Peter Steinberger
7a551bff0c
fix(vault): aggregate provider outage diagnostics ( #110908 )
...
* fix(vault): aggregate provider outage diagnostics
* fix(vault): classify revoked token outages
* fix(vault): preserve scoped ACL failures
* fix(vault): keep token probes advisory
* test(vault): satisfy gateway proof gates
* fix(secrets): attribute web provider outages
* test(secrets): prove web outage fan-out in owner suite
* fix(vault): scope malformed responses per secret
* test(secrets): harden exec fanout fixtures
2026-07-18 22:44:06 +01:00
Wynne668
7e4a76a6d0
fix(amazon-bedrock): ignore blank region env overrides ( #110676 )
...
* fix(amazon-bedrock): ignore blank region env overrides
* fix(amazon-bedrock): normalize region envs across runtimes
Co-authored-by: ZengWen-DT <ceng.wen@xydigit.com >
---------
Co-authored-by: Peter Steinberger <steipete@gmail.com >
2026-07-18 22:38:51 +01:00
Peter Steinberger
fc777a35bb
test(telegram): mock core turn dispatcher ( #110967 )
2026-07-18 22:35:56 +01:00
NIO
848dbcabba
fix(signal): keep REST timeout through slow-drip response bodies ( #109047 )
...
* fix(signal): keep REST timeout through slow-drip response bodies
* fix(signal): share REST operation deadlines
Co-authored-by: NIO <hu.genshen@xydigit.com >
* test(signal): preserve REST deadline errors
---------
Co-authored-by: Peter Steinberger <steipete@gmail.com >
2026-07-18 22:33:26 +01:00
NIO
598f13a5f3
fix(zai): keep probe deadline through stalled error-body reads ( #109026 )
...
* fix(zai): keep probe deadline through stalled error-body reads
Fixes an issue where Z.AI endpoint detection could hang indefinitely
when a probe returned error headers and then stalled on the error
response body. The previous helper cleared the AbortSignal as soon as
fetch resolved headers, so a never-chunking error body bypassed the
probe deadline.
Keep one AbortController deadline across the probe request and the
bounded error-body read, and pass a clamped chunkTimeoutMs into
readResponseWithLimit so a stalled error body fails closed inside the
remaining budget. The chunkTimeoutMs is clamped to the remaining
deadline after fetch returns headers, so the idle timeout does not
outlast the overall probe deadline.
Tighten the stalled-body test timing assertion from 5s to 2x timeoutMs
to verify the deadline is actually respected.
* fix(zai): enforce probe body deadline
Co-authored-by: NIO <noreply@github.com >
---------
Co-authored-by: Peter Steinberger <steipete@gmail.com >
Co-authored-by: NIO <noreply@github.com >
2026-07-18 21:51:15 +01:00
tzy-17
09c46fb682
fix(stt-live-audio): cancel ElevenLabs error response body ( #110759 )
...
Avoid buffering unbounded provider error streams and cover the resource lifecycle with a deterministic cancellation contract.
Co-authored-by: Peter Steinberger <steipete@gmail.com >
2026-07-18 21:48:04 +01:00
Wynne668
6646719c05
fix(thread-ownership): ignore blank forwarder URL env overrides ( #110675 )
2026-07-18 21:45:35 +01:00
Wynne668
a9fb5b4e3f
fix(diagnostics-otel): ignore blank protocol env overrides ( #110674 )
2026-07-18 21:38:44 +01:00
mushuiyu886
331eb0d439
fix(huggingface): discover models when HTTP proxy is required ( #110924 )
2026-07-18 21:31:24 +01:00
Peter Steinberger
b6f905b410
test(codex): repair app-server extension shard fixtures ( #110951 )
2026-07-18 21:29:36 +01:00
Wynne668
37b0b12eb7
fix(tlon): release failed upload response bodies ( #110442 )
...
* fix(tlon): release failed upload response bodies
* fix(tlon): settle guarded upload responses
Co-authored-by: ZengWen-DT <ceng.wen@xydigit.com >
---------
Co-authored-by: Peter Steinberger <steipete@gmail.com >
2026-07-18 21:19:03 +01:00
Peter Steinberger
2bcbe3a612
feat(reef): follow up on unconfirmed deliveries instead of staying silent ( #110938 )
...
