matevip 83615593cd fix(tool/guard): harden workspace filesystem sandbox (#313) ... - Fail closed to a global fallback sandbox root when a conversation has no per-workspace base path, instead of leaving file/shell tools unconstrained - Refuse shell commands that delete the workspace root directory itself - Block workspace-boundary escapes at the policy layer before the approval prompt, not only at execution time - Approval bar now shows the actual command / target path being approved		2026-06-10 17:17:07 +08:00
..
src	fix(tool/guard): harden workspace filesystem sandbox (#313)	2026-06-10 17:17:07 +08:00
Dockerfile	fix(wiki): surface scan errors and fix Chinese path handling in Docker (#260)	2026-06-07 16:18:49 +08:00
pom.xml	fix(build): repackage server as executable jar	2026-05-18 10:21:42 +08:00
settings.xml	build(maven): declare US + CN repositories in pom.xml, drop opaque mirror	2026-04-25 09:56:17 +08:00