@dharma-ai-labs/agent-fabric-local-vault 0.1.0

package/dist/index.d.ts

@@ -0,0 +1,33 @@
+import { type SecureSecretStore } from '@dharma-ai-labs/agent-fabric-secure-store';
+export interface VaultOptions {
+    root: string;
+    masterKey: Buffer;
+}
+export declare class LocalVault {
+    #private;
+    readonly root: string;
+    private constructor();
+    static open(options: VaultOptions): Promise<LocalVault>;
+    putBlob(plaintext: Uint8Array, kind: string): Promise<string>;
+    putFile(sourcePath: string, kind: string): Promise<{
+        contentId: string;
+        bytes: number;
+    }>;
+    getBlob(contentId: string): Promise<Buffer>;
+    recordSession(input: {
+        sessionId: string;
+        provider: string;
+        workspaceId: string;
+        sourceLocator: string;
+        status: string;
+        observedAt: string;
+    }): void;
+    recordCapsule(trajectoryId: string, revision: number, capsuleHash: string, blobContentId: string): void;
+    getLatestCapsule<T = Record<string, unknown>>(trajectoryId: string): Promise<T>;
+    recordDisclosure(disclosureId: string, receiptHash: string, bytesUploaded: number): void;
+    listSessions(): unknown[];
+    close(): void;
+}
+export declare function loadExplicitTestKey(env: NodeJS.ProcessEnv): Buffer;
+export declare function loadOrCreateVaultMasterKey(store?: SecureSecretStore): Promise<Buffer>;
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAKA,OAAO,EAA2B,KAAK,iBAAiB,EAAE,MAAM,2CAA2C,CAAC;AAI5G,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,qBAAa,UAAU;;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAItB,OAAO;WAMM,IAAI,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,UAAU,CAAC;IAsCvD,OAAO,CAAC,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAqB7D,OAAO,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAyCxF,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAajD,aAAa,CAAC,KAAK,EAAE;QACnB,SAAS,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QACzD,aAAa,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;KAC3D,GAAG,IAAI;IASR,aAAa,CAAC,YAAY,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,IAAI;IAejG,gBAAgB,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC;IAQrF,gBAAgB,CAAC,YAAY,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,IAAI;IAaxF,YAAY,IAAI,OAAO,EAAE;IAMzB,KAAK,IAAI,IAAI;CASd;AAED,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,MAAM,CAOlE;AAED,wBAAsB,0BAA0B,CAAC,KAAK,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,MAAM,CAAC,CAe3F"}

package/dist/index.js

@@ -0,0 +1,214 @@
+import { createCipheriv, createDecipheriv, createHash, randomBytes } from 'node:crypto';
+import { createReadStream } from 'node:fs';
+import { mkdir, open, readFile, rename, rm, stat, writeFile } from 'node:fs/promises';
+import { dirname, resolve } from 'node:path';
+import { DatabaseSync } from 'node:sqlite';
+import { createSystemSecureStore } from '@dharma-ai-labs/agent-fabric-secure-store';
+const BLOB_VERSION = 1;
+export class LocalVault {
+    root;
+    #masterKey;
+    #database;
+    constructor(options, database) {
+        this.root = options.root;
+        this.#masterKey = options.masterKey;
+        this.#database = database;
+    }
+    static async open(options) {
+        if (options.masterKey.length !== 32)
+            throw new Error('Vault master key must contain exactly 32 bytes.');
+        await mkdir(resolve(options.root, 'blobs'), { recursive: true, mode: 0o700 });
+        const database = new DatabaseSync(resolve(options.root, 'vault.sqlite'));
+        database.exec(`
+      pragma journal_mode = WAL;
+      create table if not exists blobs (
+        content_id text primary key,
+        bytes integer not null,
+        kind text not null,
+        created_at text not null
+      );
+      create table if not exists sessions (
+        session_id text primary key,
+        provider text not null,
+        workspace_id text not null,
+        source_locator_hash text not null,
+        status text not null,
+        observed_at text not null
+      );
+      create table if not exists capsules (
+        trajectory_id text not null,
+        revision integer not null,
+        capsule_hash text not null,
+        blob_content_id text not null,
+        created_at text not null,
+        primary key (trajectory_id, revision)
+      );
+      create table if not exists disclosures (
+        disclosure_id text primary key,
+        receipt_hash text not null,
+        bytes_uploaded integer not null,