* feat(reef): follow up on unconfirmed deliveries instead of staying silent
* test(reef): satisfy lint and test-type gates for delivery notices
* test(reef): keep rejection notifier mock signature untyped
2026-07-18 21:08:10 +01:00
Peter Steinberger
377303da9f
fix(openai): sync Codex catalog client version ( #110936 )
...
* fix(openai): sync Codex catalog client version
* docs(changelog): note Codex catalog version sync
* docs(changelog): defer Codex catalog note to release
2026-07-18 20:52:49 +01:00
Omar Shahine
bbad877aed
fix: deliver Codex-generated images on message-tool routes ( #110893 )
...
* fix: deliver Codex-generated images on message-tool routes
* test(codex): cover native image delivery path
Document trusted harness artifact provenance and cover the runner-to-dispatch bridge.\n\nRelease note: Codex-generated images now reach message-tool-only routes while normal source suppression remains intact.\n\nCo-authored-by: Omar Shahine <10343873+omarshahine@users.noreply.github.com >
---------
Co-authored-by: Omar Shahine <10343873+omarshahine@users.noreply.github.com >
Co-authored-by: Peter Steinberger <steipete@gmail.com >
2026-07-18 20:45:57 +01:00
Peter Steinberger
be80cc747c
feat(zalouser): recover accepted messages after local crashes ( #110916 )
...
* feat(zalouser): add durable ingress recovery
* fix(zalouser): settle aborted ingress claims
* fix(zalouser): preserve concurrent ingress lanes
* docs: refresh generated channel map
* refactor(zalouser): simplify ingress abort listener
2026-07-18 20:32:30 +01:00
Peter Steinberger
7359009dcc
test(memory-wiki): allow agent isolation proof to finish ( #110919 )
2026-07-18 20:27:58 +01:00
Peter Steinberger
3dd26e7d9c
feat(irc): add durable ingress queue ( #110914 )
...
* feat(irc): add durable ingress queue
* fix(irc): preserve ingress connection context
* fix(irc): accept colonless privmsg bodies
* fix(irc): pause ingress during disconnects
* fix(irc): ignore self echoes in activity
* fix(irc): bind private ingress to connections
2026-07-18 20:19:19 +01:00
Peter Steinberger
04a9552a1f
chore(codex): update app-server to 0.144.6 [AI] ( #110821 )
...
* build(codex): bump app-server to 0.144.6
* build(codex): align ACP runtime to 0.144.6
* test(codex): harden live image probe
* test(codex): accept alphanumeric image tokens
* test(codex): stabilize image probe glyphs
* test(gateway): disable cron probe delivery
* test(codex): enlarge live image token
* test(codex): tie compaction proof to native output
* test(codex): accept wrapped native stress commands
* test(codex): stabilize compaction acknowledgements
* docs(changelog): note Codex 0.144.6 update
* docs(changelog): defer Codex note to release
2026-07-18 19:19:17 +00:00
Peter Steinberger
138d2d071c
feat(tlon): add durable ingress ( #110910 )
2026-07-18 20:19:04 +01:00
Peter Steinberger
2438a9cc3c
fix(qqbot): guard storage clear ingress effects ( #110904 )
2026-07-18 20:08:08 +01:00
Peter Steinberger
bef8a82762
feat(synology-chat): add durable ingress ( #110899 )
2026-07-18 20:00:06 +01:00
Peter Steinberger
e80b0b5aa5
fix(reef): stop leaking the inbox loop across channel crash restarts ( #110870 )
...
* fix(reef): stop leaking the inbox loop across channel crash restarts
* fix(reef): move channel lifecycle helper to its own module for lint/deadcode gates
2026-07-18 19:59:58 +01:00
Peter Steinberger
90a6256370
test(telegram): isolate miniapp bootstrap fixtures ( #110895 )
2026-07-18 19:59:02 +01:00
Peter Steinberger
84446ae1ce
fix(whatsapp): avoid deprecated access guard collision ( #110890 )
2026-07-18 19:57:50 +01:00
Peter Steinberger
884fdba81c
fix(telegram): local turn tests complete on macOS ( #110894 )
...
* test(channels): mock core turn dispatch for delivery traces
* test(telegram): scope bot tests to a fresh state dir
Assembled turns resolve session/agent bindings through the state DB; an
ambient operator Codex binding fails generation reclaim and drops the turn,
adding misleading noise to reply-wait timeouts.
