Commit Graph

1577 Commits

Author SHA1 Message Date
Agustin Rivera
dafcaf9d69 fix(browser): harden browser control override loading (#62663)
* fix(browser): harden browser control overrides

* fix(lint): prepare boundary artifacts for extension oxlint

* docs(changelog): add browser override hardening entry

* fix(lint): avoid duplicate boundary prep

---------

Co-authored-by: Devin Robison <drobison@nvidia.com>
Co-authored-by: Devin Robison <drobison00@users.noreply.github.com>
2026-04-08 13:24:47 -06:00
Peter Steinberger
9e4f478f86 feat(plugins): support provider auth aliases 2026-04-08 19:03:04 +01:00
Pavan Kumar Gondhi
2d97eae53e fix(plugins): prevent untrusted workspace plugins from hijacking bundled provider auth choices [AI] (#62368)
* fix: address issue

* fix: address review feedback

* docs(changelog): add onboarding auth-choice guard entry

* fix: address PR review feedback

* fix: address PR review feedback

* fix: address PR review feedback

* fix: address PR review feedback

* fix: address PR review feedback

* fix: address PR review feedback

* fix: address PR review feedback

* fix: address PR review feedback

---------

Co-authored-by: Devin Robison <drobison@nvidia.com>
2026-04-08 23:08:14 +05:30
Peter Steinberger
7f5d129a37 fix: keep runtime task test harness behind task seams 2026-04-08 16:53:46 +01:00
Peter Steinberger
34f73abfd3 refactor: dedupe plugin metadata test helpers 2026-04-08 15:58:46 +01:00
Peter Steinberger
e98dc17866 refactor: dedupe plugin test harnesses 2026-04-08 15:58:45 +01:00
Peter Steinberger
49f3ede504 refactor: dedupe shared helper branches 2026-04-08 15:58:45 +01:00
Peter Steinberger
edf6b490a6 fix: harden bundled plugin dependency release checks 2026-04-08 15:15:44 +01:00
Peter Steinberger
557559cd42 test: keep bundled metadata sidecar scan inventory-only 2026-04-08 15:12:33 +01:00
Peter Steinberger
e915ef7a25 test: keep public artifact coverage on cheap boundaries 2026-04-08 15:05:37 +01:00
Peter Steinberger
841a1566ef test: keep web provider artifact test in boundary 2026-04-08 14:37:19 +01:00
Peter Steinberger
e65d6ebb63 test: fix full suite CI test isolation 2026-04-08 14:29:19 +01:00
Peter Steinberger
307979a4c7 test: restore manifest-only web provider coverage 2026-04-08 14:22:02 +01:00
Peter Steinberger
37473142d8 test: keep web provider artifact test in boundary 2026-04-08 14:11:35 +01:00
Peter Steinberger
5aa8579dd7 test: keep provider policy artifact coverage narrow 2026-04-08 14:00:47 +01:00
Peter Steinberger
a5515db1e8 test: keep web provider artifact coverage manifest-only 2026-04-08 13:58:27 +01:00
Peter Steinberger
5dbf607f73 test: guard loader fixtures against broad sdk imports 2026-04-08 13:28:32 +01:00
Peter Steinberger
640d39d482 test: inline cli metadata channel fixture 2026-04-08 12:58:48 +01:00
Peter Steinberger
4e41cf7a6e plugins: read contract inventory from manifests 2026-04-08 12:58:42 +01:00
Peter Steinberger
2b6b627fd1 test: stabilize plugin boundary invariants 2026-04-08 12:13:41 +01:00
scoootscooob
d52d5ad6ff release: mirror bundled channel deps at root (#63065)
Merged via squash.

Prepared head SHA: ac26799a54
Co-authored-by: scoootscooob <167050519+scoootscooob@users.noreply.github.com>
Co-authored-by: scoootscooob <167050519+scoootscooob@users.noreply.github.com>
Reviewed-by: @scoootscooob
2026-04-08 04:00:17 -07:00
Peter Steinberger
4c65fa8eae fix(test): refresh plugin-sdk package boundary exports 2026-04-08 10:29:37 +01:00
Vincent Koc
208c49841c perf(plugins): trim explicit web provider artifact imports 2026-04-08 10:28:09 +01:00
Vincent Koc
b2076f0a3f perf(plugins): prefer require for source public artifacts 2026-04-08 10:24:07 +01:00
Peter Steinberger
9b0f7e0e82 fix: keep bundled dir test argv mutable 2026-04-08 09:58:22 +01:00
Peter Steinberger
95e397a266 refactor: dedupe repeated test helpers 2026-04-08 09:58:22 +01:00
Vincent Koc
092c56ce46 fix(plugins): prefer source bundled tree in tsx runs 2026-04-08 09:48:45 +01:00
Peter Steinberger
a5b54e7c01 test: keep provider auth onboarding tests off runtime auth 2026-04-08 09:44:17 +01:00
Vincent Koc
be530f085d refactor(plugin-sdk): share tool payload extraction 2026-04-08 09:07:28 +01:00
Vincent Koc
a04b9a27fb refactor(plugins): reuse canonical media contract registries 2026-04-08 09:07:28 +01:00
Vincent Koc
f38035a7b6 refactor(plugin-sdk): share web-search contract fields 2026-04-08 09:07:28 +01:00
Vincent Koc
2e1ec9653c refactor(plugins): reuse interactive registry state 2026-04-08 09:07:28 +01:00
Vincent Koc
3574aedd68 test(plugins): refresh telegram runtime api guardrail 2026-04-08 09:07:05 +01:00
Vincent Koc
490c9c80ef perf(plugin-sdk): split web search config contract 2026-04-08 09:03:07 +01:00
Peter Steinberger
8cbd60d203 chore: prepare 2026.4.9 release 2026-04-08 08:02:53 +01:00
Peter Steinberger
dce3abaef7 fix: align Z.AI endpoint detection with GLM-5.1 default (#61998) (thanks @serg0x) 2026-04-08 04:38:39 +01:00
Peter Steinberger
4f8471617a chore: prepare 2026.4.8 2026-04-08 04:21:51 +01:00
ruclaw7
81969c7a91 fix: prefer codex gpt-5.4 runtime metadata (#62694) (thanks @ruclaw7)
* Agents: prefer runtime codex gpt-5.4 metadata

* Agents: move codex gpt-5.4 override into provider hook

* fix: repair codex runtime preference hooks

* fix: use workspace dir for codex runtime preference

* test: cover codex workspace dir hook

* fix: prefer codex gpt-5.4 runtime metadata (#62694) (thanks @ruclaw7)

---------

Co-authored-by: Rudi Cilibrasi <cilibrar@gmail.com>
Co-authored-by: Rudi Cilibrasi <rudi@metagood.com>
Co-authored-by: Ayaan Zaidi <hi@obviy.us>
2026-04-08 08:16:23 +05:30
Josh Lehman
b8f12d99b2 fix: expose runtime-ready provider auth to plugins (#62753) 2026-04-07 19:28:36 -07:00
Peter Steinberger
0e91c25c0b chore: prepare 2026.4.7 2026-04-08 02:14:59 +01:00
Peter Steinberger
02d41b98c0 test: speed up plugin registry loader tests 2026-04-08 01:44:13 +01:00
Peter Steinberger
a96a1aa670 refactor: dedupe plugin auto-reply trimmed readers 2026-04-08 01:36:39 +01:00
Peter Steinberger
4cfa4b95c3 refactor: dedupe plugin trimmed readers 2026-04-08 01:36:38 +01:00
Peter Steinberger
7999767a0f refactor: dedupe core trimmed string readers 2026-04-07 22:57:52 +01:00
Gustavo Madeira Santana
ecc9a65f34 Tests: align approval gateway seams 2026-04-07 16:06:02 -04:00
Peter Steinberger
abf81ff1ed refactor: dedupe plugin lowercase helpers 2026-04-07 20:57:04 +01:00
Peter Steinberger
744d176744 test: speed up plugin cli tests 2026-04-07 19:59:46 +01:00
Gustavo Madeira Santana
d78512b09d Refactor: centralize native approval lifecycle assembly (#62135)
Merged via squash.

Prepared head SHA: b7c20a7398
Co-authored-by: gumadeiras <5599352+gumadeiras@users.noreply.github.com>
Co-authored-by: gumadeiras <5599352+gumadeiras@users.noreply.github.com>
Reviewed-by: @gumadeiras
2026-04-07 14:40:26 -04:00
DhruvBhatia0
12331f0463 feat: add pluggable compaction provider registry (#56224)
Merged via squash.

Prepared head SHA: 0cc9cf3f30
Co-authored-by: DhruvBhatia0 <69252327+DhruvBhatia0@users.noreply.github.com>
Co-authored-by: jalehman <550978+jalehman@users.noreply.github.com>
Reviewed-by: @jalehman
2026-04-07 10:55:34 -07:00
mappel-nv
c6b5731c5d Plugins: verify ClawHub archive integrity (#60517)
* docs(changelog): add clawhub archive integrity entry

---------

Co-authored-by: Devin Robison <drobison@nvidia.com>
2026-04-07 10:55:22 -06:00