@vess-id/vess 0.2.0-alpha.1

package/dist/env/env-resolver.js

@@ -0,0 +1,48 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EnvResolver = void 0;
+const env_reference_1 = require("./env-reference");
+const env_parser_1 = require("./env-parser");
+class EnvResolver {
+    backend;
+    constructor(backend) {
+        this.backend = backend;
+    }
+    /**
+     * Resolve env content, skipping unresolvable references with warnings.
+     * Previously this threw on any resolution failure; now it collects
+     * warnings and continues so that a single missing key does not block
+     * the entire process.
+     */
+    async resolveEnvContent(content) {
+        const { env } = await this.resolveEnvContentWithWarnings(content);
+        return env;
+    }
+    async resolveEnvContentWithWarnings(content) {
+        const env = {};
+        const warnings = [];
+        for (const line of (0, env_parser_1.parseEnvLines)(content)) {
+            if (line.isEmpty || line.isComment)
+                continue;
+            if ((0, env_reference_1.isEnvReference)(line.value)) {
+                const ref = (0, env_reference_1.parseEnvReference)(line.value);
+                if (!ref) {
+                    warnings.push(`${line.key}: malformed vess:// URI — remove or re-import this entry`);
+                    continue;
+                }
+                try {
+                    env[line.key] = await this.backend.resolve(ref);
+                }
+                catch {
+                    warnings.push(`${line.key}: not found in keychain (profile: ${ref.profile}) — run 'vess env import' to re-import, or remove this line from .env`);
+                }
+            }
+            else {
+                env[line.key] = line.value;
+            }
+        }
+        return { env, warnings };
+    }
+}
+exports.EnvResolver = EnvResolver;
+//# sourceMappingURL=env-resolver.js.map

package/dist/env/env-resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-resolver.js","sourceRoot":"","sources":["../../src/env/env-resolver.ts"],"names":[],"mappings":";;;AAAA,mDAAmE;AACnE,6CAA4C;AAQ5C,MAAa,WAAW;IACO;IAA7B,YAA6B,OAAsB;QAAtB,YAAO,GAAP,OAAO,CAAe;IAAG,CAAC;IAEvD;;;;;OAKG;IACH,KAAK,CAAC,iBAAiB,CAAC,OAAe;QACrC,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,IAAI,CAAC,6BAA6B,CAAC,OAAO,CAAC,CAAA;QACjE,OAAO,GAAG,CAAA;IACZ,CAAC;IAED,KAAK,CAAC,6BAA6B,CAAC,OAAe;QACjD,MAAM,GAAG,GAA2B,EAAE,CAAA;QACtC,MAAM,QAAQ,GAAa,EAAE,CAAA;QAE7B,KAAK,MAAM,IAAI,IAAI,IAAA,0BAAa,EAAC,OAAO,CAAC,EAAE,CAAC;YAC1C,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,SAAS;gBAAE,SAAQ;YAE5C,IAAI,IAAA,8BAAc,EAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC/B,MAAM,GAAG,GAAG,IAAA,iCAAiB,EAAC,IAAI,CAAC,KAAK,CAAC,CAAA;gBACzC,IAAI,CAAC,GAAG,EAAE,CAAC;oBACT,QAAQ,CAAC,IAAI,CACX,GAAG,IAAI,CAAC,GAAG,0DAA0D,CACtE,CAAA;oBACD,SAAQ;gBACV,CAAC;gBACD,IAAI,CAAC;oBACH,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;gBACjD,CAAC;gBAAC,MAAM,CAAC;oBACP,QAAQ,CAAC,IAAI,CACX,GAAG,IAAI,CAAC,GAAG,qCAAqC,GAAG,CAAC,OAAO,uEAAuE,CACnI,CAAA;gBACH,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAA;YAC5B,CAAC;QACH,CAAC;QAED,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAA;IAC1B,CAAC;CACF;AA3CD,kCA2CC"}

package/dist/env/fs-utils.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Write a file atomically: write to .tmp then rename.
+ * Prevents partial writes from corrupting the target file.
+ * @param filePath - Target file path
+ * @param content - File content
+ * @param mode - File permissions (default: 0o600 for secret files)
+ */
+export declare function atomicWriteFile(filePath: string, content: string, mode?: number): void;
+//# sourceMappingURL=fs-utils.d.ts.map

package/dist/env/fs-utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fs-utils.d.ts","sourceRoot":"","sources":["../../src/env/fs-utils.ts"],"names":[],"mappings":"AAEA;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,SAAQ,GAAG,IAAI,CASrF"}

package/dist/env/fs-utils.js

@@ -0,0 +1,59 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.atomicWriteFile = atomicWriteFile;
+const fs = __importStar(require("fs"));
+/**
+ * Write a file atomically: write to .tmp then rename.
+ * Prevents partial writes from corrupting the target file.
+ * @param filePath - Target file path
+ * @param content - File content
+ * @param mode - File permissions (default: 0o600 for secret files)
+ */
+function atomicWriteFile(filePath, content, mode = 0o600) {
+    const tmpPath = filePath + '.tmp';
+    try {
+        fs.writeFileSync(tmpPath, content, { encoding: 'utf-8', mode });
+        fs.renameSync(tmpPath, filePath);
+    }
+    catch (err) {
+        try {
+            fs.unlinkSync(tmpPath);
+        }
+        catch { }
+        throw err;
+    }
+}
+//# sourceMappingURL=fs-utils.js.map

package/dist/env/fs-utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fs-utils.js","sourceRoot":"","sources":["../../src/env/fs-utils.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AASA,0CASC;AAlBD,uCAAwB;AAExB;;;;;;GAMG;AACH,SAAgB,eAAe,CAAC,QAAgB,EAAE,OAAe,EAAE,IAAI,GAAG,KAAK;IAC7E,MAAM,OAAO,GAAG,QAAQ,GAAG,MAAM,CAAA;IACjC,IAAI,CAAC;QACH,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAA;QAC/D,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAA;IAClC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC;YAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAA;QAAC,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;QACvC,MAAM,GAAG,CAAA;IACX,CAAC;AACH,CAAC"}

package/dist/env/secret-backend.d.ts

@@ -0,0 +1,15 @@
+import { EnvReference } from './env-reference';
+import { KeyManager } from '../identity/key-manager';
+export interface SecretBackend {
+    resolve(ref: EnvReference): Promise<string>;
+    store(ref: EnvReference, value: string): Promise<void>;
+    delete(ref: EnvReference): Promise<void>;
+}
+export declare class KeychainBackend implements SecretBackend {
+    private readonly keyManager;
+    constructor(keyManager: KeyManager);
+    resolve(ref: EnvReference): Promise<string>;
+    store(ref: EnvReference, value: string): Promise<void>;
+    delete(ref: EnvReference): Promise<void>;
+}
+//# sourceMappingURL=secret-backend.d.ts.map

package/dist/env/secret-backend.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-backend.d.ts","sourceRoot":"","sources":["../../src/env/secret-backend.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAA;AAEpD,MAAM,WAAW,aAAa;IAC5B,OAAO,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;IAC3C,KAAK,CAAC,GAAG,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACtD,MAAM,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CACzC;AAED,qBAAa,eAAgB,YAAW,aAAa;IACvC,OAAO,CAAC,QAAQ,CAAC,UAAU;gBAAV,UAAU,EAAE,UAAU;IAE7C,OAAO,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC;IAQ3C,KAAK,CAAC,GAAG,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAItD,MAAM,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC;CAG/C"}

package/dist/env/secret-backend.js

@@ -0,0 +1,24 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.KeychainBackend = void 0;
+class KeychainBackend {
+    keyManager;
+    constructor(keyManager) {
+        this.keyManager = keyManager;
+    }
+    async resolve(ref) {
+        const value = this.keyManager.getEnvSecret(ref.profile, ref.key);
+        if (value === null) {
+            throw new Error(`Secret not found in keychain: ${ref.profile}/${ref.key}`);
+        }
+        return value;
+    }
+    async store(ref, value) {
+        this.keyManager.storeEnvSecret(ref.profile, ref.key, value);
+    }
+    async delete(ref) {
+        this.keyManager.deleteEnvSecret(ref.profile, ref.key);
+    }
+}
+exports.KeychainBackend = KeychainBackend;
+//# sourceMappingURL=secret-backend.js.map

