agentvault 1.0.2 → 1.0.5

package/dist/src/vault/index.d.ts

@@ -0,0 +1,40 @@
+/**
+ * Secret management for AgentVault
+ *
+ * Supports HashiCorp Vault (self-hosted via Docker or any Vault server) and
+ * Bitwarden CLI as secret backends.  All providers implement the `SecretProvider`
+ * interface – secrets are fetched at runtime only and are NEVER persisted to
+ * the ICP canister.
+ *
+ * Quick start (HashiCorp Vault):
+ *   # Start local Vault:  docker compose up -d
+ *   import { HashiCorpVaultProvider } from './vault/index.js';
+ *   const provider = HashiCorpVaultProvider.forAgent('my-agent');
+ *   await provider.storeSecret('api_binance', process.env.KEY!);
+ *   const key = await provider.getSecret('api_binance'); // fetch at runtime only
+ *
+ * Quick start (Bitwarden):
+ *   import { BitwardenProvider } from './vault/index.js';
+ *   const provider = new BitwardenProvider({ agentId: 'my-agent' });
+ *   const key = await provider.getSecret('api_binance');
+ */
+export * from './types.js';
+export { VaultClient } from './client.js';
+export { loadVaultConfig, saveVaultConfig, loadAgentPolicies, saveAgentPolicies, getOrCreateAgentPolicy, validateVaultConfig, getVaultConfigDir, ensureVaultConfigDir, } from './config.js';
+export type { SecretProvider, SecretProviderHealth } from './provider.js';
+export { fetchSecretsAsEnv, fetchAllSecretsAsEnv } from './provider.js';
+export { HashiCorpVaultProvider } from './hashicorp-provider.js';
+export { BitwardenProvider } from './bitwarden.js';
+export type { BitwardenConfig } from './bitwarden.js';
+export { MemorySecretProvider } from './memory-provider.js';
+export type { SecretAccessLevel, SecretScopeGrant, SecretSandboxScope, EncryptedMemoryEntry, RotationStrategy, SecretRotationConfig, SecretRotationState, LeakSeverity, LeakDetectionEvent, InjectionMethod, SecretInjectionConfig, InjectedSecret, AuditAction, SecretAuditEntry, SecretManagementLayerConfig, SecretManagementStats, } from './safehouse-types.js';
+export { EncryptedMemoryStore } from './encrypted-memory-store.js';
+export { SecretSandbox } from './secret-sandbox.js';
+export type { CreateScopeOptions, AuditCallback } from './secret-sandbox.js';
+export { SecretRotationManager } from './secret-rotation.js';
+export { SecretLeakDetector } from './secret-leak-detector.js';
+export type { LeakEventCallback, LeakDetectorOptions } from './secret-leak-detector.js';
+export { SecretInjector } from './secret-injector.js';
+export { SecretAccessAudit } from './secret-audit.js';
+export { SecretManagementLayer } from './secret-management-layer.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/src/vault/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/vault/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,cAAc,YAAY,CAAC;AAC3B,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EACL,eAAe,EACf,eAAe,EACf,iBAAiB,EACjB,iBAAiB,EACjB,sBAAsB,EACtB,mBAAmB,EACnB,iBAAiB,EACjB,oBAAoB,GACrB,MAAM,aAAa,CAAC;AAGrB,YAAY,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAC1E,OAAO,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAGxE,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AACjE,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACnD,YAAY,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACtD,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAO5D,YAAY,EACV,iBAAiB,EACjB,gBAAgB,EAChB,kBAAkB,EAClB,oBAAoB,EACpB,gBAAgB,EAChB,oBAAoB,EACpB,mBAAmB,EACnB,YAAY,EACZ,kBAAkB,EAClB,eAAe,EACf,qBAAqB,EACrB,cAAc,EACd,WAAW,EACX,gBAAgB,EAChB,2BAA2B,EAC3B,qBAAqB,GACtB,MAAM,sBAAsB,CAAC;AAG9B,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,YAAY,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAC7E,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAC/D,YAAY,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AACxF,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAGtD,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC"}

package/dist/src/vault/index.js

@@ -0,0 +1,38 @@
+/**
+ * Secret management for AgentVault
+ *
+ * Supports HashiCorp Vault (self-hosted via Docker or any Vault server) and
+ * Bitwarden CLI as secret backends.  All providers implement the `SecretProvider`
+ * interface – secrets are fetched at runtime only and are NEVER persisted to
+ * the ICP canister.
+ *
+ * Quick start (HashiCorp Vault):
+ *   # Start local Vault:  docker compose up -d
+ *   import { HashiCorpVaultProvider } from './vault/index.js';
+ *   const provider = HashiCorpVaultProvider.forAgent('my-agent');
+ *   await provider.storeSecret('api_binance', process.env.KEY!);
+ *   const key = await provider.getSecret('api_binance'); // fetch at runtime only
+ *
+ * Quick start (Bitwarden):
+ *   import { BitwardenProvider } from './vault/index.js';
+ *   const provider = new BitwardenProvider({ agentId: 'my-agent' });
+ *   const key = await provider.getSecret('api_binance');
+ */
+export * from './types.js';
+export { VaultClient } from './client.js';
+export { loadVaultConfig, saveVaultConfig, loadAgentPolicies, saveAgentPolicies, getOrCreateAgentPolicy, validateVaultConfig, getVaultConfigDir, ensureVaultConfigDir, } from './config.js';
+export { fetchSecretsAsEnv, fetchAllSecretsAsEnv } from './provider.js';
+// Concrete provider implementations
+export { HashiCorpVaultProvider } from './hashicorp-provider.js';
+export { BitwardenProvider } from './bitwarden.js';
+export { MemorySecretProvider } from './memory-provider.js';
+// Safehouse components
+export { EncryptedMemoryStore } from './encrypted-memory-store.js';
+export { SecretSandbox } from './secret-sandbox.js';
+export { SecretRotationManager } from './secret-rotation.js';
+export { SecretLeakDetector } from './secret-leak-detector.js';
+export { SecretInjector } from './secret-injector.js';
+export { SecretAccessAudit } from './secret-audit.js';
+// Unified orchestrator
+export { SecretManagementLayer } from './secret-management-layer.js';
+//# sourceMappingURL=index.js.map

package/dist/src/vault/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/vault/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,cAAc,YAAY,CAAC;AAC3B,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EACL,eAAe,EACf,eAAe,EACf,iBAAiB,EACjB,iBAAiB,EACjB,sBAAsB,EACtB,mBAAmB,EACnB,iBAAiB,EACjB,oBAAoB,GACrB,MAAM,aAAa,CAAC;AAIrB,OAAO,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAExE,oCAAoC;AACpC,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AACjE,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAEnD,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AA0B5D,uBAAuB;AACvB,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEpD,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAE/D,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAEtD,uBAAuB;AACvB,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC"}

package/dist/src/vault/memory-provider.d.ts

@@ -0,0 +1,26 @@
+/**
+ * In-memory secret provider for testing and local development
+ *
+ * Secrets are held only in process memory – no backend is required.
+ * Useful for unit tests and development workflows where a real Vault
+ * or Bitwarden instance is not available.
+ */
+import type { SecretProvider, SecretProviderHealth } from './provider.js';
+export declare class MemorySecretProvider implements SecretProvider {
+    readonly name = "In-Memory (ephemeral)";
+    private readonly store;
+    getSecret(key: string): Promise<string | null>;
+    storeSecret(key: string, value: string): Promise<void>;
+    listSecrets(): Promise<string[]>;
+    deleteSecret(key: string): Promise<void>;
+    healthCheck(): Promise<SecretProviderHealth>;
+    /**
+     * Clear all secrets. Useful between tests.
+     */
+    clear(): void;
+    /**
+     * Number of secrets stored.
+     */
+    get size(): number;
+}
+//# sourceMappingURL=memory-provider.d.ts.map

package/dist/src/vault/memory-provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory-provider.d.ts","sourceRoot":"","sources":["../../../src/vault/memory-provider.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAE1E,qBAAa,oBAAqB,YAAW,cAAc;IACzD,QAAQ,CAAC,IAAI,2BAA2B;IAExC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA6B;IAE7C,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAI9C,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAItD,WAAW,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;IAIhC,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAOxC,WAAW,IAAI,OAAO,CAAC,oBAAoB,CAAC;IAIlD;;OAEG;IACH,KAAK,IAAI,IAAI;IAIb;;OAEG;IACH,IAAI,IAAI,IAAI,MAAM,CAEjB;CACF"}

package/dist/src/vault/memory-provider.js

@@ -0,0 +1,42 @@
+/**
+ * In-memory secret provider for testing and local development
+ *
+ * Secrets are held only in process memory – no backend is required.
+ * Useful for unit tests and development workflows where a real Vault
+ * or Bitwarden instance is not available.
+ */
+export class MemorySecretProvider {
+    name = 'In-Memory (ephemeral)';
+    store = new Map();
+    async getSecret(key) {
+        return this.store.get(key) ?? null;
+    }
+    async storeSecret(key, value) {
+        this.store.set(key, value);
+    }
+    async listSecrets() {
+        return [...this.store.keys()];
+    }
+    async deleteSecret(key) {
+        if (!this.store.has(key)) {
+            throw new Error(`Secret "${key}" not found`);
+        }
+        this.store.delete(key);
+    }
+    async healthCheck() {
+        return { healthy: true, message: 'In-memory provider is ready', version: '1.0.0' };
+    }
+    /**
+     * Clear all secrets. Useful between tests.
+     */
+    clear() {
+        this.store.clear();
+    }
+    /**
+     * Number of secrets stored.
+     */
+    get size() {
+        return this.store.size;
+    }
+}
+//# sourceMappingURL=memory-provider.js.map

package/dist/src/vault/memory-provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory-provider.js","sourceRoot":"","sources":["../../../src/vault/memory-provider.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,MAAM,OAAO,oBAAoB;IACtB,IAAI,GAAG,uBAAuB,CAAC;IAEvB,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;IAEnD,KAAK,CAAC,SAAS,CAAC,GAAW;QACzB,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,GAAW,EAAE,KAAa;QAC1C,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,WAAW;QACf,OAAO,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,GAAW;QAC5B,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,WAAW,GAAG,aAAa,CAAC,CAAC;QAC/C,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,WAAW;QACf,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,6BAA6B,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;IACrF,CAAC;IAED;;OAEG;IACH,KAAK;QACH,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;IAED;;OAEG;IACH,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;IACzB,CAAC;CACF"}

package/dist/src/vault/provider.d.ts

@@ -0,0 +1,68 @@
+/**
+ * Unified runtime-only secret provider for AgentVault
+ *
+ * Design principles:
+ * - Secrets are fetched from the backend (HashiCorp Vault or Bitwarden) at
+ *   agent execution time and held only in process memory for the duration of
+ *   that call.
+ * - Values are NEVER written to canister stable storage, disk files, or any
+ *   other form of persistence.
+ * - Each backend must implement the `SecretProvider` interface so CLI commands
+ *   and agent runtime code can be backend-agnostic.
+ */
+/**
+ * Common interface for every secret backend.
+ */
+export interface SecretProvider {
+    /** Human-readable backend name shown in CLI output */
+    readonly name: string;
+    /**
+     * Retrieve a single secret value by key.
+     * Returns `null` when the key does not exist.
+     */
+    getSecret(key: string): Promise<string | null>;
+    /**
+     * Store or update a secret.
+     * The value travels over the wire to the backend and is not retained locally.
+     */
+    storeSecret(key: string, value: string): Promise<void>;
+    /** Return all known secret keys (values are NOT returned). */
+    listSecrets(): Promise<string[]>;
+    /** Permanently delete a secret key. */
+    deleteSecret(key: string): Promise<void>;
+    /**
+     * Confirm the backend is reachable and operational.
+     * Used by `agentvault vault health`.
+     */
+    healthCheck(): Promise<SecretProviderHealth>;
+}
+export interface SecretProviderHealth {
+    healthy: boolean;
+    message: string;
+    version?: string;
+}
+/**
+ * Fetch a named set of secrets and return them as an environment-variable map.
+ *
+ * The returned object is intended to be merged with the process environment
+ * **only for the duration of a single agent execution call**.  Callers MUST
+ * NOT persist this map to disk, canister state, or any log output.
+ *
+ * Key conversion: `api_binance` → `API_BINANCE`
+ *
+ * @example
+ * ```ts
+ * const provider = new HashiCorpVaultProvider(client, agentId);
+ * const env = await fetchSecretsAsEnv(provider, ['api_binance', 'openai_key']);
+ * // env === { API_BINANCE: '...', OPENAI_KEY: '...' }
+ * await runAgent({ env: { ...process.env, ...env } });
+ * // env is never stored after this point
+ * ```
+ */
+export declare function fetchSecretsAsEnv(provider: SecretProvider, keys: string[]): Promise<Record<string, string>>;
+/**
+ * Fetch ALL secrets for an agent and return them as an env-var map.
+ * Same zero-persistence guarantee as `fetchSecretsAsEnv`.
+ */
+export declare function fetchAllSecretsAsEnv(provider: SecretProvider): Promise<Record<string, string>>;
+//# sourceMappingURL=provider.d.ts.map

package/dist/src/vault/provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider.d.ts","sourceRoot":"","sources":["../../../src/vault/provider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,sDAAsD;IACtD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB;;;OAGG;IACH,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAE/C;;;OAGG;IACH,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEvD,8DAA8D;IAC9D,WAAW,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAEjC,uCAAuC;IACvC,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEzC;;;OAGG;IACH,WAAW,IAAI,OAAO,CAAC,oBAAoB,CAAC,CAAC;CAC9C;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,iBAAiB,CACrC,QAAQ,EAAE,cAAc,EACxB,IAAI,EAAE,MAAM,EAAE,GACb,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAcjC;AAED;;;GAGG;AACH,wBAAsB,oBAAoB,CACxC,QAAQ,EAAE,cAAc,GACvB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAGjC"}

package/dist/src/vault/provider.js

@@ -0,0 +1,50 @@
+/**
+ * Unified runtime-only secret provider for AgentVault
+ *
+ * Design principles:
+ * - Secrets are fetched from the backend (HashiCorp Vault or Bitwarden) at
+ *   agent execution time and held only in process memory for the duration of
+ *   that call.
+ * - Values are NEVER written to canister stable storage, disk files, or any
+ *   other form of persistence.
+ * - Each backend must implement the `SecretProvider` interface so CLI commands
+ *   and agent runtime code can be backend-agnostic.
+ */
+/**
+ * Fetch a named set of secrets and return them as an environment-variable map.
+ *
+ * The returned object is intended to be merged with the process environment
+ * **only for the duration of a single agent execution call**.  Callers MUST
+ * NOT persist this map to disk, canister state, or any log output.
+ *
+ * Key conversion: `api_binance` → `API_BINANCE`
+ *
+ * @example
+ * ```ts
+ * const provider = new HashiCorpVaultProvider(client, agentId);
+ * const env = await fetchSecretsAsEnv(provider, ['api_binance', 'openai_key']);
+ * // env === { API_BINANCE: '...', OPENAI_KEY: '...' }
+ * await runAgent({ env: { ...process.env, ...env } });
+ * // env is never stored after this point
+ * ```
+ */
+export async function fetchSecretsAsEnv(provider, keys) {
+    const env = {};
+    await Promise.all(keys.map(async (key) => {
+        const value = await provider.getSecret(key);
+        if (value !== null) {
+            const envKey = key.toUpperCase().replace(/[^A-Z0-9]/g, '_');
+            env[envKey] = value;
+        }
+    }));
+    return env;
+}
+/**
+ * Fetch ALL secrets for an agent and return them as an env-var map.
+ * Same zero-persistence guarantee as `fetchSecretsAsEnv`.
+ */
+export async function fetchAllSecretsAsEnv(provider) {
+    const keys = await provider.listSecrets();
+    return fetchSecretsAsEnv(provider, keys);
+}
+//# sourceMappingURL=provider.js.map

package/dist/src/vault/provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider.js","sourceRoot":"","sources":["../../../src/vault/provider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAwCH;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,QAAwB,EACxB,IAAc;IAEd,MAAM,GAAG,GAA2B,EAAE,CAAC;IAEvC,MAAM,OAAO,CAAC,GAAG,CACf,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QACrB,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAC5C,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACnB,MAAM,MAAM,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;YAC5D,GAAG,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC;QACtB,CAAC;IACH,CAAC,CAAC,CACH,CAAC;IAEF,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,QAAwB;IAExB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC;IAC1C,OAAO,iBAAiB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;AAC3C,CAAC"}

