@the-ai-company/cbio-node-runtime 1.72.0 → 1.74.0

package/dist/runtime/bootstrap.js

@@ -1,5 +1,5 @@
 import { createVaultCore } from "../vault-core/core.js";
-import { createPersistentVaultCoreDependencies, } from "../vault-core/index.js";
+import { createPersistentVaultCoreDependencies, createVaultCoreDependencies, } from "../vault-core/index.js";
 import { deriveVaultWorkingKeyFromPassword } from "../protocol/crypto.js";
 import { wrapVaultCoreAsVaultService, } from "../vault-ingress/index.js";
 import { createPrefixedStorage } from "../storage/prefix.js";
@@ -44,8 +44,14 @@ async function verifyVaultPassword(storage, vault_id, password) {
         return false;
     }
     const vaultWorkingKey = deriveVaultWorkingKeyFromPassword(normalizedPassword, vault_id);
-    const profile = await readVaultProfile(storage, vaultWorkingKey, vault_id);
-    return profile !== null;
+    try {
+        const profile = await readVaultProfile(storage, vaultWorkingKey, vault_id);
+        return profile !== null;
+    }
+    catch {
+        // Password verification should be boolean-only and never leak low-level crypto errors.
+        return false;
+    }
 }
 export async function createVault(storageOrOptions, maybeOptions) {
     const { storage: workspaceStorage, options } = resolveStorage(storageOrOptions, maybeOptions);
@@ -55,11 +61,16 @@ export async function createVault(storageOrOptions, maybeOptions) {
     const vault_id = createVaultIdValue();
     const storage = createPrefixedStorage(workspaceStorage, vaultStoragePrefix(vault_id));
     const vaultWorkingKey = deriveVaultWorkingKeyFromPassword(options.password, vault_id);
-    const deps = createPersistentVaultCoreDependencies(storage, {
-        ...options,
-        vault_id,
-        vaultWorkingKey,
-    });
+    const deps = (typeof storage.getBaseDir === "function" && storage.getBaseDir())
+        ? createPersistentVaultCoreDependencies(storage, {
+            ...options,
+            vault_id,
+            vaultWorkingKey,
+        })
+        : createVaultCoreDependencies({
+            ...options,
+            vault_id,
+        });
     const core = createVaultCore(deps);
     const nickname = options.nickname?.trim() ? options.nickname.trim() : undefined;
     // Single encrypted profile block. Hold the password to see everything.
@@ -80,11 +91,16 @@ export async function recoverVault(storageOrOptions, maybeOptions) {
     const { storage: workspaceStorage, options } = resolveStorage(storageOrOptions, maybeOptions);
     const storage = createPrefixedStorage(workspaceStorage, vaultStoragePrefix(options.vault_id));
     const vaultWorkingKey = deriveVaultWorkingKeyFromPassword(options.password, options.vault_id);
-    const deps = createPersistentVaultCoreDependencies(storage, {
-        ...options,
-        vault_id: options.vault_id,
-        vaultWorkingKey,
-    });
+    const deps = (typeof storage.getBaseDir === "function" && storage.getBaseDir())
+        ? createPersistentVaultCoreDependencies(storage, {
+            ...options,
+            vault_id: options.vault_id,
+            vaultWorkingKey,
+        })
+        : createVaultCoreDependencies({
+            ...options,
+            vault_id: options.vault_id,
+        });
     const core = createVaultCore(deps);
     const profile = await readVaultProfile(storage, vaultWorkingKey, options.vault_id);
     if (!profile) {
@@ -126,7 +142,7 @@ export async function listVaults(storage) {
  * Updates the metadata (like nickname) of an existing vault.
  */
 export async function updateVaultMetadata(vault, options) {
-    const vault_id = vault.core.vault_id.value;
+    const vault_id = vault.core.vault_id;
     const vaultWorkingKey = deriveVaultWorkingKeyFromPassword(options.password, vault_id);
     // Read current profile to preserve other fields
     const current = await readVaultProfile(vault.storage, vaultWorkingKey, vault_id);

