Skip to content

chore: sync core lib and CLAUDE.md from agent-core#31

Merged
avifenesh merged 1 commit into
mainfrom
chore/sync-core-ship-20260426-152015
Apr 26, 2026
Merged

chore: sync core lib and CLAUDE.md from agent-core#31
avifenesh merged 1 commit into
mainfrom
chore/sync-core-ship-20260426-152015

Conversation

@avifenesh
Copy link
Copy Markdown
Contributor

@avifenesh avifenesh commented Apr 26, 2026

Automated sync of lib/ and CLAUDE.md from agent-core.


Note

Medium Risk
Changes how applyFixes and restoreFromBackup read/write files by blocking symlinks, which could affect workflows that legitimately rely on symlinked files and introduces new error paths during fixing/restoring.

Overview
Adds a new assertNotSymlink guard and wires it into the auto-fixer’s read/backup/write and backup-restore paths to refuse operating on symlinked targets (including .backup files), mitigating symlink-based overwrite attacks.

The fixer now records a structured error and skips applying fixes when the target path is a symlink, and re-checks immediately before writes to narrow TOCTOU exposure; assertNotSymlink is also exported.

Reviewed by Cursor Bugbot for commit 4602b17. Configure here.

@gemini-code-assist
Copy link
Copy Markdown

Warning

You have reached your daily quota limit. Please wait up to 24 hours and I will start processing your requests again!

@avifenesh avifenesh merged commit 78bd9f1 into main Apr 26, 2026
5 checks passed
@avifenesh avifenesh deleted the chore/sync-core-ship-20260426-152015 branch April 26, 2026 15:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant