@vouchagents/client 0.1.0

package/.turbo/turbo-build.log

@@ -0,0 +1,4 @@
+
+> @vouchagents/client@0.1.0 build /Users/momentumadmin/Desktop/Personal Projects/agent-signup/packages/client
+> tsc
+

package/dist/consent.d.ts

@@ -0,0 +1,35 @@
+import { type AgentSignupDiscovery } from "@vouchagents/protocol";
+import type { Vault } from "./vault/vault.js";
+export interface ConsentRequest {
+    site: AgentSignupDiscovery["branding"] & {
+        url: string;
+    };
+    requestedFields: {
+        required: Array<{
+            field: string;
+        }>;
+        optional?: Array<{
+            field: string;
+        }>;
+    };
+    nonce: string;
+    siteEndpoint: string;
+    agentId?: string;
+}
+export interface ConsentApproved {
+    approved: true;
+    token: string;
+    fields: Record<string, string>;
+}
+export interface ConsentDenied {
+    approved: false;
+    reason: "user_denied" | "timeout" | "missing_fields" | "vault_locked";
+}
+export type ConsentResult = ConsentApproved | ConsentDenied;
+export declare class ConsentManager {
+    private vault;
+    constructor(vault: Vault);
+    /** Request consent for a signup. Checks for matching auto-approve policies first. */
+    requestConsent(request: ConsentRequest): Promise<ConsentResult>;
+}
+//# sourceMappingURL=consent.d.ts.map

package/dist/consent.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"consent.d.ts","sourceRoot":"","sources":["../src/consent.ts"],"names":[],"mappings":"AAAA,OAAO,EAIL,KAAK,oBAAoB,EAC1B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAE9C,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,oBAAoB,CAAC,UAAU,CAAC,GAAG;QAAE,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;IACzD,eAAe,EAAE;QACf,QAAQ,EAAE,KAAK,CAAC;YAAE,KAAK,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QACnC,QAAQ,CAAC,EAAE,KAAK,CAAC;YAAE,KAAK,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;KACrC,CAAC;IACF,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,IAAI,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAChC;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,KAAK,CAAC;IAChB,MAAM,EAAE,aAAa,GAAG,SAAS,GAAG,gBAAgB,GAAG,cAAc,CAAC;CACvE;AAED,MAAM,MAAM,aAAa,GAAG,eAAe,GAAG,aAAa,CAAC;AAE5D,qBAAa,cAAc;IACb,OAAO,CAAC,KAAK;gBAAL,KAAK,EAAE,KAAK;IAEhC,qFAAqF;IAC/E,cAAc,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,aAAa,CAAC;CA8CtE"}

package/dist/consent.js

@@ -0,0 +1,43 @@
+import { createConsentToken, canonicalHash, SensitiveString, } from "@vouchagents/protocol";
+export class ConsentManager {
+    vault;
+    constructor(vault) {
+        this.vault = vault;
+    }
+    /** Request consent for a signup. Checks for matching auto-approve policies first. */
+    async requestConsent(request) {
+        if (!this.vault.isUnlocked()) {
+            return { approved: false, reason: "vault_locked" };
+        }
+        const requiredFieldNames = request.requestedFields.required.map((f) => f.field);
+        // Check for matching auto-approve policy
+        const policy = await this.vault.findMatchingPolicy(request.site.url, requiredFieldNames);
+        // Get the field values
+        const fields = await this.vault.getFieldsRaw(requiredFieldNames);
+        // Check all required fields are available
+        const missing = requiredFieldNames.filter((f) => !fields[f]);
+        if (missing.length > 0) {
+            return { approved: false, reason: "missing_fields" };
+        }
+        // Create consent token
+        const keyPair = this.vault.getKeyPair();
+        const token = await createConsentToken({
+            userKeyPair: keyPair,
+            agentId: request.agentId ?? "unknown-agent",
+            audience: request.site.url,
+            nonce: request.nonce,
+            fields: requiredFieldNames,
+            data: fields,
+            purpose: "account_creation",
+            consentMode: policy ? "pre_authorized" : "explicit",
+            siteEndpoint: request.siteEndpoint,
+            policyId: policy?.id,
+        });
+        // Decrement policy uses if auto-approved
+        if (policy && policy.remainingUses !== undefined) {
+            policy.remainingUses--;
+        }
+        return { approved: true, token, fields };
+    }
+}
+//# sourceMappingURL=consent.js.map

