fix: path containment hardening for worktrees, fleet names, read guards and capture paths - #6678

Merged

9 commits merged into

mainfrom

fix/path-containment

Sep 28, 2026

Commits on Sep 27, 2026

fix(subagent): keep sub-agent worktrees under their root and harden worktree add

CodeWhale Bot
and
claude
committed
a85ad10
fix(workflow): refuse fleet and router names that leave their directory

CodeWhale Bot
and
claude
committed
7fa8d44
fix(tools): apply the read guards to pandoc_convert and image_ocr

CodeWhale Bot
and
claude
committed
d87f4c3
fix(computer-use): keep capture output paths in the recordings directory

CodeWhale Bot
and
claude
committed
433bae9
docs(changelog): note path containment hardening for v0.10.1

CodeWhale Bot
and
claude
committed
68d1377
fix(skills): validate registry keys before using them as cache directories

CodeWhale Bot
and
claude
committed
92a44ba
fix(tools): name the pandoc version --sandbox needs and pin the flag in a test

CodeWhale Bot
and
claude
committed
442397c
fix(computer-use): one recordings directory and backend-level capture path tests

CodeWhale Bot
and
claude
committed
7eddbe5
fix(subagent): compare worktree paths in one form on Windows

CodeWhale Bot
and
claude
committed
0a27090