KrisandClaude Opus 4.8 40e26c5422 fix(cron): confine cron prompt-file reads to block sensitive paths ...

A cron job's promptFilePath is user-supplied via the API and was read with an
unconfined readFile of any absolute path, so a hostile job config could exfil
arbitrary host files (e.g. /etc/passwd, SSH keys) into a Claude session.

Guard the read in resolvePrompt by mirroring the attachment-serving guard
(resolveServableAttachmentPath in file-routes): realpath-resolve the path, then
reject via the shared blocklist (/etc, /root, secret locations) plus the
optional workspace-confinement toggle before reading.

Regression tests in cron-service.test.ts: blocks /etc/passwd (the live repro)
and /root/*, fails cleanly on a missing file, and still allows an ordinary
prompt file outside the blocklist.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01PmvZR12aX2v8K7YhqxPUAU

2026-06-29 11:38:51 +05:30

..

config

fix(web): address self-review findings on #103 (master-safe defaults + hardening)

2026-06-08 15:41:46 +02:00

mobile

Merge PR #123: hide CJK textarea on welcome screen + mobile test update

2026-06-14 22:43:17 +02:00

mocks

fix(input): durable exactly-once input delivery so a dropped link can't lose a prompt

2026-06-19 16:58:40 +02:00

routes

fix: address PR review findings for Gemini run mode + Ralph todo-config

2026-06-25 00:26:06 +02:00

utils

test: de-flake StaleExpirationMap age/TTL timing assertions for CI

2026-06-10 01:38:40 +02:00

ai-idle-checker.test.ts

chore: rename Claudeman to Codeman

2026-02-26 16:44:34 +01:00

api-generate-plan.test.ts

chore: bump version to 0.1402

2026-01-27 23:15:25 +01:00

api-responses.test.ts

test(ci): run the unit suite in CI + frontend-syntax gate; green pre-existing test debt

2026-06-09 20:02:15 +02:00

attachment-magic.test.ts

COD-37 add server-side attachment pipeline (registry, magic-link, path guard)

2026-06-11 10:27:09 +02:00

auth-security.test.ts

Require the hook-event secret unconditionally, not only under a managed tunnel

2026-06-14 12:46:58 -04:00

away-digest-ui.test.ts

COD-8 add away digest

2026-06-19 17:58:06 -04:00

away-digest.test.ts

COD-8 add away digest

2026-06-19 17:58:06 -04:00

bash-tool-parser.test.ts

chore: bump version to 0.1486

2026-02-12 13:44:07 +01:00

buffer-accumulator.test.ts

refactor: codebase cleanup — dead code, regex helper, centralized constants, tests

2026-03-07 07:33:44 +01:00

buffer-management.test.ts

chore: rename Claudeman to Codeman

2026-02-26 16:44:34 +01:00

claude-scrollback-strip.test.ts

fix(terminal): keep Claude scrollback reachable — strip alt-screen/3J/mouse for claude mode (v1.1.7)

2026-06-16 18:08:45 +02:00

cleanup-manager.test.ts

test: add unit tests for Debouncer, CleanupManager, and timer migration refactors

2026-03-01 16:50:23 +01:00

cli-commands.test.ts

fix: COD-29 fail closed for unauthenticated network binds

2026-06-08 11:01:34 -04:00

cod54-hook-event-auth.test.ts

Require the hook-event secret unconditionally, not only under a managed tunnel

2026-06-14 12:46:58 -04:00

codex-snapshot-replay.test.ts

fix(terminal): bound + harden xterm snapshot persistence

2026-06-11 10:16:47 +02:00

codex-terminal-output.test.ts

fix(codex): reassemble chunk-split sequences before the strip; mouse parity on replay

2026-06-10 22:47:02 +02:00

cron-service.test.ts

fix(cron): confine cron prompt-file reads to block sensitive paths

2026-06-29 11:38:51 +05:30

cron-time.test.ts

refactor(cron): rename scheduler feature to cron

2026-06-29 11:35:56 +05:30

debouncer.test.ts

test: add unit tests for Debouncer, CleanupManager, and timer migration refactors

2026-03-01 16:50:23 +01:00

dependency-checker.test.ts

fix(doctor): correct Node minimum, drop phantom gemini, add pdftoppm, validate --category

2026-06-14 22:24:46 +02:00

dependency-report.test.ts

Add codeman doctor tool-dependency checker (COD-45)

2026-06-14 12:25:49 -04:00

dependency-security.test.ts

chore: COD-28 harden dependencies and public assets

2026-06-08 09:56:06 -04:00

document-conversion-limiter.test.ts

fix(attachments): harden document preview/thumbnail path (review of #120)

