test(learnings): add path traversal test and fix case-sensitive list assertion

Author: priyanshujain

agent/tools/learnings_test.go

@@ -70,7 +70,8 @@ func TestLearningReadToolListTopics(t *testing.T) {
 	if err != nil {
 		t.Fatalf("Execute: %v", err)
 	}
-	if !strings.Contains(result, "go") || !strings.Contains(result, "sql") {
+	lower := strings.ToLower(result)
+	if !strings.Contains(lower, "go") || !strings.Contains(lower, "sql") {
 		t.Errorf("expected both topics, got: %s", result)
 	}
 }

service/learnings/store_test.go

@@ -80,6 +80,18 @@ func TestReadNotFound(t *testing.T) {
 	}
 }
 
+func TestReadRejectsPathTraversal(t *testing.T) {
+	dir := t.TempDir()
+	st := New(dir)
+
+	for _, bad := range []string{"../etc/passwd", "foo/bar", "test\\path"} {
+		_, err := st.Read(bad)
+		if err == nil {
+			t.Errorf("expected error for topic %q", bad)
+		}
+	}
+}
+
 func TestList(t *testing.T) {
 	dir := t.TempDir()
 	st := New(dir)