Hongming Wang c02cb0e1b6 review: defer forward-time URL re-validation to follow-up (#2316) ... Self-review found the original draft of this PR added forward-time validateAgentURL() as defense-in-depth — paranoia layer on top of the existing register-time gate. The validator unconditionally blocks loopback (127.0.0.1/8), which makes httptest-based proxy tests impossible without an env-var hatch I'd rather not add to a security- critical path on first pass. Trust note kept inline pointing at the upstream gate + tracking issue so the gap is explicit, not invisible. Refs #2312.		2026-04-29 14:33:41 -07:00
..
artifacts	chore: sync staging to main — 1188 commits, 5 conflicts resolved (#1743)	2026-04-23 18:30:18 +00:00
bundle	fix(platform): unblock SaaS workspace registration end-to-end	2026-04-21 03:06:46 -07:00
channels	feat(channels): first-class Lark/Feishu support via schema-driven config	2026-04-24 11:51:15 -07:00
crypto	chore: open-source restructure — rename dirs, remove internal files, scrub secrets	2026-04-18 00:24:44 -07:00
db	test: schema_migrations tracking — 4 cases (first boot, re-boot, mixed, down.sql filter)	2026-04-18 11:52:27 -07:00
envx	chore: open-source restructure — rename dirs, remove internal files, scrub secrets	2026-04-18 00:24:44 -07:00
events	test(handlers): introduce events.EventEmitter interface (#1814 partial)	2026-04-26 09:05:52 -07:00
handlers	review: defer forward-time URL re-validation to follow-up (#2316)	2026-04-29 14:33:41 -07:00
imagewatch	feat(workspace-server): GHCR digest watcher closes runtime CD chain (#2114)	2026-04-26 13:36:26 -07:00
metrics	chore: open-source restructure — rename dirs, remove internal files, scrub secrets	2026-04-18 00:24:44 -07:00
middleware	merge: resolve staging conflicts (a2a_proxy + workspace_crud)	2026-04-26 10:43:22 -07:00
models	feat(runtime): adapter-declared idle_timeout_override end-to-end	2026-04-26 22:38:01 -07:00
orgtoken	fix: F1085 rm scope concat + GH#756 ValidateToken terminal guard + CI test fixes	2026-04-24 07:16:54 +00:00
plugins	chore: open-source restructure — rename dirs, remove internal files, scrub secrets	2026-04-18 00:24:44 -07:00
provisioner	fix(provisioner): treat "removal already in progress" as no-op success	2026-04-27 13:25:32 -07:00
registry	fix(orphan-sweeper): close TOCTOU race with issueAndInjectToken on restart	2026-04-27 17:28:50 -07:00
router	merge: resolve staging conflicts (a2a_proxy + workspace_crud)	2026-04-26 10:43:22 -07:00
scheduler	feat(runtime): native_scheduler skip — primitive #3 of 6	2026-04-26 22:47:00 -07:00
supervised	chore: open-source restructure — rename dirs, remove internal files, scrub secrets	2026-04-18 00:24:44 -07:00
ws	chore: open-source restructure — rename dirs, remove internal files, scrub secrets	2026-04-18 00:24:44 -07:00
wsauth	feat(wsauth): platform→workspace inbound secret (RFC #2312, PR-A)	2026-04-29 14:09:33 -07:00