aec-agent 1.0.3 → 1.0.4

package/dist/components/secret-hub/secret-hub-provider.d.ts

@@ -0,0 +1,61 @@
+/** A wrapped data key and the master key that wrapped it. */
+export interface WrappedKey {
+    keyId: string;
+    /** Opaque bytes only the provider can unwrap. */
+    wrapped: Uint8Array;
+}
+/**
+ * The port a host implements for its key management: the SDK ships LocalSecretHubProvider;
+ * hosts plug in AWS KMS, GCP KMS, Azure Key Vault or Vault Transit through
+ * AgentCore.useSecretHubProvider.
+ */
+export interface SecretHubProvider {
+    /** Names the provider in status reports ("local", "aws-kms"…). */
+    readonly id: string;
+    /** The master key new data keys are wrapped with. */
+    currentKeyId(): string;
+    /** Wrap a data key with the current master key. */
+    wrapKey(dataKey: Uint8Array): Promise<WrappedKey>;
+    /**
+     * Unwrap a data key wrapped by `keyId` — the current key or an older one the provider
+     * still holds (rotation). Rejects when it doesn't hold that key or the bytes are bad.
+     */
+    unwrapKey(wrapped: Uint8Array, keyId: string): Promise<Uint8Array>;
+    /**
+     * Keys that opened the A-100 single-key format (enc:v1: AES-256-GCM, key =
+     * SHA-256(secret)), so values written before A-101 stay readable. Optional.
+     */
+    legacyKeys?(): Uint8Array[];
+}
+/** AES-256-GCM: iv[12] | ciphertext | tag[16] — the layout every format here uses. */
+export declare function gcmSeal(key: Uint8Array, plain: Uint8Array, aad?: Uint8Array): Buffer;
+/** Opens gcmSeal's output; throws when the key, AAD or bytes don't match. */
+export declare function gcmOpen(key: Uint8Array, sealed: Uint8Array, aad?: Uint8Array): Buffer;
+/** SHA-256 of a master secret — the AES key LocalSecretHubProvider (and the enc:v1 format) uses. */
+export declare function deriveKey(secret: string): Buffer;
+/** The id of a local master secret: "local:" + 12 hex chars of a hash that reveals nothing about it. */
+export declare function localKeyId(secret: string): string;
+export interface LocalSecretHubProviderOptions {
+    /** The master secret new data keys are wrapped with (e.g. AEC_SECRET_KEY). */
+    current: string;
+    /** Older master secrets, still accepted for reading until a rotation re-seals their values. */
+    previous?: string[];
+}
+/**
+ * Master keys held by the host process — derived from secrets it is given (environment
+ * variables). Each secret's id is derived from it, so rotating is: make the new secret
+ * `current`, move the old one to `previous`, run the rotation, then drop the old one.
+ */
+export declare class LocalSecretHubProvider implements SecretHubProvider {
+    readonly id = "local";
+    private readonly current;
+    private readonly keys;
+    constructor(options: LocalSecretHubProviderOptions);
+    /** A provider with a random master key that lives as long as the process (tests, in-memory stores). */
+    static ephemeral(): LocalSecretHubProvider;
+    currentKeyId(): string;
+    wrapKey(dataKey: Uint8Array): Promise<WrappedKey>;
+    unwrapKey(wrapped: Uint8Array, keyId: string): Promise<Uint8Array>;
+    legacyKeys(): Uint8Array[];
+}
+//# sourceMappingURL=secret-hub-provider.d.ts.map

package/dist/components/secret-hub/secret-hub-provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-hub-provider.d.ts","sourceRoot":"","sources":["../../../src/components/secret-hub/secret-hub-provider.ts"],"names":[],"mappings":"AAQA,6DAA6D;AAC7D,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,iDAAiD;IACjD,OAAO,EAAE,UAAU,CAAC;CACrB;AAED;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,kEAAkE;IAClE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,qDAAqD;IACrD,YAAY,IAAI,MAAM,CAAC;IACvB,mDAAmD;IACnD,OAAO,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAClD;;;OAGG;IACH,SAAS,CAAC,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IACnE;;;OAGG;IACH,UAAU,CAAC,IAAI,UAAU,EAAE,CAAC;CAC7B;AAKD,sFAAsF;AACtF,wBAAgB,OAAO,CAAC,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,CAAC,EAAE,UAAU,GAAG,MAAM,CAMpF;AAED,6EAA6E;AAC7E,wBAAgB,OAAO,CAAC,GAAG,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,CAAC,EAAE,UAAU,GAAG,MAAM,CAOrF;AAED,oGAAoG;AACpG,wBAAgB,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAEhD;AAED,wGAAwG;AACxG,wBAAgB,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAEjD;AAED,MAAM,WAAW,6BAA6B;IAC5C,8EAA8E;IAC9E,OAAO,EAAE,MAAM,CAAC;IAChB,+FAA+F;IAC/F,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;CACrB;AAED;;;;GAIG;AACH,qBAAa,sBAAuB,YAAW,iBAAiB;IAC9D,QAAQ,CAAC,EAAE,WAAW;IACtB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA8B;IACtD,OAAO,CAAC,QAAQ,CAAC,IAAI,CAA6B;IAElD,YAAY,OAAO,EAAE,6BAA6B,EASjD;IAED,uGAAuG;IACvG,MAAM,CAAC,SAAS,IAAI,sBAAsB,CAEzC;IAED,YAAY,IAAI,MAAM,CAErB;IAEK,OAAO,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAEtD;IAEK,SAAS,CAAC,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAIvE;IAED,UAAU,IAAI,UAAU,EAAE,CAEzB;CACF"}

