usertrust 1.0.0 → 1.1.0

package/dist/supply-chain/permissions.js

@@ -0,0 +1,89 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright 2026 Usertools, Inc.
+import { createHash } from "node:crypto";
+import { canonicalize } from "../audit/canonical.js";
+import { SkillVerificationError } from "../shared/errors.js";
+import { SkillManifestSchema } from "../shared/types.js";
+import { verifySignature } from "./sign.js";
+/**
+ * Computes a SHA-256 hash of the full manifest for audit inclusion.
+ */
+function computeManifestHash(manifest) {
+    const canonical = canonicalize(manifest);
+    return createHash("sha256").update(canonical).digest("hex");
+}
+/**
+ * Checks whether a manifest's permissions are allowed by the config policy.
+ * Trusted publishers bypass permission restrictions.
+ */
+export function checkPermissions(manifest, config) {
+    const sc = config.supplyChain;
+    const manifestHash = computeManifestHash(manifest);
+    // Trusted publishers get all permissions
+    if (sc.trustedPublishers.includes(manifest.publisher)) {
+        return {
+            valid: true,
+            permissionsAllowed: true,
+            deniedPermissions: [],
+            manifestHash,
+        };
+    }
+    const allowed = new Set(sc.allowedPermissions);
+    const denied = manifest.permissions.filter((p) => !allowed.has(p));
+    return {
+        valid: true,
+        permissionsAllowed: denied.length === 0,
+        deniedPermissions: denied,
+        manifestHash,
+    };
+}
+/**
+ * Full verification pipeline: validate schema, verify signature, check permissions, check trusted publishers.
+ * Returns a SkillVerification result. Throws SkillVerificationError on hard failures.
+ */
+export function enforceSkillLoad(manifest, config) {
+    const sc = config.supplyChain;
+    // Guard: if supply chain is disabled, allow everything
+    if (!sc.enabled) {
+        return {
+            valid: true,
+            permissionsAllowed: true,
+            deniedPermissions: [],
+            manifestHash: computeManifestHash(manifest),
+        };
+    }
+    // Step 1: Validate schema
+    const parseResult = SkillManifestSchema.safeParse(manifest);
+    if (!parseResult.success) {
+        const reason = parseResult.error.issues.map((i) => i.message).join("; ");
+        throw new SkillVerificationError(manifest.id ?? "unknown", `Schema validation failed: ${reason}`);
+    }
+    // Step 2: Verify signature
+    // Always verify signature for trusted publishers (prevent publisher forgery)
+    // Also verify if requireSignature is true
+    const isTrusted = sc.trustedPublishers.includes(manifest.publisher);
+    if (sc.requireSignature || isTrusted) {
+        const sigValid = verifySignature(manifest);
+        if (!sigValid) {
+            const manifestHash = computeManifestHash(manifest);
+            return {
+                valid: false,
+                permissionsAllowed: false,
+                deniedPermissions: manifest.permissions,
+                manifestHash,
+                error: "Invalid manifest signature",
+            };
+        }
+    }
+    // Step 3: Check permissions and trusted publishers
+    const result = checkPermissions(manifest, config);
+    if (!result.permissionsAllowed) {
+        return {
+            ...result,
+            valid: false,
+            error: `Denied permissions: ${result.deniedPermissions.join(", ")}`,
+        };
+    }
+    return result;
+}
+//# sourceMappingURL=permissions.js.map

package/dist/supply-chain/permissions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions.js","sourceRoot":"","sources":["../../src/supply-chain/permissions.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,iCAAiC;AAEjC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAO7D,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAE5C;;GAEG;AACH,SAAS,mBAAmB,CAAC,QAAuB;IACnD,MAAM,SAAS,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;IACzC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC7D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAAuB,EAAE,MAAmB;IAC5E,MAAM,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC;IAC9B,MAAM,YAAY,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC;IAEnD,yCAAyC;IACzC,IAAI,EAAE,CAAC,iBAAiB,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACvD,OAAO;YACN,KAAK,EAAE,IAAI;YACX,kBAAkB,EAAE,IAAI;YACxB,iBAAiB,EAAE,EAAE;YACrB,YAAY;SACZ,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,GAAG,CAAkB,EAAE,CAAC,kBAAkB,CAAC,CAAC;IAChE,MAAM,MAAM,GAAG,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAEnE,OAAO;QACN,KAAK,EAAE,IAAI;QACX,kBAAkB,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;QACvC,iBAAiB,EAAE,MAAM;QACzB,YAAY;KACZ,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAAuB,EAAE,MAAmB;IAC5E,MAAM,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC;IAE9B,uDAAuD;IACvD,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC;QACjB,OAAO;YACN,KAAK,EAAE,IAAI;YACX,kBAAkB,EAAE,IAAI;YACxB,iBAAiB,EAAE,EAAE;YACrB,YAAY,EAAE,mBAAmB,CAAC,QAAQ,CAAC;SAC3C,CAAC;IACH,CAAC;IAED,0BAA0B;IAC1B,MAAM,WAAW,GAAG,mBAAmB,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAC5D,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;QAC1B,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzE,MAAM,IAAI,sBAAsB,CAC9B,QAA4B,CAAC,EAAE,IAAI,SAAS,EAC7C,6BAA6B,MAAM,EAAE,CACrC,CAAC;IACH,CAAC;IAED,2BAA2B;IAC3B,6EAA6E;IAC7E,0CAA0C;IAC1C,MAAM,SAAS,GAAG,EAAE,CAAC,iBAAiB,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IACpE,IAAI,EAAE,CAAC,gBAAgB,IAAI,SAAS,EAAE,CAAC;QACtC,MAAM,QAAQ,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;QAC3C,IAAI,CAAC,QAAQ,EAAE,CAAC;YACf,MAAM,YAAY,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC;YACnD,OAAO;gBACN,KAAK,EAAE,KAAK;gBACZ,kBAAkB,EAAE,KAAK;gBACzB,iBAAiB,EAAE,QAAQ,CAAC,WAAW;gBACvC,YAAY;gBACZ,KAAK,EAAE,4BAA4B;aACnC,CAAC;QACH,CAAC;IACF,CAAC;IAED,mDAAmD;IACnD,MAAM,MAAM,GAAG,gBAAgB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAElD,IAAI,CAAC,MAAM,CAAC,kBAAkB,EAAE,CAAC;QAChC,OAAO;YACN,GAAG,MAAM;YACT,KAAK,EAAE,KAAK;YACZ,KAAK,EAAE,uBAAuB,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;SACnE,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AACf,CAAC"}

package/dist/supply-chain/sign.d.ts

@@ -0,0 +1,17 @@
+import type { SkillManifest } from "../shared/types.js";
+/**
+ * Generates an Ed25519 keypair. Returns hex-encoded public and private keys.
+ */
+export declare function generateKeyPair(): {
+    publicKey: string;
+    privateKey: string;
+};
+/**
+ * Signs an unsigned manifest with the given private key. Returns a fully signed SkillManifest.
+ */
+export declare function signManifest(manifest: Omit<SkillManifest, "signature" | "publicKey" | "signedAt">, privateKeyHex: string): SkillManifest;
+/**
+ * Verifies the Ed25519 signature on a signed manifest.
+ */
+export declare function verifySignature(manifest: SkillManifest): boolean;
+//# sourceMappingURL=sign.d.ts.map

package/dist/supply-chain/sign.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sign.d.ts","sourceRoot":"","sources":["../../src/supply-chain/sign.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAExD;;GAEG;AACH,wBAAgB,eAAe,IAAI;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAU3E;AAuBD;;GAEG;AACH,wBAAgB,YAAY,CAC3B,QAAQ,EAAE,IAAI,CAAC,aAAa,EAAE,WAAW,GAAG,WAAW,GAAG,UAAU,CAAC,EACrE,aAAa,EAAE,MAAM,GACnB,aAAa,CA+Bf;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,aAAa,GAAG,OAAO,CA+BhE"}

package/dist/supply-chain/sign.js

@@ -0,0 +1,95 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright 2026 Usertools, Inc.
+import { createPrivateKey, createPublicKey, generateKeyPairSync, sign, verify } from "node:crypto";
+import { canonicalize } from "../audit/canonical.js";
+/**
+ * Generates an Ed25519 keypair. Returns hex-encoded public and private keys.
+ */
+export function generateKeyPair() {
+    const { publicKey, privateKey } = generateKeyPairSync("ed25519", {
+        publicKeyEncoding: { type: "spki", format: "der" },
+        privateKeyEncoding: { type: "pkcs8", format: "der" },
+    });
+    // Ed25519 SPKI DER is 44 bytes: 12-byte prefix + 32-byte raw key
+    const rawPublic = publicKey.subarray(12).toString("hex");
+    // Return full DER for private key (needed for signing)
+    const rawPrivate = privateKey.toString("hex");
+    return { publicKey: rawPublic, privateKey: rawPrivate };
+}
+/**
+ * Computes the canonical hash of manifest fields for signing (excluding signature and publicKey and signedAt).
+ */
+function computeSigningPayload(manifest, signedAt, publicKey) {
+    const hashable = {
+        version: manifest.version,
+        id: manifest.id,
+        name: manifest.name,
+        publisher: manifest.publisher,
+        permissions: manifest.permissions,
+        entryHash: manifest.entryHash,
+        signedAt,
+        publicKey,
+    };
+    return canonicalize(hashable);
+}
+/**
+ * Signs an unsigned manifest with the given private key. Returns a fully signed SkillManifest.
+ */
+export function signManifest(manifest, privateKeyHex) {
+    const privateKeyDer = Buffer.from(privateKeyHex, "hex");
+    const privateKey = {
+        key: privateKeyDer,
+        format: "der",
+        type: "pkcs8",
+    };
+    // Derive public key from the private key
+    const privKeyObj = createPrivateKey({
+        key: privateKeyDer,
+        format: "der",
+        type: "pkcs8",
+    });
+    const pubKeyObj = createPublicKey(privKeyObj);
+    const pubKeyDerActual = pubKeyObj.export({ type: "spki", format: "der" });
+    const publicKeyHex = pubKeyDerActual.subarray(12).toString("hex");
+    const signedAt = new Date().toISOString();
+    const payload = computeSigningPayload(manifest, signedAt, publicKeyHex);
+    const payloadBytes = Buffer.from(payload, "utf-8");
+    const signature = sign(null, payloadBytes, privateKey);
+    const signatureHex = signature.toString("hex");
+    return {
+        ...manifest,
+        signedAt,
+        publicKey: publicKeyHex,
+        signature: signatureHex,
+    };
+}
+/**
+ * Verifies the Ed25519 signature on a signed manifest.
+ */
+export function verifySignature(manifest) {
+    try {
+        const payload = computeSigningPayload({
+            version: manifest.version,
+            id: manifest.id,
+            name: manifest.name,
+            publisher: manifest.publisher,
+            permissions: manifest.permissions,
+            entryHash: manifest.entryHash,
+        }, manifest.signedAt, manifest.publicKey);
+        const payloadBytes = Buffer.from(payload, "utf-8");
+        // Reconstruct DER-encoded SPKI public key from raw 32-byte key
+        const rawPubKey = Buffer.from(manifest.publicKey, "hex");
+        const spkiPrefix = Buffer.from("302a300506032b6570032100", "hex");
+        const spkiDer = Buffer.concat([spkiPrefix, rawPubKey]);
+        const publicKey = {
+            key: spkiDer,
+            format: "der",
+            type: "spki",
+        };
+        return verify(null, payloadBytes, publicKey, Buffer.from(manifest.signature, "hex"));
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=sign.js.map

