mlliuz 102bc5ef79 fix: prevent path traversal via session_id in session_store ...

load_session/save_session built the session file path directly from the
caller-supplied session_id with no validation, so a value like
'../../../tmp/secrets' (reachable from the 'load-session' CLI subcommand)
could read or write JSON files outside the session directory.

Add _validate_session_id() to reject anything outside [A-Za-z0-9_-]
(path separators, '..', absolute/Windows paths) before the id is used to
build a filename. Legitimate ids (uuid4 hex, 'session-<digits>-<n>') are
unaffected.

Adds SessionStorePathTraversalTests covering traversal rejection on both
load and save plus a legitimate-id round-trip.

2026-10-11 20:31:56 +00:00

..

assistant

chore: additional AI slop cleanup and enforcer wiring from sessions 1/5

2026-04-03 18:35:27 +09:00

bootstrap

chore: additional AI slop cleanup and enforcer wiring from sessions 1/5

2026-04-03 18:35:27 +09:00

bridge

chore: additional AI slop cleanup and enforcer wiring from sessions 1/5

2026-04-03 18:35:27 +09:00

buddy

chore: additional AI slop cleanup and enforcer wiring from sessions 1/5

2026-04-03 18:35:27 +09:00

cli

chore: additional AI slop cleanup and enforcer wiring from sessions 1/5

2026-04-03 18:35:27 +09:00

components

chore: additional AI slop cleanup and enforcer wiring from sessions 1/5

2026-04-03 18:35:27 +09:00

constants

chore: additional AI slop cleanup and enforcer wiring from sessions 1/5

2026-04-03 18:35:27 +09:00

coordinator

chore: additional AI slop cleanup and enforcer wiring from sessions 1/5

2026-04-03 18:35:27 +09:00

entrypoints

chore: additional AI slop cleanup and enforcer wiring from sessions 1/5

2026-04-03 18:35:27 +09:00

hooks

chore: additional AI slop cleanup and enforcer wiring from sessions 1/5

2026-04-03 18:35:27 +09:00

keybindings

chore: additional AI slop cleanup and enforcer wiring from sessions 1/5

2026-04-03 18:35:27 +09:00

memdir

chore: additional AI slop cleanup and enforcer wiring from sessions 1/5

2026-04-03 18:35:27 +09:00

migrations

chore: additional AI slop cleanup and enforcer wiring from sessions 1/5

2026-04-03 18:35:27 +09:00

moreright

chore: additional AI slop cleanup and enforcer wiring from sessions 1/5

2026-04-03 18:35:27 +09:00

native_ts

chore: additional AI slop cleanup and enforcer wiring from sessions 1/5

2026-04-03 18:35:27 +09:00

outputStyles

chore: additional AI slop cleanup and enforcer wiring from sessions 1/5

2026-04-03 18:35:27 +09:00

plugins

chore: additional AI slop cleanup and enforcer wiring from sessions 1/5

2026-04-03 18:35:27 +09:00

reference_data

Make the repository's primary source tree genuinely Python

2026-03-31 07:17:34 -07:00

remote

chore: additional AI slop cleanup and enforcer wiring from sessions 1/5

2026-04-03 18:35:27 +09:00

schemas

chore: additional AI slop cleanup and enforcer wiring from sessions 1/5

2026-04-03 18:35:27 +09:00

screens

chore: additional AI slop cleanup and enforcer wiring from sessions 1/5

2026-04-03 18:35:27 +09:00

server

chore: additional AI slop cleanup and enforcer wiring from sessions 1/5

2026-04-03 18:35:27 +09:00

services

chore: additional AI slop cleanup and enforcer wiring from sessions 1/5

2026-04-03 18:35:27 +09:00

skills

chore: additional AI slop cleanup and enforcer wiring from sessions 1/5

2026-04-03 18:35:27 +09:00

state

chore: additional AI slop cleanup and enforcer wiring from sessions 1/5

2026-04-03 18:35:27 +09:00

types

chore: additional AI slop cleanup and enforcer wiring from sessions 1/5

2026-04-03 18:35:27 +09:00

upstreamproxy

chore: additional AI slop cleanup and enforcer wiring from sessions 1/5

2026-04-03 18:35:27 +09:00

utils

chore: additional AI slop cleanup and enforcer wiring from sessions 1/5

2026-04-03 18:35:27 +09:00

vim

chore: additional AI slop cleanup and enforcer wiring from sessions 1/5

2026-04-03 18:35:27 +09:00

voice

chore: additional AI slop cleanup and enforcer wiring from sessions 1/5

2026-04-03 18:35:27 +09:00

__init__.py

Rewriting Project Claw Code - Python port with Rust on the way

2026-03-31 08:16:20 -07:00

_archive_helper.py

chore: additional AI slop cleanup and enforcer wiring from sessions 1/5

2026-04-03 18:35:27 +09:00

AGENTS.md

docs: add hierarchical AGENTS.md knowledge base

2026-08-16 15:18:33 +09:00

bootstrap_graph.py

Rewriting Project Claw Code - Python port with Rust on the way

2026-03-31 08:16:20 -07:00

command_graph.py

Rewriting Project Claw Code - Python port with Rust on the way

2026-03-31 08:16:20 -07:00

commands.py

Improve command lookup normalization

2026-06-25 15:43:30 +08:00

context.py

Rewriting Project Claw Code - Python port with Rust on the way

2026-03-31 08:16:20 -07:00

cost_tracker.py

Make the repository's primary source tree genuinely Python

2026-03-31 07:17:34 -07:00

costHook.py

Make the repository's primary source tree genuinely Python

2026-03-31 07:17:34 -07:00

deferred_init.py

Rewriting Project Claw Code - Python port with Rust on the way

2026-03-31 08:16:20 -07:00

dialogLaunchers.py

Make the repository's primary source tree genuinely Python

2026-03-31 07:17:34 -07:00

direct_modes.py

Rewriting Project Claw Code - Python port with Rust on the way

2026-03-31 08:16:20 -07:00

execution_registry.py

Rewriting Project Claw Code - Python port with Rust on the way

2026-03-31 08:16:20 -07:00

history.py

Rewriting Project Claw Code - Python port with Rust on the way

2026-03-31 08:16:20 -07:00

ink.py

Make the repository's primary source tree genuinely Python

2026-03-31 07:17:34 -07:00

interactiveHelpers.py

Make the repository's primary source tree genuinely Python

2026-03-31 07:17:34 -07:00

main.py

Rewriting Project Claw Code - Python port with Rust on the way

2026-03-31 08:16:20 -07:00

models.py

omx(team): auto-checkpoint worker-1 [1]

2026-05-14 17:18:52 +09:00

parity_audit.py

Make the repository's primary source tree genuinely Python

2026-03-31 07:17:34 -07:00

path_scope.py

fix: validate attached redirection paths

2026-06-08 10:18:48 +08:00

permissions.py

omx(team): auto-checkpoint worker-1 [1]

2026-05-14 17:18:52 +09:00

port_manifest.py

Make the repository's primary source tree genuinely Python

2026-03-31 07:17:34 -07:00

prefetch.py

Rewriting Project Claw Code - Python port with Rust on the way

2026-03-31 08:16:20 -07:00

projectOnboardingState.py

Make the repository's primary source tree genuinely Python

2026-03-31 07:17:34 -07:00

query_engine.py

omx(team): auto-checkpoint worker-1 [1]

2026-05-14 17:18:52 +09:00

query.py

Make the repository's primary source tree genuinely Python

2026-03-31 07:17:34 -07:00

QueryEngine.py

Make the repository's primary source tree genuinely Python

2026-03-31 07:17:34 -07:00

remote_runtime.py

Rewriting Project Claw Code - Python port with Rust on the way

2026-03-31 08:16:20 -07:00

replLauncher.py

Make the repository's primary source tree genuinely Python

2026-03-31 07:17:34 -07:00

runtime.py

Prevent plugin command aliases from becoming prompts

2026-05-15 10:07:47 +09:00

session_store.py

fix: prevent path traversal via session_id in session_store

2026-10-11 20:31:56 +00:00

setup.py

Rewriting Project Claw Code - Python port with Rust on the way

2026-03-31 08:16:20 -07:00

system_init.py

Rewriting Project Claw Code - Python port with Rust on the way

2026-03-31 08:16:20 -07:00

task.py

Make the repository's primary source tree genuinely Python

2026-03-31 07:17:34 -07:00

tasks.py

Make the repository's primary source tree genuinely Python

2026-03-31 07:17:34 -07:00

tool_pool.py

Rewriting Project Claw Code - Python port with Rust on the way

2026-03-31 08:16:20 -07:00

Tool.py

Make the repository's primary source tree genuinely Python

2026-03-31 07:17:34 -07:00

tools.py

omx(team): auto-checkpoint worker-1 [1]

2026-05-14 17:18:52 +09:00

transcript.py

Rewriting Project Claw Code - Python port with Rust on the way

2026-03-31 08:16:20 -07:00