@push.rocks/smartsecret 1.3.0 → 1.5.0

package/dist_ts/smartsecret.sealedfile.js

@@ -0,0 +1,989 @@
+import * as plugins from './smartsecret.plugins.js';
+import { SmartSecretKernelStoreError, } from './smartsecret.kernel.error.js';
+import { normalizeSmartSecretKernelAccount, normalizeSmartSecretKernelService, } from './smartsecret.kernel.protocol.js';
+import { SmartSecretSealedFileStoreError, createSmartSecretSealedFileStoreError, } from './smartsecret.sealedfile.error.js';
+export const smartSecretSealedFileMaximumEntryBytes = 512 * 1_024;
+const schemaVersion = 1;
+const profile = 'smartsecret-kernel-aes-256-gcm-file-v1';
+const manifestName = 'manifest.json';
+const masterKeyBytes = 32;
+const maximumEnvelopeBytes = 768 * 1_024;
+const operationTimeoutMs = 60_000;
+const canonicalDigestPattern = /^[A-Za-z0-9_-]{43}$/;
+const entryFilePattern = /^[A-Za-z0-9_-]{43}\.sealed\.json$/;
+const temporaryFilePattern = /^\.smartsecret-[A-Za-z0-9_-]{22}\.tmp$/;
+const maximumPendingOperations = 64;
+const encoder = new TextEncoder();
+const sha256 = (...valuesArg) => {
+    const hash = plugins.crypto.createHash('sha256');
+    for (const value of valuesArg)
+        hash.update(value);
+    return new Uint8Array(hash.digest());
+};
+const digest = (...valuesArg) => Buffer.from(sha256(...valuesArg)).toString('base64url');
+const fingerprint = (keyArg) => digest(encoder.encode('@push.rocks/smartsecret/sealed-file/master-key/v1\0'), keyArg);
+const normalizeStoreId = (valueArg) => {
+    if (typeof valueArg !== 'string'
+        || !/^[A-Za-z0-9][A-Za-z0-9:._-]{0,199}$/.test(valueArg))
+        throw createSmartSecretSealedFileStoreError('INVALID_ARGUMENT');
+    return valueArg;
+};
+const normalizeDirectoryPath = (valueArg) => {
+    if (typeof valueArg !== 'string'
+        || !plugins.path.isAbsolute(valueArg)
+        || plugins.path.resolve(valueArg) !== valueArg
+        || valueArg === plugins.path.parse(valueArg).root)
+        throw createSmartSecretSealedFileStoreError('INVALID_ARGUMENT');
+    return valueArg;
+};
+const dataPropertyValue = (objectArg, keyArg) => {
+    let current = objectArg;
+    while (current) {
+        const descriptor = Object.getOwnPropertyDescriptor(current, keyArg);
+        if (descriptor) {
+            if (!('value' in descriptor)) {
+                throw createSmartSecretSealedFileStoreError('INVALID_ARGUMENT');
+            }
+            return descriptor.value;
+        }
+        current = Object.getPrototypeOf(current);
+    }
+    throw createSmartSecretSealedFileStoreError('INVALID_ARGUMENT');
+};
+const normalizeOptions = (optionsArg) => {
+    try {
+        if (!optionsArg || typeof optionsArg !== 'object' || Array.isArray(optionsArg)) {
+            throw createSmartSecretSealedFileStoreError('INVALID_ARGUMENT');
+        }
+        const keys = Reflect.ownKeys(optionsArg);
+        if (keys.length !== 3
+            || keys.some((keyArg) => typeof keyArg !== 'string')
+            || !['kernelStore', 'storeId', 'directoryPath'].every((keyArg) => keys.includes(keyArg)))
+            throw createSmartSecretSealedFileStoreError('INVALID_ARGUMENT');
+        const values = Object.create(null);
+        for (const key of keys) {
+            const descriptor = Object.getOwnPropertyDescriptor(optionsArg, key);
+            if (!descriptor?.enumerable || !('value' in descriptor)) {
+                throw createSmartSecretSealedFileStoreError('INVALID_ARGUMENT');
+            }
+            values[key] = descriptor.value;
+        }
+        const kernelStoreValue = values.kernelStore;
+        if (!kernelStoreValue
+            || typeof kernelStoreValue !== 'object')
+            throw createSmartSecretSealedFileStoreError('INVALID_ARGUMENT');
+        const service = normalizeSmartSecretKernelService(dataPropertyValue(kernelStoreValue, 'service'));
+        const getEntry = dataPropertyValue(kernelStoreValue, 'getEntry');
+        const setEntry = dataPropertyValue(kernelStoreValue, 'setEntry');
+        const deleteEntry = dataPropertyValue(kernelStoreValue, 'deleteEntry');
+        if (typeof getEntry !== 'function'
+            || typeof setEntry !== 'function'
+            || typeof deleteEntry !== 'function')
+            throw createSmartSecretSealedFileStoreError('INVALID_ARGUMENT');
+        const kernelStore = {
+            service,
+            getEntry: (accountArg, operationOptionsArg) => Reflect.apply(getEntry, kernelStoreValue, [accountArg, operationOptionsArg]),
+            setEntry: (accountArg, valueArg, operationOptionsArg) => Reflect.apply(setEntry, kernelStoreValue, [accountArg, valueArg, operationOptionsArg]),
+            deleteEntry: (accountArg, operationOptionsArg) => Reflect.apply(deleteEntry, kernelStoreValue, [accountArg, operationOptionsArg]),
+        };
+        const storeId = normalizeStoreId(values.storeId);
+        const directoryPath = normalizeDirectoryPath(values.directoryPath);
+        const identity = encoder.encode(`${service}\0${storeId}\0${directoryPath}`);
+        return {
+            kernelStore,
