@mnemonik/credentials 0.1.0

package/dist/osSecretStore.js

@@ -0,0 +1,211 @@
+import { execFile as nodeExecFile } from 'node:child_process';
+import { randomUUID } from 'node:crypto';
+const service = 'mnemonik.credentials.v1';
+const unavailable = () => new Error('os_store_unavailable');
+const cachedReads = new Map();
+// The script is fixed code. Target and UTF-8 secret arrive on separate stdin lines.
+// CredFree/FreeHGlobal run even if marshaling or a native operation fails.
+const windowsCode = `
+using System;
+using System.Runtime.InteropServices;
+using System.Text;
+public class MnemonikCredential {
+  [StructLayout(LayoutKind.Sequential, CharSet = CharSet.Unicode)]
+  public struct Credential {
+    public uint Flags, Type;
+    public string TargetName, Comment;
+    public System.Runtime.InteropServices.ComTypes.FILETIME LastWritten;
+    public uint CredentialBlobSize;
+    public IntPtr CredentialBlob;
+    public uint Persist, AttributeCount;
+    public IntPtr Attributes;
+    public string TargetAlias, UserName;
+  }
+  [DllImport("advapi32.dll", CharSet = CharSet.Unicode, SetLastError = true)]
+  public static extern bool CredWriteW(ref Credential value, uint flags);
+  [DllImport("advapi32.dll", CharSet = CharSet.Unicode, SetLastError = true)]
+  public static extern bool CredReadW(string target, uint type, uint flags, out IntPtr value);
+  [DllImport("advapi32.dll", CharSet = CharSet.Unicode, SetLastError = true)]
+  public static extern bool CredDeleteW(string target, uint type, uint flags);
+  [DllImport("advapi32.dll")]
+  public static extern void CredFree(IntPtr value);
+  public static int Run(string op, string target, string encoded) {
+    bool ok;
+    int error = 0;
+    if (op == "set") {
+      byte[] bytes = Convert.FromBase64String(encoded);
+      IntPtr blob = Marshal.AllocHGlobal(bytes.Length);
+      try {
+        Marshal.Copy(bytes, 0, blob, bytes.Length);
+        Credential value = new Credential { Type = 1, TargetName = target, Persist = 2,
+          CredentialBlobSize = (uint)bytes.Length, CredentialBlob = blob };
+        ok = CredWriteW(ref value, 0);
+        if (!ok) error = Marshal.GetLastWin32Error();
+      } finally { Marshal.FreeHGlobal(blob); }
+    } else if (op == "delete") {
+      ok = CredDeleteW(target, 1, 0);
+      if (!ok) error = Marshal.GetLastWin32Error();
+    } else {
+      IntPtr pointer;
+      ok = CredReadW(target, 1, 0, out pointer);
+      if (!ok) error = Marshal.GetLastWin32Error();
+      if (ok) {
+        try {
+          Credential value = (Credential)Marshal.PtrToStructure(pointer, typeof(Credential));
+          byte[] bytes = new byte[value.CredentialBlobSize];
+          Marshal.Copy(value.CredentialBlob, bytes, 0, bytes.Length);
+          Console.Write(Convert.ToBase64String(bytes));
+        } finally { CredFree(pointer); }
+      }
+    }
+    return ok ? 0 : error == 1168 ? 3 : 1;
+  }
+}`.replace(/\n\s*/gu, ' ');
+function createStore(platform, execFile) {
+    let failed = false;
+    let availability;
+    const kind = platform === 'darwin'
+        ? 'keychain'
+        : platform === 'win32'
+            ? 'credential-manager'
+            : 'secret-service';
+    const cacheKey = (name) => `${kind}\0${name}`;
+    async function run(file, args, input, missing) {
+        if (failed)
+            throw unavailable();
+        return new Promise((resolve, reject) => {
+            const fail = () => {
+                failed = true;
+                reject(unavailable());
+            };
+            try {
+                const child = execFile(file, args, {
+                    encoding: 'utf8',
+                    timeout: platform === 'win32' ? 60_000 : 10_000,
+                    maxBuffer: 64 * 1024,
+                    windowsHide: true,
+                }, (error, stdout, stderr) => {
+                    const code = error?.code;
+                    const notFound = missing &&
+                        (platform === 'darwin'
+                            ? code === 44 &&
+                                stderr.includes('The specified item could not be found in the keychain.')
