fix(agents): validate sessions_spawn agentId format (#31381)

This commit is contained in:
Peter Steinberger
2026-03-02 15:57:17 +00:00
parent 0c6db05cc0
commit b28e472fa5
4 changed files with 22 additions and 13 deletions

View File

@@ -6,6 +6,7 @@ import {
} from "../sessions/session-key-utils.js";
import {
classifySessionKeyShape,
isValidAgentId,
parseAgentSessionKey,
toAgentStoreSessionKey,
} from "./session-key.js";
@@ -115,3 +116,17 @@ describe("session key canonicalization", () => {
).toBe("agent:main:main");
});
});
describe("isValidAgentId", () => {
it("accepts valid agent ids", () => {
expect(isValidAgentId("main")).toBe(true);
expect(isValidAgentId("my-research_agent01")).toBe(true);
});
it("rejects malformed agent ids", () => {
expect(isValidAgentId("")).toBe(false);
expect(isValidAgentId("Agent not found: xyz")).toBe(false);
expect(isValidAgentId("../../../etc/passwd")).toBe(false);
expect(isValidAgentId("a".repeat(65))).toBe(false);
});
});