agenthub-multiagent-mcp 1.75.0 → 1.76.1

package/dist/goshtiChannel/core.test.js

@@ -0,0 +1,250 @@
+// The channel's behaviour end to end, with the chat server stood in by a fake:
+// what reaches the session for a given post, what the reply tool will and will
+// not do, the rate cap's summary, and the failures it reports.
+import { describe, expect, it } from "vitest";
+import { ChannelCore } from "./core.js";
+import { MARKER_PROP } from "./policy.js";
+const ME = { id: "me1", username: "sumit" };
+function config(over = {}) {
+    return {
+        url: "https://chat.example.com",
+        trigger: "@claude",
+        allow: { users: [], channels: [] },
+        rate: { max: 10, periodSeconds: 60 },
+        context: { posts: 10, chars: 4000 },
+        ...over,
+    };
+}
+function fakeApi(over = {}) {
+    const posted = [];
+    const userLookups = [];
+    const users = {
+        me1: { id: "me1", username: "sumit", is_bot: false },
+        col1: { id: "col1", username: "alice", is_bot: false },
+        bot1: { id: "bot1", username: "deploybot", is_bot: true },
+    };
+    return {
+        posted,
+        userLookups,
+        me: async () => users.me1,
+        user: async (id) => {
+            userLookups.push(id);
+            const u = users[id];
+            if (!u)
+                throw new Error("404");
+            return u;
+        },
+        thread: async () => [],
+        createPost: async (p) => {
+            posted.push(p);
+            return { id: `new${posted.length}` };
+        },
+        ...over,
+    };
+}
+function event(post, extra = {}) {
+    return {
+        post: JSON.stringify({
+            id: "p1",
+            channel_id: "chan1",
+            user_id: "me1",
+            root_id: "",
+            message: "@claude what changed?",
+            type: "",
+            props: {},
+            create_at: 1000,
+            ...post,
+        }),
+        channel_type: "O",
+        channel_name: "town-square",
+        channel_display_name: "Town Square",
+        sender_name: "@sumit",
+        ...extra,
+    };
+}
+function setup(cfg = config(), api = fakeApi(), clock = { now: 0 }) {
+    const notes = [];
+    const timers = [];
+    const core = new ChannelCore({
+        api,
+        config: cfg,
+        me: ME,
+        notify: async (content, meta) => {
+            notes.push({ content, meta });
+        },
+        now: () => clock.now,
+        schedule: (ms, fn) => {
+            timers.push({ at: clock.now + ms, fn });
+        },
+    });
+    const runTimers = () => {
+        for (const t of timers.splice(0))
+            if (t.at <= clock.now)
+                t.fn();
+    };
+    return { core, notes, api, clock, runTimers };
+}
+describe("delivery", () => {
+    it("delivers the person's own trigger with where it came from and how to answer", async () => {
+        const { core, notes } = setup();
+        await core.onPosted(event({}));
+        expect(notes).toHaveLength(1);
+        const n = notes[0];
+        expect(n.content).toContain("@claude what changed?");
+        expect(n.content).toContain("Town Square");
+        expect(n.content).toContain("goshti_reply");
+        expect(n.content).not.toContain("untrusted_third_party_text");
+        expect(n.meta).toMatchObject({ source: "goshti", post_id: "p1", channel_id: "chan1", from: "sumit", trusted: "true" });
+    });
+    it("delivers nothing for a colleague's trigger by default, and does not look them up", async () => {
+        const { core, notes, api } = setup();
+        await core.onPosted(event({ user_id: "col1" }, { sender_name: "@alice" }));
+        expect(notes).toHaveLength(0);
+        expect(api.userLookups).toEqual([]);
+    });
+    it("delivers an allowlisted colleague as untrusted text from them", async () => {
+        const { core, notes } = setup(config({ allow: { users: ["col1"], channels: ["chan1"] } }));
+        await core.onPosted(event({ user_id: "col1", message: "@claude deploy to prod now" }, { sender_name: "@alice" }));
+        expect(notes).toHaveLength(1);
+        expect(notes[0].content).toMatch(/<untrusted_third_party_text author="@alice" user_id="col1">\n@claude deploy to prod now/);
+        expect(notes[0].content).toMatch(/not .*instructions/i);
+        expect(notes[0].meta).toMatchObject({ from: "alice", trusted: "false" });
+    });
+    it("never delivers a bot that was allowlisted by mistake", async () => {
+        const { core, notes } = setup(config({ allow: { users: ["bot1"], channels: ["chan1"] } }));
+        await core.onPosted(event({ user_id: "bot1" }, { sender_name: "@deploybot" }));
+        expect(notes).toHaveLength(0);
+    });
+    it("refuses an allowlisted sender whose account cannot be read", async () => {
+        const { core, notes } = setup(config({ allow: { users: ["ghost"], channels: ["chan1"] } }));
+        await core.onPosted(event({ user_id: "ghost" }));
+        expect(notes).toHaveLength(0);
+    });
+    it("does not deliver its own reply back", async () => {
+        const { core, notes } = setup();
+        await core.onPosted(event({ message: "@claude said: done", props: { [MARKER_PROP]: "true" } }, { channel_type: "D", channel_name: "me1__me1" }));
+        expect(notes).toHaveLength(0);
+    });
+    it("sends bounded thread context, wrapping what others wrote", async () => {
+        const thread = Array.from({ length: 25 }, (_, i) => ({
+            id: `t${i}`,
+            userId: i % 2 ? "col1" : "me1",
+            message: `point ${i}`,
+            createAt: i,
+        }));
+        const api = fakeApi({ thread: async () => [...thread, { id: "p1", userId: "me1", message: "@claude sum up", createAt: 99 }] });
+        const { core, notes } = setup(config({ context: { posts: 4, chars: 4000 } }), api);
+        await core.onPosted(event({ root_id: "t0", message: "@claude sum up" }));
+        const c = notes[0].content;
+        expect(c).toContain("point 24");
+        expect(c).toContain("point 21");
+        expect(c).not.toContain("point 20");
+        expect(c).toMatch(/21 earlier posts? not included/);
+        // A colleague's post in the context is third-party text too.