* test(telegram): drive bot turn tests through a prepared-dispatch mock
Core's turn lifecycle hard-wires its own provider dispatcher for assembled
turns, so the harness's injected dispatcher never fires and every reply-wait
turn test hangs to timeout locally. Convert resolved turns to prepared ones
that dispatch through the harness mock, restoring the file's original
authored contract.
* test(telegram): mark trace token as synthetic
* test(telegram): centralize trace dispatch mocks
* test(telegram): preserve assembled dispatch wiring
* test(telegram): guard trace dispatch seam
* test(telegram): avoid duplicate turn lifecycle
2026-07-18 19:52:27 +01:00
Josh Lehman
453444636c
feat: bound transcript reads across replacements ( #110374 )
2026-07-18 11:41:39 -07:00
Peter Steinberger
e04ea7916c
feat(twitch): preserve accepted chat through local crashes ( #110852 )
...
* feat(twitch): add durable ingress queue
* fix(twitch): satisfy ingress type boundaries
2026-07-18 18:50:56 +01:00
Peter Steinberger
736dddb96a
fix(feishu): preserve inbound messages across restarts ( #110864 )
...
* fix(feishu): adopt durable inbound ingress
* fix(feishu): preserve failed broadcast ingress
* fix(feishu): commit broadcast lanes at adoption
* test(feishu): fix lifecycle fixture typing
2026-07-18 18:49:38 +01:00
Dallin Romney
917bec3987
fix(qa): stabilize Matrix maturity scenarios ( #110398 )
2026-07-18 10:46:44 -07:00
Wynne668
1dedaea994
fix(nextcloud-talk): release failed room info response bodies ( #110441 )
...
* fix(nextcloud-talk): release failed room info response bodies
* test(nextcloud-talk): satisfy room info lint
* fix(nextcloud-talk): settle guarded response bodies
Co-authored-by: ZengWen-DT <ceng.wen@xydigit.com >
---------
Co-authored-by: Peter Steinberger <steipete@gmail.com >
2026-07-18 18:45:45 +01:00
Peter Steinberger
c2431dfcd2
test(memory): isolate qmd shard fixtures ( #110863 )
2026-07-18 18:40:02 +01:00
Peter Steinberger
8d89ddd8c2
feat(qqbot): preserve inbound messages through gateway restarts ( #110844 )
...
* feat(qqbot): add durable ingress drain
* docs(qqbot): document command replay window
* fix(qqbot): harden ingress settlement cleanup
* fix(qqbot): serialize ingress timeout settlement
* fix(qqbot): satisfy ingress CI guards
* fix(qqbot): satisfy ingress type gates
2026-07-18 18:35:28 +01:00
Peter Steinberger
8a5c8690e1
fix(secrets): keep unaffected owners live during reload failures ( #110779 )
...
* fix(secrets): isolate reload failures per owner
* refactor(secrets): split runtime activation helpers
* fix(secrets): export web warning type
* fix(secrets): reject unsafe degraded config writes
* fix(secrets): derive reload defaults type
* fix(secrets): defer reload state publication
* fix(secrets): preserve partial refresh state
* fix(secrets): retry superseded reload preflight
* fix(secrets): bind stale credentials to owner contracts
* fix(secrets): scope degraded credential contracts
* fix(secrets): restore source ownership guards
* fix(secrets): recover provider-only degradation
* fix(secrets): enforce degraded reload contracts
* fix(secrets): preserve scoped reload state
* fix(secrets): reconcile deferred descendant state
* fix(secrets): commit reload state atomically
* fix(secrets): preserve source transaction lineage
* test(secrets): use non-secret lineage marker
* chore(plugin-sdk): refresh API baseline
* fix(secrets): canonicalize web owner contracts
* fix(plugin-sdk): preserve legacy secret owner contracts
* fix(secrets): satisfy startup activation types
* test(secrets): align reload fixtures with owner contracts
* refactor(secrets): move source recovery scope helper
* fix(secrets): preserve owner contracts on web failures
* fix(secrets): bind legacy web resolution contract
* fix(secrets): retry stale auth publication
2026-07-18 18:29:24 +01:00
Peter Steinberger
a89086282a
fix(googlechat): preserve webhook messages across restarts ( #110833 )
...
