Peter Steinberger
fdaebf587c
test: remove redundant phone control conversions
2026-04-10 21:55:28 +01:00
Peter Steinberger
7ccf4b7d02
refactor: remove redundant twitch setup conversions
2026-04-10 21:51:36 +01:00
Peter Steinberger
506f564fb9
refactor: remove redundant telegram conversions
2026-04-10 21:49:54 +01:00
Peter Steinberger
405a920862
refactor: remove redundant browser helper conversions
2026-04-10 21:48:38 +01:00
Peter Steinberger
20849e7196
refactor: remove redundant browser session conversions
2026-04-10 21:46:52 +01:00
Peter Steinberger
3475404c7e
refactor: remove redundant browser state conversions
2026-04-10 21:46:00 +01:00
Peter Steinberger
b76f218c53
refactor: remove redundant browser screenshot conversions
2026-04-10 21:44:53 +01:00
Peter Steinberger
1560da7be2
refactor: remove redundant browser cdp conversions
2026-04-10 21:43:34 +01:00
Peter Steinberger
b0a39f4112
test: remove redundant matrix conversions
2026-04-10 21:34:41 +01:00
Tak Hoffman
71c4900051
test: harden telegram reply media transport stub
2026-04-10 15:31:55 -05:00
Peter Steinberger
d236cb4680
chore: enable redundant type constituent checks
2026-04-10 21:23:40 +01:00
Peter Steinberger
bce0e5228a
fix(codex): satisfy approval bridge lint
2026-04-10 21:22:16 +01:00
Peter Steinberger
d3cabde7b8
fix(browser): keep legacy ssrf alias raw-config only
2026-04-10 21:22:16 +01:00
Peter Steinberger
d5698038d7
fix(codex): keep app-server inside extension src
2026-04-10 21:22:16 +01:00
Peter Steinberger
6e4d78ce80
fix(codex): require supported app-server version
2026-04-10 21:22:16 +01:00
Peter Steinberger
cb19451132
refactor: drop legacy Codex approval support
2026-04-10 21:22:16 +01:00
Peter Steinberger
84098a2267
fix: keep Codex harness opt-in by default
2026-04-10 21:22:16 +01:00
Peter Steinberger
106256d896
fix: address Codex harness review regressions
2026-04-10 21:22:16 +01:00
Peter Steinberger
b79f9f965e
fix: address Codex harness review issues
2026-04-10 21:22:16 +01:00
Peter Steinberger
dd26e8c44d
feat: add Codex app-server harness extension
2026-04-10 21:22:16 +01:00
Peter Steinberger
0ebeee8b0d
chore: enable consistent-return
2026-04-10 20:56:43 +01:00
Peter Steinberger
bc27278d6d
test: fix msteams thread parent fixture
2026-04-10 20:50:44 +01:00
Peter Steinberger
d015986265
fix: preserve browser cdp ssrf policy
2026-04-10 20:45:45 +01:00
sudie-codes
784318799b
fix(msteams): handle fileConsent/invoke callback for bot-to-user file upload ( #55386 ) ( #64087 )
...
* fix(msteams): update FileConsentCard after user accepts upload
- Adds consentCardActivityId to PendingUpload so the consent card
activity can be replaced in-place after upload succeeds
- Uses context.updateActivity() to replace the FileConsentCard with
the file info card; falls back to sendActivity if update fails
- Adds updateActivity to MSTeamsTurnContext type
- Fixes timer leak in pending-uploads: clears TTL setTimeout on
explicit removal and on clearPendingUploads()
- Adds pending-uploads.test.ts covering all new timer/cleanup paths
* msteams: wire consentCardActivityId from send response + add happy-path updateActivity test
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
* fix(msteams): retry consent uploads end-to-end
---------
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
Co-authored-by: Brad Groux <3053586+BradGroux@users.noreply.github.com >
2026-04-10 14:42:54 -05:00
sudie-codes
99f76ec4c6
fix(msteams): keep streaming alive during long tool chains via typing indicator ( #59731 ) ( #64088 )
...
* fix(msteams): keep streaming alive during long tool chains via periodic typing (#59731 )
* test(msteams): align thread-session store mock with interface
* fix(msteams): treat failed streams as inactive
---------
Co-authored-by: Brad Groux <bradgroux@users.noreply.github.com >
Co-authored-by: Brad Groux <3053586+BradGroux@users.noreply.github.com >
2026-04-10 14:42:41 -05:00
sudie-codes
01ea7e4921
feat(msteams): auto-inject parent message context for thread replies ( #54932 ) ( #63945 )
...
* feat(msteams): auto-inject parent message context for thread replies (#54932 )
* msteams: use Promise.allSettled for thread context, remove no-op buildInjectedKey
* fix(msteams): gate thread parent context by visibility
---------
Co-authored-by: Brad Groux <3053586+BradGroux@users.noreply.github.com >
2026-04-10 14:42:02 -05:00
Peter Steinberger
8e9e584b1e
fix: validate browser profile driver before cdp policy
2026-04-10 20:31:27 +01:00
Peter Steinberger
d2c0440fac
ci: fix current main additional checks
2026-04-10 20:28:48 +01:00
Peter Steinberger
cc6c5f3edb
style: simplify lint-safe test helpers
2026-04-10 20:20:33 +01:00
Agustin Rivera
121c452d66
fix(browser): tighten strict browser hostname navigation ( #64367 )
...
