Sebastian
6070116382
revert(exec): undo accidental merge of PR #18521
2026-02-16 21:47:18 -05:00
cpojer
9c5f08244e
chore: Format files.
2026-02-17 11:37:11 +09:00
Sebastian
391796a3fb
fix(agents): restore multi-image image tool schema contract
2026-02-16 21:34:27 -05:00
Peter Steinberger
0c1c34c950
refactor(plugins): split before-agent hooks by model and prompt phases
2026-02-17 03:28:20 +01:00
Peter Steinberger
a75e95be02
fix(reply): track messaging media aliases for dedupe
2026-02-17 03:27:23 +01:00
cpojer
ac38d51290
chore: Fix types in tests 7/N.
2026-02-17 11:22:49 +09:00
Peter Steinberger
901d4cb310
revert: accidental merge of OC-09 sandbox env sanitization change
2026-02-17 03:19:42 +01:00
Sebastian
bb8df6ab8d
revert(tools): finish rollback of PR #18584
2026-02-16 21:13:48 -05:00
Sebastian
f924ab40d8
revert(tools): undo accidental merge of PR #18584
2026-02-16 21:13:48 -05:00
Peter Steinberger
fb6e415d0c
fix(agents): align session lock hold budget with run timeouts
2026-02-17 03:10:36 +01:00
Sebastian
4147545469
Revert "feat: show transcript file size in session status"
...
This reverts commit 15dd2cda20
2026-02-16 21:04:29 -05:00
Sebastian
4ca75bed56
fix(models): sync auth-profiles before availability checks
2026-02-16 21:00:59 -05:00
Sebastian
fbda9a93fd
fix(failover): align abort timeout detection and regressions
2026-02-16 21:00:27 -05:00
Sebastian
2b3ecee7c5
fix(actions): layer per-account gate fallback
2026-02-16 20:59:30 -05:00
cpojer
01ea808876
chore: Format files.
2026-02-17 10:57:31 +09:00
cpojer
b6d4f7c00e
chore: Fix types in tests 5/N.
2026-02-17 10:57:31 +09:00
cpojer
c49234cbfb
chore: chore: Fix types in tests 4/N.
2026-02-17 10:57:31 +09:00
Gustavo Madeira Santana
a1538ea637
Revert "fix: flatten remaining anyOf/oneOf in Gemini schema cleaning"
...
This reverts commit 06b961b037
2026-02-16 20:33:58 -05:00
Peter Steinberger
25126d75c3
Revert "Agents: improve Windows scaffold helpers for venture studio"
...
This reverts commit b6d934c2c7
2026-02-17 02:26:36 +01:00
Sebastian
6d451c8205
test(ollama): add reasoning fallback regression coverage
2026-02-16 20:20:47 -05:00
sebslight
83b1ae895e
fix(transcript): always drop orphaned OpenAI reasoning blocks
2026-02-16 20:20:32 -05:00
cpojer
ff8316e04e
chore: Fix formatting.
2026-02-17 10:14:13 +09:00
Peter Steinberger
6244ef9ea8
fix: handle Windows and UNC bind mount parsing
2026-02-17 02:08:56 +01:00
Peter Steinberger
5115f6fdf3
style: normalize imports for oxfmt 0.33
2026-02-17 00:59:54 +00:00
Peter Steinberger
c20ef582cb
fix: align cron session key routing ( #18637 ) (thanks @vignesh07)
2026-02-17 01:54:59 +01:00
Vignesh Natarajan
f988abf202
Cron: route reminders by session namespace
2026-02-17 01:54:59 +01:00
Peter Steinberger
f452a7a60b
refactor(shared): reuse chat content extractor for assistant text
2026-02-17 00:53:44 +00:00
Peter Steinberger
b9e7299a70
refactor(test): share embedded runner overflow mocks
2026-02-17 00:49:37 +00:00
Peter Steinberger
9032a50981
refactor: reuse sandbox path expansion in apply-patch
2026-02-17 00:45:02 +00:00
Peter Steinberger
7687f6cfcd
refactor: reuse runtime requires evaluation
2026-02-17 00:45:02 +00:00
Peter Steinberger
7147cd9cc0
refactor: dedupe process-scoped lock maps
2026-02-17 00:45:02 +00:00
cpojer
c70597daeb
chore: Fix formatting.
2026-02-17 09:40:00 +09:00
Peter Steinberger
dee0134269
style: reformat dedupe-touched files
2026-02-17 00:32:34 +00:00
Peter Steinberger
817b5812e1
refactor(agents): share queued JSONL file writer
2026-02-17 00:32:34 +00:00
Peter Steinberger
a6466f2576
refactor(web-tools): share URL allowlist resolver
2026-02-17 00:32:34 +00:00
Peter Steinberger
10b060dbd3
refactor(agent-tools): reuse gateway option parsing
2026-02-17 00:32:34 +00:00
cpojer
90ef2d6bdf
chore: Update formatting.
2026-02-17 09:18:40 +09:00
Peter Steinberger
246bb7f30f
refactor(agents): share model auth label resolution
2026-02-17 00:11:02 +00:00
Peter Steinberger
4088c0b89d
refactor(core): dedupe schema and command parsing helpers
2026-02-16 23:48:43 +00:00
Peter Steinberger
32e2c369d7
refactor(agents): extract shared session dir resolver
2026-02-16 23:48:43 +00:00
Peter Steinberger
83a8b78a42
fix(ci): guard loop detection integer parsing
2026-02-16 23:27:35 +00:00
Peter Steinberger
eaa2f7a7bf
fix(ci): restore main lint/typecheck after direct merges
2026-02-16 23:26:11 +00:00
Peter Steinberger
076df941a3
feat: add configurable tool loop detection
2026-02-17 00:17:01 +01:00
Rain
dacffd7ac8
fix(sandbox): parse Windows bind mounts in fs-path mapping
2026-02-17 00:02:12 +01:00
Elie Habib
5b3873add4
fix(skills): guard against skills prompt bloat
2026-02-17 00:01:34 +01:00
artale
7bb9a7dcfc
fix(telegram): wire sendPollTelegram into channel action handler ( #16977 )
...
The Telegram channel adapter listed no 'poll' action, so agents could
not create polls via the unified action interface. The underlying
sendPollTelegram function was already implemented but unreachable.
Changes:
- telegram.ts: add 'poll' to listActions (enabled by default via gate),
add handleAction branch that reads pollQuestion/pollOption params and
delegates to handleTelegramAction with action 'sendPoll'.
- telegram-actions.ts: add 'sendPoll' handler that validates question,
options (≥2), and forwards to sendPollTelegram with threading, silent,
and anonymous options.
- actions.test.ts: add test verifying poll action routes correctly.
Fixes #16977
2026-02-17 00:01:07 +01:00
amabito
068b9c9749
feat: wrap compaction generateSummary in retryAsync
...
Integrate retry logic with abort-classifier for /compact endpoint:
- Wrap generateSummary calls in retryAsync with exponential backoff
- Auto-skip retry on user cancellation and gateway restart (AbortError)
- Config: 3 attempts, 500ms-5s delay, 20% jitter
- Add comprehensive Vitest tests (5/5 passed)
Related: #16809 , #5744 , #17143
2026-02-17 00:01:03 +01:00
Peter Steinberger
9f0fc74d10
refactor(model): share normalized provider map lookups
2026-02-16 23:00:32 +00:00
Operative-001
6931ca7035
fix(subagent): route nested announce to parent even when parent run ended
...
When a depth-2 subagent (Birdie) completes and its parent (Newton) is a
depth-1 subagent, the announce should go to Newton, not bypass to the
grandparent (Jaris).
Previously, isSubagentSessionRunActive(Newton) returned false because
Newton's agent turn completed after spawning Birdie. This triggered the
fallback to grandparent even though Newton's SESSION was still alive and
waiting for child results.
Now we only fallback to grandparent if the parent SESSION is actually
deleted (no sessionId in session store). If the parent session exists,
we inject into it even if the current run has ended — this starts a new
agent turn to process the child result.
Fixes #18037
Test Plan:
- Added regression test: routes to parent when run ended but session alive
- Added regression test: falls back to grandparent only when session deleted
2026-02-17 00:00:27 +01:00
aether-ai-agent
235794d9f6
fix(security): OC-09 credential theft via environment variable injection
...
Implement comprehensive environment variable sanitization before Docker
container creation to prevent credential theft via post-exploitation
environment access.
Security Impact:
- Blocks 39+ sensitive credential patterns (API keys, tokens, passwords)
- Prevents exfiltration of ANTHROPIC_API_KEY, OPENAI_API_KEY, etc.
- Fail-secure validation with audit logging
Changes:
- Add sanitize-env-vars.ts with blocklist/allowlist validation
- Integrate sanitization into docker.ts (lines 273-294)
- Add validateEnvVars() to security validation
- Comprehensive test suite (62 tests, 100% pass rate)
Test Results: 62/62 passing
Code Review: 9.5/10 approved
Severity: HIGH (CWE-200, CVSS 7.5)
Signed-off-by: Aether AI Agent <github@tryaether.ai >
2026-02-17 00:00:23 +01:00
