Peter Steinberger
e864421d83
fix: unify live model auth gating
2026-03-24 04:28:53 +00:00
Peter Steinberger
e28e520379
refactor: simplify provider inference and zoned parsing helpers
2026-03-23 21:22:30 -07:00
Peter Steinberger
26365f7daf
fix: hash inline scripts with data-src attributes
2026-03-23 21:14:55 -07:00
Val Alexander
a96eded4a0
feat(csp): support inline script hashes in Control UI CSP ( #53307 ) thanks @BunsDev
...
Co-authored-by: BunsDev <68980965+BunsDev@users.noreply.github.com >
Co-authored-by: Nova <nova@openknot.ai >
2026-03-23 21:35:33 -05:00
Peter Steinberger
725a2cc2ca
test: expand gemini live transcript stripping
2026-03-23 23:01:22 +00:00
Peter Steinberger
d67efbfbd3
test: stabilize test isolation
2026-03-23 23:01:22 +00:00
Val Alexander
3e2b3bd2c5
Fix Control UI operator.read scope handling ( #53110 )
...
Preserve Control UI scopes through the device-auth bypass path, normalize implied operator device-auth scopes, ignore cached under-scoped operator tokens, and degrade read-backed main pages gracefully when a connection truly lacks operator.read.
Co-authored-by: Val Alexander <68980965+BunsDev@users.noreply.github.com >
2026-03-23 14:57:21 -05:00
Vincent Koc
2592eb0796
fix(gateway): guard openrouter auto pricing recursion ( #53055 )
2026-03-23 10:43:01 -07:00
Vincent Koc
d5dc6b6573
fix(gateway): require auth for canvas routes
2026-03-23 09:31:40 -07:00
Vincent Koc
50f6a2f136
fix(gateway): require admin for agent session reset
2026-03-23 09:31:39 -07:00
Vincent Koc
93df5f613e
fix(gateway): avoid probe false negatives after connect
2026-03-23 08:49:31 -07:00
Sathvik Veerapaneni
d2e8ed3632
fix: keep session transcript pointers fresh after compaction ( #50688 )
...
Co-authored-by: Frank Yang <frank.ekn@gmail.com >
2026-03-23 22:58:07 +08:00
Peter Steinberger
383c61e305
test: stabilize gateway thread harness
2026-03-23 05:44:34 -07:00
Peter Steinberger
47db5abece
test: inject thread-safe base seams
2026-03-23 04:59:15 -07:00
Peter Steinberger
6bcd9a801a
test: inject thread-safe gateway and ACP seams
2026-03-23 04:34:42 -07:00
Peter Steinberger
f182c3a292
test: inject thread-safe deps for agent tools
2026-03-23 04:16:53 -07:00
Peter Steinberger
b9efba1faf
test: target gemini 3.1 flash alias
2026-03-23 10:59:12 +00:00
Peter Steinberger
a0ad47440a
test: stabilize live provider docker probes
2026-03-23 10:16:06 +00:00
Peter Steinberger
2a06097184
test: update codex test fixtures to gpt-5.4
2026-03-23 02:14:00 -07:00
Peter Steinberger
eac93507c3
fix(browser): enforce node browser proxy allowProfiles
2026-03-23 00:56:44 -07:00
Peter Steinberger
ff54c02b7d
test: narrow live transcript scaffolding strip
2026-03-23 07:41:18 +00:00
Peter Steinberger
fe5819887b
refactor(gateway): centralize discovery target handling
2026-03-23 00:38:31 -07:00
Peter Steinberger
5f05c92922
test: harden no-isolate reply teardown
2026-03-23 00:37:32 -07:00
Peter Steinberger
80cd8cd6be
refactor: unify minimax model and failover live policies
2026-03-23 00:02:35 -07:00
scoootscooob
4580d585ff
Gateway: resolve fallback plugin context lazily
2026-03-22 23:52:21 -07:00
Peter Steinberger
d2a1b24b83
test: honor env auth in gateway live probes
2026-03-23 06:42:09 +00:00
Peter Steinberger
ea579ef858
fix(gateway): preserve async hook ingress provenance
2026-03-22 22:21:49 -07:00
Peter Steinberger
6b9915a106
refactor!: drop legacy CLAWDBOT env compatibility
2026-03-22 22:13:39 -07:00
Rick_Xu
2fe1ff8ea8
Usage: include reset and deleted session archives ( #43215 )
...
Merged via squash.
