pop-pay 0.5.7 → 0.5.9

package/dist/vault.js

@@ -44,7 +44,7 @@ var __importStar = (this && this.__importStar) || (function () {
     };
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.OSS_WARNING = void 0;
+exports.SENSITIVE_ENV_KEYS = exports.OSS_WARNING = void 0;
 exports.deriveKeyFromPassphrase = deriveKeyFromPassphrase;
 exports.storeKeyInKeyring = storeKeyInKeyring;
 exports.loadKeyFromKeyring = loadKeyFromKeyring;
@@ -52,15 +52,22 @@ exports.clearKeyring = clearKeyring;
 exports.encryptCredentials = encryptCredentials;
 exports.decryptCredentials = decryptCredentials;
 exports.vaultExists = vaultExists;
+exports.parseVaultMode = parseVaultMode;
+exports.readVaultMode = readVaultMode;
+exports.enforceOssSaltConsent = enforceOssSaltConsent;
 exports.loadVault = loadVault;
+exports.cleanupStaleTempFiles = cleanupStaleTempFiles;
 exports.saveVault = saveVault;
+exports.wipeVaultArtifacts = wipeVaultArtifacts;
 exports.secureWipeEnv = secureWipeEnv;
+exports.filteredEnv = filteredEnv;
 const node_crypto_1 = require("node:crypto");
 const crypto = __importStar(require("node:crypto"));
 const node_fs_1 = require("node:fs");
 const node_os_1 = require("node:os");
 const node_path_1 = require("node:path");
 const node_child_process_1 = require("node:child_process");
+const errors_js_1 = require("./errors.js");
 const VAULT_DIR = (0, node_path_1.join)((0, node_os_1.homedir)(), ".config", "pop-pay");
 const VAULT_PATH = (0, node_path_1.join)(VAULT_DIR, "vault.enc");
 const KEYRING_SERVICE = "pop-pay-vault";
@@ -153,8 +160,11 @@ function storeKeyInKeyring(key) {
         const keytar = require("keytar");
         keytar.setPassword(KEYRING_SERVICE, KEYRING_USERNAME, key.toString("hex"));
     }
-    catch {
-        throw new Error("keytar package required for passphrase mode. Install with: npm install keytar");
+    catch (e) {
+        throw new errors_js_1.VaultLocked({
+            cause: e,
+            remediation: "Install keytar: npm install keytar",
+        });
     }
 }
 async function loadKeyFromKeyring() {
@@ -187,7 +197,7 @@ function encryptCredentials(creds, salt, keyOverride) {
 function decryptCredentials(blob, salt, keyOverride) {
     if (blob.length < 28) {
         // 12 nonce + at least 16 GCM tag
-        throw new Error("vault.enc is corrupted or too small");
+        throw new errors_js_1.VaultDecryptFailed("vault.enc is corrupted or too small");
     }
     const key = deriveKey(salt, keyOverride);
     const nonce = blob.subarray(0, 12);
@@ -199,51 +209,98 @@ function decryptCredentials(blob, salt, keyOverride) {
         const plaintext = Buffer.concat([decipher.update(ciphertext), decipher.final()]);
         return JSON.parse(plaintext.toString("utf8"));
     }
-    catch {
-        throw new Error("Failed to decrypt vault \u2014 wrong key (machine changed?) or corrupted vault.\n" +
-            "Re-run: pop-init-vault");
+    catch (e) {
+        throw new errors_js_1.VaultDecryptFailed("Failed to decrypt vault \u2014 wrong key (machine changed?) or corrupted vault.", { cause: e });
     }
 }
 function vaultExists() {
     return (0, node_fs_1.existsSync)(VAULT_PATH);
 }
-function writeVaultMode() {
-    let mode = "oss";
-    try {
-        const native = require("../native/pop-pay-native.node");
-        mode = native.isHardened() ? "hardened" : "oss";
+function writeVaultMode(isPassphrase) {
+    let mode;
+    if (isPassphrase) {
+        mode = "passphrase";
+    }
+    else {
+        let hardened = false;
+        try {
+            const native = require("../native/pop-pay-native.node");
+            hardened = native.isHardened();
+        }
+        catch { }
+        mode = hardened ? "machine-hardened" : "machine-oss";
     }
-    catch { }
     const markerPath = (0, node_path_1.join)(VAULT_DIR, ".vault_mode");
     (0, node_fs_1.writeFileSync)(markerPath, mode, { mode: 0o600 });
 }
+/** Pure parse/migrate helper, exported for testability. */
+function parseVaultMode(raw) {
+    if (raw == null)
+        return "unknown";
+    const trimmed = raw.trim();
+    if (trimmed === "hardened")
+        return "machine-hardened";
+    if (trimmed === "oss")
+        return "machine-oss";
+    if (trimmed === "passphrase" ||
+        trimmed === "machine-hardened" ||
+        trimmed === "machine-oss") {
+        return trimmed;
+    }
+    return "unknown";
+}
 function readVaultMode() {
     const markerPath = (0, node_path_1.join)(VAULT_DIR, ".vault_mode");
     try {
-        return (0, node_fs_1.readFileSync)(markerPath, "utf8").trim();
+        return parseVaultMode((0, node_fs_1.readFileSync)(markerPath, "utf8"));
     }
     catch {
         return "unknown";
     }
 }
+/**
+ * F3: OSS salt consent gate. machine-oss vaults use a public salt that an
+ * agent with shell execution could derive from public information. Require
+ * explicit opt-in via POP_ACCEPT_OSS_SALT=1. Passphrase / machine-hardened /
+ * unknown bypass. Exported for direct testing.
