@vapi-network/core 0.2.2 → 0.3.0

package/README.md

@@ -1,7 +1,20 @@
-# @vapi-network/core
+# `@vapi-network/core`
 
-The non-custodial x402 protocol, local-wallet policy, discovery merge, network
-guard, and append-only receipt primitives used by `vapi-network`.
+The non-custodial heart of [vAPI Network](https://github.com/vAPI-Network/vapi-network):
+the x402 protocol, the wallet store, spend policy, the network guard, discovery
+merge and the append-only receipt ledger. Keys stay on the caller's machine.
+This package proxies no payment and sends no telemetry.
 
-Keys remain on the caller's machine. This package does not proxy payments or
-send telemetry.
+Two entry points:
+
+- `@vapi-network/core` — everything an agent-driven surface may use: accounts,
+  balances, `WalletStore`, `SpendPolicy`, `resolvePassphrase`, receipts, stats
+  and the x402 primitives.
+- `@vapi-network/core/secrets` — human-only. `exportRecoveryPhrase`,
+  `exportKeystoreKeys`, `createKeystoreWithPhrase` and `decryptPrivateKey`
+  return a recovery phrase or a private key, so they are deliberately not
+  re-exported from the main index and the MCP package is forbidden to import
+  them.
+
+See the [root README](https://github.com/vAPI-Network/vapi-network#readme) for
+the SDK examples, the configuration layout and the custody model.

package/dist/agent-guard.d.ts

@@ -0,0 +1,40 @@
+/**
+ * Whether this run may put a secret on the screen.
+ *
+ * A recovery phrase, a private key and a passphrase are the only secrets vAPI
+ * has, and an agent never needs one to pay for an API. So they are shown only
+ * when a person is demonstrably present: stdin and stdout are both a real
+ * terminal, and no environment variable says an agent or a CI job is driving
+ * the command. Addresses, balances, receipts and wallet names are not secrets
+ * and are never gated here.
+ */
+/**
+ * The variables that mean "something other than a person is reading this".
+ * `VAPI_NO_SECRETS` is the documented way to lock down a machine's agent
+ * configuration; the rest are set by the agents and CI systems themselves.
+ */
+export declare const AGENT_MARKER_VARIABLES: readonly ["VAPI_NO_SECRETS", "CLAUDECODE", "CLAUDE_CODE", "CURSOR_AGENT", "CODEX_SANDBOX", "OPENAI_CODEX", "AGENT", "CI"];
+export type AgentMarker = (typeof AGENT_MARKER_VARIABLES)[number];
+/** Whether each standard stream is attached to a terminal. */
+export type SecretsStreams = {
+    stdinIsTTY: boolean;
+    stdoutIsTTY: boolean;
+};
+/**
+ * The verdict. `reason` is written to be shown to a person directly after the
+ * refusal line, so it names the stream or the variable that decided it.
+ */
+export type SecretsDecision = {
+    allowed: boolean;
+    reason?: string;
+    marker?: AgentMarker;
+};
+/** The first marker variable this environment sets to a non-empty value. */
+export declare function activeAgentMarker(env: NodeJS.ProcessEnv): AgentMarker | undefined;
+/**
+ * Decides whether a secret may be printed. Both streams must be a terminal,
+ * because a redirected stdout writes the secret into a file and a piped stdin
+ * means the answers are scripted; then no agent marker may be set.
+ */
+export declare function secretsAllowed(env: NodeJS.ProcessEnv, streams: SecretsStreams): SecretsDecision;
+//# sourceMappingURL=agent-guard.d.ts.map

package/dist/agent-guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-guard.d.ts","sourceRoot":"","sources":["../src/agent-guard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,2HASzB,CAAC;AAEX,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,sBAAsB,CAAC,CAAC,MAAM,CAAC,CAAC;AAElE,8DAA8D;AAC9D,MAAM,MAAM,cAAc,GAAG;IAC3B,UAAU,EAAE,OAAO,CAAC;IACpB,WAAW,EAAE,OAAO,CAAC;CACtB,CAAC;AAEF;;;GAGG;AACH,MAAM,MAAM,eAAe,GAAG;IAC5B,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB,CAAC;AAEF,4EAA4E;AAC5E,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,WAAW,GAAG,SAAS,CAEjF;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,EAAE,OAAO,EAAE,cAAc,GAAG,eAAe,CAY/F"}

