6 Commits

Author	SHA1	Message	Date
Goon	7a4a20b2e8	fix(discord): per-user memory scope in guild channels (#166) ... * docs: add brainstorm report for discord guild-user memory * docs: update brainstorm report with corrected root cause analysis * feat(discord): per-user memory scope in guild channels Fixes shared USER.md between guild members by scoping userID to "guild:{guildID}:user:{senderID}" for Discord group messages. Updates all group-context prefix checks (write permissions, writer cache, cron peer kind, history filter) to include the new guild: prefix. Closes #165	2026-03-12 16:45:30 +07:00
Viet Tran	6895e369f6	refactor: remove standalone mode, consolidate to managed-only (PostgreSQL) (#70) ... - Remove standalone mode code: file-based stores, standalone gateway, heartbeat service, SQLite memory, standalone docker-compose - Rename docker-compose.managed.yml → docker-compose.postgres.yml - Clean up ~130 Go comments referencing "managed mode" qualifier - Simplify docker-compose.yml env vars (providers/channels via web UI) - Update .env.example to essential vars only (token + encryption key) - Add setup wizard UI (provider → agent → channel bootstrap flow) - Add logs.tail WebSocket handler for live log streaming - Add cursor-pointer to interactive UI components - Clean up config page (remove standalone-only sections) - Update README and docs for managed-only architecture	2026-03-06 18:51:11 +07:00
viettranx	74d85c8dd5	feat(security): enforce group file writer restrictions + harden exec against env/config leaks ... Group writer enforcement (managed mode): - GroupWriterCache with 5min TTL wrapping AgentStore.ListGroupFileWriters - Tool-level blocking: write_file, edit, read_file (SOUL.md/AGENTS.md), cron mutations - System prompt injection: non-writers get refusal instructions + filtered context files - Cache invalidation via bus events on add/remove writer - Wired through resolver, loop, gateway_managed, gateway_callbacks Exec security hardening: - Block /proc/PID/environ and /proc/self/environ reads (env var exfiltration) - Block strings on /proc files (binary env dump) - DenyPaths() on ExecTool: block data dir, .goclaw/, config file from exec commands - Scrub VIRTUAL_* env vars from tool output Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-03-02 19:22:21 +07:00
viettranx	6ed62b8506	feat: channel-isolated workspace, resolvePath fix, create_image workspace, summoner Expertise section, bus Topic constants ... - Fix resolvePath for nested non-existent dirs (use resolveThroughExistingAncestors) - Channel-isolated workspace: user_agent_profiles.workspace stores channel prefix, used as source of truth with backward compat for existing users - Loop caches workspace per-user with CacheKindUserWorkspace invalidation via pubsub - ContractHome/ExpandHome for portable ~-based paths in DB - create_image saves to workspace/generated/YYYY-MM-DD/ instead of OS temp dir - SOUL.md template: add ## Expertise section for domain knowledge - Summoner buildEditPrompt: section guide, complete file output, frontmatter update - Bus: Topic* constants for Subscribe/Broadcast keys, CacheKind* for payload kinds - Teams, delegates, sessions, agent links: various enhancements Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-03-02 10:52:32 +07:00
viettranx	dfd91556f8	feat: Introduce agent teams, agent linking, and advanced agent orchestration features.	2026-02-25 23:24:52 +07:00
viettranx	67b19e4746	feat: Implement standalone gateway mode with file-based agent storage and add path denial capabilities to filesystem tools.	2026-02-25 10:07:25 +07:00