@skillsmith/core 0.11.2 → 0.11.4

package/dist/src/config/config-atomic-write.test.d.ts

@@ -0,0 +1,9 @@
+/**
+ * SMI-5531: Atomic config-write primitive tests.
+ *
+ * Uses the same tmpdir-per-test isolation harness as device-identity.test.ts
+ * / index.test.ts (no shared HOME mutation needed here — these primitives
+ * take an explicit path, not the global config path).
+ */
+export {};
+//# sourceMappingURL=config-atomic-write.test.d.ts.map

package/dist/src/config/config-atomic-write.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-atomic-write.test.d.ts","sourceRoot":"","sources":["../../../src/config/config-atomic-write.test.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG"}

package/dist/src/config/config-atomic-write.test.js

@@ -0,0 +1,92 @@
+/**
+ * SMI-5531: Atomic config-write primitive tests.
+ *
+ * Uses the same tmpdir-per-test isolation harness as device-identity.test.ts
+ * / index.test.ts (no shared HOME mutation needed here — these primitives
+ * take an explicit path, not the global config path).
+ */
+import { describe, it, expect } from 'vitest';
+import { existsSync, mkdirSync, readFileSync, readdirSync, utimesSync, writeFileSync } from 'fs';
+import * as path from 'path';
+import * as os from 'os';
+import { acquireConfigLock, atomicWriteFile } from './config-atomic-write.js';
+function makeTempDir() {
+    const dir = path.join(os.tmpdir(), `skillsmith-atomic-write-test-${Date.now()}-${Math.random().toString(36).slice(2)}`);
+    mkdirSync(dir, { recursive: true });
+    return dir;
+}
+describe('acquireConfigLock — mutual exclusion', () => {
+    it('a second acquire attempt while the lock is held times out', () => {
+        const dir = makeTempDir();
+        const configPath = path.join(dir, 'config.json');
+        const release = acquireConfigLock(configPath);
+        try {
+            expect(() => acquireConfigLock(configPath, 200)).toThrow(/Timed out waiting for config lock/);
+        }
+        finally {
+            release();
+        }
+    });
+    it('a subsequent acquire succeeds immediately after release', () => {
+        const dir = makeTempDir();
+        const configPath = path.join(dir, 'config.json');
+        const release = acquireConfigLock(configPath);
+        release();
+        // Should not throw / should not need to wait out any timeout.
+        const secondRelease = acquireConfigLock(configPath, 200);
+        secondRelease();
+    });
+    it('force-clears a stale lock (older than the staleness threshold) instead of waiting out the full timeout', () => {
+        const dir = makeTempDir();
+        const configPath = path.join(dir, 'config.json');
+        const lockPath = `${configPath}.lock`;
+        // Simulate a lock abandoned by a crashed process: create it, then
+        // backdate its mtime well past the staleness threshold.
+        writeFileSync(lockPath, '99999');
+        const longAgo = new Date(Date.now() - 60_000);
+        utimesSync(lockPath, longAgo, longAgo);
+        const start = Date.now();
+        // Even with a tight timeout budget, stale-lock recovery should let this
+        // succeed almost immediately rather than burning the whole window.
+        const release = acquireConfigLock(configPath, 500);
+        const elapsedMs = Date.now() - start;
+        release();
+        expect(elapsedMs).toBeLessThan(500);
+    });
+    it('release() is idempotent — calling it twice does not throw', () => {
+        const dir = makeTempDir();
+        const configPath = path.join(dir, 'config.json');
+        const release = acquireConfigLock(configPath);
+        release();
+        expect(() => release()).not.toThrow();
+    });
+});
+describe('atomicWriteFile', () => {
+    it('writes the given content to the target path', () => {
+        const dir = makeTempDir();
+        const filePath = path.join(dir, 'config.json');
+        atomicWriteFile(filePath, JSON.stringify({ a: 1 }), 0o600);
+        expect(JSON.parse(readFileSync(filePath, 'utf-8'))).toEqual({ a: 1 });
+    });
+    it('leaves no stray temp file behind after a successful write', () => {
+        const dir = makeTempDir();
+        const filePath = path.join(dir, 'config.json');
+        atomicWriteFile(filePath, '{}', 0o600);
+        const entries = readdirSync(dir);
+        expect(entries.some((f) => f.endsWith('.tmp'))).toBe(false);
+    });
+    it('overwrites existing content atomically (rename-in-place, not append)', () => {
+        const dir = makeTempDir();
+        const filePath = path.join(dir, 'config.json');
+        atomicWriteFile(filePath, JSON.stringify({ a: 1 }), 0o600);
+        atomicWriteFile(filePath, JSON.stringify({ b: 2 }), 0o600);
+        expect(JSON.parse(readFileSync(filePath, 'utf-8'))).toEqual({ b: 2 });
+    });
+    it('sets the requested file mode', () => {
+        const dir = makeTempDir();
+        const filePath = path.join(dir, 'config.json');
+        atomicWriteFile(filePath, '{}', 0o600);
+        expect(existsSync(filePath)).toBe(true);
+    });
+});
+//# sourceMappingURL=config-atomic-write.test.js.map

package/dist/src/config/config-atomic-write.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-atomic-write.test.js","sourceRoot":"","sources":["../../../src/config/config-atomic-write.test.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAC7C,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,IAAI,CAAA;AAChG,OAAO,KAAK,IAAI,MAAM,MAAM,CAAA;AAC5B,OAAO,KAAK,EAAE,MAAM,IAAI,CAAA;AAExB,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAA;AAE7E,SAAS,WAAW;IAClB,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CACnB,EAAE,CAAC,MAAM,EAAE,EACX,gCAAgC,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CACpF,CAAA;IACD,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IACnC,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,QAAQ,CAAC,sCAAsC,EAAE,GAAG,EAAE;IACpD,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACnE,MAAM,GAAG,GAAG,WAAW,EAAE,CAAA;QACzB,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAA;QAEhD,MAAM,OAAO,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAA;QAC7C,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,EAAE,CAAC,iBAAiB,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,mCAAmC,CAAC,CAAA;QAC/F,CAAC;gBAAS,CAAC;YACT,OAAO,EAAE,CAAA;QACX,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;QACjE,MAAM,GAAG,GAAG,WAAW,EAAE,CAAA;QACzB,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAA;QAEhD,MAAM,OAAO,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAA;QAC7C,OAAO,EAAE,CAAA;QAET,8DAA8D;QAC9D,MAAM,aAAa,GAAG,iBAAiB,CAAC,UAAU,EAAE,GAAG,CAAC,CAAA;QACxD,aAAa,EAAE,CAAA;IACjB,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,wGAAwG,EAAE,GAAG,EAAE;QAChH,MAAM,GAAG,GAAG,WAAW,EAAE,CAAA;QACzB,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAA;QAChD,MAAM,QAAQ,GAAG,GAAG,UAAU,OAAO,CAAA;QAErC,kEAAkE;QAClE,wDAAwD;QACxD,aAAa,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;QAChC,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,CAAA;QAC7C,UAAU,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAA;QAEtC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QACxB,wEAAwE;QACxE,mEAAmE;QACnE,MAAM,OAAO,GAAG,iBAAiB,CAAC,UAAU,EAAE,GAAG,CAAC,CAAA;QAClD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAA;QAEpC,OAAO,EAAE,CAAA;QACT,MAAM,CAAC,SAAS,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,CAAA;IACrC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACnE,MAAM,GAAG,GAAG,WAAW,EAAE,CAAA;QACzB,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAA;QAEhD,MAAM,OAAO,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAA;QAC7C,OAAO,EAAE,CAAA;QACT,MAAM,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAA;IACvC,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAC/B,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,MAAM,GAAG,GAAG,WAAW,EAAE,CAAA;QACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAA;QAE9C,eAAe,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,CAAA;QAE1D,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;IACvE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACnE,MAAM,GAAG,GAAG,WAAW,EAAE,CAAA;QACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAA;QAE9C,eAAe,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,CAAA;QAEtC,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,CAAA;QAChC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAC7D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,sEAAsE,EAAE,GAAG,EAAE;QAC9E,MAAM,GAAG,GAAG,WAAW,EAAE,CAAA;QACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAA;QAE9C,eAAe,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,CAAA;QAC1D,eAAe,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,CAAA;QAE1D,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;IACvE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACtC,MAAM,GAAG,GAAG,WAAW,EAAE,CAAA;QACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAA;QAE9C,eAAe,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,CAAA;QAEtC,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACzC,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/src/config/device-identity.d.ts

@@ -43,10 +43,26 @@ export declare function getDeviceId(): string | undefined;
  * `/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i`
  *
  * Preserves any existing `deviceLabel` and `lastPushAt` during the write.
+ * Concurrency-safe across processes (SMI-5531) — see
+ * {@link getOrCreatePersistedId}.
  *
  * SMI-5391
  */
 export declare function getOrCreateDeviceId(): string;
+/**
+ * Return the persisted per-install telemetry identifier, creating and
+ * persisting a new one (`sha256(randomUUID())`) if none exists yet.
+ *
+ * SMI-5531: generated and persisted UNCONDITIONALLY — this call must
+ * succeed and persist an id regardless of `SKILLSMITH_TELEMETRY_ENABLED` /
+ * `POSTHOG_API_KEY`, which is exactly the env-gated condition that made the
+ * legacy `context.distinctId` inert for virtually every real user. If a
+ * future refactor re-couples this to that legacy gate, this fix is inert
+ * again under a new field name — do not add any env/flag check here.
+ *
+ * Concurrency-safe across processes — see {@link getOrCreatePersistedId}.
+ */
+export declare function getOrCreateInstallId(): string;
 /**
  * Set (or clear) the optional user-facing label for this device.
  *

package/dist/src/config/device-identity.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"device-identity.d.ts","sourceRoot":"","sources":["../../../src/config/device-identity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AASH;;;;;;GAMG;AACH,wBAAgB,WAAW,IAAI,MAAM,GAAG,SAAS,CAEhD;AAED;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,IAAI,MAAM,CAa5C;AAED;;;;;;;;;GASG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAQ9D;AAED;;;;;;;;;GASG;AACH,wBAAgB,YAAY,IAAI,IAAI,CAEnC;AAMD;;;;;;;;;GASG;AACH,wBAAgB,8BAA8B,IAAI,OAAO,CAIxD;AAMD;;;;GAIG;AACH,wBAAgB,sBAAsB,IAAI,MAAM,GAAG,SAAS,CAE3D;AAED;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAQ9D;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,cAAc,CAC5B,GAAG,EAAE,MAAM,EACX,UAAU,CAAC,EAAE,MAAM,EACnB,UAAU,SAAsB,GAC/B,OAAO,CAKT"}
+{"version":3,"file":"device-identity.d.ts","sourceRoot":"","sources":["../../../src/config/device-identity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAqEH;;;;;;GAMG;AACH,wBAAgB,WAAW,IAAI,MAAM,GAAG,SAAS,CAEhD;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,mBAAmB,IAAI,MAAM,CAS5C;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,oBAAoB,IAAI,MAAM,CAS7C;AAED;;;;;;;;;GASG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAQ9D;AAED;;;;;;;;;GASG;AACH,wBAAgB,YAAY,IAAI,IAAI,CAEnC;AAMD;;;;;;;;;GASG;AACH,wBAAgB,8BAA8B,IAAI,OAAO,CAIxD;AAMD;;;;GAIG;AACH,wBAAgB,sBAAsB,IAAI,MAAM,GAAG,SAAS,CAE3D;AAED;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAQ9D;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,cAAc,CAC5B,GAAG,EAAE,MAAM,EACX,UAAU,CAAC,EAAE,MAAM,EACnB,UAAU,SAAsB,GAC/B,OAAO,CAKT"}

package/dist/src/config/device-identity.js

@@ -28,8 +28,63 @@
  * }
  * ```
  */
-import { randomUUID } from 'node:crypto';
-import { loadConfig, saveConfig } from './index.js';
+import { randomUUID, createHash } from 'node:crypto';
+import { chmodSync } from 'node:fs';
+import { loadConfig, saveConfig, getConfigPath, ensureConfigDir } from './index.js';
+import { acquireConfigLock, atomicWriteFile } from './config-atomic-write.js';
+// ============================================================================
+// Shared create-if-absent primitive (SMI-5531)
+// ============================================================================
+/**
+ * Create-if-absent primitive shared by `getOrCreateDeviceId` and
+ * `getOrCreateInstallId`.
+ *
+ * An unguarded fast-path read (`getExisting(loadConfig())`) covers the
+ * common case cheaply. Only on a miss do we pay for
+ * {@link acquireConfigLock} — and, critically, RE-READ config state after
+ * acquiring it: another process may have created the value in the window
+ * between our fast-path read and lock acquisition. Skipping that re-check
+ * (e.g. by calling the plain `saveConfig()` with a value already decided
+ * before the lock was held) is exactly the TOCTOU shape that let two
+ * concurrent callers generate and persist two DIFFERENT ids — whichever
+ * wrote last would win on disk, but the loser's caller would still return
+ * its own (now-orphaned) generated value, so the two callers would never
+ * converge. `saveConfig()` itself is deliberately NOT used inside the
+ * locked section below: it would try to (re-)acquire this same
+ * non-reentrant lock and deadlock.
+ *
+ * @param getExisting - Reads the target id out of a config snapshot.
+ * @param generate - Produces a new id when none exists.
+ * @param merge - Returns a new full config with the id applied on top of `latest`.
+ */
+function getOrCreatePersistedId(getExisting, generate, merge) {
+    const fastPathExisting = getExisting(loadConfig());
+    if (fastPathExisting)
+        return fastPathExisting;
+    // The lock file lives alongside config.json — the directory must exist
+    // BEFORE we try to create it, not after acquiring the lock.
+    ensureConfigDir();
+    const configPath = getConfigPath();
+    const release = acquireConfigLock(configPath);
+    try {
+        const latest = loadConfig();
+        const alreadyCreated = getExisting(latest);
+        if (alreadyCreated)
+            return alreadyCreated;
+        const id = generate();
+        atomicWriteFile(configPath, JSON.stringify(merge(latest, id), null, 2), 0o600);
+        try {
+            chmodSync(configPath, 0o600);
+        }
+        catch {
+            // Ignore chmod errors on Windows.
+        }
+        return id;
+    }
+    finally {
+        release();
+    }
+}
 // ============================================================================
 // Device identity
 // ============================================================================
@@ -50,22 +105,35 @@ export function getDeviceId() {
  * `/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i`
  *
  * Preserves any existing `deviceLabel` and `lastPushAt` during the write.
+ * Concurrency-safe across processes (SMI-5531) — see
+ * {@link getOrCreatePersistedId}.
  *
  * SMI-5391
  */
 export function getOrCreateDeviceId() {
-    const config = loadConfig();
-    const existing = config.inventory?.deviceId;
-    if (existing)
-        return existing;
-    const deviceId = randomUUID();
-    saveConfig({
-        inventory: {
-            ...config.inventory,
-            deviceId,
-        },
-    });
-    return deviceId;
+    return getOrCreatePersistedId((config) => config.inventory?.deviceId, () => randomUUID(), (latest, deviceId) => ({
+        ...latest,
+        inventory: { ...latest.inventory, deviceId },
+    }));
+}
+/**
+ * Return the persisted per-install telemetry identifier, creating and
+ * persisting a new one (`sha256(randomUUID())`) if none exists yet.
+ *
+ * SMI-5531: generated and persisted UNCONDITIONALLY — this call must
+ * succeed and persist an id regardless of `SKILLSMITH_TELEMETRY_ENABLED` /
+ * `POSTHOG_API_KEY`, which is exactly the env-gated condition that made the
+ * legacy `context.distinctId` inert for virtually every real user. If a
+ * future refactor re-couples this to that legacy gate, this fix is inert
+ * again under a new field name — do not add any env/flag check here.
+ *
+ * Concurrency-safe across processes — see {@link getOrCreatePersistedId}.
+ */
+export function getOrCreateInstallId() {
+    return getOrCreatePersistedId((config) => config.telemetry?.installId, () => createHash('sha256').update(randomUUID()).digest('hex'), (latest, installId) => ({
+        ...latest,
+        telemetry: { ...latest.telemetry, installId },
+    }));
 }
 /**
  * Set (or clear) the optional user-facing label for this device.

package/dist/src/config/device-identity.js.map

@@ -1 +1 @@
-{"version":3,"file":"device-identity.js","sourceRoot":"","sources":["../../../src/config/device-identity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAEnD,+EAA+E;AAC/E,kBAAkB;AAClB,+EAA+E;AAE/E;;;;;;GAMG;AACH,MAAM,UAAU,WAAW;IACzB,OAAO,UAAU,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAA;AACzC,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,mBAAmB;IACjC,MAAM,MAAM,GAAG,UAAU,EAAE,CAAA;IAC3B,MAAM,QAAQ,GAAG,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAA;IAC3C,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAA;IAE7B,MAAM,QAAQ,GAAG,UAAU,EAAE,CAAA;IAC7B,UAAU,CAAC;QACT,SAAS,EAAE;YACT,GAAG,MAAM,CAAC,SAAS;YACnB,QAAQ;SACT;KACF,CAAC,CAAA;IACF,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,cAAc,CAAC,KAAyB;IACtD,MAAM,MAAM,GAAG,UAAU,EAAE,CAAA;IAC3B,UAAU,CAAC;QACT,SAAS,EAAE;YACT,GAAG,MAAM,CAAC,SAAS;YACnB,WAAW,EAAE,KAAK;SACnB;KACF,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,YAAY;IAC1B,UAAU,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAA;AACtC,CAAC;AAED,+EAA+E;AAC/E,oBAAoB;AACpB,+EAA+E;AAE/E;;;;;;;;;GASG;AACH,MAAM,UAAU,8BAA8B;IAC5C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAA;IACpD,IAAI,CAAC,GAAG;QAAE,OAAO,KAAK,CAAA;IACtB,OAAO,GAAG,KAAK,GAAG,IAAI,GAAG,CAAC,WAAW,EAAE,KAAK,MAAM,CAAA;AACpD,CAAC;AAED,+EAA+E;AAC/E,gBAAgB;AAChB,+EAA+E;AAE/E;;;;GAIG;AACH,MAAM,UAAU,sBAAsB;IACpC,OAAO,UAAU,EAAE,CAAC,SAAS,EAAE,UAAU,CAAA;AAC3C,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CAAC,YAAoB;IACtD,MAAM,MAAM,GAAG,UAAU,EAAE,CAAA;IAC3B,UAAU,CAAC;QACT,SAAS,EAAE;YACT,GAAG,MAAM,CAAC,SAAS;YACnB,UAAU,EAAE,YAAY;SACzB;KACF,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,cAAc,CAC5B,GAAW,EACX,UAAmB,EACnB,UAAU,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI;IAEhC,IAAI,CAAC,UAAU;QAAE,OAAO,IAAI,CAAA;IAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAA;IACnC,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAA;IACnC,OAAO,GAAG,GAAG,IAAI,IAAI,UAAU,CAAA;AACjC,CAAC"}
+{"version":3,"file":"device-identity.js","sourceRoot":"","sources":["../../../src/config/device-identity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACpD,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAA;AACnC,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAEnF,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAA;AAE7E,+EAA+E;AAC/E,+CAA+C;AAC/C,+EAA+E;AAE/E;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,SAAS,sBAAsB,CAC7B,WAA6D,EAC7D,QAAsB,EACtB,KAAiE;IAEjE,MAAM,gBAAgB,GAAG,WAAW,CAAC,UAAU,EAAE,CAAC,CAAA;IAClD,IAAI,gBAAgB;QAAE,OAAO,gBAAgB,CAAA;IAE7C,uEAAuE;IACvE,4DAA4D;IAC5D,eAAe,EAAE,CAAA;IACjB,MAAM,UAAU,GAAG,aAAa,EAAE,CAAA;IAClC,MAAM,OAAO,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAA;IAC7C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,UAAU,EAAE,CAAA;QAC3B,MAAM,cAAc,GAAG,WAAW,CAAC,MAAM,CAAC,CAAA;QAC1C,IAAI,cAAc;YAAE,OAAO,cAAc,CAAA;QAEzC,MAAM,EAAE,GAAG,QAAQ,EAAE,CAAA;QACrB,eAAe,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;QAC9E,IAAI,CAAC;YACH,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC,CAAA;QAC9B,CAAC;QAAC,MAAM,CAAC;YACP,kCAAkC;QACpC,CAAC;QACD,OAAO,EAAE,CAAA;IACX,CAAC;YAAS,CAAC;QACT,OAAO,EAAE,CAAA;IACX,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,kBAAkB;AAClB,+EAA+E;AAE/E;;;;;;GAMG;AACH,MAAM,UAAU,WAAW;IACzB,OAAO,UAAU,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAA;AACzC,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,mBAAmB;IACjC,OAAO,sBAAsB,CAC3B,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,QAAQ,EACtC,GAAG,EAAE,CAAC,UAAU,EAAE,EAClB,CAAC,MAAM,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;QACrB,GAAG,MAAM;QACT,SAAS,EAAE,EAAE,GAAG,MAAM,CAAC,SAAS,EAAE,QAAQ,EAAE;KAC7C,CAAC,CACH,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,oBAAoB;IAClC,OAAO,sBAAsB,CAC3B,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,SAAS,EACvC,GAAG,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAC7D,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;QACtB,GAAG,MAAM;QACT,SAAS,EAAE,EAAE,GAAG,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE;KAC9C,CAAC,CACH,CAAA;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,cAAc,CAAC,KAAyB;IACtD,MAAM,MAAM,GAAG,UAAU,EAAE,CAAA;IAC3B,UAAU,CAAC;QACT,SAAS,EAAE;YACT,GAAG,MAAM,CAAC,SAAS;YACnB,WAAW,EAAE,KAAK;SACnB;KACF,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,YAAY;IAC1B,UAAU,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAA;AACtC,CAAC;AAED,+EAA+E;AAC/E,oBAAoB;AACpB,+EAA+E;AAE/E;;;;;;;;;GASG;AACH,MAAM,UAAU,8BAA8B;IAC5C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAA;IACpD,IAAI,CAAC,GAAG;QAAE,OAAO,KAAK,CAAA;IACtB,OAAO,GAAG,KAAK,GAAG,IAAI,GAAG,CAAC,WAAW,EAAE,KAAK,MAAM,CAAA;AACpD,CAAC;AAED,+EAA+E;AAC/E,gBAAgB;AAChB,+EAA+E;AAE/E;;;;GAIG;AACH,MAAM,UAAU,sBAAsB;IACpC,OAAO,UAAU,EAAE,CAAC,SAAS,EAAE,UAAU,CAAA;AAC3C,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CAAC,YAAoB;IACtD,MAAM,MAAM,GAAG,UAAU,EAAE,CAAA;IAC3B,UAAU,CAAC;QACT,SAAS,EAAE;YACT,GAAG,MAAM,CAAC,SAAS;YACnB,UAAU,EAAE,YAAY;SACzB;KACF,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,cAAc,CAC5B,GAAW,EACX,UAAmB,EACnB,UAAU,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI;IAEhC,IAAI,CAAC,UAAU;QAAE,OAAO,IAAI,CAAA;IAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAA;IACnC,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAA;IACnC,OAAO,GAAG,GAAG,IAAI,IAAI,UAAU,CAAA;AACjC,CAAC"}

package/dist/src/config/device-identity.test.js

@@ -9,22 +9,61 @@
 import { describe, it, expect, beforeEach, afterEach } from 'vitest';
 import * as path from 'path';
 import * as os from 'os';
-import { getDeviceId, getOrCreateDeviceId, setDeviceLabel, forgetDevice, isInventorySyncDisabledLocally, getLastInventoryPushAt, recordInventoryPush, shouldAutoPush, } from './device-identity.js';
+import { execFile } from 'node:child_process';
+import { promisify } from 'node:util';
+import { mkdtempSync, readFileSync, readdirSync, writeFileSync } from 'node:fs';
+import { fileURLToPath } from 'node:url';
+import { getDeviceId, getOrCreateDeviceId, getOrCreateInstallId, setDeviceLabel, forgetDevice, isInventorySyncDisabledLocally, getLastInventoryPushAt, recordInventoryPush, shouldAutoPush, } from './device-identity.js';
+import { loadConfig } from './index.js';
+const execFileAsync = promisify(execFile);
 // ---------------------------------------------------------------------------
 // Helpers
 // ---------------------------------------------------------------------------
 const UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+const SHA256_HEX_RE = /^[0-9a-f]{64}$/i;
 function makeTempConfigDir() {
     return path.join(os.tmpdir(), `skillsmith-device-test-${Date.now()}-${Math.random().toString(36).slice(2)}`);
 }
+/**
+ * Absolute path to this module's source, so a spawned subprocess can import
+ * the SAME implementation under test (not a copy/reimplementation) via `tsx`
+ * (already a repo devDependency — see CLAUDE.md's `npx tsx` usage).
+ */
+const DEVICE_IDENTITY_SRC = fileURLToPath(new URL('./device-identity.ts', import.meta.url));
+/**
+ * Run `exportName()` (a zero-arg, string-returning export of
+ * device-identity.ts) in a real, separate OS process with `HOME` pointed at
+ * `homeDir`. Used to exercise genuine CROSS-PROCESS races that a single
+ * Node process's single-threaded event loop cannot produce on its own —
+ * `getOrCreateDeviceId`/`getOrCreateInstallId` are fully synchronous, so two
+ * "concurrent" calls within one process never actually interleave.
+ */
+async function runInSubprocess(exportName, homeDir) {
+    const scriptDir = mkdtempSync(path.join(os.tmpdir(), 'skillsmith-concurrency-'));
+    const scriptPath = path.join(scriptDir, 'run.mts');
+    writeFileSync(scriptPath, `import { ${exportName} } from ${JSON.stringify(DEVICE_IDENTITY_SRC)}\n` +
+        `process.stdout.write(${exportName}())\n`);
+    const { stdout } = await execFileAsync('npx', ['tsx', scriptPath], {
+        env: { ...process.env, HOME: homeDir },
+        timeout: 15_000,
+    });
+    return stdout.trim();
+}
 // ---------------------------------------------------------------------------
 // Setup / teardown
 // ---------------------------------------------------------------------------
 let savedHome;
 let savedInventoryDisable;
+// SMI-5531: saved/restored so getOrCreateInstallId tests can assert
+// unconditional generation under the EXACT conditions of a real end user's
+// environment (both unset) without leaking into other tests/files.
