Commit Graph

14533 Commits

Author SHA1 Message Date
Tak Hoffman a0cc684d02
fix(regression): restore modelstudio sdk facade exports 2026-03-27 16:39:18 -05:00
Peter Steinberger 992b30604d refactor: move extension-owned tests to extensions 2026-03-27 21:37:09 +00:00
Peter Steinberger d506eea076 fix(ci): restore contract plugin-sdk source loading 2026-03-27 21:33:32 +00:00
Harold Hunt 7d18799bbe
Hooks: pass inbound attachment arrays to plugins (#55452)
Merged via squash.

Prepared head SHA: 062f8d0513
Co-authored-by: huntharo <5617868+huntharo@users.noreply.github.com>
Reviewed-by: @huntharo
2026-03-27 17:23:24 -04:00
Tak Hoffman c125c33724
fix(regression): honor internal provider auth for directives 2026-03-27 16:15:09 -05:00
Tak Hoffman f41cd12b54
fix(regression): restore modelstudio facade exports 2026-03-27 16:10:42 -05:00
Tak Hoffman 1a9abb13bd
fix(regression): preserve CLI continuity across chat reset 2026-03-27 16:01:37 -05:00
Peter Steinberger b50b9b16ab fix(ci): isolate discord session-key facade 2026-03-27 20:59:39 +00:00
Tak Hoffman f8edd09a2c
fix(regression): invalidate stale legacy CLI sessions 2026-03-27 15:52:47 -05:00
Peter Steinberger c73c050276 fix(ci): align compaction and skills tests with upstream agent API 2026-03-27 20:48:48 +00:00
Peter Steinberger cb5aefb790 fix: sync plugin sdk guardrails and test drift 2026-03-27 20:47:36 +00:00
Peter Steinberger 2bdbb189bd refactor: route plugin sdk facades through extension barrels 2026-03-27 20:47:36 +00:00
Tak Hoffman fa56682b3c
fix(regression): preserve CLI bindings across session reset 2026-03-27 15:47:16 -05:00
Jacob Tomlinson 8eaa3417c3
Config: skip nonexistent Tavily web-search migration 2026-03-27 20:45:59 +00:00
Peter Steinberger fa05c351a1 fix(ci): align compaction and skills tests with upstream agent API 2026-03-27 20:41:10 +00:00
Jacob Tomlinson e403decb6e
nextcloud-talk: throttle repeated webhook auth failures (#56007)
* nextcloud-talk: throttle repeated webhook auth failures

Co-authored-by: Brian Mendonca <208517100+bmendonca3@users.noreply.github.com>

* nextcloud-talk: scope webhook auth limiter per server

* nextcloud-talk: limit repeated webhook auth failures only

---------

Co-authored-by: Brian Mendonca <208517100+bmendonca3@users.noreply.github.com>
2026-03-27 20:37:55 +00:00
Jacob Tomlinson 355abe5eba
Discord: enforce approver checks for text approvals (#56015)
* Discord: gate text approvals by approver policy

* Discord: require approvers for plugin text approvals

* Discord: preserve legacy text approval fallback
2026-03-27 20:37:15 +00:00
Jacob Tomlinson be00fcfccb
Gateway: align chat.send reset scope checks (#56009)
* Gateway: align chat.send reset scope checks

* Gateway: tighten chat.send reset regression test

* Gateway: honor internal provider reset scope
2026-03-27 20:36:31 +00:00
Peter Steinberger ae7d93adc4 fix(ci): restore green check after upstream API changes 2026-03-27 20:30:35 +00:00
Peter Steinberger 41901c19bf
fix: restore green check after upstream API changes 2026-03-27 20:29:18 +00:00
Peter Steinberger 79e495a627
fix: add OpenAI version attribution header 2026-03-27 20:29:18 +00:00
Jacob Tomlinson d61f8e5672
Net: block missing IPv6 special-use ranges (#56008)
* Net: block missing IPv6 special-use ranges

* Tests: refresh public IPv6 pinning fixtures
2026-03-27 20:28:25 +00:00
Peter Steinberger d73dbb6753 fix: restore provider auth and build checks 2026-03-27 20:20:31 +00:00
Peter Steinberger c28e76c490 refactor: move provider model helpers into plugins 2026-03-27 20:20:31 +00:00
Peter Steinberger 5d3d54ee36 refactor: generate plugin sdk facades 2026-03-27 20:20:31 +00:00
Tak Hoffman 4430805719
Allow inherited AWS config file paths 2026-03-27 15:16:19 -05:00
Tak Hoffman 8bcab7ec6f
Allow manual remote URL after trust decline 2026-03-27 15:16:19 -05:00
Tak Hoffman c3d45fbb19
Fallback to Jiti when bun is unavailable 2026-03-27 15:16:19 -05:00
Tak Hoffman fa89d68e7a
Fix compaction safeguard request auth lookup 2026-03-27 15:16:19 -05:00
Peter Steinberger 49dbf64ab1 fix(core): harden bundled provider runtime surfaces 2026-03-27 20:04:53 +00:00
Jacob Tomlinson cf10183389
plugins: disable native jiti loading under bun 2026-03-27 20:02:59 +00:00
Peter Steinberger 605c9306ab fix(ci): repair extension and discord test gates 2026-03-27 19:26:25 +00:00
Jacob Tomlinson 4d7cc6bb4f
gateway: restrict node pairing approvals (#55951)
* gateway: restrict node pairing approvals

