mirror of
https://github.com/esengine/DeepSeek-Reasonix.git
synced 2026-11-07 10:45:59 -10:00
Problem: CodeQL reported new path and allocation alerts, and Windows repeatedly failed the retained-hook restoration test. Root cause: Checked selectors were still passed onward as raw request values; some generated paths and capacity hints did not expose their bounds at the IO owner. The HTTP DTO also carried an internal inherited binding. The hook fixture fed Windows backslashes through Bash resource parsing. Fix: Resolve import/export selections to registered values, forward checked relative names for resume/migration, and guard the generated session slug before joining it to state storage. Use rooted declaration/resource reads and copies, bound resource reads, and avoid unchecked capacity addition. Pass inherited bindings outside the wire DTO. Normalize and quote the hook fixture path, including spaces, while retaining source-deletion and exact-binding assertions. Verification: Hosted alert locations reproduced locally with the path-injection and allocation queries; before/after query results and the base scan are retained separately. Boundary regressions fail on the original head and pass with the fix. Owning HTTP, store, config, hook, sidecar, plugin, specification and encoding suites; full builtin/boot tests; gofmt, vet, lint and changed-file checks. Hosted Windows and CodeQL results remain required for exact-head acceptance.