zara-shell: reject malformed cwd with structured ShellError #134

New issue

Closed

opened 2026-09-08 02:03:02 +00:00 by nsaspy · 0 comments

nsaspy commented

2026-09-08 02:03:02 +00:00

Owner

Problem

ShellRunner._validate_cwd() passes caller input directly to Path(). Non-path-like values such as integers can therefore leak a Python TypeError instead of the plugin's structured ShellError contract.

Acceptance

deterministic RED test proves malformed cwd currently leaks the wrong exception;
malformed cwd is rejected before process creation with ShellError;
valid Path/path-like cwd behavior is unchanged;
full compatibility/registry/plugin/package gates pass before merge.

This is a bounded local #5 hardening slice and does not implement the Core-blocked explicit cancellation path.

## Problem `ShellRunner._validate_cwd()` passes caller input directly to `Path()`. Non-path-like values such as integers can therefore leak a Python `TypeError` instead of the plugin's structured `ShellError` contract. ## Acceptance - deterministic RED test proves malformed cwd currently leaks the wrong exception; - malformed cwd is rejected before process creation with `ShellError`; - valid Path/path-like cwd behavior is unchanged; - full compatibility/registry/plugin/package gates pass before merge. This is a bounded local #5 hardening slice and does not implement the Core-blocked explicit cancellation path.

nsaspy closed this issue

2026-09-08 02:03:02 +00:00