package/dist/components/secret-hub/secret-hub-provider.js

@@ -0,0 +1,73 @@
+import { createCipheriv, createDecipheriv, createHash, randomBytes } from "node:crypto";
+const IV_BYTES = 12;
+const TAG_BYTES = 16;
+/** AES-256-GCM: iv[12] | ciphertext | tag[16] — the layout every format here uses. */
+export function gcmSeal(key, plain, aad) {
+    const iv = randomBytes(IV_BYTES);
+    const cipher = createCipheriv("aes-256-gcm", key, iv);
+    if (aad && aad.length)
+        cipher.setAAD(aad);
+    const body = Buffer.concat([cipher.update(plain), cipher.final()]);
+    return Buffer.concat([iv, body, cipher.getAuthTag()]);
+}
+/** Opens gcmSeal's output; throws when the key, AAD or bytes don't match. */
+export function gcmOpen(key, sealed, aad) {
+    if (sealed.length < IV_BYTES + TAG_BYTES)
+        throw new Error("sealed data is too short");
+    const buf = Buffer.from(sealed);
+    const decipher = createDecipheriv("aes-256-gcm", key, buf.subarray(0, IV_BYTES));
+    if (aad && aad.length)
+        decipher.setAAD(aad);
+    decipher.setAuthTag(buf.subarray(buf.length - TAG_BYTES));
+    return Buffer.concat([decipher.update(buf.subarray(IV_BYTES, buf.length - TAG_BYTES)), decipher.final()]);
+}
+/** SHA-256 of a master secret — the AES key LocalSecretHubProvider (and the enc:v1 format) uses. */
+export function deriveKey(secret) {
+    return createHash("sha256").update(secret, "utf8").digest();
+}
+/** The id of a local master secret: "local:" + 12 hex chars of a hash that reveals nothing about it. */
+export function localKeyId(secret) {
+    return "local:" + createHash("sha256").update("aec-key-id:" + secret, "utf8").digest("hex").slice(0, 12);
+}
+/**
+ * Master keys held by the host process — derived from secrets it is given (environment
+ * variables). Each secret's id is derived from it, so rotating is: make the new secret
+ * `current`, move the old one to `previous`, run the rotation, then drop the old one.
+ */
+export class LocalSecretHubProvider {
+    id = "local";
+    current;
+    keys = new Map();
+    constructor(options) {
+        const current = options.current?.trim();
+        if (!current)
+            throw new Error("LocalSecretHubProvider needs a master secret");
+        this.current = { id: localKeyId(current), key: deriveKey(current) };
+        this.keys.set(this.current.id, this.current.key);
+        for (const secret of options.previous ?? []) {
+            const s = secret.trim();
+            if (s && !this.keys.has(localKeyId(s)))
+                this.keys.set(localKeyId(s), deriveKey(s));
+        }
+    }
+    /** A provider with a random master key that lives as long as the process (tests, in-memory stores). */
+    static ephemeral() {
+        return new LocalSecretHubProvider({ current: randomBytes(32).toString("base64") });
+    }
+    currentKeyId() {
+        return this.current.id;
+    }
+    async wrapKey(dataKey) {
+        return { keyId: this.current.id, wrapped: gcmSeal(this.current.key, dataKey) };
+    }
+    async unwrapKey(wrapped, keyId) {
+        const key = this.keys.get(keyId);
+        if (!key)
+            throw new Error(`master key "${keyId}" is not configured`);
+        return gcmOpen(key, wrapped);
+    }
+    legacyKeys() {
+        return [...this.keys.values()];
+    }
+}
+//# sourceMappingURL=secret-hub-provider.js.map

package/dist/components/secret-hub/secret-hub-provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-hub-provider.js","sourceRoot":"","sources":["../../../src/components/secret-hub/secret-hub-provider.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAuCxF,MAAM,QAAQ,GAAG,EAAE,CAAC;AACpB,MAAM,SAAS,GAAG,EAAE,CAAC;AAErB,sFAAsF;AACtF,MAAM,UAAU,OAAO,CAAC,GAAe,EAAE,KAAiB,EAAE,GAAgB;IAC1E,MAAM,EAAE,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;IACjC,MAAM,MAAM,GAAG,cAAc,CAAC,aAAa,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;IACtD,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM;QAAE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC1C,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACnE,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;AACxD,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,OAAO,CAAC,GAAe,EAAE,MAAkB,EAAE,GAAgB;IAC3E,IAAI,MAAM,CAAC,MAAM,GAAG,QAAQ,GAAG,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IACtF,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAChC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,aAAa,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC;IACjF,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM;QAAE,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC5C,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC;IAC1D,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;AAC5G,CAAC;AAED,oGAAoG;AACpG,MAAM,UAAU,SAAS,CAAC,MAAc;IACtC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC;AAC9D,CAAC;AAED,wGAAwG;AACxG,MAAM,UAAU,UAAU,CAAC,MAAc;IACvC,OAAO,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,aAAa,GAAG,MAAM,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC3G,CAAC;AASD;;;;GAIG;AACH,MAAM,OAAO,sBAAsB;IACxB,EAAE,GAAG,OAAO,CAAC;IACL,OAAO,CAA8B;IACrC,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAC;IAElD,YAAY,OAAsC;QAChD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC;QACxC,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAC9E,IAAI,CAAC,OAAO,GAAG,EAAE,EAAE,EAAE,UAAU,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;QACpE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjD,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;YAC5C,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;YACxB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;gBAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;QACrF,CAAC;IACH,CAAC;IAED,uGAAuG;IACvG,MAAM,CAAC,SAAS;QACd,OAAO,IAAI,sBAAsB,CAAC,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IACrF,CAAC;IAED,YAAY;QACV,OAAO,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,OAAmB;QAC/B,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,CAAC;IACjF,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,OAAmB,EAAE,KAAa;QAChD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACjC,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,eAAe,KAAK,qBAAqB,CAAC,CAAC;QACrE,OAAO,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAC/B,CAAC;IAED,UAAU;QACR,OAAO,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IACjC,CAAC;CACF"}