+let savedTelemetryEnabled;
+let savedPostHogApiKey;
 beforeEach(() => {
     savedHome = process.env.HOME;
     savedInventoryDisable = process.env.SKILLSMITH_INVENTORY_DISABLE;
+    savedTelemetryEnabled = process.env.SKILLSMITH_TELEMETRY_ENABLED;
+    savedPostHogApiKey = process.env.POSTHOG_API_KEY;
     // Point HOME at a fresh tmpdir so each test begins with a blank config
     process.env.HOME = makeTempConfigDir();
     delete process.env.SKILLSMITH_INVENTORY_DISABLE;
@@ -42,6 +81,18 @@ afterEach(() => {
     else {
         delete process.env.SKILLSMITH_INVENTORY_DISABLE;
     }
+    if (savedTelemetryEnabled !== undefined) {
+        process.env.SKILLSMITH_TELEMETRY_ENABLED = savedTelemetryEnabled;
+    }
+    else {
+        delete process.env.SKILLSMITH_TELEMETRY_ENABLED;
+    }
+    if (savedPostHogApiKey !== undefined) {
+        process.env.POSTHOG_API_KEY = savedPostHogApiKey;
+    }
+    else {
+        delete process.env.POSTHOG_API_KEY;
+    }
 });
 // ---------------------------------------------------------------------------
 // getOrCreateDeviceId
@@ -62,6 +113,112 @@ describe('getOrCreateDeviceId', () => {
     });
 });
 // ---------------------------------------------------------------------------
+// getOrCreateInstallId (SMI-5531)
+//
+// THE MOST IMPORTANT TEST SUITE IN THIS FILE: SMI-5531's root cause was that
+// `context.distinctId` was only ever populated when BOTH
+// SKILLSMITH_TELEMETRY_ENABLED=true AND a POSTHOG_API_KEY were present —
+// conditions never true for a real end-user install. `getOrCreateInstallId`
+// exists specifically to be immune to that. If these tests pass while a
+// future refactor re-couples generation to that legacy gate, the fix is
+// silently inert again under a new field name — the source-text guard test
+// below is a second, independent line of defense against exactly that.
+// ---------------------------------------------------------------------------
+describe('getOrCreateInstallId — unconditional generation (the critical regression test)', () => {
+    it('generates and persists an id with SKILLSMITH_TELEMETRY_ENABLED unset and no POSTHOG_API_KEY present', () => {
+        delete process.env.SKILLSMITH_TELEMETRY_ENABLED;
+        delete process.env.POSTHOG_API_KEY;
+        // Sanity-check the test itself actually reflects a real end user's
+        // environment before asserting anything about the function under test.
+        expect(process.env.SKILLSMITH_TELEMETRY_ENABLED).toBeUndefined();
+        expect(process.env.POSTHOG_API_KEY).toBeUndefined();
+        const id = getOrCreateInstallId();
+        expect(SHA256_HEX_RE.test(id)).toBe(true);
+        // Persisted, not just returned in memory — a fresh read must see it too.
+        expect(loadConfig().telemetry?.installId).toBe(id);
+    });
+    it('still generates unconditionally when SKILLSMITH_TELEMETRY_ENABLED is explicitly "false"', () => {
+        process.env.SKILLSMITH_TELEMETRY_ENABLED = 'false';
+        delete process.env.POSTHOG_API_KEY;
+        const id = getOrCreateInstallId();
+        expect(SHA256_HEX_RE.test(id)).toBe(true);
+    });
+    it('is idempotent — second call returns the same id (no regeneration) with no env vars set', () => {
+        delete process.env.SKILLSMITH_TELEMETRY_ENABLED;
+        delete process.env.POSTHOG_API_KEY;
+        const first = getOrCreateInstallId();
+        const second = getOrCreateInstallId();
+        expect(second).toBe(first);
+    });
+    it('generates a DIFFERENT id than getOrCreateDeviceId — distinct namespaces, not aliases', () => {
+        delete process.env.SKILLSMITH_TELEMETRY_ENABLED;
+        delete process.env.POSTHOG_API_KEY;
+        const installId = getOrCreateInstallId();
+        const deviceId = getOrCreateDeviceId();
+        expect(installId).not.toBe(deviceId);
+    });
+    it('does not clobber an existing deviceId when creating an installId, and vice versa', () => {
+        delete process.env.SKILLSMITH_TELEMETRY_ENABLED;
+        delete process.env.POSTHOG_API_KEY;
+        const deviceId = getOrCreateDeviceId();
+        const installId = getOrCreateInstallId();
+        expect(getDeviceId()).toBe(deviceId);
+        expect(loadConfig().telemetry?.installId).toBe(installId);
+    });
+    it('the implementation never READS SKILLSMITH_TELEMETRY_ENABLED or POSTHOG_API_KEY (must stay decoupled from the legacy env-gated distinctId path)', () => {
+        // Checks for the actual `process.env.X` access pattern, not any textual
+        // mention — this module's own doc comments legitimately name these env
+        // vars in prose to explain why they're deliberately never read here.
+        const source = readFileSync(DEVICE_IDENTITY_SRC, 'utf-8');
+        expect(source).not.toMatch(/process\.env(\.|\[['"])SKILLSMITH_TELEMETRY_ENABLED/);
+        expect(source).not.toMatch(/process\.env(\.|\[['"])POSTHOG_API_KEY/);
+    });
+});
+// ---------------------------------------------------------------------------
+// getOrCreateInstallId — cross-process concurrency (SMI-5531)
+//
+// getOrCreateDeviceId/getOrCreateInstallId are fully synchronous, so two
+// "concurrent" calls WITHIN one Node process never truly interleave — real
+// concurrency requires a real second OS process. These tests spawn genuine
+// subprocesses (via tsx) pointed at the SAME HOME, so the underlying
+// cross-process lock (config-atomic-write.ts) is actually exercised.
+// ---------------------------------------------------------------------------
+describe('getOrCreateInstallId — cross-process concurrency', () => {
+    it('two simultaneous calls from separate processes converge on the same id, with a valid (non-corrupted) config.json', async () => {
+        const sharedHome = makeTempConfigDir();
+        // No config.json exists yet — both processes race the "create" path.
+        const [idA, idB] = await Promise.all([
+            runInSubprocess('getOrCreateInstallId', sharedHome),
+            runInSubprocess('getOrCreateInstallId', sharedHome),
+        ]);
+        expect(idA).toBe(idB);
+        expect(SHA256_HEX_RE.test(idA)).toBe(true);
+        const skillsmithDir = path.join(sharedHome, '.skillsmith');
+        const configPath = path.join(skillsmithDir, 'config.json');
+        const raw = readFileSync(configPath, 'utf-8');
+        const parsed = JSON.parse(raw); // throws if corrupted
+        expect(parsed.telemetry?.installId).toBe(idA);
+        // No stray lock/temp files left behind after both processes finished.
+        const entries = readdirSync(skillsmithDir);
+        expect(entries.some((f) => f.endsWith('.lock'))).toBe(false);
+        expect(entries.some((f) => f.endsWith('.tmp'))).toBe(false);
+    }, 20_000);
+    it('a concurrent saveConfig write for a sibling key is never dropped (no lost update)', async () => {
+        const sharedHome = makeTempConfigDir();
+        const [installId] = await Promise.all([
+            runInSubprocess('getOrCreateInstallId', sharedHome),
+            runInSubprocess('getOrCreateDeviceId', sharedHome),
+        ]);
+        const configPath = path.join(sharedHome, '.skillsmith', 'config.json');
+        const parsed = JSON.parse(readFileSync(configPath, 'utf-8'));
+        // BOTH concurrently-written keys must be present — neither write may
+        // have silently clobbered the other's.
+        expect(parsed.telemetry?.installId).toBe(installId);
+        expect(SHA256_HEX_RE.test(parsed.telemetry?.installId ?? '')).toBe(true);
+        expect(UUID_RE.test(parsed.inventory?.deviceId ?? '')).toBe(true);
+    }, 20_000);
+});
+// ---------------------------------------------------------------------------
 // getDeviceId (pure read)
 // ---------------------------------------------------------------------------
 describe('getDeviceId', () => {

package/dist/src/config/device-identity.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"device-identity.test.js","sourceRoot":"","sources":["../../../src/config/device-identity.test.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AACpE,OAAO,KAAK,IAAI,MAAM,MAAM,CAAA;AAC5B,OAAO,KAAK,EAAE,MAAM,IAAI,CAAA;AAExB,OAAO,EACL,WAAW,EACX,mBAAmB,EACnB,cAAc,EACd,YAAY,EACZ,8BAA8B,EAC9B,sBAAsB,EACtB,mBAAmB,EACnB,cAAc,GACf,MAAM,sBAAsB,CAAA;AAE7B,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E,MAAM,OAAO,GAAG,iEAAiE,CAAA;AAEjF,SAAS,iBAAiB;IACxB,OAAO,IAAI,CAAC,IAAI,CACd,EAAE,CAAC,MAAM,EAAE,EACX,0BAA0B,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAC9E,CAAA;AACH,CAAC;AAED,8EAA8E;AAC9E,mBAAmB;AACnB,8EAA8E;AAE9E,IAAI,SAA6B,CAAA;AACjC,IAAI,qBAAyC,CAAA;AAE7C,UAAU,CAAC,GAAG,EAAE;IACd,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAA;IAC5B,qBAAqB,GAAG,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAA;IAChE,uEAAuE;IACvE,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,iBAAiB,EAAE,CAAA;IACtC,OAAO,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAA;AACjD,CAAC,CAAC,CAAA;AAEF,SAAS,CAAC,GAAG,EAAE;IACb,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,SAAS,CAAA;IAC9B,CAAC;SAAM,CAAC;QACN,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,CAAA;IACzB,CAAC;IACD,IAAI,qBAAqB,KAAK,SAAS,EAAE,CAAC;QACxC,OAAO,CAAC,GAAG,CAAC,4BAA4B,GAAG,qBAAqB,CAAA;IAClE,CAAC;SAAM,CAAC;QACN,OAAO,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAA;IACjD,CAAC;AACH,CAAC,CAAC,CAAA;AAEF,8EAA8E;AAC9E,sBAAsB;AACtB,8EAA8E;AAE9E,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,MAAM,EAAE,GAAG,mBAAmB,EAAE,CAAA;QAChC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACrC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,MAAM,KAAK,GAAG,mBAAmB,EAAE,CAAA;QACnC,MAAM,MAAM,GAAG,mBAAmB,EAAE,CAAA;QACpC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAC5B,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACtD,MAAM,EAAE,GAAG,mBAAmB,EAAE,CAAA;QAChC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAChC,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,8EAA8E;AAC9E,0BAA0B;AAC1B,8EAA8E;AAE9E,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;IAC3B,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,aAAa,EAAE,CAAA;IACvC,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,8EAA8E;AAC9E,eAAe;AACf,8EAA8E;AAE9E,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;IAC5B,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,mBAAmB,EAAE,CAAA;QACrB,YAAY,EAAE,CAAA;QACd,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,aAAa,EAAE,CAAA;IACvC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oEAAoE,EAAE,GAAG,EAAE;QAC5E,MAAM,MAAM,GAAG,mBAAmB,EAAE,CAAA;QACpC,YAAY,EAAE,CAAA;QACd,MAAM,KAAK,GAAG,mBAAmB,EAAE,CAAA;QACnC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QAC9B,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACxC,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,8EAA8E;AAC9E,iBAAiB;AACjB,8EAA8E;AAE9E,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACtD,MAAM,EAAE,GAAG,mBAAmB,EAAE,CAAA;QAChC,cAAc,CAAC,WAAW,CAAC,CAAA;QAC3B,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAChC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,uEAAuE,EAAE,GAAG,EAAE;QAC/E,MAAM,EAAE,GAAG,mBAAmB,EAAE,CAAA;QAChC,cAAc,CAAC,WAAW,CAAC,CAAA;QAC3B,cAAc,CAAC,SAAS,CAAC,CAAA;QACzB,iCAAiC;QACjC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAChC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;QACnC,mBAAmB,CAAC,EAAE,CAAC,CAAA;QACvB,cAAc,CAAC,cAAc,CAAC,CAAA;QAC9B,MAAM,CAAC,sBAAsB,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAC3C,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,8EAA8E;AAC9E,iCAAiC;AACjC,8EAA8E;AAE9E,QAAQ,CAAC,gCAAgC,EAAE,GAAG,EAAE;IAC9C,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,OAAO,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAA;QAC/C,MAAM,CAAC,8BAA8B,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACtD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,OAAO,CAAC,GAAG,CAAC,4BAA4B,GAAG,GAAG,CAAA;QAC9C,MAAM,CAAC,8BAA8B,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACrD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,OAAO,CAAC,GAAG,CAAC,4BAA4B,GAAG,MAAM,CAAA;QACjD,MAAM,CAAC,8BAA8B,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACrD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,OAAO,CAAC,GAAG,CAAC,4BAA4B,GAAG,MAAM,CAAA;QACjD,MAAM,CAAC,8BAA8B,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACrD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,OAAO,CAAC,GAAG,CAAC,4BAA4B,GAAG,OAAO,CAAA;QAClD,MAAM,CAAC,8BAA8B,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACtD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,OAAO,CAAC,GAAG,CAAC,4BAA4B,GAAG,GAAG,CAAA;QAC9C,MAAM,CAAC,8BAA8B,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACtD,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,8EAA8E;AAC9E,iBAAiB;AACjB,8EAA8E;AAE9E,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,MAAM,WAAW,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA;IAClC,MAAM,mBAAmB,GAAG,EAAE,GAAG,WAAW,CAAA;IAE5C,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC1D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oEAAoE,EAAE,GAAG,EAAE;QAC5E,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QACtB,MAAM,UAAU,GAAG,IAAI,IAAI,CAAC,GAAG,GAAG,WAAW,CAAC,CAAC,WAAW,EAAE,CAAA;QAC5D,MAAM,CAAC,cAAc,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACrD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,qEAAqE,EAAE,GAAG,EAAE;QAC7E,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QACtB,MAAM,kBAAkB,GAAG,IAAI,IAAI,CAAC,GAAG,GAAG,EAAE,GAAG,WAAW,CAAC,CAAC,WAAW,EAAE,CAAA;QACzE,MAAM,CAAC,cAAc,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC5D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,8DAA8D,EAAE,GAAG,EAAE;QACtE,mEAAmE;QACnE,MAAM,QAAQ,GAAG,iBAAiB,CAAA;QAClC,MAAM,cAAc,GAAG,UAAU,CAAA,CAAC,aAAa;QAC/C,MAAM,aAAa,GAAG,IAAI,IAAI,CAAC,QAAQ,GAAG,cAAc,CAAC,CAAC,WAAW,EAAE,CAAA;QACvE,MAAM,CAAC,cAAc,CAAC,QAAQ,EAAE,aAAa,EAAE,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC5E,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC7D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QACtB,MAAM,cAAc,GAAG,IAAI,IAAI,CAAC,GAAG,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAA;QAClE,+DAA+D;QAC/D,MAAM,CAAC,cAAc,CAAC,GAAG,EAAE,cAAc,EAAE,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACrE,2DAA2D;QAC3D,MAAM,CAAC,cAAc,CAAC,GAAG,EAAE,cAAc,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACzE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;QACxC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QACtB,sCAAsC;QACtC,MAAM,UAAU,GAAG,IAAI,IAAI,CAAC,GAAG,GAAG,CAAC,mBAAmB,GAAG,MAAM,CAAC,CAAC,CAAC,WAAW,EAAE,CAAA;QAC/E,MAAM,CAAC,cAAc,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACnD,uCAAuC;QACvC,MAAM,WAAW,GAAG,IAAI,IAAI,CAAC,GAAG,GAAG,CAAC,mBAAmB,GAAG,MAAM,CAAC,CAAC,CAAC,WAAW,EAAE,CAAA;QAChF,MAAM,CAAC,cAAc,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACrD,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,8EAA8E;AAC9E,+CAA+C;AAC/C,8EAA8E;AAE9E,QAAQ,CAAC,8CAA8C,EAAE,GAAG,EAAE;IAC5D,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,CAAC,sBAAsB,EAAE,CAAC,CAAC,aAAa,EAAE,CAAA;IAClD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACtC,MAAM,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;QACnC,mBAAmB,CAAC,EAAE,CAAC,CAAA;QACvB,MAAM,CAAC,sBAAsB,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAC3C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,MAAM,EAAE,GAAG,mBAAmB,EAAE,CAAA;QAChC,mBAAmB,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAA;QAC7C,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAChC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAA;QACvD,MAAM,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;QACvC,mBAAmB,CAAC,KAAK,CAAC,CAAA;QAC1B,mBAAmB,CAAC,MAAM,CAAC,CAAA;QAC3B,MAAM,CAAC,sBAAsB,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IAC/C,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}
