@vapi-network/core 0.2.3 → 0.3.0

package/dist/keystore.d.ts

@@ -48,21 +48,86 @@ declare const keystoreSchema: z.ZodObject<{
         }, z.core.$strip>;
     }, z.core.$strip>;
 }, z.core.$strip>;
+declare const keystoreV3Schema: z.ZodObject<{
+    version: z.ZodLiteral<3>;
+    address: z.ZodString;
+    keys: z.ZodObject<{
+        evm: z.ZodObject<{
+            type: z.ZodLiteral<"secp256k1">;
+            address: z.ZodString;
+            path: z.ZodString;
+        }, z.core.$strip>;
+        solana: z.ZodOptional<z.ZodObject<{
+            type: z.ZodLiteral<"ed25519">;
+            address: z.ZodString;
+            path: z.ZodString;
+        }, z.core.$strip>>;
+    }, z.core.$strip>;
+    crypto: z.ZodObject<{
+        cipher: z.ZodLiteral<"aes-256-gcm">;
+        ciphertext: z.ZodString;
+        iv: z.ZodString;
+        authTag: z.ZodString;
+        kdf: z.ZodLiteral<"scrypt">;
+        salt: z.ZodString;
+        kdfParams: z.ZodObject<{
+            n: z.ZodLiteral<number>;
+            r: z.ZodLiteral<8>;
+            p: z.ZodLiteral<1>;
+            dkLen: z.ZodLiteral<32>;
+        }, z.core.$strip>;
+    }, z.core.$strip>;
+}, z.core.$strip>;
 export type VapiKeystore = z.infer<typeof keystoreSchema>;
+/** Keystore version 3: one BIP-39 recovery phrase behind both accounts. */
+export type VapiKeystoreV3 = z.infer<typeof keystoreV3Schema>;
 export type LegacyVapiKeystore = z.infer<typeof legacyKeystoreSchema>;
 /** @deprecated Use VapiKeystore. */
 export type AgentCashKeystore = VapiKeystore;
 export type VapiPaymentAccount = ReturnType<typeof privateKeyToAccount> & {
     readonly solana?: KeyPairSigner;
 };
+export type CreateKeystoreOptions = {
+    enableSolana?: boolean;
+    /** Restore an existing wallet instead of generating a new phrase. */
+    phrase?: string;
+};
 export declare class KeystoreError extends Error {
     constructor(message: string, options?: ErrorOptions);
 }
 export declare function encryptPrivateKey(privateKey: Hex, passphrase: string): Promise<VapiKeystore>;
-export declare function decryptPrivateKey(keystore: VapiKeystore, passphrase: string): Promise<Hex>;
-export declare function createKeystore(passphrase: string, path?: string, options?: {
-    enableSolana?: boolean;
+/** Published only through `@vapi-network/core/secrets`. */
+export declare function decryptPrivateKey(keystore: VapiKeystore | VapiKeystoreV3, passphrase: string): Promise<Hex>;
+/**
+ * Creates a version 3 keystore: both accounts come from one BIP-39 recovery
+ * phrase, so the wallet can be restored in MetaMask, Rabby or Phantom from the
+ * words alone. The phrase is returned once and never written anywhere.
+ *
+ * Published only through `@vapi-network/core/secrets`.
+ */
+export declare function createKeystoreWithPhrase(passphrase: string, path?: string, options?: CreateKeystoreOptions): Promise<{
+    account: VapiPaymentAccount;
+    recoveryPhrase: string;
+}>;
+/**
+ * Wraps a private key the user already holds in a version 2 keystore, for
+ * `vapi import --key`. Such a wallet has no recovery phrase, so `vapi backup`
+ * keeps pointing at `vapi export-key` for it.
+ */
+export declare function createKeystoreFromPrivateKey(passphrase: string, path: string | undefined, options: {
+    privateKey: string;
 }): Promise<VapiPaymentAccount>;
+/** The shape every wallet import accepts: 0x and 32 bytes of hexadecimal. */
+export declare function validatePrivateKey(value: string): Hex;
+/**
+ * Re-seals the keystore under a new passphrase: fresh salt and IV, the same
+ * keys, the same addresses, and the same atomic write as every other keystore
+ * change. A version 1 file becomes version 2, the upgrade `unlockKeystore`
+ * already performs.
+ */
+export declare function changeKeystorePassphrase(oldPassphrase: string, newPassphrase: string, path?: string): Promise<VapiPaymentAccount>;
+/** `createKeystoreWithPhrase` for callers that do not show the phrase. */
+export declare function createKeystore(passphrase: string, path?: string, options?: CreateKeystoreOptions): Promise<VapiPaymentAccount>;
 export declare function unlockKeystore(passphrase: string, path?: string): Promise<VapiPaymentAccount>;
 /**
  * The stored address, read without the passphrase. Only the encrypted key
@@ -70,6 +135,12 @@ export declare function unlockKeystore(passphrase: string, path?: string): Promi
  * to replace. Returns undefined for a missing or unreadable keystore.
  */
 export declare function readKeystoreAddress(path?: string): Promise<string | undefined>;
+/**
+ * The stored format version, read without the passphrase, so a command can say
+ * why a version 1 or 2 wallet has no recovery phrase. Undefined for a missing
+ * or unreadable keystore.
+ */
+export declare function readKeystoreVersion(path?: string): Promise<number | undefined>;
 export type ExportedVapiKeys = {
     evm: {
         address: string;
@@ -85,12 +156,31 @@ export type ExportedVapiKeys = {
  * for the EVM key, and the base58 64-byte Ed25519 secret key for Solana. Only
  * `vapi export-key` may call this, and it must never write the result anywhere
  * but the caller's stdout.
+ *
+ * Published only through `@vapi-network/core/secrets`.
  */
 export declare function exportKeystoreKeys(passphrase: string, path?: string): Promise<ExportedVapiKeys>;
-/** Lazily adds a locally generated Ed25519 seed without replacing the EVM key. */
+/**
+ * Adds the Solana account. A version 3 wallet derives it from the recovery
+ * phrase it already has; older files get a locally generated Ed25519 seed,
+ * which the EVM key never replaces.
+ */
 export declare function enableSolanaKey(passphrase: string, path?: string): Promise<VapiPaymentAccount>;
+/**
+ * The 12 or 24 words behind a version 3 wallet, for `vapi backup`. Callers must
+ * print it to the user and nowhere else. Older keystores have no phrase.
+ *
+ * Published only through `@vapi-network/core/secrets`.
+ */
+export declare function exportRecoveryPhrase(passphrase: string, path?: string): Promise<string>;
 export declare function getKeystorePassphrase(options?: {
     confirm?: boolean;
 }): Promise<string>;
+/**
+ * Reads one line from the terminal without echoing it, for passphrases,
+ * recovery phrases, and private keys. The prompt goes to stderr so stdout stays
+ * a clean channel, and the secret never reaches the terminal's scrollback.
+ */
+export declare function promptForSecret(prompt: string, noTerminalHint?: string): Promise<string>;
 export {};
 //# sourceMappingURL=keystore.d.ts.map

