@acr-js/meta-mcp 0.8.2

package/dist/apps/control-plane-api/test/context7-e2e.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context7-e2e.test.js","sourceRoot":"","sources":["../../../../apps/control-plane-api/test/context7-e2e.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AACxD,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEjD,QAAQ,CAAC,kDAAkD,EAAE,GAAG,EAAE;IAChE,MAAM,SAAS,GAAG,KAAK,CAAC;IACxB,MAAM,QAAQ,GAAG,oBAAoB,SAAS,EAAE,CAAC;IACjD,MAAM,eAAe,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,+BAA+B,CAAC;IACxF,IAAI,MAAqB,CAAC;IAE1B,MAAM,CAAC,KAAK,IAAI,EAAE;QAChB,MAAM,GAAG,IAAI,aAAa,EAAE,CAAC;QAC7B,MAAM,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,KAAK,CAAC,KAAK,IAAI,EAAE;QACf,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;IACtB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kFAAkF,EAAE,KAAK,IAAI,EAAE;QAChG,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,QAAQ,gCAAgC,EAAE;YACnE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,iBAAiB,EAAE,qBAAqB;aACzC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,QAAQ,EAAE,UAAU;gBACpB,GAAG,EAAE,kBAAkB;gBACvB,KAAK,EAAE,eAAe;gBACtB,MAAM,EAAE,UAAU;gBAClB,MAAM,EAAE,mBAAmB;aAC5B,CAAC;SACH,CAAC,CAAC;QAEH,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAC9B,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAQ,CAAC;QACvC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACjC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAC/C,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+EAA+E,EAAE,KAAK,IAAI,EAAE;QAC7F,MAAM,cAAc,GAAG;YACrB,UAAU,EAAE;gBACV,QAAQ,EAAE;oBACR,OAAO,EAAE,KAAK;oBACd,IAAI,EAAE,CAAC,IAAI,EAAE,uBAAuB,EAAE,WAAW,EAAE,qBAAqB,CAAC;oBACzE,GAAG,EAAE;wBACH,gBAAgB,EAAE,qBAAqB;qBACxC;iBACF;aACF;SACF,CAAC;QAEF,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,QAAQ,iCAAiC,EAAE;YACpE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,iBAAiB,EAAE,oCAAoC;aACxD;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC;SACrC,CAAC,CAAC;QAEH,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAC9B,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAQ,CAAC;QACvC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACjC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC;QACtD,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,MAAM,KAAK,EAAE,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sEAAsE,EAAE,KAAK,IAAI,EAAE;QACpF,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,QAAQ,0BAA0B,CAAC,CAAC;QAC/D,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAC9B,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAQ,CAAC;QAEvC,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,UAAU,CAAC,CAAC;QAC1E,MAAM,CAAC,EAAE,CAAC,cAAc,EAAE,sCAAsC,CAAC,CAAC;QAClE,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC3C,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;QAChD,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACtE,MAAM,CAAC,OAAe,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,EAAE;YAChD;gBACE,IAAI,EAAE,oBAAoB;gBAC1B,WAAW,EAAE,uEAAuE;gBACpF,WAAW,EAAE;oBACX,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;oBAC/C,QAAQ,EAAE,CAAC,aAAa,CAAC;iBAC1B;aACF;YACD;gBACE,IAAI,EAAE,YAAY;gBAClB,WAAW,EAAE,4DAA4D;gBACzE,WAAW,EAAE;oBACX,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;wBAC7B,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;qBAC1B;oBACD,QAAQ,EAAE,CAAC,WAAW,EAAE,OAAO,CAAC;iBACjC;aACF;SACF,CAAC,CAAC;QAEH,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;QAE9D,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,QAAQ,uCAAuC,EAAE;YAC1E,OAAO,EAAE;gBACP,iBAAiB,EAAE,iCAAiC;gBACpD,YAAY,EAAE,OAAO;aACtB;SACF,CAAC,CAAC;QAEH,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAC9B,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAQ,CAAC;QACvC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACzB,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,8BAA8B,CAAC,CAAC,CAAC;QAC7E,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,sBAAsB,CAAC,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,KAAK,IAAI,EAAE;QACjF,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,QAAQ,6BAA6B,EAAE;YAChE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,iBAAiB,EAAE,iCAAiC;gBACpD,YAAY,EAAE,OAAO;aACtB;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,QAAQ,EAAE,8BAA8B;gBACxC,IAAI,EAAE,EAAE,WAAW,EAAE,SAAS,EAAE;aACjC,CAAC;SACH,CAAC,CAAC;QAEH,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAC9B,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAQ,CAAC;QACvC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QACrC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC;QAC5D,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,KAAK,IAAI,EAAE;QACjF,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,QAAQ,MAAM,EAAE;YACzC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,iBAAiB,EAAE,iCAAiC;aACrD;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,OAAO,EAAE,KAAK;gBACd,EAAE,EAAE,GAAG;gBACP,MAAM,EAAE,YAAY;gBACpB,MAAM,EAAE;oBACN,IAAI,EAAE,sBAAsB;oBAC5B,SAAS,EAAE;wBACT,SAAS,EAAE,iBAAiB;wBAC5B,KAAK,EAAE,2BAA2B;qBACnC;iBACF;aACF,CAAC;SACH,CAAC,CAAC;QAEH,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAC9B,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAQ,CAAC;QACvC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAClC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QAC3B,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2EAA2E,EAAE,KAAK,IAAI,EAAE;QACzF,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,QAAQ,gCAAgC,CAAC,CAAC;QAC1E,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACnC,MAAM,SAAS,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAQ,CAAC;QACjD,MAAM,CAAC,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC;QAEzE,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,QAAQ,iCAAiC,CAAC,CAAC;QAC3E,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACnC,MAAM,SAAS,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAQ,CAAC;QACjD,MAAM,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAC5G,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/packages/auth-vault/src/crypto.d.ts

