@integrity-labs/agt-cli 0.28.1067 → 0.28.1069

package/dist/{chunk-OW6XCSOU.js → chunk-FHUYRSCF.js}

@@ -24,7 +24,7 @@ import {
   rotateDailySession,
   sessionFileExists,
   todayLocalIso
-} from "./chunk-PN7B4DLS.js";
+} from "./chunk-CFJONCHN.js";
 import {
   classifyUnanswerablePane,
   findUsageLimitResetHint,
@@ -287,9 +287,9 @@ function formatBytes(bytes) {
 }
 
 // src/lib/persistent-session.ts
-import { join as join7, dirname as dirname5 } from "path";
+import { join as join7, dirname as dirname5, basename as basename2 } from "path";
 import { homedir as homedir5, platform, userInfo as userInfo2 } from "os";
-import { existsSync as existsSync6, readFileSync as readFileSync7, readdirSync as readdirSync2, writeFileSync as writeFileSync5, appendFileSync as appendFileSync2, mkdirSync as mkdirSync6, chmodSync as chmodSync3, copyFileSync, rmSync as rmSync3, lstatSync as lstatSync3, realpathSync as realpathSync2, renameSync as renameSync3, statSync } from "fs";
+import { existsSync as existsSync6, readFileSync as readFileSync7, readdirSync as readdirSync2, writeFileSync as writeFileSync5, appendFileSync as appendFileSync2, mkdirSync as mkdirSync6, chmodSync as chmodSync3, copyFileSync, rmSync as rmSync3, lstatSync as lstatSync3, realpathSync as realpathSync2, renameSync as renameSync3, statSync, openSync as openSync2, closeSync as closeSync2, fstatSync, futimesSync, constants as fsConstants } from "fs";
 
