@agentvault/agentvault 0.17.5 → 0.19.0

package/dist/setup.js

@@ -0,0 +1,329 @@
+/**
+ * AgentVault one-time setup command.
+ *
+ * Runs enrollment + waits for owner approval + persists state,
+ * then auto-registers the agentvault channel in openclaw config.
+ *
+ * Usage: npx @agentvault/agentvault setup --token=av_tok_...
+ */
+import { execSync, spawnSync } from "node:child_process";
+import * as readline from "node:readline";
+import { resolve } from "node:path";
+import { SecureChannel } from "./channel.js";
+import { VERSION } from "./index.js";
+export async function runSetupCommand(options) {
+    const { token, name, apiUrl } = options;
+    const dataDir = resolve(options.dataDir.replace(/^~/, process.env.HOME ?? "~"));
+    console.log(`
+╔══════════════════════════════════════════════╗
+║         AgentVault — First-Time Setup        ║
+╚══════════════════════════════════════════════╝
+
+  Agent name : ${name}
+  Data dir   : ${dataDir}
+  API        : ${apiUrl}
+`);
+    let enrollDone = false;
+    const channel = new SecureChannel({
+        inviteToken: token,
+        dataDir,
+        apiUrl,
+        agentName: name,
+        onMessage: () => { }, // Not handling messages during setup
+        onStateChange: (state) => {
+            switch (state) {
+                case "enrolling":
+                    console.log("  Enrolling with AgentVault server...");
+                    break;
+                case "polling":
+                    console.log("  Waiting for approval in your AgentVault dashboard...");
+                    if (channel.fingerprint) {
+                        console.log(`\n  Fingerprint: ${channel.fingerprint}`);
+                        console.log("  Verify this fingerprint matches the one shown in your dashboard");
+                        console.log("  before clicking Approve.\n");
+                    }
+                    break;
+                case "activating":
+                    console.log("  Approved! Setting up encryption...");
+                    break;
+                case "ready":
+                    enrollDone = true;
+                    console.log("  ✅ Enrollment complete! Secure channel established.\n");
+                    break;
+                case "error":
+                    console.error("  ❌ Setup encountered an error.");
+                    break;
+            }
+        },
+    });
+    channel.on("error", (err) => {
+        console.error(`\n  ❌ Setup failed: ${err.message}\n`);
+        process.exit(1);
+    });
+    // Start enrollment — blocks until ready or error
+    await new Promise((res, rej) => {
+        const check = setInterval(() => {
+            if (enrollDone) {
+                clearInterval(check);
+                res();
+            }
+        }, 500);
+        channel.start().catch((err) => {
+            clearInterval(check);
+            rej(err);
+        });
+    });
+    // Stop the live connection — OpenClaw's gateway will own it after restart
+    await channel.stop();
+    // --- Install plugin + register in OpenClaw config ---
+    console.log("  Installing AgentVault plugin in OpenClaw...\n");
+    // Extend PATH to find openclaw regardless of how npx was invoked
+    const home = process.env.HOME ?? "";
+    const extraPaths = [
+        `${home}/.local/bin`,
+        `${home}/.pnpm/bin`,
+        `${home}/Library/pnpm/bin`,
+        "/usr/local/bin",
+        "/opt/homebrew/bin",
+    ].join(":");
+    const env = { ...process.env, PATH: `${extraPaths}:${process.env.PATH ?? ""}` };
+    const pluginInstalled = installPlugin(env);
+    if (!pluginInstalled) {
+        // openclaw not in PATH — print full manual instructions and bail
+        console.log(`
+  ⚠️  Could not auto-configure OpenClaw (is 'openclaw' in your PATH?).
+
+  1. Install the plugin:
+     openclaw plugins install @agentvault/agentvault
+
+  2. Register the plugin in the allow list:
+     openclaw config set plugins.allow '["agentvault"]'
+
+  3. Add this to your OpenClaw config (openclaw.yaml or openclaw.json):
+     channels:
+       agentvault:
+         dataDir: "${dataDir}"
+         apiUrl: "${apiUrl}"
+         agentName: "${name}"
+
+  4. (Recommended) Install pm2 for auto-restart and crash recovery:
+     npm install -g pm2
+     pm2 start "openclaw gateway start" --name openclaw-gateway
+     pm2 startup
+     pm2 save
+
+  5. Restart the gateway:
+     openclaw gateway restart
+`);
+        return;
+    }
+    console.log("\n  Registering AgentVault channel in OpenClaw config...\n");
+    const patchCommands = [
+        `openclaw config set channels.agentvault.dataDir "${dataDir}"`,
+        `openclaw config set channels.agentvault.apiUrl "${apiUrl}"`,
+        `openclaw config set channels.agentvault.agentName "${name}"`,
+        `openclaw config set plugins.allow '["agentvault"]'`,
+    ];
+    let configPatched = false;
+    for (const cmd of patchCommands) {
+        try {
+            execSync(cmd, { stdio: "pipe", env });
+            configPatched = true;
+        }
+        catch {
+            // config write failed — fall through to manual
+            configPatched = false;
+            break;
+        }
+    }
+    if (configPatched) {
+        console.log(`  ✅ Channel registered in OpenClaw config.\n`);
+        // --- Step 6: Configure pm2 process management ---
+        console.log("  Configuring pm2 process management...\n");
+        configurePm2(env);
+        await promptAndRestart(env);
+    }
+    else {
+        console.log(`  ⚠️  Could not auto-configure OpenClaw channel.
+  Add this to your OpenClaw config (openclaw.yaml or openclaw.json) manually:
+
+  channels:
+    agentvault:
+      dataDir: "${dataDir}"
+      apiUrl: "${apiUrl}"
+      agentName: "${name}"
+
+  Then restart OpenClaw:
+    openclaw gateway restart
+`);
+    }
+}
+/**
+ * Install/update the plugin in OpenClaw's extensions directory.
+ * Returns true if the plugin is installed (or was already up-to-date).
+ */
+export function installPlugin(env) {
+    // Check if already installed
+    try {
+        const info = execSync("openclaw plugins info agentvault", {
+            stdio: "pipe",
+            env,
+        });
+        const infoStr = info.toString();
+        const versionMatch = infoStr.match(/version[:\s]+(\S+)/i);
+        const installedVersion = versionMatch?.[1];
+        if (installedVersion && installedVersion !== VERSION) {
+            console.log(`  Updating plugin ${installedVersion} → ${VERSION}...`);
+            spawnSync("openclaw", ["plugins", "uninstall", "agentvault"], {
+                stdio: "pipe",
+                input: "y\n",
+                env,
+            });
+            execSync("openclaw plugins install @agentvault/agentvault", {
+                stdio: "pipe",
+                env,
+            });
+            console.log("  ✅ Plugin updated.");
+        }
+        else {
+            console.log(`  Plugin already installed (v${installedVersion ?? "unknown"}).`);
+        }
+        return true;
+    }
+    catch {
+        // Not installed — install fresh
+    }
+    try {
+        execSync("openclaw plugins install @agentvault/agentvault", {
+            stdio: "pipe",
+            env,
+        });
+        console.log("  ✅ Plugin installed in OpenClaw.");
+        return true;
+    }
+    catch {
+        console.log("  ⚠️  Could not auto-install plugin.");
+        return false;
+    }
+}
+/**
+ * Configure pm2 to manage the OpenClaw gateway process.
+ * Returns true if pm2 was configured (or already configured).
+ */
+export function configurePm2(env) {
+    // Check if pm2 is available
+    try {
+        execSync("pm2 --version", { stdio: "pipe", env });
+    }
+    catch {
+        console.log(`
+  ℹ️  pm2 not found. For best reliability, install pm2:
+     npm install -g pm2
+
+  Then configure the gateway to auto-restart:
+     pm2 start "openclaw gateway start" --name openclaw-gateway
+     pm2 startup
+     pm2 save
+`);
+        return false;
+    }
+    // Check if already configured
+    try {
+        const info = execSync("pm2 describe openclaw-gateway", { stdio: "pipe", env });
+        const infoStr = info.toString();
+        if (infoStr.includes("online") || infoStr.includes("stopped")) {
+            console.log("  pm2 process 'openclaw-gateway' already exists.");
+            return true;
+        }
+    }
+    catch {
+        // Not configured yet — continue
+    }
+    // Determine platform-specific command
+    const isMac = process.platform === "darwin";
+    const startCmd = isMac
+        ? "caffeinate -i openclaw gateway start"
+        : "openclaw gateway start";
+    try {
+        execSync(`pm2 start "${startCmd}" --name openclaw-gateway`, { stdio: "pipe", env });
+        console.log("  ✅ Gateway registered with pm2.");
+    }
+    catch (err) {
+        console.log(`  ⚠️  Failed to register with pm2: ${err}`);
+        return false;
+    }
+    // Generate startup script
+    try {
+        execSync("pm2 startup", { stdio: "pipe", env });
+        console.log("  ✅ pm2 startup configured (auto-start on boot).");
+    }
+    catch {
+        console.log("  ⚠️  pm2 startup failed — you may need to run 'pm2 startup' manually with sudo.");
+    }
+    // Save process list
+    try {
+        execSync("pm2 save", { stdio: "pipe", env });
+        console.log("  ✅ pm2 process list saved.");
+    }
+    catch {
+        console.log("  ⚠️  pm2 save failed.");
+    }
+    return true;
+}
+/**
+ * Prompt the user to restart the OpenClaw gateway now or later.
+ * Runs `openclaw gateway restart` synchronously if they confirm.
+ */
+async function promptAndRestart(env) {
+    const answer = await ask("  ⚠️  OpenClaw gateway will restart, briefly interrupting any active conversations.\n" +
+        "  Restart now? [y/N] ");
+    if (answer.trim().toLowerCase() === "y") {
+        console.log("\n  Restarting OpenClaw gateway...");
+        const result = spawnSync("openclaw", ["gateway", "restart"], {
+            stdio: "inherit",
+            env,
+        });
+        if (result.status === 0) {
+            console.log(`
+  ✅ Gateway restarted. AgentVault is now active.
+  Your AgentVault UI will route encrypted messages
+  directly into your agent.
+`);
+        }
+        else {
+            console.log(`
+  ⚠️  Restart command failed (exit ${result.status ?? "unknown"}).
+  Please restart manually:
+
+    openclaw gateway restart
+`);
+        }
+    }
+    else {
+        console.log(`
+  ──────────────────────────────────────────────
+  Run this when you're ready to activate:
+
+    openclaw gateway restart
+
+  After restart, your AgentVault UI will route
+  encrypted messages directly into your agent.
+  ──────────────────────────────────────────────
+`);
+    }
+}
+/** Prompt helper — resolves with the user's input line. */
+function ask(question) {
+    return new Promise((resolve) => {
+        const rl = readline.createInterface({
+            input: process.stdin,
+            output: process.stdout,
+            terminal: true,
+        });
+        rl.question(question, (answer) => {
+            rl.close();
+            resolve(answer);
+        });
+    });
+}
+//# sourceMappingURL=setup.js.map