* feat(googlechat): add durable ingress drain
* fix(googlechat): retain webhook dedupe horizon
* fix(googlechat): break ingress type cycle
2026-07-18 18:26:28 +01:00
Marcus Castro
f705f69fc2
fix(whatsapp): preserve live connections across reloads ( #110762 )
2026-07-18 14:18:11 -03:00
Wynne668
c1eba30949
fix(qa): discard ignored guarded response bodies ( #110443 )
...
* fix(qa-lab): release failed suite gateway response bodies
* fix(qa): discard ignored guarded response bodies
Co-authored-by: ZengWen-DT <ceng.wen@xydigit.com >
---------
Co-authored-by: Peter Steinberger <steipete@gmail.com >
2026-07-18 18:08:16 +01:00
Peter Steinberger
50fdbc5c3f
test(feishu): fix delivery trace dispatcher fixture ( #110838 )
2026-07-18 18:07:41 +01:00
Peter Steinberger
7a35e243c4
refactor(channels): adopt durable Nextcloud Talk and Nostr ingress ( #110653 )
...
Accepted Nextcloud Talk webhook and Nostr relay messages now use the shared durable channel-ingress queue. Claims stay owned until reply-lane terminal completion; bounded append and delivery retries fail closed into dead-letter handling; restart recovery owns redelivery; and Nostr cursors advance only after relay EOSE and durable progress.
Related: #109657
2026-07-18 17:30:37 +01:00
Peter Steinberger
4fbdb6d011
test(qa): align coverage inventory contracts ( #110799 )
2026-07-18 17:22:50 +01:00
Peter Steinberger
3fd3ad8301
fix(ci): restore plugin prerelease validation ( #110787 )
...
* test: align plugin prerelease assertions
* test: remove stale vitest import
2026-07-18 17:00:15 +01:00
Peter Steinberger
d7b0bacf10
fix(teams-meetings): join and transcribe live meetings reliably ( #110615 )
...
* fix(teams-meetings): validate live web flows
* chore(plugin-sdk): update meeting runtime baseline
* test(teams-meetings): align live validation fixtures
* fix(teams-meetings): harden live browser validation
* fix(teams-meetings): preserve live transition lifecycles
* fix(meeting-bot): pass wait budget during recovery
* test(teams-meetings): satisfy extension lint
* fix(teams-meetings): preserve browser session ownership
* fix(teams-meetings): retire audio bridges after leave
* fix(teams-meetings): harden leave and audio ownership
* fix(teams-meetings): preserve leave transition ownership
* fix(teams-meetings): serialize leave cleanup safely
* fix(teams-meetings): guard live transition cleanup
* fix(teams-meetings): preserve adapter boundaries
* fix(teams-meetings): await caption readiness
* fix(teams-meetings): surface caption blockers
* fix(teams-meetings): retry transient media playback
* chore(teams-meetings): defer release notes
* refactor(meeting-bot): isolate navigation error helper
* test(teams-meetings): keep page control helper private
* fix(meeting-bot): bound caption lifecycle cleanup
* chore(plugin-sdk): refresh API baseline
* test(teams-meetings): split caption ownership coverage
* fix(teams-meetings): retry pending audio routing
* fix(teams-meetings): retain leave transition ownership
* fix(teams-meetings): refresh transcript target
* fix(teams-meetings): bound audio routing retries
* fix(teams-meetings): retry pending remote audio
* fix(teams-meetings): harden media source ownership
2026-07-18 15:57:22 +01:00
VectorPeak
4dff4c4996
fix(signal): preserve base URL path prefixes ( #110495 )
...
Co-authored-by: Peter Steinberger <steipete@gmail.com >
2026-07-18 15:22:31 +01:00
Peter Steinberger
3f976a949a
test(signal): isolate tool-result harness lifecycle ( #110720 )
2026-07-18 15:06:19 +01:00
Peter Steinberger
9710a1339e
refactor(canvas): promote inline-widget hosting and show_widget to core ( #110475 )
...
* refactor(canvas): promote inline widgets to core
* docs(agents): note discord show_widget ownership at core registration
* ci: retrigger after GitHub scheduling outage
* fix(canvas): satisfy dead-code and test type checks
2026-07-18 14:40:45 +01:00
Peter Steinberger
40793e6f8b
fix: bound pasted input and provider response bodies ( #110627 )
...
