chore: resolve lint issues

goosewin · goosewin · commit 8825e39d9561 · 2025-06-24T23:22:34.000-07:00
diff --git a/cmd/assistant.go b/cmd/assistant.go
@@ -201,6 +201,7 @@ are best done through the Vapi dashboard at https://dashboard.vapi.ai`,
 	},
 }
 
+// nolint:dupl // Delete commands follow a similar pattern across resources
 var deleteAssistantCmd = &cobra.Command{
 	Use:   "delete [assistant-id]",
 	Short: "Delete an assistant",
diff --git a/cmd/campaign.go b/cmd/campaign.go
@@ -316,7 +316,7 @@ var campaignGetCmd = &cobra.Command{
 		fmt.Printf("Created: %s\n", campaign.CreatedAt.Format("2006-01-02 15:04:05"))
 		fmt.Printf("Updated: %s\n", campaign.UpdatedAt.Format("2006-01-02 15:04:05"))
 
-		if campaign.Customers != nil && len(campaign.Customers) > 0 {
+		if len(campaign.Customers) > 0 {
 			fmt.Printf("\nCustomers: %d\n", len(campaign.Customers))
 		}
 
@@ -372,7 +372,7 @@ var campaignUpdateCmd = &cobra.Command{
 				return nil
 			}
 
-			fmt.Println("Campaign update cancelled.")
+			fmt.Println("Campaign update canceled.")
 			return nil
 		}
 
@@ -403,7 +403,7 @@ var campaignDeleteCmd = &cobra.Command{
 		}
 
 		if !confirm {
-			fmt.Println("Deletion cancelled.")
+			fmt.Println("Deletion canceled.")
 			return nil
 		}
 
diff --git a/cmd/workflow.go b/cmd/workflow.go
@@ -197,6 +197,7 @@ are best done through the Vapi dashboard at https://dashboard.vapi.ai`,
 	},
 }
 
+// nolint:dupl // Delete commands follow a similar pattern across resources
 var deleteWorkflowCmd = &cobra.Command{
 	Use:   "delete [workflow-id]",
 	Short: "Delete a workflow",
diff --git a/pkg/auth/auth.go b/pkg/auth/auth.go
@@ -280,22 +280,14 @@ func generateRandomState() (string, error) {
 }
 
 func openBrowser(targetURL string) error {
-	var cmd string
-	var args []string
-
 	switch runtime.GOOS {
 	case "windows":
-		cmd = "cmd"
-		args = []string{"/c", "start", targetURL}
+		return exec.Command("cmd", "/c", "start", targetURL).Start()
 	case "darwin":
-		cmd = "open"
-		args = []string{targetURL}
+		return exec.Command("open", targetURL).Start()
 	default: // Linux and others
-		cmd = "xdg-open"
-		args = []string{targetURL}
+		return exec.Command("xdg-open", targetURL).Start()
 	}
-
-	return exec.Command(cmd, args...).Start()
 }
 
 // Login performs the browser-based authentication flow
diff --git a/pkg/integrations/detector.go b/pkg/integrations/detector.go
@@ -98,7 +98,8 @@ func DetectProject(projectPath string) (*ProjectInfo, error) {
 		project.Framework = FrameworkGolang
 		project.ProjectType = ProjectTypeBackend
 		// Try to read Go version from go.mod
-		if data, err := os.ReadFile(filepath.Join(projectPath, "go.mod")); err == nil {
+		goModPath := filepath.Clean(filepath.Join(projectPath, "go.mod"))
+		if data, err := os.ReadFile(goModPath); err == nil {
 			// Simple version extraction (could be improved)
 			content := string(data)
 			if content != "" {
@@ -170,7 +171,7 @@ func DetectProject(projectPath string) (*ProjectInfo, error) {
 	}
 
 	// If no backend/mobile markers found, check for Node.js/frontend projects
-	packageJSONPath := filepath.Join(projectPath, "package.json")
+	packageJSONPath := filepath.Clean(filepath.Join(projectPath, "package.json"))
 	if _, err := os.Stat(packageJSONPath); err == nil {
 		// Read and parse package.json
 		data, err := os.ReadFile(packageJSONPath)
diff --git a/pkg/integrations/golang.go b/pkg/integrations/golang.go
@@ -28,7 +28,7 @@ import (
 func GenerateGoIntegration(projectPath string, info *ProjectInfo) error {
 	// Create examples directory
 	examplesDir := filepath.Join(projectPath, "examples", "vapi")
-	if err := os.MkdirAll(examplesDir, 0o755); err != nil {
+	if err := os.MkdirAll(examplesDir, 0o750); err != nil {
 		return fmt.Errorf("failed to create examples directory: %w", err)
 	}
 