@@ -0,0 +1,25 @@
+import { CipherAlgorithm, EncryptedPayload, KdfAlgorithm } from './types.js';
+export declare const DEFAULT_SALT = "acr-meta-mcp-vault-salt-v1";
+export declare const DEFAULT_SQLCIPHER_ITERATIONS = 256000;
+/**
+ * Derives a 256-bit encryption key and HMAC key using PBKDF2-HMAC-SHA512 or Scrypt.
+ */
+export declare function deriveKey(masterSecret: string, salt?: string | Buffer, kdf?: KdfAlgorithm, iterations?: number): {
+    encKey: Buffer;
+    hmacKey: Buffer;
+};
+/**
+ * Encrypts data using the selected cipher scheme (AES-GCM, ChaCha20-Poly1305, or SQLCipher-v4 CBC+HMAC).
+ */
+export declare function encryptSecret(plainText: string, keys: {
+    encKey: Buffer;
+    hmacKey: Buffer;
+}, algorithm?: CipherAlgorithm): EncryptedPayload;
+/**
+ * Decrypts data using the corresponding algorithm and keys with strict MAC / AEAD validation.
+ */
+export declare function decryptSecret(payload: EncryptedPayload, keys: {
+    encKey: Buffer;
+    hmacKey: Buffer;
+}): string;
+//# sourceMappingURL=crypto.d.ts.map

package/dist/packages/auth-vault/src/crypto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.d.ts","sourceRoot":"","sources":["../../../../packages/auth-vault/src/crypto.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE7E,eAAO,MAAM,YAAY,+BAA+B,CAAC;AACzD,eAAO,MAAM,4BAA4B,SAAS,CAAC;AAEnD;;GAEG;AACH,wBAAgB,SAAS,CACvB,YAAY,EAAE,MAAM,EACpB,IAAI,GAAE,MAAM,GAAG,MAAqB,EACpC,GAAG,GAAE,YAA8B,EACnC,UAAU,GAAE,MAAqC,GAChD;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAkBrC;AAED;;GAEG;AACH,wBAAgB,aAAa,CAC3B,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,EACzC,SAAS,GAAE,eAA+B,GACzC,gBAAgB,CAqDlB;AAED;;GAEG;AACH,wBAAgB,aAAa,CAC3B,OAAO,EAAE,gBAAgB,EACzB,IAAI,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACxC,MAAM,CAkDR"}

package/dist/packages/auth-vault/src/crypto.js

@@ -0,0 +1,117 @@
+import { createCipheriv, createDecipheriv, createHmac, pbkdf2Sync, randomBytes, scryptSync, timingSafeEqual, } from 'node:crypto';
+export const DEFAULT_SALT = 'acr-meta-mcp-vault-salt-v1';
+export const DEFAULT_SQLCIPHER_ITERATIONS = 256000;
+/**
+ * Derives a 256-bit encryption key and HMAC key using PBKDF2-HMAC-SHA512 or Scrypt.
+ */
+export function deriveKey(masterSecret, salt = DEFAULT_SALT, kdf = 'pbkdf2-sha512', iterations = DEFAULT_SQLCIPHER_ITERATIONS) {
+    const saltBuf = typeof salt === 'string' ? Buffer.from(salt, 'utf8') : salt;
+    if (kdf === 'pbkdf2-sha512') {
+        // 64 bytes total: first 32 bytes for AES/ChaCha, second 32 bytes for HMAC
+        const derived = pbkdf2Sync(masterSecret, saltBuf, iterations, 64, 'sha512');
+        return {
+            encKey: derived.subarray(0, 32),
+            hmacKey: derived.subarray(32, 64),
+        };
+    }
+    else {
+        // Scrypt KDF fallback
+        const derived = scryptSync(masterSecret, saltBuf, 64);
+        return {
+            encKey: derived.subarray(0, 32),
+            hmacKey: derived.subarray(32, 64),
+        };
+    }
+}
+/**
+ * Encrypts data using the selected cipher scheme (AES-GCM, ChaCha20-Poly1305, or SQLCipher-v4 CBC+HMAC).
+ */
+export function encryptSecret(plainText, keys, algorithm = 'aes-256-gcm') {
+    if (algorithm === 'chacha20-poly1305') {
+        const iv = randomBytes(12); // 96-bit nonce
+        const cipher = createCipheriv('chacha20-poly1305', keys.encKey, iv, {
+            authTagLength: 16,
+        });
+        let encrypted = cipher.update(plainText, 'utf8', 'hex');
+        encrypted += cipher.final('hex');
+        const tag = cipher.getAuthTag().toString('hex');
+        return {
+            algorithm,
+            ciphertext: encrypted,
+            iv: iv.toString('hex'),
+            tag,
+        };
+    }
+    else if (algorithm === 'sqlcipher-v4') {
+        // SQLCipher mode: AES-256-CBC with HMAC-SHA512 authentication tag
+        const iv = randomBytes(16); // 128-bit CBC IV
+        const cipher = createCipheriv('aes-256-cbc', keys.encKey, iv);
+        let encrypted = cipher.update(plainText, 'utf8', 'hex');
+        encrypted += cipher.final('hex');
+        // HMAC over IV + Ciphertext using hmacKey
+        const hmac = createHmac('sha512', keys.hmacKey);
+        hmac.update(iv);
+        hmac.update(Buffer.from(encrypted, 'hex'));
+        const tag = hmac.digest('hex');
+        return {
+            algorithm,
+            ciphertext: encrypted,
+            iv: iv.toString('hex'),
+            tag,
+        };
+    }
+    else {
+        // Default: AES-256-GCM (AEAD)
+        const iv = randomBytes(12);
+        const cipher = createCipheriv('aes-256-gcm', keys.encKey, iv);
+        let encrypted = cipher.update(plainText, 'utf8', 'hex');
+        encrypted += cipher.final('hex');
+        const tag = cipher.getAuthTag().toString('hex');
+        return {
+            algorithm: 'aes-256-gcm',
+            ciphertext: encrypted,
+            iv: iv.toString('hex'),
+            tag,
+        };
+    }
+}
+/**
+ * Decrypts data using the corresponding algorithm and keys with strict MAC / AEAD validation.
+ */
+export function decryptSecret(payload, keys) {
+    const algorithm = payload.algorithm || 'aes-256-gcm';
+    if (algorithm === 'chacha20-poly1305') {
+        const decipher = createDecipheriv('chacha20-poly1305', keys.encKey, Buffer.from(payload.iv, 'hex'), { authTagLength: 16 });
+        decipher.setAuthTag(Buffer.from(payload.tag, 'hex'));
+        let decrypted = decipher.update(payload.ciphertext, 'hex', 'utf8');
+        decrypted += decipher.final('utf8');
+        return decrypted;
+    }
+    else if (algorithm === 'sqlcipher-v4') {
+        const iv = Buffer.from(payload.iv, 'hex');
+        const ciphertextBuf = Buffer.from(payload.ciphertext, 'hex');
+        // Verify HMAC-SHA512 in constant time
+        const hmac = createHmac('sha512', keys.hmacKey);
+        hmac.update(iv);
+        hmac.update(ciphertextBuf);
+        const expectedTag = hmac.digest();
+        const providedTag = Buffer.from(payload.tag, 'hex');
+        if (expectedTag.length !== providedTag.length ||
+            !timingSafeEqual(expectedTag, providedTag)) {
+            throw new Error('SQLCipher HMAC authentication failed: Corrupt or tampered secret record.');
+        }
+        const decipher = createDecipheriv('aes-256-cbc', keys.encKey, iv);
+        let decrypted = decipher.update(payload.ciphertext, 'hex', 'utf8');
+        decrypted += decipher.final('utf8');
+        return decrypted;
+    }
+    else {
+        // AES-256-GCM
+        const decipher = createDecipheriv('aes-256-gcm', keys.encKey, Buffer.from(payload.iv, 'hex'));
+        decipher.setAuthTag(Buffer.from(payload.tag, 'hex'));
+        let decrypted = decipher.update(payload.ciphertext, 'hex', 'utf8');
+        decrypted += decipher.final('utf8');
+        return decrypted;
+    }
+}
+//# sourceMappingURL=crypto.js.map

