@cocorograph/hub-agent 0.8.28 → 0.8.29

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cocorograph/hub-agent",
-  "version": "0.8.28",
+  "version": "0.8.29",
   "description": "Hub Hosted Cockpit のローカル常駐 agent。Hub と outbound WSS で接続し、ローカルの Claude / Codex チャットと tmux セッションを中継する。",
   "type": "module",
   "license": "UNLICENSED",

package/src/sibling-inject.mjs

@@ -59,7 +59,7 @@
  */
 
 import { watch } from "node:fs"
-import { mkdir, readFile, writeFile, rename, unlink, readdir } from "node:fs/promises"
+import { chmod, lstat, mkdir, readFile, writeFile, rename, unlink, readdir } from "node:fs/promises"
 import path from "node:path"
 
 import { verifySiblingTokenAny, siblingTokenCwd } from "./sibling-token.mjs"
@@ -268,9 +268,46 @@ export class SiblingInjectBridge {
     return { claudeBridge: this.claudeBridge, codexBridge: this.codexBridge }
   }
 
+  async _lstatDir() {
+    return lstat(this.dir)
+  }
+
+  /** IPC ディレクトリを所有者限定にし、安全性を確認できなければ例外で閉じる。 */
+  async _prepareDir() {
+    try {
+      await this._lstatDir()
+    } catch (err) {
+      if (err?.code !== "ENOENT") throw err
+      await mkdir(this.dir, { recursive: true, mode: 0o700 })
+    }
+
+    const info = await this._lstatDir()
+    if (info.isSymbolicLink()) {
+      throw new Error("IPC directory must not be a symbolic link")
+    }
+    if (!info.isDirectory()) {
+      throw new Error("IPC path is not a directory")
+    }
+    const uid = process.getuid?.()
+    if (uid == null || info.uid !== uid) {
+      throw new Error("IPC directory is not owned by the current user")
+    }
+    if ((info.mode & 0o777) !== 0o700) {
+      await chmod(this.dir, 0o700)
+    }
+  }
+
   /** 監視ディレクトリを作成し、既存要求を sweep してから fs.watch を張る。 */
   async start() {
-    await mkdir(this.dir, { recursive: true })
+    try {
+      await this._prepareDir()
+    } catch (err) {
+      this.logger?.warn(
+        { err: err?.message, dir: this.dir },
+        "sibling-inject IPC directory is unsafe, IPC disabled",
+      )
+      return
+    }
     await this._sweep()
     try {
       this._watcher = watch(this.dir, (_event, filename) => {
@@ -640,7 +677,7 @@ export class SiblingInjectBridge {
     const fp = path.join(this.dir, `${request_id}.result.json`)
     const tmp = `${fp}.tmp`
     try {
-      await writeFile(tmp, JSON.stringify(result))
+      await writeFile(tmp, JSON.stringify(result), { mode: 0o600 })
       await rename(tmp, fp)
     } catch (err) {
       this.logger?.warn({ err: err?.message, request_id }, "sibling-inject result write failed")