Jiang Bohan a73a9d4036 fix(agent): address PR review — env var blocklist, unmarshal logging, stable React keys ...

1. Security: add isBlockedEnvKey() blocklist that rejects MULTICA_*
   prefix and critical system vars (HOME, PATH, USER, SHELL, TERM,
   CODEX_HOME) from custom_env injection
2. Observability: log warnings when json.Unmarshal fails on custom_env
   (agentToResponse + claim endpoint)
3. UX: use stable auto-increment IDs for env entry React keys instead
   of array index to prevent input focus/state issues on add/remove

2026-04-13 17:39:02 +08:00

..

core

feat(agent): support custom environment variables for router/proxy mode

2026-04-13 16:47:56 +08:00

eslint-config

chore: add shared ESLint config + enforce strict tsconfig across packages

2026-04-10 08:27:29 +08:00

tsconfig

chore: add shared ESLint config + enforce strict tsconfig across packages

2026-04-10 08:27:29 +08:00

ui

Revert "feat: add online status indicator on agent & member avatars (#821)" (#837)

2026-04-13 15:03:31 +08:00

views

fix(agent): address PR review — env var blocklist, unmarshal logging, stable React keys

2026-04-13 17:39:02 +08:00