Full deployment history for this project.
Palette: enhance Tabs accessibility with WAI-ARIA tablist standards
fix(security): prevent empty CSRF token verification bypass Explicitly check if token or storedToken is empty/falsy in verifyCSRFToken to prevent safeCompare('', '') from returning true when comparing empty hashes.
⚡ Bolt: optimize hot-path type membership checks using module-level Set constants Replace inline array literals and O(N) array .includes() scans with module-level Set constants and Set.prototype.has() lookups across workflow graph validation, block execution, trace logging, and artifact type normalization. Added a benchmark test verifying the O(1) performance speedup.
⚡ Bolt: cache static tool input specs and catalog at module scope Pre-compute static tool input specs and catalog in `lib/agentui/suggested-payloads.ts` at module scope. This eliminates redundant `flatMap` iterations, `Set` allocations, array sorting, and object allocations on repeated calls to `listToolInputSpecs` and `listToolSpecCatalog`. Execution time for 500 calls reduced from 139.35ms to 19.06ms (~86% improvement) with zero garbage collection overhead on repeated calls. Also added `tests/performance/tool-specs-bench.test.ts`.
⚡ Bolt: parallelize ambassador public proof validations Parallelize independent Spec OpenAPI contract validation and Sandbox schema validation requests in runAmbassadorPublicProofFlow using Promise.all.
⚡ Bolt: Precompute searchStr in CommandPalette to accelerate search filtering
Fix empty CSRF token validation bypass in verifyCSRFToken
security: fix empty CSRF token comparison authentication bypass
fix(security): guard verifyCSRFToken against empty/falsy tokens Explicitly check if token or storedToken is empty/falsy before calling safeCompare in verifyCSRFToken to prevent empty token authentication bypasses.
palette: improve command palette search trigger discoverability Enhance the SearchTrigger component in the TopBar navigation layout so the Search label is visible at small (sm) breakpoints and above rather than hidden until ultra-wide (2xl) screens.
⚡ Bolt: consolidate multi-pass array iterations into single-pass loops
🛡️ Sentinel: [HIGH] Fix empty CSRF token pre-hashing bypass vulnerability
🎨 Palette: improve ThemeToggle accessibility and action feedback
⚡ Bolt: optimize verifyCSRFToken with early return for falsy inputs
fix(security): reject empty or falsy CSRF tokens in verifyCSRFToken Prevent empty or falsy tokens from being evaluated in verifyCSRFToken prior to constant-time SHA-256 comparison, avoiding empty token auth bypasses.
🎨 Palette: Add keyboard focus indicators to flow runs filter buttons
⚡ Bolt: optimize hot-path type membership checks using module-level Set constants Replace inline array literals and O(N) array .includes() scans with module-level Set constants and Set.prototype.has() lookups across workflow graph validation, block execution, trace logging, and artifact type normalization. Added a benchmark test verifying the O(1) performance speedup.
fix(security): return false for empty tokens in verifyCSRFToken
🎨 Palette: Add clear search button and ARIA enhancements to MCP Tool Browser
Fix empty CSRF token validation bypass in verifyCSRFToken
Fix empty-token CSRF verification bypass Check for missing or empty tokens in verifyCSRFToken prior to safeCompare pre-hashing to prevent empty-token authentication bypasses.
fix(security): prevent empty CSRF token verification bypass Explicitly check if token or storedToken is empty/falsy in verifyCSRFToken to prevent safeCompare('', '') from returning true when comparing empty hashes.
fix: repair JSON highlight token rendering
chore: auto-close PR #221 via merge path
chore: auto-close PR #203 via merge path
chore: stack PR #218
chore: stack PR #202
Merge pull request #201 from mbarbine/consolidate/platphorm-agentui-20260811-final consolidate 71 PRs into one commit
Merge pull request #129 from mbarbine/bolt-optimize-json-highlight-14933644154919389614 ⚡ Bolt: Optimize JSON tokenization loop in JsonHighlight
Merge pull request #130 from mbarbine/jules-8267782362994047671-3b6fc646 🎨 Palette: Keyboard focus indicators for global navigation
fix: preserve trace aggregate semantics
Merge pull request #127 from mbarbine/jules-18270120392701777462-879f7f80 🎨 Palette: Canvas Connection Accessibility and Focus Rings
Merge pull request #126 from mbarbine/bolt-optimize-json-highlight-1049791160065202206 ⚡ Bolt: Optimize JSON tokenizer HTML escaping in hot loop
Merge pull request #128 from mbarbine/jules-16967637072976497880-f1acdb3f 🛡️ Sentinel: [security improvement] Secure and Validate Route Compliance API