Duy /zuey/ 532ff91d8e fix(security): harden upstream critical surfaces (#32) ...

* fix(security): harden upstream critical surfaces

Refs #30

* fix(security): close pre-landing review gaps

Refs #30

* fix(security): close official release blockers

2026-05-20 16:33:49 +07:00

..

activity_store.go

feat: multi-tenant isolation — complete implementation (#359)

2026-03-23 08:08:23 +07:00

agent_links.go

feat(v3): core architecture redesign — pipeline, memory, vault, evolution, providers, orchestration (#792)

2026-04-09 21:29:48 +07:00

agent_workstation_links.go

feat(workstation): Remote Workstation Runtime — SSH exec + security + audit (#4)

2026-05-11 14:58:19 +07:00

agents_batch.go

feat: multi-tenant isolation — complete implementation (#359)

2026-03-23 08:08:23 +07:00

agents_context.go

fix(contacts): merge contact into existing tenant user

2026-04-17 19:07:01 +07:00

agents_export_queries.go

refactor(store/pg): rename mustParseUUID to parseUUIDOrNil (honest name)

2026-04-11 21:22:23 +07:00

agents_export_team_queries.go

feat(v3): core architecture redesign — pipeline, memory, vault, evolution, providers, orchestration (#792)

2026-04-09 21:29:48 +07:00

agents_export_team_standalone.go

fix: use errors.Is() for sentinel comparisons + remove unused @xyflow/react (#727)

2026-04-07 12:16:45 +07:00

agents_scan_rows.go

feat(v3): core architecture redesign — pipeline, memory, vault, evolution, providers, orchestration (#792)

2026-04-09 21:29:48 +07:00

agents_unscoped.go

refactor(security): remove cross-tenant bypass, enforce strict tenant isolation

2026-03-24 20:40:59 +07:00

agents_update_null_coerce_test.go

fix(agents): handle null JSON config updates (#13)

2026-05-17 22:34:19 +07:00

agents.go

fix(agents): handle null JSON config updates (#13)

2026-05-17 22:34:19 +07:00

api_keys.go

fix(http): master-scope guards on builtin_tools, packages, api-keys

2026-04-12 10:24:07 +07:00

builtin_tools.go

chore: upgrade Go 1.25 → 1.26 and apply go fix modernizations

2026-03-10 00:09:15 +07:00

channel_contacts.go

fix(store): tenant-scope GetContactsBySenderIDs to prevent cross-tenant leak

2026-04-18 22:49:48 +07:00

channel_instances_unscoped.go

refactor(security): remove cross-tenant bypass, enforce strict tenant isolation

2026-03-24 20:40:59 +07:00

channel_instances.go

feat: multi-tenant isolation — complete implementation (#359)

2026-03-23 08:08:23 +07:00

config_permissions.go

revert(http): remove admin backfill endpoint — lazy heal on /writers is enough

2026-04-18 21:43:19 +07:00

config_secrets.go

feat: multi-tenant isolation — complete implementation (#359)

2026-03-23 08:08:23 +07:00

contact_resolve.go

feat: merge pipeline, per-user credentials, unified picker, group contacts

2026-03-29 22:33:17 +07:00

cron_crud.go

refactor(cron): normalize payload columns into dedicated DB fields (#33)

2026-03-30 15:19:43 +07:00

cron_exec.go

feat(v3): core architecture redesign — pipeline, memory, vault, evolution, providers, orchestration (#792)

2026-04-09 21:29:48 +07:00

cron_run_log_scan_rows.go

feat(v3): core architecture redesign — pipeline, memory, vault, evolution, providers, orchestration (#792)

2026-04-09 21:29:48 +07:00

cron_scan_test.go

refactor(cron): normalize payload columns into dedicated DB fields (#33)

2026-03-30 15:19:43 +07:00

cron_scan.go

refactor(cron): normalize payload columns into dedicated DB fields (#33)

2026-03-30 15:19:43 +07:00

cron_scheduler.go

fix: handle ignored errors, unsafe type assertions, missing panic recovery (#854)

2026-04-13 21:29:11 +07:00

cron_update_test.go

refactor(cron): normalize payload columns into dedicated DB fields (#33)

