@push.rocks/smartsecret 1.0.2 → 1.2.0

package/dist_ts/smartsecret.kernelstore.js

@@ -0,0 +1,442 @@
+import * as plugins from './smartsecret.plugins.js';
+import { SmartSecretKernelStoreError, createSmartSecretKernelStoreError, } from './smartsecret.kernel.error.js';
+import { deriveSmartSecretKernelEntryDescription, deriveSmartSecretKernelMutexNamespace, deriveSmartSecretKernelServiceDescription, encodeCanonicalBase64Url, normalizeDevIdpV1LegacyAccount, normalizeSmartSecretKernelAccount, normalizeSmartSecretKernelOperationOptions, normalizeSmartSecretKernelStoreOptions, normalizeSmartSecretKernelValue, parseSmartSecretKernelDeleteResult, parseSmartSecretKernelGetResult, parseSmartSecretKernelLegacyDeleteResult, parseSmartSecretKernelLegacyReadResult, parseSmartSecretKernelSetResult, smartSecretKernelDefaultTimeoutMs, smartSecretKernelLegacyService, smartSecretKernelMaximumMessageBytes, } from './smartsecret.kernel.protocol.js';
+const legacyReceiptBrand = Symbol('SmartSecretDevIdpV1LegacyReceipt');
+const kernelStoreConstructionToken = Symbol('SmartSecretKernelStoreConstruction');
+const createDeferred = () => {
+    let resolve = () => { };
+    let reject = () => { };
+    const promise = new Promise((resolveArg, rejectArg) => {
+        resolve = resolveArg;
+        reject = rejectArg;
+    });
+    return { promise, resolve, reject };
+};
+const createOperationContext = (optionsArg, mutationArg) => ({
+    deadline: performance.now() + optionsArg.timeoutMs,
+    ...(optionsArg.signal === undefined ? {} : { signal: optionsArg.signal }),
+    mutation: mutationArg,
+    dispatched: false,
+});
+const isSupportedRuntime = () => {
+    const versionParts = process.versions.node.split('.');
+    return (versionParts[0] === '25'
+        && process.platform === 'linux'
+        && process.arch === 'x64');
+};
+/**
+ * Strict Linux kernel-keyring storage for small same-UID process secrets.
+ *
+ * This class deliberately has no filesystem, Secret Service, or executable
+ * discovery fallback. Use create() so the Rust worker is ready before access.
+ */
+export class SmartSecretKernelStore {
+    constructor(constructionTokenArg, serviceArg, mutexArg, bridgeArg) {
+        this.generation = Symbol('SmartSecretKernelStoreGeneration');
+        this.receiptRecords = new WeakMap();
+        this.lifecycleState = 'ready';
+        this.poisoned = false;
+        this.operationTail = Promise.resolve();
+        if (constructionTokenArg !== kernelStoreConstructionToken) {
+            throw createSmartSecretKernelStoreError('INVALID_ARGUMENT');
+        }
+        this.service = serviceArg;
+        this.mutex = mutexArg;
+        this.bridge = bridgeArg;
+    }
+    static async create(optionsArg) {
+        const options = normalizeSmartSecretKernelStoreOptions(optionsArg);
+        if (!isSupportedRuntime()) {
+            throw createSmartSecretKernelStoreError('UNSUPPORTED_RUNTIME');
+        }
+        const serviceDescription = deriveSmartSecretKernelServiceDescription(options.service);
+        let mutex;
+        try {
+            mutex = new plugins.smartipc.NamedMutex(deriveSmartSecretKernelMutexNamespace(options.service));
+        }
+        catch {
+            throw createSmartSecretKernelStoreError('MUTEX_FAILED');
+        }
+        const packageRoot = plugins.path.resolve(plugins.path.dirname(plugins.url.fileURLToPath(import.meta.url)), '..');
+        const binaryPath = plugins.path.join(packageRoot, 'dist_rust', 'smartsecret-kernel_linux_amd64');
+        const bridge = new plugins.smartrust.RustBridge({
+            binaryName: 'smartsecret-kernel',
+            binaryPath,
+            localPaths: [],
+            searchSystemPath: false,
