moderado 0.3.0

package/dist/commands/models.js

@@ -0,0 +1,81 @@
+import { NvidiaAdapter, fetchOpenRouterFreeModels } from '../vendor/providers/index.js';
+import { Router } from '../vendor/core/index.js';
+export async function handleModelsCommand(args, options = {}) {
+    const provider = options.nvidiaAdapter ?? new NvidiaAdapter();
+    const router = new Router();
+    const requestedProvider = args.provider?.toLowerCase();
+    const results = {};
+    // 1. NVIDIA NIM Free Models
+    if (!requestedProvider || requestedProvider === 'nvidia-nim' || requestedProvider === 'nvidia') {
+        try {
+            const inventory = await provider.discoverModels();
+            const freeModels = inventory
+                .map((entry) => {
+                const meta = router.classifyModel(entry.id, args.profile.includes('local'));
+                return {
+                    id: entry.id,
+                    provider: 'NVIDIA NIM',
+                    accessTier: meta.accessTier,
+                    toolSupport: meta.toolSupport,
+                    notes: meta.source,
+                };
+            })
+                .filter((entry) => (entry.accessTier === 'free_trial' || entry.accessTier === 'local') && entry.toolSupport === 'supported');
+            results['NVIDIA NIM'] = freeModels;
+        }
+        catch {
+            results['NVIDIA NIM'] = [];
+        }
+    }
+    // 2. OpenRouter Free Models
+    if (!requestedProvider || requestedProvider === 'openrouter') {
+        try {
+            const openRouterModels = await fetchOpenRouterFreeModels({ fetchImpl: options.fetchImpl });
+            results['OpenRouter'] = openRouterModels.map((entry) => ({
+                id: entry.id,
+                provider: 'OpenRouter',
+                accessTier: 'free',
+                toolSupport: 'supported',
+                notes: 'free tier',
+            }));
+        }
+        catch {
+            results['OpenRouter'] = [];
+        }
+    }
+    // 4. Agnes AI
+    if (!requestedProvider || requestedProvider === 'agnes-ai' || requestedProvider === 'agnes') {
+        results['Agnes AI'] = [
+            { id: 'agnes/chat', provider: 'Agnes AI', accessTier: 'free', toolSupport: 'supported', notes: 'all models free' },
+            { id: 'agnes/code', provider: 'Agnes AI', accessTier: 'free', toolSupport: 'supported', notes: 'all models free' },
+        ];
+    }
+    if (args.json) {
+        process.stdout.write(JSON.stringify(results, null, 2) + '\n');
+        return 0;
+    }
+    const totalCount = Object.values(results).reduce((acc, list) => acc + list.length, 0);
+    process.stdout.write(`\n\x1b[1;36mModerado Free Models Catalog\x1b[0m \x1b[90m(${totalCount} verified free models across NVIDIA NIM, OpenRouter, OpenCode, and Agnes)\x1b[0m\n\n`);
+    for (const [providerName, list] of Object.entries(results)) {
+        if (list.length === 0)
+            continue;
+        process.stdout.write(`\x1b[1;38;5;75m=== ${providerName} (${list.length} Free Models) ===\x1b[0m\n`);
+        process.stdout.write(`${'MODEL ID'.padEnd(52)} ${'ACCESS TIER'.padEnd(14)} ${'TOOL SUPPORT'.padEnd(14)} NOTES\n`);
+        process.stdout.write(`${'─'.repeat(52)} ${'─'.repeat(14)} ${'─'.repeat(14)} ${'─'.repeat(16)}\n`);
+        for (const model of list) {
+            const formattedId = model.id.length > 50 ? model.id.slice(0, 47) + '...' : model.id;
+            process.stdout.write(`${formattedId.padEnd(52)} \x1b[32m${model.accessTier.padEnd(14)}\x1b[0m \x1b[32m${model.toolSupport.padEnd(14)}\x1b[0m \x1b[90m${model.notes ?? ''}\x1b[0m\n`);
+        }
+        process.stdout.write('\n');
+    }
+    if (!args.json && !args.nonInteractive) {
+        const { askQuestion } = await import('../ui/prompt.js');
+        const { selectModelInteractive } = await import('../ui/model_selector.js');
+        const wantSelect = await askQuestion('Would you like to select and configure a default model? [y/N]: ');
+        if (wantSelect.toLowerCase() === 'y' || wantSelect.toLowerCase() === 'yes') {
+            await selectModelInteractive({ saveSelectionByDefault: true });
+        }
+    }
+    return 0;
+}
+//# sourceMappingURL=models.js.map

