@vess-id/vess 0.0.0-dev-20260902121045

package/dist/identity/agent-identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-identity.d.ts","sourceRoot":"","sources":["../../src/identity/agent-identity.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,QAAQ,MAAM,gBAAgB,CAAA;AAErC,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAA;AAG1C,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,MAAM,CAAA;IAChB,aAAa,EAAE,MAAM,CAAA;IACrB,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,MAAM,CAAA;CACnB;AAED,qBAAa,qBAAqB;IAE9B,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,EAAE;IACnB,OAAO,CAAC,QAAQ,CAAC,OAAO;gBAFP,UAAU,EAAE,UAAU,EACtB,EAAE,EAAE,QAAQ,CAAC,QAAQ,EACrB,OAAO,EAAE,MAAM;IAGlC;;;;OAIG;IACG,oBAAoB,CACxB,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,aAAa,CAAC;CA2C1B"}

package/dist/identity/agent-identity.js

@@ -0,0 +1,54 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AgentIdentityResolver = void 0;
+const crypto_1 = require("crypto");
+const key_manager_1 = require("./key-manager");
+const did_manager_1 = require("./did-manager");
+class AgentIdentityResolver {
+    keyManager;
+    db;
+    rootDid;
+    constructor(keyManager, db, rootDid) {
+        this.keyManager = keyManager;
+        this.db = db;
+        this.rootDid = rootDid;
+    }
+    /**
+     * Get or create an Agent DID for the given project × client combination.
+     * If one already exists in SQLite (status=active), reuse it.
+     * Otherwise, generate a new Agent DID and store in Keychain + SQLite.
+     */
+    async resolveAgentIdentity(projectId, clientName) {
+        // Check SQLite for existing agent key
+        const existing = this.db.prepare("SELECT did FROM keys WHERE project_id = ? AND client_name = ? AND key_type = 'agent' AND status = 'active'").get(projectId, clientName);
+        if (existing) {
+            // Load private key from Keychain
+            const privateKeyJwk = this.keyManager.getAgentKey(projectId, clientName);
+            if (privateKeyJwk) {
+                return {
+                    agentDid: existing.did,
+                    privateKeyJwk,
+                    projectId,
+                    clientName,
+                };
+            }
+            // Key missing from Keychain but exists in DB — regenerate
+        }
+        // Generate new Agent DID
+        const { did: agentDid, privateKeyJwk, publicKeyJwk } = await did_manager_1.DIDManager.generateAgentDID();
+        // Store private key in OS Keychain
+        this.keyManager.storeAgentKey(projectId, clientName, privateKeyJwk);
+        // Store metadata in SQLite (no private key material)
+        const id = (0, crypto_1.randomUUID)();
+        const keychainRef = key_manager_1.KeyManager.getKeychainRef('agent', projectId, clientName);
+        this.db.prepare(`
+      INSERT OR REPLACE INTO keys (
+        id, did, key_type, public_key, keychain_ref, storage_type,
+        parent_did, project_id, client_name, status, created_at
+      ) VALUES (?, ?, 'agent', ?, ?, 'keychain', ?, ?, ?, 'active', ?)
+    `).run(id, agentDid, JSON.stringify(publicKeyJwk), keychainRef, this.rootDid, projectId, clientName, Date.now());
+        return { agentDid, privateKeyJwk, projectId, clientName };
+    }
+}
+exports.AgentIdentityResolver = AgentIdentityResolver;
+//# sourceMappingURL=agent-identity.js.map

