@agentvault/agentvault 0.17.4 → 0.17.5

package/openclaw.plugin.json

@@ -2,7 +2,7 @@
   "id": "agentvault",
   "name": "AgentVault",
   "description": "End-to-end encrypted, zero-knowledge messaging between AI agent owners and their agents.",
-  "version": "0.17.4",
+  "version": "0.17.5",
   "kind": "channel",
   "channels": [
     "agentvault"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentvault/agentvault",
-  "version": "0.17.4",
+  "version": "0.17.5",
   "type": "module",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",

package/dist/_cp.d.ts

@@ -1,10 +0,0 @@
-/**
- * Lazy shell wrapper for CLI-only commands (setup, doctor, create).
- *
- * Loads the underlying module lazily at first call so the OpenClaw
- * plugin entry point never references it.  Type declarations use
- * generic signatures to keep the .d.ts clean for the scanner too.
- */
-export declare function execSync(command: string, options?: any): any;
-export declare function spawnSync(command: string, args?: string[], options?: any): any;
-//# sourceMappingURL=_cp.d.ts.map

package/dist/_cp.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"_cp.d.ts","sourceRoot":"","sources":["../src/_cp.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAYH,wBAAgB,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,GAAG,GAAG,CAE5D;AAED,wBAAgB,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,OAAO,CAAC,EAAE,GAAG,GAAG,GAAG,CAE9E"}

package/dist/account-config.d.ts

@@ -1,20 +0,0 @@
-/**
- * Shared multi-account config resolution for AgentVault OpenClaw plugin.
- *
- * Supports two config shapes:
- * 1. Legacy single-agent: channels.agentvault.dataDir (returns ["default"])
- * 2. Multi-agent: channels.agentvault.accounts.{id}.dataDir (returns account keys)
- *
- * When `accounts` key is present, it takes precedence over top-level dataDir.
- */
-export interface ResolvedAccount {
-    accountId: string;
-    dataDir: string;
-    apiUrl: string;
-    agentName: string;
-    httpPort: number;
-    configured: boolean;
-}
-export declare function listAccountIds(cfg: any): string[];
-export declare function resolveAccount(cfg: any, accountId?: string): ResolvedAccount;
-//# sourceMappingURL=account-config.d.ts.map

package/dist/account-config.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"account-config.d.ts","sourceRoot":"","sources":["../src/account-config.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAKH,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,OAAO,CAAC;CACrB;AAED,wBAAgB,cAAc,CAAC,GAAG,EAAE,GAAG,GAAG,MAAM,EAAE,CAOjD;AAED,wBAAgB,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,eAAe,CA0C5E"}

