@cef-ai/vault-sdk 4.4.0 → 5.2.0

package/dist/internal/cubbies.d.ts

@@ -11,5 +11,38 @@ export declare class Cubbies {
      * for normal write flows.
      */
     exec(v: string, s: string, a: string, alias: string, sql: string, params?: unknown[]): Promise<CubbyExecResponse>;
+    /**
+     * Read a cubby the AGENT SERVICE owns, rather than one of its agents.
+     *
+     * One database per service, so what a coordinator writes its specialists can
+     * read without a copy. `as` is the service's public key — the half of an
+     * agent id before the colon.
+     */
+    serviceQuery<Row = unknown[]>(v: string, as: string, alias: string, sql: string, params?: unknown[]): Promise<CubbyQueryResponse<Row>>;
+    /** The write half of {@link serviceQuery}; needs a member-level grant. */
+    serviceExec(v: string, as: string, alias: string, sql: string, params?: unknown[]): Promise<CubbyExecResponse>;
+    /**
+     * Every cubby this service holds in (vault, scope).
+     *
+     * There is nothing else to ask: a service cubby has no declaration — an alias
+     * passing the shape rule is legal and the first write creates the file — so
+     * the registry IS the list.
+     */
+    serviceList(v: string, as: string): Promise<ServiceCubby[]>;
+    /** Create one with its schema. Member level, like exec. */
+    serviceProvision(v: string, as: string, alias: string, migrations: CubbyMigration[]): Promise<void>;
+    /** Remove one, and its file. Member level, like exec. */
+    serviceDelete(v: string, as: string, alias: string): Promise<void>;
+}
+/** One migration, as the platform applies them. */
+export interface CubbyMigration {
+    version: number;
+    up: string;
+}
+/** What the registry knows about one cubby of a service. */
+export interface ServiceCubby {
+    alias: string;
+    sizeBytes: number;
+    schemaVersion: number;
 }
 //# sourceMappingURL=cubbies.d.ts.map

package/dist/internal/cubbies.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cubbies.d.ts","sourceRoot":"","sources":["../../src/internal/cubbies.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAEvD,OAAO,KAAK,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAE9E,qBAAa,OAAO;IACN,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,eAAe;IAElD,KAAK,CAAC,GAAG,GAAG,OAAO,EAAE,EACnB,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,GAAE,OAAO,EAAO,GAClF,OAAO,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC;IAInC;;;;;OAKG;IACH,IAAI,CACF,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,GAAE,OAAO,EAAO,GAClF,OAAO,CAAC,iBAAiB,CAAC;CAG9B"}
+{"version":3,"file":"cubbies.d.ts","sourceRoot":"","sources":["../../src/internal/cubbies.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAEvD,OAAO,KAAK,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAE9E,qBAAa,OAAO;IACN,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,eAAe;IAElD,KAAK,CAAC,GAAG,GAAG,OAAO,EAAE,EACnB,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,GAAE,OAAO,EAAO,GAClF,OAAO,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC;IAInC;;;;;OAKG;IACH,IAAI,CACF,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,GAAE,OAAO,EAAO,GAClF,OAAO,CAAC,iBAAiB,CAAC;IAI7B;;;;;;OAMG;IACH,YAAY,CAAC,GAAG,GAAG,OAAO,EAAE,EAC1B,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,GAAE,OAAO,EAAO,GACxE,OAAO,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC;IAMnC,0EAA0E;IAC1E,WAAW,CACT,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,GAAE,OAAO,EAAO,GACxE,OAAO,CAAC,iBAAiB,CAAC;IAM7B;;;;;;OAMG;IACG,WAAW,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;IAOjE,2DAA2D;IAC3D,gBAAgB,CACd,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,cAAc,EAAE,GACjE,OAAO,CAAC,IAAI,CAAC;IAMhB,yDAAyD;IACzD,aAAa,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAGnE;AAED,mDAAmD;AACnD,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,4DAA4D;AAC5D,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;CACvB"}