package/dist/identity/agent-identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-identity.js","sourceRoot":"","sources":["../../src/identity/agent-identity.ts"],"names":[],"mappings":";;;AASA,mCAAmC;AACnC,+CAA0C;AAC1C,+CAA0C;AAS1C,MAAa,qBAAqB;IAEb;IACA;IACA;IAHnB,YACmB,UAAsB,EACtB,EAAqB,EACrB,OAAe;QAFf,eAAU,GAAV,UAAU,CAAY;QACtB,OAAE,GAAF,EAAE,CAAmB;QACrB,YAAO,GAAP,OAAO,CAAQ;IAC/B,CAAC;IAEJ;;;;OAIG;IACH,KAAK,CAAC,oBAAoB,CACxB,SAAiB,EACjB,UAAkB;QAElB,sCAAsC;QACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAC9B,4GAA4G,CAC7G,CAAC,GAAG,CAAC,SAAS,EAAE,UAAU,CAAgC,CAAA;QAE3D,IAAI,QAAQ,EAAE,CAAC;YACb,iCAAiC;YACjC,MAAM,aAAa,GAAG,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,SAAS,EAAE,UAAU,CAAC,CAAA;YACxE,IAAI,aAAa,EAAE,CAAC;gBAClB,OAAO;oBACL,QAAQ,EAAE,QAAQ,CAAC,GAAG;oBACtB,aAAa;oBACb,SAAS;oBACT,UAAU;iBACX,CAAA;YACH,CAAC;YACD,0DAA0D;QAC5D,CAAC;QAED,yBAAyB;QACzB,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,aAAa,EAAE,YAAY,EAAE,GAClD,MAAM,wBAAU,CAAC,gBAAgB,EAAE,CAAA;QAErC,mCAAmC;QACnC,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,SAAS,EAAE,UAAU,EAAE,aAAa,CAAC,CAAA;QAEnE,qDAAqD;QACrD,MAAM,EAAE,GAAG,IAAA,mBAAU,GAAE,CAAA;QACvB,MAAM,WAAW,GAAG,wBAAU,CAAC,cAAc,CAAC,OAAO,EAAE,SAAS,EAAE,UAAU,CAAC,CAAA;QAE7E,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;;;;KAKf,CAAC,CAAC,GAAG,CACJ,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,EAAE,WAAW,EACvD,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,CAChD,CAAA;QAED,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,SAAS,EAAE,UAAU,EAAE,CAAA;IAC3D,CAAC;CACF;AA1DD,sDA0DC"}

package/dist/identity/did-manager.d.ts

@@ -0,0 +1,17 @@
+export interface DIDGenerationResult {
+    did: string;
+    privateKeyJwk: string;
+    publicKeyJwk: {
+        kty: string;
+        crv?: string;
+        x?: string;
+        y?: string;
+        alg?: string;
+    };
+}
+export declare class DIDManager {
+    static generateRootDID(): Promise<DIDGenerationResult>;
+    static generateAgentDID(): Promise<DIDGenerationResult>;
+    private static generateDID;
+}
+//# sourceMappingURL=did-manager.d.ts.map

package/dist/identity/did-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"did-manager.d.ts","sourceRoot":"","sources":["../../src/identity/did-manager.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,mBAAmB;IAClC,GAAG,EAAE,MAAM,CAAA;IACX,aAAa,EAAE,MAAM,CAAA;IACrB,YAAY,EAAE;QACZ,GAAG,EAAE,MAAM,CAAA;QACX,GAAG,CAAC,EAAE,MAAM,CAAA;QACZ,CAAC,CAAC,EAAE,MAAM,CAAA;QACV,CAAC,CAAC,EAAE,MAAM,CAAA;QACV,GAAG,CAAC,EAAE,MAAM,CAAA;KACb,CAAA;CACF;AAED,qBAAa,UAAU;WACR,eAAe,IAAI,OAAO,CAAC,mBAAmB,CAAC;WAI/C,gBAAgB,IAAI,OAAO,CAAC,mBAAmB,CAAC;mBAIxC,WAAW;CAgBjC"}

package/dist/identity/did-manager.js

@@ -0,0 +1,29 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DIDManager = void 0;
+const ai_identity_1 = require("@vess-id/ai-identity");
+class DIDManager {
+    static async generateRootDID() {
+        return DIDManager.generateDID();
+    }
+    static async generateAgentDID() {
+        return DIDManager.generateDID();
+    }
+    static async generateDID() {
+        const keyPair = await (0, ai_identity_1.generateKeyPair)();
+        const did = (0, ai_identity_1.createDidJwk)(keyPair.publicKey);
+        return {
+            did,
+            privateKeyJwk: JSON.stringify(keyPair.privateKey),
+            publicKeyJwk: {
+                kty: keyPair.publicKey.kty,
+                crv: keyPair.publicKey.crv,
+                x: keyPair.publicKey.x,
+                y: keyPair.publicKey.y,
+                alg: keyPair.publicKey.alg,
+            },
+        };
+    }
+}
+exports.DIDManager = DIDManager;
+//# sourceMappingURL=did-manager.js.map

package/dist/identity/did-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"did-manager.js","sourceRoot":"","sources":["../../src/identity/did-manager.ts"],"names":[],"mappings":";;;AAAA,sDAAoE;AAcpE,MAAa,UAAU;IACrB,MAAM,CAAC,KAAK,CAAC,eAAe;QAC1B,OAAO,UAAU,CAAC,WAAW,EAAE,CAAA;IACjC,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,gBAAgB;QAC3B,OAAO,UAAU,CAAC,WAAW,EAAE,CAAA;IACjC,CAAC;IAEO,MAAM,CAAC,KAAK,CAAC,WAAW;QAC9B,MAAM,OAAO,GAAG,MAAM,IAAA,6BAAe,GAAE,CAAA;QACvC,MAAM,GAAG,GAAG,IAAA,0BAAY,EAAC,OAAO,CAAC,SAAS,CAAC,CAAA;QAE3C,OAAO;YACL,GAAG;YACH,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,UAAU,CAAC;YACjD,YAAY,EAAE;gBACZ,GAAG,EAAE,OAAO,CAAC,SAAS,CAAC,GAAI;gBAC3B,GAAG,EAAE,OAAO,CAAC,SAAS,CAAC,GAAG;gBAC1B,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;gBACtB,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;gBACtB,GAAG,EAAE,OAAO,CAAC,SAAS,CAAC,GAAG;aAC3B;SACF,CAAA;IACH,CAAC;CACF;AAzBD,gCAyBC"}

package/dist/identity/key-manager.d.ts

@@ -0,0 +1,21 @@
+export declare class KeyManager {
+    static getKeychainRef(keyType: 'root' | 'agent', projectId?: string, clientName?: string): string;
+    private createEntry;
+    storeRootKey(privateKeyJwk: string): void;
+    getRootKey(): string | null;
+    deleteRootKey(): void;
+    storeAgentKey(projectId: string, clientName: string, privateKeyJwk: string): void;
+    getAgentKey(projectId: string, clientName: string): string | null;
+    deleteAgentKey(projectId: string, clientName: string): void;
+    storeSessionToken(token: string): void;
+    getSessionToken(): string | null;
+    deleteSessionToken(): void;
+    storeTelemetryApiKey(apiKey: string): void;
+    getTelemetryApiKey(): string | null;
+    deleteTelemetryApiKey(): void;
+    private envAccount;
+    storeEnvSecret(profile: string, key: string, value: string): void;
+    getEnvSecret(profile: string, key: string): string | null;
+    deleteEnvSecret(profile: string, key: string): void;
+}
+//# sourceMappingURL=key-manager.d.ts.map

package/dist/identity/key-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"key-manager.d.ts","sourceRoot":"","sources":["../../src/identity/key-manager.ts"],"names":[],"mappings":"AAIA,qBAAa,UAAU;IACrB,MAAM,CAAC,cAAc,CACnB,OAAO,EAAE,MAAM,GAAG,OAAO,EACzB,SAAS,CAAC,EAAE,MAAM,EAClB,UAAU,CAAC,EAAE,MAAM,GAClB,MAAM;IAOT,OAAO,CAAC,WAAW;IAInB,YAAY,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI;IAIzC,UAAU,IAAI,MAAM,GAAG,IAAI;IAQ3B,aAAa,IAAI,IAAI;IAQrB,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,IAAI;IAKjF,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IASjE,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,IAAI;IAS3D,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAItC,eAAe,IAAI,MAAM,GAAG,IAAI;IAQhC,kBAAkB,IAAI,IAAI;IAe1B,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAI1C,kBAAkB,IAAI,MAAM,GAAG,IAAI;IAQnC,qBAAqB,IAAI,IAAI;IAU7B,OAAO,CAAC,UAAU;IAIlB,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI;IAIjE,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAQzD,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI;CAOpD"}