package/dist/commands/models.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"models.js","sourceRoot":"","sources":["../../src/commands/models.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAC;AAC/E,OAAO,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAQxC,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,IAAmB,EACnB,UAA+B,EAAE;IAEjC,MAAM,QAAQ,GAAG,OAAO,CAAC,aAAa,IAAI,IAAI,aAAa,EAAE,CAAC;IAC9D,MAAM,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;IAC5B,MAAM,iBAAiB,GAAG,IAAI,CAAC,QAAQ,EAAE,WAAW,EAAE,CAAC;IAEvD,MAAM,OAAO,GAAgH,EAAE,CAAC;IAEhI,4BAA4B;IAC5B,IAAI,CAAC,iBAAiB,IAAI,iBAAiB,KAAK,YAAY,IAAI,iBAAiB,KAAK,QAAQ,EAAE,CAAC;QAC/F,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,cAAc,EAAE,CAAC;YAClD,MAAM,UAAU,GAAG,SAAS;iBACzB,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;gBACb,MAAM,IAAI,GAAG,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;gBAC5E,OAAO;oBACL,EAAE,EAAE,KAAK,CAAC,EAAE;oBACZ,QAAQ,EAAE,YAAY;oBACtB,UAAU,EAAE,IAAI,CAAC,UAAU;oBAC3B,WAAW,EAAE,IAAI,CAAC,WAAW;oBAC7B,KAAK,EAAE,IAAI,CAAC,MAAM;iBACnB,CAAC;YACJ,CAAC,CAAC;iBACD,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,KAAK,YAAY,IAAI,KAAK,CAAC,UAAU,KAAK,OAAO,CAAC,IAAI,KAAK,CAAC,WAAW,KAAK,WAAW,CAAC,CAAC;YAC/H,OAAO,CAAC,YAAY,CAAC,GAAG,UAAU,CAAC;QACrC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC;QAC7B,CAAC;IACH,CAAC;IAED,4BAA4B;IAC5B,IAAI,CAAC,iBAAiB,IAAI,iBAAiB,KAAK,YAAY,EAAE,CAAC;QAC7D,IAAI,CAAC;YACH,MAAM,gBAAgB,GAAG,MAAM,yBAAyB,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;YAC3F,OAAO,CAAC,YAAY,CAAC,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;gBACvD,EAAE,EAAE,KAAK,CAAC,EAAE;gBACZ,QAAQ,EAAE,YAAY;gBACtB,UAAU,EAAE,MAAM;gBAClB,WAAW,EAAE,WAAW;gBACxB,KAAK,EAAE,WAAW;aACnB,CAAC,CAAC,CAAC;QACN,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC;QAC7B,CAAC;IACH,CAAC;IAGD,cAAc;IACd,IAAI,CAAC,iBAAiB,IAAI,iBAAiB,KAAK,UAAU,IAAI,iBAAiB,KAAK,OAAO,EAAE,CAAC;QAC5F,OAAO,CAAC,UAAU,CAAC,GAAG;YACpB,EAAE,EAAE,EAAE,YAAY,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,KAAK,EAAE,iBAAiB,EAAE;YAClH,EAAE,EAAE,EAAE,YAAY,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,KAAK,EAAE,iBAAiB,EAAE;SACnH,CAAC;IACJ,CAAC;IAED,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;QAC9D,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACtF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,4DAA4D,UAAU,sFAAsF,CAAC,CAAC;IAEnL,KAAK,MAAM,CAAC,YAAY,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3D,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAChC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,YAAY,KAAK,IAAI,CAAC,MAAM,4BAA4B,CAAC,CAAC;QACrG,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,GAAG,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC,UAAU,CAC5F,CAAC;QACF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;QAElG,KAAK,MAAM,KAAK,IAAI,IAAI,EAAE,CAAC;YACzB,MAAM,WAAW,GAAG,KAAK,CAAC,EAAE,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;YACpF,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,GAAG,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC,YAAY,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,mBAAmB,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC,mBAAmB,KAAK,CAAC,KAAK,IAAI,EAAE,WAAW,CAC/J,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC;IAED,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;QACvC,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,CAAC;QACxD,MAAM,EAAE,sBAAsB,EAAE,GAAG,MAAM,MAAM,CAAC,yBAAyB,CAAC,CAAC;QAC3E,MAAM,UAAU,GAAG,MAAM,WAAW,CAAC,iEAAiE,CAAC,CAAC;QACxG,IAAI,UAAU,CAAC,WAAW,EAAE,KAAK,GAAG,IAAI,UAAU,CAAC,WAAW,EAAE,KAAK,KAAK,EAAE,CAAC;YAC3E,MAAM,sBAAsB,CAAC,EAAE,sBAAsB,EAAE,IAAI,EAAE,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;IAED,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/commands/run.d.ts

@@ -0,0 +1,3 @@
+import { CliParsedArgs } from '../args.js';
+export declare function handleRunCommand(args: CliParsedArgs, signal?: AbortSignal): Promise<number>;
+//# sourceMappingURL=run.d.ts.map

package/dist/commands/run.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run.d.ts","sourceRoot":"","sources":["../../src/commands/run.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAQ3C,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,aAAa,EACnB,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,MAAM,CAAC,CA+HjB"}

