claude code agent 227 099d31f594 fix(ai): sandwich SAFETY_FRAMEWORK around the role persona (#68) ...

A custom AI-role's text preceded the only SAFETY_FRAMEWORK block and replaced
the persona, so a jailbreak in the role text sat before the safety rules.
buildSystemPrompt now emits SAFETY both before AND after the persona, with the
role/persona delimited as lower-trust (<role_persona note=...>); the default
persona is sandwiched too. Context (currently-viewing-page) preserved.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-06-21 03:17:37 +03:00

..

dto

feat(ai-chat): per-user AI agent backend — LLM config, read-only agent, provenance schema

2026-06-17 01:36:41 +03:00

embedding

feat(ai): hybrid RRF retrieval, heading-breadcrumb chunks, merged search tool

2026-06-18 03:43:01 +03:00

external-mcp

test(ssrf): add IP-level bypass-vector cases (ported from GLM branch)

2026-06-20 18:00:43 +03:00

roles

test: cover features since 053a9c0d + repair test tooling

2026-06-20 23:40:40 +03:00

tools

Merge remote-tracking branch 'gitea/develop' into fix/ai-chat-current-page

2026-06-21 01:29:37 +03:00

ai-chat.controller.ts

feat(ai-chat): agent roles (admin-defined persona + optional model)

2026-06-20 06:30:06 +03:00

ai-chat.module.ts

Merge gitea/develop into feat/public-share-assistant

2026-06-20 18:40:58 +03:00

ai-chat.prompt.spec.ts

fix(ai): sandwich SAFETY_FRAMEWORK around the role persona (#68)

2026-06-21 03:17:37 +03:00

ai-chat.prompt.ts

fix(ai): sandwich SAFETY_FRAMEWORK around the role persona (#68)

2026-06-21 03:17:37 +03:00

ai-chat.role-resolve.spec.ts

test(ai-roles): cover role-resolution, CASL gate, model override; hide disabled badge

2026-06-20 14:20:08 +03:00

ai-chat.service.spec.ts

test: cover features since 053a9c0d + repair test tooling

2026-06-20 23:40:40 +03:00

ai-chat.service.ts

Merge remote-tracking branch 'gitea/develop' into fix/ai-chat-current-page

2026-06-21 01:29:37 +03:00

ai-transcription.service.ts

feat(ai): OpenRouter STT support + real error surfacing + STT endpoint test

2026-06-18 19:26:35 +03:00

public-share-chat.access.ts

harden(public-share): sliding cluster-wide token cap; testable access seam

2026-06-20 15:04:26 +03:00

public-share-chat.controller.spec.ts

test: cover features since 053a9c0d + repair test tooling

2026-06-20 23:40:40 +03:00

public-share-chat.controller.ts

fix(share-ai): reject non-text message parts to close size-cap bypass (#63)

2026-06-21 03:07:53 +03:00

public-share-chat.funnel.ts

feat(ai): anonymous AI assistant on public shares

2026-06-20 07:59:56 +03:00

public-share-chat.prompt.ts

feat(public-share): selectable agent-role identity + fix floating-icon overlap

2026-06-20 19:54:45 +03:00

public-share-chat.service.ts

fix(share-ai): cap per-request output + unify provider errors (#60, #95)

2026-06-21 03:08:34 +03:00

public-share-chat.spec.ts

test: cover features since 053a9c0d + repair test tooling

2026-06-20 23:40:40 +03:00

public-share-workspace-limiter.ts

fix(share-ai): fail-closed workspace limiter on Redis failure (#62)

2026-06-21 03:07:53 +03:00