package/dist/identity/key-manager.js

@@ -0,0 +1,126 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.KeyManager = void 0;
+const keyring_1 = require("@napi-rs/keyring");
+const SERVICE_NAME = 'com.vess';
+class KeyManager {
+    static getKeychainRef(keyType, projectId, clientName) {
+        if (keyType === 'root') {
+            return `${SERVICE_NAME}.root-key`;
+        }
+        return `${SERVICE_NAME}.agent.${projectId}.${clientName}`;
+    }
+    createEntry(account) {
+        return new keyring_1.Entry(SERVICE_NAME, account);
+    }
+    storeRootKey(privateKeyJwk) {
+        this.createEntry('root-key').setPassword(privateKeyJwk);
+    }
+    getRootKey() {
+        try {
+            return this.createEntry('root-key').getPassword();
+        }
+        catch {
+            return null;
+        }
+    }
+    deleteRootKey() {
+        try {
+            this.createEntry('root-key').deletePassword();
+        }
+        catch {
+            // Key doesn't exist, ignore
+        }
+    }
+    storeAgentKey(projectId, clientName, privateKeyJwk) {
+        const account = `agent.${projectId}.${clientName}`;
+        this.createEntry(account).setPassword(privateKeyJwk);
+    }
+    getAgentKey(projectId, clientName) {
+        try {
+            const account = `agent.${projectId}.${clientName}`;
+            return this.createEntry(account).getPassword();
+        }
+        catch {
+            return null;
+        }
+    }
+    deleteAgentKey(projectId, clientName) {
+        try {
+            const account = `agent.${projectId}.${clientName}`;
+            this.createEntry(account).deletePassword();
+        }
+        catch {
+            // Key doesn't exist, ignore
+        }
+    }
+    storeSessionToken(token) {
+        this.createEntry('session-token').setPassword(token);
+    }
+    getSessionToken() {
+        try {
+            return this.createEntry('session-token').getPassword();
+        }
+        catch {
+            return null;
+        }
+    }
+    deleteSessionToken() {
+        try {
+            this.createEntry('session-token').deletePassword();
+        }
+        catch {
+            // Token doesn't exist, ignore
+        }
+    }
+    // ── Telemetry API key ──
+    //
+    // Coding agents export their telemetry straight to the aidentity API, so the
+    // key has to be readable by `vess otel-headers` on every export. Keeping it
+    // here rather than in each agent's settings file is the point: those files are
+    // plaintext and show up in the agents' own config dumps.
+    storeTelemetryApiKey(apiKey) {
+        this.createEntry('telemetry-api-key').setPassword(apiKey);
+    }
+    getTelemetryApiKey() {
+        try {
+            return this.createEntry('telemetry-api-key').getPassword();
+        }
+        catch {
+            return null;
+        }
+    }
+    deleteTelemetryApiKey() {
+        try {
+            this.createEntry('telemetry-api-key').deletePassword();
+        }
+        catch {
+            // Key doesn't exist, ignore
+        }
+    }
+    // ── Env secret storage (vess://env/<profile>/<key>) ──
+    envAccount(profile, key) {
+        return `env.${profile}.${key}`;
+    }
+    storeEnvSecret(profile, key, value) {
+        this.createEntry(this.envAccount(profile, key)).setPassword(value);
+    }
+    getEnvSecret(profile, key) {
+        try {
+            return this.createEntry(this.envAccount(profile, key)).getPassword();
+        }
+        catch {
+            return null;
+        }
+    }
+    deleteEnvSecret(profile, key) {
+        try {
+            this.createEntry(this.envAccount(profile, key)).deletePassword();
+        }
+        catch {
+            // Secret doesn't exist, ignore
+        }
+    }
+}
+exports.KeyManager = KeyManager;
+//# sourceMappingURL=key-manager.js.map

