@interrupted/murk-secrets 0.10.2 → 0.11.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +32 -1
- package/index.d.ts +55 -0
- package/index.js +53 -52
- package/package.json +8 -8
package/README.md
CHANGED
|
@@ -6,7 +6,7 @@ Node.js/TypeScript bindings for [murk](https://github.com/interrupted-inc/murk)
|
|
|
6
6
|
|
|
7
7
|
## Prerequisites
|
|
8
8
|
|
|
9
|
-
You need the [murk CLI](https://github.com/interrupted-inc/murk) to create and manage vaults. This package
|
|
9
|
+
You need the [murk CLI](https://github.com/interrupted-inc/murk) to create and manage vaults. This package can read them and store secrets into them; trust-changing operations (rotation, recipient/group changes, agent grants) stay CLI-only.
|
|
10
10
|
|
|
11
11
|
```bash
|
|
12
12
|
# Install the CLI first
|
|
@@ -46,6 +46,12 @@ const secrets = vault.export()
|
|
|
46
46
|
// One-liners
|
|
47
47
|
get('DATABASE_URL')
|
|
48
48
|
exportAll()
|
|
49
|
+
|
|
50
|
+
// Store a secret (encrypted to everyone by default)
|
|
51
|
+
vault.add('NEW_TOKEN', 'value')
|
|
52
|
+
vault.add('MY_TOKEN', 'value', { tier: 'me' }) // personal, scoped to you
|
|
53
|
+
vault.add('TEAM_TOKEN', 'value', { tier: 'backend' }) // to a named group
|
|
54
|
+
add('NEW_TOKEN', 'value') // one-liner
|
|
49
55
|
```
|
|
50
56
|
|
|
51
57
|
## API
|
|
@@ -62,6 +68,10 @@ One-liner: load the vault and get a single value.
|
|
|
62
68
|
|
|
63
69
|
One-liner: load the vault and export all secrets as an object.
|
|
64
70
|
|
|
71
|
+
### `add(key, value, options?, vaultPath?): void`
|
|
72
|
+
|
|
73
|
+
One-liner: load the vault and store a secret. See `vault.add` below.
|
|
74
|
+
|
|
65
75
|
### `hasIdentity(): boolean`
|
|
66
76
|
|
|
67
77
|
Whether a decryption identity (`MURK_KEY` / `MURK_KEY_FILE`) is available — i.e. whether `load()` can decrypt. This is not a check for whether a secret exists; use `vault.has(key)` / `vault.keys()` for that.
|
|
@@ -75,9 +85,23 @@ Whether a decryption identity (`MURK_KEY` / `MURK_KEY_FILE`) is available — i.
|
|
|
75
85
|
| `vault.keys()` | `string[]` | List of key names |
|
|
76
86
|
| `vault.has(key)` | `boolean` | Check if a key exists |
|
|
77
87
|
| `vault.length` | `number` | Number of secrets |
|
|
88
|
+
| `vault.add(key, value, options?)` | `void` | Store a secret (see below) |
|
|
89
|
+
| `vault.describe(key, description, options?)` | `void` | Set a key's description/tags/example |
|
|
78
90
|
|
|
79
91
|
Scoped (per-user) overrides are applied automatically — if you have a scoped value for a key, it takes priority over the shared value.
|
|
80
92
|
|
|
93
|
+
### Writing secrets
|
|
94
|
+
|
|
95
|
+
`vault.add(key, value, options?)` mirrors `murk add`: it encrypts the value, re-signs the vault, and writes it back to disk under an exclusive lock (safe against concurrent writers). An existing key is overwritten in place. Options:
|
|
96
|
+
|
|
97
|
+
- `tier` — where the value lives: `'everyone'` (default, shared to all recipients), `'me'` (a personal value encrypted to you only), or a **group name** (encrypted to that group's members; you must be a member).
|
|
98
|
+
- `desc` — a human-readable description recorded in the schema.
|
|
99
|
+
- `tags` — tags recorded on the key; tags are the unit the agent allow-tag policy gates on.