+{"version":3,"file":"device-identity.test.js","sourceRoot":"","sources":["../../../src/config/device-identity.test.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AACpE,OAAO,KAAK,IAAI,MAAM,MAAM,CAAA;AAC5B,OAAO,KAAK,EAAE,MAAM,IAAI,CAAA;AACxB,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAA;AAC7C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAA;AACrC,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA;AAC/E,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AAExC,OAAO,EACL,WAAW,EACX,mBAAmB,EACnB,oBAAoB,EACpB,cAAc,EACd,YAAY,EACZ,8BAA8B,EAC9B,sBAAsB,EACtB,mBAAmB,EACnB,cAAc,GACf,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAEvC,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAA;AAEzC,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E,MAAM,OAAO,GAAG,iEAAiE,CAAA;AACjF,MAAM,aAAa,GAAG,iBAAiB,CAAA;AAEvC,SAAS,iBAAiB;IACxB,OAAO,IAAI,CAAC,IAAI,CACd,EAAE,CAAC,MAAM,EAAE,EACX,0BAA0B,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAC9E,CAAA;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,mBAAmB,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,sBAAsB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;AAE3F;;;;;;;GAOG;AACH,KAAK,UAAU,eAAe,CAAC,UAAkB,EAAE,OAAe;IAChE,MAAM,SAAS,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,yBAAyB,CAAC,CAAC,CAAA;IAChF,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAA;IAClD,aAAa,CACX,UAAU,EACV,YAAY,UAAU,WAAW,IAAI,CAAC,SAAS,CAAC,mBAAmB,CAAC,IAAI;QACtE,wBAAwB,UAAU,OAAO,CAC5C,CAAA;IACD,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,UAAU,CAAC,EAAE;QACjE,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE;QACtC,OAAO,EAAE,MAAM;KAChB,CAAC,CAAA;IACF,OAAO,MAAM,CAAC,IAAI,EAAE,CAAA;AACtB,CAAC;AAED,8EAA8E;AAC9E,mBAAmB;AACnB,8EAA8E;AAE9E,IAAI,SAA6B,CAAA;AACjC,IAAI,qBAAyC,CAAA;AAC7C,oEAAoE;AACpE,2EAA2E;AAC3E,mEAAmE;AACnE,IAAI,qBAAyC,CAAA;AAC7C,IAAI,kBAAsC,CAAA;AAE1C,UAAU,CAAC,GAAG,EAAE;IACd,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAA;IAC5B,qBAAqB,GAAG,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAA;IAChE,qBAAqB,GAAG,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAA;IAChE,kBAAkB,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAA;IAChD,uEAAuE;IACvE,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,iBAAiB,EAAE,CAAA;IACtC,OAAO,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAA;AACjD,CAAC,CAAC,CAAA;AAEF,SAAS,CAAC,GAAG,EAAE;IACb,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,SAAS,CAAA;IAC9B,CAAC;SAAM,CAAC;QACN,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,CAAA;IACzB,CAAC;IACD,IAAI,qBAAqB,KAAK,SAAS,EAAE,CAAC;QACxC,OAAO,CAAC,GAAG,CAAC,4BAA4B,GAAG,qBAAqB,CAAA;IAClE,CAAC;SAAM,CAAC;QACN,OAAO,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAA;IACjD,CAAC;IACD,IAAI,qBAAqB,KAAK,SAAS,EAAE,CAAC;QACxC,OAAO,CAAC,GAAG,CAAC,4BAA4B,GAAG,qBAAqB,CAAA;IAClE,CAAC;SAAM,CAAC;QACN,OAAO,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAA;IACjD,CAAC;IACD,IAAI,kBAAkB,KAAK,SAAS,EAAE,CAAC;QACrC,OAAO,CAAC,GAAG,CAAC,eAAe,GAAG,kBAAkB,CAAA;IAClD,CAAC;SAAM,CAAC;QACN,OAAO,OAAO,CAAC,GAAG,CAAC,eAAe,CAAA;IACpC,CAAC;AACH,CAAC,CAAC,CAAA;AAEF,8EAA8E;AAC9E,sBAAsB;AACtB,8EAA8E;AAE9E,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,MAAM,EAAE,GAAG,mBAAmB,EAAE,CAAA;QAChC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACrC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,MAAM,KAAK,GAAG,mBAAmB,EAAE,CAAA;QACnC,MAAM,MAAM,GAAG,mBAAmB,EAAE,CAAA;QACpC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAC5B,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACtD,MAAM,EAAE,GAAG,mBAAmB,EAAE,CAAA;QAChC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAChC,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,8EAA8E;AAC9E,kCAAkC;AAClC,EAAE;AACF,6EAA6E;AAC7E,yDAAyD;AACzD,yEAAyE;AACzE,4EAA4E;AAC5E,wEAAwE;AACxE,wEAAwE;AACxE,2EAA2E;AAC3E,uEAAuE;AACvE,8EAA8E;AAE9E,QAAQ,CAAC,gFAAgF,EAAE,GAAG,EAAE;IAC9F,EAAE,CAAC,qGAAqG,EAAE,GAAG,EAAE;QAC7G,OAAO,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAA;QAC/C,OAAO,OAAO,CAAC,GAAG,CAAC,eAAe,CAAA;QAClC,mEAAmE;QACnE,uEAAuE;QACvE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC,aAAa,EAAE,CAAA;QAChE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,aAAa,EAAE,CAAA;QAEnD,MAAM,EAAE,GAAG,oBAAoB,EAAE,CAAA;QAEjC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACzC,yEAAyE;QACzE,MAAM,CAAC,UAAU,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IACpD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,yFAAyF,EAAE,GAAG,EAAE;QACjG,OAAO,CAAC,GAAG,CAAC,4BAA4B,GAAG,OAAO,CAAA;QAClD,OAAO,OAAO,CAAC,GAAG,CAAC,eAAe,CAAA;QAElC,MAAM,EAAE,GAAG,oBAAoB,EAAE,CAAA;QAEjC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC3C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,wFAAwF,EAAE,GAAG,EAAE;QAChG,OAAO,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAA;QAC/C,OAAO,OAAO,CAAC,GAAG,CAAC,eAAe,CAAA;QAElC,MAAM,KAAK,GAAG,oBAAoB,EAAE,CAAA;QACpC,MAAM,MAAM,GAAG,oBAAoB,EAAE,CAAA;QAErC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAC5B,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,sFAAsF,EAAE,GAAG,EAAE;QAC9F,OAAO,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAA;QAC/C,OAAO,OAAO,CAAC,GAAG,CAAC,eAAe,CAAA;QAElC,MAAM,SAAS,GAAG,oBAAoB,EAAE,CAAA;QACxC,MAAM,QAAQ,GAAG,mBAAmB,EAAE,CAAA;QAEtC,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IACtC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kFAAkF,EAAE,GAAG,EAAE;QAC1F,OAAO,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAA;QAC/C,OAAO,OAAO,CAAC,GAAG,CAAC,eAAe,CAAA;QAElC,MAAM,QAAQ,GAAG,mBAAmB,EAAE,CAAA;QACtC,MAAM,SAAS,GAAG,oBAAoB,EAAE,CAAA;QAExC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QACpC,MAAM,CAAC,UAAU,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IAC3D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,gJAAgJ,EAAE,GAAG,EAAE;QACxJ,wEAAwE;QACxE,uEAAuE;QACvE,qEAAqE;QACrE,MAAM,MAAM,GAAG,YAAY,CAAC,mBAAmB,EAAE,OAAO,CAAC,CAAA;QACzD,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,qDAAqD,CAAC,CAAA;QACjF,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,wCAAwC,CAAC,CAAA;IACtE,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,8EAA8E;AAC9E,8DAA8D;AAC9D,EAAE;AACF,yEAAyE;AACzE,2EAA2E;AAC3E,2EAA2E;AAC3E,qEAAqE;AACrE,qEAAqE;AACrE,8EAA8E;AAE9E,QAAQ,CAAC,kDAAkD,EAAE,GAAG,EAAE;IAChE,EAAE,CAAC,kHAAkH,EAAE,KAAK,IAAI,EAAE;QAChI,MAAM,UAAU,GAAG,iBAAiB,EAAE,CAAA;QACtC,qEAAqE;QAErE,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACnC,eAAe,CAAC,sBAAsB,EAAE,UAAU,CAAC;YACnD,eAAe,CAAC,sBAAsB,EAAE,UAAU,CAAC;SACpD,CAAC,CAAA;QAEF,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QACrB,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAE1C,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC,CAAA;QAC1D,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,aAAa,CAAC,CAAA;QAC1D,MAAM,GAAG,GAAG,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAA;QAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA2C,CAAA,CAAC,sBAAsB;QAC/F,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAE7C,sEAAsE;QACtE,MAAM,OAAO,GAAG,WAAW,CAAC,aAAa,CAAC,CAAA;QAC1C,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAC5D,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAC7D,CAAC,EAAE,MAAM,CAAC,CAAA;IAEV,EAAE,CAAC,mFAAmF,EAAE,KAAK,IAAI,EAAE;QACjG,MAAM,UAAU,GAAG,iBAAiB,EAAE,CAAA;QAEtC,MAAM,CAAC,SAAS,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACpC,eAAe,CAAC,sBAAsB,EAAE,UAAU,CAAC;YACnD,eAAe,CAAC,qBAAqB,EAAE,UAAU,CAAC;SACnD,CAAC,CAAA;QAEF,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,aAAa,EAAE,aAAa,CAAC,CAAA;QACtE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAG1D,CAAA;QAED,qEAAqE;QACrE,uCAAuC;QACvC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QACnD,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACxE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACnE,CAAC,EAAE,MAAM,CAAC,CAAA;AACZ,CAAC,CAAC,CAAA;AAEF,8EAA8E;AAC9E,0BAA0B;AAC1B,8EAA8E;AAE9E,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;IAC3B,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,aAAa,EAAE,CAAA;IACvC,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,8EAA8E;AAC9E,eAAe;AACf,8EAA8E;AAE9E,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;IAC5B,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,mBAAmB,EAAE,CAAA;QACrB,YAAY,EAAE,CAAA;QACd,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,aAAa,EAAE,CAAA;IACvC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oEAAoE,EAAE,GAAG,EAAE;QAC5E,MAAM,MAAM,GAAG,mBAAmB,EAAE,CAAA;QACpC,YAAY,EAAE,CAAA;QACd,MAAM,KAAK,GAAG,mBAAmB,EAAE,CAAA;QACnC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QAC9B,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACxC,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,8EAA8E;AAC9E,iBAAiB;AACjB,8EAA8E;AAE9E,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACtD,MAAM,EAAE,GAAG,mBAAmB,EAAE,CAAA;QAChC,cAAc,CAAC,WAAW,CAAC,CAAA;QAC3B,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAChC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,uEAAuE,EAAE,GAAG,EAAE;QAC/E,MAAM,EAAE,GAAG,mBAAmB,EAAE,CAAA;QAChC,cAAc,CAAC,WAAW,CAAC,CAAA;QAC3B,cAAc,CAAC,SAAS,CAAC,CAAA;QACzB,iCAAiC;QACjC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAChC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;QACnC,mBAAmB,CAAC,EAAE,CAAC,CAAA;QACvB,cAAc,CAAC,cAAc,CAAC,CAAA;QAC9B,MAAM,CAAC,sBAAsB,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAC3C,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,8EAA8E;AAC9E,iCAAiC;AACjC,8EAA8E;AAE9E,QAAQ,CAAC,gCAAgC,EAAE,GAAG,EAAE;IAC9C,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,OAAO,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAA;QAC/C,MAAM,CAAC,8BAA8B,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACtD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,OAAO,CAAC,GAAG,CAAC,4BAA4B,GAAG,GAAG,CAAA;QAC9C,MAAM,CAAC,8BAA8B,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACrD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,OAAO,CAAC,GAAG,CAAC,4BAA4B,GAAG,MAAM,CAAA;QACjD,MAAM,CAAC,8BAA8B,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACrD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,OAAO,CAAC,GAAG,CAAC,4BAA4B,GAAG,MAAM,CAAA;QACjD,MAAM,CAAC,8BAA8B,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACrD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,OAAO,CAAC,GAAG,CAAC,4BAA4B,GAAG,OAAO,CAAA;QAClD,MAAM,CAAC,8BAA8B,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACtD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,OAAO,CAAC,GAAG,CAAC,4BAA4B,GAAG,GAAG,CAAA;QAC9C,MAAM,CAAC,8BAA8B,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACtD,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,8EAA8E;AAC9E,iBAAiB;AACjB,8EAA8E;AAE9E,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,MAAM,WAAW,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA;IAClC,MAAM,mBAAmB,GAAG,EAAE,GAAG,WAAW,CAAA;IAE5C,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC1D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oEAAoE,EAAE,GAAG,EAAE;QAC5E,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QACtB,MAAM,UAAU,GAAG,IAAI,IAAI,CAAC,GAAG,GAAG,WAAW,CAAC,CAAC,WAAW,EAAE,CAAA;QAC5D,MAAM,CAAC,cAAc,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACrD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,qEAAqE,EAAE,GAAG,EAAE;QAC7E,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QACtB,MAAM,kBAAkB,GAAG,IAAI,IAAI,CAAC,GAAG,GAAG,EAAE,GAAG,WAAW,CAAC,CAAC,WAAW,EAAE,CAAA;QACzE,MAAM,CAAC,cAAc,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC5D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,8DAA8D,EAAE,GAAG,EAAE;QACtE,mEAAmE;QACnE,MAAM,QAAQ,GAAG,iBAAiB,CAAA;QAClC,MAAM,cAAc,GAAG,UAAU,CAAA,CAAC,aAAa;QAC/C,MAAM,aAAa,GAAG,IAAI,IAAI,CAAC,QAAQ,GAAG,cAAc,CAAC,CAAC,WAAW,EAAE,CAAA;QACvE,MAAM,CAAC,cAAc,CAAC,QAAQ,EAAE,aAAa,EAAE,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC5E,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC7D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QACtB,MAAM,cAAc,GAAG,IAAI,IAAI,CAAC,GAAG,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAA;QAClE,+DAA+D;QAC/D,MAAM,CAAC,cAAc,CAAC,GAAG,EAAE,cAAc,EAAE,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACrE,2DAA2D;QAC3D,MAAM,CAAC,cAAc,CAAC,GAAG,EAAE,cAAc,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACzE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;QACxC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QACtB,sCAAsC;QACtC,MAAM,UAAU,GAAG,IAAI,IAAI,CAAC,GAAG,GAAG,CAAC,mBAAmB,GAAG,MAAM,CAAC,CAAC,CAAC,WAAW,EAAE,CAAA;QAC/E,MAAM,CAAC,cAAc,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACnD,uCAAuC;QACvC,MAAM,WAAW,GAAG,IAAI,IAAI,CAAC,GAAG,GAAG,CAAC,mBAAmB,GAAG,MAAM,CAAC,CAAC,CAAC,WAAW,EAAE,CAAA;QAChF,MAAM,CAAC,cAAc,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACrD,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,8EAA8E;AAC9E,+CAA+C;AAC/C,8EAA8E;AAE9E,QAAQ,CAAC,8CAA8C,EAAE,GAAG,EAAE;IAC5D,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,CAAC,sBAAsB,EAAE,CAAC,CAAC,aAAa,EAAE,CAAA;IAClD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACtC,MAAM,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;QACnC,mBAAmB,CAAC,EAAE,CAAC,CAAA;QACvB,MAAM,CAAC,sBAAsB,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAC3C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,MAAM,EAAE,GAAG,mBAAmB,EAAE,CAAA;QAChC,mBAAmB,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAA;QAC7C,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAChC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAA;QACvD,MAAM,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;QACvC,mBAAmB,CAAC,KAAK,CAAC,CAAA;QAC1B,mBAAmB,CAAC,MAAM,CAAC,CAAA;QAC3B,MAAM,CAAC,sBAAsB,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IAC/C,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/src/config/index.d.ts

@@ -44,6 +44,12 @@ export interface SkillsmithConfig {
     telemetry?: {
         /** Enable telemetry (default: false, opt-in) */
         enabled?: boolean;
+        /**
+         * Stable per-install identifier (SMI-5531): `sha256(randomUUID())`,
+         * generated unconditionally, decoupled from `SKILLSMITH_TELEMETRY_ENABLED`
+         * / `POSTHOG_API_KEY`. See `getOrCreateInstallId()` in `./device-identity.ts`.
+         */
+        installId?: string;
     };
     /** Sync settings */
     sync?: {
@@ -113,6 +119,14 @@ export declare function loadConfig(): SkillsmithConfig;
  * Save configuration to ~/.skillsmith/config.json
  * Creates the file with 0600 permissions (owner read/write only)
  *
+ * SMI-5531: serialized under a cross-process lock ({@link acquireConfigLock})
+ * and written atomically (temp-file + rename, {@link atomicWriteFile}) —
+ * closes a lost-update race (two concurrent writers each dropping the
+ * other's key) and a torn-write race under a bare `writeFileSync`.
+ * `existingConfig` is (re-)read AFTER the lock is acquired, not before, or a
+ * writer that read stale state while waiting would reintroduce the same
+ * lost-update bug.
+ *
  * @param config - Configuration to save (merged with existing)
  * @param options - Save options
  */

package/dist/src/config/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/config/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAMH;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,uDAAuD;IACvD,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,4BAA4B;IAC5B,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,2BAA2B;IAC3B,KAAK,CAAC,EAAE,OAAO,CAAA;IACf,yBAAyB;IACzB,SAAS,CAAC,EAAE;QACV,gDAAgD;QAChD,OAAO,CAAC,EAAE,OAAO,CAAA;KAClB,CAAA;IACD,oBAAoB;IACpB,IAAI,CAAC,EAAE;QACL,6BAA6B;QAC7B,OAAO,CAAC,EAAE,OAAO,CAAA;QACjB,oCAAoC;QACpC,UAAU,CAAC,EAAE,MAAM,CAAA;KACpB,CAAA;IACD,qDAAqD;IACrD,SAAS,CAAC,EAAE;QACV,gDAAgD;QAChD,QAAQ,CAAC,EAAE,MAAM,CAAA;QACjB,yCAAyC;QACzC,WAAW,CAAC,EAAE,MAAM,CAAA;QACpB,gFAAgF;QAChF,UAAU,CAAC,EAAE,MAAM,CAAA;KACpB,CAAA;IACD,sDAAsD;IACtD,KAAK,CAAC,EAAE;QACN,kFAAkF;QAClF,YAAY,CAAC,EAAE,MAAM,CAAA;QACrB;;;WAGG;QACH,cAAc,CAAC,EAAE,MAAM,CAAA;KACxB,CAAA;CACF;AA0DD;;;;;GAKG;AACH,wBAAgB,YAAY,IAAI,MAAM,CAErC;AAED;;;;GAIG;AACH,wBAAgB,aAAa,IAAI,MAAM,CAEtC;AAED;;;GAGG;AACH,wBAAgB,eAAe,IAAI,IAAI,CAKtC;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,WAAW,IAAI,MAAM,CAUpC;AAED;;;;GAIG;AACH,wBAAgB,UAAU,IAAI,gBAAgB,CAc7C;AAED;;;;;;GAMG;AACH,wBAAgB,UAAU,CACxB,MAAM,EAAE,OAAO,CAAC,gBAAgB,CAAC,EACjC,OAAO,GAAE;IAAE,KAAK,CAAC,EAAE,OAAO,CAAA;CAAoB,GAC7C,IAAI,CAmCN;AAED;;;;;;;;GAQG;AACH,wBAAgB,SAAS,IAAI,MAAM,GAAG,SAAS,CAU9C;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,UAAU,SAA+B,GAAG,MAAM,CAQ/E;AAED;;;;GAIG;AACH,wBAAgB,cAAc,IAAI,OAAO,CAOxC;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,IAAI,OAAO,CAU5C;AAED;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAGxD;AAMD;;;;;;;;;;;GAWG;AACH,wBAAsB,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAe/D;AAED;;;;;;;GAOG;AACH,wBAAsB,WAAW,IAAI,OAAO,CAAC;IAC3C,OAAO,EAAE,OAAO,CAAA;IAChB,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,CAAC,EAAE,MAAM,CAAA;CACf,CAAC,CAgCD;AAED;;;;;;;;;GASG;AACH,wBAAsB,aAAa,IAAI,OAAO,CAAC;IAC7C,aAAa,EAAE,OAAO,CAAA;IACtB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,MAAM,EAAE,SAAS,GAAG,QAAQ,GAAG,KAAK,GAAG,MAAM,CAAA;CAC9C,CAAC,CA2CD"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/config/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAOH;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,uDAAuD;IACvD,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,4BAA4B;IAC5B,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,2BAA2B;IAC3B,KAAK,CAAC,EAAE,OAAO,CAAA;IACf,yBAAyB;IACzB,SAAS,CAAC,EAAE;QACV,gDAAgD;QAChD,OAAO,CAAC,EAAE,OAAO,CAAA;QACjB;;;;WAIG;QACH,SAAS,CAAC,EAAE,MAAM,CAAA;KACnB,CAAA;IACD,oBAAoB;IACpB,IAAI,CAAC,EAAE;QACL,6BAA6B;QAC7B,OAAO,CAAC,EAAE,OAAO,CAAA;QACjB,oCAAoC;QACpC,UAAU,CAAC,EAAE,MAAM,CAAA;KACpB,CAAA;IACD,qDAAqD;IACrD,SAAS,CAAC,EAAE;QACV,gDAAgD;QAChD,QAAQ,CAAC,EAAE,MAAM,CAAA;QACjB,yCAAyC;QACzC,WAAW,CAAC,EAAE,MAAM,CAAA;QACpB,gFAAgF;QAChF,UAAU,CAAC,EAAE,MAAM,CAAA;KACpB,CAAA;IACD,sDAAsD;IACtD,KAAK,CAAC,EAAE;QACN,kFAAkF;QAClF,YAAY,CAAC,EAAE,MAAM,CAAA;QACrB;;;WAGG;QACH,cAAc,CAAC,EAAE,MAAM,CAAA;KACxB,CAAA;CACF;AA0DD;;;;;GAKG;AACH,wBAAgB,YAAY,IAAI,MAAM,CAErC;AAED;;;;GAIG;AACH,wBAAgB,aAAa,IAAI,MAAM,CAEtC;AAED;;;GAGG;AACH,wBAAgB,eAAe,IAAI,IAAI,CAKtC;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,WAAW,IAAI,MAAM,CAUpC;AAED;;;;GAIG;AACH,wBAAgB,UAAU,IAAI,gBAAgB,CAc7C;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,UAAU,CACxB,MAAM,EAAE,OAAO,CAAC,gBAAgB,CAAC,EACjC,OAAO,GAAE;IAAE,KAAK,CAAC,EAAE,OAAO,CAAA;CAAoB,GAC7C,IAAI,CAyCN;AAED;;;;;;;;GAQG;AACH,wBAAgB,SAAS,IAAI,MAAM,GAAG,SAAS,CAU9C;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,UAAU,SAA+B,GAAG,MAAM,CAQ/E;AAED;;;;GAIG;AACH,wBAAgB,cAAc,IAAI,OAAO,CAOxC;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,IAAI,OAAO,CAU5C;AAED;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAGxD;AAMD;;;;;;;;;;;GAWG;AACH,wBAAsB,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAe/D;AAED;;;;;;;GAOG;AACH,wBAAsB,WAAW,IAAI,OAAO,CAAC;IAC3C,OAAO,EAAE,OAAO,CAAA;IAChB,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,CAAC,EAAE,MAAM,CAAA;CACf,CAAC,CAgCD;AAED;;;;;;;;;GASG;AACH,wBAAsB,aAAa,IAAI,OAAO,CAAC;IAC7C,aAAa,EAAE,OAAO,CAAA;IACtB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,MAAM,EAAE,SAAS,GAAG,QAAQ,GAAG,KAAK,GAAG,MAAM,CAAA;CAC9C,CAAC,CA2CD"}

package/dist/src/config/index.js

@@ -32,7 +32,8 @@
  */
 import { homedir } from 'os';
 import { join } from 'path';
-import { existsSync, readFileSync, writeFileSync, mkdirSync, chmodSync } from 'fs';
+import { existsSync, readFileSync, mkdirSync, chmodSync } from 'fs';
+import { acquireConfigLock, atomicWriteFile } from './config-atomic-write.js';
 /** Default config directory name */
 const CONFIG_DIR = '.skillsmith';
 /** Default config file name */
@@ -139,28 +140,43 @@ export function loadConfig() {
  * Save configuration to ~/.skillsmith/config.json
  * Creates the file with 0600 permissions (owner read/write only)
  *
+ * SMI-5531: serialized under a cross-process lock ({@link acquireConfigLock})
+ * and written atomically (temp-file + rename, {@link atomicWriteFile}) —
+ * closes a lost-update race (two concurrent writers each dropping the
+ * other's key) and a torn-write race under a bare `writeFileSync`.
+ * `existingConfig` is (re-)read AFTER the lock is acquired, not before, or a
+ * writer that read stale state while waiting would reintroduce the same
+ * lost-update bug.
+ *
  * @param config - Configuration to save (merged with existing)
  * @param options - Save options
  */
 export function saveConfig(config, options = { merge: true }) {
     ensureConfigDir();
     const configPath = getConfigPath();
-    let existingConfig = {};
-    if (options.merge && existsSync(configPath)) {
-        existingConfig = loadConfig();
+    const release = acquireConfigLock(configPath);
+    try {
+        let existingConfig = {};
+        if (options.merge && existsSync(configPath)) {
+            existingConfig = loadConfig();
+        }
+        // Remove undefined values so they are omitted from JSON output
+        const updates = Object.fromEntries(Object.entries(config).filter(([, v]) => v !== undefined));
+        // Explicit undefined fields are deletions — remove them from existing config
+        const deletions = Object.keys(config).filter((k) => config[k] === undefined);
+        const cleaned = { ...existingConfig };
+        for (const key of deletions) {
+            delete cleaned[key];
+        }
+        const mergedConfig = { ...cleaned, ...updates };
+        const configJson = JSON.stringify(mergedConfig, null, 2);
+        atomicWriteFile(configPath, configJson, 0o600);
     }
-    // Remove undefined values so they are omitted from JSON output
-    const updates = Object.fromEntries(Object.entries(config).filter(([, v]) => v !== undefined));
-    // Explicit undefined fields are deletions — remove them from existing config
-    const deletions = Object.keys(config).filter((k) => config[k] === undefined);
-    const cleaned = { ...existingConfig };
-    for (const key of deletions) {
-        delete cleaned[key];
+    finally {
+        release();
     }
-    const mergedConfig = { ...cleaned, ...updates };
-    const configJson = JSON.stringify(mergedConfig, null, 2);
-    writeFileSync(configPath, configJson, { encoding: 'utf-8', mode: 0o600 });
-    // Ensure permissions are set correctly (in case file existed)
+    // Ensure permissions are set correctly (belt-and-braces — atomicWriteFile
+    // already chmods the file itself; in case the file existed pre-migration).
     try {
         chmodSync(configPath, 0o600);
     }