skrypt-ai 0.4.2 → 0.6.0

package/dist/commands/sdk.js

@@ -223,115 +223,116 @@ export const sdkCommand = new Command('sdk')
     .option('--model <name>', 'LLM model')
     .option('--format <type>', 'Output format (markdown or json)', 'markdown')
     .action(async (specPath, options) => {
-    // Pro feature - requires subscription
-    if (!await requirePro('sdk')) {
-        process.exit(1);
-    }
-    const resolvedSpec = resolve(specPath);
-    if (!existsSync(resolvedSpec)) {
-        console.error(`Error: Spec file not found: ${resolvedSpec}`);
-        process.exit(1);
-    }
-    console.log('skrypt sdk');
-    console.log(`  spec: ${resolvedSpec}`);
-    console.log(`  output: ${options.output}`);
-    console.log(`  languages: ${options.languages}`);
-    console.log('');
-    // Parse spec
-    console.log('Step 1: Parsing OpenAPI spec...');
-    const specContent = readFileSync(resolvedSpec, 'utf-8');
-    let spec;
     try {
-        spec = await parseOpenAPISpec(specContent);
-    }
-    catch (err) {
-        console.error('Error: Failed to parse spec file:', err);
-        process.exit(1);
-    }
-    const apiTitle = spec.info?.title || basename(specPath, '.json');
-    const apiVersion = spec.info?.version || '1.0.0';
-    console.log(`  API: ${apiTitle} v${apiVersion}`);
-    if (!spec.paths || Object.keys(spec.paths).length === 0) {
-        console.error('Error: No paths found in spec');
-        process.exit(1);
-    }
-    // Parse languages
-    const languages = (options.languages || 'typescript,python,curl')
-        .split(',')
-        .map(l => l.trim().toLowerCase())
-        .filter(l => SUPPORTED_LANGUAGES.includes(l));
-    if (languages.length === 0) {
-        console.error(`Error: No valid languages. Supported: ${SUPPORTED_LANGUAGES.join(', ')}`);
-        process.exit(1);
-    }
-    console.log(`  Generating for: ${languages.join(', ')}`);
-    // Check if we should use AI for enhanced samples
-    let client = null;
-    if (options.provider) {
-        const config = loadConfig();
-        config.llm.provider = options.provider;
-        const { ok } = checkApiKey(config.llm.provider);
-        if (ok) {
-            client = createLLMClient({
-                provider: config.llm.provider,
-                model: options.model || config.llm.model
-            });
-            console.log(`  Using AI enhancement: ${config.llm.provider}`);
+        // Pro feature - requires subscription
+        if (!await requirePro('sdk')) {
+            process.exit(1);
         }
-    }
-    // Generate samples for each endpoint
-    console.log('\nStep 2: Generating code samples...');
-    const allSamples = [];
-    for (const [path, methods] of Object.entries(spec.paths || {})) {
-        for (const [method, details] of Object.entries(methods || {})) {
-            if (!['get', 'post', 'put', 'patch', 'delete'].includes(method))
-                continue;
-            const operationId = details.operationId || `${method}${path.replace(/\//g, '_').replace(/[{}]/g, '')}`;
-            const summary = details.summary || details.description || '';
-            console.log(`  ${method.toUpperCase()} ${path}`);
-            const params = (details.parameters || []).map(p => ({
-                name: p.name,
-                type: p.schema?.type,
-                required: p.required
-            }));
-            const hasBody = !!details.requestBody;
-            const bodySchema = details.requestBody?.content?.['application/json']?.schema;
-            const samples = [];
-            for (const lang of languages) {
-                let code;
-                if (client) {
-                    code = await generateAISample({ path, method, operationId, summary, params, hasBody, bodySchema }, lang, client);
-                }
-                else {
-                    code = generateBasicSample({
-                        path,
-                        method,
-                        operationId,
-                        params: params.map(p => p.name),
-                        hasBody
-                    }, lang, '');
+        const resolvedSpec = resolve(specPath);
+        if (!existsSync(resolvedSpec)) {
+            console.error(`Error: Spec file not found: ${resolvedSpec}`);
+            process.exit(1);
+        }
+        console.log('skrypt sdk');
+        console.log(`  spec: ${resolvedSpec}`);
+        console.log(`  output: ${options.output}`);
+        console.log(`  languages: ${options.languages}`);
+        console.log('');
+        // Parse spec
+        console.log('Step 1: Parsing OpenAPI spec...');
+        const specContent = readFileSync(resolvedSpec, 'utf-8');
+        let spec;
+        try {
+            spec = await parseOpenAPISpec(specContent);
+        }
+        catch (err) {
+            console.error('Error: Failed to parse spec file:', err);
+            process.exit(1);
+        }
+        const apiTitle = spec.info?.title || basename(specPath, '.json');
+        const apiVersion = spec.info?.version || '1.0.0';
+        console.log(`  API: ${apiTitle} v${apiVersion}`);
+        if (!spec.paths || Object.keys(spec.paths).length === 0) {
+            console.error('Error: No paths found in spec');
+            process.exit(1);
+        }
+        // Parse languages
+        const languages = (options.languages || 'typescript,python,curl')
+            .split(',')
+            .map(l => l.trim().toLowerCase())
+            .filter(l => SUPPORTED_LANGUAGES.includes(l));
+        if (languages.length === 0) {
+            console.error(`Error: No valid languages. Supported: ${SUPPORTED_LANGUAGES.join(', ')}`);
+            process.exit(1);
+        }
+        console.log(`  Generating for: ${languages.join(', ')}`);
+        // Check if we should use AI for enhanced samples
+        let client = null;
+        if (options.provider) {
+            const config = loadConfig();
+            config.llm.provider = options.provider;
+            const { ok } = checkApiKey(config.llm.provider);
+            if (ok) {
+                client = createLLMClient({
+                    provider: config.llm.provider,
+                    model: options.model || config.llm.model
+                });
+                console.log(`  Using AI enhancement: ${config.llm.provider}`);
+            }
+        }
+        // Generate samples for each endpoint
+        console.log('\nStep 2: Generating code samples...');
+        const allSamples = [];
+        for (const [path, methods] of Object.entries(spec.paths || {})) {
+            for (const [method, details] of Object.entries(methods || {})) {
+                if (!['get', 'post', 'put', 'patch', 'delete'].includes(method))
+                    continue;
+                const operationId = details.operationId || `${method}${path.replace(/\//g, '_').replace(/[{}]/g, '')}`;
+                const summary = details.summary || details.description || '';
+                console.log(`  ${method.toUpperCase()} ${path}`);
+                const params = (details.parameters || []).map(p => ({
+                    name: p.name,
+                    type: p.schema?.type,
+                    required: p.required
+                }));
+                const hasBody = !!details.requestBody;
+                const bodySchema = details.requestBody?.content?.['application/json']?.schema;
+                const samples = [];
+                for (const lang of languages) {
+                    let code;
+                    if (client) {
+                        code = await generateAISample({ path, method, operationId, summary, params, hasBody, bodySchema }, lang, client);
+                    }
+                    else {
+                        code = generateBasicSample({
+                            path,
+                            method,
+                            operationId,
+                            params: params.map(p => p.name),
+                            hasBody
+                        }, lang, '');
+                    }
+                    samples.push({ language: lang, code });
                 }
-                samples.push({ language: lang, code });
+                allSamples.push({ path, method, operationId, summary, samples });
             }
-            allSamples.push({ path, method, operationId, summary, samples });
         }
-    }
-    // Write output
-    console.log('\nStep 3: Writing output...');
-    const outputDir = resolve(options.output || './docs/sdk');
-    mkdirSync(outputDir, { recursive: true });
-    if (options.format === 'json') {
-        // JSON output
-        const jsonPath = join(outputDir, 'sdk-samples.json');
-        writeFileSync(jsonPath, JSON.stringify(allSamples, null, 2));
-        console.log(`  Written: ${jsonPath}`);
-    }
-    else {
-        // Markdown output - one file per endpoint
-        for (const endpoint of allSamples) {
-            const fileName = `${endpoint.operationId}.mdx`;
-            const filePath = join(outputDir, fileName);
-            let content = `---
+        // Write output
+        console.log('\nStep 3: Writing output...');
+        const outputDir = resolve(options.output || './docs/sdk');
+        mkdirSync(outputDir, { recursive: true });
+        if (options.format === 'json') {
+            // JSON output
+            const jsonPath = join(outputDir, 'sdk-samples.json');
+            writeFileSync(jsonPath, JSON.stringify(allSamples, null, 2));
+            console.log(`  Written: ${jsonPath}`);
+        }
+        else {
+            // Markdown output - one file per endpoint
+            for (const endpoint of allSamples) {
+                const fileName = `${endpoint.operationId}.mdx`;
+                const filePath = join(outputDir, fileName);
+                let content = `---
 title: ${endpoint.operationId}
 description: ${endpoint.summary || `${endpoint.method.toUpperCase()} ${endpoint.path}`}
 ---
@@ -345,21 +346,21 @@ ${endpoint.summary}
 ## Code Examples
 
 `;
-            for (const sample of endpoint.samples) {
-                content += `### ${sample.language.charAt(0).toUpperCase() + sample.language.slice(1)}
+                for (const sample of endpoint.samples) {
+                    content += `### ${sample.language.charAt(0).toUpperCase() + sample.language.slice(1)}
 
 \`\`\`${sample.language}
 ${sample.code}
 \`\`\`
 
 `;
+                }
+                writeFileSync(filePath, content);
+                console.log(`  Written: ${filePath}`);
             }
-            writeFileSync(filePath, content);
-            console.log(`  Written: ${filePath}`);
-        }
-        // Write index file
-        const indexPath = join(outputDir, 'index.mdx');
-        let indexContent = `---
+            // Write index file
+            const indexPath = join(outputDir, 'index.mdx');
+            let indexContent = `---
 title: SDK Code Samples
 description: Code samples for ${apiTitle} API
 ---
@@ -371,16 +372,21 @@ Auto-generated code samples for the ${apiTitle} API v${apiVersion}.
 ## Endpoints
 
 `;
-        for (const endpoint of allSamples) {
-            indexContent += `- [${endpoint.operationId}](./${endpoint.operationId}) - \`${endpoint.method.toUpperCase()} ${endpoint.path}\`\n`;
+            for (const endpoint of allSamples) {
+                indexContent += `- [${endpoint.operationId}](./${endpoint.operationId}) - \`${endpoint.method.toUpperCase()} ${endpoint.path}\`\n`;
+            }
+            writeFileSync(indexPath, indexContent);
+            console.log(`  Written: ${indexPath}`);
         }
-        writeFileSync(indexPath, indexContent);
-        console.log(`  Written: ${indexPath}`);
+        // Summary
+        console.log('\n=== Summary ===');
+        console.log(`  Endpoints: ${allSamples.length}`);
+        console.log(`  Languages: ${languages.length}`);
+        console.log(`  Total samples: ${allSamples.length * languages.length}`);
+        console.log(`  Output: ${outputDir}`);
+    }
+    catch (err) {
+        console.error(`Error: ${err instanceof Error ? err.message : err}`);
+        process.exit(1);
     }
-    // Summary
-    console.log('\n=== Summary ===');
-    console.log(`  Endpoints: ${allSamples.length}`);
-    console.log(`  Languages: ${languages.length}`);
-    console.log(`  Total samples: ${allSamples.length * languages.length}`);
-    console.log(`  Output: ${outputDir}`);
 });

package/dist/commands/security.d.ts

@@ -0,0 +1,2 @@
+import { Command } from 'commander';
+export declare const securityCommand: Command;

package/dist/commands/security.js

@@ -0,0 +1,109 @@
+import { Command } from 'commander';
+import { existsSync, statSync } from 'fs';
+import { join } from 'path';
+import { homedir } from 'os';
+import { getAuthConfigAsync, getKeyStorageMethod } from '../auth/index.js';
+import { keychainAvailable, getKeychainPlatformName } from '../auth/keychain.js';
+export const securityCommand = new Command('security')
+    .description('Show security and key storage details')
+    .action(async () => {
+    try {
+        console.log('skrypt security\n');
+        const configDir = join(homedir(), '.skrypt');
+        const authFile = join(configDir, 'auth.json');
+        // 1. Key Storage
+        console.log('  \x1b[1mKey Storage\x1b[0m');
+        const method = await getKeyStorageMethod();
+        const hasKeychain = await keychainAvailable();
+        if (method === 'env') {
+            console.log('  ✓ Using SKRYPT_API_KEY environment variable');
+        }
+        else if (method === 'keychain') {
+            console.log(`  ✓ API key stored in ${getKeychainPlatformName()}`);
+            console.log('    Hardware-backed encryption (Secure Enclave on macOS)');
+        }
+        else if (method === 'file') {
+            console.log(`  ● API key stored in ${authFile}`);
+            console.log('    File permissions: 0600 (owner read/write only)');
+            if (!hasKeychain) {
+                console.log('    \x1b[33mTip: Install @napi-rs/keyring for OS keychain storage\x1b[0m');
+            }
+        }
+        else {
+            console.log('  ○ No API key configured');
+            console.log('    Run: skrypt login');
+        }
+        console.log('');
+        // 2. Data Flow
+        console.log('  \x1b[1mData Flow\x1b[0m');
+        const envKeys = {
+            OPENAI_API_KEY: !!process.env.OPENAI_API_KEY,
+            ANTHROPIC_API_KEY: !!process.env.ANTHROPIC_API_KEY,
+            GOOGLE_API_KEY: !!process.env.GOOGLE_API_KEY,
+            DEEPSEEK_API_KEY: !!process.env.DEEPSEEK_API_KEY,
+        };
+        const hasBYOK = Object.values(envKeys).some(Boolean);
+        if (hasBYOK) {
+            const providers = Object.entries(envKeys)
+                .filter(([, v]) => v)
+                .map(([k]) => k.replace('_API_KEY', '').toLowerCase());
+            console.log(`  ✓ BYOK mode: LLM calls go directly to ${providers.join(', ')}`);
+            console.log('    Your keys never touch Skrypt servers');
+        }
+        else {
+            const config = await getAuthConfigAsync();
+            if (config.apiKey) {
+                console.log('  ● Proxy mode: LLM calls routed through Skrypt API');
+                console.log('    Your Skrypt key authenticates requests');
+            }
+            else {
+                console.log('  ○ No provider keys or Skrypt key configured');
+            }
+        }
+        console.log('');
+        // 3. Server-Side Security
+        console.log('  \x1b[1mServer-Side Security\x1b[0m');
+        console.log('  • API keys hashed with SHA-256 — never stored in plaintext');
+        console.log('  • Encrypted at rest with AES-256 via AWS KMS');
+        console.log('  • TLS 1.3 for all API communication');
+        console.log('');
+        // 4. Permissions
+        console.log('  \x1b[1mPermissions\x1b[0m');
+        if (existsSync(configDir)) {
+            try {
+                const dirStat = statSync(configDir);
+                const dirMode = (dirStat.mode & 0o777).toString(8);
+                console.log(`  ~/.skrypt/         ${dirMode} (${dirMode === '700' ? '✓' : '⚠ expected 700'})`);
+            }
+            catch {
+                console.log('  ~/.skrypt/         unable to read');
+            }
+            if (existsSync(authFile)) {
+                try {
+                    const fileStat = statSync(authFile);
+                    const fileMode = (fileStat.mode & 0o777).toString(8);
+                    console.log(`  ~/.skrypt/auth.json ${fileMode} (${fileMode === '600' ? '✓' : '⚠ expected 600'})`);
+                }
+                catch {
+                    console.log('  ~/.skrypt/auth.json unable to read');
+                }
+            }
+        }
+        else {
+            console.log('  ~/.skrypt/ does not exist yet');
+        }
+        console.log('');
+        // 5. Environment
+        console.log('  \x1b[1mEnvironment\x1b[0m');
+        console.log(`  Platform:         ${process.platform}`);
+        console.log(`  OS keychain:      ${hasKeychain ? '✓ available' : '✗ not available'}`);
+        console.log(`  SKRYPT_API_KEY:   ${process.env.SKRYPT_API_KEY ? '✓ set' : '○ not set'}`);
+        console.log(`  OPENAI_API_KEY:   ${process.env.OPENAI_API_KEY ? '✓ set' : '○ not set'}`);
+        console.log(`  ANTHROPIC_API_KEY: ${process.env.ANTHROPIC_API_KEY ? '✓ set' : '○ not set'}`);
+        console.log('');
+    }
+    catch (err) {
+        console.error(`Error: ${err instanceof Error ? err.message : err}`);
+        process.exit(1);
+    }
+});

