agentvault 1.0.1 → 1.0.5

package/dist/src/testing/local-runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-runner.js","sourceRoot":"","sources":["../../../src/testing/local-runner.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,OAAO,CAAC;AAC9B,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,SAAS,CAAC;AAQzB,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,aAAa,CAAC,CAAC;AAC9D,MAAM,gBAAgB,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,cAAc,CAAC,CAAC;AAEnE;;GAEG;AACH,SAAS,oBAAoB;IAC3B,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;QACnC,EAAE,CAAC,SAAS,CAAC,cAAc,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,CAAC;IACD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACrC,EAAE,CAAC,SAAS,CAAC,gBAAgB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,kBAAkB,CAAC,SAAiB,EAAE,QAAgB;IAC7D,oBAAoB,EAAE,CAAC;IACvB,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IACjE,OAAO,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,GAAG,SAAS,IAAI,QAAQ,IAAI,SAAS,OAAO,CAAC,CAAC;AACnF,CAAC;AAED;;GAEG;AACH,SAAS,iBAAiB,CAAC,MAAc;IACvC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACjC,MAAM,KAAK,GAAuB,EAAE,CAAC;IACrC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,QAAQ,GAAG,CAAC,CAAC;IAEjB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAClE,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,KAAK,CAAC;YAC3C,MAAM,IAAI,GAAG,OAAO,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;YAC1C,MAAM,IAAI,GAAG,OAAO,IAAI,GAAG,CAAC;YAC5B,KAAK,CAAC,IAAI,CAAC;gBACT,IAAI;gBACJ,MAAM,EAAE,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;gBAC/E,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC;aAC7B,CAAC,CAAC;YACH,KAAK,EAAE,CAAC;YACR,IAAI,MAAM,KAAK,MAAM;gBAAE,MAAM,EAAE,CAAC;iBAC3B,IAAI,MAAM,KAAK,MAAM;gBAAE,MAAM,EAAE,CAAC;;gBAChC,OAAO,EAAE,CAAC;QACjB,CAAC;QAED,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,yCAAyC,CAAC,CAAC;QAC5E,IAAI,aAAa,IAAI,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;YACtC,QAAQ,GAAG,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IAED,OAAO;QACL,IAAI,EAAE,gBAAgB;QACtB,KAAK;QACL,MAAM;QACN,MAAM;QACN,OAAO;QACP,QAAQ;QACR,KAAK;KACN,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OAA0B;IAC3D,MAAM,UAAU,GAAG;QACjB,KAAK;QACL,oBAAoB;KACrB,CAAC;IAEF,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACpB,UAAU,CAAC,IAAI,CAAC,iBAAiB,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;IACtD,CAAC;IAED,IAAI,OAAO,CAAC,YAAY,KAAK,MAAM,EAAE,CAAC;QACpC,UAAU,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IACrC,CAAC;IAED,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAE9B,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,GAAG,UAAU,CAAC,EAAE;QAC3D,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,OAAO;KACjB,CAAC,CAAC;IAEH,MAAM,SAAS,GAAG,iBAAiB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAEnD,IAAI,OAAO,CAAC,YAAY,KAAK,MAAM,EAAE,CAAC;QACpC,MAAM,WAAW,GAAG,kBAAkB,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAClE,EAAE,CAAC,aAAa,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QAC1E,OAAO,CAAC,GAAG,CAAC,yBAAyB,WAAW,EAAE,CAAC,CAAC;IACtD,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,OAA0B;IAClE,MAAM,UAAU,GAAG;QACjB,KAAK;QACL,oBAAoB;KACrB,CAAC;IAEF,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACpB,UAAU,CAAC,IAAI,CAAC,iBAAiB,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;IACtD,CAAC;IAED,IAAI,OAAO,CAAC,YAAY,KAAK,MAAM,EAAE,CAAC;QACpC,UAAU,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IACrC,CAAC;IAED,UAAU,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IAErC,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,GAAG,UAAU,CAAC,EAAE;QAC3D,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,OAAO;KACjB,CAAC,CAAC;IAEH,MAAM,SAAS,GAAG,iBAAiB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAEnD,IAAI,OAAO,CAAC,YAAY,KAAK,MAAM,EAAE,CAAC;QACpC,MAAM,WAAW,GAAG,kBAAkB,CAAC,OAAO,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;QACzE,EAAE,CAAC,aAAa,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QAC1E,OAAO,CAAC,GAAG,CAAC,yBAAyB,WAAW,EAAE,CAAC,CAAC;IACtD,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,MAAsB;IACvD,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,IAAI,aAAa,GAAG,CAAC,CAAC;IACtB,IAAI,kBAAkB,GAAG,CAAC,CAAC;IAC3B,IAAI,cAAc,GAAG,CAAC,CAAC;IACvB,MAAM,aAAa,GAAa,EAAE,CAAC;IACnC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,OAAO,GAAG,SAAS,GAAG,CAAC,MAAM,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAC;IACrD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,WAAW,GAAG,EAAE,CAAC,CAAC;IAEpE,MAAM,eAAe,GAA+E,EAAE,CAAC;IAEvG,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,WAAW,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;QACjD,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,OAAO;YAAE,MAAM;QAEjC,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAE/B,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE;YACjI,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,MAAM;SAChB,CAAC,CAAC;QAEH,MAAM,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;YAC7C,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,WAAW,CAAC;YAC9C,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;gBAC1B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;YACzC,CAAC;iBAAM,CAAC;gBACN,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,IAAI,eAAe,CAAC;gBAC/C,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;gBACzC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC;YACjD,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,eAAe,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAErC,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;IAChE,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAEnD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,aAAa,EAAE,CAAC;QAChB,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,kBAAkB,EAAE,CAAC;YACrB,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QAC1C,CAAC;aAAM,CAAC;YACN,cAAc,EAAE,CAAC;YACjB,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;gBACjB,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;YACzD,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,cAAc,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,GAAG,IAAI,CAAC;IACvD,MAAM,iBAAiB,GAAG,aAAa,GAAG,cAAc,CAAC;IAEzD,MAAM,WAAW,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACxD,MAAM,eAAe,GAAG,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC5C,MAAM,eAAe,GAAG,WAAW,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;IACjE,MAAM,eAAe,GAAG,aAAa,CAAC,MAAM,GAAG,CAAC;QAC9C,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,aAAa,CAAC,MAAM;QACjE,CAAC,CAAC,CAAC,CAAC;IAEN,MAAM,WAAW,GAAG;QAClB,GAAG,EAAE,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC;QAC3D,GAAG,EAAE,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC;QAC3D,GAAG,EAAE,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC;QAC5D,GAAG,EAAE,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC;KAC7D,CAAC;IAEF,OAAO;QACL,aAAa;QACb,kBAAkB;QAClB,cAAc;QACd,iBAAiB;QACjB,eAAe;QACf,eAAe;QACf,eAAe;QACf,WAAW;QACX,MAAM;KACP,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,OAA0B;IACvD,QAAQ,OAAO,CAAC,QAAQ,EAAE,CAAC;QACzB,KAAK,MAAM;YACT,OAAO,YAAY,CAAC,OAAO,CAAC,CAAC;QAC/B,KAAK,aAAa;YAChB,OAAO,mBAAmB,CAAC,OAAO,CAAC,CAAC;QACtC,KAAK,WAAW;YACd,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;gBACzB,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;YAC5D,CAAC;YACD,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;gBAC1B,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;YAC9D,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAChE;YACE,MAAM,IAAI,KAAK,CAAC,sBAAsB,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC9D,CAAC;AACH,CAAC"}

package/dist/src/testing/types.d.ts

@@ -0,0 +1,98 @@
+/**
+ * Types for local test runner
+ */
+/** Test type */
+export type TestType = 'unit' | 'integration' | 'load-test';
+/** Test result status */
+export type TestStatus = 'passed' | 'failed' | 'skipped';
+/** Individual test case result */
+export interface TestCase {
+    /** Test name */
+    name: string;
+    /** Test status */
+    status: TestStatus;
+    /** Duration in milliseconds */
+    duration: number;
+    /** Error message if failed */
+    error?: string;
+    /** Error stack if failed */
+    stack?: string;
+}
+/** Test suite result */
+export interface TestSuite {
+    /** Suite name */
+    name: string;
+    /** Total number of tests */
+    total: number;
+    /** Number of passed tests */
+    passed: number;
+    /** Number of failed tests */
+    failed: number;
+    /** Number of skipped tests */
+    skipped: number;
+    /** Duration in milliseconds */
+    duration: number;
+    /** Individual test cases */
+    tests: TestCase[];
+}
+/** Test runner options */
+export interface TestRunnerOptions {
+    /** Agent name to test */
+    agentName: string;
+    /** Network to run tests against */
+    network: string;
+    /** Test type */
+    testType: TestType;
+    /** Enable watch mode */
+    watch?: boolean;
+    /** Load test concurrency */
+    concurrency?: number;
+    /** Load test duration in seconds */
+    loadDuration?: number;
+    /** Output format */
+    outputFormat?: 'json' | 'junit' | 'html';
+    /** Verbose output */
+    verbose?: boolean;
+}
+/** Load test configuration */
+export interface LoadTestConfig {
+    /** Number of concurrent requests */
+    concurrency: number;
+    /** Test duration in seconds */
+    duration: number;
+    /** Target canister ID */
+    canisterId: string;
+    /** Method to call */
+    method: string;
+    /** Request arguments (Candid format) */
+    args?: string;
+    /** Ramp-up time in seconds */
+    rampUp?: number;
+}
+/** Load test result */
+export interface LoadTestResult {
+    /** Total requests sent */
+    totalRequests: number;
+    /** Successful requests */
+    successfulRequests: number;
+    /** Failed requests */
+    failedRequests: number;
+    /** Requests per second */
+    requestsPerSecond: number;
+    /** Average response time in milliseconds */
+    avgResponseTime: number;
+    /** Minimum response time in milliseconds */
+    minResponseTime: number;
+    /** Maximum response time in milliseconds */
+    maxResponseTime: number;
+    /** Percentiles */
+    percentiles: {
+        p50: number;
+        p90: number;
+        p95: number;
+        p99: number;
+    };
+    /** Error breakdown */
