Repository navigation

fix: 77 validated findings from the 2026-10-13 bug hunt - #322

Merged

jkyberneees merged 122 commits into

mainfrom

fix/bughunt-2026-10-13

Oct 14, 2026

Merged

fix: 77 validated findings from the 2026-10-13 bug hunt#322
jkyberneees merged 122 commits into
mainfrom
fix/bughunt-2026-10-13

Commits on Oct 14, 2026
- fix(loop): args_summary argv0 never reports subshell or substitution bodies
  
  jkyberneees
  and
  claude
  committed
  1e4fb9c
- fix(loop): rune-aligned cuts in progress summary, tool-output compression and plan titles
  
  jkyberneees
  and
  claude
  committed
  450004e
- fix(loop): drop superseded memory blocks on resume and cap Anthropic cache breakpoints
  
  jkyberneees
  and
  claude
  committed
  632494f
- fix(llmclient): deliver corrective system messages after a draft as a user turn on Anthropic
  
  jkyberneees
  and
  claude
  committed
  d9c09f0
- fix(loop): argv0 keeps the program name before an unquoted operator
  
  jkyberneees
  and
  claude
  committed
  ca045e9
- fix(loop): argv0 is empty when an assignment is cut by an unquoted operator
  
  jkyberneees
  and
  claude
  committed
  2d0497e
- fix(telegram): /stop and /new release a pending clarify or approval prompt
  
  jkyberneees
  and
  claude
  committed
  15d4e51
- fix(telegram): scope media paths case-insensitively
  
  jkyberneees
  and
  claude
  committed
  103d7c9
- fix(telegram): /resume drops the previous conversation's read ledger
  
  jkyberneees
  and
  claude
  committed
  fb3880a
- fix(telegram): /new and /resume reset off the update loop
  
  jkyberneees
  and
  claude
  committed
  66f7009
- fix(telegram): cancelled approval prompts lose their buttons
  
  jkyberneees
  and
  claude
  committed
  fa818f8
- fix(telegram): fold media path case only on case-insensitive platforms
  
  jkyberneees
  and
  claude
  committed
  a90fa7c
- fix(serve): bound REST run event tail by bytes and clip recorded frame values
  
  jkyberneees
  and
  claude
  committed
  07ecbe8
- fix(serve): refuse unknown session ids on POST /api/prompt through the throttled lookup path
  
  jkyberneees
  and
  claude
  committed
  780feb2
- fix(serve): clamp approval_timeout_seconds before converting to a Duration
  
  jkyberneees
  and
  claude
  committed
  2903af1
- fix(serve): count every started prompt that fails as prompts_failed
  
  jkyberneees
  and
  claude
  committed
  bbd284a
- fix(serve): delete the freshly created upload session when an upload is rejected
  
  jkyberneees
  and
  claude
  committed
  7d7f765
- fix(serve): heartbeat pong reports the connection's current model
  
  jkyberneees
  and
  claude
  committed
  0b63f9c
- fix(serve): reject never-matching cron in /api/schedules/preview
  
  jkyberneees
  and
  claude
  committed
  9203a44
- fix(serve): accept bracketed IPv6 loopback Host without a port
  
  jkyberneees
  and
  claude
  committed
  9ac25aa
- docs(serve): document run event tail byte bounds and unknown-session refusal
  
  jkyberneees
  and
  claude
  committed
  06e64a0
- fix(serve): clip run event strings at rune boundaries and add clip/preview tests
  
  jkyberneees
  and
  claude
  committed
  ca4f72a
- fix(subagent): grandchildren inherit the spawning sub-agent's risk cap
  
  jkyberneees
  and
  claude
  committed
  d96b0a9
- fix(audit): divergence heuristic recognises bare IP endpoints
  
  jkyberneees
  and
  claude
  committed
  2c3c1d4
- fix(mcpclient): drop the Bearer token on cross-origin redirects
  
  jkyberneees
  and
  claude
  committed
  d8a949b
- fix(mcpclient): registered MCP tool names are unambiguous
  
  jkyberneees
  and
  claude
  committed
  04f11aa
- docs: MCP redirect/name rules, delegation risk cap, audit IP resources
  
  jkyberneees
  and
  claude
  committed
  cda4d92
- fix(subagent): parent risk cap also bounds profile allowlists, lockdown and missing caps
  
  jkyberneees
  and
  claude
  committed
  32932d2
- fix(mcpclient): redirect origin check normalises default ports
  
