agentvault 1.0.1 → 1.0.5

package/dist/src/security/mfa-approval.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mfa-approval.js","sourceRoot":"","sources":["../../../src/security/mfa-approval.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AACxC,OAAO,EACL,kBAAkB,EAClB,YAAY,EACZ,YAAY,EACZ,UAAU,EACV,UAAU,GACX,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,uBAAuB,EACvB,kBAAkB,EAClB,cAAc,GAEf,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAErD,gFAAgF;AAEhF,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,KAAK,CAAC,CAAC;AAE9D,SAAS,YAAY;IACnB,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AAC7C,CAAC;AA4ID,iFAAiF;AAEjF,SAAS,SAAS,CAAC,QAAgB;IACjC,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,QAAQ,OAAO,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,SAAS,CAAC,QAAgB;IACjC,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,QAAQ,OAAO,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,aAAa;IACpB,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;AAC/C,CAAC;AAED,SAAS,YAAY;IACnB,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,kBAAkB;IACzB,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,sBAAsB,CAAC,CAAC;AACpD,CAAC;AAED,SAAS,SAAS,CAAC,QAAgB;IACjC,MAAM,EAAE,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;IAC/B,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,OAAO,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,EAAE,EAAE,MAAM,CAAC,CAAa,CAAC;AACxD,CAAC;AAED,SAAS,SAAS,CAAC,KAAe;IAChC,YAAY,EAAE,CAAC;IACf,EAAE,CAAC,aAAa,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,SAAS,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,aAAa;IACpB,MAAM,EAAE,GAAG,aAAa,EAAE,CAAC;IAC3B,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IAC/C,OAAO,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,EAAE,EAAE,MAAM,CAAC,CAAmB,CAAC;AAC9D,CAAC;AAED,SAAS,aAAa,CAAC,EAAkB;IACvC,YAAY,EAAE,CAAC;IACf,EAAE,CAAC,aAAa,CAAC,aAAa,EAAE,EAAE,SAAS,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,YAAY;IACnB,MAAM,EAAE,GAAG,YAAY,EAAE,CAAC;IAC1B,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC;QAAE,OAAO,EAAE,CAAC;IAClC,OAAO,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,EAAE,EAAE,MAAM,CAAC,CAA4B,CAAC;AACvE,CAAC;AAED,SAAS,YAAY,CAAC,KAA8B;IAClD,YAAY,EAAE,CAAC;IACf,EAAE,CAAC,aAAa,CAAC,YAAY,EAAE,EAAE,SAAS,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC;AAC7D,CAAC;AAED,SAAS,kBAAkB;IACzB,MAAM,EAAE,GAAG,kBAAkB,EAAE,CAAC;IAChC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;IAC7C,OAAO,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,EAAE,EAAE,MAAM,CAAC,CAAmB,CAAC;AAC9D,CAAC;AAED,SAAS,kBAAkB,CAAC,GAAmB;IAC7C,YAAY,EAAE,CAAC;IACf,EAAE,CAAC,aAAa,CAAC,kBAAkB,EAAE,EAAE,SAAS,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;AACjE,CAAC;AAED,iFAAiF;AAEjF,SAAS,WAAW;IAClB,OAAO,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;AACtE,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAoB;IAC5C,YAAY,EAAE,CAAC;IACf,MAAM,EAAE,GAAG,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACrC,IAAI,GAAG,GAAoB,EAAE,CAAC;IAC9B,IAAI,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,EAAE,CAAC;QACtB,GAAG,GAAG,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,EAAE,EAAE,MAAM,CAAC,CAAoB,CAAC;IAC9D,CAAC;IACD,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChB,EAAE,CAAC,aAAa,CAAC,EAAE,EAAE,SAAS,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;IAE7C,8DAA8D;IAC9D,6DAA6D;IAC7D,mBAAmB,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;QACpC,4DAA4D;IAC9D,CAAC,CAAC,CAAC;AACL,CAAC;AAED,iFAAiF;AAEjF,SAAS,oBAAoB,CAAC,KAAa,EAAE,QAAgB,EAAE,SAAiB;IAC9E,OAAO,MAAM;SACV,UAAU,CAAC,QAAQ,CAAC;SACpB,MAAM,CAAC,GAAG,KAAK,IAAI,QAAQ,IAAI,SAAS,EAAE,CAAC;SAC3C,MAAM,CAAC,KAAK,CAAC,CAAC;AACnB,CAAC;AAED,iFAAiF;AAEjF,MAAM,WAAW,GAAG,MAAM,CAAC,CAAC,aAAa;AAEzC;;;GAGG;AACH,SAAS,cAAc,CAAC,QAAgB;IACtC,MAAM,KAAK,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;IAClC,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,QAAQ,EAAE,CAAC,CAAC;IAC1E,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IAClD,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,MAAM,CAAC,4BAA4B,CAAC,CAAC,MAAM,EAAE,CAAC;AAC5F,CAAC;AAED,SAAS,gBAAgB,CAAC,SAAiB,EAAE,QAAgB,EAAE,KAAa;IAC1E,MAAM,GAAG,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;IACrC,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,WAAW,CAAC,CAAC,WAAW,EAAE,CAAC;IACnE,MAAM,OAAO,GAAG,GAAG,SAAS,IAAI,KAAK,IAAI,SAAS,EAAE,CAAC;IACrD,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAE7E,+CAA+C;IAC/C,MAAM,KAAK,GAAG,YAAY,EAAE,CAAC;IAC7B,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IACrD,YAAY,CAAC,KAAK,CAAC,CAAC;IAEpB,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAC9B,KAAa;IAEb,MAAM,KAAK,GAAG,YAAY,EAAE,CAAC;IAC7B,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;IAC1B,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;IAC3D,IAAI,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;IAClE,IAAI,IAAI,IAAI,EAAE,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;IAEzF,gBAAgB;IAChB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACjB,YAAY,CAAC,KAAK,CAAC,CAAC;IAEpB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC;AACjD,CAAC;AAED,iFAAiF;AAEjF,MAAM,cAAc,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,SAAS;AAChD,MAAM,QAAQ,GAAG,CAAC,CAAC,CAAC,uBAAuB;AAE3C;;;GAGG;AACH,SAAS,uBAAuB,CAAC,MAAc;IAC7C,MAAM,EAAE,GAAG,aAAa,EAAE,CAAC;IAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,WAAW,GAAG,GAAG,GAAG,cAAc,CAAC;IAEzC,0CAA0C;IAC1C,MAAM,MAAM,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAC9C,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE,GAAG,WAAW,CAC7C,CAAC;IAEF,IAAI,MAAM,CAAC,MAAM,IAAI,QAAQ,EAAE,CAAC;QAC9B,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC,wCAAwC;QAC3D,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;IACtC,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC;IAC5B,aAAa,CAAC,EAAE,CAAC,CAAC;IAClB,OAAO,IAAI,CAAC;AACd,CAAC;AAED,iFAAiF;AAEjF;;;GAGG;AACH,MAAM,UAAU,oBAAoB;IAClC,OAAO,MAAM;SACV,UAAU,CAAC,QAAQ,CAAC;SACpB,MAAM,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC;SACxD,MAAM,CAAC,KAAK,CAAC;SACb,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAClB,CAAC;AAID,SAAS,WAAW,CAAC,MAAc,EAAE,WAAmB;IACtD,MAAM,GAAG,GAAG,kBAAkB,EAAE