@zcloak/ai-agent 1.0.0

package/dist/register.js

@@ -0,0 +1,191 @@
+#!/usr/bin/env node
+"use strict";
+/**
+ * zCloak.ai Agent Registration Management Script
+ *
+ * Provides agent name query, registration, and owner relationship query functions.
+ * Uses @dfinity JS SDK to interact directly with ICP canister, no dfx required.
+ *
+ * Usage:
+ *   zcloak-ai register get-principal                         Get current identity's principal ID
+ *   zcloak-ai register lookup                                Query current principal's agent name
+ *   zcloak-ai register lookup-by-name <agent_name>           Look up principal by agent name
+ *   zcloak-ai register lookup-by-principal <principal>        Look up agent name by principal
+ *   zcloak-ai register register <base_name>                  Register new agent name
+ *   zcloak-ai register get-owner <principal>                  Query agent's owner (binding relationship)
+ *
+ * All commands support --identity=<pem_path> to specify identity file.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.run = run;
+const utils_1 = require("./utils");
+// ========== Help Information ==========
+function showHelp() {
+    console.log('zCloak.ai Agent Registration Management');
+    console.log('');
+    console.log('Usage:');
+    console.log('  zcloak-ai register get-principal                      Get current principal ID');
+    console.log('  zcloak-ai register lookup                             Query current principal\'s agent name');
+    console.log('  zcloak-ai register lookup-by-name <agent_name>        Look up principal by agent name');
+    console.log('  zcloak-ai register lookup-by-principal <principal>     Look up agent name by principal');
+    console.log('  zcloak-ai register register <base_name>               Register new agent name');
+    console.log('  zcloak-ai register get-owner <principal>               Query agent\'s owner');
+    console.log('');
+    console.log('Options:');
+    console.log('  --identity=<pem_path>     Specify identity PEM file');
+    console.log('');
+    console.log('Examples:');
+    console.log('  zcloak-ai register get-principal');
+    console.log('  zcloak-ai register register my-agent');
+    console.log('  zcloak-ai register lookup-by-name "runner#8939.agent"');
+}
+// ========== Command Implementations ==========
+/** Get current identity's principal ID (read from PEM file) */
+function cmdGetPrincipal(session) {
+    const principal = session.getPrincipal();
+    console.log(principal);
+}
+/** Query current principal's agent name */
+async function cmdLookup(session) {
+    const principal = session.getPrincipal();
+    console.error(`Current principal: ${principal}`);
+    const actor = await session.getAnonymousRegistryActor();
+    const result = await actor.get_username_by_principal(principal);
+    console.log((0, utils_1.formatOptText)(result));
+}
+/** Look up agent name by principal */
+async function cmdLookupByPrincipal(session, principal) {
+    if (!principal) {
+        console.error('Error: principal ID is required');
+        console.error('Usage: zcloak-ai register lookup-by-principal <principal>');
+        process.exit(1);
+    }
+    const actor = await session.getAnonymousRegistryActor();
+    const result = await actor.get_username_by_principal(principal);
+    console.log((0, utils_1.formatOptText)(result));
+}
+/** Look up principal by agent name */
+async function cmdLookupByName(session, agentName) {
+    if (!agentName) {
+        console.error('Error: agent name is required');
+        console.error('Usage: zcloak-ai register lookup-by-name <agent_name>');
+        process.exit(1);
+    }
+    const actor = await session.getAnonymousRegistryActor();
+    const result = await actor.get_user_principal(agentName);
+    // opt Principal → output text format
+    if (result && result.length > 0) {
+        const principal = result[0];
+        console.log(`(opt principal "${principal.toText()}")`);
+    }
+    else {
