- Add _validate_path() using os.path.realpath() to resolve symlinks - Enforce working directory chroot (CLOVER_PROJECT_ROOT env var) - All file ops (read, create, update, delete, list) now validated - Block access to files outside project directory
- Add _validate_path() using os.path.realpath() to resolve symlinks - Enforce working directory chroot (CLOVER_PROJECT_ROOT env var) - All file ops (read, create, update, delete, list) now validated - Block access to files outside project directory