Gustavo Madeira Santana
2fc9fc7892
QA: harden runner metadata and install hints
...
Move optional QA runner install hints onto a generated metadata catalog so the
host no longer needs a Matrix-specific fallback list for missing plugins.
This also tightens the runner contract by rejecting runtime-only commands that
are not declared in manifest metadata, and adds an installed-plugin smoke test
for the generic QA runner loader path.
2026-04-14 16:25:16 -04:00
Gustavo Madeira Santana
2a20f8261f
QA: add generic runner discovery seam
...
Teach qa-lab to discover transport runners from manifest metadata plus a
shared runtime facade instead of hardcoding qa-matrix. The host now mounts
activated runners generically, shows enable guidance for blocked plugins,
and keeps the explicit install hint for missing optional runners.
This also promotes the runner contract into the public SDK, replaces the
matrix-specific host seam, and documents the new manifest/runtime exports so
future QA transports can reuse the same path.
2026-04-14 16:25:15 -04:00
Gustavo Madeira Santana
d215f157c2
QA: split Matrix runner into optional plugin
2026-04-14 16:25:14 -04:00
Vincent Koc
a848ddaa7e
fix(deps): patch follow-redirects vulnerability
2026-04-14 19:00:55 +01:00
Vincent Koc
66701d5a1e
fix(plugin-sdk): share opencode catalog auth helper
2026-04-14 16:48:02 +01:00
Frank Yang
d86527d8c6
fix(whatsapp): harden Baileys media upload hotfix ( #65966 )
...
Merged via squash.
Prepared head SHA: b5db59b8fe
Co-authored-by: frankekn <4488090+frankekn@users.noreply.github.com >
Co-authored-by: frankekn <4488090+frankekn@users.noreply.github.com >
Reviewed-by: @frankekn
2026-04-14 21:34:23 +08:00
Peter Steinberger
62f9cf53c9
chore: prepare 2026.4.14 release
2026-04-14 13:42:03 +01:00
Vincent Koc
381a8e860a
fix(discord): return native status replies directly ( #66434 )
2026-04-14 09:55:02 +01:00
Peter Steinberger
3deea5a426
fix: mirror baileys root dependency
2026-04-13 20:49:39 -07:00
Peter Steinberger
67ffb6f6c2
fix: keep baileys plugin-local
2026-04-13 20:49:39 -07:00
Peter Steinberger
224cbd9ff6
chore(release): prepare 2026.4.14 beta
2026-04-14 03:06:46 +01:00
Vincent Koc
9376f52419
fix(ci): mirror whatsapp runtime dependency
2026-04-14 00:01:44 +01:00
Vincent Koc
8ab89989c2
fix(ci): restore plugin-local whatsapp deps
2026-04-13 23:26:25 +01:00
Vincent Koc
36a58e714c
fix(ci): mirror whatsapp runtime dependency
2026-04-13 22:37:25 +01:00
Vincent Koc
21ca387eda
fix(ci): verify bundled plugin runtime deps
2026-04-13 11:09:13 +01:00
Peter Steinberger
ee601ae993
fix(matrix): mirror staged runtime dependencies
2026-04-13 10:32:22 +01:00
Vincent Koc
98c2a38bc3
fix(matrix): mirror runtime deps for docker builds
...
(cherry picked from commit 1c843552b7 )
2026-04-13 10:24:18 +01:00
Peter Steinberger
72e56097ec
chore(release): prepare 2026.4.12
2026-04-13 09:49:01 +01:00
Rugved Somwanshi
0cfb83edfa
feat: LM Studio Integration ( #53248 )
...
* Feat: LM Studio Integration
* Format
* Support usage in streaming true
Fix token count
* Add custom window check
* Drop max tokens fallback
* tweak docs
Update generated
* Avoid error if stale header does not resolve
* Fix test
* Fix test
* Fix rebase issues
Trim code
* Fix tests
Drop keyless
Fixes
* Fix linter issues in tests
* Update generated artifacts
* Do not have fatal header resoltuion for discovery
* Do the same for API key as well
* fix: honor lmstudio preload runtime auth
* fix: clear stale lmstudio header auth
* fix: lazy-load lmstudio runtime facade
* fix: preserve lmstudio shared synthetic auth
* fix: clear stale lmstudio header auth in discovery
* fix: prefer lmstudio header auth for discovery
* fix: honor lmstudio header auth in warmup paths
* fix: clear stale lmstudio profile auth
* fix: ignore lmstudio env auth on header migration
* fix: use local lmstudio setup seam
* fix: resolve lmstudio rebase fallout
---------
Co-authored-by: Frank Yang <frank.ekn@gmail.com >
2026-04-13 15:22:44 +08:00
Peter Steinberger
b42937908d
chore(release): prepare 2026.4.12-beta.1
2026-04-13 00:20:52 +01:00
Peter Steinberger
cfd5f9e4e3
test(e2e): repair OpenShell prerelease smoke
2026-04-13 00:20:51 +01:00
Peter Steinberger
910a0e40d2
chore: update dependencies
2026-04-12 19:19:06 +01:00
Peter Steinberger
a8e140e395
chore: bump version to 2026.4.12
2026-04-12 10:37:18 -07:00
Vincent Koc
5b6667ef97
fix(ci): gate static import cycles with madge
2026-04-12 12:41:18 +01:00
Vincent Koc
38b72a6ae0
fix(check): include cycle guards in default gate
2026-04-12 08:38:41 +01:00
Vincent Koc
7ba3bb3399
fix(ci): guard static import SCCs
2026-04-12 08:25:29 +01:00
Vincent Koc
74a9d99d6a
fix(test): route serial runs through scoped vitest lanes
2026-04-12 04:45:30 +01:00
Peter Steinberger
769908ec3f
chore(release): prepare 2026.4.11
2026-04-12 01:05:56 +01:00
Peter Steinberger
65267c14d4
chore(release): refresh generated baselines
2026-04-12 00:22:32 +01:00
Tak Hoffman
958c34e82c
feat(qa-lab): Add proxy capture stack and QA Lab inspector ( #64895 )
...
