Fix #2160: sanitise agent_id and learning_id paths in markdown_store (CWE-22)#903

Open

AlexMikhalev wants to merge 10 commits into

mainfrom

task/2160-path-traversal-markdown-store

Commits on Jun 3, 2026

fix(agent): classify HTTP 4xx as ErrorGeneral not ErrorNetwork Refs #1992

Test User
and
claude
committed
test(agent): add server_http_error_exits_1 integration test Refs #1992

Test User
and
claude
committed

Commits on Jun 4, 2026

feat(pr-reviewer): agent work [auto-commit]
Test User
committed
feat(pr-validator): agent work [auto-commit]
Test User
committed
fix(rolegraph): add serde(default) to trigger_descriptions and pinned_node_ids Refs #2039

Test User
and
claude
committed
feat(pr-reviewer): agent work [auto-commit]
Test User
committed
fix(clippy): flatten manual_flatten in server_http_error test Fixes #2133

Test User
and
claude
committed
feat(pr-reviewer): agent work [auto-commit]
Test User
committed
fix(agent): gate firecracker module and ApiClient VM methods with cfg(feature = "firecracker")

Test User
and
claude
committed
fix(security): sanitise agent_id and learning_id in markdown_store paths (CWE-22)
Test User
committed