@oneie/sdk 0.15.1 → 0.16.0

package/dist/schemas.d.ts

@@ -233,8 +233,8 @@ export declare const AgentDefinitionSchema: z.ZodObject<{
 export type AgentDefinition = z.infer<typeof AgentDefinitionSchema>;
 export declare function priceToAccepts(price: number, network?: string, asset?: string): Accept[];
 export declare const StepKind: z.ZodEnum<{
-    human: "human";
     agent: "agent";
+    human: "human";
     skill: "skill";
     trigger: "trigger";
     tool: "tool";
@@ -247,8 +247,8 @@ export declare const WorkflowDiffSchema: z.ZodObject<{
     add: z.ZodOptional<z.ZodArray<z.ZodObject<{
         tempId: z.ZodString;
         kind: z.ZodEnum<{
-            human: "human";
             agent: "agent";
+            human: "human";
             skill: "skill";
             trigger: "trigger";
             tool: "tool";

package/dist/vault-file.d.ts

@@ -0,0 +1,61 @@
+/** Sealed envelope. Everything outside `ct` is cleartext and authenticated. */
+export interface VaultBlob {
+    /** Format version. Bound as AAD. */
+    v: 1;
+    /**
+     * HOW this copy was sealed, so a reader knows what to ask for before it asks.
+     * `passphrase` — a human types it. `keychain` — the passphrase is a random
+     * secret held by the OS keystore and released by biometrics.
+     *
+     * WITHOUT THIS FIELD a keychain-sealed vault is indistinguishable from a
+     * passphrase one, and the only way to find out is to prompt for a passphrase
+     * that was never set. Bound as AAD so it cannot be flipped to downgrade a
+     * biometric vault into one that accepts a typed guess.
+     */
+    wrap: 'passphrase' | 'keychain';
+    kdf: {
+        name: 'argon2id';
+        /** Iterations. */
+        t: number;
+        /** Memory cost in KIBIBYTES — 65536 is 64 MiB. Not bytes, not MiB. */
+        m: number;
+        /** Parallelism. */
+        p: number;
+        /** base64url, 16 bytes. */
+        salt: string;
+    };
+    /** base64url, 12 bytes — AES-GCM's required nonce length. */
+    iv: string;
+    /** base64url ciphertext ‖ tag. */
+    ct: string;
+    /**
+     * The wallet's public identity, CLEARTEXT on purpose: it lets a tool say WHOSE
+     * vault this is, and list or match it, without anyone unlocking anything.
+     * A public value, never key material.
+     */
+    authPub?: string;
+}
+/** RFC 9106's recommended second option, and the security floor for this file. */
+export declare const KDF_DEFAULTS: {
+    readonly t: 3;
+    readonly m: 65536;
+    readonly p: 1;
+};
+export interface SealOpts {
+    wrap?: VaultBlob['wrap'];
+    authPub?: string;
+    /** Override the KDF cost. Lower values are for TESTS ONLY. */
+    kdf?: Partial<typeof KDF_DEFAULTS>;
+}
+/** Seal `secret` (the 24-word mnemonic) under `passphrase`. */
+export declare function sealVault(secret: string, passphrase: string, opts?: SealOpts): Promise<VaultBlob>;
+/**
+ * Open a sealed vault. Throws on a wrong passphrase, a tampered header, or an
+ * unsupported version — never returns a partial or a guess.
+ */
+export declare function openVault(blob: VaultBlob, passphrase: string): Promise<string>;
+/** True when this blob expects a biometric/keystore secret rather than a typed one. */
+export declare function isKeychainWrapped(blob: VaultBlob): boolean;
+/** A random passphrase for the `keychain` wrap — never shown, never typed. */
+export declare function mintKeychainSecret(): string;
+//# sourceMappingURL=vault-file.d.ts.map

