3 Commits

Author	SHA1	Message	Date
myron	8b7f597e76	agent: v3.0 — fix cfg scope bug in execute_command (update + shell commands) ... self_update(cfg) and shell allow_shell_commands check both referenced cfg from run() scope, but execute_command() is a standalone function. Fixed by calling load_config() locally in each branch that needs it.	2026-06-11 21:10:08 +00:00
myron	ecbc2e09a5	Fix 8 code-review findings: security + reliability ... 1. agent.py: shell allow-check reads cfg, not server payload (RCE fix) 2. webhook.php: move WEBHOOK_SECRET to gitignored config.php; rotate secret 3. agent.py: replace recursive main() with while loop (RecursionError fix) 4. jarvis-deploy.sh: push force-revert to GitHub on syntax fail (loop fix) 5. agent.py: self_update() verifies SHA-256 before exec (integrity fix) 6. agent.php: remove JARVIS_IP from browser-action bypass (auth fix) 7. jarvis-watchdog.sh: escape SQL vars in alert() to prevent injection 8. jarvis-deploy.sh: atomic mv instead of cat+truncate (TOCTOU fix) Also: distribute jarvis-agent.py.sha256 alongside agent for integrity checks	2026-05-25 14:27:27 +00:00
myron	dc55e6c45b	Initial commit: JARVIS AI dashboard v2.3 ... - 4-tier chat: HA control → Ollama → Groq → Claude - Push-based agent system with heartbeat/metrics - Network monitoring, alerts, Proxmox, Home Assistant - Windows + Linux agent installers - Stats cache cron, facts collector, KB engine	2026-05-25 13:22:57 +00:00