kshitijk4poor
625fab3fde
fix(context-refs): derive the @file credential-dir block from HOME_CREDENTIAL_DIRS
...
Gate r1 (2c note): agent/context_references._SENSITIVE_HOME_DIRS was a hand
copy of the home credential dirs and missed .config/gcloud, so
`@file:~/.config/gcloud/application_default_credentials.json` expanded the
gcloud refresh token into context; the canonical read deny-list does not
cover it either. The gateway feeds untrusted remote text through this
expansion, so this is the same leak class the profile-export fix closes.
_SENSITIVE_HOME_DIRS now is agent.file_safety.HOME_CREDENTIAL_DIRS, the
single list the write denylist and profile export already derive from.
file_safety imports stdlib only, so there is no import cycle.
The existing canonical-denylist test gains a .config/gcloud ADC row.
Co-authored-by: Keiran Haax <196126709+keiranhaax@users.noreply.github.com >
2026-10-04 13:53:34 +05:30
..
2026-09-29 03:28:46 +05:30
2026-10-03 16:29:34 +05:30
2026-09-24 23:37:27 -04:00
2026-09-24 22:26:32 +05:30
2026-09-24 22:26:32 +05:30
2026-10-02 00:18:00 +05:30
2026-09-24 22:29:32 +05:30
2026-09-27 02:02:41 +05:30
2026-09-25 21:27:06 +05:30
2026-09-26 19:27:41 +05:30
2026-09-24 22:26:32 +05:30
2026-09-29 15:58:55 +05:30
2026-10-03 16:30:27 +05:30
2026-09-28 19:49:00 -04:00
2026-10-03 16:30:27 +05:30
2026-10-03 13:38:29 -07:00
2026-09-27 00:38:34 +05:30
2026-09-29 15:58:55 +05:30
2026-09-26 07:14:26 +05:30
2026-09-24 22:26:32 +05:30
2026-09-28 06:06:17 -07:00
2026-09-27 02:02:41 +05:30
2026-09-24 13:13:35 -04:00
2026-10-03 16:29:34 +05:30
2026-10-03 16:35:32 +05:30
2026-09-25 21:27:06 +05:30
2026-10-01 22:43:34 +05:30
2026-10-01 23:33:52 +05:30
2026-10-01 12:08:13 -07:00
2026-09-25 21:27:06 +05:30
2026-10-03 16:30:48 +05:30
2026-09-28 12:43:03 -07:00
2026-09-29 18:33:44 +05:30
2026-09-29 04:15:21 +05:30
2026-09-28 12:53:29 -05:00
2026-09-27 06:54:56 -05:00
2026-09-27 18:20:40 +05:30
2026-09-27 18:27:37 +05:30
2026-10-03 17:46:47 +05:30
2026-09-29 04:15:21 +05:30
2026-10-04 13:53:34 +05:30
2026-09-24 22:32:05 +05:30
2026-10-03 18:22:19 +05:30
2026-09-26 11:22:06 -07:00
2026-09-29 15:58:55 +05:30
2026-09-27 18:37:01 +05:30
2026-09-29 18:47:44 -05:00
2026-09-29 15:58:55 +05:30
2026-09-26 17:59:52 -05:00
2026-10-03 18:23:16 +05:30
2026-09-25 21:28:32 +05:30
2026-09-29 02:47:39 +05:30
2026-09-27 00:04:22 +05:30
2026-09-27 00:04:22 +05:30
2026-09-28 05:37:55 -07:00
2026-09-24 22:27:18 +05:30
2026-09-29 22:57:48 -04:00
2026-10-02 22:59:00 -05:00
2026-09-29 19:31:49 -05:00
2026-09-27 00:33:45 +05:30
2026-09-25 12:56:32 -04:00
2026-10-02 00:03:01 +05:30
2026-10-02 01:18:03 +05:30
2026-09-28 14:16:18 -07:00
2026-09-28 14:16:18 -07:00