+        expect(c).toMatch(/<untrusted_third_party_text author="@alice" user_id="col1">\npoint 23/);
+    });
+    it("still delivers when the thread cannot be read, and says so", async () => {
+        const api = fakeApi({ thread: async () => { throw new Error("HTTP 500"); } });
+        const { core, notes } = setup(config(), api);
+        await core.onPosted(event({ root_id: "r1" }));
+        expect(notes).toHaveLength(1);
+        expect(notes[0].content).toMatch(/thread context could not be read/i);
+    });
+});
+describe("goshti_reply", () => {
+    it("posts into the delivered thread, marked as Claude's", async () => {
+        const { core, api } = setup();
+        await core.onPosted(event({ id: "p1", root_id: "root1" }));
+        const r = await core.reply("p1", "Two things changed.");
+        expect(r.ok).toBe(true);
+        expect(api.posted).toHaveLength(1);
+        expect(api.posted[0]).toMatchObject({ channel_id: "chan1", root_id: "root1" });
+        expect(api.posted[0].message).toMatch(/^Two things changed\.[\s\S]*via Claude, for @sumit/);
+        expect(api.posted[0].props[MARKER_PROP]).toBe("true");
+    });
+    it("starts the thread on a top-level post", async () => {
+        const { core, api } = setup();
+        await core.onPosted(event({ id: "top", root_id: "" }));
+        await core.reply("top", "ok");
+        expect(api.posted[0].root_id).toBe("top");
+    });
+    // Spec: "Reply to an unrelated thread".
+    it("refuses a thread that produced no delivery this session", async () => {
+        const { core, api } = setup();
+        await core.onPosted(event({ id: "pA", root_id: "" }));
+        const r = await core.reply("pB", "hello");
+        expect(r.ok).toBe(false);
+        expect(r.text).toMatch(/not delivered/i);
+        expect(api.posted).toHaveLength(0);
+    });
+    it("refuses a post that was seen but not delivered", async () => {
+        const { core, api } = setup();
+        await core.onPosted(event({ id: "c1", user_id: "col1" }));
+        expect((await core.reply("c1", "hi")).ok).toBe(false);
+        expect(api.posted).toHaveLength(0);
+    });
+    it("refuses an empty reply", async () => {
+        const { core } = setup();
+        await core.onPosted(event({}));
+        expect((await core.reply("p1", "   ")).ok).toBe(false);
+    });
+    it("reports a failed post rather than claiming it was sent", async () => {
+        const api = fakeApi({ createPost: async () => { throw new Error("HTTP 403"); } });
+        const { core } = setup(config(), api);
+        await core.onPosted(event({}));
+        const r = await core.reply("p1", "x");
+        expect(r.ok).toBe(false);
+        expect(r.text).toContain("403");
+    });
+});
+describe("rate cap", () => {
+    // Spec: "Burst of triggers".
+    it("delivers ten of forty and sends one summary of the thirty held back", async () => {
+        const { core, notes, clock, runTimers } = setup();
+        for (let i = 0; i < 40; i++) {
+            clock.now = i * 1000;
+            await core.onPosted(event({ id: `b${i}` }));
+        }
+        expect(notes).toHaveLength(10);
+        clock.now = 60_001;
+        runTimers();
+        await Promise.resolve();
+        expect(notes).toHaveLength(11);
+        expect(notes[10].content).toMatch(/30 .*held back/);
+        expect(notes[10].meta).toMatchObject({ source: "goshti", type: "rate_limited", held: "30" });
+        // A held post was never delivered, so it cannot be replied to.
+        expect((await core.reply("b39", "x")).ok).toBe(false);
+    });
+});
+describe("failures reported into the session (rule 7)", () => {
+    it("says the channel is offline and why when the token is refused", async () => {
+        const { core, notes } = setup();
+        await core.reportOffline("token_refused");
+        expect(notes).toHaveLength(1);
+        expect(notes[0].content).toMatch(/offline/i);
+        expect(notes[0].content).toMatch(/revoked|expired/i);
+        expect(notes[0].content).toMatch(/goshti-channel setup/);
+        expect(notes[0].meta).toMatchObject({ source: "goshti", type: "channel_status", status: "offline", reason: "token_refused" });
+    });
+    it("tells the session about the first drop and the recovery, not every retry", async () => {
+        const { core, notes } = setup();
+        await core.reportDrop({ attempt: 1, givingUp: false, detail: "socket closed (1006)" });
+        await core.reportDrop({ attempt: 2, givingUp: false, detail: "socket closed (1006)" });
+        await core.reportDrop({ attempt: 3, givingUp: false, detail: "socket closed (1006)" });
+        await core.reportOnline();
+        expect(notes.map((n) => n.meta.status)).toEqual(["reconnecting", "online"]);
+    });
+    it("says when it gives up", async () => {
+        const { core, notes } = setup();
+        await core.reportDrop({ attempt: 1, givingUp: false, detail: "x" });
+        await core.reportDrop({ attempt: 11, givingUp: true, detail: "connection refused" });
+        expect(notes.at(-1).meta.status).toBe("offline");
+        expect(notes.at(-1).content).toMatch(/connection refused/);
+    });
+    it("does not announce being online at first connect", async () => {
+        const { core, notes } = setup();
+        await core.reportOnline();
+        expect(notes).toHaveLength(0);
+    });
+});
+//# sourceMappingURL=core.test.js.map

package/dist/goshtiChannel/core.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"core.test.js","sourceRoot":"","sources":["../../src/goshtiChannel/core.test.