fivocell 6.0.3 → 6.2.0

package/dist/walls/06-memory/privacy/key-migration.js

@@ -0,0 +1,124 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.migrateKey = migrateKey;
+exports.getMigrationStatus = getMigrationStatus;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const os = __importStar(require("os"));
+const key_provider_1 = require("./key-provider");
+// ============================================================
+// key-migration.ts — Migrate old file keys to new provider
+//
+// Migration flow:
+//   1. Check if new provider has key → done
+//   2. Check old file key (~/.fivo/cell/keys/local.key) → migrate
+//   3. Check project-local key (.cell/private/.archive.key) → migrate
+//   4. Keep old files as backup (don't delete)
+// ============================================================
+const KEY_ID = 'fivocell-archive';
+function getOldGlobalKeyPath() {
+    return path.join(os.homedir(), '.fivo', 'cell', 'keys', 'local.key');
+}
+function getOldProjectKeyPath(projectDir) {
+    return path.join(projectDir, '.cell', 'private', '.archive.key');
+}
+function migrateKey(projectDir) {
+    const provider = (0, key_provider_1.getKeyProvider)();
+    // 1. Check if provider already has the key
+    const existing = (0, key_provider_1.getKey)(KEY_ID);
+    if (existing) {
+        return {
+            migrated: false,
+            source: 'os-store',
+            provider: provider.name,
+            message: `Key already exists in ${provider.name}`,
+        };
+    }
+    // 2. Try old global file key
+    const oldGlobalPath = getOldGlobalKeyPath();
+    if (fs.existsSync(oldGlobalPath)) {
+        try {
+            const raw = fs.readFileSync(oldGlobalPath, 'utf-8').trim();
+            const key = Buffer.from(raw, 'hex');
+            if (key.length === 32) {
+                (0, key_provider_1.setKey)(KEY_ID, key);
+                return {
+                    migrated: true,
+                    source: 'global-file',
+                    provider: provider.name,
+                    message: `Migrated from ${oldGlobalPath} to ${provider.name}`,
+                };
+            }
+        }
+        catch { /* corrupt file, continue */ }
+    }
+    // 3. Try old project-local key
+    const oldProjectPath = getOldProjectKeyPath(projectDir);
+    if (fs.existsSync(oldProjectPath)) {
+        try {
+            const raw = fs.readFileSync(oldProjectPath, 'utf-8').trim();
+            const key = Buffer.from(raw, 'hex');
+            if (key.length === 32) {
+                (0, key_provider_1.setKey)(KEY_ID, key);
+                return {
+                    migrated: true,
+                    source: 'project-file',
+                    provider: provider.name,
+                    message: `Migrated from ${oldProjectPath} to ${provider.name}`,
+                };
+            }
+        }
+        catch { /* corrupt file, continue */ }
+    }
+    // 4. No existing key found — will be created on first use
+    return {
+        migrated: false,
+        source: 'none',
+        provider: provider.name,
+        message: 'No existing key found. New key will be created on first use.',
+    };
+}
+function getMigrationStatus() {
+    const existing = (0, key_provider_1.getKey)(KEY_ID);
+    const oldGlobal = fs.existsSync(getOldGlobalKeyPath());
+    return {
+        newProviderHas: !!existing,
+        oldGlobalExists: oldGlobal,
+        oldProjectExists: false, // checked per-project
+        needsMigration: !existing && oldGlobal,
+    };
+}
+//# sourceMappingURL=key-migration.js.map

