@jeffusion/bungee-types 5.24.2 → 5.25.0

package/dist/daemon-file.d.ts

@@ -43,6 +43,8 @@ export type DaemonFileOptions = {
 export declare function formatDaemonFileAclError(error: unknown): string | null;
 /** @internal source-test probe; not re-exported from the package root. */
 export declare function __testSelectWindowsAclExecutable(environment: NodeJS.ProcessEnv): string;
+/** Restrict a newly created private file before writing any secret bytes. */
+export declare function secureWindowsOwnerOnlyFileAcl(path: string, adapter?: WindowsAclAdapter): Promise<void>;
 /** Read-only validation: untrusted input files must never have their ACL repaired. */
 export declare function assertWindowsOwnerOnlyFileAcl(path: string, adapter?: WindowsAclAdapter): Promise<void>;
 /** @internal source-test probe; not re-exported from the package root. */

package/dist/daemon-file.js

@@ -717,6 +717,11 @@ function defaultWindowsAclAdapter(deadlineMs = WINDOWS_ACL_DEADLINE_MS) {
         },
     };
 }
+/** Restrict a newly created private file before writing any secret bytes. */
+export async function secureWindowsOwnerOnlyFileAcl(path, adapter = defaultWindowsAclAdapter()) {
+    await ensureWindowsAcl(path, adapter, 'file');
+    await assertWindowsOwnerOnlyFileAcl(path, adapter);
+}
 /** Read-only validation: untrusted input files must never have their ACL repaired. */
 export async function assertWindowsOwnerOnlyFileAcl(path, adapter = defaultWindowsAclAdapter()) {
     const snapshot = await adapter.read(path);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jeffusion/bungee-types",
-  "version": "5.24.2",
+  "version": "5.25.0",
   "description": "TypeScript type definitions for Bungee",
   "type": "module",
   "main": "./dist/index.js",