opencode/picoclaw
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
picoclaw/pkg
History
admin-mf b7872e5423 feat(security): unify workspace_root boundary enforcement across CLI and gateway 
Promote workspace_root from channel-specific (magicform) to agents.defaults
so both CLI --workspace/--config-dir and gateway metadata overrides are
validated against the same immutable boundary. Paths must be relative
subdirectories — absolute paths, .., and empty/dot are rejected. The
boundary is snapshotted before overlay merges and cannot be widened by
workspace config files.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-06 13:14:15 -06:00
..
agent feat(security): unify workspace_root boundary enforcement across CLI and gateway 2026-03-06 13:14:15 -06:00
auth CLI overrides, workspace config, MagicForm channel, and security hardening (#1) 2026-03-06 10:16:36 -06:00
bus chore: resolve conflicts with upstream/main 2026-02-28 12:21:54 +08:00
channels feat(security): unify workspace_root boundary enforcement across CLI and gateway 2026-03-06 13:14:15 -06:00
commands feat(commands): centralized command registry with sub-command routing (#959) 2026-03-06 17:31:40 +08:00
config feat(security): unify workspace_root boundary enforcement across CLI and gateway 2026-03-06 13:14:15 -06:00
constants refactor: replace bool map with set-style map for internal channels (#472) 2026-02-19 11:48:17 +01:00
cron feat(cron): add execution lifecycle logging (#1185) 2026-03-06 20:46:52 +08:00
devices refactor: cleanup dead code and turn on dead code detection in CI (#515) 2026-02-24 21:52:25 +08:00
fileutil refactor(pkg): move atomic file write to dedicated fileutil package 2026-02-24 23:57:13 +08:00
health chore: resolve conflicts with upstream/main 2026-02-28 12:21:54 +08:00
heartbeat enable dupl check 2026-03-01 18:17:32 +11:00
identity feat(identity): add unified user identity with canonical platform:id format 2026-02-23 06:56:48 +08:00
logger enable prealloc 2026-02-25 21:31:07 +11:00
mcp Feat/add tool enable or disable configuration (#1071) 2026-03-05 14:53:26 +08:00
media chore: resolve conflicts with upstream/main 2026-02-28 12:21:54 +08:00
memory fix(memory): fsync appended message for consistent durability 2026-03-04 19:21:34 +08:00
migrate enable dupl check 2026-03-01 18:17:32 +11:00
pathutil feat(security): unify workspace_root boundary enforcement across CLI and gateway 2026-03-06 13:14:15 -06:00
providers feat(auth): add Anthropic OAuth setup-token login (#926) 2026-03-06 19:58:23 +08:00
routing fix(routing): address review feedback on CJK estimation and observability 2026-03-06 13:10:20 +08:00
session feat(fmt): Run formatters 2026-02-18 21:48:23 +02:00
skills CLI overrides, workspace config, MagicForm channel, and security hardening (#1) 2026-03-06 10:16:36 -06:00
state fix: error check on state (#864) 2026-03-02 11:59:26 +11:00
tools CLI overrides, workspace config, MagicForm channel, and security hardening (#1) 2026-03-06 10:16:36 -06:00
utils Merge remote-tracking branch 'origin/main' into feat_discord_proxy 2026-03-03 18:38:57 +08:00
voice Fix lint 2026-03-04 10:21:59 +00:00