package/dist/channel.d.ts

@@ -1,358 +0,0 @@
-import { EventEmitter } from "node:events";
-import { TelemetryReporter } from "@agentvault/crypto";
-import type { SecureChannelConfig, ChannelState, SendOptions, DecisionRequest, DecisionResponse, HeartbeatStatus, StatusAlert, RoomMemberInfo, RoomConversationInfo, RoomInfo, A2AChannel, DeliveryTarget, DeliveryContent, DeliveryOptions, DeliveryReceipt, TargetInfo } from "./types.js";
-export declare class SecureChannel extends EventEmitter {
-    private config;
-    private _state;
-    private _deviceId;
-    private _fingerprint;
-    private _primaryConversationId;
-    private _deviceJwt;
-    private _sessions;
-    private _ws;
-    private _pollTimer;
-    private _reconnectAttempt;
-    private _reconnectTimer;
-    private _rapidDisconnects;
-    private _lastWsOpenTime;
-    private _pingTimer;
-    private _lastServerMessage;
-    private _pendingAcks;
-    private _ackTimer;
-    private _stopped;
-    private _persisted;
-    private _httpServer;
-    private _mcpServer;
-    private _pollFallbackTimer;
-    private _heartbeatTimer;
-    private _heartbeatCallback;
-    private _heartbeatIntervalSeconds;
-    private _wakeDetectorTimer;
-    private _lastWakeTick;
-    private _pendingPollTimer;
-    private _syncMessageIds;
-    /** Sender Key chains — own chain per room for O(1) encryption */
-    private _senderKeyChains;
-    /** Sender Key peer state — peer chains per room for decryption */
-    private _senderKeyStates;
-    /** Queued A2A messages for responder channels not yet activated (no first initiator message received). */
-    private _a2aPendingQueue;
-    /** Dedup buffer for A2A message IDs (prevents double-delivery via direct + Redis) */
-    private _a2aSeenMessageIds;
-    private static readonly A2A_SEEN_MAX;
-    private _scanEngine;
-    private _scanRuleSetVersion;
-    private _telemetryReporter;
-    /** Topic ID from the most recent inbound message — used as fallback for replies. */
-    private _lastIncomingTopicId;
-    /** Room ID from the most recent inbound room message — used as fallback for HTTP /send replies. */
-    private _lastInboundRoomId;
-    /** Rate-limit: last resync_request timestamp per conversation (5-min cooldown). */
-    private _lastResyncRequest;
-    /** Debounce timer for server backup uploads (60s). */
-    private _serverBackupTimer;
-    private _serverBackupRunning;
-    private static readonly PING_INTERVAL_MS;
-    private static readonly SILENCE_TIMEOUT_MS;
-    private static readonly POLL_FALLBACK_INTERVAL_MS;
-    private static readonly POLL_FALLBACK_IDLE_MS;
-    constructor(config: SecureChannelConfig);
-    get state(): ChannelState;
-    get deviceId(): string | null;
-    get fingerprint(): string | null;
-    /** Returns the primary conversation ID (backward-compatible). */
-    get conversationId(): string | null;
-    /** Returns all active conversation IDs. */
-    get conversationIds(): string[];
-    /** Returns the number of active sessions. */
-    get sessionCount(): number;
-    /** Room ID from the most recent inbound room message (for HTTP /send fallback). */
-    get lastInboundRoomId(): string | undefined;
-    /** Returns all persisted room IDs and names (for outbound target registration). */
-    get roomIds(): Array<{
-        roomId: string;
-        name: string;
-    }>;
-    /** Returns hub addresses of all persisted A2A peer channels. */
-    get a2aPeerAddresses(): string[];
-    /** Resolves an A2A channel ID to the peer's hub address, or null if not found. */
-    resolveA2AChannelHub(channelId: string): string | null;
-    /** Returns the TelemetryReporter instance (available after WebSocket connect). */
-    get telemetry(): TelemetryReporter | null;
-    /**
-     * Check if a skill is in shadow mode. Returns the shadow config if active, undefined otherwise.
-     */
-    getShadowConfig(skillName: string): {
-        sessionId: string;
-        autonomyLevel: string;
-        decisionClass: string;
-    } | undefined;
-    start(): Promise<void>;
-    /**
-     * Fetch scan rules from the server and load them into the ScanEngine.
-     */
-    private _fetchScanRules;
-    /**
-     * Append a message to persistent history for cross-device replay.
-     */
-    private _appendHistory;
-    /**
-     * Encrypt and send a message to ALL owner devices (fanout).
-     * Each session gets the same plaintext encrypted independently.
-     */
-    send(plaintext: string, options?: SendOptions): Promise<void>;
-    /**
-     * Send a typing indicator to all owner devices.
-     * Ephemeral (unencrypted metadata), no ratchet advancement.
-     */
-    sendTyping(): void;
-    /**
-     * Send an activity span to all owner devices via WS.
-     * Ephemeral (unencrypted metadata, like typing), no ratchet advancement.
-     */
-    sendActivitySpan(spanData: Record<string, unknown>): void;
-    /**
-     * Send a decision request to the owner.
-     * Builds a structured envelope with decision metadata and sends it
-     * as a high-priority message. Returns the generated decision_id.
-     */
-    sendDecisionRequest(request: DecisionRequest): Promise<string>;
-    /**
-     * Wait for a decision response matching the given decisionId.
-     * Listens on the "message" event for messages where
-     * metadata.messageType === "decision_response" and the parsed plaintext
-     * contains a matching decision.decision_id.
-     * Optional timeout rejects with an Error.
-     */
-    waitForDecision(decisionId: string, timeoutMs?: number): Promise<DecisionResponse>;
-    /**
-     * Join a room by performing X3DH key exchange with each member
-     * for the pairwise conversations involving this device.
-     */
-    joinRoom(roomData: {
-        roomId: string;
-        name: string;
-        members: RoomMemberInfo[];
-        conversations: RoomConversationInfo[];
-        forceRekey?: boolean;
-    }): Promise<void>;
-    /**
-     * Send an encrypted message to all members of a room.
-     * Uses Sender Key (O(1)) if available, otherwise pairwise fan-out.
-     */
-    sendToRoom(roomId: string, plaintext: string, opts?: {
-        messageType?: string;
-        priority?: string;
-        metadata?: Record<string, unknown>;
-    }): Promise<void>;
-    /**
-     * Leave a room: remove sessions and persisted room state.
-     */
-    leaveRoom(roomId: string): Promise<void>;
-    /**
-     * Return info for all joined rooms.
-     */
-    getRooms(): RoomInfo[];
-    startHeartbeat(intervalSeconds: number, statusCallback: () => HeartbeatStatus): void;
-    stopHeartbeat(): Promise<void>;
-    sendStatusAlert(alert: StatusAlert): Promise<void>;
-    sendArtifact(artifact: {
-        filePath: string;
-        filename: string;
-        mimeType: string;
-        description?: string;
-    }): Promise<void>;
-    sendActionConfirmation(confirmation: {
-        action: string;
-        status: "completed" | "failed" | "partial";
-        decisionId?: string;
-        detail?: string;
-    }): Promise<void>;
-    sendActionConfirmationToRoom(roomId: string, confirmation: {
-        action: string;
-        status: "completed" | "failed" | "partial";
-        decisionId?: string;
-        detail?: string;
-        estimated_cost?: number;
-    }): Promise<void>;
-    /**
-     * Canonical message dispatcher. ALL outbound messages should flow through this method.
-     * Routes based on explicit target — never silently falls back to a room.
-     */
-    deliver(target: DeliveryTarget, content: DeliveryContent, options?: DeliveryOptions): Promise<DeliveryReceipt>;
-    /**
-     * Returns all available delivery destinations with availability status.
-     */
-    listTargets(): TargetInfo[];
-    private _sendHeartbeat;
-    stop(): Promise<void>;
-    startHttpServer(port: number): void;
-    private _stopHttpServer;
-    /**
-     * Attach an MCP server instance to this channel.
-     * The MCP server will be served at /mcp on the local HTTP server.
-     */
-    setMcpServer(mcpServer: import("./mcp-server.js").AgentVaultMcpServer): void;
-    /** The attached MCP server, if any. */
-    get mcpServer(): import("./mcp-server.js").AgentVaultMcpServer | null;
-    /**
-     * Create a new topic within the conversation group.
-     * Requires the channel to be initialized with a groupId (from activation).
-     */
-    createTopic(name: string): Promise<{
-        id: string;
-        name: string;
-        isDefault: boolean;
-    }>;
-    /**
-     * List all topics in the conversation group.
-     * Requires the channel to be initialized with a groupId (from activation).
-     */
-    listTopics(): Promise<Array<{
-        id: string;
-        name: string;
-        isDefault: boolean;
-    }>>;
-    /**
-     * Request a new A2A channel with another agent by their hub address.
-     * Returns the channel_id from the server response.
-     */
-    requestA2AChannel(responderHubAddress: string): Promise<string>;
-    /**
-     * Send a message to another agent via an active A2A channel.
-     * Looks up the A2A conversation by hub address and sends via WS.
-     *
-     * If the channel has an established E2E session, the message is encrypted
-     * with the Double Ratchet. If the responder hasn't received the initiator's
-     * first message yet (ratchet not activated), the message is queued locally
-     * and flushed when the first inbound message arrives.
-     *
-     * Falls back to plaintext for channels without a session (legacy/pre-encryption).
-     */
-    sendToAgent(hubAddress: string, text: string, opts?: {
-        parentSpanId?: string;
-    }): Promise<void>;
-    /**
-     * List all A2A channels for this agent.
-     * Fetches from the server and updates local persisted state.
-     */
-    listA2AChannels(): Promise<A2AChannel[]>;
-    private _enroll;
-    private _poll;
-    private _activate;
-    private _connect;
-    /**
-     * Handle an incoming encrypted message from a specific conversation.
-     * Decrypts using the appropriate session ratchet, emits to the agent,
-     * and relays as sync messages to sibling sessions.
-     */
-    private _handleIncomingMessage;
-    /**
-     * Download an encrypted attachment blob, decrypt it, verify integrity,
-     * and save the plaintext file to disk.
-     */
-    private _downloadAndDecryptAttachment;
-    /**
-     * Upload an attachment file: encrypt, upload to server, return metadata
-     * for inclusion in the message envelope.
-     */
-    private _uploadAttachment;
-    /**
-     * Send a message with an attached file. Encrypts the file, uploads it,
-     * then sends the envelope with attachment metadata via Double Ratchet.
-     */
-    sendWithAttachment(plaintext: string, filePath: string, options?: {
-        topicId?: string;
-    }): Promise<void>;
-    /**
-     * Relay an owner's message to all sibling sessions as encrypted sync messages.
-     * This allows all owner devices to see messages from any single device.
-     */
-    private _relaySyncToSiblings;
-    /**
-     * Resolve the agent's workspace directory.
-     * Looks for OpenClaw workspace config, falls back to default path.
-     */
-    private _resolveWorkspaceDir;
-    /**
-     * Send a structured JSON reply to a specific conversation.
-     * Encrypts the payload via the conversation's ratchet and sends via WebSocket.
-     */
-    private _sendStructuredReply;
-    /**
-     * Send stored message history to a newly-activated session.
-     * Batches all history into a single encrypted message.
-     */
-    private _replayHistoryToSession;
-    /**
-     * Handle a device_linked event: a new owner device has joined.
-     * Fetches the new device's public keys, performs X3DH, and initializes
-     * a new ratchet session.
-     */
-    private _handleDeviceLinked;
-    /**
-     * Handle a resync_request from the owner (owner-initiated ratchet re-establishment).
-     * Re-derives shared secret via X3DH as responder, initializes fresh receiver ratchet,
-     * and sends resync_ack back with agent's public keys.
-     */
-    private _handleResyncRequest;
-    /**
-     * Handle an incoming room message. Finds the pairwise conversation
-     * for the sender, decrypts, and emits a room_message event.
-     */
-    private _handleRoomMessage;
-    /**
-     * Find the pairwise conversation ID for a given sender in a room.
-     */
-    private _findConversationForSender;
-    /**
-     * Distribute own sender key to all pairwise sessions in a room.
-     * Each distribution is encrypted via the pairwise ratchet and sent
-     * as a `sender_key_distribution` WS event.
-     */
-    private _distributeSenderKey;
-    /**
-     * Handle an incoming sender_key_distribution event.
-     * Decrypts using the pairwise ratchet and ingests the peer's sender key.
-     */
-    private _handleSenderKeyDistribution;
-    /**
-     * Handle an incoming room_message_sk event (Sender Key encrypted message).
-     */
-    private _handleRoomMessageSK;
-    /**
-     * Sync missed messages across ALL sessions.
-     * For each conversation, fetches messages since last sync and decrypts.
-     */
-    /**
-     * Paginated sync: fetch missed messages in pages of 200, up to 5 pages (1000 messages).
-     * Tracks message IDs in _syncMessageIds to prevent duplicate processing from concurrent WS messages.
-     */
-    private _syncMissedMessages;
-    private _sendAck;
-    private _flushAcks;
-    private _flushOutboundQueue;
-    private _startPing;
-    private _stopPing;
-    private _startWakeDetector;
-    private _stopWakeDetector;
-    private _startPendingPoll;
-    private _stopPendingPoll;
-    private _checkPendingMessages;
-    private _scheduleReconnect;
-    private _setState;
-    private _startPollFallback;
-    private _stopPollFallback;
-    private _handleError;
-    /**
-     * Persist all ratchet session states to disk.
-     * Syncs live ratchet states back into the persisted sessions map.
-     */
-    private _persistState;
-    /**
-     * Debounced server backup upload (60s after last state change).
-     * Only runs when backupCode is configured.
-     */
-    private _scheduleServerBackup;
-}
-//# sourceMappingURL=channel.d.ts.map

