@crustdev/armordesk 0.0.0-stage → 1.0.1

package/dist/index.js

@@ -0,0 +1,331 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/index.ts
+var index_exports = {};
+__export(index_exports, {
+  ArmorDeskClient: () => ArmorDeskClient,
+  buildMerkleTree: () => buildMerkleTree,
+  canonicalJson: () => canonicalJson,
+  generateClaudeDesktopConfig: () => generateClaudeDesktopConfig,
+  generateCursorConfig: () => generateCursorConfig,
+  generatePlanHash: () => generatePlanHash,
+  hashSha256: () => hashSha256,
+  verifyMerkleRoot: () => verifyMerkleRoot,
+  verifyProof: () => verifyProof
+});
+module.exports = __toCommonJS(index_exports);
+
+// src/crypto.ts
+var import_node_crypto = require("crypto");
+function canonicalJson(data) {
+  if (data === null || data === void 0) {
+    return "null";
+  }
+  if (typeof data === "number" || typeof data === "boolean") {
+    return JSON.stringify(data);
+  }
+  if (typeof data === "string") {
+    return JSON.stringify(data);
+  }
+  if (Array.isArray(data)) {
+    return "[" + data.map((item) => canonicalJson(item)).join(",") + "]";
+  }
+  if (typeof data === "object") {
+    const keys = Object.keys(data).sort();
+    const entries = keys.map((k) => JSON.stringify(k) + ":" + canonicalJson(data[k]));
+    return "{" + entries.join(",") + "}";
+  }
+  return JSON.stringify(data);
+}
+function hashSha256(data) {
+  return (0, import_node_crypto.createHash)("sha256").update(data, "utf8").digest("hex");
+}
+function generatePlanHash(planDict) {
+  const canonical = canonicalJson(planDict);
+  return hashSha256(canonical);
+}
+function buildMerkleTree(leafItems) {
+  const leafHashes = leafItems.length === 0 ? [hashSha256("empty_tree_node")] : leafItems.map((item) => hashSha256(item));
+  let currentLevel = [...leafHashes];
+  while (currentLevel.length > 1) {
+    const nextLevel = [];
+    for (let i = 0; i < currentLevel.length; i += 2) {
+      const left = currentLevel[i];
+      const right = i + 1 < currentLevel.length ? currentLevel[i + 1] : left;
+      const combined = hashSha256(left + right);
+      nextLevel.push(combined);
+    }
+    currentLevel = nextLevel;
+  }
+  return {
+    root: currentLevel[0],
+    leafHashes
+  };
+}
+function verifyMerkleRoot(leafItems, expectedRoot) {
+  const { root } = buildMerkleTree(leafItems);
+  return root.toLowerCase() === expectedRoot.toLowerCase();
+}
+function verifyProof(request) {
+  const computedPlanHash = generatePlanHash(request.allowed_spec);
+  const matchesHash = computedPlanHash.toLowerCase() === request.plan_hash.toLowerCase();
+  const executionItems = Object.entries(request.actual_execution).sort(([a], [b]) => a.localeCompare(b)).map(([k, v]) => `${k}:${canonicalJson(v)}`);
+  const { root: computedMerkleRoot } = buildMerkleTree(executionItems);
+  const matchesMerkle = computedMerkleRoot.toLowerCase() === request.merkle_root.toLowerCase();
+  const valid = matchesHash && matchesMerkle;
+  return {
+    valid,
+    computed_plan_hash: computedPlanHash,
+    computed_merkle_root: computedMerkleRoot,
+    matches_hash: matchesHash,
+    matches_merkle: matchesMerkle,
+    status: valid ? "CRYPTOGRAPHICALLY_VERIFIED" : "VERIFICATION_FAILED",
+    details: valid ? "Plan hash matches allowed specification and Merkle root confirms un-tampered execution proof." : `Discrepancy detected: hashMatch=${matchesHash}, merkleMatch=${matchesMerkle}`
+  };
+}
+
+// src/client.ts
+var ArmorDeskClient = class {
+  baseUrl;
+  apiKey;
+  tenantId;
+  userName;
+  userRole;
+  _fetch;
+  crypto = {
+    canonicalJson,
+    generatePlanHash,
+    buildMerkleTree,
+    verifyMerkleRoot,
+    verifyProof
+  };
+  constructor(options = {}) {
+    this.baseUrl = (options.baseUrl || typeof process !== "undefined" && process.env?.ARMORDESK_URL || "https://armordesk.crusts.dev").replace(/\/$/, "");
+    this.apiKey = options.apiKey || (typeof process !== "undefined" ? process.env?.ARMORIQ_API_KEY || process.env?.ARMORIQ_PRO_API_KEY : void 0);
+    this.tenantId = options.tenantId || "acme-corp";
+    this.userName = options.userName || "Sarah Chen";
+    this.userRole = options.userRole || "manager";
+    this._fetch = options.fetch || globalThis.fetch.bind(globalThis);
+  }
+  async request(endpoint, options = {}) {
+    const url = `${this.baseUrl}${endpoint.startsWith("/") ? endpoint : "/" + endpoint}`;
+    const headers = {
+      "Content-Type": "application/json",
+      "X-ArmorIQ-Tenant": this.tenantId,
+      ...options.headers
+    };
+    if (this.apiKey) {
+      headers["Authorization"] = `Bearer ${this.apiKey}`;
+      headers["X-ArmorIQ-API-Key"] = this.apiKey;
+    }
+    const res = await this._fetch(url, {
+      ...options,
+      headers
+    });
+    if (!res.ok) {
+      let errorBody = "";
+      try {
+        errorBody = await res.text();
+      } catch {
+      }
+      throw new Error(
+        `ArmorDesk API error [${res.status} ${res.statusText}] at ${endpoint}: ${errorBody || "Unknown error"}`
+      );
+    }
+    return res.json();
+  }
+  /**
+   * Health and runtime operational telemetry
+   */
+  async status() {
+    return this.request("/api/status");
+  }
+  /**
+   * List managed corporate tenants
+   */
+  async getTenants() {
+    return this.request("/api/tenants");
+  }
+  /**
+   * Fetch immutable security and policy enforcement traces
+   */
+  async getTraces(tenantId) {
+    const tid = tenantId || this.tenantId;
+    return this.request(`/api/traces?tenant_id=${encodeURIComponent(tid)}`);
+  }
+  /**
+   * Fetch approval queue items held by human-in-the-loop policies
+   */
+  async getApprovals(tenantId) {
+    const tid = tenantId || this.tenantId;
+    return this.request(`/api/approvals?tenant_id=${encodeURIComponent(tid)}`);
+  }
+  /**
+   * Authorize or reject a held action in escrow
+   */
+  async resolveApproval(delegationId, action, notes) {
+    const payload = {
+      action,
+      user_role: this.userRole,
+      user_name: this.userName,
+      notes
+    };
+    return this.request(`/api/approvals/${encodeURIComponent(delegationId)}/action`, {
+      method: "POST",
+      body: JSON.stringify(payload)
+    });
+  }
+  /**
+   * List digital verification receipts with cryptographic proofs
+   */
+  async getReceipts(tenantId) {
+    const tid = tenantId || this.tenantId;
+    return this.request(`/api/receipts?tenant_id=${encodeURIComponent(tid)}`);
+  }
+  /**
+   * Retrieve a specific receipt by ID
+   */
+  async getReceipt(receiptId) {
+    return this.request(`/api/receipts/${encodeURIComponent(receiptId)}`);
+  }
+  /**
+   * Cryptographically verify a digital proof
+   */
+  async verifyProof(proof) {
+    return this.request("/api/receipts/verify", {
+      method: "POST",
+      body: JSON.stringify(proof)
+    });
+  }
+  /**
+   * Get MCP Gateway configuration and sample connection specs
+   */
+  async getMCPConfig(tenantId) {
+    const tid = tenantId || this.tenantId;
+    return this.request(`/api/mcp/config?tenant_id=${encodeURIComponent(tid)}`);
+  }
+  /**
+   * Invoke a tool through the Governed MCP Gateway
+   */
+  async callMCPTool(toolName, args, options = {}) {
+    const rpcPayload = {
+      jsonrpc: "2.0",
+      id: Date.now(),
+      method: "tools/call",
+      params: {
+        name: toolName,
+        arguments: args,
+        context: {
+          user_role: options.userRole || this.userRole,
+          user_name: options.userName || this.userName,
+          delegation_id: options.delegationId
+        }
+      }
+    };
+    return this.request("/api/mcp/gateway", {
+      method: "POST",
+      body: JSON.stringify(rpcPayload)
+    });
+  }
+  /**
+   * Execute an adversarial FinOps scenario simulation (1 to 5)
+   */
+  async runScenario(scenarioId, tenantId) {
+    return this.request("/api/scenarios/run", {
+      method: "POST",
+      body: JSON.stringify({
+        scenario_id: scenarioId,
+        tenant_id: tenantId || this.tenantId
+      })
+    });
+  }
+  /**
+   * Test prompt injection attacks against ArmorDesk CTF Gauntlet
+   */
+  async submitCTF(prompt, attackerName, tenantId) {
+    return this.request("/api/ctf/submit", {
+      method: "POST",
+      body: JSON.stringify({
+        prompt,
+        attacker_name: attackerName || "PenTester",
+        tenant_id: tenantId || this.tenantId
+      })
+    });
+  }
+  /**
+   * Generate an executive voice briefing via ElevenLabs
+   */
+  async getVoiceBriefing(briefingType = "executive", tenantId) {
+    return this.request("/api/voice/briefing", {
+      method: "POST",
+      body: JSON.stringify({
+        briefing_type: briefingType,
+        tenant_id: tenantId || this.tenantId
+      })
+    });
+  }
+};
+
+// src/mcp.ts
+function generateClaudeDesktopConfig(options = {}) {
+  const url = options.gatewayUrl || "https://armordesk.crusts.dev/api/mcp/gateway";
+  const tenant = options.tenantId || "acme-corp";
+  const apiKey = options.apiKey || "ak_live_acme_corp";
+  return {
+    mcpServers: {
+      armordesk_gateway: {
+        command: "npx",
+        args: ["-y", "@modelcontextprotocol/server-fetch", url],
+        env: {
+          ARMORIQ_TENANT: tenant,
+          ARMORIQ_API_KEY: apiKey
+        }
+      }
+    }
+  };
+}
+function generateCursorConfig(options = {}) {
+  const url = options.gatewayUrl || "https://armordesk.crusts.dev/api/mcp/gateway";
+  const tenant = options.tenantId || "acme-corp";
+  const apiKey = options.apiKey || "ak_live_acme_corp";
+  return {
+    mcpServers: {
+      armordesk: {
+        url,
+        headers: {
+          "X-ArmorIQ-Tenant": tenant,
+          Authorization: `Bearer ${apiKey}`
+        }
+      }
+    }
+  };
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  ArmorDeskClient,
+  buildMerkleTree,
+  canonicalJson,
+  generateClaudeDesktopConfig,
+  generateCursorConfig,
+  generatePlanHash,
+  hashSha256,
+  verifyMerkleRoot,
+  verifyProof
+});

package/dist/index.mjs

@@ -0,0 +1,22 @@
+import {
+  ArmorDeskClient,
+  buildMerkleTree,
+  canonicalJson,
+  generateClaudeDesktopConfig,
+  generateCursorConfig,
+  generatePlanHash,
+  hashSha256,
+  verifyMerkleRoot,
+  verifyProof
+} from "./chunk-TVWUJ3XJ.mjs";
+export {
+  ArmorDeskClient,
+  buildMerkleTree,
+  canonicalJson,
+  generateClaudeDesktopConfig,
+  generateCursorConfig,
+  generatePlanHash,
+  hashSha256,
+  verifyMerkleRoot,
+  verifyProof
+};

package/dist/mcp.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Generates ready-to-paste Claude Desktop configuration object
+ */
+export declare function generateClaudeDesktopConfig(options?: {
+    gatewayUrl?: string;
+    tenantId?: string;
+    apiKey?: string;
+}): {
+    mcpServers: Record<string, any>;
+};
+/**
+ * Generates ready-to-paste Cursor IDE MCP configuration object
+ */
+export declare function generateCursorConfig(options?: {
+    gatewayUrl?: string;
+    tenantId?: string;
+    apiKey?: string;
+}): {
+    mcpServers: Record<string, any>;
+};
+//# sourceMappingURL=mcp.d.ts.map