,CAAC;IACjC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IAEtC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,wEAAwE;QACxE,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAClC,kBAAkB,CAAC,GAAG,CAAC,CAAC;QACxB,OAAO,YAAY,CAAC;IACtB,CAAC;IAED,OAAO,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC;AAC9D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,MAAc,EAAE,WAAmB;IAChE,MAAM,GAAG,GAAG,kBAAkB,EAAE,CAAC;IACjC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IACtC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QACjC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,EAAE,WAAW,CAAC,CAAC;QAC5C,kBAAkB,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC;AACH,CAAC;AAED,iFAAiF;AAEjF;;;;;;;GAOG;AACH,MAAM,UAAU,QAAQ,CAAC,QAAgB;IACvC,YAAY,EAAE,CAAC;IAEf,MAAM,MAAM,GAAG,kBAAkB,EAAE,CAAC;IACpC,MAAM,SAAS,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;IACvC,MAAM,GAAG,GAAG,UAAU,CAAC,MAAM,EAAE,cAAc,QAAQ,EAAE,CAAC,CAAC;IACzD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAErC,MAAM,KAAK,GAAa;QACtB,QAAQ;QACR,aAAa,EAAE,SAAS;QACxB,YAAY,EAAE,CAAC;QACf,UAAU,EAAE,EAAE;QACd,MAAM,EAAE,KAAK;QACb,SAAS,EAAE,GAAG;QACd,SAAS,EAAE,GAAG;KACf,CAAC;IAEF,SAAS,CAAC,KAAK,CAAC,CAAC;IAEjB,gBAAgB,CAAC;QACf,EAAE,EAAE,WAAW,EAAE;QACjB,SAAS,EAAE,OAAO;QAClB,QAAQ;QACR,KAAK,EAAE,OAAO;QACd,SAAS,EAAE,GAAG;QACd,MAAM,EAAE,wEAAwE;KACjF,CAAC,CAAC;IAEH,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;AACjF,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,cAAc,CAAC,SAAiB,EAAE,QAAgB;IAChE,MAAM,KAAK,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;IAClC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CACb,kCAAkC,QAAQ,iDAAiD,QAAQ,EAAE,CACtG,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CACb,WAAW,QAAQ,yCAAyC;YAC1D,iEAAiE,QAAQ,EAAE,CAC9E,CAAC;IACJ,CAAC;IAED,gCAAgC;IAChC,KAAK,CAAC,YAAY,IAAI,CAAC,CAAC;IACxB,KAAK,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3C,SAAS,CAAC,KAAK,CAAC,CAAC;IAEjB,MAAM,KAAK,GAAG,KAAK,CAAC,YAAY,CAAC;IACjC,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3C,MAAM,aAAa,GAAG,oBAAoB,CAAC,KAAK,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;IACvE,MAAM,KAAK,GAAG,gBAAgB,CAAC,SAAS,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC3D,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,WAAW,CAAC,CAAC,WAAW,EAAE,CAAC;IAEnE,gBAAgB,CAAC;QACf,EAAE,EAAE,WAAW,EAAE;QACjB,SAAS;QACT,QAAQ;QACR,KAAK,EAAE,kBAAkB;QACzB,KAAK;QACL,aAAa;QACb,SAAS;QACT,MAAM,EAAE,4BAA4B,SAAS,EAAE;KAChD,CAAC,CAAC;IAEH,OAAO;QACL,SAAS;QACT,QAAQ;QACR,KAAK;QACL,SAAS;QACT,aAAa;QACb,YAAY,EAAE,8BAA8B,SAAS,UAAU,KAAK,EAAE;QACtE,SAAS;KACV,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAqB;IACrD,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IACvD,MAAM,WAAW,GAAG,KAAK,CAAC,iBAAiB,IAAI,oBAAoB,EAAE,CAAC;IACtE,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAErC,4EAA4E;IAC5E,MAAM,KAAK,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;IAClC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IAC5C,CAAC;IAED,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACjB,gBAAgB,CAAC;YACf,EAAE,EAAE,WAAW,EAAE;YACjB,SAAS;YACT,QAAQ;YACR,KAAK,EAAE,UAAU;YACjB,KAAK;YACL,SAAS,EAAE,GAAG;YACd,MAAM,EAAE,qCAAqC;YAC7C,iBAAiB,EAAE,WAAW;SAC/B,CAAC,CAAC;QACH,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;IAChD,CAAC;IAED,6EAA6E;IAC7E,IAAI,KAAK,KAAK,KAAK,CAAC,YAAY,EAAE,CAAC;QACjC,gBAAgB,CAAC;YACf,EAAE,EAAE,WAAW,EAAE;YACjB,SAAS;YACT,QAAQ;YACR,KAAK,EAAE,UAAU;YACjB,KAAK;YACL,SAAS,EAAE,GAAG;YACd,MAAM,EAAE,6BAA6B,KAAK,CAAC,YAAY,SAAS,KAAK,EAAE;YACvE,iBAAiB,EAAE,WAAW;SAC/B,CAAC,CAAC;QACH,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;IACjD,CAAC;IAED,6EAA6E;IAC7E,IAAI,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrC,gBAAgB,CAAC;YACf,EAAE,EAAE,WAAW,EAAE;YACjB,SAAS;YACT,QAAQ;YACR,KAAK,EAAE,UAAU;YACjB,KAAK;YACL,SAAS,EAAE,GAAG;YACd,MAAM,EAAE,iDAAiD;YACzD,iBAAiB,EAAE,WAAW;SAC/B,CAAC,CAAC;QACH,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;IACjD,CAAC;IAED,6EAA6E;IAC7E,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IACjD,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC;QAClC,gBAAgB,CAAC;YACf,EAAE,EAAE,WAAW,EAAE;YACjB,SAAS;YACT,QAAQ;YACR,KAAK,EAAE,UAAU;YACjB,KAAK;YACL,SAAS,EAAE,GAAG;YACd,MAAM,EAAE,mBAAmB;YAC3B,iBAAiB,EAAE,WAAW;SAC/B,CAAC,CAAC;QACH,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;IAC/C,CAAC;IAED,6EAA6E;IAC7E,IAAI,CAAC,uBAAuB,CAAC,WAAW,CAAC,EAAE,CAAC;QAC1C,gBAAgB,CAAC;YACf,EAAE,EAAE,WAAW,EAAE;YACjB,SAAS;YACT,QAAQ;YACR,KAAK,EAAE,qBAAqB;YAC5B,KAAK;YACL,SAAS,EAAE,GAAG;YACd,MAAM,EAAE,UAAU,WAAW,aAAa,QAAQ,mBAAmB;YACrE,iBAAiB,EAAE,WAAW;SAC/B,CAAC,CAAC;QACH,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;IAC/C,CAAC;IAED,6EAA6E;IAC7E,0EAA0E;IAC1E,kDAAkD;IAClD,MAAM,WAAW,GAAG,WAAW,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IACvD,IAAI,WAAW,KAAK,YAAY,EAAE,CAAC;QACjC,yDAAyD;QACzD,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC;QACpB,KAAK,CAAC,yBAAyB,GAAG,WAAW,CAAC;QAC9C,KAAK,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC3C,SAAS,CAAC,KAAK,CAAC,CAAC;QAEjB,gBAAgB,CAAC;YACf,EAAE,EAAE,WAAW,EAAE;YACjB,SAAS;YACT,QAAQ;YACR,KAAK,EAAE,kBAAkB;YACzB,KAAK;YACL,SAAS,EAAE,GAAG;YACd,MAAM,EAAE,8BAA8B,WAAW,iFAAiF,QAAQ,sBAAsB,WAAW,EAAE;YAC7K,iBAAiB,EAAE,WAAW;SAC/B,CAAC,CAAC;QACH,gBAAgB,CAAC;YACf,EAAE,EAAE,WAAW,EAAE;YACjB,SAAS;YACT,QAAQ;YACR,KAAK,EAAE,mBAAmB;YAC1B,SAAS,EAAE,GAAG;YACd,MAAM,EAAE,sFAAsF,QAAQ,oCAAoC,WAAW,8DAA8D;YACnN,iBAAiB,EAAE,WAAW;SAC/B,CAAC,CAAC;QACH,gBAAgB,CAAC;YACf,EAAE,EAAE,WAAW,EAAE;YACjB,SAAS;YACT,QAAQ;YACR,KAAK,EAAE,eAAe;YACtB,SAAS,EAAE,GAAG;YACd,MAAM,EAAE,iFAAiF;YACzF,iBAAiB,EAAE,WAAW;SAC/B,CAAC,CAAC;QAEH,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAC1C,CAAC;IAED,6EAA6E;IAE7E,mCAAmC;IACnC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7B,KAAK,CAAC,SAAS,GAAG,GAAG,CAAC;IACtB,SAAS,CAAC,KAAK,CAAC,CAAC;IAEjB,8DAA8D;IAC9D,MAAM,aAAa,GAAG,oBAAoB,CAAC,KAAK,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;IACjE,MAAM,UAAU,GAAG,MAAM;SACtB,UAAU,CAAC,QAAQ,EAAE,YAAY,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;SACvD,MAAM,CAAC,GAAG,KAAK,IAAI,SAAS,IAAI,QAAQ,IAAI,GAAG,EAAE,CAAC;SAClD,MAAM,CAAC,KAAK,CAAC,CAAC;IAEjB,gBAAgB,CAAC;QACf,EAAE,EAAE,WAAW,EAAE;QACjB,SAAS;QACT,QAAQ;QACR,KAAK,EAAE,UAAU;QACjB,KAAK;QACL,aAAa;QACb,UAAU;QACV,SAAS,EAAE,GAAG;QACd,MAAM,EAAE,sBAAsB,WAAW,EAAE;QAC3C,iBAAiB,EAAE,WAAW;KAC/B,CAAC,CAAC;IAEH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;AAClC,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,uBAAuB,CAAC,KAAwB;IAC9D,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,aAAa,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IACvE,MAAM,WAAW,GAAG,KAAK,CAAC,iBAAiB,IAAI,oBAAoB,EAAE,CAAC;IACtE,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAErC,4EAA4E;IAC5E,MAAM,KAAK,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;IAClC,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IAEtD,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACjB,gBAAgB,CAAC;YACf,EAAE,EAAE,WAAW,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU;YACzD,KAAK,EAAE,SAAS,EAAE,GAAG;YACrB,MAAM,EAAE,+CAA+C;YACvD,iBAAiB,EAAE,WAAW;SAC/B,CAAC,CAAC;QACH,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;IAChD,CAAC;IAED,6EAA6E;IAC7E,IAAI,KAAK,KAAK,KAAK,CAAC,YAAY,EAAE,CAAC;QACjC,gBAAgB,CAAC;YACf,EAAE,EAAE,WAAW,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU;YACzD,KAAK,EAAE,SAAS,EAAE,GAAG;YACrB,MAAM,EAAE,6BAA6B,KAAK,CAAC,YAAY,SAAS,KAAK,EAAE;YACvE,iBAAiB,EAAE,WAAW;SAC/B,CAAC,CAAC;QACH,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;IACjD,CAAC;IAED,IAAI,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrC,gBAAgB,CAAC;YACf,EAAE,EAAE,WAAW,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU;YACzD,KAAK,EAAE,SAAS,EAAE,GAAG;YACrB,MAAM,EAAE,iDAAiD;YACzD,iBAAiB,EAAE,WAAW;SAC/B,CAAC,CAAC;QACH,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;IACjD,CAAC;IAED,6EAA6E;IAC7E,MAAM,YAAY,GAAG,kBAAkB,CAAC,WAAW,CAAC,CAAC;IACrD,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,gBAAgB,CAAC;YACf,EAAE,EAAE,WAAW,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU;YACzD,KAAK,EAAE,SAAS,EAAE,GAAG;YACrB,MAAM,EAAE,+CAA+C,WAAW,EAAE;YACpE,iBAAiB,EAAE,WAAW;SAC/B,CAAC,CAAC;QACH,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC;IACzD,CAAC;IAED,MAAM,WAAW,GAAG,cAAc,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,wCAAwC;IAC7F,MAAM,YAAY,GAAG,uBAAuB,CAC1C,SAAS,EACT,aAAa,EACb,YAAY,EACZ,WAAW,CACZ,CAAC;IAEF,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC;QACrB,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,KAAK,gBAAgB;YACrD,CAAC,CAAC,0BAA0B;YAC5B,CAAC,CAAC,6BAA6B,CAAC;QAClC,gBAAgB,CAAC;YACf,EAAE,EAAE,WAAW,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU;YACzD,KAAK,EAAE,SAAS,EAAE,GAAG;YACrB,MAAM,EAAE,kCAAkC,YAAY,CAAC,MAAM,EAAE;YAC/D,iBAAiB,EAAE,WAAW;SAC/B,CAAC,CAAC;QACH,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAC/B,CAAC;IAED,6EAA6E;IAC7E,IAAI,CAAC,uBAAuB,CAAC,WAAW,CAAC,EAAE,CAAC;QAC1C,gBAAgB,CAAC;YACf,EAAE,EAAE,WAAW,EAAE,EAAE,SAAS,EAAE,QAAQ;YACtC,KAAK,EAAE,qBAAqB,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG;YACnD,MAAM,EAAE,UAAU,WAAW,aAAa,QAAQ,mBAAmB;YACrE,iBAAiB,EAAE,WAAW;SAC/B,CAAC,CAAC;QACH,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;IAC/C,CAAC;IAED,6EAA6E;IAC7E,MAAM,WAAW,GAAG,WAAW,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IACvD,IAAI,WAAW,KAAK,YAAY,EAAE,CAAC;QACjC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC;QACpB,KAAK,CAAC,yBAAyB,GAAG,WAAW,CAAC;QAC9C,KAAK,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC3C,SAAS,CAAC,KAAK,CAAC,CAAC;QAEjB,gBAAgB,CAAC;YACf,EAAE,EAAE,WAAW,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,kBAAkB;YACjE,KAAK,EAAE,SAAS,EAAE,GAAG;YACrB,MAAM,EAAE,4BAA4B,WAAW,gDAAgD;YAC/F,iBAAiB,EAAE,WAAW;SAC/B,CAAC,CAAC;QACH,gBAAgB,CAAC;YACf,EAAE,EAAE,WAAW,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,eAAe;YAC9D,SAAS,EAAE,GAAG;YACd,MAAM,EAAE,sCAAsC;YAC9C,iBAAiB,EAAE,WAAW;SAC/B,CAAC,CAAC;QACH,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAC1C,CAAC;IAED,6EAA6E;IAC7E,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7B,KAAK,CAAC,SAAS,GAAG,GAAG,CAAC;IACtB,SAAS,CAAC,KAAK,CAAC,CAAC;IAEjB,MAAM,UAAU,GAAG,MAAM;SACtB,UAAU,CAAC,QAAQ,EAAE,YAAY,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;SACvD,MAAM,CAAC,aAAa,KAAK,IAAI,SAAS,IAAI,QAAQ,IAAI,GAAG,EAAE,CAAC;SAC5D,MAAM,CAAC,KAAK,CAAC,CAAC;IAEjB,gBAAgB,CAAC;QACf,EAAE,EAAE,WAAW,EAAE,EAAE,SAAS,EAAE,QAAQ;QACtC,KAAK,EAAE,oBAAoB,EAAE,KAAK,EAAE,aAAa;QACjD,UAAU,EAAE,SAAS,EAAE,GAAG;QAC1B,MAAM,EAAE,oCAAoC,WAAW,iBAAiB,SAAS,CAAC,WAAW,GAAG;QAChG,iBAAiB,EAAE,WAAW;KAC/B,CAAC,CAAC;IAEH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;AAClC,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,YAAY,CAC1B,QAAgB,EAChB,QAAgB,EAChB,cAAuB;IAEvB,MAAM,KAAK,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;IAClC,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IAEzB,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IACjD,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,QAAQ,CAAC;QAAE,OAAO,KAAK,CAAC;IAEhD,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC;IACrB,KAAK,CAAC,yBAAyB,GAAG,SAAS,CAAC;IAC5C,KAAK,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3C,SAAS,CAAC,KAAK,CAAC,CAAC;IAEjB,IAAI,cAAc,EAAE,CAAC;QACnB,cAAc,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;IAC3C,CAAC;IAED,gBAAgB,CAAC;QACf,EAAE,EAAE,WAAW,EAAE;QACjB,SAAS,EAAE,QAAQ;QACnB,QAAQ;QACR,KAAK,EAAE,iBAAiB;QACxB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,MAAM,EAAE,cAAc;YACpB,CAAC,CAAC,2BAA2B,cAAc,wDAAwD;YACnG,CAAC,CAAC,yEAAyE;QAC7E,iBAAiB,EAAE,cAAc;KAClC,CAAC,CAAC;IAEH,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,QAAgB;IAC7C,MAAM,EAAE,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;IAC/B,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC;QAAE,OAAO,EAAE,CAAC;IAClC,OAAO,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,EAAE,EAAE,MAAM,CAAC,CAAoB,CAAC;AAC/D,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,QAAgB;IAC3C,MAAM,KAAK,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;IAClC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,EAAE,cAAc,EAAE,CAAC,EAAE,CAAC;IAClF,CAAC;IACD,OAAO;QACL,UAAU,EAAE,IAAI;QAChB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,cAAc,EAAE,KAAK,CAAC,UAAU,CAAC,MAAM;QACvC,SAAS,EAAE,KAAK,CAAC,SAAS;KAC3B,CAAC;AACJ,CAAC"}

package/dist/src/security/multisig.d.ts

@@ -0,0 +1,102 @@
+/**
+ * Multi-Signature Approval Workflows
+ *
+ * Manages local approval workflows requiring multiple signatures.
+ * This is a LOCAL approval tracking system, not cryptographic multisig.
+ *
+ * IMPORTANT: For production blockchain multisig, use:
+ * - ICP canister-based threshold signatures (VetKeys)
+ * - The canister multisig module for on-chain verification
+ *
+ * This module provides:
+ * - Approval request tracking
+ * - Signature collection and counting
+ * - Policy-based approval thresholds
+ * - Audit trail for approvals
+ */
+export type ApprovalStatus = 'pending' | 'approved' | 'rejected' | 'expired';
+export type ApprovalPolicy = 'all' | 'majority' | 'quorum';
+export interface ApprovalRequest {
+    id: string;
+    type: 'deploy' | 'upgrade' | 'transfer' | 'config_change' | 'rollback';
+    agentName: string;
+    canisterId?: string;
+    description: string;
+    proposedBy: string;
+    timestamp: Date;
+    expiresAt?: Date;
+    policy: ApprovalPolicy;
+    requiredApprovals: number;
+    approvals: ApprovalSignature[];
+    status: ApprovalStatus;
+    data?: Record<string, unknown>;
+}
+/**
+ * Approval signature (NOT cryptographic - for audit trail only)
+ *
+ * This represents an approval action, not a cryptographic signature.
+ * For cryptographic multisig, use the VetKeys canister integration.
+ */
+export interface ApprovalSignature {
+    signer: string;
+    /** Audit token - NOT a cryptographic signature */
+    auditToken: string;
+    timestamp: Date;
+    comment?: string;
+}
+export interface ApprovalConfig {
+    policy: ApprovalPolicy;
+    requiredApprovals?: number;
+    approvalTimeoutMs?: number;
+    allowedSigners?: string[];
+}
+/**
+ * Create a new approval request
+ */
+export declare function createApprovalRequest(type: ApprovalRequest['type'], agentName: string, description: string, proposedBy: string, config: ApprovalConfig, data?: Record<string, any>): ApprovalRequest;
+/**
+ * Calculate required approvals based on policy
+ */
+export declare function calculateRequiredApprovals(policy: ApprovalPolicy, totalSigners: number): number;
+/**
+ * Sign an approval request
+ */
+export declare function signApprovalRequest(id: string, signer: string, comment?: string): boolean;
+/**
+ * Reject an approval request
+ */
+export declare function rejectApprovalRequest(id: string, rejectedBy: string, reason?: string): boolean;
+/**
+ * Get approval request by ID
+ */
+export declare function getApprovalRequest(id: string): ApprovalRequest | null;
+/**
+ * List approval requests
+ */
+export declare function listApprovalRequests(agentName?: string, status?: ApprovalStatus): ApprovalRequest[];
+/**
+ * Delete approval request
+ */
+export declare function deleteApprovalRequest(id: string): boolean;
+/**
+ * Check if request is approved
+ */
+export declare function isApproved(id: string): boolean;
+/**
+ * Get approval status summary
+ */
+export declare function getApprovalSummary(id: string): {
+    total: number;
+    approved: number;
+    required: number;
+    status: ApprovalStatus;
+} | null;
+/**
+ * List pending approvals for a signer
+ */
+export declare function listPendingApprovals(signer: string): ApprovalRequest[];
+/**
+ * Clean up expired requests
+ */
+export declare function cleanupExpiredRequests(): number;
+//# sourceMappingURL=multisig.d.ts.map

package/dist/src/security/multisig.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"multisig.d.ts","sourceRoot":"","sources":["../../../src/security/multisig.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAWH,MAAM,MAAM,cAAc,GAAG,SAAS,GAAG,UAAU,GAAG,UAAU,GAAG,SAAS,CAAC;AAC7E,MAAM,MAAM,cAAc,GAAG,KAAK,GAAG,UAAU,GAAG,QAAQ,CAAC;AAE3D,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,QAAQ,GAAG,SAAS,GAAG,UAAU,GAAG,eAAe,GAAG,UAAU,CAAC;IACvE,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,CAAC,EAAE,IAAI,CAAC;IACjB,MAAM,EAAE,cAAc,CAAC;IACvB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,SAAS,EAAE,iBAAiB,EAAE,CAAC;IAC/B,MAAM,EAAE,cAAc,CAAC;IACvB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAChC;AAED;;;;;GAKG;AACH,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,kDAAkD;IAClD,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,IAAI,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,cAAc,CAAC;IACvB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;CAC3B;AAoBD;;GAEG;AACH,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,eAAe,CAAC,MAAM,CAAC,EAC7B,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,cAAc,EACtB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GACzB,eAAe,CA6BjB;AAED;;GAEG;AACH,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,cAAc,EACtB,YAAY,EAAE,MAAM,GACnB,MAAM,CAUR;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CACjC,EAAE,EAAE,MAAM,EACV,MAAM,EAAE,MAAM,EACd,OAAO,CAAC,EAAE,MAAM,GACf,OAAO,CAkCT;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CACnC,EAAE,EAAE,MAAM,EACV,UAAU,EAAE,MAAM,EAClB,MAAM,CAAC,EAAE,MAAM,GACd,OAAO,CAwBT;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,EAAE,EAAE,MAAM,GAAG,eAAe,GAAG,IAAI,CAmDrE;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAClC,SAAS,CAAC,EAAE,MAAM,EAClB,MAAM,CAAC,EAAE,cAAc,GACtB,eAAe,EAAE,CAgCnB;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAazD;AAED;;GAEG;AACH,wBAAgB,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAO9C;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,EAAE,EAAE,MAAM,GAAG;IAC9C,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,cAAc,CAAC;CACxB,GAAG,IAAI,CAYP;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG,eAAe,EAAE,CAQtE;AAED;;GAEG;AACH,wBAAgB,sBAAsB,IAAI,MAAM,CA+B/C"}

package/dist/src/security/multisig.js

@@ -0,0 +1,283 @@
+/**
+ * Multi-Signature Approval Workflows
+ *
+ * Manages local approval workflows requiring multiple signatures.
+ * This is a LOCAL approval tracking system, not cryptographic multisig.
+ *
+ * IMPORTANT: For production blockchain multisig, use:
+ * - ICP canister-based threshold signatures (VetKeys)
+ * - The canister multisig module for on-chain verification
+ *
+ * This module provides:
+ * - Approval request tracking
+ * - Signature collection and counting
+ * - Policy-based approval thresholds
+ * - Audit trail for approvals
+ */
+import fs from 'node:fs';
+import path from 'node:path';
+import os from 'node:os';