package/dist/audit.d.ts

@@ -0,0 +1,42 @@
+/**
+ * The local trail of everything that touched a key or a wallet: one JSON line
+ * per event in `<home>/audit.log`, mode 0600. It exists so a person can answer
+ * "did anything export my phrase while the agent was running" without trusting
+ * the agent's own account of it.
+ *
+ * A line never contains a secret. It records what happened, to which wallet,
+ * whether a terminal was attached, and which agent marker was set — nothing
+ * that could help someone spend the wallet.
+ */
+export declare const AUDIT_EVENTS: readonly ["secret.export.phrase", "secret.export.key", "wallet.create", "wallet.import", "wallet.remove", "wallet.restore", "wallet.rename", "wallet.default", "wallet.caps", "wallet.unlock", "wallet.lock", "wallet.use.session", "passphrase.change"];
+export type AuditEvent = (typeof AUDIT_EVENTS)[number];
+export type AuditRecord = {
+    event: AuditEvent;
+    /** The wallet the event acted on, when one was selected. */
+    wallet?: string;
+    /** Whether a real terminal was attached when the event happened. */
+    tty: boolean;
+    /** The agent or CI variable that was set, if any. */
+    agentMarker?: string;
+    /** A short human note, such as a refusal or a new name. Never a secret. */
+    detail?: string;
+};
+export type AuditEntry = AuditRecord & {
+    time: string;
+};
+export declare const AUDIT_FILE = "audit.log";
+export type AuditOptions = {
+    /** Injected clock, so tests get a fixed timestamp. */
+    now?: () => Date;
+};
+export declare function auditLogPath(home: string): string;
+/**
+ * Appends one line. Append-only from the client's point of view: nothing in
+ * vAPI ever rewrites or truncates this file, and a failure to write it must
+ * never be swallowed by the caller, since a missing line is the interesting
+ * case.
+ */
+export declare function appendAudit(home: string, record: AuditRecord, options?: AuditOptions): Promise<AuditEntry>;
+/** The lines written so far, oldest first. An absent log reads as empty. */
+export declare function readAuditLog(home: string): Promise<AuditEntry[]>;
+//# sourceMappingURL=audit.d.ts.map

package/dist/audit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../src/audit.ts"],"names":[],"mappings":"AAKA;;;;;;;;;GASG;AACH,eAAO,MAAM,YAAY,0PAkBf,CAAC;AAEX,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC;AAEvD,MAAM,MAAM,WAAW,GAAG;IACxB,KAAK,EAAE,UAAU,CAAC;IAClB,4DAA4D;IAC5D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,oEAAoE;IACpE,GAAG,EAAE,OAAO,CAAC;IACb,qDAAqD;IACrD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,2EAA2E;IAC3E,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG,WAAW,GAAG;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAExD,eAAO,MAAM,UAAU,cAAc,CAAC;AAEtC,MAAM,MAAM,YAAY,GAAG;IACzB,sDAAsD;IACtD,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB,CAAC;AAEF,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEjD;AAED;;;;;GAKG;AACH,wBAAsB,WAAW,CAC/B,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,WAAW,EACnB,OAAO,GAAE,YAAiB,GACzB,OAAO,CAAC,UAAU,CAAC,CAerB;AAED,4EAA4E;AAC5E,wBAAsB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,CAYtE"}

