@puddle-code/cli 0.2.0 → 0.2.1

package/CHANGELOG.md

@@ -7,33 +7,11 @@ Past releases: see docs/changelogs/.
 
 # Changelog
 
-## [0.2.0] — 2026-09-21
-
-### Added
-
-- Add Settings → Remote access in local and SSH desktop cockpits for enablement, status, QR/link pairing, browser approval/revocation, disablement and host identity recovery; add authenticated cockpit controls in protocol 18.1.
-- Add self-hosted mobile access with Google/GitHub login, optional authenticator MFA, independently supervised host connectors and QR/link browser pairing.
-- Add a single-terminal phone view, native multiline prompt composer, visible terminal keys and read-only text/change review without rewriting desktop layouts.
-- Add remote administration and recovery commands, deployment images and isolated relay/browser acceptance suites.
-- Add lightweight built-process and loopback OpenSSH authentication suites, with separate manual browser and desktop acceptance.
-
-### Changed
-
-- Open remote account registration to every verified Google/GitHub identity; remove the signup allowlist and registration switch while retaining account isolation and explicit host approval.
-
-### Removed
-
-- Remove the TLS contact email setting from the Caddy deployment and environment example.
-- Remove email/password login, verification/reset email delivery, SMTP configuration and Nodemailer; require Google and/or GitHub OAuth, retain verified-email admission and optional authenticator MFA, and retire legacy passwords/sessions. Bump remote protocol to 2 and daemon/cockpit protocol to 19.0 for the changed pairing contract.
+## [0.2.1] — 2026-09-21
 
 ### Fixed
 
-- Reject incomplete remote-origin input without throwing during registration form rendering.
-- Preserve browser login, terminal snapshots and refresh correlation across cockpit replacement and upstream recovery; retain desktop routes when the origin moves.
-
-### Security
-
-- Require exact browser approval at the host, pinned Noise XX transport, bounded forwarding and fresh browser participation in the existing host leases; keep remote protocol 2 independent of the protocol-18 host lease foundation.
-- Persist device revocation and offline remote disable, isolate application delivery from the relay origin, and deny unreviewed remote routes and executable previews.
-- Replace distributed master credentials with private host control, short-lived renewable connection leases and single-use browser invitations; migrate to protocol 18.0 and require existing tabs to run `puddle launch` once.
-- Isolate forwarded applications on a separate loopback origin, bind proxy grants to browser authorisation and revoke active streams when their authority expires.
+- Fix daemon and cockpit startup on legacy installations by migrating owned Puddle homes from `0755` to `0700`, and create fresh installer homes privately.
+- Fix self-hosted application builds with filtered dependencies by separating the production Vite configuration from the development cockpit gateway.
+- Fix remote container builds and static file serving from checkouts with private file permissions.
+- Remove Caddy's unused privileged-port capability so the application container starts with all capabilities dropped.

package/dist/host-control.mjs

@@ -16043,6 +16043,9 @@ import { createHash, randomBytes } from "node:crypto";
 import {
   chmodSync,
   closeSync,
+  constants,
+  fchmodSync,
+  fstatSync,
   fsyncSync,
   lstatSync,
   mkdirSync,
@@ -16053,7 +16056,7 @@ import {
   rmSync,
   writeFileSync
 } from "node:fs";
-import { dirname, join } from "node:path";
+import { dirname, join, resolve } from "node:path";
 var digest = (value) => createHash("sha256").update(value).digest("hex");
 function privatePath(path, directory = false) {
   const st = lstatSync(path);
@@ -16065,8 +16068,29 @@ function privateDirectory(path) {
   mkdirSync(path, { recursive: true, mode: 448 });
   privatePath(path, true);
 }
+function initialisePrivateHome(home) {
+  const path = resolve(home);
+  mkdirSync(path, { recursive: true, mode: 448 });
+  if (process.platform === "win32") {
+    privatePath(path, true);
+    return;
+  }
+  const fd = openSync(path, constants.O_RDONLY | constants.O_DIRECTORY | constants.O_NOFOLLOW);
+  try {
+    const st = fstatSync(fd);
+    if (!st.isDirectory() || st.uid !== process.getuid() || (st.mode & 18) !== 0) {
+      throw new Error(
+        `Puddle home must be owned by the current user and not writable by other users: ${path}`
+      );
+    }
+    if ((st.mode & 63) !== 0) fchmodSync(fd, 448);
+  } finally {
+    closeSync(fd);
+  }
+  privatePath(path, true);
+}
 function ipcPath(home, scope) {
-  privateDirectory(home);
+  initialisePrivateHome(home);
   const key = digest(`${realpathSync(home)}\0${scope}`).slice(0, 24);
   if (process.platform === "win32") return `\\\\.\\pipe\\puddle-${key}`;
   const dir = join("/tmp", `puddle-${process.getuid()}-${key}`);
@@ -16189,7 +16213,7 @@ async function inspectHostLocally(home) {
   }
   const socket = connect(path);
   try {
-    const grant = await new Promise((resolve, reject) => {
+    const grant = await new Promise((resolve2, reject) => {
       socket.setTimeout(5e3, () => socket.destroy(new Error("Host inspection timed out")));
       socket.once("error", reject);
       socket.once("close", () => reject(new Error("Host control closed")));
@@ -16199,7 +16223,7 @@ async function inspectHostLocally(home) {
           const message = controlResponseSchema.parse(value);
           if (message.t !== "authority" || !message.token)
             throw new Error("Host authority unavailable");
-          resolve(message);
+          resolve2(message);
         },
         () => socket.destroy(new Error("Invalid host control response"))
       );

