ciregenz 44f9e48c2a [eric] security: close the Output executor sandbox escape via sys, dunders and module chains

2026-07-31 13:47:02 -07:00

..

agents

[eric] distill: pin the touched file paths back onto a summary that paraphrased them away

2026-07-31 01:21:49 -07:00

auth

[aidan] chore/affiliate-attribution: align private names and trim comments

2026-07-10 19:31:35 -07:00

dashboard_layout

[eric] apps: multiple independent instances per app (own runtime + ports; alt-click or paste to open)

2026-07-02 01:24:22 -07:00

dashboards

[eric] notes: delete the sticky-note feature end to end

2026-07-29 20:32:24 -07:00

discord_mcp_shim

[eric] backend: one-line every comment + collapse 3+ blank runs across apps/ (AST-verified identical, -lines); CLAUDE.md one-line-comment rule

2026-06-25 02:29:04 -07:00

google_workspace_mcp_shim

[eric] context: lossless tool-report spill (browser+gws caps point at the full file) + visible recovery pill

2026-07-06 14:16:31 -07:00

health

[eric] health: drop stray debug() call that 500'd /api/health/check and hung boot

2026-07-02 21:49:06 -07:00

help

[eric] help: ground the help chat in real product knowledge instead of a hardcoded prompt

2026-07-30 18:29:15 -07:00

mcp_registry

[eric] apps: leading-_ -> p_ for function-local vars/args/nested-fns across 53 apps modules (scope-aware AST rename, module symbols untouched, p-private 0)

2026-06-23 21:11:44 -07:00

modes

[eric] apps: leading-_ -> p_ for import aliases (import x as _y) across apps modules (file-local bindings, p-private 0)

2026-06-23 21:15:43 -07:00

nine_router

[eric] settings: disconnect a subscription provider from the UI, verified against 9router not assumed

2026-07-31 00:00:43 -07:00

onboarding

[eric] voice+onboarding: aurora hues widened/jittered/desaturated (three tight bands read segmented); prep prompt forbids fabricating specifics when evidence is empty

2026-07-28 20:44:41 -07:00

outputs

[eric] security: close the Output executor sandbox escape via sys, dunders and module chains

2026-07-31 13:47:02 -07:00

reddit_mcp_shim

[eric] reddit-mcp: drive www.reddit.com JSON API + cookie + modhash (bearer no longer in shreddit HTML); live-verified

2026-06-30 22:26:06 -07:00

service

[eric] updater: idle-install waits out imminent scheduled workflows + fires an analytics breadcrumb

2026-07-19 12:21:20 -07:00

settings

[eric] voice: Settings model picker with verified downloads; report fast whisper exits

2026-07-31 00:03:27 -07:00

skill_registry

[eric] skills: curated install falls back to cached SKILL.md when GitHub is unreachable (restores offline install, fixes #113 regression)

2026-06-30 00:00:22 -07:00

skills

[pierre] fix: keep the App Builder's runtime contract current on every install

2026-07-10 17:54:49 -07:00

social_shims

[eric] browser-bridge: /api/browser-session/action + renderer perform_action + shim client

2026-06-30 17:19:58 -07:00

subscription

[eric] models: default is opus-5 via one DEFAULT_MODEL constant; per-provider picks upgraded to gpt-5.6 + latest gemini

2026-07-27 18:29:10 -07:00

swarm

[eric] security: close the Output executor sandbox escape via sys, dunders and module chains

2026-07-31 13:47:02 -07:00

tiktok_mcp_shim

[eric] mcp: TikTok MCP shim (HTTP reads + browser-delegated writes, 11 tools)

2026-06-30 17:19:58 -07:00

tools_lib

[eric] mcp: wire X + TikTok into catalog, preflight, env injection + linter exceptions

2026-06-30 17:19:58 -07:00

voice

[eric] voice: aux polish endpoint (fillers+punctuation, fail-open) on the cheap tier

2026-07-23 18:39:37 -07:00

web

[eric] web: race the free search engines so a dead one costs the hedge delay once, not 8s on every launch

2026-07-30 17:20:41 -07:00

workflows

[eric] models: default is opus-5 via one DEFAULT_MODEL constant; per-provider picks upgraded to gpt-5.6 + latest gemini

2026-07-27 18:29:10 -07:00

x_mcp_shim

[eric] x-mcp: convert to browser-delegation (X signs every request; drive the real logged-in card via data-testid DOM)

2026-07-01 00:11:21 -07:00

__init__.py

[Haik]: and so it begins

2026-03-13 12:09:25 -07:00

oauth_state.py

[eric] backend: one-line every comment + collapse 3+ blank runs across apps/ (AST-verified identical, -lines); CLAUDE.md one-line-comment rule

2026-06-25 02:29:04 -07:00