feat(FN-4789): complete Step 2 — export manager and add optional keytar

Fusion-Task-Id: FN-4789
Fusion-Task-Lineage: cef0d12e-556e-43d8-9ce0-e4962c2d091b

packages/core/package.json

@@ -56,5 +56,8 @@
     "extract-zip": "^2.0.1",
     "tar": "^7.5.13",
     "yaml": "^2.8.3"
+  },
+  "optionalDependencies": {
+    "keytar": "^7.9.0"
   }
 }

packages/core/src/index.ts

@@ -159,6 +159,14 @@ export { detectLegacyData, migrateFromLegacy, getMigrationStatus } from "./db-mi
 export { GlobalSettingsStore, resolveGlobalDir } from "./global-settings.js";
 export { isValidSqliteDatabaseFile } from "./sqlite-validation.js";
 export { DaemonTokenManager, DAEMON_TOKEN_PREFIX, DAEMON_TOKEN_HEX_LENGTH, isDaemonTokenFormat } from "./daemon-token.js";
+export {
+  MasterKeyManager,
+  MASTER_KEY_KEYCHAIN_SERVICE,
+  MASTER_KEY_KEYCHAIN_ACCOUNT,
+  MASTER_KEY_FILENAME,
+  MasterKeyPermissionError,
+  MasterKeyCorruptError,
+} from "./master-key.js";
 export { discoverPiExtensions, formatPiExtensionSource, getEnabledPiExtensionPaths, getFusionAgentDir, getFusionAgentSettingsPath, getLegacyPiAgentDir, getPiExtensionDiscoveryDirs, reconcileClaudeCliPaths, reconcileDroidCliPaths, resolvePiExtensionProjectRoot, updatePiExtensionDisabledIds } from "./pi-extensions.js";
 export type { PiExtensionEntry, PiExtensionSettings, PiExtensionSource } from "./pi-extensions.js";
 export { canTransition, getValidTransitions, resolveDependencyOrder } from "./board.js";