Function mcp_command_output_path

src/mcp/mcp.c:14880–14912

Run shell-backed query helpers inside the same process-tree containment used * by indexing. A plain popen owns only its shell stream: on disconnect there is * no safe handle with which to stop a blocked git child or its descendants. */

 * by indexing. A plain popen owns only its shell stream: on disconnect there is
 * no safe handle with which to stop a blocked git child or its descendants. */
static bool mcp_command_output_path(char out[CBM_SZ_2K]) {
    char directory[CBM_SZ_1K];
    const char *cache = cbm_resolve_cache_dir();
    int written;
    if (cache && cache[0]) {
        written = snprintf(directory, sizeof(directory), "%s/logs", cache);
        if (written <= 0 || written >= (int)sizeof(directory) ||
            !cbm_mkdir_p_ex(directory, 0700, CBM_MKDIR_FOLLOW_OWNED)) {
            return false;
        }
    } else {
        written = snprintf(directory, sizeof(directory), "%s", cbm_tmpdir());
        if (written <= 0 || written >= (int)sizeof(directory)) {
            return false;
        }
    }
    written = snprintf(out, CBM_SZ_2K, "%s/.mcp-command-XXXXXX", directory);
    if (written <= 0 || written >= CBM_SZ_2K) {
        out[0] = '\0';
        return false;
    }
    int descriptor = cbm_mkstemp(out);
    if (descriptor < 0) {
        out[0] = '\0';
        return false;
    }
#ifdef _WIN32
    (void)_close(descriptor);
#else
    (void)close(descriptor);
#endif
    return true;
}

#ifdef _WIN32
/* Resolve the OS-owned command processor without consulting PATH or mutable