package/dist/src/vault/safehouse-types.d.ts

@@ -0,0 +1,204 @@
+/**
+ * Types for the Agent Safehouse Secret Management Layer
+ *
+ * Inspired by Agent Safehouse's deny-first sandboxing philosophy, applied to
+ * secret management: every secret access is denied by default and must be
+ * explicitly permitted by a scope policy.
+ */
+/**
+ * Access level for a secret within a sandbox scope.
+ */
+export type SecretAccessLevel = 'none' | 'read' | 'write' | 'admin';
+/**
+ * A single permission grant within a sandbox scope.
+ */
+export interface SecretScopeGrant {
+    /** Glob pattern matching secret keys (e.g. "api_*", "db_password") */
+    keyPattern: string;
+    /** Access level */
+    access: SecretAccessLevel;
+    /** Optional TTL override (seconds) for secrets matching this grant */
+    ttlSeconds?: number;
+    /** Maximum number of reads before the grant is revoked */
+    maxReads?: number;
+}
+/**
+ * A sandbox scope defines the complete set of secret permissions for one agent
+ * execution. Follows the deny-first principle: anything not explicitly granted
+ * is denied.
+ */
+export interface SecretSandboxScope {
+    /** Unique scope identifier */
+    scopeId: string;
+    /** Agent this scope applies to */
+    agentId: string;
+    /** Human-readable label */
+    label?: string;
+    /** Explicit grants (deny-first: only these are allowed) */
+    grants: SecretScopeGrant[];
+    /** When this scope was created */
+    createdAt: string;
+    /** When this scope expires (ISO-8601). Null = session-scoped. */
+    expiresAt: string | null;
+    /** Whether this scope has been revoked */
+    revoked: boolean;
+    /** Maximum total secrets accessible through this scope */
+    maxSecrets?: number;
+    /** Whether to allow accessing secrets from other agents' namespaces */
+    allowCrossAgent: boolean;
+}
+/**
+ * A secret value held in the encrypted memory store.
+ * The plaintext is encrypted in-memory with an ephemeral key.
+ */
+export interface EncryptedMemoryEntry {
+    /** Original secret key */
+    key: string;
+    /** AES-256-GCM encrypted value (base64) */
+    ciphertext: string;
+    /** Initialization vector (base64) */
+    iv: string;
+    /** Auth tag (base64) */
+    authTag: string;
+    /** When this entry was cached */
+    cachedAt: number;
+    /** TTL in milliseconds. 0 = no expiry (session-scoped). */
+    ttlMs: number;
+    /** Number of times this entry has been read */
+    readCount: number;
+    /** Maximum reads allowed. 0 = unlimited. */
+    maxReads: number;
+}
+export type RotationStrategy = 'periodic' | 'on-access' | 'manual';
+/**
+ * Configuration for automatic secret rotation.
+ */
+export interface SecretRotationConfig {
+    /** Secret key to rotate */
+    key: string;
+    /** Rotation strategy */
+    strategy: RotationStrategy;
+    /** For periodic: interval in seconds */
+    intervalSeconds?: number;
+    /** For on-access: rotate after N reads */
+    rotateAfterReads?: number;
+    /** Callback that produces a new secret value */
+    generator: () => Promise<string>;
+    /** Notification callback on rotation */
+    onRotated?: (key: string, version: number) => void;
+}
+export interface SecretRotationState {
+    key: string;
+    currentVersion: number;
+    lastRotatedAt: string;
+    totalRotations: number;
+    nextRotationAt?: string;
+    readsSinceRotation: number;
+}
+export type LeakSeverity = 'info' | 'warning' | 'critical';
+export interface LeakDetectionEvent {
+    /** When the leak was detected */
+    detectedAt: string;
+    /** Severity level */
+    severity: LeakSeverity;
+    /** Description of the leak vector */
+    description: string;
