Jason Woltje 8d511ddb67 feat(gateway): tool path hardening + sandbox escape prevention (P8-016) ...

Introduces path-guard.ts with guardPath (symlink-aware) and guardPathUnsafe
(lexical-only) that throw SandboxEscapeError on any escape attempt. Replaces
weak containment checks in file-tools, git-tools, and shell-tools with strict
guards. Adds 12 unit tests covering traversal, absolute-path, and sibling-dir
escape vectors.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-03-15 20:58:15 -05:00

.husky

chore: remove deprecated husky v9 shim lines (#113)

2026-03-15 16:48:51 +00:00

.mosaic

feat(P0-001): scaffold monorepo structure (#60)

2026-03-13 01:11:46 +00:00

.woodpecker

fix(ci): remove from_secret to unblock PR pipelines (#156)

2026-03-15 21:48:51 +00:00

apps

feat(gateway): tool path hardening + sandbox escape prevention (P8-016)

2026-03-15 20:58:15 -05:00

docker

feat(P0-001): scaffold monorepo structure (#60)

2026-03-13 01:11:46 +00:00

docs

feat(gateway): tool path hardening + sandbox escape prevention (P8-016)

2026-03-15 20:58:15 -05:00

infra

fix(gateway): CORS, memory userId from session, pgvector auto-init (#110)

2026-03-15 16:40:28 +00:00

packages

feat(db): teams schema + preferences.mutable migration (#175)

2026-03-16 01:46:43 +00:00

plugins

feat(plugins): add Telegram channel plugin

2026-03-13 12:05:42 -05:00

scripts/agent

chore: planning gate — milestones, issues, and task breakdown

2026-03-12 19:51:51 -05:00

.env.example

docs(deploy): add deployment guide and expand .env.example (#153)

2026-03-15 19:46:38 +00:00

.gitignore

feat(P0-001): scaffold monorepo structure (#60)

2026-03-13 01:11:46 +00:00

.lintstagedrc

feat(P0-001): scaffold monorepo structure (#60)

2026-03-13 01:11:46 +00:00

.npmrc

feat(P0-001): scaffold monorepo structure (#60)

2026-03-13 01:11:46 +00:00

.prettierignore

feat(web): wire WebSocket chat with streaming and conversation switching (#120) (#136)

2026-03-15 18:09:14 +00:00

.prettierrc

feat(P0-001): scaffold monorepo structure (#60)

2026-03-13 01:11:46 +00:00

AGENTS.md

feat: Woodpecker CI pipeline + project docs (P0-007, P0-008) (#69)

2026-03-13 02:25:31 +00:00

CLAUDE.md

feat: Woodpecker CI pipeline + project docs (P0-007, P0-008) (#69)

2026-03-13 02:25:31 +00:00

docker-compose.yml

fix(gateway): CORS, memory userId from session, pgvector auto-init (#110)

2026-03-15 16:40:28 +00:00

eslint.config.mjs

feat(web): Playwright E2E test suite for critical paths (#152)

2026-03-15 19:46:13 +00:00

package.json

feat(P0-001): scaffold monorepo structure (#60)

2026-03-13 01:11:46 +00:00

pnpm-lock.yaml

feat(cli): command architecture — agents, missions, gateway-aware prdy (#158)

2026-03-15 23:10:23 +00:00

pnpm-workspace.yaml

feat(P0-001): scaffold monorepo structure (#60)

2026-03-13 01:11:46 +00:00

tsconfig.base.json

feat(P0-001): scaffold monorepo structure (#60)

2026-03-13 01:11:46 +00:00

turbo.json

fix(turbo): typecheck must depend on ^build so package types are available

2026-03-13 12:38:55 -05:00

vitest.workspace.ts

feat(P0-001): scaffold monorepo structure (#60)

2026-03-13 01:11:46 +00:00

Description

Self-hosted multi-user AI agent platform — web dashboard, TUI, remote control, shared memory, mission orchestration

18 MiB

Releases 13

Federation M2 — Step-CA + Grant Schema + Admin CLI Latest

2026-04-22 06:09:54 +00:00

Languages

TypeScript 77.6%

Shell 17.4%

PowerShell 2.5%

JavaScript 1.2%

Python 0.9%

Other 0.3%