Tak Hoffman
d00dc5f46b
fix(ci): repair discord and telegram follow-ups
2026-03-26 16:33:05 -05:00
Peter Steinberger
53f90af990
test: dedupe telegram polling session harness
2026-03-26 21:30:28 +00:00
Peter Steinberger
6aa9bec8d7
fix: export shared channel action enum helpers
2026-03-26 21:21:44 +00:00
Peter Steinberger
0c0f1e34cb
refactor: split telegram polling and sdk surfaces
2026-03-26 21:13:16 +00:00
Tak Hoffman
0805078118
fix(ci): format discord provider follow-up
2026-03-26 16:05:25 -05:00
Tak Hoffman
aeee72426d
fix(ci): restore discord provider test seams
2026-03-26 15:59:51 -05:00
Peter Steinberger
37894d0f1a
test: dedupe discord provider proxy overrides
2026-03-26 20:43:02 +00:00
Tak Hoffman
53d3b8e92d
fix(ci): clean up discord harness types
2026-03-26 15:39:20 -05:00
Tak Hoffman
a39e57a1bd
fix(ci): repair discord harness regressions
2026-03-26 15:39:20 -05:00
Peter Steinberger
61d29efc04
test: eliminate remaining clone seams
2026-03-26 20:28:36 +00:00
Peter Steinberger
236e041ef9
test: share discord monitor fixtures
2026-03-26 20:12:21 +00:00
pkuGeo
e035a0d98c
telegram: rebuild transport after stalled polling cycles
2026-03-26 13:11:15 -07:00
Peter Steinberger
2fc017788c
test: reduce remaining clone seams
2026-03-26 20:01:01 +00:00
Tak Hoffman
b20ae13c6b
fix(ci): repair discord message handler tests
2026-03-26 14:49:06 -05:00
Peter Steinberger
be328e6cd1
test: dedupe extension channel fixtures
2026-03-26 19:47:27 +00:00
Peter Steinberger
e8f9d68bec
test: share cli command and discord test helpers
2026-03-26 19:37:14 +00:00
Tak Hoffman
53f15afade
fix(ci): repair discord regression tests
2026-03-26 14:23:57 -05:00
Peter Steinberger
ab4de18982
fix: auto-load bundled plugin capabilities from config refs
2026-03-26 19:15:56 +00:00
Peter Steinberger
8f1716ae5a
refactor: share slack and telegram action helpers
2026-03-26 19:07:35 +00:00
Peter Steinberger
4069844795
refactor: share discord outbound session routing
2026-03-26 18:51:02 +00:00
Peter Steinberger
e774fe1286
refactor: share browser and sandbox helpers
2026-03-26 18:43:57 +00:00
Peter Steinberger
c98addeadd
test: share auto-reply typing helpers
2026-03-26 18:27:13 +00:00
Peter Steinberger
f29c1206cd
test: dedupe extension channel fixtures
2026-03-26 17:59:05 +00:00
Jacob Tomlinson
f8c9863078
bluebubbles: honor reaction mention gating ( #55283 )
2026-03-26 17:42:19 +00:00
Peter Steinberger
7bb95354c4
test: dedupe matrix setup seams
2026-03-26 17:04:23 +00:00
Jacob Tomlinson
c2c136ae95
telegram: throttle repeated webhook auth guesses ( #55142 )
...
* telegram: throttle repeated webhook auth guesses
* telegram: use per-listener webhook rate limits
* config: stabilize doc baseline ordering
2026-03-26 16:19:31 +00:00
Peter Steinberger
c4048aea41
test: share msteams monitor and pi runner fixtures
2026-03-26 15:40:51 +00:00
Peter Steinberger
339cc33cf8
perf: speed up channel test runs
2026-03-26 15:40:01 +00:00
Jacob Tomlinson
0b4d073374
synology-chat: throttle webhook token guesses ( #55141 )
...
* synology-chat: throttle webhook token guesses
* synology-chat: keep valid webhook traffic within configured limits
* docs: refresh generated config baseline
* synology-chat: enforce lockout after repeated token failures
2026-03-26 15:30:06 +00:00
Tak Hoffman
d69ff3c022
fix(whatsapp): unwrap quoted wrapper messages
2026-03-26 10:16:33 -05:00
Peter Steinberger
f56a25a596
test: dedupe foundry auth fixtures
2026-03-26 15:14:03 +00:00
Peter Steinberger
a4a00aa1da
feat: pluginize cli inference backends
2026-03-26 15:11:15 +00:00
Peter Steinberger
5f9f08394a
refactor: share matrix and telegram dedupe helpers
2026-03-26 15:08:45 +00:00
Ayaan Zaidi
4b1c37a152
fix: avoid duplicate ACP Telegram finals ( #55173 )
...
* fix: avoid duplicate final ACP text on telegram
* fix: keep ACP final fallback for non-telegram blocks
* fix: count telegram ACP block replies as success
* fix: recover ACP final fallback after block failures
* fix: settle telegram ACP block delivery before fallback
* test: isolate ACP dispatch mocks under shared workers
* fix: prefer telegram provider for ACP visibility
2026-03-26 20:37:21 +05:30
Peter Steinberger
2ed11a375a
refactor: share web media loader
2026-03-26 14:55:32 +00:00
Jacob Tomlinson
5e08ce36d5
fix(bluebubbles): throttle webhook auth guesses ( #55133 )
...
