Security context

Highlights

Auth Bypass: 17 prior fixes. Scrutinize any change in this area.

src/permissions/permissionChecker.ts: most-fixed (6 issues). Treat as high-risk during review.

23 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

Auth Bypass: Wildcard matching and regex parsing bugs allowed command-line and tool execution guards to be bypassed via unescaped metacharacters and unhandled glob patterns. Runtime configurations must enforce strict validation before full service fallback occurs.

Command Injection: Improperly split commands, unhandled comment symbols, and raw shell argument parsing let malicious prompt payloads escape terminal validation and trigger arbitrary OS commands. Spawning shells directly without explicit argument splitting acts as a major injection vector.

Path Traversal: Inadequate canonicalization of target paths allowed workspace directory traversal to access or overwrite local files. Command paths and file operations require strict normalization checks prior to reaching the filesystem.