Vincent Koc
faa9faa767
refactor(web-search): share provider clients and config helpers
2026-03-20 09:30:34 -07:00
Peter Steinberger
50ce9ac1c6
refactor: privatize bundled sdk facades
2026-03-20 15:56:14 +00:00
Peter Steinberger
f6948ce405
refactor: shrink sdk helper surfaces
2026-03-20 15:43:14 +00:00
sudie-codes
06845a1974
fix(msteams): resolve Graph API chat ID for DM file uploads ( #49585 )
...
Fixes #35822 — Bot Framework conversation.id format is incompatible with
Graph API /chats/{chatId}. Added resolveGraphChatId() to look up the
Graph-native chat ID via GET /me/chats, cached in the conversation store.
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
2026-03-20 10:08:26 -05:00
sudie-codes
7c3af3726f
msteams: extend MSTeamsAdapter and MSTeamsActivityHandler types; implement self() ( #49929 )
...
- Add updateActivity/deleteActivity to MSTeamsAdapter
- Add onReactionsAdded/onReactionsRemoved to MSTeamsActivityHandler
- Implement directory self() to return bot identity from appId credential
- Add tests for self() in channel.directory.test.ts
2026-03-20 10:08:23 -05:00
sudie-codes
897cda7d99
msteams: fix sender allowlist bypass when route allowlist is configured (GHSA-g7cr-9h7q-4qxq) ( #49582 )
...
When a route-level (teams/channel) allowlist was configured but the sender
allowlist (allowFrom/groupAllowFrom) was empty, resolveSenderScopedGroupPolicy
would downgrade the effective group policy from "allowlist" to "open", allowing
any Teams user to interact with the bot.
The fix: when channelGate.allowlistConfigured is true and effectiveGroupAllowFrom
is empty, preserve the configured groupPolicy ("allowlist") rather than letting
it be downgraded to "open". This ensures an empty sender allowlist with an active
route allowlist means deny-all rather than allow-all.
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
2026-03-20 10:08:19 -05:00
Vincent Koc
df536c3248
test(signal): harden tool-result infra-runtime mock
2026-03-20 01:33:16 -07:00
Vincent Koc
f1e012e0fc
fix(telegram): serialize thread binding persists
2026-03-20 00:30:11 -07:00
Vincent Koc
a562fb5550
refactor(web-search): share scoped provider config plumbing
2026-03-19 23:52:53 -07:00
Vincent Koc
6c7526f8a0
fix(web-search): share unsupported filter handling
2026-03-19 23:41:02 -07:00
Vincent Koc
36a59d5c79
fix(discord): drop stale carbon deploy option
2026-03-19 23:30:48 -07:00
Shakker
f2849c2417
fix(feishu): stabilize lifecycle replay tests
2026-03-20 06:13:27 +00:00
Shakker
8d805a02fd
fix(zalouser): decouple tests from zca-js runtime
2026-03-20 06:13:27 +00:00
Lakshya Agarwal
b36e456b09
feat: add Tavily as a bundled web search plugin with search and extract tools ( #49200 )
...
Merged via squash.
Prepared head SHA: ece9226e88
Co-authored-by: lakshyaag-tavily <266572148+lakshyaag-tavily@users.noreply.github.com >
Co-authored-by: gumadeiras <5599352+gumadeiras@users.noreply.github.com >
Reviewed-by: @gumadeiras
2026-03-20 01:06:26 -04:00
ernestodeoliveira
80110c550f
fix(telegram): warn when setup leaves dmPolicy as pairing without allowFrom ( #50710 )
...
* fix(telegram): warn when setup leaves dmPolicy as pairing without allowFrom
* fix(telegram): scope setup warning to account config
* fix(telegram): quote setup allowFrom example
* fix: warn on insecure Telegram setup defaults (#50710 ) (thanks @ernestodeoliveira)
---------
Co-authored-by: Claude Code <claude-code@openclaw.ai >
Co-authored-by: Ayaan Zaidi <hi@obviy.us >
2026-03-20 09:29:33 +05:30
Shakker
4aef83016f
fix(matrix): mock configured bot ids in monitor tests
2026-03-20 03:50:06 +00:00
Gustavo Madeira Santana
f62be0ddcf
Matrix: guard private-network homeserver access
2026-03-19 23:24:50 -04:00
Gustavo Madeira Santana
ab97cc3f11
Matrix: add allowBots bot-to-bot policy
2026-03-19 23:24:50 -04:00
Jinhao Dong
4f00b3b534
feat(xiaomi): add MiMo V2 Pro and MiMo V2 Omni models, switch to OpenAI completions API ( #49214 )
...
Merged via squash.
Prepared head SHA: 6b672f36cf
Co-authored-by: DJjjjhao <50042705+DJjjjhao@users.noreply.github.com >
Co-authored-by: grp06 <1573959+grp06@users.noreply.github.com >
Reviewed-by: @grp06
2026-03-19 19:26:47 -07:00
Harold Hunt
f1ce679929
Discord: reconcile native commands without restart churn ( #46597 )
...
