3 people 1f2e8c3b72 fix: scan inbound messages for leaked secrets (#433) ...

* fix: scan inbound messages for leaked secrets before LLM processing (#393)

Add scan_inbound_for_secrets() to SafetyLayer that reuses the existing
leak detector on user input. Wire it into thread_ops.rs after the policy
check so messages containing API keys or tokens are rejected early,
preventing the LLM from echoing them back and triggering outbound
leak-detection error loops.

Co-Authored-By: Claude Opus 4.6 <[email protected]>

* fix: unify inbound secret scan warning messages

Both the detected-secret and error branches now show the same
actionable message guiding users to remove secrets and use the
config system instead.

Addresses Gemini review feedback on PR #433.

Co-Authored-By: Claude Opus 4.6 <[email protected]>

---------

Co-authored-by: Claude Opus 4.6 <[email protected]>

2026-03-01 08:45:27 +00:00

..

agent_loop.rs

feat(web): DB-backed Jobs tab + scheduler-dispatched local jobs (#436)

2026-02-28 19:58:07 -08:00

commands.rs

feat(web): DB-backed Jobs tab + scheduler-dispatched local jobs (#436)

2026-02-28 19:58:07 -08:00

compaction.rs

Add automated QA: schema validator, CI matrix, Docker build, and P1 test coverage (#353)

2026-02-27 09:09:45 +04:00

context_monitor.rs

Load tools at launch

2026-02-03 00:48:22 -08:00

cost_guard.rs

refactor: simplify config resolution and consolidate main.rs init (#287)

2026-02-22 02:54:31 +00:00

dispatcher.rs

Add automated QA: schema validator, CI matrix, Docker build, and P1 test coverage (#353)

2026-02-27 09:09:45 +04:00

heartbeat.rs

feat(signal) attachment upload + message tool (#375)

2026-02-26 18:06:21 +04:00

job_monitor.rs

feat: Add PR review tools, job monitor, and channel injection for E2E sandbox workflows (#57)

2026-02-18 00:48:43 +00:00

mod.rs

fix: persist turns after approval and add agent-level tests (#250)

2026-02-20 02:28:15 +00:00

router.rs

Replace hardcoded intent patterns with job tools

2026-02-04 22:09:52 -08:00

routine_engine.rs

feat(routines): deliver notifications to all installed channels (#398)

2026-02-27 12:01:32 -08:00

routine.rs

fix: persist turns after approval and add agent-level tests (#250)

2026-02-20 02:28:15 +00:00

scheduler.rs

feat: implement FullJob routine mode with scheduler dispatch (#288)

2026-02-22 08:18:21 +00:00

self_repair.rs

Add automated QA: schema validator, CI matrix, Docker build, and P1 test coverage (#353)

2026-02-27 09:09:45 +04:00

session_manager.rs

Add automated QA: schema validator, CI matrix, Docker build, and P1 test coverage (#353)

2026-02-27 09:09:45 +04:00

session.rs

refactor: remove Responses API, consolidate to Chat Completions (#272)

2026-02-20 20:43:32 +00:00

submission.rs

feat(web): slash command autocomplete + /status /list + fix chat input locking (#404)

2026-02-27 20:59:32 +00:00

task.rs

fix: persist turns after approval and add agent-level tests (#250)

2026-02-20 02:28:15 +00:00

thread_ops.rs

fix: scan inbound messages for leaked secrets (#433)

2026-03-01 08:45:27 +00:00

undo.rs

fix: persist turns after approval and add agent-level tests (#250)

2026-02-20 02:28:15 +00:00

worker.rs

feat(web): DB-backed Jobs tab + scheduler-dispatched local jobs (#436)

2026-02-28 19:58:07 -08:00