pi-jev-guard 0.1.3 → 0.1.4

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pi-jev-guard",
-  "version": "0.1.3",
+  "version": "0.1.4",
   "type": "module",
   "description": "Jev validation guard for pi: on-demand tool + automatic provider gate. Dual backend: TypeSafe direct + OpenRouter.",
   "keywords": [

package/src/commands.ts

@@ -1,5 +1,6 @@
 import { readFileSync, existsSync, statSync, realpathSync, writeFileSync, mkdirSync, chmodSync } from "node:fs";
 import { resolve, dirname } from "node:path";
+import { tmpdir } from "node:os";
 import type { ExtensionAPI, ModelRegistry } from "@earendil-works/pi-coding-agent";
 import type { JevConfig } from "./config.ts";
 import { defaultConfigPath, expandHome, parseUpstreamRef, resolveBackend, saveConfig } from "./config.ts";
@@ -345,9 +346,18 @@ export function registerJevCommand(pi: ExtensionAPI, deps: JevCommandDeps) {
 
       if (sub === "save-key") {
         const cfg = deps.config();
-        const target = cfg.jev.apiKeyFile?.trim()
+        let target = cfg.jev.apiKeyFile?.trim()
           ? expandHome(cfg.jev.apiKeyFile.trim())
           : resolve(dirname(defaultConfigPath()), "jev-api-key.txt");
+        // Mai chiavi in tmp: dir effimera (pulizia automatica = chiave persa).
+        // Può capitare con config stantie caricate in memoria prima di un fix.
+        if (target === tmpdir() || target.startsWith(tmpdir() + "/")) {
+          ctx.ui.notify(
+            `Jev: percorso chiave sotto tmp ignorato (${target}); uso quello canonico.`,
+            "warning",
+          );
+          target = resolve(dirname(defaultConfigPath()), "jev-api-key.txt");
+        }
         let key: string | undefined;
         try {
           key = await ctx.ui.input(