package/dist/internal/cubbies.js

@@ -16,5 +16,44 @@ export class Cubbies {
     exec(v, s, a, alias, sql, params = []) {
         return this.http.send("POST", endpoints.cubbyExec(v, s, a, alias), { body: { sql, params } });
     }
+    /**
+     * Read a cubby the AGENT SERVICE owns, rather than one of its agents.
+     *
+     * One database per service, so what a coordinator writes its specialists can
+     * read without a copy. `as` is the service's public key — the half of an
+     * agent id before the colon.
+     */
+    serviceQuery(v, as, alias, sql, params = []) {
+        return this.http.send("POST", endpoints.serviceCubbyQuery(v, as, alias), {
+            body: { sql, params },
+        });
+    }
+    /** The write half of {@link serviceQuery}; needs a member-level grant. */
+    serviceExec(v, as, alias, sql, params = []) {
+        return this.http.send("POST", endpoints.serviceCubbyExec(v, as, alias), {
+            body: { sql, params },
+        });
+    }
+    /**
+     * Every cubby this service holds in (vault, scope).
+     *
+     * There is nothing else to ask: a service cubby has no declaration — an alias
+     * passing the shape rule is legal and the first write creates the file — so
+     * the registry IS the list.
+     */
+    async serviceList(v, as) {
+        const body = await this.http.send("GET", endpoints.serviceCubbies(v, as));
+        return body?.data ?? [];
+    }
+    /** Create one with its schema. Member level, like exec. */
+    serviceProvision(v, as, alias, migrations) {
+        return this.http.send("POST", endpoints.serviceCubbyProvision(v, as, alias), {
+            body: { migrations },
+        });
+    }
+    /** Remove one, and its file. Member level, like exec. */
+    serviceDelete(v, as, alias) {
+        return this.http.send("DELETE", endpoints.serviceCubby(v, as, alias));
+    }
 }
 //# sourceMappingURL=cubbies.js.map

package/dist/internal/cubbies.js.map

@@ -1 +1 @@
-{"version":3,"file":"cubbies.js","sourceRoot":"","sources":["../../src/internal/cubbies.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAGjD,MAAM,OAAO,OAAO;IACW;IAA7B,YAA6B,IAAqB;QAArB,SAAI,GAAJ,IAAI,CAAiB;IAAG,CAAC;IAEtD,KAAK,CACH,CAAS,EAAE,CAAS,EAAE,CAAS,EAAE,KAAa,EAAE,GAAW,EAAE,SAAoB,EAAE;QAEnF,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IACjG,CAAC;IAED;;;;;OAKG;IACH,IAAI,CACF,CAAS,EAAE,CAAS,EAAE,CAAS,EAAE,KAAa,EAAE,GAAW,EAAE,SAAoB,EAAE;QAEnF,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IAChG,CAAC;CACF"}
+{"version":3,"file":"cubbies.js","sourceRoot":"","sources":["../../src/internal/cubbies.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAGjD,MAAM,OAAO,OAAO;IACW;IAA7B,YAA6B,IAAqB;QAArB,SAAI,GAAJ,IAAI,CAAiB;IAAG,CAAC;IAEtD,KAAK,CACH,CAAS,EAAE,CAAS,EAAE,CAAS,EAAE,KAAa,EAAE,GAAW,EAAE,SAAoB,EAAE;QAEnF,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IACjG,CAAC;IAED;;;;;OAKG;IACH,IAAI,CACF,CAAS,EAAE,CAAS,EAAE,CAAS,EAAE,KAAa,EAAE,GAAW,EAAE,SAAoB,EAAE;QAEnF,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IAChG,CAAC;IAED;;;;;;OAMG;IACH,YAAY,CACV,CAAS,EAAE,EAAU,EAAE,KAAa,EAAE,GAAW,EAAE,SAAoB,EAAE;QAEzE,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,iBAAiB,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE;YACvE,IAAI,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE;SACtB,CAAC,CAAC;IACL,CAAC;IAED,0EAA0E;IAC1E,WAAW,CACT,CAAS,EAAE,EAAU,EAAE,KAAa,EAAE,GAAW,EAAE,SAAoB,EAAE;QAEzE,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,gBAAgB,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE;YACtE,IAAI,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE;SACtB,CAAC,CAAC;IACL,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,WAAW,CAAC,CAAS,EAAE,EAAU;QACrC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAC/B,KAAK,EAAE,SAAS,CAAC,cAAc,CAAC,CAAC,EAAE,EAAE,CAAC,CACvC,CAAC;QACF,OAAO,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC;IAC1B,CAAC;IAED,2DAA2D;IAC3D,gBAAgB,CACd,CAAS,EAAE,EAAU,EAAE,KAAa,EAAE,UAA4B;QAElE,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,qBAAqB,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE;YAC3E,IAAI,EAAE,EAAE,UAAU,EAAE;SACrB,CAAC,CAAC;IACL,CAAC;IAED,yDAAyD;IACzD,aAAa,CAAC,CAAS,EAAE,EAAU,EAAE,KAAa;QAChD,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,YAAY,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC;IACxE,CAAC;CACF"}

package/dist/internal/memory.d.ts

@@ -12,12 +12,42 @@ import type { VaultHttpClient } from "../core/http.js";
 export interface MemoryRows {
     columns: string[];
     rows: unknown[][];
+    /**
+     * The paged read tools (`record_search`, `record_list`) mint an opaque
+     * keyset cursor when a full page was returned and more rows exist; pass it
+     * back as the matching tool's `cursor` request param to fetch the next
+     * page. ABSENT on the last page (and on every unpaged tool) — the server
+     * marks it `omitempty`, so its absence means "no more rows". The one
+     * additive sibling key on an otherwise untouched `{ columns, rows }`
+     * envelope: the cursor rides beside the columns, never inside them.
+     */
+    cursor?: string;
 }
 /**
  * The memory bank's READ surface for browser clients (the memory-route UI).
  * One route, five tools: `POST /api/v1/vaults/:vaultId/memory/:tool` with
- * the Go json-tag body keys (`match`, `limit`, `id`, `type`, `privacy` —
- * all `omitempty`, so undefined fields are omitted from the body entirely).
+ * the Go json-tag body keys (`match`, `limit`, `id`, `type`, `privacy`,
+ * `scope`, `cursor`, `edge_type`, `direction`, `domain` — all `omitempty`, so
+ * undefined fields are omitted from the body entirely).
+ *
+ * `scope` narrows within the caller's grants (an ungranted scope yields an
+ * empty result, never an error); `cursor` pages the read tools (see
+ * `MemoryRows.cursor`). `domain` (on `search`, `list`, `countByType` — the
+ * three reads the server applies it to) narrows by the record's SUBJECT tag:
+ * `domain` is the record's subject tag (e.g. sales), NOT the vault scope —
+ * narrowing by it is not an access control; the UI labels it Topic. Two
+ * axes: `scope` is access, `domain` is subject.
+ *
+ * `record_neighbours` filters by `edge_type` and `direction`
+ * (`in`|`out`|`both`, relative to the anchor record — `out` is
+ * anchor → far; absent means `both`). The SDK sends the direction as-given:
+ * enum validation is the server's job, the TS type is the only client-side
+ * constraint.
+ *
+ * `record_search`'s projection is seven positional columns — `id, type,
+ * title, scope, privacy, rank, snippet` (the FTS5 `snippet` is appended
+ * after the six historical columns, aliased because the columns array goes
+ * out verbatim and the UI reads it by name).
  *
  * Writes are agent-side (`ctx.memory` in `@cef-ai/agent-sdk`) per the spec —
  * this class exposes no write methods on purpose.
@@ -26,23 +56,67 @@ export declare class Memory {
     private readonly http;
     private readonly vaultId;
     constructor(http: VaultHttpClient, vaultId: string);
-    /** Full-text search, optionally narrowed to a type and/or privacy class. */
+    /** Full-text search, optionally narrowed to a type, privacy class, and/or scope. */
     search(match: string, opts?: {
         limit?: number;
         type?: string;
         privacy?: string;
+        scope?: string;
+        cursor?: string;
+        /**
+         * The record's subject tag (e.g. `sales`, `hiring`, `engineering`) —
+         * wire `domain`, sent only when set. Narrows WITHIN the caller's
+         * grants; an absent domain adds no predicate.
+         *
+         * `domain` is the record's subject tag (e.g. sales), NOT the vault
+         * scope — narrowing by it is not an access control; the UI labels it
+         * Topic. (The product UI's "Domain" is the vault SCOPE, the access
+         * axis — that is `scope` here.)
+         */
+        domain?: string;
     }): Promise<MemoryRows>;
     /** Browse records newest-first, gated by the caller's grants and ceiling. */
     list(type?: string, opts?: {
         limit?: number;
+        scope?: string;
+        cursor?: string;
+        /**
+         * The record's subject tag (e.g. `sales`, `hiring`, `engineering`) —
+         * wire `domain`, sent only when set. Narrows WITHIN the caller's
+         * grants; an absent domain adds no predicate.
+         *
+         * `domain` is the record's subject tag (e.g. sales), NOT the vault
+         * scope — narrowing by it is not an access control; the UI labels it
+         * Topic. (The product UI's "Domain" is the vault SCOPE, the access
+         * axis — that is `scope` here.)
+         */
+        domain?: string;
     }): Promise<MemoryRows>;
     /** Fetch a single record by id. */
     get(id: string): Promise<MemoryRows>;
     /** Records connected to the given one by a relation. */
     neighbours(id: string, opts?: {
         limit?: number;
+        edgeType?: string;
+        direction?: "in" | "out" | "both";
+    }): Promise<MemoryRows>;
+    /**
+     * Row counts grouped by record type, optionally narrowed to one scope
+     * and/or one subject `domain`.
+     */
+    countByType(opts?: {
+        scope?: string;
+        /**
+         * The record's subject tag (e.g. `sales`, `hiring`, `engineering`) —
+         * wire `domain`, sent only when set. Narrows WITHIN the caller's
+         * grants; an absent domain adds no predicate.
+         *
+         * `domain` is the record's subject tag (e.g. sales), NOT the vault
+         * scope — narrowing by it is not an access control; the UI labels it
+         * Topic. (The product UI's "Domain" is the vault SCOPE, the access
+         * axis — that is `scope` here.)
+         */
+        domain?: string;
     }): Promise<MemoryRows>;
-    /** Row counts grouped by record type. */
-    countByType(): Promise<MemoryRows>;
 }
 //# sourceMappingURL=memory.d.ts.map