2026-06-14 08:43:57 +02:00

document-preview-cache-eviction.test.ts

fix(attachments): harden document preview/thumbnail path (review of #120)

2026-06-14 08:43:57 +02:00

document-preview-cache.test.ts

COD-38 document attachment previews + thumbnails (attachment cards)

2026-06-12 09:09:14 -04:00

document-thumbnailer.test.ts

COD-38 document attachment previews + thumbnails (attachment cards)

2026-06-12 09:09:14 -04:00

edge-cases.test.ts

feat(api): establish stable HTTP contract — uniform {success,data} envelope, status codes, /api/v1

2026-06-10 01:30:43 +02:00

effort-injection.test.ts

feat: inject effort as soft default via CLI flags instead of env var (#104)

2026-06-07 04:33:11 +02:00

file-link-click.test.ts

feat(api): establish stable HTTP contract — uniform {success,data} envelope, status codes, /api/v1

2026-06-10 01:30:43 +02:00

file-stream-manager.test.ts

test(ci): run the unit suite in CI + frontend-syntax gate; green pre-existing test debt

2026-06-09 20:02:15 +02:00

frontend-public-tooling.test.ts

chore: COD-28 harden dependencies and public assets

2026-06-08 09:56:06 -04:00

gemini-mode.test.ts

feat: add Gemini run mode

2026-06-19 13:10:17 -04:00

hook-secret-selfheal.test.ts

fix(hooks): self-heal stale pre-secret hook configs so COD-91 doesn't 401 them

2026-06-14 22:35:29 +02:00

hooks-config.test.ts

feat(api): establish stable HTTP contract — uniform {success,data} envelope, status codes, /api/v1

2026-06-10 01:30:43 +02:00

http-contract.test.ts

fix(api): close contract gaps found by post-merge adversarial audit

2026-06-10 03:41:04 +02:00

image-watcher.test.ts

COD-38 document attachment previews + thumbnails (attachment cards)

2026-06-12 09:09:14 -04:00

inline-rename.test.ts

fix(client): harden inline rename against CJK, mid-rename deletion, and double-fire

2026-05-12 09:57:08 +02:00

integration-flows.test.ts

feat(api): establish stable HTTP contract — uniform {success,data} envelope, status codes, /api/v1

2026-06-10 01:30:43 +02:00

keyboard-shortcuts.test.ts

fix(shortcuts): stop Alt/Option nav keys leaking ESC sequences into the terminal

2026-06-14 22:27:36 +02:00

link-provider-regex.test.ts

fix(terminal): linear-time link-provider regex; always allow blob workers in CSP

2026-06-10 18:06:45 +02:00

lru-map.test.ts

refactor: codebase cleanup — dead code, regex helper, centralized constants, tests

2026-03-07 07:33:44 +01:00

markdown-sanitizer.test.ts

fix(sanitizer): enforce the curated allowlist + make the test run order-independently

2026-06-14 22:21:13 +02:00

memory-leak-prevention.test.ts

chore: rename Claudeman to Codeman

2026-02-26 16:44:34 +01:00

mobile-header-buttons-policy.test.ts

feat(attachments): make the header attachments button opt-in (default OFF)

2026-06-14 21:21:06 +02:00

mux-factory.test.ts

chore: bump version to 0.1538

2026-02-18 12:51:35 +01:00

network-auth-policy.test.ts

fix: COD-29 harden downloads and extract auth policy

2026-06-08 11:01:34 -04:00

network-host-guard.test.ts

fix(security): block DNS rebinding + cross-site CSRF + subagent-panel XSS

2026-06-09 03:19:51 +02:00

nice-wrapper.test.ts

chore: bump version to 0.1486

2026-02-12 13:44:07 +01:00

opencode-resize.test.ts

fix: address code review findings for OpenCode integration

2026-02-26 15:58:26 +01:00

operation-lightspeed.test.ts

feat(api): establish stable HTTP contract — uniform {success,data} envelope, status codes, /api/v1

2026-06-10 01:30:43 +02:00

orchestrator-loop.test.ts

fix: patch 3 production bugs found during deep audit

2026-03-21 19:23:37 +01:00

orchestrator-planner.test.ts

feat: add Orchestrator Loop — phased plan execution with team agents

2026-03-21 07:20:18 +01:00

perf-browser.test.ts

test: COD-30 stabilize perf browser timing

2026-06-08 10:27:18 -04:00

perf-subagent-load.test.ts

chore: rename Claudeman to Codeman

2026-02-26 16:44:34 +01:00

pty-interactive.test.ts

fix: bulletproof test safety — IS_TEST_MODE guards prevent tests from killing real tmux sessions

2026-02-12 18:26:16 +01:00

push-endpoint-validation.test.ts

fix(security): push-endpoint SSRF guard + tmux name validation; document tail-file roots

