@threadbase-sh/streamer 1.21.0 → 1.22.1

package/dist/index.js

@@ -278,8 +278,12 @@ import { randomBytes, timingSafeEqual } from "crypto";
 import { chmodSync, mkdirSync, readFileSync, renameSync, writeFileSync } from "fs";
 import { homedir } from "os";
 import { join as join2 } from "path";
-var CONFIG_DIR = join2(homedir(), ".threadbase");
-var CONFIG_FILE = join2(CONFIG_DIR, "server.yaml");
+function configDir() {
+  return process.env.THREADBASE_CONFIG_DIR ?? join2(homedir(), ".threadbase");
+}
+function configFile() {
+  return join2(configDir(), "server.yaml");
+}
 function generateApiKey() {
   return `tb_${randomBytes(16).toString("hex")}`;
 }
@@ -291,20 +295,20 @@ function validateApiKey(provided, expected) {
 }
 function loadOrCreateApiKey() {
   try {
-    const content = readFileSync(CONFIG_FILE, "utf-8");
+    const content = readFileSync(configFile(), "utf-8");
     const match = content.match(/api_key:\s*(.+)/);
     if (match?.[1]) return match[1].trim();
   } catch {
   }
   const key = generateApiKey();
-  mkdirSync(CONFIG_DIR, { recursive: true });
-  writeFileSync(CONFIG_FILE, `api_key: ${key}
+  mkdirSync(configDir(), { recursive: true });
+  writeFileSync(configFile(), `api_key: ${key}
 `, "utf-8");
   return key;
 }
 function loadBrowseRoot() {
   try {
-    const content = readFileSync(CONFIG_FILE, "utf-8");
+    const content = readFileSync(configFile(), "utf-8");
     const match = content.match(/browse_root:\s*(.+)/);
     if (match?.[1]) return match[1].trim();
   } catch {
@@ -313,7 +317,7 @@ function loadBrowseRoot() {
 }
 function loadPublicUrl() {
   try {
-    const content = readFileSync(CONFIG_FILE, "utf-8");
+    const content = readFileSync(configFile(), "utf-8");
     const match = content.match(/public_url:\s*(.+)/);
     if (match?.[1]) return match[1].trim();
   } catch {
@@ -322,7 +326,7 @@ function loadPublicUrl() {
 }
 function loadCacheDir() {
   try {
-    const content = readFileSync(CONFIG_FILE, "utf-8");
+    const content = readFileSync(configFile(), "utf-8");
     const match = content.match(/cache_dir:\s*(.+)/);
     if (match?.[1]) return match[1].trim();
   } catch {
@@ -331,7 +335,7 @@ function loadCacheDir() {
 }
 function loadTailSize() {
   try {
-    const content = readFileSync(CONFIG_FILE, "utf-8");
+    const content = readFileSync(configFile(), "utf-8");
     const match = content.match(/tail_size:\s*(\d+)/);
     if (match?.[1]) return Number.parseInt(match[1], 10);
   } catch {
@@ -361,10 +365,11 @@ function stripTrailingSlash(url) {
   return url.endsWith("/") ? url.slice(0, -1) : url;
 }
 function setApiKey(key) {
-  mkdirSync(CONFIG_DIR, { recursive: true });
+  const file = configFile();
+  mkdirSync(configDir(), { recursive: true });
   let content = "";
   try {
-    content = readFileSync(CONFIG_FILE, "utf-8");
+    content = readFileSync(file, "utf-8");
   } catch (err) {
     if (err.code !== "ENOENT") throw err;
   }
@@ -380,10 +385,10 @@ function setApiKey(key) {
 ${apiKeyLine}
 `;
   }
-  const tmpFile = `${CONFIG_FILE}.tmp`;
+  const tmpFile = `${file}.tmp`;
   writeFileSync(tmpFile, updated, { encoding: "utf-8", mode: 384 });
   chmodSync(tmpFile, 384);
-  renameSync(tmpFile, CONFIG_FILE);
+  renameSync(tmpFile, file);
 }
 
 // src/db/config.ts
@@ -4843,10 +4848,17 @@ var StreamerServer = class {
     });
   }
   rotateApiKey() {
+    const oldKey = this.apiKey;
     const newKey = generateApiKey();
     const persisted = this.apiKeySource === "config";
     if (persisted) setApiKey(newKey);
     this.apiKey = newKey;
+    this.log.info("API key rotated", {
+      event: "auth.api_key_rotated",
+      oldKeyMasked: `${oldKey.slice(0, 6)}\u2026`,
+      newKeyMasked: `${newKey.slice(0, 6)}\u2026`,
+      persisted
+    });
     return { newKey, persisted };
   }
   checkRateLimit(map, key, limit, windowMs) {