@cortexkit/common-auth 0.1.0 → 0.1.2

package/README.md

@@ -1,6 +1,6 @@
 # common-auth
 
-Shared libraries for the CortexKit auth plugins for OpenCode and Pi: openai-auth, anthropic-auth and antigravity-auth. Nothing is published yet.
+Shared libraries for the CortexKit auth plugins for OpenCode and Pi: openai-auth, anthropic-auth and antigravity-auth. Published on npm as `@cortexkit/common-auth`; each plugin bundles it at build time, so users never install it directly.
 
 `research/` holds the spike reports that inform the design:
 

package/dist/fs/index.d.ts

@@ -1,5 +1,6 @@
 export type { AtomicWriteOptions } from './atomic-write.js';
 export { writeJsonAtomic } from './atomic-write.js';
 export { WRITER_LOCK_CONSTANTS } from './lock-constants.js';
+export { acquireRefreshFileLock, isLostMarkerRaceError, } from './refresh-file-lock.js';
 export type { LockOptions } from './with-lock.js';
 export { LockContentionError, LockOwnershipError, lockPathFor, withLock, } from './with-lock.js';

package/dist/fs/index.js

@@ -1,3 +1,6 @@
 export { writeJsonAtomic } from './atomic-write.js';
 export { WRITER_LOCK_CONSTANTS } from './lock-constants.js';
+// The try-once lock underneath withLock, for callers that hold a lock across
+// several steps or poll instead of waiting (for example a refresh lease).
+export { acquireRefreshFileLock, isLostMarkerRaceError, } from './refresh-file-lock.js';
 export { LockContentionError, LockOwnershipError, lockPathFor, withLock, } from './with-lock.js';

package/dist/sidebar-file/sidebar-file.d.ts

@@ -9,6 +9,12 @@ export interface SidebarFileOptions<T> {
     defaultValue: T;
     normalize: (parsed: unknown) => T;
     timeoutMs?: number;
+    /**
+     * Create the parent directory private and tighten it to 0o700 before each
+     * write. Defaults to true. Pass false for a directory the user chose (an
+     * override path), whose permissions are theirs to set.
+     */
+    secureDir?: boolean;
     logger?: {
         warn: (message: string, payload?: unknown) => void;
         debug: (message: string, payload?: unknown) => void;

package/dist/sidebar-file/sidebar-file.js

@@ -41,12 +41,16 @@ export function createSidebarFile(options) {
     };
     const persist = async (merge, hooks) => {
         const parent = dirname(path);
-        await mkdir(parent, { recursive: true, mode: 0o700 });
-        await chmod(parent, 0o700).catch((error) => {
-            options.logger?.warn('sidebar directory permission remediation failed', {
-                error: error instanceof Error ? error.message : String(error),
-            });
+        const secureDir = options.secureDir ?? true;
+        await mkdir(parent, {
+            recursive: true,
+            mode: secureDir ? 0o700 : undefined,
         });
+        if (secureDir) {
+            await chmod(parent, 0o700).catch((error) => {
+                options.logger?.warn('sidebar directory permission remediation failed', { error: error instanceof Error ? error.message : String(error) });
+            });
+        }
         await withLock(path, {
             ...WRITER_LOCK_CONSTANTS.sidebar,
             timeoutMs: options.timeoutMs ?? WRITER_LOCK_CONSTANTS.sidebar.timeoutMs,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cortexkit/common-auth",
-  "version": "0.1.0",
+  "version": "0.1.2",
   "description": "Shared plumbing for the CortexKit auth plugins: loopback RPC, file locks and atomic writes, logger, sidebar state file, TUI preferences and TUI build.",
   "license": "MIT",
   "repository": {