package/dist/walls/06-memory/privacy/key-migration.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"key-migration.js","sourceRoot":"","sources":["../../../../src/walls/06-memory/privacy/key-migration.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAiCA,gCAyDC;AAED,gDAeC;AA3GD,uCAAyB;AACzB,2CAA6B;AAC7B,uCAAyB;AAEzB,iDAAkF;AAElF,+DAA+D;AAC/D,2DAA2D;AAC3D,EAAE;AACF,kBAAkB;AAClB,4CAA4C;AAC5C,kEAAkE;AAClE,sEAAsE;AACtE,+CAA+C;AAC/C,+DAA+D;AAE/D,MAAM,MAAM,GAAG,kBAAkB,CAAC;AAElC,SAAS,mBAAmB;IAC1B,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;AACvE,CAAC;AAED,SAAS,oBAAoB,CAAC,UAAkB;IAC9C,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,cAAc,CAAC,CAAC;AACnE,CAAC;AASD,SAAgB,UAAU,CAAC,UAAkB;IAC3C,MAAM,QAAQ,GAAG,IAAA,6BAAc,GAAE,CAAC;IAElC,2CAA2C;IAC3C,MAAM,QAAQ,GAAG,IAAA,qBAAM,EAAC,MAAM,CAAC,CAAC;IAChC,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO;YACL,QAAQ,EAAE,KAAK;YACf,MAAM,EAAE,UAAU;YAClB,QAAQ,EAAE,QAAQ,CAAC,IAAI;YACvB,OAAO,EAAE,yBAAyB,QAAQ,CAAC,IAAI,EAAE;SAClD,CAAC;IACJ,CAAC;IAED,6BAA6B;IAC7B,MAAM,aAAa,GAAG,mBAAmB,EAAE,CAAC;IAC5C,IAAI,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;QACjC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;YAC3D,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACpC,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;gBACtB,IAAA,qBAAM,EAAC,MAAM,EAAE,GAAG,CAAC,CAAC;gBACpB,OAAO;oBACL,QAAQ,EAAE,IAAI;oBACd,MAAM,EAAE,aAAa;oBACrB,QAAQ,EAAE,QAAQ,CAAC,IAAI;oBACvB,OAAO,EAAE,iBAAiB,aAAa,OAAO,QAAQ,CAAC,IAAI,EAAE;iBAC9D,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAC,4BAA4B,CAAC,CAAC;IAC1C,CAAC;IAED,+BAA+B;IAC/B,MAAM,cAAc,GAAG,oBAAoB,CAAC,UAAU,CAAC,CAAC;IACxD,IAAI,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;QAClC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;YAC5D,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACpC,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;gBACtB,IAAA,qBAAM,EAAC,MAAM,EAAE,GAAG,CAAC,CAAC;gBACpB,OAAO;oBACL,QAAQ,EAAE,IAAI;oBACd,MAAM,EAAE,cAAc;oBACtB,QAAQ,EAAE,QAAQ,CAAC,IAAI;oBACvB,OAAO,EAAE,iBAAiB,cAAc,OAAO,QAAQ,CAAC,IAAI,EAAE;iBAC/D,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAC,4BAA4B,CAAC,CAAC;IAC1C,CAAC;IAED,0DAA0D;IAC1D,OAAO;QACL,QAAQ,EAAE,KAAK;QACf,MAAM,EAAE,MAAM;QACd,QAAQ,EAAE,QAAQ,CAAC,IAAI;QACvB,OAAO,EAAE,8DAA8D;KACxE,CAAC;AACJ,CAAC;AAED,SAAgB,kBAAkB;IAMhC,MAAM,QAAQ,GAAG,IAAA,qBAAM,EAAC,MAAM,CAAC,CAAC;IAChC,MAAM,SAAS,GAAG,EAAE,CAAC,UAAU,CAAC,mBAAmB,EAAE,CAAC,CAAC;IAEvD,OAAO;QACL,cAAc,EAAE,CAAC,CAAC,QAAQ;QAC1B,eAAe,EAAE,SAAS;QAC1B,gBAAgB,EAAE,KAAK,EAAE,sBAAsB;QAC/C,cAAc,EAAE,CAAC,QAAQ,IAAI,SAAS;KACvC,CAAC;AACJ,CAAC"}

package/dist/walls/06-memory/privacy/key-provider-file.d.ts

@@ -0,0 +1,9 @@
+import { KeyProvider } from './key-provider';
+export declare class FileKeyProvider implements KeyProvider {
+    name: string;
+    isAvailable(): boolean;
+    getKey(id: string): Buffer | null;
+    setKey(id: string, key: Buffer): boolean;
+    deleteKey(id: string): boolean;
+}
+//# sourceMappingURL=key-provider-file.d.ts.map

package/dist/walls/06-memory/privacy/key-provider-file.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"key-provider-file.d.ts","sourceRoot":"","sources":["../../../../src/walls/06-memory/privacy/key-provider-file.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,WAAW,EAAoB,MAAM,gBAAgB,CAAC;AA0C/D,qBAAa,eAAgB,YAAW,WAAW;IACjD,IAAI,SAAoB;IAExB,WAAW,IAAI,OAAO;IAQtB,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAWjC,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO;IAYxC,SAAS,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO;CAO/B"}