package/dist/supply-chain/sign.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sign.js","sourceRoot":"","sources":["../../src/supply-chain/sign.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,iCAAiC;AAEjC,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,mBAAmB,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACnG,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAGrD;;GAEG;AACH,MAAM,UAAU,eAAe;IAC9B,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,mBAAmB,CAAC,SAAS,EAAE;QAChE,iBAAiB,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE;QAClD,kBAAkB,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE;KACpD,CAAC,CAAC;IACH,iEAAiE;IACjE,MAAM,SAAS,GAAI,SAAoB,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACrE,uDAAuD;IACvD,MAAM,UAAU,GAAI,UAAqB,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC1D,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC;AACzD,CAAC;AAED;;GAEG;AACH,SAAS,qBAAqB,CAC7B,QAAqE,EACrE,QAAgB,EAChB,SAAiB;IAEjB,MAAM,QAAQ,GAAG;QAChB,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,EAAE,EAAE,QAAQ,CAAC,EAAE;QACf,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,WAAW,EAAE,QAAQ,CAAC,WAAW;QACjC,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,QAAQ;QACR,SAAS;KACT,CAAC;IACF,OAAO,YAAY,CAAC,QAAQ,CAAC,CAAC;AAC/B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY,CAC3B,QAAqE,EACrE,aAAqB;IAErB,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;IACxD,MAAM,UAAU,GAAG;QAClB,GAAG,EAAE,aAAa;QAClB,MAAM,EAAE,KAAc;QACtB,IAAI,EAAE,OAAgB;KACtB,CAAC;IAEF,yCAAyC;IACzC,MAAM,UAAU,GAAG,gBAAgB,CAAC;QACnC,GAAG,EAAE,aAAa;QAClB,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,OAAO;KACb,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC;IAC9C,MAAM,eAAe,GAAG,SAAS,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1E,MAAM,YAAY,GAAI,eAA0B,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAE9E,MAAM,QAAQ,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC1C,MAAM,OAAO,GAAG,qBAAqB,CAAC,QAAQ,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;IACxE,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAEnD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,YAAY,EAAE,UAAU,CAAC,CAAC;IACvD,MAAM,YAAY,GAAI,SAAoB,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAE3D,OAAO;QACN,GAAG,QAAQ;QACX,QAAQ;QACR,SAAS,EAAE,YAAY;QACvB,SAAS,EAAE,YAAY;KACvB,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,QAAuB;IACtD,IAAI,CAAC;QACJ,MAAM,OAAO,GAAG,qBAAqB,CACpC;YACC,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,EAAE,EAAE,QAAQ,CAAC,EAAE;YACf,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,WAAW,EAAE,QAAQ,CAAC,WAAW;YACjC,SAAS,EAAE,QAAQ,CAAC,SAAS;SAC7B,EACD,QAAQ,CAAC,QAAQ,EACjB,QAAQ,CAAC,SAAS,CAClB,CAAC;QACF,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAEnD,+DAA+D;QAC/D,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QACzD,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE,KAAK,CAAC,CAAC;QAClE,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC;QAEvD,MAAM,SAAS,GAAG;YACjB,GAAG,EAAE,OAAO;YACZ,MAAM,EAAE,KAAc;YACtB,IAAI,EAAE,MAAe;SACrB,CAAC;QAEF,OAAO,MAAM,CAAC,IAAI,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC;IACtF,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,KAAK,CAAC;IACd,CAAC;AACF,CAAC"}

