wenjie cef0f28881 fix(tools): normalize whitelist path checks for symlinked allowed roots (#1660) ...

- keep regex whitelist matching for existing configs
- add normalized directory-prefix checks for literal allow-path patterns
- support allowed roots that resolve through symlinks
- add regression coverage for symlink-backed whitelist paths

2026-03-17 14:10:11 +08:00

..

agent

Merge pull request #1536 from alexhoshina/fix/allow-picoclaw-media-tempdir

2026-03-16 21:30:42 +01:00

auth

feat(auth): add Anthropic OAuth setup-token login (#926)

2026-03-06 19:58:23 +08:00

bus

Removed the old heavy logic

2026-03-08 18:22:15 +01:00

channels

Merge pull request #1536 from alexhoshina/fix/allow-picoclaw-media-tempdir

2026-03-16 21:30:42 +01:00

commands

feat: add /clear command to clear chat history (#1266)

2026-03-09 16:39:33 +08:00

config

feat(web): add configurable cron command execution settings (#1647)

2026-03-17 09:44:32 +08:00

constants

refactor: replace bool map with set-style map for internal channels (#472)

2026-02-19 11:48:17 +01:00

credential

feat(credential): part1 add AES-GCM encryption, SecureStore, and onboard ke… (#1521)

2026-03-16 14:06:32 +08:00

cron

feat(cron): add execution lifecycle logging (#1185)

2026-03-06 20:46:52 +08:00

devices

refactor: cleanup dead code and turn on dead code detection in CI (#515)

2026-02-24 21:52:25 +08:00

fileutil

refactor(pkg): move atomic file write to dedicated fileutil package

2026-02-24 23:57:13 +08:00

health

refactor gateway/helpers and add server.pid to health (#1646)

2026-03-17 09:35:52 +08:00

heartbeat

enable dupl check

2026-03-01 18:17:32 +11:00

identity

fix(identity): prevent allowlist ID entries from matching usernames (#1406)

2026-03-13 15:41:18 +08:00

logger

fix(logger): show first/last 4 chars of bot token for identification

2026-03-16 12:48:28 +02:00

mcp

Feat/add tool enable or disable configuration (#1071)

2026-03-05 14:53:26 +08:00

media

refactor(media): centralize temp media dir path

2026-03-14 12:01:47 +08:00

memory

fix: skip meta json files during session migration (#1340)

2026-03-11 14:29:42 +08:00

migrate

docs: remove stale TOOLS.md references (#1388)

2026-03-12 09:47:01 +08:00

providers

fix(provider/azure): lint err

2026-03-15 12:45:11 +08:00

routing

fix(routing): address review feedback on CJK estimation and observability

2026-03-06 13:10:20 +08:00

session

fix(security): harden unauthenticated tool-exec paths (#1360)

2026-03-11 19:22:20 +08:00

skills

enhance skill installer (#1252)

2026-03-13 14:04:02 +08:00

state

fix(security): harden unauthenticated tool-exec paths (#1360)

2026-03-11 19:22:20 +08:00

tools

fix(tools): normalize whitelist path checks for symlinked allowed roots (#1660)

2026-03-17 14:10:11 +08:00

utils

refactor(media): centralize temp media dir path

2026-03-14 12:01:47 +08:00

voice

Fix lint

2026-03-04 10:21:59 +00:00