Claude 48ff7d3094 fix(security): harden web admin static serving and API responses ...

- Mask bridge token in /api/v1/status (return token_set bool instead
  of the raw secret to avoid credential leakage)
- Add path traversal guard in withStaticFallback to ensure resolved
  file paths stay within the webDistDir boundary
- Stop stripping zero-value TOML lines in formatTOML — values like
  `quiet = false` or `port = 0` may be intentionally set by the user

2026-03-30 13:56:01 +08:00

..

api_test.go

feat: support agent attachment send-back (#180)

2026-03-18 07:57:40 +08:00

api.go

feat(cron): add command to show job details

2026-03-24 15:30:25 +08:00

atomicwrite_test.go

refactor(core): remove redundant fmt.Sprintf and add unit tests

2026-03-05 20:56:38 +08:00

atomicwrite.go

refactor(session): add context-aware event sending and secure arg logging

2026-03-04 12:38:37 +08:00

bridge_test.go

feat(telegram): add async startup recovery

2026-03-22 12:03:30 +08:00

bridge.go

feat(web): improve UI/UX, cron editor, config persistence, and theme consistency

2026-03-27 09:32:22 +08:00

card_test.go

feat(cards): interactive card UI for slash commands (Feishu) (#52)

2026-03-11 07:52:36 +08:00

card.go

feat(card): add tagged notes and improve delete mode flow

2026-03-14 08:46:38 +08:00

command_test.go

feat(commands): add support for exec commands with shell execution

2026-03-07 07:55:24 +08:00

command.go

fix: handle errors and add error logging throughout codebase

2026-03-20 00:31:00 +08:00

cron_test.go

fix (discord): Discord cron thread retargeting when thread_isolation=true

2026-03-23 08:01:25 +08:00

cron.go

feat(cron): add cron edit command to modify job fields

2026-03-24 08:03:21 +08:00

dedup_test.go

feat(core): add message deduplication by process start time

2026-03-06 15:25:08 +08:00

dedup.go

feat(core): add message deduplication by process start time

2026-03-06 15:25:08 +08:00

dir_history.go

feat(core): add directory history for /dir command

2026-03-22 11:03:25 +08:00

doctor.go

feat(telegram): add async startup recovery

2026-03-22 12:03:30 +08:00

engine_test.go

fix(core): 出站限流补全、工具结果展示与 i18n 收紧

2026-03-28 00:42:35 +08:00

engine.go

merge: resolve conflicts with main branch

2026-03-30 11:54:58 +08:00

heartbeat_test.go

feat(heartbeat): add card UI, persistence and new commands

2026-03-14 11:58:53 +08:00

heartbeat.go

feat(heartbeat): add card UI, persistence and new commands

2026-03-14 11:58:53 +08:00

httpclient.go

refactor(session): add context-aware event sending and secure arg logging

2026-03-04 12:38:37 +08:00

i18n_test.go

test(core): add coverage for session key extraction, i18n detection, cron

2026-03-22 00:53:39 +08:00

i18n.go

merge: resolve conflicts with main branch

2026-03-30 11:54:58 +08:00

interfaces.go

feat(feishu): add configurable progress styles (compact/card) to reduce message spam

2026-03-28 00:16:13 +08:00

management_test.go

feat(web): improve UI/UX, cron editor, config persistence, and theme consistency

2026-03-27 09:32:22 +08:00

management.go

fix(security): harden web admin static serving and API responses

2026-03-30 13:56:01 +08:00

markdown_html_test.go

fix(core): reserve space for closing fence in SplitMessageCodeFenceAware (#183)

2026-03-17 10:26:44 +08:00

markdown_html.go

fix(telegram): UTF-8-safe command menu descriptions (fixes #119) (#301)

2026-03-24 14:16:04 +08:00

markdown.go

feat(markdown): add StripMarkdown utility for LINE and WeCom

2026-03-01 09:36:37 +08:00

message.go

feat(feishu): add configurable progress styles (compact/card) to reduce message spam

2026-03-28 00:16:13 +08:00

model_alias_test.go

feat(core): align /model switching with provider flow (#246)