package/dist/vault/derive.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Derive a 32-byte AES-256 key from a passphrase using scrypt.
+ *
+ * @param passphrase - The master passphrase (from env var).
+ * @param salt - A 16-byte salt (from generateSalt or stored alongside ciphertext).
+ * @returns A 32-byte Buffer suitable for AES-256-GCM.
+ */
+export declare function deriveKey(passphrase: string, salt: Buffer): Buffer;
+/**
+ * Generate a cryptographically random 16-byte salt.
+ */
+export declare function generateSalt(): Buffer;
+//# sourceMappingURL=derive.d.ts.map

package/dist/vault/derive.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"derive.d.ts","sourceRoot":"","sources":["../../src/vault/derive.ts"],"names":[],"mappings":"AAYA;;;;;;GAMG;AACH,wBAAgB,SAAS,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAQlE;AAED;;GAEG;AACH,wBAAgB,YAAY,IAAI,MAAM,CAErC"}

package/dist/vault/derive.js

@@ -0,0 +1,32 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright 2026 Usertools, Inc.
+/**
+ * Key Derivation — scrypt-based AES-256 key from passphrase + salt.
+ *
+ * Uses node:crypto scryptSync with N=2^17, r=8, p=1 to derive a 32-byte
+ * key suitable for AES-256-GCM encryption of the credential vault.
+ */
+import { randomBytes, scryptSync } from "node:crypto";
+/**
+ * Derive a 32-byte AES-256 key from a passphrase using scrypt.
+ *
+ * @param passphrase - The master passphrase (from env var).
+ * @param salt - A 16-byte salt (from generateSalt or stored alongside ciphertext).
+ * @returns A 32-byte Buffer suitable for AES-256-GCM.
+ */
+export function deriveKey(passphrase, salt) {
+    // maxmem must cover 128 * N * r = 128 MiB for N=2^17, r=8.
+    return scryptSync(passphrase, salt, 32, {
+        N: 2 ** 17,
+        r: 8,
+        p: 1,
+        maxmem: 256 * 1024 * 1024,
+    });
+}
+/**
+ * Generate a cryptographically random 16-byte salt.
+ */
+export function generateSalt() {
+    return randomBytes(16);
+}
+//# sourceMappingURL=derive.js.map

package/dist/vault/derive.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"derive.js","sourceRoot":"","sources":["../../src/vault/derive.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,iCAAiC;AAEjC;;;;;GAKG;AAEH,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEtD;;;;;;GAMG;AACH,MAAM,UAAU,SAAS,CAAC,UAAkB,EAAE,IAAY;IACzD,2DAA2D;IAC3D,OAAO,UAAU,CAAC,UAAU,EAAE,IAAI,EAAE,EAAE,EAAE;QACvC,CAAC,EAAE,CAAC,IAAI,EAAE;QACV,CAAC,EAAE,CAAC;QACJ,CAAC,EAAE,CAAC;QACJ,MAAM,EAAE,GAAG,GAAG,IAAI,GAAG,IAAI;KACzB,CAAW,CAAC;AACd,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY;IAC3B,OAAO,WAAW,CAAC,EAAE,CAAC,CAAC;AACxB,CAAC"}

package/dist/vault/scope.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Scope Checking — validates credential access against agent, action, and expiry constraints.
+ */
+import type { ActionKind, CredentialScope } from "../shared/types.js";
+/**
+ * Check whether an accessor is allowed to use a credential given its scope.
+ *
+ * Rules:
+ * - Agent scope: empty agents array = all agents allowed; otherwise accessor.agent must be in list.
+ * - Action scope: empty actions array = all actions allowed; otherwise accessor.action must be in list.
+ * - Expiry: if expiresAt is non-null and in the past, deny with "Credential expired".
+ */
+export declare function checkScope(scope: CredentialScope, accessor: {
+    agent: string;
+    action: ActionKind;
+}): {
+    allowed: boolean;
+    reason?: string;
+};
+//# sourceMappingURL=scope.d.ts.map

package/dist/vault/scope.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope.d.ts","sourceRoot":"","sources":["../../src/vault/scope.ts"],"names":[],"mappings":"AAGA;;GAEG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAEtE;;;;;;;GAOG;AACH,wBAAgB,UAAU,CACzB,KAAK,EAAE,eAAe,EACtB,QAAQ,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,UAAU,CAAA;CAAE,GAC7C;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CA0BvC"}

