aquaman-proxy 0.15.0 → 0.17.0

package/dist/openshell/credential-driver.d.ts

@@ -0,0 +1,117 @@
+/**
+ * OpenShell external credential driver (v0.17.0): the transport-free core.
+ *
+ * NVIDIA OpenShell keeps provider credentials behind opaque handles owned by a
+ * credential driver (`credential_driver.proto`, extension protocol 1.0). The
+ * gateway calls Store when a provider is created, Resolve when a sandbox
+ * starts, and Delete when a provider is removed. Its supervisor injects the
+ * resolved value at egress while the sandbox sees only a placeholder, so
+ * OpenShell does the isolation; aquaman supplies the value from the user's
+ * vault, scopes it and audits it.
+ *
+ * Two modes, chosen by the value the gateway submits:
+ *   - reference: the value is an `aquaman://service/key` ref
+ *     (`openshell provider create --credential KEY=aquaman://svc/key`). It must
+ *     be declared (same scope as the broker) and present in the vault. Nothing
+ *     is stored; the ref itself is the handle. Delete is a no-op, so removing a
+ *     provider never deletes the user's own vault item.
+ *   - copy: any other value is written to the vault under the gateway-owned
+ *     `openshell` service, keyed by OpenShell's object id and credential key.
+ *
+ * The meaning of a handle comes from its namespace, never from the metadata
+ * the gateway echoes back: `aquaman://openshell/...` is a gateway-owned copy,
+ * anything else is a reference and is re-checked against the scope on every
+ * Resolve (a revoked declaration stops resolving). Otherwise a caller could
+ * label `aquaman://github/token` as a copy to skip the scope.
+ *
+ * Verified against OpenShell 0.1.2 (2026-10-02): the gateway authenticates
+ * nothing on the socket (only a user-agent header), so the socket's 0600 mode
+ * is the boundary; it does not validate the submitted value's format; it
+ * resolves about once per sandbox start, not per request; it never calls
+ * ListCredentials.
+ */
+import type { CredentialStore } from '../core/credentials/store.js';
+import { type BrokerScope } from '../broker-scope.js';
+export declare const OPENSHELL_PROTOCOL: {
+    readonly major: 1;
+    readonly minor: 0;
+};
+export declare const CREDENTIALS_CONTRACT = "openshell.credentials.contract";
+/** Vault service that holds gateway-submitted copies. */
+export declare const COPY_SERVICE = "openshell";
+export declare const DRIVER_NAME = "aquaman";
+export type DriverErrorCode = 'invalid_argument' | 'not_found' | 'failed_precondition' | 'internal';
+/** A refusal or failure carried back to the gateway (mapped to a gRPC status by the transport). */
+export declare class DriverError extends Error {
+    readonly code: DriverErrorCode;
+    constructor(code: DriverErrorCode, message: string);
+}
+export interface PeerMetadata {
+    protocol_version?: {
+        major?: number;
+        minor?: number;
+    };
+    implementation_name?: string;
+    implementation_version?: string;
+    supported_capabilities?: string[];
+    required_capabilities?: string[];
+}
+export interface CredentialHandle {
+    driver?: string;
+    handle?: string;
+    metadata?: Record<string, string>;
+}
+export interface StoreRequest {
+    provider?: string;
+    credential_key?: string;
+    value?: string;
+    workspace?: string;
+    provider_id?: string;
+    object_id?: string;
+}
+export interface ResolveRequest {
+    request_id?: string;
+    provider?: string;
+    credential_key?: string;
+    handle?: CredentialHandle | null;
+}
+export interface DeleteRequest {
+    provider?: string;
+    credential_key?: string;
+    handle?: CredentialHandle | null;
+}
+/** One driver operation, for the audit log. Never carries a credential value. */
+export interface DriverAccessEvent {
+    op: 'store' | 'resolve' | 'delete';
+    mode: 'reference' | 'copy';
+    ref: string;
+    service: string;
+    provider: string;
+    success: boolean;
+    error?: string;
+}
+export interface OpenShellDriverOptions {
+    store: CredentialStore;
+    /** Declared-ref scope shared with the broker. Absent means the broker is off: references are refused. */
+    scope?: BrokerScope;
+    version: string;
+    onAccess?: (event: DriverAccessEvent) => void;
+}
+export interface OpenShellDriverCore {
+    getCapabilities(gateway: PeerMetadata | null | undefined): Record<string, unknown>;
+    store(req: StoreRequest): Promise<{
+        handle: CredentialHandle;
+    }>;
+    resolve(reqs: ResolveRequest[]): Promise<{
+        request_id: string;
+        value: string;
+    }[]>;
+    delete(req: DeleteRequest): Promise<void>;
+    list(): {
+        handle: string;
+        keys: string[];
+        metadata: Record<string, string>;
+    }[];
+}
+export declare function createOpenShellDriverCore(opts: OpenShellDriverOptions): OpenShellDriverCore;
+//# sourceMappingURL=credential-driver.d.ts.map

