comisai 1.0.37 → 1.0.41

package/node_modules/@comis/agent/dist/model/model-catalog.d.ts

@@ -1,93 +0,0 @@
-/**
- * Model Catalog: In-memory store combining pi-ai's static model registry
- * with live scan results for validated model metadata.
- *
- * The catalog serves as the central source of truth for model metadata
- * (context window, max tokens, input capabilities, cost, validation status).
- * It is populated on startup from pi-ai's static registry of 22+ providers
- * and hundreds of models, then optionally merged with live scan results
- * that confirm API key validity and discover additional models.
- *
- * @module
- */
-import type { ModelCompatConfig } from "@comis/core";
-/** A single entry in the model catalog. */
-export interface CatalogEntry {
-    /** Provider identifier (e.g., "anthropic", "openai") */
-    provider: string;
-    /** Model identifier at the provider (e.g., "claude-sonnet-4-5-20250929") */
-    modelId: string;
-    /** Human-readable display name */
-    displayName: string;
-    /** Maximum context window in tokens */
-    contextWindow: number;
-    /** Maximum output tokens */
-    maxTokens: number;
-    /** Supported input modalities */
-    input: ("text" | "image")[];
-    /** Whether the model supports extended thinking / reasoning */
-    reasoning: boolean;
-    /** Cost per million tokens */
-    cost: {
-        input: number;
-        output: number;
-        cacheRead: number;
-        cacheWrite: number;
-    };
-    /** Whether the model was confirmed available via API scan */
-    validated: boolean;
-    /** Timestamp of last successful validation (0 if never validated) */
-    validatedAt: number;
-    /** Comis-domain compatibility flags. Undefined = use provider defaults. */
-    comisCompat?: ModelCompatConfig;
-}
-/** Model catalog interface for querying and managing model metadata. */
-export interface ModelCatalog {
-    /** Get a specific model entry by provider and model ID. */
-    get(provider: string, modelId: string): CatalogEntry | undefined;
-    /** Get all models for a provider. */
-    getByProvider(provider: string): CatalogEntry[];
-    /** Get all catalog entries. */
-    getAll(): CatalogEntry[];
-    /** Populate the catalog from pi-ai's static model registry. */
-    loadStatic(): void;
-    /** Merge live scan results into the catalog, updating validation state. */
-    mergeScanned(entries: CatalogEntry[]): void;
-    /** Get all provider names that have at least one model. */
-    getProviders(): string[];
-}
-/**
- * Create a model catalog backed by an in-memory Map.
- *
- * Usage:
- * ```typescript
- * const catalog = createModelCatalog();
- * catalog.loadStatic(); // populates from pi-ai
- * catalog.mergeScanned(scanResults); // merge live validation
- * const entry = catalog.get("anthropic", "claude-sonnet-4-5-20250929");
- * ```
- */
-export declare function createModelCatalog(): ModelCatalog;
-/** Per-token cost rates for formulas (e.g., 0.000003 = $3/MTok).
- *  Converted from CatalogEntry's per-MTok rates by dividing by 1_000_000. */
-export interface PerTokenCostRates {
-    input: number;
-    output: number;
-    cacheRead: number;
-    cacheWrite: number;
-    /** 49-01: Per-token cost for 1h TTL cache writes.
-     *  Prefers SDK-supplied value when available; falls back to 2x input rate.
-     *  1h TTL = 2x base input rate (Anthropic pricing). */
-    cacheWrite1h: number;
-}
-/** Zero-cost sentinel for unknown models. Callers check cost.input > 0 before using rates. */
-export declare const ZERO_COST: PerTokenCostRates;
-/**
- * Resolve per-token cost rates for a provider/model pair.
- * Returns ZERO_COST for unknown models -- callers check cost.input > 0.
- *
- * CatalogEntry.cost stores per-MTok rates from the pi-ai SDK.
- * This function divides by 1_000_000 to return per-token rates
- * so downstream formulas like `tokens * rate = $cost` work directly.
- */
-export declare function resolveModelPricing(provider: string, modelId: string, catalog?: ModelCatalog): PerTokenCostRates;

package/node_modules/@comis/agent/dist/model/model-catalog.js

@@ -1,152 +0,0 @@
-// SPDX-License-Identifier: Apache-2.0
-/**
- * Model Catalog: In-memory store combining pi-ai's static model registry
- * with live scan results for validated model metadata.
- *
- * The catalog serves as the central source of truth for model metadata
- * (context window, max tokens, input capabilities, cost, validation status).
- * It is populated on startup from pi-ai's static registry of 22+ providers
- * and hundreds of models, then optionally merged with live scan results
- * that confirm API key validity and discover additional models.
- *
- * @module
- */
-import { getProviders, getModels } from "@mariozechner/pi-ai";
-// ---------------------------------------------------------------------------
-// Internal helpers
-// ---------------------------------------------------------------------------
-function catalogKey(provider, modelId) {
-    return `${provider}/${modelId}`;
-}
-// ---------------------------------------------------------------------------
-// Factory
-// ---------------------------------------------------------------------------
-/**
- * Create a model catalog backed by an in-memory Map.
- *
- * Usage:
- * ```typescript
- * const catalog = createModelCatalog();
- * catalog.loadStatic(); // populates from pi-ai
- * catalog.mergeScanned(scanResults); // merge live validation
- * const entry = catalog.get("anthropic", "claude-sonnet-4-5-20250929");
- * ```
- */
-export function createModelCatalog() {
-    const entries = new Map();
-    return {
-        get(provider, modelId) {
-            return entries.get(catalogKey(provider, modelId));
-        },
-        getByProvider(provider) {
-            const result = [];
-            for (const entry of entries.values()) {
-                if (entry.provider === provider) {
-                    result.push(entry);
-                }
-            }
-            return result;
-        },
-        getAll() {
-            return Array.from(entries.values());
-        },
-        loadStatic() {
-            const providers = getProviders();
-            for (const providerName of providers) {
-                // eslint-disable-next-line @typescript-eslint/no-explicit-any -- provider names are dynamic strings, SDK expects literal unions
-                const models = getModels(providerName);
-                for (const model of models) {
-                    const entry = {
-                        provider: providerName,
-                        modelId: model.id,
-                        displayName: model.name,
-                        contextWindow: model.contextWindow ?? 0,
-                        maxTokens: model.maxTokens ?? 0,
-                        input: (model.input ?? ["text"]),
-                        reasoning: model.reasoning ?? false,
-                        cost: {
-                            input: model.cost?.input ?? 0,
-                            output: model.cost?.output ?? 0,
-                            cacheRead: model.cost?.cacheRead ?? 0,
-                            cacheWrite: model.cost?.cacheWrite ?? 0,
-                        },
-                        validated: false,
-                        validatedAt: 0,
-                    };
-                    entries.set(catalogKey(providerName, model.id), entry);
-                }
-            }
-        },
-        mergeScanned(scannedEntries) {
-            for (const scanned of scannedEntries) {
-                const key = catalogKey(scanned.provider, scanned.modelId);
-                const existing = entries.get(key);
-                if (existing) {
-                    // Update validation state on existing entry
-                    existing.validated = scanned.validated;
-                    existing.validatedAt = scanned.validatedAt;
-                }
-                else {
-                    // New model discovered via scan -- add to catalog
-                    entries.set(key, { ...scanned });
-                }
-            }
-        },
-        getProviders() {
-            const providerSet = new Set();
-            for (const entry of entries.values()) {
-                providerSet.add(entry.provider);
-            }
-            return Array.from(providerSet);
-        },
-    };
-}
-/** Zero-cost sentinel for unknown models. Callers check cost.input > 0 before using rates. */
-export const ZERO_COST = { input: 0, output: 0, cacheRead: 0, cacheWrite: 0, cacheWrite1h: 0 };
-let _pricingSingleton;
-/**
- * Resolve per-token cost rates for a provider/model pair.
- * Returns ZERO_COST for unknown models -- callers check cost.input > 0.
- *
- * CatalogEntry.cost stores per-MTok rates from the pi-ai SDK.
- * This function divides by 1_000_000 to return per-token rates
- * so downstream formulas like `tokens * rate = $cost` work directly.
- */
-export function resolveModelPricing(provider, modelId, catalog) {
-    const source = catalog ?? (() => {
-        if (!_pricingSingleton) {
-            _pricingSingleton = createModelCatalog();
-            _pricingSingleton.loadStatic();
-        }
-        return _pricingSingleton;
-    })();
-    const entry = source.get(provider, modelId);
-    if (!entry)
-        return ZERO_COST;
-    const inputRate = entry.cost.input / 1_000_000;
-    // 49-01: cacheWrite1h SDK-preference guard.
-    // Derive 1h TTL rate as 2x input (Anthropic pricing).
-    // Prefer SDK-supplied value when the cost object includes cacheWrite1h.
-    const derived1h = inputRate * 2;
-    const sdkCost = entry.cost;
-    let cacheWrite1h = derived1h;
-    if (typeof sdkCost.cacheWrite1h === "number" && sdkCost.cacheWrite1h > 0) {
-        const sdk1h = sdkCost.cacheWrite1h / 1_000_000;
-        // 49-01: Drift detection -- >5% divergence from derived 2x rate.
-        // When the SDK provides a cacheWrite1h that differs significantly from
-        // the expected 2x-input derivation, callers should log a WARN.
-        // model-catalog is stateless (no logger) so we only compute the flag.
-        if (derived1h > 0 && Math.abs(sdk1h - derived1h) / derived1h > 0.05) {
-            // Drift detected: SDK 1h rate diverges >5% from 2x input derivation.
-            // Consumer (pi-event-bridge) should log WARN with hint + errorKind.
-        }
-        cacheWrite1h = sdk1h;
-    }
-    return {
-        input: inputRate,
-        output: entry.cost.output / 1_000_000,
-        cacheRead: entry.cost.cacheRead / 1_000_000,
-        cacheWrite: entry.cost.cacheWrite / 1_000_000,
-        cacheWrite1h,
-    };
-}

package/node_modules/@comis/agent/dist/model/oauth-credential-store-file.d.ts

@@ -1,37 +0,0 @@
-/**
- * Plaintext file-backed OAuthCredentialStorePort adapter.
- *
- * Default storage backend for OAuth credentials (derives from existing
- * dataDir, no separate config key). Stores all profiles in a single JSON
- * file at ${dataDir}/auth-profiles.json with mode 0o600.
- *
- * Atomic write sequence (full POSIX crash safety on ext4):
- *   write tmp 0o600 → fsync(tmpFd) → close(tmpFd) → rename(tmp, canonical)
- *   → fsync(parentDirFd) → close(parentDirFd)
- *
- * cron-store.ts does NOT fsync the parent directory; this adapter MUST
- * because OAuth credentials are security-critical (a lost rename due to
- * power-loss-after-data-write would silently log the user out).
- *
- * Per-profile-ID locking via withExecutionLock: different providers and
- * different identities for the same provider can refresh in parallel.
- *
- * Schema versioning: single integer version at top level. Hard-fail on
- * mismatch — pre-1.0 software, no migration plumbing.
- *
- * @module
- */
-import { type OAuthCredentialStorePort } from "@comis/core";
-export interface OAuthCredentialStoreFileConfig {
-    /** Comis data directory (e.g. ~/.comis). The adapter writes to ${dataDir}/auth-profiles.json. */
-    dataDir: string;
-}
-/**
- * Create a plaintext file-backed OAuthCredentialStorePort adapter.
- *
- * Atomic, lock-protected, version-validated. Lifecycle:
- * - On factory call: ensures dataDir exists (mkdir 0o700 recursive); cleans up stale .tmp files.
- * - On every set/delete: per-profile-ID file lock → load → mutate → atomic-write.
- * - On every get/has/list: load (no lock — readers see snapshot per POSIX rename atomicity).
- */
-export declare function createOAuthCredentialStoreFile(config: OAuthCredentialStoreFileConfig): OAuthCredentialStorePort;

package/node_modules/@comis/agent/dist/model/oauth-credential-store-file.js

@@ -1,279 +0,0 @@
-// SPDX-License-Identifier: Apache-2.0
-/**
- * Plaintext file-backed OAuthCredentialStorePort adapter.