package/dist/setup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup.js","sourceRoot":"","sources":["../src/setup.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,KAAK,QAAQ,MAAM,eAAe,CAAC;AAC1C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAErC,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,OAKrC;IACC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IACxC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC;IAEhF,OAAO,CAAC,GAAG,CAAC;;;;;iBAKG,IAAI;iBACJ,OAAO;iBACP,MAAM;CACtB,CAAC,CAAC;IAED,IAAI,UAAU,GAAG,KAAK,CAAC;IAEvB,MAAM,OAAO,GAAG,IAAI,aAAa,CAAC;QAChC,WAAW,EAAE,KAAK;QAClB,OAAO;QACP,MAAM;QACN,SAAS,EAAE,IAAI;QACf,SAAS,EAAE,GAAG,EAAE,GAAE,CAAC,EAAE,qCAAqC;QAC1D,aAAa,EAAE,CAAC,KAAK,EAAE,EAAE;YACvB,QAAQ,KAAK,EAAE,CAAC;gBACd,KAAK,WAAW;oBACd,OAAO,CAAC,GAAG,CAAC,uCAAuC,CAAC,CAAC;oBACrD,MAAM;gBACR,KAAK,SAAS;oBACZ,OAAO,CAAC,GAAG,CAAC,wDAAwD,CAAC,CAAC;oBACtE,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;wBACxB,OAAO,CAAC,GAAG,CAAC,oBAAoB,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;wBACvD,OAAO,CAAC,GAAG,CAAC,mEAAmE,CAAC,CAAC;wBACjF,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC;oBAC9C,CAAC;oBACD,MAAM;gBACR,KAAK,YAAY;oBACf,OAAO,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC;oBACpD,MAAM;gBACR,KAAK,OAAO;oBACV,UAAU,GAAG,IAAI,CAAC;oBAClB,OAAO,CAAC,GAAG,CAAC,wDAAwD,CAAC,CAAC;oBACtE,MAAM;gBACR,KAAK,OAAO;oBACV,OAAO,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC;oBACjD,MAAM;YACV,CAAC;QACH,CAAC;KACF,CAAC,CAAC;IAEH,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAU,EAAE,EAAE;QACjC,OAAO,CAAC,KAAK,CAAC,uBAAuB,GAAG,CAAC,OAAO,IAAI,CAAC,CAAC;QACtD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;IAEH,iDAAiD;IACjD,MAAM,IAAI,OAAO,CAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACnC,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE;YAC7B,IAAI,UAAU,EAAE,CAAC;gBACf,aAAa,CAAC,KAAK,CAAC,CAAC;gBACrB,GAAG,EAAE,CAAC;YACR,CAAC;QACH,CAAC,EAAE,GAAG,CAAC,CAAC;QAER,OAAO,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YAC5B,aAAa,CAAC,KAAK,CAAC,CAAC;YACrB,GAAG,CAAC,GAAG,CAAC,CAAC;QACX,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,0EAA0E;IAC1E,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;IAErB,uDAAuD;IAEvD,OAAO,CAAC,GAAG,CAAC,iDAAiD,CAAC,CAAC;IAE/D,iEAAiE;IACjE,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;IACpC,MAAM,UAAU,GAAG;QACjB,GAAG,IAAI,aAAa;QACpB,GAAG,IAAI,YAAY;QACnB,GAAG,IAAI,mBAAmB;QAC1B,gBAAgB;QAChB,mBAAmB;KACpB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACZ,MAAM,GAAG,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,UAAU,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,EAAE,EAAE,CAAC;IAEhF,MAAM,eAAe,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;IAE3C,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,iEAAiE;QACjE,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;qBAYK,OAAO;oBACR,MAAM;uBACH,IAAI;;;;;;;;;;CAU1B,CAAC,CAAC;QACC,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,4DAA4D,CAAC,CAAC;IAE1E,MAAM,aAAa,GAAG;QACpB,oDAAoD,OAAO,GAAG;QAC9D,mDAAmD,MAAM,GAAG;QAC5D,sDAAsD,IAAI,GAAG;QAC7D,oDAAoD;KACrD,CAAC;IAEF,IAAI,aAAa,GAAG,KAAK,CAAC;IAC1B,KAAK,MAAM,GAAG,IAAI,aAAa,EAAE,CAAC;QAChC,IAAI,CAAC;YACH,QAAQ,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YACtC,aAAa,GAAG,IAAI,CAAC;QACvB,CAAC;QAAC,MAAM,CAAC;YACP,+CAA+C;YAC/C,aAAa,GAAG,KAAK,CAAC;YACtB,MAAM;QACR,CAAC;IACH,CAAC;IAED,IAAI,aAAa,EAAE,CAAC;QAClB,OAAO,CAAC,GAAG,CAAC,8CAA8C,CAAC,CAAC;QAE5D,mDAAmD;QACnD,OAAO,CAAC,GAAG,CAAC,2CAA2C,CAAC,CAAC;QACzD,YAAY,CAAC,GAAG,CAAC,CAAC;QAElB,MAAM,gBAAgB,CAAC,GAAG,CAAC,CAAC;IAC9B,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC;;;;;kBAKE,OAAO;iBACR,MAAM;oBACH,IAAI;;;;CAIvB,CAAC,CAAC;IACD,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,GAAsB;IAClD,6BAA6B;IAC7B,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,QAAQ,CAAC,kCAAkC,EAAE;YACxD,KAAK,EAAE,MAAM;YACb,GAAG;SACJ,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;QAChC,MAAM,YAAY,GAAG,OAAO,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;QAC1D,MAAM,gBAAgB,GAAG,YAAY,EAAE,CAAC,CAAC,CAAC,CAAC;QAC3C,IAAI,gBAAgB,IAAI,gBAAgB,KAAK,OAAO,EAAE,CAAC;YACrD,OAAO,CAAC,GAAG,CAAC,qBAAqB,gBAAgB,MAAM,OAAO,KAAK,CAAC,CAAC;YACrE,SAAS,CAAC,UAAU,EAAE,CAAC,SAAS,EAAE,WAAW,EAAE,YAAY,CAAC,EAAE;gBAC5D,KAAK,EAAE,MAAM;gBACb,KAAK,EAAE,KAAK;gBACZ,GAAG;aACJ,CAAC,CAAC;YACH,QAAQ,CAAC,iDAAiD,EAAE;gBAC1D,KAAK,EAAE,MAAM;gBACb,GAAG;aACJ,CAAC,CAAC;YACH,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;QACrC,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,gCAAgC,gBAAgB,IAAI,SAAS,IAAI,CAAC,CAAC;QACjF,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,gCAAgC;IAClC,CAAC;IAED,IAAI,CAAC;QACH,QAAQ,CAAC,iDAAiD,EAAE;YAC1D,KAAK,EAAE,MAAM;YACb,GAAG;SACJ,CAAC,CAAC;QACH,OAAO,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;QACjD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC;QACpD,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,GAAsB;IACjD,4BAA4B;IAC5B,IAAI,CAAC;QACH,QAAQ,CAAC,eAAe,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,GAAG,CAAC;;;;;;;;CAQf,CAAC,CAAC;QACC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,8BAA8B;IAC9B,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,QAAQ,CAAC,+BAA+B,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAC/E,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;QAChC,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YAC9D,OAAO,CAAC,GAAG,CAAC,kDAAkD,CAAC,CAAC;YAChE,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,gCAAgC;IAClC,CAAC;IAED,sCAAsC;IACtC,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC;IAC5C,MAAM,QAAQ,GAAG,KAAK;QACpB,CAAC,CAAC,sCAAsC;QACxC,CAAC,CAAC,wBAAwB,CAAC;IAE7B,IAAI,CAAC;QACH,QAAQ,CAAC,cAAc,QAAQ,2BAA2B,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QACpF,OAAO,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC;IAClD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,GAAG,CAAC,sCAAsC,GAAG,EAAE,CAAC,CAAC;QACzD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,0BAA0B;IAC1B,IAAI,CAAC;QACH,QAAQ,CAAC,aAAa,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAChD,OAAO,CAAC,GAAG,CAAC,kDAAkD,CAAC,CAAC;IAClE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,GAAG,CAAC,kFAAkF,CAAC,CAAC;IAClG,CAAC;IAED,oBAAoB;IACpB,IAAI,CAAC;QACH,QAAQ,CAAC,UAAU,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAC7C,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;IACxC,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,gBAAgB,CAAC,GAAsB;IACpD,MAAM,MAAM,GAAG,MAAM,GAAG,CACtB,uFAAuF;QACvF,uBAAuB,CACxB,CAAC;IAEF,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,GAAG,EAAE,CAAC;QACxC,OAAO,CAAC,GAAG,CAAC,oCAAoC,CAAC,CAAC;QAClD,MAAM,MAAM,GAAG,SAAS,CAAC,UAAU,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE;YAC3D,KAAK,EAAE,SAAS;YAChB,GAAG;SACJ,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,OAAO,CAAC,GAAG,CAAC;;;;CAIjB,CAAC,CAAC;QACC,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC;qCACmB,MAAM,CAAC,MAAM,IAAI,SAAS;;;;CAI9D,CAAC,CAAC;QACC,CAAC;IACH,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC;;;;;;;;;CASf,CAAC,CAAC;IACD,CAAC;AACH,CAAC;AAED,2DAA2D;AAC3D,SAAS,GAAG,CAAC,QAAgB;IAC3B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,EAAE,GAAG,QAAQ,CAAC,eAAe,CAAC;YAClC,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,QAAQ,EAAE,IAAI;SACf,CAAC,CAAC;QACH,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,EAAE;YAC/B,EAAE,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,MAAM,CAAC,CAAC;QAClB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/skill-invoker.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Skill invocation lifecycle — auth, execute, record, bill.
+ *
+ * Sets _instrument.skillName so all child spans are attributed to the skill.
+ */
+export interface InvocationResult {
+    success: boolean;
+    data?: unknown;
+    error?: string;
+    latencyMs: number;
+    toolsUsed?: string[];
+}
+export interface InvocationOpts {
+    skillName: string;
+    skillVersion?: string;
+    args: Record<string, unknown>;
+    sptToken?: string;
+    apiUrl: string;
+    apiKey?: string;
+}
+/**
+ * Execute a skill invocation with full lifecycle tracking.
+ *
+ * 1. Validates SPT token (if provided)
+ * 2. Dispatches to the skill handler
+ * 3. Records invocation via POST /capabilities/invocations
+ * 4. Returns result with timing data
+ */
+export declare function invokeSkill(opts: InvocationOpts, handler: (skillName: string, args: Record<string, unknown>) => Promise<unknown>): Promise<InvocationResult>;
+//# sourceMappingURL=skill-invoker.d.ts.map

