Commit Graph

22696 Commits

Author SHA1 Message Date
Jacob Tomlinson aa66ae1fc7
Extensions: require admin for config write commands (#56002)
* Extensions: require admin for config write commands

* Tests: cover phone control disarm auth
2026-03-27 20:35:42 +00:00
Jacob Tomlinson e64a881ae0
Channels: preserve routed group policy (#56011) 2026-03-27 20:33:47 +00:00
Tak Hoffman 77060aa9f9
fix(regression): preserve Telegram status fallback without runtime 2026-03-27 15:33:10 -05:00
Peter Steinberger ae7d93adc4 fix(ci): restore green check after upstream API changes 2026-03-27 20:30:35 +00:00
Peter Steinberger 41901c19bf
fix: restore green check after upstream API changes 2026-03-27 20:29:18 +00:00
Peter Steinberger 79e495a627
fix: add OpenAI version attribution header 2026-03-27 20:29:18 +00:00
Jacob Tomlinson d61f8e5672
Net: block missing IPv6 special-use ranges (#56008)
* Net: block missing IPv6 special-use ranges

* Tests: refresh public IPv6 pinning fixtures
2026-03-27 20:28:25 +00:00
Jacob Tomlinson 85777e726c
Voice Call: canonicalize Plivo V3 replay key (#56003)
Co-authored-by: zsx <git@zsxsoft.com>
2026-03-27 20:27:23 +00:00
Peter Steinberger d73dbb6753 fix: restore provider auth and build checks 2026-03-27 20:20:31 +00:00
Peter Steinberger c28e76c490 refactor: move provider model helpers into plugins 2026-03-27 20:20:31 +00:00
Peter Steinberger 5d3d54ee36 refactor: generate plugin sdk facades 2026-03-27 20:20:31 +00:00
Peter Steinberger 888be707cf fix(hooks): avoid repo-wide format churn 2026-03-27 20:19:53 +00:00
Tak Hoffman 4430805719
Allow inherited AWS config file paths 2026-03-27 15:16:19 -05:00
Tak Hoffman 8bcab7ec6f
Allow manual remote URL after trust decline 2026-03-27 15:16:19 -05:00
Tak Hoffman c3d45fbb19
Fallback to Jiti when bun is unavailable 2026-03-27 15:16:19 -05:00
Tak Hoffman fa89d68e7a
Fix compaction safeguard request auth lookup 2026-03-27 15:16:19 -05:00
Peter Steinberger 4505987b9c style(ui): format control views 2026-03-27 20:15:13 +00:00
Jacob Tomlinson eb6a3fca26
telegram: use live runtime helpers in channel status 2026-03-27 20:14:33 +00:00
Peter Steinberger 953a438420 fix(discord): align rate-limit error callsites 2026-03-27 20:09:15 +00:00
Peter Steinberger 49dbf64ab1 fix(core): harden bundled provider runtime surfaces 2026-03-27 20:04:53 +00:00
Jacob Tomlinson cf10183389
plugins: disable native jiti loading under bun 2026-03-27 20:02:59 +00:00
Jacob Tomlinson 3e4222e9d4
docs: fix duplicate testing heading 2026-03-27 19:50:09 +00:00
Vincent Koc 02e3061aa7
fix(discord): stop queued reconnect exhaustion crash (#55991) 2026-03-27 12:39:38 -07:00
Peter Steinberger 496a1a35bd fix(test): stabilize line and irc extension suites 2026-03-27 19:32:57 +00:00
Byungsker 1dae6cc617
docs(agent-loop): correct default timeoutSeconds from 600s to 172800s (48h) (#55419)
* docs(agent-loop): correct default timeoutSeconds from 600s to 172800s (48h)

The default was raised to 48 hours in PR #51874 (merged 2026-03-21) to
avoid cutting off long-running ACP sessions, but the docs were not
updated at the time. Closes #55380.

* docs: remove 'Use 0 to disable' per aisle security review
2026-03-27 12:31:24 -07:00
Jacob Tomlinson 16ed9bf147
config: fall back to jiti for channel config surfaces 2026-03-27 19:27:35 +00:00
Peter Steinberger 605c9306ab fix(ci): repair extension and discord test gates 2026-03-27 19:26:25 +00:00
Jacob Tomlinson febcb01128
discord: fix Carbon RateLimitError calls 2026-03-27 19:16:36 +00:00
Jacob Tomlinson 4d7cc6bb4f
gateway: restrict node pairing approvals (#55951)
* gateway: restrict node pairing approvals

* gateway: tighten node pairing scope checks

* gateway: harden node pairing reconnects

* agents: request elevated node pairing scopes

* agents: fix node pairing approval preflight scopes
2026-03-27 19:14:16 +00:00
Jacob Tomlinson 68ceaf7a5f
zalo: gate image downloads before DM auth (#55979)
* zalo: gate image downloads before DM auth

