5 Commits

Author	SHA1	Message	Date
Haileyesus	baf45b7282	fix(security): canonicalize Claude image attachment reads ... Resolve image attachment paths with realpath before reading so symlinks inside allowed roots cannot escape to arbitrary files. Preserve support for symlinked project/upload roots and add focused coverage for both cases.	2026-07-06 23:03:52 +03:00
Haileyesus	417fe11718	fix: address code scanning findings ... - enforce a second image trust boundary in the provider builders: buildClaudeUserContent/buildCodexInputItems only accept files inside the upload store or the run's working directory (CodeQL path injection) - drop an always-true selectedProject check in handleSubmit - remove the unused resume option from spawnCursor	2026-07-06 21:22:30 +03:00
Haileyesus	a253a2bda4	feat: support attached images for all providers	2026-07-06 13:32:06 +03:00
Haileyesus	d7a38a567a	chore: move tests to appropriate folder	2026-06-16 17:54:48 +03:00
Haileyesus	f5eac2ec12	feat(chat): unify session gateway with stable IDs and a single WS protocol ... The frontend previously juggled placeholder IDs, provider-native IDs, and session_created handoffs, which caused race conditions and provider-specific branching. This introduces app-allocated session IDs, a chat run registry with event replay, delta sidebar updates, and one kind-based websocket contract so the UI can treat every provider the same while JSONL remains the source of truth.	2026-06-11 18:47:19 +03:00