+                            : platform === 'win32'
+                                ? code === 3
+                                : code === 1 && !stderr);
+                    if (notFound)
+                        resolve(undefined);
+                    else if (error)
+                        fail();
+                    else
+                        resolve(stdout);
+                });
+                child.stdin?.on('error', fail);
+                child.stdin?.end(input);
+            }
+            catch {
+                fail();
+            }
+        });
+    }
+    async function operation(op, name, secret = '') {
+        try {
+            if (failed || !/^[\w.:-]+$/u.test(name))
+                throw unavailable();
+            if (platform === 'darwin') {
+                // security's interactive parser accepts quoted arguments but not embedded line breaks.
+                const quote = (value) => `"${value.replace(/[\\"]/gu, '\\$&')}"`;
+                const command = op === 'set'
+                    ? 'add-generic-password -U'
+                    : op === 'get'
+                        ? 'find-generic-password -w'
+                        : 'delete-generic-password';
+                const input = `${command} -a ${quote(name)} -s ${quote(service)}${op === 'set' ? ` -w ${quote(secret)}` : ''}\n`;
+                if (/[\r\n\0]/u.test(secret) || Buffer.byteLength(input) >= 4096)
+                    throw unavailable();
+                const result = await run('security', ['-i'], input, op !== 'set');
+                return result?.replace(/\r?\n$/u, '');
+            }
+            if (platform === 'win32') {
+                const target = name.startsWith(`${service}:`) ? name : `${service}:${name}`;
+                const script = `$ErrorActionPreference='Stop'; $ProgressPreference='SilentlyContinue'; try { Add-Type -TypeDefinition '${windowsCode}'; $target=[Console]::In.ReadLine(); $secret=[Console]::In.ReadLine(); exit [MnemonikCredential]::Run('${op}', $target, $secret) } catch { exit 1 }`;
+                const output = await run('powershell', [
+                    '-NoProfile',
+                    '-NonInteractive',
+                    '-EncodedCommand',
+                    Buffer.from(script, 'utf16le').toString('base64'),
+                ], `${target}\n${Buffer.from(secret, 'utf8').toString('base64')}\n`, op !== 'set');
+                if (output === undefined)
+                    return undefined;
+                if (!/^[A-Za-z0-9+/=\r\n]*$/u.test(output))
+                    throw unavailable();
+                return Buffer.from(output.trim(), 'base64').toString('utf8');
+            }
+            return await run('secret-tool', [
+                op === 'set' ? 'store' : op === 'get' ? 'lookup' : 'clear',
+                ...(op === 'set' ? ['--label=Mnemonik CLI credential'] : []),
+                'service',
+                service,
+                'name',
+                name,
+            ], op === 'set' ? secret : '', op !== 'set');
+        }
+        catch {
+            failed = true;
+            throw unavailable();
+        }
+    }
+    return {
+        kind,
+        isAvailable() {
+            if (failed)
+                return Promise.resolve(false);
+            return (availability ??= (async () => {
+                const probe = `${service}:probe:${randomUUID()}`;
+                if (platform === 'darwin') {
+                    await run('security', ['-i'], 'default-keychain -d user\n', false);
+                    await operation('set', probe, 'availability-probe');
+                    await operation('delete', probe);
+                }
+                else
+                    await operation('get', probe);
+                return true;
+            })().catch(() => false));
+        },
+        async get(name) {
+            const key = cacheKey(name);
+            let read = cachedReads.get(key);
+            if (!read) {
+                read = operation('get', name);
+                cachedReads.set(key, read);
+            }
+            try {
+                return await read;
+            }
+            catch (error) {
+                if (cachedReads.get(key) === read)
+                    cachedReads.delete(key);
+                throw error;
+            }
+        },
+        async set(name, secret) {
+            await operation('set', name, secret);
+            cachedReads.set(cacheKey(name), Promise.resolve(secret));
+        },
+        async delete(name) {
+            await operation('delete', name);