package/dist/skill-invoker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill-invoker.d.ts","sourceRoot":"","sources":["../src/skill-invoker.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;CACtB;AAED,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;GAOG;AACH,wBAAsB,WAAW,CAC/B,IAAI,EAAE,cAAc,EACpB,OAAO,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,GAC9E,OAAO,CAAC,gBAAgB,CAAC,CA6C3B"}

package/dist/skill-manifest.d.ts

@@ -0,0 +1,30 @@
+import type { SkillDefinition } from "./mcp-server.js";
+export interface SkillManifest {
+    skills: SkillDefinition[];
+    source: "local" | "remote" | "merged";
+}
+/**
+ * Parse a SKILL.md file into a SkillDefinition.
+ *
+ * Extracts YAML frontmatter between --- delimiters.
+ * Everything after the closing --- is treated as instructions.
+ */
+export declare function parseSkillMd(content: string): SkillDefinition | null;
+/**
+ * Load skills from a directory by scanning for SKILL.md files.
+ *
+ * Matches:
+ * - SKILL.md (exact match)
+ * - *-SKILL.md or *_SKILL.md (e.g., Cortina-SKILL.md)
+ * - Subdirectories containing SKILL.md (one level deep)
+ */
+export declare function loadSkillsFromDirectory(dir: string): SkillDefinition[];
+/**
+ * Load skills from backend API.
+ */
+export declare function loadSkillsFromApi(apiUrl: string, apiKey: string, hubId: string): Promise<SkillDefinition[]>;
+/**
+ * Merge local and remote skills. Local definitions take precedence.
+ */
+export declare function mergeSkills(local: SkillDefinition[], remote: SkillDefinition[]): SkillManifest;
+//# sourceMappingURL=skill-manifest.d.ts.map

