@dharma-ai-labs/agent-fabric-secure-store 0.1.0

package/dist/index.d.ts

@@ -0,0 +1,17 @@
+export interface SecureSecretStore {
+    backend: 'windows-credential-manager' | 'macos-keychain' | 'linux-secret-service';
+    get(account: string): Promise<string | null>;
+    put(account: string, secret: string): Promise<void>;
+    delete(account: string): Promise<void>;
+}
+declare function windowsStore(command?: string): SecureSecretStore;
+declare function linuxStore(): SecureSecretStore;
+declare function macosStore(): SecureSecretStore;
+export declare function createSystemSecureStore(): Promise<SecureSecretStore>;
+export declare const secureStoreInternals: {
+    windowsStore: typeof windowsStore;
+    linuxStore: typeof linuxStore;
+    macosStore: typeof macosStore;
+};
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,4BAA4B,GAAG,gBAAgB,GAAG,sBAAsB,CAAC;IAClF,GAAG,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC7C,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACpD,MAAM,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACxC;AA2BD,iBAAS,YAAY,CAAC,OAAO,SAAoH,GAAG,iBAAiB,CAsBpK;AAED,iBAAS,UAAU,IAAI,iBAAiB,CAqBvC;AAED,iBAAS,UAAU,IAAI,iBAAiB,CAqBvC;AAOD,wBAAsB,uBAAuB,IAAI,OAAO,CAAC,iBAAiB,CAAC,CAM1E;AAED,eAAO,MAAM,oBAAoB;;;;CAA2C,CAAC"}