package/dist/index.js

@@ -3756,7 +3756,7 @@ var init_wrapper = __esm({
 
 // src/lib/ws-client.ts
 function connectGateway(port, authority) {
-  return new Promise((resolve4, reject) => {
+  return new Promise((resolve5, reject) => {
     const ws = new wrapper_default(`ws://127.0.0.1:${port}/ws`, {
       headers: { host: `localhost:${port}` }
     });
@@ -3781,7 +3781,7 @@ function connectGateway(port, authority) {
       }
       if (parsed.t === "authenticated") {
         clearTimeout(timer);
-        resolve4({
+        resolve5({
           send(message) {
             if (resource.valid() && ws.readyState === wrapper_default.OPEN)
               ws.send(JSON.stringify(message));
@@ -3855,7 +3855,7 @@ async function attachSession(opts) {
     rows: streams.stdout.rows ?? 24
   });
   gateway.send({ t: "attach", session: session.id, term, ...dims2() });
-  return new Promise((resolve4) => {
+  return new Promise((resolve5) => {
     let settled = false;
     const finish = (outcome) => {
       if (settled) return;
@@ -3864,7 +3864,7 @@ async function attachSession(opts) {
       stdin.removeListener("data", onStdin);
       unResize?.();
       gateway.close();
-      resolve4(outcome);
+      resolve5(outcome);
     };
     gateway.onMessage((message) => {
       switch (message.t) {
@@ -19987,7 +19987,7 @@ var LocalTransport = class {
   kind = "local";
   label = "this machine";
   exec(command, opts = {}) {
-    return new Promise((resolve4) => {
+    return new Promise((resolve5) => {
       const child = spawn("sh", ["-c", command], { stdio: ["pipe", "pipe", "pipe"] });
       let stdout = "";
       let stderr = "";
@@ -20004,11 +20004,11 @@ var LocalTransport = class {
       child.stderr.on("data", (chunk) => stderr += chunk.toString());
       child.on("error", (err) => {
         if (timer) clearTimeout(timer);
-        resolve4({ code: -1, stdout, stderr: stderr + String(err) });
+        resolve5({ code: -1, stdout, stderr: stderr + String(err) });
       });
       child.on("close", (code) => {
         if (timer) clearTimeout(timer);
-        resolve4({ code: code ?? -1, stdout, stderr });
+        resolve5({ code: code ?? -1, stdout, stderr });
       });
       child.stdin.on("error", () => {
       });
@@ -20102,7 +20102,7 @@ var SshTransport = class {
    * live control socket behind.
    */
   open() {
-    return new Promise((resolve4, reject) => {
+    return new Promise((resolve5, reject) => {
       const child = spawn2(this.ssh, this.args(this.host, "true"), {
         // A GUI has no useful inherited terminal; OpenSSH calls its askpass
         // helper instead. The terminal CLI keeps byte-for-byte inheritance.
@@ -20114,7 +20114,7 @@ var SshTransport = class {
         (err) => reject(new CliError("ssh_unreachable", `could not run ${this.ssh}: ${err.message}`))
       );
       child.on("close", (code) => {
-        if (code === 0) resolve4();
+        if (code === 0) resolve5();
         else {
           reject(
             new CliError(
@@ -20130,13 +20130,13 @@ var SshTransport = class {
   /** Whether the master connection is still alive (-O check). */
   isAlive() {
     if (!this.hasControlMaster) return Promise.resolve(true);
-    return new Promise((resolve4) => {
+    return new Promise((resolve5) => {
       const child = spawn2(this.ssh, this.args("-O", "check", this.host), {
         stdio: "ignore",
         env: this.spawnEnv()
       });
-      child.on("error", () => resolve4(false));
-      child.on("close", (code) => resolve4(code === 0));
+      child.on("error", () => resolve5(false));
+      child.on("close", (code) => resolve5(code === 0));
     });
   }
   /**
@@ -20149,18 +20149,18 @@ var SshTransport = class {
    */
   cancelForward(localPort, remotePort) {
     if (!this.hasControlMaster) return Promise.resolve();
-    return new Promise((resolve4) => {
+    return new Promise((resolve5) => {
       const spec = `${localPort}:127.0.0.1:${remotePort}`;
       const child = spawn2(this.ssh, this.args("-O", "cancel", "-L", spec, this.host), {
