@agentaos/core 0.2.0

package/dist/interfaces/threshold-scheme.interface.d.ts

@@ -0,0 +1,105 @@
+import type { CurveName } from '../enums/curve-name.js';
+import type { SchemeName } from '../enums/scheme-name.js';
+export interface DKGRoundResult {
+    readonly outgoing: Uint8Array[];
+    readonly finished: boolean;
+    readonly publicKey?: Uint8Array;
+    readonly shares?: Uint8Array[];
+}
+/** Result from an aux-info generation round (CGGMP24 two-phase DKG). */
+export interface AuxInfoRoundResult {
+    readonly outgoing: Uint8Array[];
+    readonly finished: boolean;
+    /** Serialised AuxInfo blobs (one per party) — present when finished=true. */
+    readonly auxInfos?: Uint8Array[];
+}
+export interface IThresholdScheme {
+    readonly name: SchemeName;
+    readonly curve: CurveName;
+    /**
+     * Run one round of the auxiliary info generation ceremony.
+     * Phase A of the CGGMP24 two-phase DKG — generates Paillier key pairs
+     * and ring-Pedersen parameters needed for signing.
+     */
+    auxInfoGen(sessionId: string, round: number, incoming: Uint8Array[]): Promise<AuxInfoRoundResult>;
+    /**
+     * Run one round of the key generation ceremony.
+     * Phase B of the CGGMP24 two-phase DKG — generates CoreKeyShares.
+     */
+    dkg(sessionId: string, round: number, incoming: Uint8Array[]): Promise<DKGRoundResult>;
+    /** Derive an Ethereum address from a compressed or uncompressed public key. */
+    deriveAddress(publicKey: Uint8Array): string;
+    /**
+     * Extract the shared public key from a serialised CoreKeyShare.
+     * Returns 33-byte compressed secp256k1 public key.
+     * Optional — not all scheme implementations may support this.
+     */
+    extractPublicKey?(keyShareBytes: Uint8Array): Uint8Array;
+    /**
+     * Create an interactive signing session from key material.
+     *
+     * @param keyMaterialBytes - [coreShare, auxInfo] — two serialised blobs
+     * @param messageHash - 32-byte hash to sign (required upfront in CGGMP24)
+     * @param options - Optional party config for the signing session
+     */
+    createSignSession(keyMaterialBytes: Uint8Array[], messageHash: Uint8Array, options?: {
+        partyIndex?: number;
+        partiesAtKeygen?: number[];
+        eid?: Uint8Array;
+        /** Force WASM backend for cross-compatibility with browser signing. */
+        forceWasm?: boolean;
+    }): Promise<{
+        sessionId: string;
+        firstMessages: Uint8Array[];
+    }>;
+    /**
+     * Process one round of the interactive signing protocol.
+     *
+     * @returns outgoingMessages and whether the protocol is complete.
+     */
+    processSignRound(sessionId: string, incomingMessages: Uint8Array[]): Promise<{
+        outgoingMessages: Uint8Array[];
+        complete: boolean;
+    }>;
+    /**
+     * Extract the final signature from a completed signing session.
+     * No lastMessage step — CGGMP24 produces the signature when the
+     * protocol completes.
+     */
+    finalizeSign(sessionId: string): Promise<{
+        r: Uint8Array;
+        s: Uint8Array;
+        v: number;
+    }>;
+    /**
+     * Create a presignature session — produces a reusable presignature
+     * that enables instant non-interactive signing later.
+     */
+    createPresignSession(keyMaterialBytes: Uint8Array[]): {
+        sessionId: string;
+        firstMessages: Uint8Array[];
+    };
+    /** Process one round of the presignature generation protocol. */
+    processPresignRound(sessionId: string, incomingMessages: Uint8Array[]): {
+        outgoingMessages: Uint8Array[];
+        complete: boolean;
+    };
+    /** Extract the presignature and commitment from a completed session. */
+    extractPresignature(sessionId: string): {
+        presignature: Uint8Array;
+        commitment: Uint8Array;
+    };
+    /**
+     * Issue a partial signature from a presignature (non-interactive, instant).
+     */
+    issuePartialSignature(presignature: Uint8Array, messageHash: Uint8Array): Uint8Array;
+    /**
+     * Combine partial signatures into a full ECDSA signature.
+     */
+    combinePartialSignatures(partials: Uint8Array[], commitment: Uint8Array, messageHash: Uint8Array): {
+        r: Uint8Array;
+        s: Uint8Array;
+        v: number;
+    };
+}
+//# sourceMappingURL=threshold-scheme.interface.d.ts.map