package/dist/packages/auth-vault/src/crypto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.js","sourceRoot":"","sources":["../../../../packages/auth-vault/src/crypto.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,EACd,gBAAgB,EAChB,UAAU,EACV,UAAU,EACV,WAAW,EACX,UAAU,EACV,eAAe,GAChB,MAAM,aAAa,CAAC;AAGrB,MAAM,CAAC,MAAM,YAAY,GAAG,4BAA4B,CAAC;AACzD,MAAM,CAAC,MAAM,4BAA4B,GAAG,MAAM,CAAC;AAEnD;;GAEG;AACH,MAAM,UAAU,SAAS,CACvB,YAAoB,EACpB,IAAI,GAAoB,YAAY,EACpC,GAAG,GAAiB,eAAe,EACnC,UAAU,GAAW,4BAA4B;IAEjD,MAAM,OAAO,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAE5E,IAAI,GAAG,KAAK,eAAe,EAAE,CAAC;QAC5B,0EAA0E;QAC1E,MAAM,OAAO,GAAG,UAAU,CAAC,YAAY,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,EAAE,QAAQ,CAAC,CAAC;QAC5E,OAAO;YACL,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC;YAC/B,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC;SAClC,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,sBAAsB;QACtB,MAAM,OAAO,GAAG,UAAU,CAAC,YAAY,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;QACtD,OAAO;YACL,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC;YAC/B,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC;SAClC,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAC3B,SAAiB,EACjB,IAAyC,EACzC,SAAS,GAAoB,aAAa;IAE1C,IAAI,SAAS,KAAK,mBAAmB,EAAE,CAAC;QACtC,MAAM,EAAE,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,eAAe;QAC3C,MAAM,MAAM,GAAG,cAAc,CAAC,mBAAmB,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,EAAE;YAClE,aAAa,EAAE,EAAE;SAClB,CAAC,CAAC;QAEH,IAAI,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;QACxD,SAAS,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACjC,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAEhD,OAAO;YACL,SAAS;YACT,UAAU,EAAE,SAAS;YACrB,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC;YACtB,GAAG;SACJ,CAAC;IACJ,CAAC;SAAM,IAAI,SAAS,KAAK,cAAc,EAAE,CAAC;QACxC,kEAAkE;QAClE,MAAM,EAAE,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,iBAAiB;QAC7C,MAAM,MAAM,GAAG,cAAc,CAAC,aAAa,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAE9D,IAAI,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;QACxD,SAAS,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAEjC,0CAA0C;QAC1C,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QAChD,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAChB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC;QAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAE/B,OAAO;YACL,SAAS;YACT,UAAU,EAAE,SAAS;YACrB,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC;YACtB,GAAG;SACJ,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,8BAA8B;QAC9B,MAAM,EAAE,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;QAC3B,MAAM,MAAM,GAAG,cAAc,CAAC,aAAa,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAE9D,IAAI,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;QACxD,SAAS,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACjC,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAEhD,OAAO;YACL,SAAS,EAAE,aAAa;YACxB,UAAU,EAAE,SAAS;YACrB,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC;YACtB,GAAG;SACJ,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAC3B,OAAyB,EACzB,IAAyC;IAEzC,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,aAAa,CAAC;IAErD,IAAI,SAAS,KAAK,mBAAmB,EAAE,CAAC;QACtC,MAAM,QAAQ,GAAG,gBAAgB,CAC/B,mBAAmB,EACnB,IAAI,CAAC,MAAM,EACX,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,CAAC,EAC9B,EAAE,aAAa,EAAE,EAAE,EAAE,CACtB,CAAC;QACF,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;QAErD,IAAI,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;QACnE,SAAS,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACpC,OAAO,SAAS,CAAC;IACnB,CAAC;SAAM,IAAI,SAAS,KAAK,cAAc,EAAE,CAAC;QACxC,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QAC1C,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QAE7D,sCAAsC;QACtC,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QAChD,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAChB,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QAC3B,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QAClC,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAEpD,IACE,WAAW,CAAC,MAAM,KAAK,WAAW,CAAC,MAAM;YACzC,CAAC,eAAe,CAAC,WAAW,EAAE,WAAW,CAAC,EAC1C,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,0EAA0E,CAAC,CAAC;QAC9F,CAAC;QAED,MAAM,QAAQ,GAAG,gBAAgB,CAAC,aAAa,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAClE,IAAI,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;QACnE,SAAS,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACpC,OAAO,SAAS,CAAC;IACnB,CAAC;SAAM,CAAC;QACN,cAAc;QACd,MAAM,QAAQ,GAAG,gBAAgB,CAC/B,aAAa,EACb,IAAI,CAAC,MAAM,EACX,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,CAAC,CAC/B,CAAC;QACF,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;QAErD,IAAI,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;QACnE,SAAS,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACpC,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC"}

