fix(security): harden root-scoped writes against symlink races

2026-05-14 06:18:34 +00:00 · 2026-03-02 01:27:17 +00:00
parent bfeadb80b6
commit 710004e011
4 changed files with 111 additions and 4 deletions
--- a/src/gateway/server-methods/agents-mutate.test.ts
+++ b/src/gateway/server-methods/agents-mutate.test.ts
@@ -217,6 +217,7 @@ beforeEach(() => {
      ({
        stat: async () => makeFileStat(),
        readFile: async () => Buffer.from(""),
+        truncate: async () => {},
        writeFile: async () => {},
        close: async () => {},
      }) as unknown,
@@ -621,6 +622,7 @@ describe("agents.files.get/set symlink safety", () => {
        ({
          stat: async () => targetStat,
          readFile: async () => Buffer.from("inside\n"),
+          truncate: async () => {},
          writeFile: async () => {},
          close: async () => {},
        }) as unknown,