+    /** The secret key that was leaked (NOT the value) */
+    secretKey: string;
+    /** Where the leak was detected */
+    source: 'env' | 'log' | 'process-args' | 'file' | 'network' | 'stdout';
+    /** Whether the leak was automatically remediated */
+    remediated: boolean;
+    /** Remediation action taken */
+    remediationAction?: string;
+}
+export type InjectionMethod = 'memory-fd' | 'tmpfs-file' | 'env-scoped' | 'callback';
+/**
+ * Configuration for injecting secrets into an agent's execution context.
+ */
+export interface SecretInjectionConfig {
+    /** Injection method */
+    method: InjectionMethod;
+    /** For tmpfs-file: directory to use (default: auto-detect tmpfs) */
+    tmpfsPath?: string;
+    /** For env-scoped: prefix for environment variable names */
+    envPrefix?: string;
+    /** Auto-cleanup after injection (default: true) */
+    autoCleanup?: boolean;
+    /** Maximum time (ms) the injection remains valid */
+    maxLifetimeMs?: number;
+}
+export interface InjectedSecret {
+    /** Secret key */
+    key: string;
+    /** How it was injected */
+    method: InjectionMethod;
+    /** Reference for retrieval (fd number, file path, env name, etc.) */
+    reference: string;
+    /** When the injection was created */
+    injectedAt: string;
+    /** When the injection expires */
+    expiresAt: string | null;
+    /** Cleanup function */
+    cleanup: () => Promise<void>;
+}
+export type AuditAction = 'secret.read' | 'secret.write' | 'secret.delete' | 'secret.list' | 'secret.rotate' | 'secret.inject' | 'secret.leak_detected' | 'scope.create' | 'scope.revoke' | 'scope.deny' | 'sandbox.enter' | 'sandbox.exit';
+export interface SecretAuditEntry {
+    /** Unique entry ID */
+    id: string;
+    /** Timestamp */
+    timestamp: string;
+    /** Action performed */
+    action: AuditAction;
+    /** Agent performing the action */
+    agentId: string;
+    /** Scope ID under which the action was performed */
+    scopeId: string;
+    /** Secret key involved (if applicable) */
+    secretKey?: string;
+    /** Whether the action was allowed or denied */
+    allowed: boolean;
+    /** Reason for denial (if denied) */
+    denialReason?: string;
+    /** Additional metadata */
+    metadata?: Record<string, string>;
+    /** SHA-256 hash of previous entry (chain integrity) */
+    previousHash?: string;
+    /** SHA-256 hash of this entry */
+    entryHash: string;
+}
+export interface SecretManagementLayerConfig {
+    /** Default TTL for cached secrets (seconds). Default: 300 (5 minutes). */
+    defaultTtlSeconds?: number;
+    /** Enable leak detection. Default: true. */
+    leakDetection?: boolean;
+    /** Enable audit trail. Default: true. */
+    auditEnabled?: boolean;
+    /** Maximum number of secrets an agent can access per session. Default: 100. */
+    maxSecretsPerSession?: number;
+    /** Secret injection method. Default: 'memory-fd'. */
+    injectionMethod?: InjectionMethod;
+    /** Secret provider backend */
+    backend?: 'hashicorp' | 'bitwarden' | 'memory';
+    /** Auto-wipe interval for expired entries (ms). Default: 30000. */
+    autoWipeIntervalMs?: number;
+}
+export interface SecretManagementStats {
+    /** Total secrets currently cached */
+    cachedSecrets: number;
+    /** Total read operations */
+    totalReads: number;
+    /** Total write operations */
+    totalWrites: number;
+    /** Total denied operations */
+    totalDenied: number;
+    /** Total leak events */
+    totalLeaks: number;
+    /** Total rotations performed */
+    totalRotations: number;
+    /** Active scopes */
+    activeScopes: number;
+    /** Uptime in ms */
+    uptimeMs: number;
+}
+//# sourceMappingURL=safehouse-types.d.ts.map