package/dist/env/secret-backend.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-backend.js","sourceRoot":"","sources":["../../src/env/secret-backend.ts"],"names":[],"mappings":";;;AASA,MAAa,eAAe;IACG;IAA7B,YAA6B,UAAsB;QAAtB,eAAU,GAAV,UAAU,CAAY;IAAG,CAAC;IAEvD,KAAK,CAAC,OAAO,CAAC,GAAiB;QAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,GAAG,CAAC,CAAA;QAChE,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,iCAAiC,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,GAAG,EAAE,CAAC,CAAA;QAC5E,CAAC;QACD,OAAO,KAAK,CAAA;IACd,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,GAAiB,EAAE,KAAa;QAC1C,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;IAC7D,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAiB;QAC5B,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,GAAG,CAAC,CAAA;IACvD,CAAC;CACF;AAlBD,0CAkBC"}

package/dist/executor/executor-registry.d.ts

@@ -0,0 +1,22 @@
+import { SecretFileContext } from './secret-file';
+import { ProcessLaunchContext } from './process-launcher';
+export interface ExecutorResult {
+    success: boolean;
+    data?: any;
+    error?: string;
+    normalizedResource?: string;
+    resourceFingerprint?: string;
+}
+/** Union of all executor context types */
+export type LocalExecutorContext = SecretFileContext | ProcessLaunchContext;
+export type LocalExecutor = (params: Record<string, any>, context: LocalExecutorContext) => ExecutorResult;
+export declare function getLocalExecutor(action: string): LocalExecutor | undefined;
+export declare function isLocalAction(action: string): boolean;
+/**
+ * Determine execution routing (spec §7.4).
+ */
+export declare function determineRouting(provider: string, _action: string): {
+    executor: 'local' | 'gateway';
+    enforcement: 'local' | 'gateway_verified_local' | 'cached_verified_local' | 'gateway';
+};
+//# sourceMappingURL=executor-registry.d.ts.map

package/dist/executor/executor-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"executor-registry.d.ts","sourceRoot":"","sources":["../../src/executor/executor-registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAmC,iBAAiB,EAAoB,MAAM,eAAe,CAAA;AACpG,OAAO,EAAiB,oBAAoB,EAAuB,MAAM,oBAAoB,CAAA;AAE7F,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,OAAO,CAAA;IAChB,IAAI,CAAC,EAAE,GAAG,CAAA;IACV,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAC3B,mBAAmB,CAAC,EAAE,MAAM,CAAA;CAC7B;AAED,0CAA0C;AAC1C,MAAM,MAAM,oBAAoB,GAAG,iBAAiB,GAAG,oBAAoB,CAAA;AAE3E,MAAM,MAAM,aAAa,GAAG,CAC1B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAC3B,OAAO,EAAE,oBAAoB,KAC1B,cAAc,CAAA;AAsBnB,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS,CAE1E;AAED,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAErD;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG;IACnE,QAAQ,EAAE,OAAO,GAAG,SAAS,CAAA;IAC7B,WAAW,EAAE,OAAO,GAAG,wBAAwB,GAAG,uBAAuB,GAAG,SAAS,CAAA;CACtF,CAKA"}

