Commit Graph

22714 Commits

Author SHA1 Message Date
Peter Steinberger c813222671 fix(ci): support discord rate limit ctor drift 2026-03-27 20:54:23 +00:00
Tak Hoffman f8edd09a2c
fix(regression): invalidate stale legacy CLI sessions 2026-03-27 15:52:47 -05:00
Peter Steinberger c73c050276 fix(ci): align compaction and skills tests with upstream agent API 2026-03-27 20:48:48 +00:00
Peter Steinberger 03333100ba fix(ci): align discord rate limit calls and telegram test imports 2026-03-27 20:48:21 +00:00
Peter Steinberger cb5aefb790 fix: sync plugin sdk guardrails and test drift 2026-03-27 20:47:36 +00:00
Peter Steinberger 2bdbb189bd refactor: route plugin sdk facades through extension barrels 2026-03-27 20:47:36 +00:00
Tak Hoffman fa56682b3c
fix(regression): preserve CLI bindings across session reset 2026-03-27 15:47:16 -05:00
Tak Hoffman 9446ee8ea3
fix(regression): restore Telegram fallback probe coverage 2026-03-27 15:47:16 -05:00
Jacob Tomlinson 8eaa3417c3
Config: skip nonexistent Tavily web-search migration 2026-03-27 20:45:59 +00:00
Tak Hoffman fc570934de
fix(regression): refresh Telegram probe test imports 2026-03-27 15:42:03 -05:00
Tak Hoffman 7772395618
fix(regression): isolate Telegram runtime helper tests 2026-03-27 15:42:03 -05:00
Tak Hoffman 366c1d6b9e
fix(regression): tighten Telegram runtime helper coverage 2026-03-27 15:42:03 -05:00
Peter Steinberger fa05c351a1 fix(ci): align compaction and skills tests with upstream agent API 2026-03-27 20:41:10 +00:00
Jacob Tomlinson 20c7cbbf78
Telegram: tighten media SSRF policy (#56004)
* Telegram: tighten media SSRF policy

* Telegram: restrict media downloads to configured hosts

* Telegram: preserve custom media apiRoot hosts
2026-03-27 20:39:24 +00:00
Jacob Tomlinson 511093d4b3
Discord: apply component interaction policy gates (#56014)
* Discord: apply component interaction policy gates

Co-authored-by: nexrin <268879349+nexrin@users.noreply.github.com>

* Discord: pass carbon rate limit request

* Discord: reply to blocked component interactions

---------

Co-authored-by: nexrin <268879349+nexrin@users.noreply.github.com>
2026-03-27 20:38:40 +00:00
Jacob Tomlinson e403decb6e
nextcloud-talk: throttle repeated webhook auth failures (#56007)
* nextcloud-talk: throttle repeated webhook auth failures

Co-authored-by: Brian Mendonca <208517100+bmendonca3@users.noreply.github.com>

* nextcloud-talk: scope webhook auth limiter per server

* nextcloud-talk: limit repeated webhook auth failures only

---------

Co-authored-by: Brian Mendonca <208517100+bmendonca3@users.noreply.github.com>
2026-03-27 20:37:55 +00:00
Jacob Tomlinson 355abe5eba
Discord: enforce approver checks for text approvals (#56015)
* Discord: gate text approvals by approver policy

* Discord: require approvers for plugin text approvals

* Discord: preserve legacy text approval fallback
2026-03-27 20:37:15 +00:00
Jacob Tomlinson be00fcfccb
Gateway: align chat.send reset scope checks (#56009)
* Gateway: align chat.send reset scope checks

* Gateway: tighten chat.send reset regression test

* Gateway: honor internal provider reset scope
2026-03-27 20:36:31 +00:00
Jacob Tomlinson aa66ae1fc7
Extensions: require admin for config write commands (#56002)
* Extensions: require admin for config write commands

* Tests: cover phone control disarm auth
2026-03-27 20:35:42 +00:00
Jacob Tomlinson e64a881ae0
Channels: preserve routed group policy (#56011) 2026-03-27 20:33:47 +00:00
Tak Hoffman 77060aa9f9
fix(regression): preserve Telegram status fallback without runtime 2026-03-27 15:33:10 -05:00
Peter Steinberger ae7d93adc4 fix(ci): restore green check after upstream API changes 2026-03-27 20:30:35 +00:00
Peter Steinberger 41901c19bf
fix: restore green check after upstream API changes 2026-03-27 20:29:18 +00:00
Peter Steinberger 79e495a627
fix: add OpenAI version attribution header 2026-03-27 20:29:18 +00:00
Jacob Tomlinson d61f8e5672
Net: block missing IPv6 special-use ranges (#56008)
* Net: block missing IPv6 special-use ranges

