@askalf/dario 5.4.21 → 5.4.23

package/dist/live-fingerprint.js

@@ -341,10 +341,20 @@ function quarantineCorruptCache(reason) {
  * other's partial writes. Exposed for tests via `_atomicWriteJsonForTest`.
  */
 function atomicWriteJson(targetPath, data) {
-    mkdirSync(dirname(targetPath), { recursive: true });
+    // 0700: whichever code path creates ~/.dario first decides that directory's
+    // permissions, and this one runs at startup, before any credential write.
+    // Without a mode it lands 755 on Linux, which makes every non-0600 file inside
+    // world-readable. The credential paths already create their dirs 0700; this was
+    // the one that could get there first and did not.
+    mkdirSync(dirname(targetPath), { recursive: true, mode: 0o700 });
     const tmp = `${targetPath}.${process.pid}.tmp`;
     try {
-        writeFileSync(tmp, JSON.stringify(data, null, 2));
+        // 0600: this file holds the UNSCRUBBED live capture. Verified on the Linux
+        // deployment to contain `# Environment` (cwd, OS, platform) and `gitStatus:`
+        // (branch, modified files, recent commits); structurally it can also carry
+        // `# claudeMd`, `# userEmail` and `# auto memory` — the scrub list exists
+        // because CC emits them. Credentials beside it are 0600; this was 0644.
+        writeFileSync(tmp, JSON.stringify(data, null, 2), { mode: 0o600 });
         renameSync(tmp, targetPath);
     }
     catch (err) {

package/dist/proxy.js

@@ -1088,7 +1088,13 @@ export async function startProxy(opts = {}) {
     let logFileStream = null;
     if (logFilePath) {
         try {
-            logFileStream = createWriteStream(logFilePath, { flags: 'a' });
+            // 0600 to match everything else dario writes. Records are redacted metadata
+            // rather than bodies (writeLogLine runs redactSecrets; -vv bodies go to
+            // stdout), so this is defence-in-depth — but it still shows which account
+            // served which request and when, and 0644 contradicted the convention every
+            // credential path here follows. Mode applies to CREATION only, so an
+            // existing log keeps its own mode, which is right for append.
+            logFileStream = createWriteStream(logFilePath, { flags: 'a', mode: 0o600 });
             logFileStream.on('error', (err) => {
                 console.error(`[dario] log-file write error: ${err.message} (logging disabled)`);
                 logFileStream = null;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@askalf/dario",
-  "version": "5.4.21",
+  "version": "5.4.23",
   "description": "Use your Claude Pro/Max subscription in any tool — Cursor, Cline, Aider, the Agent SDK, your scripts — at subscription pricing, not per-token API bills. One local Anthropic + OpenAI-compatible endpoint.",
   "type": "module",
   "bin": {