observability-toolkit 2.0.0 → 2.1.0

package/dist/lib/core/constants-symlink.test.js

@@ -0,0 +1,358 @@
+/**
+ * Symlink protection TOCTOU tests (A2 Category 3)
+ *
+ * Tests the atomic path checking and symlink protection in getTelemetryDirectories.
+ * Verifies protection against:
+ * - Symlink swap attacks (TOCTOU)
+ * - Broken symlinks
+ * - Circular symlink chains
+ * - Symlinks escaping allowed directories
+ */
+import { describe, it, before, after, afterEach } from 'node:test';
+import assert from 'node:assert';
+import { mkdirSync, rmSync, symlinkSync, unlinkSync, existsSync, realpathSync, writeFileSync } from 'fs';
+import { join, resolve } from 'path';
+import { tmpdir } from 'os';
+import { getTelemetryDirectories } from './constants.js';
+import { createSymlinkTestDir, createCircularSymlinks, createBrokenSymlink, createSymlinkChain, } from '../../test-helpers/race-condition-helpers.js';
+import { DEFAULT_LIMIT_10, COUNT_THREE, RANDOM_STRING_RADIX, RANDOM_SUFFIX_START, } from '../../test-helpers/test-constants.js';
+describe('symlink protection TOCTOU tests', () => {
+    let testBaseDir;
+    const cleanupFns = [];
+    before(() => {
+        testBaseDir = join(tmpdir(), `symlink-test-${Date.now()}-${Math.random().toString(RANDOM_STRING_RADIX).slice(RANDOM_SUFFIX_START)}`);
+        mkdirSync(testBaseDir, { recursive: true });
+    });
+    after(() => {
+        // Clean up any remaining resources
+        for (const cleanup of cleanupFns) {
+            try {
+                cleanup();
+            }
+            catch {
+                // Ignore cleanup errors
+            }
+        }
+        // Remove test directory
+        try {
+            rmSync(testBaseDir, { recursive: true });
+        }
+        catch {
+            // Ignore
+        }
+    });
+    afterEach(() => {
+        // Run and clear cleanup functions after each test
+        while (cleanupFns.length > 0) {
+            const cleanup = cleanupFns.pop();
+            try {
+                cleanup?.();
+            }
+            catch {
+                // Ignore
+            }
+        }
+    });
+    describe('basic symlink handling', () => {
+        it('should follow valid symlinks to directories', () => {
+            const { symlinkPath, targetPath, cleanup } = createSymlinkTestDir(testBaseDir, 'valid');
+            cleanupFns.push(cleanup);
+            // Create a .claude/telemetry structure
+            const telemetryTarget = join(testBaseDir, 'telemetry-target');
+            mkdirSync(telemetryTarget, { recursive: true });
+            cleanupFns.push(() => rmSync(telemetryTarget));
+            // Verify the symlink exists and points to a directory
+            assert.ok(existsSync(symlinkPath), 'Symlink should exist');
+            const realPath = realpathSync(symlinkPath);
+            // On macOS, /tmp is a symlink to /private/tmp, so we compare resolved paths
+            const resolvedTarget = realpathSync(targetPath);
+            assert.strictEqual(realPath, resolvedTarget, 'Should resolve to target');
+        });
+        it('should handle non-symlink directories', () => {
+            const dirPath = join(testBaseDir, 'regular-dir');
+            mkdirSync(dirPath, { recursive: true });
+            cleanupFns.push(() => rmSync(dirPath));
+            assert.ok(existsSync(dirPath), 'Directory should exist');
+            const realPath = realpathSync(dirPath);
+            // Compare with resolved path (handles /tmp -> /private/tmp on macOS)
+            const resolvedDir = realpathSync(resolve(dirPath));
+            assert.strictEqual(realPath, resolvedDir, 'Should resolve to itself');
+        });
+    });
+    describe('broken symlink handling', () => {
+        it('should handle symlink with non-existent target', () => {
+            const { symlinkPath, cleanup } = createBrokenSymlink(testBaseDir, 'broken');
+            cleanupFns.push(cleanup);
+            // realpathSync should throw for broken symlinks
+            assert.throws(() => realpathSync(symlinkPath), /ENOENT/, 'Should throw ENOENT for broken symlink');
+        });
+        it('should gracefully handle broken symlink in telemetry path check', () => {
+            // Create a working directory with a broken .claude/telemetry symlink
+            const workDir = join(testBaseDir, 'work-broken');
+            const claudeDir = join(workDir, '.claude');
+            mkdirSync(claudeDir, { recursive: true });
+            cleanupFns.push(() => rmSync(claudeDir, { recursive: true }));
+            const telemetryLink = join(claudeDir, 'telemetry');
+            const nonExistent = join(testBaseDir, 'does-not-exist-' + Date.now());
+            symlinkSync(nonExistent, telemetryLink);
+            cleanupFns.push(() => {
+                try {
+                    unlinkSync(telemetryLink);
+                }
+                catch {
+                    // Ignore
+                }
+            });
+            // getTelemetryDirectories should not include broken symlinks
+            const dirs = getTelemetryDirectories(workDir);
+            const hasLocal = dirs.some(d => d.source === 'local' && d.path.includes(workDir));
+            assert.ok(!hasLocal, 'Should not include broken symlinks');
+        });
+    });
+    describe('circular symlink detection', () => {
+        it('should handle circular symlink chains (ELOOP)', () => {
+            const { paths, cleanup } = createCircularSymlinks(testBaseDir, 'circ');
+            cleanupFns.push(cleanup);
+            // realpathSync should throw ELOOP for circular symlinks
+            for (const p of paths) {
+                assert.throws(() => realpathSync(p), /ELOOP/, `Should throw ELOOP for circular path: ${p}`);
+            }
+        });
+    });
+    describe('symlink chain resolution', () => {
+        it('should follow symlink chains to final target', () => {
+            const { startPath, endPath, cleanup } = createSymlinkChain(testBaseDir, 'chain', COUNT_THREE);
+            cleanupFns.push(cleanup);
+            const resolved = realpathSync(startPath);
+            // Compare with resolved endPath (handles /tmp -> /private/tmp on macOS)
+            const resolvedEnd = realpathSync(endPath);
+            assert.strictEqual(resolved, resolvedEnd, 'Should resolve through chain to final target');
+        });
+        it('should handle deep symlink chains', () => {
+            const { startPath, endPath, cleanup } = createSymlinkChain(testBaseDir, 'deep', DEFAULT_LIMIT_10);
+            cleanupFns.push(cleanup);
+            const resolved = realpathSync(startPath);
+            // Compare with resolved endPath
+            const resolvedEnd = realpathSync(endPath);
+            assert.strictEqual(resolved, resolvedEnd, 'Should resolve deep chains');
+        });
+    });
+    describe('symlink escape prevention', () => {
+        it('should reject symlinks pointing outside allowed directories', () => {
+            const workDir = join(testBaseDir, 'work-escape');
+            const claudeDir = join(workDir, '.claude');
+            mkdirSync(claudeDir, { recursive: true });
+            cleanupFns.push(() => rmSync(claudeDir, { recursive: true }));
+            // Create telemetry symlink pointing to /tmp (outside workDir and ~/.claude)
+            const telemetryLink = join(claudeDir, 'telemetry');
+            const escapePath = '/tmp';
+            try {
+                symlinkSync(escapePath, telemetryLink);
+                cleanupFns.push(() => {
+                    try {
+                        unlinkSync(telemetryLink);
+                    }
+                    catch {
+                        // Ignore
+                    }
+                });
+            }
+            catch {
+                // Skip test if we can't create symlink
+                return;
+            }
+            // Capture console.warn to verify security warning
+            const originalWarn = console.warn;
+            let warnCalled = false;
+            let warnMessage = '';
+            console.warn = (msg) => {
+                warnCalled = true;
+                warnMessage = msg;
+            };
+            try {
+                const dirs = getTelemetryDirectories(workDir);
+                // Should not include the escape symlink
+                const hasEscape = dirs.some(d => d.path === '/tmp' || d.path.startsWith('/tmp/'));
+                assert.ok(!hasEscape, 'Should not include symlink escaping to /tmp');
+                // Should have logged security warning (structured JSON with component: "security")
+                assert.ok(warnCalled, 'Should log security warning');
+                assert.ok(warnMessage.includes('"security"'), 'Warning should be marked as security');
+            }
+            finally {
+                console.warn = originalWarn;
+            }
+        });
+        it('should allow symlinks within the working directory', () => {
+            const workDir = join(testBaseDir, 'work-internal');
+            const claudeDir = join(workDir, '.claude');
+            const targetDir = join(workDir, 'actual-telemetry');
+            mkdirSync(claudeDir, { recursive: true });
+            mkdirSync(targetDir, { recursive: true });
+            cleanupFns.push(() => {
+                rmSync(claudeDir, { recursive: true });
+                rmSync(targetDir);
+            });
+            const telemetryLink = join(claudeDir, 'telemetry');
+            symlinkSync(targetDir, telemetryLink);
+            cleanupFns.push(() => {
+                try {
+                    unlinkSync(telemetryLink);
+                }
+                catch {
+                    // Ignore
+                }
+            });
+            const dirs = getTelemetryDirectories(workDir);
+            const hasLocal = dirs.some(d => d.source === 'local');
+            assert.ok(hasLocal, 'Should include symlinks within working directory');
+        });
+    });
+    describe('TOCTOU race condition resistance', () => {
+        it('should use atomic path checking to prevent symlink swap', () => {
+            // This test verifies the checkDirectoryPath function behavior
+            const target1 = join(testBaseDir, 'swap-target-1');
+            const target2 = join(testBaseDir, 'swap-target-2');
+            const workDir = join(testBaseDir, 'work-swap');
+            const claudeDir = join(workDir, '.claude');
+            const telemetryLink = join(claudeDir, 'telemetry');
+            mkdirSync(target1, { recursive: true });
+            mkdirSync(target2, { recursive: true });
+            mkdirSync(claudeDir, { recursive: true });
