pashpashpash
aedb7be18d
fix mac mcp closed signal encoding
2026-04-30 15:58:03 -04:00
pashpashpash
256685890b
fix mac mcp server update encoding
2026-04-30 15:58:03 -04:00
pashpashpash
ce97f1a7f6
fix mac computer use swift formatting
2026-04-30 15:58:03 -04:00
pashpashpash
b31f7c7338
feat(codex): install computer use through native mcp host
2026-04-30 15:58:03 -04:00
pashpashpash
4a7423f518
fix mac computer use package directory formatting
2026-04-30 15:56:22 -04:00
pashpashpash
97d8ae0954
fix mac computer use swift formatting
2026-04-30 15:56:22 -04:00
pashpashpash
9a3f433998
host computer use from managed mac package
2026-04-30 15:56:22 -04:00
pashpashpash
418119f61a
fix: stabilize native mcp host ci
2026-04-30 15:56:22 -04:00
pashpashpash
a6b4c00608
feat: route Codex computer use through Mac node host
2026-04-30 15:56:22 -04:00
pashpashpash
b7aa7cdb69
Add node-hosted MCP session plumbing
2026-04-30 15:56:22 -04:00
Nimrod Gutman
58a0b077c1
fix(macos): keep A2UI canvas content visible ( #75039 )
2026-04-30 14:21:06 +03:00
Nimrod Gutman
eecd758e39
fix(macos): repair stale gateway tls pins ( #75038 )
...
Merged via squash.
Prepared head SHA: 35196f8f71
Co-authored-by: ngutman <1540134+ngutman@users.noreply.github.com >
Co-authored-by: ngutman <1540134+ngutman@users.noreply.github.com >
Reviewed-by: @ngutman
2026-04-30 14:14:03 +03:00
Luka Dolenc
07605c79ad
style(macos): order attach-only test modifiers
2026-04-30 04:10:54 +01:00
Luka Dolenc
25d2e9bdac
fix(macos): keep attach-only from stopping gateway launchd
2026-04-30 04:10:54 +01:00
Peter Steinberger
29de89a8d9
fix: align SDK wait and protocol contracts
2026-04-30 00:51:24 +01:00
samzong
443ca4865d
[Feat] surface spawnedBy in chat and agent broadcast payloads ( #63244 )
...
Merged via squash.
Prepared head SHA: ff0fe5db38
Co-authored-by: samzong <13782141+samzong@users.noreply.github.com >
Co-authored-by: frankekn <4488090+frankekn@users.noreply.github.com >
Reviewed-by: @frankekn
2026-04-29 20:48:59 +08:00
Vincent Koc
13390fcac8
docs(apps/ios/readme): list authenticated background presence beacons
...
For bdba90a20b : apps/ios/README.md "What Works Now (Concrete)" section
omitted the authenticated background `node.presence.alive` beacon
feature that shipped on iOS first, even though apps/android/README.md
already lists it on the rebuild checklist. Adds a matching bullet so
the iOS README reflects the gateway last-seen metadata update path
across foreground/background transitions.
2026-04-29 00:09:25 -07:00
Peter Steinberger
e5dc0e6d15
fix: expose agent runtime status metadata
2026-04-29 05:02:04 +01:00
pashpashpash
6ce1058296
Wire diagnostics through the core chat command ( #72936 )
...
* feat: wire codex diagnostics feedback
* fix: harden codex diagnostics hints
* fix: neutralize codex diagnostics output
* fix: tighten codex diagnostics safeguards
* fix: bound codex diagnostics feedback output
* fix: tighten codex diagnostics throttling
* fix: confirm codex diagnostics uploads
* docs: clarify codex diagnostics add-on
* fix: route diagnostics through core command
* fix: tighten diagnostics authorization
* fix: pin diagnostics to bundled codex command
* fix: limit owner status in plugin commands
* fix: scope diagnostics confirmations
* fix: scope codex diagnostics cooldowns
* fix: harden codex diagnostics ownership scopes
* fix: harden diagnostics command trust and display
* fix: keep diagnostics command trust internal
* fix: clarify diagnostics exec boundary
* fix: consume codex diagnostics confirmations atomically
* test: include codex diagnostics binding metadata
* test: use string codex binding timestamps
* fix: keep reserved command trust host-only
* fix: harden diagnostics trust and resume hints
* wire diagnostics through exec approval
* fix: keep diagnostics tests aligned with bundled root trust
* fix telegram diagnostics owner auth
* route trajectory exports through exec approval
* fix trajectory exec command encoding
* fix telegram group owner auth
* fix export trajectory approval hardening
* fix pairing command owner bootstrap
* fix telegram owner exec approvals
* fix: make diagnostics approval flow pasteable
* fix: route native sensitive command followups
* fix: invoke diagnostics exports with current cli
* fix: refresh exec approval protocol models
* fix: list codex diagnostics from thread bindings
* fix: fold codex diagnostics into exec approval
* fix: preserve diagnostics approval line breaks
* docs: clarify diagnostics codex workflow
2026-04-29 07:40:37 +09:00
Vincent Koc
7e028917c0
fix(android): remediate app CodeQL alerts
2026-04-28 01:37:01 -07:00
Peter Steinberger
8178b62187
fix(android): include third-party sensitive handlers
2026-04-28 09:27:59 +01:00
Peter Steinberger
2276f660f3
refactor(android): split sensitive features by flavor
2026-04-28 09:27:39 +01:00
Peter Steinberger
0ef6702af3
build(android): update dependencies and lint config
2026-04-28 09:10:13 +01:00
Peter Steinberger
04e774eeac
feat(android): add authenticated presence alive beacons ( #73373 )
...
