fix(timeout): inherit helper state and pass checks

cmd/analyze/delete.go

@@ -8,6 +8,7 @@ import (
 	"os"
 	"os/exec"
 	"path/filepath"
+	"slices"
 	"sort"
 	"strings"
 	"sync/atomic"
@@ -165,10 +166,8 @@ func validatePath(path string) error {
 		return fmt.Errorf("path contains null bytes")
 	}
 	// Check for path traversal attempts (.. components).
-	for _, component := range strings.Split(path, string(filepath.Separator)) {
-		if component == ".." {
-			return fmt.Errorf("path contains traversal components: %s", path)
-		}
+	if slices.Contains(strings.Split(path, string(filepath.Separator)), "..") {
+		return fmt.Errorf("path contains traversal components: %s", path)
 	}
 	return nil
 }

cmd/status/metrics_disk.go

@@ -275,23 +275,22 @@ func getAPFSContainerFreeBytes(mountpoint string) (uint64, error) {
 	}
 
 	const key = "<key>APFSContainerFree</key>"
-	idx := strings.Index(out, key)
-	if idx == -1 {
+	_, rest, found := strings.Cut(out, key)
+	if !found {
 		return 0, fmt.Errorf("APFSContainerFree not found")
 	}
 
-	rest := out[idx+len(key):]
-	start := strings.Index(rest, "<integer>")
-	if start == -1 {
+	_, rest, found = strings.Cut(rest, "<integer>")
+	if !found {
 		return 0, fmt.Errorf("APFSContainerFree value not found")
 	}
-	rest = rest[start+len("<integer>"):]
-	end := strings.Index(rest, "</integer>")
-	if end == -1 {
+
+	value, _, found := strings.Cut(rest, "</integer>")
+	if !found {
 		return 0, fmt.Errorf("APFSContainerFree end tag not found")
 	}
 
-	val, err := strconv.ParseUint(strings.TrimSpace(rest[:end]), 10, 64)
+	val, err := strconv.ParseUint(strings.TrimSpace(value), 10, 64)
 	if err != nil {
 		return 0, fmt.Errorf("failed to parse APFSContainerFree: %v", err)
 	}