@push.rocks/smartrust 2.2.0 → 2.4.0

package/ts/interfaces/config.ts

@@ -61,6 +61,15 @@ export interface IRustBridgeOptions extends IBinaryLocatorOptions {
    * closes the caller's source descriptors.
    */
   inheritedFileDescriptors?: readonly number[];
+  /**
+   * Opt in to one owned, one-shot binary pipe for a sensitive request in each
+   * spawned stdio generation. The pipe is appended after caller-owned inherited
+   * descriptors, so their child descriptor numbers remain unchanged.
+   */
+  sensitiveByteChannel?: {
+    /** Maximum raw sensitive payload size accepted by the bridge. */
+    maxPayloadSize: number;
+  };
   /** Timeout for individual requests in ms (default: 30000) */
   requestTimeoutMs?: number;
   /** Timeout for the ready event during spawn in ms (default: 10000) */

package/ts/interfaces/ipc.ts

@@ -5,6 +5,20 @@ export interface IManagementRequest {
   id: string;
   method: string;
   params: Record<string, any>;
+  /** Value-free metadata for an associated one-shot binary frame. */
+  sensitive?: IManagementSensitivePayload;
+}
+
+export interface IManagementSensitivePayload {
+  protocol: 'smartrust-sensitive-v1';
+  fileDescriptor: number;
+  byteLength: number;
+}
+
+export interface IManagementSensitiveAck {
+  protocol: 'smartrust-sensitive-v1';
+  consumed: true;
+  byteLength: number;
 }
 
 /**
@@ -16,6 +30,10 @@ export interface IManagementResponse {
   result?: any;
   error?: string;
   errorCode?: string;
+  /** Optional structured details of a failure, for example per-field validation errors. */
+  errorData?: unknown;
+  /** Required after the receiver consumed the exact associated binary frame. */
+  sensitiveAck?: IManagementSensitiveAck;
 }
 
 /**

package/ts/interfaces/transport.ts

@@ -35,6 +35,12 @@ export interface IRustTransport extends plugins.events.EventEmitter {
   /** Write a string to the transport. Handles backpressure. */
   write(data: string): Promise<void>;
 
+  /** Child descriptor for the optional one-shot sensitive byte pipe. */
+  readonly sensitiveFileDescriptor?: number | null;
+
+  /** Write and close one correlated binary frame. Available only in stdio mode. */
+  writeSensitiveFrame?(requestId: string, data: Uint8Array<ArrayBuffer>): Promise<void>;
+
   /** Disconnect the transport. For stdio: kills the process. For socket: closes the connection. */
   disconnect(): void;
 

package/ts/plugins.ts

@@ -5,8 +5,9 @@ import * as childProcess from 'child_process';
 import * as events from 'events';
 import * as url from 'url';
 import * as net from 'net';
+import * as stream from 'stream';
 
-export { path, fs, childProcess, events, url, net };
+export { path, fs, childProcess, events, url, net, stream };
 
 // @push.rocks scope
 import * as smartpath from '@push.rocks/smartpath';