Kevin Ravensberg
96f6424aec
fix: confine MCP agents' files to allowed folders; recovery discard deletes only recovery entries ( #205 ) ( #578 )
...
Agent tool calls (MCP, and bridged control requests carrying allow_paths) reach files only in the open design's folder (strictly inside home or the temporary folder, not in a hidden folder, and never its hidden files), the app's recovery folder, the server's private scratch folder and each --allow-path; --allow-any-path lifts the limit. Paths are resolved first, so .. and symlinks that lead out (including a save through a link, #845 ) are refused. On Windows, UNC, device, NT, verbatim non-drive, drive-relative, alternate-stream, reserved-device and 8.3 short-name paths are refused before any file system call, and the resolved path must be on a local drive. doc.recovery_discard and doc.recover {discard} delete only real recovery entries. Docs: mcp.md, control-protocol.md, README.
2026-10-13 18:24:08 -04:00
..
2026-10-13 16:34:00 -04:00
2026-10-12 17:17:01 -04:00
2026-10-12 17:17:01 -04:00
2026-10-13 13:24:24 -04:00
2026-10-13 16:45:42 -04:00
2026-10-13 13:24:24 -04:00
2026-10-13 13:37:54 -04:00
2026-10-13 18:24:08 -04:00
2026-10-13 13:24:24 -04:00
2026-10-13 13:24:24 -04:00
2026-10-13 13:24:24 -04:00
2026-10-13 16:34:09 -04:00
2026-10-13 16:34:09 -04:00
2026-10-13 13:24:24 -04:00
2026-10-13 11:28:50 -04:00
2026-10-13 11:28:50 -04:00
2026-10-13 13:24:24 -04:00
2026-10-12 17:17:01 -04:00
2026-10-12 17:17:01 -04:00
2026-10-13 14:28:28 -04:00
2026-10-13 14:28:28 -04:00
2026-10-13 16:45:31 -04:00
2026-10-13 16:29:37 -04:00
2026-10-13 10:12:55 -04:00
2026-10-13 09:23:41 -04:00
2026-10-13 13:24:24 -04:00
2026-10-12 17:17:01 -04:00
2026-10-12 17:17:01 -04:00
2026-10-12 17:17:01 -04:00
2026-10-13 09:05:13 -04:00
2026-10-13 13:24:24 -04:00
2026-10-13 16:45:42 -04:00
2026-10-12 17:17:01 -04:00
2026-10-13 13:41:46 -04:00
2026-10-13 11:28:50 -04:00
2026-10-13 16:27:16 -04:00
2026-10-13 13:24:24 -04:00
2026-10-13 16:27:16 -04:00
2026-10-13 13:24:24 -04:00
2026-10-12 23:58:58 -04:00
2026-10-13 15:15:13 -04:00
2026-10-13 16:29:24 -04:00
2026-10-13 10:12:55 -04:00
2026-10-13 16:29:37 -04:00
2026-10-13 13:24:24 -04:00
2026-10-13 16:29:37 -04:00
2026-10-13 13:37:54 -04:00
2026-10-13 09:28:52 -04:00
2026-10-12 17:17:01 -04:00
2026-10-13 13:24:24 -04:00
2026-10-13 13:24:24 -04:00
2026-10-13 13:24:24 -04:00
2026-10-13 16:45:31 -04:00
2026-10-13 16:34:09 -04:00
2026-10-13 10:44:10 -04:00
2026-10-13 13:24:24 -04:00
2026-10-13 16:33:51 -04:00
2026-10-12 17:17:01 -04:00
2026-10-12 17:17:01 -04:00
2026-10-13 13:41:46 -04:00
2026-10-13 06:41:18 -04:00
2026-10-13 10:43:47 -04:00
2026-10-12 17:17:01 -04:00
2026-10-12 17:17:01 -04:00
2026-10-13 13:24:24 -04:00
2026-10-12 17:17:01 -04:00
2026-10-12 17:17:01 -04:00
2026-10-12 23:01:35 -04:00
2026-10-13 13:24:24 -04:00
2026-10-13 10:12:55 -04:00
2026-10-13 14:32:13 -04:00
2026-10-13 11:47:28 -04:00
2026-10-13 11:47:28 -04:00
2026-10-13 11:47:28 -04:00
2026-10-12 17:17:01 -04:00
2026-10-12 17:17:01 -04:00
2026-10-13 10:29:02 -04:00
2026-10-12 17:17:01 -04:00
2026-10-13 04:49:28 -04:00
2026-10-13 16:34:00 -04:00
2026-10-13 16:34:00 -04:00
2026-10-12 09:30:18 -04:00
2026-10-13 15:15:13 -04:00
2026-10-13 11:45:15 -04:00
2026-10-13 16:29:37 -04:00
2026-10-13 10:29:02 -04:00
2026-10-13 16:29:37 -04:00
2026-10-13 16:34:00 -04:00
2026-10-12 17:17:01 -04:00
2026-10-13 13:24:24 -04:00
2026-10-13 13:24:24 -04:00
2026-10-13 13:01:31 -04:00
2026-10-13 16:45:31 -04:00
2026-10-12 17:17:01 -04:00
2026-10-13 13:24:24 -04:00
2026-10-13 16:29:09 -04:00
2026-10-13 16:29:37 -04:00
2026-10-13 09:33:55 -04:00
2026-10-12 17:17:01 -04:00
2026-10-13 09:28:52 -04:00
2026-10-13 09:28:52 -04:00
2026-10-13 02:42:45 -04:00
2026-10-13 16:29:37 -04:00
2026-10-13 04:49:28 -04:00