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,+EAA+E;AAC/E,+DAA+D;AAE/D,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE9C,OAAO,EAAE,WAAW,EAAgB,MAAM,WAAW,CAAC;AACtD,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;AAE5C,SAAS,MAAM,CAAC,OAA+B,EAAE;IAC/C,OAAO;QACL,GAAG,EAAE,0BAA0B;QAC/B,OAAO,EAAE,SAAS;QAClB,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE;QAClC,IAAI,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE;QACpC,OAAO,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE;QACnC,GAAG,IAAI;KACR,CAAC;AACJ,CAAC;AASD,SAAS,OAAO,CAAC,OAAyB,EAAE;IAC1C,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,WAAW,GAAa,EAAE,CAAC;IACjC,MAAM,KAAK,GAAsE;QAC/E,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE;QACpD,IAAI,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE;QACtD,IAAI,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE;KAC1D,CAAC;IACF,OAAO;QACL,MAAM;QACN,WAAW;QACX,EAAE,EAAE,KAAK,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG;QACzB,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;YACjB,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACrB,MAAM,CAAC,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC;YACpB,IAAI,CAAC,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC;YAC/B,OAAO,CAAC,CAAC;QACX,CAAC;QACD,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,EAAE;QACtB,UAAU,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;YACtB,MAAM,CAAC,IAAI,CAAC,CAAW,CAAC,CAAC;YACzB,OAAO,EAAE,EAAE,EAAE,MAAM,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;QACvC,CAAC;QACD,GAAG,IAAI;KACR,CAAC;AACJ,CAAC;AAED,SAAS,KAAK,CAAC,IAA6B,EAAE,QAAiC,EAAE;IAC/E,OAAO;QACL,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,EAAE,EAAE,IAAI;YACR,UAAU,EAAE,OAAO;YACnB,OAAO,EAAE,KAAK;YACd,OAAO,EAAE,EAAE;YACX,OAAO,EAAE,uBAAuB;YAChC,IAAI,EAAE,EAAE;YACR,KAAK,EAAE,EAAE;YACT,SAAS,EAAE,IAAI;YACf,GAAG,IAAI;SACR,CAAC;QACF,YAAY,EAAE,GAAG;QACjB,YAAY,EAAE,aAAa;QAC3B,oBAAoB,EAAE,aAAa;QACnC,WAAW,EAAE,QAAQ;QACrB,GAAG,KAAK;KACT,CAAC;AACJ,CAAC;AAED,SAAS,KAAK,CAAC,GAAG,GAAG,MAAM,EAAE,EAAE,GAAG,GAAG,OAAO,EAAE,EAAE,KAAK,GAAG,EAAE,GAAG,EAAE,CAAC,EAAE;IAChE,MAAM,KAAK,GAA6D,EAAE,CAAC;IAC3E,MAAM,MAAM,GAA0C,EAAE,CAAC;IACzD,MAAM,IAAI,GAAG,IAAI,WAAW,CAAC;QAC3B,GAAG;QACH,MAAM,EAAE,GAAG;QACX,EAAE,EAAE,EAAE;QACN,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;YAC9B,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAChC,CAAC;QACD,GAAG,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG;QACpB,QAAQ,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE;YACnB,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,GAAG,GAAG,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QAC1C,CAAC;KACF,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,GAAG,EAAE;QACrB,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;YAAE,IAAI,CAAC,CAAC,EAAE,IAAI,KAAK,CAAC,GAAG;gBAAE,CAAC,CAAC,EAAE,EAAE,CAAC;IAClE,CAAC,CAAC;IACF,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;AAChD,CAAC;AAED,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE;IACxB,EAAE,CAAC,6EAA6E,EAAE,KAAK,IAAI,EAAE;QAC3F,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,KAAK,EAAE,CAAC;QAChC,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;QAC/B,MAAM,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC9B,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACnB,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,uBAAuB,CAAC,CAAC;QACrD,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;QAC3C,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;QAC5C,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,4BAA4B,CAAC,CAAC;QAC9D,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;IACzH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kFAAkF,EAAE,KAAK,IAAI,EAAE;QAChG,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC;QACrC,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;QAC3E,MAAM,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC9B,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;QAC7E,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QAC3F,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,4BAA4B,EAAE,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;QAClH,MAAM,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC9B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,yFAAyF,CAAC,CAAC;QAC5H,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;QACxD,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QAC3F,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC;QAC/E,MAAM,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;QAC1E,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QAC5F,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;QACjD,MAAM,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;QACnD,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,KAAK,EAAE,CAAC;QAChC,MAAM,IAAI,CAAC,QAAQ,CACjB,KAAK,CAAC,EAAE,OAAO,EAAE,oBAAoB,EAAE,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,YAAY,EAAE,GAAG,EAAE,YAAY,EAAE,UAAU,EAAE,CAAC,CAC5H,CAAC;QACF,MAAM,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;QACxE,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;YACnD,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK;YAC9B,OAAO,EAAE,SAAS,CAAC,EAAE;YACrB,QAAQ,EAAE,CAAC;SACZ,CAAC,CAAC,CAAC;QACJ,MAAM,GAAG,GAAG,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,GAAG,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;QAC/H,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC;QACnF,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC;QACzE,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;QAC3B,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QAChC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QAChC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QACpC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,gCAAgC,CAAC,CAAC;QACpD,6DAA6D;QAC7D,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,uEAAuE,CAAC,CAAC;IAC7F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;QAC1E,MAAM,GAAG,GAAG,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,IAAI,EAAE,GAAG,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC9E,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC;QAC7C,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAC9C,MAAM,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC9B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,mCAAmC,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;IAC5B,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACnE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC;QAC9B,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;QAC3D,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,qBAAqB,CAAC,CAAC;QACxD,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxB,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACnC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;QAC/E,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,oDAAoD,CAAC,CAAC;QAC5F,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;QACrD,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC;QAC9B,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;QACvD,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAC9B,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,wCAAwC;IACxC,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACvE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC;QAC9B,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;QACtD,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC1C,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzB,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QACzC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC9D,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC;QAC9B,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;QAC1D,MAAM,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACtD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wBAAwB,EAAE,KAAK,IAAI,EAAE;QACtC,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;QAC/B,MAAM,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACtE,MAAM,GAAG,GAAG,OAAO,CAAC,EAAE,UAAU,EAAE,KAAK,IAAI,EAAE,GAAG,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAClF,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC;QACtC,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;QAC/B,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACtC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzB,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE;IACxB,6BAA6B;IAC7B,EAAE,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;QACnF,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,KAAK,EAAE,CAAC;QAClD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;YAC5B,KAAK,CAAC,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC;YACrB,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QAC9C,CAAC;QACD,MAAM,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;QAC/B,KAAK,CAAC,GAAG,GAAG,MAAM,CAAC;QACnB,SAAS,EAAE,CAAC;QACZ,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;QACxB,MAAM,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;QAC/B,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QACpD,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7F,+DAA+D;QAC/D,MAAM,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,6CAA6C,EAAE,GAAG,EAAE;IAC3D,EAAE,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;QAC7E,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,KAAK,EAAE,CAAC;QAChC,MAAM,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC,CAAC;QAC1C,MAAM,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC9B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAC7C,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;QACrD,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;QACzD,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,CAAC;IAChI,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0EAA0E,EAAE,KAAK,IAAI,EAAE;QACxF,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,KAAK,EAAE,CAAC;QAChC,MAAM,IAAI,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC,CAAC;QACvF,MAAM,IAAI,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC,CAAC;QACvF,MAAM,IAAI,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC,CAAC;QACvF,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QAC1B,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC9E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uBAAuB,EAAE,KAAK,IAAI,EAAE;QACrC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,KAAK,EAAE,CAAC;QAChC,MAAM,IAAI,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QACpE,MAAM,IAAI,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC,CAAC;QACrF,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAClD,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;QAC/D,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,KAAK,EAAE,CAAC;QAChC,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QAC1B,MAAM,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/goshtiChannel/credential.d.ts

@@ -0,0 +1,29 @@
+export declare const SERVICE = "goshti-channel";
+export type Runner = (cmd: string, args: string[], input?: string) => {
+    status: number | null;
+    stdout: string;
+    stderr: string;
+};
+export interface Keychain {
+    name: string;
+    get(account: string): string | null;
+    /** False when the store refused; the caller then falls back to the file. */
+    set(account: string, secret: string): boolean;
+    remove(account: string): boolean;
+}
+export declare const defaultRunner: Runner;
+/** The OS credential store for a platform, or null where there is none. */
+export declare function platformKeychain(platform: string, run?: Runner): Keychain | null;
+export interface Stores {
+    keychain: Keychain | null;
+    dir: string;
+}
+/** Store a token. Returns where: `os:<store>` or `file:<path>`. */
+export declare function storeCredential(account: string, token: string, stores: Stores): string;
+/** The stored token, or null. Throws when the file exists but others can read it. */
+export declare function loadCredential(account: string, stores: Stores): {
+    token: string;
+    where: string;
+} | null;
+export declare function removeCredential(account: string, stores: Stores): void;
+//# sourceMappingURL=credential.d.ts.map

package/dist/goshtiChannel/credential.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential.d.ts","sourceRoot":"","sources":["../../src/goshtiChannel/credential.ts"],"names":[],"mappings":"AAeA,eAAO,MAAM,OAAO,mBAAmB,CAAC;AAExC,MAAM,MAAM,MAAM,GAAG,CACnB,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,EAAE,EACd,KAAK,CAAC,EAAE,MAAM,KACX;IAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE/D,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IACpC,4EAA4E;IAC5E,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;IAC9C,MAAM,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC;CAClC;AAED,eAAO,MAAM,aAAa,EAAE,MAQ3B,CAAC;AAsBF,2EAA2E;AAC3E,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,GAAE,MAAsB,GAAG,QAAQ,GAAG,IAAI,CA6C/F;AAED,MAAM,WAAW,MAAM;IACrB,QAAQ,EAAE,QAAQ,GAAG,IAAI,CAAC;IAC1B,GAAG,EAAE,MAAM,CAAC;CACb;AAqCD,mEAAmE;AACnE,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAgBtF;AAED,qFAAqF;AACrF,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAKvG;AAgBD,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAGtE"}

package/dist/goshtiChannel/credential.js

@@ -0,0 +1,160 @@
+// Where the Goshti channel keeps the person's token (add-goshti-claude-connector §2.6).
+//
+// In the OS credential store where there is one — Keychain on macOS, the
+// Secret Service on Linux (`secret-tool`), the Windows credential vault —
+// otherwise in `credentials.json` with owner-only permissions beside the
+// config. Never in an environment variable, because a variable is how a token
+// ends up committed in a project's `.mcp.json` env block.
+//
+// The token never goes on a command line: every process on the machine can
+// read another's arguments. Each store is driven with the secret on stdin.
+import { spawnSync } from "node:child_process";
+import { chmodSync, existsSync, mkdirSync, readFileSync, renameSync, statSync, writeFileSync } from "node:fs";
+import { join } from "node:path";
+export const SERVICE = "goshti-channel";
+export const defaultRunner = (cmd, args, input) => {
+    const r = spawnSync(cmd, args, {
+        input,
+        encoding: "utf8",
+        timeout: 15_000,
+        windowsHide: true,
+    });
+    return { status: r.error ? null : r.status, stdout: r.stdout ?? "", stderr: r.stderr ?? "" };
+};
+function psEncoded(script) {
+    return Buffer.from(script, "utf16le").toString("base64");
+}
+const PS_VAULT = `$ErrorActionPreference='Stop'
+try { [void][Windows.Security.Credentials.PasswordVault,Windows.Security.Credentials,ContentType=WindowsRuntime] } catch { exit 3 }
+$v = New-Object Windows.Security.Credentials.PasswordVault
+$a = [Console]::In.ReadLine()
+`;
+const PS_GET = `${PS_VAULT}try { $c = $v.Retrieve('${SERVICE}', $a); $c.RetrievePassword(); [Console]::Out.Write($c.Password) } catch { exit 1 }`;
+const PS_SET = `${PS_VAULT}$t = [Console]::In.ReadLine()
+try { $o = $v.Retrieve('${SERVICE}', $a); $v.Remove($o) } catch {}
+try { $v.Add((New-Object Windows.Security.Credentials.PasswordCredential('${SERVICE}', $a, $t))) } catch { exit 1 }`;
+const PS_DEL = `${PS_VAULT}try { $o = $v.Retrieve('${SERVICE}', $a); $v.Remove($o) } catch { exit 1 }`;
+function quoteForSecurity(s) {
+    return `"${s.replace(/\\/g, "\\\\").replace(/"/g, '\\"')}"`;
+}
+/** The OS credential store for a platform, or null where there is none. */
+export function platformKeychain(platform, run = defaultRunner) {
+    const ok = (r) => r.status === 0;
+    const value = (r) => {
+        if (!ok(r))
+            return null;
+        const v = r.stdout.replace(/[\r\n]+$/, "");
+        return v === "" ? null : v;
+    };
+    switch (platform) {
+        case "darwin":
+            return {
+                name: "macos-keychain",
+                get: (a) => value(run("security", ["find-generic-password", "-s", SERVICE, "-a", a, "-w"])),
+                // `security -i` reads its commands from stdin, which keeps `-w <token>`
+                // off the process list.
+                set: (a, s) => ok(run("security", ["-i"], `add-generic-password -U -s ${SERVICE} -a ${quoteForSecurity(a)} -w ${quoteForSecurity(s)}\n`)),
+                remove: (a) => ok(run("security", ["delete-generic-password", "-s", SERVICE, "-a", a])),
+            };
+        case "linux":
+            return {
+                name: "secret-service",
+                get: (a) => value(run("secret-tool", ["lookup", "service", SERVICE, "account", a])),
+                set: (a, s) => ok(run("secret-tool", ["store", "--label", "Goshti channel", "service", SERVICE, "account", a], s)),
+                remove: (a) => ok(run("secret-tool", ["clear", "service", SERVICE, "account", a])),
+            };
+        case "win32": {
+            const ps = (script, input) => run("powershell.exe", ["-NoProfile", "-NonInteractive", "-EncodedCommand", psEncoded(script)], input);
+            return {
+                name: "windows-credential-vault",
+                get: (a) => value(ps(PS_GET, `${a}\n`)),
+                set: (a, s) => ok(ps(PS_SET, `${a}\n${s}\n`)),
+                remove: (a) => ok(ps(PS_DEL, `${a}\n`)),
+            };
+        }
+        default:
+            return null;
+    }
+}
+function credFile(dir) {
+    return join(dir, "credentials.json");
+}
+function readFileStore(dir) {
+    const file = credFile(dir);
+    if (!existsSync(file))
+        return {};
+    if (process.platform !== "win32" && (statSync(file).mode & 0o077) !== 0) {
+        throw new Error(`${file} is readable by others; refusing to use it. Run \`chmod 600 ${file}\` or \`goshti-channel setup\` again.`);
+    }
+    try {
+        const parsed = JSON.parse(readFileSync(file, "utf8"));
+        const out = {};
+        for (const [k, v] of Object.entries(parsed.accounts ?? {}))
+            if (typeof v === "string")
+                out[k] = v;
+        return out;
+    }
+    catch {
+        return {};
+    }
+}
+function writeFileStore(dir, accounts) {
+    mkdirSync(dir, { recursive: true, mode: 0o700 });
+    const file = credFile(dir);
+    const tmp = `${file}.tmp`;
+    writeFileSync(tmp, `${JSON.stringify({ accounts }, null, 2)}\n`, { mode: 0o600 });
+    try {
+        chmodSync(tmp, 0o600);
+    }
+    catch {
+        // Windows: the per-user profile ACL is the protection.
+    }
+    renameSync(tmp, file);
+}
+/** Store a token. Returns where: `os:<store>` or `file:<path>`. */
+export function storeCredential(account, token, stores) {
+    if (stores.keychain?.set(account, token)) {
+        // A copy left in the file from an earlier fallback would outlive a
+        // rotation and be the one an attacker reads.