package/dist/skill-manifest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill-manifest.d.ts","sourceRoot":"","sources":["../src/skill-manifest.ts"],"names":[],"mappings":"AA4BA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAEvD,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,eAAe,EAAE,CAAC;IAC1B,MAAM,EAAE,OAAO,GAAG,QAAQ,GAAG,QAAQ,CAAC;CACvC;AAoCD;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,eAAe,GAAG,IAAI,CAmDpE;AAsFD;;;;;;;GAOG;AACH,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,GAAG,eAAe,EAAE,CAuCtE;AAED;;GAEG;AACH,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,eAAe,EAAE,CAAC,CA+B5B;AAED;;GAEG;AACH,wBAAgB,WAAW,CACzB,KAAK,EAAE,eAAe,EAAE,EACxB,MAAM,EAAE,eAAe,EAAE,GACxB,aAAa,CAwBf"}

package/dist/skill-telemetry.d.ts

@@ -0,0 +1,36 @@
+import type { TelemetrySpan, InstrumentationContext } from "@agentvault/crypto";
+/**
+ * Get and clear the buffered spans (for batch reporting).
+ */
+export declare function drainSkillSpans(): TelemetrySpan[];
+/**
+ * Wrap a skill execution with lifecycle telemetry spans.
+ *
+ * Creates two spans:
+ * 1. start — emitted immediately when invocation begins
+ * 2. completion — emitted when execution completes (success or error)
+ *
+ * @param skillName — name of the skill being executed
+ * @param version — semver version of the skill
+ * @param fn — the async function to execute
+ * @param instrument — optional InstrumentationContext for direct reporting
+ * @returns The result of fn()
+ */
+export declare function wrapSkillExecution<T>(skillName: string, version: string | undefined, fn: () => Promise<T>, instrument?: InstrumentationContext): Promise<T>;
+/**
+ * Report a completed skill invocation with full metadata.
+ * Used for post-hoc reporting when the caller has already collected metrics.
+ */
+export declare function reportSkillInvocation(opts: {
+    skillName: string;
+    version?: string;
+    latencyMs: number;
+    success: boolean;
+    inputTokens?: number;
+    outputTokens?: number;
+    costCents?: number;
+    toolsUsed?: string[];
+    schemaMatch?: boolean;
+    errorMessage?: string;
+}): TelemetrySpan;
+//# sourceMappingURL=skill-telemetry.d.ts.map

package/dist/skill-telemetry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill-telemetry.d.ts","sourceRoot":"","sources":["../src/skill-telemetry.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,aAAa,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAIhF;;GAEG;AACH,wBAAgB,eAAe,IAAI,aAAa,EAAE,CAIjD;AAeD;;;;;;;;;;;;GAYG;AACH,wBAAsB,kBAAkB,CAAC,CAAC,EACxC,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,GAAG,SAAS,EAC3B,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EACpB,UAAU,CAAC,EAAE,sBAAsB,GAClC,OAAO,CAAC,CAAC,CAAC,CAsFZ;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE;IAC1C,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,OAAO,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,GAAG,aAAa,CAkBhB"}

package/dist/skills-publish.d.ts

@@ -0,0 +1,8 @@
+interface PublishOpts {
+    manifest?: string;
+    apiKey?: string;
+    apiUrl: string;
+}
+export declare function publishSkills(opts: PublishOpts): Promise<void>;
+export {};
+//# sourceMappingURL=skills-publish.d.ts.map

package/dist/skills-publish.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"skills-publish.d.ts","sourceRoot":"","sources":["../src/skills-publish.ts"],"names":[],"mappings":"AAiCA,UAAU,WAAW;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,wBAAsB,aAAa,CAAC,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAkJpE"}

package/dist/state.d.ts

@@ -0,0 +1,32 @@
+import type { PersistedState } from "./types.js";
+export declare function saveState(dataDir: string, state: PersistedState): Promise<void>;
+/**
+ * Load raw persisted state from disk.
+ * Returns the raw parsed JSON — caller is responsible for migration
+ * from legacy format to current PersistedState.
+ *
+ * Checks agentvault.json first, falls back to secure-channel.json
+ * for backward compatibility. Auto-migrates on first legacy load.
+ */
+export declare function loadState(dataDir: string): Promise<any | null>;
+/**
+ * Check whether persisted state is valid and usable (has deviceId, deviceJwt, and at least one session).
+ */
+export declare function isStateValid(dataDir: string): Promise<boolean>;
+/**
+ * Create a backup of the state file (atomic write via tmp + rename).
+ * Silent no-op if no state file exists.
+ */
+export declare function backupState(dataDir: string): Promise<void>;
+/**
+ * Restore state from backup if primary state is missing/empty/invalid but .bak exists and is valid.
+ * Returns true if state was successfully restored.
+ */
+export declare function restoreState(dataDir: string): Promise<boolean>;
+/**
+ * Upload encrypted backup to server. Converts PersistedState → BackupBundle,
+ * encrypts with backup code, and PUTs to the backend.
+ */
+export declare function uploadBackupToServer(state: PersistedState, backupCode: string, apiUrl: string, deviceJwt: string): Promise<void>;
+export declare function clearState(dataDir: string): Promise<void>;
+//# sourceMappingURL=state.d.ts.map