package/dist/commands/run.js

@@ -0,0 +1,140 @@
+import path from 'node:path';
+import { AgentLoop, DEFAULT_MAX_OUTPUT_TOKENS, PolicyManager, Router } from '../vendor/core/index.js';
+import { NvidiaAdapter } from '../vendor/providers/index.js';
+import { createDefaultToolRegistry, canonicalizeRoot } from '../vendor/tools/index.js';
+import { TerminalApprovalHandler } from '../ui/terminal_approval.js';
+import { TerminalRenderer } from '../ui/renderer.js';
+import { getActiveConnection, resolveApiKey, resolveConnectionCredential, saveConfig, loadConfig, saveConnection, storeConnectionCredential } from '../config.js';
+import { WindowsCredentialStore } from '../windows_credentials.js';
+import { askQuestion, askSecret } from '../ui/prompt.js';
+import { selectModelInteractive } from '../ui/model_selector.js';
+export async function handleRunCommand(args, signal) {
+    if (!args.task) {
+        if (!args.nonInteractive) {
+            args.task = await askQuestion('Enter task prompt: ', { signal });
+        }
+        if (!args.task) {
+            process.stderr.write('\x1b[1;31mError:\x1b[0m Missing task prompt. Usage: moderado run "<task>"\n');
+            return 1;
+        }
+    }
+    let canonicalWorkspace;
+    try {
+        canonicalWorkspace = canonicalizeRoot(path.resolve(process.cwd(), args.workspace));
+    }
+    catch (err) {
+        process.stderr.write(`\x1b[1;31mWorkspace Error:\x1b[0m ${err.message}\n`);
+        return 1;
+    }
+    const isLocal = args.profile.includes('local');
+    let apiKey = resolveApiKey();
+    if (!apiKey && process.platform === 'win32') {
+        const connection = getActiveConnection(loadConfig());
+        if (connection)
+            apiKey = (await resolveConnectionCredential(connection, new WindowsCredentialStore())).apiKey;
+    }
+    if (!isLocal && !apiKey) {
+        if (args.nonInteractive) {
+            process.stderr.write('\x1b[1;31mAuthentication Error:\x1b[0m NVIDIA_API_KEY environment variable is not set.\n\n' +
+                'Please set your API key to run tasks against NVIDIA NIM:\n' +
+                '  PowerShell: $env:NVIDIA_API_KEY = "nvapi-..."\n' +
+                '  POSIX:      export NVIDIA_API_KEY="nvapi-..."\n\n' +
+                'Get a free API trial key at: https://build.nvidia.com\n');
+            return 1;
+        }
+        // Interactive onboarding prompt
+        process.stdout.write('\n\x1b[1;36m[Moderado Setup]\x1b[0m NVIDIA NIM API Key not detected.\n');
+        process.stdout.write('Get a free trial key with 1,000 credits at: \x1b[4mhttps://build.nvidia.com\x1b[0m\n\n');
+        const entered = await askSecret('Enter NVIDIA API Key (nvapi-...): ', { signal });
+        if (!entered) {
+            process.stderr.write('\x1b[1;31mError:\x1b[0m No API key entered. Aborting session.\n');
+            return 1;
+        }
+        apiKey = entered;
+        process.env.NVIDIA_API_KEY = apiKey;
+        const shouldSave = await askQuestion('Save API key persistently to ~/.moderado/config.json? [Y/n]: ', { signal });
+        if (shouldSave.toLowerCase() !== 'n' && shouldSave.toLowerCase() !== 'no') {
+            if (process.platform === 'win32') {
+                const connection = await storeConnectionCredential({ id: 'nvidia-nim', displayName: 'NVIDIA NIM', kind: 'nvidia-nim', baseUrl: 'https://integrate.api.nvidia.com/v1', apiKey }, new WindowsCredentialStore());
+                saveConnection(connection);
+                process.stdout.write('API key saved in Windows Credential Manager.\\n');
+            }
+            else {
+                saveConfig({ apiKey });
+                process.stdout.write('Set NVIDIA_API_KEY to persist this key on your platform.\\n');
+            }
+        }
+    }
+    const config = loadConfig();
+    let selectedModel = args.model ?? config.defaultModel;
+    let allowPaid = args.allowPaid ?? config.allowPaid;
+    let allowUnknown = args.allowUnknown ?? config.allowUnknown;
+    if (!args.model && !args.nonInteractive) {
+        const selection = await selectModelInteractive({
+            apiKey,
+            currentModel: selectedModel,
+            signal,
+            saveSelectionByDefault: true,
+        });
+        selectedModel = selection.modelId;
+        if (selection.allowPaid)
+            allowPaid = true;
+        if (selection.allowUnknown)
+            allowUnknown = true;
+    }
+    const provider = new NvidiaAdapter({ apiKey });
+    const tools = createDefaultToolRegistry();
+    const terminalApproval = new TerminalApprovalHandler();
+    const approvalHandler = {
+        requestApproval: async (req, sig) => {
+            if (args.autoApprove || ['write_file', 'edit_file', 'apply_patch', 'run_command', 'run_diagnostics'].includes(req.toolName)) {
+                return { requestId: req.requestId, status: 'approved' };
+            }
+            return terminalApproval.requestApproval(req, sig);
+        },
+    };
+    const renderer = new TerminalRenderer({ verbose: args.verbose });
+    const policy = new PolicyManager({
+        maxSteps: args.maxSteps,
+        readOnly: args.readOnly,
+        nonInteractive: args.nonInteractive,
+        timeoutSeconds: args.timeout,
+    });
+    const router = new Router();
+    const loop = new AgentLoop();
+    process.stdout.write(`\x1b[1mModerado v0.1.0\x1b[0m | Workspace: \x1b[36m${canonicalWorkspace}\x1b[0m\n`);
+    process.stdout.write(`Task: "\x1b[1m${args.task}\x1b[0m"\n\n`);
+    try {
+        const result = await loop.run(args.task, {
+            workspaceRoot: canonicalWorkspace,
+            provider,
+            tools,
+            approvalHandler,
+            router,
+            policy,
+            maxOutputTokens: args.maxTokens ?? DEFAULT_MAX_OUTPUT_TOKENS,
+            routeOptions: {
+                pinnedModelId: selectedModel,
+                allowPaid,
+                allowUnknown,
+                isLocalProfile: args.profile.includes('local'),
+            },
+            eventListener: (event) => renderer.handleEvent(event),
+            signal,
+        });
+        if (result.status === 'completed') {
+            return 0;
+        }
+        else if (result.status === 'cancelled') {
+            return 130;
+        }
+        else {
+            return 1;
+        }
+    }
+    catch (err) {
+        process.stderr.write(`\n\x1b[1;31mExecution Fatal Error:\x1b[0m ${err.message}\n`);
+        return 1;
+    }
+}
+//# sourceMappingURL=run.js.map

package/dist/commands/run.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run.js","sourceRoot":"","sources":["../../src/commands/run.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,yBAAyB,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAC7F,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,yBAAyB,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAE9E,OAAO,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AACrE,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,mBAAmB,EAAE,aAAa,EAAE,2BAA2B,EAAE,UAAU,EAAE,UAAU,EAAE,cAAc,EAAE,yBAAyB,EAAE,MAAM,cAAc,CAAC;AAClK,OAAO,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AACnE,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACzD,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AAEjE,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,IAAmB,EACnB,MAAoB;IAEpB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACf,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;YACzB,IAAI,CAAC,IAAI,GAAG,MAAM,WAAW,CAAC,qBAAqB,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QACnE,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACf,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,6EAA6E,CAAC,CAAC;YACpG,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC;IAED,IAAI,kBAA0B,CAAC;IAC/B,IAAI,CAAC;QACH,kBAAkB,GAAG,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;IACrF,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qCAAqC,GAAG,CAAC,OAAO,IAAI,CAAC,CAAC;QAC3E,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC/C,IAAI,MAAM,GAAG,aAAa,EAAE,CAAC;IAC7B,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QAC5C,MAAM,UAAU,GAAG,mBAAmB,CAAC,UAAU,EAAE,CAAC,CAAC;QACrD,IAAI,UAAU;YAAE,MAAM,GAAG,CAAC,MAAM,2BAA2B,CAAC,UAAU,EAAE,IAAI,sBAAsB,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;IAChH,CAAC;IAED,IAAI,CAAC,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC;QACxB,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACxB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,4FAA4F;gBAC5F,4DAA4D;gBAC5D,mDAAmD;gBACnD,qDAAqD;gBACrD,yDAAyD,CAC1D,CAAC;YACF,OAAO,CAAC,CAAC;QACX,CAAC;QAED,gCAAgC;QAChC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,wEAAwE,CAAC,CAAC;QAC/F,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,wFAAwF,CAAC,CAAC;QAE/G,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,oCAAoC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QAClF,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iEAAiE,CAAC,CAAC;YACxF,OAAO,CAAC,CAAC;QACX,CAAC;QACD,MAAM,GAAG,OAAO,CAAC;QACjB,OAAO,CAAC,GAAG,CAAC,cAAc,GAAG,MAAM,CAAC;QAEpC,MAAM,UAAU,GAAG,MAAM,WAAW,CAAC,+DAA+D,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QAClH,IAAI,UAAU,CAAC,WAAW,EAAE,KAAK,GAAG,IAAI,UAAU,CAAC,WAAW,EAAE,KAAK,IAAI,EAAE,CAAC;YAC1E,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;gBAAC,MAAM,UAAU,GAAG,MAAM,yBAAyB,CAAC,EAAE,EAAE,EAAE,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,qCAAqC,EAAE,MAAM,EAAE,EAAE,IAAI,sBAAsB,EAAE,CAAC,CAAC;gBAAC,cAAc,CAAC,UAAU,CAAC,CAAC;gBAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iDAAiD,CAAC,CAAC;YAAC,CAAC;iBAAM,CAAC;gBAAC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;gBAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,6DAA6D,CAAC,CAAC;YAAC,CAAC;QACjd,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,IAAI,aAAa,GAAG,IAAI,CAAC,KAAK,IAAI,MAAM,CAAC,YAAY,CAAC;IACtD,IAAI,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC,SAAS,CAAC;IACnD,IAAI,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,MAAM,CAAC,YAAY,CAAC;IAE5D,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;QACxC,MAAM,SAAS,GAAG,MAAM,sBAAsB,CAAC;YAC7C,MAAM;YACN,YAAY,EAAE,aAAa;YAC3B,MAAM;YACN,sBAAsB,EAAE,IAAI;SAC7B,CAAC,CAAC;QACH,aAAa,GAAG,SAAS,CAAC,OAAO,CAAC;QAClC,IAAI,SAAS,CAAC,SAAS;YAAE,SAAS,GAAG,IAAI,CAAC;QAC1C,IAAI,SAAS,CAAC,YAAY;YAAE,YAAY,GAAG,IAAI,CAAC;IAClD,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAG,yBAAyB,EAAE,CAAC;IAC1C,MAAM,gBAAgB,GAAG,IAAI,uBAAuB,EAAE,CAAC;IACvD,MAAM,eAAe,GAAG;QACtB,eAAe,EAAE,KAAK,EAAE,GAAQ,EAAE,GAAiB,EAAE,EAAE;YACrD,IAAI,IAAI,CAAC,WAAW,IAAI,CAAC,YAAY,EAAE,WAAW,EAAE,aAAa,EAAE,aAAa,EAAE,iBAAiB,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC5H,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,UAAmB,EAAE,CAAC;YACnE,CAAC;YACD,OAAO,gBAAgB,CAAC,eAAe,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACpD,CAAC;KACF,CAAC;IACF,MAAM,QAAQ,GAAG,IAAI,gBAAgB,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;IACjE,MAAM,MAAM,GAAG,IAAI,aAAa,CAAC;QAC/B,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,cAAc,EAAE,IAAI,CAAC,OAAO;KAC7B,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;IAC5B,MAAM,IAAI,GAAG,IAAI,SAAS,EAAE,CAAC;IAE7B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,sDAAsD,kBAAkB,WAAW,CAAC,CAAC;IAC1G,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,IAAI,CAAC,IAAI,cAAc,CAAC,CAAC;IAE/D,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE;YACvC,aAAa,EAAE,kBAAkB;YACjC,QAAQ;YACR,KAAK;YACL,eAAe;YACf,MAAM;YACN,MAAM;YACN,eAAe,EAAE,IAAI,CAAC,SAAS,IAAI,yBAAyB;YAC5D,YAAY,EAAE;gBACZ,aAAa,EAAE,aAAa;gBAC5B,SAAS;gBACT,YAAY;gBACZ,cAAc,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC;aAC/C;YACD,aAAa,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,CAAC;YACrD,MAAM;SACP,CAAC,CAAC;QAEH,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YAClC,OAAO,CAAC,CAAC;QACX,CAAC;aAAM,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YACzC,OAAO,GAAG,CAAC;QACb,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,6CAA6C,GAAG,CAAC,OAAO,IAAI,CAAC,CAAC;QACnF,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC"}

package/dist/config.d.ts

@@ -0,0 +1,44 @@
+import { McpServerConfig } from '@moderado/contracts';
+import { CredentialStore } from './credentials.js';
+export interface ModeradoConfig {
+    apiKey?: string;
+    defaultModel?: string;
+    allowPaid?: boolean;
+    allowUnknown?: boolean;
+    activeConnectionId?: string;
+    connections?: Record<string, ProviderConnection>;
+    typescriptLanguageServer?: string;
+    /** HTTPS endpoint that returns `{ results: [{ title, url, snippet? }] }`. */
+    webSearchEndpoint?: string;
+    /** Preferred search site: `exa` (default), `parallel`, or a `custom` endpoint. */
+    webSearchProvider?: 'exa' | 'parallel' | 'custom';
+    mcpServers?: Record<string, McpServerConfig>;
+    /** Upper bound on model output tokens per response turn. */
+    maxOutputTokens?: number;
+}
+export type ProviderConnectionKind = 'nvidia-nim' | 'openai-compatible';
+export interface ProviderConnection {
+    id: string;
+    displayName: string;
+    kind: ProviderConnectionKind;
+    baseUrl: string;
+    credentialReference?: string;
+    apiKey?: string;
+    defaultModel?: string;
+}
+export declare function getConfigPath(customHome?: string): string;
+export declare function loadConfig(customHome?: string): ModeradoConfig;
+export declare function saveConfig(config: ModeradoConfig, customHome?: string): void;
+export declare function resolveApiKey(customHome?: string): string | undefined;
+/** Return the selected provider, retaining compatibility with pre-profile configs. */
+export declare function getActiveConnection(config: ModeradoConfig): ProviderConnection | undefined;
+/** Save a provider profile and select it for future chat sessions. */
+export declare function saveConnection(connection: ProviderConnection, customHome?: string): void;
+export declare function saveMcpServer(name: string, server: McpServerConfig, customHome?: string): void;
+export declare function setMcpServerEnabled(name: string, enabled: boolean, customHome?: string): void;
+export declare function removeMcpServer(name: string, customHome?: string): void;
+export declare function storeConnectionCredential(connection: ProviderConnection, store: CredentialStore): Promise<ProviderConnection>;
+export declare function resolveConnectionCredential(connection: ProviderConnection, store: CredentialStore): Promise<ProviderConnection>;
+/** Move legacy plaintext provider keys into a credential store only when every write succeeds. */
+export declare function migrateLegacyCredentials(store: CredentialStore, customHome?: string): Promise<number>;
+//# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,eAAe,EAAyB,MAAM,qBAAqB,CAAC;AAC7E,OAAO,EAAuB,eAAe,EAAqB,MAAM,kBAAkB,CAAC;AAE3F,MAAM,WAAW,cAAc;IAC7B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;IACjD,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,6EAA6E;IAC7E,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,kFAAkF;IAClF,iBAAiB,CAAC,EAAE,KAAK,GAAG,UAAU,GAAG,QAAQ,CAAC;IAClD,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IAC7C,4DAA4D;IAC5D,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,MAAM,sBAAsB,GAAG,YAAY,GAAG,mBAAmB,CAAC;AAExE,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,sBAAsB,CAAC;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAKD,wBAAgB,aAAa,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,CAGzD;AAED,wBAAgB,UAAU,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,cAAc,CAgC9D;AAoCD,wBAAgB,UAAU,CAAC,MAAM,EAAE,cAAc,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAkB5E;AAED,wBAAgB,aAAa,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAWrE;AAED,sFAAsF;AACtF,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,cAAc,GAAG,kBAAkB,GAAG,SAAS,CAgB1F;AAED,sEAAsE;AACtE,wBAAgB,cAAc,CAAC,UAAU,EAAE,kBAAkB,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAUxF;AAMD,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAK9F;AAED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAM7F;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAMvE;AAED,wBAAsB,yBAAyB,CAAC,UAAU,EAAE,kBAAkB,EAAE,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAKnI;AAED,wBAAsB,2BAA2B,CAAC,UAAU,EAAE,kBAAkB,EAAE,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAIrI;AAED,kGAAkG;AAClG,wBAAsB,wBAAwB,CAAC,KAAK,EAAE,eAAe,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAuB3G"}

