agentvault 1.0.2 → 1.0.5

package/dist/src/backbone/validators.js

@@ -0,0 +1,122 @@
+/**
+ * Backbone subsystem validators
+ *
+ * Zod schemas for validating inputs to the memory, knowledge,
+ * communication, and consensus subsystems.
+ */
+import { z } from 'zod';
+import { KNOWLEDGE_STATUSES, KNOWLEDGE_CATEGORIES, MESSAGE_TYPES, MESSAGE_PRIORITIES, PROPOSAL_TYPES, QUORUM_TYPES, VOTE_VALUES, } from './constants.js';
+// ── Agent Memory ───────────────────────────────────────────────────────────
+export const setMemorySchema = z.object({
+    key: z
+        .string()
+        .min(1, 'Key is required')
+        .max(255, 'Key must be at most 255 characters')
+        .regex(/^[a-zA-Z0-9._-]+$/, 'Key must be alphanumeric with dots, dashes, or underscores'),
+    value: z.string().max(65536, 'Value must be at most 64 KB'),
+    metadata: z.record(z.string(), z.unknown()).optional(),
+    ttlSeconds: z
+        .number()
+        .int()
+        .positive('TTL must be a positive integer')
+        .max(31536000, 'TTL must be at most 1 year')
+        .optional(),
+});
+// ── Knowledge Base ─────────────────────────────────────────────────────────
+export const createKnowledgeEntrySchema = z.object({
+    title: z.string().min(1, 'Title is required').max(500),
+    content: z.string().min(1, 'Content is required').max(1048576, 'Content must be at most 1 MB'),
+    category: z.enum(KNOWLEDGE_CATEGORIES),
+    status: z.enum(KNOWLEDGE_STATUSES).default('draft'),
+    tags: z.array(z.string().max(100)).max(20).optional(),
+    metadata: z.record(z.string(), z.unknown()).optional(),
+});
+export const updateKnowledgeEntrySchema = z.object({
+    title: z.string().min(1).max(500).optional(),
+    content: z.string().min(1).max(1048576).optional(),
+    category: z.enum(KNOWLEDGE_CATEGORIES).optional(),
+    status: z.enum(KNOWLEDGE_STATUSES).optional(),
+    tags: z.array(z.string().max(100)).max(20).optional(),
+    metadata: z.record(z.string(), z.unknown()).optional(),
+});
+// ── Agent Communication ────────────────────────────────────────────────────
+export const sendMessageSchema = z
+    .object({
+    toAgentId: z.string().uuid().optional(),
+    channel: z.string().min(1).max(100).optional(),
+    parentMessageId: z.string().uuid().optional(),
+    messageType: z.enum(MESSAGE_TYPES),
+    subject: z.string().max(500).optional(),
+    body: z.string().min(1, 'Body is required').max(65536),
+    priority: z.enum(MESSAGE_PRIORITIES).default('normal'),
+    referenceType: z.string().max(100).optional(),
+    referenceId: z.string().uuid().optional(),
+    metadata: z.record(z.string(), z.unknown()).optional(),
+})
+    .refine((data) => data.toAgentId || data.channel, {
+    message: 'Either toAgentId or channel is required',
+});
+export const acknowledgeMessageSchema = z.object({
+    acknowledgedAt: z.string().datetime().optional(),
+});
+// ── Consensus ──────────────────────────────────────────────────────────────
+export const createProposalSchema = z.object({
+    title: z.string().min(1, 'Title is required').max(500),
+    description: z.string().min(1, 'Description is required').max(65536),
+    proposalType: z.enum(PROPOSAL_TYPES),
+    quorumType: z.enum(QUORUM_TYPES).default('majority'),
+    knowledgeEntryId: z.string().uuid().optional(),
+    expiresAt: z.string().datetime().optional(),
+    metadata: z.record(z.string(), z.unknown()).optional(),
+});
+export const castVoteSchema = z.object({
+    vote: z.enum(VOTE_VALUES),
+    reasoning: z.string().max(10000).optional(),
+});
+// ── Wiki ──────────────────────────────────────────────────────────────────
+const slugRegex = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
+export const createWikiPageSchema = z.object({
+    title: z.string().min(1, 'Title is required').max(500),
+    content: z.string().min(1, 'Content is required').max(1048576, 'Content must be at most 1 MB'),
+    category: z.enum(KNOWLEDGE_CATEGORIES),
+    status: z.enum(KNOWLEDGE_STATUSES).default('draft'),
+    slug: z
+        .string()
+        .min(1, 'Slug is required')
+        .max(200)
+        .regex(slugRegex, 'Slug must be lowercase alphanumeric with hyphens'),
+    crossRefs: z.array(z.string().max(200)).max(100).optional(),
+    sourceRefs: z.array(z.string().max(200)).max(50).optional(),
+    tags: z.array(z.string().max(100)).max(20).optional(),
+    metadata: z.record(z.string(), z.unknown()).optional(),
+});
+export const updateWikiPageSchema = z.object({
+    title: z.string().min(1).max(500).optional(),
+    content: z.string().min(1).max(1048576).optional(),
+    category: z.enum(KNOWLEDGE_CATEGORIES).optional(),
+    status: z.enum(KNOWLEDGE_STATUSES).optional(),
+    slug: z.string().min(1).max(200).regex(slugRegex).optional(),
+    crossRefs: z.array(z.string().max(200)).max(100).optional(),
+    sourceRefs: z.array(z.string().max(200)).max(50).optional(),
+    staleness: z.enum(['fresh', 'stale', 'needs-review']).optional(),
+    contradictions: z.array(z.string()).optional(),
+    tags: z.array(z.string().max(100)).max(20).optional(),
+    metadata: z.record(z.string(), z.unknown()).optional(),
+});
+export const wikiSchemaValidator = z.object({
+    name: z.string().min(1, 'Wiki name is required').max(200),
+    description: z.string().max(2000).default(''),
+    categories: z.array(z.string().max(100)).max(50).default([]),
+    ingestPrompt: z.string().max(10000).optional(),
+    queryPrompt: z.string().max(10000).optional(),
+    lintPrompt: z.string().max(10000).optional(),
+    metadata: z.record(z.string(), z.unknown()).optional(),
+});
+export const rawSourceSchema = z.object({
+    name: z.string().min(1, 'Source name is required').max(500),
+    type: z.enum(['file', 'url', 'text']),
+    content: z.string().min(1, 'Content is required').max(10485760, 'Content must be at most 10 MB'),
+    mimeType: z.string().max(200).optional(),
+    metadata: z.record(z.string(), z.unknown()).optional(),
+});
+//# sourceMappingURL=validators.js.map

