7 Commits

Include renames

Author	SHA1	Message	Date
Alex	89eb3f68fc	fix: remove mcp artefacts, handle non fatal issues on workflow ... gracefully	2026-07-08 21:05:40 +01:00
Alex	2d79ff2227	feat: more QoL fixes	2026-07-04 15:48:40 +02:00
Alex	a0f10925af	fix: artefact fixes	2026-07-03 20:16:31 +02:00
Alex	99484e02c8	fix: injection protections and concurrency improvements	2026-06-29 19:56:10 +02:00
Alex	b144265094	fix: workflow security pass	2026-06-29 19:21:35 +02:00
Alex	30397a1905	Expose artifacts as MCP resources and add sandbox egress policy ... Expose a user's artifacts through the MCP server as readable resources: each is listed under an artifact:// URI with its mime type and read on demand as inline text or a base64 blob, bounded by a size cap and scoped strictly to the owning principal resolved from the request's API key, so no artifact is served across tenants. Ship the network-level egress controls the sandbox runner needs but cannot self-apply: a Kubernetes NetworkPolicy that allows public egress while denying RFC1918, link-local, and cloud-metadata ranges, an optional docker-compose egress overlay, and runner network-hardening docs.	2026-06-24 13:57:39 +01:00
Alex	c06888bc86	feat: asgi and search service (#2424) ... * feat: asgi and search service * feat: asgi and mcp tool server * fix: asgi issues * fix: mini cors hardening	2026-04-23 12:21:39 +01:00