gnoma

Files

vikingowl 2d41c2d46c fix: session security and correctness — path traversal, turn count restore, incognito quality leak

- store: validate session ID against store root to block path traversal in Load/Save
- local: seed turnCount from LocalConfig.TurnCount so resumed sessions keep correct turn count
- main: pass TurnCount from snapshot to LocalConfig on resume
- main: suppress quality.json save when --incognito is active
- main: handle UserConfigDir error in quality save defer instead of silently using wrong path
- test: add TestSessionStore_Load/Save_RejectsPathTraversal

2026-04-06 00:04:09 +02:00

local.go

fix: session security and correctness — path traversal, turn count restore, incognito quality leak

2026-04-06 00:04:09 +02:00

session_test.go

feat: LocalConfig + auto-save hook in session.Local

2026-04-05 23:46:48 +02:00

session.go

feat: LocalConfig + auto-save hook in session.Local

2026-04-05 23:46:48 +02:00

snapshot_test.go

test: snapshot JSON round-trip with multi-turn conversation