Commit Graph

967 Commits

Author SHA1 Message Date
Gustavo Madeira Santana
2fc9fc7892 QA: harden runner metadata and install hints
Move optional QA runner install hints onto a generated metadata catalog so the
host no longer needs a Matrix-specific fallback list for missing plugins.

This also tightens the runner contract by rejecting runtime-only commands that
are not declared in manifest metadata, and adds an installed-plugin smoke test
for the generic QA runner loader path.
2026-04-14 16:25:16 -04:00
Gustavo Madeira Santana
2a20f8261f QA: add generic runner discovery seam
Teach qa-lab to discover transport runners from manifest metadata plus a
shared runtime facade instead of hardcoding qa-matrix. The host now mounts
activated runners generically, shows enable guidance for blocked plugins,
and keeps the explicit install hint for missing optional runners.

This also promotes the runner contract into the public SDK, replaces the
matrix-specific host seam, and documents the new manifest/runtime exports so
future QA transports can reuse the same path.
2026-04-14 16:25:15 -04:00
Gustavo Madeira Santana
d215f157c2 QA: split Matrix runner into optional plugin 2026-04-14 16:25:14 -04:00
Vincent Koc
a848ddaa7e fix(deps): patch follow-redirects vulnerability 2026-04-14 19:00:55 +01:00
Vincent Koc
66701d5a1e fix(plugin-sdk): share opencode catalog auth helper 2026-04-14 16:48:02 +01:00
Frank Yang
d86527d8c6 fix(whatsapp): harden Baileys media upload hotfix (#65966)
Merged via squash.

Prepared head SHA: b5db59b8fe
Co-authored-by: frankekn <4488090+frankekn@users.noreply.github.com>
Co-authored-by: frankekn <4488090+frankekn@users.noreply.github.com>
Reviewed-by: @frankekn
2026-04-14 21:34:23 +08:00
Peter Steinberger
62f9cf53c9 chore: prepare 2026.4.14 release 2026-04-14 13:42:03 +01:00
Vincent Koc
381a8e860a fix(discord): return native status replies directly (#66434) 2026-04-14 09:55:02 +01:00
Peter Steinberger
3deea5a426 fix: mirror baileys root dependency 2026-04-13 20:49:39 -07:00
Peter Steinberger
67ffb6f6c2 fix: keep baileys plugin-local 2026-04-13 20:49:39 -07:00
Peter Steinberger
224cbd9ff6 chore(release): prepare 2026.4.14 beta 2026-04-14 03:06:46 +01:00
Vincent Koc
9376f52419 fix(ci): mirror whatsapp runtime dependency 2026-04-14 00:01:44 +01:00
Vincent Koc
8ab89989c2 fix(ci): restore plugin-local whatsapp deps 2026-04-13 23:26:25 +01:00
Vincent Koc
36a58e714c fix(ci): mirror whatsapp runtime dependency 2026-04-13 22:37:25 +01:00
Vincent Koc
21ca387eda fix(ci): verify bundled plugin runtime deps 2026-04-13 11:09:13 +01:00
Peter Steinberger
ee601ae993 fix(matrix): mirror staged runtime dependencies 2026-04-13 10:32:22 +01:00
Vincent Koc
98c2a38bc3 fix(matrix): mirror runtime deps for docker builds
(cherry picked from commit 1c843552b7)
2026-04-13 10:24:18 +01:00
Peter Steinberger
72e56097ec chore(release): prepare 2026.4.12 2026-04-13 09:49:01 +01:00
Rugved Somwanshi
0cfb83edfa feat: LM Studio Integration (#53248)
* Feat: LM Studio Integration

