kami 7d7e524756 feat(workspace): WorkspaceResolver trust pipeline + allowed_workspace_roots ...

Resolve a client-supplied workspace dir safely: canonicalize via toRealPath,
reject privileged locations, clamp to [tools] allowed_workspace_roots (permissive
when unset, logged), fall back to the boot default on any rejection. PathJail made
non-internal so the server can reuse its symlink-safe containment. (Axis 2 Phase A, task 4.)

2026-06-02 19:57:03 +04:00

apps

feat(workspace): WorkspaceResolver trust pipeline + allowed_workspace_roots

2026-06-02 19:57:03 +04:00

core

feat(workspace): WorkspaceResolver trust pipeline + allowed_workspace_roots

2026-06-02 19:57:03 +04:00

docs

feat(artifacts): config-driven custom artifact kinds with schema validation

2026-06-02 13:58:23 +04:00

examples/workflows

fix: workflow inference chain — surface llama-server errors, user-turn-last, bundle-relative prompts

2026-06-01 23:23:29 +04:00

gradle/wrapper

epic-12: after epic audit and init commit

2026-05-17 03:19:39 +04:00

infrastructure

feat(workspace): WorkspaceResolver trust pipeline + allowed_workspace_roots

2026-06-02 19:57:03 +04:00

prompts

fix: workflow inference chain — surface llama-server errors, user-turn-last, bundle-relative prompts

2026-06-01 23:23:29 +04:00

testing

fix(kernel): require tool activity for produce-less stage completion

2026-06-02 19:56:34 +04:00

.gitignore

chore: remove orphaned MaterializingArtifactWriter, gitignore healthcheck output

2026-05-31 16:15:11 +04:00

build.gradle

chore(audit): tool path resolution, config file, dead code removal, static analysis cleanup

2026-05-19 12:48:47 +04:00

detekt.yml

fix: complete all P3 audit findings — empty modules, docs drift, detekt, worktree

2026-05-29 01:09:22 +04:00

gradle.properties

epic-12: after epic audit and init commit

2026-05-17 03:19:39 +04:00

gradlew

epic-12: after epic audit and init commit

2026-05-17 03:19:39 +04:00

gradlew.bat

epic-12: after epic audit and init commit

2026-05-17 03:19:39 +04:00

settings.gradle

feat: plane-2 tool-call intent validation (path containment slice)

2026-05-31 04:22:58 +04:00

S

Description

No description provided

4.9 MiB

Languages

Kotlin 88.4%

Go 11.4%

Python 0.2%