Diogo Soares Rodriguesandcan1357 7a944f1baa fix(cursor): confine MCP resource downloads to the workspace ...

`download_path` is workspace-relative by contract, but it arrives from
the server and `resolveToCwd` deliberately honors absolute paths, `~`,
and `..` - correct for a path a user typed, a write-anywhere primitive
for one a remote peer supplied. `/etc/cron.d/x` or `../../escape` would
have been written wherever the process can reach.

`confineToWorkspace` accepts only a non-empty relative path resolving
under the live cwd, and the download refuses anything else. The refusal
throws inside the dispatch's existing try, so it reaches the model as a
`ReadMcpResourceError` rather than a silent success or a crash.

(cherry picked from commit 963cfee21a56576033ec115db745bb18ab0a8d06)

2026-07-30 01:42:29 +02:00

..

browser

feat(coding-agent/tools): simplified browser screenshot persistence and return paths

2026-07-28 06:40:31 +02:00

computer

fix(computer-use): report Azure runtime fallback

2026-07-25 21:00:35 +00:00

eval-format

chore(coding-agent): format eval display helpers

2026-07-24 16:49:31 +02:00

hub

fix(launch): preserve logs on replay failure

2026-07-29 23:08:21 +02:00

puppeteer

feat(coding-agent): enhanced browser stealth and automation capabilities

2026-06-21 04:14:26 +02:00

acp-bridge.ts

fix(hashline,coding-agent): key snapshot tag on actually-persisted content after ACP bridge writes

2026-07-29 23:08:38 +02:00

approval.ts

fix(coding-agent): closed bash approval rule bypasses

2026-07-23 17:30:32 +02:00

ask.ts

fix(coding-agent): budget Ask markdown against padded block width

2026-07-28 10:59:33 +02:00

ast-edit.ts

fix(tui): honor padded markdown width budgets

2026-07-28 07:41:59 +00:00

ast-grep.ts

feat(coding-agent/tools)!: replaced paths arrays with path strings

2026-07-02 08:30:33 +02:00

auto-generated-guard.ts

fix(coding-agent): used session settings in file guards

2026-07-24 22:42:38 +00:00

bash-interactive.ts

fix(tools): closed spilled output descriptors on error/abort paths

2026-07-24 03:44:12 +00:00

bash-interceptor.ts

revert: "read-to-open"

2026-04-24 22:36:44 +02:00

bash-pty-selection.ts

fix: prevent ClosePseudoConsole deadlock hanging PTY on Windows

2026-05-16 07:02:24 +05:30

bash-skill-urls.ts

fix: treat escaped quotes inside double-quoted backticks as inner quoting

2026-07-23 22:15:23 +02:00

bash.ts

fix(coding-agent): prevented duplicate artifact saves and mismatched ids in bash output

2026-07-28 02:05:55 +02:00

browser.ts

feat(coding-agent/tools): simplified browser screenshot persistence and return paths

2026-07-28 06:40:31 +02:00

builtin-names.ts

feat: add native Codex computer use

2026-07-24 01:40:04 +00:00

checkpoint.ts

feat(coding-agent): allow checkpoint/rewind/learn/manage_skill in subagents when explicitly requested

2026-07-28 17:57:02 -04:00

computer-renderer.ts

feat: add native Codex computer use

2026-07-24 01:40:04 +00:00

computer.ts

style(coding-agent): format schema parity type

2026-07-27 01:21:27 +00:00

conflict-detect.ts

feat(coding-agent/tools): implemented bulk conflict resolution via conflict://*

2026-07-11 18:23:57 +02:00

context.ts

feat: add native Codex computer use

2026-07-24 01:40:04 +00:00

debug.ts

fix(tools): cap per-tool default timeout with tools.maxTimeout

2026-07-22 15:18:27 +00:00

default-renderer.ts

feat(coding-agent/tools): added default card fallback for tool rendering

2026-07-24 08:19:13 +02:00

essential-tools.ts

feat: add native Codex computer use

2026-07-24 01:40:04 +00:00

eval-backends.ts

feat(coding-agent/tools): made ruby and julia backends opt-in

2026-06-22 06:13:01 +02:00

eval-render.ts

chore(coding-agent): format eval display helpers

2026-07-24 16:49:31 +02:00

eval.ts

fix(tools): cap per-tool default timeout with tools.maxTimeout

2026-07-22 15:18:27 +00:00

fetch.ts

fix(tools): cap per-tool default timeout with tools.maxTimeout

2026-07-22 15:18:27 +00:00

file-recorder.ts

feat: added compact atom-mode parser and execution support

2026-04-29 01:16:33 +02:00

fs-cache-invalidation.ts

feat(coding-agent): added cache-based hashline stale-anchor recovery fallback

2026-05-09 05:50:09 +02:00

gh-cache-invalidation.ts

fix(coding-agent): segment bash approval commands with shell-aware tokenizer

2026-07-26 11:36:19 +00:00

gh-format.ts

fix: resolved AI/OAuth helper duplication via shared modules

2026-04-23 21:02:14 +02:00

gh-renderer.ts

fix(tui): honor padded markdown width budgets

2026-07-28 07:41:59 +00:00

gh.ts

Merge PR #5424: fix(github): add dedicated repository file reads (@roboomp)