  jkyberneees
  and
  claude
  committed
  f37322d
- fix(mcp): test the duplicate registered-name error and document suffixed names
  
  jkyberneees
  and
  claude
  committed
  bb4e8d3
- fix(memory): consolidate fits an embedder on the live corpus
  
  jkyberneees
  and
  claude
  committed
  c90dc35
- fix(memory): maintenance open no longer rewrites user_model.json
  
  jkyberneees
  and
  claude
  committed
  c6c8c0e
- fix(cli): memory extended consolidate/nudges use the memory LLM
  
  jkyberneees
  and
  claude
  committed
  75a7655
- fix(cli): escape follow-up suggestions before printing
  
  jkyberneees
  and
  claude
  committed
  1daada4
- fix(memory): backend-dependent consolidate threshold, bounded context-aware embedding
  
  jkyberneees
  and
  claude
  committed
  95fa4ed
- fix(tools): protect the Telegram daily token budget counter as a trust anchor
  
  jkyberneees
  and
  claude
  committed
  fadae75
- fix(web_search): do not echo base_url in model-facing errors
  
  jkyberneees
  and
  claude
  committed
  b8c2f3c
- fix(vision): restrict ffprobe/ffmpeg video input to file protocol and media demuxers
  
  jkyberneees
  and
  claude
  committed
  f2758e3
- fix(session): treat patch as an episode path tool
  
  jkyberneees
  and
  claude
  committed
  9b47844
- fix(artifact): accept artifacts under a filesystem-root artifact root
  
  jkyberneees
  and
  claude
  committed
  67f89a3
- test(memory): give the patch provenance fixture real workspace args
  
  jkyberneees
  and
  claude
  committed
  3f38bf8
- fix(tools): file tools and path classifier share one ~/.odek anchor table
  
  jkyberneees
  and
  claude
  committed
  f8e1ea6
- fix(web_search): report a cause class instead of the dial error
  
  jkyberneees
  and
  claude
  committed
  c5446bf
- fix(config): ignore unpriced project model that would disable the global cost cap
  
  jkyberneees
  and
  claude
  committed
  0f47149
- fix(agent): close an unterminated HTML comment before appending the security pillar
  
  jkyberneees
  and
  claude
  committed
  d29b720
- fix(agent): neutralise look-alike close tags in the default untrusted wrapper
  
  jkyberneees
  and
  claude
  committed
  e489730
- fix(redact): redact password-only redis URLs and the rediss scheme
  
  jkyberneees
  and
  claude
  committed
  3cce93d
- fix(redact): redact driver-qualified database URLs
  
  jkyberneees
  and
  claude
  committed
  4de1b8e
- fix(redact): redact Slack and Discord incoming-webhook URLs
  
  jkyberneees
  and
  claude
  committed
  8b345f3
- fix(redact): redact the password of curl -u/--user USER:PASSWORD
  
  jkyberneees
  and
  claude
  committed
  9095d38
- fix(redact): redact session values on Cookie and Set-Cookie header lines
  
  jkyberneees
  and
  claude
  committed
  4116269
- fix(redact): judge bare token/secret values before a JSON-escaped newline
  
  jkyberneees
  and
  claude
  committed
  96aca4d
- test(redact): over-redaction corpus for webhook and database URLs
  
  jkyberneees
  and
  claude
  committed
  43ae3e1
- fix(config): gate the project model on the effective cost cap from every operator source
  
  jkyberneees
  and
  claude
  committed
  c389b22
- fix(redact): scope curl credential rule, redact only values for cookies and webhooks
  
  jkyberneees
  and
  claude
  committed
  d4f2ce8
- fix(agent): close every unterminated raw HTML construct before the security pillar
  
  jkyberneees
  and
  claude
  committed
  7f30a3d
- fix(redact): tokenise curl/wget/HTTPie commands shell-style and match cookie names by segment
  
  jkyberneees
  and
  claude
  committed
  3b42aef
- fix(agent): close unterminated HTML declarations and ignore raw HTML inside code fences
  
  jkyberneees
  and
  claude
  committed
  96cf30d
- fix(cli): session cleanup and trim reject malformed numbers
  
  jkyberneees
  and
  claude
  committed
  7152a31
- fix(cli): session show/list escape terminal controls and number turns from one
  
  jkyberneees
  and
  claude
  committed
  76a8b48
- fix(schedule): escape terminal controls in stdout and log delivery
  
