pub fn host_path(forge_id: &str, container_path: &Path) -> Option<PathBuf>Expand description
Translate a container-side produced path to its durable host path for a
given forge run. Returns None when container_path is not under
CONTAINER_DIR (the caller then knows the artifact was not written to
the durable location and won’t survive reaping), or when the relative
path contains a .. component (a traversal attempt that could escape the
per-forge dir — the reader must never serve a file outside it).