Mason Huang
2c2dc00fb4
fix(deps): bump dompurify to 3.4.0 ( #67614 )
2026-04-16 18:18:55 +08:00
Ziy
053c5b05c1
[Dashboard] Fix exec approval modal overflow for long command content ( #67082 )
...
Merged via squash.
Prepared head SHA: 5d14e78381
Co-authored-by: Ziy1-Tan <49604965+Ziy1-Tan@users.noreply.github.com >
Co-authored-by: hxy91819 <8814856+hxy91819@users.noreply.github.com >
Reviewed-by: @hxy91819
2026-04-16 11:28:20 +08:00
scotthuang
7734a40a56
fix(ui): skip chat history reload during active sends to prevent mess… ( #66997 )
...
Merged via squash.
Prepared head SHA: cec28cfa90
Co-authored-by: scotthuang <1670837+scotthuang@users.noreply.github.com >
Co-authored-by: vincentkoc <25068+vincentkoc@users.noreply.github.com >
Reviewed-by: @vincentkoc
2026-04-15 09:56:24 +01:00
github-actions[bot]
9b1b56aad1
chore(ui): refresh uk control ui locale
2026-04-15 05:45:22 +00:00
github-actions[bot]
8602c81068
chore(ui): refresh id control ui locale
2026-04-15 05:45:18 +00:00
github-actions[bot]
2e230021b6
chore(ui): refresh pl control ui locale
2026-04-15 05:45:14 +00:00
github-actions[bot]
b778253cca
chore(ui): refresh tr control ui locale
2026-04-15 05:45:08 +00:00
github-actions[bot]
1c3c9c9d29
chore(ui): refresh ko control ui locale
2026-04-15 05:44:02 +00:00
github-actions[bot]
0c3354c320
chore(ui): refresh es control ui locale
2026-04-15 05:44:00 +00:00
github-actions[bot]
bf136ab1d9
chore(ui): refresh fr control ui locale
2026-04-15 05:43:58 +00:00
github-actions[bot]
1d8713bae3
chore(ui): refresh ja-JP control ui locale
2026-04-15 05:43:54 +00:00
github-actions[bot]
0ac265f418
chore(ui): refresh pt-BR control ui locale
2026-04-15 05:42:42 +00:00
github-actions[bot]
d204471879
chore(ui): refresh zh-CN control ui locale
2026-04-15 05:42:39 +00:00
github-actions[bot]
adff956863
chore(ui): refresh zh-TW control ui locale
2026-04-15 05:42:36 +00:00
github-actions[bot]
808ba47a89
chore(ui): refresh de control ui locale
2026-04-15 05:42:33 +00:00
Omar Shahine
507b718917
feat(ui): add Model Auth status card to Overview dashboard ( #66211 )
...
* feat(gateway,ui): add Model Auth status card to Overview
Adds a new `models.authStatus` gateway endpoint that combines
`buildAuthHealthSummary()` (token expiry/status) with
`loadProviderUsageSummary()` (rate limits) into a single response
suitable for UI rendering. Strips credentials - only ships status,
expiry, remaining time, and rate-limit windows.
Adds a corresponding "Model Auth" card to the Overview dashboard
showing provider token status and rate limits at a glance. Attention
items are raised when OAuth tokens are expiring or expired.
Also catches the OAuth token sink class of bug: if multiple profiles
exist per provider/account and tokens are drifting out of sync, this
surfaces it immediately in the dashboard instead of silently falling
back to a different provider.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
* CHANGELOG: note Model Auth status card on Overview
* UI/Overview: render Model Auth card during load with N/A placeholder
* models.authStatus: env-backed OAuth escape hatch + expectsOAuth missing signal
---------
Co-authored-by: Lobster <10343873+omarshahine@users.noreply.github.com >
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
2026-04-14 22:40:42 -07:00
Vincent Koc
955270fb73
fix(ci): repair telegram ui and watch regressions
2026-04-13 23:49:59 +01:00
Val Alexander
9315302516
fix(ui): replace marked.js with markdown-it to fix ReDoS UI freeze ( #46707 ) thanks @zhangfnf
...
Replace marked.js with markdown-it for the control UI chat markdown renderer
to eliminate a ReDoS vulnerability that could freeze the browser tab.