+            service,
+            storeId,
+            directoryPath,
+            masterKeyAccount: `sealed-file-master:v1:${digest(identity)}`,
+            mutexNamespace: `smartsecret-sealed-file:v1:${digest(encoder.encode(directoryPath))}`,
+        };
+    }
+    catch {
+        throw createSmartSecretSealedFileStoreError('INVALID_ARGUMENT');
+    }
+};
+const exactObject = (valueArg, keysArg, errorCodeArg) => {
+    try {
+        if (!valueArg || typeof valueArg !== 'object' || Array.isArray(valueArg)) {
+            throw createSmartSecretSealedFileStoreError(errorCodeArg);
+        }
+        const prototype = Object.getPrototypeOf(valueArg);
+        const keys = Reflect.ownKeys(valueArg);
+        if ((prototype !== Object.prototype && prototype !== null)
+            || keys.length !== keysArg.length
+            || keys.some((keyArg) => typeof keyArg !== 'string')
+            || keysArg.some((keyArg) => !keys.includes(keyArg)))
+            throw createSmartSecretSealedFileStoreError(errorCodeArg);
+        const result = Object.create(null);
+        for (const key of keys) {
+            const descriptor = Object.getOwnPropertyDescriptor(valueArg, key);
+            if (!descriptor?.enumerable || !('value' in descriptor)) {
+                throw createSmartSecretSealedFileStoreError(errorCodeArg);
+            }
+            result[key] = descriptor.value;
+        }
+        return result;
+    }
+    catch (errorArg) {
+        if (errorArg instanceof SmartSecretSealedFileStoreError)
+            throw errorArg;
+        throw createSmartSecretSealedFileStoreError(errorCodeArg);
+    }
+};
+const decodeBase64Url = (valueArg, maximumBytesArg, exactBytesArg) => {
+    if (typeof valueArg !== 'string'
+        || !/^[A-Za-z0-9_-]*$/.test(valueArg)
+        || valueArg.length % 4 === 1
+        || valueArg.length > Math.ceil(maximumBytesArg * 4 / 3))
+        throw createSmartSecretSealedFileStoreError('ENVELOPE_INVALID');
+    const decoded = Buffer.from(valueArg, 'base64url');
+    if (decoded.byteLength > maximumBytesArg
+        || (exactBytesArg !== undefined && decoded.byteLength !== exactBytesArg)
+        || decoded.toString('base64url') !== valueArg) {
+        decoded.fill(0);
+        throw createSmartSecretSealedFileStoreError('ENVELOPE_INVALID');
+    }
+    const result = new Uint8Array(decoded);
+    decoded.fill(0);
+    return result;
+};
+const parseEnvelope = (valueArg) => {
+    const value = exactObject(valueArg, [
+        'schemaVersion',
+        'profile',
+        'entryId',
+        'masterKeyFingerprint',
+        'nonce',
+        'ciphertext',
+        'tag',
+    ], 'ENVELOPE_INVALID');
+    if (value.schemaVersion !== schemaVersion
+        || value.profile !== profile
+        || typeof value.entryId !== 'string'
+        || !canonicalDigestPattern.test(value.entryId)
+        || typeof value.masterKeyFingerprint !== 'string'
+        || !canonicalDigestPattern.test(value.masterKeyFingerprint))
+        throw createSmartSecretSealedFileStoreError('ENVELOPE_INVALID');
+    let nonce;
+    let ciphertext;
+    let tag;
+    try {
+        nonce = decodeBase64Url(value.nonce, 12, 12);
+        ciphertext = decodeBase64Url(value.ciphertext, smartSecretSealedFileMaximumEntryBytes);
+        tag = decodeBase64Url(value.tag, 16, 16);
+        return {
+            envelope: {
+                schemaVersion,
+                profile,
+                entryId: value.entryId,
+                masterKeyFingerprint: value.masterKeyFingerprint,
+                nonce: value.nonce,
+                ciphertext: value.ciphertext,
+                tag: value.tag,
+            },
+            encryptedData: { nonce, ciphertext, tag },
+        };
+    }
+    catch (errorArg) {
+        nonce?.fill(0);
+        ciphertext?.fill(0);
+        tag?.fill(0);
+        throw errorArg;
+    }
+};
+const encodeBase64Url = (valueArg) => {
+    const copy = Buffer.from(valueArg);
+    try {
+        return copy.toString('base64url');
+    }
+    finally {
+        copy.fill(0);
+    }
+};
+const encodeEncryptedData = (valueArg) => ({
+    nonce: encodeBase64Url(valueArg.nonce),
+    ciphertext: encodeBase64Url(valueArg.ciphertext),
+    tag: encodeBase64Url(valueArg.tag),
+});
+const entryId = (optionsArg, accountArg) => digest(encoder.encode('@push.rocks/smartsecret/sealed-file/entry/v1\0'), encoder.encode(optionsArg.service), new Uint8Array([0]), encoder.encode(optionsArg.storeId), new Uint8Array([0]), encoder.encode(accountArg));
+const entryAad = (optionsArg, accountArg, entryIdArg, fingerprintArg) => encoder.encode(JSON.stringify({
+    schemaVersion,
+    profile,
+    service: optionsArg.service,
+    storeId: optionsArg.storeId,
+    account: accountArg,
+    entryId: entryIdArg,
+    masterKeyFingerprint: fingerprintArg,
+}));
+const manifestFor = (optionsArg, fingerprintArg) => ({
+    schemaVersion,
+    profile,
+    serviceDigest: digest(encoder.encode(optionsArg.service)),
+    storeId: optionsArg.storeId,
+    masterKeyFingerprint: fingerprintArg,
+});
