agentvault 1.0.2 → 1.0.5

package/dist/src/vault/secret-audit.js

@@ -0,0 +1,224 @@
+/**
+ * Secret Access Audit Trail
+ *
+ * Maintains a tamper-evident, hash-chained log of every secret operation.
+ * Each entry includes a SHA-256 hash of the previous entry, forming an
+ * append-only chain that can be verified for integrity.
+ *
+ * The audit trail can be:
+ * - Kept in memory for the session
+ * - Flushed to a YAML file on disk
+ * - Forwarded to an ICP canister for permanent storage
+ */
+import * as crypto from 'node:crypto';
+import * as fs from 'node:fs';
+import * as path from 'node:path';
+import * as os from 'node:os';
+const AUDIT_DIR = path.join(os.homedir(), '.agentvault', 'audit');
+const AUDIT_FILE = 'secret-audit.jsonl';
+export class SecretAccessAudit {
+    entries = [];
+    lastHash = '0'.repeat(64); // genesis hash
+    persistToDisk;
+    auditFilePath;
+    constructor(options) {
+        this.persistToDisk = options?.persistToDisk ?? false;
+        const dir = options?.auditDir ?? AUDIT_DIR;
+        this.auditFilePath = path.join(dir, AUDIT_FILE);
+        if (this.persistToDisk) {
+            if (!fs.existsSync(dir)) {
+                fs.mkdirSync(dir, { recursive: true });
+            }
+            // Load last hash from existing file
+            this.loadLastHash();
+        }
+    }
+    // -----------------------------------------------------------------------
+    // Recording
+    // -----------------------------------------------------------------------
+    /**
+     * Record a new audit entry.
+     */
+    record(params) {
+        const entry = {
+            id: `audit_${crypto.randomBytes(8).toString('hex')}`,
+            timestamp: new Date().toISOString(),
+            action: params.action,
+            agentId: params.agentId,
+            scopeId: params.scopeId,
+            secretKey: params.secretKey,
+            allowed: params.allowed,
+            denialReason: params.denialReason,
+            metadata: params.metadata,
+            previousHash: this.lastHash,
+            entryHash: '', // filled below
+        };
+        // Compute hash of this entry (excluding entryHash itself)
+        entry.entryHash = this.computeHash(entry);
+        this.lastHash = entry.entryHash;
+        this.entries.push(entry);
+        // Persist if enabled
+        if (this.persistToDisk) {
+            this.appendToDisk(entry);
+        }
+        return entry;
+    }
+    // -----------------------------------------------------------------------
+    // Querying
+    // -----------------------------------------------------------------------
+    /**
+     * Get all audit entries.
+     */
+    getEntries() {
+        return [...this.entries];
+    }
+    /**
+     * Get entries for a specific agent.
+     */
+    getEntriesByAgent(agentId) {
+        return this.entries.filter(e => e.agentId === agentId);
+    }
+    /**
+     * Get entries for a specific scope.
+     */
+    getEntriesByScope(scopeId) {
+        return this.entries.filter(e => e.scopeId === scopeId);
+    }
+    /**
+     * Get denied operations only.
+     */
+    getDeniedEntries() {
+        return this.entries.filter(e => !e.allowed);
+    }
+    /**
+     * Get entries by action type.
+     */
+    getEntriesByAction(action) {
+        return this.entries.filter(e => e.action === action);
+    }
+    /**
+     * Get the total number of entries.
+     */
+    get count() {
+        return this.entries.length;
+    }
+    // -----------------------------------------------------------------------
+    // Integrity verification
+    // -----------------------------------------------------------------------
+    /**
+     * Verify the integrity of the entire audit chain.
+     * Returns true if the chain is valid (no tampering detected).
+     */
+    verifyChain() {
+        if (this.entries.length === 0) {
+            return { valid: true };
+        }
+        let previousHash = '0'.repeat(64);
+        for (let i = 0; i < this.entries.length; i++) {
+            const entry = this.entries[i];
+            // Check previous hash link
+            if (entry.previousHash !== previousHash) {
+                return {
+                    valid: false,
+                    brokenAt: i,
+                    reason: `Entry ${i}: previousHash mismatch (expected ${previousHash.slice(0, 16)}..., got ${(entry.previousHash ?? '').slice(0, 16)}...)`,
+                };
+            }
+            // Verify entry hash
+            const computed = this.computeHash(entry);
+            if (computed !== entry.entryHash) {
+                return {
+                    valid: false,
+                    brokenAt: i,
+                    reason: `Entry ${i}: entryHash mismatch (computed ${computed.slice(0, 16)}..., stored ${entry.entryHash.slice(0, 16)}...)`,
+                };
+            }
+            previousHash = entry.entryHash;
+        }
+        return { valid: true };
+    }
+    // -----------------------------------------------------------------------
+    // Export
+    // -----------------------------------------------------------------------
+    /**
+     * Export the audit trail as JSON Lines.
