gnoman 0.1.0

package/dist/backend/src/core/backends/fileBackend.js

@@ -0,0 +1,136 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.FileBackend = void 0;
+const promises_1 = __importDefault(require("fs/promises"));
+const path_1 = __importDefault(require("path"));
+const os_1 = __importDefault(require("os"));
+const crypto_1 = __importDefault(require("crypto"));
+const types_1 = require("./types");
+const DEFAULT_FILE = process.env.GNOMAN_KEYRING_FILE ?? path_1.default.join(os_1.default.homedir(), '.gnoman', 'secrets.enc');
+const DIR_MODE = 0o700;
+const FILE_MODE = 0o600;
+const HKDF_INFO = Buffer.from('gnoman-keyring-file', 'utf8');
+const SALT_BYTES = 32;
+const NONCE_BYTES = 12;
+const serialize = (record) => JSON.stringify(record, null, 2);
+const getPasswordMaterial = () => {
+    if (process.env.GNOMAN_KEYRING_PASSWORD) {
+        return process.env.GNOMAN_KEYRING_PASSWORD;
+    }
+    const userInfo = (() => {
+        try {
+            return os_1.default.userInfo().username;
+        }
+        catch {
+            return 'unknown-user';
+        }
+    })();
+    return `${os_1.default.hostname()}|${userInfo}`;
+};
+const maskFilesystemError = (error) => {
+    const detail = error instanceof Error ? error.message : String(error);
+    return new types_1.BackendUnavailableError(`File keyring unavailable: ${detail}`, 'file');
+};
+class FileBackend {
+    constructor(filePath = DEFAULT_FILE) {
+        this.cache = new Map();
+        this.initialized = false;
+        this.filePath = filePath;
+    }
+    async ensureDirectory() {
+        const dir = path_1.default.dirname(this.filePath);
+        await promises_1.default.mkdir(dir, { recursive: true, mode: DIR_MODE });
+    }
+    deriveKey(salt) {
+        try {
+            const derived = crypto_1.default.hkdfSync('sha256', Buffer.from(getPasswordMaterial()), salt, HKDF_INFO, 32);
+            return Buffer.from(derived);
+        }
+        catch (error) {
+            throw maskFilesystemError(error);
+        }
+    }
+    async loadFromDisk() {
+        try {
+            const raw = await promises_1.default.readFile(this.filePath, 'utf8');
+            const payload = JSON.parse(raw);
+            const salt = Buffer.from(payload.salt, 'base64');
+            const nonce = Buffer.from(payload.nonce, 'base64');
+            const authTag = Buffer.from(payload.authTag, 'base64');
+            const encrypted = Buffer.from(payload.data, 'base64');
+            const key = this.deriveKey(salt);
+            const decipher = crypto_1.default.createDecipheriv('aes-256-gcm', key, nonce);
+            decipher.setAuthTag(authTag);
+            const decrypted = Buffer.concat([decipher.update(encrypted), decipher.final()]);
+            const record = JSON.parse(decrypted.toString('utf8'));
+            this.cache = new Map(Object.entries(record));
+            this.salt = salt;
+        }
+        catch (error) {
+            const nodeError = error;
+            if (nodeError?.code === 'ENOENT') {
+                this.cache = new Map();
+                this.salt = undefined;
+                return;
+            }
+            throw maskFilesystemError(error);
+        }
+    }
+    async persist() {
+        try {
+            await this.ensureDirectory();
+            const salt = this.salt ?? crypto_1.default.randomBytes(SALT_BYTES);
+            this.salt = salt;
+            const key = this.deriveKey(salt);
+            const nonce = crypto_1.default.randomBytes(NONCE_BYTES);
+            const cipher = crypto_1.default.createCipheriv('aes-256-gcm', key, nonce);
+            const plaintext = Buffer.from(serialize(Object.fromEntries(this.cache.entries())), 'utf8');
+            const encrypted = Buffer.concat([cipher.update(plaintext), cipher.final()]);
+            const authTag = cipher.getAuthTag();
+            const payload = {
+                version: 1,
+                salt: salt.toString('base64'),
+                nonce: nonce.toString('base64'),
+                authTag: authTag.toString('base64'),
+                data: encrypted.toString('base64')
+            };
+            await promises_1.default.writeFile(this.filePath, JSON.stringify(payload), { mode: FILE_MODE });
+        }
+        catch (error) {
+            throw maskFilesystemError(error);
+        }
+    }
+    async initialize() {
+        await this.loadFromDisk();
+        this.initialized = true;
+    }
+    async ensureReady() {
+        if (!this.initialized) {
+            await this.initialize();
+        }
+    }
+    async get(key) {
+        await this.ensureReady();
+        return this.cache.get(key) ?? null;
+    }
+    async set(key, value) {
+        await this.ensureReady();
+        this.cache.set(key, value);
+        await this.persist();
+    }
+    async delete(key) {
+        await this.ensureReady();
+        this.cache.delete(key);
+        await this.persist();
+    }
+    async list() {
+        await this.ensureReady();
+        return Object.fromEntries(this.cache.entries());
+    }
+}
+exports.FileBackend = FileBackend;
+exports.default = FileBackend;
+//# sourceMappingURL=fileBackend.js.map

