@cef-ai/vault-sdk 0.1.0

package/dist/fluent/scope.d.ts

@@ -0,0 +1,27 @@
+import type { VaultHttpClient } from "../core/http.js";
+import { type ListStreamEventsOptions, type ListStreamsOptions } from "../internal/browse.js";
+import type { EventInput, EventsPage, StreamSummary, StreamsListResponse } from "../core/types.js";
+import { type SubscribeFilter, type SubscribeHandler, type SubscribeOptions, type Subscription } from "./subscribe.js";
+export interface PublishedEvent {
+    eventId: string;
+}
+export declare class ScopeHandle {
+    private readonly http;
+    private readonly vaultId;
+    readonly name: string;
+    private readonly events;
+    private readonly browse;
+    constructor(http: VaultHttpClient, vaultId: string, name: string);
+    publish<P>(input: EventInput<P>): Promise<PublishedEvent>;
+    streams: {
+        list: (o?: ListStreamsOptions) => Promise<StreamsListResponse>;
+        get: (ctx: string) => Promise<StreamSummary>;
+    };
+    stream(context: string): {
+        events: {
+            list: <P = unknown>(o?: ListStreamEventsOptions) => Promise<EventsPage<P>>;
+        };
+    };
+    subscribe<P = unknown>(filter: SubscribeFilter, handler: SubscribeHandler<P>, opts?: SubscribeOptions): Subscription;
+}
+//# sourceMappingURL=scope.d.ts.map

package/dist/fluent/scope.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope.d.ts","sourceRoot":"","sources":["../../src/fluent/scope.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAEvD,OAAO,EAAU,KAAK,uBAAuB,EAAE,KAAK,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AACtG,OAAO,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACnG,OAAO,EAEL,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACrB,KAAK,YAAY,EAClB,MAAM,gBAAgB,CAAC;AAExB,MAAM,WAAW,cAAc;IAAG,OAAO,EAAE,MAAM,CAAA;CAAE;AAEnD,qBAAa,WAAW;IAKpB,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,OAAO;aACR,IAAI,EAAE,MAAM;IAN9B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;gBAGb,IAAI,EAAE,eAAe,EACrB,OAAO,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM;IAMxB,OAAO,CAAC,CAAC,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,cAAc,CAAC;IAS/D,OAAO;mBACK,kBAAkB,KAAQ,OAAO,CAAC,mBAAmB,CAAC;mBAErD,MAAM,KAAG,OAAO,CAAC,aAAa,CAAC;MAE1C;IAEF,MAAM,CAAC,OAAO,EAAE,MAAM;;mBAGT,CAAC,gBAAe,uBAAuB,KAAQ,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;;;IAMlF,SAAS,CAAC,CAAC,GAAG,OAAO,EACnB,MAAM,EAAE,eAAe,EACvB,OAAO,EAAE,gBAAgB,CAAC,CAAC,CAAC,EAC5B,IAAI,GAAE,gBAAqB,GAC1B,YAAY;CAGhB"}

package/dist/fluent/scope.js

@@ -0,0 +1,40 @@
+import { Events } from "../internal/events.js";
+import { Browse } from "../internal/browse.js";
+import { subscribe, } from "./subscribe.js";
+export class ScopeHandle {
+    http;
+    vaultId;
+    name;
+    events;
+    browse;
+    constructor(http, vaultId, name) {
+        this.http = http;
+        this.vaultId = vaultId;
+        this.name = name;
+        this.events = new Events(http);
+        this.browse = new Browse(http);
+    }
+    async publish(input) {
+        const res = await this.events.publish(this.vaultId, this.name, input);
+        if (res.rejected.length > 0) {
+            const r = res.rejected[0];
+            throw new Error(`publish rejected: ${r.reason}${r.code ? ` (${r.code})` : ""}`);
+        }
+        return { eventId: res.accepted[0] };
+    }
+    streams = {
+        list: (o = {}) => this.browse.listStreams(this.vaultId, this.name, o),
+        get: (ctx) => this.browse.getStream(this.vaultId, this.name, ctx),
+    };
+    stream(context) {
+        return {
+            events: {
+                list: (o = {}) => this.browse.listStreamEvents(this.vaultId, this.name, context, o),
+            },
+        };
+    }
+    subscribe(filter, handler, opts = {}) {
+        return subscribe(this.http, this.vaultId, this.name, filter, handler, opts);
+    }
+}
+//# sourceMappingURL=scope.js.map

package/dist/fluent/scope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope.js","sourceRoot":"","sources":["../../src/fluent/scope.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAC/C,OAAO,EAAE,MAAM,EAAyD,MAAM,uBAAuB,CAAC;AAEtG,OAAO,EACL,SAAS,GAKV,MAAM,gBAAgB,CAAC;AAIxB,MAAM,OAAO,WAAW;IAKH;IACA;IACD;IAND,MAAM,CAAS;IACf,MAAM,CAAS;IAEhC,YACmB,IAAqB,EACrB,OAAe,EAChB,IAAY;QAFX,SAAI,GAAJ,IAAI,CAAiB;QACrB,YAAO,GAAP,OAAO,CAAQ;QAChB,SAAI,GAAJ,IAAI,CAAQ;QAE5B,IAAI,CAAC,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,CAAC,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,OAAO,CAAI,KAAoB;QACnC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACtE,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,MAAM,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAClF,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAE,EAAE,CAAC;IACvC,CAAC;IAED,OAAO,GAAG;QACR,IAAI,EAAE,CAAC,IAAwB,EAAE,EAAgC,EAAE,CACjE,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACrD,GAAG,EAAE,CAAC,GAAW,EAA0B,EAAE,CAC3C,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC;KACtD,CAAC;IAEF,MAAM,CAAC,OAAe;QACpB,OAAO;YACL,MAAM,EAAE;gBACN,IAAI,EAAE,CAAc,IAA6B,EAAE,EAA0B,EAAE,CAC7E,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAI,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;aACvE;SACF,CAAC;IACJ,CAAC;IAED,SAAS,CACP,MAAuB,EACvB,OAA4B,EAC5B,OAAyB,EAAE;QAE3B,OAAO,SAAS,CAAI,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IACjF,CAAC;CACF"}

