Peter Steinberger
cb5aefb790
fix: sync plugin sdk guardrails and test drift
2026-03-27 20:47:36 +00:00
Peter Steinberger
2bdbb189bd
refactor: route plugin sdk facades through extension barrels
2026-03-27 20:47:36 +00:00
Tak Hoffman
fa56682b3c
fix(regression): preserve CLI bindings across session reset
2026-03-27 15:47:16 -05:00
Tak Hoffman
9446ee8ea3
fix(regression): restore Telegram fallback probe coverage
2026-03-27 15:47:16 -05:00
Jacob Tomlinson
8eaa3417c3
Config: skip nonexistent Tavily web-search migration
2026-03-27 20:45:59 +00:00
Tak Hoffman
fc570934de
fix(regression): refresh Telegram probe test imports
2026-03-27 15:42:03 -05:00
Tak Hoffman
7772395618
fix(regression): isolate Telegram runtime helper tests
2026-03-27 15:42:03 -05:00
Tak Hoffman
366c1d6b9e
fix(regression): tighten Telegram runtime helper coverage
2026-03-27 15:42:03 -05:00
Peter Steinberger
fa05c351a1
fix(ci): align compaction and skills tests with upstream agent API
2026-03-27 20:41:10 +00:00
Jacob Tomlinson
20c7cbbf78
Telegram: tighten media SSRF policy ( #56004 )
...
* Telegram: tighten media SSRF policy
* Telegram: restrict media downloads to configured hosts
* Telegram: preserve custom media apiRoot hosts
2026-03-27 20:39:24 +00:00
Jacob Tomlinson
511093d4b3
Discord: apply component interaction policy gates ( #56014 )
...
* Discord: apply component interaction policy gates
Co-authored-by: nexrin <268879349+nexrin@users.noreply.github.com >
* Discord: pass carbon rate limit request
* Discord: reply to blocked component interactions
---------
Co-authored-by: nexrin <268879349+nexrin@users.noreply.github.com >
2026-03-27 20:38:40 +00:00
Jacob Tomlinson
e403decb6e
nextcloud-talk: throttle repeated webhook auth failures ( #56007 )
...
* nextcloud-talk: throttle repeated webhook auth failures
Co-authored-by: Brian Mendonca <208517100+bmendonca3@users.noreply.github.com >
* nextcloud-talk: scope webhook auth limiter per server
* nextcloud-talk: limit repeated webhook auth failures only
---------
Co-authored-by: Brian Mendonca <208517100+bmendonca3@users.noreply.github.com >
2026-03-27 20:37:55 +00:00
Jacob Tomlinson
355abe5eba
Discord: enforce approver checks for text approvals ( #56015 )
...
* Discord: gate text approvals by approver policy
* Discord: require approvers for plugin text approvals
* Discord: preserve legacy text approval fallback
2026-03-27 20:37:15 +00:00
Jacob Tomlinson
be00fcfccb
Gateway: align chat.send reset scope checks ( #56009 )
...
* Gateway: align chat.send reset scope checks
* Gateway: tighten chat.send reset regression test
* Gateway: honor internal provider reset scope
2026-03-27 20:36:31 +00:00
Jacob Tomlinson
aa66ae1fc7
Extensions: require admin for config write commands ( #56002 )
...
* Extensions: require admin for config write commands
* Tests: cover phone control disarm auth
2026-03-27 20:35:42 +00:00
Jacob Tomlinson
e64a881ae0
Channels: preserve routed group policy ( #56011 )
2026-03-27 20:33:47 +00:00
Tak Hoffman
77060aa9f9
fix(regression): preserve Telegram status fallback without runtime
2026-03-27 15:33:10 -05:00
Peter Steinberger
ae7d93adc4
fix(ci): restore green check after upstream API changes
2026-03-27 20:30:35 +00:00
Peter Steinberger
41901c19bf
fix: restore green check after upstream API changes
2026-03-27 20:29:18 +00:00
Peter Steinberger
79e495a627
fix: add OpenAI version attribution header
2026-03-27 20:29:18 +00:00
Jacob Tomlinson
d61f8e5672
Net: block missing IPv6 special-use ranges ( #56008 )
...
* Net: block missing IPv6 special-use ranges
* Tests: refresh public IPv6 pinning fixtures
2026-03-27 20:28:25 +00:00
Jacob Tomlinson
85777e726c
Voice Call: canonicalize Plivo V3 replay key ( #56003 )
...
