@vapi-network/core 0.2.2 → 0.3.0

package/dist/spend-policy.d.ts

@@ -1,19 +1,31 @@
 import { z } from "zod";
 import { type SpendCaps } from "./config.js";
+import { type WalletName } from "./wallet-name.js";
 declare const ledgerSchema: z.ZodObject<{
     date: z.ZodString;
     spentAtomic: z.ZodString;
 }, z.core.$strip>;
 export type SpendLedger = z.infer<typeof ledgerSchema>;
+export type SpendLedgerRow = SpendLedger & {
+    wallet: WalletName;
+};
 export declare class SpendCapError extends Error {
     readonly code: "per_call_cap_exceeded" | "per_day_cap_exceeded";
     constructor(code: "per_call_cap_exceeded" | "per_day_cap_exceeded", message: string);
 }
 export declare function utcDateKey(now?: Date): string;
-export declare function readSpendLedger(path?: string, now?: Date): Promise<SpendLedger>;
+/** Today's spend for one wallet. Other wallets and older days read as zero. */
+export declare function readSpendLedger(path?: string, now?: Date, wallet?: WalletName): Promise<SpendLedger>;
+/** Today's spend of every wallet that has spent today. */
+export declare function readSpendLedgerRows(path?: string, now?: Date): Promise<SpendLedgerRow[]>;
+/**
+ * Reserves one payment against the caps of one wallet. Per-day totals are kept
+ * per wallet, so an agent wallet cannot spend the owner's daily allowance.
+ */
 export declare function reserveSpend(amountAtomic: bigint, caps: SpendCaps, options?: {
     ledgerPath?: string;
     now?: Date;
+    wallet?: WalletName;
 }): Promise<SpendLedger>;
 export {};
 //# sourceMappingURL=spend-policy.d.ts.map

package/dist/spend-policy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"spend-policy.d.ts","sourceRoot":"","sources":["../src/spend-policy.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAoC,KAAK,SAAS,EAAE,MAAM,aAAa,CAAC;AAE/E,QAAA,MAAM,YAAY;;;iBAGhB,CAAC;AAEH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAEvD,qBAAa,aAAc,SAAQ,KAAK;aAEpB,IAAI,EAAE,uBAAuB,GAAG,sBAAsB;gBAAtD,IAAI,EAAE,uBAAuB,GAAG,sBAAsB,EACtE,OAAO,EAAE,MAAM;CAKlB;AAED,wBAAgB,UAAU,CAAC,GAAG,OAAa,GAAG,MAAM,CAEnD;AAED,wBAAsB,eAAe,CACnC,IAAI,SAA6B,EACjC,GAAG,OAAa,GACf,OAAO,CAAC,WAAW,CAAC,CAYtB;AAED,wBAAsB,YAAY,CAChC,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,SAAS,EACf,OAAO,CAAC,EAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,IAAI,CAAA;CAAE,GAC5C,OAAO,CAAC,WAAW,CAAC,CAgCtB"}
+{"version":3,"file":"spend-policy.d.ts","sourceRoot":"","sources":["../src/spend-policy.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAoC,KAAK,SAAS,EAAE,MAAM,aAAa,CAAC;AAC/E,OAAO,EAAyC,KAAK,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAE1F,QAAA,MAAM,YAAY;;;iBAGhB,CAAC;AAkBH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AACvD,MAAM,MAAM,cAAc,GAAG,WAAW,GAAG;IAAE,MAAM,EAAE,UAAU,CAAA;CAAE,CAAC;AAElE,qBAAa,aAAc,SAAQ,KAAK;aAEpB,IAAI,EAAE,uBAAuB,GAAG,sBAAsB;gBAAtD,IAAI,EAAE,uBAAuB,GAAG,sBAAsB,EACtE,OAAO,EAAE,MAAM;CAKlB;AAED,wBAAgB,UAAU,CAAC,GAAG,OAAa,GAAG,MAAM,CAEnD;AAED,+EAA+E;AAC/E,wBAAsB,eAAe,CACnC,IAAI,SAA6B,EACjC,GAAG,OAAa,EAChB,MAAM,GAAE,UAAgC,GACvC,OAAO,CAAC,WAAW,CAAC,CAItB;AAED,0DAA0D;AAC1D,wBAAsB,mBAAmB,CACvC,IAAI,SAA6B,EACjC,GAAG,OAAa,GACf,OAAO,CAAC,cAAc,EAAE,CAAC,CAkB3B;AAED;;;GAGG;AACH,wBAAsB,YAAY,CAChC,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,SAAS,EACf,OAAO,CAAC,EAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,IAAI,CAAC;IAAC,MAAM,CAAC,EAAE,UAAU,CAAA;CAAE,GACjE,OAAO,CAAC,WAAW,CAAC,CAsCtB"}

package/dist/stats.d.ts

@@ -1,4 +1,4 @@
-import type { Receipt } from "./receipts.js";
+import { type Receipt } from "./receipts.js";
 import type { SearchEvent } from "./searches.js";
 export declare const STATS_RANGES: readonly ["24h", "7d", "30d"];
 export type StatsRange = (typeof STATS_RANGES)[number];
@@ -50,6 +50,7 @@ export declare function aggregateStats(args: {
     range?: StatsRange;
     now?: Date;
 }): StatsReport;
-export declare function filterReceiptsByRange(receipts: readonly Receipt[], range: StatsRange, now?: Date): Receipt[];
+/** Keeps the receipts of one range, and of one wallet when `wallet` is given. */
+export declare function filterReceiptsByRange(receipts: readonly Receipt[], range: StatsRange, now?: Date, wallet?: string): Receipt[];
 export declare function receiptsToCsv(receipts: readonly Receipt[]): string;
 //# sourceMappingURL=stats.d.ts.map

package/dist/stats.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"stats.d.ts","sourceRoot":"","sources":["../src/stats.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAEjD,eAAO,MAAM,YAAY,+BAAgC,CAAC;AAC1D,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC;AACvD,MAAM,MAAM,kBAAkB,GAAG,QAAQ,CAAC;IAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC,CAAC;AAC1F,MAAM,MAAM,cAAc,GAAG,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;AAgB7D,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC;QACxB,QAAQ,EAAE,MAAM,CAAC;QACjB,KAAK,EAAE,MAAM,CAAC;QACd,UAAU,EAAE,MAAM,CAAC;QACnB,cAAc,EAAE,MAAM,CAAC;KACxB,CAAC,CAAC;IACH,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,cAAc,EAAE,QAAQ,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC,CAAC,CAAC;IAC/F,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC;QACzB,KAAK,EAAE,kBAAkB,CAAC;QAC1B,MAAM,EAAE,QAAQ,CACd,MAAM,CAAC,UAAU,GAAG,OAAO,GAAG,MAAM,GAAG,SAAS,GAAG,QAAQ,EAAE,kBAAkB,CAAC,CACjF,CAAC;KACH,CAAC,CAAC;IACH,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC;QAC7B,OAAO,EAAE,SAAS,YAAY,EAAE,CAAC;QACjC,OAAO,EAAE,SAAS,YAAY,EAAE,CAAC;KAClC,CAAC,CAAC;IACH,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC;QACxB,KAAK,EAAE,MAAM,CAAC;QACd,cAAc,EAAE,MAAM,CAAC;QACvB,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC;YAAE,KAAK,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;SAAE,CAAC,CAAC,CAAC,CAAC;KACtF,CAAC,CAAC;CACJ;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE;IACnC,QAAQ,EAAE,SAAS,OAAO,EAAE,CAAC;IAC7B,QAAQ,EAAE,SAAS,WAAW,EAAE,CAAC;IACjC,KAAK,CAAC,EAAE,UAAU,CAAC;IACnB,GAAG,CAAC,EAAE,IAAI,CAAC;CACZ,GAAG,WAAW,CAoHd;AAED,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,SAAS,OAAO,EAAE,EAC5B,KAAK,EAAE,UAAU,EACjB,GAAG,OAAa,GACf,OAAO,EAAE,CAGX;AAED,wBAAgB,aAAa,CAAC,QAAQ,EAAE,SAAS,OAAO,EAAE,GAAG,MAAM,CAqElE"}
+{"version":3,"file":"stats.d.ts","sourceRoot":"","sources":["../src/stats.ts"],"names":[],"mappings":"AAAA,OAAO,EAA0B,KAAK,OAAO,EAAE,MAAM,eAAe,CAAC;AACrE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAEjD,eAAO,MAAM,YAAY,+BAAgC,CAAC;AAC1D,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC;AACvD,MAAM,MAAM,kBAAkB,GAAG,QAAQ,CAAC;IAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC,CAAC;AAC1F,MAAM,MAAM,cAAc,GAAG,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;AAgB7D,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC;QACxB,QAAQ,EAAE,MAAM,CAAC;QACjB,KAAK,EAAE,MAAM,CAAC;QACd,UAAU,EAAE,MAAM,CAAC;QACnB,cAAc,EAAE,MAAM,CAAC;KACxB,CAAC,CAAC;IACH,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,cAAc,EAAE,QAAQ,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC,CAAC,CAAC;IAC/F,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC;QACzB,KAAK,EAAE,kBAAkB,CAAC;QAC1B,MAAM,EAAE,QAAQ,CACd,MAAM,CAAC,UAAU,GAAG,OAAO,GAAG,MAAM,GAAG,SAAS,GAAG,QAAQ,EAAE,kBAAkB,CAAC,CACjF,CAAC;KACH,CAAC,CAAC;IACH,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC;QAC7B,OAAO,EAAE,SAAS,YAAY,EAAE,CAAC;QACjC,OAAO,EAAE,SAAS,YAAY,EAAE,CAAC;KAClC,CAAC,CAAC;IACH,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC;QACxB,KAAK,EAAE,MAAM,CAAC;QACd,cAAc,EAAE,MAAM,CAAC;QACvB,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC;YAAE,KAAK,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;SAAE,CAAC,CAAC,CAAC,CAAC;KACtF,CAAC,CAAC;CACJ;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE;IACnC,QAAQ,EAAE,SAAS,OAAO,EAAE,CAAC;IAC7B,QAAQ,EAAE,SAAS,WAAW,EAAE,CAAC;IACjC,KAAK,CAAC,EAAE,UAAU,CAAC;IACnB,GAAG,CAAC,EAAE,IAAI,CAAC;CACZ,GAAG,WAAW,CAoHd;AAED,iFAAiF;AACjF,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,SAAS,OAAO,EAAE,EAC5B,KAAK,EAAE,UAAU,EACjB,GAAG,OAAa,EAChB,MAAM,CAAC,EAAE,MAAM,GACd,OAAO,EAAE,CAIX;AAED,wBAAgB,aAAa,CAAC,QAAQ,EAAE,SAAS,OAAO,EAAE,GAAG,MAAM,CAqElE"}

package/dist/support-report.d.ts

@@ -1,5 +1,5 @@
 import { type LookupFn } from "./net-guard.js";
-export declare const VAPI_CLIENT_VERSION = "0.2.2";
+export declare const VAPI_CLIENT_VERSION = "0.3.0";
 export type SupportSystemInfo = {
     platform: string;
     release: string;

package/dist/wallet-name.d.ts

@@ -0,0 +1,18 @@
+import { z } from "zod";
+/**
+ * The wallet a record belongs to when it predates named wallets. Receipts and
+ * spend-ledger rows written before 0.3.0 carry no wallet, and the 0.2.x
+ * keystore becomes this wallet during the layout migration.
+ */
+export declare const DEFAULT_WALLET_NAME = "main";
+/**
+ * A wallet name is also a file name under `~/.vapi/wallets/`, so it stays in
+ * the small set that is safe on every filesystem and unambiguous in a shell:
+ * lowercase letters, digits and dashes, 1 to 32 characters, never starting
+ * with a dash.
+ */
+export declare const WALLET_NAME_PATTERN: RegExp;
+export type WalletName = string;
+export declare const walletNameSchema: z.ZodString;
+export declare function isWalletName(value: string): boolean;
+//# sourceMappingURL=wallet-name.d.ts.map

package/dist/wallet-name.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallet-name.d.ts","sourceRoot":"","sources":["../src/wallet-name.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,SAAS,CAAC;AAE1C;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB,QAA8B,CAAC;AAE/D,MAAM,MAAM,UAAU,GAAG,MAAM,CAAC;AAEhC,eAAO,MAAM,gBAAgB,aAK1B,CAAC;AAEJ,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAEnD"}

