@agentxm/registry-auth 0.28.6 → 0.28.7

package/dist/src/credential-store.js

@@ -244,8 +244,16 @@ export const CredentialStoreLive = Layer.effect(CredentialStore, Effect.gen(func
     const persistedCredentialsAllowed = canUsePersistedCredentials(env);
     const readStoredFile = () => withCredentialFileLock(fs, path, homeDir, readCredentialFile(fs, path, homeDir));
     const writeStoredFile = (data) => withCredentialFileLock(fs, path, homeDir, writeCredentialFile(fs, path, homeDir, data));
+    // A read falls back silently. The auth middleware looks a credential up
+    // for every request origin, so a read happens on commands that never
+    // authenticate — `axm upgrade` reads the store on its way to GitHub. On a
+    // host without a reachable keychain that made an environment fact into a
+    // per-request warning on unrelated commands, and the fallback changes
+    // neither the outcome nor the reader's next action. The write below is
+    // where the tier matters, because there a credential lands in a file
+    // instead of the keychain.
     const loadCredentialFile = (registryUrl) => storageTier === "keychain"
-        ? readKeychainCredentialFile(registryUrl).pipe(Effect.catch(() => Effect.logWarning("OS keychain unavailable; using restricted credential file.").pipe(Effect.flatMap(() => readStoredFile()))))
+        ? readKeychainCredentialFile(registryUrl).pipe(Effect.catch(() => Effect.logDebug("OS keychain unavailable; reading the restricted credential file.").pipe(Effect.flatMap(() => readStoredFile()))))
         : readStoredFile();
     // Returns the tier actually used, so the caller only deletes the plaintext
     // fallback file when the keychain write genuinely succeeded — never when we

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentxm/registry-auth",
-  "version": "0.28.6",
+  "version": "0.28.7",
   "description": "AXM registry-auth feature: login, logout, token, identity inspection, device and loopback flows, and credential lifecycle for the axm CLI. Unstable and unsupported — use the axm.sh CLI.",
   "type": "module",
   "license": "FSL-1.1-MIT",
@@ -49,9 +49,9 @@
     "@napi-rs/keyring": "^1.3.0",
     "effect": "4.0.0-rc.112",
     "proper-lockfile": "^4.1.2",
-    "@agentxm/registry-client": "^0.28.6",
-    "@agentxm/registry-protocol": "^0.28.6",
-    "@agentxm/extension-model": "^0.28.6"
+    "@agentxm/registry-protocol": "^0.28.7",
+    "@agentxm/extension-model": "^0.28.7",
+    "@agentxm/registry-client": "^0.28.7"
   },
   "devDependencies": {
     "@effect/platform-node": "4.0.0-rc.112",