@polpo-ai/node 0.11.1

package/dist/vault/encrypted-store.d.ts

@@ -0,0 +1,45 @@
+/**
+ * Encrypted vault store — AES-256-GCM encrypted credential storage.
+ *
+ * File-based implementation of VaultStore.
+ * Stores agent vault credentials in `.polpo/vault.enc` (per-project).
+ * Encryption key sourced from:
+ *   1. POLPO_VAULT_KEY env var (hex-encoded 32 bytes) — for CI/Docker
+ *   2. ~/.polpo/vault.key file (auto-generated on first use) — for local dev
+ *
+ * File format: 12-byte IV | 16-byte auth tag | ciphertext
+ * Plaintext is JSON: Record<agentName, Record<serviceName, VaultEntry>>
+ */
+import type { VaultEntry } from "@polpo-ai/core/types";
+import type { VaultStore } from "@polpo-ai/core/vault-store";
+export declare class EncryptedVaultStore implements VaultStore {
+    private readonly vaultPath;
+    private readonly key;
+    private data;
+    constructor(polpoDir: string);
+    get(agent: string, service: string): Promise<VaultEntry | undefined>;
+    getAllForAgent(agent: string): Promise<Record<string, VaultEntry>>;
+    set(agent: string, service: string, entry: VaultEntry): Promise<void>;
+    patch(agent: string, service: string, partial: {
+        type?: VaultEntry["type"];
+        label?: string;
+        credentials?: Record<string, string>;
+    }): Promise<string[]>;
+    remove(agent: string, service: string): Promise<boolean>;
+    list(agent: string): Promise<Array<{
+        service: string;
+        type: VaultEntry["type"];
+        label?: string;
+        keys: string[];
+    }>>;
+    hasEntries(agent: string): Promise<boolean>;
+    migrateFromConfigs(agents: Array<{
+        name: string;
+        vault?: Record<string, VaultEntry>;
+    }>): Promise<number>;
+    renameAgent(oldName: string, newName: string): Promise<void>;
+    removeAgent(agent: string): Promise<void>;
+    private loadFromDisk;
+    private persist;
+}
+//# sourceMappingURL=encrypted-store.d.ts.map

package/dist/vault/encrypted-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"encrypted-store.d.ts","sourceRoot":"","sources":["../../src/vault/encrypted-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAIH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAc7D,qBAAa,mBAAoB,YAAW,UAAU;IACpD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAS;IAC7B,OAAO,CAAC,IAAI,CAAY;gBAEZ,QAAQ,EAAE,MAAM;IAQtB,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC;IAIpE,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAIlE,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAMrE,KAAK,CACT,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,EACf,OAAO,EAAE;QAAE,IAAI,CAAC,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KAAE,GAC3F,OAAO,CAAC,MAAM,EAAE,CAAC;IAcd,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAUxD,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAC;IAWlH,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAI3C,kBAAkB,CAAC,MAAM,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAA;KAAE,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC;IAuBxG,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAO5D,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQ/C,OAAO,CAAC,YAAY;IAcpB,OAAO,CAAC,OAAO;CAehB"}

