natroc 0.0.1

package/server/dist/storage/tool-call-repository.js

@@ -0,0 +1,83 @@
+export class ToolCallRepository {
+    db;
+    constructor(db) {
+        this.db = db;
+    }
+    create(input) {
+        const id = input.id ?? crypto.randomUUID();
+        const now = new Date().toISOString();
+        const argsJson = JSON.stringify(input.args ?? {});
+        this.db
+            .prepare(`
+        INSERT INTO agent_tool_calls (
+          id,
+          user_id,
+          conversation_id,
+          tool_name,
+          args_json,
+          result_output,
+          status,
+          risk,
+          created_at
+        )
+        VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)
+      `)
+            .run(id, input.userId ?? null, input.conversationId, input.toolName, argsJson, input.output, input.status, input.risk, now);
+        return {
+            id,
+            userId: input.userId ?? null,
+            conversationId: input.conversationId,
+            toolName: input.toolName,
+            args: input.args ?? {},
+            output: input.output,
+            status: input.status,
+            risk: input.risk,
+            createdAt: now,
+        };
+    }
+    listByConversation(conversationId, options = {}) {
+        const rows = options.userId
+            ? this.db
+                .prepare("SELECT * FROM agent_tool_calls WHERE conversation_id = ? AND user_id = ? ORDER BY created_at ASC, rowid ASC")
+                .all(conversationId, options.userId)
+            : this.db
+                .prepare("SELECT * FROM agent_tool_calls WHERE conversation_id = ? ORDER BY created_at ASC, rowid ASC")
+                .all(conversationId);
+        return rows.map(mapToolCallRow);
+    }
+    countAll(options = {}) {
+        const row = options.userId
+            ? this.db
+                .prepare("SELECT COUNT(*) as count FROM agent_tool_calls WHERE user_id = ?")
+                .get(options.userId)
+            : this.db
+                .prepare("SELECT COUNT(*) as count FROM agent_tool_calls")
+                .get();
+        return row.count;
+    }
+}
+function mapToolCallRow(row) {
+    return {
+        id: row.id,
+        userId: row.user_id,
+        conversationId: row.conversation_id,
+        toolName: row.tool_name,
+        args: safeParseArgs(row.args_json),
+        output: row.result_output,
+        status: row.status,
+        risk: row.risk,
+        createdAt: row.created_at,
+    };
+}
+function safeParseArgs(value) {
+    try {
+        const parsed = JSON.parse(value);
+        return parsed && typeof parsed === "object" && !Array.isArray(parsed)
+            ? parsed
+            : {};
+    }
+    catch {
+        return {};
+    }
+}
+//# sourceMappingURL=tool-call-repository.js.map

package/server/dist/storage/tool-call-repository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-call-repository.js","sourceRoot":"","sources":["../../src/storage/tool-call-repository.ts"],"names":[],"mappings":"AAwCA,MAAM,OAAO,kBAAkB;IACA;IAA7B,YAA6B,EAAsB;QAAtB,OAAE,GAAF,EAAE,CAAoB;IAAG,CAAC;IAEvD,MAAM,CAAC,KAA0B;QAC/B,MAAM,EAAE,GAAG,KAAK,CAAC,EAAE,IAAI,MAAM,CAAC,UAAU,EAAE,CAAA;QAC1C,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;QACpC,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAA;QAEjD,IAAI,CAAC,EAAE;aACJ,OAAO,CACN;;;;;;;;;;;;;OAaD,CACA;aACA,GAAG,CACF,EAAE,EACF,KAAK,CAAC,MAAM,IAAI,IAAI,EACpB,KAAK,CAAC,cAAc,EACpB,KAAK,CAAC,QAAQ,EACd,QAAQ,EACR,KAAK,CAAC,MAAM,EACZ,KAAK,CAAC,MAAM,EACZ,KAAK,CAAC,IAAI,EACV,GAAG,CACJ,CAAA;QAEH,OAAO;YACL,EAAE;YACF,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,IAAI;YAC5B,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,EAAE;YACtB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,SAAS,EAAE,GAAG;SACf,CAAA;IACH,CAAC;IAED,kBAAkB,CAChB,cAAsB,EACtB,UAA+B,EAAE;QAEjC,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM;YACzB,CAAC,CAAE,IAAI,CAAC,EAAE;iBACL,OAAO,CACN,6GAA6G,CAC9G;iBACA,GAAG,CAAC,cAAc,EAAE,OAAO,CAAC,MAAM,CAAmB;YAC1D,CAAC,CAAE,IAAI,CAAC,EAAE;iBACL,OAAO,CACN,6FAA6F,CAC9F;iBACA,GAAG,CAAC,cAAc,CAAmB,CAAA;QAE5C,OAAO,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC,CAAA;IACjC,CAAC;IAED,QAAQ,CAAC,UAA+B,EAAE;QACxC,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM;YACxB,CAAC,CAAE,IAAI,CAAC,EAAE;iBACL,OAAO,CAAC,kEAAkE,CAAC;iBAC3E,GAAG,CAAC,OAAO,CAAC,MAAM,CAAuB;YAC9C,CAAC,CAAE,IAAI,CAAC,EAAE;iBACL,OAAO,CAAC,gDAAgD,CAAC;iBACzD,GAAG,EAAwB,CAAA;QAElC,OAAO,GAAG,CAAC,KAAK,CAAA;IAClB,CAAC;CACF;AAED,SAAS,cAAc,CAAC,GAAgB;IACtC,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,MAAM,EAAE,GAAG,CAAC,OAAO;QACnB,cAAc,EAAE,GAAG,CAAC,eAAe;QACnC,QAAQ,EAAE,GAAG,CAAC,SAAS;QACvB,IAAI,EAAE,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC;QAClC,MAAM,EAAE,GAAG,CAAC,aAAa;QACzB,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,SAAS,EAAE,GAAG,CAAC,UAAU;KAC1B,CAAA;AACH,CAAC;AAED,SAAS,aAAa,CAAC,KAAa;IAClC,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;QACzC,OAAO,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YACnE,CAAC,CAAE,MAAkC;YACrC,CAAC,CAAC,EAAE,CAAA;IACR,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAA;IACX,CAAC;AACH,CAAC"}

package/server/dist/storage/usage-repository.d.ts

@@ -0,0 +1,76 @@
+import type { DatabaseConnection } from "./database.js";
+import type { ProviderName } from "../providers/types.js";
+export type UsageStatus = "actual" | "unknown";
+export type UsageEventStatus = "success" | "error";
+export type UsageEventRecord = {
+    id: string;
+    userId: string;
+    provider: ProviderName;
+    model: string;
+    agentId: string | null;
+    channel: string;
+    conversationId: string | null;
+    messageId: string | null;
+    inputTokens: number | null;
+    outputTokens: number | null;
+    reasoningTokens: number | null;
+    totalTokens: number | null;
+    costUsd: number | null;
+    durationMs: number | null;
+    status: UsageEventStatus;
+    usageStatus: UsageStatus;
+    rawUsage: Record<string, unknown> | null;
+    createdAt: string;
+};
+export type CreateUsageEventInput = Omit<UsageEventRecord, "id" | "createdAt" | "rawUsage"> & {
+    rawUsage?: Record<string, unknown> | null;
+};
+export type UsageFilters = {
+    userId: string;
+    from?: string;
+    to?: string;
+    provider?: ProviderName;
+    model?: string;
+    channel?: string;
+    agentId?: string;
+};
+export type UsageAggregate = {
+    requests: number;
+    knownRequests: number;
+    unknownRequests: number;
+    inputTokens: number;
+    outputTokens: number;
+    reasoningTokens: number;
+    totalTokens: number;
+    costUsd: number;
+    durationMs: number;
+};
+export type UsageSummary = {
+    totals: UsageAggregate;
+    byProvider: Array<UsageAggregate & {
+        provider: string;
+    }>;
+    byModel: Array<UsageAggregate & {
+        provider: string;
+        model: string;
+    }>;
+    byChannel: Array<UsageAggregate & {
+        channel: string;
+    }>;
+    byAgent: Array<UsageAggregate & {
+        agentId: string | null;
+    }>;
+};
+export declare class UsageRepository {
+    private readonly db;
+    constructor(db: DatabaseConnection);
+    createEvent(input: CreateUsageEventInput): UsageEventRecord;
+    getSummary(filters: UsageFilters): UsageSummary;
+    listEvents(filters: UsageFilters & {
+        limit?: number;
+        offset?: number;
+    }): UsageEventRecord[];
+    exportCsv(filters: UsageFilters): string;
+    private aggregate;
+    private groupBy;
+}

package/server/dist/storage/usage-repository.js

@@ -0,0 +1,249 @@
+export class UsageRepository {
+    db;
+    constructor(db) {
+        this.db = db;
+    }
+    createEvent(input) {
+        const id = crypto.randomUUID();
+        const now = new Date().toISOString();
+        const totalTokens = input.totalTokens ??
