Agustin Rivera
a31cb15561
Guard missed base64 decode paths ( #62007 )
...
* fix(media): guard missed base64 decode paths
Co-authored-by: zsxsoft <git@zsxsoft.com >
* fix(media): wire maxBytes into image-generate-tool and consolidate base64 guard helpers
* docs(changelog): add base64 decode guard entry
* fix(image-generate): validate configured media cap
---------
Co-authored-by: zsxsoft <git@zsxsoft.com >
Co-authored-by: Devin Robison <drobison@nvidia.com >
2026-04-07 15:25:19 -06:00
Peter Steinberger
775b78e186
refactor: dedupe provider lowercase helpers
2026-04-07 22:24:32 +01:00
Peter Steinberger
ba68537d9d
refactor: dedupe line qqbot slack lowercase helpers
2026-04-07 20:58:01 +01:00
Peter Steinberger
96724e5a4b
Messaging: align adapter compile surfaces
2026-04-07 16:46:21 +01:00
Peter Steinberger
a96790fde7
test: speed up setup and core extension tests
2026-04-07 16:13:57 +01:00
Peter Steinberger
62a5480808
refactor: dedupe irc qqbot telegram lowercase helpers
2026-04-07 15:12:31 +01:00
Peter Steinberger
7a2a594044
test: fix setup and config typing drift
2026-04-07 12:48:05 +01:00
Peter Steinberger
991d4e2006
test: speed up setup plugin tests
2026-04-07 12:42:56 +01:00
Vincent Koc
d5ed6d26e9
chore(plugins): bulk add package boundary tsconfig rollout
2026-04-07 08:48:23 +01:00
Peter Steinberger
8d05bdda43
refactor: dedupe setup token readers
2026-04-07 06:07:13 +01:00
Peter Steinberger
e169fcd263
refactor: dedupe qa and diff error formatting
2026-04-07 05:06:54 +01:00
Peter Steinberger
ab6aa28049
refactor: dedupe qqbot error formatting
2026-04-07 02:03:33 +01:00
Peter Steinberger
61f7d53731
refactor: dedupe shared string readers
2026-04-07 02:03:33 +01:00
Peter Steinberger
f178a9dc41
refactor: dedupe extension string record helpers
2026-04-07 02:03:33 +01:00
Peter Steinberger
13d1fc077b
refactor: dedupe qqbot config record helper
2026-04-07 00:21:11 +01:00
Devin Robison
37d7c716f4
fix: the bundled qq bot extension extensions qqbot pe ( #329 ) ( #62082 )
2026-04-06 13:50:33 -06:00
Peter Steinberger
637bc8e458
refactor: dedupe qqbot result logging helper
2026-04-06 19:57:57 +01:00
Peter Steinberger
413a5ef75a
refactor: dedupe qqbot photo send helper
2026-04-06 19:57:56 +01:00
Peter Steinberger
8ff570ee42
refactor: resolve channel env vars from plugin manifests
2026-04-06 19:53:27 +01:00
Peter Steinberger
a2be2abc28
refactor: dedupe qqbot chunk send loops
2026-04-06 19:36:01 +01:00
Peter Steinberger
3826af6c40
refactor: dedupe qqbot media target helpers
2026-04-06 19:24:43 +01:00
Peter Steinberger
800ac580b1
refactor: dedupe qqbot text dispatch helper
2026-04-06 19:24:43 +01:00
Peter Steinberger
58d7df7985
fix(ci): restore contracts and type gates
2026-04-06 19:10:31 +01:00
Peter Steinberger
6243ca50e0
refactor: dedupe qqbot channel config helpers
2026-04-06 18:40:05 +01:00
Peter Steinberger
a86fa3b211
refactor(deadcode): drop orphaned extension helpers
2026-04-06 17:18:03 +01:00
Peter Steinberger
8b79cbcd06
build(plugins): align package versions to 2026.4.6
2026-04-06 17:05:30 +01:00
Vincent Koc
6e443a20c8
fix(qqbot): remove dead tts config aliases
2026-04-06 15:32:05 +01:00
Vincent Koc
f92ef361ae
fix(check): finish extension type cleanup
2026-04-06 15:30:17 +01:00
Peter Steinberger
8d095147b4
fix: restore check gate
2026-04-06 15:20:03 +01:00
Vincent Koc
9502642f47
fix(plugins): clean xai and qqbot lint
2026-04-06 15:14:20 +01:00
Peter Steinberger
af62a2c2e4
style: fix extension lint violations
2026-04-06 14:53:55 +01:00
Peter Steinberger
ce8492f9a0
chore: bump version to 2026.4.5
2026-04-05 21:33:04 +01:00
Peter Steinberger
3126809cb0
refactor: clean bundled channel bootstrap boundaries
2026-04-05 18:18:59 +01:00
Peter Steinberger
89e8c8672c
fix: break bundled channel bootstrap cycles
2026-04-05 14:20:31 +01:00
Peter Steinberger
b57372d665
refactor: route capability runtime through channel stores
2026-04-05 09:07:33 +01:00
Peter Steinberger
67d6fc8847
chore(plugins): sync versions to 2026.4.4
2026-04-04 20:03:01 +01:00
Peter Steinberger
fd75d214f2
style(extensions): format channel integration updates
2026-04-04 06:02:37 +01:00
Tak Hoffman
5c4551458f
fix: honor qqbot setup default account
2026-04-03 13:10:49 -05:00
Tak Hoffman
acfa09679c
fix: honor qqbot default account config
2026-04-03 12:42:18 -05:00
Tak Hoffman
e6a9408c3b
fix: honor qqbot setup account status
2026-04-03 12:42:17 -05:00
Onur
fa9e1e3d8e
CI: add ClawHub plugin release workflow ( #59179 )
...
* CI: add ClawHub plugin release workflow
* CI: harden ClawHub plugin release workflow
* CI: finish ClawHub plugin release hardening
* CI: watch shared ClawHub release inputs
* CI: harden ClawHub publish workflow
* CI: watch more ClawHub release deps
* CI: match shared release inputs by prefix
* CI: pin ClawHub publish source commit
* CI: refresh pinned ClawHub release commit
* CI: rename ClawHub plugin release environment
---------
Co-authored-by: Onur Solmaz <onur@solmaz.io >
2026-04-03 15:40:07 +02:00
Jacob Tomlinson
2c45b06afd
fix(qqbot): restrict structured payload local paths ( #58453 )
...
* fix(qqbot): restrict structured payload local paths
* fix(qqbot): narrow structured payload file access
* test(qqbot): cover payload path traversal guards
* fix(qqbot): reduce structured payload log exposure
* fix(qqbot): preserve inline image payload URLs
2026-04-02 10:20:52 +01:00
Mingkuan
c15cfeb21c
fix(qqbot): lazy-load silk-wasm to avoid hard failure when package is missing ( #58829 )
...
* fix(qqbot): lazy-load silk-wasm to avoid hard failure when package is missing
Replace the static top-level import with a cached dynamic import helper.
If silk-wasm is unavailable the plugin loads normally; voice encode/decode
degrades gracefully instead of crashing the module at load time.
* fix(qqbot): store in-flight Promise in loadSilkWasm to prevent duplicate imports
Concurrent cold-start calls to loadSilkWasm() before the first import()
resolves would each fire a separate dynamic import. Storing the Promise
instead of the resolved value (matching the detectFfmpeg pattern in
platform.ts) ensures all concurrent callers await the same import,
keeping the codebase consistent and avoiding redundant parallel loads.
* QQBot: add changelog for silk-wasm lazy load
* QQBot: move changelog entry for PR #58829
---------
Co-authored-by: sliverp <870080352@qq.com >
Co-authored-by: Sliverp <38134380+sliverp@users.noreply.github.com >
2026-04-02 14:46:53 +08:00
Peter Steinberger
8988894ff7
build: prepare 2026.4.1-beta.1 release
2026-04-01 15:09:19 +01:00
Vincent Koc
72af92ba4e
qqbot: require explicit allowlist for /bot-logs to prevent info disclosure ( #58895 )
...
* qqbot: harden /bot-logs authorization fallback
* fix(qqbot): harden bot logs allowlist guard
* fix(qqbot): normalize bot logs allowlist entries
2026-04-01 18:40:46 +09:00
Peter Steinberger
9ea7e06460
build: bump version to 2026.4.1
2026-03-31 22:53:17 +01:00
Peter Steinberger
213a704b71
fix: unblock 2026.3.31 release preflight
2026-03-31 21:54:12 +01:00
Peter Steinberger
2a60e34f2a
build: prepare 2026.3.31 stable release
2026-03-31 21:32:38 +01:00
Peter Steinberger
e1da91791a
build: externalize bundled plugin runtime deps
2026-03-31 15:22:08 +01:00
Peter Steinberger
c1ea0ae9c8
build: update deps and align pi sdk usage
2026-03-31 22:56:20 +09:00
