Confine cleanup and use held session locks

2026-08-10 18:14:09 +00:00
parent 18ddf00d3d
commit 363313d99c
25 changed files with 919 additions and 72 deletions
--- a/internal/stage/prepare.go
+++ b/internal/stage/prepare.go
@@ -515,7 +515,7 @@ func clearManagedPreviousState(paths artifacts.SessionPaths) error {
 	if filepath.Base(previousDir) != config.PathPreviousDirSegment {
 		return fmt.Errorf("refusing to clear non-previous path %q", previousDir)
 	}
-	if err := os.RemoveAll(previousDir); err != nil {
+	if err := fileops.RemoveAllUnderRoot(sessionRoot, previousDir); err != nil {
 		return err
 	}
 	return fileops.EnsureWorkspaceDirectory(previousDir)