package/dist/backend/src/core/backends/fileBackend.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fileBackend.js","sourceRoot":"","sources":["../../../../../src/core/backends/fileBackend.ts"],"names":[],"mappings":";;;;;;AAAA,2DAA6B;AAC7B,gDAAwB;AACxB,4CAAoB;AACpB,oDAA4B;AAC5B,mCAAkE;AAElE,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,cAAI,CAAC,IAAI,CAAC,YAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;AAC1G,MAAM,QAAQ,GAAG,KAAK,CAAC;AACvB,MAAM,SAAS,GAAG,KAAK,CAAC;AACxB,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;AAC7D,MAAM,UAAU,GAAG,EAAE,CAAC;AACtB,MAAM,WAAW,GAAG,EAAE,CAAC;AAEvB,MAAM,SAAS,GAAG,CAAC,MAA8B,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AAEtF,MAAM,mBAAmB,GAAG,GAAG,EAAE;IAC/B,IAAI,OAAO,CAAC,GAAG,CAAC,uBAAuB,EAAE,CAAC;QACxC,OAAO,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC;IAC7C,CAAC;IACD,MAAM,QAAQ,GAAG,CAAC,GAAG,EAAE;QACrB,IAAI,CAAC;YACH,OAAO,YAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC;QAChC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,cAAc,CAAC;QACxB,CAAC;IACH,CAAC,CAAC,EAAE,CAAC;IACL,OAAO,GAAG,YAAE,CAAC,QAAQ,EAAE,IAAI,QAAQ,EAAE,CAAC;AACxC,CAAC,CAAC;AAEF,MAAM,mBAAmB,GAAG,CAAC,KAAc,EAA2B,EAAE;IACtE,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACtE,OAAO,IAAI,+BAAuB,CAAC,6BAA6B,MAAM,EAAE,EAAE,MAAM,CAAC,CAAC;AACpF,CAAC,CAAC;AAUF,MAAa,WAAW;IAStB,YAAY,QAAQ,GAAG,YAAY;QAN3B,UAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;QAIlC,gBAAW,GAAG,KAAK,CAAC;QAG1B,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,CAAC;IAEO,KAAK,CAAC,eAAe;QAC3B,MAAM,GAAG,GAAG,cAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACxC,MAAM,kBAAE,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC3D,CAAC;IAEO,SAAS,CAAC,IAAY;QAC5B,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,gBAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;YACnG,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC9B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,mBAAmB,CAAC,KAAK,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,YAAY;QACxB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,kBAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YACrD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAqB,CAAC;YACpD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YACjD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;YACnD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;YACvD,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YACtD,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YACjC,MAAM,QAAQ,GAAG,gBAAM,CAAC,gBAAgB,CAAC,aAAa,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;YACpE,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YAC7B,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YAChF,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAA2B,CAAC;YAChF,IAAI,CAAC,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;YAC7C,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACnB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,SAAS,GAAG,KAA8B,CAAC;YACjD,IAAI,SAAS,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACjC,IAAI,CAAC,KAAK,GAAG,IAAI,GAAG,EAAE,CAAC;gBACvB,IAAI,CAAC,IAAI,GAAG,SAAS,CAAC;gBACtB,OAAO;YACT,CAAC;YACD,MAAM,mBAAmB,CAAC,KAAK,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,OAAO;QACnB,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;YAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,gBAAM,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;YACzD,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;YACjB,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YACjC,MAAM,KAAK,GAAG,gBAAM,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;YAC9C,MAAM,MAAM,GAAG,gBAAM,CAAC,cAAc,CAAC,aAAa,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;YAChE,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;YAC3F,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YAC5E,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;YACpC,MAAM,OAAO,GAAqB;gBAChC,OAAO,EAAE,CAAC;gBACV,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBAC7B,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBAC/B,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBACnC,IAAI,EAAE,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC;aACnC,CAAC;YACF,MAAM,kBAAE,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;QAClF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,mBAAmB,CAAC,KAAK,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IAED,KAAK,CAAC,UAAU;QACd,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QAC1B,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;IAC1B,CAAC;IAEO,KAAK,CAAC,WAAW;QACvB,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACtB,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QAC1B,CAAC;IACH,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,GAAW;QACnB,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,GAAW,EAAE,KAAa;QAClC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACzB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC3B,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAW;QACtB,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACzB,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACvB,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,IAAI;QACR,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACzB,OAAO,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IAClD,CAAC;CACF;AA7GD,kCA6GC;AAED,kBAAe,WAAW,CAAC"}

package/dist/backend/src/core/backends/memoryBackend.js

@@ -0,0 +1,26 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MemoryBackend = void 0;
+class MemoryBackend {
+    constructor() {
+        this.store = new Map();
+    }
+    async initialize() {
+        this.store = new Map();
+    }
+    async get(key) {
+        return this.store.get(key) ?? null;
+    }
+    async set(key, value) {
+        this.store.set(key, value);
+    }
+    async delete(key) {
+        this.store.delete(key);
+    }
+    async list() {
+        return Object.fromEntries(this.store.entries());
+    }
+}
+exports.MemoryBackend = MemoryBackend;
+exports.default = MemoryBackend;
+//# sourceMappingURL=memoryBackend.js.map

package/dist/backend/src/core/backends/memoryBackend.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"memoryBackend.js","sourceRoot":"","sources":["../../../../../src/core/backends/memoryBackend.ts"],"names":[],"mappings":";;;AAEA,MAAa,aAAa;IAA1B;QACU,UAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;IAqB5C,CAAC;IAnBC,KAAK,CAAC,UAAU;QACd,IAAI,CAAC,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,GAAW;QACnB,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,GAAW,EAAE,KAAa;QAClC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAW;QACtB,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,IAAI;QACR,OAAO,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IAClD,CAAC;CACF;AAtBD,sCAsBC;AAED,kBAAe,aAAa,CAAC"}

package/dist/backend/src/core/backends/systemBackend.js

@@ -0,0 +1,86 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SystemBackend = void 0;
+const types_1 = require("./types");
+class SystemBackend {
+    constructor(serviceName = process.env.GNOMAN_KEYRING_SERVICE ?? 'gnoman') {
+        this.serviceName = serviceName;
+    }
+    loadKeytar() {
+        if (!this.keytarModule) {
+            this.keytarModule = Promise.resolve().then(() => __importStar(require('keytar'))).catch((error) => {
+                throw new types_1.BackendUnavailableError(`System keyring unavailable: ${error?.message ?? String(error)}`, 'system');
+            });
+        }
+        return this.keytarModule;
+    }
+    async withKeytar(handler) {
+        const keytar = await this.loadKeytar();
+        try {
+            return await handler(keytar);
+        }
+        catch (error) {
+            throw new types_1.BackendUnavailableError(`System keyring operation failed: ${error?.message ?? String(error)}`, 'system');
+        }
+    }
+    async initialize() {
+        await this.withKeytar(async (keytar) => {
+            await keytar.findCredentials(this.serviceName);
+        });
+    }
+    async get(key) {
+        return this.withKeytar((keytar) => keytar.getPassword(this.serviceName, key));
+    }
+    async set(key, value) {
+        await this.withKeytar((keytar) => keytar.setPassword(this.serviceName, key, value));
+    }
+    async delete(key) {
+        await this.withKeytar((keytar) => keytar.deletePassword(this.serviceName, key));
+    }
+    async list() {
+        return this.withKeytar(async (keytar) => {
+            const credentials = await keytar.findCredentials(this.serviceName);
+            const result = {};
+            for (const credential of credentials) {
+                result[credential.account] = credential.password;
+            }
+            return result;
+        });
+    }
+}
+exports.SystemBackend = SystemBackend;
+exports.default = SystemBackend;
+//# sourceMappingURL=systemBackend.js.map