package/dist/components/secret-hub/secret-hub.d.ts

@@ -0,0 +1,102 @@
+import type { EventBus } from "../event-handler/types.js";
+import type { SecretStore } from "../persistence-hub/types/secret-store.js";
+import { SecretSealer, type SecretSealerOptions } from "./envelope.js";
+import type { SecretHubProvider } from "./secret-hub-provider.js";
+import { SecretRedactor } from "./rules.js";
+import { type SecretCreator, type SecretDefinition, type SecretInfo, type SecretStatus, type SecretUse } from "./types.js";
+/** What creating a secret takes: its definition, its value and who owns it. */
+export interface CreateSecretInput extends SecretDefinition {
+    value: string;
+    /** The owning agent; absent = a global secret. */
+    ownerAgentId?: string;
+    createdBy?: SecretCreator;
+}
+/** The outcome of a rotation: secrets re-sealed under the current master key, and those that failed. */
+export interface RotationResult {
+    resealed: number;
+    unchanged: number;
+    failed: Array<{
+        ownerAgentId?: string;
+        name: string;
+        error: string;
+    }>;
+}
+/**
+ * Global hub for secrets (A-101) — like the SkillHub, one per AgentCore.
+ *  - Seals values with envelope encryption under the current SecretHubProvider (`useSecretHubProvider`);
+ *    hosts also use `seal` / `open` for their own credential columns, so every secret at
+ *    rest goes through one place and one rotation.
+ *  - Keeps the owner rules: a global secret ("" owner) or an agent's own secret.
+ *  - `reveal` hands a value to a tool after checking the use (allowed tool and host); only
+ *    the SDK calls it — the model never gets a value.
+ * Publishes secret:created / updated / deleted (awaited) and emits secret:used — names only.
+ */
+export declare class SecretHub {
+    private getStore;
+    readonly sealer: SecretSealer;
+    /**
+     * Every value revealed in this process, so tool output that echoes one (an API that
+     * returns the key, `echo $KEY`) is redacted before the model, a store or the UI sees it.
+     * Process-wide: a value one agent used is redacted in every agent's output.
+     */
+    readonly redactor: SecretRedactor;
+    private secretHubProvider?;
+    private readonly eventBus;
+    /** @param getStore resolved on every call, so `AgentCore.usePersistence()` can swap the store. */
+    constructor(getStore: () => SecretStore, options?: {
+        eventBus?: EventBus;
+        secretHubProvider?: SecretHubProvider;
+        sealer?: SecretSealerOptions;
+    });
+    /** Set the SecretHub provider new values are sealed with (and stored ones opened with). */
+    useSecretHubProvider(provider: SecretHubProvider | undefined): void;
+    /** The SecretHub provider in use, if any. */
+    get provider(): SecretHubProvider | undefined;
+    /** Seal a value under the current master key; `aad` binds it to where it is stored. */
+    seal(plain: string, aad?: string): Promise<string>;
+    /** Open a value sealed by `seal` (or enc:v1, or plain text). Throws SecretError("decrypt_failed"). */
+    open(stored: string, aad?: string): Promise<string>;
+    /** One secret's metadata, or undefined. */
+    get(ownerAgentId: string | undefined, name: string): Promise<SecretInfo | undefined>;
+    /** Secrets of one owner (undefined = global), sorted by name. */
+    list(ownerAgentId?: string): Promise<SecretInfo[]>;
+    /** Every secret, globals first (for status and rotation views). */
+    listAll(): Promise<SecretInfo[]>;
+    /** Store a new secret. Throws SecretError ("invalid_argument", "already_exists"). */
+    create(input: CreateSecretInput): Promise<SecretInfo>;
+    /** Change a secret's description, hosts or tools (its value stays). */
+    update(ownerAgentId: string | undefined, name: string, patch: Omit<SecretDefinition, "name">): Promise<SecretInfo>;
+    /** Give a secret a new value (the key was rotated at its issuer). */
+    setValue(ownerAgentId: string | undefined, name: string, value: string): Promise<SecretInfo>;
+    /** Delete a secret; publishes secret:deleted (a global one is dropped from every agent that used it). */
+    delete(ownerAgentId: string | undefined, name: string): Promise<void>;
+    /** Delete every secret an agent owns (the agent is being deleted). */
+    deleteByOwner(agentId: string): Promise<void>;
+    /**
+     * A secret's value for a tool — after checking that `use.tool` may use it and (when
+     * set) that `use.host` is allowed. Records the use and emits secret:used.
+     * For the SDK's own use (tool execution); never hand the result to a model.
+     */
+    reveal(ownerAgentId: string | undefined, name: string, use: SecretUse, context?: {
+        agentId?: string;
+        sessionId?: string;
+    }): Promise<string>;
+    /** How stored secrets are sealed: per master key, legacy enc:v1, plain. */
+    status(): Promise<SecretStatus>;
+    /**
+     * Re-seal every secret that isn't sealed with the current master key (an older key,
+     * enc:v1 or plain text). Safe to run while serving and to run again; a secret that
+     * can't be opened is reported and left as it is. Hosts re-seal their own columns too.
+     */
+    rotate(): Promise<RotationResult>;
+    /**
+     * Startup check: a seal/open round trip with the current key, and one unwrap per master
+     * key the stored secrets use. Returns the problems found (empty = all good).
+     */
+    selfCheck(): Promise<string[]>;
+    private require;
+    private publish;
+}
+/** The AAD a secret's value is sealed with — binds it to its owner and name. */
+export declare function aadFor(owner: string, name: string): string;
+//# sourceMappingURL=secret-hub.d.ts.map

