@aliyunrds/ctxdb 1.0.8 → 1.0.9-beta.0

package/README.md

@@ -11,7 +11,7 @@ Unified access layer for RDS ContextDatabase. One `ctxdb` CLI (memory + KB ops),
 | **claude** | ✅ UserPromptSubmit + Stop + SessionStart | `~/.claude/skills/ctxdb/` | hooks-driven (auto capture/recall) |
 | **opencode** | Plugin shim (`~/.config/opencode/plugins/ctxdb.ts`) | `~/.config/opencode/skills/` | in-process plugin (auto capture/recall + KB catalog injection) |
 | **hermes** | ✅ `pre_llm_call` + `post_llm_call` | `~/.hermes/skills/` | shell hooks (auto capture/recall + first-turn warmup) |
-| **workbuddy** | ✅ UserPromptSubmit + Stop + SessionStart | `~/.workbuddy-ai/skills/ctxdb/` | hooks-driven (auto capture/recall); Claude-Code-isomorphic (exec form) |
+| **workbuddy** | ✅ UserPromptSubmit + Stop + SessionStart | `~/.workbuddy/skills/` and `~/.workbuddy-ai/skills/` (existing homes) | CodeBuddy command hooks (complete shell command, no separate `args`) |
 
 Config and logs live under `~/.ctxdb/`. `~/.ctxdb/ctxdb.json` is one file, but runtime config is isolated per agent under `agents.qoder`, `agents.qoderwork`, `agents.qwenwork`, `agents.codex`, `agents.claude`, `agents.opencode`, `agents.hermes`, and `agents.workbuddy`. (Pre-2026-05-23 installs used `~/.ctxdb.json` at the home root; running `ctxdb setup --agent <name>` migrates the file into the selected agent section.)
 
@@ -105,7 +105,11 @@ URLs never come from server discovery. When a console URL is available, login op
 browser and keeps polling. It always prints the URL and code; if opening fails, use that URL
 manually. Pass `--no-browser` to print the link without opening a browser.
 
-POSIX uses private files/directories; Windows validates an owner-only ACL using local PowerShell.
+Credential storage trusts the user's local environment and relies on OS access control.
+New POSIX directories/files request modes `0700`/`0600`; Windows uses normal inherited permissions.
+Reads and writes do not reject an accessible file based on its owner, mode bits or ACL, and do not
+invoke PowerShell to inspect or change permissions. File type/symlink checks, JSON validation,
+atomic replacement and concurrency locks still apply.
 Native Windows acceptance remains separate from the macOS local test record.
 
 ### Internal browser-login distribution
@@ -117,7 +121,7 @@ and `ctxdb auth status`. The default login uses a browser loopback callback;
 provider-neutral protocol and use PKCE. The selected Workspace is represented
 by the returned API key, so the CLI does not persist a separate Workspace id.
 
-Internal login stores its single active connection in owner-only
+Internal login stores its single active connection in
 `~/.ctxdb/credentials.json`. It then runs the normal Agent setup lifecycle
 without writing an `api_key` field into the Agent or default profile; an
 existing field in either updated profile is removed. At runtime this managed
@@ -303,7 +307,7 @@ ctxdb setup --agent codex --api-key 'ctxdb-new-...'
 ctxdb status --agent codex --json
 ```
 
-Setup first checks that the target agent home exists (`~/.qoder`, `~/.qoderwork`, `~/.qwenwork`, `~/.codex`, `~/.claude`, or `~/.workbuddy-ai`; the declared CN variant home also satisfies this check). Setup writes hooks and skills only into homes that already exist, so a CN-only install does not create the international product home, and vice versa. If no home exists, install or start that agent once before running `ctxdb setup --agent <name>`. OpenCode and Hermes are config-dir style: setup creates `~/.config/opencode` / `~/.hermes` when they are missing.
+Setup first checks that the target agent home exists (`~/.qoder`, `~/.qoderwork`, `~/.qwenwork`, `~/.codex`, `~/.claude`, or either WorkBuddy home: `~/.workbuddy` / `~/.workbuddy-ai`; other declared CN variant homes also satisfy this check). Setup writes hooks and skills into every existing home, so a CN-only install does not create the international product home, and vice versa. If no home exists, install or start that agent once before running `ctxdb setup --agent <name>`. OpenCode and Hermes are config-dir style: setup creates `~/.config/opencode` / `~/.hermes` when they are missing.