+        created_at text not null
+      );
+    `);
+        return new LocalVault(options, database);
+    }
+    async putBlob(plaintext, kind) {
+        const contentId = `sha256:${createHash('sha256').update(plaintext).digest('hex')}`;
+        const path = this.#blobPath(contentId);
+        const existing = this.#database.prepare('select content_id from blobs where content_id = ?').get(contentId);
+        if (existing)
+            return contentId;
+        await mkdir(dirname(path), { recursive: true, mode: 0o700 });
+        const nonce = randomBytes(12);
+        const cipher = createCipheriv('aes-256-gcm', this.#masterKey, nonce);
+        const ciphertext = Buffer.concat([cipher.update(plaintext), cipher.final()]);
+        const tag = cipher.getAuthTag();
+        const envelope = Buffer.concat([Buffer.from([BLOB_VERSION]), nonce, tag, ciphertext]);
+        const temporary = `${path}.${process.pid}.${randomBytes(4).toString('hex')}.tmp`;
+        await writeFile(temporary, envelope, { mode: 0o600, flag: 'wx' });
+        await rename(temporary, path);
+        this.#database.prepare('insert into blobs(content_id, bytes, kind, created_at) values (?, ?, ?, ?)').run(contentId, plaintext.byteLength, kind, new Date().toISOString());
+        return contentId;
+    }
+    async putFile(sourcePath, kind) {
+        const source = await stat(sourcePath);
+        if (!source.isFile() || source.size < 1)
+            throw new Error('Vault source must be a non-empty file.');
+        const nonce = randomBytes(12);
+        const cipher = createCipheriv('aes-256-gcm', this.#masterKey, nonce);
+        const hash = createHash('sha256');
+        const incoming = resolve(this.root, 'blobs', `.incoming-${process.pid}-${randomBytes(8).toString('hex')}`);
+        const destination = await open(incoming, 'wx', 0o600);
+        try {
+            await destination.write(Buffer.concat([Buffer.from([BLOB_VERSION]), nonce, Buffer.alloc(16)]));
+            for await (const value of createReadStream(sourcePath, { highWaterMark: 1_048_576 })) {
+                const chunk = Buffer.isBuffer(value) ? value : Buffer.from(value);
+                hash.update(chunk);
+                const encrypted = cipher.update(chunk);
+                if (encrypted.length)
+                    await destination.write(encrypted);
+            }
+            const final = cipher.final();
+            if (final.length)
+                await destination.write(final);
+            await destination.write(cipher.getAuthTag(), 0, 16, 13);
+        }
+        catch (error) {
+            await destination.close().catch(() => undefined);
+            await rm(incoming, { force: true });
+            throw error;
+        }
+        await destination.close();
+        const contentId = `sha256:${hash.digest('hex')}`;
+        const path = this.#blobPath(contentId);
+        const existing = this.#database.prepare('select content_id from blobs where content_id = ?').get(contentId);
+        if (existing) {
+            await rm(incoming, { force: true });
+            return { contentId, bytes: source.size };
+        }
+        await mkdir(dirname(path), { recursive: true, mode: 0o700 });
+        await rename(incoming, path);
+        this.#database.prepare('insert into blobs(content_id, bytes, kind, created_at) values (?, ?, ?, ?)').run(contentId, source.size, kind, new Date().toISOString());
+        return { contentId, bytes: source.size };
+    }
+    async getBlob(contentId) {
+        const envelope = await readFile(this.#blobPath(contentId));
+        if (envelope[0] !== BLOB_VERSION || envelope.length < 29)
+            throw new Error('Unsupported or corrupt vault blob.');
+        const nonce = envelope.subarray(1, 13);
+        const tag = envelope.subarray(13, 29);
+        const decipher = createDecipheriv('aes-256-gcm', this.#masterKey, nonce);
+        decipher.setAuthTag(tag);
+        const plaintext = Buffer.concat([decipher.update(envelope.subarray(29)), decipher.final()]);
+        const actual = `sha256:${createHash('sha256').update(plaintext).digest('hex')}`;
+        if (actual !== contentId)
+            throw new Error('Vault content hash mismatch.');
+        return plaintext;
+    }
+    recordSession(input) {
+        const locatorHash = createHash('sha256').update(input.sourceLocator).digest('hex');
+        this.#database.prepare(`
+      insert into sessions(session_id, provider, workspace_id, source_locator_hash, status, observed_at)
+      values (?, ?, ?, ?, ?, ?)