package/dist/interfaces/threshold-scheme.interface.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"threshold-scheme.interface.d.ts","sourceRoot":"","sources":["../../src/interfaces/threshold-scheme.interface.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAE1D,MAAM,WAAW,cAAc;IAC9B,QAAQ,CAAC,QAAQ,EAAE,UAAU,EAAE,CAAC;IAChC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,SAAS,CAAC,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,CAAC;CAC/B;AAED,wEAAwE;AACxE,MAAM,WAAW,kBAAkB;IAClC,QAAQ,CAAC,QAAQ,EAAE,UAAU,EAAE,CAAC;IAChC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,6EAA6E;IAC7E,QAAQ,CAAC,QAAQ,CAAC,EAAE,UAAU,EAAE,CAAC;CACjC;AAED,MAAM,WAAW,gBAAgB;IAChC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAI1B;;;;OAIG;IACH,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAElG;;;OAGG;IACH,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IAEvF,+EAA+E;IAC/E,aAAa,CAAC,SAAS,EAAE,UAAU,GAAG,MAAM,CAAC;IAE7C;;;;OAIG;IACH,gBAAgB,CAAC,CAAC,aAAa,EAAE,UAAU,GAAG,UAAU,CAAC;IAIzD;;;;;;OAMG;IACH,iBAAiB,CAChB,gBAAgB,EAAE,UAAU,EAAE,EAC9B,WAAW,EAAE,UAAU,EACvB,OAAO,CAAC,EAAE;QACT,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;QAC3B,GAAG,CAAC,EAAE,UAAU,CAAC;QACjB,uEAAuE;QACvE,SAAS,CAAC,EAAE,OAAO,CAAC;KACpB,GACC,OAAO,CAAC;QACV,SAAS,EAAE,MAAM,CAAC;QAClB,aAAa,EAAE,UAAU,EAAE,CAAC;KAC5B,CAAC,CAAC;IAEH;;;;OAIG;IACH,gBAAgB,CACf,SAAS,EAAE,MAAM,EACjB,gBAAgB,EAAE,UAAU,EAAE,GAC5B,OAAO,CAAC;QACV,gBAAgB,EAAE,UAAU,EAAE,CAAC;QAC/B,QAAQ,EAAE,OAAO,CAAC;KAClB,CAAC,CAAC;IAEH;;;;OAIG;IACH,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC;QACxC,CAAC,EAAE,UAAU,CAAC;QACd,CAAC,EAAE,UAAU,CAAC;QACd,CAAC,EAAE,MAAM,CAAC;KACV,CAAC,CAAC;IAIH;;;OAGG;IACH,oBAAoB,CAAC,gBAAgB,EAAE,UAAU,EAAE,GAAG;QACrD,SAAS,EAAE,MAAM,CAAC;QAClB,aAAa,EAAE,UAAU,EAAE,CAAC;KAC5B,CAAC;IAEF,iEAAiE;IACjE,mBAAmB,CAClB,SAAS,EAAE,MAAM,EACjB,gBAAgB,EAAE,UAAU,EAAE,GAC5B;QACF,gBAAgB,EAAE,UAAU,EAAE,CAAC;QAC/B,QAAQ,EAAE,OAAO,CAAC;KAClB,CAAC;IAEF,wEAAwE;IACxE,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG;QACvC,YAAY,EAAE,UAAU,CAAC;QACzB,UAAU,EAAE,UAAU,CAAC;KACvB,CAAC;IAEF;;OAEG;IACH,qBAAqB,CAAC,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,GAAG,UAAU,CAAC;IAErF;;OAEG;IACH,wBAAwB,CACvB,QAAQ,EAAE,UAAU,EAAE,EACtB,UAAU,EAAE,UAAU,EACtB,WAAW,EAAE,UAAU,GACrB;QACF,CAAC,EAAE,UAAU,CAAC;QACd,CAAC,EAAE,UAAU,CAAC;QACd,CAAC,EAAE,MAAM,CAAC;KACV,CAAC;CACF"}