|
|
100
|
+
|
|
101
|
+
`vault.describe(key, description, options?)` updates a key's schema metadata (`tags`, `example`) without touching its value. A key with no value becomes a documented-but-unset entry, the same as `murk describe`.
|
|
102
|
+
|
|
103
|
+
Trust-changing operations — rotation, adding/removing recipients or group members, and minting agent grants — are deliberately **not** exposed here; use the CLI for those.
|
|
104
|
+
|
|
81
105
|
## Memory hygiene
|
|
82
106
|
|
|
83
107
|
Every decrypted value murk returns is a plain host-language string. murk zeroes plaintext
|
|
@@ -88,6 +112,13 @@ reading secrets into a process (see the
|
|
|
88
112
|
[threat model](https://github.com/interrupted-inc/murk/blob/main/THREAT_MODEL.md)); avoid
|
|
89
113
|
holding decrypted values longer than you need them.
|
|
90
114
|
|
|
115
|
+
The write path makes this sharper. To call `vault.add(key, value)` you already hold
|
|
116
|
+
the plaintext as a JavaScript `String` *before* the call — it lives in V8's heap, is
|
|
117
|
+
copied across the FFI boundary into a Rust `String`, and is zeroized on neither side.
|
|
118
|
+
Reads only ever expose plaintext murk itself produced during decryption; a write means
|
|
119
|
+
the plaintext originated in your process and lingers there under the GC's control. Build
|
|
120
|
+
the value as late as possible, pass it straight into `add`, and don't keep it around.
|
|
121
|
+
|
|
91
122
|
## Agent policy
|
|
92
123
|
|
|
93
124
|
When the loaded key is an agent grant (minted with `murk agent grant`), the vault's agent policy is enforced on read, the same way the CLI enforces it at `murk agent exec`: `get()` and `export()` throw if the policy forbids a key. Operator keys are unaffected. This makes a policy vault strict from every entry point — though an agent already cannot decrypt out-of-scope secrets at all, since its ephemeral key is not a recipient of them.
|
package/index.d.ts
CHANGED
|
@@ -36,6 +36,61 @@ export declare class Vault {
|
|
|
36
36
|
get length(): number
|
|
37
37
|
/** Check if a key exists. */
|
|
38
38
|
has(key: string): boolean
|
|
39
|
+
/**
|
|
40
|
+
* Store a secret. Mirrors `murk add`: the value is encrypted to the tier's
|
|
41
|
+
* recipients and the vault is re-signed and written back to disk under an
|
|
42
|
+
* exclusive lock, so it is safe against concurrent writers.
|
|
43
|
+
*
|
|
44
|
+
* `tier` selects the destination — `"everyone"` (default, shared to all
|
|
45
|
+
* recipients), `"me"` (a personal value encrypted to the caller only), or a
|
|
46
|
+
* group name (encrypted to that group's members; the caller must be a
|
|
47
|
+
* member). An existing key is overwritten in place.
|
|
48
|
+
*
|
|
49
|
+
* PLAINTEXT CAVEAT: unlike the read path — where plaintext only ever appears
|
|
50
|
+
* *after* decryption — a write means the caller already holds the secret as a
|
|
51
|
+
* JavaScript `String` before this call. That string lives in V8's heap, is
|
|
52
|
+
* copied across the napi boundary into a Rust `String`, and is not zeroized on
|
|
53
|
+
* either side. See `get` and THREAT_MODEL.md.
|
|
54
|
+
*
|
|
55
|
+
* Agent policy is enforced exactly as on the read path: if the loaded
|
|
56
|
+
* identity is a granted agent (or the operator has opted into self-scope),
|
|
57
|
+
* the resulting key must satisfy the vault's agent allow-tag policy and the
|
|
58
|
+
* grant must be unexpired — otherwise the write throws and nothing is saved.
|
|
59
|
+
* For a plain operator identity this is a no-op.
|
|
60
|
+
*/
|
|
61
|
+
add(key: string, value: string, options?: AddOptions | undefined | null): void
|
|
62
|
+
/**
|
|
63
|
+
* Update a secret's description (and optionally its tags/example) in the
|
|
64
|
+
* vault schema. Mirrors `murk describe`. Does not touch the secret value;
|
|
65
|
+
* a key with no value becomes a documented-but-unset entry.