+            cachedReads.set(cacheKey(name), Promise.resolve(undefined));
+        },
+    };
+}
+let current;
+/** CLI wiring opts in. Production availability/failure is shared for this process. */
+export function osSecretStore(options) {
+    const platform = options?.platform ?? process.platform;
+    if (!['darwin', 'win32', 'linux'].includes(platform))
+        return undefined;
+    if (options)
+        return createStore(platform, options.execFile ?? nodeExecFile);
+    return (current ??= createStore(platform, nodeExecFile));
+}
+//# sourceMappingURL=osSecretStore.js.map

package/dist/osSecretStore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"osSecretStore.js","sourceRoot":"","sources":["../src/osSecretStore.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,IAAI,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,MAAM,OAAO,GAAG,yBAAyB,CAAC;AAG1C,MAAM,WAAW,GAAG,GAAG,EAAE,CAAC,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;AAC5D,MAAM,WAAW,GAAG,IAAI,GAAG,EAAuC,CAAC;AAEnE,oFAAoF;AACpF,2EAA2E;AAC3E,MAAM,WAAW,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAuDlB,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;AAE3B,SAAS,WAAW,CAAC,QAAyB,EAAE,QAA6B;IAC3E,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,IAAI,YAA0C,CAAC;IAC/C,MAAM,IAAI,GACR,QAAQ,KAAK,QAAQ;QACnB,CAAC,CAAC,UAAU;QACZ,CAAC,CAAC,QAAQ,KAAK,OAAO;YACpB,CAAC,CAAC,oBAAoB;YACtB,CAAC,CAAC,gBAAgB,CAAC;IACzB,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,GAAG,IAAI,KAAK,IAAI,EAAE,CAAC;IAEtD,KAAK,UAAU,GAAG,CAAC,IAAY,EAAE,IAAc,EAAE,KAAa,EAAE,OAAgB;QAC9E,IAAI,MAAM;YAAE,MAAM,WAAW,EAAE,CAAC;QAChC,OAAO,IAAI,OAAO,CAAqB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACzD,MAAM,IAAI,GAAG,GAAG,EAAE;gBAChB,MAAM,GAAG,IAAI,CAAC;gBACd,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;YACxB,CAAC,CAAC;YACF,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,QAAQ,CACpB,IAAI,EACJ,IAAI,EACJ;oBACE,QAAQ,EAAE,MAAM;oBAChB,OAAO,EAAE,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;oBAC/C,SAAS,EAAE,EAAE,GAAG,IAAI;oBACpB,WAAW,EAAE,IAAI;iBAClB,EACD,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;oBACxB,MAAM,IAAI,GAAG,KAAK,EAAE,IAAI,CAAC;oBACzB,MAAM,QAAQ,GACZ,OAAO;wBACP,CAAC,QAAQ,KAAK,QAAQ;4BACpB,CAAC,CAAC,IAAI,KAAK,EAAE;gCACX,MAAM,CAAC,QAAQ,CAAC,wDAAwD,CAAC;4BAC3E,CAAC,CAAC,QAAQ,KAAK,OAAO;gCACpB,CAAC,CAAC,IAAI,KAAK,CAAC;gCACZ,CAAC,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;oBAC/B,IAAI,QAAQ;wBAAE,OAAO,CAAC,SAAS,CAAC,CAAC;yBAC5B,IAAI,KAAK;wBAAE,IAAI,EAAE,CAAC;;wBAClB,OAAO,CAAC,MAAM,CAAC,CAAC;gBACvB,CAAC,CACF,CAAC;gBACF,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;gBAC/B,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;YAC1B,CAAC;YAAC,MAAM,CAAC;gBACP,IAAI,EAAE,CAAC;YACT,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,UAAU,SAAS,CAAC,EAAa,EAAE,IAAY,EAAE,MAAM,GAAG,EAAE;QAC/D,IAAI,CAAC;YACH,IAAI,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,MAAM,WAAW,EAAE,CAAC;YAC7D,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBAC1B,uFAAuF;gBACvF,MAAM,KAAK,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC;gBACzE,MAAM,OAAO,GACX,EAAE,KAAK,KAAK;oBACV,CAAC,CAAC,yBAAyB;oBAC3B,CAAC,CAAC,EAAE,KAAK,KAAK;wBACZ,CAAC,CAAC,0BAA0B;wBAC5B,CAAC,CAAC,yBAAyB,CAAC;gBAClC,MAAM,KAAK,GAAG,GAAG,OAAO,OAAO,KAAK,CAAC,IAAI,CAAC,OAAO,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,KAAK,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC;gBACjH,IAAI,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,IAAI;oBAAE,MAAM,WAAW,EAAE,CAAC;gBACtF,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,UAAU,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,KAAK,KAAK,CAAC,CAAC;gBAClE,OAAO,MAAM,EAAE,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;YACxC,CAAC;YACD,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;gBACzB,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,OAAO,IAAI,IAAI,EAAE,CAAC;gBAC5E,MAAM,MAAM,GAAG,0GAA0G,WAAW,0GAA0G,EAAE,yCAAyC,CAAC;gBAC1R,MAAM,MAAM,GAAG,MAAM,GAAG,CACtB,YAAY,EACZ;oBACE,YAAY;oBACZ,iBAAiB;oBACjB,iBAAiB;oBACjB,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;iBAClD,EACD,GAAG,MAAM,KAAK,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAChE,EAAE,KAAK,KAAK,CACb,CAAC;gBACF,IAAI,MAAM,KAAK,SAAS;oBAAE,OAAO,SAAS,CAAC;gBAC3C,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,MAAM,CAAC;oBAAE,MAAM,WAAW,EAAE,CAAC;gBAChE,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAC/D,CAAC;YACD,OAAO,MAAM,GAAG,CACd,aAAa,EACb;gBACE,EAAE,KAAK,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO;gBAC1D,GAAG,CAAC,EAAE,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,iCAAiC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC5D,SAAS;gBACT,OAAO;gBACP,MAAM;gBACN,IAAI;aACL,EACD,EAAE,KAAK,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAC1B,EAAE,KAAK,KAAK,CACb,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,GAAG,IAAI,CAAC;YACd,MAAM,WAAW,EAAE,CAAC;QACtB,CAAC;IACH,CAAC;IAED,OAAO;QACL,IAAI;QACJ,WAAW;YACT,IAAI,MAAM;gBAAE,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC1C,OAAO,CAAC,YAAY,KAAK,CAAC,KAAK,IAAI,EAAE;gBACnC,MAAM,KAAK,GAAG,GAAG,OAAO,UAAU,UAAU,EAAE,EAAE,CAAC;gBACjD,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;oBAC1B,MAAM,GAAG,CAAC,UAAU,EAAE,CAAC,IAAI,CAAC,EAAE,4BAA4B,EAAE,KAAK,CAAC,CAAC;oBACnE,MAAM,SAAS,CAAC,KAAK,EAAE,KAAK,EAAE,oBAAoB,CAAC,CAAC;oBACpD,MAAM,SAAS,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;gBACnC,CAAC;;oBAAM,MAAM,SAAS,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;gBACrC,OAAO,IAAI,CAAC;YACd,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;QAC3B,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,IAAI;YACZ,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC3B,IAAI,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAChC,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,IAAI,GAAG,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;gBAC9B,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAC7B,CAAC;YACD,IAAI,CAAC;gBACH,OAAO,MAAM,IAAI,CAAC;YACpB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,IAAI;oBAAE,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAC3D,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM;YACpB,MAAM,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;YACrC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;QAC3D,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,IAAI;YACf,MAAM,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YAChC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;QAC9D,CAAC;KACF,CAAC;AACJ,CAAC;AAED,IAAI,OAAgC,CAAC;AACrC,sFAAsF;AACtF,MAAM,UAAU,aAAa,CAAC,OAAiB;IAC7C,MAAM,QAAQ,GAAG,OAAO,EAAE,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC;IACvD,IAAI,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,SAAS,CAAC;IACvE,IAAI,OAAO;QAAE,OAAO,WAAW,CAAC,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,YAAY,CAAC,CAAC;IAC5E,OAAO,CAAC,OAAO,KAAK,WAAW,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC;AAC3D,CAAC"}

package/dist/storage.d.ts

@@ -0,0 +1,52 @@
+import { type Stats } from 'node:fs';
+import { stateDirectory, type ExecFile, type Fault } from '@mnemonik/local-setup';
+export { stateDirectory };
+export type CredentialFailureReason = 'symlink_rejected' | 'wrong_owner' | 'weak_permissions' | 'not_regular_file' | 'path_outside_state' | 'acl_identity_unavailable';
+export declare class CredentialError extends Error {
+    readonly reason: CredentialFailureReason;
+    constructor(reason: CredentialFailureReason);
+}
+type Lstat = (path: string) => Promise<Stats>;
+export interface SecureFileOptions {
+    stateDir?: string;
+    platform?: NodeJS.Platform;
+    lstat?: Lstat;
+    uid?: number;
+    fault?: Fault;
+    execFile?: ExecFile;
+    username?: string;
+}
+export declare function credentialPaths(stateDir?: string, familyId?: string): {
+    root: string;
+    records: string;
+    secrets: string;
+    cliRecord: string;
+    cliSecret: string;
+    rootRecord: string;
+    rootSecret: string;
+    familyRecords: string;
+    familySecrets: string;
+    record: string;
+    secret: string;
+};
+export declare class SecureFiles {
+    readonly stateDir: string;
+    private readonly platform;
+    private readonly lstat;
+    private readonly uid;
+    private readonly fault?;
+    private readonly execFile?;
+    private readonly username?;
+    constructor(options?: SecureFileOptions);
+    private assertInsideState;
+    private components;
+    private inspect;
+    private makeDirectory;
+    ensureParent(path: string): Promise<void>;
+    read(path: string): Promise<Buffer | null>;
+    write(path: string, bytes: Buffer, point: string): Promise<void>;
+    remove(path: string): Promise<void>;
+    list(path: string): Promise<string[]>;
+    removeEmptyDirectories(paths: string[]): Promise<void>;
+}
+//# sourceMappingURL=storage.d.ts.map

