@kaitranntt/ccs 7.50.0 → 7.51.0

package/dist/config/unified-config-types.js

@@ -10,7 +10,7 @@
  * Into a single config.yaml structure.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.isUnifiedConfig = exports.createEmptyUnifiedConfig = exports.DEFAULT_CLIPROXY_SERVER_CONFIG = exports.DEFAULT_CURSOR_CONFIG = exports.DEFAULT_COPILOT_CONFIG = exports.DEFAULT_IMAGE_ANALYSIS_CONFIG = exports.DEFAULT_DASHBOARD_AUTH_CONFIG = exports.DEFAULT_THINKING_CONFIG = exports.DEFAULT_THINKING_TIER_DEFAULTS = exports.DEFAULT_QUOTA_MANAGEMENT_CONFIG = exports.DEFAULT_RUNTIME_MONITOR_CONFIG = exports.DEFAULT_MANUAL_QUOTA_CONFIG = exports.DEFAULT_AUTO_QUOTA_CONFIG = exports.DEFAULT_GLOBAL_ENV = exports.CLIPROXY_SUPPORTED_PROVIDERS = exports.UNIFIED_CONFIG_VERSION = void 0;
+exports.isUnifiedConfig = exports.createEmptyUnifiedConfig = exports.DEFAULT_CLIPROXY_SERVER_CONFIG = exports.DEFAULT_CURSOR_CONFIG = exports.DEFAULT_COPILOT_CONFIG = exports.DEFAULT_IMAGE_ANALYSIS_CONFIG = exports.DEFAULT_DASHBOARD_AUTH_CONFIG = exports.DEFAULT_THINKING_CONFIG = exports.DEFAULT_THINKING_TIER_DEFAULTS = exports.DEFAULT_QUOTA_MANAGEMENT_CONFIG = exports.DEFAULT_RUNTIME_MONITOR_CONFIG = exports.DEFAULT_MANUAL_QUOTA_CONFIG = exports.DEFAULT_AUTO_QUOTA_CONFIG = exports.DEFAULT_GLOBAL_ENV = exports.DEFAULT_CLIPROXY_SAFETY_CONFIG = exports.CLIPROXY_SUPPORTED_PROVIDERS = exports.UNIFIED_CONFIG_VERSION = void 0;
 const provider_capabilities_1 = require("../cliproxy/provider-capabilities");
 /**
  * Unified config version.
@@ -28,6 +28,12 @@ exports.UNIFIED_CONFIG_VERSION = 8;
  * Derived from CLIPROXY_PROVIDER_IDS — single source of truth in provider-capabilities.ts.
  */
 exports.CLIPROXY_SUPPORTED_PROVIDERS = provider_capabilities_1.CLIPROXY_PROVIDER_IDS;
+/**
+ * Default CLIProxy safety configuration.
+ */
+exports.DEFAULT_CLIPROXY_SAFETY_CONFIG = {
+    antigravity_ack_bypass: false,
+};
 /**
  * Default global env vars for third-party profiles.
  * These disable Claude Code telemetry/reporting since we're using proxy.
@@ -185,6 +191,7 @@ function createEmptyUnifiedConfig() {
                 enabled: false,
                 request_log: false,
             },
+            safety: { ...exports.DEFAULT_CLIPROXY_SAFETY_CONFIG },
             auto_sync: true,
         },
         preferences: {

