5 commits

Author	SHA1	Message	Date
CCLCK	2e8e378a8c	Add shared MCP daemon proxy runtime	2026-04-12 17:55:08 +08:00
CCLCK	d62af9ecb5	Add split embedding routing for local Codex sidecar	2026-04-11 14:54:09 +08:00
spidercatfly	e1a8524475	feat: migrate cloud search to server-side embedding endpoint	2026-04-02 23:17:44 +08:00
Dennis-yxchen	f845c5f7fb	fix(security): harden zip extraction and import_skill against path traversal ... - Add resolve() + is_relative_to() check in _extract_zip() to block nested traversal entries like nested/../../escape.txt - Sanitize server-provided skill name in import_skill() to prevent directory escape via malicious record metadata - Add 6 regression tests covering both attack vectors Closes #17 Co-authored-by: LeftX <xzq-xu@users.noreply.github.com>	2026-03-31 16:23:56 +08:00
spidercatfly	6ff4861f88	initial commit	2026-03-24 16:03:22 +08:00