@vorim/sdk 1.0.2 → 2.1.0

package/README.md

@@ -10,6 +10,10 @@ Register agents with cryptographic Ed25519 identities, enforce scoped permission
 [![Node](https://img.shields.io/badge/Node.js-18%2B-green.svg)](https://nodejs.org/)
 [![Zero Dependencies](https://img.shields.io/badge/Dependencies-0-brightgreen.svg)]()
 
+> **[vorim.ai](https://vorim.ai)** — Create a free account and get your API key in 30 seconds.
+> **[Documentation](https://vorim.ai/docs)** — Full API reference, framework integrations, and examples.
+> **[Quick Start](https://vorim.ai/quickstart)** — Set up in under 5 minutes.
+
 ---
 
 ## Why Vorim?

package/dist/index.cjs

@@ -71,6 +71,12 @@ var VorimSDK = class {
     const qs = new URLSearchParams(params).toString();
     return this.get(`/agents${qs ? "?" + qs : ""}`);
   }
+  /**
+   * Update an agent's metadata.
+   */
+  async updateAgent(agentId, updates) {
+    return this.patch(`/agents/${agentId}`, updates);
+  }
   /**
    * Revoke an agent (permanent deactivation).
    */
@@ -91,6 +97,18 @@ var VorimSDK = class {
   async grant(agentId, scope, options) {
     return this.post(`/agents/${agentId}/permissions`, { scope, ...options });
   }
+  /**
+   * List all active permissions for an agent.
+   */
+  async listPermissions(agentId) {
+    return this.get(`/agents/${agentId}/permissions`);
+  }
+  /**
+   * Revoke a specific permission scope from an agent.
+   */
+  async revokePermission(agentId, scope) {
+    return this.delete(`/agents/${agentId}/permissions/${scope}`);
+  }
   // ─── Audit ────────────────────────────────────────────────────────
   /**
    * Emit an audit event for an agent action.
@@ -104,6 +122,31 @@ var VorimSDK = class {
   async emitBatch(events) {
     return this.post("/audit/events", { events });
   }
+  /**
+   * Export a signed audit bundle for a date range.
+   */
+  async exportAudit(from, to, format = "json") {
+    return this.post("/audit/export", { from, to, format });
+  }
+  // ─── API Keys ──────────────────────────────────────────────────────
+  /**
+   * List all API keys for the organisation.
+   */
+  async listApiKeys() {
+    return this.get("/api-keys");
+  }
+  /**
+   * Create a new API key.
+   */
+  async createApiKey(name, options) {
+    return this.post("/api-keys", { name, ...options });
+  }
+  /**
+   * Revoke an API key.
+   */
+  async deleteApiKey(keyId) {
+    return this.delete(`/api-keys/${keyId}`);
+  }
   // ─── Signing ──────────────────────────────────────────────────────
   /**
    * Sign a payload with an Ed25519 private key (client-side).
@@ -138,6 +181,9 @@ var VorimSDK = class {
   async post(path, body) {
     return this.request("POST", path, body);
   }
+  async patch(path, body) {
+    return this.request("PATCH", path, body);
+  }
   async delete(path) {
     return this.request("DELETE", path);
   }
@@ -150,7 +196,7 @@ var VorimSDK = class {
         headers: {
           "Authorization": `Bearer ${this.apiKey}`,
           "Content-Type": "application/json",
-          "User-Agent": "vorim-sdk/1.0.0"
+          "User-Agent": "vorim-sdk/2.0.0"
         },
         body: body ? JSON.stringify(body) : void 0,
         signal: controller.signal

