@push.rocks/smartsecret 1.4.0 → 1.5.0

package/.smartconfig.json

@@ -13,7 +13,7 @@
       "githost": "code.foss.global",
       "gitscope": "push.rocks",
       "gitrepo": "smartsecret",
-      "description": "OS-backed secret storage plus strict Linux kernel-keyring and envelope APIs for Node.js.",
+      "description": "OS-backed secret storage plus strict Linux kernel-keyring, sealed-file, and envelope APIs for Node.js.",
       "npmPackagename": "@push.rocks/smartsecret",
       "license": "MIT"
     },

package/dist_ts/00_commitinfo_data.js

@@ -3,7 +3,7 @@
  */
 export const commitinfo = {
     name: '@push.rocks/smartsecret',
-    version: '1.4.0',
-    description: 'OS-backed secret storage plus strict Linux kernel-keyring and envelope APIs for Node.js.'
+    version: '1.5.0',
+    description: 'OS-backed secret storage plus strict Linux kernel-keyring, sealed-file, and envelope APIs for Node.js.'
 };
-//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiMDBfY29tbWl0aW5mb19kYXRhLmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vdHMvMDBfY29tbWl0aW5mb19kYXRhLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiJBQUFBOztHQUVHO0FBQ0gsTUFBTSxDQUFDLE1BQU0sVUFBVSxHQUFHO0lBQ3hCLElBQUksRUFBRSx5QkFBeUI7SUFDL0IsT0FBTyxFQUFFLE9BQU87SUFDaEIsV0FBVyxFQUFFLDBGQUEwRjtDQUN4RyxDQUFBIn0=
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiMDBfY29tbWl0aW5mb19kYXRhLmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vdHMvMDBfY29tbWl0aW5mb19kYXRhLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiJBQUFBOztHQUVHO0FBQ0gsTUFBTSxDQUFDLE1BQU0sVUFBVSxHQUFHO0lBQ3hCLElBQUksRUFBRSx5QkFBeUI7SUFDL0IsT0FBTyxFQUFFLE9BQU87SUFDaEIsV0FBVyxFQUFFLHdHQUF3RztDQUN0SCxDQUFBIn0=

package/dist_ts/index.d.ts

@@ -10,3 +10,6 @@ export type { ISmartSecretEnvelopeV1, TSmartSecretKeyringProfile, } from './smar
 export * from './smartsecret.kernelstore.js';
 export { SmartSecretKernelStoreError } from './smartsecret.kernel.error.js';
 export type { ISmartSecretKernelStoreErrorJson, TSmartSecretKernelStoreErrorCode, } from './smartsecret.kernel.error.js';
+export * from './smartsecret.sealedfile.js';
+export { SmartSecretSealedFileStoreError } from './smartsecret.sealedfile.error.js';
+export type { ISmartSecretSealedFileStoreErrorJson, TSmartSecretSealedFileStoreErrorCode, } from './smartsecret.sealedfile.error.js';

package/dist_ts/index.js

@@ -6,4 +6,6 @@ export * from './smartsecret.keyring.js';
 export { SmartSecretKeyringError } from './smartsecret.keyring.error.js';
 export * from './smartsecret.kernelstore.js';
 export { SmartSecretKernelStoreError } from './smartsecret.kernel.error.js';
-//# sourceMappingURL=data:application/json;base64,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
+export * from './smartsecret.sealedfile.js';
+export { SmartSecretSealedFileStoreError } from './smartsecret.sealedfile.error.js';
+//# sourceMappingURL=data:application/json;base64,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

