@andreprado/agentkit 0.1.0-alpha.2 → 0.1.0-alpha.20

package/src/runtime/env.ts

@@ -1,4 +1,4 @@
-import { readFile, writeFile } from "node:fs/promises";
+import { chmod, readFile, writeFile } from "node:fs/promises";
 import { join } from "node:path";
 
 import { AgentKitError } from "./errors";
@@ -83,7 +83,7 @@ export async function setCapsuleEnv(root: string, name: string, value: string):
     }
   }
 
-  await writeFile(path, `${nextLines.join("\n").replace(/\n*$/, "")}\n`);
+  await writeSecureDotEnv(path, `${nextLines.join("\n").replace(/\n*$/, "")}\n`);
 }
 
 export async function unsetCapsuleEnv(root: string, name: string): Promise<boolean> {
@@ -103,10 +103,15 @@ export async function unsetCapsuleEnv(root: string, name: string): Promise<boole
     return false;
   }
 
-  await writeFile(path, `${nextLines.join("\n").replace(/\n*$/, "")}\n`);
+  await writeSecureDotEnv(path, `${nextLines.join("\n").replace(/\n*$/, "")}\n`);
   return true;
 }
 
+async function writeSecureDotEnv(path: string, source: string): Promise<void> {
+  await writeFile(path, source, { mode: 0o600 });
+  await chmod(path, 0o600);
+}
+
 async function readDotEnvSource(path: string): Promise<string> {
   try {
     return await readFile(path, "utf8");