+ */
+function enforceOssSaltConsent(vaultMode) {
+    if (vaultMode !== "machine-oss")
+        return;
+    if (process.env.POP_ACCEPT_OSS_SALT === "1")
+        return;
+    const warning = "pop-pay: vault is encrypted with the OSS public salt. " +
+        "An agent with shell execution could derive the key from public information.";
+    process.stdout.write("\u26a0\ufe0f  " + warning + "\n");
+    process.stderr.write("\u26a0\ufe0f  " + warning + "\n");
+    throw new errors_js_1.VaultDecryptFailed("OSS-salt vault load refused: set POP_ACCEPT_OSS_SALT=1 to acknowledge, or re-init via `pop-init-vault --passphrase` for stronger protection.", { remediation: "export POP_ACCEPT_OSS_SALT=1  # or: pop-init-vault --passphrase" });
+}
 async function loadVault() {
-    // Downgrade check
+    // Downgrade check: vault created under hardened build must not load
+    // against a stripped-salt build (attacker could drop the .node to force
+    // re-init at the weaker OSS salt). Passphrase / machine-oss / unknown
+    // pass through (no native-hardening requirement).
     const vaultMode = readVaultMode();
-    if (vaultMode === "hardened") {
+    if (vaultMode === "machine-hardened") {
         try {
             const native = require("../native/pop-pay-native.node");
             if (!native.isHardened()) {
-                throw new Error("Vault was created with a hardened build, but the native extension is missing or not hardened.\n" +
-                    "Reinstall via npm: npm install pop-pay");
+                throw new errors_js_1.VaultDecryptFailed("Vault was created with a hardened build, but the native extension is missing or not hardened.", { remediation: "Reinstall via npm: npm install pop-pay" });
             }
         }
         catch (e) {
-            if (e.code === "MODULE_NOT_FOUND") {
-                throw new Error("Vault requires hardened build but native module not found. Reinstall via npm: npm install pop-pay");
+            if (e instanceof errors_js_1.VaultDecryptFailed)
+                throw e;
+            if (e?.code === "MODULE_NOT_FOUND") {
+                throw new errors_js_1.VaultDecryptFailed("Vault requires hardened build but native module not found.", { cause: e, remediation: "Reinstall via npm: npm install pop-pay" });
             }
-            throw e;
+            throw new errors_js_1.VaultDecryptFailed(e?.message ?? "Vault hardened-build check failed", { cause: e });
         }
     }
+    enforceOssSaltConsent(vaultMode);
+    if (!(0, node_fs_1.existsSync)(VAULT_PATH)) {
+        throw new errors_js_1.VaultNotFound();
+    }
     const blob = (0, node_fs_1.readFileSync)(VAULT_PATH);
     // Try passphrase-derived key from keyring first
     const passphraseKey = await loadKeyFromKeyring();
@@ -251,14 +308,50 @@ async function loadVault() {
         try {
             return decryptCredentials(blob, undefined, passphraseKey);
         }
-        catch {
-            // Wrong key — fall through to machine-derived key
+        catch (e) {
+            if (!(e instanceof errors_js_1.VaultDecryptFailed))
+                throw e;
+            // Wrong passphrase key — fall through to machine-derived key (expected path)
         }
     }
     return decryptCredentials(blob);
 }
+/**
+ * F8: enumerate stale vault.enc*.tmp siblings under VAULT_DIR and securely
+ * overwrite + unlink each. Called on save (best-effort) and exposed for
+ * external use. A previous crashed save can leave a `.tmp` sibling that may
+ * still hold ciphertext bytes; we treat them as sensitive even though they
+ * are not plaintext.
