@vapi-network/core 0.5.0 → 0.7.0

package/dist/audit.d.ts

@@ -8,7 +8,7 @@
  * its linked owner, whether a terminal was attached, and which agent marker
  * was set — nothing that could help someone spend the wallet.
  */
-export declare const AUDIT_EVENTS: readonly ["secret.export.phrase", "secret.export.key", "wallet.create", "wallet.import", "wallet.remove", "wallet.restore", "wallet.rename", "wallet.default", "wallet.caps", "wallet.unlock", "wallet.lock", "wallet.use.session", "passphrase.change", "auth.key.set", "auth.key.clear", "agent.linked", "agent.unlinked", "agent.run.start", "agent.run.step", "agent.run.pay", "agent.run.declined", "agent.run.end", "router.buy", "router.refill.declined", "listing.publish", "listing.status", "listing.claim"];
+export declare const AUDIT_EVENTS: readonly ["secret.export.phrase", "secret.export.key", "wallet.create", "wallet.import", "wallet.remove", "wallet.restore", "wallet.rename", "wallet.default", "wallet.caps", "ceiling.swept", "ceiling.sweep_failed", "vault.migrate", "vault.protect", "vault.unprotect", "vault.backup_shown", "vault.restore", "wallet.unlock", "wallet.lock", "wallet.use.session", "passphrase.change", "auth.key.set", "auth.key.clear", "agent.linked", "agent.unlinked", "agent.run.start", "agent.run.step", "agent.run.pay", "agent.run.declined", "agent.run.end", "router.buy", "router.refill.declined", "listing.publish", "listing.status", "listing.claim"];
 export type AuditEvent = (typeof AUDIT_EVENTS)[number];
 export type AuditRecord = {
     event: AuditEvent;

package/dist/audit.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../src/audit.ts"],"names":[],"mappings":"AAKA;;;;;;;;;GASG;AACH,eAAO,MAAM,YAAY,yfAwCf,CAAC;AAEX,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC;AAEvD,MAAM,MAAM,WAAW,GAAG;IACxB,KAAK,EAAE,UAAU,CAAC;IAClB,4DAA4D;IAC5D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,+EAA+E;IAC/E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,oEAAoE;IACpE,GAAG,EAAE,OAAO,CAAC;IACb,qDAAqD;IACrD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,2EAA2E;IAC3E,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG,WAAW,GAAG;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAExD,eAAO,MAAM,UAAU,cAAc,CAAC;AAEtC,MAAM,MAAM,YAAY,GAAG;IACzB,sDAAsD;IACtD,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB,CAAC;AAEF,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEjD;AAED;;;;;GAKG;AACH,wBAAsB,WAAW,CAC/B,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,WAAW,EACnB,OAAO,GAAE,YAAiB,GACzB,OAAO,CAAC,UAAU,CAAC,CAgBrB;AAED,4EAA4E;AAC5E,wBAAsB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,CAYtE"}
+{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../src/audit.ts"],"names":[],"mappings":"AAKA;;;;;;;;;GASG;AACH,eAAO,MAAM,YAAY,8nBAkDf,CAAC;AAEX,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC;AAEvD,MAAM,MAAM,WAAW,GAAG;IACxB,KAAK,EAAE,UAAU,CAAC;IAClB,4DAA4D;IAC5D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,+EAA+E;IAC/E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,oEAAoE;IACpE,GAAG,EAAE,OAAO,CAAC;IACb,qDAAqD;IACrD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,2EAA2E;IAC3E,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG,WAAW,GAAG;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAExD,eAAO,MAAM,UAAU,cAAc,CAAC;AAEtC,MAAM,MAAM,YAAY,GAAG;IACzB,sDAAsD;IACtD,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB,CAAC;AAEF,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEjD;AAED;;;;;GAKG;AACH,wBAAsB,WAAW,CAC/B,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,WAAW,EACnB,OAAO,GAAE,YAAiB,GACzB,OAAO,CAAC,UAAU,CAAC,CAgBrB;AAED,4EAA4E;AAC5E,wBAAsB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,CAYtE"}

