@push.rocks/smartsecret 1.0.2 → 1.2.0

package/dist_ts/smartsecret.kernel.protocol.js

@@ -0,0 +1,424 @@
+import * as plugins from './smartsecret.plugins.js';
+import { SmartSecretKernelStoreError, createSmartSecretKernelStoreError, } from './smartsecret.kernel.error.js';
+export const smartSecretKernelDefaultTimeoutMs = 5_000;
+export const smartSecretKernelMaximumTimeoutMs = 60_000;
+export const smartSecretKernelMaximumEntryBytes = 1_024;
+export const smartSecretKernelMaximumLegacyBytes = 16 * 1_024;
+export const smartSecretKernelMaximumMessageBytes = 32 * 1_024;
+export const smartSecretKernelLegacyService = 'global.idp.devidp';
+const serviceDomain = Buffer.from('@push.rocks/smartsecret/kernel-service/v1\u0000', 'utf8');
+const entryDomain = Buffer.from('@push.rocks/smartsecret/kernel-entry/v1\u0000', 'utf8');
+const mutexDomain = Buffer.from('@push.rocks/smartsecret/kernel-mutex/v1\u0000', 'utf8');
+const canonicalDigestPattern = /^[A-Za-z0-9_-]{43}$/;
+const legacyAccountPattern = /^v1:[a-f0-9]{64}$/;
+const domainErrorCodes = new Set([
+    'ENTRY_CORRUPT',
+    'INVALID_REQUEST',
+    'KERNEL_UNAVAILABLE',
+    'MUTATION_OUTCOME_UNKNOWN',
+    'ROOT_CONFLICT',
+    'SOURCE_CHANGED',
+]);
+const isSmartSecretKernelDomainErrorCode = (valueArg) => domainErrorCodes.has(valueArg);
+const requireExactObject = (valueArg, keysArg, inputArg) => {
+    const fail = () => {
+        throw createSmartSecretKernelStoreError(inputArg ? 'INVALID_ARGUMENT' : 'WORKER_INTEGRITY_FAILED');
+    };
+    try {
+        if (valueArg === null || typeof valueArg !== 'object' || Array.isArray(valueArg)) {
+            return fail();
+        }
+        const prototype = Object.getPrototypeOf(valueArg);
+        if (prototype !== Object.prototype && prototype !== null) {
+            return fail();
+        }
+        const ownKeys = Reflect.ownKeys(valueArg);
+        if (ownKeys.length !== keysArg.length
+            || ownKeys.some((keyArg) => typeof keyArg !== 'string' || !keysArg.includes(keyArg))
+            || keysArg.some((keyArg) => !ownKeys.includes(keyArg))) {
+            return fail();
+        }
+        const result = Object.create(null);
+        for (const key of keysArg) {
+            const descriptor = Object.getOwnPropertyDescriptor(valueArg, key);
+            if (!descriptor?.enumerable || !('value' in descriptor)) {
+                return fail();
+            }
+            result[key] = descriptor.value;
+        }
+        return result;
+    }
+    catch {
+        return fail();
+    }
+};
+const requireAllowedInputObject = (valueArg, allowedKeysArg) => {
+    const fail = () => {
+        throw createSmartSecretKernelStoreError('INVALID_ARGUMENT');
+    };
+    try {
+        if (valueArg === null || typeof valueArg !== 'object' || Array.isArray(valueArg)) {
+            return fail();
+        }
+        const prototype = Object.getPrototypeOf(valueArg);
+        if (prototype !== Object.prototype && prototype !== null) {
+            return fail();
+        }
+        const ownKeys = Reflect.ownKeys(valueArg);
+        if (ownKeys.some((keyArg) => typeof keyArg !== 'string' || !allowedKeysArg.includes(keyArg))) {
+            return fail();
+        }
+        const result = Object.create(null);
+        for (const key of ownKeys) {
+            if (typeof key !== 'string')
+                return fail();
+            const descriptor = Object.getOwnPropertyDescriptor(valueArg, key);
+            if (!descriptor?.enumerable || !('value' in descriptor)) {
+                return fail();
+            }
+            result[key] = descriptor.value;
+        }
+        return result;
+    }
+    catch (error) {
+        if (error instanceof SmartSecretKernelStoreError)
+            throw error;
+        return fail();
+    }
+};
+const requireValidScalarString = (valueArg) => {
+    if (typeof valueArg !== 'string') {
+        throw createSmartSecretKernelStoreError('INVALID_ARGUMENT');
+    }
+    for (let index = 0; index < valueArg.length; index++) {
+        const codeUnit = valueArg.charCodeAt(index);
+        if (codeUnit >= 0xd800 && codeUnit <= 0xdbff) {
+            const next = valueArg.charCodeAt(index + 1);
+            if (index + 1 >= valueArg.length || next < 0xdc00 || next > 0xdfff) {
+                throw createSmartSecretKernelStoreError('INVALID_ARGUMENT');
+            }
+            index++;
+        }
+        else if (codeUnit >= 0xdc00 && codeUnit <= 0xdfff) {
+            throw createSmartSecretKernelStoreError('INVALID_ARGUMENT');
+        }
+    }
+    const byteLength = Buffer.byteLength(valueArg, 'utf8');
+    if (byteLength < 1 || byteLength > 1_024) {
+        throw createSmartSecretKernelStoreError('INVALID_ARGUMENT');
+    }
+    return valueArg;
+};
+const lengthPrefix = (lengthArg) => {
+    const prefix = Buffer.alloc(4);
+    prefix.writeUInt32BE(lengthArg, 0);
+    return prefix;
+};
+const digestDescription = (prefixArg, partsArg) => {
+    const hash = plugins.crypto.createHash('sha256');
+    for (const part of partsArg)
+        hash.update(part);
+    return `${prefixArg}${hash.digest('base64url')}`;
+};
+export const normalizeSmartSecretKernelService = (valueArg) => requireValidScalarString(valueArg);
+export const normalizeSmartSecretKernelStoreOptions = (valueArg) => {
+    const value = requireExactObject(valueArg, ['service'], true);
+    return { service: normalizeSmartSecretKernelService(value.service) };
+};
+export const normalizeSmartSecretKernelAccount = (valueArg) => requireValidScalarString(valueArg);
+export const normalizeDevIdpV1LegacyAccount = (valueArg) => {
+    const account = requireValidScalarString(valueArg);
+    if (!legacyAccountPattern.test(account)) {
+        throw createSmartSecretKernelStoreError('INVALID_ARGUMENT');
+    }
+    return account;
+};
+export const deriveSmartSecretKernelServiceDescription = (serviceArg) => {
+    const service = Buffer.from(normalizeSmartSecretKernelService(serviceArg), 'utf8');
+    return digestDescription('smartsecret-service:v1:', [
+        serviceDomain,
+        lengthPrefix(service.byteLength),
+        service,
+    ]);
+};
+export const deriveSmartSecretKernelEntryDescription = (serviceArg, accountArg) => {
+    const service = Buffer.from(normalizeSmartSecretKernelService(serviceArg), 'utf8');
+    const account = Buffer.from(normalizeSmartSecretKernelAccount(accountArg), 'utf8');
+    return digestDescription('smartsecret-entry:v1:', [
+        entryDomain,
+        lengthPrefix(service.byteLength),
+        service,
+        lengthPrefix(account.byteLength),
+        account,
+    ]);
+};
+export const deriveSmartSecretKernelMutexNamespace = (serviceArg) => {
+    const service = Buffer.from(normalizeSmartSecretKernelService(serviceArg), 'utf8');
+    return digestDescription('smartsecret-kernel:v1:', [
+        mutexDomain,
+        lengthPrefix(service.byteLength),
+        service,
+    ]);
+};
+export const deriveDevIdpV1LegacyDescription = (accountArg) => `keyring:${normalizeDevIdpV1LegacyAccount(accountArg)}@${smartSecretKernelLegacyService}`;
+export const normalizeSmartSecretKernelValue = (valueArg) => {
+    try {
+        if (!(valueArg instanceof Uint8Array)
+            || valueArg.byteLength > smartSecretKernelMaximumEntryBytes) {
+            throw createSmartSecretKernelStoreError('INVALID_ARGUMENT');
+        }
+        return new Uint8Array(valueArg);
+    }
+    catch (error) {
+        if (error instanceof SmartSecretKernelStoreError)
+            throw error;
+        throw createSmartSecretKernelStoreError('INVALID_ARGUMENT');
+    }
+};
+export const encodeCanonicalBase64Url = (valueArg) => {
+    const value = Buffer.from(valueArg);
+    try {
+        return value.toString('base64url');
+    }
+    finally {
+        value.fill(0);
+    }
+};
+const decodeCanonicalBase64Url = (valueArg, maximumBytesArg, minimumBytesArg = 0) => {
+    const maximumEncodedLength = Math.ceil(maximumBytesArg * 4 / 3);
+    if (typeof valueArg !== 'string'
+        || valueArg.length > maximumEncodedLength
+        || valueArg.length % 4 === 1
+        || !/^[A-Za-z0-9_-]*$/.test(valueArg)) {
