Huang-404-Q 5839822aa1

fix(agents): validate the agent name in FileAgentStore.get_soul (#7265) ...

get_soul was the only read/write method that skipped validate_agent_name,
so a name like "../../other-user/agents/planner" reached
resolve_agent_dir and read another user's SOUL.md. Validate it like the
other methods do.

The regression test asserts ValueError for a traversal name; it reads the
other user's soul on main.

Co-authored-by: Willem Jiang <willem.jiang@gmail.com>

2026-10-23 14:54:21 +08:00

..

extension-api

feat(workflows): add durable restart recovery (Phase 3) (#7075)

2026-10-19 15:24:53 +08:00

harness

fix(agents): validate the agent name in FileAgentStore.get_soul (#7265)

2026-10-23 14:54:21 +08:00