Peter Steinberger 2d319961d5 fix(browser): block interaction-triggered navigation SSRF (#104254) ...

* fix(browser): guard interaction navigation requests

* fix(browser): preserve pages on blocked navigation

* fix(browser): enforce interaction navigation policy

* test(browser): type navigation guard fixtures

* fix(browser): execute guarded wait predicates

* style(browser): satisfy interaction lint

* fix(browser): guard hover drag and scroll navigation

* fix(browser): type policy check outcomes

* test(browser): type navigation guard mocks

* fix(browser): preserve proxy policy for guarded interactions

* fix(browser): carry navigation policy through actions

* fix(browser): retain policy for existing-session guards

* fix(browser): guard existing-session waits

* test(browser): avoid shadowed guard pages

* fix(browser): expose scroll action to agents

* fix(browser): disable speculative managed preconnects

* docs(browser): bound managed preconnect hardening

* fix(browser): keep wait behavior outside interaction guards

* chore(browser): leave release notes to release automation

* fix(browser): guard all interaction navigations

2026-07-11 04:30:33 -07:00

..

acpx

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

active-memory

feat(codex): supervise native Codex sessions (#104045)

2026-07-11 00:12:08 -07:00

admin-http-rpc

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

alibaba

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

amazon-bedrock

chore(tooling): enforce formatting and refresh TypeScript checks (#104239)

2026-07-11 01:09:51 -07:00

amazon-bedrock-mantle

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

anthropic

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

anthropic-vertex

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

arcee

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

azure-speech

fix(tts): bound voice-list requests (#102865)

2026-07-11 00:55:06 -07:00

bonjour

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

brave

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

browser

fix(browser): block interaction-triggered navigation SSRF (#104254)

2026-07-11 04:30:33 -07:00

byteplus

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

canvas

chore(tooling): enforce formatting and refresh TypeScript checks (#104239)

2026-07-11 01:09:51 -07:00

cerebras

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

chutes

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

clawrouter

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

clickclack

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

cloudflare-ai-gateway

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

codex

fix(codex): allow slower Mac session catalogs (#104332)

2026-07-11 02:05:55 -07:00

cohere

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

comfy

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

copilot

chore(tooling): enforce formatting and refresh TypeScript checks (#104239)

2026-07-11 01:09:51 -07:00

copilot-proxy

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

deepgram

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

deepinfra

chore(tooling): enforce formatting and refresh TypeScript checks (#104239)

2026-07-11 01:09:51 -07:00

deepseek

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

device-pair

fix(device-pair): resolve QR senders by own key (#101652)

2026-07-09 22:31:07 +01:00

diagnostics-otel

chore(tooling): enforce formatting and refresh TypeScript checks (#104239)

2026-07-11 01:09:51 -07:00

diagnostics-prometheus

chore(tooling): enforce formatting and refresh TypeScript checks (#104239)

2026-07-11 01:09:51 -07:00

diffs

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

diffs-language-pack

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

discord

test(discord): exercise multipart proxy fetch path (#104421)

2026-07-11 04:13:00 -07:00

document-extract

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

duckduckgo

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

elevenlabs

fix(tts): bound voice-list requests (#102865)

2026-07-11 00:55:06 -07:00

exa

chore(tooling): enforce formatting and refresh TypeScript checks (#104239)

2026-07-11 01:09:51 -07:00

fal

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

featherless

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

feishu

refactor(channels): adopt core retryAsync for hand-rolled retry loops (#104431)

2026-07-11 04:30:21 -07:00

file-transfer

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

firecrawl

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

fireworks

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

github-copilot

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

gmi

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

google

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

google-meet

fix(google-meet): validate chrome node policy params (#103752)

2026-07-11 04:00:28 -07:00

googlechat

fix(googlechat): keep off-mode replies out of threads (#104402)

2026-07-11 03:57:16 -07:00

gradium

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

groq

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

huggingface

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

image-generation-core

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

imessage

fix(channels): honor configured read target policies (#99905)

2026-07-10 22:29:37 -05:00

inworld

fix(inworld): add timeout to voices list request (#102965)

2026-07-11 01:35:25 -07:00

irc

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

kilocode

chore(tooling): enforce formatting and refresh TypeScript checks (#104239)

2026-07-11 01:09:51 -07:00

kimi-coding

chore(tooling): enforce formatting and refresh TypeScript checks (#104239)

2026-07-11 01:09:51 -07:00

line

chore(tooling): enforce formatting and refresh TypeScript checks (#104239)

2026-07-11 01:09:51 -07:00

litellm

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

llama-cpp

feat(memory): surface llama.cpp diagnostics

2026-07-11 16:40:14 +08:00

llm-task

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

lmstudio

fix(lmstudio): isolate embedding alias credentials

2026-07-11 16:22:22 +08:00

lobster

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

logbook

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

longcat

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

matrix

refactor(channels): adopt core retryAsync for hand-rolled retry loops (#104431)

2026-07-11 04:30:21 -07:00

mattermost

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

media-understanding-core

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

memory-core

fix(memory): skip blank search provider bootstrap (#103728)

2026-07-11 04:19:40 -07:00

memory-lancedb

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

memory-wiki

chore(tooling): enforce formatting and refresh TypeScript checks (#104239)

2026-07-11 01:09:51 -07:00

meta

chore(tooling): enforce formatting and refresh TypeScript checks (#104239)

2026-07-11 01:09:51 -07:00

microsoft

fix(tts): bound voice-list requests (#102865)

2026-07-11 00:55:06 -07:00

microsoft-foundry

chore(tooling): enforce formatting and refresh TypeScript checks (#104239)

2026-07-11 01:09:51 -07:00

migrate-claude

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

migrate-hermes

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

minimax

fix(minimax): add timeouts to OAuth HTTP requests (#102862)

2026-07-10 22:02:34 -07:00

mistral

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

moonshot

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

msteams

fix(channels): honor configured read target policies (#99905)

2026-07-10 22:29:37 -05:00

nextcloud-talk

fix(nextcloud-talk): add timeout to room info lookup (#102859)

2026-07-10 21:59:32 -07:00

nostr

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

novita

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

nvidia

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

oc-path

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

ollama

fix(ollama): preserve embedding readiness base path

2026-07-11 16:22:22 +08:00

open-prose

chore(tooling): enforce formatting and refresh TypeScript checks (#104239)

2026-07-11 01:09:51 -07:00

openai

fix(openai): add timeout to realtime client-secret requests (#102860)

2026-07-11 00:54:06 -07:00

opencode

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

opencode-go

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

openrouter

fix(openrouter): apply request policy to video catalog requests (#102062)

2026-07-10 22:01:18 -07:00

openshell

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

parallel

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

perplexity

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

phone-control

fix(computer): prevent stale, replayed, and post-cancel desktop actions (#103422)

2026-07-10 06:47:56 +01:00

pixverse

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

policy

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

qa-channel

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

qa-lab

chore(tooling): enforce formatting and refresh TypeScript checks (#104239)

2026-07-11 01:09:51 -07:00

qa-matrix

refactor(matrix): adopt core claimable dedupe with doctor-owned state migration (#104391)

2026-07-11 03:38:54 -07:00

qianfan

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

qqbot

chore(tooling): enforce formatting and refresh TypeScript checks (#104239)

2026-07-11 01:09:51 -07:00

qwen

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

raft

chore(tooling): enforce formatting and refresh TypeScript checks (#104239)

2026-07-11 01:09:51 -07:00

runway

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

searxng

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

senseaudio

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

sglang

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

signal

feat: add portable table presentation blocks (#103583)

2026-07-10 22:29:13 -07:00

slack

chore(tooling): enforce formatting and refresh TypeScript checks (#104239)

2026-07-11 01:09:51 -07:00

sms

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

stepfun

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

synology-chat

fix: isolate Synology webhook preauth throttling [AI] (#103619)

2026-07-11 13:44:21 +05:30

synthetic

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

talk-voice

…

tavily

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

telegram

fix(telegram): mark durable webhook acceptance (#104407)

2026-07-11 03:51:39 -07:00

tencent

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

test-support

…

thread-ownership

…

tlon

chore(tooling): enforce formatting and refresh TypeScript checks (#104239)

2026-07-11 01:09:51 -07:00

together

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

tokenjuice

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

tts-local-cli

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

twitch

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

vault

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

venice

chore(tooling): enforce formatting and refresh TypeScript checks (#104239)

2026-07-11 01:09:51 -07:00

vercel-ai-gateway

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

video-generation-core

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

vllm

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

voice-call

chore(tooling): enforce formatting and refresh TypeScript checks (#104239)

2026-07-11 01:09:51 -07:00

volcengine

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

voyage

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

vydra

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

web-readability

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

webhooks

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

whatsapp

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

workboard

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

workspaces

feat(workspaces): add agent-composable Workspaces (#104139)

2026-07-11 03:30:23 -07:00

xai

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

xiaomi

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

zai

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

zalo

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

zalouser

chore(tooling): enforce formatting and refresh TypeScript checks (#104239)

2026-07-11 01:09:51 -07:00

.npmignore

…

AGENTS.md

…

CLAUDE.md

…

music-generation-providers.live.test.ts

…

tsconfig.package-boundary.base.json

…

tsconfig.package-boundary.paths.json

…

video-generation-providers.live.test.ts

…