Arnaud Héritier a28f32e663 feat: keep generated-media saves inside the owning workspace ...

Redirect absolute, traversal, home-relative and symlink-escaping targets to a sanitized workspace basename with a bounded warning. Generated media never elicits a path decision or writes externally; normal ACP and CLI turns complete without a form consumer. Preserve MIME correction, collision-safe atomic writes, partial success, owning-session provenance and workspace-only manifest authorization. Keep the pinned root-kind migration for database compatibility.

2026-09-10 10:51:39 +02:00

..

image_generation_warning_test.go

feat(#3996): materialize generated media with no-resend history

2026-09-10 10:17:07 +02:00

printer_test.go

test: add t.Parallel() to eligible tests

2026-06-29 13:39:47 +02:00

printer.go

feat: three-mode safety policy (strict / balanced / autonomous) with native shell classification

2026-07-27 10:10:48 +02:00

runner_test.go

feat: keep generated-media saves inside the owning workspace

2026-09-10 10:51:39 +02:00

runner.go

feat: keep generated-media saves inside the owning workspace

2026-09-10 10:51:39 +02:00