Skip to content

v0.5.9 — Design A+ hardening (bg-leak, cancel race, path traversal)

Choose a tag to compare

View all tags
@limeflash limeflash released this 10 Jul 14:02
v0.5.9
84cc416

Fixes from a fifth dogfood round (adversarial self-review of the 0.5.8 Design A+ staging code):

  • Background review temp-dir leak — the detached worker now always removes its stage dir after reading the response (was leaking one dir per background review).
  • Cancel status race — runJobWorker no longer overwrites a canceled status back to failed when the worker dies just after /agy:cancel.
  • Stage-dir path traversal — stageReviewMaterials rejects absolute / ..-escaping changed-file paths (EINVAL on Windows, or writes outside the stage) and verifies the destination stays under files/.

Accepted/documented: changed-files-only context (worktree-for-read reintroduces the .git leak we rejected), orphaned child + no-commits edge.

188 unit tests, CI green. /plugin update agy.

Assets 2
Loading