package/dist/wallet-store.d.ts

@@ -0,0 +1,195 @@
+import { z } from "zod";
+import { type SpendCaps } from "./config.js";
+import { type VapiPaymentAccount } from "./keystore.js";
+import { type WalletName } from "./wallet-name.js";
+export { DEFAULT_WALLET_NAME, isWalletName, walletNameSchema, WALLET_NAME_PATTERN, type WalletName, } from "./wallet-name.js";
+/** What `wallets.json` records about one wallet. The keys live in its keystore. */
+export declare const walletEntrySchema: z.ZodObject<{
+    createdAt: z.ZodISODateTime;
+    label: z.ZodOptional<z.ZodString>;
+    spendCaps: z.ZodObject<{
+        perCallAtomic: z.ZodString;
+        perDayAtomic: z.ZodString;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+export declare const walletRegistrySchema: z.ZodObject<{
+    version: z.ZodLiteral<1>;
+    default: z.ZodOptional<z.ZodString>;
+    wallets: z.ZodRecord<z.ZodString, z.ZodObject<{
+        createdAt: z.ZodISODateTime;
+        label: z.ZodOptional<z.ZodString>;
+        spendCaps: z.ZodObject<{
+            perCallAtomic: z.ZodString;
+            perDayAtomic: z.ZodString;
+        }, z.core.$strip>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type WalletEntry = z.infer<typeof walletEntrySchema>;
+export type WalletRegistry = z.infer<typeof walletRegistrySchema>;
+/** How a caller names the wallet it wants; every field is optional. */
+export type WalletSelection = {
+    /** An explicit name, from `--wallet` or an MCP argument. */
+    name?: string | undefined;
+    /** Environment to read `VAPI_WALLET` from. Defaults to `process.env`. */
+    env?: NodeJS.ProcessEnv | undefined;
+};
+export type ResolvedWallet = {
+    name: WalletName;
+    path: string;
+    entry: WalletEntry;
+};
+export type WalletInfo = ResolvedWallet & {
+    address?: string;
+    solanaAddress?: string;
+    keystoreVersion?: number;
+    isDefault: boolean;
+    spendCaps: SpendCaps;
+    label?: string;
+    createdAt: string;
+};
+export type CreatedWallet = ResolvedWallet & {
+    account: VapiPaymentAccount;
+    recoveryPhrase: string;
+};
+export type ImportedWallet = ResolvedWallet & {
+    account: VapiPaymentAccount;
+};
+export type TrashedWallet = {
+    name: WalletName;
+    removedAt: string;
+    path: string;
+    entry?: WalletEntry;
+};
+/** Reads the USDC balance of an address, so `remove` can refuse a funded wallet. */
+export type WalletBalanceReader = (address: string) => Promise<bigint>;
+export type WalletStoreOptions = {
+    /** Injected clock, so `createdAt` is deterministic in tests. */
+    now?: () => Date;
+};
+export type LayoutMigration = {
+    moved: boolean;
+    from?: string;
+    to?: string;
+};
+/**
+ * The wallets on this machine: one registry file, one keystore per wallet, and
+ * the rules for picking the wallet a command acts on. Keys never leave the
+ * keystore files; the store only moves, names and caps them.
+ *
+ * Layout under the config home (`~/.vapi`, or `VAPI_HOME`):
+ *
+ * ```
+ * wallets.json          registry: default wallet, per-wallet caps and labels
+ * wallets/<name>.json   one keystore per wallet, mode 0600
+ * wallets/.trash/       removed wallets, kept encrypted, never auto-deleted
+ * keystore.json         symlink to wallets/main.json after the 0.2.x migration
+ * ```
+ */
+export declare class WalletStore {
+    /** The config home these wallets live under. */
+    readonly home: string;
+    private readonly options;
+    private registry;
+    private constructor();
+    /** Opens the store, migrating a 0.2.x single-keystore home on the way. */
+    static open(home?: string, options?: WalletStoreOptions): Promise<WalletStore>;
+    get registryPath(): string;
+    get walletsDirectory(): string;
+    get trashDirectory(): string;
+    /** The keystore path of a wallet, whether or not it exists yet. */
+    pathFor(name: string): string;
+    /** The names this machine knows, in registry order. */
+    names(): WalletName[];
+    /** The name a command uses when nothing selects another wallet. */
+    get defaultName(): WalletName | undefined;
+    /** True once `wallets.json` exists; false for an un-migrated 0.2.x home. */
+    hasRegistry(): boolean;
+    entry(name: string): WalletEntry | undefined;
