Peter Steinberger
7c59b78aee
test: cap docker live model sweeps and harden timeouts
2026-02-25 02:48:34 +00:00
Peter Steinberger
df9a474891
test: stabilize no-output timeout exec test
2026-02-25 02:46:23 +00:00
Peter Steinberger
9f1bda9802
test: fix TS2742 in telegram media test utils
2026-02-25 02:32:35 +00:00
Peter Steinberger
45b5c35b21
test: fix CI failures in heartbeat and typing tests
2026-02-25 02:28:42 +00:00
Peter Steinberger
d42ef2ac62
refactor: consolidate typing lifecycle and queue policy
2026-02-25 02:16:03 +00:00
Peter Steinberger
24d7612ddf
refactor(heartbeat): harden dm delivery classification
2026-02-25 02:13:07 +00:00
Peter Steinberger
91ae82ae19
refactor(sandbox): centralize dangerous docker override key handling
2026-02-25 02:12:15 +00:00
Peter Steinberger
885452f5c1
fix: fail-closed shared-session reply routing ( #24571 ) (thanks @brandonwise)
2026-02-25 02:11:34 +00:00
Peter Steinberger
e28803503d
fix: add sandbox bind-override regression coverage ( #25410 ) (thanks @skyer-jian)
2026-02-25 02:09:37 +00:00
Peter Steinberger
a805d6b439
fix(heartbeat): block dm targets and internalize blocked prompts
2026-02-25 02:05:45 +00:00
Peter Steinberger
e0201c2774
fix: keep channel typing active during long inference ( #25886 , thanks @stakeswky)
...
Co-authored-by: stakeswky <stakeswky@users.noreply.github.com >
2026-02-25 02:03:27 +00:00
Peter Steinberger
dcd90438ec
refactor(telegram-tests): split media suites and decouple store mock
2026-02-25 02:01:52 +00:00
Peter Steinberger
c267b5edf6
refactor(sandbox): unify tmp alias checks and dedupe hardlink tests
2026-02-25 02:01:12 +00:00
Peter Steinberger
eb4a93a8db
refactor(sandbox): share container-path utils and tighten fs bridge tests
2026-02-25 01:59:53 +00:00
Peter Steinberger
c736778b3f
fix: drop active heartbeat followups from queue ( #25610 , thanks @mcaxtr)
...
Co-authored-by: Marcus Castro <mcaxtr@gmail.com >
2026-02-25 01:58:51 +00:00
Brian Mendonca
22689b9dc9
fix(sandbox): reject hardlinked tmp media aliases
2026-02-25 01:56:44 +00:00
Peter Steinberger
a01849e163
test(telegram): cover triple-dash inbound media path regression
2026-02-25 01:54:11 +00:00
Peter Steinberger
fa525bf212
fix(shell): prefer PowerShell 7 on Windows with tested fallbacks ( #25684 )
2026-02-25 01:49:33 +00:00
Peter Steinberger
bf5a96ad63
fix(agents): keep fallback chain reachable on configured fallback models ( #25922 )
2026-02-25 01:46:20 +00:00
Peter Steinberger
559b5eab71
fix(cli): support --query in memory search command ( #25904 )
2026-02-25 01:41:56 +00:00
Brandon Wise
389ccda0f6
fix: remove unused DeliverableMessageChannel import
2026-02-25 01:41:31 +00:00
Brandon Wise
f35c902bd6
style: fix oxfmt formatting in targets.test.ts
2026-02-25 01:41:31 +00:00
Brandon Wise
455fbc6b6d
fix(security): prevent cross-channel reply routing in shared sessions
2026-02-25 01:41:31 +00:00
Peter Steinberger
c7ae4ed04d
fix: harden sandbox fs dash-path regression coverage ( #25891 ) (thanks @albertlieyingadrian)
2026-02-25 01:40:30 +00:00
Albert Lie
5e3502df5f
fix(sandbox): prevent shell option interpretation for paths with leading hyphens
...
Paths starting with "-" (like those containing "---" pattern) can be
interpreted as shell options by the sh shell. This fix adds a helper
function that prepends "./" to paths starting with "-" to prevent
this interpretation.
This fixes the issue where sandbox filesystem operations fail with
"Syntax error: ; unexpected" when file paths contain the "---" pattern
used in auto-generated inbound media filenames like:
file_1095---f00a04a2-99a0-4d98-99b0-dfe61c5a4198.ogg
🤖 Generated with [Claude Code](https://claude.com/claude-code )
Co-Authored-By: Claude <noreply@anthropic.com >
2026-02-25 01:40:30 +00:00
Peter Steinberger
b35d00aaf8
fix: sanitize Gemini 3.1 Google reasoning payloads
2026-02-25 01:40:14 +00:00
Peter Steinberger
039713c3e7
fix: suppress reasoning payload leakage in whatsapp replies
2026-02-25 01:36:37 +00:00
Peter Steinberger
a177b10b79
test(windows): normalize risky-path assertions
2026-02-25 01:28:47 +00:00
Peter Steinberger
e2362d352d
fix(heartbeat): default target none and internalize relay prompts
2026-02-25 01:28:47 +00:00
Peter Steinberger
43f318cd9a
fix(agents): reduce billing false positives on long text ( #25680 )
...
