| .. |
|
audit-channel.runtime.ts
|
Security: lazy-load channel audit provider helpers
|
2026-03-15 21:09:41 -07:00 |
|
audit-channel.ts
|
refactor: make setup the primary wizard surface
|
2026-03-15 22:01:04 -07:00 |
|
audit-extra.async.ts
|
feat(secrets): expand SecretRef coverage across user-supplied credentials (#29580)
|
2026-03-03 02:58:20 +00:00 |
|
audit-extra.sync.test.ts
|
perf(test): fold secret equality assertions into audit extra suite
|
2026-02-16 00:18:27 +00:00 |
|
audit-extra.sync.ts
|
refactor(security): reuse hook agent routing normalization
|
2026-03-12 21:44:06 +00:00 |
|
audit-extra.ts
|
feat(security): audit workspace skill symlink escapes
|
2026-03-02 23:28:54 +00:00 |
|
audit-fs.ts
|
Doctor/Security: fix telegram numeric ID + symlink config permission warnings (#19844)
|
2026-02-18 00:09:51 -08:00 |
|
audit-tool-policy.ts
|
refactor(core): dedupe tool policy and IPv4 matcher logic
|
2026-02-16 16:14:54 +00:00 |
|
audit.test.ts
|
secrets: harden read-only SecretRef command paths and diagnostics (#47794)
|
2026-03-15 21:55:24 -05:00 |
|
audit.ts
|
Status: lazy-load channel security and summaries
|
2026-03-15 21:00:03 -07:00 |
|
channel-metadata.ts
|
…
|
|
|
config-regex.ts
|
fix: harden mention pattern regex compilation
|
2026-03-15 08:44:12 -07:00 |
|
dangerous-config-flags.ts
|
feat(gateway)!: require explicit non-loopback control-ui origins
|
2026-02-24 01:57:11 +00:00 |
|
dangerous-tools.ts
|
Deny cron tool on /tools/invoke by default
|
2026-02-24 04:33:50 +00:00 |
|
dm-policy-channel-smoke.test.ts
|
refactor: remove channel shim directories, point all imports to extensions (#45967)
|
2026-03-14 03:43:07 -07:00 |
|
dm-policy-shared.test.ts
|
refactor: share matched group policy evaluation
|
2026-03-08 00:05:24 +00:00 |
|
dm-policy-shared.ts
|
fix: narrow dm shared group policy typing
|
2026-03-08 00:05:24 +00:00 |
|
external-content.test.ts
|
External content: sanitize wrapped metadata (#46816)
|
2026-03-14 23:06:30 -07:00 |
|
external-content.ts
|
External content: sanitize wrapped metadata (#46816)
|
2026-03-14 23:06:30 -07:00 |
|
fix.test.ts
|
refactor(tests): dedupe security fix scenario helpers
|
2026-03-03 01:54:27 +00:00 |
|
fix.ts
|
refactor(security): enforce account-scoped pairing APIs
|
2026-02-26 21:57:52 +01:00 |
|
mutable-allowlist-detectors.ts
|
feat(zalouser): audit mutable group allowlists
|
2026-03-13 01:44:42 +00:00 |
|
safe-regex.test.ts
|
fix: harden mention pattern regex compilation
|
2026-03-15 08:44:12 -07:00 |
|
safe-regex.ts
|
fix: harden mention pattern regex compilation
|
2026-03-15 08:44:12 -07:00 |
|
scan-paths.ts
|
fix(security): enforce plugin and hook path containment
|
2026-02-19 15:37:29 +01:00 |
|
secret-equal.ts
|
fix(security): SHA-256 hash before timingSafeEqual to prevent length leak (#20856)
|
2026-02-19 03:16:35 -08:00 |
|
skill-scanner.test.ts
|
test: stabilize bun cache invalidation fixtures
|
2026-03-02 22:09:36 +00:00 |
|
skill-scanner.ts
|
perf(security): cache scanner directory walks
|
2026-03-02 20:19:10 +00:00 |
|
temp-path-guard.test.ts
|
perf(test): reduce temp fixture churn in guardrail-heavy suites
|
2026-03-03 01:09:07 +00:00 |
|
windows-acl.test.ts
|
fix(security): use icacls /sid for locale-independent Windows ACL audit (#38900)
|
2026-03-07 12:49:33 -05:00 |
|
windows-acl.ts
|
fix(security): use icacls /sid for locale-independent Windows ACL audit (#38900)
|
2026-03-07 12:49:33 -05:00 |
5c120cb36c