fix(sync): bound global dry-run path failures

pdd/core/cli.py

@@ -870,7 +870,7 @@ def _restore_estimate_env(_snapshot=_estimate_env_snapshot):
             pass
 
     # Warn users who have not completed interactive setup unless they are running it now
-    if not estimate_mode and _should_show_onboarding_reminder(ctx):
+    if not estimate_mode and not json_mode and _should_show_onboarding_reminder(ctx):
         console.print(
             "[warning]Complete onboarding with `pdd setup` to install tab completion and configure API keys.[/warning]"
         )

pdd/sync_core/fingerprint_store.py

@@ -275,12 +275,18 @@ def read_legacy(self, path: Path) -> LegacyFingerprintRecord:
         candidate = Path(path)
         if not candidate.is_absolute():
             candidate = self.checkout_root / candidate
+        try:
+            candidate_mode = candidate.lstat().st_mode
+        except OSError as exc:
+            raise FingerprintStoreError("legacy fingerprint is not a regular file") from exc
+        if stat.S_ISLNK(candidate_mode) or not stat.S_ISREG(candidate_mode):
+            raise FingerprintStoreError("legacy fingerprint is not a regular file")
         resolved = candidate.resolve(strict=True)
         try:
             resolved.relative_to(self.checkout_root)
         except ValueError as exc:
             raise FingerprintStoreError("legacy fingerprint escapes checkout") from exc
-        if candidate.is_symlink() or not resolved.is_file():
+        if not resolved.is_file():
             raise FingerprintStoreError("legacy fingerprint is not a regular file")
         try:
             payload = json.loads(resolved.read_text(encoding="utf-8"))

pdd/sync_core/supervisor.py

@@ -19,6 +19,12 @@
 import sysconfig
 
 
+# Capture the executable that loaded this trusted module. Tests and callers may
+# replace ``sys.executable`` to model argv-prefix portability; that synthetic
+# spelling must never become a measured file or sandbox mount source.
+_SUPERVISOR_EXECUTABLE = Path(sys.executable)
+
+
 @dataclass(frozen=True)
 class SupervisorLimits:
     """Hard limits applied to every untrusted validator process tree."""
@@ -86,7 +92,7 @@ def _runtime_directories() -> tuple[tuple[str, Path], ...]:
 def released_runtime_closure_paths() -> tuple[tuple[str, Path], ...]:
     """Return every regular file exposed by the sandbox with logical names."""
     entries: dict[str, Path] = {}
-    native: set[Path] = {Path(sys.executable).resolve()}
+    native: set[Path] = {_SUPERVISOR_EXECUTABLE.resolve()}
     for label, directory in _runtime_directories():
         for path in sorted(directory.rglob("*")):
             if path.is_file() and not path.is_symlink():
@@ -105,7 +111,7 @@ def released_runtime_closure_paths() -> tuple[tuple[str, Path], ...]:
             path = Path(value).resolve()
             entries[f"sandbox/{name}"] = path
             native.add(path)
-    entries["interpreter/python"] = Path(sys.executable).resolve()
+    entries["interpreter/python"] = _SUPERVISOR_EXECUTABLE.resolve()
     for path in sorted(native):
         for library in _linked_libraries(path):
             entries.setdefault(
@@ -120,7 +126,7 @@ def _runtime_roots(command: list[str], cwd: Path) -> tuple[Path, ...]:
     directories = tuple(directory for _label, directory in _runtime_directories())
     roots.update(directories)
     executables = (
-        Path(sys.executable), Path(shutil.which(command[0]) or command[0]),
+        _SUPERVISOR_EXECUTABLE, Path(shutil.which(command[0]) or command[0]),
     )
     for executable in executables:
         resolved_executable = executable.resolve()
@@ -163,7 +169,7 @@ def _limited_command(command: list[str], limits: SupervisorLimits) -> list[str]:
         "resource.setrlimit(resource.RLIMIT_NOFILE,(v[4],v[4]));"
         "os.execvpe(sys.argv[6],sys.argv[6:],os.environ)"
     )
-    return [sys.executable, "-c", script, str(limits.max_memory_bytes),
+    return [str(_SUPERVISOR_EXECUTABLE), "-c", script, str(limits.max_memory_bytes),
             str(limits.max_cpu_seconds), str(limits.max_processes),
             str(limits.max_output_bytes), "256", *command]
 
@@ -189,7 +195,7 @@ def _staged_bwrap(argv: list[str], sources: list[Path]) -> list[str]:
         " shutil.rmtree(base,ignore_errors=True)",
         "raise SystemExit(result.returncode)",
     ))
-    return ["sudo", "-n", "-E", sys.executable, "-c", helper,
+    return ["sudo", "-n", "-E", str(_SUPERVISOR_EXECUTABLE), "-c", helper,
             json.dumps(argv), json.dumps([str(path) for path in sources])]
 
 def _supervised_descendants(token: str) -> set[int]: