@byokit/accounts 0.2.2 → 0.3.0

package/README.md

@@ -72,7 +72,8 @@ doesn't answer other web pages), so a PWA's model calls go through the app's own
   doesn't include this use, and signs out only a sign-in that no longer refreshes. `ladder()` picks the next usable
   account; `keepFresh()` refreshes ahead of expiry. Limits come from errors only; no undocumented usage endpoint is read.
 - **Isolation**: ambient discovery is off (no environment variable or credential file is ever consulted), and
-  `@byokit/accounts/testing` has the decoy-HOME harness and fs tracer to prove it in your own tests.
+  `@byokit/accounts/testing` has the decoy-HOME harness and fs tracer to prove it in your own tests. `decoy(root)`
+  writes only under the caller-supplied root; the caller owns its creation and cleanup.
 - **A stand-in OpenAI**: `mockOpenAI()` from `@byokit/accounts/testing` (or `node .../testing/mock-openai.ts [port]`)
   answers device code, its page where a person types the code, token exchange, refresh and revoke, so tests and demos
   sign in end to end with no account. Point the kit at it with `new Accounts({ authBase })`.

package/dist/testing/index.d.ts

@@ -1,7 +1,8 @@
 export declare const CANARY = "canary-byokit-7f3a9c";
 /** Preload this with `node --import` to record touches under `TRACE_ROOTS` in `TRACE_LOG` (both set in `decoy().env`). */
 export declare const traceFs: string;
-export declare function decoy(root?: string): {
+/** Build decoy files under a caller-owned directory; this function does not create or remove its root. */
+export declare function decoy(root: string): {
     root: string;
     home: string;
     roots: string[];

package/dist/testing/index.js

@@ -3,8 +3,7 @@
 // shell inside one of them hands down, and an fs tracer. A run must leave the decoys byte for byte as they were, never
 // touch them at all, and never carry a canary into the app's own files.
 import { createHash } from 'node:crypto';
-import { existsSync, mkdirSync, mkdtempSync, readdirSync, readFileSync, statSync, writeFileSync } from 'node:fs';
-import { tmpdir } from 'node:os';
+import { existsSync, mkdirSync, readdirSync, readFileSync, statSync, writeFileSync } from 'node:fs';
 import { dirname, join } from 'node:path';
 import { fileURLToPath } from 'node:url';
 export const CANARY = 'canary-byokit-7f3a9c';
@@ -14,7 +13,8 @@ const put = (p, text) => { mkdirSync(dirname(p), { recursive: true }); writeFile
 const files = (dir) => existsSync(dir)
     ? readdirSync(dir, { recursive: true, withFileTypes: true }).filter((e) => e.isFile()).map((e) => join(e.parentPath, e.name)) : [];
 const hashes = (dirs) => Object.fromEntries(dirs.flatMap(files).map((p) => [p, createHash('sha256').update(readFileSync(p)).digest('hex') + statSync(p).mtimeMs]));
-export function decoy(root = mkdtempSync(join(tmpdir(), 'byokit-decoy-'))) {
+/** Build decoy files under a caller-owned directory; this function does not create or remove its root. */
+export function decoy(root) {
     const home = join(root, 'home');
     const marks = join(root, 'marks');
     const trace = join(root, 'trace.log');

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@byokit/accounts",
-  "version": "0.2.2",
+  "version": "0.3.0",
   "description": "Sign in with the AI plan you already pay for, into your app's own store.",
   "license": "Apache-2.0",
   "type": "module",