+const parseManifest = (valueArg, optionsArg) => {
+    const value = exactObject(valueArg, [
+        'schemaVersion',
+        'profile',
+        'serviceDigest',
+        'storeId',
+        'masterKeyFingerprint',
+    ], 'FILESYSTEM_FAILED');
+    if (value.schemaVersion !== schemaVersion
+        || value.profile !== profile
+        || value.serviceDigest !== digest(encoder.encode(optionsArg.service))
+        || value.storeId !== optionsArg.storeId
+        || typeof value.masterKeyFingerprint !== 'string'
+        || !canonicalDigestPattern.test(value.masterKeyFingerprint))
+        throw createSmartSecretSealedFileStoreError('FILESYSTEM_FAILED');
+    return value;
+};
+const mapKernelError = (errorArg) => {
+    if (!(errorArg instanceof SmartSecretKernelStoreError)) {
+        return createSmartSecretSealedFileStoreError('KERNEL_UNAVAILABLE');
+    }
+    if (errorArg.code === 'MUTATION_OUTCOME_UNKNOWN') {
+        return createSmartSecretSealedFileStoreError('MUTATION_OUTCOME_UNKNOWN');
+    }
+    if (errorArg.code === 'INVALID_ARGUMENT') {
+        return createSmartSecretSealedFileStoreError('INVALID_ARGUMENT');
+    }
+    return createSmartSecretSealedFileStoreError('KERNEL_UNAVAILABLE');
+};
+const mapMutexError = (errorArg) => {
+    if (errorArg instanceof plugins.smartipc.NamedMutexError) {
+        if (errorArg.code === 'ABORTED' || errorArg.code === 'TIMEOUT') {
+            return createSmartSecretSealedFileStoreError('MUTEX_FAILED');
+        }
+    }
+    return createSmartSecretSealedFileStoreError('MUTEX_FAILED');
+};
+const directoryHandlePath = (directoryHandleArg, nameArg) => nameArg
+    ? plugins.path.join(`/proc/self/fd/${directoryHandleArg.fd}`, nameArg)
+    : `/proc/self/fd/${directoryHandleArg.fd}`;
+const mutationOutcomeUnknown = (errorArg) => errorArg instanceof SmartSecretSealedFileStoreError
+    && errorArg.code === 'MUTATION_OUTCOME_UNKNOWN';
+const preferCleanupError = (operationErrorArg, cleanupErrorArg) => mutationOutcomeUnknown(operationErrorArg) ? operationErrorArg : cleanupErrorArg;
+const closeFileHandle = async (handleArg) => {
+    try {
+        await handleArg.close();
+    }
+    catch {
+        try {
+            await handleArg.close();
+        }
+        catch { }
+        throw createSmartSecretSealedFileStoreError('FILESYSTEM_FAILED');
+    }
+};
+const closeFileHandleWithError = async (handleArg, operationErrorArg) => {
+    try {
+        await closeFileHandle(handleArg);
+        return operationErrorArg;
+    }
+    catch (errorArg) {
+        return preferCleanupError(operationErrorArg, errorArg);
+    }
+};
+const wipeDiscardedResult = (valueArg) => {
+    if (valueArg instanceof Uint8Array)
+        valueArg.fill(0);
+};
+const validateDirectory = (statsArg, effectiveUidArg, finalArg) => {
+    if (!statsArg.isDirectory()) {
+        throw createSmartSecretSealedFileStoreError('FILESYSTEM_FAILED');
+    }
+    const mode = statsArg.mode & 4095n;
+    if (finalArg) {
+        if (statsArg.uid !== effectiveUidArg || mode !== 448n) {
+            throw createSmartSecretSealedFileStoreError('FILESYSTEM_FAILED');
+        }
+        return;
+    }
+    if (statsArg.uid !== 0n && statsArg.uid !== effectiveUidArg) {
+        throw createSmartSecretSealedFileStoreError('FILESYSTEM_FAILED');
+    }
+    if ((mode & 18n) !== 0n
+        && !(statsArg.uid === 0n && (mode & 512n) !== 0n))
+        throw createSmartSecretSealedFileStoreError('FILESYSTEM_FAILED');
+};
+const ensureDirectory = async (directoryPathArg) => {
+    let currentHandle;
+    try {
+        const effectiveUid = process.geteuid?.();
+        if (!Number.isSafeInteger(effectiveUid) || effectiveUid < 0) {
+            throw createSmartSecretSealedFileStoreError('FILESYSTEM_FAILED');
+        }
+        const root = plugins.path.parse(directoryPathArg).root;
+        const components = plugins.path.relative(root, directoryPathArg)
+            .split(plugins.path.sep)
+            .filter(Boolean);
+        currentHandle = await plugins.fs.promises.open(root, plugins.fs.constants.O_RDONLY
+            | plugins.fs.constants.O_DIRECTORY
+            | plugins.fs.constants.O_NOFOLLOW);
+        validateDirectory(await currentHandle.stat({ bigint: true }), BigInt(effectiveUid), false);
+        for (let index = 0; index < components.length; index++) {
+            const componentPath = directoryHandlePath(currentHandle, components[index]);
+            try {
+                await plugins.fs.promises.mkdir(componentPath, { mode: 0o700 });
+            }
+            catch (errorArg) {
+                if (errorArg.code !== 'EEXIST')
+                    throw errorArg;
+            }
+            let nextHandle;
+            try {
+                nextHandle = await plugins.fs.promises.open(componentPath, plugins.fs.constants.O_RDONLY
+                    | plugins.fs.constants.O_DIRECTORY
+                    | plugins.fs.constants.O_NOFOLLOW);
+                validateDirectory(await nextHandle.stat({ bigint: true }), BigInt(effectiveUid), index === components.length - 1);
