gnoman 0.1.0

package/dist/cli/cli/gnoman.js

@@ -0,0 +1,387 @@
+#!/usr/bin/env node
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const promises_1 = __importDefault(require("fs/promises"));
+const path_1 = __importDefault(require("path"));
+const child_process_1 = require("child_process");
+const process_1 = __importDefault(require("process"));
+const keyringManager_1 = __importDefault(require("../src/core/keyringManager"));
+const walletService_1 = require("../backend/services/walletService");
+const diagnosticsService_1 = require("../backend/services/diagnosticsService");
+const AVAILABLE_BACKENDS = ['system', 'file', 'memory'];
+const maskSecret = (value) => {
+    if (!value) {
+        return null;
+    }
+    if (value.length <= 4) {
+        return '*'.repeat(value.length);
+    }
+    return `${value.slice(0, 2)}***${value.slice(-2)}`;
+};
+const takeOption = (args, option) => {
+    const index = args.indexOf(option);
+    if (index === -1) {
+        return undefined;
+    }
+    const value = args[index + 1];
+    if (typeof value !== 'string') {
+        throw new Error(`Option ${option} requires a value.`);
+    }
+    args.splice(index, 2);
+    return value;
+};
+const takeFlag = (args, option) => {
+    const index = args.indexOf(option);
+    if (index === -1) {
+        return false;
+    }
+    args.splice(index, 1);
+    return true;
+};
+const ensureBackend = async (backend) => {
+    if (!backend) {
+        return;
+    }
+    if (!AVAILABLE_BACKENDS.includes(backend)) {
+        throw new Error(`Unsupported backend '${backend}'. Use one of: ${AVAILABLE_BACKENDS.join(', ')}`);
+    }
+    await keyringManager_1.default.switchBackend(backend);
+};
+const ensureFileOutput = async (filePath, data) => {
+    const directory = path_1.default.dirname(filePath);
+    await promises_1.default.mkdir(directory, { recursive: true, mode: 0o700 });
+    await promises_1.default.writeFile(filePath, data, 'utf8');
+};
+const readSource = async (source) => {
+    if (source === '-' || source === '/dev/stdin') {
+        return new Promise((resolve, reject) => {
+            let buffer = '';
+            process_1.default.stdin.setEncoding('utf8');
+            process_1.default.stdin.on('data', (chunk) => {
+                buffer += chunk.toString();
+            });
+            process_1.default.stdin.on('end', () => resolve(buffer));
+            process_1.default.stdin.on('error', (error) => reject(error));
+        });
+    }
+    return promises_1.default.readFile(source, 'utf8');
+};
+const parseEnvFile = (content) => {
+    const records = {};
+    const lines = content.split(/\r?\n/);
+    for (const raw of lines) {
+        const line = raw.trim();
+        if (line.length === 0 || line.startsWith('#')) {
+            continue;
+        }
+        const match = line.match(/^([A-Za-z_][A-Za-z0-9_]*)\s*=\s*(.*)$/);
+        if (!match) {
+            continue;
+        }
+        const [, key, remainder] = match;
+        let value = remainder.trim();
+        if (value.startsWith('"') && value.endsWith('"')) {
+            value = value.slice(1, -1).replace(/\\"/g, '"');
+        }
+        records[key] = value;
+    }
+    return records;
+};
+const serializeEnv = (records) => Object.entries(records)
+    .map(([key, value]) => `${key}="${value.replace(/"/g, '\\"')}"`)
+    .join('\n');
+const encryptWithGpg = async (data, recipient, output) => {
+    return new Promise((resolve, reject) => {
+        const child = (0, child_process_1.spawn)('gpg', ['--batch', '--yes', '--encrypt', '--recipient', recipient, '--output', output], {
+            stdio: ['pipe', 'inherit', 'inherit']
+        });
+        child.on('error', (error) => reject(error));
+        child.on('exit', (code) => {
+            if (code === 0) {
+                resolve();
+            }
+            else {
+                reject(new Error(`gpg exited with code ${code}`));
+            }
+        });
+        child.stdin.end(data, 'utf8');
+    });
+};
+const keyringHandlers = {
+    async backend(args) {
+        const action = args.shift();
+        if (!action || action === 'list') {
+            await keyringManager_1.default.list();
+            console.log(`Active backend: ${keyringManager_1.default.currentBackend()}`);
+            console.log(`Available: ${AVAILABLE_BACKENDS.join(', ')}`);
+            return;
+        }
+        if (action === 'switch') {
+            const target = args.shift();
+            if (!target) {
+                throw new Error('Backend name is required.');
+            }
+            await ensureBackend(target);
+            console.log(`Switched to backend: ${keyringManager_1.default.currentBackend()}`);
+            return;
+        }
+        throw new Error(`Unsupported backend action '${action}'.`);
+    },
+    async list(args) {
+        const backend = takeOption(args, '--backend');
+        await ensureBackend(backend);
+        const secrets = await keyringManager_1.default.list();
+        if (Object.keys(secrets).length === 0) {
+            console.log('No keyring entries found.');
+            return;
+        }
+        for (const [key, value] of Object.entries(secrets)) {
+            console.log(`${key}: ${maskSecret(value)}`);
+        }
+    },
+    async set(args) {
+        const backend = takeOption(args, '--backend');