* Format

* Support usage in streaming true

Fix token count

* Add custom window check

* Drop max tokens fallback

* tweak docs

Update generated

* Avoid error if stale header does not resolve

* Fix test

* Fix test

* Fix rebase issues

Trim code

* Fix tests

Drop keyless

Fixes

* Fix linter issues in tests

* Update generated artifacts

* Do not have fatal header resoltuion for discovery

* Do the same for API key as well

* fix: honor lmstudio preload runtime auth

* fix: clear stale lmstudio header auth

* fix: lazy-load lmstudio runtime facade

* fix: preserve lmstudio shared synthetic auth

* fix: clear stale lmstudio header auth in discovery

* fix: prefer lmstudio header auth for discovery

* fix: honor lmstudio header auth in warmup paths

* fix: clear stale lmstudio profile auth

* fix: ignore lmstudio env auth on header migration

* fix: use local lmstudio setup seam

* fix: resolve lmstudio rebase fallout

---------

Co-authored-by: Frank Yang <frank.ekn@gmail.com>
2026-04-13 15:22:44 +08:00
Peter Steinberger
b42937908d chore(release): prepare 2026.4.12-beta.1 2026-04-13 00:20:52 +01:00
Peter Steinberger
cfd5f9e4e3 test(e2e): repair OpenShell prerelease smoke 2026-04-13 00:20:51 +01:00
Peter Steinberger
910a0e40d2 chore: update dependencies 2026-04-12 19:19:06 +01:00
Peter Steinberger
a8e140e395 chore: bump version to 2026.4.12 2026-04-12 10:37:18 -07:00
Vincent Koc
5b6667ef97 fix(ci): gate static import cycles with madge 2026-04-12 12:41:18 +01:00
Vincent Koc
38b72a6ae0 fix(check): include cycle guards in default gate 2026-04-12 08:38:41 +01:00
Vincent Koc
7ba3bb3399 fix(ci): guard static import SCCs 2026-04-12 08:25:29 +01:00
Vincent Koc
74a9d99d6a fix(test): route serial runs through scoped vitest lanes 2026-04-12 04:45:30 +01:00
Peter Steinberger
769908ec3f chore(release): prepare 2026.4.11 2026-04-12 01:05:56 +01:00
Peter Steinberger
65267c14d4 chore(release): refresh generated baselines 2026-04-12 00:22:32 +01:00
Tak Hoffman
958c34e82c feat(qa-lab): Add proxy capture stack and QA Lab inspector (#64895)
* Add proxy capture core and CLI

* Expand transport capture coverage

* Add QA Lab capture backend

* Refine QA Lab capture UI

* Fix proxy capture review feedback

* Fix proxy run cleanup and TTS capture

* Fix proxy capture transport follow-ups

* Fix debug proxy CONNECT target parsing

* Harden QA Lab asset path containment
2026-04-11 12:34:57 -05:00
Peter Steinberger
788c37a6c2 chore(release): prepare 2026.4.11-beta.1 2026-04-11 16:10:13 +01:00
Peter Steinberger
cd89892b1f fix(release): keep private QA bundles out of npm pack 2026-04-11 13:13:11 +01:00
Vincent Koc
636fe1c2db fix(qa): ship scenario pack and isolate completion cache 2026-04-11 12:53:56 +01:00
Peter Steinberger
1ab6e5dbf0 chore(release): bump version to 2026.4.11 2026-04-11 04:51:17 +01:00
Peter Steinberger
69244f837f test: speed provider retry imports 2026-04-11 02:37:51 +01:00
Peter Steinberger
e892def77c chore: bump basic-ftp override 2026-04-10 21:44:16 +01:00
Peter Steinberger
bfc0889776 docs: document Codex harness plugin workflow 2026-04-10 21:22:16 +01:00
Peter Steinberger
59925c1a74 chore: update dependencies and oxc tooling 2026-04-10 19:28:42 +01:00
Peter Steinberger
8127c6cc15 build(deps): update workspace dependencies 2026-04-10 19:17:39 +01:00
Michael Appel
9f97ad857a fix(security): pin axios to 1.15.0 and add dependency denylist for plugin installs [AI-assisted] (#63891)
* fix: address issue

* fix: address review feedback

* fix: address PR review feedback

* fix: address PR review feedback

* fix: address PR review feedback

* fix: address PR review feedback

* fix: address PR review feedback

* Plugins: fix install security CI regressions

* Plugins: make manifest traversal linear

* Plugins: bound manifest security traversal

* Plugins: block denied node_modules package dirs

* Plugins: match node_modules case-insensitively

* Plugins: block denied package symlink paths

* Tests: normalize blocked symlink assertion

* Plugins: fail closed on unreadable denied paths

* Plugins: block denied node_modules file aliases

* Plugins: inspect node_modules symlink targets

* Plugins: preserve symlink target package paths

* fix: address PR review feedback

* chore(changelog): add axios pin and dependency denylist entry

---------

Co-authored-by: Devin Robison <drobison@nvidia.com>
2026-04-10 11:20:05 -06:00
Peter Steinberger
c077af987f perf: add narrow inbound roots sdk surface 2026-04-10 17:34:41 +01:00
Peter Steinberger
2ccb5cff22 test: move Vitest configs under test 2026-04-10 13:44:51 +01:00
Peter Steinberger
0b0c062e97 fix: avoid Claude CLI subscription prompt classifier 2026-04-10 10:52:35 +01:00
Shadow
d5b25f81cf update carbon 2026-04-10 01:53:36 -05:00
Altay
004bab53fa fix(ci): repair protocol drift and audit failures (#63917)
* CI: fix protocol drift and audit failures

* CI: narrow axios release-age exception

* CI: drop ineffective feishu override

* test: fix workspace-root guard mock typing
2026-04-09 22:07:51 +01:00
Peter Steinberger
719f06510c chore: bump version to 2026.4.10 2026-04-09 03:56:22 +01:00
Peter Steinberger
d41188b65e ci: add runtime import cycle guard 2026-04-09 03:56:22 +01:00
Peter Steinberger
0512059dd4 chore: prepare 2026.4.9 stable release 2026-04-09 03:24:45 +01:00
Peter Steinberger
7810ddc220 chore: prepare 2026.4.9-beta.1 release 2026-04-09 02:13:31 +01:00
Mason Huang
aa15de8fdc plugin-sdk: split command status surface 2026-04-09 01:35:15 +01:00