+                await closeFileHandle(currentHandle);
+                currentHandle = nextHandle;
+                nextHandle = undefined;
+            }
+            finally {
+                if (nextHandle)
+                    await closeFileHandle(nextHandle);
+            }
+        }
+        const result = currentHandle;
+        currentHandle = undefined;
+        return result;
+    }
+    catch (errorArg) {
+        let operationError = errorArg instanceof SmartSecretSealedFileStoreError
+            ? errorArg
+            : createSmartSecretSealedFileStoreError('FILESYSTEM_FAILED');
+        if (currentHandle) {
+            operationError = await closeFileHandleWithError(currentHandle, operationError);
+        }
+        throw operationError;
+    }
+};
+const readStrictJsonFile = async (directoryHandleArg, fileNameArg, maximumBytesArg) => {
+    let handle;
+    let bytes;
+    let result;
+    let operationError;
+    try {
+        try {
+            handle = await plugins.fs.promises.open(directoryHandlePath(directoryHandleArg, fileNameArg), plugins.fs.constants.O_RDONLY | plugins.fs.constants.O_NOFOLLOW);
+        }
+        catch (errorArg) {
+            if (errorArg.code === 'ENOENT')
+                return undefined;
+            throw errorArg;
+        }
+        const stats = await handle.stat();
+        const effectiveUid = process.geteuid?.();
+        if (!stats.isFile()
+            || stats.nlink !== 1
+            || stats.size < 1
+            || stats.size > maximumBytesArg
+            || (effectiveUid !== undefined && stats.uid !== effectiveUid)
+            || (stats.mode & 0o7777) !== 0o600)
+            throw createSmartSecretSealedFileStoreError('FILESYSTEM_FAILED');
+        bytes = await handle.readFile();
+        if (bytes.byteLength !== stats.size) {
+            throw createSmartSecretSealedFileStoreError('FILESYSTEM_FAILED');
+        }
+        result = JSON.parse(bytes.toString('utf8'));
+    }
+    catch (errorArg) {
+        operationError = errorArg instanceof SmartSecretSealedFileStoreError
+            ? errorArg
+            : createSmartSecretSealedFileStoreError('FILESYSTEM_FAILED');
+    }
+    bytes?.fill(0);
+    if (handle) {
+        try {
+            await closeFileHandle(handle);
+        }
+        catch (errorArg) {
+            operationError = preferCleanupError(operationError, errorArg);
+        }
+    }
+    if (operationError)
+        throw operationError;
+    return result;
+};
+const atomicWriteJson = async (directoryHandleArg, targetNameArg, valueArg) => {
+    const temporaryName = `.smartsecret-${plugins.crypto.randomBytes(16).toString('base64url')}.tmp`;
+    const temporaryPath = directoryHandlePath(directoryHandleArg, temporaryName);
+    const targetPath = directoryHandlePath(directoryHandleArg, targetNameArg);
+    let handle;
+    let bytes;
+    let renamed = false;
+    let mutationApplied = false;
+    let operationError;
+    try {
+        bytes = Buffer.from(JSON.stringify(valueArg), 'utf8');
+        handle = await plugins.fs.promises.open(temporaryPath, plugins.fs.constants.O_WRONLY
+            | plugins.fs.constants.O_CREAT
+            | plugins.fs.constants.O_EXCL
+            | plugins.fs.constants.O_NOFOLLOW, 0o600);
+        const stats = await handle.stat();
+        const effectiveUid = process.geteuid?.();
+        if (!stats.isFile()
+            || stats.nlink !== 1
+            || (effectiveUid !== undefined && stats.uid !== effectiveUid)
+            || (stats.mode & 0o7777) !== 0o600) {
+            throw createSmartSecretSealedFileStoreError('FILESYSTEM_FAILED');
+        }
+        await handle.writeFile(bytes);
+        await handle.sync();
+        await closeFileHandle(handle);
+        handle = undefined;
+        await plugins.fs.promises.rename(temporaryPath, targetPath);
+        renamed = true;
+        mutationApplied = true;
+        await directoryHandleArg.sync();
+    }
+    catch (errorArg) {
+        operationError = errorArg instanceof SmartSecretSealedFileStoreError
+            ? errorArg
+            : createSmartSecretSealedFileStoreError(mutationApplied ? 'MUTATION_OUTCOME_UNKNOWN' : 'FILESYSTEM_FAILED');
+    }
+    bytes?.fill(0);
+    if (handle) {
+        try {
+            await closeFileHandle(handle);
+        }
+        catch (errorArg) {
+            operationError = preferCleanupError(operationError, errorArg);
+        }
+    }
+    if (!renamed) {
+        try {
+            await plugins.fs.promises.unlink(temporaryPath);
+            await directoryHandleArg.sync();
+        }
+        catch (errorArg) {
+            if (errorArg.code !== 'ENOENT') {
+                operationError = createSmartSecretSealedFileStoreError('MUTATION_OUTCOME_UNKNOWN');
+            }
+        }
+    }
+    if (operationError)
+        throw operationError;
+};
+const removeAndSync = async (directoryHandleArg, fileNameArg) => {
+    try {
+        await plugins.fs.promises.unlink(directoryHandlePath(directoryHandleArg, fileNameArg));
+        try {