package/dist/state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"state.d.ts","sourceRoot":"","sources":["../src/state.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AASjD,wBAAsB,SAAS,CAC7B,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,cAAc,GACpB,OAAO,CAAC,IAAI,CAAC,CAWf;AAED;;;;;;;GAOG;AACH,wBAAsB,SAAS,CAC7B,OAAO,EAAE,MAAM,GAEd,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,CAuBrB;AAED;;GAEG;AACH,wBAAsB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAepE;AAED;;;GAGG;AACH,wBAAsB,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAWhE;AAED;;;GAGG;AACH,wBAAsB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAwBpE;AAED;;;GAGG;AACH,wBAAsB,oBAAoB,CACxC,KAAK,EAAE,cAAc,EACrB,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,IAAI,CAAC,CAmDf;AAED,wBAAsB,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAS/D"}

package/dist/state.js

@@ -0,0 +1,61 @@
+import { mkdir, readFile, rm, writeFile } from "node:fs/promises";
+import { join } from "node:path";
+const STATE_FILE = "agentvault.json";
+const LEGACY_STATE_FILE = "secure-channel.json";
+export async function saveState(dataDir, state) {
+    await mkdir(dataDir, { recursive: true });
+    const filePath = join(dataDir, STATE_FILE);
+    await writeFile(filePath, JSON.stringify(state, null, 2), "utf-8");
+    // Clean up legacy file after migration
+    try {
+        await rm(join(dataDir, LEGACY_STATE_FILE));
+    }
+    catch {
+        // Already removed or never existed
+    }
+}
+/**
+ * Load raw persisted state from disk.
+ * Returns the raw parsed JSON — caller is responsible for migration
+ * from legacy format to current PersistedState.
+ *
+ * Checks agentvault.json first, falls back to secure-channel.json
+ * for backward compatibility. Auto-migrates on first legacy load.
+ */
+export async function loadState(dataDir) {
+    // Try new filename first
+    const filePath = join(dataDir, STATE_FILE);
+    try {
+        const raw = await readFile(filePath, "utf-8");
+        return JSON.parse(raw);
+    }
+    catch {
+        // Fall through to legacy
+    }
+    // Fall back to legacy filename
+    const legacyPath = join(dataDir, LEGACY_STATE_FILE);
+    try {
+        const raw = await readFile(legacyPath, "utf-8");
+        const parsed = JSON.parse(raw);
+        // Auto-migrate: write to new filename, remove legacy
+        await mkdir(dataDir, { recursive: true });
+        await writeFile(filePath, JSON.stringify(parsed, null, 2), "utf-8");
+        await rm(legacyPath);
+        return parsed;
+    }
+    catch {
+        return null;
+    }
+}
+export async function clearState(dataDir) {
+    // Remove both files to cover migration edge cases
+    for (const filename of [STATE_FILE, LEGACY_STATE_FILE]) {
+        try {
+            await rm(join(dataDir, filename));
+        }
+        catch {
+            // File doesn't exist — nothing to clear
+        }
+    }
+}
+//# sourceMappingURL=state.js.map

package/dist/state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"state.js","sourceRoot":"","sources":["../src/state.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAClE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAGjC,MAAM,UAAU,GAAG,iBAAiB,CAAC;AACrC,MAAM,iBAAiB,GAAG,qBAAqB,CAAC;AAEhD,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,OAAe,EACf,KAAqB;IAErB,MAAM,KAAK,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1C,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IAC3C,MAAM,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IAEnE,uCAAuC;IACvC,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,mCAAmC;IACrC,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,OAAe;IAGf,yBAAyB;IACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IAC3C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC9C,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,yBAAyB;IAC3B,CAAC;IAED,+BAA+B;IAC/B,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;IACpD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAChD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,qDAAqD;QACrD,MAAM,KAAK,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1C,MAAM,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QACpE,MAAM,EAAE,CAAC,UAAU,CAAC,CAAC;QACrB,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,OAAe;IAC9C,kDAAkD;IAClD,KAAK,MAAM,QAAQ,IAAI,CAAC,UAAU,EAAE,iBAAiB,CAAC,EAAE,CAAC;QACvD,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;QACpC,CAAC;QAAC,MAAM,CAAC;YACP,wCAAwC;QAC1C,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/transport.d.ts