  jkyberneees
  and
  claude
  committed
  576e663
- fix(repl): /jobs redacts and escapes commands and fixes the runtime unit
  
  jkyberneees
  and
  claude
  committed
  ce96176
- fix(init): odek init never writes through a project odek.json symlink
  
  jkyberneees
  and
  claude
  committed
  7f6c828
- fix(repl): history persists on first run, keeps multi-line entries and never follows a symlink
  
  jkyberneees
  and
  claude
  committed
  71007e7
- fix(repl): page and rxvt home/end keys no longer leak a tilde into the prompt
  
  jkyberneees
  and
  claude
  committed
  ac2f32f
- fix(repl): bracketed paste keeps tabs and ignores pasted control keys
  
  jkyberneees
  and
  claude
  committed
  7604096
- fix(schedule): next <expr> previews in the configured timezone
  
  jkyberneees
  and
  claude
  committed
  addbb4b
- fix(maintenance): media sweep resolves a symlinked media root and never removes it
  
  jkyberneees
  and
  claude
  committed
  2efb162
- docs: ops fixes (session numbers, init symlink, terminal escaping, schedule next zone)
  
  jkyberneees
  and
  claude
  committed
  817e168
- fix(repl): keep Ctrl+C and Ctrl+D working inside a bracketed paste
  
  jkyberneees
  and
  claude
  committed
  10ffc5b
- fix(maintenance): media sweep never follows a symlinked media root
  
  jkyberneees
  and
  claude
  committed
  6978449
- fix(cli): session cleanup bounds days so the cutoff cannot overflow
  
  jkyberneees
  and
  claude
  committed
  f651f23
- refactor(cli): use danger.SanitizeInline/SanitizeForDisplay for CLI output escaping
  
  jkyberneees
  and
  claude
  committed
  ff357bd
- fix(repl): history files carry a format marker so legacy files load verbatim
  
  jkyberneees
  and
  claude
  committed
  9c687b0
- fix(init): init --global --force writes through the operator's linked config atomically
  
  jkyberneees
  and
  claude
  committed
  8567817
- fix(repl): bracketed paste drops control bytes and C1 runes
  
  jkyberneees
  and
  claude
  committed
  28dc76a
- fix(cli): escape full-length transcripts and job results without the prompt-field cap
  
  jkyberneees
  and
  claude
  committed
  f273dd5
- docs(serve): state unknown session_id is 404 on /api/prompt; reword test comment
  
  jkyberneees
  and
  claude
  committed
  f7a7d5c
- fix(subagent): allowlist entries cannot outrank any applied cap
  
  jkyberneees
  and
  claude
  committed
  5911ea6
- fix(repl): oversized history entries no longer truncate or erase the history file
  
  jkyberneees
  and
  claude
  committed
  08ad217
- fix(telegram): session commands queue behind a pending /new or /resume
  
  jkyberneees
  and
  claude
  committed
  1f02d44
- fix(agent): close fences and raw HTML blocks with one CommonMark-aware scan
  
  jkyberneees
  and
  claude
  committed
  e30699a
- fix(redact): handle JSON-encoded text and stray quotes in command credential scanning
  
  jkyberneees
  and
  claude
  committed
  c8840a3
- fix(danger): fold squared letters, control chars, braille blank, small capitals, fullwidth block and markdown markers in the injection scan
  
  jkyberneees
  and
  claude
  committed
  9e1e276
- test(danger): reference injection scan mirrors the markdown-marker variant
  
  jkyberneees
  and
  claude
  committed
  8e96ee6
- fix(danger): argv composers fed dynamic input run an unknown program
  
  jkyberneees
  and
  claude
  committed
  74f89e2
- fix(danger): curl config/file-backed options and fd -x in short clusters are classified
  
  jkyberneees
  and
  claude
  committed
  825b5da
- fix(danger): package registry publish is a network_upload
  
  jkyberneees
  and
  claude
  committed
  9564ee9
- fix(danger): read ledger voids licences after patch, uniq, extraction and work-tree rewrites
  
  jkyberneees
  and
  claude
  committed
  137da1e
- fix(danger): python -m NAME gates the workspace module it would run
  
  jkyberneees
  and
  claude
  committed
  886e2b0
- fix(danger): a nameref to a secret variable is a secret read
  
  jkyberneees
  and
  claude
  committed
  b538d42
- fix(danger): env signal/debug options with no command dump the environment
  
  jkyberneees
  and
  claude
  committed
  574a91e
- fix(danger): find/fd -exec payloads and project runners classify the command they run
  
  jkyberneees
  and
  claude
  committed
  9b26998
- fix(danger): command strings carried by tool options are classified
  
  jkyberneees
  and
  claude
  committed
  5a212c8
- fix(danger): denylist scans command carriers beyond shell -c
  
  jkyberneees
  and
  claude
  committed
  7a56cf2
- fix(danger): literal here-string and process-substitution shell payloads, startup-file writes, read-bound variables
  
  jkyberneees
  and
  claude
  committed
  beabb2b
- fix(danger): bound the exec-action walk of nested find/fd chains
  
  jkyberneees
  and
  claude
  committed
  f45f877
- docs: document the classifier, denylist and injection-scan hardening
  
  jkyberneees
  and
  claude
  committed
  9768d0f
- fix(danger): control characters are dropped before scanning, not reported as hidden
  
  jkyberneees
  and
  claude
  committed
  6960417
- fix(danger): ledger voids more unnamed writers, keeps read-only variants
  
  jkyberneees
  and
  claude
  committed
  c1ce9ef
- fix(danger): python -m gate reads the interpreter option grammar
  
  jkyberneees
  and
  claude
  committed
  c1244c1
- fix(danger): nameref targets use the shared secret-name predicate
  
  jkyberneees
  and
  claude
  committed
  d62b920
- fix(danger): scan reads C0 separators and ANSI sequences both ways, folds regional indicators
  
  jkyberneees
  and
  claude
  committed
  c3cbdcf
- fix(danger): dynamic argv inversion, runner spellings, startup files, package-manager shell settings, ext:: remotes
  
  jkyberneees
  and
  claude
  committed
  68ff933
- docs: document the review follow-up rules
  
  jkyberneees
  and
  claude
  committed
  5f79884
- fix(danger): gate python -m NAME whatever follows the module name
  
  jkyberneees
  and
  claude
  committed
  8e7fde8
- fix(danger): forced branch creation and merge --abort void the read licence
  
  jkyberneees
  and
  claude
  committed
  217498e
- fix(danger): scan reads escape strings, 8-bit CSI and all controls as space and as nothing
  
  jkyberneees
  and
  claude
  committed
  175d921
- fix(danger): git ext:: via insteadOf, parallel option grammar, package-manager set keys, dynamic-argv allowlist, yarn scripts
  
  jkyberneees
  and
  claude
  committed
  6ace691
- test(danger): cover escape-sequence spans and control readings
  
  jkyberneees
  and
  claude
  committed
  7a589ae
- fix(redact): treat quotes and backslash escapes as terminators only in JSON-encoded text
  
  jkyberneees
  and
  claude
  committed
  8e4cd35
- fix(repl): history load skips over-long lines instead of disabling saving
  
  jkyberneees
  and
  claude
  committed
  18aab64
- fix(subagent): filter the allowlist only against caps that bind the child
  
  jkyberneees
  and
  claude
  committed
  8948455
- fix(danger): unterminated escape strings consume the rest of the input
  
  jkyberneees
  and
  claude
  committed
  ef5eb2f
- fix(danger): parallel option table, dynamic-argv worst case, find -exec end, runner options, dry-run publish, hook files as write targets, AUTH_SOCK
  
  jkyberneees
  and
  claude
  committed
  ebf9cc0
- fix(danger): an unlisted parallel option makes the command unknown
  
  jkyberneees
  and
  claude
  committed
  eaa171c
- test(redact): gofmt the webhook fixtures
  
  jkyberneees
  and
  claude
  committed
  636b9ad
- test(memory): cover consolidate preconditions, cancellation and default thresholds
  
  jkyberneees
  and
  claude
  committed
  81a95b2
- fix: staticcheck De Morgan rewrites; webhook redaction patterns start at a hostname boundary
  
  jkyberneees
  and
  claude
  committed
  0813a4f
- fix(redact): ignore double quotes inside shell single quotes when detecting JSON context
  
  jkyberneees
  and
  claude
  committed
  631928c
- fix(danger): parallel option values are classified; dry-run last setting wins; patch/uniq/split write targets
  
  jkyberneees
  and
  claude
  committed
  145704f
- test: write the bidi override as an escape instead of a literal character
  
  jkyberneees
  and
  claude
  committed
  d97454a

Commits

Commits on Oct 14, 2026