package/dist/identity/key-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"key-manager.js","sourceRoot":"","sources":["../../src/identity/key-manager.ts"],"names":[],"mappings":";;;AAAA,8CAAwC;AAExC,MAAM,YAAY,GAAG,UAAU,CAAA;AAE/B,MAAa,UAAU;IACrB,MAAM,CAAC,cAAc,CACnB,OAAyB,EACzB,SAAkB,EAClB,UAAmB;QAEnB,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;YACvB,OAAO,GAAG,YAAY,WAAW,CAAA;QACnC,CAAC;QACD,OAAO,GAAG,YAAY,UAAU,SAAS,IAAI,UAAU,EAAE,CAAA;IAC3D,CAAC;IAEO,WAAW,CAAC,OAAe;QACjC,OAAO,IAAI,eAAK,CAAC,YAAY,EAAE,OAAO,CAAC,CAAA;IACzC,CAAC;IAED,YAAY,CAAC,aAAqB;QAChC,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,WAAW,CAAC,aAAa,CAAC,CAAA;IACzD,CAAC;IAED,UAAU;QACR,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,CAAA;QACnD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAA;QACb,CAAC;IACH,CAAC;IAED,aAAa;QACX,IAAI,CAAC;YACH,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,cAAc,EAAE,CAAA;QAC/C,CAAC;QAAC,MAAM,CAAC;YACP,4BAA4B;QAC9B,CAAC;IACH,CAAC;IAED,aAAa,CAAC,SAAiB,EAAE,UAAkB,EAAE,aAAqB;QACxE,MAAM,OAAO,GAAG,SAAS,SAAS,IAAI,UAAU,EAAE,CAAA;QAClD,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,WAAW,CAAC,aAAa,CAAC,CAAA;IACtD,CAAC;IAED,WAAW,CAAC,SAAiB,EAAE,UAAkB;QAC/C,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,SAAS,SAAS,IAAI,UAAU,EAAE,CAAA;YAClD,OAAO,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAA;QAChD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAA;QACb,CAAC;IACH,CAAC;IAED,cAAc,CAAC,SAAiB,EAAE,UAAkB;QAClD,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,SAAS,SAAS,IAAI,UAAU,EAAE,CAAA;YAClD,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,cAAc,EAAE,CAAA;QAC5C,CAAC;QAAC,MAAM,CAAC;YACP,4BAA4B;QAC9B,CAAC;IACH,CAAC;IAED,iBAAiB,CAAC,KAAa;QAC7B,IAAI,CAAC,WAAW,CAAC,eAAe,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAA;IACtD,CAAC;IAED,eAAe;QACb,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,WAAW,CAAC,eAAe,CAAC,CAAC,WAAW,EAAE,CAAA;QACxD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAA;QACb,CAAC;IACH,CAAC;IAED,kBAAkB;QAChB,IAAI,CAAC;YACH,IAAI,CAAC,WAAW,CAAC,eAAe,CAAC,CAAC,cAAc,EAAE,CAAA;QACpD,CAAC;QAAC,MAAM,CAAC;YACP,8BAA8B;QAChC,CAAC;IACH,CAAC;IAED,0BAA0B;IAC1B,EAAE;IACF,6EAA6E;IAC7E,4EAA4E;IAC5E,+EAA+E;IAC/E,yDAAyD;IAEzD,oBAAoB,CAAC,MAAc;QACjC,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAA;IAC3D,CAAC;IAED,kBAAkB;QAChB,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAAC,CAAC,WAAW,EAAE,CAAA;QAC5D,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAA;QACb,CAAC;IACH,CAAC;IAED,qBAAqB;QACnB,IAAI,CAAC;YACH,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAAC,CAAC,cAAc,EAAE,CAAA;QACxD,CAAC;QAAC,MAAM,CAAC;YACP,4BAA4B;QAC9B,CAAC;IACH,CAAC;IAED,wDAAwD;IAEhD,UAAU,CAAC,OAAe,EAAE,GAAW;QAC7C,OAAO,OAAO,OAAO,IAAI,GAAG,EAAE,CAAA;IAChC,CAAC;IAED,cAAc,CAAC,OAAe,EAAE,GAAW,EAAE,KAAa;QACxD,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAA;IACpE,CAAC;IAED,YAAY,CAAC,OAAe,EAAE,GAAW;QACvC,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAA;QACtE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAA;QACb,CAAC;IACH,CAAC;IAED,eAAe,CAAC,OAAe,EAAE,GAAW;QAC1C,IAAI,CAAC;YACH,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,cAAc,EAAE,CAAA;QAClE,CAAC;QAAC,MAAM,CAAC;YACP,+BAA+B;QACjC,CAAC;IACH,CAAC;CACF;AAnID,gCAmIC"}

package/dist/identity/session-key.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Ephemeral session key generation.
+ * Future extension: delegation chain Root -> Agent -> Session.
+ * Not implemented in beta — this file is a placeholder.
+ *
+ * Future design (spec section 4.2):
+ *   Root Key signs delegation VC from Agent DID to Session DID
+ *   Session Key signs VP (KB-JWT)
+ *   Gateway verifies VC chain (original VC + delegation VC)
+ */
+export declare class SessionKeyManager {
+}
+//# sourceMappingURL=session-key.d.ts.map

package/dist/identity/session-key.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-key.d.ts","sourceRoot":"","sources":["../../src/identity/session-key.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,qBAAa,iBAAiB;CAE7B"}

package/dist/identity/session-key.js

@@ -0,0 +1,17 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SessionKeyManager = void 0;
+/**
+ * Ephemeral session key generation.
+ * Future extension: delegation chain Root -> Agent -> Session.
+ * Not implemented in beta — this file is a placeholder.
+ *
+ * Future design (spec section 4.2):
+ *   Root Key signs delegation VC from Agent DID to Session DID
+ *   Session Key signs VP (KB-JWT)
+ *   Gateway verifies VC chain (original VC + delegation VC)
+ */
+class SessionKeyManager {
+}
+exports.SessionKeyManager = SessionKeyManager;
+//# sourceMappingURL=session-key.js.map

