Vincent Koc c7137270d1 Security: split audit runtime surfaces

2026-03-15 23:30:34 -07:00

..

audit-channel.collect.runtime.ts

Security: split audit runtime surfaces

2026-03-15 23:30:34 -07:00

audit-channel.runtime.ts

Security: split audit runtime surfaces

2026-03-15 23:30:34 -07:00

audit-channel.ts

refactor: make setup the primary wizard surface

2026-03-15 22:01:04 -07:00

audit-extra.async.ts

Security: lazy-load audit config snapshot IO

2026-03-15 22:55:26 -07:00

audit-extra.sync.test.ts

perf(test): fold secret equality assertions into audit extra suite

2026-02-16 00:18:27 +00:00

audit-extra.sync.ts

Security: trim audit policy import surfaces

2026-03-15 22:55:26 -07:00

audit-extra.ts

feat(security): audit workspace skill symlink escapes

2026-03-02 23:28:54 +00:00

audit-fs.ts

Doctor/Security: fix telegram numeric ID + symlink config permission warnings (#19844)

2026-02-18 00:09:51 -08:00

audit-tool-policy.ts

refactor(core): dedupe tool policy and IPv4 matcher logic

2026-02-16 16:14:54 +00:00

audit.deep.runtime.ts

Security: split audit runtime surfaces

2026-03-15 23:30:34 -07:00

audit.nondeep.runtime.ts

Security: split audit runtime surfaces

2026-03-15 23:30:34 -07:00

audit.runtime.ts

Status: lazy-load security audit commands

2026-03-15 23:24:25 -07:00

audit.test.ts

secrets: harden read-only SecretRef command paths and diagnostics (#47794)

2026-03-15 21:55:24 -05:00

audit.ts

Security: split audit runtime surfaces

2026-03-15 23:30:34 -07:00

channel-metadata.ts

fix(security): separate untrusted channel metadata from system prompt (thanks @KonstantinMirin)

2026-02-03 23:02:45 -08:00

config-regex.ts

fix: harden mention pattern regex compilation

2026-03-15 08:44:12 -07:00

dangerous-config-flags.ts

feat(gateway)!: require explicit non-loopback control-ui origins

2026-02-24 01:57:11 +00:00

dangerous-tools.ts

Deny cron tool on /tools/invoke by default

2026-02-24 04:33:50 +00:00

dm-policy-channel-smoke.test.ts

refactor: remove channel shim directories, point all imports to extensions (#45967)

2026-03-14 03:43:07 -07:00

dm-policy-shared.test.ts

refactor: share matched group policy evaluation

2026-03-08 00:05:24 +00:00

dm-policy-shared.ts

fix: narrow dm shared group policy typing

2026-03-08 00:05:24 +00:00

external-content.test.ts

External content: sanitize wrapped metadata (#46816)

2026-03-14 23:06:30 -07:00

external-content.ts

External content: sanitize wrapped metadata (#46816)

2026-03-14 23:06:30 -07:00

fix.test.ts

refactor(tests): dedupe security fix scenario helpers

2026-03-03 01:54:27 +00:00

fix.ts

refactor(security): enforce account-scoped pairing APIs

2026-02-26 21:57:52 +01:00

mutable-allowlist-detectors.ts

feat(zalouser): audit mutable group allowlists

2026-03-13 01:44:42 +00:00

safe-regex.test.ts

fix: harden mention pattern regex compilation

2026-03-15 08:44:12 -07:00

safe-regex.ts

fix: harden mention pattern regex compilation

2026-03-15 08:44:12 -07:00

scan-paths.ts

fix(security): enforce plugin and hook path containment

2026-02-19 15:37:29 +01:00

secret-equal.ts

fix(security): SHA-256 hash before timingSafeEqual to prevent length leak (#20856)

2026-02-19 03:16:35 -08:00

skill-scanner.test.ts

test: stabilize bun cache invalidation fixtures

2026-03-02 22:09:36 +00:00

skill-scanner.ts

perf(security): cache scanner directory walks

2026-03-02 20:19:10 +00:00

temp-path-guard.test.ts

perf(test): reduce temp fixture churn in guardrail-heavy suites

2026-03-03 01:09:07 +00:00

windows-acl.test.ts

fix(security): use icacls /sid for locale-independent Windows ACL audit (#38900)

2026-03-07 12:49:33 -05:00

windows-acl.ts

fix(security): use icacls /sid for locale-independent Windows ACL audit (#38900)

2026-03-07 12:49:33 -05:00