2 Commits

Author	SHA1	Message	Date
diegosouzapw	34e62d8725	fix(security): crypto-secure cloud-agent IDs + exact-hostname check (CodeQL #251, #252) ... - #251 (Insecure randomness): baseAgent.generateTaskId/generateActivityId used Math.random().toString(36) for IDs that flow into session/external identifiers (e.g. jules.ts task externalId). Switched to crypto randomBytes(8).toString("hex"). - #252 (Incomplete URL substring sanitization): the antigravity discovery test matched the upstream host via url.includes("…googleapis.com"), which a look-alike host could bypass. Switched to an exact `new URL(url).hostname === …` comparison.	2026-05-22 15:09:07 -03:00
Paijo	9d663db3f0	feat(cli): Comprehensive CLI Enhancement Suite - 20+ new commands (#2074) ... Integrated into release/v3.8.0	2026-05-10 00:58:13 -03:00