2 Commits

Include renames

Author	SHA1	Message	Date
jpmschweitzerandClaude	f0bb2ffcce	format the tree to current dart format spec ... Mechanical `dart format` sweep across files that drifted from the formatter's output (mostly trailing-comma and line-wrap differences from a Dart SDK / formatter version bump). No semantic changes. Caught because the pre-push gate now actually fires. Co-Authored-By: Claude <noreply@anthropic.com>	2026-05-06 22:28:51 +02:00
jpmschweitzerandClaude	816e60d028	reject path traversal in files.read and files.ls (T-78) ... Both handlers concatenated the request path onto the workspace root without validating containment, letting `path: "../../../etc/passwd"` escape the workspace. resolveUnderRoot normalizes the path and checks containment under root.absolute.path before any filesystem access. Co-Authored-By: Claude <noreply@anthropic.com>	2026-05-05 15:02:30 +02:00