package/dist/vault/scope.js

@@ -0,0 +1,35 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright 2026 Usertools, Inc.
+/**
+ * Check whether an accessor is allowed to use a credential given its scope.
+ *
+ * Rules:
+ * - Agent scope: empty agents array = all agents allowed; otherwise accessor.agent must be in list.
+ * - Action scope: empty actions array = all actions allowed; otherwise accessor.action must be in list.
+ * - Expiry: if expiresAt is non-null and in the past, deny with "Credential expired".
+ */
+export function checkScope(scope, accessor) {
+    // Check agent scope
+    if (scope.agents.length > 0 && !scope.agents.includes(accessor.agent)) {
+        return {
+            allowed: false,
+            reason: `Agent "${accessor.agent}" is not in the allowed agents list`,
+        };
+    }
+    // Check action scope
+    if (scope.actions.length > 0 && !scope.actions.includes(accessor.action)) {
+        return {
+            allowed: false,
+            reason: `Action "${accessor.action}" is not in the allowed actions list`,
+        };
+    }
+    // Check expiry
+    if (scope.expiresAt !== null) {
+        const expiresAt = new Date(scope.expiresAt).getTime();
+        if (expiresAt <= Date.now()) {
+            return { allowed: false, reason: "Credential expired" };
+        }
+    }
+    return { allowed: true };
+}
+//# sourceMappingURL=scope.js.map

package/dist/vault/scope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope.js","sourceRoot":"","sources":["../../src/vault/scope.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,iCAAiC;AAQjC;;;;;;;GAOG;AACH,MAAM,UAAU,UAAU,CACzB,KAAsB,EACtB,QAA+C;IAE/C,oBAAoB;IACpB,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACvE,OAAO;YACN,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,UAAU,QAAQ,CAAC,KAAK,qCAAqC;SACrE,CAAC;IACH,CAAC;IAED,qBAAqB;IACrB,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1E,OAAO;YACN,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,WAAW,QAAQ,CAAC,MAAM,sCAAsC;SACxE,CAAC;IACH,CAAC;IAED,eAAe;IACf,IAAI,KAAK,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;QAC9B,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC;QACtD,IAAI,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YAC7B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;QACzD,CAAC;IACF,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC1B,CAAC"}

package/dist/vault/store.d.ts

@@ -0,0 +1,31 @@
+import type { AuditWriter } from "../audit/chain.js";
+import type { ActionKind, CredentialAccessResult, CredentialScope, TrustConfig } from "../shared/types.js";
+export interface VaultStore {
+    add(name: string, value: string, scope?: Partial<CredentialScope>): Promise<void>;
+    remove(name: string): Promise<void>;
+    get(name: string, accessor: {
+        agent: string;
+        action: ActionKind;
+    }): Promise<CredentialAccessResult>;
+    list(): Promise<Array<{
+        name: string;
+        scope: CredentialScope;
+        createdAt: string;
+        rotatedAt: string;
+    }>>;
+    rotate(name: string, newValue: string): Promise<void>;
+    destroy(): void;
+}
+/**
+ * Create an encrypted vault store.
+ *
+ * Reads the master key from the env var specified in config.vault.masterKeyEnv
+ * (default: USERTRUST_VAULT_KEY). Throws VaultNotInitializedError if the key
+ * is not set.
+ */
+export declare function createVaultStore(opts: {
+    vaultBase: string;
+    config: TrustConfig;
+    audit?: AuditWriter;
+}): Promise<VaultStore>;
+//# sourceMappingURL=store.d.ts.map

package/dist/vault/store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../src/vault/store.ts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAGrD,OAAO,KAAK,EACX,UAAU,EACV,sBAAsB,EAEtB,eAAe,EACf,WAAW,EACX,MAAM,oBAAoB,CAAC;AAe5B,MAAM,WAAW,UAAU;IAC1B,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClF,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACpC,GAAG,CACF,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,UAAU,CAAA;KAAE,GAC7C,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACnC,IAAI,IAAI,OAAO,CACd,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,eAAe,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CACrF,CAAC;IACF,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACtD,OAAO,IAAI,IAAI,CAAC;CAChB;AAiCD;;;;;;GAMG;AACH,wBAAsB,gBAAgB,CAAC,IAAI,EAAE;IAC5C,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,WAAW,CAAC;IACpB,KAAK,CAAC,EAAE,WAAW,CAAC;CACpB,GAAG,OAAO,CAAC,UAAU,CAAC,CAiLtB"}

