ee42e44d88
fix(auth): add qwen-dashscope and anthropic-openai to known API key env vars ( #58503 )
2026-03-31 21:09:20 -04:00
ce58f55fe0
fix: require doctor migration for legacy web search config
2026-04-01 04:22:41 +09:00
788f56f30f
Secrets: hard-fail unsupported SecretRef policy and fix gateway restart token drift ( #58141 )
...
* Secrets: enforce C2 SecretRef policy and drift resolution
* Tests: add gateway auth startup/reload SecretRef runtime coverage
* Docs: sync C2 SecretRef policy and coverage matrix
* Config: hard-fail parent SecretRef policy writes
* Secrets: centralize unsupported SecretRef policy metadata
* Daemon: test service-env precedence for token drift refs
* Config: keep per-ref dry-run resolvability errors
* Docs: clarify config-set parent-object policy checks
* Gateway: fix drift fallback and schema-key filtering
* Gateway: align drift fallback with credential planner
* changelog
Signed-off-by: joshavant <830519+joshavant@users.noreply.github.com>
---------
Signed-off-by: joshavant <830519+joshavant@users.noreply.github.com>
2026-03-31 02:37:31 -05:00
81b777c768
fix(config): harden SecretRef round-trip handling in Control UI and RPC writes ( #58044 )
...
* Config: harden SecretRef round-trip handling
* Gateway: test SecretRef preflight on config writes
* Agents: align skill loader with upstream Skill type
* Docs: align SecretRef write semantics with Control UI and RPC behavior
* Config: add UI and gateway regression evidence for SecretRef hardening
* Config: add token SecretRef restore regression and skill sourceInfo compat
* UI: scope structured-value lockout to SecretRef fields
* Agents: remove out-of-scope skill loader compat edits
* UI: reduce app-render churn to rawAvailable-only changes
* Gateway: scope SecretRef preflight to submitted config
* Docs: clarify config write SecretRef preflight scope
* changelog
Signed-off-by: joshavant <830519+joshavant@users.noreply.github.com>
---------
Signed-off-by: joshavant <830519+joshavant@users.noreply.github.com>
2026-03-30 23:55:03 -05:00
6b6ddcd2a6
test: speed up core runtime suites
2026-03-31 02:25:02 +01:00
22f56433e0
fix(perf): bypass matrix facade for core helpers
2026-03-30 12:43:55 +09:00
168ab94eee
refactor(config): pin runtime snapshot and drop ttl cache
2026-03-29 22:57:31 +01:00
694bc082a8
fix: resolve acpx MCP secret inputs
2026-03-30 05:30:32 +09:00
b7ab0ddb55
refactor(xai): move code_execution into plugin
2026-03-28 21:35:13 +00:00
396bf20cc6
Tools: add xAI-backed code_execution
2026-03-28 21:35:13 +00:00
4f3009f57e
Tests: classify x_search secret target parity
2026-03-28 21:35:13 +00:00
38e4b77e60
Tools: add x_search via xAI Responses
2026-03-28 21:35:13 +00:00
e2a2492248
Secrets: fix Matrix default-account password activity
2026-03-28 01:08:33 -04:00
59535e3414
Matrix: align default account secret handling
2026-03-28 00:34:48 -04:00
158e7c517e
fix(matrix): resolve env SecretRef fallback in clean() for channel startup ( #54980 )
...
Merged via squash.
Prepared head SHA: b71a86e68e
2026-03-28 00:21:57 -04:00
8c277121d9
refactor: dedupe channel secret collectors
2026-03-28 03:18:54 +00:00
ffa2a47c58
test: stabilize slow contract and integration suites
2026-03-27 05:07:50 +00:00
01bcbcf8d5
refactor: require legacy config migration on read
2026-03-26 23:23:47 +00:00
d72115c9df
refactor: genericize speech provider config surface
2026-03-26 22:48:57 +00:00
61d29efc04
test: eliminate remaining clone seams
2026-03-26 20:28:36 +00:00
e7e4fbcab9
test: dedupe secrets and guardrail fixtures
2026-03-26 17:39:58 +00:00
e28b516fb5
fix(slack): trim DM reply overhead and restore Codex auto transport ( #53957 )
...
* perf(slack): instrument runtime and trim DM overhead
* perf(slack): lazy-init draft previews
* perf(slack): add turn summary diagnostics
* perf(core): trim repeated runtime setup noise
* perf(core): preselect default web search providers
* perf(agent): restore OpenAI auto transport defaults
* refactor(slack): drop temporary perf wiring
* fix(slack): address follow-up review notes
* fix(security): tighten slack and runtime defaults
* style(web-search): fix import ordering
* style(agent): remove useless spread fallback
* docs(changelog): note slack runtime hardening
2026-03-24 15:03:40 -07:00
ddf65a995a
test: speed up memory and secrets suites
2026-03-24 20:39:13 +00:00
4029ce738c
test: speed up targeted unit suites
2026-03-24 19:36:08 +00:00
a4327ad544
refactor: dedupe tests and harden suite isolation
2026-03-24 19:16:19 +00:00
d44a399ae0
fix: alphabetize web search provider listings
2026-03-23 01:46:47 -07:00
9105b3723d
test: harden no-isolate test module resets
2026-03-23 01:02:16 -07:00
af9de86286
perf: trim vitest hot imports and refresh manifests
2026-03-23 05:25:05 +00:00
6b9915a106
refactor!: drop legacy CLAWDBOT env compatibility
2026-03-22 22:13:39 -07:00
c6ca11e5a5
feat(web-search): add DuckDuckGo bundled plugin ( #52629 )
...
