Peter Steinberger c5c5c77ebb fix(ci): restore contract-safe core imports

2026-04-04 15:09:48 +01:00

..

audit-channel.allow-from.runtime.ts

perf: split telegram audit runtime seams

2026-03-22 00:53:12 +00:00

audit-channel.collect.runtime.ts

refactor: consolidate lazy runtime surfaces

2026-03-17 00:59:20 -07:00

audit-channel.ts

fix(outbound): restore generic delivery and security seams

2026-04-03 19:09:20 +01:00

audit-extra.async.test.ts

test: split security audit code safety coverage

2026-04-04 01:07:28 +09:00

audit-extra.async.ts

fix(outbound): restore generic delivery and security seams

2026-04-03 19:09:20 +01:00

audit-extra.sync.test.ts

refactor: narrow audit browser enablement check

2026-04-03 16:39:47 +01:00

audit-extra.sync.ts

refactor: narrow audit browser enablement check

2026-04-03 16:39:47 +01:00

audit-extra.ts

feat(security): audit workspace skill symlink escapes

2026-03-02 23:28:54 +00:00

audit-fs.ts

Doctor/Security: fix telegram numeric ID + symlink config permission warnings (#19844)

2026-02-18 00:09:51 -08:00

audit-tool-policy.ts

refactor(core): dedupe tool policy and IPv4 matcher logic

2026-02-16 16:14:54 +00:00

audit.deep.runtime.ts

Security: split audit runtime surfaces

2026-03-15 23:30:34 -07:00

audit.nondeep.runtime.ts

Security: split audit runtime surfaces

2026-03-15 23:30:34 -07:00

audit.runtime.ts

refactor: consolidate lazy runtime surfaces

2026-03-17 00:59:20 -07:00

audit.test.ts

fix(sandbox): cover home credential bind audit

2026-04-04 20:27:10 +09:00

audit.ts

fix(ci): restore contract-safe core imports

2026-04-04 15:09:48 +01:00

channel-metadata.ts

fix(security): separate untrusted channel metadata from system prompt (thanks @KonstantinMirin)

2026-02-03 23:02:45 -08:00

config-regex.ts

fix: harden mention pattern regex compilation

2026-03-15 08:44:12 -07:00

context-visibility.test.ts

feat: add configurable context visibility

2026-04-03 04:34:57 +09:00

context-visibility.ts

feat: add configurable context visibility

2026-04-03 04:34:57 +09:00

dangerous-config-flags.ts

docs(security): clarify acpx yolo mode

2026-03-31 20:54:30 +09:00

dangerous-tools.ts

docs(acp): align approval policy wording

2026-03-31 20:49:31 +09:00

dm-policy-shared.test.ts

test: dedupe security utility suites

2026-03-28 01:38:12 +00:00

dm-policy-shared.ts

Plugin SDK: use public utility subpaths

2026-03-18 09:43:46 -07:00

external-content.test.ts

test: dedupe security utility suites

2026-03-28 01:38:12 +00:00

external-content.ts

fix(gateway): preserve async hook ingress provenance

2026-03-22 22:21:49 -07:00

fix.test.ts

test: dedupe security utility suites

2026-03-28 01:38:12 +00:00

fix.ts

refactor(plugins): move extension seams into extensions

2026-04-04 00:10:16 +01:00

safe-regex.test.ts

test: dedupe security utility suites

2026-03-28 01:38:12 +00:00

safe-regex.ts

fix: harden mention pattern regex compilation

2026-03-15 08:44:12 -07:00

scan-paths.ts

fix(security): enforce plugin and hook path containment

2026-02-19 15:37:29 +01:00

secret-equal.ts

fix(security): SHA-256 hash before timingSafeEqual to prevent length leak (#20856)

2026-02-19 03:16:35 -08:00

skill-scanner.test.ts

test: dedupe security utility suites

2026-03-28 01:38:12 +00:00

skill-scanner.ts

perf(security): cache scanner directory walks

2026-03-02 20:19:10 +00:00

temp-path-guard.test.ts

test: dedupe security utility suites

2026-03-28 01:38:12 +00:00

windows-acl.test.ts

fix(ci): align windows builtin mock types

2026-04-04 03:57:48 +09:00

windows-acl.ts

fix(security): use icacls /sid for locale-independent Windows ACL audit (#38900)

2026-03-07 12:49:33 -05:00