|
|
66
|
+
*
|
|
67
|
+
* Agent policy is enforced over the key exactly as in `add`.
|
|
68
|
+
*/
|
|
69
|
+
describe(key: string, description: string, options?: DescribeOptions | undefined | null): void
|
|
70
|
+
}
|
|
71
|
+
|
|
72
|
+
/** One-liner: load the vault and store a secret. See `Vault.add`. */
|
|
73
|
+
export declare function add(key: string, value: string, options?: AddOptions | undefined | null, vaultPath?: string | undefined | null): void
|
|
74
|
+
|
|
75
|
+
/**
|
|
76
|
+
* Options for [`Vault::add`]. All fields are optional; an omitted `tier`
|
|
77
|
+
* defaults to `everyone` (the shared value).
|
|
78
|
+
*/
|
|
79
|
+
export interface AddOptions {
|
|
80
|
+
/** `"everyone"` (default), `"me"` (personal scoped), or a group name. */
|
|
81
|
+
tier?: string
|
|
82
|
+
/** Human-readable description recorded in the vault schema. */
|
|
83
|
+
desc?: string
|
|
84
|
+
/** Tags recorded on the key — the unit the agent allow-tag policy gates on. */
|
|
85
|
+
tags?: Array<string>
|
|
86
|
+
}
|
|
87
|
+
|
|
88
|
+
/** Options for [`Vault::describe`]. All fields are optional. */
|
|
89
|
+
export interface DescribeOptions {
|
|
90
|
+
/** Tags to set on the key (replaces existing tags when non-empty). */
|
|
91
|
+
tags?: Array<string>
|
|
92
|
+
/** Example value recorded in the schema (for `.env.example`-style docs). */
|
|
93
|
+
example?: string
|
|
39
94
|
}
|
|
40
95
|
|
|
41
96
|
/** One-liner: load the vault and export all secrets as an object. */
|
package/index.js
CHANGED
|
@@ -77,8 +77,8 @@ function requireNative() {
|
|
|
77
77
|
try {
|
|
78
78
|
const binding = require('@interrupted/murk-secrets-android-arm64')
|
|
79
79
|
const bindingPackageVersion = require('@interrupted/murk-secrets-android-arm64/package.json').version
|
|
80
|
-
if (bindingPackageVersion !== '0.
|
|
81
|
-
throw new Error(`Native binding package version mismatch, expected 0.
|
|
80
|
+
if (bindingPackageVersion !== '0.10.3' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
|
|
81
|
+
throw new Error(`Native binding package version mismatch, expected 0.10.3 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
|
|
82
82
|
}
|
|
83
83
|
return binding
|
|
84
84
|
} catch (e) {
|
|
@@ -93,8 +93,8 @@ function requireNative() {
|
|
|
93
93
|
try {
|
|
94
94
|
const binding = require('@interrupted/murk-secrets-android-arm-eabi')
|
|
95
95
|
const bindingPackageVersion = require('@interrupted/murk-secrets-android-arm-eabi/package.json').version
|
|
96
|
-
if (bindingPackageVersion !== '0.
|
|
97
|
-
throw new Error(`Native binding package version mismatch, expected 0.
|
|
96
|
+
if (bindingPackageVersion !== '0.10.3' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
|
|
97
|
+
throw new Error(`Native binding package version mismatch, expected 0.10.3 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
|
|
98
98
|
}
|
|
99
99
|
return binding
|
|
100
100
|
} catch (e) {
|
|
@@ -114,8 +114,8 @@ function requireNative() {
|
|
|
114
114
|
try {
|
|
115
115
|
const binding = require('@interrupted/murk-secrets-win32-x64-gnu')
|
|
116
116
|
const bindingPackageVersion = require('@interrupted/murk-secrets-win32-x64-gnu/package.json').version
|
|
117
|
-
if (bindingPackageVersion !== '0.
|
|
118
|
-
throw new Error(`Native binding package version mismatch, expected 0.