package/dist/interfaces/threshold-scheme.interface.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=threshold-scheme.interface.js.map

package/dist/interfaces/threshold-scheme.interface.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"threshold-scheme.interface.js","sourceRoot":"","sources":["../../src/interfaces/threshold-scheme.interface.ts"],"names":[],"mappings":""}

package/dist/types/dkg.d.ts

@@ -0,0 +1,2 @@
+export type DKGState = 'initialized' | 'round1' | 'round2' | 'round3' | 'completed' | 'failed';
+//# sourceMappingURL=dkg.d.ts.map

package/dist/types/dkg.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dkg.d.ts","sourceRoot":"","sources":["../../src/types/dkg.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,QAAQ,GAAG,aAAa,GAAG,QAAQ,GAAG,QAAQ,GAAG,QAAQ,GAAG,WAAW,GAAG,QAAQ,CAAC"}

package/dist/types/dkg.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=dkg.js.map

package/dist/types/dkg.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dkg.js","sourceRoot":"","sources":["../../src/types/dkg.ts"],"names":[],"mappings":""}

package/dist/types/encrypted-envelope.d.ts

@@ -0,0 +1,11 @@
+export interface EncryptedEnvelope {
+    readonly version: 1;
+    readonly keyId: string;
+    readonly encryptedDek: string;
+    readonly iv: string;
+    readonly ciphertext: string;
+    readonly authTag: string;
+    readonly algorithm: 'aes-256-gcm';
+    readonly aadPath: string;
+}
+//# sourceMappingURL=encrypted-envelope.d.ts.map

package/dist/types/encrypted-envelope.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"encrypted-envelope.d.ts","sourceRoot":"","sources":["../../src/types/encrypted-envelope.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,iBAAiB;IACjC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,aAAa,CAAC;IAClC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CACzB"}

package/dist/types/encrypted-envelope.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=encrypted-envelope.js.map

package/dist/types/encrypted-envelope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"encrypted-envelope.js","sourceRoot":"","sources":["../../src/types/encrypted-envelope.ts"],"names":[],"mappings":""}

package/dist/types/index.d.ts

@@ -0,0 +1,9 @@
+export type { KeyMaterial } from './key-material.js';
+export type { Share, ShareFile } from './share.js';
+export type { Signer } from './signer.js';
+export type { Policy } from './policy.js';
+export type { SigningRequest } from './signing-request.js';
+export type { DKGState } from './dkg.js';
+export type { EncryptedEnvelope } from './encrypted-envelope.js';
+export type { BlockInfiniteApprovalsCriterion, ComparisonOperator, Criterion, DailyLimitCriterion, DailyLimitUsdCriterion, EthValueCriterion, EvmAddressCriterion, EvmFunctionCriterion, EvmNetworkCriterion, IpAddressCriterion, MaxPerTxUsdCriterion, MaxSlippageCriterion, MevProtectionCriterion, MonthlyLimitCriterion, MonthlyLimitUsdCriterion, PolicyDocument, PolicyRule, RateLimitCriterion, RuleAction, SetOperator, TimeWindowCriterion, } from './rules.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/types/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACrD,YAAY,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACnD,YAAY,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAC1C,YAAY,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAC1C,YAAY,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3D,YAAY,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AACzC,YAAY,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AACjE,YAAY,EACX,+BAA+B,EAC/B,kBAAkB,EAClB,SAAS,EACT,mBAAmB,EACnB,sBAAsB,EACtB,iBAAiB,EACjB,mBAAmB,EACnB,oBAAoB,EACpB,mBAAmB,EACnB,kBAAkB,EAClB,oBAAoB,EACpB,oBAAoB,EACpB,sBAAsB,EACtB,qBAAqB,EACrB,wBAAwB,EACxB,cAAc,EACd,UAAU,EACV,kBAAkB,EAClB,UAAU,EACV,WAAW,EACX,mBAAmB,GACnB,MAAM,YAAY,CAAC"}

package/dist/types/index.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=index.js.map

