oceanbus 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 OceanBus
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,171 @@
+# OceanBus SDK
+
+AI Agent 通信与信任基础设施 Node.js SDK。
+
+## 安装
+
+```bash
+npm install oceanbus
+```
+
+## 快速开始
+
+```javascript
+const { createOceanBus } = require('oceanbus');
+
+async function main() {
+  // 创建实例（自动加载本地持久化身份）
+  const ob = await createOceanBus();
+
+  // 首次使用需要注册
+  await ob.register();
+
+  // 获取你的收件地址
+  const myOpenid = await ob.getOpenId();
+
+  // 发送消息
+  await ob.send(targetOpenid, 'Hello OceanBus!');
+
+  // 监听收件
+  const stop = ob.startListening((msg) => {
+    console.log(`[${msg.seq_id}] ${msg.from_openid}: ${msg.content}`);
+  });
+
+  // 退出时清理
+  await ob.destroy();
+}
+```
+
+## 配置
+
+OceanBus 支持四层配置覆盖（高优先级覆盖低优先级）：
+
+1. 编译默认值
+2. `~/.oceanbus/config.yaml`
+3. 环境变量（`OCEANBUS_*`）
+4. 构造函数参数
+
+```javascript
+const ob = await createOceanBus({
+  baseUrl: 'https://prod.example.com/api/l0',  // 切换生产服
+  http: { timeout: 15000 },
+  quota: { dailyLimit: 500 },
+});
+```
+
+| 环境变量 | 说明 |
+|----------|------|
+| `OCEANBUS_BASE_URL` | L0 API 地址 |
+| `OCEANBUS_DAILY_LIMIT` | 每日消息配额上限 |
+| `OCEANBUS_TIMEOUT` | HTTP 超时（毫秒） |
+| `OCEANBUS_POLL_INTERVAL` | 轮询间隔（毫秒） |
+| `OCEANBUS_API_KEY` | API Key |
+| `OCEANBUS_AGENT_ID` | Agent ID |
+
+## CLI
+
+```bash
+oceanbus register              # 注册新 Agent
+oceanbus whoami                # 查看当前身份
+oceanbus openid                # 获取当前 OpenID
+oceanbus send <openid>         # 发送消息（支持管道输入）
+oceanbus listen                # 监听收件
+oceanbus block <openid>        # 屏蔽发送者
+oceanbus keygen                # 生成 Ed25519 密钥对
+oceanbus key new               # 创建新 API Key
+oceanbus key revoke <key_id>   # 吊销 API Key
+```
+
+## API 概览
+
+### 身份与密钥
+
+```javascript
+await ob.register();                          // 注册新 Agent
+await ob.whoami();                            // 查看身份和 OpenID
+await ob.getOpenId();                         // 获取当前 OpenID
+await ob.createApiKey();                       // 创建新 API Key
+await ob.revokeApiKey('key_id');              // 吊销 API Key
+```
+
+### 消息收发
+
+```javascript
+await ob.send(openid, 'Hello');               // 发送消息
+await ob.sendJson(openid, { action: 'test' }); // 发送 JSON
+await ob.sync(sinceSeq, limit);               // 手动同步消息
+
+const stop = ob.startListening((msg) => {     // 自动监听
+  console.log(msg.content);
+});
+```
+
+### 黑名单与反查
+
+```javascript
+await ob.blockSender(fromOpenid);             // 屏蔽
+await ob.unblockSender(fromOpenid);           // 解除屏蔽
+ob.isBlocked(fromOpenid);                     // 检查是否已屏蔽
+await ob.reverseLookup(openid);               // 反查 OpenID 真实 ID
+```
+
+### 密码学（Ed25519）
+
+```javascript
+const kp = await ob.crypto.generateKeypair();
+const sig = await ob.crypto.sign(kp, { action: 'pay', amount: 100 });
+const valid = await ob.crypto.verify(kp.publicKey, { action: 'pay', amount: 100 }, sig);
+const canon = ob.crypto.canonicalize({ z: 1, a: 2 }); // {"a":2,"z":1}
+```
+
+### 拦截器
+
+```javascript
+ob.interceptors.register({
+  name: 'fraud-detector',
+  priority: 100,
+  evaluate: async (msg, ctx) => {
+    if (msg.content.includes('钓鱼')) {
+      return { action: 'block', reason: 'phishing detected' };
+    }
+    return { action: 'pass' };
+  },
+});
+```
+
+### 配额
+
+```javascript
+const usage = ob.quota.getDailyUsage();
+// { used: 10, limit: 100, remaining: 90 }
+```
+
+## 测试
+
+```bash
+npm test              # 全部测试（单元 + 端到端）
+npm run test:unit     # 仅单元测试（Jest，86 个用例）
+npm run test:e2e      # 仅端到端测试（32 个用例）
+```
+
+## 服务器迁移
+
+切换服务器只需修改 `baseUrl`：
+
+```javascript
+const ob = await createOceanBus({
+  baseUrl: 'https://prod.oceanbus.com/api/l0'
+});
+```
+
+或通过环境变量：
+
+```bash
+export OCEANBUS_BASE_URL=https://prod.oceanbus.com/api/l0
+```
+
+L0 API 接口规范不变的前提下，SDK 代码无需任何改动。
+
+## License
+
+MIT

