fix(assets): link shared assets atomically instead of check-then-act - #7039

Merged

adhami3310 merged 10 commits into

mainfrom

claude/asset-symlink-toctou-race-f7c306

Sep 3, 2026

Commits on Sep 2, 2026

Commits on Sep 3, 2026

fix(assets): cut the staged name prefix by encoded bytes, not characters
adhami3310
committed
050ecb2
fix(assets): treat an unresolvable destination as needing replacement
adhami3310
committed
21c253b
fix(assets): stage the link under a name that does not derive from the asset
adhami3310
committed
be10a73
refactor(assets): guard only the destination when checking an existing link
adhami3310
committed
cffc03c
test(assets): compare the untouched link after resolution for Windows
adhami3310
committed
1e49725