package/dist/internal/memory.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"memory.d.ts","sourceRoot":"","sources":["../../src/internal/memory.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAGvD;;;;;;;;;GASG;AACH,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC;CACnB;AAED;;;;;;;;GAQG;AACH,qBAAa,MAAM;IAEf,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,OAAO;gBADP,IAAI,EAAE,eAAe,EACrB,OAAO,EAAE,MAAM;IAGlC,4EAA4E;IAC5E,MAAM,CACJ,KAAK,EAAE,MAAM,EACb,IAAI,GAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAO,GAC7D,OAAO,CAAC,UAAU,CAAC;IAMtB,6EAA6E;IAC7E,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,GAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,OAAO,CAAC,UAAU,CAAC;IAMvE,mCAAmC;IACnC,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAMpC,wDAAwD;IACxD,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,GAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,OAAO,CAAC,UAAU,CAAC;IAQ1E,yCAAyC;IACzC,WAAW,IAAI,OAAO,CAAC,UAAU,CAAC;CAOnC"}
+{"version":3,"file":"memory.d.ts","sourceRoot":"","sources":["../../src/internal/memory.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAGvD;;;;;;;;;GASG;AACH,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC;IAClB;;;;;;;;OAQG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,qBAAa,MAAM;IAEf,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,OAAO;gBADP,IAAI,EAAE,eAAe,EACrB,OAAO,EAAE,MAAM;IAGlC,oFAAoF;IACpF,MAAM,CACJ,KAAK,EAAE,MAAM,EACb,IAAI,GAAE;QACJ,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB;;;;;;;;;WASG;QACH,MAAM,CAAC,EAAE,MAAM,CAAC;KACZ,GACL,OAAO,CAAC,UAAU,CAAC;IActB,6EAA6E;IAC7E,IAAI,CACF,IAAI,CAAC,EAAE,MAAM,EACb,IAAI,GAAE;QACJ,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB;;;;;;;;;WASG;QACH,MAAM,CAAC,EAAE,MAAM,CAAC;KACZ,GACL,OAAO,CAAC,UAAU,CAAC;IAYtB,mCAAmC;IACnC,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAMpC,wDAAwD;IACxD,UAAU,CACR,EAAE,EAAE,MAAM,EACV,IAAI,GAAE;QACJ,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,SAAS,CAAC,EAAE,IAAI,GAAG,KAAK,GAAG,MAAM,CAAC;KAC9B,GACL,OAAO,CAAC,UAAU,CAAC;IAetB;;;OAGG;IACH,WAAW,CACT,IAAI,GAAE;QACJ,KAAK,CAAC,EAAE,MAAM,CAAC;QACf;;;;;;;;;WASG;QACH,MAAM,CAAC,EAAE,MAAM,CAAC;KACZ,GACL,OAAO,CAAC,UAAU,CAAC;CAOvB"}

package/dist/internal/memory.js

@@ -2,8 +2,28 @@ import { endpoints } from "../core/endpoints.js";
 /**
  * The memory bank's READ surface for browser clients (the memory-route UI).
  * One route, five tools: `POST /api/v1/vaults/:vaultId/memory/:tool` with
- * the Go json-tag body keys (`match`, `limit`, `id`, `type`, `privacy` —
- * all `omitempty`, so undefined fields are omitted from the body entirely).
+ * the Go json-tag body keys (`match`, `limit`, `id`, `type`, `privacy`,
+ * `scope`, `cursor`, `edge_type`, `direction`, `domain` — all `omitempty`, so
+ * undefined fields are omitted from the body entirely).
+ *
+ * `scope` narrows within the caller's grants (an ungranted scope yields an
+ * empty result, never an error); `cursor` pages the read tools (see
+ * `MemoryRows.cursor`). `domain` (on `search`, `list`, `countByType` — the
+ * three reads the server applies it to) narrows by the record's SUBJECT tag:
+ * `domain` is the record's subject tag (e.g. sales), NOT the vault scope —
+ * narrowing by it is not an access control; the UI labels it Topic. Two
+ * axes: `scope` is access, `domain` is subject.
+ *
+ * `record_neighbours` filters by `edge_type` and `direction`
+ * (`in`|`out`|`both`, relative to the anchor record — `out` is
+ * anchor → far; absent means `both`). The SDK sends the direction as-given:
+ * enum validation is the server's job, the TS type is the only client-side
+ * constraint.
+ *
+ * `record_search`'s projection is seven positional columns — `id, type,
+ * title, scope, privacy, rank, snippet` (the FTS5 `snippet` is appended
+ * after the six historical columns, aliased because the columns array goes
+ * out verbatim and the UI reads it by name).
  *
  * Writes are agent-side (`ctx.memory` in `@cef-ai/agent-sdk`) per the spec —
  * this class exposes no write methods on purpose.
@@ -15,16 +35,30 @@ export class Memory {
         this.http = http;
         this.vaultId = vaultId;
     }
-    /** Full-text search, optionally narrowed to a type and/or privacy class. */
+    /** Full-text search, optionally narrowed to a type, privacy class, and/or scope. */
     search(match, opts = {}) {
         return this.http.send("POST", endpoints.memoryTool(this.vaultId, "record_search"), {
-            body: { match, limit: opts.limit, type: opts.type, privacy: opts.privacy },
+            body: {
+                match,
+                limit: opts.limit,
+                type: opts.type,
+                privacy: opts.privacy,
+                scope: opts.scope,
+                cursor: opts.cursor,
+                domain: opts.domain,
+            },
         });
     }
     /** Browse records newest-first, gated by the caller's grants and ceiling. */
     list(type, opts = {}) {
         return this.http.send("POST", endpoints.memoryTool(this.vaultId, "record_list"), {
-            body: { type, limit: opts.limit },
+            body: {
+                type,
+                limit: opts.limit,
+                scope: opts.scope,
+                cursor: opts.cursor,
+                domain: opts.domain,
+            },
         });
     }
     /** Fetch a single record by id. */
@@ -35,11 +69,21 @@ export class Memory {
     }
     /** Records connected to the given one by a relation. */
     neighbours(id, opts = {}) {
-        return this.http.send("POST", endpoints.memoryTool(this.vaultId, "record_neighbours"), { body: { id, limit: opts.limit } });
+        return this.http.send("POST", endpoints.memoryTool(this.vaultId, "record_neighbours"), {
+            body: {
+                id,
+                limit: opts.limit,
+                edge_type: opts.edgeType,
+                direction: opts.direction,
+            },
+        });
     }
-    /** Row counts grouped by record type. */
-    countByType() {
-        return this.http.send("POST", endpoints.memoryTool(this.vaultId, "record_count_by_type"), { body: {} });
+    /**
+     * Row counts grouped by record type, optionally narrowed to one scope
+     * and/or one subject `domain`.
+     */
+    countByType(opts = {}) {
+        return this.http.send("POST", endpoints.memoryTool(this.vaultId, "record_count_by_type"), { body: { scope: opts.scope, domain: opts.domain } });
     }
 }
 //# sourceMappingURL=memory.js.map

package/dist/internal/memory.js.map

@@ -1 +1 @@
-{"version":3,"file":"memory.js","sourceRoot":"","sources":["../../src/internal/memory.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAiBjD;;;;;;;;GAQG;AACH,MAAM,OAAO,MAAM;IAEE;IACA;IAFnB,YACmB,IAAqB,EACrB,OAAe;QADf,SAAI,GAAJ,IAAI,CAAiB;QACrB,YAAO,GAAP,OAAO,CAAQ;IAC/B,CAAC;IAEJ,4EAA4E;IAC5E,MAAM,CACJ,KAAa,EACb,OAA4D,EAAE;QAE9D,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,EAAE;YACjF,IAAI,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE;SAC3E,CAAC,CAAC;IACL,CAAC;IAED,6EAA6E;IAC7E,IAAI,CAAC,IAAa,EAAE,OAA2B,EAAE;QAC/C,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,EAAE;YAC/E,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE;SAClC,CAAC,CAAC;IACL,CAAC;IAED,mCAAmC;IACnC,GAAG,CAAC,EAAU;QACZ,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,EAAE;YAC9E,IAAI,EAAE,EAAE,EAAE,EAAE;SACb,CAAC,CAAC;IACL,CAAC;IAED,wDAAwD;IACxD,UAAU,CAAC,EAAU,EAAE,OAA2B,EAAE;QAClD,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CACnB,MAAM,EACN,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,mBAAmB,CAAC,EACvD,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,EAAE,CACpC,CAAC;IACJ,CAAC;IAED,yCAAyC;IACzC,WAAW;QACT,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CACnB,MAAM,EACN,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,sBAAsB,CAAC,EAC1D,EAAE,IAAI,EAAE,EAAE,EAAE,CACb,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"memory.js","sourceRoot":"","sources":["../../src/internal/memory.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AA2BjD;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,OAAO,MAAM;IAEE;IACA;IAFnB,YACmB,IAAqB,EACrB,OAAe;QADf,SAAI,GAAJ,IAAI,CAAiB;QACrB,YAAO,GAAP,OAAO,CAAQ;IAC/B,CAAC;IAEJ,oFAAoF;IACpF,MAAM,CACJ,KAAa,EACb,OAiBI,EAAE;QAEN,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,EAAE;YACjF,IAAI,EAAE;gBACJ,KAAK;gBACL,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,MAAM,EAAE,IAAI,CAAC,MAAM;aACpB;SACF,CAAC,CAAC;IACL,CAAC;IAED,6EAA6E;IAC7E,IAAI,CACF,IAAa,EACb,OAeI,EAAE;QAEN,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,EAAE;YAC/E,IAAI,EAAE;gBACJ,IAAI;gBACJ,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,MAAM,EAAE,IAAI,CAAC,MAAM;aACpB;SACF,CAAC,CAAC;IACL,CAAC;IAED,mCAAmC;IACnC,GAAG,CAAC,EAAU;QACZ,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,EAAE;YAC9E,IAAI,EAAE,EAAE,EAAE,EAAE;SACb,CAAC,CAAC;IACL,CAAC;IAED,wDAAwD;IACxD,UAAU,CACR,EAAU,EACV,OAII,EAAE;QAEN,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CACnB,MAAM,EACN,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,mBAAmB,CAAC,EACvD;YACE,IAAI,EAAE;gBACJ,EAAE;gBACF,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,SAAS,EAAE,IAAI,CAAC,QAAQ;gBACxB,SAAS,EAAE,IAAI,CAAC,SAAS;aAC1B;SACF,CACF,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,WAAW,CACT,OAaI,EAAE;QAEN,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CACnB,MAAM,EACN,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,sBAAsB,CAAC,EAC1D,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,CACrD,CAAC;IACJ,CAAC;CACF"}

package/dist/internal/vaults.d.ts

@@ -6,15 +6,19 @@ import type { VaultRecord } from "../core/types.js";
  * `s3gateway/client.go` pass-through contract), so gateway-visible fields
  * like `label` must be inside this body before `WalletAuthProvider` signs it
  * — vault-api cannot inject them afterwards without breaking the signature.
+ *
+ * `delegation_token` is OPTIONAL: absent (the default) means a TOKENLESS
+ * claim, which vault-api routes through the proxy saga — the on-chain
+ * NonTransfer grant `vault.ensure()` submitted beforehand is the
+ * authorization. Present means the legacy token-bearing claim. The key is
+ * omitted from the wire body entirely when absent; a present-but-empty
+ * value would be a third shape neither path accepts.
  */
 export interface ClaimVaultRequest {
     name?: string;
-    delegation_token: string;
+    delegation_token?: string;
     label?: string;
 }
-export interface RotateCredentialRequest {
-    delegation_token: string;
-}
 /**
  * Body of `PATCH /api/v1/vaults/:vaultId` — the user-editable vault fields.
  *
@@ -44,6 +48,5 @@ export declare class Vaults {
      * patch would skip.
      */
     patch(vaultId: string, req: PatchVaultRequest): Promise<VaultRecord>;
-    rotateCredentials(vaultId: string, req: RotateCredentialRequest): Promise<VaultRecord>;
 }
 //# sourceMappingURL=vaults.d.ts.map

package/dist/internal/vaults.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"vaults.d.ts","sourceRoot":"","sources":["../../src/internal/vaults.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAEvD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAEpD;;;;;;GAMG;AACH,MAAM,WAAW,iBAAiB;IAAG,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,gBAAgB,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE;AAC9F,MAAM,WAAW,uBAAuB;IAAG,gBAAgB,EAAE,MAAM,CAAA;CAAE;AAErE;;;;;;;;;;GAUG;AACH,MAAM,WAAW,iBAAiB;IAAG,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE;AAE9E,qBAAa,MAAM;IACL,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,eAAe;IAElD,KAAK,CAAC,GAAG,EAAE,iBAAiB,GAAG,OAAO,CAAC,WAAW,CAAC;IAGnD,OAAO,IAAI,OAAO,CAAC,WAAW,CAAC;IAG/B,wEAAwE;IACxE,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;IAG3C;;;;;OAKG;IACH,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,iBAAiB,GAAG,OAAO,CAAC,WAAW,CAAC;IAUpE,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,uBAAuB,GAAG,OAAO,CAAC,WAAW,CAAC;CAKvF"}
+{"version":3,"file":"vaults.d.ts","sourceRoot":"","sources":["../../src/internal/vaults.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAEvD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAEpD;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,iBAAiB;IAAG,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE;AAE/F;;;;;;;;;;GAUG;AACH,MAAM,WAAW,iBAAiB;IAAG,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE;AAE9E,qBAAa,MAAM;IACL,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,eAAe;IAElD,KAAK,CAAC,GAAG,EAAE,iBAAiB,GAAG,OAAO,CAAC,WAAW,CAAC;IAGnD,OAAO,IAAI,OAAO,CAAC,WAAW,CAAC;IAG/B,wEAAwE;IACxE,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;IAG3C;;;;;OAKG;IACH,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,iBAAiB,GAAG,OAAO,CAAC,WAAW,CAAC;CAOrE"}

package/dist/internal/vaults.js

@@ -25,15 +25,5 @@ export class Vaults {
             body: req,
         });
     }
-    // NOTE (multi-credential gateway): the gateway's PUT /auth/credentials
-    // never returns a secret, so this rotation path cannot hand back fresh S3
-    // credentials against the real gateway. vault-api is being reworked to
-    // register-new + revoke-old rotation semantics in a parallel PR; this
-    // method's contract will change with it. Do not build on it until then.
-    rotateCredentials(vaultId, req) {
-        return this.http.send("PUT", endpoints.vaultCredentials(vaultId), {
-            body: req,
-        });
-    }
 }
 //# sourceMappingURL=vaults.js.map

package/dist/internal/vaults.js.map

@@ -1 +1 @@
-{"version":3,"file":"vaults.js","sourceRoot":"","sources":["../../src/internal/vaults.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AA0BjD,MAAM,OAAO,MAAM;IACY;IAA7B,YAA6B,IAAqB;QAArB,SAAI,GAAJ,IAAI,CAAiB;IAAG,CAAC;IAEtD,KAAK,CAAC,GAAsB;QAC1B,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,GAAyC,EAAE,CAAC,CAAC;IACzG,CAAC;IACD,OAAO;QACL,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;IACnD,CAAC;IACD,wEAAwE;IACxE,IAAI,CAAC,OAAe;QAClB,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;IACzD,CAAC;IACD;;;;;OAKG;IACH,KAAK,CAAC,OAAe,EAAE,GAAsB;QAC3C,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE;YACvD,IAAI,EAAE,GAAyC;SAChD,CAAC,CAAC;IACL,CAAC;IACD,uEAAuE;IACvE,0EAA0E;IAC1E,uEAAuE;IACvE,sEAAsE;IACtE,wEAAwE;IACxE,iBAAiB,CAAC,OAAe,EAAE,GAA4B;QAC7D,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,gBAAgB,CAAC,OAAO,CAAC,EAAE;YAChE,IAAI,EAAE,GAAyC;SAChD,CAAC,CAAC;IACL,CAAC;CACF"}
+{"version":3,"file":"vaults.js","sourceRoot":"","sources":["../../src/internal/vaults.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAgCjD,MAAM,OAAO,MAAM;IACY;IAA7B,YAA6B,IAAqB;QAArB,SAAI,GAAJ,IAAI,CAAiB;IAAG,CAAC;IAEtD,KAAK,CAAC,GAAsB;QAC1B,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,GAAyC,EAAE,CAAC,CAAC;IACzG,CAAC;IACD,OAAO;QACL,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;IACnD,CAAC;IACD,wEAAwE;IACxE,IAAI,CAAC,OAAe;QAClB,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;IACzD,CAAC;IACD;;;;;OAKG;IACH,KAAK,CAAC,OAAe,EAAE,GAAsB;QAC3C,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE;YACvD,IAAI,EAAE,GAAyC;SAChD,CAAC,CAAC;IACL,CAAC;CAGF"}

package/dist/internal-exports.d.ts

@@ -7,6 +7,7 @@ export { Cubbies } from "./internal/cubbies.js";
 export { Health } from "./internal/health.js";
 export { Marketplace } from "./internal/marketplace.js";
 export { Memberships } from "./internal/memberships.js";
+export { AgentConnectionAccess, Connections, listConnectors } from "./internal/connectors.js";
 export type { PutMemberOptions, PutScopesOptions } from "./internal/memberships.js";
 export { VaultHttpClient } from "./core/http.js";
 export { endpoints } from "./core/endpoints.js";

package/dist/internal-exports.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"internal-exports.d.ts","sourceRoot":"","sources":["../src/internal-exports.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAChD,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AACxD,YAAY,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAEpF,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC"}
+{"version":3,"file":"internal-exports.d.ts","sourceRoot":"","sources":["../src/internal-exports.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAChD,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,EAAE,qBAAqB,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC9F,YAAY,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAEpF,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC"}

package/dist/internal-exports.js

@@ -9,6 +9,7 @@ export { Cubbies } from "./internal/cubbies.js";
 export { Health } from "./internal/health.js";
 export { Marketplace } from "./internal/marketplace.js";
 export { Memberships } from "./internal/memberships.js";
+export { AgentConnectionAccess, Connections, listConnectors } from "./internal/connectors.js";
 export { VaultHttpClient } from "./core/http.js";
 export { endpoints } from "./core/endpoints.js";
 //# sourceMappingURL=internal-exports.js.map

package/dist/internal-exports.js.map

@@ -1 +1 @@
-{"version":3,"file":"internal-exports.js","sourceRoot":"","sources":["../src/internal-exports.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,yEAAyE;AACzE,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAChD,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAGxD,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC"}
+{"version":3,"file":"internal-exports.js","sourceRoot":"","sources":["../src/internal-exports.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,yEAAyE;AACzE,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAChD,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,EAAE,qBAAqB,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAG9F,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cef-ai/vault-sdk",
-  "version": "4.4.0",
+  "version": "5.2.0",
   "type": "module",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
@@ -25,9 +25,9 @@
     "@polkadot/keyring": "^14.0.3",
     "@polkadot/util": "^14.0.3",
     "@polkadot/util-crypto": "^14.0.3",
-    "@cef-ai/account": "1.3.1",
     "@cef-ai/signer": "1.0.0",
-    "@cef-ai/transport": "1.1.0"
+    "@cef-ai/transport": "1.1.0",
+    "@cef-ai/account": "2.0.0"
   },
   "devDependencies": {
     "@types/node": "^20.11.0",

package/dist/internal/gateway-info.d.ts

@@ -1,16 +0,0 @@
-export interface GatewayInfo {
-    /** ed25519 pubkey, `0x`-prefixed hex when the gateway returns it that way. */
-    pubkey: string;
-    /** Optional cluster id when the gateway exposes it. */
-    clusterId?: string;
-    /** Optional region label when the gateway exposes it. */
-    region?: string;
-}
-/**
- * Fetch the gateway's `/auth/info`. Throws on non-OK responses, missing
- * pubkey, or invalid JSON. No caching here — the SDK caches one level
- * up (`VaultSDK.cachedGatewayPubkey`) so it can be invalidated cleanly
- * when needed.
- */
-export declare function getGatewayInfo(authInfoUrl: string, fetchFn?: typeof fetch): Promise<GatewayInfo>;
-//# sourceMappingURL=gateway-info.d.ts.map

package/dist/internal/gateway-info.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"gateway-info.d.ts","sourceRoot":"","sources":["../../src/internal/gateway-info.ts"],"names":[],"mappings":"AASA,MAAM,WAAW,WAAW;IAC1B,8EAA8E;IAC9E,MAAM,EAAE,MAAM,CAAC;IACf,uDAAuD;IACvD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,yDAAyD;IACzD,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAUD;;;;;GAKG;AACH,wBAAsB,cAAc,CAClC,WAAW,EAAE,MAAM,EACnB,OAAO,GAAE,OAAO,KAAa,GAC5B,OAAO,CAAC,WAAW,CAAC,CAoBtB"}

package/dist/internal/gateway-info.js

@@ -1,34 +0,0 @@
-// src/internal/gateway-info.ts
-//
-// Single source of truth for the DDC S3 gateway's `/auth/info` payload —
-// the gateway's ed25519 pubkey, plus optional cluster/region metadata.
-// The pubkey is needed in two places:
-//   - building a delegation token's `subject` (delegation-token.ts)
-//   - calling `proxy.addProxy(<gw>, NonTransfer, 0)` (auto-add-proxy.ts)
-// so it makes sense to fetch it from one helper.
-/**
- * Fetch the gateway's `/auth/info`. Throws on non-OK responses, missing
- * pubkey, or invalid JSON. No caching here — the SDK caches one level
- * up (`VaultSDK.cachedGatewayPubkey`) so it can be invalidated cleanly
- * when needed.
- */
-export async function getGatewayInfo(authInfoUrl, fetchFn = fetch) {
-    const res = await fetchFn(authInfoUrl, {
-        headers: { Accept: "application/json" },
-    });
-    if (!res.ok) {
-        throw new Error(`Gateway /auth/info ${res.status}: ${await res.text().catch(() => "")}`);
-    }
-    const info = (await res.json());
-    const pubkey = info.gateway_public_key ?? info.pubkey;
-    if (!pubkey) {
-        throw new Error(`Gateway /auth/info response is missing gateway_public_key: ${JSON.stringify(info)}`);
-    }
-    const out = { pubkey };
-    if (info.cluster_id !== undefined)
-        out.clusterId = info.cluster_id;
-    if (info.region !== undefined)
-        out.region = info.region;
-    return out;
-}
-//# sourceMappingURL=gateway-info.js.map

package/dist/internal/gateway-info.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"gateway-info.js","sourceRoot":"","sources":["../../src/internal/gateway-info.ts"],"names":[],"mappings":"AAAA,+BAA+B;AAC/B,EAAE;AACF,yEAAyE;AACzE,uEAAuE;AACvE,sCAAsC;AACtC,oEAAoE;AACpE,yEAAyE;AACzE,iDAAiD;AAmBjD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,WAAmB,EACnB,UAAwB,KAAK;IAE7B,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,WAAW,EAAE;QACrC,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;KACxC,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CACb,sBAAsB,GAAG,CAAC,MAAM,KAAK,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,CACxE,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAgB,CAAC;IAC/C,MAAM,MAAM,GAAG,IAAI,CAAC,kBAAkB,IAAI,IAAI,CAAC,MAAM,CAAC;IACtD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CACb,8DAA8D,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CACrF,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAgB,EAAE,MAAM,EAAE,CAAC;IACpC,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS;QAAE,GAAG,CAAC,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC;IACnE,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;QAAE,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IACxD,OAAO,GAAG,CAAC;AACb,CAAC"}