package/dist/components/secret-hub/secret-hub.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-hub.d.ts","sourceRoot":"","sources":["../../../src/components/secret-hub/secret-hub.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,2BAA2B,CAAC;AAC1D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,0CAA0C,CAAC;AAC5E,OAAO,EAAE,YAAY,EAAgB,KAAK,mBAAmB,EAAE,MAAM,eAAe,CAAC;AACrF,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAClE,OAAO,EAAoE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC9G,OAAO,EAEL,KAAK,aAAa,EAClB,KAAK,gBAAgB,EACrB,KAAK,UAAU,EACf,KAAK,YAAY,EACjB,KAAK,SAAS,EAEf,MAAM,YAAY,CAAC;AAEpB,+EAA+E;AAC/E,MAAM,WAAW,iBAAkB,SAAQ,gBAAgB;IACzD,KAAK,EAAE,MAAM,CAAC;IACd,kDAAkD;IAClD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,aAAa,CAAC;CAC3B;AAED,wGAAwG;AACxG,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,KAAK,CAAC;QAAE,YAAY,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACvE;AAED;;;;;;;;;GASG;AACH,qBAAa,SAAS;IAalB,OAAO,CAAC,QAAQ;IAZlB,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B;;;;OAIG;IACH,QAAQ,CAAC,QAAQ,iBAAwB;IACzC,OAAO,CAAC,iBAAiB,CAAC,CAAoB;IAC9C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAuB;IAEhD,kGAAkG;IAClG,YACU,QAAQ,EAAE,MAAM,WAAW,EACnC,OAAO,GAAE;QAAE,QAAQ,CAAC,EAAE,QAAQ,CAAC;QAAC,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;QAAC,MAAM,CAAC,EAAE,mBAAmB,CAAA;KAAO,EAK3G;IAED,2FAA2F;IAC3F,oBAAoB,CAAC,QAAQ,EAAE,iBAAiB,GAAG,SAAS,GAAG,IAAI,CAGlE;IAED,6CAA6C;IAC7C,IAAI,QAAQ,IAAI,iBAAiB,GAAG,SAAS,CAE5C;IAID,uFAAuF;IACvF,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,SAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAE7C;IAED,sGAAsG;IACtG,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,SAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAE9C;IAID,2CAA2C;IACrC,GAAG,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC,CAGzF;IAED,iEAAiE;IAC3D,IAAI,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,CAEvD;IAED,mEAAmE;IAC7D,OAAO,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC,CAErC;IAED,qFAAqF;IAC/E,MAAM,CAAC,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,UAAU,CAAC,CA2B1D;IAED,uEAAuE;IACjE,MAAM,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,gBAAgB,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC,CAOvH;IAED,qEAAqE;IAC/D,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAOjG;IAED,yGAAyG;IACnG,MAAM,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAI1E;IAED,sEAAsE;IAChE,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAElD;IAED;;;;OAIG;IACG,MAAM,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,OAAO,GAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAqBpJ;IAID,2EAA2E;IACrE,MAAM,IAAI,OAAO,CAAC,YAAY,CAAC,CAepC;IAED;;;;OAIG;IACG,MAAM,IAAI,OAAO,CAAC,cAAc,CAAC,CA2BtC;IAED;;;OAGG;IACG,SAAS,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,CAsBnC;YAEa,OAAO;YAMP,OAAO;CAWtB;AAED,gFAAgF;AAChF,wBAAgB,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAE1D"}

