main
file transfer for aip
migrate server-device-client to aip
migrate galaxy config and fix constellation parsing bug
refactor: Move galaxy module from ufo/galaxy to root/galaxy
Enhance task response handling to prevent cross-device task-result injection
fix: Unauthenticated Mobile MCP access allows remote Android device control and screen disclosure
docs
aip constellation interation
rename deviceinfo
GALAXY
bug fixed and test
fix bad code
device info request
fix contract
clean up
state machine refactor
new agent and e2e running
migrate agent config
improve visualizer
config transform tools
migrate all config
fix: Enhance prompt sanitization to mitigate new injection patterns from MSRC report
fix MSRC132746: rename validate_save_path to validate_save_file_path and update usage across Excel, PowerPoint, and Word clients
fix: [MSRC] [123716] - UFO - galaxy/webui POST /api/devices - Authenticated SSRF triggering outbound WebSocket connections
fix: [MSRC] [123355] - UFO system - ufo/client/mcp/http_servers/linux_mcp_server.py and ufo/automator/app_apis/shell/shell_client.py - Allow-list bypass via interpreter -c/-Command
Task 2: add _iter_embedded_ipv4 and integrate into _is_blocked_ip
