sunlit-deng b73600b0cb fix(canvas): reject malformed snapshot base64 (#108987) ...

* fix(canvas): reject malformed snapshot base64

* refactor(canvas): reuse base64 canonicalizer

* fix(canvas): avoid control regex lint

* fix(canvas): allow base64 spaces

---------

Co-authored-by: Peter Steinberger <steipete@gmail.com>

2026-07-20 19:32:25 -07:00

..

acpx

fix(acpx): verify native platform packages (#111682)

2026-07-20 12:57:54 -06:00

active-memory

feat: bound transcript reads across replacements (#110374)

2026-07-18 11:41:39 -07:00

admin-http-rpc

…

alibaba

…

amazon-bedrock

refactor(agents): make API registry ownership lifecycle-local (#111137)

2026-07-18 20:55:07 -07:00

amazon-bedrock-mantle

fix(amazon-bedrock): ignore blank region env overrides (#110676)

2026-07-18 22:38:51 +01:00

anthropic

feat(anthropic): import Claude Desktop custom groups (#111644)

2026-07-20 00:30:37 -07:00

anthropic-vertex

fix: reject oversized credential files in remaining readers (#109260)

2026-07-16 11:33:18 -07:00

arcee

fix(models): refresh bundled provider catalogs (#109410)

2026-07-16 16:47:25 -07:00

azure-speech

refactor: reduce plugin SDK test import overhead (#109333)

2026-07-16 13:55:23 -07:00

baseten

refactor: reduce plugin SDK test import overhead (#109333)

2026-07-16 13:55:23 -07:00

bonjour

refactor(bonjour): privatize process error classification (#107724)

2026-07-14 12:00:55 -07:00

brave

refactor: remove expired plugin compatibility surfaces (#111451)

2026-07-19 11:04:48 -07:00

browser

test(browser): add cross-operation tab reference parity contract (#111375)

2026-07-20 11:56:57 +08:00

byteplus

fix: bound pasted input and provider response bodies (#110627)

2026-07-18 13:54:56 +01:00

canvas

fix(canvas): reject malformed snapshot base64 (#108987)

2026-07-20 19:32:25 -07:00

cerebras

fix(models): refresh bundled provider catalogs (#109410)

2026-07-16 16:47:25 -07:00

chutes

fix(chutes): report cache-read pricing from live catalog (#111253)

2026-07-19 19:56:42 -07:00

clawrouter

fix(clawrouter): sanitize attribution headers to ByteString (#106454)

2026-07-18 02:12:53 +01:00

clickclack

fix: consume ClickClack v1 setup claim contract (#111927)

2026-07-20 18:50:30 +01:00

cloudflare-ai-gateway

refactor(deadcode): tighten more provider extension roots (#108515)

2026-07-15 17:05:21 -07:00

codex

fix(agents): keep sender-scoped tools in delegated runs (#110345)

2026-07-20 19:42:06 -05:00

cohere

refactor(deadcode): tighten provider extension roots (#108497)

2026-07-15 16:23:47 -07:00

comfy

refactor: reduce plugin SDK test import overhead (#109333)

2026-07-16 13:55:23 -07:00

copilot

refactor: remove expired plugin compatibility surfaces (#111451)

2026-07-19 11:04:48 -07:00

copilot-proxy

fix(models): refresh bundled provider catalogs (#109410)

2026-07-16 16:47:25 -07:00

crabbox

refactor(extensions): privatize small plugin internals (#107774)

2026-07-14 14:15:44 -07:00

deepgram

refactor: reduce plugin SDK test import overhead (#109333)

2026-07-16 13:55:23 -07:00

deepinfra

refactor: remove expired plugin compatibility surfaces (#111451)

2026-07-19 11:04:48 -07:00

deepseek

refactor: reduce plugin SDK test import overhead (#109333)

2026-07-16 13:55:23 -07:00

device-pair

refactor: simplify recent async ownership fixes (#108164)

2026-07-15 03:32:15 -07:00

diagnostics-otel

fix(diagnostics-otel): classify model calls as client spans (#104211)

2026-07-18 18:21:45 -07:00

diagnostics-prometheus

feat: trace Claude Code CLI model calls (#108304)

2026-07-18 06:23:49 +10:00

diffs

refactor(diffs): move ephemeral artifacts to SQLite (#109328)

2026-07-16 16:47:19 -07:00

diffs-language-pack

…

discord

fix(discord): cancel unread voice CDN upload bodies (#111269)