 
 For **qoder**, **qoderwork**, **qwenwork**, **codex**, **claude**, and **workbuddy**, restart the harness (CLI: just exit + restart; app: Cmd+R or quit/relaunch) so it picks up the new hooks/skill. For **codex**, setup also writes `[features].hooks = true` into `~/.codex/config.toml` (creating the file if missing) — Codex won't fire any hook entries without it. On first use Codex may prompt you to trust the new hook commands. For **opencode**, restart OpenCode so it loads `~/.config/opencode/plugins/ctxdb.ts`. For **hermes**, setup also checks `~/.hermes/shell-hooks-allowlist.json`; it reports setup as incomplete until both ctxdb hook commands are approved.
 
@@ -870,7 +874,7 @@ ctxdb uninstall --purge-logs     # also deletes ~/.ctxdb/logs/
 
 ### What uninstall does (and doesn't) touch
 
-- **Hook entries in `~/.qoder/settings.json`, `~/.qoderwork/settings.json`, `~/.qwenwork/settings.json`, `~/.codex/hooks.json`, `~/.claude/settings.json`, `~/.workbuddy-ai/settings.json`, and `~/.hermes/config.yaml`**: stripped precisely by marker (`_ctxdb = @aliyunrds/ctxdb`, plus legacy keys `_ctxdbQoder` / `_ctxdbPackage` and the legacy `@aliyunrds/ctxdb-qoder` value for installs predating the unified marker). Any hooks you added yourself stay. A timestamped `*.bak-ctxdb-<TS>` is written before each modification (rotation keeps the 5 most recent).
+- **Hook entries in `~/.qoder/settings.json`, `~/.qoderwork/settings.json`, `~/.qwenwork/settings.json`, `~/.codex/hooks.json`, `~/.claude/settings.json`, `~/.workbuddy/settings.json`, `~/.workbuddy-ai/settings.json`, and `~/.hermes/config.yaml`**: stripped precisely by marker (`_ctxdb = @aliyunrds/ctxdb`, plus legacy keys `_ctxdbQoder` / `_ctxdbPackage` and the legacy `@aliyunrds/ctxdb-qoder` value for installs predating the unified marker). Any hooks you added yourself stay. A timestamped `*.bak-ctxdb-<TS>` is written before each modification (rotation keeps the 5 most recent).
 - **Skill directories**: `~/.<agent>/skills/ctxdb/` for each set-up agent, plus legacy dirs (`ctxdb-qoder`, `rds-ctxdb-qoder`, `qoder-ctxdb`) under `~/.qoder/skills/` from older package names.
 - **`~/.ctxdb/` state**: only with `--purge-config` / `--purge-logs` / `--purge-all`. Defensive: `--purge-all` removes the `~/.ctxdb/` root only if it's empty after the named files are deleted (won't blanket-rm an unknown directory).
 - **`~/.codex/config.toml` `[features].hooks`**: **NOT** reverted. Setup adds `hooks = true` so Codex will fire ctxdb's hook entries; uninstall leaves the flag alone because (a) the user may have wanted it on for non-ctxdb hooks, and (b) it's harmless when `~/.codex/hooks.json` is empty. If you want it off, edit the file by hand.

