{
  "context": "This evaluation assesses how effectively the engineer uses tmp-promise's permission control features (mode option) to create secure temporary files and directories. The focus is on proper usage of the mode parameter to restrict access to sensitive temporary resources.",
  "type": "weighted_checklist",
  "checklist": [
    {
      "name": "Uses file() method",
      "description": "Correctly uses the tmp-promise file() method to create a temporary file in the storeSecureConfig function",
      "max_score": 15
    },
    {
      "name": "Sets mode 0600",
      "description": "Passes mode: 0600 option to file() to set owner-only read/write permissions for the temporary configuration file",
      "max_score": 25
    },
    {
      "name": "Uses dir() method",
      "description": "Correctly uses the tmp-promise dir() method to create a temporary directory in the createSecureWorkspace function",
      "max_score": 15
    },
    {
      "name": "Sets mode 0700",
      "description": "Passes mode: 0700 option to dir() to set owner-only full access permissions for the temporary directory",
      "max_score": 25
    },
    {
      "name": "Returns cleanup function",
      "description": "Properly returns the cleanup function from both storeSecureConfig and createSecureWorkspace to allow manual resource cleanup",
      "max_score": 10
    },
    {
      "name": "Writes data correctly",
      "description": "Uses fs.promises or fs/promises to write the JSON-serialized configuration data to the temporary file in storeSecureConfig",
      "max_score": 10
    }
  ]
}