Commit Graph

31143 Commits

Author SHA1 Message Date
Vincent Koc
8ab89989c2 fix(ci): restore plugin-local whatsapp deps 2026-04-13 23:26:25 +01:00
Gustavo Madeira Santana
b5dcc11273 plugins: trim staged runtime cargo 2026-04-13 18:10:40 -04:00
Peter Steinberger
e04a63d08a chore: fix pulled lint assertion 2026-04-13 23:09:32 +01:00
Peter Steinberger
3fdc70a434 fix: normalize OpenAI minimal reasoning 2026-04-13 23:09:21 +01:00
Mariano
3d06d90e83 fix(memory): unify default root memory handling (#66141)
* fix(memory): unify default root memory handling

* test(memory): align legacy migration expectation

* docs(changelog): tag qmd root-memory fix

* docs(changelog): append qmd root-memory entry

* docs(changelog): dedupe qmd root-memory entry

* docs(changelog): attribute qmd root-memory fix

---------

Co-authored-by: mbelinky <mbelinky@users.noreply.github.com>
2026-04-13 23:59:57 +02:00
Vincent Koc
cc2a377009 fix(ci): repair baileys lockfile snapshot 2026-04-13 22:49:26 +01:00
Vincent Koc
792653df15 fix(ci): clear residual tsgo blockers 2026-04-13 22:37:25 +01:00
Vincent Koc
a16331c36e fix(ci): align cron and session tests with runtime 2026-04-13 22:37:25 +01:00
Vincent Koc
36a58e714c fix(ci): mirror whatsapp runtime dependency 2026-04-13 22:37:25 +01:00
Vincent Koc
f3283a330b fix(ci): repair extension boundary contracts 2026-04-13 22:37:25 +01:00
Vincent Koc
ea25cf2595 fix(ci): unblock discord boundary typing 2026-04-13 22:37:24 +01:00
Val Alexander
9315302516 fix(ui): replace marked.js with markdown-it to fix ReDoS UI freeze (#46707) thanks @zhangfnf
Replace marked.js with markdown-it for the control UI chat markdown renderer
to eliminate a ReDoS vulnerability that could freeze the browser tab.

- Configure markdown-it with custom renderers matching marked.js output
- Add GFM www-autolink with trailing punctuation stripping per spec
- Escape raw HTML via html_block/html_inline overrides
- Flatten remote images to alt text, preserve base64 data URI images
- Add task list support via markdown-it-task-lists plugin
- Trim trailing CJK characters from auto-linked URLs (RFC 3986)
- Keep marked dependency for agents-panels-status-files.ts usage

Co-authored-by: zhangfan49 <zhangfan49@baidu.com>
Co-authored-by: Nova <nova@openknot.ai>
2026-04-13 16:08:35 -05:00
Tak Hoffman
f94d6778b1 fix(active-memory): Move active memory recall into the hidden prompt prefix (#66144)
* move active memory into prompt prefix

* document active memory prompt prefix

* strip active memory prefixes from recall history

* harden active memory prompt prefix handling

* hide active memory prefix in leading history views

* strip hidden memory blocks after prompt merges

* preserve user turns in memory recall cleanup
2026-04-13 16:05:43 -05:00
Bob
8c7f17b953 fix: count unknown-tool retries only when streamed (#66145)
Merged via squash.

Prepared head SHA: b79209cdb5
Co-authored-by: Bob <dutifulbob@gmail.com>
Reviewed-by: @osolmaz
2026-04-13 22:49:05 +02:00
Byron
891e42beec fix(ui): preserve user-selected session on reconnect and tab switch (#59611) thanks @loong0306
Fixes #57072 — chat UI state desync after route navigation.

- applySessionDefaults() now detects user-selected sessions and preserves them on reconnect
- Chat tab session switching consolidated to use switchChatSession() helper
- Overview session-key handler uses shared resetChatStateForSessionSwitch to prevent stale state leaks
- Session select dropdowns now set ?selected to reflect actual state

Co-authored-by: loong0306 <loong0306@gmail.com>
Co-authored-by: Nova <nova@openknot.ai>
2026-04-13 15:24:56 -05:00
Vincent Koc
10a92e2ff4 perf(config): keep runtime compat migrations lightweight 2026-04-13 21:14:22 +01:00
rafaelreis-r
68e0e456f3 fix: allow plugin commands on Slack when channel supports native commands (#64578)
Merged via squash.

