@1claw/sdk 0.2.0

package/dist/vault.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vault.d.ts","sourceRoot":"","sources":["../src/vault.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACzC,OAAO,KAAK,EACR,kBAAkB,EAClB,aAAa,EACb,iBAAiB,EACjB,eAAe,EAClB,MAAM,SAAS,CAAC;AAEjB;;GAEG;AACH,qBAAa,aAAa;IACV,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,UAAU;IAE7C,0BAA0B;IACpB,MAAM,CACR,OAAO,EAAE,kBAAkB,GAC5B,OAAO,CAAC,eAAe,CAAC,aAAa,CAAC,CAAC;IAS1C,kCAAkC;IAC5B,GAAG,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,aAAa,CAAC,CAAC;IAInE,6DAA6D;IACvD,IAAI,IAAI,OAAO,CAAC,eAAe,CAAC,iBAAiB,CAAC,CAAC;IAIzD,sDAAsD;IAChD,MAAM,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;CAGhE"}

package/dist/vault.js

@@ -0,0 +1,30 @@
+/**
+ * Vault resource — create, list, get, and delete encrypted vaults.
+ */
+export class VaultResource {
+    constructor(http) {
+        this.http = http;
+    }
+    /** Create a new vault. */
+    async create(options) {
+        return this.http.request("POST", "/v1/vaults", {
+            body: {
+                name: options.name,
+                description: options.description ?? "",
+            },
+        });
+    }
+    /** Fetch a single vault by ID. */
+    async get(vaultId) {
+        return this.http.request("GET", `/v1/vaults/${vaultId}`);
+    }
+    /** List all vaults visible to the authenticated identity. */
+    async list() {
+        return this.http.request("GET", "/v1/vaults");
+    }
+    /** Permanently delete a vault and all its secrets. */
+    async delete(vaultId) {
+        return this.http.request("DELETE", `/v1/vaults/${vaultId}`);
+    }
+}
+//# sourceMappingURL=vault.js.map

package/dist/vault.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vault.js","sourceRoot":"","sources":["../src/vault.ts"],"names":[],"mappings":"AAQA;;GAEG;AACH,MAAM,OAAO,aAAa;IACtB,YAA6B,IAAgB;QAAhB,SAAI,GAAJ,IAAI,CAAY;IAAG,CAAC;IAEjD,0BAA0B;IAC1B,KAAK,CAAC,MAAM,CACR,OAA2B;QAE3B,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAgB,MAAM,EAAE,YAAY,EAAE;YAC1D,IAAI,EAAE;gBACF,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,EAAE;aACzC;SACJ,CAAC,CAAC;IACP,CAAC;IAED,kCAAkC;IAClC,KAAK,CAAC,GAAG,CAAC,OAAe;QACrB,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAgB,KAAK,EAAE,cAAc,OAAO,EAAE,CAAC,CAAC;IAC5E,CAAC;IAED,6DAA6D;IAC7D,KAAK,CAAC,IAAI;QACN,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAoB,KAAK,EAAE,YAAY,CAAC,CAAC;IACrE,CAAC;IAED,sDAAsD;IACtD,KAAK,CAAC,MAAM,CAAC,OAAe;QACxB,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAO,QAAQ,EAAE,cAAc,OAAO,EAAE,CAAC,CAAC;IACtE,CAAC;CACJ"}

package/dist/x402.d.ts

@@ -0,0 +1,40 @@
+import type { HttpClient } from "./http";
+import type { PaymentRequirement, PaymentReceipt, X402Signer, SecretResponse, OneclawResponse } from "./types";
+/**
+ * x402 resource — interact with the x402 payment protocol.
+ *
+ * The x402 protocol enables HTTP 402 micropayments: when free-tier
+ * limits are exceeded, the API returns a 402 with payment instructions.
+ * This resource provides methods to inspect, pay, and verify those
+ * payment flows.
+ */
+export declare class X402Resource {
+    private readonly http;
+    private readonly signer?;
+    constructor(http: HttpClient, signer?: X402Signer | undefined);
+    /**
+     * Probe a resource path to get its x402 payment requirement
+     * without executing the request. Returns `null` if the resource
+     * does not require payment (free-tier is not exhausted).
+     */
+    getPaymentRequirement(resourcePath: string): Promise<PaymentRequirement | null>;
+    /**
+     * Sign and submit a payment for a given requirement.
+     * Requires an `X402Signer` to be configured on the client or passed here.
+     *
+     * @returns The payment payload string to attach as `X-PAYMENT` header.
+     */
+    pay(requirement: PaymentRequirement, signer?: X402Signer): Promise<string>;
+    /**
+     * Verify that a payment receipt is valid by re-requesting the resource
+     * with the payment header and checking for a successful response.
+     */
+    verifyReceipt(resourcePath: string, receipt: PaymentReceipt): Promise<boolean>;
+    /**
+     * Convenience method: pay for and then fetch a secret in one call.
+     * Handles the full 402 flow: request → receive 402 → sign payment →
+     * retry with payment header → return decrypted secret.
+     */
+    withPayment(vaultId: string, key: string, signer?: X402Signer): Promise<OneclawResponse<SecretResponse>>;
+}
+//# sourceMappingURL=x402.d.ts.map

package/dist/x402.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"x402.d.ts","sourceRoot":"","sources":["../src/x402.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACzC,OAAO,KAAK,EACR,kBAAkB,EAClB,cAAc,EACd,UAAU,EACV,cAAc,EACd,eAAe,EAClB,MAAM,SAAS,CAAC;AAGjB;;;;;;;GAOG;AACH,qBAAa,YAAY;IAEjB,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;gBADP,IAAI,EAAE,UAAU,EAChB,MAAM,CAAC,EAAE,UAAU,YAAA;IAGxC;;;;OAIG;IACG,qBAAqB,CACvB,YAAY,EAAE,MAAM,GACrB,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;IAmBrC;;;;;OAKG;IACG,GAAG,CACL,WAAW,EAAE,kBAAkB,EAC/B,MAAM,CAAC,EAAE,UAAU,GACpB,OAAO,CAAC,MAAM,CAAC;IA2BlB;;;OAGG;IACG,aAAa,CACf,YAAY,EAAE,MAAM,EACpB,OAAO,EAAE,cAAc,GACxB,OAAO,CAAC,OAAO,CAAC;IAanB;;;;OAIG;IACG,WAAW,CACb,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,MAAM,EACX,MAAM,CAAC,EAAE,UAAU,GACpB,OAAO,CAAC,eAAe,CAAC,cAAc,CAAC,CAAC;CAkD9C"}

