codecane 1.0.345 → 1.0.347

package/dist/common/src/actions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"actions.d.ts","sourceRoot":"","sources":["../../src/actions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAWvB,eAAO,MAAM,gBAAgB;;;;;;;;;;;;EAI3B,CAAA;AACF,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAA;AACzD,eAAO,MAAM,OAAO;;;;;;;;;;;;WAA4B,CAAA;AAChD,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,OAAO,CAAC,CAAA;AAEjD,eAAO,MAAM,cAAc;;;;;;;;;;;;EAIzB,CAAA;AACF,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAA;AAErD,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IA6C/B,CAAA;AACF,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAA;AAE/D,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;EAY7B,CAAA;AACF,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAA;AAE9D,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;EAQ5B,CAAA;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAA;AAE7D,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAchC,CAAA;AAEH,eAAO,MAAM,yBAAyB;;;;;;;;;;;;EAIpC,CAAA;AACF,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAA;AAE3E,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAM/B,CAAA;AACF,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAA;AAEjE,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAMtC,CAAA;AACF,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAA;AAE/E,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAmD/B,CAAA;AAEF,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAA"}

package/dist/common/src/actions.js

@@ -0,0 +1,167 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SERVER_ACTION_SCHEMA = exports.ManagerPromptResponseSchema = exports.PromptResponseSchema = exports.MessageCostResponseSchema = exports.ResponseCompleteSchema = exports.InitResponseSchema = exports.UsageReponseSchema = exports.CLIENT_ACTION_SCHEMA = exports.ToolCallSchema = exports.CHANGES = exports.FileChangeSchema = void 0;
+const zod_1 = require("zod");
+const constants_1 = require("./constants");
+const agent_state_1 = require("./types/agent-state");
+const grant_1 = require("./types/grant");
+const file_1 = require("./util/file");
+exports.FileChangeSchema = zod_1.z.object({
+    type: zod_1.z.enum(['patch', 'file']),
+    path: zod_1.z.string(),
+    content: zod_1.z.string(),
+});
+exports.CHANGES = zod_1.z.array(exports.FileChangeSchema);
+exports.ToolCallSchema = zod_1.z.object({
+    name: zod_1.z.string(),
+    id: zod_1.z.string(),
+    input: zod_1.z.record(zod_1.z.string(), zod_1.z.any()),
+});
+exports.CLIENT_ACTION_SCHEMA = zod_1.z.discriminatedUnion('type', [
+    zod_1.z.object({
+        type: zod_1.z.literal('prompt'),
+        promptId: zod_1.z.string(),
+        prompt: zod_1.z.string().or(zod_1.z.undefined()),
+        fingerprintId: zod_1.z.string(),
+        authToken: zod_1.z.string().optional(),
+        costMode: zod_1.z.enum(constants_1.costModes).optional().default('normal'),
+        agentState: agent_state_1.AgentStateSchema,
+        toolResults: zod_1.z.array(agent_state_1.ToolResultSchema),
+        model: zod_1.z.string().optional(),
+        cwd: zod_1.z.string().optional(),
+        repoUrl: zod_1.z.string().optional(),
+    }),
+    zod_1.z.object({
+        type: zod_1.z.literal('manager-prompt'),
+        promptId: zod_1.z.string(),
+        prompt: zod_1.z.string().optional(), // Optional for tool result responses
+        agentState: agent_state_1.AgentStateSchema,
+        toolResults: zod_1.z.array(agent_state_1.ToolResultSchema),
+        fingerprintId: zod_1.z.string(),
+        authToken: zod_1.z.string().optional(),
+        costMode: zod_1.z.enum(constants_1.costModes).optional().default('normal'),
+        model: zod_1.z.string().optional(),
+        cwd: zod_1.z.string().optional(),
+        repoName: zod_1.z.string().optional(),
+    }),
+    zod_1.z.object({
+        type: zod_1.z.literal('read-files-response'),
+        files: zod_1.z.record(zod_1.z.string(), zod_1.z.union([zod_1.z.string(), zod_1.z.null()])),
+        requestId: zod_1.z.string().optional(),
+    }),
+    zod_1.z.object({
+        type: zod_1.z.literal('init'),
+        fingerprintId: zod_1.z.string(),
+        authToken: zod_1.z.string().optional(),
+        fileContext: file_1.ProjectFileContextSchema,
+        repoUrl: zod_1.z.string().optional(),
+    }),
+    zod_1.z.object({
+        type: zod_1.z.literal('generate-commit-message'),
+        fingerprintId: zod_1.z.string(),
+        authToken: zod_1.z.string().optional(),
+        stagedChanges: zod_1.z.string(),
+    }),
+]);
+exports.UsageReponseSchema = zod_1.z.object({
+    type: zod_1.z.literal('usage-response'),
+    usage: zod_1.z.number(),
+    remainingBalance: zod_1.z.number(),
+    balanceBreakdown: zod_1.z
+        .record(zod_1.z.enum([grant_1.GrantTypeValues[0], ...grant_1.GrantTypeValues.slice(1)]), zod_1.z.number())
+        .optional(),
+    next_quota_reset: zod_1.z.coerce.date().nullable(),
+    autoTopupAdded: zod_1.z.number().optional(),
+});
+exports.InitResponseSchema = zod_1.z
+    .object({
+    type: zod_1.z.literal('init-response'),
+})
+    .merge(exports.UsageReponseSchema.omit({
+    type: true,
+}));
+exports.ResponseCompleteSchema = zod_1.z
+    .object({
+    type: zod_1.z.literal('response-complete'),
+    userInputId: zod_1.z.string(),
+    response: zod_1.z.string(),
+    changes: exports.CHANGES,
+    changesAlreadyApplied: exports.CHANGES,
+    addedFileVersions: zod_1.z.array(file_1.FileVersionSchema),
+    resetFileVersions: zod_1.z.boolean(),
+})
+    .merge(exports.UsageReponseSchema.omit({
+    type: true,
+}).partial());
+exports.MessageCostResponseSchema = zod_1.z.object({
+    type: zod_1.z.literal('message-cost-response'),
+    promptId: zod_1.z.string(),
+    credits: zod_1.z.number(),
+});
+exports.PromptResponseSchema = zod_1.z.object({
+    type: zod_1.z.literal('prompt-response'),
+    promptId: zod_1.z.string(),
+    agentState: agent_state_1.AgentStateSchema,
+    toolCalls: zod_1.z.array(agent_state_1.ToolCallSchema),
+    toolResults: zod_1.z.array(agent_state_1.ToolResultSchema),
+});
+exports.ManagerPromptResponseSchema = zod_1.z.object({
+    type: zod_1.z.literal('manager-prompt-response'),
+    promptId: zod_1.z.string(),
+    agentState: agent_state_1.AgentStateSchema,
+    toolCalls: zod_1.z.array(agent_state_1.ToolCallSchema),
+    toolResults: zod_1.z.array(agent_state_1.ToolResultSchema),
+});
+exports.SERVER_ACTION_SCHEMA = zod_1.z.discriminatedUnion('type', [
+    zod_1.z.object({
+        type: zod_1.z.literal('response-chunk'),
+        userInputId: zod_1.z.string(),
+        chunk: zod_1.z.string(),
+    }),
+    exports.ResponseCompleteSchema,
+    exports.PromptResponseSchema,
+    exports.ManagerPromptResponseSchema,
+    zod_1.z.object({
+        type: zod_1.z.literal('read-files'),
+        filePaths: zod_1.z.array(zod_1.z.string()),
+        requestId: zod_1.z.string(),
+    }),
+    zod_1.z.object({
+        type: zod_1.z.literal('tool-call'),
+        userInputId: zod_1.z.string(),
+        response: zod_1.z.string(),
+        data: exports.ToolCallSchema,
+        changes: exports.CHANGES,
+        changesAlreadyApplied: exports.CHANGES,
+        addedFileVersions: zod_1.z.array(file_1.FileVersionSchema),
+        resetFileVersions: zod_1.z.boolean(),
+    }),
+    zod_1.z.object({
+        type: zod_1.z.literal('terminal-command-result'),
+        userInputId: zod_1.z.string(),
+        result: zod_1.z.string(),
+    }),
+    zod_1.z.object({
+        type: zod_1.z.literal('npm-version-status'),
+        isUpToDate: zod_1.z.boolean(),
+        latestVersion: zod_1.z.string(),
+    }),
+    exports.InitResponseSchema,
+    exports.UsageReponseSchema,
+    exports.MessageCostResponseSchema,
+    zod_1.z.object({
+        type: zod_1.z.literal('action-error'),
+        message: zod_1.z.string(),
+        error: zod_1.z.string().optional(),
+        remainingBalance: zod_1.z.number().optional(),
+    }),
+    zod_1.z.object({
+        type: zod_1.z.literal('commit-message-response'),
+        commitMessage: zod_1.z.string(),
+    }),
+    zod_1.z.object({
+        // The server is imminently going to shutdown, and the client should reconnect
+        type: zod_1.z.literal('request-reconnect'),
+    }),
+]);
+//# sourceMappingURL=actions.js.map

package/dist/common/src/actions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"actions.js","sourceRoot":"","sources":["../../src/actions.ts"],"names":[],"mappings":";;;AAAA,6BAAuB;AAEvB,2CAAuC;AACvC,qDAI4B;AAC5B,yCAA+C;AAC/C,sCAAyE;AAE5D,QAAA,gBAAgB,GAAG,OAAC,CAAC,MAAM,CAAC;IACvC,IAAI,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC/B,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE;IAChB,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE;CACpB,CAAC,CAAA;AAEW,QAAA,OAAO,GAAG,OAAC,CAAC,KAAK,CAAC,wBAAgB,CAAC,CAAA;AAGnC,QAAA,cAAc,GAAG,OAAC,CAAC,MAAM,CAAC;IACrC,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE;IAChB,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE;IACd,KAAK,EAAE,OAAC,CAAC,MAAM,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,GAAG,EAAE,CAAC;CACrC,CAAC,CAAA;AAGW,QAAA,oBAAoB,GAAG,OAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAC/D,OAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;QACzB,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE;QACpB,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,OAAC,CAAC,SAAS,EAAE,CAAC;QACpC,aAAa,EAAE,OAAC,CAAC,MAAM,EAAE;QACzB,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAChC,QAAQ,EAAE,OAAC,CAAC,IAAI,CAAC,qBAAS,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC;QACxD,UAAU,EAAE,8BAAgB;QAC5B,WAAW,EAAE,OAAC,CAAC,KAAK,CAAC,8BAAgB,CAAC;QACtC,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC5B,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC1B,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAC/B,CAAC;IACF,OAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC;QACjC,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE;QACpB,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,qCAAqC;QACpE,UAAU,EAAE,8BAAgB;QAC5B,WAAW,EAAE,OAAC,CAAC,KAAK,CAAC,8BAAgB,CAAC;QACtC,aAAa,EAAE,OAAC,CAAC,MAAM,EAAE;QACzB,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAChC,QAAQ,EAAE,OAAC,CAAC,IAAI,CAAC,qBAAS,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC;QACxD,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC5B,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC1B,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAChC,CAAC;IACF,OAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC;QACtC,KAAK,EAAE,OAAC,CAAC,MAAM,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,KAAK,CAAC,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAC5D,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KACjC,CAAC;IACF,OAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,MAAM,CAAC;QACvB,aAAa,EAAE,OAAC,CAAC,MAAM,EAAE;QACzB,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAChC,WAAW,EAAE,+BAAwB;QACrC,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAC/B,CAAC;IACF,OAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,yBAAyB,CAAC;QAC1C,aAAa,EAAE,OAAC,CAAC,MAAM,EAAE;QACzB,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAChC,aAAa,EAAE,OAAC,CAAC,MAAM,EAAE;KAC1B,CAAC;CACH,CAAC,CAAA;AAGW,QAAA,kBAAkB,GAAG,OAAC,CAAC,MAAM,CAAC;IACzC,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC;IACjC,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE;IACjB,gBAAgB,EAAE,OAAC,CAAC,MAAM,EAAE;IAC5B,gBAAgB,EAAE,OAAC;SAChB,MAAM,CACL,OAAC,CAAC,IAAI,CAAC,CAAC,uBAAe,CAAC,CAAC,CAAC,EAAE,GAAG,uBAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EACzD,OAAC,CAAC,MAAM,EAAE,CACX;SACA,QAAQ,EAAE;IACb,gBAAgB,EAAE,OAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IAC5C,cAAc,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACtC,CAAC,CAAA;AAGW,QAAA,kBAAkB,GAAG,OAAC;KAChC,MAAM,CAAC;IACN,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,eAAe,CAAC;CACjC,CAAC;KACD,KAAK,CACJ,0BAAkB,CAAC,IAAI,CAAC;IACtB,IAAI,EAAE,IAAI;CACX,CAAC,CACH,CAAA;AAGU,QAAA,sBAAsB,GAAG,OAAC;KACpC,MAAM,CAAC;IACN,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC;IACpC,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE;IACvB,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE;IACpB,OAAO,EAAE,eAAO;IAChB,qBAAqB,EAAE,eAAO;IAC9B,iBAAiB,EAAE,OAAC,CAAC,KAAK,CAAC,wBAAiB,CAAC;IAC7C,iBAAiB,EAAE,OAAC,CAAC,OAAO,EAAE;CAC/B,CAAC;KACD,KAAK,CACJ,0BAAkB,CAAC,IAAI,CAAC;IACtB,IAAI,EAAE,IAAI;CACX,CAAC,CAAC,OAAO,EAAE,CACb,CAAA;AAEU,QAAA,yBAAyB,GAAG,OAAC,CAAC,MAAM,CAAC;IAChD,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC;IACxC,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE;IACpB,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE;CACpB,CAAC,CAAA;AAGW,QAAA,oBAAoB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC3C,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC;IAClC,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE;IACpB,UAAU,EAAE,8BAAgB;IAC5B,SAAS,EAAE,OAAC,CAAC,KAAK,CAAC,4BAAiB,CAAC;IACrC,WAAW,EAAE,OAAC,CAAC,KAAK,CAAC,8BAAgB,CAAC;CACvC,CAAC,CAAA;AAGW,QAAA,2BAA2B,GAAG,OAAC,CAAC,MAAM,CAAC;IAClD,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,yBAAyB,CAAC;IAC1C,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE;IACpB,UAAU,EAAE,8BAAgB;IAC5B,SAAS,EAAE,OAAC,CAAC,KAAK,CAAC,4BAAiB,CAAC;IACrC,WAAW,EAAE,OAAC,CAAC,KAAK,CAAC,8BAAgB,CAAC;CACvC,CAAC,CAAA;AAGW,QAAA,oBAAoB,GAAG,OAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAC/D,OAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC;QACjC,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE;QACvB,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE;KAClB,CAAC;IACF,8BAAsB;IACtB,4BAAoB;IACpB,mCAA2B;IAC3B,OAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,YAAY,CAAC;QAC7B,SAAS,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC;QAC9B,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE;KACtB,CAAC;IACF,OAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,WAAW,CAAC;QAC5B,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE;QACvB,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE;QACpB,IAAI,EAAE,sBAAc;QACpB,OAAO,EAAE,eAAO;QAChB,qBAAqB,EAAE,eAAO;QAC9B,iBAAiB,EAAE,OAAC,CAAC,KAAK,CAAC,wBAAiB,CAAC;QAC7C,iBAAiB,EAAE,OAAC,CAAC,OAAO,EAAE;KAC/B,CAAC;IACF,OAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,yBAAyB,CAAC;QAC1C,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE;QACvB,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE;KACnB,CAAC;IACF,OAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC;QACrC,UAAU,EAAE,OAAC,CAAC,OAAO,EAAE;QACvB,aAAa,EAAE,OAAC,CAAC,MAAM,EAAE;KAC1B,CAAC;IACF,0BAAkB;IAClB,0BAAkB;IAClB,iCAAyB;IACzB,OAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,cAAc,CAAC;QAC/B,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE;QACnB,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC5B,gBAAgB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KACxC,CAAC;IACF,OAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,yBAAyB,CAAC;QAC1C,aAAa,EAAE,OAAC,CAAC,MAAM,EAAE;KAC1B,CAAC;IACF,OAAC,CAAC,MAAM,CAAC;QACP,8EAA8E;QAC9E,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC;KACrC,CAAC;CACH,CAAC,CAAA"}

package/dist/common/src/analytics.d.ts

@@ -0,0 +1,6 @@
+import { AnalyticsEvent } from 'common/src/constants/analytics-events';
+export declare function initAnalytics(): void;
+export declare function flushAnalytics(): Promise<void>;
+export declare function trackEvent(event: AnalyticsEvent, userId: string, properties?: Record<string, any>): void;
+export declare function logError(error: Error, userId?: string, properties?: Record<string, any>): void;
+//# sourceMappingURL=analytics.d.ts.map

package/dist/common/src/analytics.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"analytics.d.ts","sourceRoot":"","sources":["../../src/analytics.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,cAAc,EAAE,MAAM,uCAAuC,CAAA;AAMtE,wBAAgB,aAAa,SAY5B;AAED,wBAAsB,cAAc,kBAOnC;AAED,wBAAgB,UAAU,CACxB,KAAK,EAAE,cAAc,EACrB,MAAM,EAAE,MAAM,EACd,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,QAoBjC;AAED,wBAAgB,QAAQ,CACtB,KAAK,EAAE,KAAK,EACZ,MAAM,CAAC,EAAE,MAAM,EACf,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,QAWjC"}

package/dist/common/src/analytics.js

@@ -0,0 +1,60 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.initAnalytics = initAnalytics;
+exports.flushAnalytics = flushAnalytics;
+exports.trackEvent = trackEvent;
+exports.logError = logError;
+const env_1 = require("@/env");
+const posthog_node_1 = require("posthog-node");
+const logger_1 = require("./util/logger");
+let client;
+function initAnalytics() {
+    if (!env_1.env.NEXT_PUBLIC_POSTHOG_API_KEY || !env_1.env.NEXT_PUBLIC_POSTHOG_HOST_URL) {
+        throw new Error('NEXT_PUBLIC_POSTHOG_API_KEY or NEXT_PUBLIC_POSTHOG_HOST_URL is not set');
+    }
+    client = new posthog_node_1.PostHog(env_1.env.NEXT_PUBLIC_POSTHOG_API_KEY, {
+        host: env_1.env.NEXT_PUBLIC_POSTHOG_HOST_URL,
+        flushAt: 1,
+        flushInterval: 0,
+    });
+}
+async function flushAnalytics() {
+    if (!client) {
+        return;
+    }
+    try {
+        await client.flush();
+    }
+    catch (error) { }
+}
+function trackEvent(event, userId, properties) {
+    if (env_1.env.NEXT_PUBLIC_CB_ENVIRONMENT !== 'prod') {
+        logger_1.logger.info({ payload: { event, properties } }, 'Analytics event tracked');
+        return;
+    }
+    if (!client) {
+        throw new Error('Analytics client not initialized');
+    }
+    try {
+        client.capture({
+            distinctId: userId,
+            event,
+            properties,
+        });
+    }
+    catch (error) {
+        logger_1.logger.error({ error }, 'Failed to track event');
+    }
+}
+function logError(error, userId, properties) {
+    if (!client) {
+        throw new Error('Analytics client not initialized');
+    }
+    try {
+        client.captureException(error, userId ?? 'unknown', properties);
+    }
+    catch (error) {
+        logger_1.logger.error({ error }, 'Failed to log error');
+    }
+}
+//# sourceMappingURL=analytics.js.map

package/dist/common/src/analytics.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"analytics.js","sourceRoot":"","sources":["../../src/analytics.ts"],"names":[],"mappings":";;AASA,sCAYC;AAED,wCAOC;AAED,gCAuBC;AAED,4BAcC;AAvED,+BAA2B;AAC3B,+CAAsC;AAItC,0CAAsC;AAEtC,IAAI,MAA2B,CAAA;AAE/B,SAAgB,aAAa;IAC3B,IAAI,CAAC,SAAG,CAAC,2BAA2B,IAAI,CAAC,SAAG,CAAC,4BAA4B,EAAE,CAAC;QAC1E,MAAM,IAAI,KAAK,CACb,wEAAwE,CACzE,CAAA;IACH,CAAC;IAED,MAAM,GAAG,IAAI,sBAAO,CAAC,SAAG,CAAC,2BAA2B,EAAE;QACpD,IAAI,EAAE,SAAG,CAAC,4BAA4B;QACtC,OAAO,EAAE,CAAC;QACV,aAAa,EAAE,CAAC;KACjB,CAAC,CAAA;AACJ,CAAC;AAEM,KAAK,UAAU,cAAc;IAClC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAM;IACR,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,KAAK,EAAE,CAAA;IACtB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC,CAAA,CAAC;AACpB,CAAC;AAED,SAAgB,UAAU,CACxB,KAAqB,EACrB,MAAc,EACd,UAAgC;IAEhC,IAAI,SAAG,CAAC,0BAA0B,KAAK,MAAM,EAAE,CAAC;QAC9C,eAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,yBAAyB,CAAC,CAAA;QAC1E,OAAM;IACR,CAAC;IAED,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAA;IACrD,CAAC;IAED,IAAI,CAAC;QACH,MAAM,CAAC,OAAO,CAAC;YACb,UAAU,EAAE,MAAM;YAClB,KAAK;YACL,UAAU;SACX,CAAC,CAAA;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,eAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,uBAAuB,CAAC,CAAA;IAClD,CAAC;AACH,CAAC;AAED,SAAgB,QAAQ,CACtB,KAAY,EACZ,MAAe,EACf,UAAgC;IAEhC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAA;IACrD,CAAC;IAED,IAAI,CAAC;QACH,MAAM,CAAC,gBAAgB,CAAC,KAAK,EAAE,MAAM,IAAI,SAAS,EAAE,UAAU,CAAC,CAAA;IACjE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,eAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,qBAAqB,CAAC,CAAA;IAChD,CAAC;AACH,CAAC"}

package/dist/common/src/api-keys/constants.d.ts

@@ -0,0 +1,9 @@
+export declare const ALGORITHM = "aes-256-gcm";
+export declare const IV_LENGTH = 12;
+export declare const AUTH_TAG_LENGTH = 16;
+export declare const API_KEY_TYPES: readonly ["anthropic", "gemini", "openai"];
+export type ApiKeyType = (typeof API_KEY_TYPES)[number];
+export declare const KEY_PREFIXES: Record<ApiKeyType, string>;
+export declare const KEY_LENGTHS: Record<ApiKeyType, number>;
+export declare const READABLE_NAME: Record<ApiKeyType, string>;
+//# sourceMappingURL=constants.d.ts.map

package/dist/common/src/api-keys/constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../src/api-keys/constants.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,SAAS,gBAAgB,CAAA;AACtC,eAAO,MAAM,SAAS,KAAK,CAAA;AAC3B,eAAO,MAAM,eAAe,KAAK,CAAA;AAKjC,eAAO,MAAM,aAAa,4CAA6C,CAAA;AACvE,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,aAAa,CAAC,CAAC,MAAM,CAAC,CAAA;AAEvD,eAAO,MAAM,YAAY,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,CAInD,CAAA;AACD,eAAO,MAAM,WAAW,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,CAIlD,CAAA;AAED,eAAO,MAAM,aAAa,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,CAIpD,CAAA"}

package/dist/common/src/api-keys/constants.js

@@ -0,0 +1,26 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.READABLE_NAME = exports.KEY_LENGTHS = exports.KEY_PREFIXES = exports.API_KEY_TYPES = exports.AUTH_TAG_LENGTH = exports.IV_LENGTH = exports.ALGORITHM = void 0;
+exports.ALGORITHM = 'aes-256-gcm';
+exports.IV_LENGTH = 12;
+exports.AUTH_TAG_LENGTH = 16;
+// --- Define valid API Key Types ---
+// Used by db/schema.ts to define the pgEnum
+// and by crypto.ts for type safety.
+exports.API_KEY_TYPES = ['anthropic', 'gemini', 'openai'];
+exports.KEY_PREFIXES = {
+    anthropic: 'sk-ant-api03-',
+    gemini: 'AIzaSy',
+    openai: 'sk-proj-',
+};
+exports.KEY_LENGTHS = {
+    anthropic: 108,
+    gemini: 39,
+    openai: 164,
+};
+exports.READABLE_NAME = {
+    anthropic: 'Anthropic',
+    gemini: 'Gemini',
+    openai: 'Open AI',
+};
+//# sourceMappingURL=constants.js.map

package/dist/common/src/api-keys/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../../src/api-keys/constants.ts"],"names":[],"mappings":";;;AAAa,QAAA,SAAS,GAAG,aAAa,CAAA;AACzB,QAAA,SAAS,GAAG,EAAE,CAAA;AACd,QAAA,eAAe,GAAG,EAAE,CAAA;AAEjC,qCAAqC;AACrC,4CAA4C;AAC5C,oCAAoC;AACvB,QAAA,aAAa,GAAG,CAAC,WAAW,EAAE,QAAQ,EAAE,QAAQ,CAAU,CAAA;AAG1D,QAAA,YAAY,GAA+B;IACtD,SAAS,EAAE,eAAe;IAC1B,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,UAAU;CACnB,CAAA;AACY,QAAA,WAAW,GAA+B;IACrD,SAAS,EAAE,GAAG;IACd,MAAM,EAAE,EAAE;IACV,MAAM,EAAE,GAAG;CACZ,CAAA;AAEY,QAAA,aAAa,GAA+B;IACvD,SAAS,EAAE,WAAW;IACtB,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,SAAS;CAClB,CAAA"}

package/dist/common/src/api-keys/crypto.d.ts

@@ -0,0 +1,25 @@
+import { type ApiKeyType } from './constants';
+/**
+ * Encrypts an API key using the environment secret and stores it in the database
+ * for a specific user and key type. Overwrites any existing key of the same type
+ * for that user.
+ * @param userId The ID of the user.
+ * @param keyType The type of the API key (e.g., 'gemini').
+ * @param apiKey The plaintext API key to encrypt.
+ */
+export declare function encryptAndStoreApiKey(userId: string, keyType: ApiKeyType, apiKey: string): Promise<void>;
+/**
+ * Retrieves and decrypts the stored API key for a specific user and key type
+ * using the environment secret. Validates the format for the specific key type.
+ * @param userId The ID of the user.
+ * @param keyType The type of the API key (e.g., 'gemini').
+ * @returns The decrypted API key, or null if not found, decryption fails, or validation fails.
+ */
+export declare function retrieveAndDecryptApiKey(userId: string, keyType: ApiKeyType): Promise<string | null>;
+/**
+ * Deletes a specific API key entry for a given user and key type.
+ * @param userId The ID of the user.
+ * @param keyType The type of the API key to delete (e.g., 'gemini').
+ */
+export declare function clearApiKey(userId: string, keyType: ApiKeyType): Promise<void>;
+//# sourceMappingURL=crypto.d.ts.map

