pi-harness-whatsapp 0.1.1 → 0.1.2

package/CHANGELOG.md

@@ -1,5 +1,9 @@
 # Changelog
 
+## 0.1.2 — 2026-10-16
+
+- **Fixed file permissions:** the data folder and the WhatsApp login in it were readable by other users on the same machine. Every folder the extension creates is now private (only your user can open it), and existing installs are fixed the next time Pi starts.
+
 ## 0.1.1 — 2026-10-15
 
 - **Voice is optional, and off by default.** `/whatsapp` → Voice → **Voice notes** has two ticks: understand voice notes (speech-to-text, 1.0 GB) and reply with voice notes (text-to-speech, 0.6 GB), plus "Delete all speech files". Leaving the menu asks before deleting the files of a part you unticked ("You set speech-to-text for removal. 828 MB will be freed."; No puts the tick back) and offers to download a part you ticked (now, or when first needed). Nothing is downloaded while voice is off.

package/README.md

@@ -218,7 +218,7 @@ Everything lives in `~/.pi/agent/pi-harness-whatsapp/`:
 | `setup.json` | Only if the installer recorded it: programs installed just for the extension (see [Uninstall](#what-was-installed-for-it)) |
 | `log/pi-harness-whatsapp.log` | Log: connection events and errors, no message text (unless debug logging is on). Rotated at 5 MB into `.log.1`. |
 
-If you set `PI_HARNESS_WHATSAPP_DIR`, everything is in that folder instead. The extension writes nothing anywhere else, apart from Pi's own files (your sessions and its package list).
+The folder is private: only your user can open it. If you set `PI_HARNESS_WHATSAPP_DIR`, everything is in that folder instead. The extension writes nothing anywhere else, apart from Pi's own files (your sessions and its package list).
 
 ## Uninstall
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pi-harness-whatsapp",
-  "version": "0.1.1",
+  "version": "0.1.2",
   "description": "Talk to Pi from WhatsApp: images, files and optional voice notes in and out, automatic replies, group chats, poll menus to control Pi.",
   "type": "module",
   "license": "MIT",

package/src/controller.ts

@@ -20,7 +20,7 @@ import { cleanInbox, Media } from "./media.ts";
 import type { SpeechInfo } from "./panel-model.ts";
 import { getLanguage } from "./languages.ts";
 import { type ConnectionCommand, type PanelHost, showPanel } from "./panel.ts";
-import { dataDir, paths, removeDataDir } from "./paths.ts";
+import { dataDir, makePrivate, paths, removeDataDir } from "./paths.ts";
 import { isRemoved, markRemoved } from "./removed.ts";
 import { detectService } from "./commands/power.ts";
 import {
@@ -130,6 +130,9 @@ export class Controller implements PanelHost, CommandEnv {
 			ctx.ui.setStatus(STATUS_KEY, REMOVED_STATUS);
 			return;
 		}
+		// Installs from before 0.1.2 left the data folder (and the login in it) readable by other users.
+		makePrivate(dataDir());
+		makePrivate(paths.auth(), true);
 		let settings = this.settings.load();
 		this.recents.load();
 		cleanInbox(paths.inbox());

package/src/log.ts

@@ -39,7 +39,7 @@ function serialize(value: unknown): string {
 function write(level: Level, scope: string, parts: unknown[]): void {
 	if (LEVELS[level] < LEVELS[minLevel] || isRemoved()) return;
 	try {
-		mkdirSync(paths.logs(), { recursive: true });
+		mkdirSync(paths.logs(), { recursive: true, mode: 0o700 });
 		const target = file();
 		rotateIfNeeded(target);
 		const line = `${new Date().toISOString()} ${level.toUpperCase().padEnd(5)} [${scope}] ${parts.map(serialize).join(" ")}\n`;

package/src/media.ts

@@ -171,7 +171,7 @@ export class Media implements MediaHandler {
 		try {
 			const data = await this.deps.connection.download(message.raw);
 			if (data.length > MAX_FILE_BYTES) return { content: `${header}${quoted} (sent ${what} too large to save)`, voice: false };
-			mkdirSync(this.deps.inboxDir, { recursive: true });
+			mkdirSync(this.deps.inboxDir, { recursive: true, mode: 0o700 });
 			const name = safeFileName(message.fileName, EXT_BY_MIME[message.mimeType ?? ""] ?? (message.kind === "video" ? ".mp4" : ".bin"));
 			const path = join(this.deps.inboxDir, name);
 			writeFileSync(path, data, { mode: 0o600 });

package/src/paths.ts

@@ -1,4 +1,4 @@
-import { existsSync, readdirSync, rmdirSync, rmSync } from "node:fs";
+import { chmodSync, existsSync, readdirSync, rmdirSync, rmSync } from "node:fs";
 import { homedir } from "node:os";
 import { join } from "node:path";
 