         stdio: "ignore",
         env: this.spawnEnv()
       });
-      child.on("error", () => resolve4());
-      child.on("close", () => resolve4());
+      child.on("error", () => resolve5());
+      child.on("close", () => resolve5());
     });
   }
   exec(command, opts = {}) {
-    return new Promise((resolve4) => {
+    return new Promise((resolve5) => {
       const child = spawn2(this.ssh, this.args(this.host, "--", `sh -c ${shellQuote(command)}`), {
         stdio: ["pipe", "pipe", "pipe"],
         env: this.spawnEnv()
@@ -20180,11 +20180,11 @@ var SshTransport = class {
       child.stderr.on("data", (chunk) => stderr += chunk.toString());
       child.on("error", (err) => {
         if (timer) clearTimeout(timer);
-        resolve4({ code: -1, stdout, stderr: stderr + String(err) });
+        resolve5({ code: -1, stdout, stderr: stderr + String(err) });
       });
       child.on("close", (code) => {
         if (timer) clearTimeout(timer);
-        resolve4({ code: code ?? -1, stdout, stderr });
+        resolve5({ code: code ?? -1, stdout, stderr });
       });
       child.stdin.on("error", () => {
       });
@@ -20204,11 +20204,11 @@ var SshTransport = class {
     });
     let stdout = "";
     let stderr = "";
-    const result = new Promise((resolve4) => {
+    const result = new Promise((resolve5) => {
       child.stdout.on("data", (chunk) => stdout += chunk.toString());
       child.stderr.on("data", (chunk) => stderr += chunk.toString());
-      child.on("error", (err) => resolve4({ code: -1, stdout, stderr: stderr + String(err) }));
-      child.on("close", (code) => resolve4({ code: code ?? -1, stdout, stderr }));
+      child.on("error", (err) => resolve5({ code: -1, stdout, stderr: stderr + String(err) }));
+      child.on("close", (code) => resolve5({ code: code ?? -1, stdout, stderr }));
     });
     return {
       result,
@@ -20223,14 +20223,14 @@ var SshTransport = class {
   }
   async copyTo(localPath, destPath) {
     await this.exec(`mkdir -p $(dirname ${destPath})`, { timeoutMs: 15e3 });
-    await new Promise((resolve4, reject) => {
+    await new Promise((resolve5, reject) => {
       const child = spawn2(this.scp, [...this.controlArgs, localPath, `${this.host}:${destPath}`], {
         stdio: ["ignore", "ignore", "inherit"],
         env: this.spawnEnv()
       });
       child.on("error", reject);
       child.on("close", (code) => {
-        if (code === 0) resolve4();
+        if (code === 0) resolve5();
         else reject(new CliError("ssh_unreachable", `scp to ${this.host} failed (exit ${code})`));
       });
     });
@@ -20331,7 +20331,7 @@ async function registrationCode() {
   const readline = createInterface({ input: process.stdin, output: silent, terminal: true });
   try {
     return remoteSecretSchema.parse(
-      await new Promise((resolve4) => readline.question("", resolve4))
+      await new Promise((resolve5) => readline.question("", resolve5))
     );
   } finally {
     readline.close();
@@ -20733,6 +20733,9 @@ import { createHash, randomBytes } from "node:crypto";
 import {
   chmodSync,
   closeSync,
+  constants,
+  fchmodSync,
+  fstatSync,
   fsyncSync,
   lstatSync,
   mkdirSync as mkdirSync3,
@@ -20744,7 +20747,7 @@ import {
   writeFileSync
 } from "node:fs";
 import { connect, createServer } from "node:net";
-import { dirname as dirname2, join as join2 } from "node:path";
+import { dirname as dirname2, join as join2, resolve } from "node:path";
 var digest = (value) => createHash("sha256").update(value).digest("hex");
 var secret = (prefix = "") => prefix + randomBytes(32).toString("hex");
 function privatePath(path, directory = false) {
@@ -20757,6 +20760,27 @@ function privateDirectory(path) {
   mkdirSync3(path, { recursive: true, mode: 448 });
   privatePath(path, true);
 }
+function initialisePrivateHome(home) {
+  const path = resolve(home);
+  mkdirSync3(path, { recursive: true, mode: 448 });
+  if (process.platform === "win32") {
+    privatePath(path, true);
+    return;
+  }