+import crypto from 'node:crypto';
+import { parse, stringify } from 'yaml';
+const AGENTVAULT_DIR = path.join(os.homedir(), '.agentvault');
+const APPROVALS_DIR = path.join(AGENTVAULT_DIR, 'approvals');
+function ensureApprovalsDir() {
+    if (!fs.existsSync(AGENTVAULT_DIR)) {
+        fs.mkdirSync(AGENTVAULT_DIR, { recursive: true });
+    }
+    if (!fs.existsSync(APPROVALS_DIR)) {
+        fs.mkdirSync(APPROVALS_DIR, { recursive: true });
+    }
+}
+function getApprovalFilePath(id) {
+    ensureApprovalsDir();
+    return path.join(APPROVALS_DIR, `${id}.yaml`);
+}
+function generateRequestId() {
+    return `req-${Date.now()}-${crypto.randomBytes(4).toString('hex')}`;
+}
+/**
+ * Create a new approval request
+ */
+export function createApprovalRequest(type, agentName, description, proposedBy, config, data) {
+    const id = generateRequestId();
+    const timestamp = new Date();
+    const requiredApprovals = config.requiredApprovals || calculateRequiredApprovals(config.policy, config.allowedSigners?.length || 1);
+    const request = {
+        id,
+        type,
+        agentName,
+        description,
+        proposedBy,
+        timestamp,
+        policy: config.policy,
+        requiredApprovals,
+        approvals: [],
+        status: 'pending',
+        data,
+    };
+    if (config.approvalTimeoutMs) {
+        request.expiresAt = new Date(timestamp.getTime() + config.approvalTimeoutMs);
+    }
+    const filePath = getApprovalFilePath(id);
+    fs.writeFileSync(filePath, stringify(request), 'utf8');
+    return request;
+}
+/**
+ * Calculate required approvals based on policy
+ */
+export function calculateRequiredApprovals(policy, totalSigners) {
+    switch (policy) {
+        case 'all':
+            return totalSigners;
+        case 'majority':
+            return Math.floor(totalSigners / 2) + 1;
+        case 'quorum':
+        default:
+            return Math.max(1, Math.ceil(totalSigners * 0.6));
+    }
+}
+/**
+ * Sign an approval request
+ */
+export function signApprovalRequest(id, signer, comment) {
+    const request = getApprovalRequest(id);
+    if (!request) {
+        return false;
+    }
+    if (request.status !== 'pending') {
+        return false;
+    }
+    const existingSignature = request.approvals.find((s) => s.signer === signer);
+    if (existingSignature) {
+        return false;
+    }
+    const approvalSignature = {
+        signer,
+        auditToken: crypto.createHash('sha256')
+            .update(`${id}:${signer}:${Date.now()}:${request.description}`)
+            .digest('hex'),
+        timestamp: new Date(),
+        comment,
+    };
+    request.approvals.push(approvalSignature);
+    if (request.approvals.length >= request.requiredApprovals) {
+        request.status = 'approved';
+    }
+    const filePath = getApprovalFilePath(id);
+    fs.writeFileSync(filePath, stringify(request), 'utf8');
+    return true;
+}
+/**
+ * Reject an approval request
+ */
+export function rejectApprovalRequest(id, rejectedBy, reason) {
+    const request = getApprovalRequest(id);
+    if (!request) {
+        return false;
+    }
+    if (request.status !== 'pending') {
+        return false;
+    }
+    request.status = 'rejected';
+    request.approvals.push({
+        signer: rejectedBy,
+        auditToken: crypto.createHash('sha256')
+            .update(`${id}:rejected:${Date.now()}:${reason || 'no-reason'}`)
+            .digest('hex'),
+        timestamp: new Date(),
+        comment: `Rejected: ${reason || 'No reason provided'}`,
+    });
+    const filePath = getApprovalFilePath(id);
+    fs.writeFileSync(filePath, stringify(request), 'utf8');
+    return true;
+}
+/**
+ * Get approval request by ID
+ */
+export function getApprovalRequest(id) {
+    try {
+        const filePath = getApprovalFilePath(id);
+        if (!fs.existsSync(filePath)) {
+            return null;
+        }
+        const content = fs.readFileSync(filePath, 'utf8');
+        const parsed = parse(content);
+        parsed.timestamp = new Date(parsed.timestamp);
+        parsed.expiresAt = parsed.expiresAt ? new Date(parsed.expiresAt) : undefined;
+        // Migrate old 'signature' field to 'auditToken' for backward compatibility
+        parsed.approvals = parsed.approvals.map((a) => {
+            const migrated = {
+                signer: a.signer,
+                auditToken: a.auditToken || a.signature || '',
+                timestamp: new Date(a.timestamp),
+                comment: a.comment,
+            };
+            return migrated;
+        });
+        return parsed;
+    }
+    catch (error) {
+        console.error(`Failed to get approval request ${id}:`, error);
+        return null;
+    }
+}
+/**
+ * List approval requests
+ */
+export function listApprovalRequests(agentName, status) {
+    try {
+        ensureApprovalsDir();
+        const files = fs.readdirSync(APPROVALS_DIR);
+        const requests = [];
+        for (const file of files) {
+            if (file.endsWith('.yaml')) {
+                const id = file.replace('.yaml', '');
+                const request = getApprovalRequest(id);
+                if (request) {
+                    if (agentName && request.agentName !== agentName) {
+                        continue;
+                    }
+                    if (status && request.status !== status) {
+                        continue;
+                    }
+                    if (request.expiresAt && new Date() > request.expiresAt && request.status === 'pending') {
+                        request.status = 'expired';
+                    }
+                    requests.push(request);
+                }
+            }
+        }
+        return requests.sort((a, b) => b.timestamp.getTime() - a.timestamp.getTime());
+    }
+    catch (error) {
+        console.error('Failed to list approval requests:', error);
+        return [];
+    }
+}
+/**
+ * Delete approval request
+ */
+export function deleteApprovalRequest(id) {
+    try {
+        const filePath = getApprovalFilePath(id);
+        if (!fs.existsSync(filePath)) {
+            return false;
+        }
+        fs.unlinkSync(filePath);