package/dist/types/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":""}

package/dist/types/key-material.d.ts

@@ -0,0 +1,12 @@
+/**
+ * CGGMP24 key material is split into two parts:
+ * - CoreKeyShare: from the keygen ceremony (contains the secret share + public data)
+ * - AuxInfo: from the aux_info_gen ceremony (Paillier keys + ring-Pedersen params)
+ *
+ * Both are needed to participate in signing.
+ */
+export interface KeyMaterial {
+    readonly coreShare: Uint8Array;
+    readonly auxInfo: Uint8Array;
+}
+//# sourceMappingURL=key-material.d.ts.map

package/dist/types/key-material.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"key-material.d.ts","sourceRoot":"","sources":["../../src/types/key-material.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,MAAM,WAAW,WAAW;IAC3B,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;IAC/B,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC;CAC7B"}

package/dist/types/key-material.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=key-material.js.map

package/dist/types/key-material.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"key-material.js","sourceRoot":"","sources":["../../src/types/key-material.ts"],"names":[],"mappings":""}

package/dist/types/policy.d.ts

@@ -0,0 +1,13 @@
+import type { PolicyType } from '../enums/policy-type.js';
+export interface Policy {
+    readonly id: string;
+    readonly signerId: string;
+    readonly type: PolicyType;
+    readonly config: Record<string, unknown>;
+    readonly enabled: boolean;
+    readonly appliesTo?: readonly string[];
+    readonly timesTriggered: number;
+    readonly createdAt: string;
+    readonly updatedAt: string;
+}
+//# sourceMappingURL=policy.d.ts.map

package/dist/types/policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../../src/types/policy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAE1D,MAAM,WAAW,MAAM;IACtB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACzC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC3B"}

package/dist/types/policy.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=policy.js.map

package/dist/types/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../src/types/policy.ts"],"names":[],"mappings":""}

package/dist/types/rules.d.ts

@@ -0,0 +1,101 @@
+/** Rules engine types — composable, ordered policy rules. */
+export type ComparisonOperator = '<=' | '<' | '>=' | '>' | '=';
+export type SetOperator = 'in' | 'not_in';
+export interface EthValueCriterion {
+    readonly type: 'ethValue';
+    readonly operator: ComparisonOperator;
+    /** Wei amount as decimal string (avoids JSON BigInt issues). */
+    readonly value: string;
+}
+export interface EvmAddressCriterion {
+    readonly type: 'evmAddress';
+    readonly operator: SetOperator;
+    readonly addresses: readonly string[];
+    /** Allow contract deployment (to=null). Default false. */
+    readonly allowDeploy?: boolean;
+}
+export interface EvmNetworkCriterion {
+    readonly type: 'evmNetwork';
+    readonly operator: SetOperator;
+    readonly chainIds: readonly number[];
+}
+export interface EvmFunctionCriterion {
+    readonly type: 'evmFunction';
+    /** 4-byte hex function selectors (e.g. "0xa9059cbb"). */
+    readonly selectors: readonly string[];
+    /** Allow plain ETH transfer (no calldata). Default true. */
+    readonly allowPlainTransfer?: boolean;
+}
+export interface IpAddressCriterion {
+    readonly type: 'ipAddress';
+    readonly operator: SetOperator;
+    /** IPv4 or CIDR notation (e.g. "10.0.0.0/8"). */
+    readonly ips: readonly string[];
+}
+export interface RateLimitCriterion {
+    readonly type: 'rateLimit';
+    readonly maxPerHour: number;
+}
+export interface TimeWindowCriterion {
+    readonly type: 'timeWindow';
+    /** 0–23 UTC hour. */
+    readonly startHour: number;
+    /** 0–23 UTC hour. Overnight ranges supported (e.g. 22 → 6). */
+    readonly endHour: number;
+}
+export interface DailyLimitCriterion {
+    readonly type: 'dailyLimit';
+    /** Rolling 24h spend cap in wei (decimal string). */
+    readonly maxWei: string;
+}
+export interface MonthlyLimitCriterion {
+    readonly type: 'monthlyLimit';
+    /** Rolling 30-day spend cap in wei (decimal string). */
+    readonly maxWei: string;
+}
+export interface MaxPerTxUsdCriterion {
+    readonly type: 'maxPerTxUsd';
+    /** Max outgoing value per transaction in USD. */
+    readonly maxUsd: number;
+}
+export interface DailyLimitUsdCriterion {
+    readonly type: 'dailyLimitUsd';
+    /** Rolling 24h spend cap in USD. */
+    readonly maxUsd: number;
+}
+export interface MonthlyLimitUsdCriterion {
+    readonly type: 'monthlyLimitUsd';
+    /** Rolling 30-day spend cap in USD. */
+    readonly maxUsd: number;
+}
+export interface BlockInfiniteApprovalsCriterion {
+    readonly type: 'blockInfiniteApprovals';
+    readonly enabled: boolean;
+}
+export interface MaxSlippageCriterion {
+    readonly type: 'maxSlippage';
+    /** Max allowed slippage percentage (e.g. 2 = 2%). */
+    readonly maxPercent: number;
+}
+export interface MevProtectionCriterion {
+    readonly type: 'mevProtection';
+    readonly enabled: boolean;
+}
+export type Criterion = EthValueCriterion | EvmAddressCriterion | EvmNetworkCriterion | EvmFunctionCriterion | IpAddressCriterion | RateLimitCriterion | TimeWindowCriterion | DailyLimitCriterion | MonthlyLimitCriterion | MaxPerTxUsdCriterion | DailyLimitUsdCriterion | MonthlyLimitUsdCriterion | BlockInfiniteApprovalsCriterion | MaxSlippageCriterion | MevProtectionCriterion;
+export type RuleAction = 'accept' | 'reject';
+export interface PolicyRule {
+    readonly action: RuleAction;
+    readonly criteria: readonly Criterion[];
+    readonly description?: string;
+    readonly enabled?: boolean;
+}
+export interface PolicyDocument {
+    readonly id: string;
+    readonly signerId: string;
+    readonly description?: string;
+    readonly rules: readonly PolicyRule[];
+    readonly version: number;
+    readonly createdAt: string;
+    readonly updatedAt: string;
+}
+//# sourceMappingURL=rules.d.ts.map

