Pavan Kumar Gondhi fc065b2693 Harden macOS shell wrapper allowlist parsing [AI] (#78518) ...

* fix: harden shell wrapper allowlist parsing

* fix: harden shell wrapper approval binding

* docs: add changelog entry for PR merge

---------

Co-authored-by: Ishaan <ishaan@Ishaans-Mac-mini.local>

2026-05-08 10:18:41 +05:30

..

acp

perf: lazy load memory embedding runtime

2026-05-08 05:39:13 +01:00

agents

perf: lazy load memory embedding runtime

2026-05-08 05:39:13 +01:00

auto-reply

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

bindings

…

bootstrap

…

channels

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

chat

…

cli

fix(gateway): persist macOS stop disable after bootout

2026-05-08 05:35:21 +01:00

commands

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

commitments

…

compat

…

config

perf: lazy load memory embedding runtime

2026-05-08 05:39:13 +01:00

context-engine

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

crestodian

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

cron

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

daemon

fix(gateway): persist macOS stop disable after bootout

2026-05-08 05:35:21 +01:00

docs

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

flows

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

gateway

fix(gateway): preserve node reconnect state (#78351)

2026-05-08 12:32:18 +08:00

hooks

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

i18n

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

image-generation

…

infra

Harden macOS shell wrapper allowlist parsing [AI] (#78518)

2026-05-08 10:18:41 +05:30

interactive

…

link-understanding

…

logging

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

markdown

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

mcp

…

media

fix: share plugin runtime helpers

2026-05-08 00:28:43 +01:00

media-generation

fix(media): avoid provider listing for exact media defaults

2026-05-06 23:44:34 -07:00

media-understanding

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

memory

…

memory-host-sdk

…

model-catalog

…

music-generation

…

node-host

Harden macOS shell wrapper allowlist parsing [AI] (#78518)

2026-05-08 10:18:41 +05:30

pairing

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

plugin-sdk

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

plugin-state

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

plugins

feat(imessage): add native imsg message actions

2026-05-08 05:34:22 +01:00

process

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

proxy-capture

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

realtime-transcription

…

routing

…

scripts

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

secrets

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

security

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

sessions

…

shared

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

status

fix: label claude cli oauth status

2026-05-07 05:52:12 +01:00

talk

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

tasks

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

terminal

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

test-helpers

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

test-utils

…

tools

…

trajectory

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

tts

refactor(runtime): add prepared runtime foundation (#78248)

2026-05-07 18:49:42 -03:00

tui

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

types

…

utils

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

video-generation

…

web

…

web-fetch

…

web-search

…

wizard

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

browser-lifecycle-cleanup.test.ts

…

browser-lifecycle-cleanup.ts

…

docker-build-cache.test.ts

fix(docker): preserve functional image dependencies

2026-05-06 14:08:28 -07:00

docker-image-digests.test.ts

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

docker-setup.e2e.test.ts

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

dockerfile.test.ts

…

entry.compile-cache.test.ts

…

entry.compile-cache.ts

…

entry.respawn.test.ts

…

entry.respawn.ts

…

entry.test.ts

…

entry.ts

fix: add root guard to prevent CLI execution as root (#67478)

2026-05-07 23:31:03 -04:00

entry.version-fast-path.test.ts

…

entry.version-fast-path.ts

…

extensionAPI.ts

…

global-state.ts

…

globals.ts

…

index.test.ts

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

index.ts

fix: enforce root guard unconditionally on legacy entrypoint

2026-05-07 23:31:03 -04:00

install-sh-version.test.ts

…

library.test.ts

…

library.ts

…

logger.test.ts

…

logger.ts

…

logging.ts

…

param-key.ts

…

plugin-activation-boundary.test.ts

…

poll-params.test.ts

…

poll-params.ts

…

polls.test.ts

…

polls.ts

…

runtime.ts

…

ui-app-settings.agents-files-refresh.test.ts

…

utils.test.ts

…

utils.ts

…

version.test.ts

…

version.ts

…