Saeed Al Mansouri 1dcb7dce71 fix(zoom): restrict token and config file permissions to owner-only ...

The Zoom harness was writing OAuth tokens (tokens.json) and app
credentials (config.json) to ~/.cli-anything-zoom/ without setting
restrictive file permissions, leaving sensitive secrets world-readable
by default.

This adds owner-only permissions (0o600 for files, 0o700 for the
config directory) after every write, matching the pattern already used
by the AnyGen harness. On Windows, where os.chmod only controls the
read-only flag, we also call icacls to strip inherited ACLs and grant
full control exclusively to the current user.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-03-25 15:40:55 +04:00

..

agent-harness

fix(zoom): restrict token and config file permissions to owner-only

2026-03-25 15:40:55 +04:00