picoclaw/pkg/config
I Putu Eddy Irawan 81aeaf1ca0 fix: address Copilot review feedback on PR #932
- Deny regex: expand left boundary to match shell separators (;, &&, ||)
  to prevent bypass via chained commands like ";format c:"
- Path regex: add "." to initial char class to catch hidden dirs (/.ssh),
  add "=" to left boundary to catch flag-attached paths (--file=/etc/passwd)
- Add test: ModelName must match user model for GetModelConfig lookup
- Add test: stripSystemParts preserves reasoning_content in wire format
- Add test: forceCompression avoids orphaning tool result messages
- Add test: deny pattern blocks disk-wiping commands with shell separators
  while allowing legitimate --format flags

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-01 09:08:11 +07:00
..
config.go fix(config): keep empty agents.defaults.model in saved config 2026-02-28 00:18:10 +08:00
config_test.go fix(config): keep empty agents.defaults.model in saved config 2026-02-28 00:18:10 +08:00
defaults.go Merge branch 'refactor/channel-system' into main 2026-02-27 20:04:08 +08:00
migration.go fix: migration ModelName, reasoning_content, shell regex, loop boundary 2026-03-01 08:44:15 +07:00
migration_test.go fix: address Copilot review feedback on PR #932 2026-03-01 09:08:11 +07:00
model_config_test.go fix(providers): support per-model request_timeout in model_list (#733) 2026-02-26 19:08:19 +11:00