package/dist/commands/test.js

@@ -2,7 +2,7 @@ import { Command } from 'commander';
 import { existsSync, readFileSync, readdirSync, statSync } from 'fs';
 import { resolve, join, extname, relative } from 'path';
 import { spawn } from 'child_process';
-import { writeFileSync, unlinkSync, mkdirSync } from 'fs';
+import { writeFileSync, mkdirSync, rmSync } from 'fs';
 import { tmpdir } from 'os';
 import { randomUUID } from 'crypto';
 import { requirePro } from '../auth/index.js';
@@ -123,17 +123,10 @@ async function runCodeBlock(block, timeoutMs) {
     finally {
         // Cleanup temp directory
         try {
-            const files = readdirSync(tempDir);
-            for (const file of files) {
-                unlinkSync(join(tempDir, file));
-            }
-            readdirSync(tempDir); // Verify empty
-            // Remove the directory
-            const { rmdirSync } = await import('fs');
-            rmdirSync(tempDir);
+            rmSync(tempDir, { recursive: true, force: true });
         }
         catch {
-            // Ignore cleanup errors
+            // Ignore cleanup errors — OS will clean tmpdir
         }
     }
 }
@@ -241,95 +234,101 @@ export const testCommand = new Command('test')
     .option('-t, --timeout <ms>', 'Timeout per code block in milliseconds', '10000')
     .option('-v, --verbose', 'Show detailed output')
     .action(async (path, options) => {
-    // Pro feature - requires subscription
-    if (!await requirePro('test')) {
-        process.exit(1);
-    }
-    const targetPath = resolve(options.file || path);
-    if (!existsSync(targetPath)) {
-        console.error(`Error: Path not found: ${targetPath}`);
-        process.exit(1);
-    }
-    const timeoutMs = parseInt(options.timeout);
-    if (isNaN(timeoutMs) || timeoutMs <= 0) {
-        console.error(`Error: Invalid timeout value: ${options.timeout}`);
-        process.exit(1);
-    }
-    console.log('skrypt test');
-    console.log(`  path: ${targetPath}`);
-    if (options.language) {
-        console.log(`  language: ${options.language}`);
-    }
-    console.log(`  timeout: ${timeoutMs}ms`);
-    console.log('');
-    // Find all doc files
-    const files = statSync(targetPath).isDirectory()
-        ? findDocFiles(targetPath)
-        : [targetPath];
-    if (files.length === 0) {
-        console.log('No .md or .mdx files found.');
-        process.exit(0);
-    }
-    // Extract all code blocks
-    const allBlocks = [];
-    for (const file of files) {
-        const blocks = extractCodeBlocks(file, options.language);
-        allBlocks.push(...blocks);
-    }
-    if (allBlocks.length === 0) {
-        console.log('No testable code blocks found.');
-        if (options.language) {
-            console.log(`  (filtered by language: ${options.language})`);
+    try {
+        // Pro feature - requires subscription
+        if (!await requirePro('test')) {
+            process.exit(1);
         }
-        console.log(`  Supported languages: ${SUPPORTED_LANGUAGES.join(', ')}`);
-        process.exit(0);
-    }
-    console.log(`Found ${allBlocks.length} code block(s) in ${files.length} file(s)`);
-    console.log('');
-    console.log('Running tests...\n');
-    const results = [];
-    const failedBlocks = [];
-    const startTime = Date.now();
-    for (let i = 0; i < allBlocks.length; i++) {
-        const block = allBlocks[i];
-        if (!block)
-            continue;
-        const result = await runCodeBlock(block, timeoutMs);
-        results.push(result);
-        printResult(result, targetPath, options.verbose || false);
-        if (!result.passed) {
-            failedBlocks.push(block);
+        const targetPath = resolve(options.file || path);
+        if (!existsSync(targetPath)) {
+            console.error(`Error: Path not found: ${targetPath}`);
+            process.exit(1);
         }
-    }
-    const totalDuration = Date.now() - startTime;
-    const summary = {
-        total: allBlocks.length,
-        passed: results.filter(r => r.passed).length,
-        failed: results.filter(r => !r.passed).length,
-        skipped: 0,
-        duration: totalDuration,
-    };
-    printSummary(summary);
