Commit graph

1792 commits

Author SHA1 Message Date
stevef
db2349cf4d feat(isolation): further hardening for agent loop and tools 2026-04-03 21:40:07 +02:00
stevef
afebbd3650 fixes 2026-04-03 21:40:07 +02:00
stevef
253412a526 fix(agent): inject media store in isolation and fix config unmarshal panic 2026-04-03 21:40:07 +02:00
stevef
3d621b6401 chore: minor configuration updates 2026-04-03 21:40:07 +02:00
stevef
5ca9b1c349 Remove deprecated /cgat and loop detection endpoints from server and docs 2026-04-03 21:35:55 +02:00
stevef
2a153bff02 Synchronize hardening: added onboard purge, non-interactive mode, and diagnostic startup logs 2026-04-03 21:32:00 +02:00
stevef
7dee43b0dc test: merge filesystem isolation validation into isolation_tools_test.go 2026-04-03 21:32:00 +02:00
stevef
5913149664 fix(agent): ensure isolated agents inherit manually registered tools to prevent test hangs 2026-04-03 21:32:00 +02:00
stevef
1bb3ca49ab made paths relative to workspace for sub-agents 2026-04-03 21:32:00 +02:00
stevef
46df3807d8 chore: remove runtime state from tracking 2026-04-03 21:32:00 +02:00
stevef
d4e329f703 made /chat asynchronous 2026-04-03 21:32:00 +02:00
stevef
3c6639517d azure skills whitelisting: fix skills loader, security config, and tests 2026-04-03 21:32:00 +02:00
stevef
968e77225a chore: ignore workspace/ runtime state 2026-04-03 21:32:00 +02:00
stevef
8d95449084 added two new providers: NVIDIA and Azure plus Security enhancments to lock down skills if desired and added a configurable chat API 2026-04-03 21:32:00 +02:00
stevef
510d3169bc Refine .gitignore: exclude golangci-lint binary 2026-04-03 21:29:06 +02:00
stevef
10c9eaa935 Final cleanup of k3s config and Docker leak protection
- Restored config/ exclusion in .dockerignore.
- Deduplicated tool whitelist in k3s/configmap.yaml.
- Standardized provider default in agents.defaults for better protocol resolution.
2026-04-03 21:28:53 +02:00
stevef
d8f440b7c5 Stabilize PicoClaw Security Integration and Agent Shield Features
Resolved rebase conflicts, fixed build errors across pkg/tools and pkg/providers, and fully integrated the Agent Shield security suite (Canary, PII, IPIA, Policy, Behavior).

Key stabilization:
- Fixed filesystem tool constructor signatures and tests.
- Re-implemented timing-safe authentication in health/server.go.
- Synchronized gateway and channel manager initialization.
- Cleaned up architecture leakage and deprecated endpoints (/cgat).
- Removed local/sensitive paths from logs and .dockerignore.
2026-04-03 21:23:57 +02:00
stevef
066a6bc727 chore: stabilize build pipeline, fix lints and test panics 2026-04-03 20:55:13 +02:00
Mauro
d8c5183d9a
feat(mcp): store oversized text results as artifacts (#2308)
* feat(mcp): store oversized text results as artifacts