- *
- * Default storage backend for OAuth credentials (derives from existing
- * dataDir, no separate config key). Stores all profiles in a single JSON
- * file at ${dataDir}/auth-profiles.json with mode 0o600.
- *
- * Atomic write sequence (full POSIX crash safety on ext4):
- *   write tmp 0o600 → fsync(tmpFd) → close(tmpFd) → rename(tmp, canonical)
- *   → fsync(parentDirFd) → close(parentDirFd)
- *
- * cron-store.ts does NOT fsync the parent directory; this adapter MUST
- * because OAuth credentials are security-critical (a lost rename due to
- * power-loss-after-data-write would silently log the user out).
- *
- * Per-profile-ID locking via withExecutionLock: different providers and
- * different identities for the same provider can refresh in parallel.
- *
- * Schema versioning: single integer version at top level. Hard-fail on
- * mismatch — pre-1.0 software, no migration plumbing.
- *
- * @module
- */
-import * as fs from "node:fs/promises";
-import { ok, err, fromPromise, suppressError } from "@comis/shared";
-import { safePath } from "@comis/core";
-import { validateProfileId, } from "@comis/core";
-import { withExecutionLock } from "@comis/scheduler";
-const SCHEMA_VERSION = 1;
-const FILE_NAME = "auth-profiles.json";
-const LOCKS_SUBDIR = ".locks";
-const LOCK_OPTIONS = { staleMs: 30_000, updateMs: 5_000 };
-/**
- * Per-profile in-process serialization queue.
- *
- * `withExecutionLock` uses `retries: 0` so two concurrent same-profile writes
- * within the SAME Node process would race the cross-process file lock and the
- * second caller would get `err("locked")`. The in-process mutex serializes
- * same-profile writes BEFORE they reach the file lock — different profiles
- * still proceed in parallel (each gets its own queue), preserving per-profile
- * lock granularity. Mirrors cron-store.ts:181.
- */
-function createPerProfileMutex() {
-    const chains = new Map();
-    return {
-        serialize(profileId, fn) {
-            const prior = chains.get(profileId) ?? Promise.resolve();
-            const next = prior.then(fn, fn);
-            // Swallow rejections in the chain so subsequent serialize() calls keep running.
-            chains.set(profileId, next.then(() => undefined, () => undefined));
-            return next;
-        },
-    };
-}
-/**
- * Sanitize a profile-ID for safe inclusion in a lock-file path.
- * One-way transformation, lock-file name only — the canonical profile-ID
- * stored in the JSON file keeps its original form.
- *
- * Mappings: ":" → "__", "@" → "_at_".
- */
-function sanitizeProfileIdForLockPath(profileId) {
-    return profileId.replace(/:/g, "__").replace(/@/g, "_at_");
-}
-function lockSentinelPath(dataDir, profileId) {
-    return safePath(dataDir, LOCKS_SUBDIR, "auth-profile__" + sanitizeProfileIdForLockPath(profileId) + ".lock");
-}
-function authProfilesFilePath(dataDir) {
-    return safePath(dataDir, FILE_NAME);
-}
-/**
- * Atomic write with parent-dir fsync.
- * Sequence: write tmp 0o600 → fsync(tmp) → close(tmp) → rename(tmp, canonical)
- *           → fsync(parentDir) → close(parentDir).
- *
- * Tmp filename includes pid + random suffix so concurrent writes (different
- * profile-IDs holding different per-profile locks) don't race on the same
- * tmp path. Mirrors cron-store.ts:103.
- */
-async function atomicWriteJson(canonicalPath, parentDir, data) {
-    const tmpPath = canonicalPath + "." + String(process.pid) + "." + Math.random().toString(16).slice(2) + ".tmp";
-    await fs.writeFile(tmpPath, JSON.stringify(data, null, 2), {
-        encoding: "utf-8",
-        mode: 0o600,
-    });
-    const tmpFd = await fs.open(tmpPath, "r");
-    try {
-        await tmpFd.sync();
-    }
-    finally {
-        await tmpFd.close();
-    }
-    await fs.rename(tmpPath, canonicalPath);
-    const dirFd = await fs.open(parentDir, "r");
-    try {
-        await dirFd.sync();
-    }
-    finally {
-        await dirFd.close();
-    }
-}
-/**
- * Load the auth-profiles file. Hard-fails on schema-version mismatch.