2026-03-30 15:19:43 +07:00

cron_update.go

refactor(cron): normalize payload columns into dedicated DB fields (#33)

2026-03-30 15:19:43 +07:00

cron.go

fix(ui): dynamic searchable timezone picker with validation (#614)

2026-04-01 11:12:35 +07:00

episodic_search.go

feat(ts-port): reasoning strip, dreaming config + weighted scoring

2026-04-10 13:32:02 +07:00

episodic_summaries.go

feat(ts-port): reasoning strip, dreaming config + weighted scoring

2026-04-10 13:32:02 +07:00

evolution_metrics.go

feat(v3): core architecture redesign — pipeline, memory, vault, evolution, providers, orchestration (#792)

2026-04-09 21:29:48 +07:00

evolution_suggestions.go

feat(v3): core architecture redesign — pipeline, memory, vault, evolution, providers, orchestration (#792)

2026-04-09 21:29:48 +07:00

factory.go

feat(workstation): Remote Workstation Runtime — SSH exec + security + audit (#4)

2026-05-11 14:58:19 +07:00

heartbeat.go

feat(v3): core architecture redesign — pipeline, memory, vault, evolution, providers, orchestration (#792)

2026-04-09 21:29:48 +07:00

helpers_test.go

fix(security): followup hardening — ILIKE ESCAPE, allowlist logging, shell deny, tests (#251)

2026-03-18 07:48:48 +07:00

helpers.go

feat(v3): core architecture redesign — pipeline, memory, vault, evolution, providers, orchestration (#792)

2026-04-09 21:29:48 +07:00

hook_budget.go

feat(hooks/budget): per-tenant token spend tracking subsystem

2026-04-16 14:17:47 +07:00

hooks_test.go

refactor: consolidate hooks table migration and drop deprecated agent_id column

2026-04-16 14:17:48 +07:00

hooks.go

refactor: consolidate hooks table migration and drop deprecated agent_id column

2026-04-16 14:17:48 +07:00

kg_graph.go

feat(vault): optimize graph visualization and fix sidebar state bugs

2026-04-13 10:59:27 +07:00

knowledge_graph_dedup.go

fix(store/pg): error-propagate parseUUID in kg dedup insert paths

2026-04-11 21:22:23 +07:00

knowledge_graph_embedding.go

fix(store/pg): error-propagate parseUUID in kg EmbedEntity

2026-04-11 21:22:23 +07:00

knowledge_graph_relations.go

refactor(store/pg): error-propagate parseUUID in knowledge_graph_relations

2026-04-11 21:22:23 +07:00

knowledge_graph_scan_rows.go

feat(v3): core architecture redesign — pipeline, memory, vault, evolution, providers, orchestration (#792)

2026-04-09 21:29:48 +07:00

knowledge_graph_temporal.go

refactor(store/pg): rename mustParseUUID to parseUUIDOrNil (honest name)

2026-04-11 21:22:23 +07:00

knowledge_graph_traversal.go

refactor(store/pg): error-propagate parseUUID in remaining kg + memory files

2026-04-11 21:22:23 +07:00

knowledge_graph.go

refactor(store/pg): error-propagate parseUUID in knowledge_graph

2026-04-11 21:22:23 +07:00

mcp_export_queries.go

fix: use errors.Is() for sentinel comparisons + remove unused @xyflow/react (#727)

2026-04-07 12:16:45 +07:00

mcp_scan_rows.go

feat(v3): core architecture redesign — pipeline, memory, vault, evolution, providers, orchestration (#792)

2026-04-09 21:29:48 +07:00

mcp_servers_access.go

feat(v3): core architecture redesign — pipeline, memory, vault, evolution, providers, orchestration (#792)

2026-04-09 21:29:48 +07:00

mcp_servers.go

feat(v3): core architecture redesign — pipeline, memory, vault, evolution, providers, orchestration (#792)

2026-04-09 21:29:48 +07:00

mcp_user_credentials.go

feat: multi-tenant isolation — complete implementation (#359)

2026-03-23 08:08:23 +07:00

memory_admin.go

refactor(store/pg): error-propagate parseUUID in remaining kg + memory files

2026-04-11 21:22:23 +07:00

memory_docs.go

refactor(comments): remove plan/phase refs from agent identity hardening code

2026-04-11 21:22:23 +07:00

memory_embedding_cache.go

feat(v3): core architecture redesign — pipeline, memory, vault, evolution, providers, orchestration (#792)

2026-04-09 21:29:48 +07:00

memory_scan_rows.go

feat(ts-port): reasoning strip, dreaming config + weighted scoring

2026-04-10 13:32:02 +07:00

memory_search.go

refactor(store/pg): error-propagate parseUUID in remaining kg + memory files

2026-04-11 21:22:23 +07:00

pairing.go

feat(v3): core architecture redesign — pipeline, memory, vault, evolution, providers, orchestration (#792)

2026-04-09 21:29:48 +07:00

parseuuid_test.go

refactor(store/pg): rename mustParseUUID to parseUUIDOrNil (honest name)

2026-04-11 21:22:23 +07:00

pending_message_store.go

feat(v3): core architecture redesign — pipeline, memory, vault, evolution, providers, orchestration (#792)

2026-04-09 21:29:48 +07:00

pg_dialect_test.go

feat(v3): core architecture redesign — pipeline, memory, vault, evolution, providers, orchestration (#792)

2026-04-09 21:29:48 +07:00

pg_dialect.go

feat(v3): core architecture redesign — pipeline, memory, vault, evolution, providers, orchestration (#792)

2026-04-09 21:29:48 +07:00

pool.go

Initial commit: GoClaw AI agent gateway

2026-02-22 14:58:07 +07:00

providers.go

fix(providers): heartbeat FK SET NULL + tenant-scoped tx-safe DeleteProvider (#1034)

2026-04-27 12:00:06 +07:00

pure_logic_test.go

test(facebook,store/pg): wave B coverage push

2026-04-11 21:47:22 +07:00

scan_rows_test.go

test(facebook,store/pg): wave B coverage push

2026-04-11 21:47:22 +07:00

secure_cli_agent_grants.go

feat(cli-credentials): support per-agent env grants

2026-05-17 14:35:34 +07:00

secure_cli_user_credentials.go

feat: merge pipeline, per-user credentials, unified picker, group contacts

2026-03-29 22:33:17 +07:00

secure_cli.go

feat(packages): unify Packages & CLI Credentials + per-grant env overrides (#3)

2026-05-11 13:14:44 +07:00

sessions_list.go

chore: apply go fix modernizations

2026-04-27 12:00:20 +07:00

sessions_ops.go

fix: clear cron session in DB when not cached (cold-cache after restart) (#424)

2026-03-24 20:47:44 +07:00

sessions_reset_test.go

fix: clear cron session in DB when not cached (cold-cache after restart) (#424)

2026-03-24 20:47:44 +07:00

sessions_scan_rows.go

feat(v3): core architecture redesign — pipeline, memory, vault, evolution, providers, orchestration (#792)

2026-04-09 21:29:48 +07:00

sessions_tokens.go

feat: multi-tenant isolation — complete implementation (#359)

2026-03-23 08:08:23 +07:00

sessions.go

fix(cache): heartbeat/cron used UUID in session keys causing stale cache after agent update

2026-03-28 19:02:53 +07:00

skills_admin.go

feat(v3): core architecture redesign — pipeline, memory, vault, evolution, providers, orchestration (#792)

2026-04-09 21:29:48 +07:00

skills_content.go

feat(skills): add management metadata and deeplinks

2026-05-19 16:35:56 +07:00

skills_crud.go

feat(skills): add management metadata and deeplinks

2026-05-19 16:35:56 +07:00

skills_embedding_test.go

fix(pg): align SearchByEmbedding SQL placeholders with scope args (#623)

2026-04-01 18:28:56 +07:00

skills_embedding.go

fix(skills): add missing AS alias for COALESCE in embedding search query (#896)

2026-04-15 23:00:11 +07:00

skills_export_queries.go

feat(v3): core architecture redesign — pipeline, memory, vault, evolution, providers, orchestration (#792)

2026-04-09 21:29:48 +07:00

skills_grants.go

feat(skills): add management metadata and deeplinks

2026-05-19 16:35:56 +07:00

skills_scan_rows.go

feat(skills): add management metadata and deeplinks

2026-05-19 16:35:56 +07:00

skills.go

feat(skills): add management metadata and deeplinks

2026-05-19 16:35:56 +07:00

snapshot.go

feat: multi-tenant isolation — complete implementation (#359)

2026-03-23 08:08:23 +07:00

sqlx_helpers.go

feat(v3): core architecture redesign — pipeline, memory, vault, evolution, providers, orchestration (#792)

2026-04-09 21:29:48 +07:00

subagent_tasks.go

feat(store): persist subagent tasks to PostgreSQL (#600)

2026-03-31 11:45:03 +07:00

system_configs.go

feat(config): add system_configs DB table with per-tenant isolation and System Settings modal

2026-03-24 16:01:02 +07:00

team_task_siblings.go

chore: apply go fix syntax upgrades (min/max, switch patterns)

2026-04-15 11:24:57 +07:00

teams_tasks_activity.go

feat(vault): task + delegation auto-linking in enrich worker

2026-04-11 21:22:23 +07:00

teams_tasks_embedding.go

feat: multi-tenant isolation — complete implementation (#359)

2026-03-23 08:08:23 +07:00

teams_tasks_followup.go

feat: multi-tenant isolation — complete implementation (#359)

2026-03-23 08:08:23 +07:00

teams_tasks_lifecycle.go

feat: multi-tenant isolation — complete implementation (#359)

2026-03-23 08:08:23 +07:00

teams_tasks_progress.go

fix(teams): gracefully handle task status races in progress/complete

2026-03-26 18:00:09 +07:00

teams_tasks.go

fix(tasks): inject tenant ctx in task ticker to prevent nil panic

2026-04-14 10:05:57 +07:00

teams_unscoped.go

refactor(security): remove cross-tenant bypass, enforce strict tenant isolation

2026-03-24 20:40:59 +07:00

teams.go

feat(v3): core architecture redesign — pipeline, memory, vault, evolution, providers, orchestration (#792)

2026-04-09 21:29:48 +07:00

tenant_configs.go

feat(store): tenant tool settings with column-preservation upsert

2026-04-12 08:55:15 +07:00

tenant_store.go

perf: eliminate N+1 query patterns across import, vault, and usage pipelines

2026-04-10 19:35:02 +07:00

tracing_codex_pool.go

feat(providers): add provider-level Codex pool activity monitor (#539)

2026-03-29 12:46:23 +07:00

tracing_sqlx.go

feat(v3): core architecture redesign — pipeline, memory, vault, evolution, providers, orchestration (#792)

2026-04-09 21:29:48 +07:00

tracing.go

feat(v3): core architecture redesign — pipeline, memory, vault, evolution, providers, orchestration (#792)

2026-04-09 21:29:48 +07:00

vault_documents_enrichment.go

feat(vault): chat_id isolation for isolated teams

2026-04-23 18:43:31 +07:00

vault_documents.go

feat(vault): chat_id isolation for isolated teams

2026-04-23 18:43:31 +07:00

vault_graph.go

feat(vault): optimize graph visualization and fix sidebar state bugs

2026-04-13 10:59:27 +07:00

vault_links.go

feat(store): vault media linking schema migration + document support

2026-04-11 21:22:23 +07:00

vault_scan_rows.go

feat(vault): chat_id isolation for isolated teams

2026-04-23 18:43:31 +07:00

vault_source_cleanup.go

feat(vault): chat_id isolation for isolated teams

2026-04-23 18:43:31 +07:00

webhook_calls.go

fix(security): harden upstream critical surfaces (#32)

2026-05-20 16:33:49 +07:00

webhooks.go

feat(webhooks): HTTP webhooks to trigger agents with HMAC auth + durable callbacks (#2)

2026-05-11 13:29:24 +07:00

workstation_activity.go

feat(workstation): Remote Workstation Runtime — SSH exec + security + audit (#4)

2026-05-11 14:58:19 +07:00

workstation_permissions.go

feat(workstation): Remote Workstation Runtime — SSH exec + security + audit (#4)

2026-05-11 14:58:19 +07:00

workstations.go

feat(workstation): Remote Workstation Runtime — SSH exec + security + audit (#4)

2026-05-11 14:58:19 +07:00