package/dist/identity/session-key.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-key.js","sourceRoot":"","sources":["../../src/identity/session-key.ts"],"names":[],"mappings":";;;AAAA;;;;;;;;;GASG;AACH,MAAa,iBAAiB;CAE7B;AAFD,8CAEC"}

package/dist/policy/policy-evaluator.d.ts

@@ -0,0 +1,63 @@
+import { PermissionRule, PermissionResource } from '@vess-id/ai-identity';
+import { LocalPolicy, PolicyEvaluationResult, PolicySource } from './types';
+/**
+ * Two-layer policy evaluator (spec §7.1, §7.3).
+ *
+ * Evaluation flow:
+ * 1. Local Policy evaluation → deny? block immediately
+ * 2. Org Policy evaluation (from synced cache) → deny? block immediately
+ * 3. Pass-through → continue to VC acquisition
+ *
+ * Semantics (spec §7.5):
+ * - deny > allow (deny always wins over allow)
+ * - more specific resource wins
+ * - explicit action > wildcard
+ * - local allow does NOT grant permission — only means "not blocked"
+ */
+export declare class PolicyEvaluator {
+    private readonly localPolicy;
+    private readonly orgRules;
+    constructor(localPolicy: LocalPolicy, orgRules?: PermissionRule[]);
+    /**
+     * Evaluate both local and org policies.
+     * Returns allowed=false if any deny rule matches.
+     * Returns allowed=true if no deny matches (pass-through, not a grant).
+     */
+    evaluate(provider: string, action: string, resource: PermissionResource): PolicyEvaluationResult;
+    evaluateLocal(provider: string, action: string, resource: PermissionResource): PolicyEvaluationResult;
+    evaluateOrg(provider: string, action: string, resource: PermissionResource): PolicyEvaluationResult;
+    private evaluateRules;
+    /**
+     * Compute specificity score for a rule (spec §7.5).
+     * Higher = more specific.
+     *
+     * Scoring:
+     * - Specific provider (+10) vs wildcard provider (+0)
+     * - Specific resource type (+10) vs wildcard (+0)
+     * - Resource id (+20) > resource pattern (+10) > no constraint (+0)
+     * - Specific action (+10) vs wildcard action (+0)
+     */
+    private computeSpecificity;
+    private matchesProvider;
+    private matchesAction;
+    private expandTilde;
+    private matchesResource;
+    /**
+     * Add a deny rule at runtime (e.g., from user's deny_persistent choice).
+     * For beta, this only adds to in-memory policy. Persistence to policy.yaml is β2+.
+     */
+    addDenyRule(rule: {
+        actions: string[];
+        effect: 'deny';
+        source: PolicySource;
+    }): void;
+    /**
+     * Simple glob matching for resource patterns.
+     * Supports:
+     * - '*' matches any sequence of characters (except /)
+     * - '**' matches any sequence including /
+     * - '?' matches a single character
+     */
+    private globMatch;
+}
+//# sourceMappingURL=policy-evaluator.d.ts.map

package/dist/policy/policy-evaluator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-evaluator.d.ts","sourceRoot":"","sources":["../../src/policy/policy-evaluator.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAA;AACzE,OAAO,EAAE,WAAW,EAAmB,sBAAsB,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AAE5F;;;;;;;;;;;;;GAaG;AACH,qBAAa,eAAe;IAExB,OAAO,CAAC,QAAQ,CAAC,WAAW;IAC5B,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBADR,WAAW,EAAE,WAAW,EACxB,QAAQ,GAAE,cAAc,EAAO;IAGlD;;;;OAIG;IACH,QAAQ,CACN,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,kBAAkB,GAC3B,sBAAsB;IAYzB,aAAa,CACX,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,kBAAkB,GAC3B,sBAAsB;IAIzB,WAAW,CACT,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,kBAAkB,GAC3B,sBAAsB;IAazB,OAAO,CAAC,aAAa;IAyCrB;;;;;;;;;OASG;IACH,OAAO,CAAC,kBAAkB;IAsB1B,OAAO,CAAC,eAAe;IAKvB,OAAO,CAAC,aAAa;IAcrB,OAAO,CAAC,WAAW;IAOnB,OAAO,CAAC,eAAe;IA8BvB;;;OAGG;IACH,WAAW,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,MAAM,EAAE,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,YAAY,CAAA;KAAE,GAAG,IAAI;IAuBpF;;;;;;OAMG;IACH,OAAO,CAAC,SAAS;CA2BlB"}