+        console.log('(null)');
+    }
+}
+/** Register new agent name (requires identity, update call) */
+async function cmdRegister(session, baseName) {
+    if (!baseName) {
+        console.error('Error: base name is required');
+        console.error('Usage: zcloak-ai register register <base_name>');
+        process.exit(1);
+    }
+    const actor = await session.getRegistryActor();
+    const result = await actor.register_agent(baseName);
+    // Output variant { Ok = record { ... } } or { Err = "..." }
+    if ('Ok' in result) {
+        console.log(`(variant { Ok = record { username = "${result.Ok.username}" } })`);
+    }
+    else if ('Err' in result) {
+        console.log(`(variant { Err = "${result.Err}" })`);
+    }
+    else {
+        console.log(JSON.stringify(result, null, 2));
+    }
+}
+/** Query agent's owner (binding relationship) */
+async function cmdGetOwner(session, principalOrName) {
+    if (!principalOrName) {
+        console.error('Error: principal or agent name is required');
+        console.error('Usage: zcloak-ai register get-owner <principal_or_agent_name>');
+        process.exit(1);
+    }
+    const actor = await session.getAnonymousRegistryActor();
+    // Determine if it's a principal or agent name (agent name contains # and .agent)
+    const isAgentName = principalOrName.includes('#') && principalOrName.includes('.agent');
+    let profile;
+    if (isAgentName) {
+        // Query by agent name directly via user_profile_get
+        profile = await actor.user_profile_get(principalOrName);
+    }
+    else {
+        // Query by principal directly
+        profile = await actor.user_profile_get_by_principal(principalOrName);
+    }
+    // Format output UserProfile
+    if (profile && profile.length > 0) {
+        const p = profile[0];
+        const lines = [];
+        lines.push(`  username = "${p.username}"`);
+        if (p.principal_id && p.principal_id.length > 0) {
+            lines.push(`  principal_id = opt "${p.principal_id[0]}"`);
+        }
+        if (p.ai_profile && p.ai_profile.length > 0) {
+            const ap = p.ai_profile[0];
+            if (ap.position && ap.position.length > 0) {
+                const pos = ap.position[0];
+                lines.push(`  is_human = ${pos.is_human}`);
+                if (pos.connection_list && pos.connection_list.length > 0) {
+                    const connList = pos.connection_list
+                        .map(c => `    principal "${c.toText()}"`)
+                        .join('\n');
+                    lines.push(`  connection_list = vec {\n${connList}\n  }`);
+                }
+            }
+        }
+        console.log(`(opt record {\n${lines.join('\n')}\n})`);
+    }
+    else {
+        console.log('(null)');
+    }
+}
+// ========== Exported run() — called by cli.ts ==========
+/**
+ * Entry point when invoked via cli.ts.
+ * Receives a Session instance with pre-parsed arguments.
+ */
+async function run(session) {
+    const command = session.args._args[0];
+    try {
+        switch (command) {
+            case 'get-principal':
+                cmdGetPrincipal(session);
+                break;
+            case 'lookup':
+                await cmdLookup(session);
+                break;
+            case 'lookup-by-name':
+                await cmdLookupByName(session, session.args._args[1]);
+                break;
+            case 'lookup-by-principal':
+                await cmdLookupByPrincipal(session, session.args._args[1]);
+                break;
+            case 'register':
+                await cmdRegister(session, session.args._args[1]);
+                break;
+            case 'get-owner':
+                await cmdGetOwner(session, session.args._args[1]);
+                break;
+            default:
+                showHelp();
+                if (command) {
+                    console.error(`\nUnknown command: ${command}`);
+                }
+                process.exit(1);
+        }
+    }