package/dist/index.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts"],"sourcesContent":["// ============================================================================\n// VORIM SDK — TypeScript\n// Thin client wrapping the Vorim AI REST API\n// ============================================================================\n\nimport type {\n  Agent, AgentRegistrationInput, AgentRegistrationResult,\n  TrustRecord, AuditEventInput, PermissionScope, PermissionCheckResult,\n} from './types.js';\n\nexport interface VorimConfig {\n  apiKey: string;\n  baseUrl?: string;\n  timeout?: number;\n}\n\nexport class VorimSDK {\n  private apiKey: string;\n  private baseUrl: string;\n  private timeout: number;\n\n  constructor(config: VorimConfig) {\n    this.apiKey = config.apiKey;\n    this.baseUrl = (config.baseUrl || 'https://api.vorim.ai').replace(/\\/$/, '') + '/v1';\n    this.timeout = config.timeout || 10000;\n  }\n\n  // ─── Agent Identity ────────────────────────────────────────────────\n\n  /**\n   * Register a new agent with Vorim AI.\n   * Returns the agent identity and a private key (shown once).\n   */\n  async register(input: AgentRegistrationInput): Promise<AgentRegistrationResult> {\n    return this.post('/agents', input);\n  }\n\n  /**\n   * Verify an agent's identity via the public Trust API.\n   */\n  async verify(agentId: string): Promise<TrustRecord> {\n    return this.get(`/trust/verify/${agentId}`);\n  }\n\n  /**\n   * Get agent details.\n   */\n  async getAgent(agentId: string): Promise<Agent> {\n    return this.get(`/agents/${agentId}`);\n  }\n\n  /**\n   * List all agents in the organisation.\n   */\n  async listAgents(params?: { page?: number; per_page?: number; status?: string }): Promise<{ agents: Agent[]; meta: any }> {\n    const qs = new URLSearchParams(params as any).toString();\n    return this.get(`/agents${qs ? '?' + qs : ''}`);\n  }\n\n  /**\n   * Revoke an agent (permanent deactivation).\n   */\n  async revoke(agentId: string): Promise<void> {\n    await this.delete(`/agents/${agentId}`);\n  }\n\n  // ─── Permissions ──────────────────────────────────────────────────\n\n  /**\n   * Check if an agent has a specific permission scope.\n   * Target: < 5ms response via Redis cache.\n   */\n  async check(agentId: string, scope: PermissionScope): Promise<PermissionCheckResult> {\n    return this.post(`/agents/${agentId}/permissions/verify`, { scope });\n  }\n\n  /**\n   * Grant a permission scope to an agent.\n   */\n  async grant(agentId: string, scope: PermissionScope, options?: {\n    valid_until?: string;\n    rate_limit?: { max: number; window: string };\n  }): Promise<any> {\n    return this.post(`/agents/${agentId}/permissions`, { scope, ...options });\n  }\n\n  // ─── Audit ────────────────────────────────────────────────────────\n\n  /**\n   * Emit an audit event for an agent action.\n   */\n  async emit(event: AuditEventInput): Promise<{ ingested: number }> {\n    return this.post('/audit/events', { events: [event] });\n  }\n\n  /**\n   * Emit a batch of audit events (up to 1,000).\n   */\n  async emitBatch(events: AuditEventInput[]): Promise<{ ingested: number }> {\n    return this.post('/audit/events', { events });\n  }\n\n  // ─── Signing ──────────────────────────────────────────────────────\n\n  /**\n   * Sign a payload with an Ed25519 private key (client-side).\n   * Uses the Web Crypto API or Node.js crypto.\n   */\n  async sign(payload: string, privateKeyPem: string): Promise<string> {\n    if (typeof globalThis.crypto?.subtle !== 'undefined') {\n      // Web Crypto API\n      const keyData = this.pemToArrayBuffer(privateKeyPem);\n      const key = await globalThis.crypto.subtle.importKey(\n        'pkcs8', keyData, { name: 'Ed25519' }, false, ['sign']\n      );\n      const signature = await globalThis.crypto.subtle.sign(\n        'Ed25519', key, new TextEncoder().encode(payload)\n      );\n      return `ed25519:${this.arrayBufferToBase64(signature)}`;\n    } else {\n      // Node.js crypto fallback\n      const crypto = await import('node:crypto');\n      const sign = crypto.sign(null, Buffer.from(payload), privateKeyPem);\n      return `ed25519:${sign.toString('base64')}`;\n    }\n  }\n\n  // ─── HTTP Client ──────────────────────────────────────────────────\n\n  private async get(path: string): Promise<any> {\n    return this.request('GET', path);\n  }\n\n  private async post(path: string, body: any): Promise<any> {\n    return this.request('POST', path, body);\n  }\n\n  private async delete(path: string): Promise<any> {\n    return this.request('DELETE', path);\n  }\n\n  private async request(method: string, path: string, body?: any): Promise<any> {\n    const controller = new AbortController();\n    const timeoutId = setTimeout(() => controller.abort(), this.timeout);\n\n    try {\n      const response = await fetch(`${this.baseUrl}${path}`, {\n        method,\n        headers: {\n          'Authorization': `Bearer ${this.apiKey}`,\n          'Content-Type': 'application/json',\n          'User-Agent': 'vorim-sdk/1.0.0',\n        },\n        body: body ? JSON.stringify(body) : undefined,\n        signal: controller.signal,\n      });\n\n      if (!response.ok) {\n        const errBody = await response.json().catch(() => ({})) as Record<string, any>;\n        throw new VorimError(\n          response.status,\n          errBody.error?.code || 'UNKNOWN_ERROR',\n          errBody.error?.message || `HTTP ${response.status}`,\n          errBody.error?.details\n        );\n      }\n\n      const json = await response.json() as Record<string, any>;\n      return json.data;\n    } finally {\n      clearTimeout(timeoutId);\n    }\n  }\n\n  private pemToArrayBuffer(pem: string): ArrayBuffer {\n    const b64 = pem.replace(/-----[^-]+-----/g, '').replace(/\\s/g, '');\n    const binary = atob(b64);\n    const bytes = new Uint8Array(binary.length);\n    for (let i = 0; i < binary.length; i++) {\n      bytes[i] = binary.charCodeAt(i);\n    }\n    return bytes.buffer;\n  }\n\n  private arrayBufferToBase64(buffer: ArrayBuffer): string {\n    const bytes = new Uint8Array(buffer);\n    let binary = '';\n    for (const byte of bytes) {\n      binary += String.fromCharCode(byte);\n    }\n    return btoa(binary);\n  }\n}\n\nexport class VorimError extends Error {\n  constructor(\n    public status: number,\n    public code: string,\n    message: string,\n    public details?: Record<string, unknown>\n  ) {\n    super(message);\n    this.name = 'VorimError';\n  }\n}\n\n// ─── Convenience export ──────────────────────────────────────────────\n\nexport default function createVorim(config: VorimConfig): VorimSDK {\n  return new VorimSDK(config);\n}\n\n// Re-export types for consumers\nexport type {\n  Agent, AgentRegistrationInput, AgentRegistrationResult,\n  TrustRecord, AuditEventInput, AuditEventType, AuditResult,\n  PermissionScope, PermissionCheckResult, AgentStatus,\n} from './types.js';\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAgBO,IAAM,WAAN,MAAe;AAAA,EACZ;AAAA,EACA;AAAA,EACA;AAAA,EAER,YAAY,QAAqB;AAC/B,SAAK,SAAS,OAAO;AACrB,SAAK,WAAW,OAAO,WAAW,wBAAwB,QAAQ,OAAO,EAAE,IAAI;AAC/E,SAAK,UAAU,OAAO,WAAW;AAAA,EACnC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,SAAS,OAAiE;AAC9E,WAAO,KAAK,KAAK,WAAW,KAAK;AAAA,EACnC;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,OAAO,SAAuC;AAClD,WAAO,KAAK,IAAI,iBAAiB,OAAO,EAAE;AAAA,EAC5C;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,SAAS,SAAiC;AAC9C,WAAO,KAAK,IAAI,WAAW,OAAO,EAAE;AAAA,EACtC;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,WAAW,QAAyG;AACxH,UAAM,KAAK,IAAI,gBAAgB,MAAa,EAAE,SAAS;AACvD,WAAO,KAAK,IAAI,UAAU,KAAK,MAAM,KAAK,EAAE,EAAE;AAAA,EAChD;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,OAAO,SAAgC;AAC3C,UAAM,KAAK,OAAO,WAAW,OAAO,EAAE;AAAA,EACxC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,MAAM,SAAiB,OAAwD;AACnF,WAAO,KAAK,KAAK,WAAW,OAAO,uBAAuB,EAAE,MAAM,CAAC;AAAA,EACrE;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,MAAM,SAAiB,OAAwB,SAGpC;AACf,WAAO,KAAK,KAAK,WAAW,OAAO,gBAAgB,EAAE,OAAO,GAAG,QAAQ,CAAC;AAAA,EAC1E;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,KAAK,OAAuD;AAChE,WAAO,KAAK,KAAK,iBAAiB,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC;AAAA,EACvD;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,UAAU,QAA0D;AACxE,WAAO,KAAK,KAAK,iBAAiB,EAAE,OAAO,CAAC;AAAA,EAC9C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,KAAK,SAAiB,eAAwC;AAClE,QAAI,OAAO,WAAW,QAAQ,WAAW,aAAa;AAEpD,YAAM,UAAU,KAAK,iBAAiB,aAAa;AACnD,YAAM,MAAM,MAAM,WAAW,OAAO,OAAO;AAAA,QACzC;AAAA,QAAS;AAAA,QAAS,EAAE,MAAM,UAAU;AAAA,QAAG;AAAA,QAAO,CAAC,MAAM;AAAA,MACvD;AACA,YAAM,YAAY,MAAM,WAAW,OAAO,OAAO;AAAA,QAC/C;AAAA,QAAW;AAAA,QAAK,IAAI,YAAY,EAAE,OAAO,OAAO;AAAA,MAClD;AACA,aAAO,WAAW,KAAK,oBAAoB,SAAS,CAAC;AAAA,IACvD,OAAO;AAEL,YAAM,SAAS,MAAM,OAAO,QAAa;AACzC,YAAM,OAAO,OAAO,KAAK,MAAM,OAAO,KAAK,OAAO,GAAG,aAAa;AAClE,aAAO,WAAW,KAAK,SAAS,QAAQ,CAAC;AAAA,IAC3C;AAAA,EACF;AAAA;AAAA,EAIA,MAAc,IAAI,MAA4B;AAC5C,WAAO,KAAK,QAAQ,OAAO,IAAI;AAAA,EACjC;AAAA,EAEA,MAAc,KAAK,MAAc,MAAyB;AACxD,WAAO,KAAK,QAAQ,QAAQ,MAAM,IAAI;AAAA,EACxC;AAAA,EAEA,MAAc,OAAO,MAA4B;AAC/C,WAAO,KAAK,QAAQ,UAAU,IAAI;AAAA,EACpC;AAAA,EAEA,MAAc,QAAQ,QAAgB,MAAc,MAA0B;AAC5E,UAAM,aAAa,IAAI,gBAAgB;AACvC,UAAM,YAAY,WAAW,MAAM,WAAW,MAAM,GAAG,KAAK,OAAO;AAEnE,QAAI;AACF,YAAM,WAAW,MAAM,MAAM,GAAG,KAAK,OAAO,GAAG,IAAI,IAAI;AAAA,QACrD;AAAA,QACA,SAAS;AAAA,UACP,iBAAiB,UAAU,KAAK,MAAM;AAAA,UACtC,gBAAgB;AAAA,UAChB,cAAc;AAAA,QAChB;AAAA,QACA,MAAM,OAAO,KAAK,UAAU,IAAI,IAAI;AAAA,QACpC,QAAQ,WAAW;AAAA,MACrB,CAAC;AAED,UAAI,CAAC,SAAS,IAAI;AAChB,cAAM,UAAU,MAAM,SAAS,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AACtD,cAAM,IAAI;AAAA,UACR,SAAS;AAAA,UACT,QAAQ,OAAO,QAAQ;AAAA,UACvB,QAAQ,OAAO,WAAW,QAAQ,SAAS,MAAM;AAAA,UACjD,QAAQ,OAAO;AAAA,QACjB;AAAA,MACF;AAEA,YAAM,OAAO,MAAM,SAAS,KAAK;AACjC,aAAO,KAAK;AAAA,IACd,UAAE;AACA,mBAAa,SAAS;AAAA,IACxB;AAAA,EACF;AAAA,EAEQ,iBAAiB,KAA0B;AACjD,UAAM,MAAM,IAAI,QAAQ,oBAAoB,EAAE,EAAE,QAAQ,OAAO,EAAE;AACjE,UAAM,SAAS,KAAK,GAAG;AACvB,UAAM,QAAQ,IAAI,WAAW,OAAO,MAAM;AAC1C,aAAS,IAAI,GAAG,IAAI,OAAO,QAAQ,KAAK;AACtC,YAAM,CAAC,IAAI,OAAO,WAAW,CAAC;AAAA,IAChC;AACA,WAAO,MAAM;AAAA,EACf;AAAA,EAEQ,oBAAoB,QAA6B;AACvD,UAAM,QAAQ,IAAI,WAAW,MAAM;AACnC,QAAI,SAAS;AACb,eAAW,QAAQ,OAAO;AACxB,gBAAU,OAAO,aAAa,IAAI;AAAA,IACpC;AACA,WAAO,KAAK,MAAM;AAAA,EACpB;AACF;AAEO,IAAM,aAAN,cAAyB,MAAM;AAAA,EACpC,YACS,QACA,MACP,SACO,SACP;AACA,UAAM,OAAO;AALN;AACA;AAEA;AAGP,SAAK,OAAO;AAAA,EACd;AACF;AAIe,SAAR,YAA6B,QAA+B;AACjE,SAAO,IAAI,SAAS,MAAM;AAC5B;","names":[]}
+{"version":3,"sources":["../src/index.ts"],"sourcesContent":["// ============================================================================\n// VORIM SDK — TypeScript\n// Thin client wrapping the Vorim AI REST API\n// ============================================================================\n\nimport type {\n  Agent, AgentRegistrationInput, AgentRegistrationResult,\n  TrustRecord, AuditEventInput, PermissionScope, PermissionCheckResult,\n} from './types.js';\n\nexport interface VorimConfig {\n  apiKey: string;\n  baseUrl?: string;\n  timeout?: number;\n}\n\nexport class VorimSDK {\n  private apiKey: string;\n  private baseUrl: string;\n  private timeout: number;\n\n  constructor(config: VorimConfig) {\n    this.apiKey = config.apiKey;\n    this.baseUrl = (config.baseUrl || 'https://api.vorim.ai').replace(/\\/$/, '') + '/v1';\n    this.timeout = config.timeout || 10000;\n  }\n\n  // ─── Agent Identity ────────────────────────────────────────────────\n\n  /**\n   * Register a new agent with Vorim AI.\n   * Returns the agent identity and a private key (shown once).\n   */\n  async register(input: AgentRegistrationInput): Promise<AgentRegistrationResult> {\n    return this.post('/agents', input);\n  }\n\n  /**\n   * Verify an agent's identity via the public Trust API.\n   */\n  async verify(agentId: string): Promise<TrustRecord> {\n    return this.get(`/trust/verify/${agentId}`);\n  }\n\n  /**\n   * Get agent details.\n   */\n  async getAgent(agentId: string): Promise<Agent> {\n    return this.get(`/agents/${agentId}`);\n  }\n\n  /**\n   * List all agents in the organisation.\n   */\n  async listAgents(params?: { page?: number; per_page?: number; status?: string }): Promise<{ agents: Agent[]; meta: any }> {\n    const qs = new URLSearchParams(params as any).toString();\n    return this.get(`/agents${qs ? '?' + qs : ''}`);\n  }\n\n  /**\n   * Update an agent's metadata.\n   */\n  async updateAgent(agentId: string, updates: Partial<Pick<Agent, 'name' | 'description' | 'status' | 'capabilities'>>): Promise<Agent> {\n    return this.patch(`/agents/${agentId}`, updates);\n  }\n\n  /**\n   * Revoke an agent (permanent deactivation).\n   */\n  async revoke(agentId: string): Promise<void> {\n    await this.delete(`/agents/${agentId}`);\n  }\n\n  // ─── Permissions ──────────────────────────────────────────────────\n\n  /**\n   * Check if an agent has a specific permission scope.\n   * Target: < 5ms response via Redis cache.\n   */\n  async check(agentId: string, scope: PermissionScope): Promise<PermissionCheckResult> {\n    return this.post(`/agents/${agentId}/permissions/verify`, { scope });\n  }\n\n  /**\n   * Grant a permission scope to an agent.\n   */\n  async grant(agentId: string, scope: PermissionScope, options?: {\n    valid_until?: string;\n    rate_limit?: { max: number; window: string };\n  }): Promise<any> {\n    return this.post(`/agents/${agentId}/permissions`, { scope, ...options });\n  }\n\n  /**\n   * List all active permissions for an agent.\n   */\n  async listPermissions(agentId: string): Promise<any[]> {\n    return this.get(`/agents/${agentId}/permissions`);\n  }\n\n  /**\n   * Revoke a specific permission scope from an agent.\n   */\n  async revokePermission(agentId: string, scope: PermissionScope): Promise<any> {\n    return this.delete(`/agents/${agentId}/permissions/${scope}`);\n  }\n\n  // ─── Audit ────────────────────────────────────────────────────────\n\n  /**\n   * Emit an audit event for an agent action.\n   */\n  async emit(event: AuditEventInput): Promise<{ ingested: number }> {\n    return this.post('/audit/events', { events: [event] });\n  }\n\n  /**\n   * Emit a batch of audit events (up to 1,000).\n   */\n  async emitBatch(events: AuditEventInput[]): Promise<{ ingested: number }> {\n    return this.post('/audit/events', { events });\n  }\n\n  /**\n   * Export a signed audit bundle for a date range.\n   */\n  async exportAudit(from: string, to: string, format: string = 'json'): Promise<any> {\n    return this.post('/audit/export', { from, to, format });\n  }\n\n  // ─── API Keys ──────────────────────────────────────────────────────\n\n  /**\n   * List all API keys for the organisation.\n   */\n  async listApiKeys(): Promise<any[]> {\n    return this.get('/api-keys');\n  }\n\n  /**\n   * Create a new API key.\n   */\n  async createApiKey(name: string, options?: { scopes?: string[]; expires_at?: string }): Promise<any> {\n    return this.post('/api-keys', { name, ...options });\n  }\n\n  /**\n   * Revoke an API key.\n   */\n  async deleteApiKey(keyId: string): Promise<{ revoked: boolean }> {\n    return this.delete(`/api-keys/${keyId}`);\n  }\n\n  // ─── Signing ──────────────────────────────────────────────────────\n\n  /**\n   * Sign a payload with an Ed25519 private key (client-side).\n   * Uses the Web Crypto API or Node.js crypto.\n   */\n  async sign(payload: string, privateKeyPem: string): Promise<string> {\n    if (typeof globalThis.crypto?.subtle !== 'undefined') {\n      // Web Crypto API\n      const keyData = this.pemToArrayBuffer(privateKeyPem);\n      const key = await globalThis.crypto.subtle.importKey(\n        'pkcs8', keyData, { name: 'Ed25519' }, false, ['sign']\n      );\n      const signature = await globalThis.crypto.subtle.sign(\n        'Ed25519', key, new TextEncoder().encode(payload)\n      );\n      return `ed25519:${this.arrayBufferToBase64(signature)}`;\n    } else {\n      // Node.js crypto fallback\n      const crypto = await import('node:crypto');\n      const sign = crypto.sign(null, Buffer.from(payload), privateKeyPem);\n      return `ed25519:${sign.toString('base64')}`;\n    }\n  }\n\n  // ─── HTTP Client ──────────────────────────────────────────────────\n\n  private async get(path: string): Promise<any> {\n    return this.request('GET', path);\n  }\n\n  private async post(path: string, body: any): Promise<any> {\n    return this.request('POST', path, body);\n  }\n\n  private async patch(path: string, body: any): Promise<any> {\n    return this.request('PATCH', path, body);\n  }\n\n  private async delete(path: string): Promise<any> {\n    return this.request('DELETE', path);\n  }\n\n  private async request(method: string, path: string, body?: any): Promise<any> {\n    const controller = new AbortController();\n    const timeoutId = setTimeout(() => controller.abort(), this.timeout);\n\n    try {\n      const response = await fetch(`${this.baseUrl}${path}`, {\n        method,\n        headers: {\n          'Authorization': `Bearer ${this.apiKey}`,\n          'Content-Type': 'application/json',\n          'User-Agent': 'vorim-sdk/2.0.0',\n        },\n        body: body ? JSON.stringify(body) : undefined,\n        signal: controller.signal,\n      });\n\n      if (!response.ok) {\n        const errBody = await response.json().catch(() => ({})) as Record<string, any>;\n        throw new VorimError(\n          response.status,\n          errBody.error?.code || 'UNKNOWN_ERROR',\n          errBody.error?.message || `HTTP ${response.status}`,\n          errBody.error?.details\n        );\n      }\n\n      const json = await response.json() as Record<string, any>;\n      return json.data;\n    } finally {\n      clearTimeout(timeoutId);\n    }\n  }\n\n  private pemToArrayBuffer(pem: string): ArrayBuffer {\n    const b64 = pem.replace(/-----[^-]+-----/g, '').replace(/\\s/g, '');\n    const binary = atob(b64);\n    const bytes = new Uint8Array(binary.length);\n    for (let i = 0; i < binary.length; i++) {\n      bytes[i] = binary.charCodeAt(i);\n    }\n    return bytes.buffer;\n  }\n\n  private arrayBufferToBase64(buffer: ArrayBuffer): string {\n    const bytes = new Uint8Array(buffer);\n    let binary = '';\n    for (const byte of bytes) {\n      binary += String.fromCharCode(byte);\n    }\n    return btoa(binary);\n  }\n}\n\nexport class VorimError extends Error {\n  constructor(\n    public status: number,\n    public code: string,\n    message: string,\n    public details?: Record<string, unknown>\n  ) {\n    super(message);\n    this.name = 'VorimError';\n  }\n}\n\n// ─── Convenience export ──────────────────────────────────────────────\n\nexport default function createVorim(config: VorimConfig): VorimSDK {\n  return new VorimSDK(config);\n}\n\n// Re-export types for consumers\nexport type {\n  Agent, AgentRegistrationInput, AgentRegistrationResult,\n  TrustRecord, AuditEventInput, AuditEventType, AuditResult,\n  PermissionScope, PermissionCheckResult, AgentStatus,\n} from './types.js';\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAgBO,IAAM,WAAN,MAAe;AAAA,EACZ;AAAA,EACA;AAAA,EACA;AAAA,EAER,YAAY,QAAqB;AAC/B,SAAK,SAAS,OAAO;AACrB,SAAK,WAAW,OAAO,WAAW,wBAAwB,QAAQ,OAAO,EAAE,IAAI;AAC/E,SAAK,UAAU,OAAO,WAAW;AAAA,EACnC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,SAAS,OAAiE;AAC9E,WAAO,KAAK,KAAK,WAAW,KAAK;AAAA,EACnC;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,OAAO,SAAuC;AAClD,WAAO,KAAK,IAAI,iBAAiB,OAAO,EAAE;AAAA,EAC5C;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,SAAS,SAAiC;AAC9C,WAAO,KAAK,IAAI,WAAW,OAAO,EAAE;AAAA,EACtC;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,WAAW,QAAyG;AACxH,UAAM,KAAK,IAAI,gBAAgB,MAAa,EAAE,SAAS;AACvD,WAAO,KAAK,IAAI,UAAU,KAAK,MAAM,KAAK,EAAE,EAAE;AAAA,EAChD;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,YAAY,SAAiB,SAAmG;AACpI,WAAO,KAAK,MAAM,WAAW,OAAO,IAAI,OAAO;AAAA,EACjD;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,OAAO,SAAgC;AAC3C,UAAM,KAAK,OAAO,WAAW,OAAO,EAAE;AAAA,EACxC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,MAAM,SAAiB,OAAwD;AACnF,WAAO,KAAK,KAAK,WAAW,OAAO,uBAAuB,EAAE,MAAM,CAAC;AAAA,EACrE;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,MAAM,SAAiB,OAAwB,SAGpC;AACf,WAAO,KAAK,KAAK,WAAW,OAAO,gBAAgB,EAAE,OAAO,GAAG,QAAQ,CAAC;AAAA,EAC1E;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,gBAAgB,SAAiC;AACrD,WAAO,KAAK,IAAI,WAAW,OAAO,cAAc;AAAA,EAClD;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,iBAAiB,SAAiB,OAAsC;AAC5E,WAAO,KAAK,OAAO,WAAW,OAAO,gBAAgB,KAAK,EAAE;AAAA,EAC9D;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,KAAK,OAAuD;AAChE,WAAO,KAAK,KAAK,iBAAiB,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC;AAAA,EACvD;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,UAAU,QAA0D;AACxE,WAAO,KAAK,KAAK,iBAAiB,EAAE,OAAO,CAAC;AAAA,EAC9C;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,YAAY,MAAc,IAAY,SAAiB,QAAsB;AACjF,WAAO,KAAK,KAAK,iBAAiB,EAAE,MAAM,IAAI,OAAO,CAAC;AAAA,EACxD;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,cAA8B;AAClC,WAAO,KAAK,IAAI,WAAW;AAAA,EAC7B;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,aAAa,MAAc,SAAoE;AACnG,WAAO,KAAK,KAAK,aAAa,EAAE,MAAM,GAAG,QAAQ,CAAC;AAAA,EACpD;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,aAAa,OAA8C;AAC/D,WAAO,KAAK,OAAO,aAAa,KAAK,EAAE;AAAA,EACzC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,KAAK,SAAiB,eAAwC;AAClE,QAAI,OAAO,WAAW,QAAQ,WAAW,aAAa;AAEpD,YAAM,UAAU,KAAK,iBAAiB,aAAa;AACnD,YAAM,MAAM,MAAM,WAAW,OAAO,OAAO;AAAA,QACzC;AAAA,QAAS;AAAA,QAAS,EAAE,MAAM,UAAU;AAAA,QAAG;AAAA,QAAO,CAAC,MAAM;AAAA,MACvD;AACA,YAAM,YAAY,MAAM,WAAW,OAAO,OAAO;AAAA,QAC/C;AAAA,QAAW;AAAA,QAAK,IAAI,YAAY,EAAE,OAAO,OAAO;AAAA,MAClD;AACA,aAAO,WAAW,KAAK,oBAAoB,SAAS,CAAC;AAAA,IACvD,OAAO;AAEL,YAAM,SAAS,MAAM,OAAO,QAAa;AACzC,YAAM,OAAO,OAAO,KAAK,MAAM,OAAO,KAAK,OAAO,GAAG,aAAa;AAClE,aAAO,WAAW,KAAK,SAAS,QAAQ,CAAC;AAAA,IAC3C;AAAA,EACF;AAAA;AAAA,EAIA,MAAc,IAAI,MAA4B;AAC5C,WAAO,KAAK,QAAQ,OAAO,IAAI;AAAA,EACjC;AAAA,EAEA,MAAc,KAAK,MAAc,MAAyB;AACxD,WAAO,KAAK,QAAQ,QAAQ,MAAM,IAAI;AAAA,EACxC;AAAA,EAEA,MAAc,MAAM,MAAc,MAAyB;AACzD,WAAO,KAAK,QAAQ,SAAS,MAAM,IAAI;AAAA,EACzC;AAAA,EAEA,MAAc,OAAO,MAA4B;AAC/C,WAAO,KAAK,QAAQ,UAAU,IAAI;AAAA,EACpC;AAAA,EAEA,MAAc,QAAQ,QAAgB,MAAc,MAA0B;AAC5E,UAAM,aAAa,IAAI,gBAAgB;AACvC,UAAM,YAAY,WAAW,MAAM,WAAW,MAAM,GAAG,KAAK,OAAO;AAEnE,QAAI;AACF,YAAM,WAAW,MAAM,MAAM,GAAG,KAAK,OAAO,GAAG,IAAI,IAAI;AAAA,QACrD;AAAA,QACA,SAAS;AAAA,UACP,iBAAiB,UAAU,KAAK,MAAM;AAAA,UACtC,gBAAgB;AAAA,UAChB,cAAc;AAAA,QAChB;AAAA,QACA,MAAM,OAAO,KAAK,UAAU,IAAI,IAAI;AAAA,QACpC,QAAQ,WAAW;AAAA,MACrB,CAAC;AAED,UAAI,CAAC,SAAS,IAAI;AAChB,cAAM,UAAU,MAAM,SAAS,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AACtD,cAAM,IAAI;AAAA,UACR,SAAS;AAAA,UACT,QAAQ,OAAO,QAAQ;AAAA,UACvB,QAAQ,OAAO,WAAW,QAAQ,SAAS,MAAM;AAAA,UACjD,QAAQ,OAAO;AAAA,QACjB;AAAA,MACF;AAEA,YAAM,OAAO,MAAM,SAAS,KAAK;AACjC,aAAO,KAAK;AAAA,IACd,UAAE;AACA,mBAAa,SAAS;AAAA,IACxB;AAAA,EACF;AAAA,EAEQ,iBAAiB,KAA0B;AACjD,UAAM,MAAM,IAAI,QAAQ,oBAAoB,EAAE,EAAE,QAAQ,OAAO,EAAE;AACjE,UAAM,SAAS,KAAK,GAAG;AACvB,UAAM,QAAQ,IAAI,WAAW,OAAO,MAAM;AAC1C,aAAS,IAAI,GAAG,IAAI,OAAO,QAAQ,KAAK;AACtC,YAAM,CAAC,IAAI,OAAO,WAAW,CAAC;AAAA,IAChC;AACA,WAAO,MAAM;AAAA,EACf;AAAA,EAEQ,oBAAoB,QAA6B;AACvD,UAAM,QAAQ,IAAI,WAAW,MAAM;AACnC,QAAI,SAAS;AACb,eAAW,QAAQ,OAAO;AACxB,gBAAU,OAAO,aAAa,IAAI;AAAA,IACpC;AACA,WAAO,KAAK,MAAM;AAAA,EACpB;AACF;AAEO,IAAM,aAAN,cAAyB,MAAM;AAAA,EACpC,YACS,QACA,MACP,SACO,SACP;AACA,UAAM,OAAO;AALN;AACA;AAEA;AAGP,SAAK,OAAO;AAAA,EACd;AACF;AAIe,SAAR,YAA6B,QAA+B;AACjE,SAAO,IAAI,SAAS,MAAM;AAC5B;","names":[]}

