akadmin 0.1.0 → 0.1.2

package/dist/keychain/index.d.ts

@@ -1,44 +0,0 @@
-/**
- * Local Encrypted Credential & Profile Manager for akadmin CLI.
- * Encrypts credentials with AES-256-GCM using machine-derived master keys.
- * Non-secret configuration is kept separate in config.json.
- */
-export interface ProfileCredentials {
-    apiKey?: string;
-    sessionCookie?: string;
-    baseUrl?: string;
-}
-export interface CliConfig {
-    activeProfile: string;
-    profiles: Record<string, {
-        baseUrl: string;
-        maskedKey?: string;
-        hasSessionCookie?: boolean;
-    }>;
-}
-export declare class CliKeychain {
-    private configDir;
-    private configFile;
-    private vaultFile;
-    private masterKeySecret;
-    constructor(customDir?: string);
-    getConfigDir(): string;
-    getSigningSecret(): string;
-    private ensureConfig;
-    private saveConfig;
-    private readEncryptedVault;
-    private writeEncryptedVault;
-    getActiveProfile(): string;
-    setActiveProfile(profile: string): void;
-    getCredentials(profile?: string): Promise<ProfileCredentials>;
-    setApiKey(apiKey: string, profile?: string): Promise<void>;
-    setSessionCookie(sessionCookie: string, profile?: string): Promise<void>;
-    getStatus(): Promise<{
-        activeProfile: string;
-        hasApiKey: boolean;
-        maskedKey?: string;
-        hasSessionCookie: boolean;
-        baseUrl: string;
-    }>;
-}
-//# sourceMappingURL=index.d.ts.map

package/dist/keychain/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/keychain/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAYH,MAAM,WAAW,kBAAkB;IACjC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,SAAS;IACxB,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,gBAAgB,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;CAC/F;AAED,qBAAa,WAAW;IACtB,OAAO,CAAC,SAAS,CAAS;IAC1B,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,SAAS,CAAS;IAC1B,OAAO,CAAC,eAAe,CAAS;gBAEpB,SAAS,CAAC,EAAE,MAAM;IAU9B,YAAY,IAAI,MAAM;IAItB,gBAAgB,IAAI,MAAM;IAI1B,OAAO,CAAC,YAAY;IA0BpB,OAAO,CAAC,UAAU;IAOlB,OAAO,CAAC,kBAAkB;IAW1B,OAAO,CAAC,mBAAmB;IAO3B,gBAAgB,IAAI,MAAM;IAO1B,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;IAWjC,cAAc,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAuC7D,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAkB1D,gBAAgB,CAAC,aAAa,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAkBxE,SAAS,IAAI,OAAO,CAAC;QAAE,aAAa,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,OAAO,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,gBAAgB,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CAW1I"}

package/dist/keychain/index.js

@@ -1,173 +0,0 @@
-/**
- * Local Encrypted Credential & Profile Manager for akadmin CLI.
- * Encrypts credentials with AES-256-GCM using machine-derived master keys.
- * Non-secret configuration is kept separate in config.json.
- */
-import fs from "node:fs";
-import os from "node:os";
-import path from "node:path";
-import { decryptFromVault, encryptForVault, maskApiKey, } from "@akadmin/core";
-export class CliKeychain {
-    configDir;
-    configFile;
-    vaultFile;
-    masterKeySecret;
-    constructor(customDir) {
-        this.configDir = customDir || path.join(os.homedir(), ".config", "akadmin");
-        this.configFile = path.join(this.configDir, "config.json");
-        this.vaultFile = path.join(this.configDir, "credentials.enc");
-        // Derive machine-bound master secret for local envelope encryption
-        const machineEntropy = `${os.userInfo().username}@${os.hostname()}-akadmin-cli-v1`;
-        this.masterKeySecret = machineEntropy;
-    }
-    getConfigDir() {
-        return this.configDir;
-    }
-    getSigningSecret() {
-        return `cli-signing-${this.masterKeySecret}`;
-    }
-    ensureConfig() {
-        if (!fs.existsSync(this.configFile)) {
-            const defaultConf = {
-                activeProfile: "production",
-                profiles: {
-                    production: { baseUrl: "https://agentkit.best" },
-                    staging: { baseUrl: "https://staging.agentkit.best" },
-                },
-            };
-            fs.mkdirSync(this.configDir, { recursive: true, mode: 0o700 });
-            fs.writeFileSync(this.configFile, JSON.stringify(defaultConf, null, 2), {
-                mode: 0o600,
-            });
-            return defaultConf;
-        }
-        try {
-            return JSON.parse(fs.readFileSync(this.configFile, "utf-8"));
-        }
-        catch {
-            return {
-                activeProfile: "production",
-                profiles: {},
-            };
-        }
-    }
-    saveConfig(config) {
-        fs.mkdirSync(this.configDir, { recursive: true, mode: 0o700 });
-        fs.writeFileSync(this.configFile, JSON.stringify(config, null, 2), {
-            mode: 0o600,
-        });
-    }
-    readEncryptedVault() {
-        if (!fs.existsSync(this.vaultFile)) {
-            return {};
-        }
-        try {
-            return JSON.parse(fs.readFileSync(this.vaultFile, "utf-8"));
-        }
-        catch {
-            return {};
-        }
-    }
-    writeEncryptedVault(data) {
-        fs.mkdirSync(this.configDir, { recursive: true, mode: 0o700 });
-        fs.writeFileSync(this.vaultFile, JSON.stringify(data, null, 2), {
-            mode: 0o600,
-        });
-    }
-    getActiveProfile() {
-        const envProfile = process.env["AKADMIN_PROFILE"];
-        if (envProfile)
-            return envProfile;
-        const config = this.ensureConfig();
-        return config.activeProfile || "production";
-    }
-    setActiveProfile(profile) {
-        const config = this.ensureConfig();
-        config.activeProfile = profile;
-        if (!config.profiles[profile]) {
-            config.profiles[profile] = {
-                baseUrl: profile === "production" ? "https://agentkit.best" : "https://staging.agentkit.best",
-            };
-        }
-        this.saveConfig(config);
-    }
-    async getCredentials(profile) {
-        const targetProfile = profile || this.getActiveProfile();
-        const config = this.ensureConfig();
-        const profileMeta = config.profiles[targetProfile] || { baseUrl: "https://agentkit.best" };
-        const envApiKey = process.env["AKADMIN_API_KEY"] || process.env["AGENTKIT_ADMIN_KEY"];
-        const envSession = process.env["AKADMIN_SESSION_COOKIE"];
-        const envBaseUrl = process.env["AKADMIN_BASE_URL"];
-        let apiKey = envApiKey;
-        let sessionCookie = envSession;
-        // Read from encrypted vault if not in env
-        const vault = this.readEncryptedVault();
-        const apiKeyRecord = vault[`${targetProfile}:apiKey`];
-        if (!apiKey && apiKeyRecord) {
-            try {
-                apiKey = await decryptFromVault(apiKeyRecord, "cli_operator", this.masterKeySecret);
-            }
-            catch {
-                // Decryption failed or tampered
-            }
-        }
-        const sessionRecord = vault[`${targetProfile}:sessionCookie`];
-        if (!sessionCookie && sessionRecord) {
-            try {
-                sessionCookie = await decryptFromVault(sessionRecord, "cli_operator", this.masterKeySecret);
-            }
-            catch {
-                // Decryption failed
-            }
-        }
-        return {
-            apiKey,
-            sessionCookie,
-            baseUrl: envBaseUrl || profileMeta.baseUrl || (targetProfile === "production" ? "https://agentkit.best" : "https://staging.agentkit.best"),
-        };
-    }
-    async setApiKey(apiKey, profile) {
-        const targetProfile = profile || this.getActiveProfile();
-        const config = this.ensureConfig();
-        if (!config.profiles[targetProfile]) {
-            config.profiles[targetProfile] = {
-                baseUrl: targetProfile === "production" ? "https://agentkit.best" : "https://staging.agentkit.best",
-            };
-        }
-        config.profiles[targetProfile].maskedKey = maskApiKey(apiKey);
-        this.saveConfig(config);
-        // Encrypt into vault file (0600)
-        const record = await encryptForVault(apiKey, "cli_operator", this.masterKeySecret, 1);
-        const vault = this.readEncryptedVault();
-        vault[`${targetProfile}:apiKey`] = record;
-        this.writeEncryptedVault(vault);
-    }
-    async setSessionCookie(sessionCookie, profile) {
-        const targetProfile = profile || this.getActiveProfile();
-        const config = this.ensureConfig();
-        if (!config.profiles[targetProfile]) {
-            config.profiles[targetProfile] = {
-                baseUrl: targetProfile === "production" ? "https://agentkit.best" : "https://staging.agentkit.best",
-            };
-        }
-        config.profiles[targetProfile].hasSessionCookie = true;
-        this.saveConfig(config);
-        // Encrypt into vault file (0600)
-        const record = await encryptForVault(sessionCookie, "cli_operator", this.masterKeySecret, 1);
-        const vault = this.readEncryptedVault();
-        vault[`${targetProfile}:sessionCookie`] = record;
-        this.writeEncryptedVault(vault);
-    }
-    async getStatus() {
-        const profile = this.getActiveProfile();
-        const creds = await this.getCredentials(profile);
-        return {
-            activeProfile: profile,
-            hasApiKey: Boolean(creds.apiKey),
-            maskedKey: creds.apiKey ? maskApiKey(creds.apiKey) : undefined,
-            hasSessionCookie: Boolean(creds.sessionCookie),
-            baseUrl: creds.baseUrl || "https://agentkit.best",
-        };
-    }
-}
-//# sourceMappingURL=index.js.map

