0 Fork 0

mirror of https://github.com/Ryder-Sun/Meldwork.git synced 2026-11-07 06:56:03 -10:00

Files

T

Ryder Sun eac015dbfa refactor: remove the managed shared Provider capability

Each Agent CLI now runs only with its own native credentials. The central
path of configuring one provider inside Meldwork for every Agent added
instability without being realistic to maintain, and it depended on
machine-local configuration details.

- Delete the provider store/options modules, the local-agent-provider IPC
  handlers and preload API, per-CLI env injection (CODEBUDDY_*/ANTHROPIC_*/
  KIMI_* ...), the managed OpenClaw provider runtime, and shared-provider
  catalog gating; startup removes the legacy encrypted
  meldwork-provider.json.
- OpenClaw always resolves its native runtime now; native credential
  passthrough, the isolated gateway/guard runtime, and the
  runtime-auth-failure state machine stay unchanged.
- Remove the Provider settings UI, onboarding slide, providerMode display,
  ~100 i18n keys per language, provider CSS, and update the architecture,
  security, and discoverability docs to the native-credentials boundary.

Checks: npm --prefix desktop test (1512 pass), npm --prefix frontend test
(325 pass), frontend build and build:desktop, desktop pack.

2026-10-14 16:59:21 +08:00

1.5 KiB

Raw Permalink Blame History

Security Policy

Meldwork is a local-first desktop application that invokes local Agent CLIs, stores local conversations, imports validated image, media, document, code, and archive attachments, and runs each Agent with its own native CLI credentials through the Electron main process.

Reporting

Please report security issues privately through GitHub Security Advisories for this repository, or contact the repository owner through GitHub if advisories are unavailable.

Do not open a public issue with exploit details, secrets, local file paths, or private workspace data.

In Scope

Renderer-to-main IPC authorization bypasses.
Exposure of executable paths, attachment paths, native session references, CLI API keys, or Skill file paths to renderer code.
Arbitrary shell execution, arbitrary file read/write, unsafe navigation, or unsafe installer behavior.
Attachment validation, private storage, checksum, or preview isolation failures.
Credential storage failures that expose secrets.

Out of Scope

Vulnerabilities in upstream Agent CLIs, model Providers, or third-party package registries.
Issues that require changing the local operating-system user's account permissions.
Reports based only on missing enterprise features such as SSO, centralized audit logs, device management, or notarized public release distribution.

Supported Version

The current repository state is a market-validation MVP. Security fixes target the default branch unless a release branch is explicitly created.