GrzegorzandClaude Opus 5.5 f8e043e8ca fix(approvals): seal approved bash/python and file writes in the agent workspace when no workspace is set (#6705) ...

#6683 made an exact approval seal a launch boundary (and a filesystem root)
in the request's workspace, but only when a workspace is bound. Agent mode
with no folder picked is the default, and there the approval still sealed
nothing, so "Allow" always ended in "Approved action has no sealed
process/job identity" (bash/python) or "Approved filesystem action has no
sealed resource identity" (write_file). In Docker every agent turn carries
the backend runtime context, so bash and write_file always ask for approval
and never ran.

With no workspace, seal the root in the agent workspace, which is where
agent_cwd() already runs bash/python in that case. Inherited (child)
authorities still cannot widen.

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-23 13:19:04 -06:00

..

agent_runtime

Merge commit 'refs/phase3/pre-ajax/publication-tip' into integration/pre-ajax-release

2026-10-05 15:59:59 +01:00

agent_tools

fix(security): add SSRF validation to manage_endpoints agent tool (#6327)

2026-10-23 13:18:59 -06:00

model_capability_readers

fix(models): bind provider detection to DNS labels (#5961)

2026-08-16 23:25:46 +01:00

search

refactor(search): make src analytics a service shim (#2264)

2026-06-04 18:57:24 +02:00

tools

fix(tasks): apply the admin-only action policy in manage_tasks (#6358)

2026-10-19 14:04:10 +01:00

action_intents.py

Squash Odysseus development history

2026-09-11 06:04:19 +00:00

agent_evidence.py

fix(effects): require evidence for external completion claims

2026-10-03 00:58:32 +01:00

agent_loop.py

feat(skills): remote-only tag hides skills from local endpoints (#6693)

2026-10-13 23:15:21 +01:00

agent_runs.py

Preserve preview harness, editor, email and task improvements

2026-10-01 01:34:26 +00:00

agent_trace.py

Consolidate Odysseus agent harness and tool contracts

2026-09-17 10:07:40 +00:00

ai_interaction.py

fix(security): deny generated-image access when ownership verification fails (#6268)

2026-10-14 12:18:50 +01:00

api_key_manager.py

fix: use atomic write in APIKeyManager.save() to prevent credential data loss (#4591) (#4597)

2026-06-23 23:28:53 +02:00

app_helpers.py

fix(runtime): enforce workspace confinement in one place

2026-10-01 19:45:59 +02:00

app_initializer.py

Merge commit from fork

2026-09-05 19:21:12 +02:00

assistant_log.py

Odysseus v1.0

2026-05-31 23:58:26 +09:00

attachment_refs.py

fix(stabilization): harden attachment lifecycle and agent guard signals (#5420)

2026-07-11 15:14:14 +01:00

auth_helpers.py

Merge commit 'refs/phase3/pre-ajax/publication-tip' into integration/pre-ajax-release

2026-10-05 15:59:59 +01:00

background_tool_jobs.py

Squash Odysseus development history

2026-09-11 06:04:19 +00:00

bg_jobs.py

chore(runtime): close Wave 3 review nits

2026-10-02 23:23:40 +01:00

bg_monitor.py

Merge frozen lab b1666951 (Wave 3) into Wave 4 effects provenance

2026-10-03 01:13:36 +01:00

browser_identity.py

chore(runtime): close Wave 3 review nits

2026-10-02 23:23:40 +01:00

browser_lifecycle.py

refactor(runtime): centralize verified process lifecycle

2026-10-02 01:27:08 +01:00

browser_observation.py

merge: reconcile PR 40 with current lab

2026-10-01 05:03:58 +01:00

builtin_actions.py

fix(reminders): retry failed note delivery through the configured channel (#6566)

2026-10-07 15:38:41 +02:00

builtin_mcp.py

Squash Odysseus development history

2026-09-11 06:04:19 +00:00

caldav_sync.py

CalDAV: close the DAVClient on sync and write-back paths (#4793)

2026-07-11 13:03:24 +01:00

caldav_writeback.py

CalDAV: close the DAVClient on sync and write-back paths (#4793)

2026-07-11 13:03:24 +01:00

chat_handler.py

Squash Odysseus development history

2026-09-11 06:04:19 +00:00

chat_helpers.py

Harden maintainer-preview harness and review fixes

2026-09-21 06:54:03 +00:00

chat_processor.py

Consolidate Odysseus agent harness and tool contracts

2026-09-17 10:07:40 +00:00

chatgpt_subscription.py

feat(ui): refine subscription model and usage controls

2026-09-22 13:12:19 +01:00

chroma_client.py

fix: ChromaDB unreachable blocks app startup for 30-60s (#326) (#476)

2026-06-01 22:22:41 +09:00

clean_agent_preview.py

fix(preview): return validator-authored tool errors to the model (#6554)