package/bin/oceanbus.js

@@ -0,0 +1,28 @@
+#!/usr/bin/env node
+// OceanBus CLI entry point
+// After tsc compiles, this file requires dist/cli/index.js
+
+const path = require('path');
+const fs = require('fs');
+
+// Determine the source root: bin/ lives next to dist/
+const distRoot = path.join(__dirname, '..', 'dist');
+const cliEntry = path.join(distRoot, 'cli', 'index.js');
+
+if (fs.existsSync(cliEntry)) {
+  const { runCli } = require(cliEntry);
+  runCli();
+} else {
+  // Development mode: try ts-node or fallback
+  try {
+    require('ts-node').register({
+      project: path.join(__dirname, '..', 'tsconfig.json'),
+    });
+    const { runCli } = require(path.join(__dirname, '..', 'src', 'cli', 'index'));
+    runCli();
+  } catch (tsErr) {
+    console.error('OceanBus CLI is not built. Run `npx tsc` first.');
+    console.error('Or install ts-node: npm install -g ts-node');
+    process.exit(1);
+  }
+}

package/dist/agent/identity.d.ts

@@ -0,0 +1,23 @@
+import { HttpClient } from '../client/http-client';
+import type { RegistrationData, OpenIDData, AgentState } from '../types/agent';
+export declare class AgentIdentityManager {
+    private http;
+    private apiKey;
+    private agentId;
+    private extraKeys;
+    private openidCache;
+    constructor(http: HttpClient, apiKey?: string, agentId?: string);
+    getApiKey(): string | null;
+    getAgentId(): string | null;
+    getCachedOpenId(): string | null;
+    updateCredential(apiKey: string, agentId?: string): void;
+    register(): Promise<RegistrationData>;
+    whoami(): Promise<OpenIDData>;
+    getOpenId(): Promise<string>;
+    ensureRegistered(): Promise<AgentState>;
+    toState(): AgentState;
+    fromState(state: AgentState): void;
+    trackExtraKey(key: import('../types/agent').ApiKeyData): void;
+    private ensureAuth;
+}
+//# sourceMappingURL=identity.d.ts.map

package/dist/agent/identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.d.ts","sourceRoot":"","sources":["../../src/agent/identity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,KAAK,EAAE,gBAAgB,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAG/E,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,IAAI,CAAa;IACzB,OAAO,CAAC,MAAM,CAAgB;IAC9B,OAAO,CAAC,OAAO,CAAgB;IAC/B,OAAO,CAAC,SAAS,CAA6C;IAC9D,OAAO,CAAC,WAAW,CAAuB;gBAE9B,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM;IAM/D,SAAS,IAAI,MAAM,GAAG,IAAI;IAI1B,UAAU,IAAI,MAAM,GAAG,IAAI;IAI3B,eAAe,IAAI,MAAM,GAAG,IAAI;IAIhC,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI;IAMlD,QAAQ,IAAI,OAAO,CAAC,gBAAgB,CAAC;IAWrC,MAAM,IAAI,OAAO,CAAC,UAAU,CAAC;IAO7B,SAAS,IAAI,OAAO,CAAC,MAAM,CAAC;IAM5B,gBAAgB,IAAI,OAAO,CAAC,UAAU,CAAC;IAQ7C,OAAO,IAAI,UAAU;IAWrB,SAAS,CAAC,KAAK,EAAE,UAAU,GAAG,IAAI;IAOlC,aAAa,CAAC,GAAG,EAAE,OAAO,gBAAgB,EAAE,UAAU,GAAG,IAAI;IAI7D,OAAO,CAAC,UAAU;CAKnB"}

package/dist/agent/identity.js

@@ -0,0 +1,84 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AgentIdentityManager = void 0;
+const errors_1 = require("../client/errors");
+class AgentIdentityManager {
+    http;
+    apiKey;
+    agentId;
+    extraKeys = [];
+    openidCache = null;
+    constructor(http, apiKey, agentId) {
+        this.http = http;
+        this.apiKey = apiKey || null;
+        this.agentId = agentId || null;
+    }
+    getApiKey() {
+        return this.apiKey;
+    }
+    getAgentId() {
+        return this.agentId;
+    }
+    getCachedOpenId() {
+        return this.openidCache;
+    }
+    updateCredential(apiKey, agentId) {
+        this.apiKey = apiKey;
+        if (agentId)
+            this.agentId = agentId;
+        this.openidCache = null; // invalidate openid cache
+    }
+    async register() {
+        const res = await this.http.post('/agents/register', {});
+        const data = res.data;
+        this.agentId = data.agent_id;
+        this.apiKey = data.api_key;
+        this.openidCache = null;
+        return data;
+    }
+    async whoami() {
+        this.ensureAuth();
+        const res = await this.http.get('/agents/me', { apiKey: this.apiKey });
+        this.openidCache = res.data.my_openid;
+        return res.data;
+    }
+    async getOpenId() {
+        if (this.openidCache !== null)
+            return this.openidCache;
+        const data = await this.whoami();
+        return data.my_openid;
+    }
+    async ensureRegistered() {
+        if (this.agentId && this.apiKey) {
+            return { agent_id: this.agentId, api_key: this.apiKey, extra_keys: [] };
+        }
+        const reg = await this.register();
+        return { agent_id: reg.agent_id, api_key: reg.api_key, extra_keys: [] };
+    }
+    toState() {
+        if (!this.agentId || !this.apiKey) {
+            throw new errors_1.OceanBusError('Agent identity not initialized');
+        }
+        return {
+            agent_id: this.agentId,
+            api_key: this.apiKey,
+            extra_keys: this.extraKeys,
+        };
+    }
+    fromState(state) {
+        this.agentId = state.agent_id;
+        this.apiKey = state.api_key;
+        this.extraKeys = state.extra_keys || [];
+        this.openidCache = null;
+    }
+    trackExtraKey(key) {
+        this.extraKeys.push(key);
+    }
+    ensureAuth() {
+        if (!this.apiKey) {
+            throw new errors_1.OceanBusError('Not authenticated: call register() first or provide API key in config');
+        }
+    }
+}
+exports.AgentIdentityManager = AgentIdentityManager;
+//# sourceMappingURL=identity.js.map