+        const key = args.shift();
+        const value = args.shift();
+        if (!key || typeof value !== 'string') {
+            throw new Error('Usage: gnoman keyring set <key> <value>');
+        }
+        await ensureBackend(backend);
+        await keyringManager_1.default.set(key, value);
+        console.log(`Stored secret '${key}'.`);
+    },
+    async add(args) {
+        await keyringHandlers.set(args);
+    },
+    async edit(args) {
+        await keyringHandlers.set(args);
+    },
+    async get(args) {
+        const backend = takeOption(args, '--backend');
+        const key = args.shift();
+        if (!key) {
+            throw new Error('Usage: gnoman keyring get <key>');
+        }
+        await ensureBackend(backend);
+        const value = await keyringManager_1.default.get(key);
+        if (value === null) {
+            console.error('Secret not found.');
+            process_1.default.exitCode = 1;
+            return;
+        }
+        console.log(value);
+    },
+    async delete(args) {
+        const backend = takeOption(args, '--backend');
+        const key = args.shift();
+        if (!key) {
+            throw new Error('Usage: gnoman keyring delete <key>');
+        }
+        await ensureBackend(backend);
+        await keyringManager_1.default.delete(key);
+        console.log(`Deleted secret '${key}'.`);
+    },
+    async remove(args) {
+        await keyringHandlers.delete(args);
+    },
+    async export(args) {
+        const backend = takeOption(args, '--backend');
+        const format = (takeOption(args, '--format') ?? 'json').toLowerCase();
+        const output = takeOption(args, '--output');
+        const gpgRecipient = takeOption(args, '--gpg');
+        await ensureBackend(backend);
+        const secrets = await keyringManager_1.default.list();
+        let payload;
+        if (format === 'env') {
+            payload = `${serializeEnv(secrets)}\n`;
+        }
+        else if (format === 'json') {
+            payload = `${JSON.stringify(secrets, null, 2)}\n`;
+        }
+        else {
+            throw new Error(`Unsupported export format '${format}'. Use env or json.`);
+        }
+        if (gpgRecipient) {
+            if (!output) {
+                throw new Error('The --output option is required when using --gpg.');
+            }
+            await encryptWithGpg(payload, gpgRecipient, output);
+            console.log(`Exported secrets to ${output} using GPG recipient ${gpgRecipient}.`);
+            return;
+        }
+        if (output) {
+            await ensureFileOutput(output, payload);
+            console.log(`Exported secrets to ${output}.`);
+        }
+        else {
+            process_1.default.stdout.write(payload);
+        }
+    },
+    async import(args) {
+        const backend = takeOption(args, '--backend');
+        const format = (takeOption(args, '--format') ?? 'json').toLowerCase();
+        const source = args.shift();
+        if (!source) {
+            throw new Error('Usage: gnoman keyring import <file> [--format env|json]');
+        }
+        await ensureBackend(backend);
+        const content = await readSource(source);
+        let records;
+        if (format === 'env') {
+            records = parseEnvFile(content);
+        }
+        else if (format === 'json') {
+            const parsed = JSON.parse(content);
+            if (typeof parsed !== 'object' || parsed === null) {
+                throw new Error('Invalid JSON payload for keyring import.');
+            }
+            records = Object.fromEntries(Object.entries(parsed).filter(([, value]) => typeof value === 'string'));
+        }
+        else {
+            throw new Error(`Unsupported import format '${format}'. Use env or json.`);
+        }
+        for (const [key, value] of Object.entries(records)) {
+            await keyringManager_1.default.set(key, value);
+        }
+        console.log(`Imported ${Object.keys(records).length} secrets into backend ${keyringManager_1.default.currentBackend()}.`);
+    }
+};
+const walletHandlers = {
+    async list(_args) {
+        const wallets = await (0, walletService_1.listWalletMetadata)();
+        if (wallets.length === 0) {
+            console.log('No wallets stored.');
+            return;
+        }
+        for (const wallet of wallets) {
+            console.log(`${wallet.address} (${wallet.alias ?? 'unnamed'})`);
+        }
+    },
+    async export(args) {
+        const address = args.shift();
+        const password = takeOption(args, '--password');
+        const output = takeOption(args, '--output');
+        if (!address || !password) {
+            throw new Error('Usage: gnoman wallets export <address> --password <password> [--output <file>]');
+        }
+        const keystore = await (0, walletService_1.exportWallet)(address, password);
+        if (output) {
+            await ensureFileOutput(output, `${keystore}\n`);
+            console.log(`Exported wallet ${address} to ${output}.`);
+        }
+        else {
+            process_1.default.stdout.write(`${keystore}\n`);
+        }
+    },
+    async import(args) {
+        const source = args.shift();
+        const password = takeOption(args, '--password');
+        const alias = takeOption(args, '--alias');
+        const hidden = takeFlag(args, '--hidden');
+        if (!source || !password) {
+            throw new Error('Usage: gnoman wallets import <file> --password <password> [--alias <alias>] [--hidden]');
+        }
+        const json = await readSource(source);
+        const wallet = await (0, walletService_1.importWalletFromEncryptedJson)({ json, password, alias, hidden });
+        console.log(`Imported wallet ${wallet.address} (${wallet.alias ?? 'unnamed'}).`);
+    }
+};
+const printDiagnosticReport = (report, { verbose = false } = {}) => {
+    const icon = {
+        ok: '✅',
+        warn: '⚠️',
+        error: '❌'
+    };
+    console.log('GNOMAN system diagnostics');
+    console.log(`Generated: ${report.generatedAt}`);
+    console.log(`Environment: ${report.environment.platform}/${report.environment.arch} · Node ${report.environment.nodeVersion} (recommended ${report.environment.recommendedNodeVersion})`);
+    console.log(`Summary: ${report.summary.ok} ok, ${report.summary.warn} warn, ${report.summary.error} error`);
+    console.log('');
+    for (const check of report.checks) {
+        console.log(`${icon[check.status]} ${check.label}`);
+        if (check.detail) {
+            console.log(`    ${check.detail}`);
+        }
+        if (check.suggestion) {
+            console.log(`    Suggestion: ${check.suggestion}`);
+        }
+        if (verbose && check.metadata) {
+            console.log(`    Metadata: ${JSON.stringify(check.metadata)}`);
+        }
+    }
+};
+const diagnosticsHandlers = {
+    async run(args) {
+        const jsonOutput = takeFlag(args, '--json');
+        const autoFix = takeFlag(args, '--fix');
+        const verbose = takeFlag(args, '--verbose');
+        const skipGpg = takeFlag(args, '--skip-gpg');
+        const report = await (0, diagnosticsService_1.runSystemDiagnostics)({ autoFix, skipGpg });
+        if (jsonOutput) {
+            console.log(JSON.stringify(report, null, 2));
+            return;
+        }
+        printDiagnosticReport(report, { verbose });
+    },
+    async list(args) {
+        await diagnosticsHandlers.run(args);
+    }
+};
+const printHelp = () => {
+    console.log(`GNOMAN CLI
+
+Usage:
+  gnoman keyring <command> [...args]
+  gnoman wallets <command> [...args]
+  gnoman diagnostics <command> [...args]
+
+Keyring commands:
+  keyring backend list
+  keyring backend switch <system|file|memory>
+  keyring list [--backend <name>]
+  keyring set <key> <value> [--backend <name>]
+  keyring get <key> [--backend <name>]
+  keyring delete <key> [--backend <name>]
+  keyring export [--format env|json] [--output <file>] [--gpg <recipient>] [--backend <name>]
+  keyring import <file|-> [--format env|json] [--backend <name>]
+
+Wallet commands:
+  wallets list
+  wallets export <address> --password <password> [--output <file>]
+  wallets import <file|-> --password <password> [--alias <alias>] [--hidden]
+
+Diagnostics commands:
+  diagnostics run [--json] [--verbose] [--fix] [--skip-gpg]
+`);
+};
+const handlers = {
+    keyring: keyringHandlers,
+    wallets: walletHandlers,
+    diagnostics: diagnosticsHandlers
+};
+const main = async () => {
+    const args = process_1.default.argv.slice(2);
+    const namespace = args.shift();
+    if (!namespace) {
+        printHelp();
+        return;
+    }
+    const group = handlers[namespace];
+    if (!group) {
+        throw new Error(`Unknown command group '${namespace}'.`);
+    }
+    const subcommand = args.shift() ?? 'list';
+    const handler = group[subcommand];
+    if (!handler) {
+        throw new Error(`Unknown ${namespace} command '${subcommand}'.`);
+    }
+    await handler(args);
+};
+main().catch((error) => {
+    console.error(error instanceof Error ? error.message : error);
+    process_1.default.exitCode = 1;
+});
+//# sourceMappingURL=gnoman.js.map

package/dist/cli/cli/gnoman.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gnoman.js","sourceRoot":"","sources":["../../../cli/gnoman.ts"],"names":[],"mappings":";;;;;;AACA,2DAA6B;AAC7B,gDAAwB;AACxB,iDAAsC;AACtC,sDAA8B;AAC9B,gFAAwD;AAExD,qEAI2C;AAC3C,+EAIgD;AAEhD,MAAM,kBAAkB,GAAyB,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;AAI9E,MAAM,UAAU,GAAG,CAAC,KAAoB,EAAE,EAAE;IAC1C,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;QACtB,OAAO,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAClC,CAAC;IACD,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACrD,CAAC,CAAC;AAEF,MAAM,UAAU,GAAG,CAAC,IAAc,EAAE,MAAc,EAAE,EAAE;IACpD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACnC,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;QACjB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;IAC9B,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,UAAU,MAAM,oBAAoB,CAAC,CAAC;IACxD,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACtB,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AAEF,MAAM,QAAQ,GAAG,CAAC,IAAc,EAAE,MAAc,EAAE,EAAE;IAClD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACnC,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;QACjB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACtB,OAAO,IAAI,CAAC;AACd,CAAC,CAAC;AAEF,MAAM,aAAa,GAAG,KAAK,EAAE,OAAgB,EAAE,EAAE;IAC/C,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO;IACT,CAAC;IACD,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,OAA6B,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,wBAAwB,OAAO,kBAAkB,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACpG,CAAC;IACD,MAAM