package/dist/config/unified-config-types.js.map

@@ -1 +1 @@
-{"version":3,"file":"unified-config-types.js","sourceRoot":"","sources":["../../src/config/unified-config-types.ts"],"names":[],"mappings":";AAAA;;;;;;;;;GASG;;;AAIH,6EAA0E;AAE1E;;;;;;;;;GASG;AACU,QAAA,sBAAsB,GAAG,CAAC,CAAC;AAExC;;;GAGG;AACU,QAAA,4BAA4B,GAAG,6CAAqB,CAAC;AAiXlE;;;GAGG;AACU,QAAA,kBAAkB,GAA2B;IACxD,mBAAmB,EAAE,GAAG;IACxB,uBAAuB,EAAE,GAAG;IAC5B,iBAAiB,EAAE,GAAG;CACvB,CAAC;AA0GF;;GAEG;AACU,QAAA,yBAAyB,GAAoB;IACxD,eAAe,EAAE,IAAI;IACrB,oBAAoB,EAAE,CAAC;IACvB,aAAa,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC;IACvC,gBAAgB,EAAE,CAAC;CACpB,CAAC;AAEF;;GAEG;AACU,QAAA,2BAA2B,GAAsB;IAC5D,eAAe,EAAE,EAAE;IACnB,cAAc,EAAE,IAAI;IACpB,SAAS,EAAE,IAAI;CAChB,CAAC;AAEF;;GAEG;AACU,QAAA,8BAA8B,GAAyB;IAClE,OAAO,EAAE,IAAI;IACb,uBAAuB,EAAE,GAAG;IAC5B,yBAAyB,EAAE,EAAE;IAC7B,cAAc,EAAE,EAAE;IAClB,oBAAoB,EAAE,CAAC;IACvB,gBAAgB,EAAE,CAAC;CACpB,CAAC;AAEF;;GAEG;AACU,QAAA,+BAA+B,GAA0B;IACpE,IAAI,EAAE,QAAQ;IACd,IAAI,EAAE,EAAE,GAAG,iCAAyB,EAAE;IACtC,MAAM,EAAE,EAAE,GAAG,mCAA2B,EAAE;IAC1C,eAAe,EAAE,EAAE,GAAG,sCAA8B,EAAE;CACvD,CAAC;AA4CF;;GAEG;AACU,QAAA,8BAA8B,GAAyB;IAClE,IAAI,EAAE,MAAM;IACZ,MAAM,EAAE,QAAQ;IAChB,KAAK,EAAE,KAAK;CACb,CAAC;AAEF;;GAEG;AACU,QAAA,uBAAuB,GAAmB;IACrD,IAAI,EAAE,MAAM;IACZ,aAAa,EAAE,EAAE,GAAG,sCAA8B,EAAE;IACpD,aAAa,EAAE,IAAI;CACpB,CAAC;AAkBF;;;GAGG;AACU,QAAA,6BAA6B,GAAwB;IAChE,OAAO,EAAE,KAAK;IACd,QAAQ,EAAE,EAAE;IACZ,aAAa,EAAE,EAAE;IACjB,qBAAqB,EAAE,EAAE;CAC1B,CAAC;AAeF;;;GAGG;AACU,QAAA,6BAA6B,GAAwB;IAChE,OAAO,EAAE,IAAI;IACb,OAAO,EAAE,EAAE;IACX,eAAe,EAAE;QACf,GAAG,EAAE,kBAAkB;QACvB,MAAM,EAAE,kBAAkB;QAC1B,KAAK,EAAE,oBAAoB;QAC3B,IAAI,EAAE,uBAAuB;QAC7B,IAAI,EAAE,kBAAkB;QACxB,MAAM,EAAE,2BAA2B;QACnC,+EAA+E;QAC/E,IAAI,EAAE,cAAc;QACpB,KAAK,EAAE,eAAe;QACtB,IAAI,EAAE,cAAc;KACrB;CACF,CAAC;AAyCF;;;;GAIG;AACU,QAAA,sBAAsB,GAAkB;IACnD,OAAO,EAAE,KAAK;IACd,UAAU,EAAE,KAAK;IACjB,IAAI,EAAE,IAAI;IACV,YAAY,EAAE,YAAY;IAC1B,UAAU,EAAE,IAAI;IAChB,aAAa,EAAE,IAAI;IACnB,KAAK,EAAE,SAAS,EAAE,uBAAuB;CAC1C,CAAC;AAEF;;;GAGG;AACU,QAAA,qBAAqB,GAAiB;IACjD,OAAO,EAAE,KAAK;IACd,IAAI,EAAE,KAAK;IACX,UAAU,EAAE,KAAK;IACjB,UAAU,EAAE,IAAI;IAChB,KAAK,EAAE,eAAe;CACvB,CAAC;AAEF;;;;GAIG;AACU,QAAA,8BAA8B,GAAyB;IAClE,MAAM,EAAE;QACN,OAAO,EAAE,KAAK;QACd,IAAI,EAAE,EAAE;QACR,2FAA2F;QAC3F,QAAQ,EAAE,MAAM;QAChB,UAAU,EAAE,EAAE;KACf;IACD,QAAQ,EAAE;QACR,OAAO,EAAE,IAAI;QACb,UAAU,EAAE,KAAK;KAClB;IACD,KAAK,EAAE;QACL,IAAI,EAAE,IAAI;QACV,UAAU,EAAE,IAAI;KACjB;CACF,CAAC;AAEF;;GAEG;AACH,SAAgB,wBAAwB;IACtC,OAAO;QACL,OAAO,EAAE,8BAAsB;QAC/B,OAAO,EAAE,SAAS;QAClB,QAAQ,EAAE,EAAE;QACZ,QAAQ,EAAE,EAAE;QACZ,QAAQ,EAAE;YACR,OAAO,EAAE,MAAM;YACf,cAAc,EAAE,EAAE;YAClB,SAAS,EAAE,CAAC,GAAG,oCAA4B,CAAC;YAC5C,QAAQ,EAAE,EAAE;YACZ,OAAO,EAAE;gBACP,OAAO,EAAE,KAAK;gBACd,WAAW,EAAE,KAAK;aACnB;YACD,SAAS,EAAE,IAAI;SAChB;QACD,WAAW,EAAE;YACX,KAAK,EAAE,QAAQ;YACf,SAAS,EAAE,KAAK;YAChB,WAAW,EAAE,IAAI;SAClB;QACD,SAAS,EAAE;YACT,OAAO,EAAE,IAAI;YACb,SAAS,EAAE;gBACT,MAAM,EAAE;oBACN,OAAO,EAAE,IAAI;oBACb,KAAK,EAAE,kBAAkB;oBACzB,OAAO,EAAE,EAAE;iBACZ;gBACD,QAAQ,EAAE;oBACR,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,oBAAoB;oBAC3B,OAAO,EAAE,EAAE;iBACZ;gBACD,IAAI,EAAE;oBACJ,OAAO,EAAE,KAAK;oBACd,OAAO,EAAE,EAAE;iBACZ;aACF;SACF;QACD,UAAU,EAAE;YACV,OAAO,EAAE,IAAI;YACb,GAAG,EAAE,EAAE,GAAG,0BAAkB,EAAE;SAC/B;QACD,OAAO,EAAE,EAAE,GAAG,8BAAsB,EAAE;QACtC,MAAM,EAAE,EAAE,GAAG,6BAAqB,EAAE;QACpC,eAAe,EAAE,EAAE,GAAG,sCAA8B,EAAE;QACtD,gBAAgB,EAAE,EAAE,GAAG,uCAA+B,EAAE;QACxD,QAAQ,EAAE,EAAE,GAAG,+BAAuB,EAAE;QACxC,cAAc,EAAE,EAAE,GAAG,qCAA6B,EAAE;QACpD,cAAc,EAAE,EAAE,GAAG,qCAA6B,EAAE;KACrD,CAAC;AACJ,CAAC;AArDD,4DAqDC;AAED;;;;GAIG;AACH,SAAgB,eAAe,CAAC,GAAY;IAC1C,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC1D,MAAM,MAAM,GAAG,GAA8B,CAAC;IAC9C,mEAAmE;IACnE,oFAAoF;IACpF,OAAO,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,IAAI,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC;AACnE,CAAC;AAND,0CAMC"}
+{"version":3,"file":"unified-config-types.js","sourceRoot":"","sources":["../../src/config/unified-config-types.ts"],"names":[],"mappings":";AAAA;;;;;;;;;GASG;;;AAIH,6EAA0E;AAE1E;;;;;;;;;GASG;AACU,QAAA,sBAAsB,GAAG,CAAC,CAAC;AAExC;;;GAGG;AACU,QAAA,4BAA4B,GAAG,6CAAqB,CAAC;AA8IlE;;GAEG;AACU,QAAA,8BAA8B,GAAyB;IAClE,sBAAsB,EAAE,KAAK;CAC9B,CAAC;AAkPF;;;GAGG;AACU,QAAA,kBAAkB,GAA2B;IACxD,mBAAmB,EAAE,GAAG;IACxB,uBAAuB,EAAE,GAAG;IAC5B,iBAAiB,EAAE,GAAG;CACvB,CAAC;AA0GF;;GAEG;AACU,QAAA,yBAAyB,GAAoB;IACxD,eAAe,EAAE,IAAI;IACrB,oBAAoB,EAAE,CAAC;IACvB,aAAa,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC;IACvC,gBAAgB,EAAE,CAAC;CACpB,CAAC;AAEF;;GAEG;AACU,QAAA,2BAA2B,GAAsB;IAC5D,eAAe,EAAE,EAAE;IACnB,cAAc,EAAE,IAAI;IACpB,SAAS,EAAE,IAAI;CAChB,CAAC;AAEF;;GAEG;AACU,QAAA,8BAA8B,GAAyB;IAClE,OAAO,EAAE,IAAI;IACb,uBAAuB,EAAE,GAAG;IAC5B,yBAAyB,EAAE,EAAE;IAC7B,cAAc,EAAE,EAAE;IAClB,oBAAoB,EAAE,CAAC;IACvB,gBAAgB,EAAE,CAAC;CACpB,CAAC;AAEF;;GAEG;AACU,QAAA,+BAA+B,GAA0B;IACpE,IAAI,EAAE,QAAQ;IACd,IAAI,EAAE,EAAE,GAAG,iCAAyB,EAAE;IACtC,MAAM,EAAE,EAAE,GAAG,mCAA2B,EAAE;IAC1C,eAAe,EAAE,EAAE,GAAG,sCAA8B,EAAE;CACvD,CAAC;AA4CF;;GAEG;AACU,QAAA,8BAA8B,GAAyB;IAClE,IAAI,EAAE,MAAM;IACZ,MAAM,EAAE,QAAQ;IAChB,KAAK,EAAE,KAAK;CACb,CAAC;AAEF;;GAEG;AACU,QAAA,uBAAuB,GAAmB;IACrD,IAAI,EAAE,MAAM;IACZ,aAAa,EAAE,EAAE,GAAG,sCAA8B,EAAE;IACpD,aAAa,EAAE,IAAI;CACpB,CAAC;AAkBF;;;GAGG;AACU,QAAA,6BAA6B,GAAwB;IAChE,OAAO,EAAE,KAAK;IACd,QAAQ,EAAE,EAAE;IACZ,aAAa,EAAE,EAAE;IACjB,qBAAqB,EAAE,EAAE;CAC1B,CAAC;AAeF;;;GAGG;AACU,QAAA,6BAA6B,GAAwB;IAChE,OAAO,EAAE,IAAI;IACb,OAAO,EAAE,EAAE;IACX,eAAe,EAAE;QACf,GAAG,EAAE,kBAAkB;QACvB,MAAM,EAAE,kBAAkB;QAC1B,KAAK,EAAE,oBAAoB;QAC3B,IAAI,EAAE,uBAAuB;QAC7B,IAAI,EAAE,kBAAkB;QACxB,MAAM,EAAE,2BAA2B;QACnC,+EAA+E;QAC/E,IAAI,EAAE,cAAc;QACpB,KAAK,EAAE,eAAe;QACtB,IAAI,EAAE,cAAc;KACrB;CACF,CAAC;AAyCF;;;;GAIG;AACU,QAAA,sBAAsB,GAAkB;IACnD,OAAO,EAAE,KAAK;IACd,UAAU,EAAE,KAAK;IACjB,IAAI,EAAE,IAAI;IACV,YAAY,EAAE,YAAY;IAC1B,UAAU,EAAE,IAAI;IAChB,aAAa,EAAE,IAAI;IACnB,KAAK,EAAE,SAAS,EAAE,uBAAuB;CAC1C,CAAC;AAEF;;;GAGG;AACU,QAAA,qBAAqB,GAAiB;IACjD,OAAO,EAAE,KAAK;IACd,IAAI,EAAE,KAAK;IACX,UAAU,EAAE,KAAK;IACjB,UAAU,EAAE,IAAI;IAChB,KAAK,EAAE,eAAe;CACvB,CAAC;AAEF;;;;GAIG;AACU,QAAA,8BAA8B,GAAyB;IAClE,MAAM,EAAE;QACN,OAAO,EAAE,KAAK;QACd,IAAI,EAAE,EAAE;QACR,2FAA2F;QAC3F,QAAQ,EAAE,MAAM;QAChB,UAAU,EAAE,EAAE;KACf;IACD,QAAQ,EAAE;QACR,OAAO,EAAE,IAAI;QACb,UAAU,EAAE,KAAK;KAClB;IACD,KAAK,EAAE;QACL,IAAI,EAAE,IAAI;QACV,UAAU,EAAE,IAAI;KACjB;CACF,CAAC;AAEF;;GAEG;AACH,SAAgB,wBAAwB;IACtC,OAAO;QACL,OAAO,EAAE,8BAAsB;QAC/B,OAAO,EAAE,SAAS;QAClB,QAAQ,EAAE,EAAE;QACZ,QAAQ,EAAE,EAAE;QACZ,QAAQ,EAAE;YACR,OAAO,EAAE,MAAM;YACf,cAAc,EAAE,EAAE;YAClB,SAAS,EAAE,CAAC,GAAG,oCAA4B,CAAC;YAC5C,QAAQ,EAAE,EAAE;YACZ,OAAO,EAAE;gBACP,OAAO,EAAE,KAAK;gBACd,WAAW,EAAE,KAAK;aACnB;YACD,MAAM,EAAE,EAAE,GAAG,sCAA8B,EAAE;YAC7C,SAAS,EAAE,IAAI;SAChB;QACD,WAAW,EAAE;YACX,KAAK,EAAE,QAAQ;YACf,SAAS,EAAE,KAAK;YAChB,WAAW,EAAE,IAAI;SAClB;QACD,SAAS,EAAE;YACT,OAAO,EAAE,IAAI;YACb,SAAS,EAAE;gBACT,MAAM,EAAE;oBACN,OAAO,EAAE,IAAI;oBACb,KAAK,EAAE,kBAAkB;oBACzB,OAAO,EAAE,EAAE;iBACZ;gBACD,QAAQ,EAAE;oBACR,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,oBAAoB;oBAC3B,OAAO,EAAE,EAAE;iBACZ;gBACD,IAAI,EAAE;oBACJ,OAAO,EAAE,KAAK;oBACd,OAAO,EAAE,EAAE;iBACZ;aACF;SACF;QACD,UAAU,EAAE;YACV,OAAO,EAAE,IAAI;YACb,GAAG,EAAE,EAAE,GAAG,0BAAkB,EAAE;SAC/B;QACD,OAAO,EAAE,EAAE,GAAG,8BAAsB,EAAE;QACtC,MAAM,EAAE,EAAE,GAAG,6BAAqB,EAAE;QACpC,eAAe,EAAE,EAAE,GAAG,sCAA8B,EAAE;QACtD,gBAAgB,EAAE,EAAE,GAAG,uCAA+B,EAAE;QACxD,QAAQ,EAAE,EAAE,GAAG,+BAAuB,EAAE;QACxC,cAAc,EAAE,EAAE,GAAG,qCAA6B,EAAE;QACpD,cAAc,EAAE,EAAE,GAAG,qCAA6B,EAAE;KACrD,CAAC;AACJ,CAAC;AAtDD,4DAsDC;AAED;;;;GAIG;AACH,SAAgB,eAAe,CAAC,GAAY;IAC1C,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC1D,MAAM,MAAM,GAAG,GAA8B,CAAC;IAC9C,mEAAmE;IACnE,oFAAoF;IACpF,OAAO,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,IAAI,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC;AACnE,CAAC;AAND,0CAMC"}