+            sumNullable(input.inputTokens, input.outputTokens, input.reasoningTokens);
+        this.db
+            .prepare(`
+          INSERT INTO usage_events (
+            id,
+            user_id,
+            provider,
+            model,
+            agent_id,
+            channel,
+            conversation_id,
+            message_id,
+            input_tokens,
+            output_tokens,
+            reasoning_tokens,
+            total_tokens,
+            cost_usd,
+            duration_ms,
+            status,
+            usage_status,
+            raw_usage_json,
+            created_at
+          )
+          VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+        `)
+            .run(id, input.userId, input.provider, input.model || "unknown", input.agentId, input.channel || "app", input.conversationId, input.messageId, input.inputTokens, input.outputTokens, input.reasoningTokens, totalTokens, input.costUsd, input.durationMs, input.status, input.usageStatus, input.rawUsage ? JSON.stringify(input.rawUsage) : null, now);
+        return {
+            ...input,
+            id,
+            model: input.model || "unknown",
+            channel: input.channel || "app",
+            totalTokens,
+            rawUsage: input.rawUsage ?? null,
+            createdAt: now,
+        };
+    }
+    getSummary(filters) {
+        return {
+            totals: this.aggregate(filters),
+            byProvider: this.groupBy(filters, ["provider"]),
+            byModel: this.groupBy(filters, ["provider", "model"]),
+            byChannel: this.groupBy(filters, ["channel"]),
+            byAgent: this.groupBy(filters, ["agent_id"]),
+        };
+    }
+    listEvents(filters) {
+        const query = buildFilterQuery(filters);
+        const rows = this.db
+            .prepare(`
+          SELECT * FROM usage_events
+          WHERE ${query.where}
+          ORDER BY created_at DESC, rowid DESC
+          LIMIT ? OFFSET ?
+        `)
+            .all(...query.values, Math.max(1, Math.min(filters.limit ?? 100, 500)), Math.max(0, filters.offset ?? 0));
+        return rows.map(mapUsageRow);
+    }
+    exportCsv(filters) {
+        const rows = this.listEvents({ ...filters, limit: 500, offset: 0 });
+        const header = [
+            "createdAt",
+            "provider",
+            "model",
+            "channel",
+            "agentId",
+            "conversationId",
+            "inputTokens",
+            "outputTokens",
+            "reasoningTokens",
+            "totalTokens",
+            "costUsd",
+            "durationMs",
+            "usageStatus",
+            "status",
+        ];
+        return [
+            header.join(","),
+            ...rows.map((row) => [
+                row.createdAt,
+                row.provider,
+                row.model,
+                row.channel,
+                row.agentId ?? "",
+                row.conversationId ?? "",
+                row.inputTokens ?? "",
+                row.outputTokens ?? "",
+                row.reasoningTokens ?? "",
+                row.totalTokens ?? "",
+                row.costUsd ?? "",
+                row.durationMs ?? "",
+                row.usageStatus,
+                row.status,
+            ]
+                .map(csvCell)
+                .join(",")),
+        ].join("\n");
+    }
+    aggregate(filters) {
+        const query = buildFilterQuery(filters);
+        const row = this.db