package/dist/packages/auth-vault/src/db.d.ts

@@ -0,0 +1,33 @@
+import { CipherAlgorithm, KdfAlgorithm, VaultSecretEntry } from './types.js';
+export declare class AcrMultipleCiphersDb {
+    readonly dbPath?: string;
+    private readonly cipher;
+    private readonly kdf;
+    private readonly kdfIterations;
+    private keys;
+    private salt;
+    private metadata;
+    private entries;
+    private isLoaded;
+    constructor(options: {
+        dbPath?: string;
+        masterSecret: string;
+        cipher?: CipherAlgorithm;
+        kdf?: KdfAlgorithm;
+        kdfIterations?: number;
+    });
+    private computeHeaderHmac;
+    private loadFromFile;
+    saveToFile(): void;
+    putEntry(entry: VaultSecretEntry): void;
+    getEntry(refId: string): VaultSecretEntry | undefined;
+    deleteEntry(refId: string): boolean;
+    getAllEntries(): VaultSecretEntry[];
+    getKeys(): {
+        encKey: Buffer;
+        hmacKey: Buffer;
+    };
+    getCipher(): CipherAlgorithm;
+    rotateMasterKey(newMasterSecret: string): void;
+}
+//# sourceMappingURL=db.d.ts.map

package/dist/packages/auth-vault/src/db.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"db.d.ts","sourceRoot":"","sources":["../../../../packages/auth-vault/src/db.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,eAAe,EAAE,YAAY,EAAmB,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAG9F,qBAAa,oBAAoB;IAC/B,SAAgB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAkB;IACzC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;IACnC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IACvC,OAAO,CAAC,IAAI,CAAuC;IACnD,OAAO,CAAC,IAAI,CAAU;IACtB,OAAO,CAAC,QAAQ,CAAmB;IACnC,OAAO,CAAC,OAAO,CAAuC;IACtD,OAAO,CAAC,QAAQ,CAAS;IAEzB,YAAY,OAAO,EAAE;QACnB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,YAAY,EAAE,MAAM,CAAC;QACrB,MAAM,CAAC,EAAE,eAAe,CAAC;QACzB,GAAG,CAAC,EAAE,YAAY,CAAC;QACnB,aAAa,CAAC,EAAE,MAAM,CAAC;KACxB,EA6BA;IAED,OAAO,CAAC,iBAAiB;IASzB,OAAO,CAAC,YAAY;IAmDb,UAAU,IAAI,IAAI,CA+BxB;IAEM,QAAQ,CAAC,KAAK,EAAE,gBAAgB,GAAG,IAAI,CAK7C;IAEM,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,gBAAgB,GAAG,SAAS,CAE3D;IAEM,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAMzC;IAEM,aAAa,IAAI,gBAAgB,EAAE,CAEzC;IAEM,OAAO,IAAI;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAEpD;IAEM,SAAS,IAAI,eAAe,CAElC;IAEM,eAAe,CAAC,eAAe,EAAE,MAAM,GAAG,IAAI,CAsBpD;CACF"}

