feat(cue): security hardening + backend test coverage - #876

Merged

reachrazamair merged 6 commits into

rcfrom

Apr 21, 2026

Commits on Apr 21, 2026

style: ran prettier across the codebase
reachrazamair
committed
c11644c
fix(cue): review follow-ups for Phase 11 + 15A/15B
reachrazamair
committed
a1717fb
fix(cue): second review pass for Phase 11 + 15A/15B
reachrazamair
committed
5827824
fix(cue): harden prompt_file containment via realpath
reachrazamair
committed
6391fcc
test(cue): stub fs.realpathSync in cue-yaml-loader mocks
reachrazamair
committed
7fe4317
fix(cue): reject Windows cross-drive rel + read canonical path
reachrazamair
committed
23a914d