@cortexkit/common-auth 0.1.1 → 0.1.2

package/dist/sidebar-file/sidebar-file.d.ts

@@ -9,6 +9,12 @@ export interface SidebarFileOptions<T> {
     defaultValue: T;
     normalize: (parsed: unknown) => T;
     timeoutMs?: number;
+    /**
+     * Create the parent directory private and tighten it to 0o700 before each
+     * write. Defaults to true. Pass false for a directory the user chose (an
+     * override path), whose permissions are theirs to set.
+     */
+    secureDir?: boolean;
     logger?: {
         warn: (message: string, payload?: unknown) => void;
         debug: (message: string, payload?: unknown) => void;

package/dist/sidebar-file/sidebar-file.js

@@ -41,12 +41,16 @@ export function createSidebarFile(options) {
     };
     const persist = async (merge, hooks) => {
         const parent = dirname(path);
-        await mkdir(parent, { recursive: true, mode: 0o700 });
-        await chmod(parent, 0o700).catch((error) => {
-            options.logger?.warn('sidebar directory permission remediation failed', {
-                error: error instanceof Error ? error.message : String(error),
-            });
+        const secureDir = options.secureDir ?? true;
+        await mkdir(parent, {
+            recursive: true,
+            mode: secureDir ? 0o700 : undefined,
         });
+        if (secureDir) {
+            await chmod(parent, 0o700).catch((error) => {
+                options.logger?.warn('sidebar directory permission remediation failed', { error: error instanceof Error ? error.message : String(error) });
+            });
+        }
         await withLock(path, {
             ...WRITER_LOCK_CONSTANTS.sidebar,
             timeoutMs: options.timeoutMs ?? WRITER_LOCK_CONSTANTS.sidebar.timeoutMs,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cortexkit/common-auth",
-  "version": "0.1.1",
+  "version": "0.1.2",
   "description": "Shared plumbing for the CortexKit auth plugins: loopback RPC, file locks and atomic writes, logger, sidebar state file, TUI preferences and TUI build.",
   "license": "MIT",
   "repository": {