package/dist/keystore.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"keystore.d.ts","sourceRoot":"","sources":["../src/keystore.ts"],"names":[],"mappings":"AAKA,OAAO,EAIL,KAAK,aAAa,EACnB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAsB,mBAAmB,EAAE,MAAM,eAAe,CAAC;AACxE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,MAAM,CAAC;AA0BhC,QAAA,MAAM,oBAAoB;;;;;;;;;;;;;;;;;iBAIxB,CAAC;AAEH,QAAA,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAgBlB,CAAC;AAEH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAC1D,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AACtE,oCAAoC;AACpC,MAAM,MAAM,iBAAiB,GAAG,YAAY,CAAC;AAE7C,MAAM,MAAM,kBAAkB,GAAG,UAAU,CAAC,OAAO,mBAAmB,CAAC,GAAG;IACxE,QAAQ,CAAC,MAAM,CAAC,EAAE,aAAa,CAAC;CACjC,CAAC;AAaF,qBAAa,aAAc,SAAQ,KAAK;gBAC1B,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,YAAY;CAIpD;AAyBD,wBAAsB,iBAAiB,CACrC,UAAU,EAAE,GAAG,EACf,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,YAAY,CAAC,CAEvB;AA6CD,wBAAsB,iBAAiB,CAAC,QAAQ,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAEhG;AAsDD,wBAAsB,cAAc,CAClC,UAAU,EAAE,MAAM,EAClB,IAAI,SAA0B,EAC9B,OAAO,GAAE;IAAE,YAAY,CAAC,EAAE,OAAO,CAAA;CAAO,GACvC,OAAO,CAAC,kBAAkB,CAAC,CA2B7B;AAED,wBAAsB,cAAc,CAClC,UAAU,EAAE,MAAM,EAClB,IAAI,SAA0B,GAC7B,OAAO,CAAC,kBAAkB,CAAC,CAmB7B;AAED;;;;GAIG;AACH,wBAAsB,mBAAmB,CACvC,IAAI,SAA0B,GAC7B,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAgB7B;AAED,MAAM,MAAM,gBAAgB,GAAG;IAC7B,GAAG,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,GAAG,CAAA;KAAE,CAAC;IAC1C,MAAM,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;CACjD,CAAC;AAEF;;;;;GAKG;AACH,wBAAsB,kBAAkB,CACtC,UAAU,EAAE,MAAM,EAClB,IAAI,SAA0B,GAC7B,OAAO,CAAC,gBAAgB,CAAC,CA4B3B;AAED,kFAAkF;AAClF,wBAAsB,eAAe,CACnC,UAAU,EAAE,MAAM,EAClB,IAAI,SAA0B,GAC7B,OAAO,CAAC,kBAAkB,CAAC,CAqB7B;AAwDD,wBAAsB,qBAAqB,CAAC,OAAO,CAAC,EAAE;IAAE,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAoB5F"}
+{"version":3,"file":"keystore.d.ts","sourceRoot":"","sources":["../src/keystore.ts"],"names":[],"mappings":"AAKA,OAAO,EAIL,KAAK,aAAa,EACnB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,MAAM,CAAC;AAqChC,QAAA,MAAM,oBAAoB;;;;;;;;;;;;;;;;;iBAIxB,CAAC;AAEH,QAAA,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAgBlB,CAAC;AAEH,QAAA,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAkBpB,CAAC;AAEH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAC1D,2EAA2E;AAC3E,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAC9D,