* fix(browser): tighten strict browser hostname navigation
* fix(browser): address review follow-ups
* chore(changelog): add strict browser hostname navigation entry
* fix(browser): remove stale state prop from SelectionDeps call site
The PR's SelectionDeps uses getSsrFPolicy instead of the full state
object; the state property was leftover from an earlier iteration.
---------
Co-authored-by: Devin Robison <drobison@nvidia.com >
2026-04-10 13:18:53 -06:00
Peter Steinberger
5580d7e2b1
style: simplify mattermost reaction test url checks
2026-04-10 20:14:49 +01:00
Peter Steinberger
04c8026d03
chore: enable no-unnecessary-type-arguments
2026-04-10 20:14:49 +01:00
Peter Steinberger
2786ed0f67
chore: enable no-base-to-string
2026-04-10 20:14:49 +01:00
Peter Steinberger
dfe4c2d16d
chore: enable no-floating-promises
2026-04-10 20:14:49 +01:00
Peter Steinberger
2940379361
chore: enable no-unnecessary-template-expression
2026-04-10 20:14:49 +01:00
Peter Steinberger
01113566fd
chore: enable await-thenable
2026-04-10 20:14:49 +01:00
Peter Steinberger
8640b89158
test: trim provider contract slow paths
2026-04-10 20:00:48 +01:00
Agustin Rivera
109267b82a
Handle subframe document navigations in browser guards ( #64371 )
...
* fix(browser): guard subframe document navigations
Co-authored-by: zsx <git@zsxsoft.com >
* fix(browser): preserve quarantine on subframe blocks
* chore(changelog): add subframe SSRF guard entry
* fix(browser): fail closed when subframe frame resolution throws
isSubframeDocumentNavigationRequest now returns true (apply SSRF
check) instead of false (skip check) when request.frame() throws,
so transient renderer churn cannot bypass the subframe navigation
policy guard.
---------
Co-authored-by: zsx <git@zsxsoft.com >
Co-authored-by: Devin Robison <drobison@nvidia.com >
2026-04-10 12:51:23 -06:00
Peter Steinberger
b2df0ed4b7
fix: align browser ssrf policy typing
2026-04-10 19:49:46 +01:00
Peter Steinberger
abc499ec49
fix: preserve cdp guarded fetch dispatchers
2026-04-10 19:49:09 +01:00
Peter Steinberger
81ead0bc5b
fix(browser): keep legacy ssrf alias internal
2026-04-10 19:46:37 +01:00
Agustin Rivera
905f19230a
Align external marker span mapping ( #63885 )
...
* fix(markers): align external marker spans
* fix(browser): ssrfPolicy defaults fail-closed for unconfigured installs (GHSA-53vx-pmqw-863c)
* fix(browser): enforce strict default SSRF policy
* chore(changelog): add browser SSRF default + marker alignment entry
---------
Co-authored-by: Devin Robison <drobison@nvidia.com >
2026-04-10 12:35:20 -06:00
Agustin Rivera
daeb74920d
fix(browser): guard existing-session navigation ( #64370 )
...
* fix(browser): guard existing-session navigation
Co-authored-by: zsx <git@zsxsoft.com >
* fix(browser): tighten interaction navigation guard
* fix(browser): tighten existing-session nav guard
* fix(browser): fail closed on unstable existing-session probes
* fix(browser): add follow-up probe for late URL transitions in existing-session nav guard
* fix(browser): keep probing through full navigation window
* fix(browser): reset stability flag on probe error in existing-session nav guard
* chore(changelog): add Chrome MCP interaction SSRF guard entry
---------
Co-authored-by: zsx <git@zsxsoft.com >
Co-authored-by: Devin Robison <drobison@nvidia.com >
2026-04-10 12:31:41 -06:00
Peter Steinberger
59925c1a74
chore: update dependencies and oxc tooling
2026-04-10 19:28:42 +01:00
Peter Steinberger
925a499d84
ci: fix additional guard failures
2026-04-10 19:23:10 +01:00
Peter Steinberger
f6ed276f51
style: apply updated formatter output
2026-04-10 19:17:39 +01:00
Peter Steinberger
8127c6cc15
build(deps): update workspace dependencies
2026-04-10 19:17:39 +01:00
Peter Steinberger
420e092d90
test: remove duplicate matrix approval fallback case
2026-04-10 18:50:40 +01:00
Gustavo Madeira Santana
457a33646c
docs(matrix): track spec support gaps
2026-04-10 13:48:15 -04:00
Michael Appel
e0b8ddc1a5
fix(browser): apply three-phase interaction navigation guard to pressKey and type(submit) [AI-assisted] ( #63889 )
...
* fix: address issue
* chore(changelog): add pressKey/type SSRF guard entry
---------
Co-authored-by: Devin Robison <drobison@nvidia.com >
2026-04-10 11:27:53 -06:00