package/dist/types/rules.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rules.d.ts","sourceRoot":"","sources":["../../src/types/rules.ts"],"names":[],"mappings":"AAAA,6DAA6D;AAI7D,MAAM,MAAM,kBAAkB,GAAG,IAAI,GAAG,GAAG,GAAG,IAAI,GAAG,GAAG,GAAG,GAAG,CAAC;AAC/D,MAAM,MAAM,WAAW,GAAG,IAAI,GAAG,QAAQ,CAAC;AAI1C,MAAM,WAAW,iBAAiB;IACjC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAC;IACtC,gEAAgE;IAChE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,mBAAmB;IACnC,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC;IAC/B,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,0DAA0D;IAC1D,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;CAC/B;AAED,MAAM,WAAW,mBAAmB;IACnC,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;CACrC;AAED,MAAM,WAAW,oBAAoB;IACpC,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B,yDAAyD;IACzD,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,4DAA4D;IAC5D,QAAQ,CAAC,kBAAkB,CAAC,EAAE,OAAO,CAAC;CACtC;AAED,MAAM,WAAW,kBAAkB;IAClC,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC;IAC/B,iDAAiD;IACjD,QAAQ,CAAC,GAAG,EAAE,SAAS,MAAM,EAAE,CAAC;CAChC;AAED,MAAM,WAAW,kBAAkB;IAClC,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,mBAAmB;IACnC,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,qBAAqB;IACrB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,+DAA+D;IAC/D,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,mBAAmB;IACnC,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,qDAAqD;IACrD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,qBAAqB;IACrC,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,wDAAwD;IACxD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,oBAAoB;IACpC,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B,iDAAiD;IACjD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,sBAAsB;IACtC,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAC/B,oCAAoC;IACpC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,wBAAwB;IACxC,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;IACjC,uCAAuC;IACvC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,+BAA+B;IAC/C,QAAQ,CAAC,IAAI,EAAE,wBAAwB,CAAC;IACxC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,oBAAoB;IACpC,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B,qDAAqD;IACrD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,sBAAsB;IACtC,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAC/B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;CAC1B;AAID,MAAM,MAAM,SAAS,GAClB,iBAAiB,GACjB,mBAAmB,GACnB,mBAAmB,GACnB,oBAAoB,GACpB,kBAAkB,GAClB,kBAAkB,GAClB,mBAAmB,GACnB,mBAAmB,GACnB,qBAAqB,GACrB,oBAAoB,GACpB,sBAAsB,GACtB,wBAAwB,GACxB,+BAA+B,GAC/B,oBAAoB,GACpB,sBAAsB,CAAC;AAI1B,MAAM,MAAM,UAAU,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAE7C,MAAM,WAAW,UAAU;IAC1B,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,SAAS,SAAS,EAAE,CAAC;IACxC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,WAAW,cAAc;IAC9B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,KAAK,EAAE,SAAS,UAAU,EAAE,CAAC;IACtC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC3B"}

