Peter Steinberger
71bd15bb42
fix(ssrf): block special-use ipv4 ranges
2026-02-21 23:45:49 +01:00
Gustavo Madeira Santana
2f46308d5a
refactor(logging): migrate non-agent internal console calls to subsystem logger ( #22964 )
...
Merged via /review-pr -> /prepare-pr -> /merge-pr.
Prepared head SHA: b4a5b12422c7a90054dbb7473dd6c4b3e9ca8df5
Co-authored-by: gumadeiras <5599352+gumadeiras@users.noreply.github.com>
Co-authored-by: gumadeiras <5599352+gumadeiras@users.noreply.github.com>
Reviewed-by: @gumadeiras
2026-02-21 17:44:00 -05:00
kumarabhirup
c8ae7acbf4
fix: restore remaining merge regressions (SKILL.md, MIME types, showHidden, symlink, activeProfileHint)
2026-02-21 14:39:55 -08:00
Peter Steinberger
4ef4aa3c10
refactor(gateway): streamline control-ui secure file serving
2026-02-21 23:36:55 +01:00
Peter Steinberger
0608587bc3
test: streamline config, audit, and qmd coverage
2026-02-21 22:23:43 +00:00
Peter Steinberger
a9227f571b
test: dedupe telegram formatting and send cases
2026-02-21 22:23:43 +00:00
Peter Steinberger
21b0eac917
test: consolidate infra approval and heartbeat test matrices
2026-02-21 22:23:43 +00:00
Gustavo Madeira Santana
738e2c21dd
chore(tests): properly check logging in tests
2026-02-21 17:21:48 -05:00
Peter Steinberger
dea154ccae
docs(changelog): add control-ui symlink hardening entry
2026-02-21 23:19:35 +01:00
Peter Steinberger
b34097f62d
fix(security): enforce msteams redirect allowlist checks
2026-02-21 23:18:48 +01:00
Peter Steinberger
1bc5c2a7e9
refactor: unify exec shell parser parity and gateway websocket test helpers
2026-02-21 23:17:12 +01:00
Harry Cui Kepler
ffa63173e0
refactor(agents): migrate console.warn/error/info to subsystem logger ( #22906 )
...
Merged via /review-pr -> /prepare-pr -> /merge-pr.
Prepared head SHA: a806c4cb2700564096ce8980a8d7f839f8a0d388
Co-authored-by: Kepler2024 <166882517+Kepler2024@users.noreply.github.com>
Co-authored-by: gumadeiras <5599352+gumadeiras@users.noreply.github.com>
Reviewed-by: @gumadeiras
2026-02-21 17:11:47 -05:00
Peter Steinberger
1257aee6e1
docs(agents): note ghsa severity cvss patch constraint
2026-02-21 23:10:55 +01:00
Peter Steinberger
7c500ff623
fix(security): harden control-ui static path resolution
2026-02-21 23:10:55 +01:00
Peter Steinberger
2028ca4428
fix(macos): unify exec allowlist validation pipeline
2026-02-21 23:09:07 +01:00
Peter Steinberger
61dc7ac679
refactor(msteams,bluebubbles): dedupe inbound media download helpers
2026-02-21 23:08:07 +01:00
kumarabhirup
57b7d8bd0f
fix: restore workspace pass-through dropped by design merge
2026-02-21 14:05:37 -08:00
Peter Steinberger
73d93dee64
fix: enforce inbound media max-bytes during remote fetch
2026-02-21 23:02:29 +01:00
Peter Steinberger
dd41fadcaf
fix(macos): enforce path-only exec allowlist patterns
2026-02-21 22:58:40 +01:00
Peter Steinberger
2712883d16
docs(changelog): clarify quoted substitution fix for macOS allowlist
2026-02-21 22:57:53 +01:00
Peter Steinberger
90a378ca3a
fix(macos): block quoted shell substitution in allowlist checks
2026-02-21 22:57:53 +01:00
kumarabhirup
92fadd6700
fix: filter non-parent events in main NDJSON handler and fix workspace creation path
...
Bug 1: Subagent events from gateway broadcasts were processed as parent
events because the sessionKey filter was accidentally removed during the
subagent decoupling refactor. Re-add the filter in wireChildProcess.
