witbitz-code 1.6.5__tar.gz → 1.6.7__tar.gz

{witbitz_code-1.6.5/src/witbitz_code.egg-info → witbitz_code-1.6.7}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: witbitz-code
-Version: 1.6.5
+Version: 1.6.7
 Summary: Reach OpenCode on this computer from the Witbitz Spaces Code section, through an end-to-end sealed relay.
 Author: Witbitz
 License-Expression: MIT
@@ -50,7 +50,7 @@ witbitz-code setup
 ```
 
 `setup` walks five steps and skips whatever is already done: it installs OpenCode if it is missing (it asks first), pairs
-this computer (scan the QR code in Spaces → Settings → Back up & recovery → Add a device), which gives the computer **its
+this computer (scan the QR code in Spaces → Settings → Privacy & security → Back up & recovery → Add a device — scan its code), which gives the computer **its
 own keys from your Spaces account**, offers to install the tools the agent uses for audio, video, PDFs and scans (ffmpeg,
 Poppler, Tesseract, … — with winget, Homebrew or one `sudo apt-get` line; it shows what it will run and asks once), then
 starts `serve` in the window. Then open Code in Spaces. Leave it running (Ctrl-C

{witbitz_code-1.6.5 → witbitz_code-1.6.7}/README.md

@@ -24,7 +24,7 @@ witbitz-code setup
 ```
 
 `setup` walks five steps and skips whatever is already done: it installs OpenCode if it is missing (it asks first), pairs
-this computer (scan the QR code in Spaces → Settings → Back up & recovery → Add a device), which gives the computer **its
+this computer (scan the QR code in Spaces → Settings → Privacy & security → Back up & recovery → Add a device — scan its code), which gives the computer **its
 own keys from your Spaces account**, offers to install the tools the agent uses for audio, video, PDFs and scans (ffmpeg,
 Poppler, Tesseract, … — with winget, Homebrew or one `sudo apt-get` line; it shows what it will run and asks once), then
 starts `serve` in the window. Then open Code in Spaces. Leave it running (Ctrl-C

{witbitz_code-1.6.5 → witbitz_code-1.6.7}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "witbitz-code"
-version = "1.6.5"
+version = "1.6.7"
 description = "Reach OpenCode on this computer from the Witbitz Spaces Code section, through an end-to-end sealed relay."
 readme = "README.md"
 requires-python = ">=3.10"

{witbitz_code-1.6.5 → witbitz_code-1.6.7}/src/witbitz_code/__init__.py

@@ -4,4 +4,4 @@ The Python implementation of tools/witbitz-code.mjs (docs/opencode-relay.md phas
 vectors and cross-implementation tests.
 """
 
-__version__ = "1.6.5"
+__version__ = "1.6.7"

{witbitz_code-1.6.5 → witbitz_code-1.6.7}/src/witbitz_code/attachments.py

@@ -15,12 +15,14 @@ import hashlib
 import os
 import re
 import shutil
+import sys
 import time
 from decimal import ROUND_HALF_UP, Decimal
 from pathlib import Path
 from typing import Any
 
 from . import _js
+from . import pairings as pp
 
 NOTE_HEAD = "The user attached files. They are saved on this computer — open them with the read tool."
 ATTACHMENT_ROUTE = "/witbitz/attachment"
@@ -178,8 +180,9 @@ def stage_message_body(body: Any, *, session_id: Any, root: Path, max_file_bytes
     d = Path(root) / session_id
     if Path(root).is_symlink() or d.is_symlink():
         return {"error": {"status": 400, "message": "the attachments folder is a link — refusing to write through it"}}
-    d.mkdir(parents=True, exist_ok=True, mode=0o700)
-    os.chmod(d, 0o700)
+    pp.private_mkdir(d)
+    if sys.platform != "win32":
+        os.chmod(d, 0o700)
     used = _folder_bytes(d)
     total = _root_bytes(root)
     entries: list[dict] = []

{witbitz_code-1.6.5 → witbitz_code-1.6.7}/src/witbitz_code/cli.py

@@ -40,7 +40,7 @@ HELP = f"""witbitz-code {__version__} — reach OpenCode on this computer from t
                                the same in a page in your browser: status, pair / unpair / pair again, start and stop,
                                start when I log in (Windows and WSL); it serves while it runs. --background (Windows):
                                no window — the page's Quit stops it
-  pair [--name <name>]         show a QR code; scan it in Spaces (Settings → Back up & recovery → Add a device)
+  pair [--name <name>]         show a QR code; scan it in Spaces (Settings → Privacy & security → Add a device)
   serve [--port <n>] [--no-opencode]
                                start OpenCode on 127.0.0.1 with your account's keys, and the connector
   status                       list this computer's pairings and their coding keys