+ */
+function cleanupStaleTempFiles() {
+    if (!(0, node_fs_1.existsSync)(VAULT_DIR))
+        return;
+    const fs = require("node:fs");
+    let entries = [];
+    try {
+        entries = fs.readdirSync(VAULT_DIR);
+    }
+    catch {
+        return;
+    }
+    for (const name of entries) {
+        if (!name.startsWith("vault.enc") || !name.endsWith(".tmp"))
+            continue;
+        const p = (0, node_path_1.join)(VAULT_DIR, name);
+        try {
+            const size = (0, node_fs_1.statSync)(p).size;
+            if (size > 0)
+                (0, node_fs_1.writeFileSync)(p, Buffer.alloc(size, 0));
+            (0, node_fs_1.unlinkSync)(p);
+        }
+        catch {
+            // best-effort; permission errors etc. are non-fatal at save time
+        }
+    }
+}
 function saveVault(creds, keyOverride) {
     (0, node_fs_1.mkdirSync)(VAULT_DIR, { recursive: true });
+    cleanupStaleTempFiles(); // F8: sweep prior crashed writes before our own .tmp
     const blob = encryptCredentials(creds, undefined, keyOverride);
     // Atomic write: tmp → rename
     const tmpPath = VAULT_PATH + ".tmp";
@@ -273,8 +366,46 @@ function saveVault(creds, keyOverride) {
     // Verify the vault is readable
     const verifyBlob = (0, node_fs_1.readFileSync)(VAULT_PATH);
     decryptCredentials(verifyBlob, undefined, keyOverride);
-    // Write mode marker
-    writeVaultMode();
+    // Write mode marker — F4/F7: passphrase / machine-hardened / machine-oss
+    writeVaultMode(keyOverride !== undefined);
+}
+/**
+ * F8: enumerate every credential-bearing artifact under VAULT_DIR and securely
+ * overwrite + unlink. Also clears the OS keyring so passphrase-derived keys
+ * are not left behind. Returns the list of paths that were wiped.
+ */
+async function wipeVaultArtifacts() {
+    const wiped = [];
+    if ((0, node_fs_1.existsSync)(VAULT_DIR)) {
+        const fs = require("node:fs");
+        let entries = [];
+        try {
+            entries = fs.readdirSync(VAULT_DIR);
+        }
+        catch {
+            entries = [];
+        }
+        // Anything that touches the vault: ciphertext, atomic temps, mode marker,
+        // fallback machine id. Other files in this dir (.env policy template, logs)
+        // are out of scope and left alone.
+        const sensitive = new Set([".vault_mode", ".machine_id"]);
+        for (const name of entries) {
+            const isVaultBlob = name === "vault.enc" || (name.startsWith("vault.enc") && name.endsWith(".tmp"));
+            if (!isVaultBlob && !sensitive.has(name))
+                continue;
+            const p = (0, node_path_1.join)(VAULT_DIR, name);
+            try {
+                const size = (0, node_fs_1.statSync)(p).size;
+                if (size > 0)
+                    (0, node_fs_1.writeFileSync)(p, Buffer.alloc(size, 0));
+                (0, node_fs_1.unlinkSync)(p);
+                wiped.push(p);
+            }
+            catch { /* best-effort */ }
+        }
+    }
+    await clearKeyring();
+    return wiped;
 }
 function secureWipeEnv(envPath) {
     if (!(0, node_fs_1.existsSync)(envPath))
@@ -283,4 +414,23 @@ function secureWipeEnv(envPath) {
     (0, node_fs_1.writeFileSync)(envPath, Buffer.alloc(size, 0));
     (0, node_fs_1.unlinkSync)(envPath);
 }
+// Names of env vars that carry plaintext PAN/CVV/expiry. Redacted from child
+// process environments so spawned tools (browsers, doctor, scripts) cannot
+// observe card data via their own env read. Vault plaintext never enters
+// process.env in the first place (see S0.7 F1); this is defense in depth.
+exports.SENSITIVE_ENV_KEYS = Object.freeze([
+    "POP_BYOC_NUMBER",
+    "POP_BYOC_CVV",
+    "POP_BYOC_EXP_MONTH",
+    "POP_BYOC_EXP_YEAR",
+]);
+function filteredEnv(base = process.env) {
+    const out = {};
+    for (const [k, v] of Object.entries(base)) {
+        if (exports.SENSITIVE_ENV_KEYS.includes(k))
+            continue;
+        out[k] = v;
+    }
+    return out;
+}
 //# sourceMappingURL=vault.js.map

package/dist/vault.js.map

@@ -1 +1 @@
