Mahima Shanware 79cc27439d fix(core,cli): address review findings for plan dir resolution and security ...

This commit addresses several critical findings from the review bot:

- **Security:** Implemented defense-in-depth symlink resolution. Removed insecure string-based fallbacks in `Storage.getPlansDir` and added a mandatory `isSubpath` validation AFTER directory creation in `Config.getPlansDir` to prevent TOCTOU traversal attacks.
- **Architecture:** Fixed a race condition where active extension context was mutated synchronously in `AppContainer`, potentially corrupting concurrent background tasks. Mutation now occurs within the command execution pipeline.
- **Robustness:** Switched to canonical path checking for `plan` command detection to support aliases and subcommands.
- **Regressions:** Added a `planEnabled` guard to prevent unwanted directory creation when the planning feature is disabled.
- **Validation:** Added exhaustive unit tests covering sequential context switching, shared directory deduplication, and symlink security edge cases.

2026-04-06 21:09:47 +00:00

..

examples

…

src

fix(core,cli): address review findings for plan dir resolution and security

2026-04-06 21:09:47 +00:00

GEMINI.md

fix(ui): make tool confirmations take up entire terminal height (#22366)

2026-03-23 19:42:30 +00:00

index.ts

Revert "perf(cli): optimize --version startup time (#23671)" (#23812)

2026-03-25 19:59:23 +00:00

package.json

ink 6.6.3 (#24372)

2026-04-01 04:50:12 +00:00

test-setup.ts

fix(cli): refactor test config loading and mock debugLogger in test-setup (#24389)

2026-03-31 20:11:02 -07:00

tsconfig.json

…

vitest.config.ts

…