Repository files (latest commit first)

Filename	Latest commit message	Latest commit date
cliffhall 195f209359 fix: require an authority for the path-less root form (#2295) ... `skill:`, `mailto:` and `skill://` also parse to an empty pathname, with an empty host, so an empty path alone accepted authority-less URIs the guard exists to reject. Accept the empty path only when a host is present (Copilot review round 1). Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01VQ2eszDCUqTmhtTMaznw3W Signed-off-by: cliffhall <cliff@futurescale.com>		2026-09-14 00:24:10 -04:00
..
auth	fix: do not await the release on a cancellation path (#2319 round 25)	2026-09-11 08:33:18 -04:00
client	docs: state the exemption's canonicalization contract, and fix the smoke recipe's cwd	2026-09-11 03:12:07 -04:00
json	fix: decline a union branch requiring a name it never declares (#2224)	2026-09-06 12:59:52 -04:00
logging	feat: port CLI, TUI, and launcher from v1.5 into v2 (#1452)	2026-06-14 20:27:49 -04:00
mcp	fix: require an authority for the path-less root form (#2295)	2026-09-14 00:24:10 -04:00
node	feat(web): enforce localhost-only binding; expand loopback origin allow-list (#1796)	2026-07-26 22:15:10 -04:00
react	feat: support the Skills extension (SEP-2640) with digest verification	2026-09-04 20:45:15 -04:00
storage	fix(auth): keep oauth-persist browser-safe (move Node file backend out)	2026-07-08 16:20:31 -04:00
tsconfig.json	feat: port CLI, TUI, and launcher from v1.5 into v2 (#1452)	2026-06-14 20:27:49 -04:00