+        throw createSmartSecretKernelStoreError('WORKER_INTEGRITY_FAILED');
+    }
+    const decoded = Buffer.from(valueArg, 'base64url');
+    if (decoded.byteLength < minimumBytesArg
+        || decoded.byteLength > maximumBytesArg
+        || decoded.toString('base64url') !== valueArg) {
+        decoded.fill(0);
+        throw createSmartSecretKernelStoreError('WORKER_INTEGRITY_FAILED');
+    }
+    const result = new Uint8Array(decoded);
+    decoded.fill(0);
+    return result;
+};
+export const normalizeSmartSecretKernelOperationOptions = (valueArg) => {
+    if (valueArg === undefined)
+        return { timeoutMs: smartSecretKernelDefaultTimeoutMs };
+    const options = requireAllowedInputObject(valueArg, ['timeoutMs', 'signal']);
+    const timeoutMs = Object.hasOwn(options, 'timeoutMs')
+        ? options.timeoutMs
+        : smartSecretKernelDefaultTimeoutMs;
+    if (typeof timeoutMs !== 'number'
+        || !Number.isSafeInteger(timeoutMs)
+        || timeoutMs < 1
+        || timeoutMs > smartSecretKernelMaximumTimeoutMs) {
+        throw createSmartSecretKernelStoreError('INVALID_ARGUMENT');
+    }
+    if (!Object.hasOwn(options, 'signal'))
+        return { timeoutMs };
+    let signal;
+    try {
+        if (!(options.signal instanceof AbortSignal)
+            || Object.getPrototypeOf(options.signal) !== AbortSignal.prototype) {
+            throw createSmartSecretKernelStoreError('INVALID_ARGUMENT');
+        }
+        signal = options.signal;
+        void signal.aborted;
+    }
+    catch (error) {
+        if (error instanceof SmartSecretKernelStoreError)
+            throw error;
+        throw createSmartSecretKernelStoreError('INVALID_ARGUMENT');
+    }
+    return { timeoutMs, signal };
+};
+const parseDomainError = (valueArg) => {
+    if (valueArg.outcome !== 'domainError')
+        return undefined;
+    const result = requireExactObject(valueArg, ['outcome', 'code'], false);
+    if (typeof result.code !== 'string'
+        || !isSmartSecretKernelDomainErrorCode(result.code)) {
+        throw createSmartSecretKernelStoreError('WORKER_INTEGRITY_FAILED');
+    }
+    return {
+        outcome: 'domainError',
+        code: result.code,
+    };
+};
+const requireResultObject = (valueArg) => {
+    try {
+        if (valueArg === null || typeof valueArg !== 'object' || Array.isArray(valueArg)) {
+            throw createSmartSecretKernelStoreError('WORKER_INTEGRITY_FAILED');
+        }
+        const prototype = Object.getPrototypeOf(valueArg);
+        if (prototype !== Object.prototype && prototype !== null) {
+            throw createSmartSecretKernelStoreError('WORKER_INTEGRITY_FAILED');
+        }
+        const descriptor = Object.getOwnPropertyDescriptor(valueArg, 'outcome');
+        if (!descriptor?.enumerable || !('value' in descriptor)) {
+            throw createSmartSecretKernelStoreError('WORKER_INTEGRITY_FAILED');
+        }
+        const result = Object.create(null);
+        for (const key of Reflect.ownKeys(valueArg)) {
+            if (typeof key !== 'string') {
+                throw createSmartSecretKernelStoreError('WORKER_INTEGRITY_FAILED');
+            }
+            const property = Object.getOwnPropertyDescriptor(valueArg, key);
+            if (!property?.enumerable || !('value' in property)) {
+                throw createSmartSecretKernelStoreError('WORKER_INTEGRITY_FAILED');
+            }
+            result[key] = property.value;
+        }
+        return result;
+    }
+    catch (error) {
+        if (error instanceof SmartSecretKernelStoreError)
+            throw error;
+        throw createSmartSecretKernelStoreError('WORKER_INTEGRITY_FAILED');
+    }
+};
+const requirePositiveSerial = (valueArg) => {
+    if (typeof valueArg !== 'number'
+        || !Number.isSafeInteger(valueArg)
+        || valueArg < 1
+        || valueArg > 2_147_483_647) {
+        throw createSmartSecretKernelStoreError('WORKER_INTEGRITY_FAILED');
+    }
+    return valueArg;
+};
+export const parseSmartSecretKernelGetResult = (valueArg) => {
+    const value = requireResultObject(valueArg);
+    const domainError = parseDomainError(value);
+    if (domainError)
+        return { kind: 'domainError', domainError };
+    if (value.outcome !== 'success' || typeof value.found !== 'boolean') {
+        throw createSmartSecretKernelStoreError('WORKER_INTEGRITY_FAILED');
+    }
+    if (!value.found) {
+        requireExactObject(value, ['outcome', 'found'], false);
+        return { kind: 'success', found: false };
+    }
+    const result = requireExactObject(value, ['outcome', 'found', 'value'], false);
+    return {
+        kind: 'success',
+        found: true,
+        value: decodeCanonicalBase64Url(result.value, smartSecretKernelMaximumEntryBytes),
+    };
+};
+export const parseSmartSecretKernelSetResult = (valueArg) => {
+    const value = requireResultObject(valueArg);
+    const domainError = parseDomainError(value);
+    if (domainError)
+        return { kind: 'domainError', domainError };
+    const result = requireExactObject(value, ['outcome'], false);
+    if (result.outcome !== 'success') {
+        throw createSmartSecretKernelStoreError('WORKER_INTEGRITY_FAILED');
+    }
+    return { kind: 'success' };
+};
+export const parseSmartSecretKernelDeleteResult = (valueArg) => {
+    const value = requireResultObject(valueArg);
+    const domainError = parseDomainError(value);
+    if (domainError)
+        return { kind: 'domainError', domainError };
+    const result = requireExactObject(value, ['outcome', 'deleted'], false);
+    if (result.outcome !== 'success' || typeof result.deleted !== 'boolean') {
+        throw createSmartSecretKernelStoreError('WORKER_INTEGRITY_FAILED');
+    }
+    return { kind: 'success', deleted: result.deleted };
+};
+export const parseSmartSecretKernelLegacyReadResult = (valueArg, accountArg) => {
+    const account = normalizeDevIdpV1LegacyAccount(accountArg);
+    const value = requireResultObject(valueArg);
+    const domainError = parseDomainError(value);
+    if (domainError)
+        return { kind: 'domainError', domainError };
+    if (value.outcome !== 'success' || typeof value.found !== 'boolean') {
+        throw createSmartSecretKernelStoreError('WORKER_INTEGRITY_FAILED');
+    }
+    if (!value.found) {
+        requireExactObject(value, ['outcome', 'found'], false);
+        return { kind: 'success', found: false };
+    }
+    const result = requireExactObject(value, [
+        'outcome',
+        'found',
+        'value',
+        'sourceSerial',
+        'sessionRootSerial',
+        'persistentRootSerial',
+        'foundInSession',
+        'foundInPersistent',
+        'byteLength',
+        'sha256',
+    ], false);
+    const decoded = decodeCanonicalBase64Url(result.value, smartSecretKernelMaximumLegacyBytes, 1);
+    let actualDigest;
+    let claimedDigest;
+    let didSucceed = false;
+    try {
+        if (typeof result.byteLength !== 'number'
+            || !Number.isSafeInteger(result.byteLength)
+            || result.byteLength !== decoded.byteLength
+            || typeof result.foundInSession !== 'boolean'
+            || typeof result.foundInPersistent !== 'boolean'
+            || (!result.foundInSession && !result.foundInPersistent)
+            || typeof result.sha256 !== 'string'
+            || !canonicalDigestPattern.test(result.sha256)) {
+            throw createSmartSecretKernelStoreError('WORKER_INTEGRITY_FAILED');
+        }
+        const sourceSerial = requirePositiveSerial(result.sourceSerial);
+        const persistentRootSerial = requirePositiveSerial(result.persistentRootSerial);
+        const sessionRootSerial = result.sessionRootSerial === null
+            ? null
+            : requirePositiveSerial(result.sessionRootSerial);
+        if (result.foundInSession && sessionRootSerial === null) {
+            throw createSmartSecretKernelStoreError('WORKER_INTEGRITY_FAILED');
+        }
+        actualDigest = plugins.crypto.createHash('sha256').update(decoded).digest();
+        claimedDigest = Buffer.from(result.sha256, 'base64url');
