fix(server): restrict HTTP file read/list to allowed paths #208

	name: CI

	on:
	pull_request:
	branches:
	- main

	permissions:
	contents: read

	jobs:
	python:
	runs-on: ubuntu-latest
	steps:
	- name: Checkout
	uses: actions/checkout@v4

	- name: Setup Python
	uses: actions/setup-python@v5
	with:
	python-version: "3.12"

	- name: Setup uv
	uses: astral-sh/setup-uv@v6
	with:
	enable-cache: true

	- name: Install Python dependencies
	run: uv sync --group dev --frozen

	- name: Python lint
	run: uv run ruff check flocks/cli/main.py flocks/cli/service_manager.py

	- name: Python test
	run: uv run pytest tests/scripts


	frontend:
	runs-on: ubuntu-latest
	defaults:
	run:
	working-directory: webui
	steps:
	- name: Checkout
	uses: actions/checkout@v4

	- name: Setup Node.js
	uses: actions/setup-node@v4
	with:
	node-version: "22"
	cache: npm
	cache-dependency-path: webui/package-lock.json

	- name: Install frontend dependencies
	run: npm ci

	- name: Frontend lint
	run: npm run lint

	- name: Frontend build
	run: npm run build

Provide feedback