package/dist/consent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"consent.js","sourceRoot":"","sources":["../src/consent.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kBAAkB,EAClB,aAAa,EACb,eAAe,GAEhB,MAAM,uBAAuB,CAAC;AA2B/B,MAAM,OAAO,cAAc;IACL;IAApB,YAAoB,KAAY;QAAZ,UAAK,GAAL,KAAK,CAAO;IAAG,CAAC;IAEpC,qFAAqF;IACrF,KAAK,CAAC,cAAc,CAAC,OAAuB;QAC1C,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,EAAE,CAAC;YAC7B,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;QACrD,CAAC;QAED,MAAM,kBAAkB,GAAG,OAAO,CAAC,eAAe,CAAC,QAAQ,CAAC,GAAG,CAC7D,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CACf,CAAC;QAEF,yCAAyC;QACzC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAChD,OAAO,CAAC,IAAI,CAAC,GAAG,EAChB,kBAAkB,CACnB,CAAC;QAEF,uBAAuB;QACvB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,kBAAkB,CAAC,CAAC;QAEjE,0CAA0C;QAC1C,MAAM,OAAO,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7D,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;QACvD,CAAC;QAED,uBAAuB;QACvB,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;QACxC,MAAM,KAAK,GAAG,MAAM,kBAAkB,CAAC;YACrC,WAAW,EAAE,OAAO;YACpB,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,eAAe;YAC3C,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG;YAC1B,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,MAAM,EAAE,kBAAkB;YAC1B,IAAI,EAAE,MAAM;YACZ,OAAO,EAAE,kBAAkB;YAC3B,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,UAAU;YACnD,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,QAAQ,EAAE,MAAM,EAAE,EAAE;SACrB,CAAC,CAAC;QAEH,yCAAyC;QACzC,IAAI,MAAM,IAAI,MAAM,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;YACjD,MAAM,CAAC,aAAa,EAAE,CAAC;QACzB,CAAC;QAED,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAC3C,CAAC;CACF"}

package/dist/index.d.ts

@@ -0,0 +1,4 @@
+export { Vault, FileStorage, LocalStorageBackend, MemoryStorage, defaultVaultPath, type StorageBackend, type VaultData, type SignupHistoryEntry, type PolicyEntry, } from "./vault/index.js";
+export { ConsentManager, type ConsentRequest, type ConsentResult, type ConsentApproved, type ConsentDenied, } from "./consent.js";
+export { generatePassword, type PasswordPolicy } from "./password.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EACL,KAAK,EACL,WAAW,EACX,mBAAmB,EACnB,aAAa,EACb,gBAAgB,EAChB,KAAK,cAAc,EACnB,KAAK,SAAS,EACd,KAAK,kBAAkB,EACvB,KAAK,WAAW,GACjB,MAAM,kBAAkB,CAAC;AAG1B,OAAO,EACL,cAAc,EACd,KAAK,cAAc,EACnB,KAAK,aAAa,EAClB,KAAK,eAAe,EACpB,KAAK,aAAa,GACnB,MAAM,cAAc,CAAC;AAGtB,OAAO,EAAE,gBAAgB,EAAE,KAAK,cAAc,EAAE,MAAM,eAAe,CAAC"}

package/dist/index.js

@@ -0,0 +1,7 @@
+// Vault
+export { Vault, FileStorage, LocalStorageBackend, MemoryStorage, defaultVaultPath, } from "./vault/index.js";
+// Consent
+export { ConsentManager, } from "./consent.js";
+// Password
+export { generatePassword } from "./password.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,QAAQ;AACR,OAAO,EACL,KAAK,EACL,WAAW,EACX,mBAAmB,EACnB,aAAa,EACb,gBAAgB,GAKjB,MAAM,kBAAkB,CAAC;AAE1B,UAAU;AACV,OAAO,EACL,cAAc,GAKf,MAAM,cAAc,CAAC;AAEtB,WAAW;AACX,OAAO,EAAE,gBAAgB,EAAuB,MAAM,eAAe,CAAC"}

package/dist/password.d.ts

@@ -0,0 +1,11 @@
+import { SensitiveString } from "@vouchagents/protocol";
+export interface PasswordPolicy {
+    minLength?: number;
+    requireUppercase?: boolean;
+    requireLowercase?: boolean;
+    requireNumbers?: boolean;
+    requireSymbols?: boolean;
+}
+/** Generate a cryptographically random password meeting the given policy. */
+export declare function generatePassword(policy?: PasswordPolicy): SensitiveString;
+//# sourceMappingURL=password.d.ts.map