package/dist/vault/encrypted-store.js

@@ -0,0 +1,149 @@
+/**
+ * Encrypted vault store — AES-256-GCM encrypted credential storage.
+ *
+ * File-based implementation of VaultStore.
+ * Stores agent vault credentials in `.polpo/vault.enc` (per-project).
+ * Encryption key sourced from:
+ *   1. POLPO_VAULT_KEY env var (hex-encoded 32 bytes) — for CI/Docker
+ *   2. ~/.polpo/vault.key file (auto-generated on first use) — for local dev
+ *
+ * File format: 12-byte IV | 16-byte auth tag | ciphertext
+ * Plaintext is JSON: Record<agentName, Record<serviceName, VaultEntry>>
+ */
+import { existsSync, readFileSync, writeFileSync, mkdirSync, chmodSync } from "node:fs";
+import { join } from "node:path";
+import { resolveKey, encrypt, decrypt } from "@polpo-ai/vault-crypto";
+// ── Constants ──
+const VAULT_FILENAME = "vault.enc";
+// ── EncryptedVaultStore ──
+export class EncryptedVaultStore {
+    vaultPath;
+    key;
+    data;
+    constructor(polpoDir) {
+        this.vaultPath = join(polpoDir, VAULT_FILENAME);
+        this.key = resolveKey();
+        this.data = this.loadFromDisk();
+    }
+    // ── VaultStore implementation ──
+    async get(agent, service) {
+        return this.data[agent]?.[service];
+    }
+    async getAllForAgent(agent) {
+        return this.data[agent] ?? {};
+    }
+    async set(agent, service, entry) {
+        if (!this.data[agent])
+            this.data[agent] = {};
+        this.data[agent][service] = entry;
+        this.persist();
+    }
+    async patch(agent, service, partial) {
+        const existing = await this.get(agent, service);
+        if (!existing && !partial.type) {
+            throw new Error(`No vault entry "${service}" for agent "${agent}" — type is required to create a new entry.`);
+        }
+        const merged = {
+            type: partial.type ?? existing?.type ?? "custom",
+            ...(partial.label !== undefined ? { label: partial.label } : existing?.label ? { label: existing.label } : {}),
+            credentials: { ...(existing?.credentials ?? {}), ...(partial.credentials ?? {}) },
+        };
+        await this.set(agent, service, merged);
+        return Object.keys(merged.credentials);
+    }
+    async remove(agent, service) {
+        if (!this.data[agent]?.[service])
+            return false;
+        delete this.data[agent][service];
+        if (Object.keys(this.data[agent]).length === 0) {
+            delete this.data[agent];
+        }
+        this.persist();
+        return true;
+    }
+    async list(agent) {
+        const entries = this.data[agent];
+        if (!entries)
+            return [];
+        return Object.entries(entries).map(([service, entry]) => ({
+            service,
+            type: entry.type,
+            label: entry.label,
+            keys: Object.keys(entry.credentials),
+        }));
+    }
+    async hasEntries(agent) {
+        return !!this.data[agent] && Object.keys(this.data[agent]).length > 0;
+    }
+    async migrateFromConfigs(agents) {
+        let migrated = 0;
+        for (const agent of agents) {
+            if (!agent.vault)
+                continue;
+            for (const [service, entry] of Object.entries(agent.vault)) {
+                // Skip if already in encrypted store
+                if (this.data[agent.name]?.[service])
+                    continue;
+                // Move to encrypted store
+                await this.set(agent.name, service, entry);
+                migrated++;
+            }
+            // Strip credential VALUES from the config (keep metadata)
+            for (const [service, entry] of Object.entries(agent.vault)) {
+                const stripped = {};
+                for (const key of Object.keys(entry.credentials)) {
+                    stripped[key] = ""; // Empty string signals "stored in vault"
+                }
+                agent.vault[service] = { ...entry, credentials: stripped };
+            }
+        }
+        return migrated;
+    }
+    async renameAgent(oldName, newName) {
+        if (!this.data[oldName])
+            return;
+        this.data[newName] = this.data[oldName];
+        delete this.data[oldName];
+        this.persist();
+    }
+    async removeAgent(agent) {
+        if (!this.data[agent])
+            return;
+        delete this.data[agent];
+        this.persist();
+    }
+    // ── Internal ──
+    loadFromDisk() {
+        if (!existsSync(this.vaultPath))
+            return {};
+        try {
+            const blob = readFileSync(this.vaultPath);
+            const plain = decrypt(blob, this.key);
+            return JSON.parse(plain.toString("utf-8"));
+        }
+        catch (err) {
+            // If decryption fails (wrong key, corrupted), start fresh but warn
+            const msg = err instanceof Error ? err.message : String(err);
+            console.error(`[vault] Failed to decrypt ${this.vaultPath}: ${msg}. Starting with empty vault.`);
+            return {};
+        }
+    }
+    persist() {
+        const json = JSON.stringify(this.data, null, 2);
+        const plain = Buffer.from(json, "utf-8");
+        const blob = encrypt(plain, this.key);
+        // Ensure directory exists
+        const dir = this.vaultPath.replace(/[/\\][^/\\]+$/, "");
+        if (!existsSync(dir))
+            mkdirSync(dir, { recursive: true });
+        writeFileSync(this.vaultPath, blob);
+        // Restrictive permissions
+        try {
+            chmodSync(this.vaultPath, 0o600);
+        }
+        catch {
+            // chmod may fail on Windows — non-fatal
+        }
+    }
+}
+//# sourceMappingURL=encrypted-store.js.map