package/dist/backend/src/core/backends/systemBackend.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"systemBackend.js","sourceRoot":"","sources":["../../../../../src/core/backends/systemBackend.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,mCAAkE;AAElE,MAAa,aAAa;IAKxB,YAAY,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,IAAI,QAAQ;QACtE,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;IACjC,CAAC;IAEO,UAAU;QAChB,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YACvB,IAAI,CAAC,YAAY,GAAG,kDAAO,QAAQ,IAAE,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;gBACnD,MAAM,IAAI,+BAAuB,CAC/B,+BAAgC,KAAe,EAAE,OAAO,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,EAC3E,QAAQ,CACT,CAAC;YACJ,CAAC,CAAC,CAAC;QACL,CAAC;QACD,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;IAEO,KAAK,CAAC,UAAU,CAAI,OAAwD;QAClF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QACvC,IAAI,CAAC;YACH,OAAO,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;QAC/B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,+BAAuB,CAC/B,oCAAqC,KAAe,EAAE,OAAO,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,EAChF,QAAQ,CACT,CAAC;QACJ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,UAAU;QACd,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACjD,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,GAAW;QACnB,OAAO,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC;IAChF,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,GAAW,EAAE,KAAa;QAClC,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;IACtF,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAW;QACtB,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC;IAClF,CAAC;IAED,KAAK,CAAC,IAAI;QACR,OAAO,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;YACtC,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACnE,MAAM,MAAM,GAA2B,EAAE,CAAC;YAC1C,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;gBACrC,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,UAAU,CAAC,QAAQ,CAAC;YACnD,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC,CAAC,CAAC;IACL,CAAC;CACF;AA7DD,sCA6DC;AAED,kBAAe,aAAa,CAAC"}

package/dist/backend/src/core/backends/types.js

@@ -0,0 +1,12 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BackendUnavailableError = void 0;
+class BackendUnavailableError extends Error {
+    constructor(message, backend) {
+        super(message);
+        this.backend = backend;
+        this.name = 'BackendUnavailableError';
+    }
+}
+exports.BackendUnavailableError = BackendUnavailableError;
+//# sourceMappingURL=types.js.map

package/dist/backend/src/core/backends/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../../src/core/backends/types.ts"],"names":[],"mappings":";;;AAWA,MAAa,uBAAwB,SAAQ,KAAK;IAChD,YAAY,OAAe,EAAkB,OAA2B;QACtE,KAAK,CAAC,OAAO,CAAC,CAAC;QAD4B,YAAO,GAAP,OAAO,CAAoB;QAEtE,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IACxC,CAAC;CACF;AALD,0DAKC"}

