@huaweidevtools/aishell-dsh-credentials-store 0.0.15 → 0.0.16

package/lib/types/backends/keyring.d.ts

@@ -9,12 +9,12 @@
  *
  * On Linux the binding picks a store itself: Secret Service (gnome-keyring,
  * KWallet, KeePassXC) first, then — silently — the kernel keyutils keyring.
- * That fallback is wrong for credentials, and the binding's README says so:
- * the kernel keyring is "completely in-memory and will not persist across
+ * The kernel keyring is the wrong target for credentials, and the binding's own
+ * README says so: it is "completely in-memory and will not persist across
  * reboots". A machine with no Secret Service (a container, CI, a systemd unit
- * with no session bus) would therefore accept credentials, report them stored,
- * and lose them at the next reboot — with `credentialsStored: true` left in
- * the profile pointing at nothing.
+ * with no session bus) would accept credentials, report them stored, and lose
+ * them at the next reboot — with `credentialsStored: true` left in the profile
+ * pointing at nothing.
  *
  * Pinning `{ linux: { store: 'secret-service' } }` makes an unavailable
  * service throw from the constructor probe instead, so
@@ -52,8 +52,8 @@ export declare function __setKeyringModule(mock: KeyringModule | undefined): voi
  * Construction probes the keyring once — if the native module cannot be loaded
  * (no prebuilt binding for this platform), or the Linux Secret Service is
  * unavailable, it throws and {@link createCredentialsStore} falls back to the
- * next backend. Without the pin the absent-service case does not throw; see
- * the module note.
+ * next backend. The pin is what makes the second case throw; see the module
+ * note.
  */
 export declare class KeyringBackend implements CredentialsStore {
     private readonly serviceName;

package/lib/types/backends/keyring.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"keyring.d.ts","sourceRoot":"","sources":["../../../src/backends/keyring.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAIH,OAAO,KAAK,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAA;AAO3E,KAAK,YAAY,GAAG;IAClB,WAAW,EAAE,MAAM,MAAM,GAAG,IAAI,CAAA;IAChC,WAAW,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAA;IACpC,cAAc,EAAE,MAAM,IAAI,CAAA;CAC3B,CAAA;AACD,iFAAiF;AACjF,KAAK,mBAAmB,GAAG;IAAE,KAAK,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,gBAAgB,GAAG,UAAU,CAAA;KAAE,CAAA;CAAE,CAAA;AAChF,KAAK,aAAa,GAAG;IACnB,KAAK,EAAE,KAAK,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,mBAAmB,KAAK,YAAY,CAAA;CAC7F,CAAA;AAGD,kGAAkG;AAClG,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,aAAa,GAAG,SAAS,GAAG,IAAI,CAExE;AAOD;;;;;;;;;;GAUG;AACH,qBAAa,cAAe,YAAW,gBAAgB;IACrD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAQ;IACpC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAqB;IAC7C,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAwB;gBAElC,OAAO,GAAE,sBAA2B;IAWhD,GAAG,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IASxC,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI;IAKzC,MAAM,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;IAY7B,GAAG,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO;CAO9B"}
+{"version":3,"file":"keyring.d.ts","sourceRoot":"","sources":["../../../src/backends/keyring.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAIH,OAAO,KAAK,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAA;AAO3E,KAAK,YAAY,GAAG;IAClB,WAAW,EAAE,MAAM,MAAM,GAAG,IAAI,CAAA;IAChC,WAAW,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAA;IACpC,cAAc,EAAE,MAAM,IAAI,CAAA;CAC3B,CAAA;AACD,iFAAiF;AACjF,KAAK,mBAAmB,GAAG;IAAE,KAAK,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,gBAAgB,GAAG,UAAU,CAAA;KAAE,CAAA;CAAE,CAAA;AAChF,KAAK,aAAa,GAAG;IACnB,KAAK,EAAE,KAAK,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,mBAAmB,KAAK,YAAY,CAAA;CAC7F,CAAA;AAGD,kGAAkG;AAClG,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,aAAa,GAAG,SAAS,GAAG,IAAI,CAExE;AAOD;;;;;;;;;;GAUG;AACH,qBAAa,cAAe,YAAW,gBAAgB;IACrD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAQ;IACpC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAqB;IAC7C,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAwB;gBAElC,OAAO,GAAE,sBAA2B;IAWhD,GAAG,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IASxC,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI;IAKzC,MAAM,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;IAkB7B,GAAG,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO;CAO9B"}

package/lib/types/backends/keyring.js

@@ -9,12 +9,12 @@
  *
  * On Linux the binding picks a store itself: Secret Service (gnome-keyring,
  * KWallet, KeePassXC) first, then — silently — the kernel keyutils keyring.
- * That fallback is wrong for credentials, and the binding's README says so:
- * the kernel keyring is "completely in-memory and will not persist across
+ * The kernel keyring is the wrong target for credentials, and the binding's own
+ * README says so: it is "completely in-memory and will not persist across
  * reboots". A machine with no Secret Service (a container, CI, a systemd unit
- * with no session bus) would therefore accept credentials, report them stored,
- * and lose them at the next reboot — with `credentialsStored: true` left in
- * the profile pointing at nothing.
+ * with no session bus) would accept credentials, report them stored, and lose
+ * them at the next reboot — with `credentialsStored: true` left in the profile
+ * pointing at nothing.
  *
  * Pinning `{ linux: { store: 'secret-service' } }` makes an unavailable
  * service throw from the constructor probe instead, so
@@ -52,8 +52,8 @@ function loadKeyring() {
  * Construction probes the keyring once — if the native module cannot be loaded
  * (no prebuilt binding for this platform), or the Linux Secret Service is
  * unavailable, it throws and {@link createCredentialsStore} falls back to the
- * next backend. Without the pin the absent-service case does not throw; see
- * the module note.
+ * next backend. The pin is what makes the second case throw; see the module
+ * note.
  */
 export class KeyringBackend {
     serviceName;
@@ -88,8 +88,14 @@ export class KeyringBackend {
             new this.Entry(this.serviceName, account, this.options).deletePassword();
         }
         catch (error) {
-            // deletePassword on an absent entry may throw on some backends;
-            // treat that as a no-op rather than an error.
+            // Deleting an absent entry is not an error, but the native binding has no
+            // stable code for it — only wording. This filter is deliberately narrow:
+            // it matches the *absent-entry* spellings and not "no result found",
+            // which a **locked** Secret Service collection reports for entries that
+            // really exist. Widening it to cover that would turn a failed clear into
+            // a silent no-op, and the credential would keep reading back after the
+            // person asked for it to be gone. `FailoverStore.delete` is what handles
+            // the locked case — it needs this error to escape from here to see it.
             if (!String(error).includes('not found') && !String(error).includes('no entry')) {
                 throw error;
             }