package/dist/policy/policy-evaluator.js

@@ -0,0 +1,266 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PolicyEvaluator = void 0;
+const os = __importStar(require("os"));
+/**
+ * Two-layer policy evaluator (spec §7.1, §7.3).
+ *
+ * Evaluation flow:
+ * 1. Local Policy evaluation → deny? block immediately
+ * 2. Org Policy evaluation (from synced cache) → deny? block immediately
+ * 3. Pass-through → continue to VC acquisition
+ *
+ * Semantics (spec §7.5):
+ * - deny > allow (deny always wins over allow)
+ * - more specific resource wins
+ * - explicit action > wildcard
+ * - local allow does NOT grant permission — only means "not blocked"
+ */
+class PolicyEvaluator {
+    localPolicy;
+    orgRules;
+    constructor(localPolicy, orgRules = []) {
+        this.localPolicy = localPolicy;
+        this.orgRules = orgRules;
+    }
+    /**
+     * Evaluate both local and org policies.
+     * Returns allowed=false if any deny rule matches.
+     * Returns allowed=true if no deny matches (pass-through, not a grant).
+     */
+    evaluate(provider, action, resource) {
+        // Step 1: Local policy evaluation
+        const localResult = this.evaluateLocal(provider, action, resource);
+        if (!localResult.allowed)
+            return localResult;
+        // Step 2: Org policy evaluation
+        const orgResult = this.evaluateOrg(provider, action, resource);
+        if (!orgResult.allowed)
+            return orgResult;
+        return { allowed: true };
+    }
+    evaluateLocal(provider, action, resource) {
+        return this.evaluateRules(this.localPolicy.rules, provider, action, resource, 'local_policy');
+    }
+    evaluateOrg(provider, action, resource) {
+        // Org policies are PermissionRule (allow-only from VCs).
+        // Convert to LocalPolicyRule format for evaluation.
+        // Org deny is expressed via absence of allow — but for explicit deny rules
+        // synced from Gateway, we treat effect='deny' if present.
+        const orgLocalRules = this.orgRules.map(r => ({
+            ...r,
+            effect: r.effect || 'allow',
+        }));
+        return this.evaluateRules(orgLocalRules, provider, action, resource, 'org_policy');
+    }
+    evaluateRules(rules, provider, action, resource, source) {
+        // Find all matching rules
+        const matchingRules = rules.filter(rule => this.matchesProvider(rule, provider) &&
+            this.matchesAction(rule, action) &&
+            this.matchesResource(rule, resource));
+        if (matchingRules.length === 0) {
+            return { allowed: true };
+        }
+        // Sort by specificity (most specific first)
+        // Then apply: deny > allow at equal specificity, but more specific wins overall
+        const sorted = matchingRules
+            .map(rule => ({ rule, specificity: this.computeSpecificity(rule) }))
+            .sort((a, b) => b.specificity - a.specificity);
+        // At the highest specificity level, deny > allow
+        const topSpecificity = sorted[0].specificity;
+        const topRules = sorted.filter(s => s.specificity === topSpecificity);
+        const topDeny = topRules.find(s => s.rule.effect === 'deny');
+        if (topDeny) {
+            return {
+                allowed: false,
+                reason: `Denied by ${source}: ${topDeny.rule.provider}.${topDeny.rule.actions?.join(',')} on ${topDeny.rule.resource?.pattern || topDeny.rule.resource?.type || '*'}`,
+                matchedRule: topDeny.rule,
+            };
+        }
+        // Only allow rules matched — pass-through (not a grant)
+        return { allowed: true };
+    }
+    /**
+     * Compute specificity score for a rule (spec §7.5).
+     * Higher = more specific.
+     *
+     * Scoring:
+     * - Specific provider (+10) vs wildcard provider (+0)
+     * - Specific resource type (+10) vs wildcard (+0)
+     * - Resource id (+20) > resource pattern (+10) > no constraint (+0)
+     * - Specific action (+10) vs wildcard action (+0)
+     */
+    computeSpecificity(rule) {
+        let score = 0;
+        // Provider specificity
+        if (rule.provider && rule.provider !== '*')
+            score += 10;
+        // Resource specificity
+        if (rule.resource) {
+            if (rule.resource.type !== '*')
+                score += 10;
+            if (rule.resource.id && rule.resource.id !== '*')
+                score += 20;
+            else if (rule.resource.pattern)
+                score += 10;
+        }
+        // Action specificity
+        if (rule.actions && rule.actions.length > 0) {
+            const hasWildcard = rule.actions.some(a => a === '*');
+            if (!hasWildcard)
+                score += 10;
+        }
+        return score;
