3 Commits

Include renames

Author	SHA1	Message	Date
chengyongruandXubin Ren	515e418eb4	fix: block exact-file allowlist link escapes ... maintainer edit: compare exact-file allowlist entries using logical paths and require the resolved target to stay at that canonical path, so symlinks or junctions cannot redirect canonical memory files to an external write target.	2026-06-18 00:03:26 +08:00
chengyongruandXubin Ren	15f218e918	fix: enforce exact Dream memory file writes ... maintainer edit: Dream write tools used file paths as directory roots, so a missing canonical memory file could be treated as a parent directory. Add exact-file allowlist support and keep skills/ as the only Dream write directory.	2026-06-18 00:03:26 +08:00
Xubin RenandGitHub	3a420136bb	feat(webui): add project workspaces and access controls (#4007) ... * feat(webui): add project workspaces and access controls * feat(webui): add project workspaces and access controls * refactor(tools): centralize workspace access resolution * refactor(webui): remove unused workspace host state * fix(webui): hide estimated file edit label * fix(webui): clarify file edit deletion feedback * fix(webui): label deleted file activity * fix(webui): flatten file edit activity rows * fix(core): remove path-only patch deletion * fix(core): keep apply patch non-destructive * refactor(webui): trim workspace host plumbing * fix(tools): register exec with tools config	2026-05-29 03:42:53 +08:00