Vincent Koc
ce01b8f250
fix(gateway): keep restart probe auth local ( #72405 )
...
* fix(gateway): keep restart probe auth local
* fix(gateway): repair local restart probe auth replacement
2026-04-27 22:25:20 -07:00
Vincent Koc
4c72e605cd
fix(feishu): recover mojibake filenames from Content-Disposition ( #72388 )
2026-04-27 22:23:16 -07:00
Vincent Koc
d7e67b455a
fix(tui): clear stale streaming after orphaned finals ( #72389 )
...
* fix(tui): clear stale streaming after orphaned finals
* fix(tui): clear stale streaming after orphaned finals
* fix(tui): clear stale streaming after orphaned finals
2026-04-27 22:23:13 -07:00
Shakker
db7cab4a9a
fix: simplify volc catalog model builders
2026-04-28 06:21:24 +01:00
Shakker
37324dd112
docs: note byteplus volcengine catalog migration
2026-04-28 06:21:24 +01:00
Shakker
8a3252868f
refactor: remove unused volc catalog sdk helper
2026-04-28 06:21:24 +01:00
Shakker
1cfa22acb1
feat: declare volcengine model catalog
2026-04-28 06:21:24 +01:00
Shakker
4513658f59
feat: declare byteplus model catalog
2026-04-28 06:21:24 +01:00
Peter Steinberger
25851e3cae
fix(google-meet): harden observe mode speech health ( #73256 )
...
* fix(google-meet): harden observe mode speech health
* fix(google-meet): address observe speech review
* docs(google-meet): clarify observe mode guarantees
2026-04-28 06:21:10 +01:00
Jesse Merhi
2633b14914
feat(security): support operator-managed network proxy routing ( #70044 )
...
* feat: support operator-managed proxy routing
* docs: add network proxy changelog entry
* fix(proxy): restrict gateway bypass to loopback IPs
* fix(cli): harden container proxy URL checks
* docs(proxy): clarify gateway bypass scope
* docs: remove proxy changelog entry
* fix(proxy): clear startup CI guard failures
* fix(proxy): harden gateway proxy policy parsing
* fix(proxy): honor update shorthand proxy policy
* fix(cli): redact proxy URL suffixes
* test(proxy): keep gateway help off proxy startup
* fix(proxy): keep overlapping lifecycle active
* docs: add proxy changelog entry
---------
Co-authored-by: joshavant <830519+joshavant@users.noreply.github.com >
2026-04-28 00:20:47 -05:00
Peter Steinberger
025081dbc5
refactor(memory-host): consolidate core adapter
2026-04-28 06:20:19 +01:00
Peter Steinberger
82eb90b8a2
fix(agents): preserve trusted tool media metadata
2026-04-28 06:19:41 +01:00
Peter Steinberger
bb97f19396
fix(telegram): preserve streamed generated media
2026-04-28 06:19:41 +01:00
Peter Steinberger
8c8dfa768a
refactor(models): share catalog capability lookup
2026-04-28 06:18:54 +01:00
Shakker
defddedbaf
fix: carry plugin compat into loader reports
2026-04-28 06:18:46 +01:00
Shakker
d062f8130b
feat: warn on implicit startup plugin compatibility
2026-04-28 06:18:45 +01:00
Peter Steinberger
f7e942f571
fix(tasks): ship task registry control runtime
2026-04-28 06:18:30 +01:00
Peter Steinberger
85bdaff418
test: route security audits through fast lane
2026-04-28 06:18:06 +01:00
teamclaw
057b8276cc
fix(config): align in-process write sourceConfig with file-watcher ( #73267 )
...
Fix config writes so in-process reload notifications use the canonical post-write source snapshot, matching the file watcher path.
Adds regression coverage for the runtime source snapshot and changelog credit.
2026-04-28 06:16:58 +01:00
Peter Steinberger
a644e30245
fix(memory-core): retry unavailable dreaming model
2026-04-28 06:15:28 +01:00
Peter Steinberger
017b8db616
ci: speed up release validation shards
2026-04-28 06:14:23 +01:00
Peter Steinberger
3d53b39917
fix(gateway): honor configured vision models
2026-04-28 06:10:14 +01:00
Peter Steinberger
88bcb64681
test: route acp session mapper through fast lane
2026-04-28 06:10:03 +01:00
Peter Steinberger
526372ea36
fix(gateway): use runtime config for secret-backed talk
...
* fix(gateway): use runtime config for secret-backed talk
* test(gateway): relax talk config rpc timeout
* refactor(gateway): clarify talk config resolution
2026-04-28 06:05:27 +01:00
Vincent Koc
75deb12606
fix(gateway): avoid approval route config load
...
Avoid eager runtime config loading in the gateway approval path and unref approval cleanup grace timers.
