mirror of
https://github.com/nearai/ironclaw.git
synced 2026-09-03 08:06:01 +08:00
9399fcccc3
* Fix first-pass OAuth auth prompts in chat * Fix single auth prompt selection per turn * Persist auth prompts across approval pauses * Fix dispatcher clippy regressions * fix(auth): sanitize retry prompts for invalid tokens * fix(auth): address review feedback for PR #2038 - Validate auth_url/setup_url schemes: only https:// allowed, rejecting javascript:, file://, and other dangerous schemes (security) - Emit OAuth auth prompt alongside approval card so users see the connect button without waiting for approval to resolve - Refactor handle_auth_intercept to accept ParsedAuthData directly instead of synthesizing fake JSON (brittleness fix) - Add PendingAuthPrompt::new() constructor with non-empty extension_name validation - Add regression tests for URL sanitization and constructor validation Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * style: fix cargo fmt formatting in dispatcher tests Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> --------- Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com> Co-authored-by: Illia Polosukhin <ilblackdragon@gmail.com>