+        return true;
+    }
+    catch (error) {
+        console.error(`Failed to delete approval request ${id}:`, error);
+        return false;
+    }
+}
+/**
+ * Check if request is approved
+ */
+export function isApproved(id) {
+    const request = getApprovalRequest(id);
+    if (!request) {
+        return false;
+    }
+    return request.status === 'approved';
+}
+/**
+ * Get approval status summary
+ */
+export function getApprovalSummary(id) {
+    const request = getApprovalRequest(id);
+    if (!request) {
+        return null;
+    }
+    return {
+        total: request.approvals.length,
+        approved: request.requiredApprovals,
+        required: request.requiredApprovals,
+        status: request.status,
+    };
+}
+/**
+ * List pending approvals for a signer
+ */
+export function listPendingApprovals(signer) {
+    try {
+        const requests = listApprovalRequests(undefined, 'pending');
+        return requests.filter((r) => !r.approvals.some((a) => a.signer === signer));
+    }
+    catch (error) {
+        console.error('Failed to list pending approvals:', error);
+        return [];
+    }
+}
+/**
+ * Clean up expired requests
+ */
+export function cleanupExpiredRequests() {
+    let cleaned = 0;
+    try {
+        ensureApprovalsDir();
+        const files = fs.readdirSync(APPROVALS_DIR);
+        const now = new Date();
+        for (const file of files) {
+            if (file.endsWith('.yaml')) {
+                const id = file.replace('.yaml', '');
+                const request = getApprovalRequest(id);
+                if (request &&
+                    request.expiresAt &&
+                    now > request.expiresAt &&
+                    request.status === 'pending') {
+                    request.status = 'expired';
+                    const filePath = getApprovalFilePath(id);
+                    fs.writeFileSync(filePath, stringify(request), 'utf8');
+                    cleaned++;
+                }
+            }
+        }
+    }
+    catch (error) {
+        console.error('Failed to cleanup expired requests:', error);
+    }
+    return cleaned;
+}
+//# sourceMappingURL=multisig.js.map

package/dist/src/security/multisig.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"multisig.js","sourceRoot":"","sources":["../../../src/security/multisig.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AAExC,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,aAAa,CAAC,CAAC;AAC9D,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;AA0C7D,SAAS,kBAAkB;IACzB,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;QACnC,EAAE,CAAC,SAAS,CAAC,cAAc,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,CAAC;IACD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;QAClC,EAAE,CAAC,SAAS,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACnD,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,EAAU;IACrC,kBAAkB,EAAE,CAAC;IACrB,OAAO,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,iBAAiB;IACxB,OAAO,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;AACtE,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,qBAAqB,CACnC,IAA6B,EAC7B,SAAiB,EACjB,WAAmB,EACnB,UAAkB,EAClB,MAAsB,EACtB,IAA0B;IAE1B,MAAM,EAAE,GAAG,iBAAiB,EAAE,CAAC;IAC/B,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;IAE7B,MAAM,iBAAiB,GACrB,MAAM,CAAC,iBAAiB,IAAI,0BAA0B,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,cAAc,EAAE,MAAM,IAAI,CAAC,CAAC,CAAC;IAE5G,MAAM,OAAO,GAAoB;QAC/B,EAAE;QACF,IAAI;QACJ,SAAS;QACT,WAAW;QACX,UAAU;QACV,SAAS;QACT,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,iBAAiB;QACjB,SAAS,EAAE,EAAE;QACb,MAAM,EAAE,SAAS;QACjB,IAAI;KACL,CAAC;IAEF,IAAI,MAAM,CAAC,iBAAiB,EAAE,CAAC;QAC7B,OAAO,CAAC,SAAS,GAAG,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC,iBAAiB,CAAC,CAAC;IAC/E,CAAC;IAED,MAAM,QAAQ,GAAG,mBAAmB,CAAC,EAAE,CAAC,CAAC;IACzC,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC;IAEvD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,0BAA0B,CACxC,MAAsB,EACtB,YAAoB;IAEpB,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,KAAK;YACR,OAAO,YAAY,CAAC;QACtB,KAAK,UAAU;YACb,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;QAC1C,KAAK,QAAQ,CAAC;QACd;YACE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY,GAAG,GAAG,CAAC,CAAC,CAAC;IACtD,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CACjC,EAAU,EACV,MAAc,EACd,OAAgB;IAEhB,MAAM,OAAO,GAAG,kBAAkB,CAAC,EAAE,CAAC,CAAC;IACvC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACjC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,iBAAiB,GAAG,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;IAC7E,IAAI,iBAAiB,EAAE,CAAC;QACtB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,iBAAiB,GAAsB;QAC3C,MAAM;QACN,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC;aACpC,MAAM,CAAC,GAAG,EAAE,IAAI,MAAM,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;aAC9D,MAAM,CAAC,KAAK,CAAC;QAChB,SAAS,EAAE,IAAI,IAAI,EAAE;QACrB,OAAO;KACR,CAAC;IAEF,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAE1C,IAAI,OAAO,CAAC,SAAS,CAAC,MAAM,IAAI,OAAO,CAAC,iBAAiB,EAAE,CAAC;QAC1D,OAAO,CAAC,MAAM,GAAG,UAAU,CAAC;IAC9B,CAAC;IAED,MAAM,QAAQ,GAAG,mBAAmB,CAAC,EAAE,CAAC,CAAC;IACzC,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC;IAEvD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,qBAAqB,CACnC,EAAU,EACV,UAAkB,EAClB,MAAe;IAEf,MAAM,OAAO,GAAG,kBAAkB,CAAC,EAAE,CAAC,CAAC;IACvC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACjC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,CAAC,MAAM,GAAG,UAAU,CAAC;IAC5B,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC;QACrB,MAAM,EAAE,UAAU;QAClB,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC;aACpC,MAAM,CAAC,GAAG,EAAE,aAAa,IAAI,CAAC,GAAG,EAAE,IAAI,MAAM,IAAI,WAAW,EAAE,CAAC;aAC/D,MAAM,CAAC,KAAK,CAAC;QAChB,SAAS,EAAE,IAAI,IAAI,EAAE;QACrB,OAAO,EAAE,aAAa,MAAM,IAAI,oBAAoB,EAAE;KACvD,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,mBAAmB,CAAC,EAAE,CAAC,CAAC;IACzC,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC;IAEvD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,EAAU;IAC3C,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,mBAAmB,CAAC,EAAE,CAAC,CAAC;QACzC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7B,