@gotcos/glasses-server 6.12.4 → 6.12.5

package/CHANGELOG.md

@@ -1,5 +1,17 @@
 # Changelog
 
+## 6.12.5
+
+Extends the file-permission hardening to the remaining append-only logs that
+the launch review named.
+
+- **Run ledgers and the token-audit log are private at the file level.** The
+  Claude and Codex run ledgers and the token-audit JSONL now create with mode
+  0600 and repair existing files with chmod, matching the session-log and
+  atomic-fs writers. They already sat under the 0700 data directory; this
+  closes the file-level bit for defense in depth and covers the token-audit log
+  specifically, which lives beside the data directory rather than inside it.
+
 ## 6.12.4
 
 Completes the public launch security review with a constant-time token check.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gotcos/glasses-server",
-  "version": "6.12.4",
+  "version": "6.12.5",
   "description": "COS Glasses — self-hosted AI heads-up-display server for Even G2 smart glasses, powered by your local Claude Code or Codex CLI",
   "type": "module",
   "bin": {

package/server/lib/claude-run-ledger.ts

@@ -1,5 +1,5 @@
 import crypto from 'node:crypto'
-import { appendFileSync, existsSync, mkdirSync, readFileSync } from 'node:fs'
+import { appendFileSync, chmodSync, existsSync, mkdirSync, readFileSync } from 'node:fs'
 import { dirname, resolve } from 'node:path'
 import { COS_SCRIPTS_DIR } from './python-bridge.js'
 import { dataPath } from './data-dir.js'
@@ -118,7 +118,8 @@ function appendEvent(event: ClaudeRunEvent): void {
   try {
     const path = getClaudeLedgerPath()
     mkdirSync(dirname(path), { recursive: true })
-    appendFileSync(path, JSON.stringify(event) + '\n')
+    appendFileSync(path, JSON.stringify(event) + '\n', { encoding: 'utf8', mode: 0o600 })
+    chmodSync(path, 0o600)
   } catch (err) {
     console.warn('[claude-run-ledger] write skipped:', err)
   }

package/server/lib/codex-run-ledger.ts

@@ -1,5 +1,5 @@
 import crypto from 'node:crypto'
-import { appendFileSync, existsSync, mkdirSync, readFileSync } from 'node:fs'
+import { appendFileSync, chmodSync, existsSync, mkdirSync, readFileSync } from 'node:fs'
 import { dirname, resolve } from 'node:path'
 import { COS_SCRIPTS_DIR } from './python-bridge.js'
 import { cosBrainDir } from './launch-dir.js'
@@ -140,7 +140,8 @@ function appendEvent(event: CodexRunEvent): void {
   try {
     const path = getCodexLedgerPath()
     mkdirSync(dirname(path), { recursive: true })
-    appendFileSync(path, JSON.stringify(event) + '\n')
+    appendFileSync(path, JSON.stringify(event) + '\n', { encoding: 'utf8', mode: 0o600 })
+    chmodSync(path, 0o600)
   } catch (err) {
     console.warn('[codex-run-ledger] write skipped:', err)
   }

package/server/lib/token-audit.ts

@@ -2,7 +2,7 @@
 // Both Python (COS scripts) and TypeScript (G2 glasses) write to the same JSONL.
 // No LLM calls. Pure file append.
 
-import { appendFileSync } from 'node:fs'
+import { appendFileSync, chmodSync } from 'node:fs'
 import { resolve } from 'node:path'
 import { homedir } from 'node:os'
 
@@ -43,7 +43,8 @@ export function logTokenAudit(entry: TokenAuditEntry): void {
     caller: entry.caller,
   }
   try {
-    appendFileSync(AUDIT_FILE, JSON.stringify(record) + '\n')
+    appendFileSync(AUDIT_FILE, JSON.stringify(record) + '\n', { encoding: 'utf8', mode: 0o600 })
+    chmodSync(AUDIT_FILE, 0o600)
   } catch {
     // Never let logging break the actual call
   }