Build with Davy.Locker.
Four packages. Zero secrets exposed.

// The proxy is the core of Davy.Locker's security model
// It injects auth headers so the agent never handles credentials directly

import { proxyRequest } from '@davy/agent-auth'

// The agent submits a plain request — no auth headers
const request = {
  agentId: 'claude-session-1',
  url: 'https://api.stripe.com/v1/charges',
  method: 'POST',
  body: JSON.stringify({ amount: 2000, currency: 'usd' })
}

// Davy.Locker validates the grant, injects the credential, proxies the call
const result = await proxyRequest(request, {
  grants,      // active permission grants
  vault,       // unlocked vault with credentials
  auditLog,   // automatic logging
  lenses,     // optional: response field redaction
  patterns    // optional: pattern-based redaction (SSN, CC, etc.)
})

if (result.allowed) {
  console.log(result.response.status)  // 200
  console.log(result.response.body)    // response with sensitive fields redacted
} else {
  console.log(result.reason)  // "NO_GRANT" | "BLOCKED" | "METHOD_NOT_ALLOWED" | "DOMAIN_NOT_ALLOWED"
}

// Grants control exactly what an agent can and cannot do

import { createGrant, startSession, endSession, AuditLog } from '@davy/agent-auth'

const auditLog = new AuditLog()

// Start a session — grants auto-revoke when it ends
const session = startSession('claude-deploy-agent', 3600000) // 1 hour timeout

// USE_ONLY: agent can make authenticated requests, but never reads the key
const deployGrant = createGrant({
  agentId: 'claude-deploy-agent',
  credentialId: 'vercel-token',
  permission: 'USE_ONLY',
  scope: 'session',
  allowedMethods: ['POST'],           // deploy only, no GET/DELETE
  allowedDomains: ['api.vercel.com'],  // locked to Vercel's API
  approvedBy: 'tyler'
})

// READ: agent can read the credential value (use sparingly)
const readGrant = createGrant({
  agentId: 'claude-deploy-agent',
  credentialId: 'project-config',
  permission: 'READ',
  scope: 'timed',
  durationMs: 600000  // 10 minutes then auto-revoke
})

// When the agent is done, clean everything up
const { revokedGrants } = endSession(session, [deployGrant, readGrant])
console.log(`Revoked ${revokedGrants.length} grants`)

// Full audit trail
console.log(auditLog.getByAgent('claude-deploy-agent'))

// Response lenses let you control what data the agent sees back

import { getService, applyRedaction, REDACTION_PATTERNS } from '@davy/catalog'

// Look up a service from the catalog
const stripe = getService('stripe')

// Each service has pre-built lenses for common use cases
const readOnlyLens = stripe.lenses.find(l => l.id === 'read-only')
// Lens: { allowedMethods: ['GET'], redactFields: ['bank_account', 'tax_id'] }

// Apply lens + pattern redaction to an API response
const apiResponse = `{
  "id": "cus_123",
  "email": "user@example.com",
  "name": "Jane Doe",
  "ssn": "123-45-6789",
  "bank_account": "****4242",
  "tax_id": "12-3456789"
}`

const { body, redactedCount, redactions } = applyRedaction(
  apiResponse,
  readOnlyLens,        // field-level redaction from the lens
  REDACTION_PATTERNS   // SSN, credit card, private key patterns
)

console.log(body)
// { "id": "cus_123", "email": "[REDACTED]", "name": "Jane Doe",
//   "ssn": "[SSN REDACTED]", "bank_account": "[REDACTED]", "tax_id": "[REDACTED]" }

console.log(`${redactedCount} fields redacted`) // 4 fields redacted