package/dist/fluent/subscribe.d.ts

@@ -0,0 +1,24 @@
+import type { VaultHttpClient } from "../core/http.js";
+import type { VaultEvent } from "../core/types.js";
+export interface SubscribeFilter {
+    context: string;
+    types?: string[];
+    /** Client-side filter on `from`. The server has no `from` filter today. */
+    from?: string[];
+}
+export interface SubscribeOptions {
+    /** Poll interval in ms. Default 1000. */
+    intervalMs?: number;
+    /** Page size per poll. Default 100. */
+    pageSize?: number;
+    /** Hook for poll-error observation. Default: console.warn. */
+    onError?: (err: unknown) => void;
+}
+export interface Subscription {
+    unsubscribe(): void;
+    /** Resolves once the loop has stopped after `unsubscribe()`. */
+    closed: Promise<void>;
+}
+export type SubscribeHandler<P = unknown> = (event: VaultEvent<P>) => void | Promise<void>;
+export declare function subscribe<P = unknown>(http: VaultHttpClient, vaultId: string, scope: string, filter: SubscribeFilter, handler: SubscribeHandler<P>, opts?: SubscribeOptions): Subscription;
+//# sourceMappingURL=subscribe.d.ts.map

package/dist/fluent/subscribe.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"subscribe.d.ts","sourceRoot":"","sources":["../../src/fluent/subscribe.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAEvD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAEnD,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,2EAA2E;IAC3E,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,MAAM,WAAW,gBAAgB;IAC/B,yCAAyC;IACzC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,uCAAuC;IACvC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,8DAA8D;IAC9D,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,IAAI,CAAC;CAClC;AAED,MAAM,WAAW,YAAY;IAC3B,WAAW,IAAI,IAAI,CAAC;IACpB,gEAAgE;IAChE,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;CACvB;AAED,MAAM,MAAM,gBAAgB,CAAC,CAAC,GAAG,OAAO,IAAI,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAE3F,wBAAgB,SAAS,CAAC,CAAC,GAAG,OAAO,EACnC,IAAI,EAAE,eAAe,EACrB,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,eAAe,EACvB,OAAO,EAAE,gBAAgB,CAAC,CAAC,CAAC,EAC5B,IAAI,GAAE,gBAAqB,GAC1B,YAAY,CAwCd"}

package/dist/fluent/subscribe.js

@@ -0,0 +1,46 @@
+import { Browse } from "../internal/browse.js";
+export function subscribe(http, vaultId, scope, filter, handler, opts = {}) {
+    const browse = new Browse(http);
+    const interval = opts.intervalMs ?? 1000;
+    const pageSize = opts.pageSize ?? 100;
+    const onError = opts.onError ?? ((e) => { console.warn("[vault-sdk] subscribe poll failed:", e); });
+    const seen = new Set();
+    let cursor;
+    let stopped = false;
+    let closeResolve;
+    const closed = new Promise((r) => (closeResolve = r));
+    const tick = async () => {
+        while (!stopped) {
+            try {
+                const page = await browse.listStreamEvents(vaultId, scope, filter.context, {
+                    cursor, limit: pageSize,
+                });
+                for (const event of page.items) {
+                    if (seen.has(event.eventId))
+                        continue;
+                    seen.add(event.eventId);
+                    if (filter.types && !filter.types.includes(event.type))
+                        continue;
+                    if (filter.from && !filter.from.includes(event.from ?? ""))
+                        continue;
+                    await handler(event);
+                }
+                if (page.nextCursor)
+                    cursor = page.nextCursor;
+            }
+            catch (err) {
+                onError(err);
+            }
+            if (stopped)
+                break;
+            await new Promise((r) => setTimeout(r, interval));
+        }
+        closeResolve();
+    };
+    void tick();
+    return {
+        unsubscribe() { stopped = true; },
+        closed,
+    };
+}
+//# sourceMappingURL=subscribe.js.map

package/dist/fluent/subscribe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"subscribe.js","sourceRoot":"","sources":["../../src/fluent/subscribe.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AA2B/C,MAAM,UAAU,SAAS,CACvB,IAAqB,EACrB,OAAe,EACf,KAAa,EACb,MAAuB,EACvB,OAA4B,EAC5B,OAAyB,EAAE;IAE3B,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC;IACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,GAAG,CAAC;IACtC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,oCAAoC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACpG,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,IAAI,MAA0B,CAAC;IAC/B,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,YAAyB,CAAC;IAC9B,MAAM,MAAM,GAAG,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,YAAY,GAAG,CAAC,CAAC,CAAC,CAAC;IAE5D,MAAM,IAAI,GAAG,KAAK,IAAmB,EAAE;QACrC,OAAO,CAAC,OAAO,EAAE,CAAC;YAChB,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAI,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,OAAO,EAAE;oBAC5E,MAAM,EAAE,KAAK,EAAE,QAAQ;iBACxB,CAAC,CAAC;gBACH,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;oBAC/B,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC;wBAAE,SAAS;oBACtC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;oBACxB,IAAI,MAAM,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;wBAAE,SAAS;oBACjE,IAAI,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC;wBAAE,SAAS;oBACrE,MAAM,OAAO,CAAC,KAAK,CAAC,CAAC;gBACvB,CAAC;gBACD,IAAI,IAAI,CAAC,UAAU;oBAAE,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC;YAChD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,GAAG,CAAC,CAAC;YACf,CAAC;YACD,IAAI,OAAO;gBAAE,MAAM;YACnB,MAAM,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC;QAC1D,CAAC;QACD,YAAY,EAAE,CAAC;IACjB,CAAC,CAAC;IAEF,KAAK,IAAI,EAAE,CAAC;IAEZ,OAAO;QACL,WAAW,KAAK,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC;QACjC,MAAM;KACP,CAAC;AACJ,CAAC"}