package/dist/components/secret-hub/secret-hub.js

@@ -0,0 +1,267 @@
+import { SecretError } from "../../kernel/errors/secret-error.js";
+import { SDKEventType } from "../event-handler/events.js";
+import { SecretSealer, sealedFormat } from "./envelope.js";
+import { checkSecretName, checkSecretValue, checkUse, normalizeDefinition, SecretRedactor } from "./rules.js";
+import { SECRET_LIMITS, } from "./types.js";
+/**
+ * Global hub for secrets (A-101) — like the SkillHub, one per AgentCore.
+ *  - Seals values with envelope encryption under the current SecretHubProvider (`useSecretHubProvider`);
+ *    hosts also use `seal` / `open` for their own credential columns, so every secret at
+ *    rest goes through one place and one rotation.
+ *  - Keeps the owner rules: a global secret ("" owner) or an agent's own secret.
+ *  - `reveal` hands a value to a tool after checking the use (allowed tool and host); only
+ *    the SDK calls it — the model never gets a value.
+ * Publishes secret:created / updated / deleted (awaited) and emits secret:used — names only.
+ */
+export class SecretHub {
+    getStore;
+    sealer;
+    /**
+     * Every value revealed in this process, so tool output that echoes one (an API that
+     * returns the key, `echo $KEY`) is redacted before the model, a store or the UI sees it.
+     * Process-wide: a value one agent used is redacted in every agent's output.
+     */
+    redactor = new SecretRedactor();
+    secretHubProvider;
+    eventBus;
+    /** @param getStore resolved on every call, so `AgentCore.usePersistence()` can swap the store. */
+    constructor(getStore, options = {}) {
+        this.getStore = getStore;
+        this.eventBus = options.eventBus;
+        this.secretHubProvider = options.secretHubProvider;
+        this.sealer = new SecretSealer(() => this.secretHubProvider, options.sealer);
+    }
+    /** Set the SecretHub provider new values are sealed with (and stored ones opened with). */
+    useSecretHubProvider(provider) {
+        this.secretHubProvider = provider;
+        this.sealer.clearCache();
+    }
+    /** The SecretHub provider in use, if any. */
+    get provider() {
+        return this.secretHubProvider;
+    }
+    // ── Sealing (also for hosts' own columns) ──
+    /** Seal a value under the current master key; `aad` binds it to where it is stored. */
+    seal(plain, aad = "") {
+        return this.sealer.seal(plain, aad);
+    }
+    /** Open a value sealed by `seal` (or enc:v1, or plain text). Throws SecretError("decrypt_failed"). */
+    open(stored, aad = "") {
+        return this.sealer.open(stored, aad);
+    }
+    // ── Secrets ──
+    /** One secret's metadata, or undefined. */
+    async get(ownerAgentId, name) {
+        const s = await this.getStore().get(ownerAgentId ?? "", name);
+        return s ? info(s) : undefined;
+    }
+    /** Secrets of one owner (undefined = global), sorted by name. */
+    async list(ownerAgentId) {
+        return (await this.getStore().list(ownerAgentId ?? "")).map(info);
+    }
+    /** Every secret, globals first (for status and rotation views). */
+    async listAll() {
+        return (await this.getStore().list()).map(info);
+    }
+    /** Store a new secret. Throws SecretError ("invalid_argument", "already_exists"). */
+    async create(input) {
+        const name = checkSecretName(input.name);
+        const value = checkSecretValue(input.value);
+        const owner = input.ownerAgentId ?? "";
+        const meta = normalizeDefinition(input);
+        const store = this.getStore();
+        if (await store.get(owner, name)) {
+            throw new SecretError(`a secret named ${name} already exists${owner ? " for this agent" : ""}`, "already_exists");
+        }
+        if ((await store.list(owner)).length >= SECRET_LIMITS.perOwner) {
+            throw new SecretError(`at most ${SECRET_LIMITS.perOwner} secrets${owner ? " per agent" : ""}`, "invalid_argument");
+        }
+        const now = new Date().toISOString();
+        const sealed = await this.seal(value, aadFor(owner, name));
+        const secret = {
+            name,
+            ...(owner ? { ownerAgentId: owner } : {}),
+            ...meta,
+            keyId: keyIdOf(sealed),
+            createdBy: input.createdBy ?? "user",
+            createdAt: now,
+            updatedAt: now,
+            value: sealed,
+        };
+        await store.save(secret);
+        await this.publish(SDKEventType.SecretCreated, secret);
+        return info(secret);
+    }
+    /** Change a secret's description, hosts or tools (its value stays). */
+    async update(ownerAgentId, name, patch) {
+        const existing = await this.require(ownerAgentId, name);
+        const secret = { ...existing, ...normalizeDefinition(patch, existing), updatedAt: new Date().toISOString() };
+        if (patch.description !== undefined && !secret.description)
+            delete secret.description;
+        await this.getStore().save(secret);
+        await this.publish(SDKEventType.SecretUpdated, secret, { valueChanged: false });
+        return info(secret);
+    }
+    /** Give a secret a new value (the key was rotated at its issuer). */
+    async setValue(ownerAgentId, name, value) {
+        const existing = await this.require(ownerAgentId, name);
+        const sealed = await this.seal(checkSecretValue(value), aadFor(existing.ownerAgentId ?? "", name));
+        const secret = { ...existing, value: sealed, keyId: keyIdOf(sealed), updatedAt: new Date().toISOString() };
+        await this.getStore().save(secret);
+        await this.publish(SDKEventType.SecretUpdated, secret, { valueChanged: true });
+        return info(secret);
+    }
+    /** Delete a secret; publishes secret:deleted (a global one is dropped from every agent that used it). */
+    async delete(ownerAgentId, name) {
+        const existing = await this.require(ownerAgentId, name);
+        await this.getStore().delete(existing.ownerAgentId ?? "", name);
+        await this.publish(SDKEventType.SecretDeleted, existing);
+    }
+    /** Delete every secret an agent owns (the agent is being deleted). */
+    async deleteByOwner(agentId) {
+        if (agentId)
+            await this.getStore().deleteByOwner(agentId);
+    }
+    /**