package/dist/vault/store.js

@@ -0,0 +1,204 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright 2026 Usertools, Inc.
+/**
+ * Encrypted Credential Store — AES-256-GCM vault for agent secrets.
+ *
+ * Stores credentials in `<vaultBase>/.usertrust/credentials.enc` as a JSON
+ * envelope `{ salt, iv, tag, ciphertext }` wrapping an encrypted array of
+ * CredentialEntry objects. Scoped access (agent/action/time-window) is enforced
+ * on every `get()` call, with audit events emitted for all operations.
+ *
+ * Atomic writes: data is written to a .tmp file then renamed, matching the
+ * spend-ledger pattern in govern.ts.
+ */
+import { createCipheriv, createDecipheriv, randomBytes } from "node:crypto";
+import { existsSync, mkdirSync, readFileSync, renameSync, writeFileSync } from "node:fs";
+import { join } from "node:path";
+import { VAULT_DIR } from "../shared/constants.js";
+import { VaultKeyMissingError } from "../shared/errors.js";
+import { deriveKey, generateSalt } from "./derive.js";
+import { checkScope } from "./scope.js";
+// ── Encryption helpers ──
+function encrypt(data, passphrase) {
+    const salt = generateSalt();
+    const key = deriveKey(passphrase, salt);
+    const iv = randomBytes(12); // 12-byte IV for AES-256-GCM
+    const cipher = createCipheriv("aes-256-gcm", key, iv);
+    const encrypted = Buffer.concat([cipher.update(data, "utf-8"), cipher.final()]);
+    const tag = cipher.getAuthTag(); // 16-byte auth tag
+    return {
+        salt: salt.toString("hex"),
+        iv: iv.toString("hex"),
+        tag: tag.toString("hex"),
+        ciphertext: encrypted.toString("hex"),
+    };
+}
+function decrypt(envelope, passphrase) {
+    const salt = Buffer.from(envelope.salt, "hex");
+    const key = deriveKey(passphrase, salt);
+    const iv = Buffer.from(envelope.iv, "hex");
+    const tag = Buffer.from(envelope.tag, "hex");
+    const ciphertext = Buffer.from(envelope.ciphertext, "hex");
+    const decipher = createDecipheriv("aes-256-gcm", key, iv);
+    decipher.setAuthTag(tag);
+    const decrypted = Buffer.concat([decipher.update(ciphertext), decipher.final()]);
+    return decrypted.toString("utf-8");
+}
+// ── Factory ──
+/**
+ * Create an encrypted vault store.
+ *
+ * Reads the master key from the env var specified in config.vault.masterKeyEnv
+ * (default: USERTRUST_VAULT_KEY). Throws VaultNotInitializedError if the key
+ * is not set.
+ */
+export async function createVaultStore(opts) {
+    const { vaultBase, config, audit } = opts;
+    const masterKeyEnv = config.vault?.masterKeyEnv ?? "USERTRUST_VAULT_KEY";
+    const envValue = process.env[masterKeyEnv];
+    if (!envValue) {
+        throw new VaultKeyMissingError(masterKeyEnv);
+    }
+    const passphrase = envValue;
+    const auditAccess = config.vault?.auditAccess ?? true;
+    const defaultScope = {
+        agents: config.vault?.defaultScope?.agents ?? [],
+        actions: (config.vault?.defaultScope?.actions ?? []),
+        expiresAt: config.vault?.defaultScope?.expiresAt ?? null,
+    };
+    const vaultDir = join(vaultBase, VAULT_DIR);
+    const credPath = join(vaultDir, "credentials.enc");
+    const tmpPath = join(vaultDir, "credentials.enc.tmp");
+    // Ensure vault directory exists
+    if (!existsSync(vaultDir)) {
+        mkdirSync(vaultDir, { recursive: true, mode: 0o700 });
+    }
+    // ── In-memory credential state ──
+    let entries = [];
+    let destroyed = false;
+    // Load existing credentials from disk
+    if (existsSync(credPath)) {
+        const raw = readFileSync(credPath, "utf-8");
+        const envelope = JSON.parse(raw);
+        const plaintext = decrypt(envelope, passphrase);
+        entries = JSON.parse(plaintext);
+    }
+    // ── Persistence ──
+    function persist() {
+        const plaintext = JSON.stringify(entries);
+        const envelope = encrypt(plaintext, passphrase);
+        // Atomic write: write to .tmp then rename
+        writeFileSync(tmpPath, JSON.stringify(envelope), { encoding: "utf-8", mode: 0o600 });
+        renameSync(tmpPath, credPath);
+    }
+    // ── Audit helper ──
+    async function emitAudit(kind, data) {
+        if (auditAccess && audit) {
+            await audit.appendEvent({ kind, actor: "vault", data });
+        }
+    }
+    // ── VaultStore implementation ──
+    async function add(name, value, scope) {
+        if (destroyed)
+            throw new Error("VaultStore has been destroyed");
+        const now = new Date().toISOString();
+        const mergedScope = {
+            agents: scope?.agents ?? defaultScope.agents,
+            actions: scope?.actions ?? defaultScope.actions,
+            expiresAt: scope?.expiresAt !== undefined ? scope.expiresAt : defaultScope.expiresAt,
+        };
+        // Overwrite if already exists
+        const existing = entries.findIndex((e) => e.name === name);
+        const entry = {
+            name,
+            value,
+            scope: mergedScope,
+            createdAt: now,
+            rotatedAt: now,
+        };
+        if (existing >= 0) {
+            entries[existing] = entry;
+        }
+        else {
+            entries.push(entry);
+        }
+        persist();
+        await emitAudit("credential_added", { name });
+    }
+    async function remove(name) {
+        if (destroyed)
+            throw new Error("VaultStore has been destroyed");
+        entries = entries.filter((e) => e.name !== name);
+        persist();
+        await emitAudit("credential_removed", { name });
+    }
+    async function get(name, accessor) {
+        if (destroyed)
+            throw new Error("VaultStore has been destroyed");
+        const entry = entries.find((e) => e.name === name);
+        if (!entry) {
+            return { granted: false, reason: `Credential "${name}" not found` };
+        }
+        const scopeResult = checkScope(entry.scope, accessor);
+        if (!scopeResult.allowed) {
+            const reason = scopeResult.reason ?? "Access denied";
+            await emitAudit("credential_denied", {
+                name,
+                agent: accessor.agent,
+                action: accessor.action,
+                granted: false,
+                reason,
+            });
+            return { granted: false, reason };
+        }
+        await emitAudit("credential_access", {
+            name,
+            agent: accessor.agent,
+            action: accessor.action,
+            granted: true,
+        });
+        return { granted: true, value: entry.value };
+    }
+    async function list() {
+        if (destroyed)
+            throw new Error("VaultStore has been destroyed");
+        return entries.map((e) => ({
+            name: e.name,
+            scope: e.scope,
+            createdAt: e.createdAt,
+            rotatedAt: e.rotatedAt,
+        }));
+    }
+    async function rotate(name, newValue) {
+        if (destroyed)
+            throw new Error("VaultStore has been destroyed");
+        const entry = entries.find((e) => e.name === name);
+        if (!entry) {
+            throw new Error(`Credential "${name}" not found`);
+        }
+        entry.value = newValue;
+        entry.rotatedAt = new Date().toISOString();
+        persist();
+        await emitAudit("credential_rotated", { name });
+    }
+    function destroyStore() {
+        // Note: JavaScript strings are immutable in V8 — assigning "" removes the
+        // reference but the original string remains in the heap until GC. True
+        // memory-safe secret clearing requires Buffer-based storage, which is a
+        // future enhancement. This destroy() provides reference cleanup only.
+        for (const entry of entries) {
+            entry.value = "";
+        }
+        entries = [];
+        destroyed = true;
+    }
+    return {
+        add,
+        remove,
+        get,
+        list,
+        rotate,
+        destroy: destroyStore,
+    };
+}
+//# sourceMappingURL=store.js.map

