agentvault 1.0.2 → 1.0.5

package/dist/src/security/mfa-approval.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mfa-approval.js","sourceRoot":"","sources":["../../../src/security/mfa-approval.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AACxC,OAAO,EACL,kBAAkB,EAClB,YAAY,EACZ,YAAY,EACZ,UAAU,EACV,UAAU,GACX,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,uBAAuB,EACvB,kBAAkB,EAClB,cAAc,GAEf,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAErD,gFAAgF;AAEhF,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,KAAK,CAAC,CAAC;AAE9D,SAAS,YAAY;IACnB,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AAC7C,CAAC;AA4ID,iFAAiF;AAEjF,SAAS,SAAS,CAAC,QAAgB;IACjC,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,QAAQ,OAAO,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,SAAS,CAAC,QAAgB;IACjC,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,QAAQ,OAAO,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,aAAa;IACpB,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;AAC/C,CAAC;AAED,SAAS,YAAY;IACnB,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,kBAAkB;IACzB,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,sBAAsB,CAAC,CAAC;AACpD,CAAC;AAED,SAAS,SAAS,CAAC,QAAgB;IACjC,MAAM,EAAE,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;IAC/B,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,OAAO,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,EAAE,EAAE,MAAM,CAAC,CAAa,CAAC;AACxD,CAAC;AAED,SAAS,SAAS,CAAC,KAAe;IAChC,YAAY,EAAE,CAAC;IACf,EAAE,CAAC,aAAa,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,SAAS,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,aAAa;IACpB,MAAM,EAAE,GAAG,aAAa,EAAE,CAAC;IAC3B,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IAC/C,OAAO,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,EAAE,EAAE,MAAM,CAAC,CAAmB,CAAC;AAC9D,CAAC;AAED,SAAS,aAAa,CAAC,EAAkB;IACvC,YAAY,EAAE,CAAC;IACf,EAAE,CAAC,aAAa,CAAC,aAAa,EAAE,EAAE,SAAS,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,YAAY;IACnB,MAAM,EAAE,GAAG,YAAY,EAAE,CAAC;IAC1B,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC;QAAE,OAAO,EAAE,CAAC;IAClC,OAAO,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,EAAE,EAAE,MAAM,CAAC,CAA4B,CAAC;AACvE,CAAC;AAED,SAAS,YAAY,CAAC,KAA8B;IAClD,YAAY,EAAE,CAAC;IACf,EAAE,CAAC,aAAa,CAAC,YAAY,EAAE,EAAE,SAAS,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC;AAC7D,CAAC;AAED,SAAS,kBAAkB;IACzB,MAAM,EAAE,GAAG,kBAAkB,EAAE,CAAC;IAChC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;IAC7C,OAAO,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,EAAE,EAAE,MAAM,CAAC,CAAmB,CAAC;AAC9D,CAAC;AAED,SAAS,kBAAkB,CAAC,GAAmB;IAC7C,YAAY,EAAE,CAAC;IACf,EAAE,CAAC,aAAa,CAAC,kBAAkB,EAAE,EAAE,SAAS,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;AACjE,CAAC;AAED,iFAAiF;AAEjF,SAAS,WAAW;IAClB,OAAO,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;AACtE,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAoB;IAC5C,YAAY,EAAE,CAAC;IACf,MAAM,EAAE,GAAG,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACrC,IAAI,GAAG,GAAoB,EAAE,CAAC;IAC9B,IAAI,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,EAAE,CAAC;QACtB,GAAG,GAAG,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,EAAE,EAAE,MAAM,CAAC,CAAoB,CAAC;IAC9D,CAAC;IACD,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChB,EAAE,CAAC,aAAa,CAAC,EAAE,EAAE,SAAS,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;IAE7C,8DAA8D;IAC9D,6DAA6D;IAC7D,mBAAmB,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;QACpC,4DAA4D;IAC9D,CAAC,CAAC,CAAC;AACL,CAAC;AAED,iFAAiF;AAEjF,SAAS,oBAAoB,CAAC,KAAa,EAAE,QAAgB,EAAE,SAAiB;IAC9E,OAAO,MAAM;SACV,UAAU,CAAC,QAAQ,CAAC;SACpB,MAAM,CAAC,GAAG,KAAK,IAAI,QAAQ,IAAI,SAAS,EAAE,CAAC;SAC3C,MAAM,CAAC,KAAK,CAAC,CAAC;AACnB,CAAC;AAED,iFAAiF;AAEjF,MAAM,WAAW,GAAG,MAAM,CAAC,CAAC,aAAa;AAEzC;;;GAGG;AACH,SAAS,cAAc,CAAC,QAAgB;IACtC,MAAM,KAAK,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;IAClC,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,QAAQ,EAAE,CAAC,CAAC;IAC1E,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IAClD,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,MAAM,CAAC,4BAA4B,CAAC,CAAC,MAAM,EAAE,CAAC;AAC5F,CAAC;AAED,SAAS,gBAAgB,CAAC,SAAiB,EAAE,QAAgB,EAAE,KAAa;IAC1E,MAAM,GAAG,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;IACrC,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,WAAW,CAAC,CAAC,WAAW,EAAE,CAAC;IACnE,MAAM,OAAO,GAAG,GAAG,SAAS,IAAI,KAAK,IAAI,SAAS,EAAE,CAAC;IACrD,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAE7E,+CAA+C;IAC/C,MAAM,KAAK,GAAG,YAAY,EAAE,CAAC;IAC7B,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IACrD,YAAY,CAAC,KAAK,CAAC,CAAC;IAEpB,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAC9B,KAAa;IAEb,MAAM,KAAK,GAAG,YAAY,EAAE,CAAC;IAC7B,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;IAC1B,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;IAC3D,IAAI,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;IAClE,IAAI,IAAI,IAAI,EAAE,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;IAEzF,gBAAgB;IAChB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACjB,YAAY,CAAC,KAAK,CAAC,CAAC;IAEpB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC;AACjD,CAAC;AAED,iFAAiF;AAEjF,MAAM,cAAc,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,SAAS;AAChD,MAAM,QAAQ,GAAG,CAAC,CAAC,CAAC,uBAAuB;AAE3C;;;GAGG;AACH,SAAS,uBAAuB,CAAC,MAAc;IAC7C,MAAM,EAAE,GAAG,aAAa,EAAE,CAAC;IAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,WAAW,GAAG,GAAG,GAAG,cAAc,CAAC;IAEzC,0CAA0C;IAC1C,MAAM,MAAM,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAC9C,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE,GAAG,WAAW,CAC7C,CAAC;IAEF,IAAI,MAAM,CAAC,MAAM,IAAI,QAAQ,EAAE,CAAC;QAC9B,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC,wCAAwC;QAC3D,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;IACtC,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC;IAC5B,aAAa,CAAC,EAAE,CAAC,CAAC;IAClB,OAAO,IAAI,CAAC;AACd,CAAC;AAED,iFAAiF;AAEjF;;;GAGG;AACH,MAAM,UAAU,oBAAoB;IAClC,OAAO,MAAM;SACV,UAAU,CAAC,QAAQ,CAAC;SACpB,MAAM,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC;SACxD,MAAM,CAAC,KAAK,CAAC;SACb,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAClB,CAAC;AAID,SAAS,WAAW,CAAC,MAAc,EAAE,WAAmB;IACtD,MAAM,GAAG,GAAG,kBAAkB,EAAE,CAAC;IACjC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IAEtC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,wEAAwE;QACxE,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAClC,kBAAkB,CAAC,GAAG,CAAC,CAAC;QACxB,OAAO,YAAY,CAAC;IACtB,CAAC;IAED,OAAO,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC;AAC9D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,MAAc,EAAE,WAAmB;IAChE,MAAM,GAAG,GAAG,kBAAkB,EAAE,CAAC;IACjC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IACtC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QACjC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,EAAE,WAAW,CAAC,CAAC;QAC5C,kBAAkB,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC;AACH,CAAC;AAED,iFAAiF;AAEjF;;;;;;;GAOG;AACH,MAAM,UAAU,QAAQ,CAAC,QAAgB;IACvC,YAAY,EAAE,CAAC;IAEf,MAAM,MAAM,GAAG,kBAAkB,EAAE,CAAC;IACpC,MAAM,SAAS,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;IACvC,MAAM,GAAG,GAAG,UAAU,CAAC,MAAM,EAAE,cAAc,QAAQ,EAAE,CAAC,CAAC;IACzD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAErC,MAAM,KAAK,GAAa;QACtB,QAAQ;QACR,aAAa,EAAE,SAAS;QACxB,YAAY,EAAE,CAAC;QACf,UAAU,EAAE,EAAE;QACd,MAAM,EAAE,KAAK;QACb,SAAS,EAAE,GAAG;QACd,SAAS,EAAE,GAAG;KACf,CAAC;IAEF,SAAS,CAAC,KAAK,CAAC,CAAC;IAEjB,gBAAgB,CAAC;QACf,EAAE,EAAE,WAAW,EAAE;QACjB,SAAS,EAAE,OAAO;QAClB,QAAQ;QACR,KAAK,EAAE,OAAO;QACd,SAAS,EAAE,GAAG;QACd,MAAM,EAAE,wEAAwE;KACjF,CAAC,CAAC;IAEH,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;AACjF,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,cAAc,CAAC,SAAiB,EAAE,QAAgB;IAChE,MAAM,KAAK,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;IAClC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CACb,kCAAkC,QAAQ,iDAAiD,QAAQ,EAAE,CACtG,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CACb,WAAW,QAAQ,yCAAyC;YAC1D,iEAAiE,QAAQ,EAAE,CAC9E,CAAC;IACJ,CAAC;IAED,gCAAgC;IAChC,KAAK,CAAC,YAAY,IAAI,CAAC,CAAC;IACxB,KAAK,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3C,SAAS,CAAC,KAAK,CAAC,CAAC;IAEjB,MAAM,KAAK,GAAG,KAAK,CAAC,YAAY,CAAC;IACjC,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3C,MAAM,aAAa,GAAG,oBAAoB,CAAC,KAAK,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;IACvE,MAAM,KAAK,GAAG,gBAAgB,CAAC,SAAS,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC3D,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,WAAW,CAAC,CAAC,WAAW,EAAE,CAAC;IAEnE,gBAAgB,CAAC;QACf,EAAE,EAAE,WAAW,EAAE;QACjB,SAAS;QACT,QAAQ;QACR,KAAK,EAAE,kBAAkB;QACzB,KAAK;QACL,aAAa;QACb,SAAS;QACT,MAAM,EAAE,4BAA4B,SAAS,EAAE;KAChD,CAAC,CAAC;IAEH,OAAO;QACL,SAAS;QACT,QAAQ;QACR,KAAK;QACL,SAAS;QACT,aAAa;QACb,YAAY,EAAE,8BAA8B,SAAS,UAAU,KAAK,EAAE;QACtE,SAAS;KACV,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAqB;IACrD,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IACvD,MAAM,WAAW,GAAG,KAAK,CAAC,iBAAiB,IAAI,oBAAoB,EAAE,CAAC;IACtE,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAErC,4EAA4E;IAC5E,MAAM,KAAK,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;IAClC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IAC5C,CAAC;IAED,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACjB,gBAAgB,CAAC;YACf,EAAE,EAAE,WAAW,EAAE;YACjB,SAAS;YACT,QAAQ;YACR,KAAK,EAAE,UAAU;YACjB,KAAK;YACL,SAAS,EAAE,GAAG;YACd,MAAM,EAAE,qCAAqC;YAC7C,iBAAiB,EAAE,WAAW;SAC/B,CAAC,CAAC;QACH,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;IAChD,CAAC;IAED,6EAA6E;IAC7E,IAAI,KAAK,KAAK,KAAK,CAAC,YAAY,EAAE,CAAC;QACjC,gBAAgB,CAAC;YACf,EAAE,EAAE,WAAW,EAAE;YACjB,SAAS;YACT,QAAQ;YACR,KAAK,EAAE,UAAU;YACjB,KAAK;YACL,SAAS,EAAE,GAAG;YACd,MAAM,EAAE,6BAA6B,KAAK,CAAC,YAAY,SAAS,KAAK,EAAE;YACvE,iBAAiB,EAAE,WAAW;SAC/B,CAAC,CAAC;QACH,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;IACjD,CAAC;IAED,6EAA6E;IAC7E,IAAI,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrC,gBAAgB,CAAC;YACf,EAAE,EAAE,WAAW,EAAE;YACjB,SAAS;YACT,QAAQ;YACR,KAAK,EAAE,UAAU;YACjB,KAAK;YACL,SAAS,EAAE,GAAG;YACd,MAAM,EAAE,iDAAiD;YACzD,iBAAiB,EAAE,WAAW;SAC/B,CAAC,CAAC;QACH,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;IACjD,CAAC;IAED,6EAA6E;IAC7E,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IACjD,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC;QAClC,gBAAgB,CAAC;YACf,EAAE,EAAE,WAAW,EAAE;YACjB,SAAS;YACT,QAAQ;YACR,KAAK,EAAE,UAAU;YACjB,KAAK;YACL,SAAS,EAAE,GAAG;YACd,MAAM,EAAE,mBAAmB;YAC3B,iBAAiB,EAAE,WAAW;SAC/B,CAAC,CAAC;QACH,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;IAC/C,CAAC;IAED,6EAA6E;IAC7E,IAAI,CAAC,uBAAuB,CAAC,WAAW,CAAC,EAAE,CAAC;QAC1C,gBAAgB,CAAC;YACf,EAAE,EAAE,WAAW,EAAE;YACjB,SAAS;YACT,QAAQ;YACR,KAAK,EAAE,qBAAqB;YAC5B,KAAK;YACL,SAAS,EAAE,GAAG;YACd,MAAM,EAAE,UAAU,WAAW,aAAa,QAAQ,mBAAmB;YACrE,iBAAiB,EAAE,WAAW;SAC/B,CAAC,CAAC;QACH,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;IAC/C,CAAC;IAED,6EAA6E;IAC7E,0EAA0E;IAC1E,kDAAkD;IAClD,MAAM,WAAW,GAAG,WAAW,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IACvD,IAAI,WAAW,KAAK,YAAY,EAAE,CAAC;QACjC,yDAAyD;QACzD,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC;QACpB,KAAK,CAAC,yBAAyB,GAAG,WAAW,CAAC;QAC9C,KAAK,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC3C,SAAS,CAAC,KAAK,CAAC,CAAC;QAEjB,gBAAgB,CAAC;YACf,EAAE,EAAE,WAAW,EAAE;YACjB,SAAS;YACT,QAAQ;YACR,KAAK,EAAE,kBAAkB;YACzB,KAAK;YACL,SAAS,EAAE,GAAG;YACd,MAAM,EAAE,8BAA8B,WAAW,iFAAiF,QAAQ,sBAAsB,WAAW,EAAE;YAC7K,iBAAiB,EAAE,WAAW;SAC/B,CAAC,CAAC;QACH,gBAAgB,CAAC;YACf,EAAE,EAAE,WAAW,EAAE;YACjB,SAAS;YACT,QAAQ;YACR,KAAK,EAAE,mBAAmB;YAC1B,SAAS,EAAE,GAAG;YACd,MAAM,EAAE,sFAAsF,QAAQ,oCAAoC,WAAW,8DAA8D;YACnN,iBAAiB,EAAE,WAAW;SAC/B,CAAC,CAAC;QACH,gBAAgB,CAAC;YACf,EAAE,EAAE,WAAW,EAAE;YACjB,SAAS;YACT,QAAQ;YACR,KAAK,EAAE,eAAe;YACtB,SAAS,EAAE,GAAG;YACd,MAAM,EAAE,iFAAiF;YACzF,iBAAiB,EAAE,WAAW;SAC/B,CAAC,CAAC;QAEH,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAC1C,CAAC;IAED,6EAA6E;IAE7E,mCAAmC;IACnC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7B,KAAK,CAAC,SAAS,GAAG,GAAG,CAAC;IACtB,SAAS,CAAC,KAAK,CAAC,CAAC;IAEjB,8DAA8D;IAC9D,MAAM,aAAa,GAAG,oBAAoB,CAAC,KAAK,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;IACjE,MAAM,UAAU,GAAG,MAAM;SACtB,UAAU,CAAC,QAAQ,EAAE,YAAY,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;SACvD,MAAM,CAAC,GAAG,KAAK,IAAI,SAAS,IAAI,QAAQ,IAAI,GAAG,EAAE,CAAC;SAClD,MAAM,CAAC,KAAK,CAAC,CAAC;IAEjB,gBAAgB,CAAC;QACf,EAAE,EAAE,WAAW,EAAE;QACjB,SAAS;QACT,QAAQ;QACR,KAAK,EAAE,UAAU;QACjB,KAAK;QACL,aAAa;QACb,UAAU;QACV,SAAS,EAAE,GAAG;QACd,MAAM,EAAE,sBAAsB,WAAW,EAAE;QAC3C,iBAAiB,EAAE,WAAW;KAC/B,CAAC,CAAC;IAEH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;AAClC,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,uBAAuB,CAAC,KAAwB;IAC9D,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,aAAa,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IACvE,MAAM,WAAW,GAAG,KAAK,CAAC,iBAAiB,IAAI,oBAAoB,EAAE,CAAC;IACtE,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAErC,4EAA4E;IAC5E,MAAM,KAAK,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;IAClC,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IAEtD,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACjB,gBAAgB,CAAC;YACf,EAAE,EAAE,WAAW,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU;YACzD,KAAK,EAAE,SAAS,EAAE,GAAG;YACrB,MAAM,EAAE,+CAA+C;YACvD,iBAAiB,EAAE,WAAW;SAC/B,CAAC,CAAC;QACH,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;IAChD,CAAC;IAED,6EAA6E;IAC7E,IAAI,KAAK,KAAK,KAAK,CAAC,YAAY,EAAE,CAAC;QACjC,gBAAgB,CAAC;YACf,EAAE,EAAE,WAAW,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU;YACzD,KAAK,EAAE,SAAS,EAAE,GAAG;YACrB,MAAM,EAAE,6BAA6B,KAAK,CAAC,YAAY,SAAS,KAAK,EAAE;YACvE,iBAAiB,EAAE,WAAW;SAC/B,CAAC,CAAC;QACH,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;IACjD,CAAC;IAED,IAAI,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrC,gBAAgB,CAAC;YACf,EAAE,EAAE,WAAW,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU;YACzD,KAAK,EAAE,SAAS,EAAE,GAAG;YACrB,MAAM,EAAE,iDAAiD;YACzD,iBAAiB,EAAE,WAAW;SAC/B,CAAC,CAAC;QACH,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;IACjD,CAAC;IAED,6EAA6E;IAC7E,MAAM,YAAY,GAAG,kBAAkB,CAAC,WAAW,CAAC,CAAC;IACrD,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,gBAAgB,CAAC;YACf,EAAE,EAAE,WAAW,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU;YACzD,KAAK,EAAE,SAAS,EAAE,GAAG;YACrB,MAAM,EAAE,+CAA+C,WAAW,EAAE;YACpE,iBAAiB,EAAE,WAAW;SAC/B,CAAC,CAAC;QACH,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC;IACzD,CAAC;IAED,MAAM,WAAW,GAAG,cAAc,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,wCAAwC;IAC7F,MAAM,YAAY,GAAG,uBAAuB,CAC1C,SAAS,EACT,aAAa,EACb,YAAY,EACZ,WAAW,CACZ,CAAC;IAEF,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC;QACrB,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,KAAK,gBAAgB;YACrD,CAAC,CAAC,0BAA0B;YAC5B,CAAC,CAAC,6BAA6B,CAAC;QAClC,gBAAgB,CAAC;YACf,EAAE,EAAE,WAAW,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU;YACzD,KAAK,EAAE,SAAS,EAAE,GAAG;YACrB,MAAM,EAAE,kCAAkC,YAAY,CAAC,MAAM,EAAE;YAC/D,iBAAiB,EAAE,WAAW;SAC/B,CAAC,CAAC;QACH,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAC/B,CAAC;IAED,6EAA6E;IAC7E,IAAI,CAAC,uBAAuB,CAAC,WAAW,CAAC,EAAE,CAAC;QAC1C,gBAAgB,CAAC;YACf,EAAE,EAAE,WAAW,EAAE,EAAE,SAAS,EAAE,QAAQ;YACtC,KAAK,EAAE,qBAAqB,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG;YACnD,MAAM,EAAE,UAAU,WAAW,aAAa,QAAQ,mBAAmB;YACrE,iBAAiB,EAAE,WAAW;SAC/B,CAAC,CAAC;QACH,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;IAC/C,CAAC;IAED,6EAA6E;IAC7E,MAAM,WAAW,GAAG,WAAW,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IACvD,IAAI,WAAW,KAAK,YAAY,EAAE,CAAC;QACjC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC;QACpB,KAAK,CAAC,yBAAyB,GAAG,WAAW,CAAC;QAC9C,KAAK,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC3C,SAAS,CAAC,KAAK,CAAC,CAAC;QAEjB,gBAAgB,CAAC;YACf,EAAE,EAAE,WAAW,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,kBAAkB;YACjE,KAAK,EAAE,SAAS,EAAE,GAAG;YACrB,MAAM,EAAE,4BAA4B,WAAW,gDAAgD;YAC/F,iBAAiB,EAAE,WAAW;SAC/B,CAAC,CAAC;QACH,gBAAgB,CAAC;YACf,EAAE,EAAE,WAAW,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,eAAe;YAC9D,SAAS,EAAE,GAAG;YACd,MAAM,EAAE,sCAAsC;YAC9C,iBAAiB,EAAE,WAAW;SAC/B,CAAC,CAAC;QACH,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAC1C,CAAC;IAED,6EAA6E;IAC7E,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7B,KAAK,CAAC,SAAS,GAAG,GAAG,CAAC;IACtB,SAAS,CAAC,KAAK,CAAC,CAAC;IAEjB,MAAM,UAAU,GAAG,MAAM;SACtB,UAAU,CAAC,QAAQ,EAAE,YAAY,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;SACvD,MAAM,CAAC,aAAa,KAAK,IAAI,SAAS,IAAI,QAAQ,IAAI,GAAG,EAAE,CAAC;SAC5D,MAAM,CAAC,KAAK,CAAC,CAAC;IAEjB,gBAAgB,CAAC;QACf,EAAE,EAAE,WAAW,EAAE,EAAE,SAAS,EAAE,QAAQ;QACtC,KAAK,EAAE,oBAAoB,EAAE,KAAK,EAAE,aAAa;QACjD,UAAU,EAAE,SAAS,EAAE,GAAG;QAC1B,MAAM,EAAE,oCAAoC,WAAW,iBAAiB,SAAS,CAAC,WAAW,GAAG;QAChG,iBAAiB,EAAE,WAAW;KAC/B,CAAC,CAAC;IAEH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;AAClC,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,YAAY,CAC1B,QAAgB,EAChB,QAAgB,EAChB,cAAuB;IAEvB,MAAM,KAAK,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;IAClC,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IAEzB,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IACjD,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,QAAQ,CAAC;QAAE,OAAO,KAAK,CAAC;IAEhD,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC;IACrB,KAAK,CAAC,yBAAyB,GAAG,SAAS,CAAC;IAC5C,KAAK,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3C,SAAS,CAAC,KAAK,CAAC,CAAC;IAEjB,IAAI,cAAc,EAAE,CAAC;QACnB,cAAc,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;IAC3C,CAAC;IAED,gBAAgB,CAAC;QACf,EAAE,EAAE,WAAW,EAAE;QACjB,SAAS,EAAE,QAAQ;QACnB,QAAQ;QACR,KAAK,EAAE,iBAAiB;QACxB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,MAAM,EAAE,cAAc;YACpB,CAAC,CAAC,2BAA2B,cAAc,wDAAwD;YACnG,CAAC,CAAC,yEAAyE;QAC7E,iBAAiB,EAAE,cAAc;KAClC,CAAC,CAAC;IAEH,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,QAAgB;IAC7C,MAAM,EAAE,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;IAC/B,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC;QAAE,OAAO,EAAE,CAAC;IAClC,OAAO,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,EAAE,EAAE,MAAM,CAAC,CAAoB,CAAC;AAC/D,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,QAAgB;IAC3C,MAAM,KAAK,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;IAClC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,EAAE,cAAc,EAAE,CAAC,EAAE,CAAC;IAClF,CAAC;IACD,OAAO;QACL,UAAU,EAAE,IAAI;QAChB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,cAAc,EAAE,KAAK,CAAC,UAAU,CAAC,MAAM;QACvC,SAAS,EAAE,KAAK,CAAC,SAAS;KAC3B,CAAC;AACJ,CAAC"}

package/dist/src/security/multisig.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"multisig.d.ts","sourceRoot":"","sources":["../../../src/security/multisig.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAWH,MAAM,MAAM,cAAc,GAAG,SAAS,GAAG,UAAU,GAAG,UAAU,GAAG,SAAS,CAAC;AAC7E,MAAM,MAAM,cAAc,GAAG,KAAK,GAAG,UAAU,GAAG,QAAQ,CAAC;AAE3D,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,QAAQ,GAAG,SAAS,GAAG,UAAU,GAAG,eAAe,GAAG,UAAU,CAAC;IACvE,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,CAAC,EAAE,IAAI,CAAC;IACjB,MAAM,EAAE,cAAc,CAAC;IACvB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,SAAS,EAAE,iBAAiB,EAAE,CAAC;IAC/B,MAAM,EAAE,cAAc,CAAC;IACvB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAChC;AAED;;;;;GAKG;AACH,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,kDAAkD;IAClD,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,IAAI,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,cAAc,CAAC;IACvB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;CAC3B;AAoBD;;GAEG;AACH,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,eAAe,CAAC,MAAM,CAAC,EAC7B,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,cAAc,EACtB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GACzB,eAAe,CA6BjB;AAED;;GAEG;AACH,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,cAAc,EACtB,YAAY,EAAE,MAAM,GACnB,MAAM,CAUR;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CACjC,EAAE,EAAE,MAAM,EACV,MAAM,EAAE,MAAM,EACd,OAAO,CAAC,EAAE,MAAM,GACf,OAAO,CAkCT;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CACnC,EAAE,EAAE,MAAM,EACV,UAAU,EAAE,MAAM,EAClB,MAAM,CAAC,EAAE,MAAM,GACd,OAAO,CAwBT;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,EAAE,EAAE,MAAM,GAAG,eAAe,GAAG,IAAI,CAmDrE;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAClC,SAAS,CAAC,EAAE,MAAM,EAClB,MAAM,CAAC,EAAE,cAAc,GACtB,eAAe,EAAE,CAgCnB;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAazD;AAED;;GAEG;AACH,wBAAgB,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAO9C;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,EAAE,EAAE,MAAM,GAAG;IAC9C,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,cAAc,CAAC;CACxB,GAAG,IAAI,CAYP;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG,eAAe,EAAE,CAQtE;AAED;;GAEG;AACH,wBAAgB,sBAAsB,IAAI,MAAM,CA+B/C"}