package/dist/walls/06-memory/privacy/key-provider-file.js

@@ -0,0 +1,129 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.FileKeyProvider = void 0;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const os = __importStar(require("os"));
+const crypto = __importStar(require("crypto"));
+const key_provider_1 = require("./key-provider");
+// ============================================================
+// key-provider-file.ts — Machine-bound encrypted file provider
+//
+// Stores keys as AES-256-GCM encrypted files
+// Encryption key is derived from hostname + username
+// So the file is only readable on this machine
+// ============================================================
+const ALGORITHM = 'aes-256-gcm';
+const IV_LENGTH = 16;
+const TAG_LENGTH = 16;
+function getKeysDir() {
+    return path.join(os.homedir(), '.fivo', 'cell', 'keys');
+}
+function getKeyPath(id) {
+    // Sanitize ID for filename
+    const safeId = id.replace(/[^a-zA-Z0-9_-]/g, '_');
+    return path.join(getKeysDir(), `${safeId}.enc`);
+}
+function encrypt(data, key) {
+    const iv = crypto.randomBytes(IV_LENGTH);
+    const cipher = crypto.createCipheriv(ALGORITHM, key, iv, { authTagLength: TAG_LENGTH });
+    const encrypted = Buffer.concat([cipher.update(data), cipher.final()]);
+    const authTag = cipher.getAuthTag();
+    // Format: iv(16) + authTag(16) + encrypted
+    return Buffer.concat([iv, authTag, encrypted]);
+}
+function decrypt(data, key) {
+    const iv = data.subarray(0, IV_LENGTH);
+    const authTag = data.subarray(IV_LENGTH, IV_LENGTH + TAG_LENGTH);
+    const encrypted = data.subarray(IV_LENGTH + TAG_LENGTH);
+    const decipher = crypto.createDecipheriv(ALGORITHM, key, iv, { authTagLength: TAG_LENGTH });
+    decipher.setAuthTag(authTag);
+    return Buffer.concat([decipher.update(encrypted), decipher.final()]);
+}
+class FileKeyProvider {
+    name = 'file-encrypted';
+    isAvailable() {
+        try {
+            const dir = getKeysDir();
+            if (!fs.existsSync(dir))
+                fs.mkdirSync(dir, { recursive: true });
+            return true;
+        }
+        catch {
+            return false;
+        }
+    }
+    getKey(id) {
+        const keyPath = getKeyPath(id);
+        if (!fs.existsSync(keyPath))
+            return null;
+        try {
+            const encrypted = fs.readFileSync(keyPath);
+            const machineKey = (0, key_provider_1.deriveMachineKey)();
+            return decrypt(encrypted, machineKey);
+        }
+        catch {
+            return null;
+        }
+    }
+    setKey(id, key) {
+        try {
+            const dir = getKeysDir();
+            if (!fs.existsSync(dir))
+                fs.mkdirSync(dir, { recursive: true });
+            const machineKey = (0, key_provider_1.deriveMachineKey)();
+            const encrypted = encrypt(key, machineKey);
+            fs.writeFileSync(getKeyPath(id), encrypted);
+            return true;
+        }
+        catch {
+            return false;
+        }
+    }
+    deleteKey(id) {
+        try {
+            const keyPath = getKeyPath(id);
+            if (fs.existsSync(keyPath))
+                fs.unlinkSync(keyPath);
+            return true;
+        }
+        catch {
+            return false;
+        }
+    }
+}
+exports.FileKeyProvider = FileKeyProvider;
+//# sourceMappingURL=key-provider-file.js.map

package/dist/walls/06-memory/privacy/key-provider-file.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"key-provider-file.js","sourceRoot":"","sources":["../../../../src/walls/06-memory/privacy/key-provider-file.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,uCAAyB;AACzB,2CAA6B;AAC7B,uCAAyB;AACzB,+CAAiC;AACjC,iDAA+D;AAE/D,+DAA+D;AAC/D,+DAA+D;AAC/D,EAAE;AACF,6CAA6C;AAC7C,qDAAqD;AACrD,+CAA+C;AAC/C,+DAA+D;AAE/D,MAAM,SAAS,GAAG,aAAa,CAAC;AAChC,MAAM,SAAS,GAAG,EAAE,CAAC;AACrB,MAAM,UAAU,GAAG,EAAE,CAAC;AAEtB,SAAS,UAAU;IACjB,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,UAAU,CAAC,EAAU;IAC5B,2BAA2B;IAC3B,MAAM,MAAM,GAAG,EAAE,CAAC,OAAO,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC;IAClD,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,GAAG,MAAM,MAAM,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,OAAO,CAAC,IAAY,EAAE,GAAW;IACxC,MAAM,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;IACzC,MAAM,MAAM,GAAG,MAAM,CAAC,cAAc,CAAC,SAAS,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,aAAa,EAAE,UAAU,EAAE,CAAC,CAAC;IACxF,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACvE,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;IACpC,2CAA2C;IAC3C,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC;AACjD,CAAC;AAED,SAAS,OAAO,CAAC,IAAY,EAAE,GAAW;IACxC,MAAM,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IACvC,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,SAAS,GAAG,UAAU,CAAC,CAAC;IACjE,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,GAAG,UAAU,CAAC,CAAC;IACxD,MAAM,QAAQ,GAAG,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,aAAa,EAAE,UAAU,EAAE,CAAC,CAAC;IAC5F,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IAC7B,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;AACvE,CAAC;AAED,MAAa,eAAe;IAC1B,IAAI,GAAG,gBAAgB,CAAC;IAExB,WAAW;QACT,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;YACzB,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAChE,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,KAAK,CAAC;QAAC,CAAC;IAC3B,CAAC;IAED,MAAM,CAAC,EAAU;QACf,MAAM,OAAO,GAAG,UAAU,CAAC,EAAE,CAAC,CAAC;QAC/B,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC;YAAE,OAAO,IAAI,CAAC;QAEzC,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;YAC3C,MAAM,UAAU,GAAG,IAAA,+BAAgB,GAAE,CAAC;YACtC,OAAO,OAAO,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;QACxC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;IAC1B,CAAC;IAED,MAAM,CAAC,EAAU,EAAE,GAAW;QAC5B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;YACzB,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAEhE,MAAM,UAAU,GAAG,IAAA,+BAAgB,GAAE,CAAC;YACtC,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;YAC3C,EAAE,CAAC,aAAa,CAAC,UAAU,CAAC,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC;YAC5C,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,KAAK,CAAC;QAAC,CAAC;IAC3B,CAAC;IAED,SAAS,CAAC,EAAU;QAClB,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,UAAU,CAAC,EAAE,CAAC,CAAC;YAC/B,IAAI,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC;gBAAE,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YACnD,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,KAAK,CAAC;QAAC,CAAC;IAC3B,CAAC;CACF;AAzCD,0CAyCC"}

package/dist/walls/06-memory/privacy/key-provider-os.d.ts

@@ -0,0 +1,28 @@
+import { KeyProvider } from './key-provider';
+export declare class OSKeyProvider implements KeyProvider {
+    name: string;
+    private osType;
+    isAvailable(): boolean;
+    healthCheck(): {
+        available: boolean;
+        os: string;
+        method: string;
+        details: string;
+    };
+    private isWindowsAvailable;
+    private windowsGetKey;
+    private windowsSetKey;
+    private windowsDeleteKey;
+    private isMacOSAvailable;
+    private macosGetKey;
+    private macosSetKey;
+    private macosDeleteKey;
+    private isLinuxAvailable;
+    private linuxGetKey;
+    private linuxSetKey;
+    private linuxDeleteKey;
+    getKey(id: string): Buffer | null;
+    setKey(id: string, key: Buffer): boolean;
+    deleteKey(id: string): boolean;
+}
+//# sourceMappingURL=key-provider-os.d.ts.map

package/dist/walls/06-memory/privacy/key-provider-os.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"key-provider-os.d.ts","sourceRoot":"","sources":["../../../../src/walls/06-memory/privacy/key-provider-os.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAY,MAAM,gBAAgB,CAAC;AAYvD,qBAAa,aAAc,YAAW,WAAW;IAC/C,IAAI,SAAe;IACnB,OAAO,CAAC,MAAM,CAAc;IAE5B,WAAW,IAAI,OAAO;IAWtB,WAAW,IAAI;QAAE,SAAS,EAAE,OAAO,CAAC;QAAC,EAAE,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE;IAmBlF,OAAO,CAAC,kBAAkB;IAS1B,OAAO,CAAC,aAAa;IAWrB,OAAO,CAAC,aAAa;IAiBrB,OAAO,CAAC,gBAAgB;IAaxB,OAAO,CAAC,gBAAgB;IAOxB,OAAO,CAAC,WAAW;IAWnB,OAAO,CAAC,WAAW;IAgBnB,OAAO,CAAC,cAAc;IAatB,OAAO,CAAC,gBAAgB;IAOxB,OAAO,CAAC,WAAW;IAWnB,OAAO,CAAC,WAAW;IAQnB,OAAO,CAAC,cAAc;IActB,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IASjC,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO;IASxC,SAAS,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO;CAQ/B"}