package/dist/vault/encrypted-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"encrypted-store.js","sourceRoot":"","sources":["../../src/vault/encrypted-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACxF,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAGjC,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AAEtE,kBAAkB;AAElB,MAAM,cAAc,GAAG,WAAW,CAAC;AAOnC,4BAA4B;AAE5B,MAAM,OAAO,mBAAmB;IACb,SAAS,CAAS;IAClB,GAAG,CAAS;IACrB,IAAI,CAAY;IAExB,YAAY,QAAgB;QAC1B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;QAChD,IAAI,CAAC,GAAG,GAAG,UAAU,EAAE,CAAC;QACxB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;IAClC,CAAC;IAED,kCAAkC;IAElC,KAAK,CAAC,GAAG,CAAC,KAAa,EAAE,OAAe;QACtC,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,KAAa;QAChC,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,KAAa,EAAE,OAAe,EAAE,KAAiB;QACzD,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QAC7C,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC;QAClC,IAAI,CAAC,OAAO,EAAE,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,KAAK,CACT,KAAa,EACb,OAAe,EACf,OAA4F;QAE5F,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAChD,IAAI,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,mBAAmB,OAAO,gBAAgB,KAAK,6CAA6C,CAAC,CAAC;QAChH,CAAC;QACD,MAAM,MAAM,GAAe;YACzB,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,QAAQ,EAAE,IAAI,IAAI,QAAQ;YAChD,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9G,WAAW,EAAE,EAAE,GAAG,CAAC,QAAQ,EAAE,WAAW,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,WAAW,IAAI,EAAE,CAAC,EAAE;SAClF,CAAC;QACF,MAAM,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QACvC,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACzC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAAa,EAAE,OAAe;QACzC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC;YAAE,OAAO,KAAK,CAAC;QAC/C,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC;QACjC,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/C,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1B,CAAC;QACD,IAAI,CAAC,OAAO,EAAE,CAAC;QACf,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,KAAa;QACtB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjC,IAAI,CAAC,OAAO;YAAE,OAAO,EAAE,CAAC;QACxB,OAAO,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;YACxD,OAAO;YACP,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC;SACrC,CAAC,CAAC,CAAC;IACN,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,KAAa;QAC5B,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;IACxE,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,MAAmE;QAC1F,IAAI,QAAQ,GAAG,CAAC,CAAC;QACjB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,IAAI,CAAC,KAAK,CAAC,KAAK;gBAAE,SAAS;YAC3B,KAAK,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC3D,qCAAqC;gBACrC,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;oBAAE,SAAS;gBAC/C,0BAA0B;gBAC1B,MAAM,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;gBAC3C,QAAQ,EAAE,CAAC;YACb,CAAC;YACD,0DAA0D;YAC1D,KAAK,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC3D,MAAM,QAAQ,GAA2B,EAAE,CAAC;gBAC5C,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;oBACjD,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,yCAAyC;gBAC/D,CAAC;gBACD,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC;YAC7D,CAAC;QACH,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,OAAe,EAAE,OAAe;QAChD,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,OAAO;QAChC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACxC,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC1B,IAAI,CAAC,OAAO,EAAE,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,KAAa;QAC7B,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO;QAC9B,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxB,IAAI,CAAC,OAAO,EAAE,CAAC;IACjB,CAAC;IAED,iBAAiB;IAET,YAAY;QAClB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC;YAAE,OAAO,EAAE,CAAC;QAC3C,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC1C,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;YACtC,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAc,CAAC;QAC1D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,mEAAmE;YACnE,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,OAAO,CAAC,KAAK,CAAC,6BAA6B,IAAI,CAAC,SAAS,KAAK,GAAG,8BAA8B,CAAC,CAAC;YACjG,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAEO,OAAO;QACb,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAChD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACzC,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QACtC,0BAA0B;QAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;QACxD,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QACpC,0BAA0B;QAC1B,IAAI,CAAC;YACH,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QACnC,CAAC;QAAC,MAAM,CAAC;YACP,wCAAwC;QAC1C,CAAC;IACH,CAAC;CACF"}

package/dist/vault/index.d.ts

@@ -0,0 +1,4 @@
+export { resolveEnvVar, resolveVaultCredentials, resolveAgentVault, type ResolvedVault, type SmtpCredentials, type ImapCredentials, } from "./resolver.js";
+export { EncryptedVaultStore } from "./encrypted-store.js";
+export type { VaultStore } from "@polpo-ai/core/vault-store";
+//# sourceMappingURL=index.d.ts.map

package/dist/vault/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/vault/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,aAAa,EACb,uBAAuB,EACvB,iBAAiB,EACjB,KAAK,aAAa,EAClB,KAAK,eAAe,EACpB,KAAK,eAAe,GACrB,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,YAAY,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC"}

