Function mkdirSecure

browse/src/file-permissions.ts:147–150

(dirPath: string)

 * Safe to call on an existing directory — re-applies the ACL idempotently.
 */
export function mkdirSecure(dirPath: string): void {
  fs.mkdirSync(dirPath, { recursive: true, mode: 0o700 });
  restrictDirectoryPermissions(dirPath);
}

/**
 * Reset the once-per-process warning gate. Test-only.