2026-06-09 20:02:17 +02:00

push-payload-host-title.test.ts

test: fix title tests for new host constructor arg + async renderIndexHtml

2026-06-08 18:01:20 +02:00

qr-auth.test.ts

feat(api): establish stable HTTP contract — uniform {success,data} envelope, status codes, /api/v1

2026-06-10 01:30:43 +02:00

quick-start.test.ts

feat(api): establish stable HTTP contract — uniform {success,data} envelope, status codes, /api/v1

2026-06-10 01:30:43 +02:00

ralph-config.test.ts

refactor: rename inner-loop-tracker to ralph-tracker with API improvements

2026-01-21 22:36:45 +01:00

ralph-integration.test.ts

feat(api): establish stable HTTP contract — uniform {success,data} envelope, status codes, /api/v1

2026-06-10 01:30:43 +02:00

ralph-loop-deep.test.ts

fix: ralph tracker — 3 bugs: first-occurrence completion, double-counting, TodoWrite pattern

2026-02-19 14:00:10 +01:00

ralph-loop.test.ts

refactor: improve code quality with stricter TypeScript and memory leak prevention

2026-01-21 14:01:47 +01:00

ralph-prompt.test.ts

fix(terminal): linear-time link-provider regex; always allow blob workers in CSP

2026-06-10 18:06:45 +02:00

ralph-tracker.test.ts

test: add unit tests for Debouncer, CleanupManager, and timer migration refactors

2026-03-01 16:50:23 +01:00

reliable-input-dedup.test.ts

fix(input): durable exactly-once input delivery so a dropped link can't lose a prompt

2026-06-19 16:58:40 +02:00

render-index-html.test.ts

fix(web): address self-review findings on #105 (settings cache + brittle reveal)

2026-06-08 15:46:10 +02:00

respawn-adaptive-timing.test.ts

refactor: codebase cleanup — dead code, regex helper, centralized constants, tests

2026-03-07 07:33:44 +01:00

respawn-analysis.md

chore: rename Claudeman to Codeman

2026-02-26 16:44:34 +01:00

respawn-controller.test.ts

feat(session,mobile): auto-resume on usage limit + mobile view fixes

2026-06-10 20:41:34 +02:00

respawn-health.test.ts

refactor: codebase cleanup — dead code, regex helper, centralized constants, tests

2026-03-07 07:33:44 +01:00

respawn-metrics.test.ts

refactor: codebase cleanup — dead code, regex helper, centralized constants, tests

2026-03-07 07:33:44 +01:00

respawn-patterns.test.ts

refactor: codebase cleanup — dead code, regex helper, centralized constants, tests

2026-03-07 07:33:44 +01:00

respawn-scenarios.md

fix: use temp file for plan checker prompt to avoid E2BIG + fix cancel race condition

2026-01-25 07:52:40 +01:00

respawn-team-awareness.test.ts

test: add shared mock infrastructure and route tests (phase 7)

2026-03-01 14:33:18 +01:00

respawn-test-plan.md

chore: rename Claudeman to Codeman

2026-02-26 16:44:34 +01:00

run-mode-ui.test.ts

fix: address PR review findings for Gemini run mode + Ralph todo-config

2026-06-25 00:26:06 +02:00

scheduled-runs.test.ts

fix(api): close contract gaps found by post-merge adversarial audit

2026-06-10 03:41:04 +02:00

screenshot-capture.test.ts

chore: bump version to 0.1541

2026-02-18 18:14:13 +01:00

search-service.test.ts

COD-9 add cross-session search backend (GET /api/search) v1

2026-06-19 12:35:16 -04:00

security-regression.test.ts

test(ci): run the unit suite in CI + frontend-syntax gate; green pre-existing test debt

2026-06-09 20:02:15 +02:00

self-update.test.ts

feat(self-update): launchd-daemon supervisor — rootless restart on headless Macs

2026-06-10 17:08:36 +02:00

server-index-title.test.ts

fix(usage): address code-review findings in plan-usage telemetry

2026-06-14 07:33:52 +02:00

session-attachment-history.test.ts

fix(attachments): address review findings on attachment history drawer (#121)

2026-06-14 09:30:01 +02:00

session-auto-resume.test.ts

feat(session,mobile): auto-resume on usage limit + mobile view fixes

2026-06-10 20:41:34 +02:00

session-cleanup.test.ts

feat(api): establish stable HTTP contract — uniform {success,data} envelope, status codes, /api/v1

2026-06-10 01:30:43 +02:00

session-manager.test.ts

fix(mobile): address review blockers on the touch-device change set

2026-06-10 04:07:26 +02:00

session-resize-arbitration.test.ts

feat(terminal): add forced redraw resize

2026-06-17 23:41:47 +08:00

session-state.test.ts

chore: rename Claudeman to Codeman

2026-02-26 16:44:34 +01:00

session.test.ts

feat(api): establish stable HTTP contract — uniform {success,data} envelope, status codes, /api/v1

2026-06-10 01:30:43 +02:00

setup.ts

docs+test: document Codex run mode in CLAUDE.md; make tests immune to CODEMAN_GESTURE

2026-06-10 16:23:57 +02:00

sse-events.test.ts

feat(api): establish stable HTTP contract — uniform {success,data} envelope, status codes, /api/v1

2026-06-10 01:30:43 +02:00

sse-registry-parity.test.ts

test(ci): run the unit suite in CI + frontend-syntax gate; green pre-existing test debt

2026-06-09 20:02:15 +02:00

sse-subscription-filter.test.ts

feat(api): establish stable HTTP contract — uniform {success,data} envelope, status codes, /api/v1

2026-06-10 01:30:43 +02:00

stale-expiration-map.test.ts

refactor: codebase cleanup — dead code, regex helper, centralized constants, tests

2026-03-07 07:33:44 +01:00

state-store.test.ts

chore: version packages

2026-02-28 14:45:39 +01:00

string-utilities.test.ts

test: add global test setup with screen limits and reach 1337 tests

2026-01-22 11:30:10 +01:00

strip-ink-redraw-bloat.test.ts

test(routes): regression coverage for stripInkRedrawBloat

2026-05-12 10:11:47 +02:00

subagent-watcher.test.ts

fix(subagent-watcher): discover workflow-nested agents + harden meta→transcript upgrade

2026-06-15 01:43:15 +02:00

tab-overflow.test.ts

fix(tabs): re-evaluate auto-wrap on resize and on every full tab rebuild

2026-06-14 22:38:19 +02:00

task-queue.test.ts

perf: implement phase 1-3 performance optimizations

2026-02-28 17:39:44 +01:00

task-tracker.test.ts

perf: implement phase 1-3 performance optimizations

2026-02-28 17:39:44 +01:00

task.test.ts

test: add unit tests for Task class

2026-01-21 07:19:49 +01:00

team-watcher.test.ts

chore: rename Claudeman to Codeman

2026-02-26 16:44:34 +01:00

templates.test.ts

fix(terminal): linear-time link-provider regex; always allow blob workers in CSP

2026-06-10 18:06:45 +02:00

terminal-flush-budget.test.ts

fix(codex): smaller first-frame write budget + scroll-up grace for codex

2026-06-10 13:34:45 -04:00

terminal-layout-css.test.ts

feat(terminal): tmux pane-buffer primitives and session/render reliability

2026-06-09 15:39:03 -04:00

terminal-parsing.test.ts

chore: rename Claudeman to Codeman

2026-02-26 16:44:34 +01:00

terminal-touch-tap.test.ts

fix(mobile): prevent terminal tap selection

2026-06-17 23:40:21 +08:00

tmux-capture-color.test.ts

feat(terminal): tmux pane-buffer primitives and session/render reliability

2026-06-09 15:39:03 -04:00

tmux-manager.test.ts

feat(terminal): snapshot-replay on tab switches (xterm serialize + live pane capture)

2026-06-10 19:56:30 -04:00

tmux-restart-recovery.test.ts

chore: rename Claudeman to Codeman

2026-02-26 16:44:34 +01:00

tmux-window-size-query.test.ts

fix(tmux): isolate sessions on a dedicated socket + raise pane nofile limit (fixes new-session crash after tmux upgrade) (#96)

2026-05-25 23:28:58 +02:00

transcript-watcher.test.ts

feat: add hook-based idle detection for respawn controller

2026-01-25 21:29:35 +01:00

types.test.ts

feat(api): establish stable HTTP contract — uniform {success,data} envelope, status codes, /api/v1

2026-06-10 01:30:43 +02:00

usage-limit-patterns.test.ts

feat(session,mobile): auto-resume on usage limit + mobile view fixes

2026-06-10 20:41:34 +02:00

usage-telemetry.test.ts

fix(usage): address code-review findings in plan-usage telemetry

2026-06-14 07:33:52 +02:00

validation-utilities.test.ts

test: add global test setup with screen limits and reach 1337 tests

2026-01-22 11:30:10 +01:00

webgl-fallback.test.ts

fix(renderer): WebGL longtask fallback hardening (#91)

2026-05-19 11:43:36 +02:00

workflow-run-watcher.test.ts

feat(ultracode): enrich live run tracking — real per-agent tokens/tools/state, readable title, blue connector line, click-to-open window

2026-06-18 10:00:04 +02:00