d00dc5f46b
fix(ci): repair discord and telegram follow-ups
2026-03-26 16:33:05 -05:00
53f90af990
test: dedupe telegram polling session harness
2026-03-26 21:30:28 +00:00
6aa9bec8d7
fix: export shared channel action enum helpers
2026-03-26 21:21:44 +00:00
0c0f1e34cb
refactor: split telegram polling and sdk surfaces
2026-03-26 21:13:16 +00:00
0805078118
fix(ci): format discord provider follow-up
2026-03-26 16:05:25 -05:00
aeee72426d
fix(ci): restore discord provider test seams
2026-03-26 15:59:51 -05:00
37894d0f1a
test: dedupe discord provider proxy overrides
2026-03-26 20:43:02 +00:00
53d3b8e92d
fix(ci): clean up discord harness types
2026-03-26 15:39:20 -05:00
a39e57a1bd
fix(ci): repair discord harness regressions
2026-03-26 15:39:20 -05:00
61d29efc04
test: eliminate remaining clone seams
2026-03-26 20:28:36 +00:00
236e041ef9
test: share discord monitor fixtures
2026-03-26 20:12:21 +00:00
e035a0d98c
telegram: rebuild transport after stalled polling cycles
2026-03-26 13:11:15 -07:00
2fc017788c
test: reduce remaining clone seams
2026-03-26 20:01:01 +00:00
b20ae13c6b
fix(ci): repair discord message handler tests
2026-03-26 14:49:06 -05:00
be328e6cd1
test: dedupe extension channel fixtures
2026-03-26 19:47:27 +00:00
e8f9d68bec
test: share cli command and discord test helpers
2026-03-26 19:37:14 +00:00
53f15afade
fix(ci): repair discord regression tests
2026-03-26 14:23:57 -05:00
ab4de18982
fix: auto-load bundled plugin capabilities from config refs
2026-03-26 19:15:56 +00:00
8f1716ae5a
refactor: share slack and telegram action helpers
2026-03-26 19:07:35 +00:00
4069844795
refactor: share discord outbound session routing
2026-03-26 18:51:02 +00:00
e774fe1286
refactor: share browser and sandbox helpers
2026-03-26 18:43:57 +00:00
c98addeadd
test: share auto-reply typing helpers
2026-03-26 18:27:13 +00:00
f29c1206cd
test: dedupe extension channel fixtures
2026-03-26 17:59:05 +00:00
f8c9863078
bluebubbles: honor reaction mention gating ( #55283 )
2026-03-26 17:42:19 +00:00
7bb95354c4
test: dedupe matrix setup seams
2026-03-26 17:04:23 +00:00
c2c136ae95
telegram: throttle repeated webhook auth guesses ( #55142 )
...
* telegram: throttle repeated webhook auth guesses
* telegram: use per-listener webhook rate limits
* config: stabilize doc baseline ordering
2026-03-26 16:19:31 +00:00
c4048aea41
test: share msteams monitor and pi runner fixtures
2026-03-26 15:40:51 +00:00
339cc33cf8
perf: speed up channel test runs
2026-03-26 15:40:01 +00:00
0b4d073374
synology-chat: throttle webhook token guesses ( #55141 )
...
* synology-chat: throttle webhook token guesses
* synology-chat: keep valid webhook traffic within configured limits
* docs: refresh generated config baseline
* synology-chat: enforce lockout after repeated token failures
2026-03-26 15:30:06 +00:00
d69ff3c022
fix(whatsapp): unwrap quoted wrapper messages
2026-03-26 10:16:33 -05:00
f56a25a596
test: dedupe foundry auth fixtures
2026-03-26 15:14:03 +00:00
a4a00aa1da
feat: pluginize cli inference backends
2026-03-26 15:11:15 +00:00
5f9f08394a
refactor: share matrix and telegram dedupe helpers
2026-03-26 15:08:45 +00:00
4b1c37a152
fix: avoid duplicate ACP Telegram finals ( #55173 )
...
* fix: avoid duplicate final ACP text on telegram
* fix: keep ACP final fallback for non-telegram blocks
* fix: count telegram ACP block replies as success
* fix: recover ACP final fallback after block failures
* fix: settle telegram ACP block delivery before fallback
* test: isolate ACP dispatch mocks under shared workers
* fix: prefer telegram provider for ACP visibility
2026-03-26 20:37:21 +05:30
2ed11a375a
refactor: share web media loader
2026-03-26 14:55:32 +00:00
5e08ce36d5
fix(bluebubbles): throttle webhook auth guesses ( #55133 )
...