+    catch (err) {
+        console.error(`Operation failed: ${err instanceof Error ? err.message : String(err)}`);
+        process.exit(1);
+    }
+}
+//# sourceMappingURL=register.js.map

package/dist/register.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"register.js","sourceRoot":"","sources":["../src/register.ts"],"names":[],"mappings":";;AACA;;;;;;;;;;;;;;;GAeG;;AA0JH,kBAkCC;AA1LD,mCAAwC;AAGxC,yCAAyC;AACzC,SAAS,QAAQ;IACf,OAAO,CAAC,GAAG,CAAC,yCAAyC,CAAC,CAAC;IACvD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACtB,OAAO,CAAC,GAAG,CAAC,kFAAkF,CAAC,CAAC;IAChG,OAAO,CAAC,GAAG,CAAC,+FAA+F,CAAC,CAAC;IAC7G,OAAO,CAAC,GAAG,CAAC,yFAAyF,CAAC,CAAC;IACvG,OAAO,CAAC,GAAG,CAAC,0FAA0F,CAAC,CAAC;IACxG,OAAO,CAAC,GAAG,CAAC,iFAAiF,CAAC,CAAC;IAC/F,OAAO,CAAC,GAAG,CAAC,+EAA+E,CAAC,CAAC;IAC7F,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACxB,OAAO,CAAC,GAAG,CAAC,uDAAuD,CAAC,CAAC;IACrE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACzB,OAAO,CAAC,GAAG,CAAC,oCAAoC,CAAC,CAAC;IAClD,OAAO,CAAC,GAAG,CAAC,wCAAwC,CAAC,CAAC;IACtD,OAAO,CAAC,GAAG,CAAC,yDAAyD,CAAC,CAAC;AACzE,CAAC;AAED,gDAAgD;AAEhD,+DAA+D;AAC/D,SAAS,eAAe,CAAC,OAAgB;IACvC,MAAM,SAAS,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;IACzC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;AACzB,CAAC;AAED,2CAA2C;AAC3C,KAAK,UAAU,SAAS,CAAC,OAAgB;IACvC,MAAM,SAAS,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;IACzC,OAAO,CAAC,KAAK,CAAC,sBAAsB,SAAS,EAAE,CAAC,CAAC;IAEjD,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,yBAAyB,EAAE,CAAC;IACxD,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,yBAAyB,CAAC,SAAS,CAAC,CAAC;IAChE,OAAO,CAAC,GAAG,CAAC,IAAA,qBAAa,EAAC,MAAM,CAAC,CAAC,CAAC;AACrC,CAAC;AAED,sCAAsC;AACtC,KAAK,UAAU,oBAAoB,CAAC,OAAgB,EAAE,SAA6B;IACjF,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACjD,OAAO,CAAC,KAAK,CAAC,2DAA2D,CAAC,CAAC;QAC3E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,yBAAyB,EAAE,CAAC;IACxD,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,yBAAyB,CAAC,SAAS,CAAC,CAAC;IAChE,OAAO,CAAC,GAAG,CAAC,IAAA,qBAAa,EAAC,MAAM,CAAC,CAAC,CAAC;AACrC,CAAC;AAED,sCAAsC;AACtC,KAAK,UAAU,eAAe,CAAC,OAAgB,EAAE,SAA6B;IAC5E,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC;QAC/C,OAAO,CAAC,KAAK,CAAC,uDAAuD,CAAC,CAAC;QACvE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,yBAAyB,EAAE,CAAC;IACxD,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC;IAEzD,qCAAqC;IACrC,IAAI,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChC,MAAM,SAAS,GAAG,MAAM,CAAC,CAAC,CAAE,CAAC;QAC7B,OAAO,CAAC,GAAG,CAAC,mBAAmB,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACzD,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACxB,CAAC;AACH,CAAC;AAED,+DAA+D;AAC/D,KAAK,UAAU,WAAW,CAAC,OAAgB,EAAE,QAA4B;IACvE,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAC9C,OAAO,CAAC,KAAK,CAAC,gDAAgD,CAAC,CAAC;QAChE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,gBAAgB,EAAE,CAAC;IAC/C,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;IAEpD,4DAA4D;IAC5D,IAAI,IAAI,IAAI,MAAM,EAAE,CAAC;QACnB,OAAO,CAAC,GAAG,CAAC,wCAAwC,MAAM,CAAC,EAAE,CAAC,QAAQ,QAAQ,CAAC,CAAC;IAClF,CAAC;SAAM,IAAI,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,OAAO,CAAC,GAAG,CAAC,qBAAqB,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC;IACrD,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC/C,CAAC;AACH,CAAC;AAED,iDAAiD;AACjD,KAAK,UAAU,WAAW,CAAC,OAAgB,EAAE,eAAmC;IAC9E,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,OAAO,CAAC,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAC5D,OAAO,CAAC,KAAK,CAAC,+DAA+D,CAAC,CAAC;QAC/E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,yBAAyB,EAAE,CAAC;IAExD,iFAAiF;IACjF,MAAM,WAAW,GAAG,eAAe,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,eAAe,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAExF,IAAI,OAAO,CAAC;IAEZ,IAAI,WAAW,EAAE,CAAC;QAChB,oDAAoD;QACpD,OAAO,GAAG,MAAM,KAAK,CAAC,gBAAgB,CAAC,eAAe,CAAC,CAAC;IAC1D,CAAC;SAAM,CAAC;QACN,8BAA8B;QAC9B,OAAO,GAAG,MAAM,KAAK,CAAC,6BAA6B,CAAC,eAAe,CAAC,CAAC;IACvE,CAAC;IAED,4BAA4B;IAC5B,IAAI,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClC,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAE,CAAC;QACtB,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC;QAC3C,IAAI,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChD,KAAK,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC,YAAY,CAAC,CAAC,CAAE,GAAG,CAAC,CAAC;QAC7D,CAAC;QACD,IAAI,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5C,MAAM,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAE,CAAC;YAC5B,IAAI,EAAE,CAAC,QAAQ,IAAI,EAAE,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC1C,MAAM,GAAG,GAAG,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC;gBAC5B,KAAK,CAAC,IAAI,CAAC,gBAAgB,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;gBAC3C,IAAI,GAAG,CAAC,eAAe,IAAI,GAAG,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC1D,MAAM,QAAQ,GAAG,GAAG,CAAC,eAAe;yBACjC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC,MAAM,EAAE,GAAG,CAAC;yBACzC,IAAI,CAAC,IAAI,CAAC,CAAC;oBACd,KAAK,CAAC,IAAI,CAAC,8BAA8B,QAAQ,OAAO,CAAC,CAAC;gBAC5D,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,kBAAkB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACxD,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACxB,CAAC;AACH,CAAC;AAED,0DAA0D;AAE1D;;;GAGG;AACI,KAAK,UAAU,GAAG,CAAC,OAAgB;IACxC,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAEtC,IAAI,CAAC;QACH,QAAQ,OAAO,EAAE,CAAC;YAChB,KAAK,eAAe;gBAClB,eAAe,CAAC,OAAO,CAAC,CAAC;gBACzB,MAAM;YACR,KAAK,QAAQ;gBACX,MAAM,SAAS,CAAC,OAAO,CAAC,CAAC;gBACzB,MAAM;YACR,KAAK,gBAAgB;gBACnB,MAAM,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;gBACtD,MAAM;YACR,KAAK,qBAAqB;gBACxB,MAAM,oBAAoB,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC3D,MAAM;YACR,KAAK,UAAU;gBACb,MAAM,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;gBAClD,MAAM;YACR,KAAK,WAAW;gBACd,MAAM,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;gBAClD,MAAM;YACR;gBACE,QAAQ,EAAE,CAAC;gBACX,IAAI,OAAO,EAAE,CAAC;oBACZ,OAAO,CAAC,KAAK,CAAC,sBAAsB,OAAO,EAAE,CAAC,CAAC;gBACjD,CAAC;gBACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,qBAAqB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACvF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC"}

package/dist/rpc.d.ts

@@ -0,0 +1,107 @@
+/**
+ * JSON-RPC Protocol Types — newline-delimited JSON over stdin/stdout or Unix Socket
+ *
+ * Protocol specification:
+ *   - One JSON object per line (newline-delimited)
+ *   - Request: {"id": <number|string>, "method": <string>, "params": <object>}
+ *   - Response: {"id": <same>, "result": <object>} or {"id": <same>, "error": <string>}
+ *
+ * Supported methods:
+ *   encrypt   — Encrypt file or inline data using the held AES-256 key
+ *   decrypt   — Decrypt file or inline data using the held AES-256 key
+ *   status    — Query daemon status (derivation_id, principal, uptime)
+ *   quit      — Close current connection (UDS mode) or stop daemon (stdio mode)
+ *   shutdown  — Stop the entire daemon gracefully (UDS mode only)
+ */
+/** JSON-RPC request wrapper (simplified JSON-RPC 2.0 without "jsonrpc" field) */
+export interface RpcRequest {
+    /** Request ID for matching responses (number or string) */
+    id: number | string | null;
+    /** Method name: "encrypt", "decrypt", "status", "quit", or "shutdown" */
+    method: string;
+    /** Method parameters (optional, defaults to null) */
+    params?: Record<string, unknown>;
+}
+/**
+ * Parameters for the "encrypt" method.
+ *
+ * Two modes:
+ *   1. File mode: specify `input_file` + `output_file`, reads/writes files on disk
+ *   2. Inline mode: specify `data_base64`, returns result as base64 (no file I/O)
+ */
+export interface EncryptParams {
+    /** Input file path (mutually exclusive with data_base64) */
+    input_file?: string;
+    /** Output file path (required in file mode) */
+    output_file?: string;
+    /** Inline plaintext as base64 (mutually exclusive with input_file) */
+    data_base64?: string;
+}
+/**
+ * Parameters for the "decrypt" method.
+ * Same two modes as EncryptParams (file mode vs inline mode).
+ */
+export interface DecryptParams {
+    /** Input file path (mutually exclusive with data_base64) */
+    input_file?: string;
+    /** Output file path (required in file mode) */
+    output_file?: string;
+    /** Inline ciphertext as base64 (mutually exclusive with input_file) */
+    data_base64?: string;
+}
+/** JSON-RPC response wrapper. Exactly one of `result` or `error` will be present. */
+export interface RpcResponse {
+    /** Matching request ID */
+    id: number | string | null;
+    /** Success result (present on success) */
+    result?: unknown;
+    /** Error message (present on failure) */
+    error?: string;
+}
+/** Result payload for the "encrypt" method */
+export interface EncryptResult {
+    /** Output file path (file mode only) */
+    output_file?: string;
+    /** Base64-encoded ciphertext (inline mode only) */
+    data_base64?: string;
+    /** Original plaintext size in bytes */
+    plaintext_size: number;
+    /** Ciphertext size in bytes (includes nonce + GCM tag overhead) */
+    ciphertext_size: number;
+}
+/** Result payload for the "decrypt" method */
+export interface DecryptResult {
+    /** Output file path (file mode only) */
+    output_file?: string;
+    /** Base64-encoded plaintext (inline mode only) */
+    data_base64?: string;
+    /** Decrypted plaintext size in bytes */
+    plaintext_size: number;
+}
+/** Result payload for the "status" method */
+export interface StatusResult {
+    /** Daemon status (always "running" while daemon is alive) */
+    status: "running";
+    /** Derivation ID used for this session's key (e.g. "{principal}:default") */
+    derivation_id: string;
+    /** Authenticated principal text */
+    principal: string;
+    /** Daemon start timestamp (ISO 8601) */
+    started_at: string;
+    /** Daemon mode: "uds" or "stdio" */
+    mode?: string;
+    /** Unix socket path (UDS mode only) */
+    socket_path?: string;
+}
+/** Create a JSON-RPC success response */
+export declare function successResponse(id: number | string | null, result: unknown): RpcResponse;
+/** Create a JSON-RPC error response */
+export declare function errorResponse(id: number | string | null, error: string): RpcResponse;
+/**
+ * Parse a JSON line into an RpcRequest.
+ * Returns the parsed request, or an error response if parsing fails.
+ */
+export declare function parseRpcRequest(line: string): RpcRequest | RpcResponse;
+/** Check if a value is an RpcResponse (used for distinguishing parse errors from valid requests) */
+export declare function isErrorResponse(value: RpcRequest | RpcResponse): value is RpcResponse;
+//# sourceMappingURL=rpc.d.ts.map

package/dist/rpc.js

@@ -0,0 +1,60 @@
+"use strict";
+/**
+ * JSON-RPC Protocol Types — newline-delimited JSON over stdin/stdout or Unix Socket
+ *
+ * Protocol specification:
+ *   - One JSON object per line (newline-delimited)
+ *   - Request: {"id": <number|string>, "method": <string>, "params": <object>}
+ *   - Response: {"id": <same>, "result": <object>} or {"id": <same>, "error": <string>}
+ *
+ * Supported methods:
+ *   encrypt   — Encrypt file or inline data using the held AES-256 key
+ *   decrypt   — Decrypt file or inline data using the held AES-256 key
+ *   status    — Query daemon status (derivation_id, principal, uptime)
+ *   quit      — Close current connection (UDS mode) or stop daemon (stdio mode)
+ *   shutdown  — Stop the entire daemon gracefully (UDS mode only)
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.successResponse = successResponse;
+exports.errorResponse = errorResponse;
+exports.parseRpcRequest = parseRpcRequest;
+exports.isErrorResponse = isErrorResponse;
+// ============================================================================
+// Helper functions
+// ============================================================================
+/** Create a JSON-RPC success response */
+function successResponse(id, result) {
+    return { id, result };
+}
+/** Create a JSON-RPC error response */
+function errorResponse(id, error) {
+    return { id, error };
+}
+/**
+ * Parse a JSON line into an RpcRequest.
+ * Returns the parsed request, or an error response if parsing fails.
