Kai (Tam Nhu) Tran 8730a90acb fix(exec): allow uploaded files in active workspaces (#748) ...

Shell-aware command parsing, dynamic workspace exemptions, and symlink canonicalization for exec path denial. Fixes #739.

2026-04-08 13:35:19 +07:00

..

announce_queue.go

feat(subagent): token tracking, edition limits, waitAll, auto-retry, producer-consumer announce (#600)

2026-03-31 11:45:16 +07:00

boundary_test.go

feat: multi-tenant isolation — complete implementation (#359)

2026-03-23 08:08:23 +07:00

context_file_interceptor_test.go

fix: auto-install deps on skill upload before archiving (#559)

2026-03-30 21:58:29 +07:00

context_file_interceptor.go

refactor(permissions): remove auto-add file writer, add config type constants

2026-04-01 13:59:56 +07:00

context_keys_test.go

feat(team): share leader memory with team members (read-only)

2026-03-27 22:45:40 +07:00

context_keys.go

fix(tools): delivered media tracker prevents duplicate file delivery (#579)

2026-03-30 21:13:27 +07:00

create_audio_elevenlabs.go

chore: upgrade Go 1.25 → 1.26 and apply go fix modernizations

2026-03-10 00:09:15 +07:00

create_audio_minimax.go

chore: upgrade Go 1.25 → 1.26 and apply go fix modernizations

2026-03-10 00:09:15 +07:00

create_audio_suno.go

feat(tools): add create_audio tool for music and sound effects

2026-03-08 20:10:00 +07:00

create_audio.go

feat: SQLite desktop edition — full desktop app with team tasks (#505)

2026-03-27 09:28:42 +07:00

create_image_byteplus.go

feat(providers): add BytePlus ModelArk provider with Seedream/Seedance media gen

2026-04-04 23:07:42 +07:00

create_image_dashscope.go

fix(media): update native provider API defaults and UI schema

2026-04-02 09:53:01 +07:00

create_image_minimax_test.go

fix bug can not create image with minimax provider (#630)

2026-04-02 09:35:21 +07:00

create_image_minimax.go

fix bug can not create image with minimax provider (#630)

2026-04-02 09:35:21 +07:00

create_image.go

feat(providers): add BytePlus ModelArk provider with Seedream/Seedance media gen

2026-04-04 23:07:42 +07:00

create_video_byteplus.go

feat(providers): add BytePlus ModelArk provider with Seedream/Seedance media gen

2026-04-04 23:07:42 +07:00

create_video_chat.go

feat(media): add Veo 3.1 Lite video generation with image-to-video support (#638)

2026-04-02 10:33:35 +07:00

create_video_gemini.go

feat(media): add Veo 3.1 Lite video generation with image-to-video support (#638)

2026-04-02 10:33:35 +07:00

create_video_minimax.go

feat(media): add Veo 3.1 Lite video generation with image-to-video support (#638)

2026-04-02 10:33:35 +07:00

create_video.go

feat(providers): add BytePlus ModelArk provider with Seedream/Seedance media gen

2026-04-04 23:07:42 +07:00

credential_context.go

feat(security): credentialed exec + HTTP RBAC + API key cache (#197)

2026-03-15 20:13:18 +07:00

credential_presets.go

feat(security): credentialed exec + HTTP RBAC + API key cache (#197)

2026-03-15 20:13:18 +07:00

credentialed_exec_test.go

fix(tools): quote-aware shell operator detection in credentialed exec (#700) (#702)

2026-04-05 20:36:34 +07:00

credentialed_exec.go

fix(tools): quote-aware shell operator detection in credentialed exec (#700) (#702)

2026-04-05 20:36:34 +07:00

cron.go

fix(permissions): use cron-specific permission check for cron tool (#725)

2026-04-07 12:41:18 +07:00

datetime.go

fix(providers): correct Anthropic prompt caching + add datetime tool

2026-03-16 08:14:03 +07:00

edit.go

fix(sandbox): support write_file append in FsBridge (#650)

2026-04-03 16:03:57 +07:00

exec_approval.go

Add per-agent tool policy support with NO_REPLY placeholder cleanup across channels

