@hasna/brains 0.0.28 → 0.0.30

package/dist/cli/index.js

@@ -18128,7 +18128,7 @@ function printInfo(message) {
 }
 
 // src/cli/commands/models.ts
-import { randomUUID as randomUUID3 } from "crypto";
+import { randomUUID as randomUUID5 } from "crypto";
 
 // node_modules/openai/internal/qs/formats.mjs
 var default_format = "RFC3986";
@@ -23618,16 +23618,48 @@ var openai_default = OpenAI;
 import { readFileSync as readFileSync5 } from "fs";
 
 // src/lib/config.ts
-import { readFileSync as readFileSync3, writeFileSync as writeFileSync3, mkdirSync as mkdirSync4, existsSync as existsSync7, readdirSync as readdirSync4, copyFileSync as copyFileSync2, statSync } from "fs";
+import {
+  chmodSync,
+  copyFileSync as copyFileSync2,
+  existsSync as existsSync7,
+  lstatSync,
+  mkdirSync as mkdirSync4,
+  readFileSync as readFileSync3,
+  readdirSync as readdirSync4,
+  renameSync,
+  statSync,
+  unlinkSync as unlinkSync2,
+  writeFileSync as writeFileSync3
+} from "fs";
+import { randomUUID as randomUUID3 } from "crypto";
 import { join as join7, dirname as dirname2 } from "path";
 import { homedir as homedir6 } from "os";
 var CONFIG_KEYS = ["OPENAI_API_KEY", "THINKER_LABS_API_KEY", "THINKER_LABS_BASE_URL"];
+var CONFIG_FILE_NAME = "config.json";
+function restrictConfigFilePermissions(configPath) {
+  try {
+    if (!lstatSync(configPath).isFile())
+      return;
+    chmodSync(configPath, 384);
+  } catch {}
+}
+function ensureConfigDirectory(dirPath) {
+  mkdirSync4(dirPath, { recursive: true, mode: 448 });
+  try {
+    if (!statSync(dirPath).isDirectory())
+      return;
+    chmodSync(dirPath, 448);
+  } catch {}
+}
 function resolveConfigPath() {
   const home = process.env["HOME"] || process.env["USERPROFILE"] || homedir6();
-  const newDir = join7(home, ".hasna", "brains");
+  const hasnaDir = join7(home, ".hasna");
+  const newDir = join7(hasnaDir, "brains");
   const oldDir = join7(home, ".brains");
+  const configPath = join7(newDir, CONFIG_FILE_NAME);
+  ensureConfigDirectory(hasnaDir);
   if (existsSync7(oldDir) && !existsSync7(newDir)) {
-    mkdirSync4(newDir, { recursive: true });
+    ensureConfigDirectory(newDir);
     try {
       for (const file of readdirSync4(oldDir)) {
         const oldPath = join7(oldDir, file);
@@ -23635,28 +23667,46 @@ function resolveConfigPath() {
         try {
           if (statSync(oldPath).isFile()) {
             copyFileSync2(oldPath, newPath);
+            if (file === CONFIG_FILE_NAME)
+              restrictConfigFilePermissions(newPath);
           }
         } catch {}
       }
     } catch {}
   }
-  mkdirSync4(newDir, { recursive: true });
-  return join7(newDir, "config.json");
+  ensureConfigDirectory(newDir);
+  return configPath;
 }
-var CONFIG_PATH2 = resolveConfigPath();
 function readConfigFile() {
-  if (!existsSync7(CONFIG_PATH2))
+  const configPath = resolveConfigPath();
+  if (!existsSync7(configPath))
     return {};
   try {
-    return JSON.parse(readFileSync3(CONFIG_PATH2, "utf-8"));
+    return JSON.parse(readFileSync3(configPath, "utf-8"));
   } catch {
     return {};
   }
 }
 function writeConfigFile(data) {
-  mkdirSync4(dirname2(CONFIG_PATH2), { recursive: true });
-  writeFileSync3(CONFIG_PATH2, JSON.stringify(data, null, 2) + `
-`, "utf-8");
+  const configPath = resolveConfigPath();
+  const configDir = dirname2(configPath);
+  const tempPath = join7(configDir, `.config.json.${randomUUID3()}.tmp`);
+  ensureConfigDirectory(configDir);
+  if (existsSync7(configPath))
+    restrictConfigFilePermissions(configPath);
+  try {
+    writeFileSync3(tempPath, JSON.stringify(data, null, 2) + `
+`, { encoding: "utf-8", mode: 384, flag: "wx" });
+    restrictConfigFilePermissions(tempPath);
+    renameSync(tempPath, configPath);
+    restrictConfigFilePermissions(configPath);
+  } catch (err) {
+    try {
+      if (existsSync7(tempPath))
+        unlinkSync2(tempPath);
+    } catch {}
+    throw err;
+  }
 }
 function getConfigValue(key) {
   if (process.env[key])
@@ -24068,7 +24118,7 @@ function registerModelsCommands(program2) {
         printInfo(`Model already tracked as: ${existing.id}`);
         return;
       }
-      const modelId = randomUUID3();
+      const modelId = randomUUID5();
       const now2 = Date.now();
       const name = opts.name ?? result.fineTunedModel ?? `imported-${jobId}`;
       await db.insert(fineTunedModels).values({
@@ -24082,7 +24132,7 @@ function registerModelsCommands(program2) {
         updatedAt: now2
       });
       await db.insert(trainingJobs).values({
-        id: randomUUID3(),
+        id: randomUUID5(),
         modelId,
         provider: opts.provider,
         status: result.status,
@@ -24105,7 +24155,7 @@ function registerModelsCommands(program2) {
 }
 
