jif-oai 4fd7dfe223 memories-mcp: reject symlink traversal in local backend (#21010) ...

## Why

The local memories MCP backend only rejected symlinks after resolving
the final path. That left room for scoped requests like
`skills/secret.md` to walk through a symlinked ancestor directory and
escape the configured memories root.

This change also makes missing scoped paths fail explicitly instead of
looking like an empty `list` / `search` result or a `NotFile` read
error.

## What Changed

- walk each scoped path component in
`LocalMemoriesBackend::resolve_scoped_path` and reject symlinked
ancestors before accessing the target
- reject scoped paths that traverse through a non-directory intermediate
component
- add a `NotFound` backend error for missing `read`, `list`, and
`search` paths and map it through the MCP server error conversion
- add coverage for missing paths and symlinked ancestor directories in
`codex-rs/memories/mcp/src/local_tests.rs`

## Testing

- added unit coverage in `codex-rs/memories/mcp/src/local_tests.rs` for
missing paths and symlinked ancestor directories across `read`, `list`,
and `search`

2026-05-04 18:40:28 +02:00

..

src

memories-mcp: reject symlink traversal in local backend (#21010)

2026-05-04 18:40:28 +02:00

BUILD.bazel

feat: memories mcp v1 (#20622)

2026-05-04 13:51:03 +02:00

Cargo.toml

memories/mcp: generate tool schemas with schemars (#21012)

2026-05-04 18:40:17 +02:00