Prepared head SHA: 49ed6c2fa3
Co-authored-by: rcrick <23069968+rcrick@users.noreply.github.com >
Co-authored-by: frankekn <4488090+frankekn@users.noreply.github.com >
Reviewed-by: @frankekn
2026-03-23 13:10:26 +08:00
Peter Steinberger
c15282062f
refactor: split durable service env helpers
2026-03-22 22:05:56 -07:00
Peter Steinberger
a02499b335
fix: finish gateway probe auth landing ( #52513 ) (thanks @CodeForgeNet)
2026-03-22 19:14:44 -07:00
CodeForgeNet
3595ecba45
fix(gateway): pass process.env in status command probe auth to resolve SecretRef
...
Fixes #52360
resolveGatewayProbeAuthSafe was called from status-all.ts without an
env argument, causing the credential resolution chain to fall back to
an empty object instead of process.env. This made env-backed SecretRef
tokens (gateway.auth.token, Telegram botToken, etc.) appear unresolved
in the status command path even when the runtime was healthy.
Added process.env as default fallback in buildGatewayProbeCredentialPolicy
and passed env explicitly from status-all.ts callers.
Related: #33070 , #38973 , #39415 , #46014 , #49730
2026-03-22 19:14:44 -07:00
Stephen Schoettler
69217164f7
fix: add null guards to usage sort comparators
...
Prevents crash when totals is undefined in byModel/byProvider/byAgent
sort comparators. Fixes 'Cannot read properties of undefined (reading
totalTokens)' crash that causes context overflow in active sessions.
2026-03-22 18:39:24 -07:00
Peter Steinberger
c43bfcbbec
refactor: split best-effort network display discovery
2026-03-22 18:35:37 -07:00
Peter Steinberger
100d9a7a23
refactor: share boundary open and gateway test helpers
2026-03-23 00:37:05 +00:00
Peter Steinberger
a2999c6cfb
test: normalize rebase fallout ( #52428 ) (thanks @karanuppal)
2026-03-22 16:56:19 -07:00
Peter Steinberger
a5ace56a19
test: align rebased expectations and typecheck ( #52428 ) (thanks @karanuppal)
2026-03-22 16:56:19 -07:00
Peter Steinberger
f76e653776
fix: guard stale chat buffer sweep ( #52428 ) (thanks @karanuppal)
2026-03-22 16:56:19 -07:00
Karan Uppal
550deb8c18
fix: sweep stale chatRunState buffers for stuck runs
...
emitChatFinal frees buffers on clean run completion, and the
maintenance timer sweeps abortedRuns after ABORTED_RUN_TTL_MS. But
runs that get stuck (e.g. LLM timeout without triggering clean
lifecycle end) are never aborted and their string buffers persist
indefinitely. This is the direct trigger for the StringAdd_CheckNone
OOM crash reported in the issue.
Add a stale buffer sweep in the maintenance timer that cleans up
buffers, deltaSentAt, and deltaLastBroadcastLen for any run not
updated within ABORTED_RUN_TTL_MS, regardless of abort status.
Closes #51821
2026-03-22 16:56:19 -07:00
Peter Steinberger
bca7787f92
style: fix rebased format drift
2026-03-22 23:26:21 +00:00
Peter Steinberger
4ee41cc6f3
refactor(cli): separate json payload output from logging
2026-03-22 23:19:17 +00:00
Peter Steinberger
274af0486a
perf: trim more vitest thread pins
2026-03-22 16:18:26 -07:00
Peter Steinberger
6245b4f3d8
test: import vi in gateway chat server test
2026-03-22 23:17:05 +00:00
Peter Steinberger
ec51ee1af5
test: harden gateway no-isolate coverage
2026-03-22 16:08:22 -07:00
Peter Steinberger
6d34d62795
test: harden no-isolate gateway auth and pairing
2026-03-22 15:15:50 -07:00
Peter Steinberger
66743b84fa
refactor(whatsapp): centralize web monitor state
2026-03-22 22:07:41 +00:00
Peter Steinberger
31ee442d3f
refactor(gateway): share interface discovery helpers
2026-03-22 15:02:43 -07:00
Peter Steinberger
3faaf8984f
fix(gateway): guard interface discovery failures
...
Closes #44180 .
Refs #47590 .
Co-authored-by: Peter Steinberger <steipete@gmail.com >
2026-03-22 15:02:43 -07:00
Peter Steinberger
593e333c10
perf: avoid plugin loader on provider fast paths
2026-03-22 21:28:16 +00:00
Peter Steinberger
1efda3d041
test: improve live test progress feedback
2026-03-22 20:57:04 +00:00