Land PR #25680 from @lairtonlelis.
Retain explicit status/code/http 402 detection for oversized structured payloads.
Co-authored-by: Ailton <lairton@telnyx.com >
2026-02-25 01:22:17 +00:00
Peter Steinberger
0078070680
fix(telegram): refresh global undici dispatcher for autoSelectFamily ( #25682 )
...
Land PR #25682 from @lairtonlelis after maintainer rework:
track dispatcher updates when network decision changes to avoid stale global fetch behavior.
Co-authored-by: Ailton <lairton@telnyx.com >
2026-02-25 01:16:03 +00:00
Peter Steinberger
bd213cf2ad
fix(agents): normalize SiliconFlow Pro thinking=off payload ( #25435 )
...
Land PR #25435 from @Zjianru.
Changelog: add 2026.2.24 fix entry with contributor credit.
Co-authored-by: codez <codezhujr@gmail.com >
2026-02-25 01:11:34 +00:00
Peter Steinberger
2157c490af
test: normalize tmp media path assertion for windows
2026-02-25 00:58:17 +00:00
Peter Steinberger
5c6b2cbc8e
refactor: extract iMessage echo cache and unify suppression guards
2026-02-25 00:53:39 +00:00
Peter Steinberger
196a7dbd24
test(media): add win32 dev=0 local media regression
2026-02-25 00:47:02 +00:00
Peter Steinberger
2a11c09a8d
fix: harden iMessage echo dedupe and reasoning suppression ( #25897 )
2026-02-25 00:46:56 +00:00
Peter Steinberger
a9ce6bd79b
refactor: dedupe exec wrapper denial plan and test setup
2026-02-25 00:43:29 +00:00
Peter Steinberger
943b8f171a
fix: align windows safe-open file identity checks
2026-02-25 00:42:04 +00:00
shenghui kevin
7455ceecf8
fix(windows): skip unreliable dev comparison in fs-safe openVerifiedLocalFile
...
On Windows, device IDs (dev) returned by handle.stat() and fs.lstat()
may differ even for the same file, causing false-positive 'path-mismatch'
errors when reading local media files.
This fix introduces a statsMatch() helper that:
- Always compares inode (ino) values
- Skips device ID (dev) comparison on Windows where it's unreliable
- Maintains full comparison on Unix platforms
Fixes #25699
2026-02-25 00:42:04 +00:00
Peter Steinberger
3c95f89662
refactor(exec): split system.run phases and align ts/swift validator contracts
2026-02-25 00:35:06 +00:00
Peter Steinberger
a1a6235c66
test: bridge discord voice private casts via unknown
2026-02-25 00:31:17 +00:00
Peter Steinberger
9cd50c51b0
fix(discord): harden voice DAVE receive reliability ( #25861 )
...
Reimplements and consolidates related work:
- #24339 stale disconnect/destroyed session guards
- #25312 voice listener cleanup on stop
- #23036 restore @snazzah/davey runtime dependency
Adds Discord voice DAVE config passthrough, repeated decrypt failure
rejoin recovery, regression tests, docs, and changelog updates.
Co-authored-by: Frank Yang <frank.ekn@gmail.com >
Co-authored-by: Do Cao Hieu <admin@docaohieu.com >
2026-02-25 00:19:50 +00:00
Vincent Koc
5509bf2c75
Gateway tests: include synthetic allowlist models in models.list
2026-02-24 19:16:02 -05:00
Vincent Koc
f7cf3d0dad
Gateway tests: accept allowlisted refs absent from catalog
2026-02-24 19:16:02 -05:00
Vincent Koc
f34325ec01
Tests: cover allowlist refs missing from catalog
2026-02-24 19:16:02 -05:00
Vincent Koc
e9068e2571
Agents: trust explicit allowlist refs beyond catalog
2026-02-24 19:16:02 -05:00
Peter Steinberger
57c9a18180
fix(security): block env depth-overflow approval bypass
2026-02-25 00:14:13 +00:00
Vincent Koc
aee38c42d3
Tests: preserve OpenRouter explicit auth order under cooldown fields
2026-02-24 19:12:08 -05:00
Vincent Koc
06f0b4a193
Tests: keep OpenRouter runnable with legacy cooldown markers
2026-02-24 19:12:08 -05:00
Vincent Koc
ebc8c4b609
Tests: skip OpenRouter failure cooldown persistence
2026-02-24 19:12:08 -05:00
