pi-free 2.2.0 → 2.2.1

package/CHANGELOG.md

@@ -7,6 +7,21 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [2.2.1] - 2026-06-19
+
+### Security
+
+- `~/.pi/free.json` (which contains API keys for paid providers) is now
+  written and re-tightened with mode `0600` (owner read/write only) on
+  every startup and on every write. Previously the file was world-readable
+  on Unix. No-op on Windows. Closes DRYKISS finding.
+
+### Fixed
+
+- Wrap quota monitoring and telemetry event handlers in `try/catch` so a
+  failed status-bar update or telemetry write can never break the agent
+  loop (DRYKISS resilience findings).
+
 ## [2.2.0] - 2026-06-19
 
 ### Added

package/config.ts

@@ -9,7 +9,7 @@
  * (e.g. after toggle-{provider}) are visible immediately.
  */
 
-import { existsSync, readFileSync, writeFileSync } from "node:fs";
+import { chmodSync, existsSync, readFileSync, writeFileSync } from "node:fs";
 import { join } from "node:path";
 export {
 	PROVIDER_BAI,
@@ -130,6 +130,9 @@ function ensureConfigFile(): void {
 				);
 				return;
 			}
+			// Always tighten permissions on startup, even if contents are
+			// unchanged — older installs may have a world-readable file.
+			restrictConfigFilePermissions();
 			// Merge with template to add any missing keys, preserving existing values
 			const merged = { ...CONFIG_TEMPLATE, ...existing };
 			if (JSON.stringify(merged) !== JSON.stringify(existing)) {
@@ -138,6 +141,7 @@ function ensureConfigFile(): void {
 					`${JSON.stringify(merged, null, 2)}\n`,
 					"utf8",
 				);
+				restrictConfigFilePermissions();
 			}
 		} else {
 			writeFileSync(
@@ -145,6 +149,7 @@ function ensureConfigFile(): void {
 				`${JSON.stringify(CONFIG_TEMPLATE, null, 2)}\n`,
 				"utf8",
 			);
+			restrictConfigFilePermissions();
 		}
 	} catch (err) {
 		_logger.warn("Could not create config file", {
@@ -154,6 +159,24 @@ function ensureConfigFile(): void {
 	}
 }
 
+/**
+ * Restrict `~/.pi/free.json` to owner read/write (0600). The file may
+ * contain API keys for paid providers, so it must never be world-readable.
+ * Best-effort: if chmod is not supported on the platform/filesystem,
+ * log a warning and continue (the keys are still safe inside the user's
+ * home directory).
+ */
+function restrictConfigFilePermissions(): void {
+	try {
+		chmodSync(CONFIG_PATH, 0o600);
+	} catch (err) {
+		_logger.warn("Could not restrict config file permissions to 0600", {
+			path: CONFIG_PATH,
+			error: err instanceof Error ? err.message : String(err),
+		});
+	}
+}
+
 export function loadConfigFile(): PiFreeConfig {
 	try {
 		return JSON.parse(

package/index.ts

@@ -222,29 +222,42 @@ function setupQuotaMonitoring(pi: ExtensionAPI) {
 	(pi as any).on(
 		"after_provider_response",
 		(event: { status: number; headers: Record<string, string> }, ctx: any) => {
-			const providerId = ctx.model?.provider;
-			if (!providerId) return;
+			try {
+				const providerId = ctx.model?.provider;
+				if (!providerId) return;
 
-			processQuotaResponse(providerId, event.headers);
+				processQuotaResponse(providerId, event.headers);
 
-			// Update status bar with quota for the active provider
-			const status = formatQuotaStatus(providerId);
-			if (status) {
-				ctx.ui.setStatus("quota", status);
+				// Update status bar with quota for the active provider
+				const status = formatQuotaStatus(providerId);
+				if (status) {
+					ctx.ui.setStatus("quota", status);
+				}
+			} catch (err) {
+				// Quota monitoring is best-effort — never break the agent flow
+				_logger.warn("quota monitoring failed", {
+					error: err instanceof Error ? err.message : String(err),
+				});
 			}
 		},
 	);
 
 	// Clear quota status when switching away from a provider
 	pi.on("model_select", (_event, ctx) => {
-		const providerId = ctx.model?.provider;
-		if (!providerId) {
-			ctx.ui.setStatus("quota", undefined);
-			return;
+		try {
+			const providerId = ctx.model?.provider;
+			if (!providerId) {
+				ctx.ui.setStatus("quota", undefined);
+				return;
+			}
+			// Show cached quota on provider switch (if still fresh)
+			const status = formatQuotaStatus(providerId);
+			ctx.ui.setStatus("quota", status);
+		} catch (err) {
+			_logger.warn("quota status update failed", {
+				error: err instanceof Error ? err.message : String(err),
+			});
 		}
-		// Show cached quota on provider switch (if still fresh)
-		const status = formatQuotaStatus(providerId);
-		ctx.ui.setStatus("quota", status);
 	});
 }
 
@@ -261,7 +274,14 @@ function setupTelemetry(pi: ExtensionAPI) {
 		const provider = ctx.model?.provider;
 		const model = ctx.model?.id;
 		if (provider && model) {
-			startModelCall(provider, model);
+			try {
+				startModelCall(provider, model);
+			} catch (err) {
+				// Telemetry is best-effort — never break the agent flow
+				_logger.warn("telemetry startModelCall failed", {
+					error: err instanceof Error ? err.message : String(err),
+				});
+			}
 		}
 	});
 
@@ -300,17 +320,24 @@ function setupTelemetry(pi: ExtensionAPI) {
 		const cost = usage?.cost?.total ?? 0;
 		const isError = msg.stopReason === "error" || !!msg.errorMessage;
 
-		await recordModelCall(
-			provider,
-			model,
-			{ input: inputTokens, output: outputTokens, totalTokens },
-			cost,
-			{
-				success: !isError,
-				stopReason: msg.stopReason,
-				errorMessage: msg.errorMessage,
-			},
-		);
+		try {
+			await recordModelCall(
+				provider,
+				model,
+				{ input: inputTokens, output: outputTokens, totalTokens },
+				cost,
+				{
+					success: !isError,
+					stopReason: msg.stopReason,
+					errorMessage: msg.errorMessage,
+				},
+			);
+		} catch (err) {
+			// Telemetry is best-effort — never break the agent flow
+			_logger.warn("telemetry recordModelCall failed", {
+				error: err instanceof Error ? err.message : String(err),
+			});
+		}
 	});
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "pi-free",
-	"version": "2.2.0",
+	"version": "2.2.1",
 	"type": "module",
 	"description": "AI model providers for Pi with free model filtering and dynamic model fetching",
 	"keywords": [