Consolidated a bunch of reused code to agents

pkg/agents/console-new/util.go

@@ -0,0 +1,23 @@
+package console_new
+
+import (
+	"fmt"
+	"path/filepath"
+	"strings"
+)
+
+func SafeJoinPath(tempDir, fileName string) (string, error) {
+	// Clean both paths
+	tempDir = filepath.Clean(tempDir)
+	fileName = filepath.Clean(fileName)
+
+	// Join paths and clean result
+	fullPath := filepath.Clean(filepath.Join(tempDir, fileName))
+
+	// Verify the path is still within tempDir
+	if !strings.HasPrefix(fullPath, tempDir+string(filepath.Separator)) {
+		return "", fmt.Errorf("invalid path")
+	}
+
+	return fullPath, nil
+}