Vincent Koc
acbf57b448
revert(acp): remove Coven bridge
...
Revert the bundled Coven ACP bridge extension, its ClawHub publishing wiring, and related ACP/proxy runtime changes.
2026-04-27 11:26:05 -07:00
Val Alexander
fc8ccde542
feat(acp): add opt-in Coven runtime bridge
...
Add the opt-in Coven ACP runtime bridge as a bundled extension while keeping ACPX as the default path.
Security hardening included before merge:
- fail closed by default instead of silently falling back;
- bounded health/socket requests and daemon response sizes;
- fixed Coven socket trust anchor and symlink/path validation;
- reject untrusted harness/session/event ids before exposing them;
- sanitize daemon-controlled terminal/status/error strings;
- use incremental event polling with bounded dedupe state;
- clean up launched Coven sessions before fallback when daemon ids are invalid.
Validation:
- pnpm test extensions/coven/src/config.test.ts extensions/coven/src/client.test.ts extensions/coven/src/runtime.test.ts
- pnpm check:changed
- GitHub CI green on a64eac20b9
- Greptile Review green
2026-04-27 12:22:29 -05:00
Peter Steinberger
aeba1d6b47
test: keep stateful tests out of unit-fast
2026-04-27 17:34:05 +01:00
Peter Steinberger
3bc29dd604
fix(sqlite): bound WAL sidecar growth
2026-04-27 12:25:10 +01:00
Peter Steinberger
1323683d72
fix: stabilize qa lab capture store cleanup
2026-04-26 09:13:30 +01:00
Vincent Koc
718dffd2f2
fix(diagnostics): harden capture redaction and discord metadata fetch ( #71303 )
2026-04-24 17:51:12 -07:00
Peter Steinberger
fffb7d3d7a
perf(test): avoid proxy runtime dynamic import
2026-04-20 21:02:13 +01:00
Peter Steinberger
a6aa028626
perf(test): trim hotspot integration paths
2026-04-20 20:41:08 +01:00
Peter Steinberger
8a09b40cb2
perf(test): trim test teardown waits
2026-04-20 20:30:16 +01:00
Peter Steinberger
76c4714ce7
refactor: share proxy capture event base
2026-04-20 14:06:19 +01:00
Peter Steinberger
2e2f927d5d
test: mock proxy capture store
2026-04-17 19:45:06 +01:00
HDYA
26f633b604
feat(msteams): add federated credential support (certificate + managed identity) ( #53615 )
...
* feat(msteams): add federated authentication support (certificate + managed identity + workload identity)
* msteams: fix vitest 4.1.2 compat, type errors, and regenerate config baseline
* msteams: fix lint errors, update fetch allowlist, regenerate protocol Swift
* fix(msteams): gate secret-only delegated auth flows
* fix(ci): unblock gateway watch and install smoke
* fix(ci): restore mergeability for pr 53615
* fix(ci): restore channel registry helper typing
* fix(ci): refresh raw fetch guard allowlist
---------
Co-authored-by: Chudi Huang <Chudi.Huang@microsoft.com >
Co-authored-by: Brad Groux <3053586+BradGroux@users.noreply.github.com >
2026-04-11 13:29:22 -05:00
Tak Hoffman
958c34e82c
feat(qa-lab): Add proxy capture stack and QA Lab inspector ( #64895 )
...
* Add proxy capture core and CLI
* Expand transport capture coverage
* Add QA Lab capture backend
* Refine QA Lab capture UI
* Fix proxy capture review feedback
* Fix proxy run cleanup and TTS capture
* Fix proxy capture transport follow-ups
* Fix debug proxy CONNECT target parsing
* Harden QA Lab asset path containment
2026-04-11 12:34:57 -05:00