package/dist/common/src/api-keys/crypto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.d.ts","sourceRoot":"","sources":["../../../src/api-keys/crypto.ts"],"names":[],"mappings":"AAKA,OAAO,EAML,KAAK,UAAU,EAChB,MAAM,aAAa,CAAA;AAmFpB;;;;;;;GAOG;AACH,wBAAsB,qBAAqB,CACzC,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,UAAU,EACnB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,IAAI,CAAC,CA0Bf;AAED;;;;;;GAMG;AACH,wBAAsB,wBAAwB,CAC5C,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,UAAU,GAClB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAqDxB;AAED;;;;GAIG;AACH,wBAAsB,WAAW,CAC/B,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,UAAU,GAClB,OAAO,CAAC,IAAI,CAAC,CAwBf"}

package/dist/common/src/api-keys/crypto.js

@@ -0,0 +1,186 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.encryptAndStoreApiKey = encryptAndStoreApiKey;
+exports.retrieveAndDecryptApiKey = retrieveAndDecryptApiKey;
+exports.clearApiKey = clearApiKey;
+const node_crypto_1 = __importDefault(require("node:crypto"));
+const drizzle_orm_1 = require("drizzle-orm");
+const db_1 = __importDefault(require("../db"));
+const constants_1 = require("./constants");
+const schema = __importStar(require("../db/schema"));
+const env_1 = require("@/env");
+const logger_1 = require("../util/logger");
+/**
+ * Encrypts an API key using the secret from environment variables.
+ * @param apiKey The plaintext API key to encrypt.
+ * @returns The encrypted string including iv and authTag, or throws error.
+ */
+function encryptApiKeyInternal(apiKey) {
+    const secretKey = env_1.env.API_KEY_ENCRYPTION_SECRET;
+    if (Buffer.from(secretKey, 'utf8').length !== 32) {
+        throw new Error('Invalid secret key length in environment. Must be 32 bytes.');
+    }
+    const iv = node_crypto_1.default.randomBytes(constants_1.IV_LENGTH);
+    const cipher = node_crypto_1.default.createCipheriv(constants_1.ALGORITHM, Buffer.from(secretKey, 'utf8'), iv, {
+        authTagLength: constants_1.AUTH_TAG_LENGTH,
+    });
+    let encrypted = cipher.update(apiKey, 'utf8', 'hex');
+    encrypted += cipher.final('hex');
+    const authTag = cipher.getAuthTag();
+    // Return IV, encrypted data, and auth tag together
+    return `${iv.toString('hex')}:${encrypted}:${authTag.toString('hex')}`;
+}
+/**
+ * Decrypts an API key string using the secret from environment variables.
+ * @param storedValue The encrypted string in format "iv:encrypted:authTag".
+ * @returns The decrypted API key string, or null if decryption fails.
+ */
+function decryptApiKeyInternal(storedValue) {
+    const secretKey = env_1.env.API_KEY_ENCRYPTION_SECRET;
+    try {
+        if (Buffer.from(secretKey, 'utf8').length !== 32) {
+            throw new Error('Invalid secret key length in environment. Must be 32 bytes.');
+        }
+        const parts = storedValue.split(':');
+        if (parts.length !== 3) {
+            return null; // Invalid format
+        }
+        const [ivHex, encryptedHex, authTagHex] = parts;
+        const iv = Buffer.from(ivHex, 'hex');
+        const encrypted = Buffer.from(encryptedHex, 'hex');
+        const authTag = Buffer.from(authTagHex, 'hex');
+        if (iv.length !== constants_1.IV_LENGTH) {
+            return null;
+        }
+        const decipher = node_crypto_1.default.createDecipheriv(constants_1.ALGORITHM, Buffer.from(secretKey, 'utf8'), iv, {
+            authTagLength: constants_1.AUTH_TAG_LENGTH,
+        });
+        decipher.setAuthTag(authTag);
+        let decryptedBuffer = decipher.update(encrypted);
+        decryptedBuffer = Buffer.concat([decryptedBuffer, decipher.final()]);
+        return decryptedBuffer.toString('utf8');
+    }
+    catch (error) {
+        return null; // Decryption failed
+    }
+}
+/**
+ * Encrypts an API key using the environment secret and stores it in the database
+ * for a specific user and key type. Overwrites any existing key of the same type
+ * for that user.
+ * @param userId The ID of the user.
+ * @param keyType The type of the API key (e.g., 'gemini').
+ * @param apiKey The plaintext API key to encrypt.
+ */
+async function encryptAndStoreApiKey(userId, keyType, apiKey) {
+    logger_1.logger.info({ userId, keyType }, 'Attempting to encrypt and store API key');