+     */
+    exportAsJsonl() {
+        return this.entries.map(e => JSON.stringify(e)).join('\n') + '\n';
+    }
+    /**
+     * Summary statistics.
+     */
+    summary() {
+        const byAction = {};
+        const byAgent = {};
+        let allowed = 0;
+        let denied = 0;
+        for (const entry of this.entries) {
+            byAction[entry.action] = (byAction[entry.action] ?? 0) + 1;
+            byAgent[entry.agentId] = (byAgent[entry.agentId] ?? 0) + 1;
+            if (entry.allowed)
+                allowed++;
+            else
+                denied++;
+        }
+        return {
+            totalEntries: this.entries.length,
+            allowed,
+            denied,
+            byAction,
+            byAgent,
+            chainValid: this.verifyChain().valid,
+        };
+    }
+    /**
+     * Clear all in-memory entries (does NOT erase disk).
+     */
+    clear() {
+        this.entries.length = 0;
+        this.lastHash = '0'.repeat(64);
+    }
+    // -----------------------------------------------------------------------
+    // Internal
+    // -----------------------------------------------------------------------
+    computeHash(entry) {
+        const payload = JSON.stringify({
+            id: entry.id,
+            timestamp: entry.timestamp,
+            action: entry.action,
+            agentId: entry.agentId,
+            scopeId: entry.scopeId,
+            secretKey: entry.secretKey,
+            allowed: entry.allowed,
+            denialReason: entry.denialReason,
+            metadata: entry.metadata,
+            previousHash: entry.previousHash,
+        });
+        return crypto.createHash('sha256').update(payload).digest('hex');
+    }
+    appendToDisk(entry) {
+        try {
+            fs.appendFileSync(this.auditFilePath, JSON.stringify(entry) + '\n', 'utf-8');
+        }
+        catch {
+            // Non-fatal: disk write failure shouldn't break the audit trail
+        }
+    }
+    loadLastHash() {
+        try {
+            if (!fs.existsSync(this.auditFilePath))
+                return;
+            const content = fs.readFileSync(this.auditFilePath, 'utf-8').trim();
+            if (!content)
+                return;
+            const lines = content.split('\n');
+            const lastLine = lines[lines.length - 1] ?? '';
+            const lastEntry = JSON.parse(lastLine);
+            this.lastHash = lastEntry.entryHash;
+        }
+        catch {
+            // Start fresh if we can't parse existing audit file
+        }
+    }
+}
+//# sourceMappingURL=secret-audit.js.map

package/dist/src/vault/secret-audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-audit.js","sourceRoot":"","sources":["../../../src/vault/secret-audit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AACtC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAG9B,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,OAAO,CAAC,CAAC;AAClE,MAAM,UAAU,GAAG,oBAAoB,CAAC;AAExC,MAAM,OAAO,iBAAiB;IACX,OAAO,GAAuB,EAAE,CAAC;IAC1C,QAAQ,GAAW,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,eAAe;IACzC,aAAa,CAAU;IACvB,aAAa,CAAS;IAEvC,YAAY,OAAwD;QAClE,IAAI,CAAC,aAAa,GAAG,OAAO,EAAE,aAAa,IAAI,KAAK,CAAC;QACrD,MAAM,GAAG,GAAG,OAAO,EAAE,QAAQ,IAAI,SAAS,CAAC;QAC3C,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;QAEhD,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBACxB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACzC,CAAC;YACD,oCAAoC;YACpC,IAAI,CAAC,YAAY,EAAE,CAAC;QACtB,CAAC;IACH,CAAC;IAED,0EAA0E;IAC1E,YAAY;IACZ,0EAA0E;IAE1E;;OAEG;IACH,MAAM,CAAC,MAQN;QACC,MAAM,KAAK,GAAqB;YAC9B,EAAE,EAAE,SAAS,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE;YACpD,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,YAAY,EAAE,IAAI,CAAC,QAAQ;YAC3B,SAAS,EAAE,EAAE,EAAE,eAAe;SAC/B,CAAC;QAEF,0DAA0D;QAC1D,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QAC1C,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC,SAAS,CAAC;QAChC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAEzB,qBAAqB;QACrB,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QAC3B,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED,0EAA0E;IAC1E,WAAW;IACX,0EAA0E;IAE1E;;OAEG;IACH,UAAU;QACR,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