+        dropFromFile(account, stores.dir);
+        return `os:${stores.keychain.name}`;
+    }
+    let accounts = {};
+    try {
+        accounts = readFileStore(stores.dir);
+    }
+    catch {
+        accounts = {}; // a file others could read is replaced, not merged into
+    }
+    accounts[account] = token;
+    writeFileStore(stores.dir, accounts);
+    return `file:${credFile(stores.dir)}`;
+}
+/** The stored token, or null. Throws when the file exists but others can read it. */
+export function loadCredential(account, stores) {
+    const fromStore = stores.keychain?.get(account);
+    if (fromStore)
+        return { token: fromStore, where: `os:${stores.keychain.name}` };
+    const token = readFileStore(stores.dir)[account];
+    return token ? { token, where: `file:${credFile(stores.dir)}` } : null;
+}
+function dropFromFile(account, dir) {
+    if (!existsSync(credFile(dir)))
+        return;
+    let accounts;
+    try {
+        accounts = readFileStore(dir);
+    }
+    catch {
+        accounts = {};
+    }
+    if (account in accounts || Object.keys(accounts).length === 0) {
+        delete accounts[account];
+        writeFileStore(dir, accounts);
+    }
+}
+export function removeCredential(account, stores) {
+    stores.keychain?.remove(account);
+    dropFromFile(account, stores.dir);
+}
+//# sourceMappingURL=credential.js.map

package/dist/goshtiChannel/credential.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential.js","sourceRoot":"","sources":["../../src/goshtiChannel/credential.ts"],"names":[],"mappings":"AAAA,wFAAwF;AACxF,EAAE;AACF,yEAAyE;AACzE,0EAA0E;AAC1E,yEAAyE;AACzE,8EAA8E;AAC9E,0DAA0D;AAC1D,EAAE;AACF,2EAA2E;AAC3E,2EAA2E;AAE3E,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC9G,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,MAAM,CAAC,MAAM,OAAO,GAAG,gBAAgB,CAAC;AAgBxC,MAAM,CAAC,MAAM,aAAa,GAAW,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE;IACxD,MAAM,CAAC,GAAG,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE;QAC7B,KAAK;QACL,QAAQ,EAAE,MAAM;QAChB,OAAO,EAAE,MAAM;QACf,WAAW,EAAE,IAAI;KAClB,CAAC,CAAC;IACH,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;AAC/F,CAAC,CAAC;AAEF,SAAS,SAAS,CAAC,MAAc;IAC/B,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAC3D,CAAC;AAED,MAAM,QAAQ,GAAG;;;;CAIhB,CAAC;AAEF,MAAM,MAAM,GAAG,GAAG,QAAQ,2BAA2B,OAAO,qFAAqF,CAAC;AAClJ,MAAM,MAAM,GAAG,GAAG,QAAQ;0BACA,OAAO;4EAC2C,OAAO,iCAAiC,CAAC;AACrH,MAAM,MAAM,GAAG,GAAG,QAAQ,2BAA2B,OAAO,0CAA0C,CAAC;AAEvG,SAAS,gBAAgB,CAAC,CAAS;IACjC,OAAO,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC;AAC9D,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,gBAAgB,CAAC,QAAgB,EAAE,MAAc,aAAa;IAC5E,MAAM,EAAE,GAAG,CAAC,CAAqB,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,CAAC,CAAqB,EAAE,EAAE;QACtC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QACxB,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QAC3C,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7B,CAAC,CAAC;IACF,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,QAAQ;YACX,OAAO;gBACL,IAAI,EAAE,gBAAgB;gBACtB,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,uBAAuB,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;gBAC3F,wEAAwE;gBACxE,wBAAwB;gBACxB,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACZ,EAAE,CACA,GAAG,CACD,UAAU,EACV,CAAC,IAAI,CAAC,EACN,8BAA8B,OAAO,OAAO,gBAAgB,CAAC,CAAC,CAAC,OAAO,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAC9F,CACF;gBACH,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,yBAAyB,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;aACxF,CAAC;QACJ,KAAK,OAAO;YACV,OAAO;gBACL,IAAI,EAAE,gBAAgB;gBACtB,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC;gBACnF,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACZ,EAAE,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;gBACrG,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC;aACnF,CAAC;QACJ,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,MAAM,EAAE,GAAG,CAAC,MAAc,EAAE,KAAa,EAAE,EAAE,CAC3C,GAAG,CAAC,gBAAgB,EAAE,CAAC,YAAY,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;YACxG,OAAO;gBACL,IAAI,EAAE,0BAA0B;gBAChC,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;gBACvC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC7C,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;aACxC,CAAC;QACJ,CAAC;QACD;YACE,OAAO,IAAI,CAAC;IAChB,CAAC;AACH,CAAC;AAOD,SAAS,QAAQ,CAAC,GAAW;IAC3B,OAAO,IAAI,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC;AACvC,CAAC;AAED,SAAS,aAAa,CAAC,GAAW;IAChC,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC3B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IACjC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,KAAK,CACb,GAAG,IAAI,+DAA+D,IAAI,uCAAuC,CAClH,CAAC;IACJ,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAA2C,CAAC;QAChG,MAAM,GAAG,GAA2B,EAAE,CAAC;QACvC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC;YAAE,IAAI,OAAO,CAAC,KAAK,QAAQ;gBAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAClG,OAAO,GAAG,CAAC;IACb,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,GAAW,EAAE,QAAgC;IACnE,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACjD,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC3B,MAAM,GAAG,GAAG,GAAG,IAAI,MAAM,CAAC;IAC1B,aAAa,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAClF,IAAI,CAAC;QACH,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,uDAAuD;IACzD,CAAC;IACD,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AACxB,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,eAAe,CAAC,OAAe,EAAE,KAAa,EAAE,MAAc;IAC5E,IAAI,MAAM,CAAC,QAAQ,EAAE,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC;QACzC,mEAAmE;QACnE,6CAA6C;QAC7C,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;QAClC,OAAO,MAAM,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;IACtC,CAAC;IACD,IAAI,QAAQ,GAA2B,EAAE,CAAC;IAC1C,IAAI,CAAC;QACH,QAAQ,GAAG,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,QAAQ,GAAG,EAAE,CAAC,CAAC,wDAAwD;IACzE,CAAC;IACD,QAAQ,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC;IAC1B,cAAc,CAAC,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IACrC,OAAO,QAAQ,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;AACxC,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,cAAc,CAAC,OAAe,EAAE,MAAc;IAC5D,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;IAChD,IAAI,SAAS;QAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,MAAM,CAAC,QAAS,CAAC,IAAI,EAAE,EAAE,CAAC;IACjF,MAAM,KAAK,GAAG,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC;IACjD,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACzE,CAAC;AAED,SAAS,YAAY,CAAC,OAAe,EAAE,GAAW;IAChD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAAE,OAAO;IACvC,IAAI,QAAgC,CAAC;IACrC,IAAI,CAAC;QACH,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,QAAQ,GAAG,EAAE,CAAC;IAChB,CAAC;IACD,IAAI,OAAO,IAAI,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9D,OAAO,QAAQ,CAAC,OAAO,CAAC,CAAC;QACzB,cAAc,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAChC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,OAAe,EAAE,MAAc;IAC9D,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IACjC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;AACpC,CAAC"}

package/dist/goshtiChannel/credential.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=credential.test.d.ts.map

package/dist/goshtiChannel/credential.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential.test.d.ts","sourceRoot":"","sources":["../../src/goshtiChannel/credential.test.ts"],"names":[],"mappings":""}

package/dist/goshtiChannel/credential.test.js

@@ -0,0 +1,127 @@
+// Rule: the credential lives in the OS store, else in a file only its owner can
+// read, and never in a project's MCP configuration (spec "keep its credential
+// out of project files").