package/dist/src/backbone/validators.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validators.js","sourceRoot":"","sources":["../../../src/backbone/validators.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,kBAAkB,EAClB,oBAAoB,EACpB,aAAa,EACb,kBAAkB,EAClB,cAAc,EACd,YAAY,EACZ,WAAW,GACZ,MAAM,gBAAgB,CAAC;AAExB,8EAA8E;AAE9E,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,GAAG,EAAE,CAAC;SACH,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,EAAE,iBAAiB,CAAC;SACzB,GAAG,CAAC,GAAG,EAAE,oCAAoC,CAAC;SAC9C,KAAK,CAAC,mBAAmB,EAAE,4DAA4D,CAAC;IAC3F,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,KAAK,EAAE,6BAA6B,CAAC;IAC3D,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IACtD,UAAU,EAAE,CAAC;SACV,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,CAAC,gCAAgC,CAAC;SAC1C,GAAG,CAAC,QAAQ,EAAE,4BAA4B,CAAC;SAC3C,QAAQ,EAAE;CACd,CAAC,CAAC;AAEH,8EAA8E;AAE9E,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,mBAAmB,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACtD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,qBAAqB,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,8BAA8B,CAAC;IAC9F,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC;IACtC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IACnD,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IACrD,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;CACvD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAC5C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE;IAClD,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,QAAQ,EAAE;IACjD,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,QAAQ,EAAE;IAC7C,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IACrD,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;CACvD,CAAC,CAAC;AAEH,8EAA8E;AAE9E,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC;KAC/B,MAAM,CAAC;IACN,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IACvC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAC9C,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IAC7C,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC;IAClC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IACvC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,kBAAkB,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;IACtD,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;IACtD,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAC7C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IACzC,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;CACvD,CAAC;KACD,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,OAAO,EAAE;IAChD,OAAO,EAAE,yCAAyC;CACnD,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CACjD,CAAC,CAAC;AAEH,8EAA8E;AAE9E,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,mBAAmB,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACtD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,yBAAyB,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;IACpE,YAAY,EAAE,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC;IACpC,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;IACpD,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IAC9C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC3C,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;CACvD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC;IACzB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE;CAC5C,CAAC,CAAC;AAEH,6EAA6E;AAE7E,MAAM,SAAS,GAAG,4BAA4B,CAAC;AAE/C,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,mBAAmB,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACtD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,qBAAqB,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,8BAA8B,CAAC;IAC9F,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC;IACtC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IACnD,IAAI,EAAE,CAAC;SACJ,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,EAAE,kBAAkB,CAAC;SAC1B,GAAG,CAAC,GAAG,CAAC;SACR,KAAK,CAAC,SAAS,EAAE,kDAAkD,CAAC;IACvE,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAC3D,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC3D,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IACrD,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;CACvD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAC5C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE;IAClD,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,QAAQ,EAAE;IACjD,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,QAAQ,EAAE;IAC7C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE;IAC5D,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAC3D,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC3D,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,cAAc,CAAU,CAAC,CAAC,QAAQ,EAAE;IACzE,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC9C,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IACrD,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;CACvD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,uBAAuB,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACzD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC7C,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC5D,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE;IAC9C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE;IAC7C,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE;IAC5C,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;CACvD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,yBAAyB,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAC3D,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAU,CAAC;IAC9C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,qBAAqB,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,+BAA+B,CAAC;IAChG,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IACxC,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;CACvD,CAAC,CAAC"}

package/dist/src/backup/backup.d.ts

@@ -4,6 +4,9 @@
  * Portable JSON format backup with embedded manifest and checksums
  * Stores backups in ~/.agentvault/backups/
  * CLE-101: Enhanced to include real canister state
+ * CLE-MRB: Full backup adds SHA-256 Merkle root and ed25519-signed AES-256-GCM key
+ * Encrypted full-state export: zip.enc (AES-256-GCM + PBKDF2) with optional
+ * Arweave manifest upload and a restore flow that redeploys a fresh canister.
