Function InitSessionWorkspace

cli/agent/session_workspace.go:100–191

InitSessionWorkspace creates the per-session workspace and registers its subdirs with the engine + read validators. Idempotent: calling it twice returns the existing workspace. The returned workspace should have Cleanup() called at CLI shutdown.

(logger *zap.Logger)

//
// The returned workspace should have Cleanup() called at CLI shutdown.
func InitSessionWorkspace(logger *zap.Logger) (*SessionWorkspace, error) {
	sessionWorkspaceMu.Lock()
	defer sessionWorkspaceMu.Unlock()

	if sessionWorkspace != nil {
		return sessionWorkspace, nil
	}

	root, err := os.MkdirTemp("", "chatcli-agent-")
	if err != nil {
		return nil, fmt.Errorf("creating session tmpdir: %w", err)
	}

	scratch := filepath.Join(root, "scratch")
	if err := os.MkdirAll(scratch, 0o700); err != nil {
		_ = os.RemoveAll(root)
		return nil, fmt.Errorf("creating scratch dir: %w", err)
	}

	toolResults := filepath.Join(root, "tool-results")
	if err := os.MkdirAll(toolResults, 0o700); err != nil {
		_ = os.RemoveAll(root)
		return nil, fmt.Errorf("creating tool-results dir: %w", err)
	}

	keep := strings.EqualFold(os.Getenv("CHATCLI_AGENT_KEEP_TMPDIR"), "true")

	ws := &SessionWorkspace{
		Root:           root,
		ScratchDir:     scratch,
		ToolResultsDir: toolResults,
		keep:           keep,
		logger:         logger,
	}

	// Export env var so child processes (run_command, exec) can use it.
	_ = os.Setenv("CHATCLI_AGENT_TMPDIR", scratch)

	// Register with read validator (agent package).
	RegisterAuxReadPath(root)

	// Register with engine write/exec validator.
	engine.RegisterAuxPath(root)

	// System temp directories are allowlisted by default. Every major
	// model defaults to writing throwaway scripts under /tmp ("cat >
	// /tmp/check.sh && bash /tmp/check.sh"); blocking that forces the
	// model to guess a safe path and usually fails. The risk is low —
	// these dirs are user-owned on single-user machines. Users who
	// need strict sandboxing can set CHATCLI_BLOCK_TMP_WRITES=true.
	if !strings.EqualFold(os.Getenv("CHATCLI_BLOCK_TMP_WRITES"), "true") {
		tmpPaths := []string{os.TempDir()}
		// On macOS os.TempDir() returns a per-user /var/folders/... path,
		// but models emit /tmp verbatim. On Linux they're the same. Add
		// /tmp explicitly when it exists and differs.
		if _, err := os.Stat("/tmp"); err == nil {
			tmpPaths = append(tmpPaths, "/tmp")
		}