+            .prepare(`
+          SELECT ${aggregateSelect()}
+          FROM usage_events
+          WHERE ${query.where}
+        `)
+            .get(...query.values);
+        return mapAggregateRow(row);
+    }
+    groupBy(filters, columns) {
+        const query = buildFilterQuery(filters);
+        const selectColumns = columns.join(", ");
+        const rows = this.db
+            .prepare(`
+          SELECT ${selectColumns}, ${aggregateSelect()}
+          FROM usage_events
+          WHERE ${query.where}
+          GROUP BY ${selectColumns}
+          ORDER BY total_tokens DESC, requests DESC
+        `)
+            .all(...query.values);
+        return rows.map((row) => ({
+            ...mapGroupColumns(row),
+            ...mapAggregateRow(row),
+        }));
+    }
+}
+function buildFilterQuery(filters) {
+    const conditions = ["user_id = ?"];
+    const values = [filters.userId];
+    if (filters.from) {
+        conditions.push("created_at >= ?");
+        values.push(filters.from);
+    }
+    if (filters.to) {
+        conditions.push("created_at <= ?");
+        values.push(filters.to);
+    }
+    if (filters.provider) {
+        conditions.push("provider = ?");
+        values.push(filters.provider);
+    }
+    if (filters.model) {
+        conditions.push("model = ?");
+        values.push(filters.model);
+    }
+    if (filters.channel) {
+        conditions.push("channel = ?");
+        values.push(filters.channel);
+    }
+    if (filters.agentId) {
+        conditions.push("agent_id = ?");
+        values.push(filters.agentId);
+    }
+    return { where: conditions.join(" AND "), values };
+}
+function aggregateSelect() {
+    return `
+    COUNT(*) AS requests,
+    SUM(CASE WHEN usage_status = 'actual' THEN 1 ELSE 0 END) AS known_requests,
+    SUM(CASE WHEN usage_status = 'unknown' THEN 1 ELSE 0 END) AS unknown_requests,
+    SUM(COALESCE(input_tokens, 0)) AS input_tokens,
+    SUM(COALESCE(output_tokens, 0)) AS output_tokens,
+    SUM(COALESCE(reasoning_tokens, 0)) AS reasoning_tokens,
+    SUM(COALESCE(total_tokens, 0)) AS total_tokens,
+    SUM(COALESCE(cost_usd, 0)) AS cost_usd,
+    SUM(COALESCE(duration_ms, 0)) AS duration_ms
+  `;
+}
+function mapAggregateRow(row) {
+    return {
+        requests: Number(row.requests ?? 0),
+        knownRequests: Number(row.known_requests ?? 0),
+        unknownRequests: Number(row.unknown_requests ?? 0),
+        inputTokens: Number(row.input_tokens ?? 0),
+        outputTokens: Number(row.output_tokens ?? 0),
+        reasoningTokens: Number(row.reasoning_tokens ?? 0),
+        totalTokens: Number(row.total_tokens ?? 0),
+        costUsd: Number(row.cost_usd ?? 0),
+        durationMs: Number(row.duration_ms ?? 0),
+    };
+}
+function mapGroupColumns(row) {
+    return {
+        provider: typeof row.provider === "string" ? row.provider : undefined,
+        model: typeof row.model === "string" ? row.model : undefined,
+        channel: typeof row.channel === "string" ? row.channel : undefined,
+        agentId: typeof row.agent_id === "string" ? row.agent_id : null,
+    };
+}
+function mapUsageRow(row) {
+    return {
+        id: row.id,
+        userId: row.user_id,
+        provider: row.provider,
+        model: row.model,
+        agentId: row.agent_id,
+        channel: row.channel,
+        conversationId: row.conversation_id,
+        messageId: row.message_id,
+        inputTokens: row.input_tokens,