+            cliArgs: ['--service-ring-description', serviceDescription],
+            requestTimeoutMs: smartSecretKernelDefaultTimeoutMs,
+            readyTimeoutMs: smartSecretKernelDefaultTimeoutMs,
+            maxPayloadSize: smartSecretKernelMaximumMessageBytes,
+        });
+        let spawned = false;
+        try {
+            spawned = await bridge.spawn();
+        }
+        catch {
+            spawned = false;
+        }
+        if (!spawned) {
+            let cleanupConfirmed = true;
+            try {
+                await bridge.terminate({ gracePeriodMs: 0 });
+            }
+            catch {
+                cleanupConfirmed = false;
+            }
+            throw createSmartSecretKernelStoreError(cleanupConfirmed ? 'WORKER_UNAVAILABLE' : 'WORKER_INTEGRITY_FAILED');
+        }
+        return new SmartSecretKernelStore(kernelStoreConstructionToken, options.service, mutex, bridge);
+    }
+    getEntry(accountArg, optionsArg) {
+        const account = normalizeSmartSecretKernelAccount(accountArg);
+        const options = normalizeSmartSecretKernelOperationOptions(optionsArg);
+        const context = createOperationContext(options, false);
+        const description = deriveSmartSecretKernelEntryDescription(this.service, account);
+        return this.reserveOperation(context, () => this.withKernelLease(context, async () => {
+            const parsed = await this.dispatchRead(context, async (requestOptionsArg) => parseSmartSecretKernelGetResult(await this.bridge.sendCommand('getEntry', { description }, requestOptionsArg)));
+            if (parsed.kind === 'domainError') {
+                return this.throwDomainError(parsed.domainError, context);
+            }
+            return parsed.found ? parsed.value : null;
+        }));
+    }
+    setEntry(accountArg, valueArg, optionsArg) {
+        const account = normalizeSmartSecretKernelAccount(accountArg);
+        const options = normalizeSmartSecretKernelOperationOptions(optionsArg);
+        const context = createOperationContext(options, true);
+        const description = deriveSmartSecretKernelEntryDescription(this.service, account);
+        const value = normalizeSmartSecretKernelValue(valueArg);
+        let encodedValue;
+        try {
+            encodedValue = encodeCanonicalBase64Url(value);
+        }
+        finally {
+            value.fill(0);
+        }
+        return this.reserveOperation(context, () => this.withKernelLease(context, async () => {
+            const parsed = await this.dispatchMutation(context, async (requestOptionsArg) => parseSmartSecretKernelSetResult(await this.bridge.sendCommand('setEntry', { description, value: encodedValue }, requestOptionsArg)));
+            if (parsed.kind === 'domainError') {
+                return this.throwDomainError(parsed.domainError, context);
+            }
+        }));
+    }
+    deleteEntry(accountArg, optionsArg) {
+        const account = normalizeSmartSecretKernelAccount(accountArg);
+        const options = normalizeSmartSecretKernelOperationOptions(optionsArg);
+        const context = createOperationContext(options, true);
+        const description = deriveSmartSecretKernelEntryDescription(this.service, account);
+        return this.reserveOperation(context, () => this.withKernelLease(context, async () => {
+            const parsed = await this.dispatchMutation(context, async (requestOptionsArg) => parseSmartSecretKernelDeleteResult(await this.bridge.sendCommand('deleteEntry', { description }, requestOptionsArg)));
+            if (parsed.kind === 'domainError') {
+                return this.throwDomainError(parsed.domainError, context);
+            }
+            return parsed.deleted;
+        }));
+    }
+    readDevIdpV1Legacy(accountArg, optionsArg) {
+        this.requireLegacyService();
+        const account = normalizeDevIdpV1LegacyAccount(accountArg);
+        const options = normalizeSmartSecretKernelOperationOptions(optionsArg);
+        const context = createOperationContext(options, false);
+        return this.reserveOperation(context, () => this.withKernelLease(context, async () => {
+            const parsed = await this.dispatchRead(context, async (requestOptionsArg) => parseSmartSecretKernelLegacyReadResult(await this.bridge.sendCommand('readDevIdpV1Legacy', { account }, requestOptionsArg), account));
+            if (parsed.kind === 'domainError') {
+                return this.throwDomainError(parsed.domainError, context);
+            }
+            if (!parsed.found)
+                return null;
+            const receipt = Object.freeze({
+                [legacyReceiptBrand]: true,
+            });
+            this.receiptRecords.set(receipt, {
+                generation: this.generation,
+                params: Object.freeze(parsed.receiptParams),
+                state: 'available',
+            });
+            return Object.freeze({ value: parsed.value, receipt });
+        }));
+    }
+    deleteDevIdpV1Legacy(receiptArg, optionsArg) {
+        this.requireLegacyService();
+        const options = normalizeSmartSecretKernelOperationOptions(optionsArg);
+        const record = this.requireReceiptRecord(receiptArg);
+        if (record.state === 'deleting') {
+            if (record.deletionPromise)
+                return record.deletionPromise;
+            return Promise.reject(createSmartSecretKernelStoreError('RECEIPT_INVALID'));
+        }
+        if (record.state === 'consumed') {
+            return Promise.reject(createSmartSecretKernelStoreError('RECEIPT_INVALID'));
+        }
+        this.assertCanReserve();
+        const context = createOperationContext(options, true);
+        record.state = 'deleting';
+        const operationPromise = this.reserveOperation(context, () => this.withKernelLease(context, async () => {
+            const parsed = await this.dispatchMutation(context, async (requestOptionsArg) => parseSmartSecretKernelLegacyDeleteResult(await this.bridge.sendCommand('deleteDevIdpV1Legacy', record.params, requestOptionsArg)));
+            if (parsed.kind === 'domainError') {
+                return this.throwDomainError(parsed.domainError, context);
+            }
+            return parsed.status;
+        }));
+        const trackedPromise = operationPromise.then((statusArg) => {
+            record.state = 'consumed';
+            return statusArg;
+        }, (errorArg) => {
+            const publicError = errorArg instanceof SmartSecretKernelStoreError
+                ? errorArg
+                : createSmartSecretKernelStoreError('WORKER_INTEGRITY_FAILED');
+            if (!context.dispatched
+                && (publicError.code === 'OPERATION_ABORTED'
+                    || publicError.code === 'OPERATION_TIMEOUT')) {
+                record.state = 'available';
+                record.deletionPromise = undefined;
+            }
+            else {
+                record.state = 'consumed';
+            }
+            throw publicError;
+        });
+        record.deletionPromise = trackedPromise;
+        return trackedPromise;
+    }
+    close() {
+        if (this.closePromise)
+            return this.closePromise;
+        this.lifecycleState = 'closing';
+        const operationTail = this.operationTail;
+        this.closePromise = (async () => {
+            await operationTail;
+            const terminated = await this.terminateBridgeConfirmed();
+            this.lifecycleState = 'closed';
+            if (!terminated) {