@@ -0,0 +1,24 @@
+export interface EnrollResponse {
+    device_id: string;
+    fingerprint: string;
+    status: string;
+}
+export interface StatusResponse {
+    device_id: string;
+    status: string;
+    fingerprint: string;
+}
+export interface ActivateResponse {
+    device_id: string;
+    conversation_id: string;
+    status: string;
+    device_jwt: string;
+    owner_identity_public_key: string;
+    owner_ephemeral_public_key: string | null;
+}
+export declare function enrollDevice(apiUrl: string, inviteToken: string, identityPkHex: string, ephemeralPkHex: string, proofHex: string, platform?: string): Promise<EnrollResponse>;
+export declare function pollDeviceStatus(apiUrl: string, deviceId: string): Promise<StatusResponse & {
+    rateLimited?: boolean;
+}>;
+export declare function activateDevice(apiUrl: string, deviceId: string): Promise<ActivateResponse>;
+//# sourceMappingURL=transport.d.ts.map

package/dist/transport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport.d.ts","sourceRoot":"","sources":["../src/transport.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,yBAAyB,EAAE,MAAM,CAAC;IAClC,0BAA0B,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3C;AAED,wBAAsB,YAAY,CAChC,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,EACnB,aAAa,EAAE,MAAM,EACrB,cAAc,EAAE,MAAM,EACtB,QAAQ,EAAE,MAAM,EAChB,QAAQ,CAAC,EAAE,MAAM,GAChB,OAAO,CAAC,cAAc,CAAC,CAiBzB;AAED,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,cAAc,GAAG;IAAE,WAAW,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC,CAWrD;AAED,wBAAsB,cAAc,CAClC,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,gBAAgB,CAAC,CAW3B"}

package/dist/transport.js

@@ -0,0 +1,43 @@
+export async function enrollDevice(apiUrl, inviteToken, identityPkHex, ephemeralPkHex, proofHex, platform) {
+    const res = await fetch(`${apiUrl}/api/v1/enroll`, {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({
+            invite_token: inviteToken,
+            identity_public_key: identityPkHex,
+            ephemeral_public_key: ephemeralPkHex,
+            proof_of_possession: proofHex,
+            platform: platform ?? "node",
+        }),
+    });
+    if (!res.ok) {
+        const detail = await res.text();
+        throw new Error(`Enrollment failed (${res.status}): ${detail}`);
+    }
+    return res.json();
+}
+export async function pollDeviceStatus(apiUrl, deviceId) {
+    const res = await fetch(`${apiUrl}/api/v1/devices/${deviceId}/status`);
+    if (res.status === 429) {
+        // Rate limited — caller should back off and retry
+        return { device_id: deviceId, status: "PENDING", fingerprint: "", rateLimited: true };
+    }
+    if (!res.ok) {
+        const detail = await res.text();
+        throw new Error(`Status poll failed (${res.status}): ${detail}`);
+    }
+    return res.json();
+}
+export async function activateDevice(apiUrl, deviceId) {
+    const res = await fetch(`${apiUrl}/api/v1/devices/${deviceId}/activate`, {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({}),
+    });
+    if (!res.ok) {
+        const detail = await res.text();
+        throw new Error(`Activation failed (${res.status}): ${detail}`);
+    }
+    return res.json();
+}
+//# sourceMappingURL=transport.js.map

package/dist/transport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport.js","sourceRoot":"","sources":["../src/transport.ts"],"names":[],"mappings":"AAqBA,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,MAAc,EACd,WAAmB,EACnB,aAAqB,EACrB,cAAsB,EACtB,QAAgB,EAChB,QAAiB;IAEjB,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,gBAAgB,EAAE;QACjD,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,YAAY,EAAE,WAAW;YACzB,mBAAmB,EAAE,aAAa;YAClC,oBAAoB,EAAE,cAAc;YACpC,mBAAmB,EAAE,QAAQ;YAC7B,QAAQ,EAAE,QAAQ,IAAI,MAAM;SAC7B,CAAC;KACH,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,sBAAsB,GAAG,CAAC,MAAM,MAAM,MAAM,EAAE,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC;AACpB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,MAAc,EACd,QAAgB;IAEhB,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,mBAAmB,QAAQ,SAAS,CAAC,CAAC;IACvE,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACvB,kDAAkD;QAClD,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IACxF,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,uBAAuB,GAAG,CAAC,MAAM,MAAM,MAAM,EAAE,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC;AACpB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,MAAc,EACd,QAAgB;IAEhB,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,mBAAmB,QAAQ,WAAW,EAAE;QACvE,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;KACzB,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,sBAAsB,GAAG,CAAC,MAAM,MAAM,MAAM,EAAE,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC;AACpB,CAAC"}