package/dist/openshell/credential-driver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential-driver.d.ts","sourceRoot":"","sources":["../../src/openshell/credential-driver.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,EAAqC,KAAK,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEzF,eAAO,MAAM,kBAAkB;;;CAAkC,CAAC;AAClE,eAAO,MAAM,oBAAoB,mCAAmC,CAAC;AACrE,yDAAyD;AACzD,eAAO,MAAM,YAAY,cAAc,CAAC;AACxC,eAAO,MAAM,WAAW,YAAY,CAAC;AAIrC,MAAM,MAAM,eAAe,GAAG,kBAAkB,GAAG,WAAW,GAAG,qBAAqB,GAAG,UAAU,CAAC;AAEpG,mGAAmG;AACnG,qBAAa,WAAY,SAAQ,KAAK;IACxB,QAAQ,CAAC,IAAI,EAAE,eAAe;gBAArB,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM;CAI5D;AAED,MAAM,WAAW,YAAY;IAC3B,gBAAgB,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACtD,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,sBAAsB,CAAC,EAAE,MAAM,EAAE,CAAC;IAClC,qBAAqB,CAAC,EAAE,MAAM,EAAE,CAAC;CAClC;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACnC;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,cAAc;IAC7B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,MAAM,CAAC,EAAE,gBAAgB,GAAG,IAAI,CAAC;CAClC;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,MAAM,CAAC,EAAE,gBAAgB,GAAG,IAAI,CAAC;CAClC;AAED,iFAAiF;AACjF,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,OAAO,GAAG,SAAS,GAAG,QAAQ,CAAC;IACnC,IAAI,EAAE,WAAW,GAAG,MAAM,CAAC;IAC3B,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,eAAe,CAAC;IACvB,yGAAyG;IACzG,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,iBAAiB,KAAK,IAAI,CAAC;CAC/C;AAED,MAAM,WAAW,mBAAmB;IAClC,eAAe,CAAC,OAAO,EAAE,YAAY,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnF,KAAK,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,gBAAgB,CAAA;KAAE,CAAC,CAAC;IAChE,OAAO,CAAC,IAAI,EAAE,cAAc,EAAE,GAAG,OAAO,CAAC;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC,CAAC;IAClF,MAAM,CAAC,GAAG,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1C,IAAI,IAAI;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,EAAE,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KAAE,EAAE,CAAC;CAChF;AAUD,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,sBAAsB,GAAG,mBAAmB,CA4H3F"}