package/dist/vault-file.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vault-file.d.ts","sourceRoot":"","sources":["../src/vault-file.ts"],"names":[],"mappings":"AA+BA,+EAA+E;AAC/E,MAAM,WAAW,SAAS;IACxB,oCAAoC;IACpC,CAAC,EAAE,CAAC,CAAA;IACJ;;;;;;;;;OASG;IACH,IAAI,EAAE,YAAY,GAAG,UAAU,CAAA;IAC/B,GAAG,EAAE;QACH,IAAI,EAAE,UAAU,CAAA;QAChB,kBAAkB;QAClB,CAAC,EAAE,MAAM,CAAA;QACT,sEAAsE;QACtE,CAAC,EAAE,MAAM,CAAA;QACT,mBAAmB;QACnB,CAAC,EAAE,MAAM,CAAA;QACT,2BAA2B;QAC3B,IAAI,EAAE,MAAM,CAAA;KACb,CAAA;IACD,6DAA6D;IAC7D,EAAE,EAAE,MAAM,CAAA;IACV,kCAAkC;IAClC,EAAE,EAAE,MAAM,CAAA;IACV;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAED,kFAAkF;AAClF,eAAO,MAAM,YAAY;;;;CAAqC,CAAA;AA4C9D,MAAM,WAAW,QAAQ;IACvB,IAAI,CAAC,EAAE,SAAS,CAAC,MAAM,CAAC,CAAA;IACxB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,8DAA8D;IAC9D,GAAG,CAAC,EAAE,OAAO,CAAC,OAAO,YAAY,CAAC,CAAA;CACnC;AAED,+DAA+D;AAC/D,wBAAsB,SAAS,CAC7B,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,MAAM,EAClB,IAAI,GAAE,QAAa,GAClB,OAAO,CAAC,SAAS,CAAC,CAqBpB;AAED;;;GAGG;AACH,wBAAsB,SAAS,CAAC,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAyBpF;AAED,uFAAuF;AACvF,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,SAAS,GAAG,OAAO,CAE1D;AAED,8EAA8E;AAC9E,wBAAgB,kBAAkB,IAAI,MAAM,CAE3C"}