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAwBlD,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAA0B,CAAC;QACvD,MAAM,CAAC,SAAS,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC9C,MAAM,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAE7E,2EAA2E;QAC3E,MAAM,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAqB,EAAE;YAC/D,MAAM,QAAQ,GAAsB;gBAClC,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,UAAU,EAAE,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,SAAS,IAAI,EAAE;gBAC7C,SAAS,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;gBAChC,OAAO,EAAE,CAAC,CAAC,OAAO;aACnB,CAAC;YACF,OAAO,QAAQ,CAAC;QAClB,CAAC,CAAC,CAAC;QAEH,OAAO,MAAyB,CAAC;IACnC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,kCAAkC,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;QAC9D,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAClC,SAAkB,EAClB,MAAuB;IAEvB,IAAI,CAAC;QACH,kBAAkB,EAAE,CAAC;QACrB,MAAM,KAAK,GAAG,EAAE,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC;QAC5C,MAAM,QAAQ,GAAsB,EAAE,CAAC;QAEvC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC3B,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;gBACrC,MAAM,OAAO,GAAG,kBAAkB,CAAC,EAAE,CAAC,CAAC;gBACvC,IAAI,OAAO,EAAE,CAAC;oBACZ,IAAI,SAAS,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;wBACjD,SAAS;oBACX,CAAC;oBACD,IAAI,MAAM,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;wBACxC,SAAS;oBACX,CAAC;oBAED,IAAI,OAAO,CAAC,SAAS,IAAI,IAAI,IAAI,EAAE,GAAG,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;wBACxF,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;oBAC7B,CAAC;oBAED,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACzB,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC;IAChF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,mCAAmC,EAAE,KAAK,CAAC,CAAC;QAC1D,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,qBAAqB,CAAC,EAAU;IAC9C,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,mBAAmB,CAAC,EAAE,CAAC,CAAC;QACzC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7B,OAAO,KAAK,CAAC;QACf,CAAC;QAED,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QACxB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,qCAAqC,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;QACjE,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,UAAU,CAAC,EAAU;IACnC,MAAM,OAAO,GAAG,kBAAkB,CAAC,EAAE,CAAC,CAAC;IACvC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU,CAAC;AACvC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,EAAU;IAM3C,MAAM,OAAO,GAAG,kBAAkB,CAAC,EAAE,CAAC,CAAC;IACvC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO;QACL,KAAK,EAAE,OAAO,CAAC,SAAS,CAAC,MAAM;QAC/B,QAAQ,EAAE,OAAO,CAAC,iBAAiB;QACnC,QAAQ,EAAE,OAAO,CAAC,iBAAiB;QACnC,MAAM,EAAE,OAAO,CAAC,MAAM;KACvB,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAAc;IACjD,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,oBAAoB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QAC5D,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC;IAC/E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,mCAAmC,EAAE,KAAK,CAAC,CAAC;QAC1D,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,sBAAsB;IACpC,IAAI,OAAO,GAAG,CAAC,CAAC;IAEhB,IAAI,CAAC;QACH,kBAAkB,EAAE,CAAC;QACrB,MAAM,KAAK,GAAG,EAAE,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC;QAC5C,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QAEvB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC3B,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;gBACrC,MAAM,OAAO,GAAG,kBAAkB,CAAC,EAAE,CAAC,CAAC;gBAEvC,IACE,OAAO;oBACP,OAAO,CAAC,SAAS;oBACjB,GAAG,GAAG,OAAO,CAAC,SAAS;oBACvB,OAAO,CAAC,MAAM,KAAK,SAAS,EAC5B,CAAC;oBACD,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;oBAC3B,MAAM,QAAQ,GAAG,mBAAmB,CAAC,EAAE,CAAC,CAAC;oBACzC,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC;oBACvD,OAAO,EAAE,CAAC;gBACZ,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,qCAAqC,EAAE,KAAK,CAAC,CAAC;IAC9D,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/src/security/totp.d.ts

@@ -0,0 +1,67 @@
+/**
+ * TOTP (Time-based One-Time Password) — RFC 6238
+ *
+ * Pure-Node implementation using only node:crypto.
+ * Compatible with Authy, Google Authenticator, and any RFC 6238 client.
+ *
+ * Algorithm:
+ *   counter = floor(unixTime / period)
+ *   code    = HOTP(secret, counter)   ← RFC 4226
+ *   HOTP    = truncate(HMAC-SHA1(secret, counter_be64))
+ */
+/**
+ * Encode a Buffer as a Base32 string (with padding).
+ */
+export declare function base32Encode(buf: Buffer): string;
+/**
+ * Decode a Base32 string to a Buffer.
+ * Case-insensitive; strips padding before processing.
+ */
+export declare function base32Decode(str: string): Buffer;
+/**
+ * Generate a TOTP code for the current (or provided) time.
+ *
+ * @param secret  - TOTP secret (raw bytes, typically 20 bytes)
+ * @param opts.digits  - code length (default 6)
+ * @param opts.period  - time step in seconds (default 30)
+ * @param opts.nowMs   - Unix timestamp in milliseconds (default Date.now())
+ */
+export declare function generateTotp(secret: Buffer, opts?: {
+    digits?: number;
+    period?: number;
+    nowMs?: number;
+}): string;
+/**
+ * Verify a TOTP code against the current time.
+ *
+ * Accepts codes from `window` periods before and after the current step
+ * to tolerate minor clock drift between the user's device and the server.
+ *
+ * @param secret  - TOTP secret (raw bytes)
+ * @param code    - 6-digit code string to verify
+ * @param opts.digits  - code length (default 6)
+ * @param opts.period  - time step in seconds (default 30)
+ * @param opts.window  - number of steps to check on each side (default 1)
+ * @param opts.nowMs   - Unix timestamp in milliseconds (default Date.now())
+ */
+export declare function verifyTotp(secret: Buffer, code: string, opts?: {
+    digits?: number;
+    period?: number;
+    window?: number;
+    nowMs?: number;
+}): boolean;
+/**
+ * Generate a cryptographically random 20-byte TOTP secret.
+ * The secret never leaves the local machine — only the Base32 form is
+ * displayed once so the user can enroll it in their authenticator app.
+ */
+export declare function generateTotpSecret(): Buffer;
+/**
+ * Build an `otpauth://totp/…` URI that authenticator apps can scan as a QR code.
