spawn/packages/cli/src/shared
A fd36ff0e3d
Some checks are pending
CLI Release / Build and release CLI (push) Waiting to run
Lint / ShellCheck (push) Waiting to run
Lint / Biome Lint (push) Waiting to run
Lint / macOS Compatibility (push) Waiting to run
fix(security): add base64 validation guards in orchestrate.ts (fixes #3006) (#3007)
Add /^[A-Za-z0-9+/=]+$/ validation after each .toString("base64") call
in delegateCloudCredentials() and injectEnvVars(), consistent with the
pattern established in agent-setup.ts by #2988.

Agent: security-auditor

Co-authored-by: B <6723574+louisgv@users.noreply.github.com>
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-03-26 18:25:40 +07:00
..
agent-setup.ts fix(security): add base64 validation for all shell-interpolated values (#2988) 2026-03-26 05:16:02 +07:00
agent-tarball.ts fix: remove local tarball download path (#2970) 2026-03-24 21:42:31 -07:00
agents.ts feat: skill injection — teach agents how to use spawn on recursive VMs (#2989) 2026-03-25 15:32:20 -07:00
billing-guidance.ts fix: standardize ESM import extensions across 35 production files (#2827) 2026-03-20 08:51:40 -07:00
cloud-init.ts refactor(test): extract shouldSkipCloudInit helper and add unit tests (#2958) 2026-03-24 22:32:53 +07:00
oauth-constants.ts fix: restore hyphens in OAuth code regex + add regression test (#2171) 2026-03-03 22:52:29 -08:00
oauth.ts fix: standardize ESM import extensions across 35 production files (#2827) 2026-03-20 08:51:40 -07:00
orchestrate.ts fix(security): add base64 validation guards in orchestrate.ts (fixes #3006) (#3007) 2026-03-26 18:25:40 +07:00
parse.ts refactor: remove dead deepMerge export from parse.ts (#2663) 2026-03-15 13:57:47 -07:00
paths.ts fix(update): cache successful update checks for 1 hour (#2755) 2026-03-17 23:08:05 -07:00
result.ts refactor: replace indiscriminate try/catch with guarded Result helpers (#2477) 2026-03-10 18:55:07 -07:00
shell.ts feat: add Windows PowerShell support — remove bash dependency for local execution (#2727) 2026-03-17 16:35:23 -07:00
spawn-config.ts refactor: remove dead exported types from picker.ts and spawn-config.ts (#2553) 2026-03-12 21:43:05 -04:00
spawn-skill.ts fix: embed skill content instead of reading from disk (#2992) 2026-03-26 06:16:52 +07:00
ssh-keys.ts fix: handle missing ssh-keygen in getSshFingerprint (#2926) 2026-03-24 06:50:45 +07:00
ssh.ts fix: resolve ANSI spinner corruption and garbled output (#3001) (#3003) 2026-03-26 15:28:32 +07:00
ui.ts fix: resolve ANSI spinner corruption and garbled output (#3001) (#3003) 2026-03-26 15:28:32 +07:00