package/dist/index.d.cts

@@ -7,7 +7,6 @@ interface Agent {
     name: string;
     description?: string;
     status: AgentStatus;
-    public_key: string;
     key_fingerprint: string;
     trust_score: number;
     capabilities: string[];
@@ -103,6 +102,10 @@ declare class VorimSDK {
         agents: Agent[];
         meta: any;
     }>;
+    /**
+     * Update an agent's metadata.
+     */
+    updateAgent(agentId: string, updates: Partial<Pick<Agent, 'name' | 'description' | 'status' | 'capabilities'>>): Promise<Agent>;
     /**
      * Revoke an agent (permanent deactivation).
      */
@@ -122,6 +125,14 @@ declare class VorimSDK {
             window: string;
         };
     }): Promise<any>;
+    /**
+     * List all active permissions for an agent.
+     */
+    listPermissions(agentId: string): Promise<any[]>;
+    /**
+     * Revoke a specific permission scope from an agent.
+     */
+    revokePermission(agentId: string, scope: PermissionScope): Promise<any>;
     /**
      * Emit an audit event for an agent action.
      */
@@ -134,6 +145,27 @@ declare class VorimSDK {
     emitBatch(events: AuditEventInput[]): Promise<{
         ingested: number;
     }>;
+    /**
+     * Export a signed audit bundle for a date range.
+     */
+    exportAudit(from: string, to: string, format?: string): Promise<any>;
+    /**
+     * List all API keys for the organisation.
+     */
+    listApiKeys(): Promise<any[]>;
+    /**
+     * Create a new API key.
+     */
+    createApiKey(name: string, options?: {
+        scopes?: string[];
+        expires_at?: string;
+    }): Promise<any>;
+    /**
+     * Revoke an API key.
+     */
+    deleteApiKey(keyId: string): Promise<{
+        revoked: boolean;
+    }>;
     /**
      * Sign a payload with an Ed25519 private key (client-side).
      * Uses the Web Crypto API or Node.js crypto.
@@ -141,6 +173,7 @@ declare class VorimSDK {
     sign(payload: string, privateKeyPem: string): Promise<string>;
     private get;
     private post;
+    private patch;
     private delete;
     private request;
     private pemToArrayBuffer;

package/dist/index.d.ts

@@ -7,7 +7,6 @@ interface Agent {
     name: string;
     description?: string;
     status: AgentStatus;
-    public_key: string;
     key_fingerprint: string;
     trust_score: number;
     capabilities: string[];
@@ -103,6 +102,10 @@ declare class VorimSDK {
         agents: Agent[];
         meta: any;
     }>;
+    /**
+     * Update an agent's metadata.
+     */
+    updateAgent(agentId: string, updates: Partial<Pick<Agent, 'name' | 'description' | 'status' | 'capabilities'>>): Promise<Agent>;
     /**
      * Revoke an agent (permanent deactivation).
      */
@@ -122,6 +125,14 @@ declare class VorimSDK {
             window: string;
         };
     }): Promise<any>;
+    /**
+     * List all active permissions for an agent.
+     */
+    listPermissions(agentId: string): Promise<any[]>;
+    /**
+     * Revoke a specific permission scope from an agent.
+     */
+    revokePermission(agentId: string, scope: PermissionScope): Promise<any>;
     /**
      * Emit an audit event for an agent action.
      */
@@ -134,6 +145,27 @@ declare class VorimSDK {
     emitBatch(events: AuditEventInput[]): Promise<{
         ingested: number;
     }>;
+    /**
+     * Export a signed audit bundle for a date range.
+     */
+    exportAudit(from: string, to: string, format?: string): Promise<any>;
+    /**
+     * List all API keys for the organisation.
+     */
+    listApiKeys(): Promise<any[]>;
+    /**
+     * Create a new API key.
+     */
+    createApiKey(name: string, options?: {
+        scopes?: string[];
+        expires_at?: string;
+    }): Promise<any>;
+    /**
+     * Revoke an API key.
+     */
+    deleteApiKey(keyId: string): Promise<{
+        revoked: boolean;
+    }>;
     /**
      * Sign a payload with an Ed25519 private key (client-side).
      * Uses the Web Crypto API or Node.js crypto.
@@ -141,6 +173,7 @@ declare class VorimSDK {
     sign(payload: string, privateKeyPem: string): Promise<string>;
     private get;
     private post;
+    private patch;
     private delete;
     private request;
     private pemToArrayBuffer;

package/dist/index.js

@@ -35,6 +35,12 @@ var VorimSDK = class {
     const qs = new URLSearchParams(params).toString();
     return this.get(`/agents${qs ? "?" + qs : ""}`);
   }
+  /**
+   * Update an agent's metadata.
+   */
+  async updateAgent(agentId, updates) {
+    return this.patch(`/agents/${agentId}`, updates);
+  }
   /**
    * Revoke an agent (permanent deactivation).
    */
@@ -55,6 +61,18 @@ var VorimSDK = class {
   async grant(agentId, scope, options) {
     return this.post(`/agents/${agentId}/permissions`, { scope, ...options });
   }
+  /**
+   * List all active permissions for an agent.
+   */
+  async listPermissions(agentId) {
+    return this.get(`/agents/${agentId}/permissions`);
+  }
+  /**
+   * Revoke a specific permission scope from an agent.
+   */
+  async revokePermission(agentId, scope) {
+    return this.delete(`/agents/${agentId}/permissions/${scope}`);
+  }
   // ─── Audit ────────────────────────────────────────────────────────
   /**
    * Emit an audit event for an agent action.
@@ -68,6 +86,31 @@ var VorimSDK = class {
   async emitBatch(events) {
     return this.post("/audit/events", { events });
   }
+  /**
+   * Export a signed audit bundle for a date range.
+   */
+  async exportAudit(from, to, format = "json") {
+    return this.post("/audit/export", { from, to, format });
+  }
+  // ─── API Keys ──────────────────────────────────────────────────────
+  /**
+   * List all API keys for the organisation.
+   */
+  async listApiKeys() {
+    return this.get("/api-keys");
+  }
+  /**
+   * Create a new API key.
+   */
+  async createApiKey(name, options) {
+    return this.post("/api-keys", { name, ...options });
+  }
+  /**
+   * Revoke an API key.
+   */
+  async deleteApiKey(keyId) {
+    return this.delete(`/api-keys/${keyId}`);
+  }
   // ─── Signing ──────────────────────────────────────────────────────
   /**
    * Sign a payload with an Ed25519 private key (client-side).
@@ -102,6 +145,9 @@ var VorimSDK = class {
   async post(path, body) {
     return this.request("POST", path, body);
   }
+  async patch(path, body) {
+    return this.request("PATCH", path, body);
+  }
   async delete(path) {
     return this.request("DELETE", path);
   }
@@ -114,7 +160,7 @@ var VorimSDK = class {
         headers: {
           "Authorization": `Bearer ${this.apiKey}`,
           "Content-Type": "application/json",
-          "User-Agent": "vorim-sdk/1.0.0"
+          "User-Agent": "vorim-sdk/2.0.0"
         },
         body: body ? JSON.stringify(body) : void 0,
         signal: controller.signal