package/dist/mcp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp.d.ts","sourceRoot":"","sources":["../src/mcp.ts"],"names":[],"mappings":"AAEA;;GAEG;AACH,wBAAgB,2BAA2B,CAAC,OAAO,GAAE;IACnD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;CACZ,GAAG;IAAE,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;CAAE,CAiB3C;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,GAAE;IAC5C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;CACZ,GAAG;IAAE,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;CAAE,CAgB3C"}

package/dist/types.d.ts

@@ -0,0 +1,237 @@
+/**
+ * TypeScript Type Definitions for ArmorDesk SDK
+ */
+export interface ArmorDeskClientOptions {
+    /**
+     * Base URL of ArmorDesk Control Plane instance
+     * Default: "https://armordesk.crusts.dev"
+     */
+    baseUrl?: string;
+    /**
+     * ArmorIQ API Key or Pro Key (ak_live_..., ak_test_...)
+     */
+    apiKey?: string;
+    /**
+     * Tenant identifier for multi-tenant isolation
+     * Default: "acme-corp"
+     */
+    tenantId?: string;
+    /**
+     * Default requesting user name
+     */
+    userName?: string;
+    /**
+     * Default requesting user role ('manager' | 'intern' | 'auditor')
+     */
+    userRole?: string;
+    /**
+     * Optional custom fetch implementation
+     */
+    fetch?: typeof fetch;
+}
+export interface ArmorDeskStatus {
+    status: string;
+    service: string;
+    version: string;
+    armoriq_pro_active: boolean;
+    mode: string;
+    slack_configured: boolean;
+    active_tenants: number;
+    timestamp: string;
+}
+export interface TenantInfo {
+    id: string;
+    name: string;
+    spend_limit: number;
+    policy_rules: Record<string, any>;
+    balance: number;
+    currency: string;
+}
+export interface TraceItem {
+    id: string;
+    tenant_id: string;
+    user_role: string;
+    user_name: string;
+    agent_name: string;
+    prompt: string;
+    action: string;
+    status: "ALLOWED" | "HELD_FOR_APPROVAL" | "BLOCKED" | string;
+    reason: string;
+    plan_hash: string;
+    merkle_root: string;
+    metadata: Record<string, any>;
+    created_at: string;
+}
+export interface ApprovalItem {
+    delegation_id: string;
+    tenant_id: string;
+    requested_by: string;
+    role: string;
+    amount: number;
+    recipient: string;
+    description: string;
+    action_type: string;
+    status: "HELD_FOR_APPROVAL" | "APPROVED" | "REJECTED";
+    plan_hash: string;
+    payload: Record<string, any>;
+    created_at: string;
+    resolved_at?: string;
+    resolved_by?: string;
+}
+export interface ApprovalActionRequest {
+    action: "APPROVE" | "REJECT";
+    user_role?: string;
+    user_name?: string;
+    notes?: string;
+}
+export interface ReceiptItem {
+    id: string;
+    tenant_id: string;
+    delegation_id?: string;
+    action_type: string;
+    amount: number;
+    recipient: string;
+    status: string;
+    plan_hash: string;
+    merkle_root: string;
+    allowed_spec: Record<string, any>;
+    actual_execution: Record<string, any>;
+    signature: string;
+    verified: boolean;
+    created_at: string;
+}
+export interface VerifyProofRequest {
+    plan_hash: string;
+    merkle_root: string;
+    signature: string;
+    allowed_spec: Record<string, any>;
+    actual_execution: Record<string, any>;
+}
+export interface VerifyProofResponse {
+    valid: boolean;
+    computed_plan_hash: string;
+    computed_merkle_root: string;
+    matches_hash: boolean;
+    matches_merkle: boolean;
+    status: string;
+    details: string;
+}
+export interface MCPToolDef {
+    name: string;
+    description: string;
+    input_schema: Record<string, any>;
+    governing_agent: string;
+    tier: "READ_ONLY" | "FINANCIAL" | "WRITE";
+}
+export interface ConnectedAgentItem {
+    agent_id: string;
+    name: string;
+    transport: string;
+    status: string;
+    capabilities: string[];
+    assigned_sandbox: string;
+    enforced_policy: string;
+    last_heartbeat: string;
+}
+export interface MCPGatewayConfig {
+    gateway_url: string;
+    sse_url: string;
+    protocol_version: string;
+    tenant_id: string;
+    api_key_masked: string;
+    governed_tools: MCPToolDef[];
+    connected_agents: ConnectedAgentItem[];
+    sample_configs: {
+        claude_desktop: string;
+        cursor: string;
+        python_sdk: string;
+        curl: string;
+    };
+}
+export interface MCPCallRequest {
+    jsonrpc: "2.0";
+    id: string | number;
+    method: "tools/call" | "tools/list";
+    params: {
+        name?: string;
+        arguments?: Record<string, any>;
+        context?: {
+            user_role?: string;
+            user_name?: string;
+            delegation_id?: string;
+        };
+    };
+}
+export interface MCPCallResponse {
+    jsonrpc: "2.0";
+    id: string | number;
+    result?: {
+        content: Array<{
+            type: "text";
+            text: string;
+        }>;
+        isError?: boolean;
+        governance?: {
+            status: "ALLOWED" | "HELD_FOR_APPROVAL" | "BLOCKED";
+            reason: string;
+            plan_hash: string;
+            merkle_root: string;
+            delegation_id?: string;
+        };
+    };
+    error?: {
+        code: number;
+        message: string;
+        data?: any;
+    };
+}
+export interface ScenarioRunRequest {
+    scenario_id: number;
+    tenant_id?: string;
+}
+export interface ScenarioStep {
+    step: number;
+    agent: string;
+    tool: string;
+    status: string;
+    detail: string;
+    plan_hash?: string;
+}
+export interface ScenarioRunResponse {
+    scenario_id: number;
+    scenario_name: string;
+    overall_status: string;
+    summary: string;
+    steps: ScenarioStep[];
+    trace_id?: string;
+    delegation_id?: string;
+    receipt_id?: string;
+}
+export interface CTFSubmitRequest {
+    tenant_id?: string;
+    attacker_name?: string;
+    prompt: string;
+}
+export interface CTFSubmitResponse {
+    id: string;
+    attacker_name: string;
+    prompt: string;
+    detected_threat: string;
+    blocked: boolean;
+    score: number;
+    reason: string;
+    sub_agent_action: string;
+    created_at: string;
+}
+export interface VoiceBriefingResponse {
+    success: boolean;
+    audio_base64: string;
+    fallback_browser_tts: boolean;
+    text: string;
+    voice_type: string;
+    voice_id: string;
+    content_type: string;
+    script: string;
+    pending_count: number;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,MAAM,WAAW,sBAAsB;IACrC;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB;;;OAGG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB;;OAEG;IACH,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;CACtB;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,kBAAkB,EAAE,OAAO,CAAC;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,gBAAgB,EAAE,OAAO,CAAC;IAC1B,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,SAAS,GAAG,mBAAmB,GAAG,SAAS,GAAG,MAAM,CAAC;IAC7D,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC9B,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,YAAY;IAC3B,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,mBAAmB,GAAG,UAAU,GAAG,UAAU,CAAC;IACtD,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,SAAS,GAAG,QAAQ,CAAC;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAClC,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,OAAO,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAClC,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;