package/dist/backup.d.ts

@@ -0,0 +1,186 @@
+import { type SpendCaps } from "./config.js";
+import { type WalletStore } from "./wallet-store.js";
+import { type VaultAccount } from "./vault.js";
+export type BackupErrorCode = "backup_too_large" | "backup_open_failed" | "backup_unsupported" | "unsupported_signature" | "weak_password" | "backup_invalid_input" | "relay_open_failed" | "relay_invalid_key" | "vault_exists";
+export declare class BackupError extends Error {
+    readonly code: BackupErrorCode;
+    constructor(code: BackupErrorCode);
+}
+export type BackupAccount = {
+    name: string;
+    kind: "derived";
+    index: number;
+    address: `0x${string}`;
+    createdAt: string;
+} | {
+    name: string;
+    kind: "imported";
+    address: `0x${string}`;
+    privateKey: `0x${string}`;
+    createdAt: string;
+};
+export type BackupRegistry = {
+    default?: string;
+    accounts: {
+        name: string;
+        label?: string;
+        spendCaps: SpendCaps;
+    }[];
+    networks: string[];
+};
+export type BackupPlaintext = {
+    v: 1;
+    phrase: string;
+    nextDerivedIndex: number;
+    accounts: BackupAccount[];
+    registry: BackupRegistry;
+    protected: boolean;
+};
+export type BackupSource = Omit<BackupPlaintext, "v">;
+export type BackupKdf = {
+    name: "hkdf-sha256";
+    salt: string;
+} | {
+    name: "scrypt";
+    salt: string;
+    N: 131_072;
+    r: 8;
+    p: 1;
+};
+export type BackupHeader = {
+    format: "vapi-vault-backup";
+    v: 1;
+    owner: `0x${string}`;
+    device: string;
+    createdAt: string;
+    kdf: BackupKdf;
+    cipher: {
+        name: "aes-256-gcm";
+        nonce: string;
+    };
+};
+export type VaultBackupTypedData = {
+    domain: {
+        name: "vAPI Vault Backup";
+        version: "1";
+    };
+    types: {
+        VaultBackupKey: readonly [
+            {
+                readonly name: "purpose";
+                readonly type: "string";
+            },
+            {
+                readonly name: "site";
+                readonly type: "string";
+            },
+            {
+                readonly name: "owner";
+                readonly type: "address";
+            },
+            {
+                readonly name: "version";
+                readonly type: "uint256";
+            }
+        ];
+    };
+    primaryType: "VaultBackupKey";
+    message: {
+        purpose: string;
+        site: "vapinetwork.ai";
+        owner: `0x${string}`;
+        version: 1;
+    };
+};
+type RandomBytes = (length: number) => Uint8Array;
+type SignatureInput = string | Uint8Array;
+type ProbeSigner = (typedData: VaultBackupTypedData) => Promise<string>;
+type OwnerKey = {
+    kdf: "hkdf-sha256" | "scrypt";
+    key: Uint8Array;
+    salt: Uint8Array;
+};
+export declare function VAULT_BACKUP_TYPED_DATA(owner: string): VaultBackupTypedData;
+export declare function normalizeSignature(signature: SignatureInput): Uint8Array;
+export declare function deriveKeyFromSignature(options: {
+    signature: SignatureInput;
+    salt: Uint8Array;
+    owner: string;
+    device: string;
+}): Uint8Array;
+export declare function deriveKeyFromPassword(options: {
+    password: string;
+    salt: Uint8Array;
+}): Promise<Uint8Array>;
+export declare function probeRepeatable(sign: ProbeSigner, owner: string): Promise<{
+    path: "signature";
+    signature: `0x${string}`;
+} | {
+    path: "password";
+}>;
+export declare function createBackup(options: {
+    vault: BackupSource;
+    ownerKey: OwnerKey;
+    owner: string;
+    device: string;
+    now?: () => Date;
+    randomBytes?: RandomBytes;
+}): Promise<{
+    envelope: string;
