agentvault 1.0.2 → 1.0.5

package/dist/src/vault/bitwarden.d.ts

@@ -0,0 +1,51 @@
+/**
+ * Bitwarden CLI secret provider for AgentVault
+ *
+ * Uses the official Bitwarden CLI (`bw`) as a secret backend alternative to
+ * HashiCorp Vault.  Secrets are stored as Bitwarden "Secure Note" items with
+ * a naming convention of `agentvault/<agentId>/<key>`.
+ *
+ * Prerequisites:
+ *   1. Install the Bitwarden CLI: https://bitwarden.com/help/cli/
+ *      brew install bitwarden-cli   (macOS)
+ *      npm install -g @bitwarden/cli
+ *   2. Log in and unlock:
+ *      bw login
+ *      export BW_SESSION="$(bw unlock --raw)"
+ *
+ * The provider reads BW_SESSION from the environment at construction time.
+ * It never stores the session key or any secret value on disk.
+ */
+import type { SecretProvider, SecretProviderHealth } from './provider.js';
+export interface BitwardenConfig {
+    /** BW_SESSION unlock token.  Defaults to `process.env.BW_SESSION`. */
+    session?: string;
+    /** Agent identifier used to namespace secret names. */
+    agentId: string;
+    /**
+     * Path to the `bw` binary.  Defaults to `bw` (resolved via PATH).
+     */
+    bwBin?: string;
+}
+export declare class BitwardenProvider implements SecretProvider {
+    readonly name = "Bitwarden CLI";
+    private readonly agentId;
+    private readonly bwBin;
+    private readonly session;
+    constructor(config: BitwardenConfig);
+    /** Namespaced item name for a given secret key. */
+    private itemName;
+    /**
+     * Run a `bw` sub-command with the session token injected.
+     * stderr is surfaced only when the command fails.
+     */
+    private bw;
+    /** Parse JSON output from `bw`, returning null on empty or non-JSON output. */
+    private tryParseJSON;
+    getSecret(key: string): Promise<string | null>;
+    storeSecret(key: string, value: string): Promise<void>;
+    listSecrets(): Promise<string[]>;
+    deleteSecret(key: string): Promise<void>;
+    healthCheck(): Promise<SecretProviderHealth>;
+}
+//# sourceMappingURL=bitwarden.d.ts.map

package/dist/src/vault/bitwarden.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bitwarden.d.ts","sourceRoot":"","sources":["../../../src/vault/bitwarden.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAIH,OAAO,KAAK,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAsB1E,MAAM,WAAW,eAAe;IAC9B,sEAAsE;IACtE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,uDAAuD;IACvD,OAAO,EAAE,MAAM,CAAC;IAChB;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,qBAAa,iBAAkB,YAAW,cAAc;IACtD,QAAQ,CAAC,IAAI,mBAAmB;IAEhC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAS;IAC/B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;gBAErB,MAAM,EAAE,eAAe;IAenC,mDAAmD;IACnD,OAAO,CAAC,QAAQ;IAIhB;;;OAGG;YACW,EAAE;IAsBhB,+EAA+E;IAC/E,OAAO,CAAC,YAAY;IASd,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAc9C,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IA+BtD,WAAW,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;IAchC,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAUxC,WAAW,IAAI,OAAO,CAAC,oBAAoB,CAAC;CA+BnD"}

package/dist/src/vault/bitwarden.js

@@ -0,0 +1,172 @@
+/**
+ * Bitwarden CLI secret provider for AgentVault
+ *
+ * Uses the official Bitwarden CLI (`bw`) as a secret backend alternative to
+ * HashiCorp Vault.  Secrets are stored as Bitwarden "Secure Note" items with
+ * a naming convention of `agentvault/<agentId>/<key>`.
+ *
+ * Prerequisites:
+ *   1. Install the Bitwarden CLI: https://bitwarden.com/help/cli/
+ *      brew install bitwarden-cli   (macOS)
+ *      npm install -g @bitwarden/cli
+ *   2. Log in and unlock:
+ *      bw login
+ *      export BW_SESSION="$(bw unlock --raw)"
+ *
+ * The provider reads BW_SESSION from the environment at construction time.
+ * It never stores the session key or any secret value on disk.
+ */
+import { execFile } from 'node:child_process';
+import { promisify } from 'node:util';
+const execFileAsync = promisify(execFile);
+export class BitwardenProvider {
+    name = 'Bitwarden CLI';
+    agentId;
+    bwBin;
+    session;
+    constructor(config) {
+        this.agentId = config.agentId;
+        this.bwBin = config.bwBin ?? 'bw';
+        const session = config.session ?? process.env.BW_SESSION;
+        if (!session) {
+            throw new Error('Bitwarden session key is required. ' +
+                'Run `bw unlock --raw` and set BW_SESSION, ' +
+                'or pass the session via BitwardenConfig.session.');
+        }
+        this.session = session;
+    }
+    /** Namespaced item name for a given secret key. */
+    itemName(key) {
+        return `agentvault/${this.agentId}/${key}`;
+    }
+    /**
+     * Run a `bw` sub-command with the session token injected.
+     * stderr is surfaced only when the command fails.
+     */
+    async bw(args) {
+        const env = {
+            ...process.env,
+            BW_SESSION: this.session,
+        };
+        const { stdout, stderr } = await execFileAsync(this.bwBin, args, {
+            env,
+            maxBuffer: 10 * 1024 * 1024, // 10 MB
+        }).catch((err) => {
+            // execFile rejects on non-zero exit; surface stderr for diagnostics
+            const detail = err.stderr?.trim() || err.message;
+            throw new Error(`bw ${args[0]} failed: ${detail}`);
+        });
+        if (stderr?.trim()) {
+            // Non-fatal stderr (e.g. sync messages) – ignore
+        }
+        return stdout.trim();
+    }
+    /** Parse JSON output from `bw`, returning null on empty or non-JSON output. */
+    tryParseJSON(raw) {
+        if (!raw)
+            return null;
+        try {
+            return JSON.parse(raw);
+        }
+        catch {
+            return null;
+        }
+    }
+    async getSecret(key) {
+        const name = this.itemName(key);
+        try {
+            const raw = await this.bw(['get', 'item', name, '--nointeraction']);
+            const item = this.tryParseJSON(raw);
+            return item?.notes ?? null;
+        }
+        catch (err) {
+            const msg = err instanceof Error ? err.message : String(err);
+            // Bitwarden returns non-zero when the item doesn't exist
+            if (msg.includes('Not found') || msg.includes('No results'))
+                return null;
+            throw err;
+        }
+    }
+    async storeSecret(key, value) {
+        const name = this.itemName(key);
+        // Check if the item already exists so we can update vs create
+        let existingId = null;
+        try {
+            const raw = await this.bw(['get', 'item', name, '--nointeraction']);
+            const item = this.tryParseJSON(raw);
+            existingId = item?.id ?? null;
+        }
+        catch {
+            existingId = null;
+        }
+        // Build Bitwarden item JSON (type 2 = Secure Note)
+        const payload = JSON.stringify({
+            type: 2,
+            name,
+            notes: value,
+            secureNote: { type: 0 },
+        });
+        // Encode to base64 as required by `bw create`
+        const encoded = Buffer.from(payload).toString('base64');
+        if (existingId) {
+            await this.bw(['edit', 'item', existingId, encoded, '--nointeraction']);
+        }
+        else {
+            await this.bw(['create', 'item', encoded, '--nointeraction']);
+        }
+    }
+    async listSecrets() {
+        const prefix = `agentvault/${this.agentId}/`;
+        try {
+            const raw = await this.bw(['list', 'items', '--search', `agentvault/${this.agentId}`, '--nointeraction']);
+            const items = this.tryParseJSON(raw);
+            if (!items)
+                return [];
+            return items
+                .filter((i) => i.name.startsWith(prefix))
+                .map((i) => i.name.slice(prefix.length));
+        }
+        catch {
+            return [];
+        }
+    }
+    async deleteSecret(key) {
+        const name = this.itemName(key);
+        const raw = await this.bw(['get', 'item', name, '--nointeraction']);
+        const item = this.tryParseJSON(raw);
+        if (!item) {
+            throw new Error(`Secret "${key}" not found in Bitwarden`);
+        }
+        await this.bw(['delete', 'item', item.id, '--nointeraction']);
+    }
+    async healthCheck() {
+        try {
+            const raw = await this.bw(['status', '--nointeraction']);
+            const status = this.tryParseJSON(raw);
+            if (!status) {
+                return { healthy: false, message: 'Could not parse bw status output' };
+            }
+            if (status.status === 'unauthenticated') {
+                return { healthy: false, message: 'Bitwarden: not logged in. Run `bw login`.' };
+            }
+            if (status.status === 'locked') {
+                return { healthy: false, message: 'Bitwarden: vault is locked. Run `bw unlock`.' };
+            }
+            return {
+                healthy: true,
+                message: `Bitwarden: unlocked (${status.userEmail})`,
+            };
+        }
+        catch (err) {
+            const msg = err instanceof Error ? err.message : String(err);
+            if (msg.includes('command not found') || msg.includes('ENOENT')) {
+                return {
+                    healthy: false,
+                    message: 'Bitwarden CLI (bw) not found. Install it: npm i -g @bitwarden/cli',
+                };
+            }
+            return { healthy: false, message: `Bitwarden health check failed: ${msg}` };
+        }
+    }
+}
+//# sourceMappingURL=bitwarden.js.map

