6 Commits

Include renames

Author	SHA1	Message	Date
Dylan M. Taylor	0107186cee	Engine: check the temporary file's path against the write root (#1792)	2026-11-03 19:46:09 -05:00
NetterSilverandClaude Haiku 5.5	77cd617596	Use a short temp file name in write_file for long file names ... Found while testing crates/engine/src/io.rs:49 Co-Authored-By: Claude Haiku 5.5 <noreply@anthropic.com> Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-02 13:37:19 +01:00
Dylan M. Taylor	c955407373	security(engine): check regular file and size bound on read, preserve permissions and symlinks on save (#1265) ... * security(engine): check regular file and size bound on read, preserve permissions and symlinks on save * style: format recovery.rs write_atomic	2026-10-24 04:45:48 -04:00
Brandon Thomas	081c9fdc5e	Merge the landing branch into land-r7 ... # Conflicts: # apps/deckcraft-cli/src/main.rs # apps/deckcraft-cli/tests/cli.rs # crates/engine/src/cmd/file.rs # crates/engine/src/cmd/text.rs # crates/engine/src/lib.rs # crates/engine/src/tests.rs # crates/ui-egui/src/canvas.rs # crates/ui-egui/src/lib.rs # crates/ui-egui/src/textures.rs	2026-10-14 15:34:15 -04:00
Brandon ThomasandClaude Opus 5.5	0dfc9ccf6f	Fix up #247: route main's other file access through the checked io layer ... design.browseTheme reads its path with io::read_file, and File › Info sizes the file with io::file_len (which checks the read root), so commands_do_not_touch_the_file_system_themselves passes. spell.rs is allow-listed beside recovery.rs: it touches only the app's own dictionary folders. main's render_slide MCP tool refuses a `path` argument (#371), so the root tests render to a file through call_app ui.render instead. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-14 15:27:46 -04:00
Isaac Levine	dc6ea04a8f	Engine: check automation read and write roots on every path a command reads or writes	2026-10-12 09:58:07 -04:00