 // src/cli/commands/finetune.ts
-import { randomUUID as randomUUID5 } from "crypto";
+import { randomUUID as randomUUID6 } from "crypto";
 import { existsSync as existsSync9 } from "fs";
 function registerFinetuneCommands(program2) {
   const finetuneCmd = program2.command("finetune").description("Manage fine-tuning jobs");
@@ -24147,7 +24197,7 @@ function registerFinetuneCommands(program2) {
         ({ jobId, status: jobStatus } = await tl.createFineTuneJob(fileId, opts.baseModel, opts.name));
       }
       const db = getDb();
-      const modelId = randomUUID5();
+      const modelId = randomUUID6();
       const now2 = Date.now();
       await db.insert(fineTunedModels).values({
         id: modelId,
@@ -24159,7 +24209,7 @@ function registerFinetuneCommands(program2) {
         createdAt: now2,
         updatedAt: now2
       });
-      const trainingJobId = randomUUID5();
+      const trainingJobId = randomUUID6();
       await db.insert(trainingJobs).values({
         id: trainingJobId,
         modelId,
@@ -24299,7 +24349,7 @@ function registerFinetuneCommands(program2) {
 }
 
 // src/cli/commands/data.ts
-import { randomUUID as randomUUID6 } from "crypto";
+import { randomUUID as randomUUID7 } from "crypto";
 import { readFileSync as readFileSync6, existsSync as existsSync11, mkdirSync as mkdirSync6, writeFileSync as writeFileSync5 } from "fs";
 import { dirname as dirname3, join as join13 } from "path";
 import { homedir as homedir12 } from "os";
@@ -24349,7 +24399,7 @@ function registerDataCommands(program2) {
 `) + `
 `, "utf8");
           await db.insert(trainingDatasets).values({
-            id: randomUUID6(),
+            id: randomUUID7(),
             source,
             filePath,
             exampleCount: count,
@@ -24439,7 +24489,7 @@ function registerDataCommands(program2) {
 `, "utf8");
       const db = getDb();
       await db.insert(trainingDatasets).values({
-        id: randomUUID6(),
+        id: randomUUID7(),
         source: "mixed",
         filePath: opts.output,
         exampleCount: finalLines.length,

package/dist/index.js

@@ -18984,16 +18984,48 @@ var openai_default = OpenAI;
 import { readFileSync as readFileSync3 } from "fs";
 
 // src/lib/config.ts
-import { readFileSync as readFileSync2, writeFileSync as writeFileSync2, mkdirSync as mkdirSync3, existsSync as existsSync3, readdirSync as readdirSync2, copyFileSync as copyFileSync2, statSync } from "fs";
+import {
+  chmodSync,
+  copyFileSync as copyFileSync2,
+  existsSync as existsSync3,
+  lstatSync,
+  mkdirSync as mkdirSync3,
+  readFileSync as readFileSync2,
+  readdirSync as readdirSync2,
+  renameSync,
+  statSync,
+  unlinkSync,
+  writeFileSync as writeFileSync2
+} from "fs";
+import { randomUUID } from "crypto";
 import { join as join4, dirname as dirname2 } from "path";
 import { homedir as homedir6 } from "os";
 var CONFIG_KEYS = ["OPENAI_API_KEY", "THINKER_LABS_API_KEY", "THINKER_LABS_BASE_URL"];
+var CONFIG_FILE_NAME = "config.json";
+function restrictConfigFilePermissions(configPath) {
+  try {
+    if (!lstatSync(configPath).isFile())
+      return;
+    chmodSync(configPath, 384);
+  } catch {}
+}
+function ensureConfigDirectory(dirPath) {
+  mkdirSync3(dirPath, { recursive: true, mode: 448 });
+  try {
+    if (!statSync(dirPath).isDirectory())
+      return;
+    chmodSync(dirPath, 448);
+  } catch {}
+}
 function resolveConfigPath() {
   const home = process.env["HOME"] || process.env["USERPROFILE"] || homedir6();
-  const newDir = join4(home, ".hasna", "brains");
+  const hasnaDir = join4(home, ".hasna");
+  const newDir = join4(hasnaDir, "brains");
   const oldDir = join4(home, ".brains");
+  const configPath = join4(newDir, CONFIG_FILE_NAME);
+  ensureConfigDirectory(hasnaDir);
   if (existsSync3(oldDir) && !existsSync3(newDir)) {
-    mkdirSync3(newDir, { recursive: true });
+    ensureConfigDirectory(newDir);
     try {
       for (const file of readdirSync2(oldDir)) {
         const oldPath = join4(oldDir, file);
@@ -19001,28 +19033,46 @@ function resolveConfigPath() {
         try {
           if (statSync(oldPath).isFile()) {
             copyFileSync2(oldPath, newPath);
+            if (file === CONFIG_FILE_NAME)
+              restrictConfigFilePermissions(newPath);
           }
         } catch {}
       }
     } catch {}
   }
-  mkdirSync3(newDir, { recursive: true });
-  return join4(newDir, "config.json");
+  ensureConfigDirectory(newDir);
+  return configPath;
 }
-var CONFIG_PATH2 = resolveConfigPath();
 function readConfigFile() {
-  if (!existsSync3(CONFIG_PATH2))
+  const configPath = resolveConfigPath();
+  if (!existsSync3(configPath))
     return {};
   try {
-    return JSON.parse(readFileSync2(CONFIG_PATH2, "utf-8"));
+    return JSON.parse(readFileSync2(configPath, "utf-8"));
   } catch {
     return {};
   }
 }
 function writeConfigFile(data) {
-  mkdirSync3(dirname2(CONFIG_PATH2), { recursive: true });
-  writeFileSync2(CONFIG_PATH2, JSON.stringify(data, null, 2) + `
-`, "utf-8");
+  const configPath = resolveConfigPath();
+  const configDir = dirname2(configPath);
+  const tempPath = join4(configDir, `.config.json.${randomUUID()}.tmp`);
+  ensureConfigDirectory(configDir);
+  if (existsSync3(configPath))
+    restrictConfigFilePermissions(configPath);
+  try {
+    writeFileSync2(tempPath, JSON.stringify(data, null, 2) + `
+`, { encoding: "utf-8", mode: 384, flag: "wx" });
+    restrictConfigFilePermissions(tempPath);
+    renameSync(tempPath, configPath);
+    restrictConfigFilePermissions(configPath);
+  } catch (err) {
+    try {
+      if (existsSync3(tempPath))
+        unlinkSync(tempPath);
+    } catch {}
+    throw err;
+  }
 }
 function getConfigValue(key) {
   if (process.env[key])

