3 Commits

Include renames

Author	SHA1	Message	Date
Bogdan	bd3ad89dd7	fix(security): bundle real sandbox runtime in open CLI (#1641) ... * fix(security): bundle real sandbox runtime in open CLI * test(sandbox): cover fail-closed runtime diagnostics * fix(sandbox): report doctor inspection failures	2026-06-16 08:42:48 +08:00
beardthelion	1d48f8e855	test(build): assert WebFetch binds the real SSRF guard in the bundle (#1450) ... #1399 already fixed the specifier-collision class by tracking missing relative imports per importer, which also resolves the WebFetch ssrfGuard case (the test-file string literal now only stubs the test importer, never WebFetch). The remaining gap is bundle-level coverage: the existing security-hardening test reads source only and would pass even if the shipped CLI bundle had stubbed the guard to a noop. Rebase onto current main (dropping the now-redundant scanner change) and add a dist/cli.mjs assertion alongside the /dream regression test: the real ssrfGuard blocked-address error is present and ssrfGuard is not replaced by a missing-module stub.	2026-06-01 05:59:39 +08:00
chioarub	132539ff79	fix(build): restore /dream slash command in bundled CLI (#1399) ... Scope missing-module stubs for relative imports to the importer file so the unmirrored KAIROS dream skill stub no longer replaces the real /dream command module during bundling.	2026-05-31 06:37:05 +08:00