|
|
117
|
+
if (bindingPackageVersion !== '0.10.3' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
|
|
118
|
+
throw new Error(`Native binding package version mismatch, expected 0.10.3 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
|
|
119
119
|
}
|
|
120
120
|
return binding
|
|
121
121
|
} catch (e) {
|
|
@@ -130,8 +130,8 @@ function requireNative() {
|
|
|
130
130
|
try {
|
|
131
131
|
const binding = require('@interrupted/murk-secrets-win32-x64-msvc')
|
|
132
132
|
const bindingPackageVersion = require('@interrupted/murk-secrets-win32-x64-msvc/package.json').version
|
|
133
|
-
if (bindingPackageVersion !== '0.
|
|
134
|
-
throw new Error(`Native binding package version mismatch, expected 0.
|
|
133
|
+
if (bindingPackageVersion !== '0.10.3' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
|
|
134
|
+
throw new Error(`Native binding package version mismatch, expected 0.10.3 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
|
|
135
135
|
}
|
|
136
136
|
return binding
|
|
137
137
|
} catch (e) {
|
|
@@ -147,8 +147,8 @@ function requireNative() {
|
|
|
147
147
|
try {
|
|
148
148
|
const binding = require('@interrupted/murk-secrets-win32-ia32-msvc')
|
|
149
149
|
const bindingPackageVersion = require('@interrupted/murk-secrets-win32-ia32-msvc/package.json').version
|
|
150
|
-
if (bindingPackageVersion !== '0.
|
|
151
|
-
throw new Error(`Native binding package version mismatch, expected 0.
|
|
150
|
+
if (bindingPackageVersion !== '0.10.3' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
|
|
151
|
+
throw new Error(`Native binding package version mismatch, expected 0.10.3 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
|
|
152
152
|
}
|
|
153
153
|
return binding
|
|
154
154
|
} catch (e) {
|
|
@@ -163,8 +163,8 @@ function requireNative() {
|
|
|
163
163
|
try {
|
|
164
164
|
const binding = require('@interrupted/murk-secrets-win32-arm64-msvc')
|
|
165
165
|
const bindingPackageVersion = require('@interrupted/murk-secrets-win32-arm64-msvc/package.json').version
|
|
166
|
-
if (bindingPackageVersion !== '0.
|
|
167
|
-
throw new Error(`Native binding package version mismatch, expected 0.
|
|
166
|
+
if (bindingPackageVersion !== '0.10.3' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
|
|
167
|
+
throw new Error(`Native binding package version mismatch, expected 0.10.3 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
|
|
168
168
|
}
|
|
169
169
|
return binding
|
|
170
170
|
} catch (e) {
|
|
@@ -182,8 +182,8 @@ function requireNative() {
|
|
|
182
182
|
try {
|
|
183
183
|
const binding = require('@interrupted/murk-secrets-darwin-universal')
|
|
184
184
|
const bindingPackageVersion = require('@interrupted/murk-secrets-darwin-universal/package.json').version
|
|
185
|
-
if (bindingPackageVersion !== '0.
|
|
186
|
-
throw new Error(`Native binding package version mismatch, expected 0.
|
|
185
|
+
if (bindingPackageVersion !== '0.10.3' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
|
|
186
|
+
throw new Error(`Native binding package version mismatch, expected 0.10.3 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
|
|
187
187
|
}
|
|
188
188
|
return binding
|
|
189
189
|
} catch (e) {
|
|
@@ -198,8 +198,8 @@ function requireNative() {
|
|
|
198
198
|
try {
|
|
199
199
|
const binding = require('@interrupted/murk-secrets-darwin-x64')
|
|
200
200
|
const bindingPackageVersion = require('@interrupted/murk-secrets-darwin-x64/package.json').version
|
|
201
|
-
if (bindingPackageVersion !== '0.
|
|
202
|
-
throw new Error(`Native binding package version mismatch, expected 0.
|
|
201
|
+
if (bindingPackageVersion !== '0.10.3' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
|
|
202
|
+
throw new Error(`Native binding package version mismatch, expected 0.10.3 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
|
|
203
203
|
}
|
|
204
204
|
return binding
|
|
205
205
|
} catch (e) {
|
|
@@ -214,8 +214,8 @@ function requireNative() {
|
|
|
214
214
|
try {
|
|
215
215
|
const binding = require('@interrupted/murk-secrets-darwin-arm64')
|
|
216
216
|
const bindingPackageVersion = require('@interrupted/murk-secrets-darwin-arm64/package.json').version
|
|
217
|
-
if (bindingPackageVersion !== '0.