+     * A secret's value for a tool — after checking that `use.tool` may use it and (when
+     * set) that `use.host` is allowed. Records the use and emits secret:used.
+     * For the SDK's own use (tool execution); never hand the result to a model.
+     */
+    async reveal(ownerAgentId, name, use, context = {}) {
+        const secret = await this.require(ownerAgentId, name);
+        checkUse(secret, use);
+        const value = await this.open(secret.value, aadFor(secret.ownerAgentId ?? "", name));
+        this.redactor.add(name, value);
+        const at = new Date().toISOString();
+        await this.getStore()
+            .markUsed(secret.ownerAgentId ?? "", name, at)
+            .catch((err) => console.warn(`[secrets] could not record a use of ${name}:`, err));
+        this.eventBus?.emit({
+            type: SDKEventType.SecretUsed,
+            sessionId: context.sessionId ?? "",
+            payload: {
+                name,
+                ...(secret.ownerAgentId ? { ownerAgentId: secret.ownerAgentId } : {}),
+                ...(context.agentId ? { agentId: context.agentId } : {}),
+                tool: use.tool,
+                ...(use.host ? { host: use.host } : {}),
+            },
+        });
+        return value;
+    }
+    // ── Keys ──
+    /** How stored secrets are sealed: per master key, legacy enc:v1, plain. */
+    async status() {
+        const status = {
+            provider: this.secretHubProvider?.id ?? "none",
+            currentKeyId: this.secretHubProvider?.currentKeyId() ?? "",
+            byKeyId: {},
+            legacy: 0,
+            plain: 0,
+        };
+        for (const s of await this.getStore().list()) {
+            const f = sealedFormat(s.value);
+            if (f.format === "v2")
+                status.byKeyId[f.keyId] = (status.byKeyId[f.keyId] ?? 0) + 1;
+            else if (f.format === "v1")
+                status.legacy++;
+            else
+                status.plain++;
+        }
+        return status;
+    }
+    /**
+     * Re-seal every secret that isn't sealed with the current master key (an older key,
+     * enc:v1 or plain text). Safe to run while serving and to run again; a secret that
+     * can't be opened is reported and left as it is. Hosts re-seal their own columns too.
+     */
+    async rotate() {
+        const result = { resealed: 0, unchanged: 0, failed: [] };
+        if (!this.secretHubProvider)
+            throw new SecretError("no SecretHub provider is set — there is no key to rotate to", "unavailable");
+        const store = this.getStore();
+        for (const s of await store.list()) {
+            if (!this.sealer.needsReseal(s.value)) {
+                result.unchanged++;
+                continue;
+            }
+            const aad = aadFor(s.ownerAgentId ?? "", s.name);
+            try {
+                // enc:v1 and plain values were stored without the AAD.
+                const plain = await this.open(s.value, sealedFormat(s.value).format === "v2" ? aad : "");
+                const sealed = await this.seal(plain, aad);
+                // Re-read so a value changed meanwhile is not overwritten with the old one.
+                const current = await store.get(s.ownerAgentId ?? "", s.name);
+                if (!current || current.value !== s.value) {
+                    result.unchanged++;
+                    continue;
+                }
+                await store.save({ ...current, value: sealed, keyId: keyIdOf(sealed) });
+                result.resealed++;
+            }
+            catch (err) {
+                result.failed.push({ ...(s.ownerAgentId ? { ownerAgentId: s.ownerAgentId } : {}), name: s.name, error: err instanceof Error ? err.message : String(err) });
+            }
+        }
+        return result;
+    }
+    /**
+     * Startup check: a seal/open round trip with the current key, and one unwrap per master
+     * key the stored secrets use. Returns the problems found (empty = all good).
+     */
+    async selfCheck() {
+        const problems = [];
+        if (!this.secretHubProvider)
+            return problems;
+        try {
+            const probe = "aec-key-check";
+            if ((await this.open(await this.seal(probe, "check"), "check")) !== probe)
+                problems.push("the SecretHub provider round trip returned a different value");
+        }
+        catch (err) {
+            problems.push(err instanceof Error ? err.message : String(err));
+        }
+        const seen = new Set();
+        for (const s of await this.getStore().list()) {
+            const f = sealedFormat(s.value);
+            const id = f.format === "v2" ? f.keyId : f.format === "v1" ? "enc:v1" : undefined;
+            if (!id || seen.has(id))
+                continue;
+            seen.add(id);
+            try {
+                await this.open(s.value, f.format === "v2" ? aadFor(s.ownerAgentId ?? "", s.name) : "");
+            }
+            catch (err) {
+                problems.push(`secrets sealed with ${id} can't be opened: ${err instanceof Error ? err.message : String(err)}`);
+            }
+        }
+        return problems;
+    }
+    async require(ownerAgentId, name) {
+        const found = await this.getStore().get(ownerAgentId ?? "", name);
+        if (!found)
+            throw new SecretError(`no secret named ${name}${ownerAgentId ? " for this agent" : ""}`, "not_found");
+        return found;
+    }
+    async publish(type, secret, extra = {}) {
+        await this.eventBus?.publish({
+            type,
+            sessionId: "",
+            payload: { name: secret.name, ...(secret.ownerAgentId ? { ownerAgentId: secret.ownerAgentId } : {}), ...extra },
+        });
+    }
+}
+/** The AAD a secret's value is sealed with — binds it to its owner and name. */
+export function aadFor(owner, name) {
+    return `secret:${owner || "global"}:${name}`;
+}
+function keyIdOf(sealed) {
+    const f = sealedFormat(sealed);
+    return f.format === "v2" ? f.keyId : "";
+}
+/** A stored secret without its value. */
+function info(s) {
+    const { value: _value, ...rest } = s;
+    return { ...rest, allowedHosts: [...s.allowedHosts], allowedTools: [...s.allowedTools] };
+}
+//# sourceMappingURL=secret-hub.js.map

