@camstack/server 1.2.541 → 1.2.543

package/dist/agent/agent-config.js

@@ -38,6 +38,7 @@ const fs = __importStar(require("node:fs"));
 const path = __importStar(require("node:path"));
 const crypto = __importStar(require("node:crypto"));
 const os = __importStar(require("node:os"));
+const node_1 = require("@camstack/types/node");
 /**
  * Generate a stable nodeId and persist it to the config file.
  *
@@ -72,9 +73,8 @@ function ensurePersistedNodeId(configPath, dataDir) {
     const id = envSeed && envSeed.length > 0 ? envSeed : `agent-${crypto.randomBytes(4).toString('hex')}`;
     raw.nodeId = id;
     try {
-        fs.mkdirSync(path.dirname(resolvedPath), { recursive: true });
-        // 0600: the same file holds the cluster secret.
-        fs.writeFileSync(resolvedPath, JSON.stringify(raw, null, 2), { encoding: 'utf-8', mode: 0o600 });
+        // Owner-only: the same file holds the cluster secret.
+        (0, node_1.writeOwnerOnlyFileSync)(resolvedPath, JSON.stringify(raw, null, 2));
     }
     catch {
         /* best-effort */

package/dist/agent/agent-http.js

@@ -58,6 +58,7 @@ const path = __importStar(require("node:path"));
 const fastify_1 = __importDefault(require("fastify"));
 const system_1 = require("@camstack/system");
 const agent_http_auth_js_1 = require("./agent-http-auth.js");
+const node_1 = require("@camstack/types/node");
 const agent_mesh_enroll_js_1 = require("./agent-mesh-enroll.js");
 const agent_update_routes_js_1 = require("./agent-update-routes.js");
 const derive_hub_url_js_1 = require("./derive-hub-url.js");
@@ -158,11 +159,9 @@ function readConfigFile(configPath) {
         return {};
     }
 }
-/** agent.json holds the cluster secret (D797): always 0600. */
+/** agent.json holds the cluster secret (D797): owner-only on every OS. */
 function writeConfigFile(configPath, data) {
-    fs.mkdirSync(path.dirname(configPath), { recursive: true });
-    fs.writeFileSync(configPath, JSON.stringify(data, null, 2), { encoding: 'utf-8', mode: 0o600 });
-    fs.chmodSync(configPath, 0o600);
+    (0, node_1.writeOwnerOnlyFileSync)(configPath, JSON.stringify(data, null, 2));
 }
 /** Live Moleculer registry snapshot — reused by agent-bootstrap's Option A. */
 function getRegistryNodes(broker) {

package/dist/agent/agent-mesh-enroll.js

@@ -64,8 +64,8 @@ const node_crypto_1 = require("node:crypto");
 const fs = __importStar(require("node:fs"));
 const http = __importStar(require("node:http"));
 const https = __importStar(require("node:https"));
-const path = __importStar(require("node:path"));
 const system_1 = require("@camstack/system");
+const node_1 = require("@camstack/types/node");
 class MeshEnrollError extends Error {
     constructor(message) {
         super(message);
@@ -283,12 +283,9 @@ function readJsonFile(file) {
 function withoutJoinToken(record) {
     return Object.fromEntries(Object.entries(record).filter(([key]) => key !== 'joinToken'));
 }
+/** Owner-only on every OS (an owner+SYSTEM ACL on Windows, where 0600 is a no-op). */
 function writeJsonFile0600(file, data) {
-    fs.mkdirSync(path.dirname(file), { recursive: true });
-    const tmp = `${file}.tmp`;
-    fs.writeFileSync(tmp, JSON.stringify(data, null, 2), { encoding: 'utf-8', mode: 0o600 });
-    fs.renameSync(tmp, file);
-    fs.chmodSync(file, 0o600);
+    (0, node_1.writeOwnerOnlyFileSync)(file, JSON.stringify(data, null, 2));
 }
 /**
  * Write the enrollment into `agent.json` (0600): `meshTls` + the host-only

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/server",
-  "version": "1.2.541",
+  "version": "1.2.543",
   "license": "MIT",
   "private": false,
   "files": [
@@ -38,18 +38,18 @@
     ]
   },
   "dependencies": {
-    "@camstack/addon-admin-ui": "1.2.407",
+    "@camstack/addon-admin-ui": "1.2.409",
     "@camstack/addon-agent-ui": "1.2.224",
     "@camstack/addon-auth": "1.2.141",
     "@camstack/addon-decoder-nodeav": "1.2.123",
     "@camstack/addon-notifiers": "1.2.134",
-    "@camstack/addon-pipeline": "1.2.360",
-    "@camstack/addon-pipeline-orchestrator": "1.2.310",
-    "@camstack/addon-post-analysis": "1.2.359",
+    "@camstack/addon-pipeline": "1.2.361",
+    "@camstack/addon-pipeline-orchestrator": "1.2.311",
+    "@camstack/addon-post-analysis": "1.2.360",
     "@camstack/develop": "0.1.5",
     "@camstack/sdk": "1.2.131",
-    "@camstack/system": "1.2.417",
-    "@camstack/types": "1.2.355",
+    "@camstack/system": "1.2.419",
+    "@camstack/types": "1.2.357",
     "@camstack/ui-library": "1.2.281",
     "@fastify/compress": "^9.0.0",
     "@fastify/cookie": "^11.0.2",