package/dist/executor/executor-registry.js

@@ -0,0 +1,42 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getLocalExecutor = getLocalExecutor;
+exports.isLocalAction = isLocalAction;
+exports.determineRouting = determineRouting;
+const secret_file_1 = require("./secret-file");
+const process_launcher_1 = require("./process-launcher");
+const executors = {
+    'os.secret.read': (params, context) => {
+        return (0, secret_file_1.readSecretFile)(params.file_path, context);
+    },
+    'os.secret.write': (params, context) => {
+        return (0, secret_file_1.writeSecretFile)(params.file_path, params.content, context);
+    },
+    'os.process.run': (params, context) => {
+        if (!Array.isArray(params.command)) {
+            return { success: false, error: 'command must be an array of strings' };
+        }
+        const result = (0, process_launcher_1.launchProcess)(params, context);
+        return {
+            success: result.success,
+            data: result.success ? { stdout: result.stdout, stderr: result.stderr, exitCode: result.exitCode } : undefined,
+            error: result.error || result.stderr,
+        };
+    },
+};
+function getLocalExecutor(action) {
+    return executors[action];
+}
+function isLocalAction(action) {
+    return action.startsWith('os.');
+}
+/**
+ * Determine execution routing (spec §7.4).
+ */
+function determineRouting(provider, _action) {
+    if (provider === 'os') {
+        return { executor: 'local', enforcement: 'gateway_verified_local' };
+    }
+    return { executor: 'gateway', enforcement: 'gateway' };
+}
+//# sourceMappingURL=executor-registry.js.map

package/dist/executor/executor-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"executor-registry.js","sourceRoot":"","sources":["../../src/executor/executor-registry.ts"],"names":[],"mappings":";;AAuCA,4CAEC;AAED,sCAEC;AAKD,4CAQC;AA1DD,+CAAoG;AACpG,yDAA6F;AAkB7F,MAAM,SAAS,GAAkC;IAC/C,gBAAgB,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE;QACpC,OAAO,IAAA,4BAAc,EAAC,MAAM,CAAC,SAAS,EAAE,OAA4B,CAAC,CAAA;IACvE,CAAC;IACD,iBAAiB,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE;QACrC,OAAO,IAAA,6BAAe,EAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,OAAO,EAAE,OAA4B,CAAC,CAAA;IACxF,CAAC;IACD,gBAAgB,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE;QACpC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;YACnC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,qCAAqC,EAAE,CAAA;QACzE,CAAC;QACD,MAAM,MAAM,GAAG,IAAA,gCAAa,EAAC,MAA6B,EAAE,OAA+B,CAAC,CAAA;QAC5F,OAAO;YACL,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,SAAS;YAC9G,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,MAAM;SACrC,CAAA;IACH,CAAC;CACF,CAAA;AAED,SAAgB,gBAAgB,CAAC,MAAc;IAC7C,OAAO,SAAS,CAAC,MAAM,CAAC,CAAA;AAC1B,CAAC;AAED,SAAgB,aAAa,CAAC,MAAc;IAC1C,OAAO,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAA;AACjC,CAAC;AAED;;GAEG;AACH,SAAgB,gBAAgB,CAAC,QAAgB,EAAE,OAAe;IAIhE,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,WAAW,EAAE,wBAAwB,EAAE,CAAA;IACrE,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,SAAS,EAAE,CAAA;AACxD,CAAC"}

package/dist/executor/process-launcher.d.ts

@@ -0,0 +1,26 @@
+export interface ProcessLaunchParams {
+    command: string[];
+    working_directory?: string;
+    timeout_seconds?: number;
+}
+export interface ProcessLaunchContext {
+    resolvedEnv: Record<string, string>;
+}
+export interface ProcessLaunchResult {
+    success: boolean;
+    exitCode: number | null;
+    stdout?: string;
+    stderr?: string;
+    error?: string;
+}
+/**
+ * Spawn a child process with env injection.
+ *
+ * SECURITY NOTE: stdout/stderr from the process are captured and returned
+ * to the caller (which may be an AI agent via MCP). If the spawned process
+ * logs environment variables, injected secrets could leak through the output.
+ * This is an accepted trade-off for β — the process output is needed for
+ * debugging. Consider adding output redaction in a future version.
+ */
+export declare function launchProcess(params: ProcessLaunchParams, context: ProcessLaunchContext): ProcessLaunchResult;
+//# sourceMappingURL=process-launcher.d.ts.map

package/dist/executor/process-launcher.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"process-launcher.d.ts","sourceRoot":"","sources":["../../src/executor/process-launcher.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,MAAM,EAAE,CAAA;IACjB,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,eAAe,CAAC,EAAE,MAAM,CAAA;CACzB;AAED,MAAM,WAAW,oBAAoB;IACnC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CACpC;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,OAAO,CAAA;IAChB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;IACvB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAKD;;;;;;;;GAQG;AACH,wBAAgB,aAAa,CAC3B,MAAM,EAAE,mBAAmB,EAC3B,OAAO,EAAE,oBAAoB,GAC5B,mBAAmB,CAqDrB"}