package/dist/packages/auth-vault/src/db.js

@@ -0,0 +1,154 @@
+import { existsSync, mkdirSync, readFileSync, unlinkSync, writeFileSync } from 'node:fs';
+import { dirname } from 'node:path';
+import { createHmac, randomBytes, timingSafeEqual } from 'node:crypto';
+import { DEFAULT_SQLCIPHER_ITERATIONS, deriveKey, encryptSecret, decryptSecret } from './crypto.js';
+export class AcrMultipleCiphersDb {
+    dbPath;
+    cipher;
+    kdf;
+    kdfIterations;
+    keys;
+    salt;
+    metadata;
+    entries = new Map();
+    isLoaded = false;
+    constructor(options) {
+        this.dbPath = options.dbPath;
+        this.cipher = options.cipher || 'aes-256-gcm';
+        this.kdf = options.kdf || 'pbkdf2-sha512';
+        this.kdfIterations = options.kdfIterations || DEFAULT_SQLCIPHER_ITERATIONS;
+        // Load or initialize DB salt & keys
+        if (this.dbPath && existsSync(this.dbPath)) {
+            this.loadFromFile(options.masterSecret);
+        }
+        else {
+            this.salt = randomBytes(16).toString('hex');
+            this.keys = deriveKey(options.masterSecret, this.salt, this.kdf, this.kdfIterations);
+            this.metadata = {
+                magic: 'ACR_MCDB_V1',
+                version: 1,
+                cipher: this.cipher,
+                kdf: this.kdf,
+                kdfIterations: this.kdfIterations,
+                pageSize: 4096,
+                salt: this.salt,
+                headerHmac: '',
+                createdAt: new Date().toISOString(),
+                updatedAt: new Date().toISOString(),
+            };
+            this.isLoaded = true;
+            if (this.dbPath) {
+                this.saveToFile();
+            }
+        }
+    }
+    computeHeaderHmac(salt, cipher, kdf, hmacKey) {
+        const h = createHmac('sha512', hmacKey);
+        h.update('ACR_MCDB_V1');
+        h.update(salt);
+        h.update(cipher);
+        h.update(kdf);
+        return h.digest('hex');
+    }
+    loadFromFile(masterSecret) {
+        if (!this.dbPath)
+            return;
+        const raw = readFileSync(this.dbPath, 'utf8');
+        let parsed;
+        try {
+            parsed = JSON.parse(raw);
+        }
+        catch {
+            throw new Error(`Database corrupted at ${this.dbPath}: Invalid JSON structure.`);
+        }
+        if (parsed.metadata?.magic !== 'ACR_MCDB_V1') {
+            throw new Error(`Invalid database format at ${this.dbPath}: Magic header mismatch.`);
+        }
+        this.metadata = parsed.metadata;
+        this.salt = this.metadata.salt;
+        this.keys = deriveKey(masterSecret, this.salt, this.metadata.kdf, this.metadata.kdfIterations || DEFAULT_SQLCIPHER_ITERATIONS);
+        // Verify header HMAC
+        const expectedHmac = this.computeHeaderHmac(this.metadata.salt, this.metadata.cipher, this.metadata.kdf, this.keys.hmacKey);
+        const providedHmac = Buffer.from(this.metadata.headerHmac || '', 'hex');
+        const expectedBuf = Buffer.from(expectedHmac, 'hex');
+        if (providedHmac.length !== expectedBuf.length ||
+            !timingSafeEqual(providedHmac, expectedBuf)) {
+            throw new Error('Database decryption failed: Invalid master secret or corrupted SQLite3MultipleCiphers header.');
+        }
+        // Decrypt and populate entries
+        this.entries.clear();
+        const rows = parsed.records || [];
+        for (const r of rows) {
+            this.entries.set(r.refId, r);
+        }
+        this.isLoaded = true;
+    }
+    saveToFile() {
+        if (!this.dbPath)
+            return;
+        const dir = dirname(this.dbPath);
+        if (!existsSync(dir)) {
+            mkdirSync(dir, { recursive: true });
+        }
+        this.metadata.updatedAt = new Date().toISOString();
+        this.metadata.headerHmac = this.computeHeaderHmac(this.metadata.salt, this.metadata.cipher, this.metadata.kdf, this.keys.hmacKey);
+        const serialized = JSON.stringify({
+            metadata: this.metadata,
+            recordCount: this.entries.size,
+            records: Array.from(this.entries.values()),
+        }, null, 2);
+        const tmpPath = `${this.dbPath}.tmp`;
+        writeFileSync(tmpPath, serialized, 'utf8');
+        writeFileSync(this.dbPath, serialized, 'utf8');
+        try {
+            unlinkSync(tmpPath);
+        }
+        catch { }
+    }
+    putEntry(entry) {
+        this.entries.set(entry.refId, entry);
+        if (this.dbPath) {
+            this.saveToFile();
+        }
+    }
+    getEntry(refId) {
+        return this.entries.get(refId);
+    }
+    deleteEntry(refId) {
+        const deleted = this.entries.delete(refId);
+        if (deleted && this.dbPath) {
+            this.saveToFile();
+        }
+        return deleted;
+    }
+    getAllEntries() {
+        return Array.from(this.entries.values());
+    }
+    getKeys() {
+        return this.keys;
+    }
+    getCipher() {
+        return this.metadata.cipher;
+    }
+    rotateMasterKey(newMasterSecret) {
+        const oldKeys = this.keys;
+        const newSalt = randomBytes(16).toString('hex');
+        const newKeys = deriveKey(newMasterSecret, newSalt, this.kdf, this.kdfIterations);
+        // Re-encrypt all stored records with new keys
+        for (const [refId, entry] of this.entries.entries()) {
+            const plaintext = decryptSecret(entry.encryptedPayload, oldKeys);
+            const newPayload = encryptSecret(plaintext, newKeys, entry.algorithm);
+            entry.encryptedPayload = newPayload;
+            entry.updatedAt = new Date().toISOString();
+            this.entries.set(refId, entry);
+        }
+        this.salt = newSalt;
+        this.keys = newKeys;
+        this.metadata.salt = newSalt;
+        this.metadata.updatedAt = new Date().toISOString();
+        if (this.dbPath) {
+            this.saveToFile();
+        }
+    }
+}
+//# sourceMappingURL=db.js.map