package/dist/src/security/multisig.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"multisig.js","sourceRoot":"","sources":["../../../src/security/multisig.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AAExC,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,aAAa,CAAC,CAAC;AAC9D,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;AA0C7D,SAAS,kBAAkB;IACzB,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;QACnC,EAAE,CAAC,SAAS,CAAC,cAAc,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,CAAC;IACD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;QAClC,EAAE,CAAC,SAAS,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACnD,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,EAAU;IACrC,kBAAkB,EAAE,CAAC;IACrB,OAAO,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,iBAAiB;IACxB,OAAO,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;AACtE,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,qBAAqB,CACnC,IAA6B,EAC7B,SAAiB,EACjB,WAAmB,EACnB,UAAkB,EAClB,MAAsB,EACtB,IAA0B;IAE1B,MAAM,EAAE,GAAG,iBAAiB,EAAE,CAAC;IAC/B,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;IAE7B,MAAM,iBAAiB,GACrB,MAAM,CAAC,iBAAiB,IAAI,0BAA0B,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,cAAc,EAAE,MAAM,IAAI,CAAC,CAAC,CAAC;IAE5G,MAAM,OAAO,GAAoB;QAC/B,EAAE;QACF,IAAI;QACJ,SAAS;QACT,WAAW;QACX,UAAU;QACV,SAAS;QACT,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,iBAAiB;QACjB,SAAS,EAAE,EAAE;QACb,MAAM,EAAE,SAAS;QACjB,IAAI;KACL,CAAC;IAEF,IAAI,MAAM,CAAC,iBAAiB,EAAE,CAAC;QAC7B,OAAO,CAAC,SAAS,GAAG,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC,iBAAiB,CAAC,CAAC;IAC/E,CAAC;IAED,MAAM,QAAQ,GAAG,mBAAmB,CAAC,EAAE,CAAC,CAAC;IACzC,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC;IAEvD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,0BAA0B,CACxC,MAAsB,EACtB,YAAoB;IAEpB,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,KAAK;YACR,OAAO,YAAY,CAAC;QACtB,KAAK,UAAU;YACb,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;QAC1C,KAAK,QAAQ,CAAC;QACd;YACE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY,GAAG,GAAG,CAAC,CAAC,CAAC;IACtD,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CACjC,EAAU,EACV,MAAc,EACd,OAAgB;IAEhB,MAAM,OAAO,GAAG,kBAAkB,CAAC,EAAE,CAAC,CAAC;IACvC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACjC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,iBAAiB,GAAG,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;IAC7E,IAAI,iBAAiB,EAAE,CAAC;QACtB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,iBAAiB,GAAsB;QAC3C,MAAM;QACN,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC;aACpC,MAAM,CAAC,GAAG,EAAE,IAAI,MAAM,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;aAC9D,MAAM,CAAC,KAAK,CAAC;QAChB,SAAS,EAAE,IAAI,IAAI,EAAE;QACrB,OAAO;KACR,CAAC;IAEF,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAE1C,IAAI,OAAO,CAAC,SAAS,CAAC,MAAM,IAAI,OAAO,CAAC,iBAAiB,EAAE,CAAC;QAC1D,OAAO,CAAC,MAAM,GAAG,UAAU,CAAC;IAC9B,CAAC;IAED,MAAM,QAAQ,GAAG,mBAAmB,CAAC,EAAE,CAAC,CAAC;IACzC,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC;IAEvD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,qBAAqB,CACnC,EAAU,EACV,UAAkB,EAClB,MAAe;IAEf,MAAM,OAAO,GAAG,kBAAkB,CAAC,EAAE,CAAC,CAAC;IACvC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACjC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,CAAC,MAAM,GAAG,UAAU,CAAC;IAC5B,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC;QACrB,MAAM,EAAE,UAAU;QAClB,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC;aACpC,MAAM,CAAC,GAAG,EAAE,aAAa,IAAI,CAAC,GAAG,EAAE,IAAI,MAAM,IAAI,WAAW,EAAE,CAAC;aAC/D,MAAM,CAAC,KAAK,CAAC;QAChB,SAAS,EAAE,IAAI,IAAI,EAAE;QACrB,OAAO,EAAE,aAAa,MAAM,IAAI,oBAAoB,EAAE;KACvD,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,mBAAmB,CAAC,EAAE,CAAC,CAAC;IACzC,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC;IAEvD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,EAAU;IAC3C,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,mBAAmB,CAAC,EAAE,CAAC,CAAC;QACzC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7B,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAwBlD,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAA0B,CAAC;QACvD,MAAM,CAAC,SAAS,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC9C,MAAM,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAE7E,2EAA2E;QAC3E,MAAM,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAqB,EAAE;YAC/D,MAAM,QAAQ,GAAsB;gBAClC,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,UAAU,EAAE,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,SAAS,IAAI,EAAE;gBAC7C,SAAS,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;gBAChC,OAAO,EAAE,CAAC,CAAC,OAAO;aACnB,CAAC;YACF,OAAO,QAAQ,CAAC;QAClB,CAAC,CAAC,CAAC;QAEH,OAAO,MAAyB,CAAC;IACnC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,kCAAkC,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;QAC9D,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAClC,SAAkB,EAClB,MAAuB;IAEvB,IAAI,CAAC;QACH,kBAAkB,EAAE,CAAC;QACrB,MAAM,KAAK,GAAG,EAAE,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC;QAC5C,MAAM,QAAQ,GAAsB,EAAE,CAAC;QAEvC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC3B,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;gBACrC,MAAM,OAAO,GAAG,kBAAkB,CAAC,EAAE,CAAC,CAAC;gBACvC,IAAI,OAAO,EAAE,CAAC;oBACZ,IAAI,SAAS,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;wBACjD,SAAS;oBACX,CAAC;oBACD,IAAI,MAAM,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;wBACxC,SAAS;oBACX,CAAC;oBAED,IAAI,OAAO,CAAC,SAAS,IAAI,IAAI,IAAI,EAAE,GAAG,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;wBACxF,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;oBAC7B,CAAC;oBAED,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACzB,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC;IAChF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,mCAAmC,EAAE,KAAK,CAAC,CAAC;QAC1D,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,qBAAqB,CAAC,EAAU;IAC9C,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,mBAAmB,CAAC,EAAE,CAAC,CAAC;QACzC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7B,OAAO,KAAK,CAAC;QACf,CAAC;QAED,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QACxB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,qCAAqC,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;QACjE,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,UAAU,CAAC,EAAU;IACnC,MAAM,OAAO,GAAG,kBAAkB,CAAC,EAAE,CAAC,CAAC;IACvC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU,CAAC;AACvC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,EAAU;IAM3C,MAAM,OAAO,GAAG,kBAAkB,CAAC,EAAE,CAAC,CAAC;IACvC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO;QACL,KAAK,EAAE,OAAO,CAAC,SAAS,CAAC,MAAM;QAC/B,QAAQ,EAAE,OAAO,CAAC,iBAAiB;QACnC,QAAQ,EAAE,OAAO,CAAC,iBAAiB;QACnC,MAAM,EAAE,OAAO,CAAC,MAAM;KACvB,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAAc;IACjD,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,oBAAoB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QAC5D,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC;IAC/E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,mCAAmC,EAAE,KAAK,CAAC,CAAC;QAC1D,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,sBAAsB;IACpC,IAAI,OAAO,GAAG,CAAC,CAAC;IAEhB,IAAI,CAAC;QACH,kBAAkB,EAAE,CAAC;QACrB,MAAM,KAAK,GAAG,EAAE,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC;QAC5C,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QAEvB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC3B,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;gBACrC,MAAM,OAAO,GAAG,kBAAkB,CAAC,EAAE,CAAC,CAAC;gBAEvC,IACE,OAAO;oBACP,OAAO,CAAC,SAAS;oBACjB,GAAG,GAAG,OAAO,CAAC,SAAS;oBACvB,OAAO,CAAC,MAAM,KAAK,SAAS,EAC5B,CAAC;oBACD,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;oBAC3B,MAAM,QAAQ,GAAG,mBAAmB,CAAC,EAAE,CAAC,CAAC;oBACzC,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC;oBACvD,OAAO,EAAE,CAAC;gBACZ,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,qCAAqC,EAAE,KAAK,CAAC,CAAC;IAC9D,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/src/security/totp.d.ts