package/lib/types/backends/keyring.js.map

@@ -1 +1 @@
-{"version":3,"file":"keyring.js","sourceRoot":"","sources":["../../../src/backends/keyring.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAC3C,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAG7C,gFAAgF;AAChF,4EAA4E;AAC5E,6EAA6E;AAC7E,mEAAmE;AACnE,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;AAW9C,IAAI,aAAwC,CAAA;AAE5C,kGAAkG;AAClG,MAAM,UAAU,kBAAkB,CAAC,IAA+B;IAChE,aAAa,GAAG,IAAI,CAAA;AACtB,CAAC;AAED,SAAS,WAAW;IAClB,IAAI,aAAa,KAAK,SAAS;QAAE,aAAa,GAAG,OAAO,CAAC,kBAAkB,CAAkB,CAAA;IAC7F,OAAO,aAAa,CAAA;AACtB,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,OAAO,cAAc;IACR,WAAW,CAAQ;IACnB,OAAO,CAAqB;IAC5B,KAAK,CAAwB;IAE9C,YAAY,UAAkC,EAAE;QAC9C,IAAI,CAAC,WAAW,GAAG,eAAe,CAAA;QAClC,4EAA4E;QAC5E,0EAA0E;QAC1E,yDAAyD;QACzD,IAAI,CAAC,OAAO,GAAG,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE,CAAA;QACrD,IAAI,CAAC,KAAK,GAAG,WAAW,EAAE,CAAC,KAAK,CAAA;QAChC,yEAAyE;QACzE,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAA;IAC3E,CAAC;IAED,GAAG,CAAC,OAAe;QACjB,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAA;YACnF,OAAO,KAAK,IAAI,SAAS,CAAA;QAC3B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAA;QAClB,CAAC;IACH,CAAC;IAED,GAAG,CAAC,OAAe,EAAE,KAAa;QAChC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAA;QAC7E,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAA;IAC5E,CAAC;IAED,MAAM,CAAC,OAAe;QACpB,IAAI,CAAC;YACH,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,cAAc,EAAE,CAAA;QAC1E,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,gEAAgE;YAChE,8CAA8C;YAC9C,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;gBAChF,MAAM,KAAK,CAAA;YACb,CAAC;QACH,CAAC;IACH,CAAC;IAED,GAAG,CAAC,OAAe;QACjB,IAAI,CAAC;YACH,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,KAAK,IAAI,CAAA;QACvF,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAA;QACd,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"keyring.js","sourceRoot":"","sources":["../../../src/backends/keyring.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAC3C,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAG7C,gFAAgF;AAChF,4EAA4E;AAC5E,6EAA6E;AAC7E,mEAAmE;AACnE,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;AAW9C,IAAI,aAAwC,CAAA;AAE5C,kGAAkG;AAClG,MAAM,UAAU,kBAAkB,CAAC,IAA+B;IAChE,aAAa,GAAG,IAAI,CAAA;AACtB,CAAC;AAED,SAAS,WAAW;IAClB,IAAI,aAAa,KAAK,SAAS;QAAE,aAAa,GAAG,OAAO,CAAC,kBAAkB,CAAkB,CAAA;IAC7F,OAAO,aAAa,CAAA;AACtB,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,OAAO,cAAc;IACR,WAAW,CAAQ;IACnB,OAAO,CAAqB;IAC5B,KAAK,CAAwB;IAE9C,YAAY,UAAkC,EAAE;QAC9C,IAAI,CAAC,WAAW,GAAG,eAAe,CAAA;QAClC,4EAA4E;QAC5E,0EAA0E;QAC1E,yDAAyD;QACzD,IAAI,CAAC,OAAO,GAAG,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE,CAAA;QACrD,IAAI,CAAC,KAAK,GAAG,WAAW,EAAE,CAAC,KAAK,CAAA;QAChC,yEAAyE;QACzE,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAA;IAC3E,CAAC;IAED,GAAG,CAAC,OAAe;QACjB,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAA;YACnF,OAAO,KAAK,IAAI,SAAS,CAAA;QAC3B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAA;QAClB,CAAC;IACH,CAAC;IAED,GAAG,CAAC,OAAe,EAAE,KAAa;QAChC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAA;QAC7E,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAA;IAC5E,CAAC;IAED,MAAM,CAAC,OAAe;QACpB,IAAI,CAAC;YACH,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,cAAc,EAAE,CAAA;QAC1E,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,0EAA0E;YAC1E,yEAAyE;YACzE,qEAAqE;YACrE,wEAAwE;YACxE,yEAAyE;YACzE,uEAAuE;YACvE,yEAAyE;YACzE,uEAAuE;YACvE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;gBAChF,MAAM,KAAK,CAAA;YACb,CAAC;QACH,CAAC;IACH,CAAC;IAED,GAAG,CAAC,OAAe;QACjB,IAAI,CAAC;YACH,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,KAAK,IAAI,CAAA;QACvF,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAA;QACd,CAAC;IACH,CAAC;CACF"}

package/lib/types/backends/memory.d.ts

@@ -6,23 +6,10 @@
  * `Map` and are lost when the process exits — durable enough for a single
  * DSH session, not for persistence.
  *
- * Callers never select this directly; {@link createCredentialsStore} falls
- * back to it when {@link KeyringBackend} cannot initialize.
- *
- * ## Why the shared instance is not this class's business
- *
- * Each plugin that stores credentials calls `createCredentialsStore()` for
- * itself — four of them — and every call constructs a fresh backend. That is
- * harmless for the keyring and the encrypted file, which are process-external
- * and therefore shared by construction, but a private `Map` is not: without
- * the sharing below, the plugin that saved a credential and the plugin that
- * read it would be looking at different maps, and the second would report
- * "not authenticated" on a machine where the person had just authenticated.
- *
- * The sharing lives in {@link sharedMemoryBackend} rather than in this class
- * so that `new MemoryBackend()` keeps producing an independent store. Tests
- * rely on that — a spec constructing one expects it to start empty, and a
- * singleton class would leak state between spec files.
+ * Two exports, and the difference between them is who shares what:
+ * {@link MemoryBackend} is an independent store, and
+ * {@link sharedMemoryBackend} is the one instance every caller in the process
+ * resolves to. Its docstring carries the reasoning.
  */
 import type { CredentialsStore, CredentialsStoreConfig } from '../index.ts';
 /** Process-scoped {@link CredentialsStore}; entries vanish on exit. */

package/lib/types/backends/memory.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"memory.d.ts","sourceRoot":"","sources":["../../../src/backends/memory.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAA;AAE3E,uEAAuE;AACvE,qBAAa,aAAc,YAAW,gBAAgB;IACpD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA4B;gBAExC,OAAO,GAAE,sBAA2B;IAKhD,GAAG,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAIxC,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI;IAKzC,MAAM,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;IAI7B,GAAG,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO;CAG9B;AA8BD,wBAAgB,mBAAmB,CAAC,MAAM,GAAE,sBAA2B,GAAG,aAAa,CAGtF;AAED;;;;;GAKG;AACH,wBAAgB,0BAA0B,IAAI,IAAI,CAEjD"}
+{"version":3,"file":"memory.d.ts","sourceRoot":"","sources":["../../../src/backends/memory.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAA;AAE3E,uEAAuE;AACvE,qBAAa,aAAc,YAAW,gBAAgB;IACpD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA4B;gBAExC,OAAO,GAAE,sBAA2B;IAKhD,GAAG,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAIxC,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI;IAKzC,MAAM,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;IAI7B,GAAG,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO;CAG9B;AAgCD,wBAAgB,mBAAmB,CAAC,MAAM,GAAE,sBAA2B,GAAG,aAAa,CAGtF;AAED;;;;;GAKG;AACH,wBAAgB,0BAA0B,IAAI,IAAI,CAEjD"}

package/lib/types/backends/memory.js

@@ -6,23 +6,10 @@
  * `Map` and are lost when the process exits — durable enough for a single
  * DSH session, not for persistence.
  *
- * Callers never select this directly; {@link createCredentialsStore} falls
- * back to it when {@link KeyringBackend} cannot initialize.
- *
- * ## Why the shared instance is not this class's business
- *
- * Each plugin that stores credentials calls `createCredentialsStore()` for
- * itself — four of them — and every call constructs a fresh backend. That is
- * harmless for the keyring and the encrypted file, which are process-external
- * and therefore shared by construction, but a private `Map` is not: without
- * the sharing below, the plugin that saved a credential and the plugin that
- * read it would be looking at different maps, and the second would report
- * "not authenticated" on a machine where the person had just authenticated.
- *
- * The sharing lives in {@link sharedMemoryBackend} rather than in this class
- * so that `new MemoryBackend()` keeps producing an independent store. Tests
- * rely on that — a spec constructing one expects it to start empty, and a
- * singleton class would leak state between spec files.
+ * Two exports, and the difference between them is who shares what:
+ * {@link MemoryBackend} is an independent store, and
+ * {@link sharedMemoryBackend} is the one instance every caller in the process
+ * resolves to. Its docstring carries the reasoning.
  */
 /** Process-scoped {@link CredentialsStore}; entries vanish on exit. */
 export class MemoryBackend {
@@ -47,26 +34,28 @@ export class MemoryBackend {
     }
 }
 /**
- * The one memory backend the factory hands to every caller in this process.
+ * The one memory backend every caller in this process resolves to.
  *
- * ## Why a module-level instance and not a class singleton
+ * ## Why the factory shares an instance
  *
- * `createCredentialsStore()` is called once per plugin — four of them — and
- * the memory backend is the only one of the three that is not shared by
- * construction. The keyring is a daemon and the encrypted file is a path, so
- * two callers reaching either are reading the same bytes; two `Map`s are not.
- * Without this, a machine with no keyring would have one plugin storing a
- * credential and another unable to see it.
+ * Every plugin that stores credentials calls `createCredentialsStore()` for
+ * itself — four of them — and each call resolves a backend. The keyring is a
+ * daemon and the encrypted file is a path, so two callers reaching either read
+ * the same bytes by construction. A `Map` is not: with a fresh one per call,
+ * the plugin that saved a credential and the plugin that reads it would be
+ * looking at different maps, and the second would report "not authenticated"
+ * on a machine where the person had just authenticated.
  *
- * Held here rather than on the class so `new MemoryBackend()` stays
- * independent, which the specs depend on.
+ * The sharing lives here rather than in {@link MemoryBackend} so that
+ * `new MemoryBackend()` still produces an independent store, which is what the
+ * specs rely on: a spec that constructs one expects it to start empty, and a
+ * singleton class would leak state between spec files.
  *
- * ## Why the lazily-created shape
+ * ## Why it is created on first use
  *
- * The instance is created on first use rather than at module load, so
- * importing this module has no effect a test has to account for — the specs
- * that swap the keyring module in and out must not leave a populated store
- * behind.
+ * Creating it at module load would make importing this module mutate state a
+ * test then has to account for. Lazy creation keeps the import inert, so a spec
+ * that swaps the keyring module in and out leaves no store behind.
  *
  * @param config - forwarded on first construction only; later callers reuse
  *   the instance, since the memory backend keeps nothing config decides.

package/lib/types/backends/memory.js.map

@@ -1 +1 @@
-{"version":3,"file":"memory.js","sourceRoot":"","sources":["../../../src/backends/memory.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAIH,uEAAuE;AACvE,MAAM,OAAO,aAAa;IACP,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAA;IAEpD,YAAY,UAAkC,EAAE;QAC9C,wEAAwE;QACxE,sDAAsD;IACxD,CAAC;IAED,GAAG,CAAC,OAAe;QACjB,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;IAClC,CAAC;IAED,GAAG,CAAC,OAAe,EAAE,KAAa;QAChC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAA;QAC7E,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;IAClC,CAAC;IAED,MAAM,CAAC,OAAe;QACpB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;IAC9B,CAAC;IAED,GAAG,CAAC,OAAe;QACjB,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;IAClC,CAAC;CACF;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,IAAI,MAAiC,CAAA;AAErC,MAAM,UAAU,mBAAmB,CAAC,SAAiC,EAAE;IACrE,MAAM,KAAK,IAAI,aAAa,CAAC,MAAM,CAAC,CAAA;IACpC,OAAO,MAAM,CAAA;AACf,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,0BAA0B;IACxC,MAAM,GAAG,SAAS,CAAA;AACpB,CAAC"}
+{"version":3,"file":"memory.js","sourceRoot":"","sources":["../../../src/backends/memory.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAIH,uEAAuE;AACvE,MAAM,OAAO,aAAa;IACP,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAA;IAEpD,YAAY,UAAkC,EAAE;QAC9C,wEAAwE;QACxE,sDAAsD;IACxD,CAAC;IAED,GAAG,CAAC,OAAe;QACjB,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;IAClC,CAAC;IAED,GAAG,CAAC,OAAe,EAAE,KAAa;QAChC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAA;QAC7E,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;IAClC,CAAC;IAED,MAAM,CAAC,OAAe;QACpB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;IAC9B,CAAC;IAED,GAAG,CAAC,OAAe;QACjB,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;IAClC,CAAC;CACF;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,IAAI,MAAiC,CAAA;AAErC,MAAM,UAAU,mBAAmB,CAAC,SAAiC,EAAE;IACrE,MAAM,KAAK,IAAI,aAAa,CAAC,MAAM,CAAC,CAAA;IACpC,OAAO,MAAM,CAAA;AACf,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,0BAA0B;IACxC,MAAM,GAAG,SAAS,CAAA;AACpB,CAAC"}