package/dist/components/secret-hub/secret-hub.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-hub.js","sourceRoot":"","sources":["../../../src/components/secret-hub/secret-hub.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,qCAAqC,CAAC;AAClE,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAG1D,OAAO,EAAE,YAAY,EAAE,YAAY,EAA4B,MAAM,eAAe,CAAC;AAErF,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,QAAQ,EAAE,mBAAmB,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC9G,OAAO,EACL,aAAa,GAOd,MAAM,YAAY,CAAC;AAiBpB;;;;;;;;;GASG;AACH,MAAM,OAAO,SAAS;IAaV,QAAQ;IAZT,MAAM,CAAe;IAC9B;;;;OAIG;IACM,QAAQ,GAAG,IAAI,cAAc,EAAE,CAAC;IACjC,iBAAiB,CAAqB;IAC7B,QAAQ,CAAuB;IAEhD,kGAAkG;IAClG,YACU,QAA2B,EACnC,OAAO,GAAiG,EAAE;wBADlG,QAAQ;QAGhB,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QACjC,IAAI,CAAC,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,CAAC;QACnD,IAAI,CAAC,MAAM,GAAG,IAAI,YAAY,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,iBAAiB,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAC/E,CAAC;IAED,2FAA2F;IAC3F,oBAAoB,CAAC,QAAuC;QAC1D,IAAI,CAAC,iBAAiB,GAAG,QAAQ,CAAC;QAClC,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;IAC3B,CAAC;IAED,6CAA6C;IAC7C,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,iBAAiB,CAAC;IAChC,CAAC;IAED,8CAA8C;IAE9C,uFAAuF;IACvF,IAAI,CAAC,KAAa,EAAE,GAAG,GAAG,EAAE;QAC1B,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACtC,CAAC;IAED,sGAAsG;IACtG,IAAI,CAAC,MAAc,EAAE,GAAG,GAAG,EAAE;QAC3B,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACvC,CAAC;IAED,gBAAgB;IAEhB,2CAA2C;IAC3C,KAAK,CAAC,GAAG,CAAC,YAAgC,EAAE,IAAY;QACtD,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC;QAC9D,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACjC,CAAC;IAED,iEAAiE;IACjE,KAAK,CAAC,IAAI,CAAC,YAAqB;QAC9B,OAAO,CAAC,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACpE,CAAC;IAED,mEAAmE;IACnE,KAAK,CAAC,OAAO;QACX,OAAO,CAAC,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAClD,CAAC;IAED,qFAAqF;IACrF,KAAK,CAAC,MAAM,CAAC,KAAwB;QACnC,MAAM,IAAI,GAAG,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACzC,MAAM,KAAK,GAAG,gBAAgB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC5C,MAAM,KAAK,GAAG,KAAK,CAAC,YAAY,IAAI,EAAE,CAAC;QACvC,MAAM,IAAI,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;QACxC,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC9B,IAAI,MAAM,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,WAAW,CAAC,kBAAkB,IAAI,kBAAkB,KAAK,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,gBAAgB,CAAC,CAAC;QACpH,CAAC;QACD,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,IAAI,aAAa,CAAC,QAAQ,EAAE,CAAC;YAC/D,MAAM,IAAI,WAAW,CAAC,WAAW,aAAa,CAAC,QAAQ,WAAW,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,kBAAkB,CAAC,CAAC;QACrH,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;QAC3D,MAAM,MAAM,GAAiB;YAC3B,IAAI;YACJ,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzC,GAAG,IAAI;YACP,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC;YACtB,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,MAAM;YACpC,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,GAAG;YACd,KAAK,EAAE,MAAM;SACd,CAAC;QACF,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACzB,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;QACvD,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC;IACtB,CAAC;IAED,uEAAuE;IACvE,KAAK,CAAC,MAAM,CAAC,YAAgC,EAAE,IAAY,EAAE,KAAqC;QAChG,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;QACxD,MAAM,MAAM,GAAiB,EAAE,GAAG,QAAQ,EAAE,GAAG,mBAAmB,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;QAC3H,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,WAAW;YAAE,OAAO,MAAM,CAAC,WAAW,CAAC;QACtF,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACnC,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,aAAa,EAAE,MAAM,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC;QAChF,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC;IACtB,CAAC;IAED,qEAAqE;IACrE,KAAK,CAAC,QAAQ,CAAC,YAAgC,EAAE,IAAY,EAAE,KAAa;QAC1E,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;QACxD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,YAAY,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC;QACnG,MAAM,MAAM,GAAiB,EAAE,GAAG,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;QACzH,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACnC,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,aAAa,EAAE,MAAM,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/E,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC;IACtB,CAAC;IAED,yGAAyG;IACzG,KAAK,CAAC,MAAM,CAAC,YAAgC,EAAE,IAAY;QACzD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;QACxD,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC;QAChE,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;IAC3D,CAAC;IAED,sEAAsE;IACtE,KAAK,CAAC,aAAa,CAAC,OAAe;QACjC,IAAI,OAAO;YAAE,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;IAC5D,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,MAAM,CAAC,YAAgC,EAAE,IAAY,EAAE,GAAc,EAAE,OAAO,GAA6C,EAAE;QACjI,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;QACtD,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACtB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,YAAY,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC;QACrF,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC/B,MAAM,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACpC,MAAM,IAAI,CAAC,QAAQ,EAAE;aAClB,QAAQ,CAAC,MAAM,CAAC,YAAY,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC;aAC7C,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,uCAAuC,IAAI,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;QAC9F,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC;YAClB,IAAI,EAAE,YAAY,CAAC,UAAU;YAC7B,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,EAAE;YAClC,OAAO,EAAE;gBACP,IAAI;gBACJ,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACrE,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACxD,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACxC;SACF,CAAC,CAAC;QACH,OAAO,KAAK,CAAC;IACf,CAAC;IAED,aAAa;IAEb,2EAA2E;IAC3E,KAAK,CAAC,MAAM;QACV,MAAM,MAAM,GAAiB;YAC3B,QAAQ,EAAE,IAAI,CAAC,iBAAiB,EAAE,EAAE,IAAI,MAAM;YAC9C,YAAY,EAAE,IAAI,CAAC,iBAAiB,EAAE,YAAY,EAAE,IAAI,EAAE;YAC1D,OAAO,EAAE,EAAE;YACX,MAAM,EAAE,CAAC;YACT,KAAK,EAAE,CAAC;SACT,CAAC;QACF,KAAK,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC;YAC7C,MAAM,CAAC,GAAG,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YAChC,IAAI,CAAC,CAAC,MAAM,KAAK,IAAI;gBAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;iBAC/E,IAAI,CAAC,CAAC,MAAM,KAAK,IAAI;gBAAE,MAAM,CAAC,MAAM,EAAE,CAAC;;gBACvC,MAAM,CAAC,KAAK,EAAE,CAAC;QACtB,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,MAAM;QACV,MAAM,MAAM,GAAmB,EAAE,QAAQ,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;QACzE,IAAI,CAAC,IAAI,CAAC,iBAAiB;YAAE,MAAM,IAAI,WAAW,CAAC,6DAA6D,EAAE,aAAa,CAAC,CAAC;QACjI,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC9B,KAAK,MAAM,CAAC,IAAI,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;YACnC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;gBACtC,MAAM,CAAC,SAAS,EAAE,CAAC;gBACnB,SAAS;YACX,CAAC;YACD,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,YAAY,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;YACjD,IAAI,CAAC;gBACH,uDAAuD;gBACvD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBACzF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBAC3C,4EAA4E;gBAC5E,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,YAAY,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;gBAC9D,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,KAAK,KAAK,CAAC,CAAC,KAAK,EAAE,CAAC;oBAC1C,MAAM,CAAC,SAAS,EAAE,CAAC;oBACnB,SAAS;gBACX,CAAC;gBACD,MAAM,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACxE,MAAM,CAAC,QAAQ,EAAE,CAAC;YACpB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC7J,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,SAAS;QACb,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,IAAI,CAAC,IAAI,CAAC,iBAAiB;YAAE,OAAO,QAAQ,CAAC;QAC7C,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,eAAe,CAAC;YAC9B,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC,KAAK,KAAK;gBAAE,QAAQ,CAAC,IAAI,CAAC,8DAA8D,CAAC,CAAC;QAC3J,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,QAAQ,CAAC,IAAI,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QAClE,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,KAAK,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC;YAC7C,MAAM,CAAC,GAAG,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YAChC,MAAM,EAAE,GAAG,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBAAE,SAAS;YAClC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACb,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC1F,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,QAAQ,CAAC,IAAI,CAAC,uBAAuB,EAAE,qBAAqB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAClH,CAAC;QACH,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,KAAK,CAAC,OAAO,CAAC,YAAgC,EAAE,IAAY;QAClE,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC;QAClE,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,WAAW,CAAC,mBAAmB,IAAI,GAAG,YAAY,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,WAAW,CAAC,CAAC;QAClH,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,KAAK,CAAC,OAAO,CACnB,IAA+G,EAC/G,MAAkB,EAClB,KAAK,GAA+B,EAAE;QAEtC,MAAM,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC;YAC3B,IAAI;YACJ,SAAS,EAAE,EAAE;YACb,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,KAAK,EAAE;SACvG,CAAC,CAAC;IACd,CAAC;CACF;AAED,gFAAgF;AAChF,MAAM,UAAU,MAAM,CAAC,KAAa,EAAE,IAAY;IAChD,OAAO,UAAU,KAAK,IAAI,QAAQ,IAAI,IAAI,EAAE,CAAC;AAC/C,CAAC;AAED,SAAS,OAAO,CAAC,MAAc;IAC7B,MAAM,CAAC,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;IAC/B,OAAO,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AAC1C,CAAC;AAED,yCAAyC;AACzC,SAAS,IAAI,CAAC,CAAe;IAC3B,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,GAAG,CAAC,CAAC;IACrC,OAAO,EAAE,GAAG,IAAI,EAAE,YAAY,EAAE,CAAC,GAAG,CAAC,CAAC,YAAY,CAAC,EAAE,YAAY,EAAE,CAAC,GAAG,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC;AAC3F,CAAC"}