package/dist/agent/identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.js","sourceRoot":"","sources":["../../src/agent/identity.ts"],"names":[],"mappings":";;;AAEA,6CAAiD;AAEjD,MAAa,oBAAoB;IACvB,IAAI,CAAa;IACjB,MAAM,CAAgB;IACtB,OAAO,CAAgB;IACvB,SAAS,GAA0C,EAAE,CAAC;IACtD,WAAW,GAAkB,IAAI,CAAC;IAE1C,YAAY,IAAgB,EAAE,MAAe,EAAE,OAAgB;QAC7D,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,MAAM,GAAG,MAAM,IAAI,IAAI,CAAC;QAC7B,IAAI,CAAC,OAAO,GAAG,OAAO,IAAI,IAAI,CAAC;IACjC,CAAC;IAED,SAAS;QACP,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED,UAAU;QACR,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,eAAe;QACb,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED,gBAAgB,CAAC,MAAc,EAAE,OAAgB;QAC/C,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,OAAO;YAAE,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACpC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC,0BAA0B;IACrD,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAmB,kBAAkB,EAAE,EAAE,CAAC,CAAC;QAC3E,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;QAEtB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC7B,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC;QAC3B,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QAExB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,MAAM;QACV,IAAI,CAAC,UAAU,EAAE,CAAC;QAClB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAa,YAAY,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAO,EAAE,CAAC,CAAC;QACpF,IAAI,CAAC,WAAW,GAAG,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;QACtC,OAAO,GAAG,CAAC,IAAI,CAAC;IAClB,CAAC;IAED,KAAK,CAAC,SAAS;QACb,IAAI,IAAI,CAAC,WAAW,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC,WAAW,CAAC;QACvD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED,KAAK,CAAC,gBAAgB;QACpB,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChC,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;QAC1E,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClC,OAAO,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;IAC1E,CAAC;IAED,OAAO;QACL,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YAClC,MAAM,IAAI,sBAAa,CAAC,gCAAgC,CAAC,CAAC;QAC5D,CAAC;QACD,OAAO;YACL,QAAQ,EAAE,IAAI,CAAC,OAAO;YACtB,OAAO,EAAE,IAAI,CAAC,MAAM;YACpB,UAAU,EAAE,IAAI,CAAC,SAAS;SAC3B,CAAC;IACJ,CAAC;IAED,SAAS,CAAC,KAAiB;QACzB,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC;QAC9B,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC;QAC5B,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC,UAAU,IAAI,EAAE,CAAC;QACxC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;IAC1B,CAAC;IAED,aAAa,CAAC,GAAwC;QACpD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAEO,UAAU;QAChB,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,MAAM,IAAI,sBAAa,CAAC,uEAAuE,CAAC,CAAC;QACnG,CAAC;IACH,CAAC;CACF;AA1FD,oDA0FC"}

package/dist/agent/index.d.ts

@@ -0,0 +1,4 @@
+export { AgentIdentityManager } from './identity';
+export { ApiKeyManager } from './keys';
+export { FileKeyStore, MemoryKeyStore, KeyStore } from './store';
+//# sourceMappingURL=index.d.ts.map

package/dist/agent/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/agent/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,QAAQ,CAAC;AACvC,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC"}

package/dist/agent/index.js

@@ -0,0 +1,11 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MemoryKeyStore = exports.FileKeyStore = exports.ApiKeyManager = exports.AgentIdentityManager = void 0;
+var identity_1 = require("./identity");
+Object.defineProperty(exports, "AgentIdentityManager", { enumerable: true, get: function () { return identity_1.AgentIdentityManager; } });
+var keys_1 = require("./keys");
+Object.defineProperty(exports, "ApiKeyManager", { enumerable: true, get: function () { return keys_1.ApiKeyManager; } });
+var store_1 = require("./store");
+Object.defineProperty(exports, "FileKeyStore", { enumerable: true, get: function () { return store_1.FileKeyStore; } });
+Object.defineProperty(exports, "MemoryKeyStore", { enumerable: true, get: function () { return store_1.MemoryKeyStore; } });
+//# sourceMappingURL=index.js.map

package/dist/agent/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/agent/index.ts"],"names":[],"mappings":";;;AAAA,uCAAkD;AAAzC,gHAAA,oBAAoB,OAAA;AAC7B,+BAAuC;AAA9B,qGAAA,aAAa,OAAA;AACtB,iCAAiE;AAAxD,qGAAA,YAAY,OAAA;AAAE,uGAAA,cAAc,OAAA"}

package/dist/agent/keys.d.ts

@@ -0,0 +1,11 @@
+import { HttpClient } from '../client/http-client';
+import type { ApiKeyData } from '../types/agent';
+export declare class ApiKeyManager {
+    private http;
+    private getApiKey;
+    constructor(http: HttpClient, getApiKey: () => string | null);
+    createApiKey(): Promise<ApiKeyData>;
+    createApiKeyWithRetry(maxWaitMs?: number): Promise<ApiKeyData>;
+    revokeApiKey(keyId: string): Promise<void>;
+}
+//# sourceMappingURL=keys.d.ts.map

package/dist/agent/keys.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"keys.d.ts","sourceRoot":"","sources":["../../src/agent/keys.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAGjD,qBAAa,aAAa;IACxB,OAAO,CAAC,IAAI,CAAa;IACzB,OAAO,CAAC,SAAS,CAAsB;gBAE3B,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,MAAM,GAAG,IAAI;IAKtD,YAAY,IAAI,OAAO,CAAC,UAAU,CAAC;IAQnC,qBAAqB,CAAC,SAAS,GAAE,MAAc,GAAG,OAAO,CAAC,UAAU,CAAC;IAyBrE,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAMjD"}

package/dist/agent/keys.js

@@ -0,0 +1,50 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ApiKeyManager = void 0;
+const errors_1 = require("../client/errors");
+class ApiKeyManager {
+    http;
+    getApiKey;
+    constructor(http, getApiKey) {
+        this.http = http;
+        this.getApiKey = getApiKey;
+    }
+    async createApiKey() {
+        const key = this.getApiKey();
+        if (!key)
+            throw new errors_1.OceanBusError('Not authenticated');
+        const res = await this.http.post('/agents/me/keys', {}, { apiKey: key });
+        return res.data;
+    }
+    async createApiKeyWithRetry(maxWaitMs = 15000) {
+        const data = await this.createApiKey();
+        // New API keys may have propagation delay.
+        // Verify the new key works before returning.
+        const startTime = Date.now();
+        const pollIntervalMs = 1000;
+        while (Date.now() - startTime < maxWaitMs) {
+            try {
+                const res = await this.http.get('/agents/me', { apiKey: data.api_key });
+                if (res.code === 0)
+                    return data; // key works
+            }
+            catch (err) {
+                // still propagating — the key may not be ready yet
+                if (process.env.OceanBus_DEBUG) {
+                    console.error('[oceanbus] key propagation check:', err.message);
+                }
+            }
+            await new Promise((r) => setTimeout(r, pollIntervalMs));
+        }
+        // If we timed out, return the key anyway with a warning — it may work shortly
+        return data;
+    }
+    async revokeApiKey(keyId) {
+        const key = this.getApiKey();
+        if (!key)
+            throw new errors_1.OceanBusError('Not authenticated');
+        await this.http.del(`/agents/me/keys/${keyId}`, { apiKey: key });
+    }
+}
+exports.ApiKeyManager = ApiKeyManager;
+//# sourceMappingURL=keys.js.map

package/dist/agent/keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keys.js","sourceRoot":"","sources":["../../src/agent/keys.ts"],"names":[],"mappings":";;;AAEA,6CAAiD;AAEjD,MAAa,aAAa;IAChB,IAAI,CAAa;IACjB,SAAS,CAAsB;IAEvC,YAAY,IAAgB,EAAE,SAA8B;QAC1D,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,YAAY;QAChB,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC7B,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,sBAAa,CAAC,mBAAmB,CAAC,CAAC;QAEvD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAa,iBAAiB,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QACrF,OAAO,GAAG,CAAC,IAAI,CAAC;IAClB,CAAC;IAED,KAAK,CAAC,qBAAqB,CAAC,YAAoB,KAAK;QACnD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QAEvC,2CAA2C;QAC3C,6CAA6C;QAC7C,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,cAAc,GAAG,IAAI,CAAC;QAE5B,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,GAAG,SAAS,EAAE,CAAC;YAC1C,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAwB,YAAY,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;gBAC/F,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC;oBAAE,OAAO,IAAI,CAAC,CAAC,YAAY;YAC/C,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,mDAAmD;gBACnD,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC;oBAC/B,OAAO,CAAC,KAAK,CAAC,mCAAmC,EAAG,GAAa,CAAC,OAAO,CAAC,CAAC;gBAC7E,CAAC;YACH,CAAC;YACD,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC,CAAC;QAC1D,CAAC;QAED,8EAA8E;QAC9E,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,KAAa;QAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC7B,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,sBAAa,CAAC,mBAAmB,CAAC,CAAC;QAEvD,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,mBAAmB,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IACnE,CAAC;CACF;AAhDD,sCAgDC"}

package/dist/agent/store.d.ts

@@ -0,0 +1,23 @@
+import type { AgentState } from '../types/agent';
+export interface KeyStore {
+    save(state: AgentState): Promise<void>;
+    load(): Promise<AgentState | null>;
+    clear(): Promise<void>;
+    getPath(): string;
+}
+export declare class MemoryKeyStore implements KeyStore {
+    private state;
+    save(state: AgentState): Promise<void>;
+    load(): Promise<AgentState | null>;
+    clear(): Promise<void>;
+    getPath(): string;
+}
+export declare class FileKeyStore implements KeyStore {
+    private filePath;
+    constructor(filePath?: string);
+    save(state: AgentState): Promise<void>;
+    load(): Promise<AgentState | null>;
+    clear(): Promise<void>;
+    getPath(): string;
+}
+//# sourceMappingURL=store.d.ts.map

package/dist/agent/store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../src/agent/store.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAEjD,MAAM,WAAW,QAAQ;IACvB,IAAI,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACvC,IAAI,IAAI,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;IACnC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,OAAO,IAAI,MAAM,CAAC;CACnB;AAED,qBAAa,cAAe,YAAW,QAAQ;IAC7C,OAAO,CAAC,KAAK,CAA2B;IAElC,IAAI,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAItC,IAAI,IAAI,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAIlC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAI5B,OAAO,IAAI,MAAM;CAGlB;AAED,qBAAa,YAAa,YAAW,QAAQ;IAC3C,OAAO,CAAC,QAAQ,CAAS;gBAEb,QAAQ,CAAC,EAAE,MAAM;IAIvB,IAAI,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAOtC,IAAI,IAAI,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IASlC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAQ5B,OAAO,IAAI,MAAM;CAGlB"}

package/dist/agent/store.js

@@ -0,0 +1,89 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.FileKeyStore = exports.MemoryKeyStore = void 0;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const os = __importStar(require("os"));
+class MemoryKeyStore {
+    state = null;
+    async save(state) {
+        this.state = { ...state };
+    }
+    async load() {
+        return this.state ? { ...this.state } : null;
+    }
+    async clear() {
+        this.state = null;
+    }
+    getPath() {
+        return '(memory)';
+    }
+}
+exports.MemoryKeyStore = MemoryKeyStore;
+class FileKeyStore {
+    filePath;
+    constructor(filePath) {
+        this.filePath = filePath || path.join(os.homedir(), '.oceanbus', 'credentials.json');
+    }
+    async save(state) {
+        const dir = path.dirname(this.filePath);
+        await fs.promises.mkdir(dir, { recursive: true });
+        const content = JSON.stringify(state, null, 2);
+        await fs.promises.writeFile(this.filePath, content, { mode: 0o600 });
+    }
+    async load() {
+        try {
+            const raw = await fs.promises.readFile(this.filePath, 'utf-8');
+            return JSON.parse(raw);
+        }
+        catch {
+            return null;
+        }
+    }
+    async clear() {
+        try {
+            await fs.promises.unlink(this.filePath);
+        }
+        catch {
+            // file doesn't exist, nothing to clear
+        }
+    }
+    getPath() {
+        return this.filePath;
+    }
+}
+exports.FileKeyStore = FileKeyStore;
+//# sourceMappingURL=store.js.map

package/dist/agent/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../src/agent/store.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,uCAAyB;AACzB,2CAA6B;AAC7B,uCAAyB;AAUzB,MAAa,cAAc;IACjB,KAAK,GAAsB,IAAI,CAAC;IAExC,KAAK,CAAC,IAAI,CAAC,KAAiB;QAC1B,IAAI,CAAC,KAAK,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,IAAI;QACR,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAC/C,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACpB,CAAC;IAED,OAAO;QACL,OAAO,UAAU,CAAC;IACpB,CAAC;CACF;AAlBD,wCAkBC;AAED,MAAa,YAAY;IACf,QAAQ,CAAS;IAEzB,YAAY,QAAiB;QAC3B,IAAI,CAAC,QAAQ,GAAG,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,kBAAkB,CAAC,CAAC;IACvF,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,KAAiB;QAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACxC,MAAM,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAClD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAC/C,MAAM,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACvE,CAAC;IAED,KAAK,CAAC,IAAI;QACR,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAC/D,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAe,CAAC;QACvC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC1C,CAAC;QAAC,MAAM,CAAC;YACP,uCAAuC;QACzC,CAAC;IACH,CAAC;IAED,OAAO;QACL,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;CACF;AAlCD,oCAkCC"}

package/dist/cli/commands/block.d.ts

@@ -0,0 +1,3 @@
+import type { CommandModule } from 'yargs';
+export declare const blockCommand: CommandModule;
+//# sourceMappingURL=block.d.ts.map

package/dist/cli/commands/block.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"block.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/block.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,OAAO,CAAC;AAO3C,eAAO,MAAM,YAAY,EAAE,aAmB1B,CAAC"}

