sawbuck 0.1.45 → 0.1.47

package/rules.mjs

@@ -1,7 +1,7 @@
 // Find the rules you keep enforcing and never wrote down. `prepare` gathers what you typed to Claude Code, on this
 // machine, with copies and likely secrets removed. The agent proposes rules from it, each with quotes. `check` proves
 // every quote is really yours: a rule with fewer than two real quotes is dropped. Nothing is added to any file here.
-import { readFileSync, writeFileSync, mkdirSync, existsSync, statSync } from 'node:fs';
+import { readFileSync, writeFileSync, mkdirSync, existsSync, statSync, chmodSync } from 'node:fs';
 import { join } from 'node:path';
 import { homedir } from 'node:os';
 import { readHistory, typedText } from './history.mjs';
@@ -32,6 +32,7 @@ export function prepareRules({ home = homedir() } = {}) {
   const { dir, input } = paths(home);
   mkdirSync(dir, { recursive: true });
   writeFileSync(input, lines.join('\n') + '\n', { mode: 0o600 });
+  chmodSync(input, 0o600);   // the mode above only applies to a new file
   return { input, lines: lines.length, secrets };
 }