* fix(bluebubbles): throttle webhook auth guesses
* test(bluebubbles): isolate attachment ssrf config
* test(bluebubbles): hoist attachment mocks
* docs: refresh bluebubbles config baseline
* fix(bluebubbles): trust proxied webhook client IPs
* fix(bluebubbles): honor trusted proxy webhook IPs
* fix(bluebubbles): honor real-ip fallback for webhooks
2026-03-26 14:54:03 +00:00
5c3e018492
refactor: dedupe msteams graph actions
2026-03-26 14:45:53 +00:00
2513a8d852
fix(bluebubbles): refactor sendMessageBlueBubbles to use resolveBlueBubblesServerAccount and enhance private network handling in tests
2026-03-26 07:21:48 -07:00
81c45976db
Feishu: reject legacy raw card command payloads ( #55130 )
...
* Feishu: reject legacy raw card callbacks
* Feishu: cover legacy text card payloads
* Docs: refresh config baseline
* CI: refresh PR checks
* Feishu: limit legacy card guard scope
2026-03-26 14:17:45 +00:00
11ea1f6786
Google Chat: require stable group ids ( #55131 )
...
* Google Chat: require stable group ids
* Google Chat: fail closed on deprecated room keys
2026-03-26 14:15:51 +00:00
cc077ef1ef
fix(bluebubbles): enable group participant enrichment by default, add fallback fetch and handle field aliases
2026-03-26 05:45:41 -07:00
b529d13477
test: fix bluebubbles attachment ssrf expectations
2026-03-26 07:25:14 -05:00
2383daf5c4
Matrix: gate verification notices on DM access ( #55122 )
2026-03-26 11:59:20 +00:00
e43600c9e5
fix(bluebubbles): auto-allow private network for local serverUrl and add allowPrivateNetwork to channel schema
2026-03-26 04:55:46 -07:00
c5415a474b
fix(msteams): align feedback invoke authorization ( #55108 )
...
* msteams: align feedback invoke authorization
* msteams: fix feedback allowlist regressions
* msteams: tighten feedback group authorization
2026-03-26 11:51:43 +00:00
269282ac69
Telegram: enforce DM auth for callbacks ( #55112 )
2026-03-26 11:42:27 +00:00
5e8cb22176
Feishu: validate webhook signatures before parsing ( #55083 )
...
* Feishu: validate webhook signatures before parsing
* Scripts: allow Feishu raw body guard callsite
2026-03-26 10:29:22 +00:00
a3b85e1583
fix(discord): force fresh gateway reconnects ( #54697 )
...
* fix(discord): force fresh gateway reconnects
* fix(discord): harden forced reconnect teardown
* fix(discord): retry after socket drain timeouts
* fix(discord): guard forced socket teardown
* fix(discord): stop cleanly during reconnect drain
2026-03-26 12:05:00 +02:00
4c85fd8569
BlueBubbles: enrich group participants with local Contacts names ( #54984 )
...
* BlueBubbles: enrich group participants with Contacts names
* BlueBubbles: gate contact enrichment behind opt in config
2026-03-26 18:38:37 +09:00
f92c92515b
fix(extensions): route fetch calls through fetchWithSsrFGuard ( #53929 )
...
* fix(extensions): route fetch calls through fetchWithSsrFGuard
Replace raw fetch() with fetchWithSsrFGuard in BlueBubbles, Mattermost,
Nextcloud Talk, and Thread Ownership extensions so outbound requests go
through the shared DNS-pinning and network-policy layer.
BlueBubbles: thread allowPrivateNetwork from account config through all
fetch call sites (send, chat, reactions, history, probe, attachments,
multipart). Add _setFetchGuardForTesting hook for test overrides.
Mattermost: add guardedFetchImpl wrapper in createMattermostClient that
buffers the response body before releasing the dispatcher. Handle
null-body status codes (204/304).
Nextcloud Talk: wrap both sendMessage and sendReaction with
fetchWithSsrFGuard and try/finally release.
Thread Ownership: add fetchWithSsrFGuard and ssrfPolicyFromAllowPrivateNetwork
to the plugin SDK surface; use allowPrivateNetwork:true for the
Docker-internal forwarder.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
* fix(extensions): improve null-body handling and test harness cleanup
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
* fix(bluebubbles): default to strict SSRF policy when allowPrivateNetwork is unset
Callers that omit allowPrivateNetwork previously got undefined policy,
which caused blueBubblesFetchWithTimeout to fall through to raw fetch
and bypass the SSRF guard entirely.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
* fix(bluebubbles): thread allowPrivateNetwork through action and monitor call sites
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
* fix(mattermost,nextcloud-talk): add allowPrivateNetwork config for self-hosted/LAN deployments
* fix: regenerate config docs baseline for new allowPrivateNetwork fields
---------
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-26 02:04:54 -07:00
Tak Hoffman
Peter Steinberger
pkuGeo
Jacob Tomlinson
Ayaan Zaidi
Tyler Yust
Nimrod Gutman
Tyler Yust