+    errors: Record<string, number>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/src/testing/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/testing/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,gBAAgB;AAChB,MAAM,MAAM,QAAQ,GAAG,MAAM,GAAG,aAAa,GAAG,WAAW,CAAC;AAE5D,yBAAyB;AACzB,MAAM,MAAM,UAAU,GAAG,QAAQ,GAAG,QAAQ,GAAG,SAAS,CAAC;AAEzD,kCAAkC;AAClC,MAAM,WAAW,QAAQ;IACvB,gBAAgB;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,kBAAkB;IAClB,MAAM,EAAE,UAAU,CAAC;IACnB,+BAA+B;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,8BAA8B;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,4BAA4B;IAC5B,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,wBAAwB;AACxB,MAAM,WAAW,SAAS;IACxB,iBAAiB;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,4BAA4B;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,6BAA6B;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,6BAA6B;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,8BAA8B;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,+BAA+B;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,4BAA4B;IAC5B,KAAK,EAAE,QAAQ,EAAE,CAAC;CACnB;AAED,0BAA0B;AAC1B,MAAM,WAAW,iBAAiB;IAChC,yBAAyB;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,mCAAmC;IACnC,OAAO,EAAE,MAAM,CAAC;IAChB,gBAAgB;IAChB,QAAQ,EAAE,QAAQ,CAAC;IACnB,wBAAwB;IACxB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,4BAA4B;IAC5B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,oCAAoC;IACpC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,oBAAoB;IACpB,YAAY,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,MAAM,CAAC;IACzC,qBAAqB;IACrB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,8BAA8B;AAC9B,MAAM,WAAW,cAAc;IAC7B,oCAAoC;IACpC,WAAW,EAAE,MAAM,CAAC;IACpB,+BAA+B;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,yBAAyB;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,qBAAqB;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,wCAAwC;IACxC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,8BAA8B;IAC9B,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,uBAAuB;AACvB,MAAM,WAAW,cAAc;IAC7B,0BAA0B;IAC1B,aAAa,EAAE,MAAM,CAAC;IACtB,0BAA0B;IAC1B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,sBAAsB;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,0BAA0B;IAC1B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,4CAA4C;IAC5C,eAAe,EAAE,MAAM,CAAC;IACxB,4CAA4C;IAC5C,eAAe,EAAE,MAAM,CAAC;IACxB,4CAA4C;IAC5C,eAAe,EAAE,MAAM,CAAC;IACxB,kBAAkB;IAClB,WAAW,EAAE;QACX,GAAG,EAAE,MAAM,CAAC;QACZ,GAAG,EAAE,MAAM,CAAC;QACZ,GAAG,EAAE,MAAM,CAAC;QACZ,GAAG,EAAE,MAAM,CAAC;KACb,CAAC;IACF,sBAAsB;IACtB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAChC"}

package/dist/src/testing/types.js

@@ -0,0 +1,5 @@
+/**
+ * Types for local test runner
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/src/testing/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/testing/types.ts"],"names":[],"mappings":"AAAA;;GAEG"}

package/dist/src/trading/api-key-manager.d.ts

@@ -0,0 +1,96 @@
+/**
+ * Binance API Key Manager
+ *
+ * Manages Binance API key lifecycle with mandatory weekly rotation.
+ * Keys are stored encrypted on disk using AES-256-GCM; only the
+ * metadata (creation timestamp, rotation interval) is held in plaintext.
+ *
+ * Threat model: assume the host is compromised at rest.
+ *   - Never log raw API key or secret.
+ *   - Rotation is enforced: operations on an overdue key are blocked by default.
+ *   - IP whitelist is embedded in the key record so it travels with the secret.
+ */
+export declare const KEY_ROTATION_INTERVAL_DAYS = 7;
+export interface BinanceApiKey {
+    /** Opaque label / nickname for this key pair (e.g. "trading-bot-1"). */
+    label: string;
+    /** Binance API key (public portion). */
+    apiKey: string;
+    /** Binance API secret (sensitive). */
+    apiSecret: string;
+    /** ISO-8601 timestamp when this key was first provisioned. */
+    createdAt: string;
+    /**
+     * IP addresses / CIDR blocks that Binance should restrict this key to.
+     * These mirror the IP restrictions you configure on the Binance sub-account.
+     */
+    ipWhitelist: string[];
+    /** Rotation interval in days (default: 7). */
+    rotationIntervalDays: number;
+}
+export interface KeyRotationStatus {
+    label: string;
+    createdAt: string;
+    rotationDue: boolean;
+    /** Days until rotation is due (negative means overdue). */
+    daysRemaining: number;
+    overdueDays: number;
+}
+export declare function getRotationStatus(record: Pick<BinanceApiKey, 'label' | 'createdAt' | 'rotationIntervalDays'>): KeyRotationStatus;
+/**
+ * Returns true if the key is within the allowed rotation window.
+ * Use this as a guard before allowing trade execution.
+ */
+export declare function isKeyValid(key: BinanceApiKey): boolean;
+export declare class ApiKeyManager {
+    private readonly vaultDir;
+    /**
+     * @param vaultDir Directory where encrypted key records are stored.
+     *                 Must be kept under a firewall-restricted VPS path.
+     */
+    constructor(vaultDir: string);
+    private recordPath;
+    private ensureVaultDir;
+    /**
+     * Persist a Binance API key pair, encrypted with `passphrase`.
+     *
+     * The passphrase should be derived from an operator-held master secret
+     * (e.g. a hardware token or the AgentVault VetKeys seed phrase) — never
+     * a static string baked into source code.
+     */
+    save(key: BinanceApiKey, passphrase: string): void;
+    /**
+     * Load and decrypt a stored key record.
+     * Throws if the file is missing, tampered, or the passphrase is wrong.
+     */
+    load(label: string, passphrase: string): BinanceApiKey;
+    /**
+     * List labels of all stored key records (without decrypting).
+     */
+    list(): string[];
+    /**
+     * Delete a stored key record from disk.
+     * Call this *after* revoking the key on Binance.
+     */
+    delete(label: string): void;
+    /**
+     * Check rotation status for a single stored key without decrypting secrets.
+     */
+    checkRotation(label: string): KeyRotationStatus;
+    /**
+     * Return rotation status for every stored key.
+     */
+    checkAllRotations(): KeyRotationStatus[];
+    /**
+     * Rotate an existing key: save the new credentials, delete the old record.
