@cortexkit/common-auth 0.1.1 → 0.1.3

package/dist/sidebar-file/sidebar-file.d.ts

@@ -9,6 +9,13 @@ export interface SidebarFileOptions<T> {
     defaultValue: T;
     normalize: (parsed: unknown) => T;
     timeoutMs?: number;
+    /**
+     * Tighten an existing parent directory to 0o700 before each write. Defaults
+     * to true. Pass false for a directory the user chose (an override path),
+     * whose permissions are theirs to set. A parent this library has to create
+     * is always created private, either way.
+     */
+    secureDir?: boolean;
     logger?: {
         warn: (message: string, payload?: unknown) => void;
         debug: (message: string, payload?: unknown) => void;

package/dist/sidebar-file/sidebar-file.js

@@ -41,12 +41,13 @@ export function createSidebarFile(options) {
     };
     const persist = async (merge, hooks) => {
         const parent = dirname(path);
+        const secureDir = options.secureDir ?? true;
         await mkdir(parent, { recursive: true, mode: 0o700 });
-        await chmod(parent, 0o700).catch((error) => {
-            options.logger?.warn('sidebar directory permission remediation failed', {
-                error: error instanceof Error ? error.message : String(error),
+        if (secureDir) {
+            await chmod(parent, 0o700).catch((error) => {
+                options.logger?.warn('sidebar directory permission remediation failed', { error: error instanceof Error ? error.message : String(error) });
             });
-        });
+        }
         await withLock(path, {
             ...WRITER_LOCK_CONSTANTS.sidebar,
             timeoutMs: options.timeoutMs ?? WRITER_LOCK_CONSTANTS.sidebar.timeoutMs,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cortexkit/common-auth",
-  "version": "0.1.1",
+  "version": "0.1.3",
   "description": "Shared plumbing for the CortexKit auth plugins: loopback RPC, file locks and atomic writes, logger, sidebar state file, TUI preferences and TUI build.",
   "license": "MIT",
   "repository": {