package/dist/cli/commands/block.js

@@ -0,0 +1,25 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.blockCommand = void 0;
+const index_1 = require("../../index");
+exports.blockCommand = {
+    command: 'block <openid>',
+    describe: 'Block a sender by their from_openid',
+    builder: (yargs) => yargs.positional('openid', {
+        type: 'string',
+        describe: 'Sender OpenID to block',
+        demandOption: true,
+    }),
+    handler: async (argv) => {
+        try {
+            const ob = await (0, index_1.createOceanBus)();
+            await ob.blockSender(argv.openid);
+            console.log(JSON.stringify({ code: 0, msg: 'blocked' }));
+        }
+        catch (err) {
+            console.error('Block failed:', err.message);
+            process.exit(1);
+        }
+    },
+};
+//# sourceMappingURL=block.js.map

package/dist/cli/commands/block.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"block.js","sourceRoot":"","sources":["../../../src/cli/commands/block.ts"],"names":[],"mappings":";;;AACA,uCAA6C;AAMhC,QAAA,YAAY,GAAkB;IACzC,OAAO,EAAE,gBAAgB;IACzB,QAAQ,EAAE,qCAAqC;IAC/C,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CACjB,KAAK,CAAC,UAAU,CAAC,QAAQ,EAAE;QACzB,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,wBAAwB;QAClC,YAAY,EAAE,IAAI;KACnB,CAAC;IACJ,OAAO,EAAE,KAAK,EAAE,IAAS,EAAE,EAAE;QAC3B,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,MAAM,IAAA,sBAAc,GAAE,CAAC;YAClC,MAAM,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAClC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;QAC3D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,eAAe,EAAG,GAAa,CAAC,OAAO,CAAC,CAAC;YACvD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;CACF,CAAC"}

package/dist/cli/commands/key-new.d.ts

@@ -0,0 +1,3 @@
+import type { CommandModule } from 'yargs';
+export declare const keyNewCommand: CommandModule;
+//# sourceMappingURL=key-new.d.ts.map

package/dist/cli/commands/key-new.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"key-new.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/key-new.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,OAAO,CAAC;AAG3C,eAAO,MAAM,aAAa,EAAE,aAc3B,CAAC"}

package/dist/cli/commands/key-new.js

@@ -0,0 +1,21 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.keyNewCommand = void 0;
+const index_1 = require("../../index");
+exports.keyNewCommand = {
+    command: 'key new',
+    describe: 'Create a new API key',
+    handler: async () => {
+        try {
+            const ob = await (0, index_1.createOceanBus)();
+            const data = await ob.createApiKey();
+            console.log(JSON.stringify(data, null, 2));
+            console.error('Note: new API keys may take a few seconds to propagate.');
+        }
+        catch (err) {
+            console.error('Key creation failed:', err.message);
+            process.exit(1);
+        }
+    },
+};
+//# sourceMappingURL=key-new.js.map

package/dist/cli/commands/key-new.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"key-new.js","sourceRoot":"","sources":["../../../src/cli/commands/key-new.ts"],"names":[],"mappings":";;;AACA,uCAA6C;AAEhC,QAAA,aAAa,GAAkB;IAC1C,OAAO,EAAE,SAAS;IAClB,QAAQ,EAAE,sBAAsB;IAChC,OAAO,EAAE,KAAK,IAAI,EAAE;QAClB,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,MAAM,IAAA,sBAAc,GAAE,CAAC;YAClC,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,YAAY,EAAE,CAAC;YACrC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAC3C,OAAO,CAAC,KAAK,CAAC,yDAAyD,CAAC,CAAC;QAC3E,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,sBAAsB,EAAG,GAAa,CAAC,OAAO,CAAC,CAAC;YAC9D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;CACF,CAAC"}

package/dist/cli/commands/key-revoke.d.ts

@@ -0,0 +1,3 @@
+import type { CommandModule } from 'yargs';
+export declare const keyRevokeCommand: CommandModule;
+//# sourceMappingURL=key-revoke.d.ts.map

package/dist/cli/commands/key-revoke.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"key-revoke.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/key-revoke.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,OAAO,CAAC;AAO3C,eAAO,MAAM,gBAAgB,EAAE,aAmB9B,CAAC"}