package/dist/vault/index.js

@@ -0,0 +1,3 @@
+export { resolveEnvVar, resolveVaultCredentials, resolveAgentVault, } from "./resolver.js";
+export { EncryptedVaultStore } from "./encrypted-store.js";
+//# sourceMappingURL=index.js.map

package/dist/vault/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/vault/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,aAAa,EACb,uBAAuB,EACvB,iBAAiB,GAIlB,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC"}

package/dist/vault/resolver.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Vault resolver — re-export shim.
+ * Source of truth is packages/core/src/vault-resolver.ts (@polpo-ai/core),
+ * so the shell, @polpo-ai/tools, and the cloud data plane share one
+ * definition of ResolvedVault.
+ */
+export { resolveEnvVar, resolveVaultCredentials, resolveAgentVault, type ResolvedVault, type SmtpCredentials, type ImapCredentials, } from "@polpo-ai/core";
+//# sourceMappingURL=resolver.d.ts.map

package/dist/vault/resolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolver.d.ts","sourceRoot":"","sources":["../../src/vault/resolver.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EACL,aAAa,EACb,uBAAuB,EACvB,iBAAiB,EACjB,KAAK,aAAa,EAClB,KAAK,eAAe,EACpB,KAAK,eAAe,GACrB,MAAM,gBAAgB,CAAC"}

package/dist/vault/resolver.js

@@ -0,0 +1,8 @@
+/**
+ * Vault resolver — re-export shim.
+ * Source of truth is packages/core/src/vault-resolver.ts (@polpo-ai/core),
+ * so the shell, @polpo-ai/tools, and the cloud data plane share one
+ * definition of ResolvedVault.
+ */
+export { resolveEnvVar, resolveVaultCredentials, resolveAgentVault, } from "@polpo-ai/core";
+//# sourceMappingURL=resolver.js.map

package/dist/vault/resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolver.js","sourceRoot":"","sources":["../../src/vault/resolver.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EACL,aAAa,EACb,uBAAuB,EACvB,iBAAiB,GAIlB,MAAM,gBAAgB,CAAC"}

package/package.json

@@ -0,0 +1,76 @@
+{
+  "name": "@polpo-ai/node",
+  "version": "0.11.1",
+  "description": "Polpo Node.js runtime — orchestrator wiring, adapters, server assembly, runner entry. The composition root behind the polpo-ai package.",
+  "type": "module",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    },
+    "./core": {
+      "types": "./dist/core/index.d.ts",
+      "import": "./dist/core/index.js"
+    },
+    "./server": {
+      "types": "./dist/server/index.d.ts",
+      "import": "./dist/server/index.js"
+    },
+    "./assessment": {
+      "types": "./dist/assessment/index.d.ts",
+      "import": "./dist/assessment/index.js"
+    },
+    "./runner": {
+      "import": "./dist/core/runner.js"
+    }
+  },
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "dependencies": {
+    "@ai-sdk/gateway": "^3.0.83",
+    "@ai-sdk/openai": "^3.0.48",
+    "@hono/node-server": "^1.19.9",
+    "@hono/zod-openapi": "^1.2.2",
+    "@sinclair/typebox": "^0.34.48",
+    "ai": "^6.0.141",
+    "chalk": "^5.4.1",
+    "commander": "^13.1.0",
+    "execa": "^9.6.1",
+    "hono": "^4.11.9",
+    "nanoid": "^5.1.2",
+    "yaml": "^2.7.0",
+    "zod": "^4.3.6",
+    "@polpo-ai/file-stores": "0.11.1",
+    "@polpo-ai/core": "0.11.1",
+    "@polpo-ai/server": "0.11.1",
+    "@polpo-ai/tools": "0.11.1",
+    "@polpo-ai/vault-crypto": "0.11.1",
+    "@polpo-ai/llm": "0.11.1"
+  },
+  "optionalDependencies": {
+    "better-sqlite3": "^12.6.2",
+    "drizzle-orm": "^0.44.0",
+    "nodemailer": "^8.0.1",
+    "playwright-core": "^1.52.0",
+    "postgres": "^3.4.0",
+    "@polpo-ai/drizzle": "0.11.1"
+  },
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/lumea-labs/polpo.git",
+    "directory": "packages/node"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "build": "tsc",
+    "dev": "tsc --watch",
+    "test": "vitest run"
+  }
+}