package/dist/{chunk-3FAQREIU.js → chunk-2U7G6UXE.js}

@@ -456,7 +456,8 @@ function agentHomeDir(agent, home = homedir2()) {
 var AGENT_VARIANT_HOMES = {
   qoder: [".qoder-cn"],
   qoderwork: [".qoderworkcn"],
-  qwenwork: [".qwenworkcn"]
+  qwenwork: [".qwenworkcn"],
+  workbuddy: [".workbuddy"]
 };
 function agentHomeDirs(agent, home = homedir2()) {
   const primary = agentHomeDir(agent, home);

package/dist/{chunk-MWAFAK5M.js → chunk-7TPYIT63.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   configDir
-} from "./chunk-3FAQREIU.js";
+} from "./chunk-2U7G6UXE.js";
 
 // src/lib/circuit.ts
 import { statSync, writeFileSync, unlinkSync, mkdirSync, readdirSync, readFileSync } from "fs";

package/dist/{chunk-RRDQCZJ4.js → chunk-FD3IPF6R.js}

@@ -2,10 +2,10 @@
 import {
   fetchKbCatalogBlock,
   recallTurn
-} from "./chunk-AAWG5SPO.js";
+} from "./chunk-V7IZ2UYJ.js";
 import {
   debug
-} from "./chunk-3FAQREIU.js";
+} from "./chunk-2U7G6UXE.js";
 
 // src/lib/warmup-recall.ts
 import { execSync } from "child_process";

package/dist/{chunk-YTCXHO4F.js → chunk-N5JGS5EC.js}

@@ -4,13 +4,13 @@ import {
   isConnectionError,
   resetCircuit,
   tripCircuit
-} from "./chunk-MWAFAK5M.js";
+} from "./chunk-7TPYIT63.js";
 import {
   CtxdbError,
   debug,
   isDataApiReady,
   isDebug
-} from "./chunk-3FAQREIU.js";
+} from "./chunk-2U7G6UXE.js";
 
 // src/lib/capture-orchestrator.ts
 import {

package/dist/{chunk-LZD55CWE.js → chunk-T5ZJEPR4.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   CtxdbError
-} from "./chunk-3FAQREIU.js";
+} from "./chunk-2U7G6UXE.js";
 
 // src/lib/kb.ts
 import {

package/dist/{chunk-AH2QEUK4.js → chunk-U4DRH4NZ.js}

@@ -2,7 +2,7 @@
 import {
   fetchKbCatalogBlock,
   recallTurn
-} from "./chunk-AAWG5SPO.js";
+} from "./chunk-V7IZ2UYJ.js";
 
 // src/lib/user-prompt-submit-compose.ts
 async function composeUserPromptSubmit(cfg, agent, client, prompt, sessionId = null) {

package/dist/{chunk-AAWG5SPO.js → chunk-V7IZ2UYJ.js}

@@ -1,17 +1,17 @@
 #!/usr/bin/env node
 import {
   listKnowledgeBases
-} from "./chunk-LZD55CWE.js";
+} from "./chunk-T5ZJEPR4.js";
 import {
   isConnectionError,
   resetCircuit,
   tripCircuit
-} from "./chunk-MWAFAK5M.js";
+} from "./chunk-7TPYIT63.js";
 import {
   CtxdbError,
   isDataApiReady,
   resolveDataApiCredential
-} from "./chunk-3FAQREIU.js";
+} from "./chunk-2U7G6UXE.js";
 
 // src/lib/kb-catalog.ts
 function sanitizeKeyEntities(raw) {

package/dist/cli/main.js

@@ -31,7 +31,7 @@ import {
   uploadFile,
   uploadText,
   validateLocalFile
-} from "../chunk-LZD55CWE.js";
+} from "../chunk-T5ZJEPR4.js";
 import {
   AGENT_CHOICES,
   CtxdbError,
@@ -61,7 +61,7 @@ import {
   save,
   updateConfiguredDebug,
   writeInstalledPkgVersion
-} from "../chunk-3FAQREIU.js";
+} from "../chunk-2U7G6UXE.js";
 import {
   beginUpdateNotification,
   completeUpdateNotification,
@@ -402,6 +402,17 @@ import { fileURLToPath } from "url";
 import { execFileSync } from "child_process";
 import { parse as parseYaml, stringify as stringifyYaml } from "yaml";
 import { setupAuthentication, oauthProfileStatus, validateDataBaseUrl } from "@aliyunrds/ctxdb-shared";
+
+// src/setup/workbuddy-command.ts
+function workbuddyHookCommand(nodePath, scriptPath, platform2 = process.platform) {
+  const quotePath = (path) => {
+    const normalized = platform2 === "win32" ? path.replace(/\\/g, "/") : path;
+    return `"${normalized.replace(/[\\"$`]/g, "\\$&")}"`;
