@synth1s/cloak 2.0.2 → 2.1.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@synth1s/cloak",
-  "version": "2.0.2",
+  "version": "2.1.0",
   "description": "Cloak your Claude. Switch identities in seconds.",
   "type": "module",
   "bin": {

package/src/commands/create.js

@@ -1,4 +1,4 @@
-import { existsSync, copyFileSync, mkdirSync } from 'fs'
+import { existsSync, copyFileSync, mkdirSync, chmodSync } from 'fs'
 import inquirer from 'inquirer'
 import {
   claudeAuthPath,
@@ -62,13 +62,15 @@ export async function createAccount(name, options = {}) {
 
   ensureProfilesDir()
   const dir = profileDir(name)
-  mkdirSync(dir, { recursive: true })
+  mkdirSync(dir, { recursive: true, mode: 0o700 })
 
   copyFileSync(authSource, profileAuthPath(name))
+  chmodSync(profileAuthPath(name), 0o600)
 
   const settingsSource = claudeSettingsPath()
   if (existsSync(settingsSource)) {
     copyFileSync(settingsSource, profileSettingsPath(name))
+    chmodSync(profileSettingsPath(name), 0o600)
   }
 
   console.log(msg.cloakCreated(name))

package/src/lib/messages.js

@@ -137,7 +137,7 @@ export function wearingCloak(name) {
 // --- Print-env (stdout, no chalk — evaluated by shell) ---
 
 export function printEnvExport(dir) {
-  return `export CLAUDE_CONFIG_DIR=${dir}\n`
+  return `export CLAUDE_CONFIG_DIR="${dir}"\n`
 }
 
 export function printEnvEcho(name) {

package/src/lib/paths.js

@@ -40,7 +40,7 @@ export function profileSettingsPath(name) {
 
 export function ensureProfilesDir() {
   if (!existsSync(PROFILES_DIR)) {
-    mkdirSync(PROFILES_DIR, { recursive: true })
+    mkdirSync(PROFILES_DIR, { recursive: true, mode: 0o700 })
   }
 }
 

package/src/lib/setup.js

@@ -1,7 +1,10 @@
-import { readFileSync, writeFileSync, existsSync } from 'fs'
+import { readFileSync, writeFileSync, copyFileSync, existsSync } from 'fs'
 import { join } from 'path'
 import { homedir } from 'os'
 
+const MARKER = '# Added by @synth1s/cloak'
+const INIT_LINE = 'eval "$(cloak init)"'
+
 function getHome() {
   return process.env.HOME || homedir()
 }
@@ -22,16 +25,21 @@ export function isAlreadyInstalled(rcFilePath) {
 
 export function installToRcFile(rcFilePath) {
   if (!existsSync(rcFilePath)) {
-    writeFileSync(rcFilePath, 'eval "$(cloak init)"\n')
+    writeFileSync(rcFilePath, `${MARKER}\n${INIT_LINE}\n`)
     return
   }
 
-  // Read existing content and remove ALL lines containing 'cloak init'
+  // Backup before modifying
+  copyFileSync(rcFilePath, rcFilePath + '.cloak-backup')
+
+  // Remove ALL lines containing 'cloak init' or the marker
   const content = readFileSync(rcFilePath, 'utf8')
   const lines = content.split('\n')
-  const cleaned = lines.filter(line => !line.includes('cloak init'))
+  const cleaned = lines.filter(line =>
+    !line.includes('cloak init') && line !== MARKER
+  )
   const cleanedContent = cleaned.join('\n').replace(/\n{3,}/g, '\n\n')
 
-  // Write cleaned content + fresh init line
-  writeFileSync(rcFilePath, cleanedContent.trimEnd() + '\neval "$(cloak init)"\n')
+  // Append fresh marker + init line
+  writeFileSync(rcFilePath, cleanedContent.trimEnd() + `\n${MARKER}\n${INIT_LINE}\n`)
 }