package/dist/fluent/vault.d.ts

@@ -0,0 +1,68 @@
+import type { VaultHttpClient } from "../core/http.js";
+import { type CreateScopeRequest, type UpdateScopeRequest } from "../internal/scopes.js";
+import type { JobsPage, Scope, VaultRecord } from "../core/types.js";
+import { ScopeHandle } from "./scope.js";
+import { AgentConnectionHandle } from "./agent-connection.js";
+import { JobHandle } from "./job.js";
+import type { Wallet } from "../wallet/adapter.js";
+import type { GarClient } from "../agreements/gar-client.js";
+import type { AgentManifest } from "../internal/marketplace.js";
+export interface VaultDeps {
+    /** GAR client wired by `VaultSDK` when `garEndpoint` is configured. */
+    gar?: GarClient;
+    /** Wallet adapter — required for high-level `agents.connect`. */
+    wallet?: Wallet;
+}
+/** Input for the high-level `vault.agents.connect` flow. */
+export interface ConnectAgentInput {
+    manifest: AgentManifest;
+    scope: string;
+    settings?: Record<string, unknown>;
+}
+export declare class Vault {
+    readonly id: string;
+    readonly bucketId: string;
+    readonly walletPubkey: string;
+    readonly gatewayEndpoint: string;
+    readonly region: string;
+    /** @internal — exposed so subhandles can construct their own internals. */
+    readonly _http: VaultHttpClient;
+    private readonly _scopes;
+    private readonly _agents;
+    private readonly _browse;
+    private readonly _gar?;
+    private readonly _wallet?;
+    private readonly _userPubKey;
+    constructor(http: VaultHttpClient, record: VaultRecord, deps?: VaultDeps);
+    scopes: {
+        list: () => Promise<Scope[]>;
+        get: (n: string) => Promise<Scope>;
+        create: (r: CreateScopeRequest) => Promise<Scope>;
+        update: (n: string, r: UpdateScopeRequest) => Promise<Scope>;
+        delete: (n: string) => Promise<void>;
+    };
+    scope(name: string): ScopeHandle;
+    agents: {
+        /**
+         * Connect an agent. Builds and signs the GAR consent agreement
+         * internally, POSTs it to the configured GAR endpoint, then calls
+         * vault-api `POST /agents` with the resulting bare-hex signature.
+         *
+         * Requires both `garEndpoint` and a `wallet` adapter on `VaultSDKConfig`.
+         * For the low-level surface (pre-signed `agreementSignature`), use
+         * `Agents.connect` from `@cef-ai/vault-sdk/internal`.
+         */
+        connect: (input: ConnectAgentInput) => Promise<AgentConnectionHandle>;
+        list: () => Promise<AgentConnectionHandle[]>;
+        get: (a: string) => Promise<AgentConnectionHandle>;
+    };
+    jobs: {
+        list: (o?: {
+            state?: string;
+            cursor?: string;
+            limit?: number;
+        }) => Promise<JobsPage>;
+        get: (jobId: string) => JobHandle;
+    };
+}
+//# sourceMappingURL=vault.d.ts.map

package/dist/fluent/vault.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vault.d.ts","sourceRoot":"","sources":["../../src/fluent/vault.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AACvD,OAAO,EAAU,KAAK,kBAAkB,EAAE,KAAK,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAGjG,OAAO,KAAK,EACW,QAAQ,EAAE,KAAK,EAAE,WAAW,EAClD,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AACrC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,6BAA6B,CAAC;AAC7D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAGhE,MAAM,WAAW,SAAS;IACxB,uEAAuE;IACvE,GAAG,CAAC,EAAE,SAAS,CAAC;IAChB,iEAAiE;IACjE,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,4DAA4D;AAC5D,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,aAAa,CAAC;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,qBAAa,KAAK;IAChB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAExB,2EAA2E;IAC3E,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAC;IAChC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAY;IAClC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;gBAEzB,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,GAAE,SAAc;IAkB5E,MAAM;oBACM,OAAO,CAAC,KAAK,EAAE,CAAC;iBACjB,MAAM,KAAG,OAAO,CAAC,KAAK,CAAC;oBACpB,kBAAkB,KAAG,OAAO,CAAC,KAAK,CAAC;oBACnC,MAAM,KAAK,kBAAkB,KAAG,OAAO,CAAC,KAAK,CAAC;oBAC9C,MAAM,KAAG,OAAO,CAAC,IAAI,CAAC;MAClC;IAEF,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW;IAIhC,MAAM;QACJ;;;;;;;;WAQG;yBACoB,iBAAiB,KAAG,OAAO,CAAC,qBAAqB,CAAC;oBA6BzD,OAAO,CAAC,qBAAqB,EAAE,CAAC;iBAIjC,MAAM,KAAG,OAAO,CAAC,qBAAqB,CAAC;MAItD;IAEF,IAAI;mBACQ;YAAE,KAAK,CAAC,EAAE,MAAM,CAAC;YAAC,MAAM,CAAC,EAAE,MAAM,CAAC;YAAC,KAAK,CAAC,EAAE,MAAM,CAAA;SAAE,KAAQ,OAAO,CAAC,QAAQ,CAAC;qBAEzE,MAAM,KAAG,SAAS;MAC/B;CACH"}