package/dist/runtime/bootstrap.js.map

@@ -1 +1 @@
-{"version":3,"file":"bootstrap.js","sourceRoot":"","sources":["../../src/runtime/bootstrap.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EACL,qCAAqC,GAGtC,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,iCAAiC,EAAE,MAAM,uBAAuB,CAAC;AAC1E,OAAO,EACL,2BAA2B,GAG5B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAErD,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAE/D,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAC1E,OAAO,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAEhE,MAAM,4BAA4B,GAAG,CAAC,CAAC;AACvC,MAAM,gCAAgC,GAAG,KAAK,4BAA4B,EAAE,CAAC;AAE7E,SAAS,kBAAkB,CAAC,QAAgB;IAC1C,OAAO,UAAU,QAAQ,GAAG,gCAAgC,EAAE,CAAC;AACjE,CAAC;AAED,SAAS,wBAAwB,CAAC,KAAa;IAC7C,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1C,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO;QACL,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;QAClB,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;KACvC,CAAC;AACJ,CAAC;AAoDD,SAAS,cAAc,CACrB,gBAAsF,EACtF,YAAuD;IAEvD,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,OAAO,GAAG,OAAO,gBAAgB,KAAK,QAAQ;YAClD,CAAC,CAAC,IAAI,iBAAiB,CAAC,gBAAgB,CAAC;YACzC,CAAC,CAAC,gBAAoC,CAAC;QACzC,OAAO;YACL,OAAO;YACP,OAAO,EAAE,YAAY;SACtB,CAAC;IACJ,CAAC;IACD,gEAAgE;IAChE,OAAO;QACL,OAAO,EAAE,sBAAsB,EAAE;QACjC,OAAO,EAAE,gBAA4D;KACtE,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,OAAyB,EAAE,QAAgB,EAAE,QAAgB;IAC9F,MAAM,kBAAkB,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC3C,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACxB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,eAAe,GAAG,iCAAiC,CAAC,kBAAkB,EAAE,QAAQ,CAAC,CAAC;IACxF,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,OAAO,EAAE,eAAe,EAAE,QAAQ,CAAC,CAAC;IAC3E,OAAO,OAAO,KAAK,IAAI,CAAC;AAC1B,CAAC;AAwBD,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,gBAAgE,EAChE,YAAiC;IAEjC,MAAM,EAAE,OAAO,EAAE,gBAAgB,EAAE,OAAO,EAAE,GAAG,cAAc,CAAC,gBAAgB,EAAE,YAAY,CAG3F,CAAC;IACF,IAAI,UAAU,IAAK,OAA8C,EAAE,CAAC;QAClE,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAC9E,CAAC;IACD,MAAM,QAAQ,GAAG,kBAAkB,EAAE,CAAC;IACtC,MAAM,OAAO,GAAG,qBAAqB,CAAC,gBAAgB,EAAE,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAC;IACtF,MAAM,eAAe,GAAG,iCAAiC,CAAC,OAAO,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAEtF,MAAM,IAAI,GAAG,qCAAqC,CAAC,OAAO,EAAE;QAC1D,GAAG,OAAO;QACV,QAAQ;QACR,eAAe;KAChB,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IAEnC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAEhF,uEAAuE;IACvE,MAAM,iBAAiB,CAAC,OAAO,EAAE;QAC/B,QAAQ;QACR,QAAQ;QACR,GAAG,OAAO,CAAC,QAAQ;KACpB,EAAE,eAAe,EAAE,QAAQ,CAAC,CAAC;IAE9B,OAAO;QACL,IAAI;QACJ,KAAK,EAAE,2BAA2B,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC;QACvD,QAAQ;QACR,OAAO;QACP,cAAc,EAAE,KAAK,EAAE,QAAgB,EAAE,EAAE,CAAC,mBAAmB,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC;KAC7F,CAAC;AACJ,CAAC;AAwBD,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,gBAAiE,EACjE,YAAkC;IAElC,MAAM,EAAE,OAAO,EAAE,gBAAgB,EAAE,OAAO,EAAE,GAAG,cAAc,CAAC,gBAAgB,EAAE,YAAY,CAG3F,CAAC;IACF,MAAM,OAAO,GAAG,qBAAqB,CAAC,gBAAgB,EAAE,kBAAkB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC9F,MAAM,eAAe,GAAG,iCAAiC,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC9F,MAAM,IAAI,GAAG,qCAAqC,CAAC,OAAO,EAAE;QAC1D,GAAG,OAAO;QACV,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,eAAe;KAChB,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IACnC,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,OAAO,EAAE,eAAe,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IACnF,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IAED,OAAO;QACL,IAAI;QACJ,KAAK,EAAE,2BAA2B,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC;QACvD,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,OAAO;QACP,cAAc,EAAE,KAAK,EAAE,QAAgB,EAAE,EAAE,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,QAAQ,EAAE,QAAQ,CAAC;KACrG,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,OAAyB;IACxD,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QAClB,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC7C,MAAM,eAAe,GAAG,IAAI,GAAG,EAAkB,CAAC;IAClD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAG,wBAAwB,CAAC,KAAK,CAAC,CAAC;QAC/C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,SAAS;QACX,CAAC;QACD,MAAM,OAAO,GAAG,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACrD,IAAI,OAAO,KAAK,SAAS,IAAI,MAAM,CAAC,OAAO,GAAG,OAAO,EAAE,CAAC;YACtD,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,eAAe,CAAC,IAAI,EAAE,CAAC,CAAC;AACrC,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,KAAoC,EACpC,OAAgF;IAEhF,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;IAC3C,MAAM,eAAe,GAAG,iCAAiC,CAAC,OAAO,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAEtF,gDAAgD;IAChD,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,KAAK,CAAC,OAAO,EAAE,eAAe,EAAE,QAAQ,CAAC,CAAC;IAEjF,MAAM,iBAAiB,CAAC,KAAK,CAAC,OAAO,EAAE;QACrC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC;QAClB,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,OAAO,EAAE,QAAQ;QAC/C,GAAG,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC;KAC5B,EAAE,eAAe,EAAE,QAAQ,CAAC,CAAC;AAChC,CAAC"}
