fix(security): close remaining path validation gaps (#77)

Harden the SSH agent-state and skill-removal paths to match the local security model, and avoid rejecting valid local workspace skill removals.

Made-with: Cursor

Co-authored-by: iamlukethedev <lucas.guilherme@smartwayslfl.com>

src/app/api/gateway/agent-state/route.ts

@@ -63,6 +63,9 @@ export async function POST(request: Request) {
       message.includes("agentId is required") ||
       message.includes("trashDir is required") ||
       message.includes("Invalid agentId") ||
+      message.includes("trashDir does not exist") ||
+      message.includes("trashDir is not under") ||
+      message.includes("Refusing to restore over existing path") ||
       message.includes("Gateway URL is missing") ||
       message.includes("Invalid gateway URL") ||
       message.includes("require OPENCLAW_GATEWAY_SSH_TARGET")

src/app/api/gateway/skills/remove/route.ts

@@ -76,6 +76,7 @@ export async function POST(request: Request) {
       message.includes("Unsupported skill source") ||
       message.includes("Refusing to remove") ||
       message.includes("not a directory") ||
+      message.includes("Remote workspace skill removal is not supported over SSH") ||
       message.includes("Gateway URL is missing") ||
       message.includes("Invalid gateway URL") ||
       message.includes("require OPENCLAW_GATEWAY_SSH_TARGET")