package/dist/storage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.d.ts","sourceRoot":"","sources":["../src/storage.ts"],"names":[],"mappings":"AAEA,OAAO,EAAa,KAAK,KAAK,EAAE,MAAM,SAAS,CAAC;AAEhD,OAAO,EAEL,cAAc,EAEd,KAAK,QAAQ,EACb,KAAK,KAAK,EACX,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAE,cAAc,EAAE,CAAC;AAE1B,MAAM,MAAM,uBAAuB,GAC/B,kBAAkB,GAClB,aAAa,GACb,kBAAkB,GAClB,kBAAkB,GAClB,oBAAoB,GACpB,0BAA0B,CAAC;AAE/B,qBAAa,eAAgB,SAAQ,KAAK;aACZ,MAAM,EAAE,uBAAuB;IAA3D,YAA4B,MAAM,EAAE,uBAAuB,EAG1D;CACF;AAED,KAAK,KAAK,GAAG,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9C,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC3B,KAAK,CAAC,EAAE,KAAK,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,KAAK,CAAC;IACd,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAID,wBAAgB,eAAe,CAAC,QAAQ,SAAmB,EAAE,QAAQ,CAAC,EAAE,MAAM;;;;;;;;;;;;EAgB7E;AAKD,qBAAa,WAAW;IACtB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAkB;IAC3C,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAQ;IAC9B,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAqB;IACzC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAQ;IAC/B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAW;IACrC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAS;IAEnC,YAAY,OAAO,GAAE,iBAAsB,EAQ1C;IAED,OAAO,CAAC,iBAAiB;IAQzB,OAAO,CAAC,UAAU;YAaJ,OAAO;YAyBP,aAAa;IAcrB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAQ9C;IAEK,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAgB/C;IAEK,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAsBrE;IAEK,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAQxC;IAEK,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAS1C;IAEK,sBAAsB,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAS3D;CACF"}

package/dist/storage.js

@@ -0,0 +1,204 @@
+import { createHash } from 'node:crypto';
+import { lstat as nodeLstat, mkdir, open, readdir, rmdir, unlink } from 'node:fs/promises';
+import { constants } from 'node:fs';
+import { basename, dirname, isAbsolute, join, parse, relative, resolve, sep } from 'node:path';
+import { atomicWrite, stateDirectory, windowsCurrentUserAcl, } from '@mnemonik/local-setup';
+export { stateDirectory };
+export class CredentialError extends Error {
+    reason;
+    constructor(reason) {
+        super(reason);
+        this.reason = reason;
+        this.name = 'CredentialError';
+    }
+}
+const digest = (value) => createHash('sha256').update(value).digest('hex');
+export function credentialPaths(stateDir = stateDirectory(), familyId) {
+    const root = join(stateDir, 'credentials');
+    const familyName = familyId ? digest(familyId) : '';
+    return {
+        root,
+        records: join(root, 'records'),
+        secrets: join(root, 'secrets'),
+        cliRecord: join(root, 'records', 'cli.json'),
+        cliSecret: join(root, 'secrets', 'cli.json'),
+        rootRecord: join(root, 'records', 'root-binding.json'),
+        rootSecret: join(root, 'secrets', 'root-binding.key'),
+        familyRecords: join(root, 'records', 'families'),
+        familySecrets: join(root, 'secrets', 'families'),
+        record: join(root, 'records', 'families', `${familyName}.json`),
+        secret: join(root, 'secrets', 'families', `${familyName}.json`),
+    };
+}
+const codeIs = (error, code) => error.code === code;
+export class SecureFiles {
+    stateDir;
+    platform;
+    lstat;
+    uid;
+    fault;
+    execFile;
+    username;
+    constructor(options = {}) {
+        this.stateDir = resolve(options.stateDir ?? stateDirectory());
+        this.platform = options.platform ?? process.platform;
+        this.lstat = options.lstat ?? nodeLstat;
+        this.uid = options.uid ?? process.getuid?.();
+        this.fault = options.fault;
+        this.execFile = options.execFile;
+        this.username = options.username;
+    }
+    assertInsideState(path) {
+        const absolute = resolve(path);
+        const fromState = relative(this.stateDir, absolute);
+        if (fromState === '..' || fromState.startsWith(`..${sep}`) || isAbsolute(fromState))
+            throw new CredentialError('path_outside_state');
+        return absolute;
+    }
+    components(path) {
+        const absolute = resolve(path);
+        const root = parse(absolute).root;
+        const parts = absolute.slice(root.length).split(sep).filter(Boolean);
+        const result = [];
+        let current = root;
+        for (const part of parts) {
+            current = join(current, part);
+            result.push(current);
+        }
+        return result;
+    }
+    async inspect(path, expectFile, allowMissing) {
+        const absolute = this.assertInsideState(path);
+        for (const component of this.components(absolute)) {
+            let value;
+            try {
+                value = await this.lstat(component);
+            }
+            catch (error) {
+                if (allowMissing && codeIs(error, 'ENOENT'))
+                    continue;
+                throw error;