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AACtE,oCAAoC;AACpC,MAAM,MAAM,iBAAiB,GAAG,YAAY,CAAC;AAE7C,MAAM,MAAM,kBAAkB,GAAG,UAAU,CAAC,OAAO,mBAAmB,CAAC,GAAG;IACxE,QAAQ,CAAC,MAAM,CAAC,EAAE,aAAa,CAAC;CACjC,CAAC;AAqBF,MAAM,MAAM,qBAAqB,GAAG;IAClC,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,qEAAqE;IACrE,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,qBAAa,aAAc,SAAQ,KAAK;gBAC1B,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,YAAY;CAIpD;AAyBD,wBAAsB,iBAAiB,CACrC,UAAU,EAAE,GAAG,EACf,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,YAAY,CAAC,CAEvB;AAyGD,2DAA2D;AAC3D,wBAAsB,iBAAiB,CACrC,QAAQ,EAAE,YAAY,GAAG,cAAc,EACvC,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,GAAG,CAAC,CAEd;AAiGD;;;;;;GAMG;AACH,wBAAsB,wBAAwB,CAC5C,UAAU,EAAE,MAAM,EAClB,IAAI,SAA0B,EAC9B,OAAO,GAAE,qBAA0B,GAClC,OAAO,CAAC;IAAE,OAAO,EAAE,kBAAkB,CAAC;IAAC,cAAc,EAAE,MAAM,CAAA;CAAE,CAAC,CAqBlE;AAmBD;;;;GAIG;AACH,wBAAsB,4BAA4B,CAChD,UAAU,EAAE,MAAM,EAClB,IAAI,oBAA0B,EAC9B,OAAO,EAAE;IAAE,UAAU,EAAE,MAAM,CAAA;CAAE,GAC9B,OAAO,CAAC,kBAAkB,CAAC,CAM7B;AAED,6EAA6E;AAC7E,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,GAAG,CAQrD;AAED;;;;;GAKG;AACH,wBAAsB,wBAAwB,CAC5C,aAAa,EAAE,MAAM,EACrB,aAAa,EAAE,MAAM,EACrB,IAAI,SAA0B,GAC7B,OAAO,CAAC,kBAAkB,CAAC,CAwB7B;AAED,0EAA0E;AAC1E,wBAAsB,cAAc,CAClC,UAAU,EAAE,MAAM,EAClB,IAAI,SAA0B,EAC9B,OAAO,GAAE,qBAA0B,GAClC,OAAO,CAAC,kBAAkB,CAAC,CAE7B;AAED,wBAAsB,cAAc,CAClC,UAAU,EAAE,MAAM,EAClB,IAAI,SAA0B,GAC7B,OAAO,CAAC,kBAAkB,CAAC,CAc7B;AAeD;;;;GAIG;AACH,wBAAsB,mBAAmB,CACvC,IAAI,SAA0B,GAC7B,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAG7B;AAED;;;;GAIG;AACH,wBAAsB,mBAAmB,CACvC,IAAI,SAA0B,GAC7B,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAG7B;AAkBD,MAAM,MAAM,gBAAgB,GAAG;IAC7B,GAAG,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,GAAG,CAAA;KAAE,CAAC;IAC1C,MAAM,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;CACjD,CAAC;AAEF;;;;;;;GAOG;AACH,wBAAsB,kBAAkB,CACtC,UAAU,EAAE,MAAM,EAClB,IAAI,SAA0B,GAC7B,OAAO,CAAC,gBAAgB,CAAC,CAmB3B;AAED;;;;GAIG;AACH,wBAAsB,eAAe,CACnC,UAAU,EAAE,MAAM,EAClB,IAAI,SAA0B,GAC7B,OAAO,CAAC,kBAAkB,CAAC,CA0B7B;AAED;;;;;GAKG;AACH,wBAAsB,oBAAoB,CACxC,UAAU,EAAE,MAAM,EAClB,IAAI,SAA0B,GAC7B,OAAO,CAAC,MAAM,CAAC,CAajB;AA8DD,wBAAsB,qBAAqB,CAAC,OAAO,CAAC,EAAE;IAAE,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAoB5F;AAED;;;;GAIG;AACH,wBAAsB,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,cAAc,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CA6C9F"}