+      on conflict(session_id) do update set status = excluded.status, observed_at = excluded.observed_at
+    `).run(input.sessionId, input.provider, input.workspaceId, locatorHash, input.status, input.observedAt);
+    }
+    recordCapsule(trajectoryId, revision, capsuleHash, blobContentId) {
+        const result = this.#database.prepare(`
+      insert into capsules(trajectory_id, revision, capsule_hash, blob_content_id, created_at)
+      values (?, ?, ?, ?, ?)
+      on conflict(trajectory_id, revision) do nothing
+    `).run(trajectoryId, revision, capsuleHash, blobContentId, new Date().toISOString());
+        if (result.changes > 0)
+            return;
+        const existing = this.#database.prepare(`
+      select capsule_hash from capsules where trajectory_id = ? and revision = ?
+    `).get(trajectoryId, revision);
+        if (existing?.capsule_hash !== capsuleHash) {
+            throw new Error('Trajectory capsule revision hash conflict.');
+        }
+    }
+    async getLatestCapsule(trajectoryId) {
+        const record = this.#database.prepare(`
+      select blob_content_id from capsules where trajectory_id = ? order by revision desc limit 1
+    `).get(trajectoryId);
+        if (!record)
+            throw new Error('Trajectory capsule is not available in the local vault.');
+        return JSON.parse((await this.getBlob(record.blob_content_id)).toString('utf8'));
+    }
+    recordDisclosure(disclosureId, receiptHash, bytesUploaded) {
+        if (!/^sha256:[a-f0-9]{64}$/.test(receiptHash) || !Number.isSafeInteger(bytesUploaded) || bytesUploaded < 0) {
+            throw new Error('Disclosure receipt is invalid.');
+        }
+        this.#database.prepare(`
+      insert into disclosures(disclosure_id, receipt_hash, bytes_uploaded, created_at)
+      values (?, ?, ?, ?)
+      on conflict(disclosure_id) do update set
+        receipt_hash = excluded.receipt_hash,
+        bytes_uploaded = excluded.bytes_uploaded
+    `).run(disclosureId, receiptHash, bytesUploaded, new Date().toISOString());
+    }
+    listSessions() {
+        return this.#database.prepare(`
+      select session_id, provider, workspace_id, status, observed_at from sessions order by observed_at desc
+    `).all();
+    }
+    close() {
+        this.#database.close();
+    }
+    #blobPath(contentId) {
+        if (!/^sha256:[a-f0-9]{64}$/.test(contentId))
+            throw new Error('Invalid content ID.');
+        const digest = contentId.slice('sha256:'.length);
+        return resolve(this.root, 'blobs', digest.slice(0, 2), `${digest}.blob`);
+    }
+}
+export function loadExplicitTestKey(env) {
+    if (env.DHARMA_ALLOW_ENV_KEY !== '1' || !env.DHARMA_VAULT_KEY) {
+        throw new Error('No secure operating-system key store is configured.');
+    }
+    const key = Buffer.from(env.DHARMA_VAULT_KEY, 'base64');
+    if (key.length !== 32)
+        throw new Error('DHARMA_VAULT_KEY must be a base64-encoded 32-byte key.');
+    return key;
+}
+export async function loadOrCreateVaultMasterKey(store) {
+    if (process.env.DHARMA_ALLOW_ENV_KEY === '1')
+        return loadExplicitTestKey(process.env);
+    const secureStore = store ?? await createSystemSecureStore();
+    const account = 'vault-master-key-v1';
+    const current = await secureStore.get(account);
+    if (current) {
+        const key = Buffer.from(current, 'base64');
+        if (key.length !== 32)
+            throw new Error('Stored vault master key is corrupt.');
+        return key;
+    }
+    const key = randomBytes(32);
+    await secureStore.put(account, key.toString('base64'));
+    const confirmed = await secureStore.get(account);
+    if (confirmed !== key.toString('base64'))
+        throw new Error('Secure store did not confirm the vault key write.');
+    return key;
+}
