@volter/teams 0.2.43 → 0.2.44

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@volter/teams",
-  "version": "0.2.43",
+  "version": "0.2.44",
   "type": "module",
   "description": "Volter Teams, the neutral team plane: machine identity and daemon core, the local door and server link, admission from machine grants, product doors, and the Teams server's neutral routes (company RFC 0008).",
   "license": "MIT",

package/redact.mjs

@@ -134,23 +134,29 @@ const anyKeyword = new RegExp([...new Set(RULES.flatMap((rule) => rule.keywords)
 const CUSTODY_LOOK_MS = 30_000;
 let custodyCache = null, custodyStamp = null, custodyLookedAt = 0;
 const stampOf = (file) => { try { const s = statSync(file); return `${s.ino}:${s.size}:${s.mtimeMs}`; } catch { return '-'; } };
-function custodyFiles(env) {
+const custodyUnreadable=()=>Object.assign(new Error('a declared custody file or its registry could not be read; capture transfer refused'),{code:'custody_unreadable'});
+function custodyFiles(env, fresh) {
   const home = env.SUPERCODE_HOME || join(env.XDG_CONFIG_HOME || join(homedir(), '.config'), 'supercode');
   let files = String(env.SUPERCODE_CUSTODY_FILES ?? '').split(delimiter).filter(Boolean);
-  try { files = files.concat(JSON.parse(readFileSync(join(home, 'custody.json'), 'utf8')).files ?? []); } catch { /* none named */ }
+  try {
+    const named=JSON.parse(readFileSync(join(home, 'custody.json'), 'utf8')).files??[];
+    if(fresh&&(!Array.isArray(named)||named.some(file=>typeof file!=='string')))throw custodyUnreadable();
+    files=files.concat(named);
+  } catch(error) { if(fresh&&error?.code!=='ENOENT')throw custodyUnreadable(); }
   return { files, stamp: [join(home, 'custody.json'), ...files].map(stampOf).join('|') };
 }
-/** Each custody value (at least 8 characters) with the variable that holds it, longest first. */
-export function custodyValues(env = process.env) {
+/** Each custody value (at least 8 characters) with the variable that holds it, longest first. `fresh` bypasses both
+ * the interval and stat memo and refuses unreadable declared files or a malformed/unreadable registry. */
+export function custodyValues(env = process.env, { fresh = false } = {}) {
   const now = Date.now();
-  if (custodyCache && now - custodyLookedAt < CUSTODY_LOOK_MS) return custodyCache;
+  if (!fresh && custodyCache && now - custodyLookedAt < CUSTODY_LOOK_MS) return custodyCache;
   custodyLookedAt = now;
-  const { files, stamp } = custodyFiles(env);
-  if (custodyCache && stamp === custodyStamp) return custodyCache;
+  const { files, stamp } = custodyFiles(env, fresh);
+  if (!fresh && custodyCache && stamp === custodyStamp) return custodyCache;
   custodyStamp = stamp;
   const values = new Map();
   for (const file of files) {
-    let text = ''; try { if (existsSync(file)) text = readFileSync(file, 'utf8'); } catch { continue; }
+    let text = ''; try { if (fresh||existsSync(file)) text = readFileSync(file, 'utf8'); } catch { if(fresh)throw custodyUnreadable();continue; }
     for (const line of text.split('\n')) {
       const m = /^\s*(?:export\s+)?([A-Za-z_][A-Za-z0-9_]*)\s*=\s*(.*)$/.exec(line);
       if (!m) continue;
@@ -169,10 +175,10 @@ export function custodyValues(env = process.env) {
 let custodyBasis = null;
 /** What a redaction was made under (the rule set and the custody values), as a digest: text found clean under one
  * basis is clean under it again, and needs another look only when it changes. */
-export function redactionBasis(env = process.env) { custodyValues(env); return custodyBasis; }
+export function redactionBasis(env = process.env, options) { custodyValues(env, options); return custodyBasis; }
 /** One custody observation and its basis, for a batch that must not change policy between its values. */
-export function redactionSnapshot(env = process.env) {
-  const values = custodyValues(env);
+export function redactionSnapshot(env = process.env, options) {
+  const values = custodyValues(env, options);
   return { values, basis: custodyBasis };
 }