{witbitz_code-1.6.5 → witbitz_code-1.6.7}/src/witbitz_code/keys.py

@@ -119,7 +119,7 @@ def has_trustedrouter(env: dict | None = None) -> bool:
 
 def save_trustedrouter_key(key: str) -> Path:
     p = auth_path()
-    p.parent.mkdir(parents=True, exist_ok=True, mode=0o700)
+    pp.private_mkdir(p.parent)
     text = p.read_text(encoding="utf-8") if p.exists() else ""
     pp.write_private(p, with_auth_key(text, "trustedrouter", key))
     return p

{witbitz_code-1.6.5 → witbitz_code-1.6.7}/src/witbitz_code/link.py

@@ -1,7 +1,7 @@
 """Make this computer an ADDED DEVICE of a Spaces account by device-link — tools/rc-link.mjs.
 
-It shows a QR carrying an ephemeral PUBLIC key (no secret); a signed-in phone or desktop scans it (Settings → Back up &
-recovery → Add a device) and seals the account to that key; this process opens the reply. The reply is relayed
+It shows a QR carrying an ephemeral PUBLIC key (no secret); a signed-in phone or desktop scans it (Settings → Privacy & security →
+Add a device) and seals the account to that key; this process opens the reply. The reply is relayed
 content-blind through /api/link between two public keys the server cannot combine.
 
 Unlike rc-link.mjs this never writes the account to disk: the pairing flow needs it only long enough to publish the

{witbitz_code-1.6.5 → witbitz_code-1.6.7}/src/witbitz_code/mkdir.py

@@ -47,7 +47,7 @@ def mkdir_in(*, root: object, rel: object, name: object) -> tuple[int, str]:
         return _error(403, "that lies outside the root")
     target = P.join(real_parent, str(name))
     try:
-        os.mkdir(target, 0o700)
+        os.mkdir(target) if win else os.mkdir(target, 0o700)  # Windows: inherit — 0o700 makes an owner-only access list (pairings.private_mkdir)
     except FileExistsError:
         return _error(409, "already there")
     except OSError as e:

{witbitz_code-1.6.5 → witbitz_code-1.6.7}/src/witbitz_code/pair.py

@@ -112,7 +112,7 @@ async def _publish_entry(call: net.ApiCall, e: dict, out: Callable, err: Callabl
 async def _link_by_qr(link_fn: LinkFn | None, out: Callable, err: Callable) -> dict | None:
     """The QR ritual: show the Add-a-device QR and wait for a signed-in device to seal the account to this computer. The
     account stays in memory; an expired or failed scan changes nothing."""
-    out("witbitz-code: on your phone open Spaces → Settings → Back up & recovery → Add a device, and scan the QR below "
+    out("witbitz-code: on your phone open Spaces → Settings → Privacy & security → Add a device, and scan the QR below "
         "with the account to pair.\n")
     account = await (link_fn() if link_fn else link.link_node())
     if not account:

{witbitz_code-1.6.5 → witbitz_code-1.6.7}/src/witbitz_code/pairings.py

@@ -165,10 +165,22 @@ def read_pairings(path: Path | None = None) -> dict:
         return norm_pairings(None)
 
 
+def private_mkdir(path: Path, mode: int = 0o700, *, parents: bool = True) -> None:
+    """A folder only this user reads — 0700 off Windows. On Windows NO mode: Python 3.12.4+ turns 0o700 into an access list of
+    SYSTEM, Administrators and the folder's OWNER, and a folder made from an Administrator window is owned by Administrators —
+    the person's own non-admin windows could then not open it (the owner's second desktop, 2026-10-09: uninstall died
+    "[WinError 5] Access is denied: …\\.witbitz\\code\\pairings.json"). The folder inherits the user profile's access instead,
+    which is already the person's alone."""
+    if sys.platform == "win32":
+        path.mkdir(parents=parents, exist_ok=True)
+    else:
+        path.mkdir(parents=parents, exist_ok=True, mode=mode)
+
+
 def write_private(path: Path, text: str, dir_mode: int = 0o700) -> None:
     """Write a 0600 file atomically: the secret is never readable by others, not even for the moment between write and
     chmod, and a crash never leaves half a file."""
-    path.parent.mkdir(parents=True, exist_ok=True, mode=dir_mode)
+    private_mkdir(path.parent, dir_mode)
     fd, tmp = tempfile.mkstemp(dir=path.parent, prefix=f".{path.name}.")
     try:
         with os.fdopen(fd, "w", encoding="utf-8", newline="") as f:

{witbitz_code-1.6.5 → witbitz_code-1.6.7}/src/witbitz_code/ui_static/index.html

@@ -33,7 +33,7 @@
   <section class="card" id="pairCard" hidden>
     <h2>Pair with your Spaces account</h2>
     <ol class="steps">
-      <li>On your phone, open <b>Spaces → Settings → Back up &amp; recovery → Add a device</b>.</li>
+      <li>On your phone, open <b>Spaces → Settings → Privacy &amp; security → Add a device</b>.</li>
       <li>Scan this code with the account that should reach this computer.</li>
     </ol>
     <div class="qr-wrap"><img id="qr" alt="Pairing code — scan it in Spaces" width="260" height="260"></div>