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACxF,OAAO,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAC3C,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACtF,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,uBAAuB,EAA0B,MAAM,2CAA2C,CAAC;AAE5G,MAAM,YAAY,GAAG,CAAC,CAAC;AAOvB,MAAM,OAAO,UAAU;IACZ,IAAI,CAAS;IACb,UAAU,CAAS;IACnB,SAAS,CAAe;IAEjC,YAAoB,OAAqB,EAAE,QAAsB;QAC/D,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QACzB,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC;QACpC,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC;IAC5B,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,OAAqB;QACrC,IAAI,OAAO,CAAC,SAAS,CAAC,MAAM,KAAK,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACxG,MAAM,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC9E,MAAM,QAAQ,GAAG,IAAI,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC,CAAC;QACzE,QAAQ,CAAC,IAAI,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KA8Bb,CAAC,CAAC;QACH,OAAO,IAAI,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC3C,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,SAAqB,EAAE,IAAY;QAC/C,MAAM,SAAS,GAAG,UAAU,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QACnF,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,mDAAmD,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC5G,IAAI,QAAQ;YAAE,OAAO,SAAS,CAAC;QAE/B,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC7D,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;QAC9B,MAAM,MAAM,GAAG,cAAc,CAAC,aAAa,EAAE,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QACrE,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAC7E,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QAChC,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC;QACtF,MAAM,SAAS,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;QACjF,MAAM,SAAS,CAAC,SAAS,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAClE,MAAM,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAC9B,IAAI,CAAC,SAAS,CAAC,OAAO,CACpB,4EAA4E,CAC7E,CAAC,GAAG,CAAC,SAAS,EAAE,SAAS,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;QACvE,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,UAAkB,EAAE,IAAY;QAC5C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,MAAM,CAAC,IAAI,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QACnG,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;QAC9B,MAAM,MAAM,GAAG,cAAc,CAAC,aAAa,EAAE,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QACrE,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;QAClC,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,aAAa,OAAO,CAAC,GAAG,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC3G,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QACtD,IAAI,CAAC;YACH,MAAM,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YAC/F,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,gBAAgB,CAAC,UAAU,EAAE,EAAE,aAAa,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;gBACrF,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAClE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBACnB,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBACvC,IAAI,SAAS,CAAC,MAAM;oBAAE,MAAM,WAAW,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YAC3D,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC;YAC7B,IAAI,KAAK,CAAC,MAAM;gBAAE,MAAM,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACjD,MAAM,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QAC1D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,WAAW,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YACjD,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACpC,MAAM,KAAK,CAAC;QACd,CAAC;QACD,MAAM,WAAW,CAAC,KAAK,EAAE,CAAC;QAE1B,MAAM,SAAS,GAAG,UAAU,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,mDAAmD,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC5G,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACpC,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;QAC3C,CAAC;QACD,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC7D,MAAM,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC7B,IAAI,CAAC,SAAS,CAAC,OAAO,CACpB,4EAA4E,CAC7E,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;QAC9D,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;IAC3C,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,SAAiB;QAC7B,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC;QAC3D,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,YAAY,IAAI,QAAQ,CAAC,MAAM,GAAG,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QAChH,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACvC,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QACtC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,aAAa,EAAE,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QACzE,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QACzB,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAC5F,MAAM,MAAM,GAAG,UAAU,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QAChF,IAAI,MAAM,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAC1E,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,aAAa,CAAC,KAGb;QACC,MAAM,WAAW,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACnF,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;;;;KAItB,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,WAAW,EAAE,WAAW,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;IAC1G,CAAC;IAED,aAAa,CAAC,YAAoB,EAAE,QAAgB,EAAE,WAAmB,EAAE,aAAqB;QAC9F,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;;;;KAIrC,CAAC,CAAC,GAAG,CAAC,YAAY,EAAE,QAAQ,EAAE,WAAW,EAAE,aAAa,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;QACrF,IAAI,MAAM,CAAC,OAAO,GAAG,CAAC;YAAE,OAAO;QAC/B,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;;KAEvC,CAAC,CAAC,GAAG,CAAC,YAAY,EAAE,QAAQ,CAAyC,CAAC;QACvE,IAAI,QAAQ,EAAE,YAAY,KAAK,WAAW,EAAE,CAAC;YAC3C,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;IAED,KAAK,CAAC,gBAAgB,CAA8B,YAAoB;QACtE,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;;KAErC,CAAC,CAAC,GAAG,CAAC,YAAY,CAA4C,CAAC;QAChE,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;QACxF,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAM,CAAC;IACxF,CAAC;IAED,gBAAgB,CAAC,YAAoB,EAAE,WAAmB,EAAE,aAAqB;QAC/E,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,aAAa,CAAC,IAAI,aAAa,GAAG,CAAC,EAAE,CAAC;YAC5G,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QACpD,CAAC;QACD,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;;;;;;KAMtB,CAAC,CAAC,GAAG,CAAC,YAAY,EAAE,WAAW,EAAE,aAAa,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;IAC7E,CAAC;IAED,YAAY;QACV,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;;KAE7B,CAAC,CAAC,GAAG,EAAE,CAAC;IACX,CAAC;IAED,KAAK;QACH,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;IACzB,CAAC;IAED,SAAS,CAAC,SAAiB;QACzB,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,SAAS,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;QACrF,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACjD,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,MAAM,OAAO,CAAC,CAAC;IAC3E,CAAC;CACF;AAED,MAAM,UAAU,mBAAmB,CAAC,GAAsB;IACxD,IAAI,GAAG,CAAC,oBAAoB,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QAC9D,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC;IACxD,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IACjG,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,KAAyB;IACxE,IAAI,OAAO,CAAC,GAAG,CAAC,oBAAoB,KAAK,GAAG;QAAE,OAAO,mBAAmB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACtF,MAAM,WAAW,GAAG,KAAK,IAAI,MAAM,uBAAuB,EAAE,CAAC;IAC7D,MAAM,OAAO,GAAG,qBAAqB,CAAC;IACtC,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC/C,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC3C,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QAC9E,OAAO,GAAG,CAAC;IACb,CAAC;IACD,MAAM,GAAG,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;IAC5B,MAAM,WAAW,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;IACvD,MAAM,SAAS,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACjD,IAAI,SAAS,KAAK,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IAC/G,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/index.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=index.test.d.ts.map

package/dist/index.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.test.d.ts","sourceRoot":"","sources":["../src/index.test.ts"],"names":[],"mappings":""}

package/dist/index.test.js

@@ -0,0 +1,68 @@
+import assert from 'node:assert/strict';
+import { randomBytes } from 'node:crypto';
+import { mkdtemp, readFile, writeFile } from 'node:fs/promises';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import test from 'node:test';
+import { LocalVault, loadExplicitTestKey, loadOrCreateVaultMasterKey } from './index.js';
+test('vault encrypts content and verifies it on read', async () => {
+    const root = await mkdtemp(join(tmpdir(), 'dharma-vault-'));
+    const vault = await LocalVault.open({ root, masterKey: randomBytes(32) });
+    const secret = Buffer.from('test-secret-value', 'utf8');
+    const contentId = await vault.putBlob(secret, 'provider-session');
+    assert.deepEqual(await vault.getBlob(contentId), secret);
+    const digest = contentId.slice('sha256:'.length);
+    const stored = await readFile(join(root, 'blobs', digest.slice(0, 2), `${digest}.blob`));
+    assert.equal(stored.includes(secret), false);
+    vault.close();
+});
+test('vault streams large provider files without buffering the plaintext', async () => {
+    const root = await mkdtemp(join(tmpdir(), 'dharma-vault-'));
+    const source = join(root, 'provider.jsonl');
+    const plaintext = Buffer.alloc(4 * 1024 * 1024, 'x');
+    await writeFile(source, plaintext);
+    const vault = await LocalVault.open({ root: join(root, 'vault'), masterKey: randomBytes(32) });
+    const stored = await vault.putFile(source, 'raw-provider-session');
+    assert.equal(stored.bytes, plaintext.length);
+    assert.deepEqual(await vault.getBlob(stored.contentId), plaintext);
+    vault.close();
+});
+test('vault master key is generated once in the operating-system store', async () => {
+    const values = new Map();
+    const store = {
+        backend: 'linux-secret-service',
+        async get(account) { return values.get(account) ?? null; },
+        async put(account, secret) { values.set(account, secret); },
+        async delete(account) { values.delete(account); },
+    };
+    const first = await loadOrCreateVaultMasterKey(store);
+    const second = await loadOrCreateVaultMasterKey(store);
+    assert.equal(first.length, 32);
+    assert.deepEqual(second, first);
+});
+test('vault accepts identical capsule retries and rejects revision drift', async () => {
+    const root = await mkdtemp(join(tmpdir(), 'dharma-vault-'));
+    const vault = await LocalVault.open({ root, masterKey: randomBytes(32) });
+    vault.recordCapsule('trajectory-1', 1, 'sha256:first', 'sha256:blob');
+    assert.doesNotThrow(() => vault.recordCapsule('trajectory-1', 1, 'sha256:first', 'sha256:blob'));
+    assert.throws(() => vault.recordCapsule('trajectory-1', 1, 'sha256:changed', 'sha256:other'), /revision hash conflict/);
+    vault.close();
+});
+test('vault resolves the latest capsule and records idempotent disclosure receipts', async () => {
+    const root = await mkdtemp(join(tmpdir(), 'dharma-vault-'));
+    const vault = await LocalVault.open({ root, masterKey: randomBytes(32) });
+    const firstBlob = await vault.putBlob(Buffer.from(JSON.stringify({ revision: 1 })), 'trajectory-capsule');
+    const secondBlob = await vault.putBlob(Buffer.from(JSON.stringify({ revision: 2 })), 'trajectory-capsule');
+    vault.recordCapsule('trajectory-1', 1, `sha256:${'1'.repeat(64)}`, firstBlob);
+    vault.recordCapsule('trajectory-1', 2, `sha256:${'2'.repeat(64)}`, secondBlob);
+    assert.deepEqual(await vault.getLatestCapsule('trajectory-1'), { revision: 2 });
+    assert.doesNotThrow(() => vault.recordDisclosure('response-1', `sha256:${'3'.repeat(64)}`, 42));
+    assert.doesNotThrow(() => vault.recordDisclosure('response-1', `sha256:${'3'.repeat(64)}`, 42));
+    vault.close();
+});
+test('environment keys fail closed unless explicitly enabled', () => {
+    const value = randomBytes(32).toString('base64');
+    assert.throws(() => loadExplicitTestKey({ DHARMA_VAULT_KEY: value }));
+    assert.equal(loadExplicitTestKey({ DHARMA_ALLOW_ENV_KEY: '1', DHARMA_VAULT_KEY: value }).length, 32);
+});
+//# sourceMappingURL=index.test.js.map

package/dist/index.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.test.js","sourceRoot":"","sources":["../src/index.