Constrain restore installation to session root

This commit is contained in:
2026-09-02 00:53:35 +00:00
parent 45b27ad562
commit 3a7e2e5175
7 changed files with 133 additions and 2 deletions

View File

@@ -451,6 +451,10 @@ Restore treats a local leaf symlink or any symlinked ancestor beneath the
selected session root as a conflict, even when the linked content matches the
selected remote object. `--force` does not override that conflict.
Before each install, restore validates the destination again beneath the
selected session root. A target changed into a symlink, directory, or other
non-regular entry is not overwritten.
Restore writes an execution report at `reports/restore-latest.json`.
If restore fails after beginning installation, it leaves a durable