Commit graph

  • c495041adb
    fix(feed-discovery): block reserved feed IP targets (#88) RissRIce 2026-07-01 02:12:10 -06:00
  • a9521f8482 fix(feed-discovery): block additional reserved SSRF IP ranges rushabdev 2026-06-30 16:54:34 +00:00
  • b1b23a50c7 fix(feed-discovery): block reserved feed IP targets jsdavid278-cyber 2026-06-28 01:54:18 -06:00
  • 61d42e4aaf feat(agentstack): add delegation authority checks Qyra-One 2026-06-27 23:59:06 -04:00
  • edf32139ae fix(deps): sync package-lock for agentmail deps (#86) to unblock npm ci Anthony Ettinger 2026-06-27 15:57:33 +00:00
  • f27210a192
    feat(commandboard-api): expose AgentMail (agentbbs mailbox) routes (#86) Anthony Ettinger 2026-06-27 08:54:00 -07:00
  • a0abf9e401 feat(commandboard-api): expose AgentMail (agentbbs mailbox) routes Anthony Ettinger 2026-06-27 15:39:58 +00:00
  • 152cc444ae fix(web): update Credential Sharing e2e assertion to new CLI example Anthony Ettinger 2026-06-27 15:33:32 +00:00
  • 1276a3c505 Merge origin/master into feat/credential-sharing Anthony Ettinger 2026-06-27 15:26:54 +00:00
  • cf73fe5af2 feat(credential-sharing): implement the Credential Sharing OpenSpec (M1-M3) Anthony Ettinger 2026-06-27 15:24:30 +00:00
  • 6e7f44612a chore(agentswarm): make package publishable to npm Anthony Ettinger 2026-06-25 17:57:32 +00:00
  • 0e5a13f5fb feat(agentswarm): M5 — x402 billing wrapper for the swarm route Anthony Ettinger 2026-06-25 17:48:12 +00:00
  • fbbb323477 feat(agentswarm): optional c0mpute.com inference backend Anthony Ettinger 2026-06-25 17:47:00 +00:00
  • dd7fe0b5c4 feat(agentswarm): M4 — per-agent budget ledger + withBudget guard Anthony Ettinger 2026-06-25 17:45:19 +00:00
  • 925894359f feat(agentswarm): M2 — peer-coordination swarm (router + handoffs) Anthony Ettinger 2026-06-25 17:44:12 +00:00
  • 018a583a00 feat(agentswarm): M1+M3 — embeddable swarm runtime wrapping deepagents Anthony Ettinger 2026-06-25 17:41:49 +00:00
  • e6929af1db Add Profullstack feedback widget Anthony Ettinger 2026-06-24 23:04:41 +00:00
  • ffe37a01ce Merge feat/ans-sdk: @logicsrc/ans spec + M1 (resolver + offline verifier) Anthony Ettinger 2026-06-24 15:30:20 +00:00
  • 29975b2df7 feat(ans): implement @logicsrc/ans M1 — resolver + offline verifier Anthony Ettinger 2026-06-24 14:48:24 +00:00
  • 0ae24719e3 docs(ans): spec the @logicsrc/ans TypeScript SDK Anthony Ettinger 2026-06-24 14:41:00 +00:00
  • 2f07f74126
    fix(agentstack): reject malformed CoinPay DIDs (#83) RissRIce 2026-06-22 06:24:46 -06:00
  • 895bb9989e
    fix(agentstack): require agent DIDs for registration (#85) RissRIce 2026-06-22 06:24:33 -06:00
  • 540ece03e0 fix(agentstack): require agent DIDs for registration rissrice2105-agent 2026-06-21 18:32:26 -06:00
  • 8110fea12b fix(agentstack): reject malformed CoinPay DIDs rissrice2105-agent 2026-06-21 18:28:55 -06:00
  • 41ab662afa
    Reject unknown task assignees (#80) phucnguyen1707 2026-06-16 17:19:08 +07:00
  • e38688f16e
    Enforce AgentStack status jumps (#81) phucnguyen1707 2026-06-16 17:18:54 +07:00
  • 6d471185fd Enforce AgentStack status jumps phucnguyen1707 2026-06-16 16:52:27 +07:00
  • 662b805ffb Reject unknown task assignees phucnguyen1707 2026-06-16 11:31:31 +07:00
  • 3897273be5 feat(agentstack): enforce delegation expiry Руслан Латыпов 2026-06-15 20:42:47 +04:00
  • 82e1389b8d
    docs(agentstack): add PRD (#78) Anthony Ettinger 2026-06-15 08:37:33 -07:00
  • 7d5bc2e69b docs(agentstack): add PRD Anthony Ettinger 2026-06-15 15:29:39 +00:00
  • 59013cf0af
    Sanitize rendered web content (#77) phucnguyen1707 2026-06-15 15:34:44 +07:00
  • cb192906bd
    Handle malformed CommandBoard paths (#76) phucnguyen1707 2026-06-15 15:25:09 +07:00
