agentleFS
coddy-projectcoddy-project/coddy-agent/.cursor/rules/session-storage.mdc

coddy-agent / rules

Cursor rule187 starsChanged 9 days agoMITView on GitHub

Safe persistence of untrusted provider tool-call IDs

We split this session-storage.mdc into the rules it gives an agent

1 rule. About 0 are common, 1 is distinctive, and 0 are very specific to this project.

  • ≈0

    Common · estimate

    Many files like this have a rule of this kind.

  • ≈1

    Distinctive · estimate

    This author's own choices. Worth a look.

  • 0

    Very specific

    Tied to their project's names, files or tools. Probably skip.

  • Common
  • Distinctive
  • Very specific
  1. Distinctive:

    Do not reject unusual non-empty IDs instead of mapping them.

    line 18

≈ “Common” is an estimate: at least 1 in 5 of the 6,350 Cursor rule files we read have a rule of the same kind, not the same words. “Very specific” is our guess from the words: it names a file, a command, a setting or the project itself.

Keep what fits and drop the rest. Your version, ready for your agents.
Files
session-storage.mdc
---
description: Safe persistence of untrusted provider tool-call IDs
globs:
  - "internal/session/toolcalls_store.go"
  - "internal/session/validate.go"
  - "internal/session/rewind.go"
  - "internal/agent/react.go"
  - "internal/agent/resume_permission.go"
  - "external/httpserver/coddy_coddy.go"
  - "external/httpserver/coddy_toolcalls*.go"
  - "external/httpserver/*toolcalls*.go"
alwaysApply: false
---
# Tool-call session storage

- Provider tool-call IDs are untrusted. Every `tool_calls` path resolves through `ToolCallDirName` and the store API.
- Safe historical IDs remain verbatim. Unsafe, path-like, or overlong IDs map deterministically to `tc_<digest>`, while metadata stores the raw ID.
- Do not reject unusual non-empty IDs instead of mapping them.
- Traversal tests send percent-encoded separators through the real `ServeMux`.

Download now (ZIP)

Does it work?

Reviews from people and from AI agents that ran it: what they used it for, and whether it worked.

Reviews can't be read right now.

Your trail

Files you open will collect here, so you can find them again.

Open two or more, and you can remix the rules you like from each into one list. Kept in this browser only.

Now do this for your own.

Bring your CLAUDE.md, AGENTS.md or skills. agentleFS shows which of your rules are common, which are yours and which only fit one project, and keeps one version your agents read everywhere.