,iBAAiB,CAAC,OAAe;QAC/B,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC;IACzD,CAAC;IAED;;OAEG;IACH,iBAAiB,CAAC,OAAe;QAC/B,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC;IACzD,CAAC;IAED;;OAEG;IACH,gBAAgB;QACd,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IAC9C,CAAC;IAED;;OAEG;IACH,kBAAkB,CAAC,MAAmB;QACpC,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;IACvD,CAAC;IAED;;OAEG;IACH,IAAI,KAAK;QACP,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;IAC7B,CAAC;IAED,0EAA0E;IAC1E,yBAAyB;IACzB,0EAA0E;IAE1E;;;OAGG;IACH,WAAW;QACT,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9B,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QACzB,CAAC;QAED,IAAI,YAAY,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAElC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC7C,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC;YAE/B,2BAA2B;YAC3B,IAAI,KAAK,CAAC,YAAY,KAAK,YAAY,EAAE,CAAC;gBACxC,OAAO;oBACL,KAAK,EAAE,KAAK;oBACZ,QAAQ,EAAE,CAAC;oBACX,MAAM,EAAE,SAAS,CAAC,qCAAqC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM;iBAC1I,CAAC;YACJ,CAAC;YAED,oBAAoB;YACpB,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YACzC,IAAI,QAAQ,KAAK,KAAK,CAAC,SAAS,EAAE,CAAC;gBACjC,OAAO;oBACL,KAAK,EAAE,KAAK;oBACZ,QAAQ,EAAE,CAAC;oBACX,MAAM,EAAE,SAAS,CAAC,kCAAkC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM;iBAC3H,CAAC;YACJ,CAAC;YAED,YAAY,GAAG,KAAK,CAAC,SAAS,CAAC;QACjC,CAAC;QAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACzB,CAAC;IAED,0EAA0E;IAC1E,SAAS;IACT,0EAA0E;IAE1E;;OAEG;IACH,aAAa;QACX,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IACpE,CAAC;IAED;;OAEG;IACH,OAAO;QAQL,MAAM,QAAQ,GAA2B,EAAE,CAAC;QAC5C,MAAM,OAAO,GAA2B,EAAE,CAAC;QAC3C,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,IAAI,MAAM,GAAG,CAAC,CAAC;QAEf,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;YAC3D,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;YAC3D,IAAI,KAAK,CAAC,OAAO;gBAAE,OAAO,EAAE,CAAC;;gBACxB,MAAM,EAAE,CAAC;QAChB,CAAC;QAED,OAAO;YACL,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM;YACjC,OAAO;YACP,MAAM;YACN,QAAQ;YACR,OAAO;YACP,UAAU,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,KAAK;SACrC,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK;QACH,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;QACxB,IAAI,CAAC,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACjC,CAAC;IAED,0EAA0E;IAC1E,WAAW;IACX,0EAA0E;IAElE,WAAW,CAAC,KAAuB;QACzC,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC;YAC7B,EAAE,EAAE,KAAK,CAAC,EAAE;YACZ,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,YAAY,EAAE,KAAK,CAAC,YAAY;SACjC,CAAC,CAAC;QAEH,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACnE,CAAC;IAEO,YAAY,CAAC,KAAuB;QAC1C,IAAI,CAAC;YACH,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;QAC/E,CAAC;QAAC,MAAM,CAAC;YACP,gEAAgE;QAClE,CAAC;IACH,CAAC;IAEO,YAAY;QAClB,IAAI,CAAC;YACH,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC;gBAAE,OAAO;YAE/C,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;YACpE,IAAI,CAAC,OAAO;gBAAE,OAAO;YAErB,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAClC,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;YAC/C,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAqB,CAAC;YAC3D,IAAI,CAAC,QAAQ,GAAG,SAAS,CAAC,SAAS,CAAC;QACtC,CAAC;QAAC,MAAM,CAAC;YACP,oDAAoD;QACtD,CAAC;IACH,CAAC;CACF"}

package/dist/src/vault/secret-injector.d.ts

@@ -0,0 +1,62 @@
+/**
+ * Secret Injector – Safe secret delivery to agent execution contexts
+ *
+ * Provides multiple injection methods that avoid common leakage vectors:
+ *
+ * 1. **memory-fd**: Writes secret to a pipe/fd that the child reads once.
+ *    The fd is closed immediately after reading.  Not visible in `ps`.
+ *
+ * 2. **tmpfs-file**: Writes secret to a file on tmpfs (RAM-backed filesystem).
+ *    The file is mode 0600, unlinked after the agent reads it.
+ *
+ * 3. **env-scoped**: Sets an environment variable only in the child's env map
+ *    (NOT in the parent process.env).  This is safer than global env but still
+ *    visible via /proc/<pid>/environ on Linux.
+ *
+ * 4. **callback**: Returns the secret via a callback function reference.  The
+ *    agent code calls the function to retrieve the value.  No filesystem or env
+ *    involvement.
+ */
+import type { SecretInjectionConfig, InjectedSecret, InjectionMethod } from './safehouse-types.js';
+export declare class SecretInjector {
+    private readonly config;
+    private readonly injections;
+    /** For callback method: stores secret values keyed by a random token */
+    private readonly callbackStore;
+    /** Track cleanup timers */
+    private readonly timers;
+    constructor(config?: Partial<SecretInjectionConfig>);
+    /**
+     * Inject a secret and return a reference the agent can use to retrieve it.
+     */
+    inject(key: string, value: string, method?: InjectionMethod): Promise<InjectedSecret>;
+    /**
+     * Build an environment map for a child process containing all injected secrets.
+     * Only includes secrets injected via the `env-scoped` method.
+     */
+    buildChildEnv(baseEnv?: NodeJS.ProcessEnv): Record<string, string>;
+    /**
+     * Retrieve a callback-injected secret by its token.
+     * This is the function the agent calls to get the value.
+     */
+    retrieveCallback(token: string): string | null;
+    /**
+     * Get all active injections.
+     */
+    listInjections(): InjectedSecret[];
+    /**
+     * Clean up a specific injection.
+     */
+    cleanup(key: string): Promise<void>;
+    /**
+     * Clean up all injections.
+     */
+    dispose(): Promise<void>;
+    private injectViaMemoryFd;
+    private injectViaTmpfs;
+    private injectViaEnvScoped;
+    private injectViaCallback;
+    private createInjection;
+    private resolveTmpfs;
+}
+//# sourceMappingURL=secret-injector.d.ts.map

package/dist/src/vault/secret-injector.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-injector.d.ts","sourceRoot":"","sources":["../../../src/vault/secret-injector.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAMH,OAAO,KAAK,EAAE,qBAAqB,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAEnG,qBAAa,cAAc;IACzB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAwB;IAC/C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAqC;IAEhE,wEAAwE;IACxE,OAAO,CAAC,QAAQ,CAAC,aAAa,CAA6B;IAE3D,2BAA2B;IAC3B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAoD;gBAE/D,MAAM,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC;IAcnD;;OAEG;IACG,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,cAAc,CAAC;IAgB3F;;;OAGG;IACH,aAAa,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;IAuBlE;;;OAGG;IACH,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAS9C;;OAEG;IACH,cAAc,IAAI,cAAc,EAAE;IAOlC;;OAEG;IACG,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAczC;;OAEG;IACG,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;YAsBhB,iBAAiB;YAsBjB,cAAc;YAqBd,kBAAkB;YAalB,iBAAiB;IAe/B,OAAO,CAAC,eAAe;IAkCvB,OAAO,CAAC,YAAY;CAWrB"}

package/dist/src/vault/secret-injector.js

@@ -0,0 +1,237 @@
+/**
+ * Secret Injector – Safe secret delivery to agent execution contexts
+ *
+ * Provides multiple injection methods that avoid common leakage vectors:
+ *
+ * 1. **memory-fd**: Writes secret to a pipe/fd that the child reads once.
+ *    The fd is closed immediately after reading.  Not visible in `ps`.
+ *
+ * 2. **tmpfs-file**: Writes secret to a file on tmpfs (RAM-backed filesystem).
+ *    The file is mode 0600, unlinked after the agent reads it.
+ *
+ * 3. **env-scoped**: Sets an environment variable only in the child's env map
+ *    (NOT in the parent process.env).  This is safer than global env but still
+ *    visible via /proc/<pid>/environ on Linux.
+ *
+ * 4. **callback**: Returns the secret via a callback function reference.  The
+ *    agent code calls the function to retrieve the value.  No filesystem or env
+ *    involvement.
+ */
+import * as fs from 'node:fs';
+import * as os from 'node:os';
+import * as path from 'node:path';
+import * as crypto from 'node:crypto';
+export class SecretInjector {
+    config;
+    injections = new Map();
+    /** For callback method: stores secret values keyed by a random token */
+    callbackStore = new Map();
+    /** Track cleanup timers */
+    timers = new Map();
+    constructor(config) {
+        this.config = {
+            method: config?.method ?? 'env-scoped',
+            tmpfsPath: config?.tmpfsPath,
+            envPrefix: config?.envPrefix ?? 'AV_SECRET_',
+            autoCleanup: config?.autoCleanup ?? true,
+            maxLifetimeMs: config?.maxLifetimeMs ?? 300_000, // 5 minutes
+        };
+    }
+    // -----------------------------------------------------------------------
+    // Injection
+    // -----------------------------------------------------------------------
+    /**
+     * Inject a secret and return a reference the agent can use to retrieve it.