package/dist/fluent/vault.js

@@ -0,0 +1,98 @@
+import { Scopes } from "../internal/scopes.js";
+import { Agents } from "../internal/agents.js";
+import { Browse } from "../internal/browse.js";
+import { ScopeHandle } from "./scope.js";
+import { AgentConnectionHandle } from "./agent-connection.js";
+import { JobHandle } from "./job.js";
+import { signAndSubmitAgreement } from "../agreements/sign.js";
+export class Vault {
+    id;
+    bucketId;
+    walletPubkey;
+    gatewayEndpoint;
+    region;
+    /** @internal — exposed so subhandles can construct their own internals. */
+    _http;
+    _scopes;
+    _agents;
+    _browse;
+    _gar;
+    _wallet;
+    _userPubKey;
+    constructor(http, record, deps = {}) {
+        this.id = record.vaultId;
+        this.bucketId = record.bucketId;
+        this.walletPubkey = record.walletPubkey;
+        this.gatewayEndpoint = record.gatewayEndpoint;
+        this.region = record.region;
+        this._http = http;
+        this._scopes = new Scopes(http);
+        this._agents = new Agents(http);
+        this._browse = new Browse(http);
+        this._gar = deps.gar;
+        this._wallet = deps.wallet;
+        // Prefer the live wallet pubkey (the user's actual key) over whatever the
+        // server echoed on the vault record — the agreement payload must match
+        // the signer GAR will verify.
+        this._userPubKey = deps.wallet?.pubkey() ?? record.walletPubkey;
+    }
+    scopes = {
+        list: () => this._scopes.list(this.id),
+        get: (n) => this._scopes.get(this.id, n),
+        create: (r) => this._scopes.create(this.id, r),
+        update: (n, r) => this._scopes.update(this.id, n, r),
+        delete: (n) => this._scopes.delete(this.id, n),
+    };
+    scope(name) {
+        return new ScopeHandle(this._http, this.id, name);
+    }
+    agents = {
+        /**
+         * Connect an agent. Builds and signs the GAR consent agreement
+         * internally, POSTs it to the configured GAR endpoint, then calls
+         * vault-api `POST /agents` with the resulting bare-hex signature.
+         *
+         * Requires both `garEndpoint` and a `wallet` adapter on `VaultSDKConfig`.
+         * For the low-level surface (pre-signed `agreementSignature`), use
+         * `Agents.connect` from `@cef-ai/vault-sdk/internal`.
+         */
+        connect: async (input) => {
+            if (!this._gar) {
+                throw new Error("vault.agents.connect requires `garEndpoint` on VaultSDKConfig");
+            }
+            if (!this._wallet) {
+                throw new Error("vault.agents.connect requires a `wallet` adapter on VaultSDKConfig");
+            }
+            const { agreementSignature } = await signAndSubmitAgreement({
+                wallet: this._wallet,
+                vault: { id: this.id, userPubKey: this._userPubKey },
+                manifest: input.manifest,
+                scope: input.scope,
+                gar: this._gar,
+            });
+            const req = {
+                agentId: input.manifest.agentId,
+                version: input.manifest.version,
+                manifestCid: input.manifest.manifestCid,
+                scope: input.scope,
+                settings: input.settings ?? {},
+                agreementSignature,
+            };
+            const conn = await this._agents.connect(this.id, req);
+            return new AgentConnectionHandle(this._http, this.id, conn);
+        },
+        list: async () => {
+            const items = await this._agents.list(this.id);
+            return items.map((c) => new AgentConnectionHandle(this._http, this.id, c));
+        },
+        get: async (a) => {
+            const conn = await this._agents.get(this.id, a);
+            return new AgentConnectionHandle(this._http, this.id, conn);
+        },
+    };
+    jobs = {
+        list: (o = {}) => this._browse.listJobs(this.id, o),
+        get: (jobId) => new JobHandle(this._http, this.id, jobId),
+    };
+}
+//# sourceMappingURL=vault.js.map

package/dist/fluent/vault.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vault.js","sourceRoot":"","sources":["../../src/fluent/vault.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,MAAM,EAAoD,MAAM,uBAAuB,CAAC;AACjG,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAC/C,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAI/C,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAIrC,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAgB/D,MAAM,OAAO,KAAK;IACP,EAAE,CAAS;IACX,QAAQ,CAAS;IACjB,YAAY,CAAS;IACrB,eAAe,CAAS;IACxB,MAAM,CAAS;IAExB,2EAA2E;IAClE,KAAK,CAAkB;IACf,OAAO,CAAS;IAChB,OAAO,CAAS;IAChB,OAAO,CAAS;IAChB,IAAI,CAAa;IACjB,OAAO,CAAU;IACjB,WAAW,CAAS;IAErC,YAAY,IAAqB,EAAE,MAAmB,EAAE,OAAkB,EAAE;QAC1E,IAAI,CAAC,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC;QACzB,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;QAChC,IAAI,CAAC,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;QACxC,IAAI,CAAC,eAAe,GAAG,MAAM,CAAC,eAAe,CAAC;QAC9C,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QAC5B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC,OAAO,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,CAAC,OAAO,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,CAAC,OAAO,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC;QACrB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC;QAC3B,0EAA0E;QAC1E,uEAAuE;QACvE,8BAA8B;QAC9B,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,MAAM,CAAC,YAAY,CAAC;IAClE,CAAC;IAED,MAAM,GAAG;QACP,IAAI,EAAE,GAAqB,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACxD,GAAG,EAAE,CAAC,CAAS,EAAkB,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;QAChE,MAAM,EAAE,CAAC,CAAqB,EAAkB,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;QAClF,MAAM,EAAE,CAAC,CAAS,EAAE,CAAqB,EAAkB,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;QAChG,MAAM,EAAE,CAAC,CAAS,EAAiB,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;KACtE,CAAC;IAEF,KAAK,CAAC,IAAY;QAChB,OAAO,IAAI,WAAW,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IACpD,CAAC;IAED,MAAM,GAAG;QACP;;;;;;;;WAQG;QACH,OAAO,EAAE,KAAK,EAAE,KAAwB,EAAkC,EAAE;YAC1E,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;gBACf,MAAM,IAAI,KAAK,CACb,+DAA+D,CAChE,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;gBAClB,MAAM,IAAI,KAAK,CACb,oEAAoE,CACrE,CAAC;YACJ,CAAC;YACD,MAAM,EAAE,kBAAkB,EAAE,GAAG,MAAM,sBAAsB,CAAC;gBAC1D,MAAM,EAAE,IAAI,CAAC,OAAO;gBACpB,KAAK,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,WAAW,EAAE;gBACpD,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,GAAG,EAAE,IAAI,CAAC,IAAI;aACf,CAAC,CAAC;YACH,MAAM,GAAG,GAAwB;gBAC/B,OAAO,EAAE,KAAK,CAAC,QAAQ,CAAC,OAAO;gBAC/B,OAAO,EAAE,KAAK,CAAC,QAAQ,CAAC,OAAO;gBAC/B,WAAW,EAAE,KAAK,CAAC,QAAQ,CAAC,WAAW;gBACvC,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,EAAE;gBAC9B,kBAAkB;aACnB,CAAC;YACF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;YACtD,OAAO,IAAI,qBAAqB,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAC9D,CAAC;QACD,IAAI,EAAE,KAAK,IAAsC,EAAE;YACjD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC/C,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,qBAAqB,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7E,CAAC;QACD,GAAG,EAAE,KAAK,EAAE,CAAS,EAAkC,EAAE;YACvD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;YAChD,OAAO,IAAI,qBAAqB,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAC9D,CAAC;KACF,CAAC;IAEF,IAAI,GAAG;QACL,IAAI,EAAE,CAAC,IAAyD,EAAE,EAAqB,EAAE,CACvF,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;QACnC,GAAG,EAAE,CAAC,KAAa,EAAa,EAAE,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC;KAC7E,CAAC;CACH"}

package/dist/index.d.ts

@@ -0,0 +1,22 @@
+export { VaultSDK } from "./client.js";
+export type { VaultSDKConfig, EnsureVaultOptions } from "./client.js";
+export { Vault } from "./fluent/vault.js";
+export { ScopeHandle } from "./fluent/scope.js";
+export { AgentConnectionHandle } from "./fluent/agent-connection.js";
+export { JobHandle } from "./fluent/job.js";
+export { CubbyHandle } from "./fluent/cubby.js";
+export type { Subscription, SubscribeOptions, SubscribeFilter, SubscribeHandler, } from "./fluent/subscribe.js";
+export { isWallet } from "./wallet/adapter.js";
+export type { Wallet } from "./wallet/adapter.js";
+export { KeypairWallet } from "./wallet/keypair.js";
+export { CereWallet } from "./wallet/cere.js";
+export type { AuthProvider, AuthRequest, AuthOutcome } from "./auth/provider.js";
+export { NoAuth } from "./auth/no-auth.js";
+export { WalletAuthProvider } from "./auth/wallet.js";
+export type { AgentManifest } from "./internal/marketplace.js";
+export type { HealthResponse } from "./internal/health.js";
+export { GarClient, signAndSubmitAgreement } from "./agreements/index.js";
+export type { SignedAgreementEnvelope, SignAndSubmitAgreementOptions, SignAndSubmitAgreementResult, } from "./agreements/index.js";
+export { VaultRequestError, VaultNotImplementedError, VaultSignerRequiredError, } from "./core/errors.js";
+export type { Activity, ActivitiesPage, ActivityState, AgentConnection, AgentConnectionStatus, ConnectAgentRequest, CubbyQueryResponse, CubbyExecResponse, EventInput, EventRole, EventsPage, IngestOrigin, Job, JobsPage, JobState, PublishResult, Scope, StreamSummary, StreamsListResponse, VaultEvent, VaultRecord, VaultSigType, } from "./core/types.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,YAAY,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAEtE,OAAO,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,YAAY,EACV,YAAY,EACZ,gBAAgB,EAChB,eAAe,EACf,gBAAgB,GACjB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAC/C,YAAY,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAE9C,YAAY,EAAE,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjF,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC3C,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAEtD,YAAY,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC/D,YAAY,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAE3D,OAAO,EAAE,SAAS,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC1E,YAAY,EACV,uBAAuB,EACvB,6BAA6B,EAC7B,4BAA4B,GAC7B,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,iBAAiB,EACjB,wBAAwB,EACxB,wBAAwB,GACzB,MAAM,kBAAkB,CAAC;AAE1B,YAAY,EACV,QAAQ,EACR,cAAc,EACd,aAAa,EACb,eAAe,EACf,qBAAqB,EACrB,mBAAmB,EACnB,kBAAkB,EAClB,iBAAiB,EACjB,UAAU,EACV,SAAS,EACT,UAAU,EACV,YAAY,EACZ,GAAG,EACH,QAAQ,EACR,QAAQ,EACR,aAAa,EACb,KAAK,EACL,aAAa,EACb,mBAAmB,EACnB,UAAU,EACV,WAAW,EACX,YAAY,GACb,MAAM,iBAAiB,CAAC"}

package/dist/index.js

@@ -0,0 +1,17 @@
+// Public surface — fluent + adapters + types. Internal classes are NOT
+// re-exported here; import them via `@cef-ai/vault-sdk/internal` if you
+// genuinely need the lower level.
+export { VaultSDK } from "./client.js";
+export { Vault } from "./fluent/vault.js";
+export { ScopeHandle } from "./fluent/scope.js";
+export { AgentConnectionHandle } from "./fluent/agent-connection.js";
+export { JobHandle } from "./fluent/job.js";
+export { CubbyHandle } from "./fluent/cubby.js";
+export { isWallet } from "./wallet/adapter.js";
+export { KeypairWallet } from "./wallet/keypair.js";
+export { CereWallet } from "./wallet/cere.js";
+export { NoAuth } from "./auth/no-auth.js";
+export { WalletAuthProvider } from "./auth/wallet.js";
+export { GarClient, signAndSubmitAgreement } from "./agreements/index.js";
+export { VaultRequestError, VaultNotImplementedError, VaultSignerRequiredError, } from "./core/errors.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,wEAAwE;AACxE,kCAAkC;AAElC,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAGvC,OAAO,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAQhD,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAE/C,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAG9C,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC3C,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAKtD,OAAO,EAAE,SAAS,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAO1E,OAAO,EACL,iBAAiB,EACjB,wBAAwB,EACxB,wBAAwB,GACzB,MAAM,kBAAkB,CAAC"}

package/dist/internal/agents.d.ts

@@ -0,0 +1,21 @@
+import type { VaultHttpClient } from "../core/http.js";
+import type { AgentConnection, AgentConnectionStatus, ConnectAgentRequest } from "../core/types.js";
+export interface ListAgentsOptions {
+    status?: AgentConnectionStatus;
+}
+export declare class Agents {
+    private readonly http;
+    constructor(http: VaultHttpClient);
+    /**
+     * Low-level surface — POSTs a `ConnectAgentRequest` with a pre-signed
+     * `agreementSignature`. For the high-level flow that signs the GAR
+     * agreement on your behalf, use `vault.agents.connect({ manifest, scope, settings })`
+     * from `@cef-ai/vault-sdk` (requires `garEndpoint` + `wallet` on the SDK config).
+     */
+    connect(v: string, req: ConnectAgentRequest): Promise<AgentConnection>;
+    list(v: string, opts?: ListAgentsOptions): Promise<AgentConnection[]>;
+    get(v: string, a: string): Promise<AgentConnection>;
+    update(v: string, a: string, settings: Record<string, unknown>): Promise<AgentConnection>;
+    disconnect(v: string, a: string): Promise<void>;
+}
+//# sourceMappingURL=agents.d.ts.map

package/dist/internal/agents.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agents.d.ts","sourceRoot":"","sources":["../../src/internal/agents.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAEvD,OAAO,KAAK,EAAE,eAAe,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAEpG,MAAM,WAAW,iBAAiB;IAAG,MAAM,CAAC,EAAE,qBAAqB,CAAA;CAAE;AAErE,qBAAa,MAAM;IACL,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,eAAe;IAElD;;;;;OAKG;IACH,OAAO,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,mBAAmB,GAAG,OAAO,CAAC,eAAe,CAAC;IAGhE,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,GAAE,iBAAsB,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC;IAK/E,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;IAGnD,MAAM,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,eAAe,CAAC;IAGzF,UAAU,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAGhD"}

package/dist/internal/agents.js

@@ -0,0 +1,30 @@
+import { endpoints } from "../core/endpoints.js";
+export class Agents {
+    http;
+    constructor(http) {
+        this.http = http;
+    }
+    /**
+     * Low-level surface — POSTs a `ConnectAgentRequest` with a pre-signed
+     * `agreementSignature`. For the high-level flow that signs the GAR
+     * agreement on your behalf, use `vault.agents.connect({ manifest, scope, settings })`
+     * from `@cef-ai/vault-sdk` (requires `garEndpoint` + `wallet` on the SDK config).
+     */
+    connect(v, req) {
+        return this.http.send("POST", endpoints.agents(v), { body: req });
+    }
+    async list(v, opts = {}) {
+        const res = await this.http.send("GET", endpoints.agents(v), { query: { status: opts.status } });
+        return res.items ?? [];
+    }
+    get(v, a) {
+        return this.http.send("GET", endpoints.agent(v, a));
+    }
+    update(v, a, settings) {
+        return this.http.send("PATCH", endpoints.agent(v, a), { body: { settings } });
+    }
+    disconnect(v, a) {
+        return this.http.send("DELETE", endpoints.agent(v, a), { body: {} });
+    }
+}
+//# sourceMappingURL=agents.js.map

package/dist/internal/agents.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agents.js","sourceRoot":"","sources":["../../src/internal/agents.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAKjD,MAAM,OAAO,MAAM;IACY;IAA7B,YAA6B,IAAqB;QAArB,SAAI,GAAJ,IAAI,CAAiB;IAAG,CAAC;IAEtD;;;;;OAKG;IACH,OAAO,CAAC,CAAS,EAAE,GAAwB;QACzC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,GAAyC,EAAE,CAAC,CAAC;IAC1G,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,CAAS,EAAE,OAA0B,EAAE;QAChD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAC9B,KAAK,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAClE,OAAO,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;IACzB,CAAC;IACD,GAAG,CAAC,CAAS,EAAE,CAAS;QACtB,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACtD,CAAC;IACD,MAAM,CAAC,CAAS,EAAE,CAAS,EAAE,QAAiC;QAC5D,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;IAChF,CAAC;IACD,UAAU,CAAC,CAAS,EAAE,CAAS;QAC7B,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IACvE,CAAC;CACF"}