package/dist/walls/06-memory/privacy/key-provider-os.js

@@ -0,0 +1,225 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OSKeyProvider = void 0;
+const child_process_1 = require("child_process");
+const key_provider_1 = require("./key-provider");
+// ============================================================
+// key-provider-os.ts — OS-native key storage provider
+//
+// Windows: DPAPI via ConvertFrom-Clixml (real encryption, not hex file)
+// macOS: security (Keychain CLI)
+// Linux: secret-tool (GNOME Keyring / KWallet)
+//
+// All use CLI wrappers — no native npm modules needed
+// ============================================================
+class OSKeyProvider {
+    name = 'os-native';
+    osType = (0, key_provider_1.detectOS)();
+    isAvailable() {
+        try {
+            switch (this.osType) {
+                case 'windows': return this.isWindowsAvailable();
+                case 'macos': return this.isMacOSAvailable();
+                case 'linux': return this.isLinuxAvailable();
+                default: return false;
+            }
+        }
+        catch {
+            return false;
+        }
+    }
+    healthCheck() {
+        const available = this.isAvailable();
+        switch (this.osType) {
+            case 'windows':
+                return { available, os: 'windows', method: 'DPAPI-SecureString', details: available ? 'PowerShell ConvertTo-SecureString/ConvertFrom-SecureString' : 'PowerShell not available' };
+            case 'macos':
+                return { available, os: 'macos', method: 'Keychain', details: available ? 'security CLI available' : 'security CLI not found' };
+            case 'linux':
+                return { available, os: 'linux', method: 'SecretService', details: available ? 'secret-tool available' : 'secret-tool not found' };
+            default:
+                return { available: false, os: 'unknown', method: 'none', details: 'Unsupported OS' };
+        }
+    }
+    // ============================================================
+    // Windows — DPAPI via ConvertFrom-SecureString
+    // Uses current user's DPAPI scope — keys only readable by same user on same machine
+    // ============================================================
+    isWindowsAvailable() {
+        try {
+            (0, child_process_1.execSync)('powershell -Command "ConvertTo-SecureString -String test -AsPlainText -Force"', {
+                encoding: 'utf-8', timeout: 5000, stdio: 'pipe',
+            });
+            return true;
+        }
+        catch {
+            return false;
+        }
+    }
+    windowsGetKey(id) {
+        try {
+            const safeId = id.replace(/[^a-zA-Z0-9_-]/g, '_');
+            // Read the DPAPI-encrypted string from file, then decrypt with current user scope
+            const cmd = `powershell -Command "$enc = Get-Content -Path '$env:USERPROFILE\\.fivo\\cell\\keys\\os-${safeId}.dpapi' -ErrorAction Stop; $sec = ConvertTo-SecureString $enc; [System.Runtime.InteropServices.Marshal]::PtrToStringBSTR([System.Runtime.InteropServices.Marshal]::SecureStringToBSTR($sec))"`;
+            const hex = (0, child_process_1.execSync)(cmd, { encoding: 'utf-8', timeout: 5000, stdio: 'pipe' }).trim();
+            if (!hex)
+                return null;
+            return Buffer.from(hex, 'hex');
+        }
+        catch {
+            return null;
+        }
+    }
+    windowsSetKey(id, key) {
+        try {
+            const safeId = id.replace(/[^a-zA-Z0-9_-]/g, '_');
+            // Convert hex to SecureString (DPAPI-encrypted in current user scope), then save
+            const hex = key.toString('hex');
+            const cmd = `powershell -Command "New-Item -Path '$env:USERPROFILE\\.fivo\\cell\\keys' -ItemType Directory -Force | Out-Null; $sec = ConvertTo-SecureString '${hex}' -AsPlainText -Force; $enc = ConvertFrom-SecureString $sec; Set-Content -Path '$env:USERPROFILE\\.fivo\\cell\\keys\\os-${safeId}.dpapi' -Value $enc -Force"`;
+            (0, child_process_1.execSync)(cmd, { encoding: 'utf-8', timeout: 5000, stdio: 'pipe' });
+            // Clean up old hex file if it exists
+            try {
+                const fs = require('fs');
+                const oldPath = require('path').join(require('os').homedir(), '.fivo', 'cell', 'keys', `os-${safeId}.txt`);
+                if (fs.existsSync(oldPath))
+                    fs.unlinkSync(oldPath);
+            }
+            catch { /* ignore */ }
+            return true;
+        }
+        catch {
+            return false;
+        }
+    }
+    windowsDeleteKey(id) {
+        try {
+            const safeId = id.replace(/[^a-zA-Z0-9_-]/g, '_');
