memory-apply

Apply a pre-approved triage plan to a memory directory.

Step 1 — Parse arguments

The user invoked this command with: $ARGUMENTS

• Table path: first positional argument, required. In v0.4.0 this defaulted to /tmp/triage_table.md when omitted; that default was removed in v0.4.1 (H3) because /tmp is not private on multi-user systems — a pre-placed /tmp/triage_table.md by another user or process could hijack the apply. Today /mempenny:memory-triage prints a per-invocation mktemp path; pass that path here. If the positional arg is missing, report errors.table_not_found from the loaded locale and STOP.
  • Path validation (H3): the table path must match ^/[A-Za-z0-9/_.\ -]{1,4096}$, must resolve via realpath, must exist, and must not be a symlink. Reject otherwise.
  • Permission sanity (F-M1 — explicit shell checks, not narrative):

    perm=$(stat -c %a "$TABLE_PATH" 2>/dev/null || echo "")
    owner=$(stat -c %U "$TABLE_PATH" 2>/dev/null || echo "")
    # World-writable = octal "other" digit has bit 2 set → last char in {2,3,6,7}
    case "$perm" in *[2367]) echo "ABORT: table is world-writable ($perm) — another user could have written it"; exit 1;; esac
    # World-readable = other digit has bit 4 set → last char in {4,5,6,7}. Warn only; the contents are a dry-run proposal, not secret.
    case "$perm" in *[4567]) echo "WARN: table is world-readable ($perm) — prefer 600 (mktemp default)";; esac
    # Ownership: must be the current user
    [ "$owner" = "$(id -un)" ] || { echo "ABORT: table owned by '$owner', not '$(id -un)'"; exit 1; }
    

• --dir <path> — absolute path to the memory directory to apply against. Critical: if the triage was run with --dir, the apply must be run with the same --dir so the table lines up with the right target dir. If not set, auto-detect the current project's memory dir (same logic as /mempenny:memory-triage).
• --lang <code> — language for the user-visible summary. If not passed, check MEMPENNY_LOCALE. Default en.