package/dist/packages/auth-vault/src/db.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"db.js","sourceRoot":"","sources":["../../../../packages/auth-vault/src/db.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACzF,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAEvE,OAAO,EAAE,4BAA4B,EAAE,SAAS,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAEpG,MAAM,OAAO,oBAAoB;IACf,MAAM,CAAU;IACf,MAAM,CAAkB;IACxB,GAAG,CAAe;IAClB,aAAa,CAAS;IAC/B,IAAI,CAAuC;IAC3C,IAAI,CAAU;IACd,QAAQ,CAAmB;IAC3B,OAAO,GAAG,IAAI,GAAG,EAA4B,CAAC;IAC9C,QAAQ,GAAG,KAAK,CAAC;IAEzB,YAAY,OAMX;QACC,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,aAAa,CAAC;QAC9C,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,eAAe,CAAC;QAC1C,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,4BAA4B,CAAC;QAE3E,oCAAoC;QACpC,IAAI,IAAI,CAAC,MAAM,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3C,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAC1C,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,IAAI,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YAC5C,IAAI,CAAC,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,YAAY,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;YACrF,IAAI,CAAC,QAAQ,GAAG;gBACd,KAAK,EAAE,aAAa;gBACpB,OAAO,EAAE,CAAC;gBACV,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,GAAG,EAAE,IAAI,CAAC,GAAG;gBACb,aAAa,EAAE,IAAI,CAAC,aAAa;gBACjC,QAAQ,EAAE,IAAI;gBACd,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,UAAU,EAAE,EAAE;gBACd,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACpC,CAAC;YACF,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;YACrB,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;gBAChB,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,CAAC;QACH,CAAC;IACH,CAAC;IAEO,iBAAiB,CAAC,IAAY,EAAE,MAAc,EAAE,GAAW,EAAE,OAAe;QAClF,MAAM,CAAC,GAAG,UAAU,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACxC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QACxB,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACf,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACjB,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACd,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC;IAEO,YAAY,CAAC,YAAoB;QACvC,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,OAAO;QACzB,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC9C,IAAI,MAAW,CAAC;QAChB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,yBAAyB,IAAI,CAAC,MAAM,2BAA2B,CAAC,CAAC;QACnF,CAAC;QAED,IAAI,MAAM,CAAC,QAAQ,EAAE,KAAK,KAAK,aAAa,EAAE,CAAC;YAC7C,MAAM,IAAI,KAAK,CAAC,8BAA8B,IAAI,CAAC,MAAM,0BAA0B,CAAC,CAAC;QACvF,CAAC;QAED,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;QAChC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAC/B,IAAI,CAAC,IAAI,GAAG,SAAS,CACnB,YAAY,EACZ,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,QAAQ,CAAC,GAAG,EACjB,IAAI,CAAC,QAAQ,CAAC,aAAa,IAAI,4BAA4B,CAC5D,CAAC;QAEF,qBAAqB;QACrB,MAAM,YAAY,GAAG,IAAI,CAAC,iBAAiB,CACzC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAClB,IAAI,CAAC,QAAQ,CAAC,MAAM,EACpB,IAAI,CAAC,QAAQ,CAAC,GAAG,EACjB,IAAI,CAAC,IAAI,CAAC,OAAO,CAClB,CAAC;QACF,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,IAAI,EAAE,EAAE,KAAK,CAAC,CAAC;QACxE,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;QAErD,IACE,YAAY,CAAC,MAAM,KAAK,WAAW,CAAC,MAAM;YAC1C,CAAC,eAAe,CAAC,YAAY,EAAE,WAAW,CAAC,EAC3C,CAAC;YACD,MAAM,IAAI,KAAK,CACb,+FAA+F,CAChG,CAAC;QACJ,CAAC;QAED,+BAA+B;QAC/B,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACrB,MAAM,IAAI,GAAuB,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC;QACtD,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;YACrB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAC/B,CAAC;QACD,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;IACvB,CAAC;IAEM,UAAU;QACf,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,OAAO;QACzB,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACjC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACrB,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACtC,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACnD,IAAI,CAAC,QAAQ,CAAC,UAAU,GAAG,IAAI,CAAC,iBAAiB,CAC/C,IAAI,CAAC,QAAQ,CAAC,IAAI,EAClB,IAAI,CAAC,QAAQ,CAAC,MAAM,EACpB,IAAI,CAAC,QAAQ,CAAC,GAAG,EACjB,IAAI,CAAC,IAAI,CAAC,OAAO,CAClB,CAAC;QAEF,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAC/B;YACE,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI;YAC9B,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;SAC3C,EACD,IAAI,EACJ,CAAC,CACF,CAAC;QAEF,MAAM,OAAO,GAAG,GAAG,IAAI,CAAC,MAAM,MAAM,CAAC;QACrC,aAAa,CAAC,OAAO,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;QAC3C,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;QAC/C,IAAI,CAAC;YACH,UAAU,CAAC,OAAO,CAAC,CAAC;QACtB,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;IACZ,CAAC;IAEM,QAAQ,CAAC,KAAuB;QACrC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACrC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,IAAI,CAAC,UAAU,EAAE,CAAC;QACpB,CAAC;IACH,CAAC;IAEM,QAAQ,CAAC,KAAa;QAC3B,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC;IAEM,WAAW,CAAC,KAAa;QAC9B,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC3C,IAAI,OAAO,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAC3B,IAAI,CAAC,UAAU,EAAE,CAAC;QACpB,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAEM,aAAa;QAClB,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC3C,CAAC;IAEM,OAAO;QACZ,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;IAEM,SAAS;QACd,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;IAC9B,CAAC;IAEM,eAAe,CAAC,eAAuB;QAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC;QAC1B,MAAM,OAAO,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAChD,MAAM,OAAO,GAAG,SAAS,CAAC,eAAe,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;QAElF,8CAA8C;QAC9C,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;YACpD,MAAM,SAAS,GAAG,aAAa,CAAC,KAAK,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAC;YACjE,MAAM,UAAU,GAAG,aAAa,CAAC,SAAS,EAAE,OAAO,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;YACtE,KAAK,CAAC,gBAAgB,GAAG,UAAU,CAAC;YACpC,KAAK,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAC3C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACjC,CAAC;QAED,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC;QACpB,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC;QACpB,IAAI,CAAC,QAAQ,CAAC,IAAI,GAAG,OAAO,CAAC;QAC7B,IAAI,CAAC,QAAQ,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAEnD,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,IAAI,CAAC,UAAU,EAAE,CAAC;QACpB,CAAC;IACH,CAAC;CACF"}

package/dist/packages/auth-vault/src/index.d.ts

@@ -0,0 +1,5 @@
+export * from './types.js';
+export * from './crypto.js';
+export * from './db.js';
+export * from './vault.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/packages/auth-vault/src/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../packages/auth-vault/src/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC;AAC5B,cAAc,SAAS,CAAC;AACxB,cAAc,YAAY,CAAC"}

package/dist/packages/auth-vault/src/index.js

@@ -0,0 +1,5 @@
+export * from './types.js';
+export * from './crypto.js';
+export * from './db.js';
+export * from './vault.js';
+//# sourceMappingURL=index.js.map

package/dist/packages/auth-vault/src/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../packages/auth-vault/src/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC;AAC5B,cAAc,SAAS,CAAC;AACxB,cAAc,YAAY,CAAC"}