  */
 import type { AgentConfig } from '../packaging/types.js';
 /**
@@ -20,6 +23,14 @@ export interface CanisterState {
     memory?: unknown;
     context?: unknown;
 }
+export interface EncryptedKeyEnvelope {
+    /** AES-256-GCM-wrapped data-encryption key: hex-encoded ciphertext */
+    ciphertext: string;
+    /** 12-byte IV used to wrap the key: hex */
+    iv: string;
+    /** 16-byte GCM auth tag: hex */
+    tag: string;
+}
 export interface BackupManifest {
     version: string;
     agentName: string;
@@ -31,6 +42,35 @@ export interface BackupManifest {
     checksums: Record<string, string>;
     size: number;
     components: string[];
+    /** Path to the local encrypted full-state zip (encrypted exports only). */
+    localEncryptedZipPath?: string;
+    /** Arweave transaction ID of the uploaded manifest (encrypted exports only). */
+    arweaveManifestTxId?: string;
+    /** SHA-256 of the encrypted zip payload (encrypted exports only). */
+    encryptedZipSha256?: string;
+    /**
+     * SHA-256 Merkle root of all backup entries (sorted by path).
+     * Present only in full backups (--full flag).
+     */
+    merkleRoot?: string;
+    /**
+     * AES-256-GCM data-encryption key wrapped with a key derived from
+     * the ed25519 signing key via HKDF-SHA256.
+     * Present only in full backups.
+     */
+    encryptedKey?: EncryptedKeyEnvelope;
+    /**
+     * ed25519 signature (hex) over the raw bytes of encryptedKey
+     * (ciphertext || iv || tag). Allows verifying the key has not been
+     * swapped without decrypting it.
+     * Present only in full backups.
+     */
+    keySignature?: string;
+    /**
+     * ed25519 public key (hex) corresponding to the signing key.
+     * Present only in full backups.
+     */
+    ed25519PublicKey?: string;
 }
 export interface BackupOptions {
     agentName: string;
@@ -39,11 +79,32 @@ export interface BackupOptions {
     canisterId?: string;
     includeCanisterState?: boolean;
 }
+export interface FullBackupOptions extends BackupOptions {
+    /**
+     * Path to the 32-byte ed25519 private key stored as hex.
+     * Defaults to ~/.agentvault/backup-signing.key.
+     * If the file does not exist, a new keypair is generated and saved.
+     */
+    signingKeyPath?: string;
+}
+export interface EncryptedBackupOptions extends BackupOptions {
+    /** Passphrase used to derive the AES-256-GCM key (PBKDF2-SHA256). */
+    passphrase: string;
+    /** Path to an Arweave JWK; when set, the manifest is uploaded to Arweave. */
+    arweaveJwkPath?: string;
+    /** Optional WASM module to bundle so restore can redeploy a canister. */
+    wasmPath?: string;
+}
 export interface ImportOptions {
     inputPath: string;
     targetAgentName?: string;
     overwrite?: boolean;
 }
+export interface FullRestoreOptions {
+    zipPath: string;
+    passphrase: string;
+    network?: string;
+}
 export interface BackupResult {
     success: boolean;
     path?: string;
@@ -51,6 +112,18 @@ export interface BackupResult {
     sizeBytes?: number;
     manifest?: BackupManifest;
 }
+export interface FullBackupResult extends BackupResult {
+    /** SHA-256 Merkle root of all backup entries */
+    merkleRoot?: string;
+    /** ed25519 public key (hex) used to sign the wrapped AES key */
+    ed25519PublicKey?: string;
+}
+export interface FullRestoreResult {
+    success: boolean;
+    error?: string;
+    deployedCanisterId?: string;
+    restoredPath?: string;
+}
 export interface ImportResult {
     success: boolean;
     agentName?: string;
@@ -58,10 +131,43 @@ export interface ImportResult {
     components: string[];
     warnings: string[];
 }
+/**
+ * Load or create an ed25519 private key (32 raw bytes) stored as hex at
+ * `keyPath`.  Returns { privateKey, publicKey } as Buffers.