* fix(bluebubbles): throttle webhook auth guesses
* test(bluebubbles): isolate attachment ssrf config
* test(bluebubbles): hoist attachment mocks
* docs: refresh bluebubbles config baseline
* fix(bluebubbles): trust proxied webhook client IPs
* fix(bluebubbles): honor trusted proxy webhook IPs
* fix(bluebubbles): honor real-ip fallback for webhooks
2026-03-26 14:54:03 +00:00
Peter Steinberger
5c3e018492
refactor: dedupe msteams graph actions
2026-03-26 14:45:53 +00:00
Tyler Yust
2513a8d852
fix(bluebubbles): refactor sendMessageBlueBubbles to use resolveBlueBubblesServerAccount and enhance private network handling in tests
2026-03-26 07:21:48 -07:00
Jacob Tomlinson
81c45976db
Feishu: reject legacy raw card command payloads ( #55130 )
...
* Feishu: reject legacy raw card callbacks
* Feishu: cover legacy text card payloads
* Docs: refresh config baseline
* CI: refresh PR checks
* Feishu: limit legacy card guard scope
2026-03-26 14:17:45 +00:00
Jacob Tomlinson
11ea1f6786
Google Chat: require stable group ids ( #55131 )
...
* Google Chat: require stable group ids
* Google Chat: fail closed on deprecated room keys
2026-03-26 14:15:51 +00:00
Tyler Yust
cc077ef1ef
fix(bluebubbles): enable group participant enrichment by default, add fallback fetch and handle field aliases
2026-03-26 05:45:41 -07:00
Tak Hoffman
b529d13477
test: fix bluebubbles attachment ssrf expectations
2026-03-26 07:25:14 -05:00
Jacob Tomlinson
2383daf5c4
Matrix: gate verification notices on DM access ( #55122 )
2026-03-26 11:59:20 +00:00
Tyler Yust
e43600c9e5
fix(bluebubbles): auto-allow private network for local serverUrl and add allowPrivateNetwork to channel schema
2026-03-26 04:55:46 -07:00
Jacob Tomlinson
c5415a474b
fix(msteams): align feedback invoke authorization ( #55108 )
...
* msteams: align feedback invoke authorization
* msteams: fix feedback allowlist regressions
* msteams: tighten feedback group authorization
2026-03-26 11:51:43 +00:00
Jacob Tomlinson
269282ac69
Telegram: enforce DM auth for callbacks ( #55112 )
2026-03-26 11:42:27 +00:00
Jacob Tomlinson
5e8cb22176
Feishu: validate webhook signatures before parsing ( #55083 )
...
* Feishu: validate webhook signatures before parsing
* Scripts: allow Feishu raw body guard callsite
2026-03-26 10:29:22 +00:00
Nimrod Gutman
a3b85e1583
fix(discord): force fresh gateway reconnects ( #54697 )
...
* fix(discord): force fresh gateway reconnects
* fix(discord): harden forced reconnect teardown
* fix(discord): retry after socket drain timeouts
* fix(discord): guard forced socket teardown
* fix(discord): stop cleanly during reconnect drain
2026-03-26 12:05:00 +02:00
Tyler Yust
4c85fd8569
BlueBubbles: enrich group participants with local Contacts names ( #54984 )
...
* BlueBubbles: enrich group participants with Contacts names
* BlueBubbles: gate contact enrichment behind opt in config
2026-03-26 18:38:37 +09:00
Jacob Tomlinson
f92c92515b
fix(extensions): route fetch calls through fetchWithSsrFGuard ( #53929 )
...
* fix(extensions): route fetch calls through fetchWithSsrFGuard
Replace raw fetch() with fetchWithSsrFGuard in BlueBubbles, Mattermost,
Nextcloud Talk, and Thread Ownership extensions so outbound requests go
through the shared DNS-pinning and network-policy layer.
BlueBubbles: thread allowPrivateNetwork from account config through all
fetch call sites (send, chat, reactions, history, probe, attachments,
multipart). Add _setFetchGuardForTesting hook for test overrides.
Mattermost: add guardedFetchImpl wrapper in createMattermostClient that
buffers the response body before releasing the dispatcher. Handle
null-body status codes (204/304).
Nextcloud Talk: wrap both sendMessage and sendReaction with
fetchWithSsrFGuard and try/finally release.
Thread Ownership: add fetchWithSsrFGuard and ssrfPolicyFromAllowPrivateNetwork
to the plugin SDK surface; use allowPrivateNetwork:true for the
Docker-internal forwarder.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
* fix(extensions): improve null-body handling and test harness cleanup
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
* fix(bluebubbles): default to strict SSRF policy when allowPrivateNetwork is unset
Callers that omit allowPrivateNetwork previously got undefined policy,
which caused blueBubblesFetchWithTimeout to fall through to raw fetch
and bypass the SSRF guard entirely.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
* fix(bluebubbles): thread allowPrivateNetwork through action and monitor call sites
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
* fix(mattermost,nextcloud-talk): add allowPrivateNetwork config for self-hosted/LAN deployments
* fix: regenerate config docs baseline for new allowPrivateNetwork fields
---------
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
2026-03-26 02:04:54 -07:00