package/dist/management/instance-manager.d.ts

@@ -12,6 +12,7 @@ import { AccountContextPolicy } from '../auth/account-context';
 declare class InstanceManager {
     private readonly instancesDir;
     private readonly sharedManager;
+    private readonly contextSyncLock;
     constructor();
     /**
      * Ensure instance exists for profile (lazy init only)

package/dist/management/instance-manager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"instance-manager.d.ts","sourceRoot":"","sources":["../../src/management/instance-manager.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAKH,OAAO,EAAE,oBAAoB,EAAgC,MAAM,yBAAyB,CAAC;AAG7F;;GAEG;AACH,cAAM,eAAe;IACnB,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAS;IACtC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAgB;;IAO9C;;OAEG;IACG,cAAc,CAClB,WAAW,EAAE,MAAM,EACnB,aAAa,GAAE,oBAA6D,GAC3E,OAAO,CAAC,MAAM,CAAC;IAiBlB;;OAEG;IACH,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM;IAK5C;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAmC1B;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAuBxB;;OAEG;IACH,cAAc,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI;IAWzC;;OAEG;IACH,aAAa,IAAI,MAAM,EAAE;IAWzB;;OAEG;IACH,WAAW,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO;IAKzC;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAMzB;;OAEG;IAsBH;;OAEG;IACH,OAAO,CAAC,YAAY;CAIrB;AAED,OAAO,EAAE,eAAe,EAAE,CAAC;AAC3B,eAAe,eAAe,CAAC"}
+{"version":3,"file":"instance-manager.d.ts","sourceRoot":"","sources":["../../src/management/instance-manager.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAMH,OAAO,EAAE,oBAAoB,EAAgC,MAAM,yBAAyB,CAAC;AAG7F;;GAEG;AACH,cAAM,eAAe;IACnB,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAS;IACtC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAgB;IAC9C,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAyB;;IAQzD;;OAEG;IACG,cAAc,CAClB,WAAW,EAAE,MAAM,EACnB,aAAa,GAAE,oBAA6D,GAC3E,OAAO,CAAC,MAAM,CAAC;IAqBlB;;OAEG;IACH,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM;IAK5C;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAmC1B;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAuBxB;;OAEG;IACH,cAAc,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI;IAWzC;;OAEG;IACH,aAAa,IAAI,MAAM,EAAE;IAWzB;;OAEG;IACH,WAAW,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO;IAKzC;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAMzB;;OAEG;IAsBH;;OAEG;IACH,OAAO,CAAC,YAAY;CAIrB;AAED,OAAO,EAAE,eAAe,EAAE,CAAC;AAC3B,eAAe,eAAe,CAAC"}

