fix(mcp): reject unsafe Deep Agents projection paths

docs/manage-sandboxes/manage-mcp-servers.mdx

@@ -37,6 +37,18 @@ An existing valid provider can remain ready when a host variable is unset becaus
 
 For a trusted private server, status resolves the endpoint without changing managed state. Text output reports `private address pins: match`, `drift`, or `unresolved`. JSON output reports the same value in `trustedPrivateTarget.state` and includes the recorded pins. Status never adds a new address to the policy.
 
+<AgentOnly variant="deepagents">
+
+Before it reads `/sandbox/.deepagents/.nemoclaw-mcp.json`, Deep Agents Code v2 `mcp status` checks the path type.
+It does not follow a final symbolic link or read from a FIFO.
+If the path is a symbolic link, FIFO, or another non-regular file, the command names the path type, writes no status output, and exits with status `2`.
+The diagnostic starts with `Unsafe managed Deep Agents MCP projection path:` and names a type such as `symbolic link`, `FIFO`, `non-regular file`, or `non-directory parent`.
+Other Deep Agents inspection failures can also exit with status `2`.
+Use the standard error diagnostic to distinguish an unsafe path from another inspection failure.
+Deep Agents Code v1 reads the legacy `.deepagents/.mcp.json` path and does not expose these type-specific diagnostics.
+
+</AgentOnly>
+
 ## Discover Advertised Tools
 
 Pass `--tools` with one server name to request the server's advertised tool names:

src/lib/actions/sandbox/mcp-bridge-adapter-deepagents-legacy.ts

@@ -48,7 +48,7 @@ export function buildDeepAgentsMcpRollbackRegisterCommand(
     ...DEEPAGENTS_MANAGED_PROJECTION_HELPERS,
     ...DEEPAGENTS_LEGACY_CONFIG_HELPERS,
     ...MANAGED_HTTP_SERVER_MATCH_HELPERS,
-    `runtime_kind = "auto"  # NEMOCLAW_DEEPAGENTS_RUNTIME_TEST_ANCHOR`,
+    `runtime_kind = "auto"`,
     "if runtime_kind == 'auto':",
     "    runtime_kind = 'unknown'",
     "    try:",
@@ -71,14 +71,16 @@ export function buildDeepAgentsMcpRollbackRegisterCommand(
     "data = {}",
     "managed_identity = None",
     "managed_descriptor = None",
+    "managed_parent_identity = None",
+    "managed_parent_descriptor = None",
     "legacy_identity = None",
     "def fail_rollback(message):",
-    "    close_managed_projection_descriptor(managed_descriptor)",
+    "    close_managed_projection_descriptors(managed_descriptor, managed_parent_descriptor)",
     "    print(message, file=sys.stderr)",
     "    raise SystemExit(2)",
     "try:",
     "    if is_v2:",
-    "        data, managed_identity, managed_descriptor = load_managed_projection_for_update(config_path)",
+    "        data, managed_identity, managed_descriptor, managed_parent_descriptor, managed_parent_identity = load_managed_projection_for_update(config_path)",
     "    elif os.path.lexists(config_path):",
     "        data, legacy_identity = read_legacy_config(config_path)",
     "except (OSError, UnicodeDecodeError, ValueError) as exc:",
@@ -108,8 +110,8 @@ export function buildDeepAgentsMcpRollbackRegisterCommand(
     "    if payload['server'] in servers and current != payload['expected']:",
     "        fail_rollback(f'Refusing to overwrite user-owned legacy MCP server at {config_path}')",
     "    servers[payload['server']] = payload['expected']",
-    "config_path.parent.mkdir(parents=True, exist_ok=True)",
     "if not is_v2:",
+    "    config_path.parent.mkdir(parents=True, exist_ok=True)",
     "    tmp_fd, tmp_name = tempfile.mkstemp(prefix='.nemoclaw-mcp.', dir=config_path.parent)",
     "    try:",
     "        os.fchmod(tmp_fd, 0o600)",
@@ -131,7 +133,7 @@ export function buildDeepAgentsMcpRollbackRegisterCommand(
     "            pass",
     "else:",
     "    try:",
-    "        write_managed_projection(config_path, data, managed_identity, managed_descriptor)",
+    "        write_managed_projection(config_path, data, managed_identity, managed_descriptor, managed_parent_descriptor, managed_parent_identity)",
     "    except (OSError, ValueError) as exc:",
     "        fail_rollback(f'Could not publish managed MCP rollback state at {config_path}: {exc}')",
     "try:",