+  const fd = openSync(path, constants.O_RDONLY | constants.O_DIRECTORY | constants.O_NOFOLLOW);
+  try {
+    const st = fstatSync(fd);
+    if (!st.isDirectory() || st.uid !== process.getuid() || (st.mode & 18) !== 0) {
+      throw new Error(
+        `Puddle home must be owned by the current user and not writable by other users: ${path}`
+      );
+    }
+    if ((st.mode & 63) !== 0) fchmodSync(fd, 448);
+  } finally {
+    closeSync(fd);
+  }
+  privatePath(path, true);
+}
 function atomicPrivateJson(path, value) {
   privateDirectory(dirname2(path));
   const tmp = `${path}.${secret()}.tmp`;
@@ -20778,7 +20802,7 @@ function readPrivateJson(path) {
   return JSON.parse(readFileSync2(path, "utf8"));
 }
 function ipcPath(home, scope) {
-  privateDirectory(home);
+  initialisePrivateHome(home);
   const key = digest(`${realpathSync(home)}\0${scope}`).slice(0, 24);
   if (process.platform === "win32") return `\\\\.\\pipe\\puddle-${key}`;
   const dir = join2("/tmp", `puddle-${process.getuid()}-${key}`);
@@ -20791,14 +20815,14 @@ async function listenPrivate(path, onConnection) {
       privatePath(path);
       const before = lstatSync(path);
       if (!before.isSocket()) throw new Error("Puddle control path is not a socket");
-      const stale = await new Promise((resolve4, reject) => {
+      const stale = await new Promise((resolve5, reject) => {
         const probe = connect(path);
         probe.once("connect", () => {
           probe.destroy();
-          resolve4(false);
+          resolve5(false);
         });
         probe.once("error", (err) => {
-          if (err.code === "ECONNREFUSED" || err.code === "ENOENT") resolve4(true);
+          if (err.code === "ECONNREFUSED" || err.code === "ENOENT") resolve5(true);
           else reject(err);
         });
       });
@@ -20811,11 +20835,11 @@ async function listenPrivate(path, onConnection) {
     }
   }
   const server = createServer(onConnection);
-  await new Promise((resolve4, reject) => {
+  await new Promise((resolve5, reject) => {
     server.once("error", reject);
     server.listen(path, () => {
       server.off("error", reject);
-      resolve4();
+      resolve5();
     });
   });
   if (process.platform !== "win32") chmodSync(path, 384);
@@ -20929,7 +20953,7 @@ var HostControlClient = class {
       }
       this.channel = channel;
       this.until = performance.now() + CONNECTION_POLICY.leaseMs;
-      await new Promise((resolve4, reject) => {
+      await new Promise((resolve5, reject) => {
         let pendingAt = null;
         let initial = true;
         const send = (message, sentAt = performance.now()) => {
@@ -20982,7 +21006,7 @@ var HostControlClient = class {
                 if (this.channel !== channel) return;
                 this.status = "ready";
                 this.emit();
-                resolve4();
+                resolve5();
               }).catch(() => channel.destroy());
             }
           },
@@ -21103,7 +21127,7 @@ async function inspectHostLocally(home) {
   }
   const socket = connect2(path);
   try {
-    const grant = await new Promise((resolve4, reject) => {
+    const grant = await new Promise((resolve5, reject) => {
       socket.setTimeout(5e3, () => socket.destroy(new Error("Host inspection timed out")));
       socket.once("error", reject);
       socket.once("close", () => reject(new Error("Host control closed")));
@@ -21113,7 +21137,7 @@ async function inspectHostLocally(home) {
           const message = controlResponseSchema.parse(value);
           if (message.t !== "authority" || !message.token)
             throw new Error("Host authority unavailable");
-          resolve4(message);
+          resolve5(message);
         },
         () => socket.destroy(new Error("Invalid host control response"))
       );
@@ -21254,12 +21278,12 @@ import {
   renameSync as renameSync2,
   writeFileSync as writeFileSync2
 } from "node:fs";
-import { dirname as dirname6, join as join7, resolve } from "node:path";
+import { dirname as dirname6, join as join7, resolve as resolve2 } from "node:path";
 