Co-authored-by: zsx <git@zsxsoft.com >
2026-03-27 20:27:23 +00:00
Peter Steinberger
d73dbb6753
fix: restore provider auth and build checks
2026-03-27 20:20:31 +00:00
Peter Steinberger
c28e76c490
refactor: move provider model helpers into plugins
2026-03-27 20:20:31 +00:00
Peter Steinberger
5d3d54ee36
refactor: generate plugin sdk facades
2026-03-27 20:20:31 +00:00
Peter Steinberger
888be707cf
fix(hooks): avoid repo-wide format churn
2026-03-27 20:19:53 +00:00
Tak Hoffman
4430805719
Allow inherited AWS config file paths
2026-03-27 15:16:19 -05:00
Tak Hoffman
8bcab7ec6f
Allow manual remote URL after trust decline
2026-03-27 15:16:19 -05:00
Tak Hoffman
c3d45fbb19
Fallback to Jiti when bun is unavailable
2026-03-27 15:16:19 -05:00
Tak Hoffman
fa89d68e7a
Fix compaction safeguard request auth lookup
2026-03-27 15:16:19 -05:00
Peter Steinberger
4505987b9c
style(ui): format control views
2026-03-27 20:15:13 +00:00
Jacob Tomlinson
eb6a3fca26
telegram: use live runtime helpers in channel status
2026-03-27 20:14:33 +00:00
Peter Steinberger
953a438420
fix(discord): align rate-limit error callsites
2026-03-27 20:09:15 +00:00
Peter Steinberger
49dbf64ab1
fix(core): harden bundled provider runtime surfaces
2026-03-27 20:04:53 +00:00
Jacob Tomlinson
cf10183389
plugins: disable native jiti loading under bun
2026-03-27 20:02:59 +00:00
Jacob Tomlinson
3e4222e9d4
docs: fix duplicate testing heading
2026-03-27 19:50:09 +00:00
Vincent Koc
02e3061aa7
fix(discord): stop queued reconnect exhaustion crash ( #55991 )
2026-03-27 12:39:38 -07:00
Peter Steinberger
496a1a35bd
fix(test): stabilize line and irc extension suites
2026-03-27 19:32:57 +00:00
Byungsker
1dae6cc617
docs(agent-loop): correct default timeoutSeconds from 600s to 172800s (48h) ( #55419 )
...
* docs(agent-loop): correct default timeoutSeconds from 600s to 172800s (48h)
The default was raised to 48 hours in PR #51874 (merged 2026-03-21) to
avoid cutting off long-running ACP sessions, but the docs were not
updated at the time. Closes #55380 .
* docs: remove 'Use 0 to disable' per aisle security review
2026-03-27 12:31:24 -07:00
Jacob Tomlinson
16ed9bf147
config: fall back to jiti for channel config surfaces
2026-03-27 19:27:35 +00:00
Peter Steinberger
605c9306ab
fix(ci): repair extension and discord test gates
2026-03-27 19:26:25 +00:00
Jacob Tomlinson
febcb01128
discord: fix Carbon RateLimitError calls
2026-03-27 19:16:36 +00:00
Jacob Tomlinson
4d7cc6bb4f
gateway: restrict node pairing approvals ( #55951 )
...
* gateway: restrict node pairing approvals
* gateway: tighten node pairing scope checks
* gateway: harden node pairing reconnects
* agents: request elevated node pairing scopes
* agents: fix node pairing approval preflight scopes
2026-03-27 19:14:16 +00:00
Jacob Tomlinson
68ceaf7a5f
zalo: gate image downloads before DM auth ( #55979 )
...
* zalo: gate image downloads before DM auth
* zalo: clarify pre-download auth sentinel
2026-03-27 19:12:26 +00:00
Jacob Tomlinson
9ec44fad39
Exec approvals: reject wrapper carrier allow-always targets ( #55947 )
...
* Exec approvals: reject wrapper carrier allow-always targets
Co-authored-by: nexrin <268879349+nexrin@users.noreply.github.com >
* Tests: add shell wrapper carrier follow-up assertion
---------
Co-authored-by: nexrin <268879349+nexrin@users.noreply.github.com >
2026-03-27 19:07:47 +00:00
Nimrod Gutman
7ce2670043
fix(discord): update carbon beta ( #55980 )
...
* fix(discord): update carbon beta
* fix: update carbon beta (#55980 ) (thanks @ngutman)
2026-03-27 22:06:20 +03:00
Jacob Tomlinson
824e16f9dd
fix(media): require fs access for dynamic local roots ( #55946 )
...
* fix(media): require fs access for dynamic local roots
* fix(media): tighten fs root expansion policy
* fix(media): align fs root expansion with effective policy
2026-03-27 19:06:02 +00:00
Jacob Tomlinson
c603123528
fix(gateway): require admin for persisted verbose defaults ( #55916 )
...
* fix(gateway): require admin for verbose persistence
* gateway: tighten verbose persistence follow-ups
2026-03-27 19:04:02 +00:00
joshavant
55cd272fe1
changelog correction
...
Signed-off-by: joshavant <830519+joshavant@users.noreply.github.com >
2026-03-27 12:02:44 -07:00
Jacob Tomlinson
7a801cc451
Gateway: disconnect revoked device sessions ( #55952 )
...
* Gateway: disconnect revoked device sessions
* Gateway: normalize device disconnect targets
* Gateway: scope token revoke disconnects by role
* Gateway: respond before disconnecting sessions
2026-03-27 19:01:26 +00:00
