nsaspy/a0-symbolics

Fork 0

Harden chat context IDs against path traversal #54

Open

lost-rob0t wants to merge 27 commits from rage/43-context-id-containment into main

lost-rob0t commented

2026-08-24 12:10:24 +00:00

(Migrated from github.com)

Fixes #43.

RAGE starts with the deterministic security regression only. The first commit proves externally-derived context IDs can currently escape usr/chats through persistence/removal paths; production code follows only after the regression is observed red.

Security invariants:

context IDs are opaque identifiers, never filesystem path fragments;
persistence/removal independently enforce chat-root containment;
invalid external/internal IDs fail explicitly before filesystem mutation;
valid existing chat IDs remain compatible.

Fixes #43. RAGE starts with the deterministic security regression only. The first commit proves externally-derived context IDs can currently escape `usr/chats` through persistence/removal paths; production code follows only after the regression is observed red. Security invariants: - context IDs are opaque identifiers, never filesystem path fragments; - persistence/removal independently enforce chat-root containment; - invalid external/internal IDs fail explicitly before filesystem mutation; - valid existing chat IDs remain compatible.

nsaspy changed title from ~~WIP: Harden chat context IDs against path traversal~~ to Harden chat context IDs against path traversal

2026-08-27 19:43:11 +00:00

nsaspy added 1 commit

2026-09-05 04:38:48 +00:00

ci(context-id): fetch install-nix-action by full URL

Context ID Security / regression (pull_request) Failing after 2m5s

Details

b96dd5fb9d

cachix/install-nix-action is not mirrored on data.forgejo.org, so the
runner fails action resolution before any step runs. Reference the
action by its fully-qualified URL instead.

nsaspy added 1 commit

2026-09-05 05:07:31 +00:00

ci(context-id): drop forgejo token from nix github fetches

Context ID Security / regression (pull_request) Has been cancelled

Details

b9cd77e4d7

secrets.GITHUB_TOKEN on Forgejo is an instance token, not a GitHub one;
nix tarball fetches with it get HTTP 401 from api.github.com. Fetch the
public flake inputs anonymously.

nsaspy referenced this pull request

2026-09-06 11:49:10 +00:00

fix(nix): build nixpkgs mcp without its upstream test suite #112

nsaspy added 1 commit

2026-09-06 11:49:10 +00:00

ci(context-id): retrigger when the nix environment changes

Context ID Security / regression (pull_request) Has been cancelled

Details

acde9d8730

nsaspy added 1 commit

2026-09-06 11:50:56 +00:00

Merge branch 'main' into rage/43-context-id-containment

Context ID Security / regression (pull_request) Has been cancelled

Details

9e3b457c7c

nsaspy added 1 commit

2026-09-06 11:57:04 +00:00

Merge branch 'main' into HEAD

Context ID Security / regression (pull_request) Has been cancelled

Details

Android APK / build (pull_request) Has been cancelled

Details

2887d43e63

nsaspy added 1 commit

2026-09-06 13:11:47 +00:00

ci(context-id): share the heavy-ci queue across workflows

Context ID Security / regression (pull_request) Failing after 15m49s

Details

26ff75adb8

nsaspy referenced this pull request

2026-09-06 13:12:06 +00:00

ci(android): serialize heavy CI jobs in one queue #113

nsaspy added 1 commit

2026-09-06 13:36:57 +00:00

fix(nix): sandbox derivation builds on the CI runner

Context ID Security / regression (pull_request) Has been cancelled

Details

317b6a5664

nsaspy added 1 commit

2026-09-06 15:35:43 +00:00

ci(context-id): run on the host nix runner

Context ID Security / regression (pull_request) Failing after 31s

Details

ae6dc65ad2

The docker runner container cannot sandbox nix builds; run the
regression on the registered host runner (nix) with sandboxed
multi-user nix and drop the redundant installer step.

nsaspy added 1 commit

2026-09-06 16:26:38 +00:00

ci(context-id): use the nix-ci lane

Context ID Security / regression (pull_request) Failing after 51s

Details

41aba80851

nsaspy added 1 commit

2026-09-06 17:06:29 +00:00

fix(ci): run pytest as a module so the repo root is importable

Context ID Security / regression (pull_request) Successful in 46s

Details

96af5bd02e

Bare pytest does not put the working directory on sys.path, so the
context-id tests cannot import the helpers package. 'python -m pytest'
inserts the cwd, matching the other workflows.

Context ID Security / regression (pull_request) Successful in 46s

Details

This pull request can be merged automatically.

This branch is out-of-date with the base branch

You are not authorized to merge this pull request.

View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.

git fetch -u origin rage/43-context-id-containment:rage/43-context-id-containment

git switch rage/43-context-id-containment

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.

git switch main

git merge --no-ff rage/43-context-id-containment

git switch rage/43-context-id-containment

git rebase main

git switch main

git merge --ff-only rage/43-context-id-containment

git switch rage/43-context-id-containment

git rebase main

git switch main

git merge --no-ff rage/43-context-id-containment

git switch main

git merge --squash rage/43-context-id-containment