package/dist/src/vault/bitwarden.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bitwarden.js","sourceRoot":"","sources":["../../../src/vault/bitwarden.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAGtC,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AA+B1C,MAAM,OAAO,iBAAiB;IACnB,IAAI,GAAG,eAAe,CAAC;IAEf,OAAO,CAAS;IAChB,KAAK,CAAS;IACd,OAAO,CAAS;IAEjC,YAAY,MAAuB;QACjC,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;QAC9B,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,IAAI,CAAC;QAElC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;QACzD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CACb,qCAAqC;gBACrC,4CAA4C;gBAC5C,kDAAkD,CACnD,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;IAED,mDAAmD;IAC3C,QAAQ,CAAC,GAAW;QAC1B,OAAO,cAAc,IAAI,CAAC,OAAO,IAAI,GAAG,EAAE,CAAC;IAC7C,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,EAAE,CAAC,IAAc;QAC7B,MAAM,GAAG,GAAG;YACV,GAAG,OAAO,CAAC,GAAG;YACd,UAAU,EAAE,IAAI,CAAC,OAAO;SACzB,CAAC;QAEF,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE;YAC/D,GAAG;YACH,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,QAAQ;SACtC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAiE,EAAE,EAAE;YAC7E,oEAAoE;YACpE,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,GAAG,CAAC,OAAO,CAAC;YACjD,MAAM,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,YAAY,MAAM,EAAE,CAAC,CAAC;QACrD,CAAC,CAAC,CAAC;QAEH,IAAI,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC;YACnB,iDAAiD;QACnD,CAAC;QAED,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;IACvB,CAAC;IAED,+EAA+E;IACvE,YAAY,CAAI,GAAW;QACjC,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QACtB,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAM,CAAC;QAC9B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,GAAW;QACzB,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,iBAAiB,CAAC,CAAC,CAAC;YACpE,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,CAAS,GAAG,CAAC,CAAC;YAC5C,OAAO,IAAI,EAAE,KAAK,IAAI,IAAI,CAAC;QAC7B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,yDAAyD;YACzD,IAAI,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC;gBAAE,OAAO,IAAI,CAAC;YACzE,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,GAAW,EAAE,KAAa;QAC1C,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAEhC,8DAA8D;QAC9D,IAAI,UAAU,GAAkB,IAAI,CAAC;QACrC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,iBAAiB,CAAC,CAAC,CAAC;YACpE,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,CAAS,GAAG,CAAC,CAAC;YAC5C,UAAU,GAAG,IAAI,EAAE,EAAE,IAAI,IAAI,CAAC;QAChC,CAAC;QAAC,MAAM,CAAC;YACP,UAAU,GAAG,IAAI,CAAC;QACpB,CAAC;QAED,mDAAmD;QACnD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC;YAC7B,IAAI,EAAE,CAAC;YACP,IAAI;YACJ,KAAK,EAAE,KAAK;YACZ,UAAU,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE;SACxB,CAAC,CAAC;QAEH,8CAA8C;QAC9C,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAExD,IAAI,UAAU,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,iBAAiB,CAAC,CAAC,CAAC;QAC1E,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB,CAAC,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;IAED,KAAK,CAAC,WAAW;QACf,MAAM,MAAM,GAAG,cAAc,IAAI,CAAC,OAAO,GAAG,CAAC;QAC7C,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,cAAc,IAAI,CAAC,OAAO,EAAE,EAAE,iBAAiB,CAAC,CAAC,CAAC;YAC1G,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAW,GAAG,CAAC,CAAC;YAC/C,IAAI,CAAC,KAAK;gBAAE,OAAO,EAAE,CAAC;YACtB,OAAO,KAAK;iBACT,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;iBACxC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QAC7C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,GAAW;QAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,iBAAiB,CAAC,CAAC,CAAC;QACpE,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,CAAS,GAAG,CAAC,CAAC;QAC5C,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,KAAK,CAAC,WAAW,GAAG,0BAA0B,CAAC,CAAC;QAC5D,CAAC;QACD,MAAM,IAAI,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,iBAAiB,CAAC,CAAC,CAAC;IAChE,CAAC;IAED,KAAK,CAAC,WAAW;QACf,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAC,CAAC;YACzD,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAW,GAAG,CAAC,CAAC;YAEhD,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,kCAAkC,EAAE,CAAC;YACzE,CAAC;YAED,IAAI,MAAM,CAAC,MAAM,KAAK,iBAAiB,EAAE,CAAC;gBACxC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,2CAA2C,EAAE,CAAC;YAClF,CAAC;YACD,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAC/B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,8CAA8C,EAAE,CAAC;YACrF,CAAC;YAED,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,wBAAwB,MAAM,CAAC,SAAS,GAAG;aACrD,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,IAAI,GAAG,CAAC,QAAQ,CAAC,mBAAmB,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAChE,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,OAAO,EAAE,mEAAmE;iBAC7E,CAAC;YACJ,CAAC;YACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,kCAAkC,GAAG,EAAE,EAAE,CAAC;QAC9E,CAAC;IACH,CAAC;CACF"}

