@ajna-inc/vaults 0.1.0 → 0.1.2

package/build/VaultsApi.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"VaultsApi.js","sourceRoot":"","sources":["../src/VaultsApi.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAYA,yCAAyH;AACzH,0DAAsD;AACtD,4EAAwE;AACxE,wEAAoE;AACpE,uEAAmE;AACnE,kEAA8D;AAC9D,wFAAoF;AAEpF,yCAwBmB;AAEnB;;;;;;;GAOG;AAEI,IAAM,SAAS,GAAf,MAAM,SAAS;IAOpB,YACE,YAA0B,EAC1B,sBAA8C,EAC9C,YAA0B,EACO,MAAc,EACvC,YAA0B,EAClC,qBAA4C,EAC5C,mBAAwC,EACxC,cAAmC,EACnC,eAAgC,EAChC,0BAAsD;QAL9C,iBAAY,GAAZ,YAAY,CAAc;QAOlC,IAAI,CAAC,YAAY,GAAG,YAAY,CAAA;QAChC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;QACpB,IAAI,CAAC,qBAAqB,GAAG,qBAAqB,CAAA;QAClD,IAAI,CAAC,mBAAmB,GAAG,mBAAmB,CAAA;QAC9C,IAAI,CAAC,cAAc,GAAG,cAAc,CAAA;QAEpC,4BAA4B;QAC5B,IAAI,CAAC,uBAAuB,CAC1B,sBAAsB,EACtB,YAAY,EACZ,MAAM,EACN,eAAe,EACf,0BAA0B,EAC1B,cAAc,CACf,CAAA;IACH,CAAC;IAEO,uBAAuB,CAC7B,sBAA8C,EAC9C,YAA0B,EAC1B,MAAc,EACd,eAAgC,EAChC,iBAA6C,EAC7C,cAAmC;QAEnC,sCAAsC;QACtC,sBAAsB,CAAC,sBAAsB,CAAC,IAAI,4BAAiB,CAAC,eAAe,EAAE,YAAY,CAAC,CAAC,CAAA;QACnG,sBAAsB,CAAC,sBAAsB,CAAC,IAAI,gCAAqB,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,CAAA;QAC9F,sBAAsB,CAAC,sBAAsB,CAAC,IAAI,+BAAoB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAA;QAC1F,sBAAsB,CAAC,sBAAsB,CAAC,IAAI,2BAAgB,CAAC,eAAe,EAAE,YAAY,CAAC,CAAC,CAAA;QAElG,gDAAgD;QAChD,sBAAsB,CAAC,sBAAsB,CAC3C,IAAI,gCAAqB,CAAC,MAAM,EAAE,eAAe,EAAE,cAAc,EAAE,YAAY,CAAC,CACjF,CAAA;QACD,sBAAsB,CAAC,sBAAsB,CAAC,IAAI,gCAAqB,CAAC,MAAM,EAAE,cAAc,EAAE,YAAY,CAAC,CAAC,CAAA;QAE9G,qBAAqB;QACrB,sBAAsB,CAAC,sBAAsB,CAAC,IAAI,6BAAkB,CAAC,MAAM,EAAE,eAAe,EAAE,YAAY,CAAC,CAAC,CAAA;QAC5G,sBAAsB,CAAC,sBAAsB,CAAC,IAAI,iCAAsB,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,CAAA;QAC/F,sBAAsB,CAAC,sBAAsB,CAAC,IAAI,6BAAkB,CAAC,MAAM,EAAE,eAAe,EAAE,YAAY,CAAC,CAAC,CAAA;QAC5G,sBAAsB,CAAC,sBAAsB,CAAC,IAAI,6BAAkB,CAAC,MAAM,EAAE,eAAe,EAAE,YAAY,CAAC,CAAC,CAAA;QAE5G,0BAA0B;QAC1B,sBAAsB,CAAC,sBAAsB,CAAC,IAAI,+BAAoB,CAAC,MAAM,EAAE,eAAe,EAAE,YAAY,CAAC,CAAC,CAAA;QAC9G,sBAAsB,CAAC,sBAAsB,CAAC,IAAI,6BAAkB,CAAC,MAAM,EAAE,eAAe,EAAE,YAAY,CAAC,CAAC,CAAA;QAC5G,sBAAsB,CAAC,sBAAsB,CAAC,IAAI,4BAAiB,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,CAAA;QAE1F,qBAAqB;QACrB,sBAAsB,CAAC,sBAAsB,CAC3C,IAAI,8BAAmB,CAAC,MAAM,EAAE,eAAe,EAAE,iBAAiB,EAAE,YAAY,CAAC,CAClF,CAAA;QACD,sBAAsB,CAAC,sBAAsB,CAAC,IAAI,8BAAmB,CAAC,MAAM,EAAE,iBAAiB,EAAE,YAAY,CAAC,CAAC,CAAA;QAC/G,sBAAsB,CAAC,sBAAsB,CAAC,IAAI,2BAAgB,CAAC,MAAM,EAAE,iBAAiB,EAAE,YAAY,CAAC,CAAC,CAAA;QAE5G,gBAAgB;QAChB,sBAAsB,CAAC,sBAAsB,CAAC,IAAI,oCAAyB,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,CAAA;IACpG,CAAC;IAED,8EAA8E;IAC9E,wBAAwB;IACxB,8EAA8E;IAE9E;;;;;;;;;;;;;;;OAeG;IACI,KAAK,CAAC,gBAAgB,CAAC,MAAuB;QACnD,MAAM,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;QAC3C,oEAAoE;QACpE,IAAI,CAAC,mBAAmB,CAAC,iBAAiB,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;QAC/D,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,8BAA8B,MAAM,CAAC,MAAM,YAAY,MAAM,CAAC,MAAM,EAAE,CAAC,CAAA;IAC1F,CAAC;IAED;;OAEG;IACI,mBAAmB;QACxB,OAAO,IAAI,CAAC,cAAc,CAAC,YAAY,EAAE,CAAA;IAC3C,CAAC;IAED;;OAEG;IACI,iBAAiB;QACtB,OAAO,IAAI,CAAC,cAAc,CAAA;IAC5B,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACI,KAAK,CAAC,MAAM,CACjB,IAAgB,EAChB,OAA2B;QAE3B,OAAO,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,EAAE,OAAO,CAAC,CAAA;IACxE,CAAC;IAED;;;;;;;;;;;;;;OAcG;IACI,KAAK,CAAC,IAAI,CAAC,OAAe,EAAE,OAAyB;QAC1D,OAAO,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,IAAI,CAAC,YAAY,EAAE,OAAO,EAAE,OAAO,CAAC,CAAA;IACzE,CAAC;IAED;;;;;;;;;;;;;;OAcG;IACI,KAAK,CAAC,MAAM,CAAC,OAAe,EAAE,IAAgB,EAAE,OAA2B;QAChF,OAAO,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,IAAI,CAAC,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,CAAA;IACjF,CAAC;IAED;;;;;;;;;OASG;IACI,KAAK,CAAC,MAAM,CAAC,OAAe;QACjC,OAAO,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,IAAI,CAAC,YAAY,EAAE,OAAO,CAAC,CAAA;IAClE,CAAC;IAED;;;;;;;;;;OAUG;IACI,KAAK,CAAC,