Affaan Mustafa a62a3a2416 fix: sanitize getExecCommand args, escape regex in getCommandPattern, clean up readStdinJson timeout, add 10 tests ... Validate args parameter in getExecCommand() against SAFE_ARGS_REGEX to prevent command injection when returned string is passed to a shell. Escape regex metacharacters in getCommandPattern() generic action branch to prevent malformed patterns and unintended matching. Clean up stdin listeners in readStdinJson() timeout path to prevent process hanging.		2026-02-13 02:27:04 -08:00
..
package-manager.test.js	fix: sanitize getExecCommand args, escape regex in getCommandPattern, clean up readStdinJson timeout, add 10 tests	2026-02-13 02:27:04 -08:00
session-aliases.test.js	fix: clamp getAllSessions pagination params, add cleanupAliases success field, add 10 tests	2026-02-13 02:16:22 -08:00
session-manager.test.js	fix: clamp getAllSessions pagination params, add cleanupAliases success field, add 10 tests	2026-02-13 02:16:22 -08:00
utils.test.js	fix: box alignment in test runner, update metadata counts, add 18 tests	2026-02-13 01:36:42 -08:00