+{"version":3,"file":"bootstrap.js","sourceRoot":"","sources":["../../src/runtime/bootstrap.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EACL,qCAAqC,EACrC,2BAA2B,GAG5B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,iCAAiC,EAAE,MAAM,uBAAuB,CAAC;AAC1E,OAAO,EACL,2BAA2B,GAG5B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAErD,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAE/D,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAC1E,OAAO,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAEhE,MAAM,4BAA4B,GAAG,CAAC,CAAC;AACvC,MAAM,gCAAgC,GAAG,KAAK,4BAA4B,EAAE,CAAC;AAE7E,SAAS,kBAAkB,CAAC,QAAgB;IAC1C,OAAO,UAAU,QAAQ,GAAG,gCAAgC,EAAE,CAAC;AACjE,CAAC;AAED,SAAS,wBAAwB,CAAC,KAAa;IAC7C,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1C,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO;QACL,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;QAClB,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;KACvC,CAAC;AACJ,CAAC;AAoDD,SAAS,cAAc,CACrB,gBAAsF,EACtF,YAAuD;IAEvD,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,OAAO,GAAG,OAAO,gBAAgB,KAAK,QAAQ;YAClD,CAAC,CAAC,IAAI,iBAAiB,CAAC,gBAAgB,CAAC;YACzC,CAAC,CAAC,gBAAoC,CAAC;QACzC,OAAO;YACL,OAAO;YACP,OAAO,EAAE,YAAY;SACtB,CAAC;IACJ,CAAC;IACD,gEAAgE;IAChE,OAAO;QACL,OAAO,EAAE,sBAAsB,EAAE;QACjC,OAAO,EAAE,gBAA4D;KACtE,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,OAAyB,EAAE,QAAgB,EAAE,QAAgB;IAC9F,MAAM,kBAAkB,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC3C,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACxB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,eAAe,GAAG,iCAAiC,CAAC,kBAAkB,EAAE,QAAQ,CAAC,CAAC;IACxF,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,OAAO,EAAE,eAAe,EAAE,QAAQ,CAAC,CAAC;QAC3E,OAAO,OAAO,KAAK,IAAI,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,uFAAuF;QACvF,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAwBD,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,gBAAgE,EAChE,YAAiC;IAEjC,MAAM,EAAE,OAAO,EAAE,gBAAgB,EAAE,OAAO,EAAE,GAAG,cAAc,CAAC,gBAAgB,EAAE,YAAY,CAG3F,CAAC;IACF,IAAI,UAAU,IAAK,OAA8C,EAAE,CAAC;QAClE,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAC9E,CAAC;IACD,MAAM,QAAQ,GAAG,kBAAkB,EAAE,CAAC;IACtC,MAAM,OAAO,GAAG,qBAAqB,CAAC,gBAAgB,EAAE,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAC;IACtF,MAAM,eAAe,GAAG,iCAAiC,CAAC,OAAO,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAEtF,MAAM,IAAI,GAAG,CAAC,OAAQ,OAAe,CAAC,UAAU,KAAK,UAAU,IAAK,OAAe,CAAC,UAAU,EAAE,CAAC;QAC/F,CAAC,CAAC,qCAAqC,CAAC,OAAc,EAAE;YACpD,GAAG,OAAO;YACV,QAAQ;YACR,eAAe;SAChB,CAAC;QACJ,CAAC,CAAC,2BAA2B,CAAC;YAC1B,GAAG,OAAO;YACV,QAAQ;SACT,CAAC,CAAC;IACP,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IAEnC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAEhF,uEAAuE;IACvE,MAAM,iBAAiB,CAAC,OAAO,EAAE;QAC/B,QAAQ;QACR,QAAQ;QACR,GAAG,OAAO,CAAC,QAAQ;KACpB,EAAE,eAAe,EAAE,QAAQ,CAAC,CAAC;IAE9B,OAAO;QACL,IAAI;QACJ,KAAK,EAAE,2BAA2B,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC;QACvD,QAAQ;QACR,OAAO;QACP,cAAc,EAAE,KAAK,EAAE,QAAgB,EAAE,EAAE,CAAC,mBAAmB,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC;KAC7F,CAAC;AACJ,CAAC;AAwBD,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,gBAAiE,EACjE,YAAkC;IAElC,MAAM,EAAE,OAAO,EAAE,gBAAgB,EAAE,OAAO,EAAE,GAAG,cAAc,CAAC,gBAAgB,EAAE,YAAY,CAG3F,CAAC;IACF,MAAM,OAAO,GAAG,qBAAqB,CAAC,gBAAgB,EAAE,kBAAkB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC9F,MAAM,eAAe,GAAG,iCAAiC,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC9F,MAAM,IAAI,GAAG,CAAC,OAAQ,OAAe,CAAC,UAAU,KAAK,UAAU,IAAK,OAAe,CAAC,UAAU,EAAE,CAAC;QAC/F,CAAC,CAAC,qCAAqC,CAAC,OAAc,EAAE;YACpD,GAAG,OAAO;YACV,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,eAAe;SAChB,CAAC;QACJ,CAAC,CAAC,2BAA2B,CAAC;YAC1B,GAAG,OAAO;YACV,QAAQ,EAAE,OAAO,CAAC,QAAQ;SAC3B,CAAC,CAAC;IACP,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IACnC,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,OAAO,EAAE,eAAe,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IACnF,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IAED,OAAO;QACL,IAAI;QACJ,KAAK,EAAE,2BAA2B,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC;QACvD,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,OAAO;QACP,cAAc,EAAE,KAAK,EAAE,QAAgB,EAAE,EAAE,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,QAAQ,EAAE,QAAQ,CAAC;KACrG,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,OAAyB;IACxD,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QAClB,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC7C,MAAM,eAAe,GAAG,IAAI,GAAG,EAAkB,CAAC;IAClD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAG,wBAAwB,CAAC,KAAK,CAAC,CAAC;QAC/C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,SAAS;QACX,CAAC;QACD,MAAM,OAAO,GAAG,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACrD,IAAI,OAAO,KAAK,SAAS,IAAI,MAAM,CAAC,OAAO,GAAG,OAAO,EAAE,CAAC;YACtD,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,eAAe,CAAC,IAAI,EAAE,CAAC,CAAC;AACrC,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,KAAoC,EACpC,OAAgF;IAEhF,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC;IACrC,MAAM,eAAe,GAAG,iCAAiC,CAAC,OAAO,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAEtF,gDAAgD;IAChD,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,KAAK,CAAC,OAAO,EAAE,eAAe,EAAE,QAAQ,CAAC,CAAC;IAEjF,MAAM,iBAAiB,CAAC,KAAK,CAAC,OAAO,EAAE;QACrC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC;QAClB,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,OAAO,EAAE,QAAQ;QAC/C,GAAG,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC;KAC5B,EAAE,eAAe,EAAE,QAAQ,CAAC,CAAC;AAChC,CAAC"}