+            await directoryHandleArg.sync();
+        }
+        catch {
+            throw createSmartSecretSealedFileStoreError('MUTATION_OUTCOME_UNKNOWN');
+        }
+        return true;
+    }
+    catch (errorArg) {
+        if (errorArg instanceof SmartSecretSealedFileStoreError)
+            throw errorArg;
+        if (errorArg.code === 'ENOENT')
+            return false;
+        throw createSmartSecretSealedFileStoreError('FILESYSTEM_FAILED');
+    }
+};
+const listOwnedFiles = async (directoryHandleArg) => {
+    try {
+        const names = await plugins.fs.promises.readdir(directoryHandlePath(directoryHandleArg));
+        if (names.some((nameArg) => (nameArg !== manifestName
+            && !entryFilePattern.test(nameArg)
+            && !temporaryFilePattern.test(nameArg))))
+            throw createSmartSecretSealedFileStoreError('FILESYSTEM_FAILED');
+        return names;
+    }
+    catch (errorArg) {
+        if (errorArg instanceof SmartSecretSealedFileStoreError)
+            throw errorArg;
+        throw createSmartSecretSealedFileStoreError('FILESYSTEM_FAILED');
+    }
+};
+const acquireLease = async (optionsArg, deadlineArg = performance.now() + operationTimeoutMs) => {
+    const remainingMs = deadlineArg - performance.now();
+    if (remainingMs <= 0) {
+        throw createSmartSecretSealedFileStoreError('MUTEX_FAILED');
+    }
+    try {
+        const mutex = new plugins.smartipc.NamedMutex(optionsArg.mutexNamespace);
+        const lease = await mutex.acquire({ timeoutMs: Math.max(0, Math.floor(remainingMs)) });
+        if (performance.now() >= deadlineArg) {
+            await lease.release().catch(() => undefined);
+            throw createSmartSecretSealedFileStoreError('MUTEX_FAILED');
+        }
+        return lease;
+    }
+    catch (errorArg) {
+        throw mapMutexError(errorArg);
+    }
+};
+const readMasterKey = async (optionsArg) => {
+    let value;
+    try {
+        value = await optionsArg.kernelStore.getEntry(optionsArg.masterKeyAccount);
+    }
+    catch (errorArg) {
+        throw mapKernelError(errorArg);
+    }
+    if (value === null)
+        return null;
+    let result;
+    try {
+        if (!(value instanceof Uint8Array)) {
+            throw createSmartSecretSealedFileStoreError('MASTER_KEY_CONFLICT');
+        }
+        result = new Uint8Array(value);
+        try {
+            value.fill(0);
+        }
+        catch { }
+        if (result.byteLength !== masterKeyBytes) {
+            result.fill(0);
+            result = undefined;
+            throw createSmartSecretSealedFileStoreError('MASTER_KEY_CONFLICT');
+        }
+        return result;
+    }
+    catch (errorArg) {
+        result?.fill(0);
+        if (errorArg instanceof SmartSecretSealedFileStoreError)
+            throw errorArg;
+        throw createSmartSecretSealedFileStoreError('MASTER_KEY_CONFLICT');
+    }
+};
+const createMasterKey = async (optionsArg) => {
+    const generated = plugins.smartcrypto.generateAes256GcmKey();
+    let written = false;
+    try {
+        try {
+            await optionsArg.kernelStore.setEntry(optionsArg.masterKeyAccount, generated);
+            written = true;
+        }
+        catch (errorArg) {
+            throw mapKernelError(errorArg);
+        }
+        const readback = await readMasterKey(optionsArg);
+        if (!readback
+            || !plugins.crypto.timingSafeEqual(readback, generated)) {
+            readback?.fill(0);
+            throw createSmartSecretSealedFileStoreError('MASTER_KEY_CONFLICT');
+        }
+        return readback;
+    }
+    catch (errorArg) {
+        if (written) {
+            try {
+                await optionsArg.kernelStore.deleteEntry(optionsArg.masterKeyAccount);
+            }
+            catch (deleteErrorArg) {
+                throw mapKernelError(deleteErrorArg);
+            }
+        }
+        throw errorArg;
+    }
+    finally {
+        generated.fill(0);
+    }
+};
+const bootstrapUnderLease = async (optionsArg) => {
+    const directoryHandle = await ensureDirectory(optionsArg.directoryPath);
+    let key = null;
+    let result;
+    let createdMasterKey = false;
+    let operationError;
+    try {
+        const names = await listOwnedFiles(directoryHandle);
+        const manifestValue = await readStrictJsonFile(directoryHandle, manifestName, 4 * 1_024);
+        const manifest = manifestValue === undefined ? undefined : parseManifest(manifestValue, optionsArg);
+        key = await readMasterKey(optionsArg);
+        if (!key) {
+            if (names.length > 0) {
+                throw createSmartSecretSealedFileStoreError('MASTER_KEY_UNAVAILABLE');
+            }
+            key = await createMasterKey(optionsArg);
+            createdMasterKey = true;
+        }
+        if (key.byteLength !== masterKeyBytes) {
+            throw createSmartSecretSealedFileStoreError('MASTER_KEY_CONFLICT');
+        }
+        const keyFingerprint = fingerprint(key);
+        if (manifest && manifest.masterKeyFingerprint !== keyFingerprint) {
+            throw createSmartSecretSealedFileStoreError('MASTER_KEY_CONFLICT');
+        }
+        for (const name of names.filter((nameArg) => temporaryFilePattern.test(nameArg))) {
+            await removeAndSync(directoryHandle, name);
+        }
+        if (!manifest) {
+            await atomicWriteJson(directoryHandle, manifestName, manifestFor(optionsArg, keyFingerprint));
+        }
+        result = new Uint8Array(key);
+        key.fill(0);
+        key = null;
+    }
+    catch (errorArg) {
+        operationError = errorArg;
+    }
+    key?.fill(0);
+    operationError = await closeFileHandleWithError(directoryHandle, operationError);
+    if (operationError) {
+        result?.fill(0);
+        result = undefined;
+        if (createdMasterKey && !mutationOutcomeUnknown(operationError)) {
+            try {
+                await optionsArg.kernelStore.deleteEntry(optionsArg.masterKeyAccount);
+            }
+            catch (deleteErrorArg) {
+                const deleteError = mapKernelError(deleteErrorArg);
+                throw preferCleanupError(operationError, deleteError);
+            }
+        }
+        throw operationError;
+    }
+    return result;
+};
+/**
+ * Stores one small master key in a strict kernel store and authenticated
+ * ciphertext in a caller-owned private directory. The kernel store lifecycle
+ * remains owned by the caller.
+ */
+export class SmartSecretSealedFileStore {
+    constructor(options, masterKey) {
+        this.options = options;
+        this.masterKey = masterKey;
+        this.lifecycleState = 'ready';
+        this.operationTail = Promise.resolve();
+        this.pendingOperations = 0;
+        this.service = options.service;
+        this.storeId = options.storeId;
+        this.directoryPath = options.directoryPath;
+    }
+    static async create(optionsArg) {
+        const options = normalizeOptions(optionsArg);
+        if (process.platform !== 'linux' || typeof process.geteuid !== 'function') {
+            throw createSmartSecretSealedFileStoreError('KERNEL_UNAVAILABLE');
+        }
+        const lease = await acquireLease(options);
+        let key;
+        let operationError;
+        try {
+            key = await bootstrapUnderLease(options);
+        }
+        catch (errorArg) {
+            operationError = errorArg;
+        }
+        try {
+            await lease.release();
+        }
+        catch {
+            operationError = preferCleanupError(operationError, createSmartSecretSealedFileStoreError('MUTEX_FAILED'));
+        }
+        if (operationError) {
+            key?.fill(0);
+            throw operationError;
+        }
+        const store = new SmartSecretSealedFileStore(options, key);
+        key = undefined;
+        return store;
+    }
+    /** Explicitly discards this store's ciphertext and kernel master key. */
+    static async reset(optionsArg) {
+        const options = normalizeOptions(optionsArg);
+        if (process.platform !== 'linux' || typeof process.geteuid !== 'function') {
+            throw createSmartSecretSealedFileStoreError('KERNEL_UNAVAILABLE');
+        }
+        const lease = await acquireLease(options);
+        let key;
+        let operationError;
+        try {
+            const directoryHandle = await ensureDirectory(options.directoryPath);
+            try {
+                const names = await listOwnedFiles(directoryHandle);
+                if (names.some((nameArg) => (nameArg === manifestName || entryFilePattern.test(nameArg)))) {
+                    const manifestValue = await readStrictJsonFile(directoryHandle, manifestName, 4 * 1_024);
+                    if (manifestValue === undefined) {
+                        throw createSmartSecretSealedFileStoreError('FILESYSTEM_FAILED');
+                    }
+                    parseManifest(manifestValue, options);
+                }
+                try {
+                    await options.kernelStore.deleteEntry(options.masterKeyAccount);
+                }
+                catch (errorArg) {
+                    throw mapKernelError(errorArg);
+                }
+                const deletionOrder = names.filter((nameArg) => nameArg !== manifestName);
+                if (names.includes(manifestName))
+                    deletionOrder.push(manifestName);
+                for (const name of deletionOrder) {
+                    await removeAndSync(directoryHandle, name);
+                }
+            }
+            catch (errorArg) {
+                operationError = errorArg;
+            }
+            operationError = await closeFileHandleWithError(directoryHandle, operationError);
+            if (operationError)
+                throw operationError;
+            key = await bootstrapUnderLease(options);
+        }
+        catch (errorArg) {
+            operationError = errorArg;
+        }
+        try {
+            await lease.release();
+        }
+        catch {
+            operationError = preferCleanupError(operationError, createSmartSecretSealedFileStoreError('MUTEX_FAILED'));
+        }
+        if (operationError) {