+                this.poisoned = true;
+                throw createSmartSecretKernelStoreError('WORKER_INTEGRITY_FAILED');
+            }
+        })();
+        return this.closePromise;
+    }
+    assertCanReserve() {
+        if (this.poisoned) {
+            throw createSmartSecretKernelStoreError('STORE_POISONED');
+        }
+        if (this.lifecycleState !== 'ready') {
+            throw createSmartSecretKernelStoreError('STORE_CLOSED');
+        }
+    }
+    reserveOperation(contextArg, operationArg) {
+        this.assertCanReserve();
+        const predecessor = this.operationTail;
+        const tailGate = createDeferred();
+        const publicResult = createDeferred();
+        this.operationTail = tailGate.promise;
+        let queuedFailure;
+        let queueTimer;
+        let abortListener;
+        const failWhileQueued = (codeArg) => {
+            if (queuedFailure)
+                return;
+            queuedFailure = createSmartSecretKernelStoreError(codeArg);
+            publicResult.reject(queuedFailure);
+        };
+        const removeQueueWatchers = () => {
+            if (queueTimer) {
+                clearTimeout(queueTimer);
+                queueTimer = undefined;
+            }
+            if (abortListener) {
+                contextArg.signal?.removeEventListener('abort', abortListener);
+                abortListener = undefined;
+            }
+        };
+        if (contextArg.signal?.aborted) {
+            failWhileQueued('OPERATION_ABORTED');
+        }
+        else {
+            abortListener = () => failWhileQueued('OPERATION_ABORTED');
+            contextArg.signal?.addEventListener('abort', abortListener, { once: true });
+            queueTimer = setTimeout(() => failWhileQueued('OPERATION_TIMEOUT'), Math.max(0, contextArg.deadline - performance.now()));
+        }
+        const execution = predecessor.then(async () => {
+            removeQueueWatchers();
+            if (queuedFailure) {
+                tailGate.resolve();
+                return;
+            }
+            try {
+                if (this.poisoned) {
+                    throw createSmartSecretKernelStoreError('STORE_POISONED');
+                }
+                publicResult.resolve(await operationArg());
+            }
+            catch (errorArg) {
+                if (errorArg instanceof SmartSecretKernelStoreError) {
+                    publicResult.reject(errorArg);
+                }
+                else {
+                    await this.poisonAndTerminate();
+                    publicResult.reject(createSmartSecretKernelStoreError(contextArg.mutation && contextArg.dispatched
+                        ? 'MUTATION_OUTCOME_UNKNOWN'
+                        : 'WORKER_INTEGRITY_FAILED'));
+                }
+            }
+            finally {
+                tailGate.resolve();
+            }
+        });
+        void execution.catch(async () => {
+            removeQueueWatchers();
+            await this.poisonAndTerminate();
+            publicResult.reject(createSmartSecretKernelStoreError(contextArg.mutation && contextArg.dispatched
+                ? 'MUTATION_OUTCOME_UNKNOWN'
+                : 'WORKER_INTEGRITY_FAILED'));
+            tailGate.resolve();
+        });
+        return publicResult.promise;
+    }
+    requireLegacyService() {
+        if (this.service !== smartSecretKernelLegacyService) {
+            throw createSmartSecretKernelStoreError('INVALID_ARGUMENT');
+        }
+    }
+    requireReceiptRecord(receiptArg) {
+        if (receiptArg === null || typeof receiptArg !== 'object') {
+            throw createSmartSecretKernelStoreError('RECEIPT_INVALID');
+        }