|
|
218
|
-
throw new Error(`Native binding package version mismatch, expected 0.
|
|
217
|
+
if (bindingPackageVersion !== '0.10.3' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
|
|
218
|
+
throw new Error(`Native binding package version mismatch, expected 0.10.3 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
|
|
219
219
|
}
|
|
220
220
|
return binding
|
|
221
221
|
} catch (e) {
|
|
@@ -234,8 +234,8 @@ function requireNative() {
|
|
|
234
234
|
try {
|
|
235
235
|
const binding = require('@interrupted/murk-secrets-freebsd-x64')
|
|
236
236
|
const bindingPackageVersion = require('@interrupted/murk-secrets-freebsd-x64/package.json').version
|
|
237
|
-
if (bindingPackageVersion !== '0.
|
|
238
|
-
throw new Error(`Native binding package version mismatch, expected 0.
|
|
237
|
+
if (bindingPackageVersion !== '0.10.3' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
|
|
238
|
+
throw new Error(`Native binding package version mismatch, expected 0.10.3 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
|
|
239
239
|
}
|
|
240
240
|
return binding
|
|
241
241
|
} catch (e) {
|
|
@@ -250,8 +250,8 @@ function requireNative() {
|
|
|
250
250
|
try {
|
|
251
251
|
const binding = require('@interrupted/murk-secrets-freebsd-arm64')
|
|
252
252
|
const bindingPackageVersion = require('@interrupted/murk-secrets-freebsd-arm64/package.json').version
|
|
253
|
-
if (bindingPackageVersion !== '0.
|
|
254
|
-
throw new Error(`Native binding package version mismatch, expected 0.
|
|
253
|
+
if (bindingPackageVersion !== '0.10.3' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
|
|
254
|
+
throw new Error(`Native binding package version mismatch, expected 0.10.3 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
|
|
255
255
|
}
|
|
256
256
|
return binding
|
|
257
257
|
} catch (e) {
|
|
@@ -271,8 +271,8 @@ function requireNative() {
|
|
|
271
271
|
try {
|
|
272
272
|
const binding = require('@interrupted/murk-secrets-linux-x64-musl')
|
|
273
273
|
const bindingPackageVersion = require('@interrupted/murk-secrets-linux-x64-musl/package.json').version
|
|
274
|
-
if (bindingPackageVersion !== '0.
|
|
275
|
-
throw new Error(`Native binding package version mismatch, expected 0.
|
|
274
|
+
if (bindingPackageVersion !== '0.10.3' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
|
|
275
|
+
throw new Error(`Native binding package version mismatch, expected 0.10.3 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
|
|
276
276
|
}
|
|
277
277
|
return binding
|
|
278
278
|
} catch (e) {
|
|
@@ -287,8 +287,8 @@ function requireNative() {
|
|
|
287
287
|
try {
|
|
288
288
|
const binding = require('@interrupted/murk-secrets-linux-x64-gnu')
|
|
289
289
|
const bindingPackageVersion = require('@interrupted/murk-secrets-linux-x64-gnu/package.json').version
|
|
290
|
-
if (bindingPackageVersion !== '0.
|
|
291
|
-
throw new Error(`Native binding package version mismatch, expected 0.
|
|
290
|
+
if (bindingPackageVersion !== '0.10.3' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
|
|
291
|
+
throw new Error(`Native binding package version mismatch, expected 0.10.3 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
|
|
292
292
|
}
|
|
293
293
|
return binding
|
|
294
294
|
} catch (e) {
|
|
@@ -305,8 +305,8 @@ function requireNative() {
|
|
|
305
305
|
try {
|
|
306
306
|
const binding = require('@interrupted/murk-secrets-linux-arm64-musl')
|
|
307
307
|
const bindingPackageVersion = require('@interrupted/murk-secrets-linux-arm64-musl/package.json').version
|
|
308
|
-
if (bindingPackageVersion !== '0.
