李明振andXubin Ren b34f1bd0e8 fix(session): store session history outside the agent workspace ...

Session files lived under <workspace>/sessions/ (since #713), which is the
on-disk scope of the agent's filesystem tools. With restrict_to_workspace
enabled, an agent could read_file / list_dir every session transcript —
including other users' or channels' conversations — bypassing the scoped
sessions.py access layer entirely.

Move session storage to ~/.nanobot/sessions/<sha256-of-resolved-workspace>[:16]/,
outside the workspace. Per-workspace isolation (the goal of #713) is preserved
via a hash of the resolved workspace path, so different workspaces keep
independent session stores. A one-shot, idempotent migration moves legacy
in-workspace *.jsonl files into the new location at store init.

Scope note: this protects sessions whenever restrict_to_workspace=true. The
default restrict_to_workspace=false leaves read_file unrestricted in general
(not only sessions) and is a separate concern.

Refs #5278

2026-08-13 01:41:10 +09:00

..

__init__.py

fix(session): fsync sessions on graceful shutdown to prevent data loss

2026-04-22 13:19:53 +08:00

test_consolidated_offset_clamp.py

fix(memory): archive short idle sessions for Dream

2026-08-07 11:45:49 +08:00

test_goal_state.py

refactor(agent): gate sustained goals behind explicit /goal

2026-07-12 00:35:17 +08:00

test_session_cache.py

fix(webui): complete temporary chat mode

2026-08-08 23:20:59 +08:00

test_session_fsync.py

fix: stop masking runtime failures

2026-07-21 11:44:52 +08:00

test_session_list_repair_legacy.py

chore: remove expired v0.3.1 compatibility shims (#5106)

2026-07-27 13:53:04 +08:00

test_session_location.py

fix(session): store session history outside the agent workspace

2026-08-13 01:41:10 +09:00

test_session_store.py

refactor(session): separate persistence behind SessionStore (#5170)

2026-07-30 11:51:13 +08:00

test_turn_continuation.py

fix(webui): deliver late subagent results as new turns (#4992)

2026-07-22 23:04:36 +08:00