xgen-dex-cli 1.2.0 → 1.2.2

package/dist/chunks/{chunk-QXSCKZEG.js → chunk-GS2Q7ZZA.js}

@@ -4437,21 +4437,103 @@ var DexEngine = class {
 };
 
 // ../../packages/engine/src/credential-store.ts
+import { chmodSync, existsSync, mkdirSync, readFileSync, renameSync, unlinkSync, writeFileSync } from "node:fs";
+import { dirname as dirname3, join as join3 } from "node:path";
 var SERVICE = "xgen-dex-cli";
 var ACCOUNT_PREFIX = "profile:";
+var activeBackend = "file";
+function credentialBackend() {
+  return activeBackend;
+}
+var keytarProbe = null;
+var KEYCHAIN_TIMEOUT_MS = 2e3;
+async function withTimeout2(work) {
+  let timer;
+  try {
+    return await Promise.race([
+      work,
+      new Promise((_, reject) => {
+        timer = setTimeout(() => reject(new Error("keychain timeout")), KEYCHAIN_TIMEOUT_MS);
+        timer.unref?.();
+      })
+    ]);
+  } finally {
+    if (timer) clearTimeout(timer);
+  }
+}
 async function loadKeytar() {
+  keytarProbe ??= (async () => {
+    if (process.env.DEX_NO_KEYCHAIN === "1") return null;
+    try {
+      const loaded = await import("keytar");
+      const keytar2 = loaded.default ?? loaded;
+      if (!keytar2.getPassword || !keytar2.setPassword || !keytar2.deletePassword) return null;
+      await withTimeout2(keytar2.getPassword(SERVICE, "__probe__"));
+      return keytar2;
+    } catch {
+      return null;
+    }
+  })();
+  const keytar = await keytarProbe;
+  activeBackend = keytar ? "keychain" : "file";
+  return keytar;
+}
+function filePath() {
+  return join3(dataDirectory(), "credentials.json");
+}
+function readFileStore() {
   try {
-    const loaded = await import("keytar");
-    const keytar = loaded.default ?? loaded;
-    if (!keytar.getPassword || !keytar.setPassword || !keytar.deletePassword) throw new Error("invalid keytar module");
-    return keytar;
-  } catch (error) {
-    throw new DexError(
-      "credential_store_unavailable",
-      "OS \uD0A4\uCCB4\uC778\uC744 \uC0AC\uC6A9\uD560 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4. keytar \uC124\uCE58\uC640 OS \uD0A4\uB9C1 \uC0C1\uD0DC\uB97C \uD655\uC778\uD558\uC138\uC694.",
-      error
-    );
+    const raw = readFileSync(filePath(), "utf8");
+    const parsed = JSON.parse(raw);
+    return parsed && typeof parsed === "object" ? parsed : {};
+  } catch {
+    return {};
+  }
+}
+function writeFileStore(values) {
+  const path = filePath();
+  mkdirSync(dirname3(path), { recursive: true });
+  const tmp = `${path}.tmp`;
+  writeFileSync(tmp, JSON.stringify(values, null, 2), { encoding: "utf8", mode: 384 });
+  try {
+    chmodSync(tmp, 384);
+  } catch {
+  }
+  renameSync(tmp, path);
+}
+async function secretGet(account) {
+  const keytar = await loadKeytar();
+  if (keytar) {
+    try {
+      return await withTimeout2(keytar.getPassword(SERVICE, account));
+    } catch {
+    }
   }
+  return readFileStore()[account] ?? null;
+}
+async function secretSet(account, value) {
+  const keytar = await loadKeytar();
+  if (keytar) {
+    try {
+      if (value === null) await withTimeout2(keytar.deletePassword(SERVICE, account));
+      else await withTimeout2(keytar.setPassword(SERVICE, account, value));
+      return;
+    } catch {
+      activeBackend = "file";
+    }
+  }
+  const values = readFileStore();
+  if (value === null) delete values[account];
+  else values[account] = value;
+  if (Object.keys(values).length === 0 && existsSync(filePath())) {
+    try {
+      unlinkSync(filePath());
+    } catch {
+      writeFileStore(values);
+    }
+    return;
+  }
+  writeFileStore(values);
 }
 function parseSession(raw) {
   if (!raw) return null;
@@ -4463,7 +4545,7 @@ function parseSession(raw) {
     return null;
   }
 }
-var KeytarCredentialStore = class {
+var SystemCredentialStore = class {
   /**
    * 엔진의 `SecretPort` 로 내보내는 두 함수 — 프로파일 세션 말고 **임의의 비밀**
    * (MCP 서버 시크릿 · OAuth 상태)을 같은 백엔드에 둔다.
@@ -4472,29 +4554,20 @@ var KeytarCredentialStore = class {
    * 하나의 질문이고, 두 곳에 나뉘면 로그아웃할 때 한쪽이 남는다.
    */
   async getRaw(name) {
-    const keytar = await loadKeytar();
-    return keytar.getPassword(SERVICE, name);
+    return secretGet(name);
   }
   async setRaw(name, value) {
-    const keytar = await loadKeytar();
-    if (value === null) {
-      await keytar.deletePassword(SERVICE, name);
-      return true;
-    }
-    await keytar.setPassword(SERVICE, name, value);
+    await secretSet(name, value);
     return true;
   }
   async get(profile) {
-    const keytar = await loadKeytar();
-    return parseSession(await keytar.getPassword(SERVICE, ACCOUNT_PREFIX + profile));
+    return parseSession(await secretGet(ACCOUNT_PREFIX + profile));
   }
   async set(profile, session) {
-    const keytar = await loadKeytar();
-    await keytar.setPassword(SERVICE, ACCOUNT_PREFIX + profile, JSON.stringify(session));
+    await secretSet(ACCOUNT_PREFIX + profile, JSON.stringify(session));
   }
   async delete(profile) {
-    const keytar = await loadKeytar();
-    await keytar.deletePassword(SERVICE, ACCOUNT_PREFIX + profile);
+    await secretSet(ACCOUNT_PREFIX + profile, null);
   }
 };
 
@@ -4555,6 +4628,7 @@ export {
   dataDirectory,
   FileConfigStore,
   DexEngine,
-  KeytarCredentialStore
+  credentialBackend,
+  SystemCredentialStore
 };
-//# sourceMappingURL=chunk-QXSCKZEG.js.map
+//# sourceMappingURL=chunk-GS2Q7ZZA.js.map