session-budget

This is a local filesystem handoff utility, with no evident network activity, credential harvesting, or code execution. The unvalidated token creates a concrete path traversal risk: crafted show tokens may read files outside the handoff directory, and crafted consume tokens may delete them. Validate tokens to a strict filename-safe format and ensure resolved paths remain within DIR.