@private.me/xbind 3.0.0 → 3.0.2

package/README.md

@@ -1,7 +1,7 @@
 # @private.me/xbind
 
 ![npm version](https://img.shields.io/npm/v/@private.me/xbind)
-![version](https://img.shields.io/badge/version-3.0.0-blue)
+![version](https://img.shields.io/badge/version-3.0.2-blue)
 ![tests](https://img.shields.io/badge/tests-2762%20passing-brightgreen)
 ![TypeScript](https://img.shields.io/badge/TypeScript-strict-blue)
 ![license](https://img.shields.io/badge/license-Proprietary-blue)
@@ -12,7 +12,7 @@ Build AI agents that communicate securely using ML-DSA-65 DID identity, ML-KEM-7
 
 Part of the **Private.Me** platform—where APIs have keys, but ACIs have identity.
 
-**Version 3.0.0** — **Major Features:** Full Control IP Protection (PLAN-13) - Vault Store architecture with payment-gated algorithm delivery. Store Front (npm) contains Share 1 only, Vault Store (EC2) contains Share 2 (payment-gated). Runtime crypto loading, 4-layer security (DID auth + usage quotas + rate limiting + audit logging). Usage-based model: Free tier 100K ops/month (includes vault access), Pro tier unlimited. Previous v1.4.2: Runtime compatibility, API enhancements. Previous v1.3.5: ML-KEM deterministic key generation fix.
+**Version 3.0.2** — **Major Features:** Full Control IP Protection (PLAN-13) - Vault Store architecture with payment-gated algorithm delivery. Store Front (npm) contains Share 1 only, Vault Store (EC2) contains Share 2 (payment-gated). Runtime crypto loading, 4-layer security (DID auth + usage quotas + rate limiting + audit logging). Usage-based model: Free tier 100K ops/month (includes vault access), Pro tier unlimited. Previous v1.4.2: Runtime compatibility, API enhancements. Previous v1.3.5: ML-KEM deterministic key generation fix.
 
 ## Install
 
@@ -97,8 +97,20 @@ async function getSeed(): Promise<string> {
 }
 
 // Create agent from keychain
+import { Agent, HttpTrustRegistry, HttpsTransportAdapter } from '@private.me/xbind';
+
 const seed = await getSeed();
-const agent = await Agent.fromSeed(seed);
+const result = await Agent.fromSeed(Buffer.from(seed, 'hex'), {
+  registry: new HttpTrustRegistry({ baseUrl: 'https://private.me/registry' }),
+  transport: new HttpsTransportAdapter({ baseUrl: 'https://private.me/relay' }),
+  postQuantumSig: false
+});
+
+if (!result.ok) {
+  throw new Error(`Failed to create agent: ${result.error.message}`);
+}
+
+const agent = result.value;
 ```
 
 #### Windows: Credential Manager (DPAPI)
@@ -111,10 +123,22 @@ import keytar from 'keytar';
 await keytar.setPassword('xbind', 'agent-seed', seed);
 
 // Retrieve seed from Windows Credential Manager
+import { Agent, HttpTrustRegistry, HttpsTransportAdapter } from '@private.me/xbind';
+
 const seed = await keytar.getPassword('xbind', 'agent-seed');
 if (!seed) throw new Error('Seed not found in credential store');
 
-const agent = await Agent.fromSeed(seed);
+const result = await Agent.fromSeed(Buffer.from(seed, 'hex'), {
+  registry: new HttpTrustRegistry({ baseUrl: 'https://private.me/registry' }),
+  transport: new HttpsTransportAdapter({ baseUrl: 'https://private.me/relay' }),
+  postQuantumSig: false
+});
+
+if (!result.ok) {
+  throw new Error(`Failed to create agent: ${result.error.message}`);
+}
+
+const agent = result.value;
 ```
 
 #### Linux: Secret Service API (gnome-keyring, KWallet)
@@ -126,10 +150,22 @@ import keytar from 'keytar';
 await keytar.setPassword('xbind', 'agent-seed', seed);
 
 // Retrieve seed from Secret Service
+import { Agent, HttpTrustRegistry, HttpsTransportAdapter } from '@private.me/xbind';
+
 const seed = await keytar.getPassword('xbind', 'agent-seed');
 if (!seed) throw new Error('Seed not found in Secret Service');
 
-const agent = await Agent.fromSeed(seed);
+const result = await Agent.fromSeed(Buffer.from(seed, 'hex'), {
+  registry: new HttpTrustRegistry({ baseUrl: 'https://private.me/registry' }),
+  transport: new HttpsTransportAdapter({ baseUrl: 'https://private.me/relay' }),
+  postQuantumSig: false
+});
+
+if (!result.ok) {
+  throw new Error(`Failed to create agent: ${result.error.message}`);
+}
+
+const agent = result.value;
 ```
 
 **Cross-platform library:**
@@ -157,11 +193,23 @@ const encryptedSeed = await kms.send(new EncryptCommand({
 await db.run('INSERT INTO config VALUES (?, ?)', ['seed', encryptedSeed.CiphertextBlob]);
 
 // Decrypt seed with KMS at runtime
+import { Agent, HttpTrustRegistry, HttpsTransportAdapter } from '@private.me/xbind';
+
 const decryptedSeed = await kms.send(new DecryptCommand({
   CiphertextBlob: encryptedSeedFromDB
 }));
 
-const agent = await Agent.fromSeed(decryptedSeed.Plaintext.toString());
+const result = await Agent.fromSeed(Buffer.from(decryptedSeed.Plaintext), {
+  registry: new HttpTrustRegistry({ baseUrl: 'https://private.me/registry' }),
+  transport: new HttpsTransportAdapter({ baseUrl: 'https://private.me/relay' }),
+  postQuantumSig: false
+});
+
+if (!result.ok) {
+  throw new Error(`Failed to create agent: ${result.error.message}`);
+}
+
+const agent = result.value;
 ```
 
 **HSM Benefits:**
@@ -563,7 +611,7 @@ Zero key management, zero cascade failures, zero bearer credentials. Cryptograph
 
 ## Bundle Size Optimization (Tree-Shaking)
 
-**New in v3.0.0:** Full Control IP Protection - cryptographic algorithms delivered via payment-gated Vault Store. Share 1 in npm (useless alone), Share 2 in EC2 (completes algorithm). Information-theoretic security for proprietary IP.
+**New in v3.0.2:** Full Control IP Protection - cryptographic algorithms delivered via payment-gated Vault Store. Share 1 in npm (useless alone), Share 2 in EC2 (completes algorithm). Information-theoretic security for proprietary IP.
 
 ### Full Import (Convenience)