  • ae371b91d0
    Handle non-finite policy risk scores (#75) phucnguyen1707 2026-06-15 15:23:47 +07:00
  • 8b5695483f Sanitize rendered web content phucnguyen1707 2026-06-15 14:07:36 +07:00
  • 2dee302eb8 Handle malformed CommandBoard paths phucnguyen1707 2026-06-12 16:53:29 +07:00
  • 21f764f06d Handle non-finite policy risk scores phucnguyen1707 2026-06-15 12:39:18 +07:00
  • 8a86d14ffd
    Merge pull request #74 from profullstack/fix/agentmail-lockfile Anthony Ettinger 2026-06-14 10:00:41 -07:00
  • 61ed94b000 Add @logicsrc/plugin-agentmail to package-lock.json Anthony Ettinger 2026-06-14 17:00:21 +00:00
  • cb05a64438
    Merge pull request #73 from profullstack/feat/agentmail-plugin Anthony Ettinger 2026-06-14 09:56:49 -07:00
  • e304eac761 Add AgentMail plugin: paid-member mailbox client for humans + agents Anthony Ettinger 2026-06-14 15:37:17 +00:00
  • bf046ae280 Add AgentGit M1: agent-native git layer over a Forgejo backend Anthony Ettinger 2026-06-14 12:45:38 +00:00
  • 14fe9d608f
    Require CoinPay userinfo identity (#21) phucnguyen1707 2026-06-14 13:01:15 +07:00
  • 63ccad6d2a
    fix: handle invalid static path encoding (#36) RissRIce 2026-06-14 00:00:59 -06:00
  • 3ceddaa911
    Parse JSON extension case-insensitively (#29) Autowebassat-blip 2026-06-14 07:59:39 +02:00
  • d9cf41e5a3
    Handle malformed static paths (#31) Autowebassat-blip 2026-06-14 07:59:10 +02:00
  • 774d461db6
    Block IPv4-compatible IPv6 feed URLs (#32) Autowebassat-blip 2026-06-14 07:58:57 +02:00
  • 307095d5e9
    Fallback invalid CommandBoard web ports (#37) Autowebassat-blip 2026-06-14 07:58:10 +02:00
  • ad3926a006
    Handle empty arcade game lists (#38) Autowebassat-blip 2026-06-14 07:57:56 +02:00
  • 3afda8c147
    Fallback invalid CommandBoard API ports (#39) Autowebassat-blip 2026-06-14 07:57:43 +02:00
  • e89c10cc80
    Reject malformed CoinPay webhook signatures (#41) Autowebassat-blip 2026-06-14 07:56:12 +02:00
  • 055cc09d14
    Fallback invalid CoinPay checkout amounts (#42) Autowebassat-blip 2026-06-14 07:55:53 +02:00
  • ffefd364ce
    Ignore malformed feed probe candidates (#43) Autowebassat-blip 2026-06-14 07:55:39 +02:00
  • fbf4d76372
    fix(cli): validate positive numeric options (#49) lazyGPT07 2026-06-13 23:55:18 -06:00
  • aa3fdba277
    Detect podcast RSS item enclosures (#50) RissRIce 2026-06-13 23:55:06 -06:00
  • be530ab687
    fix(feeds): enforce freshness window (#52) lazyGPT07 2026-06-13 23:54:53 -06:00
  • 90fffb124e
    fix(agentstack): assignTask refuses tasks in a terminal status (#47) 6D0N9 2026-06-14 07:54:08 +02:00
  • a4cc229120
    fix(cli): block config prototype pollution (#54) lazyGPT07 2026-06-13 23:52:20 -06:00
  • f8040e9736
    fix(auth): remove hardcoded fallback session secret (fixes #59) (#60) FuturMix 2026-06-14 13:51:24 +08:00
  • 9d2c485071
    fix(commandboard): add body size limit and handle JSON parse errors (fixes #61) (#62) FuturMix 2026-06-14 13:51:09 +08:00
  • 5cfece3b84
    fix(auth): use base64url encoding in session signature verification (fixes #64) (#67) FuturMix 2026-06-14 13:44:53 +08:00
  • df040f4ff0
    fix(proxy): validate host against allowlist to prevent open redirect (fixes #65) (#68) FuturMix 2026-06-14 13:44:26 +08:00
  • 13e921c7af
    fix(supabase): enable RLS on communication account tables (fixes #69) (#70) FuturMix 2026-06-14 13:44:13 +08:00
  • 7d6a033b41
    Enforce trusted-agent policy conditions (#72) lazyGPT07 2026-06-13 23:44:00 -06:00
  • 07e93ce9ff perf(validators): cache compiled AJV validators instead of recompiling each call nullref 2026-06-14 07:36:17 +02:00
