Skip to content

Compact diagnostic metadata paths - #163

Merged
codeforester merged 1 commit into
mainfrom
security/140-20260807-metadata-path-redaction
Aug 7, 2026
Merged

Compact diagnostic metadata paths#163
codeforester merged 1 commit into
mainfrom
security/140-20260807-metadata-path-redaction

Conversation

@codeforester

Copy link
Copy Markdown
Contributor

Summary

  • Compact home-relative paths in core-owned run.json metadata.
  • Compact project and manifest paths in identity.json.
  • Add regression coverage for retained diagnostic bundles.

Why

Retained diagnostic artifacts are designed to be shared for support. Raw paths in lifecycle metadata exposed local home-directory and username information even though the history record used the existing safe compaction helpers.

Validation

  • pytest -q tests/test_app_run_metadata.py -k 'compact_home_paths or terminal_metadata_refreshes_project_binding'
  • git diff --check

Closes #140

@codeforester
codeforester merged commit 10b9883 into main Aug 7, 2026
80 of 82 checks passed
@codeforester
codeforester deleted the security/140-20260807-metadata-path-redaction branch August 7, 2026 18:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Diagnostic bundle files (run.json, identity.json) leak local paths/username that the equivalent history record redacts

1 participant