IAAI;QACf,OAAO,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;IACxD,CAAC;IAED;;;;;;;;;;;OAWG;IACI,KAAK,CAAC,OAAO,CAAC,OAAe;QAClC,OAAO,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC,IAAI,CAAC,YAAY,EAAE,OAAO,CAAC,CAAA;IACnE,CAAC;IAED;;;;;;;;;;;;OAYG;IACI,KAAK,CAAC,MAAM,CAAC,OAAe;QACjC,OAAO,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,IAAI,CAAC,YAAY,EAAE,OAAO,CAAC,CAAA;IAClE,CAAC;IAED;;;;;OAKG;IACI,KAAK,CAAC,SAAS,CAAC,OAAe;QACpC,OAAO,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,IAAI,CAAC,YAAY,EAAE,OAAO,CAAC,CAAA;IACrE,CAAC;IAED,8EAA8E;IAC9E,2CAA2C;IAC3C,8EAA8E;IAE9E;;;;;;;;;;OAUG;IACI,kBAAkB;QACvB,OAAO,IAAI,CAAC,qBAAqB,CAAC,kBAAkB,EAAE,CAAA;IACxD,CAAC;IAED;;;;;;;;;;;;;;OAcG;IACI,KAAK,CAAC,eAAe,CAC1B,YAAoB,EACpB,OAA+C;QAE/C,OAAO,IAAI,CAAC,qBAAqB,CAAC,eAAe,CAAC,IAAI,CAAC,YAAY,EAAE,YAAY,EAAE,OAAO,CAAC,CAAA;IAC7F,CAAC;IAED;;;;;;;;;;;;;OAaG;IACI,KAAK,CAAC,aAAa,CAAC,YAAoB;QAC7C,OAAO,IAAI,CAAC,qBAAqB,CAAC,aAAa,CAAC,IAAI,CAAC,YAAY,EAAE,YAAY,CAAC,CAAA;IAClF,CAAC;IAED;;;;;OAKG;IACI,KAAK,CAAC,aAAa,CAAC,YAAoB;QAC7C,OAAO,IAAI,CAAC,qBAAqB,CAAC,aAAa,CAAC,IAAI,CAAC,YAAY,EAAE,YAAY,CAAC,CAAA;IAClF,CAAC;IAED,8EAA8E;IAC9E,4BAA4B;IAC5B,8EAA8E;IAE9E;;;;;;;;OAQG;IACI,KAAK,CAAC,iBAAiB,CAC5B,YAAoB,EACpB,OAA0B;QAE1B,OAAO,IAAI,CAAC,qBAAqB,CAAC,iBAAiB,CAAC,IAAI,CAAC,YAAY,EAAE,YAAY,EAAE,OAAO,CAAC,CAAA;IAC/F,CAAC;IAED;;;;;OAKG;IACI,KAAK,CAAC,eAAe,CAC1B,YAAoB;QAEpB,OAAO,IAAI,CAAC,qBAAqB,CAAC,eAAe,CAAC,IAAI,CAAC,YAAY,EAAE,YAAY,CAAC,CAAA;IACpF,CAAC;IAED;;;;;OAKG;IACI,KAAK,CAAC,eAAe,CAAC,YAAoB;QAC/C,OAAO,IAAI,CAAC,qBAAqB,CAAC,eAAe,CAAC,IAAI,CAAC,YAAY,EAAE,YAAY,CAAC,CAAA;IACpF,CAAC;IAED;;;;;OAKG;IACI,KAAK,CAAC,gBAAgB,CAAC,GAAW;QAIvC,OAAO,IAAI,CAAC,qBAAqB,CAAC,gBAAgB,CAAC,IAAI,CAAC,YAAY,EAAE,GAAG,CAAC,CAAA;IAC5E,CAAC;IAED;;;;OAIG;IACI,KAAK,CAAC,kBAAkB,CAAC,YAAoB;QAClD,OAAO,IAAI,CAAC,qBAAqB,CAAC,kBAAkB,CAAC,IAAI,CAAC,YAAY,EAAE,YAAY,CAAC,CAAA;IACvF,CAAC;IAED,8EAA8E;IAC9E,4DAA4D;IAC5D,8EAA8E;IAE9E;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACI,KAAK,CAAC,kBAAkB,CAAC,OAAkC;QAChE,OAAO,IAAI,CAAC,mBAAmB,CAAC,kBAAkB,CAAC,IAAI,CAAC,YAAY,EAAE,OAAO,CAAC,CAAA;IAChF,CAAC;IAED;;;;;;;;;;;;;;;;;;;;OAoBG;IACI,KAAK,CAAC,gBAAgB,CAC3B,SAAyC,EACzC,SAAqB,EACrB,GAAW;QAEX,OAAO,IAAI,CAAC,mBAAmB,CAAC,gBAAgB,CAAC,IAAI,CAAC,YAAY,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,CAAC,CAAA;IAChG,CAAC;IAED;;;;;;;;;;;;OAYG;IACI,KAAK,CAAC,iBAAiB,CAAC,OAAe,EAAE,YAAoB;QAClE,OAAO,IAAI,CAAC,mBAAmB,CAAC,iBAAiB,CAAC,IAAI,CAAC,YAAY,EAAE,OAAO,EAAE,YAAY,CAAC,CAAA;IAC7F,CAAC;IAED;;;;;;;;;;;;;;;;;;OAkBG;IACI,KAAK,CAAC,oBAAoB,CAAC,OAAoC;QACpE,OAAO,IAAI,CAAC,mBAAmB,CAAC,oBAAoB,CAAC,IAAI,CAAC,YAAY,EAAE,OAAO,CAAC,CAAA;IAClF,CAAC;IAED;;;;;;;;;;;;;;;;;;OAkBG;IACI,KAAK,CAAC,yBAAyB,CAAC,OAAe;QAKpD,OAAO,IAAI,CAAC,mBAAmB,CAAC,yBAAyB,CAAC,IAAI,CAAC,YAAY,EAAE,OAAO,CAAC,CAAA;IACvF,CAAC;CACF,CAAA;AA/fY,8BAAS;oBAAT,SAAS;IADrB,IAAA,iBAAU,GAAE;IAYR,WAAA,IAAA,aAAM,EAAC,uBAAgB,CAAC,MAAM,CAAC,CAAA;qCAHlB,mBAAY;QACF,6BAAsB;QAChC,mBAAY,UAEJ,2BAAY;QACX,6CAAqB;QACvB,yCAAmB;QACxB,yCAAmB;QAClB,iCAAe;QACJ,uDAA0B;GAjB7C,SAAS,CA+frB"}

package/build/VaultsEvents.d.ts

@@ -0,0 +1,227 @@
+import type { BaseEvent } from '@credo-ts/core';
+import type { PolicyMode } from './models';
+/**
+ * Vault event types
+ */
+export declare enum VaultEventTypes {
+    VaultCreated = "VaultCreated",
+    VaultOpened = "VaultOpened",
+    VaultUpdated = "VaultUpdated",
+    VaultDeleted = "VaultDeleted",
+    VaultShared = "VaultShared",
+    VaultError = "VaultError",
+    AccessRequested = "AccessRequested",
+    AccessGranted = "AccessGranted",
+    AccessDenied = "AccessDenied",
+    ThresholdMet = "ThresholdMet",
+    ShareProvided = "ShareProvided",
+    ShareRequested = "ShareRequested",
+    ShareDenied = "ShareDenied",
+    StorageAllocated = "StorageAllocated",
+    StorageUploaded = "StorageUploaded",
+    StorageDownloaded = "StorageDownloaded"
+}
+/**
+ * Event emitted when a vault is created
+ */
+export interface VaultCreatedEvent extends BaseEvent {
+    type: typeof VaultEventTypes.VaultCreated;
+    payload: {
+        vaultId: string;
+        docId: string;
+        policyMode?: PolicyMode;
+    };
+}
+/**
+ * Event emitted when a vault is opened (decrypted)
+ */
+export interface VaultOpenedEvent extends BaseEvent {
+    type: typeof VaultEventTypes.VaultOpened;
+    payload: {
+        vaultId: string;
+        docId: string;
+    };
+}
+/**
+ * Event emitted when a vault is updated
+ */
+export interface VaultUpdatedEvent extends BaseEvent {
+    type: typeof VaultEventTypes.VaultUpdated;
+    payload: {
+        vaultId: string;
+        docId: string;
+        epoch: number;
+    };
+}
+/**
+ * Event emitted when a vault is deleted
+ */
+export interface VaultDeletedEvent extends BaseEvent {
+    type: typeof VaultEventTypes.VaultDeleted;
+    payload: {
+        vaultId: string;
+        docId: string;
+    };
+}
+/**
+ * Event emitted when a vault is shared with another DID
+ */
+export interface VaultSharedEvent extends BaseEvent {
+    type: typeof VaultEventTypes.VaultShared;
+    payload: {
+        vaultId: string;
+        docId: string;
+        recipientDid?: string;
+        connectionId?: string;
+        theirDid?: string;
+    };
+}
+/**
+ * Event emitted when a vault error occurs
+ */
+export interface VaultErrorEvent extends BaseEvent {
+    type: typeof VaultEventTypes.VaultError;
+    payload: {
+        vaultId?: string;
+        errorCode: string;
+        description: string;
+        details?: unknown;
+        connectionId?: string;
+    };
+}
+/**
+ * Event emitted when access is requested to a vault
+ */
+export interface AccessRequestedEvent extends BaseEvent {
+    type: typeof VaultEventTypes.AccessRequested;
+    payload: {
+        vaultId: string;
+        docId: string;
+        requesterDid: string;
+    };
+}
+/**
+ * Event emitted when access is granted to a vault
+ */
+export interface AccessGrantedEvent extends BaseEvent {
+    type: typeof VaultEventTypes.AccessGranted;
+    payload: {
+        vaultId: string;
+        docId: string;
+        grantedTo: string;
+    };
+}
+/**
+ * Event emitted when access is denied to a vault
+ */
+export interface AccessDeniedEvent extends BaseEvent {
+    type: typeof VaultEventTypes.AccessDenied;
+    payload: {
+        vaultId: string;
+        docId: string;
+        deniedTo: string;
+        reason?: string;
+    };
+}
+/**
+ * Event emitted when threshold is met for a vault
+ */
+export interface ThresholdMetEvent extends BaseEvent {
+    type: typeof VaultEventTypes.ThresholdMet;
+    payload: {
+        vaultId: string;
+        docId: string;
+        sessionId: string;
+        sharesCollected: number;
+        threshold: number;
+    };
+}
+/**
+ * Event emitted when a share is provided for threshold reconstruction
+ */
+export interface ShareProvidedEvent extends BaseEvent {
+    type: typeof VaultEventTypes.ShareProvided;
+    payload: {
+        vaultId: string;
+        docId: string;
+        sessionId: string;
+        providerDid?: string;
+        providedBy?: string;
+        shareIdentifier?: number;
+        currentShares?: number;
+        totalShares?: number;
+        threshold: number;
+    };
+}
+/**
+ * Event emitted when a share is requested for threshold reconstruction
+ */
+export interface ShareRequestedEvent extends BaseEvent {
+    type: typeof VaultEventTypes.ShareRequested;
+    payload: {
+        vaultId: string;
+        docId: string;
+        sessionId: string;
+        requesterDid: string;
+        shareIdentifier?: number;
+        connectionId?: string;
+        messageId?: string;
+    };
+}
+/**
+ * Event emitted when a share request is denied
+ */
+export interface ShareDeniedEvent extends BaseEvent {
+    type: typeof VaultEventTypes.ShareDenied;
+    payload: {
+        vaultId: string;