-    // Handle --fix flag
-    if (options.fix && failedBlocks.length > 0) {
-        console.log('');
-        console.log('Attempting to auto-fix failing examples...');
-        console.log('  Run: skrypt autofix <file> for each failing file');
+        const timeoutMs = parseInt(options.timeout);
+        if (isNaN(timeoutMs) || timeoutMs <= 0) {
+            console.error(`Error: Invalid timeout value: ${options.timeout}`);
+            process.exit(1);
+        }
+        console.log('skrypt test');
+        console.log(`  path: ${targetPath}`);
+        if (options.language) {
+            console.log(`  language: ${options.language}`);
+        }
+        console.log(`  timeout: ${timeoutMs}ms`);
         console.log('');
-        // Get unique files with failures
-        const failedFiles = [...new Set(failedBlocks.map(b => b.file))];
-        for (const file of failedFiles) {
-            console.log(`  → ${relative(targetPath, file)}`);
+        // Find all doc files
+        const files = statSync(targetPath).isDirectory()
+            ? findDocFiles(targetPath)
+            : [targetPath];
+        if (files.length === 0) {
+            console.log('No .md or .mdx files found.');
+            process.exit(0);
+        }
+        // Extract all code blocks
+        const allBlocks = [];
+        for (const file of files) {
+            const blocks = extractCodeBlocks(file, options.language);
+            allBlocks.push(...blocks);
+        }
+        if (allBlocks.length === 0) {
+            console.log('No testable code blocks found.');
+            if (options.language) {
+                console.log(`  (filtered by language: ${options.language})`);
+            }
+            console.log(`  Supported languages: ${SUPPORTED_LANGUAGES.join(', ')}`);
+            process.exit(0);
         }
+        console.log(`Found ${allBlocks.length} code block(s) in ${files.length} file(s)`);
         console.log('');
-        console.log('To auto-fix, run:');
-        for (const file of failedFiles) {
-            console.log(`  skrypt autofix "${file}"`);
+        console.log('Running tests...\n');
+        const results = [];
+        const failedBlocks = [];
+        const startTime = Date.now();
+        for (let i = 0; i < allBlocks.length; i++) {
+            const block = allBlocks[i];
+            if (!block)
+                continue;
+            const result = await runCodeBlock(block, timeoutMs);
+            results.push(result);
+            printResult(result, targetPath, options.verbose || false);
+            if (!result.passed) {
+                failedBlocks.push(block);
+            }
+        }
+        const totalDuration = Date.now() - startTime;
+        const summary = {
+            total: allBlocks.length,
+            passed: results.filter(r => r.passed).length,
+            failed: results.filter(r => !r.passed).length,
+            skipped: 0,
+            duration: totalDuration,
+        };
+        printSummary(summary);
+        // Handle --fix flag
+        if (options.fix && failedBlocks.length > 0) {
+            console.log('');
+            console.log('Attempting to auto-fix failing examples...');
+            console.log('  Run: skrypt autofix <file> for each failing file');
+            console.log('');
+            // Get unique files with failures
+            const failedFiles = [...new Set(failedBlocks.map(b => b.file))];
+            for (const file of failedFiles) {
+                console.log(`  → ${relative(targetPath, file)}`);
+            }
+            console.log('');
+            console.log('To auto-fix, run:');
+            for (const file of failedFiles) {
+                console.log(`  skrypt autofix "${file}"`);
+            }
         }
+        // Exit with error code if tests failed
+        if (summary.failed > 0) {
+            process.exit(1);
+        }
+        console.log('\nAll tests passed!');
     }
-    // Exit with error code if tests failed
-    if (summary.failed > 0) {
+    catch (err) {
+        console.error(`Error: ${err instanceof Error ? err.message : err}`);
         process.exit(1);
     }
-    console.log('\nAll tests passed!');
 });