package/dist/backend/src/core/keyringManager.js

@@ -0,0 +1,178 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.keyringManager = exports.KeyringManager = void 0;
+const promises_1 = __importDefault(require("fs/promises"));
+const path_1 = __importDefault(require("path"));
+const types_1 = require("./backends/types");
+const fileBackend_1 = require("./backends/fileBackend");
+const systemBackend_1 = require("./backends/systemBackend");
+const memoryBackend_1 = require("./backends/memoryBackend");
+const FALLBACK_ORDER = ['system', 'file', 'memory'];
+const maskKey = (key) => {
+    if (!key) {
+        return '...';
+    }
+    const sanitized = key.replace(/[^A-Za-z0-9]/g, '');
+    if (!sanitized) {
+        return '...';
+    }
+    const prefix = sanitized
+        .slice(0, 3)
+        .toUpperCase()
+        .split('')
+        .join('_');
+    return `${prefix}${prefix ? '_' : ''}...`;
+};
+const defaultAuditLogPath = () => {
+    const base = process.env.GNOMAN_AUDIT_DIR ?? path_1.default.join(process.cwd(), 'logs');
+    return path_1.default.join(base, 'keyring_audit.log');
+};
+class KeyringManager {
+    constructor(options) {
+        this.cache = new Map();
+        this.factories = {
+            system: options?.backendFactories?.system ?? (() => new systemBackend_1.SystemBackend()),
+            file: options?.backendFactories?.file ?? (() => new fileBackend_1.FileBackend()),
+            memory: options?.backendFactories?.memory ?? (() => new memoryBackend_1.MemoryBackend())
+        };
+        this.auditLogPath = options?.auditLogPath ?? defaultAuditLogPath();
+    }
+    currentBackend() {
+        return this.activeBackendName ?? 'memory';
+    }
+    async ensureAuditLogDirectory() {
+        const directory = path_1.default.dirname(this.auditLogPath);
+        await promises_1.default.mkdir(directory, { recursive: true, mode: 0o700 });
+    }
+    async record(operation, key, backend = this.currentBackend()) {
+        try {
+            await this.ensureAuditLogDirectory();
+            const timestamp = new Date().toISOString();
+            const entry = `${timestamp}\t${backend}\t${operation}\t${maskKey(key)}\n`;
+            await promises_1.default.appendFile(this.auditLogPath, entry, { encoding: 'utf8' });
+        }
+        catch (error) {
+            console.warn('Unable to record keyring audit entry.', error);
+        }
+    }
+    async setActiveBackend(name, backend) {
+        this.activeBackendName = name;
+        this.activeBackend = backend;
+        this.cache = new Map();
+        const state = await backend.list();
+        this.cache = new Map(Object.entries(state));
+    }
+    computeFallbackOrder(requested) {
+        const index = FALLBACK_ORDER.indexOf(requested);
+        if (index === -1) {
+            return [...FALLBACK_ORDER];
+        }
+        return FALLBACK_ORDER.slice(index);
+    }
+    createBackend(name) {
+        const factory = this.factories[name];
+        if (!factory) {
+            throw new Error(`Unsupported keyring backend: ${name}`);
+        }
+        return factory();
+    }
+    async switchBackend(requested) {
+        const attempts = this.computeFallbackOrder(requested);
+        for (const candidate of attempts) {
+            const backend = this.createBackend(candidate);
+            try {
+                await backend.initialize();
+                if (this.activeBackend?.shutdown) {
+                    await this.activeBackend.shutdown();
+                }
+                await this.setActiveBackend(candidate, backend);
+                await this.record('switch', null, candidate);
+                return;
+            }
+            catch (error) {
+                if (error instanceof types_1.BackendUnavailableError) {
+                    console.warn(`Keyring backend '${candidate}' unavailable.`, error.message);
+                    continue;
+                }
+                throw error;
+            }
+        }
+        throw new Error('No available keyring backend.');
+    }
+    async ensureBackend() {
+        if (!this.activeBackend) {
+            await this.switchBackend('system');
+        }
+        if (!this.activeBackend) {
+            throw new Error('No available keyring backend.');
+        }
+        return this.activeBackend;
+    }
+    nextFallback(current) {
+        const index = FALLBACK_ORDER.indexOf(current);
+        if (index === -1 || index === FALLBACK_ORDER.length - 1) {
+            return undefined;
+        }
+        return FALLBACK_ORDER[index + 1];
+    }
+    async execute(operation, name, key) {
+        const backend = await this.ensureBackend();
+        try {
+            const result = await operation(backend);
+            await this.record(name, key);
+            return result;
+        }
+        catch (error) {
+            if (error instanceof types_1.BackendUnavailableError) {
+                const fallback = this.nextFallback(this.currentBackend());
+                if (!fallback) {
+                    throw new Error('All keyring backends are unavailable.');
+                }
+                console.warn(`Keyring backend '${this.currentBackend()}' failed (${error.message}). Falling back to '${fallback}'.`);
+                await this.switchBackend(fallback);
+                return this.execute(operation, name, key);
+            }
+            throw error;
+        }
+    }
+    async get(key) {
+        const value = await this.execute(async (backend) => {
+            const result = await backend.get(key);
+            if (result === null) {
+                this.cache.delete(key);
+            }
+            else {
+                this.cache.set(key, result);
+            }
+            return result;
+        }, 'get', key);
+        return value;
+    }
+    async set(key, value) {
+        await this.execute(async (backend) => {
+            await backend.set(key, value);
+            this.cache.set(key, value);
+        }, 'set', key);
+    }
+    async delete(key) {
+        await this.execute(async (backend) => {
+            await backend.delete(key);
+            this.cache.delete(key);
+        }, 'delete', key);
+    }
+    async list() {
+        const state = await this.execute(async (backend) => {
+            const snapshot = await backend.list();
+            this.cache = new Map(Object.entries(snapshot));
+            return snapshot;
+        }, 'list', 'ALL');
+        return state;
+    }
+}
+exports.KeyringManager = KeyringManager;
+exports.keyringManager = new KeyringManager();
+exports.default = exports.keyringManager;
+//# sourceMappingURL=keyringManager.js.map

package/dist/backend/src/core/keyringManager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keyringManager.js","sourceRoot":"","sources":["../../../../src/core/keyringManager.ts"],"names":[],"mappings":";;;;;;AAAA,2DAA6B;AAC7B,gDAAwB;AACxB,4CAA+F;AAC/F,wDAAqD;AACrD,4DAAyD;AACzD,4DAAyD;AASzD,MAAM,cAAc,GAAyB,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;AAE1E,MAAM,OAAO,GAAG,CAAC,GAAmB,EAAE,EAAE;IACtC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;IACnD,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,MAAM,GAAG,SAAS;SACrB,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;SACX,WAAW,EAAE;SACb,KAAK,CAAC,EAAE,CAAC;SACT,IAAI,CAAC,GAAG,CAAC,CAAC;IACb,OAAO,GAAG,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC;AAC5C,CAAC,CAAC;AAEF,MAAM,mBAAmB,GAAG,GAAG,EAAE;IAC/B,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,cAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,CAAC,CAAC;IAC9E,OAAO,cAAI,CAAC,IAAI,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC;AAC9C,CAAC,CAAC;AAEF,MAAa,cAAc;IAWzB,YAAY,OAA+B;QAFnC,UAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;QAGxC,IAAI,CAAC,SAAS,GAAG;YACf,MAAM,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,6BAAa,EAAE,CAAC;YACxE,IAAI,EAAE,OAAO,EAAE,gBAAgB,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,yBAAW,EAAE,CAAC;YAClE,MAAM,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,6BAAa,EAAE,CAAC;SACrB,CAAC;QACtD,IAAI,CAAC,YAAY,GAAG,OAAO,EAAE,YAAY,IAAI,mBAAmB,EAAE,CAAC;IACrE,CAAC;IAED,cAAc;QACZ,OAAO,IAAI,CAAC,iBAAiB,IAAI,QAAQ,CAAC;IAC5C,CAAC;IAEO,KAAK,CAAC,uBAAuB;QACnC,MAAM,SAAS,GAAG,cAAI,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAClD,MAAM,kBAAE,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC9D,CAAC;IAEO,KAAK,CAAC,MAAM,CAAC,SAAwB,EAAE,GAAmB,EAAE,OAAO,GAAG,IAAI,CAAC,cAAc,EAAE;QACjG,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,uBAAuB,EAAE,CAAC;YACrC,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAC3C,MAAM,KAAK,GAAG,GAAG,SAAS,KAAK,OAAO,KAAK,SAAS,KAAK,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;YAC1E,MAAM,kBAAE,CAAC,UAAU,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QACtE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,IAAI,CAAC,uCAAuC,EAAE,KAAK,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAAC,IAAwB,EAAE,OAAuB;QAC9E,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC;QAC9B,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC;QAC7B,IAAI,CAAC,KAAK,GAAG,IAAI,GAAG,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;QACnC,IAAI,CAAC,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IAC9C,CAAC;IAEO,oBAAoB,CAAC,SAA6B;QACxD,MAAM,KAAK,GAAG,cAAc,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAChD,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;YACjB,OAAO,CAAC,GAAG,cAAc,CAAC,CAAC;QAC7B,CAAC;QACD,OAAO,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACrC,CAAC;IAEO,aAAa,CAAC,IAAwB;QAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,gCAAgC,IAAI,EAAE,CAAC,CAAC;QAC1D,CAAC;QACD,OAAO,OAAO,EAAE,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,SAA6B;QAC/C,MAAM,QAAQ,GAAG,IAAI,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC;QACtD,KAAK,MAAM,SAAS,IAAI,QAAQ,EAAE,CAAC;YACjC,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;YAC9C,IAAI,CAAC;gBACH,MAAM,OAAO,CAAC,UAAU,EAAE,CAAC;gBAC3B,IAAI,IAAI,CAAC,aAAa,EAAE,QAAQ,EAAE,CAAC;oBACjC,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,CAAC;gBACtC,CAAC;gBACD,MAAM,IAAI,CAAC,gBAAgB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;gBAChD,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;gBAC7C,OAAO;YACT,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,KAAK,YAAY,+BAAuB,EAAE,CAAC;oBAC7C,OAAO,CAAC,IAAI,CAAC,oBAAoB,SAAS,gBAAgB,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;oBAC3E,SAAS;gBACX,CAAC;gBACD,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACnD,CAAC;IAEO,KAAK,CAAC,aAAa;QACzB,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YACxB,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QACrC,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QACnD,CAAC;QACD,OAAO,IAAI,CAAC,aAAa,CAAC;IAC5B,CAAC;IAEO,YAAY,CAAC,OAA2B;QAC9C,MAAM,KAAK,GAAG,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC9C,IAAI,KAAK,KAAK,CAAC,CAAC,IAAI,KAAK,KAAK,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxD,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,cAAc,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;IACnC,CAAC;IAEO,KAAK,CAAC,OAAO,CACnB,SAAkD,EAClD,IAAmB,EACnB,GAAmB;QAEnB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QAC3C,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,CAAC;YACxC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YAC7B,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,+BAAuB,EAAE,CAAC;gBAC7C,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC;gBAC1D,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACd,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;gBAC3D,CAAC;gBACD,OAAO,CAAC,IAAI,CACV,oBAAoB,IAAI,CAAC,cAAc,EAAE,aAAa,KAAK,CAAC,OAAO,uBAAuB,QAAQ,IAAI,CACvG,CAAC;gBACF,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;gBACnC,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YAC5C,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,GAAW;QACnB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;YACjD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACtC,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;gBACpB,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACzB,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YAC9B,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;QACf,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,GAAW,EAAE,KAAa;QAClC,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;YACnC,MAAM,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC9B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC7B,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAW;QACtB,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;YACnC,MAAM,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC1B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACzB,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;IACpB,CAAC;IAED,KAAK,CAAC,IAAI;QACR,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;YACjD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;YACtC,IAAI,CAAC,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC/C,OAAO,QAAQ,CAAC;QAClB,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;QAClB,OAAO,KAAK,CAAC;IACf,CAAC;CACF;AAtKD,wCAsKC;AAEY,QAAA,cAAc,GAAG,IAAI,cAAc,EAAE,CAAC;AAEnD,kBAAe,sBAAc,CAAC"}