package/dist/channel.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"channel.d.ts","sourceRoot":"","sources":["../src/channel.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAQ3C,OAAO,EAWL,iBAAiB,EAClB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,KAAK,EACV,mBAAmB,EACnB,YAAY,EAMZ,WAAW,EACX,eAAe,EACf,gBAAgB,EAChB,eAAe,EACf,WAAW,EACX,cAAc,EACd,oBAAoB,EACpB,QAAQ,EAER,UAAU,EAEV,cAAc,EACd,eAAe,EACf,eAAe,EACf,eAAe,EACf,UAAU,EACX,MAAM,YAAY,CAAC;AA6DpB,qBAAa,aAAc,SAAQ,YAAY;IAmEjC,OAAO,CAAC,MAAM;IAlE1B,OAAO,CAAC,MAAM,CAAwB;IACtC,OAAO,CAAC,SAAS,CAAuB;IACxC,OAAO,CAAC,YAAY,CAAuB;IAC3C,OAAO,CAAC,sBAAsB,CAAc;IAC5C,OAAO,CAAC,UAAU,CAAuB;IACzC,OAAO,CAAC,SAAS,CAGH;IACd,OAAO,CAAC,GAAG,CAA0B;IACrC,OAAO,CAAC,UAAU,CAA8C;IAChE,OAAO,CAAC,iBAAiB,CAAK;IAC9B,OAAO,CAAC,eAAe,CAA8C;IACrE,OAAO,CAAC,iBAAiB,CAAK;IAC9B,OAAO,CAAC,eAAe,CAAK;IAC5B,OAAO,CAAC,UAAU,CAA+C;IACjE,OAAO,CAAC,kBAAkB,CAAK;IAC/B,OAAO,CAAC,YAAY,CAAgB;IACpC,OAAO,CAAC,SAAS,CAA8C;IAC/D,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,UAAU,CAA+B;IACjD,OAAO,CAAC,WAAW,CAAuB;IAC1C,OAAO,CAAC,UAAU,CAA8D;IAChF,OAAO,CAAC,kBAAkB,CAA+C;IACzE,OAAO,CAAC,eAAe,CAA+C;IACtE,OAAO,CAAC,kBAAkB,CAAwC;IAClE,OAAO,CAAC,yBAAyB,CAAa;IAC9C,OAAO,CAAC,kBAAkB,CAA+C;IACzE,OAAO,CAAC,aAAa,CAAsB;IAC3C,OAAO,CAAC,iBAAiB,CAA+C;IACxE,OAAO,CAAC,eAAe,CAA4B;IAEnD,iEAAiE;IACjE,OAAO,CAAC,gBAAgB,CAA0C;IAClE,kEAAkE;IAClE,OAAO,CAAC,gBAAgB,CAA0C;IAElE,0GAA0G;IAC1G,OAAO,CAAC,gBAAgB,CAAiF;IACzG,qFAAqF;IACrF,OAAO,CAAC,kBAAkB,CAAqB;IAC/C,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAO;IAC3C,OAAO,CAAC,WAAW,CAA2B;IAC9C,OAAO,CAAC,mBAAmB,CAAK;IAChC,OAAO,CAAC,kBAAkB,CAAkC;IAE5D,oFAAoF;IACpF,OAAO,CAAC,oBAAoB,CAAqB;IAEjD,mGAAmG;IACnG,OAAO,CAAC,kBAAkB,CAAqB;IAE/C,mFAAmF;IACnF,OAAO,CAAC,kBAAkB,CAAkC;IAE5D,sDAAsD;IACtD,OAAO,CAAC,kBAAkB,CAA8C;IACxE,OAAO,CAAC,oBAAoB,CAAS;IAIrC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAU;IAClD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAU;IACpD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,yBAAyB,CAAU;IAC3D,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,qBAAqB,CAAU;gBAEnC,MAAM,EAAE,mBAAmB;IAI/C,IAAI,KAAK,IAAI,YAAY,CAExB;IAED,IAAI,QAAQ,IAAI,MAAM,GAAG,IAAI,CAE5B;IAED,IAAI,WAAW,IAAI,MAAM,GAAG,IAAI,CAE/B;IAED,iEAAiE;IACjE,IAAI,cAAc,IAAI,MAAM,GAAG,IAAI,CAElC;IAED,2CAA2C;IAC3C,IAAI,eAAe,IAAI,MAAM,EAAE,CAE9B;IAED,6CAA6C;IAC7C,IAAI,YAAY,IAAI,MAAM,CAEzB;IAED,mFAAmF;IACnF,IAAI,iBAAiB,IAAI,MAAM,GAAG,SAAS,CAE1C;IAED,mFAAmF;IACnF,IAAI,OAAO,IAAI,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAGrD;IAED,gEAAgE;IAChE,IAAI,gBAAgB,IAAI,MAAM,EAAE,CAG/B;IAED,kFAAkF;IAClF,oBAAoB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAKtD,kFAAkF;IAClF,IAAI,SAAS,IAAI,iBAAiB,GAAG,IAAI,CAExC;IAED;;OAEG;IACH,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS;IAI7G,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAoF5B;;OAEG;YACW,eAAe;IAiB7B;;OAEG;IACH,OAAO,CAAC,cAAc;IAuBtB;;;OAGG;IACG,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IA0HnE;;;OAGG;IACH,UAAU,IAAI,IAAI;IAYlB;;;OAGG;IACH,gBAAgB,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;IAazD;;;;OAIG;IACG,mBAAmB,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC;IA6BpE;;;;;;OAMG;IACH,eAAe,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAuClF;;;OAGG;IACG,QAAQ,CAAC,QAAQ,EAAE;QACvB,MAAM,EAAE,MAAM,CAAC;QACf,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,cAAc,EAAE,CAAC;QAC1B,aAAa,EAAE,oBAAoB,EAAE,CAAC;QACtC,UAAU,CAAC,EAAE,OAAO,CAAC;KACtB,GAAG,OAAO,CAAC,IAAI,CAAC;IAuJjB;;;OAGG;IACG,UAAU,CACd,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,IAAI,CAAC,EAAE;QACL,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KACpC,GACA,OAAO,CAAC,IAAI,CAAC;IAmHhB;;OAEG;IACG,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAoB9C;;OAEG;IACH,QAAQ,IAAI,QAAQ,EAAE;IAYtB,cAAc,CACZ,eAAe,EAAE,MAAM,EACvB,cAAc,EAAE,MAAM,eAAe,GACpC,IAAI;IAUD,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC;IAuB9B,eAAe,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAsBlD,YAAY,CAAC,QAAQ,EAAE;QAC3B,QAAQ,EAAE,MAAM,CAAC;QACjB,QAAQ,EAAE,MAAM,CAAC;QACjB,QAAQ,EAAE,MAAM,CAAC;QACjB,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,GAAG,OAAO,CAAC,IAAI,CAAC;IA2CX,sBAAsB,CAAC,YAAY,EAAE;QACzC,MAAM,EAAE,MAAM,CAAC;QACf,MAAM,EAAE,WAAW,GAAG,QAAQ,GAAG,SAAS,CAAC;QAC3C,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,GAAG,OAAO,CAAC,IAAI,CAAC;IAkBX,4BAA4B,CAChC,MAAM,EAAE,MAAM,EACd,YAAY,EAAE;QACZ,MAAM,EAAE,MAAM,CAAC;QACf,MAAM,EAAE,WAAW,GAAG,QAAQ,GAAG,SAAS,CAAC;QAC3C,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,cAAc,CAAC,EAAE,MAAM,CAAC;KACzB,GACA,OAAO,CAAC,IAAI,CAAC;IA0BhB;;;OAGG;IACG,OAAO,CACX,MAAM,EAAE,cAAc,EACtB,OAAO,EAAE,eAAe,EACxB,OAAO,CAAC,EAAE,eAAe,GACxB,OAAO,CAAC,eAAe,CAAC;IA0I3B;;OAEG;IACH,WAAW,IAAI,UAAU,EAAE;IAqC3B,OAAO,CAAC,cAAc;IAkBhB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAqC3B,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI;IAsGnC,OAAO,CAAC,eAAe;IAOvB;;;OAGG;IACH,YAAY,CAAC,SAAS,EAAE,OAAO,iBAAiB,EAAE,mBAAmB,GAAG,IAAI;IAI5E,uCAAuC;IACvC,IAAI,SAAS,IAAI,OAAO,iBAAiB,EAAE,mBAAmB,GAAG,IAAI,CAEpE;IAID;;;OAGG;IACG,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,OAAO,CAAA;KAAE,CAAC;IAsC1F;;;OAGG;IACG,UAAU,IAAI,OAAO,CAAC,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IAiCpF;;;OAGG;IACG,iBAAiB,CAAC,mBAAmB,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IA0CrE;;;;;;;;;;OAUG;IACG,WAAW,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,YAAY,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAmHpG;;;OAGG;IACG,eAAe,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;YAoDhC,OAAO;IAgDrB,OAAO,CAAC,KAAK;YAsCC,SAAS;IAyIvB,OAAO,CAAC,QAAQ;IAwrBhB;;;;OAIG;YACW,sBAAsB;IAmRpC;;;OAGG;YACW,6BAA6B;IA6C3C;;;OAGG;YACW,iBAAiB;IAwD/B;;;OAGG;IACG,kBAAkB,CACtB,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,EAChB,OAAO,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GAC7B,OAAO,CAAC,IAAI,CAAC;IA8ChB;;;OAGG;YACW,oBAAoB;IAkDlC;;;OAGG;IACH,OAAO,CAAC,oBAAoB;IAqC5B;;;OAGG;YACW,oBAAoB;IAyBlC;;;OAGG;YACW,uBAAuB;IAkCrC;;;;OAIG;YACW,mBAAmB;IAuEjC;;;;OAIG;YACW,oBAAoB;IA8ElC;;;OAGG;YACW,kBAAkB;IAyNhC;;OAEG;IACH,OAAO,CAAC,0BAA0B;IAiBlC;;;;OAIG;YACW,oBAAoB;IAuClC;;;OAGG;YACW,4BAA4B;IA2F1C;;OAEG;YACW,oBAAoB;IAqGlC;;;OAGG;IACH;;;OAGG;YACW,mBAAmB;IAsKjC,OAAO,CAAC,QAAQ;IAMhB,OAAO,CAAC,UAAU;YAMJ,mBAAmB;IAmCjC,OAAO,CAAC,UAAU;IAelB,OAAO,CAAC,SAAS;IAOjB,OAAO,CAAC,kBAAkB;IAe1B,OAAO,CAAC,iBAAiB;IAOzB,OAAO,CAAC,iBAAiB;IAOzB,OAAO,CAAC,gBAAgB;YAOV,qBAAqB;IAuCnC,OAAO,CAAC,kBAAkB;IA4C1B,OAAO,CAAC,SAAS;IAejB,OAAO,CAAC,kBAAkB;IA2H1B,OAAO,CAAC,iBAAiB;IAQzB,OAAO,CAAC,YAAY;IAKpB;;;OAGG;YACW,aAAa;IAyB3B;;;OAGG;IACH,OAAO,CAAC,qBAAqB;CAqB9B"}

