awarts 0.3.1 → 0.3.2

package/dist/index.js

@@ -4710,26 +4710,61 @@ var open_default = open;
 import fs7 from "node:fs/promises";
 import path3 from "node:path";
 import os4 from "node:os";
+import { fileURLToPath as fileURLToPath2 } from "node:url";
 
 // src/lib/auth-store.ts
 import fs6 from "node:fs/promises";
 import path2 from "node:path";
 import os3 from "node:os";
+import crypto from "node:crypto";
 var AWARTS_DIR = path2.join(os3.homedir(), ".awarts");
 var AUTH_FILE = path2.join(AWARTS_DIR, "auth.json");
+function deriveKey() {
+  const material = `awarts-cli:${os3.hostname()}:${os3.userInfo().username}`;
+  return crypto.createHash("sha256").update(material).digest();
+}
+function encrypt(plaintext) {
+  const key = deriveKey();
+  const iv = crypto.randomBytes(12);
+  const cipher = crypto.createCipheriv("aes-256-gcm", key, iv);
+  const encrypted = Buffer.concat([cipher.update(plaintext, "utf8"), cipher.final()]);
+  const tag = cipher.getAuthTag();
+  return {
+    version: 2,
+    iv: iv.toString("hex"),
+    tag: tag.toString("hex"),
+    ciphertext: encrypted.toString("hex")
+  };
+}
+function decrypt(file) {
+  const key = deriveKey();
+  const decipher = crypto.createDecipheriv("aes-256-gcm", key, Buffer.from(file.iv, "hex"));
+  decipher.setAuthTag(Buffer.from(file.tag, "hex"));
+  return decipher.update(file.ciphertext, "hex", "utf8") + decipher.final("utf8");
+}
 async function ensureDir() {
   await fs6.mkdir(AWARTS_DIR, { recursive: true, mode: 448 });
 }
 async function saveAuth(data) {
   await ensureDir();
-  await fs6.writeFile(AUTH_FILE, JSON.stringify(data, null, 2), { encoding: "utf-8", mode: 384 });
+  const encrypted = encrypt(JSON.stringify(data));
+  await fs6.writeFile(AUTH_FILE, JSON.stringify(encrypted, null, 2), { encoding: "utf-8", mode: 384 });
 }
 async function loadAuth() {
   try {
     const raw = await fs6.readFile(AUTH_FILE, "utf-8");
     const parsed = JSON.parse(raw);
+    if (parsed.version === 2 && parsed.ciphertext) {
+      const decrypted = JSON.parse(decrypt(parsed));
+      if (typeof decrypted.token === "string" && typeof decrypted.user_id === "string") {
+        return decrypted;
+      }
+      return null;
+    }
     if (typeof parsed.token === "string" && typeof parsed.user_id === "string") {
-      return parsed;
+      const data = parsed;
+      await saveAuth(data);
+      return data;
     }
     return null;
   } catch {
@@ -4747,6 +4782,13 @@ async function getToken() {
 }
 
 // src/lib/api.ts
+var __dirname3 = path3.dirname(fileURLToPath2(import.meta.url));
+var _cliVersion = "0.0.0";
+try {
+  const pkgPath = path3.resolve(__dirname3, "..", "package.json");
+  const pkg = JSON.parse(await fs7.readFile(pkgPath, "utf-8"));
+  _cliVersion = pkg.version ?? "0.0.0";
+} catch {}
 var DEFAULT_API_URL = "https://honorable-bee-242.convex.site";
 async function readConfigUrl() {
   try {
@@ -4781,7 +4823,7 @@ async function apiRequest(method, endpoint, body) {
   const token = await getToken();
   const headers = {
     "Content-Type": "application/json",
-    "User-Agent": "awarts-cli/0.1.0"
+    "User-Agent": `awarts-cli/${_cliVersion}`
   };
   if (token) {
     headers["Authorization"] = `Bearer ${token}`;
@@ -4808,7 +4850,7 @@ async function postUnauthenticated(endpoint, body) {
     method: "POST",
     headers: {
       "Content-Type": "application/json",
-      "User-Agent": "awarts-cli/0.1.0"
+      "User-Agent": `awarts-cli/${_cliVersion}`
     },
     body: body != null ? JSON.stringify(body) : undefined
   });
@@ -5990,7 +6032,7 @@ import os7 from "node:os";
 var KEYS_PATH = path6.join(os7.homedir(), ".awarts", "keys.json");
 async function ensureDir3() {
   const dir = path6.dirname(KEYS_PATH);
-  await fs10.mkdir(dir, { recursive: true });
+  await fs10.mkdir(dir, { recursive: true, mode: 448 });
 }
 async function loadKeys() {
   try {
@@ -7376,12 +7418,12 @@ async function daemonRunLoop(intervalMs) {
 
 // src/lib/version-check.ts
 import { readFileSync } from "node:fs";
-import { fileURLToPath as fileURLToPath2 } from "node:url";
+import { fileURLToPath as fileURLToPath3 } from "node:url";
 import { dirname, join } from "node:path";
-var __dirname3 = dirname(fileURLToPath2(import.meta.url));
+var __dirname4 = dirname(fileURLToPath3(import.meta.url));
 function getLocalVersion() {
   try {
-    const pkg = JSON.parse(readFileSync(join(__dirname3, "..", "package.json"), "utf-8"));
+    const pkg = JSON.parse(readFileSync(join(__dirname4, "..", "package.json"), "utf-8"));
     return pkg.version ?? "0.0.0";
   } catch {
     return "0.0.0";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "awarts",
-  "version": "0.3.1",
+  "version": "0.3.2",
   "description": "Track your AI coding across Claude, Codex, Gemini & Antigravity",
   "type": "module",
   "license": "MIT",