@treeseed/sdk 0.12.62 → 0.13.0-rc.10

package/dist/operations/services/key-agent.d.ts

@@ -1,137 +0,0 @@
-export declare const TRESEED_MACHINE_KEY_PASSPHRASE_ENV = "TREESEED_KEY_PASSPHRASE";
-export declare const TRESEED_KEY_AGENT_IDLE_TIMEOUT_MS: number;
-export declare const TREESEED_KEY_AGENT_IDLE_TIMEOUT_MS: number;
-export declare const TRESEED_WRAPPED_MACHINE_KEY_VERSION = 2;
-export declare const TRESEED_WRAPPED_MACHINE_KEY_KIND = "treeseed-wrapped-machine-key";
-export declare const TREESEED_MACHINE_KEY_PASSPHRASE_ENV = "TREESEED_KEY_PASSPHRASE";
-export type TreeseedWrappedMachineKey = {
-    version: 2;
-    kind: typeof TRESEED_WRAPPED_MACHINE_KEY_KIND;
-    createdAt: string;
-    updatedAt: string;
-    kdf: {
-        algorithm: 'scrypt';
-        salt: string;
-        N: number;
-        r: number;
-        p: number;
-        keyLength: number;
-    };
-    wrappedKey: {
-        algorithm: 'aes-256-gcm';
-        iv: string;
-        tag: string;
-        ciphertext: string;
-    };
-    fingerprint: string;
-};
-export type TreeseedKeyAgentStatus = {
-    running: boolean;
-    unlocked: boolean;
-    wrappedKeyPresent: boolean;
-    migrationRequired: boolean;
-    keyPath: string;
-    socketPath: string;
-    idleTimeoutMs: number;
-    idleRemainingMs: number;
-};
-export type TreeseedKeyAgentDiagnostics = {
-    socketPath: string;
-    pidPath: string;
-    socketPresent: boolean;
-    socketKind: 'missing' | 'socket' | 'fifo' | 'file' | 'directory' | 'other';
-    socketConnectable: boolean;
-    healthOk: boolean;
-    daemonPid: number | null;
-    lastError: string | null;
-};
-export type TreeseedKeyAgentCommand = {
-    command: 'health';
-    keyPath: string;
-    socketPath: string;
-    idleTimeoutMs: number;
-} | {
-    command: 'status';
-    keyPath: string;
-    socketPath: string;
-    idleTimeoutMs: number;
-} | {
-    command: 'unlock';
-    keyPath: string;
-    socketPath: string;
-    idleTimeoutMs: number;
-    passphrase: string;
-    createIfMissing?: boolean;
-    allowMigration?: boolean;
-} | {
-    command: 'lock';
-    keyPath: string;
-    socketPath: string;
-    idleTimeoutMs: number;
-} | {
-    command: 'touch';
-    keyPath: string;
-    socketPath: string;
-    idleTimeoutMs: number;
-} | {
-    command: 'get-machine-key';
-    keyPath: string;
-    socketPath: string;
-    idleTimeoutMs: number;
-};
-export type TreeseedKeyAgentResponse = {
-    ok: boolean;
-    code?: string;
-    message?: string;
-    status?: TreeseedKeyAgentStatus;
-    machineKey?: string;
-    diagnostics?: TreeseedKeyAgentDiagnostics;
-};
-export declare class TreeseedKeyAgentError extends Error {
-    code: 'locked' | 'unlock_required' | 'unlock_failed' | 'wrapped_key_missing' | 'wrapped_key_migration_required' | 'interactive_required' | 'daemon_unavailable' | 'corrupt_wrapped_key' | 'permission_denied' | 'protocol_error';
-    details?: Record<string, unknown>;
-    constructor(code: TreeseedKeyAgentError['code'], message: string, details?: Record<string, unknown>);
-}
-type TreeseedKeyAgentSessionState = {
-    machineKey: Buffer | null;
-    lastTouchedAt: number;
-    idleTimeoutMs: number;
-};
-export declare function unwrapMachineKey(payload: TreeseedWrappedMachineKey, passphrase: string): Buffer<ArrayBuffer>;
-export declare function readWrappedMachineKeyFile(keyPath: string): {
-    exists: boolean;
-    wrapped: null;
-    plaintextLegacy: null;
-    migrationRequired: boolean;
-} | {
-    exists: boolean;
-    wrapped: TreeseedWrappedMachineKey;
-    plaintextLegacy: null;
-    migrationRequired: boolean;
-} | {
-    exists: boolean;
-    wrapped: null;
-    plaintextLegacy: Buffer<ArrayBuffer>;
-    migrationRequired: boolean;
-};
-export declare function writeWrappedMachineKeyFile(keyPath: string, payload: TreeseedWrappedMachineKey): void;
-export declare function replaceWrappedMachineKey(keyPath: string, machineKey: Buffer, passphrase: string): TreeseedWrappedMachineKey;
-export declare function getTreeseedKeyAgentPaths(): {
-    homeRoot: string;
-    runtimeRoot: string;
-    socketPath: string;
-    pidPath: string;
-};
-export declare function inspectTreeseedKeyAgentDiagnostics(socketPath: string): Promise<TreeseedKeyAgentDiagnostics>;
-export declare function handleTreeseedKeyAgentCommand(command: TreeseedKeyAgentCommand, session: TreeseedKeyAgentSessionState): TreeseedKeyAgentResponse;
-export declare function requestTreeseedKeyAgent(command: TreeseedKeyAgentCommand): Promise<TreeseedKeyAgentResponse>;
-export declare function startTreeseedKeyAgentServer(options: {
-    keyPath: string;
-    socketPath?: string;
-    idleTimeoutMs?: number;
-}): Promise<void>;
-export declare function assertTreeseedKeyAgentResponse(response: TreeseedKeyAgentResponse, fallback?: string): TreeseedKeyAgentResponse;
-export declare function rotateWrappedMachineKeyPassphrase(keyPath: string, machineKey: Buffer, passphrase: string): TreeseedWrappedMachineKey;
-export declare function migrateLegacyProjectMachineKeyToWrapped(keyPath: string, legacyKeyPath: string, passphrase: string): TreeseedWrappedMachineKey;
-export declare function machineKeysEqual(left: Buffer, right: Buffer): boolean;
-export {};