+        docId: string;
+        sessionId: string;
+        reason: string;
+        message?: string;
+        deniedBy?: string;
+    };
+}
+/**
+ * Event emitted when storage is allocated by an operator
+ */
+export interface StorageAllocatedEvent extends BaseEvent {
+    type: typeof VaultEventTypes.StorageAllocated;
+    payload: {
+        vaultId: string;
+        docId: string;
+        size: number;
+        allocatedTo?: string;
+        storageUri: string;
+    };
+}
+/**
+ * Event emitted when vault ciphertext is uploaded to storage
+ */
+export interface StorageUploadedEvent extends BaseEvent {
+    type: typeof VaultEventTypes.StorageUploaded;
+    payload: {
+        vaultId: string;
+        docId: string;
+        storageUri: string;
+        size: number;
+        checksum: string;
+    };
+}
+/**
+ * Event emitted when vault ciphertext is downloaded from storage
+ */
+export interface StorageDownloadedEvent extends BaseEvent {
+    type: typeof VaultEventTypes.StorageDownloaded;
+    payload: {
+        vaultId: string;
+        docId: string;
+        storageUri: string;
+        size: number;
+        verified: boolean;
+    };
+}
+/**
+ * Union type of all vault events
+ */
+export type VaultEvent = VaultCreatedEvent | VaultOpenedEvent | VaultUpdatedEvent | VaultDeletedEvent | VaultSharedEvent | VaultErrorEvent | AccessRequestedEvent | AccessGrantedEvent | AccessDeniedEvent | ThresholdMetEvent | ShareProvidedEvent | ShareRequestedEvent | ShareDeniedEvent | StorageAllocatedEvent | StorageUploadedEvent | StorageDownloadedEvent;

package/build/VaultsEvents.js

@@ -11,9 +11,17 @@ var VaultEventTypes;
     VaultEventTypes["VaultUpdated"] = "VaultUpdated";
     VaultEventTypes["VaultDeleted"] = "VaultDeleted";
     VaultEventTypes["VaultShared"] = "VaultShared";
+    VaultEventTypes["VaultError"] = "VaultError";
     VaultEventTypes["AccessRequested"] = "AccessRequested";
     VaultEventTypes["AccessGranted"] = "AccessGranted";
     VaultEventTypes["AccessDenied"] = "AccessDenied";
     VaultEventTypes["ThresholdMet"] = "ThresholdMet";
     VaultEventTypes["ShareProvided"] = "ShareProvided";
+    VaultEventTypes["ShareRequested"] = "ShareRequested";
+    VaultEventTypes["ShareDenied"] = "ShareDenied";
+    // Storage events
+    VaultEventTypes["StorageAllocated"] = "StorageAllocated";
+    VaultEventTypes["StorageUploaded"] = "StorageUploaded";
+    VaultEventTypes["StorageDownloaded"] = "StorageDownloaded";
 })(VaultEventTypes || (exports.VaultEventTypes = VaultEventTypes = {}));
+//# sourceMappingURL=VaultsEvents.js.map

package/build/VaultsEvents.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"VaultsEvents.js","sourceRoot":"","sources":["../src/VaultsEvents.ts"],"names":[],"mappings":";;;AAGA;;GAEG;AACH,IAAY,eAkBX;AAlBD,WAAY,eAAe;IACzB,gDAA6B,CAAA;IAC7B,8CAA2B,CAAA;IAC3B,gDAA6B,CAAA;IAC7B,gDAA6B,CAAA;IAC7B,8CAA2B,CAAA;IAC3B,4CAAyB,CAAA;IACzB,sDAAmC,CAAA;IACnC,kDAA+B,CAAA;IAC/B,gDAA6B,CAAA;IAC7B,gDAA6B,CAAA;IAC7B,kDAA+B,CAAA;IAC/B,oDAAiC,CAAA;IACjC,8CAA2B,CAAA;IAC3B,iBAAiB;IACjB,wDAAqC,CAAA;IACrC,sDAAmC,CAAA;IACnC,0DAAuC,CAAA;AACzC,CAAC,EAlBW,eAAe,+BAAf,eAAe,QAkB1B"}

package/build/VaultsModule.d.ts

@@ -0,0 +1,64 @@
+import type { DependencyManager, FeatureRegistry, Module } from '@credo-ts/core';
+import type { S3StorageConfig } from './storage/VaultStorageConfig';
+import { VaultsApi } from './VaultsApi';
+/**
+ * Configuration options for VaultsModule
+ */
+export interface VaultsModuleConfig {
+    /** S3 storage configuration for large file support */
+    storage?: S3StorageConfig;
+    /** Default inline threshold in bytes (files larger use external storage) */
+    inlineThreshold?: number;
+    /** Enable vault operator mode (handle storage requests from other agents) */
+    operatorMode?: boolean;
+}
+/**
+ * Vaults Module
+ *
+ * Credo-TS module for post-quantum encrypted vaults with local storage support.
+ *
+ * Features:
+ * - Client-side encryption (all crypto happens in the agent)
+ * - Passphrase-based encryption (S3 suite with Argon2id)
+ * - Post-quantum encryption (P1 suite with ML-KEM-768)
+ * - Multiple access policies: passphrase, any-of, all-of, threshold
+ * - Local storage via agent wallet
+ *
+ * @example
+ * ```typescript
+ * import { Agent } from '@credo-ts/core'
+ * import { VaultsModule } from '@credo-ts/vaults'
+ *
+ * const agent = new Agent({
+ *   config: { label: 'My Agent' },
+ *   modules: {
+ *     vaults: new VaultsModule()
+ *   }
+ * })
+ *
+ * await agent.initialize()
+ *
+ * // Store encrypted PDF
+ * const { vaultId } = await agent.modules.vaults.create(pdfBytes, {
+ *   passphrase: 'my-secure-passphrase'
+ * })
+ *
+ * // Retrieve and decrypt
+ * const decrypted = await agent.modules.vaults.open(vaultId, {
+ *   passphrase: 'my-secure-passphrase'
+ * })
+ * ```
+ */
+export declare class VaultsModule implements Module {
+    readonly api: typeof VaultsApi;
+    private config?;
+    constructor(config?: VaultsModuleConfig);
+    /**
+     * Get the module configuration
+     */
+    getConfig(): VaultsModuleConfig | undefined;
+    /**
+     * Register module dependencies
+     */
+    register(dependencyManager: DependencyManager, featureRegistry: FeatureRegistry): void;
+}

package/build/VaultsModule.js

@@ -1,11 +1,17 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.VaultsModule = void 0;
-var VaultsApi_1 = require("./VaultsApi");
-var VaultService_1 = require("./services/VaultService");
-var VaultEncryptionService_1 = require("./services/VaultEncryptionService");
-var VaultRepository_1 = require("./repository/VaultRepository");
-var ThresholdSessionRepository_1 = require("./repository/ThresholdSessionRepository");
+const core_1 = require("@credo-ts/core");
+const VaultsApi_1 = require("./VaultsApi");
+const VaultService_1 = require("./services/VaultService");
+const VaultEncryptionService_1 = require("./services/VaultEncryptionService");
+const HPKEService_1 = require("./services/HPKEService");
+const KemKeyExchangeService_1 = require("./services/KemKeyExchangeService");
+const VaultSigningService_1 = require("./services/VaultSigningService");
+const VaultStorageService_1 = require("./storage/VaultStorageService");
+const VaultRepository_1 = require("./repository/VaultRepository");
+const ThresholdSessionRepository_1 = require("./repository/ThresholdSessionRepository");
+const KemKeypairRepository_1 = require("./repository/KemKeypairRepository");
 /**
  * Vaults Module
  *
@@ -43,29 +49,48 @@ var ThresholdSessionRepository_1 = require("./repository/ThresholdSessionReposit
  * })
  * ```
  */
-var VaultsModule = /** @class */ (function () {
-    function VaultsModule() {
+class VaultsModule {
+    constructor(config) {
         this.api = VaultsApi_1.VaultsApi;
+        this.config = config;
+    }
+    /**
+     * Get the module configuration
+     */
+    getConfig() {
+        return this.config;
     }
     /**
      * Register module dependencies
      */
-    VaultsModule.prototype.register = function (dependencyManager, featureRegistry) {
+    register(dependencyManager, featureRegistry) {
         // Register repositories
         dependencyManager.registerSingleton(VaultRepository_1.VaultRepository);
         dependencyManager.registerSingleton(ThresholdSessionRepository_1.ThresholdSessionRepository);
+        dependencyManager.registerSingleton(KemKeypairRepository_1.KemKeypairRepository);
         // Register services
         dependencyManager.registerSingleton(VaultEncryptionService_1.VaultEncryptionService);
         dependencyManager.registerSingleton(VaultService_1.VaultService);
-        // Note: Message handlers for P2P sharing will be added in Phase 5
-        // For now, we focus on local storage operations
-        // Register protocol feature
-        featureRegistry.register({
-            type: 'protocol',
+        dependencyManager.registerSingleton(HPKEService_1.HPKEService);
+        dependencyManager.registerSingleton(KemKeyExchangeService_1.KemKeyExchangeService);
+        dependencyManager.registerSingleton(VaultSigningService_1.VaultSigningService);
+        dependencyManager.registerSingleton(VaultStorageService_1.VaultStorageService);
+        // Register protocol feature with storage role if operator mode enabled
+        const roles = ['owner', 'participant'];
+        if (this.config?.operatorMode) {
+            roles.push('operator');
+        }
+        roles.push('storage'); // All agents can use storage
+        featureRegistry.register(new core_1.Protocol({
             id: 'https://didcomm.org/vaults/1.0',
-            roles: ['owner', 'participant', 'storage'],
-        });
-    };
-    return VaultsModule;
-}());
+            roles,
+        }));
+        // Note: Message handlers are registered in VaultsApi constructor
+        // when the API is first accessed. This happens automatically
+        // because VaultsApi injects MessageHandlerRegistry in its constructor.
+        // Storage configuration is applied when VaultsApi is initialized
+        // via the configureStorage method
+    }
+}
 exports.VaultsModule = VaultsModule;
+//# sourceMappingURL=VaultsModule.js.map