2026-07-18 21:03:24 +02:00

github-cache.ts

fix(github): preserved aborts during cache refresh

2026-06-15 15:43:48 +00:00

glob.ts

fix(coding-agent): preserve encoded memory glob bases

2026-07-26 21:33:13 +00:00

grep.ts

feat(cursor): honor pi_grep's context and limit

2026-07-30 01:42:06 +02:00

grouped-file-output.ts

refactor(cross-cutting): moved grouped path-tree helpers into pi-utils

2026-06-10 23:13:39 +02:00

image-gen.ts

feat(coding-agent): introduced ordered provider priority lists for search and images

2026-07-23 20:44:50 +02:00

image-providers.ts

feat(coding-agent): introduced ordered provider priority lists for search and images

2026-07-23 20:44:50 +02:00

index.ts

fix(coding-agent): pair checkpoint/rewind for restricted sessions too

2026-07-28 21:18:43 -04:00

inspect-image-renderer.ts

fix(tui): handled invalid path render args

2026-07-04 15:47:52 +00:00

inspect-image.ts

Merge PR #4168: fix(inspect-image): bounded per-request timeout on the vision-model call (@roboomp)

2026-07-27 04:59:19 +02:00

json-tree.ts

refactor(deps): moved intent field constant to pi-wire

2026-06-19 04:58:29 +02:00

jtd-to-json-schema.ts

fix(coding-agent/tools): stopped re-walking JTD-converted JSON Schema for nested JTD detection

2026-05-25 17:21:53 +00:00

jtd-to-typescript.ts

refactor(coding-agent): migrated credential and utility logic to shared modules

2026-02-22 01:35:32 +01:00

jtd-utils.ts

refactor: consolidated shared auth and utilities

2026-02-22 01:58:04 +01:00

learn.ts

feat: migrated validation schemas and tool definitions from Zod to ArkType

2026-06-18 00:59:53 +02:00

list-limit.ts

build(config): refactored build and TypeScript configuration with Bun loaders

2026-01-24 00:03:52 +01:00

manage-skill.ts

fix(skills): reloaded runtime skill state

2026-07-14 20:01:45 +00:00

match-line-format.ts

feat(hashline): replaced file-hash anchors with opaque snapshot-store tags

2026-05-28 01:00:23 +02:00

memory-edit.ts

fix(mnemopi): made recall fact ids resolvable via memory reads

2026-07-09 18:27:23 +02:00

memory-recall.ts

feat(coding-agent/tools): added explicit ArkType schema descriptions to agent tools

2026-06-18 00:59:55 +02:00

memory-reflect.ts

feat(coding-agent/tools): added explicit ArkType schema descriptions to agent tools

2026-06-18 00:59:55 +02:00

memory-render.ts

fix(coding-agent): guarded retain renderer streaming args

2026-07-24 15:52:01 +00:00

memory-retain.ts

feat(coding-agent/tools): added explicit ArkType schema descriptions to agent tools

2026-06-18 00:59:55 +02:00

output-meta.ts

fix(coding-agent): prevented duplicate artifact saves and mismatched ids in bash output

2026-07-28 02:05:55 +02:00

output-schema-validator.ts

fix(coding-agent): enabled closed union validation for yield labels

2026-07-02 01:51:09 +02:00

path-utils.ts

fix(cursor): confine MCP resource downloads to the workspace

2026-07-30 01:42:29 +02:00

plan-mode-guard.ts

feat(coding-agent): improved local artifact sandbox handling and path recovery

2026-06-26 16:39:48 +02:00

read.ts

refactor(coding-agent): replaced xdevregistry with state interface and helpers

2026-07-28 03:34:36 +02:00

render-utils.ts

fix(coding-agent): used session settings in file guards

2026-07-24 22:42:38 +00:00

renderers.ts

feat: add native Codex computer use

2026-07-24 01:40:04 +00:00

report-tool-issue.ts

fix(tools): autoqa consent handling from default off to opt-in

2026-07-23 13:24:45 +02:00

resolve.ts

fix(coding-agent): marked ast_edit previews as staged proposals

2026-07-24 12:03:49 +02:00

review.ts

refactor(coding-agent): consolidated tool surface onto xd:// devices and hub

2026-07-15 15:16:29 +02:00

shell-tokenize.ts

fix(coding-agent): segment bash approval commands with shell-aware tokenizer

2026-07-26 11:36:19 +00:00

sqlite-reader.ts

fix(read): render wide SQLite tables as vertical blocks

2026-06-20 07:55:09 +00:00

terminal-output.ts

feat(launch): rendered launch logs from daemon terminal byte streams

2026-07-13 19:21:45 +02:00

todo.ts

fix(cursor): await error-drain transforms and sanitize mirrored todo labels

2026-07-26 09:29:13 -03:00

tool-errors.ts

fix(coding-agent): resolved browser teardown crashes by tracking expected abort errors

2026-07-06 08:07:24 +02:00

tool-result.ts

feat(agent): added useless-result tagging and compaction dropping of tool outputs

2026-06-12 16:26:38 +02:00

tool-timeouts.ts

fix(tools): cap per-tool default timeout with tools.maxTimeout

2026-07-22 15:18:27 +00:00

tts.ts

Merge pull request #3277 from Jaaneek/xai-grok-oauth-login

2026-07-09 08:03:39 +02:00

vibe.ts

fix(coding-agent): persisted vibe sessions across restarts

2026-07-14 17:58:14 +00:00

write.ts

fix(hashline,coding-agent): key snapshot tag on actually-persisted content after ACP bridge writes

2026-07-29 23:08:38 +02:00

xdev.ts

fix(xdev): include truncation marker in summary byte cap

2026-07-29 23:09:01 +02:00

yield.ts

fix(tools): restored baseline empty-yield guidance wording after #4961 merge

2026-07-20 22:57:11 +02:00