package/dist/internal/browse.d.ts

@@ -0,0 +1,31 @@
+import type { VaultHttpClient } from "../core/http.js";
+import type { Activity, ActivitiesPage, EventsPage, Job, JobsPage, StreamSummary, StreamsListResponse } from "../core/types.js";
+export interface ListStreamsOptions {
+    active?: boolean;
+}
+export interface ListStreamEventsOptions {
+    limit?: number;
+    cursor?: string;
+}
+export interface ListJobsOptions {
+    state?: string;
+    cursor?: string;
+    limit?: number;
+}
+export interface ListActivitiesOptions {
+    cursor?: string;
+    limit?: number;
+}
+export declare class Browse {
+    private readonly http;
+    constructor(http: VaultHttpClient);
+    listStreams(v: string, s: string, o?: ListStreamsOptions): Promise<StreamsListResponse>;
+    getStream(v: string, s: string, ctx: string): Promise<StreamSummary>;
+    listStreamEvents<P = unknown>(v: string, s: string, ctx: string, o?: ListStreamEventsOptions): Promise<EventsPage<P>>;
+    listJobs(v: string, o?: ListJobsOptions): Promise<JobsPage>;
+    getJob(v: string, j: string): Promise<Job>;
+    listAgentJobs(v: string, a: string, o?: ListJobsOptions): Promise<JobsPage>;
+    listActivities(v: string, j: string, o?: ListActivitiesOptions): Promise<ActivitiesPage>;
+    getActivity(v: string, j: string, a: string): Promise<Activity>;
+}
+//# sourceMappingURL=browse.d.ts.map

package/dist/internal/browse.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"browse.d.ts","sourceRoot":"","sources":["../../src/internal/browse.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAEvD,OAAO,KAAK,EACV,QAAQ,EAAE,cAAc,EAAE,UAAU,EAAE,GAAG,EAAE,QAAQ,EACnD,aAAa,EAAE,mBAAmB,EACnC,MAAM,kBAAkB,CAAC;AAE1B,MAAM,WAAW,kBAAkB;IAAG,MAAM,CAAC,EAAE,OAAO,CAAA;CAAE;AACxD,MAAM,WAAW,uBAAuB;IAAG,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE;AAC5E,MAAM,WAAW,eAAe;IAAG,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE;AACpF,MAAM,WAAW,qBAAqB;IAAG,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE;AAE1E,qBAAa,MAAM;IACL,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,eAAe;IAElD,WAAW,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,GAAE,kBAAuB,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAG3F,SAAS,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IAGpE,gBAAgB,CAAC,CAAC,GAAG,OAAO,EAC1B,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,GAAE,uBAA4B,GACjE,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAIzB,QAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,GAAE,eAAoB,GAAG,OAAO,CAAC,QAAQ,CAAC;IAI/D,MAAM,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IAG1C,aAAa,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,GAAE,eAAoB,GAAG,OAAO,CAAC,QAAQ,CAAC;IAI/E,cAAc,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,GAAE,qBAA0B,GAAG,OAAO,CAAC,cAAc,CAAC;IAI5F,WAAW,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;CAGhE"}

package/dist/internal/browse.js

@@ -0,0 +1,32 @@
+import { endpoints } from "../core/endpoints.js";
+export class Browse {
+    http;
+    constructor(http) {
+        this.http = http;
+    }
+    listStreams(v, s, o = {}) {
+        return this.http.send("GET", endpoints.scopeStreams(v, s), { query: { active: o.active } });
+    }
+    getStream(v, s, ctx) {
+        return this.http.send("GET", endpoints.stream(v, s, ctx));
+    }
+    listStreamEvents(v, s, ctx, o = {}) {
+        return this.http.send("GET", endpoints.streamEvents(v, s, ctx), { query: { limit: o.limit, cursor: o.cursor } });
+    }
+    listJobs(v, o = {}) {
+        return this.http.send("GET", endpoints.jobs(v), { query: { state: o.state, cursor: o.cursor, limit: o.limit } });
+    }
+    getJob(v, j) {
+        return this.http.send("GET", endpoints.job(v, j));
+    }
+    listAgentJobs(v, a, o = {}) {
+        return this.http.send("GET", endpoints.agentJobs(v, a), { query: { state: o.state, cursor: o.cursor, limit: o.limit } });
+    }
+    listActivities(v, j, o = {}) {
+        return this.http.send("GET", endpoints.jobActivities(v, j), { query: { cursor: o.cursor, limit: o.limit } });
+    }
+    getActivity(v, j, a) {
+        return this.http.send("GET", endpoints.jobActivity(v, j, a));
+    }
+}
+//# sourceMappingURL=browse.js.map

package/dist/internal/browse.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"browse.js","sourceRoot":"","sources":["../../src/internal/browse.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAWjD,MAAM,OAAO,MAAM;IACY;IAA7B,YAA6B,IAAqB;QAArB,SAAI,GAAJ,IAAI,CAAiB;IAAG,CAAC;IAEtD,WAAW,CAAC,CAAS,EAAE,CAAS,EAAE,IAAwB,EAAE;QAC1D,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC9F,CAAC;IACD,SAAS,CAAC,CAAS,EAAE,CAAS,EAAE,GAAW;QACzC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IAC5D,CAAC;IACD,gBAAgB,CACd,CAAS,EAAE,CAAS,EAAE,GAAW,EAAE,IAA6B,EAAE;QAElE,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,EAC5D,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACrD,CAAC;IACD,QAAQ,CAAC,CAAS,EAAE,IAAqB,EAAE;QACzC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAC5C,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,MAAM,CAAC,CAAS,EAAE,CAAS;QACzB,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACpD,CAAC;IACD,aAAa,CAAC,CAAS,EAAE,CAAS,EAAE,IAAqB,EAAE;QACzD,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,EACpD,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,cAAc,CAAC,CAAS,EAAE,CAAS,EAAE,IAA2B,EAAE;QAChE,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,EACxD,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACrD,CAAC;IACD,WAAW,CAAC,CAAS,EAAE,CAAS,EAAE,CAAS;QACzC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC/D,CAAC;CACF"}