package/build/VaultsModule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"VaultsModule.js","sourceRoot":"","sources":["../src/VaultsModule.ts"],"names":[],"mappings":";;;AAGA,yCAAyC;AAEzC,2CAAuC;AACvC,0DAAsD;AACtD,8EAA0E;AAC1E,wDAAoD;AACpD,4EAAwE;AACxE,wEAAoE;AACpE,uEAAmE;AACnE,kEAA8D;AAC9D,wFAAoF;AACpF,4EAAwE;AAcxE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,MAAa,YAAY;IAIvB,YAAmB,MAA2B;QAH9B,QAAG,GAAG,qBAAS,CAAA;QAI7B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;IACtB,CAAC;IAED;;OAEG;IACI,SAAS;QACd,OAAO,IAAI,CAAC,MAAM,CAAA;IACpB,CAAC;IAED;;OAEG;IACI,QAAQ,CAAC,iBAAoC,EAAE,eAAgC;QACpF,wBAAwB;QACxB,iBAAiB,CAAC,iBAAiB,CAAC,iCAAe,CAAC,CAAA;QACpD,iBAAiB,CAAC,iBAAiB,CAAC,uDAA0B,CAAC,CAAA;QAC/D,iBAAiB,CAAC,iBAAiB,CAAC,2CAAoB,CAAC,CAAA;QAEzD,oBAAoB;QACpB,iBAAiB,CAAC,iBAAiB,CAAC,+CAAsB,CAAC,CAAA;QAC3D,iBAAiB,CAAC,iBAAiB,CAAC,2BAAY,CAAC,CAAA;QACjD,iBAAiB,CAAC,iBAAiB,CAAC,yBAAW,CAAC,CAAA;QAChD,iBAAiB,CAAC,iBAAiB,CAAC,6CAAqB,CAAC,CAAA;QAC1D,iBAAiB,CAAC,iBAAiB,CAAC,yCAAmB,CAAC,CAAA;QACxD,iBAAiB,CAAC,iBAAiB,CAAC,yCAAmB,CAAC,CAAA;QAExD,uEAAuE;QACvE,MAAM,KAAK,GAAG,CAAC,OAAO,EAAE,aAAa,CAAC,CAAA;QACtC,IAAI,IAAI,CAAC,MAAM,EAAE,YAAY,EAAE,CAAC;YAC9B,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;QACxB,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA,CAAC,6BAA6B;QAEnD,eAAe,CAAC,QAAQ,CACtB,IAAI,eAAQ,CAAC;YACX,EAAE,EAAE,gCAAgC;YACpC,KAAK;SACN,CAAC,CACH,CAAA;QAED,iEAAiE;QACjE,6DAA6D;QAC7D,uEAAuE;QAEvE,iEAAiE;QACjE,kCAAkC;IACpC,CAAC;CACF;AArDD,oCAqDC"}

package/build/crypto/wasm/VaultCrypto.d.ts

@@ -0,0 +1,19 @@
+/**
+ * WASM Cryptographic Primitives Wrapper
+ *
+ * Wraps vault-crypto WASM module for use in Credo-TS
+ */
+import * as wasm from '../../../wasm/vault_crypto.js';
+/**
+ * Initialize WASM module
+ * Call once at agent startup
+ */
+export declare function initVaultCrypto(): Promise<void>;
+export declare const aesGcmEncrypt: typeof wasm.aesGcmEncrypt, aesGcmDecrypt: typeof wasm.aesGcmDecrypt, xchachaEncrypt: typeof wasm.xchachaEncrypt, xchachaDecrypt: typeof wasm.xchachaDecrypt;
+export declare const kemGenerateKeypair: typeof wasm.kemGenerateKeypair, kemEncapsulate: typeof wasm.kemEncapsulate, kemDecapsulate: typeof wasm.kemDecapsulate, kemWrapCek: typeof wasm.kemWrapCek, kemUnwrapCek: typeof wasm.kemUnwrapCek;
+export declare const hkdfExpand: typeof wasm.hkdfExpand, hkdfJoin: typeof wasm.hkdfJoin, deriveCek: typeof wasm.deriveCek, deriveKid: typeof wasm.deriveKid, deriveSymmetricKid: typeof wasm.deriveSymmetricKid;
+export declare const shamirSplit: typeof wasm.shamirSplit, shamirReconstruct: typeof wasm.shamirReconstruct, shamirSplitAndWrap: typeof wasm.shamirSplitAndWrap, shamirUnwrapAndReconstruct: typeof wasm.shamirUnwrapAndReconstruct;
+export declare const SecretShare: typeof wasm.SecretShare;
+export declare const randomBytes: typeof wasm.randomBytes, generateCek: typeof wasm.generateCek, generateNonceAesGcm: typeof wasm.generateNonceAesGcm, generateNonceXchacha: typeof wasm.generateNonceXchacha, keyCommitment: typeof wasm.keyCommitment, verifyKeyCommitment: typeof wasm.verifyKeyCommitment, sha256: typeof wasm.sha256, blake2s256: typeof wasm.blake2s256, computeSummary: typeof wasm.computeSummary, constantTimeEq: typeof wasm.constantTimeEq, toBase64Url: typeof wasm.toBase64Url, fromBase64Url: typeof wasm.fromBase64Url, toHex: typeof wasm.toHex, fromHex: typeof wasm.fromHex, generateUuid: typeof wasm.generateUuid, canonicalAad: typeof wasm.canonicalAad, buildContext: typeof wasm.buildContext;
+export type { AeadResult, KemKeypair, KemEncapResult, } from '../../../wasm/vault_crypto.js';
+export type { SecretShare as SecretShareType } from '../../../wasm/vault_crypto.js';

package/build/crypto/wasm/VaultCrypto.js

@@ -4,57 +4,41 @@
  *
  * Wraps vault-crypto WASM module for use in Credo-TS
  */
-var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
-    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
-    return new (P || (P = Promise))(function (resolve, reject) {
-        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
-        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
-        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
-        step((generator = generator.apply(thisArg, _arguments || [])).next());
-    });
-};
-var __generator = (this && this.__generator) || function (thisArg, body) {
-    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;
-    return g = { next: verb(0), "throw": verb(1), "return": verb(2) }, typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
-    function verb(n) { return function (v) { return step([n, v]); }; }
-    function step(op) {
-        if (f) throw new TypeError("Generator is already executing.");
-        while (g && (g = 0, op[0] && (_ = 0)), _) try {
-            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
-            if (y = 0, t) op = [op[0] & 2, t.value];
-            switch (op[0]) {
-                case 0: case 1: t = op; break;
-                case 4: _.label++; return { value: op[1], done: false };
-                case 5: _.label++; y = op[1]; op = [0]; continue;
-                case 7: op = _.ops.pop(); _.trys.pop(); continue;
-                default:
-                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
-                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
-                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
-                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
-                    if (t[2]) _.ops.pop();
-                    _.trys.pop(); continue;
-            }
-            op = body.call(thisArg, _);
