@getdial/cli 0.37.1 → 0.37.2

package/dist/lib/versioned-file.js

@@ -2,6 +2,14 @@ import { chmodSync, mkdirSync, readFileSync, renameSync, statSync, unlinkSync, w
 import { join } from "node:path";
 import { logger } from "./log.js";
 const CHMOD_UNSUPPORTED_CODES = new Set(["ENOTSUP", "EOPNOTSUPP", "EPERM"]);
+/**
+ * Windows has no POSIX permission bits: Node synthesizes mode 0o666 (or 0o444
+ * for read-only files) regardless of the file's ACL, and chmod can only toggle
+ * the read-only flag. Enforcing `secure` there would reject every file we just
+ * wrote ourselves, so access control falls to the ACL on the per-user state
+ * directory instead.
+ */
+const hasPosixModes = () => process.platform !== "win32";
 function ensureDir(dir) {
     mkdirSync(dir, { recursive: true, mode: 0o700 });
     try {
@@ -41,7 +49,7 @@ export function defineVersionedFile(opts) {
     /** v0 is the legacy unversioned `<base>.json`. */
     const filePath = (version) => join(opts.dir(), version === 0 ? `${opts.base}.json` : `${opts.base}.v${version}.json`);
     function parseAt(path) {
-        if (opts.secure) {
+        if (opts.secure && hasPosixModes()) {
             const fileMode = statSync(path).mode & 0o777;
             if (fileMode & 0o077) {
                 throw new Error(`${path} has insecure permissions (mode ${fileMode.toString(8)})`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@getdial/cli",
-  "version": "0.37.1",
+  "version": "0.37.2",
   "description": "Dial CLI — install, sign up, and run the local listen service.",
   "license": "MIT",
   "repository": {