- * ENOENT → returns ok({ version: 1, profiles: {} }) (empty store).
- */
-async function loadAuthProfiles(filePath) {
-    return fromPromise((async () => {
-        let raw;
-        try {
-            raw = await fs.readFile(filePath, "utf-8");
-        }
-        catch (e) {
-            if (e !== null &&
-                typeof e === "object" &&
-                "code" in e &&
-                e.code === "ENOENT") {
-                return { version: SCHEMA_VERSION, profiles: {} };
-            }
-            throw e;
-        }
-        const parsed = JSON.parse(raw);
-        if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed)) {
-            throw new Error("auth-profiles.json: malformed (expected object). Hint: Delete " +
-                filePath +
-                " and re-login to recreate.");
-        }
-        const obj = parsed;
-        const version = obj.version;
-        if (version !== SCHEMA_VERSION) {
-            throw new Error("OAuth profile store version mismatch: expected " +
-                SCHEMA_VERSION +
-                ", got " +
-                String(version) +
-                ". Hint: Delete " +
-                filePath +
-                " and re-run `comis auth login` to recreate the profile. Stored profiles for unknown schema versions cannot be migrated.");
-        }
-        const profilesRaw = obj.profiles;
-        if (profilesRaw === null ||
-            typeof profilesRaw !== "object" ||
-            Array.isArray(profilesRaw)) {
-            throw new Error("auth-profiles.json: profiles field malformed. Hint: Delete " +
-                filePath +
-                " and re-login.");
-        }
-        return {
-            version,
-            profiles: profilesRaw,
-        };
-    })());
-}
-/**
- * Cleanup orphaned *.tmp files from previous crashed writes (hygiene).
- * Best-effort — failures are silent; this is housekeeping, not correctness.
- */
-async function cleanupStaleTmpFiles(parentDir) {
-    try {
-        const entries = await fs.readdir(parentDir);
-        const tmpFiles = entries.filter((n) => n.startsWith(FILE_NAME) && n.endsWith(".tmp"));
-        for (const name of tmpFiles) {
-            try {
-                await fs.unlink(safePath(parentDir, name));
-            }
-            catch {
-                // best-effort cleanup
-            }
-        }
-    }
-    catch {
-        // dir may not exist yet
-    }
-}
-/**
- * Create a plaintext file-backed OAuthCredentialStorePort adapter.
- *
- * Atomic, lock-protected, version-validated. Lifecycle:
- * - On factory call: ensures dataDir exists (mkdir 0o700 recursive); cleans up stale .tmp files.
- * - On every set/delete: per-profile-ID file lock → load → mutate → atomic-write.
- * - On every get/has/list: load (no lock — readers see snapshot per POSIX rename atomicity).
- */
-export function createOAuthCredentialStoreFile(config) {
-    const { dataDir } = config;
-    const filePath = authProfilesFilePath(dataDir);
-    const parentDir = dataDir;
-    const mutex = createPerProfileMutex();
-    // Best-effort startup hygiene — do not block factory return.
