Skip to content

fix: harden multimodal input safety and event isolation#28

Merged
phantom5099 merged 1 commit into
mainfrom
fork-pr-337-1776410957
Apr 17, 2026
Merged

fix: harden multimodal input safety and event isolation#28
phantom5099 merged 1 commit into
mainfrom
fork-pr-337-1776410957

Conversation

@fennoai

@fennoai fennoai Bot commented Apr 17, 2026

Copy link
Copy Markdown

Requested by @phantom5099

Summary

  • enforce image path boundary to session workdir and validate declared MIME against file-header detection
  • resolve relative attachment paths by session workdir and carry real session id in asset_save_failed events
  • add Store.DeleteSession rollback capability for newly created session failures
  • preserve top-level tool schema combinators while marking unavoidable non-object downgrade
  • support quoted @image paths with spaces and filter stale runtime events by active session/run
  • add regression tests across session/runtime/provider/tui for the above fixes

…olation

Generated with [codeagent](https://github.com/qbox/codeagent)
Co-authored-by: phantom5099 <245659304+phantom5099@users.noreply.github.com>
@phantom5099 phantom5099 merged commit 6d9f3e8 into main Apr 17, 2026
1 check passed
@fennoai fennoai Bot deleted the fork-pr-337-1776410957 branch April 17, 2026 08:44
phantom5099 pushed a commit that referenced this pull request Apr 21, 2026
test: improve coverage for subagent dispatch and chatcompletions
phantom5099 pushed a commit that referenced this pull request May 20, 2026
test(checkpoint): cover baseline guard edge cases
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants