fix(runtime): deny paired clients host input, skill install, and unbounded dir browse - #18346

Open

fettpl wants to merge 6 commits into

stablyai:mainfrom

fettpl:fix/privileged-paired-rpc-gates

Commits on Sep 18, 2026

fix(runtime): deny paired clients host input, skill install, and unbounded dir browse
fettpl
committed
8f8573a
fix(runtime): realpath browse home bound and gate skill upload chunks
fettpl
committed
6bf19ed

Commits on Sep 23, 2026

fix(runtime): reject paired callers on skill delete and cancel
fettpl
committed
c9afaaf

Commits on Sep 24, 2026

fix(runtime): hide skill delete on paired environment targets
fettpl
committed
aecb7b9
fix(runtime): hide skill delete on paired web clients
fettpl
committed
75ae5f3
test(runtime): compare browseServerDir paths with realpath
fettpl
committed
d77e147