package/dist/password.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"password.d.ts","sourceRoot":"","sources":["../src/password.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAExD,MAAM,WAAW,cAAc;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAeD,6EAA6E;AAC7E,wBAAgB,gBAAgB,CAAC,MAAM,CAAC,EAAE,cAAc,GAAG,eAAe,CAuCzE"}

package/dist/password.js

@@ -0,0 +1,61 @@
+import { SensitiveString } from "@vouchagents/protocol";
+const DEFAULT_POLICY = {
+    minLength: 20,
+    requireUppercase: true,
+    requireLowercase: true,
+    requireNumbers: true,
+    requireSymbols: true,
+};
+const UPPERCASE = "ABCDEFGHIJKLMNOPQRSTUVWXYZ";
+const LOWERCASE = "abcdefghijklmnopqrstuvwxyz";
+const NUMBERS = "0123456789";
+const SYMBOLS = "!@#$%^&*()-_=+[]{}|;:,.<>?";
+/** Generate a cryptographically random password meeting the given policy. */
+export function generatePassword(policy) {
+    const p = { ...DEFAULT_POLICY, ...policy };
+    const length = Math.max(p.minLength, 12);
+    let charset = "";
+    const required = [];
+    if (p.requireUppercase) {
+        charset += UPPERCASE;
+        required.push(randomChar(UPPERCASE));
+    }
+    if (p.requireLowercase) {
+        charset += LOWERCASE;
+        required.push(randomChar(LOWERCASE));
+    }
+    if (p.requireNumbers) {
+        charset += NUMBERS;
+        required.push(randomChar(NUMBERS));
+    }
+    if (p.requireSymbols) {
+        charset += SYMBOLS;
+        required.push(randomChar(SYMBOLS));
+    }
+    if (charset.length === 0) {
+        charset = UPPERCASE + LOWERCASE + NUMBERS;
+    }
+    // Fill remaining length with random chars from the full charset
+    const remaining = length - required.length;
+    const chars = [...required];
+    for (let i = 0; i < remaining; i++) {
+        chars.push(randomChar(charset));
+    }
+    // Shuffle to avoid predictable positions for required chars
+    shuffle(chars);
+    return new SensitiveString(chars.join(""));
+}
+function randomChar(charset) {
+    const array = new Uint32Array(1);
+    globalThis.crypto.getRandomValues(array);
+    return charset[array[0] % charset.length];
+}
+function shuffle(array) {
+    for (let i = array.length - 1; i > 0; i--) {
+        const randomValues = new Uint32Array(1);
+        globalThis.crypto.getRandomValues(randomValues);
+        const j = randomValues[0] % (i + 1);
+        [array[i], array[j]] = [array[j], array[i]];
+    }
+}
+//# sourceMappingURL=password.js.map

package/dist/password.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"password.js","sourceRoot":"","sources":["../src/password.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAUxD,MAAM,cAAc,GAA6B;IAC/C,SAAS,EAAE,EAAE;IACb,gBAAgB,EAAE,IAAI;IACtB,gBAAgB,EAAE,IAAI;IACtB,cAAc,EAAE,IAAI;IACpB,cAAc,EAAE,IAAI;CACrB,CAAC;AAEF,MAAM,SAAS,GAAG,4BAA4B,CAAC;AAC/C,MAAM,SAAS,GAAG,4BAA4B,CAAC;AAC/C,MAAM,OAAO,GAAG,YAAY,CAAC;AAC7B,MAAM,OAAO,GAAG,4BAA4B,CAAC;AAE7C,6EAA6E;AAC7E,MAAM,UAAU,gBAAgB,CAAC,MAAuB;IACtD,MAAM,CAAC,GAAG,EAAE,GAAG,cAAc,EAAE,GAAG,MAAM,EAAE,CAAC;IAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IAEzC,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,IAAI,CAAC,CAAC,gBAAgB,EAAE,CAAC;QACvB,OAAO,IAAI,SAAS,CAAC;QACrB,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;IACvC,CAAC;IACD,IAAI,CAAC,CAAC,gBAAgB,EAAE,CAAC;QACvB,OAAO,IAAI,SAAS,CAAC;QACrB,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;IACvC,CAAC;IACD,IAAI,CAAC,CAAC,cAAc,EAAE,CAAC;QACrB,OAAO,IAAI,OAAO,CAAC;QACnB,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;IACrC,CAAC;IACD,IAAI,CAAC,CAAC,cAAc,EAAE,CAAC;QACrB,OAAO,IAAI,OAAO,CAAC;QACnB,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;IACrC,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,GAAG,SAAS,GAAG,SAAS,GAAG,OAAO,CAAC;IAC5C,CAAC;IAED,gEAAgE;IAChE,MAAM,SAAS,GAAG,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;IAC3C,MAAM,KAAK,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC;IAC5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,SAAS,EAAE,CAAC,EAAE,EAAE,CAAC;QACnC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;IAClC,CAAC;IAED,4DAA4D;IAC5D,OAAO,CAAC,KAAK,CAAC,CAAC;IAEf,OAAO,IAAI,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;AAC7C,CAAC;AAED,SAAS,UAAU,CAAC,OAAe;IACjC,MAAM,KAAK,GAAG,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC;IACjC,UAAU,CAAC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;IACzC,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;AAC5C,CAAC;AAED,SAAS,OAAO,CAAC,KAAe;IAC9B,KAAK,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC1C,MAAM,YAAY,GAAG,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC;QACxC,UAAU,CAAC,MAAM,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC;QAChD,MAAM,CAAC,GAAG,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACpC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9C,CAAC;AACH,CAAC"}

package/dist/vault/index.d.ts

@@ -0,0 +1,4 @@
+export { Vault } from "./vault.js";
+export type { VaultData, SignupHistoryEntry, PolicyEntry } from "./vault.js";
+export { FileStorage, LocalStorageBackend, MemoryStorage, defaultVaultPath, type StorageBackend, } from "./storage.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/vault/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/vault/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,YAAY,EAAE,SAAS,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAC7E,OAAO,EACL,WAAW,EACX,mBAAmB,EACnB,aAAa,EACb,gBAAgB,EAChB,KAAK,cAAc,GACpB,MAAM,cAAc,CAAC"}

package/dist/vault/index.js

@@ -0,0 +1,3 @@
+export { Vault } from "./vault.js";
+export { FileStorage, LocalStorageBackend, MemoryStorage, defaultVaultPath, } from "./storage.js";
+//# sourceMappingURL=index.js.map

package/dist/vault/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/vault/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAEnC,OAAO,EACL,WAAW,EACX,mBAAmB,EACnB,aAAa,EACb,gBAAgB,GAEjB,MAAM,cAAc,CAAC"}

package/dist/vault/storage.d.ts

@@ -0,0 +1,32 @@
+/** Storage backend interface. The vault doesn't care where the encrypted blob lives. */
+export interface StorageBackend {
+    read(): Promise<string | null>;
+    write(data: string): Promise<void>;
+    exists(): Promise<boolean>;
+}
+/** File-based storage (~/.agent-signup/vault.json). Works in Node.js/Bun. */
+export declare class FileStorage implements StorageBackend {
+    private path;
+    constructor(path: string);
+    read(): Promise<string | null>;
+    write(data: string): Promise<void>;
+    exists(): Promise<boolean>;
+}
+/** localStorage-based storage. Works in browsers. */
+export declare class LocalStorageBackend implements StorageBackend {
+    private key;
+    constructor(key?: string);
+    read(): Promise<string | null>;
+    write(data: string): Promise<void>;
+    exists(): Promise<boolean>;
+}
+/** In-memory storage for testing. */
+export declare class MemoryStorage implements StorageBackend {
+    private data;
+    read(): Promise<string | null>;
+    write(data: string): Promise<void>;
+    exists(): Promise<boolean>;
+}
+/** Get the default vault file path. */
+export declare function defaultVaultPath(): string;
+//# sourceMappingURL=storage.d.ts.map

package/dist/vault/storage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.d.ts","sourceRoot":"","sources":["../../src/vault/storage.ts"],"names":[],"mappings":"AAAA,wFAAwF;AACxF,MAAM,WAAW,cAAc;IAC7B,IAAI,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC/B,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnC,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;CAC5B;AAED,6EAA6E;AAC7E,qBAAa,WAAY,YAAW,cAAc;IACpC,OAAO,CAAC,IAAI;gBAAJ,IAAI,EAAE,MAAM;IAE1B,IAAI,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAS9B,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAOlC,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC;CASjC;AAED,qDAAqD;AACrD,qBAAa,mBAAoB,YAAW,cAAc;IAC5C,OAAO,CAAC,GAAG;gBAAH,GAAG,GAAE,MAA6B;IAEhD,IAAI,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAI9B,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIlC,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC;CAGjC;AAED,qCAAqC;AACrC,qBAAa,aAAc,YAAW,cAAc;IAClD,OAAO,CAAC,IAAI,CAAuB;IAE7B,IAAI,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAI9B,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIlC,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC;CAGjC;AAED,uCAAuC;AACvC,wBAAgB,gBAAgB,IAAI,MAAM,CAMzC"}

package/dist/vault/storage.js

@@ -0,0 +1,69 @@
+/** File-based storage (~/.agent-signup/vault.json). Works in Node.js/Bun. */
+export class FileStorage {
+    path;
+    constructor(path) {
+        this.path = path;
+    }
+    async read() {
+        try {
+            const fs = await import("node:fs/promises");
+            return await fs.readFile(this.path, "utf-8");
+        }
+        catch {
+            return null;
+        }
+    }
+    async write(data) {
+        const fs = await import("node:fs/promises");
+        const path = await import("node:path");
+        await fs.mkdir(path.dirname(this.path), { recursive: true });
+        await fs.writeFile(this.path, data, "utf-8");
+    }
+    async exists() {
+        try {
+            const fs = await import("node:fs/promises");
+            await fs.access(this.path);
+            return true;
+        }
+        catch {
+            return false;
+        }
+    }
+}
+/** localStorage-based storage. Works in browsers. */
+export class LocalStorageBackend {
+    key;
+    constructor(key = "agent-signup:vault") {
+        this.key = key;
+    }
+    async read() {
+        return globalThis.localStorage?.getItem(this.key) ?? null;
+    }
+    async write(data) {
+        globalThis.localStorage?.setItem(this.key, data);
+    }
+    async exists() {
+        return globalThis.localStorage?.getItem(this.key) !== null;
+    }
+}
+/** In-memory storage for testing. */
+export class MemoryStorage {
+    data = null;
+    async read() {
+        return this.data;
+    }
+    async write(data) {
+        this.data = data;
+    }
+    async exists() {
+        return this.data !== null;
+    }
+}
+/** Get the default vault file path. */
+export function defaultVaultPath() {
+    const home = typeof process !== "undefined"
+        ? process.env.HOME || process.env.USERPROFILE || "."
+        : ".";
+    return `${home}/.agent-signup/vault.json`;
+}
+//# sourceMappingURL=storage.js.map

package/dist/vault/storage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.js","sourceRoot":"","sources":["../../src/vault/storage.ts"],"names":[],"mappings":"AAOA,6EAA6E;AAC7E,MAAM,OAAO,WAAW;IACF;IAApB,YAAoB,IAAY;QAAZ,SAAI,GAAJ,IAAI,CAAQ;IAAG,CAAC;IAEpC,KAAK,CAAC,IAAI;QACR,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;YAC5C,OAAO,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC/C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,IAAY;QACtB,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;QAC5C,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;QACvC,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7D,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IAC/C,CAAC;IAED,KAAK,CAAC,MAAM;QACV,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;YAC5C,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC3B,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;CACF;AAED,qDAAqD;AACrD,MAAM,OAAO,mBAAmB;IACV;IAApB,YAAoB,MAAc,oBAAoB;QAAlC,QAAG,GAAH,GAAG,CAA+B;IAAG,CAAC;IAE1D,KAAK,CAAC,IAAI;QACR,OAAO,UAAU,CAAC,YAAY,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC;IAC5D,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,IAAY;QACtB,UAAU,CAAC,YAAY,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACnD,CAAC;IAED,KAAK,CAAC,MAAM;QACV,OAAO,UAAU,CAAC,YAAY,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC;IAC7D,CAAC;CACF;AAED,qCAAqC;AACrC,MAAM,OAAO,aAAa;IAChB,IAAI,GAAkB,IAAI,CAAC;IAEnC,KAAK,CAAC,IAAI;QACR,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,IAAY;QACtB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,MAAM;QACV,OAAO,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC;IAC5B,CAAC;CACF;AAED,uCAAuC;AACvC,MAAM,UAAU,gBAAgB;IAC9B,MAAM,IAAI,GACR,OAAO,OAAO,KAAK,WAAW;QAC5B,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,GAAG;QACpD,CAAC,CAAC,GAAG,CAAC;IACV,OAAO,GAAG,IAAI,2BAA2B,CAAC;AAC5C,CAAC"}

