50e1eb56d7
fix(security): harden discord proxy and bundled channel activation ( #60455 )
...
* fix(security): tighten discord proxy and mobile tls guards
* fix(plugins): enforce allowlists for bundled channels
* fix(types): align callers with removed legacy config aliases
* fix(security): preserve bundled channel opt-in and ipv6 proxies
2026-04-04 02:48:52 +09:00
379c329f81
test: trim dispatch and command partial mocks
2026-04-03 18:42:52 +01:00
68edc53090
test: trim doctor and gateway partial mocks
2026-04-03 18:33:47 +01:00
fb9be1fcb6
test: trim models and cron partial mocks
2026-04-03 18:33:47 +01:00
5fbef0f914
fix(ci): resolve tracked merge markers
2026-04-03 18:22:03 +01:00
2981cce130
fix: align config and plugin test types
2026-04-03 18:18:56 +01:00
745f1c9812
fix(types): align callers with removed legacy config aliases
2026-04-04 01:50:44 +09:00
21002a60be
test: align legacy streaming config coverage
2026-04-03 17:43:55 +01:00
c7a947dc0a
fix(config): remove legacy config aliases from public schema
2026-04-04 01:24:14 +09:00
8bd3067e69
refactor: move built-in channel normalization to ids
2026-04-04 01:07:28 +09:00
7c6eba4634
test(config): cover thread binding legacy doctor paths
2026-04-04 00:26:41 +09:00
af835acd00
test(config): cover legacy tts doctor paths
2026-04-04 00:21:45 +09:00
c71df2f4b0
test(commands): allow scoped channel test registries
2026-04-04 00:18:34 +09:00
0f129c87ba
test(config): cover telegram and x_search legacy doctor paths
2026-04-04 00:16:57 +09:00
5ad2c61c9a
test(config): cover gateway bind legacy doctor flow
2026-04-04 00:07:19 +09:00
ca68d57dc2
test(config): cover legacy heartbeat and memorySearch doctor paths
2026-04-04 00:04:25 +09:00
ad8870ae28
test: narrow gateway and model status runtime seams
2026-04-03 16:03:32 +01:00
fbd361d338
fix(config): surface legacy channel streaming aliases ( #60358 )
2026-04-04 00:00:38 +09:00
35cf7d0340
fix(config): migrate legacy sandbox perSession alias ( #60346 )
...
* fix(config): migrate legacy sandbox perSession alias
* fix(config): preserve invalid sandbox persession values
2026-04-03 23:55:47 +09:00
279ee5e842
test(commands): lazy-load default channel registry plugins
2026-04-03 23:48:38 +09:00
316da43dd7
fix(config): migrate legacy talk config via doctor ( #60333 )
...
* fix(config): migrate legacy talk config via doctor
* fix(config): harden legacy talk provider migration
2026-04-03 23:32:36 +09:00
0d7d573cd6
test(commands): split default channel test registry helper
2026-04-03 23:29:24 +09:00
52008e2e60
fix(doctor): clarify legacy config migration guidance ( #60326 )
2026-04-03 23:16:11 +09:00
8962a8fb73
test: reduce status and update-cli partial mocks
2026-04-03 14:37:47 +01:00
3b727d2433
test: harden package-root mocks after setup slimming
2026-04-03 14:17:16 +01:00
3a2667b5fc
test: fix status and update-cli mock drift
2026-04-03 14:06:32 +01:00
f59d0eac68
refactor(plugin-runtime): remove plugin-specific core seams
2026-04-03 13:08:39 +01:00
e2e1197fa9
refactor(gateway): clarify local mode guardrails
2026-04-03 20:02:32 +09:00
32ebaa3757
refactor: share session model resolution helpers
2026-04-03 19:37:56 +09:00
2766c27b2a
refactor(plugin-sdk): genericize web channel runtime seams
2026-04-03 11:17:28 +01:00
051b5ddafe
test: dedupe core test teardown paths
2026-04-03 07:14:58 +01:00
f911bbc353
refactor(plugins): separate activation from enablement ( #59844 )
...
* refactor(plugins): separate activation from enablement
* fix(cli): sanitize verbose plugin activation reasons
2026-04-03 03:22:37 +09:00
efe9464f5f
fix(tasks): tighten task-flow CLI surface ( #59757 )
...
* fix(tasks): tighten task-flow CLI surface
* fix(tasks): sanitize task-flow CLI text output
2026-04-03 00:25:10 +09:00
d46240090a
test(tasks): add task-flow operator coverage ( #59683 )
2026-04-02 23:58:33 +09:00
3872a866a1
fix(xai): make x_search auth plugin-owned ( #59691 )
...
* fix(xai): make x_search auth plugin-owned
* fix(xai): restore x_search runtime migration fallback
* fix(xai): narrow legacy x_search auth migration
* fix(secrets): drop legacy x_search target registry entry
* fix(xai): no-op knob-only x_search migration fallback
2026-04-02 23:54:07 +09:00
53c29df2a9
Channel setup: ignore untrusted workspace shadows ( #59158 )
...
Keeps untrusted workspace channel metadata from overriding setup/login resolution for built-in channels. Workspace channel entries are only eligible during setup when the plugin is already explicitly trusted in config.
- Track discovered origin on channel catalog entries and add a setup-time catalog lookup that excludes workspace discoveries when needed
- Add resolver regression coverage for untrusted shadowing and trusted workspace overrides
Thanks @mappel-nv
2026-04-02 07:40:23 -07:00
c678ae7e7a
feat(exec): default host exec to yolo
2026-04-02 14:52:51 +01:00
def5b954a8
feat(plugins): surface imported runtime state in status tooling ( #59659 )
...
* feat(plugins): surface imported runtime state
* fix(plugins): keep status imports snapshot-only
* fix(plugins): keep status snapshots manifest-only
* fix(plugins): restore doctor load checks
* refactor(plugins): split snapshot and diagnostics reports
* fix(plugins): track imported erroring modules
* fix(plugins): keep hot metadata where required
* fix(plugins): keep hot doctor and write targeting
* fix(plugins): track throwing module imports
2026-04-02 22:50:17 +09:00
3e4de956c0
!refactor(xai): move x_search config behind plugin boundary ( #59674 )
...
* refactor(xai): move x_search config behind plugin boundary
* chore(changelog): note x_search config migration
* fix(xai): include x_search migration helpers
2026-04-02 22:08:59 +09:00
12bd6b7bb9
fix(tasks): address task-flow audit review ( #59672 )
2026-04-02 22:02:00 +09:00
6f91f87f3b
refactor(tasks): move task-flow ownership under tasks
2026-04-02 21:40:40 +09:00
0f45630d19
fix(tasks): harden task-flow restore and maintenance
2026-04-02 21:40:40 +09:00
9823833383
fix(plugins): preserve activation provenance ( #59641 )
...
* fix(plugins): preserve activation provenance
* fix(gateway): preserve activation reason metadata
* fix(plugins): harden activation state policy
2026-04-02 20:57:14 +09:00
6eca1949d5
refactor(plugins): tighten web fetch provider boundary ( #59646 )
...
* refactor(plugins): tighten web fetch provider boundary
* fix(config): sync fetch secret parity and baseline
* fix(ci): enforce web fetch boundary guard
2026-04-02 20:53:57 +09:00
e894c7e66e
refactor(commands): switch flow tooling to task-flow names
2026-04-02 20:43:03 +09:00
38d2faee20
!feat(plugins): add web fetch provider boundary ( #59465 )
...
* feat(plugins): add web fetch provider boundary
* feat(plugins): add web fetch provider modules
* refactor(web-fetch): remove remaining core firecrawl fetch config
* fix(web-fetch): address review follow-ups
* fix(web-fetch): harden provider runtime boundaries
* fix(web-fetch): restore firecrawl compare helper
* fix(web-fetch): restore env-based provider autodetect
* fix(web-fetch): tighten provider hardening
* fix(web-fetch): restore fetch autodetect and compat args
* chore(changelog): note firecrawl fetch config break
2026-04-02 20:25:19 +09:00
8bdca2323d
TaskFlow: add managed child task execution ( #59610 )
...
Merged via squash.
Prepared head SHA: e6cdde6c21
2026-04-02 12:45:03 +02:00
2fa4c7cc61
TaskFlow: restore managed substrate ( #58930 )
...
Merged via squash.
Prepared head SHA: c99093838f
2026-04-02 12:17:56 +02:00
08962b6812
fix(browser): keep static helper seams cold ( #59471 )
...
* fix(browser): keep static helper seams cold
* fix(browser): narrow sandbox helper facade imports
* fix(browser): harden host inspection helpers
2026-04-02 17:12:32 +09:00
9786946b2d
fix(matrix): restore guided setup flow ( #59462 )
...
Merged via squash.
Prepared head SHA: 9b29023c68
2026-04-02 02:15:32 -04:00
Vincent Koc
Peter Steinberger
Shakker
mappel-nv
Mariano
Gustavo Madeira Santana