@intentic/machine 1.336.0 → 1.338.0

package/dist/keyring/flags.js

@@ -0,0 +1,177 @@
+import { BackendConfigSchema, BackendRefSchema, EntryPatchSchema, EntryRulesSchema, } from "@intentic/keyring";
+import { KeyringSecretNameSchema, KeyringShareModeSchema, } from "@intentic/sandbox-contract/schemas/keyring";
+export class KeyringCliError extends Error {
+    code;
+    constructor(code, message, options) {
+        super(message, options);
+        this.name = "KeyringCliError";
+        this.code = code;
+    }
+}
+const usage = (message) => new KeyringCliError("usage", message);
+const FLAG_OF = new Map([
+    ["kind", "--kind"],
+    ["programs", "--program"],
+    ["packages", "--package"],
+    ["hosts", "--host"],
+    ["anyField", "--any-field"],
+    ["username", "--username"],
+    ["askpass", "--askpass"],
+    ["askpassRememberMinutes", "--remember-minutes"],
+    ["backend", "--backend"],
+    ["ref", "--ref"],
+    ["field", "--field"],
+    ["attribute", "--attribute"],
+    ["cli", "--cli"],
+    ["account", "--account"],
+    ["tokenEntry", "--token-entry"],
+    ["passwordEntry", "--password-entry"],
+    ["database", "--database"],
+    ["keyFile", "--key-file"],
+]);
+const issuesSentence = (error) => error.issues
+    .map((issue) => {
+    const flag = issue.path.map((part) => FLAG_OF.get(String(part))).find((name) => name !== undefined);
+    return `${flag ?? (issue.path.join(".") || "the entry")}: ${issue.message}`;
+})
+    .join("; ");
+const parsed = (result) => {
+    if (!result.success) {
+        throw usage(issuesSentence(result.error));
+    }
+    return result.data;
+};
+export const entryName = (name) => {
+    const result = KeyringSecretNameSchema.safeParse(name);
+    if (!result.success) {
+        throw usage(`"${name}" is not a name an entry can have: a letter or underscore, then letters, digits, \`_\`, \`.\` or \`-\`, at most 128 characters.`);
+    }
+    return result.data;
+};
+export const listOf = (given) => {
+    if (given === undefined) {
+        return undefined;
+    }
+    return given.length === 1 && given[0] === "" ? [] : [...given];
+};
+const addRules = (flags) => parsed(EntryRulesSchema.safeParse({
+    kind: flags.kind ?? "password",
+    programs: listOf(flags.program) ?? [],
+    packages: listOf(flags.package) ?? [],
+    hosts: listOf(flags.host) ?? [],
+    anyField: flags.anyField,
+    username: flags.username,
+    askpass: listOf(flags.askpass) ?? [],
+    askpassRememberMinutes: flags.rememberMinutes ?? 0,
+}));
+const backendRef = (flags) => {
+    if (flags.backend === undefined) {
+        if (flags.ref !== undefined || flags.field !== undefined || flags.attribute !== undefined) {
+            throw usage("--ref, --field and --attribute name where a password manager keeps the value: give --backend with them.");
+        }
+        return undefined;
+    }
+    if (flags.ref === undefined || flags.ref === "") {
+        throw usage(`--backend ${flags.backend} reads the value from ${flags.backend}: --ref says which item.`);
+    }
+    if (flags.field !== undefined && flags.backend !== "bitwarden") {
+        throw usage(`--field picks a Bitwarden item's field; it means nothing to ${flags.backend}.`);
+    }
+    if (flags.attribute !== undefined && flags.backend !== "keepassxc") {
+        throw usage(`--attribute picks a KeePassXC entry's attribute; it means nothing to ${flags.backend}.`);
+    }
+    if (flags.stdin) {
+        throw usage(`An entry read from ${flags.backend} holds no value of its own: leave out --stdin.`);
+    }
+    return parsed(BackendRefSchema.safeParse({ backend: flags.backend, ref: flags.ref, field: flags.field, attribute: flags.attribute }));
+};
+export const addPlan = (name, flags) => {
+    const plan = { name: entryName(name), rules: addRules(flags), replace: flags.replace, needsValue: flags.backend === undefined };
+    const backend = backendRef(flags);
+    return backend === undefined ? plan : { ...plan, backend };
+};
+export const editPatch = (flags) => parsed(EntryPatchSchema.safeParse({
+    kind: flags.kind,
+    programs: listOf(flags.program),
+    packages: listOf(flags.package),
+    hosts: listOf(flags.host),
+    anyField: flags.anyField === undefined ? undefined : flags.anyField === "on",
+    username: flags.username,
+    askpass: listOf(flags.askpass),
+    askpassRememberMinutes: flags.rememberMinutes,
+}));
+export const editTakesValue = (flags, patch) => {
+    if (flags.stdin) {
+        return "stdin";
+    }
+    return Object.values(patch).every((rule) => rule === undefined) ? "terminal" : "none";
+};
+export const shareMode = (mode) => {
+    const result = KeyringShareModeSchema.safeParse(mode);
+    if (!result.success) {
+        throw usage(`--mode is each-use, while-here or copy, not "${mode}".`);
+    }
+    return result.data;
+};
+const sameUrl = (a, b) => {
+    const left = URL.parse(a);
+    const right = URL.parse(b);
+    return left !== null && right !== null && left.origin === right.origin && left.pathname.replace(/\/+$/u, "") === right.pathname.replace(/\/+$/u, "");
+};
+export const linkNamed = (links, named) => links.find((link) => link.id === named) ?? links.find((link) => sameUrl(link.sandboxUrl, named));
+export const shareTarget = (links, named) => {
+    if (named === undefined || named.trim() === "") {
+        throw usage("--sandbox names the sandbox to share with: its address, or its link's id from `intentic-machine status`.");
+    }
+    const link = linkNamed(links, named.trim());
+    if (link === undefined) {
+        throw usage(links.length === 0
+            ? `No sandbox is linked to this computer, so there is nothing to share ${named} with: connect one from a card in its chat first.`
+            : `No sandbox linked to this computer is ${named}: it is one of ${links.map((each) => `${each.id} (${each.sandboxUrl})`).join(", ")}.`);
+    }
+    return link;
+};
+export const unshareTarget = (links, named) => {
+    if (named === undefined || named.trim() === "") {
+        throw usage("--sandbox names the sandbox to stop sharing with: its address, or its link's id.");
+    }
+    const link = linkNamed(links, named.trim());
+    if (link !== undefined) {
+        return link.sandboxUrl;
+    }
+    if (URL.parse(named.trim()) === null) {
+        throw usage(`No sandbox linked to this computer has the id ${named}, and it is not an address either.`);
+    }
+    return named.trim();
+};
+const BACKEND_FLAGS = {
+    "1password": ["account", "tokenEntry"],
+    bitwarden: ["passwordEntry"],
+    keepassxc: ["database", "keyFile", "passwordEntry"],
+};
+const KEBAB = {
+    cli: "--cli",
+    account: "--account",
+    tokenEntry: "--token-entry",
+    passwordEntry: "--password-entry",
+    database: "--database",
+    keyFile: "--key-file",
+    json: "--json",
+};
+export const backendConfig = (backend, flags) => {
+    const takes = new Set(BACKEND_FLAGS[backend]);
+    const foreign = ["account", "tokenEntry", "passwordEntry", "database", "keyFile"].filter((flag) => flags[flag] !== undefined && !takes.has(flag));
+    if (foreign.length > 0) {
+        throw usage(`${foreign.map((flag) => KEBAB[flag]).join(", ")} ${foreign.length === 1 ? "is" : "are"} not ${backend}'s to take.`);
+    }
+    return parsed(BackendConfigSchema.safeParse({
+        backend,
+        cli: flags.cli,
+        account: flags.account,
+        tokenEntry: flags.tokenEntry,
+        passwordEntry: flags.passwordEntry,
+        database: flags.database,
+        keyFile: flags.keyFile,
+    }));
+};
+//# sourceMappingURL=flags.js.map

package/dist/keyring/flags.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"flags.js","sourceRoot":"","sources":["../../src/keyring/flags.ts"],"names":[],"mappings":"AAAA,OAAO,EACH,mBAAmB,EACnB,gBAAgB,EAGhB,gBAAgB,EAChB,gBAAgB,GAGnB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACH,uBAAuB,EAEvB,sBAAsB,GAEzB,MAAM,4CAA4C,CAAC;AAYpD,MAAM,OAAO,eAAgB,SAAQ,KAAK;IAC7B,IAAI,CAAiB;IAC9B,YAAY,IAAoB,EAAE,OAAe,EAAE,OAAsB;QACrE,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACxB,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;QAC9B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACrB,CAAC;CACJ;AAED,MAAM,KAAK,GAAG,CAAC,OAAe,EAAmB,EAAE,CAAC,IAAI,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;AAiC1F,MAAM,OAAO,GAAG,IAAI,GAAG,CAAiB;IACpC,CAAC,MAAM,EAAE,QAAQ,CAAC;IAClB,CAAC,UAAU,EAAE,WAAW,CAAC;IACzB,CAAC,UAAU,EAAE,WAAW,CAAC;IACzB,CAAC,OAAO,EAAE,QAAQ,CAAC;IACnB,CAAC,UAAU,EAAE,aAAa,CAAC;IAC3B,CAAC,UAAU,EAAE,YAAY,CAAC;IAC1B,CAAC,SAAS,EAAE,WAAW,CAAC;IACxB,CAAC,wBAAwB,EAAE,oBAAoB,CAAC;IAChD,CAAC,SAAS,EAAE,WAAW,CAAC;IACxB,CAAC,KAAK,EAAE,OAAO,CAAC;IAChB,CAAC,OAAO,EAAE,SAAS,CAAC;IACpB,CAAC,WAAW,EAAE,aAAa,CAAC;IAC5B,CAAC,KAAK,EAAE,OAAO,CAAC;IAChB,CAAC,SAAS,EAAE,WAAW,CAAC;IACxB,CAAC,YAAY,EAAE,eAAe,CAAC;IAC/B,CAAC,eAAe,EAAE,kBAAkB,CAAC;IACrC,CAAC,UAAU,EAAE,YAAY,CAAC;IAC1B,CAAC,SAAS,EAAE,YAAY,CAAC;CAC5B,CAAC,CAAC;AAGH,MAAM,cAAc,GAAG,CAAC,KAAiB,EAAU,EAAE,CACjD,KAAK,CAAC,MAAM;KACP,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;IACX,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC;IACpG,OAAO,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,WAAW,CAAC,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;AAChF,CAAC,CAAC;KACD,IAAI,CAAC,IAAI,CAAC,CAAC;AAEpB,MAAM,MAAM,GAAG,CAAI,MAA+B,EAAK,EAAE;IACrD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QAClB,MAAM,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACvB,CAAC,CAAC;AAGF,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,IAAY,EAAU,EAAE;IAC9C,MAAM,MAAM,GAAG,uBAAuB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACvD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QAClB,MAAM,KAAK,CAAC,IAAI,IAAI,iIAAiI,CAAC,CAAC;IAC3J,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACvB,CAAC,CAAC;AAMF,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,KAAoC,EAAwB,EAAE;IACjF,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACtB,OAAO,SAAS,CAAC;IACrB,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC;AACnE,CAAC,CAAC;AAIF,MAAM,QAAQ,GAAG,CAAC,KAAe,EAAc,EAAE,CAC7C,MAAM,CACF,gBAAgB,CAAC,SAAS,CAAC;IACvB,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,UAAU;IAC9B,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE;IACrC,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE;IACrC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE;IAC/B,QAAQ,EAAE,KAAK,CAAC,QAAQ;IACxB,QAAQ,EAAE,KAAK,CAAC,QAAQ;IACxB,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE;IACpC,sBAAsB,EAAE,KAAK,CAAC,eAAe,IAAI,CAAC;CACrD,CAAC,CACL,CAAC;AAIN,MAAM,UAAU,GAAG,CAAC,KAAe,EAA0B,EAAE;IAC3D,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAC9B,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACxF,MAAM,KAAK,CAAC,yGAAyG,CAAC,CAAC;QAC3H,CAAC;QACD,OAAO,SAAS,CAAC;IACrB,CAAC;IACD,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS,IAAI,KAAK,CAAC,GAAG,KAAK,EAAE,EAAE,CAAC;QAC9C,MAAM,KAAK,CAAC,aAAa,KAAK,CAAC,OAAO,yBAAyB,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;IAC5G,CAAC;IACD,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,KAAK,WAAW,EAAE,CAAC;QAC7D,MAAM,KAAK,CAAC,+DAAiE,KAAK,CAAC,OAAS,GAAG,CAAC,CAAC;IACrG,CAAC;IACD,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,KAAK,WAAW,EAAE,CAAC;QACjE,MAAM,KAAK,CAAC,wEAA0E,KAAK,CAAC,OAAS,GAAG,CAAC,CAAC;IAC9G,CAAC;IACD,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QACd,MAAM,KAAK,CAAC,sBAAsB,KAAK,CAAC,OAAO,gDAAgD,CAAC,CAAC;IACrG,CAAC;IAED,OAAO,MAAM,CAAC,gBAAgB,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;AAC1I,CAAC,CAAC;AAWF,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,IAAY,EAAE,KAAe,EAAW,EAAE;IAC9D,MAAM,IAAI,GAAG,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;IAChI,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IAClC,OAAO,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,CAAC;AAC/D,CAAC,CAAC;AAGF,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,KAAgB,EAAc,EAAE,CAEtD,MAAM,CACF,gBAAgB,CAAC,SAAS,CAAC;IACvB,IAAI,EAAE,KAAK,CAAC,IAAI;IAChB,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC;IAC/B,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC;IAC/B,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;IACzB,QAAQ,EAAE,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,KAAK,IAAI;IAC5E,QAAQ,EAAE,KAAK,CAAC,QAAQ;IACxB,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC;IAC9B,sBAAsB,EAAE,KAAK,CAAC,eAAe;CAChD,CAAC,CACL,CAAC;AAMN,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,KAAgB,EAAE,KAAiB,EAAiC,EAAE;IACjG,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QACd,OAAO,OAAO,CAAC;IACnB,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC;AAC1F,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,IAAY,EAAoB,EAAE;IACxD,MAAM,MAAM,GAAG,sBAAsB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACtD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QAClB,MAAM,KAAK,CAAC,gDAAgD,IAAI,IAAI,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACvB,CAAC,CAAC;AASF,MAAM,OAAO,GAAG,CAAC,CAAS,EAAE,CAAS,EAAW,EAAE;IAC9C,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC1B,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC3B,OAAO,IAAI,KAAK,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,KAAK,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;AACzJ,CAAC,CAAC;AAGF,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,KAA+B,EAAE,KAAa,EAA6B,EAAE,CACnG,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC;AAMrG,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,KAA+B,EAAE,KAAyB,EAAiB,EAAE;IACrG,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAC7C,MAAM,KAAK,CAAC,0GAA0G,CAAC,CAAC;IAC5H,CAAC;IACD,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IAC5C,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACrB,MAAM,KAAK,CACP,KAAK,CAAC,MAAM,KAAK,CAAC;YACd,CAAC,CAAC,uEAAuE,KAAK,mDAAmD;YACjI,CAAC,CAAC,yCAAyC,KAAK,kBAAkB,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAC7I,CAAC;IACN,CAAC;IACD,OAAO,IAAI,CAAC;AAChB,CAAC,CAAC;AAMF,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,KAA+B,EAAE,KAAyB,EAAU,EAAE;IAChG,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAC7C,MAAM,KAAK,CAAC,kFAAkF,CAAC,CAAC;IACpG,CAAC;IACD,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IAC5C,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACrB,OAAO,IAAI,CAAC,UAAU,CAAC;IAC3B,CAAC;IACD,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC;QACnC,MAAM,KAAK,CAAC,iDAAiD,KAAK,oCAAoC,CAAC,CAAC;IAC5G,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;AACxB,CAAC,CAAC;AAaF,MAAM,aAAa,GAAG;IAClB,WAAW,EAAE,CAAC,SAAS,EAAE,YAAY,CAAC;IACtC,SAAS,EAAE,CAAC,eAAe,CAAC;IAC5B,SAAS,EAAE,CAAC,UAAU,EAAE,SAAS,EAAE,eAAe,CAAC;CAC4B,CAAC;AAEpF,MAAM,KAAK,GAAG;IACV,GAAG,EAAE,OAAO;IACZ,OAAO,EAAE,WAAW;IACpB,UAAU,EAAE,eAAe;IAC3B,aAAa,EAAE,kBAAkB;IACjC,QAAQ,EAAE,YAAY;IACtB,OAAO,EAAE,YAAY;IACrB,IAAI,EAAE,QAAQ;CAC+C,CAAC;AAGlE,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,OAAoB,EAAE,KAAmB,EAAiB,EAAE;IACtF,MAAM,KAAK,GAAoC,IAAI,GAAG,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC;IAC/E,MAAM,OAAO,GAAI,CAAC,SAAS,EAAE,YAAY,EAAE,eAAe,EAAE,UAAU,EAAE,SAAS,CAAW,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7J,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,KAAK,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,OAAO,aAAa,CAAC,CAAC;IACrI,CAAC;IAED,OAAO,MAAM,CACT,mBAAmB,CAAC,SAAS,CAAC;QAC1B,OAAO;QACP,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,OAAO,EAAE,KAAK,CAAC,OAAO;KACzB,CAAC,CACL,CAAC;AACN,CAAC,CAAC"}

package/dist/keyring/keyring-status.d.ts

@@ -0,0 +1,32 @@
+import type { Item } from "@intentic/local-agent";
+import type { KeyringState } from "@intentic/sandbox-contract/schemas/keyring";
+export interface KeyringSummary {
+    readonly installed: boolean;
+    readonly running: boolean;
+    readonly setUp: boolean;
+    readonly state?: KeyringState;
+}
+export declare const readKeyringSummary: () => Promise<KeyringSummary>;
+export interface AskpassAnswer {
+    readonly installed: boolean;
+    readonly path?: string;
+}
+export declare const readAskpassAnswer: () => Promise<AskpassAnswer>;
+export interface KeyringStatusAnswer extends KeyringSummary {
+    readonly ok: true;
+    readonly askpass: AskpassAnswer;
+    readonly hardened: boolean;
+}
+export declare const readKeyringStatus: () => Promise<KeyringStatusAnswer>;
+export declare const clock: (ms: number) => string;
+export declare const keyringLine: (line: KeyringStatusLine) => Item;
+export interface KeyringStatusLine {
+    readonly installed: boolean;
+    readonly running: boolean;
+    readonly setUp: boolean;
+    readonly locked?: boolean;
+    readonly unlockedUntil?: number;
+    readonly version?: string;
+}
+export declare const keyringStatusLine: (summary: KeyringSummary) => KeyringStatusLine;
+//# sourceMappingURL=keyring-status.d.ts.map

package/dist/keyring/keyring-status.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"keyring-status.d.ts","sourceRoot":"","sources":["../../src/keyring/keyring-status.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,4CAA4C,CAAC;AAQ/E,MAAM,WAAW,cAAc;IAC3B,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,KAAK,CAAC,EAAE,YAAY,CAAC;CACjC;AAED,eAAO,MAAM,kBAAkB,QAAa,OAAO,CAAC,cAAc,CAKjE,CAAC;AAGF,MAAM,WAAW,aAAa;IAC1B,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,eAAO,MAAM,iBAAiB,QAAa,OAAO,CAAC,aAAa,CAG/D,CAAC;AAGF,MAAM,WAAW,mBAAoB,SAAQ,cAAc;IACvD,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAClB,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;IAEhC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;CAC9B;AAED,eAAO,MAAM,iBAAiB,QAAa,OAAO,CAAC,mBAAmB,CAGrE,CAAC;AAGF,eAAO,MAAM,KAAK,OAAQ,MAAM,KAAG,MAAsC,CAAC;AAG1E,eAAO,MAAM,WAAW,SAAU,iBAAiB,KAAG,IAYrD,CAAC;AAGF,MAAM,WAAW,iBAAiB;IAC9B,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,eAAO,MAAM,iBAAiB,YAAa,cAAc,KAAG,iBAO3D,CAAC"}