-        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
-        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
     }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.buildContext = exports.canonicalAad = exports.generateUuid = exports.fromHex = exports.toHex = exports.fromBase64Url = exports.toBase64Url = exports.constantTimeEq = exports.computeSummary = exports.blake2s256 = exports.sha256 = exports.verifyKeyCommitment = exports.keyCommitment = exports.generateNonceXchacha = exports.generateNonceAesGcm = exports.generateCek = exports.randomBytes = exports.shamirUnwrapAndReconstruct = exports.shamirSplitAndWrap = exports.shamirReconstruct = exports.shamirSplit = exports.deriveSymmetricKid = exports.deriveKid = exports.deriveCek = exports.hkdfJoin = exports.hkdfExpand = exports.kemUnwrapCek = exports.kemWrapCek = exports.kemDecapsulate = exports.kemEncapsulate = exports.kemGenerateKeypair = exports.xchachaDecrypt = exports.xchachaEncrypt = exports.aesGcmDecrypt = exports.aesGcmEncrypt = exports.initVaultCrypto = void 0;
+exports.buildContext = exports.canonicalAad = exports.generateUuid = exports.fromHex = exports.toHex = exports.fromBase64Url = exports.toBase64Url = exports.constantTimeEq = exports.computeSummary = exports.blake2s256 = exports.sha256 = exports.verifyKeyCommitment = exports.keyCommitment = exports.generateNonceXchacha = exports.generateNonceAesGcm = exports.generateCek = exports.randomBytes = exports.SecretShare = exports.shamirUnwrapAndReconstruct = exports.shamirSplitAndWrap = exports.shamirReconstruct = exports.shamirSplit = exports.deriveSymmetricKid = exports.deriveKid = exports.deriveCek = exports.hkdfJoin = exports.hkdfExpand = exports.kemUnwrapCek = exports.kemWrapCek = exports.kemDecapsulate = exports.kemEncapsulate = exports.kemGenerateKeypair = exports.xchachaDecrypt = exports.xchachaEncrypt = exports.aesGcmDecrypt = exports.aesGcmEncrypt = exports.initVaultCrypto = void 0;
 // Import WASM module
 // Note: In Node.js, this auto-initializes
-var wasm = require("../../../wasm/vault_crypto.js");
+const wasm = __importStar(require("../../../wasm/vault_crypto.js"));
 /**
  * Initialize WASM module
  * Call once at agent startup
  */
-function initVaultCrypto() {
-    return __awaiter(this, void 0, void 0, function () {
-        return __generator(this, function (_a) {
-            return [2 /*return*/];
-        });
-    });
+async function initVaultCrypto() {
+    // WASM is auto-initialized for Node.js target
+    // For browser target, would need: await init()
 }
 exports.initVaultCrypto = initVaultCrypto;
 // Re-export all WASM functions with documentation
@@ -66,5 +50,8 @@ exports.kemGenerateKeypair = wasm.kemGenerateKeypair, exports.kemEncapsulate = w
 exports.hkdfExpand = wasm.hkdfExpand, exports.hkdfJoin = wasm.hkdfJoin, exports.deriveCek = wasm.deriveCek, exports.deriveKid = wasm.deriveKid, exports.deriveSymmetricKid = wasm.deriveSymmetricKid;
 // ========== Shamir Secret Sharing ==========
 exports.shamirSplit = wasm.shamirSplit, exports.shamirReconstruct = wasm.shamirReconstruct, exports.shamirSplitAndWrap = wasm.shamirSplitAndWrap, exports.shamirUnwrapAndReconstruct = wasm.shamirUnwrapAndReconstruct;
+// Export SecretShare class for creating/deserializing shares
+exports.SecretShare = wasm.SecretShare;
 // ========== Utilities ==========
 exports.randomBytes = wasm.randomBytes, exports.generateCek = wasm.generateCek, exports.generateNonceAesGcm = wasm.generateNonceAesGcm, exports.generateNonceXchacha = wasm.generateNonceXchacha, exports.keyCommitment = wasm.keyCommitment, exports.verifyKeyCommitment = wasm.verifyKeyCommitment, exports.sha256 = wasm.sha256, exports.blake2s256 = wasm.blake2s256, exports.computeSummary = wasm.computeSummary, exports.constantTimeEq = wasm.constantTimeEq, exports.toBase64Url = wasm.toBase64Url, exports.fromBase64Url = wasm.fromBase64Url, exports.toHex = wasm.toHex, exports.fromHex = wasm.fromHex, exports.generateUuid = wasm.generateUuid, exports.canonicalAad = wasm.canonicalAad, exports.buildContext = wasm.buildContext;
+//# sourceMappingURL=VaultCrypto.js.map

package/build/crypto/wasm/VaultCrypto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"VaultCrypto.js","sourceRoot":"","sources":["../../../src/crypto/wasm/VaultCrypto.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,qBAAqB;AACrB,0CAA0C;AAC1C,oEAAqD;AAErD;;;GAGG;AACI,KAAK,UAAU,eAAe;IACnC,8CAA8C;IAC9C,+CAA+C;AACjD,CAAC;AAHD,0CAGC;AAED,kDAAkD;AAElD,wCAAwC;AAGtC,qBAAa,GAIX,IAAI,gBAHN,qBAAa,GAGX,IAAI,gBAFN,sBAAc,GAEZ,IAAI,iBADN,sBAAc,GACZ,IAAI,gBAAA;AAER,gDAAgD;AAG9C,0BAAkB,GAKhB,IAAI,qBAJN,sBAAc,GAIZ,IAAI,iBAHN,sBAAc,GAGZ,IAAI,iBAFN,kBAAU,GAER,IAAI,aADN,oBAAY,GACV,IAAI,cAAA;AAER,6CAA6C;AAG3C,kBAAU,GAKR,IAAI,aAJN,gBAAQ,GAIN,IAAI,WAHN,iBAAS,GAGP,IAAI,YAFN,iBAAS,GAEP,IAAI,YADN,0BAAkB,GAChB,IAAI,oBAAA;AAER,8CAA8C;AAG5C,mBAAW,GAIT,IAAI,cAHN,yBAAiB,GAGf,IAAI,oBAFN,0BAAkB,GAEhB,IAAI,qBADN,kCAA0B,GACxB,IAAI,4BAAA;AAER,6DAA6D;AAChD,QAAA,WAAW,GAAG,IAAI,CAAC,WAAW,CAAA;AAE3C,kCAAkC;AAGhC,mBAAW,GAiBT,IAAI,cAhBN,mBAAW,GAgBT,IAAI,cAfN,2BAAmB,GAejB,IAAI,sBAdN,4BAAoB,GAclB,IAAI,uBAbN,qBAAa,GAaX,IAAI,gBAZN,2BAAmB,GAYjB,IAAI,sBAXN,cAAM,GAWJ,IAAI,SAVN,kBAAU,GAUR,IAAI,aATN,sBAAc,GASZ,IAAI,iBARN,sBAAc,GAQZ,IAAI,iBAPN,mBAAW,GAOT,IAAI,cANN,qBAAa,GAMX,IAAI,gBALN,aAAK,GAKH,IAAI,QAJN,eAAO,GAIL,IAAI,UAHN,oBAAY,GAGV,IAAI,eAFN,oBAAY,GAEV,IAAI,eADN,oBAAY,GACV,IAAI,cAAA"}

package/build/errors/BadSuiteError.d.ts