* zalo: clarify pre-download auth sentinel
2026-03-27 19:12:26 +00:00
Jacob Tomlinson 9ec44fad39
Exec approvals: reject wrapper carrier allow-always targets (#55947)
* Exec approvals: reject wrapper carrier allow-always targets

Co-authored-by: nexrin <268879349+nexrin@users.noreply.github.com>

* Tests: add shell wrapper carrier follow-up assertion

---------

Co-authored-by: nexrin <268879349+nexrin@users.noreply.github.com>
2026-03-27 19:07:47 +00:00
Nimrod Gutman 7ce2670043
fix(discord): update carbon beta (#55980)
* fix(discord): update carbon beta

* fix: update carbon beta (#55980) (thanks @ngutman)
2026-03-27 22:06:20 +03:00
Jacob Tomlinson 824e16f9dd
fix(media): require fs access for dynamic local roots (#55946)
* fix(media): require fs access for dynamic local roots

* fix(media): tighten fs root expansion policy

* fix(media): align fs root expansion with effective policy
2026-03-27 19:06:02 +00:00
Jacob Tomlinson c603123528
fix(gateway): require admin for persisted verbose defaults (#55916)
* fix(gateway): require admin for verbose persistence

* gateway: tighten verbose persistence follow-ups
2026-03-27 19:04:02 +00:00
joshavant 55cd272fe1
changelog correction
Signed-off-by: joshavant <830519+joshavant@users.noreply.github.com>
2026-03-27 12:02:44 -07:00
Jacob Tomlinson 7a801cc451
Gateway: disconnect revoked device sessions (#55952)
* Gateway: disconnect revoked device sessions

* Gateway: normalize device disconnect targets

* Gateway: scope token revoke disconnects by role

* Gateway: respond before disconnecting sessions
2026-03-27 19:01:26 +00:00
Jacob Tomlinson fef1b1918c SDK: break channel plugin import cycle 2026-03-27 19:00:57 +00:00
Jacob Tomlinson 80d1e8a11a
fal: guard image fetches (#55948)
* fal: guard image fetches

* fal: isolate guarded fetch tests

* fal: trust configured relay hosts
2026-03-27 18:59:25 +00:00
Peter Steinberger 2f13758f42 test: stabilize extension ci mocks 2026-03-27 18:55:58 +00:00
Jacob Tomlinson 4ee4960de2
Pairing: forward caller scopes during approval (#55950)
* Pairing: require caller scopes on approvals

* Gateway: reject forbidden silent pairing results
2026-03-27 18:55:33 +00:00
Jacob Tomlinson 2e23d44491
tests(feishu): reload chat tool after mock reset 2026-03-27 18:53:39 +00:00
Jacob Tomlinson 6eb82fba3c
Infra: block additional host exec env keys (#55977) 2026-03-27 18:50:37 +00:00
Jacob Tomlinson fdbcfced84
Agents: enforce session status visibility (#55904)
* Agents: enforce session_status visibility

* Agents: preserve sandboxed session_status visibility checks
2026-03-27 18:49:24 +00:00
Jacob Tomlinson b7b3c806b4
fix(compaction): guard legacy model registry auth lookup 2026-03-27 18:44:54 +00:00
Jacob Tomlinson d6affb17d8
CLI: confirm discovered remote gateways before saving config (#55895)
* CLI: require trust confirmation for discovered remote gateways

Co-authored-by: nexrin <268879349+nexrin@users.noreply.github.com>

* CLI: clear discovery pin when remote URL changes

---------

Co-authored-by: nexrin <268879349+nexrin@users.noreply.github.com>
2026-03-27 18:43:42 +00:00
Peter Steinberger c9d68fb9c2 fix: repair ci test and loader regressions 2026-03-27 18:41:47 +00:00
glitch 3cec3bd48b
fix(memory): share embedding providers across plugin runtime splits (#55945)
Merged via squash.

Prepared head SHA: e913806211
Co-authored-by: glitch418x <189487110+glitch418x@users.noreply.github.com>
Co-authored-by: altaywtf <9790196+altaywtf@users.noreply.github.com>
Reviewed-by: @altaywtf
2026-03-27 21:40:19 +03:00
Jacob Tomlinson 78e2f3d66d
Exec: tighten jq safe-bin env checks (#55905) 2026-03-27 18:37:31 +00:00
Jacob Tomlinson c774db9a1f
fix(compaction): pass summary headers before abort signal 2026-03-27 18:35:31 +00:00
Jacob Tomlinson 25210317b8
fix(skills): adapt skill source metadata API 2026-03-27 18:28:45 +00:00