2 Commits

Include renames

Author	SHA1	Message	Date
viettranx	c81cf6cf39	feat(security): MCP validation + hooks context isolation ... Phase 02 - MCP input validation: - Add command allowlist (node, python, npx, uvx, etc.) - Block dangerous args (--eval, -e, -c, exec(), etc.) - SSRF protection via security.Validate() with DNS rebinding check - Fail-closed env var allowlist for headers - Integrate validation in create/update/import handlers Phase 03 - Hooks async context leak: - Use context.WithoutCancel to preserve TenantID/UserID in async hooks - Increase audit write timeout 2s → 5s - Increase circuit breaker store timeout 1s → 2s Also: Add security guard tests for skills upload	2026-04-16 17:19:50 +07:00
viettranx	bdfc0fadfb	fix(config): MCP env: resolution, channel field filter, orphan provider event, workspace fallback (#348, #297, #295, #431) ... - manager.go: add resolveEnvVars() to expand env:VARNAME in MCP headers (copy-safe) - manager_env_test.go: 3 test cases for env resolution - validate.go: add "name" to channelInstanceAllowedFields - validate_test.go: test channel instance name field retention - bus/types.go: add TopicAgentDeleted event + AgentDeletedPayload - agents_delete.go: emit agent:deleted event with provider name for async cleanup - gateway.go: log-only subscriber for orphaned provider warning (no auto-delete — FK safety) - resolver.go: fallback to deps.Workspace for master tenant agents with empty ag.Workspace (fixes filesystem escape where filepath.Join("","system") resolved to /system)	2026-03-30 14:12:18 +07:00