Bug 2: Creating workspaces at custom paths failed because:
- mkdir API rejected absolute paths outside workspace root
- Directory picker started at workspace root, not home
- Error responses from mkdir were silently swallowed
Add absolute path support to mkdir, handle errors in picker UI,
start picker at home dir, and normalize init route paths.
2026-02-21 13:45:11 -08:00
Peter Steinberger
861718e4dc
test: group remaining suite cleanups
2026-02-21 21:44:57 +00:00
Peter Steinberger
5c8f0b5a77
test: tighten plugin e2e matrix coverage
2026-02-21 21:44:50 +00:00
Peter Steinberger
cc2ff68947
test: optimize gateway infra memory and security coverage
2026-02-21 21:44:50 +00:00
Peter Steinberger
58254b3b57
test: dedupe channel and transport adapters
2026-02-21 21:44:01 +00:00
Peter Steinberger
52ddb6ae18
test: streamline auto-reply and tts suites
2026-02-21 21:44:01 +00:00
Peter Steinberger
5d9e7c942c
test: consolidate agent command and config scenarios
2026-02-21 21:44:01 +00:00
Peter Steinberger
a1ccd03da0
refactor(cli): share outbound send dependency mapping
2026-02-21 21:40:39 +00:00
Peter Steinberger
84686db850
refactor(cli): dedupe system gateway action handling
2026-02-21 21:40:39 +00:00
Peter Steinberger
a04cdc0390
refactor(cli): share update global command runner adapter
2026-02-21 21:40:39 +00:00
Peter Steinberger
944913fc98
refactor(cli): extract shared command-removal and timeout action helpers
2026-02-21 21:40:39 +00:00
Peter Steinberger
bb490a4b51
test(cli): expand agent registrar coverage
2026-02-21 21:40:39 +00:00
Peter Steinberger
b5a66e7b7e
test(cli): add message registrar wiring coverage
2026-02-21 21:40:39 +00:00
Peter Steinberger
fecc29d2c8
test(cli): add onboard registrar coverage for daemon flag precedence
2026-02-21 21:40:39 +00:00
Peter Steinberger
3d2f4aea63
test(cli): add setup registrar coverage for wizard dispatch
2026-02-21 21:40:39 +00:00
Peter Steinberger
bd8b3cd15e
test(cli): add configure registrar coverage
2026-02-21 21:40:39 +00:00
Peter Steinberger
580417685b
test(cli): add build-program wiring coverage
2026-02-21 21:40:39 +00:00
Peter Steinberger
1c78ade1a1
test(cli): add program help coverage for root output and version fast-path
2026-02-21 21:40:39 +00:00
Peter Steinberger
ceaa43df7a
test(cli): add preaction hook coverage for banner/config/plugin gating
2026-02-21 21:40:39 +00:00
Peter Steinberger
d5bfbc36d8
test(cli): add program context unit coverage
2026-02-21 21:40:39 +00:00
Peter Steinberger
0f36cbe677
test(cli): add program helper parser coverage
2026-02-21 21:40:39 +00:00
Peter Steinberger
ab3fa83f17
test(cli): add action-reparse coverage for fallback argv resolution
2026-02-21 21:40:39 +00:00
Peter Steinberger
5de9419748
test(cli): add status/health/sessions registrar coverage
2026-02-21 21:40:39 +00:00
Peter Steinberger
938fb652b5
fix(cli): honor dashboard no-open and expand maintenance coverage
2026-02-21 21:40:39 +00:00
Peter Steinberger
6de7f9d9b0
test(cli): dedupe config-guard harness and cover invalid-config gates
2026-02-21 21:40:39 +00:00
Peter Steinberger
4503bd0591
test(cli): expand command-registry grouped and subcommand coverage
2026-02-21 21:40:39 +00:00
Peter Steinberger
037da5d8a8
test(cli): extend command option inheritance edge coverage
2026-02-21 21:40:39 +00:00
Peter Steinberger
cdb92494d1
test(cli): dedupe inspect runner and cover snapshot/screenshot mode defaults
2026-02-21 21:40:39 +00:00
Peter Steinberger
81ddc98e12
test(cli): dedupe browser state command runner and cover input validation
2026-02-21 21:40:39 +00:00
