Gio Della-Libera c85feace54 Policy: add secret and auth conformance checks (#81974) ...

* feat(policy): add secrets auth conformance

* fix(policy): include sandbox ssh secret data

* fix(policy): complete secret input provenance

* fix(policy): cover media request secrets

* fix(policy): satisfy policy lint

* fix(policy): narrow secret conformance evidence

* fix(policy): cover request bearer token secrets

2026-05-22 12:48:14 -07:00

..

acp

fix(codex): block progress-only completions [AI-assisted] (#85110)

2026-05-22 03:43:28 +00:00

agents

fix(message-tool): normalize send body aliases (#84102)

2026-05-22 20:38:08 +01:00

auto-reply

fix(auto-reply): enforce word boundary in slash command prefix match (#84634)

2026-05-22 20:42:22 +01:00

bindings

…

bootstrap

…

channels

feat(plugin-sdk): add generic channel poll sender (#85299)

2026-05-22 12:16:07 +01:00

chat

…

cli

fix(cli): validate debug proxy numeric options (#84260)

2026-05-22 20:45:17 +01:00

commands

fix: apply docs sweep updates

2026-05-22 18:40:20 +01:00

commitments

…

compat

…

config

fix: apply docs sweep updates

2026-05-22 18:40:20 +01:00

context-engine

feat: add context-engine host capability requirements (#84994)

2026-05-22 10:28:08 -04:00

crestodian

refactor: remove sender owner tool gating

2026-05-21 15:14:48 +01:00

cron

fix: release cron runtime state after isolated runs (#85053)

2026-05-22 19:46:58 +01:00

daemon

fix(daemon): use exit code instead of localized text for schtasks fallback (#85347)

2026-05-22 20:43:40 +01:00

docs

docs(config): quote bracket config paths (#83058)

2026-05-22 20:20:10 +01:00

flows

feat: add xai oauth web search and provider timeouts

2026-05-22 08:49:53 +01:00

gateway

fix(gateway): coalesce provider auth rewarms

2026-05-22 20:28:13 +01:00

hooks

fix: limit subagent bootstrap defaults

2026-05-22 12:55:42 +01:00

i18n

…

image-generation

feat: add xai oauth web search and provider timeouts

2026-05-22 08:49:53 +01:00

infra

fix(delivery): log failDelivery errors instead of silently swallowing (#84449)

2026-05-22 20:45:26 +01:00

interactive

fix(discord): preserve reusable presentation buttons

2026-05-21 22:02:16 +01:00

link-understanding

…

logging

fix(diagnostics): bound diagnostic buffers

2026-05-22 22:01:41 +08:00

markdown

fix(telegram): preserve fenced code languages (#85209)

2026-05-22 09:59:06 +01:00

mcp

refactor: remove sender owner tool gating

2026-05-21 15:14:48 +01:00

media

fix(pdf): bound remote body reads

2026-05-21 09:31:31 +01:00

media-generation

feat: add xai oauth web search and provider timeouts

2026-05-22 08:49:53 +01:00

media-understanding

Skip empty sherpa structured transcripts (#84667)

2026-05-21 04:23:59 +00:00

memory

…

memory-host-sdk

…

model-catalog

fix(doctor): migrate invalid thinking formats (#84626)

2026-05-20 13:58:01 -07:00

music-generation

feat: add fal and OpenRouter music generation (#82789)

2026-05-17 02:05:22 +01:00

node-host

Recheck rebuilt system.run argv [AI] (#84090)

2026-05-20 12:30:26 +05:30

pairing

[codex] restore QR bootstrap operator handoff (#83684)

2026-05-19 20:59:09 +03:00

plugin-sdk

Policy: add secret and auth conformance checks (#81974)

2026-05-22 12:48:14 -07:00

plugin-state

feat(plugins): add embedding provider contract (#84947)

2026-05-22 03:36:51 +00:00

plugins

fix(update): repair managed npm plugin peers

2026-05-22 18:29:14 +01:00

process

feat: support git and local skill installs (#84793)

