  const toWrite = isProfileOrGlobalTarget(actualTarget, deps) ? effectiveConfig : filterSafeForProject(effectiveConfig);
-  const encrypted = encryptConfigSecrets(toWrite, deps.vault);
-  await atomicWrite(actualTarget, JSON.stringify(encrypted, null, 2), { mode: 384 });
-  deps.configStore.update({
-    autonomy: decrypted.autonomy
-  });
-}
-async function persistConfigSetting(deps, mutator) {
-  const targetPath = resolvePersistPath(deps);
-  await ensureProjectDir(targetPath);
-  let raw;
-  let fileExists = true;
-  try {
-    raw = await fs.readFile(targetPath, "utf8");
-  } catch (err) {
-    if (err.code !== "ENOENT") {
-      throw new FsError({
-        message: `Could not read ${targetPath}`,
-        code: ERROR_CODES.FS_READ_FAILED,
-        path: targetPath,
-        cause: err
-      });
-    }
-    fileExists = false;
-    raw = "{}";
-  }
-  let parsed;
-  try {
-    parsed = JSON.parse(raw);
-  } catch (err) {
-    if (fileExists) {
-      throw new ConfigError({
-        message: `Config at ${targetPath} is not valid JSON`,
-        code: ERROR_CODES.CONFIG_PARSE_FAILED,
-        context: { path: targetPath },
-        cause: err
-      });
-    }
-    parsed = {};
-  }
-  const decrypted = decryptConfigSecrets(parsed, deps.vault);
-  mutator(decrypted);
-  const actualTarget = resolveActualTarget(deps, decrypted, targetPath);
-  if (actualTarget !== targetPath) {
-    await ensureProjectDir(actualTarget);
-  }
-  const effectiveConfig = actualTarget !== targetPath ? await mergeWithDestinationIfExists(actualTarget, decrypted, deps.vault) : decrypted;
-  const toWrite = isProfileOrGlobalTarget(actualTarget, deps) ? effectiveConfig : filterSafeForProject(effectiveConfig);
-  const encrypted = encryptConfigSecrets(toWrite, deps.vault);
-  await atomicWrite(actualTarget, JSON.stringify(encrypted, null, 2), { mode: 384 });
-  deps.configStore.update(decrypted);
-}
-async function persistTelegramConfig(deps, mutator) {
-  const targetPath = deps.profileConfigPath;
-  let raw;
-  let fileExists = true;
-  try {
-    raw = await fs.readFile(targetPath, "utf8");
-  } catch (err) {
-    if (err.code !== "ENOENT") {
-      throw new FsError({
-        message: `Could not read ${targetPath}: ${err.message}`,
-        code: "FS_READ_FAILED",
-        path: targetPath,
-        context: { operation: "readGlobalConfig", phase: "read" },
-        cause: err
-      });
-    }
-    fileExists = false;
-    raw = "{}";
-  }
-  let parsed;
-  try {
-    parsed = JSON.parse(raw);
-  } catch (err) {
-    if (fileExists) {
-      throw new ConfigError({
-        message: `Config at ${targetPath} is not valid JSON: ${err.message}`,
-        code: "CONFIG_PARSE_FAILED",
-        context: { filePath: targetPath, operation: "readProfileConfig" },
-        cause: err
-      });
-    }
-    parsed = {};
-  }
-  const decrypted = decryptConfigSecrets(parsed, deps.vault);
-  const extensions = decrypted.extensions ?? {};
-  const telegram = extensions.telegram ?? {};
-  mutator(telegram);
-  extensions.telegram = telegram;
-  decrypted.extensions = extensions;
-  const encrypted = encryptConfigSecrets(decrypted, deps.vault);
-  await atomicWrite(targetPath, JSON.stringify(encrypted, null, 2), { mode: 384 });
-  await deps.vault.flushHardening?.();
-  deps.configStore.update({
-    extensions
-  });
-}
-function deriveFsAccessPair(input) {
-  if (input.allowOutsideProjectRoot !== void 0) {
-    const allow = input.allowOutsideProjectRoot;
-    return { allowOutsideProjectRoot: allow, restrictToProjectRoot: !allow };
-  }
-  if (input.restrictFsToRoot !== void 0) {
-    const restrict = input.restrictFsToRoot;
-    return { allowOutsideProjectRoot: !restrict, restrictToProjectRoot: restrict };
-  }
-  return void 0;
-}
-
-export {
-  resolvePersistPath,
-  resolveActualTarget,
-  filterSafeForProject,
-  persistAutonomySetting,
-  persistConfigSetting,
-  persistTelegramConfig,
-  deriveFsAccessPair
-};
-//# sourceMappingURL=chunk-JACOMTIH.js.map

package/dist/chunk-XJXDOF63.js

@@ -1,28 +0,0 @@
-
-// src/version.ts
-import { createRequire } from "node:module";
-var req = createRequire(import.meta.url);
-function readOwnVersion() {
-  const candidates = ["../package.json", "../../package.json"];
-  for (const rel of candidates) {
-    try {
-      const pkg = req(rel);
-      if (typeof pkg.version === "string" && pkg.version.length > 0) return pkg.version;
-    } catch {
-    }
-  }
-  return "dev";
-}
-var CLI_VERSION = readOwnVersion();
-var API_VERSION = "0.0.0";
-try {
-  const corePkg = req("@wrongstack/core/package.json");
-  if (corePkg.wrongstackApiVersion) API_VERSION = corePkg.wrongstackApiVersion;
-} catch {
-}
-
-export {
-  CLI_VERSION,
-  API_VERSION
-};
-//# sourceMappingURL=chunk-XJXDOF63.js.map