+ *
+ * @param secret  - TOTP secret (raw bytes)
+ * @param label   - Human-readable account label (e.g. "AgentVault:pending-001")
+ * @param issuer  - App / service name shown in the authenticator (default "AgentVault")
+ */
+export declare function otpAuthUri(secret: Buffer, label: string, issuer?: string): string;
+//# sourceMappingURL=totp.d.ts.map

package/dist/src/security/totp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"totp.d.ts","sourceRoot":"","sources":["../../../src/security/totp.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AASH;;GAEG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAwBhD;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAkBhD;AAiCD;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAC1B,MAAM,EAAE,MAAM,EACd,IAAI,GAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAO,GAC9D,MAAM,CAIR;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,UAAU,CACxB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,IAAI,GAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAO,GAC/E,OAAO,CAWT;AAID;;;;GAIG;AACH,wBAAgB,kBAAkB,IAAI,MAAM,CAE3C;AAID;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,SAAe,GAAG,MAAM,CAUvF"}

package/dist/src/security/totp.js

@@ -0,0 +1,148 @@
+/**
+ * TOTP (Time-based One-Time Password) — RFC 6238
+ *
+ * Pure-Node implementation using only node:crypto.
+ * Compatible with Authy, Google Authenticator, and any RFC 6238 client.
+ *
+ * Algorithm:
+ *   counter = floor(unixTime / period)
+ *   code    = HOTP(secret, counter)   ← RFC 4226
+ *   HOTP    = truncate(HMAC-SHA1(secret, counter_be64))
+ */
+import crypto from 'node:crypto';
+// ─── Base32 ─────────────────────────────────────────────────────────────────
+// RFC 4648 §6 alphabet (uppercase A-Z + digits 2-7, no padding chars in lookups)
+const BASE32_CHARS = 'ABCDEFGHIJKLMNOPQRSTUVWXYZ234567';
+/**
+ * Encode a Buffer as a Base32 string (with padding).
+ */
+export function base32Encode(buf) {
+    let bits = 0;
+    let acc = 0;
+    let out = '';
+    for (const byte of buf) {
+        acc = (acc << 8) | byte;
+        bits += 8;
+        while (bits >= 5) {
+            out += BASE32_CHARS[(acc >>> (bits - 5)) & 0x1f];
+            bits -= 5;
+        }
+    }
+    if (bits > 0) {
+        out += BASE32_CHARS[(acc << (5 - bits)) & 0x1f];
+    }
+    // Pad to a multiple of 8 characters
+    while (out.length % 8 !== 0) {
+        out += '=';
+    }
+    return out;
+}
+/**
+ * Decode a Base32 string to a Buffer.
+ * Case-insensitive; strips padding before processing.
+ */
+export function base32Decode(str) {
+    const s = str.toUpperCase().replace(/=/g, '');
+    let bits = 0;
+    let acc = 0;
+    const out = [];
+    for (const ch of s) {
+        const idx = BASE32_CHARS.indexOf(ch);
+        if (idx < 0)
+            throw new Error(`Invalid base32 character: '${ch}'`);
+        acc = (acc << 5) | idx;
+        bits += 5;
+        if (bits >= 8) {
+            out.push((acc >>> (bits - 8)) & 0xff);
+            bits -= 8;
+        }
+    }
+    return Buffer.from(out);
+}
+// ─── HOTP — RFC 4226 ────────────────────────────────────────────────────────
+/**
+ * Compute an HOTP code for the given secret and counter.
+ *
+ * @param secret  - HMAC-SHA1 key (raw bytes)
+ * @param counter - 64-bit unsigned integer counter
+ * @param digits  - output length (default 6)
+ */
+function hotp(secret, counter, digits = 6) {
+    // Pack counter as 8-byte big-endian (unsigned)
+    const cb = Buffer.alloc(8);
+    cb.writeBigUInt64BE(counter);
+    const mac = crypto.createHmac('sha1', secret).update(cb).digest();
+    // Dynamic truncation per §5.3 of RFC 4226
+    // Buffer indexing is always in-range for a 20-byte HMAC-SHA1 digest
+    const offset = mac[19] & 0x0f;
+    const code = (((mac[offset] & 0x7f) << 24) |
+        ((mac[offset + 1] & 0xff) << 16) |
+        ((mac[offset + 2] & 0xff) << 8) |
+        (mac[offset + 3] & 0xff)) %
+        10 ** digits;
+    return code.toString().padStart(digits, '0');
+}
+// ─── TOTP — RFC 6238 ────────────────────────────────────────────────────────
+/**
+ * Generate a TOTP code for the current (or provided) time.
+ *
+ * @param secret  - TOTP secret (raw bytes, typically 20 bytes)
+ * @param opts.digits  - code length (default 6)
+ * @param opts.period  - time step in seconds (default 30)
+ * @param opts.nowMs   - Unix timestamp in milliseconds (default Date.now())
+ */
+export function generateTotp(secret, opts = {}) {
+    const { digits = 6, period = 30, nowMs = Date.now() } = opts;
+    const counter = BigInt(Math.floor(nowMs / 1000 / period));
+    return hotp(secret, counter, digits);
+}
+/**
+ * Verify a TOTP code against the current time.
+ *
+ * Accepts codes from `window` periods before and after the current step
+ * to tolerate minor clock drift between the user's device and the server.
+ *
+ * @param secret  - TOTP secret (raw bytes)
+ * @param code    - 6-digit code string to verify
+ * @param opts.digits  - code length (default 6)
+ * @param opts.period  - time step in seconds (default 30)
+ * @param opts.window  - number of steps to check on each side (default 1)
+ * @param opts.nowMs   - Unix timestamp in milliseconds (default Date.now())
+ */
+export function verifyTotp(secret, code, opts = {}) {
+    const { digits = 6, period = 30, window = 1, nowMs = Date.now() } = opts;
+    for (let w = -window; w <= window; w++) {
+        const t = nowMs + w * period * 1000;
+        if (generateTotp(secret, { digits, period, nowMs: t }) === code) {
+            return true;
+        }
+    }
+    return false;
+}
+// ─── Key Generation ──────────────────────────────────────────────────────────
+/**
+ * Generate a cryptographically random 20-byte TOTP secret.
+ * The secret never leaves the local machine — only the Base32 form is
+ * displayed once so the user can enroll it in their authenticator app.
+ */
+export function generateTotpSecret() {
+    return crypto.randomBytes(20);
+}
+// ─── otpauth URI ─────────────────────────────────────────────────────────────
+/**
+ * Build an `otpauth://totp/…` URI that authenticator apps can scan as a QR code.
+ *
+ * @param secret  - TOTP secret (raw bytes)
+ * @param label   - Human-readable account label (e.g. "AgentVault:pending-001")
+ * @param issuer  - App / service name shown in the authenticator (default "AgentVault")
+ */
+export function otpAuthUri(secret, label, issuer = 'AgentVault') {
+    const s = base32Encode(secret);
+    return (`otpauth://totp/${encodeURIComponent(label)}` +
+        `?secret=${s}` +
+        `&issuer=${encodeURIComponent(issuer)}` +
+        `&algorithm=SHA1` +
+        `&digits=6` +
+        `&period=30`);
+}
+//# sourceMappingURL=totp.js.map