Function isOperatorModeEnabled

orchestrate/skills/orchestrate/scripts/cli/util.ts:492–506

(
  flagPath: string = operatorModeFlagPath()
)

 * surface. If workers can write that home directory, use a stronger boundary.
 */
export function isOperatorModeEnabled(
  flagPath: string = operatorModeFlagPath()
): boolean {
  if (typeof process.getuid !== "function") return false;
  try {
    const stat = lstatSync(flagPath);
    return (
      stat.isFile() &&
      stat.uid === process.getuid() &&
      (stat.mode & 0o777) === 0o600
    );
  } catch {
    return false;
  }
}

export function assertOperatorModeOrBail(
  action: string,