@tuned-tensor/cli 0.13.1-beta.3 → 0.13.1-beta.4

package/dist/local-runtime.js

@@ -33,6 +33,7 @@ import {
   foundationHyperparametersSchema,
   foundationPlaceholderIssues,
   generatedPlaceholderIssues,
+  hardenExistingLocalStore,
   initLocalRunnerConfigFile,
   initLocalSpecFile,
   isFoundationSpecFile,
@@ -71,8 +72,8 @@ import {
   withBundledPythonEnvironment,
   withHuggingFaceCacheEnvironment,
   withOfflineHuggingFaceCacheEnvironment,
-  writeJsonAtomic
-} from "./chunk-2P2RL23O.js";
+  writePrivateJsonAtomic
+} from "./chunk-7VIUHQBI.js";
 
 // src/local-runtime/index.ts
 import { readFileSync, realpathSync } from "fs";
@@ -604,7 +605,8 @@ async function serveLocalModel(launch) {
 }
 
 // src/local-runtime/active-model.ts
-import { appendFile, readFile } from "fs/promises";
+import { randomUUID } from "crypto";
+import { appendFile, chmod, readFile, rename, writeFile as writeFile2 } from "fs/promises";
 import { join as join2 } from "path";
 function pointerPath(store) {
   return join2(store.root, "active-model.json");
@@ -613,6 +615,7 @@ function historyPath(store) {
   return join2(store.root, "activation-history.jsonl");
 }
 async function readPointer(store) {
+  if (!await hardenExistingLocalStore(store.root)) return null;
   try {
     const value = JSON.parse(await readFile(pointerPath(store), "utf8"));
     if (value.schema_version !== 1 || !["activate", "rollback"].includes(value.action) || value.model_id !== null && typeof value.model_id !== "string" || value.run_id !== null && typeof value.run_id !== "string" || value.previous_model_id !== null && typeof value.previous_model_id !== "string") {
@@ -624,6 +627,24 @@ async function readPointer(store) {
     throw error;
   }
 }
+async function writePrivatePointer(path, pointer) {
+  const temporary = `${path}.${process.pid}.${Date.now()}.${randomUUID()}.tmp`;
+  await writeFile2(temporary, `${JSON.stringify(pointer, null, 2)}
+`, {
+    encoding: "utf8",
+    mode: 384
+  });
+  await rename(temporary, path);
+  await chmod(path, 384);
+}
+async function appendPrivateHistory(path, pointer) {
+  await appendFile(path, `${JSON.stringify(pointer)}
+`, {
+    encoding: "utf8",
+    mode: 384
+  });
+  await chmod(path, 384);
+}
 async function assertModelCanActivate(store, modelId) {
   const model = await store.getModel(modelId);
   const run = await store.getRun(model.run_id);
@@ -645,9 +666,8 @@ async function assertModelCanActivate(store, modelId) {
 }
 async function publishPointer(store, pointer) {
   await store.ensure();
-  await writeJsonAtomic(pointerPath(store), pointer);
-  await appendFile(historyPath(store), `${JSON.stringify(pointer)}
-`, "utf8");
+  await writePrivatePointer(pointerPath(store), pointer);
+  await appendPrivateHistory(historyPath(store), pointer);
   return pointer;
 }
 async function getActiveModel(store) {
@@ -732,8 +752,9 @@ Global options:
   -V, --version                    Show the installed version
 
 The run command writes local artifacts under config.artifactRoot, defaulting to
-.tt-local/artifacts. The file-backed local store defaults to
-~/.tuned-tensor-local unless config.storeRoot or TT_LOCAL_HOME is set.`);
+.tuned-tensor/artifacts. The file-backed local store defaults to
+~/.tuned-tensor/store unless config.storeRoot, TT_LOCAL_HOME, or
+TUNED_TENSOR_HOME is set.`);
 }
 var CONFIG_OPTION = { name: "--config", value: "path", description: "Local runner config JSON path" };
 var VERBOSE_OPTION = { name: "--verbose", description: "Stream subprocess output" };
@@ -1724,6 +1745,7 @@ export {
   generatedPlaceholderIssues,
   getActiveModel,
   getLocalRunnerInfo,
+  hardenExistingLocalStore,
   initLocalRunnerConfigFile,
   initLocalSpecFile,
   isFoundationSpecFile,
@@ -1755,6 +1777,7 @@ export {
   validateLocalPipeline,
   verifyLocalBaseModel,
   verifyLocalModelServerLaunch,
-  verifyModelPrefetchCacheReport
+  verifyModelPrefetchCacheReport,
+  writePrivateJsonAtomic
 };
 //# sourceMappingURL=local-runtime.js.map