-{"version":3,"file":"vault.js","sourceRoot":"","sources":["../src/vault.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;GAUG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAmGH,0DAGC;AAGD,8CASC;AAED,gDAOC;AAED,oCAKC;AAED,gDAaC;AAED,gDAwBC;AAED,kCAEC;AAqBD,8BAkCC;AAED,8BAoBC;AAED,sCAKC;AAjQD,6CAA8E;AAC9E,oDAAsC;AACtC,qCAAmG;AACnG,qCAAsD;AACtD,yCAAiC;AACjC,2DAA8C;AAE9C,MAAM,SAAS,GAAG,IAAA,gBAAI,EAAC,IAAA,iBAAO,GAAE,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;AACxD,MAAM,UAAU,GAAG,IAAA,gBAAI,EAAC,SAAS,EAAE,WAAW,CAAC,CAAC;AAEhD,MAAM,eAAe,GAAG,eAAe,CAAC;AACxC,MAAM,gBAAgB,GAAG,iBAAiB,CAAC;AAE3C,uEAAuE;AACvE,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;AAEnD,QAAA,WAAW,GACtB,kFAAkF;IAClF,yEAAyE;IACzE,gEAAgE;IAChE,qEAAqE;IACrE,8DAA8D,CAAC;AAEjE,SAAS,YAAY;IACnB,yBAAyB;IACzB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAA,sBAAY,EAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QAC3D,IAAI,GAAG;YAAE,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC,CAAA,CAAC;IAEV,wBAAwB;IACxB,IAAI,IAAA,kBAAQ,GAAE,KAAK,QAAQ,EAAE,CAAC;QAC5B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAA,6BAAQ,EAAC,sCAAsC,EAAE;gBAC9D,OAAO,EAAE,IAAI;gBACb,QAAQ,EAAE,MAAM;aACjB,CAAC,CAAC;YACH,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBACtC,IAAI,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;oBACpC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;oBAC9B,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;gBAC9C,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;IACZ,CAAC;IAED,qCAAqC;IACrC,IAAI,IAAA,kBAAQ,GAAE,KAAK,OAAO,EAAE,CAAC;QAC3B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAA,6BAAQ,EACrB,oEAAoE,EACpE,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,CACpC,CAAC;YACF,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;YAC1D,IAAI,KAAK;gBAAE,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACjD,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;IACZ,CAAC;IAED,yCAAyC;IACzC,MAAM,YAAY,GAAG,IAAA,gBAAI,EAAC,SAAS,EAAE,aAAa,CAAC,CAAC;IACpD,IAAI,IAAA,oBAAU,EAAC,YAAY,CAAC,EAAE,CAAC;QAC7B,OAAO,IAAA,sBAAY,EAAC,YAAY,CAAC,CAAC;IACpC,CAAC;IACD,MAAM,UAAU,GAAG,IAAA,yBAAW,EAAC,EAAE,CAAC,CAAC;IACnC,IAAA,mBAAS,EAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1C,IAAA,uBAAa,EAAC,YAAY,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACzD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,WAAW;IAClB,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,IAAI,CAAC,IAAA,kBAAQ,GAAE,CAAC,QAAQ,CAAC,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC,CAAA,CAAC;IACV,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,SAAS,CAAC,CAAC;AAC5E,CAAC;AAED,SAAS,SAAS,CAAC,IAAa,EAAE,WAAoB;IACpD,IAAI,WAAW;QAAE,OAAO,WAAW,CAAC;IAEpC,MAAM,SAAS,GAAG,YAAY,EAAE,CAAC;IACjC,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;IAE/B,uCAAuC;IACvC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,OAAO,CAAC,+BAA+B,CAAC,CAAC;YACxD,MAAM,GAAG,GAAG,MAAM,CAAC,SAAS,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;YAClD,IAAI,GAAG;gBAAE,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACnC,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;QACV,IAAI,GAAG,QAAQ,CAAC;IAClB,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC;IACxE,sDAAsD;IACtD,OAAO,IAAA,wBAAU,EAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;AACpE,CAAC;AAED,SAAgB,uBAAuB,CAAC,UAAkB;IACxD,MAAM,SAAS,GAAG,YAAY,EAAE,CAAC;IACjC,OAAO,IAAA,wBAAU,EAAC,UAAU,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,CAAC,CAAC;AAClE,CAAC;AAED,+CAA+C;AAC/C,SAAgB,iBAAiB,CAAC,GAAW;IAC3C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;QACjC,MAAM,CAAC,WAAW,CAAC,eAAe,EAAE,gBAAgB,EAAE,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;IAC7E,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CACb,+EAA+E,CAChF,CAAC;IACJ,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,kBAAkB;IACtC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;QACjC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,eAAe,EAAE,gBAAgB,CAAC,CAAC;QAC3E,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC,CAAA,CAAC;IACV,OAAO,IAAI,CAAC;AACd,CAAC;AAEM,KAAK,UAAU,YAAY;IAChC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;QACjC,MAAM,MAAM,CAAC,cAAc,CAAC,eAAe,EAAE,gBAAgB,CAAC,CAAC;IACjE,CAAC;IAAC,MAAM,CAAC,CAAA,CAAC;AACZ,CAAC;AAED,SAAgB,kBAAkB,CAChC,KAA6B,EAC7B,IAAa,EACb,WAAoB;IAEpB,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IACzC,MAAM,KAAK,GAAG,IAAA,yBAAW,EAAC,EAAE,CAAC,CAAC,CAAC,sBAAsB;IACrD,MAAM,MAAM,GAAG,MAAM,CAAC,cAAc,CAAC,aAAa,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;IAChE,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;IACrD,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAC5E,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,WAAW;IAC5C,sFAAsF;IACtF,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC;AAChD,CAAC;AAED,SAAgB,kBAAkB,CAChC,IAAY,EACZ,IAAa,EACb,WAAoB;IAEpB,IAAI,IAAI,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QACrB,iCAAiC;QACjC,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,CAAC;IACD,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IACzC,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACnC,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;IAC5C,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAG,MAAM,CAAC,gBAAgB,CAAC,aAAa,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;IACpE,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IACzB,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QACjF,OAAO,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CACb,mFAAmF;YACjF,wBAAwB,CAC3B,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAgB,WAAW;IACzB,OAAO,IAAA,oBAAU,EAAC,UAAU,CAAC,CAAC;AAChC,CAAC;AAED,SAAS,cAAc;IACrB,IAAI,IAAI,GAAG,KAAK,CAAC;IACjB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,OAAO,CAAC,+BAA+B,CAAC,CAAC;QACxD,IAAI,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC,CAAA,CAAC;IACV,MAAM,UAAU,GAAG,IAAA,gBAAI,EAAC,SAAS,EAAE,aAAa,CAAC,CAAC;IAClD,IAAA,uBAAa,EAAC,UAAU,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AACnD,CAAC;AAED,SAAS,aAAa;IACpB,MAAM,UAAU,GAAG,IAAA,gBAAI,EAAC,SAAS,EAAE,aAAa,CAAC,CAAC;IAClD,IAAI,CAAC;QACH,OAAO,IAAA,sBAAY,EAAC,UAAU,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,SAAS;IAC7B,kBAAkB;IAClB,MAAM,SAAS,GAAG,aAAa,EAAE,CAAC;IAClC,IAAI,SAAS,KAAK,UAAU,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,OAAO,CAAC,+BAA+B,CAAC,CAAC;YACxD,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,CAAC;gBACzB,MAAM,IAAI,KAAK,CACb,iGAAiG;oBAC/F,wCAAwC,CAC3C,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,IAAI,CAAC,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;gBAClC,MAAM,IAAI,KAAK,CACb,mGAAmG,CACpG,CAAC;YACJ,CAAC;YACD,MAAM,CAAC,CAAC;QACV,CAAC;IACH,CAAC;IAED,MAAM,IAAI,GAAG,IAAA,sBAAY,EAAC,UAAU,CAAC,CAAC;IAEtC,gDAAgD;IAChD,MAAM,aAAa,GAAG,MAAM,kBAAkB,EAAE,CAAC;IACjD,IAAI,aAAa,EAAE,CAAC;QAClB,IAAI,CAAC;YACH,OAAO,kBAAkB,CAAC,IAAI,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;QAC5D,CAAC;QAAC,MAAM,CAAC;YACP,kDAAkD;QACpD,CAAC;IACH,CAAC;IACD,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC;AAClC,CAAC;AAED,SAAgB,SAAS,CAAC,KAA6B,EAAE,WAAoB;IAC3E,IAAA,mBAAS,EAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1C,MAAM,IAAI,GAAG,kBAAkB,CAAC,KAAK,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;IAC/D,6BAA6B;IAC7B,MAAM,OAAO,GAAG,UAAU,GAAG,MAAM,CAAC;IACpC,IAAA,uBAAa,EAAC,OAAO,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAE9C,MAAM,EAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IAC9B,MAAM,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACtC,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IACjB,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAEjB,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IACnC,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IAChC,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAC/B,+BAA+B;IAC/B,MAAM,UAAU,GAAG,IAAA,sBAAY,EAAC,UAAU,CAAC,CAAC;IAC5C,kBAAkB,CAAC,UAAU,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;IACvD,oBAAoB;IACpB,cAAc,EAAE,CAAC;AACnB,CAAC;AAED,SAAgB,aAAa,CAAC,OAAe;IAC3C,IAAI,CAAC,IAAA,oBAAU,EAAC,OAAO,CAAC;QAAE,OAAO;IACjC,MAAM,IAAI,GAAG,IAAA,kBAAQ,EAAC,OAAO,CAAC,CAAC,IAAI,CAAC;IACpC,IAAA,uBAAa,EAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC9C,IAAA,oBAAU,EAAC,OAAO,CAAC,CAAC;AACtB,CAAC"}
