agentvault 1.0.2 → 1.0.5

package/dist/src/wiki/wiki-store.js

@@ -0,0 +1,132 @@
+/**
+ * Wiki Store
+ *
+ * Storage adapter for wiki pages. Extends the KnowledgeStore pattern
+ * with wiki-specific operations (slug lookup, cross-ref queries, etc.).
+ *
+ * Default implementation is in-memory; consumers can inject a
+ * canister-backed or file-system adapter.
+ */
+/** In-memory implementation of WikiStore */
+export class InMemoryWikiStore {
+    pages = new Map();
+    logs = new Map();
+    schemas = new Map();
+    makeKey(wikiId, slug) {
+        return `${wikiId}:${slug}`;
+    }
+    async listPages(wikiId, filters) {
+        const results = [];
+        for (const page of this.pages.values()) {
+            if (page.companyId !== wikiId)
+                continue;
+            if (filters?.category && page.category !== filters.category)
+                continue;
+            if (filters?.status && page.status !== filters.status)
+                continue;
+            if (filters?.staleness && page.staleness !== filters.staleness)
+                continue;
+            if (filters?.tags?.length) {
+                const pageTags = page.tags ?? [];
+                if (!filters.tags.some((t) => pageTags.includes(t)))
+                    continue;
+            }
+            if (filters?.search) {
+                const term = filters.search.toLowerCase();
+                if (!page.title.toLowerCase().includes(term) &&
+                    !page.content.toLowerCase().includes(term) &&
+                    !page.slug.toLowerCase().includes(term)) {
+                    continue;
+                }
+            }
+            results.push(page);
+        }
+        return results;
+    }
+    async getPage(wikiId, slug) {
+        return this.pages.get(this.makeKey(wikiId, slug)) ?? null;
+    }
+    async getPageById(id) {
+        for (const page of this.pages.values()) {
+            if (page.id === id)
+                return page;
+        }
+        return null;
+    }
+    async createPage(page) {
+        this.pages.set(this.makeKey(page.companyId, page.slug), page);
+        return page;
+    }
+    async updatePage(wikiId, slug, partial) {
+        const key = this.makeKey(wikiId, slug);
+        const existing = this.pages.get(key);
+        if (!existing)
+            return null;
+        const updated = {
+            ...existing,
+            ...partial,
+            updatedAt: new Date().toISOString(),
+        };
+        // If slug changed, re-key
+        if (partial.slug && partial.slug !== slug) {
+            this.pages.delete(key);
+            this.pages.set(this.makeKey(wikiId, partial.slug), updated);
+        }
+        else {
+            this.pages.set(key, updated);
+        }
+        return updated;
+    }
+    async deletePage(wikiId, slug) {
+        return this.pages.delete(this.makeKey(wikiId, slug));
+    }
+    async getBacklinks(wikiId, slug) {
+        const results = [];
+        for (const page of this.pages.values()) {
+            if (page.companyId !== wikiId)
+                continue;
+            if (page.crossRefs.includes(slug)) {
+                results.push(page);
+            }
+        }
+        return results;
+    }
+    async getOrphans(wikiId) {
+        // Pages that are not referenced by any other page and reference no pages
+        const allSlugs = new Set();
+        const referencedSlugs = new Set();
+        const wikiPages = [];
+        for (const page of this.pages.values()) {
+            if (page.companyId !== wikiId)
+                continue;
+            wikiPages.push(page);
+            allSlugs.add(page.slug);
+            for (const ref of page.crossRefs) {
+                referencedSlugs.add(ref);
+            }
+        }
+        return wikiPages.filter((page) => !referencedSlugs.has(page.slug) &&
+            page.crossRefs.length === 0 &&
+            page.category !== 'index' &&
+            page.category !== 'log');
+    }
+    async appendLog(wikiId, entry) {
+        const log = this.logs.get(wikiId) ?? [];
+        log.push(entry);
+        this.logs.set(wikiId, log);
+    }
+    async getLog(wikiId, limit) {
+        const log = this.logs.get(wikiId) ?? [];
+        if (limit) {
+            return log.slice(-limit);
+        }
+        return [...log];
+    }
+    async getSchema(wikiId) {
+        return this.schemas.get(wikiId) ?? null;
+    }
+    async setSchema(wikiId, schema) {
+        this.schemas.set(wikiId, schema);
+    }
+}
+//# sourceMappingURL=wiki-store.js.map