package/dist/config.d.ts

@@ -3,9 +3,17 @@ export declare const DEFAULT_REGISTRY_URL = "https://api.vapinetwork.ai";
 export declare const DEFAULT_DISCOVERY_URL = "https://api.vapinetwork.ai/api/call/services";
 export declare const DEFAULT_MARKETPLACE_DISCOVERY_URL = "https://api.vapinetwork.ai/api/call/discovery";
 export declare const DEFAULT_REGISTRY_FALLBACKS: readonly [{
-    readonly discoveryUrl: "https://console.vapinetwork.ai/api/call/services";
-    readonly marketplaceDiscoveryUrl: "https://console.vapinetwork.ai/api/call/discovery";
+    readonly discoveryUrl: "https://api.vapinetwork.ai/api/call/services";
+    readonly marketplaceDiscoveryUrl: "https://api.vapinetwork.ai/api/call/discovery";
 }];
+/**
+ * The caps a wallet starts with. Since 0.3.0 the caps that are enforced belong
+ * to the wallet entry in `wallets.json`, not to `config.json`: an agent wallet
+ * can have a small daily cap while the owner's has a large one. `spendCaps`
+ * stays in `config.json` so 0.2.x files keep parsing, and it is still the
+ * fallback for a home that has no wallet registry yet — see
+ * `spendCapsForWallet` in `wallet-store.ts`.
+ */
 export declare const DEFAULT_SPEND_CAPS: {
     readonly perCallAtomic: "100000";
     readonly perDayAtomic: "1000000";
@@ -65,11 +73,40 @@ export type MigrationOptions = {
  * either side. Returns the copied destination paths.
  */
 export declare function migrateLegacyVapiHome(options?: MigrationOptions): Promise<string[]>;
+export type LegacyRegistryRewrite = {
+    field: string;
+    from: string;
+    to: string;
+};
+/**
+ * Rewrites one retired registry URL to its canonical form. Anything that is not
+ * a legacy vAPI registry URL — including self-hosted registries on the old
+ * paths — is returned byte for byte, so this is safe to run over any config.
+ */
+export declare function rewriteLegacyRegistryUrl(value: string): string;
+/**
+ * Pure counterpart of {@link rewriteLegacyRegistryUrl} over a whole config. The
+ * input is never mutated, and an untouched config is returned as-is.
+ */
+export declare function rewriteLegacyRegistryUrls(config: VapiConfig): {
+    config: VapiConfig;
+    changes: LegacyRegistryRewrite[];
+};
+export declare function formatLegacyRegistryRewrites(changes: readonly LegacyRegistryRewrite[]): string;
+/**
+ * Rewrites retired registry URLs in `config.json` on disk. Returns what changed
+ * so the caller can report it; an absent or already-current file is a no-op.
+ */
+export declare function migrateLegacyRegistryConfig(path?: string): Promise<LegacyRegistryRewrite[]>;
 export type DefaultConfigOptions = {
     networks?: readonly string[];
 };
 export declare function getDefaultConfig(source?: NodeJS.ProcessEnv, options?: DefaultConfigOptions): VapiConfig;
-export declare function loadConfig(path?: string, source?: NodeJS.ProcessEnv): Promise<VapiConfig>;
+export type LoadConfigOptions = {
+    /** Sink for the one-line legacy-URL notice; omitted means stay silent. */
+    notice?: (message: string) => void;
+};
+export declare function loadConfig(path?: string, source?: NodeJS.ProcessEnv, options?: LoadConfigOptions): Promise<VapiConfig>;
 export declare function writeDefaultConfig(path?: string, source?: NodeJS.ProcessEnv, options?: DefaultConfigOptions): Promise<VapiConfig>;
 export declare function enableDefaultNetwork(network: "solana", path?: string, source?: NodeJS.ProcessEnv): Promise<VapiConfig>;
 export declare function isMissingFile(error: unknown): error is NodeJS.ErrnoException;

package/dist/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAYxB,eAAO,MAAM,oBAAoB,+BAA+B,CAAC;AACjE,eAAO,MAAM,qBAAqB,iDAA8C,CAAC;AACjF,eAAO,MAAM,iCAAiC,kDAA+C,CAAC;AAC9F,eAAO,MAAM,0BAA0B;;;EAK7B,CAAC;AAEX,eAAO,MAAM,kBAAkB;;;CAGrB,CAAC;AAEX,MAAM,MAAM,SAAS,GAAG;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,kFAAkF;AAClF,MAAM,MAAM,cAAc,GAAG,SAAS,CAAC;AAGvC,eAAO,MAAM,eAAe;;;iBAG1B,CAAC;AACH,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;iBAsDrB,CAAC;AAEL,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AACxD,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AACtD,kCAAkC;AAClC,MAAM,MAAM,eAAe,GAAG,UAAU,CAAC;AAEzC,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,UAAU,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAE9F;AAED,wBAAgB,YAAY,CAC1B,SAAS,SAA4D,GACpE,SAAS,CASX;AAED,oCAAoC;AACpC,eAAO,MAAM,iBAAiB,qBAAe,CAAC;AAE9C,MAAM,MAAM,gBAAgB,GAAG;IAC7B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CACpC,CAAC;AAEF;;;GAGG;AACH,wBAAsB,qBAAqB,CAAC,OAAO,GAAE,gBAAqB,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CA6B7F;AAED,MAAM,MAAM,oBAAoB,GAAG;IACjC,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC9B,CAAC;AAEF,wBAAgB,gBAAgB,CAC9B,MAAM,GAAE,MAAM,CAAC,UAAwB,EACvC,OAAO,GAAE,oBAAyB,GACjC,UAAU,CAsCZ;AAED,wBAAsB,UAAU,CAC9B,IAAI,SAAwB,EAC5B,MAAM,GAAE,MAAM,CAAC,UAAwB,GACtC,OAAO,CAAC,UAAU,CAAC,CAmDrB;AAiBD,wBAAsB,kBAAkB,CACtC,IAAI,SAAwB,EAC5B,MAAM,GAAE,MAAM,CAAC,UAAwB,EACvC,OAAO,GAAE,oBAAyB,GACjC,OAAO,CAAC,UAAU,CAAC,CAerB;AAED,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,QAAQ,EACjB,IAAI,SAAwB,EAC5B,MAAM,GAAE,MAAM,CAAC,UAAwB,GACtC,OAAO,CAAC,UAAU,CAAC,CAiBrB;AAYD,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAAC,cAAc,CAE5E"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAYxB,eAAO,MAAM,oBAAoB,+BAA+B,CAAC;AACjE,eAAO,MAAM,qBAAqB,iDAA8C,CAAC;AACjF,eAAO,MAAM,iCAAiC,kDAA+C,CAAC;AAI9F,eAAO,MAAM,0BAA0B;;;EAK7B,CAAC;AAEX;;;;;;;GAOG;AACH,eAAO,MAAM,kBAAkB;;;CAGrB,CAAC;AAEX,MAAM,MAAM,SAAS,GAAG;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,kFAAkF;AAClF,MAAM,MAAM,cAAc,GAAG,SAAS,CAAC;AAGvC,eAAO,MAAM,eAAe;;;iBAG1B,CAAC;AACH,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;iBAsDrB,CAAC;AAEL,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AACxD,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AACtD,kCAAkC;AAClC,MAAM,MAAM,eAAe,GAAG,UAAU,CAAC;AAEzC,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,UAAU,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAE9F;AAED,wBAAgB,YAAY,CAC1B,SAAS,SAA4D,GACpE,SAAS,CASX;AAED,oCAAoC;AACpC,eAAO,MAAM,iBAAiB,qBAAe,CAAC;AAE9C,MAAM,MAAM,gBAAgB,GAAG;IAC7B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CACpC,CAAC;AAEF;;;GAGG;AACH,wBAAsB,qBAAqB,CAAC,OAAO,GAAE,gBAAqB,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CA6B7F;AAiBD,MAAM,MAAM,qBAAqB,GAAG;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;CACZ,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAsB9D;AAED;;;GAGG;AACH,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,UAAU,GAAG;IAC7D,MAAM,EAAE,UAAU,CAAC;IACnB,OAAO,EAAE,qBAAqB,EAAE,CAAC;CAClC,CA2BA;AAED,wBAAgB,4BAA4B,CAAC,OAAO,EAAE,SAAS,qBAAqB,EAAE,GAAG,MAAM,CAK9F;AAED;;;GAGG;AACH,wBAAsB,2BAA2B,CAC/C,IAAI,SAAwB,GAC3B,OAAO,CAAC,qBAAqB,EAAE,CAAC,CAYlC;AAED,MAAM,MAAM,oBAAoB,GAAG;IACjC,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC9B,CAAC;AAEF,wBAAgB,gBAAgB,CAC9B,MAAM,GAAE,MAAM,CAAC,UAAwB,EACvC,OAAO,GAAE,oBAAyB,GACjC,UAAU,CAsCZ;AAED,MAAM,MAAM,iBAAiB,GAAG;IAC9B,0EAA0E;IAC1E,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CACpC,CAAC;AAEF,wBAAsB,UAAU,CAC9B,IAAI,SAAwB,EAC5B,MAAM,GAAE,MAAM,CAAC,UAAwB,EACvC,OAAO,GAAE,iBAAsB,GAC9B,OAAO,CAAC,UAAU,CAAC,CA2DrB;AAiBD,wBAAsB,kBAAkB,CACtC,IAAI,SAAwB,EAC5B,MAAM,GAAE,MAAM,CAAC,UAAwB,EACvC,OAAO,GAAE,oBAAyB,GACjC,OAAO,CAAC,UAAU,CAAC,CAQrB;AAED,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,QAAQ,EACjB,IAAI,SAAwB,EAC5B,MAAM,GAAE,MAAM,CAAC,UAAwB,GACtC,OAAO,CAAC,UAAU,CAAC,CAUrB;AAuBD,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAAC,cAAc,CAE5E"}