+            cleanupFns.push(() => {
+                rmSync(target1);
+                rmSync(target2);
+                rmSync(claudeDir, { recursive: true });
+            });
+            // Create initial symlink
+            symlinkSync(target1, telemetryLink);
+            cleanupFns.push(() => {
+                try {
+                    unlinkSync(telemetryLink);
+                }
+                catch {
+                    // Ignore
+                }
+            });
+            // First call should see target1
+            const dirs1 = getTelemetryDirectories(workDir);
+            const localDir1 = dirs1.find(d => d.source === 'local');
+            // Now swap the symlink
+            unlinkSync(telemetryLink);
+            symlinkSync(target2, telemetryLink);
+            // Second call should see target2
+            const dirs2 = getTelemetryDirectories(workDir);
+            const localDir2 = dirs2.find(d => d.source === 'local');
+            // Verify the resolved paths are different
+            if (localDir1 && localDir2) {
+                assert.notStrictEqual(localDir1.path, localDir2.path, 'Should detect changed symlink target');
+            }
+        });
+        it('should handle rapid symlink creation and deletion', async () => {
+            const workDir = join(testBaseDir, 'work-rapid');
+            const claudeDir = join(workDir, '.claude');
+            const targetDir = join(workDir, 'rapid-target');
+            const telemetryLink = join(claudeDir, 'telemetry');
+            mkdirSync(claudeDir, { recursive: true });
+            mkdirSync(targetDir, { recursive: true });
+            cleanupFns.push(() => {
+                rmSync(claudeDir, { recursive: true });
+                rmSync(targetDir);
+            });
+            // Rapidly create and delete symlink while querying
+            let successCount = 0;
+            let emptyCount = 0;
+            for (let i = 0; i < DEFAULT_LIMIT_10; i++) {
+                // Create symlink
+                try {
+                    symlinkSync(targetDir, telemetryLink);
+                }
+                catch {
+                    // May already exist
+                }
+                const dirs = getTelemetryDirectories(workDir);
+                if (dirs.some(d => d.source === 'local')) {
+                    successCount++;
+                }
+                else {
+                    emptyCount++;
+                }
+                // Delete symlink
+                try {
+                    unlinkSync(telemetryLink);
+                }
+                catch {
+                    // May already be deleted
+                }
+            }
+            // Test should complete without crashes
+            assert.ok(successCount + emptyCount === DEFAULT_LIMIT_10, 'Should handle all iterations without crashing');
+        });
+    });
+    describe('file descriptor verification', () => {
+        it('should reject file paths (non-directories)', () => {
+            const workDir = join(testBaseDir, 'work-file');
+            const claudeDir = join(workDir, '.claude');
+            mkdirSync(claudeDir, { recursive: true });
+            cleanupFns.push(() => {
+                try {
+                    rmSync(claudeDir, { recursive: true });
+                }
+                catch {
+                    // Ignore
+                }
+            });
+            // Create a file instead of directory at telemetry path
+            const telemetryPath = join(claudeDir, 'telemetry');
+            writeFileSync(telemetryPath, 'not a directory');
+            cleanupFns.push(() => {
+                try {
+                    unlinkSync(telemetryPath);
+                }
+                catch {
+                    // Ignore
+                }
+            });
+            const dirs = getTelemetryDirectories(workDir);
+            const hasLocal = dirs.some(d => d.source === 'local' && d.path.includes('telemetry'));
+            assert.ok(!hasLocal, 'Should not include files (only directories)');
+        });
+    });
+    describe('symlink target validation', () => {
+        it('should validate symlink points to directory not file', () => {
+            const workDir = join(testBaseDir, 'work-file-target');
+            const claudeDir = join(workDir, '.claude');
+            const filePath = join(testBaseDir, 'target-file.txt');
+            mkdirSync(claudeDir, { recursive: true });
+            writeFileSync(filePath, 'content');
+            cleanupFns.push(() => {
+                try {
+                    rmSync(claudeDir, { recursive: true });
+                }
+                catch {
+                    // Ignore
+                }
+                try {
+                    unlinkSync(filePath);
+                }
+                catch {
+                    // Ignore
+                }
+            });
+            // Create symlink to file
+            const telemetryLink = join(claudeDir, 'telemetry');
+            symlinkSync(filePath, telemetryLink);
+            cleanupFns.push(() => {
+                try {
+                    unlinkSync(telemetryLink);
+                }
+                catch {
+                    // Ignore
+                }
+            });
+            const dirs = getTelemetryDirectories(workDir);