package/dist/keyring/keyring-status.js

@@ -0,0 +1,41 @@
+import { KeyringUnavailable } from "@intentic/keyring";
+import { localZone, wallClockIn } from "@intentic/sandbox-contract/time/zone";
+import { askpassStatus } from "./askpass.js";
+import { hardenedHere, keyringInstalled, keyringState } from "./service.js";
+export const readKeyringSummary = async () => {
+    const state = await keyringState();
+    const running = !(state instanceof KeyringUnavailable);
+    const summary = { installed: keyringInstalled(), running, setUp: running && state.ok && state.setUp };
+    return running && state.ok ? { ...summary, state: state.state } : summary;
+};
+export const readAskpassAnswer = async () => {
+    const status = await askpassStatus();
+    return status.path === undefined ? { installed: status.installed } : { installed: status.installed, path: status.path };
+};
+export const readKeyringStatus = async () => {
+    const [summary, askpass, hardened] = await Promise.all([readKeyringSummary(), readAskpassAnswer(), hardenedHere()]);
+    return { ok: true, ...summary, askpass, hardened };
+};
+export const clock = (ms) => wallClockIn(ms, localZone());
+export const keyringLine = (line) => {
+    if (!line.installed) {
+        return { tone: "skip", name: "keyring", meta: "not installed (`intentic-machine keyring setup`)" };
+    }
+    if (!line.running) {
+        return { tone: "fail", name: "keyring", meta: "installed, not running (`intentic-machine keyring setup` starts it)" };
+    }
+    if (!line.setUp) {
+        return { tone: "warn", name: "keyring", meta: "running, not set up (`intentic-machine keyring setup`)" };
+    }
+    const lockWords = line.locked === false ? `unlocked${line.unlockedUntil === undefined ? "" : ` until ${clock(line.unlockedUntil)}`}` : "locked";
+    return { tone: "ok", name: "keyring", meta: `running${line.version === undefined ? "" : ` ${line.version}`} · ${lockWords}` };
+};
+export const keyringStatusLine = (summary) => {
+    const line = { installed: summary.installed, running: summary.running, setUp: summary.setUp };
+    if (summary.state === undefined) {
+        return line;
+    }
+    const known = { ...line, locked: summary.state.locked, version: summary.state.version };
+    return summary.state.unlockedUntil === undefined ? known : { ...known, unlockedUntil: summary.state.unlockedUntil };
+};
+//# sourceMappingURL=keyring-status.js.map

package/dist/keyring/keyring-status.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keyring-status.js","sourceRoot":"","sources":["../../src/keyring/keyring-status.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAGvD,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,sCAAsC,CAAC;AAC9E,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAY5E,MAAM,CAAC,MAAM,kBAAkB,GAAG,KAAK,IAA6B,EAAE;IAClE,MAAM,KAAK,GAAG,MAAM,YAAY,EAAE,CAAC;IACnC,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,YAAY,kBAAkB,CAAC,CAAC;IACvD,MAAM,OAAO,GAAmB,EAAE,SAAS,EAAE,gBAAgB,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,IAAI,KAAK,CAAC,EAAE,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;IACtH,OAAO,OAAO,IAAI,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;AAC9E,CAAC,CAAC;AAQF,MAAM,CAAC,MAAM,iBAAiB,GAAG,KAAK,IAA4B,EAAE;IAChE,MAAM,MAAM,GAAG,MAAM,aAAa,EAAE,CAAC;IACrC,OAAO,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;AAC5H,CAAC,CAAC;AAUF,MAAM,CAAC,MAAM,iBAAiB,GAAG,KAAK,IAAkC,EAAE;IACtE,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,kBAAkB,EAAE,EAAE,iBAAiB,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC;IACpH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;AACvD,CAAC,CAAC;AAGF,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,EAAU,EAAU,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;AAG1E,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,IAAuB,EAAQ,EAAE;IACzD,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QAClB,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,kDAAkD,EAAE,CAAC;IACvG,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QAChB,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,qEAAqE,EAAE,CAAC;IAC1H,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QACd,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,wDAAwD,EAAE,CAAC;IAC7G,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,WAAW,IAAI,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;IAChJ,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,MAAM,SAAS,EAAE,EAAE,CAAC;AAClI,CAAC,CAAC;AAYF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,OAAuB,EAAqB,EAAE;IAC5E,MAAM,IAAI,GAAsB,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;IACjH,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC9B,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,MAAM,KAAK,GAAG,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;IACxF,OAAO,OAAO,CAAC,KAAK,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,aAAa,EAAE,OAAO,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC;AACxH,CAAC,CAAC"}

package/dist/keyring/relay.d.ts

@@ -0,0 +1,22 @@
+import type { KeyringCopies, KeyringInboxItem, KeyringInboxResult, KeyringReleaseResult, KeyringShares, KeyringSyncDeliverResultSchema, KeyringSyncDeliverSchema, KeyringSyncOutboxSchema, KeyringSyncPairResultSchema, KeyringSyncPairSchema, KeyringSyncState, KeyringTypeInput, KeyringTypeResult, SignedKeyringGrant } from "@intentic/sandbox-contract/schemas/keyring";
+import type { z } from "zod";
+type SyncPair = z.infer<typeof KeyringSyncPairSchema>;
+type SyncPairResult = z.infer<typeof KeyringSyncPairResultSchema>;
+type SyncOutbox = z.infer<typeof KeyringSyncOutboxSchema>;
+type SyncDeliver = z.infer<typeof KeyringSyncDeliverSchema>;
+type SyncDeliverResult = z.infer<typeof KeyringSyncDeliverResultSchema>;
+export interface KeyringLink {
+    readonly sandboxUrl: string;
+    readonly address?: string | undefined;
+}
+export declare const keyringShares: (link: KeyringLink) => Promise<KeyringShares>;
+export declare const keyringRelease: (link: KeyringLink, grant: SignedKeyringGrant) => Promise<KeyringReleaseResult>;
+export declare const keyringType: (link: KeyringLink, input: KeyringTypeInput) => Promise<KeyringTypeResult>;
+export declare const keyringInbox: (link: KeyringLink, item: KeyringInboxItem) => Promise<KeyringInboxResult>;
+export declare const keyringCopies: (link: KeyringLink) => Promise<KeyringCopies>;
+export declare const keyringSyncState: (link: KeyringLink) => Promise<KeyringSyncState>;
+export declare const keyringSyncPair: (link: KeyringLink, pair: SyncPair) => Promise<SyncPairResult>;
+export declare const keyringSyncOutbox: (link: KeyringLink) => Promise<SyncOutbox>;
+export declare const keyringSyncDeliver: (link: KeyringLink, deliver: SyncDeliver) => Promise<SyncDeliverResult>;
+export {};
+//# sourceMappingURL=relay.d.ts.map

