fix(launchd): set restrictive umask in gateway plist

This commit is contained in:
liuxiaopai-ai
2026-03-03 02:12:08 +08:00
committed by Peter Steinberger
parent 740bb77c8c
commit c9558cdcd7
3 changed files with 5 additions and 3 deletions

View File

@@ -4,6 +4,7 @@ import fs from "node:fs/promises";
// intentional gateway restarts. Keep it low so CLI restarts and forced
// reinstalls do not stall for a full minute.
export const LAUNCH_AGENT_THROTTLE_INTERVAL_SECONDS = 1;
// launchd stores plist integer values in decimal; 0o077 renders as 63 (owner-only files).
export const LAUNCH_AGENT_UMASK_DECIMAL = 0o077;
const plistEscape = (value: string): string =>