codetether-agent 4.7.0-a-002.4

A2A-native AI coding agent for the CodeTether ecosystem
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46

use super::normalize_tool_args;
use serde_json::json;
use tempfile::tempdir;

#[test]
fn normalizes_relative_path_inside_worktree() {
    let root = tempdir().unwrap();
    let mut args = json!({"path": "src/main.rs"});
    normalize_tool_args("read", &mut args, root.path()).unwrap();
    assert!(
        args["path"]
            .as_str()
            .unwrap()
            .starts_with(root.path().to_str().unwrap())
    );
}

#[test]
fn rejects_absolute_path_outside_worktree() {
    let root = tempdir().unwrap();
    let mut args = json!({"path": "/etc/passwd"});
    assert!(normalize_tool_args("read", &mut args, root.path()).is_err());
}

#[test]
fn rejects_parent_traversal_outside_worktree() {
    let root = tempdir().unwrap();
    let mut args = json!({"path": "../escape.txt"});
    assert!(normalize_tool_args("write", &mut args, root.path()).is_err());
}

#[cfg(unix)]
#[test]
fn rejects_symlink_resolution_outside_worktree() {
    let root = tempdir().unwrap();
    std::os::unix::fs::symlink("/etc/passwd", root.path().join("link")).unwrap();
    let mut args = json!({"path": "link"});
    assert!(normalize_tool_args("read", &mut args, root.path()).is_err());
}

#[test]
fn rejects_unrecognized_path_field() {
    let root = tempdir().unwrap();
    let mut args = json!({"target_path": "../escape.txt"});
    assert!(normalize_tool_args("unknown", &mut args, root.path()).is_err());
}