package/dist/keyring/relay.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"relay.d.ts","sourceRoot":"","sources":["../../src/keyring/relay.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACR,aAAa,EACb,gBAAgB,EAChB,kBAAkB,EAElB,oBAAoB,EACpB,aAAa,EACb,8BAA8B,EAC9B,wBAAwB,EACxB,uBAAuB,EACvB,2BAA2B,EAC3B,qBAAqB,EACrB,gBAAgB,EAChB,gBAAgB,EAChB,iBAAiB,EACjB,kBAAkB,EACrB,MAAM,4CAA4C,CAAC;AAEpD,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAG7B,KAAK,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AACtD,KAAK,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAClE,KAAK,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAC1D,KAAK,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAC5D,KAAK,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AAYxE,MAAM,WAAW,WAAW;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACzC;AAwCD,eAAO,MAAM,aAAa,SAAgB,WAAW,KAAG,OAAO,CAAC,aAAa,CAkB5E,CAAC;AAEF,eAAO,MAAM,cAAc,SAAgB,WAAW,SAAS,kBAAkB,KAAG,OAAO,CAAC,oBAAoB,CAG/G,CAAC;AAEF,eAAO,MAAM,WAAW,SAAgB,WAAW,SAAS,gBAAgB,KAAG,OAAO,CAAC,iBAAiB,CAGvG,CAAC;AAIF,eAAO,MAAM,YAAY,SAAgB,WAAW,QAAQ,gBAAgB,KAAG,OAAO,CAAC,kBAAkB,CAUxG,CAAC;AAIF,eAAO,MAAM,aAAa,SAAgB,WAAW,KAAG,OAAO,CAAC,aAAa,CAS5E,CAAC;AAGF,eAAO,MAAM,gBAAgB,SAAgB,WAAW,KAAG,OAAO,CAAC,gBAAgB,CASlF,CAAC;AAEF,eAAO,MAAM,eAAe,SAAgB,WAAW,QAAQ,QAAQ,KAAG,OAAO,CAAC,cAAc,CAG/F,CAAC;AAEF,eAAO,MAAM,iBAAiB,SAAgB,WAAW,KAAG,OAAO,CAAC,UAAU,CAS7E,CAAC;AAEF,eAAO,MAAM,kBAAkB,SAAgB,WAAW,WAAW,WAAW,KAAG,OAAO,CAAC,iBAAiB,CAS3G,CAAC"}

package/dist/keyring/relay.js

@@ -0,0 +1,104 @@
+import { askKeyring, keyringPaths, KeyringUnavailable } from "@intentic/keyring";
+import { ORPCError } from "@orpc/server";
+const addressOf = (link) => link.address ?? keyringPaths().address;
+const noKeyring = (error) => ({ ok: false, code: "no-keyring", refusal: `No keyring answers on this computer: ${error.message}.` });
+const ask = async (link, request) => {
+    try {
+        return await askKeyring({ address: addressOf(link) }, request);
+    }
+    catch (error) {
+        if (error instanceof KeyringUnavailable) {
+            return error;
+        }
+        throw error;
+    }
+};
+const refusedAsError = (answer) => new ORPCError("SERVICE_UNAVAILABLE", { message: answer.refusal, data: { code: answer.code } });
+const sameSandbox = (a, b) => {
+    const left = URL.parse(a);
+    const right = URL.parse(b);
+    return left !== null && right !== null && left.origin === right.origin && left.pathname.replace(/\/+$/u, "") === right.pathname.replace(/\/+$/u, "");
+};
+export const keyringShares = async (link) => {
+    const [state, shares] = await Promise.all([ask(link, { op: "state" }), ask(link, { op: "shares", sandbox: link.sandboxUrl })]);
+    if (state instanceof KeyringUnavailable) {
+        return { pointers: [], reason: noKeyring(state).refusal };
+    }
+    if (!state.ok) {
+        return { pointers: [], reason: state.refusal };
+    }
+    if (!state.setUp) {
+        return { pointers: [], reason: "The keyring on this computer is installed but not set up yet: `intentic-machine keyring setup` on it sets it up." };
+    }
+    if (shares instanceof KeyringUnavailable) {
+        return { keyring: state.state, pointers: [], reason: noKeyring(shares).refusal };
+    }
+    if (!shares.ok) {
+        return { keyring: state.state, pointers: [], reason: shares.refusal };
+    }
+    return { keyring: state.state, pointers: shares.pointers };
+};
+export const keyringRelease = async (link, grant) => {
+    const answer = await ask(link, { op: "release", grant });
+    return answer instanceof KeyringUnavailable ? noKeyring(answer) : answer;
+};
+export const keyringType = async (link, input) => {
+    const answer = await ask(link, { op: "type", input });
+    return answer instanceof KeyringUnavailable ? noKeyring(answer) : answer;
+};
+export const keyringInbox = async (link, item) => {
+    if (!sameSandbox(item.sandbox, link.sandboxUrl)) {
+        return {
+            ok: false,
+            code: "not-shared",
+            refusal: `This item names ${item.sandbox} as where it came from, but it arrived from ${link.sandboxUrl}: a sandbox can only send a value to be kept for itself.`,
+        };
+    }
+    const answer = await ask(link, { op: "inbox", item });
+    return answer instanceof KeyringUnavailable ? noKeyring(answer) : answer;
+};
+export const keyringCopies = async (link) => {
+    const answer = await ask(link, { op: "copies", sandbox: link.sandboxUrl });
+    if (answer instanceof KeyringUnavailable) {
+        return { copies: [] };
+    }
+    if (!answer.ok) {
+        throw refusedAsError(answer);
+    }
+    return { copies: answer.copies };
+};
+export const keyringSyncState = async (link) => {
+    const answer = await ask(link, { op: "sync-state" });
+    if (answer instanceof KeyringUnavailable) {
+        throw refusedAsError(noKeyring(answer));
+    }
+    if (!answer.ok) {
+        throw refusedAsError(answer);
+    }
+    return answer.sync;
+};
+export const keyringSyncPair = async (link, pair) => {
+    const answer = await ask(link, { op: "sync-pair", pair });
+    return answer instanceof KeyringUnavailable ? noKeyring(answer) : answer;
+};
+export const keyringSyncOutbox = async (link) => {
+    const answer = await ask(link, { op: "sync-outbox" });
+    if (answer instanceof KeyringUnavailable) {
+        return { items: [] };
+    }
+    if (!answer.ok) {
+        throw refusedAsError(answer);
+    }
+    return { items: answer.items };
+};
+export const keyringSyncDeliver = async (link, deliver) => {
+    const answer = await ask(link, { op: "sync-deliver", deliver });
+    if (answer instanceof KeyringUnavailable) {
+        return { accepted: 0 };
+    }
+    if (!answer.ok) {
+        throw refusedAsError(answer);
+    }
+    return { accepted: answer.accepted };
+};
+//# sourceMappingURL=relay.js.map

