c17c2768eb
Implemented the next parity slice.
...
New runtime/code:
- src/ask_user_runtime.py
- src/team_runtime.py
New real tools in src/agent_tools.py:
- ask_user_question
- team_create
- team_delete
- team_list
- team_get
- send_message
- team_messages
- notebook_edit
2026-04-07 03:48:20 +02:00
a5629295ac
Implemented the next parity slice.
...
New runtime/code:
- src/ask_user_runtime.py
- src/team_runtime.py
New real tools in src/agent_tools.py:
- ask_user_question
- team_create
- team_delete
- team_list
- team_get
- send_message
- team_messages
- notebook_edit
2026-04-07 02:51:30 +02:00
696f272b88
Add comprehensive security tests for agent_tools.py
...
- Add 26 tests covering _resolve_path, _ensure_shell_allowed, and
_is_sensitive_env_var across path traversal, destructive command
blocking, and secret-name detection.
- Fix bug in _ensure_shell_allowed: regex patterns for chmod -R and
chown -R used uppercase -R but the command is lowered before matching,
so these patterns never matched. Changed to lowercase -r.
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com >
Co-authored-by: abdoelsayed2016 <27821589+abdoelsayed2016@users.noreply.github.com >
2026-04-05 16:14:22 +00:00
94cf05abf9
improve env variable filtering with keyword-based matching
...
Use keyword-based matching (SECRET, TOKEN, PASSWORD, etc.) instead of
prefix-based matching for more comprehensive sensitive env var filtering.
Agent-Logs-Url: https://github.com/HarnessLab/claw-code-agent/sessions/94dfb41f-57dd-48ea-ab0d-d2f2249ef950
Co-authored-by: abdoelsayed2016 <27821589+abdoelsayed2016@users.noreply.github.com >
2026-04-05 11:04:41 +00:00
93de5ca4f8
fix: address security vulnerabilities and code quality weaknesses
...
- Fix path traversal in _glob_search by validating resolved paths stay within workspace root
- Fix ReDoS vulnerability in _grep_search by adding regex compilation error handling
- Replace 6 assert statements with explicit validation (assertions are disabled with -O flag)
- Replace bare except Exception with specific exception types (OSError, KeyError, ValueError)
- Block file:// scheme in web_fetch to prevent SSRF attacks
- Filter sensitive environment variables from subprocess execution
- Update test to verify file:// scheme rejection
Agent-Logs-Url: https://github.com/HarnessLab/claw-code-agent/sessions/94dfb41f-57dd-48ea-ab0d-d2f2249ef950
Co-authored-by: abdoelsayed2016 <27821589+abdoelsayed2016@users.noreply.github.com >
2026-04-05 11:03:09 +00:00
783145fe6a
add mcp and online search
2026-04-05 02:35:49 +02:00
3f31cee395
add claw-code-agent/src/plan_runtime.py and claw-code-agent/src/background_runtime.py. The agent now has a real
...
persistent plan runtime with update_plan, plan_get, and plan_clear, plus plan-to-task sync wired through claw-code-agent/src/
agent_tools.py, claw-code-agent/src/agent_runtime.py, claw-code-agent/src/agent_context.py, claw-code-agent/src/agent_prompting.py, and claw-code-agent/src/
agent_slash_commands.py. New local plan slash commands are /plan and /planner.
2026-04-03 18:31:25 +02:00
4de3da10e4
add test guide cases
2026-04-03 16:50:19 +02:00
5ad10c660c
add File-history snapshot ids and replay summaries for file edits
2026-04-02 22:19:32 +02:00
9d90d6a10a
add ىثص ؤخقث شلثىف قعىفهةث
2026-04-02 22:08:24 +02:00
2c6763eb08
add new agent components
2026-04-02 21:12:48 +02:00
27aff5611b
first commit
2026-04-01 21:51:49 +02:00
Abdelrahman Abdallah