package/dist/backend/src/utils/abiResolver.js

@@ -0,0 +1,180 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.abiResolver = exports.AbiResolver = void 0;
+const crypto_1 = __importDefault(require("crypto"));
+const fs_1 = __importDefault(require("fs"));
+const path_1 = __importDefault(require("path"));
+const ethers_1 = require("ethers");
+const http_1 = require("../../backend/utils/http");
+const secretsResolver_1 = require("./secretsResolver");
+const runtimeObservability_1 = require("./runtimeObservability");
+const CACHE_ROOT = path_1.default.join(process.cwd(), 'abi-cache');
+const normalizeAddress = (address) => {
+    if (!(0, ethers_1.isAddress)(address)) {
+        throw new Error(`Invalid address ${address}`);
+    }
+    return (0, ethers_1.getAddress)(address).toLowerCase();
+};
+const cachePath = (chainId, address) => path_1.default.join(CACHE_ROOT, String(chainId), `${address}.json`);
+const indexPath = (chainId) => path_1.default.join(CACHE_ROOT, String(chainId), 'index.json');
+const readIndex = (chainId) => {
+    const file = indexPath(chainId);
+    if (!fs_1.default.existsSync(file)) {
+        return {};
+    }
+    return JSON.parse(fs_1.default.readFileSync(file, 'utf8'));
+};
+const writeIndex = (chainId, index) => {
+    const file = indexPath(chainId);
+    fs_1.default.mkdirSync(path_1.default.dirname(file), { recursive: true });
+    fs_1.default.writeFileSync(file, JSON.stringify(index, null, 2), 'utf8');
+};
+const writeCache = (chainId, address, payload) => {
+    const file = cachePath(chainId, address);
+    fs_1.default.mkdirSync(path_1.default.dirname(file), { recursive: true });
+    fs_1.default.writeFileSync(file, JSON.stringify(payload, null, 2), 'utf8');
+    const index = readIndex(chainId);
+    index[address] = {
+        contractName: payload.contractName,
+        source: payload.source,
+        abiHash: crypto_1.default.createHash('sha256').update(JSON.stringify(payload.abi)).digest('hex'),
+        address
+    };
+    writeIndex(chainId, index);
+    return file;
+};
+const parseJsonIfNeeded = (abi) => {
+    if (Array.isArray(abi)) {
+        return abi;
+    }
+    if (typeof abi === 'string') {
+        const parsed = JSON.parse(abi);
+        if (Array.isArray(parsed)) {
+            return parsed;
+        }
+    }
+    throw new Error('ABI fragments are required.');
+};
+const resolveFromSourcify = async (chainId, address) => {
+    const url = `https://repo.sourcify.dev/contracts/full_match/${chainId}/${address}/metadata.json`;
+    try {
+        const response = await http_1.http.get(url);
+        const output = response.data ?? {};
+        const abi = output.output?.abi;
+        if (!Array.isArray(abi) || abi.length === 0) {
+            return null;
+        }
+        const contractName = Object.values(output.settings?.compilationTarget ?? {})[0] ?? null;
+        return { abi, contractName: typeof contractName === 'string' ? contractName : null, source: 'sourcify', verified: true };
+    }
+    catch (_error) {
+        return null;
+    }
+};
+const resolveFromEtherscan = async (chainId, address) => {
+    const { value: apiKey } = await (0, secretsResolver_1.resolveSecret)('ETHERSCAN_API_KEY', true);
+    const sourceResponse = await http_1.http.get('', {
+        params: {
+            module: 'contract',
+            action: 'getsourcecode',
+            chainid: chainId,
+            address,
+            apikey: apiKey
+        }
+    });
+    const source = sourceResponse.data;
+    const impl = source.result?.[0]?.Implementation?.trim();
+    const abiAddress = impl && /^0x[a-fA-F0-9]{40}$/.test(impl) && impl !== '0x0000000000000000000000000000000000000000' ? normalizeAddress(impl) : address;
+    const abiResponse = await http_1.http.get('', {
+        params: {
+            module: 'contract',
+            action: 'getabi',
+            chainid: chainId,
+            address: abiAddress,
+            apikey: apiKey
+        }
+    });
+    const abiData = abiResponse.data;
+    if (abiData.status !== '1' || !abiData.result) {
+        throw new Error(`Failed to fetch ABI from Etherscan for ${address}: ${abiData.result}`);
+    }