 // src/lib/desktop-update.ts
 import { createHash as createHash2 } from "node:crypto";
 import { spawn as spawn4 } from "node:child_process";
-import { constants, createReadStream, createWriteStream } from "node:fs";
+import { constants as constants2, createReadStream, createWriteStream } from "node:fs";
 import { access, chmod, mkdir, readdir, rm, writeFile } from "node:fs/promises";
 import { dirname as dirname5, join as join6 } from "node:path";
 import { Readable } from "node:stream";
@@ -21271,7 +21295,7 @@ import { readFileSync as readFileSync4 } from "node:fs";
 import { dirname as dirname4, join as join5 } from "node:path";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
 function cliVersion() {
-  if (true) return "0.2.0";
+  if (true) return "0.2.1";
   const here = dirname4(fileURLToPath2(import.meta.url));
   for (const candidate of [
     join5(here, "..", "..", "package.json"),
@@ -21539,7 +21563,7 @@ async function desktopAppInstallPath(opts = {}) {
   const systemApplications = opts.systemApplicationsDir ?? "/Applications";
   const canWrite = opts.canWrite ?? (async (path) => {
     try {
-      await access(path, constants.W_OK);
+      await access(path, constants2.W_OK);
       return true;
     } catch {
       return false;
@@ -21551,12 +21575,12 @@ async function desktopAppInstallPath(opts = {}) {
   return join6(userApplications, "Puddle.app");
 }
 function isDesktopAppRunning(appPath) {
-  return new Promise((resolve4) => {
+  return new Promise((resolve5) => {
     const child = spawn4("/usr/bin/pgrep", ["-f", `${appPath}/Contents/MacOS/`], {
       stdio: "ignore"
     });
-    child.on("error", () => resolve4(false));
-    child.on("exit", (code) => resolve4(code === 0));
+    child.on("error", () => resolve5(false));
+    child.on("exit", (code) => resolve5(code === 0));
   });
 }
 function fileSha256(path) {
@@ -21564,12 +21588,12 @@ function fileSha256(path) {
   return pipeline(createReadStream(path), hash2).then(() => hash2.digest("hex"));
 }
 function run(command, args) {
-  return new Promise((resolve4, reject) => {
+  return new Promise((resolve5, reject) => {
     const child = spawn4(command, args, { stdio: "ignore" });
     child.on("error", reject);
     child.on(
       "exit",
-      (code) => code === 0 ? resolve4() : reject(new CliError("not_installed", `${command} exited with ${code ?? "signal"}`))
+      (code) => code === 0 ? resolve5() : reject(new CliError("not_installed", `${command} exited with ${code ?? "signal"}`))
     );
   });
 }
@@ -21644,7 +21668,8 @@ var RELEASE_PROTOCOLS = {
   "0.1.11": { major: 17, minor: 3 },
   "0.1.12": { major: 17, minor: 3 },
   "0.1.13": { major: 17, minor: 3 },
-  "0.2.0": { major: 19, minor: 0 }
+  "0.2.0": { major: 19, minor: 0 },
+  "0.2.1": { major: 19, minor: 0 }
 };
 function validProtocol(value) {
   if (typeof value !== "object" || value === null) return false;
@@ -21732,7 +21757,7 @@ async function installedComponentVersions(opts = {}) {
       };
     }
   }
-  const legacyLinuxPath = resolve(home, "..", "puddle", "Puddle.AppImage");
+  const legacyLinuxPath = resolve2(home, "..", "puddle", "Puddle.AppImage");
   const legacyLinuxDesktop = desktopInstallation === null && (opts.platform ?? process.platform) === "linux" && existsSync2(legacyLinuxPath);
   const desktopProtocol = desktopInstallation?.protocol ?? (desktopInstallation ? componentProtocolForVersion(desktopInstallation.version) : void 0);
   const desktop = desktopInstallation !== null ? {
@@ -21761,7 +21786,7 @@ import { randomUUID } from "node:crypto";
 
 // src/lib/bootstrap.ts
 import { existsSync as existsSync3, readFileSync as readFileSync6 } from "node:fs";
-import { dirname as dirname7, join as join8, resolve as resolve2 } from "node:path";
+import { dirname as dirname7, join as join8, resolve as resolve3 } from "node:path";
 import { fileURLToPath as fileURLToPath3 } from "node:url";
 init_types();
 async function installedVersion(transport) {
@@ -21780,9 +21805,9 @@ async function installDaemon(transport, opts = {}) {
       throw new CliError("not_installed", `tarball not found: ${opts.tarball}`);
     }
     if (transport.kind === "local") {
-      args.push("--tarball", resolve2(opts.tarball));
+      args.push("--tarball", resolve3(opts.tarball));
       const localSums = `${opts.tarball}.sha256`;
-      if (existsSync3(localSums)) args.push("--sums", resolve2(localSums));
+      if (existsSync3(localSums)) args.push("--sums", resolve3(localSums));
     } else {
       const base = opts.tarball.split("/").pop() ?? "puddled.tar.gz";
       const destTarball = `.puddle/cache/${base}`;
@@ -21847,22 +21872,22 @@ function readInstallScript() {
 // src/lib/net.ts
 import { connect as connect4, createServer as createServer2 } from "node:net";
 function findFreePort() {
-  return new Promise((resolve4, reject) => {
+  return new Promise((resolve5, reject) => {
     const srv = createServer2();
     srv.once("error", reject);
     srv.listen(0, "127.0.0.1", () => {
       const address = srv.address();
       const port = typeof address === "object" && address !== null ? address.port : 0;
-      srv.close(() => resolve4(port));
+      srv.close(() => resolve5(port));
     });
   });
 }
 function tcpListening(port, timeoutMs = 500) {
-  return new Promise((resolve4) => {
+  return new Promise((resolve5) => {
     const sock = connect4({ host: "127.0.0.1", port });
     const done = (ok) => {
       sock.destroy();
-      resolve4(ok);
+      resolve5(ok);
     };
     sock.setTimeout(timeoutMs, () => done(false));
     sock.once("connect", () => done(true));
@@ -22311,7 +22336,7 @@ async function startLauncher(home, identity, invite) {
     path,
     close: async () => {
       for (const socket of sockets) socket.destroy();
-      await new Promise((resolve4) => server.close(() => resolve4()));
+      await new Promise((resolve5) => server.close(() => resolve5()));
     }
   };
 }
@@ -22321,14 +22346,14 @@ async function requestInvitation(home, path) {
     const stored = readPrivateJson(secretFile(home, path));
     pipeSecret = stored.secret;
   } else privatePath(path);
-  return new Promise((resolve4, reject) => {
+  return new Promise((resolve5, reject) => {
     const socket = connect5(path);
     socket.setTimeout(5e3, () => socket.destroy(new Error("Launcher did not answer")));
     jsonLines(
       socket,
       (value) => {
         const message = launcherResponseSchema.parse(value);
-        resolve4(message.url);
+        resolve5(message.url);
         socket.end();
       },
       () => socket.destroy(new Error("Invalid launcher reply"))
@@ -22548,7 +22573,7 @@ function writeStore(file2, store) {
   renameSync3(tmp, file2);
 }
 function readBody(req) {
-  return new Promise((resolve4, reject) => {
+  return new Promise((resolve5, reject) => {
     let size = 0;
     const chunks = [];
     req.on("data", (chunk) => {
@@ -22560,7 +22585,7 @@ function readBody(req) {
       }
       chunks.push(chunk);
     });
-    req.on("end", () => resolve4(Buffer.concat(chunks).toString("utf8")));
+    req.on("end", () => resolve5(Buffer.concat(chunks).toString("utf8")));
     req.on("error", reject);
   });
 }
@@ -22598,7 +22623,7 @@ function handleLocalSync(req, res, opts, authorised) {
 