+        const record = this.receiptRecords.get(receiptArg);
+        if (!record || record.generation !== this.generation) {
+            throw createSmartSecretKernelStoreError('RECEIPT_INVALID');
+        }
+        return record;
+    }
+    remainingMilliseconds(contextArg) {
+        if (contextArg.signal?.aborted) {
+            throw createSmartSecretKernelStoreError('OPERATION_ABORTED');
+        }
+        const remaining = contextArg.deadline - performance.now();
+        if (remaining <= 0) {
+            throw createSmartSecretKernelStoreError('OPERATION_TIMEOUT');
+        }
+        return Math.max(1, Math.ceil(remaining));
+    }
+    createBridgeRequestOptions(contextArg) {
+        const timeoutMs = this.remainingMilliseconds(contextArg);
+        return {
+            timeoutMs,
+            ...(contextArg.signal === undefined ? {} : { signal: contextArg.signal }),
+        };
+    }
+    async acquireKernelLease(contextArg) {
+        const timeoutMs = this.remainingMilliseconds(contextArg);
+        try {
+            return await this.mutex.acquire({
+                timeoutMs,
+                ...(contextArg.signal === undefined ? {} : { signal: contextArg.signal }),
+            });
+        }
+        catch (errorArg) {
+            if (errorArg instanceof plugins.smartipc.NamedMutexError) {
+                if (errorArg.code === 'ABORTED') {
+                    throw createSmartSecretKernelStoreError('OPERATION_ABORTED');
+                }
+                if (errorArg.code === 'TIMEOUT') {
+                    throw createSmartSecretKernelStoreError('OPERATION_TIMEOUT');
+                }
+            }
+            throw createSmartSecretKernelStoreError('MUTEX_FAILED');
+        }
+    }
+    async withKernelLease(contextArg, operationArg) {
+        const lease = await this.acquireKernelLease(contextArg);
+        let outcome;
+        try {
+            outcome = { succeeded: true, value: await operationArg() };
+        }
+        catch (errorArg) {
+            if (errorArg instanceof SmartSecretKernelStoreError) {
+                outcome = { succeeded: false, error: errorArg };
+            }
+            else {
+                await this.poisonAndTerminate();
+                outcome = {
+                    succeeded: false,
+                    error: createSmartSecretKernelStoreError(contextArg.mutation && contextArg.dispatched
+                        ? 'MUTATION_OUTCOME_UNKNOWN'
+                        : 'WORKER_INTEGRITY_FAILED'),
+                };
+            }
+        }
+        try {
+            await lease.release();
+        }
+        catch {
+            await this.poisonAndTerminate();
+            throw createSmartSecretKernelStoreError(contextArg.mutation ? 'MUTATION_OUTCOME_UNKNOWN' : 'MUTEX_FAILED');
+        }
+        if (!outcome.succeeded)
+            throw outcome.error;
+        return outcome.value;
+    }
+    async dispatchRead(contextArg, dispatchArg) {
+        const requestOptions = this.createBridgeRequestOptions(contextArg);
+        contextArg.dispatched = true;
+        try {
+            return await dispatchArg(requestOptions);
+        }
+        catch {
+            await this.poisonAndTerminate();
+            throw createSmartSecretKernelStoreError('WORKER_INTEGRITY_FAILED');
+        }
+    }
+    async dispatchMutation(contextArg, dispatchArg) {
+        const requestOptions = this.createBridgeRequestOptions(contextArg);
+        contextArg.dispatched = true;
+        try {
+            return await dispatchArg(requestOptions);
+        }
+        catch {
+            await this.poisonAndTerminate();
+            throw createSmartSecretKernelStoreError('MUTATION_OUTCOME_UNKNOWN');
+        }
+    }