+     *
+     * The caller is responsible for:
+     *   1. Creating the new key on the Binance sub-account portal.
+     *   2. Configuring the IP restriction on Binance before calling this.
+     *   3. Revoking the old key on Binance after this returns.
+     *
+     * The `newKey.createdAt` should be set to the current time.
+     */
+    rotate(oldLabel: string, newKey: BinanceApiKey, passphrase: string): void;
+}
+//# sourceMappingURL=api-key-manager.d.ts.map

package/dist/src/trading/api-key-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-key-manager.d.ts","sourceRoot":"","sources":["../../../src/trading/api-key-manager.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAUH,eAAO,MAAM,0BAA0B,IAAI,CAAC;AAY5C,MAAM,WAAW,aAAa;IAC5B,wEAAwE;IACxE,KAAK,EAAE,MAAM,CAAC;IACd,wCAAwC;IACxC,MAAM,EAAE,MAAM,CAAC;IACf,sCAAsC;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,8DAA8D;IAC9D,SAAS,EAAE,MAAM,CAAC;IAClB;;;OAGG;IACH,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,8CAA8C;IAC9C,oBAAoB,EAAE,MAAM,CAAC;CAC9B;AAmBD,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,OAAO,CAAC;IACrB,2DAA2D;IAC3D,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;CACrB;AAqDD,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,IAAI,CAAC,aAAa,EAAE,OAAO,GAAG,WAAW,GAAG,sBAAsB,CAAC,GAAG,iBAAiB,CAehI;AAED;;;GAGG;AACH,wBAAgB,UAAU,CAAC,GAAG,EAAE,aAAa,GAAG,OAAO,CAEtD;AAMD,qBAAa,aAAa;IACxB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAElC;;;OAGG;gBACS,QAAQ,EAAE,MAAM;IAM5B,OAAO,CAAC,UAAU;IAMlB,OAAO,CAAC,cAAc;IAQtB;;;;;;OAMG;IACH,IAAI,CAAC,GAAG,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,GAAG,IAAI;IAsBlD;;;OAGG;IACH,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,aAAa;IA4BtD;;OAEG;IACH,IAAI,IAAI,MAAM,EAAE;IAQhB;;;OAGG;IACH,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAO3B;;OAEG;IACH,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,iBAAiB;IAa/C;;OAEG;IACH,iBAAiB,IAAI,iBAAiB,EAAE;IAIxC;;;;;;;;;OASG;IACH,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,GAAG,IAAI;CAI1E"}

package/dist/src/trading/api-key-manager.js

@@ -0,0 +1,201 @@
+/**
+ * Binance API Key Manager
+ *
+ * Manages Binance API key lifecycle with mandatory weekly rotation.
+ * Keys are stored encrypted on disk using AES-256-GCM; only the
+ * metadata (creation timestamp, rotation interval) is held in plaintext.
+ *
+ * Threat model: assume the host is compromised at rest.
+ *   - Never log raw API key or secret.
+ *   - Rotation is enforced: operations on an overdue key are blocked by default.
+ *   - IP whitelist is embedded in the key record so it travels with the secret.
+ */
+import * as crypto from 'node:crypto';
+import * as fs from 'node:fs';
+import * as path from 'node:path';
+// ---------------------------------------------------------------------------
+// Constants
+// ---------------------------------------------------------------------------
+export const KEY_ROTATION_INTERVAL_DAYS = 7;
+/** Bytes used for AES-256-GCM IV and salt. */
+const IV_BYTES = 12;
+const SALT_BYTES = 16;
+const PBKDF2_ITERATIONS = 200_000;
+const PBKDF2_KEY_BYTES = 32;
+// ---------------------------------------------------------------------------
+// Encryption helpers (AES-256-GCM + PBKDF2)
+// ---------------------------------------------------------------------------
+function deriveKey(passphrase, salt) {
+    return crypto.pbkdf2Sync(passphrase, salt, PBKDF2_ITERATIONS, PBKDF2_KEY_BYTES, 'sha256');
+}
+function encrypt(plaintext, passphrase) {
+    const salt = crypto.randomBytes(SALT_BYTES);
+    const iv = crypto.randomBytes(IV_BYTES);
+    const key = deriveKey(passphrase, salt);
+    const cipher = crypto.createCipheriv('aes-256-gcm', key, iv);
+    const ciphertext = Buffer.concat([
+        cipher.update(plaintext, 'utf8'),
+        cipher.final(),
+    ]);
+    const authTag = cipher.getAuthTag();
+    return { iv, salt, authTag, ciphertext };
+}
+function decrypt(ciphertext, iv, salt, authTag, passphrase) {
+    const key = deriveKey(passphrase, salt);
+    const decipher = crypto.createDecipheriv('aes-256-gcm', key, iv);
+    decipher.setAuthTag(authTag);
+    return Buffer.concat([decipher.update(ciphertext), decipher.final()]).toString('utf8');
+}
+// ---------------------------------------------------------------------------
+// Rotation logic
+// ---------------------------------------------------------------------------
+export function getRotationStatus(record) {
+    const createdAt = new Date(record.createdAt);
+    const now = new Date();
+    const ageMs = now.getTime() - createdAt.getTime();
+    const ageDays = ageMs / (1000 * 60 * 60 * 24);
+    const daysRemaining = record.rotationIntervalDays - ageDays;
+    const overdueDays = Math.max(0, -daysRemaining);
+    return {
+        label: record.label,
+        createdAt: record.createdAt,
+        rotationDue: daysRemaining <= 0,
+        daysRemaining: Math.ceil(daysRemaining),
+        overdueDays: Math.floor(overdueDays),
+    };
+}
+/**
+ * Returns true if the key is within the allowed rotation window.
