4 Commits

Author	SHA1	Message	Date
HAL9000	482eaf559b	fix(error-handling): _handle_file_edit() now respects encoding parameter ... - Update encoding scenario to use latin-1 with non-ASCII content (café → naïve) to properly test the encoding parameter fix - Add CONTRIBUTORS.md entry for PR #8258 / issue #7559 ISSUES CLOSED: #7559	2026-04-21 08:45:06 +00:00
HAL9000	fca440a62c	fix(error-handling): _handle_file_edit() now respects encoding parameter ... - Fixed _handle_file_edit() to use encoding=inputs.get("encoding", "utf-8") for both read_text() and write_text() calls, ensuring encoding is explicit and not dependent on the platform default. - Added encoding field to the FILE_EDIT_SPEC schema to surface encoding choices to callers. ISSUES CLOSED: #7559	2026-04-21 08:45:06 +00:00
HAL9000	e18ac5f23c	fix(security): replace startswith sandbox check with Path.relative_to() in validate_path #7558 ... The validate_path() function in file_tools.py used str.startswith() to verify that a resolved path stays within the sandbox root. This allowed sibling directories whose names share a string prefix with the sandbox (e.g. /tmp/sandbox-escape/ bypassing /tmp/sandbox/) to escape the containment check. Replace the string prefix check with Path.relative_to(root), which performs a proper OS-level path prefix comparison using path separators. Add a Behave regression scenario tagged @tdd_issue @tdd_issue_7558 that exercises the prefix-collision bypass to prevent regressions. ISSUES CLOSED: #7558	2026-04-17 04:50:55 +00:00
Jeff (CTO)	2277ac1b8e	feat(tool): add built-in file tools	2026-02-14 14:03:28 -05:00