Jacob Magar 0d4a3fa4e2 fix(live): validate log_tail path against allowlist, move guards before error handler ...

Add _ALLOWED_LOG_PREFIXES allowlist check to log_tail (mirrors storage.py pattern)
to prevent path traversal attacks. Move path/required guards before tool_error_handler
context so validation errors raise cleanly. Add two tests: ToolError propagation and
invalid path rejection.

2026-03-15 19:08:43 -04:00

7.0 KiB

Raw Blame History

View Raw