* Add proxy capture core and CLI
* Expand transport capture coverage
* Add QA Lab capture backend
* Refine QA Lab capture UI
* Fix proxy capture review feedback
* Fix proxy run cleanup and TTS capture
* Fix proxy capture transport follow-ups
* Fix debug proxy CONNECT target parsing
* Harden QA Lab asset path containment
2026-04-11 12:34:57 -05:00
Peter Steinberger
788c37a6c2
chore(release): prepare 2026.4.11-beta.1
2026-04-11 16:10:13 +01:00
Peter Steinberger
cd89892b1f
fix(release): keep private QA bundles out of npm pack
2026-04-11 13:13:11 +01:00
Vincent Koc
636fe1c2db
fix(qa): ship scenario pack and isolate completion cache
2026-04-11 12:53:56 +01:00
Peter Steinberger
1ab6e5dbf0
chore(release): bump version to 2026.4.11
2026-04-11 04:51:17 +01:00
Peter Steinberger
69244f837f
test: speed provider retry imports
2026-04-11 02:37:51 +01:00
Peter Steinberger
e892def77c
chore: bump basic-ftp override
2026-04-10 21:44:16 +01:00
Peter Steinberger
bfc0889776
docs: document Codex harness plugin workflow
2026-04-10 21:22:16 +01:00
Peter Steinberger
59925c1a74
chore: update dependencies and oxc tooling
2026-04-10 19:28:42 +01:00
Peter Steinberger
8127c6cc15
build(deps): update workspace dependencies
2026-04-10 19:17:39 +01:00
Michael Appel
9f97ad857a
fix(security): pin axios to 1.15.0 and add dependency denylist for plugin installs [AI-assisted] ( #63891 )
...
* fix: address issue
* fix: address review feedback
* fix: address PR review feedback
* fix: address PR review feedback
* fix: address PR review feedback
* fix: address PR review feedback
* fix: address PR review feedback
* Plugins: fix install security CI regressions
* Plugins: make manifest traversal linear
* Plugins: bound manifest security traversal
* Plugins: block denied node_modules package dirs
* Plugins: match node_modules case-insensitively
* Plugins: block denied package symlink paths
* Tests: normalize blocked symlink assertion
* Plugins: fail closed on unreadable denied paths
* Plugins: block denied node_modules file aliases
* Plugins: inspect node_modules symlink targets
* Plugins: preserve symlink target package paths
* fix: address PR review feedback
* chore(changelog): add axios pin and dependency denylist entry
---------
Co-authored-by: Devin Robison <drobison@nvidia.com >
2026-04-10 11:20:05 -06:00
Peter Steinberger
c077af987f
perf: add narrow inbound roots sdk surface
2026-04-10 17:34:41 +01:00
Peter Steinberger
2ccb5cff22
test: move Vitest configs under test
2026-04-10 13:44:51 +01:00
Peter Steinberger
0b0c062e97
fix: avoid Claude CLI subscription prompt classifier
2026-04-10 10:52:35 +01:00
Shadow
d5b25f81cf
update carbon
2026-04-10 01:53:36 -05:00
Altay
004bab53fa
fix(ci): repair protocol drift and audit failures ( #63917 )
...
* CI: fix protocol drift and audit failures
* CI: narrow axios release-age exception
* CI: drop ineffective feishu override
* test: fix workspace-root guard mock typing
2026-04-09 22:07:51 +01:00
Peter Steinberger
719f06510c
chore: bump version to 2026.4.10
2026-04-09 03:56:22 +01:00
Peter Steinberger
d41188b65e
ci: add runtime import cycle guard
2026-04-09 03:56:22 +01:00
Peter Steinberger
0512059dd4
chore: prepare 2026.4.9 stable release
2026-04-09 03:24:45 +01:00
Peter Steinberger
7810ddc220
chore: prepare 2026.4.9-beta.1 release
2026-04-09 02:13:31 +01:00
Mason Huang
aa15de8fdc
plugin-sdk: split command status surface
2026-04-09 01:35:15 +01:00