fix(security): workspace sandbox avoid time-of-check/time-of-use (TOCTOU) races#464

Merged

xiaket merged 19 commits intosipeed:mainfrom

0x5487:fix/workspace-path-traversal

Feb 23, 2026

Commits on Feb 19, 2026

Commits on Feb 20, 2026

Refactor filesystem tools to use a `fileReadWriter` interface for both host and sandboxed I/O, improving atomic writes and error handling.
0x5487
committed

Commits on Feb 22, 2026

Merge remote-tracking branch 'upstream/main' into fix/workspace-path-traversal
0x5487
committed
refactor: unify filesystem read/write operations with atomic write guarantees and clearer naming.
0x5487
committed
refactor: rename `appendFileWithRW` function to `appendFile`
0x5487
committed
refactor: unify filesystem access by introducing a `fileSystem` interface and updating tools to use it directly, removing `os.Root` dependency from `sandboxFs`.
0x5487
committed
chore: run make fmt
0x5487
committed
fix: `validatePath` now returns an error when the workspace is empty.
0x5487
committed
Merge remote-tracking branch 'upstream/main' into fix/workspace-path-traversal
0x5487
committed