package/dist/vault/vault.d.ts

@@ -0,0 +1,82 @@
+import { type KeyPair, SensitiveString } from "@vouchagents/protocol";
+import type { StorageBackend } from "./storage.js";
+export interface VaultData {
+    fields: Record<string, string>;
+    passwords: Record<string, string>;
+    history: SignupHistoryEntry[];
+    policies: PolicyEntry[];
+    custom: Record<string, string>;
+}
+export interface SignupHistoryEntry {
+    id: string;
+    site: string;
+    siteUrl: string;
+    fields: string[];
+    consentMode: "explicit" | "pre_authorized" | "manual";
+    status: "pending" | "verified" | "expired" | "failed" | "user_directed";
+    timestamp: string;
+}
+export interface PolicyEntry {
+    id: string;
+    name: string;
+    scopes: string[];
+    allowedOrigins: string[];
+    allowedFields: string[];
+    maxUses?: number;
+    remainingUses?: number;
+    expiresAt: string;
+    createdAt: string;
+}
+export declare class Vault {
+    private storage;
+    private encryptionKey;
+    private keyPair;
+    private data;
+    private vaultFile;
+    private lockedAt;
+    private readonly autoLockMs;
+    private constructor();
+    /** Create a new vault with a passphrase. */
+    static create(options: {
+        passphrase: string;
+        storage: StorageBackend;
+    }): Promise<Vault>;
+    /** Open an existing vault with a passphrase. */
+    static open(options: {
+        passphrase: string;
+        storage: StorageBackend;
+    }): Promise<Vault>;
+    /** Check if a vault exists at the storage location. */
+    static exists(storage: StorageBackend): Promise<boolean>;
+    setField(name: string, value: string): Promise<void>;
+    getField(name: string): Promise<SensitiveString | null>;
+    listFields(): Promise<string[]>;
+    getFieldsRaw(fieldNames: string[]): Promise<Record<string, string>>;
+    setPassword(siteUrl: string, password: SensitiveString): Promise<void>;
+    getPassword(siteUrl: string): Promise<SensitiveString | null>;
+    setCustomField(name: string, value: string): Promise<void>;
+    addHistory(entry: SignupHistoryEntry): Promise<void>;
+    getHistory(options?: {
+        limit?: number;
+        siteUrl?: string;
+    }): Promise<SignupHistoryEntry[]>;
+    addPolicy(policy: PolicyEntry): Promise<void>;
+    getPolicies(): Promise<PolicyEntry[]>;
+    removePolicy(policyId: string): Promise<void>;
+    findMatchingPolicy(origin: string, fields: string[]): Promise<PolicyEntry | null>;
+    getIdentity(): {
+        publicKey: string;
+        keyId: string;
+    };
+    getKeyPair(): KeyPair;
+    isUnlocked(): boolean;
+    lock(): void;
+    export(): Promise<string>;
+    static import(exported: string, options: {
+        passphrase: string;
+        storage: StorageBackend;
+    }): Promise<Vault>;
+    private ensureUnlocked;
+    private save;
+}
+//# sourceMappingURL=vault.d.ts.map

package/dist/vault/vault.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vault.d.ts","sourceRoot":"","sources":["../../src/vault/vault.ts"],"names":[],"mappings":"AAAA,OAAO,EAQL,KAAK,OAAO,EACZ,eAAe,EAChB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAEnD,MAAM,WAAW,SAAS;IACxB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAClC,OAAO,EAAE,kBAAkB,EAAE,CAAC;IAC9B,QAAQ,EAAE,WAAW,EAAE,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAChC;AAED,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,WAAW,EAAE,UAAU,GAAG,gBAAgB,GAAG,QAAQ,CAAC;IACtD,MAAM,EAAE,SAAS,GAAG,UAAU,GAAG,SAAS,GAAG,QAAQ,GAAG,eAAe,CAAC;IACxE,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAgBD,qBAAa,KAAK;IAQI,OAAO,CAAC,OAAO;IAPnC,OAAO,CAAC,aAAa,CAA0B;IAC/C,OAAO,CAAC,OAAO,CAAwB;IACvC,OAAO,CAAC,IAAI,CAA0B;IACtC,OAAO,CAAC,SAAS,CAA0B;IAC3C,OAAO,CAAC,QAAQ,CAAa;IAC7B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAkB;IAE7C,OAAO;IAEP,4CAA4C;WAC/B,MAAM,CAAC,OAAO,EAAE;QAC3B,UAAU,EAAE,MAAM,CAAC;QACnB,OAAO,EAAE,cAAc,CAAC;KACzB,GAAG,OAAO,CAAC,KAAK,CAAC;IAmClB,gDAAgD;WACnC,IAAI,CAAC,OAAO,EAAE;QACzB,UAAU,EAAE,MAAM,CAAC;QACnB,OAAO,EAAE,cAAc,CAAC;KACzB,GAAG,OAAO,CAAC,KAAK,CAAC;IAoClB,uDAAuD;WAC1C,MAAM,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC;IAMxD,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAMpD,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC;IAMvD,UAAU,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;IAK/B,YAAY,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAYnE,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC;IAMtE,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC;IAQ7D,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQ1D,UAAU,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC;IAMpD,UAAU,CAAC,OAAO,CAAC,EAAE;QACzB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC;IAc3B,SAAS,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAM7C,WAAW,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;IAOrC,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAM7C,kBAAkB,CACtB,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EAAE,GACf,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IAkB9B,WAAW,IAAI;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE;IAQnD,UAAU,IAAI,OAAO;IAOrB,UAAU,IAAI,OAAO;IASrB,IAAI,IAAI,IAAI;IAQN,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;WAMlB,MAAM,CACjB,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,cAAc,CAAA;KAAE,GACvD,OAAO,CAAC,KAAK,CAAC;IAOjB,OAAO,CAAC,cAAc;YAOR,IAAI;CAoBnB"}

package/dist/vault/vault.js

@@ -0,0 +1,231 @@
+import { generateKeyPair, deriveEncryptionKey, encrypt, decrypt, generateSalt, base64urlEncode, base64urlDecode, SensitiveString, } from "@vouchagents/protocol";
+export class Vault {
+    storage;
+    encryptionKey = null;
+    keyPair = null;
+    data = null;
+    vaultFile = null;
+    lockedAt = 0;
+    autoLockMs = 15 * 60 * 1000; // 15 minutes
+    constructor(storage) {
+        this.storage = storage;
+    }
+    /** Create a new vault with a passphrase. */
+    static async create(options) {
+        const vault = new Vault(options.storage);
+        const salt = generateSalt();
+        const encryptionKey = await deriveEncryptionKey(options.passphrase, salt);
+        const keyPair = await generateKeyPair();
+        vault.encryptionKey = encryptionKey;
+        vault.keyPair = keyPair;
+        vault.data = {
+            fields: {},
+            passwords: {},
+            history: [],
+            policies: [],
+            custom: {},
+        };
+        vault.vaultFile = {
+            version: 1,
+            kdf: {
+                algorithm: "pbkdf2",
+                iterations: 600_000,
+                salt: base64urlEncode(salt),
+            },
+            vault: "", // filled on save
+            vault_iv: "",
+            signing_public_key: base64urlEncode(keyPair.publicKey),
+            created_at: new Date().toISOString(),
+            updated_at: new Date().toISOString(),
+        };
+        vault.lockedAt = Date.now();
+        await vault.save();
+        return vault;
+    }
+    /** Open an existing vault with a passphrase. */
+    static async open(options) {
+        const vault = new Vault(options.storage);
+        const raw = await options.storage.read();
+        if (!raw) {
+            throw new Error("No vault found");
+        }
+        const vaultFile = JSON.parse(raw);
+        vault.vaultFile = vaultFile;
+        const salt = base64urlDecode(vaultFile.kdf.salt);
+        const encryptionKey = await deriveEncryptionKey(options.passphrase, salt);
+        vault.encryptionKey = encryptionKey;
+        // Decrypt the vault data
+        const ciphertext = base64urlDecode(vaultFile.vault);
+        const iv = base64urlDecode(vaultFile.vault_iv);
+        try {
+            const decrypted = await decrypt(ciphertext, encryptionKey, iv);
+            const json = new TextDecoder().decode(decrypted);
+            const parsed = JSON.parse(json);
+            vault.data = parsed.data;
+            vault.keyPair = {
+                publicKey: base64urlDecode(vaultFile.signing_public_key),
+                privateKey: base64urlDecode(parsed.privateKey),
+                keyId: parsed.keyId,
+            };
+        }
+        catch {
+            throw new Error("Wrong passphrase");
+        }
+        vault.lockedAt = Date.now();
+        return vault;
+    }
+    /** Check if a vault exists at the storage location. */
+    static async exists(storage) {
+        return storage.exists();
+    }
+    // --- Field operations ---
+    async setField(name, value) {
+        this.ensureUnlocked();
+        this.data.fields[name] = value;
+        await this.save();
+    }
+    async getField(name) {
+        this.ensureUnlocked();
+        const value = this.data.fields[name];
+        return value ? new SensitiveString(value) : null;
+    }
+    async listFields() {
+        this.ensureUnlocked();
+        return Object.keys(this.data.fields);
+    }
+    async getFieldsRaw(fieldNames) {
+        this.ensureUnlocked();
+        const result = {};
+        for (const name of fieldNames) {
+            const value = this.data.fields[name] ?? this.data.custom[name];
+            if (value)
+                result[name] = value;
+        }
+        return result;
+    }
+    // --- Password operations ---
+    async setPassword(siteUrl, password) {
+        this.ensureUnlocked();
+        this.data.passwords[siteUrl] = password.unsafeUnwrap();
+        await this.save();
+    }