+ */
+function parseRpcRequest(line) {
+    try {
+        const parsed = JSON.parse(line);
+        if (!parsed || typeof parsed !== "object") {
+            return errorResponse(null, "Invalid JSON-RPC: not an object");
+        }
+        if (typeof parsed.method !== "string") {
+            return errorResponse(parsed.id ?? null, "Invalid JSON-RPC: missing 'method' field");
+        }
+        return {
+            id: parsed.id ?? null,
+            method: parsed.method,
+            params: parsed.params ?? undefined,
+        };
+    }
+    catch (e) {
+        return errorResponse(null, `Invalid JSON: ${e instanceof Error ? e.message : String(e)}`);
+    }
+}
+/** Check if a value is an RpcResponse (used for distinguishing parse errors from valid requests) */
+function isErrorResponse(value) {
+    return "error" in value && typeof value.error === "string";
+}
+//# sourceMappingURL=rpc.js.map

package/dist/rpc.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rpc.js","sourceRoot":"","sources":["../src/rpc.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;GAcG;;AAsGH,0CAEC;AAGD,sCAEC;AAMD,0CAiBC;AAGD,0CAEC;AAxCD,+EAA+E;AAC/E,mBAAmB;AACnB,+EAA+E;AAE/E,yCAAyC;AACzC,SAAgB,eAAe,CAAC,EAA0B,EAAE,MAAe;IACzE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC;AACxB,CAAC;AAED,uCAAuC;AACvC,SAAgB,aAAa,CAAC,EAA0B,EAAE,KAAa;IACrE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;AACvB,CAAC;AAED;;;GAGG;AACH,SAAgB,eAAe,CAAC,IAAY;IAC1C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC1C,OAAO,aAAa,CAAC,IAAI,EAAE,iCAAiC,CAAC,CAAC;QAChE,CAAC;QACD,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YACtC,OAAO,aAAa,CAAC,MAAM,CAAC,EAAE,IAAI,IAAI,EAAE,0CAA0C,CAAC,CAAC;QACtF,CAAC;QACD,OAAO;YACL,EAAE,EAAE,MAAM,CAAC,EAAE,IAAI,IAAI;YACrB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,SAAS;SACrB,CAAC;IAClB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,aAAa,CAAC,IAAI,EAAE,iBAAiB,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC5F,CAAC;AACH,CAAC;AAED,oGAAoG;AACpG,SAAgB,eAAe,CAAC,KAA+B;IAC7D,OAAO,OAAO,IAAI,KAAK,IAAI,OAAQ,KAAqB,CAAC,KAAK,KAAK,QAAQ,CAAC;AAC9E,CAAC"}

package/dist/serve.d.ts

@@ -0,0 +1,55 @@
+/**
+ * Daemon Serve — JSON-RPC over Unix Domain Socket or stdin/stdout
+ *
+ * Two operational modes:
+ *
+ * 1. UDS mode (default): Unix Domain Socket listener, supports concurrent clients.
+ *    The daemon creates a socket file and listens for connections. Each client
+ *    connection is handled independently. "quit" closes the connection;
+ *    "shutdown" stops the entire daemon.
+ *
+ * 2. Stdio mode (--stdio): Legacy stdin/stdout mode, single client.
+ *    Backwards-compatible with the Rust implementation. Reads JSON-RPC from
+ *    stdin and writes responses to stdout. "quit" stops the daemon.
+ *
+ * Both modes share the same request handling logic (handleRequest).
+ *
+ * Trust model:
+ *   - The daemon trusts its callers (local AI agent processes or socket clients).
+ *   - File paths in encrypt/decrypt requests are not sandboxed — the daemon
+ *     operates with the same filesystem permissions as the calling process.
+ */
+import type { Readable, Writable } from 'stream';
+import { KeyStore } from './key-store';
+/**
+ * Run the JSON-RPC daemon over a Unix Domain Socket.
+ *
+ * Lifecycle:
+ *   1. Create DaemonRuntime (PID file, socket path)
+ *   2. Create server and listen on socket
+ *   3. Emit ready info to stderr
+ *   4. Accept connections, handle requests concurrently
+ *   5. On shutdown signal: stop accepting, close connections, cleanup
+ *
+ * @param keyStore - AES-256 key holder
+ * @param principal - Authenticated principal text
+ * @param derivationId - Derivation ID used for the key
+ */
+export declare function runDaemonUds(keyStore: KeyStore, principal: string, derivationId: string): Promise<void>;
+/**
+ * Run the JSON-RPC daemon over stdin/stdout (legacy mode).
+ *
+ * Reads one JSON-RPC request per line from stdin, processes it,
+ * and writes the response to stdout. Exits on "quit" or stdin EOF.
+ *
+ * This mode is backwards-compatible with the Rust vetkey-tool implementation.
+ * No PID file or socket file is created.
+ *
+ * @param keyStore - AES-256 key holder (consumed; destroyed on exit)
+ * @param principal - Authenticated principal text
+ * @param derivationId - Derivation ID used for the key
+ * @param input - Optional input stream (defaults to process.stdin, override for testing)
+ * @param output - Optional output stream (defaults to process.stdout, override for testing)
+ */
+export declare function runDaemonStdio(keyStore: KeyStore, principal: string, derivationId: string, input?: Readable, output?: Writable): Promise<void>;
+//# sourceMappingURL=serve.d.ts.map