  • 07aafec698 fix(cli): description field in toTaskSchema was set to title instead of description nullref 2026-06-14 07:36:05 +02:00
  • 681600360d fix(policy): treat malformed grant expiresAt as expired, not active nullref 2026-06-14 07:35:44 +02:00
  • 77e5e5695c Enforce trusted-agent policy conditions lazyGPT07 2026-06-13 23:32:27 -06:00
  • af1d971477 Classify non-finite risk bands as critical lazyGPT07 2026-06-13 23:06:39 -06:00
  • 563cb2b38f fix(supabase): enable RLS on communication account tables (fixes #69) FuturMix 2026-06-14 12:22:24 +08:00
  • 876ccdae5f fix(proxy): validate host against allowlist to prevent open redirect (fixes #65) FuturMix 2026-06-14 12:20:57 +08:00
  • c557ec8dd5 fix(auth): use base64url encoding in session signature verification (fixes #64) FuturMix 2026-06-14 12:20:33 +08:00
  • 0e93bf92b5 fix(docs): sanitize markdown HTML output to prevent XSS (fixes #63) FuturMix 2026-06-14 12:20:10 +08:00
  • 9178b4a5a9 fix(commandboard): add body size limit and handle JSON parse errors (fixes #61) FuturMix 2026-06-14 12:18:47 +08:00
  • 46fa8fe93e fix(auth): remove hardcoded fallback session secret (fixes #59) FuturMix 2026-06-14 12:17:20 +08:00
  • b223acd052 fix(blog): sanitize post HTML to prevent stored XSS (fixes #57) FuturMix 2026-06-14 12:16:14 +08:00
  • a50fc8714e Fail closed on non-finite risk scores lazyGPT07 2026-06-13 21:33:44 -06:00
  • c5ddb79e19 fix(cli): block config prototype pollution lazyGPT07 2026-06-13 16:48:21 -06:00
  • ac496450db fix(feeds): enforce freshness window lazyGPT07 2026-06-13 16:45:44 -06:00
  • da729e3848 Detect podcast RSS item enclosures jsdavid278-cyber 2026-06-13 15:52:00 -06:00
  • 87f9693dff fix(cli): validate positive numeric options lazyGPT07 2026-06-13 15:51:04 -06:00
  • 4dfc528b62 fix(agentstack): assignTask refuses tasks in a terminal status 6D0N9 2026-06-13 13:05:44 +02:00
  • bad2ed508b Detect RSS podcast media enclosures lazyGPT07 2026-06-12 20:12:55 -06:00
  • fa33ea8faa Ignore malformed feed probe candidates Codex Microtask Operator 2026-06-13 01:51:39 +02:00
  • 7951aa9317 Fallback invalid CoinPay checkout amounts Codex Microtask Operator 2026-06-13 01:47:45 +02:00
  • 5f331ab549 Fix webhook signature type guard Codex Microtask Operator 2026-06-13 01:45:52 +02:00
  • d60ceab6c2 Reject malformed CoinPay webhook signatures Codex Microtask Operator 2026-06-13 01:38:25 +02:00
  • f2be6b850d Reject malformed CoinPay webhook timestamps Codex Microtask Operator 2026-06-13 01:36:03 +02:00
  • 237f37517e Fallback invalid CommandBoard API ports Codex Microtask Operator 2026-06-13 01:29:56 +02:00
  • 35bacaaa09 Handle empty arcade game lists Codex Microtask Operator 2026-06-13 01:25:34 +02:00
  • 19b633c524 Fallback invalid CommandBoard web ports Codex Microtask Operator 2026-06-13 01:21:16 +02:00
  • ee75f1b438 fix: handle invalid static path encoding RissRIce 2026-06-12 16:40:18 -06:00
  • 70e62a8330 Handle invalid CLI limit options Codex Microtask Operator 2026-06-12 18:57:29 +02:00
  • 928d8b06f0 Block IPv4-compatible IPv6 feed URLs Codex Microtask Operator 2026-06-12 18:41:01 +02:00
  • 4ee9201b9d Fallback malformed CoinPay amounts Codex Microtask Operator 2026-06-12 18:44:06 +02:00
  • b10efcc1bf Handle malformed static paths Codex Microtask Operator 2026-06-12 18:35:13 +02:00
  • cdba848866 Block prototype keys in config paths Codex Microtask Operator 2026-06-12 18:25:29 +02:00
  • 8898e223c9 Parse JSON extension case-insensitively Codex Microtask Operator 2026-06-12 18:22:29 +02:00
  • c6cc21409b Reject empty config path segments Codex Microtask Operator 2026-06-12 18:20:37 +02:00
  • d43019714d Clamp non-finite account risk scores Codex Microtask Operator 2026-06-12 18:18:19 +02:00