2026-02-22 22:49:22 +07:00

exec_memory_hints.go

fix(tools): hint model when shell commands target DB-backed memory files

2026-04-02 19:28:04 +07:00

exec_output_cap.go

feat: cap tool output at source + improve context pruning pipeline

2026-03-31 08:35:06 +07:00

executor.go

refactor: decompose consumer, agent loop, team tools, and MCP manager

2026-03-28 17:25:59 +07:00

filesystem_list.go

fix(tools): hint model when shell commands target DB-backed memory files

2026-04-02 19:28:04 +07:00

filesystem_unix.go

fix(tools): resolve Windows build errors and harden filesystem security (#318)

2026-03-21 07:29:48 +07:00

filesystem_windows.go

fix(tools): resolve Windows build errors and harden filesystem security (#318)

2026-03-21 07:29:48 +07:00

filesystem_write.go

fix(sandbox): support write_file append in FsBridge (#650)

2026-04-03 16:03:57 +07:00

filesystem.go

fix(tools): hint model when shell commands target DB-backed memory files

2026-04-02 19:28:04 +07:00

gemini_file_api.go

fix: media tag enrichment, Gemini file polling, credential merge (#158)

2026-03-12 09:35:04 +07:00

group_members.go

feat(feishu): add list_group_members tool + native @mention support (#280)

2026-03-19 17:21:38 +07:00

heartbeat.go

refactor(permissions): remove auto-add file writer, add config type constants

2026-04-01 13:59:56 +07:00

knowledge_graph_test.go

feat: merge pipeline, per-user credentials, unified picker, group contacts

2026-03-29 22:33:17 +07:00

knowledge_graph.go

fix(ui,kg): fix credential user picker, KG filters, graph limits, and traversal depth

2026-04-03 16:45:00 +07:00

media_filename.go

feat(tools): semantic media filenames with LLM-provided hints

2026-03-25 13:40:44 +07:00

media_provider_chain.go

feat(providers): add BytePlus ModelArk provider with Seedream/Seedance media gen

2026-04-04 23:07:42 +07:00

memory_interceptor_test.go

feat: merge pipeline, per-user credentials, unified picker, group contacts

2026-03-29 22:33:17 +07:00

memory_interceptor.go

feat(team): share leader memory with team members (read-only)

2026-03-27 22:45:40 +07:00

memory.go

fix(agent): improve memory recall accuracy and flush safety

2026-04-01 09:16:16 +07:00

message_test.go

fix(providers): make provider_type immutable + add argString tests

2026-04-01 11:59:21 +07:00

message.go

fix(providers): skip URL validation for ACP provider api_base (#610)

2026-04-01 11:55:48 +07:00

openai_compat_call.go

chore: upgrade Go 1.25 → 1.26 and apply go fix modernizations

2026-03-10 00:09:15 +07:00

policy_mcp_test.go

feat(mcp+skills): per-agent registry isolation, skill access filtering, managed skill lifecycle (#57)

2026-03-04 23:14:31 +07:00

policy_prefix_test.go

fix(agent): review fixes for tool call prefix stripping (#259)

2026-03-20 09:14:28 +07:00

policy.go

fix: deterministic prompt ordering for LLM cache hit (#719)

2026-04-06 12:54:44 +07:00

publish_skill.go

fix(teams): gracefully handle task status races in progress/complete

2026-03-26 18:00:09 +07:00

rate_limiter_test.go

chore: upgrade Go 1.25 → 1.26 and apply go fix modernizations

2026-03-10 00:09:15 +07:00

rate_limiter.go

Initial commit: GoClaw AI agent gateway

2026-02-22 14:58:07 +07:00

read_audio_resolve.go

feat: multi-tenant isolation — complete implementation (#359)

2026-03-23 08:08:23 +07:00

read_audio.go

chore: upgrade Go 1.25 → 1.26 and apply go fix modernizations

2026-03-10 00:09:15 +07:00

read_document_gemini.go

chore: upgrade Go 1.25 → 1.26 and apply go fix modernizations

2026-03-10 00:09:15 +07:00

read_document_resolve.go

feat: multi-tenant isolation — complete implementation (#359)

