Harden alpha8 publication safety

2026-07-20 14:26:22 -07:00
parent a9add2a7c1
commit b02bcc74ef
19 changed files with 532 additions and 102 deletions
--- a/lib/opencode/message_artifacts.rb
+++ b/lib/opencode/message_artifacts.rb
@@ -80,6 +80,10 @@ module Opencode

        if (transform = transforms.find { |t| t.applies_to?(file) })
          attached += 1 if apply_transform(transform, file)
+        elsif transform_owned_filenames.include?(file.basename)
+          # Destination names belong exclusively to their host transform.
+          # Agent-authored bytes must never fall through as trusted output.
+          next
        elsif default_attach == :all
          # Default identity path: every safe sandbox file that no
          # transform claims attaches as-is. Callers that want the