package/dist/keyring/relay.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"relay.js","sourceRoot":"","sources":["../../src/keyring/relay.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,kBAAkB,EAA6C,MAAM,mBAAmB,CAAC;AAkB5H,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAyBzC,MAAM,SAAS,GAAG,CAAC,IAAiB,EAAU,EAAE,CAAC,IAAI,CAAC,OAAO,IAAI,YAAY,EAAE,CAAC,OAAO,CAAC;AASxF,MAAM,SAAS,GAAG,CAAC,KAAyB,EAAW,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,wCAAwC,KAAK,CAAC,OAAO,GAAG,EAAE,CAAC,CAAC;AAIjK,MAAM,GAAG,GAAG,KAAK,EAA4B,IAAiB,EAAE,OAAU,EAA0D,EAAE;IAClI,IAAI,CAAC;QACD,OAAO,MAAM,UAAU,CAAC,EAAE,OAAO,EAAE,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;IACnE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACb,IAAI,KAAK,YAAY,kBAAkB,EAAE,CAAC;YACtC,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,MAAM,KAAK,CAAC;IAChB,CAAC;AACL,CAAC,CAAC;AAIF,MAAM,cAAc,GAAG,CAAC,MAAe,EAAkE,EAAE,CACvG,IAAI,SAAS,CAAC,qBAAqB,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;AAGnG,MAAM,WAAW,GAAG,CAAC,CAAS,EAAE,CAAS,EAAW,EAAE;IAClD,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC1B,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC3B,OAAO,IAAI,KAAK,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,KAAK,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;AACzJ,CAAC,CAAC;AAIF,MAAM,CAAC,MAAM,aAAa,GAAG,KAAK,EAAE,IAAiB,EAA0B,EAAE;IAC7E,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC;IAC/H,IAAI,KAAK,YAAY,kBAAkB,EAAE,CAAC;QACtC,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;IAC9D,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;QACZ,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;IACnD,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,kHAAkH,EAAE,CAAC;IACxJ,CAAC;IACD,IAAI,MAAM,YAAY,kBAAkB,EAAE,CAAC;QACvC,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC;IACrF,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACb,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;IAC1E,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;AAC/D,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,cAAc,GAAG,KAAK,EAAE,IAAiB,EAAE,KAAyB,EAAiC,EAAE;IAChH,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;IACzD,OAAO,MAAM,YAAY,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;AAC7E,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,WAAW,GAAG,KAAK,EAAE,IAAiB,EAAE,KAAuB,EAA8B,EAAE;IACxG,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IACtD,OAAO,MAAM,YAAY,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;AAC7E,CAAC,CAAC;AAIF,MAAM,CAAC,MAAM,YAAY,GAAG,KAAK,EAAE,IAAiB,EAAE,IAAsB,EAA+B,EAAE;IACzG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9C,OAAO;YACH,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,YAAY;YAClB,OAAO,EAAE,mBAAmB,IAAI,CAAC,OAAO,+CAA+C,IAAI,CAAC,UAAU,0DAA0D;SACnK,CAAC;IACN,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,OAAO,MAAM,YAAY,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;AAC7E,CAAC,CAAC;AAIF,MAAM,CAAC,MAAM,aAAa,GAAG,KAAK,EAAE,IAAiB,EAA0B,EAAE;IAC7E,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;IAC3E,IAAI,MAAM,YAAY,kBAAkB,EAAE,CAAC;QACvC,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IAC1B,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACb,MAAM,cAAc,CAAC,MAAM,CAAC,CAAC;IACjC,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;AACrC,CAAC,CAAC;AAGF,MAAM,CAAC,MAAM,gBAAgB,GAAG,KAAK,EAAE,IAAiB,EAA6B,EAAE;IACnF,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC;IACrD,IAAI,MAAM,YAAY,kBAAkB,EAAE,CAAC;QACvC,MAAM,cAAc,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5C,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACb,MAAM,cAAc,CAAC,MAAM,CAAC,CAAC;IACjC,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACvB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,eAAe,GAAG,KAAK,EAAE,IAAiB,EAAE,IAAc,EAA2B,EAAE;IAChG,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1D,OAAO,MAAM,YAAY,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;AAC7E,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,iBAAiB,GAAG,KAAK,EAAE,IAAiB,EAAuB,EAAE;IAC9E,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,aAAa,EAAE,CAAC,CAAC;IACtD,IAAI,MAAM,YAAY,kBAAkB,EAAE,CAAC;QACvC,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;IACzB,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACb,MAAM,cAAc,CAAC,MAAM,CAAC,CAAC;IACjC,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;AACnC,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,kBAAkB,GAAG,KAAK,EAAE,IAAiB,EAAE,OAAoB,EAA8B,EAAE;IAC5G,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,cAAc,EAAE,OAAO,EAAE,CAAC,CAAC;IAChE,IAAI,MAAM,YAAY,kBAAkB,EAAE,CAAC;QACvC,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IAC3B,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACb,MAAM,cAAc,CAAC,MAAM,CAAC,CAAC;IACjC,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;AACzC,CAAC,CAAC"}

package/dist/keyring/secret-input.d.ts

@@ -0,0 +1,14 @@
+export declare const VALUE_MAX_BYTES: number;
+export interface SecretTerminal {
+    readonly input: NodeJS.ReadableStream & {
+        readonly isTTY?: boolean;
+        setRawMode?: (raw: boolean) => void;
+    };
+    readonly output: {
+        write: (chunk: string) => void;
+    };
+}
+export declare const readHidden: (prompt: string, terminal?: SecretTerminal) => Promise<string>;
+export declare const readConfirmed: (what: string, terminal?: SecretTerminal) => Promise<string>;
+export declare const readStdin: (input?: NodeJS.ReadableStream) => Promise<string>;
+//# sourceMappingURL=secret-input.d.ts.map