+    bytes: number;
+}>;
+export declare function openBackup(options: {
+    envelope: string;
+    key: Uint8Array;
+}): Promise<BackupPlaintext>;
+export declare function readBackupHeader(envelope: string): BackupHeader;
+export declare function createRelayKeyPair(options?: {
+    randomBytes?: RandomBytes;
+}): {
+    publicKey: Uint8Array;
+    privateKey: Uint8Array;
+};
+export declare function relayCode(publicKey: Uint8Array): string;
+export declare function sealTo(options: {
+    recipientPublicKey: Uint8Array;
+    plaintext: Uint8Array | string;
+    randomBytes?: RandomBytes;
+}): string;
+export declare function openSealed(options: {
+    recipientPrivateKey: Uint8Array;
+    sealed: string;
+}): Uint8Array;
+export declare function exportBackupSource(options: {
+    store: WalletStore;
+    vaultKey: Uint8Array;
+    networks?: readonly string[];
+}): Promise<BackupSource>;
+export declare function restoreFromBackup(options: {
+    plaintext: BackupPlaintext;
+    home: string;
+    vaultKey: Uint8Array;
+    now?: () => Date;
+}): Promise<{
+    accounts: VaultAccount[];
+    default?: string;
+    protected: boolean;
+    networks: string[];
+}>;
+export declare function parseBackupPlaintext(value: unknown): BackupPlaintext;
+export declare function restoreBackupPlaintext(options: {
+    plaintext: BackupPlaintext;
+    home: string;
+    vaultKey: Uint8Array;
+    now?: () => Date;
+    beforePublish?: (paths: {
+        vault: string;
+        registry: string;
+    }) => Promise<void>;
+}): Promise<{
+    accounts: VaultAccount[];
+    default?: string;
+    protected: boolean;
+    networks: string[];
+}>;
+export {};
+//# sourceMappingURL=backup.d.ts.map

package/dist/backup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"backup.d.ts","sourceRoot":"","sources":["../src/backup.ts"],"names":[],"mappings":"AA2BA,OAAO,EAAuC,KAAK,SAAS,EAAE,MAAM,aAAa,CAAC;AAElF,OAAO,EAA6C,KAAK,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAEhG,OAAO,EASL,KAAK,YAAY,EAClB,MAAM,YAAY,CAAC;AAEpB,MAAM,MAAM,eAAe,GACvB,kBAAkB,GAClB,oBAAoB,GACpB,oBAAoB,GACpB,uBAAuB,GACvB,eAAe,GACf,sBAAsB,GACtB,mBAAmB,GACnB,mBAAmB,GACnB,cAAc,CAAC;AAcnB,qBAAa,WAAY,SAAQ,KAAK;IACpC,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;gBAEnB,IAAI,EAAE,eAAe;CAKlC;AAED,MAAM,MAAM,aAAa,GACrB;IACE,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,SAAS,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,KAAK,MAAM,EAAE,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;CACnB,GACD;IACE,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,UAAU,CAAC;IACjB,OAAO,EAAE,KAAK,MAAM,EAAE,CAAC;IACvB,UAAU,EAAE,KAAK,MAAM,EAAE,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEN,MAAM,MAAM,cAAc,GAAG;IAC3B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,SAAS,CAAA;KAAE,EAAE,CAAC;IACnE,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,CAAC,EAAE,CAAC,CAAC;IACL,MAAM,EAAE,MAAM,CAAC;IACf,gBAAgB,EAAE,MAAM,CAAC;IACzB,QAAQ,EAAE,aAAa,EAAE,CAAC;IAC1B,QAAQ,EAAE,cAAc,CAAC;IACzB,SAAS,EAAE,OAAO,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG,IAAI,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC;AAEtD,MAAM,MAAM,SAAS,GACnB;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,CAAC,EAAE,OAAO,CAAC;IAAC,CAAC,EAAE,CAAC,CAAC;IAAC,CAAC,EAAE,CAAC,CAAA;CAAE,CAAC;AAEnG,MAAM,MAAM,YAAY,GAAG;IACzB,MAAM,EAAE,mBAAmB,CAAC;IAC5B,CAAC,EAAE,CAAC,CAAC;IACL,KAAK,EAAE,KAAK,MAAM,EAAE,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,SAAS,CAAC;IACf,MAAM,EAAE;QAAE,IAAI,EAAE,aAAa,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;CAChD,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,MAAM,EAAE;QAAE,IAAI,EAAE,mBAAmB,CAAC;QAAC,OAAO,EAAE,GAAG,CAAA;KAAE,CAAC;IACpD,KAAK,EAAE;QACL,cAAc,EAAE,SAAS;YACvB;gBAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;gBAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;aAAE;YACrD;gBAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;gBAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;aAAE;YAClD;gBAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;gBAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;aAAE;YACpD;gBAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;gBAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;aAAE;SACvD,CAAC;KACH,CAAC;IACF,WAAW,EAAE,gBAAgB,CAAC;IAC9B,OAAO,EAAE;QACP,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,EAAE,gBAAgB,CAAC;QACvB,KAAK,EAAE,KAAK,MAAM,EAAE,CAAC;QACrB,OAAO,EAAE,CAAC,CAAC;KACZ,CAAC;CACH,CAAC;AAEF,KAAK,WAAW,GAAG,CAAC,MAAM,EAAE,MAAM,KAAK,UAAU,CAAC;AAClD,KAAK,cAAc,GAAG,MAAM,GAAG,UAAU,CAAC;AAC1C,KAAK,WAAW,GAAG,CAAC,SAAS,EAAE,oBAAoB,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;AACxE,KAAK,QAAQ,GAAG;IACd,GAAG,EAAE,aAAa,GAAG,QAAQ,CAAC;IAC9B,GAAG,EAAE,UAAU,CAAC;IAChB,IAAI,EAAE,UAAU,CAAC;CAClB,CAAC;AAqGF,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,MAAM,GAAG,oBAAoB,CAqB3E;AAED,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,cAAc,GAAG,UAAU,CAuBxE;AAED,wBAAgB,sBAAsB,CAAC,OAAO,EAAE;IAC9C,SAAS,EAAE,cAAc,CAAC;IAC1B,IAAI,EAAE,UAAU,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;CAChB,GAAG,UAAU,CAgBb;AAED,wBAAsB,qBAAqB,CAAC,OAAO,EAAE;IACnD,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,UAAU,CAAC;CAClB,GAAG,OAAO,CAAC,UAAU,CAAC,CActB;AAED,wBAAsB,eAAe,CACnC,IAAI,EAAE,WAAW,EACjB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,SAAS,EAAE,KAAK,MAAM,EAAE,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE,UAAU,CAAA;CAAE,CAAC,CAyCjF;AAED,wBAAsB,YAAY,CAAC,OAAO,EAAE;IAC1C,KAAK,EAAE,YAAY,CAAC;IACpB,QAAQ,EAAE,QAAQ,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB,WAAW,CAAC,EAAE,WAAW,CAAC;CAC3B,GAAG,OAAO,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAkD/C;AAED,wBAAsB,UAAU,CAAC,OAAO,EAAE;IACxC,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,UAAU,CAAC;CACjB,GAAG,OAAO,CAAC,eAAe,CAAC,CAgC3B;AAED,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,YAAY,CAW/D;AAED,wBAAgB,kBAAkB,CAAC,OAAO,GAAE;IAAE,WAAW,CAAC,EAAE,WAAW,CAAA;CAAO,GAAG;IAC/E,SAAS,EAAE,UAAU,CAAC;IACtB,UAAU,EAAE,UAAU,CAAC;CACxB,CAiBA;AAED,wBAAgB,SAAS,CAAC,SAAS,EAAE,UAAU,GAAG,MAAM,CAevD;AAED,wBAAgB,MAAM,CAAC,OAAO,EAAE;IAC9B,kBAAkB,EAAE,UAAU,CAAC;IAC/B,SAAS,EAAE,UAAU,GAAG,MAAM,CAAC;IAC/B,WAAW,CAAC,EAAE,WAAW,CAAC;CAC3B,GAAG,MAAM,CAwDT;AAED,wBAAgB,UAAU,CAAC,OAAO,EAAE;IAClC,mBAAmB,EAAE,UAAU,CAAC;IAChC,MAAM,EAAE,MAAM,CAAC;CAChB,GAAG,UAAU,CA2Db;AAED,wBAAsB,kBAAkB,CAAC,OAAO,EAAE;IAChD,KAAK,EAAE,WAAW,CAAC;IACnB,QAAQ,EAAE,UAAU,CAAC;IACrB,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC9B,GAAG,OAAO,CAAC,YAAY,CAAC,CAwExB;AAED,wBAAsB,iBAAiB,CAAC,OAAO,EAAE;IAC/C,SAAS,EAAE,eAAe,CAAC;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,UAAU,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB,GAAG,OAAO,CAAC;IACV,QAAQ,EAAE,YAAY,EAAE,CAAC;IACzB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,OAAO,CAAC;IACnB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB,CAAC,CAED;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,eAAe,CAEpE;AAED,wBAAsB,sBAAsB,CAAC,OAAO,EAAE;IACpD,SAAS,EAAE,eAAe,CAAC;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,UAAU,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB,aAAa,CAAC,EAAE,CAAC,KAAK,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAC/E,GAAG,OAAO,CAAC;IACV,QAAQ,EAAE,YAAY,EAAE,CAAC;IACzB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,OAAO,CAAC;IACnB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB,CAAC,CA8GD"}