+    async throwDomainError(domainErrorArg, contextArg) {
+        if (domainErrorArg.code === 'KERNEL_UNAVAILABLE') {
+            throw createSmartSecretKernelStoreError('KERNEL_UNAVAILABLE');
+        }
+        if (domainErrorArg.code === 'ROOT_CONFLICT') {
+            throw createSmartSecretKernelStoreError('ROOT_CONFLICT');
+        }
+        if (domainErrorArg.code === 'ENTRY_CORRUPT') {
+            throw createSmartSecretKernelStoreError('ENTRY_CORRUPT');
+        }
+        if (domainErrorArg.code === 'SOURCE_CHANGED') {
+            throw createSmartSecretKernelStoreError('SOURCE_CHANGED');
+        }
+        if (domainErrorArg.code === 'MUTATION_OUTCOME_UNKNOWN'
+            && contextArg.mutation) {
+            await this.poisonAndTerminate();
+            throw createSmartSecretKernelStoreError('MUTATION_OUTCOME_UNKNOWN');
+        }
+        await this.poisonAndTerminate();
+        throw createSmartSecretKernelStoreError('WORKER_INTEGRITY_FAILED');
+    }
+    terminateBridgeConfirmed() {
+        if (this.terminationPromise)
+            return this.terminationPromise;
+        let termination;
+        try {
+            termination = this.bridge.terminate({ gracePeriodMs: 0 });
+        }
+        catch {
+            this.terminationPromise = Promise.resolve(false);
+            return this.terminationPromise;
+        }
+        this.terminationPromise = termination.then(() => true, () => false);
+        return this.terminationPromise;
+    }
+    async poisonAndTerminate() {
+        this.poisoned = true;
+        await this.terminateBridgeConfirmed();
+    }
+}
+//# sourceMappingURL=data:application/json;base64,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

package/dist_ts/smartsecret.keyring.d.ts

@@ -0,0 +1,81 @@
+import { type ISmartSecretEnvelopeV1 } from './smartsecret.keyring.protocol.js';
+export type TSmartSecretKekStatus = 'active' | 'retired' | 'revoked';
+export interface ISmartSecretKekDescriptor {
+    version: number;
+    status: TSmartSecretKekStatus;
+    credentialPath?: string;
+    expectedFingerprint?: `sha256:${string}`;
+    createdAt: number;
+    activatedAt: number;
+    retiredAt?: number;
+    revokedAt?: number;
+    escrowReference?: string;
+    escrowedAt?: number;
+    recoveryTestedAt?: number;
+}
+export interface ISmartSecretKeyringConfig {
+    keyringId: string;
+    keys: readonly ISmartSecretKekDescriptor[];
+}
+export interface ISmartSecretKekInspection {
+    version: number;
+    status: TSmartSecretKekStatus;
+    expectedFingerprint?: `sha256:${string}`;
+    createdAt: number;
+    activatedAt: number;
+    retiredAt?: number;
+    revokedAt?: number;
+    escrowReference?: string;
+    escrowedAt?: number;
+    recoveryTestedAt?: number;
+}
+export interface ISmartSecretKeyringInspection {
+    keyringId: string;
+    activeVersion: number;
+    keys: ISmartSecretKekInspection[];
+}
+export interface IEncryptSmartSecretEnvelopeOptions {
+    envelopeId: string;
+    plaintext: Uint8Array;
+    context: Uint8Array;
+    createdAt?: number;
+}
+export interface IDecryptSmartSecretEnvelopeOptions {
+    envelope: unknown;
+    expectedEnvelopeId: string;
+    context: Uint8Array;
+}
+export interface IRewrapSmartSecretEnvelopeOptions {
+    envelope: unknown;
+    expectedEnvelopeId: string;
+    context: Uint8Array;
+    targetVersion?: number;
+}
+export interface ISmartSecretRecoverySelfTestResult {
+    keyringId: string;
+    version: number;
+    status: 'active' | 'retired';
+    fingerprint: `sha256:${string}`;
+    testedAt: number;
+}
+/**
+ * A Linux-only, immutable KEK snapshot for strict DEK/KEK envelopes.
+ * Envelope persistence and compare-and-swap coordination remain consumer responsibilities.