package/dist/vault-file.js

@@ -0,0 +1,127 @@
+/**
+ * vault-file.ts — seal a 24-word mnemonic at rest, open it with a passphrase.
+ *
+ * *** CLIENT-ONLY BY CONSTRUCTION. DO NOT IMPORT THIS FROM A WORKER. ***
+ * Argon2id at 64 MiB is the whole point of the file and is larger than a
+ * Cloudflare Worker's entire 128 MB isolate — `openVault` there does not run
+ * slowly, it OOMs. `packages/sdk` is imported by `one.ie/web` and `channels`,
+ * both workerd, so this lives behind its own `@oneie/sdk/vault-file` subpath and
+ * nothing server-side may reach for it. Same rule, same reason, as the barrel
+ * note at the top of `wallet.ts`.
+ *
+ * WHY ARGON2id AND NOT HKDF. Everything else in this repo derives from
+ * high-entropy input — a passkey PRF output, BIP-39 entropy — where HKDF is
+ * exactly right. A passphrase is the opposite: low entropy, guessable, and the
+ * attacker has the file. HKDF has NO work factor, so sealing a wallet with it
+ * would make an offline dictionary attack as fast as the hash. The work factor
+ * IS the security here; the salt only stops one table serving every user.
+ *
+ * WHY THE PARAMS ARE AUTHENTICATED. `kdf` travels in cleartext so the file can
+ * be opened on a machine that has never seen it. That makes it attacker-editable,
+ * so it is bound as AEAD associated data: rewrite `t:3` to `t:1` hoping for a
+ * cheaper crack and the tag check fails instead of quietly handing back a weaker
+ * derivation. The version and `wrap` ride the same AAD for the same reason.
+ *
+ * WHAT THIS DOES NOT DEFEND. Code running in this process. An encrypted file is
+ * worth nothing against a malicious dependency that reads the mnemonic after
+ * `openVault` returns it — encryption at rest defends against a stolen disk, not
+ * against a hostile neighbour in the same address space.
+ */
+import { argon2id } from '@noble/hashes/argon2.js';
+/** RFC 9106's recommended second option, and the security floor for this file. */
+export const KDF_DEFAULTS = { t: 3, m: 65_536, p: 1 };
+const enc = new TextEncoder();
+const dec = new TextDecoder();
+function b64u(bytes) {
+    let s = '';
+    for (let i = 0; i < bytes.length; i++)
+        s += String.fromCharCode(bytes[i]);
+    return btoa(s).replace(/\+/g, '-').replace(/\//g, '_').replace(/=+$/, '');
+}
+function unb64u(s) {
+    const b = atob(s.replace(/-/g, '+').replace(/_/g, '/'));
+    const out = new Uint8Array(b.length);
+    for (let i = 0; i < b.length; i++)
+        out[i] = b.charCodeAt(i);
+    return out;
+}
+/**
+ * The bytes bound as AEAD associated data.
+ *
+ * Serialised with an EXPLICIT key order rather than `JSON.stringify(header)`:
+ * object key order is an implementation detail, and if it ever differed between
+ * seal and open every vault would fail to decrypt with a tag error that looks
+ * like corruption. Naming the order makes the AAD a stable contract.
+ */
+function aad(blob) {
+    const k = blob.kdf;
+    return enc.encode(JSON.stringify([blob.v, blob.wrap, k.name, k.t, k.m, k.p, k.salt, blob.authPub ?? '']));
+}
+async function aesKey(passphrase, salt, kdf) {
+    // argon2id's `m` is KIBIBYTES. Passing 64 here instead of 65536 silently
+    // derives with 64 KiB — a work factor 1000x too small, and everything still
+    // "works", which is why the unit is named in the type above.
+    const raw = argon2id(enc.encode(passphrase), salt, { t: kdf.t, m: kdf.m, p: kdf.p, dkLen: 32 });
+    return crypto.subtle.importKey('raw', raw, { name: 'AES-GCM' }, false, [
+        'encrypt',
+        'decrypt',
+    ]);
+}
+/** Seal `secret` (the 24-word mnemonic) under `passphrase`. */
+export async function sealVault(secret, passphrase, opts = {}) {
+    if (!secret)
+        throw new Error('vault: refusing to seal an empty secret');
+    if (!passphrase)
+        throw new Error('vault: refusing to seal with an empty passphrase');
+    const salt = crypto.getRandomValues(new Uint8Array(16));
+    const iv = crypto.getRandomValues(new Uint8Array(12));
+    const kdf = {
+        name: 'argon2id',
+        t: opts.kdf?.t ?? KDF_DEFAULTS.t,
+        m: opts.kdf?.m ?? KDF_DEFAULTS.m,
+        p: opts.kdf?.p ?? KDF_DEFAULTS.p,
+        salt: b64u(salt),
+    };
+    const header = { v: 1, wrap: opts.wrap ?? 'passphrase', kdf, authPub: opts.authPub };
+    const key = await aesKey(passphrase, salt, kdf);
+    const ct = await crypto.subtle.encrypt({ name: 'AES-GCM', iv: iv, additionalData: aad(header) }, key, enc.encode(secret));
+    return { ...header, iv: b64u(iv), ct: b64u(new Uint8Array(ct)) };
+}
+/**
+ * Open a sealed vault. Throws on a wrong passphrase, a tampered header, or an
+ * unsupported version — never returns a partial or a guess.
+ */
+export async function openVault(blob, passphrase) {
+    if (blob?.v !== 1)
+        throw new Error(`vault: unsupported version ${String(blob?.v)}`);
+    if (blob.kdf?.name !== 'argon2id')
+        throw new Error(`vault: unsupported kdf ${String(blob.kdf?.name)}`);
+    if (!passphrase)
+        throw new Error('vault: passphrase required');
+    const key = await aesKey(passphrase, unb64u(blob.kdf.salt), blob.kdf);
+    let plain;
+    try {
+        plain = await crypto.subtle.decrypt({
+            name: 'AES-GCM',
+            iv: unb64u(blob.iv),
+            additionalData: aad(blob),
+        }, key, unb64u(blob.ct));
+    }
+    catch {
+        // One message for a wrong passphrase AND a tampered header, deliberately:
+        // distinguishing them tells an attacker editing the file which edits the tag
+        // is catching, and the user's next action ("check the passphrase") is the
+        // same either way.
+        throw new Error('vault: could not open — wrong passphrase, or the file has been altered');
+    }
+    return dec.decode(plain);
+}
+/** True when this blob expects a biometric/keystore secret rather than a typed one. */
+export function isKeychainWrapped(blob) {
+    return blob.wrap === 'keychain';
+}
+/** A random passphrase for the `keychain` wrap — never shown, never typed. */
+export function mintKeychainSecret() {
+    return b64u(crypto.getRandomValues(new Uint8Array(32)));
+}
+//# sourceMappingURL=vault-file.js.map