package/dist/src/wiki/wiki-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wiki-store.js","sourceRoot":"","sources":["../../../src/wiki/wiki-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAwCH,4CAA4C;AAC5C,MAAM,OAAO,iBAAiB;IACpB,KAAK,GAAG,IAAI,GAAG,EAAoB,CAAC;IACpC,IAAI,GAAG,IAAI,GAAG,EAA0B,CAAC;IACzC,OAAO,GAAG,IAAI,GAAG,EAAsB,CAAC;IAExC,OAAO,CAAC,MAAc,EAAE,IAAY;QAC1C,OAAO,GAAG,MAAM,IAAI,IAAI,EAAE,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,MAAc,EAAE,OAAyB;QACvD,MAAM,OAAO,GAAe,EAAE,CAAC;QAC/B,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;YACvC,IAAI,IAAI,CAAC,SAAS,KAAK,MAAM;gBAAE,SAAS;YACxC,IAAI,OAAO,EAAE,QAAQ,IAAI,IAAI,CAAC,QAAQ,KAAK,OAAO,CAAC,QAAQ;gBAAE,SAAS;YACtE,IAAI,OAAO,EAAE,MAAM,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM;gBAAE,SAAS;YAChE,IAAI,OAAO,EAAE,SAAS,IAAI,IAAI,CAAC,SAAS,KAAK,OAAO,CAAC,SAAS;gBAAE,SAAS;YACzE,IAAI,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;gBAC1B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC;gBACjC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;oBAAE,SAAS;YAChE,CAAC;YACD,IAAI,OAAO,EAAE,MAAM,EAAE,CAAC;gBACpB,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;gBAC1C,IACE,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC;oBACxC,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC;oBAC1C,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,EACvC,CAAC;oBACD,SAAS;gBACX,CAAC;YACH,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrB,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,MAAc,EAAE,IAAY;QACxC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC;IAC5D,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,EAAU;QAC1B,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;YACvC,IAAI,IAAI,CAAC,EAAE,KAAK,EAAE;gBAAE,OAAO,IAAI,CAAC;QAClC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,IAAc;QAC7B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;QAC9D,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,UAAU,CACd,MAAc,EACd,IAAY,EACZ,OAA0B;QAE1B,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC;QAE3B,MAAM,OAAO,GAAa;YACxB,GAAG,QAAQ;YACX,GAAG,OAAO;YACV,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC;QAEF,0BAA0B;QAC1B,IAAI,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;YAC1C,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACvB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;QAC9D,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC/B,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,MAAc,EAAE,IAAY;QAC3C,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;IACvD,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,MAAc,EAAE,IAAY;QAC7C,MAAM,OAAO,GAAe,EAAE,CAAC;QAC/B,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;YACvC,IAAI,IAAI,CAAC,SAAS,KAAK,MAAM;gBAAE,SAAS;YACxC,IAAI,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBAClC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACrB,CAAC;QACH,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,MAAc;QAC7B,yEAAyE;QACzE,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;QACnC,MAAM,eAAe,GAAG,IAAI,GAAG,EAAU,CAAC;QAC1C,MAAM,SAAS,GAAe,EAAE,CAAC;QAEjC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;YACvC,IAAI,IAAI,CAAC,SAAS,KAAK,MAAM;gBAAE,SAAS;YACxC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACrB,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACxB,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;gBACjC,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC3B,CAAC;QACH,CAAC;QAED,OAAO,SAAS,CAAC,MAAM,CACrB,CAAC,IAAI,EAAE,EAAE,CACP,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;YAC/B,IAAI,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC;YAC3B,IAAI,CAAC,QAAQ,KAAK,OAAO;YACzB,IAAI,CAAC,QAAQ,KAAK,KAAK,CAC1B,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,MAAc,EAAE,KAAmB;QACjD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACxC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAAc,EAAE,KAAc;QACzC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACxC,IAAI,KAAK,EAAE,CAAC;YACV,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC;QAC3B,CAAC;QACD,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC;IAClB,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,MAAc;QAC5B,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC;IAC1C,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,MAAc,EAAE,MAAkB;QAChD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnC,CAAC;CACF"}

package/package.json

@@ -1,33 +1,51 @@
 {
   "name": "agentvault",
-  "version": "1.0.2",
-  "description": "Persistent On-Chain AI Agent Platform - Sovereign, Reconstructible, Autonomous",
+  "version": "1.0.5",
+  "description": "Production infrastructure for deploying and running AI agents on Internet Computer canisters",
   "main": "dist/src/index.js",
   "types": "dist/src/index.d.ts",
   "exports": {
     ".": {
       "types": "./dist/src/index.d.ts",
       "import": "./dist/src/index.js"
+    },
+    "./vault": {
+      "types": "./dist/src/vault/index.d.ts",
+      "import": "./dist/src/vault/index.js"
+    },
+    "./backbone": {
+      "types": "./dist/src/backbone/index.d.ts",
+      "import": "./dist/src/backbone/index.js"
     }
   },
   "bin": {
     "agentvault": "dist/cli/index.js"
   },
+  "files": [
+    "dist/src",
+    "dist/cli",
+    "README.md",
+    "LICENSE",
+    "CHANGELOG.md"
+  ],
   "type": "module",
   "scripts": {
     "dev": "npm run dev:core",
     "dev:core": "tsx watch src/index.ts",
     "dev:webapp": "npm --prefix webapp run dev",
     "dev:dashboard": "node scripts/dev-dashboard.mjs",
+    "clean": "node -e \"fs.rmSync('dist', { recursive: true, force: true })\"",
     "build": "tsc",
-    "start": "node dist/index.js",
+    "prepack": "npm run clean && npm run build",
+    "start": "node dist/src/index.js",
     "test": "vitest run",
     "test:watch": "vitest",
     "typecheck": "tsc --noEmit",
     "typecheck:webapp": "npm --prefix webapp run typecheck",
     "lint": "eslint .",
     "lint:fix": "eslint . --fix",
-    "lint:webapp": "npm --prefix webapp run lint"
+    "lint:webapp": "npm --prefix webapp run lint",
+    "audio:catfish": "tsx scripts/generate-catfish-audio.ts"
   },
   "keywords": [
     "agent",
@@ -35,7 +53,6 @@
     "icp",
     "wasm",
     "blockchain",
-    "sovereign",
     "canister",
     "internet-computer",
     "clawdbot",
@@ -44,7 +61,7 @@
     "codeline",
     "autonomous",
     "persistent",
-    "reconstructible"
+    "deployment"
   ],
   "author": "AgentVault Contributors",
   "license": "MIT",
@@ -55,12 +72,11 @@
     "@eslint/js": "^9.18.0",
     "@types/inquirer": "^9.0.9",
     "@types/node": "^22.10.0",
-    "eslint": "^9.18.0",
+    "eslint": "^9.0.0",
     "tsx": "^4.19.0",
     "typescript": "^5.7.2",
     "typescript-eslint": "^8.20.0",
-    "vitest": "^2.1.0",
-    "zod": "^4.3.6"
+    "vitest": "^4.0.18"
   },
   "dependencies": {
     "@dfinity/agent": "^3.4.3",
@@ -77,11 +93,19 @@
     "cbor-x": "^1.6.0",
     "chalk": "^5.4.1",
     "commander": "^12.1.0",
-    "esbuild": "^0.24.0",
+    "esbuild": "^0.28.1",
     "ethers": "^6.16.0",
     "execa": "^8.0.0",
     "inquirer": "^9.3.0",
     "ora": "^8.1.0",
-    "yaml": "^2.8.2"
+    "undici": "^7.25.0",
+    "yaml": "^2.8.2",
+    "zod": "^4.3.6"
+  },
+  "overrides": {
+    "brace-expansion": "^1.1.13",
+    "uuid": "^11.1.1",
+    "ws": "^8.20.1",
+    "postcss": "^8.5.10"
   }
 }

package/.claude/settings.local.json

@@ -1,9 +0,0 @@
-{
-  "permissions": {
-    "allow": [
-      "Bash(git -C /Users/johnnyclem/Desktop/Repos/AgentVault log --oneline -10)",
-      "Bash(git -C /Users/johnnyclem/Desktop/Repos/AgentVault diff HEAD package.json)",
-      "Bash(pnpm run build:*)"
-    ]
-  }
-}