@@ -12,6 +12,26 @@ export function dataDir(): string {
 	return join(agentDir, "pi-harness-whatsapp");
 }
 
+/** Folders the extension creates: only this user may open them (the data folder holds the WhatsApp login). */
+export const PRIVATE_DIR_MODE = 0o700;
+
+/**
+ * Makes a folder private (owner only), and with `files` also the files directly
+ * in it. Fixes installs from before 0.1.2, whose login was readable by other users.
+ */
+export function makePrivate(dir: string, files = false): void {
+	try {
+		if (!existsSync(dir)) return;
+		chmodSync(dir, PRIVATE_DIR_MODE);
+		if (!files) return;
+		for (const entry of readdirSync(dir, { withFileTypes: true })) {
+			if (entry.isFile()) chmodSync(join(dir, entry.name), 0o600);
+		}
+	} catch {
+		// Not every file system has Unix permissions (e.g. Windows); nothing to fix there.
+	}
+}
+
 export const paths = {
 	config: () => join(dataDir(), "config.json"),
 	auth: () => join(dataDir(), "auth"),

package/src/settings.ts

@@ -271,7 +271,7 @@ export class SettingsStore {
 
 	private save(): void {
 		if (isRemoved()) return;
-		mkdirSync(dirname(this.filePath), { recursive: true });
+		mkdirSync(dirname(this.filePath), { recursive: true, mode: 0o700 });
 		const temporary = `${this.filePath}.${process.pid}.tmp`;
 		writeFileSync(temporary, `${JSON.stringify(this.settings, null, 2)}\n`, { mode: 0o600 });
 		renameSync(temporary, this.filePath);

package/src/voice/models.ts

@@ -202,7 +202,7 @@ export class ModelStore {
 
 	private async install(spec: ModelSpec): Promise<string> {
 		if (!spec.hf) throw new Error(`${spec.name} can't be downloaded`);
-		mkdirSync(this.root, { recursive: true });
+		mkdirSync(this.root, { recursive: true, mode: 0o700 });
 		const staging = this.staging(spec);
 		log.info(`downloading ${spec.hf.repo}@${spec.hf.revision.slice(0, 8)}`);
 		this.onProgress?.(spec, 0);
@@ -244,7 +244,7 @@ export class ModelStore {
 		if (!runtimeSupported(os, cpu)) {
 			throw new Error(`OpenVINO has no build for ${os}/${cpu}, so voice notes can't work on this machine`);
 		}
-		mkdirSync(this.root, { recursive: true });
+		mkdirSync(this.root, { recursive: true, mode: 0o700 });
 		const staging = join(this.root, `.${spec.name}.downloading`);
 		this.onProgress?.(spec, 0);
 		try {

package/src/wa/connection.ts

@@ -4,8 +4,9 @@
  * talks to Baileys' socket directly, so a Baileys upgrade stays contained.
  */
 
-import { existsSync, readFileSync, rmSync } from "node:fs";
-import { join } from "node:path";
+import { existsSync, mkdirSync, readFileSync, rmSync } from "node:fs";
+import { dirname, join } from "node:path";
+import { makePrivate } from "../paths.ts";
 import makeWASocket, {
 	type AnyMessageContent,
 	Browsers,
@@ -298,6 +299,10 @@ export class WhatsAppConnection {
 		const generation = ++this.generation;
 		this.setState({ kind: "connecting", attempt: this.attempt });
 		try {
+			// The login lets anyone use the account: only this user may open its folder.
+			mkdirSync(this.authDir, { recursive: true, mode: 0o700 });
+			makePrivate(dirname(this.authDir));
+			makePrivate(this.authDir, true);
 			const { state, saveCreds } = await useMultiFileAuthState(this.authDir);
 			if (generation !== this.generation || !this.wantRunning) return;
 			this.version ??= await this.fetchVersion();

package/src/wa/lock.ts

@@ -74,7 +74,7 @@ export class ConnectionLock {
 
 	/** Takes the lock unless another live process on this machine holds it. */
 	acquire(): LockResult {
-		mkdirSync(dirname(this.file), { recursive: true });
+		mkdirSync(dirname(this.file), { recursive: true, mode: 0o700 });
 		const me: LockHolder = { pid: this.pid, host: hostname(), since: Date.now() };
 		for (let attempt = 0; attempt < 2; attempt++) {
 			try {

package/src/wa/recents.ts

@@ -99,7 +99,7 @@ export class RecentsStore {
 		if (!this.dirty || isRemoved()) return;
 		this.dirty = false;
 		try {
-			mkdirSync(dirname(this.file), { recursive: true });
+			mkdirSync(dirname(this.file), { recursive: true, mode: 0o700 });
 			const temporary = `${this.file}.${process.pid}.tmp`;
 			const data = { chats: this.list().slice(0, MAX_CHATS), lids: [...this.lidToPhone] };
 			writeFileSync(temporary, JSON.stringify(data), { mode: 0o600 });