Garry Tan 8697ffa09b fix(security): restrict session file permissions to owner-only ...

Design session files written to /tmp with default umask (0644) were
world-readable on shared systems. Sessions contain design prompts and
feedback history.

Set mode 0o600 (owner read/write only) on both create and update paths.

Closes #859

Co-Authored-By: Gus <garagon@users.noreply.github.com>

2026-04-13 09:34:27 -07:00

..

src

fix(security): restrict session file permissions to owner-only

2026-04-13 09:34:27 -07:00

test

fix: community security wave — 8 PRs, 4 contributors (v0.15.13.0) (#847)

2026-04-06 00:47:04 -07:00

prototype.ts

feat: design binary — real UI mockup generation for gstack skills (v0.13.0.0) (#551)

2026-03-27 20:32:59 -06:00