package/dist/openshell/credential-driver.js

@@ -0,0 +1,181 @@
+/**
+ * OpenShell external credential driver (v0.17.0): the transport-free core.
+ *
+ * NVIDIA OpenShell keeps provider credentials behind opaque handles owned by a
+ * credential driver (`credential_driver.proto`, extension protocol 1.0). The
+ * gateway calls Store when a provider is created, Resolve when a sandbox
+ * starts, and Delete when a provider is removed. Its supervisor injects the
+ * resolved value at egress while the sandbox sees only a placeholder, so
+ * OpenShell does the isolation; aquaman supplies the value from the user's
+ * vault, scopes it and audits it.
+ *
+ * Two modes, chosen by the value the gateway submits:
+ *   - reference: the value is an `aquaman://service/key` ref
+ *     (`openshell provider create --credential KEY=aquaman://svc/key`). It must
+ *     be declared (same scope as the broker) and present in the vault. Nothing
+ *     is stored; the ref itself is the handle. Delete is a no-op, so removing a
+ *     provider never deletes the user's own vault item.
+ *   - copy: any other value is written to the vault under the gateway-owned
+ *     `openshell` service, keyed by OpenShell's object id and credential key.
+ *
+ * The meaning of a handle comes from its namespace, never from the metadata
+ * the gateway echoes back: `aquaman://openshell/...` is a gateway-owned copy,
+ * anything else is a reference and is re-checked against the scope on every
+ * Resolve (a revoked declaration stops resolving). Otherwise a caller could
+ * label `aquaman://github/token` as a copy to skip the scope.
+ *
+ * Verified against OpenShell 0.1.2 (2026-10-02): the gateway authenticates
+ * nothing on the socket (only a user-agent header), so the socket's 0600 mode
+ * is the boundary; it does not validate the submitted value's format; it
+ * resolves about once per sandbox start, not per request; it never calls
+ * ListCredentials.
+ */
+import { formatAquamanRef, parseAquamanRef } from '../broker-scope.js';
+export const OPENSHELL_PROTOCOL = { major: 1, minor: 0 };
+export const CREDENTIALS_CONTRACT = 'openshell.credentials.contract';
+/** Vault service that holds gateway-submitted copies. */
+export const COPY_SERVICE = 'openshell';
+export const DRIVER_NAME = 'aquaman';
+const SAFE_KEY = /^[a-zA-Z0-9][a-zA-Z0-9._-]*$/;
+/** A refusal or failure carried back to the gateway (mapped to a gRPC status by the transport). */
+export class DriverError extends Error {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+        this.name = 'DriverError';
+    }
+}
+function parseHandle(handle) {
+    const parsed = parseAquamanRef(handle);
+    if (!parsed)
+        return null;
+    return { mode: parsed.service === COPY_SERVICE ? 'copy' : 'reference', ...parsed, ref: handle };
+}
+export function createOpenShellDriverCore(opts) {
+    const { store, scope, onAccess } = opts;
+    const emit = (e) => {
+        try {
+            onAccess?.(e);
+        }
+        catch { /* auditing must not break the driver */ }
+    };
+    const checkScope = (service, key) => {
+        if (!scope) {
+            throw new DriverError('failed_precondition', `aquaman: the broker is disabled (broker.enabled: false), so ${formatAquamanRef(service, key)} cannot be resolved. Fix: enable the broker in ~/.aquaman/config.yaml`);
+        }
+        const decision = scope.check(service, key, 'uds');
+        if (!decision.allowed) {
+            throw new DriverError('failed_precondition', `aquaman: ${decision.reason}. Fix: aquaman broker allow ${formatAquamanRef(service, key)}`);
+        }
+    };
+    return {
+        getCapabilities(gateway) {
+            const major = gateway?.protocol_version?.major;
+            if (major !== undefined && major !== OPENSHELL_PROTOCOL.major) {
+                throw new DriverError('failed_precondition', `aquaman: gateway speaks credential driver protocol ${major}.x, aquaman supports ${OPENSHELL_PROTOCOL.major}.${OPENSHELL_PROTOCOL.minor}`);
+            }
+            const missing = (gateway?.required_capabilities ?? []).filter((c) => c !== CREDENTIALS_CONTRACT);
+            if (missing.length > 0) {
+                throw new DriverError('failed_precondition', `aquaman: gateway requires unsupported capabilities: ${missing.join(', ')}`);
+            }
+            return {
+                driver_name: DRIVER_NAME,
+                driver_version: opts.version,
+                backend_kind: DRIVER_NAME,
+                supports_list: true,
+                supports_expires_at: false,
+                extension: {
+                    protocol_version: { ...OPENSHELL_PROTOCOL },
+                    implementation_name: 'aquaman/openshell',
+                    implementation_version: opts.version,
+                    supported_capabilities: [CREDENTIALS_CONTRACT],
+                    required_capabilities: [CREDENTIALS_CONTRACT],
+                },
+            };
+        },
+        async store(req) {
+            const provider = req.provider ?? '';
+            const value = req.value ?? '';
+            if (!value)
+                throw new DriverError('invalid_argument', 'aquaman: empty credential value');
+            if (value.startsWith('aquaman://')) {
+                const parsed = parseAquamanRef(value);
+                if (!parsed || parsed.service === COPY_SERVICE) {
+                    throw new DriverError('invalid_argument', `aquaman: ${value} is not a valid aquaman://service/key reference`);
+                }
+                try {
+                    checkScope(parsed.service, parsed.key);
+                    if (!(await store.exists(parsed.service, parsed.key))) {
+                        throw new DriverError('not_found', `aquaman: ${value} is not in the vault. Fix: aquaman credentials add ${parsed.service} ${parsed.key}`);
+                    }
+                }
+                catch (err) {
+                    emit({ op: 'store', mode: 'reference', ref: value, service: parsed.service, provider, success: false, error: err.message });
+                    throw err;
+                }
+                emit({ op: 'store', mode: 'reference', ref: value, service: parsed.service, provider, success: true });
+                return { handle: { driver: DRIVER_NAME, handle: value, metadata: { mode: 'reference' } } };
+            }
+            const owner = req.object_id || req.provider_id || '';
+            const key = `${owner}.${req.credential_key ?? ''}`;
+            if (!owner || !req.credential_key || !SAFE_KEY.test(key)) {
+                throw new DriverError('invalid_argument', `aquaman: cannot derive a vault key from provider id ${JSON.stringify(owner)} and credential key ${JSON.stringify(req.credential_key)}`);
+            }
+            const ref = formatAquamanRef(COPY_SERVICE, key);
+            try {
+                await store.set(COPY_SERVICE, key, value);
+            }
+            catch (err) {
+                emit({ op: 'store', mode: 'copy', ref, service: COPY_SERVICE, provider, success: false, error: err.message });
+                throw new DriverError('internal', `aquaman: vault write failed: ${err.message}`);
+            }
+            emit({ op: 'store', mode: 'copy', ref, service: COPY_SERVICE, provider, success: true });
+            return { handle: { driver: DRIVER_NAME, handle: ref, metadata: { mode: 'copy' } } };
+        },
+        async resolve(reqs) {
+            const out = [];
+            for (const r of reqs) {
+                const provider = r.provider ?? '';
+                const h = parseHandle(r.handle?.handle ?? '');
+                if (!h)
+                    throw new DriverError('invalid_argument', `aquaman: not an aquaman handle: ${JSON.stringify(r.handle?.handle ?? '')}`);
+                let value;
+                try {
+                    if (h.mode === 'reference')
+                        checkScope(h.service, h.key);
+                    value = await store.get(h.service, h.key);
+                    if (value === null) {
+                        throw new DriverError('not_found', `aquaman: ${h.ref} is not in the vault. Fix: aquaman credentials add ${h.service} ${h.key}`);
+                    }
+                }
+                catch (err) {
+                    emit({ op: 'resolve', mode: h.mode, ref: h.ref, service: h.service, provider, success: false, error: err.message });
+                    if (err instanceof DriverError)
+                        throw err;
+                    throw new DriverError('internal', `aquaman: vault read failed for ${h.ref}: ${err.message}`);
+                }
+                emit({ op: 'resolve', mode: h.mode, ref: h.ref, service: h.service, provider, success: true });
+                out.push({ request_id: r.request_id ?? '', value });
+            }
+            return out;
+        },
+        async delete(req) {
+            const provider = req.provider ?? '';
+            const h = parseHandle(req.handle?.handle ?? '');
+            if (!h)
+                throw new DriverError('invalid_argument', `aquaman: not an aquaman handle: ${JSON.stringify(req.handle?.handle ?? '')}`);
+            // A reference points at the user's own vault item: removing the provider must not delete it.
+            if (h.mode === 'copy')
+                await store.delete(h.service, h.key);
+            emit({ op: 'delete', mode: h.mode, ref: h.ref, service: h.service, provider, success: true });
+        },
+        list() {
+            return (scope?.declared() ?? []).map(({ ref, source }) => {
+                const parsed = parseAquamanRef(ref);
+                return { handle: ref, keys: [parsed.key], metadata: { source, mode: 'reference' } };
+            });
+        },
+    };
+}
+//# sourceMappingURL=credential-driver.js.map

package/dist/openshell/credential-driver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential-driver.js","sourceRoot":"","sources":["../../src/openshell/credential-driver.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAGH,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAoB,MAAM,oBAAoB,CAAC;AAEzF,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAW,CAAC;AAClE,MAAM,CAAC,MAAM,oBAAoB,GAAG,gCAAgC,CAAC;AACrE,yDAAyD;AACzD,MAAM,CAAC,MAAM,YAAY,GAAG,WAAW,CAAC;AACxC,MAAM,CAAC,MAAM,WAAW,GAAG,SAAS,CAAC;AAErC,MAAM,QAAQ,GAAG,8BAA8B,CAAC;AAIhD,mGAAmG;AACnG,MAAM,OAAO,WAAY,SAAQ,KAAK;IACf;IAArB,YAAqB,IAAqB,EAAE,OAAe;QACzD,KAAK,CAAC,OAAO,CAAC,CAAC;QADI,SAAI,GAAJ,IAAI,CAAiB;QAExC,IAAI,CAAC,IAAI,GAAG,aAAa,CAAC;IAC5B,CAAC;CACF;AAmED,SAAS,WAAW,CAAC,MAAc;IACjC,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IACvC,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,OAAO,KAAK,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC;AAClG,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,IAA4B;IACpE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC;IAExC,MAAM,IAAI,GAAG,CAAC,CAAoB,EAAE,EAAE;QACpC,IAAI,CAAC;YAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,wCAAwC,CAAC,CAAC;IAC3E,CAAC,CAAC;IAEF,MAAM,UAAU,GAAG,CAAC,OAAe,EAAE,GAAW,EAAQ,EAAE;QACxD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,WAAW,CAAC,qBAAqB,EACzC,+DAA+D,gBAAgB,CAAC,OAAO,EAAE,GAAG,CAAC,uEAAuE,CAAC,CAAC;QAC1K,CAAC;QACD,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;QAClD,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;YACtB,MAAM,IAAI,WAAW,CAAC,qBAAqB,EAAE,YAAY,QAAQ,CAAC,MAAM,+BAA+B,gBAAgB,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QAC3I,CAAC;IACH,CAAC,CAAC;IAEF,OAAO;QACL,eAAe,CAAC,OAAO;YACrB,MAAM,KAAK,GAAG,OAAO,EAAE,gBAAgB,EAAE,KAAK,CAAC;YAC/C,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,kBAAkB,CAAC,KAAK,EAAE,CAAC;gBAC9D,MAAM,IAAI,WAAW,CAAC,qBAAqB,EACzC,sDAAsD,KAAK,wBAAwB,kBAAkB,CAAC,KAAK,IAAI,kBAAkB,CAAC,KAAK,EAAE,CAAC,CAAC;YAC/I,CAAC;YACD,MAAM,OAAO,GAAG,CAAC,OAAO,EAAE,qBAAqB,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,oBAAoB,CAAC,CAAC;YACjG,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACvB,MAAM,IAAI,WAAW,CAAC,qBAAqB,EAAE,uDAAuD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC5H,CAAC;YACD,OAAO;gBACL,WAAW,EAAE,WAAW;gBACxB,cAAc,EAAE,IAAI,CAAC,OAAO;gBAC5B,YAAY,EAAE,WAAW;gBACzB,aAAa,EAAE,IAAI;gBACnB,mBAAmB,EAAE,KAAK;gBAC1B,SAAS,EAAE;oBACT,gBAAgB,EAAE,EAAE,GAAG,kBAAkB,EAAE;oBAC3C,mBAAmB,EAAE,mBAAmB;oBACxC,sBAAsB,EAAE,IAAI,CAAC,OAAO;oBACpC,sBAAsB,EAAE,CAAC,oBAAoB,CAAC;oBAC9C,qBAAqB,EAAE,CAAC,oBAAoB,CAAC;iBAC9C;aACF,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,KAAK,CAAC,GAAG;YACb,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC;YACpC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;YAC9B,IAAI,CAAC,KAAK;gBAAE,MAAM,IAAI,WAAW,CAAC,kBAAkB,EAAE,iCAAiC,CAAC,CAAC;YAEzF,IAAI,KAAK,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;gBACnC,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;gBACtC,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,OAAO,KAAK,YAAY,EAAE,CAAC;oBAC/C,MAAM,IAAI,WAAW,CAAC,kBAAkB,EAAE,YAAY,KAAK,iDAAiD,CAAC,CAAC;gBAChH,CAAC;gBACD,IAAI,CAAC;oBACH,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;oBACvC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;wBACtD,MAAM,IAAI,WAAW,CAAC,WAAW,EAAE,YAAY,KAAK,sDAAsD,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;oBAC5I,CAAC;gBACH,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,IAAI,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;oBACvI,MAAM,GAAG,CAAC;gBACZ,CAAC;gBACD,IAAI,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;gBACvG,OAAO,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;YAC7F,CAAC;YAED,MAAM,KAAK,GAAG,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC;YACrD,MAAM,GAAG,GAAG,GAAG,KAAK,IAAI,GAAG,CAAC,cAAc,IAAI,EAAE,EAAE,CAAC;YACnD,IAAI,CAAC,KAAK,IAAI,CAAC,GAAG,CAAC,cAAc,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBACzD,MAAM,IAAI,WAAW,CAAC,kBAAkB,EAAE,uDAAuD,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,uBAAuB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;YACrL,CAAC;YACD,MAAM,GAAG,GAAG,gBAAgB,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;YAChD,IAAI,CAAC;gBACH,MAAM,KAAK,CAAC,GAAG,CAAC,YAAY,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;YAC5C,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;gBACzH,MAAM,IAAI,WAAW,CAAC,UAAU,EAAE,gCAAiC,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;YAC9F,CAAC;YACD,IAAI,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;YACzF,OAAO,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;QACtF,CAAC;QAED,KAAK,CAAC,OAAO,CAAC,IAAI;YAChB,MAAM,GAAG,GAA4C,EAAE,CAAC;YACxD,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;gBACrB,MAAM,QAAQ,GAAG,CAAC,CAAC,QAAQ,IAAI,EAAE,CAAC;gBAClC,MAAM,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC;gBAC9C,IAAI,CAAC,CAAC;oBAAE,MAAM,IAAI,WAAW,CAAC,kBAAkB,EAAE,mCAAmC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;gBAC/H,IAAI,KAAoB,CAAC;gBACzB,IAAI,CAAC;oBACH,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW;wBAAE,UAAU,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC;oBACzD,KAAK,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC;oBAC1C,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;wBACnB,MAAM,IAAI,WAAW,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC,GAAG,sDAAsD,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;oBAClI,CAAC;gBACH,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,IAAI,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;oBAC/H,IAAI,GAAG,YAAY,WAAW;wBAAE,MAAM,GAAG,CAAC;oBAC1C,MAAM,IAAI,WAAW,CAAC,UAAU,EAAE,kCAAkC,CAAC,CAAC,GAAG,KAAM,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;gBAC1G,CAAC;gBACD,IAAI,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC/F,GAAG,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YACtD,CAAC;YACD,OAAO,GAAG,CAAC;QACb,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,GAAG;YACd,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC;YACpC,MAAM,CAAC,GAAG,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC;YAChD,IAAI,CAAC,CAAC;gBAAE,MAAM,IAAI,WAAW,CAAC,kBAAkB,EAAE,mCAAmC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;YACjI,6FAA6F;YAC7F,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM;gBAAE,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC;YAC5D,IAAI,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAChG,CAAC;QAED,IAAI;YACF,OAAO,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE;gBACvD,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,CAAE,CAAC;gBACrC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,CAAC;YACtF,CAAC,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/openshell/grpc-server.d.ts