+ * Use this as a guard before allowing trade execution.
+ */
+export function isKeyValid(key) {
+    return !getRotationStatus(key).rotationDue;
+}
+// ---------------------------------------------------------------------------
+// ApiKeyManager
+// ---------------------------------------------------------------------------
+export class ApiKeyManager {
+    vaultDir;
+    /**
+     * @param vaultDir Directory where encrypted key records are stored.
+     *                 Must be kept under a firewall-restricted VPS path.
+     */
+    constructor(vaultDir) {
+        this.vaultDir = path.resolve(vaultDir);
+    }
+    // ── Storage helpers ────────────────────────────────────────────────────────
+    recordPath(label) {
+        // Sanitise label so it is safe to use as a filename.
+        const safe = label.replace(/[^a-zA-Z0-9_-]/g, '_');
+        return path.join(this.vaultDir, `${safe}.binance.enc`);
+    }
+    ensureVaultDir() {
+        fs.mkdirSync(this.vaultDir, { recursive: true });
+        // Restrict directory to owner only (rwx------).
+        fs.chmodSync(this.vaultDir, 0o700);
+    }
+    // ── Public API ─────────────────────────────────────────────────────────────
+    /**
+     * Persist a Binance API key pair, encrypted with `passphrase`.
+     *
+     * The passphrase should be derived from an operator-held master secret
+     * (e.g. a hardware token or the AgentVault VetKeys seed phrase) — never
+     * a static string baked into source code.
+     */
+    save(key, passphrase) {
+        this.ensureVaultDir();
+        const payload = JSON.stringify({ apiKey: key.apiKey, apiSecret: key.apiSecret });
+        const { iv, salt, authTag, ciphertext } = encrypt(payload, passphrase);
+        const record = {
+            version: 1,
+            label: key.label,
+            createdAt: key.createdAt,
+            rotationIntervalDays: key.rotationIntervalDays,
+            ipWhitelist: key.ipWhitelist,
+            salt: salt.toString('hex'),
+            iv: iv.toString('hex'),
+            authTag: authTag.toString('hex'),
+            ciphertext: ciphertext.toString('hex'),
+        };
+        const filePath = this.recordPath(key.label);
+        fs.writeFileSync(filePath, JSON.stringify(record, null, 2), { mode: 0o600 });
+    }
+    /**
+     * Load and decrypt a stored key record.
+     * Throws if the file is missing, tampered, or the passphrase is wrong.
+     */
+    load(label, passphrase) {
+        const filePath = this.recordPath(label);
+        if (!fs.existsSync(filePath)) {
+            throw new Error(`No key record found for label: ${label}`);
+        }
+        const record = JSON.parse(fs.readFileSync(filePath, 'utf-8'));
+        const plaintext = decrypt(Buffer.from(record.ciphertext, 'hex'), Buffer.from(record.iv, 'hex'), Buffer.from(record.salt, 'hex'), Buffer.from(record.authTag, 'hex'), passphrase);
+        const { apiKey, apiSecret } = JSON.parse(plaintext);
+        return {
+            label: record.label,
+            apiKey,
+            apiSecret,
+            createdAt: record.createdAt,
+            ipWhitelist: record.ipWhitelist,
+            rotationIntervalDays: record.rotationIntervalDays,
+        };
+    }
+    /**
+     * List labels of all stored key records (without decrypting).
+     */
+    list() {
+        if (!fs.existsSync(this.vaultDir))
+            return [];
+        return fs
+            .readdirSync(this.vaultDir)
+            .filter(f => f.endsWith('.binance.enc'))
+            .map(f => f.replace(/\.binance\.enc$/, ''));
+    }
+    /**
+     * Delete a stored key record from disk.
+     * Call this *after* revoking the key on Binance.
+     */
+    delete(label) {
+        const filePath = this.recordPath(label);
+        if (fs.existsSync(filePath)) {
+            fs.rmSync(filePath);
+        }
+    }
+    /**
+     * Check rotation status for a single stored key without decrypting secrets.
+     */
+    checkRotation(label) {
+        const filePath = this.recordPath(label);
+        if (!fs.existsSync(filePath)) {
+            throw new Error(`No key record found for label: ${label}`);
+        }
+        const record = JSON.parse(fs.readFileSync(filePath, 'utf-8'));
+        return getRotationStatus({
+            label: record.label,
+            createdAt: record.createdAt,
+            rotationIntervalDays: record.rotationIntervalDays,
+        });
+    }
+    /**
+     * Return rotation status for every stored key.
+     */
+    checkAllRotations() {
+        return this.list().map(label => this.checkRotation(label));
+    }
+    /**
+     * Rotate an existing key: save the new credentials, delete the old record.
+     *
+     * The caller is responsible for:
+     *   1. Creating the new key on the Binance sub-account portal.
+     *   2. Configuring the IP restriction on Binance before calling this.
+     *   3. Revoking the old key on Binance after this returns.
+     *
+     * The `newKey.createdAt` should be set to the current time.
+     */
+    rotate(oldLabel, newKey, passphrase) {
+        this.save(newKey, passphrase);
+        this.delete(oldLabel);
+    }
+}
+//# sourceMappingURL=api-key-manager.js.map

package/dist/src/trading/api-key-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-key-manager.js","sourceRoot":"","sources":["../../../src/trading/api-key-manager.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AACtC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,8EAA8E;AAC9E,YAAY;AACZ,8EAA8E;AAE9E,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC;AAE5C,8CAA8C;AAC9C,MAAM,QAAQ,GAAG,EAAE,CAAC;AACpB,MAAM,UAAU,GAAG,EAAE,CAAC;AACtB,MAAM,iBAAiB,GAAG,OAAO,CAAC;AAClC,MAAM,gBAAgB,GAAG,EAAE,CAAC;AAkD5B,8EAA8E;AAC9E,4CAA4C;AAC5C,8EAA8E;AAE9E,SAAS,SAAS,CAAC,UAAkB,EAAE,IAAY;IACjD,OAAO,MAAM,CAAC,UAAU,CACtB,UAAU,EACV,IAAI,EACJ,iBAAiB,EACjB,gBAAgB,EAChB,QAAQ,CACT,CAAC;AACJ,CAAC;AAED,SAAS,OAAO,CAAC,SAAiB,EAAE,UAAkB;IAMpD,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;IAC5C,MAAM,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;IACxC,MAAM,GAAG,GAAG,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IAExC,MAAM,MAAM,GAAG,MAAM,CAAC,cAAc,CAAC,aAAa,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;IAC7D,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC;QAC/B,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC;QAChC,MAAM,CAAC,KAAK,EAAE;KACf,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;IAEpC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;AAC3C,CAAC;AAED,SAAS,OAAO,CACd,UAAkB,EAClB,EAAU,EACV,IAAY,EACZ,OAAe,EACf,UAAkB;IAElB,MAAM,GAAG,GAAG,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IACxC,MAAM,QAAQ,GAAG,MAAM,CAAC,gBAAgB,CAAC,aAAa,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;IACjE,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IAC7B,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AACzF,CAAC;AAED,8EAA8E;AAC9E,iBAAiB;AACjB,8EAA8E;AAE9E,MAAM,UAAU,iBAAiB,CAAC,MAA2E;IAC3G,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAC7C,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,EAAE,GAAG,SAAS,CAAC,OAAO,EAAE,CAAC;IAClD,MAAM,OAAO,GAAG,KAAK,GAAG,CAAC,IAAI,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;IAC9C,MAAM,aAAa,GAAG,MAAM,CAAC,oBAAoB,GAAG,OAAO,CAAC;IAC5D,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC;IAEhD,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,WAAW,EAAE,aAAa,IAAI,CAAC;QAC/B,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC;QACvC,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC;KACrC,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,UAAU,CAAC,GAAkB;IAC3C,OAAO,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,WAAW,CAAC;AAC7C,CAAC;AAED,8EAA8E;AAC9E,gBAAgB;AAChB,8EAA8E;AAE9E,MAAM,OAAO,aAAa;IACP,QAAQ,CAAS;IAElC;;;OAGG;IACH,YAAY,QAAgB;QAC1B,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACzC,CAAC;IAED,8EAA8E;IAEtE,UAAU,CAAC,KAAa;QAC9B,qDAAqD;QACrD,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC;QACnD,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,IAAI,cAAc,CAAC,CAAC;IACzD,CAAC;IAEO,cAAc;QACpB,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACjD,gDAAgD;QAChD,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IACrC,CAAC;IAED,8EAA8E;IAE9E;;;;;;OAMG;IACH,IAAI,CAAC,GAAkB,EAAE,UAAkB;QACzC,IAAI,CAAC,cAAc,EAAE,CAAC;QAEtB,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC;QACjF,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QAEvE,MAAM,MAAM,GAAuB;YACjC,OAAO,EAAE,CAAC;YACV,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,oBAAoB,EAAE,GAAG,CAAC,oBAAoB;YAC9C,WAAW,EAAE,GAAG,CAAC,WAAW;YAC5B,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;YAC1B,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC;YACtB,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC;YAChC,UAAU,EAAE,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC;SACvC,CAAC;QAEF,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC5C,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/E,CAAC;IAED;;;OAGG;IACH,IAAI,CAAC,KAAa,EAAE,UAAkB;QACpC,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACxC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CAAC,kCAAkC,KAAK,EAAE,CAAC,CAAC;QAC7D,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAuB,CAAC;QAEpF,MAAM,SAAS,GAAG,OAAO,CACvB,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,KAAK,CAAC,EACrC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,EAC7B,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,EAC/B,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,EAClC,UAAU,CACX,CAAC;QAEF,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAA0C,CAAC;QAE7F,OAAO;YACL,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,MAAM;YACN,SAAS;YACT,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,oBAAoB,EAAE,MAAM,CAAC,oBAAoB;SAClD,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,IAAI;QACF,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC;YAAE,OAAO,EAAE,CAAC;QAC7C,OAAO,EAAE;aACN,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC;aAC1B,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;aACvC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAC,CAAC;IAChD,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,KAAa;QAClB,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACxC,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5B,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IAED;;OAEG;IACH,aAAa,CAAC,KAAa;QACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACxC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CAAC,kCAAkC,KAAK,EAAE,CAAC,CAAC;QAC7D,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAuB,CAAC;QACpF,OAAO,iBAAiB,CAAC;YACvB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,oBAAoB,EAAE,MAAM,CAAC,oBAAoB;SAClD,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,iBAAiB;QACf,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;IAC7D,CAAC;IAED;;;;;;;;;OASG;IACH,MAAM,CAAC,QAAgB,EAAE,MAAqB,EAAE,UAAkB;QAChE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACxB,CAAC;CACF"}

package/dist/src/trading/consensus.d.ts

@@ -0,0 +1,171 @@
+/**
+ * Multi-Agent Trade Consensus
+ *
+ * Implements a 2-of-2 vote gate that must pass before any trade is executed.
