Mark IJbema 6dfbc54c85 refactor(cli): root-scope project {file:} instead of blocking; keep {env:} block ...

Adopt the file-scoping approach from #11883: untrusted project config may still read {file:...} as long as the target stays inside the project root (absolute paths, ../ traversal, and symlink escapes are rejected via realpath). Keep {env:} fully blocked in project config (no safe scoped form). Make the /proc/self/fd guard cross-platform. Thread fileScope through config.ts, agent.ts, tui.ts, and overlay.ts. Update docs and changeset.

2026-07-02 14:37:42 +02:00

..

fixtures

Merge OpenCode v1.1.42 (#67)

2026-02-02 12:47:09 +01:00

agent-color.test.ts

refactor: kilo compat for v1.15.9

2026-06-15 14:48:05 +02:00

config.test.ts

refactor(cli): root-scope project {file:} instead of blocking; keep {env:} block

2026-07-02 14:37:42 +02:00

entry-name.test.ts

refactor: kilo compat for v1.15.9

2026-06-15 14:48:05 +02:00

lsp.test.ts

refactor: kilo compat for v1.14.51

2026-06-09 08:29:02 +02:00

markdown.test.ts

refactor: remove module barrels (#24554)

2026-04-27 14:33:33 -04:00

plugin.test.ts

CLI perf: reduce deps (#22652)

2026-04-16 02:03:03 -04:00

tui.test.ts

refactor(cli): root-scope project {file:} instead of blocking; keep {env:} block

2026-07-02 14:37:42 +02:00