Commit Graph

10481 Commits

Author SHA1 Message Date
Peter Steinberger ddfdd20d79 docs: update Slack/Discord allowFrom references 2026-02-15 03:49:33 +01:00
Vignesh Natarajan d7c0bbd7cd chore (changelog): note stable memory status dirty reporting 2026-02-14 18:48:58 -08:00
Vignesh Natarajan 44bbb4ddf4 chore (memory): add status dirty rebound regression test 2026-02-14 18:48:58 -08:00
Vignesh Natarajan 7addb519da fix (memory/builtin): keep status dirty state stable across invocations 2026-02-14 18:48:58 -08:00
Peter Steinberger cf04208cb9 fix(allowlist): canonicalize Slack/Discord allowFrom 2026-02-15 03:46:16 +01:00
Vignesh Natarajan 3c3695d7c2 chore (changelog): note narrow-terminal TUI sanitizer hardening 2026-02-14 18:45:07 -08:00
Vignesh Natarajan 7572070f4e chore (tui): add sanitizer regressions for narrow width safety 2026-02-14 18:45:07 -08:00
Vignesh Natarajan de02b07209 fix (tui): harden render sanitization for narrow terminals 2026-02-14 18:45:07 -08:00
Peter Steinberger f9bb748a6c fix(memory): prevent QMD scope deny bypass 2026-02-15 02:41:45 +00:00
Vignesh Natarajan 014b42dd45 chore (changelog): note TUI tool-boundary stream fix 2026-02-14 18:41:14 -08:00
Vignesh Natarajan f7121677f3 chore (tui): add stream assembler regression for tool boundary drops 2026-02-14 18:41:14 -08:00
Vignesh Natarajan 7d7ab8a09a fix (tui): preserve streamed text across tool boundary deltas 2026-02-14 18:41:14 -08:00
Peter Steinberger 725741486f fix(discord): harden voice message media loading 2026-02-15 03:41:08 +01:00
Vignesh Natarajan a6f3048e44 chore (tests): format apply-patch e2e test 2026-02-14 18:38:15 -08:00
Peter Steinberger 424c718bc5 fix(security): apply tools.fs.workspaceOnly to sandbox file tools 2026-02-15 03:36:31 +01:00
Vignesh Natarajan 44570d9deb chore (changelog): note TUI binary history render hardening 2026-02-14 18:29:54 -08:00
Vignesh Natarajan d6a635ed48 chore (tui): replace control-char regex with codepoint sanitizer 2026-02-14 18:29:54 -08:00
Vignesh Natarajan 750a7146e4 fix (tui): sanitize binary-heavy history text before render 2026-02-14 18:29:54 -08:00
Peter Steinberger 914b9d1e79 fix(agents): block workspaceOnly apply_patch delete symlink escape 2026-02-15 03:28:25 +01:00
Peter Steinberger 683aa09b55
refactor(media): harden localRoots bypass (#16739)
Merged via /review-pr -> /prepare-pr -> /merge-pr.

Prepared head SHA: 89dce69f50
Co-authored-by: steipete <58493+steipete@users.noreply.github.com>
Co-authored-by: steipete <58493+steipete@users.noreply.github.com>
Reviewed-by: @steipete
2026-02-15 03:27:01 +01:00
Vignesh Natarajan b607c41a52 chore (changelog): note TUI concurrent stream hardening 2026-02-14 18:25:14 -08:00
Vignesh Natarajan 61228639c2 fix (tui): preserve active stream during concurrent run finals 2026-02-14 18:25:13 -08:00
Peter Steinberger a7eb0dd9a5 fix(security): harden Windows child process spawning 2026-02-15 03:24:55 +01:00
Peter Steinberger 7b697d6128 fix(config): stop defaulting slack/discord dm.policy 2026-02-15 02:21:38 +00:00
Vignesh Natarajan b2f66b1797 chore (changelog): note memory-lancedb auto-capture opt-in 2026-02-14 18:20:58 -08:00
Vignesh Natarajan ed7d83bcfc fix (memory/lancedb): require explicit opt-in for auto-capture 2026-02-14 18:20:48 -08:00
Vignesh Natarajan 3ca74f8e6d chore (changelog): note memory-lancedb injection hardening 2026-02-14 18:19:56 -08:00
Vignesh Natarajan 61725fb37e fix (memory/lancedb): harden memory recall and auto-capture 2026-02-14 18:19:56 -08:00
Peter Steinberger 444a910d9e fix(infra): avoid req.destroy(err) in request body limiters 2026-02-15 03:19:27 +01:00
Peter Steinberger 4a44da7d91 fix(security): default apply_patch workspace containment 2026-02-15 03:19:27 +01:00
Christian Klotz 68c78c4b43
fix: deliver tool result media when verbose is off (#16679)
Merged via /review-pr -> /prepare-pr -> /merge-pr.