package/dist/management/instance-manager.js

@@ -37,6 +37,7 @@ exports.InstanceManager = void 0;
 const fs = __importStar(require("fs"));
 const path = __importStar(require("path"));
 const shared_manager_1 = __importDefault(require("./shared-manager"));
+const profile_context_sync_lock_1 = __importDefault(require("./profile-context-sync-lock"));
 const account_context_1 = require("../auth/account-context");
 const config_manager_1 = require("../utils/config-manager");
 /**
@@ -46,20 +47,25 @@ class InstanceManager {
     constructor() {
         this.instancesDir = path.join((0, config_manager_1.getCcsDir)(), 'instances');
         this.sharedManager = new shared_manager_1.default();
+        this.contextSyncLock = new profile_context_sync_lock_1.default(this.instancesDir);
     }
     /**
      * Ensure instance exists for profile (lazy init only)
      */
     async ensureInstance(profileName, contextPolicy = { mode: account_context_1.DEFAULT_ACCOUNT_CONTEXT_MODE }) {
         const instancePath = this.getInstancePath(profileName);
-        // Lazy initialization
-        if (!fs.existsSync(instancePath)) {
-            this.initializeInstance(profileName, instancePath);
-        }
-        // Validate structure (auto-fix missing dirs)
-        this.validateInstance(instancePath);
-        // Apply context policy (isolated by default, optional shared group).
-        await this.sharedManager.syncProjectContext(instancePath, contextPolicy);
+        // Serialize context sync operations per profile across processes.
+        await this.contextSyncLock.withLock(profileName, async () => {
+            // Lazy initialization
+            if (!fs.existsSync(instancePath)) {
+                this.initializeInstance(profileName, instancePath);
+            }
+            // Validate structure (auto-fix missing dirs)
+            this.validateInstance(instancePath);
+            // Apply context policy (isolated by default, optional shared group).
+            await this.sharedManager.syncProjectContext(instancePath, contextPolicy);
+            await this.sharedManager.syncAdvancedContinuityArtifacts(instancePath, contextPolicy);
+        });
         return instancePath;
     }
     /**

package/dist/management/instance-manager.js.map

@@ -1 +1 @@
-{"version":3,"file":"instance-manager.js","sourceRoot":"","sources":["../../src/management/instance-manager.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,uCAAyB;AACzB,2CAA6B;AAC7B,sEAA6C;AAC7C,6DAA6F;AAC7F,4DAAoD;AAEpD;;GAEG;AACH,MAAM,eAAe;IAInB;QACE,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,IAAA,0BAAS,GAAE,EAAE,WAAW,CAAC,CAAC;QACxD,IAAI,CAAC,aAAa,GAAG,IAAI,wBAAa,EAAE,CAAC;IAC3C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,cAAc,CAClB,WAAmB,EACnB,gBAAsC,EAAE,IAAI,EAAE,8CAA4B,EAAE;QAE5E,MAAM,YAAY,GAAG,IAAI,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;QAEvD,sBAAsB;QACtB,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YACjC,IAAI,CAAC,kBAAkB,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;QACrD,CAAC;QAED,6CAA6C;QAC7C,IAAI,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC;QAEpC,qEAAqE;QACrE,MAAM,IAAI,CAAC,aAAa,CAAC,kBAAkB,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC;QAEzE,OAAO,YAAY,CAAC;IACtB,CAAC;IAED;;OAEG;IACH,eAAe,CAAC,WAAmB;QACjC,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC;QAChD,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IAChD,CAAC;IAED;;OAEG;IACK,kBAAkB,CAAC,WAAmB,EAAE,YAAoB;QAClE,IAAI,CAAC;YACH,wBAAwB;YACxB,EAAE,CAAC,SAAS,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAE7D,gEAAgE;YAChE,MAAM,OAAO,GAAG;gBACd,aAAa;gBACb,OAAO;gBACP,MAAM;gBACN,cAAc;gBACd,iBAAiB;gBACjB,OAAO;gBACP,YAAY;aACb,CAAC;YAEF,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;gBACtB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;gBAC7C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;oBAC5B,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;gBAC1D,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,yDAAyD;YACzD,IAAI,CAAC,aAAa,CAAC,qBAAqB,CAAC,YAAY,CAAC,CAAC;YAEvD,oDAAoD;YACpD,IAAI,CAAC,iBAAiB,CAAC,YAAY,CAAC,CAAC;QACvC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CACb,qCAAqC,WAAW,KAAM,KAAe,CAAC,OAAO,EAAE,CAChF,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACK,gBAAgB,CAAC,YAAoB;QAC3C,oEAAoE;QACpE,MAAM,YAAY,GAAG;YACnB,aAAa;YACb,OAAO;YACP,MAAM;YACN,cAAc;YACd,iBAAiB;YACjB,OAAO;YACP,YAAY;SACb,CAAC;QAEF,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;YAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;YAC7C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC5B,gEAAgE;gBAChE,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAC1D,CAAC;QACH,CAAC;QAED,6EAA6E;IAC/E,CAAC;IAED;;OAEG;IACH,cAAc,CAAC,WAAmB;QAChC,MAAM,YAAY,GAAG,IAAI,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;QAEvD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YACjC,OAAO;QACT,CAAC;QAED,mBAAmB;QACnB,EAAE,CAAC,MAAM,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,CAAC;IAED;;OAEG;IACH,aAAa;QACX,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;YACtC,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,OAAO,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;YACvD,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;YACxD,OAAO,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,WAAW,EAAE,CAAC;QACjD,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,WAAmB;QAC7B,MAAM,YAAY,GAAG,IAAI,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;QACvD,OAAO,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IACrC,CAAC;IAED;;OAEG;IACK,iBAAiB,CAAC,aAAqB;QAC7C,mEAAmE;QACnE,mEAAmE;QACnE,yCAAyC;IAC3C,CAAC;IAED;;OAEG;IACH;;;;;;;;;;;;;;;;;;;MAmBE;IAEF;;OAEG;IACK,YAAY,CAAC,IAAY;QAC/B,sCAAsC;QACtC,OAAO,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;IAC5D,CAAC;CACF;AAEQ,0CAAe;AACxB,kBAAe,eAAe,CAAC"}
+{"version":3,"file":"instance-manager.js","sourceRoot":"","sources":["../../src/management/instance-manager.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,uCAAyB;AACzB,2CAA6B;AAC7B,sEAA6C;AAC7C,4FAAiE;AACjE,6DAA6F;AAC7F,4DAAoD;AAEpD;;GAEG;AACH,MAAM,eAAe;IAKnB;QACE,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,IAAA,0BAAS,GAAE,EAAE,WAAW,CAAC,CAAC;QACxD,IAAI,CAAC,aAAa,GAAG,IAAI,wBAAa,EAAE,CAAC;QACzC,IAAI,CAAC,eAAe,GAAG,IAAI,mCAAsB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACvE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,cAAc,CAClB,WAAmB,EACnB,gBAAsC,EAAE,IAAI,EAAE,8CAA4B,EAAE;QAE5E,MAAM,YAAY,GAAG,IAAI,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;QAEvD,kEAAkE;QAClE,MAAM,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,IAAI,EAAE;YAC1D,sBAAsB;YACtB,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;gBACjC,IAAI,CAAC,kBAAkB,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;YACrD,CAAC;YAED,6CAA6C;YAC7C,IAAI,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC;YAEpC,qEAAqE;YACrE,MAAM,IAAI,CAAC,aAAa,CAAC,kBAAkB,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC;YACzE,MAAM,IAAI,CAAC,aAAa,CAAC,+BAA+B,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC;QACxF,CAAC,CAAC,CAAC;QAEH,OAAO,YAAY,CAAC;IACtB,CAAC;IAED;;OAEG;IACH,eAAe,CAAC,WAAmB;QACjC,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC;QAChD,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IAChD,CAAC;IAED;;OAEG;IACK,kBAAkB,CAAC,WAAmB,EAAE,YAAoB;QAClE,IAAI,CAAC;YACH,wBAAwB;YACxB,EAAE,CAAC,SAAS,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAE7D,gEAAgE;YAChE,MAAM,OAAO,GAAG;gBACd,aAAa;gBACb,OAAO;gBACP,MAAM;gBACN,cAAc;gBACd,iBAAiB;gBACjB,OAAO;gBACP,YAAY;aACb,CAAC;YAEF,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;gBACtB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;gBAC7C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;oBAC5B,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;gBAC1D,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,yDAAyD;YACzD,IAAI,CAAC,aAAa,CAAC,qBAAqB,CAAC,YAAY,CAAC,CAAC;YAEvD,oDAAoD;YACpD,IAAI,CAAC,iBAAiB,CAAC,YAAY,CAAC,CAAC;QACvC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CACb,qCAAqC,WAAW,KAAM,KAAe,CAAC,OAAO,EAAE,CAChF,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACK,gBAAgB,CAAC,YAAoB;QAC3C,oEAAoE;QACpE,MAAM,YAAY,GAAG;YACnB,aAAa;YACb,OAAO;YACP,MAAM;YACN,cAAc;YACd,iBAAiB;YACjB,OAAO;YACP,YAAY;SACb,CAAC;QAEF,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;YAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;YAC7C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC5B,gEAAgE;gBAChE,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAC1D,CAAC;QACH,CAAC;QAED,6EAA6E;IAC/E,CAAC;IAED;;OAEG;IACH,cAAc,CAAC,WAAmB;QAChC,MAAM,YAAY,GAAG,IAAI,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;QAEvD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YACjC,OAAO;QACT,CAAC;QAED,mBAAmB;QACnB,EAAE,CAAC,MAAM,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,CAAC;IAED;;OAEG;IACH,aAAa;QACX,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;YACtC,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,OAAO,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;YACvD,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;YACxD,OAAO,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,WAAW,EAAE,CAAC;QACjD,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,WAAmB;QAC7B,MAAM,YAAY,GAAG,IAAI,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;QACvD,OAAO,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IACrC,CAAC;IAED;;OAEG;IACK,iBAAiB,CAAC,aAAqB;QAC7C,mEAAmE;QACnE,mEAAmE;QACnE,yCAAyC;IAC3C,CAAC;IAED;;OAEG;IACH;;;;;;;;;;;;;;;;;;;MAmBE;IAEF;;OAEG;IACK,YAAY,CAAC,IAAY;QAC/B,sCAAsC;QACtC,OAAO,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;IAC5D,CAAC;CACF;AAEQ,0CAAe;AACxB,kBAAe,eAAe,CAAC"}

