@miraland-labs/conduit-bridge 0.16.100 → 0.16.101

package/dist/execution.js

@@ -831,14 +831,18 @@ export async function claimNextAssignment(client, config, workspace, brief, driv
     for (const released of releasedWorktrees) {
         // T96: resolve the released attempt's own repository under the managed root, not the runner's
         // default workspace, so a retained tree in another managed checkout is actually swept.
-        const releaseWorkspace = released.repository_fingerprint && options.managedRoot?.trim()
-            ? managedWorkspacePath(options.managedRoot.trim(), released.repository_fingerprint)
-            : workspace;
-        const worktree = attemptWorktreePath(releaseWorkspace, released.attempt_id);
-        await removeAttemptWorktree(releaseWorkspace, worktree)
-            .then((removed) => { if (removed)
-            console.log(`Released settled diagnostic worktree ${worktree}`); })
-            .catch((error) => console.error(`Diagnostic worktree release failed: ${redactSecrets(error instanceof Error ? error.message : "unknown")}`));
+        try {
+            const releaseWorkspace = released.repository_fingerprint && options.managedRoot?.trim()
+                ? managedWorkspacePath(options.managedRoot.trim(), released.repository_fingerprint)
+                : workspace;
+            const worktree = attemptWorktreePath(releaseWorkspace, released.attempt_id);
+            await removeAttemptWorktree(releaseWorkspace, worktree)
+                .then((removed) => { if (removed)
+                console.log(`Released settled diagnostic worktree ${worktree}`); });
+        }
+        catch (error) {
+            console.error(`Diagnostic worktree release failed: ${redactSecrets(error instanceof Error ? error.message : "unknown")}`);
+        }
     }
     const assignment = assignments[0];
     if (!assignment)

package/dist/managed-workspace-path.js

@@ -1,7 +1,12 @@
 import { normalizeRepositoryUrl } from "./brief.js";
 /** Where a managed computer keeps `repositoryUrl` — `<root>/<owner>/<repo>`. */
 export function managedWorkspacePath(managedRoot, repositoryUrl) {
+    if (repositoryUrl.includes("\\"))
+        throw new Error("managed_workspace_repository_invalid");
     const parts = normalizeRepositoryUrl(repositoryUrl.trim()).split("/").filter(Boolean);
+    if (parts.length === 0 || parts.some((part) => part === "." || part === "..")) {
+        throw new Error("managed_workspace_repository_invalid");
+    }
     const name = parts[parts.length - 1] || "workspace";
     const owner = parts.length >= 2 ? parts[parts.length - 2] : null;
     const root = managedRoot.trim().replace(/[/]+$/, "");

package/dist/on-shift-apply.js

@@ -3,7 +3,7 @@
  * machine-wide ops.env. The rebound runner's matching heartbeat clears the intent;
  * installation alone is not proof that the new process is actually bound.
  */
-import { resolve } from "node:path";
+import { relative, resolve } from "node:path";
 import { expandOpsValue } from "./ops.js";
 import { ensureCheckout } from "./checkout.js";
 import { bootstrapManagedWorkspace } from "./workspace-bootstrap.js";
@@ -21,7 +21,12 @@ function pathsEqual(left, right) {
  * gives a managed checkout.
  */
 export async function switchManagedWorkspace(managedRoot, repositoryUrl, deps = {}) {
+    const root = resolve(expandOpsValue(managedRoot));
     const target = resolve(expandOpsValue(managedWorkspacePath(managedRoot, repositoryUrl)));
+    const fromRoot = relative(root, target);
+    if (!fromRoot || fromRoot === ".." || fromRoot.startsWith(`..${process.platform === "win32" ? "\\" : "/"}`) || resolve(root, fromRoot) !== target) {
+        throw new Error("managed_workspace_path_outside_root");
+    }
     const checkout = deps.ensureCheckout ?? ensureCheckout;
     const result = await checkout(target, repositoryUrl);
     if (result === "cloned") {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@miraland-labs/conduit-bridge",
-  "version": "0.16.100",
+  "version": "0.16.101",
   "description": "Conduit Bridge CLI \u2014 join, connect, disconnect, multi-driver lanes, and run Claude Code / Codex / Cursor / OpenCode / Pi / Kiro / Antigravity / Grok Build agents for a Conduit organization",
   "type": "module",
   "bin": {