package/dist/index.js

@@ -0,0 +1,127 @@
+import { spawn } from 'node:child_process';
+import { readFile } from 'node:fs/promises';
+function run(command, argv, input) {
+    return new Promise((accept, reject) => {
+        const child = spawn(command, argv, { shell: false, windowsHide: true, stdio: ['pipe', 'pipe', 'pipe'] });
+        const stdout = [];
+        const stderr = [];
+        child.stdout.on('data', (chunk) => stdout.push(chunk));
+        child.stderr.on('data', (chunk) => stderr.push(chunk));
+        child.once('error', reject);
+        child.once('close', (code) => accept({ code, stdout: Buffer.concat(stdout).toString('utf8'), stderr: Buffer.concat(stderr).toString('utf8') }));
+        if (input !== undefined)
+            child.stdin.end(input);
+        else
+            child.stdin.end();
+    });
+}
+function assertAccount(account) {
+    if (!/^[A-Za-z0-9][A-Za-z0-9._:-]{0,127}$/.test(account))
+        throw new Error('Invalid secure-store account.');
+}
+const windowsPreamble = '$ErrorActionPreference="Stop"; Add-Type -AssemblyName System.Runtime.WindowsRuntime; $vault=[Windows.Security.Credentials.PasswordVault,Windows.Security.Credentials,ContentType=WindowsRuntime]::new(); ';
+const windowsRead = `${windowsPreamble}try {$credential=$vault.Retrieve("Dharma Agent Fabric",$args[0]); $credential.RetrievePassword(); [Console]::Out.Write($credential.Password)} catch {exit 3}`;
+const windowsWrite = `${windowsPreamble}$value=[Console]::In.ReadToEnd(); try {$old=$vault.Retrieve("Dharma Agent Fabric",$args[0]); $vault.Remove($old)} catch {}; $credential=[Windows.Security.Credentials.PasswordCredential,Windows.Security.Credentials,ContentType=WindowsRuntime]::new("Dharma Agent Fabric",$args[0],$value); $vault.Add($credential)`;
+const windowsDelete = `${windowsPreamble}try {$credential=$vault.Retrieve("Dharma Agent Fabric",$args[0]); $vault.Remove($credential)} catch {exit 3}`;
+function windowsStore(command = process.platform === 'win32' ? 'powershell.exe' : '/mnt/c/Windows/System32/WindowsPowerShell/v1.0/powershell.exe') {
+    const invoke = (script, account, secret) => run(command, ['-NoProfile', '-NonInteractive', '-Command', `& { ${script} }`, account], secret);
+    return {
+        backend: 'windows-credential-manager',
+        async get(account) {
+            assertAccount(account);
+            const result = await invoke(windowsRead, account);
+            if (result.code === 3)
+                return null;
+            if (result.code !== 0)
+                throw new Error(`Windows Credential Manager failed: ${result.stderr.trim()}`);
+            return result.stdout;
+        },
+        async put(account, secret) {
+            assertAccount(account);
+            const result = await invoke(windowsWrite, account, secret);
+            if (result.code !== 0)
+                throw new Error(`Windows Credential Manager failed: ${result.stderr.trim()}`);
+        },
+        async delete(account) {
+            assertAccount(account);
+            const result = await invoke(windowsDelete, account);
+            if (result.code !== 0 && result.code !== 3)
+                throw new Error(`Windows Credential Manager failed: ${result.stderr.trim()}`);
+        },
+    };
+}
+function linuxStore() {
+    return {
+        backend: 'linux-secret-service',
+        async get(account) {
+            assertAccount(account);
+            const result = await run('secret-tool', ['lookup', 'service', 'dharma-agent-fabric', 'account', account]);
+            if (result.code === 1)
+                return null;
+            if (result.code !== 0)
+                throw new Error(`Linux Secret Service failed: ${result.stderr.trim()}`);
+            return result.stdout.trimEnd();
+        },
+        async put(account, secret) {
+            assertAccount(account);
+            const result = await run('secret-tool', ['store', '--label=Dharma Agent Fabric', 'service', 'dharma-agent-fabric', 'account', account], secret);
+            if (result.code !== 0)
+                throw new Error(`Linux Secret Service failed: ${result.stderr.trim()}`);
+        },
+        async delete(account) {
+            assertAccount(account);
+            const result = await run('secret-tool', ['clear', 'service', 'dharma-agent-fabric', 'account', account]);
+            if (result.code !== 0 && result.code !== 1)
+                throw new Error(`Linux Secret Service failed: ${result.stderr.trim()}`);
+        },
+    };
+}
+function macosStore() {
+    return {
+        backend: 'macos-keychain',
+        async get(account) {
+            assertAccount(account);
+            const result = await run('security', ['find-generic-password', '-s', 'Dharma Agent Fabric', '-a', account, '-w']);
+            if (result.code === 44)
+                return null;
+            if (result.code !== 0)
+                throw new Error(`macOS Keychain failed: ${result.stderr.trim()}`);
+            return result.stdout.trimEnd();
+        },
+        async put(account, secret) {
+            assertAccount(account);
+            const result = await run('security', ['add-generic-password', '-U', '-s', 'Dharma Agent Fabric', '-a', account, '-w', secret]);
+            if (result.code !== 0)
+                throw new Error(`macOS Keychain failed: ${result.stderr.trim()}`);
+        },
+        async delete(account) {
+            assertAccount(account);
+            const result = await run('security', ['delete-generic-password', '-s', 'Dharma Agent Fabric', '-a', account]);
+            if (result.code !== 0 && result.code !== 44)
+                throw new Error(`macOS Keychain failed: ${result.stderr.trim()}`);
+        },
+    };
+}
+async function isWsl() {
+    if (process.platform !== 'linux')
+        return false;
+    try {
+        return /microsoft|wsl/i.test(await readFile('/proc/version', 'utf8'));
+    }
+    catch {
+        return false;
+    }
+}
+export async function createSystemSecureStore() {
+    if (process.platform === 'win32')
+        return windowsStore();
+    if (process.platform === 'darwin')
+        return macosStore();
+    if (await isWsl())
+        return windowsStore();
+    if (process.platform === 'linux')
+        return linuxStore();
+    throw new Error(`No supported secure secret store for ${process.platform}.`);
+}
+export const secureStoreInternals = { windowsStore, linuxStore, macosStore };
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAW5C,SAAS,GAAG,CAAC,OAAe,EAAE,IAAc,EAAE,KAAc;IAC1D,OAAO,IAAI,OAAO,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE;QACpC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QACzG,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAC/D,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAC/D,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC5B,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QAChJ,IAAI,KAAK,KAAK,SAAS;YAAE,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;;YAC3C,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;IACzB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,aAAa,CAAC,OAAe;IACpC,IAAI,CAAC,qCAAqC,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;AAC7G,CAAC;AAED,MAAM,eAAe,GAAG,2MAA2M,CAAC;AACpO,MAAM,WAAW,GAAG,GAAG,eAAe,8JAA8J,CAAC;AACrM,MAAM,YAAY,GAAG,GAAG,eAAe,wTAAwT,CAAC;AAChW,MAAM,aAAa,GAAG,GAAG,eAAe,8GAA8G,CAAC;AAEvJ,SAAS,YAAY,CAAC,OAAO,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,+DAA+D;IAC/I,MAAM,MAAM,GAAG,CAAC,MAAc,EAAE,OAAe,EAAE,MAAe,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,YAAY,EAAE,iBAAiB,EAAE,UAAU,EAAE,OAAO,MAAM,IAAI,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC;IACrK,OAAO;QACL,OAAO,EAAE,4BAA4B;QACrC,KAAK,CAAC,GAAG,CAAC,OAAO;YACf,aAAa,CAAC,OAAO,CAAC,CAAC;YACvB,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;YAClD,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YACnC,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACrG,OAAO,MAAM,CAAC,MAAM,CAAC;QACvB,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM;YACvB,aAAa,CAAC,OAAO,CAAC,CAAC;YACvB,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,YAAY,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;YAC3D,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACvG,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,OAAO;YAClB,aAAa,CAAC,OAAO,CAAC,CAAC;YACvB,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;YACpD,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC5H,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,UAAU;IACjB,OAAO;QACL,OAAO,EAAE,sBAAsB;QAC/B,KAAK,CAAC,GAAG,CAAC,OAAO;YACf,aAAa,CAAC,OAAO,CAAC,CAAC;YACvB,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,aAAa,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,qBAAqB,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;YAC1G,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YACnC,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAC/F,OAAO,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACjC,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM;YACvB,aAAa,CAAC,OAAO,CAAC,CAAC;YACvB,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,aAAa,EAAE,CAAC,OAAO,EAAE,6BAA6B,EAAE,SAAS,EAAE,qBAAqB,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC;YAChJ,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACjG,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,OAAO;YAClB,aAAa,CAAC,OAAO,CAAC,CAAC;YACvB,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,aAAa,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,qBAAqB,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;YACzG,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACtH,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,UAAU;IACjB,OAAO;QACL,OAAO,EAAE,gBAAgB;QACzB,KAAK,CAAC,GAAG,CAAC,OAAO;YACf,aAAa,CAAC,OAAO,CAAC,CAAC;YACvB,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,UAAU,EAAE,CAAC,uBAAuB,EAAE,IAAI,EAAE,qBAAqB,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;YAClH,IAAI,MAAM,CAAC,IAAI,KAAK,EAAE;gBAAE,OAAO,IAAI,CAAC;YACpC,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACzF,OAAO,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACjC,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM;YACvB,aAAa,CAAC,OAAO,CAAC,CAAC;YACvB,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,UAAU,EAAE,CAAC,sBAAsB,EAAE,IAAI,EAAE,IAAI,EAAE,qBAAqB,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;YAC/H,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC3F,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,OAAO;YAClB,aAAa,CAAC,OAAO,CAAC,CAAC;YACvB,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,UAAU,EAAE,CAAC,yBAAyB,EAAE,IAAI,EAAE,qBAAqB,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;YAC9G,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,KAAK,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACjH,CAAC;KACF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,KAAK;IAClB,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC;IAC/C,IAAI,CAAC;QAAC,OAAO,gBAAgB,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,KAAK,CAAC;IAAC,CAAC;AACxG,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB;IAC3C,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,YAAY,EAAE,CAAC;IACxD,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,UAAU,EAAE,CAAC;IACvD,IAAI,MAAM,KAAK,EAAE;QAAE,OAAO,YAAY,EAAE,CAAC;IACzC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,UAAU,EAAE,CAAC;IACtD,MAAM,IAAI,KAAK,CAAC,wCAAwC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AAC/E,CAAC;AAED,MAAM,CAAC,MAAM,oBAAoB,GAAG,EAAE,YAAY,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC"}

