picoclaw/pkg/config
admin-mf b7872e5423 feat(security): unify workspace_root boundary enforcement across CLI and gateway
Promote workspace_root from channel-specific (magicform) to agents.defaults
so both CLI --workspace/--config-dir and gateway metadata overrides are
validated against the same immutable boundary. Paths must be relative
subdirectories — absolute paths, .., and empty/dot are rejected. The
boundary is snapshotted before overlay merges and cannot be widened by
workspace config files.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-06 13:14:15 -06:00
..
config.go feat(security): unify workspace_root boundary enforcement across CLI and gateway 2026-03-06 13:14:15 -06:00
config_test.go feat: make summarization message threshold and token percent configurable (#854) (#1029) 2026-03-04 11:23:01 +08:00
defaults.go feat(feishu,tools): add outbound media delivery via send_file tool (#1156) 2026-03-06 19:42:52 +08:00
migration.go feat: add Avian as a named LLM provider 2026-03-03 19:36:46 +00:00
migration_test.go fix: update provider count in migration test to include Avian 2026-03-04 20:14:58 +00:00
model_config_test.go refactor(modernize): apply safe modernize fixes 2026-02-27 16:35:07 +08:00