2026-03-23 08:08:23 +07:00

read_document.go

feat(ui): multi-skill upload with client-side validation (#149)

2026-03-11 16:59:03 +07:00

read_image.go

fix(vision): restore context fallback for read_image in file-ref mode

2026-03-27 15:59:42 +07:00

read_video_resolve.go

feat: multi-tenant isolation — complete implementation (#359)

2026-03-23 08:08:23 +07:00

read_video.go

chore: upgrade Go 1.25 → 1.26 and apply go fix modernizations

2026-03-10 00:09:15 +07:00

registry_test.go

fix: add panic recovery to tool, cron, and summarization goroutines (#420)

2026-03-24 21:09:16 +07:00

registry.go

fix: deterministic prompt ordering for LLM cache hit (#719)

2026-04-06 12:54:44 +07:00

result.go

feat(media): persistent media storage, read_document tool, and pipeline refactor

2026-03-08 14:00:34 +07:00

sandbox_hints_test.go

fix(sandbox): path isolation, DooD volume mounting, hints, and nginx DNS (#129, #136)

2026-03-20 07:32:23 +07:00

sandbox_hints.go

fix(sandbox): path isolation, DooD volume mounting, hints, and nginx DNS (#129, #136)

2026-03-20 07:32:23 +07:00

sandbox_utils_test.go

fix(sandbox): path isolation, DooD volume mounting, hints, and nginx DNS (#129, #136)

2026-03-20 07:32:23 +07:00

sandbox_utils.go

fix(sandbox): path isolation, DooD volume mounting, hints, and nginx DNS (#129, #136)

2026-03-20 07:32:23 +07:00

scrub_server.go

feat(security): add web_fetch domain blocklist, enhance IP scrubbing, enforce delegation scope

2026-03-04 20:08:59 +07:00

scrub_test.go

feat: Refine tool policies with updated groups and aliases, and enhance credential scrubbing by dynamically detecting and redacting server IPs.

2026-03-02 20:34:25 +07:00

scrub.go

feat(security): credentialed exec + HTTP RBAC + API key cache (#197)

2026-03-15 20:13:18 +07:00

sessions_history.go

fix: use agent_key instead of UUID for session tool authorization (#573)

2026-03-30 22:28:00 +07:00

sessions_send.go

fix: use agent_key instead of UUID for session tool authorization (#573)

2026-03-30 22:28:00 +07:00

sessions_test.go

fix: use agent_key instead of UUID for session tool authorization (#573)

2026-03-30 22:28:00 +07:00

sessions.go

fix: use agent_key instead of UUID for session tool authorization (#573)

2026-03-30 22:28:00 +07:00

shell_deny_groups.go

fix(security): harden sandbox, auth, and shell deny patterns

2026-04-02 18:58:24 +07:00

shell_deny_test.go

fix(exec): allow uploaded files in active workspaces (#748)

2026-04-08 13:35:19 +07:00

shell.go

fix(exec): allow uploaded files in active workspaces (#748)

2026-04-08 13:35:19 +07:00

skill_manage.go

fix(teams): gracefully handle task status races in progress/complete

2026-03-26 18:00:09 +07:00

skill_search.go

refactor(security): remove cross-tenant bypass, enforce strict tenant isolation

2026-03-24 20:40:59 +07:00

subagent_config.go

feat(subagent): token tracking, edition limits, waitAll, auto-retry, producer-consumer announce (#600)

2026-03-31 11:45:16 +07:00

subagent_control.go

feat(subagent): token tracking, edition limits, waitAll, auto-retry, producer-consumer announce (#600)

2026-03-31 11:45:16 +07:00

subagent_exec.go

feat(subagent): token tracking, edition limits, waitAll, auto-retry, producer-consumer announce (#600)

2026-03-31 11:45:16 +07:00

subagent_persist.go

feat(subagent): token tracking, edition limits, waitAll, auto-retry, producer-consumer announce (#600)

2026-03-31 11:45:16 +07:00

subagent_roster.go

fix(agent): smart delegation prompt + compaction pending state + block team tools in subagents

2026-03-31 11:44:54 +07:00

subagent_spawn_tool_actions.go

feat(subagent): token tracking, edition limits, waitAll, auto-retry, producer-consumer announce (#600)