package/dist/executor/process-launcher.js

@@ -0,0 +1,98 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.launchProcess = launchProcess;
+const child_process_1 = require("child_process");
+const path = __importStar(require("path"));
+const DEFAULT_TIMEOUT_SECONDS = 300;
+const MAX_OUTPUT_BYTES = 1024 * 1024;
+/**
+ * Spawn a child process with env injection.
+ *
+ * SECURITY NOTE: stdout/stderr from the process are captured and returned
+ * to the caller (which may be an AI agent via MCP). If the spawned process
+ * logs environment variables, injected secrets could leak through the output.
+ * This is an accepted trade-off for β — the process output is needed for
+ * debugging. Consider adding output redaction in a future version.
+ */
+function launchProcess(params, context) {
+    if (!params.command || params.command.length === 0) {
+        return { success: false, exitCode: null, error: 'Command array is empty' };
+    }
+    // Block shell interpreters and dangerous commands
+    const BLOCKED_COMMANDS = new Set([
+        'sh', 'bash', 'zsh', 'fish', 'csh', 'tcsh', 'ksh', 'dash',
+        'cmd', 'cmd.exe', 'powershell', 'pwsh',
+        'rm', 'rmdir', 'del',
+        'sudo', 'su', 'doas',
+        'chmod', 'chown',
+        'curl', 'wget', // prevent arbitrary network calls with secrets in env
+        'eval', 'exec',
+        'env', 'xargs', 'printenv',
+        'python', 'python3', 'ruby', 'perl', 'node',
+        'npx', 'pnpx', 'bunx', // package runners can execute arbitrary code
+    ]);
+    const [cmd, ...args] = params.command;
+    const cmdBasename = path.basename(cmd).toLowerCase();
+    if (BLOCKED_COMMANDS.has(cmdBasename)) {
+        return {
+            success: false,
+            exitCode: null,
+            error: `Command "${cmd}" is blocked for security. Use a package manager (npm, pnpm, yarn) or application binary directly.`,
+        };
+    }
+    const timeoutMs = (params.timeout_seconds ?? DEFAULT_TIMEOUT_SECONDS) * 1000;
+    const env = { ...process.env, ...context.resolvedEnv };
+    const result = (0, child_process_1.spawnSync)(cmd, args, {
+        cwd: params.working_directory,
+        env,
+        timeout: timeoutMs,
+        maxBuffer: MAX_OUTPUT_BYTES,
+        stdio: ['ignore', 'pipe', 'pipe'],
+    });
+    if (result.error) {
+        return { success: false, exitCode: null, error: `Process spawn failed: ${result.error.message}` };
+    }
+    const stdout = result.stdout?.toString('utf-8');
+    const stderr = result.stderr?.toString('utf-8');
+    return {
+        success: result.status === 0,
+        exitCode: result.status,
+        stdout,
+        stderr,
+        error: result.status !== 0 ? `Process exited with code ${result.status}` : undefined,
+    };
+}
+//# sourceMappingURL=process-launcher.js.map