package/dist/onramp.d.ts

@@ -1,36 +1,20 @@
-import { type LookupFn } from "./net-guard.js";
 /** Onramp deposits land on Base, the only network the hosted onramp settles to. */
 export declare const ONRAMP_NETWORK = "base";
-export declare const ONRAMP_ASSET = "USDC";
-/** Printed whenever the hosted onramp cannot be used; funding stays possible. */
+/** Printed alongside the funding page, so funding never depends on a browser. */
 export declare const ONRAMP_FALLBACK_INSTRUCTIONS = "Send USDC on Base (eip155:8453) to this address; add a little ETH for gas if you plan to sweep.";
-export type CreateOnrampSessionOptions = {
-    address: string;
-    /** Requested fiat amount in USD. Omitted when the caller has no preference. */
-    fiatAmount?: number;
-    registryUrl?: string;
-    env?: NodeJS.ProcessEnv;
-    fetchImpl?: typeof fetch;
-    allowPrivateNetwork?: boolean;
-    lookup?: LookupFn;
-};
-export type OnrampSession = {
-    status: "ready";
-    address: string;
-    url: string;
-} | {
-    status: "unavailable";
-    address: string;
-    reason: string;
-    instructions: string;
+export type FundingPageOptions = {
+    /** Fiat amount in USD to prefill on the page. Omitted when the caller has no preference. */
+    amount?: number;
 };
+/** The registry this install talks to: the env override first, then the shipped default. */
+export declare function resolveRegistryUrl(env?: NodeJS.ProcessEnv): string;
 /**
- * Ask the registry for a hosted onramp session for one local address.
+ * Build the URL of the hosted funding page for one local address.
  *
- * vAPI never holds funds: the session is created by the registry with the
- * onramp provider, and the user pays the provider directly. Every failure mode
- * degrades to direct-transfer instructions instead of throwing, so funding
- * advice is always available.
+ * The page is public — no sign-in — and mints the card-payment session at click
+ * time, so the link never goes stale in a terminal scrollback or an agent
+ * transcript. It also offers a wallet transfer and a bridge, which is why this
+ * is the only funding link the client hands out. Pure: no network, no clock.
  */
-export declare function createOnrampSession(options: CreateOnrampSessionOptions): Promise<OnrampSession>;
+export declare function fundingPageUrl(registryUrl: string, address: string, options?: FundingPageOptions): string;
 //# sourceMappingURL=onramp.d.ts.map

package/dist/onramp.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"onramp.d.ts","sourceRoot":"","sources":["../src/onramp.ts"],"names":[],"mappings":"AACA,OAAO,EAAqB,KAAK,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAGlE,mFAAmF;AACnF,eAAO,MAAM,cAAc,SAAS,CAAC;AACrC,eAAO,MAAM,YAAY,SAAS,CAAC;AAEnC,iFAAiF;AACjF,eAAO,MAAM,4BAA4B,oGAC0D,CAAC;AAEpG,MAAM,MAAM,0BAA0B,GAAG;IACvC,OAAO,EAAE,MAAM,CAAC;IAChB,+EAA+E;IAC/E,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,MAAM,CAAC,EAAE,QAAQ,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,aAAa,GACrB;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GACjD;IAAE,MAAM,EAAE,aAAa,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,CAAC;AAErF;;;;;;;GAOG;AACH,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,0BAA0B,GAClC,OAAO,CAAC,aAAa,CAAC,CAgDxB"}
+{"version":3,"file":"onramp.d.ts","sourceRoot":"","sources":["../src/onramp.ts"],"names":[],"mappings":"AAEA,mFAAmF;AACnF,eAAO,MAAM,cAAc,SAAS,CAAC;AAErC,iFAAiF;AACjF,eAAO,MAAM,4BAA4B,oGAC0D,CAAC;AAKpG,MAAM,MAAM,kBAAkB,GAAG;IAC/B,4FAA4F;IAC5F,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,4FAA4F;AAC5F,wBAAgB,kBAAkB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAE/E;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAC5B,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,MAAM,EACf,OAAO,GAAE,kBAAuB,GAC/B,MAAM,CAWR"}

package/dist/passphrase.d.ts

@@ -0,0 +1,47 @@
+import { type SecretStore } from "./secret-store.js";
+/**
+ * Where the passphrase of a wallet comes from, in one place.
+ *
+ * The order is `VAPI_KEYSTORE_PASSWORD`, then the OS secret store, then a
+ * prompt on a real terminal. The environment variable stays first so CI keeps
+ * working; the secret store is what lets an editor's MCP configuration hold no
+ * secret at all; the prompt is for a person, and a run with no terminal says
+ * how to arrange one of the other two instead.
+ */
+export declare const PASSPHRASE_ENVIRONMENT_VARIABLE = "VAPI_KEYSTORE_PASSWORD";
+/** Which of the three routes actually produced the passphrase. */
+export type PassphraseSource = "environment" | "secret-store" | "prompt";
+export type ResolvedPassphrase = {
+    passphrase: string;
+    source: PassphraseSource;
+};
+export type ResolvePassphraseOptions = {
+    /** The environment to read `VAPI_KEYSTORE_PASSWORD` from. */
+    env?: NodeJS.ProcessEnv | undefined;
+    /** The OS secret store to consult. Defaults to this platform's. */
+    store?: SecretStore | undefined;
+    /** Reads one line without echoing it. Defaults to the terminal prompt. */
+    prompt?: ((prompt: string, noTerminalHint?: string) => Promise<string>) | undefined;
+    /** False when nobody is watching, so the prompt is refused before it starts. */
+    interactive?: boolean | undefined;
+    /**
+     * Ask twice. A passphrase that is being set rather than used never comes
+     * from the secret store, so this also skips it.
+     */
+    confirm?: boolean | undefined;
+};
+/** The two ways out of a run that cannot prompt, named for the wallet at hand. */
+export declare function noPassphraseHint(walletName: string): string;
+/**
+ * The message for a stored passphrase that no longer opens its wallet — the
+ * shape of a passphrase changed on one machine while another kept the old one.
+ */
+export declare function staleStoredPassphraseMessage(walletName: string, store: SecretStore): string;
+/**
+ * The passphrase for one wallet: environment, then secret store, then prompt.
+ * A secret store that cannot be reached — no keyring installed, a locked
+ * session — is not fatal here; the prompt, or the error that names both other
+ * routes, is the better answer than a failure a person cannot act on.
+ */
+export declare function resolvePassphrase(walletName: string, options?: ResolvePassphraseOptions): Promise<ResolvedPassphrase>;
+//# sourceMappingURL=passphrase.d.ts.map

package/dist/passphrase.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"passphrase.d.ts","sourceRoot":"","sources":["../src/passphrase.ts"],"names":[],"mappings":"AACA,OAAO,EAAe,KAAK,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAElE;;;;;;;;GAQG;AAEH,eAAO,MAAM,+BAA+B,2BAA2B,CAAC;AAExE,kEAAkE;AAClE,MAAM,MAAM,gBAAgB,GAAG,aAAa,GAAG,cAAc,GAAG,QAAQ,CAAC;AAEzE,MAAM,MAAM,kBAAkB,GAAG;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,gBAAgB,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG;IACrC,6DAA6D;IAC7D,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,GAAG,SAAS,CAAC;IACpC,mEAAmE;IACnE,KAAK,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC;IAChC,0EAA0E;IAC1E,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,cAAc,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;IACpF,gFAAgF;IAChF,WAAW,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAClC;;;OAGG;IACH,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;CAC/B,CAAC;AAEF,kFAAkF;AAClF,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAE3D;AAED;;;GAGG;AACH,wBAAgB,4BAA4B,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,GAAG,MAAM,CAK3F;AAED;;;;;GAKG;AACH,wBAAsB,iBAAiB,CACrC,UAAU,EAAE,MAAM,EAClB,OAAO,GAAE,wBAA6B,GACrC,OAAO,CAAC,kBAAkB,CAAC,CA+B7B"}

package/dist/policy.d.ts

@@ -11,12 +11,18 @@ export type PaymentIntent = Readonly<{
 export interface Policy {
     authorize(intent: PaymentIntent): Promise<void>;
 }
+/**
+ * Caps one wallet's spending. The caps belong to the wallet, not to the
+ * machine: pass the wallet's name so today's total is counted against that
+ * wallet alone.
+ */
 export declare class SpendPolicy implements Policy {
     readonly caps: SpendCaps;
     private readonly options;
     constructor(caps: SpendCaps, options?: {
         ledgerPath?: string;
         now?: () => Date;
+        wallet?: string;
     });
     authorize(intent: PaymentIntent): Promise<void>;
     reserve(amountAtomic: bigint): Promise<SpendLedger>;

package/dist/policy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../src/policy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAEpC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAgB,KAAK,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAEnE,MAAM,MAAM,aAAa,GAAG,QAAQ,CAAC;IACnC,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,OAAO,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,CAAC,CAAC;AAEH,4EAA4E;AAC5E,MAAM,WAAW,MAAM;IACrB,SAAS,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACjD;AAED,qBAAa,WAAY,YAAW,MAAM;aAEtB,IAAI,EAAE,SAAS;IAC/B,OAAO,CAAC,QAAQ,CAAC,OAAO;gBADR,IAAI,EAAE,SAAS,EACd,OAAO,GAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,IAAI,CAAA;KAAO;IAGpE,SAAS,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;IAI/C,OAAO,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;CAM1D"}
+{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../src/policy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAEpC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAgB,KAAK,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAEnE,MAAM,MAAM,aAAa,GAAG,QAAQ,CAAC;IACnC,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,OAAO,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,CAAC,CAAC;AAEH,4EAA4E;AAC5E,MAAM,WAAW,MAAM;IACrB,SAAS,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACjD;AAED;;;;GAIG;AACH,qBAAa,WAAY,YAAW,MAAM;aAEtB,IAAI,EAAE,SAAS;IAC/B,OAAO,CAAC,QAAQ,CAAC,OAAO;gBADR,IAAI,EAAE,SAAS,EACd,OAAO,GAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAO;IAGrF,SAAS,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;IAI/C,OAAO,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;CAO1D"}

package/dist/receipts.d.ts

@@ -1,8 +1,11 @@
 import type { ListingProvenance } from "./discovery.js";
+import { type WalletName } from "./wallet-name.js";
 import type { X402SettlementOutcome } from "./x402.js";
 export interface Receipt {
     readonly id: string;
     readonly timestamp: string;
+    /** The wallet that paid. Absent on receipts written before named wallets, which belong to `main`. */
+    readonly wallet?: string;
     readonly resourceUrl: string;
     readonly method?: string;
     /** Primary discovery source retained for compatibility with early receipt writers. */
@@ -50,11 +53,26 @@ export interface Receipt {
     readonly outcome?: "paid" | "signed_in" | "declined_policy" | "failed_request" | "settlement_rejected" | "settlement_unknown";
 }
 export declare function parseReceipt(value: unknown): Receipt;
-/** Append exactly one receipt as one JSONL record. Existing records are never rewritten. */
-export declare function appendReceipt(receipt: Receipt, path?: string): Promise<Receipt>;
+/**
+ * Append exactly one receipt as one JSONL record. Existing records are never
+ * rewritten. `options.wallet` names the wallet that paid when the receipt does
+ * not already carry one.
+ */
+export declare function appendReceipt(receipt: Receipt, path?: string, options?: {
+    wallet?: string;
+}): Promise<Receipt>;
 export declare function readReceipts(path?: string, options?: {
     limit?: number;
+    wallet?: string;
 }): Promise<Receipt[]>;
-/** Compatibility alias used by early CLI code. */
-export declare const listReceipts: typeof readReceipts;
+/** The wallet a receipt belongs to; rows written before named wallets are `main`. */
+export declare function receiptWallet(receipt: Receipt): WalletName;
+/** Keeps the receipts of one wallet, counting rows without a wallet as `main`. */
+export declare function filterReceiptsByWallet(receipts: readonly Receipt[], name: WalletName): Receipt[];
+/**
+ * Rewrites the wallet field of every matching row after a wallet is renamed.
+ * Rows of other wallets keep their exact bytes, and the file is replaced in one
+ * atomic rename. Returns how many rows changed.
+ */
+export declare function renameReceiptWallet(from: WalletName, to: WalletName, path?: string): Promise<number>;
 //# sourceMappingURL=receipts.d.ts.map

package/dist/receipts.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"receipts.d.ts","sourceRoot":"","sources":["../src/receipts.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,WAAW,CAAC;AAEvD,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,sFAAsF;IACtF,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,iBAAiB,EAAE,CAAC;IACnD,QAAQ,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC;QACxB,OAAO,EAAE,MAAM,CAAC;QAChB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,YAAY,EAAE,MAAM,CAAC;QACrB,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,CAAC,CAAC;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC;QAC7B,OAAO,EAAE,qBAAqB,CAAC;QAC/B,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,QAAQ,CAAC,EAAE,OAAO,CAAC;KACpB,CAAC,CAAC;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC7D,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC;QACzB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC,CAAC;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC;QAC1B,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC,CAAC;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC;QACzB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,WAAW,EAAE,OAAO,CAAC;KACtB,CAAC,CAAC;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC;QACzB,IAAI,EAAE,cAAc,CAAC;QACrB,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC,CAAC;IACH,QAAQ,CAAC,OAAO,CAAC,EACb,MAAM,GACN,WAAW,GACX,iBAAiB,GACjB,gBAAgB,GAChB,qBAAqB,GACrB,oBAAoB,CAAC;CAC1B;AA+ED,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAEpD;AAED,4FAA4F;AAC5F,wBAAsB,aAAa,CACjC,OAAO,EAAE,OAAO,EAChB,IAAI,SAA0B,GAC7B,OAAO,CAAC,OAAO,CAAC,CAUlB;AAED,wBAAsB,YAAY,CAChC,IAAI,SAA0B,EAC9B,OAAO,GAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAA;CAAO,GAC/B,OAAO,CAAC,OAAO,EAAE,CAAC,CAuBpB;AAED,kDAAkD;AAClD,eAAO,MAAM,YAAY,qBAAe,CAAC"}
+{"version":3,"file":"receipts.d.ts","sourceRoot":"","sources":["../src/receipts.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,EAAyC,KAAK,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC1F,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,WAAW,CAAC;AAEvD,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,qGAAqG;IACrG,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,sFAAsF;IACtF,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,iBAAiB,EAAE,CAAC;IACnD,QAAQ,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC;QACxB,OAAO,EAAE,MAAM,CAAC;QAChB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,YAAY,EAAE,MAAM,CAAC;QACrB,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,CAAC,CAAC;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC;QAC7B,OAAO,EAAE,qBAAqB,CAAC;QAC/B,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,QAAQ,CAAC,EAAE,OAAO,CAAC;KACpB,CAAC,CAAC;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC7D,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC;QACzB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC,CAAC;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC;QAC1B,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC,CAAC;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC;QACzB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,WAAW,EAAE,OAAO,CAAC;KACtB,CAAC,CAAC;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC;QACzB,IAAI,EAAE,cAAc,CAAC;QACrB,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC,CAAC;IACH,QAAQ,CAAC,OAAO,CAAC,EACb,MAAM,GACN,WAAW,GACX,iBAAiB,GACjB,gBAAgB,GAChB,qBAAqB,GACrB,oBAAoB,CAAC;CAC1B;AAgFD,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAEpD;AAED;;;;GAIG;AACH,wBAAsB,aAAa,CACjC,OAAO,EAAE,OAAO,EAChB,IAAI,SAA0B,EAC9B,OAAO,GAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAA;CAAO,GAChC,OAAO,CAAC,OAAO,CAAC,CAclB;AAED,wBAAsB,YAAY,CAChC,IAAI,SAA0B,EAC9B,OAAO,GAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAO,GAChD,OAAO,CAAC,OAAO,EAAE,CAAC,CAyBpB;AAED,qFAAqF;AACrF,wBAAgB,aAAa,CAAC,OAAO,EAAE,OAAO,GAAG,UAAU,CAE1D;AAED,kFAAkF;AAClF,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,SAAS,OAAO,EAAE,EAAE,IAAI,EAAE,UAAU,GAAG,OAAO,EAAE,CAEhG;AAED;;;;GAIG;AACH,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,UAAU,EAChB,EAAE,EAAE,UAAU,EACd,IAAI,SAA0B,GAC7B,OAAO,CAAC,MAAM,CAAC,CAiCjB"}