+import { chmodSync, existsSync, mkdtempSync, readFileSync, statSync, writeFileSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { describe, expect, it } from "vitest";
+import { loadCredential, platformKeychain, removeCredential, storeCredential, } from "./credential.js";
+const TOKEN = "s3cr3t-personal-access-token";
+const ACCOUNT = "https://chat.example.com";
+function dir() {
+    return mkdtempSync(join(tmpdir(), "goshti-cred-"));
+}
+function memoryKeychain() {
+    const items = new Map();
+    return {
+        name: "test-store",
+        items,
+        get: (a) => items.get(a) ?? null,
+        set: (a, s) => (items.set(a, s), true),
+        remove: (a) => items.delete(a),
+    };
+}
+describe("storing the credential", () => {
+    it("uses the OS store when there is one, and writes no file", () => {
+        const d = dir();
+        const kc = memoryKeychain();
+        const where = storeCredential(ACCOUNT, TOKEN, { keychain: kc, dir: d });
+        expect(where).toBe("os:test-store");
+        expect(kc.items.get(ACCOUNT)).toBe(TOKEN);
+        expect(existsSync(join(d, "credentials.json"))).toBe(false);
+        expect(loadCredential(ACCOUNT, { keychain: kc, dir: d })).toEqual({ token: TOKEN, where: "os:test-store" });
+    });
+    it("falls back to an owner-only file when the OS store refuses", () => {
+        const d = dir();
+        const broken = { name: "broken", get: () => null, set: () => false, remove: () => false };
+        const where = storeCredential(ACCOUNT, TOKEN, { keychain: broken, dir: d });
+        const file = join(d, "credentials.json");
+        expect(where).toBe(`file:${file}`);
+        expect(JSON.parse(readFileSync(file, "utf8")).accounts[ACCOUNT]).toBe(TOKEN);
+        if (process.platform !== "win32")
+            expect(statSync(file).mode & 0o077).toBe(0);
+        expect(loadCredential(ACCOUNT, { keychain: broken, dir: d })?.token).toBe(TOKEN);
+    });
+    it("falls back to the file when there is no OS store at all", () => {
+        const d = dir();
+        expect(storeCredential(ACCOUNT, TOKEN, { keychain: null, dir: d })).toMatch(/^file:/);
+        expect(loadCredential(ACCOUNT, { keychain: null, dir: d })?.token).toBe(TOKEN);
+    });
+    it.skipIf(process.platform === "win32")("refuses a credential file others can read", () => {
+        const d = dir();
+        storeCredential(ACCOUNT, TOKEN, { keychain: null, dir: d });
+        chmodSync(join(d, "credentials.json"), 0o644);
+        expect(() => loadCredential(ACCOUNT, { keychain: null, dir: d })).toThrow(/readable by others/);
+    });
+    it("reports nothing stored as null", () => {
+        expect(loadCredential(ACCOUNT, { keychain: memoryKeychain(), dir: dir() })).toBeNull();
+    });
+    it("removes it from both places", () => {
+        const d = dir();
+        const kc = memoryKeychain();
+        storeCredential(ACCOUNT, TOKEN, { keychain: kc, dir: d });
+        storeCredential(ACCOUNT, TOKEN, { keychain: null, dir: d });
+        removeCredential(ACCOUNT, { keychain: kc, dir: d });
+        expect(loadCredential(ACCOUNT, { keychain: kc, dir: d })).toBeNull();
+    });
+    it("ignores an environment variable holding a token", () => {
+        // A variable is how a token ends up in `.mcp.json`'s env block.
+        process.env.GOSHTI_TOKEN = TOKEN;
+        try {
+            expect(loadCredential(ACCOUNT, { keychain: null, dir: dir() })).toBeNull();
+        }
+        finally {
+            delete process.env.GOSHTI_TOKEN;
+        }
+    });
+    it("does not leave the file readable by others even if it existed before", () => {
+        if (process.platform === "win32")
+            return;
+        const d = dir();
+        const file = join(d, "credentials.json");
+        writeFileSync(file, JSON.stringify({ accounts: {} }), { mode: 0o644 });
+        storeCredential(ACCOUNT, TOKEN, { keychain: null, dir: d });
+        expect(statSync(file).mode & 0o077).toBe(0);
+    });
+});
+describe("the OS stores", () => {
+    function recorder(status = 0, stdout = "") {
+        const calls = [];
+        return {
+            calls,
+            run: (cmd, args, input) => {
+                calls.push({ cmd, args, input });
+                return { status, stdout, stderr: "" };
+            },
+        };
+    }
+    // A command line is visible to every process on the machine; stdin is not.
