12 Commits

Author	SHA1	Message	Date
Peter Steinberger	914b9d1e79	fix(agents): block workspaceOnly apply_patch delete symlink escape	2026-02-15 03:28:25 +01:00
Peter Steinberger	4a44da7d91	fix(security): default apply_patch workspace containment	2026-02-15 03:19:27 +01:00
Peter Steinberger	5e7c3250cb	fix(security): add optional workspace-only path guards for fs tools	2026-02-14 23:50:24 +01:00
Mariano	5544646a09	security: block apply_patch path traversal outside workspace (#16405) ... Merged via /review-pr -> /prepare-pr -> /merge-pr. Prepared head SHA: 0fcd3f8c3a Co-authored-by: mbelinky <132747814+mbelinky@users.noreply.github.com> Co-authored-by: mbelinky <132747814+mbelinky@users.noreply.github.com> Reviewed-by: @mbelinky	2026-02-14 19:11:12 +00:00
Peter Steinberger	31c6a12cfa	fix(agents): restore missing runtime helpers and sandbox types	2026-02-13 15:42:05 +00:00
davidbors-snyk	29d7839582	fix: execute sandboxed file ops inside containers (#4026) ... Merged via /review-pr -> /prepare-pr -> /merge-pr. Prepared head SHA: 795ec6aa2f Co-authored-by: davidbors-snyk <240482518+davidbors-snyk@users.noreply.github.com> Co-authored-by: steipete <58493+steipete@users.noreply.github.com> Reviewed-by: @steipete	2026-02-13 16:29:10 +01:00
cpojer	935a0e5708	chore: Enable `typescript/no-explicit-any` rule.	2026-02-02 16:18:09 +09:00
cpojer	f06dd8df06	chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.	2026-02-01 10:03:47 +09:00
cpojer	5ceff756e1	chore: Enable "curly" rule to avoid single-statement if confusion/errors.	2026-01-31 16:19:20 +09:00
Peter Steinberger	c379191f80	chore: migrate to oxlint and oxfmt ... Co-authored-by: Christoph Nakazawa <christoph.pojer@gmail.com>	2026-01-14 15:02:19 +00:00
Peter Steinberger	bcbfb357be	refactor(src): split oversized modules	2026-01-14 01:17:56 +00:00
Peter Steinberger	8b4bdaa8a4	feat: add apply_patch tool (exec-gated)	2026-01-12 03:42:56 +00:00