openpond 0.1.0 → 0.2.0

package/README.md

@@ -10,7 +10,7 @@ Launch the complete local web app without installing it globally:
 npx openpond@latest
 ```
 
-The command starts a local OpenPond server, passes its authenticated URL directly to your system browser, and stays attached until you press `Ctrl+C`. Application state persists under `~/.openpond/openpond-app`; the directory where you invoke the command is not modified. npm maintains its own package cache separately.
+The command starts a local OpenPond server, passes its authenticated URL directly to your system browser, and stays attached until you press `Ctrl+C`. Application state persists under `~/.openpond`; the directory where you invoke the command is not modified. npm maintains its own package cache separately.
 
 Node.js 24.18 or newer in the Node 24 release line is required. Other installation and launch forms remain available:
 
@@ -28,7 +28,7 @@ openpond tui
 curl -fsSL https://openpond.ai/install.sh | bash
 ```
 
-Login (stores key in `~/.openpond/config.json`):
+Login (stores authentication in the encrypted home vault):
 
 ```bash
 openpond login
@@ -83,9 +83,9 @@ Global account selection:
 
 Command reference:
 
-- `openpond login`: prompt for API key and save to `~/.openpond/config.json`.
+- `openpond login`: prompt for an API key and save it in the encrypted home vault.
 - `openpond login --api-key <key>`: save the API key without prompting.
-- `openpond profiles list`: list redacted local profiles from `~/.openpond/config.json`.
+- `openpond profiles list`: list redacted local accounts from the shared home configuration.
 - `openpond profiles use <name> [--base-url <url>]`: switch the active local profile.
 - `openpond profiles save <name> --api-key <key> [--base-url <url>] [--environment <name>]`: save or update a local profile API key.
 - `openpond account`: fetch current account/profile fields and active products for the selected API key.

package/dist/cache.d.ts

@@ -1,22 +1,19 @@
 import type { AppListItem } from "./api.js";
 export declare const DEFAULT_CACHE_TTL_MS: number;
-export declare function getCachedApps(params: {
+type CacheScope = {
     apiBase: string;
     apiKey: string;
+};
+export declare function getCachedApps(params: CacheScope & {
     ttlMs?: number;
 }): Promise<AppListItem[] | null>;
-export declare function setCachedApps(params: {
-    apiBase: string;
-    apiKey: string;
+export declare function setCachedApps(params: CacheScope & {
     apps: AppListItem[];
 }): Promise<void>;
-export declare function getCachedTools(params: {
-    apiBase: string;
-    apiKey: string;
+export declare function getCachedTools(params: CacheScope & {
     ttlMs?: number;
 }): Promise<unknown[] | null>;
-export declare function setCachedTools(params: {
-    apiBase: string;
-    apiKey: string;
+export declare function setCachedTools(params: CacheScope & {
     tools: unknown[];
 }): Promise<void>;
+export {};

package/dist/chunks/{app-layer-XEYHFJHI.js → app-layer-F3CGXB33.js}

@@ -1,16 +1,18 @@
 import { createRequire as __openpondCreateRequire } from "node:module"; var require = __openpondCreateRequire(import.meta.url);
 import {
   runProcessCommand
-} from "./chunk-HFPUR4CQ.js";
+} from "./chunk-3VEYNDHN.js";
+import "./chunk-FJ2JGB2N.js";
+import "./chunk-SMNFI2FU.js";
+import "./chunk-KSRWKXRB.js";
 import {
   CliUsageError
-} from "./chunk-2JABRRNR.js";
-import "./chunk-SMNFI2FU.js";
-import "./chunk-N3TGCM7J.js";
+} from "./chunk-PS37DB5F.js";
+import "./chunk-4KA25HUP.js";
+import "./chunk-ZNQEROWP.js";
+import "./chunk-7RIGZB7N.js";
 import "./chunk-4L3ZJS2T.js";
 import "./chunk-JTHL5XJ2.js";
-import "./chunk-D7BO5Y5J.js";
-import "./chunk-KSRWKXRB.js";
 import "./chunk-FQS2QL5F.js";
 import "./chunk-MUMPWI4O.js";
 import "./chunk-UACZUFIA.js";
@@ -158,7 +160,7 @@ function isCompiledExecutable() {
   return Boolean(argvEntry && path.resolve(argvEntry) === path.resolve(process.execPath));
 }
 function forwardedOptions(options) {
-  const ignored = /* @__PURE__ */ new Set(["account", "handle", "baseUrl", "noOpen", "tui"]);
+  const ignored = /* @__PURE__ */ new Set(["account", "handle", "baseUrl", "noOpen", "tui", "home"]);
   const args = [];
   for (const [key, value] of Object.entries(options)) {
     if (ignored.has(key)) continue;

package/dist/chunks/{app-server-runtime-Y6MW4XCG.js → app-server-runtime-RHO5TFUC.js}

@@ -2,16 +2,18 @@ import { createRequire as __openpondCreateRequire } from "node:module"; var requ
 import {
   APP_SERVER_COMPOSITION,
   createOpenPondAppServer
-} from "./chunk-TZWAUV2L.js";
-import "./chunk-TGM5IPYO.js";
-import "./chunk-5TKZBMQM.js";
-import "./chunk-AN2EYCN3.js";
-import "./chunk-EFET7LB7.js";
-import "./chunk-6G6MDZLM.js";
-import "./chunk-DLQQIWN2.js";
+} from "./chunk-VT6BLHMB.js";
+import "./chunk-UZMVNKXM.js";
+import "./chunk-X6F4LBTQ.js";
+import "./chunk-6SMNG6YA.js";
+import "./chunk-KCRCIQPD.js";
+import "./chunk-XA4KBDMY.js";
 import "./chunk-NTK22KJD.js";
 import "./chunk-R3C3MNSI.js";
 import "./chunk-X7ZG4TSW.js";
+import "./chunk-4KA25HUP.js";
+import "./chunk-ZNQEROWP.js";
+import "./chunk-DLQQIWN2.js";
 import "./chunk-JTHL5XJ2.js";
 import "./chunk-FQS2QL5F.js";
 import "./chunk-UACZUFIA.js";

package/dist/chunks/{apps-GSXUDK6V.js → apps-L5XCL7QY.js}

@@ -10,15 +10,7 @@ import {
   normalizeRepoName,
   pollDeploymentLogs,
   resolveAppTarget
-} from "./chunk-HFPUR4CQ.js";
-import "./chunk-2JABRRNR.js";
-import {
-  resolveBaseUrl,
-  resolvePublicApiBaseUrl
-} from "./chunk-SMNFI2FU.js";
-import "./chunk-N3TGCM7J.js";
-import "./chunk-4L3ZJS2T.js";
-import "./chunk-JTHL5XJ2.js";
+} from "./chunk-3VEYNDHN.js";
 import {
   createAgentFromPrompt,
   deployApp,
@@ -32,8 +24,18 @@ import {
   submitBacktestTx,
   updateAppCodeVisibility,
   updateAppEnvironment
-} from "./chunk-D7BO5Y5J.js";
+} from "./chunk-FJ2JGB2N.js";
+import {
+  resolveBaseUrl,
+  resolvePublicApiBaseUrl
+} from "./chunk-SMNFI2FU.js";
 import "./chunk-KSRWKXRB.js";
+import "./chunk-PS37DB5F.js";
+import "./chunk-4KA25HUP.js";
+import "./chunk-ZNQEROWP.js";
+import "./chunk-7RIGZB7N.js";
+import "./chunk-4L3ZJS2T.js";
+import "./chunk-JTHL5XJ2.js";
 import "./chunk-FQS2QL5F.js";
 import {
   parseBooleanOption,

package/dist/chunks/{chunk-J7PYGDRY.js → chunk-26AMV5ZI.js}

@@ -116,7 +116,7 @@ async function createLocalAuthenticatedRequest(baseUrl) {
   if (url.protocol !== "http:" || !["127.0.0.1", "localhost", "::1"].includes(url.hostname)) {
     return fetch;
   }
-  const appHome = process.env.OPENPOND_APP_HOME?.trim() || path.join(os.homedir(), ".openpond", "openpond-app");
+  const appHome = process.env.OPENPOND_HOME?.trim() || path.join(os.homedir(), ".openpond", "openpond-app");
   const token = (await readFile(path.join(appHome, "token"), "utf8")).trim();
   if (!token) {
     throw new Error("OpenPond local capability token is empty.");

package/dist/chunks/{chunk-DNXBJZAU.js → chunk-3EB7I67T.js}

@@ -4,7 +4,7 @@ import {
   parseSandboxRuntimeProfileIdOption,
   parseSandboxRuntimePromotionPolicyOption,
   parseSandboxWorkflowModeOption
-} from "./chunk-HFPUR4CQ.js";
+} from "./chunk-3VEYNDHN.js";
 import {
   parseBooleanOption,
   parseCsvOption,

package/dist/chunks/{chunk-J3YDKJFD.js → chunk-3ELF4FXY.js}

@@ -1,7 +1,11 @@
 import { createRequire as __openpondCreateRequire } from "node:module"; var require = __openpondCreateRequire(import.meta.url);
 import {
-  writePrivateJsonFile
-} from "./chunk-D7BO5Y5J.js";
+  readCache,
+  writeCache
+} from "./chunk-4KA25HUP.js";
+import {
+  resolveOpenPondHome
+} from "./chunk-ZNQEROWP.js";
 
 // ../../packages/cloud/src/profile/source-upload-cache.ts
 import { createHash } from "node:crypto";
@@ -11,8 +15,9 @@ var SOURCE_UPLOAD_CACHE_PATH = ".openpond/source-upload-cache.json";
 var SOURCE_UPLOAD_CACHE_SCHEMA = "openpond.source-upload-cache.v1";
 async function readSourceUploadCache(rootPath) {
   try {
-    const raw = await readFile(path.join(rootPath, SOURCE_UPLOAD_CACHE_PATH), "utf8");
-    const parsed = JSON.parse(raw);
+    const stored = await readCache(resolveOpenPondHome(), "source-upload.v1", sourceScope(rootPath));
+    const parsed = stored?.payload;
+    if (!parsed) return /* @__PURE__ */ new Map();
     if (parsed.schema !== SOURCE_UPLOAD_CACHE_SCHEMA || !parsed.entries) {
       return /* @__PURE__ */ new Map();
     }
@@ -27,9 +32,11 @@ async function readSourceUploadCache(rootPath) {
   }
 }
 async function materializeSourceUploadFile(file, cache) {
-  const cacheKey = cacheKeyForFile(file);
+  const contents = await readFile(file.absolutePath);
+  const sha256 = createHash("sha256").update(contents).digest("hex");
+  const cacheKey = cacheKeyForFile({ ...file, sha256 });
   const cached = cache.get(cacheKey);
-  if (cached) {
+  if (cached && cached.sha256 === sha256 && createHash("sha256").update(Buffer.from(cached.contentsBase64, "base64")).digest("hex") === sha256) {
     return {
       file,
       entry: {
@@ -40,7 +47,6 @@ async function materializeSourceUploadFile(file, cache) {
       sha256: cached.sha256
     };
   }
-  const contents = await readFile(file.absolutePath);
   return {
     file,
     entry: {
@@ -48,7 +54,7 @@ async function materializeSourceUploadFile(file, cache) {
       type: "file",
       contentsBase64: contents.toString("base64")
     },
-    sha256: createHash("sha256").update(contents).digest("hex")
+    sha256
   };
 }
 async function writeSourceUploadCache(rootPath, files) {
@@ -64,21 +70,23 @@ async function writeSourceUploadCache(rootPath, files) {
     };
     entries[cacheKeyForFile(cacheEntry)] = cacheEntry;
   }
-  const cachePath = path.join(rootPath, SOURCE_UPLOAD_CACHE_PATH);
-  await writePrivateJsonFile(cachePath, {
+  await writeCache(resolveOpenPondHome(), "source-upload.v1", sourceScope(rootPath), {
     schema: SOURCE_UPLOAD_CACHE_SCHEMA,
     generatedAt: (/* @__PURE__ */ new Date()).toISOString(),
     entries
   });
 }
 function cacheKeyForFile(input) {
-  return `${input.path}\0${input.size}\0${input.mtimeMs}\0${input.ctimeMs}`;
+  return `${input.path}\0${input.sha256}`;
 }
 function isCacheEntry(value) {
   if (!value || typeof value !== "object" || Array.isArray(value)) return false;
   const record = value;
   return typeof record.path === "string" && typeof record.size === "number" && typeof record.mtimeMs === "number" && typeof record.ctimeMs === "number" && typeof record.sha256 === "string" && typeof record.contentsBase64 === "string";
 }
+function sourceScope(rootPath) {
+  return createHash("sha256").update(path.resolve(rootPath)).digest("hex");
+}
 
 export {
   SOURCE_UPLOAD_CACHE_PATH,

package/dist/chunks/{chunk-HFPUR4CQ.js → chunk-3VEYNDHN.js}

@@ -1,12 +1,4 @@
 import { createRequire as __openpondCreateRequire } from "node:module"; var require = __openpondCreateRequire(import.meta.url);
-import {
-  mapUiBaseToApiBase,
-  resolveBaseUrl,
-  resolveSandboxApiUrlOption
-} from "./chunk-SMNFI2FU.js";
-import {
-  createOpenPondSandboxClient
-} from "./chunk-JTHL5XJ2.js";
 import {
   DEFAULT_CACHE_TTL_MS,
   SANDBOX_RUNTIME_PROFILE_IDS,
@@ -20,11 +12,19 @@ import {
   saveGlobalConfig,
   setCachedApps,
   setCachedTools
-} from "./chunk-D7BO5Y5J.js";
+} from "./chunk-FJ2JGB2N.js";
+import {
+  mapUiBaseToApiBase,
+  resolveBaseUrl,
+  resolveSandboxApiUrlOption
+} from "./chunk-SMNFI2FU.js";
 import {
   DEFAULT_OPENPOND_API_BASE_URL,
   DEFAULT_OPENPOND_WEB_BASE_URL
 } from "./chunk-KSRWKXRB.js";
+import {
+  createOpenPondSandboxClient
+} from "./chunk-JTHL5XJ2.js";
 import {
   parseBooleanOption
 } from "./chunk-MUMPWI4O.js";
@@ -73,7 +73,7 @@ async function ensureApiKey(config, baseUrl) {
     baseUrl,
     activeProfile: config.activeProfile
   });
-  console.log("saved api key to ~/.openpond/config.json");
+  console.log("Saved account credentials to the encrypted OpenPond credential store.");
   return apiKey;
 }