+ */
+export declare class SmartSecretKeyring {
+    private readonly keyringId;
+    private readonly descriptors;
+    private readonly activeVersion;
+    private readonly loadedKeys;
+    private destroyed;
+    private constructor();
+    static create(configArg: ISmartSecretKeyringConfig): Promise<SmartSecretKeyring>;
+    private requireAlive;
+    private requireEnvelopeKey;
+    inspect(): ISmartSecretKeyringInspection;
+    destroy(): void;
+    encryptEnvelope(optionsArg: IEncryptSmartSecretEnvelopeOptions): Promise<ISmartSecretEnvelopeV1>;
+    decryptEnvelope(optionsArg: IDecryptSmartSecretEnvelopeOptions): Promise<Uint8Array>;
+    rewrapEnvelope(optionsArg: IRewrapSmartSecretEnvelopeOptions): Promise<ISmartSecretEnvelopeV1>;
+    recoverySelfTest(versionArg: number): Promise<ISmartSecretRecoverySelfTestResult>;
+}

package/dist_ts/smartsecret.keyring.error.d.ts

@@ -0,0 +1,17 @@
+export type TSmartSecretKeyringErrorCode = 'AUTHENTICATION_FAILED' | 'CONFIG_INVALID' | 'CONTEXT_MISMATCH' | 'CRYPTO_OPERATION_FAILED' | 'CREDENTIAL_FILE_INVALID' | 'DESTROYED' | 'ENVELOPE_ID_MISMATCH' | 'ENVELOPE_INVALID' | 'KEK_FINGERPRINT_MISMATCH' | 'KEK_UNAVAILABLE' | 'INVALID_ARGUMENT' | 'PLATFORM_UNSUPPORTED' | 'SIZE_LIMIT_EXCEEDED' | 'TARGET_VERSION_MISMATCH';
+export interface ISmartSecretKeyringErrorJson {
+    name: 'SmartSecretKeyringError';
+    code: TSmartSecretKeyringErrorCode;
+    message: string;
+}
+declare const inspectSymbol: unique symbol;
+/** A code-only error that intentionally retains no operation values or causes. */
+export declare class SmartSecretKeyringError extends Error {
+    readonly code: TSmartSecretKeyringErrorCode;
+    readonly cause: undefined;
+    constructor(codeArg: TSmartSecretKeyringErrorCode);
+    toJSON(): ISmartSecretKeyringErrorJson;
+    [inspectSymbol](): ISmartSecretKeyringErrorJson;
+}
+export declare const createSmartSecretKeyringError: (codeArg: TSmartSecretKeyringErrorCode) => SmartSecretKeyringError;
+export {};

package/dist_ts/smartsecret.keyring.error.js

@@ -0,0 +1,46 @@
+const inspectSymbol = Symbol.for('nodejs.util.inspect.custom');
+const errorCodes = new Set([
+    'AUTHENTICATION_FAILED',
+    'CONFIG_INVALID',
+    'CONTEXT_MISMATCH',
+    'CRYPTO_OPERATION_FAILED',
+    'CREDENTIAL_FILE_INVALID',
+    'DESTROYED',
+    'ENVELOPE_ID_MISMATCH',
+    'ENVELOPE_INVALID',
+    'KEK_FINGERPRINT_MISMATCH',
+    'KEK_UNAVAILABLE',
+    'INVALID_ARGUMENT',
+    'PLATFORM_UNSUPPORTED',
+    'SIZE_LIMIT_EXCEEDED',
+    'TARGET_VERSION_MISMATCH',
+]);
+/** A code-only error that intentionally retains no operation values or causes. */
+export class SmartSecretKeyringError extends Error {
+    constructor(codeArg) {
+        const code = errorCodes.has(codeArg) ? codeArg : 'INVALID_ARGUMENT';
+        const message = `SmartSecret keyring operation failed (${code}).`;
+        super(message);
+        this.name = 'SmartSecretKeyringError';
+        this.code = code;
+        this.stack = `${this.name}: ${message}`;
+        Object.defineProperty(this, 'cause', {
+            configurable: false,
+            enumerable: false,
+            value: undefined,
+            writable: false,
+        });
+    }
+    toJSON() {
+        return {
+            name: 'SmartSecretKeyringError',
+            code: this.code,
+            message: this.message,
+        };
+    }
+    [inspectSymbol]() {
+        return this.toJSON();
+    }
+}
+export const createSmartSecretKeyringError = (codeArg) => new SmartSecretKeyringError(codeArg);
+//# sourceMappingURL=data:application/json;base64,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