+    }
+    matchesProvider(rule, provider) {
+        if (!rule.provider || rule.provider === '*')
+            return true;
+        return rule.provider === provider;
+    }
+    matchesAction(rule, action) {
+        if (!rule.actions || rule.actions.length === 0)
+            return true;
+        return rule.actions.some(a => {
+            if (a === '*')
+                return true;
+            if (a === action)
+                return true;
+            // Wildcard suffix: "secret.*" matches "secret.read"
+            if (a.endsWith('.*')) {
+                const prefix = a.slice(0, -2);
+                return action.startsWith(prefix + '.');
+            }
+            return false;
+        });
+    }
+    expandTilde(pattern) {
+        if (pattern.startsWith('~/') || pattern === '~') {
+            return os.homedir() + pattern.slice(1);
+        }
+        return pattern;
+    }
+    matchesResource(rule, resource) {
+        if (!rule.resource)
+            return true;
+        if (rule.resource.type !== '*' && rule.resource.type !== resource.type)
+            return false;
+        const expandedRulePattern = rule.resource.pattern ? this.expandTilde(rule.resource.pattern) : undefined;
+        const expandedResourcePattern = resource.pattern ? this.expandTilde(resource.pattern) : undefined;
+        const expandedResourceId = resource.id ? this.expandTilde(resource.id) : undefined;
+        // Pattern matching
+        if (expandedRulePattern && expandedResourcePattern) {
+            return this.globMatch(expandedRulePattern, expandedResourcePattern);
+        }
+        // If rule has a pattern but resource has an id, try matching id against pattern
+        if (expandedRulePattern && expandedResourceId) {
+            return this.globMatch(expandedRulePattern, expandedResourceId);
+        }
+        // If rule has no pattern/id constraint, it matches all resources of this type
+        if (!rule.resource.pattern && !rule.resource.id)
+            return true;
+        // Exact id match
+        const expandedRuleId = rule.resource.id ? this.expandTilde(rule.resource.id) : undefined;
+        if (expandedRuleId && expandedResourceId) {
+            return expandedRuleId === expandedResourceId || expandedRuleId === '*';
+        }
+        return true;
+    }
+    /**
+     * Add a deny rule at runtime (e.g., from user's deny_persistent choice).
+     * For beta, this only adds to in-memory policy. Persistence to policy.yaml is β2+.
+     */
+    addDenyRule(rule) {
+        // Validate: only allow known action formats
+        for (const action of rule.actions) {
+            if (!action.includes('.'))
+                return; // Invalid action format, skip silently
+        }
+        // Deduplicate: don't add if an identical deny rule already exists
+        const isDuplicate = this.localPolicy.rules.some(existing => existing.effect === 'deny' &&
+            existing.actions?.length === rule.actions.length &&
+            existing.actions?.every(a => rule.actions.includes(a)));
+        if (isDuplicate)
+            return;
+        this.localPolicy.rules.push({
+            provider: rule.actions[0]?.split('.')[0] || '*',
+            resource: { type: '*' },
+            actions: rule.actions,
+            effect: 'deny',
+            source: rule.source,
+        });
+    }
+    /**
+     * Simple glob matching for resource patterns.
+     * Supports:
+     * - '*' matches any sequence of characters (except /)
+     * - '**' matches any sequence including /
+     * - '?' matches a single character
+     */
+    globMatch(pattern, value) {
+        // Convert glob to regex
+        let regex = '^';
+        for (let i = 0; i < pattern.length; i++) {
+            const c = pattern[i];
+            if (c === '*' && pattern[i + 1] === '*') {
+                regex += '.*';
+                i++; // skip second *
+                if (pattern[i + 1] === '/')
+                    i++; // skip trailing /
+            }
+            else if (c === '*') {
+                regex += '[^/]*';
+            }
+            else if (c === '?') {
+                regex += '.';
+            }
+            else if (c === '.' || c === '(' || c === ')' || c === '[' || c === ']' || c === '{' || c === '}' || c === '+' || c === '^' || c === '$' || c === '|' || c === '\\') {
+                regex += '\\' + c;
+            }
+            else {
+                regex += c;
+            }
+        }
+        regex += '$';
+        try {
+            return new RegExp(regex).test(value);
+        }
+        catch {
+            return false;
+        }
+    }
+}
+exports.PolicyEvaluator = PolicyEvaluator;
+//# sourceMappingURL=policy-evaluator.js.map