 // src/lib/mcp-sanitize.ts
 import { readFileSync, writeFileSync } from "fs";
@@ -4185,12 +4185,97 @@ var CLAUDE_HOST_WIDE = [
 function claudeStateDirFor(homeDir, agentId) {
   return join7(homeDir, ".augmented", agentId, ".claude-state");
 }
-function ensureClaudeStateLayout(args) {
+function ensureClaudeStateLayout(args, log2) {
   const stateDir = claudeStateDirFor(args.homeDir, args.agentId);
   for (const dir of CLAUDE_PER_AGENT_DIRS) mkdirSync6(join7(stateDir, dir), { recursive: true });
+  const result = ensureTranscriptBindSources(args);
+  for (const r of result.refused) {
+    (log2 ?? ((m) => console.warn(m)))(
+      `[transcript-mount] REFUSED ${r.path}: ${r.reason}${r.detail ? ` (${r.detail})` : ""} - sentinel not written; a transcript bind source the agent can write must not be followed (ENG-11277)`
+    );
+  }
+  return result;
+}
+function ensureTranscriptBindSources(args) {
+  const { projects, mask, own } = transcriptBindSourcesFor(args);
+  const refused = [];
+  try {
+    mkdirSync6(projects, { recursive: true });
+  } catch (err) {
+    return { refused: [{ path: projects, reason: "error", detail: err.code ?? "mkdir failed" }] };
+  }
+  const maskName = basename2(mask);
+  const slug = basename2(own);
+  for (const chain of [[maskName], [maskName, slug], [slug]]) {
+    const dir = ensureDirChainNoFollow(projects, chain);
+    if ("reason" in dir) {
+      if (!refused.some((r) => r.path === dir.path)) refused.push(dir);
+      continue;
+    }
+    const sentinel = touchSentinel(join7(dir.path, TRANSCRIPT_BIND_SENTINEL));
+    if (sentinel) refused.push(sentinel);
+  }
+  return { refused };
+}
+function ensureDirChainNoFollow(root, components) {
+  let path = root;
+  for (const component of components) {
+    path = join7(path, component);
+    let st = lstatOrNull(path);
+    if (st === null) {
+      try {
+        mkdirSync6(path);
+      } catch (err) {
+        if (err.code !== "EEXIST") {
+          return { path, reason: "error", detail: err.code ?? "mkdir failed" };
+        }
+      }
+      st = lstatOrNull(path);
+      if (st === null) return { path, reason: "error", detail: "vanished after mkdir" };
+    }
+    if (st.isSymbolicLink()) return { path, reason: "symlink" };
+    if (!st.isDirectory()) return { path, reason: "not-a-directory" };
+  }
+  return { path };
+}
+function lstatOrNull(path) {
+  try {
+    return lstatSync3(path);
+  } catch {
+    return null;
+  }
+}
+var TRANSCRIPT_BIND_SENTINEL = ".agt-bind-source";
+function transcriptBindSourcesFor(args) {
   const projects = join7(args.homeDir, ".claude", "projects");
-  mkdirSync6(join7(projects, `${TRANSCRIPT_MASK_DIR_PREFIX}${args.agentId}`), { recursive: true });
-  mkdirSync6(join7(projects, encodeClaudeProjectPath(args.projectDir)), { recursive: true });
+  const slug = encodeClaudeProjectPath(args.projectDir);
+  const mask = join7(projects, `${TRANSCRIPT_MASK_DIR_PREFIX}${args.agentId}`);
+  return { projects, mask, mountpoint: join7(mask, slug), own: join7(projects, slug) };
+}
+function touchSentinel(path) {
+  let fd;
+  try {
+    fd = openSync2(
+      path,
+      fsConstants.O_WRONLY | fsConstants.O_CREAT | fsConstants.O_NOFOLLOW | fsConstants.O_NONBLOCK,
+      420
+    );
+  } catch (err) {
+    const code = err.code;
+    if (code === "ELOOP") return { path, reason: "symlink" };
+    if (code === "EISDIR" || code === "ENXIO") return { path, reason: "not-a-regular-file", detail: code };
+    return { path, reason: "error", detail: code ?? "open failed" };
+  }
+  try {
+    if (!fstatSync(fd).isFile()) return { path, reason: "not-a-regular-file" };
+    const now = /* @__PURE__ */ new Date();
+    futimesSync(fd, now, now);
+    return null;
+  } catch (err) {
+    return { path, reason: "error", detail: err.code ?? "futimes failed" };
+  } finally {
+    closeSync2(fd);
+  }
 }
 function legacyClaudeJsonIsFile(path) {
   try {
@@ -4217,9 +4302,11 @@ function buildDockerRunCommand(args) {
   const configDirIsolationSafe = configDirIsIsolationSafe(homeDir);
   const useConfigDir = (args.claudeConfigDirReady ?? claudeConfigDirIsReady(homeDir)) && configDirIsolationSafe;
   const legacyExists = args.legacyClaudeJsonExists ?? legacyClaudeJsonIsFile(legacyClaudeJson);
-  const claudeProjects = join7(claudeHome, "projects");
-  const transcriptMask = join7(claudeProjects, `${TRANSCRIPT_MASK_DIR_PREFIX}${agentId}`);
-  const ownTranscripts = join7(claudeProjects, encodeClaudeProjectPath(projectDir));
+  const {
+    projects: claudeProjects,
+    mask: transcriptMask,
+    own: ownTranscripts
+  } = transcriptBindSourcesFor({ homeDir, agentId, projectDir });
   const managedSettingsDir = CLAUDE_MANAGED_SETTINGS_DIR;
   const mounts = [
     `-v ${q(`${agentDir2}:${agentDir2}`)}`,
@@ -5020,7 +5107,7 @@ function spawnSession(config, session) {
       log2(`[persistent-session] egress allowlist for '${codeName}': ${allowlist.length} domains (deny-by-default)`);
     }
     if (effectiveMode === "docker") {
-      ensureClaudeStateLayout({ homeDir: sessionHomeDir, agentId: config.agentId, projectDir });
+      ensureClaudeStateLayout({ homeDir: sessionHomeDir, agentId: config.agentId, projectDir }, log2);
     }
     const claudeCmd = effectiveMode === "docker" ? buildDockerRunCommand({
       // ENG-10869: seed-then-decide, in that order and in one place. A
@@ -5977,6 +6064,9 @@ export {
   CLAUDE_HOST_WIDE,
   claudeStateDirFor,
   ensureClaudeStateLayout,
+  ensureTranscriptBindSources,
+  TRANSCRIPT_BIND_SENTINEL,
+  transcriptBindSourcesFor,
   configDirIsIsolationSafe,
   buildDockerRunCommand,
   writePersistentClaudeWrapper,
@@ -6023,4 +6113,4 @@ export {
   stopAllSessionsAndWait,
   getProjectDir
 };
-//# sourceMappingURL=chunk-OW6XCSOU.js.map
+//# sourceMappingURL=chunk-FHUYRSCF.js.map