package/dist/packages/auth-vault/src/types.d.ts

@@ -0,0 +1,48 @@
+export type VaultDomain = 'personal' | 'org' | 'enterprise' | 'ephemeral';
+export type CipherAlgorithm = 'aes-256-gcm' | 'chacha20-poly1305' | 'sqlcipher-v4';
+export type KdfAlgorithm = 'pbkdf2-sha512' | 'scrypt';
+export interface EncryptedPayload {
+    algorithm?: CipherAlgorithm;
+    ciphertext: string;
+    iv: string;
+    tag: string;
+    salt?: string;
+}
+export interface VaultSecretEntry {
+    refId: string;
+    serverId: string;
+    key: string;
+    domain: VaultDomain;
+    algorithm: CipherAlgorithm;
+    encryptedPayload: EncryptedPayload;
+    createdAt: string;
+    updatedAt: string;
+}
+export interface StoredSecret {
+    refId: string;
+    serverId: string;
+    key: string;
+    domain: VaultDomain;
+    value: string;
+    algorithm?: CipherAlgorithm;
+}
+export interface VaultDbMetadata {
+    magic: string;
+    version: number;
+    cipher: CipherAlgorithm;
+    kdf: KdfAlgorithm;
+    kdfIterations: number;
+    pageSize: number;
+    salt: string;
+    headerHmac: string;
+    createdAt: string;
+    updatedAt: string;
+}
+export interface VaultStorageOptions {
+    dbPath?: string;
+    masterSecret?: string;
+    cipher?: CipherAlgorithm;
+    kdf?: KdfAlgorithm;
+    defaultDomain?: VaultDomain;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/packages/auth-vault/src/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../packages/auth-vault/src/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,WAAW,GAAG,UAAU,GAAG,KAAK,GAAG,YAAY,GAAG,WAAW,CAAC;AAE1E,MAAM,MAAM,eAAe,GAAG,aAAa,GAAG,mBAAmB,GAAG,cAAc,CAAC;AAEnF,MAAM,MAAM,YAAY,GAAG,eAAe,GAAG,QAAQ,CAAC;AAEtD,MAAM,WAAW,gBAAgB;IAC/B,SAAS,CAAC,EAAE,eAAe,CAAC;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,WAAW,CAAC;IACpB,SAAS,EAAE,eAAe,CAAC;IAC3B,gBAAgB,EAAE,gBAAgB,CAAC;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,WAAW,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,eAAe,CAAC;CAC7B;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,eAAe,CAAC;IACxB,GAAG,EAAE,YAAY,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,mBAAmB;IAClC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE,eAAe,CAAC;IACzB,GAAG,CAAC,EAAE,YAAY,CAAC;IACnB,aAAa,CAAC,EAAE,WAAW,CAAC;CAC7B"}

package/dist/packages/auth-vault/src/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/packages/auth-vault/src/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../packages/auth-vault/src/types.ts"],"names":[],"mappings":""}

package/dist/packages/auth-vault/src/vault.d.ts

@@ -0,0 +1,21 @@
+import { CipherAlgorithm, VaultDomain, VaultSecretEntry, VaultStorageOptions } from './types.js';
+export declare class AuthVault {
+    private readonly db;
+    private readonly defaultDomain;
+    private readonly defaultCipher;
+    constructor(options?: VaultStorageOptions);
+    storeSecret(refId: string, serverId: string, key: string, value: string, domain?: VaultDomain, cipher?: CipherAlgorithm): VaultSecretEntry;
+    getSecret(refId: string): string | null;
+    resolveSecretRefs(refMap: Record<string, string>, domainAllowed?: VaultDomain[]): Record<string, string>;
+    deleteSecret(refId: string): boolean;
+    listSecretRefs(): Array<{
+        refId: string;
+        serverId: string;
+        key: string;
+        domain: VaultDomain;
+        algorithm: CipherAlgorithm;
+    }>;
+    rotateMasterKey(newMasterSecret: string): void;
+    getDatabasePath(): string | undefined;
+}
+//# sourceMappingURL=vault.d.ts.map

package/dist/packages/auth-vault/src/vault.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vault.d.ts","sourceRoot":"","sources":["../../../../packages/auth-vault/src/vault.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAIjG,qBAAa,SAAS;IACpB,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAuB;IAC1C,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAc;IAC5C,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAkB;IAEhD,YAAY,OAAO,GAAE,mBAAwB,EAgB5C;IAEM,WAAW,CAChB,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,EAChB,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,MAAM,EACb,MAAM,GAAE,WAAgC,EACxC,MAAM,GAAE,eAAoC,GAC3C,gBAAgB,CAkBlB;IAEM,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAQ7C;IAEM,iBAAiB,CACtB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC9B,aAAa,CAAC,EAAE,WAAW,EAAE,GAC5B,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAuBxB;IAEM,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAE1C;IAEM,cAAc,IAAI,KAAK,CAAC;QAC7B,KAAK,EAAE,MAAM,CAAC;QACd,QAAQ,EAAE,MAAM,CAAC;QACjB,GAAG,EAAE,MAAM,CAAC;QACZ,MAAM,EAAE,WAAW,CAAC;QACpB,SAAS,EAAE,eAAe,CAAC;KAC5B,CAAC,CAQD;IAEM,eAAe,CAAC,eAAe,EAAE,MAAM,GAAG,IAAI,CAEpD;IAEM,eAAe,IAAI,MAAM,GAAG,SAAS,CAE3C;CACF"}