+        if (claimedDigest.byteLength !== 32
+            || claimedDigest.toString('base64url') !== result.sha256
+            || !plugins.crypto.timingSafeEqual(actualDigest, claimedDigest)) {
+            throw createSmartSecretKernelStoreError('WORKER_INTEGRITY_FAILED');
+        }
+        const parsed = {
+            kind: 'success',
+            found: true,
+            value: decoded,
+            receiptParams: {
+                account,
+                sourceSerial,
+                sessionRootSerial,
+                persistentRootSerial,
+                foundInSession: result.foundInSession,
+                foundInPersistent: result.foundInPersistent,
+                byteLength: result.byteLength,
+                sha256: result.sha256,
+            },
+        };
+        didSucceed = true;
+        return parsed;
+    }
+    finally {
+        actualDigest?.fill(0);
+        claimedDigest?.fill(0);
+        if (!didSucceed)
+            decoded.fill(0);
+    }
+};
+export const parseSmartSecretKernelLegacyDeleteResult = (valueArg) => {
+    const value = requireResultObject(valueArg);
+    const domainError = parseDomainError(value);
+    if (domainError)
+        return { kind: 'domainError', domainError };
+    const result = requireExactObject(value, ['outcome', 'status'], false);
+    if (result.outcome !== 'success'
+        || (result.status !== 'deleted' && result.status !== 'alreadyAbsent')) {
+        throw createSmartSecretKernelStoreError('WORKER_INTEGRITY_FAILED');
+    }
+    return { kind: 'success', status: result.status };
+};
+//# sourceMappingURL=data:application/json;base64,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

package/dist_ts/smartsecret.kernelstore.d.ts

@@ -0,0 +1,49 @@
+import { type ISmartSecretKernelOperationOptions, type ISmartSecretKernelStoreOptions } from './smartsecret.kernel.protocol.js';
+export type { ISmartSecretKernelOperationOptions, ISmartSecretKernelStoreOptions, } from './smartsecret.kernel.protocol.js';
+declare const legacyReceiptBrand: unique symbol;
+export type TDevIdpV1LegacyReceipt = {
+    readonly [legacyReceiptBrand]: true;
+};
+export interface IDevIdpV1LegacyRead {
+    readonly value: Uint8Array;
+    readonly receipt: TDevIdpV1LegacyReceipt;
+}
+/**
+ * Strict Linux kernel-keyring storage for small same-UID process secrets.
+ *
+ * This class deliberately has no filesystem, Secret Service, or executable
+ * discovery fallback. Use create() so the Rust worker is ready before access.
+ */
+export declare class SmartSecretKernelStore {
+    readonly service: string;
+    private readonly mutex;
+    private readonly bridge;
+    private readonly generation;
+    private readonly receiptRecords;
+    private lifecycleState;
+    private poisoned;
+    private operationTail;
+    private closePromise;
+    private terminationPromise;
+    private constructor();
+    static create(optionsArg: ISmartSecretKernelStoreOptions): Promise<SmartSecretKernelStore>;
+    getEntry(accountArg: string, optionsArg?: ISmartSecretKernelOperationOptions): Promise<Uint8Array | null>;
+    setEntry(accountArg: string, valueArg: Uint8Array, optionsArg?: ISmartSecretKernelOperationOptions): Promise<void>;
+    deleteEntry(accountArg: string, optionsArg?: ISmartSecretKernelOperationOptions): Promise<boolean>;
+    readDevIdpV1Legacy(accountArg: string, optionsArg?: ISmartSecretKernelOperationOptions): Promise<IDevIdpV1LegacyRead | null>;
+    deleteDevIdpV1Legacy(receiptArg: TDevIdpV1LegacyReceipt, optionsArg?: ISmartSecretKernelOperationOptions): Promise<'deleted' | 'alreadyAbsent'>;
+    close(): Promise<void>;
+    private assertCanReserve;
+    private reserveOperation;
+    private requireLegacyService;
+    private requireReceiptRecord;
+    private remainingMilliseconds;
+    private createBridgeRequestOptions;
+    private acquireKernelLease;
+    private withKernelLease;
+    private dispatchRead;
+    private dispatchMutation;
+    private throwDomainError;
+    private terminateBridgeConfirmed;
+    private poisonAndTerminate;
+}