package/lib/types/failover.d.ts

@@ -1,12 +1,11 @@
 /**
- * Write-failover wrapper — covers the failure class the construction-time
- * probe chain cannot see.
+ * Write-failover wrapper — covers the failure class a construction-time probe
+ * cannot see.
  *
  * {@link createCredentialsStore} picks a backend by probing at construction
  * time, but the highest-priority backend (the OS keyring) can pass that probe
- * and still reject every real write: a locked GNOME keyring collection reads
- * as `null` (the probe's getPassword does not throw) while setPassword fails.
- * Measured on an isolated D-Bus session:
+ * and still reject every real write: a locked GNOME keyring collection reads as
+ * `null` and its `setPassword` fails. Measured on an isolated D-Bus session:
  *
  * - locked collection, no default alias — read 5 ms → null; write 5 ms →
  *   "Couldn't access platform storage: Secret Service: no result found"
@@ -17,10 +16,9 @@
  * So the write path needs its own fallback chain, and it must be sticky: a
  * locked keyring fails every write, so retrying it per call would surface the
  * same error (or the same prompt) once per account a save writes. Deletes trip
- * the same failover: a locked collection rejects them with the same error, and
- * the save route (delete old set → write new set) deletes first — without
- * this, a locked keyring would fail the save before the write failover ever
- * engages.
+ * the same failover — a locked collection rejects them with the same error, and
+ * the save route deletes the old set before writing the new one, so without
+ * this a locked keyring would fail the save before the write failover engaged.
  *
  * ## Which copy wins
  *
@@ -46,11 +44,11 @@
  * A successful primary write or delete clears both the fallback value and the
  * tombstone, handing authority back to the keyring.
  *
- * Recording deletion this way — rather than marking accounts "stale" on every
- * failover write — keeps the value and its shadow in one place. A mark set by a
- * write would have to be cleared in lockstep with the value, and a mark left
- * behind after its value was gone would make a perfect keyring credential read
- * as *absent* rather than merely stale.
+ * The alternative — marking accounts "stale" on every failover write — would
+ * spread one fact across two records: the mark would have to be cleared in
+ * lockstep with the value, and a mark left behind after its value was gone
+ * would make a perfect keyring credential read as *absent* rather than merely
+ * stale. Keeping the shadow in one place avoids that state entirely.
  *
  * ## Why the record is persisted, not held in memory
  *
@@ -67,8 +65,8 @@
  * tombstone). On a machine whose keyring has never failed the fallback has
  * written nothing, so its file does not exist and both lookups are
  * sub-millisecond `existsSync` misses (measured 0.02-0.4 ms). Where a fallback
- * file does exist, each lookup decrypts it — the read-through this replaced
- * already paid one decrypt per miss.
+ * file does exist, each lookup decrypts it — one decrypt per miss, which is what
+ * a read-through cache would cost anyway.
  *
  * The fallback is built on the first read rather than the first failed write,
  * which a machine with a working keyring pays once per store: ~97 ms, almost
@@ -95,9 +93,9 @@ export interface FailoverStoreOptions {
  *
  * Stickiness is per instance, not per process: each plugin that consumes
  * credentials builds its own store, so one instance failing over does not stop
- * another from trying the primary. That is intended — the flag only exists to
+ * another from trying the primary. That is intentional — the flag exists to
  * avoid re-hitting a primary already known to be unwritable from *this* store,
- * and a second instance's attempt is one probe rather than a policy decision.
+ * so a second instance's attempt is one probe rather than a policy decision.
  * Correctness across instances comes from the persisted record, not the flag.
  *
  * Constructed by {@link createCredentialsStore} around a KeyringBackend whose

package/lib/types/failover.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"failover.d.ts","sourceRoot":"","sources":["../../src/failover.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8EG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAA;AAmBlD,yCAAyC;AACzC,MAAM,WAAW,oBAAoB;IACnC;;;;;OAKG;IACH,QAAQ,CAAC,cAAc,EAAE,MAAM,gBAAgB,CAAA;CAChD;AAED;;;;;;;;;;;;;;GAcG;AACH,qBAAa,aAAc,YAAW,gBAAgB;IACpD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAkB;IAC1C,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAwB;IACvD,OAAO,CAAC,QAAQ,CAA8B;IAC9C,uEAAuE;IACvE,OAAO,CAAC,UAAU,CAAQ;gBAEd,OAAO,EAAE,gBAAgB,EAAE,OAAO,EAAE,oBAAoB;IAKpE,qEAAqE;IACrE,OAAO,KAAK,aAAa,GAGxB;IAED;;;;;;OAMG;IACH,OAAO,CAAC,cAAc;IAQtB,GAAG,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAUxC,GAAG,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO;IAM7B,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI;IAyCzC,MAAM,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;IA8B7B;;;;;;OAMG;IACH,OAAO,CAAC,cAAc;CAGvB"}
+{"version":3,"file":"failover.d.ts","sourceRoot":"","sources":["../../src/failover.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4EG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAA;AAmBlD,yCAAyC;AACzC,MAAM,WAAW,oBAAoB;IACnC;;;;;OAKG;IACH,QAAQ,CAAC,cAAc,EAAE,MAAM,gBAAgB,CAAA;CAChD;AAED;;;;;;;;;;;;;;GAcG;AACH,qBAAa,aAAc,YAAW,gBAAgB;IACpD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAkB;IAC1C,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAwB;IACvD,OAAO,CAAC,QAAQ,CAA8B;IAC9C,uEAAuE;IACvE,OAAO,CAAC,UAAU,CAAQ;gBAEd,OAAO,EAAE,gBAAgB,EAAE,OAAO,EAAE,oBAAoB;IAKpE,qEAAqE;IACrE,OAAO,KAAK,aAAa,GAGxB;IAED;;;;;;OAMG;IACH,OAAO,CAAC,cAAc;IAQtB,GAAG,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAUxC,GAAG,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO;IAM7B,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI;IAyCzC,MAAM,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;IA8B7B;;;;;;OAMG;IACH,OAAO,CAAC,cAAc;CAGvB"}

package/lib/types/failover.js

@@ -1,12 +1,11 @@
 /**
- * Write-failover wrapper — covers the failure class the construction-time
- * probe chain cannot see.
+ * Write-failover wrapper — covers the failure class a construction-time probe
+ * cannot see.
  *
  * {@link createCredentialsStore} picks a backend by probing at construction
  * time, but the highest-priority backend (the OS keyring) can pass that probe
- * and still reject every real write: a locked GNOME keyring collection reads
- * as `null` (the probe's getPassword does not throw) while setPassword fails.
- * Measured on an isolated D-Bus session:
+ * and still reject every real write: a locked GNOME keyring collection reads as
+ * `null` and its `setPassword` fails. Measured on an isolated D-Bus session:
  *
  * - locked collection, no default alias — read 5 ms → null; write 5 ms →
  *   "Couldn't access platform storage: Secret Service: no result found"
@@ -17,10 +16,9 @@
  * So the write path needs its own fallback chain, and it must be sticky: a
  * locked keyring fails every write, so retrying it per call would surface the
  * same error (or the same prompt) once per account a save writes. Deletes trip
- * the same failover: a locked collection rejects them with the same error, and
- * the save route (delete old set → write new set) deletes first — without
- * this, a locked keyring would fail the save before the write failover ever
- * engages.
+ * the same failover — a locked collection rejects them with the same error, and
+ * the save route deletes the old set before writing the new one, so without
+ * this a locked keyring would fail the save before the write failover engaged.
  *
  * ## Which copy wins
  *
@@ -46,11 +44,11 @@
  * A successful primary write or delete clears both the fallback value and the
  * tombstone, handing authority back to the keyring.
  *
- * Recording deletion this way — rather than marking accounts "stale" on every
- * failover write — keeps the value and its shadow in one place. A mark set by a
- * write would have to be cleared in lockstep with the value, and a mark left
- * behind after its value was gone would make a perfect keyring credential read
- * as *absent* rather than merely stale.
+ * The alternative — marking accounts "stale" on every failover write — would
+ * spread one fact across two records: the mark would have to be cleared in
+ * lockstep with the value, and a mark left behind after its value was gone
+ * would make a perfect keyring credential read as *absent* rather than merely
+ * stale. Keeping the shadow in one place avoids that state entirely.
  *
  * ## Why the record is persisted, not held in memory
  *
@@ -67,8 +65,8 @@
  * tombstone). On a machine whose keyring has never failed the fallback has
  * written nothing, so its file does not exist and both lookups are
  * sub-millisecond `existsSync` misses (measured 0.02-0.4 ms). Where a fallback
- * file does exist, each lookup decrypts it — the read-through this replaced
- * already paid one decrypt per miss.
+ * file does exist, each lookup decrypts it — one decrypt per miss, which is what
+ * a read-through cache would cost anyway.
  *
  * The fallback is built on the first read rather than the first failed write,
  * which a machine with a working keyring pays once per store: ~97 ms, almost
@@ -98,9 +96,9 @@ const TOMBSTONE_VALUE = '1';
  *
  * Stickiness is per instance, not per process: each plugin that consumes
  * credentials builds its own store, so one instance failing over does not stop
- * another from trying the primary. That is intended — the flag only exists to
+ * another from trying the primary. That is intentional — the flag exists to
  * avoid re-hitting a primary already known to be unwritable from *this* store,
- * and a second instance's attempt is one probe rather than a policy decision.
+ * so a second instance's attempt is one probe rather than a policy decision.
  * Correctness across instances comes from the persisted record, not the flag.
  *
  * Constructed by {@link createCredentialsStore} around a KeyringBackend whose
@@ -185,9 +183,9 @@ export class FailoverStore {
             return;
         }
         // The keyring took the write, so it is authoritative for this account
-        // again: drop whatever an earlier failed-over session left in the fallback
-        // — a value, which would otherwise be read in preference to this write, or
-        // a tombstone, which would hide it. Best-effort: failing this cleanup must
+        // again: drop whatever a failed-over session left in the fallback — a
+        // value, which would otherwise be read in preference to this write, or a
+        // tombstone, which would hide it. Best-effort: failing this cleanup must
         // not fail a save that already succeeded.
         try {
             this.fallbackStore.delete(account);

package/lib/types/failover.js.map

@@ -1 +1 @@
-{"version":3,"file":"failover.js","sourceRoot":"","sources":["../../src/failover.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8EG;AAIH;;;;;;;;GAQG;AACH,MAAM,gBAAgB,GAAG,0BAA0B,CAAA;AAEnD,6DAA6D;AAC7D,MAAM,YAAY,GAAG,CAAC,OAAe,EAAU,EAAE,CAAC,gBAAgB,GAAG,OAAO,CAAA;AAE5E,6DAA6D;AAC7D,MAAM,eAAe,GAAG,GAAG,CAAA;AAa3B;;;;;;;;;;;;;;GAcG;AACH,MAAM,OAAO,aAAa;IACP,OAAO,CAAkB;IACzB,cAAc,CAAwB;IAC/C,QAAQ,CAA8B;IAC9C,uEAAuE;IAC/D,UAAU,GAAG,KAAK,CAAA;IAE1B,YAAY,OAAyB,EAAE,OAA6B;QAClE,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;QACtB,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,cAAc,CAAA;IAC9C,CAAC;IAED,qEAAqE;IACrE,IAAY,aAAa;QACvB,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS;YAAE,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,cAAc,EAAE,CAAA;QACtE,OAAO,IAAI,CAAC,QAAQ,CAAA;IACtB,CAAC;IAED;;;;;;OAMG;IACK,cAAc,CAAC,OAAe;QACpC,IAAI,CAAC;YACH,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAA;QAClD,CAAC;QAAC,MAAM,CAAC;YACP,oBAAoB;QACtB,CAAC;IACH,CAAC;IAED,GAAG,CAAC,OAAe;QACjB,uEAAuE;QACvE,uEAAuE;QACvE,+CAA+C;QAC/C,MAAM,eAAe,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;QACvD,IAAI,eAAe,KAAK,SAAS;YAAE,OAAO,eAAe,CAAA;QACzD,IAAI,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;YAAE,OAAO,SAAS,CAAA;QACnE,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;IAClC,CAAC;IAED,GAAG,CAAC,OAAe;QACjB,IAAI,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC;YAAE,OAAO,IAAI,CAAA;QAChD,IAAI,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;YAAE,OAAO,KAAK,CAAA;QAC/D,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;IAClC,CAAC;IAED,GAAG,CAAC,OAAe,EAAE,KAAa;QAChC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAA;QAC7E,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,uEAAuE;YACvE,gCAAgC;YAChC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;YACtC,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAA;YAC5B,OAAM;QACR,CAAC;QACD,IAAI,CAAC;YACH,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;QAClC,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,qEAAqE;YACrE,uEAAuE;YACvE,yEAAyE;YACzE,uEAAuE;YACvE,IAAI,CAAC,UAAU,GAAG,IAAI,CAAA;YACtB,IAAI,CAAC;gBACH,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;gBACtC,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAA;YAC9B,CAAC;YAAC,OAAO,aAAsB,EAAE,CAAC;gBAChC,MAAM,IAAI,KAAK,CACb,wEAAwE;sBACtE,GAAG,MAAM,CAAC,aAAa,CAAC,oBAAoB,MAAM,CAAC,KAAK,CAAC,GAAG,CAC/D,CAAA;YACH,CAAC;YACD,OAAM;QACR,CAAC;QACD,sEAAsE;QACtE,2EAA2E;QAC3E,2EAA2E;QAC3E,2EAA2E;QAC3E,0CAA0C;QAC1C,IAAI,CAAC;YACH,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;QACpC,CAAC;QAAC,MAAM,CAAC;YACP,0BAA0B;QAC5B,CAAC;QACD,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAA;IAC9B,CAAC;IAED,MAAM,CAAC,OAAe;QACpB,0EAA0E;QAC1E,gDAAgD;QAChD,IAAI,CAAC;YACH,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;QACpC,CAAC;QAAC,MAAM,CAAC;YACP,mEAAmE;QACrE,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,0EAA0E;YAC1E,qEAAqE;YACrE,uEAAuE;YACvE,2DAA2D;YAC3D,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAA;YAC5B,OAAM;QACR,CAAC;QACD,IAAI,CAAC;YACH,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;YAC5B,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAA;QAC9B,CAAC;QAAC,MAAM,CAAC;YACP,yEAAyE;YACzE,wEAAwE;YACxE,qEAAqE;YACrE,0EAA0E;YAC1E,uCAAuC;YACvC,IAAI,CAAC,UAAU,GAAG,IAAI,CAAA;YACtB,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAA;QAC9B,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACK,cAAc,CAAC,OAAe;QACpC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,eAAe,CAAC,CAAA;IAChE,CAAC;CACF"}
+{"version":3,"file":"failover.js","sourceRoot":"","sources":["../../src/failover.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4EG;AAIH;;;;;;;;GAQG;AACH,MAAM,gBAAgB,GAAG,0BAA0B,CAAA;AAEnD,6DAA6D;AAC7D,MAAM,YAAY,GAAG,CAAC,OAAe,EAAU,EAAE,CAAC,gBAAgB,GAAG,OAAO,CAAA;AAE5E,6DAA6D;AAC7D,MAAM,eAAe,GAAG,GAAG,CAAA;AAa3B;;;;;;;;;;;;;;GAcG;AACH,MAAM,OAAO,aAAa;IACP,OAAO,CAAkB;IACzB,cAAc,CAAwB;IAC/C,QAAQ,CAA8B;IAC9C,uEAAuE;IAC/D,UAAU,GAAG,KAAK,CAAA;IAE1B,YAAY,OAAyB,EAAE,OAA6B;QAClE,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;QACtB,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,cAAc,CAAA;IAC9C,CAAC;IAED,qEAAqE;IACrE,IAAY,aAAa;QACvB,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS;YAAE,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,cAAc,EAAE,CAAA;QACtE,OAAO,IAAI,CAAC,QAAQ,CAAA;IACtB,CAAC;IAED;;;;;;OAMG;IACK,cAAc,CAAC,OAAe;QACpC,IAAI,CAAC;YACH,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAA;QAClD,CAAC;QAAC,MAAM,CAAC;YACP,oBAAoB;QACtB,CAAC;IACH,CAAC;IAED,GAAG,CAAC,OAAe;QACjB,uEAAuE;QACvE,uEAAuE;QACvE,+CAA+C;QAC/C,MAAM,eAAe,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;QACvD,IAAI,eAAe,KAAK,SAAS;YAAE,OAAO,eAAe,CAAA;QACzD,IAAI,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;YAAE,OAAO,SAAS,CAAA;QACnE,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;IAClC,CAAC;IAED,GAAG,CAAC,OAAe;QACjB,IAAI,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC;YAAE,OAAO,IAAI,CAAA;QAChD,IAAI,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;YAAE,OAAO,KAAK,CAAA;QAC/D,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;IAClC,CAAC;IAED,GAAG,CAAC,OAAe,EAAE,KAAa;QAChC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAA;QAC7E,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,uEAAuE;YACvE,gCAAgC;YAChC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;YACtC,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAA;YAC5B,OAAM;QACR,CAAC;QACD,IAAI,CAAC;YACH,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;QAClC,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,qEAAqE;YACrE,uEAAuE;YACvE,yEAAyE;YACzE,uEAAuE;YACvE,IAAI,CAAC,UAAU,GAAG,IAAI,CAAA;YACtB,IAAI,CAAC;gBACH,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;gBACtC,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAA;YAC9B,CAAC;YAAC,OAAO,aAAsB,EAAE,CAAC;gBAChC,MAAM,IAAI,KAAK,CACb,wEAAwE;sBACtE,GAAG,MAAM,CAAC,aAAa,CAAC,oBAAoB,MAAM,CAAC,KAAK,CAAC,GAAG,CAC/D,CAAA;YACH,CAAC;YACD,OAAM;QACR,CAAC;QACD,sEAAsE;QACtE,sEAAsE;QACtE,yEAAyE;QACzE,yEAAyE;QACzE,0CAA0C;QAC1C,IAAI,CAAC;YACH,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;QACpC,CAAC;QAAC,MAAM,CAAC;YACP,0BAA0B;QAC5B,CAAC;QACD,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAA;IAC9B,CAAC;IAED,MAAM,CAAC,OAAe;QACpB,0EAA0E;QAC1E,gDAAgD;QAChD,IAAI,CAAC;YACH,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;QACpC,CAAC;QAAC,MAAM,CAAC;YACP,mEAAmE;QACrE,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,0EAA0E;YAC1E,qEAAqE;YACrE,uEAAuE;YACvE,2DAA2D;YAC3D,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAA;YAC5B,OAAM;QACR,CAAC;QACD,IAAI,CAAC;YACH,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;YAC5B,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAA;QAC9B,CAAC;QAAC,MAAM,CAAC;YACP,yEAAyE;YACzE,wEAAwE;YACxE,qEAAqE;YACrE,0EAA0E;YAC1E,uCAAuC;YACvC,IAAI,CAAC,UAAU,GAAG,IAAI,CAAA;YACtB,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAA;QAC9B,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACK,cAAc,CAAC,OAAe;QACpC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,eAAe,CAAC,CAAA;IAChE,CAAC;CACF"}

package/lib/types/index.d.ts

@@ -5,9 +5,9 @@
  * call {@link createCredentialsStore} and get a {@link CredentialsStore} —
  * they never learn which backend is serving. The factory probes backends in
  * priority order (OS keyring first, process memory last) and returns the
- * first that answers. New backends (fingerprint + encrypted file, etc.) slot
- * into the chain without touching callers. A keyring that answers the probe
- * but later rejects writes fails over to the next backend on first failure.
+ * first that answers, so a backend can be added to the chain without any
+ * caller changing. A keyring that answers the probe but later rejects writes
+ * fails over to the next backend on first failure.
  *
  * This is a tool library, not a DSH plugin — no `dsh.client`, no
  * `cordis.patch.yml`, no `apply`. DSH's own `ctx.credentials` is untouched;
@@ -64,7 +64,7 @@ export interface CredentialsStore {
 export declare function createCredentialsStore(config?: CredentialsStoreConfig): CredentialsStore;
 export { CREDENTIAL_SCOPE, CREDENTIALS_FILE_NAME, DEFAULT_SCOPE, KEYRING_SERVICE } from './scope.ts';
 export { KeyringBackend, __setKeyringModule } from './backends/keyring.ts';
-export { FingerprintBackend } from './backends/fingerprint.ts';
+export { FingerprintBackend, UnreadableCredentialsFile } from './backends/fingerprint.ts';
 export { MemoryBackend, __resetSharedMemoryBackend, sharedMemoryBackend } from './backends/memory.ts';
 export { FailoverStore } from './failover.ts';
 //# sourceMappingURL=index.d.ts.map

package/lib/types/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAOH,qDAAqD;AACrD,MAAM,WAAW,sBAAsB;IACrC;;;;;OAKG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAA;CACjC;AAED;;;;;;GAMG;AACH,MAAM,WAAW,gBAAgB;IAC/B,2EAA2E;IAC3E,GAAG,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAA;IACxC,8EAA8E;IAC9E,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IACzC,0EAA0E;IAC1E,MAAM,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;IAC7B,4FAA4F;IAC5F,GAAG,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAA;CAC9B;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,GAAE,sBAA2B,GAAG,gBAAgB,CAe5F;AAiBD,OAAO,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AACpG,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAA;AAC1E,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAA;AAC9D,OAAO,EAAE,aAAa,EAAE,0BAA0B,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAA;AACrG,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAOH,qDAAqD;AACrD,MAAM,WAAW,sBAAsB;IACrC;;;;;OAKG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAA;CACjC;AAED;;;;;;GAMG;AACH,MAAM,WAAW,gBAAgB;IAC/B,2EAA2E;IAC3E,GAAG,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAA;IACxC,8EAA8E;IAC9E,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IACzC,0EAA0E;IAC1E,MAAM,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;IAC7B,4FAA4F;IAC5F,GAAG,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAA;CAC9B;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,GAAE,sBAA2B,GAAG,gBAAgB,CAe5F;AAiBD,OAAO,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AACpG,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAA;AAC1E,OAAO,EAAE,kBAAkB,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAA;AACzF,OAAO,EAAE,aAAa,EAAE,0BAA0B,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAA;AACrG,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA"}

package/lib/types/index.js

@@ -5,9 +5,9 @@
  * call {@link createCredentialsStore} and get a {@link CredentialsStore} —
  * they never learn which backend is serving. The factory probes backends in
  * priority order (OS keyring first, process memory last) and returns the
- * first that answers. New backends (fingerprint + encrypted file, etc.) slot
- * into the chain without touching callers. A keyring that answers the probe
- * but later rejects writes fails over to the next backend on first failure.
+ * first that answers, so a backend can be added to the chain without any
+ * caller changing. A keyring that answers the probe but later rejects writes
+ * fails over to the next backend on first failure.
  *
  * This is a tool library, not a DSH plugin — no `dsh.client`, no
  * `cordis.patch.yml`, no `apply`. DSH's own `ctx.credentials` is untouched;
@@ -72,7 +72,7 @@ function createFallbackStore(config) {
 }
 export { CREDENTIAL_SCOPE, CREDENTIALS_FILE_NAME, DEFAULT_SCOPE, KEYRING_SERVICE } from "./scope.js";
 export { KeyringBackend, __setKeyringModule } from "./backends/keyring.js";
-export { FingerprintBackend } from "./backends/fingerprint.js";
+export { FingerprintBackend, UnreadableCredentialsFile } from "./backends/fingerprint.js";
 export { MemoryBackend, __resetSharedMemoryBackend, sharedMemoryBackend } from "./backends/memory.js";
 export { FailoverStore } from "./failover.js";
 //# sourceMappingURL=index.js.map

package/lib/types/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAA;AACtD,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAA;AAC9D,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAA;AAC1D,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA;AA+B7C;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,sBAAsB,CAAC,SAAiC,EAAE;IACxE,MAAM,OAAO,GAAiC,CAAC,GAAG,EAAE;QAClD,IAAI,CAAC;YACH,OAAO,IAAI,cAAc,CAAC,MAAM,CAAC,CAAA;QACnC,CAAC;QAAC,MAAM,CAAC;YACP,6DAA6D;YAC7D,OAAO,SAAS,CAAA;QAClB,CAAC;IACH,CAAC,CAAC,EAAE,CAAA;IACJ,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,yEAAyE;QACzE,uEAAuE;QACvE,OAAO,IAAI,aAAa,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,mBAAmB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;IAC1F,CAAC;IACD,OAAO,mBAAmB,CAAC,MAAM,CAAC,CAAA;AACpC,CAAC;AAED,qEAAqE;AACrE,SAAS,mBAAmB,CAAC,MAA8B;IACzD,IAAI,CAAC;QACH,OAAO,IAAI,kBAAkB,CAAC,MAAM,CAAC,CAAA;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,yEAAyE;IAC3E,CAAC;IACD,2EAA2E;IAC3E,6EAA6E;IAC7E,2EAA2E;IAC3E,4DAA4D;IAC5D,0BAA0B;IAC1B,OAAO,mBAAmB,CAAC,MAAM,CAAC,CAAA;AACpC,CAAC;AAED,OAAO,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AACpG,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAA;AAC1E,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAA;AAC9D,OAAO,EAAE,aAAa,EAAE,0BAA0B,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAA;AACrG,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAA;AACtD,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAA;AAC9D,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAA;AAC1D,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA;AA+B7C;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,sBAAsB,CAAC,SAAiC,EAAE;IACxE,MAAM,OAAO,GAAiC,CAAC,GAAG,EAAE;QAClD,IAAI,CAAC;YACH,OAAO,IAAI,cAAc,CAAC,MAAM,CAAC,CAAA;QACnC,CAAC;QAAC,MAAM,CAAC;YACP,6DAA6D;YAC7D,OAAO,SAAS,CAAA;QAClB,CAAC;IACH,CAAC,CAAC,EAAE,CAAA;IACJ,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,yEAAyE;QACzE,uEAAuE;QACvE,OAAO,IAAI,aAAa,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,mBAAmB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;IAC1F,CAAC;IACD,OAAO,mBAAmB,CAAC,MAAM,CAAC,CAAA;AACpC,CAAC;AAED,qEAAqE;AACrE,SAAS,mBAAmB,CAAC,MAA8B;IACzD,IAAI,CAAC;QACH,OAAO,IAAI,kBAAkB,CAAC,MAAM,CAAC,CAAA;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,yEAAyE;IAC3E,CAAC;IACD,2EAA2E;IAC3E,6EAA6E;IAC7E,2EAA2E;IAC3E,4DAA4D;IAC5D,0BAA0B;IAC1B,OAAO,mBAAmB,CAAC,MAAM,CAAC,CAAA;AACpC,CAAC;AAED,OAAO,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AACpG,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAA;AAC1E,OAAO,EAAE,kBAAkB,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAA;AACzF,OAAO,EAAE,aAAa,EAAE,0BAA0B,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAA;AACrG,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA"}

package/lib/types/paths.d.ts

@@ -1,17 +1,18 @@
 /**
  * Where per-host state lives. One definition, shared.
  *
- * ## Why this lives in the store package
+ * ## Why one definition
  *
  * `DSH_HOME` is the host's data directory, and two things in this repo derive
  * from it: the encrypted credentials file here, and the terraform cache in
- * `aishell-deploy`. Defining it twice would let the two drift — the same
- * failure shape the credential-scope constant was created to end.
+ * `aishell-deploy`. Two resolutions of the same variable can disagree — a
+ * trailing-slash difference, a different fallback — and the result is state
+ * written to one directory and looked for in another. One definition makes that
+ * impossible.
  *
- * The direction is forced by the dependency graph: `aishell-deploy` already
- * depends on this package, so a definition here is reachable from there, while
- * the reverse would be a cycle. This module is the lower of the two, so it is
- * where the definition belongs.
+ * It sits in the lower of the two packages because the dependency graph runs
+ * that way: `aishell-deploy` already depends on this one, so a definition here
+ * is reachable from there, while the reverse would be a cycle.
  *
  * @module @huaweidevtools/aishell-dsh-credentials-store/paths
  */
@@ -19,8 +20,8 @@
  * The fallback data directory when the host sets no `DSH_HOME`.
  *
  * `~/.aishell` — the same directory the desktop app uses, so a library or
- * headless run shares one location with a real install rather than inventing a
- * second home directory.
+ * headless run lands where a real install keeps its state rather than creating
+ * a second home directory.
  */
 export declare const FALLBACK_HOME_NAME = ".aishell";
 /**

package/lib/types/paths.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"paths.d.ts","sourceRoot":"","sources":["../../src/paths.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAKH;;;;;;GAMG;AACH,eAAO,MAAM,kBAAkB,aAAa,CAAA;AAE5C;;;;;;;;;;;GAWG;AACH,wBAAgB,OAAO,IAAI,MAAM,CAIhC;AAED;;;;;;;;;GASG;AACH,wBAAgB,cAAc,IAAI,MAAM,CAEvC"}
+{"version":3,"file":"paths.d.ts","sourceRoot":"","sources":["../../src/paths.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAKH;;;;;;GAMG;AACH,eAAO,MAAM,kBAAkB,aAAa,CAAA;AAE5C;;;;;;;;;;;GAWG;AACH,wBAAgB,OAAO,IAAI,MAAM,CAIhC;AAED;;;;;;;;;GASG;AACH,wBAAgB,cAAc,IAAI,MAAM,CAEvC"}

package/lib/types/paths.js

@@ -1,17 +1,18 @@
 /**
  * Where per-host state lives. One definition, shared.
  *
- * ## Why this lives in the store package
+ * ## Why one definition
  *
  * `DSH_HOME` is the host's data directory, and two things in this repo derive
  * from it: the encrypted credentials file here, and the terraform cache in
- * `aishell-deploy`. Defining it twice would let the two drift — the same
- * failure shape the credential-scope constant was created to end.
+ * `aishell-deploy`. Two resolutions of the same variable can disagree — a
+ * trailing-slash difference, a different fallback — and the result is state
+ * written to one directory and looked for in another. One definition makes that
+ * impossible.
  *
- * The direction is forced by the dependency graph: `aishell-deploy` already
- * depends on this package, so a definition here is reachable from there, while
- * the reverse would be a cycle. This module is the lower of the two, so it is
- * where the definition belongs.
+ * It sits in the lower of the two packages because the dependency graph runs
+ * that way: `aishell-deploy` already depends on this one, so a definition here
+ * is reachable from there, while the reverse would be a cycle.
  *
  * @module @huaweidevtools/aishell-dsh-credentials-store/paths
  */
@@ -21,8 +22,8 @@ import { join } from 'node:path';
  * The fallback data directory when the host sets no `DSH_HOME`.
  *
  * `~/.aishell` — the same directory the desktop app uses, so a library or
- * headless run shares one location with a real install rather than inventing a
- * second home directory.
+ * headless run lands where a real install keeps its state rather than creating
+ * a second home directory.
  */
 export const FALLBACK_HOME_NAME = '.aishell';
 /**

package/lib/types/paths.js.map

@@ -1 +1 @@
-{"version":3,"file":"paths.js","sourceRoot":"","sources":["../../src/paths.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAEhC;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,UAAU,CAAA;AAE5C;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,OAAO;IACrB,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAA;IACvC,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,UAAU,CAAA;IAC3E,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,kBAAkB,CAAC,CAAA;AAC5C,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,cAAc;IAC5B,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,aAAa,CAAC,CAAA;AACvC,CAAC"}
+{"version":3,"file":"paths.js","sourceRoot":"","sources":["../../src/paths.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAEhC;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,UAAU,CAAA;AAE5C;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,OAAO;IACrB,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAA;IACvC,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,UAAU,CAAA;IAC3E,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,kBAAkB,CAAC,CAAA;AAC5C,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,cAAc;IAC5B,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,aAAa,CAAC,CAAA;AACvC,CAAC"}

package/lib/types/scope.d.ts

@@ -17,25 +17,25 @@
  * | keyring service name | `aishell-dsh-plugins` |
  * | encrypted file name | `plugins.credentials.enc` |
  *
- * ## Why it is not a plugin config option
+ * ## Why it is a build-time constant
  *
- * It was one, briefly: `keyringService` sat on four plugins' `Config`. Only one
- * of the four writes and all four read, so a deployment that set it on a reader
- * but not the writer stored credentials in one namespace and looked for them in
- * another — the form said "saved" while every tool said "not authenticated".
- * A knob whose only observable effect is that failure is not worth having.
+ * The value has to be the same on both sides of a credential: the writer that
+ * stores it and the reader that looks it up. A runtime setting can be applied
+ * to one plugin and not another, and the result is a form that says "saved"
+ * beside tools that say "not authenticated" — a failure whose only symptom is
+ * the one thing the setting exists to control.
  *
  * A constant cannot be set on one side only. Two deployments that must not see
  * each other's credentials (a staging profile beside a production one) differ
  * by *building* differently, which is the honest place for a persistence
  * boundary.
  *
- * ## Why there is no migration
+ * ## Why the default namespace carries no migration path
  *
- * The default changed from `aishell-dsh` to `aishell-dsh-plugins` before the
- * first release, so no install ever wrote the old namespace. Nothing reads it,
- * and adding a migration path would mean keeping the old name alive forever for
- * a state that never existed.
+ * `plugins` is the first and only scope, so a build that sets nothing lands on
+ * it and a build that sets something has deliberately moved to a namespace of
+ * its own. There are no two names to reconcile, so there is no migration path
+ * to write — and none is needed until a release renames this default.
  *
  * @module @huaweidevtools/aishell-dsh-credentials-store/scope
  */