package/dist/packages/auth-vault/src/vault.js

@@ -0,0 +1,88 @@
+import { AcrMultipleCiphersDb } from './db.js';
+import { decryptSecret, encryptSecret } from './crypto.js';
+export class AuthVault {
+    db;
+    defaultDomain;
+    defaultCipher;
+    constructor(options = {}) {
+        const master = options.masterSecret ||
+            process.env.ACR_VAULT_SECRET ||
+            process.env.ACR_MASTER_SECRET ||
+            'acr-meta-mcp-default-master-key-082';
+        this.defaultCipher = options.cipher || 'aes-256-gcm';
+        this.defaultDomain = options.defaultDomain || 'personal';
+        this.db = new AcrMultipleCiphersDb({
+            dbPath: options.dbPath || process.env.ACR_VAULT_PATH,
+            masterSecret: master,
+            cipher: this.defaultCipher,
+            kdf: options.kdf || 'pbkdf2-sha512',
+        });
+    }
+    storeSecret(refId, serverId, key, value, domain = this.defaultDomain, cipher = this.defaultCipher) {
+        const keys = this.db.getKeys();
+        const encryptedPayload = encryptSecret(value, keys, cipher);
+        const now = new Date().toISOString();
+        const entry = {
+            refId,
+            serverId,
+            key,
+            domain,
+            algorithm: cipher,
+            encryptedPayload,
+            createdAt: now,
+            updatedAt: now,
+        };
+        this.db.putEntry(entry);
+        return entry;
+    }
+    getSecret(refId) {
+        const entry = this.db.getEntry(refId);
+        if (!entry)
+            return null;
+        try {
+            return decryptSecret(entry.encryptedPayload, this.db.getKeys());
+        }
+        catch {
+            return null;
+        }
+    }
+    resolveSecretRefs(refMap, domainAllowed) {
+        const resolved = {};
+        for (const [k, v] of Object.entries(refMap)) {
+            if (typeof v === 'string' && v.startsWith('sec_ref_')) {
+                const entry = this.db.getEntry(v);
+                if (entry) {
+                    if (domainAllowed && !domainAllowed.includes(entry.domain)) {
+                        throw new Error(`Domain violation: Secret "${k}" with domain "${entry.domain}" is not authorized in caller scope.`);
+                    }
+                    const plain = this.getSecret(v);
+                    if (plain !== null) {
+                        resolved[k] = plain;
+                        continue;
+                    }
+                }
+            }
+            resolved[k] = v;
+        }
+        return resolved;
+    }
+    deleteSecret(refId) {
+        return this.db.deleteEntry(refId);
+    }
+    listSecretRefs() {
+        return this.db.getAllEntries().map((e) => ({
+            refId: e.refId,
+            serverId: e.serverId,
+            key: e.key,
+            domain: e.domain,
+            algorithm: e.algorithm,
+        }));
+    }
+    rotateMasterKey(newMasterSecret) {
+        this.db.rotateMasterKey(newMasterSecret);
+    }
+    getDatabasePath() {
+        return this.db.dbPath;
+    }
+}
+//# sourceMappingURL=vault.js.map

package/dist/packages/auth-vault/src/vault.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vault.js","sourceRoot":"","sources":["../../../../packages/auth-vault/src/vault.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,oBAAoB,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE3D,MAAM,OAAO,SAAS;IACH,EAAE,CAAuB;IACzB,aAAa,CAAc;IAC3B,aAAa,CAAkB;IAEhD,YAAY,OAAO,GAAwB,EAAE;QAC3C,MAAM,MAAM,GACV,OAAO,CAAC,YAAY;YACpB,OAAO,CAAC,GAAG,CAAC,gBAAgB;YAC5B,OAAO,CAAC,GAAG,CAAC,iBAAiB;YAC7B,qCAAqC,CAAC;QAExC,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,MAAM,IAAI,aAAa,CAAC;QACrD,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,UAAU,CAAC;QAEzD,IAAI,CAAC,EAAE,GAAG,IAAI,oBAAoB,CAAC;YACjC,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc;YACpD,YAAY,EAAE,MAAM;YACpB,MAAM,EAAE,IAAI,CAAC,aAAa;YAC1B,GAAG,EAAE,OAAO,CAAC,GAAG,IAAI,eAAe;SACpC,CAAC,CAAC;IACL,CAAC;IAEM,WAAW,CAChB,KAAa,EACb,QAAgB,EAChB,GAAW,EACX,KAAa,EACb,MAAM,GAAgB,IAAI,CAAC,aAAa,EACxC,MAAM,GAAoB,IAAI,CAAC,aAAa;QAE5C,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC;QAC/B,MAAM,gBAAgB,GAAG,aAAa,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QAC5D,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAErC,MAAM,KAAK,GAAqB;YAC9B,KAAK;YACL,QAAQ;YACR,GAAG;YACH,MAAM;YACN,SAAS,EAAE,MAAM;YACjB,gBAAgB;YAChB,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,GAAG;SACf,CAAC;QAEF,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACxB,OAAO,KAAK,CAAC;IACf,CAAC;IAEM,SAAS,CAAC,KAAa;QAC5B,MAAM,KAAK,GAAG,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACtC,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QACxB,IAAI,CAAC;YACH,OAAO,aAAa,CAAC,KAAK,CAAC,gBAAgB,EAAE,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;QAClE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAEM,iBAAiB,CACtB,MAA8B,EAC9B,aAA6B;QAE7B,MAAM,QAAQ,GAA2B,EAAE,CAAC;QAE5C,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5C,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;gBACtD,MAAM,KAAK,GAAG,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;gBAClC,IAAI,KAAK,EAAE,CAAC;oBACV,IAAI,aAAa,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;wBAC3D,MAAM,IAAI,KAAK,CACb,6BAA6B,CAAC,kBAAkB,KAAK,CAAC,MAAM,sCAAsC,CACnG,CAAC;oBACJ,CAAC;oBACD,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;oBAChC,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;wBACnB,QAAQ,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC;wBACpB,SAAS;oBACX,CAAC;gBACH,CAAC;YACH,CAAC;YACD,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAClB,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEM,YAAY,CAAC,KAAa;QAC/B,OAAO,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;IAEM,cAAc;QAOnB,OAAO,IAAI,CAAC,EAAE,CAAC,aAAa,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACzC,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,GAAG,EAAE,CAAC,CAAC,GAAG;YACV,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,SAAS,EAAE,CAAC,CAAC,SAAS;SACvB,CAAC,CAAC,CAAC;IACN,CAAC;IAEM,eAAe,CAAC,eAAuB;QAC5C,IAAI,CAAC,EAAE,CAAC,eAAe,CAAC,eAAe,CAAC,CAAC;IAC3C,CAAC;IAEM,eAAe;QACpB,OAAO,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC;IACxB,CAAC;CACF"}

package/dist/packages/auth-vault/test/vault.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=vault.test.d.ts.map

package/dist/packages/auth-vault/test/vault.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vault.test.d.ts","sourceRoot":"","sources":["../../../../packages/auth-vault/test/vault.test.ts"],"names":[],"mappings":""}