aquaman-coder 0.12.0

package/dist/projects.js

@@ -0,0 +1,124 @@
+/**
+ * Project resolver — maps a working directory to an aquaman project
+ * config in `~/.aquaman/projects.yaml`.
+ *
+ * Each project declares:
+ *   - one or more paths it owns (longest-prefix wins)
+ *   - an env map: ENV_VAR_NAME → aquaman://service/key reference
+ *
+ * The resolver materializes references to real credentials by calling
+ * the broker over UDS — see `./broker-client.ts`.
+ */
+import * as fs from 'node:fs';
+import * as os from 'node:os';
+import * as path from 'node:path';
+import { parse as yamlParse, stringify as yamlStringify } from 'yaml';
+// Service must be lowercase (matches the daemon's SAFE_SERVICE_NAME).
+// Key allows uppercase to match the daemon's broader SAFE_KEY_NAME so
+// vault entries like `aws/SECRET_ACCESS_KEY` can be referenced.
+const AQUAMAN_REF = /^aquaman:\/\/([a-z0-9][a-z0-9._-]*)\/([a-zA-Z0-9][a-zA-Z0-9._-]*)$/;
+const POSIX_ENV_NAME = /^[A-Za-z_][A-Za-z0-9_]*$/;
+export function defaultProjectsPath() {
+    return path.join(os.homedir(), '.aquaman', 'projects.yaml');
+}
+/**
+ * Expand `~` and resolve to an absolute path.
+ */
+function expandPath(p) {
+    if (p.startsWith('~/') || p === '~') {
+        return path.join(os.homedir(), p.slice(1));
+    }
+    return path.resolve(p);
+}
+/**
+ * Load and validate a projects.yaml file. Returns an empty config if
+ * the file does not exist. Throws on malformed YAML or invalid refs.
+ */
+export function loadProjects(projectsPath = defaultProjectsPath()) {
+    if (!fs.existsSync(projectsPath)) {
+        return { version: 1, projects: {} };
+    }
+    const raw = fs.readFileSync(projectsPath, 'utf-8');
+    const parsed = yamlParse(raw);
+    if (!parsed || typeof parsed !== 'object' || !parsed.projects) {
+        return { version: 1, projects: {} };
+    }
+    // Validate each project — surface bad refs as parse errors.
+    for (const [name, cfg] of Object.entries(parsed.projects)) {
+        if (!Array.isArray(cfg.paths) || cfg.paths.length === 0) {
+            throw new Error(`Project "${name}" has no paths`);
+        }
+        if (!cfg.env || typeof cfg.env !== 'object') {
+            cfg.env = {};
+            continue;
+        }
+        for (const [envKey, ref] of Object.entries(cfg.env)) {
+            if (!POSIX_ENV_NAME.test(envKey)) {
+                throw new Error(`Project "${name}" has invalid env name "${envKey}". ` +
+                    `POSIX env names must match /^[A-Za-z_][A-Za-z0-9_]*$/`);
+            }
+            if (typeof ref !== 'string' || !AQUAMAN_REF.test(ref)) {
+                throw new Error(`Project "${name}" env ${envKey} has invalid reference: "${ref}". ` +
+                    `Expected aquaman://<service>/<key>`);
+            }
+        }
+    }
+    return parsed;
+}
+/**
+ * Write projects.yaml atomically. Creates parent directory if needed.
+ */
+export function saveProjects(file, projectsPath = defaultProjectsPath()) {
+    const dir = path.dirname(projectsPath);
+    if (!fs.existsSync(dir)) {
+        fs.mkdirSync(dir, { recursive: true, mode: 0o700 });
+    }
+    const yaml = yamlStringify({ version: file.version ?? 1, projects: file.projects });
+    const tmp = projectsPath + '.tmp';
+    fs.writeFileSync(tmp, yaml, { mode: 0o600 });
+    fs.renameSync(tmp, projectsPath);
+}
+/**
+ * Try to resolve symlinks; fall back to literal path if the target
+ * does not exist. macOS's /var → /private/var symlink trips up naive
+ * string matching, hence this helper.
+ */
+function realpathOrLiteral(p) {
+    try {
+        return fs.realpathSync(p);
+    }
+    catch {
+        return p;
+    }
+}
+/**
+ * Given a working directory, return the matching project config (or
+ * null if none matches). Longest-prefix wins so nested projects work.
+ */
+export function findProjectForCwd(cwd, file) {
+    const absCwd = realpathOrLiteral(path.resolve(cwd));
+    let best = null;
+    for (const [name, cfg] of Object.entries(file.projects)) {
+        for (const declaredPath of cfg.paths) {
+            const abs = realpathOrLiteral(expandPath(declaredPath));
+            if (absCwd === abs || absCwd.startsWith(abs + path.sep)) {
+                if (!best || abs.length > best.prefixLen) {
+                    best = { name, config: cfg, prefixLen: abs.length };
+                }
+            }
+        }
+    }
+    if (!best)
+        return null;
+    return { name: best.name, config: best.config };
+}
+/**
+ * Parse an aquaman:// reference into (service, key).
+ */
+export function parseRef(ref) {
+    const m = AQUAMAN_REF.exec(ref);
+    if (!m)
+        return null;
+    return { service: m[1], key: m[2] };
+}
+//# sourceMappingURL=projects.js.map