package/dist/x402.js

@@ -0,0 +1,129 @@
+import { errorFromResponse } from "./errors";
+/**
+ * x402 resource — interact with the x402 payment protocol.
+ *
+ * The x402 protocol enables HTTP 402 micropayments: when free-tier
+ * limits are exceeded, the API returns a 402 with payment instructions.
+ * This resource provides methods to inspect, pay, and verify those
+ * payment flows.
+ */
+export class X402Resource {
+    constructor(http, signer) {
+        this.http = http;
+        this.signer = signer;
+    }
+    /**
+     * Probe a resource path to get its x402 payment requirement
+     * without executing the request. Returns `null` if the resource
+     * does not require payment (free-tier is not exhausted).
+     */
+    async getPaymentRequirement(resourcePath) {
+        const url = `${this.http.getBaseUrl()}${resourcePath}`;
+        const headers = {
+            "Content-Type": "application/json",
+        };
+        const token = this.http.getToken();
+        if (token)
+            headers["Authorization"] = `Bearer ${token}`;
+        const res = await fetch(url, {
+            method: "GET",
+            headers,
+        });
+        if (res.status === 402) {
+            return (await res.json());
+        }
+        return null;
+    }
+    /**
+     * Sign and submit a payment for a given requirement.
+     * Requires an `X402Signer` to be configured on the client or passed here.
+     *
+     * @returns The payment payload string to attach as `X-PAYMENT` header.
+     */
+    async pay(requirement, signer) {
+        const activeSigner = signer ?? this.signer;
+        if (!activeSigner) {
+            throw new Error("No x402 signer configured. Pass one to createClient({ x402Signer }) " +
+                "or to x402.pay(requirement, signer).");
+        }
+        const accept = requirement.accepts[0];
+        if (!accept) {
+            throw new Error("Payment requirement has no accepted payment methods");
+        }
+        const signature = await activeSigner.signPayment(accept);
+        const payload = {
+            x402Version: requirement.x402Version,
+            scheme: accept.scheme,
+            network: accept.network,
+            payload: signature,
+        };
+        return JSON.stringify(payload);
+    }
+    /**
+     * Verify that a payment receipt is valid by re-requesting the resource
+     * with the payment header and checking for a successful response.
+     */
+    async verifyReceipt(resourcePath, receipt) {
+        const url = `${this.http.getBaseUrl()}${resourcePath}`;
+        const headers = {
+            "Content-Type": "application/json",
+            "X-PAYMENT": JSON.stringify(receipt),
+        };
+        const token = this.http.getToken();
+        if (token)
+            headers["Authorization"] = `Bearer ${token}`;
+        const res = await fetch(url, { method: "GET", headers });
+        return res.ok;
+    }
+    /**
+     * Convenience method: pay for and then fetch a secret in one call.
+     * Handles the full 402 flow: request → receive 402 → sign payment →
+     * retry with payment header → return decrypted secret.
+     */
+    async withPayment(vaultId, key, signer) {
+        const path = `/v1/vaults/${vaultId}/secrets/${key}`;
+        const url = `${this.http.getBaseUrl()}${path}`;
+        const headers = {
+            "Content-Type": "application/json",
+        };
+        const token = this.http.getToken();
+        if (token)
+            headers["Authorization"] = `Bearer ${token}`;
+        const firstAttempt = await fetch(url, { method: "GET", headers });
+        if (firstAttempt.status !== 402) {
+            if (!firstAttempt.ok) {
+                const err = await errorFromResponse(firstAttempt);
+                return {
+                    data: null,
+                    error: { type: err.type, message: err.message },
+                    meta: { status: firstAttempt.status },
+                };
+            }
+            return {
+                data: (await firstAttempt.json()),
+                error: null,
+                meta: { status: firstAttempt.status },
+            };
+        }
+        const requirement = (await firstAttempt.json());
+        const paymentHeader = await this.pay(requirement, signer);
+        const retry = await fetch(url, {
+            method: "GET",
+            headers: { ...headers, "X-PAYMENT": paymentHeader },
+        });
+        if (!retry.ok) {
+            const err = await errorFromResponse(retry);
+            return {
+                data: null,
+                error: { type: err.type, message: err.message },
+                meta: { status: retry.status },
+            };
+        }
+        return {
+            data: (await retry.json()),
+            error: null,
+            meta: { status: retry.status },
+        };
+    }
+}
+//# sourceMappingURL=x402.js.map

package/dist/x402.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"x402.js","sourceRoot":"","sources":["../src/x402.ts"],"names":[],"mappings":"AAQA,OAAO,EAAwB,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAEnE;;;;;;;GAOG;AACH,MAAM,OAAO,YAAY;IACrB,YACqB,IAAgB,EAChB,MAAmB;QADnB,SAAI,GAAJ,IAAI,CAAY;QAChB,WAAM,GAAN,MAAM,CAAa;IACrC,CAAC;IAEJ;;;;OAIG;IACH,KAAK,CAAC,qBAAqB,CACvB,YAAoB;QAEpB,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,YAAY,EAAE,CAAC;QACvD,MAAM,OAAO,GAA2B;YACpC,cAAc,EAAE,kBAAkB;SACrC,CAAC;QACF,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACnC,IAAI,KAAK;YAAE,OAAO,CAAC,eAAe,CAAC,GAAG,UAAU,KAAK,EAAE,CAAC;QAExD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YACzB,MAAM,EAAE,KAAK;YACb,OAAO;SACV,CAAC,CAAC;QAEH,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACrB,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAuB,CAAC;QACpD,CAAC;QACD,OAAO,IAAI,CAAC;IAChB,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,GAAG,CACL,WAA+B,EAC/B,MAAmB;QAEnB,MAAM,YAAY,GAAG,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC;QAC3C,IAAI,CAAC,YAAY,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CACX,sEAAsE;gBAClE,sCAAsC,CAC7C,CAAC;QACN,CAAC;QAED,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,MAAM,IAAI,KAAK,CACX,qDAAqD,CACxD,CAAC;QACN,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QACzD,MAAM,OAAO,GAAG;YACZ,WAAW,EAAE,WAAW,CAAC,WAAW;YACpC,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,OAAO,EAAE,SAAS;SACrB,CAAC;QAEF,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IACnC,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,aAAa,CACf,YAAoB,EACpB,OAAuB;QAEvB,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,YAAY,EAAE,CAAC;QACvD,MAAM,OAAO,GAA2B;YACpC,cAAc,EAAE,kBAAkB;YAClC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;SACvC,CAAC;QACF,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACnC,IAAI,KAAK;YAAE,OAAO,CAAC,eAAe,CAAC,GAAG,UAAU,KAAK,EAAE,CAAC;QAExD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QACzD,OAAO,GAAG,CAAC,EAAE,CAAC;IAClB,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,WAAW,CACb,OAAe,EACf,GAAW,EACX,MAAmB;QAEnB,MAAM,IAAI,GAAG,cAAc,OAAO,YAAY,GAAG,EAAE,CAAC;QACpD,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,IAAI,EAAE,CAAC;QAC/C,MAAM,OAAO,GAA2B;YACpC,cAAc,EAAE,kBAAkB;SACrC,CAAC;QACF,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACnC,IAAI,KAAK;YAAE,OAAO,CAAC,eAAe,CAAC,GAAG,UAAU,KAAK,EAAE,CAAC;QAExD,MAAM,YAAY,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QAElE,IAAI,YAAY,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC9B,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC;gBACnB,MAAM,GAAG,GAAG,MAAM,iBAAiB,CAAC,YAAY,CAAC,CAAC;gBAClD,OAAO;oBACH,IAAI,EAAE,IAAI;oBACV,KAAK,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE;oBAC/C,IAAI,EAAE,EAAE,MAAM,EAAE,YAAY,CAAC,MAAM,EAAE;iBACxC,CAAC;YACN,CAAC;YACD,OAAO;gBACH,IAAI,EAAE,CAAC,MAAM,YAAY,CAAC,IAAI,EAAE,CAAmB;gBACnD,KAAK,EAAE,IAAI;gBACX,IAAI,EAAE,EAAE,MAAM,EAAE,YAAY,CAAC,MAAM,EAAE;aACxC,CAAC;QACN,CAAC;QAED,MAAM,WAAW,GAAG,CAAC,MAAM,YAAY,CAAC,IAAI,EAAE,CAAuB,CAAC;QACtE,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QAE1D,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAC3B,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE;SACtD,CAAC,CAAC;QAEH,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,GAAG,GAAG,MAAM,iBAAiB,CAAC,KAAK,CAAC,CAAC;YAC3C,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE;gBAC/C,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE;aACjC,CAAC;QACN,CAAC;QAED,OAAO;YACH,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,IAAI,EAAE,CAAmB;YAC5C,KAAK,EAAE,IAAI;YACX,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE;SACjC,CAAC;IACN,CAAC;CACJ"}

package/package.json

@@ -0,0 +1,47 @@
+{
+    "name": "@1claw/sdk",
+    "version": "0.2.0",
+    "description": "TypeScript SDK for 1Claw Vault — secret management for AI agents",
+    "type": "module",
+    "main": "dist/index.js",
+    "types": "dist/index.d.ts",
+    "exports": {
+        ".": {
+            "types": "./dist/index.d.ts",
+            "import": "./dist/index.js"
+        },
+        "./mcp": {
+            "types": "./dist/mcp/index.d.ts",
+            "import": "./dist/mcp/index.js"
+        }
+    },
+    "files": [
+        "dist",
+        "README.md"
+    ],
+    "scripts": {
+        "build": "tsc",
+        "clean": "rm -rf dist",
+        "test": "vitest",
+        "prepublishOnly": "npm run clean && npm run build"
+    },
+    "keywords": [
+        "secrets",
+        "vault",
+        "ai-agents",
+        "x402",
+        "hsm",
+        "mcp",
+        "model-context-protocol"
+    ],
+    "license": "PolyForm-Noncommercial-1.0.0",
+    "repository": {
+        "type": "git",
+        "url": "https://github.com/1clawAI/1claw-sdk.git"
+    },
+    "dependencies": {},
+    "devDependencies": {
+        "typescript": "^5.0.0",
+        "vitest": "^3.0.0"
+    }
+}