CACvC;AAED,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,OAAO,CAAC;IACf,kBAAkB,EAAE,MAAM,CAAC;IAC3B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,YAAY,EAAE,OAAO,CAAC;IACtB,cAAc,EAAE,OAAO,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAClC,eAAe,EAAE,MAAM,CAAC;IACxB,IAAI,EAAE,WAAW,GAAG,WAAW,GAAG,OAAO,CAAC;CAC3C;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,gBAAgB,EAAE,MAAM,CAAC;IACzB,eAAe,EAAE,MAAM,CAAC;IACxB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,gBAAgB;IAC/B,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,gBAAgB,EAAE,MAAM,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,UAAU,EAAE,CAAC;IAC7B,gBAAgB,EAAE,kBAAkB,EAAE,CAAC;IACvC,cAAc,EAAE;QACd,cAAc,EAAE,MAAM,CAAC;QACvB,MAAM,EAAE,MAAM,CAAC;QACf,UAAU,EAAE,MAAM,CAAC;QACnB,IAAI,EAAE,MAAM,CAAC;KACd,CAAC;CACH;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,KAAK,CAAC;IACf,EAAE,EAAE,MAAM,GAAG,MAAM,CAAC;IACpB,MAAM,EAAE,YAAY,GAAG,YAAY,CAAC;IACpC,MAAM,EAAE;QACN,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAChC,OAAO,CAAC,EAAE;YACR,SAAS,CAAC,EAAE,MAAM,CAAC;YACnB,SAAS,CAAC,EAAE,MAAM,CAAC;YACnB,aAAa,CAAC,EAAE,MAAM,CAAC;SACxB,CAAC;KACH,CAAC;CACH;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,KAAK,CAAC;IACf,EAAE,EAAE,MAAM,GAAG,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE;QACP,OAAO,EAAE,KAAK,CAAC;YACb,IAAI,EAAE,MAAM,CAAC;YACb,IAAI,EAAE,MAAM,CAAC;SACd,CAAC,CAAC;QACH,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,UAAU,CAAC,EAAE;YACX,MAAM,EAAE,SAAS,GAAG,mBAAmB,GAAG,SAAS,CAAC;YACpD,MAAM,EAAE,MAAM,CAAC;YACf,SAAS,EAAE,MAAM,CAAC;YAClB,WAAW,EAAE,MAAM,CAAC;YACpB,aAAa,CAAC,EAAE,MAAM,CAAC;SACxB,CAAC;KACH,CAAC;IACF,KAAK,CAAC,EAAE;QACN,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,CAAC,EAAE,GAAG,CAAC;KACZ,CAAC;CACH;AAED,MAAM,WAAW,kBAAkB;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,mBAAmB;IAClC,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,YAAY,EAAE,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,gBAAgB;IAC/B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,eAAe,EAAE,MAAM,CAAC;IACxB,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,gBAAgB,EAAE,MAAM,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,OAAO,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,oBAAoB,EAAE,OAAO,CAAC;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;CACvB"}

package/package.json

@@ -1,6 +1,56 @@
 {
   "name": "@crustdev/armordesk",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "1.0.1",
+  "description": "Official TypeScript SDK and CLI for ArmorDesk: Enterprise AI Agent Control Plane, Governed MCP Gateway, and Cryptographic Trust Center.",
+  "main": "./dist/index.js",
+  "module": "./dist/index.mjs",
+  "types": "./dist/index.d.ts",
+  "bin": {
+    "armordesk": "bin/cli.js"
+  },
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.mjs",
+      "require": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "bin",
+    "README.md",
+    "LICENSE"
+  ],
+  "scripts": {
+    "build": "tsup src/index.ts src/cli.ts --clean --format cjs,esm && tsc --emitDeclarationOnly",
+    "prepublishOnly": "npm run build"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "keywords": [
+    "armordesk",
+    "armoriq",
+    "mcp",
+    "model-context-protocol",
+    "ai-agent-governance",
+    "security",
+    "control-plane",
+    "cryptographic-proof",
+    "merkle-tree",
+    "finops",
+    "crustdev"
+  ],
+  "author": "Jumarr <rustaman@crusts.dev>",
+  "license": "MIT",
+  "homepage": "https://armordesk.crusts.dev",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/Rustaman1280/ArmorDesk.git"
+  },
+  "devDependencies": {
+    "@types/node": "^22.10.0",
+    "tsup": "^8.5.1",
+    "typescript": "^5.7.0"
+  }
+}