package/dist/runtime/index.d.ts

@@ -14,10 +14,10 @@ export { createWorkspaceStorage, getDefaultWorkspaceDir, } from "./workspace-sto
 export { createVault, recoverVault, listVaults, updateVaultMetadata, type CreateVaultOptions, type CreatedVault, type RecoverVaultOptions, type RecoveredVault, type VaultObject, type VaultMetadata, } from "./bootstrap.js";
 export { openOwnerSession, type OwnerSession, type OpenOwnerSessionOptions, } from "./owner-session.js";
 export { createVaultCore, VaultCore, VaultCoreError, createVaultCoreDependencies, type VaultCoreDependenciesOptions, type DefaultPolicyEngineOptions, DefaultPolicyEngine, createPersistentVaultCoreDependencies, initializeVaultCustody, recoverVaultWorkingKey, DEFAULT_VAULT_KEY_CUSTODY_BLOB_KEY, type InitializeVaultCustodyOptions, type InitializedVaultCustody, type CreatePersistentVaultCoreDependenciesOptions, PersistentVaultAgentIdentityRegistry, PersistentVaultAuditLog, PersistentVaultAgentSecretGrantRegistry, PersistentVaultSecretDestinationGrantRegistry, PersistentVaultSecretCustody, PersistentVaultSecretRepository, } from "../vault-core/index.js";
-export type { AgentId, AgentSecretGrant, SecretDestinationGrant, GrantStatus, AgentIdentityRecord, AgentVisibleSecretRecord, AgentRuntimeManifest, AgentVisibleRequestRecord, AgentRequestRecord, OwnerVisibleRequestRecord, OwnerRequestRecord, AgentRequestResult, DispatchApprovalDecision, AuditEntry, DispatchAuthorization, DispatchInstruction, DispatchRequest, DispatchResult, PendingDispatchEvent, OwnerPendingDispatchSubscription, OwnerAuditSubscription, RequestRecord, SecretAlias, SecretId, SecretLifecycleStatus, SecretRecord, VaultPrincipal, VaultPrincipalKind, VaultId, } from "../vault-core/index.js";
-export { DispatchStatus, AuditOperation, } from "../vault-core/index.js";
+export type { AgentId, AgentSecretGrant, SecretDestinationGrant, GrantStatus, AgentIdentityRecord, AgentRuntimeManifest, AgentRequestRecord, OwnerRequestRecord, AgentRequestResult, DispatchApprovalDecision, AuditEntry, DispatchAuthorization, DispatchInstruction, DispatchRequest, DispatchResult, PendingDispatchEvent, OwnerPendingDispatchSubscription, OwnerAuditSubscription, RequestRecord, SecretAlias, SecretId, SecretLifecycleStatus, SecretRecord, VaultPrincipal, VaultPrincipalKind, VaultId, } from "../vault-core/index.js";
+export { DispatchStatus, } from "../vault-core/index.js";
 export { createOwnerClient, type OwnerClient, type CreateOwnerClientOptions, type VaultAuditQueryInput, type VaultExportSecretInput, type VaultReadSecretPlaintextInput, type VaultReadAgentPrivateKeyInput, type OwnerSensitiveActionConfirmation, type OwnerSensitiveActionContext, type VaultGrantAgentSecretInput, type VaultGrantSecretDestinationInput, type VaultRevokeAgentSecretInput, type VaultRevokeSecretDestinationInput, type VaultListGrantsInput, type VaultImportAgentInput, type VaultCreateAgentInput, type OwnerAgentProvisionResult, type OwnerCreateSecretInput, type OwnerUpdateSecretInput, type OwnerRemoveSecretInput, type VaultUpdateAgentInput, type VaultListAgentsInput, type VaultListRequestsInput, type VaultGetRequestInput, type VaultListSecretsInput, type VaultIssueSessionTokenInput, type VaultRevokeSessionTokenInput, type VaultApproveDispatchInput, } from "../clients/owner/index.js";
-export { createAgentClient, type AgentClient, type CreateAgentClientOptions, type AgentIdentity, type AgentDispatchIntent, type AgentDispatchTransport, type AgentSigner, } from "../clients/agent/index.js";
+export { createAgentClient, type AgentClient, type CreateAgentClientOptions, type AgentIdentity, type AgentDispatchIntent, type AgentAuditTestPingInput, type AgentDispatchTransport, type AgentSigner, } from "../clients/agent/index.js";
 export { createVaultService, type VaultService, } from "../vault-ingress/index.js";
 export { handleVaultHttpDispatch, handleVaultAgentControlHttp, handleVaultAuditSse, handleVaultPendingDispatchSse, } from "../vault-ingress/server-utils.js";
 export { AgentDispatchHttpTransport } from "../vault-ingress/remote-transport.js";

package/dist/runtime/index.js

@@ -13,7 +13,7 @@ export { createWorkspaceStorage, getDefaultWorkspaceDir, } from "./workspace-sto
 export { createVault, recoverVault, listVaults, updateVaultMetadata, } from "./bootstrap.js";
 export { openOwnerSession, } from "./owner-session.js";
 export { createVaultCore, VaultCore, VaultCoreError, createVaultCoreDependencies, DefaultPolicyEngine, createPersistentVaultCoreDependencies, initializeVaultCustody, recoverVaultWorkingKey, DEFAULT_VAULT_KEY_CUSTODY_BLOB_KEY, PersistentVaultAgentIdentityRegistry, PersistentVaultAuditLog, PersistentVaultAgentSecretGrantRegistry, PersistentVaultSecretDestinationGrantRegistry, PersistentVaultSecretCustody, PersistentVaultSecretRepository, } from "../vault-core/index.js";
-export { DispatchStatus, AuditOperation, } from "../vault-core/index.js";
+export { DispatchStatus, } from "../vault-core/index.js";
 export { createOwnerClient, } from "../clients/owner/index.js";
 export { createAgentClient, } from "../clients/agent/index.js";
 export { createVaultService, } from "../vault-ingress/index.js";

package/dist/runtime/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/runtime/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACxG,OAAO,EAAE,eAAe,EAAE,WAAW,EAAe,iCAAiC,EAAE,MAAM,uBAAuB,CAAC;AACrH,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAE5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EACL,cAAc,EACd,eAAe,GAIhB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,gBAAgB,EAChB,iBAAiB,GAElB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,sBAAsB,EACtB,sBAAsB,GACvB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,WAAW,EACX,YAAY,EACZ,UAAU,EACV,mBAAmB,GAOpB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,gBAAgB,GAGjB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,eAAe,EACf,SAAS,EACT,cAAc,EACd,2BAA2B,EAG3B,mBAAmB,EACnB,qCAAqC,EACrC,sBAAsB,EACtB,sBAAsB,EACtB,kCAAkC,EAIlC,oCAAoC,EACpC,uBAAuB,EACvB,uCAAuC,EACvC,6CAA6C,EAE7C,4BAA4B,EAC5B,+BAA+B,GAChC,MAAM,wBAAwB,CAAC;AAmChC,OAAO,EACL,cAAc,EACd,cAAc,GACf,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,iBAAiB,GA6BlB,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EACL,iBAAiB,GAOlB,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EACL,kBAAkB,GAEnB,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EACL,uBAAuB,EACvB,2BAA2B,EAC3B,mBAAmB,EACnB,6BAA6B,GAC9B,MAAM,kCAAkC,CAAC;AAE1C,OAAO,EAAE,0BAA0B,EAAE,MAAM,sCAAsC,CAAC;AAClF,OAAO,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/runtime/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACxG,OAAO,EAAE,eAAe,EAAE,WAAW,EAAe,iCAAiC,EAAE,MAAM,uBAAuB,CAAC;AACrH,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAE5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EACL,cAAc,EACd,eAAe,GAIhB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,gBAAgB,EAChB,iBAAiB,GAElB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,sBAAsB,EACtB,sBAAsB,GACvB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,WAAW,EACX,YAAY,EACZ,UAAU,EACV,mBAAmB,GAOpB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,gBAAgB,GAGjB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,eAAe,EACf,SAAS,EACT,cAAc,EACd,2BAA2B,EAG3B,mBAAmB,EACnB,qCAAqC,EACrC,sBAAsB,EACtB,sBAAsB,EACtB,kCAAkC,EAIlC,oCAAoC,EACpC,uBAAuB,EACvB,uCAAuC,EACvC,6CAA6C,EAE7C,4BAA4B,EAC5B,+BAA+B,GAChC,MAAM,wBAAwB,CAAC;AAgChC,OAAO,EACL,cAAc,GACf,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,iBAAiB,GA6BlB,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EACL,iBAAiB,GAQlB,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EACL,kBAAkB,GAEnB,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EACL,uBAAuB,EACvB,2BAA2B,EAC3B,mBAAmB,EACnB,6BAA6B,GAC9B,MAAM,kCAAkC,CAAC;AAE1C,OAAO,EAAE,0BAA0B,EAAE,MAAM,sCAAsC,CAAC;AAClF,OAAO,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC"}

package/dist/storage/prefix.d.ts

@@ -3,7 +3,7 @@ export declare class PrefixStorageProvider implements IStorageProvider {
     private readonly base;
     private readonly prefix;
     constructor(base: IStorageProvider, prefix: string);
-    getBaseDir(): string;
+    getBaseDir?(): string;
     private key;
     read(key: string): Promise<Buffer | null>;
     write(key: string, data: Buffer): Promise<void>;

package/dist/storage/prefix.js

@@ -10,10 +10,10 @@ export class PrefixStorageProvider {
         this.prefix = prefix;
     }
     getBaseDir() {
-        if (this.base.getBaseDir) {
+        if (typeof this.base.getBaseDir === 'function') {
             return path.join(this.base.getBaseDir(), this.prefix);
         }
-        return this.prefix;
+        return undefined; // Trigger falsy check in bootstrap
     }
     key(key) {
         return joinPrefix(this.prefix, key);

package/dist/storage/prefix.js.map

@@ -1 +1 @@
-{"version":3,"file":"prefix.js","sourceRoot":"","sources":["../../src/storage/prefix.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAGlC,SAAS,UAAU,CAAC,MAAc,EAAE,GAAW;IAC7C,OAAO,GAAG,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;AAC3C,CAAC;AAED,MAAM,OAAO,qBAAqB;IAEb;IACA;IAFnB,YACmB,IAAsB,EACtB,MAAc;QADd,SAAI,GAAJ,IAAI,CAAkB;QACtB,WAAM,GAAN,MAAM,CAAQ;IAC9B,CAAC;IAEJ,UAAU;QACR,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YACzB,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACxD,CAAC;QACD,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAGO,GAAG,CAAC,GAAW;QACrB,OAAO,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACtC,CAAC;IAED,IAAI,CAAC,GAAW;QACd,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IACvC,CAAC;IAED,KAAK,CAAC,GAAW,EAAE,IAAY;QAC7B,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;IAC9C,CAAC;IAED,MAAM,CAAC,GAAW;QAChB,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IACzC,CAAC;IAED,GAAG,CAAC,GAAW;QACb,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IACtC,CAAC;IAED,MAAM,CAAE,OAAe,EAAE,KAAa;QACpC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;QACzE,CAAC;QACD,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;IAC9D,CAAC;IAED,QAAQ,CAAK,GAAW,EAAE,IAAsB;QAC9C,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACxB,OAAO,IAAI,EAAE,CAAC;QAChB,CAAC;QACD,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;IACjD,CAAC;CACF;AAED,MAAM,UAAU,qBAAqB,CAAC,IAAsB,EAAE,MAAc;IAC1E,OAAO,IAAI,qBAAqB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AACjD,CAAC"}
+{"version":3,"file":"prefix.js","sourceRoot":"","sources":["../../src/storage/prefix.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAGlC,SAAS,UAAU,CAAC,MAAc,EAAE,GAAW;IAC7C,OAAO,GAAG,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;AAC3C,CAAC;AAED,MAAM,OAAO,qBAAqB;IAEb;IACA;IAFnB,YACmB,IAAsB,EACtB,MAAc;QADd,SAAI,GAAJ,IAAI,CAAkB;QACtB,WAAM,GAAN,MAAM,CAAQ;IAC9B,CAAC;IAEJ,UAAU;QACR,IAAI,OAAQ,IAAI,CAAC,IAAY,CAAC,UAAU,KAAK,UAAU,EAAE,CAAC;YACxD,OAAO,IAAI,CAAC,IAAI,CAAE,IAAI,CAAC,IAAY,CAAC,UAAU,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACjE,CAAC;QACD,OAAO,SAAgB,CAAC,CAAC,mCAAmC;IAC9D,CAAC;IAGO,GAAG,CAAC,GAAW;QACrB,OAAO,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACtC,CAAC;IAED,IAAI,CAAC,GAAW;QACd,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IACvC,CAAC;IAED,KAAK,CAAC,GAAW,EAAE,IAAY;QAC7B,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;IAC9C,CAAC;IAED,MAAM,CAAC,GAAW;QAChB,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IACzC,CAAC;IAED,GAAG,CAAC,GAAW;QACb,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IACtC,CAAC;IAED,MAAM,CAAE,OAAe,EAAE,KAAa;QACpC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;QACzE,CAAC;QACD,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;IAC9D,CAAC;IAED,QAAQ,CAAK,GAAW,EAAE,IAAsB;QAC9C,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACxB,OAAO,IAAI,EAAE,CAAC;QAChB,CAAC;QACD,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;IACjD,CAAC;CACF;AAED,MAAM,UAAU,qBAAqB,CAAC,IAAsB,EAAE,MAAc;IAC1E,OAAO,IAAI,qBAAqB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AACjD,CAAC"}

