arkaos 2.1.1 → 2.2.0

package/VERSION

@@ -1 +1 @@
-2.1.1
+2.2.0

package/core/keys.py

@@ -0,0 +1,91 @@
+"""API key management — store, retrieve, and list API keys securely.
+
+Keys stored in ~/.arkaos/keys.json with 600 permissions (owner only).
+"""
+
+import json
+import os
+import stat
+from pathlib import Path
+from typing import Optional
+
+KEYS_PATH = Path.home() / ".arkaos" / "keys.json"
+
+# Known providers with descriptions
+PROVIDERS = {
+    "OPENAI_API_KEY": {"name": "OpenAI", "used_for": "Whisper transcription, embeddings, GPT"},
+    "GOOGLE_API_KEY": {"name": "Google", "used_for": "Gemini API, Nano Banana, Google Cloud AI"},
+    "FAL_API_KEY": {"name": "fal.ai", "used_for": "Image generation, video generation"},
+}
+
+
+def _load() -> dict[str, str]:
+    if not KEYS_PATH.exists():
+        return {}
+    return json.loads(KEYS_PATH.read_text())
+
+
+def _save(keys: dict[str, str]) -> None:
+    KEYS_PATH.parent.mkdir(parents=True, exist_ok=True)
+    KEYS_PATH.write_text(json.dumps(keys, indent=2))
+    os.chmod(KEYS_PATH, stat.S_IRUSR | stat.S_IWUSR)  # 600
+
+
+def get_key(name: str) -> Optional[str]:
+    """Get an API key by name. Also checks environment variables."""
+    env_val = os.environ.get(name)
+    if env_val:
+        return env_val
+    keys = _load()
+    return keys.get(name)
+
+
+def set_key(name: str, value: str) -> None:
+    """Set an API key."""
+    keys = _load()
+    keys[name] = value
+    _save(keys)
+
+
+def remove_key(name: str) -> bool:
+    """Remove an API key. Returns True if it existed."""
+    keys = _load()
+    if name in keys:
+        del keys[name]
+        _save(keys)
+        return True
+    return False
+
+
+def list_keys() -> list[dict]:
+    """List configured keys (masked values)."""
+    keys = _load()
+    result = []
+    for name, info in PROVIDERS.items():
+        value = keys.get(name, "")
+        env_val = os.environ.get(name, "")
+        configured = bool(value or env_val)
+        masked = ""
+        if value:
+            masked = value[:4] + "..." + value[-4:] if len(value) > 10 else "****"
+        elif env_val:
+            masked = "(from environment)"
+        result.append({
+            "key": name,
+            "provider": info["name"],
+            "used_for": info["used_for"],
+            "configured": configured,
+            "masked_value": masked,
+        })
+    # Include any custom keys not in PROVIDERS
+    for name, value in keys.items():
+        if name not in PROVIDERS:
+            masked = value[:4] + "..." + value[-4:] if len(value) > 10 else "****"
+            result.append({
+                "key": name,
+                "provider": "Custom",
+                "used_for": "",
+                "configured": True,
+                "masked_value": masked,
+            })
+    return result

package/core/knowledge/ingest.py

@@ -119,6 +119,22 @@ class IngestEngine:
 
         progress(100, f"Done — {count} chunks indexed")
 
+        # Record token usage in budget
+        try:
+            from core.budget.manager import BudgetManager
+            from pathlib import Path as BudgetPath
+            budget_mgr = BudgetManager(storage_path=BudgetPath.home() / ".arkaos" / "budget-usage.json")
+            tokens_est = len(text) // 4  # ~1 token per 4 chars
+            budget_mgr.record_usage(
+                agent_id="kb-indexer",
+                tokens=tokens_est,
+                tier=2,
+                department="kb",
+                description=f"ingest-{source_type}: {source[:60]}",
+            )
+        except Exception:
+            pass
+
         return IngestResult(
             source=source,
             source_type=source_type,

package/installer/cli.js

@@ -40,6 +40,7 @@ Usage:
   npx arkaos update           Update to latest version
   npx arkaos migrate          Migrate from v1 to v2
   npx arkaos dashboard        Start monitoring dashboard
+  npx arkaos keys             Manage API keys (OpenAI, fal.ai, etc.)
   npx arkaos doctor           Run health checks
   npx arkaos uninstall        Remove ArkaOS
 
@@ -99,6 +100,12 @@ async function main() {
       await migrate();
       break;
 
