Peter Steinberger dea1fe1f11 fix(security): close forged-marker sanitization bypass and harden web_search boundary (#110417) ...

* fix(security): sanitize forged external-content markers with over-long ids

* fix(agents): snapshot untrusted web_search provider output at the boundary

* refactor(agents): split web_search snapshot serialize to avoid a lint suppression

2026-07-18 06:05:55 +01:00

..

audit-channel-account-metadata.test.ts

refactor: remove gateway and channel dead exports (#106038)

2026-07-13 05:47:05 -07:00

audit-channel-dm-policy.test.ts

refactor: remove gateway and channel dead exports (#106038)

2026-07-13 05:47:05 -07:00

audit-channel-readonly-resolution.test.ts

refactor: remove gateway and channel dead exports (#106038)

2026-07-13 05:47:05 -07:00

audit-channel-readonly-setup-fallback.test.ts

…

audit-channel-source-config-discord.test.ts

…

audit-channel-source-config-slack.test.ts

…

audit-channel-test-helpers.ts

refactor: remove gateway and channel dead exports (#106038)

2026-07-13 05:47:05 -07:00

audit-channel.collect.runtime.ts

…

audit-channel.ts

…

audit-config-basics.test.ts

refactor(security): privatize audit internals (#108067)

2026-07-14 23:28:04 -07:00

audit-config-include-perms.test.ts

fix(security): confine include permission remediation (#103267)

2026-07-10 17:14:08 +01:00

audit-config-symlink.test.ts

refactor(security): privatize audit internals (#108067)

2026-07-14 23:28:04 -07:00

audit-deep-code-safety.ts

refactor(shared): consolidate core leaf lazy loaders (#99278)

2026-07-02 18:06:00 -07:00

audit-deep-probe-findings.ts

…

audit-exec-safe-bins.test.ts

refactor(security): privatize audit internals (#108067)

2026-07-14 23:28:04 -07:00

audit-exec-sandbox-host.test.ts

refactor(security): privatize audit internals (#108067)

2026-07-14 23:28:04 -07:00

audit-exec-surface.test.ts

refactor(security): privatize audit internals (#108067)

2026-07-14 23:28:04 -07:00

audit-extra.async.test.ts

fix(security): scan SKILL.md text in skill code-safety audit (#109363)

2026-07-16 21:37:17 -07:00

audit-extra.async.ts

fix(security): scan SKILL.md text in skill code-safety audit (#109363)

2026-07-16 21:37:17 -07:00

audit-extra.summary.ts

refactor(deadcode): trim mid-size src exports (#105888)

2026-07-13 00:42:56 -07:00

audit-extra.sync.test.ts

fix(security): align browser audit with plugin policy (#97732)

2026-07-07 02:27:05 +01:00

audit-extra.sync.ts

chore: enforce max-lines suppression ratchet (#107315)

2026-07-14 09:27:02 -07:00

audit-filesystem-windows.test.ts

refactor(security): privatize audit internals (#108067)

2026-07-14 23:28:04 -07:00

audit-fs.ts

…

audit-gateway-auth-selection.test.ts

…

audit-gateway-config.ts

refactor(deadcode): trim mid-size src exports (#105888)

2026-07-13 00:42:56 -07:00

audit-gateway-exposure.test.ts

feat(mcp): support sandboxed MCP Apps (#69039)

2026-07-11 22:04:38 -07:00

audit-gateway-http-auth.test.ts

…

audit-gateway-tools-http.test.ts

…

audit-gateway.test.ts

…

audit-hooks-routing.test.ts

…

audit-loopback-logging.test.ts

refactor(security): privatize audit internals (#108067)

2026-07-14 23:28:04 -07:00

audit-model-hygiene.test.ts

…

audit-model-refs.ts

refactor(deadcode): trim mid-size src exports (#105888)

2026-07-13 00:42:56 -07:00

audit-node-command-findings.test.ts

feat(ios): add private HealthKit summaries (#105616)

2026-07-12 12:52:38 -07:00

audit-plugin-code-safety.test.ts

…

audit-plugin-readonly-scope.test.ts

refactor(security): privatize audit internals (#108067)

2026-07-14 23:28:04 -07:00

audit-plugins-trust.test.ts

…

audit-plugins-trust.ts

refactor: consolidate markdown code fences, error coercion, and byte-identical helper pairs (#99932)