,wBAAc,CAAC,aAAa,CAAC,OAA6B,CAAC,CAAC;AACpE,CAAC,CAAC;AAEF,MAAM,gBAAgB,GAAG,KAAK,EAAE,QAAgB,EAAE,IAAY,EAAE,EAAE;IAChE,MAAM,SAAS,GAAG,cAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACzC,MAAM,kBAAE,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5D,MAAM,kBAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;AAC7C,CAAC,CAAC;AAEF,MAAM,UAAU,GAAG,KAAK,EAAE,MAAc,EAAE,EAAE;IAC1C,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,YAAY,EAAE,CAAC;QAC9C,OAAO,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC7C,IAAI,MAAM,GAAG,EAAE,CAAC;YAChB,iBAAO,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;YAClC,iBAAO,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;gBACjC,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YAC7B,CAAC,CAAC,CAAC;YACH,iBAAO,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;YAC/C,iBAAO,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACtD,CAAC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,kBAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AACrC,CAAC,CAAC;AAEF,MAAM,YAAY,GAAG,CAAC,OAAe,EAAE,EAAE;IACvC,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACrC,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QACxB,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9C,SAAS;QACX,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAClE,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,SAAS;QACX,CAAC;QACD,MAAM,CAAC,EAAE,GAAG,EAAE,SAAS,CAAC,GAAG,KAAK,CAAC;QACjC,IAAI,KAAK,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC;QAC7B,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACjD,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAClD,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACvB,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC,CAAC;AAEF,MAAM,YAAY,GAAG,CAAC,OAA+B,EAAE,EAAE,CACvD,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC;KACpB,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,KAAK,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC;KAC/D,IAAI,CAAC,IAAI,CAAC,CAAC;AAEhB,MAAM,cAAc,GAAG,KAAK,EAAE,IAAY,EAAE,SAAiB,EAAE,MAAc,EAAE,EAAE;IAC/E,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC3C,MAAM,KAAK,GAAG,IAAA,qBAAK,EAAC,KAAK,EAAE,CAAC,SAAS,EAAE,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE;YAC1G,KAAK,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,SAAS,CAAC;SACtC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC5C,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;YACxB,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;gBACf,OAAO,EAAE,CAAC;YACZ,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,IAAI,KAAK,CAAC,wBAAwB,IAAI,EAAE,CAAC,CAAC,CAAC;YACpD,CAAC;QACH,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,eAAe,GAAmC;IACtD,KAAK,CAAC,OAAO,CAAC,IAAI;QAChB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;QAC5B,IAAI,CAAC,MAAM,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YACjC,MAAM,wBAAc,CAAC,IAAI,EAAE,CAAC;YAC5B,OAAO,CAAC,GAAG,CAAC,mBAAmB,wBAAc,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;YAClE,OAAO,CAAC,GAAG,CAAC,cAAc,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC3D,OAAO;QACT,CAAC;QACD,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;YACxB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;YAC5B,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;YAC/C,CAAC;YACD,MAAM,aAAa,CAAC,MAAM,CAAC,CAAC;YAC5B,OAAO,CAAC,GAAG,CAAC,wBAAwB,wBAAc,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;YACvE,OAAO;QACT,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,+BAA+B,MAAM,IAAI,CAAC,CAAC;IAC7D,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,IAAI;QACb,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QAC9C,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC;QAC7B,MAAM,OAAO,GAAG,MAAM,wBAAc,CAAC,IAAI,EAAE,CAAC;QAC5C,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtC,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;YACzC,OAAO;QACT,CAAC;QACD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YACnD,OAAO,CAAC,GAAG,CAAC,GAAG,GAAG,KAAK,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,IAAI;QACZ,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QAC9C,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;QAC3B,IAAI,CAAC,GAAG,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YACtC,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QAC7D,CAAC;QACD,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC;QAC7B,MAAM,wBAAc,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACrC,OAAO,CAAC,GAAG,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAAC;IACzC,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,IAAI;QACZ,MAAM,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAClC,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,IAAI;QACb,MAAM,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAClC,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,IAAI;QACZ,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QAC9C,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACrD,CAAC;QACD,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC;QAC7B,MAAM,KAAK,GAAG,MAAM,wBAAc,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5C,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACnB,OAAO,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;YACnC,iBAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAI;QACf,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QAC9C,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACxD,CAAC;QACD,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC;QAC7B,MAAM,wBAAc,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjC,OAAO,CAAC,GAAG,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAAC;IAC1C,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAI;QACf,MAAM,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAI;QACf,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QAC9C,MAAM,MAAM,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC;QACtE,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC5C,MAAM,YAAY,GAAG,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC/C,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC;QAC7B,MAAM,OAAO,GAAG,MAAM,wBAAc,CAAC,IAAI,EAAE,CAAC;QAC5C,IAAI,OAAe,CAAC;QACpB,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;YACrB,OAAO,GAAG,GAAG,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC;QACzC,CAAC;aAAM,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YAC7B,OAAO,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;QACpD,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,KAAK,CAAC,8BAA8B,MAAM,qBAAqB,CAAC,CAAC;QAC7E,CAAC;QACD,IAAI,YAAY,EAAE,CAAC;YACjB,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;YACvE,CAAC;YACD,MAAM,cAAc,CAAC,OAAO,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;YACpD,OAAO,CAAC,GAAG,CAAC,uBAAuB,MAAM,wBAAwB,YAAY,GAAG,CAAC,CAAC;YAClF,OAAO;QACT,CAAC;QACD,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,gBAAgB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YACxC,OAAO,CAAC,GAAG,CAAC,uBAAuB,MAAM,GAAG,CAAC,CAAC;QAChD,CAAC;aAAM,CAAC;YACN,iBAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAI;QACf,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QAC9C,MAAM,MAAM,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC;QACtE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;QAC5B,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;QAC7E,CAAC;QACD,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC;QAC7B,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,CAAC;QACzC,IAAI,OAA+B,CAAC;QACpC,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;YACrB,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;QAClC,CAAC;aAAM,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YAC7B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACnC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;gBAClD,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;YAC9D,CAAC;YACD,OAAO,GAAG,MAAM,CAAC,WAAW,CAC1B,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAuB,CAC9F,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,KAAK,CAAC,8BAA8B,MAAM,qBAAqB,CAAC,CAAC;QAC7E,CAAC;QACD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YACnD,MAAM,wBAAc,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACvC,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,YAAY,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,yBAAyB,wBAAc,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC;IAClH,CAAC;CACF,CAAC;AAEF,MAAM,cAAc,GAAmC;IACrD,KAAK,CAAC,IAAI,CAAC,KAAK;QACd,MAAM,OAAO,GAAG,MAAM,IAAA,kCAAkB,GAAE,CAAC;QAC3C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;YAClC,OAAO;QACT,CAAC;QACD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,OAAO,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,OAAO,KAAK,MAAM,CAAC,KAAK,IAAI,SAAS,GAAG,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAI;QACf,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QAChD,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC5C,IAAI,CAAC,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,gFAAgF,CAAC,CAAC;QACpG,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,IAAA,4BAAY,EAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACvD,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,gBAAgB,CAAC,MAAM,EAAE,GAAG,QAAQ,IAAI,CAAC,CAAC;YAChD,OAAO,CAAC,GAAG,CAAC,mBAAmB,OAAO,OAAO,MAAM,GAAG,CAAC,CAAC;QAC1D,CAAC;aAAM,CAAC;YACN,iBAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,QAAQ,IAAI,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAI;QACf,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QAChD,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,wFAAwF,CAAC,CAAC;QAC5G,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,CAAC;QACtC,MAAM,MAAM,GAAG,MAAM,IAAA,6CAA6B,EAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QACtF,OAAO,CAAC,GAAG,CAAC,mBAAmB,MAAM,CAAC,OAAO,KAAK,MAAM,CAAC,KAAK,IAAI,SAAS,IAAI,CAAC,CAAC;IACnF,CAAC;CACF,CAAC;AAEF,MAAM,qBAAqB,GAAG,CAAC,MAAwB,EAAE,EAAE,OAAO,GAAG,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE;IACnF,MAAM,IAAI,GAA8C;QACtD,EAAE,EAAE,GAAG;QACP,IAAI,EAAE,IAAI;QACV,KAAK,EAAE,GAAG;KACX,CAAC;IAEF,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;IACzC,OAAO,CAAC,GAAG,CAAC,cAAc,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;IAChD,OAAO,CAAC,GAAG,CACT,gBAAgB,MAAM,CAAC,WAAW,CAAC,QAAQ,IAAI,MAAM,CAAC,WAAW,CAAC,IAAI,WAAW,MAAM,CAAC,WAAW,CAAC,WAAW,iBAAiB,MAAM,CAAC,WAAW,CAAC,sBAAsB,GAAG,CAC7K,CAAC;IACF,OAAO,CAAC,GAAG,CACT,YAAY,MAAM,CAAC,OAAO,CAAC,EAAE,QAAQ,MAAM,CAAC,OAAO,CAAC,IAAI,UAAU,MAAM,CAAC,OAAO,CAAC,KAAK,QAAQ,CAC/F,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClC,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;QACpD,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;YACjB,OAAO,CAAC,GAAG,CAAC,OAAO,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QACrC,CAAC;QACD,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