Skip to content

chore: sync core lib and CLAUDE.md from agent-core#23

Merged
avifenesh merged 1 commit into
mainfrom
chore/sync-core-perf-20260426-152015
Apr 26, 2026
Merged

chore: sync core lib and CLAUDE.md from agent-core#23
avifenesh merged 1 commit into
mainfrom
chore/sync-core-perf-20260426-152015

Conversation

@avifenesh
Copy link
Copy Markdown
Contributor

@avifenesh avifenesh commented Apr 26, 2026

Automated sync of lib/ and CLAUDE.md from agent-core.


Note

Medium Risk
Changes file read/write behavior in lib/enhance/fixer.js to error out when targets (or .backup files) are symlinks, which could break existing workflows that relied on symlinks but reduces risk of unintended writes to sensitive paths.

Overview
Hardens the auto-fix/restore flow by adding assertNotSymlink and using it to refuse reading from or writing to symlinked targets (including .backup siblings).

applyFixes now checks for symlinks before reading, before writing backups, and immediately before writing changes to narrow TOCTOU symlink-swap attacks; restoreFromBackup adds the same protections. The new helper is exported for external use.

Reviewed by Cursor Bugbot for commit d8c9c6b. Configure here.

@gemini-code-assist
Copy link
Copy Markdown

Warning

You have reached your daily quota limit. Please wait up to 24 hours and I will start processing your requests again!

@avifenesh avifenesh merged commit 78b494e into main Apr 26, 2026
5 checks passed
@avifenesh avifenesh deleted the chore/sync-core-perf-20260426-152015 branch April 26, 2026 15:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant