@securecoms/agent-bridge 0.34.0 → 0.35.0

package/dist/outbox.d.ts

@@ -0,0 +1,42 @@
+export declare const VAULT_OUTBOX_DIRNAME = "vault-outbox";
+export declare class PathOutsideOutboxError extends Error {
+    constructor();
+}
+/** The outbox as observed at start(); every read must still see exactly this directory. */
+export interface OutboxPin {
+    /** The configured path (what the authenticated GET /v1/vault-outbox reports). */
+    readonly dir: string;
+    /** realpath of the outbox at pin time; the open path is built from this. */
+    readonly real: string;
+    readonly dev: number;
+    readonly ino: number;
+}
+/** A file read from the outbox; `consumeOutboxFile` deletes exactly this inode. */
+export interface OutboxRead {
+    readonly bytes: Uint8Array;
+    readonly path: string;
+    readonly dev: number;
+    readonly ino: number;
+}
+/**
+ * Create the outbox 0700 if missing and pin it. An existing outbox owned by
+ * this uid is tightened to 0700; one that is a symlink, not a directory, or
+ * owned by another uid is refused.
+ */
+export declare function ensureOutbox(dir: string): OutboxPin;
+/**
+ * Read `callerPath` iff it is a regular file directly inside the pinned
+ * outbox. A relative `callerPath` resolves against the outbox. A null pin
+ * (no data dir, or the outbox could not be created at start) refuses every
+ * path: fail closed.
+ */
+export declare function readOutboxFile(pin: OutboxPin | null, callerPath: string): Promise<OutboxRead>;
+/**
+ * Delete an uploaded file from the outbox, but only if the outbox is still
+ * the pinned directory (same checks as a read) and the name still holds the
+ * inode that was read (a file swapped in after the read is left alone). The
+ * unlink goes through the pinned realpath. A window remains between these
+ * lstats and the unlink (Node has no unlinkat): narrowed, not closed.
+ * Returns whether it was deleted; never throws (the upload already happened).
+ */
+export declare function consumeOutboxFile(pin: OutboxPin, read: OutboxRead): Promise<boolean>;

package/dist/version.d.ts

@@ -1 +1 @@
-export declare const BRIDGE_VERSION = "0.34.0";
+export declare const BRIDGE_VERSION = "0.35.0";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@securecoms/agent-bridge",
-  "version": "0.34.0",
+  "version": "0.35.0",
   "type": "module",
   "engines": {
     "node": ">=24"