package/dist/secret-store.d.ts

@@ -0,0 +1,60 @@
+/**
+ * The OS secret store, so an agent never needs a passphrase in plain text.
+ *
+ * A wallet's passphrase is kept by the operating system's own credential
+ * store — the macOS Keychain, or libsecret on Linux — under the service
+ * `vapi-network` and the wallet's name as the account. `vapi unlock` puts it
+ * there, `vapi lock` takes it out, and every unlock path reads it from there
+ * before falling back to a prompt.
+ *
+ * There is no dependency: the store is driven through the OS binaries with
+ * `execFile` and an argument array, never a shell string, so nothing a wallet
+ * name or a passphrase contains can be read as a command. The passphrase
+ * itself is written to the binary's stdin and never appears in an argument,
+ * where `ps` would show it to every process on the machine.
+ */
+/** The service name every vAPI entry is filed under. */
+export declare const SECRET_STORE_SERVICE = "vapi-network";
+/** What one run of an OS binary produced. A runner never throws for a non-zero exit. */
+export type SecretStoreOutcome = {
+    /** The exit code, or null when the binary could not be run at all. */
+    code: number | null;
+    stdout: string;
+    stderr: string;
+    /** The binary is not installed on this machine. */
+    notFound?: boolean;
+};
+/**
+ * Runs one OS binary. Injected by the tests, which assert the command line
+ * rather than touching a real keychain.
+ */
+export type SecretStoreRunner = (file: string, args: readonly string[], input?: string) => Promise<SecretStoreOutcome>;
+export type SecretStore = {
+    /** Whether this platform has a store vAPI can drive at all. */
+    available: boolean;
+    platform: NodeJS.Platform;
+    /** How to name this store to a person, such as "the macOS Keychain". */
+    description: string;
+    /** The stored passphrase of a wallet, or undefined when there is none. */
+    get(name: string): Promise<string | undefined>;
+    /** Whether a wallet has a stored passphrase, without reading the secret. */
+    has(name: string): Promise<boolean>;
+    set(name: string, passphrase: string): Promise<void>;
+    /** Removes the entry; false when there was nothing to remove. */
+    remove(name: string): Promise<boolean>;
+    /**
+     * The wallet names this store holds, where the platform can answer it
+     * without handing back the secrets themselves. Neither platform can today,
+     * so callers list the wallets they know and ask `has` about each.
+     */
+    list?(): Promise<string[]>;
+};
+export type SecretStoreOptions = {
+    /** Defaults to `process.platform`. */
+    platform?: NodeJS.Platform | undefined;
+    /** Defaults to running the real binary. */
+    run?: SecretStoreRunner | undefined;
+};
+/** The secret store of this machine, or one that refuses on every call. */
+export declare function secretStore(options?: SecretStoreOptions): SecretStore;
+//# sourceMappingURL=secret-store.d.ts.map

package/dist/secret-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-store.d.ts","sourceRoot":"","sources":["../src/secret-store.ts"],"names":[],"mappings":"AAIA;;;;;;;;;;;;;;GAcG;AAEH,wDAAwD;AACxD,eAAO,MAAM,oBAAoB,iBAAiB,CAAC;AAgBnD,wFAAwF;AACxF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,sEAAsE;IACtE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,mDAAmD;IACnD,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB,CAAC;AAEF;;;GAGG;AACH,MAAM,MAAM,iBAAiB,GAAG,CAC9B,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,KAAK,CAAC,EAAE,MAAM,KACX,OAAO,CAAC,kBAAkB,CAAC,CAAC;AAEjC,MAAM,MAAM,WAAW,GAAG;IACxB,+DAA+D;IAC/D,SAAS,EAAE,OAAO,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC1B,wEAAwE;IACxE,WAAW,EAAE,MAAM,CAAC;IACpB,0EAA0E;IAC1E,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC/C,4EAA4E;IAC5E,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACpC,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrD,iEAAiE;IACjE,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACvC;;;;OAIG;IACH,IAAI,CAAC,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;CAC5B,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,sCAAsC;IACtC,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,GAAG,SAAS,CAAC;IACvC,2CAA2C;IAC3C,GAAG,CAAC,EAAE,iBAAiB,GAAG,SAAS,CAAC;CACrC,CAAC;AAEF,2EAA2E;AAC3E,wBAAgB,WAAW,CAAC,OAAO,GAAE,kBAAuB,GAAG,WAAW,CAMzE"}

package/dist/secrets.d.ts

@@ -0,0 +1,14 @@
+/**
+ * `@vapi-network/core/secrets` — the human-only corner of the SDK.
+ *
+ * Everything here returns a recovery phrase or a private key. It is a separate
+ * package entry point, and deliberately not re-exported from the main index,
+ * so that a package which must never hold a secret — the MCP server above all —
+ * cannot reach one by importing `@vapi-network/core`. The repository lint rules
+ * enforce that for `packages/mcp`.
+ *
+ * Callers must print the result to the person in front of the terminal and
+ * nowhere else: not to a log, not to a file, not into a tool result.
+ */
+export { createKeystoreWithPhrase, decryptPrivateKey, exportKeystoreKeys, exportRecoveryPhrase, type ExportedVapiKeys, } from "./keystore.js";
+//# sourceMappingURL=secrets.d.ts.map

package/dist/secrets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.d.ts","sourceRoot":"","sources":["../src/secrets.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EACL,wBAAwB,EACxB,iBAAiB,EACjB,kBAAkB,EAClB,oBAAoB,EACpB,KAAK,gBAAgB,GACtB,MAAM,eAAe,CAAC"}