package/dist/keychain/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/keychain/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EACL,gBAAgB,EAChB,eAAe,EACf,UAAU,GAEX,MAAM,eAAe,CAAC;AAavB,MAAM,OAAO,WAAW;IACd,SAAS,CAAS;IAClB,UAAU,CAAS;IACnB,SAAS,CAAS;IAClB,eAAe,CAAS;IAEhC,YAAY,SAAkB;QAC5B,IAAI,CAAC,SAAS,GAAG,SAAS,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;QAC5E,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;QAC3D,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;QAE9D,mEAAmE;QACnE,MAAM,cAAc,GAAG,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,IAAI,EAAE,CAAC,QAAQ,EAAE,iBAAiB,CAAC;QACnF,IAAI,CAAC,eAAe,GAAG,cAAc,CAAC;IACxC,CAAC;IAED,YAAY;QACV,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED,gBAAgB;QACd,OAAO,eAAe,IAAI,CAAC,eAAe,EAAE,CAAC;IAC/C,CAAC;IAEO,YAAY;QAClB,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YACpC,MAAM,WAAW,GAAc;gBAC7B,aAAa,EAAE,YAAY;gBAC3B,QAAQ,EAAE;oBACR,UAAU,EAAE,EAAE,OAAO,EAAE,uBAAuB,EAAE;oBAChD,OAAO,EAAE,EAAE,OAAO,EAAE,+BAA+B,EAAE;iBACtD;aACF,CAAC;YACF,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAC/D,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;gBACtE,IAAI,EAAE,KAAK;aACZ,CAAC,CAAC;YACH,OAAO,WAAW,CAAC;QACrB,CAAC;QAED,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;QAC/D,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;gBACL,aAAa,EAAE,YAAY;gBAC3B,QAAQ,EAAE,EAAE;aACb,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,UAAU,CAAC,MAAiB;QAClC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/D,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;YACjE,IAAI,EAAE,KAAK;SACZ,CAAC,CAAC;IACL,CAAC;IAEO,kBAAkB;QACxB,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YACnC,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;QAC9D,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAEO,mBAAmB,CAAC,IAA0C;QACpE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/D,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;YAC9D,IAAI,EAAE,KAAK;SACZ,CAAC,CAAC;IACL,CAAC;IAED,gBAAgB;QACd,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;QAClD,IAAI,UAAU;YAAE,OAAO,UAAU,CAAC;QAClC,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QACnC,OAAO,MAAM,CAAC,aAAa,IAAI,YAAY,CAAC;IAC9C,CAAC;IAED,gBAAgB,CAAC,OAAe;QAC9B,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QACnC,MAAM,CAAC,aAAa,GAAG,OAAO,CAAC;QAC/B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9B,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG;gBACzB,OAAO,EAAE,OAAO,KAAK,YAAY,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,+BAA+B;aAC9F,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IAC1B,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,OAAgB;QACnC,MAAM,aAAa,GAAG,OAAO,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACzD,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QACnC,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,uBAAuB,EAAE,CAAC;QAE3F,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;QACtF,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;QACzD,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;QAEnD,IAAI,MAAM,GAAG,SAAS,CAAC;QACvB,IAAI,aAAa,GAAG,UAAU,CAAC;QAE/B,0CAA0C;QAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACxC,MAAM,YAAY,GAAG,KAAK,CAAC,GAAG,aAAa,SAAS,CAAC,CAAC;QACtD,IAAI,CAAC,MAAM,IAAI,YAAY,EAAE,CAAC;YAC5B,IAAI,CAAC;gBACH,MAAM,GAAG,MAAM,gBAAgB,CAAC,YAAY,EAAE,cAAc,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;YACtF,CAAC;YAAC,MAAM,CAAC;gBACP,gCAAgC;YAClC,CAAC;QACH,CAAC;QAED,MAAM,aAAa,GAAG,KAAK,CAAC,GAAG,aAAa,gBAAgB,CAAC,CAAC;QAC9D,IAAI,CAAC,aAAa,IAAI,aAAa,EAAE,CAAC;YACpC,IAAI,CAAC;gBACH,aAAa,GAAG,MAAM,gBAAgB,CAAC,aAAa,EAAE,cAAc,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;YAC9F,CAAC;YAAC,MAAM,CAAC;gBACP,oBAAoB;YACtB,CAAC;QACH,CAAC;QAED,OAAO;YACL,MAAM;YACN,aAAa;YACb,OAAO,EAAE,UAAU,IAAI,WAAW,CAAC,OAAO,IAAI,CAAC,aAAa,KAAK,YAAY,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,+BAA+B,CAAC;SAC3I,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,MAAc,EAAE,OAAgB;QAC9C,MAAM,aAAa,GAAG,OAAO,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACzD,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QACnC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;YACpC,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,GAAG;gBAC/B,OAAO,EAAE,aAAa,KAAK,YAAY,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,+BAA+B;aACpG,CAAC;QACJ,CAAC;QACD,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAE,CAAC,SAAS,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;QAC/D,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAExB,iCAAiC;QACjC,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,MAAM,EAAE,cAAc,EAAE,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC;QACtF,MAAM,KAAK,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACxC,KAAK,CAAC,GAAG,aAAa,SAAS,CAAC,GAAG,MAAM,CAAC;QAC1C,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAClC,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,aAAqB,EAAE,OAAgB;QAC5D,MAAM,aAAa,GAAG,OAAO,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACzD,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QACnC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;YACpC,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,GAAG;gBAC/B,OAAO,EAAE,aAAa,KAAK,YAAY,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,+BAA+B;aACpG,CAAC;QACJ,CAAC;QACD,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAE,CAAC,gBAAgB,GAAG,IAAI,CAAC;QACxD,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAExB,iCAAiC;QACjC,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,aAAa,EAAE,cAAc,EAAE,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC;QAC7F,MAAM,KAAK,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACxC,KAAK,CAAC,GAAG,aAAa,gBAAgB,CAAC,GAAG,MAAM,CAAC;QACjD,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAClC,CAAC;IAED,KAAK,CAAC,SAAS;QACb,MAAM,OAAO,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACxC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;QACjD,OAAO;YACL,aAAa,EAAE,OAAO;YACtB,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC;YAChC,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS;YAC9D,gBAAgB,EAAE,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC;YAC9C,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,uBAAuB;SAClD,CAAC;IACJ,CAAC;CACF"}

package/dist/storage/file-store.d.ts

@@ -1,19 +0,0 @@
-/**
- * Persistent file-backed storage adapters for CLI NonceStore and AuditStore.
- * Ensures cross-process single-use replay protection and append-only audit logs.
- */
-import { type AuditRecord, type AuditStore, type NonceStore } from "@akadmin/core";
-export declare class FileNonceStore implements NonceStore {
-    private filePath;
-    constructor(baseDir: string);
-    private readNonces;
-    private writeNonces;
-    claim(nonce: string, ttlSeconds: number): Promise<boolean>;
-}
-export declare class FileAuditStore implements AuditStore {
-    private filePath;
-    constructor(baseDir: string);
-    append(record: AuditRecord): Promise<void>;
-    list(limit?: number): Promise<AuditRecord[]>;
-}
-//# sourceMappingURL=file-store.d.ts.map

package/dist/storage/file-store.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"file-store.d.ts","sourceRoot":"","sources":["../../src/storage/file-store.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,OAAO,EAAE,KAAK,WAAW,EAAE,KAAK,UAAU,EAAE,KAAK,UAAU,EAAgB,MAAM,eAAe,CAAC;AAEjG,qBAAa,cAAe,YAAW,UAAU;IAC/C,OAAO,CAAC,QAAQ,CAAS;gBAEb,OAAO,EAAE,MAAM;IAI3B,OAAO,CAAC,UAAU;IAWlB,OAAO,CAAC,WAAW;IAMb,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;CAsBjE;AAED,qBAAa,cAAe,YAAW,UAAU;IAC/C,OAAO,CAAC,QAAQ,CAAS;gBAEb,OAAO,EAAE,MAAM;IAIrB,MAAM,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAQ1C,IAAI,CAAC,KAAK,SAAK,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;CAmB/C"}

package/dist/storage/file-store.js

@@ -1,79 +0,0 @@
-/**
- * Persistent file-backed storage adapters for CLI NonceStore and AuditStore.
- * Ensures cross-process single-use replay protection and append-only audit logs.
- */
-import fs from "node:fs";
-import path from "node:path";
-import { redactObject } from "@akadmin/core";
-export class FileNonceStore {
-    filePath;
-    constructor(baseDir) {
-        this.filePath = path.join(baseDir, "nonces.json");
-    }
-    readNonces() {
-        if (!fs.existsSync(this.filePath)) {
-            return {};
-        }
-        try {
-            return JSON.parse(fs.readFileSync(this.filePath, "utf-8"));
-        }
-        catch {
-            return {};
-        }
-    }
-    writeNonces(data) {
-        const dir = path.dirname(this.filePath);
-        fs.mkdirSync(dir, { recursive: true, mode: 0o700 });
-        fs.writeFileSync(this.filePath, JSON.stringify(data, null, 2), { mode: 0o600 });
-    }
-    async claim(nonce, ttlSeconds) {
-        const now = Date.now();
-        const nonces = this.readNonces();
-        // 1. Prune expired nonces
-        const activeNonces = {};
-        for (const [n, exp] of Object.entries(nonces)) {
-            if (exp > now) {
-                activeNonces[n] = exp;
-            }
-        }
-        // 2. Check if nonce already consumed
-        if (activeNonces[nonce]) {
-            return false;
-        }
-        // 3. Atomically record nonce
-        activeNonces[nonce] = now + ttlSeconds * 1000;
-        this.writeNonces(activeNonces);
-        return true;
-    }
-}
-export class FileAuditStore {
-    filePath;
-    constructor(baseDir) {
-        this.filePath = path.join(baseDir, "audit.log");
-    }
-    async append(record) {
-        const dir = path.dirname(this.filePath);
-        fs.mkdirSync(dir, { recursive: true, mode: 0o700 });
-        const sanitized = redactObject(record);
-        const line = `${JSON.stringify(sanitized)}\n`;
-        fs.appendFileSync(this.filePath, line, { mode: 0o600 });
-    }
-    async list(limit = 50) {
-        if (!fs.existsSync(this.filePath)) {
-            return [];
-        }
-        const content = fs.readFileSync(this.filePath, "utf-8");
-        const lines = content.split("\n").filter((l) => l.trim().length > 0);
-        const records = [];
-        for (const line of lines.slice(-limit)) {
-            try {
-                records.push(JSON.parse(line));
-            }
-            catch {
-                // Skip malformed lines
-            }
-        }
-        return records.reverse();
-    }
-}
-//# sourceMappingURL=file-store.js.map

package/dist/storage/file-store.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"file-store.js","sourceRoot":"","sources":["../../src/storage/file-store.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAsD,YAAY,EAAE,MAAM,eAAe,CAAC;AAEjG,MAAM,OAAO,cAAc;IACjB,QAAQ,CAAS;IAEzB,YAAY,OAAe;QACzB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;IACpD,CAAC;IAEO,UAAU;QAChB,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAClC,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;QAC7D,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAEO,WAAW,CAAC,IAA4B;QAC9C,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACxC,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACpD,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAClF,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,KAAa,EAAE,UAAkB;QAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;QAEjC,0BAA0B;QAC1B,MAAM,YAAY,GAA2B,EAAE,CAAC;QAChD,KAAK,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC9C,IAAI,GAAG,GAAG,GAAG,EAAE,CAAC;gBACd,YAAY,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC;YACxB,CAAC;QACH,CAAC;QAED,qCAAqC;QACrC,IAAI,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;YACxB,OAAO,KAAK,CAAC;QACf,CAAC;QAED,6BAA6B;QAC7B,YAAY,CAAC,KAAK,CAAC,GAAG,GAAG,GAAG,UAAU,GAAG,IAAI,CAAC;QAC9C,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC;QAC/B,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AAED,MAAM,OAAO,cAAc;IACjB,QAAQ,CAAS;IAEzB,YAAY,OAAe;QACzB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAClD,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAAmB;QAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACxC,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACpD,MAAM,SAAS,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;QACvC,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC;QAC9C,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1D,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG,EAAE;QACnB,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAClC,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACxD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACrE,MAAM,OAAO,GAAkB,EAAE,CAAC;QAElC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;YACvC,IAAI,CAAC;gBACH,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;YACjC,CAAC;YAAC,MAAM,CAAC;gBACP,uBAAuB;YACzB,CAAC;QACH,CAAC;QAED,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;CACF"}