package/dist/lib/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/lib/config.ts"],"names":[],"mappings":"AAOA,eAAO,MAAM,WAAW,8EAA+E,CAAC;AACxG,MAAM,MAAM,SAAS,GAAG,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC;AA+CrD,wBAAgB,cAAc,CAAC,GAAG,EAAE,SAAS,GAAG,MAAM,GAAG,SAAS,CAIjE;AAED,wBAAgB,cAAc,CAAC,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAIlE;AAED,wBAAgB,UAAU,IAAI,KAAK,CAAC;IAAE,GAAG,EAAE,SAAS,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,KAAK,GAAG,MAAM,GAAG,OAAO,CAAA;CAAE,CAAC,CAOvG;AAED,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,SAAS,GAAG,IAAI,CAItD"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/lib/config.ts"],"names":[],"mappings":"AAoBA,eAAO,MAAM,WAAW,8EAA+E,CAAC;AACxG,MAAM,MAAM,SAAS,GAAG,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC;AAuFrD,wBAAgB,cAAc,CAAC,GAAG,EAAE,SAAS,GAAG,MAAM,GAAG,SAAS,CAIjE;AAED,wBAAgB,cAAc,CAAC,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAIlE;AAED,wBAAgB,UAAU,IAAI,KAAK,CAAC;IAAE,GAAG,EAAE,SAAS,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,KAAK,GAAG,MAAM,GAAG,OAAO,CAAA;CAAE,CAAC,CAOvG;AAED,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,SAAS,GAAG,IAAI,CAItD"}

package/dist/mcp/index.js

@@ -19495,15 +19495,46 @@ var openai_default = OpenAI;
 import { readFileSync as readFileSync3 } from "fs";
 
 // src/lib/config.ts
-import { readFileSync as readFileSync2, writeFileSync as writeFileSync2, mkdirSync as mkdirSync3, existsSync as existsSync3, readdirSync as readdirSync2, copyFileSync as copyFileSync2, statSync } from "fs";
+import {
+  chmodSync,
+  copyFileSync as copyFileSync2,
+  existsSync as existsSync3,
+  lstatSync,
+  mkdirSync as mkdirSync3,
+  readFileSync as readFileSync2,
+  readdirSync as readdirSync2,
+  renameSync,
+  statSync,
+  unlinkSync,
+  writeFileSync as writeFileSync2
+} from "fs";
 import { join as join4, dirname as dirname2 } from "path";
 import { homedir as homedir6 } from "os";
+var CONFIG_FILE_NAME = "config.json";
+function restrictConfigFilePermissions(configPath) {
+  try {
+    if (!lstatSync(configPath).isFile())
+      return;
+    chmodSync(configPath, 384);
+  } catch {}
+}
+function ensureConfigDirectory(dirPath) {
+  mkdirSync3(dirPath, { recursive: true, mode: 448 });
+  try {
+    if (!statSync(dirPath).isDirectory())
+      return;
+    chmodSync(dirPath, 448);
+  } catch {}
+}
 function resolveConfigPath() {
   const home = process.env["HOME"] || process.env["USERPROFILE"] || homedir6();
-  const newDir = join4(home, ".hasna", "brains");
+  const hasnaDir = join4(home, ".hasna");
+  const newDir = join4(hasnaDir, "brains");
   const oldDir = join4(home, ".brains");
+  const configPath = join4(newDir, CONFIG_FILE_NAME);
+  ensureConfigDirectory(hasnaDir);
   if (existsSync3(oldDir) && !existsSync3(newDir)) {
-    mkdirSync3(newDir, { recursive: true });
+    ensureConfigDirectory(newDir);
     try {
       for (const file of readdirSync2(oldDir)) {
         const oldPath = join4(oldDir, file);
@@ -19511,20 +19542,22 @@ function resolveConfigPath() {
         try {
           if (statSync(oldPath).isFile()) {
             copyFileSync2(oldPath, newPath);
+            if (file === CONFIG_FILE_NAME)
+              restrictConfigFilePermissions(newPath);
           }
         } catch {}
       }
     } catch {}
   }
-  mkdirSync3(newDir, { recursive: true });
-  return join4(newDir, "config.json");
+  ensureConfigDirectory(newDir);
+  return configPath;
 }
-var CONFIG_PATH2 = resolveConfigPath();
 function readConfigFile() {
-  if (!existsSync3(CONFIG_PATH2))
+  const configPath = resolveConfigPath();
+  if (!existsSync3(configPath))
     return {};
   try {
-    return JSON.parse(readFileSync2(CONFIG_PATH2, "utf-8"));
+    return JSON.parse(readFileSync2(configPath, "utf-8"));
   } catch {
     return {};
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hasna/brains",
-  "version": "0.0.28",
+  "version": "0.0.30",
   "description": "Fine-tuned model tracker and trainer — wraps OpenAI + Thinker Labs, gathers training data from todos/mementos/conversations/sessions",
   "type": "module",
   "main": "./dist/index.js",