* Tests: refresh public IPv6 pinning fixtures
2026-03-27 20:28:25 +00:00
Jacob Tomlinson 85777e726c
Voice Call: canonicalize Plivo V3 replay key (#56003)
Co-authored-by: zsx <git@zsxsoft.com>
2026-03-27 20:27:23 +00:00
Peter Steinberger d73dbb6753 fix: restore provider auth and build checks 2026-03-27 20:20:31 +00:00
Peter Steinberger c28e76c490 refactor: move provider model helpers into plugins 2026-03-27 20:20:31 +00:00
Peter Steinberger 5d3d54ee36 refactor: generate plugin sdk facades 2026-03-27 20:20:31 +00:00
Peter Steinberger 888be707cf fix(hooks): avoid repo-wide format churn 2026-03-27 20:19:53 +00:00
Tak Hoffman 4430805719
Allow inherited AWS config file paths 2026-03-27 15:16:19 -05:00
Tak Hoffman 8bcab7ec6f
Allow manual remote URL after trust decline 2026-03-27 15:16:19 -05:00
Tak Hoffman c3d45fbb19
Fallback to Jiti when bun is unavailable 2026-03-27 15:16:19 -05:00
Tak Hoffman fa89d68e7a
Fix compaction safeguard request auth lookup 2026-03-27 15:16:19 -05:00
Peter Steinberger 4505987b9c style(ui): format control views 2026-03-27 20:15:13 +00:00
Jacob Tomlinson eb6a3fca26
telegram: use live runtime helpers in channel status 2026-03-27 20:14:33 +00:00
Peter Steinberger 953a438420 fix(discord): align rate-limit error callsites 2026-03-27 20:09:15 +00:00
Peter Steinberger 49dbf64ab1 fix(core): harden bundled provider runtime surfaces 2026-03-27 20:04:53 +00:00
Jacob Tomlinson cf10183389
plugins: disable native jiti loading under bun 2026-03-27 20:02:59 +00:00
Jacob Tomlinson 3e4222e9d4
docs: fix duplicate testing heading 2026-03-27 19:50:09 +00:00
Vincent Koc 02e3061aa7
fix(discord): stop queued reconnect exhaustion crash (#55991) 2026-03-27 12:39:38 -07:00
Peter Steinberger 496a1a35bd fix(test): stabilize line and irc extension suites 2026-03-27 19:32:57 +00:00
Byungsker 1dae6cc617
docs(agent-loop): correct default timeoutSeconds from 600s to 172800s (48h) (#55419)
* docs(agent-loop): correct default timeoutSeconds from 600s to 172800s (48h)

The default was raised to 48 hours in PR #51874 (merged 2026-03-21) to
avoid cutting off long-running ACP sessions, but the docs were not
updated at the time. Closes #55380.

* docs: remove 'Use 0 to disable' per aisle security review
2026-03-27 12:31:24 -07:00
Jacob Tomlinson 16ed9bf147
config: fall back to jiti for channel config surfaces 2026-03-27 19:27:35 +00:00
Peter Steinberger 605c9306ab fix(ci): repair extension and discord test gates 2026-03-27 19:26:25 +00:00
Jacob Tomlinson febcb01128
discord: fix Carbon RateLimitError calls 2026-03-27 19:16:36 +00:00
Jacob Tomlinson 4d7cc6bb4f
gateway: restrict node pairing approvals (#55951)
* gateway: restrict node pairing approvals

* gateway: tighten node pairing scope checks

* gateway: harden node pairing reconnects

* agents: request elevated node pairing scopes

* agents: fix node pairing approval preflight scopes
2026-03-27 19:14:16 +00:00
Jacob Tomlinson 68ceaf7a5f
zalo: gate image downloads before DM auth (#55979)
* zalo: gate image downloads before DM auth

* zalo: clarify pre-download auth sentinel
2026-03-27 19:12:26 +00:00
Jacob Tomlinson 9ec44fad39
Exec approvals: reject wrapper carrier allow-always targets (#55947)
* Exec approvals: reject wrapper carrier allow-always targets

Co-authored-by: nexrin <268879349+nexrin@users.noreply.github.com>

* Tests: add shell wrapper carrier follow-up assertion

---------

Co-authored-by: nexrin <268879349+nexrin@users.noreply.github.com>
2026-03-27 19:07:47 +00:00
Nimrod Gutman 7ce2670043
fix(discord): update carbon beta (#55980)
* fix(discord): update carbon beta

* fix: update carbon beta (#55980) (thanks @ngutman)
2026-03-27 22:06:20 +03:00