2026-04-27 22:04:09 -07:00
Peter Steinberger
ece523a2b0
docs(plugin-sdk): refresh api baseline
2026-04-28 06:02:17 +01:00
Peter Steinberger
f7d139dfef
refactor(memory-host): localize host utilities
2026-04-28 06:02:17 +01:00
Peter Steinberger
74a667f119
fix(telegram): retry startup control calls on fallback transport
2026-04-28 06:02:05 +01:00
Vincent Koc
c627afe1df
fix(ci): restore plugin sdk browser config wrapper
2026-04-27 22:01:55 -07:00
Vincent Koc
2809630036
fix(android): disable app data backup ( #73281 )
2026-04-27 22:01:28 -07:00
Vincent Koc
7b18bd03bb
fix(gateway): allow explicit loopback trusted proxy auth
...
Fixes #59167 .
Supersedes #63379 .
2026-04-27 22:01:06 -07:00
Peter Steinberger
1089e8b9e0
fix: stabilize memory host ci tests
2026-04-28 06:00:21 +01:00
Peter Steinberger
a6141a5a41
fix: harden macOS gateway updates
2026-04-28 05:58:05 +01:00
Peter Steinberger
66f80d1ed6
docs: avoid mdx list in sdk overview tip
2026-04-28 05:56:57 +01:00
samzong
25ef9c0c41
[Feat] Gateway: offload non-image attachments on chat.send ( #67572 )
...
Merged via squash.
Prepared head SHA: ecbd27fc30
Co-authored-by: samzong <13782141+samzong@users.noreply.github.com >
Co-authored-by: frankekn <4488090+frankekn@users.noreply.github.com >
Reviewed-by: @frankekn
2026-04-28 12:55:00 +08:00
Peter Steinberger
a68cc94c36
fix: resolve main ci shard failures
2026-04-28 05:52:19 +01:00
Peter Steinberger
540cbe24be
fix: allow memory flush model override
2026-04-28 05:50:55 +01:00
Peter Steinberger
dc3df62e67
refactor(memory-host): own package contract surface
2026-04-28 05:49:07 +01:00
Vincent Koc
6fadc56802
fix(media): tighten sanitizeMimeType anchoring ( #73229 )
...
* fix(media): tighten sanitizeMimeType anchoring
* fix(media): tighten sanitizeMimeType anchoring
* fix(media): tighten sanitizeMimeType anchoring
2026-04-27 21:48:36 -07:00
Gustavo Madeira Santana
d59f001507
test(qa-matrix): cover allowBots modes
2026-04-28 00:47:40 -04:00
Vincent Koc
6d7901f5c8
fix(acpx): lazy-load startup backend
2026-04-27 21:46:45 -07:00
Peter Steinberger
996818e6af
fix: follow up main ci failures
2026-04-28 05:41:49 +01:00
Peter Steinberger
8a48994802
fix(otel): record liveness warnings
2026-04-28 05:41:30 +01:00
Peter Steinberger
66a0aa47e4
docs(google): clarify gemini 3.1 pro alias
2026-04-28 05:41:30 +01:00
Vincent Koc
2bce63cb65
fix(android): harden canvas webview bridge ( #73240 )
...
* fix(android): harden canvas webview bridge
* fix(android): make canvas content access hardening explicit
* fix(android): keep webview hardening inline for CodeQL
* fix(android): avoid webview getter false positive
2026-04-27 21:41:01 -07:00
Peter Steinberger
52daf5fbd3
fix(acpx): stage Claude ACP adapter runtime dependency
2026-04-28 05:38:15 +01:00
Peter Steinberger
59bd7e47e8
docs: avoid mdx lists inside callouts
2026-04-28 05:34:44 +01:00
Peter Steinberger
b8c44bfc82
fix: restore main ci and speed tests
2026-04-28 05:34:28 +01:00
Brian Newman
055127425f
fix(export): fix broken template placeholders in session export HTML ( #41861 )
...
* fix(export): fix broken template placeholders in session export HTML
The {{MARKED_JS}}, {{HIGHLIGHT_JS}}, and {{JS}} placeholders in the
export HTML template were split across multiple lines by a code
formatter, turning them into JS block statements instead of template
tokens. The generateHtml() function uses .replace('{{MARKED_JS}}', ...)
which requires contiguous strings, so the vendor JS and app code were
never injected — producing a 2MB HTML file that opens with styles and
session data but renders blank (no JS to parse/display the data).
Fix: collapse placeholders to single-line {{TOKEN}} format and add
prettier-ignore comments to prevent re-formatting.
Introduced in 9d403fd .
* fix(export): use function replacers for vendor JS injection
String.replace() interprets $ sequences ($&, $$, $', etc.) in
replacement strings. The minified vendor libraries (highlight.min.js,
marked.min.js) and the template JS contain literal $ characters that
get mutated during injection — e.g. $& becomes the matched placeholder
text, $$ becomes a single $.
Fix: use arrow function replacers for JS content so replacement text
is injected verbatim without $ interpretation. CSS and session data
use string replacers since they don't contain problematic $ patterns.
Flagged by Codex review (P2).
* ci: retrigger checks
* fix(export-session): restore inline export scripts
---------
Co-authored-by: vincentkoc <25068+vincentkoc@users.noreply.github.com >
2026-04-27 21:34:20 -07:00
Peter Steinberger
5826774076
fix(diagnostics-otel): handle liveness warnings
2026-04-28 05:32:40 +01:00