Prepared head SHA: 6e16feb164
Co-authored-by: christianklotz <69443+christianklotz@users.noreply.github.com>
Co-authored-by: christianklotz <69443+christianklotz@users.noreply.github.com>
Reviewed-by: @christianklotz
2026-02-15 02:18:57 +00:00
Vignesh Natarajan 906c32da12 chore (exec): add PTY background abort regression test 2026-02-14 18:18:03 -08:00
Vignesh Natarajan 19238f098b Changelog: note subagent announce queue retry hardening 2026-02-14 18:14:18 -08:00
Vignesh Natarajan bbbec7a5c1 Subagents: add announce queue failure retry regressions 2026-02-14 18:14:15 -08:00
Vignesh Natarajan 2a83609287 Subagents: retain announce queue items on send failure 2026-02-14 18:14:11 -08:00
Vignesh Natarajan 28ff755623 Changelog: note QMD null-byte collection self-heal 2026-02-14 18:09:12 -08:00
Vignesh Natarajan df820f0315 Memory/QMD: add null-byte collection repair regressions 2026-02-14 18:09:12 -08:00
Vignesh Natarajan 2dfbb407ba Memory/QMD: self-heal null-byte collection metadata on update 2026-02-14 18:09:12 -08:00
Peter Steinberger b79e7fdb7a
fix(image): propagate workspace root for image allowlist (#16722)
Merged via /review-pr -> /prepare-pr -> /merge-pr.

Prepared head SHA: 24a13675cb
Co-authored-by: steipete <58493+steipete@users.noreply.github.com>
Co-authored-by: steipete <58493+steipete@users.noreply.github.com>
Reviewed-by: @steipete
2026-02-15 03:08:28 +01:00
Vignesh Natarajan 69dd1a31bf Changelog: note remote skills cache disconnect cleanup 2026-02-14 18:02:17 -08:00
Vignesh Natarajan dabfcbe941 Skills: clean up remote node cache on disconnect 2026-02-14 18:02:14 -08:00
Vignesh Natarajan 6f6954fb34 Changelog: note directory cache bounds hardening 2026-02-14 17:58:11 -08:00
Vignesh Natarajan 48fef27862 Outbound: bound directory cache memory growth 2026-02-14 17:58:07 -08:00
Vignesh Natarajan c6bac6703e Changelog: note Slack thread starter cache bounds 2026-02-14 17:55:25 -08:00
Vignesh Natarajan 6d0cd54ac1 Slack: bound thread starter cache growth 2026-02-14 17:55:25 -08:00
Peter Steinberger 1ff15e60d3 chore(release): bump versions to 2026.2.14 2026-02-15 02:53:35 +01:00
Vignesh Natarajan bb53d984d3 Changelog: note abort memory map hardening 2026-02-14 17:52:24 -08:00
Vignesh Natarajan 414b7db8af Auto-reply: bound abort memory map growth 2026-02-14 17:52:19 -08:00
Vignesh Natarajan 377bb9073e Changelog: note agentRunSeq map hardening 2026-02-14 17:50:52 -08:00
Vignesh Natarajan fc8f59261a Gateway: bound agent run sequence tracking 2026-02-14 17:50:49 -08:00