feat: add local vault daemon

.changeset/calm-dingos-hide.md

@@ -0,0 +1,6 @@
+---
+'@inflowpayai/inflow': patch
+---
+
+Use the latest AEP libraries and keep the internal user profile command out of the CLI, MCP, and agent documentation
+surfaces.

.changeset/clear-aep-status.md

@@ -0,0 +1,6 @@
+---
+'@inflowpayai/inflow': patch
+---
+
+Report locally stored active session credentials in AEP Status output and return an actionable not-enrolled error when
+the Service no longer recognizes the locally stored Agent identity.

.changeset/friendly-vault-launcher.md

@@ -0,0 +1,5 @@
+---
+'@inflowpayai/inflow': patch
+---
+
+Recognize the packaged command-line symlink as the same executable as its signed local vault daemon.

.changeset/friendly-vault-unlock.md

@@ -0,0 +1,6 @@
+---
+'@inflowpayai/inflow': patch
+---
+
+Make vault unlock idempotent when the vault is already unlocked and report rejected PINs or passphrases as unlock
+failures.

.changeset/npm-package-deprecation.md

@@ -6,4 +6,9 @@ Publish the npm package as a compatibility notice that points users and agents t
 of running commands or managing credentials.
 
 Check GitHub Releases for advisory signed-binary updates, surface a one-line human notice, return structured
-current/latest version metadata to agents, and send the installed CLI version on InFlow API requests.
+current/latest version metadata to agents, bound release checks to a short deadline, provide Homebrew and hosted
+installer upgrade guidance, and send the installed CLI version on InFlow API requests.
+
+Prepare native x64 and ARM64 Windows release payloads for Azure Artifact Signing, sign the executable before building
+the MSI, sign the MSI before generating checksums and WinGet manifests, and keep unsigned nonpublishing workflow
+validation available without production credentials.

.changeset/secure-macos-vault-transitions.md

@@ -0,0 +1,6 @@
+---
+'@inflowpayai/inflow': patch
+---
+
+Replace incompatible running macOS vault daemons before commands access vault-backed state after an in-place application
+update.

.changeset/steady-vault-boundaries.md

@@ -0,0 +1,6 @@
+---
+'@inflowpayai/inflow': patch
+---
+
+Harden local vault transport limits, secret-reference integrity, locked-state reporting, terminal passphrase handling,
+credential cleanup, and signed-build compatibility checks.

.changeset/steady-vault-daemon.md

@@ -0,0 +1,7 @@
+---
+'@inflowpayai/inflow': patch
+---
+
+Prepare the signed native CLI for local encrypted vault storage by packaging the vault daemon runtime, exposing vault
+lifecycle commands, enforcing daemon sleep-lock policy, adding macOS peer-verification plumbing, and wiring native
+dependencies.

.changeset/strong-tools-arrive.md

@@ -0,0 +1,7 @@
+---
+'@inflowpayai/inflow': minor
+---
+
+Add self-contained Linux archives, Debian and RPM system-service packages, and a checksummed hosted installer with
+encrypted local vault storage, same-executable Unix socket peer verification, and signed APT and RPM repository
+metadata.

.changeset/tidy-packaged-vault-smoke.md

@@ -0,0 +1,6 @@
+---
+'@inflowpayai/inflow': patch
+---
+
+Verify the Developer-ID-signed macOS package across vault initialization, credential persistence, process reuse,
+locking, peer rejection, logout, and daemon shutdown.

.github/workflows/ci.yml

@@ -27,6 +27,17 @@ jobs:
       - name: Install
         run: pnpm install --frozen-lockfile
 
+      - name: Install Linux packaging tools
+        run: sudo apt-get update && sudo apt-get install --yes cpio rpm
+
+      - name: Prepare pinned Argon2 source
+        run: |
+          node scripts/prepare-argon2-source.mjs "$RUNNER_TEMP/argon2-20190702"
+          echo "INFLOW_ARGON2_SOURCE_DIR=$RUNNER_TEMP/argon2-20190702" >> "$GITHUB_ENV"
+
+      - name: Build vault peer verifier
+        run: node scripts/build-vault-peer-native.mjs
+
       - name: Typecheck
         run: pnpm typecheck
 
@@ -52,6 +63,23 @@ jobs:
       - name: Build
         run: pnpm build
 
+      - name: Build Linux package
+        run: sudo env "PATH=$PATH" "INFLOW_ARGON2_SOURCE_DIR=$INFLOW_ARGON2_SOURCE_DIR" pnpm build:linux-package
+
+      - name: Test packaged Linux vault
+        run: |
+          sudo rm -rf /opt/inflow-package-smoke
+          sudo mkdir /opt/inflow-package-smoke
+          sudo tar -xzf dist/linux/inflow-*-linux-*.tar.gz -C /opt/inflow-package-smoke --strip-components=1
+          sudo env "PATH=$PATH" CI=1 INFLOW_PACKAGED_EXECUTABLE=/opt/inflow-package-smoke/bin/inflow \
+            pnpm smoke:linux-packaged-vault
+
+      - name: Test Debian system vault
+        run: |
+          sudo dpkg -i dist/linux/inflow_*_amd64.deb
+          sudo swapoff -a
+          sudo env "PATH=$PATH" CI=1 INFLOW_PACKAGED_EXECUTABLE=/usr/bin/inflow pnpm smoke:linux-system-vault
+
       - name: Publish dry-run
         if: github.event_name == 'push' && github.ref == 'refs/heads/main'
         run: pnpm --filter @inflowpayai/inflow publish --dry-run --no-git-checks