Lucas WintherandClaude Opus 5.5 ead7327bb1 fix(ai): solution and hidden-file guard runs on the canonical real path ...

read_file and read_lesson URL-decode, posix-normalise, reject .. and absolute
paths, resolve through CourseRepository.resolvePath (symlinks followed), then
guard the real course-relative path and compare real paths with every
manifest browser.solution. Hidden files are refused too.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

2026-10-30 04:48:56 +01:00

..

contracts

feat(db): Bun.SQL connection and portable migrations

2026-10-30 02:57:34 +01:00

core

feat(core): config, job queue, range media serving, feature composition

2026-10-30 03:04:46 +01:00

course-format

fix(course-format): validate anchor file via requireFile; real throw test for loadCourse catch

2026-10-30 02:55:38 +01:00

db

feat(core): config, job queue, range media serving, feature composition

2026-10-30 03:04:46 +01:00

feature-ai

fix(ai): solution and hidden-file guard runs on the canonical real path

2026-10-30 04:48:56 +01:00

feature-import

chore: bun workspace scaffold

2026-10-30 02:47:42 +01:00

feature-learner

chore: bun workspace scaffold

2026-10-30 02:47:42 +01:00

feature-studio

chore: bun workspace scaffold

2026-10-30 02:47:42 +01:00

ui

feat: server entry and web shell with design tokens

2026-10-30 03:05:49 +01:00