pageship 0.1.0 → 0.1.1

package/README.md

@@ -47,8 +47,9 @@ to reuse the stored credential in a new process. Add global `--json` for structu
 results. Pending or denied authorization exits 2, success exits 0, request/storage
 failures exit 1, and interrupted waiting exits 130.
 
-Credentials stay outside projects in an owner-only POSIX directory or Windows
-DPAPI-protected storage under the current user's local app data.
+Credentials are plaintext JSON outside projects. POSIX uses an owner-only directory
+and 0600 files. Windows uses the current user's local app data and inherits
+user-profile permissions; the CLI does not configure Windows ACLs.
 `PAGESHIP_CONFIG_DIR` selects an absolute private directory. They are bound to the
 exact HTTPS server origin; HTTP is allowed only on loopback for development.
 Use `login --restart` for a new code. Address selection and publication are not

package/dist/cli.mjs

@@ -829,32 +829,6 @@ async function checkCompatibility(baseUrl, options = {}) {
 	return evaluateCompatibility(validateCompatibility(data));
 }
 //#endregion
-//#region src/windows-protection.ts
-/** DPAPI binds this ciphertext to the current Windows account on this machine. */
-function windowsProtection(value, operation) {
-	const script = `$ErrorActionPreference='Stop'; [Console]::InputEncoding=[Text.Encoding]::UTF8; [Console]::OutputEncoding=[Text.Encoding]::UTF8; Add-Type -AssemblyName System.Security; $value=[Console]::In.ReadToEnd(); [Console]::Out.Write(${operation === "protect" ? "[Convert]::ToBase64String([Security.Cryptography.ProtectedData]::Protect([Text.Encoding]::UTF8.GetBytes($value),$null,[Security.Cryptography.DataProtectionScope]::CurrentUser))" : "[Text.Encoding]::UTF8.GetString([Security.Cryptography.ProtectedData]::Unprotect([Convert]::FromBase64String($value),$null,[Security.Cryptography.DataProtectionScope]::CurrentUser))"})`;
-	return new Promise((resolve, reject) => {
-		const executable = join(process.env.SystemRoot ?? "C:\\Windows", "System32", "WindowsPowerShell", "v1.0", "powershell.exe");
-		const child = execFile(executable, [
-			"-NoLogo",
-			"-NoProfile",
-			"-NonInteractive",
-			"-Command",
-			script
-		], {
-			encoding: "utf8",
-			windowsHide: true,
-			timeout: 1e4,
-			maxBuffer: 1048576
-		}, (error, stdout) => {
-			if (error) reject(/* @__PURE__ */ new Error("Windows protected storage failed. Use this Windows account on this machine and ensure Windows PowerShell and DPAPI are available."));
-			else resolve(stdout);
-		});
-		child.stdin?.on("error", () => {});
-		child.stdin?.end(value);
-	});
-}
-//#endregion
 //#region src/credential-store.ts
 /** Separate files bind secrets to an exact server origin, outside project directories. */
 async function credentialStore(server, readOnly = false) {
@@ -887,7 +861,7 @@ async function credentialStore(server, readOnly = false) {
 				file = await open(path, constants.O_RDONLY | (windows ? 0 : constants.O_NOFOLLOW));
 			} catch (error) {
 				if (error.code === "ENOENT") return {};
-				throw new Error("Could not open protected credentials. Check the credential file is not a symlink.");
+				throw new Error("Could not open credentials. Check the credential file is not a symlink.");
 			}
 			try {
 				const stat = await file.stat();
@@ -895,9 +869,9 @@ async function credentialStore(server, readOnly = false) {
 				const raw = await file.readFile("utf8");
 				let value;
 				try {
-					value = JSON.parse(windows ? await windowsProtection(raw, "unprotect") : raw);
+					value = JSON.parse(raw);
 				} catch {
-					throw new Error("Could not read protected credentials. Use the original operating-system account or choose a new private PAGESHIP_CONFIG_DIR and log in again.");
+					throw new Error("Could not read credential JSON. Choose a new private PAGESHIP_CONFIG_DIR and log in again.");
 				}
 				if (!value || typeof value !== "object") throw new Error("Invalid credential file. Start again with a new private PAGESHIP_CONFIG_DIR.");
 				const candidate = value;
@@ -915,8 +889,7 @@ async function credentialStore(server, readOnly = false) {
 			try {
 				const file = await open(temporary, "wx", 384);
 				try {
-					const serialized = JSON.stringify(value);
-					await file.writeFile(windows ? await windowsProtection(serialized, "protect") : serialized);
+					await file.writeFile(JSON.stringify(value));
 					await file.sync();
 				} finally {
 					await file.close();
@@ -1426,7 +1399,7 @@ async function publish(options) {
 }
 //#endregion
 //#region package.json
-var version = "0.1.0";
+var version = "0.1.1";
 //#endregion
 //#region src/cli.ts
 const args = process.argv.slice(2);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pageship",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "description": "Pageship CLI for checking server API compatibility.",
   "license": "UNLICENSED",
   "repository": {