Coco Sheng 5bcc400020 fix(security): securely handle root CWD using isSubpath in isTrustedSystemPath

2026-05-12 13:25:04 -04:00

..

__mocks__/fs

…

agent

refactor(core): agent session protocol changes (#26661)

2026-05-08 17:12:54 +00:00

agents

feat(core): add RemoteSubagentProtocol behind AgentProtocol (#25303)

2026-05-08 22:48:17 +00:00

availability

fix(core): distinguish fallback chains and fix maxAttempts for auto vs explicit model selection (#26163)

2026-04-29 20:23:37 +00:00

billing

fix(billing): fix overage strategy lifecycle and settings integration (#21236)

2026-03-07 03:14:44 +00:00

code_assist

fix(core): reject numeric project IDs in GOOGLE_CLOUD_PROJECT (#24695) (#26532)

2026-05-05 19:50:36 +00:00

commands

fix(cli): hide /memory add subcommand when memoryV2 is enabled (#26605)

2026-05-07 20:48:12 +00:00

config

fix(core): secure and minimal ripgrep fallback resolution

2026-05-12 11:12:22 -04:00

confirmation-bus

fix(core): remediate subagent memory leaks using AbortSignal in MessageBus (#25048)

2026-04-09 20:22:26 +00:00

context

fix(context): Change snapshotter model config. (#26745)

2026-05-11 15:06:55 +00:00

core

revert 6b9b778d82 (#26893)

2026-05-11 21:07:54 +00:00

fallback

fix(core): remove OAuth check from handleFallback and clean up stray file (#21962)

2026-03-11 04:56:06 +00:00

hooks

fix(cli): prevent duplicate SessionStart systemMessage render (#25827)

2026-05-11 16:44:04 +00:00

ide

fix(core): use dynamic CLI version for IDE client instead of hardcoded '1.0.0' (#24414)

2026-04-22 16:43:48 +00:00

mcp

fix(core): clear 5-minute timeouts in oauth flow to prevent memory leaks (#24968)

2026-04-09 21:14:07 +00:00

mocks

…

output

fix: report AgentExecutionBlocked in non-interactive programmatic modes (#26262)

2026-04-30 20:41:35 +00:00

policy

fix(core): allow redirection in YOLO and AUTO_EDIT modes without sandboxing (#26542)

2026-05-05 21:26:16 +00:00

prompts

feat(core): steer model to use edit tool for surgical edits, fix a typo (#26480)

2026-05-05 19:35:04 +00:00

resources

fix(mcp): Notifications/tools/list_changed support not working (#21050)

2026-03-04 09:46:17 -05:00

routing

fix(routing): Refactor tool turn handling for the conversation history in NumericalClassifierStrategy to prevent 400 Bad Request (#26761)

2026-05-11 20:09:38 +00:00

safety

Unused error variables in catch block are not allowed (#24487)

2026-04-02 04:33:07 +00:00

sandbox

fix(security): resolve Search Path Interruption vulnerability by decoupling rg intent from path validation

2026-05-12 12:52:11 -04:00

scheduler

refactor(cli): migrate core tools to native ToolDisplay property and fix UI rendering (#25186)

2026-05-06 21:23:26 +00:00

services

fix: prevent EISDIR crash when customIgnoreFilePaths contains directories (#19868) (#19898)

2026-05-11 20:46:08 +00:00

skills

fix(core): reset session-scoped state on resumption (#26342)

2026-05-01 21:20:06 +00:00

telemetry

ci: implement codebase-aware effort level triage (#26666)

2026-05-08 20:48:54 +00:00

test-utils

fix(core): make subagents aware of active approval modes (#23608)

2026-05-01 22:21:38 +00:00

tools

fix(security): strictly validate the real path of system ripgrep to prevent symlink bypass

2026-05-12 13:02:28 -04:00

utils

fix(security): securely handle root CWD using isSubpath in isTrustedSystemPath

2026-05-12 13:25:04 -04:00

voice

feat(voice): implement real-time voice mode with cloud and local backends (#24174)

2026-04-24 21:29:38 +00:00

index.test.ts

…

index.ts

feat(context): Improvements to the snapshotter. (#26655)

2026-05-08 23:54:44 +00:00