Josh Avant 0ffcc308f2 Secrets: gate exec dry-run and preflight resolution behind --allow-exec (#49417) ...

* Secrets: gate exec dry-run resolution behind --allow-exec

* Secrets: fix dry-run completeness and skipped exec audit semantics

* Secrets: require --allow-exec for exec-containing apply writes

* Docs: align secrets exec consent behavior

* Changelog: note secrets exec consent gating

2026-03-17 23:24:34 -05:00

..

acp

ACP: harden startup and move configured routing behind plugin seams (#48197)

2026-03-17 17:27:52 +01:00

agents

refactor web search provider execution out of core

2026-03-17 23:07:19 -05:00

auto-reply

refactor: split remaining monitor runtime helpers

2026-03-17 20:36:03 -07:00

bindings

ACP: harden startup and move configured routing behind plugin seams (#48197)

2026-03-17 17:27:52 +01:00

browser

Browser: support non-Chrome existing-session profiles via userDataDir (#48170)

2026-03-16 14:21:22 +01:00

canvas-host

fix: drop stray a2ui bundle

2026-03-15 21:39:49 -07:00

channels

refactor: deduplicate setup wizard helpers

2026-03-18 03:58:22 +00:00

cli

Secrets: gate exec dry-run and preflight resolution behind --allow-exec (#49417)

2026-03-17 23:24:34 -05:00

commands

doctor: clarify orphan transcript archive prompt

2026-03-18 04:15:17 +00:00

compat

…

config

refactor web search provider execution out of core

2026-03-17 23:07:19 -05:00

context-engine

test: trim redundant context engine assertions

2026-03-17 16:21:58 +00:00

cron

refactor: clean extension api boundaries

2026-03-17 09:38:21 -07:00

daemon

ACP: harden startup and move configured routing behind plugin seams (#48197)

2026-03-17 17:27:52 +01:00

docs

…

gateway

Gateway: cover trusted-proxy scope regression (#49372)

2026-03-17 19:59:01 -07:00

hooks

test: fix stale web search and boot-md contracts

2026-03-16 20:04:30 +05:30

i18n

…

image-generation

test(image-generation): add live variant coverage

2026-03-17 01:09:58 -07:00

infra

Outbound: route sessions through channel plugins

2026-03-18 04:09:47 +00:00

interactive

refactor: unify reply content checks

2026-03-16 05:54:16 +00:00

line

fix: resolve current ci regressions

2026-03-14 00:51:12 +00:00

link-understanding

…

logging

fix(logging): make logger import browser-safe

2026-03-16 23:08:21 +03:00

markdown

…

media

fix(telegram): unify transport fallback chain (#49148)

2026-03-17 22:44:15 +05:30

media-understanding

fix(plugins): forward plugin subagent overrides (#48277)

2026-03-17 07:20:27 -07:00

memory

build: update deps except carbon

2026-03-17 20:51:54 -07:00

node-host

!refactor(browser): remove Chrome extension path and add MCP doctor migration (#47893)

2026-03-15 23:56:08 -07:00

pairing

fix: stabilize full gate

2026-03-17 07:06:25 +00:00

plugin-sdk

Plugin SDK: add outbound session route helpers

2026-03-18 04:09:47 +00:00

plugins

refactor web search provider execution out of core

2026-03-17 23:07:19 -05:00

process

fix: stabilize full gate

2026-03-17 07:06:25 +00:00

providers

refactor: move provider auth helpers into plugin layer

2026-03-16 21:21:17 -07:00

routing

…

scripts

ci: speed up scoped workflow lanes

2026-03-13 19:53:40 +00:00

secrets

Secrets: gate exec dry-run and preflight resolution behind --allow-exec (#49417)

2026-03-17 23:24:34 -05:00

security

docs(security): clarify wildcard Control UI origins

2026-03-17 09:36:51 -07:00

sessions

…

shared

refactor: dedupe plugin lazy runtime helpers

2026-03-17 09:24:22 -07:00

terminal

refactor: share terminal note wrapping

2026-03-14 01:41:16 +00:00

test-helpers

test: share whatsapp outbound poll fixtures

2026-03-14 01:41:17 +00:00

test-utils

Plugin SDK: require unified message discovery

2026-03-18 03:02:16 +00:00

tts

test: merge tts config gating cases

2026-03-17 16:21:58 +00:00

tui

Add /btw side questions (#45444)

2026-03-14 17:27:54 +02:00

types

feat(tts): add microsoft voice listing

2026-03-16 20:24:13 -07:00

utils

fix: stabilize full gate

2026-03-17 07:06:25 +00:00

web-search

feat(plugins): add web search runtime capability

2026-03-16 21:31:00 -07:00

whatsapp

fix: stabilize full gate

2026-03-17 07:06:25 +00:00

wizard

refactor: split remaining monitor runtime helpers

2026-03-17 20:36:03 -07:00

channel-web.ts

refactor: untangle remaining plugin sdk boundaries

2026-03-16 21:16:32 -07:00

docker-build-cache.test.ts

Tests: align Docker cache checks with non-root images

2026-03-16 12:31:51 +00:00

docker-image-digests.test.ts

…

docker-setup.e2e.test.ts

refactor: make setup the primary wizard surface

2026-03-15 22:01:04 -07:00

dockerfile.test.ts

…

entry.test.ts

CLI: restore lightweight root help and scoped status plugin preload

2026-03-15 17:38:39 -07:00

entry.ts

Fix launcher startup regressions (#48501)

2026-03-16 17:21:18 -05:00

entry.version-fast-path.test.ts

…

globals.ts

…

index.test.ts

fix: keep gaxios compat off the package root (#47914) (thanks @pdd-cli)

2026-03-16 08:22:39 +00:00

index.ts

Fix launcher startup regressions (#48501)

2026-03-16 17:21:18 -05:00

install-sh-version.test.ts

…

library.ts

refactor(core): land plugin auth and startup cleanup

2026-03-15 20:12:37 -07:00

logger.test.ts

…

logger.ts

…

logging.ts

…

param-key.ts

refactor: share snake case param lookup

2026-03-13 21:40:53 +00:00

poll-params.test.ts

…

poll-params.ts

Polls: scope Telegram poll extras to plugin schema

2026-03-18 02:34:33 +00:00

polls.test.ts

…

polls.ts

…

runtime.ts

…

utils.test.ts

Fix full local gate on main

2026-03-14 15:52:11 -05:00

utils.ts

refactor: dedupe home relative path resolution

2026-03-13 21:40:53 +00:00

version.test.ts

…

version.ts

…