Gustavo Madeira Santana
b5dcc11273
plugins: trim staged runtime cargo
2026-04-13 18:10:40 -04:00
Peter Steinberger
e04a63d08a
chore: fix pulled lint assertion
2026-04-13 23:09:32 +01:00
Peter Steinberger
3fdc70a434
fix: normalize OpenAI minimal reasoning
2026-04-13 23:09:21 +01:00
Mariano
3d06d90e83
fix(memory): unify default root memory handling ( #66141 )
...
* fix(memory): unify default root memory handling
* test(memory): align legacy migration expectation
* docs(changelog): tag qmd root-memory fix
* docs(changelog): append qmd root-memory entry
* docs(changelog): dedupe qmd root-memory entry
* docs(changelog): attribute qmd root-memory fix
---------
Co-authored-by: mbelinky <mbelinky@users.noreply.github.com >
2026-04-13 23:59:57 +02:00
Vincent Koc
cc2a377009
fix(ci): repair baileys lockfile snapshot
2026-04-13 22:49:26 +01:00
Vincent Koc
792653df15
fix(ci): clear residual tsgo blockers
2026-04-13 22:37:25 +01:00
Vincent Koc
a16331c36e
fix(ci): align cron and session tests with runtime
2026-04-13 22:37:25 +01:00
Vincent Koc
36a58e714c
fix(ci): mirror whatsapp runtime dependency
2026-04-13 22:37:25 +01:00
Vincent Koc
f3283a330b
fix(ci): repair extension boundary contracts
2026-04-13 22:37:25 +01:00
Vincent Koc
ea25cf2595
fix(ci): unblock discord boundary typing
2026-04-13 22:37:24 +01:00
Val Alexander
9315302516
fix(ui): replace marked.js with markdown-it to fix ReDoS UI freeze ( #46707 ) thanks @zhangfnf
...
Replace marked.js with markdown-it for the control UI chat markdown renderer
to eliminate a ReDoS vulnerability that could freeze the browser tab.
- Configure markdown-it with custom renderers matching marked.js output
- Add GFM www-autolink with trailing punctuation stripping per spec
- Escape raw HTML via html_block/html_inline overrides
- Flatten remote images to alt text, preserve base64 data URI images
- Add task list support via markdown-it-task-lists plugin
- Trim trailing CJK characters from auto-linked URLs (RFC 3986)
- Keep marked dependency for agents-panels-status-files.ts usage
Co-authored-by: zhangfan49 <zhangfan49@baidu.com >
Co-authored-by: Nova <nova@openknot.ai >
2026-04-13 16:08:35 -05:00
Tak Hoffman
f94d6778b1
fix(active-memory): Move active memory recall into the hidden prompt prefix ( #66144 )
...
* move active memory into prompt prefix
* document active memory prompt prefix
* strip active memory prefixes from recall history
* harden active memory prompt prefix handling
* hide active memory prefix in leading history views
* strip hidden memory blocks after prompt merges
* preserve user turns in memory recall cleanup
2026-04-13 16:05:43 -05:00
Bob
8c7f17b953
fix: count unknown-tool retries only when streamed ( #66145 )
...
Merged via squash.
Prepared head SHA: b79209cdb5
Co-authored-by: Bob <dutifulbob@gmail.com >
Reviewed-by: @osolmaz
2026-04-13 22:49:05 +02:00
Byron
891e42beec
fix(ui): preserve user-selected session on reconnect and tab switch ( #59611 ) thanks @loong0306
...
Fixes #57072 — chat UI state desync after route navigation.
- applySessionDefaults() now detects user-selected sessions and preserves them on reconnect
- Chat tab session switching consolidated to use switchChatSession() helper
- Overview session-key handler uses shared resetChatStateForSessionSwitch to prevent stale state leaks
- Session select dropdowns now set ?selected to reflect actual state
Co-authored-by: loong0306 <loong0306@gmail.com >
Co-authored-by: Nova <nova@openknot.ai >
2026-04-13 15:24:56 -05:00
Vincent Koc
10a92e2ff4
perf(config): keep runtime compat migrations lightweight
2026-04-13 21:14:22 +01:00
rafaelreis-r
68e0e456f3
fix: allow plugin commands on Slack when channel supports native commands ( #64578 )
...
Merged via squash.
