fix: guard session store against array corruption

2026-05-09 09:17:38 +00:00 · 2026-01-24 04:51:34 +00:00
parent 63176ccb8a
commit 975f5a5284
5 changed files with 41 additions and 2 deletions
--- a/src/infra/state-migrations.fs.ts
+++ b/src/infra/state-migrations.fs.ts
@@ -48,7 +48,7 @@ export function readSessionStoreJson5(storePath: string): {
  try {
    const raw = fs.readFileSync(storePath, "utf-8");
    const parsed = JSON5.parse(raw);
-    if (parsed && typeof parsed === "object") {
+    if (parsed && typeof parsed === "object" && !Array.isArray(parsed)) {
      return { store: parsed as Record<string, SessionEntryLike>, ok: true };
    }
  } catch {