@@ -0,0 +1,23 @@
+/**
+ * gRPC transport for the OpenShell credential driver. Serves
+ * `openshell.credentials.v1.CredentialDriver` on a Unix socket (mode 0600).
+ *
+ * `@grpc/grpc-js` and `@grpc/proto-loader` are optional peer dependencies,
+ * loaded only here, so installs that never enable the driver carry neither
+ * (the same posture as kdbxweb/argon2 for KeePassXC).
+ */
+import { type OpenShellDriverCore } from './credential-driver.js';
+export declare const GRPC_INSTALL_HINT = "npm install -g @grpc/grpc-js@^1.14 @grpc/proto-loader@^0.8";
+/** Vendored protos: packages/proxy/proto/openshell, from both src/openshell and dist/openshell. */
+export declare function openshellProtoDir(): string;
+/** Throws with an install hint when the optional gRPC packages are missing. */
+export declare function loadGrpc(): Promise<{
+    grpc: any;
+    protoLoader: any;
+}>;
+export interface OpenShellDriverServer {
+    socketPath: string;
+    stop(): Promise<void>;
+}
+export declare function startOpenShellDriverServer(core: OpenShellDriverCore, socketPath: string): Promise<OpenShellDriverServer>;
+//# sourceMappingURL=grpc-server.d.ts.map

package/dist/openshell/grpc-server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"grpc-server.d.ts","sourceRoot":"","sources":["../../src/openshell/grpc-server.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,OAAO,EAAe,KAAK,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAE/E,eAAO,MAAM,iBAAiB,+DAA+D,CAAC;AAE9F,mGAAmG;AACnG,wBAAgB,iBAAiB,IAAI,MAAM,CAE1C;AAED,+EAA+E;AAC/E,wBAAsB,QAAQ,IAAI,OAAO,CAAC;IAAE,IAAI,EAAE,GAAG,CAAC;IAAC,WAAW,EAAE,GAAG,CAAA;CAAE,CAAC,CAQzE;AAED,MAAM,WAAW,qBAAqB;IACpC,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACvB;AAED,wBAAsB,0BAA0B,CAAC,IAAI,EAAE,mBAAmB,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAyE9H"}