- Configure markdown-it with custom renderers matching marked.js output
- Add GFM www-autolink with trailing punctuation stripping per spec
- Escape raw HTML via html_block/html_inline overrides
- Flatten remote images to alt text, preserve base64 data URI images
- Add task list support via markdown-it-task-lists plugin
- Trim trailing CJK characters from auto-linked URLs (RFC 3986)
- Keep marked dependency for agents-panels-status-files.ts usage
Co-authored-by: zhangfan49 <zhangfan49@baidu.com >
Co-authored-by: Nova <nova@openknot.ai >
2026-04-13 16:08:35 -05:00
Byron
891e42beec
fix(ui): preserve user-selected session on reconnect and tab switch ( #59611 ) thanks @loong0306
...
Fixes #57072 — chat UI state desync after route navigation.
- applySessionDefaults() now detects user-selected sessions and preserves them on reconnect
- Chat tab session switching consolidated to use switchChatSession() helper
- Overview session-key handler uses shared resetChatStateForSessionSwitch to prevent stale state leaks
- Session select dropdowns now set ?selected to reflect actual state
Co-authored-by: loong0306 <loong0306@gmail.com >
Co-authored-by: Nova <nova@openknot.ai >
2026-04-13 15:24:56 -05:00
Mariano
305a80ce32
[codex] fix(ui): guard dreaming wiki plugin calls ( #66140 )
...
Merged via squash.
Prepared head SHA: 030562b044
Co-authored-by: mbelinky <132747814+mbelinky@users.noreply.github.com >
Co-authored-by: mbelinky <132747814+mbelinky@users.noreply.github.com >
Reviewed-by: @mbelinky
2026-04-13 22:01:11 +02:00
Peter Steinberger
20266c14cb
feat(qa-lab): add control ui qa-channel roundtrip scenario
2026-04-12 19:41:06 -07:00
Val Alexander
d0c83777fb
Control UI: refresh slash commands from runtime command list ( #65620 )
...
* Refresh slash commands from runtime command list
- Load live slash commands into the chat UI and command palette
- Keep builtin fallback behavior when runtime commands are unavailable
* Apply suggestion from @greptile-apps[bot]
Co-authored-by: greptile-apps[bot] <165735046+greptile-apps[bot]@users.noreply.github.com>
* Control UI: harden runtime slash command discovery
* Control UI: bound runtime slash command payloads
* Control UI: use default agent for plain session keys
* Control UI: guard malformed slash command payloads
---------
Co-authored-by: greptile-apps[bot] <165735046+greptile-apps[bot]@users.noreply.github.com>
2026-04-12 20:38:37 -05:00
Peter Steinberger
4fec8073b1
fix: gate startup history and model requests ( #65365 )
2026-04-13 01:41:53 +01:00
Vincent Koc
12d351b79c
fix(ui): hide synthetic transcript-repair history messages ( #65458 )
2026-04-12 17:35:30 +01:00
Vincent Koc
80730c53bd
docs(agents): split scoped workflow guidance ( #65241 )
...
* docs(agents): add scoped workflow guides
* docs(agents): trim root guide duplication
* Update AGENTS.md
* docs(agents): restore root boundary context
* docs(agents): clarify plugin architecture direction
2026-04-12 09:09:50 +01:00
github-actions[bot]
5fbc95ecd2
chore(ui): refresh pl control ui locale
2026-04-12 05:29:42 +00:00
github-actions[bot]
ab75bba102
chore(ui): refresh id control ui locale
2026-04-12 05:29:34 +00:00
github-actions[bot]
9be6a9a1dd
chore(ui): refresh tr control ui locale
2026-04-12 05:29:29 +00:00
github-actions[bot]
79c287880b
chore(ui): refresh uk control ui locale
2026-04-12 05:29:26 +00:00
github-actions[bot]
334da74237
chore(ui): refresh ko control ui locale
2026-04-12 05:28:21 +00:00
github-actions[bot]
2a60cdb421
chore(ui): refresh es control ui locale
2026-04-12 05:28:17 +00:00
github-actions[bot]
de2a0b3748
chore(ui): refresh fr control ui locale
2026-04-12 05:28:15 +00:00
github-actions[bot]
50cd240275
chore(ui): refresh ja-JP control ui locale
2026-04-12 05:28:11 +00:00
github-actions[bot]
0bbfb474c0
chore(ui): refresh pt-BR control ui locale
2026-04-12 05:27:06 +00:00
github-actions[bot]
286ef301dd
chore(ui): refresh zh-TW control ui locale
2026-04-12 05:27:04 +00:00
github-actions[bot]
be3018aa03
chore(ui): refresh zh-CN control ui locale
2026-04-12 05:27:01 +00:00
github-actions[bot]
8e5d74b2de
chore(ui): refresh de control ui locale
2026-04-12 05:26:59 +00:00
Tak Hoffman
847739d82c
Fix dreaming replay, repair polluted artifacts, and gate wiki tabs ( #65138 )
...
* fix(active-memory): preserve parent channel context for recall runs
* fix(active-memory): keep recall runs on the resolved channel
* fix(active-memory): prefer resolved recall channel over wrapper hints
* fix(active-memory): trust explicit recall channel hints
* fix(active-memory): rank recall channel fallbacks by trust
* Fix dreaming replay and recovery flows
* fix: prevent dreaming event loss and diary write races
* chore: add changelog entry for memory fixes
* fix: harden dreaming repair and diary writes
* fix: harden dreaming artifact archive naming
2026-04-12 00:25:11 -05:00
Peter Steinberger
85fa33d9d7
style: apply formatter drift
2026-04-11 14:08:55 +01:00
Peter Steinberger
aa092045c0
fix(ui): remove stale preview assertion
2026-04-11 13:49:04 +01:00
Tak Hoffman
d9812b85c4
fix(ui): preserve interleaved tool card pairing
...
(cherry picked from commit 5553d610e8 )
2026-04-11 07:34:45 -05:00
Tak Hoffman
cc5c691f00
feat(ui): render assistant directives and add embed tag ( #64104 )
...
* Add embed rendering for Control UI assistant output
* Add changelog entry for embed rendering
* Harden canvas path resolution and stage isolation
* Secure assistant media route and preserve UI avatar override
* Fix chat media and history regressions
* Harden embed iframe URL handling
* Fix embed follow-up review regressions
* Restore offloaded chat attachment persistence
* Harden hook and media routing
* Fix embed review follow-ups
* feat(ui): add configurable embed sandbox mode
* fix(gateway): harden assistant media and auth rotation
* fix(gateway): restore websocket pairing handshake flows
* fix(gateway): restore ws hello policy details
* Restore dropped control UI shell wiring
* Fix control UI reconnect cleanup regressions
* fix(gateway): restore media root and auth getter compatibility
* feat(ui): rename public canvas tag to embed
* fix(ui): address remaining media and gateway review issues
* fix(ui): address remaining embed and attachment review findings
* fix(ui): restore stop control and tool card inputs
* fix(ui): address history and attachment review findings
* fix(ui): restore prompt contribution wiring
* fix(ui): address latest history and directive reviews
* fix(ui): forward password auth for assistant media
* fix(ui): suppress silent transcript tokens with media
* feat(ui): add granular embed sandbox modes
* fix(ui): preserve relative media directives in history
* docs(ui): document embed sandbox modes
* fix(gateway): restrict canvas history hoisting to tool entries
* fix(gateway): tighten embed follow-up review fixes
* fix(ci): repair merged branch type drift
* fix(prompt): restore stable runtime prompt rendering
* fix(ui): harden local attachment preview checks
* fix(prompt): restore channel-aware approval guidance
* fix(gateway): enforce auth rotation and media cleanup
* feat(ui): gate external embed urls behind config
* fix(ci): repair rebased branch drift
* fix(ci): resolve remaining branch check failures
2026-04-11 07:32:53 -05:00
Peter Steinberger
279cbfc61c
fix: restore memory wiki and dreaming checks
2026-04-11 06:15:21 +01:00
Mariano
64693d2e96
[codex] Dreaming: surface memory wiki imports and palace ( #64505 )
...
Merged via squash.
Prepared head SHA: 12d5e37222
Co-authored-by: mbelinky <132747814+mbelinky@users.noreply.github.com >
Co-authored-by: mbelinky <132747814+mbelinky@users.noreply.github.com >
Reviewed-by: @mbelinky
2026-04-11 07:04:08 +02:00
Peter Steinberger
39d1a817fa
lint: enable small oxlint rules
2026-04-11 02:15:21 +01:00
Peter Steinberger
85c7748520
lint: enable no extraneous class
2026-04-11 01:45:06 +01:00
Peter Steinberger
780e0898b0
test: simplify typed conversions
2026-04-11 01:34:25 +01:00
Peter Steinberger
1fb2e18f47
refactor: simplify cli conversions
2026-04-11 01:27:48 +01:00
Peter Steinberger
0ebeee8b0d
chore: enable consistent-return
2026-04-10 20:56:43 +01:00
Peter Steinberger
cc6c5f3edb
style: simplify lint-safe test helpers
2026-04-10 20:20:33 +01:00