[atomantic]

Summary

Filters prototype-polluting keys (__proto__, constructor, prototype) and guards against inherited properties in Claude Code transcript scanning, sanitization, and merge, as well as in federated peer usage ingestion.

• Claude Code Transcript Scanning (server/services/claudeCodeTranscriptUsage.js):
  • Uses POLLUTING_KEYS and bucketFor from ../lib/objects.js to avoid creating or mutating prototype properties during collectFile() and scanTranscriptDays().
  • In sanitizeTranscriptDays(), skips POLLUTING_KEYS in day and model keys.
  • In mergeDays(), ensures target[model] only checks own properties with Object.hasOwn(target, model) and skips POLLUTING_KEYS.
• Peer Usage Ingestion (server/services/peerUsage.js):
  • In sanitizeProviderBucket() and sanitizeActivityBucket(), skips keys matching POLLUTING_KEYS.
  • In sanitizeActivityMap() and addInto(), guards against POLLUTING_KEYS and inherited properties.
• Regression Tests:
  • Added test cases in server/services/claudeCodeTranscriptUsage.test.js and server/services/peerUsage.test.js verifying that hostile payloads with __proto__, constructor, and prototype are safely discarded and Object.prototype remains unpolluted.

Closes #14658

Reviews

• provider:selection-a6718554da55db6d33801df2 (codex[gpt-6.1-terra]): 1 round, clean at 4c0cbd6.