+ */
+export declare function loadOrCreateSigningKey(keyPath: string): Promise<{
+    privateKey: Buffer;
+    publicKey: Buffer;
+}>;
+/**
+ * Create a full encrypted backup zip.
+ *
+ * Steps:
+ *  1. Collect backup entries (logical files).
+ *  2. Compute SHA-256 Merkle root of all entries.
+ *  3. Generate a random 32-byte AES-256-GCM data-encryption key.
+ *  4. Encrypt the backup payload with that key.
+ *  5. Wrap (encrypt) the data key with a key derived from the ed25519 signing key.
+ *  6. Sign the wrapped-key bytes (ciphertext || iv || tag) with ed25519.
+ *  7. Write a JSON-envelope backup file containing the manifest + ciphertext.
+ */
+export declare function fullBackup(options: FullBackupOptions): Promise<FullBackupResult>;
 export declare function exportBackup(options: BackupOptions): Promise<BackupResult>;
+/**
+ * Export a full-state encrypted backup (.zip.enc).
+ *
+ * Stages agent state, encrypted keys, logs, dependencies and an optional WASM
+ * module, zips the payload, encrypts it with AES-256-GCM (PBKDF2-SHA256 key
+ * derivation) and writes SHA-256 checksums.  The encrypted zip stays local;
+ * when an Arweave JWK is provided only the manifest + zip hash are uploaded.
+ * A plaintext sidecar manifest (.manifest.json) is written next to the zip so
+ * listing/preview keep working.
+ */
+export declare function exportEncryptedBackup(options: EncryptedBackupOptions): Promise<BackupResult>;
+export declare function restoreFromEncryptedZip(options: FullRestoreOptions): Promise<FullRestoreResult>;
 export declare function previewBackup(inputPath: string): Promise<BackupManifest | null>;
 export declare function importBackup(options: ImportOptions): Promise<ImportResult>;
-export declare function listBackups(agentName: string): Promise<BackupManifest[]>;
+export declare function listBackups(agentName?: string): Promise<BackupManifest[]>;
 export declare function deleteBackup(filePath: string): Promise<boolean>;
 export declare function formatBackupSize(bytes: number): string;
 //# sourceMappingURL=backup.d.ts.map

package/dist/src/backup/backup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"backup.d.ts","sourceRoot":"","sources":["../../../src/backup/backup.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAOH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAkFzD;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,UAAU,CAAC;IAC3C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC;IAClB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,oBAAoB;IACnC,sEAAsE;IACtE,UAAU,EAAE,MAAM,CAAC;IACnB,2CAA2C;IAC3C,EAAE,EAAE,MAAM,CAAC;IACX,gCAAgC;IAChC,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,IAAI,CAAC;IAChB,OAAO,EAAE,IAAI,CAAC;IACd,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,2EAA2E;IAC3E,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,gFAAgF;IAChF,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,qEAAqE;IACrE,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,YAAY,CAAC,EAAE,oBAAoB,CAAC;IACpC;;;;;OAKG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;OAGG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,oBAAoB,CAAC,EAAE,OAAO,CAAC;CAChC;AAED,MAAM,WAAW,iBAAkB,SAAQ,aAAa;IACtD;;;;OAIG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,sBAAuB,SAAQ,aAAa;IAC3D,qEAAqE;IACrE,UAAU,EAAE,MAAM,CAAC;IACnB,6EAA6E;IAC7E,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,yEAAyE;IACzE,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,cAAc,CAAC;CAC3B;AAED,MAAM,WAAW,gBAAiB,SAAQ,YAAY;IACpD,gDAAgD;IAChD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gEAAgE;IAChE,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AA2FD;;;GAGG;AACH,wBAAsB,sBAAsB,CAC1C,OAAO,EAAE,MAAM,GACd,OAAO,CAAC;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC,CA0BpD;AAgCD;;;;;;;;;;;GAWG;AACH,wBAAsB,UAAU,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAmJtF;AAED,wBAAsB,YAAY,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC,CA6DhF;AAED;;;;;;;;;GASG;AACH,wBAAsB,qBAAqB,CAAC,OAAO,EAAE,sBAAsB,GAAG,OAAO,CAAC,YAAY,CAAC,CAiHlG;AAED,wBAAsB,uBAAuB,CAAC,OAAO,EAAE,kBAAkB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAyDrG;AAED,wBAAsB,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAcrF;AAED,wBAAsB,YAAY,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC,CA+ChF;AAED,wBAAsB,WAAW,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CAyB/E;AAED,wBAAsB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAWrE;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAItD"}