kami 7d7e524756 feat(workspace): WorkspaceResolver trust pipeline + allowed_workspace_roots ...

Resolve a client-supplied workspace dir safely: canonicalize via toRealPath,
reject privileged locations, clamp to [tools] allowed_workspace_roots (permissive
when unset, logged), fall back to the boot default on any rejection. PathJail made
non-internal so the server can reuse its symlink-safe containment. (Axis 2 Phase A, task 4.)

2026-06-02 19:57:03 +04:00

..

cli

feat: undo session file mutations via server endpoint + CLI command

2026-05-31 11:01:05 +04:00

desktop

feat(router): implement Epic 14 — core:router module

2026-05-21 15:06:20 +04:00

server

feat(workspace): WorkspaceResolver trust pipeline + allowed_workspace_roots

2026-06-02 19:57:03 +04:00

tui

feat: convert router panel to conversation output log with user messages

2026-05-29 21:47:58 +04:00

tui-go

feat(tui): QA fixes + approval Ctrl keys, workflow focus, session UUID

2026-06-01 23:23:29 +04:00

worker

feat(router): implement Epic 14 — core:router module

2026-05-21 15:06:20 +04:00