feat: strip webhook/hook scaffolding from user messages

Messages from /hooks/agent containing SECURITY NOTICE blocks and
<<<EXTERNAL_UNTRUSTED_CONTENT>>> delimiters are now cleaned up.
Only the actual user content is displayed, with a small webhook
badge indicator showing the message originated from a webhook.

Closes feedback #54
This commit is contained in:
Nicolas Varrot
2026-02-13 01:12:04 +00:00
parent 82b76cc0a6
commit c7cd47b09a
3 changed files with 100 additions and 8 deletions

View File

@@ -518,7 +518,8 @@
## Item #48
- **Date:** 2026-02-12
- **Priority:** medium
- **Status:** pending
- **Status:** done
- **Completed:** 2026-02-13 — commit `6c19c26`
- **Description:** Message search — Ctrl+F in conversation history
- Search bar that filters/highlights messages in the current session
- Navigate between results (up/down arrows)