arkonandClaude Opus 4.8 b84438a0aa fix(security): push-endpoint SSRF guard + tmux name validation; document tail-file roots ...

- M7 (SSRF): add isSafePushEndpoint (https-only; reject internal/loopback/link-local/metadata IPs incl. IPv4-mapped); enforce in PushSubscribeSchema and re-check before webpush.sendNotification. + unit test.
- M1 (command injection): validate tmux session names with isValidMuxName in sessionExists, killSession, and reconcileSessions before they reach a shell call site.
- M5: keep the intentional /var/log + ~/logs log-tail roots (a tested feature) and document the wider read scope in docs/security-architecture.md section 5 instead of dropping it.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-06-09 20:02:17 +02:00

..

agent-teams

refactor: restructure repo for cleaner GitHub landing page

2026-04-03 16:23:54 +02:00

archive

docs: archive stale findings docs (work completed)

2026-05-25 23:31:50 +02:00

images

chore: version packages

2026-03-12 23:59:16 +01:00

reports

docs: refresh README + document v0.9.5 security hardening

2026-06-09 04:35:29 +02:00

screenshots

refactor: SSE event handlers, LLM context optimization, @fileoverview docs (#29)

2026-03-03 22:40:18 +01:00

browser-testing-guide.md

chore: rename Claudeman to Codeman

2026-02-26 16:44:34 +01:00

claude-code-hooks-reference.md

docs: update all docs for security hardening, respawn fix, and test fixes

2026-01-24 16:26:31 +01:00

local-echo-overlay-plan.md

chore: version packages

2026-05-09 03:23:34 +02:00

mobile-testing-report.md

chore: bump version to 0.1444

2026-01-31 04:44:46 +01:00

opencode-integration.md

chore: rename Claudeman to Codeman

2026-02-26 16:44:34 +01:00

orchestrator-loop-architecture.md

feat: add Orchestrator Loop — phased plan execution with team agents

2026-03-21 07:20:18 +01:00

orchestrator-loop-plan.md

feat: add Orchestrator Loop — phased plan execution with team agents

2026-03-21 07:20:18 +01:00

orchestrator-loop-research.md

feat: add Orchestrator Loop — phased plan execution with team agents

2026-03-21 07:20:18 +01:00

qr-auth-plan.md

feat: implement QR code authentication for tunnel access

2026-03-01 06:05:26 +01:00

ralph-wiggum-guide.md

chore: rename Claudeman to Codeman

2026-02-26 16:44:34 +01:00

respawn-state-machine.md

chore: bump version to 0.1538

2026-02-18 12:51:35 +01:00

security-architecture.md

fix(security): push-endpoint SSRF guard + tmux name validation; document tail-file roots

2026-06-09 20:02:17 +02:00

terminal-anti-flicker.md

chore: rename Claudeman to Codeman

2026-02-26 16:44:34 +01:00

versioning-policy.md

docs(v1): add SECURITY.md + versioning policy; fix LICENSE and stale overlay gotcha

2026-06-09 19:05:50 +02:00