Kai (Tam Nhu) TranandGitHub eb4bbfddf3 security(browser-mcp): restrict model-callable local file uploads/downloads to safe roots and deny sensitive paths (#1220) ...

* fix(browser): restrict file transfer paths

* fix(browser): normalize safe transfer paths

* fix(browser): reject sensitive transfer roots

2026-05-12 08:57:33 -04:00

..

api

fix: route OpenRouter profiles through v1 API

2026-05-05 11:44:58 -04:00

auth

feat(auth): add shared resource controls

2026-05-08 11:15:28 -04:00

bin

feat(codex): align ccsxp with native cliproxy shortcut

2026-04-26 11:09:54 -04:00

channels

fix(channels): reject oversized official channel tokens

2026-03-25 22:38:15 -04:00

commands

Merge pull request #1200 from kaitranntt/kai/feat/1199-shared-resource-controls

2026-05-10 22:01:57 -04:00

config

feat(auth): add shared resource controls

2026-05-08 11:15:28 -04:00

copilot

test(image-analysis): cover runtime auth and fallback

2026-04-02 15:44:13 -04:00

cursor

fix: harden cursor daemon model fallback

2026-05-04 11:51:22 -04:00

delegation

fix: preserve native Claude passthrough args

2026-05-07 06:14:12 -04:00

docker

test(docker): update executor tests for export syntax and build timeout

2026-03-28 16:22:17 -04:00

glmt

refactor(proxy): internalize sse translation and cleanup handlers

2026-04-15 01:44:01 -04:00

health

fix(cliproxy): fix base-config-loader __dirname path and stale mock.module paths

2026-04-29 17:40:33 -04:00

hooks

security(browser-mcp): restrict model-callable local file uploads/downloads to safe roots and deny sensitive paths (#1220)

2026-05-12 08:57:33 -04:00

management/checks

feat(image-analysis): make MCP-first provisioning self-healing

2026-04-08 13:36:05 -04:00

proxy

fix: route OpenRouter profiles through v1 API

2026-05-05 11:44:58 -04:00

scripts

Revert "ci(ai-review): move PR-Agent jobs to ubuntu-latest"

2026-05-10 18:30:05 -04:00

services/logging

feat(logging): add structured contract, ALS context, stage helpers, and redaction coverage

2026-04-30 12:59:42 -04:00

targets

fix(dispatcher): re-inject anthropic auth env for anthropic-compatible api profiles (#1181)

2026-05-04 20:22:13 -04:00

ui

fix: route Cursor auth through browser polling

2026-05-07 11:25:17 -04:00

utils

fix(dispatcher): re-inject anthropic auth env for anthropic-compatible api profiles (#1181)

2026-05-04 20:22:13 -04:00

web-server

fix(cliproxy): explain headless Codex OAuth recovery

2026-05-11 14:25:34 -04:00

account-context.test.ts

feat(accounts): add advanced deeper continuity mode and claude pool discoverability

2026-02-26 19:01:13 +07:00

auth-command-args.test.ts

fix(auth): require resource mode value

2026-05-08 23:36:12 -04:00

auth-help-route-guidance.test.ts

feat: clarify account history sync route (#1187)

2026-05-05 13:33:04 -04:00

auth-list-context.test.ts

feat(accounts): add advanced deeper continuity mode and claude pool discoverability

2026-02-26 19:01:13 +07:00

auth-resources-command.test.ts

fix(auth): require resource mode value

2026-05-08 23:36:12 -04:00

ccs-flag-parsing.test.js

fix(tests): migrate test suite from mocha to bun test runner

2025-12-03 21:43:29 -05:00

config-dir-override.test.js

fix(config): lazy-evaluate paths, fix TOCTOU, segment-boundary cloud detection

2026-02-11 11:24:34 +07:00

data-aggregator.test.ts

fix(usage): normalize provider aliases in aggregation

2026-04-28 15:43:13 -04:00

flag-parsing-simple.test.js

fix(tests): migrate test suite from mocha to bun test runner

2025-12-03 21:43:29 -05:00

instance-manager-mcp-sync.test.ts

feat(browser): 接入 CCS browser MCP 与最小交互闭环

2026-04-13 11:19:16 +08:00

jsonl-parser.test.ts

fix(analytics): correct token accounting and usage aggregation

2026-04-26 15:21:52 -04:00

mcp-manager.test.ts

style: format source and test files

2026-02-17 17:03:11 +07:00

model-pricing.test.ts

fix(usage): preserve pricing overrides and legacy merges

2026-04-28 16:51:06 -04:00

models-dev-registry-cache.test.ts

fix(usage): harden models.dev analytics integration

2026-04-28 15:25:58 -04:00

profile-context-sync-lock.test.ts

test(management): cover plugin layout sync lock

2026-03-18 08:22:03 -04:00

recovery-manager.test.ts

fix(recovery): harden shared commands startup recovery

2026-04-08 11:00:18 -04:00

shared-context-policy.test.ts

feat(accounts): add advanced deeper continuity mode and claude pool discoverability

2026-02-26 19:01:13 +07:00

shared-manager.test.ts

refactor: extract plugin path normalizer

2026-04-29 14:42:39 -04:00

shared-memory-sync.test.ts

fix(memory): use async fs APIs to satisfy maintainability gate

2026-02-23 23:29:22 +07:00

ui-api-client.test.ts

fix(ui): harden cliproxy panel and proxy edge handling

2026-02-18 04:18:57 +07:00

unified-config.test.ts

fix(cliproxy): harden session affinity behavior

2026-04-28 13:27:05 -04:00