Peter Steinberger
|
c0bf42f2a8
|
refactor: centralize delivery/path/media/version lifecycle
|
2026-03-02 04:04:36 +00:00 |
|
Peter Steinberger
|
e3385a6578
|
fix(security): harden root file guards and host writes
|
2026-02-26 13:32:58 +01:00 |
|
Peter Steinberger
|
de61e9c977
|
refactor(security): unify path alias guard policies
|
2026-02-26 03:59:17 +01:00 |
|
Peter Steinberger
|
04d91d0319
|
fix(security): block workspace hardlink alias escapes
|
2026-02-26 03:42:54 +01:00 |
|
Peter Steinberger
|
6634030be3
|
fix: enforce apply_patch workspaceOnly in sandbox mounts
|
2026-02-24 02:23:56 +00:00 |
|
Peter Steinberger
|
b8b43175c5
|
style: align formatting with oxfmt 0.33
|
2026-02-18 01:34:35 +00:00 |
|
Peter Steinberger
|
31f9be126c
|
style: run oxfmt and fix gate failures
|
2026-02-18 01:29:02 +00:00 |
|
cpojer
|
d0cb8c19b2
|
chore: wtf.
|
2026-02-17 13:36:48 +09:00 |
|
Sebastian
|
ed11e93cf2
|
chore(format)
|
2026-02-16 23:20:16 -05:00 |
|
Peter Steinberger
|
5115f6fdf3
|
style: normalize imports for oxfmt 0.33
|
2026-02-17 00:59:54 +00:00 |
|
Peter Steinberger
|
9032a50981
|
refactor: reuse sandbox path expansion in apply-patch
|
2026-02-17 00:45:02 +00:00 |
|
cpojer
|
90ef2d6bdf
|
chore: Update formatting.
|
2026-02-17 09:18:40 +09:00 |
|
Peter Steinberger
|
914b9d1e79
|
fix(agents): block workspaceOnly apply_patch delete symlink escape
|
2026-02-15 03:28:25 +01:00 |
|
Peter Steinberger
|
4a44da7d91
|
fix(security): default apply_patch workspace containment
|
2026-02-15 03:19:27 +01:00 |
|
Peter Steinberger
|
5e7c3250cb
|
fix(security): add optional workspace-only path guards for fs tools
|
2026-02-14 23:50:24 +01:00 |
|
Mariano
|
5544646a09
|
security: block apply_patch path traversal outside workspace (#16405)
Merged via /review-pr -> /prepare-pr -> /merge-pr.
Prepared head SHA: 0fcd3f8c3a
Co-authored-by: mbelinky <132747814+mbelinky@users.noreply.github.com>
Co-authored-by: mbelinky <132747814+mbelinky@users.noreply.github.com>
Reviewed-by: @mbelinky
|
2026-02-14 19:11:12 +00:00 |
|
Peter Steinberger
|
31c6a12cfa
|
fix(agents): restore missing runtime helpers and sandbox types
|
2026-02-13 15:42:05 +00:00 |
|
davidbors-snyk
|
29d7839582
|
fix: execute sandboxed file ops inside containers (#4026)
Merged via /review-pr -> /prepare-pr -> /merge-pr.
Prepared head SHA: 795ec6aa2f
Co-authored-by: davidbors-snyk <240482518+davidbors-snyk@users.noreply.github.com>
Co-authored-by: steipete <58493+steipete@users.noreply.github.com>
Reviewed-by: @steipete
|
2026-02-13 16:29:10 +01:00 |
|
cpojer
|
935a0e5708
|
chore: Enable typescript/no-explicit-any rule.
|
2026-02-02 16:18:09 +09:00 |
|
cpojer
|
f06dd8df06
|
chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.
|
2026-02-01 10:03:47 +09:00 |
|
cpojer
|
5ceff756e1
|
chore: Enable "curly" rule to avoid single-statement if confusion/errors.
|
2026-01-31 16:19:20 +09:00 |
|
Peter Steinberger
|
c379191f80
|
chore: migrate to oxlint and oxfmt
Co-authored-by: Christoph Nakazawa <christoph.pojer@gmail.com>
|
2026-01-14 15:02:19 +00:00 |
|
Peter Steinberger
|
bcbfb357be
|
refactor(src): split oversized modules
|
2026-01-14 01:17:56 +00:00 |
|
Peter Steinberger
|
8b4bdaa8a4
|
feat: add apply_patch tool (exec-gated)
|
2026-01-12 03:42:56 +00:00 |
|