@skrr-ai/cli 0.1.123 → 0.1.125

package/dist/node_modules/@skrr-ai/auth-core/dist/esm/stateFiles.js

@@ -0,0 +1,73 @@
+/**
+ * stateFiles.ts — the ONE place auth-core mutates credential state on disk.
+ *
+ * Every write, delete, rename and mkdir of a wrapped DEK, a device key, an enrollment marker, a
+ * lock sentinel, a re-auth latch or a machine identity goes through a function here, and each
+ * asks `assertMayMutateLiveState` first: a test process aimed at the account's real home is
+ * refused with a named error before a byte changes (`liveState.ts` says why that cannot be left
+ * to each runner).
+ *
+ * This is the "own a control surface, or do not touch it" rule applied to the real home. The
+ * atomic writer used to exist three times (device identity, credential envelope, profile
+ * consolidation), so a guard added to one left two doors open. `stateFileBoundary.spec.ts`
+ * fails when a file other than this one starts calling a raw `fs` mutator, so a fourth copy
+ * cannot appear unguarded.
+ *
+ * Outside a test process every function here is exactly the `fs` call it wraps.
+ */
+import fs from 'node:fs';
+import path from 'node:path';
+import { assertMayMutateLiveState } from './liveState.js';
+/** `mkdir -p` for a state directory, 0700 unless `mode` says otherwise. */
+export function ensureStateDir(dir, what, mode = 0o700) {
+    assertMayMutateLiveState(dir, what);
+    fs.mkdirSync(dir, mode === null ? { recursive: true } : { recursive: true, mode });
+}
+/**
+ * Atomic 0600 write — tmp+fsync+rename+dir-fsync. The same shape the daemon and CLI always used,
+ * so a partial-write race between `skrr` and `skrrd` produces the same on-disk transitions.
+ */
+export function atomicWrite0600(target, value, what) {
+    assertMayMutateLiveState(target, what);
+    const dir = path.dirname(target);
+    fs.mkdirSync(dir, { recursive: true, mode: 0o700 });
+    const tmp = `${target}.tmp.${process.pid}.${Date.now()}`;
+    const buf = typeof value === 'string' ? Buffer.from(value, 'utf-8') : value;
+    const fd = fs.openSync(tmp, 'w', 0o600);
+    try {
+        fs.writeSync(fd, buf);
+        fs.fsyncSync(fd);
+    }
+    finally {
+        fs.closeSync(fd);
+    }
+    fs.renameSync(tmp, target);
+    try {
+        const dirFd = fs.openSync(dir, 'r');
+        try {
+            fs.fsyncSync(dirFd);
+        }
+        finally {
+            fs.closeSync(dirFd);
+        }
+    }
+    catch {
+        /* best-effort — Windows / some BSDs reject dir fsync */
+    }
+}
+/** `fs.writeFileSync` for a state file: lock sentinels, a re-auth latch, a machine identity. */
+export function writeStateFile(target, data, options, what) {
+    assertMayMutateLiveState(target, what);
+    fs.writeFileSync(target, data, options);
+}
+/** `fs.unlinkSync` for a state file. Throws what `unlinkSync` throws, ENOENT included. */
+export function removeStateFile(target, what) {
+    assertMayMutateLiveState(target, what);
+    fs.unlinkSync(target);
+}
+/** `fs.renameSync` between state paths; both ends are checked. */
+export function renameStateFile(from, to, what) {
+    assertMayMutateLiveState(from, what);
+    assertMayMutateLiveState(to, what);
+    fs.renameSync(from, to);
+}

package/dist/node_modules/@skrr-ai/auth-core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@skrr-ai/auth-core",
-  "version": "0.4.32",
+  "version": "0.4.33",
   "main": "dist/cjs/index.js",
   "types": "dist/esm/index.d.ts",
   "exports": {
@@ -304,6 +304,16 @@
         "default": "./dist/cjs/kek/masterKekService.js"
       }
     },
+    "./live-state": {
+      "import": {
+        "types": "./dist/esm/liveState.d.ts",
+        "default": "./dist/esm/liveState.js"
+      },
+      "require": {
+        "types": "./dist/cjs/liveState.d.ts",
+        "default": "./dist/cjs/liveState.js"
+      }
+    },
     "./daemon-consent-proof": {
       "import": {
         "types": "./dist/esm/daemonConsentProof.d.ts",