+    try {
+        const encryptedValue = encryptApiKeyInternal(apiKey);
+        // Use upsert logic based on the composite primary key (user_id, type)
+        await db_1.default
+            .insert(schema.encryptedApiKeys)
+            .values({ user_id: userId, type: keyType, api_key: encryptedValue })
+            .onConflictDoUpdate({
+            target: [schema.encryptedApiKeys.user_id, schema.encryptedApiKeys.type],
+            set: { api_key: encryptedValue },
+        });
+        logger_1.logger.info({ userId, keyType }, 'Successfully encrypted and stored API key');
+    }
+    catch (error) {
+        logger_1.logger.error({ error, userId, keyType }, 'API key encryption and storage failed');
+        throw new Error(`API key encryption and storage failed: ${error instanceof Error ? error.message : String(error)}`);
+    }
+}
+/**
+ * Retrieves and decrypts the stored API key for a specific user and key type
+ * using the environment secret. Validates the format for the specific key type.
+ * @param userId The ID of the user.
+ * @param keyType The type of the API key (e.g., 'gemini').
+ * @returns The decrypted API key, or null if not found, decryption fails, or validation fails.
+ */
+async function retrieveAndDecryptApiKey(userId, keyType) {
+    logger_1.logger.info({ userId, keyType }, 'Attempting to retrieve and decrypt API key');
+    try {
+        const result = await db_1.default.query.encryptedApiKeys.findFirst({
+            where: (0, drizzle_orm_1.and)((0, drizzle_orm_1.eq)(schema.encryptedApiKeys.user_id, userId), (0, drizzle_orm_1.eq)(schema.encryptedApiKeys.type, keyType)),
+            columns: {
+                api_key: true, // Select only the encrypted key column
+            },
+        });
+        const storedValue = result?.api_key;
+        if (!storedValue) {
+            logger_1.logger.warn({ userId, keyType }, 'No API key found for user and type');
+            return null; // No key stored for this user/type
+        }
+        const decryptedKey = decryptApiKeyInternal(storedValue);
+        if (decryptedKey === null) {
+            logger_1.logger.warn({ userId, keyType }, 'API key decryption failed');
+            return null; // Decryption failed
+        }
+        // Validate key format based on type
+        const prefix = constants_1.KEY_PREFIXES[keyType];
+        const length = constants_1.KEY_LENGTHS[keyType];
+        if ((prefix && !decryptedKey.startsWith(prefix)) ||
+            (length && decryptedKey.length !== length)) {
+            logger_1.logger.warn({ userId, keyType, prefix, length, keyLength: decryptedKey.length }, 'API key validation failed');
+            return null; // Validation failed
+        }
+        logger_1.logger.info({ userId, keyType }, 'Successfully retrieved and decrypted API key');
+        return decryptedKey;
+    }
+    catch (error) {
+        logger_1.logger.error({ error, userId, keyType }, 'Error retrieving or decrypting API key');
+        return null; // Error during DB query or other unexpected issue
+    }
+}
+/**
+ * Deletes a specific API key entry for a given user and key type.
+ * @param userId The ID of the user.
+ * @param keyType The type of the API key to delete (e.g., 'gemini').
+ */
+async function clearApiKey(userId, keyType) {
+    logger_1.logger.info({ userId, keyType }, 'Attempting to clear API key');
+    try {
+        const result = await db_1.default
+            .delete(schema.encryptedApiKeys)
+            .where((0, drizzle_orm_1.and)((0, drizzle_orm_1.eq)(schema.encryptedApiKeys.user_id, userId), (0, drizzle_orm_1.eq)(schema.encryptedApiKeys.type, keyType)))
+            .returning(); // Return the deleted row to check if something was deleted
+        if (result.length > 0) {
+            logger_1.logger.info({ userId, keyType }, 'Successfully cleared API key');
+        }
+        else {
+            logger_1.logger.warn({ userId, keyType }, 'No API key found to clear');
+        }
+    }
+    catch (error) {
+        logger_1.logger.error({ error, userId, keyType }, 'Failed to clear API key');
+        throw new Error(`Failed to clear API key: ${error instanceof Error ? error.message : String(error)}`);
+    }
+}
+//# sourceMappingURL=crypto.js.map

