Commit Graph

22696 Commits

Author SHA1 Message Date
Jacob Tomlinson
aa66ae1fc7 Extensions: require admin for config write commands (#56002)
* Extensions: require admin for config write commands

* Tests: cover phone control disarm auth
2026-03-27 20:35:42 +00:00
Jacob Tomlinson
e64a881ae0 Channels: preserve routed group policy (#56011) 2026-03-27 20:33:47 +00:00
Tak Hoffman
77060aa9f9 fix(regression): preserve Telegram status fallback without runtime 2026-03-27 15:33:10 -05:00
Peter Steinberger
ae7d93adc4 fix(ci): restore green check after upstream API changes 2026-03-27 20:30:35 +00:00
Peter Steinberger
41901c19bf fix: restore green check after upstream API changes 2026-03-27 20:29:18 +00:00
Peter Steinberger
79e495a627 fix: add OpenAI version attribution header 2026-03-27 20:29:18 +00:00
Jacob Tomlinson
d61f8e5672 Net: block missing IPv6 special-use ranges (#56008)
* Net: block missing IPv6 special-use ranges

* Tests: refresh public IPv6 pinning fixtures
2026-03-27 20:28:25 +00:00
Jacob Tomlinson
85777e726c Voice Call: canonicalize Plivo V3 replay key (#56003)
Co-authored-by: zsx <git@zsxsoft.com>
2026-03-27 20:27:23 +00:00
Peter Steinberger
d73dbb6753 fix: restore provider auth and build checks 2026-03-27 20:20:31 +00:00
Peter Steinberger
c28e76c490 refactor: move provider model helpers into plugins 2026-03-27 20:20:31 +00:00
Peter Steinberger
5d3d54ee36 refactor: generate plugin sdk facades 2026-03-27 20:20:31 +00:00
Peter Steinberger
888be707cf fix(hooks): avoid repo-wide format churn 2026-03-27 20:19:53 +00:00
Tak Hoffman
4430805719 Allow inherited AWS config file paths 2026-03-27 15:16:19 -05:00
Tak Hoffman
8bcab7ec6f Allow manual remote URL after trust decline 2026-03-27 15:16:19 -05:00
Tak Hoffman
c3d45fbb19 Fallback to Jiti when bun is unavailable 2026-03-27 15:16:19 -05:00
Tak Hoffman
fa89d68e7a Fix compaction safeguard request auth lookup 2026-03-27 15:16:19 -05:00
Peter Steinberger
4505987b9c style(ui): format control views 2026-03-27 20:15:13 +00:00
Jacob Tomlinson
eb6a3fca26 telegram: use live runtime helpers in channel status 2026-03-27 20:14:33 +00:00
Peter Steinberger
953a438420 fix(discord): align rate-limit error callsites 2026-03-27 20:09:15 +00:00
Peter Steinberger
49dbf64ab1 fix(core): harden bundled provider runtime surfaces 2026-03-27 20:04:53 +00:00
Jacob Tomlinson
cf10183389 plugins: disable native jiti loading under bun 2026-03-27 20:02:59 +00:00
Jacob Tomlinson
3e4222e9d4 docs: fix duplicate testing heading 2026-03-27 19:50:09 +00:00
Vincent Koc
02e3061aa7 fix(discord): stop queued reconnect exhaustion crash (#55991) 2026-03-27 12:39:38 -07:00
Peter Steinberger
496a1a35bd fix(test): stabilize line and irc extension suites 2026-03-27 19:32:57 +00:00
Byungsker
1dae6cc617 docs(agent-loop): correct default timeoutSeconds from 600s to 172800s (48h) (#55419)
* docs(agent-loop): correct default timeoutSeconds from 600s to 172800s (48h)

The default was raised to 48 hours in PR #51874 (merged 2026-03-21) to
avoid cutting off long-running ACP sessions, but the docs were not
updated at the time. Closes #55380.

* docs: remove 'Use 0 to disable' per aisle security review
2026-03-27 12:31:24 -07:00
Jacob Tomlinson
16ed9bf147 config: fall back to jiti for channel config surfaces 2026-03-27 19:27:35 +00:00
Peter Steinberger
605c9306ab fix(ci): repair extension and discord test gates 2026-03-27 19:26:25 +00:00
Jacob Tomlinson
febcb01128 discord: fix Carbon RateLimitError calls 2026-03-27 19:16:36 +00:00
Jacob Tomlinson
4d7cc6bb4f gateway: restrict node pairing approvals (#55951)
* gateway: restrict node pairing approvals

* gateway: tighten node pairing scope checks

* gateway: harden node pairing reconnects

* agents: request elevated node pairing scopes

* agents: fix node pairing approval preflight scopes
2026-03-27 19:14:16 +00:00
Jacob Tomlinson
68ceaf7a5f zalo: gate image downloads before DM auth (#55979)
* zalo: gate image downloads before DM auth

* zalo: clarify pre-download auth sentinel
2026-03-27 19:12:26 +00:00
Jacob Tomlinson
9ec44fad39 Exec approvals: reject wrapper carrier allow-always targets (#55947)
* Exec approvals: reject wrapper carrier allow-always targets

Co-authored-by: nexrin <268879349+nexrin@users.noreply.github.com>

* Tests: add shell wrapper carrier follow-up assertion

---------

Co-authored-by: nexrin <268879349+nexrin@users.noreply.github.com>
2026-03-27 19:07:47 +00:00
Nimrod Gutman
7ce2670043 fix(discord): update carbon beta (#55980)
* fix(discord): update carbon beta

* fix: update carbon beta (#55980) (thanks @ngutman)
2026-03-27 22:06:20 +03:00
Jacob Tomlinson
824e16f9dd fix(media): require fs access for dynamic local roots (#55946)
* fix(media): require fs access for dynamic local roots

* fix(media): tighten fs root expansion policy

* fix(media): align fs root expansion with effective policy
2026-03-27 19:06:02 +00:00
Jacob Tomlinson
c603123528 fix(gateway): require admin for persisted verbose defaults (#55916)
* fix(gateway): require admin for verbose persistence

* gateway: tighten verbose persistence follow-ups
2026-03-27 19:04:02 +00:00
joshavant
55cd272fe1 changelog correction
Signed-off-by: joshavant <830519+joshavant@users.noreply.github.com>
2026-03-27 12:02:44 -07:00
Jacob Tomlinson
7a801cc451 Gateway: disconnect revoked device sessions (#55952)
* Gateway: disconnect revoked device sessions

* Gateway: normalize device disconnect targets

* Gateway: scope token revoke disconnects by role

* Gateway: respond before disconnecting sessions
2026-03-27 19:01:26 +00:00
Jacob Tomlinson
fef1b1918c SDK: break channel plugin import cycle 2026-03-27 19:00:57 +00:00
Jacob Tomlinson
80d1e8a11a fal: guard image fetches (#55948)
* fal: guard image fetches

* fal: isolate guarded fetch tests

* fal: trust configured relay hosts
2026-03-27 18:59:25 +00:00
Peter Steinberger
2f13758f42 test: stabilize extension ci mocks 2026-03-27 18:55:58 +00:00
Jacob Tomlinson
4ee4960de2 Pairing: forward caller scopes during approval (#55950)
* Pairing: require caller scopes on approvals

* Gateway: reject forbidden silent pairing results
2026-03-27 18:55:33 +00:00
Jacob Tomlinson
2e23d44491 tests(feishu): reload chat tool after mock reset 2026-03-27 18:53:39 +00:00
Jacob Tomlinson
6eb82fba3c Infra: block additional host exec env keys (#55977) 2026-03-27 18:50:37 +00:00
Jacob Tomlinson
fdbcfced84 Agents: enforce session status visibility (#55904)
* Agents: enforce session_status visibility

* Agents: preserve sandboxed session_status visibility checks
2026-03-27 18:49:24 +00:00
Jacob Tomlinson
b7b3c806b4 fix(compaction): guard legacy model registry auth lookup 2026-03-27 18:44:54 +00:00
Jacob Tomlinson
d6affb17d8 CLI: confirm discovered remote gateways before saving config (#55895)
* CLI: require trust confirmation for discovered remote gateways

Co-authored-by: nexrin <268879349+nexrin@users.noreply.github.com>

* CLI: clear discovery pin when remote URL changes

---------

Co-authored-by: nexrin <268879349+nexrin@users.noreply.github.com>
2026-03-27 18:43:42 +00:00
Peter Steinberger
c9d68fb9c2 fix: repair ci test and loader regressions 2026-03-27 18:41:47 +00:00
glitch
3cec3bd48b fix(memory): share embedding providers across plugin runtime splits (#55945)
Merged via squash.

Prepared head SHA: e913806211
Co-authored-by: glitch418x <189487110+glitch418x@users.noreply.github.com>
Co-authored-by: altaywtf <9790196+altaywtf@users.noreply.github.com>
Reviewed-by: @altaywtf
2026-03-27 21:40:19 +03:00
Jacob Tomlinson
78e2f3d66d Exec: tighten jq safe-bin env checks (#55905) 2026-03-27 18:37:31 +00:00
Jacob Tomlinson
c774db9a1f fix(compaction): pass summary headers before abort signal 2026-03-27 18:35:31 +00:00
Jacob Tomlinson
25210317b8 fix(skills): adapt skill source metadata API 2026-03-27 18:28:45 +00:00