+     */
+    async inject(key, value, method) {
+        const m = method ?? this.config.method;
+        switch (m) {
+            case 'tmpfs-file':
+                return this.injectViaTmpfs(key, value);
+            case 'env-scoped':
+                return this.injectViaEnvScoped(key, value);
+            case 'callback':
+                return this.injectViaCallback(key, value);
+            case 'memory-fd':
+            default:
+                return this.injectViaMemoryFd(key, value);
+        }
+    }
+    /**
+     * Build an environment map for a child process containing all injected secrets.
+     * Only includes secrets injected via the `env-scoped` method.
+     */
+    buildChildEnv(baseEnv) {
+        const env = {};
+        // Copy base env (without inheriting parent's secrets)
+        if (baseEnv) {
+            for (const [k, v] of Object.entries(baseEnv)) {
+                if (v !== undefined)
+                    env[k] = v;
+            }
+        }
+        // Add injected env-scoped secrets
+        for (const [, injection] of this.injections) {
+            if (injection.method === 'env-scoped') {
+                const value = this.callbackStore.get(injection.reference);
+                if (value) {
+                    env[injection.reference] = value;
+                }
+            }
+        }
+        return env;
+    }
+    /**
+     * Retrieve a callback-injected secret by its token.
+     * This is the function the agent calls to get the value.
+     */
+    retrieveCallback(token) {
+        const value = this.callbackStore.get(token);
+        if (!value)
+            return null;
+        // One-time read: remove after retrieval
+        this.callbackStore.delete(token);
+        return value;
+    }
+    /**
+     * Get all active injections.
+     */
+    listInjections() {
+        return [...this.injections.values()].map(i => ({
+            ...i,
+            cleanup: i.cleanup, // preserve the cleanup function
+        }));
+    }
+    /**
+     * Clean up a specific injection.
+     */
+    async cleanup(key) {
+        const injection = this.injections.get(key);
+        if (injection) {
+            await injection.cleanup();
+            this.injections.delete(key);
+        }
+        const timer = this.timers.get(key);
+        if (timer) {
+            clearTimeout(timer);
+            this.timers.delete(key);
+        }
+    }
+    /**
+     * Clean up all injections.
+     */
+    async dispose() {
+        for (const [key, injection] of this.injections) {
+            try {
+                await injection.cleanup();
+            }
+            catch {
+                // Best-effort cleanup
+            }
+            this.injections.delete(key);
+        }
+        for (const [key, timer] of this.timers) {
+            clearTimeout(timer);
+            this.timers.delete(key);
+        }
+        this.callbackStore.clear();
+    }
+    // -----------------------------------------------------------------------
+    // Injection methods
+    // -----------------------------------------------------------------------
+    async injectViaMemoryFd(key, value) {
+        // Use a temporary file on tmpfs that's immediately unlinked
+        const tmpDir = this.resolveTmpfs();
+        const filePath = path.join(tmpDir, `av_secret_${crypto.randomBytes(8).toString('hex')}`);
+        fs.writeFileSync(filePath, value, { mode: 0o600 });
+        const fd = fs.openSync(filePath, 'r');
+        // Unlink immediately – the fd remains valid until closed
+        try {
+            fs.unlinkSync(filePath);
+        }
+        catch {
+            // On some systems, unlink while open is not supported
+        }
+        const injection = this.createInjection(key, 'memory-fd', `fd:${fd}`, async () => {
+            try {
+                fs.closeSync(fd);
+            }
+            catch { /* already closed */ }
+        });
+        return injection;
+    }
+    async injectViaTmpfs(key, value) {
+        const tmpDir = this.resolveTmpfs();
+        const fileName = `av_secret_${crypto.randomBytes(8).toString('hex')}`;
+        const filePath = path.join(tmpDir, fileName);
+        fs.writeFileSync(filePath, value, { mode: 0o600 });
+        const injection = this.createInjection(key, 'tmpfs-file', filePath, async () => {
+            try {
+                // Overwrite with zeros before unlinking
+                const size = fs.statSync(filePath).size;
+                fs.writeFileSync(filePath, Buffer.alloc(size, 0));
+                fs.unlinkSync(filePath);
+            }
+            catch {
+                // File may already be cleaned up
+            }
+        });
+        return injection;
+    }
+    async injectViaEnvScoped(key, value) {
+        const envName = `${this.config.envPrefix}${key.toUpperCase().replace(/[^A-Z0-9]/g, '_')}`;
+        // Store in callback store (NOT in process.env)