+    has(name: string): boolean;
+    /** A copy of the registry as it was last read or written. */
+    snapshot(): WalletRegistry;
+    /** Re-reads `wallets.json` from disk. */
+    reload(): Promise<WalletRegistry>;
+    /**
+     * Picks the wallet a command acts on: an explicit name first, then
+     * `VAPI_WALLET`, then the registry default.
+     */
+    resolve(selection?: WalletSelection): ResolvedWallet;
+    /** Every wallet with its addresses, read without a passphrase. */
+    list(): Promise<WalletInfo[]>;
+    /** The stored Base address of a wallet, without its passphrase. */
+    readAddress(name: string): Promise<string | undefined>;
+    /**
+     * Creates a wallet from a fresh or supplied recovery phrase. The first wallet
+     * on a machine also becomes the default. The phrase is returned once and is
+     * never written anywhere but the encrypted keystore.
+     */
+    create(name: string, passphrase: string, options?: {
+        phrase?: string;
+        enableSolana?: boolean;
+        label?: string;
+        spendCaps?: SpendCaps;
+    }): Promise<CreatedWallet>;
+    /** Wraps a private key the user already holds in a new named wallet. */
+    importKey(name: string, passphrase: string, privateKey: string, options?: {
+        label?: string;
+        spendCaps?: SpendCaps;
+    }): Promise<ImportedWallet>;
+    /** Opens one wallet's keystore with its passphrase. */
+    unlock(name: string, passphrase: string): Promise<VapiPaymentAccount>;
+    setDefault(name: string): Promise<WalletRegistry>;
+    setSpendCaps(name: string, caps: SpendCaps): Promise<WalletEntry>;
+    /** Sets or, with `undefined`, clears the human label of a wallet. */
+    setLabel(name: string, label: string | undefined): Promise<WalletEntry>;
+    /**
+     * Renames a wallet everywhere its name is recorded: the keystore file, the
+     * registry, and the wallet field of its receipts. The keystore contents are
+     * moved untouched.
+     */
+    rename(oldName: string, newName: string): Promise<ResolvedWallet>;
+    /**
+     * Moves a wallet's keystore to `wallets/.trash/`. Nothing is deleted: the
+     * encrypted file stays, and its passphrase still opens it. The default wallet
+     * and a wallet that still holds USDC are refused unless forced.
+     *
+     * `allowDefault` exists for one caller: `vapi import --replace`, which puts a
+     * new wallet under the same name back in place immediately afterwards, so the
+     * machine is never left without a default. `vapi wallet remove` never sets it.
+     */
+    remove(name: string, options?: {
+        force?: boolean;
+        balanceReader?: WalletBalanceReader;
+        allowDefault?: boolean;
+    }): Promise<TrashedWallet>;
+    /** Brings the most recently removed wallet of that name back. */
+    restore(name: string): Promise<ResolvedWallet>;
+    /** Every removed wallet still in the trash, newest first. */
+    listTrash(): Promise<TrashedWallet[]>;
+    /**
+     * Moves a 0.2.x home into the wallet layout, once: `keystore.json` becomes
+     * `wallets/main.json` and `keystore.json` stays behind as a symlink for one
+     * release, so scripts and 0.2.x callers keep working. The keystore contents
+     * are never rewritten, and a home without a keystore migrates nothing.
+     */
+    migrateLegacyLayout(): Promise<LayoutMigration>;
+    private now;
+    private newEntry;
+    private prepareNewWallet;
+    private registerWallet;
+    /**
+     * Keeps the compatibility symlink honest: when the wallet it points at moves,
+     * the link follows it, and when that wallet is removed, the link goes too.
+     */
+    private retargetLegacyKeystoreLink;
+    private update;
+    private readRegistry;
+    private writeRegistry;
+}
+/**
+ * The caps that apply to one wallet: its own entry, or — in a home that has no
+ * registry yet — the legacy `config.spendCaps`, and otherwise the defaults.
+ */
+export declare function spendCapsForWallet(store: WalletStore, name?: WalletName): Promise<SpendCaps>;
+/** Rejects anything that is not a wallet name, including path traversal. */
+export declare function assertWalletName(value: string): WalletName;
+//# sourceMappingURL=wallet-store.d.ts.map

