Profa 6136c50211 fix(security): resolve remaining 3 CodeQL alerts on PR #317 ...

- Prototype pollution (2 alerts): Replace bracket traversal
  `current = current[part]` with `Object.getOwnPropertyDescriptor`
  in goap-planner and plan-executor. This makes own-property-only
  access explicit to CodeQL's flow analysis.
- Hostname regex (1 alert): Replace regex-based memory key assertion
  with direct string equality check — no regex involved at all.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-03-02 12:33:20 +00:00

..

actions

fix: clean up stale v3/ references and protect memory namespaces post-flatten

2026-03-01 12:27:44 +00:00

schema

feat: flatten project structure — archive v2, promote v3 to root

2026-03-01 11:35:41 +00:00

goap-planner.ts

fix(security): resolve remaining 3 CodeQL alerts on PR #317

2026-03-02 12:33:20 +00:00

index.ts

feat: flatten project structure — archive v2, promote v3 to root

2026-03-01 11:35:41 +00:00

plan-executor.ts

fix(security): resolve remaining 3 CodeQL alerts on PR #317

2026-03-02 12:33:20 +00:00

types.ts

feat: flatten project structure — archive v2, promote v3 to root

2026-03-01 11:35:41 +00:00