fix: guard project IDs before path joins#527

Open

seonghobae wants to merge 8 commits into

codex/fix-project-id-path-traversal

Commits on Jul 7, 2026

fix: validate project IDs via Path::components across platforms

seonghobae
and
claude
committed
ci: re-trigger (prior run force-cancelled during runner jam)

seonghobae
and
claude
committed