package/dist/wallet-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallet-store.d.ts","sourceRoot":"","sources":["../src/wallet-store.ts"],"names":[],"mappings":"AAeA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAKL,KAAK,SAAS,EACf,MAAM,aAAa,CAAC;AACrB,OAAO,EAKL,KAAK,kBAAkB,EACxB,MAAM,eAAe,CAAC;AAEvB,OAAO,EAIL,KAAK,UAAU,EAChB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,mBAAmB,EACnB,YAAY,EACZ,gBAAgB,EAChB,mBAAmB,EACnB,KAAK,UAAU,GAChB,MAAM,kBAAkB,CAAC;AAE1B,mFAAmF;AACnF,eAAO,MAAM,iBAAiB;;;;;;;iBAI5B,CAAC;AAEH,eAAO,MAAM,oBAAoB;;;;;;;;;;;iBAI/B,CAAC;AAEH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAC5D,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE,uEAAuE;AACvE,MAAM,MAAM,eAAe,GAAG;IAC5B,4DAA4D;IAC5D,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,yEAAyE;IACzE,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,GAAG,SAAS,CAAC;CACrC,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,IAAI,EAAE,UAAU,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,WAAW,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG,cAAc,GAAG;IACxC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,SAAS,EAAE,OAAO,CAAC;IACnB,SAAS,EAAE,SAAS,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG,cAAc,GAAG;IAC3C,OAAO,EAAE,kBAAkB,CAAC;IAC5B,cAAc,EAAE,MAAM,CAAC;CACxB,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG,cAAc,GAAG;IAC5C,OAAO,EAAE,kBAAkB,CAAC;CAC7B,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,IAAI,EAAE,UAAU,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,WAAW,CAAC;CACrB,CAAC;AAEF,oFAAoF;AACpF,MAAM,MAAM,mBAAmB,GAAG,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;AAEvE,MAAM,MAAM,kBAAkB,GAAG;IAC/B,gEAAgE;IAChE,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,KAAK,EAAE,OAAO,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,EAAE,CAAC,EAAE,MAAM,CAAC;CACb,CAAC;AAOF;;;;;;;;;;;;;GAaG;AACH,qBAAa,WAAW;IAIpB,gDAAgD;IAChD,QAAQ,CAAC,IAAI,EAAE,MAAM;IACrB,OAAO,CAAC,QAAQ,CAAC,OAAO;IAL1B,OAAO,CAAC,QAAQ,CAAiB;IAEjC,OAAO;IASP,0EAA0E;WAC7D,IAAI,CACf,IAAI,SAA2B,EAC/B,OAAO,GAAE,kBAAuB,GAC/B,OAAO,CAAC,WAAW,CAAC;IAOvB,IAAI,YAAY,IAAI,MAAM,CAEzB;IAED,IAAI,gBAAgB,IAAI,MAAM,CAE7B;IAED,IAAI,cAAc,IAAI,MAAM,CAE3B;IAED,mEAAmE;IACnE,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM;IAI7B,uDAAuD;IACvD,KAAK,IAAI,UAAU,EAAE;IAIrB,mEAAmE;IACnE,IAAI,WAAW,IAAI,UAAU,GAAG,SAAS,CAExC;IAED,4EAA4E;IAC5E,WAAW,IAAI,OAAO;IAItB,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS;IAI5C,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAI1B,6DAA6D;IAC7D,QAAQ,IAAI,cAAc;IAI1B,yCAAyC;IACnC,MAAM,IAAI,OAAO,CAAC,cAAc,CAAC;IAKvC;;;OAGG;IACH,OAAO,CAAC,SAAS,GAAE,eAAoB,GAAG,cAAc;IAexD,kEAAkE;IAC5D,IAAI,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;IAqBnC,mEAAmE;IAC7D,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;IAI5D;;;;OAIG;IACG,MAAM,CACV,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE,MAAM,EAClB,OAAO,GAAE;QACP,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,YAAY,CAAC,EAAE,OAAO,CAAC;QACvB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,SAAS,CAAC,EAAE,SAAS,CAAC;KAClB,GACL,OAAO,CAAC,aAAa,CAAC;IAUzB,wEAAwE;IAClE,SAAS,CACb,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,EAClB,OAAO,GAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,SAAS,CAAA;KAAO,GACtD,OAAO,CAAC,cAAc,CAAC;IAO1B,uDAAuD;IACjD,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAKrE,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;IAOjD,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,GAAG,OAAO,CAAC,WAAW,CAAC;IAUvE,qEAAqE;IAC/D,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC,WAAW,CAAC;IAkB7E;;;;OAIG;IACG,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;IAyBvE;;;;;;;;OAQG;IACG,MAAM,CACV,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE;QACP,KAAK,CAAC,EAAE,OAAO,CAAC;QAChB,aAAa,CAAC,EAAE,mBAAmB,CAAC;QACpC,YAAY,CAAC,EAAE,OAAO,CAAC;KACnB,GACL,OAAO,CAAC,aAAa,CAAC;IAgCzB,iEAAiE;IAC3D,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;IAyBpD,6DAA6D;IACvD,SAAS,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;IAqB3C;;;;;OAKG;IACG,mBAAmB,IAAI,OAAO,CAAC,eAAe,CAAC;IAoCrD,OAAO,CAAC,GAAG;IAIX,OAAO,CAAC,QAAQ;YAUF,gBAAgB;YAehB,cAAc;IAY5B;;;OAGG;YACW,0BAA0B;YAqB1B,MAAM;YAON,YAAY;YAkBZ,aAAa;CAK5B;AAED;;;GAGG;AACH,wBAAsB,kBAAkB,CACtC,KAAK,EAAE,WAAW,EAClB,IAAI,GAAE,UAAgC,GACrC,OAAO,CAAC,SAAS,CAAC,CAIpB;AAED,4EAA4E;AAC5E,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,UAAU,CAa1D"}