+  };
+  return `${quotePath(nodePath)} ${quotePath(scriptPath)} --agent=workbuddy`;
+}
+
+// src/setup/installer.ts
 var PACKAGE_UNINSTALL_TARGETS = DISTRIBUTION_MANIFEST.id === "internal" ? DISTRIBUTION_MANIFEST.packageName : `${PACKAGE_NAME} @aliyunrds/ctxdb-shared`;
 var UNINSTALL_NPM_HINT = `To also remove the npm binaries: \`npm uninstall -g ${PACKAGE_UNINSTALL_TARGETS}\``;
 var UNINSTALL_ORDER_HINT = `When you eventually want to uninstall: run \`ctxdb uninstall --purge-all\` FIRST, then \`npm uninstall -g ${PACKAGE_UNINSTALL_TARGETS}\`. (npm 7+ removed uninstall lifecycle hooks, so the order matters \u2014 otherwise agent settings.json hooks + ~/.ctxdb/ residue stay behind.)`;
@@ -1301,8 +1312,8 @@ function checkHookNodePaths(agent) {
             const cmd = h.command;
             let nodePath;
             if (cmd.startsWith('"')) {
-              const closeQuote = cmd.indexOf('"', 1);
-              if (closeQuote > 1) nodePath = cmd.slice(1, closeQuote);
+              const quoted = /^"((?:\\.|[^"\\])*)"/.exec(cmd);
+              if (quoted) nodePath = quoted[1].replace(/\\([\\"$`])/g, "$1");
             } else {
               const parts = cmd.split(" ");
               if (parts.length >= 2 && !parts[0].endsWith(".js") && !parts[0].endsWith(".ts") && (parts[0].includes("/") || parts[0].includes("\\"))) {
@@ -1664,9 +1675,9 @@ var LEGACY_MARKER_VALUES = ["@aliyunrds/ctxdb-qoder"];
 var TOOL_SCOPED_EVENTS = /* @__PURE__ */ new Set(["PreToolUse", "PostToolUse"]);
 function appendOne(hooks, event, command, agent) {
   if (!Array.isArray(hooks[event])) hooks[event] = [];
-  const useExecForm = agent === "claude" || agent === "workbuddy";
+  const useExecForm = agent === "claude";
   const cmdRunner = agent === "qoder";
-  const shellCmd = process.platform === "win32" ? cmdRunner ? `node ${command.replace(/\\/g, "/")} --agent=${agent}` : `"${process.execPath.replace(/\\/g, "/")}" "${command.replace(/\\/g, "/")}" --agent=${agent}` : `${process.execPath} ${command} --agent=${agent}`;
+  const shellCmd = agent === "workbuddy" ? workbuddyHookCommand(process.execPath, command) : process.platform === "win32" ? cmdRunner ? `node ${command.replace(/\\/g, "/")} --agent=${agent}` : `"${process.execPath.replace(/\\/g, "/")}" "${command.replace(/\\/g, "/")}" --agent=${agent}` : `${process.execPath} ${command} --agent=${agent}`;
   const dup = hooks[event].some(
     (entry2) => Array.isArray(entry2?.hooks) && entry2.hooks.some(
       (h) => h?.type === "command" && (Array.isArray(h.args) && h.args[0] === command || typeof h.command === "string" && h.command.includes(command))

package/dist/hooks/hermes-post-llm-call.js

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import {
   captureParsedMessages
-} from "../chunk-YTCXHO4F.js";
-import "../chunk-MWAFAK5M.js";
+} from "../chunk-N5JGS5EC.js";
+import "../chunk-7TPYIT63.js";
 import {
   HttpClient,
   agentFromArgvWithFallback,
@@ -10,7 +10,7 @@ import {
   load,
   resolveDataApiCredential,
   setDebug
-} from "../chunk-3FAQREIU.js";
+} from "../chunk-2U7G6UXE.js";
 import {
   shouldSkipHooks
 } from "../chunk-5ML4VSXN.js";

package/dist/hooks/hermes-pre-llm-call.js

@@ -2,17 +2,17 @@
 import {
   HOOK_TIMEOUT_MS,
   composeSessionStart
-} from "../chunk-RRDQCZJ4.js";
+} from "../chunk-FD3IPF6R.js";
 import {
   composeUserPromptSubmit
-} from "../chunk-AH2QEUK4.js";
+} from "../chunk-U4DRH4NZ.js";
 import {
   fetchKbCatalogBlock
-} from "../chunk-AAWG5SPO.js";
-import "../chunk-LZD55CWE.js";
+} from "../chunk-V7IZ2UYJ.js";
+import "../chunk-T5ZJEPR4.js";
 import {
   isCircuitOpen
-} from "../chunk-MWAFAK5M.js";
+} from "../chunk-7TPYIT63.js";
 import {
   HttpClient,
   agentFromArgvWithFallback,
@@ -20,7 +20,7 @@ import {
   load,
   resolveDataApiCredential,
   setDebug
-} from "../chunk-3FAQREIU.js";
+} from "../chunk-2U7G6UXE.js";
 import {
   shouldSkipHooks
 } from "../chunk-5ML4VSXN.js";

package/dist/hooks/session-start.js

@@ -3,12 +3,12 @@ import {
   HOOK_TIMEOUT_MS,
   composeSessionStart,
   formatSessionStartStdout
-} from "../chunk-RRDQCZJ4.js";
-import "../chunk-AAWG5SPO.js";
-import "../chunk-LZD55CWE.js";
+} from "../chunk-FD3IPF6R.js";
+import "../chunk-V7IZ2UYJ.js";
+import "../chunk-T5ZJEPR4.js";
 import {
   isCircuitOpen
-} from "../chunk-MWAFAK5M.js";
+} from "../chunk-7TPYIT63.js";
 import {
   HttpClient,
   agentFromArgvWithFallback,
@@ -16,7 +16,7 @@ import {
   load,
   resolveDataApiCredential,
   setDebug
-} from "../chunk-3FAQREIU.js";
+} from "../chunk-2U7G6UXE.js";
 import {
   shouldSkipHooks
 } from "../chunk-5ML4VSXN.js";

package/dist/hooks/stop.js

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import {
   captureTurn
-} from "../chunk-YTCXHO4F.js";
-import "../chunk-MWAFAK5M.js";
+} from "../chunk-N5JGS5EC.js";
+import "../chunk-7TPYIT63.js";
 import {
   HttpClient,
   agentFromArgvWithFallback,
@@ -10,7 +10,7 @@ import {
   load,
   resolveDataApiCredential,
   setDebug
-} from "../chunk-3FAQREIU.js";
+} from "../chunk-2U7G6UXE.js";
 import {
   shouldSkipHooks
 } from "../chunk-5ML4VSXN.js";

package/dist/hooks/user-prompt-submit.js

@@ -2,12 +2,12 @@
 import {
   composeUserPromptSubmit,
   formatUserPromptSubmitStdout
-} from "../chunk-AH2QEUK4.js";
-import "../chunk-AAWG5SPO.js";
-import "../chunk-LZD55CWE.js";
+} from "../chunk-U4DRH4NZ.js";
+import "../chunk-V7IZ2UYJ.js";
+import "../chunk-T5ZJEPR4.js";
 import {
   isCircuitOpen
-} from "../chunk-MWAFAK5M.js";
+} from "../chunk-7TPYIT63.js";
 import {
   HttpClient,
   agentFromArgvWithFallback,
@@ -15,7 +15,7 @@ import {
   load,
   resolveDataApiCredential,
   setDebug
-} from "../chunk-3FAQREIU.js";
+} from "../chunk-2U7G6UXE.js";
 import {
   shouldSkipHooks
 } from "../chunk-5ML4VSXN.js";

package/dist/opencode/index.js

@@ -1028,88 +1028,28 @@ import { randomBytes as randomBytes3 } from "crypto";
 // ../shared/src/credentials/local-credential-provider.ts
 import { createHash as createHash2, randomBytes as randomBytes2 } from "crypto";
 import { homedir as homedir2 } from "os";
-import { join as join3 } from "path";
+import { join as join2 } from "path";
 
 // ../shared/src/credentials/storage.ts
 import { constants, closeSync as closeSync2, existsSync as existsSync2, fstatSync, fsyncSync, lstatSync, mkdirSync as mkdirSync2, openSync as openSync2, readFileSync as readFileSync2, renameSync as renameSync2, unlinkSync, writeFileSync } from "fs";
 import { randomBytes, createHash } from "crypto";
 import { dirname as dirname2 } from "path";
 import { setTimeout as delay2 } from "timers/promises";
-
-// ../shared/src/windows-private-storage.ts
-import { execFileSync } from "child_process";
-import { join as join2 } from "path";
-var SCRIPT = `
-$ErrorActionPreference = 'Stop'
-$path = $env:CTXDB_PRIVATE_STORAGE_PATH
-$sid = [System.Security.Principal.WindowsIdentity]::GetCurrent().User
-$item = Get-Item -LiteralPath $path -Force
-if (($item.Attributes -band [System.IO.FileAttributes]::ReparsePoint) -ne 0) { throw 'reparse' }
-if ($env:CTXDB_PRIVATE_STORAGE_INITIALIZE -eq '1') {
-  if (-not $item.PSIsContainer) { throw 'not directory' }
-  $acl = [System.Security.AccessControl.DirectorySecurity]::new()
-  $acl.SetOwner($sid)
-  $acl.SetAccessRuleProtection($true, $false)
-  $rule = [System.Security.AccessControl.FileSystemAccessRule]::new($sid, 'FullControl', 'ContainerInherit,ObjectInherit', 'None', 'Allow')
-  $acl.AddAccessRule($rule)
-  Set-Acl -LiteralPath $path -AclObject $acl
-}
-$acl = Get-Acl -LiteralPath $path
-if ($acl.GetOwner([System.Security.Principal.SecurityIdentifier]).Value -ne $sid.Value) { throw 'owner' }
-$self = $false
-foreach ($rule in $acl.GetAccessRules($true, $true, [System.Security.Principal.SecurityIdentifier])) {
-  if ($rule.AccessControlType -eq 'Allow') {
-    if ($rule.IdentityReference.Value -ne $sid.Value) { throw 'other principal' }
-    if (($rule.FileSystemRights -band [System.Security.AccessControl.FileSystemRights]::FullControl) -eq [System.Security.AccessControl.FileSystemRights]::FullControl) { $self = $true }
-  }
-}
-if (-not $self) { throw 'missing owner access' }
-Write-Output 'private'
-`;
-function checkWindowsPrivateStorage(path, initialize, run = execFileSync) {
-  const systemRoot = process.env.SystemRoot;
-  if (!systemRoot) throw new Error("Private Windows credential storage could not be verified.");
-  try {
-    const result = run(
-      join2(systemRoot, "System32", "WindowsPowerShell", "v1.0", "powershell.exe"),
-      ["-NoProfile", "-NonInteractive", "-EncodedCommand", Buffer.from(SCRIPT, "utf16le").toString("base64")],
-      {
-        env: { ...process.env, CTXDB_PRIVATE_STORAGE_PATH: path, CTXDB_PRIVATE_STORAGE_INITIALIZE: initialize ? "1" : "0" },
-        encoding: "utf8",
-        windowsHide: true,
-        timeout: 1e4,
-        maxBuffer: 4096,
-        stdio: ["ignore", "pipe", "pipe"]
-      }
-    );
-    if (String(result).trim() !== "private") throw new Error();
-  } catch {
-    throw new Error("Private Windows credential storage could not be verified.");
-  }
-}
-
-// ../shared/src/credentials/storage.ts
-function privatePath(path, directory = false) {
+function assertStoragePath(path, directory = false) {
   const s = lstatSync(path);
-  if (s.isSymbolicLink() || (directory ? !s.isDirectory() : !s.isFile())) throw new Error("credentials: storage is not private or is invalid");
-  if (process.platform === "win32") {
-    checkWindowsPrivateStorage(path, false);
-    return;
-  }
-  if (s.mode & 63 || process.getuid && s.uid !== process.getuid()) throw new Error("credentials: storage must be private and owner-only (run chmod 600 on credentials.json)");
+  if (s.isSymbolicLink() || (directory ? !s.isDirectory() : !s.isFile())) throw new Error("credentials: invalid storage path");
 }
 function prepareStorage(path) {
   const dir = dirname2(path);
   if (!existsSync2(dir)) {
     mkdirSync2(dir, { recursive: true, mode: 448 });
-    if (process.platform === "win32") checkWindowsPrivateStorage(dir, true);
   }
-  privatePath(dir, true);
+  assertStoragePath(dir, true);
 }
-function readPrivate(path) {
+function readCredentialFile(path) {
   if (!existsSync2(path)) return void 0;
-  privatePath(dirname2(path), true);
-  privatePath(path);
+  assertStoragePath(dirname2(path), true);
+  assertStoragePath(path);