 // src/lib/serve/static.ts
 import { createReadStream as createReadStream2, existsSync as existsSync4, statSync } from "node:fs";
-import { extname, join as join11, normalize, resolve as resolve3, sep } from "node:path";
+import { extname, join as join11, normalize, resolve as resolve4, sep } from "node:path";
 var MIME = {
   ".html": "text/html; charset=utf-8",
   ".js": "text/javascript; charset=utf-8",
@@ -22613,7 +22638,7 @@ var MIME = {
   ".map": "application/json"
 };
 function createStaticHandler(rootDir) {
-  const root = resolve3(rootDir);
+  const root = resolve4(rootDir);
   return (req, res) => {
     if (req.method !== "GET" && req.method !== "HEAD") {
       res.writeHead(405, { allow: "GET, HEAD" }).end();
@@ -23246,8 +23271,8 @@ async function startUiServer(opts) {
       browsers.close();
       bridge.close();
       tracker.destroyAll();
-      await new Promise((resolve4) => {
-        server.close(() => resolve4());
+      await new Promise((resolve5) => {
+        server.close(() => resolve5());
         server.closeAllConnections();
       });
     }
@@ -23257,15 +23282,15 @@ async function listen(server, startPort, strict, avoidPort) {
   for (let probe = 0; probe < MAX_PORT_PROBES; probe += 1) {
     const port = startPort + probe;
     if (!strict && port === avoidPort) continue;
-    const ok = await new Promise((resolve4, rejectListen) => {
+    const ok = await new Promise((resolve5, rejectListen) => {
       const onError = (err) => {
         server.off("listening", onListening);
-        if (err.code === "EADDRINUSE") resolve4(false);
+        if (err.code === "EADDRINUSE") resolve5(false);
         else rejectListen(err);
       };
       const onListening = () => {
         server.off("error", onError);
-        resolve4(true);
+        resolve5(true);
       };
       server.once("error", onError);
       server.once("listening", onListening);
@@ -24182,7 +24207,7 @@ async function ask(question, def) {
   const rl = createInterface2({ input: process.stdin, output: process.stdout });
   try {
     const answer = await new Promise(
-      (resolve4) => rl.question(`${question} [${def}] `, resolve4)
+      (resolve5) => rl.question(`${question} [${def}] `, resolve5)
     );
     return answer.trim() === "" ? def : answer.trim();
   } finally {
@@ -24201,7 +24226,7 @@ async function confirm(question, opts = {}) {
   const rl = createInterface2({ input: process.stdin, output: process.stdout });
   try {
     const answer = await new Promise(
-      (resolve4) => rl.question(`${question} [y/N] `, resolve4)
+      (resolve5) => rl.question(`${question} [y/N] `, resolve5)
     );
     return /^y(es)?$/i.test(answer.trim());
   } finally {
@@ -24320,7 +24345,7 @@ async function runUpgrade(cmd, logger) {
 function upgradeCli(version2, logger) {
   const spec = `@puddle-code/cli@${version2 ?? "latest"}`;
   logger.info(`puddle CLI ${cliVersion()} \u2014 asking npm for ${version2 ?? "the latest release"}`);
-  return new Promise((resolve4, reject) => {
+  return new Promise((resolve5, reject) => {
     const child = spawn7("npm", ["install", "-g", spec], { stdio: "inherit" });
     child.on(
       "error",
@@ -24335,7 +24360,7 @@ function upgradeCli(version2, logger) {
     child.on("exit", (code) => {
       if (code === 0) {
         logger.info("done \u2014 `puddle --version` shows the installed version");
-        resolve4(0);
+        resolve5(0);
       } else {
         reject(new CliError("not_installed", `npm install exited with ${code ?? "a signal"}`));
       }
@@ -24458,10 +24483,10 @@ async function runRemove(cmd, logger) {
   }
 }
 async function removeCli(yes, logger) {
-  const managed = await new Promise((resolve4) => {
+  const managed = await new Promise((resolve5) => {
     const child = spawn7("npm", ["ls", "-g", "@puddle-code/cli", "--depth=0"], { stdio: "ignore" });
-    child.on("error", () => resolve4(false));
-    child.on("exit", (code) => resolve4(code === 0));
+    child.on("error", () => resolve5(false));
+    child.on("exit", (code) => resolve5(code === 0));
   });
   if (!managed) {
     throw new CliError(
@@ -24478,13 +24503,13 @@ async function removeCli(yes, logger) {
     logger.info("nothing removed");
     return 0;
   }
-  return new Promise((resolve4, reject) => {
+  return new Promise((resolve5, reject) => {
     const child = spawn7("npm", ["uninstall", "-g", "@puddle-code/cli"], { stdio: "inherit" });
     child.on("error", () => reject(new CliError("not_installed", "npm is not on PATH")));
     child.on("exit", (code) => {
       if (code === 0) {
         logger.info("removed \u2014 daemons keep running (puddle remove daemon uninstalls one)");
-        resolve4(0);
+        resolve5(0);
       } else {
         reject(new CliError("not_installed", `npm uninstall exited with ${code ?? "a signal"}`));
       }
@@ -24673,7 +24698,7 @@ async function openTarget(host) {
   };
 }
 function runUntilInterrupted(stop, farewell) {
-  return new Promise((resolve4) => {
+  return new Promise((resolve5) => {
     let stopping = false;
     process.on("SIGINT", () => {
       if (stopping) process.exit(130);
@@ -24681,10 +24706,10 @@ function runUntilInterrupted(stop, farewell) {
       process.stderr.write(`
 ${farewell}
 `);
-      void stop().then(resolve4);
+      void stop().then(resolve5);
     });
     process.on("SIGTERM", () => {
-      void stop().then(resolve4);
+      void stop().then(resolve5);
     });
   });
 }