|
|
309
|
-
throw new Error(`Native binding package version mismatch, expected 0.
|
|
308
|
+
if (bindingPackageVersion !== '0.10.3' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
|
|
309
|
+
throw new Error(`Native binding package version mismatch, expected 0.10.3 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
|
|
310
310
|
}
|
|
311
311
|
return binding
|
|
312
312
|
} catch (e) {
|
|
@@ -321,8 +321,8 @@ function requireNative() {
|
|
|
321
321
|
try {
|
|
322
322
|
const binding = require('@interrupted/murk-secrets-linux-arm64-gnu')
|
|
323
323
|
const bindingPackageVersion = require('@interrupted/murk-secrets-linux-arm64-gnu/package.json').version
|
|
324
|
-
if (bindingPackageVersion !== '0.
|
|
325
|
-
throw new Error(`Native binding package version mismatch, expected 0.
|
|
324
|
+
if (bindingPackageVersion !== '0.10.3' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
|
|
325
|
+
throw new Error(`Native binding package version mismatch, expected 0.10.3 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
|
|
326
326
|
}
|
|
327
327
|
return binding
|
|
328
328
|
} catch (e) {
|
|
@@ -339,8 +339,8 @@ function requireNative() {
|
|
|
339
339
|
try {
|
|
340
340
|
const binding = require('@interrupted/murk-secrets-linux-arm-musleabihf')
|
|
341
341
|
const bindingPackageVersion = require('@interrupted/murk-secrets-linux-arm-musleabihf/package.json').version
|
|
342
|
-
if (bindingPackageVersion !== '0.
|
|
343
|
-
throw new Error(`Native binding package version mismatch, expected 0.
|
|
342
|
+
if (bindingPackageVersion !== '0.10.3' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
|
|
343
|
+
throw new Error(`Native binding package version mismatch, expected 0.10.3 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
|
|
344
344
|
}
|
|
345
345
|
return binding
|
|
346
346
|
} catch (e) {
|
|
@@ -355,8 +355,8 @@ function requireNative() {
|
|
|
355
355
|
try {
|
|
356
356
|
const binding = require('@interrupted/murk-secrets-linux-arm-gnueabihf')
|
|
357
357
|
const bindingPackageVersion = require('@interrupted/murk-secrets-linux-arm-gnueabihf/package.json').version
|
|
358
|
-
if (bindingPackageVersion !== '0.
|
|
359
|
-
throw new Error(`Native binding package version mismatch, expected 0.
|
|
358
|
+
if (bindingPackageVersion !== '0.10.3' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
|
|
359
|
+
throw new Error(`Native binding package version mismatch, expected 0.10.3 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
|
|
360
360
|
}
|
|
361
361
|
return binding
|
|
362
362
|
} catch (e) {
|
|
@@ -373,8 +373,8 @@ function requireNative() {
|
|
|
373
373
|
try {
|
|
374
374
|
const binding = require('@interrupted/murk-secrets-linux-loong64-musl')
|
|
375
375
|
const bindingPackageVersion = require('@interrupted/murk-secrets-linux-loong64-musl/package.json').version
|
|
376
|
-
if (bindingPackageVersion !== '0.
|
|
377
|
-
throw new Error(`Native binding package version mismatch, expected 0.
|
|
376
|
+
if (bindingPackageVersion !== '0.10.3' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
|
|
377
|
+
throw new Error(`Native binding package version mismatch, expected 0.10.3 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
|
|
378
378
|
}
|
|
379
379
|
return binding
|
|
380
380
|
} catch (e) {
|
|
@@ -389,8 +389,8 @@ function requireNative() {
|
|
|
389
389
|
try {
|
|
390
390
|
const binding = require('@interrupted/murk-secrets-linux-loong64-gnu')
|
|
391
391
|
const bindingPackageVersion = require('@interrupted/murk-secrets-linux-loong64-gnu/package.json').version
|
|
392
|
-
if (bindingPackageVersion !== '0.
|
|
393
|
-
throw new Error(`Native binding package version mismatch, expected 0.
|
|
392
|
+
if (bindingPackageVersion !== '0.10.3' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
|
|
393
|
+
throw new Error(`Native binding package version mismatch, expected 0.10.3 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
|
|
394
394
|
}
|
|
395
395
|
return binding
|
|
396
396
|
} catch (e) {
|
|
@@ -407,8 +407,8 @@ function requireNative() {
|
|
|
407
407
|
try {
|
|
408
408
|
const binding = require('@interrupted/murk-secrets-linux-riscv64-musl')
|
|
409
409
|
const bindingPackageVersion = require('@interrupted/murk-secrets-linux-riscv64-musl/package.json').version
|
|
410
|
-
if (bindingPackageVersion !== '0.
|
|
411
|
-
throw new Error(`Native binding package version mismatch, expected 0.
|
|
410
|
+
if (bindingPackageVersion !== '0.10.3' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
|
|
411
|
+
throw new Error(`Native binding package version mismatch, expected 0.10.3 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
|
|
412
412
|
}
|
|
413
413
|
return binding
|
|
414
414
|
} catch (e) {
|
|
@@ -423,8 +423,8 @@ function requireNative() {
|
|
|
423
423
|
try {
|
|
424
424
|
const binding = require('@interrupted/murk-secrets-linux-riscv64-gnu')
|
|
425
425
|
const bindingPackageVersion = require('@interrupted/murk-secrets-linux-riscv64-gnu/package.json').version
|
|
426
|
-
if (bindingPackageVersion !== '0.
|
|
427
|
-
throw new Error(`Native binding package version mismatch, expected 0.
|
|
426
|
+
if (bindingPackageVersion !== '0.10.3' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
|
|
427
|
+
throw new Error(`Native binding package version mismatch, expected 0.10.3 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
|
|
428
428
|
}
|
|
429
429
|
return binding
|
|
430
430
|
} catch (e) {
|
|
@@ -440,8 +440,8 @@ function requireNative() {
|
|
|
440
440
|
try {
|
|
441
441
|
const binding = require('@interrupted/murk-secrets-linux-ppc64-gnu')
|
|
442
442
|
const bindingPackageVersion = require('@interrupted/murk-secrets-linux-ppc64-gnu/package.json').version
|
|
443
|
-
if (bindingPackageVersion !== '0.
|
|
444
|
-
throw new Error(`Native binding package version mismatch, expected 0.
|
|
443
|
+
if (bindingPackageVersion !== '0.10.3' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
|
|
444
|
+
throw new Error(`Native binding package version mismatch, expected 0.10.3 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
|
|
445
445
|
}
|
|
446
446
|
return binding
|
|
447
447
|
} catch (e) {
|
|
@@ -456,8 +456,8 @@ function requireNative() {
|
|
|
456
456
|
try {
|
|
457
457
|
const binding = require('@interrupted/murk-secrets-linux-s390x-gnu')
|
|
458
458
|
const bindingPackageVersion = require('@interrupted/murk-secrets-linux-s390x-gnu/package.json').version
|
|
459
|
-
if (bindingPackageVersion !== '0.
|
|
460
|
-
throw new Error(`Native binding package version mismatch, expected 0.
|
|
459
|
+
if (bindingPackageVersion !== '0.10.3' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
|
|
460
|
+
throw new Error(`Native binding package version mismatch, expected 0.10.3 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
|
|
461
461
|
}
|
|
462
462
|
return binding
|
|
463
463
|
} catch (e) {
|
|
@@ -476,8 +476,8 @@ function requireNative() {
|
|
|
476
476
|
try {
|
|
477
477
|
const binding = require('@interrupted/murk-secrets-openharmony-arm64')
|
|
478
478
|
const bindingPackageVersion = require('@interrupted/murk-secrets-openharmony-arm64/package.json').version
|
|
479
|
-
if (bindingPackageVersion !== '0.
|
|
480
|
-
throw new Error(`Native binding package version mismatch, expected 0.