@@ -0,0 +1,67 @@
+/**
+ * TOTP (Time-based One-Time Password) — RFC 6238
+ *
+ * Pure-Node implementation using only node:crypto.
+ * Compatible with Authy, Google Authenticator, and any RFC 6238 client.
+ *
+ * Algorithm:
+ *   counter = floor(unixTime / period)
+ *   code    = HOTP(secret, counter)   ← RFC 4226
+ *   HOTP    = truncate(HMAC-SHA1(secret, counter_be64))
+ */
+/**
+ * Encode a Buffer as a Base32 string (with padding).
+ */
+export declare function base32Encode(buf: Buffer): string;
+/**
+ * Decode a Base32 string to a Buffer.
+ * Case-insensitive; strips padding before processing.
+ */
+export declare function base32Decode(str: string): Buffer;
+/**
+ * Generate a TOTP code for the current (or provided) time.
+ *
+ * @param secret  - TOTP secret (raw bytes, typically 20 bytes)
+ * @param opts.digits  - code length (default 6)
+ * @param opts.period  - time step in seconds (default 30)
+ * @param opts.nowMs   - Unix timestamp in milliseconds (default Date.now())
+ */
+export declare function generateTotp(secret: Buffer, opts?: {
+    digits?: number;
+    period?: number;
+    nowMs?: number;
+}): string;
+/**
+ * Verify a TOTP code against the current time.
+ *
+ * Accepts codes from `window` periods before and after the current step
+ * to tolerate minor clock drift between the user's device and the server.
+ *
+ * @param secret  - TOTP secret (raw bytes)
+ * @param code    - 6-digit code string to verify
+ * @param opts.digits  - code length (default 6)
+ * @param opts.period  - time step in seconds (default 30)
+ * @param opts.window  - number of steps to check on each side (default 1)
+ * @param opts.nowMs   - Unix timestamp in milliseconds (default Date.now())
+ */
+export declare function verifyTotp(secret: Buffer, code: string, opts?: {
+    digits?: number;
+    period?: number;
+    window?: number;
+    nowMs?: number;
+}): boolean;
+/**
+ * Generate a cryptographically random 20-byte TOTP secret.
+ * The secret never leaves the local machine — only the Base32 form is
+ * displayed once so the user can enroll it in their authenticator app.
+ */
+export declare function generateTotpSecret(): Buffer;
+/**
+ * Build an `otpauth://totp/…` URI that authenticator apps can scan as a QR code.
+ *
+ * @param secret  - TOTP secret (raw bytes)
+ * @param label   - Human-readable account label (e.g. "AgentVault:pending-001")
+ * @param issuer  - App / service name shown in the authenticator (default "AgentVault")
+ */
+export declare function otpAuthUri(secret: Buffer, label: string, issuer?: string): string;
+//# sourceMappingURL=totp.d.ts.map

package/dist/src/security/totp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"totp.d.ts","sourceRoot":"","sources":["../../../src/security/totp.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AASH;;GAEG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAwBhD;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAkBhD;AAiCD;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAC1B,MAAM,EAAE,MAAM,EACd,IAAI,GAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAO,GAC9D,MAAM,CAIR;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,UAAU,CACxB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,IAAI,GAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAO,GAC/E,OAAO,CAWT;AAID;;;;GAIG;AACH,wBAAgB,kBAAkB,IAAI,MAAM,CAE3C;AAID;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,SAAe,GAAG,MAAM,CAUvF"}

package/dist/src/security/totp.js

@@ -0,0 +1,148 @@
+/**
+ * TOTP (Time-based One-Time Password) — RFC 6238
+ *
+ * Pure-Node implementation using only node:crypto.
+ * Compatible with Authy, Google Authenticator, and any RFC 6238 client.
+ *
+ * Algorithm:
+ *   counter = floor(unixTime / period)
+ *   code    = HOTP(secret, counter)   ← RFC 4226
+ *   HOTP    = truncate(HMAC-SHA1(secret, counter_be64))
+ */
+import crypto from 'node:crypto';
+// ─── Base32 ─────────────────────────────────────────────────────────────────
+// RFC 4648 §6 alphabet (uppercase A-Z + digits 2-7, no padding chars in lookups)
+const BASE32_CHARS = 'ABCDEFGHIJKLMNOPQRSTUVWXYZ234567';
+/**
+ * Encode a Buffer as a Base32 string (with padding).
+ */
+export function base32Encode(buf) {
+    let bits = 0;
+    let acc = 0;
+    let out = '';
+    for (const byte of buf) {
+        acc = (acc << 8) | byte;
+        bits += 8;
+        while (bits >= 5) {
+            out += BASE32_CHARS[(acc >>> (bits - 5)) & 0x1f];
+            bits -= 5;
+        }
+    }
+    if (bits > 0) {
+        out += BASE32_CHARS[(acc << (5 - bits)) & 0x1f];
+    }
+    // Pad to a multiple of 8 characters
+    while (out.length % 8 !== 0) {
+        out += '=';
+    }
+    return out;
+}
+/**
+ * Decode a Base32 string to a Buffer.
+ * Case-insensitive; strips padding before processing.
+ */
+export function base32Decode(str) {
+    const s = str.toUpperCase().replace(/=/g, '');
+    let bits = 0;
+    let acc = 0;
+    const out = [];
+    for (const ch of s) {
+        const idx = BASE32_CHARS.indexOf(ch);
+        if (idx < 0)
+            throw new Error(`Invalid base32 character: '${ch}'`);
+        acc = (acc << 5) | idx;
+        bits += 5;
+        if (bits >= 8) {
+            out.push((acc >>> (bits - 8)) & 0xff);
+            bits -= 8;
+        }
+    }
+    return Buffer.from(out);
+}
+// ─── HOTP — RFC 4226 ────────────────────────────────────────────────────────
+/**
+ * Compute an HOTP code for the given secret and counter.
+ *
+ * @param secret  - HMAC-SHA1 key (raw bytes)
+ * @param counter - 64-bit unsigned integer counter
+ * @param digits  - output length (default 6)
+ */
+function hotp(secret, counter, digits = 6) {
+    // Pack counter as 8-byte big-endian (unsigned)
+    const cb = Buffer.alloc(8);
+    cb.writeBigUInt64BE(counter);
+    const mac = crypto.createHmac('sha1', secret).update(cb).digest();
+    // Dynamic truncation per §5.3 of RFC 4226
+    // Buffer indexing is always in-range for a 20-byte HMAC-SHA1 digest
+    const offset = mac[19] & 0x0f;
+    const code = (((mac[offset] & 0x7f) << 24) |
+        ((mac[offset + 1] & 0xff) << 16) |
+        ((mac[offset + 2] & 0xff) << 8) |
+        (mac[offset + 3] & 0xff)) %
+        10 ** digits;
+    return code.toString().padStart(digits, '0');
+}
+// ─── TOTP — RFC 6238 ────────────────────────────────────────────────────────
+/**
+ * Generate a TOTP code for the current (or provided) time.
+ *
+ * @param secret  - TOTP secret (raw bytes, typically 20 bytes)
+ * @param opts.digits  - code length (default 6)
+ * @param opts.period  - time step in seconds (default 30)
+ * @param opts.nowMs   - Unix timestamp in milliseconds (default Date.now())
+ */
+export function generateTotp(secret, opts = {}) {
+    const { digits = 6, period = 30, nowMs = Date.now() } = opts;
+    const counter = BigInt(Math.floor(nowMs / 1000 / period));
+    return hotp(secret, counter, digits);
+}
+/**
+ * Verify a TOTP code against the current time.
+ *
+ * Accepts codes from `window` periods before and after the current step
+ * to tolerate minor clock drift between the user's device and the server.
+ *
+ * @param secret  - TOTP secret (raw bytes)
+ * @param code    - 6-digit code string to verify
+ * @param opts.digits  - code length (default 6)
+ * @param opts.period  - time step in seconds (default 30)
+ * @param opts.window  - number of steps to check on each side (default 1)
+ * @param opts.nowMs   - Unix timestamp in milliseconds (default Date.now())
+ */
+export function verifyTotp(secret, code, opts = {}) {
+    const { digits = 6, period = 30, window = 1, nowMs = Date.now() } = opts;
+    for (let w = -window; w <= window; w++) {
+        const t = nowMs + w * period * 1000;
+        if (generateTotp(secret, { digits, period, nowMs: t }) === code) {
+            return true;
+        }
+    }
+    return false;
+}
+// ─── Key Generation ──────────────────────────────────────────────────────────
+/**
+ * Generate a cryptographically random 20-byte TOTP secret.
+ * The secret never leaves the local machine — only the Base32 form is
+ * displayed once so the user can enroll it in their authenticator app.
+ */
+export function generateTotpSecret() {
+    return crypto.randomBytes(20);
+}
+// ─── otpauth URI ─────────────────────────────────────────────────────────────
+/**
+ * Build an `otpauth://totp/…` URI that authenticator apps can scan as a QR code.
+ *
+ * @param secret  - TOTP secret (raw bytes)
+ * @param label   - Human-readable account label (e.g. "AgentVault:pending-001")
+ * @param issuer  - App / service name shown in the authenticator (default "AgentVault")
+ */
+export function otpAuthUri(secret, label, issuer = 'AgentVault') {
+    const s = base32Encode(secret);
+    return (`otpauth://totp/${encodeURIComponent(label)}` +
+        `?secret=${s}` +
+        `&issuer=${encodeURIComponent(issuer)}` +
+        `&algorithm=SHA1` +
+        `&digits=6` +
+        `&period=30`);
+}
+//# sourceMappingURL=totp.js.map