package/dist/vault/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../src/vault/store.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,iCAAiC;AAEjC;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC5E,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACzF,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACnD,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAQ3D,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AA2BxC,2BAA2B;AAE3B,SAAS,OAAO,CAAC,IAAY,EAAE,UAAkB;IAChD,MAAM,IAAI,GAAG,YAAY,EAAE,CAAC;IAC5B,MAAM,GAAG,GAAG,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IACxC,MAAM,EAAE,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,6BAA6B;IACzD,MAAM,MAAM,GAAG,cAAc,CAAC,aAAa,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;IACtD,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAChF,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,mBAAmB;IACpD,OAAO;QACN,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAC1B,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC;QACtB,GAAG,EAAE,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC;QACxB,UAAU,EAAE,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC;KACrC,CAAC;AACH,CAAC;AAED,SAAS,OAAO,CAAC,QAAuB,EAAE,UAAkB;IAC3D,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC/C,MAAM,GAAG,GAAG,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IACxC,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;IAC3C,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC7C,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IAC3D,MAAM,QAAQ,GAAG,gBAAgB,CAAC,aAAa,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;IAC1D,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IACzB,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACjF,OAAO,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;AACpC,CAAC;AAED,gBAAgB;AAEhB;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAItC;IACA,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;IAE1C,MAAM,YAAY,GAAG,MAAM,CAAC,KAAK,EAAE,YAAY,IAAI,qBAAqB,CAAC;IACzE,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAC3C,IAAI,CAAC,QAAQ,EAAE,CAAC;QACf,MAAM,IAAI,oBAAoB,CAAC,YAAY,CAAC,CAAC;IAC9C,CAAC;IACD,MAAM,UAAU,GAAW,QAAQ,CAAC;IAEpC,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,EAAE,WAAW,IAAI,IAAI,CAAC;IACtD,MAAM,YAAY,GAAoB;QACrC,MAAM,EAAE,MAAM,CAAC,KAAK,EAAE,YAAY,EAAE,MAAM,IAAI,EAAE;QAChD,OAAO,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,YAAY,EAAE,OAAO,IAAI,EAAE,CAAiB;QACpE,SAAS,EAAE,MAAM,CAAC,KAAK,EAAE,YAAY,EAAE,SAAS,IAAI,IAAI;KACxD,CAAC;IAEF,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAC;IACnD,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,EAAE,qBAAqB,CAAC,CAAC;IAEtD,gCAAgC;IAChC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3B,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACvD,CAAC;IAED,mCAAmC;IAEnC,IAAI,OAAO,GAAsB,EAAE,CAAC;IACpC,IAAI,SAAS,GAAG,KAAK,CAAC;IAEtB,sCAAsC;IACtC,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,MAAM,GAAG,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAkB,CAAC;QAClD,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAChD,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAsB,CAAC;IACtD,CAAC;IAED,oBAAoB;IAEpB,SAAS,OAAO;QACf,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAC1C,MAAM,QAAQ,GAAG,OAAO,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;QAChD,0CAA0C;QAC1C,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACrF,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC/B,CAAC;IAED,qBAAqB;IAErB,KAAK,UAAU,SAAS,CAAC,IAAY,EAAE,IAA6B;QACnE,IAAI,WAAW,IAAI,KAAK,EAAE,CAAC;YAC1B,MAAM,KAAK,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QACzD,CAAC;IACF,CAAC;IAED,kCAAkC;IAElC,KAAK,UAAU,GAAG,CAAC,IAAY,EAAE,KAAa,EAAE,KAAgC;QAC/E,IAAI,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QAEhE,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,MAAM,WAAW,GAAoB;YACpC,MAAM,EAAE,KAAK,EAAE,MAAM,IAAI,YAAY,CAAC,MAAM;YAC5C