gent-cli 24.0.0 → 25.0.0

package/src/utils/user-config.js

@@ -5,7 +5,6 @@
  *
  * PURPOSE:
  *   Persist CLI-wide settings that should NOT live in a project's .gent/ dir:
- *     - AI key, AI model
  *     - API base URL (so users can point at a local backend without code edits)
  *     - Default identity (name/email) used when project .gent/config.json lacks one
  *
@@ -13,13 +12,9 @@
  *     env var  >  ~/.gent/config.json  >  built-in default
  *
  * STORAGE:
- *   Plain JSON at ~/.gent/config.json. The AI key field is lightly obfuscated
- *   (AES via crypto-js, same scheme as auth-storage) so it isn't readable at a
- *   glance — not a real secret store, but better than plaintext on disk.
+ *   Plain JSON at ~/.gent/config.json.
  *
  * KEYS (dot-notation):
- *     ai.api_key        Anthropic API key
- *     ai.model          Model id (e.g. claude-opus-4-7, claude-haiku-4-5)
  *     api.base_url      Backend base URL (e.g. http://localhost:8000)
  *     web.base_url      Web app (frontend) base URL (e.g. https://gent-nu2e.onrender.com)
  *                       Used by `gent web` / `gent share`. This is a SEPARATE
@@ -34,17 +29,12 @@
 const fs = require('fs').promises;
 const path = require('path');
 const os = require('os');
-const CryptoJS = require('crypto-js');
 const { GENT_DIR } = require('./constants');
 
 const CONFIG_FILE_NAME = 'cli-config.json';
-const SECRET_KEYS = new Set(['ai.api_key']);
-const OBFUSCATION_KEY = 'gent-cli-config-v1';
-const OBFUSCATION_PREFIX = 'enc:v1:';
+const SECRET_KEYS = new Set();
 
 const ALLOWED_KEYS = new Set([
-    'ai.api_key',
-    'ai.model',
     'api.base_url',
     'web.base_url',
     'user.name',
@@ -52,7 +42,6 @@ const ALLOWED_KEYS = new Set([
 ]);
 
 const DEFAULTS = {
-    'ai.model': 'claude-opus-4-7',
     'api.base_url': 'https://gent-api.onrender.com',
     // The frontend has no production deployment yet; the server's own
     // FRONTEND_URL setting defaults to the same value. Override with
@@ -61,8 +50,6 @@ const DEFAULTS = {
 };
 
 const ENV_OVERRIDES = {
-    'ai.api_key': 'ANTHROPIC_API_KEY',
-    'ai.model': 'GENT_AI_MODEL',
     'api.base_url': 'GENT_API_URL',
     'web.base_url': 'GENT_WEB_URL',
 };
@@ -71,21 +58,6 @@ function getConfigPath() {
     return path.join(os.homedir(), GENT_DIR, CONFIG_FILE_NAME);
 }
 
-function obfuscate(plaintext) {
-    if (typeof plaintext !== 'string' || plaintext.length === 0) return plaintext;
-    return OBFUSCATION_PREFIX + CryptoJS.AES.encrypt(plaintext, OBFUSCATION_KEY).toString();
-}
-
-function deobfuscate(value) {
-    if (typeof value !== 'string' || !value.startsWith(OBFUSCATION_PREFIX)) return value;
-    try {
-        const bytes = CryptoJS.AES.decrypt(value.slice(OBFUSCATION_PREFIX.length), OBFUSCATION_KEY);
-        return bytes.toString(CryptoJS.enc.Utf8);
-    } catch {
-        return null;
-    }
-}
-
 function setDeep(obj, dottedKey, value) {
     const parts = dottedKey.split('.');
     let cur = obj;
@@ -149,7 +121,6 @@ async function get(key) {
     const data = await readRaw();
     const raw = getDeep(data, key);
     if (raw === undefined || raw === null) return undefined;
-    if (SECRET_KEYS.has(key)) return deobfuscate(raw);
     return raw;
 }
 
@@ -179,8 +150,7 @@ async function set(key, value) {
     }
     if (typeof value !== 'string') value = String(value);
     const data = await readRaw();
-    const toStore = SECRET_KEYS.has(key) ? obfuscate(value) : value;
-    setDeep(data, key, toStore);
+    setDeep(data, key, value);
     await writeRaw(data);
 }