_Kerman 7a715e7919 refactor(api): serve /api/file media by extension allowlist only ...

Drop the byte-signature sniff duplicated from fs/tool-fs's read_image tool:
the cross-file duplication gate forbids the clone, and no shared owner
exists without widening the attachment package's public API. The
extension allowlist keeps non-media content out; corrupt image payloads
fail in the browser, not on the route. Agent Note facts updated in the
same change.

2026-09-07 15:53:54 +08:00

..

agent.host.spec.ts

Merge branch 'master' into fix/test-tmp-teardown-self-clean

2026-09-04 11:15:31 +08:00

assistant-stream.client.spec.ts

Merge commit 'be5db297c7' into worktree/session-format-05-v1-v2-chunk-migration

2026-09-03 22:09:31 +08:00

assistant-stream.host.spec.ts

Merge commit 'be5db297c7' into worktree/session-format-05-v1-v2-chunk-migration

2026-09-03 22:09:31 +08:00

client-apply.client.spec.ts

test(client): cover background upload seams

2026-09-03 14:43:07 +08:00

client-contract.client.spec.ts

Merge remote-tracking branch 'origin/master' into worktree/2984-generic-file-upload

2026-09-04 10:12:19 +08:00

commands-create-fork.host.spec.ts

refactor(api): converge the Remote failure vocabulary and client surface

2026-08-28 22:37:36 +08:00

commands-queue-attachment.host.spec.ts

Merge remote-tracking branch 'origin/master' into worktree/2984-generic-file-upload

2026-09-04 10:12:19 +08:00

commands-upload-file.host.spec.ts

refactor(attachment): unify prompt content admission

2026-09-03 20:53:29 +08:00

control-jobs.host.spec.ts

Merge master into session format migration

2026-09-02 13:34:40 +08:00

control-queue.host.spec.ts

refactor(api): require the session projection registry

2026-08-28 12:50:51 +08:00

controller.host.spec.ts

Merge remote-tracking branch 'origin/master' into worktree/2984-generic-file-upload

2026-09-04 10:12:19 +08:00

event-script.client.ts

feat(session)!: embed assistant streams in format v2

2026-09-02 04:00:01 +08:00

fake-api.client.ts

fix(session): keep independent version fields off the format generation

2026-09-03 22:36:51 +08:00

file-references.host.spec.ts

test(api): refresh Remote migration artifacts

2026-08-27 21:57:56 +08:00

history-records.client.spec.ts

feat(session)!: embed assistant streams in format v2

2026-09-02 04:00:01 +08:00

lineage.client.spec.ts

refactor(session): move Client ownership into Session Controller

2026-08-23 16:28:16 +08:00

manager.client.spec.ts

feat(agent): emit live assistant stream frames

2026-09-02 03:36:13 +08:00

media-references.host.spec.ts

refactor(api): serve /api/file media by extension allowlist only

2026-09-07 15:53:54 +08:00

notifier.client.spec.ts

refactor(session): move Client ownership into Session Controller

2026-08-23 16:28:16 +08:00

projection-store.client.spec.ts

refactor(session)!: distinguish event seqs from log offsets

2026-09-01 20:36:00 +08:00

queue-store.client.spec.ts

Merge remote-tracking branch 'origin/master' into worktree/2984-generic-file-upload

2026-09-02 10:29:53 +08:00

scope.client.spec.ts

refactor(session): move Client ownership into Session Controller

2026-08-23 16:28:16 +08:00

session-cold.host.spec.ts

test(session-controller): restore Session type import

2026-09-04 10:14:15 +08:00

session-fork.host.spec.ts

fix(system-prompt): keep model persona prefix and place cwd in suffix

2026-09-06 20:35:42 +08:00

session-history-journal.host.spec.ts

Merge commit 'be5db297c7' into worktree/session-format-05-v1-v2-chunk-migration

2026-09-03 22:09:31 +08:00

session-list-blank.host.spec.ts

refactor(api-session): remove interaction transport

2026-08-23 16:16:03 +08:00

session-models.host.spec.ts

fix(system-prompt): keep model persona prefix and place cwd in suffix

2026-09-06 20:35:42 +08:00

session-open-workspace-path.host.spec.ts

refactor(api): converge the Remote failure vocabulary and client surface

2026-08-28 22:37:36 +08:00

session-pending-submissions.client.spec.ts

refactor(client): extract background file upload service

2026-09-03 13:53:25 +08:00

session-presets.host.spec.ts

test: remove dsh-* temp dirs created by unit tests at teardown

2026-09-03 16:19:18 +08:00

session-projections.host.spec.ts

fix(session): keep independent version fields off the format generation

2026-09-03 22:36:51 +08:00

session-rename.host.spec.ts

Merge remote-tracking branch 'origin/master' into dshw/pr-deepseek-harness-deepseek-harness-2907

2026-08-31 10:56:53 +08:00

session-search.host.spec.ts

fix(session): keep cold listing body-free

2026-09-02 21:29:43 +08:00

session-skills.host.spec.ts

feat(session)!: add released format migration

2026-09-01 22:12:21 +08:00

session.client.spec.ts

Merge remote-tracking branch 'origin/master' into worktree/2984-generic-file-upload

2026-09-04 10:12:19 +08:00

sessions-service.client.spec.ts

fix(session): keep independent version fields off the format generation

2026-09-03 22:36:51 +08:00

test-remote.ts

perf(session): transfer frozen persistence reads into restore

2026-09-06 02:10:23 +08:00

time-zone.client.spec.ts

refactor(session): move Client ownership into Session Controller

2026-08-23 16:28:16 +08:00

transport.client.spec.ts

fix(session): keep independent version fields off the format generation

2026-09-03 22:36:51 +08:00

transport.host.spec.ts

Merge master into session format migration

2026-09-02 13:34:40 +08:00