picoclaw/cmd
admin-mf b7872e5423 feat(security): unify workspace_root boundary enforcement across CLI and gateway
Promote workspace_root from channel-specific (magicform) to agents.defaults
so both CLI --workspace/--config-dir and gateway metadata overrides are
validated against the same immutable boundary. Paths must be relative
subdirectories — absolute paths, .., and empty/dot are rejected. The
boundary is snapshotted before overlay merges and cannot be widened by
workspace config files.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-06 13:14:15 -06:00
..
picoclaw feat(security): unify workspace_root boundary enforcement across CLI and gateway 2026-03-06 13:14:15 -06:00
picoclaw-launcher feat(docs): update README and add CLI reference and MagicForm integration documentation 2026-03-06 11:44:10 -06:00
picoclaw-launcher-tui fix: handle ignored io.ReadAll errors across codebase 2026-03-05 20:56:38 +09:00