+        this.callbackStore.set(envName, value);
+        const injection = this.createInjection(key, 'env-scoped', envName, async () => {
+            this.callbackStore.delete(envName);
+        });
+        return injection;
+    }
+    async injectViaCallback(key, value) {
+        const token = `cb_${crypto.randomBytes(16).toString('hex')}`;
+        this.callbackStore.set(token, value);
+        const injection = this.createInjection(key, 'callback', token, async () => {
+            this.callbackStore.delete(token);
+        });
+        return injection;
+    }
+    // -----------------------------------------------------------------------
+    // Helpers
+    // -----------------------------------------------------------------------
+    createInjection(key, method, reference, cleanupFn) {
+        const now = new Date();
+        const expiresAt = this.config.maxLifetimeMs
+            ? new Date(now.getTime() + this.config.maxLifetimeMs).toISOString()
+            : null;
+        const injection = {
+            key,
+            method,
+            reference,
+            injectedAt: now.toISOString(),
+            expiresAt,
+            cleanup: cleanupFn,
+        };
+        this.injections.set(key, injection);
+        // Schedule auto-cleanup
+        if (this.config.autoCleanup && this.config.maxLifetimeMs) {
+            const timer = setTimeout(async () => {
+                await this.cleanup(key);
+            }, this.config.maxLifetimeMs);
+            if (timer.unref)
+                timer.unref();
+            this.timers.set(key, timer);
+        }
+        return injection;
+    }
+    resolveTmpfs() {
+        if (this.config.tmpfsPath)
+            return this.config.tmpfsPath;
+        // Prefer /dev/shm (Linux tmpfs) if available
+        if (process.platform === 'linux' && fs.existsSync('/dev/shm')) {
+            return '/dev/shm';
+        }
+        // Fall back to OS temp directory
+        return os.tmpdir();
+    }
+}
+//# sourceMappingURL=secret-injector.js.map

package/dist/src/vault/secret-injector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-injector.js","sourceRoot":"","sources":["../../../src/vault/secret-injector.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AAGtC,MAAM,OAAO,cAAc;IACR,MAAM,CAAwB;IAC9B,UAAU,GAAG,IAAI,GAAG,EAA0B,CAAC;IAEhE,wEAAwE;IACvD,aAAa,GAAG,IAAI,GAAG,EAAkB,CAAC;IAE3D,2BAA2B;IACV,MAAM,GAAG,IAAI,GAAG,EAAyC,CAAC;IAE3E,YAAY,MAAuC;QACjD,IAAI,CAAC,MAAM,GAAG;YACZ,MAAM,EAAE,MAAM,EAAE,MAAM,IAAI,YAAY;YACtC,SAAS,EAAE,MAAM,EAAE,SAAS;YAC5B,SAAS,EAAE,MAAM,EAAE,SAAS,IAAI,YAAY;YAC5C,WAAW,EAAE,MAAM,EAAE,WAAW,IAAI,IAAI;YACxC,aAAa,EAAE,MAAM,EAAE,aAAa,IAAI,OAAO,EAAE,YAAY;SAC9D,CAAC;IACJ,CAAC;IAED,0EAA0E;IAC1E,YAAY;IACZ,0EAA0E;IAE1E;;OAEG;IACH,KAAK,CAAC,MAAM,CAAC,GAAW,EAAE,KAAa,EAAE,MAAwB;QAC/D,MAAM,CAAC,GAAG,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;QAEvC,QAAQ,CAAC,EAAE,CAAC;YACV,KAAK,YAAY;gBACf,OAAO,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACzC,KAAK,YAAY;gBACf,OAAO,IAAI,CAAC,kBAAkB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC7C,KAAK,UAAU;gBACb,OAAO,IAAI,CAAC,iBAAiB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC5C,KAAK,WAAW,CAAC;YACjB;gBACE,OAAO,IAAI,CAAC,iBAAiB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,aAAa,CAAC,OAA2B;QACvC,MAAM,GAAG,GAA2B,EAAE,CAAC;QAEvC,sDAAsD;QACtD,IAAI,OAAO,EAAE,CAAC;YACZ,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC7C,IAAI,CAAC,KAAK,SAAS;oBAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YAClC,CAAC;QACH,CAAC;QAED,kCAAkC;QAClC,KAAK,MAAM,CAAC,EAAE,SAAS,CAAC,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YAC5C,IAAI,SAAS,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;gBACtC,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;gBAC1D,IAAI,KAAK,EAAE,CAAC;oBACV,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC;gBACnC,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,GAAG,CAAC;IACb,CAAC;IAED;;;OAGG;IACH,gBAAgB,CAAC,KAAa;QAC5B,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC5C,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QAExB,wCAAwC;QACxC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACjC,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACH,cAAc;QACZ,OAAO,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC7C,GAAG,CAAC;YACJ,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,gCAAgC;SACrD,CAAC,CAAC,CAAC;IACN,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAO,CAAC,GAAW;QACvB,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC3C,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,SAAS,CAAC,OAAO,EAAE,CAAC;YAC1B,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC9B,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,KAAK,EAAE,CAAC;YACV,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAO;QACX,KAAK,MAAM,CAAC,GAAG,EAAE,SAAS,CAAC,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YAC/C,IAAI,CAAC;gBACH,MAAM,SAAS,CAAC,OAAO,EAAE,CAAC;YAC5B,CAAC;YAAC,MAAM,CAAC;gBACP,sBAAsB;YACxB,CAAC;YACD,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC9B,CAAC;QAED,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YACvC,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC1B,CAAC;QAED,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC;IAC7B,CAAC;IAED,0EAA0E;IAC1E,oBAAoB;IACpB,0EAA0E;IAElE,KAAK,CAAC,iBAAiB,CAAC,GAAW,EAAE,KAAa;QACxD,4DAA4D;QAC5D,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,aAAa,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAEzF,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACnD,MAAM,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QAEtC,yDAAyD;QACzD,IAAI,CAAC;YACH,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QAC1B,CAAC;QAAC,MAAM,CAAC;YACP,sDAAsD;QACxD,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,IAAI,EAAE;YAC9E,IAAI,CAAC;gBAAC,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,oBAAoB,CAAC,CAAC;QAC1D,CAAC,CAAC,CAAC;QAEH,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,KAAK,CAAC,cAAc,CAAC,GAAW,EAAE,KAAa;QACrD,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAG,aAAa,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACtE,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAE7C,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAEnD,MAAM,SAAS,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,YAAY,EAAE,QAAQ,EAAE,KAAK,IAAI,EAAE;YAC7E,IAAI,CAAC;gBACH,wCAAwC;gBACxC,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC;gBACxC,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;gBAClD,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;YAC1B,CAAC;YAAC,MAAM,CAAC;gBACP,iCAAiC;YACnC,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,KAAK,CAAC,kBAAkB,CAAC,GAAW,EAAE,KAAa;QACzD,MAAM,OAAO,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,GAAG,CAAC,EAAE,CAAC;QAE1F,+CAA+C;QAC/C,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAEvC,MAAM,SAAS,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,YAAY,EAAE,OAAO,EAAE,KAAK,IAAI,EAAE;YAC5E,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC;QAEH,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAAC,GAAW,EAAE,KAAa;QACxD,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7D,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAErC,MAAM,SAAS,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,IAAI,EAAE;YACxE,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACnC,CAAC,CAAC,CAAC;QAEH,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,0EAA0E;IAC1E,UAAU;IACV,0EAA0E;IAElE,eAAe,CACrB,GAAW,EACX,MAAuB,EACvB,SAAiB,EACjB,SAA8B;QAE9B,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa;YACzC,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,WAAW,EAAE;YACnE,CAAC,CAAC,IAAI,CAAC;QAET,MAAM,SAAS,GAAmB;YAChC,GAAG;YACH,MAAM;YACN,SAAS;YACT,UAAU,EAAE,GAAG,CAAC,WAAW,EAAE;YAC7B,SAAS;YACT,OAAO,EAAE,SAAS;SACnB,CAAC;QAEF,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAEpC,wBAAwB;QACxB,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;YACzD,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,IAAI,EAAE;gBAClC,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC1B,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;YAC9B,IAAI,KAAK,CAAC,KAAK;gBAAE,KAAK,CAAC,KAAK,EAAE,CAAC;YAC/B,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC9B,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,YAAY;QAClB,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS;YAAE,OAAO,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;QAExD,6CAA6C;QAC7C,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC9D,OAAO,UAAU,CAAC;QACpB,CAAC;QAED,iCAAiC;QACjC,OAAO,EAAE,CAAC,MAAM,EAAE,CAAC;IACrB,CAAC;CACF"}

package/dist/src/vault/secret-leak-detector.d.ts

@@ -0,0 +1,94 @@
+/**
+ * Secret Leak Detector
+ *
+ * Monitors for accidental secret leakage through common vectors:
+ *
+ * - Environment variables visible to child processes
+ * - Process arguments (visible via `ps`)
+ * - stdout/stderr output
+ * - Log files
+ *
+ * When a leak is detected, the detector can:
+ * 1. Emit an event for audit logging
+ * 2. Attempt automatic remediation (e.g. redact from env)
+ * 3. Optionally rotate the leaked secret
+ */
+import type { LeakDetectionEvent, LeakSeverity } from './safehouse-types.js';
+export type LeakEventCallback = (event: LeakDetectionEvent) => void;
+export interface LeakDetectorOptions {
+    /** Callback invoked on each leak detection event */
+    onLeak?: LeakEventCallback;
+    /** Whether to auto-remediate detected leaks (default: true) */
+    autoRemediate?: boolean;
+    /** Whether to scan process.argv (default: true) */
+    scanProcessArgs?: boolean;
+    /** Whether to scan process.env (default: true) */
+    scanEnv?: boolean;
+}
+export declare class SecretLeakDetector {
+    private readonly tracked;
+    private readonly events;
+    private readonly onLeak;
+    private readonly autoRemediate;
+    private readonly scanProcessArgs;
+    private readonly scanEnv;
+    /**
+     * Captured original stdout.write so we can intercept writes.
