Vincent Koc
e4d80ed556
CI: restore main detect-secrets scan ( #38438 )
...
* Tests: stabilize detect-secrets fixtures
* Tests: fix rebased detect-secrets false positives
* Docs: keep snippets valid under detect-secrets
* Tests: finalize detect-secrets false-positive fixes
* Tests: reduce detect-secrets false positives
* Tests: keep detect-secrets pragmas inline
* Tests: remediate next detect-secrets batch
* Tests: tighten detect-secrets allowlists
* Tests: stabilize detect-secrets formatter drift
2026-03-07 10:06:35 -08:00
Peter Steinberger
6b6af1a64f
refactor(tests): dedupe web fetch and embedded tool hook fixtures
2026-03-03 01:37:12 +00:00
Peter Steinberger
345abf0b20
fix: preserve dns pinning for strict web SSRF fetches
2026-03-02 15:54:46 +00:00
Peter Steinberger
46003e85bf
fix: unify web tool proxy path ( #27430 ) (thanks @kevinWangSheng)
2026-02-26 11:32:43 +00:00
Peter Steinberger
23598e0e3a
test: prune redundant abort case and speed stream cap test
2026-02-23 05:06:34 +00:00
Peter Steinberger
48f327c206
test: consolidate redundant suites and speed attachment tests
2026-02-23 04:55:43 +00:00
Peter Steinberger
86a8b65e9d
test: consolidate redundant suites and speed up timers
2026-02-23 04:44:42 +00:00
Peter Steinberger
304eef575b
test: reclassify sandbox and web/image tool suites as unit tests
2026-02-22 10:40:40 +00:00
Peter Steinberger
9131b22a28
test: migrate suites to e2e coverage layout
2026-02-13 14:28:22 +00:00
Peter Steinberger
da55d70fb0
fix(security): harden untrusted web tool transcripts
2026-02-13 00:46:56 +01:00
Peter Steinberger
d3ba57b7d7
feat: add configurable web_fetch maxChars cap
2026-02-03 18:03:53 -08:00
VACInc
b796f6ec01
Security: harden web tools and file parsing ( #4058 )
...
* feat: web content security wrapping + gkeep/simple-backup skills
* fix: harden web fetch + media text detection (#4058 ) (thanks @VACInc)
---------
Co-authored-by: VAC <vac@vacs-mac-mini.localdomain >
Co-authored-by: Peter Steinberger <steipete@gmail.com >
2026-02-01 15:23:25 -08:00
cpojer
f06dd8df06
chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.
2026-02-01 10:03:47 +09:00
cpojer
5ceff756e1
chore: Enable "curly" rule to avoid single-statement if confusion/errors.
2026-01-31 16:19:20 +09:00
Josh Palmer
c41ea252b0
fix flaky web-fetch tests + lock cleanup
...
What:
- stub resolvePinnedHostname in web-fetch tests to avoid DNS flake
- close lock file handles via FileHandle.close during cleanup to avoid EBADF
Why:
- make CI deterministic without network/DNS dependence
- prevent double-close errors from GC
Tests:
- pnpm vitest run --config vitest.unit.config.ts src/agents/tools/web-tools.fetch.test.ts src/agents/session-write-lock.test.ts (failed: missing @aws-sdk/client-bedrock)
2026-01-29 11:05:11 +01:00
Seb Slight
2f6b5ffdfe
Web: trim HTML error bodies in web_fetch ( #1193 )
...
* Web: trim HTML error bodies in web_fetch
* fix: trim web_fetch HTML error bodies (#1193 ) (thanks @sebslight)
---------
Co-authored-by: Sebastian Slight <sbarrios93@gmail.com >
Co-authored-by: Peter Steinberger <steipete@gmail.com >
2026-01-19 00:24:16 +00:00
Peter Steinberger
c54c665f97
feat: enhance web_fetch fallbacks
2026-01-17 00:00:49 +00:00