* refactor(runtime): centralize bounded I/O handling
* fix(runtime): finalize bounded I/O contracts
* chore(security): drop stale audit import
* docs(changelog): credit bounded I/O fixes
Co-authored-by: Pick-cat <huang.ting3@xydigit.com >
* fix(agents): keep provider HTTP options private
* fix(ai): traverse OpenAI schema maps by value
* fix(runtime): preserve absolute download deadlines
* ci(ui): stabilize compressed CSS budget
* fix(ai): traverse legacy schema applicators
---------
Co-authored-by: Pick-cat <huang.ting3@xydigit.com >
2026-07-18 13:54:56 +01:00
cxbAsDev
af2662f25a
fix(reef): add timeout and bounded JSON reads to relay transport ( #108333 )
...
* fix(reef): bound relay request duration
Co-authored-by: 陈宪彪0668000387 <chen.xianbiao@xydigit.com >
* test(reef): satisfy timeout fixture lint
Co-authored-by: 陈宪彪0668000387 <chen.xianbiao@xydigit.com >
---------
Co-authored-by: Peter Steinberger <steipete@gmail.com >
Co-authored-by: Peter Steinberger <peter@steipete.me >
2026-07-18 13:28:32 +01:00
Peter Steinberger
684ae080d4
fix(signal): preserve durable ingress retry ownership ( #110629 )
...
* test(signal): await durable ingress adoption
* fix(signal): keep session conflict retries claim-aware
* test(signal): normalize captured monitor errors
* test(signal): exercise core ingress lifecycle seam
2026-07-18 12:35:27 +01:00
Peter Steinberger
01a9e1d398
feat(memory): default cross-conversation recall for personal installs ( #110597 )
...
* feat(memory): default private recall for personal installs
* fix(memory): repair remember-across CI checks
2026-07-18 12:16:49 +01:00
Peter Steinberger
0ac69b9fe8
fix(zalo): prevent webhook message loss after acknowledgment ( #110630 )
...
* fix(zalo): adopt durable ingress drain with ack gated on raw-envelope append
OA webhooks acked before detached processing behind a 5-minute in-memory
guard, and Zalo does not retry (silent loss). Raw webhook JSON now appends
durably (event_id = Bot API message.message_id, lane per chat.id) before the
200; failed appends answer 400/500 so nothing acks unpersisted. Dispatch runs
through the core drain with serialized admissions across append backoff,
deferred claims held through shutdown until adoption, retry/dead-letter
classification, and 30d/20k tombstones replacing the deleted 5min/5k guard
after its parity test. Webhook and polling transports stay mutually
exclusive; no twin scenario exists across the four received-event types.
Autoreview scanner false-positive on deleted-line token field references; full
manual review performed (ack ordering, dual-transport exclusivity, eleven-test
matrix). Part of the #109657 fleet program (wave 3).
* refactor(zalo): keep webhook runtime exports private
* test(zalo): use managed temp directories
2026-07-18 12:09:22 +01:00
Peter Steinberger
9d97e10efe
refactor: move non-session runtime journals to SQLite ( #109427 )
...
* refactor: migrate runtime JSONL state to SQLite
* chore: refresh SQLite migration validation
* fix: preserve safe audit migration order
* fix: sanitize retired audit archives safely
* fix: satisfy SQLite storage architecture gates
* fix: serialize plugin doctor state migrations
* fix: bound memory event SQLite projections
* fix: rotate memory event projections safely
* fix: preserve imported event retention age
* fix: harden memory event export projection
* fix: canonicalize memory event migrations
* fix: harden legacy journal migrations
* fix: report unsafe legacy journal paths
* fix: preserve journal ownership during migration
* fix: keep legacy file imports doctor-only
* fix: align SQLite audit CI coverage
* refactor: keep state helpers module-private
* fix: harden legacy state migration recovery
* fix: reconcile SQLite state audit migration
* test: use neutral audit redaction fixtures
* fix: close SQLite migration recovery gaps
* refactor: split audit migration recovery helpers
* test: prove completed audit pads stay out of backups
* fix: preserve audit record ordinals across blank lines
* fix: align SQLite audit CI contracts
* build: package SQLite audit E2E entries
* fix: preserve audit ordinals in backup snapshots
2026-07-18 11:42:14 +01:00