2026-05-20 21:12:03 -07:00

provider-runtime

…

proxy-capture

…

realtime-transcription

…

routing

fix(agent): support explicit CLI session keys (#85121)

2026-05-22 03:08:25 +00:00

scripts

test: keep slow tests under duration cap

2026-05-18 00:26:44 +01:00

secrets

Warn on plaintext secret config in doctor (#84718)

2026-05-21 01:27:34 +00:00

security

fix: update fs-safe fallback dependency

2026-05-20 19:35:08 +01:00

sessions

test: keep slow tests under duration cap

2026-05-18 00:26:44 +01:00

shared

fix(message-tool): normalize send body aliases (#84102)

2026-05-22 20:38:08 +01:00

status

fix: clarify pinned session model status

2026-05-20 15:59:24 +01:00

talk

fix(talk): stabilize realtime voice consults

2026-05-22 15:12:39 +01:00

tasks

fix(codex): deliver native subagent completions

2026-05-22 15:28:46 +01:00

terminal

test: use platform spy helper in cli tests

2026-05-17 17:03:23 +08:00

test-helpers

…

test-utils

feat: add xai oauth web search and provider timeouts

2026-05-22 08:49:53 +01:00

tools

test: harden sparse Testbox scans

2026-05-17 02:32:57 +08:00

trajectory

feat(plugins): add embedding provider contract (#84947)

2026-05-22 03:36:51 +00:00

tts

feat: add xai oauth web search and provider timeouts

2026-05-22 08:49:53 +01:00

tui

fix(tui): dismiss watchdog notice when response actually arrives (#77375)

2026-05-22 20:02:36 +01:00

types

fix(memory): close local embedding providers on timeout (#84048)

2026-05-19 09:19:09 +00:00

utils

refactor(channels): unify session route projection

2026-05-19 00:49:25 +02:00

video-generation

feat: add xai oauth web search and provider timeouts

2026-05-22 08:49:53 +01:00

web

feat: add xai oauth web search and provider timeouts

2026-05-22 08:49:53 +01:00

web-fetch

fix(cli): scope web command secret refs

2026-05-17 10:42:57 +01:00

web-search

fix: pass active agent to web search execution

2026-05-22 08:49:53 +01:00

wizard

fix: report oauth web search in onboarding summary

2026-05-22 08:49:53 +01:00

browser-lifecycle-cleanup.test.ts

…

browser-lifecycle-cleanup.ts

…

docker-build-cache.test.ts

…

docker-image-digests.test.ts

…

docker-setup.e2e.test.ts

feat(docker): add image apt package build arg

2026-05-18 06:37:16 +01:00

dockerfile.test.ts

test(docker): expect prod store seed command

2026-05-22 18:31:11 +01:00

entry.compile-cache.test.ts

…

entry.compile-cache.ts

…

entry.respawn.test.ts

…

entry.respawn.ts

…

entry.test.ts

perf: speed up secrets and nodes help startup (#84818)

2026-05-21 16:51:57 +08:00

entry.ts

perf: speed up secrets and nodes help startup (#84818)

2026-05-21 16:51:57 +08:00

entry.version-fast-path.test.ts

…

entry.version-fast-path.ts

…

extensionAPI.ts

…

global-state.ts

…

globals.ts

…

index.test.ts

…

index.ts

…

install-sh-version.test.ts

…

library.test.ts

…

library.ts

…

logger.test.ts

…

logger.ts

…

logging.ts

…

param-key.ts

…

plugin-activation-boundary.test.ts

chore(lint): remove underscore-dangle allow list (#83542)

2026-05-18 14:56:06 +01:00

poll-params.test.ts

…

poll-params.ts

…

polls.test.ts

…

polls.ts

…

runtime.ts

…

ui-app-settings.agents-files-refresh.test.ts

…

utils.test.ts

…

utils.ts

…

version.test.ts

chore(lint): remove underscore-dangle allow list (#83542)

2026-05-18 14:56:06 +01:00

version.ts

chore(lint): remove underscore-dangle allow list (#83542)

2026-05-18 14:56:06 +01:00