Martin BallandClaude Opus 5.5 8ce3eb58c7 #3735: automation writes check the directory entry they replace, not only the link's target ...

Findings 41 and 69. check_write resolved a path through links and compared
the target with the write root, but safe_save puts its temporary file beside
the path given and renames it over that entry; rename_file removes it. A link
outside the root pointing in passed the check while the write landed outside.
Write access now also requires the entry itself (resolved parent + literal
name) inside the root; the existing target check still refuses an inside
link that points out.

Tests: file_access::tests::links_are_followed_before_comparing (extended),
mcp automation_roots::a_link_outside_the_write_root_into_it_is_not_written.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

2026-10-23 20:19:49 +01:00

..

src

#3692: MCP type_text types its paragraphs as one edit and one undo step

2026-10-23 20:19:49 +01:00

tests

#3735: automation writes check the directory entry they replace, not only the link's target

2026-10-23 20:19:49 +01:00

Cargo.toml

Control port: require a per-window key (split from #54) (#124)

2026-10-10 06:56:41 -04:00