Jason Woltje 8d511ddb67 feat(gateway): tool path hardening + sandbox escape prevention (P8-016) ...

Introduces path-guard.ts with guardPath (symlink-aware) and guardPathUnsafe
(lexical-only) that throw SandboxEscapeError on any escape attempt. Replaces
weak containment checks in file-tools, git-tools, and shell-tools with strict
guards. Adds 12 unit tests covering traversal, absolute-path, and sibling-dir
escape vectors.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-03-15 20:58:15 -05:00

..

gateway

feat(gateway): tool path hardening + sandbox escape prevention (P8-016)

2026-03-15 20:58:15 -05:00

web

fix(web): add jsdom dependency and exclude e2e from vitest (#155)

2026-03-15 20:00:53 +00:00