@peac/cli 0.14.1 → 0.14.2

package/dist/lib/bridge-url.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Validate-and-normalize a bridge base URL. The bridge URL flows in from
+ * either a config file (`~/.peac/bridge.json`) or `process.env.PEAC_BRIDGE_URL`.
+ * Both are local-trust sources, but a value that originated as a filesystem
+ * path could otherwise reach an HTTP fetch sink without an explicit
+ * protocol-shape check.
+ *
+ * `parseBridgeBaseUrl()` parses the input via the WHATWG `URL` constructor
+ * (which throws on malformed input) and restricts the protocol to `http:` or
+ * `https:`. Returning the parsed URL gives downstream callers a clean base
+ * for `joinBridgePath()` joins.
+ */
+export declare function parseBridgeBaseUrl(raw: unknown): URL;
+/**
+ * Join an endpoint path onto a parsed bridge base URL while preserving any
+ * configured base pathname prefix. A bridge mounted behind a reverse proxy
+ * at `https://example.com/bridge` MUST resolve `/health` to
+ * `https://example.com/bridge/health`, not `https://example.com/health`.
+ *
+ * The endpoint path is treated as a relative segment list: leading slashes
+ * are stripped, doubled slashes inside the joined pathname are collapsed,
+ * and any query/fragment from the base is dropped (callers add their own).
+ */
+export declare function joinBridgePath(base: URL, endpointPath: string): URL;
+//# sourceMappingURL=bridge-url.d.ts.map

package/dist/lib/bridge-url.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bridge-url.d.ts","sourceRoot":"","sources":["../../src/lib/bridge-url.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,OAAO,GAAG,GAAG,CASpD;AAED;;;;;;;;;GASG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,MAAM,GAAG,GAAG,CAUnE"}

package/dist/lib/safe-file.d.ts

@@ -0,0 +1,88 @@
+/**
+ * Internal file-IO helpers for @peac/cli command handlers.
+ *
+ * Package-private; not exported from any package barrel and not part of
+ * the public CLI API. Mirrors the syscall-style conventions already in
+ * use in `output-preflight.ts`: named imports from `node:fs`,
+ * fd-bound reads, errno discrimination via `NodeJS.ErrnoException`, and
+ * `closeSync` always wrapped in `try`/`finally` with secondary errors
+ * swallowed so they do not mask the primary error.
+ *
+ * The helpers exist to remove TOCTOU patterns where an existence probe
+ * (`existsSync` / `accessSync` / `statSync`) is followed by a file
+ * operation (`readFileSync` / `writeFileSync` / `openSync` / `unlinkSync`)
+ * on the same path. The atomic alternative is a single syscall that
+ * discriminates outcome via errno: success means the operation worked;
+ * `ENOENT` means the file is missing; `EACCES` means the file is
+ * unreadable / unwritable; `EISDIR` / `ENOTDIR` means the path is the
+ * wrong type.
+ *
+ * Each helper takes a path string. Internal use of file descriptors is
+ * hidden from the caller. Callers receive plain return values on success
+ * and `NodeJS.ErrnoException`-shaped errors on failure that they can
+ * inspect via `e.code === 'ENOENT' | 'EACCES' | 'EEXIST' | 'EISDIR' |
+ * 'ENOTDIR'` and translate into user-facing wording.
+ */
+/**
+ * Read the entire file at `path` as a UTF-8 string via a single
+ * fd-bound `open`/`fstat`/`read`/`close` sequence.
+ *
+ * Throws an `ErrnoException`-shaped error on failure. Callers
+ * discriminate via `e.code`:
+ *   - `ENOENT`: file does not exist
+ *   - `EISDIR`: path resolves to a directory
+ *   - `EACCES`: not readable
+ */
+export declare function readFileUtf8Snapshot(path: string): string;
+/**
+ * Read the entire file at `path` as a `Buffer` via a single fd-bound
+ * `open`/`fstat`/`read`/`close` sequence. Optionally enforces a maximum
+ * byte size. The size limit is checked twice: once against the `fstat`
+ * size before reading (cheap fast-fail) and once against the actual
+ * read length (defends against the file growing between `fstat` and the
+ * subsequent `readFileSync`).
+ *
+ * Throws on failure:
+ *   - `ENOENT`: file does not exist
+ *   - `EISDIR`: path resolves to a directory
+ *   - `EACCES`: not readable
+ *   - `E_PEAC_FILE_TOO_LARGE`: file exceeds `options.maxBytes`
+ */
+export declare function readFileBufferSnapshot(path: string, options?: {
+    maxBytes?: number;
+}): Buffer;
+/**
+ * Write `data` to `path` atomically without overwriting an existing
+ * file. Uses POSIX `O_CREAT | O_EXCL | O_WRONLY` semantics via Node's
+ * `'wx'` flag. The path either gets created with the supplied content
+ * or the call throws `EEXIST`.
+ *
+ * Callers translate `EEXIST` into user-facing wording (e.g. "use --force
+ * to overwrite").
+ */
+export declare function writeFileNoOverwrite(path: string, data: string | Buffer, options?: {
+    encoding?: BufferEncoding;
+    mode?: number;
+}): void;
+/**
+ * Rewrite a JSON config file atomically. If the file does not exist
+ * (ENOENT), returns silently: there is no config to rewrite. Otherwise
+ * the existing content is parsed, `mutate(config)` is invoked, and the
+ * mutated config is written via a sibling temp file plus
+ * `renameSync`. The final target path is never partially written.
+ *
+ * Existing file permissions on the target are preserved across the
+ * rename. If the existing mode cannot be observed, the temp file is
+ * created with a restrictive `0o600` fallback so a config rewrite never
+ * accidentally widens the permission set.
+ *
+ * Cleans up the temp file if rename fails. Read failures other than
+ * `ENOENT` propagate to the caller.
+ */
+export declare function rewriteJsonFileAtomic(path: string, mutate: (config: Record<string, unknown>) => void): void;
+/**
+ * Remove the file at `path` if it exists. Swallows `ENOENT`. All
+ * other errors propagate to the caller.
+ */
+export declare function unlinkIfExists(path: string): void;
+//# sourceMappingURL=safe-file.d.ts.map

package/dist/lib/safe-file.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"safe-file.d.ts","sourceRoot":"","sources":["../../src/lib/safe-file.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAeH;;;;;;;;;GASG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAkBzD;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAyB5F;AAgBD;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,GAAG,MAAM,EACrB,OAAO,CAAC,EAAE;IAAE,QAAQ,CAAC,EAAE,cAAc,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,GACrD,IAAI,CAQN;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,GAChD,IAAI,CAiDN;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAMjD"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@peac/cli",
-  "version": "0.14.1",
+  "version": "0.14.2",
   "description": "PEAC protocol command-line tools",
   "main": "dist/index.cjs",
   "types": "dist/index.d.ts",
@@ -38,13 +38,13 @@
   "dependencies": {
     "chalk": "^4.1.2",
     "commander": "^11.0.0",
-    "@peac/audit": "0.14.1",
-    "@peac/kernel": "0.14.1",
-    "@peac/net-node": "0.14.1",
-    "@peac/crypto": "0.14.1",
-    "@peac/policy-kit": "0.14.1",
-    "@peac/protocol": "0.14.1",
-    "@peac/schema": "0.14.1"
+    "@peac/audit": "0.14.2",
+    "@peac/crypto": "0.14.2",
+    "@peac/policy-kit": "0.14.2",
+    "@peac/protocol": "0.14.2",
+    "@peac/kernel": "0.14.2",
+    "@peac/net-node": "0.14.2",
+    "@peac/schema": "0.14.2"
   },
   "devDependencies": {
     "@types/node": "^22.19.11",