package/dist/types/rules.js

@@ -0,0 +1,3 @@
+/** Rules engine types — composable, ordered policy rules. */
+export {};
+//# sourceMappingURL=rules.js.map

package/dist/types/rules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rules.js","sourceRoot":"","sources":["../../src/types/rules.ts"],"names":[],"mappings":"AAAA,6DAA6D"}

package/dist/types/share.d.ts

@@ -0,0 +1,40 @@
+import type { ChainName } from '../enums/chain-name.js';
+import type { CurveName } from '../enums/curve-name.js';
+import type { NetworkName } from '../enums/network-name.js';
+import type { SchemeName } from '../enums/scheme-name.js';
+export interface Share {
+    readonly data: Uint8Array;
+    readonly participantIndex: 1 | 2 | 3;
+    readonly publicKey: Uint8Array;
+    readonly scheme: SchemeName;
+    readonly curve: CurveName;
+}
+export interface ShareFileEncryption {
+    readonly algorithm: 'aes-256-gcm';
+    readonly iv: string;
+    readonly tag: string;
+    readonly kdf: 'scrypt' | 'argon2id';
+    readonly kdfParams: {
+        readonly memory: number;
+        readonly iterations: number;
+        readonly parallelism: number;
+        readonly saltBase64: string;
+    };
+}
+export interface ShareFileMetadata {
+    readonly signerName: string;
+    readonly participantIndex: 1 | 2 | 3;
+    readonly scheme: SchemeName;
+    readonly curve: CurveName;
+    readonly ethAddress: string;
+    readonly chain: ChainName;
+    readonly network?: NetworkName;
+    readonly createdAt: string;
+}
+export interface ShareFile {
+    readonly version: number;
+    readonly encryption: ShareFileEncryption;
+    readonly ciphertextBase64: string;
+    readonly metadata: ShareFileMetadata;
+}
+//# sourceMappingURL=share.d.ts.map

package/dist/types/share.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"share.d.ts","sourceRoot":"","sources":["../../src/types/share.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAE1D,MAAM,WAAW,KAAK;IACrB,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,gBAAgB,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACrC,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;IAC/B,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;CAC1B;AAED,MAAM,WAAW,mBAAmB;IACnC,QAAQ,CAAC,SAAS,EAAE,aAAa,CAAC;IAClC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,GAAG,EAAE,QAAQ,GAAG,UAAU,CAAC;IACpC,QAAQ,CAAC,SAAS,EAAE;QACnB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;QAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAC7B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;KAC5B,CAAC;CACF;AAED,MAAM,WAAW,iBAAiB;IACjC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,gBAAgB,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACrC,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAC1B,QAAQ,CAAC,OAAO,CAAC,EAAE,WAAW,CAAC;IAC/B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,SAAS;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,mBAAmB,CAAC;IACzC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,CAAC;CACrC"}

package/dist/types/share.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=share.js.map

package/dist/types/share.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"share.js","sourceRoot":"","sources":["../../src/types/share.ts"],"names":[],"mappings":""}

package/dist/types/signature.d.ts

@@ -0,0 +1,8 @@
+import type { SchemeName } from '../enums/scheme-name.js';
+export interface Signature {
+    readonly r: Uint8Array;
+    readonly s: Uint8Array;
+    readonly v?: number;
+    readonly scheme: SchemeName;
+}
+//# sourceMappingURL=signature.d.ts.map

package/dist/types/signature.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"signature.d.ts","sourceRoot":"","sources":["../../src/types/signature.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAE1D,MAAM,WAAW,SAAS;IACzB,QAAQ,CAAC,CAAC,EAAE,UAAU,CAAC;IACvB,QAAQ,CAAC,CAAC,EAAE,UAAU,CAAC;IACvB,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;CAC5B"}

package/dist/types/signature.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=signature.js.map