Prepared head SHA: 2ec97bf0b3
Co-authored-by: rafaelreis-r <57492577+rafaelreis-r@users.noreply.github.com>
Co-authored-by: jalehman <550978+jalehman@users.noreply.github.com>
Reviewed-by: @jalehman
2026-04-13 13:14:02 -07:00
Vincent Koc
ce1fffa97e perf(agents): narrow session helper imports 2026-04-13 21:09:44 +01:00
Vincent Koc
99755fcb2f perf(agents): lazy-load session store updates 2026-04-13 21:07:50 +01:00
Vincent Koc
dd27aa945e perf(agents): lazy-load delivery runtime 2026-04-13 21:05:30 +01:00
Vincent Koc
f126088761 perf(agents): keep attempt execution runtime cold 2026-04-13 21:03:52 +01:00
Mariano
305a80ce32 [codex] fix(ui): guard dreaming wiki plugin calls (#66140)
Merged via squash.

Prepared head SHA: 030562b044
Co-authored-by: mbelinky <132747814+mbelinky@users.noreply.github.com>
Co-authored-by: mbelinky <132747814+mbelinky@users.noreply.github.com>
Reviewed-by: @mbelinky
2026-04-13 22:01:11 +02:00
Vincent Koc
ac00ba1943 perf(commands): lazy-load agent secret resolution 2026-04-13 20:56:03 +01:00
Vincent Koc
f2e08295e6 perf(commands): narrow agent config imports 2026-04-13 20:51:35 +01:00
Mariano
3d42e33dd0 fix(memory-core): run Dreaming once per cron schedule (#66139)
Merged via squash.

Prepared head SHA: 48229a24cb
Co-authored-by: mbelinky <132747814+mbelinky@users.noreply.github.com>
Co-authored-by: mbelinky <132747814+mbelinky@users.noreply.github.com>
Reviewed-by: @mbelinky
2026-04-13 21:50:32 +02:00
Vincent Koc
99237c2dde perf(commands): narrow session test imports 2026-04-13 20:45:04 +01:00
Vincent Koc
9a2675e9fd perf(agents): lazy-load cli runner seams 2026-04-13 20:43:58 +01:00
Vincent Koc
25a2ea4480 perf(config): scope dry-run legacy validation 2026-04-13 20:40:52 +01:00
Vincent Koc
e02c6ca82a perf(config): narrow channel legacy rule loading 2026-04-13 20:37:21 +01:00
Agustin Rivera
43d4be9027 fix(queue): split collect batches by auth context (#66024)
* fix(queue): split collect batches by auth context

Co-authored-by: zsx <git@zsxsoft.com>

* fix(queue): keep overflow summary on splits

* fix(queue): preserve grouped collect retry semantics

* fix(queue): drop USER.md from pr

* fix(queue): keep overflow summary in first auth group

* fix(queue): clear overflow summary state after first auth group

* fix(queue): narrow auth split key

* fix(queue): flush collect summary-only drains

* changelog: note collect-mode auth-context batch split (#66024)

---------

Co-authored-by: zsx <git@zsxsoft.com>
Co-authored-by: Devin Robison <drobison@nvidia.com>
2026-04-13 13:35:39 -06:00
Agustin Rivera
48aae82bbc fix(outbound): replay queued session context (#66025)
* fix(outbound): preserve replay session context

* fix(outbound): remove user work log

* changelog: note outbound session-context replay fix (#66025)

---------

Co-authored-by: Devin Robison <drobison@nvidia.com>
2026-04-13 13:30:42 -06:00
Tak Hoffman
7c09ba70ef fix(trace command): Improve trace raw diagnostics and trace command UX (#66089)
* improve trace raw diagnostics and command acks

* address trace review feedback

* avoid sync transcript reads in raw trace

* preserve raw cli output for trace

* gate trace emission at reply time

* reflect raw trace mode in status surfaces
2026-04-13 14:26:57 -05:00
Vincent Koc
6157933e39 perf(config): skip cold runtime refresh on one-shot writes 2026-04-13 20:25:21 +01:00
Vincent Koc
bd20a920a2 perf(config): use generated SecretRef policy metadata 2026-04-13 20:19:04 +01:00
Mariano
a0a4a768dc test(cron): fix #66019 maintenance regression coverage (#66122)
Merged via squash.