+            const hasLocal = dirs.some(d => d.source === 'local');
+            assert.ok(!hasLocal, 'Should not include symlinks to files');
+        });
+    });
+});
+//# sourceMappingURL=constants-symlink.test.js.map

package/dist/lib/core/constants-symlink.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants-symlink.test.js","sourceRoot":"","sources":["../../../src/lib/core/constants-symlink.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACnE,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,IAAI,CAAC;AACzG,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AACrC,OAAO,EAAE,MAAM,EAAE,MAAM,IAAI,CAAC;AAC5B,OAAO,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AACzD,OAAO,EACL,oBAAoB,EACpB,sBAAsB,EACtB,mBAAmB,EACnB,kBAAkB,GACnB,MAAM,8CAA8C,CAAC;AACtD,OAAO,EACL,gBAAgB,EAChB,WAAW,EACX,mBAAmB,EACnB,mBAAmB,GACpB,MAAM,sCAAsC,CAAC;AAE9C,QAAQ,CAAC,iCAAiC,EAAE,GAAG,EAAE;IAC/C,IAAI,WAAmB,CAAC;IACxB,MAAM,UAAU,GAAsB,EAAE,CAAC;IAEzC,MAAM,CAAC,GAAG,EAAE;QACV,WAAW,GAAG,IAAI,CAChB,MAAM,EAAE,EACR,gBAAgB,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,EAAE,CACvG,CAAC;QACF,SAAS,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,KAAK,CAAC,GAAG,EAAE;QACT,mCAAmC;QACnC,KAAK,MAAM,OAAO,IAAI,UAAU,EAAE,CAAC;YACjC,IAAI,CAAC;gBACH,OAAO,EAAE,CAAC;YACZ,CAAC;YAAC,MAAM,CAAC;gBACP,wBAAwB;YAC1B,CAAC;QACH,CAAC;QAED,wBAAwB;QACxB,IAAI,CAAC;YACH,MAAM,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3C,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,kDAAkD;QAClD,OAAO,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC;YACjC,IAAI,CAAC;gBACH,OAAO,EAAE,EAAE,CAAC;YACd,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;QACtC,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;YACrD,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,oBAAoB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;YACxF,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAEzB,uCAAuC;YACvC,MAAM,eAAe,GAAG,IAAI,CAAC,WAAW,EAAE,kBAAkB,CAAC,CAAC;YAC9D,SAAS,CAAC,eAAe,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAChD,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC;YAE/C,sDAAsD;YACtD,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,sBAAsB,CAAC,CAAC;YAC3D,MAAM,QAAQ,GAAG,YAAY,CAAC,WAAW,CAAC,CAAC;YAC3C,4EAA4E;YAC5E,MAAM,cAAc,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;YAChD,MAAM,CAAC,WAAW,CAAC,QAAQ,EAAE,cAAc,EAAE,0BAA0B,CAAC,CAAC;QAC3E,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;YAC/C,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;YACjD,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACxC,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;YAEvC,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,wBAAwB,CAAC,CAAC;YACzD,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;YACvC,qEAAqE;YACrE,MAAM,WAAW,GAAG,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;YACnD,MAAM,CAAC,WAAW,CAAC,QAAQ,EAAE,WAAW,EAAE,0BAA0B,CAAC,CAAC;QACxE,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;QACvC,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;YACxD,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,mBAAmB,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;YAC5E,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAEzB,gDAAgD;YAChD,MAAM,CAAC,MAAM,CACX,GAAG,EAAE,CAAC,YAAY,CAAC,WAAW,CAAC,EAC/B,QAAQ,EACR,wCAAwC,CACzC,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,iEAAiE,EAAE,GAAG,EAAE;YACzE,qEAAqE;YACrE,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;YACjD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;YAC3C,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1C,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YAE9D,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;YACnD,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,EAAE,iBAAiB,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YACtE,WAAW,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;YACxC,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE;gBACnB,IAAI,CAAC;oBACH,UAAU,CAAC,aAAa,CAAC,CAAC;gBAC5B,CAAC;gBAAC,MAAM,CAAC;oBACP,SAAS;gBACX,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,6DAA6D;YAC7D,MAAM,IAAI,GAAG,uBAAuB,CAAC,OAAO,CAAC,CAAC;YAC9C,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,OAAO,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;YAClF,MAAM,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE,oCAAoC,CAAC,CAAC;QAC7D,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,4BAA4B,EAAE,GAAG,EAAE;QAC1C,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;YACvD,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,sBAAsB,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;YACvE,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAEzB,wDAAwD;YACxD,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;gBACtB,MAAM,CAAC,MAAM,CACX,GAAG,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,EACrB,OAAO,EACP,yCAAyC,CAAC,EAAE,CAC7C,CAAC;YACJ,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,0BAA0B,EAAE,GAAG,EAAE;QACxC,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;YACtD,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,kBAAkB,CAAC,WAAW,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;YAC9F,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAEzB,MAAM,QAAQ,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;YACzC,wEAAwE;YACxE,MAAM,WAAW,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;YAC1C,MAAM,CAAC,WAAW,CAAC,QAAQ,EAAE,WAAW,EAAE,8CAA8C,CAAC,CAAC;QAC5F,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;YAC3C,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,kBAAkB,CAAC,WAAW,EAAE,MAAM,EAAE,gBAAgB,CAAC,CAAC;YAClG,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAEzB,MAAM,QAAQ,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;YACzC,gCAAgC;YAChC,MAAM,WAAW,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;YAC1C,MAAM,CAAC,WAAW,CAAC,QAAQ,EAAE,WAAW,EAAE,4BAA4B,CAAC,CAAC;QAC1E,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE;QACzC,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;YACrE,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;YACjD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;YAC3C,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1C,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YAE9D,4EAA4E;YAC5E,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;YACnD,MAAM,UAAU,GAAG,MAAM,CAAC;YAC1B,IAAI,CAAC;gBACH,WAAW,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;gBACvC,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE;oBACnB,IAAI,CAAC;wBACH,UAAU,CAAC,aAAa,CAAC,CAAC;oBAC5B,CAAC;oBAAC,MAAM,CAAC;wBACP,SAAS;oBACX,CAAC;gBACH,CAAC,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,uCAAuC;gBACvC,OAAO;YACT,CAAC;YAED,kDAAkD;YAClD,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC;YAClC,IAAI,UAAU,GAAG,KAAK,CAAC;YACvB,IAAI,WAAW,GAAG,EAAE,CAAC;YACrB,OAAO,CAAC,IAAI,GAAG,CAAC,GAAW,EAAE,EAAE;gBAC7B,UAAU,GAAG,IAAI,CAAC;gBAClB,WAAW,GAAG,GAAG,CAAC;YACpB,CAAC,CAAC;YAEF,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,uBAAuB,CAAC,OAAO,CAAC,CAAC;gBAC9C,wCAAwC;gBACxC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;gBAClF,MAAM,CAAC,EAAE,CAAC,CAAC,SAAS,EAAE,6CAA6C,CAAC,CAAC;gBACrE,mFAAmF;gBACnF,MAAM,CAAC,EAAE,CAAC,UAAU,EAAE,6BAA6B,CAAC,CAAC;gBACrD,MAAM,CAAC,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,sCAAsC,CAAC,CAAC;YACxF,CAAC;oBAAS,CAAC;gBACT,OAAO,CAAC,IAAI,GAAG,YAAY,CAAC;YAC9B,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;YAC5D,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC;YACnD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;YAC3C,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;YACpD,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1C,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1C,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE;gBACnB,MAAM,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBACvC,MAAM,CAAC,SAAS,CAAC,CAAC;YACpB,CAAC,CAAC,CAAC;YAEH,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;YACnD,WAAW,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;YACtC,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE;gBACnB,IAAI,CAAC;oBACH,UAAU,CAAC,aAAa,CAAC,CAAC;gBAC5B,CAAC;gBAAC,MAAM,CAAC;oBACP,SAAS;gBACX,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,MAAM,IAAI,GAAG,uBAAuB,CAAC,OAAO,CAAC,CAAC;YAC9C,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC;YACtD,MAAM,CAAC,EAAE,CAAC,QAAQ,EAAE,kDAAkD,CAAC,CAAC;QAC1E,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAChD,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;YACjE,8DAA8D;YAC9D,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC;YACnD,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC;YACnD,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;YAC/C,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;YAC3C,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;YAEnD,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACxC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACxC,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1C,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE;gBACnB,MAAM,CAAC,OAAO,CAAC,CAAC;gBAChB,MAAM,CAAC,OAAO,CAAC,CAAC;gBAChB,MAAM,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACzC,CAAC,CAAC,CAAC;YAEH,yBAAyB;YACzB,WAAW,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;YACpC,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE;gBACnB,IAAI,CAAC;oBACH,UAAU,CAAC,aAAa,CAAC,CAAC;gBAC5B,CAAC;gBAAC,MAAM,CAAC;oBACP,SAAS;gBACX,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,gCAAgC;YAChC,MAAM,KAAK,GAAG,uBAAuB,CAAC,OAAO,CAAC,CAAC;YAC/C,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC;YAExD,uBAAuB;YACvB,UAAU,CAAC,aAAa,CAAC,CAAC;YAC1B,WAAW,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;YAEpC,iCAAiC;YACjC,MAAM,KAAK,GAAG,uBAAuB,CAAC,OAAO,CAAC,CAAC;YAC/C,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC;YAExD,0CAA0C;YAC1C,IAAI,SAAS,IAAI,SAAS,EAAE,CAAC;gBAC3B,MAAM,CAAC,cAAc,CACnB,SAAS,CAAC,IAAI,EACd,SAAS,CAAC,IAAI,EACd,sCAAsC,CACvC,CAAC;YACJ,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;YACjE,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;YAChD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;YAC3C,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;YAChD,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;YAEnD,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1C,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1C,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE;gBACnB,MAAM,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBACvC,MAAM,CAAC,SAAS,CAAC,CAAC;YACpB,CAAC,CAAC,CAAC;YAEH,mDAAmD;YACnD,IAAI,YAAY,GAAG,CAAC,CAAC;YACrB,IAAI,UAAU,GAAG,CAAC,CAAC;YAEnB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,gBAAgB,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC1C,iBAAiB;gBACjB,IAAI,CAAC;oBACH,WAAW,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;gBACxC,CAAC;gBAAC,MAAM,CAAC;oBACP,oBAAoB;gBACtB,CAAC;gBAED,MAAM,IAAI,GAAG,uBAAuB,CAAC,OAAO,CAAC,CAAC;gBAC9C,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,OAAO,CAAC,EAAE,CAAC;oBACzC,YAAY,EAAE,CAAC;gBACjB,CAAC;qBAAM,CAAC;oBACN,UAAU,EAAE,CAAC;gBACf,CAAC;gBAED,iBAAiB;gBACjB,IAAI,CAAC;oBACH,UAAU,CAAC,aAAa,CAAC,CAAC;gBAC5B,CAAC;gBAAC,MAAM,CAAC;oBACP,yBAAyB;gBAC3B,CAAC;YACH,CAAC;YAED,uCAAuC;YACvC,MAAM,CAAC,EAAE,CACP,YAAY,GAAG,UAAU,KAAK,gBAAgB,EAC9C,+CAA+C,CAChD,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,8BAA8B,EAAE,GAAG,EAAE;QAC5C,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;YACpD,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;YAC/C,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;YAC3C,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1C,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE;gBACnB,IAAI,CAAC;oBACH,MAAM,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBACzC,CAAC;gBAAC,MAAM,CAAC;oBACP,SAAS;gBACX,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,uDAAuD;YACvD,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;YACnD,aAAa,CAAC,aAAa,EAAE,iBAAiB,CAAC,CAAC;YAChD,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE;gBACnB,IAAI,CAAC;oBACH,UAAU,CAAC,aAAa,CAAC,CAAC;gBAC5B,CAAC;gBAAC,MAAM,CAAC;oBACP,SAAS;gBACX,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,MAAM,IAAI,GAAG,uBAAuB,CAAC,OAAO,CAAC,CAAC;YAC9C,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,OAAO,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC;YACtF,MAAM,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE,6CAA6C,CAAC,CAAC;QACtE,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE;QACzC,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;YAC9D,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,EAAE,kBAAkB,CAAC,CAAC;YACtD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;YAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC;YAEtD,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1C,aAAa,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;YACnC,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE;gBACnB,IAAI,CAAC;oBACH,MAAM,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBACzC,CAAC;gBAAC,MAAM,CAAC;oBACP,SAAS;gBACX,CAAC;gBACD,IAAI,CAAC;oBACH,UAAU,CAAC,QAAQ,CAAC,CAAC;gBACvB,CAAC;gBAAC,MAAM,CAAC;oBACP,SAAS;gBACX,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,yBAAyB;YACzB,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;YACnD,WAAW,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;YACrC,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE;gBACnB,IAAI,CAAC;oBACH,UAAU,CAAC,aAAa,CAAC,CAAC;gBAC5B,CAAC;gBAAC,MAAM,CAAC;oBACP,SAAS;gBACX,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,MAAM,IAAI,GAAG,uBAAuB,CAAC,OAAO,CAAC,CAAC;YAC9C,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC;YACtD,MAAM,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE,sCAAsC,CAAC,CAAC;QAC/D,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/lib/core/constants-telemetry.d.ts

@@ -0,0 +1,21 @@
+export declare const TOOLKIT_VERSION: string;
+export declare const TELEMETRY_DIR: string;
+/** @deprecated Use TELEMETRY_DIR. */
+export declare const HOOKS_TELEMETRY_DIR: string;
+export declare const BACKEND_TYPE: string;
+export declare const LOCAL_TELEMETRY_PATHS: string[];
+/** Default allowed base directories for secure file listing/path checks */
+export declare const DEFAULT_ALLOWED_BASES: string[];
+/**
+ * Get all telemetry directories (global + local project directories)
+ * Returns array of { path, source } objects
+ *
+ * Security: Validates paths to prevent symlink-based path traversal attacks.
+ * Local telemetry directories must resolve to paths within the working directory
+ * or ~/.claude/ to prevent accessing sensitive files via malicious symlinks.
+ */
+export declare function getTelemetryDirectories(cwd?: string): Array<{
+    path: string;
+    source: 'global' | 'local';
+}>;
+//# sourceMappingURL=constants-telemetry.d.ts.map

package/dist/lib/core/constants-telemetry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants-telemetry.d.ts","sourceRoot":"","sources":["../../../src/lib/core/constants-telemetry.ts"],"names":[],"mappings":"AA6BA,eAAO,MAAM,eAAe,QAAiB,CAAC;AAG9C,eAAO,MAAM,aAAa,QAEI,CAAC;AAE/B,qCAAqC;AACrC,eAAO,MAAM,mBAAmB,QAAgB,CAAC;AAEjD,eAAO,MAAM,YAAY,QAAsC,CAAC;AAqBhE,eAAO,MAAM,qBAAqB,UAIjC,CAAC;AAEF,2EAA2E;AAC3E,eAAO,MAAM,qBAAqB,UAA6B,CAAC;AAmEhE;;;;;;;GAOG;AACH,wBAAgB,uBAAuB,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,QAAQ,GAAG,OAAO,CAAA;CAAE,CAAC,CAuCzG"}

package/dist/lib/core/constants-telemetry.js

@@ -0,0 +1,162 @@
+import { join, resolve, dirname, isAbsolute } from 'path';
+import { existsSync, realpathSync, lstatSync, statSync, readFileSync } from 'fs';
+import { fileURLToPath } from 'url';
+import { homedir } from 'os';
+import { createLogger } from './logger.js';
+const configLog = createLogger('config');
+const securityLog = createLogger('security');
+/** Expand "~" or "~/" prefixes to the current user's home directory. */
+function expandTildePath(value) {
+    if (!value.startsWith('~'))
+        return value;
+    if (value === '~')
+        return homedir();
+    if (value.startsWith('~/'))
+        return join(homedir(), value.slice(2));
+    // "~user" prefixes are not resolved in this project.