package/dist/config.js

@@ -0,0 +1,195 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import os from 'node:os';
+import { McpServerConfigSchema } from './vendor/contracts/index.js';
+import { credentialReference, resolveCredential } from './credentials.js';
+const CONFIG_DIR_NAME = '.moderado';
+const CONFIG_FILE_NAME = 'config.json';
+export function getConfigPath(customHome) {
+    const home = customHome || os.homedir();
+    return path.join(home, CONFIG_DIR_NAME, CONFIG_FILE_NAME);
+}
+export function loadConfig(customHome) {
+    const configPath = getConfigPath(customHome);
+    if (!fs.existsSync(configPath)) {
+        return {};
+    }
+    try {
+        const raw = fs.readFileSync(configPath, 'utf8');
+        const parsed = JSON.parse(raw);
+        if (typeof parsed === 'object' && parsed !== null) {
+            const connections = parseConnections(parsed.connections);
+            return {
+                apiKey: typeof parsed.apiKey === 'string' ? parsed.apiKey : undefined,
+                defaultModel: typeof parsed.defaultModel === 'string' ? parsed.defaultModel : undefined,
+                allowPaid: typeof parsed.allowPaid === 'boolean' ? parsed.allowPaid : undefined,
+                allowUnknown: typeof parsed.allowUnknown === 'boolean' ? parsed.allowUnknown : undefined,
+                activeConnectionId: typeof parsed.activeConnectionId === 'string' && connections[parsed.activeConnectionId]
+                    ? parsed.activeConnectionId
+                    : undefined,
+                connections: Object.keys(connections).length > 0 ? connections : undefined,
+                mcpServers: parseMcpServers(parsed.mcpServers),
+                typescriptLanguageServer: typeof parsed.typescriptLanguageServer === 'string' ? parsed.typescriptLanguageServer : undefined,
+                webSearchEndpoint: typeof parsed.webSearchEndpoint === 'string' ? parsed.webSearchEndpoint : undefined,
+                webSearchProvider: parsed.webSearchProvider === 'exa' || parsed.webSearchProvider === 'parallel' || parsed.webSearchProvider === 'custom' ? parsed.webSearchProvider : undefined,
+                maxOutputTokens: typeof parsed.maxOutputTokens === 'number' && parsed.maxOutputTokens > 0 ? parsed.maxOutputTokens : undefined,
+            };
+        }
+        return {};
+    }
+    catch {
+        return {};
+    }
+}
+function parseMcpServers(value) {
+    if (!value || typeof value !== 'object')
+        return undefined;
+    const servers = Object.entries(value).flatMap(([name, config]) => McpServerConfigSchema.safeParse(config).success && /^[a-z0-9_-]+$/i.test(name) ? [[name, McpServerConfigSchema.parse(config)]] : []);
+    return servers.length ? Object.fromEntries(servers) : undefined;
+}
+function parseConnections(value) {
+    if (typeof value !== 'object' || value === null)
+        return {};
+    const result = {};
+    for (const candidate of Object.values(value)) {
+        if (typeof candidate !== 'object' || candidate === null)
+            continue;
+        const item = candidate;
+        const kind = item.kind;
+        if (typeof item.id !== 'string' ||
+            typeof item.displayName !== 'string' ||
+            typeof item.baseUrl !== 'string' ||
+            (kind !== 'nvidia-nim' && kind !== 'openai-compatible'))
+            continue;
+        result[item.id] = {
+            id: item.id,
+            displayName: item.displayName,
+            kind,
+            baseUrl: item.baseUrl,
+            credentialReference: typeof item.credentialReference === 'string' ? item.credentialReference : undefined,
+            apiKey: typeof item.apiKey === 'string' ? item.apiKey : undefined,
+            defaultModel: typeof item.defaultModel === 'string' ? item.defaultModel : undefined,
+        };
+    }
+    return result;
+}
+export function saveConfig(config, customHome) {
+    const configPath = getConfigPath(customHome);
+    const dir = path.dirname(configPath);
+    if (!fs.existsSync(dir)) {
+        fs.mkdirSync(dir, { recursive: true, mode: 0o700 });
+    }
+    const existing = loadConfig(customHome);
+    const merged = {
+        ...existing,
+        ...config,
+    };
+    fs.writeFileSync(configPath, JSON.stringify(merged, null, 2), {
+        encoding: 'utf8',
+        mode: 0o600,
+    });
+}
+export function resolveApiKey(customHome) {
+    if (process.env.NVIDIA_API_KEY && process.env.NVIDIA_API_KEY.trim()) {
+        return process.env.NVIDIA_API_KEY.trim();
+    }
+    const config = loadConfig(customHome);
+    if (config.apiKey && config.apiKey.trim()) {
+        return config.apiKey.trim();
+    }
+    return undefined;
+}
+/** Return the selected provider, retaining compatibility with pre-profile configs. */
+export function getActiveConnection(config) {
+    if (config.activeConnectionId && config.connections?.[config.activeConnectionId]) {
+        return config.connections[config.activeConnectionId];
+    }
+    if (config.apiKey?.trim()) {
+        return {
+            id: 'nvidia-nim',
+            displayName: 'NVIDIA NIM',
+            kind: 'nvidia-nim',
+            baseUrl: 'https://integrate.api.nvidia.com/v1',
+            apiKey: config.apiKey.trim(),
+            defaultModel: config.defaultModel,
+        };
+    }
+    return undefined;
+}
+/** Save a provider profile and select it for future chat sessions. */
+export function saveConnection(connection, customHome) {
+    const existing = loadConfig(customHome);
+    const persisted = connection.credentialReference ? { ...connection, apiKey: undefined } : connection;
+    saveConfig({
+        connections: { ...existing.connections, [persisted.id]: persisted },
+        activeConnectionId: persisted.id,
+    }, customHome);
+}
+function validateMcpServerName(name) {
+    if (!/^[a-z0-9_-]+$/i.test(name))
+        throw new Error(`Invalid MCP server name '${name}'.`);
+}
+export function saveMcpServer(name, server, customHome) {
+    validateMcpServerName(name);
+    const validated = McpServerConfigSchema.parse(server);
+    const config = loadConfig(customHome);
