Commit Graph

19105 Commits

Author SHA1 Message Date
Peter Steinberger 6a1ad2b499 docs(matrix): clarify allowlist requires full MXIDs 2026-02-14 22:13:41 +01:00
Tak Hoffman cc35c66ff0 docs: add agent submission control policy reference 2026-02-14 15:12:40 -06:00
Peter Steinberger 938b1dd1e7 docs(changelog): fix gatewayUrl SSRF entry 2026-02-14 22:08:28 +01:00
Peter Steinberger 3513ff09de docs(changelog): note Telegram webhookSecret hard requirement 2026-02-14 22:08:19 +01:00
Coy Geek 633fe8b9c1 fix(aa-08): apply security fix
Generated by staged fix workflow.
2026-02-14 22:08:19 +01:00
Peter Steinberger f8c404a485 test(web): import auto-reply after mocks 2026-02-14 22:01:54 +01:00
Peter Steinberger d73f3336de fix(exec): close stdin for non-pty runs 2026-02-14 22:01:54 +01:00
Peter Steinberger 043ae00446 test(auto-reply): import reply after harness mocks 2026-02-14 22:01:54 +01:00
Peter Steinberger bf2dc0d9c2 test(auto-reply): fix vi.mock import order 2026-02-14 22:01:54 +01:00
Peter Steinberger 5c6318b583 test(cron): assert cron run session ids 2026-02-14 22:01:54 +01:00
Peter Steinberger c9f02da89f fix(cli): make program test mocks portable 2026-02-14 22:01:54 +01:00
Peter Steinberger 00b7ab7db7 fix(gateway): remove unused device auth import 2026-02-14 22:01:12 +01:00
Peter Steinberger d8a2c80cd7 fix(gateway): prefer explicit token over stored auth 2026-02-14 22:01:11 +01:00
Peter Steinberger c06a962bb6 test(e2e): stabilize suite 2026-02-14 22:01:11 +01:00
Peter Steinberger 2a3da21333 fix(sessions): normalize agent session keys for send policy 2026-02-14 22:01:11 +01:00
Peter Steinberger ee8d8be2e3 fix(chutes): accept manual OAuth code input 2026-02-14 22:01:11 +01:00
Peter Steinberger c5406e1d24 fix(security): prevent gatewayUrl SSRF 2026-02-14 22:01:11 +01:00
Peter Steinberger e95ce05c1e chore(security): soften gatewayUrl override messaging 2026-02-14 21:53:30 +01:00
Peter Steinberger 2d5647a804 fix(security): restrict tool gatewayUrl overrides 2026-02-14 21:53:14 +01:00
Marcus Castro 07850e8a93
fix(media): strip MEDIA: prefix in loadWebMediaInternal (#13107)
Merged via /review-pr -> /prepare-pr -> /merge-pr.

Prepared head SHA: 9d95e6af5a
Co-authored-by: mcaxtr <7562095+mcaxtr@users.noreply.github.com>
Co-authored-by: steipete <58493+steipete@users.noreply.github.com>
Reviewed-by: @steipete
2026-02-14 21:41:26 +01:00
Peter Steinberger 1bde33c0bc docs(changelog): note browser control path traversal fix 2026-02-14 21:37:34 +01:00
Peter Steinberger b2a4283c36 fix(podman): avoid root writes to user home 2026-02-14 21:34:42 +01:00
Peter Steinberger 0e8ec83742 refactor(test): dedupe web auto-reply group message setup 2026-02-14 20:33:46 +00:00
Peter Steinberger 9be114738f refactor(test): dedupe onboarding tui hatch setup 2026-02-14 20:29:02 +00:00
Peter Steinberger 0ab4ac6468 test: drop duplicate isMessagingToolDuplicate suite 2026-02-14 20:25:11 +00:00
Peter Steinberger 05e2957edc refactor(test): dedupe block streaming runner setup 2026-02-14 20:23:33 +00:00
Peter Steinberger 2b5ad475ad test(imessage): stabilize monitor tests with harness import 2026-02-14 21:23:25 +01:00
Peter Steinberger 63aa155ade refactor(imessage): extract RPC notification parsing 2026-02-14 21:23:25 +01:00
Peter Steinberger d9d321f94b chore(security): bump qs and golang.org/x/net 2026-02-14 21:22:46 +01:00
Gustavo Madeira Santana 348bbdeee1 Tests: annotate exported vitest mocks 2026-02-14 15:22:11 -05:00
Peter Steinberger 2f67564c93 refactor(test): dedupe slack inbound contract prep 2026-02-14 20:21:17 +00:00
Peter Steinberger 8188fcb90d refactor(test): dedupe telegram inbound media e2e setup 2026-02-14 20:18:57 +00:00
Peter Steinberger 9521fe977a refactor(test): dedupe openai batch test fetch mocks 2026-02-14 20:15:35 +00:00
Peter Steinberger d2857fbea9 refactor(test): reuse doctor e2e harness 2026-02-14 20:12:47 +00:00
Peter Steinberger 5a261322fb style(test): format web media fallback 2026-02-14 20:12:27 +00:00
Peter Steinberger e9294ff925 perf(test): speed up docker-setup and web media fallback 2026-02-14 20:12:27 +00:00
Peter Steinberger 5daaab3692 perf(test): slim raw-body directive integration 2026-02-14 20:12:27 +00:00
Peter Steinberger e1220c48f5 perf(test): skip skills snapshot work in fast env 2026-02-14 20:12:27 +00:00
Peter Steinberger 9762e48134 perf(test): speed up block streaming tests 2026-02-14 20:12:27 +00:00
Peter Steinberger cfc2604d3e perf(test): speed up heartbeat typing suite 2026-02-14 20:12:27 +00:00
Peter Steinberger 82f0388951 test: disable unsafe memory reindex for atomic suite 2026-02-14 20:12:26 +00:00
Peter Steinberger 91c30f46f7 test: isolate browser server auth env (evaluate gating) 2026-02-14 20:12:26 +00:00
Peter Steinberger 31295c8341 test: isolate browser server auth env 2026-02-14 20:12:26 +00:00
Peter Steinberger ad5e7b9688 perf(test): speed up docker-setup suite 2026-02-14 20:12:26 +00:00
Peter Steinberger 3f5351529f perf(test): skip atomic sqlite swaps for memory index 2026-02-14 20:12:26 +00:00
Peter Steinberger 7418400c47 perf(test): speed up nostr profile fuzz 2026-02-14 20:12:26 +00:00
Peter Steinberger 387fb40745 perf(test): skip heavy boot paths in reply suites 2026-02-14 20:12:26 +00:00
Peter Steinberger 857db619e1 perf(test): speed up temp-home cleanup 2026-02-14 20:12:26 +00:00
Peter Steinberger 5e496a1519 perf(test): mock lobster subprocess 2026-02-14 20:12:26 +00:00
Peter Steinberger e6f75e526d perf(test): speed up command-registry suite 2026-02-14 20:12:26 +00:00