From fbc4cbe4d6a4c63a66637a1caca3a3646e57c5d8 Mon Sep 17 00:00:00 2001
From: saopig1 <saopig@duck.com>
Date: Mon, 30 Mar 2026 00:41:24 +0800
Subject: [PATCH] =?UTF-8?q?fix:=20address=20Phase=204=20review=20=E2=80=94?=
 =?UTF-8?q?=20cookie=20file=20permissions=20(0600),=20gitignore=20cookies?=
 =?UTF-8?q?=20dir?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
---
 .gitignore        | 1 +
 src/music/auth.ts | 2 +-
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/.gitignore b/.gitignore
index c3c8a8b..23a3dc6 100644
--- a/.gitignore
+++ b/.gitignore
@@ -4,4 +4,5 @@ dist/
 *.db
 .env
 config.json
+cookies/
 .superpowers/
diff --git a/src/music/auth.ts b/src/music/auth.ts
index 7d33e1c..b71bc75 100644
--- a/src/music/auth.ts
+++ b/src/music/auth.ts
@@ -17,7 +17,7 @@ export function createCookieStore(cookieDir: string): CookieStore {
       fs.writeFileSync(
         filePath,
         JSON.stringify({ cookie, updatedAt: new Date().toISOString() }),
-        "utf-8"
+        { encoding: "utf-8", mode: 0o600 }
       );
     },