2026-07-20 19:25:11 -07:00

document-extract

…

duckduckgo

fix(duckduckgo): preserve words around highlighted matches (#111460)

2026-07-19 19:09:09 -07:00

elevenlabs

fix(stt-live-audio): cancel ElevenLabs error response body (#110759)

2026-07-18 21:48:04 +01:00

exa

refactor: remove expired plugin compatibility surfaces (#111451)

2026-07-19 11:04:48 -07:00

fal

refactor(deadcode): tighten extension root modeling (#108538)

2026-07-15 18:18:23 -07:00

featherless

refactor: reduce plugin SDK test import overhead (#109333)

2026-07-16 13:55:23 -07:00

feishu

fix(deps): update axios past proxy advisory (#111984)

2026-07-21 09:21:14 +09:00

file-transfer

fix(file-transfer): denyPaths does not deny listing the denied directory itself (#109233)

2026-07-16 22:22:01 -07:00

firecrawl

fix(firecrawl): reject malformed 2xx response envelopes (#111210)

2026-07-19 20:41:48 -07:00

fireworks

fix(models): refresh bundled provider catalogs (#109410)

2026-07-16 16:47:25 -07:00

github-copilot

fix: keep memory SecretRef failures agent-scoped (#109977)

2026-07-17 14:44:03 +01:00

gmi

…

google

fix(google): keep embedding batch waits within timeout (#111674)

2026-07-20 11:46:06 +03:00

google-meet

fix: honor configured default agent in consults (#111749)

2026-07-20 01:43:00 -07:00

googlechat

refactor: remove expired plugin compatibility surfaces (#111451)

2026-07-19 11:04:48 -07:00

gradium

refactor: reduce plugin SDK test import overhead (#109333)

2026-07-16 13:55:23 -07:00

groq

fix(groq): keep default Llama agent turns within TPM limit (#104904)

2026-07-18 20:00:12 -04:00

huggingface

fix(huggingface): discover models when HTTP proxy is required (#110924)

2026-07-18 21:31:24 +01:00

image-generation-core

…

imessage

feat(channels): batch 3 producers drop media placeholder bodies (#111800)

2026-07-20 04:22:44 -07:00

inworld

fix(inworld): reject malformed base64 TTS audio (#111197)

2026-07-19 20:48:46 -04:00

irc

refactor: remove expired plugin compatibility surfaces (#111451)

2026-07-19 11:04:48 -07:00

kilocode

fix(kilocode): cancel failed model discovery bodies (#109950)

2026-07-20 19:09:34 -07:00

kimi-coding

fix(providers): refresh zai/kimi/moonshot/xai catalogs against July 2026 vendor docs (#109666)

2026-07-16 22:41:03 -07:00

line

refactor: remove expired plugin compatibility surfaces (#111451)

2026-07-19 11:04:48 -07:00

linux-canvas

refactor: privatize Linux Canvas and Node Host internals (#107884)

2026-07-14 18:00:16 -07:00

linux-node

fix(linux-node): keep command errors UTF-16 safe (#107717)

2026-07-15 00:16:39 -07:00

litellm

fix(litellm): guard loopback hostname auto-allow with isIP to prevent DNS SSRF bypass (#110693)

2026-07-19 00:51:50 +01:00

llama-cpp

fix(llama-cpp): preserve runtime asset paths (#110233)

2026-07-17 16:36:05 -07:00

llm-task

…

lmstudio

fix(lmstudio): cancel model discovery response body on non-ok (#109718)

2026-07-17 01:12:23 -07:00

lobster

refactor(schemas): use TypeBox native enums

2026-07-14 04:25:58 -07:00

logbook

fix: prevent SQLite lock stalls and schema drift (#108663)

2026-07-16 01:45:06 -07:00

longcat

…

matrix

refactor: remove expired plugin compatibility surfaces (#111451)

2026-07-19 11:04:48 -07:00

mattermost

fix(mattermost): probe hangs past deadline when DNS preflight stalls (#111314)

2026-07-19 21:31:05 -07:00

media-understanding-core

…

memory-core

fix(test): bound Matrix test process memory (#111607)

2026-07-19 20:04:14 -07:00

memory-lancedb

refactor: remove expired plugin compatibility surfaces (#111451)

2026-07-19 11:04:48 -07:00

memory-wiki

fix(memory-wiki): preserve unavailable source pages (#111034)

2026-07-19 00:39:23 +01:00

meta

refactor: reduce plugin SDK test import overhead (#109333)

