Spaces:
Sleeping
Sleeping
Commit History
-
Pre-release hardening
Security & privacy: - Add Apache-2.0 LICENSE + SECURITY.md; license in HF frontmatter and package.json - Sanitize rendered markdown with DOMPurify (Overview + Skills) to close an XSS path - Symlink-safe file browser (realpath containment check) - Warn when a private Space's bucket visibility can't be verified without HF_TOKEN - /api/relaunch cooldown Robustness: - Process-level unhandledRejection/uncaughtException backstops; ws/wss/server error listeners - Guard FUSE persists (sessions, push subscriptions) - Memoize command-exists probes so /api/clis stops spawning ~16 subprocesses per call - Cap transcript reads (tail huge .jsonl) and evict stale fileCache entries Polish: - Remove the ?clipdebug diagnostic overlay - Welcome modal a11y: focus trap, Escape-to-close, initial focus, aria-labelledby - Surface failed sidebar mutations via an error toast - Locked-page copy button falls back to execCommand inside the HF iframe - Un-LFS the install screenshot; gitignore/untrack __pycache__ …ece21ed
-
Agent-initiated push notifications: VAPID+subscriptions, /api/notify (rate-limited), service worker, PWA manifest+icons, Settings enable/test, environment-skill etiquette
Verified signature9c5792a
-
Public template: auto-locks at runtime, shows duplicate-to-private widget
Verified signature5b5da0e