|
|
479
|
+
if (bindingPackageVersion !== '0.10.3' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
|
|
480
|
+
throw new Error(`Native binding package version mismatch, expected 0.10.3 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
|
|
481
481
|
}
|
|
482
482
|
return binding
|
|
483
483
|
} catch (e) {
|
|
@@ -492,8 +492,8 @@ function requireNative() {
|
|
|
492
492
|
try {
|
|
493
493
|
const binding = require('@interrupted/murk-secrets-openharmony-x64')
|
|
494
494
|
const bindingPackageVersion = require('@interrupted/murk-secrets-openharmony-x64/package.json').version
|
|
495
|
-
if (bindingPackageVersion !== '0.
|
|
496
|
-
throw new Error(`Native binding package version mismatch, expected 0.
|
|
495
|
+
if (bindingPackageVersion !== '0.10.3' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
|
|
496
|
+
throw new Error(`Native binding package version mismatch, expected 0.10.3 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
|
|
497
497
|
}
|
|
498
498
|
return binding
|
|
499
499
|
} catch (e) {
|
|
@@ -508,8 +508,8 @@ function requireNative() {
|
|
|
508
508
|
try {
|
|
509
509
|
const binding = require('@interrupted/murk-secrets-openharmony-arm')
|
|
510
510
|
const bindingPackageVersion = require('@interrupted/murk-secrets-openharmony-arm/package.json').version
|
|
511
|
-
if (bindingPackageVersion !== '0.
|
|
512
|
-
throw new Error(`Native binding package version mismatch, expected 0.
|
|
511
|
+
if (bindingPackageVersion !== '0.10.3' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
|
|
512
|
+
throw new Error(`Native binding package version mismatch, expected 0.10.3 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
|
|
513
513
|
}
|
|
514
514
|
return binding
|
|
515
515
|
} catch (e) {
|
|
@@ -577,6 +577,7 @@ if (!nativeBinding) {
|
|
|
577
577
|
|
|
578
578
|
module.exports = nativeBinding
|
|
579
579
|
module.exports.Vault = nativeBinding.Vault
|
|
580
|
+
module.exports.add = nativeBinding.add
|
|
580
581
|
module.exports.exportAll = nativeBinding.exportAll
|
|
581
582
|
module.exports.get = nativeBinding.get
|
|
582
583
|
module.exports.hasIdentity = nativeBinding.hasIdentity
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@interrupted/murk-secrets",
|
|
3
|
-
"version": "0.
|
|
3
|
+
"version": "0.11.0",
|
|
4
4
|
"description": "Node.js/TypeScript bindings for murk — encrypted secrets manager",
|
|
5
5
|
"main": "index.js",
|
|
6
6
|
"types": "index.d.ts",
|
|
@@ -48,12 +48,12 @@
|
|
|
48
48
|
"index.d.ts"
|
|
49
49
|
],
|
|
50
50
|
"optionalDependencies": {
|
|
51
|
-
"@interrupted/murk-secrets-darwin-x64": "0.
|
|
52
|
-
"@interrupted/murk-secrets-darwin-arm64": "0.
|
|
53
|
-
"@interrupted/murk-secrets-linux-x64-gnu": "0.
|
|
54
|
-
"@interrupted/murk-secrets-linux-x64-musl": "0.
|
|
55
|
-
"@interrupted/murk-secrets-linux-arm64-gnu": "0.
|
|
56
|
-
"@interrupted/murk-secrets-linux-arm64-musl": "0.
|
|
57
|
-
"@interrupted/murk-secrets-win32-x64-msvc": "0.
|
|
51
|
+
"@interrupted/murk-secrets-darwin-x64": "0.11.0",
|
|
52
|
+
"@interrupted/murk-secrets-darwin-arm64": "0.11.0",
|
|
53
|
+
"@interrupted/murk-secrets-linux-x64-gnu": "0.11.0",
|
|
54
|
+
"@interrupted/murk-secrets-linux-x64-musl": "0.11.0",
|
|
55
|
+
"@interrupted/murk-secrets-linux-arm64-gnu": "0.11.0",
|
|
56
|
+
"@interrupted/murk-secrets-linux-arm64-musl": "0.11.0",
|
|
57
|
+
"@interrupted/murk-secrets-win32-x64-msvc": "0.11.0"
|
|
58
58
|
}
|
|
59
59
|
}
|