converse

The server uses external SDKs (Codex, Gemini CLI, Claude SDK) that execute local binaries. While these SDKs have their own sandbox and approval policies, their security is external to this codebase and could pose a high risk if the underlying CLI is compromised or manipulated by user input. The `clientCwd` parameter, derived from the user's working directory, is used for file access and agent execution, potentially allowing interaction with sensitive files or execution outside the intended scope if not properly sandboxed by the underlying SDKs. However, the `httpTransport` component implements good network security practices including configurable CORS, request timeouts, rate limiting, and DNS rebinding protection. Path traversal for export directories is mitigated using `path.basename`.