package/dist/install.sh

@@ -76,6 +76,19 @@ if [ "$OS" = linux ] && [ -f /etc/alpine-release ]; then
 fi
 
 HOME_DIR="${PUDDLE_HOME:-$HOME/.puddle}"
+while [ "$HOME_DIR" != / ] && [ "${HOME_DIR%/}" != "$HOME_DIR" ]; do HOME_DIR=${HOME_DIR%/}; done
+# New homes must be private even with umask 022. Existing releases used 0755;
+# tighten only an owned directory that other users could not have modified.
+# Keep this migration aligned with shared/node's initialisePrivateHome.
+[ ! -L "$HOME_DIR" ] || die "Puddle home must not be a symlink: $HOME_DIR"
+(umask 077; mkdir -p "$HOME_DIR")
+case "$OS" in
+  darwin) DIR_OWNER=$(stat -f '%u' "$HOME_DIR"); DIR_MODE=$(stat -f '%Lp' "$HOME_DIR") ;;
+  linux) DIR_OWNER=$(stat -c '%u' "$HOME_DIR"); DIR_MODE=$(stat -c '%a' "$HOME_DIR") ;;
+esac
+[ "$DIR_OWNER" = "$(id -u)" ] || die "Puddle home must be owned by the current user: $HOME_DIR"
+[ "$((0$DIR_MODE & 0022))" -eq 0 ] || die "Puddle home must not be writable by other users: $HOME_DIR"
+chmod 700 "$HOME_DIR"
 BIN_DIR="$HOME_DIR/bin"
 CACHE_DIR="$HOME_DIR/cache"
 mkdir -p "$BIN_DIR/versions" "$CACHE_DIR" "$HOME_DIR/logs"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@puddle-code/cli",
-  "version": "0.2.0",
+  "version": "0.2.1",
   "description": "puddle — self-hosted orchestrator for CLI coding agents: serves the cockpit UI and connects it to local or SSH hosts.",
   "license": "MIT",
   "homepage": "https://github.com/PerceptronV/puddle-code#readme",