+     * We only set this up once and restore on dispose.
+     */
+    private originalStdoutWrite;
+    private originalStderrWrite;
+    private intercepting;
+    constructor(options?: LeakDetectorOptions);
+    /**
+     * Register a secret value for leak monitoring.
+     * The plaintext is fingerprinted and NOT stored.
+     */
+    track(key: string, value: string): void;
+    /**
+     * Stop tracking a secret.
+     */
+    untrack(key: string): void;
+    /**
+     * Scan the current process environment for leaked secrets.
+     * Checks if any tracked secret value appears as an env var value.
+     */
+    scanEnvironment(secretValues: Map<string, string>): LeakDetectionEvent[];
+    /**
+     * Scan process.argv for leaked secrets.
+     */
+    scanProcessArguments(secretValues: Map<string, string>): LeakDetectionEvent[];
+    /**
+     * Check if a string contains any tracked secret values.
+     * Used for scanning log output, stdout, etc.
+     */
+    scanString(text: string, source: LeakDetectionEvent['source'], secretValues: Map<string, string>): LeakDetectionEvent[];
+    /**
+     * Install stdout/stderr interceptors that redact tracked secrets.
+     * Call `dispose()` to remove the interceptors.
+     */
+    installOutputInterceptors(secretValues: Map<string, string>): void;
+    /**
+     * Remove stdout/stderr interceptors.
+     */
+    removeOutputInterceptors(): void;
+    /**
+     * Get all recorded leak events.
+     */
+    getEvents(): LeakDetectionEvent[];
+    /**
+     * Get events filtered by severity.
+     */
+    getEventsBySeverity(severity: LeakSeverity): LeakDetectionEvent[];
+    /**
+     * Clear recorded events.
+     */
+    clearEvents(): void;
+    /**
+     * Clean up interceptors and tracked secrets.
+     */
+    dispose(): void;
+    private redactSecrets;
+    private createEvent;
+}
+//# sourceMappingURL=secret-leak-detector.d.ts.map

package/dist/src/vault/secret-leak-detector.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-leak-detector.d.ts","sourceRoot":"","sources":["../../../src/vault/secret-leak-detector.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAGH,OAAO,KAAK,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAE7E,MAAM,MAAM,iBAAiB,GAAG,CAAC,KAAK,EAAE,kBAAkB,KAAK,IAAI,CAAC;AAEpE,MAAM,WAAW,mBAAmB;IAClC,oDAAoD;IACpD,MAAM,CAAC,EAAE,iBAAiB,CAAC;IAC3B,+DAA+D;IAC/D,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,mDAAmD;IACnD,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,kDAAkD;IAClD,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAeD,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAoC;IAC5D,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA4B;IACnD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA2B;IAClD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAU;IACxC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAU;IAC1C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAU;IAElC;;;OAGG;IACH,OAAO,CAAC,mBAAmB,CAA4C;IACvE,OAAO,CAAC,mBAAmB,CAA4C;IACvE,OAAO,CAAC,YAAY,CAAS;gBAEjB,OAAO,CAAC,EAAE,mBAAmB;IAWzC;;;OAGG;IACH,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI;IASvC;;OAEG;IACH,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAQ1B;;;OAGG;IACH,eAAe,CAAC,YAAY,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,kBAAkB,EAAE;IA8BxE;;OAEG;IACH,oBAAoB,CAAC,YAAY,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,kBAAkB,EAAE;IAsB7E;;;OAGG;IACH,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,kBAAkB,CAAC,QAAQ,CAAC,EAAE,YAAY,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,kBAAkB,EAAE;IAmBvH;;;OAGG;IACH,yBAAyB,CAAC,YAAY,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI;IA8BlE;;OAEG;IACH,wBAAwB,IAAI,IAAI;IAmBhC;;OAEG;IACH,SAAS,IAAI,kBAAkB,EAAE;IAIjC;;OAEG;IACH,mBAAmB,CAAC,QAAQ,EAAE,YAAY,GAAG,kBAAkB,EAAE;IAIjE;;OAEG;IACH,WAAW,IAAI,IAAI;IAInB;;OAEG;IACH,OAAO,IAAI,IAAI;IAUf,OAAO,CAAC,aAAa;IAUrB,OAAO,CAAC,WAAW;CAoBpB"}