ncrypted 0.2.0 → 0.3.0

package/dist/ai-sdk.js

@@ -0,0 +1,112 @@
+// Vercel AI SDK tools for ncrypted. Usage:
+//   import { ncryptedTools } from "ncrypted/ai-sdk";
+//   await generateText({ model, tools: ncryptedTools(), prompt });
+import { tool } from "ai";
+import { z } from "zod";
+import { Ncrypted } from "./client.js";
+const errorText = (e) => `Error: ${e.message}`;
+/**
+ * Returns AI SDK tools for sharing secrets as one-time, end-to-end encrypted links (and writing them into Vercel env
+ * vars without the model seeing them). Encryption happens in your server process. The first 3 secrets per day are
+ * free; after that each costs 0.005 USDC on Base, paid via x402 from the configured wallet
+ * (NCRYPTED_WALLET_PRIVATE_KEY or ~/.config/ncrypted/wallet.key). Reads and deliveries are free.
+ */
+export function ncryptedTools(options = {}) {
+    const { include, ...clientOptions } = options;
+    const nc = new Ncrypted({ client: "ai-sdk", ...clientOptions });
+    const all = {
+        ncrypted_create: tool({
+            description: "Encrypt a password, API key, token or private note and return a one-time link that self-destructs after a single read. " +
+                "Use it whenever a credential must be shared with a person or another agent, instead of writing the value in a message. " +
+                "Never repeat the secret in your reply; share only the link. The first 3 per day are free (TTL up to 24h); then 0.005 USDC each.",
+            inputSchema: z.object({
+                secret: z.string().min(1).max(65536).describe("The sensitive value. Max 64 KB."),
+                ttlSeconds: z.number().int().min(300).max(604800).optional().describe("Expiry if never opened. Default 86400 (24h)."),
+                passphrase: z.string().optional().describe("Optional second factor; deliver it through a different channel than the link."),
+                emailTo: z.string().email().optional().describe("Email the link to this address (requires a paid secret, i.e. a funded wallet)."),
+            }),
+            execute: async ({ secret, ttlSeconds, passphrase, emailTo }) => {
+                try {
+                    const r = await nc.create(secret, { ttl: ttlSeconds, passphrase, emailTo });
+                    return {
+                        link: r.link,
+                        id: r.id,
+                        expiresAt: r.expiresAt,
+                        receiptToken: r.receiptToken,
+                        emailed: r.emailed,
+                        free: r.free,
+                        note: "The link opens exactly once. Share only the link.",
+                    };
+                }
+                catch (e) {
+                    return errorText(e);
+                }
+            },
+        }),
+        ncrypted_read: tool({
+            description: "Open an ncrypted link (https://ncrypted.ai/s/{id}#{key}) and return the secret. This destroys it permanently. Free. " +
+                "Use the value only for the task at hand and do not repeat it.",
+            inputSchema: z.object({
+                link: z.string().url().describe("The full link including the #key fragment."),
+                passphrase: z.string().optional().describe("Required only if the sender set one."),
+            }),
+            execute: async ({ link, passphrase }) => {
+                try {
+                    return await nc.read(link, passphrase);
+                }
+                catch (e) {
+                    return errorText(e);
+                }
+            },
+        }),
+        ncrypted_status: tool({
+            description: "Check whether a secret you created has been opened (pending, read, burned or expired). Free.",
+            inputSchema: z.object({ id: z.string(), receiptToken: z.string() }),
+            execute: async ({ id, receiptToken }) => {
+                try {
+                    return await nc.status(id, receiptToken);
+                }
+                catch (e) {
+                    return errorText(e);
+                }
+            },
+        }),
+        ncrypted_burn: tool({
+            description: "Destroy a secret you created before anyone opens it, e.g. if the link went to the wrong place. Free.",
+            inputSchema: z.object({ id: z.string(), receiptToken: z.string() }),
+            execute: async ({ id, receiptToken }) => {
+                try {
+                    await nc.burn(id, receiptToken);
+                    return { burned: true };
+                }
+                catch (e) {
+                    return errorText(e);
+                }
+            },
+        }),
+        ncrypted_to_vercel_env: tool({
+            description: "Open an ncrypted link and write its value straight into a Vercel project environment variable (type sensitive), so the value " +
+                "is never shown to you. Needs VERCEL_TOKEN. Vercel access is checked before the link is consumed.",
+            inputSchema: z.object({
+                link: z.string().url(),
+                passphrase: z.string().optional(),
+                key: z.string().describe("Env var name, e.g. STRIPE_SECRET_KEY."),
+                project: z.string().describe("Vercel project name or id."),
+                team: z.string().optional().describe("Vercel team id (team_...) or slug."),
+                targets: z.array(z.enum(["production", "preview", "development"])).optional().describe("Default: production and preview."),
+            }),
+            execute: async ({ link, passphrase, key, project, team, targets }) => {
+                try {
+                    const r = await nc.deliver(link, { type: "vercel_env", key, project, team, targets }, { passphrase });
+                    return { delivered: true, ...r, note: "The value was written directly and was not shown to you." };
+                }
+                catch (e) {
+                    return errorText(e);
+                }
+            },
+        }),
+    };
+    if (!include)
+        return all;
+    return Object.fromEntries(include.map((name) => [name, all[name]]));
+}