+ * Protects against:
+ *   - Laggy ICP agent double-execution (each proposal carries a monotonic nonce)
+ *   - Solo-agent trading (both agents must sign within the 30-second window)
+ *   - Replay attacks (nonce is unique per proposal; votes bind nonce + agentId)
+ *
+ * Flow:
+ *   1. Any agent calls proposeConsensus(signal) → returns sessionId + nonce
+ *   2. Both agents call castVote(sessionId, agentId, signature, approve=true)
+ *      Signature covers: sha256(sessionId + ":" + nonce + ":" + agentId + ":approve")
+ *   3. TradeConsensusManager.watchSession() resolves APPROVED once both votes arrive
+ *      or CANCELLED if the 30-second window expires with < 2 approvals.
+ *   4. Callers MUST await the result and abort if status !== 'approved'.
+ */
+/** Hard deadline: both agents must vote within this window or the trade cancels. */
+export declare const CONSENSUS_TIMEOUT_MS = 30000;
+/** Required number of approving votes before a trade may fire. */
+export declare const REQUIRED_VOTES = 2;
+/** Chain where an agent lives. */
+export type AgentChain = 'icp' | 'solana';
+/** The direction of a trade. */
+export type TradeDirection = 'buy' | 'sell';
+/** A trade intent submitted by a strategy or signal generator. */
+export interface TradeSignal {
+    /** Asset pair, e.g. "SOL/USDC" */
+    pair: string;
+    direction: TradeDirection;
+    /** Quantity expressed as a string to avoid float precision loss */
+    quantity: string;
+    /** Maximum acceptable price (limit) or undefined for market orders */
+    limitPrice?: string;
+    /** Originating chain */
+    chain: AgentChain;
+    /** ISO-8601 timestamp */
+    requestedAt: string;
+}
+/** An agent's vote on a consensus proposal. */
+export interface ConsensusVote {
+    agentId: string;
+    chain: AgentChain;
+    /** HMAC-SHA256 over the canonical vote payload (see signVote / verifyVote) */
+    signature: string;
+    /** Echo of the session nonce — must match the proposal to be accepted */
+    nonce: string;
+    /** true = approve, false = veto */
+    approve: boolean;
+    /** ISO-8601 */
+    votedAt: string;
+}
+/** Lifecycle states of a consensus session. */
+export type ConsensusStatus = 'pending' | 'approved' | 'cancelled' | 'expired';
+/** A single round of consensus for one trade signal. */
+export interface ConsensusSession {
+    sessionId: string;
+    /** One-time random value — included in every vote signature to prevent replay */
+    nonce: string;
+    signal: TradeSignal;
+    status: ConsensusStatus;
+    votes: ConsensusVote[];
+    createdAt: string;
+    /** Set when status moves to approved/cancelled */
+    resolvedAt?: string;
+    /** Human-readable reason for cancellation */
+    cancelReason?: string;
+}
+/**
+ * Sign a vote using HMAC-SHA256.
+ *
+ * @param agentSecret - 32-byte (or longer) secret key unique to this agent.
+ *                      On ICP this can be derived from a VetKey.
+ *                      On Solana this can be derived from the wallet keypair.
+ */
+export declare function signVote(sessionId: string, nonce: string, agentId: string, approve: boolean, agentSecret: Buffer): string;
+/**
+ * Verify a vote signature using timing-safe comparison.
+ *
+ * @returns true if the signature is valid.
+ */
+export declare function verifyVote(vote: ConsensusVote, sessionId: string, agentSecret: Buffer): boolean;
+export interface ConsensusManagerOptions {
+    /**
+     * Shared secrets for each agent, keyed by agentId.
+     *
+     * In production these are fetched from VetKeys or the wallet HSM.
+     * They must NEVER be logged or stored in plaintext.
+     */
+    agentSecrets: Map<string, Buffer>;
+    /** Override the default 30-second timeout (useful in tests). */
+    timeoutMs?: number;
+    /** Optional hook called whenever a session changes state. */
+    onSessionUpdate?: (session: ConsensusSession) => void;
+}
+/**
+ * Manages the full lifecycle of multi-agent trade consensus sessions.
+ *
+ * Thread-safety note: JS is single-threaded, so Map operations are safe.
+ * However, the 30-second timer fires asynchronously — always check session
+ * status before acting on a resolved promise.
+ */
+export declare class TradeConsensusManager {
+    private readonly sessions;
+    private readonly timers;
+    private readonly opts;
+    constructor(options: ConsensusManagerOptions);
+    /**
+     * Open a new consensus session for a trade signal.
+     *
+     * @returns The session (status = 'pending').  Callers should then
+     *          distribute the sessionId + nonce to both agents so they can vote.
+     */
+    proposeConsensus(signal: TradeSignal): ConsensusSession;
+    /**
+     * Cast an agent's vote on a pending session.
+     *
+     * Accepts only if:
+     *   1. The session exists and is still 'pending'.
+     *   2. The nonce in the vote matches the session nonce (anti-replay).
+     *   3. The agent secret is registered in the manager.
+     *   4. The HMAC-SHA256 signature over the canonical payload verifies.
+     *   5. The agentId has not already voted in this session (no double-vote).
+     *
+     * @returns The updated session snapshot.
+     * @throws If the session is not found, already resolved, or the vote is invalid.