+        outputTokens: row.output_tokens,
+        reasoningTokens: row.reasoning_tokens,
+        totalTokens: row.total_tokens,
+        costUsd: row.cost_usd,
+        durationMs: row.duration_ms,
+        status: row.status,
+        usageStatus: row.usage_status,
+        rawUsage: safeParseRaw(row.raw_usage_json),
+        createdAt: row.created_at,
+    };
+}
+function safeParseRaw(value) {
+    if (!value)
+        return null;
+    try {
+        const parsed = JSON.parse(value);
+        return parsed && typeof parsed === "object" && !Array.isArray(parsed)
+            ? parsed
+            : null;
+    }
+    catch {
+        return null;
+    }
+}
+function sumNullable(...values) {
+    let total = 0;
+    let hasValue = false;
+    for (const value of values) {
+        if (typeof value !== "number")
+            continue;
+        total += value;
+        hasValue = true;
+    }
+    return hasValue ? total : null;
+}
+function csvCell(value) {
+    const text = String(value);
+    return /[",\n\r]/.test(text) ? `"${text.replaceAll('"', '""')}"` : text;
+}
+//# sourceMappingURL=usage-repository.js.map

package/server/dist/storage/usage-repository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"usage-repository.js","sourceRoot":"","sources":["../../src/storage/usage-repository.ts"],"names":[],"mappings":"AAiGA,MAAM,OAAO,eAAe;IACG;IAA7B,YAA6B,EAAsB;QAAtB,OAAE,GAAF,EAAE,CAAoB;IAAG,CAAC;IAEvD,WAAW,CAAC,KAA4B;QACtC,MAAM,EAAE,GAAG,MAAM,CAAC,UAAU,EAAE,CAAA;QAC9B,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;QACpC,MAAM,WAAW,GACf,KAAK,CAAC,WAAW;YACjB,WAAW,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,eAAe,CAAC,CAAA;QAE3E,IAAI,CAAC,EAAE;aACJ,OAAO,CACN;;;;;;;;;;;;;;;;;;;;;;SAsBC,CACF;aACA,GAAG,CACF,EAAE,EACF,KAAK,CAAC,MAAM,EACZ,KAAK,CAAC,QAAQ,EACd,KAAK,CAAC,KAAK,IAAI,SAAS,EACxB,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,OAAO,IAAI,KAAK,EACtB,KAAK,CAAC,cAAc,EACpB,KAAK,CAAC,SAAS,EACf,KAAK,CAAC,WAAW,EACjB,KAAK,CAAC,YAAY,EAClB,KAAK,CAAC,eAAe,EACrB,WAAW,EACX,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,UAAU,EAChB,KAAK,CAAC,MAAM,EACZ,KAAK,CAAC,WAAW,EACjB,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,EACtD,GAAG,CACJ,CAAA;QAEH,OAAO;YACL,GAAG,KAAK;YACR,EAAE;YACF,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,SAAS;YAC/B,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,KAAK;YAC/B,WAAW;YACX,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,IAAI;YAChC,SAAS,EAAE,GAAG;SACf,CAAA;IACH,CAAC;IAED,UAAU,CAAC,OAAqB;QAC9B,OAAO;YACL,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;YAC/B,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,UAAU,CAAC,CAE7C;YACD,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,UAAU,EAAE,OAAO,CAAC,CAEnD;YACD,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,SAAS,CAAC,CAE3C;YACD,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,UAAU,CAAC,CAE1C;SACF,CAAA;IACH,CAAC;IAED,UAAU,CACR,OAA2D;QAE3D,MAAM,KAAK,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAA;QACvC,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE;aACjB,OAAO,CACN;;kBAEU,KAAK,CAAC,KAAK;;;SAGpB,CACF;aACA,GAAG,CACF,GAAG,KAAK,CAAC,MAAM,EACf,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,GAAG,EAAE,GAAG,CAAC,CAAC,EAChD,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC,CACd,CAAA;QAEtB,OAAO,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;IAC9B,CAAC;IAED,SAAS,CAAC,OAAqB;QAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAA;QACnE,MAAM,MAAM,GAAG;YACb,WAAW;YACX,UAAU;YACV,OAAO;YACP,SAAS;YACT,SAAS;YACT,gBAAgB;YAChB,aAAa;YACb,cAAc;YACd,iBAAiB;YACjB,aAAa;YACb,SAAS;YACT,YAAY;YACZ,aAAa;YACb,QAAQ;SACT,CAAA;QAED,OAAO;YACL,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;YAChB,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAClB;gBACE,GAAG,CAAC,SAAS;gBACb,GAAG,CAAC,QAAQ;gBACZ,GAAG,CAAC,KAAK;gBACT,GAAG,CAAC,OAAO;gBACX,GAAG,CAAC,OAAO,IAAI,EAAE;gBACjB,GAAG,CAAC,cAAc,IAAI,EAAE;gBACxB,GAAG,CAAC,WAAW,IAAI,EAAE;gBACrB,GAAG,CAAC,YAAY,IAAI,EAAE;gBACtB,GAAG,CAAC,eAAe,IAAI,EAAE;gBACzB,GAAG,CAAC,WAAW,IAAI,EAAE;gBACrB,GAAG,CAAC,OAAO,IAAI,EAAE;gBACjB,GAAG,CAAC,UAAU,IAAI,EAAE;gBACpB,GAAG,CAAC,WAAW;gBACf,GAAG,CAAC,MAAM;aACX;iBACE,GAAG,CAAC,OAAO,CAAC;iBACZ,IAAI,CAAC,GAAG,CAAC,CACb;SACF,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACd,CAAC;IAEO,SAAS,CAAC,OAAqB;QACrC,MAAM,KAAK,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAA;QACvC,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE;aAChB,OAAO,CACN;mBACW,eAAe,EAAE;;kBAElB,KAAK,CAAC,KAAK;SACpB,CACF;aACA,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,CAAiB,CAAA;QAEvC,OAAO,eAAe,CAAC,GAAG,CAAC,CAAA;IAC7B,CAAC;IAEO,OAAO,CAAC,OAAqB,EAAE,OAAiB;QACtD,MAAM,KAAK,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAA;QACvC,MAAM,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACxC,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE;aACjB,OAAO,CACN;mBACW,aAAa,KAAK,eAAe,EAAE;;kBAEpC,KAAK,CAAC,KAAK;qBACR,aAAa;;SAEzB,CACF;aACA,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,CAAkD,CAAA;QAExE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACxB,GAAG,eAAe,CAAC,GAAG,CAAC;YACvB,GAAG,eAAe,CAAC,GAAG,CAAC;SACxB,CAAC,CAAC,CAAA;IACL,CAAC;CACF;AAED,SAAS,gBAAgB,CAAC,OAAqB;IAC7C,MAAM,UAAU,GAAG,CAAC,aAAa,CAAC,CAAA;IAClC,MAAM,MAAM,GAAkB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;IAE9C,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,UAAU,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAA;QAClC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IAC3B,CAAC;IACD,IAAI,OAAO,CAAC,EAAE,EAAE,CAAC;QACf,UAAU,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAA;QAClC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;IACzB,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACrB,UAAU,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;QAC/B,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;IAC/B,CAAC;IACD,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;QAC5B,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;IAC5B,CAAC;IACD,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACpB,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;QAC9B,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;IAC9B,CAAC;IACD,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACpB,UAAU,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;QAC/B,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;IAC9B,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;AACpD,CAAC;AAED,SAAS,eAAe;IACtB,OAAO;;;;;;;;;;GAUN,CAAA;AACH,CAAC;AAED,SAAS,eAAe,CAAC,GAAiB;IACxC,OAAO;QACL,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,IAAI,CAAC,CAAC;QACnC,aAAa,EAAE,MAAM,CAAC,GAAG,CAAC,cAAc,IAAI,CAAC,CAAC;QAC9C,eAAe,EAAE,MAAM,CAAC,GAAG,CAAC,gBAAgB,IAAI,CAAC,CAAC;QAClD,WAAW,EAAE,MAAM,CAAC,GAAG,CAAC,YAAY,IAAI,CAAC,CAAC;QAC1C,YAAY,EAAE,MAAM,CAAC,GAAG,CAAC,aAAa,IAAI,CAAC,CAAC;QAC5C,eAAe,EAAE,MAAM,CAAC,GAAG,CAAC,gBAAgB,IAAI,CAAC,CAAC;QAClD,WAAW,EAAE,MAAM,CAAC,GAAG,CAAC,YAAY,IAAI,CAAC,CAAC;QAC1C,