2026-03-21 20:32:22 +08:00

multi_workspace_test.go

feat(core): add shared workspace routing infrastructure

2026-03-24 08:03:18 +08:00

outgoing_ratelimit_test.go

feat(core): add outgoing message rate limiting per platform

2026-03-27 23:59:11 +08:00

outgoing_ratelimit.go

feat(core): add outgoing message rate limiting per platform

2026-03-27 23:59:11 +08:00

progress_compact_test.go

fix(core): 出站限流补全、工具结果展示与 i18n 收紧

2026-03-28 00:42:35 +08:00

progress_compact.go

fix(core): 出站限流补全、工具结果展示与 i18n 收紧

2026-03-28 00:42:35 +08:00

projectstate_test.go

feat: persist /dir work directory overrides across restarts

2026-03-22 16:33:18 +08:00

projectstate.go

feat: persist /dir work directory overrides across restarts

2026-03-22 16:33:18 +08:00

provider_test.go

feat(core): align /model switching with provider flow (#246)

2026-03-21 20:32:22 +08:00

provider.go

feat(core): align /model switching with provider flow (#246)

2026-03-21 20:32:22 +08:00

providerproxy.go

feat(claudecode): add provider proxy support for third-party endpoints

2026-03-04 23:57:13 +08:00

ratelimit_test.go

fix: stop RateLimiter cleanup goroutine on replacement and engine shutdown (#134)

2026-03-15 07:41:48 +08:00

ratelimit.go

fix: stop RateLimiter cleanup goroutine on replacement and engine shutdown (#134)

2026-03-15 07:41:48 +08:00

redact_test.go

refactor(core): remove redundant fmt.Sprintf and add unit tests

2026-03-05 20:56:38 +08:00

redact.go

refactor(session): add context-aware event sending and secure arg logging

2026-03-04 12:38:37 +08:00

registry_test.go

refactor(core): remove redundant fmt.Sprintf and add unit tests

2026-03-05 20:56:38 +08:00

registry.go

init

2026-02-28 10:38:24 +08:00

relay_test.go

fix(relay): return partial text after timeout (#205)

2026-03-18 15:03:45 +08:00

relay.go

fix(relay): return partial text after timeout (#205)

2026-03-18 15:03:45 +08:00

session_test.go

fix(session): do not persist __continue__ as agent_session_id (fixes #255) (#298)

2026-03-24 14:16:17 +08:00

session.go

fix(opencode): add warn logs when sqlite3 CLI is missing (#319)

2026-03-25 11:30:53 +08:00

setup.go

feat(web): add work_dir/agent_type to project creation and expand settings

2026-03-27 10:43:07 +08:00

skill.go

feat(gemini): optimize Gemini CLI display on Telegram

2026-03-14 15:40:00 +08:00

speech.go

Merge fork/main: add audio support, TTS providers, and security improvements

2026-03-18 21:08:12 +08:00

streaming_test.go

fix(feishu): preserve preview card finalization and silence ws heartbeat spam

2026-03-23 08:01:28 +08:00

streaming.go

fix(feishu): preserve preview card finalization and silence ws heartbeat spam

2026-03-23 08:01:28 +08:00

truncate_test.go

test: add tests for rune-based truncation functions

2026-03-13 09:54:16 -07:00

tts_test.go

Merge fork/main: add audio support, TTS providers, and security improvements

2026-03-18 21:08:12 +08:00

tts.go

Merge fork/main: add audio support, TTS providers, and security improvements

2026-03-18 21:08:12 +08:00

updater_test.go

refactor(core): remove redundant fmt.Sprintf and add unit tests

2026-03-05 20:56:38 +08:00

updater.go

fix: handle errors and add error logging throughout codebase

2026-03-20 00:31:00 +08:00

user_roles_test.go

fix: case-insensitive duplicate detection, custom command ACL, and audit logging

2026-03-16 17:04:19 +08:00

user_roles.go

fix: case-insensitive duplicate detection, custom command ACL, and audit logging

2026-03-16 17:04:19 +08:00

web_manager.go

feat: add /web command for one-click web admin install and npm publish config

2026-03-29 09:59:06 +08:00

webhook_test.go

feat(webhook): add webhook server for external integrations

2026-03-14 11:33:59 +08:00

webhook.go

fix: handle errors and add error logging throughout codebase

2026-03-20 00:31:00 +08:00

workspace_binding_test.go

feat(core): add shared workspace routing infrastructure

2026-03-24 08:03:18 +08:00

workspace_binding.go

feat(core): add shared workspace routing infrastructure

2026-03-24 08:03:18 +08:00

workspace_state_test.go

fix(test): account for macOS /var → /private/var symlink in workspace tests

2026-03-18 22:32:03 +08:00

workspace_state.go

fix: harden Discord session routing and remove implicit continue bridge (#322)

2026-03-25 14:31:27 +08:00