cleveragents/cleveragents-core

lsp/runtime: add failing test proving LspRuntime._read_file has no workspace path containment check #10736

Merged

HAL9000 merged 3 commits from test/issue-10489-lsp-path-containment-tdd into master

2026-04-26 12:32:43 +00:00

Author	SHA1	Message	Date
HAL9000	446f447c03	style(test): apply ruff format to tdd_lsp_path_containment_steps.py CI / push-validation (pull_request) Successful in 24s Details CI / helm (pull_request) Successful in 31s Details CI / build (pull_request) Successful in 49s Details CI / lint (pull_request) Successful in 59s Details CI / typecheck (pull_request) Successful in 1m21s Details CI / quality (pull_request) Successful in 1m23s Details CI / security (pull_request) Successful in 1m43s Details CI / e2e_tests (pull_request) Successful in 3m59s Details CI / integration_tests (pull_request) Successful in 5m54s Details CI / unit_tests (pull_request) Successful in 7m44s Details CI / docker (pull_request) Successful in 1m21s Details CI / coverage (pull_request) Successful in 11m19s Details CI / status-check (pull_request) Successful in 2s Details CI / status-check (push) Blocked by required conditions Details CI / benchmark-regression (push) Waiting to run Details CI / benchmark-publish (push) Waiting to run Details CI / lint (push) Successful in 59s Details CI / helm (push) Successful in 26s Details CI / build (push) Successful in 48s Details CI / quality (push) Successful in 1m21s Details CI / typecheck (push) Successful in 1m34s Details CI / security (push) Successful in 1m34s Details CI / push-validation (push) Successful in 21s Details CI / coverage (push) Has started running Details CI / integration_tests (push) Successful in 3m26s Details CI / e2e_tests (push) Successful in 4m21s Details CI / unit_tests (push) Successful in 5m10s Details CI / docker (push) Successful in 1m29s Details CI / benchmark-publish (pull_request) Has been skipped Details CI / benchmark-regression (pull_request) Successful in 1h4m13s Details	2026-04-26 12:19:34 +00:00
HAL9000	e619c1be58	test(lsp/runtime): fix TDD tag to reference bug issue #10490 and add safe-file scenario Corrected @tdd_issue_10489 → @tdd_issue_10490 so the tag references the actual bug issue (path traversal vulnerability) rather than the TDD issue itself. Added a positive scenario verifying _read_file can still read files inside the workspace, as suggested in review. ISSUES CLOSED: #10489	2026-04-26 12:19:34 +00:00
HAL9000	b5110761c2	lsp/runtime: add failing test proving LspRuntime._read_file has no workspace path containment check Added features/tdd_lsp_path_containment.feature: Introduces a TDD Behave feature with a @tdd_expected_fail scenario to demonstrate that LspRuntime._read_file() does not enforce workspace path containment, guiding a fix. Added features/steps/tdd_lsp_path_containment_steps.py: Provides step definitions for executing the new test. ISSUES CLOSED: #10489	2026-04-26 12:19:34 +00:00