package/dist/executor/process-launcher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"process-launcher.js","sourceRoot":"","sources":["../../src/executor/process-launcher.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAiCA,sCAwDC;AAzFD,iDAAyC;AACzC,2CAA4B;AAoB5B,MAAM,uBAAuB,GAAG,GAAG,CAAA;AACnC,MAAM,gBAAgB,GAAG,IAAI,GAAG,IAAI,CAAA;AAEpC;;;;;;;;GAQG;AACH,SAAgB,aAAa,CAC3B,MAA2B,EAC3B,OAA6B;IAE7B,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAA;IAC5E,CAAC;IAED,kDAAkD;IAClD,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC;QAC/B,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM;QACzD,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM;QACtC,IAAI,EAAE,OAAO,EAAE,KAAK;QACpB,MAAM,EAAE,IAAI,EAAE,MAAM;QACpB,OAAO,EAAE,OAAO;QAChB,MAAM,EAAE,MAAM,EAAE,sDAAsD;QACtE,MAAM,EAAE,MAAM;QACd,KAAK,EAAE,OAAO,EAAE,UAAU;QAC1B,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;QAC3C,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,6CAA6C;KACrE,CAAC,CAAA;IAEF,MAAM,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,MAAM,CAAC,OAAO,CAAA;IACrC,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAA;IACpD,IAAI,gBAAgB,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;QACtC,OAAO;YACL,OAAO,EAAE,KAAK;YACd,QAAQ,EAAE,IAAI;YACd,KAAK,EAAE,YAAY,GAAG,oGAAoG;SAC3H,CAAA;IACH,CAAC;IACD,MAAM,SAAS,GAAG,CAAC,MAAM,CAAC,eAAe,IAAI,uBAAuB,CAAC,GAAG,IAAI,CAAA;IAC5E,MAAM,GAAG,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,WAAW,EAAE,CAAA;IAEtD,MAAM,MAAM,GAAG,IAAA,yBAAS,EAAC,GAAG,EAAE,IAAI,EAAE;QAClC,GAAG,EAAE,MAAM,CAAC,iBAAiB;QAC7B,GAAG;QACH,OAAO,EAAE,SAAS;QAClB,SAAS,EAAE,gBAAgB;QAC3B,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;KAClC,CAAC,CAAA;IAEF,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,yBAAyB,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAA;IACnG,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAA;IAC/C,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAA;IAE/C,OAAO;QACL,OAAO,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;QAC5B,QAAQ,EAAE,MAAM,CAAC,MAAM;QACvB,MAAM;QACN,MAAM;QACN,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,4BAA4B,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS;KACrF,CAAA;AACH,CAAC"}

package/dist/executor/secret-file.d.ts

@@ -0,0 +1,28 @@
+export interface SecretFileContext {
+    rootDid: string;
+    approvedResource?: string;
+    approvedFingerprint?: string;
+}
+export interface SecretFileResult {
+    success: boolean;
+    data?: string;
+    error?: string;
+    normalizedResource: string;
+    resourceFingerprint: string;
+}
+/**
+ * Read a secret file with resource verification (spec §8.3).
+ *
+ * Flow:
+ * 1. canonicalize(requested_path) -> normalized_resource
+ * 2. Compute fingerprint
+ * 3. Compare with approved resource (from VC/grant)
+ * 4. If mismatch -> deny
+ * 5. If match -> read file
+ */
+export declare function readSecretFile(filePath: string, context: SecretFileContext): SecretFileResult;
+/**
+ * Write content to a secret file with resource verification (spec §8.3).
+ */
+export declare function writeSecretFile(filePath: string, content: string, context: SecretFileContext): SecretFileResult;
+//# sourceMappingURL=secret-file.d.ts.map

package/dist/executor/secret-file.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-file.d.ts","sourceRoot":"","sources":["../../src/executor/secret-file.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,CAAA;IACf,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,mBAAmB,CAAC,EAAE,MAAM,CAAA;CAC7B;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,OAAO,CAAA;IAChB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,kBAAkB,EAAE,MAAM,CAAA;IAC1B,mBAAmB,EAAE,MAAM,CAAA;CAC5B;AAED;;;;;;;;;GASG;AACH,wBAAgB,cAAc,CAC5B,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,iBAAiB,GACzB,gBAAgB,CAuClB;AAED;;GAEG;AACH,wBAAgB,eAAe,CAC7B,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,iBAAiB,GACzB,gBAAgB,CAqClB"}

package/dist/executor/secret-file.js

@@ -0,0 +1,127 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.readSecretFile = readSecretFile;
+exports.writeSecretFile = writeSecretFile;
+const fs = __importStar(require("fs"));
+const resource_canonicalizer_1 = require("../utils/resource-canonicalizer");
+/**
+ * Read a secret file with resource verification (spec §8.3).
+ *
+ * Flow:
+ * 1. canonicalize(requested_path) -> normalized_resource
+ * 2. Compute fingerprint
+ * 3. Compare with approved resource (from VC/grant)
+ * 4. If mismatch -> deny
+ * 5. If match -> read file
+ */
+function readSecretFile(filePath, context) {
+    const normalizedResource = (0, resource_canonicalizer_1.canonicalizePath)(filePath);
+    const resourceFingerprint = (0, resource_canonicalizer_1.computeFingerprint)(normalizedResource, context.rootDid);
+    // Verify against approved resource if provided
+    if (context.approvedResource && context.approvedResource !== normalizedResource) {
+        return {
+            success: false,
+            error: `Resource mismatch: requested ${normalizedResource} but approved ${context.approvedResource}`,
+            normalizedResource,
+            resourceFingerprint,
+        };
+    }
+    if (context.approvedFingerprint && context.approvedFingerprint !== resourceFingerprint) {
+        return {
+            success: false,
+            error: `Fingerprint mismatch: resource may have been moved or tampered with`,
+            normalizedResource,
+            resourceFingerprint,
+        };
+    }
+    try {
+        const content = fs.readFileSync(normalizedResource, 'utf-8');
+        return {
+            success: true,
+            data: content,
+            normalizedResource,
+            resourceFingerprint,
+        };
+    }
+    catch (err) {
+        return {
+            success: false,
+            error: `Failed to read file: ${err.message}`,
+            normalizedResource,
+            resourceFingerprint,
+        };
+    }
+}
+/**
+ * Write content to a secret file with resource verification (spec §8.3).
+ */
+function writeSecretFile(filePath, content, context) {
+    const normalizedResource = (0, resource_canonicalizer_1.canonicalizePath)(filePath);
+    const resourceFingerprint = (0, resource_canonicalizer_1.computeFingerprint)(normalizedResource, context.rootDid);
+    if (context.approvedResource && context.approvedResource !== normalizedResource) {
+        return {
+            success: false,
+            error: `Resource mismatch: requested ${normalizedResource} but approved ${context.approvedResource}`,
+            normalizedResource,
+            resourceFingerprint,
+        };
+    }
+    if (context.approvedFingerprint && context.approvedFingerprint !== resourceFingerprint) {
+        return {
+            success: false,
+            error: `Fingerprint mismatch: resource may have been moved or tampered with`,
+            normalizedResource,
+            resourceFingerprint,
+        };
+    }
+    try {
+        fs.writeFileSync(normalizedResource, content, 'utf-8');
+        return {
+            success: true,
+            normalizedResource,
+            resourceFingerprint,
+        };
+    }
+    catch (err) {
+        return {
+            success: false,
+            error: `Failed to write file: ${err.message}`,
+            normalizedResource,
+            resourceFingerprint,
+        };
+    }
+}
+//# sourceMappingURL=secret-file.js.map

package/dist/executor/secret-file.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-file.js","sourceRoot":"","sources":["../../src/executor/secret-file.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA2BA,wCA0CC;AAKD,0CAyCC;AAnHD,uCAAwB;AACxB,4EAAsF;AAgBtF;;;;;;;;;GASG;AACH,SAAgB,cAAc,CAC5B,QAAgB,EAChB,OAA0B;IAE1B,MAAM,kBAAkB,GAAG,IAAA,yCAAgB,EAAC,QAAQ,CAAC,CAAA;IACrD,MAAM,mBAAmB,GAAG,IAAA,2CAAkB,EAAC,kBAAkB,EAAE,OAAO,CAAC,OAAO,CAAC,CAAA;IAEnF,+CAA+C;IAC/C,IAAI,OAAO,CAAC,gBAAgB,IAAI,OAAO,CAAC,gBAAgB,KAAK,kBAAkB,EAAE,CAAC;QAChF,OAAO;YACL,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,gCAAgC,kBAAkB,iBAAiB,OAAO,CAAC,gBAAgB,EAAE;YACpG,kBAAkB;YAClB,mBAAmB;SACpB,CAAA;IACH,CAAC;IAED,IAAI,OAAO,CAAC,mBAAmB,IAAI,OAAO,CAAC,mBAAmB,KAAK,mBAAmB,EAAE,CAAC;QACvF,OAAO;YACL,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,qEAAqE;YAC5E,kBAAkB;YAClB,mBAAmB;SACpB,CAAA;IACH,CAAC;IAED,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAA;QAC5D,OAAO;YACL,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,OAAO;YACb,kBAAkB;YAClB,mBAAmB;SACpB,CAAA;IACH,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,OAAO;YACL,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,wBAAwB,GAAG,CAAC,OAAO,EAAE;YAC5C,kBAAkB;YAClB,mBAAmB;SACpB,CAAA;IACH,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAgB,eAAe,CAC7B,QAAgB,EAChB,OAAe,EACf,OAA0B;IAE1B,MAAM,kBAAkB,GAAG,IAAA,yCAAgB,EAAC,QAAQ,CAAC,CAAA;IACrD,MAAM,mBAAmB,GAAG,IAAA,2CAAkB,EAAC,kBAAkB,EAAE,OAAO,CAAC,OAAO,CAAC,CAAA;IAEnF,IAAI,OAAO,CAAC,gBAAgB,IAAI,OAAO,CAAC,gBAAgB,KAAK,kBAAkB,EAAE,CAAC;QAChF,OAAO;YACL,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,gCAAgC,kBAAkB,iBAAiB,OAAO,CAAC,gBAAgB,EAAE;YACpG,kBAAkB;YAClB,mBAAmB;SACpB,CAAA;IACH,CAAC;IAED,IAAI,OAAO,CAAC,mBAAmB,IAAI,OAAO,CAAC,mBAAmB,KAAK,mBAAmB,EAAE,CAAC;QACvF,OAAO;YACL,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,qEAAqE;YAC5E,kBAAkB;YAClB,mBAAmB;SACpB,CAAA;IACH,CAAC;IAED,IAAI,CAAC;QACH,EAAE,CAAC,aAAa,CAAC,kBAAkB,EAAE,OAAO,EAAE,OAAO,CAAC,CAAA;QACtD,OAAO;YACL,OAAO,EAAE,IAAI;YACb,kBAAkB;YAClB,mBAAmB;SACpB,CAAA;IACH,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,OAAO;YACL,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,yBAAyB,GAAG,CAAC,OAAO,EAAE;YAC7C,kBAAkB;YAClB,mBAAmB;SACpB,CAAA;IACH,CAAC;AACH,CAAC"}

package/dist/gateway/auth.d.ts

@@ -0,0 +1,26 @@
+import { KeyManager } from '../identity/key-manager';
+/**
+ * Device authentication manager.
+ * Session token is stored in OS Keychain (not config file) for security.
+ * Falls back to config file for migration from older versions.
+ */
+export declare class DeviceAuth {
+    private readonly configPath;
+    private readonly keyManager;
+    constructor(configPath: string, keyManager?: KeyManager);
+    getSessionToken(): string | undefined;
+    setSessionToken(token: string): void;
+    isAuthenticated(): boolean;
+    /**
+     * Decode the session token JWT and return the `exp` claim (Unix epoch seconds).
+     * Returns null if no token is stored or the token is malformed.
+     */
+    getTokenExpiry(): number | null;
+    /**
+     * Check if the current session token is expiring within the given threshold.
+     * Returns true if no token is stored (treat as expired).
+     */
+    isTokenExpiringSoon(thresholdSeconds: number): boolean;
+    getGatewayUrl(): string;
+}
+//# sourceMappingURL=auth.d.ts.map

package/dist/gateway/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/gateway/auth.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAA;AAEpD;;;;GAIG;AACH,qBAAa,UAAU;IAInB,OAAO,CAAC,QAAQ,CAAC,UAAU;IAH7B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAY;gBAGpB,UAAU,EAAE,MAAM,EACnC,UAAU,CAAC,EAAE,UAAU;IAKzB,eAAe,IAAI,MAAM,GAAG,SAAS;IASrC,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAIpC,eAAe,IAAI,OAAO;IAI1B;;;OAGG;IACH,cAAc,IAAI,MAAM,GAAG,IAAI;IAa/B;;;OAGG;IACH,mBAAmB,CAAC,gBAAgB,EAAE,MAAM,GAAG,OAAO;IAMtD,aAAa,IAAI,MAAM;CAGxB"}