package/dist/openshell/grpc-server.js

@@ -0,0 +1,122 @@
+/**
+ * gRPC transport for the OpenShell credential driver. Serves
+ * `openshell.credentials.v1.CredentialDriver` on a Unix socket (mode 0600).
+ *
+ * `@grpc/grpc-js` and `@grpc/proto-loader` are optional peer dependencies,
+ * loaded only here, so installs that never enable the driver carry neither
+ * (the same posture as kdbxweb/argon2 for KeePassXC).
+ */
+import * as fs from 'node:fs';
+import { fileURLToPath } from 'node:url';
+import { DriverError } from './credential-driver.js';
+export const GRPC_INSTALL_HINT = 'npm install -g @grpc/grpc-js@^1.14 @grpc/proto-loader@^0.8';
+/** Vendored protos: packages/proxy/proto/openshell, from both src/openshell and dist/openshell. */
+export function openshellProtoDir() {
+    return fileURLToPath(new URL('../../proto/openshell/', import.meta.url));
+}
+/** Throws with an install hint when the optional gRPC packages are missing. */
+export async function loadGrpc() {
+    try {
+        const grpc = await import('@grpc/grpc-js');
+        const protoLoader = await import('@grpc/proto-loader');
+        return { grpc: grpc.default ?? grpc, protoLoader: protoLoader.default ?? protoLoader };
+    }
+    catch {
+        throw new Error(`The OpenShell credential driver needs the optional gRPC packages. Install them with: ${GRPC_INSTALL_HINT}`);
+    }
+}
+export async function startOpenShellDriverServer(core, socketPath) {
+    const { grpc, protoLoader } = await loadGrpc();
+    const definition = protoLoader.loadSync('credential_driver.proto', {
+        includeDirs: [openshellProtoDir()],
+        keepCase: true,
+        longs: String,
+        enums: String,
+        defaults: true,
+        oneofs: true,
+    });
+    const pkg = grpc.loadPackageDefinition(definition);
+    const STATUS = {
+        invalid_argument: grpc.status.INVALID_ARGUMENT,
+        not_found: grpc.status.NOT_FOUND,
+        failed_precondition: grpc.status.FAILED_PRECONDITION,
+        internal: grpc.status.INTERNAL,
+    };
+    const fail = (cb, err) => {
+        const code = err instanceof DriverError ? STATUS[err.code] : grpc.status.INTERNAL;
+        cb({ code, message: err instanceof Error ? err.message : String(err) });
+    };
+    const handlers = {
+        GetCapabilities(call, cb) {
+            try {
+                cb(null, core.getCapabilities(call.request.gateway));
+            }
+            catch (err) {
+                fail(cb, err);
+            }
+        },
+        StoreCredential(call, cb) {
+            core.store(call.request).then((res) => cb(null, res), (err) => fail(cb, err));
+        },
+        ResolveCredentials(call, cb) {
+            core.resolve(call.request.credentials ?? []).then((credentials) => cb(null, { credentials }), (err) => fail(cb, err));
+        },
+        DeleteCredential(call, cb) {
+            core.delete(call.request).then(() => cb(null, {}), (err) => fail(cb, err));
+        },
+        ListCredentials(_call, cb) {
+            try {
+                cb(null, { credentials: core.list() });
+            }
+            catch (err) {
+                fail(cb, err);
+            }
+        },
+    };
+    const server = new grpc.Server();
+    server.addService(pkg.openshell.credentials.v1.CredentialDriver.service, handlers);
+    // Never unlink something that isn't a stale socket.
+    try {
+        if (fs.lstatSync(socketPath).isSocket())
+            fs.unlinkSync(socketPath);
+    }
+    catch { /* absent */ }
+    // Create the socket 0600 from the start (no window where it is group/world
+    // accessible), then chmod as a fallback. process.umask() throws in worker
+    // threads (vitest), hence the try/catch, same as the proxy socket.
+    let previousUmask;
+    try {
+        previousUmask = process.umask(0o177);
+    }
+    catch { /* unsupported in workers */ }
+    try {
+        await new Promise((resolve, reject) => {
+            server.bindAsync(`unix://${socketPath}`, grpc.ServerCredentials.createInsecure(), (err) => {
+                if (err)
+                    reject(new Error(`OpenShell driver could not bind ${socketPath}: ${err.message}`));
+                else
+                    resolve();
+            });
+        });
+    }
+    finally {
+        if (previousUmask !== undefined) {
+            try {
+                process.umask(previousUmask);
+            }
+            catch { /* ignore */ }
+        }
+    }
+    fs.chmodSync(socketPath, 0o600);
+    return {
+        socketPath,
+        async stop() {
+            await new Promise((resolve) => server.tryShutdown(() => resolve()));
+            try {
+                fs.unlinkSync(socketPath);
+            }
+            catch { /* already gone */ }
+        },
+    };
+}
+//# sourceMappingURL=grpc-server.js.map

package/dist/openshell/grpc-server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"grpc-server.js","sourceRoot":"","sources":["../../src/openshell/grpc-server.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,WAAW,EAA4B,MAAM,wBAAwB,CAAC;AAE/E,MAAM,CAAC,MAAM,iBAAiB,GAAG,4DAA4D,CAAC;AAE9F,mGAAmG;AACnG,MAAM,UAAU,iBAAiB;IAC/B,OAAO,aAAa,CAAC,IAAI,GAAG,CAAC,wBAAwB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAC3E,CAAC;AAED,+EAA+E;AAC/E,MAAM,CAAC,KAAK,UAAU,QAAQ;IAC5B,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,CAAC;QAC3C,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;QACvD,OAAO,EAAE,IAAI,EAAG,IAAY,CAAC,OAAO,IAAI,IAAI,EAAE,WAAW,EAAG,WAAmB,CAAC,OAAO,IAAI,WAAW,EAAE,CAAC;IAC3G,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,wFAAwF,iBAAiB,EAAE,CAAC,CAAC;IAC/H,CAAC;AACH,CAAC;AAOD,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,IAAyB,EAAE,UAAkB;IAC5F,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,MAAM,QAAQ,EAAE,CAAC;IAC/C,MAAM,UAAU,GAAG,WAAW,CAAC,QAAQ,CAAC,yBAAyB,EAAE;QACjE,WAAW,EAAE,CAAC,iBAAiB,EAAE,CAAC;QAClC,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,MAAM;QACb,KAAK,EAAE,MAAM;QACb,QAAQ,EAAE,IAAI;QACd,MAAM,EAAE,IAAI;KACb,CAAC,CAAC;IACH,MAAM,GAAG,GAAG,IAAI,CAAC,qBAAqB,CAAC,UAAU,CAAC,CAAC;IAEnD,MAAM,MAAM,GAA2B;QACrC,gBAAgB,EAAE,IAAI,CAAC,MAAM,CAAC,gBAAgB;QAC9C,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS;QAChC,mBAAmB,EAAE,IAAI,CAAC,MAAM,CAAC,mBAAmB;QACpD,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;KAC/B,CAAC;IACF,MAAM,IAAI,GAAG,CAAC,EAA0B,EAAE,GAAY,EAAE,EAAE;QACxD,MAAM,IAAI,GAAG,GAAG,YAAY,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;QAClF,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC1E,CAAC,CAAC;IAEF,MAAM,QAAQ,GAAG;QACf,eAAe,CAAC,IAAS,EAAE,EAAO;YAChC,IAAI,CAAC;gBAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;YAAC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBAAC,IAAI,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;YAAC,CAAC;QAC9F,CAAC;QACD,eAAe,CAAC,IAAS,EAAE,EAAO;YAChC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC;QAChF,CAAC;QACD,kBAAkB,CAAC,IAAS,EAAE,EAAO;YACnC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC;QACxH,CAAC;QACD,gBAAgB,CAAC,IAAS,EAAE,EAAO;YACjC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC;QAC7E,CAAC;QACD,eAAe,CAAC,KAAU,EAAE,EAAO;YACjC,IAAI,CAAC;gBAAC,EAAE,CAAC,IAAI,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAAC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBAAC,IAAI,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;YAAC,CAAC;QAChF,CAAC;KACF,CAAC;IAEF,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;IACjC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,CAAC,gBAAgB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAEnF,oDAAoD;IACpD,IAAI,CAAC;QACH,IAAI,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,QAAQ,EAAE;YAAE,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;IACrE,CAAC;IAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;IAExB,2EAA2E;IAC3E,0EAA0E;IAC1E,mEAAmE;IACnE,IAAI,aAAiC,CAAC;IACtC,IAAI,CAAC;QAAC,aAAa,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,4BAA4B,CAAC,CAAC;IACpF,IAAI,CAAC;QACH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC1C,MAAM,CAAC,SAAS,CAAC,UAAU,UAAU,EAAE,EAAE,IAAI,CAAC,iBAAiB,CAAC,cAAc,EAAE,EAAE,CAAC,GAAiB,EAAE,EAAE;gBACtG,IAAI,GAAG;oBAAE,MAAM,CAAC,IAAI,KAAK,CAAC,mCAAmC,UAAU,KAAK,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;;oBACvF,OAAO,EAAE,CAAC;YACjB,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;YAAC,IAAI,CAAC;gBAAC,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QAAC,CAAC;IACnG,CAAC;IACD,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IAEhC,OAAO;QACL,UAAU;QACV,KAAK,CAAC,IAAI;YACR,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YAC1E,IAAI,CAAC;gBAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;QACjE,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/openshell/integration.d.ts

@@ -0,0 +1,37 @@
+/**
+ * Glue between `aquaman daemon` / the CLI and the OpenShell credential driver.
+ */
+import type { WrapperConfig } from '../core/types.js';
+import type { CredentialStore } from '../core/credentials/store.js';
+import type { BrokerScope } from '../broker-scope.js';
+import { type DriverAccessEvent } from './credential-driver.js';
+import { type OpenShellDriverServer } from './grpc-server.js';
+/** macOS caps Unix socket paths at 104 bytes (Linux 108); bind fails above that. */
+export declare const MAX_SOCKET_PATH = 103;
+export declare function openshellDriverSocketPath(config: WrapperConfig): string;
+/** True when the optional gRPC peers can be loaded. */
+export declare function grpcAvailable(): Promise<boolean>;
+/** The gateway TOML that points OpenShell at this driver. */
+export declare function gatewayConfigSnippet(socketPath: string): string;
+export interface AuditSink {
+    logCredentialAccess(sessionId: string, agentId: string, access: {
+        service: string;
+        operation: 'read' | 'use' | 'rotate';
+        success: boolean;
+        error?: string;
+    }): unknown;
+}
+/**
+ * Resolves hand a value to the gateway (`read`); copy-mode writes and deletes
+ * change the vault (`rotate`). Validating a reference at create time hands
+ * nothing out, so only its refusals are recorded.
+ */
+export declare function auditDriverAccess(audit: AuditSink, e: DriverAccessEvent): void;
+export declare function startOpenShellDriver(opts: {
+    config: WrapperConfig;
+    store: CredentialStore;
+    scope: BrokerScope | undefined;
+    audit: AuditSink;
+    version: string;
+}): Promise<OpenShellDriverServer>;
+//# sourceMappingURL=integration.d.ts.map

package/dist/openshell/integration.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"integration.d.ts","sourceRoot":"","sources":["../../src/openshell/integration.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEtD,OAAO,EAA6B,KAAK,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3F,OAAO,EAAwC,KAAK,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAEpG,oFAAoF;AACpF,eAAO,MAAM,eAAe,MAAM,CAAC;AAEnC,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,aAAa,GAAG,MAAM,CAEvE;AAED,uDAAuD;AACvD,wBAAsB,aAAa,IAAI,OAAO,CAAC,OAAO,CAAC,CAOtD;AAED,6DAA6D;AAC7D,wBAAgB,oBAAoB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAS/D;AAED,MAAM,WAAW,SAAS;IACxB,mBAAmB,CACjB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,MAAM,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,GAAG,KAAK,GAAG,QAAQ,CAAC;QAAC,OAAO,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAClG,OAAO,CAAC;CACZ;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,SAAS,EAAE,CAAC,EAAE,iBAAiB,GAAG,IAAI,CAY9E;AAED,wBAAsB,oBAAoB,CAAC,IAAI,EAAE;IAC/C,MAAM,EAAE,aAAa,CAAC;IACtB,KAAK,EAAE,eAAe,CAAC;IACvB,KAAK,EAAE,WAAW,GAAG,SAAS,CAAC;IAC/B,KAAK,EAAE,SAAS,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;CACjB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAYjC"}

