Rohit C Prasad e5c56998ab security: block CGNAT range and guard browser_open_url ...

Follow up to #290. Add RFC 6598 shared space (100.64.0.0/10, used by
Tailscale) to the address guard, and run the same guard on the Playwright
browser_open_url before navigating.

2026-07-30 11:57:31 -07:00

..

agents

OpenWorker: initial import

2026-07-21 11:09:41 -07:00

automation

OpenWorker: initial import

2026-07-21 11:09:41 -07:00

connectors

security: block CGNAT range and guard browser_open_url

2026-07-30 11:57:31 -07:00

mcp

mcp: global config wins on name clash with a trusted workspace

2026-07-30 11:24:06 -07:00

memory

OpenWorker: initial import

2026-07-21 11:09:41 -07:00

personas

OpenWorker: initial import

2026-07-21 11:09:41 -07:00

providers

models: Kimi K3 via Together (1M window, vision); right-align the more/less toggle

2026-07-30 10:32:47 -07:00

server

Merge pull request #215 from HaoChiBao/security/workspace-mcp-trust-gate

2026-07-30 11:21:03 -07:00

skills

OpenWorker: initial import

2026-07-21 11:09:41 -07:00

testing

rename artifact names to openworker: desktop/server binaries, console scripts, npm package

2026-07-21 11:35:29 -07:00

tools

Keep ripgrep searches out of generated directories (#10)

2026-07-23 12:29:19 -07:00

tui

OpenWorker: initial import

2026-07-21 11:09:41 -07:00

web

security: block CGNAT range and guard browser_open_url

2026-07-30 11:57:31 -07:00

__init__.py

OpenWorker: initial import

2026-07-21 11:09:41 -07:00

agent.py

security: refine workspace trust controls

2026-07-24 18:44:39 -07:00

attachments.py

OpenWorker: initial import

2026-07-21 11:09:41 -07:00

audit.py

OpenWorker: initial import

2026-07-21 11:09:41 -07:00

catalog.py

OpenWorker: initial import

2026-07-21 11:09:41 -07:00

cli.py

rename artifact names to openworker: desktop/server binaries, console scripts, npm package

2026-07-21 11:35:29 -07:00

cloud.py

security: complete local access protections

2026-07-24 18:44:39 -07:00

compaction.py

compaction: live progress signal + user-message cap

2026-07-30 06:24:39 -07:00

config.py

security: refine workspace trust controls

2026-07-24 18:44:39 -07:00

connections.py

OpenWorker: initial import

2026-07-21 11:09:41 -07:00

conversations.py

compaction: engine hook, failure policy, persistence (OPE-27 2/4)

2026-07-29 16:13:14 +05:30

engine.py

compaction: live progress signal + user-message cap

2026-07-30 06:24:39 -07:00

environment.py

OpenWorker: initial import

2026-07-21 11:09:41 -07:00

events.py

compaction: live progress signal + user-message cap

2026-07-30 06:24:39 -07:00

inbox_routing.py

fix(inbox): match approval keywords as whole words, not substrings

2026-07-25 18:33:16 -07:00

inbox.py

OpenWorker: initial import

2026-07-21 11:09:41 -07:00

interactions.py

Rename bot references from ocw to OpenWorker

2026-07-23 07:43:24 -07:00

mentions.py

Rename bot references from ocw to OpenWorker

2026-07-23 07:43:24 -07:00

overrides.py

OpenWorker: initial import

2026-07-21 11:09:41 -07:00

pdf_support.py

OpenWorker: initial import

2026-07-21 11:09:41 -07:00

permissions.py

fix: harden local trust boundaries (shell allowlist, MCP OAuth loopback, WS ingestion)

2026-07-24 01:41:05 +05:00

project.py

OpenWorker: initial import

2026-07-21 11:09:41 -07:00

risk.py

OpenWorker: initial import

2026-07-21 11:09:41 -07:00

roots.py

OpenWorker: initial import

2026-07-21 11:09:41 -07:00

secrets.py

security: complete local access protections

2026-07-24 18:44:39 -07:00

selfwake.py

OpenWorker: initial import

2026-07-21 11:09:41 -07:00

sessions.py

compaction: engine hook, failure policy, persistence (OPE-27 2/4)

2026-07-29 16:13:14 +05:30

subscriptions.py

Rename bot references from ocw to OpenWorker

2026-07-23 07:43:24 -07:00

unattended.py

OpenWorker: initial import

2026-07-21 11:09:41 -07:00

unrouted.py

OpenWorker: initial import

2026-07-21 11:09:41 -07:00

workspace_trust.py

security: refine workspace trust controls

2026-07-24 18:44:39 -07:00