package/dist/src/vault/client.d.ts

@@ -0,0 +1,44 @@
+/**
+ * Secret manager client for agent secret management
+ *
+ * Supports HashiCorp Vault and Bitwarden CLI backends while preserving
+ * a per-agent secret namespace.
+ */
+import type { VaultConfig, AgentVaultPolicy, VaultSecret, VaultSecretMetadata, VaultOperationResult, VaultHealthStatus, VaultSecretListEntry, AgentVaultInitOptions } from './types.js';
+export declare class VaultClient {
+    private config;
+    private policy;
+    private clientToken;
+    /**
+     * SEC-2: undici Agent that pins the configured CA certificate (and
+     * optionally disables verification when `tlsSkipVerify` is set). Used
+     * as the `dispatcher` on every fetch so TLS is actually validated
+     * against the user-supplied CA — the prior implementation loaded
+     * `caCertPath` but never wired it to fetch, leaving MITM possible.
+     */
+    private dispatcher;
+    constructor(config: VaultConfig, policy: AgentVaultPolicy);
+    static create(agentId: string, options?: AgentVaultInitOptions): VaultClient;
+    static createWithConfig(config: VaultConfig, policy: AgentVaultPolicy): VaultClient;
+    private get backend();
+    private runBitwarden;
+    private getToken;
+    private authenticateAppRole;
+    private authenticateUserPass;
+    private authenticateKubernetes;
+    private rawRequest;
+    private request;
+    private buildSecretPath;
+    private buildListPath;
+    private validateKey;
+    get agentId(): string;
+    get secretPath(): string;
+    health(): Promise<VaultOperationResult<VaultHealthStatus>>;
+    getSecret(key: string): Promise<VaultOperationResult<VaultSecret>>;
+    putSecret(key: string, value: string | Record<string, string>, metadata?: Record<string, string>): Promise<VaultOperationResult<VaultSecretMetadata>>;
+    deleteSecret(key: string): Promise<VaultOperationResult>;
+    listSecrets(): Promise<VaultOperationResult<VaultSecretListEntry[]>>;
+    secretExists(key: string): Promise<boolean>;
+    getPolicy(): AgentVaultPolicy;
+}
+//# sourceMappingURL=client.d.ts.map

package/dist/src/vault/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../../src/vault/client.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAMH,OAAO,KAAK,EACV,WAAW,EACX,gBAAgB,EAChB,WAAW,EACX,mBAAmB,EACnB,oBAAoB,EACpB,iBAAiB,EACjB,oBAAoB,EACpB,qBAAqB,EACtB,MAAM,YAAY,CAAC;AAiFpB,qBAAa,WAAW;IACtB,OAAO,CAAC,MAAM,CAAc;IAC5B,OAAO,CAAC,MAAM,CAAmB;IACjC,OAAO,CAAC,WAAW,CAAuB;IAC1C;;;;;;OAMG;IACH,OAAO,CAAC,UAAU,CAAsB;gBAE5B,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,gBAAgB;IAMzD,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,qBAAqB,GAAG,WAAW;IA6B5E,MAAM,CAAC,gBAAgB,CAAC,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,gBAAgB,GAAG,WAAW;IAInF,OAAO,KAAK,OAAO,GAElB;YAEa,YAAY;YAmBZ,QAAQ;YAuBR,mBAAmB;YAcnB,oBAAoB;YAepB,sBAAsB;YAwBtB,UAAU;YA2DV,OAAO;IASrB,OAAO,CAAC,eAAe;IAevB,OAAO,CAAC,aAAa;IAcrB,OAAO,CAAC,WAAW;IA0BnB,IAAI,OAAO,IAAI,MAAM,CAEpB;IAED,IAAI,UAAU,IAAI,MAAM,CAEvB;IAEK,MAAM,IAAI,OAAO,CAAC,oBAAoB,CAAC,iBAAiB,CAAC,CAAC;IA2D1D,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC,WAAW,CAAC,CAAC;IA2DlE,SAAS,CACb,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EACtC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAChC,OAAO,CAAC,oBAAoB,CAAC,mBAAmB,CAAC,CAAC;IAiF/C,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAmCxD,WAAW,IAAI,OAAO,CAAC,oBAAoB,CAAC,oBAAoB,EAAE,CAAC,CAAC;IAuCpE,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAKjD,SAAS,IAAI,gBAAgB;CAG9B"}