@mnemonik/credentials 0.1.76 → 0.1.77

package/dist/index.js

@@ -300,7 +300,7 @@ export function createCredentialAdapter(options = {}) {
     /**
      * One rotation request, with its retry rules. A lost response is retried once, inside the
      * caller's lease and with the same predecessor, because the issuer may already have rotated
-     * (rotation_response_lost otherwise). A 429/5xx is an answer — nothing rotated — so its
+     * (rotation_response_lost otherwise). A 429/5xx is an answer - nothing rotated - so its
      * back-off is not slept here: it is returned as `{ backoffMs }` for rotateStored to wait out
      * with the lease released. `state` carries the attempt counters across those lease entries.
      */
@@ -544,7 +544,7 @@ export function createCredentialAdapter(options = {}) {
      * goes first: a crash between the two deletes then leaves only a record-less secret, which
      * every reader treats as absent, sign-in overwrites, revokeFamily can still revoke with, and
      * forget erases. Deleting the secret first left a record without its secret, on which every
-     * read — and so every sign-in, sign-out and rollback — failed.
+     * read - and so every sign-in, sign-out and rollback - failed.
      */
     async function removeStored(recordPath, kind, secretPath) {
         const record = await readRecord(recordPath, kind);
@@ -647,7 +647,7 @@ export function createCredentialAdapter(options = {}) {
      * The root-binding key. Hooks call this on every run, so an existing key is read without the
      * lease or ensureParent (which on Windows runs icacls for each directory): the binding is
      * written once, secret then record, under the lease, so a record whose secret reads back is
-     * a complete key. Only a key that must be created takes the slow path — the private
+     * a complete key. Only a key that must be created takes the slow path - the private
      * directories first, then the lease (never the reverse, or the lease would create them
      * without their ACLs), a reread, and the write. A record whose secret is gone is replaced.
      */

package/dist/storage.d.ts

@@ -32,9 +32,9 @@ export declare function credentialPaths(stateDir?: string, familyId?: string): {
     secret: string;
 };
 /**
- * Symlink policy (AC-48, P2-02: "reject symlinks, wrong ownership, weak permissions"): the
+ * Symlink policy (the credential store design: "reject symlinks, wrong ownership, weak permissions"): the
  * directories ABOVE the configured state root are canonicalized once, at construction, and
- * trusted — the user's home or the OS temp directory may legitimately be reached through a
+ * trusted - the user's home or the OS temp directory may legitimately be reached through a
  * link (/home -> /data/home, macOS /var -> /private/var), and refusing those made every
  * credential operation fail. The root itself is not resolved: it and every component inside
  * it are lstat()ed on each use and a symbolic link there is refused (symlink_rejected; for

package/dist/storage.js

@@ -55,9 +55,9 @@ function canonicalDirectory(path) {
     }
 }
 /**
- * Symlink policy (AC-48, P2-02: "reject symlinks, wrong ownership, weak permissions"): the
+ * Symlink policy (the credential store design: "reject symlinks, wrong ownership, weak permissions"): the
  * directories ABOVE the configured state root are canonicalized once, at construction, and
- * trusted — the user's home or the OS temp directory may legitimately be reached through a
+ * trusted - the user's home or the OS temp directory may legitimately be reached through a
  * link (/home -> /data/home, macOS /var -> /private/var), and refusing those made every
  * credential operation fail. The root itself is not resolved: it and every component inside
  * it are lstat()ed on each use and a symbolic link there is refused (symlink_rejected; for

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mnemonik/credentials",
-  "version": "0.1.76",
+  "version": "0.1.77",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/JayDeeCo-Limited/mnemonik.git",
@@ -29,7 +29,7 @@
   },
   "license": "SEE LICENSE IN LICENSE",
   "dependencies": {
-    "@mnemonik/local-setup": "0.1.76"
+    "@mnemonik/local-setup": "0.1.77"
   },
   "devDependencies": {
     "@typescript/native": "npm:typescript@7.0.2",