3 people 8aac87aa61 fix(tui): pass --safe-mode so the host CLAUDE.md cannot leak into proxied turns (#187) ...

OCP is a proxy: the operator's private ~/.claude/CLAUDE.md and auto-memory
must never enter a proxied turn's context. The pane already sets
CLAUDE_CODE_DISABLE_CLAUDE_MDS + CLAUDE_CODE_DISABLE_AUTO_MEMORY, but on
newer claude (2.1.216) those env vars no longer suppress the injection, so
a proxied turn can obey the operator's private CLAUDE.md instead of the
caller's prompt — a leak of private context into API responses.

Add --safe-mode to the interactive spawn argv (gated off on the streaming
and OCP_TUI_FULL_TOOLS paths). Docs + tests updated.

Co-authored-by: sumlin <3495838+sumlin@users.noreply.github.com>

2026-07-23 13:33:56 +10:00

..

tui

fix(tui): pass --safe-mode so the host CLAUDE.md cannot leak into proxied turns (#187)

2026-07-23 13:33:56 +10:00

constants.mjs

refactor: hoist port literal to lib/constants.mjs + CI gate (v3.16.4) (#98)

2026-05-13 06:42:15 +10:00

env.mjs

feat(chat): forward OpenAI image_url parts to Claude (multimodal vision) (#154)

2026-07-20 07:50:17 +10:00

multimodal.mjs

feat(chat): forward OpenAI image_url parts to Claude (multimodal vision) (#154)

2026-07-20 07:50:17 +10:00

net.mjs

refactor: extract isLoopbackBind to lib/net.mjs (#125) (#127)

2026-06-01 07:03:55 +10:00

prompt.mjs

feat(server): OCP_LOCAL_TOOLS — positive local-tools system-prompt wrapper (single-user, default off) (#182)

2026-07-21 21:05:38 +10:00

spawn-auth.mjs

fix(server): serialize -p real-HOME token fallback + TTL-cache keychain + de-stale isolation decision (F3/F5/F6) (#150)

2026-07-07 22:50:52 +10:00

structured-output.mjs

fix(structured): crash-safe validation façade — deep model reply → refusal not 500 (closes #181) (#184)

2026-07-21 20:05:50 +10:00