@@ -166,7 +166,7 @@ func makePhoneCall(client *vapi.Client, assistantID, phoneNumber string) {
 }
 `
 
-	return os.WriteFile(filepath.Join(dir, "basic_example.go"), []byte(content), 0o644)
+	return os.WriteFile(filepath.Join(dir, "basic_example.go"), []byte(content), 0o600)
 }
 
 func generateGoHTTPExample(dir string) error {
@@ -357,7 +357,7 @@ func handleVapiWebhook(w http.ResponseWriter, r *http.Request) {
 }
 `
 
-	return os.WriteFile(filepath.Join(dir, "http_example.go"), []byte(content), 0o644)
+	return os.WriteFile(filepath.Join(dir, "http_example.go"), []byte(content), 0o600)
 }
 
 func generateGoGinExample(dir string) error {
@@ -526,7 +526,7 @@ func handleHealth(c *gin.Context) {
 }
 `
 
-	return os.WriteFile(filepath.Join(dir, "gin_example.go"), []byte(content), 0o644)
+	return os.WriteFile(filepath.Join(dir, "gin_example.go"), []byte(content), 0o600)
 }
 
 func generateGoEnvTemplate(projectPath string) error {
@@ -539,5 +539,5 @@ VAPI_ASSISTANT_ID=your_assistant_id_here
 PORT=8080
 `
 
-	return os.WriteFile(filepath.Join(projectPath, ".env.example"), []byte(content), 0o644)
+	return os.WriteFile(filepath.Join(projectPath, ".env.example"), []byte(content), 0o600)
 }
diff --git a/pkg/integrations/node.go b/pkg/integrations/node.go
@@ -27,7 +27,7 @@ import (
 // GenerateNodeIntegration generates SDK examples and configuration for Node.js/TypeScript projects
 func GenerateNodeIntegration(projectPath string, info *ProjectInfo) error {
 	examplesDir := filepath.Join(projectPath, "vapi-examples")
-	if err := os.MkdirAll(examplesDir, 0o755); err != nil {
+	if err := os.MkdirAll(examplesDir, 0o750); err != nil {
 		return fmt.Errorf("failed to create examples directory: %w", err)
 	}
 
@@ -158,7 +158,7 @@ async function main() {
 main().catch(console.error);
 `
 
-	return os.WriteFile(filepath.Join(dir, "basic-example.js"), []byte(content), 0o644)
+	return os.WriteFile(filepath.Join(dir, "basic-example.js"), []byte(content), 0o600)
 }
 
 func generateNodeJSExpressExample(dir string) error {
@@ -299,7 +299,7 @@ app.listen(PORT, () => {
 });
 `
 
-	return os.WriteFile(filepath.Join(dir, "express-example.js"), []byte(content), 0o644)
+	return os.WriteFile(filepath.Join(dir, "express-example.js"), []byte(content), 0o600)
 }
 
 func generateNodeTSBasicExample(dir string) error {
@@ -402,7 +402,7 @@ async function main() {
 main().catch(console.error);
 `
 
-	return os.WriteFile(filepath.Join(dir, "basic-example.ts"), []byte(content), 0o644)
+	return os.WriteFile(filepath.Join(dir, "basic-example.ts"), []byte(content), 0o600)
 }
 
 func generateNodeTSExpressExample(dir string) error {
@@ -557,7 +557,7 @@ app.listen(PORT, () => {
 });
 `
 
-	return os.WriteFile(filepath.Join(dir, "express-example.ts"), []byte(content), 0o644)
+	return os.WriteFile(filepath.Join(dir, "express-example.ts"), []byte(content), 0o600)
 }
 
 func generateNodeTSFastifyExample(dir string) error {
@@ -724,7 +724,7 @@ const start = async () => {
 start();
 `
 