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts"],"sourcesContent":["// ============================================================================\n// VORIM SDK — TypeScript\n// Thin client wrapping the Vorim AI REST API\n// ============================================================================\n\nimport type {\n  Agent, AgentRegistrationInput, AgentRegistrationResult,\n  TrustRecord, AuditEventInput, PermissionScope, PermissionCheckResult,\n} from './types.js';\n\nexport interface VorimConfig {\n  apiKey: string;\n  baseUrl?: string;\n  timeout?: number;\n}\n\nexport class VorimSDK {\n  private apiKey: string;\n  private baseUrl: string;\n  private timeout: number;\n\n  constructor(config: VorimConfig) {\n    this.apiKey = config.apiKey;\n    this.baseUrl = (config.baseUrl || 'https://api.vorim.ai').replace(/\\/$/, '') + '/v1';\n    this.timeout = config.timeout || 10000;\n  }\n\n  // ─── Agent Identity ────────────────────────────────────────────────\n\n  /**\n   * Register a new agent with Vorim AI.\n   * Returns the agent identity and a private key (shown once).\n   */\n  async register(input: AgentRegistrationInput): Promise<AgentRegistrationResult> {\n    return this.post('/agents', input);\n  }\n\n  /**\n   * Verify an agent's identity via the public Trust API.\n   */\n  async verify(agentId: string): Promise<TrustRecord> {\n    return this.get(`/trust/verify/${agentId}`);\n  }\n\n  /**\n   * Get agent details.\n   */\n  async getAgent(agentId: string): Promise<Agent> {\n    return this.get(`/agents/${agentId}`);\n  }\n\n  /**\n   * List all agents in the organisation.\n   */\n  async listAgents(params?: { page?: number; per_page?: number; status?: string }): Promise<{ agents: Agent[]; meta: any }> {\n    const qs = new URLSearchParams(params as any).toString();\n    return this.get(`/agents${qs ? '?' + qs : ''}`);\n  }\n\n  /**\n   * Revoke an agent (permanent deactivation).\n   */\n  async revoke(agentId: string): Promise<void> {\n    await this.delete(`/agents/${agentId}`);\n  }\n\n  // ─── Permissions ──────────────────────────────────────────────────\n\n  /**\n   * Check if an agent has a specific permission scope.\n   * Target: < 5ms response via Redis cache.\n   */\n  async check(agentId: string, scope: PermissionScope): Promise<PermissionCheckResult> {\n    return this.post(`/agents/${agentId}/permissions/verify`, { scope });\n  }\n\n  /**\n   * Grant a permission scope to an agent.\n   */\n  async grant(agentId: string, scope: PermissionScope, options?: {\n    valid_until?: string;\n    rate_limit?: { max: number; window: string };\n  }): Promise<any> {\n    return this.post(`/agents/${agentId}/permissions`, { scope, ...options });\n  }\n\n  // ─── Audit ────────────────────────────────────────────────────────\n\n  /**\n   * Emit an audit event for an agent action.\n   */\n  async emit(event: AuditEventInput): Promise<{ ingested: number }> {\n    return this.post('/audit/events', { events: [event] });\n  }\n\n  /**\n   * Emit a batch of audit events (up to 1,000).\n   */\n  async emitBatch(events: AuditEventInput[]): Promise<{ ingested: number }> {\n    return this.post('/audit/events', { events });\n  }\n\n  // ─── Signing ──────────────────────────────────────────────────────\n\n  /**\n   * Sign a payload with an Ed25519 private key (client-side).\n   * Uses the Web Crypto API or Node.js crypto.\n   */\n  async sign(payload: string, privateKeyPem: string): Promise<string> {\n    if (typeof globalThis.crypto?.subtle !== 'undefined') {\n      // Web Crypto API\n      const keyData = this.pemToArrayBuffer(privateKeyPem);\n      const key = await globalThis.crypto.subtle.importKey(\n        'pkcs8', keyData, { name: 'Ed25519' }, false, ['sign']\n      );\n      const signature = await globalThis.crypto.subtle.sign(\n        'Ed25519', key, new TextEncoder().encode(payload)\n      );\n      return `ed25519:${this.arrayBufferToBase64(signature)}`;\n    } else {\n      // Node.js crypto fallback\n      const crypto = await import('node:crypto');\n      const sign = crypto.sign(null, Buffer.from(payload), privateKeyPem);\n      return `ed25519:${sign.toString('base64')}`;\n    }\n  }\n\n  // ─── HTTP Client ──────────────────────────────────────────────────\n\n  private async get(path: string): Promise<any> {\n    return this.request('GET', path);\n  }\n\n  private async post(path: string, body: any): Promise<any> {\n    return this.request('POST', path, body);\n  }\n\n  private async delete(path: string): Promise<any> {\n    return this.request('DELETE', path);\n  }\n\n  private async request(method: string, path: string, body?: any): Promise<any> {\n    const controller = new AbortController();\n    const timeoutId = setTimeout(() => controller.abort(), this.timeout);\n\n    try {\n      const response = await fetch(`${this.baseUrl}${path}`, {\n        method,\n        headers: {\n          'Authorization': `Bearer ${this.apiKey}`,\n          'Content-Type': 'application/json',\n          'User-Agent': 'vorim-sdk/1.0.0',\n        },\n        body: body ? JSON.stringify(body) : undefined,\n        signal: controller.signal,\n      });\n\n      if (!response.ok) {\n        const errBody = await response.json().catch(() => ({})) as Record<string, any>;\n        throw new VorimError(\n          response.status,\n          errBody.error?.code || 'UNKNOWN_ERROR',\n          errBody.error?.message || `HTTP ${response.status}`,\n          errBody.error?.details\n        );\n      }\n\n      const json = await response.json() as Record<string, any>;\n      return json.data;\n    } finally {\n      clearTimeout(timeoutId);\n    }\n  }\n\n  private pemToArrayBuffer(pem: string): ArrayBuffer {\n    const b64 = pem.replace(/-----[^-]+-----/g, '').replace(/\\s/g, '');\n    const binary = atob(b64);\n    const bytes = new Uint8Array(binary.length);\n    for (let i = 0; i < binary.length; i++) {\n      bytes[i] = binary.charCodeAt(i);\n    }\n    return bytes.buffer;\n  }\n\n  private arrayBufferToBase64(buffer: ArrayBuffer): string {\n    const bytes = new Uint8Array(buffer);\n    let binary = '';\n    for (const byte of bytes) {\n      binary += String.fromCharCode(byte);\n    }\n    return btoa(binary);\n  }\n}\n\nexport class VorimError extends Error {\n  constructor(\n    public status: number,\n    public code: string,\n    message: string,\n    public details?: Record<string, unknown>\n  ) {\n    super(message);\n    this.name = 'VorimError';\n  }\n}\n\n// ─── Convenience export ──────────────────────────────────────────────\n\nexport default function createVorim(config: VorimConfig): VorimSDK {\n  return new VorimSDK(config);\n}\n\n// Re-export types for consumers\nexport type {\n  Agent, AgentRegistrationInput, AgentRegistrationResult,\n  TrustRecord, AuditEventInput, AuditEventType, AuditResult,\n  PermissionScope, PermissionCheckResult, AgentStatus,\n} from './types.js';\n"],"mappings":";AAgBO,IAAM,WAAN,MAAe;AAAA,EACZ;AAAA,EACA;AAAA,EACA;AAAA,EAER,YAAY,QAAqB;AAC/B,SAAK,SAAS,OAAO;AACrB,SAAK,WAAW,OAAO,WAAW,wBAAwB,QAAQ,OAAO,EAAE,IAAI;AAC/E,SAAK,UAAU,OAAO,WAAW;AAAA,EACnC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,SAAS,OAAiE;AAC9E,WAAO,KAAK,KAAK,WAAW,KAAK;AAAA,EACnC;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,OAAO,SAAuC;AAClD,WAAO,KAAK,IAAI,iBAAiB,OAAO,EAAE;AAAA,EAC5C;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,SAAS,SAAiC;AAC9C,WAAO,KAAK,IAAI,WAAW,OAAO,EAAE;AAAA,EACtC;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,WAAW,QAAyG;AACxH,UAAM,KAAK,IAAI,gBAAgB,MAAa,EAAE,SAAS;AACvD,WAAO,KAAK,IAAI,UAAU,KAAK,MAAM,KAAK,EAAE,EAAE;AAAA,EAChD;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,OAAO,SAAgC;AAC3C,UAAM,KAAK,OAAO,WAAW,OAAO,EAAE;AAAA,EACxC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,MAAM,SAAiB,OAAwD;AACnF,WAAO,KAAK,KAAK,WAAW,OAAO,uBAAuB,EAAE,MAAM,CAAC;AAAA,EACrE;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,MAAM,SAAiB,OAAwB,SAGpC;AACf,WAAO,KAAK,KAAK,WAAW,OAAO,gBAAgB,EAAE,OAAO,GAAG,QAAQ,CAAC;AAAA,EAC1E;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,KAAK,OAAuD;AAChE,WAAO,KAAK,KAAK,iBAAiB,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC;AAAA,EACvD;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,UAAU,QAA0D;AACxE,WAAO,KAAK,KAAK,iBAAiB,EAAE,OAAO,CAAC;AAAA,EAC9C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,KAAK,SAAiB,eAAwC;AAClE,QAAI,OAAO,WAAW,QAAQ,WAAW,aAAa;AAEpD,YAAM,UAAU,KAAK,iBAAiB,aAAa;AACnD,YAAM,MAAM,MAAM,WAAW,OAAO,OAAO;AAAA,QACzC;AAAA,QAAS;AAAA,QAAS,EAAE,MAAM,UAAU;AAAA,QAAG;AAAA,QAAO,CAAC,MAAM;AAAA,MACvD;AACA,YAAM,YAAY,MAAM,WAAW,OAAO,OAAO;AAAA,QAC/C;AAAA,QAAW;AAAA,QAAK,IAAI,YAAY,EAAE,OAAO,OAAO;AAAA,MAClD;AACA,aAAO,WAAW,KAAK,oBAAoB,SAAS,CAAC;AAAA,IACvD,OAAO;AAEL,YAAM,SAAS,MAAM,OAAO,QAAa;AACzC,YAAM,OAAO,OAAO,KAAK,MAAM,OAAO,KAAK,OAAO,GAAG,aAAa;AAClE,aAAO,WAAW,KAAK,SAAS,QAAQ,CAAC;AAAA,IAC3C;AAAA,EACF;AAAA;AAAA,EAIA,MAAc,IAAI,MAA4B;AAC5C,WAAO,KAAK,QAAQ,OAAO,IAAI;AAAA,EACjC;AAAA,EAEA,MAAc,KAAK,MAAc,MAAyB;AACxD,WAAO,KAAK,QAAQ,QAAQ,MAAM,IAAI;AAAA,EACxC;AAAA,EAEA,MAAc,OAAO,MAA4B;AAC/C,WAAO,KAAK,QAAQ,UAAU,IAAI;AAAA,EACpC;AAAA,EAEA,MAAc,QAAQ,QAAgB,MAAc,MAA0B;AAC5E,UAAM,aAAa,IAAI,gBAAgB;AACvC,UAAM,YAAY,WAAW,MAAM,WAAW,MAAM,GAAG,KAAK,OAAO;AAEnE,QAAI;AACF,YAAM,WAAW,MAAM,MAAM,GAAG,KAAK,OAAO,GAAG,IAAI,IAAI;AAAA,QACrD;AAAA,QACA,SAAS;AAAA,UACP,iBAAiB,UAAU,KAAK,MAAM;AAAA,UACtC,gBAAgB;AAAA,UAChB,cAAc;AAAA,QAChB;AAAA,QACA,MAAM,OAAO,KAAK,UAAU,IAAI,IAAI;AAAA,QACpC,QAAQ,WAAW;AAAA,MACrB,CAAC;AAED,UAAI,CAAC,SAAS,IAAI;AAChB,cAAM,UAAU,MAAM,SAAS,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AACtD,cAAM,IAAI;AAAA,UACR,SAAS;AAAA,UACT,QAAQ,OAAO,QAAQ;AAAA,UACvB,QAAQ,OAAO,WAAW,QAAQ,SAAS,MAAM;AAAA,UACjD,QAAQ,OAAO;AAAA,QACjB;AAAA,MACF;AAEA,YAAM,OAAO,MAAM,SAAS,KAAK;AACjC,aAAO,KAAK;AAAA,IACd,UAAE;AACA,mBAAa,SAAS;AAAA,IACxB;AAAA,EACF;AAAA,EAEQ,iBAAiB,KAA0B;AACjD,UAAM,MAAM,IAAI,QAAQ,oBAAoB,EAAE,EAAE,QAAQ,OAAO,EAAE;AACjE,UAAM,SAAS,KAAK,GAAG;AACvB,UAAM,QAAQ,IAAI,WAAW,OAAO,MAAM;AAC1C,aAAS,IAAI,GAAG,IAAI,OAAO,QAAQ,KAAK;AACtC,YAAM,CAAC,IAAI,OAAO,WAAW,CAAC;AAAA,IAChC;AACA,WAAO,MAAM;AAAA,EACf;AAAA,EAEQ,oBAAoB,QAA6B;AACvD,UAAM,QAAQ,IAAI,WAAW,MAAM;AACnC,QAAI,SAAS;AACb,eAAW,QAAQ,OAAO;AACxB,gBAAU,OAAO,aAAa,IAAI;AAAA,IACpC;AACA,WAAO,KAAK,MAAM;AAAA,EACpB;AACF;AAEO,IAAM,aAAN,cAAyB,MAAM;AAAA,EACpC,YACS,QACA,MACP,SACO,SACP;AACA,UAAM,OAAO;AALN;AACA;AAEA;AAGP,SAAK,OAAO;AAAA,EACd;AACF;AAIe,SAAR,YAA6B,QAA+B;AACjE,SAAO,IAAI,SAAS,MAAM;AAC5B;","names":[]}