* feat(mcp): fix doc

* fix(mcp): preserve raw MCP payload in text artifacts

* fix(mcp): avoid leaking large text when artifact persistence fails

* chore(mcp): clarify inline text limit and cover artifact edge cases
2026-04-04 01:30:36 +08:00
stevef
be393a6439 chore: updated k3s gemini model to gemini-3-flash-preview 2026-04-03 17:40:10 +02:00
stevef
93184bd0f9 chore: restore stable Gemini configuration for k3s deployment 2026-04-03 17:28:55 +02:00
stevef
6c0f36a44d fix(test): update NewContextBuilder call to match new signature 2026-04-03 15:14:13 +02:00
stevef
90edf80b3a chore: remove n8n-test MCP server from k3s configuration 2026-04-03 15:01:12 +02:00
stevef
47cfd059ca chore: fixes for userAgent support and host detection after rebase stabilization 2026-04-03 15:01:12 +02:00
stevef
7347a27754 chore: final stabilization fixes for security_shield after rebase 2026-04-03 15:01:12 +02:00
stevef
518be7639a Fix: Reverted workspace to align internal agent paths 2026-04-03 15:01:12 +02:00
stevef
5eabedc466 Hardening: Finalized K3s deployment with relative secret paths and agi namespace 2026-04-03 15:01:12 +02:00
stevef
1e385d02d0 Docs: Added K3s deployment README 2026-04-03 15:01:12 +02:00
stevef
dd55ada73a Security: Migrated API keys to K8s Secrets via file:// scheme 2026-04-03 15:01:12 +02:00
stevef
33768e90b0 Hardening: Relaxed Git push/force restrictions and sanitized configuration secrets 2026-04-03 15:01:12 +02:00
stevef
9edd527d19 added k3s deployment on RPi 2026-04-03 15:01:12 +02:00
stevef
6c277610df feat(isolation): further hardening for agent loop and tools 2026-04-03 15:01:12 +02:00
stevef
f2ffc6cc31 fixes 2026-04-03 15:01:12 +02:00
stevef
8dc92fdedc fix(agent): inject media store in isolation and fix config unmarshal panic 2026-04-03 15:01:12 +02:00
stevef
570be19935 chore: minor configuration updates 2026-04-03 15:01:12 +02:00
stevef
cb717011ba Synchronize hardening: added onboard purge, non-interactive mode, and diagnostic startup logs 2026-04-03 15:01:12 +02:00
stevef
9479c65ebb test: merge filesystem isolation validation into isolation_tools_test.go 2026-04-03 15:01:12 +02:00
stevef
386a93a13c fix(agent): ensure isolated agents inherit manually registered tools to prevent test hangs 2026-04-03 15:01:12 +02:00
stevef
eaf61a1e8a made paths relative to workspace for sub-agents 2026-04-03 15:01:12 +02:00
stevef
6219d867e1 chore: remove runtime state from tracking 2026-04-03 15:01:12 +02:00
stevef
54fc66fa27 made /chat asynchronous 2026-04-03 15:01:12 +02:00
stevef
c72f9fe47e azure skills whitelisting: fix skills loader, security config, and tests 2026-04-03 15:01:12 +02:00
stevef
abfbf85616 chore: ignore workspace/ runtime state 2026-04-03 15:01:12 +02:00
stevef
d3c64bcc1e added two new providers: NVIDIA and Azure plus Security enhancments to lock down skills if desired and added a configurable chat API 2026-04-03 15:01:12 +02:00
wenjie
bd56e10bb8
fix(web): improve logs panel scroll handling (#2305)
- forward refs through ScrollArea so logs can access the viewport
- keep logs pinned to the bottom only when the user is already near it
- apply import and className ordering cleanup across frontend components
2026-04-03 15:37:23 +08:00
wenjie
7f7b4c430b
feat(web): persist dashboard token in launcher config (#2304)
- add `launcher_token` to launcher config API/schema and save/load flow
- update dashboard token resolution order: env var -> launcher config -> random
- expose token source in startup logs and auth help metadata (including config path)
- add launcher token input to the config page and wire frontend form/API updates
- update login help/i18n copy and extend backend tests for new token-source behavior
2026-04-03 14:54:27 +08:00
wenjie
f2a19ab947
feat(web): support image messages in pico chat (#2299) 2026-04-03 14:15:20 +08:00
Cytown
f3ad5d9305
bug: fix typo in Makefile cause ln not work (#2301) 2026-04-03 12:43:39 +08:00
Cytown
5b116b093f
fix comment in Makefile (#2300) 2026-04-03 11:49:24 +08:00
Cytown
170ae09606
fix windows make build error and support custom build env (#2281) 2026-04-03 11:39:37 +08:00