Peter Steinberger dc6e4a5b13 fix: harden dm command authorization in open mode

2026-02-26 19:49:36 +01:00

..

acp

feat: ACP thread-bound agents (#23580)

2026-02-26 11:00:09 +01:00

agents

test(agents): add compaction and workspace reset regressions

2026-02-26 17:41:25 +01:00

auto-reply

test(auto-reply): cover inbound timestamp guard

2026-02-26 17:10:09 +00:00

browser

fix(browser): land PR #27617 relay reconnect resilience

2026-02-26 15:08:55 +00:00

canvas-host

…

channels

refactor: unify typing dispatch lifecycle and policy boundaries

2026-02-26 17:36:16 +01:00

cli

fix: align gateway run auth modes (#27469) (thanks @s1korrrr)

2026-02-26 18:20:27 +00:00

commands

test(agents): add compaction and workspace reset regressions

2026-02-26 17:41:25 +01:00

compat

…

config

fix(secrets): harden apply and audit plan handling

2026-02-26 14:47:22 +00:00

cron

refactor(reply): split abort cutoff and timeout policy modules

2026-02-26 14:00:35 +01:00

daemon

fix: restore dm command and self-chat auth behavior

2026-02-26 18:49:16 +01:00

discord

refactor: unify dm policy store reads and reason codes

2026-02-26 17:47:57 +01:00

docs

…

gateway

refactor(security): enforce v1 node exec approval binding

2026-02-26 18:09:01 +01:00

hooks

refactor: unify boundary hardening for file reads

2026-02-26 13:04:37 +01:00

imessage

fix: harden dm command authorization in open mode

2026-02-26 19:49:36 +01:00

infra

refactor(security): enforce v1 node exec approval binding

2026-02-26 18:09:01 +01:00

line

fix(security): keep DM pairing allowlists out of group auth

2026-02-26 12:58:18 +01:00

link-understanding

…

logging

…

markdown

…

media

Mattermost: avoid raw fetch in monitor media download

2026-02-26 16:03:39 +00:00

media-understanding

…

memory

…

node-host

fix(security): harden approval-bound node exec cwd handling

2026-02-26 04:14:11 +01:00

pairing

pairing: enforce strict account-scoped state

2026-02-26 00:31:24 -05:00

plugin-sdk

fix: enforce explicit group auth boundaries across channels

2026-02-26 18:49:16 +01:00

plugins

test(agents): add compaction and workspace reset regressions

2026-02-26 17:41:25 +01:00

process

fix: restore dm command and self-chat auth behavior

2026-02-26 18:49:16 +01:00

providers

…

routing

fix(core): unify session-key normalization and plugin boundary checks

2026-02-26 12:41:23 +00:00

scripts

…

secrets

fix: restore dm command and self-chat auth behavior

2026-02-26 18:49:16 +01:00

security

fix: restore dm command and self-chat auth behavior

2026-02-26 18:49:16 +01:00

sessions

fix(core): unify session-key normalization and plugin boundary checks

2026-02-26 12:41:23 +00:00

shared

fix(ssrf): unify ipv6 special-use blocking

2026-02-26 03:43:42 +01:00

signal

fix: harden dm command authorization in open mode

2026-02-26 19:49:36 +01:00

slack

style: format auth boundary updates

2026-02-26 18:50:47 +01:00

telegram

fix: enforce explicit group auth boundaries across channels

2026-02-26 18:49:16 +01:00

terminal

…

test-helpers

…

test-utils

…

tts

…

tui

…

types

…

utils

feat(secrets): finalize external secrets runtime and migration hardening

2026-02-26 14:47:22 +00:00

web

style: format auth boundary updates

2026-02-26 18:50:47 +01:00

whatsapp

…

wizard

feat(secrets): expand onboarding secret-ref flows and custom-provider parity

2026-02-26 14:47:22 +00:00

channel-web.ts

…

docker-image-digests.test.ts

…

docker-setup.test.ts

fix: harden Docker/GCP onboarding flow (#26253) (thanks @pandego)

2026-02-26 04:46:18 +00:00

dockerfile.test.ts

fix: harden Docker/GCP onboarding flow (#26253) (thanks @pandego)

2026-02-26 04:46:18 +00:00

entry.ts

fix(secrets): make apply idempotent and keep audit read-only

2026-02-26 14:47:22 +00:00

extensionAPI.ts

…

globals.ts

…

index.ts

…

logger.test.ts

…

logger.ts

…

logging.ts

…

polls.test.ts

…

polls.ts

…

runtime.ts

…

utils.test.ts

…

utils.ts

…

version.test.ts

…

version.ts

…