@@ -0,0 +1,8 @@
+import { VaultError } from './VaultError';
+/**
+ * Error thrown when an unknown or unsupported ciphersuite is encountered
+ * Spec §11: ERR_BAD_SUITE
+ */
+export declare class BadSuiteError extends VaultError {
+    constructor(message: string);
+}

package/build/errors/BadSuiteError.js

@@ -1,34 +1,17 @@
 "use strict";
-var __extends = (this && this.__extends) || (function () {
-    var extendStatics = function (d, b) {
-        extendStatics = Object.setPrototypeOf ||
-            ({ __proto__: [] } instanceof Array && function (d, b) { d.__proto__ = b; }) ||
-            function (d, b) { for (var p in b) if (Object.prototype.hasOwnProperty.call(b, p)) d[p] = b[p]; };
-        return extendStatics(d, b);
-    };
-    return function (d, b) {
-        if (typeof b !== "function" && b !== null)
-            throw new TypeError("Class extends value " + String(b) + " is not a constructor or null");
-        extendStatics(d, b);
-        function __() { this.constructor = d; }
-        d.prototype = b === null ? Object.create(b) : (__.prototype = b.prototype, new __());
-    };
-})();
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.BadSuiteError = void 0;
-var VaultError_1 = require("./VaultError");
+const VaultError_1 = require("./VaultError");
 /**
  * Error thrown when an unknown or unsupported ciphersuite is encountered
  * Spec §11: ERR_BAD_SUITE
  */
-var BadSuiteError = /** @class */ (function (_super) {
-    __extends(BadSuiteError, _super);
-    function BadSuiteError(message) {
-        var _this = _super.call(this, VaultError_1.VaultErrorCode.BAD_SUITE, message) || this;
-        _this.name = 'BadSuiteError';
-        Object.setPrototypeOf(_this, BadSuiteError.prototype);
-        return _this;
+class BadSuiteError extends VaultError_1.VaultError {
+    constructor(message) {
+        super(VaultError_1.VaultErrorCode.BAD_SUITE, message);
+        this.name = 'BadSuiteError';
+        Object.setPrototypeOf(this, BadSuiteError.prototype);
     }
-    return BadSuiteError;
-}(VaultError_1.VaultError));
+}
 exports.BadSuiteError = BadSuiteError;
+//# sourceMappingURL=BadSuiteError.js.map

package/build/errors/BadSuiteError.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"BadSuiteError.js","sourceRoot":"","sources":["../../src/errors/BadSuiteError.ts"],"names":[],"mappings":";;;AAAA,6CAAyD;AAEzD;;;GAGG;AACH,MAAa,aAAc,SAAQ,uBAAU;IAC3C,YAAY,OAAe;QACzB,KAAK,CAAC,2BAAc,CAAC,SAAS,EAAE,OAAO,CAAC,CAAA;QACxC,IAAI,CAAC,IAAI,GAAG,eAAe,CAAA;QAC3B,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,aAAa,CAAC,SAAS,CAAC,CAAA;IACtD,CAAC;CACF;AAND,sCAMC"}

package/build/errors/DecryptAeadError.d.ts

@@ -0,0 +1,8 @@
+import { VaultError } from './VaultError';
+/**
+ * Error thrown when AEAD decryption fails
+ * Spec §11: ERR_DECRYPT_AEAD - AEAD tag failure (AAD tamper or wrong CEK)
+ */
+export declare class DecryptAeadError extends VaultError {
+    constructor(message: string);
+}

package/build/errors/DecryptAeadError.js

@@ -1,34 +1,17 @@
 "use strict";
-var __extends = (this && this.__extends) || (function () {
-    var extendStatics = function (d, b) {
-        extendStatics = Object.setPrototypeOf ||
-            ({ __proto__: [] } instanceof Array && function (d, b) { d.__proto__ = b; }) ||
-            function (d, b) { for (var p in b) if (Object.prototype.hasOwnProperty.call(b, p)) d[p] = b[p]; };
-        return extendStatics(d, b);
-    };
-    return function (d, b) {
-        if (typeof b !== "function" && b !== null)
-            throw new TypeError("Class extends value " + String(b) + " is not a constructor or null");
-        extendStatics(d, b);
-        function __() { this.constructor = d; }
-        d.prototype = b === null ? Object.create(b) : (__.prototype = b.prototype, new __());
-    };
-})();
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.DecryptAeadError = void 0;
-var VaultError_1 = require("./VaultError");
+const VaultError_1 = require("./VaultError");
 /**
  * Error thrown when AEAD decryption fails
  * Spec §11: ERR_DECRYPT_AEAD - AEAD tag failure (AAD tamper or wrong CEK)
  */
-var DecryptAeadError = /** @class */ (function (_super) {
-    __extends(DecryptAeadError, _super);
-    function DecryptAeadError(message) {
-        var _this = _super.call(this, VaultError_1.VaultErrorCode.DECRYPT_AEAD, message) || this;
-        _this.name = 'DecryptAeadError';
-        Object.setPrototypeOf(_this, DecryptAeadError.prototype);
-        return _this;
+class DecryptAeadError extends VaultError_1.VaultError {
+    constructor(message) {
+        super(VaultError_1.VaultErrorCode.DECRYPT_AEAD, message);
+        this.name = 'DecryptAeadError';
+        Object.setPrototypeOf(this, DecryptAeadError.prototype);
     }
-    return DecryptAeadError;
-}(VaultError_1.VaultError));
+}
 exports.DecryptAeadError = DecryptAeadError;
+//# sourceMappingURL=DecryptAeadError.js.map

package/build/errors/DecryptAeadError.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"DecryptAeadError.js","sourceRoot":"","sources":["../../src/errors/DecryptAeadError.ts"],"names":[],"mappings":";;;AAAA,6CAAyD;AAEzD;;;GAGG;AACH,MAAa,gBAAiB,SAAQ,uBAAU;IAC9C,YAAY,OAAe;QACzB,KAAK,CAAC,2BAAc,CAAC,YAAY,EAAE,OAAO,CAAC,CAAA;QAC3C,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAA;QAC9B,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,gBAAgB,CAAC,SAAS,CAAC,CAAA;IACzD,CAAC;CACF;AAND,4CAMC"}