@poe-platform/safe-js 0.1.714 → 0.1.715

package/dist/auth-store/create-secret-store.d.ts

@@ -1,2 +1,4 @@
-import type { CreateSecretStoreInput, CreateSecretStoreResult } from "./types.js";
+import type { CreateSecretStoreInput, CreateSecretStoreResult, StoreBackend } from "./types.js";
 export declare function createSecretStore(input: CreateSecretStoreInput): CreateSecretStoreResult;
+/** Select and validate a backend without constructing a store or accessing credentials. */
+export declare function resolveSecretStoreBackend(input: CreateSecretStoreInput): StoreBackend;

package/dist/auth-store/encrypted-file-store.d.ts

@@ -1,9 +1,11 @@
 import type { SecretStore } from "./types.js";
+import { type SecretStoreLockOptions } from "./transaction-lock.js";
 export interface MachineIdentity {
     hostname: string;
     username: string;
 }
 export interface EncryptedFileStoreFileSystem {
+    readdir?(path: string): Promise<string[]>;
     readFile(path: string, encoding: BufferEncoding): Promise<string>;
     writeFile(path: string, data: string | NodeJS.ArrayBufferView, options?: {
         encoding?: BufferEncoding;
@@ -29,6 +31,8 @@ export interface EncryptedFileStoreInput {
     getMachineIdentity?: () => MachineIdentity | Promise<MachineIdentity>;
     getHomeDirectory?: () => string;
     getRandomBytes?: (size: number) => Buffer;
+    /** Fail closed instead of treating malformed or unauthenticated documents as absent. */
+    throwOnInvalidDocument?: boolean;
 }
 export declare class EncryptedFileStore implements SecretStore {
     private readonly fs;
@@ -38,8 +42,10 @@ export declare class EncryptedFileStore implements SecretStore {
     private readonly getMachineIdentity;
     private readonly getRandomBytes;
     private keyPromise;
+    private readonly throwOnInvalidDocument;
     constructor(input: EncryptedFileStoreInput);
     get(): Promise<string | null>;
+    withLock<T>(operation: () => Promise<T>, options?: SecretStoreLockOptions): Promise<T>;
     set(value: string): Promise<void>;
     delete(): Promise<void>;
     private assertCredentialPathHasNoSymbolicLinks;

package/dist/auth-store/index.d.ts

@@ -1,6 +1,7 @@
-export { createSecretStore } from "./create-secret-store.js";
+export { createSecretStore, resolveSecretStoreBackend } from "./create-secret-store.js";
 export { EncryptedFileStore } from "./encrypted-file-store.js";
 export { KeychainStore } from "./keychain-store.js";
+export type { SecretStoreLockOptions, SecretStoreLockFileSystem } from "./transaction-lock.js";
 export { key, MigratingSecretStore } from "./provider-store.js";
 export type { SecretStore, StoreBackend, CreateSecretStoreInput, CreateSecretStoreResult } from "./types.js";
 export type { MachineIdentity, EncryptedFileStoreInput, EncryptedFileStoreFileSystem } from "./encrypted-file-store.js";

package/dist/auth-store/keychain-store.d.ts

@@ -1,4 +1,5 @@
 import type { SecretStore } from "./types.js";
+import { type SecretStoreLockFileSystem, type SecretStoreLockOptions } from "./transaction-lock.js";
 export interface KeychainCommandResult {
     stdout: string;
     stderr: string;
@@ -12,13 +13,20 @@ export interface KeychainStoreInput {
     runCommand?: KeychainCommandRunner;
     service: string;
     account: string;
+    lock?: {
+        fs?: SecretStoreLockFileSystem;
+        directory?: string;
+    };
 }
 export declare class KeychainStore implements SecretStore {
     private readonly runCommand;
     private readonly service;
     private readonly account;
+    private readonly lockFs;
+    private readonly lockDirectory;
     constructor(input: KeychainStoreInput);
     get(): Promise<string | null>;
+    withLock<T>(operation: () => Promise<T>, options?: SecretStoreLockOptions): Promise<T>;
     set(value: string): Promise<void>;
     delete(): Promise<void>;
     private executeSecurityCommand;

package/dist/auth-store/transaction-lock.d.ts

@@ -0,0 +1,24 @@
+export interface SecretStoreLockOptions {
+    signal?: AbortSignal;
+    timeoutMs?: number;
+}
+export interface SecretStoreLockFileSystem {
+    mkdir(path: string, options?: {
+        recursive?: boolean;
+        mode?: number;
+    }): Promise<unknown>;
+    readdir(path: string): Promise<string[]>;
+    readFile(path: string, encoding: BufferEncoding): Promise<string>;
+    writeFile(path: string, value: string, options: {
+        encoding: BufferEncoding;
+        flag: string;
+        mode: number;
+    }): Promise<void>;
+    rename(from: string, to: string): Promise<void>;
+    unlink(path: string): Promise<void>;
+    lstat(path: string): Promise<{
+        isSymbolicLink(): boolean;
+    }>;
+}
+/** Filesystem bakery lock: unique claims allow dead-owner cleanup without deleting a replacement owner's lock. */
+export declare function withSecretStoreFileLock<T>(fs: SecretStoreLockFileSystem, lockDirectory: string, operation: () => Promise<T>, options?: SecretStoreLockOptions): Promise<T>;

package/dist/auth-store/types.d.ts

@@ -1,11 +1,13 @@
 import type { EncryptedFileStoreInput } from "./encrypted-file-store.js";
 import type { KeychainStoreInput } from "./keychain-store.js";
+import type { SecretStoreLockOptions } from "./transaction-lock.js";
 export interface SecretStore {
     get(options?: {
         readOnly?: boolean;
     }): Promise<string | null>;
     set(value: string): Promise<void>;
     delete(): Promise<void>;
+    withLock?<T>(operation: () => Promise<T>, options?: SecretStoreLockOptions): Promise<T>;
 }
 export type StoreBackend = "file" | "keychain";
 export interface CreateSecretStoreInput {