;YACrB,OAAO,CAAC,GAAG,CAAC,mBAAmB,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC;QACrD,CAAC;QACD,IAAI,OAAO,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YAC9B,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,mBAAmB,GAAmC;IAC1D,KAAK,CAAC,GAAG,CAAC,IAAI;QACZ,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC5C,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACxC,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QAC5C,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QAC7C,MAAM,MAAM,GAAG,MAAM,IAAA,yCAAoB,EAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;QAChE,IAAI,UAAU,EAAE,CAAC;YACf,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAC7C,OAAO;QACT,CAAC;QACD,qBAAqB,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;IAC7C,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,IAAI;QACb,MAAM,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACtC,CAAC;CACF,CAAC;AAEF,MAAM,SAAS,GAAG,GAAG,EAAE;IACrB,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;;;;;;;;;;;;CAwBb,CAAC,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,QAAQ,GAAmD;IAC/D,OAAO,EAAE,eAAe;IACxB,OAAO,EAAE,cAAc;IACvB,WAAW,EAAE,mBAAmB;CACjC,CAAC;AAEF,MAAM,IAAI,GAAG,KAAK,IAAI,EAAE;IACtB,MAAM,IAAI,GAAG,iBAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACnC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;IAC/B,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,SAAS,EAAE,CAAC;QACZ,OAAO;IACT,CAAC;IACD,MAAM,KAAK,GAAG,QAAQ,CAAC,SAAkC,CAAC,CAAC;IAC3D,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,0BAA0B,SAAS,IAAI,CAAC,CAAC;IAC3D,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,EAAE,IAAI,MAAM,CAAC;IAC1C,MAAM,OAAO,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC;IAClC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,WAAW,SAAS,aAAa,UAAU,IAAI,CAAC,CAAC;IACnE,CAAC;IACD,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;AACtB,CAAC,CAAC;AAEF,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;IACrB,OAAO,CAAC,KAAK,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAC9D,iBAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACvB,CAAC,CAAC,CAAC"}

package/dist/cli/src/core/backends/fileBackend.js

@@ -0,0 +1,136 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.FileBackend = void 0;
+const promises_1 = __importDefault(require("fs/promises"));
+const path_1 = __importDefault(require("path"));
+const os_1 = __importDefault(require("os"));
+const crypto_1 = __importDefault(require("crypto"));
+const types_1 = require("./types");
+const DEFAULT_FILE = process.env.GNOMAN_KEYRING_FILE ?? path_1.default.join(os_1.default.homedir(), '.gnoman', 'secrets.enc');
+const DIR_MODE = 0o700;
+const FILE_MODE = 0o600;
+const HKDF_INFO = Buffer.from('gnoman-keyring-file', 'utf8');
+const SALT_BYTES = 32;
+const NONCE_BYTES = 12;
+const serialize = (record) => JSON.stringify(record, null, 2);
+const getPasswordMaterial = () => {
+    if (process.env.GNOMAN_KEYRING_PASSWORD) {
+        return process.env.GNOMAN_KEYRING_PASSWORD;
+    }
+    const userInfo = (() => {
+        try {
+            return os_1.default.userInfo().username;
+        }
+        catch {
+            return 'unknown-user';
+        }
+    })();
+    return `${os_1.default.hostname()}|${userInfo}`;
+};
+const maskFilesystemError = (error) => {
+    const detail = error instanceof Error ? error.message : String(error);
+    return new types_1.BackendUnavailableError(`File keyring unavailable: ${detail}`, 'file');
+};
+class FileBackend {
+    constructor(filePath = DEFAULT_FILE) {
+        this.cache = new Map();
+        this.initialized = false;
+        this.filePath = filePath;
+    }
+    async ensureDirectory() {
+        const dir = path_1.default.dirname(this.filePath);
+        await promises_1.default.mkdir(dir, { recursive: true, mode: DIR_MODE });
+    }
+    deriveKey(salt) {
+        try {
+            const derived = crypto_1.default.hkdfSync('sha256', Buffer.from(getPasswordMaterial()), salt, HKDF_INFO, 32);
+            return Buffer.from(derived);
+        }
+        catch (error) {
+            throw maskFilesystemError(error);
+        }
+    }
+    async loadFromDisk() {
+        try {
+            const raw = await promises_1.default.readFile(this.filePath, 'utf8');
+            const payload = JSON.parse(raw);
+            const salt = Buffer.from(payload.salt, 'base64');
+            const nonce = Buffer.from(payload.nonce, 'base64');
+            const authTag = Buffer.from(payload.authTag, 'base64');
+            const encrypted = Buffer.from(payload.data, 'base64');
+            const key = this.deriveKey(salt);
+            const decipher = crypto_1.default.createDecipheriv('aes-256-gcm', key, nonce);
+            decipher.setAuthTag(authTag);
+            const decrypted = Buffer.concat([decipher.update(encrypted), decipher.final()]);
+            const record = JSON.parse(decrypted.toString('utf8'));
+            this.cache = new Map(Object.entries(record));
+            this.salt = salt;
+        }
+        catch (error) {
+            const nodeError = error;
+            if (nodeError?.code === 'ENOENT') {
+                this.cache = new Map();
+                this.salt = undefined;
+                return;
+            }
+            throw maskFilesystemError(error);
+        }
+    }
+    async persist() {
+        try {
+            await this.ensureDirectory();