package/dist/components/secret-hub/types.d.ts

@@ -0,0 +1,77 @@
+/** Who created the secret: a person (through the host's UI/API) or an agent (manage_secret). */
+export type SecretCreator = "user" | "agent";
+/** What a secret is created or updated from — never the value itself. */
+export interface SecretDefinition {
+    /**
+     * Upper-case letters, digits and underscores, starting with a letter (max 64) — the
+     * name the model writes in {{secret:NAME}} and the environment variable a sandbox
+     * command sees.
+     */
+    name: string;
+    /** What the key is for — shown to the model in <available_secrets>. */
+    description?: string;
+    /**
+     * Hosts http_request may send it to: "api.example.com", or "*.example.com" for its
+     * subdomains. Empty = no host (the secret can't be sent anywhere until hosts are set).
+     */
+    allowedHosts?: string[];
+    /**
+     * Tools that may use it ("http_request", "terminal", "run_code"). Default: ["http_request"].
+     * A sandbox tool gets the value as an environment variable, so a host can't be enforced there.
+     */
+    allowedTools?: string[];
+}
+/** A secret's metadata — what lists, tools and APIs show. Never carries the value. */
+export interface SecretInfo {
+    name: string;
+    /** The agent that owns it; absent = a global secret, usable by the agents that enable it. */
+    ownerAgentId?: string;
+    description?: string;
+    allowedHosts: string[];
+    allowedTools: string[];
+    /** The master key that wraps its data key ("" = stored without encryption: no SecretHub provider). */
+    keyId: string;
+    createdBy: SecretCreator;
+    createdAt: string;
+    updatedAt: string;
+    lastUsedAt?: string;
+}
+/** A secret as a SecretStore keeps it: the metadata plus the sealed value. */
+export interface StoredSecret extends SecretInfo {
+    /** The value as sealSecret wrote it ("enc:v2:…"; plain text only when no SecretHub provider is set). */
+    value: string;
+}
+/** How a tool wants to use a secret — checked against allowedTools / allowedHosts. */
+export interface SecretUse {
+    tool: string;
+    /** The host the value is sent to (http_request); absent for sandbox tools. */
+    host?: string;
+}
+/** Counts of stored values by how they are sealed (A-101 status / rotation). */
+export interface SecretStatus {
+    /** The SecretHub provider's id ("none" when values are stored without encryption). */
+    provider: string;
+    /** The master key new values are sealed with ("" without a provider). */
+    currentKeyId: string;
+    /** Secrets per master key id (envelope-encrypted, enc:v2). */
+    byKeyId: Record<string, number>;
+    /** Secrets still in the A-100 single-key format (enc:v1). */
+    legacy: number;
+    /** Secrets stored as plain text. */
+    plain: number;
+}
+export declare const SECRET_LIMITS: {
+    readonly name: 64;
+    readonly description: 500;
+    /** Bytes of a value. */
+    readonly value: 16384;
+    readonly hosts: 32;
+    readonly tools: 16;
+    /** Secrets per owner (an agent, or the global library). */
+    readonly perOwner: 200;
+};
+/** Tools that use secrets in the SDK; allowedTools may name others (an app's own tools). */
+export declare const SECRET_TOOLS: readonly ["http_request", "terminal", "run_code"];
+/** Default allowedTools of a new secret. */
+export declare const DEFAULT_SECRET_TOOLS: readonly string[];
+//# sourceMappingURL=types.d.ts.map

package/dist/components/secret-hub/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/components/secret-hub/types.ts"],"names":[],"mappings":"AASA,gGAAgG;AAChG,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,OAAO,CAAC;AAE7C,yEAAyE;AACzE,MAAM,WAAW,gBAAgB;IAC/B;;;;OAIG;IACH,IAAI,EAAE,MAAM,CAAC;IACb,uEAAuE;IACvE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;CACzB;AAED,sFAAsF;AACtF,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,6FAA6F;IAC7F,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,sGAAsG;IACtG,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,aAAa,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,8EAA8E;AAC9E,MAAM,WAAW,YAAa,SAAQ,UAAU;IAC9C,wGAAwG;IACxG,KAAK,EAAE,MAAM,CAAC;CACf;AAED,sFAAsF;AACtF,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,8EAA8E;IAC9E,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,gFAAgF;AAChF,MAAM,WAAW,YAAY;IAC3B,sFAAsF;IACtF,QAAQ,EAAE,MAAM,CAAC;IACjB,yEAAyE;IACzE,YAAY,EAAE,MAAM,CAAC;IACrB,8DAA8D;IAC9D,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,6DAA6D;IAC7D,MAAM,EAAE,MAAM,CAAC;IACf,oCAAoC;IACpC,KAAK,EAAE,MAAM,CAAC;CACf;AAED,eAAO,MAAM,aAAa;aACxB,IAAI,EAAE,EAAE;aACR,WAAW,EAAE,GAAG;IAChB,wBAAwB;aACxB,KAAK,EAAE,KAAM;aACb,KAAK,EAAE,EAAE;aACT,KAAK,EAAE,EAAE;IACT,2DAA2D;aAC3D,QAAQ,EAAE,GAAG;CACL,CAAC;AAEX,4FAA4F;AAC5F,eAAO,MAAM,YAAY,YAAI,cAAc,EAAE,UAAU,EAAE,UAAU,CAAU,CAAC;AAE9E,4CAA4C;AAC5C,eAAO,MAAM,oBAAoB,EAAE,SAAS,MAAM,EAAqB,CAAC"}