package/dist_ts/smartsecret.sealedfile.d.ts

@@ -0,0 +1,40 @@
+import { type ISmartSecretKernelOperationOptions } from './smartsecret.kernel.protocol.js';
+export declare const smartSecretSealedFileMaximumEntryBytes: number;
+export interface ISmartSecretSealedFileKernelStore {
+    readonly service: string;
+    getEntry(accountArg: string, optionsArg?: ISmartSecretKernelOperationOptions): Promise<Uint8Array | null>;
+    setEntry(accountArg: string, valueArg: Uint8Array, optionsArg?: ISmartSecretKernelOperationOptions): Promise<void>;
+    deleteEntry(accountArg: string, optionsArg?: ISmartSecretKernelOperationOptions): Promise<boolean>;
+}
+export interface ISmartSecretSealedFileStoreOptions {
+    kernelStore: ISmartSecretSealedFileKernelStore;
+    storeId: string;
+    directoryPath: string;
+}
+/**
+ * Stores one small master key in a strict kernel store and authenticated
+ * ciphertext in a caller-owned private directory. The kernel store lifecycle
+ * remains owned by the caller.
+ */
+export declare class SmartSecretSealedFileStore {
+    private readonly options;
+    private readonly masterKey;
+    readonly service: string;
+    readonly storeId: string;
+    readonly directoryPath: string;
+    private lifecycleState;
+    private operationTail;
+    private pendingOperations;
+    private closePromise?;
+    private constructor();
+    static create(optionsArg: ISmartSecretSealedFileStoreOptions): Promise<SmartSecretSealedFileStore>;
+    /** Explicitly discards this store's ciphertext and kernel master key. */
+    static reset(optionsArg: ISmartSecretSealedFileStoreOptions): Promise<SmartSecretSealedFileStore>;
+    getEntry(accountArg: string): Promise<Uint8Array | null>;
+    setEntry(accountArg: string, valueArg: Uint8Array): Promise<void>;
+    deleteEntry(accountArg: string): Promise<boolean>;
+    close(): Promise<void>;
+    private reserveOperation;
+    private withLease;
+    private verifyManifest;
+}

package/dist_ts/smartsecret.sealedfile.error.d.ts

@@ -0,0 +1,17 @@
+export type TSmartSecretSealedFileStoreErrorCode = 'AUTHENTICATION_FAILED' | 'ENVELOPE_INVALID' | 'FILESYSTEM_FAILED' | 'INVALID_ARGUMENT' | 'KERNEL_UNAVAILABLE' | 'MASTER_KEY_CONFLICT' | 'MASTER_KEY_UNAVAILABLE' | 'MUTATION_OUTCOME_UNKNOWN' | 'MUTEX_FAILED' | 'OPERATION_LIMIT_REACHED' | 'SIZE_LIMIT_EXCEEDED' | 'STORE_CLOSED';
+export interface ISmartSecretSealedFileStoreErrorJson {
+    name: 'SmartSecretSealedFileStoreError';
+    code: TSmartSecretSealedFileStoreErrorCode;
+    message: string;
+}
+declare const inspectSymbol: unique symbol;
+/** A code-only error that intentionally retains no secret values or causes. */
+export declare class SmartSecretSealedFileStoreError extends Error {
+    readonly code: TSmartSecretSealedFileStoreErrorCode;
+    readonly cause: undefined;
+    constructor(codeArg: TSmartSecretSealedFileStoreErrorCode);
+    toJSON(): ISmartSecretSealedFileStoreErrorJson;
+    [inspectSymbol](): ISmartSecretSealedFileStoreErrorJson;
+}
+export declare const createSmartSecretSealedFileStoreError: (codeArg: TSmartSecretSealedFileStoreErrorCode) => SmartSecretSealedFileStoreError;
+export {};

package/dist_ts/smartsecret.sealedfile.error.js

@@ -0,0 +1,44 @@
+const inspectSymbol = Symbol.for('nodejs.util.inspect.custom');
+const errorCodes = new Set([
+    'AUTHENTICATION_FAILED',
+    'ENVELOPE_INVALID',
+    'FILESYSTEM_FAILED',
+    'INVALID_ARGUMENT',
+    'KERNEL_UNAVAILABLE',
+    'MASTER_KEY_CONFLICT',
+    'MASTER_KEY_UNAVAILABLE',
+    'MUTATION_OUTCOME_UNKNOWN',
+    'MUTEX_FAILED',
+    'OPERATION_LIMIT_REACHED',
+    'SIZE_LIMIT_EXCEEDED',
+    'STORE_CLOSED',
+]);
+/** A code-only error that intentionally retains no secret values or causes. */
+export class SmartSecretSealedFileStoreError extends Error {
+    constructor(codeArg) {
+        const code = errorCodes.has(codeArg) ? codeArg : 'INVALID_ARGUMENT';
+        const message = `SmartSecret sealed file store operation failed (${code}).`;
+        super(message);
+        this.name = 'SmartSecretSealedFileStoreError';
+        this.code = code;
+        this.stack = `${this.name}: ${message}`;
+        Object.defineProperty(this, 'cause', {
+            configurable: false,
+            enumerable: false,
+            value: undefined,
+            writable: false,
+        });
+    }
+    toJSON() {
+        return {
+            name: 'SmartSecretSealedFileStoreError',
+            code: this.code,
+            message: this.message,
+        };
+    }
+    [inspectSymbol]() {
+        return this.toJSON();
+    }
+}
+export const createSmartSecretSealedFileStoreError = (codeArg) => new SmartSecretSealedFileStoreError(codeArg);
+//# sourceMappingURL=data:application/json;base64,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