+            const cmd = `powershell -Command "Remove-Item -Path '$env:USERPROFILE\\.fivo\\cell\\keys\\os-${safeId}.dpapi' -Force -ErrorAction SilentlyContinue; Remove-Item -Path '$env:USERPROFILE\\.fivo\\cell\\keys\\os-${safeId}.txt' -Force -ErrorAction SilentlyContinue"`;
+            (0, child_process_1.execSync)(cmd, { encoding: 'utf-8', timeout: 5000, stdio: 'pipe' });
+            return true;
+        }
+        catch {
+            return false;
+        }
+    }
+    // ============================================================
+    // macOS — Keychain CLI
+    // ============================================================
+    isMacOSAvailable() {
+        try {
+            (0, child_process_1.execSync)('which security', { encoding: 'utf-8', timeout: 3000, stdio: 'pipe' });
+            return true;
+        }
+        catch {
+            return false;
+        }
+    }
+    macosGetKey(id) {
+        try {
+            const result = (0, child_process_1.execSync)(`security find-generic-password -a fivocell -s "cell-${id}" -w 2>/dev/null`, { encoding: 'utf-8', timeout: 5000, stdio: 'pipe' }).trim();
+            if (!result)
+                return null;
+            return Buffer.from(result, 'hex');
+        }
+        catch {
+            return null;
+        }
+    }
+    macosSetKey(id, key) {
+        try {
+            try {
+                (0, child_process_1.execSync)(`security delete-generic-password -a fivocell -s "cell-${id}" 2>/dev/null`, {
+                    encoding: 'utf-8', timeout: 5000, stdio: 'pipe',
+                });
+            }
+            catch { /* ignore */ }
+            (0, child_process_1.execSync)(`security add-generic-password -a fivocell -s "cell-${id}" -w "${key.toString('hex')}" -U`, { encoding: 'utf-8', timeout: 5000, stdio: 'pipe' });
+            return true;
+        }
+        catch {
+            return false;
+        }
+    }
+    macosDeleteKey(id) {
+        try {
+            (0, child_process_1.execSync)(`security delete-generic-password -a fivocell -s "cell-${id}" 2>/dev/null`, {
+                encoding: 'utf-8', timeout: 5000, stdio: 'pipe',
+            });
+            return true;
+        }
+        catch {
+            return false;
+        }
+    }
+    // ============================================================
+    // Linux — secret-tool (GNOME Keyring)
+    // ============================================================
+    isLinuxAvailable() {
+        try {
+            (0, child_process_1.execSync)('which secret-tool', { encoding: 'utf-8', timeout: 3000, stdio: 'pipe' });
+            return true;
+        }
+        catch {
+            return false;
+        }
+    }
+    linuxGetKey(id) {
+        try {
+            const result = (0, child_process_1.execSync)(`secret-tool lookup service fivocell id "${id}"`, { encoding: 'utf-8', timeout: 5000, stdio: 'pipe' }).trim();
+            if (!result)
+                return null;
+            return Buffer.from(result, 'hex');
+        }
+        catch {
+            return null;
+        }
+    }
+    linuxSetKey(id, key) {
+        try {
+            const cmd = `echo -n "${key.toString('hex')}" | secret-tool store --label="Fivo Cell ${id}" service fivocell id "${id}"`;
+            (0, child_process_1.execSync)(cmd, { encoding: 'utf-8', timeout: 5000, stdio: 'pipe', shell: '/bin/bash' });
+            return true;
+        }
+        catch {
+            return false;
+        }
+    }
+    linuxDeleteKey(id) {
+        try {
+            (0, child_process_1.execSync)(`secret-tool clear service fivocell id "${id}"`, { encoding: 'utf-8', timeout: 5000, stdio: 'pipe' });
+            return true;
+        }
+        catch {
+            return false;
+        }
+    }
+    // ============================================================
+    // Unified interface
+    // ============================================================
+    getKey(id) {
+        switch (this.osType) {
+            case 'windows': return this.windowsGetKey(id);
+            case 'macos': return this.macosGetKey(id);
+            case 'linux': return this.linuxGetKey(id);
+            default: return null;
+        }
+    }
+    setKey(id, key) {
+        switch (this.osType) {
+            case 'windows': return this.windowsSetKey(id, key);
+            case 'macos': return this.macosSetKey(id, key);
+            case 'linux': return this.linuxSetKey(id, key);
+            default: return false;
+        }
+    }
+    deleteKey(id) {
+        switch (this.osType) {
+            case 'windows': return this.windowsDeleteKey(id);
+            case 'macos': return this.macosDeleteKey(id);
+            case 'linux': return this.linuxDeleteKey(id);
+            default: return false;
+        }
+    }
+}
+exports.OSKeyProvider = OSKeyProvider;
+//# sourceMappingURL=key-provider-os.js.map

