persnally 2.0.1 → 2.0.2

package/build/src/config.js

@@ -22,7 +22,9 @@ export function saveConfig(updates) {
     const file = configFile();
     mkdirSync(dirname(file), { recursive: true });
     const merged = { ...loadConfig(), ...updates };
-    writeFileSync(file, JSON.stringify(merged, null, 2) + "\n");
+    // mode on create closes the world-readable window before chmod; chmod also
+    // corrects perms on a pre-existing file. The config holds the API key.
+    writeFileSync(file, JSON.stringify(merged, null, 2) + "\n", { mode: 0o600 });
     chmodSync(file, 0o600);
 }
 /** Env wins over config; sets process.env so the Anthropic SDK picks it up. */

package/build/src/connect.js

@@ -37,9 +37,17 @@ export function connectClient(client) {
     const { file, installed } = configPathFor(client);
     if (!installed)
         return null;
-    const cfg = existsSync(file)
-        ? JSON.parse(readFileSync(file, "utf-8"))
-        : {};
+    let cfg = {};
+    if (existsSync(file)) {
+        try {
+            cfg = JSON.parse(readFileSync(file, "utf-8"));
+        }
+        catch {
+            // Never overwrite a config we couldn't parse — that would wipe the user's
+            // other MCP servers. Surface it instead.
+            throw new Error(`${file} is not valid JSON — fix it, then run \`persnallyd connect ${client}\` again`);
+        }
+    }
     const servers = (cfg.mcpServers ??= {});
     servers.persnally = { command: "node", args: [mcpServerPath()] };
     mkdirSync(dirname(file), { recursive: true });
@@ -47,5 +55,14 @@ export function connectClient(client) {
     return file;
 }
 export function connectAll() {
-    return CLIENTS.map((client) => ({ client, file: connectClient(client) }));
+    // One client with a malformed existing config must not abort onboarding for
+    // the others; connectClient throws rather than clobber a file it can't parse.
+    return CLIENTS.map((client) => {
+        try {
+            return { client, file: connectClient(client) };
+        }
+        catch {
+            return { client, file: null };
+        }
+    });
 }

package/build/src/lifecycle.js

@@ -79,6 +79,9 @@ export function autostartInstalled() {
 export function installAutostart(cliPath, port) {
     if (process.platform !== "darwin")
         throw new Error("autostart is macOS-only for now (launchd)");
+    // Paths carry the username/home dir; escape so an "&" or "<" in a path can't
+    // produce a malformed plist that silently breaks autostart.
+    const x = xmlEscape;
     const plist = `<?xml version="1.0" encoding="UTF-8"?>
 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
 <plist version="1.0">
@@ -86,16 +89,16 @@ export function installAutostart(cliPath, port) {
   <key>Label</key><string>${PLIST_LABEL}</string>
   <key>ProgramArguments</key>
   <array>
-    <string>${process.execPath}</string>
-    <string>${cliPath}</string>
+    <string>${x(process.execPath)}</string>
+    <string>${x(cliPath)}</string>
     <string>serve</string>
     <string>--port</string>
-    <string>${port}</string>
+    <string>${x(String(port))}</string>
   </array>
   <key>RunAtLoad</key><true/>
   <key>KeepAlive</key><true/>
-  <key>StandardOutPath</key><string>${LOG_FILE}</string>
-  <key>StandardErrorPath</key><string>${LOG_FILE}</string>
+  <key>StandardOutPath</key><string>${x(LOG_FILE)}</string>
+  <key>StandardErrorPath</key><string>${x(LOG_FILE)}</string>
 </dict>
 </plist>
 `;
@@ -117,3 +120,6 @@ export function removeAutostart() {
 function sleep(ms) {
     return new Promise((r) => setTimeout(r, ms));
 }
+function xmlEscape(s) {
+    return s.replace(/[&<>"']/g, (c) => ({ "&": "&amp;", "<": "&lt;", ">": "&gt;", '"': "&quot;", "'": "&apos;" }[c]));
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "persnally",
-  "version": "2.0.1",
+  "version": "2.0.2",
   "license": "FSL-1.1-MIT",
   "description": "The context engine for you — local-first, across every AI. So every AI finally knows you.",
   "type": "module",