package/dist/wallet.d.ts

@@ -23,9 +23,4 @@ export declare class LocalWallet implements Wallet {
     signTypedData(typedData: X402TypedData): Promise<Hex>;
     balance(network: string, configured: ConfiguredNetwork): Promise<bigint>;
 }
-export declare function openWallet(options: {
-    passphrase: string;
-    policy: Policy;
-    keystorePath?: string;
-}): Promise<Wallet>;
 //# sourceMappingURL=wallet.d.ts.map

package/dist/wallet.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"wallet.d.ts","sourceRoot":"","sources":["../src/wallet.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,MAAM,CAAC;AAIzC,OAAO,EAAmB,KAAK,iBAAiB,EAAE,MAAM,eAAe,CAAC;AACxE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAEzD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAE/C,MAAM,WAAW,MAAM;IACrB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE;QAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAC/C,aAAa,CAAC,SAAS,EAAE,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;CACvD;AAED,gFAAgF;AAChF,MAAM,WAAW,MAAO,SAAQ,MAAM;IACpC,SAAS,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChD,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,iBAAiB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CAC1E;AAED,qBAAa,WAAY,YAAW,MAAM;IAItC,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,MAAM;IAJzB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;gBAGP,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM;IAK3B,SAAS,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;IAI/C,aAAa,CAAC,SAAS,EAAE,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC;IAIrD,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,iBAAiB,GAAG,OAAO,CAAC,MAAM,CAAC;CAS/E;AAED,wBAAsB,UAAU,CAAC,OAAO,EAAE;IACxC,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,GAAG,OAAO,CAAC,MAAM,CAAC,CAMlB"}
+{"version":3,"file":"wallet.d.ts","sourceRoot":"","sources":["../src/wallet.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,MAAM,CAAC;AAEzC,OAAO,EAAmB,KAAK,iBAAiB,EAAE,MAAM,eAAe,CAAC;AACxE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAEzD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAE/C,MAAM,WAAW,MAAM;IACrB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE;QAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAC/C,aAAa,CAAC,SAAS,EAAE,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;CACvD;AAED,gFAAgF;AAChF,MAAM,WAAW,MAAO,SAAQ,MAAM;IACpC,SAAS,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChD,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,iBAAiB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CAC1E;AAED,qBAAa,WAAY,YAAW,MAAM;IAItC,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,MAAM;IAJzB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;gBAGP,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM;IAK3B,SAAS,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;IAI/C,aAAa,CAAC,SAAS,EAAE,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC;IAIrD,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,iBAAiB,GAAG,OAAO,CAAC,MAAM,CAAC;CAS/E"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vapi-network/core",
-  "version": "0.2.2",
+  "version": "0.3.0",
   "description": "Non-custodial x402 protocol, wallet policy, discovery, and receipts core",
   "license": "Apache-2.0",
   "repository": {
@@ -22,6 +22,10 @@
     ".": {
       "types": "./dist/index.d.ts",
       "import": "./dist/index.js"
+    },
+    "./secrets": {
+      "types": "./dist/secrets.d.ts",
+      "import": "./dist/secrets.js"
     }
   },
   "dependencies": {},