Security hardening: path validation, permission hardening, dialog timeout, CI fix#1

Merged

dreamor merged 9 commits into

mainfrom

fix/security-hardening

Jun 18, 2026

Commits on Jun 18, 2026

feat(security): add path validation utilities for read/write operations

authored and
dreamor
committed
fix(security): harden Unix socket and directory permissions

authored and
dreamor
committed
fix(security): enforce path validation on file read/write operations

authored and
dreamor
committed
fix(security): add timeout to dialog.handle_next to prevent resource leak

authored and
dreamor
committed
refactor(security): use parameterized evaluate in oneShotScrape

authored and
dreamor
committed
fix(ci): use secrets.NPM_TOKEN for npm publish authentication

authored and
dreamor
committed
test(security): add safepath validation tests and audit report

authored and
dreamor
committed
fix(ci): add missing build step in E2E job
dreamor
committed
fix: use createRequire for package.json import on Node 22
dreamor
committed