* feat: add Android presence alive beacons
* fix: harden Android presence beacon review findings
* fix: address Android presence review findings
2026-04-28 08:55:06 +01:00
Peter Steinberger
bdba90a20b
feat: add authenticated iOS background presence beacon ( #73330 )
...
* feat: add iOS background presence beacon
Co-authored-by: ngutman <1540134+ngutman@users.noreply.github.com >
* fix: keep iOS background reconnects ahead of beacon throttle
* build: refresh gateway protocol swift models
* fix: emit swift protocol string enums
---------
Co-authored-by: ngutman <1540134+ngutman@users.noreply.github.com >
2026-04-28 08:10:35 +01:00
Vincent Koc
d525d6486d
fix(android): keep camera temp files private
...
Fix Android CodeQL local temp-file disclosure findings in camera capture.
2026-04-28 00:06:12 -07:00
Vincent Koc
29a34e0a4d
fix(android): use absolute logcat path
...
Fix Android CodeQL relative path command finding in debug log collection.
2026-04-27 22:40:00 -07:00
Vincent Koc
2c58c5d4ec
fix(android): avoid trust-all TLS probing
...
Fix Android CodeQL insecure trust manager finding in gateway TLS probing.
2026-04-27 22:26:27 -07:00
Vincent Koc
2809630036
fix(android): disable app data backup ( #73281 )
2026-04-27 22:01:28 -07:00
Vincent Koc
2bce63cb65
fix(android): harden canvas webview bridge ( #73240 )
...
* fix(android): harden canvas webview bridge
* fix(android): make canvas content access hardening explicit
* fix(android): keep webview hardening inline for CodeQL
* fix(android): avoid webview getter false positive
2026-04-27 21:41:01 -07:00
Peter Steinberger
b8c44bfc82
fix: restore main ci and speed tests
2026-04-28 05:34:28 +01:00
Peter Steinberger
001bf47727
chore(release): open 2026.4.27 development
2026-04-28 05:28:04 +01:00
Peter Steinberger
548f946ffd
test(macos): remove conflict marker
2026-04-28 05:28:04 +01:00
Peter Steinberger
5dec95f35c
test(macos): stabilize gateway control test
2026-04-28 05:28:04 +01:00
Vincent Koc
4102f8d28d
fix(macos): parse model catalog without JavaScriptCore
...
Replaces JavaScriptCore catalog evaluation with a bounded fail-closed object-literal parser for the generated macOS model catalog.\n\nValidation: macos-node, macos-swift, security-fast, security-scm-fast, security-dependency-audit, workflow sanity checks passed on PR #73112 .
2026-04-27 20:16:51 -07:00
Peter Steinberger
482c74b724
refactor: remove narrow SwiftLint suppressions
2026-04-28 02:38:44 +01:00
Peter Steinberger
8db21cdcde
chore: update app Swift package releases
2026-04-28 02:28:05 +01:00
Peter Steinberger
b294f7c467
fix: harden ios app build hygiene
2026-04-28 01:42:10 +01:00
Peter Steinberger
c72f8f357b
fix: harden mac app computer use docs
2026-04-28 01:25:31 +01:00
EVA
1adaa28dc8
[plugin sdk] Add generic plugin host-hook contracts ( #72287 )
...
Merged via squash.
Prepared head SHA: 68e5f2ce19
Co-authored-by: 100yenadmin <239388517+100yenadmin@users.noreply.github.com >
Co-authored-by: jalehman <550978+jalehman@users.noreply.github.com >
Reviewed-by: @jalehman
2026-04-27 17:07:02 -07:00
Peter Steinberger
63011fcbb0
ci: update generated protocol swift models
2026-04-27 14:42:27 +01:00
Peter Steinberger
23d047dff5
ci: update generated protocol models
2026-04-27 14:31:13 +01:00
Peter Steinberger
d9b8001502
build(protocol): refresh swift gateway models
2026-04-27 13:31:15 +01:00
martingarramon
4f50921e0f
fix(gateway/schema): require hello-ok auth
...
Fixes #68160 .
Drops stale optionality from the hello-ok auth schema and keeps generated Swift models, macOS fixtures, browser client types, protocol docs, and merged-base test boundaries aligned.
2026-04-27 06:40:36 -05:00
Samuel Rodda
6c252cc54c
fix(update): require applied gateway restarts
...
Require Control UI updates to observe a real gateway process replacement, surface skipped/error update outcomes, and verify the running gateway version after restart.\n\nAdds update.status restart-sentinel plumbing, docs, generated protocol model updates, and changelog attribution.\n\nLocal verification:\n- pnpm test src/gateway/server-methods/update.test.ts src/cli/gateway-cli/run-loop.test.ts src/infra/restart-sentinel.test.ts src/infra/process-respawn.test.ts src/infra/update-runner.test.ts ui/src/ui/app-gateway.node.test.ts ui/src/ui/controllers/config.test.ts\n- git diff --check\n- pnpm exec oxfmt --check --threads=1 CHANGELOG.md docs/gateway/protocol.md docs/gateway/configuration.md docs/web/control-ui.md\n- pnpm docs:check-mdx
2026-04-27 04:07:43 -05:00
Peter Steinberger
3b5463591b
chore: bump version to 2026.4.26
2026-04-26 09:28:52 +01:00
Peter Steinberger
57c1c7d886
fix(protocol): refresh generated swift models
2026-04-26 07:07:28 +01:00
Peter Steinberger
eb5bb67e04
style(macos): satisfy swiftformat
2026-04-26 06:19:35 +01:00
Peter Steinberger
113794f277
fix(voicewake): harden trigger routing rebase
2026-04-26 06:19:35 +01:00
Longbiao CHEN
cbcc1227d3
fix(voicewake): require token boundaries for filler-prefix matches
2026-04-26 06:19:35 +01:00