Merged via squash.
Prepared head SHA: 37090daad4
Co-authored-by: huntharo <5617868+huntharo@users.noreply.github.com >
Reviewed-by: @huntharo
2026-03-19 22:23:21 -04:00
Harold Hunt
65594f972c
Gateway: unify plugin interactive callback state ( #50722 )
...
Merged via squash.
Prepared head SHA: 7a2740b18a
Co-authored-by: huntharo <5617868+huntharo@users.noreply.github.com >
Co-authored-by: huntharo <5617868+huntharo@users.noreply.github.com >
Reviewed-by: @huntharo
2026-03-19 22:09:38 -04:00
Gustavo Madeira Santana
a953cb5209
Matrix: fix runtime API duplicate exports
2026-03-19 20:53:35 -04:00
Vincent Koc
aa172f2169
fix(matrix): keep runtime api import-safe
2026-03-19 16:39:27 -07:00
Josh Avant
8e132aed6e
Hardening: refresh stale device pairing requests and pending metadata ( #50695 )
...
* Docs: clarify device pairing supersede behavior
* Device pairing: supersede pending requests on auth changes
2026-03-19 18:26:06 -05:00
Vincent Koc
14eb49c18a
test(feishu): fix lifecycle mock typing
2026-03-19 15:26:14 -07:00
Vincent Koc
ac850e815b
fix(ci): replace tlon git api dependency
2026-03-19 15:25:29 -07:00
Tak Hoffman
2884ac13b2
test: add Zalo pairing lifecycle regression
2026-03-19 17:13:38 -05:00
Tak Hoffman
da8fb70525
test: fix Feishu lifecycle type checks
2026-03-19 16:54:39 -05:00
Tak Hoffman
73e08775d7
test: add voice-call hangup-once lifecycle regression
2026-03-19 16:50:36 -05:00
Tak Hoffman
566e4cf77b
test: add Zalo reply-once lifecycle regression
2026-03-19 16:50:36 -05:00
Vincent Koc
a54d3dc679
test(feishu): fix bot-menu binding mock typing
2026-03-19 14:49:01 -07:00
Tak Hoffman
628b55a825
test: add Feishu ACP failure lifecycle regression
2026-03-19 16:33:04 -05:00
Tak Hoffman
c7cebd608b
test: add Feishu broadcast lifecycle regression
2026-03-19 16:33:03 -05:00
Tak Hoffman
7d50e7fa85
test: add Feishu card-action lifecycle regression
2026-03-19 16:33:03 -05:00
Vincent Koc
3c806a9692
fix(ci): stabilize bundle hooks and mcp path seams
2026-03-19 14:26:52 -07:00
Vincent Koc
83a267e2f3
fix(ci): reset deep test runtime state
2026-03-19 14:23:32 -07:00
Tak Hoffman
0e825ece05
test: add Feishu bot-menu lifecycle regression
2026-03-19 16:16:46 -05:00
Tak Hoffman
ca757b6b77
test: add Feishu reply-once lifecycle regression
2026-03-19 16:04:53 -05:00
Vincent Koc
3b79494cbf
fix(runtime): lazy-load setup shims and align contracts
2026-03-19 13:33:32 -07:00
Vincent Koc
7bbd01379e
fix(deps): use https git sources for extension installs
2026-03-19 13:33:32 -07:00
Vincent Koc
ca74eb37da
fix(extensions): repair matrix contracts and test boundaries
2026-03-19 13:33:32 -07:00
Vincent Koc
7fb142d115
test(whatsapp): override config-runtime mock exports safely
2026-03-19 09:42:13 -07:00
Gustavo Madeira Santana
ff6541f69d
Matrix: fix Jiti runtime API boundary
2026-03-19 11:40:44 -04:00
Gustavo Madeira Santana
12ad809e79
Matrix: fix runtime encryption loading
2026-03-19 11:08:17 -04:00
Gustavo Madeira Santana
8268c28053
Matrix: isolate thread binding manager stateDir reuse
2026-03-19 11:08:16 -04:00
Vincent Koc
44cd4fb55f
fix(ci): repair main type and boundary regressions
2026-03-19 08:00:33 -07:00
Gustavo Madeira Santana
0c4fdf1284
Format: apply import ordering cleanup
2026-03-19 10:33:16 -04:00
Gustavo Madeira Santana
f4f0b171d3
Matrix: isolate credential write runtime
2026-03-19 10:33:16 -04:00
Liu Ricardo
8c01347989
test(contracts): cover matrix session binding adapters ( #50369 )
...
Merged via squash.
Prepared head SHA: 25412dbc2c
Co-authored-by: ChroniCat <220139611+ChroniCat@users.noreply.github.com >
Co-authored-by: gumadeiras <5599352+gumadeiras@users.noreply.github.com >
Reviewed-by: @gumadeiras
2026-03-19 10:26:37 -04:00
Vincent Koc
79d7fdce93
test(telegram): inject media loader in delivery replies
2026-03-19 06:30:59 -07:00