-	return os.WriteFile(filepath.Join(dir, "fastify-example.ts"), []byte(content), 0o644)
+	return os.WriteFile(filepath.Join(dir, "fastify-example.ts"), []byte(content), 0o600)
 }
 
 func generateNodeEnvTemplate(projectPath string) error {
@@ -740,5 +740,5 @@ PORT=3000
 VAPI_WEBHOOK_URL=https://your-domain.com/webhook/vapi
 `
 
-	return os.WriteFile(filepath.Join(projectPath, ".env.example"), []byte(content), 0o644)
+	return os.WriteFile(filepath.Join(projectPath, ".env.example"), []byte(content), 0o600)
 }
diff --git a/pkg/integrations/python.go b/pkg/integrations/python.go
@@ -27,7 +27,7 @@ import (
 // GeneratePythonIntegration generates SDK examples and configuration for Python projects
 func GeneratePythonIntegration(projectPath string, info *ProjectInfo) error {
 	examplesDir := filepath.Join(projectPath, "vapi_examples")
-	if err := os.MkdirAll(examplesDir, 0o755); err != nil {
+	if err := os.MkdirAll(examplesDir, 0o750); err != nil {
 		return fmt.Errorf("failed to create examples directory: %w", err)
 	}
 
@@ -151,7 +151,7 @@ if __name__ == "__main__":
     main()
 `
 
-	return os.WriteFile(filepath.Join(dir, "basic_example.py"), []byte(content), 0o644)
+	return os.WriteFile(filepath.Join(dir, "basic_example.py"), []byte(content), 0o600)
 }
 
 func generatePythonFlaskExample(dir string) error {
@@ -288,7 +288,7 @@ if __name__ == '__main__':
     app.run(debug=True, port=5000)
 `
 
-	return os.WriteFile(filepath.Join(dir, "flask_example.py"), []byte(content), 0o644)
+	return os.WriteFile(filepath.Join(dir, "flask_example.py"), []byte(content), 0o600)
 }
 
 func generatePythonFastAPIExample(dir string) error {
@@ -436,7 +436,7 @@ if __name__ == "__main__":
     uvicorn.run(app, host="0.0.0.0", port=8000)
 `
 
-	return os.WriteFile(filepath.Join(dir, "fastapi_example.py"), []byte(content), 0o644)
+	return os.WriteFile(filepath.Join(dir, "fastapi_example.py"), []byte(content), 0o600)
 }
 
 func generatePythonEnvTemplate(projectPath string) error {
@@ -449,7 +449,7 @@ VAPI_ASSISTANT_ID=your_assistant_id_here
 VAPI_WEBHOOK_URL=https://your-domain.com/webhook/vapi
 `
 
-	return os.WriteFile(filepath.Join(projectPath, ".env.example"), []byte(content), 0o644)
+	return os.WriteFile(filepath.Join(projectPath, ".env.example"), []byte(content), 0o600)
 }
 
 func generatePythonRequirements(projectPath string) error {
@@ -467,5 +467,5 @@ python-dotenv>=1.0.0
 
 	// Check if requirements.txt already exists
 	reqPath := filepath.Join(projectPath, "requirements-vapi.txt")
-	return os.WriteFile(reqPath, []byte(content), 0o644)
+	return os.WriteFile(reqPath, []byte(content), 0o600)
 }
diff --git a/pkg/integrations/react.go b/pkg/integrations/react.go
@@ -50,6 +50,7 @@ func DetectReactProject(projectPath string) (*ReactProject, error) {
 	}
 
 	// Read and parse package.json
+	packageJSONPath = filepath.Clean(packageJSONPath)
 	data, err := os.ReadFile(packageJSONPath)
 	if err != nil {
 		return nil, fmt.Errorf("failed to read package.json: %w", err)
@@ -172,7 +173,7 @@ func (rp *ReactProject) GenerateVapiComponents() error {
 	}
 
 	componentsDir := filepath.Join(rp.Path, srcDir, "components", "vapi")
-	if err := os.MkdirAll(componentsDir, 0o755); err != nil {
+	if err := os.MkdirAll(componentsDir, 0o750); err != nil {
 		return fmt.Errorf("failed to create components directory: %w", err)
 	}
 
@@ -186,7 +187,7 @@ func (rp *ReactProject) GenerateVapiComponents() error {
 
 	hookContent := rp.generateVapiHook()
 	hookPath := filepath.Join(componentsDir, hookFile)
-	if err := os.WriteFile(hookPath, []byte(hookContent), 0o644); err != nil {
+	if err := os.WriteFile(hookPath, []byte(hookContent), 0o600); err != nil {
 		return fmt.Errorf("failed to write Vapi hook: %w", err)
 	}
 
@@ -200,7 +201,7 @@ func (rp *ReactProject) GenerateVapiComponents() error {
 
 	componentContent := rp.generateVapiComponent()
 	componentPath := filepath.Join(componentsDir, componentFile)
-	if err := os.WriteFile(componentPath, []byte(componentContent), 0o644); err != nil {
+	if err := os.WriteFile(componentPath, []byte(componentContent), 0o600); err != nil {
 		return fmt.Errorf("failed to write Vapi component: %w", err)
 	}
 
@@ -214,7 +215,7 @@ func (rp *ReactProject) GenerateVapiComponents() error {
 
 	exampleContent := rp.generateVapiExample()
 	examplePath := filepath.Join(componentsDir, exampleFile)
-	if err := os.WriteFile(examplePath, []byte(exampleContent), 0o644); err != nil {
+	if err := os.WriteFile(examplePath, []byte(exampleContent), 0o600); err != nil {
 		return fmt.Errorf("failed to write Vapi example: %w", err)
 	}
 
@@ -244,7 +245,7 @@ NEXT_PUBLIC_VAPI_ASSISTANT_ID=your_assistant_id_here
 `
 	}
 
-	if err := os.WriteFile(envPath, []byte(envContent), 0o644); err != nil {
+	if err := os.WriteFile(envPath, []byte(envContent), 0o600); err != nil {
 		return fmt.Errorf("failed to create .env.example: %w", err)
 	}
 
@@ -259,7 +260,7 @@ func (rp *ReactProject) savePackageJSON() error {
 	}
 
 	packageJSONPath := filepath.Join(rp.Path, "package.json")
-	return os.WriteFile(packageJSONPath, data, 0o644)
+	return os.WriteFile(packageJSONPath, data, 0o600)
 }
 
 func (rp *ReactProject) generateVapiHook() string {
@@ -760,10 +761,10 @@ func GenerateReactIntegration(projectPath string, info *ProjectInfo) error {
 	}
 
 	// Create directories if they don't exist
-	if err := os.MkdirAll(componentsDir, 0o755); err != nil {
+	if err := os.MkdirAll(componentsDir, 0o750); err != nil {
 		return fmt.Errorf("failed to create components directory: %w", err)
 	}
-	if err := os.MkdirAll(hooksDir, 0o755); err != nil {
+	if err := os.MkdirAll(hooksDir, 0o750); err != nil {
 		return fmt.Errorf("failed to create hooks directory: %w", err)
 	}
 
@@ -940,7 +941,7 @@ export const useVapi = (config) => {
 	}
 
 	filename := fmt.Sprintf("useVapi.%s", ext)
-	return os.WriteFile(filepath.Join(dir, filename), []byte(content), 0o644)
+	return os.WriteFile(filepath.Join(dir, filename), []byte(content), 0o600)
 }
 
 // generateVapiButton creates the VapiButton component
@@ -1149,7 +1150,7 @@ export const VapiButton = ({
 	}
 
 	filename := fmt.Sprintf("VapiButton.%s", ext)
-	return os.WriteFile(filepath.Join(dir, filename), []byte(content), 0o644)
+	return os.WriteFile(filepath.Join(dir, filename), []byte(content), 0o600)
 }
 
 // generateVapiExample creates an example component showing Vapi usage
@@ -1208,7 +1209,7 @@ export const VapiExample = () => {
 	}
 
 	filename := fmt.Sprintf("VapiExample.%s", ext)
-	return os.WriteFile(filepath.Join(dir, filename), []byte(content), 0o644)
+	return os.WriteFile(filepath.Join(dir, filename), []byte(content), 0o600)
 }
 
 // generateEnvTemplate creates environment template file
@@ -1229,5 +1230,5 @@ func generateEnvTemplate(projectPath string) error {
 # %sVAPI_BASE_URL=https://api.vapi.ai
 `, envPrefix, envPrefix, envPrefix)
 
-	return os.WriteFile(filepath.Join(projectPath, ".env.example"), []byte(content), 0o644)
+	return os.WriteFile(filepath.Join(projectPath, ".env.example"), []byte(content), 0o600)
 }

Original file line number	Diff line number	Diff line change
@@ -201,6 +201,7 @@ are best done through the Vapi dashboard at https://dashboard.vapi.ai`,
`201`	`201`	`},`
`202`	`202`	`}`
`203`	`203`
	`204`	`+// nolint:dupl // Delete commands follow a similar pattern across resources`
`204`	`205`	`var deleteAssistantCmd = &cobra.Command{`
`205`	`206`	`Use: "delete [assistant-id]",`
`206`	`207`	`Short: "Delete an assistant",`
Original file line number	Diff line number	Diff line change
`@@ -316,7 +316,7 @@ var campaignGetCmd = &cobra.Command{`
`316`	`316`	`fmt.Printf("Created: %s\n", campaign.CreatedAt.Format("2006-01-02 15:04:05"))`
`317`	`317`	`fmt.Printf("Updated: %s\n", campaign.UpdatedAt.Format("2006-01-02 15:04:05"))`
`318`	`318`
`319`		`- if campaign.Customers != nil && len(campaign.Customers) > 0 {`
	`319`	`+ if len(campaign.Customers) > 0 {`
`320`	`320`	`fmt.Printf("\nCustomers: %d\n", len(campaign.Customers))`
`321`	`321`	`}`
`322`	`322`
`@@ -372,7 +372,7 @@ var campaignUpdateCmd = &cobra.Command{`
`372`	`372`	`return nil`
`373`	`373`	`}`
`374`	`374`
`375`		`- fmt.Println("Campaign update cancelled.")`
	`375`	`+ fmt.Println("Campaign update canceled.")`
`376`	`376`	`return nil`
`377`	`377`	`}`
`378`	`378`
`@@ -403,7 +403,7 @@ var campaignDeleteCmd = &cobra.Command{`
`403`	`403`	`}`
`404`	`404`
`405`	`405`	`if !confirm {`
`406`		`- fmt.Println("Deletion cancelled.")`
	`406`	`+ fmt.Println("Deletion canceled.")`
`407`	`407`	`return nil`
`408`	`408`	`}`
`409`	`409`
Original file line number	Diff line number	Diff line change
@@ -197,6 +197,7 @@ are best done through the Vapi dashboard at https://dashboard.vapi.ai`,
`197`	`197`	`},`
`198`	`198`	`}`
`199`	`199`
	`200`	`+// nolint:dupl // Delete commands follow a similar pattern across resources`
`200`	`201`	`var deleteWorkflowCmd = &cobra.Command{`
`201`	`202`	`Use: "delete [workflow-id]",`
`202`	`203`	`Short: "Delete a workflow",`
Original file line number	Diff line number	Diff line change
`@@ -28,7 +28,7 @@ import (`
`28`	`28`	`func GenerateGoIntegration(projectPath string, info *ProjectInfo) error {`
`29`	`29`	`// Create examples directory`
`30`	`30`	`examplesDir := filepath.Join(projectPath, "examples", "vapi")`
`31`		`- if err := os.MkdirAll(examplesDir, 0o755); err != nil {`
	`31`	`+ if err := os.MkdirAll(examplesDir, 0o750); err != nil {`
`32`	`32`	`return fmt.Errorf("failed to create examples directory: %w", err)`
`33`	`33`	`}`
`34`	`34`
`@@ -166,7 +166,7 @@ func makePhoneCall(client *vapi.Client, assistantID, phoneNumber string) {`
`166`	`166`	`}`
`167`	`167`	`
`168`	`168`
`169`		`- return os.WriteFile(filepath.Join(dir, "basic_example.go"), []byte(content), 0o644)`
	`169`	`+ return os.WriteFile(filepath.Join(dir, "basic_example.go"), []byte(content), 0o600)`
`170`	`170`	`}`
`171`	`171`
`172`	`172`	`func generateGoHTTPExample(dir string) error {`
`@@ -357,7 +357,7 @@ func handleVapiWebhook(w http.ResponseWriter, r *http.Request) {`
