@stonyx/utils 0.2.3-alpha.27 → 0.2.3-alpha.29

package/README.md

@@ -83,7 +83,7 @@ Updates a file atomically by writing to a sibling swap file first, then renaming
 
 **File mode is preserved; other inode metadata is not.** The swap file is created with the target's permission bits and `chmod`ed to them before the rename, so a `0600` file stays `0600`. ACLs, extended attributes, hard links and ownership are *not* carried across — the target necessarily gets a new inode.
 
-**Swap files after abnormal termination.** Cleanup runs on every failure path `updateFile` controls, but a process killed between the write and the rename leaves a `<path>.temp-<pid>-<token>` sibling behind, and no module ships a sweeper. This is a deliberate trade against the previous whole-second swap name, which self-reclaimed by being reused — reuse is exactly the collision that caused #44, so uniqueness has to win. The cost is that abandoned swap files now accumulate rather than overwriting one another. Consumers that persist into a directory they scan, sync or commit should sweep or ignore `*.temp-*` siblings of their targets; an app that runs `git add` over its data directory will otherwise commit one.
+**Swap files after abnormal termination.** Cleanup runs on every failure path `updateFile` controls, but a process killed between the write and the rename leaves a `<path>.temp-<pid>-<token>` sibling behind, and no module ships a sweeper. This is a deliberate trade against the previous whole-second swap name, which was reused — and reuse is exactly the collision that caused #44, so uniqueness has to win. Be precise about what that costs: the old name only ever collapsed two orphans that were abandoned within the *same whole second*, so at any ordinary crash cadence it reclaimed nothing either (measured: five crashes 1200 ms apart leave five orphans under both names). The accumulation uniqueness genuinely adds is confined to a sub-second crash loop. Consumers that persist into a directory they scan, sync or commit should sweep or ignore `*.temp-*` siblings of their targets; an app that runs `git add` over its data directory will otherwise commit one.
 
 #### `copyFile(sourcePath, targetPath, options={})`
 

package/dist/file.js

@@ -3,7 +3,7 @@ import { objToJson } from './object.js';
 import fs from 'fs';
 import { promises as fsp } from 'fs';
 import path from 'path';
-import { randomUUID } from 'crypto';
+import { randomBytes } from 'crypto';
 function isNodeError(error) {
     return error instanceof Error && 'code' in error;
 }
@@ -60,11 +60,14 @@ export async function updateFile(filePath, data, options = {}) {
         const targetMode = mode & 0o7777;
         // pid + random token, never a timestamp: the swap name is a uniqueness
         // token, and whole seconds cannot discriminate between concurrent callers.
-        // Truncated to 8 hex chars deliberately — a full 36-char UUID pushed the
-        // name overhead to 48 characters and made ~210-character basenames fail
-        // ENAMETOOLONG on a 255-byte NAME_MAX. `wx` below makes any residual
-        // collision loud, so the shortened token costs no safety.
-        const swapFile = `${filePath}.temp-${process.pid}-${randomUUID().slice(0, 8)}`;
+        // The token is deliberately short — a full 36-char UUID pushed the name
+        // overhead to 48 characters and made ~210-character basenames fail
+        // ENAMETOOLONG on a 255-byte NAME_MAX. 6 CSPRNG bytes as base64url is 8
+        // characters carrying 48 bits, where the first 8 hex characters of a UUID
+        // would be the same width but only 32 bits; at 32 bits a 1000-sample
+        // distinctness check collides about once in 8,600 runs. `wx` below makes
+        // any residual collision loud rather than corrupting.
+        const swapFile = `${filePath}.temp-${process.pid}-${randomBytes(6).toString('base64url')}`;
         try {
             // `wx` turns any residual name collision into a loud EEXIST rather than a
             // silent overwrite of another caller's swap bytes. `mode` here is masked

package/package.json

@@ -3,7 +3,7 @@
   "keywords": [
     "stonyx-module"
   ],
-  "version": "0.2.3-alpha.27",
+  "version": "0.2.3-alpha.29",
   "description": "Utils module for Stonyx Framework",
   "repository": {
     "type": "git",