package/dist/openshell/integration.js

@@ -0,0 +1,69 @@
+/**
+ * Glue between `aquaman daemon` / the CLI and the OpenShell credential driver.
+ */
+import * as path from 'node:path';
+import { getConfigDir } from '../core/utils/config.js';
+import { createOpenShellDriverCore } from './credential-driver.js';
+import { startOpenShellDriverServer, loadGrpc } from './grpc-server.js';
+/** macOS caps Unix socket paths at 104 bytes (Linux 108); bind fails above that. */
+export const MAX_SOCKET_PATH = 103;
+export function openshellDriverSocketPath(config) {
+    return config.openshell?.driver?.socketPath || path.join(getConfigDir(), 'openshell.sock');
+}
+/** True when the optional gRPC peers can be loaded. */
+export async function grpcAvailable() {
+    try {
+        await loadGrpc();
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/** The gateway TOML that points OpenShell at this driver. */
+export function gatewayConfigSnippet(socketPath) {
+    return [
+        '[openshell.gateway]',
+        'credential_drivers = ["aquaman"]',
+        '',
+        '[openshell.credential_drivers.aquaman]',
+        'transport = "uds"',
+        `socket_path = "${socketPath}"`,
+    ].join('\n');
+}
+/**
+ * Resolves hand a value to the gateway (`read`); copy-mode writes and deletes
+ * change the vault (`rotate`). Validating a reference at create time hands
+ * nothing out, so only its refusals are recorded.
+ */
+export function auditDriverAccess(audit, e) {
+    let operation;
+    if (e.op === 'resolve')
+        operation = 'read';
+    else if (e.mode === 'copy')
+        operation = 'rotate';
+    else if (!e.success)
+        operation = 'read';
+    else
+        return;
+    audit.logCredentialAccess('system', 'openshell', {
+        service: e.service,
+        operation,
+        success: e.success,
+        error: e.success ? undefined : `${e.ref}: ${e.error ?? 'refused'}`,
+    });
+}
+export async function startOpenShellDriver(opts) {
+    const socketPath = openshellDriverSocketPath(opts.config);
+    if (Buffer.byteLength(socketPath) > MAX_SOCKET_PATH) {
+        throw new Error(`socket path is ${Buffer.byteLength(socketPath)} bytes, over the ${MAX_SOCKET_PATH}-byte Unix socket limit: ${socketPath}. Set openshell.driver.socketPath to a shorter path.`);
+    }
+    const core = createOpenShellDriverCore({
+        store: opts.store,
+        scope: opts.scope,
+        version: opts.version,
+        onAccess: (e) => auditDriverAccess(opts.audit, e),
+    });
+    return startOpenShellDriverServer(core, socketPath);
+}
+//# sourceMappingURL=integration.js.map

package/dist/openshell/integration.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"integration.js","sourceRoot":"","sources":["../../src/openshell/integration.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAIlC,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,EAAE,yBAAyB,EAA0B,MAAM,wBAAwB,CAAC;AAC3F,OAAO,EAAE,0BAA0B,EAAE,QAAQ,EAA8B,MAAM,kBAAkB,CAAC;AAEpG,oFAAoF;AACpF,MAAM,CAAC,MAAM,eAAe,GAAG,GAAG,CAAC;AAEnC,MAAM,UAAU,yBAAyB,CAAC,MAAqB;IAC7D,OAAO,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,IAAI,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,gBAAgB,CAAC,CAAC;AAC7F,CAAC;AAED,uDAAuD;AACvD,MAAM,CAAC,KAAK,UAAU,aAAa;IACjC,IAAI,CAAC;QACH,MAAM,QAAQ,EAAE,CAAC;QACjB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,6DAA6D;AAC7D,MAAM,UAAU,oBAAoB,CAAC,UAAkB;IACrD,OAAO;QACL,qBAAqB;QACrB,kCAAkC;QAClC,EAAE;QACF,wCAAwC;QACxC,mBAAmB;QACnB,kBAAkB,UAAU,GAAG;KAChC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAUD;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAgB,EAAE,CAAoB;IACtE,IAAI,SAA4B,CAAC;IACjC,IAAI,CAAC,CAAC,EAAE,KAAK,SAAS;QAAE,SAAS,GAAG,MAAM,CAAC;SACtC,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM;QAAE,SAAS,GAAG,QAAQ,CAAC;SAC5C,IAAI,CAAC,CAAC,CAAC,OAAO;QAAE,SAAS,GAAG,MAAM,CAAC;;QACnC,OAAO;IACZ,KAAK,CAAC,mBAAmB,CAAC,QAAQ,EAAE,WAAW,EAAE;QAC/C,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,SAAS;QACT,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,KAAK,IAAI,SAAS,EAAE;KACnE,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,IAM1C;IACC,MAAM,UAAU,GAAG,yBAAyB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC1D,IAAI,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,eAAe,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CAAC,kBAAkB,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,oBAAoB,eAAe,4BAA4B,UAAU,sDAAsD,CAAC,CAAC;IAClM,CAAC;IACD,MAAM,IAAI,GAAG,yBAAyB,CAAC;QACrC,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;KAClD,CAAC,CAAC;IACH,OAAO,0BAA0B,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;AACtD,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "aquaman-proxy",
-  "version": "0.15.0",
+  "version": "0.17.0",
   "description": "🔱 API key protection for AI agents. Bring your own vault. Credentials stay where you already keep them, never in the agent's memory.",
   "type": "module",
   "main": "dist/index.js",
@@ -44,14 +44,16 @@
   "license": "MIT",
   "dependencies": {
     "commander": "^12.0.0",
-    "yaml": "^2.3.4"
+    "yaml": "^2.9.1"
   },
   "optionalDependencies": {
     "keytar": "^7.9.0"
   },
   "peerDependencies": {
     "argon2": "^0.45.1",
-    "kdbxweb": "^2.1.1"
+    "kdbxweb": "^2.1.1",
+    "@grpc/grpc-js": "^1.14.5",
+    "@grpc/proto-loader": "^0.8.1"
   },
   "peerDependenciesMeta": {
     "argon2": {
@@ -59,15 +61,22 @@
     },
     "kdbxweb": {
       "optional": true
+    },
+    "@grpc/grpc-js": {
+      "optional": true
+    },
+    "@grpc/proto-loader": {
+      "optional": true
     }
   },
   "devDependencies": {
     "@types/node": "^20.19.43",
-    "tsx": "^4.23.13",
+    "tsx": "^4.23.15",
     "typescript": "^5.3.0"
   },
   "files": [
     "dist",
+    "proto",
     "LICENSE",
     "README.md"
   ],