package/dist/types/signature.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signature.js","sourceRoot":"","sources":["../../src/types/signature.ts"],"names":[],"mappings":""}

package/dist/types/signer.d.ts

@@ -0,0 +1,25 @@
+import type { ChainName } from '../enums/chain-name.js';
+import type { NetworkName } from '../enums/network-name.js';
+import type { SchemeName } from '../enums/scheme-name.js';
+import type { SignerStatus } from '../enums/signer-status.js';
+import type { SignerType } from '../enums/signer-type.js';
+export interface Signer {
+    readonly id: string;
+    readonly name: string;
+    readonly description?: string;
+    readonly type: SignerType;
+    readonly ethAddress: string;
+    readonly chain: ChainName;
+    readonly scheme: SchemeName;
+    readonly network?: NetworkName;
+    readonly status: SignerStatus;
+    readonly ownerId: string;
+    readonly apiKeyHash: string;
+    readonly vaultSharePath: string;
+    readonly dkgCompleted: boolean;
+    readonly createdAt: string;
+    readonly updatedAt: string;
+    readonly lastActiveAt?: string;
+    readonly revokedAt?: string;
+}
+//# sourceMappingURL=signer.d.ts.map

package/dist/types/signer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"signer.d.ts","sourceRoot":"","sources":["../../src/types/signer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAE1D,MAAM,WAAW,MAAM;IACtB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,QAAQ,CAAC,OAAO,CAAC,EAAE,WAAW,CAAC;IAC/B,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IAC/B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC5B"}

package/dist/types/signer.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=signer.js.map

package/dist/types/signer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signer.js","sourceRoot":"","sources":["../../src/types/signer.ts"],"names":[],"mappings":""}

package/dist/types/signing-request.d.ts

@@ -0,0 +1,23 @@
+import type { RequestStatus } from '../enums/request-status.js';
+import type { RequestType } from '../enums/request-type.js';
+import type { SigningPath } from '../enums/signing-path.js';
+import type { PolicyViolation } from '../interfaces/policy-engine.interface.js';
+export interface SigningRequest {
+    readonly id: string;
+    readonly signerId: string;
+    readonly requestType: RequestType;
+    readonly signingPath: SigningPath;
+    readonly status: RequestStatus;
+    readonly toAddress?: string;
+    readonly valueWei: string;
+    readonly chainId: number;
+    readonly txData?: string;
+    readonly decodedAction?: string;
+    readonly txHash?: string;
+    readonly nonce?: number;
+    readonly policyViolations?: readonly PolicyViolation[];
+    readonly policiesEvaluated: number;
+    readonly evaluationTimeMs: number;
+    readonly createdAt: string;
+}
+//# sourceMappingURL=signing-request.d.ts.map

package/dist/types/signing-request.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"signing-request.d.ts","sourceRoot":"","sources":["../../src/types/signing-request.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,0CAA0C,CAAC;AAEhF,MAAM,WAAW,cAAc;IAC9B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,gBAAgB,CAAC,EAAE,SAAS,eAAe,EAAE,CAAC;IACvD,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC3B"}

package/dist/types/signing-request.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=signing-request.js.map

package/dist/types/signing-request.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signing-request.js","sourceRoot":"","sources":["../../src/types/signing-request.ts"],"names":[],"mappings":""}

package/package.json

@@ -0,0 +1,50 @@
+{
+  "name": "@agentaos/core",
+  "version": "0.2.0",
+  "description": "Type definitions and interfaces for AgentaOS threshold wallet",
+  "license": "Apache-2.0",
+  "author": "AgentaOS <hello@agentaos.ai>",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/AgentaOS/agentaos.git",
+    "directory": "packages/core"
+  },
+  "homepage": "https://github.com/AgentaOS/agentaos",
+  "bugs": "https://github.com/AgentaOS/agentaos/issues",
+  "keywords": [
+    "threshold",
+    "wallet",
+    "mpc",
+    "ecdsa",
+    "ethereum",
+    "agent",
+    "signing",
+    "types"
+  ],
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "engines": {
+    "node": ">=20.0.0"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "devDependencies": {},
+  "scripts": {
+    "build": "tsc",
+    "lint": "biome check src/",
+    "test": "vitest run --passWithNoTests",
+    "typecheck": "tsc --noEmit",
+    "clean": "rm -rf dist"
+  }
+}