@happyvertical/smrt-app-runtime 0.57.46 → 0.57.47

package/dist/chunks/{src-C_A3ugf-.js → src-DP7SxcSY.js}

@@ -1354,7 +1354,8 @@ function prepareApplicationStateRoot(options) {
 		component = join(component, part);
 		try {
 			const details = lstatSync(component);
-			if (details.isSymbolicLink() || !details.isDirectory()) throw new Error(`Application state path component is unsafe: ${component}`);
+			if (details.isSymbolicLink()) throw new Error(`Application state path component is unsafe: ${component} (symbolic link). Select an explicit trusted canonical path; on macOS /tmp is commonly /private/tmp. Do not automatically trust symlink targets.`);
+			if (!details.isDirectory()) throw new Error(`Application state path component is unsafe: ${component}`);
 			const sharedStickyRoot = details.uid === 0 && (details.mode & 512) !== 0;
 			if (currentUid !== void 0 && (details.uid !== currentUid && details.uid !== 0 || (details.mode & 18) !== 0 && !sharedStickyRoot)) throw new Error(`Application state path lacks trusted custody: ${component}`);
 		} catch (error) {
@@ -2774,4 +2775,4 @@ function isDirectoryNotEmpty(error) {
 //#endregion
 export { reclaimStaleRecord as A, deepFrozenPlainCopy as B, findInstalledPackage as C, processExists as D, lockOwnerPid as E, LOCAL_MCP_TOKEN_PRINCIPAL as F, initializeDeployedApplicationRuntime as G, resolveBoundMembershipPermissions as H, LOCAL_MCP_TOKEN_TABLE as I, isSessionTenantAuthorized as K, MAX_LOCAL_MCP_TOKEN_TTL_SECONDS as L, runtimeConfigurationFingerprint as M, DEFAULT_LOCAL_MCP_TOKEN_TTL_SECONDS as N, withOperationLock as O, LOCAL_MCP_TOKEN_PREFIX as P, isLocalMcpTokenPrincipal as R, createProviderReadinessProbe as S, isStaleOperationLock as T, DeployedRuntimeCleanupError as U, ownValue as V, DeployedRuntimeError as W, MAX_RUNTIME_DIAGNOSTIC_TOOLS as _, openLocalMcpTokenStore as a, projectRuntimeDiagnostics as b, validateApplicationId as c, readActiveWriterLease as d, ONBOARDING_HANDOFF_FILES as f, MAX_RUNTIME_DIAGNOSTIC_ERRORS as g, resolveApplicationStateRoot as h, initializeLocalApplicationRuntime as i, resolveApplicationId as j, RECLAIM_MUTEX_FILE as k, validateLocalDatabaseStorage as l, removeOnboardingHandoff as m, MIGRATION_FAILED_MESSAGE as n, prepareLocalDatabaseStorage as o, prepareApplicationStateRoot as p, encodeApplicationId as r, resolveLocalRuntimePaths as s, LocalRuntimeError as t, acquireWriterLease as u, RUNTIME_DIAGNOSTICS_SCHEMA_VERSION as v, resolveReadinessModule as w, PROVIDER_READINESS_SETTINGS as x, RUNTIME_WORKER_FRESHNESS_SECONDS as y, PlainDataError as z };
 
-//# sourceMappingURL=src-C_A3ugf-.js.map
+//# sourceMappingURL=src-DP7SxcSY.js.map