+            const salt = this.salt ?? crypto_1.default.randomBytes(SALT_BYTES);
+            this.salt = salt;
+            const key = this.deriveKey(salt);
+            const nonce = crypto_1.default.randomBytes(NONCE_BYTES);
+            const cipher = crypto_1.default.createCipheriv('aes-256-gcm', key, nonce);
+            const plaintext = Buffer.from(serialize(Object.fromEntries(this.cache.entries())), 'utf8');
+            const encrypted = Buffer.concat([cipher.update(plaintext), cipher.final()]);
+            const authTag = cipher.getAuthTag();
+            const payload = {
+                version: 1,
+                salt: salt.toString('base64'),
+                nonce: nonce.toString('base64'),
+                authTag: authTag.toString('base64'),
+                data: encrypted.toString('base64')
+            };
+            await promises_1.default.writeFile(this.filePath, JSON.stringify(payload), { mode: FILE_MODE });
+        }
+        catch (error) {
+            throw maskFilesystemError(error);
+        }
+    }
+    async initialize() {
+        await this.loadFromDisk();
+        this.initialized = true;
+    }
+    async ensureReady() {
+        if (!this.initialized) {
+            await this.initialize();
+        }
+    }
+    async get(key) {
+        await this.ensureReady();
+        return this.cache.get(key) ?? null;
+    }
+    async set(key, value) {
+        await this.ensureReady();
+        this.cache.set(key, value);
+        await this.persist();
+    }
+    async delete(key) {
+        await this.ensureReady();
+        this.cache.delete(key);
+        await this.persist();
+    }
+    async list() {
+        await this.ensureReady();
+        return Object.fromEntries(this.cache.entries());
+    }
+}
+exports.FileBackend = FileBackend;
+exports.default = FileBackend;
+//# sourceMappingURL=fileBackend.js.map

package/dist/cli/src/core/backends/fileBackend.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fileBackend.js","sourceRoot":"","sources":["../../../../../src/core/backends/fileBackend.ts"],"names":[],"mappings":";;;;;;AAAA,2DAA6B;AAC7B,gDAAwB;AACxB,4CAAoB;AACpB,oDAA4B;AAC5B,mCAAkE;AAElE,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,cAAI,CAAC,IAAI,CAAC,YAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;AAC1G,MAAM,QAAQ,GAAG,KAAK,CAAC;AACvB,MAAM,SAAS,GAAG,KAAK,CAAC;AACxB,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;AAC7D,MAAM,UAAU,GAAG,EAAE,CAAC;AACtB,MAAM,WAAW,GAAG,EAAE,CAAC;AAEvB,MAAM,SAAS,GAAG,CAAC,MAA8B,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AAEtF,MAAM,mBAAmB,GAAG,GAAG,EAAE;IAC/B,IAAI,OAAO,CAAC,GAAG,CAAC,uBAAuB,EAAE,CAAC;QACxC,OAAO,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC;IAC7C,CAAC;IACD,MAAM,QAAQ,GAAG,CAAC,GAAG,EAAE;QACrB,IAAI,CAAC;YACH,OAAO,YAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC;QAChC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,cAAc,CAAC;QACxB,CAAC;IACH,CAAC,CAAC,EAAE,CAAC;IACL,OAAO,GAAG,YAAE,CAAC,QAAQ,EAAE,IAAI,QAAQ,EAAE,CAAC;AACxC,CAAC,CAAC;AAEF,MAAM,mBAAmB,GAAG,CAAC,KAAc,EAA2B,EAAE;IACtE,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACtE,OAAO,IAAI,+BAAuB,CAAC,6BAA6B,MAAM,EAAE,EAAE,MAAM,CAAC,CAAC;AACpF,CAAC,CAAC;AAUF,MAAa,WAAW;IAStB,YAAY,QAAQ,GAAG,YAAY;QAN3B,UAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;QAIlC,gBAAW,GAAG,KAAK,CAAC;QAG1B,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,CAAC;IAEO,KAAK,CAAC,eAAe;QAC3B,MAAM,GAAG,GAAG,cAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACxC,MAAM,kBAAE,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC3D,CAAC;IAEO,SAAS,CAAC,IAAY;QAC5B,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,gBAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;YACnG,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC9B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,mBAAmB,CAAC,KAAK,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,YAAY;QACxB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,kBAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YACrD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAqB,CAAC;YACpD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YACjD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;YACnD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;YACvD,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YACtD,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YACjC,MAAM,QAAQ,GAAG,gBAAM,CAAC,gBAAgB,CAAC,aAAa,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;YACpE,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YAC7B,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YAChF,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAA2B,CAAC;YAChF,IAAI,CAAC,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;YAC7C,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACnB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,SAAS,GAAG,KAA8B,CAAC;YACjD,IAAI,SAAS,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACjC,IAAI,CAAC,KAAK,GAAG,IAAI,GAAG,EAAE,CAAC;gBACvB,IAAI,CAAC,IAAI,GAAG,SAAS,CAAC;gBACtB,OAAO;YACT,CAAC;YACD,MAAM,mBAAmB,CAAC,KAAK,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,OAAO;QACnB,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;YAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,gBAAM,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;YACzD,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;YACjB,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YACjC,MAAM,KAAK,GAAG,gBAAM,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;YAC9C,MAAM,MAAM,GAAG,gBAAM,CAAC,cAAc,CAAC,aAAa,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;YAChE,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;YAC3F,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YAC5E,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;YACpC,MAAM,OAAO,GAAqB;gBAChC,OAAO,EAAE,CAAC;gBACV,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBAC7B,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBAC/B,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBACnC,IAAI,EAAE,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC;aACnC,CAAC;YACF,MAAM,kBAAE,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;QAClF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,mBAAmB,CAAC,KAAK,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IAED,KAAK,CAAC,UAAU;QACd,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QAC1B,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;IAC1B,CAAC;IAEO,KAAK,CAAC,WAAW;QACvB,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACtB,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QAC1B,CAAC;IACH,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,GAAW;QACnB,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,GAAW,EAAE,KAAa;QAClC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACzB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC3B,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAW;QACtB,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACzB,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACvB,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,IAAI;QACR,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACzB,OAAO,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IAClD,CAAC;CACF;AA7GD,kCA6GC;AAED,kBAAe,WAAW,CAAC"}

package/dist/cli/src/core/backends/memoryBackend.js

@@ -0,0 +1,26 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MemoryBackend = void 0;
+class MemoryBackend {
+    constructor() {
+        this.store = new Map();
+    }
+    async initialize() {
+        this.store = new Map();
+    }
+    async get(key) {
+        return this.store.get(key) ?? null;
+    }
+    async set(key, value) {
+        this.store.set(key, value);
+    }
+    async delete(key) {
+        this.store.delete(key);
+    }
+    async list() {
+        return Object.fromEntries(this.store.entries());
+    }
+}
+exports.MemoryBackend = MemoryBackend;
+exports.default = MemoryBackend;
+//# sourceMappingURL=memoryBackend.js.map

package/dist/cli/src/core/backends/memoryBackend.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"memoryBackend.js","sourceRoot":"","sources":["../../../../../src/core/backends/memoryBackend.ts"],"names":[],"mappings":";;;AAEA,MAAa,aAAa;IAA1B;QACU,UAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;IAqB5C,CAAC;IAnBC,KAAK,CAAC,UAAU;QACd,IAAI,CAAC,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,GAAW;QACnB,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,GAAW,EAAE,KAAa;QAClC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAW;QACtB,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,IAAI;QACR,OAAO,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IAClD,CAAC;CACF;AAtBD,sCAsBC;AAED,kBAAe,aAAa,CAAC"}

package/dist/cli/src/core/backends/systemBackend.js

@@ -0,0 +1,86 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SystemBackend = void 0;
+const types_1 = require("./types");
+class SystemBackend {
+    constructor(serviceName = process.env.GNOMAN_KEYRING_SERVICE ?? 'gnoman') {
+        this.serviceName = serviceName;
+    }
+    loadKeytar() {
+        if (!this.keytarModule) {
+            this.keytarModule = Promise.resolve().then(() => __importStar(require('keytar'))).catch((error) => {
+                throw new types_1.BackendUnavailableError(`System keyring unavailable: ${error?.message ?? String(error)}`, 'system');
+            });
+        }
+        return this.keytarModule;
+    }
+    async withKeytar(handler) {
+        const keytar = await this.loadKeytar();
+        try {
+            return await handler(keytar);
+        }
+        catch (error) {
+            throw new types_1.BackendUnavailableError(`System keyring operation failed: ${error?.message ?? String(error)}`, 'system');
+        }
+    }
+    async initialize() {
+        await this.withKeytar(async (keytar) => {
+            await keytar.findCredentials(this.serviceName);
+        });
+    }
+    async get(key) {
+        return this.withKeytar((keytar) => keytar.getPassword(this.serviceName, key));
+    }
+    async set(key, value) {
+        await this.withKeytar((keytar) => keytar.setPassword(this.serviceName, key, value));
+    }
+    async delete(key) {
+        await this.withKeytar((keytar) => keytar.deletePassword(this.serviceName, key));
+    }
+    async list() {
+        return this.withKeytar(async (keytar) => {
+            const credentials = await keytar.findCredentials(this.serviceName);
+            const result = {};
+            for (const credential of credentials) {
+                result[credential.account] = credential.password;
+            }
+            return result;
+        });
+    }
+}
+exports.SystemBackend = SystemBackend;
+exports.default = SystemBackend;
+//# sourceMappingURL=systemBackend.js.map