2 Commits

Include renames

Author	SHA1	Message	Date
viettranx	bdfc0fadfb	fix(config): MCP env: resolution, channel field filter, orphan provider event, workspace fallback (#348, #297, #295, #431) ... - manager.go: add resolveEnvVars() to expand env:VARNAME in MCP headers (copy-safe) - manager_env_test.go: 3 test cases for env resolution - validate.go: add "name" to channelInstanceAllowedFields - validate_test.go: test channel instance name field retention - bus/types.go: add TopicAgentDeleted event + AgentDeletedPayload - agents_delete.go: emit agent:deleted event with provider name for async cleanup - gateway.go: log-only subscriber for orphaned provider warning (no auto-delete — FK safety) - resolver.go: fallback to deps.Workspace for master tenant agents with empty ag.Workspace (fixes filesystem escape where filepath.Join("","system") resolved to /system)	2026-03-30 14:12:18 +07:00
Viet Tran	ce333c70f3	fix(security): followup hardening — ILIKE ESCAPE, allowlist logging, shell deny, tests (#251) ... - Add explicit ESCAPE '\' clause to all ILIKE queries (knowledge_graph, custom_tools, channel_instances, channel_contacts) for correct wildcard escaping regardless of PostgreSQL standard_conforming_strings setting - Log warning when filterAllowedKeys drops unknown fields for debuggability - Widen base64 decode shell deny pattern to catch -di, -dw0 variants - Add unit tests for filterAllowedKeys, pqStringArray, scanStringArray, pqStringArray↔scanStringArray roundtrip, limitedBuffer, base64 deny	2026-03-18 07:48:48 +07:00