Commit Graph

34 Commits

Author SHA1 Message Date
David Blass bc28c658f2 harden sandbox escape vectors for bash disabled/restricted modes (#257)
* harden sandbox escape vectors for bash disabled/restricted modes

block git config injection (-c flag as subcommand), dangerous subcommands
(config, submodule, rebase, bisect), code-executing arg flags (--exec,
--extcmd), .gitattributes/.gitmodules writes, and package lifecycle scripts.
add retry logic to test runner for transient failures. add security unit
tests and adhoc attack tests.

Co-authored-by: Cursor <cursoragent@cursor.com>

* only filter subcommands in nobash, remove nobash from ui

* use regex matching

* iterate on tests

* simplify githooks

---------

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-02-11 02:02:41 +00:00
Colin McDonnell f37d02b292 upgrade Claude to Opus 4.6 with effort levels (#256)
* upgrade Claude to Opus 4.6 with --effort max for --max mode

- mini: haiku → sonnet
- auto: opusplan → opus (Opus 4.6)
- max: opus → opus + --effort max (Opus 4.6 max effort)
- bump @anthropic-ai/claude-agent-sdk 0.2.7 → 0.2.39

Co-authored-by: Cursor <cursoragent@cursor.com>

* update action lockfile for claude-agent-sdk 0.2.39

Co-authored-by: Cursor <cursoragent@cursor.com>

* add tool_use_summary handler for SDK 0.2.39

Co-authored-by: Cursor <cursoragent@cursor.com>

* integrate gpt-5.3-codex with runtime model availability detection

checks GET /v1/models at agent start to determine if gpt-5.3-codex is
available for the API key, falling back to gpt-5.2-codex when it isn't.
model resolution runs concurrently with CLI install for zero added latency.
also bumps @openai/codex-sdk from 0.80.0 to 0.98.0.

Co-authored-by: Cursor <cursoragent@cursor.com>

---------

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-02-10 23:34:13 +00:00
David Blass 19df8372cd add file_read/file_write tools, sandbox tests, CI improvements (#239)
* migrate to flags

* init

* iterate on file write lockdown tests

* improve ci

* fix lockfile

* fix typecheck

* fix lint

* improve pushRestricted

* ok

* fix more

* ok

* remove process.env spreading rule

Co-authored-by: Cursor <cursoragent@cursor.com>

* enhanced fs rw tools

---------

Co-authored-by: Cursor <cursoragent@cursor.com>
Co-authored-by: Colin McDonnell <colinmcd94@gmail.com>
2026-02-10 06:35:47 +00:00
Colin McDonnell f77fecc2a0 Update 2026-01-28 07:47:52 +00:00
Mateusz Burzyński 071e885d63 Add upload tool and related APIs (#187)
* Add utils for r2 upload

* Add the tool and new routes

* fix auth issue

* sign headers

* add comment

* use our own API key to auth signed uploads

* Restructure things slightly

* tweak

* tweak

* add comments

* tweak

* revert a thing

* twaek

* drop mime type filtering

* new incarnation of mime type filtering

* jsut allow all octet-streams

* simplify further

* tweak

* update lockfile

---------

Co-authored-by: Colin McDonnell <colinmcd94@gmail.com>
2026-01-28 05:34:58 +00:00
Colin McDonnell 57895ae342 Update lock 2026-01-22 06:15:49 +00:00
Robin Tail cfd7f45db9 fix: Update lock file in the action dir due to #118. 2026-01-20 06:47:27 +00:00
David Blass 1daf1571cf add macros (#68) 2026-01-14 22:52:54 +00:00
Colin McDonnell 5604cf1868 Clean up submodule stuff 2026-01-13 22:05:24 +00:00
Robin Tail 900cf49871 fix(deps): Upgrading esbuild to 0.27.2 (deduplication). 2026-01-13 13:30:10 +01:00
Robin Tail c89f1b9537 Establishing unit tests using vitest. 2026-01-12 15:05:30 +01:00
Robin Tail ff913feb3c Upgrading fastmcp ad claude-agent-sdk for using Zod 4. 2026-01-08 13:29:19 +01:00
Mateusz Burzyński a483711fee Auto-retry ratelimited octokit requests 2026-01-07 17:17:20 +01:00
David Blass d074ece31b iterate on prep 2025-12-16 17:47:37 -05:00
David Blass 7959a51995 update deps 2025-12-11 15:08:10 -05:00
Colin McDonnell dcbac16663 Tweak 2025-12-10 15:02:15 -08:00
David Blass 02ca5bbc71 improve missing api key logging 2025-12-05 14:57:48 -05:00
Colin McDonnell 06a19567c0 Switch to payload 2025-11-18 23:15:44 -08:00
David Blass e90940e901 update lockfile from husky 2025-11-13 16:13:00 -05:00
David Blass b448787f24 update lock 2025-11-06 17:38:49 -05:00
David Blass acb06634be rely primarily on inline pr feedback 2025-10-31 04:04:06 -04:00
David Blass 434458a068 update lockfile 2025-10-31 01:07:36 -04:00
David Blass bb78e5f94b update lockfile 2025-10-17 22:27:24 -04:00
ssalbdivad 7f1566d9c2 update lockfile 2025-10-15 17:25:54 -04:00
David Blass 2c856e3337 remove husky 2025-10-13 17:04:59 -04:00
David Blass 03810d574e bump version 2025-10-13 14:14:52 -04:00
David Blass 16e04e7152 bump version 2025-10-08 16:49:12 -04:00
David Blass d3d2dad025 no-frozen-lockfile 2025-10-08 16:46:52 -04:00
Colin McDonnell 5c8b03a427 Lock 2025-09-10 00:56:50 -07:00
Colin McDonnell 087709f4c7 Add lock 2025-09-09 16:55:45 -07:00
Colin McDonnell 5fef548cee Drop lock 2025-09-09 16:26:18 -07:00
Colin McDonnell 9239b40372 Set up husky 2025-08-27 18:13:10 -07:00
Colin McDonnell 3d47375b24 Update lockfile 2025-08-27 18:06:59 -07:00
Colin McDonnell f42dc28da8 chore: prepare action for v0.0.1 release
- Update action.yml to point to dist/index.js
- Add built distribution files
- Update package.json and build configuration
2025-08-27 17:47:25 -07:00