Jiaming Guo 456c48f368 fix(gateway): require admin scope for browser proxy invoke (#85916) ...

* fix(gateway): require admin scope for browser proxy invoke

* fix(gateway): document trusted node scopes

* fix(gateway): align browser scope test

* fix(gateway): satisfy node test lint

---------

Co-authored-by: Agustin Rivera <agustin@rivera-web.com>

2026-06-29 16:23:02 -07:00

..

acpx

Scope agent cron operations to the calling agent (#96883)

2026-06-26 21:41:14 -05:00

active-memory

test(active-memory): isolate empty recall mock

2026-06-22 19:33:21 +02:00

admin-http-rpc

chore(release): close out 2026.6.10 on main (#96271)

2026-06-24 11:51:14 +08:00

alibaba

chore(release): close out 2026.6.10 on main (#96271)

2026-06-24 11:51:14 +08:00

amazon-bedrock

fix(bedrock): honor adaptive model max tokens (#97343)

2026-06-28 12:15:02 -07:00

amazon-bedrock-mantle

chore(release): close out 2026.6.10 on main (#96271)

2026-06-24 11:51:14 +08:00

anthropic

chore(release): close out 2026.6.10 on main (#96271)

2026-06-24 11:51:14 +08:00

anthropic-vertex

chore(release): close out 2026.6.10 on main (#96271)

2026-06-24 11:51:14 +08:00

arcee

chore(release): close out 2026.6.10 on main (#96271)

2026-06-24 11:51:14 +08:00

azure-speech

fix(speech): bound TTS/STT voice-list and transcription JSON response reads (#96496)

2026-06-25 14:32:53 -04:00

bonjour

chore(release): close out 2026.6.10 on main (#96271)

2026-06-24 11:51:14 +08:00

brave

chore(release): close out 2026.6.10 on main (#96271)

2026-06-24 11:51:14 +08:00

browser

fix(gateway): require admin scope for browser proxy invoke (#85916)

2026-06-29 16:23:02 -07:00

byteplus

fix(byteplus): bound video-generation success response (#96606)

2026-06-25 13:47:07 -04:00

canvas

chore(release): close out 2026.6.10 on main (#96271)

2026-06-24 11:51:14 +08:00

cerebras

chore(release): close out 2026.6.10 on main (#96271)

2026-06-24 11:51:14 +08:00

chutes

fix(chutes-oauth-plugin): bound plugin JSON response reads

2026-06-28 21:33:20 -07:00

clickclack

fix(clickclack): bound REST success JSON response reads (#96970)

2026-06-27 07:30:32 -07:00

cloudflare-ai-gateway

chore(release): close out 2026.6.10 on main (#96271)

2026-06-24 11:51:14 +08:00

codex

fix(codex): preserve per-app approval reviewer policy (#97327)

2026-06-29 02:35:13 -07:00

codex-supervisor

chore(release): close out 2026.6.10 on main (#96271)

2026-06-24 11:51:14 +08:00

cohere

chore(release): close out 2026.6.10 on main (#96271)

2026-06-24 11:51:14 +08:00

comfy

fix(comfy): bound JSON response reads via readProviderJsonResponse

2026-06-28 21:33:30 -07:00

copilot

feat(copilot): add BYOK provider parity

2026-06-24 18:29:56 +08:00

copilot-proxy

chore(release): close out 2026.6.10 on main (#96271)

2026-06-24 11:51:14 +08:00

deepgram

chore(release): close out 2026.6.10 on main (#96271)

2026-06-24 11:51:14 +08:00

deepinfra

fix(deepinfra): bound video generation JSON response reads (#97486)

2026-06-28 10:44:28 -07:00

deepseek

chore(release): close out 2026.6.10 on main (#96271)

2026-06-24 11:51:14 +08:00

device-pair

fix: /pair qr fails to show QR code in chat surfaces (#97933)

2026-06-29 18:17:21 -05:00

diagnostics-otel

feat: improve model call telemetry

2026-06-29 15:21:53 +10:00

diagnostics-prometheus

chore(release): close out 2026.6.10 on main (#96271)

2026-06-24 11:51:14 +08:00

diffs

fix: reset diff viewer controllers on rehydrate (#96138)

2026-06-25 16:19:30 -07:00

diffs-language-pack

chore(release): close out 2026.6.10 on main (#96271)

2026-06-24 11:51:14 +08:00

discord

fix(discord): bound PluralKit and voice-message JSON reads

2026-06-29 10:36:16 -07:00

document-extract

fix(document-extract): render PDF image fallback per page so multi-page scans don't starve later pages (#96390)

2026-06-25 16:37:47 +08:00

duckduckgo

fix(duckduckgo): guard out-of-range numeric HTML entities (#96583)

2026-06-27 09:37:58 -07:00

elevenlabs

fix(speech): bound TTS/STT voice-list and transcription JSON response reads (#96496)

2026-06-25 14:32:53 -04:00

exa

fix(exa): bound untrusted search JSON response reads (#96038)

2026-06-24 10:57:37 -04:00

fal

fix(fal): bound music/video generation response reads

2026-06-28 21:11:14 -07:00

feishu

fix(feishu): publish transport health status (#90966)

2026-06-28 23:12:09 -07:00

file-transfer

chore(release): close out 2026.6.10 on main (#96271)

2026-06-24 11:51:14 +08:00

firecrawl

test(firecrawl): add unit tests for firecrawl client functions (#97714)

2026-06-29 07:58:40 -07:00

fireworks

chore(release): close out 2026.6.10 on main (#96271)

2026-06-24 11:51:14 +08:00

github-copilot

test(github-copilot): cover live xhigh reasoning for non-Claude models (#91728)

2026-06-28 23:34:28 -07:00

gmi

chore(release): close out 2026.6.10 on main (#96271)

2026-06-24 11:51:14 +08:00

google

fix(google): bound OAuth response body reads

2026-06-28 21:49:13 -07:00

google-meet

fix(gateway): require admin scope for browser proxy invoke (#85916)

2026-06-29 16:23:02 -07:00

googlechat

fix(googlechat): truncate approval card text on UTF-16 boundary (#96573)

2026-06-27 09:31:26 -07:00

gradium

chore(release): close out 2026.6.10 on main (#96271)

2026-06-24 11:51:14 +08:00

groq

chore(release): close out 2026.6.10 on main (#96271)

2026-06-24 11:51:14 +08:00

huggingface

chore(release): close out 2026.6.10 on main (#96271)

2026-06-24 11:51:14 +08:00

image-generation-core

chore(release): close out 2026.6.10 on main (#96271)

2026-06-24 11:51:14 +08:00

imessage

fix(imessage): coalesce merged text on UTF-16 code-point boundary

2026-06-28 19:08:39 -07:00

inworld

fix(inworld): bound TTS audio, voices, and error response reads to prevent OOM (#95416)

2026-06-28 17:08:36 -07:00

irc

fix(irc): prevent ghost nick collisions on rejoin after network delay (#96108)

2026-06-28 10:47:39 -07:00

kilocode

chore(release): close out 2026.6.10 on main (#96271)

2026-06-24 11:51:14 +08:00

kimi-coding

chore(release): close out 2026.6.10 on main (#96271)

2026-06-24 11:51:14 +08:00

line

fix(line): preserve uploaded file names for media detection (#96403)

2026-06-29 11:03:30 -07:00

litellm

fix(image-gen): bound image generation provider JSON response reads (#96495)

2026-06-26 07:08:30 -04:00

llama-cpp

chore(release): close out 2026.6.10 on main (#96271)

2026-06-24 11:51:14 +08:00

llm-task

chore(release): close out 2026.6.10 on main (#96271)

2026-06-24 11:51:14 +08:00

lmstudio

test(lmstudio): fix model load response mocks

2026-06-24 21:14:28 +08:00

lobster

chore(release): close out 2026.6.10 on main (#96271)

2026-06-24 11:51:14 +08:00

matrix

fix(matrix): warn on accumulated token storage roots (#97353)

2026-06-28 12:34:52 -07:00

mattermost

fix(mattermost): truncate draft previews on code-point boundaries (#97472)

2026-06-28 18:20:33 +00:00

media-understanding-core

chore(release): close out 2026.6.10 on main (#96271)

2026-06-24 11:51:14 +08:00

memory-core

fix(memory): require privileged dreaming config changes (#97869)

2026-06-29 13:03:22 -07:00

memory-lancedb

chore(release): close out 2026.6.10 on main (#96271)

2026-06-24 11:51:14 +08:00

memory-wiki

fix(memory-wiki): keep claim freshness tied to evidence timestamps (#97465)

2026-06-28 11:58:45 -07:00

microsoft

fix(speech): bound TTS/STT voice-list and transcription JSON response reads (#96496)

2026-06-25 14:32:53 -04:00

microsoft-foundry

fix(microsoft-foundry): bound connection test error reads (#97812)

2026-06-29 10:50:38 -07:00

migrate-claude

chore(release): close out 2026.6.10 on main (#96271)

2026-06-24 11:51:14 +08:00

migrate-hermes

chore(release): close out 2026.6.10 on main (#96271)

2026-06-24 11:51:14 +08:00

minimax

fix(minimax): bound video control response reads (#96889)

2026-06-28 10:52:33 -04:00

mistral

chore(release): close out 2026.6.10 on main (#96271)

2026-06-24 11:51:14 +08:00

moonshot

chore(release): close out 2026.6.10 on main (#96271)

2026-06-24 11:51:14 +08:00

msteams

fix(msteams): handle message card submit values (#97546)

2026-06-28 11:46:16 -07:00

nextcloud-talk

fix(nextcloud-talk): bound bot preflight error reads (#97811)

2026-06-29 10:50:47 -07:00

nostr

fix(nostr): bound seen tracker timer options (#97133)

2026-06-27 07:40:36 -07:00

novita

chore(release): close out 2026.6.10 on main (#96271)

2026-06-24 11:51:14 +08:00

nvidia

chore(release): close out 2026.6.10 on main (#96271)

2026-06-24 11:51:14 +08:00

oc-path

chore(release): close out 2026.6.10 on main (#96271)

2026-06-24 11:51:14 +08:00

ollama

fix: Ollama Cloud tool calls fail on second turn (#96474)

2026-06-29 16:48:46 -06:00

open-prose

docs: require OpenProse remote import consent

2026-06-24 16:36:48 -05:00

openai

fix(openai): bound video create-submit response reads

2026-06-28 21:10:55 -07:00

opencode

fix(opencode): restore Zen model catalog (#92495)

2026-06-28 12:32:44 -04:00

opencode-go

fix(opencode-go): re-arm idle timer on block-boundary events to prevent false stalled-stream abort (#97128)

2026-06-27 09:48:42 +08:00

openrouter

fix(openrouter): bound video response reads

2026-06-28 11:19:47 -07:00

openshell

fix(exec): fail invalid explicit workdir before running (#94441)

2026-06-26 08:02:00 +10:00

parallel

Bound successful provider response reads

2026-06-24 19:08:22 -05:00

perplexity

Bound successful provider response reads

2026-06-24 19:08:22 -05:00

phone-control

…

pixverse

fix(together, pixverse): bound video response reads

2026-06-28 21:11:05 -07:00

policy

chore(release): close out 2026.6.10 on main (#96271)

2026-06-24 11:51:14 +08:00

qa-channel

chore(release): close out 2026.6.10 on main (#96271)

2026-06-24 11:51:14 +08:00

qa-lab

Update QA Lab Crabline integration (#97941)

2026-06-29 16:07:38 -07:00

qa-matrix

fix(qa-matrix): bound homeserver response reads

2026-06-28 20:53:53 -07:00

qianfan

chore(release): close out 2026.6.10 on main (#96271)

2026-06-24 11:51:14 +08:00

qqbot

test: gate symlink assertions on file symlink capability (#95531)

2026-06-28 22:50:37 -07:00

qwen

fix(qwen): bound video success response (#96604)

2026-06-25 13:40:07 -04:00

raft

test(plugins): review channel daemon spawn findings

2026-06-25 03:42:44 +02:00

runway

fix(runway): bound video create/poll response reads

2026-06-28 21:10:46 -07:00

searxng

chore(release): close out 2026.6.10 on main (#96271)

2026-06-24 11:51:14 +08:00

senseaudio

chore(release): close out 2026.6.10 on main (#96271)

2026-06-24 11:51:14 +08:00

sglang

chore(release): close out 2026.6.10 on main (#96271)

2026-06-24 11:51:14 +08:00

signal

fix(signal): bound container REST response reads

2026-06-28 20:53:58 -07:00

slack

feat(slack): support alternate Web API roots (#97154)

2026-06-28 18:52:37 -07:00

sms

chore(release): close out 2026.6.10 on main (#96271)

2026-06-24 11:51:14 +08:00

stepfun

chore(release): close out 2026.6.10 on main (#96271)

2026-06-24 11:51:14 +08:00

synology-chat

fix(synology-chat): truncate sanitized input on UTF-16 boundary (#96574)

2026-06-27 09:31:33 -07:00

synthetic

chore(release): close out 2026.6.10 on main (#96271)

2026-06-24 11:51:14 +08:00

talk-voice

fix(voice): require admin for voice set (#97874)

2026-06-29 15:41:26 -07:00

tavily

Bound successful provider response reads

2026-06-24 19:08:22 -05:00

telegram

fix(telegram): fall back to plain text when rich message entity validation fails (#96642)

2026-06-28 19:00:07 -07:00

tencent

chore(release): close out 2026.6.10 on main (#96271)

2026-06-24 11:51:14 +08:00

test-support

Bound successful provider response reads

2026-06-24 19:08:22 -05:00

thread-ownership

…

tlon

fix(tlon): truncate approval message preview on UTF-16 boundary (#97599)

2026-06-28 20:40:32 -07:00

together

fix(together, pixverse): bound video response reads

2026-06-28 21:11:05 -07:00

tokenjuice

chore(release): close out 2026.6.10 on main (#96271)

2026-06-24 11:51:14 +08:00

tts-local-cli

chore(release): close out 2026.6.10 on main (#96271)

2026-06-24 11:51:14 +08:00

twitch

chore(release): close out 2026.6.10 on main (#96271)

2026-06-24 11:51:14 +08:00

venice

chore(release): close out 2026.6.10 on main (#96271)

2026-06-24 11:51:14 +08:00

vercel-ai-gateway

chore(release): close out 2026.6.10 on main (#96271)

2026-06-24 11:51:14 +08:00

video-generation-core

chore(release): close out 2026.6.10 on main (#96271)

2026-06-24 11:51:14 +08:00

vllm

chore(release): close out 2026.6.10 on main (#96271)

2026-06-24 11:51:14 +08:00

voice-call

fix(voicecall): redact read-scoped status payloads (#97870)

2026-06-29 15:38:29 -07:00

volcengine

fix(speech): bound TTS response reads (#96874)

2026-06-28 10:57:25 -04:00

voyage

fix(voyage): bound embedding-batch status, error, and non-OK responses (#96608)

2026-06-25 13:52:36 -04:00

vydra

fix(vydra): bound control response reads

2026-06-28 21:11:23 -07:00

web-readability

chore(release): close out 2026.6.10 on main (#96271)

2026-06-24 11:51:14 +08:00

webhooks

chore(release): close out 2026.6.10 on main (#96271)

2026-06-24 11:51:14 +08:00

whatsapp

fix(whatsapp): validate WebSocket URL env (#97697)

2026-06-29 10:50:16 -07:00

workboard

chore(release): close out 2026.6.10 on main (#96271)

2026-06-24 11:51:14 +08:00

xai

fix(xai): bound video response body reads

2026-06-28 21:57:14 -07:00

xiaomi

fix(speech): bound TTS response reads (#96874)

2026-06-28 10:57:25 -04:00

zai

fix(zai): bound Z.AI endpoint-probe error body reads to prevent OOM (#97540)

2026-06-28 17:06:32 -07:00

zalo

test: gate symlink assertions on file symlink capability (#95531)

2026-06-28 22:50:37 -07:00

zalouser

chore(release): close out 2026.6.10 on main (#96271)

2026-06-24 11:51:14 +08:00

.npmignore

…

AGENTS.md

…

CLAUDE.md

…

music-generation-providers.live.test.ts

…

tsconfig.package-boundary.base.json

…

tsconfig.package-boundary.paths.json

fix(ci): align sqlite refactor checks

2026-06-19 01:20:06 +08:00

video-generation-providers.live.test.ts

…