@agentvault/agentvault 0.15.0 → 0.15.2

package/dist/state.js

@@ -1,178 +0,0 @@
-import { mkdir, readFile, rename, rm, writeFile } from "node:fs/promises";
-import { join } from "node:path";
-import { encryptBackup, hashBackupCode, bytesToBase64, bytesToHex, } from "@agentvault/crypto";
-const STATE_FILE = "agentvault.json";
-const LEGACY_STATE_FILE = "secure-channel.json";
-// State files contain deviceJwt and ratchet keys — restrict to owner only
-const DIR_MODE = 0o700;
-const FILE_MODE = 0o600;
-export async function saveState(dataDir, state) {
-    await mkdir(dataDir, { recursive: true, mode: DIR_MODE });
-    const filePath = join(dataDir, STATE_FILE);
-    await writeFile(filePath, JSON.stringify(state, null, 2), { encoding: "utf-8", mode: FILE_MODE });
-    // Clean up legacy file after migration
-    try {
-        await rm(join(dataDir, LEGACY_STATE_FILE));
-    }
-    catch {
-        // Already removed or never existed
-    }
-}
-/**
- * Load raw persisted state from disk.
- * Returns the raw parsed JSON — caller is responsible for migration
- * from legacy format to current PersistedState.
- *
- * Checks agentvault.json first, falls back to secure-channel.json
- * for backward compatibility. Auto-migrates on first legacy load.
- */
-export async function loadState(dataDir) {
-    // Try new filename first
-    const filePath = join(dataDir, STATE_FILE);
-    try {
-        const raw = await readFile(filePath, "utf-8");
-        return JSON.parse(raw);
-    }
-    catch {
-        // Fall through to legacy
-    }
-    // Fall back to legacy filename
-    const legacyPath = join(dataDir, LEGACY_STATE_FILE);
-    try {
-        const raw = await readFile(legacyPath, "utf-8");
-        const parsed = JSON.parse(raw);
-        // Auto-migrate: write to new filename, remove legacy
-        await mkdir(dataDir, { recursive: true, mode: DIR_MODE });
-        await writeFile(filePath, JSON.stringify(parsed, null, 2), { encoding: "utf-8", mode: FILE_MODE });
-        await rm(legacyPath);
-        return parsed;
-    }
-    catch {
-        return null;
-    }
-}
-/**
- * Check whether persisted state is valid and usable (has deviceId, deviceJwt, and at least one session).
- */
-export async function isStateValid(dataDir) {
-    try {
-        const filePath = join(dataDir, STATE_FILE);
-        const raw = await readFile(filePath, "utf-8");
-        const parsed = JSON.parse(raw);
-        return !!(parsed &&
-            parsed.deviceId &&
-            parsed.deviceJwt &&
-            parsed.sessions &&
-            Object.keys(parsed.sessions).length > 0);
-    }
-    catch {
-        return false;
-    }
-}
-/**
- * Create a backup of the state file (atomic write via tmp + rename).
- * Silent no-op if no state file exists.
- */
-export async function backupState(dataDir) {
-    const src = join(dataDir, STATE_FILE);
-    const bak = join(dataDir, `${STATE_FILE}.bak`);
-    const tmp = join(dataDir, `${STATE_FILE}.bak.tmp`);
-    try {
-        const data = await readFile(src, "utf-8");
-        await writeFile(tmp, data, { encoding: "utf-8", mode: FILE_MODE });
-        await rename(tmp, bak);
-    }
-    catch {
-        // No state file or write failed — silent no-op
-    }
-}
-/**
- * Restore state from backup if primary state is missing/empty/invalid but .bak exists and is valid.
- * Returns true if state was successfully restored.
- */
-export async function restoreState(dataDir) {
-    // Only restore if primary is missing or invalid
-    const primaryValid = await isStateValid(dataDir);
-    if (primaryValid)
-        return false;
-    const bak = join(dataDir, `${STATE_FILE}.bak`);
-    try {
-        const data = await readFile(bak, "utf-8");
-        const parsed = JSON.parse(data);
-        if (!parsed ||
-            !parsed.deviceId ||
-            !parsed.deviceJwt ||
-            !parsed.sessions ||
-            Object.keys(parsed.sessions).length === 0) {
-            return false;
-        }
-        await mkdir(dataDir, { recursive: true, mode: DIR_MODE });
-        await writeFile(join(dataDir, STATE_FILE), data, { encoding: "utf-8", mode: FILE_MODE });
-        return true;
-    }
-    catch {
-        return false;
-    }
-}
-/**
- * Upload encrypted backup to server. Converts PersistedState → BackupBundle,
- * encrypts with backup code, and PUTs to the backend.