package/dist/internal/cubbies.d.ts

@@ -0,0 +1,15 @@
+import type { VaultHttpClient } from "../core/http.js";
+import type { CubbyQueryResponse, CubbyExecResponse } from "../core/types.js";
+export declare class Cubbies {
+    private readonly http;
+    constructor(http: VaultHttpClient);
+    query<Row = unknown[]>(v: string, s: string, alias: string, sql: string, params?: unknown[]): Promise<CubbyQueryResponse<Row>>;
+    /**
+     * Write path. Dual-auth route — wallet owner can call it, but the spec
+     * positions writes as agent-only. Surfaced for SDK parity with the prior
+     * client-sdk PR; prefer agent-side cubby APIs from `@cef-ai/agent-sdk`
+     * for normal write flows.
+     */
+    exec(v: string, s: string, alias: string, sql: string, params?: unknown[]): Promise<CubbyExecResponse>;
+}
+//# sourceMappingURL=cubbies.d.ts.map

package/dist/internal/cubbies.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cubbies.d.ts","sourceRoot":"","sources":["../../src/internal/cubbies.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAEvD,OAAO,KAAK,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAE9E,qBAAa,OAAO;IACN,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,eAAe;IAElD,KAAK,CAAC,GAAG,GAAG,OAAO,EAAE,EACnB,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,GAAE,OAAO,EAAO,GACvE,OAAO,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC;IAInC;;;;;OAKG;IACH,IAAI,CACF,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,GAAE,OAAO,EAAO,GACvE,OAAO,CAAC,iBAAiB,CAAC;CAG9B"}

package/dist/internal/cubbies.js

@@ -0,0 +1,20 @@
+import { endpoints } from "../core/endpoints.js";
+export class Cubbies {
+    http;
+    constructor(http) {
+        this.http = http;
+    }
+    query(v, s, alias, sql, params = []) {
+        return this.http.send("POST", endpoints.cubbyQuery(v, s, alias), { body: { sql, params } });
+    }
+    /**
+     * Write path. Dual-auth route — wallet owner can call it, but the spec
+     * positions writes as agent-only. Surfaced for SDK parity with the prior
+     * client-sdk PR; prefer agent-side cubby APIs from `@cef-ai/agent-sdk`
+     * for normal write flows.
+     */
+    exec(v, s, alias, sql, params = []) {
+        return this.http.send("POST", endpoints.cubbyExec(v, s, alias), { body: { sql, params } });
+    }
+}
+//# sourceMappingURL=cubbies.js.map

package/dist/internal/cubbies.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cubbies.js","sourceRoot":"","sources":["../../src/internal/cubbies.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAGjD,MAAM,OAAO,OAAO;IACW;IAA7B,YAA6B,IAAqB;QAArB,SAAI,GAAJ,IAAI,CAAiB;IAAG,CAAC;IAEtD,KAAK,CACH,CAAS,EAAE,CAAS,EAAE,KAAa,EAAE,GAAW,EAAE,SAAoB,EAAE;QAExE,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IAC9F,CAAC;IAED;;;;;OAKG;IACH,IAAI,CACF,CAAS,EAAE,CAAS,EAAE,KAAa,EAAE,GAAW,EAAE,SAAoB,EAAE;QAExE,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IAC7F,CAAC;CACF"}

package/dist/internal/events.d.ts

@@ -0,0 +1,8 @@
+import type { VaultHttpClient } from "../core/http.js";
+import type { EventInput, PublishResult } from "../core/types.js";
+export declare class Events {
+    private readonly http;
+    constructor(http: VaultHttpClient);
+    publish(vaultId: string, scope: string, input: EventInput | EventInput[]): Promise<PublishResult>;
+}
+//# sourceMappingURL=events.d.ts.map

package/dist/internal/events.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"events.d.ts","sourceRoot":"","sources":["../../src/internal/events.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAEvD,OAAO,KAAK,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAElE,qBAAa,MAAM;IACL,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,eAAe;IAClD,OAAO,CACL,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,UAAU,EAAE,GAC/D,OAAO,CAAC,aAAa,CAAC;CAS1B"}

package/dist/internal/events.js

@@ -0,0 +1,17 @@
+import { endpoints } from "../core/endpoints.js";
+export class Events {
+    http;
+    constructor(http) {
+        this.http = http;
+    }
+    publish(vaultId, scope, input) {
+        const list = Array.isArray(input) ? input : [input];
+        const events = list.map((e) => ({
+            role: "user",
+            ...e,
+            timestamp: e.timestamp ?? new Date().toISOString(),
+        }));
+        return this.http.send("POST", endpoints.scopeEvents(vaultId, scope), { body: { events } });
+    }
+}
+//# sourceMappingURL=events.js.map

package/dist/internal/events.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"events.js","sourceRoot":"","sources":["../../src/internal/events.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAGjD,MAAM,OAAO,MAAM;IACY;IAA7B,YAA6B,IAAqB;QAArB,SAAI,GAAJ,IAAI,CAAiB;IAAG,CAAC;IACtD,OAAO,CACL,OAAe,EAAE,KAAa,EAAE,KAAgC;QAEhE,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACpD,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC9B,IAAI,EAAE,MAAM;YACZ,GAAG,CAAC;YACJ,SAAS,EAAE,CAAC,CAAC,SAAS,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACnD,CAAC,CAAC,CAAC;QACJ,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,WAAW,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IAC7F,CAAC;CACF"}