2026-10-07 12:52:39 +01:00

cleanup_service.py

fix(cleanup): preserve transcripts with stale message counts (#6610)

2026-10-14 11:21:53 +01:00

client_tool_contract.py

Squash Odysseus development history

2026-09-11 06:04:19 +00:00

config.py

fix(cleanup): update MODULE_SUMMARY and remove dead MEMORY_DOC paths (#4411) (#5160)

2026-07-11 17:06:19 +01:00

constants.py

Merge commit 'refs/phase3/pre-ajax/publication-tip' into integration/pre-ajax-release

2026-10-05 15:59:59 +01:00

containment_worker.py

feat(runtime): bind process and job resources to authority

2026-10-02 18:54:09 +01:00

containment.py

refactor(runtime): centralize verified process lifecycle

2026-10-02 01:27:08 +01:00

context_budget.py

Squash Odysseus development history

2026-09-11 06:04:19 +00:00

context_compactor.py

feat(settings): opt-in reasoning effort for utility model calls (#6572)

2026-10-13 21:02:16 +01:00

cookbook_serve_lifecycle.py

Polish mobile UI and editor workflows

2026-06-27 13:05:44 +00:00

copilot.py

fix(copilot): guard request_flags against a non-dict last message (#5274)

2026-07-08 23:57:23 +02:00

database.py

Odysseus v1.0

2026-05-31 23:58:26 +09:00

deep_research.py

Consolidate Odysseus agent harness and tool contracts

2026-09-17 10:07:40 +00:00

document_actions.py

Merge remote-tracking branch 'origin/dev'

2026-07-01 10:11:22 +00:00

document_processor.py

Consolidate Odysseus agent harness and tool contracts

2026-09-17 10:07:40 +00:00

email_attachment_text.py

Preserve preview harness, editor, email and task improvements

2026-10-01 01:34:26 +00:00

email_calendar_import.py

Consolidate Odysseus agent harness and tool contracts

2026-09-17 10:07:40 +00:00

email_reply_stream.py

Preserve preview harness, editor, email and task improvements

2026-10-01 01:34:26 +00:00

email_task_intent.py

Preserve preview harness, editor, email and task improvements

2026-10-01 01:34:26 +00:00

email_thread_parser.py

Ignore non-string email thread bodies (#1654)

2026-06-03 14:06:31 +09:00

embedding_lanes.py

fix(embeddings): survive numpy embeddings when restoring a reset lane (#3410)

2026-06-09 10:40:17 +02:00

embeddings.py

Harden maintainer-preview harness and review fixes

2026-09-21 06:54:03 +00:00

endpoint_resolver.py

fix(endpoints): accept registered canonical chat urls

2026-10-06 18:31:13 +01:00

event_bus.py

Consolidate Odysseus agent harness and tool contracts

2026-09-17 10:07:40 +00:00

exceptions.py

refactor(exceptions): dedupe src/exceptions via core re-export (#4785)

2026-06-24 16:50:07 +02:00

execution_capabilities.py

Squash Odysseus development history

2026-09-11 06:04:19 +00:00

fixture_email.py

Squash Odysseus development history

2026-09-11 06:04:19 +00:00

foreground_model_routing.py

feat(provider): support multiple ChatGPT subscriptions with usage

2026-09-22 13:12:19 +01:00

generated_images.py

fix(security): deny generated-image access when ownership verification fails (#6268)

2026-10-14 12:18:50 +01:00

generation_budget.py

Squash Odysseus development history

2026-09-11 06:04:19 +00:00

generation_sampling.py

Consolidate Odysseus agent harness and tool contracts

2026-09-17 10:07:40 +00:00

goal_based_extractor.py

fix(deep-research): wrap fetched webpage content in untrusted-context sandbox

2026-06-06 03:37:10 -06:00

host_docker_access.py

fix(docker): make host Docker socket opt-in (#4902)

2026-06-30 19:54:51 +02:00

image_model_ids.py

Preserve preview harness, editor, email and task improvements

2026-10-01 01:34:26 +00:00

index_walk.py

fix(rag): skip hidden and junk directories when indexing (#5633)

2026-07-23 14:18:08 +02:00

integrations.py

feat(runtime): bind remote and owned resources to authority

2026-10-02 03:00:46 +01:00

interactive_gate.py

fix: stop status polling from cancelling running scheduled tasks (#5789)

2026-08-14 10:47:47 +01:00

llm_core.py

feat(settings): opt-in reasoning effort for utility model calls (#6572)

2026-10-13 21:02:16 +01:00

mail_attachment_paths.py

fix(security): harden Python service boundaries

2026-10-06 03:16:54 +01:00

markitdown_runtime.py

Settings overhaul + UI polish pass

2026-06-10 15:15:13 +09:00

mcp_manager.py

feat(runtime): bind remote and owned resources to authority

2026-10-02 03:00:46 +01:00

mcp_oauth.py

fix(mcp): stop assuming http://localhost:7000 for the OAuth callback (#6032)