* gateway: tighten node pairing scope checks

* gateway: harden node pairing reconnects

* agents: request elevated node pairing scopes

* agents: fix node pairing approval preflight scopes
2026-03-27 19:14:16 +00:00
Jacob Tomlinson 9ec44fad39
Exec approvals: reject wrapper carrier allow-always targets (#55947)
* Exec approvals: reject wrapper carrier allow-always targets

Co-authored-by: nexrin <268879349+nexrin@users.noreply.github.com>

* Tests: add shell wrapper carrier follow-up assertion

---------

Co-authored-by: nexrin <268879349+nexrin@users.noreply.github.com>
2026-03-27 19:07:47 +00:00
Jacob Tomlinson 824e16f9dd
fix(media): require fs access for dynamic local roots (#55946)
* fix(media): require fs access for dynamic local roots

* fix(media): tighten fs root expansion policy

* fix(media): align fs root expansion with effective policy
2026-03-27 19:06:02 +00:00
Jacob Tomlinson c603123528
fix(gateway): require admin for persisted verbose defaults (#55916)
* fix(gateway): require admin for verbose persistence

* gateway: tighten verbose persistence follow-ups
2026-03-27 19:04:02 +00:00
Jacob Tomlinson 7a801cc451
Gateway: disconnect revoked device sessions (#55952)
* Gateway: disconnect revoked device sessions

* Gateway: normalize device disconnect targets

* Gateway: scope token revoke disconnects by role

* Gateway: respond before disconnecting sessions
2026-03-27 19:01:26 +00:00
Jacob Tomlinson fef1b1918c SDK: break channel plugin import cycle 2026-03-27 19:00:57 +00:00
Jacob Tomlinson 4ee4960de2
Pairing: forward caller scopes during approval (#55950)
* Pairing: require caller scopes on approvals

* Gateway: reject forbidden silent pairing results
2026-03-27 18:55:33 +00:00
Jacob Tomlinson 6eb82fba3c
Infra: block additional host exec env keys (#55977) 2026-03-27 18:50:37 +00:00
Jacob Tomlinson fdbcfced84
Agents: enforce session status visibility (#55904)
* Agents: enforce session_status visibility

* Agents: preserve sandboxed session_status visibility checks
2026-03-27 18:49:24 +00:00
Jacob Tomlinson b7b3c806b4
fix(compaction): guard legacy model registry auth lookup 2026-03-27 18:44:54 +00:00
Jacob Tomlinson d6affb17d8
CLI: confirm discovered remote gateways before saving config (#55895)
* CLI: require trust confirmation for discovered remote gateways

Co-authored-by: nexrin <268879349+nexrin@users.noreply.github.com>

* CLI: clear discovery pin when remote URL changes

---------

Co-authored-by: nexrin <268879349+nexrin@users.noreply.github.com>
2026-03-27 18:43:42 +00:00
Peter Steinberger c9d68fb9c2 fix: repair ci test and loader regressions 2026-03-27 18:41:47 +00:00
glitch 3cec3bd48b
fix(memory): share embedding providers across plugin runtime splits (#55945)
Merged via squash.

Prepared head SHA: e913806211
Co-authored-by: glitch418x <189487110+glitch418x@users.noreply.github.com>
Co-authored-by: altaywtf <9790196+altaywtf@users.noreply.github.com>
Reviewed-by: @altaywtf
2026-03-27 21:40:19 +03:00
Jacob Tomlinson 78e2f3d66d
Exec: tighten jq safe-bin env checks (#55905) 2026-03-27 18:37:31 +00:00
Jacob Tomlinson c774db9a1f
fix(compaction): pass summary headers before abort signal 2026-03-27 18:35:31 +00:00
Jacob Tomlinson 25210317b8
fix(skills): adapt skill source metadata API 2026-03-27 18:28:45 +00:00
Peter Steinberger 694619caaf
fix(runtime): narrow discord binding targets after rebase 2026-03-27 18:15:40 +00:00
Peter Steinberger 6e107b8857
fix(runtime): stabilize provider and channel runtime tests 2026-03-27 18:15:40 +00:00