@forgezero/vault 0.1.5 → 0.1.7

package/dist/index.d.ts

@@ -110,6 +110,14 @@ export type AgentResponse = {
     };
 };
 export type AgentTransport = (socketPath: string, request: AgentRequest) => Promise<AgentResponse>;
+/**
+ * Systemd retains the listening socket during a supervised Agent replacement.
+ * A connection already accepted by the old process can still reset at the exact
+ * handover boundary, so bounded retry makes idempotent local reads continuous
+ * without hiding a genuinely unavailable Agent for more than a fraction of a
+ * second.
+ */
+export declare const managedAgentTransport: AgentTransport;
 export interface VaultOptions {
     /** Stable public API origin. Node topology is never exposed to the client. */
     apiUrl?: string;
@@ -132,6 +140,8 @@ export interface EntryMeta {
 export interface Change {
     name: string;
     version: number;
+    /** True when ciphertext was destroyed and the local value must be removed. */
+    deleted?: boolean;
 }
 export declare const DEFAULT_API_URL = "https://api.forgezero.net";
 export declare const DEFAULT_REQUEST_TIMEOUT_MS = 15000;
@@ -272,4 +282,4 @@ export declare function systemdCredentials(options?: SystemdCredentialOptions):
     readonly name: 'systemd';
     get(reference: string, field: string): Promise<string>;
 };
-export declare const VERSION = "0.1.5";
+export declare const VERSION = "0.1.7";

package/dist/index.js

@@ -71,7 +71,7 @@ function signerFromApiKey(secret) {
     }
   };
 }
-var requestAgent = (socketPath, request) => new Promise((resolveRequest, reject) => {
+var requestAgentOnce = (socketPath, request) => new Promise((resolveRequest, reject) => {
   if (typeof process === "undefined" || typeof process.getBuiltinModule !== "function") {
     reject(new VaultError("MANAGED_RUNTIME_UNAVAILABLE", "The managed agent socket needs a Node or Bun server runtime."));
     return;
@@ -102,8 +102,23 @@ var requestAgent = (socketPath, request) => new Promise((resolveRequest, reject)
       reject(new VaultError("AGENT_RESPONSE_MALFORMED", "The local ForgeZero agent response was malformed."));
     }
   });
+  socket.on("end", () => reject(new VaultError("AGENT_UNAVAILABLE", "The local ForgeZero agent closed during a supervised handover.")));
   socket.on("error", (cause) => reject(new VaultError("AGENT_UNAVAILABLE", cause.message)));
 });
+var managedAgentTransport = async (socketPath, request) => {
+  let last;
+  for (let attempt = 0;attempt < 5; attempt += 1) {
+    try {
+      return await requestAgentOnce(socketPath, request);
+    } catch (cause) {
+      last = cause;
+      if (cause?.code !== "AGENT_UNAVAILABLE" || attempt === 4)
+        throw cause;
+      await new Promise((resolve) => setTimeout(resolve, 25 * 2 ** attempt));
+    }
+  }
+  throw last;
+};
 var DEFAULT_API_URL = "https://api.forgezero.net";
 var DEFAULT_REQUEST_TIMEOUT_MS = 15000;
 function apiOrigin(value) {
@@ -134,7 +149,7 @@ class ForgeZero {
     this.apiUrl = apiOrigin(options.apiUrl ?? DEFAULT_API_URL);
     this.doFetch = options.fetch ?? globalThis.fetch;
     this.signer = options.signer ?? (this.credential.mode === "external" ? signerFromApiKey(this.credential.apiKey) : undefined);
-    this.agentTransport = options.agentTransport ?? requestAgent;
+    this.agentTransport = options.agentTransport ?? managedAgentTransport;
     this.requestTimeoutMs = options.requestTimeoutMs ?? DEFAULT_REQUEST_TIMEOUT_MS;
     if (!Number.isFinite(this.requestTimeoutMs) || this.requestTimeoutMs < 100 || this.requestTimeoutMs > 120000) {
       throw new VaultError("INVALID_TIMEOUT", "requestTimeoutMs must be between 100 and 120000 milliseconds.");
@@ -367,11 +382,12 @@ function systemdCredentials(options = {}) {
     }
   };
 }
-var VERSION = "0.1.5";
+var VERSION = "0.1.7";
 export {
   vaultCredentials,
   systemdCredentials,
   signerFromApiKey,
+  managedAgentTransport,
   discover,
   directCredentials,
   createVault,

package/dist/providers.js

@@ -71,7 +71,7 @@ function signerFromApiKey(secret) {
     }
   };
 }
-var requestAgent = (socketPath, request) => new Promise((resolveRequest, reject) => {
+var requestAgentOnce = (socketPath, request) => new Promise((resolveRequest, reject) => {
   if (typeof process === "undefined" || typeof process.getBuiltinModule !== "function") {
     reject(new VaultError("MANAGED_RUNTIME_UNAVAILABLE", "The managed agent socket needs a Node or Bun server runtime."));
     return;
@@ -102,8 +102,23 @@ var requestAgent = (socketPath, request) => new Promise((resolveRequest, reject)
       reject(new VaultError("AGENT_RESPONSE_MALFORMED", "The local ForgeZero agent response was malformed."));
     }
   });
+  socket.on("end", () => reject(new VaultError("AGENT_UNAVAILABLE", "The local ForgeZero agent closed during a supervised handover.")));
   socket.on("error", (cause) => reject(new VaultError("AGENT_UNAVAILABLE", cause.message)));
 });
+var managedAgentTransport = async (socketPath, request) => {
+  let last;
+  for (let attempt = 0;attempt < 5; attempt += 1) {
+    try {
+      return await requestAgentOnce(socketPath, request);
+    } catch (cause) {
+      last = cause;
+      if (cause?.code !== "AGENT_UNAVAILABLE" || attempt === 4)
+        throw cause;
+      await new Promise((resolve) => setTimeout(resolve, 25 * 2 ** attempt));
+    }
+  }
+  throw last;
+};
 var DEFAULT_API_URL = "https://api.forgezero.net";
 var DEFAULT_REQUEST_TIMEOUT_MS = 15000;
 function apiOrigin(value) {
@@ -134,7 +149,7 @@ class ForgeZero {
     this.apiUrl = apiOrigin(options.apiUrl ?? DEFAULT_API_URL);
     this.doFetch = options.fetch ?? globalThis.fetch;
     this.signer = options.signer ?? (this.credential.mode === "external" ? signerFromApiKey(this.credential.apiKey) : undefined);
-    this.agentTransport = options.agentTransport ?? requestAgent;
+    this.agentTransport = options.agentTransport ?? managedAgentTransport;
     this.requestTimeoutMs = options.requestTimeoutMs ?? DEFAULT_REQUEST_TIMEOUT_MS;
     if (!Number.isFinite(this.requestTimeoutMs) || this.requestTimeoutMs < 100 || this.requestTimeoutMs > 120000) {
       throw new VaultError("INVALID_TIMEOUT", "requestTimeoutMs must be between 100 and 120000 milliseconds.");
@@ -367,7 +382,7 @@ function systemdCredentials(options = {}) {
     }
   };
 }
-var VERSION = "0.1.5";
+var VERSION = "0.1.7";
 
 // src/providers.ts
 var MISSING = new Set(["ENTRY_NOT_FOUND", "VERSION_NOT_FOUND"]);

package/dist/schema.js

@@ -71,7 +71,7 @@ function signerFromApiKey(secret) {
     }
   };
 }
-var requestAgent = (socketPath, request) => new Promise((resolveRequest, reject) => {
+var requestAgentOnce = (socketPath, request) => new Promise((resolveRequest, reject) => {
   if (typeof process === "undefined" || typeof process.getBuiltinModule !== "function") {
     reject(new VaultError("MANAGED_RUNTIME_UNAVAILABLE", "The managed agent socket needs a Node or Bun server runtime."));
     return;
@@ -102,8 +102,23 @@ var requestAgent = (socketPath, request) => new Promise((resolveRequest, reject)
       reject(new VaultError("AGENT_RESPONSE_MALFORMED", "The local ForgeZero agent response was malformed."));
     }
   });
+  socket.on("end", () => reject(new VaultError("AGENT_UNAVAILABLE", "The local ForgeZero agent closed during a supervised handover.")));
   socket.on("error", (cause) => reject(new VaultError("AGENT_UNAVAILABLE", cause.message)));
 });
+var managedAgentTransport = async (socketPath, request) => {
+  let last;
+  for (let attempt = 0;attempt < 5; attempt += 1) {
+    try {
+      return await requestAgentOnce(socketPath, request);
+    } catch (cause) {
+      last = cause;
+      if (cause?.code !== "AGENT_UNAVAILABLE" || attempt === 4)
+        throw cause;
+      await new Promise((resolve) => setTimeout(resolve, 25 * 2 ** attempt));
+    }
+  }
+  throw last;
+};
 var DEFAULT_API_URL = "https://api.forgezero.net";
 var DEFAULT_REQUEST_TIMEOUT_MS = 15000;
 function apiOrigin(value) {
@@ -134,7 +149,7 @@ class ForgeZero {
     this.apiUrl = apiOrigin(options.apiUrl ?? DEFAULT_API_URL);
     this.doFetch = options.fetch ?? globalThis.fetch;
     this.signer = options.signer ?? (this.credential.mode === "external" ? signerFromApiKey(this.credential.apiKey) : undefined);
-    this.agentTransport = options.agentTransport ?? requestAgent;
+    this.agentTransport = options.agentTransport ?? managedAgentTransport;
     this.requestTimeoutMs = options.requestTimeoutMs ?? DEFAULT_REQUEST_TIMEOUT_MS;
     if (!Number.isFinite(this.requestTimeoutMs) || this.requestTimeoutMs < 100 || this.requestTimeoutMs > 120000) {
       throw new VaultError("INVALID_TIMEOUT", "requestTimeoutMs must be between 100 and 120000 milliseconds.");
@@ -367,7 +382,7 @@ function systemdCredentials(options = {}) {
     }
   };
 }
-var VERSION = "0.1.5";
+var VERSION = "0.1.7";
 
 // src/schema.ts
 function managedSchemas(vault, options = {}) {

package/package.json

@@ -1,7 +1,7 @@
 {
   "//": "Publishing happens from an operator's machine, not CI \u2014 CLAUDE.md records that the absence of CI is deliberate. npm's `provenance` attests a tarball was built by a recognised CI provider from a named commit, so it cannot be produced here: it was set, and the first publish failed with `Automatic provenance generation not supported for provider: null`. A setting that can never be satisfied is worse than none, because it reads as a guarantee nobody is getting. Restore it the day this publishes from CI, and not before.",
   "name": "@forgezero/vault",
-  "version": "0.1.5",
+  "version": "0.1.7",
   "type": "module",
   "publishConfig": {
     "access": "public"