package/dist/client.d.ts

@@ -2,7 +2,7 @@ import { type Destination, type DeliveryResult } from "./destinations.js";
 export declare const DEFAULT_BASE_URL = "https://ncrypted.ai";
 /** Hard cap on what the SDK will ever pay for one secret, whatever the server asks. */
 export declare const MAX_PRICE = "$0.01";
-export declare const SDK_VERSION = "0.2.0";
+export declare const SDK_VERSION = "0.3.0";
 export interface NcryptedOptions {
     /** API origin. Defaults to NCRYPTED_URL or the hosted service. */
     baseUrl?: string;

package/dist/client.js

@@ -9,7 +9,7 @@ import { privateKeyToAccount as accountOf } from "viem/accounts";
 export const DEFAULT_BASE_URL = "https://ncrypted.ai";
 /** Hard cap on what the SDK will ever pay for one secret, whatever the server asks. */
 export const MAX_PRICE = "$0.01";
-export const SDK_VERSION = "0.2.0";
+export const SDK_VERSION = "0.3.0";
 export class NcryptedError extends Error {
     status;
     constructor(message, status) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ncrypted",
-  "version": "0.2.0",
+  "version": "0.3.0",
   "description": "One-time, end-to-end encrypted secrets for AI agents. Pay 0.005 USDC per secret via x402; the note self-destructs after one read.",
   "license": "MIT",
   "type": "module",
@@ -18,6 +18,10 @@
     "./wallet": {
       "types": "./dist/wallet.d.ts",
       "default": "./dist/wallet.js"
+    },
+    "./ai-sdk": {
+      "types": "./dist/ai-sdk.d.ts",
+      "default": "./dist/ai-sdk.js"
     }
   },
   "bin": {
@@ -32,13 +36,15 @@
     "node": ">=20"
   },
   "keywords": [
-    "secrets",
-    "one-time",
-    "x402",
     "agents",
-    "mcp",
+    "ai-sdk",
     "encryption",
-    "usdc"
+    "mcp",
+    "one-time",
+    "secrets",
+    "usdc",
+    "vercel",
+    "x402"
   ],
   "scripts": {
     "build": "tsc -p tsconfig.json",
@@ -52,7 +58,9 @@
   "devDependencies": {
     "@types/node": "^24.0.0",
     "typescript": "^5.9.0",
-    "vitest": "^5.0.5"
+    "vitest": "^5.0.5",
+    "ai": "^7.0.143",
+    "zod": "^4.6.7"
   },
   "repository": {
     "type": "git",
@@ -62,5 +70,17 @@
   "homepage": "https://github.com/Seidl-Family/ncrypted",
   "publishConfig": {
     "access": "public"
+  },
+  "peerDependencies": {
+    "ai": ">=5",
+    "zod": "^3.25.0 || ^4.0.0"
+  },
+  "peerDependenciesMeta": {
+    "ai": {
+      "optional": true
+    },
+    "zod": {
+      "optional": true
+    }
   }
 }