Prepared head SHA: 2ec97bf0b3
Co-authored-by: rafaelreis-r <57492577+rafaelreis-r@users.noreply.github.com >
Co-authored-by: jalehman <550978+jalehman@users.noreply.github.com >
Reviewed-by: @jalehman
2026-04-13 13:14:02 -07:00
Vincent Koc
ce1fffa97e
perf(agents): narrow session helper imports
2026-04-13 21:09:44 +01:00
Vincent Koc
99755fcb2f
perf(agents): lazy-load session store updates
2026-04-13 21:07:50 +01:00
Vincent Koc
dd27aa945e
perf(agents): lazy-load delivery runtime
2026-04-13 21:05:30 +01:00
Vincent Koc
f126088761
perf(agents): keep attempt execution runtime cold
2026-04-13 21:03:52 +01:00
Mariano
305a80ce32
[codex] fix(ui): guard dreaming wiki plugin calls ( #66140 )
...
Merged via squash.
Prepared head SHA: 030562b044
Co-authored-by: mbelinky <132747814+mbelinky@users.noreply.github.com >
Co-authored-by: mbelinky <132747814+mbelinky@users.noreply.github.com >
Reviewed-by: @mbelinky
2026-04-13 22:01:11 +02:00
Vincent Koc
ac00ba1943
perf(commands): lazy-load agent secret resolution
2026-04-13 20:56:03 +01:00
Vincent Koc
f2e08295e6
perf(commands): narrow agent config imports
2026-04-13 20:51:35 +01:00
Mariano
3d42e33dd0
fix(memory-core): run Dreaming once per cron schedule ( #66139 )
...
Merged via squash.
Prepared head SHA: 48229a24cb
Co-authored-by: mbelinky <132747814+mbelinky@users.noreply.github.com >
Co-authored-by: mbelinky <132747814+mbelinky@users.noreply.github.com >
Reviewed-by: @mbelinky
2026-04-13 21:50:32 +02:00
Vincent Koc
99237c2dde
perf(commands): narrow session test imports
2026-04-13 20:45:04 +01:00
Vincent Koc
9a2675e9fd
perf(agents): lazy-load cli runner seams
2026-04-13 20:43:58 +01:00
Vincent Koc
25a2ea4480
perf(config): scope dry-run legacy validation
2026-04-13 20:40:52 +01:00
Vincent Koc
e02c6ca82a
perf(config): narrow channel legacy rule loading
2026-04-13 20:37:21 +01:00
Agustin Rivera
43d4be9027
fix(queue): split collect batches by auth context ( #66024 )
...
* fix(queue): split collect batches by auth context
Co-authored-by: zsx <git@zsxsoft.com >
* fix(queue): keep overflow summary on splits
* fix(queue): preserve grouped collect retry semantics
* fix(queue): drop USER.md from pr
* fix(queue): keep overflow summary in first auth group
* fix(queue): clear overflow summary state after first auth group
* fix(queue): narrow auth split key
* fix(queue): flush collect summary-only drains
* changelog: note collect-mode auth-context batch split (#66024 )
---------
Co-authored-by: zsx <git@zsxsoft.com >
Co-authored-by: Devin Robison <drobison@nvidia.com >
2026-04-13 13:35:39 -06:00
Agustin Rivera
48aae82bbc
fix(outbound): replay queued session context ( #66025 )
...
* fix(outbound): preserve replay session context
* fix(outbound): remove user work log
* changelog: note outbound session-context replay fix (#66025 )
---------
Co-authored-by: Devin Robison <drobison@nvidia.com >
2026-04-13 13:30:42 -06:00
Tak Hoffman
7c09ba70ef
fix(trace command): Improve trace raw diagnostics and trace command UX ( #66089 )
...
* improve trace raw diagnostics and command acks
* address trace review feedback
* avoid sync transcript reads in raw trace
* preserve raw cli output for trace
* gate trace emission at reply time
* reflect raw trace mode in status surfaces
2026-04-13 14:26:57 -05:00
Vincent Koc
6157933e39
perf(config): skip cold runtime refresh on one-shot writes
2026-04-13 20:25:21 +01:00
Vincent Koc
bd20a920a2
perf(config): use generated SecretRef policy metadata
2026-04-13 20:19:04 +01:00
Mariano
a0a4a768dc
test(cron): fix #66019 maintenance regression coverage ( #66122 )
...
Merged via squash.
Prepared head SHA: 7f2a604e91
2026-04-13 21:03:45 +02:00
屈定
95ee120a91
fix: classify openrouter json 404 model errors
...
Rewrites the stale branch on top of current `main` and preserves the original issue as regression coverage for the exact OpenRouter JSON 404 payload from #51571 .
No production behavior changes are introduced here; current `main` already classifies this payload as `model_not_found`, and this merge locks that in across the shared matcher, failover classifier, and fallback loop.
Co-authored-by: 屈定 <mrdear@users.noreply.github.com >
Co-authored-by: Altay <altay@uinaf.dev >
2026-04-13 19:53:55 +01:00
Vincent Koc
961eb95e9a
perf(secrets): lazy-load provider env var exports
2026-04-13 19:52:02 +01:00
pashpashpash
8efbe8c1ed
agents: stop strict mode from hijacking chat turns
2026-04-13 11:49:00 -07:00
Mariano
190a4b4869
fix(cron): preserve unresolved next-run backoff ( #66113 )
...
Merged via squash.
Prepared head SHA: a553daa7eb
Co-authored-by: mbelinky <132747814+mbelinky@users.noreply.github.com >
Co-authored-by: mbelinky <132747814+mbelinky@users.noreply.github.com >
Reviewed-by: @mbelinky
2026-04-13 20:48:14 +02:00
Pavan Kumar Gondhi
31281bc92f
fix(heartbeat): force owner downgrade for untrusted hook:wake system events [AI-assisted] ( #66031 )
...
* fix: address issue
* fix: address PR review feedback
* fix: address review-pr skill feedback
* fix: address PR review feedback
* fix: address PR review feedback
* fix: address PR review feedback
* fix: address PR review feedback
* fix: address PR review feedback
* fix: address PR review feedback
* docs: add changelog entry for PR merge
2026-04-14 00:14:17 +05:30
Vincent Koc
587e72df4d
perf(config): use direct writes for gateway token persistence
2026-04-13 19:38:56 +01:00
Mariano
1490e2b1d3
Lobster: import published core runtime ( #64755 )
...
* Lobster: import published core runtime
* Changelog: add Lobster core runtime note
* Lobster: type embedded core runtime
* Lobster: keep package-boundary tsconfig narrow
2026-04-13 20:38:46 +02:00
Vincent Koc
66f57a6e1b
perf(config): defer legacy web search registry reads
2026-04-13 19:34:44 +01:00
Vincent Koc
120c384f00
perf(config): reuse prepared snapshots for daemon token writes
2026-04-13 19:32:28 +01:00
Pavan Kumar Gondhi
b75ad800a5
fix(browser): enforce SSRF policy on snapshot, screenshot, and tab routes [AI] ( #66040 )
...
* fix: address issue
* fix: address review feedback
* fix: finalize issue changes
* fix: address review-pr skill feedback
* fix: address PR review feedback
* fix: address PR review feedback
* docs: add changelog entry for PR merge
2026-04-13 23:56:39 +05:30
Vincent Koc
55a3c8ea07
perf(daemon): import install config helpers directly
2026-04-13 19:22:52 +01:00
Pavan Kumar Gondhi
80b1fa17bf
fix(msteams): enforce sender allowlist checks on SSO signin invokes [AI] ( #66033 )
...
* fix: address issue
* fix: address PR review feedback
* docs: add changelog entry for PR merge
2026-04-13 23:52:30 +05:30
Vincent Koc
75b4c059b8
perf(daemon): slim gateway install token imports
2026-04-13 19:21:01 +01:00
Pavan Kumar Gondhi
86734ef93a
fix(config): redact sourceConfig and runtimeConfig alias fields in redactConfigSnapshot [AI] ( #66030 )
...
* fix: address issue
* docs: add changelog entry for PR merge
2026-04-13 23:47:31 +05:30
Vincent Koc
448a33b90c
perf(daemon): lazy-load auth profile install helpers
2026-04-13 19:14:27 +01:00
Mariano
c602824215
fix(cron): stop unresolved next-run refire loops ( #66083 )
...
Merged via squash.
Prepared head SHA: b86ba58d3b
2026-04-13 20:10:03 +02:00