2026-07-04 08:40:41 -04:00

audit-probe-failure.test.ts

…

audit-sandbox-browser.test.ts

…

audit-sandbox-docker-config.test.ts

…

audit-small-model-risk.test.ts

…

audit-summary.test.ts

feat(fleet): harden create, port allocation, drift visibility, and audit guidance (#104814)

2026-07-12 07:02:42 +01:00

audit-synced-folder.test.ts

…

audit-trust-model.test.ts

feat(fleet): harden create, port allocation, drift visibility, and audit guidance (#104814)

2026-07-12 07:02:42 +01:00

audit.deep.runtime.ts

…

audit.nondeep.runtime.ts

…

audit.runtime.ts

…

audit.test-support.ts

refactor(security): privatize audit internals (#108067)

2026-07-14 23:28:04 -07:00

audit.ts

refactor(security): privatize audit internals (#108067)

2026-07-14 23:28:04 -07:00

audit.types.ts

…

channel-metadata.test.ts

fix(security): keep channel-metadata and install-policy truncation surrogate-safe (#102266)

2026-07-09 06:31:06 +01:00

channel-metadata.ts

fix(security): keep channel-metadata and install-policy truncation surrogate-safe (#102266)

2026-07-09 06:31:06 +01:00

config-regex.ts

refactor(deadcode): trim mid-size src exports (#105888)

2026-07-13 00:42:56 -07:00

context-visibility.test.ts

…

context-visibility.ts

…

core-dangerous-config-flags.ts

…

dangerous-config-flags-core.ts

refactor(deadcode): trim mid-size src exports (#105888)

2026-07-13 00:42:56 -07:00

dangerous-config-flags-current-snapshot.test.ts

…

dangerous-config-flags-current.ts

…

dangerous-config-flags.test.ts

…

dangerous-config-flags.ts

feat(agents): narrow gateway tool to read-only config

2026-07-15 01:56:31 -07:00

dangerous-tools.ts

refactor: separate external conversations from local sessions (#109411)

2026-07-17 00:09:51 -07:00

dm-policy-shared.ts

refactor: remove stale internal deprecated compatibility (#109266)

2026-07-16 11:35:34 -07:00

exec-filesystem-policy.ts

refactor(deadcode): trim mid-size src exports (#105888)

2026-07-13 00:42:56 -07:00

external-content-source.ts

…

external-content.test.ts

fix(security): close forged-marker sanitization bypass and harden web_search boundary (#110417)

2026-07-18 06:05:55 +01:00

external-content.ts

fix(security): close forged-marker sanitization bypass and harden web_search boundary (#110417)

2026-07-18 06:05:55 +01:00

fix.test.ts

refactor(security): privatize audit internals (#108067)

2026-07-14 23:28:04 -07:00

fix.ts

refactor(security): privatize audit internals (#108067)

2026-07-14 23:28:04 -07:00

install-policy.test.ts

fix(ci): script-only changes cold-start every Node job (#110158)

2026-07-17 23:05:16 +01:00

install-policy.ts

refactor: privatize core dead exports (#107826)

2026-07-14 16:00:58 -07:00

installed-plugin-dirs.ts

refactor(deadcode): localize core helpers (#101869)

2026-07-07 13:16:57 -07:00

safe-regex.test.ts

refactor(plugin-sdk): narrow wildcard barrels to explicit used exports (#108440)

2026-07-16 00:45:23 -07:00

safe-regex.ts

refactor(plugin-sdk): narrow wildcard barrels to explicit used exports (#108440)

2026-07-16 00:45:23 -07:00

scan-paths.test.ts

…

scan-paths.ts

…

secret-equal.test.ts

refactor(security): consolidate secret primitives (#99746)

2026-07-04 16:38:13 -07:00

secret-equal.ts

…

secret-mask.test.ts

fix(security): preserve UTF-16 boundaries in secret mask (#104800)

2026-07-12 07:50:46 +01:00

secret-mask.ts

fix(security): preserve UTF-16 boundaries in secret mask (#104800)

2026-07-12 07:50:46 +01:00

system-tags.ts

…

test-temp-cases.ts

…

windows-acl.test.ts

refactor: delete dead infra and config exports (#106019)

2026-07-13 12:00:47 -07:00

windows-acl.ts

refactor: delete dead infra and config exports (#106019)

2026-07-13 12:00:47 -07:00