From 74ff662026692a8d12d6aef1bf579816aee7819f Mon Sep 17 00:00:00 2001
From: Eyejoker <phj1081@gmail.com>
Date: Wed, 1 Apr 2026 13:47:34 +0900
Subject: [PATCH] feat: mount owner session directory read-only in reviewer
 container

Allows reviewer to verify runtime state files (cron state, configs)
that the owner references by absolute host path. Mounted at the same
host path so absolute path references work inside the container.
---
 src/container-runner.ts | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/src/container-runner.ts b/src/container-runner.ts
index 4e9f30c..b81b0db 100644
--- a/src/container-runner.ts
+++ b/src/container-runner.ts
@@ -321,6 +321,17 @@ export function buildReviewerMounts(
     readonly: false,
   });
 
+  // Owner session directory: read-only so reviewer can verify runtime state
+  // files (cron state, configs, etc.) that the owner references by absolute path.
+  const ownerSessionDir = path.join(DATA_DIR, 'sessions', group.folder);
+  if (fs.existsSync(ownerSessionDir)) {
+    mounts.push({
+      hostPath: ownerSessionDir,
+      containerPath: ownerSessionDir,
+      readonly: true,
+    });
+  }
+
   // Codex OAuth: mount host's ~/.codex (read-only) so codex-runner can authenticate
   const hostCodexHome =
     process.env.CODEX_HOME || path.join(os.homedir(), '.codex');