Coy Geek 192ee081e7 fix: Implicit latest-device approval can pair the wrong requester (#64160) ...

* fix: require confirmation before implicit device approval

Keep re-requested pairing entries from jumping the queue and force operators to confirm implicit latest-request approval so a refreshed attacker request cannot be silently approved.

* fix: require exact device pairing approval

* fix: stabilize reply CI checks

---------

Co-authored-by: Peter Steinberger <steipete@gmail.com>

2026-04-11 02:55:01 +01:00

..

acp.md

docs: refresh cli acp and approvals summaries

2026-04-04 08:20:20 +01:00

agent.md

docs: clarify local agent plugin preload

2026-04-04 09:04:11 +01:00

agents.md

fix: make docs anchor audit use Mintlify CLI

2026-04-10 21:39:52 +01:00

approvals.md

feat: add local exec-policy CLI (#64050)

2026-04-10 01:16:03 -05:00

backup.md

docs: refresh backup and migration storage refs

2026-04-04 10:39:42 +01:00

browser.md

docs: refresh browser existing-session limit refs

2026-04-04 20:26:30 +01:00

channels.md

docs: refresh claude-cli naming mirrors

2026-04-04 22:11:45 +01:00

clawbot.md

docs: align CLI docs and help surface

2026-02-22 20:05:01 +01:00

completion.md

docs: align CLI docs and help surface

2026-02-22 20:05:01 +01:00

config.md

docs: refresh config schema and gateway tool mirrors

2026-04-04 21:43:09 +01:00

configure.md

docs: refresh model picker provider filtering

2026-04-04 11:30:18 +01:00

cron.md

docs: refresh silent cron delivery refs

2026-04-04 18:26:28 +01:00

daemon.md

docs: refresh gateway probe warning mirrors

2026-04-04 19:10:31 +01:00

dashboard.md

Gateway: add SecretRef support for gateway.auth.token with auth-mode guardrails (#35094)

2026-03-05 12:53:56 -06:00

devices.md

fix: Implicit latest-device approval can pair the wrong requester (#64160)

2026-04-11 02:55:01 +01:00

directory.md

docs: fix curly quotes, non-breaking hyphens, and remaining apostrophes in headings

2026-03-18 01:31:38 -07:00

dns.md

docs: refresh pairing devices and dns refs

2026-04-04 08:36:27 +01:00

docs.md

docs: refresh docs search and tui refs

2026-04-04 08:34:43 +01:00

doctor.md

docs: refresh talk config and doctor refs

2026-04-04 14:35:03 +01:00

flows.md

docs: rename TaskFlow to Task Flow in prose

2026-04-03 03:22:01 +09:00

gateway.md

Revert "refactor(cli): remove bundled cli text providers"

2026-04-06 13:40:41 +01:00

health.md

docs: refresh gateway health snapshot refs

2026-04-04 18:54:04 +01:00

hooks.md

docs: refresh mcp approvals and hooks refs

2026-04-04 08:46:37 +01:00

index.md

fix: Implicit latest-device approval can pair the wrong requester (#64160)

2026-04-11 02:55:01 +01:00

infer.md

docs: rename and improve infer docs

2026-04-07 09:42:42 -05:00

logs.md

docs: expand logs cli reference

2026-04-04 08:27:14 +01:00

mcp.md

docs: refresh mcp config refs

2026-04-04 16:15:11 +01:00

memory.md

Memory/dreaming: harden grounded backfill follow-ups

2026-04-08 23:43:39 +02:00

message.md

docs: refresh message and channels refs

2026-04-04 08:39:04 +01:00

models.md

fix(anthropic): prefer claude cli over setup-token

2026-04-06 15:31:07 +01:00

node.md

docs: clarify node exec approval plan forwarding

2026-04-04 12:18:04 +01:00

nodes.md

docs: refresh node pairing scope references

2026-04-04 11:22:02 +01:00

onboard.md

fix(zai): update stale glm-5 ref in docs/cli/onboard.md

2026-04-08 04:38:39 +01:00

pairing.md

docs: refresh pairing devices and dns refs

2026-04-04 08:36:27 +01:00

plugins.md

docs: clarify bundled plugin recovery refs

2026-04-04 13:24:04 +01:00

qr.md

docs: refresh setup-code bootstrap scope mirrors

2026-04-04 18:48:26 +01:00

reset.md

docs: refresh reset and uninstall refs

2026-04-04 08:30:25 +01:00

sandbox.md

test: expand ssh sandbox coverage and docs

2026-03-15 21:38:22 -07:00

secrets.md

docs: refresh mcp approvals and hooks refs

2026-04-04 08:46:37 +01:00

security.md

docs: refresh hook ingress security refs

2026-04-04 13:59:09 +01:00

sessions.md

docs: refresh system health and sessions refs

2026-04-04 08:28:41 +01:00

setup.md

docs: refresh setup and config refs

2026-04-04 08:48:15 +01:00

skills.md

docs: refresh skills cli stream refs

2026-04-04 16:19:34 +01:00

status.md

docs: refresh status token fallback refs

2026-04-04 12:42:50 +01:00

system.md

docs: refresh system health and sessions refs

2026-04-04 08:28:41 +01:00

tui.md

feat(tui): infer workspace agent when launching TUI (#39591)

2026-03-08 13:31:11 +03:00

uninstall.md

docs: refresh reset and uninstall refs

2026-04-04 08:30:25 +01:00

update.md

refactor(update): extract package manager bootstrap logic

2026-04-06 01:41:59 +01:00

voicecall.md

docs: fix voicecall expose disable example

2026-02-22 20:58:28 +01:00

webhooks.md

docs: expand cli security and webhook refs

2026-04-04 08:33:50 +01:00

wiki.md

docs: add memory wiki docs

2026-04-08 03:59:29 +01:00