Peter Steinberger f789f880c9 fix(security): harden approval-bound node exec cwd handling

2026-02-26 04:14:11 +01:00

..

config.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

exec-policy.test.ts

test: dedupe fixtures and test harness setup

2026-02-23 05:45:54 +00:00

exec-policy.ts

fix(security): block shell-wrapper line-continuation allowlist bypass

2026-02-22 22:36:29 +01:00

invoke-browser.ts

refactor(node-host): extract invoke handlers

2026-02-13 19:08:37 +00:00

invoke-system-run.test.ts

fix(security): harden approval-bound node exec cwd handling

2026-02-26 04:14:11 +01:00

invoke-system-run.ts

fix(security): harden approval-bound node exec cwd handling

2026-02-26 04:14:11 +01:00

invoke-types.ts

fix(security): trust resolved skill-bin paths in allowlist auto-allow

2026-02-24 03:12:43 +00:00

invoke.sanitize-env.test.ts

fix(security): block shell env allowlist bypass in system.run

2026-02-22 12:47:05 +01:00

invoke.ts

fix(node): default mac headless system.run to local host

2026-02-22 22:24:28 +01:00

runner.ts

fix(security): trust resolved skill-bin paths in allowlist auto-allow

2026-02-24 03:12:43 +00:00

with-timeout.ts

fix: add safety timeout to session.compact() to prevent lane deadlock (#16533)

2026-02-14 17:54:12 -05:00