@push.rocks/smartsecret 1.1.0 → 1.2.1

package/.smartconfig.json

@@ -1,4 +1,11 @@
 {
+  "@git.zone/tsrust": {
+    "targets": [
+      "linux_amd64"
+    ],
+    "static": true,
+    "remapLocalPaths": true
+  },
   "@git.zone/cli": {
     "schemaVersion": 2,
     "projectType": "npm",
@@ -6,7 +13,7 @@
       "githost": "code.foss.global",
       "gitscope": "push.rocks",
       "gitrepo": "smartsecret",
-      "description": "OS keychain-based secret storage with encrypted-file fallback for Node.js.",
+      "description": "OS-backed secret storage plus strict Linux kernel-keyring and envelope APIs for Node.js.",
       "npmPackagename": "@push.rocks/smartsecret",
       "license": "MIT"
     },

package/dist_ts/00_commitinfo_data.js

@@ -3,7 +3,7 @@
  */
 export const commitinfo = {
     name: '@push.rocks/smartsecret',
-    version: '1.1.0',
-    description: 'OS keychain-based secret storage with encrypted-file fallback for Node.js.'
+    version: '1.2.1',
+    description: 'OS-backed secret storage plus strict Linux kernel-keyring and envelope APIs for Node.js.'
 };
-//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiMDBfY29tbWl0aW5mb19kYXRhLmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vdHMvMDBfY29tbWl0aW5mb19kYXRhLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiJBQUFBOztHQUVHO0FBQ0gsTUFBTSxDQUFDLE1BQU0sVUFBVSxHQUFHO0lBQ3hCLElBQUksRUFBRSx5QkFBeUI7SUFDL0IsT0FBTyxFQUFFLE9BQU87SUFDaEIsV0FBVyxFQUFFLDRFQUE0RTtDQUMxRixDQUFBIn0=
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiMDBfY29tbWl0aW5mb19kYXRhLmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vdHMvMDBfY29tbWl0aW5mb19kYXRhLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiJBQUFBOztHQUVHO0FBQ0gsTUFBTSxDQUFDLE1BQU0sVUFBVSxHQUFHO0lBQ3hCLElBQUksRUFBRSx5QkFBeUI7SUFDL0IsT0FBTyxFQUFFLE9BQU87SUFDaEIsV0FBVyxFQUFFLDBGQUEwRjtDQUN4RyxDQUFBIn0=

package/dist_ts/index.d.ts

@@ -7,3 +7,6 @@ export * from './smartsecret.keyring.js';
 export { SmartSecretKeyringError } from './smartsecret.keyring.error.js';
 export type { ISmartSecretKeyringErrorJson, TSmartSecretKeyringErrorCode, } from './smartsecret.keyring.error.js';
 export type { ISmartSecretEnvelopeV1, TSmartSecretKeyringProfile, } from './smartsecret.keyring.protocol.js';
+export * from './smartsecret.kernelstore.js';
+export { SmartSecretKernelStoreError } from './smartsecret.kernel.error.js';
+export type { ISmartSecretKernelStoreErrorJson, TSmartSecretKernelStoreErrorCode, } from './smartsecret.kernel.error.js';

package/dist_ts/index.js

@@ -4,4 +4,6 @@ export { LinuxSecretServiceBackend } from './smartsecret.backends.linux.js';
 export { FileEncryptedBackend } from './smartsecret.backends.file.js';
 export * from './smartsecret.keyring.js';
 export { SmartSecretKeyringError } from './smartsecret.keyring.error.js';
-//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi90cy9pbmRleC50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiQUFBQSxjQUFjLHNDQUFzQyxDQUFDO0FBRXJELE9BQU8sRUFBRSxvQkFBb0IsRUFBRSxNQUFNLGlDQUFpQyxDQUFDO0FBQ3ZFLE9BQU8sRUFBRSx5QkFBeUIsRUFBRSxNQUFNLGlDQUFpQyxDQUFDO0FBQzVFLE9BQU8sRUFBRSxvQkFBb0IsRUFBRSxNQUFNLGdDQUFnQyxDQUFDO0FBQ3RFLGNBQWMsMEJBQTBCLENBQUM7QUFDekMsT0FBTyxFQUFFLHVCQUF1QixFQUFFLE1BQU0sZ0NBQWdDLENBQUMifQ==
+export * from './smartsecret.kernelstore.js';
+export { SmartSecretKernelStoreError } from './smartsecret.kernel.error.js';
+//# sourceMappingURL=data:application/json;base64,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