+            }
+            if (value.isSymbolicLink())
+                throw new CredentialError('symlink_rejected');
+            const protectedComponent = component === this.stateDir || component.startsWith(`${this.stateDir}${sep}`);
+            if (!protectedComponent || this.platform === 'win32')
+                continue;
+            if (this.uid !== undefined && value.uid !== this.uid)
+                throw new CredentialError('wrong_owner');
+            const final = component === absolute;
+            const allowed = final && expectFile ? 0o600 : 0o700;
+            if ((value.mode & 0o777 & ~allowed) !== 0)
+                throw new CredentialError('weak_permissions');
+            if (final && expectFile && !value.isFile())
+                throw new CredentialError('not_regular_file');
+            if (final && !expectFile && !value.isDirectory())
+                throw new CredentialError('not_regular_file');
+        }
+    }
+    async makeDirectory(path) {
+        try {
+            await mkdir(path, { mode: 0o700 });
+        }
+        catch (error) {
+            if (!codeIs(error, 'EEXIST'))
+                throw error;
+        }
+        if (this.platform === 'win32')
+            await windowsCurrentUserAcl(path, true, {
+                execFile: this.execFile,
+                username: this.username,
+            });
+        await this.inspect(path, false, false);
+    }
+    async ensureParent(path) {
+        const absolute = this.assertInsideState(path);
+        await this.inspect(absolute, true, true);
+        for (const component of this.components(dirname(absolute))) {
+            if (component === this.stateDir || component.startsWith(`${this.stateDir}${sep}`))
+                await this.makeDirectory(component);
+        }
+        await this.inspect(dirname(absolute), false, false);
+    }
+    async read(path) {
+        const absolute = this.assertInsideState(path);
+        try {
+            await this.inspect(absolute, true, false);
+            const noFollow = this.platform === 'win32' ? 0 : constants.O_NOFOLLOW;
+            const handle = await open(absolute, constants.O_RDONLY | noFollow);
+            try {
+                return await handle.readFile();
+            }
+            finally {
+                await handle.close();
+            }
+        }
+        catch (error) {
+            if (codeIs(error, 'ENOENT'))
+                return null;
+            if (codeIs(error, 'ELOOP'))
+                throw new CredentialError('symlink_rejected');
+            throw error;
+        }
+    }
+    async write(path, bytes, point) {
+        const absolute = this.assertInsideState(path);
+        await this.ensureParent(absolute);
+        await this.inspect(absolute, true, true);
+        try {
+            await atomicWrite(absolute, bytes, async (atomicPoint) => {
+                await this.fault?.(atomicPoint === 'mid_write' ? `before_${point}_rename` : atomicPoint);
+            });
+        }
+        catch (error) {
+            const prefix = `${basename(absolute)}.`;
+            for (const name of await this.list(dirname(absolute))) {
+                if (name.startsWith(prefix) && name.endsWith('.tmp'))
+                    await this.remove(join(dirname(absolute), name));
+            }
+            throw error;
+        }
+        if (this.platform === 'win32')
+            await windowsCurrentUserAcl(absolute, false, {
+                execFile: this.execFile,
+                username: this.username,
+            });
+        await this.inspect(absolute, true, false);
+    }
+    async remove(path) {
+        const absolute = this.assertInsideState(path);
+        try {
+            await this.inspect(absolute, true, false);
+            await unlink(absolute);
+        }
+        catch (error) {
+            if (!codeIs(error, 'ENOENT'))
+                throw error;
+        }
+    }
+    async list(path) {
+        const absolute = this.assertInsideState(path);
+        try {
+            await this.inspect(absolute, false, false);
+            return await readdir(absolute);
+        }
+        catch (error) {
+            if (codeIs(error, 'ENOENT'))
+                return [];
+            throw error;
+        }
+    }
+    async removeEmptyDirectories(paths) {
+        for (const path of paths) {
+            try {
+                await this.inspect(path, false, false);
+                await rmdir(path);
+            }
+            catch (error) {
+                if (!codeIs(error, 'ENOENT') && !codeIs(error, 'ENOTEMPTY'))
+                    throw error;
+            }
+        }
+    }
+}
+//# sourceMappingURL=storage.js.map

package/dist/storage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.js","sourceRoot":"","sources":["../src/storage.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC3F,OAAO,EAAE,SAAS,EAAc,MAAM,SAAS,CAAC;AAChD,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAC/F,OAAO,EACL,WAAW,EACX,cAAc,EACd,qBAAqB,GAGtB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAE,cAAc,EAAE,CAAC;AAU1B,MAAM,OAAO,eAAgB,SAAQ,KAAK;IACZ,MAAM;IAAlC,YAA4B,MAA+B;QACzD,KAAK,CAAC,MAAM,CAAC,CAAC;sBADY,MAAM;QAEhC,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF;AAaD,MAAM,MAAM,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAE3F,MAAM,UAAU,eAAe,CAAC,QAAQ,GAAG,cAAc,EAAE,EAAE,QAAiB;IAC5E,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;IAC3C,MAAM,UAAU,GAAG,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACpD,OAAO;QACL,IAAI;QACJ,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC;QAC9B,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC;QAC9B,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,UAAU,CAAC;QAC5C,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,UAAU,CAAC;QAC5C,UAAU,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,mBAAmB,CAAC;QACtD,UAAU,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,kBAAkB,CAAC;QACrD,aAAa,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,UAAU,CAAC;QAChD,aAAa,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,UAAU,CAAC;QAChD,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,UAAU,OAAO,CAAC;QAC/D,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,UAAU,OAAO,CAAC;KAChE,CAAC;AACJ,CAAC;AAED,MAAM,MAAM,GAAG,CAAC,KAAc,EAAE,IAAY,EAAW,EAAE,CACtD,KAA+B,CAAC,IAAI,KAAK,IAAI,CAAC;AAEjD,MAAM,OAAO,WAAW;IACb,QAAQ,CAAS;IACT,QAAQ,CAAkB;IAC1B,KAAK,CAAQ;IACb,GAAG,CAAqB;IACxB,KAAK,CAAS;IACd,QAAQ,CAAY;IACpB,QAAQ,CAAU;IAEnC,YAAY,OAAO,GAAsB,EAAE;QACzC,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,IAAI,cAAc,EAAE,CAAC,CAAC;QAC9D,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC;QACrD,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,SAAS,CAAC;QACxC,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;QAC7C,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QAC3B,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QACjC,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;IACnC,CAAC;IAEO,iBAAiB,CAAC,IAAY;QACpC,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC/B,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACpD,IAAI,SAAS,KAAK,IAAI,IAAI,SAAS,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,IAAI,UAAU,CAAC,SAAS,CAAC;YACjF,MAAM,IAAI,eAAe,CAAC,oBAAoB,CAAC,CAAC;QAClD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,UAAU,CAAC,IAAY;QAC7B,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC/B,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC;QAClC,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACrE,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,OAAO,GAAG,IAAI,CAAC;QACnB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAC9B,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACvB,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,KAAK,CAAC,OAAO,CAAC,IAAY,EAAE,UAAmB,EAAE,YAAqB;QAC5E,MAAM,QAAQ,GAAG,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;QAC9C,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAClD,IAAI,KAAY,CAAC;YACjB,IAAI,CAAC;gBACH,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YACtC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,YAAY,IAAI,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC;oBAAE,SAAS;gBACtD,MAAM,KAAK,CAAC;YACd,CAAC;YACD,IAAI,KAAK,CAAC,cAAc,EAAE;gBAAE,MAAM,IAAI,eAAe,CAAC,kBAAkB,CAAC,CAAC;YAC1E,MAAM,kBAAkB,GACtB,SAAS,KAAK,IAAI,CAAC,QAAQ,IAAI,SAAS,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,QAAQ,GAAG,GAAG,EAAE,CAAC,CAAC;YAChF,IAAI,CAAC,kBAAkB,IAAI,IAAI,CAAC,QAAQ,KAAK,OAAO;gBAAE,SAAS;YAC/D,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS,IAAI,KAAK,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG;gBAClD,MAAM,IAAI,eAAe,CAAC,aAAa,CAAC,CAAC;YAC3C,MAAM,KAAK,GAAG,SAAS,KAAK,QAAQ,CAAC;YACrC,MAAM,OAAO,GAAG,KAAK,IAAI,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;YACpD,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,KAAK,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC;gBAAE,MAAM,IAAI,eAAe,CAAC,kBAAkB,CAAC,CAAC;YACzF,IAAI,KAAK,IAAI,UAAU,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE;gBAAE,MAAM,IAAI,eAAe,CAAC,kBAAkB,CAAC,CAAC;YAC1F,IAAI,KAAK,IAAI,CAAC,UAAU,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE;gBAC9C,MAAM,IAAI,eAAe,CAAC,kBAAkB,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,aAAa,CAAC,IAAY;QACtC,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACrC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC;gBAAE,MAAM,KAAK,CAAC;QAC5C,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,KAAK,OAAO;YAC3B,MAAM,qBAAqB,CAAC,IAAI,EAAE,IAAI,EAAE;gBACtC,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;aACxB,CAAC,CAAC;QACL,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;IACzC,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,IAAY;QAC7B,MAAM,QAAQ,GAAG,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;QAC9C,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QACzC,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;YAC3D,IAAI,SAAS,KAAK,IAAI,CAAC,QAAQ,IAAI,SAAS,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,QAAQ,GAAG,GAAG,EAAE,CAAC;gBAC/E,MAAM,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;QACxC,CAAC;QACD,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;IACtD,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,IAAY;QACrB,MAAM,QAAQ,GAAG,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;QAC9C,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;YAC1C,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC;YACtE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,QAAQ,GAAG,QAAQ,CAAC,CAAC;YACnE,IAAI,CAAC;gBACH,OAAO,MAAM,MAAM,CAAC,QAAQ,EAAE,CAAC;YACjC,CAAC;oBAAS,CAAC;gBACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;YACvB,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC;gBAAE,OAAO,IAAI,CAAC;YACzC,IAAI,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC;gBAAE,MAAM,IAAI,eAAe,CAAC,kBAAkB,CAAC,CAAC;YAC1E,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,IAAY,EAAE,KAAa,EAAE,KAAa;QACpD,MAAM,QAAQ,GAAG,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;QAC9C,MAAM,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QAClC,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QACzC,IAAI,CAAC;YACH,MAAM,WAAW,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE;gBACvD,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,WAAW,KAAK,WAAW,CAAC,CAAC,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;YAC3F,CAAC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC;YACxC,KAAK,MAAM,IAAI,IAAI,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;gBACtD,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;oBAClD,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;YACrD,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,KAAK,OAAO;YAC3B,MAAM,qBAAqB,CAAC,QAAQ,EAAE,KAAK,EAAE;gBAC3C,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;aACxB,CAAC,CAAC;QACL,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IAC5C,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAY;QACvB,MAAM,QAAQ,GAAG,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;QAC9C,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;YAC1C,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;QACzB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC;gBAAE,MAAM,KAAK,CAAC;QAC5C,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,IAAY;QACrB,MAAM,QAAQ,GAAG,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;QAC9C,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;YAC3C,OAAO,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAC;QACjC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC;gBAAE,OAAO,EAAE,CAAC;YACvC,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,sBAAsB,CAAC,KAAe;QAC1C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;gBACvC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;YACpB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,WAAW,CAAC;oBAAE,MAAM,KAAK,CAAC;YAC3E,CAAC;QACH,CAAC;IACH,CAAC;CACF"}

package/package.json

@@ -0,0 +1,38 @@
+{
+  "name": "@mnemonik/credentials",
+  "version": "0.1.0",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/JayDeeCo-Limited/mnemonik.git",
+    "directory": "packages/credentials"
+  },
+  "type": "module",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "scripts": {
+    "build": "node ../../node_modules/@typescript/native/bin/tsc",
+    "typecheck": "node ../../node_modules/@typescript/native/bin/tsc --noEmit -p tsconfig.test.json",
+    "test": "vitest run --config vitest.config.ts tests/credentials.test.ts",
+    "prepublishOnly": "npm run build"
+  },
+  "engines": {
+    "node": ">=24"
+  },
+  "license": "SEE LICENSE IN LICENSE",
+  "dependencies": {
+    "@mnemonik/local-setup": "0.1.0"
+  },
+  "devDependencies": {
+    "@typescript/native": "npm:typescript@7.0.2",
+    "vitest": "^4.1.11"
+  }
+}