package/dist/management/profile-context-sync-lock.d.ts

@@ -0,0 +1,14 @@
+declare class ProfileContextSyncLock {
+    private readonly locksDir;
+    constructor(instancesDir: string);
+    private sanitizeName;
+    private getLockPath;
+    private isProcessAlive;
+    private parseContextSyncLock;
+    private readContextSyncLockSnapshot;
+    private tryRemoveLockIfUnchanged;
+    private tryRemoveDeadOwnerLock;
+    withLock<T>(profileName: string, callback: () => Promise<T>): Promise<T>;
+}
+export default ProfileContextSyncLock;
+//# sourceMappingURL=profile-context-sync-lock.d.ts.map

package/dist/management/profile-context-sync-lock.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile-context-sync-lock.d.ts","sourceRoot":"","sources":["../../src/management/profile-context-sync-lock.ts"],"names":[],"mappings":"AAgBA,cAAM,sBAAsB;IAC1B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;gBAEtB,YAAY,EAAE,MAAM;IAIhC,OAAO,CAAC,YAAY;IAIpB,OAAO,CAAC,WAAW;IAMnB,OAAO,CAAC,cAAc;IAgBtB,OAAO,CAAC,oBAAoB;IAuB5B,OAAO,CAAC,2BAA2B;IAenC,OAAO,CAAC,wBAAwB;IAahC,OAAO,CAAC,sBAAsB;IAQxB,QAAQ,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;CAkE/E;AAED,eAAe,sBAAsB,CAAC"}

package/dist/management/profile-context-sync-lock.js

@@ -0,0 +1,174 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const crypto_1 = require("crypto");
+class ProfileContextSyncLock {
+    constructor(instancesDir) {
+        this.locksDir = path.join(instancesDir, '.locks');
+    }
+    sanitizeName(name) {
+        return name.replace(/[^a-zA-Z0-9_-]/g, '-').toLowerCase();
+    }
+    getLockPath(profileName) {
+        const safeName = this.sanitizeName(profileName);
+        const profileHash = (0, crypto_1.createHash)('sha1').update(profileName).digest('hex').slice(0, 8);
+        return path.join(this.locksDir, `${safeName}-${profileHash}.lock`);
+    }
+    isProcessAlive(pid) {
+        if (!Number.isInteger(pid) || pid <= 0) {
+            return false;
+        }
+        try {
+            process.kill(pid, 0);
+            return true;
+        }
+        catch (error) {
+            if (error.code === 'EPERM') {
+                return true;
+            }
+            return false;
+        }
+    }
+    parseContextSyncLock(raw) {
+        const trimmed = raw.trim();
+        if (trimmed.length === 0) {
+            return null;
+        }
+        try {
+            const parsed = JSON.parse(trimmed);
+            if (typeof parsed.pid === 'number' && Number.isInteger(parsed.pid) && parsed.pid > 0) {
+                const nonce = typeof parsed.nonce === 'string' && parsed.nonce.length > 0 ? parsed.nonce : undefined;
+                return { pid: parsed.pid, nonce };
+            }
+        }
+        catch {
+            const legacyPid = Number.parseInt(trimmed, 10);
+            if (Number.isInteger(legacyPid) && legacyPid > 0) {
+                return { pid: legacyPid };
+            }
+        }
+        return null;
+    }
+    readContextSyncLockSnapshot(lockPath) {
+        try {
+            const raw = fs.readFileSync(lockPath, 'utf8');
+            return {
+                raw,
+                owner: this.parseContextSyncLock(raw),
+            };
+        }
+        catch (error) {
+            if (error.code === 'ENOENT') {
+                return null;
+            }
+            return null;
+        }
+    }
+    tryRemoveLockIfUnchanged(lockPath, expectedRaw) {
+        try {
+            const currentRaw = fs.readFileSync(lockPath, 'utf8');
+            if (currentRaw !== expectedRaw) {
+                return false;
+            }
+            fs.unlinkSync(lockPath);
+            return true;
+        }
+        catch {
+            return false;
+        }
+    }
+    tryRemoveDeadOwnerLock(lockPath, snapshot) {
+        if (!snapshot.owner || this.isProcessAlive(snapshot.owner.pid)) {
+            return false;
+        }
+        return this.tryRemoveLockIfUnchanged(lockPath, snapshot.raw);
+    }
+    async withLock(profileName, callback) {
+        const lockPath = this.getLockPath(profileName);
+        const retryDelayMs = 50;
+        const staleLockMs = 30000;
+        const timeoutMs = staleLockMs + 5000;
+        const start = Date.now();
+        const ownerPayload = {
+            version: 1,
+            pid: process.pid,
+            nonce: (0, crypto_1.createHash)('sha1')
+                .update(`${process.pid}:${Date.now()}:${Math.random()}`)
+                .digest('hex')
+                .slice(0, 16),
+            acquiredAtMs: Date.now(),
+        };
+        const ownerPayloadRaw = JSON.stringify(ownerPayload);
+        fs.mkdirSync(this.locksDir, { recursive: true, mode: 0o700 });
+        while (true) {
+            try {
+                const fd = fs.openSync(lockPath, 'wx', 0o600);
+                fs.writeFileSync(fd, ownerPayloadRaw, 'utf8');
+                fs.closeSync(fd);
+                break;
+            }
+            catch (error) {
+                const err = error;
+                if (err.code !== 'EEXIST') {
+                    throw error;
+                }
+                const lockSnapshot = this.readContextSyncLockSnapshot(lockPath);
+                if (lockSnapshot) {
+                    if (this.tryRemoveDeadOwnerLock(lockPath, lockSnapshot)) {
+                        continue;
+                    }
+                    // For malformed lock payloads, fall back to age-based stale cleanup.
+                    if (!lockSnapshot.owner) {
+                        try {
+                            const lockStats = fs.statSync(lockPath);
+                            if (Date.now() - lockStats.mtimeMs > staleLockMs) {
+                                if (this.tryRemoveLockIfUnchanged(lockPath, lockSnapshot.raw)) {
+                                    continue;
+                                }
+                            }
+                        }
+                        catch {
+                            // Best-effort stale lock cleanup.
+                        }
+                    }
+                }
+                if (Date.now() - start > timeoutMs) {
+                    throw new Error(`Timed out waiting for profile context lock: ${profileName}`);
+                }
+                await new Promise((resolve) => setTimeout(resolve, retryDelayMs));
+            }
+        }
+        try {
+            return await callback();
+        }
+        finally {
+            this.tryRemoveLockIfUnchanged(lockPath, ownerPayloadRaw);
+        }
+    }
+}
+exports.default = ProfileContextSyncLock;
+//# sourceMappingURL=profile-context-sync-lock.js.map

package/dist/management/profile-context-sync-lock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile-context-sync-lock.js","sourceRoot":"","sources":["../../src/management/profile-context-sync-lock.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAAA,uCAAyB;AACzB,2CAA6B;AAC7B,mCAAoC;AAcpC,MAAM,sBAAsB;IAG1B,YAAY,YAAoB;QAC9B,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IACpD,CAAC;IAEO,YAAY,CAAC,IAAY;QAC/B,OAAO,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;IAC5D,CAAC;IAEO,WAAW,CAAC,WAAmB;QACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC;QAChD,MAAM,WAAW,GAAG,IAAA,mBAAU,EAAC,MAAM,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACrF,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,QAAQ,IAAI,WAAW,OAAO,CAAC,CAAC;IACrE,CAAC;IAEO,cAAc,CAAC,GAAW;QAChC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC;YACvC,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YACrB,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;gBACtD,OAAO,IAAI,CAAC;YACd,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAEO,oBAAoB,CAAC,GAAW;QACtC,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QAC3B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAoC,CAAC;YACtE,IAAI,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,GAAG,GAAG,CAAC,EAAE,CAAC;gBACrF,MAAM,KAAK,GACT,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;gBACzF,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC;YACpC,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YAC/C,IAAI,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;gBACjD,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC;YAC5B,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,2BAA2B,CAAC,QAAgB;QAClD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YAC9C,OAAO;gBACL,GAAG;gBACH,KAAK,EAAE,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC;aACtC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACvD,OAAO,IAAI,CAAC;YACd,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAEO,wBAAwB,CAAC,QAAgB,EAAE,WAAmB;QACpE,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YACrD,IAAI,UAAU,KAAK,WAAW,EAAE,CAAC;gBAC/B,OAAO,KAAK,CAAC;YACf,CAAC;YACD,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;YACxB,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAEO,sBAAsB,CAAC,QAAgB,EAAE,QAAiC;QAChF,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/D,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,IAAI,CAAC,wBAAwB,CAAC,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC/D,CAAC;IAED,KAAK,CAAC,QAAQ,CAAI,WAAmB,EAAE,QAA0B;QAC/D,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;QAC/C,MAAM,YAAY,GAAG,EAAE,CAAC;QACxB,MAAM,WAAW,GAAG,KAAK,CAAC;QAC1B,MAAM,SAAS,GAAG,WAAW,GAAG,IAAI,CAAC;QACrC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACzB,MAAM,YAAY,GAA2B;YAC3C,OAAO,EAAE,CAAC;YACV,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,KAAK,EAAE,IAAA,mBAAU,EAAC,MAAM,CAAC;iBACtB,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;iBACvD,MAAM,CAAC,KAAK,CAAC;iBACb,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;YACf,YAAY,EAAE,IAAI,CAAC,GAAG,EAAE;SACzB,CAAC;QACF,MAAM,eAAe,GAAG,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;QAErD,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAE9D,OAAO,IAAI,EAAE,CAAC;YACZ,IAAI,CAAC;gBACH,MAAM,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;gBAC9C,EAAE,CAAC,aAAa,CAAC,EAAE,EAAE,eAAe,EAAE,MAAM,CAAC,CAAC;gBAC9C,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;gBACjB,MAAM;YACR,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,GAAG,GAAG,KAA8B,CAAC;gBAC3C,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;oBAC1B,MAAM,KAAK,CAAC;gBACd,CAAC;gBAED,MAAM,YAAY,GAAG,IAAI,CAAC,2BAA2B,CAAC,QAAQ,CAAC,CAAC;gBAChE,IAAI,YAAY,EAAE,CAAC;oBACjB,IAAI,IAAI,CAAC,sBAAsB,CAAC,QAAQ,EAAE,YAAY,CAAC,EAAE,CAAC;wBACxD,SAAS;oBACX,CAAC;oBAED,qEAAqE;oBACrE,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;wBACxB,IAAI,CAAC;4BACH,MAAM,SAAS,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;4BACxC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,OAAO,GAAG,WAAW,EAAE,CAAC;gCACjD,IAAI,IAAI,CAAC,wBAAwB,CAAC,QAAQ,EAAE,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC;oCAC9D,SAAS;gCACX,CAAC;4BACH,CAAC;wBACH,CAAC;wBAAC,MAAM,CAAC;4BACP,kCAAkC;wBACpC,CAAC;oBACH,CAAC;gBACH,CAAC;gBAED,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,GAAG,SAAS,EAAE,CAAC;oBACnC,MAAM,IAAI,KAAK,CAAC,+CAA+C,WAAW,EAAE,CAAC,CAAC;gBAChF,CAAC;gBAED,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC;YACpE,CAAC;QACH,CAAC;QAED,IAAI,CAAC;YACH,OAAO,MAAM,QAAQ,EAAE,CAAC;QAC1B,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,wBAAwB,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;CACF;AAED,kBAAe,sBAAsB,CAAC"}

package/dist/management/shared-manager.d.ts

@@ -15,6 +15,7 @@ declare class SharedManager {
     private readonly claudeDir;
     private readonly instancesDir;
     private readonly sharedItems;
+    private readonly advancedContinuityItems;
     constructor();
     /**
      * Detect circular symlink before creation
@@ -36,6 +37,13 @@ declare class SharedManager {
      * - shared: profile ./projects becomes symlink to shared context group root.
      */
     syncProjectContext(instancePath: string, policy: AccountContextPolicy): Promise<void>;
+    /**
+     * Sync advanced continuity artifacts for shared deeper mode.
+     *
+     * - shared + deeper: artifacts are linked per context group.
+     * - shared + standard / isolated: artifacts stay local to instance.
+     */
+    syncAdvancedContinuityArtifacts(instancePath: string, policy: AccountContextPolicy): Promise<void>;
     /**
      * Ensure all project memory directories for an instance are shared.
      *
@@ -77,6 +85,14 @@ declare class SharedManager {
      * Resolve symlink target to absolute path.
      */
     private resolveSymlinkTargetPath;
+    /**
+     * Guard project merge operations to known CCS-managed roots only.
+     */
+    private isSafeProjectsMergeSource;
+    /**
+     * Guard advanced continuity merge operations to known CCS-managed roots only.
+     */
+    private isSafeContinuityMergeSource;
     /**
      * Link directory with Windows fallback to recursive copy.
      */
@@ -103,6 +119,8 @@ declare class SharedManager {
      * Build a non-destructive conflict copy path.
      */
     private getConflictCopyPath;
+    private resolveCanonicalPath;
+    private isPathWithinDirectory;
     private pathExists;
     private ensureDirectory;
     private getLstat;

package/dist/management/shared-manager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"shared-manager.d.ts","sourceRoot":"","sources":["../../src/management/shared-manager.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAMH,OAAO,EAAE,oBAAoB,EAAiC,MAAM,yBAAyB,CAAC;AAQ9F;;GAEG;AACH,cAAM,aAAa;IACjB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAS;IACtC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAe;;IAiB3C;;OAEG;IACH,OAAO,CAAC,qBAAqB;IA8B7B;;;OAGG;IACH,uBAAuB,IAAI,IAAI;IA8E/B;;OAEG;IACH,qBAAqB,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI;IAyCjD;;;;;OAKG;IACG,kBAAkB,CAAC,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC;IA0F3F;;;;;;;;OAQG;IACG,mBAAmB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAmF9D;;;;;;OAMG;IACH,4BAA4B,IAAI,IAAI;IA4BpC;;;OAGG;IACH,eAAe,IAAI,IAAI;IAoGvB;;;OAGG;IACH,uBAAuB,IAAI,IAAI;IA4E/B;;;OAGG;YACW,uBAAuB;IAkCrC;;OAEG;YACW,eAAe;IAgB7B;;OAEG;YACW,wBAAwB;IAStC;;OAEG;YACW,yBAAyB;IAmBvC;;;OAGG;YACW,6BAA6B;IA4C3C;;OAEG;YACW,aAAa;IAc3B;;;OAGG;YACW,gCAAgC;IA0C9C;;OAEG;YACW,iBAAiB;IAiB/B;;OAEG;YACW,mBAAmB;YAiBnB,UAAU;YASV,eAAe;YAIf,QAAQ;IAWtB;;OAEG;IACH,OAAO,CAAC,qBAAqB;CAuB9B;AAED,eAAe,aAAa,CAAC"}
+{"version":3,"file":"shared-manager.d.ts","sourceRoot":"","sources":["../../src/management/shared-manager.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAMH,OAAO,EAAE,oBAAoB,EAAiC,MAAM,yBAAyB,CAAC;AAQ9F;;GAEG;AACH,cAAM,aAAa;IACjB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAS;IACtC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAe;IAC3C,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CAKtC;;IAiBF;;OAEG;IACH,OAAO,CAAC,qBAAqB;IAoC7B;;;OAGG;IACH,uBAAuB,IAAI,IAAI;IA8E/B;;OAEG;IACH,qBAAqB,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI;IAyCjD;;;;;OAKG;IACG,kBAAkB,CAAC,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC;IAoG3F;;;;;OAKG;IACG,+BAA+B,CACnC,YAAY,EAAE,MAAM,EACpB,MAAM,EAAE,oBAAoB,GAC3B,OAAO,CAAC,IAAI,CAAC;IAsHhB;;;;;;;;OAQG;IACG,mBAAmB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAmF9D;;;;;;OAMG;IACH,4BAA4B,IAAI,IAAI;IA4BpC;;;OAGG;IACH,eAAe,IAAI,IAAI;IAoGvB;;;OAGG;IACH,uBAAuB,IAAI,IAAI;IA4E/B;;;OAGG;YACW,uBAAuB;IAkCrC;;OAEG;YACW,eAAe;IAgB7B;;OAEG;YACW,wBAAwB;IAStC;;OAEG;IACH,OAAO,CAAC,yBAAyB;IAejC;;OAEG;IACH,OAAO,CAAC,2BAA2B;IA6BnC;;OAEG;YACW,yBAAyB;IAmBvC;;;OAGG;YACW,6BAA6B;IAiD3C;;OAEG;YACW,aAAa;IAc3B;;;OAGG;YACW,gCAAgC;IA0C9C;;OAEG;YACW,iBAAiB;IAiB/B;;OAEG;YACW,mBAAmB;IAiBjC,OAAO,CAAC,oBAAoB;IAQ5B,OAAO,CAAC,qBAAqB;YAaf,UAAU;YASV,eAAe;YAIf,QAAQ;IAWtB;;OAEG;IACH,OAAO,CAAC,qBAAqB;CAuB9B;AAED,eAAe,aAAa,CAAC"}