+{"version":3,"sources":["../src/index.ts"],"sourcesContent":["// ============================================================================\n// VORIM SDK — TypeScript\n// Thin client wrapping the Vorim AI REST API\n// ============================================================================\n\nimport type {\n  Agent, AgentRegistrationInput, AgentRegistrationResult,\n  TrustRecord, AuditEventInput, PermissionScope, PermissionCheckResult,\n} from './types.js';\n\nexport interface VorimConfig {\n  apiKey: string;\n  baseUrl?: string;\n  timeout?: number;\n}\n\nexport class VorimSDK {\n  private apiKey: string;\n  private baseUrl: string;\n  private timeout: number;\n\n  constructor(config: VorimConfig) {\n    this.apiKey = config.apiKey;\n    this.baseUrl = (config.baseUrl || 'https://api.vorim.ai').replace(/\\/$/, '') + '/v1';\n    this.timeout = config.timeout || 10000;\n  }\n\n  // ─── Agent Identity ────────────────────────────────────────────────\n\n  /**\n   * Register a new agent with Vorim AI.\n   * Returns the agent identity and a private key (shown once).\n   */\n  async register(input: AgentRegistrationInput): Promise<AgentRegistrationResult> {\n    return this.post('/agents', input);\n  }\n\n  /**\n   * Verify an agent's identity via the public Trust API.\n   */\n  async verify(agentId: string): Promise<TrustRecord> {\n    return this.get(`/trust/verify/${agentId}`);\n  }\n\n  /**\n   * Get agent details.\n   */\n  async getAgent(agentId: string): Promise<Agent> {\n    return this.get(`/agents/${agentId}`);\n  }\n\n  /**\n   * List all agents in the organisation.\n   */\n  async listAgents(params?: { page?: number; per_page?: number; status?: string }): Promise<{ agents: Agent[]; meta: any }> {\n    const qs = new URLSearchParams(params as any).toString();\n    return this.get(`/agents${qs ? '?' + qs : ''}`);\n  }\n\n  /**\n   * Update an agent's metadata.\n   */\n  async updateAgent(agentId: string, updates: Partial<Pick<Agent, 'name' | 'description' | 'status' | 'capabilities'>>): Promise<Agent> {\n    return this.patch(`/agents/${agentId}`, updates);\n  }\n\n  /**\n   * Revoke an agent (permanent deactivation).\n   */\n  async revoke(agentId: string): Promise<void> {\n    await this.delete(`/agents/${agentId}`);\n  }\n\n  // ─── Permissions ──────────────────────────────────────────────────\n\n  /**\n   * Check if an agent has a specific permission scope.\n   * Target: < 5ms response via Redis cache.\n   */\n  async check(agentId: string, scope: PermissionScope): Promise<PermissionCheckResult> {\n    return this.post(`/agents/${agentId}/permissions/verify`, { scope });\n  }\n\n  /**\n   * Grant a permission scope to an agent.\n   */\n  async grant(agentId: string, scope: PermissionScope, options?: {\n    valid_until?: string;\n    rate_limit?: { max: number; window: string };\n  }): Promise<any> {\n    return this.post(`/agents/${agentId}/permissions`, { scope, ...options });\n  }\n\n  /**\n   * List all active permissions for an agent.\n   */\n  async listPermissions(agentId: string): Promise<any[]> {\n    return this.get(`/agents/${agentId}/permissions`);\n  }\n\n  /**\n   * Revoke a specific permission scope from an agent.\n   */\n  async revokePermission(agentId: string, scope: PermissionScope): Promise<any> {\n    return this.delete(`/agents/${agentId}/permissions/${scope}`);\n  }\n\n  // ─── Audit ────────────────────────────────────────────────────────\n\n  /**\n   * Emit an audit event for an agent action.\n   */\n  async emit(event: AuditEventInput): Promise<{ ingested: number }> {\n    return this.post('/audit/events', { events: [event] });\n  }\n\n  /**\n   * Emit a batch of audit events (up to 1,000).\n   */\n  async emitBatch(events: AuditEventInput[]): Promise<{ ingested: number }> {\n    return this.post('/audit/events', { events });\n  }\n\n  /**\n   * Export a signed audit bundle for a date range.\n   */\n  async exportAudit(from: string, to: string, format: string = 'json'): Promise<any> {\n    return this.post('/audit/export', { from, to, format });\n  }\n\n  // ─── API Keys ──────────────────────────────────────────────────────\n\n  /**\n   * List all API keys for the organisation.\n   */\n  async listApiKeys(): Promise<any[]> {\n    return this.get('/api-keys');\n  }\n\n  /**\n   * Create a new API key.\n   */\n  async createApiKey(name: string, options?: { scopes?: string[]; expires_at?: string }): Promise<any> {\n    return this.post('/api-keys', { name, ...options });\n  }\n\n  /**\n   * Revoke an API key.\n   */\n  async deleteApiKey(keyId: string): Promise<{ revoked: boolean }> {\n    return this.delete(`/api-keys/${keyId}`);\n  }\n\n  // ─── Signing ──────────────────────────────────────────────────────\n\n  /**\n   * Sign a payload with an Ed25519 private key (client-side).\n   * Uses the Web Crypto API or Node.js crypto.\n   */\n  async sign(payload: string, privateKeyPem: string): Promise<string> {\n    if (typeof globalThis.crypto?.subtle !== 'undefined') {\n      // Web Crypto API\n      const keyData = this.pemToArrayBuffer(privateKeyPem);\n      const key = await globalThis.crypto.subtle.importKey(\n        'pkcs8', keyData, { name: 'Ed25519' }, false, ['sign']\n      );\n      const signature = await globalThis.crypto.subtle.sign(\n        'Ed25519', key, new TextEncoder().encode(payload)\n      );\n      return `ed25519:${this.arrayBufferToBase64(signature)}`;\n    } else {\n      // Node.js crypto fallback\n      const crypto = await import('node:crypto');\n      const sign = crypto.sign(null, Buffer.from(payload), privateKeyPem);\n      return `ed25519:${sign.toString('base64')}`;\n    }\n  }\n\n  // ─── HTTP Client ──────────────────────────────────────────────────\n\n  private async get(path: string): Promise<any> {\n    return this.request('GET', path);\n  }\n\n  private async post(path: string, body: any): Promise<any> {\n    return this.request('POST', path, body);\n  }\n\n  private async patch(path: string, body: any): Promise<any> {\n    return this.request('PATCH', path, body);\n  }\n\n  private async delete(path: string): Promise<any> {\n    return this.request('DELETE', path);\n  }\n\n  private async request(method: string, path: string, body?: any): Promise<any> {\n    const controller = new AbortController();\n    const timeoutId = setTimeout(() => controller.abort(), this.timeout);\n\n    try {\n      const response = await fetch(`${this.baseUrl}${path}`, {\n        method,\n        headers: {\n          'Authorization': `Bearer ${this.apiKey}`,\n          'Content-Type': 'application/json',\n          'User-Agent': 'vorim-sdk/2.0.0',\n        },\n        body: body ? JSON.stringify(body) : undefined,\n        signal: controller.signal,\n      });\n\n      if (!response.ok) {\n        const errBody = await response.json().catch(() => ({})) as Record<string, any>;\n        throw new VorimError(\n          response.status,\n          errBody.error?.code || 'UNKNOWN_ERROR',\n          errBody.error?.message || `HTTP ${response.status}`,\n          errBody.error?.details\n        );\n      }\n\n      const json = await response.json() as Record<string, any>;\n      return json.data;\n    } finally {\n      clearTimeout(timeoutId);\n    }\n  }\n\n  private pemToArrayBuffer(pem: string): ArrayBuffer {\n    const b64 = pem.replace(/-----[^-]+-----/g, '').replace(/\\s/g, '');\n    const binary = atob(b64);\n    const bytes = new Uint8Array(binary.length);\n    for (let i = 0; i < binary.length; i++) {\n      bytes[i] = binary.charCodeAt(i);\n    }\n    return bytes.buffer;\n  }\n\n  private arrayBufferToBase64(buffer: ArrayBuffer): string {\n    const bytes = new Uint8Array(buffer);\n    let binary = '';\n    for (const byte of bytes) {\n      binary += String.fromCharCode(byte);\n    }\n    return btoa(binary);\n  }\n}\n\nexport class VorimError extends Error {\n  constructor(\n    public status: number,\n    public code: string,\n    message: string,\n    public details?: Record<string, unknown>\n  ) {\n    super(message);\n    this.name = 'VorimError';\n  }\n}\n\n// ─── Convenience export ──────────────────────────────────────────────\n\nexport default function createVorim(config: VorimConfig): VorimSDK {\n  return new VorimSDK(config);\n}\n\n// Re-export types for consumers\nexport type {\n  Agent, AgentRegistrationInput, AgentRegistrationResult,\n  TrustRecord, AuditEventInput, AuditEventType, AuditResult,\n  PermissionScope, PermissionCheckResult, AgentStatus,\n} from './types.js';\n"],"mappings":";AAgBO,IAAM,WAAN,MAAe;AAAA,EACZ;AAAA,EACA;AAAA,EACA;AAAA,EAER,YAAY,QAAqB;AAC/B,SAAK,SAAS,OAAO;AACrB,SAAK,WAAW,OAAO,WAAW,wBAAwB,QAAQ,OAAO,EAAE,IAAI;AAC/E,SAAK,UAAU,OAAO,WAAW;AAAA,EACnC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,SAAS,OAAiE;AAC9E,WAAO,KAAK,KAAK,WAAW,KAAK;AAAA,EACnC;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,OAAO,SAAuC;AAClD,WAAO,KAAK,IAAI,iBAAiB,OAAO,EAAE;AAAA,EAC5C;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,SAAS,SAAiC;AAC9C,WAAO,KAAK,IAAI,WAAW,OAAO,EAAE;AAAA,EACtC;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,WAAW,QAAyG;AACxH,UAAM,KAAK,IAAI,gBAAgB,MAAa,EAAE,SAAS;AACvD,WAAO,KAAK,IAAI,UAAU,KAAK,MAAM,KAAK,EAAE,EAAE;AAAA,EAChD;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,YAAY,SAAiB,SAAmG;AACpI,WAAO,KAAK,MAAM,WAAW,OAAO,IAAI,OAAO;AAAA,EACjD;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,OAAO,SAAgC;AAC3C,UAAM,KAAK,OAAO,WAAW,OAAO,EAAE;AAAA,EACxC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,MAAM,SAAiB,OAAwD;AACnF,WAAO,KAAK,KAAK,WAAW,OAAO,uBAAuB,EAAE,MAAM,CAAC;AAAA,EACrE;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,MAAM,SAAiB,OAAwB,SAGpC;AACf,WAAO,KAAK,KAAK,WAAW,OAAO,gBAAgB,EAAE,OAAO,GAAG,QAAQ,CAAC;AAAA,EAC1E;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,gBAAgB,SAAiC;AACrD,WAAO,KAAK,IAAI,WAAW,OAAO,cAAc;AAAA,EAClD;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,iBAAiB,SAAiB,OAAsC;AAC5E,WAAO,KAAK,OAAO,WAAW,OAAO,gBAAgB,KAAK,EAAE;AAAA,EAC9D;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,KAAK,OAAuD;AAChE,WAAO,KAAK,KAAK,iBAAiB,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC;AAAA,EACvD;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,UAAU,QAA0D;AACxE,WAAO,KAAK,KAAK,iBAAiB,EAAE,OAAO,CAAC;AAAA,EAC9C;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,YAAY,MAAc,IAAY,SAAiB,QAAsB;AACjF,WAAO,KAAK,KAAK,iBAAiB,EAAE,MAAM,IAAI,OAAO,CAAC;AAAA,EACxD;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,cAA8B;AAClC,WAAO,KAAK,IAAI,WAAW;AAAA,EAC7B;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,aAAa,MAAc,SAAoE;AACnG,WAAO,KAAK,KAAK,aAAa,EAAE,MAAM,GAAG,QAAQ,CAAC;AAAA,EACpD;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,aAAa,OAA8C;AAC/D,WAAO,KAAK,OAAO,aAAa,KAAK,EAAE;AAAA,EACzC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,KAAK,SAAiB,eAAwC;AAClE,QAAI,OAAO,WAAW,QAAQ,WAAW,aAAa;AAEpD,YAAM,UAAU,KAAK,iBAAiB,aAAa;AACnD,YAAM,MAAM,MAAM,WAAW,OAAO,OAAO;AAAA,QACzC;AAAA,QAAS;AAAA,QAAS,EAAE,MAAM,UAAU;AAAA,QAAG;AAAA,QAAO,CAAC,MAAM;AAAA,MACvD;AACA,YAAM,YAAY,MAAM,WAAW,OAAO,OAAO;AAAA,QAC/C;AAAA,QAAW;AAAA,QAAK,IAAI,YAAY,EAAE,OAAO,OAAO;AAAA,MAClD;AACA,aAAO,WAAW,KAAK,oBAAoB,SAAS,CAAC;AAAA,IACvD,OAAO;AAEL,YAAM,SAAS,MAAM,OAAO,QAAa;AACzC,YAAM,OAAO,OAAO,KAAK,MAAM,OAAO,KAAK,OAAO,GAAG,aAAa;AAClE,aAAO,WAAW,KAAK,SAAS,QAAQ,CAAC;AAAA,IAC3C;AAAA,EACF;AAAA;AAAA,EAIA,MAAc,IAAI,MAA4B;AAC5C,WAAO,KAAK,QAAQ,OAAO,IAAI;AAAA,EACjC;AAAA,EAEA,MAAc,KAAK,MAAc,MAAyB;AACxD,WAAO,KAAK,QAAQ,QAAQ,MAAM,IAAI;AAAA,EACxC;AAAA,EAEA,MAAc,MAAM,MAAc,MAAyB;AACzD,WAAO,KAAK,QAAQ,SAAS,MAAM,IAAI;AAAA,EACzC;AAAA,EAEA,MAAc,OAAO,MAA4B;AAC/C,WAAO,KAAK,QAAQ,UAAU,IAAI;AAAA,EACpC;AAAA,EAEA,MAAc,QAAQ,QAAgB,MAAc,MAA0B;AAC5E,UAAM,aAAa,IAAI,gBAAgB;AACvC,UAAM,YAAY,WAAW,MAAM,WAAW,MAAM,GAAG,KAAK,OAAO;AAEnE,QAAI;AACF,YAAM,WAAW,MAAM,MAAM,GAAG,KAAK,OAAO,GAAG,IAAI,IAAI;AAAA,QACrD;AAAA,QACA,SAAS;AAAA,UACP,iBAAiB,UAAU,KAAK,MAAM;AAAA,UACtC,gBAAgB;AAAA,UAChB,cAAc;AAAA,QAChB;AAAA,QACA,MAAM,OAAO,KAAK,UAAU,IAAI,IAAI;AAAA,QACpC,QAAQ,WAAW;AAAA,MACrB,CAAC;AAED,UAAI,CAAC,SAAS,IAAI;AAChB,cAAM,UAAU,MAAM,SAAS,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AACtD,cAAM,IAAI;AAAA,UACR,SAAS;AAAA,UACT,QAAQ,OAAO,QAAQ;AAAA,UACvB,QAAQ,OAAO,WAAW,QAAQ,SAAS,MAAM;AAAA,UACjD,QAAQ,OAAO;AAAA,QACjB;AAAA,MACF;AAEA,YAAM,OAAO,MAAM,SAAS,KAAK;AACjC,aAAO,KAAK;AAAA,IACd,UAAE;AACA,mBAAa,SAAS;AAAA,IACxB;AAAA,EACF;AAAA,EAEQ,iBAAiB,KAA0B;AACjD,UAAM,MAAM,IAAI,QAAQ,oBAAoB,EAAE,EAAE,QAAQ,OAAO,EAAE;AACjE,UAAM,SAAS,KAAK,GAAG;AACvB,UAAM,QAAQ,IAAI,WAAW,OAAO,MAAM;AAC1C,aAAS,IAAI,GAAG,IAAI,OAAO,QAAQ,KAAK;AACtC,YAAM,CAAC,IAAI,OAAO,WAAW,CAAC;AAAA,IAChC;AACA,WAAO,MAAM;AAAA,EACf;AAAA,EAEQ,oBAAoB,QAA6B;AACvD,UAAM,QAAQ,IAAI,WAAW,MAAM;AACnC,QAAI,SAAS;AACb,eAAW,QAAQ,OAAO;AACxB,gBAAU,OAAO,aAAa,IAAI;AAAA,IACpC;AACA,WAAO,KAAK,MAAM;AAAA,EACpB;AACF;AAEO,IAAM,aAAN,cAAyB,MAAM;AAAA,EACpC,YACS,QACA,MACP,SACO,SACP;AACA,UAAM,OAAO;AALN;AACA;AAEA;AAGP,SAAK,OAAO;AAAA,EACd;AACF;AAIe,SAAR,YAA6B,QAA+B;AACjE,SAAO,IAAI,SAAS,MAAM;AAC5B;","names":[]}

package/dist/integrations/crewai.cjs

@@ -0,0 +1,141 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/integrations/crewai.ts
+var crewai_exports = {};
+__export(crewai_exports, {
+  checkCrewPermission: () => checkCrewPermission,
+  checkDelegationPermission: () => checkDelegationPermission,
+  emitCrewRunEvents: () => emitCrewRunEvents,
+  emitCrewTaskEvent: () => emitCrewTaskEvent,
+  registerCrew: () => registerCrew,
+  verifyCrewTrust: () => verifyCrewTrust
+});
+module.exports = __toCommonJS(crewai_exports);
+async function registerCrew(vorim, manifest) {
+  const members = [];
+  for (const member of manifest.members) {
+    const scopes = [...member.scopes];
+    if (member.allowDelegation && !scopes.includes("agent:delegate")) {
+      scopes.push("agent:delegate");
+    }
+    const registration = await vorim.register({
+      name: member.name,
+      description: member.description ?? `CrewAI ${member.role} \u2014 ${manifest.crewName}`,
+      capabilities: member.capabilities,
+      scopes
+    });
+    members.push({
+      role: member.role,
+      agentId: registration.agent.agent_id,
+      registration,
+      privateKey: registration.private_key
+    });
+  }
+  return {
+    crewName: manifest.crewName,
+    members,
+    getMember(role) {
+      return members.find((m) => m.role === role);
+    },
+    agentIds() {
+      return members.map((m) => m.agentId);
+    }
+  };
+}
+async function emitCrewTaskEvent(vorim, event) {
+  const auditEvent = {
+    agent_id: event.agentId,
+    event_type: event.tool ? "tool_call" : "api_request",
+    action: event.task,
+    resource: event.tool,
+    result: event.result,
+    latency_ms: event.latencyMs,
+    error_code: event.error ? "CREW_TASK_ERROR" : void 0,
+    metadata: {
+      framework: "crewai",
+      role: event.role,
+      ...event.delegatedTo ? { delegated_to: event.delegatedTo } : {},
+      ...event.error ? { error: event.error } : {},
+      ...event.metadata
+    }
+  };
+  await vorim.emit(auditEvent);
+}
+async function emitCrewRunEvents(vorim, events) {
+  const auditEvents = events.map((event) => ({
+    agent_id: event.agentId,
+    event_type: event.tool ? "tool_call" : "api_request",
+    action: event.task,
+    resource: event.tool,
+    result: event.result,
+    latency_ms: event.latencyMs,
+    error_code: event.error ? "CREW_TASK_ERROR" : void 0,
+    metadata: {
+      framework: "crewai",
+      role: event.role,
+      ...event.delegatedTo ? { delegated_to: event.delegatedTo } : {},
+      ...event.error ? { error: event.error } : {},
+      ...event.metadata
+    }
+  }));
+  return vorim.emitBatch(auditEvents);
+}
+async function checkCrewPermission(vorim, crew, role, scope) {
+  const member = crew.getMember(role);
+  if (!member) {
+    return { allowed: false, reason: `Unknown crew member: ${role}` };
+  }
+  return vorim.check(member.agentId, scope);
+}
+async function checkDelegationPermission(vorim, crew, fromRole, toRole) {
+  const from = crew.getMember(fromRole);
+  const to = crew.getMember(toRole);
+  if (!from) return { allowed: false, reason: `Unknown crew member: ${fromRole}` };
+  if (!to) return { allowed: false, reason: `Unknown crew member: ${toRole}` };
+  const result = await vorim.check(from.agentId, "agent:delegate");
+  if (!result.allowed) {
+    return { allowed: false, reason: `${fromRole} lacks agent:delegate permission` };
+  }
+  return { allowed: true };
+}
+async function verifyCrewTrust(vorim, crew) {
+  const results = await Promise.all(
+    crew.members.map(async (member) => {
+      const trust = await vorim.verify(member.agentId);
+      return {
+        role: member.role,
+        agentId: member.agentId,
+        trustScore: trust.trust_score,
+        status: trust.status
+      };
+    })
+  );
+  return results;
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  checkCrewPermission,
+  checkDelegationPermission,
+  emitCrewRunEvents,
+  emitCrewTaskEvent,
+  registerCrew,
+  verifyCrewTrust
+});
+//# sourceMappingURL=crewai.cjs.map