- */
-export async function uploadBackupToServer(state, backupCode, apiUrl, deviceJwt) {
-    // Build BackupBundle from PersistedState
-    const ratchets = {};
-    for (const [convId, session] of Object.entries(state.sessions)) {
-        if (session.ratchetState) {
-            ratchets[convId] = session.ratchetState;
-        }
-    }
-    const bundle = {
-        version: 1,
-        createdAt: new Date().toISOString(),
-        deviceId: state.deviceId,
-        identityKeypair: state.identityKeypair,
-        ephemeralKeypair: state.ephemeralKeypair,
-        fingerprint: state.fingerprint,
-        ratchets,
-        sessions: Object.fromEntries(Object.entries(state.sessions).map(([convId, s]) => [
-            convId,
-            {
-                ownerDeviceId: s.ownerDeviceId,
-                ratchetState: s.ratchetState,
-                activated: s.activated,
-            },
-        ])),
-        topics: state.topics,
-        defaultTopicId: state.defaultTopicId,
-        groupId: state.groupId,
-        hubAddress: state.hubAddress,
-    };
-    const encrypted = await encryptBackup(bundle, backupCode);
-    const codeHash = await hashBackupCode(backupCode);
-    const resp = await fetch(`${apiUrl}/api/v1/backup`, {
-        method: "PUT",
-        headers: {
-            "Content-Type": "application/json",
-            Authorization: `Bearer ${deviceJwt}`,
-        },
-        body: JSON.stringify({
-            backup_blob: bytesToBase64(encrypted),
-            backup_code_hash: bytesToHex(codeHash),
-        }),
-    });
-    if (!resp.ok) {
-        throw new Error(`Backup upload failed: ${resp.status}`);
-    }
-}
-export async function clearState(dataDir) {
-    // Remove both files to cover migration edge cases
-    for (const filename of [STATE_FILE, LEGACY_STATE_FILE]) {
-        try {
-            await rm(join(dataDir, filename));
-        }
-        catch {
-            // File doesn't exist — nothing to clear
-        }
-    }
-}
-//# sourceMappingURL=state.js.map

package/dist/state.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"state.js","sourceRoot":"","sources":["../src/state.ts"],"names":[],"mappings":"AAAA,OAAO,EAAS,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACjF,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EACL,aAAa,EACb,cAAc,EACd,aAAa,EACb,UAAU,GAEX,MAAM,oBAAoB,CAAC;AAG5B,MAAM,UAAU,GAAG,iBAAiB,CAAC;AACrC,MAAM,iBAAiB,GAAG,qBAAqB,CAAC;AAEhD,0EAA0E;AAC1E,MAAM,QAAQ,GAAG,KAAK,CAAC;AACvB,MAAM,SAAS,GAAG,KAAK,CAAC;AAExB,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,OAAe,EACf,KAAqB;IAErB,MAAM,KAAK,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC1D,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IAC3C,MAAM,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;IAElG,uCAAuC;IACvC,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,mCAAmC;IACrC,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,OAAe;IAGf,yBAAyB;IACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IAC3C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC9C,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,yBAAyB;IAC3B,CAAC;IAED,+BAA+B;IAC/B,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;IACpD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAChD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,qDAAqD;QACrD,MAAM,KAAK,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC1D,MAAM,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;QACnG,MAAM,EAAE,CAAC,UAAU,CAAC,CAAC;QACrB,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OAAe;IAChD,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QAC3C,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC9C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,OAAO,CAAC,CAAC,CACP,MAAM;YACN,MAAM,CAAC,QAAQ;YACf,MAAM,CAAC,SAAS;YAChB,MAAM,CAAC,QAAQ;YACf,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,GAAG,CAAC,CACxC,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,OAAe;IAC/C,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IACtC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,GAAG,UAAU,MAAM,CAAC,CAAC;IAC/C,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,GAAG,UAAU,UAAU,CAAC,CAAC;IACnD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC1C,MAAM,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;QACnE,MAAM,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,+CAA+C;IACjD,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OAAe;IAChD,gDAAgD;IAChD,MAAM,YAAY,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;IACjD,IAAI,YAAY;QAAE,OAAO,KAAK,CAAC;IAE/B,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,GAAG,UAAU,MAAM,CAAC,CAAC;IAC/C,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAChC,IACE,CAAC,MAAM;YACP,CAAC,MAAM,CAAC,QAAQ;YAChB,CAAC,MAAM,CAAC,SAAS;YACjB,CAAC,MAAM,CAAC,QAAQ;YAChB,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,KAAK,CAAC,EACzC,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,KAAK,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC1D,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;QACzF,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,KAAqB,EACrB,UAAkB,EAClB,MAAc,EACd,SAAiB;IAEjB,yCAAyC;IACzC,MAAM,QAAQ,GAA2B,EAAE,CAAC;IAC5C,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC/D,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;YACzB,QAAQ,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,YAAY,CAAC;QAC1C,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAiB;QAC3B,OAAO,EAAE,CAAC;QACV,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;QACxC,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,QAAQ;QACR,QAAQ,EAAE,MAAM,CAAC,WAAW,CAC1B,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC;YAClD,MAAM;YACN;gBACE,aAAa,EAAE,CAAC,CAAC,aAAa;gBAC9B,YAAY,EAAE,CAAC,CAAC,YAAY;gBAC5B,SAAS,EAAE,CAAC,CAAC,SAAS;aACvB;SACF,CAAC,CACH;QACD,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,UAAU,EAAE,KAAK,CAAC,UAAU;KAC7B,CAAC;IAEF,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAC1D,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,UAAU,CAAC,CAAC;IAElD,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,gBAAgB,EAAE;QAClD,MAAM,EAAE,KAAK;QACb,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,aAAa,EAAE,UAAU,SAAS,EAAE;SACrC;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,WAAW,EAAE,aAAa,CAAC,SAAS,CAAC;YACrC,gBAAgB,EAAE,UAAU,CAAC,QAAQ,CAAC;SACvC,CAAC;KACH,CAAC,CAAC;IAEH,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,yBAAyB,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IAC1D,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,OAAe;IAC9C,kDAAkD;IAClD,KAAK,MAAM,QAAQ,IAAI,CAAC,UAAU,EAAE,iBAAiB,CAAC,EAAE,CAAC;QACvD,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;QACpC,CAAC;QAAC,MAAM,CAAC;YACP,wCAAwC;QAC1C,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/transport.js

@@ -1,43 +0,0 @@
-export async function enrollDevice(apiUrl, inviteToken, identityPkHex, ephemeralPkHex, proofHex, platform) {
-    const res = await fetch(`${apiUrl}/api/v1/enroll`, {
-        method: "POST",
-        headers: { "Content-Type": "application/json" },
-        body: JSON.stringify({
-            invite_token: inviteToken,
-            identity_public_key: identityPkHex,
-            ephemeral_public_key: ephemeralPkHex,
-            proof_of_possession: proofHex,
-            platform: platform ?? "node",
-        }),
-    });
-    if (!res.ok) {
-        const detail = await res.text();
-        throw new Error(`Enrollment failed (${res.status}): ${detail}`);
-    }
-    return res.json();
-}
-export async function pollDeviceStatus(apiUrl, deviceId) {
-    const res = await fetch(`${apiUrl}/api/v1/devices/${deviceId}/status`);
-    if (res.status === 429) {
-        // Rate limited — caller should back off and retry
-        return { device_id: deviceId, status: "PENDING", fingerprint: "", rateLimited: true };
-    }
-    if (!res.ok) {
-        const detail = await res.text();
-        throw new Error(`Status poll failed (${res.status}): ${detail}`);
-    }
-    return res.json();
-}
-export async function activateDevice(apiUrl, deviceId) {
-    const res = await fetch(`${apiUrl}/api/v1/devices/${deviceId}/activate`, {
-        method: "POST",
-        headers: { "Content-Type": "application/json" },
-        body: JSON.stringify({}),
-    });
-    if (!res.ok) {
-        const detail = await res.text();
-        throw new Error(`Activation failed (${res.status}): ${detail}`);
-    }
-    return res.json();
-}
-//# sourceMappingURL=transport.js.map

package/dist/transport.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"transport.js","sourceRoot":"","sources":["../src/transport.ts"],"names":[],"mappings":"AAqBA,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,MAAc,EACd,WAAmB,EACnB,aAAqB,EACrB,cAAsB,EACtB,QAAgB,EAChB,QAAiB;IAEjB,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,gBAAgB,EAAE;QACjD,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,YAAY,EAAE,WAAW;YACzB,mBAAmB,EAAE,aAAa;YAClC,oBAAoB,EAAE,cAAc;YACpC,mBAAmB,EAAE,QAAQ;YAC7B,QAAQ,EAAE,QAAQ,IAAI,MAAM;SAC7B,CAAC;KACH,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,sBAAsB,GAAG,CAAC,MAAM,MAAM,MAAM,EAAE,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC;AACpB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,MAAc,EACd,QAAgB;IAEhB,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,mBAAmB,QAAQ,SAAS,CAAC,CAAC;IACvE,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACvB,kDAAkD;QAClD,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IACxF,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,uBAAuB,GAAG,CAAC,MAAM,MAAM,MAAM,EAAE,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC;AACpB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,MAAc,EACd,QAAgB;IAEhB,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,mBAAmB,QAAQ,WAAW,EAAE;QACvE,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;KACzB,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,sBAAsB,GAAG,CAAC,MAAM,MAAM,MAAM,EAAE,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC;AACpB,CAAC"}

package/dist/types.js

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":""}

package/dist/workspace-handlers.js

@@ -1,177 +0,0 @@
-/**
- * Workspace file handlers — upload, list, read workspace .md files.
- *
- * Workspace files (SOUL.md, IDENTITY.md, etc.) define agent personality
- * and behavior. These handlers validate filenames, verify signatures,
- * enforce size limits, and perform atomic writes.
- */
-import { readdir, readFile, writeFile, rename, stat, unlink, mkdir } from "node:fs/promises";
-import { join } from "node:path";
-import { randomUUID } from "node:crypto";
-import { verifyDocumentSignature, base64ToBytes } from "@agentvault/crypto";
-/** Maximum file size: 100 KB */
-const MAX_FILE_SIZE = 100 * 1024;
-/**
- * Validate a workspace filename.
- * Returns an error message if invalid, null if valid.
- *
- * Rules:
- * - Must end in .md
- * - No path traversal (.., /)
- * - No backslashes or null bytes
- * - Alphanumeric, hyphens, underscores, and dots only
- */
-export function validateWorkspaceFilename(filename) {
-    if (!filename || typeof filename !== "string") {
-        return "Filename is required";
-    }
-    // Null byte check
-    if (filename.includes("\0")) {
-        return "Filename contains null bytes";
-    }
-    // Path traversal checks
-    if (filename.includes("..")) {
-        return "Path traversal not allowed";
-    }
-    if (filename.includes("/") || filename.includes("\\")) {
-        return "Path separators not allowed in filename";
-    }
-    // Must end in .md
-    if (!filename.endsWith(".md")) {
-        return "Only .md files are allowed";
-    }
-    // Only allow alphanumeric, hyphens, underscores, dots
-    if (!/^[a-zA-Z0-9._-]+$/.test(filename)) {
-        return "Filename may only contain letters, numbers, hyphens, underscores, and dots";
-    }
-    return null;
-}
-/**
- * Handle a workspace file upload — verify signature, validate, write atomically.
- */
-export async function handleWorkspaceUpload(data, workspaceDir) {
-    // Validate filename
-    const filenameError = validateWorkspaceFilename(data.filename);
-    if (filenameError) {
-        return { status: "error", error: filenameError };
-    }
-    // Validate content
-    if (!data.content || typeof data.content !== "string") {
-        return { status: "error", error: "File content is required" };
-    }
-    // Size limit
-    const contentBytes = Buffer.byteLength(data.content, "utf-8");
-    if (contentBytes > MAX_FILE_SIZE) {
-        return {
-            status: "error",
-            error: `File exceeds 100KB limit (${Math.round(contentBytes / 1024)}KB)`,
-        };
-    }
-    // Verify Ed25519 signature
-    let verified = false;
-    try {
-        const signatureBytes = base64ToBytes(data.signature);
-        const publicKeyBytes = base64ToBytes(data.signer_public_key);
-        const signedPayload = {
-            filename: data.filename,
-            content: data.content,
-            timestamp: data.timestamp,
-        };
-        verified = await verifyDocumentSignature(signedPayload, signatureBytes, publicKeyBytes);
-    }
-    catch (err) {
-        return { status: "error", error: "Signature verification failed: invalid format" };
-    }
-    if (!verified) {
-        return { status: "error", error: "Invalid signature — file may have been tampered with" };
-    }
-    // Ensure workspace directory exists
-    await mkdir(workspaceDir, { recursive: true });
-    // Atomic write: write to temp, then rename
-    const targetPath = join(workspaceDir, data.filename);
-    const tempPath = join(workspaceDir, `.tmp_${randomUUID()}_${data.filename}`);
-    try {
-        await writeFile(tempPath, data.content, "utf-8");
-        await rename(tempPath, targetPath);
-    }
-    catch (err) {
-        // Clean up temp file if rename fails
-        try {
-            await unlink(tempPath);
-        }
-        catch {
-            // ignore cleanup errors
-        }
-        return { status: "error", error: `Failed to write file: ${err.message}` };
-    }
-    console.log(`[Workspace] Wrote ${data.filename} (${contentBytes} bytes, sig verified) → ${targetPath}`);
-    return {
-        status: "success",
-        written_path: targetPath,
-        verified_signature: true,
-    };
-}
-/**
- * List .md files in the workspace directory.
- */
-export async function handleWorkspaceList(workspaceDir) {
-    try {
-        const entries = await readdir(workspaceDir);
-        const files = [];
-        for (const entry of entries) {
-            if (!entry.endsWith(".md"))
-                continue;
-            try {
-                const filePath = join(workspaceDir, entry);
-                const fileStat = await stat(filePath);
-                if (!fileStat.isFile())
-                    continue;
-                files.push({
-                    filename: entry,
-                    size: fileStat.size,
-                    modified: fileStat.mtime.toISOString(),
-                });
-            }
-            catch {
-                // Skip files we can't stat
-            }
-        }
-        // Sort by filename
-        files.sort((a, b) => a.filename.localeCompare(b.filename));
-        return { files };
-    }
-    catch (err) {
-        // If directory doesn't exist, return empty list
-        if (err.code === "ENOENT") {
-            return { files: [] };
-        }
-        throw err;
-    }
-}
-/**
- * Read a workspace file's content.
- */
-export async function handleWorkspaceRead(data, workspaceDir) {
-    // Validate filename
-    const filenameError = validateWorkspaceFilename(data.filename);
-    if (filenameError) {
-        return { error: filenameError };
-    }
-    const filePath = join(workspaceDir, data.filename);
-    try {
-        const content = await readFile(filePath, "utf-8");
-        const fileStat = await stat(filePath);
-        return {
-            filename: data.filename,
-            content,
-            size: fileStat.size,
-        };
-    }
-    catch (err) {
-        if (err.code === "ENOENT") {
-            return { error: `File not found: ${data.filename}` };
-        }
-        return { error: `Failed to read file: ${err.message}` };
-    }
-}
-//# sourceMappingURL=workspace-handlers.js.map

package/dist/workspace-handlers.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"workspace-handlers.js","sourceRoot":"","sources":["../src/workspace-handlers.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAC7F,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,uBAAuB,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAqC5E,gCAAgC;AAChC,MAAM,aAAa,GAAG,GAAG,GAAG,IAAI,CAAC;AAEjC;;;;;;;;;GASG;AACH,MAAM,UAAU,yBAAyB,CAAC,QAAgB;IACxD,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC9C,OAAO,sBAAsB,CAAC;IAChC,CAAC;IAED,kBAAkB;IAClB,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5B,OAAO,8BAA8B,CAAC;IACxC,CAAC;IAED,wBAAwB;IACxB,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5B,OAAO,4BAA4B,CAAC;IACtC,CAAC;IACD,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACtD,OAAO,yCAAyC,CAAC;IACnD,CAAC;IAED,kBAAkB;IAClB,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9B,OAAO,4BAA4B,CAAC;IACtC,CAAC;IAED,sDAAsD;IACtD,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxC,OAAO,4EAA4E,CAAC;IACtF,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,IAAyB,EACzB,YAAoB;IAEpB,oBAAoB;IACpB,MAAM,aAAa,GAAG,yBAAyB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC/D,IAAI,aAAa,EAAE,CAAC;QAClB,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC;IACnD,CAAC;IAED,mBAAmB;IACnB,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QACtD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC;IAChE,CAAC;IAED,aAAa;IACb,MAAM,YAAY,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC9D,IAAI,YAAY,GAAG,aAAa,EAAE,CAAC;QACjC,OAAO;YACL,MAAM,EAAE,OAAO;YACf,KAAK,EAAE,6BAA6B,IAAI,CAAC,KAAK,CAAC,YAAY,GAAG,IAAI,CAAC,KAAK;SACzE,CAAC;IACJ,CAAC;IAED,2BAA2B;IAC3B,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,CAAC;QACH,MAAM,cAAc,GAAG,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACrD,MAAM,cAAc,GAAG,aAAa,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAC7D,MAAM,aAAa,GAAG;YACpB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAC;QACF,QAAQ,GAAG,MAAM,uBAAuB,CAAC,aAAa,EAAE,cAAc,EAAE,cAAc,CAAC,CAAC;IAC1F,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,+CAA+C,EAAE,CAAC;IACrF,CAAC;IAED,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,sDAAsD,EAAE,CAAC;IAC5F,CAAC;IAED,oCAAoC;IACpC,MAAM,KAAK,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE/C,2CAA2C;IAC3C,MAAM,UAAU,GAAG,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;IACrD,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,EAAE,QAAQ,UAAU,EAAE,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;IAE7E,IAAI,CAAC;QACH,MAAM,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACjD,MAAM,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IACrC,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,qCAAqC;QACrC,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;QACzB,CAAC;QAAC,MAAM,CAAC;YACP,wBAAwB;QAC1B,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,yBAAyB,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC;IAC5E,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,CAAC,QAAQ,KAAK,YAAY,2BAA2B,UAAU,EAAE,CAAC,CAAC;IAExG,OAAO;QACL,MAAM,EAAE,SAAS;QACjB,YAAY,EAAE,UAAU;QACxB,kBAAkB,EAAE,IAAI;KACzB,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,YAAoB;IAEpB,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,CAAC;QAC5C,MAAM,KAAK,GAAwB,EAAE,CAAC;QAEtC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAAE,SAAS;YAErC,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;gBAC3C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC;gBACtC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE;oBAAE,SAAS;gBAEjC,KAAK,CAAC,IAAI,CAAC;oBACT,QAAQ,EAAE,KAAK;oBACf,IAAI,EAAE,QAAQ,CAAC,IAAI;oBACnB,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE;iBACvC,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,2BAA2B;YAC7B,CAAC;QACH,CAAC;QAED,mBAAmB;QACnB,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;QAE3D,OAAO,EAAE,KAAK,EAAE,CAAC;IACnB,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,gDAAgD;QAChD,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC1B,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;QACvB,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,IAA0B,EAC1B,YAAoB;IAEpB,oBAAoB;IACpB,MAAM,aAAa,GAAG,yBAAyB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC/D,IAAI,aAAa,EAAE,CAAC;QAClB,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC;IAClC,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;IAEnD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAClD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC;QAEtC,OAAO;YACL,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,OAAO;YACP,IAAI,EAAE,QAAQ,CAAC,IAAI;SACpB,CAAC;IACJ,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC1B,OAAO,EAAE,KAAK,EAAE,mBAAmB,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC;QACvD,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,wBAAwB,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC;IAC1D,CAAC;AACH,CAAC"}