   const fd = openSync2(path, constants.O_RDONLY | (constants.O_NOFOLLOW ?? 0));
   try {
     const stat = fstatSync(fd);
@@ -1121,7 +1061,7 @@ function readPrivate(path) {
 }
 function atomicCredentialWrite(path, value) {
   prepareStorage(path);
-  if (existsSync2(path)) privatePath(path);
+  if (existsSync2(path)) assertStoragePath(path);
   const temp = path + "." + randomBytes(12).toString("hex") + ".tmp";
   let fd;
   try {
@@ -1203,7 +1143,7 @@ var ACTIVE_CONTEXTDB_CREDENTIAL = "contextdb/active";
 
 // ../shared/src/credentials/local-credential-provider.ts
 function defaultCredentialsPath() {
-  return join3(homedir2(), ".ctxdb", "credentials.json");
+  return join2(homedir2(), ".ctxdb", "credentials.json");
 }
 var object2 = (v) => !!v && typeof v === "object" && !Array.isArray(v);
 var fail = (message) => {
@@ -1239,7 +1179,7 @@ function validate(key, raw) {
   if (raw.kind === "api-key") validateApi(raw, key === ACTIVE_CONTEXTDB_CREDENTIAL);
 }
 function readDocument(path) {
-  const bytes = readPrivate(path);
+  const bytes = readCredentialFile(path);
   if (bytes === void 0) return { version: 2, records: {} };
   let doc;
   try {
@@ -1421,7 +1361,7 @@ var OAuthCredentialError = class extends Error {
       login_required: "OAuth session needs login; run ctxdb login for this profile.",
       credential_busy: "OAuth credential is busy. If its previous process crashed, run ctxdb login for a new credential.",
       invalid_profile: "OAuth credential does not belong to this profile.",
-      unsafe_storage: "OAuth credential storage is not private or is invalid."
+      unsafe_storage: "OAuth credential storage is inaccessible or invalid."
     };
     super(messages[code]);
     this.name = "OAuthCredentialError";
@@ -1664,7 +1604,7 @@ function authorization(session) {
 }
 
 // ../shared/src/oauth-profile.ts
-import { dirname as dirname4, join as join4, resolve } from "path";
+import { dirname as dirname4, join as join3, resolve } from "path";
 
 // ../shared/src/auth-config.ts
 import { closeSync as closeSync3, existsSync as existsSync3, fsyncSync as fsyncSync2, mkdirSync as mkdirSync3, openSync as openSync3, readFileSync as readFileSync3, renameSync as renameSync3, unlinkSync as unlinkSync2, writeFileSync as writeFileSync2 } from "fs";
@@ -1722,7 +1662,7 @@ function oauthProfile(reference, configPath, profile, baseUrl) {
     reference,
     profile,
     configPath: path,
-    credentialsPath: join4(dirname4(path), "credentials.json"),
+    credentialsPath: join3(dirname4(path), "credentials.json"),
     baseUrl: normalizeCoreOrigin(baseUrl)
   };
 }
@@ -1789,10 +1729,10 @@ var OAuthProfileProvider = class {
 
 // ../shared/src/login-bindings.ts
 import { randomBytes as randomBytes5 } from "crypto";
-import { dirname as dirname6, join as join6 } from "path";
+import { dirname as dirname6, join as join5 } from "path";
 
 // ../shared/src/data-auth.ts
-import { dirname as dirname5, join as join5 } from "path";
+import { dirname as dirname5, join as join4 } from "path";
 function selectDataApiCredential(cfg, env = process.env) {
   const accessToken = env.CTXDB_ACCESS_TOKEN?.trim();
   if (accessToken) return { type: "access-token", value: accessToken };
@@ -1810,7 +1750,7 @@ var DataApiAuthorizationProvider = class {
     const c = this.context, raw = readAuthConfig(c.configPath), section = ownAuthProfile(raw, c.agent);
     const fallback = c.inheritDefaultKey && c.agent !== "default" ? ownAuthProfile(raw, "default") : {};