2026-09-28 14:16:18 -07:00
2026-10-01 02:55:59 -05:00
2026-10-03 18:17:35 +05:30
2026-09-27 04:59:47 -04:00
2026-09-27 00:34:15 +05:30
2026-10-01 09:26:00 -04:00
2026-09-30 22:30:35 -04:00
2026-09-25 01:08:23 -05:00
2026-09-28 02:26:21 -07:00
2026-10-02 16:44:56 -07:00
2026-10-01 23:50:31 -07:00
2026-10-02 05:10:06 -07:00
2026-10-02 04:09:57 -07:00
2026-10-02 04:39:28 -07:00
2026-10-02 04:39:28 -07:00
2026-09-29 03:30:52 +05:30
2026-10-02 12:29:16 -04:00
2026-10-03 18:17:35 +05:30
2026-10-02 20:28:55 -05:00
2026-09-28 03:34:07 -07:00
2026-10-02 20:29:34 -05:00
2026-10-01 23:39:32 +05:30
2026-10-01 16:18:23 +05:30
2026-10-01 16:18:23 +05:30
2026-09-25 12:07:32 -05:00
2026-09-27 01:55:21 +05:30
2026-10-04 02:12:57 +05:30
2026-09-24 22:27:18 +05:30
2026-09-26 06:10:53 +05:30
2026-10-01 11:45:41 -07:00
2026-09-24 22:37:10 +05:30
2026-10-02 00:52:27 +05:30
2026-10-02 00:52:27 +05:30
2026-10-01 12:08:13 -07:00
2026-09-29 18:49:11 -05:00
2026-09-29 18:05:05 -05:00
2026-09-26 23:45:36 +05:30
2026-09-28 12:43:03 -07:00
2026-10-02 18:35:38 -05:00
2026-10-02 12:29:16 -04:00
2026-10-01 16:18:23 +05:30
2026-09-27 00:19:50 +05:30
2026-10-03 16:29:34 +05:30
2026-09-25 21:28:32 +05:30
2026-10-02 00:52:27 +05:30
2026-10-02 16:29:18 -05:00
2026-09-29 12:16:43 -04:00
2026-09-24 22:32:05 +05:30
2026-09-24 22:32:05 +05:30
2026-10-01 16:18:23 +05:30
2026-09-24 22:38:35 +05:30
2026-09-24 22:33:58 +05:30
2026-09-27 00:38:34 +05:30
2026-09-28 05:37:55 -07:00
2026-10-03 16:31:39 +05:30
2026-10-02 00:50:20 +05:30
2026-09-25 21:28:32 +05:30
2026-09-28 11:29:49 -05:00
2026-09-25 16:24:21 -05:00
2026-10-02 01:18:03 +05:30
2026-09-29 22:57:48 -04:00
2026-09-29 18:33:44 +05:30
2026-09-26 22:39:42 +05:30
2026-09-28 12:23:25 -07:00
2026-10-02 20:18:26 -05:00
2026-09-29 18:05:05 -05:00
2026-09-29 18:05:05 -05:00
2026-10-04 02:54:56 +05:30
2026-09-26 23:49:25 +05:30
2026-09-29 18:05:05 -05:00
2026-09-28 12:23:25 -07:00
2026-10-04 12:02:15 +05:30
2026-09-26 06:10:53 +05:30
2026-10-02 00:53:19 +05:30
2026-09-26 06:26:48 +05:30
2026-09-24 22:26:23 +05:30
2026-09-27 02:48:48 -05:00
2026-09-24 22:29:32 +05:30
2026-09-29 14:53:00 -05:00
2026-09-29 02:06:58 +05:30
2026-09-27 02:22:23 +05:30
2026-09-28 10:11:33 -07:00
2026-10-01 00:42:30 -05:00
2026-09-24 22:41:10 +05:30
2026-09-26 20:29:47 -05:00
2026-09-29 15:57:52 -05:00
2026-10-02 00:50:20 +05:30
2026-09-27 20:45:44 +05:30
2026-09-27 13:20:28 -05:00
2026-09-24 22:27:18 +05:30
2026-10-01 03:27:39 -05:00
2026-09-24 22:26:23 +05:30
2026-09-26 20:40:40 -05:00
2026-10-03 16:18:04 -05:00
2026-09-28 17:59:17 +05:30
2026-09-25 12:27:24 -05:00
2026-10-02 00:50:20 +05:30
2026-10-02 13:50:23 -04:00
2026-09-26 17:15:30 -05:00