Ettore Di Giacinto d1aa963ba1 fix(studio): refuse a host command too long for its approval card ...

The approval card cut the command to 2000 bytes while the full text ran,
so a prompt-injected model could hide a tail behind harmless text. Refuse
the call with a message instead, so what the person allows is what runs.

Assisted-by: Claude Code:claude-sonnet-5-5
Signed-off-by: Ettore Di Giacinto <mudler@localai.io>

2026-11-03 08:39:12 +00:00

..

application

fix(studio): reap only stale turns when the database is shared

2026-11-03 08:38:53 +00:00

backend

feat(realtime): LFM3-Audio speech-to-speech on llama.cpp, remove liquid-audio (#12958)

2026-10-29 22:06:41 +01:00

cli

feat(addons): declare typed host capabilities (#13034)

2026-11-02 23:50:40 +00:00

clients

security(http): refuse redirects on outbound clients via hardened pkg/httpclient (#10087)

2026-05-30 12:04:10 +02:00

config

feat(addons): declare typed host capabilities (#13034)

2026-11-02 23:50:40 +00:00

dependencies_manager

feat(ui): move to React for frontend (#8772)

2026-03-05 21:47:12 +01:00

explorer

Revert "chore(tests): Avoid network, sleep and more during tests" (#11601)

2026-08-19 16:39:39 +02:00

gallery

fix(model-gallery): point pinned LFM3-Audio entries at main (#12994)

2026-10-31 18:18:19 +01:00

http

fix(ci): repair the failing master checks (#13051)

2026-11-03 08:34:58 +01:00

library

feat(chats): server-side chats with steering, sub-agents and compaction (#12918)

2026-11-01 12:08:23 +01:00

p2p

feat: add distributed mode (#9124)

2026-03-30 00:47:27 +02:00

schema

feat(addons): declare typed host capabilities (#13034)

2026-11-02 23:50:40 +00:00

services

fix(studio): refuse a host command too long for its approval card

2026-11-03 08:39:12 +00:00

startup

feat(backends): --disable-backend-install disables backend downloads. (#12754)

2026-10-22 17:58:53 +02:00

systemone

feat(router): route with native decision models (#12449)

2026-10-04 09:34:21 +02:00

templates

fix(ui): omit empty system prompt so model default applies (#11838)

2026-09-02 11:58:23 +00:00

trace

feat(backends): timestral.cpp forecast backend and /v1/forecast API (#12885)

2026-10-24 22:47:04 +02:00