Marcus Widing 0f0b2c0255 fix(exec): match bare * wildcard in allowlist entries (#25082) ...

The matchAllowlist() function skipped patterns without path separators
(/, \, ~), causing a bare "*" wildcard entry to never reach the glob
matcher. Since glob's single * maps to [^/]*, it would also fail against
absolute paths. Handle bare "*" as a special case that matches any
resolved executable path.

Closes #25082

2026-02-24 14:20:11 +00:00

..

acp

fix(acp): harden permission tool-name validation

2026-02-24 01:11:34 +00:00

agents

fix(agents): await block-reply flush before tool execution starts

2026-02-24 14:11:40 +00:00

auto-reply

Auto-reply: normalize stop matching and add multilingual triggers (#25103)

2026-02-24 01:07:25 -05:00

browser

test: fix gate regressions

2026-02-24 04:39:53 +00:00

canvas-host

…

channels

fix: harden legacy plugin schema compatibility tests (#24933) (thanks @pandego)

2026-02-24 03:50:53 +00:00

cli

fix(cli): replace stale doctor/restart command hints (#24485)

2026-02-24 14:49:59 +05:30

commands

fix(cli): replace stale doctor/restart command hints (#24485)

2026-02-24 14:49:59 +05:30

compat

…

config

test: fix gate regressions

2026-02-24 04:39:53 +00:00

cron

fix(cron): treat embedded error payloads as run failures

2026-02-24 04:33:50 +00:00

daemon

fix: back up existing systemd unit before overwriting on update (#24350) (#24937)

2026-02-24 03:22:55 +00:00

discord

test(discord): add regression tests for reasoning tag stripping in stream

2026-02-24 04:37:30 +00:00

docs

…

gateway

fix(gateway): allow trusted-proxy control-ui auth to skip device pairing

2026-02-24 14:17:54 +00:00

hooks

fix(agents): include SOUL.md, IDENTITY.md, USER.md in subagent/cron bootstrap allowlist

2026-02-24 04:04:35 +00:00

imessage

fix(security): harden account-key handling against prototype pollution

2026-02-24 01:09:31 +00:00

infra

fix(exec): match bare * wildcard in allowlist entries (#25082)

2026-02-24 14:20:11 +00:00

line

fix(security): harden account-key handling against prototype pollution

2026-02-24 01:09:31 +00:00

link-understanding

…

logging

fix(security): harden regex compilation for filters and redaction

2026-02-23 23:54:50 +00:00

markdown

…

media

fix(security): harden session export image data-url handling

2026-02-24 02:53:39 +00:00

media-understanding

…

memory

…

node-host

fix(security): trust resolved skill-bin paths in allowlist auto-allow

2026-02-24 03:12:43 +00:00

pairing

…

plugin-sdk

refactor(security): unify dangerous name matching handling

2026-02-24 01:33:08 +00:00

plugins

fix(plugins): pass session context to before_compaction hook in subscribe handler

2026-02-24 04:33:50 +00:00

process

test: fix gate regressions

2026-02-24 04:39:53 +00:00

providers

Config: expand Kilo catalog and persist selected Kilo models (#24921)

2026-02-23 21:17:37 -05:00

routing

fix: normalize input peer.kind in resolveAgentRoute (#22730)

2026-02-24 04:33:50 +00:00

scripts

…

security

feat(security): warn on likely multi-user trust-model mismatch

2026-02-24 14:03:19 +00:00

sessions

…

shared

fix: scope Telegram RFC2544 SSRF exception to policy opt-in (#24982) (thanks @stakeswky)

2026-02-24 03:28:00 +00:00

signal

fix(security): harden account-key handling against prototype pollution

2026-02-24 01:09:31 +00:00

slack

refactor(security): unify dangerous name matching handling

2026-02-24 01:33:08 +00:00

telegram

Auto-reply: normalize stop matching and add multilingual triggers (#25103)

2026-02-24 01:07:25 -05:00

terminal

…

test-helpers

…

test-utils

…

tts

…

tui

test: fix post-merge config and tui command-handler tests

2026-02-24 04:38:21 +00:00

types

…

utils

…

web

fix(whatsapp): groupAllowFrom sender filter bypassed when groupPolicy is allowlist (#24670)

2026-02-24 04:20:30 +00:00

whatsapp

…

wizard

…

channel-web.ts

…

docker-image-digests.test.ts

…

docker-setup.test.ts

…

dockerfile.test.ts

…

entry.ts

…

extensionAPI.ts

…

globals.ts

…

index.ts

…

logger.test.ts

…

logger.ts

…

logging.ts

…

polls.test.ts

…

polls.ts

…

runtime.ts

…

utils.test.ts

…

utils.ts

…

version.test.ts

…

version.ts

…