{witbitz_code-1.6.5 → witbitz_code-1.6.7}/src/witbitz_code/wizard.py

@@ -173,7 +173,7 @@ async def run_setup(d: Deps) -> dict:
         d.say(f"   {named(gone)} was removed from your Witbitz account, so this computer pairs again.")
         mine = []
     if not mine:
-        d.say("   On your phone, open Spaces → Settings → Back up & recovery → Add a device, and scan the code below.\n")
+        d.say("   On your phone, open Spaces → Settings → Privacy & security → Add a device, and scan the code below.\n")
         await d.pair(port)
         everything = d.all_pairings()
         mine = on(everything, port)

{witbitz_code-1.6.5 → witbitz_code-1.6.7/src/witbitz_code.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: witbitz-code
-Version: 1.6.5
+Version: 1.6.7
 Summary: Reach OpenCode on this computer from the Witbitz Spaces Code section, through an end-to-end sealed relay.
 Author: Witbitz
 License-Expression: MIT
@@ -50,7 +50,7 @@ witbitz-code setup
 ```
 
 `setup` walks five steps and skips whatever is already done: it installs OpenCode if it is missing (it asks first), pairs
-this computer (scan the QR code in Spaces → Settings → Back up & recovery → Add a device), which gives the computer **its
+this computer (scan the QR code in Spaces → Settings → Privacy & security → Back up & recovery → Add a device — scan its code), which gives the computer **its
 own keys from your Spaces account**, offers to install the tools the agent uses for audio, video, PDFs and scans (ffmpeg,
 Poppler, Tesseract, … — with winget, Homebrew or one `sudo apt-get` line; it shows what it will run and asks once), then
 starts `serve` in the window. Then open Code in Spaces. Leave it running (Ctrl-C

{witbitz_code-1.6.5 → witbitz_code-1.6.7}/tests/test_windows_files.py

@@ -26,3 +26,21 @@ def test_the_keys_and_payers_files_are_written_where_python_has_no_fchmod(monkey
 def test_no_module_calls_fchmod():
     hits = [f.name for f in SRC.glob("*.py") if "os.fchmod(" in f.read_text(encoding="utf-8")]
     assert hits == [], f"os.fchmod does not exist on Windows Python before 3.13 — use pairings.write_private: {hits}"
+
+
+def test_on_windows_private_folders_inherit_instead_of_an_owner_only_access_list(monkeypatch, tmp_path):
+    """Python 3.12.4+ makes mkdir(mode=0o700) an access list of SYSTEM, Administrators and the OWNER; made from an
+    Administrator window the owner is Administrators and the person's own windows are locked out (the owner's second
+    desktop, 2026-10-09: "[WinError 5] Access is denied: …\\.witbitz\\code\\pairings.json")."""
+    import pathlib
+    from witbitz_code import pairings
+    seen = []
+    real = pathlib.Path.mkdir
+    monkeypatch.setattr(pathlib.Path, "mkdir", lambda self, *a, **k: seen.append(k.get("mode", a[0] if a else None)) or real(self, parents=True, exist_ok=True))
+    monkeypatch.setattr(pairings.sys, "platform", "win32")
+    pairings.write_private(tmp_path / "w" / "pairings.json", "{}")
+    assert seen and all(m is None for m in seen), "no mode on Windows: the folder inherits the profile's access"
+    seen.clear()
+    monkeypatch.setattr(pairings.sys, "platform", "linux")
+    pairings.write_private(tmp_path / "l" / "pairings.json", "{}")
+    assert seen == [0o700], "0700 everywhere else, as before"

{witbitz_code-1.6.5 → witbitz_code-1.6.7}/tests/test_wslstart.py

@@ -53,7 +53,8 @@ def test_the_windows_login_start_runs_pythonw_in_the_background_when_it_is_there
     assert launcher_only["args"] == "--no-browser" and launcher_only["target"].endswith("Witbitz Code.cmd'")
 
 
-def test_wsl_runs_headless_held_by_a_hidden_wsl_exe():
+def test_wsl_runs_headless_held_by_a_hidden_wsl_exe(monkeypatch):
+    monkeypatch.setenv("WSL_DISTRO_NAME", "UbuntuD")  # the runner is plain Linux: the entry is named by the distro
     from witbitz_code import wslstart as ws
     seen = []
     ok, why = ws.launch_background(ps=lambda script: seen.append(script) or (0, "ok"), which=lambda n: "/home/a/.local/bin/witbitz-code",