2026-07-16 13:55:23 -07:00

microsoft

fix(microsoft): keep valid voices from malformed catalogs (#110784)

2026-07-20 18:56:52 -07:00

microsoft-foundry

fix(microsoft-foundry): keep spawn pipe streams UTF-8 safe across chunk splits (#109499)

2026-07-20 18:51:12 -07:00

migrate-claude

fix(migrate): harden importer path resolution and memory copy safety (#109314)

2026-07-16 12:56:43 -07:00

migrate-hermes

refactor(config): config-surface reduction tranche 1 — retire dead keys, dedupe channel schemas, add growth ratchet (#111142)

2026-07-19 00:52:37 -07:00

minimax

refactor: remove expired plugin compatibility surfaces (#111451)

2026-07-19 11:04:48 -07:00

mistral

refactor: reduce plugin SDK test import overhead (#109333)

2026-07-16 13:55:23 -07:00

moonshot

refactor: remove expired plugin compatibility surfaces (#111451)

2026-07-19 11:04:48 -07:00

msteams

fix(deps): update axios past proxy advisory (#111984)

2026-07-21 09:21:14 +09:00

mxc

improve(mxc): document sandbox config options and flag network access as dangerous (#110256)

2026-07-21 08:59:51 +09:00

nextcloud-talk

refactor: remove expired plugin compatibility surfaces (#111451)

2026-07-19 11:04:48 -07:00

nostr

fix(nostr): prefixed targets fail to send (#110881)

2026-07-20 04:21:49 -07:00

novita

…

nvidia

fix(models): refresh bundled provider catalogs (#109410)

2026-07-16 16:47:25 -07:00

oc-path

fix(oc-path): reject oversized multibyte JSONC input (#104140)

2026-07-18 17:47:15 -07:00

ollama

refactor: remove expired plugin compatibility surfaces (#111451)

2026-07-19 11:04:48 -07:00

onepassword

fix(onepassword): disable desktop-app integration on broker op calls (#109157)

2026-07-16 09:15:03 -07:00

open-prose

…

openai

fix(openai): reject malformed Codex image base64 (#111235)

2026-07-19 20:40:18 -04:00

opencode

refactor(protocol): pre-publish cheat-window cleanup and vintage tracking (#111041)

2026-07-19 04:07:15 -07:00

opencode-go

chore(plugins): gate deprecation hygiene in CI and purge internal deprecated usage (#108261)

2026-07-15 04:15:23 -07:00

openrouter

refactor: remove expired plugin compatibility surfaces (#111451)

2026-07-19 11:04:48 -07:00

openshell

refactor(extensions): trim provider and channel internals (#107817)

2026-07-14 15:38:39 -07:00

parallel

refactor: remove expired plugin compatibility surfaces (#111451)

2026-07-19 11:04:48 -07:00

perplexity

refactor: remove expired plugin compatibility surfaces (#111451)

2026-07-19 11:04:48 -07:00

phone-control

chore: enforce max-lines suppression ratchet (#107315)

2026-07-14 09:27:02 -07:00

pixverse

refactor: remove expired plugin compatibility surfaces (#111451)

2026-07-19 11:04:48 -07:00

policy

feat(policy): check authored message routing (#111087)

2026-07-20 17:31:29 -07:00

qa-channel

fix(qa): repair WhatsApp live scenario regressions (#110754)

2026-07-19 01:43:38 -03:00

qa-lab

fix(qa): run independent evidence channels concurrently (#112008)

2026-07-21 11:25:46 +09:00

qianfan

refactor(deadcode): tighten provider extension roots (#108497)

2026-07-15 16:23:47 -07:00

qqbot

fix(qqbot): avoid memory spikes from oversized client secret files (#110002)

2026-07-20 19:00:28 -07:00

qwen

fix(models): refresh bundled provider catalogs (#109410)

2026-07-16 16:47:25 -07:00

raft

refactor: remove expired plugin compatibility surfaces (#111451)

2026-07-19 11:04:48 -07:00

reef

fix: make Back work within channel setup (#108007)

2026-07-20 14:34:05 +10:00

runway

fix: bound pasted input and provider response bodies (#110627)

2026-07-18 13:54:56 +01:00

searxng

fix(searxng): stop web search requests when runs are aborted (#104216)

2026-07-14 06:36:21 -07:00

senseaudio

refactor: reduce plugin SDK test import overhead (#109333)

2026-07-16 13:55:23 -07:00

sglang

…

signal

fix(signal): report malformed release metadata cleanly (#110824)

2026-07-20 05:19:34 -07:00

slack

fix(deps): update axios past proxy advisory (#111984)

2026-07-21 09:21:14 +09:00

sms

fix(sms): trim prefixed phone number spacing (#111111)

2026-07-20 02:29:06 -07:00

stepfun

…

synology-chat

refactor: remove expired plugin compatibility surfaces (#111451)

2026-07-19 11:04:48 -07:00

synthetic

fix(models): refresh bundled provider catalogs (#109410)

2026-07-16 16:47:25 -07:00

talk-voice

…

tavily

refactor: remove expired plugin compatibility surfaces (#111451)

2026-07-19 11:04:48 -07:00

teams-meetings

fix(teams-meetings): expose listening probe timeout (#111486)

2026-07-20 23:39:27 +08:00

telegram

feat(channels): batch 4 Telegram drops media placeholder bodies (#111855)

2026-07-20 07:31:10 -07:00

tencent

refactor(deadcode): tighten provider extension roots (#108497)

2026-07-15 16:23:47 -07:00

test-support

refactor: reduce plugin SDK test import overhead (#109333)

2026-07-16 13:55:23 -07:00

thread-ownership

fix(thread-ownership): cancel unread ownership response bodies (#111231)

2026-07-19 20:48:44 -07:00

tlon

refactor(channels): share durable ingress monitor (#111186)

2026-07-18 21:33:09 -07:00

together

fix: bound pasted input and provider response bodies (#110627)

2026-07-18 13:54:56 +01:00

tokenjuice

fix(tokenjuice): preserve middleware boundaries

2026-07-14 11:00:31 -07:00

tts-local-cli

…

twitch

refactor: remove expired plugin compatibility surfaces (#111451)

2026-07-19 11:04:48 -07:00

vault

fix(vault): aggregate provider outage diagnostics (#110908)

2026-07-18 22:44:06 +01:00

venice

fix(models): refresh bundled provider catalogs (#109410)

2026-07-16 16:47:25 -07:00

vercel-ai-gateway

…

video-generation-core

…

vllm

refactor(vllm): remove unused registration shim (#108500)

2026-07-15 16:36:30 -07:00

voice-call

fix: honor configured default agent in consults (#111749)

2026-07-20 01:43:00 -07:00

volcengine

fix(models): refresh bundled provider catalogs (#109410)

2026-07-16 16:47:25 -07:00

voyage

refactor(deadcode): tighten extension root modeling (#108538)

2026-07-15 18:18:23 -07:00

vydra

fix(ci): restore plugin prerelease validation (#110787)

2026-07-18 17:00:15 +01:00

web-readability

refactor(web-readability): use native lazy module loading

2026-07-14 04:47:06 -07:00

webhooks

fix(webhooks): keep routes cold when SecretRefs are unavailable (#109715)

2026-07-16 23:56:59 -07:00

whatsapp

feat(channels): batch 3 producers drop media placeholder bodies (#111800)

2026-07-20 04:22:44 -07:00

workboard

fix(workboard): avoid duplicate proof entries on completion (#111324)

2026-07-19 03:00:37 -07:00

xai

fix(xai): reject malformed streamed TTS base64 (#111201)

2026-07-19 20:40:53 -04:00

xiaomi

refactor: remove expired plugin compatibility surfaces (#111451)

2026-07-19 11:04:48 -07:00

zai

fix(errors): recover from Z.AI token-limit errors (#111744)

2026-07-20 17:11:40 +03:00

zalo

refactor: remove expired plugin compatibility surfaces (#111451)

2026-07-19 11:04:48 -07:00

zalouser

perf(state): cap the per-agent SQLite handle cache with LRU eviction (#111411)

2026-07-19 13:58:01 -07:00

zoom-meetings

fix: honor configured default agent in consults (#111749)

2026-07-20 01:43:00 -07:00

.npmignore

…

AGENTS.md

…

CLAUDE.md

…

music-generation-providers.live.test.ts

refactor: reduce plugin SDK test import overhead (#109333)

2026-07-16 13:55:23 -07:00

tsconfig.package-boundary.base.json

…

tsconfig.package-boundary.paths.json

refactor: remove expired plugin compatibility surfaces (#111451)

2026-07-19 11:04:48 -07:00

video-generation-providers.live.test.ts

refactor: reduce plugin SDK test import overhead (#109333)

2026-07-16 13:55:23 -07:00