package/dist/src/security/totp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"totp.js","sourceRoot":"","sources":["../../../src/security/totp.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,MAAM,MAAM,aAAa,CAAC;AAEjC,+EAA+E;AAC/E,iFAAiF;AAEjF,MAAM,YAAY,GAAG,kCAAkC,CAAC;AAExD;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,GAAW;IACtC,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,IAAI,GAAG,GAAG,EAAE,CAAC;IAEb,KAAK,MAAM,IAAI,IAAI,GAAG,EAAE,CAAC;QACvB,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC;QACxB,IAAI,IAAI,CAAC,CAAC;QACV,OAAO,IAAI,IAAI,CAAC,EAAE,CAAC;YACjB,GAAG,IAAI,YAAY,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;YACjD,IAAI,IAAI,CAAC,CAAC;QACZ,CAAC;IACH,CAAC;IAED,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;QACb,GAAG,IAAI,YAAY,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAClD,CAAC;IAED,oCAAoC;IACpC,OAAO,GAAG,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5B,GAAG,IAAI,GAAG,CAAC;IACb,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,GAAW;IACtC,MAAM,CAAC,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAC9C,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,MAAM,GAAG,GAAa,EAAE,CAAC;IAEzB,KAAK,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC;QACnB,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACrC,IAAI,GAAG,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,EAAE,GAAG,CAAC,CAAC;QAClE,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC;QACvB,IAAI,IAAI,CAAC,CAAC;QACV,IAAI,IAAI,IAAI,CAAC,EAAE,CAAC;YACd,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;YACtC,IAAI,IAAI,CAAC,CAAC;QACZ,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC1B,CAAC;AAED,+EAA+E;AAE/E;;;;;;GAMG;AACH,SAAS,IAAI,CAAC,MAAc,EAAE,OAAe,EAAE,MAAM,GAAG,CAAC;IACvD,+CAA+C;IAC/C,MAAM,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC3B,EAAE,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAE7B,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;IAElE,0CAA0C;IAC1C,oEAAoE;IACpE,MAAM,MAAM,GAAG,GAAG,CAAC,EAAE,CAAE,GAAG,IAAI,CAAC;IAC/B,MAAM,IAAI,GACR,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAE,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,CAAC,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAE,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QACjC,CAAC,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAE,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;QAChC,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAE,GAAG,IAAI,CAAC,CAAC;QAC5B,EAAE,IAAI,MAAM,CAAC;IAEf,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;AAC/C,CAAC;AAED,+EAA+E;AAE/E;;;;;;;GAOG;AACH,MAAM,UAAU,YAAY,CAC1B,MAAc,EACd,OAA6D,EAAE;IAE/D,MAAM,EAAE,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,EAAE,EAAE,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,GAAG,IAAI,CAAC;IAC7D,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC;IAC1D,OAAO,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;AACvC,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,UAAU,CACxB,MAAc,EACd,IAAY,EACZ,OAA8E,EAAE;IAEhF,MAAM,EAAE,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,EAAE,EAAE,MAAM,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,GAAG,IAAI,CAAC;IAEzE,KAAK,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,IAAI,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,MAAM,CAAC,GAAG,KAAK,GAAG,CAAC,GAAG,MAAM,GAAG,IAAI,CAAC;QACpC,IAAI,YAAY,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC;YAChE,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,gFAAgF;AAEhF;;;;GAIG;AACH,MAAM,UAAU,kBAAkB;IAChC,OAAO,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;AAChC,CAAC;AAED,gFAAgF;AAEhF;;;;;;GAMG;AACH,MAAM,UAAU,UAAU,CAAC,MAAc,EAAE,KAAa,EAAE,MAAM,GAAG,YAAY;IAC7E,MAAM,CAAC,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;IAC/B,OAAO,CACL,kBAAkB,kBAAkB,CAAC,KAAK,CAAC,EAAE;QAC7C,WAAW,CAAC,EAAE;QACd,WAAW,kBAAkB,CAAC,MAAM,CAAC,EAAE;QACvC,iBAAiB;QACjB,WAAW;QACX,YAAY,CACb,CAAC;AACJ,CAAC"}

package/dist/src/security/types.d.ts

@@ -63,8 +63,13 @@ export interface VetKeysDerivedKey {
     key: string;
     /** Key derivation method used */
     method: KeyDerivationMethod;
-    /** Seed phrase used for derivation */
-    seedPhrase: SeedPhrase;
+    /**
+     * Seed phrase used for derivation (optional for security)
+     * SECURITY: seedPhrase is intentionally optional - it should NOT be retained
+     * in memory after key derivation to prevent exposure via memory dumps.
+     * See SEC-3 in SECURITY_AUDIT_AND_COMPLETION_PLAN.md
+     */
+    seedPhrase?: SeedPhrase;
     /** Threshold for reconstruction (t out of n) */
     threshold?: number;
     /** Total participants */

package/dist/src/security/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/security/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH;;GAEG;AACH,MAAM,MAAM,mBAAmB,GAAG,aAAa,GAAG,mBAAmB,CAAC;AAEtE;;GAEG;AACH,MAAM,MAAM,mBAAmB,GAAG,OAAO,GAAG,QAAQ,GAAG,QAAQ,GAAG,WAAW,CAAC;AAE9E;;GAEG;AACH,MAAM,MAAM,UAAU,GAAG,MAAM,CAAC;AAEhC;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,gCAAgC;IAChC,SAAS,EAAE,mBAAmB,CAAC;IAC/B,gDAAgD;IAChD,EAAE,EAAE,MAAM,CAAC;IACX,mCAAmC;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,2BAA2B;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,8BAA8B;IAC9B,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,qBAAqB;IACrB,SAAS,EAAE,aAAa,CAAC;IACzB,kCAAkC;IAClC,YAAY,EAAE,MAAM,CAAC;IACrB,mCAAmC;IACnC,aAAa,EAAE,MAAM,CAAC;CACvB;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,iEAAiE;IACjE,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,yCAAyC;IACzC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,4CAA4C;IAC5C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,0DAA0D;IAC1D,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,2BAA2B;IAC3B,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;CAC3C;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,WAAW,CAAC;IAClB,gCAAgC;IAChC,GAAG,EAAE,MAAM,CAAC;IACZ,iCAAiC;IACjC,MAAM,EAAE,mBAAmB,CAAC;IAC5B;;;;;OAKG;IACH,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,gDAAgD;IAChD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,yBAAyB;IACzB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,2BAA2B;IAC3B,SAAS,CAAC,EAAE,mBAAmB,CAAC;IAEhC;;OAEG;IACH,MAAM,EAAE,KAAK,CAAC;QACZ,uBAAuB;QACvB,OAAO,EAAE,MAAM,CAAC;QAChB,+BAA+B;QAC/B,aAAa,EAAE,MAAM,CAAC;QACtB,2BAA2B;QAC3B,cAAc,EAAE,MAAM,CAAC;QACvB,sBAAsB;QACtB,UAAU,EAAE,MAAM,CAAC;KACpB,CAAC,CAAC;IAEH;;OAEG;IACH,aAAa,EAAE,KAAK,CAAC;QACnB,kBAAkB;QAClB,KAAK,EAAE,MAAM,CAAC;QACd,uBAAuB;QACvB,OAAO,EAAE,MAAM,CAAC;QAChB,qBAAqB;QACrB,aAAa,EAAE,MAAM,CAAC;QACtB,2BAA2B;QAC3B,cAAc,EAAE,MAAM,CAAC;KAExB,CAAC,CAAC;IAEH;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;IAEnB;;OAEG;IACH,YAAY,EAAE;QACZ,mCAAmC;QACnC,SAAS,EAAE,MAAM,CAAC;QAClB,oCAAoC;QACpC,MAAM,EAAE,KAAK,CAAC;YACZ,OAAO,EAAE,MAAM,CAAC;YAChB,aAAa,EAAE,MAAM,CAAC;YACtB,cAAc,EAAE,MAAM,CAAC;YACvB,UAAU,EAAE,MAAM,CAAC;SACpB,CAAC,CAAC;QACH,qBAAqB;QACrB,SAAS,EAAE,mBAAmB,CAAC;QAC/B,yBAAyB;QACzB,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;CACH;AAED;;GAEG;AACH,qBAAa,aAAa;IACxB,OAAO,CAAC,MAAM,CAAiB;gBAEnB,OAAO,GAAE,cAAmB;IAQxC;;;;;;;;;;;;;;;OAeG;IACU,kBAAkB,CAC7B,UAAU,EAAE,MAAM,EAClB,OAAO,GAAE,cAAc,GAAG;QACxB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;KACtC,GACL,OAAO,CAAC,iBAAiB,CAAC;IAgE7B;;;;;;;;OAQG;YACW,oBAAoB;IAkClC;;OAEG;IACH,OAAO,CAAC,eAAe;IAIvB;;;;;OAKG;IACH,OAAO,CAAC,yBAAyB;IASjC;;;;;OAKG;YACW,YAAY;IA6C1B;;OAEG;YACW,kBAAkB;IAahC;;;;;OAKG;YACW,eAAe;IAqB7B;;;;;OAKG;IACU,gBAAgB,CAAC,UAAU,EAAE,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC;IAI1E;;OAEG;IACI,mBAAmB,IAAI;QAC5B,kBAAkB,EAAE,OAAO,CAAC;QAC5B,iBAAiB,EAAE,MAAM,CAAC;QAC1B,gBAAgB,EAAE,MAAM,CAAC;QACzB,mBAAmB,EAAE,mBAAmB,CAAC;QACzC,aAAa,EAAE,MAAM,CAAC;KACvB;CASF"}

package/dist/src/security/types.js

@@ -137,23 +137,23 @@ export class VetKeysClient {
      */
     async encryptShare(secret, _commitment, algorithm) {
         const crypto = await import('node:crypto');
-        let secretBuffer;
-        let iv;
-        if (algorithm === 'aes-256-gcm') {
-            secretBuffer = Buffer.from(secret, 'utf-8');
-            iv = Buffer.alloc(12, 0);
-        }
-        else {
-            secretBuffer = Buffer.from(secret, 'utf-8');
-            iv = Buffer.alloc(16, 0);
-        }
-        const algorithmName = algorithm.replace('-', '');
-        const cipher = crypto.createCipheriv(algorithmName, secretBuffer, iv);
-        const encryptedShare = Buffer.concat([
+        // SEC-10: the previous implementation used the raw secret as the
+        // encryption key with an all-zero IV, which is catastrophic for
+        // confidentiality. Derive an actual key with PBKDF2 over a random
+        // salt, use a fresh random IV, and prepend salt||iv to the ciphertext
+        // (layout v2) so verification stays deterministic per encryption.
+        const secretBuffer = Buffer.from(secret, 'utf-8');
+        const iv = algorithm === 'aes-256-gcm'
+            ? crypto.randomBytes(12)
+            : crypto.randomBytes(16);
+        const salt = crypto.randomBytes(16);
+        const encryptionKey = crypto.pbkdf2Sync(secretBuffer, salt, 100000, 32, 'sha256');
+        const cipher = crypto.createCipheriv(algorithm, encryptionKey, iv);
+        const ciphertext = Buffer.concat([
             cipher.update(secretBuffer),
             cipher.final(),
         ]);
-        // Generate commitment hash
+        const encryptedShare = Buffer.concat([salt, iv, ciphertext]);
         const commitmentHash = crypto.createHash('sha256')
             .update(encryptedShare)
             .digest();

package/dist/src/security/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/security/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AA0IH;;GAEG;AACH,MAAM,OAAO,aAAa;IAChB,MAAM,CAAiB;IAE/B,YAAY,UAA0B,EAAE;QACtC,IAAI,CAAC,MAAM,GAAG;YACZ,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,CAAC;YACjC,YAAY,EAAE,OAAO,CAAC,YAAY,IAAI,CAAC;YACvC,mBAAmB,EAAE,OAAO,CAAC,mBAAmB,IAAI,aAAa;SAClE,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACI,KAAK,CAAC,kBAAkB,CAC7B,UAAkB,EAClB,UAII,EAAE;QAEN,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;QAC7D,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC;QACtE,MAAM,SAAS,GAAG,OAAO,CAAC,mBAAmB,IAAI,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC;QAEjF,qBAAqB;QACrB,IAAI,SAAU,GAAG,CAAC,IAAI,SAAU,GAAG,YAAa,EAAE,CAAC;YACjD,MAAM,IAAI,KAAK,CACb,sDAAsD,YAAa,WAAW,SAAS,EAAE,CAC1F,CAAC;QACJ,CAAC;QAED,IAAI,SAAU,GAAG,YAAa,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,mDAAmD,SAAS,SAAS,YAAY,GAAG,CAAC,CAAC;QACxG,CAAC;QAED,IAAI,CAAC;YACH,0CAA0C;YAC1C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,UAAU,EAAE,SAAU,EAAE,YAAa,EAAE,SAAU,CAAC,CAAC;YAElG,0BAA0B;YAC1B,MAAM,aAAa,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;gBAClD,KAAK,EAAE,KAAK,GAAG,CAAC;gBAChB,OAAO,EAAE,IAAI,CAAC,eAAe,EAAE;gBAC/B,aAAa,EAAE,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE;gBACrC,cAAc,EAAE,KAAK,CAAC,cAAc;gBACpC,UAAU,EAAE,KAAK,CAAC,UAAU;aAC7B,CAAC,CAAC,CAAC;YAEJ,sBAAsB;YACtB,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;YAEzD,mCAAmC;YACnC,MAAM,YAAY,GAAG;gBACnB,SAAS;gBACT,MAAM;gBACN,UAAU;gBACV,SAAS;gBACT,mBAAmB,EAAE,SAAS;gBAC9B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACpC,CAAC;YAEF,qDAAqD;YACrD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,UAAU,EAAE,SAAU,CAAC,CAAC;YAEtE,OAAO;gBACL,IAAI,EAAE,WAAW;gBACjB,GAAG,EAAE,UAAU,CAAC,GAAG;gBACnB,MAAM,EAAE,UAAU,CAAC,MAAM;gBACzB,UAAU;gBACV,SAAS;gBACT,YAAY;gBACZ,SAAS;gBACT,MAAM;gBACN,aAAa;gBACb,UAAU;gBACV,YAAY;aACQ,CAAC;QACzB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;YACzE,MAAM,IAAI,KAAK,CAAC,mCAAmC,OAAO,EAAE,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;IAED;;;;;;;;OAQG;IACK,KAAK,CAAC,oBAAoB,CAChC,UAAkB,EAClB,SAAiB,EACjB,YAAoB,EACpB,SAA8B;QAE9B,MAAM,MAAM,GAAkG,EAAE,CAAC;QACjH,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;QAE/D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,SAAS,EAAE,CAAC,EAAE,EAAE,CAAC;YACnC,MAAM,OAAO,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;YACvC,MAAM,aAAa,GAAG,CAAC,GAAG,CAAC,CAAC;YAE5B,8CAA8C;YAC9C,MAAM,iBAAiB,GAAG,IAAI,CAAC,yBAAyB,CAAC,UAAU,EAAE,CAAC,EAAE,YAAY,CAAC,CAAC;YAEtF,0CAA0C;YAC1C,MAAM,EAAE,cAAc,EAAE,UAAU,EAAE,eAAe,EAAE,GAAG,MAAM,IAAI,CAAC,YAAY,CAC7E,iBAAiB,EACjB,gBAAgB,EAChB,SAAS,CACV,CAAC;YAEF,MAAM,CAAC,IAAI,CAAC;gBACV,OAAO;gBACP,aAAa,EAAE,aAAa,CAAC,QAAQ,EAAE;gBACvC,cAAc;gBACd,UAAU,EAAE,eAAe;aAC5B,CAAC,CAAC;QACL,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;OAEG;IACK,eAAe;QACrB,OAAO,SAAS,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;IAC7E,CAAC;IAED;;;;;OAKG;IACK,yBAAyB,CAAC,UAAkB,EAAE,gBAAwB,EAAE,aAAqB;QACnG,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QAEpD,wEAAwE;QACxE,MAAM,iBAAiB,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,gBAAgB,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,CAAC;QAExF,OAAO,iBAAiB,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC3C,CAAC;IAED;;;;;OAKG;IACK,KAAK,CAAC,YAAY,CACxB,MAAc,EACd,WAAmB,EACnB,SAA8B;QAE9B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;QAE3C,iEAAiE;QACjE,gEAAgE;QAChE,kEAAkE;QAClE,sEAAsE;QACtE,kEAAkE;QAClE,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAClD,MAAM,EAAE,GAAG,SAAS,KAAK,aAAa;YACpC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;YACxB,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QAC3B,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QAEpC,MAAM,aAAa,GAAG,MAAM,CAAC,UAAU,CACrC,YAAY,EACZ,IAAI,EACJ,MAAM,EACN,EAAE,EACF,QAAQ,CACT,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,CAAC,cAAc,CAAC,SAAS,EAAE,aAAa,EAAE,EAAE,CAAC,CAAC;QAEnE,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC;YAC/B,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC;YAC3B,MAAM,CAAC,KAAK,EAAE;SACf,CAAC,CAAC;QAEH,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,UAAU,CAAC,CAAC,CAAC;QAE7D,MAAM,cAAc,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC;aAC/C,MAAM,CAAC,cAAc,CAAC;aACtB,MAAM,EAAE,CAAC;QAEZ,OAAO;YACL,cAAc,EAAE,cAAc,CAAC,QAAQ,CAAC,KAAK,CAAC;YAC9C,UAAU,EAAE,cAAc,CAAC,QAAQ,CAAC,KAAK,CAAC;SAC3C,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,kBAAkB,CAAC,MAAyC;QACxE,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;QAC3C,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QAEzC,+BAA+B;QAC/B,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;YAC7D,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAC3B,CAAC;QAED,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5B,CAAC;IAED;;;;;OAKG;IACK,KAAK,CAAC,eAAe,CAAC,UAAkB,EAAE,UAA+B;QAC/E,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;QAC3C,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC;QAEpC,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;QAEpD,0BAA0B;QAC1B,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,CAC3B,IAAI,EACJ,2BAA2B,EAC3B,MAAM,EACN,EAAE,EACF,QAAQ,CACT,CAAC;QAEF,OAAO;YACL,GAAG,EAAE,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC;YACxB,MAAM,EAAE,QAAQ;SACjB,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACI,KAAK,CAAC,gBAAgB,CAAC,UAAyB;QACrD,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACI,mBAAmB;QAOxB,OAAO;YACL,kBAAkB,EAAE,IAAI;YACxB,iBAAiB,EAAE,IAAI,CAAC,MAAM,CAAC,YAAa;YAC5C,gBAAgB,EAAE,IAAI,CAAC,MAAM,CAAC,SAAU;YACxC,mBAAmB,EAAE,IAAI,CAAC,MAAM,CAAC,mBAAoB;YACrD,aAAa,EAAE,WAAW;SAC3B,CAAC;IACJ,CAAC;CACF"}

