luna/oh-my-opencode
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

fix(session-recovery): audit raw prompt aliases

Browse Source
This commit is contained in:
YeonGyu-Kim
2026-05-15 21:53:05 +09:00
parent 4a1c260d8b
commit 27788b4ab0
2 changed files with 24 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/shared/prompt-async-route-audit.test.ts
+9 -1
View File
@@ -42,6 +42,14 @@ describe("production prompt injection routes", () => {
// given
const files = await listSourceFiles(SOURCE_ROOT)
const offenders: string[] = []
const rawPromptPatterns = [
/\bsession\.promptAsync\s*\(/,
/\bsession\.prompt\s*\(/,
/\bReflect\.apply\s*\(\s*\w*promptAsync\b/,
/\bReflect\.apply\s*\(\s*\w*prompt\b/,
/\b(?:const|let|var)\s+\w*promptAsync\w*\s*=\s*[\w.]+\.session\.promptAsync\b/,
/\b(?:const|let|var)\s+\w*prompt\w*\s*=\s*[\w.]+\.session\.prompt\b/,
]
// when
for (const filePath of files) {
@@ -50,7 +58,7 @@ describe("production prompt injection routes", () => {
}
const contents = uncommentedLines(await readFile(filePath, "utf8")).join("\n")
if (/\bsession\.promptAsync\s*\(/.test(contents) || /\bsession\.prompt\s*\(/.test(contents)) {
if (rawPromptPatterns.some((pattern) => pattern.test(contents))) {
offenders.push(relativeSourcePath(filePath))
}
}