**7 issues found** across 9 files

Prompt for AI agents (unresolved issues)

```text Check if these issues are valid — if so, understand the root cause of each and fix them. If appropriate, use sub-agents to investigate and fix each issue separately. P0: Remove the hardcoded tunnel token fallback; require `DECO_TUNNEL_SERVER_TOKEN` from environment. P1: `close()` does not actually close the active tunnel connection; it only disables reconnect logic. P2: Missing bounds check: if `urnParts` has fewer colon-separated segments than `resourceParts`, accessing `urnParts[idx].split("/")` at the last index throws a `TypeError`. Add a length guard to return `false` instead of crashing. P1: Root SSE daemon requests with query params are misrouted because watch routing compares the full URL string instead of pathname. P0: Path traversal vulnerability: `filePath` from the URL is joined with `cwd` without verifying the resolved path stays within the project root. A path like `/../../../etc/passwd` would escape the project directory, allowing reads of arbitrary files on the host. Resolve the path and validate it's a child of `cwd` before any filesystem access. P1: Premature write breaks the atomicity guarantee. The `isTextFileSet` branch writes the file to disk immediately, but the "atomic" commit block later only writes if *all* patches succeed. If a subsequent patch fails, these early writes persist on disk — defeating the stated atomicity. Remove the `ensureFile`/`writeFile` calls from this branch and let the atomic section handle all writes. P2: Initial SSE scan incorrectly skips non-JSON `.deco` files, causing incomplete first sync. ```

_{Reply with feedback, questions, or to request a fix. Tag `@cubic-dev-ai` to re-run a review.}