2026-03-31 11:45:16 +07:00

subagent_spawn_tool.go

feat(subagent): token tracking, edition limits, waitAll, auto-retry, producer-consumer announce (#600)

2026-03-31 11:45:16 +07:00

subagent_spawn.go

feat(subagent): token tracking, edition limits, waitAll, auto-retry, producer-consumer announce (#600)

2026-03-31 11:45:16 +07:00

subagent_tracing.go

feat: multi-tenant isolation — complete implementation (#359)

2026-03-23 08:08:23 +07:00

subagent.go

fix(agent): smart delegation prompt + compaction pending state + block team tools in subagents

2026-03-31 11:44:54 +07:00

team_access_policy.go

refactor: remove dead delegate code, rename lane/channel to team/teammate

2026-03-18 11:04:45 +07:00

team_action_policy.go

feat: SQLite desktop edition — full desktop app with team tasks (#505)

2026-03-27 09:28:42 +07:00

team_blocker_escalation_config.go

feat(teams): blocker escalation, audit events, review workflow + docs

2026-03-23 13:51:28 +07:00

team_event_helpers.go

fix(agent): group session unresponsive during team task execution (#266)

2026-03-30 15:20:01 +07:00

team_member_request_config.go

feat(teams): attachments refactor, semantic search, improved prompting (#310)

2026-03-20 17:51:40 +07:00

team_metadata_keys.go

feat(subagent): token tracking, edition limits, waitAll, auto-retry, producer-consumer announce (#600)

2026-03-31 11:45:16 +07:00

team_mock_backend_test.go

refactor(tools): extract TeamToolBackend interface for team task testability

2026-03-27 22:26:36 +07:00

team_notify_config.go

fix: default noisy team notifications to off

2026-03-29 19:41:35 +07:00

team_notify_queue.go

fix(agent): group session unresponsive during team task execution (#266)

2026-03-30 15:20:01 +07:00

team_task_action_flags.go

feat(teams): smart post-turn task decision, stale detection, and notification guardrails

2026-03-24 08:56:10 +07:00

team_tasks_blocker_test.go

refactor(tools): extract TeamToolBackend interface for team task testability

2026-03-27 22:26:36 +07:00

team_tasks_blocker.go

fix(agent): group session unresponsive during team task execution (#266)

2026-03-30 15:20:01 +07:00

team_tasks_create_test.go

refactor(tools): extract TeamToolBackend interface for team task testability

2026-03-27 22:26:36 +07:00

team_tasks_create.go

feat(workspace): leader dual workspace with auto-copy to team on delegate

2026-03-31 12:10:55 +07:00

team_tasks_followup_test.go

refactor(tools): extract TeamToolBackend interface for team task testability

2026-03-27 22:26:36 +07:00

team_tasks_followup.go

refactor: decompose consumer, agent loop, team tools, and MCP manager

2026-03-28 17:25:59 +07:00

team_tasks_lifecycle_test.go

refactor(tools): extract TeamToolBackend interface for team task testability

2026-03-27 22:26:36 +07:00

team_tasks_lifecycle.go

refactor: decompose consumer, agent loop, team tools, and MCP manager

2026-03-28 17:25:59 +07:00

team_tasks_mutations_test.go

refactor(tools): extract TeamToolBackend interface for team task testability

2026-03-27 22:26:36 +07:00

team_tasks_mutations.go

refactor: decompose consumer, agent loop, team tools, and MCP manager

2026-03-28 17:25:59 +07:00

team_tasks_read_test.go

refactor(tools): extract TeamToolBackend interface for team task testability

2026-03-27 22:26:36 +07:00

team_tasks_read.go

refactor(tools): extract TeamToolBackend interface for team task testability

2026-03-27 22:26:36 +07:00

team_tasks_tool.go

fix(schema): exempt multi-action tools from OpenAI strict mode

2026-04-01 22:00:05 +07:00

team_tool_backend.go

refactor(tools): extract TeamToolBackend interface for team task testability

2026-03-27 22:26:36 +07:00

team_tool_cache.go

refactor: decompose consumer, agent loop, team tools, and MCP manager

2026-03-28 17:25:59 +07:00

team_tool_dispatch.go

fix(agent): group session unresponsive during team task execution (#266)