package/dist/projects.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"projects.js","sourceRoot":"","sources":["../src/projects.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,SAAS,IAAI,aAAa,EAAE,MAAM,MAAM,CAAC;AActE,sEAAsE;AACtE,sEAAsE;AACtE,gEAAgE;AAChE,MAAM,WAAW,GAAG,oEAAoE,CAAC;AACzF,MAAM,cAAc,GAAG,0BAA0B,CAAC;AAElD,MAAM,UAAU,mBAAmB;IACjC,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,eAAe,CAAC,CAAC;AAC9D,CAAC;AAED;;GAEG;AACH,SAAS,UAAU,CAAC,CAAS;IAC3B,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;QACpC,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AACzB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,eAAuB,mBAAmB,EAAE;IACvE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QACjC,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IACtC,CAAC;IAED,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAwB,CAAC;IACrD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;QAC9D,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IACtC,CAAC;IAED,4DAA4D;IAC5D,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxD,MAAM,IAAI,KAAK,CAAC,YAAY,IAAI,gBAAgB,CAAC,CAAC;QACpD,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;YAC5C,GAAG,CAAC,GAAG,GAAG,EAAE,CAAC;YACb,SAAS;QACX,CAAC;QACD,KAAK,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACpD,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;gBACjC,MAAM,IAAI,KAAK,CACb,YAAY,IAAI,2BAA2B,MAAM,KAAK;oBACtD,uDAAuD,CACxD,CAAC;YACJ,CAAC;YACD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBACtD,MAAM,IAAI,KAAK,CACb,YAAY,IAAI,SAAS,MAAM,4BAA4B,GAAG,KAAK;oBACnE,oCAAoC,CACrC,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY,CAC1B,IAAkB,EAClB,eAAuB,mBAAmB,EAAE;IAE5C,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACvC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACtD,CAAC;IACD,MAAM,IAAI,GAAG,aAAa,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;IACpF,MAAM,GAAG,GAAG,YAAY,GAAG,MAAM,CAAC;IAClC,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7C,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;AACnC,CAAC;AAED;;;;GAIG;AACH,SAAS,iBAAiB,CAAC,CAAS;IAClC,IAAI,CAAC;QACH,OAAO,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAC/B,GAAW,EACX,IAAkB;IAElB,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;IACpD,IAAI,IAAI,GAAsE,IAAI,CAAC;IAEnF,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxD,KAAK,MAAM,YAAY,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;YACrC,MAAM,GAAG,GAAG,iBAAiB,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC;YACxD,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBACxD,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;oBACzC,IAAI,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;gBACtD,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;AAClD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,QAAQ,CAAC,GAAW;IAClC,MAAM,CAAC,GAAG,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpB,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACtC,CAAC"}

package/package.json

@@ -0,0 +1,67 @@
+{
+  "name": "aquaman-coder",
+  "version": "0.12.0",
+  "description": "Vault adapter for AI coding agents. Keep API keys, secrets, and .env contents out of your coding agent's memory and transcripts. Supports Claude Code (Codex, OpenCode, Cursor coming soon).",
+  "type": "module",
+  "bin": {
+    "aquaman-coder": "dist/cli/index.js"
+  },
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "scripts": {
+    "build": "tsc -b",
+    "prepublishOnly": "npm run clean && npm run build",
+    "clean": "rm -rf dist tsconfig.tsbuildinfo"
+  },
+  "keywords": [
+    "aquaman",
+    "aquaman-coder",
+    "claude-code",
+    "codex",
+    "opencode",
+    "cursor",
+    "credentials",
+    "vault",
+    "secrets",
+    "dotenv",
+    "secret-management",
+    "credential-isolation",
+    "coding-agent",
+    "ai-agent",
+    "1password",
+    "keychain",
+    "bitwarden"
+  ],
+  "author": "tech4242",
+  "license": "MIT",
+  "dependencies": {
+    "aquaman-proxy": "0.12.0",
+    "commander": "^11.0.0",
+    "yaml": "^2.3.4"
+  },
+  "devDependencies": {
+    "@types/node": "^20.10.0",
+    "typescript": "^5.3.0"
+  },
+  "files": [
+    "dist",
+    "LICENSE",
+    "README.md"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/tech4242/aquaman.git",
+    "directory": "packages/coder"
+  },
+  "engines": {
+    "node": ">=18.0.0"
+  },
+  "homepage": "https://github.com/tech4242/aquaman/tree/main/packages/coder#readme",
+  "bugs": {
+    "url": "https://github.com/tech4242/aquaman/issues"
+  }
+}