package/dist_ts/smartsecret.kernel.error.d.ts

@@ -0,0 +1,17 @@
+export type TSmartSecretKernelStoreErrorCode = 'ENTRY_CORRUPT' | 'INVALID_ARGUMENT' | 'KERNEL_UNAVAILABLE' | 'MUTATION_OUTCOME_UNKNOWN' | 'MUTEX_FAILED' | 'OPERATION_ABORTED' | 'OPERATION_TIMEOUT' | 'RECEIPT_INVALID' | 'ROOT_CONFLICT' | 'SOURCE_CHANGED' | 'STORE_CLOSED' | 'STORE_POISONED' | 'UNSUPPORTED_RUNTIME' | 'WORKER_INTEGRITY_FAILED' | 'WORKER_UNAVAILABLE';
+export interface ISmartSecretKernelStoreErrorJson {
+    name: 'SmartSecretKernelStoreError';
+    code: TSmartSecretKernelStoreErrorCode;
+    message: string;
+}
+declare const inspectSymbol: unique symbol;
+/** A code-only error that intentionally retains no operation values or causes. */
+export declare class SmartSecretKernelStoreError extends Error {
+    readonly code: TSmartSecretKernelStoreErrorCode;
+    readonly cause: undefined;
+    constructor(codeArg: TSmartSecretKernelStoreErrorCode);
+    toJSON(): ISmartSecretKernelStoreErrorJson;
+    [inspectSymbol](): ISmartSecretKernelStoreErrorJson;
+}
+export declare const createSmartSecretKernelStoreError: (codeArg: TSmartSecretKernelStoreErrorCode) => SmartSecretKernelStoreError;
+export {};

package/dist_ts/smartsecret.kernel.error.js

@@ -0,0 +1,47 @@
+const inspectSymbol = Symbol.for('nodejs.util.inspect.custom');
+const errorCodes = new Set([
+    'ENTRY_CORRUPT',
+    'INVALID_ARGUMENT',
+    'KERNEL_UNAVAILABLE',
+    'MUTATION_OUTCOME_UNKNOWN',
+    'MUTEX_FAILED',
+    'OPERATION_ABORTED',
+    'OPERATION_TIMEOUT',
+    'RECEIPT_INVALID',
+    'ROOT_CONFLICT',
+    'SOURCE_CHANGED',
+    'STORE_CLOSED',
+    'STORE_POISONED',
+    'UNSUPPORTED_RUNTIME',
+    'WORKER_INTEGRITY_FAILED',
+    'WORKER_UNAVAILABLE',
+]);
+/** A code-only error that intentionally retains no operation values or causes. */
+export class SmartSecretKernelStoreError extends Error {
+    constructor(codeArg) {
+        const code = errorCodes.has(codeArg) ? codeArg : 'INVALID_ARGUMENT';
+        const message = `SmartSecret kernel store operation failed (${code}).`;
+        super(message);
+        this.name = 'SmartSecretKernelStoreError';
+        this.code = code;
+        this.stack = `${this.name}: ${message}`;
+        Object.defineProperty(this, 'cause', {
+            configurable: false,
+            enumerable: false,
+            value: undefined,
+            writable: false,
+        });
+    }
+    toJSON() {
+        return {
+            name: 'SmartSecretKernelStoreError',
+            code: this.code,
+            message: this.message,
+        };
+    }
+    [inspectSymbol]() {
+        return this.toJSON();
+    }
+}
+export const createSmartSecretKernelStoreError = (codeArg) => new SmartSecretKernelStoreError(codeArg);
+//# sourceMappingURL=data:application/json;base64,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

package/dist_ts/smartsecret.kernel.protocol.d.ts

@@ -0,0 +1,159 @@
+export declare const smartSecretKernelDefaultTimeoutMs = 5000;
+export declare const smartSecretKernelMaximumTimeoutMs = 60000;
+export declare const smartSecretKernelMaximumEntryBytes = 1024;
+export declare const smartSecretKernelMaximumLegacyBytes: number;
+export declare const smartSecretKernelMaximumMessageBytes: number;
+export declare const smartSecretKernelLegacyService = "global.idp.devidp";
+export type TSmartSecretKernelDomainErrorCode = 'ENTRY_CORRUPT' | 'INVALID_REQUEST' | 'KERNEL_UNAVAILABLE' | 'MUTATION_OUTCOME_UNKNOWN' | 'ROOT_CONFLICT' | 'SOURCE_CHANGED';
+export interface ISmartSecretKernelDomainErrorResult {
+    outcome: 'domainError';
+    code: TSmartSecretKernelDomainErrorCode;
+}
+export interface ISmartSecretKernelOperationOptions {
+    timeoutMs?: number;
+    signal?: AbortSignal;
+}
+export interface ISmartSecretKernelStoreOptions {
+    service: string;
+}
+export interface INormalizedSmartSecretKernelOperationOptions {
+    timeoutMs: number;
+    signal?: AbortSignal;
+}
+export interface ISmartSecretKernelGetSuccessAbsent {
+    outcome: 'success';
+    found: false;
+}
+export interface ISmartSecretKernelGetSuccessPresent {
+    outcome: 'success';
+    found: true;
+    value: string;
+}
+export type TSmartSecretKernelGetResult = ISmartSecretKernelDomainErrorResult | ISmartSecretKernelGetSuccessAbsent | ISmartSecretKernelGetSuccessPresent;
+export interface ISmartSecretKernelMutationSuccess {
+    outcome: 'success';
+}
+export type TSmartSecretKernelSetResult = ISmartSecretKernelDomainErrorResult | ISmartSecretKernelMutationSuccess;
+export interface ISmartSecretKernelDeleteSuccess {
+    outcome: 'success';
+    deleted: boolean;
+}
+export type TSmartSecretKernelDeleteResult = ISmartSecretKernelDomainErrorResult | ISmartSecretKernelDeleteSuccess;
+export interface ISmartSecretKernelLegacySuccessAbsent {
+    outcome: 'success';
+    found: false;
+}
+export interface ISmartSecretKernelLegacySuccessPresent {
+    outcome: 'success';
+    found: true;
+    value: string;
+    sourceSerial: number;
+    sessionRootSerial: number | null;
+    persistentRootSerial: number;
+    foundInSession: boolean;
+    foundInPersistent: boolean;
+    byteLength: number;
+    sha256: string;
+}
+export type TSmartSecretKernelLegacyReadResult = ISmartSecretKernelDomainErrorResult | ISmartSecretKernelLegacySuccessAbsent | ISmartSecretKernelLegacySuccessPresent;
+export interface ISmartSecretKernelLegacyDeleteSuccess {
+    outcome: 'success';
+    status: 'deleted' | 'alreadyAbsent';
+}
+export type TSmartSecretKernelLegacyDeleteResult = ISmartSecretKernelDomainErrorResult | ISmartSecretKernelLegacyDeleteSuccess;
+export interface ISmartSecretKernelLegacyDeleteParams {
+    account: string;
+    sourceSerial: number;
+    sessionRootSerial: number | null;
+    persistentRootSerial: number;
+    foundInSession: boolean;
+    foundInPersistent: boolean;
+    byteLength: number;
+    sha256: string;
+}
+export type TSmartSecretKernelCommands = {
+    getEntry: {
+        params: {
+            description: string;
+        };
+        result: TSmartSecretKernelGetResult;
+    };
+    setEntry: {
+        params: {
+            description: string;
+            value: string;
+        };
+        result: TSmartSecretKernelSetResult;
+    };
+    deleteEntry: {
+        params: {
+            description: string;
+        };
+        result: TSmartSecretKernelDeleteResult;
+    };
+    readDevIdpV1Legacy: {
+        params: {
+            account: string;
+        };
+        result: TSmartSecretKernelLegacyReadResult;
+    };
+    deleteDevIdpV1Legacy: {
+        params: ISmartSecretKernelLegacyDeleteParams;
+        result: TSmartSecretKernelLegacyDeleteResult;
+    };
+};
+export declare const normalizeSmartSecretKernelService: (valueArg: unknown) => string;
+export declare const normalizeSmartSecretKernelStoreOptions: (valueArg: unknown) => ISmartSecretKernelStoreOptions;
+export declare const normalizeSmartSecretKernelAccount: (valueArg: unknown) => string;
+export declare const normalizeDevIdpV1LegacyAccount: (valueArg: unknown) => string;
+export declare const deriveSmartSecretKernelServiceDescription: (serviceArg: string) => string;
+export declare const deriveSmartSecretKernelEntryDescription: (serviceArg: string, accountArg: string) => string;
+export declare const deriveSmartSecretKernelMutexNamespace: (serviceArg: string) => string;
+export declare const deriveDevIdpV1LegacyDescription: (accountArg: string) => string;
+export declare const normalizeSmartSecretKernelValue: (valueArg: unknown) => Uint8Array;
+export declare const encodeCanonicalBase64Url: (valueArg: Uint8Array) => string;
+export declare const normalizeSmartSecretKernelOperationOptions: (valueArg: ISmartSecretKernelOperationOptions | undefined) => INormalizedSmartSecretKernelOperationOptions;
+export declare const parseSmartSecretKernelGetResult: (valueArg: unknown) => {
+    kind: "domainError";
+    domainError: ISmartSecretKernelDomainErrorResult;
+} | {
+    kind: "success";
+    found: false;
+} | {
+    kind: "success";
+    found: true;
+    value: Uint8Array;
+};
+export declare const parseSmartSecretKernelSetResult: (valueArg: unknown) => {
+    kind: "domainError";
+    domainError: ISmartSecretKernelDomainErrorResult;
+} | {
+    kind: "success";
+};
+export declare const parseSmartSecretKernelDeleteResult: (valueArg: unknown) => {
+    kind: "domainError";
+    domainError: ISmartSecretKernelDomainErrorResult;
+} | {
+    kind: "success";
+    deleted: boolean;
+};
+export type TParsedSmartSecretKernelLegacyRead = {
+    kind: 'domainError';
+    domainError: ISmartSecretKernelDomainErrorResult;
+} | {
+    kind: 'success';
+    found: false;
+} | {
+    kind: 'success';
+    found: true;
+    value: Uint8Array;
+    receiptParams: ISmartSecretKernelLegacyDeleteParams;
+};
+export declare const parseSmartSecretKernelLegacyReadResult: (valueArg: unknown, accountArg: string) => TParsedSmartSecretKernelLegacyRead;
+export declare const parseSmartSecretKernelLegacyDeleteResult: (valueArg: unknown) => {
+    kind: "domainError";
+    domainError: ISmartSecretKernelDomainErrorResult;
+} | {
+    kind: "success";
+    status: "deleted" | "alreadyAbsent";
+};