+    const abi = parseJsonIfNeeded(abiData.result);
+    return {
+        abi,
+        contractName: source.result?.[0]?.ContractName?.trim() || null,
+        source: 'etherscan',
+        verified: true
+    };
+};
+const resolveFromManualRegistry = (chainId, address) => {
+    const registryPath = process.env.ABI_MANUAL_REGISTRY_PATH?.trim();
+    if (!registryPath) {
+        return null;
+    }
+    const payload = JSON.parse(fs_1.default.readFileSync(registryPath, 'utf8'));
+    const chain = payload[String(chainId)] ?? {};
+    const hit = chain[address];
+    if (!hit) {
+        return null;
+    }
+    return {
+        abi: hit.abi,
+        contractName: hit.contractName ?? null,
+        source: 'manual',
+        verified: false
+    };
+};
+class AbiResolver {
+    async resolve(chainId, inputAddress) {
+        const address = normalizeAddress(inputAddress);
+        const fromCachePath = cachePath(chainId, address);
+        if (fs_1.default.existsSync(fromCachePath)) {
+            const cached = JSON.parse(fs_1.default.readFileSync(fromCachePath, 'utf8'));
+            console.info(JSON.stringify({ event: 'ABI_RESOLVED', chainId, address, contractName: cached.contractName, source: 'cache', cached: true, functionsCount: cached.abi.length }));
+            runtimeObservability_1.runtimeObservability.pushAbiResolved({ chainId, address, contractName: cached.contractName, source: 'cache', cached: true, functionsCount: cached.abi.length, fetchedAt: cached.fetchedAt, cachePath: fromCachePath, verified: cached.verified });
+            return cached;
+        }
+        const legacyPath = path_1.default.join(process.cwd(), 'abi', 'address', String(chainId), `${address}.json`);
+        if (fs_1.default.existsSync(legacyPath)) {
+            const parsed = JSON.parse(fs_1.default.readFileSync(legacyPath, 'utf8'));
+            const abi = Array.isArray(parsed) ? parsed : parsed.abi ?? [];
+            const payload = {
+                abi,
+                contractName: readIndex(chainId)[address]?.contractName ?? null,
+                source: 'cache',
+                fetchedAt: new Date().toISOString(),
+                cachePath: fromCachePath,
+                verified: false
+            };
+            writeCache(chainId, address, payload);
+            console.info(JSON.stringify({ event: 'ABI_RESOLVED', chainId, address, contractName: payload.contractName, source: 'cache', cached: true, functionsCount: payload.abi.length }));
+            runtimeObservability_1.runtimeObservability.pushAbiResolved({ chainId, address, contractName: payload.contractName, source: 'cache', cached: true, functionsCount: payload.abi.length, fetchedAt: payload.fetchedAt, cachePath: fromCachePath, verified: payload.verified });
+            return payload;
+        }
+        const sourcify = await resolveFromSourcify(chainId, address);
+        const etherscan = sourcify ? null : await resolveFromEtherscan(chainId, address);
+        const manual = sourcify || etherscan ? null : resolveFromManualRegistry(chainId, address);
+        const resolved = sourcify ?? etherscan ?? manual;
+        if (!resolved) {
+            throw new Error(`Unable to resolve ABI for ${address} on chain ${chainId}`);
+        }
+        const payload = {
+            abi: resolved.abi,
+            contractName: resolved.contractName,
+            source: resolved.source,
+            fetchedAt: new Date().toISOString(),
+            cachePath: fromCachePath,
+            verified: resolved.verified
+        };
+        writeCache(chainId, address, payload);
+        console.info(JSON.stringify({ event: 'ABI_RESOLVED', chainId, address, contractName: payload.contractName, source: payload.source, cached: false, functionsCount: payload.abi.length }));
+        runtimeObservability_1.runtimeObservability.pushAbiResolved({ chainId, address, contractName: payload.contractName, source: payload.source, cached: false, functionsCount: payload.abi.length, fetchedAt: payload.fetchedAt, cachePath: fromCachePath, verified: payload.verified });
+        return payload;
+    }
+}
+exports.AbiResolver = AbiResolver;
+exports.abiResolver = new AbiResolver();
+//# sourceMappingURL=abiResolver.js.map