viettranx d819e08071 fix(security): fix media upload permission denied + symlink protection ...

- Fix workspace dir ownership in Docker entrypoint: chown dirs not owned
  by goclaw on startup (handles dirs created by root in previous lifecycle)
- Add symlink check on .uploads/ via os.Lstat before file creation to
  prevent symlink-based attacks replacing .uploads with link to sensitive dir

2026-04-01 18:11:42 +07:00

..

agent

fix(security): fix media upload permission denied + symlink protection

2026-04-01 18:11:42 +07:00

bootstrap

fix(prompt): reduce mechanical chat behavior + optimize system prompt

2026-04-01 16:27:41 +07:00

bus

fix(config): MCP env: resolution, channel field filter, orphan provider event, workspace fallback (#348, #297, #295, #431)

2026-03-30 14:12:18 +07:00

cache

feat: multi-tenant isolation — complete implementation (#359)

2026-03-23 08:08:23 +07:00

channels

refactor(permissions): remove auto-add file writer, add config type constants

2026-04-01 13:59:56 +07:00

config

feat(subagent): token tracking, edition limits, waitAll, auto-retry, producer-consumer announce (#600)

2026-03-31 11:45:16 +07:00

cron

refactor(cron): normalize payload columns into dedicated DB fields (#33)

2026-03-30 15:19:43 +07:00

crypto

fix(bus,cron): panic recovery + deadlock fix + unit tests for 9 packages

2026-03-28 18:15:46 +07:00

edition

feat(subagent): token tracking, edition limits, waitAll, auto-retry, producer-consumer announce (#600)

2026-03-31 11:45:16 +07:00

gateway

fix(ui): fix chat streaming race condition + require agent selection + improve chat UX

2026-04-01 16:12:44 +07:00

heartbeat

fix(heartbeat): log provider override and include in trace tags

2026-03-28 22:55:11 +07:00

http

fix(agent): update setAgentStatus to include tenantID parameter (#621)

2026-04-01 18:07:43 +07:00

i18n

fix(security): elevate management HTTP routes from Operator to Admin role

2026-03-29 09:02:48 +07:00

knowledgegraph

fix(kg): raise extraction temperature from 0.0 to 0.2

2026-03-31 19:06:38 +07:00

mcp

fix(mcp): require 3 consecutive ping failures before marking server disconnected

2026-03-31 23:15:59 +07:00

media

feat: multi-tenant isolation — complete implementation (#359)

2026-03-23 08:08:23 +07:00

memory

feat(memory): add chunk overlap support and clean up per-agent config

2026-03-25 18:24:36 +07:00

oauth

fix(providers): post-merge fixes for Codex OAuth pools (#450)

2026-03-27 10:19:16 +07:00

permissions

fix(security): elevate management HTTP routes from Operator to Admin role

2026-03-29 09:02:48 +07:00

providerresolve

feat(providers): support Codex OAuth pools with inherited routing defaults

2026-03-27 09:35:57 +07:00

providers

fix(agent): use DB provider_type for SOUL echo and strict mode detection

2026-03-31 23:38:48 +07:00

safego

feat(providers): support Codex OAuth pools with inherited routing defaults

2026-03-27 09:35:57 +07:00

sandbox

fix(security): SSRF validation, path hardening, and dependency CVE fixes (#525)

2026-03-29 12:54:12 +07:00

scheduler

fix(agent): add panic recovery to prevent zombie state after agent loop crash (#39)

2026-03-30 14:36:25 +07:00

sessions

feat: merge pipeline, per-user credentials, unified picker, group contacts

2026-03-29 22:33:17 +07:00

skills

fix: dep_scanner false positive — JS import inside Python f-string (#564)

2026-03-30 08:37:30 +07:00

store

refactor(permissions): remove auto-add file writer, add config type constants

2026-04-01 13:59:56 +07:00

tasks

fix(agent): group session unresponsive during team task execution (#266)

2026-03-30 15:20:01 +07:00

tools

refactor(permissions): remove auto-add file writer, add config type constants

2026-04-01 13:59:56 +07:00

tracing

feat: merge pipeline, per-user credentials, unified picker, group contacts

2026-03-29 22:33:17 +07:00

tts

chore: upgrade Go 1.25 → 1.26 and apply go fix modernizations

2026-03-10 00:09:15 +07:00

updater

feat(build): embed web UI in backend binary + simplify Docker variants (#620)

2026-04-01 15:25:59 +07:00

upgrade

feat(store): persist subagent tasks to PostgreSQL (#600)

2026-03-31 11:45:03 +07:00

version

feat(build): embed web UI in backend binary + simplify Docker variants (#620)

2026-04-01 15:25:59 +07:00

webui

feat(build): embed web UI in backend binary + simplify Docker variants (#620)

2026-04-01 15:25:59 +07:00