YeonGyu-Kim 98659783c0 fix(security): confine file resolution to project roots ...

Block traversal, out-of-root absolute path, and symlink escapes for @file references, file:// URIs, and config skill file loading while logging rejected attempts.

Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-openagent)

Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai>

2026-04-02 14:55:35 +09:00

..

agent-overrides.ts

feat: support file:// URIs in agent prompt field

2026-03-03 03:32:07 +03:00

atlas-agent.ts

fix(agents): preserve uiSelectedModel when agent override has no model

2026-03-24 16:22:03 +09:00

available-skills.ts

fix: address remaining Cubic issues — reset lastPartText on new message, TTY guard for installer, filter disabled skills, local-dev version resolution

2026-02-09 11:01:38 +09:00

environment-context.ts

feat(environment): introduce disable_omo_env configuration option

2026-02-20 02:31:18 +11:00

general-agents.ts

fix(model-resolution): honor user config overrides on cold cache

2026-03-26 16:54:04 +09:00

hephaestus-agent.ts

feat(environment): introduce disable_omo_env configuration option

2026-02-20 02:31:18 +11:00

model-resolution.ts

fix: add google provider model transform across all resolution paths

2026-02-21 02:29:02 +09:00

resolve-file-uri.test.ts

fix(security): confine file resolution to project roots

2026-04-02 14:55:35 +09:00

resolve-file-uri.ts

fix(security): confine file resolution to project roots

2026-04-02 14:55:35 +09:00

sisyphus-agent.ts

fix(agents): preserve uiSelectedModel when agent override has no model

2026-03-24 16:22:03 +09:00