package/dist/vault-file.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vault-file.js","sourceRoot":"","sources":["../src/vault-file.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAA;AAwClD,kFAAkF;AAClF,MAAM,CAAC,MAAM,YAAY,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,EAAW,CAAA;AAE9D,MAAM,GAAG,GAAG,IAAI,WAAW,EAAE,CAAA;AAC7B,MAAM,GAAG,GAAG,IAAI,WAAW,EAAE,CAAA;AAE7B,SAAS,IAAI,CAAC,KAAiB;IAC7B,IAAI,CAAC,GAAG,EAAE,CAAA;IACV,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,CAAC,IAAI,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAA;IAC1E,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;AAC3E,CAAC;AAED,SAAS,MAAM,CAAC,CAAS;IACvB,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAA;IACvD,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAA;IACpC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAA;IAC3D,OAAO,GAAG,CAAA;AACZ,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,GAAG,CAAC,IAAuD;IAClE,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAA;IAClB,OAAO,GAAG,CAAC,MAAM,CACf,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CACvF,CAAA;AACH,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,UAAkB,EAAE,IAAgB,EAAE,GAAqB;IAC/E,yEAAyE;IACzE,4EAA4E;IAC5E,6DAA6D;IAC7D,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAA;IAC/F,OAAO,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,GAAmB,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE;QACrF,SAAS;QACT,SAAS;KACV,CAAC,CAAA;AACJ,CAAC;AASD,+DAA+D;AAC/D,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,MAAc,EACd,UAAkB,EAClB,OAAiB,EAAE;IAEnB,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAA;IACvE,IAAI,CAAC,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAA;IAEpF,MAAM,IAAI,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAA;IACvD,MAAM,EAAE,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAA;IACrD,MAAM,GAAG,GAAqB;QAC5B,IAAI,EAAE,UAAU;QAChB,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,YAAY,CAAC,CAAC;QAChC,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,YAAY,CAAC,CAAC;QAChC,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,YAAY,CAAC,CAAC;QAChC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC;KACjB,CAAA;IACD,MAAM,MAAM,GAAG,EAAE,CAAC,EAAE,CAAU,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,IAAK,YAAsB,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAA;IACxG,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,UAAU,EAAE,IAAI,EAAE,GAAG,CAAC,CAAA;IAC/C,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CACpC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,EAAkB,EAAE,cAAc,EAAE,GAAG,CAAC,MAAM,CAAiB,EAAE,EACxF,GAAG,EACH,GAAG,CAAC,MAAM,CAAC,MAAM,CAAiB,CACnC,CAAA;IACD,OAAO,EAAE,GAAG,MAAM,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,EAAE,CAAA;AAClE,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,IAAe,EAAE,UAAkB;IACjE,IAAI,IAAI,EAAE,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,CAAA;IACnF,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,KAAK,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC,CAAA;IACtG,IAAI,CAAC,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAA;IAE9D,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAA;IACrE,IAAI,KAAkB,CAAA;IACtB,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CACjC;YACE,IAAI,EAAE,SAAS;YACf,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAiB;YACnC,cAAc,EAAE,GAAG,CAAC,IAAI,CAAiB;SAC1C,EACD,GAAG,EACH,MAAM,CAAC,IAAI,CAAC,EAAE,CAAiB,CAChC,CAAA;IACH,CAAC;IAAC,MAAM,CAAC;QACP,0EAA0E;QAC1E,6EAA6E;QAC7E,0EAA0E;QAC1E,mBAAmB;QACnB,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAA;IAC3F,CAAC;IACD,OAAO,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AAC1B,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,iBAAiB,CAAC,IAAe;IAC/C,OAAO,IAAI,CAAC,IAAI,KAAK,UAAU,CAAA;AACjC,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,kBAAkB;IAChC,OAAO,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;AACzD,CAAC"}

package/dist/work-contract-grammar.json

@@ -317,6 +317,9 @@
         "market:search",
         "market:settle",
         "market:verify",
+        "media:generate",
+        "media:list",
+        "media:upload",
         "message:send",
         "meta:catalog",
         "meta:entitlements",
@@ -334,7 +337,9 @@
         "order:claim",
         "order:install",
         "orders:status",
+        "pages:bulk",
         "pages:create",
+        "pages:delete",
         "pages:edit",
         "pages:fill-pack",
         "pages:fill-pack-extract",
@@ -342,6 +347,7 @@
         "pages:publish",
         "pages:publish-pack",
         "pages:restore",
+        "pages:unpublish",
         "pages:versions",
         "pages:view",
         "pay:weight",
@@ -427,6 +433,7 @@
         "thread:append",
         "tools:composio",
         "tools:connect",
+        "ui:navigate",
         "variants:archive",
         "variants:create",
         "variants:list",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oneie/sdk",
-  "version": "0.15.1",
+  "version": "0.16.0",
   "description": "ONE substrate SDK — signals, units, persist, launch handoff.",
   "type": "module",
   "main": "./dist/index.js",
@@ -10,6 +10,10 @@
       "types": "./dist/index.d.ts",
       "import": "./dist/index.js"
     },
+    "./vault-file": {
+      "types": "./dist/vault-file.d.ts",
+      "import": "./dist/vault-file.js"
+    },
     "./urls": "./dist/urls.js",
     "./storage": "./dist/storage.js",
     "./handoff": "./dist/handoff.js",

package/dist/.build-fingerprint

@@ -1 +0,0 @@
-607cc4bcf4b365e0f88ee97540d646e974cc7c331fd68fe5eaeb15c005db2b96