+     */
+    castVote(sessionId: string, vote: ConsensusVote): ConsensusSession;
+    /** Return a snapshot of a session, or undefined if not found. */
+    getSession(sessionId: string): ConsensusSession | undefined;
+    /** Return all sessions that match a given status. */
+    listSessions(status?: ConsensusStatus): ConsensusSession[];
+    /**
+     * Await the final outcome of a consensus session.
+     *
+     * Resolves once the session reaches 'approved' or 'cancelled'.
+     * The returned status is authoritative — callers must check it before executing
+     * any trade.
+     *
+     * @example
+     * ```ts
+     * const { status } = await manager.watchSession(sessionId);
+     * if (status !== 'approved') return; // abort — no solo trades
+     * await executeTrade(signal);
+     * ```
+     */
+    watchSession(sessionId: string): Promise<ConsensusSession>;
+    /**
+     * Remove a session from memory after it has been acted upon.
+     * Call this once the trade outcome (executed or cancelled) has been recorded.
+     */
+    pruneSession(sessionId: string): void;
+    /** Cancel all pending sessions and clear all timers (e.g. on shutdown). */
+    shutdown(): void;
+    private _resolve;
+    private _expire;
+}
+/**
+ * Build a ConsensusVote ready to submit.
+ *
+ * Agents call this locally before sending the vote to the consensus manager.
+ *
+ * @param sessionId - Returned by proposeConsensus()
+ * @param nonce     - Returned by proposeConsensus()
+ * @param agentId   - Unique identifier for this agent (e.g. "icp-agent-1")
+ * @param chain     - The chain this agent runs on
+ * @param approve   - true to approve, false to veto
+ * @param agentSecret - The agent's signing secret
+ */
+export declare function buildVote(sessionId: string, nonce: string, agentId: string, chain: AgentChain, approve: boolean, agentSecret: Buffer): ConsensusVote;
+//# sourceMappingURL=consensus.d.ts.map

package/dist/src/trading/consensus.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"consensus.d.ts","sourceRoot":"","sources":["../../../src/trading/consensus.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAMH,oFAAoF;AACpF,eAAO,MAAM,oBAAoB,QAAS,CAAC;AAE3C,kEAAkE;AAClE,eAAO,MAAM,cAAc,IAAI,CAAC;AAIhC,kCAAkC;AAClC,MAAM,MAAM,UAAU,GAAG,KAAK,GAAG,QAAQ,CAAC;AAE1C,gCAAgC;AAChC,MAAM,MAAM,cAAc,GAAG,KAAK,GAAG,MAAM,CAAC;AAE5C,kEAAkE;AAClE,MAAM,WAAW,WAAW;IAC1B,kCAAkC;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,cAAc,CAAC;IAC1B,mEAAmE;IACnE,QAAQ,EAAE,MAAM,CAAC;IACjB,sEAAsE;IACtE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,wBAAwB;IACxB,KAAK,EAAE,UAAU,CAAC;IAClB,yBAAyB;IACzB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,+CAA+C;AAC/C,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,UAAU,CAAC;IAClB,8EAA8E;IAC9E,SAAS,EAAE,MAAM,CAAC;IAClB,yEAAyE;IACzE,KAAK,EAAE,MAAM,CAAC;IACd,mCAAmC;IACnC,OAAO,EAAE,OAAO,CAAC;IACjB,eAAe;IACf,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,+CAA+C;AAC/C,MAAM,MAAM,eAAe,GACvB,SAAS,GACT,UAAU,GACV,WAAW,GACX,SAAS,CAAC;AAEd,wDAAwD;AACxD,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,iFAAiF;IACjF,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,WAAW,CAAC;IACpB,MAAM,EAAE,eAAe,CAAC;IACxB,KAAK,EAAE,aAAa,EAAE,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,kDAAkD;IAClD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,6CAA6C;IAC7C,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAmBD;;;;;;GAMG;AACH,wBAAgB,QAAQ,CACtB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,OAAO,EAChB,WAAW,EAAE,MAAM,GAClB,MAAM,CAMR;AAED;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAO/F;AAID,MAAM,WAAW,uBAAuB;IACtC;;;;;OAKG;IACH,YAAY,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAClC,gEAAgE;IAChE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,6DAA6D;IAC7D,eAAe,CAAC,EAAE,CAAC,OAAO,EAAE,gBAAgB,KAAK,IAAI,CAAC;CACvD;AAED;;;;;;GAMG;AACH,qBAAa,qBAAqB;IAChC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAuC;IAChE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAoD;IAC3E,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAoC;gBAE7C,OAAO,EAAE,uBAAuB;IAU5C;;;;;OAKG;IACH,gBAAgB,CAAC,MAAM,EAAE,WAAW,GAAG,gBAAgB;IAgCvD;;;;;;;;;;;;OAYG;IACH,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,GAAG,gBAAgB;IAoDlE,iEAAiE;IACjE,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,gBAAgB,GAAG,SAAS;IAK3D,qDAAqD;IACrD,YAAY,CAAC,MAAM,CAAC,EAAE,eAAe,GAAG,gBAAgB,EAAE;IAY1D;;;;;;;;;;;;;OAaG;IACH,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC;IA2B1D;;;OAGG;IACH,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;IASrC,2EAA2E;IAC3E,QAAQ,IAAI,IAAI;IAahB,OAAO,CAAC,QAAQ;IAmBhB,OAAO,CAAC,OAAO;CAOhB;AAID;;;;;;;;;;;GAWG;AACH,wBAAgB,SAAS,CACvB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,UAAU,EACjB,OAAO,EAAE,OAAO,EAChB,WAAW,EAAE,MAAM,GAClB,aAAa,CASf"}