* feat(web-search): add DuckDuckGo bundled plugin
* chore(changelog): restore main changelog
* fix(web-search): harden DuckDuckGo challenge detection
2026-03-22 22:05:33 -07:00
29f3b7f6eb
fix: harden image auth env lookups ( #52552 ) (thanks @vincentkoc)
2026-03-22 18:42:18 -07:00
24b9baebab
fix: preserve runtime path env in secrets snapshots
2026-03-22 15:25:58 -07:00
2773f33084
test: stabilize vitest no-isolate suites
2026-03-22 14:28:43 -07:00
2364e45fe4
test: align extension runtime mocks with plugin-sdk ( #51289 )
...
* test: align extension runtime mocks with plugin-sdk
Update stale extension tests to mock the plugin-sdk runtime barrels that production code now imports, and harden the Signal tool-result harness around system-event assertions so the channels lane matches current extension boundaries.
Regeneration-Prompt: |
Verify the failing channels-lane tests against current origin/main in an isolated worktree before changing anything. If the failures reproduce on main, keep the fix test-only unless production behavior is clearly wrong. Recent extension refactors moved Telegram, WhatsApp, and Signal code onto plugin-sdk runtime barrels, so update stale tests that still mock old core module paths to intercept the seams production code now uses. For Signal reaction notifications, avoid brittle assertions that depend on shared queued system-event state when a direct harness spy on enqueue behavior is sufficient. Preserve scope: only touch the failing tests and their local harness, then rerun the reproduced targeted tests plus the full channels lane and repo check gate.
* test: fix extension test drift on main
* fix: lazy-load bundled web search plugin registry
* test: make matrix sweeper failure injection portable
* fix: split heavy matrix runtime-api seams
* fix: simplify bundled web search id lookup
* test: tolerate windows env key casing
2026-03-20 15:59:53 -07:00
e56dde815e
fix(web-search): split runtime provider resolution
2026-03-20 00:06:12 -07:00
5036ed2699
fix(secrets): cover tavily in runtime coverage tests
2026-03-20 06:13:27 +00:00
b36e456b09
feat: add Tavily as a bundled web search plugin with search and extract tools ( #49200 )
...
Merged via squash.
Prepared head SHA: ece9226e88
2026-03-20 01:06:26 -04:00
03c86b3dee
fix(secrets): mock bundled web search providers in runtime tests
2026-03-20 03:48:13 +00:00
218f8d74b6
fix(secrets): use bundled web search fast path during reload
2026-03-20 03:28:08 +00:00
d03c110a0a
fix(ci): split secrets runtime integration coverage
2026-03-19 14:49:01 -07:00
83a267e2f3
fix(ci): reset deep test runtime state
2026-03-19 14:23:32 -07:00
83c5bc946d
fix: restore full gate stability
2026-03-19 03:36:03 +00:00
f6928617b7
test: stabilize gate regressions
2026-03-18 15:36:32 +00:00
c0c3c4824d
fix: checkpoint gate fixes before rebase
2026-03-18 15:36:18 +00:00
fbd88e2c8f
Main recovery: restore formatter and contract checks ( #49570 )
...
* Extensions: fix oxfmt drift on main
* Plugins: restore runtime barrel exports on main
* Config: restore web search compatibility types
* Telegram: align test harness with reply runtime
* Plugin SDK: fix channel config accessor generics
* CLI: remove redundant search provider casts
* Tests: restore main typecheck coverage
* Lobster: fix test import formatting
* Extensions: route bundled seams through plugin-sdk
* Tests: use extension env helper for xai
* Image generation: fix main oxfmt drift
* Config: restore latest main compatibility checks
* Plugin SDK: align guardrail tests with lint
* Telegram: type native command skill mock
2026-03-18 00:30:01 -07:00
112d1d3a7c
refactor web search config ownership into extensions
2026-03-17 23:39:51 -05:00
0ffcc308f2
Secrets: gate exec dry-run and preflight resolution behind --allow-exec ( #49417 )
...
* Secrets: gate exec dry-run resolution behind --allow-exec
* Secrets: fix dry-run completeness and skipped exec audit semantics
* Secrets: require --allow-exec for exec-containing apply writes
* Docs: align secrets exec consent behavior
* Changelog: note secrets exec consent gating
2026-03-17 23:24:34 -05:00
3de973ffff
refactor web search provider execution out of core
2026-03-17 23:07:19 -05:00
e99963100d
CLI: expand config set with SecretRef/provider builders and dry-run ( #49296 )
...
* CLI: expand config set ref/provider builder and dry-run
* Docs: revert README Discord token example
2026-03-17 18:15:49 -05:00
467dae53cf
Secrets: honor caller env during runtime validation
2026-03-16 12:31:44 +00:00
Rico0919x
Peter Steinberger
Josh Avant
Vincent Koc
huntharo
Gustavo Madeira Santana
kakahu
Josh Lehman
Shakker
Lakshya Agarwal
Tak Hoffman