package/dist/index.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=index.test.d.ts.map

package/dist/index.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.test.d.ts","sourceRoot":"","sources":["../src/index.test.ts"],"names":[],"mappings":""}

package/dist/index.test.js

@@ -0,0 +1,13 @@
+import assert from 'node:assert/strict';
+import { test } from 'node:test';
+import { secureStoreInternals } from './index.js';
+test('secure-store rejects unsafe account interpolation', async () => {
+    const store = secureStoreInternals.windowsStore('does-not-run');
+    await assert.rejects(() => store.get('bad; account'), /Invalid secure-store account/);
+});
+test('platform backends identify their security boundary', () => {
+    assert.equal(secureStoreInternals.windowsStore().backend, 'windows-credential-manager');
+    assert.equal(secureStoreInternals.linuxStore().backend, 'linux-secret-service');
+    assert.equal(secureStoreInternals.macosStore().backend, 'macos-keychain');
+});
+//# sourceMappingURL=index.test.js.map

package/dist/index.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.test.js","sourceRoot":"","sources":["../src/index.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAElD,IAAI,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;IACnE,MAAM,KAAK,GAAG,oBAAoB,CAAC,YAAY,CAAC,cAAc,CAAC,CAAC;IAChE,MAAM,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,8BAA8B,CAAC,CAAC;AACxF,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,oDAAoD,EAAE,GAAG,EAAE;IAC9D,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAAC,YAAY,EAAE,CAAC,OAAO,EAAE,4BAA4B,CAAC,CAAC;IACxF,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAAC,UAAU,EAAE,CAAC,OAAO,EAAE,sBAAsB,CAAC,CAAC;IAChF,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAAC,UAAU,EAAE,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;AAC5E,CAAC,CAAC,CAAC"}

package/package.json

@@ -0,0 +1,12 @@
+{
+  "name": "@dharma-ai-labs/agent-fabric-secure-store",
+  "version": "0.1.0",
+  "type": "module",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "repository": { "type": "git", "url": "git+https://github.com/dharma-ai-labs/dharma-agent-fabric.git", "directory": "packages/secure-store" },
+  "exports": { ".": "./dist/index.js" },
+  "files": ["dist"],
+  "publishConfig": { "access": "public", "provenance": true },
+  "scripts": { "test": "node --test dist/*.test.js" }
+}