2026-08-15 23:09:01 -06:00

media_ingress.py

Squash Odysseus development history

2026-09-11 06:04:19 +00:00

memory_provider.py

fix(memory): don't let an unreadable store get overwritten with an empty one (#5831)

2026-08-06 02:33:50 -06:00

memory_vector.py

fix: split Chroma embedding lanes (#3046)

2026-06-06 03:17:19 -06:00

memory.py

fix(memory): don't let an unreadable store get overwritten with an empty one (#5831)

2026-08-06 02:33:50 -06:00

model_capabilities.py

feat(models): define capability schema and readers (#2739)

2026-07-18 09:40:58 +01:00

model_context.py

Consolidate Odysseus agent harness and tool contracts

2026-09-17 10:07:40 +00:00

model_discovery.py

fix(discovery): cache a successful but empty Tailscale lookup

2026-09-30 12:14:03 +02:00

model_pricing.py

Squash Odysseus development history

2026-09-11 06:04:19 +00:00

model_profiles.py

Preserve preview harness, editor, email and task improvements

2026-10-01 01:34:26 +00:00

office_doc.py

Consolidate Odysseus agent harness and tool contracts

2026-09-17 10:07:40 +00:00

optional_deps.py

fix(image): patch realesrgan torchvision compatibility (#4110)

2026-06-15 15:16:41 +09:00

outbound_fetch.py

Squash Odysseus development history

2026-09-11 06:04:19 +00:00

owner_identity.py

feat(auth): define Default/Local owner contract (#5795)

2026-08-15 20:27:26 +01:00

path_confinement.py

fix(runtime): enforce workspace confinement in one place

2026-10-01 19:45:59 +02:00

pdf_form_doc.py

Squash Odysseus development history

2026-09-11 06:04:19 +00:00

pdf_forms.py

Squash Odysseus development history

2026-09-11 06:04:19 +00:00

pdf_runtime.py

Show a clear message when PyMuPDF is missing

2026-06-01 18:27:17 +09:00

personal_docs.py

Squash Odysseus development history

2026-09-11 06:04:19 +00:00

preset_manager.py

Squash Odysseus development history

2026-09-11 06:04:19 +00:00

process_lifecycle.py

refactor(runtime): centralize verified process lifecycle

2026-10-02 01:27:08 +01:00

process_ownership.py

fix(runtime): enforce functional containment after closing execution bypasses (ODY-141)

2026-10-01 22:11:10 +01:00

process_reaper.py

perf(runtime): bound process launch validation cost

2026-10-02 23:22:41 +01:00

prompt_security.py

fix(agent): close untrusted-context gate bypasses

2026-08-15 01:58:32 +00:00

rag_manager.py

fix: resolve RAG manager search signature TypeError (#4994)

2026-07-03 15:07:16 +01:00

rag_singleton.py

feat(paths): abstract runtime path logic for frozen distribution packages (#969)

2026-06-15 17:44:10 +01:00

rag_vector.py

fix(rag): skip hidden and junk directories when indexing (#5633)

2026-07-23 14:18:08 +02:00

rate_limiter.py

Odysseus v1.0

2026-05-31 23:58:26 +09:00

readiness.py

fix(security): harden Python service boundaries

2026-10-06 03:16:54 +01:00

reminder_personas.py

Squash Odysseus development history

2026-09-11 06:04:19 +00:00

request_models.py

feat(ui): refine subscription model and usage controls

2026-09-22 13:12:19 +01:00

research_handler.py

Squash Odysseus development history

2026-09-11 06:04:19 +00:00

research_navigator.py

feat(browser): deterministic private_browser lifecycle (Wave 5A)

2026-10-01 20:59:27 +01:00

research_utils.py

Consolidate Odysseus agent harness and tool contracts

2026-09-17 10:07:40 +00:00

runtime_paths.py

feat(paths): abstract runtime path logic for frozen distribution packages (#969)

2026-06-15 17:44:10 +01:00

search_intent.py

Avoid invented publication windows on corrected version lookups

2026-09-17 20:53:01 +00:00

search_passages.py

Preserve all fetched search sources before transport truncation

2026-09-17 22:00:44 +00:00

secret_storage.py

refactor(constants): single source of truth for data dir (#3368)

2026-06-08 09:58:52 +02:00

service_health.py

feat(diagnostics): add consolidated service health endpoint for degraded-state reporting (#964)

2026-06-09 16:00:24 +01:00

session_actions.py

fix(sessions): keep fresh chats during auto tidy (#1871)

