picoclaw/pkg/agent
admin-mf b7872e5423 feat(security): unify workspace_root boundary enforcement across CLI and gateway
Promote workspace_root from channel-specific (magicform) to agents.defaults
so both CLI --workspace/--config-dir and gateway metadata overrides are
validated against the same immutable boundary. Paths must be relative
subdirectories — absolute paths, .., and empty/dot are rejected. The
boundary is snapshotted before overlay merges and cannot be widened by
workspace config files.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-06 13:14:15 -06:00
..
bootstrap.go CLI overrides, workspace config, MagicForm channel, and security hardening (#1) 2026-03-06 10:16:36 -06:00
context.go CLI overrides, workspace config, MagicForm channel, and security hardening (#1) 2026-03-06 10:16:36 -06:00
context_cache_test.go fix(agent): invalidate system prompt cache for global/builtin skills (#845) 2026-03-03 18:25:00 +08:00
context_test.go fix deepseek-chat bug (#1066) 2026-03-06 16:04:31 +08:00
instance.go CLI overrides, workspace config, MagicForm channel, and security hardening (#1) 2026-03-06 10:16:36 -06:00
instance_test.go enable dupl check 2026-03-01 18:17:32 +11:00
loop.go feat(security): unify workspace_root boundary enforcement across CLI and gateway 2026-03-06 13:14:15 -06:00
loop_media.go fix: resolve linter issues (gci import grouping, gofumpt, govet shadow) 2026-03-03 17:04:54 +08:00
loop_test.go feat(commands): centralized command registry with sub-command routing (#959) 2026-03-06 17:31:40 +08:00
memory.go refactor(modernize): apply safe modernize fixes 2026-02-27 16:35:07 +08:00
mock_provider_test.go feat(fmt): Fix formatting 2026-02-19 22:05:15 +02:00
registry.go feat(feishu,tools): add outbound media delivery via send_file tool (#1156) 2026-03-06 19:42:52 +08:00
registry_test.go feat(fmt): Run formatters 2026-02-18 21:48:23 +02:00
thinking.go feat: add extended thinking support for Anthropic models (#1076) 2026-03-05 09:51:18 +08:00
thinking_test.go feat: add extended thinking support for Anthropic models (#1076) 2026-03-05 09:51:18 +08:00