LHMQ878andXubin Ren ec3dfb21ba fix(cli): stop leaking API keys to CLI app subprocesses ...

Installed CLI apps were started with os.environ.copy(), so provider keys
from the parent process were visible to untrusted binaries. Use a minimal
allowlist env matching the shell tool.

Fixes #4783

2026-08-12 02:57:48 +09:00

..

agent

fix(skills): make PNG weather example Windows-safe

2026-08-12 02:48:03 +09:00

apps

fix(cli): stop leaking API keys to CLI app subprocesses

2026-08-12 02:57:48 +09:00

bus

feat(sdk): add host integration extension points

2026-07-28 15:30:28 +08:00

channels

refactor(webui): make gateway own settings services (#5321)

2026-08-10 18:10:55 +08:00

cli

fix(webui): surface MCP runtime connection failures (#5331)

2026-08-11 23:52:02 +08:00

cli_apps

feat(plugins): integrate portable Agent Plugins

2026-08-11 20:16:24 +09:00

command

fix(commands): reject invalid slash commands

2026-08-04 17:11:44 +08:00

config

refactor(webui): improve visual consistency (#5249)

2026-08-05 13:24:45 +08:00

cron

test(cron): cover invalid schedule expressions

2026-08-03 16:20:22 +08:00

gateway

feat(webui): add guided setup flows

2026-07-13 13:11:46 +08:00

pairing

fix(pairing): keep approvals across transient store read failures

2026-07-30 19:02:37 +08:00

providers

fix(providers): stop writing API keys into process os.environ

2026-08-12 02:35:40 +09:00

security

fix(image): delegate DNS to explicit proxy

2026-07-27 10:06:19 +08:00

session

fix(webui): complete temporary chat mode

2026-08-08 23:20:59 +08:00

tools

fix(tools): reject non-finite number parameters

2026-08-12 02:25:20 +09:00

triggers

fix(webui): show actual local trigger messages (#5228)

2026-08-03 16:43:01 +08:00

utils

refactor(webui): extract event projection helpers

2026-08-10 16:24:07 +08:00

webui

fix(webui): surface MCP runtime connection failures (#5331)

2026-08-11 23:52:02 +08:00

test_api_attachment.py

refactor: enforce BasedPyright strict type checking (#5158)

2026-07-29 21:37:11 +08:00

test_api_stream.py

fix: require api auth in server factory

2026-07-08 12:16:12 +08:00

test_build_status.py

fix(status): correct context percentage calculation and sync consolidator

2026-04-16 20:30:39 +08:00

test_context_documents.py

fix(agent): read document attachments on demand (#5122)

2026-07-28 13:33:06 +08:00

test_docker.sh

fix: keep onboard cli defaults unchanged

2026-06-22 13:04:05 +08:00

test_document_parsing.py

refactor: remove verified dead code

2026-08-08 21:10:34 +08:00

test_file_tool_toggle.py

fix: preserve file tool toggle for subagents

2026-06-15 02:55:18 +08:00

test_nanobot_facade.py

test: strengthen user-path coverage and CI gates (#5308)

2026-08-09 21:37:06 +08:00

test_openai_api.py

refactor(core): remove redundant runtime scaffolding (#5127)

2026-07-28 11:07:58 +08:00

test_package_version.py

test: speed up CI and harden the suite

2026-07-15 00:18:37 +08:00

test_tool_contextvars.py

refactor(agent): capture subagent runtime before spawn

2026-07-10 17:54:34 +08:00

test_truncate_text_shadowing.py

fix(agent): avoid truncate_text name shadowing

2026-04-10 17:36:31 +08:00