package/dist/hd.d.ts

@@ -0,0 +1,33 @@
+import type { Hex } from "viem";
+/** BIP-44 first account on Base and every other EVM chain. */
+export declare const EVM_DERIVATION_PATH = "m/44'/60'/0'/0/0";
+/** SLIP-0010 ed25519 path Phantom and Solflare use for the first account. */
+export declare const SOLANA_DERIVATION_PATH = "m/44'/501'/0'/0'";
+/** A fresh 12-word English BIP-39 phrase. The only place new wallets start. */
+export declare function generateRecoveryPhrase(): string;
+/**
+ * Normalises spacing and case, then checks the BIP-39 checksum. Returns the
+ * canonical phrase so callers store and derive from one spelling. The phrase
+ * itself never appears in the error.
+ */
+export declare function validateRecoveryPhrase(phrase: string): string;
+/** The 64-byte BIP-39 seed, with an empty BIP-39 passphrase. */
+export declare function phraseToSeed(phrase: string): Uint8Array;
+/** The BIP-39 entropy behind a phrase: 16 bytes for 12 words, 32 for 24. */
+export declare function phraseToEntropy(phrase: string): Uint8Array;
+/** The phrase that produced this entropy, so a wallet can be shown again. */
+export declare function entropyToPhrase(entropy: Uint8Array): string;
+/** secp256k1 key for the EVM account, BIP-32 over the BIP-39 seed. */
+export declare function deriveEvmPrivateKey(seed: Uint8Array, path?: string): Hex;
+/** 32-byte ed25519 seed for the Solana account, SLIP-0010 over the BIP-39 seed. */
+export declare function deriveSolanaPrivateKey(seed: Uint8Array, path?: string): Uint8Array;
+/**
+ * SLIP-0010 for the ed25519 curve: HMAC-SHA512 from the master key
+ * "ed25519 seed", hardened children only. Returns the chain code as well so the
+ * specification's test vectors can check every step.
+ */
+export declare function deriveEd25519Path(seed: Uint8Array, path: string): {
+    privateKey: Uint8Array;
+    chainCode: Uint8Array;
+};
+//# sourceMappingURL=hd.d.ts.map

package/dist/hd.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hd.d.ts","sourceRoot":"","sources":["../src/hd.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,MAAM,CAAC;AAIhC,8DAA8D;AAC9D,eAAO,MAAM,mBAAmB,qBAAqB,CAAC;AACtD,6EAA6E;AAC7E,eAAO,MAAM,sBAAsB,qBAAqB,CAAC;AAMzD,+EAA+E;AAC/E,wBAAgB,sBAAsB,IAAI,MAAM,CAE/C;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAc7D;AAED,gEAAgE;AAChE,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,CAEvD;AAED,4EAA4E;AAC5E,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,CAE1D;AAED,6EAA6E;AAC7E,wBAAgB,eAAe,CAAC,OAAO,EAAE,UAAU,GAAG,MAAM,CAE3D;AAED,sEAAsE;AACtE,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,SAAsB,GAAG,GAAG,CAOrF;AAED,mFAAmF;AACnF,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,UAAU,EAChB,IAAI,SAAyB,GAC5B,UAAU,CAEZ;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,UAAU,EAChB,IAAI,EAAE,MAAM,GACX;IAAE,UAAU,EAAE,UAAU,CAAC;IAAC,SAAS,EAAE,UAAU,CAAA;CAAE,CAoBnD"}

