stevef
bfdc9734f5
Remove all MCP server configurations and update whitelists for security hardening
2026-04-14 10:16:14 +02:00
stevef
f7c4820a84
feat(k3s): support env:// credentials and improve stale config cleanup on security_shield_v2
2026-04-13 19:55:58 +02:00
stevef
6b040ef853
fix(agent): defer InvokeTypingStop until runTurn completion
2026-04-13 08:26:45 +02:00
stevef
0c826f4efe
fix(k3s): restore working gemini-flash mapping with API_KEY auth
2026-04-12 23:44:22 +02:00
stevef
725acba642
fix(k3s): update default model to working gemini-flash
2026-04-12 23:39:00 +02:00
stevef
b2041763f7
fix(k3s): enable placeholder/typing for pico channel to support turn sync
2026-04-12 23:37:00 +02:00
stevef
fe93c6387a
fix(k3s): use static prefixed token for picoclaw-agent to enable websocket connectivity
2026-04-12 23:14:52 +02:00
stevef
de586ba1b2
chore: sanitize k3s configuration
2026-04-04 12:47:22 +02:00
stevef
841bd0098a
chore: address linter issues from PR review
2026-04-04 06:28:09 +02:00
stevef
bf7756466e
chore: compatibility fixes for linter
2026-04-03 22:49:40 +02:00
stevef
f53e50c96a
Final resolution of all merge conflicts and config cleanup
2026-04-03 22:49:25 +02:00
stevef
268377b99e
chore: restore stable Gemini configuration for k3s deployment
2026-04-03 21:40:07 +02:00
stevef
d903381f66
chore: remove n8n-test MCP server from k3s configuration
2026-04-03 21:40:07 +02:00
stevef
d37d6e6871
chore: fixes for userAgent support and host detection after rebase stabilization
2026-04-03 21:40:07 +02:00
stevef
42dfb5bdae
chore: final stabilization fixes for security_shield after rebase
2026-04-03 21:40:07 +02:00
stevef
4b09745b96
Fix: Reverted workspace to align internal agent paths
2026-04-03 21:40:07 +02:00
stevef
2f58fc3b89
Hardening: Finalized K3s deployment with relative secret paths and agi namespace
2026-04-03 21:40:07 +02:00
stevef
d7532131fa
Docs: Added K3s deployment README
2026-04-03 21:40:07 +02:00
stevef
e0bd93a732
Security: Migrated API keys to K8s Secrets via file:// scheme
2026-04-03 21:40:07 +02:00
stevef
746c3ec02c
Hardening: Relaxed Git push/force restrictions and sanitized configuration secrets
2026-04-03 21:40:07 +02:00
stevef
56478a031b
added k3s deployment on RPi
2026-04-03 21:40:07 +02:00
stevef
db2349cf4d
feat(isolation): further hardening for agent loop and tools
2026-04-03 21:40:07 +02:00
stevef
afebbd3650
fixes
2026-04-03 21:40:07 +02:00
stevef
253412a526
fix(agent): inject media store in isolation and fix config unmarshal panic
2026-04-03 21:40:07 +02:00
stevef
3d621b6401
chore: minor configuration updates
2026-04-03 21:40:07 +02:00
stevef
5ca9b1c349
Remove deprecated /cgat and loop detection endpoints from server and docs
2026-04-03 21:35:55 +02:00
stevef
2a153bff02
Synchronize hardening: added onboard purge, non-interactive mode, and diagnostic startup logs
2026-04-03 21:32:00 +02:00
stevef
7dee43b0dc
test: merge filesystem isolation validation into isolation_tools_test.go
2026-04-03 21:32:00 +02:00
stevef
5913149664
fix(agent): ensure isolated agents inherit manually registered tools to prevent test hangs
2026-04-03 21:32:00 +02:00
stevef
1bb3ca49ab
made paths relative to workspace for sub-agents
2026-04-03 21:32:00 +02:00
stevef
46df3807d8
chore: remove runtime state from tracking
2026-04-03 21:32:00 +02:00
stevef
d4e329f703
made /chat asynchronous
2026-04-03 21:32:00 +02:00
stevef
3c6639517d
azure skills whitelisting: fix skills loader, security config, and tests
2026-04-03 21:32:00 +02:00
stevef
968e77225a
chore: ignore workspace/ runtime state
2026-04-03 21:32:00 +02:00
stevef
8d95449084
added two new providers: NVIDIA and Azure plus Security enhancments to lock down skills if desired and added a configurable chat API
2026-04-03 21:32:00 +02:00
stevef
510d3169bc
Refine .gitignore: exclude golangci-lint binary
2026-04-03 21:29:06 +02:00
stevef
10c9eaa935
Final cleanup of k3s config and Docker leak protection
...
- Restored config/ exclusion in .dockerignore.
- Deduplicated tool whitelist in k3s/configmap.yaml.
- Standardized provider default in agents.defaults for better protocol resolution.
2026-04-03 21:28:53 +02:00
stevef
d8f440b7c5
Stabilize PicoClaw Security Integration and Agent Shield Features
...
Resolved rebase conflicts, fixed build errors across pkg/tools and pkg/providers, and fully integrated the Agent Shield security suite (Canary, PII, IPIA, Policy, Behavior).
Key stabilization:
- Fixed filesystem tool constructor signatures and tests.
- Re-implemented timing-safe authentication in health/server.go.
- Synchronized gateway and channel manager initialization.
- Cleaned up architecture leakage and deprecated endpoints (/cgat).
- Removed local/sensitive paths from logs and .dockerignore.
2026-04-03 21:23:57 +02:00
stevef
066a6bc727
chore: stabilize build pipeline, fix lints and test panics
2026-04-03 20:55:13 +02:00
Mauro
d8c5183d9a
feat(mcp): store oversized text results as artifacts ( #2308 )
...
* feat(mcp): store oversized text results as artifacts
* feat(mcp): fix doc
* fix(mcp): preserve raw MCP payload in text artifacts
* fix(mcp): avoid leaking large text when artifact persistence fails
* chore(mcp): clarify inline text limit and cover artifact edge cases
2026-04-04 01:30:36 +08:00
stevef
be393a6439
chore: updated k3s gemini model to gemini-3-flash-preview
2026-04-03 17:40:10 +02:00
stevef
93184bd0f9
chore: restore stable Gemini configuration for k3s deployment
2026-04-03 17:28:55 +02:00
stevef
6c0f36a44d
fix(test): update NewContextBuilder call to match new signature
2026-04-03 15:14:13 +02:00
stevef
90edf80b3a
chore: remove n8n-test MCP server from k3s configuration
2026-04-03 15:01:12 +02:00
stevef
47cfd059ca
chore: fixes for userAgent support and host detection after rebase stabilization
2026-04-03 15:01:12 +02:00
stevef
7347a27754
chore: final stabilization fixes for security_shield after rebase
2026-04-03 15:01:12 +02:00
stevef
518be7639a
Fix: Reverted workspace to align internal agent paths
2026-04-03 15:01:12 +02:00
stevef
5eabedc466
Hardening: Finalized K3s deployment with relative secret paths and agi namespace
2026-04-03 15:01:12 +02:00
stevef
1e385d02d0
Docs: Added K3s deployment README
2026-04-03 15:01:12 +02:00
stevef
dd55ada73a
Security: Migrated API keys to K8s Secrets via file:// scheme
2026-04-03 15:01:12 +02:00