package/dist/management/shared-manager.js

@@ -41,6 +41,12 @@ const config_manager_1 = require("../utils/config-manager");
  */
 class SharedManager {
     constructor() {
+        this.advancedContinuityItems = [
+            'session-env',
+            'file-history',
+            'shell-snapshots',
+            'todos',
+        ];
         this.homeDir = os.homedir();
         const ccsDir = (0, config_manager_1.getCcsDir)();
         this.sharedDir = path.join(ccsDir, 'shared');
@@ -71,8 +77,11 @@ class SharedManager {
             const targetLink = fs.readlinkSync(target);
             const resolvedTarget = path.resolve(path.dirname(target), targetLink);
             // Check if target points back to our shared dir or link path
-            const sharedDir = path.join((0, config_manager_1.getCcsDir)(), 'shared');
-            if (resolvedTarget.startsWith(sharedDir) || resolvedTarget === linkPath) {
+            const sharedDir = this.resolveCanonicalPath(path.join((0, config_manager_1.getCcsDir)(), 'shared'));
+            const canonicalResolvedTarget = this.resolveCanonicalPath(resolvedTarget);
+            const canonicalLinkPath = this.resolveCanonicalPath(linkPath);
+            if (this.isPathWithinDirectory(canonicalResolvedTarget, sharedDir) ||
+                canonicalResolvedTarget === canonicalLinkPath) {
                 console.log((0, ui_1.warn)(`Circular symlink detected: ${target} → ${resolvedTarget}`));
                 return true;
             }
@@ -229,9 +238,13 @@ class SharedManager {
                 const currentTarget = await this.resolveSymlinkTargetPath(projectsPath);
                 if (currentTarget &&
                     path.resolve(currentTarget) !== path.resolve(sharedProjectsPath) &&
+                    this.isSafeProjectsMergeSource(currentTarget, instanceName) &&
                     (await this.pathExists(currentTarget))) {
                     await this.mergeDirectoryWithConflictCopies(currentTarget, sharedProjectsPath, instanceName);
                 }
+                else if (currentTarget && !this.isSafeProjectsMergeSource(currentTarget, instanceName)) {
+                    console.log((0, ui_1.warn)(`Skipping unsafe project merge source outside CCS roots: ${currentTarget}`));
+                }
                 await fs.promises.unlink(projectsPath);
                 await this.linkDirectoryWithFallback(sharedProjectsPath, projectsPath);
                 return;
@@ -262,14 +275,96 @@ class SharedManager {
             await this.ensureDirectory(projectsPath);
             if (currentTarget &&
                 path.resolve(currentTarget) !== path.resolve(projectsPath) &&
+                this.isSafeProjectsMergeSource(currentTarget, instanceName) &&
                 (await this.pathExists(currentTarget))) {
                 await this.mergeDirectoryWithConflictCopies(currentTarget, projectsPath, instanceName);
             }
+            else if (currentTarget && !this.isSafeProjectsMergeSource(currentTarget, instanceName)) {
+                console.log((0, ui_1.warn)(`Skipping unsafe project merge source outside CCS roots: ${currentTarget}`));
+            }
             return;
         }
         await fs.promises.rm(projectsPath, { force: true });
         await this.ensureDirectory(projectsPath);
     }
+    /**
+     * Sync advanced continuity artifacts for shared deeper mode.
+     *
+     * - shared + deeper: artifacts are linked per context group.
+     * - shared + standard / isolated: artifacts stay local to instance.
+     */
+    async syncAdvancedContinuityArtifacts(instancePath, policy) {
+        const instanceName = path.basename(instancePath);
+        const useSharedContinuity = policy.mode === 'shared' && policy.continuityMode === 'deeper';
+        const contextGroup = policy.group || account_context_1.DEFAULT_ACCOUNT_CONTEXT_GROUP;
+        for (const artifactName of this.advancedContinuityItems) {
+            const instanceArtifactPath = path.join(instancePath, artifactName);
+            if (useSharedContinuity) {
+                const sharedArtifactPath = path.join(this.sharedDir, 'context-groups', contextGroup, 'continuity', artifactName);
+                await this.ensureDirectory(sharedArtifactPath);
+                await this.ensureDirectory(path.dirname(instanceArtifactPath));
+                const currentStats = await this.getLstat(instanceArtifactPath);
+                if (!currentStats) {
+                    await this.linkDirectoryWithFallback(sharedArtifactPath, instanceArtifactPath);
+                    continue;
+                }
+                if (currentStats.isSymbolicLink()) {
+                    if (await this.isSymlinkTarget(instanceArtifactPath, sharedArtifactPath)) {
+                        continue;
+                    }
+                    const currentTarget = await this.resolveSymlinkTargetPath(instanceArtifactPath);
+                    if (currentTarget &&
+                        path.resolve(currentTarget) !== path.resolve(sharedArtifactPath) &&
+                        this.isSafeContinuityMergeSource(currentTarget, instanceName, artifactName) &&
+                        (await this.pathExists(currentTarget))) {
+                        await this.mergeDirectoryWithConflictCopies(currentTarget, sharedArtifactPath, instanceName);
+                    }
+                    else if (currentTarget &&
+                        !this.isSafeContinuityMergeSource(currentTarget, instanceName, artifactName)) {
+                        console.log((0, ui_1.warn)(`Skipping unsafe ${artifactName} merge source outside CCS roots: ${currentTarget}`));
+                    }
+                    await fs.promises.unlink(instanceArtifactPath);
+                    await this.linkDirectoryWithFallback(sharedArtifactPath, instanceArtifactPath);
+                    continue;
+                }
+                if (currentStats.isDirectory()) {
+                    await this.mergeDirectoryWithConflictCopies(instanceArtifactPath, sharedArtifactPath, instanceName);
+                    await fs.promises.rm(instanceArtifactPath, { recursive: true, force: true });
+                    await this.linkDirectoryWithFallback(sharedArtifactPath, instanceArtifactPath);
+                    continue;
+                }
+                await fs.promises.rm(instanceArtifactPath, { force: true });
+                await this.linkDirectoryWithFallback(sharedArtifactPath, instanceArtifactPath);
+                continue;
+            }
+            const currentStats = await this.getLstat(instanceArtifactPath);
+            if (!currentStats) {
+                await this.ensureDirectory(instanceArtifactPath);
+                continue;
+            }
+            if (currentStats.isDirectory()) {
+                continue;
+            }
+            if (currentStats.isSymbolicLink()) {
+                const currentTarget = await this.resolveSymlinkTargetPath(instanceArtifactPath);
+                await fs.promises.unlink(instanceArtifactPath);
+                await this.ensureDirectory(instanceArtifactPath);
+                if (currentTarget &&
+                    path.resolve(currentTarget) !== path.resolve(instanceArtifactPath) &&
+                    this.isSafeContinuityMergeSource(currentTarget, instanceName, artifactName) &&
+                    (await this.pathExists(currentTarget))) {
+                    await this.mergeDirectoryWithConflictCopies(currentTarget, instanceArtifactPath, instanceName);
+                }
+                else if (currentTarget &&
+                    !this.isSafeContinuityMergeSource(currentTarget, instanceName, artifactName)) {
+                    console.log((0, ui_1.warn)(`Skipping unsafe ${artifactName} merge source outside CCS roots: ${currentTarget}`));
+                }
+                continue;
+            }
+            await fs.promises.rm(instanceArtifactPath, { force: true });
+            await this.ensureDirectory(instanceArtifactPath);
+        }
+    }
     /**
      * Ensure all project memory directories for an instance are shared.
      *
@@ -600,6 +695,31 @@ class SharedManager {
             return null;
         }
     }
+    /**
+     * Guard project merge operations to known CCS-managed roots only.
+     */
+    isSafeProjectsMergeSource(sourcePath, instanceName) {
+        const resolvedSource = this.resolveCanonicalPath(sourcePath);
+        const sharedContextRoot = this.resolveCanonicalPath(path.join(this.sharedDir, 'context-groups'));
+        const instanceProjectsRoot = this.resolveCanonicalPath(path.join(this.instancesDir, instanceName, 'projects'));
+        return (this.isPathWithinDirectory(resolvedSource, sharedContextRoot) ||
+            this.isPathWithinDirectory(resolvedSource, instanceProjectsRoot));
+    }
+    /**
+     * Guard advanced continuity merge operations to known CCS-managed roots only.
+     */
+    isSafeContinuityMergeSource(sourcePath, instanceName, artifactName) {
+        const resolvedSource = this.resolveCanonicalPath(sourcePath);
+        const sharedContextRoot = this.resolveCanonicalPath(path.join(this.sharedDir, 'context-groups'));
+        const instanceArtifactRoot = this.resolveCanonicalPath(path.join(this.instancesDir, instanceName, artifactName));
+        const normalizedSource = process.platform === 'win32' ? resolvedSource.toLowerCase() : resolvedSource;
+        const continuitySegment = process.platform === 'win32'
+            ? `${path.sep}continuity${path.sep}`.toLowerCase()
+            : `${path.sep}continuity${path.sep}`;
+        const withinSharedContinuity = this.isPathWithinDirectory(resolvedSource, sharedContextRoot) &&
+            normalizedSource.includes(continuitySegment);
+        return (withinSharedContinuity || this.isPathWithinDirectory(resolvedSource, instanceArtifactRoot));
+    }
     /**
      * Link directory with Windows fallback to recursive copy.
      */
@@ -623,7 +743,7 @@ class SharedManager {
      * This preserves data while restoring true profile isolation.
      */
     async detachLegacySharedMemoryLinks(projectsPath, instanceName) {
-        const sharedMemoryRoot = path.resolve(path.join(this.sharedDir, 'memory'));
+        const sharedMemoryRoot = this.resolveCanonicalPath(path.join(this.sharedDir, 'memory'));
         let projectEntries = [];
         try {
             projectEntries = await fs.promises.readdir(projectsPath, { withFileTypes: true });
@@ -645,13 +765,14 @@ class SharedManager {
             if (!memoryTarget) {
                 continue;
             }
-            if (!path.resolve(memoryTarget).startsWith(sharedMemoryRoot)) {
+            const canonicalMemoryTarget = this.resolveCanonicalPath(memoryTarget);
+            if (!this.isPathWithinDirectory(canonicalMemoryTarget, sharedMemoryRoot)) {
                 continue;
             }
             await fs.promises.unlink(memoryPath);
             await this.ensureDirectory(memoryPath);
-            if (await this.pathExists(memoryTarget)) {
-                await this.mergeDirectoryWithConflictCopies(memoryTarget, memoryPath, instanceName);
+            if (await this.pathExists(canonicalMemoryTarget)) {
+                await this.mergeDirectoryWithConflictCopies(canonicalMemoryTarget, memoryPath, instanceName);
             }
         }
     }
@@ -734,6 +855,24 @@ class SharedManager {
         }
         return candidate;
     }
+    resolveCanonicalPath(targetPath) {
+        try {
+            return fs.realpathSync.native(targetPath);
+        }
+        catch {
+            return path.resolve(targetPath);
+        }
+    }
+    isPathWithinDirectory(candidatePath, rootPath) {
+        const normalizeForCompare = (inputPath) => {
+            const resolved = path.resolve(inputPath);
+            return process.platform === 'win32' ? resolved.toLowerCase() : resolved;
+        };
+        const normalizedCandidate = normalizeForCompare(candidatePath);
+        const normalizedRoot = normalizeForCompare(rootPath);
+        const relative = path.relative(normalizedRoot, normalizedCandidate);
+        return relative === '' || (!relative.startsWith('..') && !path.isAbsolute(relative));
+    }
     async pathExists(targetPath) {
         try {
             await fs.promises.access(targetPath);