package/dist/walls/06-memory/privacy/key-provider-os.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"key-provider-os.js","sourceRoot":"","sources":["../../../../src/walls/06-memory/privacy/key-provider-os.ts"],"names":[],"mappings":";;;AAAA,iDAAyC;AACzC,iDAAuD;AAEvD,+DAA+D;AAC/D,sDAAsD;AACtD,EAAE;AACF,wEAAwE;AACxE,iCAAiC;AACjC,+CAA+C;AAC/C,EAAE;AACF,sDAAsD;AACtD,+DAA+D;AAE/D,MAAa,aAAa;IACxB,IAAI,GAAG,WAAW,CAAC;IACX,MAAM,GAAG,IAAA,uBAAQ,GAAE,CAAC;IAE5B,WAAW;QACT,IAAI,CAAC;YACH,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC;gBACpB,KAAK,SAAS,CAAC,CAAC,OAAO,IAAI,CAAC,kBAAkB,EAAE,CAAC;gBACjD,KAAK,OAAO,CAAC,CAAC,OAAO,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBAC7C,KAAK,OAAO,CAAC,CAAC,OAAO,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBAC7C,OAAO,CAAC,CAAC,OAAO,KAAK,CAAC;YACxB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,KAAK,CAAC;QAAC,CAAC;IAC3B,CAAC;IAED,WAAW;QACT,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QACrC,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC;YACpB,KAAK,SAAS;gBACZ,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,oBAAoB,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,4DAA4D,CAAC,CAAC,CAAC,0BAA0B,EAAE,CAAC;YACpL,KAAK,OAAO;gBACV,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,wBAAwB,EAAE,CAAC;YAClI,KAAK,OAAO;gBACV,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,uBAAuB,EAAE,CAAC;YACrI;gBACE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC;QAC1F,CAAC;IACH,CAAC;IAED,+DAA+D;IAC/D,+CAA+C;IAC/C,oFAAoF;IACpF,+DAA+D;IAEvD,kBAAkB;QACxB,IAAI,CAAC;YACH,IAAA,wBAAQ,EAAC,+EAA+E,EAAE;gBACxF,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM;aAChD,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,KAAK,CAAC;QAAC,CAAC;IAC3B,CAAC;IAEO,aAAa,CAAC,EAAU;QAC9B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,EAAE,CAAC,OAAO,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC;YAClD,kFAAkF;YAClF,MAAM,GAAG,GAAG,0FAA0F,MAAM,+LAA+L,CAAC;YAC5S,MAAM,GAAG,GAAG,IAAA,wBAAQ,EAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YACtF,IAAI,CAAC,GAAG;gBAAE,OAAO,IAAI,CAAC;YACtB,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACjC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;IAC1B,CAAC;IAEO,aAAa,CAAC,EAAU,EAAE,GAAW;QAC3C,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,EAAE,CAAC,OAAO,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC;YAClD,iFAAiF;YACjF,MAAM,GAAG,GAAG,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YAChC,MAAM,GAAG,GAAG,mJAAmJ,GAAG,2HAA2H,MAAM,6BAA6B,CAAC;YACjU,IAAA,wBAAQ,EAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;YACnE,qCAAqC;YACrC,IAAI,CAAC;gBACH,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;gBACzB,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,MAAM,MAAM,CAAC,CAAC;gBAC3G,IAAI,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC;oBAAE,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YACrD,CAAC;YAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;YACxB,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,KAAK,CAAC;QAAC,CAAC;IAC3B,CAAC;IAEO,gBAAgB,CAAC,EAAU;QACjC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,EAAE,CAAC,OAAO,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC;YAClD,MAAM,GAAG,GAAG,mFAAmF,MAAM,4GAA4G,MAAM,6CAA6C,CAAC;YACrQ,IAAA,wBAAQ,EAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;YACnE,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,KAAK,CAAC;QAAC,CAAC;IAC3B,CAAC;IAED,+DAA+D;IAC/D,uBAAuB;IACvB,+DAA+D;IAEvD,gBAAgB;QACtB,IAAI,CAAC;YACH,IAAA,wBAAQ,EAAC,gBAAgB,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;YAChF,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,KAAK,CAAC;QAAC,CAAC;IAC3B,CAAC;IAEO,WAAW,CAAC,EAAU;QAC5B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAA,wBAAQ,EACrB,uDAAuD,EAAE,kBAAkB,EAC3E,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,CACpD,CAAC,IAAI,EAAE,CAAC;YACT,IAAI,CAAC,MAAM;gBAAE,OAAO,IAAI,CAAC;YACzB,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACpC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;IAC1B,CAAC;IAEO,WAAW,CAAC,EAAU,EAAE,GAAW;QACzC,IAAI,CAAC;YACH,IAAI,CAAC;gBACH,IAAA,wBAAQ,EAAC,yDAAyD,EAAE,eAAe,EAAE;oBACnF,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM;iBAChD,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;YAExB,IAAA,wBAAQ,EACN,sDAAsD,EAAE,SAAS,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,EAC1F,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,CACpD,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,KAAK,CAAC;QAAC,CAAC;IAC3B,CAAC;IAEO,cAAc,CAAC,EAAU;QAC/B,IAAI,CAAC;YACH,IAAA,wBAAQ,EAAC,yDAAyD,EAAE,eAAe,EAAE;gBACnF,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM;aAChD,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,KAAK,CAAC;QAAC,CAAC;IAC3B,CAAC;IAED,+DAA+D;IAC/D,sCAAsC;IACtC,+DAA+D;IAEvD,gBAAgB;QACtB,IAAI,CAAC;YACH,IAAA,wBAAQ,EAAC,mBAAmB,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;YACnF,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,KAAK,CAAC;QAAC,CAAC;IAC3B,CAAC;IAEO,WAAW,CAAC,EAAU;QAC5B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAA,wBAAQ,EACrB,2CAA2C,EAAE,GAAG,EAChD,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,CACpD,CAAC,IAAI,EAAE,CAAC;YACT,IAAI,CAAC,MAAM;gBAAE,OAAO,IAAI,CAAC;YACzB,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACpC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;IAC1B,CAAC;IAEO,WAAW,CAAC,EAAU,EAAE,GAAW;QACzC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,YAAY,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,4CAA4C,EAAE,0BAA0B,EAAE,GAAG,CAAC;YACzH,IAAA,wBAAQ,EAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;YACvF,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,KAAK,CAAC;QAAC,CAAC;IAC3B,CAAC;IAEO,cAAc,CAAC,EAAU;QAC/B,IAAI,CAAC;YACH,IAAA,wBAAQ,EACN,0CAA0C,EAAE,GAAG,EAC/C,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,CACpD,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,KAAK,CAAC;QAAC,CAAC;IAC3B,CAAC;IAED,+DAA+D;IAC/D,oBAAoB;IACpB,+DAA+D;IAE/D,MAAM,CAAC,EAAU;QACf,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC;YACpB,KAAK,SAAS,CAAC,CAAC,OAAO,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;YAC9C,KAAK,OAAO,CAAC,CAAC,OAAO,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;YAC1C,KAAK,OAAO,CAAC,CAAC,OAAO,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;YAC1C,OAAO,CAAC,CAAC,OAAO,IAAI,CAAC;QACvB,CAAC;IACH,CAAC;IAED,MAAM,CAAC,EAAU,EAAE,GAAW;QAC5B,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC;YACpB,KAAK,SAAS,CAAC,CAAC,OAAO,IAAI,CAAC,aAAa,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;YACnD,KAAK,OAAO,CAAC,CAAC,OAAO,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;YAC/C,KAAK,OAAO,CAAC,CAAC,OAAO,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;YAC/C,OAAO,CAAC,CAAC,OAAO,KAAK,CAAC;QACxB,CAAC;IACH,CAAC;IAED,SAAS,CAAC,EAAU;QAClB,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC;YACpB,KAAK,SAAS,CAAC,CAAC,OAAO,IAAI,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC;YACjD,KAAK,OAAO,CAAC,CAAC,OAAO,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;YAC7C,KAAK,OAAO,CAAC,CAAC,OAAO,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;YAC7C,OAAO,CAAC,CAAC,OAAO,KAAK,CAAC;QACxB,CAAC;IACH,CAAC;CACF;AArMD,sCAqMC"}

package/dist/walls/06-memory/privacy/key-provider.d.ts

@@ -0,0 +1,38 @@
+export interface KeyProvider {
+    name: string;
+    isAvailable(): boolean;
+    getKey(id: string): Buffer | null;
+    setKey(id: string, key: Buffer): boolean;
+    deleteKey(id: string): boolean;
+    healthCheck?(): {
+        available: boolean;
+        os: string;
+        method: string;
+        details: string;
+    };
+}
+export type OSType = 'windows' | 'macos' | 'linux' | 'unknown';
+export declare function detectOS(): OSType;
+export declare function deriveMachineKey(): Buffer;
+export declare function getKeyProvider(): KeyProvider;
+export declare function getKey(id: string): Buffer | null;
+export declare function setKey(id: string, key: Buffer): boolean;
+export declare function deleteKey(id: string): boolean;
+export declare function getOrCreateKey(id: string, keyLength?: number): Buffer;
+export declare function getKeyProviderInfo(): {
+    name: string;
+    os: OSType;
+    available: boolean;
+};
+export declare function getProviderHealthCheck(): {
+    name: string;
+    os: OSType;
+    available: boolean;
+    health?: {
+        available: boolean;
+        os: string;
+        method: string;
+        details: string;
+    };
+};
+//# sourceMappingURL=key-provider.d.ts.map

package/dist/walls/06-memory/privacy/key-provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"key-provider.d.ts","sourceRoot":"","sources":["../../../../src/walls/06-memory/privacy/key-provider.ts"],"names":[],"mappings":"AAYA,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,IAAI,OAAO,CAAC;IACvB,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IAClC,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;IACzC,SAAS,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC;IAC/B,WAAW,CAAC,IAAI;QAAE,SAAS,EAAE,OAAO,CAAC;QAAC,EAAE,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CACrF;AAED,MAAM,MAAM,MAAM,GAAG,SAAS,GAAG,OAAO,GAAG,OAAO,GAAG,SAAS,CAAC;AAE/D,wBAAgB,QAAQ,IAAI,MAAM,CAOjC;AAUD,wBAAgB,gBAAgB,IAAI,MAAM,CAQzC;AAuBD,wBAAgB,cAAc,IAAI,WAAW,CAK5C;AAMD,wBAAgB,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAEhD;AAED,wBAAgB,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAEvD;AAED,wBAAgB,SAAS,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAE7C;AAED,wBAAgB,cAAc,CAAC,EAAE,EAAE,MAAM,EAAE,SAAS,GAAE,MAAW,GAAG,MAAM,CAOzE;AAED,wBAAgB,kBAAkB,IAAI;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,OAAO,CAAA;CAAE,CAQrF;AAED,wBAAgB,sBAAsB,IAAI;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE;QAAE,SAAS,EAAE,OAAO,CAAC;QAAC,EAAE,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,CASvK"}