+{"version":3,"file":"vault.js","sourceRoot":"","sources":["../src/vault.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;GAUG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAoGH,0DAGC;AAGD,8CAUC;AAED,gDAOC;AAED,oCAKC;AAED,gDAaC;AAED,gDAwBC;AAED,kCAEC;AAsCD,wCAaC;AAED,sCAOC;AAQD,sDAYC;AAED,8BAgDC;AASD,sDAgBC;AAED,8BAqBC;AAOD,gDAwBC;AAED,sCAKC;AAaD,kCAOC;AA3ZD,6CAA8E;AAC9E,oDAAsC;AACtC,qCAAmG;AACnG,qCAAsD;AACtD,yCAAiC;AACjC,2DAA8C;AAC9C,2CAA6E;AAE7E,MAAM,SAAS,GAAG,IAAA,gBAAI,EAAC,IAAA,iBAAO,GAAE,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;AACxD,MAAM,UAAU,GAAG,IAAA,gBAAI,EAAC,SAAS,EAAE,WAAW,CAAC,CAAC;AAEhD,MAAM,eAAe,GAAG,eAAe,CAAC;AACxC,MAAM,gBAAgB,GAAG,iBAAiB,CAAC;AAE3C,uEAAuE;AACvE,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;AAEnD,QAAA,WAAW,GACtB,kFAAkF;IAClF,yEAAyE;IACzE,gEAAgE;IAChE,qEAAqE;IACrE,8DAA8D,CAAC;AAEjE,SAAS,YAAY;IACnB,yBAAyB;IACzB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAA,sBAAY,EAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QAC3D,IAAI,GAAG;YAAE,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC,CAAA,CAAC;IAEV,wBAAwB;IACxB,IAAI,IAAA,kBAAQ,GAAE,KAAK,QAAQ,EAAE,CAAC;QAC5B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAA,6BAAQ,EAAC,sCAAsC,EAAE;gBAC9D,OAAO,EAAE,IAAI;gBACb,QAAQ,EAAE,MAAM;aACjB,CAAC,CAAC;YACH,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBACtC,IAAI,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;oBACpC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;oBAC9B,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;gBAC9C,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;IACZ,CAAC;IAED,qCAAqC;IACrC,IAAI,IAAA,kBAAQ,GAAE,KAAK,OAAO,EAAE,CAAC;QAC3B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAA,6BAAQ,EACrB,oEAAoE,EACpE,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,CACpC,CAAC;YACF,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;YAC1D,IAAI,KAAK;gBAAE,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACjD,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;IACZ,CAAC;IAED,yCAAyC;IACzC,MAAM,YAAY,GAAG,IAAA,gBAAI,EAAC,SAAS,EAAE,aAAa,CAAC,CAAC;IACpD,IAAI,IAAA,oBAAU,EAAC,YAAY,CAAC,EAAE,CAAC;QAC7B,OAAO,IAAA,sBAAY,EAAC,YAAY,CAAC,CAAC;IACpC,CAAC;IACD,MAAM,UAAU,GAAG,IAAA,yBAAW,EAAC,EAAE,CAAC,CAAC;IACnC,IAAA,mBAAS,EAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1C,IAAA,uBAAa,EAAC,YAAY,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACzD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,WAAW;IAClB,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,IAAI,CAAC,IAAA,kBAAQ,GAAE,CAAC,QAAQ,CAAC,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC,CAAA,CAAC;IACV,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,SAAS,CAAC,CAAC;AAC5E,CAAC;AAED,SAAS,SAAS,CAAC,IAAa,EAAE,WAAoB;IACpD,IAAI,WAAW;QAAE,OAAO,WAAW,CAAC;IAEpC,MAAM,SAAS,GAAG,YAAY,EAAE,CAAC;IACjC,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;IAE/B,uCAAuC;IACvC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,OAAO,CAAC,+BAA+B,CAAC,CAAC;YACxD,MAAM,GAAG,GAAG,MAAM,CAAC,SAAS,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;YAClD,IAAI,GAAG;gBAAE,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACnC,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;QACV,IAAI,GAAG,QAAQ,CAAC;IAClB,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC;IACxE,sDAAsD;IACtD,OAAO,IAAA,wBAAU,EAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;AACpE,CAAC;AAED,SAAgB,uBAAuB,CAAC,UAAkB;IACxD,MAAM,SAAS,GAAG,YAAY,EAAE,CAAC;IACjC,OAAO,IAAA,wBAAU,EAAC,UAAU,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,CAAC,CAAC;AAClE,CAAC;AAED,+CAA+C;AAC/C,SAAgB,iBAAiB,CAAC,GAAW;IAC3C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;QACjC,MAAM,CAAC,WAAW,CAAC,eAAe,EAAE,gBAAgB,EAAE,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;IAC7E,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,uBAAW,CAAC;YACpB,KAAK,EAAE,CAAC;YACR,WAAW,EAAE,oCAAoC;SAClD,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,kBAAkB;IACtC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;QACjC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,eAAe,EAAE,gBAAgB,CAAC,CAAC;QAC3E,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC,CAAA,CAAC;IACV,OAAO,IAAI,CAAC;AACd,CAAC;AAEM,KAAK,UAAU,YAAY;IAChC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;QACjC,MAAM,MAAM,CAAC,cAAc,CAAC,eAAe,EAAE,gBAAgB,CAAC,CAAC;IACjE,CAAC;IAAC,MAAM,CAAC,CAAA,CAAC;AACZ,CAAC;AAED,SAAgB,kBAAkB,CAChC,KAA6B,EAC7B,IAAa,EACb,WAAoB;IAEpB,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IACzC,MAAM,KAAK,GAAG,IAAA,yBAAW,EAAC,EAAE,CAAC,CAAC,CAAC,sBAAsB;IACrD,MAAM,MAAM,GAAG,MAAM,CAAC,cAAc,CAAC,aAAa,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;IAChE,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;IACrD,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAC5E,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,WAAW;IAC5C,sFAAsF;IACtF,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC;AAChD,CAAC;AAED,SAAgB,kBAAkB,CAChC,IAAY,EACZ,IAAa,EACb,WAAoB;IAEpB,IAAI,IAAI,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QACrB,iCAAiC;QACjC,MAAM,IAAI,8BAAkB,CAAC,qCAAqC,CAAC,CAAC;IACtE,CAAC;IACD,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IACzC,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACnC,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;IAC5C,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAG,MAAM,CAAC,gBAAgB,CAAC,aAAa,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;IACpE,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IACzB,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QACjF,OAAO,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAChD,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,8BAAkB,CAC1B,iFAAiF,EACjF,EAAE,KAAK,EAAE,CAAC,EAAE,CACb,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAgB,WAAW;IACzB,OAAO,IAAA,oBAAU,EAAC,UAAU,CAAC,CAAC;AAChC,CAAC;AAqBD,SAAS,cAAc,CAAC,YAAqB;IAC3C,IAAI,IAAe,CAAC;IACpB,IAAI,YAAY,EAAE,CAAC;QACjB,IAAI,GAAG,YAAY,CAAC;IACtB,CAAC;SAAM,CAAC;QACN,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,OAAO,CAAC,+BAA+B,CAAC,CAAC;YACxD,QAAQ,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QACjC,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;QACV,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,aAAa,CAAC;IACvD,CAAC;IACD,MAAM,UAAU,GAAG,IAAA,gBAAI,EAAC,SAAS,EAAE,aAAa,CAAC,CAAC;IAClD,IAAA,uBAAa,EAAC,UAAU,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AACnD,CAAC;AAED,2DAA2D;AAC3D,SAAgB,cAAc,CAAC,GAA8B;IAC3D,IAAI,GAAG,IAAI,IAAI;QAAE,OAAO,SAAS,CAAC;IAClC,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,IAAI,OAAO,KAAK,UAAU;QAAE,OAAO,kBAAkB,CAAC;IACtD,IAAI,OAAO,KAAK,KAAK;QAAE,OAAO,aAAa,CAAC;IAC5C,IACE,OAAO,KAAK,YAAY;QACxB,OAAO,KAAK,kBAAkB;QAC9B,OAAO,KAAK,aAAa,EACzB,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAgB,aAAa;IAC3B,MAAM,UAAU,GAAG,IAAA,gBAAI,EAAC,SAAS,EAAE,aAAa,CAAC,CAAC;IAClD,IAAI,CAAC;QACH,OAAO,cAAc,CAAC,IAAA,sBAAY,EAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC;IAC1D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAgB,qBAAqB,CAAC,SAAoB;IACxD,IAAI,SAAS,KAAK,aAAa;QAAE,OAAO;IACxC,IAAI,OAAO,CAAC,GAAG,CAAC,mBAAmB,KAAK,GAAG;QAAE,OAAO;IACpD,MAAM,OAAO,GACX,wDAAwD;QACxD,6EAA6E,CAAC;IAChF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,GAAG,OAAO,GAAG,IAAI,CAAC,CAAC;IACxD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,GAAG,OAAO,GAAG,IAAI,CAAC,CAAC;IACxD,MAAM,IAAI,8BAAkB,CAC1B,8IAA8I,EAC9I,EAAE,WAAW,EAAE,iEAAiE,EAAE,CACnF,CAAC;AACJ,CAAC;AAEM,KAAK,UAAU,SAAS;IAC7B,oEAAoE;IACpE,wEAAwE;IACxE,sEAAsE;IACtE,kDAAkD;IAClD,MAAM,SAAS,GAAG,aAAa,EAAE,CAAC;IAClC,IAAI,SAAS,KAAK,kBAAkB,EAAE,CAAC;QACrC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,OAAO,CAAC,+BAA+B,CAAC,CAAC;YACxD,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,CAAC;gBACzB,MAAM,IAAI,8BAAkB,CAC1B,+FAA+F,EAC/F,EAAE,WAAW,EAAE,wCAAwC,EAAE,CAC1D,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,IAAI,CAAC,YAAY,8BAAkB;gBAAE,MAAM,CAAC,CAAC;YAC7C,IAAI,CAAC,EAAE,IAAI,KAAK,kBAAkB,EAAE,CAAC;gBACnC,MAAM,IAAI,8BAAkB,CAC1B,4DAA4D,EAC5D,EAAE,KAAK,EAAE,CAAC,EAAE,WAAW,EAAE,wCAAwC,EAAE,CACpE,CAAC;YACJ,CAAC;YACD,MAAM,IAAI,8BAAkB,CAC1B,CAAC,EAAE,OAAO,IAAI,mCAAmC,EACjD,EAAE,KAAK,EAAE,CAAC,EAAE,CACb,CAAC;QACJ,CAAC;IACH,CAAC;IAED,qBAAqB,CAAC,SAAS,CAAC,CAAC;IAEjC,IAAI,CAAC,IAAA,oBAAU,EAAC,UAAU,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,yBAAa,EAAE,CAAC;IAC5B,CAAC;IACD,MAAM,IAAI,GAAG,IAAA,sBAAY,EAAC,UAAU,CAAC,CAAC;IAEtC,gDAAgD;IAChD,MAAM,aAAa,GAAG,MAAM,kBAAkB,EAAE,CAAC;IACjD,IAAI,aAAa,EAAE,CAAC;QAClB,IAAI,CAAC;YACH,OAAO,kBAAkB,CAAC,IAAI,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;QAC5D,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,CAAC,CAAC,YAAY,8BAAkB,CAAC;gBAAE,MAAM,CAAC,CAAC;YAChD,6EAA6E;QAC/E,CAAC;IACH,CAAC;IACD,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC;AAClC,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,qBAAqB;IACnC,IAAI,CAAC,IAAA,oBAAU,EAAC,SAAS,CAAC;QAAE,OAAO;IACnC,MAAM,EAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IAC9B,IAAI,OAAO,GAAa,EAAE,CAAC;IAC3B,IAAI,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO;IAAC,CAAC;IAC9D,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,SAAS;QACtE,MAAM,CAAC,GAAG,IAAA,gBAAI,EAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAChC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAA,kBAAQ,EAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAC9B,IAAI,IAAI,GAAG,CAAC;gBAAE,IAAA,uBAAa,EAAC,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YACtD,IAAA,oBAAU,EAAC,CAAC,CAAC,CAAC;QAChB,CAAC;QAAC,MAAM,CAAC;YACP,iEAAiE;QACnE,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAgB,SAAS,CAAC,KAA6B,EAAE,WAAoB;IAC3E,IAAA,mBAAS,EAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1C,qBAAqB,EAAE,CAAC,CAAC,qDAAqD;IAC9E,MAAM,IAAI,GAAG,kBAAkB,CAAC,KAAK,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;IAC/D,6BAA6B;IAC7B,MAAM,OAAO,GAAG,UAAU,GAAG,MAAM,CAAC;IACpC,IAAA,uBAAa,EAAC,OAAO,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAE9C,MAAM,EAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IAC9B,MAAM,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACtC,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IACjB,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAEjB,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IACnC,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IAChC,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAC/B,+BAA+B;IAC/B,MAAM,UAAU,GAAG,IAAA,sBAAY,EAAC,UAAU,CAAC,CAAC;IAC5C,kBAAkB,CAAC,UAAU,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;IACvD,yEAAyE;IACzE,cAAc,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC;AAC5C,CAAC;AAED;;;;GAIG;AACI,KAAK,UAAU,kBAAkB;IACtC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,IAAA,oBAAU,EAAC,SAAS,CAAC,EAAE,CAAC;QAC1B,MAAM,EAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;QAC9B,IAAI,OAAO,GAAa,EAAE,CAAC;QAC3B,IAAI,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;QAAC,CAAC;QACpE,0EAA0E;QAC1E,4EAA4E;QAC5E,mCAAmC;QACnC,MAAM,SAAS,GAAG,IAAI,GAAG,CAAS,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC,CAAC;QAClE,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;YAC3B,MAAM,WAAW,GAAG,IAAI,KAAK,WAAW,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;YACpG,IAAI,CAAC,WAAW,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,SAAS;YACnD,MAAM,CAAC,GAAG,IAAA,gBAAI,EAAC,SAAS,EAAE,IAAI,CAAC,CAAC;YAChC,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,IAAA,kBAAQ,EAAC,CAAC,CAAC,CAAC,IAAI,CAAC;gBAC9B,IAAI,IAAI,GAAG,CAAC;oBAAE,IAAA,uBAAa,EAAC,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;gBACtD,IAAA,oBAAU,EAAC,CAAC,CAAC,CAAC;gBACd,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAChB,CAAC;YAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;IACD,MAAM,YAAY,EAAE,CAAC;IACrB,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAgB,aAAa,CAAC,OAAe;IAC3C,IAAI,CAAC,IAAA,oBAAU,EAAC,OAAO,CAAC;QAAE,OAAO;IACjC,MAAM,IAAI,GAAG,IAAA,kBAAQ,EAAC,OAAO,CAAC,CAAC,IAAI,CAAC;IACpC,IAAA,uBAAa,EAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC9C,IAAA,oBAAU,EAAC,OAAO,CAAC,CAAC;AACtB,CAAC;AAED,6EAA6E;AAC7E,2EAA2E;AAC3E,yEAAyE;AACzE,0EAA0E;AAC7D,QAAA,kBAAkB,GAAG,MAAM,CAAC,MAAM,CAAC;IAC9C,iBAAiB;IACjB,cAAc;IACd,oBAAoB;IACpB,mBAAmB;CACpB,CAAC,CAAC;AAEH,SAAgB,WAAW,CAAC,OAA0B,OAAO,CAAC,GAAG;IAC/D,MAAM,GAAG,GAAsB,EAAE,CAAC;IAClC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1C,IAAI,0BAAkB,CAAC,QAAQ,CAAC,CAAC,CAAC;YAAE,SAAS;QAC7C,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACb,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pop-pay",
-  "version": "0.5.7",
+  "version": "0.5.9",
   "mcpName": "io.github.100xPercent/pop-pay",
   "description": "The runtime security layer for AI agent commerce. Drop-in CLI + MCP server — blocks hallucinated purchases and keeps card credentials out of agent context. It only takes 0.1% of hallucination to drain 100% of your wallet.",
   "main": "dist/index.js",
@@ -65,6 +65,7 @@
     "stripe": "^17.0.0"
   },
   "devDependencies": {
+    "@anthropic-ai/sdk": "^0.89.0",
     "@types/better-sqlite3": "^7.6.0",
     "@types/node": "^20.0.0",
     "eslint": "^9.0.0",