package/dist/index.d.ts

@@ -1,16 +1,21 @@
 export * from "./call-contracts.js";
 export * from "./call-contracts-wire.js";
 export * from "./accounts.js";
+export * from "./agent-guard.js";
+export * from "./audit.js";
 export * from "./config.js";
 export * from "./discovery.js";
-export * from "./keystore.js";
+export { deriveEvmPrivateKey, deriveSolanaPrivateKey, entropyToPhrase, EVM_DERIVATION_PATH, generateRecoveryPhrase, phraseToEntropy, phraseToSeed, SOLANA_DERIVATION_PATH, validateRecoveryPhrase, } from "./hd.js";
+export { changeKeystorePassphrase, createKeystore, createKeystoreFromPrivateKey, enableSolanaKey, encryptPrivateKey, getKeystorePassphrase, KeystoreError, promptForSecret, readKeystoreAddress, readKeystoreVersion, unlockKeystore, validatePrivateKey, type AgentCashKeystore, type CreateKeystoreOptions, type LegacyVapiKeystore, type VapiKeystore, type VapiKeystoreV3, type VapiPaymentAccount, } from "./keystore.js";
 export * from "./marketplace-contracts.js";
 export * from "./net-guard.js";
 export * from "./networks.js";
 export * from "./onramp.js";
+export * from "./passphrase.js";
 export * from "./policy.js";
 export * from "./receipts.js";
 export * from "./searches.js";
+export * from "./secret-store.js";
 export * from "./stats.js";
 export * from "./spend-policy.js";
 export * from "./support-report.js";
@@ -18,6 +23,7 @@ export * from "./sweep.js";
 export * from "./siwx.js";
 export * from "./svm.js";
 export * from "./wallet.js";
+export * from "./wallet-store.js";
 export * from "./x402.js";
 export { BROWSER_ENABLED_X402_NETWORK_CONFIG, CANONICAL_X402_USDC_NETWORKS, getCanonicalX402Usdc, type CanonicalX402UsdcIdentity, type CanonicalX402UsdcNetwork, type X402NetworkConfig, type X402TokenDomain, } from "./x402-networks.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,qBAAqB,CAAC;AACpC,cAAc,0BAA0B,CAAC;AACzC,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC;AAC9B,cAAc,4BAA4B,CAAC;AAC3C,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,eAAe,CAAC;AAC9B,cAAc,YAAY,CAAC;AAC3B,cAAc,mBAAmB,CAAC;AAClC,cAAc,qBAAqB,CAAC;AACpC,cAAc,YAAY,CAAC;AAC3B,cAAc,WAAW,CAAC;AAC1B,cAAc,UAAU,CAAC;AACzB,cAAc,aAAa,CAAC;AAC5B,cAAc,WAAW,CAAC;AAC1B,OAAO,EACL,mCAAmC,EACnC,4BAA4B,EAC5B,oBAAoB,EACpB,KAAK,yBAAyB,EAC9B,KAAK,wBAAwB,EAC7B,KAAK,iBAAiB,EACtB,KAAK,eAAe,GACrB,MAAM,oBAAoB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,qBAAqB,CAAC;AACpC,cAAc,0BAA0B,CAAC;AACzC,cAAc,eAAe,CAAC;AAC9B,cAAc,kBAAkB,CAAC;AACjC,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC;AAC/B,OAAO,EACL,mBAAmB,EACnB,sBAAsB,EACtB,eAAe,EACf,mBAAmB,EACnB,sBAAsB,EACtB,eAAe,EACf,YAAY,EACZ,sBAAsB,EACtB,sBAAsB,GACvB,MAAM,SAAS,CAAC;AAIjB,OAAO,EACL,wBAAwB,EACxB,cAAc,EACd,4BAA4B,EAC5B,eAAe,EACf,iBAAiB,EACjB,qBAAqB,EACrB,aAAa,EACb,eAAe,EACf,mBAAmB,EACnB,mBAAmB,EACnB,cAAc,EACd,kBAAkB,EAClB,KAAK,iBAAiB,EACtB,KAAK,qBAAqB,EAC1B,KAAK,kBAAkB,EACvB,KAAK,YAAY,EACjB,KAAK,cAAc,EACnB,KAAK,kBAAkB,GACxB,MAAM,eAAe,CAAC;AACvB,cAAc,4BAA4B,CAAC;AAC3C,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC;AAC5B,cAAc,iBAAiB,CAAC;AAChC,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,eAAe,CAAC;AAC9B,cAAc,mBAAmB,CAAC;AAClC,cAAc,YAAY,CAAC;AAC3B,cAAc,mBAAmB,CAAC;AAClC,cAAc,qBAAqB,CAAC;AACpC,cAAc,YAAY,CAAC;AAC3B,cAAc,WAAW,CAAC;AAC1B,cAAc,UAAU,CAAC;AACzB,cAAc,aAAa,CAAC;AAC5B,cAAc,mBAAmB,CAAC;AAClC,cAAc,WAAW,CAAC;AAC1B,OAAO,EACL,mCAAmC,EACnC,4BAA4B,EAC5B,oBAAoB,EACpB,KAAK,yBAAyB,EAC9B,KAAK,wBAAwB,EAC7B,KAAK,iBAAiB,EACtB,KAAK,eAAe,GACrB,MAAM,oBAAoB,CAAC"}