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAChE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,mBAAmB,EAAE,0BAA0B,EAAE,MAAM,YAAY,CAAC;AAEzF,IAAI,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;IAChE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,eAAe,CAAC,CAAC,CAAC;IAC5D,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAC1E,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,mBAAmB,EAAE,MAAM,CAAC,CAAC;IACxD,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;IAClE,MAAM,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC;IACzD,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACjD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC;IACzF,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,CAAC;IAC7C,KAAK,CAAC,KAAK,EAAE,CAAC;AAChB,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;IACpF,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,eAAe,CAAC,CAAC,CAAC;IAC5D,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;IAC5C,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,IAAI,GAAG,IAAI,EAAE,GAAG,CAAC,CAAC;IACrD,MAAM,SAAS,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACnC,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,SAAS,EAAE,WAAW,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAC/F,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC;IACnE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;IAC7C,MAAM,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC,CAAC;IACnE,KAAK,CAAC,KAAK,EAAE,CAAC;AAChB,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,kEAAkE,EAAE,KAAK,IAAI,EAAE;IAClF,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,MAAM,KAAK,GAAG;QACZ,OAAO,EAAE,sBAA+B;QACxC,KAAK,CAAC,GAAG,CAAC,OAAe,IAAI,OAAO,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC;QAClE,KAAK,CAAC,GAAG,CAAC,OAAe,EAAE,MAAc,IAAI,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;QAC3E,KAAK,CAAC,MAAM,CAAC,OAAe,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;KAC1D,CAAC;IACF,MAAM,KAAK,GAAG,MAAM,0BAA0B,CAAC,KAAK,CAAC,CAAC;IACtD,MAAM,MAAM,GAAG,MAAM,0BAA0B,CAAC,KAAK,CAAC,CAAC;IACvD,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC/B,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;AAClC,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;IACpF,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,eAAe,CAAC,CAAC,CAAC;IAC5D,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAC1E,KAAK,CAAC,aAAa,CAAC,cAAc,EAAE,CAAC,EAAE,cAAc,EAAE,aAAa,CAAC,CAAC;IACtE,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,aAAa,CAAC,cAAc,EAAE,CAAC,EAAE,cAAc,EAAE,aAAa,CAAC,CAAC,CAAC;IACjG,MAAM,CAAC,MAAM,CACX,GAAG,EAAE,CAAC,KAAK,CAAC,aAAa,CAAC,cAAc,EAAE,CAAC,EAAE,gBAAgB,EAAE,cAAc,CAAC,EAC9E,wBAAwB,CACzB,CAAC;IACF,KAAK,CAAC,KAAK,EAAE,CAAC;AAChB,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,8EAA8E,EAAE,KAAK,IAAI,EAAE;IAC9F,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,eAAe,CAAC,CAAC,CAAC;IAC5D,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAC1E,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,oBAAoB,CAAC,CAAC;IAC1G,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,oBAAoB,CAAC,CAAC;IAC3G,KAAK,CAAC,aAAa,CAAC,cAAc,EAAE,CAAC,EAAE,UAAU,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;IAC9E,KAAK,CAAC,aAAa,CAAC,cAAc,EAAE,CAAC,EAAE,UAAU,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;IAC/E,MAAM,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,gBAAgB,CAAC,cAAc,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC;IAChF,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,YAAY,EAAE,UAAU,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;IAChG,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,YAAY,EAAE,UAAU,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;IAChG,KAAK,CAAC,KAAK,EAAE,CAAC;AAChB,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,wDAAwD,EAAE,GAAG,EAAE;IAClE,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACjD,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,mBAAmB,CAAC,EAAE,gBAAgB,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IACtE,MAAM,CAAC,KAAK,CAAC,mBAAmB,CAAC,EAAE,oBAAoB,EAAE,GAAG,EAAE,gBAAgB,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACvG,CAAC,CAAC,CAAC"}

package/package.json

@@ -0,0 +1,13 @@
+{
+  "name": "@dharma-ai-labs/agent-fabric-local-vault",
+  "version": "0.1.0",
+  "type": "module",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "repository": { "type": "git", "url": "git+https://github.com/dharma-ai-labs/dharma-agent-fabric.git", "directory": "packages/local-vault" },
+  "exports": { ".": "./dist/index.js" },
+  "files": ["dist"],
+  "publishConfig": { "access": "public", "provenance": true },
+  "scripts": { "test": "node --test dist/*.test.js" },
+  "dependencies": { "@dharma-ai-labs/agent-fabric-secure-store": "0.1.0" }
+}