-    suppressError(cleanupStaleTmpFiles(parentDir), "oauth-credential-store-file: stale .tmp cleanup");
-    async function ensureParentDir() {
-        await fs.mkdir(parentDir, { recursive: true, mode: 0o700 });
-    }
-    const port = {
-        async get(profileId) {
-            const validation = validateProfileId(profileId);
-            if (!validation.ok)
-                return err(validation.error);
-            const loadRes = await loadAuthProfiles(filePath);
-            if (!loadRes.ok)
-                return err(loadRes.error);
-            return ok(loadRes.value.profiles[profileId]);
-        },
-        async set(profileId, profile) {
-            const validation = validateProfileId(profileId);
-            if (!validation.ok)
-                return err(validation.error);
-            await ensureParentDir();
-            const lockPath = lockSentinelPath(dataDir, profileId);
-            return mutex.serialize(profileId, async () => {
-                const lockResult = await withExecutionLock(lockPath, async () => {
-                    const loadRes = await loadAuthProfiles(filePath);
-                    if (!loadRes.ok)
-                        throw loadRes.error;
-                    const data = loadRes.value;
-                    data.profiles[profileId] = {
-                        ...profile,
-                        profileId,
-                        version: SCHEMA_VERSION,
-                    };
-                    await atomicWriteJson(filePath, parentDir, data);
-                }, LOCK_OPTIONS);
-                if (!lockResult.ok) {
-                    return err(new Error("OAuth file adapter set(" +
-                        profileId +
-                        ") failed: lock " +
-                        lockResult.error));
-                }
-                return ok(undefined);
-            });
-        },
-        async delete(profileId) {
-            const validation = validateProfileId(profileId);
-            if (!validation.ok)
-                return err(validation.error);
-            await ensureParentDir();
-            const lockPath = lockSentinelPath(dataDir, profileId);
-            return mutex.serialize(profileId, async () => {
-                let deleted = false;
-                const lockResult = await withExecutionLock(lockPath, async () => {
-                    const loadRes = await loadAuthProfiles(filePath);
-                    if (!loadRes.ok)
-                        throw loadRes.error;
-                    const data = loadRes.value;
-                    if (profileId in data.profiles) {
-                        delete data.profiles[profileId];
-                        deleted = true;
-                        await atomicWriteJson(filePath, parentDir, data);
-                    }
-                }, LOCK_OPTIONS);
-                if (!lockResult.ok) {
-                    return err(new Error("OAuth file adapter delete(" +
-                        profileId +
-                        ") failed: lock " +
-                        lockResult.error));
-                }
-                return ok(deleted);
-            });
-        },
-        async list(filter) {
-            const loadRes = await loadAuthProfiles(filePath);
-            if (!loadRes.ok)
-                return err(loadRes.error);
-            const all = Object.values(loadRes.value.profiles);
-            if (filter?.provider) {
-                return ok(all.filter((p) => p.provider === filter.provider));
-            }
-            return ok(all);
-        },
-        async has(profileId) {
-            const validation = validateProfileId(profileId);
-            if (!validation.ok)
-                return err(validation.error);
-            const loadRes = await loadAuthProfiles(filePath);
-            if (!loadRes.ok)
-                return err(loadRes.error);
-            return ok(profileId in loadRes.value.profiles);
-        },
-    };
-    return Object.freeze(port);
-}

package/node_modules/@comis/agent/dist/model/oauth-credential-store-selector.d.ts

@@ -1,49 +0,0 @@
-/**
- * OAuth credential store selector.
- *
- * The CLI process needs to instantiate the same adapter the daemon uses, but
- * @comis/cli cannot import from @comis/daemon (dep direction). Daemon and CLI
- * both consume from @comis/agent.
- *
- * Throws (NOT a Result — daemon bootstrap is a synchronous trust boundary
- * where fail-fast is the right policy) when:
- *  - storage === "encrypted" AND either secretsCrypto or secretsDb is missing
- *    (operator forgot to set SECRETS_MASTER_KEY but selected encrypted mode)
- *
- * For the encrypted branch the adapter SHARES the supplied secretsDb handle —
- * a single connection serves both `secrets` and `oauth_profiles` tables in the
- * same file.
- *
- * @module
- */
-import type Database from "better-sqlite3";
-import type { SecretsCrypto, OAuthCredentialStorePort } from "@comis/core";
-import { createOAuthProfileStoreEncrypted } from "@comis/memory";
-import { createOAuthCredentialStoreFile } from "./oauth-credential-store-file.js";
-/** Storage backend selector from `appConfig.oauth.storage`. */
-export type OAuthStorageMode = "file" | "encrypted";
-/**
- * Inputs for selectOAuthCredentialStore. Extracted to a typed shape so the
- * helper can be unit-tested without spinning up a full setupSingleAgent path.
