Affaan Mustafa a62a3a2416 fix: sanitize getExecCommand args, escape regex in getCommandPattern, clean up readStdinJson timeout, add 10 tests ... Validate args parameter in getExecCommand() against SAFE_ARGS_REGEX to prevent command injection when returned string is passed to a shell. Escape regex metacharacters in getCommandPattern() generic action branch to prevent malformed patterns and unintended matching. Clean up stdin listeners in readStdinJson() timeout path to prevent process hanging.		2026-02-13 02:27:04 -08:00
..
package-manager.d.ts	fix: Windows path support, error handling, and dedup in validators	2026-02-12 15:57:20 -08:00
package-manager.js	fix: sanitize getExecCommand args, escape regex in getCommandPattern, clean up readStdinJson timeout, add 10 tests	2026-02-13 02:27:04 -08:00
session-aliases.d.ts	fix: 6 bugs fixed, 67 tests added for session-manager and session-aliases	2026-02-12 15:50:04 -08:00
session-aliases.js	fix: clamp getAllSessions pagination params, add cleanupAliases success field, add 10 tests	2026-02-13 02:16:22 -08:00
session-manager.d.ts	fix: Windows path support, error handling, and dedup in validators	2026-02-12 15:57:20 -08:00
session-manager.js	fix: clamp getAllSessions pagination params, add cleanupAliases success field, add 10 tests	2026-02-13 02:16:22 -08:00
utils.d.ts	fix: add missing ReplaceInFileOptions to utils.d.ts type declaration	2026-02-13 01:24:34 -08:00
utils.js	fix: sanitize getExecCommand args, escape regex in getCommandPattern, clean up readStdinJson timeout, add 10 tests	2026-02-13 02:27:04 -08:00