package/dist/cli.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=cli.d.ts.map

package/dist/cli.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":""}

package/dist/create-agent.d.ts

@@ -1,28 +0,0 @@
-/**
- * AgentVault "create" command — spin up a brand new OpenClaw peer agent.
- *
- * Ports the logic from ~/.openclaw/workspace/scripts/create-agent.sh into
- * TypeScript, eliminating the jq dependency.
- *
- * Usage: npx @agentvault/agentvault create <name> --token=av_tok_...
- */
-export interface CreateAgentOptions {
-    name: string;
-    token: string;
-    port?: number;
-    apiUrl: string;
-    force?: boolean;
-}
-/** Resolve the OpenClaw home directory (~/.openclaw) */
-export declare function openclawHome(): string;
-/** Parse openclaw.json and return its contents. */
-export declare function readOpenClawConfig(home: string): any;
-/**
- * Scan all accounts in openclaw.json for httpPort values and return next free port.
- * Minimum port is `startPort` (default 18790).
- */
-export declare function findNextPort(config: any, startPort?: number): number;
-/** Generate workspace template files for a new agent. */
-export declare function generateWorkspaceFiles(name: string): Record<string, string>;
-export declare function runCreateCommand(options: CreateAgentOptions): Promise<void>;
-//# sourceMappingURL=create-agent.d.ts.map

package/dist/create-agent.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"create-agent.d.ts","sourceRoot":"","sources":["../src/create-agent.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAOH,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAID,wDAAwD;AACxD,wBAAgB,YAAY,IAAI,MAAM,CAGrC;AAED,mDAAmD;AACnD,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,GAAG,CAIpD;AA4BD;;;GAGG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,GAAG,EAAE,SAAS,SAAQ,GAAG,MAAM,CAInE;AAOD,yDAAyD;AACzD,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CA8C3E;AAID,wBAAsB,gBAAgB,CAAC,OAAO,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAqOjF"}

package/dist/crypto-helpers.d.ts

@@ -1,2 +0,0 @@
-export { hexToBytes, bytesToHex, base64ToBytes, bytesToBase64, encryptedMessageToTransport, transportToEncryptedMessage, encryptedMessageToTransportV2Full, type TransportMessage, type TransportMessageV2, SenderKeyChain, SenderKeyState, type SenderKeyDistribution, type SenderKeyMessage, } from "@agentvault/crypto";
-//# sourceMappingURL=crypto-helpers.d.ts.map

package/dist/crypto-helpers.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"crypto-helpers.d.ts","sourceRoot":"","sources":["../src/crypto-helpers.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,UAAU,EACV,UAAU,EACV,aAAa,EACb,aAAa,EACb,2BAA2B,EAC3B,2BAA2B,EAC3B,iCAAiC,EACjC,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACvB,cAAc,EACd,cAAc,EACd,KAAK,qBAAqB,EAC1B,KAAK,gBAAgB,GACtB,MAAM,oBAAoB,CAAC"}

package/dist/doctor.d.ts

@@ -1,41 +0,0 @@
-/**
- * AgentVault "doctor" command — diagnostic checks and plist fixer.
- *
- * Detects stale macOS LaunchAgent plist paths (common after pnpm updates)
- * and offers to install a stable wrapper script so future updates don't
- * break the gateway.
- *
- * Usage: npx @agentvault/agentvault doctor [--fix]
- */
-export type CheckStatus = "pass" | "warn" | "fail" | "skip";
-export interface CheckResult {
-    name: string;
-    status: CheckStatus;
-    message: string;
-}
-export interface PlistInfo {
-    plistPath: string;
-    programArgs: string[];
-    stalePaths: string[];
-}
-export interface PlistValidationResult {
-    status: "ok" | "stale" | "missing" | "skip" | "already-fixed";
-    plistPath?: string;
-    stalePaths?: string[];
-}
-export declare function checkOpenClawInstalled(): CheckResult;
-export declare function checkConfigExists(home: string): CheckResult;
-export declare function checkAgentVaultChannel(config: any): CheckResult;
-export declare function checkPluginsAllow(config: any): CheckResult;
-export declare function checkPlist(): CheckResult;
-export declare function checkGatewayPort(): CheckResult;
-export declare function checkAgentDataDirs(config: any): CheckResult;
-export declare function checkPm2Status(): CheckResult;
-export declare function plistPath(): string;
-export declare function parsePlist(plistFile: string): PlistInfo | null;
-export declare function validatePlist(): PlistValidationResult;
-export declare function applyPlistFix(info: PlistInfo): boolean;
-export declare function runDoctorCommand(options?: {
-    fix?: boolean;
-}): Promise<void>;
-//# sourceMappingURL=doctor.d.ts.map

package/dist/doctor.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"doctor.d.ts","sourceRoot":"","sources":["../src/doctor.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAUH,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;AAE5D,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,WAAW,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,SAAS;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AAED,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,IAAI,GAAG,OAAO,GAAG,SAAS,GAAG,MAAM,GAAG,eAAe,CAAC;IAC9D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;CACvB;AAOD,wBAAgB,sBAAsB,IAAI,WAAW,CAYpD;AAED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,CAmB3D;AAED,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,GAAG,GAAG,WAAW,CAgB/D;AAED,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,GAAG,GAAG,WAAW,CAoB1D;AAED,wBAAgB,UAAU,IAAI,WAAW,CAyBxC;AAED,wBAAgB,gBAAgB,IAAI,WAAW,CAW9C;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,GAAG,GAAG,WAAW,CAsC3D;AAED,wBAAgB,cAAc,IAAI,WAAW,CAoB5C;AAID,wBAAgB,SAAS,IAAI,MAAM,CAGlC;AAED,wBAAgB,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CA2B9D;AAED,wBAAgB,aAAa,IAAI,qBAAqB,CA2BrD;AAID,wBAAgB,aAAa,CAAC,IAAI,EAAE,SAAS,GAAG,OAAO,CAsEtD;AAID,wBAAsB,gBAAgB,CAAC,OAAO,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAoGjF"}

package/dist/fetch-interceptor.d.ts

@@ -1,32 +0,0 @@
-export interface HttpCallReport {
-    method: string;
-    url: string;
-    statusCode: number;
-    latencyMs: number;
-    traceId?: string;
-    parentSpanId?: string;
-}
-export interface TraceContext {
-    traceId: string;
-    parentSpanId: string;
-}
-export interface FetchInterceptorOptions {
-    onHttpCall: (report: HttpCallReport) => void;
-    skipPatterns?: RegExp[];
-}
-/**
- * Install HTTP interceptor using both undici diagnostics channels and
- * globalThis.fetch monkey-patching. Idempotent.
- */
-export declare function installFetchInterceptor(opts: FetchInterceptorOptions): void;
-/**
- * Uninstall all interceptors. Safe to call even if not installed.
- */
-export declare function uninstallFetchInterceptor(): void;
-/**
- * Run an async function with trace context attached via AsyncLocalStorage.
- * Any HTTP calls made within `fn` (via undici or fetch) will include
- * traceId/parentSpanId in their HttpCallReport.
- */
-export declare function runWithTraceContext<T>(ctx: TraceContext, fn: () => T | Promise<T>): Promise<T>;
-//# sourceMappingURL=fetch-interceptor.d.ts.map

package/dist/fetch-interceptor.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"fetch-interceptor.d.ts","sourceRoot":"","sources":["../src/fetch-interceptor.ts"],"names":[],"mappings":"AAoBA,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,uBAAuB;IACtC,UAAU,EAAE,CAAC,MAAM,EAAE,cAAc,KAAK,IAAI,CAAC;IAC7C,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;CACzB;AA0CD;;;GAGG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,uBAAuB,GAAG,IAAI,CAmK3E;AAED;;GAEG;AACH,wBAAgB,yBAAyB,IAAI,IAAI,CAkBhD;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,CAAC,EACnC,GAAG,EAAE,YAAY,EACjB,EAAE,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,GACvB,OAAO,CAAC,CAAC,CAAC,CAEZ"}

package/dist/gateway-send.d.ts

@@ -1,98 +0,0 @@
-/**
- * Gateway send helper — lets agents send messages to their owner
- * via the plugin's local HTTP server (port 18790) or OpenClaw managed routes.
- *
- * Delivery path: sendToOwner() → plugin HTTP /send → SecureChannel.send()
- *   → Double Ratchet encrypt → WebSocket → backend → owner's app
- */
-export interface GatewaySendOptions {
-    /** Override the gateway port (default: env GATEWAY_SEND_PORT or 18790) */
-    port?: number;
-    /** Override the gateway host (default: 127.0.0.1) */
-    host?: string;
-    /** AbortSignal for cancellation */
-    signal?: AbortSignal;
-}
-export interface GatewaySendResult {
-    ok: boolean;
-    error?: string;
-}
-export interface GatewayStatusResult {
-    ok: boolean;
-    state?: string;
-    deviceId?: string;
-    sessions?: number;
-    error?: string;
-}
-/**
- * Send a plaintext message to the agent's owner via the gateway HTTP server.
- * Never throws — returns `{ ok: false, error }` on failure.
- */
-export declare function sendToOwner(text: string, options?: GatewaySendOptions): Promise<GatewaySendResult>;
-/**
- * Send a decision request to the agent's owner via the gateway HTTP server.
- * Never throws — returns `{ ok: false, error }` on failure.
- */
-export declare function sendDecisionToOwner(request: {
-    title: string;
-    description?: string;
-    options: Array<{
-        option_id: string;
-        label: string;
-        risk_level?: string;
-        is_default?: boolean;
-    }>;
-    context_refs?: Array<{
-        type: string;
-        uri: string;
-        label: string;
-    }>;
-    deadline?: string;
-    auto_action?: {
-        option_id: string;
-        trigger: string;
-        description?: string;
-    };
-}, options?: GatewaySendOptions): Promise<GatewaySendResult & {
-    decision_id?: string;
-}>;
-/**
- * Send a plaintext message to a specific room via the gateway HTTP server.
- * Never throws — returns `{ ok: false, error }` on failure.
- */
-export declare function sendToRoom(roomId: string, text: string, options?: GatewaySendOptions): Promise<GatewaySendResult>;
-/**
- * Send a plaintext message to any target via the gateway HTTP server.
- * Accepts target strings: "owner", "room:<id>", "a2a:<addr>", "context".
- * Never throws — returns `{ ok: false, error }` on failure.
- */
-export declare function sendToTarget(target: string, text: string, options?: GatewaySendOptions): Promise<GatewaySendResult & {
-    destination?: {
-        kind: string;
-        id?: string;
-    };
-}>;
-/**
- * Discover available delivery targets from the gateway.
- * Never throws — returns `{ ok: false, error }` on failure.
- */
-export declare function listTargets(options?: GatewaySendOptions): Promise<{
-    ok: boolean;
-    targets?: Array<{
-        kind: string;
-        id: string;
-        label: string;
-        available: boolean;
-    }>;
-    context?: {
-        kind: string;
-        roomId?: string;
-    };
-    error?: string;
-}>;
-/**
- * Check gateway health / status.
- * Never throws — returns `{ ok: false, error }` on failure.
- */
-export declare function checkGateway(options?: GatewaySendOptions): Promise<GatewayStatusResult>;
-//# sourceMappingURL=gateway-send.d.ts.map