package/dist/common/src/api-keys/crypto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.js","sourceRoot":"","sources":["../../../src/api-keys/crypto.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAuGA,sDA8BC;AASD,4DAwDC;AAOD,kCA2BC;AAxOD,8DAAgC;AAEhC,6CAAqC;AAErC,+CAAsB;AACtB,2CAOoB;AACpB,qDAAsC;AACtC,+BAA2B;AAC3B,2CAAuC;AAEvC;;;;GAIG;AACH,SAAS,qBAAqB,CAAC,MAAc;IAC3C,MAAM,SAAS,GAAG,SAAG,CAAC,yBAAyB,CAAA;IAC/C,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CACb,6DAA6D,CAC9D,CAAA;IACH,CAAC;IACD,MAAM,EAAE,GAAG,qBAAM,CAAC,WAAW,CAAC,qBAAS,CAAC,CAAA;IACxC,MAAM,MAAM,GAAG,qBAAM,CAAC,cAAc,CAClC,qBAAS,EACT,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,EAC9B,EAAE,EACF;QACE,aAAa,EAAE,2BAAe;KAC/B,CACF,CAAA;IAED,IAAI,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,CAAA;IACpD,SAAS,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IAEhC,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,EAAE,CAAA;IAEnC,mDAAmD;IACnD,OAAO,GAAG,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,SAAS,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAA;AACxE,CAAC;AAED;;;;GAIG;AACH,SAAS,qBAAqB,CAAC,WAAmB;IAChD,MAAM,SAAS,GAAG,SAAG,CAAC,yBAAyB,CAAA;IAC/C,IAAI,CAAC;QACH,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;YACjD,MAAM,IAAI,KAAK,CACb,6DAA6D,CAC9D,CAAA;QACH,CAAC;QAED,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QACpC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,OAAO,IAAI,CAAA,CAAC,iBAAiB;QAC/B,CAAC;QAED,MAAM,CAAC,KAAK,EAAE,YAAY,EAAE,UAAU,CAAC,GAAG,KAAK,CAAA;QAC/C,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;QACpC,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,CAAA;QAClD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,CAAA;QAE9C,IAAI,EAAE,CAAC,MAAM,KAAK,qBAAS,EAAE,CAAC;YAC5B,OAAO,IAAI,CAAA;QACb,CAAC;QAED,MAAM,QAAQ,GAAG,qBAAM,CAAC,gBAAgB,CACtC,qBAAS,EACT,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,EAC9B,EAAE,EACF;YACE,aAAa,EAAE,2BAAe;SAC/B,CACF,CAAA;QACD,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,CAAA;QAE5B,IAAI,eAAe,GAAG,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;QAChD,eAAe,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,eAAe,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAA;QAEpE,OAAO,eAAe,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;IACzC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,IAAI,CAAA,CAAC,oBAAoB;IAClC,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACI,KAAK,UAAU,qBAAqB,CACzC,MAAc,EACd,OAAmB,EACnB,MAAc;IAEd,eAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,yCAAyC,CAAC,CAAA;IAC3E,IAAI,CAAC;QACH,MAAM,cAAc,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAA;QAEpD,sEAAsE;QACtE,MAAM,YAAE;aACL,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC;aAC/B,MAAM,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC;aACnE,kBAAkB,CAAC;YAClB,MAAM,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC,gBAAgB,CAAC,IAAI,CAAC;YACvE,GAAG,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE;SACjC,CAAC,CAAA;QACJ,eAAM,CAAC,IAAI,CACT,EAAE,MAAM,EAAE,OAAO,EAAE,EACnB,2CAA2C,CAC5C,CAAA;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,eAAM,CAAC,KAAK,CACV,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,EAC1B,uCAAuC,CACxC,CAAA;QACD,MAAM,IAAI,KAAK,CACb,0CAA0C,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACnG,CAAA;IACH,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACI,KAAK,UAAU,wBAAwB,CAC5C,MAAc,EACd,OAAmB;IAEnB,eAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,4CAA4C,CAAC,CAAA;IAC9E,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,YAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,SAAS,CAAC;YACvD,KAAK,EAAE,IAAA,iBAAG,EACR,IAAA,gBAAE,EAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC,EAC3C,IAAA,gBAAE,EAAC,MAAM,CAAC,gBAAgB,CAAC,IAAI,EAAE,OAAO,CAAC,CAC1C;YACD,OAAO,EAAE;gBACP,OAAO,EAAE,IAAI,EAAE,uCAAuC;aACvD;SACF,CAAC,CAAA;QAEF,MAAM,WAAW,GAAG,MAAM,EAAE,OAAO,CAAA;QACnC,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,eAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,oCAAoC,CAAC,CAAA;YACtE,OAAO,IAAI,CAAA,CAAC,mCAAmC;QACjD,CAAC;QAED,MAAM,YAAY,GAAG,qBAAqB,CAAC,WAAW,CAAC,CAAA;QAEvD,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;YAC1B,eAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,2BAA2B,CAAC,CAAA;YAC7D,OAAO,IAAI,CAAA,CAAC,oBAAoB;QAClC,CAAC;QAED,oCAAoC;QACpC,MAAM,MAAM,GAAG,wBAAY,CAAC,OAAO,CAAC,CAAA;QACpC,MAAM,MAAM,GAAG,uBAAW,CAAC,OAAO,CAAC,CAAA;QAEnC,IACE,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YAC5C,CAAC,MAAM,IAAI,YAAY,CAAC,MAAM,KAAK,MAAM,CAAC,EAC1C,CAAC;YACD,eAAM,CAAC,IAAI,CACT,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,YAAY,CAAC,MAAM,EAAE,EACnE,2BAA2B,CAC5B,CAAA;YACD,OAAO,IAAI,CAAA,CAAC,oBAAoB;QAClC,CAAC;QAED,eAAM,CAAC,IAAI,CACT,EAAE,MAAM,EAAE,OAAO,EAAE,EACnB,8CAA8C,CAC/C,CAAA;QACD,OAAO,YAAY,CAAA;IACrB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,eAAM,CAAC,KAAK,CACV,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,EAC1B,wCAAwC,CACzC,CAAA;QACD,OAAO,IAAI,CAAA,CAAC,kDAAkD;IAChE,CAAC;AACH,CAAC;AAED;;;;GAIG;AACI,KAAK,UAAU,WAAW,CAC/B,MAAc,EACd,OAAmB;IAEnB,eAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,6BAA6B,CAAC,CAAA;IAC/D,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,YAAE;aACpB,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC;aAC/B,KAAK,CACJ,IAAA,iBAAG,EACD,IAAA,gBAAE,EAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC,EAC3C,IAAA,gBAAE,EAAC,MAAM,CAAC,gBAAgB,CAAC,IAAI,EAAE,OAAO,CAAC,CAC1C,CACF;aACA,SAAS,EAAE,CAAA,CAAC,2DAA2D;QAE1E,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,eAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,8BAA8B,CAAC,CAAA;QAClE,CAAC;aAAM,CAAC;YACN,eAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,2BAA2B,CAAC,CAAA;QAC/D,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,eAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,yBAAyB,CAAC,CAAA;QACnE,MAAM,IAAI,KAAK,CACb,4BAA4B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACrF,CAAA;IACH,CAAC;AACH,CAAC"}