+    for (const platform of ["darwin", "linux", "win32"]) {
+        it(`${platform}: never puts the token on a command line`, () => {
+            const r = recorder();
+            const kc = platformKeychain(platform, r.run);
+            expect(kc).not.toBeNull();
+            kc.set(ACCOUNT, TOKEN);
+            expect(r.calls.length).toBeGreaterThan(0);
+            for (const c of r.calls) {
+                expect(c.args.join(" ")).not.toContain(TOKEN);
+                expect(c.cmd).not.toContain(TOKEN);
+            }
+            expect(r.calls.some((c) => c.input?.includes(TOKEN))).toBe(true);
+        });
+        it(`${platform}: reads the token from the store's output`, () => {
+            const r = recorder(0, `${TOKEN}\n`);
+            expect(platformKeychain(platform, r.run).get(ACCOUNT)).toBe(TOKEN);
+        });
+        it(`${platform}: a failing store reads as nothing stored`, () => {
+            const r = recorder(1, "");
+            const kc = platformKeychain(platform, r.run);
+            expect(kc.get(ACCOUNT)).toBeNull();
+            expect(kc.set(ACCOUNT, TOKEN)).toBe(false);
+        });
+    }
+    it("has no store on an unknown platform", () => {
+        expect(platformKeychain("aix", recorder().run)).toBeNull();
+    });
+});
+//# sourceMappingURL=credential.test.js.map

package/dist/goshtiChannel/credential.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential.test.js","sourceRoot":"","sources":["../../src/goshtiChannel/credential.test.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,8EAA8E;AAC9E,0BAA0B;AAE1B,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACpG,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EACL,cAAc,EACd,gBAAgB,EAChB,gBAAgB,EAChB,eAAe,GAGhB,MAAM,iBAAiB,CAAC;AAEzB,MAAM,KAAK,GAAG,8BAA8B,CAAC;AAC7C,MAAM,OAAO,GAAG,0BAA0B,CAAC;AAE3C,SAAS,GAAG;IACV,OAAO,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,cAAc,CAAC,CAAC,CAAC;AACrD,CAAC;AAED,SAAS,cAAc;IACrB,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;IACxC,OAAO;QACL,IAAI,EAAE,YAAY;QAClB,KAAK;QACL,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI;QAChC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,CAAC;QACtC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;KAC/B,CAAC;AACJ,CAAC;AAED,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;IACtC,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;QACjE,MAAM,CAAC,GAAG,GAAG,EAAE,CAAC;QAChB,MAAM,EAAE,GAAG,cAAc,EAAE,CAAC;QAC5B,MAAM,KAAK,GAAG,eAAe,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QACxE,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QACpC,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1C,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,EAAE,kBAAkB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC5D,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,CAAC;IAC9G,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,MAAM,CAAC,GAAG,GAAG,EAAE,CAAC;QAChB,MAAM,MAAM,GAAa,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,CAAC;QACpG,MAAM,KAAK,GAAG,eAAe,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QAC5E,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,EAAE,kBAAkB,CAAC,CAAC;QACzC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;QACnC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7E,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;YAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC9E,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACnF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;QACjE,MAAM,CAAC,GAAG,GAAG,EAAE,CAAC;QAChB,MAAM,CAAC,eAAe,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACtF,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACjF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACxF,MAAM,CAAC,GAAG,GAAG,EAAE,CAAC;QAChB,eAAe,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QAC5D,SAAS,CAAC,IAAI,CAAC,CAAC,EAAE,kBAAkB,CAAC,EAAE,KAAK,CAAC,CAAC;QAC9C,MAAM,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAClG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;QACxC,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,cAAc,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IACzF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6BAA6B,EAAE,GAAG,EAAE;QACrC,MAAM,CAAC,GAAG,GAAG,EAAE,CAAC;QAChB,MAAM,EAAE,GAAG,cAAc,EAAE,CAAC;QAC5B,eAAe,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QAC1D,eAAe,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QAC5D,gBAAgB,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QACpD,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IACvE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,gEAAgE;QAChE,OAAO,CAAC,GAAG,CAAC,YAAY,GAAG,KAAK,CAAC;QACjC,IAAI,CAAC;YACH,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC7E,CAAC;gBAAS,CAAC;YACT,OAAO,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;QAClC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sEAAsE,EAAE,GAAG,EAAE;QAC9E,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;YAAE,OAAO;QACzC,MAAM,CAAC,GAAG,GAAG,EAAE,CAAC;QAChB,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,EAAE,kBAAkB,CAAC,CAAC;QACzC,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACvE,eAAe,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QAC5D,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC7B,SAAS,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,EAAE;QACvC,MAAM,KAAK,GAA2D,EAAE,CAAC;QACzE,OAAO;YACL,KAAK;YACL,GAAG,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE;gBACxB,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;gBACjC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;YACxC,CAAC;SACF,CAAC;IACJ,CAAC;IAED,2EAA2E;IAC3E,KAAK,MAAM,QAAQ,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAU,EAAE,CAAC;QAC7D,EAAE,CAAC,GAAG,QAAQ,0CAA0C,EAAE,GAAG,EAAE;YAC7D,MAAM,CAAC,GAAG,QAAQ,EAAE,CAAC;YACrB,MAAM,EAAE,GAAG,gBAAgB,CAAC,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC;YAC7C,MAAM,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;YAC1B,EAAG,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YACxB,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;YAC1C,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;gBACxB,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;gBAC9C,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YACrC,CAAC;YACD,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,GAAG,QAAQ,2CAA2C,EAAE,GAAG,EAAE;YAC9D,MAAM,CAAC,GAAG,QAAQ,CAAC,CAAC,EAAE,GAAG,KAAK,IAAI,CAAC,CAAC;YACpC,MAAM,CAAC,gBAAgB,CAAC,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAE,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACtE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,GAAG,QAAQ,2CAA2C,EAAE,GAAG,EAAE;YAC9D,MAAM,CAAC,GAAG,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC1B,MAAM,EAAE,GAAG,gBAAgB,CAAC,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAE,CAAC;YAC9C,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;YACnC,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7C,CAAC,CAAC,CAAC;IACL,CAAC;IAED,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,CAAC,gBAAgB,CAAC,KAAK,EAAE,QAAQ,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC7D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/goshtiChannel/e2e.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=e2e.test.d.ts.map

package/dist/goshtiChannel/e2e.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"e2e.test.d.ts","sourceRoot":"","sources":["../../src/goshtiChannel/e2e.test.ts"],"names":[],"mappings":""}