All pull requests

Pull requests

• fix(engine): authorize managed-agent calls before creating conversations; copy trigger context per request

  #868·ginccc opened Sep 27, 2026Member·

  ·
  10

• fix(manager): import dialog drops remote agents when the sync source changes

  #867·ginccc opened Sep 27, 2026Member·

  ·
  11

• fix(manager): wait for sonner's unmount timer before a test file ends

  #866·ginccc opened Sep 27, 2026Member·

  ·
  2

• fix(infra): scope deployment surfaces and gate the release pipeline

  #865·ginccc opened Sep 26, 2026Member·

  ·
  4

• fix(security): scrub secret input and harden UI CSP and output rendering

  #864·ginccc opened Sep 26, 2026Member·

  ·
  4

• fix(security): harden vault checksum, master-key gate, GCM AAD and leak paths

  #863·ginccc opened Sep 26, 2026Member·

  ·
  4

• fix(security): bound outbound downloads and close SSRF/redirect/ZIP gaps

  #862·ginccc opened Sep 26, 2026Member·

  ·
  4

• fix(security): bind Slack HITL approvals and namespace channel identities

  #861·ginccc opened Sep 26, 2026Member·

  ·
  4

• fix(security): close authorization and IDOR gaps across REST and tools

  #860·ginccc opened Sep 26, 2026Member·

  ·
  8

• fix(security): stop trusting engine-reserved context keys from clients

  #859·ginccc opened Sep 26, 2026Member·

  ·
  2

• fix(templating): render runtime templates with a restricted engine and stop templating data

  #858·ginccc opened Sep 26, 2026Member·

  ·
  4

• chore(security): allowlist gitleaks false positives of PRs #835, #838, #840, #847

  #857·ginccc opened Sep 26, 2026Member·

  ·
  10

• fix(chat-ui): streaming contract, environment, secret input and rendering

  #856·ginccc opened Sep 26, 2026Member·

  ·
  30

• fix(manager): app shell — unsaved-changes guard, per-route error boundaries, auth refresh

  #855·ginccc opened Sep 26, 2026Member·

  ·
  57

• fix(manager): operations pages that misreported or acted on stale state

  #854·ginccc opened Sep 26, 2026Member·

  ·
  16

• fix(manager): editors no longer change or drop config data silently

  #853·ginccc opened Sep 26, 2026Member·

  ·
  8

• fix(manager): align the API client and MSW mocks with the backend contract

  #852·ginccc opened Sep 26, 2026Member·

  ·
  11

• fix(manager): Workforce and group discussions stop, hand over and save what was entered

  #851·ginccc opened Sep 26, 2026Member·

  ·
  39

• fix(manager): move onto the saved version and make cascade saves safe to retry

  #850·ginccc opened Sep 26, 2026Member·

  ·
  16

• fix(manager): bind chat to its transcript, honour secret input, classify refused sends

  #849·ginccc opened Sep 26, 2026Member·

  ·
  24

• fix(manager): secret overwrites, unbound approvals, unverified audit shield

  #848·ginccc opened Sep 26, 2026Member·

  ·
  10

• fix(deploy): no shipped deployment logs straight in or reaches a database from any pod

  #847·ginccc opened Sep 26, 2026Member·

  ·
  15

• chore(ci): gate docker on the auth tier, pin and verify Node, harden the changelog guard, lint the Chat UI

  #846·ginccc opened Sep 26, 2026Member·

  ·
  10

• fix(rag): ingestion keeps what exists, removes what is gone, bounds hostile files and request bodies

  #845·ginccc opened Sep 26, 2026Member·

  ·
  9

• fix(backup,datastore): ZIP import limits, version-checked writes and deletes, merge rollback, safe regex filters, migration completion

  #844·ginccc opened Sep 26, 2026Member·

  ·
  16