2026-06-09 01:06:20 +01:00

session_image_cleanup.py

fix(runtime): enforce workspace confinement in one place

2026-10-01 19:45:59 +02:00

session_search.py

Squash Odysseus development history

2026-09-11 06:04:19 +00:00

settings_scrub.py

fix(settings): scrub camelCase secret keys (#3707)

2026-06-11 12:53:33 +02:00

settings.py

feat(settings): opt-in reasoning effort for utility model calls (#6572)

2026-10-13 21:02:16 +01:00

skill_index.py

Squash Odysseus development history

2026-09-11 06:04:19 +00:00

task_action_policy.py

fix(tasks): gate cookbook serve task execution (#5235)

2026-07-05 13:19:04 +01:00

task_endpoint.py

feat(settings): opt-in reasoning effort for utility model calls (#6572)

2026-10-13 21:02:16 +01:00

task_scheduler.py

fix(scheduler): catch OverflowError on non-finite research settings

2026-10-19 14:40:27 +01:00

teacher_escalation.py

Merge commit 'refs/phase3/pre-ajax/publication-tip' into integration/pre-ajax-release

2026-10-05 15:59:59 +01:00

text_helpers.py

fix(security): harden Python service boundaries

2026-10-06 03:16:54 +01:00

text_scanning.py

fix(security): eliminate induced regex denial-of-service paths

2026-10-06 13:36:01 +01:00

theme_palette.py

Preserve preview harness, editor, email and task improvements

2026-10-01 01:34:26 +00:00

tls_overrides.py

Support extra CA bundle for private-CA LLM providers (#769)

2026-06-04 13:18:50 +01:00

tool_approval_scopes.py

Merge commit from fork

2026-09-05 19:20:49 +02:00

tool_approvals.py

fix(approvals): seal approved bash/python and file writes in the agent workspace when no workspace is set (#6705)

2026-10-23 13:19:04 -06:00

tool_capabilities.py

fix(security): keep the post-external-context approval gate on by default

2026-10-06 19:49:15 +02:00

tool_execution.py

fix(approvals): seal approved bash/python and file writes in the agent workspace when no workspace is set (#6705)

2026-10-23 13:19:04 -06:00

tool_implementations.py

Merge dev into main for testing

2026-06-28 14:07:23 +00:00

tool_index.py

feat(runtime): bind browser resources to authority

2026-10-02 18:54:09 +01:00

tool_parsing.py

fix(security): eliminate induced regex denial-of-service paths

2026-10-06 13:36:01 +01:00

tool_policy.py

Preserve preview harness, editor, email and task improvements

2026-10-01 01:34:26 +00:00

tool_routing_experiment.py

Harden maintainer-preview harness and review fixes

2026-09-21 06:54:03 +00:00

tool_schemas.py

Merge commit 'refs/phase3/pre-ajax/publication-tip' into integration/pre-ajax-release

2026-10-05 15:59:59 +01:00

tool_security.py

Merge commit 'refs/phase3/pre-ajax/publication-tip' into integration/pre-ajax-release

2026-10-05 15:59:59 +01:00

tool_types.py

Preserve preview harness, editor, email and task improvements

2026-10-01 01:34:26 +00:00

tool_utils.py

fix(stabilization): harden attachment lifecycle and agent guard signals (#5420)

2026-07-11 15:14:14 +01:00

topic_analyzer.py

Topics: hydrate session history before analysis

2026-06-02 20:44:27 +09:00

turn_contract.py

fix(security): eliminate induced regex denial-of-service paths

2026-10-06 13:36:01 +01:00

upload_handler.py

fix(security): harden Python service boundaries

2026-10-06 03:16:54 +01:00

upload_limits.py

Squash Odysseus development history

2026-09-11 06:04:19 +00:00

url_safety.py

fix(network): honor loopback policy for ipv6 localhost

2026-10-06 18:31:22 +01:00

url_security.py

Reapply "Merge branch 'main' of github.com:pewdiepie-archdaemon/odysseus"

2026-06-03 22:47:00 +09:00

user_time.py

Squash Odysseus development history

2026-09-11 06:04:19 +00:00

utility_effort.py

feat(settings): opt-in reasoning effort for utility model calls (#6572)

2026-10-13 21:02:16 +01:00

visual_report.py

Squash Odysseus development history

2026-09-11 06:04:19 +00:00

web_recovery.py

Squash Odysseus development history

2026-09-11 06:04:19 +00:00

webhook_manager.py

fix(security): pin webhook delivery to the SSRF-validated IP (DNS rebinding) (#5147)

2026-07-04 17:03:38 +01:00

workspace_paths.py

Merge commit 'refs/phase3/pre-ajax/publication-tip' into integration/pre-ajax-release

2026-10-05 15:59:59 +01:00

youtube_handler.py

fix(youtube): consolidate duplicate handler

2026-06-15 15:03:41 +09:00