package/dist/src/vault/safehouse-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"safehouse-types.d.ts","sourceRoot":"","sources":["../../../src/vault/safehouse-types.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAMH;;GAEG;AACH,MAAM,MAAM,iBAAiB,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,OAAO,CAAC;AAEpE;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,sEAAsE;IACtE,UAAU,EAAE,MAAM,CAAC;IACnB,mBAAmB;IACnB,MAAM,EAAE,iBAAiB,CAAC;IAC1B,sEAAsE;IACtE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,0DAA0D;IAC1D,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;;GAIG;AACH,MAAM,WAAW,kBAAkB;IACjC,8BAA8B;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,kCAAkC;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,2BAA2B;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,2DAA2D;IAC3D,MAAM,EAAE,gBAAgB,EAAE,CAAC;IAC3B,kCAAkC;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,iEAAiE;IACjE,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,0CAA0C;IAC1C,OAAO,EAAE,OAAO,CAAC;IACjB,0DAA0D;IAC1D,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,uEAAuE;IACvE,eAAe,EAAE,OAAO,CAAC;CAC1B;AAMD;;;GAGG;AACH,MAAM,WAAW,oBAAoB;IACnC,0BAA0B;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,2CAA2C;IAC3C,UAAU,EAAE,MAAM,CAAC;IACnB,qCAAqC;IACrC,EAAE,EAAE,MAAM,CAAC;IACX,wBAAwB;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,iCAAiC;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,2DAA2D;IAC3D,KAAK,EAAE,MAAM,CAAC;IACd,+CAA+C;IAC/C,SAAS,EAAE,MAAM,CAAC;IAClB,4CAA4C;IAC5C,QAAQ,EAAE,MAAM,CAAC;CAClB;AAMD,MAAM,MAAM,gBAAgB,GAAG,UAAU,GAAG,WAAW,GAAG,QAAQ,CAAC;AAEnE;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,2BAA2B;IAC3B,GAAG,EAAE,MAAM,CAAC;IACZ,wBAAwB;IACxB,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,wCAAwC;IACxC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,0CAA0C;IAC1C,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,gDAAgD;IAChD,SAAS,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IACjC,wCAAwC;IACxC,SAAS,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CACpD;AAED,MAAM,WAAW,mBAAmB;IAClC,GAAG,EAAE,MAAM,CAAC;IACZ,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,kBAAkB,EAAE,MAAM,CAAC;CAC5B;AAMD,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,SAAS,GAAG,UAAU,CAAC;AAE3D,MAAM,WAAW,kBAAkB;IACjC,iCAAiC;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,qBAAqB;IACrB,QAAQ,EAAE,YAAY,CAAC;IACvB,qCAAqC;IACrC,WAAW,EAAE,MAAM,CAAC;IACpB,qDAAqD;IACrD,SAAS,EAAE,MAAM,CAAC;IAClB,kCAAkC;IAClC,MAAM,EAAE,KAAK,GAAG,KAAK,GAAG,cAAc,GAAG,MAAM,GAAG,SAAS,GAAG,QAAQ,CAAC;IACvE,oDAAoD;IACpD,UAAU,EAAE,OAAO,CAAC;IACpB,+BAA+B;IAC/B,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAMD,MAAM,MAAM,eAAe,GAAG,WAAW,GAAG,YAAY,GAAG,YAAY,GAAG,UAAU,CAAC;AAErF;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,uBAAuB;IACvB,MAAM,EAAE,eAAe,CAAC;IACxB,oEAAoE;IACpE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,4DAA4D;IAC5D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,mDAAmD;IACnD,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,oDAAoD;IACpD,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,cAAc;IAC7B,iBAAiB;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,0BAA0B;IAC1B,MAAM,EAAE,eAAe,CAAC;IACxB,qEAAqE;IACrE,SAAS,EAAE,MAAM,CAAC;IAClB,qCAAqC;IACrC,UAAU,EAAE,MAAM,CAAC;IACnB,iCAAiC;IACjC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,uBAAuB;IACvB,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9B;AAMD,MAAM,MAAM,WAAW,GACnB,aAAa,GACb,cAAc,GACd,eAAe,GACf,aAAa,GACb,eAAe,GACf,eAAe,GACf,sBAAsB,GACtB,cAAc,GACd,cAAc,GACd,YAAY,GACZ,eAAe,GACf,cAAc,CAAC;AAEnB,MAAM,WAAW,gBAAgB;IAC/B,sBAAsB;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,gBAAgB;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,uBAAuB;IACvB,MAAM,EAAE,WAAW,CAAC;IACpB,kCAAkC;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,oDAAoD;IACpD,OAAO,EAAE,MAAM,CAAC;IAChB,0CAA0C;IAC1C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,+CAA+C;IAC/C,OAAO,EAAE,OAAO,CAAC;IACjB,oCAAoC;IACpC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,0BAA0B;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAClC,uDAAuD;IACvD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,iCAAiC;IACjC,SAAS,EAAE,MAAM,CAAC;CACnB;AAMD,MAAM,WAAW,2BAA2B;IAC1C,0EAA0E;IAC1E,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,4CAA4C;IAC5C,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,yCAAyC;IACzC,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,+EAA+E;IAC/E,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,qDAAqD;IACrD,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,8BAA8B;IAC9B,OAAO,CAAC,EAAE,WAAW,GAAG,WAAW,GAAG,QAAQ,CAAC;IAC/C,mEAAmE;IACnE,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,qBAAqB;IACpC,qCAAqC;IACrC,aAAa,EAAE,MAAM,CAAC;IACtB,4BAA4B;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,6BAA6B;IAC7B,WAAW,EAAE,MAAM,CAAC;IACpB,8BAA8B;IAC9B,WAAW,EAAE,MAAM,CAAC;IACpB,wBAAwB;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,gCAAgC;IAChC,cAAc,EAAE,MAAM,CAAC;IACvB,oBAAoB;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,mBAAmB;IACnB,QAAQ,EAAE,MAAM,CAAC;CAClB"}

package/dist/src/vault/safehouse-types.js

@@ -0,0 +1,9 @@
+/**
+ * Types for the Agent Safehouse Secret Management Layer
+ *
+ * Inspired by Agent Safehouse's deny-first sandboxing philosophy, applied to
+ * secret management: every secret access is denied by default and must be
+ * explicitly permitted by a scope policy.
+ */
+export {};
+//# sourceMappingURL=safehouse-types.js.map

package/dist/src/vault/safehouse-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"safehouse-types.js","sourceRoot":"","sources":["../../../src/vault/safehouse-types.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG"}

package/dist/src/vault/secret-audit.d.ts

@@ -0,0 +1,91 @@
+/**
+ * Secret Access Audit Trail
+ *
+ * Maintains a tamper-evident, hash-chained log of every secret operation.
+ * Each entry includes a SHA-256 hash of the previous entry, forming an
+ * append-only chain that can be verified for integrity.
+ *
+ * The audit trail can be:
+ * - Kept in memory for the session
+ * - Flushed to a YAML file on disk
+ * - Forwarded to an ICP canister for permanent storage
+ */
+import type { SecretAuditEntry, AuditAction } from './safehouse-types.js';
+export declare class SecretAccessAudit {
+    private readonly entries;
+    private lastHash;
+    private readonly persistToDisk;
+    private readonly auditFilePath;
+    constructor(options?: {
+        persistToDisk?: boolean;
+        auditDir?: string;
+    });
+    /**
+     * Record a new audit entry.
+     */
+    record(params: {
+        action: AuditAction;
+        agentId: string;
+        scopeId: string;
+        secretKey?: string;
+        allowed: boolean;
+        denialReason?: string;
+        metadata?: Record<string, string>;
+    }): SecretAuditEntry;
+    /**
+     * Get all audit entries.
+     */
+    getEntries(): SecretAuditEntry[];
+    /**
+     * Get entries for a specific agent.
+     */
+    getEntriesByAgent(agentId: string): SecretAuditEntry[];
+    /**
+     * Get entries for a specific scope.
+     */
+    getEntriesByScope(scopeId: string): SecretAuditEntry[];
+    /**
+     * Get denied operations only.
+     */
+    getDeniedEntries(): SecretAuditEntry[];
+    /**
+     * Get entries by action type.
+     */
+    getEntriesByAction(action: AuditAction): SecretAuditEntry[];
+    /**
+     * Get the total number of entries.
+     */
+    get count(): number;
+    /**
+     * Verify the integrity of the entire audit chain.
+     * Returns true if the chain is valid (no tampering detected).
+     */
+    verifyChain(): {
+        valid: boolean;
+        brokenAt?: number;
+        reason?: string;
+    };
+    /**
+     * Export the audit trail as JSON Lines.
+     */
+    exportAsJsonl(): string;
+    /**
+     * Summary statistics.
+     */
+    summary(): {
+        totalEntries: number;
+        allowed: number;
+        denied: number;
+        byAction: Record<string, number>;
+        byAgent: Record<string, number>;
+        chainValid: boolean;
+    };
+    /**
+     * Clear all in-memory entries (does NOT erase disk).
+     */
+    clear(): void;
+    private computeHash;
+    private appendToDisk;
+    private loadLastHash;
+}
+//# sourceMappingURL=secret-audit.d.ts.map

package/dist/src/vault/secret-audit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-audit.d.ts","sourceRoot":"","sources":["../../../src/vault/secret-audit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAMH,OAAO,KAAK,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAK1E,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA0B;IAClD,OAAO,CAAC,QAAQ,CAA0B;IAC1C,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAU;IACxC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;gBAE3B,OAAO,CAAC,EAAE;QAAE,aAAa,CAAC,EAAE,OAAO,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE;IAkBpE;;OAEG;IACH,MAAM,CAAC,MAAM,EAAE;QACb,MAAM,EAAE,WAAW,CAAC;QACpB,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,EAAE,MAAM,CAAC;QAChB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,OAAO,EAAE,OAAO,CAAC;QACjB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;KACnC,GAAG,gBAAgB;IAgCpB;;OAEG;IACH,UAAU,IAAI,gBAAgB,EAAE;IAIhC;;OAEG;IACH,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,gBAAgB,EAAE;IAItD;;OAEG;IACH,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,gBAAgB,EAAE;IAItD;;OAEG;IACH,gBAAgB,IAAI,gBAAgB,EAAE;IAItC;;OAEG;IACH,kBAAkB,CAAC,MAAM,EAAE,WAAW,GAAG,gBAAgB,EAAE;IAI3D;;OAEG;IACH,IAAI,KAAK,IAAI,MAAM,CAElB;IAMD;;;OAGG;IACH,WAAW,IAAI;QAAE,KAAK,EAAE,OAAO,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE;IAuCrE;;OAEG;IACH,aAAa,IAAI,MAAM;IAIvB;;OAEG;IACH,OAAO,IAAI;QACT,YAAY,EAAE,MAAM,CAAC;QACrB,OAAO,EAAE,MAAM,CAAC;QAChB,MAAM,EAAE,MAAM,CAAC;QACf,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACjC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAChC,UAAU,EAAE,OAAO,CAAC;KACrB;IAuBD;;OAEG;IACH,KAAK,IAAI,IAAI;IASb,OAAO,CAAC,WAAW;IAiBnB,OAAO,CAAC,YAAY;IAQpB,OAAO,CAAC,YAAY;CAerB"}