+            key?.fill(0);
+            throw operationError;
+        }
+        const store = new SmartSecretSealedFileStore(options, key);
+        key = undefined;
+        return store;
+    }
+    getEntry(accountArg) {
+        let account;
+        try {
+            account = normalizeSmartSecretKernelAccount(accountArg);
+        }
+        catch {
+            throw createSmartSecretSealedFileStoreError('INVALID_ARGUMENT');
+        }
+        return this.reserveOperation((deadlineArg, markAcquiredArg) => this.withLease(deadlineArg, markAcquiredArg, async () => {
+            const directoryHandle = await ensureDirectory(this.directoryPath);
+            const id = entryId(this.options, account);
+            let value;
+            let operationError;
+            try {
+                await this.verifyManifest(directoryHandle);
+                value = await readStrictJsonFile(directoryHandle, `${id}.sealed.json`, maximumEnvelopeBytes);
+            }
+            catch (errorArg) {
+                operationError = errorArg;
+            }
+            operationError = await closeFileHandleWithError(directoryHandle, operationError);
+            if (operationError)
+                throw operationError;
+            if (value === undefined)
+                return null;
+            const parsed = parseEnvelope(value);
+            const aad = entryAad(this.options, account, id, fingerprint(this.masterKey));
+            try {
+                if (parsed.envelope.entryId !== id
+                    || parsed.envelope.masterKeyFingerprint !== fingerprint(this.masterKey))
+                    throw createSmartSecretSealedFileStoreError('ENVELOPE_INVALID');
+                try {
+                    return await plugins.smartcrypto.aesGcmDecrypt({
+                        key: this.masterKey,
+                        encryptedData: parsed.encryptedData,
+                        aad,
+                    });
+                }
+                catch {
+                    throw createSmartSecretSealedFileStoreError('AUTHENTICATION_FAILED');
+                }
+            }
+            finally {
+                aad.fill(0);
+                parsed.encryptedData.nonce.fill(0);
+                parsed.encryptedData.ciphertext.fill(0);
+                parsed.encryptedData.tag.fill(0);
+            }
+        }));
+    }
+    setEntry(accountArg, valueArg) {
+        let account;
+        try {
+            account = normalizeSmartSecretKernelAccount(accountArg);
+        }
+        catch {
+            throw createSmartSecretSealedFileStoreError('INVALID_ARGUMENT');
+        }
+        let value;
+        try {
+            if (!(valueArg instanceof Uint8Array)) {
+                throw createSmartSecretSealedFileStoreError('INVALID_ARGUMENT');
+            }
+            if (valueArg.byteLength > smartSecretSealedFileMaximumEntryBytes) {
+                throw createSmartSecretSealedFileStoreError('SIZE_LIMIT_EXCEEDED');
+            }
+            value = new Uint8Array(valueArg);
+        }
+        catch (errorArg) {
+            if (errorArg instanceof SmartSecretSealedFileStoreError)
+                throw errorArg;
+            throw createSmartSecretSealedFileStoreError('INVALID_ARGUMENT');
+        }
+        let result;
+        try {
+            result = this.reserveOperation((deadlineArg, markAcquiredArg) => this.withLease(deadlineArg, markAcquiredArg, async () => {
+                const directoryHandle = await ensureDirectory(this.directoryPath);
+                let encrypted;
+                const id = entryId(this.options, account);
+                const keyFingerprint = fingerprint(this.masterKey);
+                const aad = entryAad(this.options, account, id, keyFingerprint);
+                let operationError;
+                try {
+                    await this.verifyManifest(directoryHandle);
+                    try {
+                        encrypted = await plugins.smartcrypto.aesGcmEncrypt({
+                            key: this.masterKey,
+                            plaintext: value,
+                            aad,
+                        });
+                    }
+                    catch {
+                        throw createSmartSecretSealedFileStoreError('AUTHENTICATION_FAILED');
+                    }
+                    const envelope = {
+                        schemaVersion,
+                        profile,
+                        entryId: id,
+                        masterKeyFingerprint: keyFingerprint,
+                        ...encodeEncryptedData(encrypted),
+                    };
+                    await atomicWriteJson(directoryHandle, `${id}.sealed.json`, envelope);
+                }
+                catch (errorArg) {
+                    operationError = errorArg;
+                }
+                try {
+                    aad.fill(0);
+                    encrypted?.nonce.fill(0);
+                    encrypted?.ciphertext.fill(0);
+                    encrypted?.tag.fill(0);
+                }
+                finally {
+                    operationError = await closeFileHandleWithError(directoryHandle, operationError);
+                }
+                if (operationError)
+                    throw operationError;
+            }));
+        }
+        catch (errorArg) {
+            value.fill(0);
+            throw errorArg;
+        }
+        return result.finally(() => value.fill(0));
+    }
+    deleteEntry(accountArg) {
+        let account;
+        try {
+            account = normalizeSmartSecretKernelAccount(accountArg);
+        }
+        catch {
+            throw createSmartSecretSealedFileStoreError('INVALID_ARGUMENT');
+        }
+        return this.reserveOperation((deadlineArg, markAcquiredArg) => this.withLease(deadlineArg, markAcquiredArg, async () => {
+            const directoryHandle = await ensureDirectory(this.directoryPath);
+            let result;
+            let operationError;
+            try {
+                await this.verifyManifest(directoryHandle);
+                const id = entryId(this.options, account);
+                result = await removeAndSync(directoryHandle, `${id}.sealed.json`);
+            }
+            catch (errorArg) {
+                operationError = errorArg;
+            }
+            operationError = await closeFileHandleWithError(directoryHandle, operationError);
+            if (operationError)
+                throw operationError;
+            return result;
+        }));
+    }
+    close() {
+        if (this.closePromise)
+            return this.closePromise;
+        this.lifecycleState = 'closing';
+        const operationTail = this.operationTail;
+        const closePromise = operationTail.finally(() => {
+            this.masterKey.fill(0);
+            this.lifecycleState = 'closed';
+        });
+        this.closePromise = closePromise;
+        return closePromise;
+    }
+    reserveOperation(operationArg) {
+        if (this.lifecycleState !== 'ready') {
+            throw createSmartSecretSealedFileStoreError('STORE_CLOSED');
+        }
+        if (this.pendingOperations >= maximumPendingOperations) {
+            throw createSmartSecretSealedFileStoreError('OPERATION_LIMIT_REACHED');
+        }
+        this.pendingOperations += 1;
+        const deadline = performance.now() + operationTimeoutMs;
+        let admissionExpired = false;
+        let admissionTimer;
+        let rejectAdmission;
+        const admissionTimeout = new Promise((_resolveArg, rejectArg) => {
+            rejectAdmission = rejectArg;
+        });
+        const clearAdmissionTimer = () => {
+            if (admissionTimer) {
+                clearTimeout(admissionTimer);
+                admissionTimer = undefined;
+            }
+        };
+        const markAcquired = () => clearAdmissionTimer();
+        admissionTimer = setTimeout(() => {
+            admissionExpired = true;
+            admissionTimer = undefined;
+            rejectAdmission(createSmartSecretSealedFileStoreError('MUTEX_FAILED'));
+        }, operationTimeoutMs);
+        const execution = this.operationTail.then(() => {
+            if (admissionExpired || performance.now() >= deadline) {
+                throw createSmartSecretSealedFileStoreError('MUTEX_FAILED');
+            }
+            return operationArg(deadline, markAcquired);
+        });
+        this.operationTail = execution.then(() => undefined, () => undefined);
+        execution.then(() => {
+            clearAdmissionTimer();
+            this.pendingOperations -= 1;
+        }, () => {
+            clearAdmissionTimer();
+            this.pendingOperations -= 1;
+        });
+        return Promise.race([execution, admissionTimeout]);
+    }
+    async withLease(deadlineArg, markAcquiredArg, operationArg) {
+        const lease = await acquireLease(this.options, deadlineArg);
+        markAcquiredArg();
+        let result;
+        let operationError;
+        try {
+            result = await operationArg();
+        }
+        catch (errorArg) {
+            operationError = errorArg;
+        }
+        try {
+            await lease.release();
+        }
+        catch {
+            wipeDiscardedResult(result);
+            if (mutationOutcomeUnknown(operationError))
+                throw operationError;
+            throw createSmartSecretSealedFileStoreError('MUTEX_FAILED');
+        }
+        if (operationError)
+            throw operationError;
+        return result;
+    }
+    async verifyManifest(directoryHandleArg) {
+        const value = await readStrictJsonFile(directoryHandleArg, manifestName, 4 * 1_024);
+        if (value === undefined)
+            throw createSmartSecretSealedFileStoreError('FILESYSTEM_FAILED');
+        const manifest = parseManifest(value, this.options);
+        if (manifest.masterKeyFingerprint !== fingerprint(this.masterKey)) {
+            throw createSmartSecretSealedFileStoreError('MASTER_KEY_CONFLICT');
+        }
+    }
+}
+//# sourceMappingURL=data:application/json;base64,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