molecule-ai[bot] fde90efde5 fix(security): cap discord error response body read at 4096 bytes ... Unbounded io.ReadAll on the Discord webhook error response body was a LOW OOM risk: a malicious gateway or misconfigured proxy could return a multi-MB body and exhaust agent memory. Cap with io.LimitReader(resp.Body, 4096) — error messages are always short; any extra content is irrelevant noise. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>		2026-04-17 10:46:09 +00:00
..
artifacts	fix(platform): address security review findings on CF Artifacts (#641)	2026-04-17 06:39:47 +00:00
bundle
channels	fix(security): cap discord error response body read at 4096 bytes	2026-04-17 10:46:09 +00:00
crypto
db	fix(liveness): raise workspace TTL 60s → 180s to survive Opus synthesis (#386)	2026-04-16 00:05:45 -07:00
envx
events	feat(platform): AG-UI compatible SSE endpoint for streaming agent events (#590)	2026-04-17 05:16:51 +00:00
handlers	fix(security): Ed25519 signature verification for Discord webhooks + strip token from error chain	2026-04-17 10:36:51 +00:00
metrics
middleware	Merge pull request #629 from Molecule-AI/fix/issue-614-security-headers	2026-04-17 06:18:25 +00:00
models	fix(gate-1): resolve merge conflicts with main	2026-04-17 06:27:14 +00:00
plugins
provisioner	fix: restore cp_provisioner.go updated for EC2 backend	2026-04-16 14:25:43 -07:00
registry
router	feat(platform): Cloudflare Artifacts demo integration (#595)	2026-04-17 06:28:58 +00:00
scheduler
supervised
ws
wsauth	fix(security): close WorkspaceAuth fail-open on non-existent workspace IDs (#318)	2026-04-15 21:02:29 -07:00