fix(plugins): round-5 CodeRabbit hardening

- session-registry: wrap readRegistry calls in try-catch in
  sessionRegistryTool, sessionResultsTool, and buildRegistryContext
  to handle I/O errors gracefully (EACCES etc.)
- session-registry: normalizeRegistry status check now validates
  membership in ['running','completed','failed'] enum instead of
  typeof === 'string'
- voice-notification: add path traversal guard in getActiveWorkDir()
  using resolve() + startsWith(workRoot) check
- voice-notification: extractVoiceCompletion regex now Unicode-aware
  ([\p{L}\p{M}\w\s\-.']+ with /u flag) to support non-ASCII names

Author: Steffen025

.opencode/plugins/handlers/session-registry.ts

@@ -60,7 +60,9 @@ function normalizeRegistry(data: unknown, sessionId: string): SubagentRegistry {
 						typeof (e as Record<string, unknown>).agentType === "string" &&
 						typeof (e as Record<string, unknown>).description === "string" &&
 						typeof (e as Record<string, unknown>).spawnedAt === "string" &&
-						typeof (e as Record<string, unknown>).status === "string"
+						(["running", "completed", "failed"] as const).includes(
+							(e as Record<string, unknown>).status as SubagentEntry["status"]
+						)
 				)
 			: [],
 		updatedAt:
@@ -298,7 +300,13 @@ export const sessionRegistryTool = tool({
 		"The results are always available — subagent data survives compaction.",
 	args: {},
 	async execute(_args: {}, context: ToolContext): Promise<string> {
-		const registry = readRegistry(context.sessionID);
+		let registry: SubagentRegistry;
+		try {
+			registry = readRegistry(context.sessionID);
+		} catch (err) {
+			fileLog(`[session-registry] sessionRegistryTool: failed to read registry: ${err}`, "error");
+			return "Registry unavailable: could not read session data (I/O error). Check file permissions on the state directory.";
+		}
 
 		if (registry.entries.length === 0) {
 			return "No subagent sessions found for this session. No subagents have been spawned via the Task tool yet.";
@@ -350,7 +358,13 @@ export const sessionResultsTool = tool({
 	},
 	async execute(args: { session_id: string }, context: ToolContext): Promise<string> {
 		// Read the registry file to get stored metadata for this session
-		const registry = readRegistry(context.sessionID);
+		let registry: SubagentRegistry;
+		try {
+			registry = readRegistry(context.sessionID);
+		} catch (err) {
+			fileLog(`[session-registry] sessionResultsTool: failed to read registry: ${err}`, "error");
+			return "Registry unavailable: could not read session data (I/O error). Check file permissions on the state directory.";
+		}
 		const entry = registry.entries.find((e) => e.sessionId === args.session_id);
 
 		if (!entry) {
@@ -380,7 +394,13 @@ export const sessionResultsTool = tool({
  * Called by WP-N2 compaction intelligence handler.
  */
 export function buildRegistryContext(sessionId: string): string | null {
-	const registry = readRegistry(sessionId);
+	let registry: SubagentRegistry;
+	try {
+		registry = readRegistry(sessionId);
+	} catch (err) {
+		fileLog(`[session-registry] buildRegistryContext: failed to read registry: ${err}`, "error");
+		return null;
+	}
 	if (registry.entries.length === 0) return null;
 
 	const lines = [

.opencode/plugins/handlers/voice-notification.ts

@@ -24,7 +24,7 @@ import {
 	unlinkSync,
 	writeFileSync,
 } from "node:fs";
-import { join } from "node:path";
+import { join, resolve } from "node:path";
 import { promisify } from "node:util";
 import { fileLog } from "../lib/file-logger";
 import { getIdentity, getSettings } from "../lib/identity";
@@ -88,8 +88,12 @@ function getActiveWorkDir(): string | null {
 		const content = readFileSync(currentWorkPath, "utf-8");
 		const state = JSON.parse(content);
 		if (state.work_dir) {
-			const workPath = join(getWorkDir(), state.work_dir);
-			if (existsSync(workPath)) return workPath;
+			const workRoot = resolve(getWorkDir());
+			const workPath = resolve(join(getWorkDir(), state.work_dir));
+			// Guard against path traversal (e.g. work_dir = "../../etc")
+			if (workPath.startsWith(workRoot + "/") || workPath === workRoot) {
+				if (existsSync(workPath)) return workPath;
+			}
 		}
 	} catch {
 		// Silent fail
@@ -457,8 +461,8 @@ export async function handleVoiceNotification(
 export function extractVoiceCompletion(text: string): string | null {
 	if (!text) return null;
 
-	// Pattern: 🗣️ Name: message
-	const match = text.match(/🗣️\s*[\w\s]+:\s*(.+?)(?:\n|$)/);
+	// Pattern: 🗣️ Name: message (Unicode-aware to support non-ASCII names like "Ava", accented chars)
+	const match = text.match(/🗣️\s*[\p{L}\p{M}\w\s\-.']+:\s*(.+?)(?:\n|$)/u);
 	if (match) {
 		return match[1].trim();
 	}