Skip to content

Corrupt local state is silently reset and can destroy provisional recipient keys - #23

Closed
dipeshbabu wants to merge 1 commit into
fix/ci-bundle-smokefrom
fix/state-preservation
Closed

dipeshbabu wants to merge 1 commit into
fix/ci-bundle-smokefrom
fix/state-preservation

Conversation

@dipeshbabu

@dipeshbabu dipeshbabu commented Oct 5, 2026 •

Copy link
Copy Markdown
Owner

Upstream replacement: subconscious-systems#18

This PR was created in the fork in error. The fix and its issue are now submitted to upstream.

readState catches every error and returns empty state. A subsequent upload writes over the damaged file, discarding provisional private keys and passphrases; direct writes can also leave a truncated state file after interruption.

Fail clearly while preserving invalid state and replace validated state through a private temporary file and rename. Tests prove corrupt and unsupported state cannot be overwritten and successful writes leave no temporary files.

Validation: frozen-lockfile dependencies, typecheck, full tests, npm bundle build, and bundled CLI version/help smoke tests. The Ubuntu/Windows Node 20/22 branch CI must pass before this PR is created.

This PR is based on the CI foundation branch so its diff contains only this bug fix; merge the CI foundation PR first.

Closes #10.

All branch CI checks passed on 491a2b6: https://github.com/dipeshbabu/vibi-cli/actions/runs/37263133739

@dipeshbabu dipeshbabu closed this Oct 5, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant