3 Commits

Author	SHA1	Message	Date
Artur Do Lago	bc57ddff43	security: comprehensive pre-alpha and beta security fixes ... Pre-Alpha Fixes (10 items): - Fix credential file permissions in calendar.ts (mode: 0o600) - Add socket close handler in ipc-server.ts (memory leak prevention) - Add event unsubscribe in daemon.stop() (memory leak prevention) - Wrap Qdrant init with retry logic and graceful degradation - Fix ALWAYS-ON-PERSONAS.md gateway architecture documentation - Remove legacy spawn('claude') in tiara executor-sdk.ts - Filter environment variables via safe-env.ts utility - Add error boundary around IPC socket writes - Update tiara README.md and INDEX.md version references - Create zee gateway external-gateway.md documentation Beta Security Fixes (6 items): - CRITICAL: Fix command injection via persona parameter validation - HIGH: Fix terminal escape sequence injection in setPaneTitle - HIGH: Fix command escaping in sendCommand and canvas manager - HIGH: Add secret redaction for copilot auth logging - MEDIUM: Fix echo -e ANSI escape injection in status display - MEDIUM: Strengthen prompt injection defense in fact-extractor New Utilities: - src/util/safe-env.ts: Environment variable filtering for child processes - src/util/shell-escape.ts: Shell escaping, persona validation, secret redaction Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>	2026-01-20 12:57:47 +01:00
Artur Do Lago	5095bc0dff	fix(interfaces): resolve 8 critical bugs across web/tiara/persona layers ... P0 Critical Fixes: - Fix import ./tiara → ./claude-flow in plugin/builtin/index.ts - Create AgentOrchestrator type bridge for council/tiara integration (src/tiara.ts) - Fix hardcoded state ID in memory-bridge.ts (was causing cross-persona data loss) P1 Core Functionality: - Add persona isolation to memory bridge namespace (personas now have private memory) - Load SKILL.md content into drone prompts (skills now available to drones) - Inject persona-specific tools from AGENT_CONFIGS into drone prompts P2 API Consistency: - Standardize error response format in server.ts (MCP & gateway endpoints) - WebSocket param validation already in place (verified) Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>	2026-01-20 12:45:39 +01:00
Artur Do Lago	ac8aed235e	feat: Agent-core customizations for Personas ecosystem ... - Add Personas skills (johny, stanley, zee) - Add domain tools (stanley finance, zee personal) - Add personas orchestration and knowledge graphs - Add LLM Council for multi-model deliberation - Add memory types for Qdrant vector storage - Add tiara submodule for orchestration - Add CLAUDE.md project documentation 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>	2026-01-20 11:51:37 +01:00