Garry Tan 73f5d0b77d refactor: extract path-security.ts shared module ... validateOutputPath, validateReadPath, and SAFE_DIRECTORIES were duplicated across write-commands.ts, meta-commands.ts, and read-commands.ts. Extract to a single shared module with re-exports for backward compatibility. Also adds validateTempPath() for the upcoming GET /file endpoint (TEMP_DIR only, not cwd, to prevent remote agents from reading project files). Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>		2026-04-07 18:56:46 -10:00
..
bin	feat: multi-agent support — gstack works on Codex, Gemini CLI, and Cursor (v0.9.0) (#226)	2026-03-19 18:20:50 -07:00
scripts	fix: Windows support — Node.js server fallback for Playwright (#255)	2026-03-20 12:22:11 -07:00
src	refactor: extract path-security.ts shared module	2026-04-07 18:56:46 -10:00
test	refactor: extract path-security.ts shared module	2026-04-07 18:56:46 -10:00
PLAN-snapshot-dropdown-interactive.md	fix: snapshot -i auto-detects dropdown/popover interactive elements (#845)	2026-04-05 22:57:45 -07:00
SKILL.md	feat: content security — 4-layer prompt injection defense for pair-agent (#815)	2026-04-06 14:41:06 -07:00
SKILL.md.tmpl	feat: sidebar CSS inspector + per-tab agents (v0.13.9.0) (#650)	2026-03-30 12:51:05 -06:00