Prepared head SHA: 7f2a604e91
2026-04-13 21:03:45 +02:00
屈定
95ee120a91 fix: classify openrouter json 404 model errors
Rewrites the stale branch on top of current `main` and preserves the original issue as regression coverage for the exact OpenRouter JSON 404 payload from #51571.

No production behavior changes are introduced here; current `main` already classifies this payload as `model_not_found`, and this merge locks that in across the shared matcher, failover classifier, and fallback loop.

Co-authored-by: 屈定 <mrdear@users.noreply.github.com>
Co-authored-by: Altay <altay@uinaf.dev>
2026-04-13 19:53:55 +01:00
Vincent Koc
961eb95e9a perf(secrets): lazy-load provider env var exports 2026-04-13 19:52:02 +01:00
pashpashpash
8efbe8c1ed agents: stop strict mode from hijacking chat turns 2026-04-13 11:49:00 -07:00
Mariano
190a4b4869 fix(cron): preserve unresolved next-run backoff (#66113)
Merged via squash.

Prepared head SHA: a553daa7eb
Co-authored-by: mbelinky <132747814+mbelinky@users.noreply.github.com>
Co-authored-by: mbelinky <132747814+mbelinky@users.noreply.github.com>
Reviewed-by: @mbelinky
2026-04-13 20:48:14 +02:00
Pavan Kumar Gondhi
31281bc92f fix(heartbeat): force owner downgrade for untrusted hook:wake system events [AI-assisted] (#66031)
* fix: address issue

* fix: address PR review feedback

* fix: address review-pr skill feedback

* fix: address PR review feedback

* fix: address PR review feedback

* fix: address PR review feedback

* fix: address PR review feedback

* fix: address PR review feedback

* fix: address PR review feedback

* docs: add changelog entry for PR merge
2026-04-14 00:14:17 +05:30
Vincent Koc
587e72df4d perf(config): use direct writes for gateway token persistence 2026-04-13 19:38:56 +01:00
Mariano
1490e2b1d3 Lobster: import published core runtime (#64755)
* Lobster: import published core runtime

* Changelog: add Lobster core runtime note

* Lobster: type embedded core runtime

* Lobster: keep package-boundary tsconfig narrow
2026-04-13 20:38:46 +02:00
Vincent Koc
66f57a6e1b perf(config): defer legacy web search registry reads 2026-04-13 19:34:44 +01:00
Vincent Koc
120c384f00 perf(config): reuse prepared snapshots for daemon token writes 2026-04-13 19:32:28 +01:00
Pavan Kumar Gondhi
b75ad800a5 fix(browser): enforce SSRF policy on snapshot, screenshot, and tab routes [AI] (#66040)
* fix: address issue

* fix: address review feedback

* fix: finalize issue changes

* fix: address review-pr skill feedback

* fix: address PR review feedback

* fix: address PR review feedback

* docs: add changelog entry for PR merge
2026-04-13 23:56:39 +05:30
Vincent Koc
55a3c8ea07 perf(daemon): import install config helpers directly 2026-04-13 19:22:52 +01:00
Pavan Kumar Gondhi
80b1fa17bf fix(msteams): enforce sender allowlist checks on SSO signin invokes [AI] (#66033)
* fix: address issue

* fix: address PR review feedback

* docs: add changelog entry for PR merge
2026-04-13 23:52:30 +05:30
Vincent Koc
75b4c059b8 perf(daemon): slim gateway install token imports 2026-04-13 19:21:01 +01:00
Pavan Kumar Gondhi
86734ef93a fix(config): redact sourceConfig and runtimeConfig alias fields in redactConfigSnapshot [AI] (#66030)
* fix: address issue

* docs: add changelog entry for PR merge
2026-04-13 23:47:31 +05:30
Vincent Koc
448a33b90c perf(daemon): lazy-load auth profile install helpers 2026-04-13 19:14:27 +01:00