2026-03-30 15:20:01 +07:00

team_tool_helpers.go

refactor: decompose consumer, agent loop, team tools, and MCP manager

2026-03-28 17:25:59 +07:00

team_tool_manager.go

refactor(tools): extract TeamToolBackend interface for team task testability

2026-03-27 22:26:36 +07:00

team_tool_validation.go

fix(agent): group session unresponsive during team task execution (#266)

2026-03-30 15:20:01 +07:00

team_workspace_auto_share_test.go

feat(workspace): leader dual workspace with auto-copy to team on delegate

2026-03-31 12:10:55 +07:00

team_workspace_auto_share.go

feat(workspace): leader dual workspace with auto-copy to team on delegate

2026-03-31 12:10:55 +07:00

telegram_forum.go

fix(agent): channel-aware tool filtering, group chat title in system prompt

2026-03-27 21:03:34 +07:00

tts.go

fix(media): save browser screenshots and TTS audio to workspace instead of /tmp

2026-03-25 16:03:40 +07:00

types.go

fix(message): strip embedded MEDIA: paths and add cross-tenant channel validation

2026-03-25 13:23:46 +07:00

use_skill.go

chore: upgrade Go 1.25 → 1.26 and apply go fix modernizations

2026-03-10 00:09:15 +07:00

web_fetch_convert_handlers.go

chore: upgrade Go 1.25 → 1.26 and apply go fix modernizations

2026-03-10 00:09:15 +07:00

web_fetch_convert_test.go

fix(web_fetch): replace regex HTML parsing with DOM-based extraction

2026-03-03 17:10:55 +07:00

web_fetch_convert_utils.go

refactor(security): fix false positives and deduplicate web security hardening

2026-03-07 19:35:19 +07:00

web_fetch_convert.go

chore: upgrade Go 1.25 → 1.26 and apply go fix modernizations

2026-03-10 00:09:15 +07:00

web_fetch_extractor_defuddle.go

feat(tools): add Defuddle extractor chain for web_fetch (#296)

2026-03-20 14:21:46 +07:00

web_fetch_extractor_inprocess.go

feat(tools): add Defuddle extractor chain for web_fetch (#296)

2026-03-20 14:21:46 +07:00

web_fetch_extractor_test.go

feat(tools): add Defuddle extractor chain for web_fetch (#296)

2026-03-20 14:21:46 +07:00

web_fetch_extractor.go

fix(tools): add extractor chain retry/timeout, fix openai_compat media routing

2026-03-20 22:26:48 +07:00

web_fetch_hidden.go

chore: upgrade Go 1.25 → 1.26 and apply go fix modernizations

2026-03-10 00:09:15 +07:00

web_fetch.go

fix(agent): prevent "..." fallback when iteration budget exhausted

2026-03-20 17:55:51 +07:00

web_search_brave.go

refactor: split large Go files (>350 lines) into smaller same-package files

2026-02-28 17:27:28 +07:00

web_search_ddg.go

chore: upgrade Go 1.25 → 1.26 and apply go fix modernizations

2026-03-10 00:09:15 +07:00

web_search.go

chore: upgrade Go 1.25 → 1.26 and apply go fix modernizations

2026-03-10 00:09:15 +07:00

web_shared.go

fix(security): harden web fetch/search against prompt injection and cache poisoning (#80)

2026-03-07 19:31:56 +07:00

workspace_dir.go

feat(storage): bump upload limit to 50MB and expand protected dirs

2026-03-24 23:17:51 +07:00

workspace_interceptor.go

feat: multi-tenant isolation — complete implementation (#359)

2026-03-23 08:08:23 +07:00

workspace_media.go

fix(teams): use OR logic for task search instead of AND

2026-03-18 13:02:07 +07:00

workspace_resolver_test.go

refactor(workspace): extract layered resolver pipeline for workspace path computation

2026-03-25 16:03:31 +07:00

workspace_resolver.go

refactor(workspace): extract layered resolver pipeline for workspace path computation

2026-03-25 16:03:31 +07:00