package/dist/vault-core/contracts.d.ts

@@ -4,24 +4,17 @@ export interface VaultPrincipal {
     kind: VaultPrincipalKind;
     id: string;
 }
-export interface VaultId {
-    readonly value: string;
-}
-export interface SecretId {
-    readonly value: string;
-}
-export interface SecretAlias {
-    readonly value: string;
-}
-export interface SecretVersion {
-    readonly value: string;
-}
+export type VaultId = string;
+export type SecretId = string;
+export type SecretAlias = string;
+export type SecretVersion = string;
+export type SecretIdPreference = string;
 export type SecretLifecycleStatus = "ACTIVE" | "SUPERSEDED" | "REMOVED";
 export interface SecretRecord {
     vault_id: VaultId;
     secret_id: SecretId;
     alias: SecretAlias;
-    version: SecretVersion;
+    version: string;
     lifecycle_status: SecretLifecycleStatus;
     previousSecretId?: SecretId;
     supersededBySecretId?: SecretId;
@@ -164,18 +157,6 @@ export interface AgentProof {
     signature?: string;
     token?: string;
 }
-export interface AgentVisibleSecretRecord {
-    vault_id: VaultId;
-    secret_id: SecretId;
-    alias: SecretAlias;
-    version: SecretVersion;
-    lifecycle_status: SecretLifecycleStatus;
-    issuer_id: string | null;
-    source: SecretSource;
-    created_at: string;
-    updated_at: string;
-    granted: boolean;
-}
 export interface AgentGetRuntimeManifestRequest {
     vault_id: VaultId;
     request_id: string;
@@ -201,7 +182,7 @@ export interface AgentSelfContext {
 }
 export interface AgentRuntimeManifest {
     root_agent_id: string;
-    vault_id: string;
+    vault_id: VaultId;
     vault_nickname?: string;
     issued_at: string;
     agent: AgentSelfContext;
@@ -223,7 +204,6 @@ export interface RequestRecord {
         method: string;
         headers?: Record<string, string>;
         body?: string;
-        secret_alias?: string;
         secret_id: SecretId | null;
     };
     response?: {
@@ -253,81 +233,9 @@ export interface OwnerPendingDispatchSubscription {
     afterEventId?: string;
     onEvent(event: PendingDispatchEvent): void;
 }
-export interface AgentVisibleRequestRecord {
-    request_id: string;
-    created_at: string;
-    reason: string;
-    target_url: string;
-    execution_status: DispatchStatus;
-    response_status?: number;
-    error?: string;
-    has_response_body: boolean;
-    secret_id?: SecretId;
+export interface OwnerRequestRecord extends RequestRecord {
 }
-export interface OwnerVisibleRequestRecord {
-    request_id: string;
-    created_at: string;
-    root_agent_id: string;
-    reason: string;
-    target_url: string;
-    execution_status: DispatchStatus;
-    response_status?: number;
-    error?: string;
-    has_response_body: boolean;
-    missing_grants?: {
-        agent_secret?: boolean;
-        secret_destination?: boolean;
-    };
-    secret_id?: SecretId;
-}
-export interface OwnerRequestRecord {
-    request_id: string;
-    created_at: string;
-    requested_at: string;
-    root_agent_id: string;
-    reason: string;
-    request: {
-        target_url: string;
-        method: string;
-        headers?: Record<string, string>;
-        body?: string;
-        secret_alias?: string;
-        secret_id?: SecretId;
-    };
-    response?: {
-        status?: number;
-        headers?: Record<string, string>;
-        body?: string;
-        error?: string;
-    };
-    execution_status: DispatchStatus;
-    missing_grants?: {
-        agent_secret?: boolean;
-        secret_destination?: boolean;
-    };
-    secret_id?: SecretId;
-}
-export interface AgentRequestRecord {
-    request_id: string;
-    created_at: string;
-    requested_at: string;
-    reason: string;
-    request: {
-        target_url: string;
-        method: string;
-        headers?: Record<string, string>;
-        body?: string;
-        secret_alias?: string;
-        secret_id?: SecretId;
-    };
-    response?: {
-        status?: number;
-        headers?: Record<string, string>;
-        body?: string;
-        error?: string;
-    };
-    execution_status: DispatchStatus;
-    secret_id?: SecretId;
+export interface AgentRequestRecord extends RequestRecord {
 }
 export interface VaultToolDefinition {
     name: string;
@@ -371,6 +279,16 @@ export interface AgentGetRequestRequest {
     proof: AgentProof;
     target_request_id: string;
 }
+export interface AgentAuditTestPingRequest {
+    vault_id: VaultId;
+    request_id: string;
+    requested_at: string;
+    agent: VaultPrincipal & {
+        kind: "agent";
+    };
+    proof: AgentProof;
+    label?: string;
+}
 export interface OwnerListRequestsRequest {
     vault_id: VaultId;
     request_id: string;
@@ -406,7 +324,7 @@ export interface DispatchRequest {
         kind: "agent";
     };
     proof: AgentProof;
-    secret_alias?: string;
+    secret_id?: SecretId;
     reason: string;
     target_url: string;
     method: string;
@@ -454,52 +372,22 @@ export interface DispatchResult {
 }
 export type AgentRequestResult = AgentRequestRecord;
 export interface AuditQuery {
-    vault_id: string;
+    vault_id: VaultId;
     actor_id?: string;
     root_agent_id?: string;
-    secret_alias?: string;
-    secret_id?: string;
+    secret_id?: SecretId;
     request_id?: string;
     since?: string;
 }
-export declare enum AuditOperation {
-    IDENTITY_REGISTER = "identity.register",
-    IDENTITY_UPDATE = "identity.update",
-    IDENTITY_ISSUE_TOKEN = "identity.issue_token",
-    IDENTITY_REVOKE_TOKEN = "identity.revoke_token",
-    GRANT_SECRET = "grant.grant_secret",
-    GRANT_DESTINATION = "grant.grant_destination",
-    REVOKE_SECRET = "grant.revoke_secret",
-    REVOKE_DESTINATION = "grant.revoke_destination",
-    SECRET_WRITE = "secret.write",
-    SECRET_EXPORT = "secret.export",
-    SECRET_BATCH_EXPORT = "secret.batch_export",
-    SECRET_DELETE = "secret.delete",
-    POLICY_EVALUATE = "policy.evaluate_dispatch",
-    SECRET_DISPATCH = "secret.dispatch",
-    DISPATCH_APPROVE = "dispatch.approve",
-    DISPATCH_REJECT = "dispatch.reject",
-    DISPATCH_HOLD = "dispatch.pending_approval"
-}
 export interface AuditEntry {
     event_id: string;
     ts: string;
-    vault_id: string;
+    vault_id: VaultId;
     actor: VaultPrincipal;
-    operation: AuditOperation;
-    decision: "allowed" | "denied";
-    execution_status: "not_executed" | "succeeded" | "failed";
-    request_id?: string;
-    secret_alias?: string;
-    secret_id?: string;
-    root_agent_id?: string;
-    site_id?: string;
-    target?: {
-        kind: "http" | "other";
-        url: string;
-    };
-    detail: string;
-    error_code?: string | null;
+    function_name: string;
+    input: Record<string, any>;
+    output?: any;
+    error?: string;
 }
 export interface AgentIdentityRecord {
     vault_id: VaultId;
@@ -533,7 +421,7 @@ export interface OwnerAuditRequest {
 }
 export interface OwnerAuditSubscription {
     afterEventId?: string;
-    operations?: readonly AuditOperation[];
+    function_names?: readonly string[];
     root_agent_id?: string;
     request_id?: string;
     onEvent(entry: AuditEntry): void;
@@ -550,7 +438,7 @@ export interface OwnerExportSecretRequest {
 export interface OwnerSecretExport {
     vault_id: VaultId;
     secret_id: SecretId;
-    alias: SecretAlias;
+    alias: string;
     plaintext: string;
     exported_at: string;
 }
@@ -569,7 +457,7 @@ export interface OwnerListGrantsRequest {
         kind: "owner";
     };
     root_agent_id?: string;
-    secret_alias?: string;
+    secret_id?: SecretId;
     site_id?: string;
     requested_at: string;
 }