package/dist/keyring/secret-input.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-input.d.ts","sourceRoot":"","sources":["../../src/keyring/secret-input.ts"],"names":[],"mappings":"AAQA,eAAO,MAAM,eAAe,QAAY,CAAC;AAGzC,MAAM,WAAW,cAAc;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,cAAc,GAAG;QAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;QAAC,UAAU,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,IAAI,CAAA;KAAE,CAAC;IAC1G,QAAQ,CAAC,MAAM,EAAE;QAAE,KAAK,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAA;KAAE,CAAC;CACvD;AASD,eAAO,MAAM,UAAU,WAAkB,MAAM,aAAY,cAAc,KAAoB,OAAO,CAAC,MAAM,CAuC1G,CAAC;AAGF,eAAO,MAAM,aAAa,SAAgB,MAAM,aAAY,cAAc,KAAoB,OAAO,CAAC,MAAM,CAU3G,CAAC;AAGF,eAAO,MAAM,SAAS,WAAiB,MAAM,CAAC,cAAc,KAAmB,OAAO,CAAC,MAAM,CAiB5F,CAAC"}

package/dist/keyring/secret-input.js

@@ -0,0 +1,78 @@
+import { KeyringCliError } from "./flags.js";
+export const VALUE_MAX_BYTES = 32 * 1024;
+const realTerminal = () => ({ input: process.stdin, output: process.stderr });
+const CTRL_C = "\u0003";
+const CTRL_D = "\u0004";
+const BACKSPACE = new Set(["\u007f", "\b"]);
+export const readHidden = async (prompt, terminal = realTerminal()) => {
+    const { input, output } = terminal;
+    if (input.isTTY !== true || input.setRawMode === undefined) {
+        throw new KeyringCliError("usage", "There is no terminal here to type it into without it showing: pipe it in and pass --stdin.");
+    }
+    const setRawMode = input.setRawMode.bind(input);
+    output.write(prompt);
+    setRawMode(true);
+    input.setEncoding("utf8");
+    input.resume();
+    try {
+        return await new Promise((resolve, reject) => {
+            const typed = [];
+            const onData = (chunk) => {
+                for (const character of String(chunk)) {
+                    if (character === "\r" || character === "\n" || (character === CTRL_D && typed.length === 0)) {
+                        input.off("data", onData);
+                        resolve(typed.join(""));
+                        return;
+                    }
+                    if (character === CTRL_C) {
+                        input.off("data", onData);
+                        reject(new KeyringCliError("declined", "Cancelled: nothing was typed in."));
+                        return;
+                    }
+                    if (BACKSPACE.has(character)) {
+                        typed.pop();
+                    }
+                    else if (character >= " ") {
+                        typed.push(character);
+                    }
+                }
+            };
+            input.on("data", onData);
+        });
+    }
+    finally {
+        setRawMode(false);
+        input.pause();
+        output.write("\n");
+    }
+};
+export const readConfirmed = async (what, terminal = realTerminal()) => {
+    const first = await readHidden(`${what}: `, terminal);
+    if (first === "") {
+        throw new KeyringCliError("usage", `Nothing was typed for ${what.toLowerCase()}.`);
+    }
+    const again = await readHidden(`${what}, again to confirm: `, terminal);
+    if (again !== first) {
+        throw new KeyringCliError("usage", "The two did not match, so nothing was kept: run the same command again.");
+    }
+    return first;
+};
+export const readStdin = async (input = process.stdin) => {
+    const chunks = [];
+    let size = 0;
+    for await (const chunk of input) {
+        const bytes = Buffer.from(chunk);
+        size += bytes.byteLength;
+        if (size > VALUE_MAX_BYTES) {
+            throw new KeyringCliError("usage", `What came on stdin is longer than ${VALUE_MAX_BYTES / 1024} KiB, more than any value the keyring keeps.`);
+        }
+        chunks.push(bytes);
+    }
+    const text = Buffer.concat(chunks).toString("utf8");
+    const value = text.endsWith("\r\n") ? text.slice(0, -2) : text.endsWith("\n") ? text.slice(0, -1) : text;
+    if (value === "") {
+        throw new KeyringCliError("usage", "Nothing came on stdin.");
+    }
+    return value;
+};
+//# sourceMappingURL=secret-input.js.map

package/dist/keyring/secret-input.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-input.js","sourceRoot":"","sources":["../../src/keyring/secret-input.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAQ7C,MAAM,CAAC,MAAM,eAAe,GAAG,EAAE,GAAG,IAAI,CAAC;AAQzC,MAAM,YAAY,GAAG,GAAmB,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;AAE9F,MAAM,MAAM,GAAG,QAAQ,CAAC;AACxB,MAAM,MAAM,GAAG,QAAQ,CAAC;AACxB,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;AAG5C,MAAM,CAAC,MAAM,UAAU,GAAG,KAAK,EAAE,MAAc,EAAE,QAAQ,GAAmB,YAAY,EAAE,EAAmB,EAAE;IAC3G,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAC;IACnC,IAAI,KAAK,CAAC,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACzD,MAAM,IAAI,eAAe,CAAC,OAAO,EAAE,4FAA4F,CAAC,CAAC;IACrI,CAAC;IACD,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACrB,UAAU,CAAC,IAAI,CAAC,CAAC;IACjB,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IAC1B,KAAK,CAAC,MAAM,EAAE,CAAC;IACf,IAAI,CAAC;QACD,OAAO,MAAM,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACjD,MAAM,KAAK,GAAa,EAAE,CAAC;YAC3B,MAAM,MAAM,GAAG,CAAC,KAAsB,EAAQ,EAAE;gBAC5C,KAAK,MAAM,SAAS,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;oBACpC,IAAI,SAAS,KAAK,IAAI,IAAI,SAAS,KAAK,IAAI,IAAI,CAAC,SAAS,KAAK,MAAM,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;wBAC3F,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;wBAC1B,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;wBACxB,OAAO;oBACX,CAAC;oBACD,IAAI,SAAS,KAAK,MAAM,EAAE,CAAC;wBACvB,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;wBAC1B,MAAM,CAAC,IAAI,eAAe,CAAC,UAAU,EAAE,kCAAkC,CAAC,CAAC,CAAC;wBAC5E,OAAO;oBACX,CAAC;oBACD,IAAI,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;wBAC3B,KAAK,CAAC,GAAG,EAAE,CAAC;oBAChB,CAAC;yBAAM,IAAI,SAAS,IAAI,GAAG,EAAE,CAAC;wBAC1B,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;oBAC1B,CAAC;gBACL,CAAC;YACL,CAAC,CAAC;YACF,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC7B,CAAC,CAAC,CAAC;IACP,CAAC;YAAS,CAAC;QACP,UAAU,CAAC,KAAK,CAAC,CAAC;QAClB,KAAK,CAAC,KAAK,EAAE,CAAC;QACd,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACvB,CAAC;AACL,CAAC,CAAC;AAGF,MAAM,CAAC,MAAM,aAAa,GAAG,KAAK,EAAE,IAAY,EAAE,QAAQ,GAAmB,YAAY,EAAE,EAAmB,EAAE;IAC5G,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,GAAG,IAAI,IAAI,EAAE,QAAQ,CAAC,CAAC;IACtD,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;QACf,MAAM,IAAI,eAAe,CAAC,OAAO,EAAE,yBAAyB,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;IACvF,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,GAAG,IAAI,sBAAsB,EAAE,QAAQ,CAAC,CAAC;IACxE,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;QAClB,MAAM,IAAI,eAAe,CAAC,OAAO,EAAE,yEAAyE,CAAC,CAAC;IAClH,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC,CAAC;AAGF,MAAM,CAAC,MAAM,SAAS,GAAG,KAAK,EAAE,KAAK,GAA0B,OAAO,CAAC,KAAK,EAAmB,EAAE;IAC7F,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjC,IAAI,IAAI,KAAK,CAAC,UAAU,CAAC;QACzB,IAAI,IAAI,GAAG,eAAe,EAAE,CAAC;YACzB,MAAM,IAAI,eAAe,CAAC,OAAO,EAAE,qCAAqC,eAAe,GAAG,IAAI,8CAA8C,CAAC,CAAC;QAClJ,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACpD,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACzG,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;QACf,MAAM,IAAI,eAAe,CAAC,OAAO,EAAE,wBAAwB,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC,CAAC"}

