d

domain-api/app/core/files.py

@@ -1,6 +1,7 @@
 from __future__ import annotations
 
 import json
+import os
 from pathlib import Path
 from datetime import datetime
 
@@ -63,9 +64,35 @@ def tail_lines(relative_path: str, max_lines: int = 120) -> list[str]:
 
 
 def runtime_root() -> Path:
-    path = Path(__file__).resolve().parents[2] / "runtime"
-    path.mkdir(parents=True, exist_ok=True)
-    return path
+    env_override = str(os.getenv("DOMAIN_API_RUNTIME_ROOT", "") or "").strip()
+    candidates: list[Path] = []
+    if env_override:
+        candidates.append(Path(env_override))
+
+    base_dir = Path(__file__).resolve().parents[2]
+    for parent in base_dir.parents:
+        if parent.name != "releases":
+            continue
+        # Released builds live under /opt/domaincheck/releases/<release>/domain-api.
+        # Runtime state must not be written back into the immutable release tree,
+        # otherwise sync-agent / detect runtime snapshots fail with permission errors.
+        candidates.append(parent.parent / "runtime" / "domain-api")
+        break
+
+    candidates.append(base_dir / "runtime")
+
+    last_error: OSError | None = None
+    for candidate in candidates:
+        try:
+            candidate.mkdir(parents=True, exist_ok=True)
+            return candidate
+        except OSError as exc:
+            last_error = exc
+            continue
+
+    if last_error is not None:
+        raise last_error
+    raise RuntimeError("failed to resolve runtime root")
 
 
 def read_runtime_json(filename: str, default: dict | list | None = None):
@@ -164,7 +191,16 @@ def load_detect_records() -> list[dict]:
     try:
         with path.open("r", encoding="utf-8") as handle:
             return json.load(handle)
-    except (json.JSONDecodeError, OSError):
+    except (json.JSONDecodeError, UnicodeDecodeError, OSError):
+        try:
+            raw = path.read_bytes()
+            text = raw.decode("utf-8", errors="replace")
+            decoder = json.JSONDecoder()
+            payload, _ = decoder.raw_decode(text)
+            if isinstance(payload, list):
+                return payload
+        except Exception:
+            pass
         return []