package/dist/vault-core/contracts.js

@@ -6,24 +6,4 @@ export var DispatchStatus;
     DispatchStatus["IN_PROGRESS"] = "IN_PROGRESS";
     DispatchStatus["AWAITING_APPROVAL"] = "AWAITING_APPROVAL";
 })(DispatchStatus || (DispatchStatus = {}));
-export var AuditOperation;
-(function (AuditOperation) {
-    AuditOperation["IDENTITY_REGISTER"] = "identity.register";
-    AuditOperation["IDENTITY_UPDATE"] = "identity.update";
-    AuditOperation["IDENTITY_ISSUE_TOKEN"] = "identity.issue_token";
-    AuditOperation["IDENTITY_REVOKE_TOKEN"] = "identity.revoke_token";
-    AuditOperation["GRANT_SECRET"] = "grant.grant_secret";
-    AuditOperation["GRANT_DESTINATION"] = "grant.grant_destination";
-    AuditOperation["REVOKE_SECRET"] = "grant.revoke_secret";
-    AuditOperation["REVOKE_DESTINATION"] = "grant.revoke_destination";
-    AuditOperation["SECRET_WRITE"] = "secret.write";
-    AuditOperation["SECRET_EXPORT"] = "secret.export";
-    AuditOperation["SECRET_BATCH_EXPORT"] = "secret.batch_export";
-    AuditOperation["SECRET_DELETE"] = "secret.delete";
-    AuditOperation["POLICY_EVALUATE"] = "policy.evaluate_dispatch";
-    AuditOperation["SECRET_DISPATCH"] = "secret.dispatch";
-    AuditOperation["DISPATCH_APPROVE"] = "dispatch.approve";
-    AuditOperation["DISPATCH_REJECT"] = "dispatch.reject";
-    AuditOperation["DISPATCH_HOLD"] = "dispatch.pending_approval";
-})(AuditOperation || (AuditOperation = {}));
 //# sourceMappingURL=contracts.js.map

