zero/internal/plugins at fix/issue-666-plan-stall - zero

Twigpine/zero

0 Fork 0

mirror of https://github.com/Twigpine/zero.git synced 2026-11-11 18:00:54 -10:00

Files

T

History

euxaristia 2efe6d539e fix(plugins): resolve relative executable paths against plugin root (#627 )

* fix(plugins): resolve relative executable paths against plugin root

When a plugin registers a tool or a hook command as a relative path (e.g. ./tools/helper.sh), running it in the caller's workspace CWD allows local execution hijacking by placing a malicious script at that path in the untrusted workspace. Update expandPluginRootPath to resolve relative executable paths containing path separators to absolute paths inside the plugin's install directory.

* fix(plugins): remove ineffectual permission initializer in toolSafety

The initial assignment to permission was always overwritten by one of
the switch arms below it, including a case that just reassigned the
same PermissionPrompt value the initializer already held. Flagged by
ineffassign in CI.

2026-07-12 22:34:34 +08:00

activate_test.go

fix(plugins): resolve relative executable paths against plugin root (#627 )

2026-07-12 22:34:34 +08:00

activate_unix_test.go

wedge stage 09: finish plugin wiring (tools/hooks/skills) (#185 )

2026-06-13 10:21:14 +05:30

activate.go

fix(plugins): resolve relative executable paths against plugin root (#627 )

2026-07-12 22:34:34 +08:00

install_test.go

wedge stage 10: distribution (skill/plugin install, tools make) (#184 )