2 Commits

Include renames

Author	SHA1	Message	Date
WeiCHEN	45c21ef96e	fix(workspace): compare realpaths when enforcing artifact roots ... macOS TempDir resolves /var to /private/var; EvalSymlinks the data root before Rel so fencing writes are not false path-escape failures.	2026-09-22 21:42:58 +08:00
weichenandCursor	18ddd0f862	feat(workspace): add WorkspaceRef fencing and hide physical paths ... Cross-module callers get an opaque ref plus rotating lease tokens so stale writers fail closed, and file I/O is refused inside a unit of work. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-09-14 15:59:14 +00:00