package/dist/keyring/service.d.ts

@@ -0,0 +1,44 @@
+import { type KeyringResponse, KeyringUnavailable } from "@intentic/keyring";
+import { type AutostartKind, type Log } from "@intentic/local-agent";
+import type { KeyringRefusalCode } from "@intentic/sandbox-contract/schemas/keyring";
+export declare const keyringInstalled: () => boolean;
+export type KeyringStateAnswer = KeyringResponse<"state">;
+export declare const keyringState: (timeoutMs?: number) => Promise<KeyringStateAnswer | KeyringUnavailable>;
+export declare const localKeyringBuild: (from?: string) => string | undefined;
+export declare const stageKeyring: (version: string, log: Log) => Promise<string>;
+export declare const linkAskpass: () => Promise<"linked" | "copied">;
+export declare const KEYRING_SERVICE = "IntenticKeyring";
+export declare const hardenedHere: () => Promise<boolean>;
+export declare const keyringPid: () => Promise<number | undefined>;
+export declare const startKeyring: (log: Log) => Promise<{
+    readonly autostart: AutostartKind;
+    readonly state: KeyringStateAnswer;
+}>;
+export declare const stopKeyring: () => Promise<number | undefined>;
+export interface KeyringInstalled {
+    readonly path: string;
+    readonly fresh: boolean;
+    readonly askpass: "linked" | "copied";
+}
+export declare const installKeyring: (version: string, log: Log) => Promise<KeyringInstalled>;
+export type KeyringUpgrade = {
+    readonly ok: true;
+    readonly upgraded: boolean;
+    readonly from: string;
+    readonly to: string;
+} | {
+    readonly ok: false;
+    readonly code: KeyringRefusalCode;
+    readonly refusal: string;
+};
+export declare const upgradeKeyring: (version: string, log: Log) => Promise<KeyringUpgrade>;
+export declare const hardenKeyring: (log: Log) => Promise<{
+    readonly service: string;
+    readonly autostart: AutostartKind;
+}>;
+export declare const uninstallKeyring: (log: Log) => Promise<{
+    readonly removed: readonly string[];
+    readonly vault: string;
+    readonly hardened: boolean;
+}>;
+//# sourceMappingURL=service.d.ts.map

package/dist/keyring/service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../src/keyring/service.ts"],"names":[],"mappings":"AAQA,OAAO,EAAoD,KAAK,eAAe,EAAE,kBAAkB,EAAc,MAAM,mBAAmB,CAAC;AAC3I,OAAO,EAAE,KAAK,aAAa,EAAiD,KAAK,GAAG,EAA8B,MAAM,uBAAuB,CAAC;AAEhJ,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,4CAA4C,CAAC;AAyBrF,eAAO,MAAM,gBAAgB,QAAO,OAAkC,CAAC;AAEvE,MAAM,MAAM,kBAAkB,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;AAG1D,eAAO,MAAM,YAAY,eAAqB,MAAM,KAAsB,OAAO,CAAC,kBAAkB,GAAG,kBAAkB,CASxH,CAAC;AAoBF,eAAO,MAAM,iBAAiB,UAAU,MAAM,KAAqB,MAAM,GAAG,SAU3E,CAAC;AAmBF,eAAO,MAAM,YAAY,YAAmB,MAAM,OAAO,GAAG,KAAG,OAAO,CAAC,MAAM,CAyC5E,CAAC;AAOF,eAAO,MAAM,WAAW,QAAa,OAAO,CAAC,QAAQ,GAAG,QAAQ,CAa/D,CAAC;AAKF,eAAO,MAAM,eAAe,oBAAoB,CAAC;AAMjD,eAAO,MAAM,YAAY,QAAa,OAAO,CAAC,OAAO,CAUpD,CAAC;AA4BF,eAAO,MAAM,UAAU,QAAa,OAAO,CAAC,MAAM,GAAG,SAAS,CAAsC,CAAC;AAMrG,eAAO,MAAM,YAAY,QAAe,GAAG,KAAG,OAAO,CAAC;IAAE,QAAQ,CAAC,SAAS,EAAE,aAAa,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,kBAAkB,CAAA;CAAE,CAsB9H,CAAC;AAGF,eAAO,MAAM,WAAW,QAAa,OAAO,CAAC,MAAM,GAAG,SAAS,CAM9D,CAAC;AAIF,MAAM,WAAW,gBAAgB;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,QAAQ,GAAG,QAAQ,CAAC;CACzC;AAMD,eAAO,MAAM,cAAc,YAAmB,MAAM,OAAO,GAAG,KAAG,OAAO,CAAC,gBAAgB,CAOxF,CAAC;AAIF,MAAM,MAAM,cAAc,GACpB;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GAC7F;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAS1F,eAAO,MAAM,cAAc,YAAmB,MAAM,OAAO,GAAG,KAAG,OAAO,CAAC,cAAc,CA0CtF,CAAC;AAQF,eAAO,MAAM,aAAa,QAAe,GAAG,KAAG,OAAO,CAAC;IAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,aAAa,CAAA;CAAE,CA0BrH,CAAC;AAQF,eAAO,MAAM,gBAAgB,QAAe,GAAG,KAAG,OAAO,CAAC;IAAE,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAA;CAAE,CA2BpJ,CAAC"}