`357`	`357`	`}`
`358`	`358`	`
`359`	`359`
`360`		`- return os.WriteFile(filepath.Join(dir, "http_example.go"), []byte(content), 0o644)`
	`360`	`+ return os.WriteFile(filepath.Join(dir, "http_example.go"), []byte(content), 0o600)`
`361`	`361`	`}`
`362`	`362`
`363`	`363`	`func generateGoGinExample(dir string) error {`
`@@ -526,7 +526,7 @@ func handleHealth(c *gin.Context) {`
`526`	`526`	`}`
`527`	`527`	`
`528`	`528`
`529`		`- return os.WriteFile(filepath.Join(dir, "gin_example.go"), []byte(content), 0o644)`
	`529`	`+ return os.WriteFile(filepath.Join(dir, "gin_example.go"), []byte(content), 0o600)`
`530`	`530`	`}`
`531`	`531`
`532`	`532`	`func generateGoEnvTemplate(projectPath string) error {`
`@@ -539,5 +539,5 @@ VAPI_ASSISTANT_ID=your_assistant_id_here`
`539`	`539`	`PORT=8080`
`540`	`540`	`
`541`	`541`
`542`		`- return os.WriteFile(filepath.Join(projectPath, ".env.example"), []byte(content), 0o644)`
	`542`	`+ return os.WriteFile(filepath.Join(projectPath, ".env.example"), []byte(content), 0o600)`
`543`	`543`	`}`
Original file line number	Diff line number	Diff line change
`@@ -27,7 +27,7 @@ import (`
`27`	`27`	`// GenerateNodeIntegration generates SDK examples and configuration for Node.js/TypeScript projects`
`28`	`28`	`func GenerateNodeIntegration(projectPath string, info *ProjectInfo) error {`
`29`	`29`	`examplesDir := filepath.Join(projectPath, "vapi-examples")`
`30`		`- if err := os.MkdirAll(examplesDir, 0o755); err != nil {`
	`30`	`+ if err := os.MkdirAll(examplesDir, 0o750); err != nil {`
`31`	`31`	`return fmt.Errorf("failed to create examples directory: %w", err)`
`32`	`32`	`}`
`33`	`33`
`@@ -158,7 +158,7 @@ async function main() {`
`158`	`158`	`main().catch(console.error);`
`159`	`159`	`
`160`	`160`
`161`		`- return os.WriteFile(filepath.Join(dir, "basic-example.js"), []byte(content), 0o644)`
	`161`	`+ return os.WriteFile(filepath.Join(dir, "basic-example.js"), []byte(content), 0o600)`
`162`	`162`	`}`
`163`	`163`
`164`	`164`	`func generateNodeJSExpressExample(dir string) error {`
`@@ -299,7 +299,7 @@ app.listen(PORT, () => {`
`299`	`299`	`});`
`300`	`300`	`
`301`	`301`
`302`		`- return os.WriteFile(filepath.Join(dir, "express-example.js"), []byte(content), 0o644)`
	`302`	`+ return os.WriteFile(filepath.Join(dir, "express-example.js"), []byte(content), 0o600)`
`303`	`303`	`}`
`304`	`304`
`305`	`305`	`func generateNodeTSBasicExample(dir string) error {`
`@@ -402,7 +402,7 @@ async function main() {`
`402`	`402`	`main().catch(console.error);`
`403`	`403`	`
`404`	`404`
`405`		`- return os.WriteFile(filepath.Join(dir, "basic-example.ts"), []byte(content), 0o644)`
	`405`	`+ return os.WriteFile(filepath.Join(dir, "basic-example.ts"), []byte(content), 0o600)`
`406`	`406`	`}`
`407`	`407`
`408`	`408`	`func generateNodeTSExpressExample(dir string) error {`
`@@ -557,7 +557,7 @@ app.listen(PORT, () => {`
`557`	`557`	`});`
`558`	`558`	`
`559`	`559`
`560`		`- return os.WriteFile(filepath.Join(dir, "express-example.ts"), []byte(content), 0o644)`
	`560`	`+ return os.WriteFile(filepath.Join(dir, "express-example.ts"), []byte(content), 0o600)`
`561`	`561`	`}`
`562`	`562`
`563`	`563`	`func generateNodeTSFastifyExample(dir string) error {`
`@@ -724,7 +724,7 @@ const start = async () => {`
`724`	`724`	`start();`
`725`	`725`	`
`726`	`726`
`727`		`- return os.WriteFile(filepath.Join(dir, "fastify-example.ts"), []byte(content), 0o644)`
	`727`	`+ return os.WriteFile(filepath.Join(dir, "fastify-example.ts"), []byte(content), 0o600)`
`728`	`728`	`}`
`729`	`729`
`730`	`730`	`func generateNodeEnvTemplate(projectPath string) error {`
`@@ -740,5 +740,5 @@ PORT=3000`
`740`	`740`	`VAPI_WEBHOOK_URL=https://your-domain.com/webhook/vapi`
`741`	`741`	`
`742`	`742`
`743`		`- return os.WriteFile(filepath.Join(projectPath, ".env.example"), []byte(content), 0o644)`
	`743`	`+ return os.WriteFile(filepath.Join(projectPath, ".env.example"), []byte(content), 0o600)`
`744`	`744`	`}`
Original file line number	Diff line number	Diff line change
`@@ -50,6 +50,7 @@ func DetectReactProject(projectPath string) (*ReactProject, error) {`
`50`	`50`	`}`
`51`	`51`
`52`	`52`	`// Read and parse package.json`
	`53`	`+ packageJSONPath = filepath.Clean(packageJSONPath)`
`53`	`54`	`data, err := os.ReadFile(packageJSONPath)`
`54`	`55`	`if err != nil {`
`55`	`56`	`return nil, fmt.Errorf("failed to read package.json: %w", err)`
`@@ -172,7 +173,7 @@ func (rp *ReactProject) GenerateVapiComponents() error {`
`172`	`173`	`}`
`173`	`174`
`174`	`175`	`componentsDir := filepath.Join(rp.Path, srcDir, "components", "vapi")`
`175`		`- if err := os.MkdirAll(componentsDir, 0o755); err != nil {`
	`176`	`+ if err := os.MkdirAll(componentsDir, 0o750); err != nil {`
`176`	`177`	`return fmt.Errorf("failed to create components directory: %w", err)`
`177`	`178`	`}`
`178`	`179`
`@@ -186,7 +187,7 @@ func (rp *ReactProject) GenerateVapiComponents() error {`
`186`	`187`
`187`	`188`	`hookContent := rp.generateVapiHook()`
`188`	`189`	`hookPath := filepath.Join(componentsDir, hookFile)`
`189`		`- if err := os.WriteFile(hookPath, []byte(hookContent), 0o644); err != nil {`
	`190`	`+ if err := os.WriteFile(hookPath, []byte(hookContent), 0o600); err != nil {`
`190`	`191`	`return fmt.Errorf("failed to write Vapi hook: %w", err)`
`191`	`192`	`}`
`192`	`193`
`@@ -200,7 +201,7 @@ func (rp *ReactProject) GenerateVapiComponents() error {`
`200`	`201`
`201`	`202`	`componentContent := rp.generateVapiComponent()`
`202`	`203`	`componentPath := filepath.Join(componentsDir, componentFile)`
`203`		`- if err := os.WriteFile(componentPath, []byte(componentContent), 0o644); err != nil {`
	`204`	`+ if err := os.WriteFile(componentPath, []byte(componentContent), 0o600); err != nil {`
`204`	`205`	`return fmt.Errorf("failed to write Vapi component: %w", err)`
`205`	`206`	`}`
`206`	`207`
`@@ -214,7 +215,7 @@ func (rp *ReactProject) GenerateVapiComponents() error {`
`214`	`215`
`215`	`216`	`exampleContent := rp.generateVapiExample()`
`216`	`217`	`examplePath := filepath.Join(componentsDir, exampleFile)`
`217`		`- if err := os.WriteFile(examplePath, []byte(exampleContent), 0o644); err != nil {`
	`218`	`+ if err := os.WriteFile(examplePath, []byte(exampleContent), 0o600); err != nil {`
`218`	`219`	`return fmt.Errorf("failed to write Vapi example: %w", err)`
`219`	`220`	`}`
`220`	`221`
`@@ -244,7 +245,7 @@ NEXT_PUBLIC_VAPI_ASSISTANT_ID=your_assistant_id_here`
`244`	`245`	`
`245`	`246`	`}`
`246`	`247`
`247`		`- if err := os.WriteFile(envPath, []byte(envContent), 0o644); err != nil {`
	`248`	`+ if err := os.WriteFile(envPath, []byte(envContent), 0o600); err != nil {`
`248`	`249`	`return fmt.Errorf("failed to create .env.example: %w", err)`
`249`	`250`	`}`
`250`	`251`
`@@ -259,7 +260,7 @@ func (rp *ReactProject) savePackageJSON() error {`
`259`	`260`	`}`
`260`	`261`
`261`	`262`	`packageJSONPath := filepath.Join(rp.Path, "package.json")`
`262`		`- return os.WriteFile(packageJSONPath, data, 0o644)`
	`263`	`+ return os.WriteFile(packageJSONPath, data, 0o600)`
`263`	`264`	`}`
`264`	`265`
`265`	`266`	`func (rp *ReactProject) generateVapiHook() string {`
`@@ -760,10 +761,10 @@ func GenerateReactIntegration(projectPath string, info *ProjectInfo) error {`
`760`	`761`	`}`
`761`	`762`
`762`	`763`	`// Create directories if they don't exist`
`763`		`- if err := os.MkdirAll(componentsDir, 0o755); err != nil {`
	`764`	`+ if err := os.MkdirAll(componentsDir, 0o750); err != nil {`
`764`	`765`	`return fmt.Errorf("failed to create components directory: %w", err)`
`765`	`766`	`}`
`766`		`- if err := os.MkdirAll(hooksDir, 0o755); err != nil {`
	`767`	`+ if err := os.MkdirAll(hooksDir, 0o750); err != nil {`
`767`	`768`	`return fmt.Errorf("failed to create hooks directory: %w", err)`
`768`	`769`	`}`
`769`	`770`
`@@ -940,7 +941,7 @@ export const useVapi = (config) => {`
`940`	`941`	`}`
`941`	`942`
`942`	`943`	`filename := fmt.Sprintf("useVapi.%s", ext)`
`943`		`- return os.WriteFile(filepath.Join(dir, filename), []byte(content), 0o644)`
	`944`	`+ return os.WriteFile(filepath.Join(dir, filename), []byte(content), 0o600)`
`944`	`945`	`}`
`945`	`946`
`946`	`947`	`// generateVapiButton creates the VapiButton component`
`@@ -1149,7 +1150,7 @@ export const VapiButton = ({`
`1149`	`1150`	`}`
`1150`	`1151`
`1151`	`1152`	`filename := fmt.Sprintf("VapiButton.%s", ext)`
`1152`		`- return os.WriteFile(filepath.Join(dir, filename), []byte(content), 0o644)`
	`1153`	`+ return os.WriteFile(filepath.Join(dir, filename), []byte(content), 0o600)`
`1153`	`1154`	`}`
`1154`	`1155`
`1155`	`1156`	`// generateVapiExample creates an example component showing Vapi usage`
`@@ -1208,7 +1209,7 @@ export const VapiExample = () => {`
`1208`	`1209`	`}`
`1209`	`1210`
`1210`	`1211`	`filename := fmt.Sprintf("VapiExample.%s", ext)`
`1211`		`- return os.WriteFile(filepath.Join(dir, filename), []byte(content), 0o644)`
	`1212`	`+ return os.WriteFile(filepath.Join(dir, filename), []byte(content), 0o600)`
`1212`	`1213`	`}`
`1213`	`1214`
`1214`	`1215`	`// generateEnvTemplate creates environment template file`
`@@ -1229,5 +1230,5 @@ func generateEnvTemplate(projectPath string) error {`
`1229`	`1230`	`# %sVAPI_BASE_URL=https://api.vapi.ai`
`1230`	`1231`	`, envPrefix, envPrefix, envPrefix)
`1231`	`1232`
`1232`		`- return os.WriteFile(filepath.Join(projectPath, ".env.example"), []byte(content), 0o644)`
	`1233`	`+ return os.WriteFile(filepath.Join(projectPath, ".env.example"), []byte(content), 0o600)`
`1233`	`1234`	`}`