+    case "keys": {
+      const { keys: keysCmd } = await import("./keys.js");
+      await keysCmd(positionals.slice(1));
+      break;
+    }
+
     case "dashboard": {
       const { execSync: execDash } = await import("node:child_process");
       const repoRootDash = dirname(fileURLToPath(import.meta.url)).replace(/\/installer$/, "");

package/installer/keys.js

@@ -0,0 +1,84 @@
+import { existsSync, readFileSync, writeFileSync, chmodSync } from "node:fs";
+import { join } from "node:path";
+import { homedir } from "node:os";
+
+const KEYS_PATH = join(homedir(), ".arkaos", "keys.json");
+
+const PROVIDERS = {
+  OPENAI_API_KEY: { name: "OpenAI", used_for: "Whisper transcription, embeddings, GPT" },
+  GOOGLE_API_KEY: { name: "Google", used_for: "Gemini API, Nano Banana, Google Cloud AI" },
+  FAL_API_KEY: { name: "fal.ai", used_for: "Image generation, video generation" },
+};
+
+function loadKeys() {
+  if (!existsSync(KEYS_PATH)) return {};
+  return JSON.parse(readFileSync(KEYS_PATH, "utf-8"));
+}
+
+function saveKeys(keys) {
+  writeFileSync(KEYS_PATH, JSON.stringify(keys, null, 2));
+  try { chmodSync(KEYS_PATH, 0o600); } catch {}
+}
+
+function mask(value) {
+  if (!value) return "";
+  return value.length > 10 ? value.slice(0, 4) + "..." + value.slice(-4) : "****";
+}
+
+export async function keys(args) {
+  const [action, keyName, keyValue] = args;
+
+  if (action === "set") {
+    if (!keyName || !keyValue) {
+      console.error("  Usage: npx arkaos keys set KEY_NAME value");
+      console.error("\n  Available keys:");
+      for (const [k, v] of Object.entries(PROVIDERS)) {
+        console.error(`    ${k.padEnd(20)} ${v.name} — ${v.used_for}`);
+      }
+      process.exit(1);
+    }
+    const keys = loadKeys();
+    keys[keyName] = keyValue;
+    saveKeys(keys);
+    console.log(`\n  Set ${keyName} = ${mask(keyValue)}`);
+    console.log(`  Stored in: ${KEYS_PATH}\n`);
+    return;
+  }
+
+  if (action === "remove" || action === "delete") {
+    if (!keyName) {
+      console.error("  Usage: npx arkaos keys remove KEY_NAME");
+      process.exit(1);
+    }
+    const keys = loadKeys();
+    if (keyName in keys) {
+      delete keys[keyName];
+      saveKeys(keys);
+      console.log(`\n  Removed ${keyName}\n`);
+    } else {
+      console.log(`\n  Key ${keyName} not found.\n`);
+    }
+    return;
+  }
+
+  // Default: list keys
+  const keys = loadKeys();
+  console.log("\n  ArkaOS API Keys\n");
+
+  for (const [k, v] of Object.entries(PROVIDERS)) {
+    const value = keys[k] || process.env[k] || "";
+    const status = value ? "\x1b[32m configured\x1b[0m" : "\x1b[90m not set\x1b[0m";
+    const masked = keys[k] ? mask(keys[k]) : (process.env[k] ? "(env)" : "");
+    console.log(`  ${k.padEnd(22)} ${v.name.padEnd(12)} ${status}  ${masked}`);
+  }
+
+  // Custom keys
+  for (const [k, v] of Object.entries(keys)) {
+    if (!(k in PROVIDERS)) {
+      console.log(`  ${k.padEnd(22)} Custom       \x1b[32m configured\x1b[0m  ${mask(v)}`);
+    }
+  }
+
+  console.log(`\n  Set a key:    npx arkaos keys set OPENAI_API_KEY sk-...`);
+  console.log(`  Remove a key: npx arkaos keys remove OPENAI_API_KEY\n`);
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "arkaos",
-  "version": "2.1.1",
+  "version": "2.2.0",
   "description": "The Operating System for AI Agent Teams",
   "type": "module",
   "bin": {

package/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "arkaos-core"
-version = "2.1.1"
+version = "2.2.0"
 description = "Core engine for ArkaOS — The Operating System for AI Agent Teams"
 readme = "README.md"
 license = {text = "MIT"}