Build on the supported package contract
Use @absolutejs/secure-transfer-local through its supported public entry points.
@absolutejs/secure-transfer-localv0.2.2betaPlatform & InfraAtomic local-filesystem storage adapter for @absolutejs/secure-transfer.
bun add @absolutejs/secure-transfer-localLocal-filesystem SecureTransferLifecycleStore for development, tests, and single-host deployments.
Records are atomically installed with a same-filesystem hard link. Existing records are never overwritten. Each record carries a private binary expiry header so an interrupted write cannot leave ciphertext without cleanup data.
Run sweepExpired() on a schedule and repeat while truncated is true. The adapter validates transfer IDs and never follows caller-controlled paths. Expiry-stamped temporary writes are swept too, including partial files left by a process crash before the atomic link.
The receipt store persists only bytes already protected by a SecureTransferReceiptProtector. It uses cross-process lock directories, lease expiry, version checks, and atomic rename. Run sweepExpiredReceipts() for abandoned resumable-upload state.
The revocation store creates immutable SHA-256 descriptor tombstones without placing transfer IDs in paths or plaintext files. Use a policy root protected from ciphertext-storage credentials. Run sweepExpiredRevocations() repeatedly with its cursor only after each tombstone's required retention has ended.
Outcomes
Use @absolutejs/secure-transfer-local through its supported public entry points.
Hardening checklist
Follow in order
# @absolutejs/secure-transfer-local
import {
localProtectedReceiptStore,
localSecureTransferRevocationStore,
localSecureTransferStore,
} from "@absolutejs/secure-transfer-local";
const store = localSecureTransferStore({ root: "/srv/private/ciphertext" });
const receiptStore = localProtectedReceiptStore({
root: "/srv/private/ciphertext",
});
const revocations = localSecureTransferRevocationStore({
root: "/srv/private/policy",
});Supported entry points declared by this package manifest.
Package entry point declared in package.json.
Scripts declared by this package manifest.
Search the declarations exported by the current package type files. Expand a symbol to inspect its source-backed signature.