- */
-export interface SelectOAuthCredentialStoreInput {
-    /** Storage backend selector from `appConfig.oauth.storage`. */
-    storage: OAuthStorageMode;
-    /** Absolute data directory (e.g. ~/.comis). Constructed via `safePath` upstream. */
-    dataDir: string;
-    /** Optional SecretsCrypto engine — REQUIRED when storage === "encrypted". */
-    secretsCrypto?: SecretsCrypto;
-    /** Optional shared better-sqlite3 handle — REQUIRED when storage === "encrypted". */
-    secretsDb?: Database.Database;
-    /** Optional injection points for unit tests (defaults to the real factories). */
-    factories?: {
-        file?: typeof createOAuthCredentialStoreFile;
-        encrypted?: typeof createOAuthProfileStoreEncrypted;
-    };
-}
-/**
- * Select and instantiate the right OAuthCredentialStorePort adapter from
- * `appConfig.oauth.storage`. Used by both the daemon (setup-agents.ts) and
- * the CLI commands (`comis auth login/list/logout/status`).
- */
-export declare function selectOAuthCredentialStore(input: SelectOAuthCredentialStoreInput): OAuthCredentialStorePort;

package/node_modules/@comis/agent/dist/model/oauth-credential-store-selector.js

@@ -1,50 +0,0 @@
-// SPDX-License-Identifier: Apache-2.0
-/**
- * OAuth credential store selector.
- *
- * The CLI process needs to instantiate the same adapter the daemon uses, but
- * @comis/cli cannot import from @comis/daemon (dep direction). Daemon and CLI
- * both consume from @comis/agent.
- *
- * Throws (NOT a Result — daemon bootstrap is a synchronous trust boundary
- * where fail-fast is the right policy) when:
- *  - storage === "encrypted" AND either secretsCrypto or secretsDb is missing
- *    (operator forgot to set SECRETS_MASTER_KEY but selected encrypted mode)
- *
- * For the encrypted branch the adapter SHARES the supplied secretsDb handle —
- * a single connection serves both `secrets` and `oauth_profiles` tables in the
- * same file.
- *
- * @module
- */
-import { createOAuthProfileStoreEncrypted } from "@comis/memory";
-import { createOAuthCredentialStoreFile } from "./oauth-credential-store-file.js";
-/**
- * Select and instantiate the right OAuthCredentialStorePort adapter from
- * `appConfig.oauth.storage`. Used by both the daemon (setup-agents.ts) and
- * the CLI commands (`comis auth login/list/logout/status`).
- */
-export function selectOAuthCredentialStore(input) {
-    const { storage, dataDir, secretsCrypto, secretsDb, factories } = input;
-    const fileFactory = factories?.file ?? createOAuthCredentialStoreFile;
-    const encryptedFactory = factories?.encrypted ?? createOAuthProfileStoreEncrypted;
-    if (storage === "encrypted") {
-        // Bootstrap precondition: encrypted-mode requires BOTH a SecretsCrypto
-        // engine and the shared secrets.db handle. No silent fallback to file
-        // mode — fail fast with operator hint.
-        if (!secretsCrypto || !secretsDb) {
-            throw new Error("OAuth storage mode is 'encrypted' but the secrets DB / crypto engine " +
-                "is not initialized. Hint: set SECRETS_MASTER_KEY env var (and restart " +
-                "the daemon) so the encrypted secrets store boots, or change " +
-                "appConfig.oauth.storage to 'file' to use the plaintext file backend.");
-        }
-        // SHARE the existing better-sqlite3 connection from createSqliteSecretStore
-        // (NOT a second handle to the same file). initOAuthProfileSchema (called
-        // inside createOAuthProfileStoreEncrypted) is idempotent (CREATE TABLE IF
-        // NOT EXISTS), so it's safe to call from this adapter on a db that already
-        // has the secrets table.
-        return encryptedFactory(secretsDb, secretsCrypto);
-    }
-    // Default: plaintext file-backed adapter at ${dataDir}/auth-profiles.json.
-    return fileFactory({ dataDir });
-}