+    return value;
+}
+// Dynamic version from package.json to prevent hardcoding drift
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = dirname(__filename);
+const packageJsonPath = join(__dirname, '../../../package.json');
+let toolkitVersion = '0.0.0';
+try {
+    const pkg = JSON.parse(readFileSync(packageJsonPath, 'utf-8'));
+    toolkitVersion = pkg.version || '0.0.0';
+}
+catch {
+    configLog.warn('Could not read package.json for version');
+}
+export const TOOLKIT_VERSION = toolkitVersion;
+// Paths - expand tilde in case TELEMETRY_DIR is set to ~/... (tilde doesn't expand in JSON/env)
+export const TELEMETRY_DIR = expandTildePath(process.env.TELEMETRY_DIR || '') ||
+    join(process.cwd(), '.otel');
+/** @deprecated Use TELEMETRY_DIR. */
+export const HOOKS_TELEMETRY_DIR = TELEMETRY_DIR;
+export const BACKEND_TYPE = process.env.BACKEND_TYPE ?? 'cloud';
+// Validate TELEMETRY_DIR env var at startup (CR-L1)
+if (process.env.TELEMETRY_DIR) {
+    if (!isAbsolute(TELEMETRY_DIR)) {
+        configLog.warn(`TELEMETRY_DIR is not an absolute path: "${TELEMETRY_DIR}". Use an absolute path to avoid ambiguity.`);
+    }
+    else if (!existsSync(TELEMETRY_DIR)) {
+        configLog.warn(`TELEMETRY_DIR does not exist: "${TELEMETRY_DIR}".`);
+    }
+    else {
+        try {
+            const st = statSync(TELEMETRY_DIR);
+            if (!st.isDirectory()) {
+                configLog.warn(`TELEMETRY_DIR exists but is not a directory: "${TELEMETRY_DIR}".`);
+            }
+        }
+        catch {
+            configLog.warn(`TELEMETRY_DIR is not accessible: "${TELEMETRY_DIR}".`);
+        }
+    }
+}
+// Local project telemetry directories to check
+export const LOCAL_TELEMETRY_PATHS = [
+    '.claude/telemetry',
+    'telemetry',
+    '.telemetry',
+];
+/** Default allowed base directories for secure file listing/path checks */
+export const DEFAULT_ALLOWED_BASES = [homedir(), process.cwd()];
+/**
+ * Check and resolve a path for use in telemetry directory discovery.
+ * Returns { exists: false } if the path doesn't exist, isn't a directory, or is inaccessible.
+ * Returns { exists: true, isSymlink, realPath } otherwise.
+ */
+function checkDirectoryPath(path) {
+    try {
+        if (!existsSync(path))
+            return { exists: false };
+        const realPath = realpathSync(path);
+        if (!statSync(realPath).isDirectory())
+            return { exists: false };
+        const isSymlink = lstatSync(path).isSymbolicLink();
+        return { exists: true, isSymlink, realPath };
+    }
+    catch {
+        return { exists: false };
+    }
+}
+/**
+ * Validate that a resolved path is within allowed base directories.
+ * Prevents symlink-based path traversal attacks.
+ *
+ * @param resolvedPath - The real path after resolving symlinks
+ * @param allowedBasePaths - Array of allowed base directories
+ * @returns true if the path is within allowed directories
+ */
+function isPathWithinAllowedBases(resolvedPath, allowedBasePaths) {
+    const sep = process.platform === 'win32' ? '\\' : '/';
+    for (const basePath of allowedBasePaths) {
+        try {
+            // Resolve the base path too in case it contains symlinks
+            const resolvedBase = existsSync(basePath) ? realpathSync(basePath) : resolve(basePath);
+            if (resolvedPath === resolvedBase || resolvedPath.startsWith(resolvedBase + sep)) {
+                return true;
+            }
+        }
+        catch {
+            // Skip invalid base paths
+            continue;
+        }
+    }
+    return false;
+}
+/**
+ * Get allowed base directories for local telemetry paths.
+ * Local telemetry must be within the working directory, ~/.claude/, or ~/.claude-history/.
+ */
+function getAllowedLocalBases(workingDir) {
+    const home = homedir();
+    const resolvedWorkingDir = existsSync(workingDir) ? realpathSync(workingDir) : resolve(workingDir);
+    return [
+        resolvedWorkingDir,
+        join(home, '.claude'),
+        join(home, '.claude-history'),
+    ];
+}
+/**
+ * Get all telemetry directories (global + local project directories)
+ * Returns array of { path, source } objects
+ *
+ * Security: Validates paths to prevent symlink-based path traversal attacks.
+ * Local telemetry directories must resolve to paths within the working directory
+ * or ~/.claude/ to prevent accessing sensitive files via malicious symlinks.
+ */
+export function getTelemetryDirectories(cwd) {
+    const dirs = [];
+    // Always include global telemetry directory
+    if (existsSync(TELEMETRY_DIR)) {
+        dirs.push({ path: TELEMETRY_DIR, source: 'global' });
+    }
+    // Check for local project telemetry directories
+    const workingDir = cwd || process.cwd();
+    const allowedBases = getAllowedLocalBases(workingDir);
+    for (const localPath of LOCAL_TELEMETRY_PATHS) {
+        const fullPath = join(workingDir, localPath);
+        const pathInfo = checkDirectoryPath(fullPath);
+        if (!pathInfo.exists) {
+            continue;
+        }
+        const { isSymlink: isSymbolicLink, realPath } = pathInfo;
+        // Security: Validate symlinks point to allowed directories
+        if (isSymbolicLink) {
+            if (!isPathWithinAllowedBases(realPath, allowedBases)) {
+                securityLog.warn(`Rejected symlink traversal: ${fullPath} -> ${realPath}`);
+                continue;
+            }
+        }
+        // Use the atomically resolved real path
+        // Avoid adding duplicates
+        if (!dirs.some(d => d.path === realPath)) {
+            dirs.push({ path: realPath, source: 'local' });
+        }
+    }
+    return dirs;
+}
+//# sourceMappingURL=constants-telemetry.js.map

package/dist/lib/core/constants-telemetry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants-telemetry.js","sourceRoot":"","sources":["../../../src/lib/core/constants-telemetry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,MAAM,CAAC;AAC1D,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AACjF,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AACpC,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAC7B,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,MAAM,SAAS,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;AACzC,MAAM,WAAW,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;AAE7C,wEAAwE;AACxE,SAAS,eAAe,CAAC,KAAa;IACpC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACzC,IAAI,KAAK,KAAK,GAAG;QAAE,OAAO,OAAO,EAAE,CAAC;IACpC,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACnE,qDAAqD;IACrD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClD,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;AACtC,MAAM,eAAe,GAAG,IAAI,CAAC,SAAS,EAAE,uBAAuB,CAAC,CAAC;AACjE,IAAI,cAAc,GAAG,OAAO,CAAC;AAC7B,IAAI,CAAC;IACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC,CAAC;IAC/D,cAAc,GAAG,GAAG,CAAC,OAAO,IAAI,OAAO,CAAC;AAC1C,CAAC;AAAC,MAAM,CAAC;IACP,SAAS,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAC;AAC5D,CAAC;AACD,MAAM,CAAC,MAAM,eAAe,GAAG,cAAc,CAAC;AAE9C,gGAAgG;AAChG,MAAM,CAAC,MAAM,aAAa,GACxB,eAAe,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,EAAE,CAAC;IAChD,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,OAAO,CAAC,CAAC;AAE/B,qCAAqC;AACrC,MAAM,CAAC,MAAM,mBAAmB,GAAG,aAAa,CAAC;AAEjD,MAAM,CAAC,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,OAAO,CAAC;AAEhE,oDAAoD;AACpD,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC;IAC9B,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;QAC/B,SAAS,CAAC,IAAI,CAAC,2CAA2C,aAAa,6CAA6C,CAAC,CAAC;IACxH,CAAC;SAAM,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;QACtC,SAAS,CAAC,IAAI,CAAC,kCAAkC,aAAa,IAAI,CAAC,CAAC;IACtE,CAAC;SAAM,CAAC;QACN,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,QAAQ,CAAC,aAAa,CAAC,CAAC;YACnC,IAAI,CAAC,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;gBACtB,SAAS,CAAC,IAAI,CAAC,iDAAiD,aAAa,IAAI,CAAC,CAAC;YACrF,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,SAAS,CAAC,IAAI,CAAC,qCAAqC,aAAa,IAAI,CAAC,CAAC;QACzE,CAAC;IACH,CAAC;AACH,CAAC;AAED,+CAA+C;AAC/C,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,mBAAmB;IACnB,WAAW;IACX,YAAY;CACb,CAAC;AAEF,2EAA2E;AAC3E,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,OAAO,EAAE,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;AAEhE;;;;GAIG;AACH,SAAS,kBAAkB,CAAC,IAAY;IAOtC,IAAI,CAAC;QACH,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;QAChD,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE;YAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;QAChE,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,cAAc,EAAE,CAAC;QACnD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAC3B,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,wBAAwB,CAAC,YAAoB,EAAE,gBAA0B;IAChF,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;IAEtD,KAAK,MAAM,QAAQ,IAAI,gBAAgB,EAAE,CAAC;QACxC,IAAI,CAAC;YACH,yDAAyD;YACzD,MAAM,YAAY,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YAEvF,IAAI,YAAY,KAAK,YAAY,IAAI,YAAY,CAAC,UAAU,CAAC,YAAY,GAAG,GAAG,CAAC,EAAE,CAAC;gBACjF,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,0BAA0B;YAC1B,SAAS;QACX,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,SAAS,oBAAoB,CAAC,UAAkB;IAC9C,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;IACvB,MAAM,kBAAkB,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAEnG,OAAO;QACL,kBAAkB;QAClB,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC;QACrB,IAAI,CAAC,IAAI,EAAE,iBAAiB,CAAC;KAC9B,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,uBAAuB,CAAC,GAAY;IAClD,MAAM,IAAI,GAAwD,EAAE,CAAC;IAErE,4CAA4C;IAC5C,IAAI,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;QAC9B,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;IACvD,CAAC;IAED,gDAAgD;IAChD,MAAM,UAAU,GAAG,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACxC,MAAM,YAAY,GAAG,oBAAoB,CAAC,UAAU,CAAC,CAAC;IAEtD,KAAK,MAAM,SAAS,IAAI,qBAAqB,EAAE,CAAC;QAC9C,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QAE7C,MAAM,QAAQ,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QAE9C,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;YACrB,SAAS;QACX,CAAC;QAED,MAAM,EAAE,SAAS,EAAE,cAAc,EAAE,QAAQ,EAAE,GAAG,QAAQ,CAAC;QAEzD,2DAA2D;QAC3D,IAAI,cAAc,EAAE,CAAC;YACnB,IAAI,CAAC,wBAAwB,CAAC,QAAQ,EAAE,YAAY,CAAC,EAAE,CAAC;gBACtD,WAAW,CAAC,IAAI,CAAC,+BAA+B,QAAQ,OAAO,QAAQ,EAAE,CAAC,CAAC;gBAC3E,SAAS;YACX,CAAC;QACH,CAAC;QAED,wCAAwC;QACxC,0BAA0B;QAC1B,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,EAAE,CAAC;YACzC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}