     if (c.managedCredentials) {
-      const active = readActiveCredentialSync(c.credentialsPath ?? join5(dirname5(c.configPath), "credentials.json"));
+      const active = readActiveCredentialSync(c.credentialsPath ?? join4(dirname5(c.configPath), "credentials.json"));
       if (active) {
         const baseUrl2 = c.baseUrlOverride ?? active.metadata.baseUrl;
         if (baseUrl2 !== c.baseUrl) throw new OAuthCredentialError("login_required");
@@ -1836,7 +1776,7 @@ function publicAuthenticationFromConfig(raw, path, agent, baseUrlOverride) {
     const oauthCredential = oauthProfileFromConfig(raw, path, agent, baseUrlOverride);
     return oauthCredential ? { baseUrl: oauthCredential.baseUrl, oauthCredential } : void 0;
   }
-  const r = new LocalCredentialProvider(join5(dirname5(path), "credentials.json")).readStoredRecord(section.credential_ref);
+  const r = new LocalCredentialProvider(join4(dirname5(path), "credentials.json")).readStoredRecord(section.credential_ref);
   if (!r || r.kind !== "api-key" || r.metadata.state !== "ready" || r.metadata.owner.distribution !== "public" || r.metadata.owner.agent !== agent || r.metadata.owner.loginId) {
     throw new AuthConfigError("credential_ref is missing, invalid or belongs to another Agent. Use setup --api-key/--login to choose a valid credential.");
   }
@@ -1859,12 +1799,12 @@ function createRequestAuthorizationProvider(credential, baseUrl) {
 }
 
 // ../shared/src/authorization/public-target.ts
-import { dirname as dirname7, join as join7 } from "path";
+import { dirname as dirname7, join as join6 } from "path";
 
 // src/config.ts
 import { readFileSync as readFileSync4, existsSync as existsSync4 } from "fs";
 import { homedir as homedir3 } from "os";
-import { dirname as dirname8, join as join8 } from "path";
+import { dirname as dirname8, join as join7 } from "path";
 
 // src/distribution-capabilities.ts
 var PUBLIC_DISTRIBUTION = {
@@ -1888,7 +1828,7 @@ var DEFAULT_KNOWLEDGE_TOP_K = 6;
 var DEFAULT_KB_CATALOG_INJECTION = "session_start";
 function defaultPath(env) {
   if (env.CTXDB_CONFIG_PATH) return env.CTXDB_CONFIG_PATH;
-  return join8(homedir3(), ".ctxdb", "ctxdb.json");
+  return join7(homedir3(), ".ctxdb", "ctxdb.json");
 }
 function coerceInt(v, fallback) {
   if (v === null || v === void 0 || v === "") return fallback;
@@ -1973,7 +1913,7 @@ function loadOpencodeConfig(options = {}) {
     kbCatalogInjection: coerceKbCatalogInjection(section.kb_catalog_injection)
   };
   const managed = DISTRIBUTION_MANIFEST.capabilities.managedCredentials && options.managedCredentials !== false ? readActiveCredentialSync(
-    options.credentialsPath ?? join8(dirname8(path), "credentials.json")
+    options.credentialsPath ?? join7(dirname8(path), "credentials.json")
   ) : null;
   if (managed) {
     cfg.apiKey = managed.payload.apiKey;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aliyunrds/ctxdb",
-  "version": "1.0.8",
+  "version": "1.0.9-beta.0",
   "type": "module",
   "description": "Unified access layer for RDS ContextDatabase: `ctxdb` CLI (memory + KB ops), one-shot multi-agent installer, per-agent config, hooks/plugins, and SKILL.md.",
   "license": "Apache-2.0",
@@ -34,7 +34,7 @@
   "dependencies": {
     "semver": "^7.8.5",
     "yaml": "^2.9.0",
-    "@aliyunrds/ctxdb-shared": "~0.0.8"
+    "@aliyunrds/ctxdb-shared": "~0.0.9-beta.0"
   },
   "devDependencies": {
     "@types/node": "^22.15.0",