package/dist/vault-core/contracts.js.map

@@ -1 +1 @@
-{"version":3,"file":"contracts.js","sourceRoot":"","sources":["../../src/vault-core/contracts.ts"],"names":[],"mappings":"AA+cA,MAAM,CAAN,IAAY,cAMX;AAND,WAAY,cAAc;IACxB,yCAAuB,CAAA;IACvB,mCAAiB,CAAA;IACjB,mCAAiB,CAAA;IACjB,6CAA2B,CAAA;IAC3B,yDAAuC,CAAA;AACzC,CAAC,EANW,cAAc,KAAd,cAAc,QAMzB;AA0BD,MAAM,CAAN,IAAY,cAsBX;AAtBD,WAAY,cAAc;IACxB,yDAAuC,CAAA;IACvC,qDAAmC,CAAA;IACnC,+DAA6C,CAAA;IAC7C,iEAA+C,CAAA;IAE/C,qDAAmC,CAAA;IACnC,+DAA6C,CAAA;IAC7C,uDAAqC,CAAA;IACrC,iEAA+C,CAAA;IAE/C,+CAA6B,CAAA;IAC7B,iDAA+B,CAAA;IAC/B,6DAA2C,CAAA;IAC3C,iDAA+B,CAAA;IAE/B,8DAA4C,CAAA;IAC5C,qDAAmC,CAAA;IAEnC,uDAAqC,CAAA;IACrC,qDAAmC,CAAA;IACnC,6DAA2C,CAAA;AAC7C,CAAC,EAtBW,cAAc,KAAd,cAAc,QAsBzB"}
+{"version":3,"file":"contracts.js","sourceRoot":"","sources":["../../src/vault-core/contracts.ts"],"names":[],"mappings":"AA+WA,MAAM,CAAN,IAAY,cAMX;AAND,WAAY,cAAc;IACxB,yCAAuB,CAAA;IACvB,mCAAiB,CAAA;IACjB,mCAAiB,CAAA;IACjB,6CAA2B,CAAA;IAC3B,yDAAuC,CAAA;AACzC,CAAC,EANW,cAAc,KAAd,cAAc,QAMzB"}

package/dist/vault-core/core.d.ts

@@ -1,9 +1,9 @@
-import { type AgentIdentityRecord, type AgentRuntimeManifest, type AgentVisibleRequestRecord, type AgentRequestRecord, type AgentVisibleSecretRecord, type AuditEntry, type AuditQuery, type DispatchAuthorization, type DispatchRequest, type DispatchResult, type OwnerPendingDispatchSubscription, type OwnerAuditSubscription, type OwnerRequestRecord, type OwnerVisibleRequestRecord, type SecretId, type SecretRecord, type VaultId, type VaultPrincipal, type AgentSecretGrant, type SecretDestinationGrant, type DispatchApprovalDecision, type OwnerCreateSecretCommand, type OwnerUpdateSecretCommand, type OwnerSecretExport } from "./contracts.js";
+import { type AgentIdentityRecord, type AgentRuntimeManifest, type AgentRequestRecord, type AuditEntry, type AuditQuery, type DispatchAuthorization, type DispatchRequest, type DispatchResult, type OwnerPendingDispatchSubscription, type OwnerAuditSubscription, type OwnerRequestRecord, type SecretId, type SecretRecord, type VaultId, type VaultPrincipal, type AgentSecretGrant, type SecretDestinationGrant, type DispatchApprovalDecision, type OwnerCreateSecretCommand, type OwnerUpdateSecretCommand, type OwnerSecretExport } from "./contracts.js";
 import type { VaultCoreDependencies } from "./ports.js";
 export declare class VaultCore {
     private readonly _deps;
     constructor(deps: VaultCoreDependencies);
-    get vault_id(): VaultId;
+    get vault_id(): string;
     private _assertOwnerPrincipal;
     private _appendAudit;
     private _verifyAgentControlProof;
@@ -53,7 +53,7 @@ export declare class VaultCore {
         proof: any;
         request_id: string;
         requested_at: string;
-    }): Promise<readonly AgentVisibleSecretRecord[]>;
+    }): Promise<readonly SecretRecord[]>;
     agentListRequests(command: {
         agent: VaultPrincipal & {
             kind: "agent";
@@ -61,7 +61,7 @@ export declare class VaultCore {
         proof: any;
         request_id: string;
         requested_at: string;
-    }): Promise<readonly AgentVisibleRequestRecord[]>;
+    }): Promise<readonly AgentRequestRecord[]>;
     agentGetRequest(command: {
         agent: VaultPrincipal & {
             kind: "agent";
@@ -71,6 +71,15 @@ export declare class VaultCore {
         requested_at: string;
         target_request_id: string;
     }): Promise<AgentRequestRecord>;
+    agentAuditTestPing(command: {
+        agent: VaultPrincipal & {
+            kind: "agent";
+        };
+        proof: any;
+        request_id: string;
+        requested_at: string;
+        label?: string;
+    }): Promise<AuditEntry>;
     ownerRegisterAgentIdentity(command: {
         vault_id: VaultId;
         request_id: string;
@@ -108,13 +117,13 @@ export declare class VaultCore {
     }): Promise<readonly AgentIdentityRecord[]>;
     ownerListRequests(actor: VaultPrincipal & {
         kind: "owner";
-    }, root_agent_id?: string): Promise<readonly OwnerVisibleRequestRecord[]>;
+    }, root_agent_id?: string): Promise<readonly OwnerRequestRecord[]>;
     ownerGetRequest(actor: VaultPrincipal & {
         kind: "owner";
     }, request_id: string): Promise<OwnerRequestRecord>;
     ownerListSecrets(actor: VaultPrincipal & {
         kind: "owner";
-    }): Promise<readonly AgentVisibleSecretRecord[]>;
+    }): Promise<readonly SecretRecord[]>;
     ownerIssueSessionToken(request: {
         vault_id: VaultId;
         actor: VaultPrincipal;
@@ -141,9 +150,8 @@ export declare class VaultCore {
     private _recordRequestInternal;
     private _createInitialRequestRecord;
     private _updateRequestRecordInternal;
-    private toAgentVisibleRequestRecord;
-    private toOwnerVisibleRequestRecord;
-    private toOwnerRequestRecord;
     private toAgentRequestRecord;
+    private toOwnerRequestRecord;
+    private _appendAuditEntry;
 }
 export declare function createVaultCore(deps: VaultCoreDependencies): VaultCore;