+    async getPassword(siteUrl) {
+        this.ensureUnlocked();
+        const value = this.data.passwords[siteUrl];
+        return value ? new SensitiveString(value) : null;
+    }
+    // --- Custom fields ---
+    async setCustomField(name, value) {
+        this.ensureUnlocked();
+        this.data.custom[name] = value;
+        await this.save();
+    }
+    // --- History ---
+    async addHistory(entry) {
+        this.ensureUnlocked();
+        this.data.history.unshift(entry);
+        await this.save();
+    }
+    async getHistory(options) {
+        this.ensureUnlocked();
+        let entries = this.data.history;
+        if (options?.siteUrl) {
+            entries = entries.filter((e) => e.siteUrl === options.siteUrl);
+        }
+        if (options?.limit) {
+            entries = entries.slice(0, options.limit);
+        }
+        return entries;
+    }
+    // --- Policies ---
+    async addPolicy(policy) {
+        this.ensureUnlocked();
+        this.data.policies.push(policy);
+        await this.save();
+    }
+    async getPolicies() {
+        this.ensureUnlocked();
+        return this.data.policies.filter((p) => new Date(p.expiresAt) > new Date());
+    }
+    async removePolicy(policyId) {
+        this.ensureUnlocked();
+        this.data.policies = this.data.policies.filter((p) => p.id !== policyId);
+        await this.save();
+    }
+    async findMatchingPolicy(origin, fields) {
+        this.ensureUnlocked();
+        const now = new Date();
+        return (this.data.policies.find((p) => {
+            if (new Date(p.expiresAt) <= now)
+                return false;
+            if (p.remainingUses !== undefined && p.remainingUses <= 0)
+                return false;
+            const originMatch = p.allowedOrigins.some((o) => o === "*" || origin.includes(o));
+            if (!originMatch)
+                return false;
+            return fields.every((f) => p.allowedFields.includes(f));
+        }) ?? null);
+    }
+    // --- Identity ---
+    getIdentity() {
+        this.ensureUnlocked();
+        return {
+            publicKey: base64urlEncode(this.keyPair.publicKey),
+            keyId: this.keyPair.keyId,
+        };
+    }
+    getKeyPair() {
+        this.ensureUnlocked();
+        return this.keyPair;
+    }
+    // --- Lock/unlock ---
+    isUnlocked() {
+        if (!this.encryptionKey || !this.data)
+            return false;
+        if (Date.now() - this.lockedAt > this.autoLockMs) {
+            this.lock();
+            return false;
+        }
+        return true;
+    }
+    lock() {
+        this.encryptionKey = null;
+        this.keyPair = null;
+        this.data = null;
+    }
+    // --- Export/import ---
+    async export() {
+        const raw = await this.storage.read();
+        if (!raw)
+            throw new Error("No vault to export");
+        return raw;
+    }
+    static async import(exported, options) {
+        await options.storage.write(exported);
+        return Vault.open(options);
+    }
+    // --- Internal ---
+    ensureUnlocked() {
+        if (!this.isUnlocked()) {
+            throw new Error("Vault is locked");
+        }
+        this.lockedAt = Date.now(); // reset idle timer
+    }
+    async save() {
+        if (!this.encryptionKey || !this.data || !this.keyPair || !this.vaultFile) {
+            throw new Error("Cannot save: vault not initialized");
+        }
+        const plaintext = JSON.stringify({
+            data: this.data,
+            privateKey: base64urlEncode(this.keyPair.privateKey),
+            keyId: this.keyPair.keyId,
+        });
+        const encoded = new TextEncoder().encode(plaintext);
+        const { ciphertext, iv } = await encrypt(encoded, this.encryptionKey);
+        this.vaultFile.vault = base64urlEncode(ciphertext);
+        this.vaultFile.vault_iv = base64urlEncode(iv);
+        this.vaultFile.updated_at = new Date().toISOString();
+        await this.storage.write(JSON.stringify(this.vaultFile, null, 2));
+    }
+}
+//# sourceMappingURL=vault.js.map