package/.dfx/local/network-id

@@ -1,4 +0,0 @@
-{
-  "created": "2025-02-01 19:25:23.320109 +00:00:00",
-  "settings_digest": "a2c7b27b81377d6b5f7e38775792e6f435f034f3afc27553f2f3eed938fb7e9b"
-}

package/.next/trace

@@ -1,2 +0,0 @@
-[{"name":"next-dev","duration":358444,"timestamp":25456549822,"id":1,"tags":{},"startTime":1771290476315,"traceId":"bd0fc21499a468eb"}]
-[{"name":"generate-buildid","duration":73,"timestamp":25762683733,"id":4,"parentId":1,"tags":{},"startTime":1771290782449,"traceId":"e1799c79029c02c3"},{"name":"load-custom-routes","duration":105,"timestamp":25762683837,"id":5,"parentId":1,"tags":{},"startTime":1771290782449,"traceId":"e1799c79029c02c3"},{"name":"next-build","duration":35672,"timestamp":25762648918,"id":1,"tags":{"buildMode":"default","isTurboBuild":"false","version":"15.1.4"},"startTime":1771290782414,"traceId":"e1799c79029c02c3"}]

package/.vercel/README.txt

@@ -1,11 +0,0 @@
-> Why do I have a folder named ".vercel" in my project?
-The ".vercel" folder is created when you link a directory to a Vercel project.
-
-> What does the "project.json" file contain?
-The "project.json" file contains:
-- The ID of the Vercel project that you linked ("projectId")
-- The ID of the user or team your Vercel project is owned by ("orgId")
-
-> Should I commit the ".vercel" folder?
-No, you should not share the ".vercel" folder with anyone.
-Upon creation, it will be automatically added to your ".gitignore" file.

package/.vercel/project.json

@@ -1 +0,0 @@
-{"projectId":"prj_EhiMuGMYk4R83zWMg37kvloXRNpm","orgId":"team_nZSD33w3Dm3KxfwYqgrL4THr","projectName":"agentvault"}

package/AGENTS.md

@@ -1,43 +0,0 @@
-# Repository Guidelines
-
-## Project Structure & Module Organization
-- `src/`: core TypeScript library (packaging, deployment, security, monitoring, wallet, ICP tooling).
-- `cli/`: CLI entry points and command handlers (`cli/commands/*.ts`).
-- `canister/`: Motoko canister code and Candid interfaces.
-- `tests/`: Vitest suite (unit, integration, CLI, deployment, packaging).
-- `examples/`: sample agent projects and configs.
-- `docs/`, `AI_DOCS/`: product and design docs.
-- `dist/`, `dist-cli/`: build outputs (generated, do not edit).
-- Root configs: `dfx.json`, `icp.yaml`, `tsconfig.json`, `eslint.config.js`.
-
-## Build, Test, and Development Commands
-- `npm run dev`: run the local dev entry with `tsx` watch.
-- `npm run build`: compile TypeScript to `dist/`.
-- `npm run start`: run the built app from `dist/`.
-- `npm run test`: run Vitest in CI mode.
-- `npm run test:watch`: run Vitest in watch mode.
-- `npm run typecheck`: TypeScript typecheck without emit.
-- `npm run lint` / `npm run lint:fix`: lint and auto-fix with ESLint.
-
-## Coding Style & Naming Conventions
-- TypeScript, ESM (`module`/`moduleResolution: NodeNext`), ES2022 target.
-- 2-space indentation; keep exports explicit.
-- Use `camelCase` for variables/functions, `PascalCase` for types/classes.
-- Unused args should be prefixed with `_` (ESLint allows this).
-- Keep CLI command files in `cli/commands/` named with kebab-case (e.g., `wallet-import.ts`).
-
-## Testing Guidelines
-- Framework: Vitest.
-- Test files live under `tests/` and end with `*.test.ts`.
-- Group by domain: `tests/cli/`, `tests/deployment/`, `tests/icp/`, `tests/unit/`.
-- Prefer small, isolated tests for helpers and broader integration tests for CLI flows.
-
-## Commit & Pull Request Guidelines
-- Commit messages in this repo are plain, sentence-case descriptions (no strict prefix).
-- Keep the first line concise; add details in the body if needed.
-- PRs should include: summary of changes, relevant test output, and linked issues.
-- Add screenshots only when UX or CLI output changes are user-facing.
-
-## Security & Configuration Tips
-- Do not commit secrets; keep keys and seed phrases out of git.
-- Use `dfx` for local canister work and keep `dfx.json` in sync with canister changes.

package/PLAN_VAULT_INTEGRATION.md

@@ -1,318 +0,0 @@
-# AgentVault Vault Integration Plan
-**Date:** February 11, 2026
-**Priority:** High
-**Est. Effort:** 3-5 days
-
----
-
-## Executive Summary
-
-Integrate HashiCorp-style vault functionality into AgentVault for secure credential management. This replaces insecure credential sharing (pasting keys, storing passwords in .env files) with a proper vault that supports:
-
-- **Scoped access** — Least-privilege principle
-- **Audit trails** — Track who accessed what and when
-- **TTL/secrets** — Time-limited credentials that auto-expire
-- **Injection prevention** — Secrets never exposed to agents or CLI processes
-- **Version control** — Track changes to secrets, allow rollbacks
-
----
-
-## Current State Assessment
-
-### ✅ What's Already Built
-- **CLI framework** (`cli/commands/`) — Ready for extension
-- **Local state management** — `.agentvault/`, `agent.config.json`, `canister_ids.json`
-- **Agent config parsing** — Robust YAML/JSON config loading
-- **TypeScript interfaces** — Core types defined in `src/lib/types.ts`
-
-### ❌ What's Missing
-- **Vault client** — No integration with external vault service
-- **Secrets storage** — Credentials hardcoded or stored in `.env` files
-- **Vault-aware CLI commands** — Commands don't know about vault
-- **Webapp vault integration** — Dashboard doesn't connect to vault
-- **Audit logging** — No tracking of vault access events
-- **Secret injection** — Secrets loaded directly without TTL or versioning
-
----
-
-## Proposed Architecture
-
-```
-┌─────────────────────────────────────────────────────────────────┐
-│                    AgentVault CLI                             │
-│                                                              │
-│  ┌──────────────────────────────────────────────────────┐  │
-│  │  Commands Layer                                │  │
-│  │                                                 │  │
-│  │  init   │  status   │  fetch   │  exec   │  │  │
-│  │         │          │          │         │        │  │  │
-│  └────────┬─────────┴──────────┬────────┘  │  │
-│             │                          │               │          │  │  │
-│             ▼                          ▼               ▼          │  │  │
-│  ┌────────────────────────────────────────────────────┐  │  │
-│  │              Vault Client (New)               │  │  │
-│  │  - Connect to HashiCorp Vault                │  │  │
-│  │  - Read/write secrets with scoping         │  │  │
-│  │  - Audit trail for all operations             │  │  │
-│  │  - TTL/expiration management                 │  │  │
-│  │  - Version control for secrets              │  │  │
-│  └────────────────┬─────────────────────────────┘  │  │
-│                        │                         │          │  │
-│                        ▼                         ▼          │  │  │
-│  ┌─────────────────────────────────────────────────┐  │  │
-│  │              Webapp (Dashboard)               │  │  │
-│  │  - Optional: Connect to vault              │  │  │
-│  │  - View vault secrets (read-only)            │  │  │
-│  │  - Manage vault connection settings           │  │  │
-│  │  - View audit logs                          │  │  │
-│  └───────────────────────────────────────────────────┘  │  │
-│                                                              │
-│                         ┌────────────────────┐               │          │  │
-│                         │  Agent Vault Repo │               │          │  │
-│                         │                 │               │          │  │
-│                         │                 │               │          │  │
-└─────────────────────────┴───────────────────────────────────────┘          │  └────────┴────────────┘
-                    └─────────────────────────────────────────────────────────────────────┘
-```
-
----
-
-## Implementation Plan
-
-### Phase 1: Vault Client Library (Day 1)
-