,OAAO,EAAE,KAAK,EAAE,OAAO,IAAI,YAAY,CAAC,OAAO;YAC/C,SAAS,EAAE,KAAK,EAAE,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,SAAS;SACpF,CAAC;QAEF,8BAA8B;QAC9B,MAAM,QAAQ,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QAC3D,MAAM,KAAK,GAAoB;YAC9B,IAAI;YACJ,KAAK;YACL,KAAK,EAAE,WAAW;YAClB,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,GAAG;SACd,CAAC;QAEF,IAAI,QAAQ,IAAI,CAAC,EAAE,CAAC;YACnB,OAAO,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC;QAC3B,CAAC;aAAM,CAAC;YACP,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;QAED,OAAO,EAAE,CAAC;QACV,MAAM,SAAS,CAAC,kBAAkB,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/C,CAAC;IAED,KAAK,UAAU,MAAM,CAAC,IAAY;QACjC,IAAI,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QAEhE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QACjD,OAAO,EAAE,CAAC;QACV,MAAM,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IACjD,CAAC;IAED,KAAK,UAAU,GAAG,CACjB,IAAY,EACZ,QAA+C;QAE/C,IAAI,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QAEhE,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QACnD,IAAI,CAAC,KAAK,EAAE,CAAC;YACZ,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,IAAI,aAAa,EAAE,CAAC;QACrE,CAAC;QAED,MAAM,WAAW,GAAG,UAAU,CAAC,KAAK,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QACtD,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;YAC1B,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,IAAI,eAAe,CAAC;YACrD,MAAM,SAAS,CAAC,mBAAmB,EAAE;gBACpC,IAAI;gBACJ,KAAK,EAAE,QAAQ,CAAC,KAAK;gBACrB,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,OAAO,EAAE,KAAK;gBACd,MAAM;aACN,CAAC,CAAC;YACH,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QACnC,CAAC;QAED,MAAM,SAAS,CAAC,mBAAmB,EAAE;YACpC,IAAI;YACJ,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,OAAO,EAAE,IAAI;SACb,CAAC,CAAC;QACH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;IAC9C,CAAC;IAED,KAAK,UAAU,IAAI;QAGlB,IAAI,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QAEhE,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC1B,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,SAAS,EAAE,CAAC,CAAC,SAAS;SACtB,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,UAAU,MAAM,CAAC,IAAY,EAAE,QAAgB;QACnD,IAAI,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QAEhE,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QACnD,IAAI,CAAC,KAAK,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,eAAe,IAAI,aAAa,CAAC,CAAC;QACnD,CAAC;QAED,KAAK,CAAC,KAAK,GAAG,QAAQ,CAAC;QACvB,KAAK,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC3C,OAAO,EAAE,CAAC;QACV,MAAM,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IACjD,CAAC;IAED,SAAS,YAAY;QACpB,0EAA0E;QAC1E,uEAAuE;QACvE,wEAAwE;QACxE,sEAAsE;QACtE,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC7B,KAAK,CAAC,KAAK,GAAG,EAAE,CAAC;QAClB,CAAC;QACD,OAAO,GAAG,EAAE,CAAC;QACb,SAAS,GAAG,IAAI,CAAC;IAClB,CAAC;IAED,OAAO;QACN,GAAG;QACH,MAAM;QACN,GAAG;QACH,IAAI;QACJ,MAAM;QACN,OAAO,EAAE,YAAY;KACrB,CAAC;AACH,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "usertrust",
-	"version": "1.0.0",
+	"version": "1.1.0",
 	"description": "Financial governance for AI agents. Every LLM call becomes an immutable, auditable transaction.",
 	"license": "Apache-2.0",
 	"author": "Usertools, Inc. <hello@usertools.ai> (https://usertrust.ai)",
@@ -35,9 +35,18 @@
 		".": {
 			"import": "./dist/index.js",
 			"types": "./dist/index.d.ts"
+		},
+		"./headless": {
+			"import": "./dist/headless.js",
+			"types": "./dist/headless.d.ts"
+		},
+		"./pricing": {
+			"import": "./dist/ledger/pricing.js",
+			"types": "./dist/ledger/pricing.d.ts"
 		}
 	},
 	"dependencies": {
+		"@clack/prompts": "^1.1.0",
 		"minimatch": "^10.2.4",
 		"picocolors": "^1.1.1",
 		"tigerbeetle-node": "^0.16.0",
@@ -48,7 +57,9 @@
 		"build": "tsc",
 		"prepublishOnly": "tsc"
 	},
-	"files": ["dist"],
+	"files": [
+		"dist"
+	],
 	"peerDependencies": {
 		"@anthropic-ai/sdk": ">=0.30.0",
 		"openai": ">=4.70.0"