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,IAAI,CAAC,CAAC;QAClC,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,WAAW,IAAI,CAAC,CAAC;KACzC,CAAA;AACH,CAAC;AAED,SAAS,eAAe,CAAC,GAA4B;IACnD,OAAO;QACL,QAAQ,EAAE,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;QACrE,KAAK,EAAE,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;QAC5D,OAAO,EAAE,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;QAClE,OAAO,EAAE,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI;KAChE,CAAA;AACH,CAAC;AAED,SAAS,WAAW,CAAC,GAAkB;IACrC,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,MAAM,EAAE,GAAG,CAAC,OAAO;QACnB,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,OAAO,EAAE,GAAG,CAAC,QAAQ;QACrB,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,cAAc,EAAE,GAAG,CAAC,eAAe;QACnC,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,WAAW,EAAE,GAAG,CAAC,YAAY;QAC7B,YAAY,EAAE,GAAG,CAAC,aAAa;QAC/B,eAAe,EAAE,GAAG,CAAC,gBAAgB;QACrC,WAAW,EAAE,GAAG,CAAC,YAAY;QAC7B,OAAO,EAAE,GAAG,CAAC,QAAQ;QACrB,UAAU,EAAE,GAAG,CAAC,WAAW;QAC3B,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,WAAW,EAAE,GAAG,CAAC,YAAY;QAC7B,QAAQ,EAAE,YAAY,CAAC,GAAG,CAAC,cAAc,CAAC;QAC1C,SAAS,EAAE,GAAG,CAAC,UAAU;KAC1B,CAAA;AACH,CAAC;AAED,SAAS,YAAY,CAAC,KAAoB;IACxC,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAA;IAEvB,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;QACzC,OAAO,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YACnE,CAAC,CAAE,MAAkC;YACrC,CAAC,CAAC,IAAI,CAAA;IACV,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,GAAG,MAA4B;IAClD,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,IAAI,QAAQ,GAAG,KAAK,CAAA;IAEpB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,SAAQ;QACvC,KAAK,IAAI,KAAK,CAAA;QACd,QAAQ,GAAG,IAAI,CAAA;IACjB,CAAC;IAED,OAAO,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAA;AAChC,CAAC;AAED,SAAS,OAAO,CAAC,KAAsB;IACrC,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAA;IAC1B,OAAO,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAA;AACzE,CAAC"}

package/server/dist/storage/vault.d.ts

@@ -0,0 +1,3 @@
+export declare function ensureMasterKey(path: string): Promise<Buffer>;
+export declare function encryptSecret(plainText: string, key: Buffer): string;
+export declare function decryptSecret(encryptedSecret: string, key: Buffer): string;

package/server/dist/storage/vault.js

@@ -0,0 +1,57 @@
+import { randomBytes, createCipheriv, createDecipheriv } from "node:crypto";
+import { mkdir, readFile, writeFile, chmod } from "node:fs/promises";
+import { dirname } from "node:path";
+const KEY_LENGTH = 32;
+const IV_LENGTH = 12;
+const FORMAT_VERSION = "v1";
+export async function ensureMasterKey(path) {
+    await mkdir(dirname(path), { recursive: true });
+    try {
+        const existingKey = (await readFile(path, "utf8")).trim();
+        return Buffer.from(existingKey, "hex");
+    }
+    catch (error) {
+        if (!(error instanceof Error) || !("code" in error) || error.code !== "ENOENT") {
+            throw error;
+        }
+    }
+    const key = randomBytes(KEY_LENGTH);
+    await writeFile(path, key.toString("hex"), { mode: 0o600, flag: "wx" });
+    await chmod(path, 0o600);
+    return key;
+}
+export function encryptSecret(plainText, key) {
+    assertValidKey(key);
+    const iv = randomBytes(IV_LENGTH);
+    const cipher = createCipheriv("aes-256-gcm", key, iv);
+    const encrypted = Buffer.concat([
+        cipher.update(plainText, "utf8"),
+        cipher.final(),
+    ]);
+    const authTag = cipher.getAuthTag();
+    return [
+        FORMAT_VERSION,
+        iv.toString("base64url"),
+        authTag.toString("base64url"),
+        encrypted.toString("base64url"),
+    ].join(":");
+}
+export function decryptSecret(encryptedSecret, key) {
+    assertValidKey(key);
+    const [version, iv, authTag, encrypted] = encryptedSecret.split(":");
+    if (version !== FORMAT_VERSION || !iv || !authTag || !encrypted) {
+        throw new Error("Invalid encrypted secret format");
+    }
+    const decipher = createDecipheriv("aes-256-gcm", key, Buffer.from(iv, "base64url"));
+    decipher.setAuthTag(Buffer.from(authTag, "base64url"));
+    return Buffer.concat([
+        decipher.update(Buffer.from(encrypted, "base64url")),
+        decipher.final(),
+    ]).toString("utf8");
+}
+function assertValidKey(key) {
+    if (key.length !== KEY_LENGTH) {
+        throw new Error("Vault master key must be 32 bytes");
+    }
+}
+//# sourceMappingURL=vault.js.map

package/server/dist/storage/vault.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vault.js","sourceRoot":"","sources":["../../src/storage/vault.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAC3E,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAA;AACpE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAEnC,MAAM,UAAU,GAAG,EAAE,CAAA;AACrB,MAAM,SAAS,GAAG,EAAE,CAAA;AACpB,MAAM,cAAc,GAAG,IAAI,CAAA;AAE3B,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAY;IAChD,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAE/C,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;QACzD,OAAO,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,CAAA;IACxC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC/E,MAAM,KAAK,CAAA;QACb,CAAC;IACH,CAAC;IAED,MAAM,GAAG,GAAG,WAAW,CAAC,UAAU,CAAC,CAAA;IACnC,MAAM,SAAS,CAAC,IAAI,EAAE,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;IACvE,MAAM,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;IAExB,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,SAAiB,EAAE,GAAW;IAC1D,cAAc,CAAC,GAAG,CAAC,CAAA;IAEnB,MAAM,EAAE,GAAG,WAAW,CAAC,SAAS,CAAC,CAAA;IACjC,MAAM,MAAM,GAAG,cAAc,CAAC,aAAa,EAAE,GAAG,EAAE,EAAE,CAAC,CAAA;IACrD,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC;QAC9B,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC;QAChC,MAAM,CAAC,KAAK,EAAE;KACf,CAAC,CAAA;IACF,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,EAAE,CAAA;IAEnC,OAAO;QACL,cAAc;QACd,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC;QACxB,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC;QAC7B,SAAS,CAAC,QAAQ,CAAC,WAAW,CAAC;KAChC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;AACb,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,eAAuB,EAAE,GAAW;IAChE,cAAc,CAAC,GAAG,CAAC,CAAA;IAEnB,MAAM,CAAC,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,SAAS,CAAC,GAAG,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAEpE,IAAI,OAAO,KAAK,cAAc,IAAI,CAAC,EAAE,IAAI,CAAC,OAAO,IAAI,CAAC,SAAS,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAA;IACpD,CAAC;IAED,MAAM,QAAQ,GAAG,gBAAgB,CAC/B,aAAa,EACb,GAAG,EACH,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,WAAW,CAAC,CAC7B,CAAA;IACD,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,CAAA;IAEtD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QACpD,QAAQ,CAAC,KAAK,EAAE;KACjB,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;AACrB,CAAC;AAED,SAAS,cAAc,CAAC,GAAW;IACjC,IAAI,GAAG,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAA;IACtD,CAAC;AACH,CAAC"}