package/dist/integrations/crewai.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/integrations/crewai.ts"],"sourcesContent":["// ============================================================================\n// VORIM SDK — CrewAI Integration\n// CrewAI is Python-only, so this module provides:\n//   1. A TypeScript helper for managing CrewAI agent identities via Vorim\n//   2. Audit utilities for logging crew task execution\n//   3. A \"crew manifest\" pattern for registering entire crews at once\n//\n// Use this from a TypeScript orchestration layer that triggers CrewAI\n// runs via REST, CLI, or subprocess. For native Python integration,\n// use the Vorim REST API directly (see docs).\n//\n// No peer dependencies required — uses @vorim/sdk only.\n// ============================================================================\n\nimport type { VorimSDK } from '../index.js';\nimport type {\n  PermissionScope, AuditEventInput, AgentRegistrationResult,\n} from '../types.js';\n\n// ─── Crew Configuration ──────────────────────────────────────────────────\n\nexport interface CrewMemberConfig {\n  /** Unique role name within the crew (e.g. \"researcher\", \"writer\"). */\n  role: string;\n  /** Display name for the Vorim agent. */\n  name: string;\n  /** Description of this crew member's responsibilities. */\n  description?: string;\n  /** Tools this agent can use (e.g. [\"web_search\", \"file_read\"]). */\n  capabilities: string[];\n  /** Permission scopes to grant. */\n  scopes: PermissionScope[];\n  /** Whether this agent can delegate to other crew members. */\n  allowDelegation?: boolean;\n}\n\nexport interface CrewManifest {\n  /** Name for the overall crew. */\n  crewName: string;\n  /** Members of the crew. */\n  members: CrewMemberConfig[];\n  /** Optional metadata for the crew. */\n  metadata?: Record<string, unknown>;\n}\n\nexport interface RegisteredCrewMember {\n  role: string;\n  agentId: string;\n  registration: AgentRegistrationResult;\n  privateKey: string;\n}\n\nexport interface RegisteredCrew {\n  crewName: string;\n  members: RegisteredCrewMember[];\n  /** Lookup a member by role. */\n  getMember(role: string): RegisteredCrewMember | undefined;\n  /** Get all agent IDs in the crew. */\n  agentIds(): string[];\n}\n\n// ─── Crew Registration ──────────────────────────────────────────────────\n\n/**\n * Registers an entire CrewAI crew with Vorim. Each crew member gets a\n * unique Vorim agent identity with Ed25519 keypair and scoped permissions.\n *\n * @example\n * ```ts\n * import createVorim from \"@vorim/sdk\";\n * import { registerCrew } from \"@vorim/sdk/integrations/crewai\";\n *\n * const vorim = createVorim({ apiKey: \"agid_sk_live_...\" });\n *\n * const crew = await registerCrew(vorim, {\n *   crewName: \"content-pipeline\",\n *   members: [\n *     {\n *       role: \"researcher\",\n *       name: \"crew-researcher\",\n *       capabilities: [\"web_search\", \"summarization\"],\n *       scopes: [\"agent:read\", \"agent:execute\"],\n *     },\n *     {\n *       role: \"writer\",\n *       name: \"crew-writer\",\n *       capabilities: [\"file_write\", \"formatting\"],\n *       scopes: [\"agent:read\", \"agent:write\"],\n *     },\n *     {\n *       role: \"editor\",\n *       name: \"crew-editor\",\n *       capabilities: [\"review\", \"approval\"],\n *       scopes: [\"agent:read\", \"agent:write\"],\n *       allowDelegation: true,\n *     },\n *   ],\n * });\n *\n * // Access individual members\n * const researcher = crew.getMember(\"researcher\");\n * console.log(researcher.agentId); // agid_acme_...\n *\n * // Grant delegation permission to editor\n * // (done automatically if allowDelegation is true)\n * ```\n */\nexport async function registerCrew(\n  vorim: VorimSDK,\n  manifest: CrewManifest,\n): Promise<RegisteredCrew> {\n  const members: RegisteredCrewMember[] = [];\n\n  for (const member of manifest.members) {\n    const scopes = [...member.scopes];\n\n    // Auto-add delegate scope if delegation is allowed\n    if (member.allowDelegation && !scopes.includes('agent:delegate')) {\n      scopes.push('agent:delegate');\n    }\n\n    const registration = await vorim.register({\n      name: member.name,\n      description: member.description ?? `CrewAI ${member.role} — ${manifest.crewName}`,\n      capabilities: member.capabilities,\n      scopes,\n    });\n\n    members.push({\n      role: member.role,\n      agentId: registration.agent.agent_id,\n      registration,\n      privateKey: registration.private_key,\n    });\n  }\n\n  return {\n    crewName: manifest.crewName,\n    members,\n    getMember(role: string) {\n      return members.find(m => m.role === role);\n    },\n    agentIds() {\n      return members.map(m => m.agentId);\n    },\n  };\n}\n\n// ─── Task Audit ──────────────────────────────────────────────────────────\n\nexport interface CrewTaskEvent {\n  /** The role of the crew member performing the task. */\n  role: string;\n  /** The Vorim agent_id (looked up from the crew). */\n  agentId: string;\n  /** Task description or name. */\n  task: string;\n  /** Tool used (if any). */\n  tool?: string;\n  /** Result of the action. */\n  result: 'success' | 'denied' | 'error';\n  /** Duration in milliseconds. */\n  latencyMs?: number;\n  /** Error details if result is 'error'. */\n  error?: string;\n  /** Whether this was a delegation to another crew member. */\n  delegatedTo?: string;\n  /** Additional context. */\n  metadata?: Record<string, unknown>;\n}\n\n/**\n * Emits a Vorim audit event for a CrewAI task execution.\n * Call this from your orchestration layer after each CrewAI step completes.\n *\n * @example\n * ```ts\n * import { emitCrewTaskEvent } from \"@vorim/sdk/integrations/crewai\";\n *\n * // After a CrewAI task completes\n * await emitCrewTaskEvent(vorim, {\n *   role: \"researcher\",\n *   agentId: crew.getMember(\"researcher\").agentId,\n *   task: \"research_competitors\",\n *   tool: \"web_search\",\n *   result: \"success\",\n *   latencyMs: 3200,\n * });\n * ```\n */\nexport async function emitCrewTaskEvent(\n  vorim: VorimSDK,\n  event: CrewTaskEvent,\n): Promise<void> {\n  const auditEvent: AuditEventInput = {\n    agent_id: event.agentId,\n    event_type: event.tool ? 'tool_call' : 'api_request',\n    action: event.task,\n    resource: event.tool,\n    result: event.result,\n    latency_ms: event.latencyMs,\n    error_code: event.error ? 'CREW_TASK_ERROR' : undefined,\n    metadata: {\n      framework: 'crewai',\n      role: event.role,\n      ...(event.delegatedTo ? { delegated_to: event.delegatedTo } : {}),\n      ...(event.error ? { error: event.error } : {}),\n      ...event.metadata,\n    },\n  };\n\n  await vorim.emit(auditEvent);\n}\n\n/**\n * Emits audit events for an entire crew run (batch of task results).\n *\n * @example\n * ```ts\n * await emitCrewRunEvents(vorim, [\n *   { role: \"researcher\", agentId: \"...\", task: \"research\", result: \"success\" },\n *   { role: \"writer\", agentId: \"...\", task: \"draft_article\", result: \"success\" },\n *   { role: \"editor\", agentId: \"...\", task: \"review\", result: \"success\" },\n * ]);\n * ```\n */\nexport async function emitCrewRunEvents(\n  vorim: VorimSDK,\n  events: CrewTaskEvent[],\n): Promise<{ ingested: number }> {\n  const auditEvents: AuditEventInput[] = events.map(event => ({\n    agent_id: event.agentId,\n    event_type: event.tool ? 'tool_call' : 'api_request',\n    action: event.task,\n    resource: event.tool,\n    result: event.result,\n    latency_ms: event.latencyMs,\n    error_code: event.error ? 'CREW_TASK_ERROR' : undefined,\n    metadata: {\n      framework: 'crewai',\n      role: event.role,\n      ...(event.delegatedTo ? { delegated_to: event.delegatedTo } : {}),\n      ...(event.error ? { error: event.error } : {}),\n      ...event.metadata,\n    },\n  }));\n\n  return vorim.emitBatch(auditEvents);\n}\n\n// ─── Permission Helpers ──────────────────────────────────────────────────\n\n/**\n * Check if a crew member has permission before executing a task.\n * Returns the check result — does not throw.\n *\n * @example\n * ```ts\n * const { allowed } = await checkCrewPermission(vorim, crew, \"writer\", \"agent:write\");\n * if (!allowed) {\n *   console.log(\"Writer lacks write permission\");\n * }\n * ```\n */\nexport async function checkCrewPermission(\n  vorim: VorimSDK,\n  crew: RegisteredCrew,\n  role: string,\n  scope: PermissionScope,\n): Promise<{ allowed: boolean; reason?: string }> {\n  const member = crew.getMember(role);\n  if (!member) {\n    return { allowed: false, reason: `Unknown crew member: ${role}` };\n  }\n  return vorim.check(member.agentId, scope);\n}\n\n/**\n * Check if delegation between two crew members is permitted.\n * The delegating agent must have the `agent:delegate` scope.\n */\nexport async function checkDelegationPermission(\n  vorim: VorimSDK,\n  crew: RegisteredCrew,\n  fromRole: string,\n  toRole: string,\n): Promise<{ allowed: boolean; reason?: string }> {\n  const from = crew.getMember(fromRole);\n  const to = crew.getMember(toRole);\n  if (!from) return { allowed: false, reason: `Unknown crew member: ${fromRole}` };\n  if (!to) return { allowed: false, reason: `Unknown crew member: ${toRole}` };\n\n  const result = await vorim.check(from.agentId, 'agent:delegate');\n  if (!result.allowed) {\n    return { allowed: false, reason: `${fromRole} lacks agent:delegate permission` };\n  }\n  return { allowed: true };\n}\n\n// ─── Trust Verification ──────────────────────────────────────────────────\n\n/**\n * Verify trust scores for all members of a crew.\n * Useful before starting a crew run to ensure all agents are active and trusted.\n */\nexport async function verifyCrewTrust(\n  vorim: VorimSDK,\n  crew: RegisteredCrew,\n): Promise<{ role: string; agentId: string; trustScore: number; status: string }[]> {\n  const results = await Promise.all(\n    crew.members.map(async (member) => {\n      const trust = await vorim.verify(member.agentId);\n      return {\n        role: member.role,\n        agentId: member.agentId,\n        trustScore: trust.trust_score,\n        status: trust.status,\n      };\n    }),\n  );\n  return results;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AA2GA,eAAsB,aACpB,OACA,UACyB;AACzB,QAAM,UAAkC,CAAC;AAEzC,aAAW,UAAU,SAAS,SAAS;AACrC,UAAM,SAAS,CAAC,GAAG,OAAO,MAAM;AAGhC,QAAI,OAAO,mBAAmB,CAAC,OAAO,SAAS,gBAAgB,GAAG;AAChE,aAAO,KAAK,gBAAgB;AAAA,IAC9B;AAEA,UAAM,eAAe,MAAM,MAAM,SAAS;AAAA,MACxC,MAAM,OAAO;AAAA,MACb,aAAa,OAAO,eAAe,UAAU,OAAO,IAAI,WAAM,SAAS,QAAQ;AAAA,MAC/E,cAAc,OAAO;AAAA,MACrB;AAAA,IACF,CAAC;AAED,YAAQ,KAAK;AAAA,MACX,MAAM,OAAO;AAAA,MACb,SAAS,aAAa,MAAM;AAAA,MAC5B;AAAA,MACA,YAAY,aAAa;AAAA,IAC3B,CAAC;AAAA,EACH;AAEA,SAAO;AAAA,IACL,UAAU,SAAS;AAAA,IACnB;AAAA,IACA,UAAU,MAAc;AACtB,aAAO,QAAQ,KAAK,OAAK,EAAE,SAAS,IAAI;AAAA,IAC1C;AAAA,IACA,WAAW;AACT,aAAO,QAAQ,IAAI,OAAK,EAAE,OAAO;AAAA,IACnC;AAAA,EACF;AACF;AA4CA,eAAsB,kBACpB,OACA,OACe;AACf,QAAM,aAA8B;AAAA,IAClC,UAAU,MAAM;AAAA,IAChB,YAAY,MAAM,OAAO,cAAc;AAAA,IACvC,QAAQ,MAAM;AAAA,IACd,UAAU,MAAM;AAAA,IAChB,QAAQ,MAAM;AAAA,IACd,YAAY,MAAM;AAAA,IAClB,YAAY,MAAM,QAAQ,oBAAoB;AAAA,IAC9C,UAAU;AAAA,MACR,WAAW;AAAA,MACX,MAAM,MAAM;AAAA,MACZ,GAAI,MAAM,cAAc,EAAE,cAAc,MAAM,YAAY,IAAI,CAAC;AAAA,MAC/D,GAAI,MAAM,QAAQ,EAAE,OAAO,MAAM,MAAM,IAAI,CAAC;AAAA,MAC5C,GAAG,MAAM;AAAA,IACX;AAAA,EACF;AAEA,QAAM,MAAM,KAAK,UAAU;AAC7B;AAcA,eAAsB,kBACpB,OACA,QAC+B;AAC/B,QAAM,cAAiC,OAAO,IAAI,YAAU;AAAA,IAC1D,UAAU,MAAM;AAAA,IAChB,YAAY,MAAM,OAAO,cAAc;AAAA,IACvC,QAAQ,MAAM;AAAA,IACd,UAAU,MAAM;AAAA,IAChB,QAAQ,MAAM;AAAA,IACd,YAAY,MAAM;AAAA,IAClB,YAAY,MAAM,QAAQ,oBAAoB;AAAA,IAC9C,UAAU;AAAA,MACR,WAAW;AAAA,MACX,MAAM,MAAM;AAAA,MACZ,GAAI,MAAM,cAAc,EAAE,cAAc,MAAM,YAAY,IAAI,CAAC;AAAA,MAC/D,GAAI,MAAM,QAAQ,EAAE,OAAO,MAAM,MAAM,IAAI,CAAC;AAAA,MAC5C,GAAG,MAAM;AAAA,IACX;AAAA,EACF,EAAE;AAEF,SAAO,MAAM,UAAU,WAAW;AACpC;AAgBA,eAAsB,oBACpB,OACA,MACA,MACA,OACgD;AAChD,QAAM,SAAS,KAAK,UAAU,IAAI;AAClC,MAAI,CAAC,QAAQ;AACX,WAAO,EAAE,SAAS,OAAO,QAAQ,wBAAwB,IAAI,GAAG;AAAA,EAClE;AACA,SAAO,MAAM,MAAM,OAAO,SAAS,KAAK;AAC1C;AAMA,eAAsB,0BACpB,OACA,MACA,UACA,QACgD;AAChD,QAAM,OAAO,KAAK,UAAU,QAAQ;AACpC,QAAM,KAAK,KAAK,UAAU,MAAM;AAChC,MAAI,CAAC,KAAM,QAAO,EAAE,SAAS,OAAO,QAAQ,wBAAwB,QAAQ,GAAG;AAC/E,MAAI,CAAC,GAAI,QAAO,EAAE,SAAS,OAAO,QAAQ,wBAAwB,MAAM,GAAG;AAE3E,QAAM,SAAS,MAAM,MAAM,MAAM,KAAK,SAAS,gBAAgB;AAC/D,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,EAAE,SAAS,OAAO,QAAQ,GAAG,QAAQ,mCAAmC;AAAA,EACjF;AACA,SAAO,EAAE,SAAS,KAAK;AACzB;AAQA,eAAsB,gBACpB,OACA,MACkF;AAClF,QAAM,UAAU,MAAM,QAAQ;AAAA,IAC5B,KAAK,QAAQ,IAAI,OAAO,WAAW;AACjC,YAAM,QAAQ,MAAM,MAAM,OAAO,OAAO,OAAO;AAC/C,aAAO;AAAA,QACL,MAAM,OAAO;AAAA,QACb,SAAS,OAAO;AAAA,QAChB,YAAY,MAAM;AAAA,QAClB,QAAQ,MAAM;AAAA,MAChB;AAAA,IACF,CAAC;AAAA,EACH;AACA,SAAO;AACT;","names":[]}