package/dist/src/security/vetkeys.d.ts

@@ -176,4 +176,47 @@ export declare class VetKeysImplementation {
  * @returns Decrypted JSON object
  */
 export declare function decryptJSON<T = unknown>(encrypted: EncryptedData, seedPhrase: string): Promise<T>;
+/**
+ * Metadata prepended to an encrypted bundle so the deserializer can detect
+ * that decryption is required and reproduce the key.
+ *
+ * Wire format (all lengths in bytes):
+ *   [4  magic] [32 salt] [12 iv] [16 authTag] [4 principalLen] [principalLen principal] [N ciphertext]
+ */
+export interface EncryptedBundleHeader {
+    salt: Buffer;
+    iv: Buffer;
+    authTag: Buffer;
+    principalId: string;
+}
+/**
+ * Encrypt an agent bundle buffer using VetKeys principal-based key derivation.
+ *
+ * The returned buffer is self-describing: it contains a magic header, the salt,
+ * IV, auth tag, the encrypting principal, and the AES-256-GCM ciphertext. This
+ * allows `decryptBundle` to reconstruct the key and decrypt without any
+ * out-of-band metadata.
+ *
+ * @param buffer      - Plaintext bundle (e.g. serialized agent state)
+ * @param principalId - ICP principal that "owns" the encryption key
+ * @returns Encrypted bundle buffer (magic ‖ salt ‖ iv ‖ tag ‖ principalLen ‖ principal ‖ ciphertext)
+ */
+export declare function encryptBundleWithVetKeys(buffer: Buffer, principalId: string): Promise<Buffer>;
+/**
+ * Detect whether a buffer starts with the VetKeys encrypted-bundle magic.
+ */
+export declare function isVetKeysEncryptedBundle(buffer: Buffer): boolean;
+/**
+ * Decrypt a VetKeys-encrypted bundle buffer.
+ *
+ * The principal used for decryption is embedded in the bundle header.  The
+ * caller may optionally supply their own `principalId` to verify that the
+ * bundle was encrypted for them; if omitted the embedded principal is used.
+ *
+ * @param encrypted   - Buffer produced by `encryptBundleWithVetKeys`
+ * @param principalId - (optional) expected principal; if provided and it does
+ *                       not match the embedded principal an error is thrown
+ * @returns Decrypted plaintext buffer
+ */
+export declare function decryptBundle(encrypted: Buffer, principalId?: string): Promise<Buffer>;
 //# sourceMappingURL=vetkeys.d.ts.map

package/dist/src/security/vetkeys.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vetkeys.d.ts","sourceRoot":"","sources":["../../../src/security/vetkeys.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAIH,OAAO,KAAK,EACV,aAAa,EACb,cAAc,EACd,mBAAmB,EACnB,iBAAiB,IAAI,UAAU,EAChC,MAAM,YAAY,CAAC;AAYpB,qBAAa,qBAAqB;IAChC,OAAO,CAAC,MAAM,CAAiB;IAC/B,OAAO,CAAC,UAAU,CAAC,CAAS;IAC5B,OAAO,CAAC,WAAW,CAAU;gBAEjB,OAAO,GAAE,cAAc,GAAG;QAAE,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,OAAO,CAAA;KAAO;IAWzF;;;;;;OAMG;WACiB,WAAW,CAAC,CAAC,GAAG,OAAO,EACzC,SAAS,EAAE,aAAa,EACxB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,CAAC,CAAC;IAoCb;;;;;;;;;;OAUG;IACU,kBAAkB,CAC7B,UAAU,EAAE,MAAM,EAClB,OAAO,GAAE,cAAc,GAAG;QACxB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;KACtC,GACL,OAAO,CAAC,UAAU,CAAC;IA8DtB;;;;;;;;OAQG;YACW,oBAAoB;IAkClC;;OAEG;IACH,OAAO,CAAC,eAAe;IAOtB;;;;;MAKE;IACH,OAAO,CAAC,yBAAyB;IASjC;;;;;OAKG;YACW,YAAY;IA0C1B;;OAEG;YACW,kBAAkB;IAahC;;;;;OAKG;YACW,eAAe;IA2B7B;;;;;;;OAOG;IACU,gBAAgB,CAAC,SAAS,EAAE,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC;IA+CzE;;OAEG;IACI,mBAAmB,IAAI;QAC5B,kBAAkB,EAAE,OAAO,CAAC;QAC5B,iBAAiB,EAAE,MAAM,CAAC;QAC1B,gBAAgB,EAAE,MAAM,CAAC;QACzB,mBAAmB,EAAE,mBAAmB,CAAC;QACzC,aAAa,EAAE,MAAM,CAAC;KACvB;IAUD;;;;;;OAMG;IACU,8BAA8B,CACzC,QAAQ,EAAE,MAAM,EAChB,eAAe,EAAE;QACf,UAAU,EAAE,UAAU,CAAC;QACvB,EAAE,EAAE,UAAU,CAAC;QACf,GAAG,EAAE,UAAU,CAAC;QAChB,SAAS,EAAE,mBAAmB,CAAC;KAChC,GACA,OAAO,CAAC,OAAO,CAAC;IAqCnB;;;;;OAKG;IACU,8BAA8B,CACzC,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC;QAAE,UAAU,EAAE,UAAU,CAAC;QAAC,EAAE,EAAE,UAAU,CAAC;QAAC,GAAG,EAAE,UAAU,CAAC;QAAC,SAAS,EAAE,mBAAmB,CAAA;KAAE,GAAG,IAAI,CAAC;IA8B9G;;;;OAIG;IACU,8BAA8B,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;IAmBhE;;;;;OAKG;IACU,iCAAiC,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAuBlF;;;;;;;;;OASG;IACU,gCAAgC,CAC3C,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,OAAO,CAAC;IAwBnB;;;;OAIG;IACU,4BAA4B,IAAI,OAAO,CAAC;QACnD,OAAO,EAAE,OAAO,CAAC;QACjB,kBAAkB,EAAE,OAAO,CAAC;QAC5B,IAAI,EAAE,MAAM,GAAG,YAAY,CAAC;KAC7B,CAAC;CAwCH;AAED;;;;;;GAMG;AACH,wBAAsB,WAAW,CAAC,CAAC,GAAG,OAAO,EAC3C,SAAS,EAAE,aAAa,EACxB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,CAAC,CAAC,CAEZ;AAeD;;;;;;GAMG;AACH,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;CACrB;AAkBD;;;;;;;;;;;GAWG;AACH,wBAAsB,wBAAwB,CAC5C,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,MAAM,CAAC,CA2BjB;AAED;;GAEG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAKhE;AA0CD;;;;;;;;;;;GAWG;AACH,wBAAsB,aAAa,CACjC,SAAS,EAAE,MAAM,EACjB,WAAW,CAAC,EAAE,MAAM,GACnB,OAAO,CAAC,MAAM,CAAC,CAsBjB"}