-**Goal:** Create TypeScript client for HashiCorp Vault with full feature parity.
-
-**File:** `src/lib/vault-client.ts`
-
-**Features:**
-1. **Connection Management**
-   - Connect to vault (HTTPS with optional headers)
-   - Health checks with retries
-   - Graceful fallback when vault is unavailable
-
-2. **Secret Operations**
-   - `getSecret(path, version?)` — Read secret with versioning
-   - `setSecret(path, value, options?)` — Write secret with TTL, metadata
-   - `deleteSecret(path, version?)` — Delete secret, create new version
-   - `listSecrets(path?)` — List all secrets with versions
-   - `revokeSecret(path, version?)` — Immediately revoke secret
-
-3. **Access Control**
-   - `getPolicies()` — Retrieve access policies
-   - `checkAccess(policy, resource)` — Check if user has access
-
-4. **Audit Logging**
-   - `getAuditLog(from?, to?)` — Retrieve audit trail
-   - Local caching for offline operations
-
-**Integration Points:**
-- Extend `AgentConfig` to support `vaultUri?`
-- Update `init()` command to prompt for vault connection
-- Modify `deploy()` to optionally read wallet keys from vault
-
----
-
-### Phase 2: CLI Command Extensions (Day 1)
-
-**Goal:** Add vault-aware commands that use Vault Client.
-
-**New Commands:**
-
-1. **`cli/commands/vault.ts`** (New file)
-   - `vault: connect <url>` — Connect to vault
-   - `vault: status` — Show vault connection status
-   - `vault: ls` — List secrets (with versions)
-   - `vault: get <path>` — Get secret value
-   - `vault: set <path> <value>` — Set secret
-   - `vault: rm <path>` — Delete secret
-   - `vault: refresh` — Reconnect/validate vault connection
-
-2. **Update `cli/commands/init.ts`**
-   - Prompt: "Connect to vault? (optional)"
-   - Store `vaultUri` and `vaultToken` in `agent.config.json`
-
-3. **Update existing commands**
-   - `deploy()` — Read wallet keys from vault if available
-   - `exec()` — Support `--vault` flag for secret injection
-   - `fetch()` and `status()` — Show vault source for secrets
-
----
-
-### Phase 3: Webapp Integration (Day 2)
-
-**Goal:** Optional vault integration in dashboard.
-
-**New Files:**
-
-1. **`webapp/src/providers/VaultProvider.tsx`** (New provider)
-   - Vault connection state
-   - Methods: `connect()`, `disconnect()`, `isConnected()`, `getSecret()`
-
-2. **`webapp/src/hooks/useVault.ts`** (New hook)
-   - Consume VaultProvider across app
-   - Handle vault unavailability gracefully
-
-3. **`webapp/src/app/(dashboard)/settings/page.tsx`** (Update)
-   - Add vault connection settings form:
-     - Vault URL
-     - Connection status indicator
-     - Test connection button
-     - Disconnect button
-
-4. **`webapp/src/components/common/VaultStatus.tsx`** (New component)
-   - Badge showing "Vault" or "Local" status
-
----
-
-### Phase 4: Configuration & Migration (Day 2-3)
-
-**Goal:** Existing user support and migration path.
-
-**Migration Options:**
-
-1. **Option A: Automatic Migration** (Recommended)
-   - Detect existing `.agentvault/` config
-   - Prompt: "Would you like to connect to HashiCorp Vault?"
-   - Create vault connection with `vault: connect`
-   - Migrate secrets to vault automatically
-
-2. **Option B: Manual Setup** (For Control)
-   - Add `VAULT_URI` and `VAULT_TOKEN` to `.agentvault/config.yaml`
-   - User manually runs `agentvault vault: connect`
-   - Explicit control over when vault is used
-
----
-
-## Secret Schema (Local File Fallback)
-
-If vault is unavailable, fall back to encrypted local storage:
-
-**File:** `~/.agentvault/secrets.json`
-
-**Schema:**
-```json
-{
-  "$schema": "https://agentvault.com/schema/v1",
-  "secrets": {
-    "claude_api_key": {
-      "value": "sk-...",
-      "version": "v1",
-      "created_at": "2026-02-11T...",
-      "last_access": "2026-02-11T...",
-      "metadata": {
-        "purpose": "AI inference",
-        "source": "user_provided"
-      }
-    },
-    "wallet_private_key": {
-      "value": "0x...",
-      "version": "v1",
-      "created_at": "2026-02-11T...",
-      "metadata": {
-        "chain": "ethereum",
-        "purpose": "agent_wallet"
-      }
-    }
-  },
-  "$version": "v1"
-}
-```
-
-**Features:**
-- AES-256 encryption with PBKDF2
-- Version history (up to 10 versions per secret)
-- Last-access timestamps
-- Purpose/metadata tagging
-- Read/write via VaultClient (primary) or local fallback
-
----
-
-## Security Considerations
-
-### ✅ Benefits
-- **No more pasting keys** — Secret exposure eliminated
-- **Audit trails** — All vault operations logged
-- **Scoped access** — Agents only access what they need
-- **Revocation** — Compromised secrets can be revoked immediately
-- **TTL policies** — Secrets auto-expire, reducing risk window
-
-### ⚠️ Risks to Mitigate
-- **Vault dependency** — If vault is down, agent operations fail
-  - Mitigation: Local encrypted file fallback
-  - Mitigation: Cache secrets in memory during vault connections
-- **Token compromise** — If vault token stolen, attacker has access
-  - Mitigation: Token rotation workflow (admin revokes, user generates new)
-- **DoS attacks** — Vault rate limits could block legitimate agents
-  - Mitigation: Exponential backoff, local caching
-
----
-
-## Testing Strategy
-
-### Unit Tests
-```typescript
-// tests/vault-client.test.ts
-describe('Vault Client', () => {
-  it('connects to vault', async () => {
-    const client = new VaultClient('http://localhost:8200');
-    await client.connect('test-token');
-    expect(client.isConnected()).toBe(true);
-  });
-
-  it('handles vault unavailability', async () => {
-    const client = new VaultClient('http://localhost:8200');
-    await client.connect('test-token');
-    expect(await client.getSecret('/test')).toEqual('test-value');
-  });
-});
-```
-
-### Integration Tests
-```bash
-# Test vault integration with CLI
-agentvault deploy --vault-secret /claude_api_key
-agentvault deploy --vault-secret /wallet_private_key
-agentvault exec --agent-id abc123 --vault-secret /api_key
-```
-
----
-
-## Success Criteria
-
-- [ ] Vault client library created with full feature parity
-- [ ] CLI commands extended with vault operations
-- [ ] Webapp vault provider added (optional integration)
-- [ ] Vault connection settings in dashboard
-- [ ] Migration guide for existing users
-- [ ] Local encrypted secrets fallback implemented
-- [ ] All tests passing (existing + new vault tests)
-- [ ] Documentation updated
-
----
-
-## Open Questions
-
-1. **Vault service?** Should we self-host HashiCorp Vault, use HCP Vault, or integrate with existing vault service?
-
-2. **Migration priority?** Should vault integration be opt-in (manual) or automatic for new users?
-
-3. **Scope granularity?** How detailed should secret scoping be? (per-secret, per-app, per-user?)
-
-4. **TTL defaults?** What should default secret expiration be? (1 hour, 24 hours, 7 days?)
-
----
-
-## Next Steps
-
-1. **Review and approve** this plan with user
-2. **Create implementation branch:** `feature/vault-integration`
-3. **Implement Phase 1** (Vault Client Library)
-4. **Implement Phase 2** (CLI Commands)
-5. **Implement Phase 3** (Webapp Integration)
-6. **Test thoroughly** (unit + integration + migration)
-7. **Merge to main** when ready
-
----
-
-*This plan balances feature completeness with pragmatic implementation, considering both new users (need migration) and existing workflows (local fallback).*

package/dist/vitest.config.d.ts

@@ -1,3 +0,0 @@
-declare const _default: import("vite").UserConfig;
-export default _default;
-//# sourceMappingURL=vitest.config.d.ts.map

package/dist/vitest.config.js

@@ -1,14 +0,0 @@
-import { defineConfig } from 'vitest/config';
-export default defineConfig({
-    test: {
-        globals: false,
-        environment: 'node',
-        include: ['tests/**/*.test.ts'],
-        coverage: {
-            provider: 'v8',
-            reporter: ['text', 'json', 'html'],
-            exclude: ['node_modules/', 'dist/', 'tests/'],
-        },
-    },
-});
-//# sourceMappingURL=vitest.config.js.map