Function isAgentMemoryPath

src/tools/AgentTool/agentMemory.ts:110–154

(absolutePath: string)

// Check if file is within an agent memory directory (any scope).
export function isAgentMemoryPath(absolutePath: string): boolean {
  // SECURITY: Normalize to prevent path traversal bypasses via .. segments
  const normalizedPath = normalize(absolutePath)
  const canonicalMemoryBase = getCanonicalNcodeConfigHomeDir()
  const legacyMemoryBase = getLegacyClaudeConfigHomeDir()

  // User scope: check memory base (may be custom dir or config home)
  if (
    normalizedPath.startsWith(join(canonicalMemoryBase, 'agent-memory') + sep) ||
    normalizedPath.startsWith(join(legacyMemoryBase, 'agent-memory') + sep)
  ) {
    return true
  }

  // Project scope: always cwd-based (not redirected)
  if (
    normalizedPath.startsWith(join(getCwd(), '.ncode', 'agent-memory') + sep) ||
    normalizedPath.startsWith(join(getCwd(), '.claude', 'agent-memory') + sep)
  ) {
    return true
  }

  // Local scope: persisted to mount when CLAUDE_CODE_REMOTE_MEMORY_DIR is set, otherwise cwd-based
  if (process.env.CLAUDE_CODE_REMOTE_MEMORY_DIR) {
    if (
      normalizedPath.includes(sep + 'agent-memory-local' + sep) &&
      normalizedPath.startsWith(
        join(process.env.CLAUDE_CODE_REMOTE_MEMORY_DIR, 'projects') + sep,
      )
    ) {
      return true
    }
  } else if (
    normalizedPath.startsWith(
      join(getCwd(), '.ncode', 'agent-memory-local') + sep,
    ) ||
    normalizedPath.startsWith(
      join(getCwd(), '.claude', 'agent-memory-local') + sep,
    )
  ) {
    return true
  }

  return false
}

/**
 * Returns the agent memory file path for a given agent type and scope.