+    saveConfig({ mcpServers: { ...config.mcpServers, [name]: validated } }, customHome);
+}
+export function setMcpServerEnabled(name, enabled, customHome) {
+    validateMcpServerName(name);
+    const config = loadConfig(customHome);
+    const server = config.mcpServers?.[name];
+    if (!server)
+        throw new Error(`MCP server '${name}' is not configured.`);
+    saveConfig({ mcpServers: { ...config.mcpServers, [name]: { ...server, enabled } } }, customHome);
+}
+export function removeMcpServer(name, customHome) {
+    validateMcpServerName(name);
+    const config = loadConfig(customHome);
+    if (!config.mcpServers?.[name])
+        throw new Error(`MCP server '${name}' is not configured.`);
+    const { [name]: _removed, ...remaining } = config.mcpServers;
+    saveConfig({ mcpServers: Object.keys(remaining).length ? remaining : undefined }, customHome);
+}
+export async function storeConnectionCredential(connection, store) {
+    if (!connection.apiKey?.trim())
+        throw new Error('A provider API key is required.');
+    const reference = credentialReference(connection.id);
+    await store.set(reference, connection.apiKey.trim());
+    return { ...connection, credentialReference: reference };
+}
+export async function resolveConnectionCredential(connection, store) {
+    const environmentName = connection.id === 'nvidia-nim' ? 'NVIDIA_API_KEY' : `${connection.id.replace(/[^a-z0-9]/gi, '_').toUpperCase()}_API_KEY`;
+    const apiKey = await resolveCredential(process.env[environmentName], connection.credentialReference, connection.apiKey, store);
+    return { ...connection, apiKey };
+}
+/** Move legacy plaintext provider keys into a credential store only when every write succeeds. */
+export async function migrateLegacyCredentials(store, customHome) {
+    const config = loadConfig(customHome);
+    const next = { ...config, connections: { ...config.connections } };
+    const pending = [];
+    if (config.apiKey?.trim())
+        pending.push({ id: 'nvidia-nim', secret: config.apiKey.trim() });
+    for (const connection of Object.values(config.connections ?? {})) {
+        if (connection.apiKey?.trim())
+            pending.push({ id: connection.id, secret: connection.apiKey.trim() });
+    }
+    if (!pending.length)
+        return 0;
+    for (const entry of pending)
+        await store.set(credentialReference(entry.id), entry.secret);
+    delete next.apiKey;
+    for (const entry of pending) {
+        const existing = next.connections?.[entry.id];
+        const connection = existing ?? { id: 'nvidia-nim', displayName: 'NVIDIA NIM', kind: 'nvidia-nim', baseUrl: 'https://integrate.api.nvidia.com/v1', defaultModel: config.defaultModel };
+        next.connections[entry.id] = { ...connection, credentialReference: credentialReference(entry.id), apiKey: undefined };
+    }
+    next.activeConnectionId ??= pending[0]?.id;
+    const configPath = getConfigPath(customHome);
+    fs.mkdirSync(path.dirname(configPath), { recursive: true, mode: 0o700 });
+    const temporary = `${configPath}.tmp`;
+    fs.writeFileSync(temporary, JSON.stringify(next, null, 2), { encoding: 'utf8', mode: 0o600 });
+    fs.renameSync(temporary, configPath);
+    return pending.length;
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAmB,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC7E,OAAO,EAAE,mBAAmB,EAAmB,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AA+B3F,MAAM,eAAe,GAAG,WAAW,CAAC;AACpC,MAAM,gBAAgB,GAAG,aAAa,CAAC;AAEvC,MAAM,UAAU,aAAa,CAAC,UAAmB;IAC/C,MAAM,IAAI,GAAG,UAAU,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;IACxC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,eAAe,EAAE,gBAAgB,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,UAAmB;IAC5C,MAAM,UAAU,GAAG,aAAa,CAAC,UAAU,CAAC,CAAC;IAC7C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/B,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QAChD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YAClD,MAAM,WAAW,GAAG,gBAAgB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YACzD,OAAO;gBACL,MAAM,EAAE,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;gBACrE,YAAY,EAAE,OAAO,MAAM,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS;gBACvF,SAAS,EAAE,OAAO,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;gBAC/E,YAAY,EAAE,OAAO,MAAM,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS;gBACxF,kBAAkB,EAChB,OAAO,MAAM,CAAC,kBAAkB,KAAK,QAAQ,IAAI,WAAW,CAAC,MAAM,CAAC,kBAAkB,CAAC;oBACrF,CAAC,CAAC,MAAM,CAAC,kBAAkB;oBAC3B,CAAC,CAAC,SAAS;gBACf,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;gBAC1E,UAAU,EAAE,eAAe,CAAC,MAAM,CAAC,UAAU,CAAC;gBAC9C,wBAAwB,EAAE,OAAO,MAAM,CAAC,wBAAwB,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,wBAAwB,CAAC,CAAC,CAAC,SAAS;gBAC3H,iBAAiB,EAAE,OAAO,MAAM,CAAC,iBAAiB,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS;gBACtG,iBAAiB,EAAE,MAAM,CAAC,iBAAiB,KAAK,KAAK,IAAI,MAAM,CAAC,iBAAiB,KAAK,UAAU,IAAI,MAAM,CAAC,iBAAiB,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS;gBAChL,eAAe,EAAE,OAAO,MAAM,CAAC,eAAe,KAAK,QAAQ,IAAI,MAAM,CAAC,eAAe,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS;aAC/H,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACrC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC1D,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,qBAAqB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,OAAO,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,qBAAqB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAClO,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAClE,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,EAAE,CAAC;IAE3D,MAAM,MAAM,GAAuC,EAAE,CAAC;IACtD,KAAK,MAAM,SAAS,IAAI,MAAM,CAAC,MAAM,CAAC,KAAgC,CAAC,EAAE,CAAC;QACxE,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,KAAK,IAAI;YAAE,SAAS;QAClE,MAAM,IAAI,GAAG,SAAoC,CAAC;QAClD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACvB,IACE,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ;YAC3B,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ;YACpC,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ;YAChC,CAAC,IAAI,KAAK,YAAY,IAAI,IAAI,KAAK,mBAAmB,CAAC;YACvD,SAAS;QAEX,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG;YAChB,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,IAAI;YACJ,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,mBAAmB,EAAE,OAAO,IAAI,CAAC,mBAAmB,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC,SAAS;YACxG,MAAM,EAAE,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;YACjE,YAAY,EAAE,OAAO,IAAI,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS;SACpF,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,MAAsB,EAAE,UAAmB;IACpE,MAAM,UAAU,GAAG,aAAa,CAAC,UAAU,CAAC,CAAC;IAC7C,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAErC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACtD,CAAC;IAED,MAAM,QAAQ,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;IACxC,MAAM,MAAM,GAAmB;QAC7B,GAAG,QAAQ;QACX,GAAG,MAAM;KACV,CAAC;IAEF,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;QAC5D,QAAQ,EAAE,MAAM;QAChB,IAAI,EAAE,KAAK;KACZ,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,UAAmB;IAC/C,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,EAAE,CAAC;QACpE,OAAO,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;IAC3C,CAAC;IAED,MAAM,MAAM,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;IACtC,IAAI,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;QAC1C,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IAC9B,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,mBAAmB,CAAC,MAAsB;IACxD,IAAI,MAAM,CAAC,kBAAkB,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACjF,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;IACvD,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC;QAC1B,OAAO;YACL,EAAE,EAAE,YAAY;YAChB,WAAW,EAAE,YAAY;YACzB,IAAI,EAAE,YAAY;YAClB,OAAO,EAAE,qCAAqC;YAC9C,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE;YAC5B,YAAY,EAAE,MAAM,CAAC,YAAY;SAClC,CAAC;IACJ,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,cAAc,CAAC,UAA8B,EAAE,UAAmB;IAChF,MAAM,QAAQ,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;IACxC,MAAM,SAAS,GAAG,UAAU,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,GAAG,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC;IACrG,UAAU,CACR;QACE,WAAW,EAAE,EAAE,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,SAAS,EAAE;QACnE,kBAAkB,EAAE,SAAS,CAAC,EAAE;KACjC,EACD,UAAU,CACX,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAAC,IAAY;IACzC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,IAAI,IAAI,CAAC,CAAC;AAC1F,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,MAAuB,EAAE,UAAmB;IACtF,qBAAqB,CAAC,IAAI,CAAC,CAAC;IAC5B,MAAM,SAAS,GAAG,qBAAqB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACtD,MAAM,MAAM,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;IACtC,UAAU,CAAC,EAAE,UAAU,EAAE,EAAE,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,UAAU,CAAC,CAAC;AACtF,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,IAAY,EAAE,OAAgB,EAAE,UAAmB;IACrF,qBAAqB,CAAC,IAAI,CAAC,CAAC;IAC5B,MAAM,MAAM,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;IACtC,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC,IAAI,CAAC,CAAC;IACzC,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,eAAe,IAAI,sBAAsB,CAAC,CAAC;IACxE,UAAU,CAAC,EAAE,UAAU,EAAE,EAAE,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,UAAU,CAAC,CAAC;AACnG,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,IAAY,EAAE,UAAmB;IAC/D,qBAAqB,CAAC,IAAI,CAAC,CAAC;IAC5B,MAAM,MAAM,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;IACtC,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,eAAe,IAAI,sBAAsB,CAAC,CAAC;IAC3F,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,GAAG,SAAS,EAAE,GAAG,MAAM,CAAC,UAAU,CAAC;IAC7D,UAAU,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,EAAE,EAAE,UAAU,CAAC,CAAC;AAChG,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,UAA8B,EAAE,KAAsB;IACpG,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,IAAI,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACnF,MAAM,SAAS,GAAG,mBAAmB,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IACrD,MAAM,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IACrD,OAAO,EAAE,GAAG,UAAU,EAAE,mBAAmB,EAAE,SAAS,EAAE,CAAC;AAC3D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,UAA8B,EAAE,KAAsB;IACtG,MAAM,eAAe,GAAG,UAAU,CAAC,EAAE,KAAK,YAAY,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC,EAAE,CAAC,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,UAAU,CAAC;IACjJ,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,UAAU,CAAC,mBAAmB,EAAE,UAAU,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC/H,OAAO,EAAE,GAAG,UAAU,EAAE,MAAM,EAAE,CAAC;AACnC,CAAC;AAED,kGAAkG;AAClG,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,KAAsB,EAAE,UAAmB;IACxF,MAAM,MAAM,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;IACtC,MAAM,IAAI,GAAmB,EAAE,GAAG,MAAM,EAAE,WAAW,EAAE,EAAE,GAAG,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC;IACnF,MAAM,OAAO,GAA0C,EAAE,CAAC;IAC1D,IAAI,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE;QAAE,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAC5F,KAAK,MAAM,UAAU,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,IAAI,EAAE,CAAC,EAAE,CAAC;QACjE,IAAI,UAAU,CAAC,MAAM,EAAE,IAAI,EAAE;YAAE,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACvG,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,MAAM;QAAE,OAAO,CAAC,CAAC;IAC9B,KAAK,MAAM,KAAK,IAAI,OAAO;QAAE,MAAM,KAAK,CAAC,GAAG,CAAC,mBAAmB,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAC1F,OAAO,IAAI,CAAC,MAAM,CAAC;IACnB,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC9C,MAAM,UAAU,GAAG,QAAQ,IAAI,EAAE,EAAE,EAAE,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE,IAAI,EAAE,YAAqB,EAAE,OAAO,EAAE,qCAAqC,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC;QAC/L,IAAI,CAAC,WAAY,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,UAAU,EAAE,mBAAmB,EAAE,mBAAmB,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IACzH,CAAC;IACD,IAAI,CAAC,kBAAkB,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IAC3C,MAAM,UAAU,GAAG,aAAa,CAAC,UAAU,CAAC,CAAC;IAC7C,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACzE,MAAM,SAAS,GAAG,GAAG,UAAU,MAAM,CAAC;IACtC,EAAE,CAAC,aAAa,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC9F,EAAE,CAAC,UAAU,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IACrC,OAAO,OAAO,CAAC,MAAM,CAAC;AACxB,CAAC"}

package/dist/credentials.d.ts

@@ -0,0 +1,14 @@
+export interface CredentialStore {
+    get(reference: string): Promise<string | undefined>;
+    set(reference: string, secret: string): Promise<void>;
+    delete(reference: string): Promise<void>;
+}
+export declare class MemoryCredentialStore implements CredentialStore {
+    private readonly values;
+    get(reference: string): Promise<string | undefined>;
+    set(reference: string, secret: string): Promise<void>;
+    delete(reference: string): Promise<void>;
+}
+export declare function credentialReference(providerId: string): string;
+export declare function resolveCredential(environment: string | undefined, reference: string | undefined, legacy: string | undefined, store: CredentialStore): Promise<string | undefined>;
+//# sourceMappingURL=credentials.d.ts.map

package/dist/credentials.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials.d.ts","sourceRoot":"","sources":["../src/credentials.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,eAAe;IAC9B,GAAG,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACpD,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACtD,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1C;AAED,qBAAa,qBAAsB,YAAW,eAAe;IAC3D,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA6B;IAC9C,GAAG,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;IACnD,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IACrD,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAC/C;AAED,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAI9D;AAED,wBAAsB,iBAAiB,CAAC,WAAW,EAAE,MAAM,GAAG,SAAS,EAAE,SAAS,EAAE,MAAM,GAAG,SAAS,EAAE,MAAM,EAAE,MAAM,GAAG,SAAS,EAAE,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAOvL"}

package/dist/credentials.js

@@ -0,0 +1,23 @@
+export class MemoryCredentialStore {
+    values = new Map();
+    async get(reference) { return this.values.get(reference); }
+    async set(reference, secret) { this.values.set(reference, secret); }
+    async delete(reference) { this.values.delete(reference); }
+}
+export function credentialReference(providerId) {
+    const safeId = providerId.trim().toLowerCase().replace(/[^a-z0-9_-]+/g, '-');
+    if (!safeId)
+        throw new Error('Provider ID is required for credential storage.');
+    return `moderado/provider/${safeId}`;
+}
+export async function resolveCredential(environment, reference, legacy, store) {
+    if (environment?.trim())
+        return environment.trim();
+    if (reference) {
+        const stored = await store.get(reference);
+        if (stored?.trim())
+            return stored;
+    }
+    return legacy?.trim() || undefined;
+}
+//# sourceMappingURL=credentials.js.map

package/dist/credentials.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials.js","sourceRoot":"","sources":["../src/credentials.ts"],"names":[],"mappings":"AAMA,MAAM,OAAO,qBAAqB;IACf,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACpD,KAAK,CAAC,GAAG,CAAC,SAAiB,IAAiC,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IAChG,KAAK,CAAC,GAAG,CAAC,SAAiB,EAAE,MAAc,IAAmB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IACnG,KAAK,CAAC,MAAM,CAAC,SAAiB,IAAmB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;CAClF;AAED,MAAM,UAAU,mBAAmB,CAAC,UAAkB;IACpD,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC;IAC7E,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IAChF,OAAO,qBAAqB,MAAM,EAAE,CAAC;AACvC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,WAA+B,EAAE,SAA6B,EAAE,MAA0B,EAAE,KAAsB;IACxJ,IAAI,WAAW,EAAE,IAAI,EAAE;QAAE,OAAO,WAAW,CAAC,IAAI,EAAE,CAAC;IACnD,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC1C,IAAI,MAAM,EAAE,IAAI,EAAE;YAAE,OAAO,MAAM,CAAC;IACpC,CAAC;IACD,OAAO,MAAM,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;AACrC,CAAC"}

package/dist/diagnostic_log.d.ts

@@ -0,0 +1,2 @@
+export declare function writeDiagnosticLog(command: string, error: unknown, customHome?: string): void;
+//# sourceMappingURL=diagnostic_log.d.ts.map

package/dist/diagnostic_log.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"diagnostic_log.d.ts","sourceRoot":"","sources":["../src/diagnostic_log.ts"],"names":[],"mappings":"AAWA,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAS7F"}

package/dist/diagnostic_log.js

@@ -0,0 +1,21 @@
+import fs from 'node:fs';
+import os from 'node:os';
+import path from 'node:path';
+function redact(value) {
+    return value
+        .replace(/\bnvapi-[A-Za-z0-9_-]+/g, '[redacted NVIDIA key]')
+        .replace(/\bsk-[A-Za-z0-9_-]+/g, '[redacted API key]')
+        .replace(/\bBearer\s+[A-Za-z0-9._-]+/gi, 'Bearer [redacted]');
+}
+export function writeDiagnosticLog(command, error, customHome) {
+    try {
+        const message = redact(error instanceof Error ? error.message : String(error));
+        const directory = path.join(customHome ?? os.homedir(), '.moderado', 'logs');
+        fs.mkdirSync(directory, { recursive: true, mode: 0o700 });
+        fs.appendFileSync(path.join(directory, 'moderado.jsonl'), `${JSON.stringify({ timestamp: new Date().toISOString(), command, category: 'operational_failure', message })}\n`, { encoding: 'utf8', mode: 0o600 });
+    }
+    catch {
+        // Logging must never obscure the command failure.
+    }
+}
+//# sourceMappingURL=diagnostic_log.js.map

package/dist/diagnostic_log.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"diagnostic_log.js","sourceRoot":"","sources":["../src/diagnostic_log.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,SAAS,MAAM,CAAC,KAAa;IAC3B,OAAO,KAAK;SACT,OAAO,CAAC,yBAAyB,EAAE,uBAAuB,CAAC;SAC3D,OAAO,CAAC,sBAAsB,EAAE,oBAAoB,CAAC;SACrD,OAAO,CAAC,8BAA8B,EAAE,mBAAmB,CAAC,CAAC;AAClE,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,OAAe,EAAE,KAAc,EAAE,UAAmB;IACrF,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC/E,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;QAC7E,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC1D,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,gBAAgB,CAAC,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,qBAAqB,EAAE,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAClN,CAAC;IAAC,MAAM,CAAC;QACP,kDAAkD;IACpD,CAAC;AACH,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":""}