Agustin Rivera 8dfbf3268b fix(browser): gate sandbox noVNC helper auth ...

Require bridge auth before /sandbox/novnc token redemption and keep the noVNC observer URL out of model-visible prompt context.

Local verification:
- pnpm test extensions/browser/src/browser/bridge-server.auth.test.ts src/agents/sanitize-for-prompt.test.ts src/agents/pi-embedded-runner.buildembeddedsandboxinfo.test.ts

Note: pnpm check currently fails on latest main in unrelated files (src/agents/tools/message-tool.ts and src/gateway/mcp-http.test.ts), outside this PR diff.

Thanks @eleqtrizit.

Co-authored-by: eleqtrizit <31522568+eleqtrizit@users.noreply.github.com>

2026-04-10 18:01:26 +01:00

..

acpx

chore: bump version to 2026.4.10

2026-04-09 03:56:22 +01:00

active-memory

fix(ci): clear check-additional follow-up regressions (#63934)

2026-04-09 23:47:59 +01:00

alibaba

chore: bump version to 2026.4.10

2026-04-09 03:56:22 +01:00

amazon-bedrock

chore: bump version to 2026.4.10

2026-04-09 03:56:22 +01:00

amazon-bedrock-mantle

chore: bump version to 2026.4.10

2026-04-09 03:56:22 +01:00

anthropic

fix: stop marking Claude CLI runs as host-managed

2026-04-10 09:14:15 +01:00

anthropic-vertex

chore: bump version to 2026.4.10

2026-04-09 03:56:22 +01:00

arcee

chore: bump version to 2026.4.10

2026-04-09 03:56:22 +01:00

bluebubbles

fix(bluebubbles): remove status type barrel cycle

2026-04-09 09:22:11 +01:00

brave

chore: bump version to 2026.4.10

2026-04-09 03:56:22 +01:00

browser

fix(browser): gate sandbox noVNC helper auth

2026-04-10 18:01:26 +01:00

byteplus

chore: bump version to 2026.4.10

2026-04-09 03:56:22 +01:00

chutes

chore: bump version to 2026.4.10

2026-04-09 03:56:22 +01:00

cloudflare-ai-gateway

chore: bump version to 2026.4.10

2026-04-09 03:56:22 +01:00

comfy

chore: bump version to 2026.4.10

2026-04-09 03:56:22 +01:00

copilot-proxy

chore: bump version to 2026.4.10

2026-04-09 03:56:22 +01:00

deepgram

chore: bump version to 2026.4.10

2026-04-09 03:56:22 +01:00

deepseek

chore: bump version to 2026.4.10

2026-04-09 03:56:22 +01:00

device-pair

fix: clarify plugin command alias diagnostics (#64242) (thanks @feiskyer)

2026-04-10 14:56:12 +01:00

diagnostics-otel

chore: bump version to 2026.4.10

2026-04-09 03:56:22 +01:00

diffs

fix(ci): clear check-additional follow-up regressions (#63934)

2026-04-09 23:47:59 +01:00

discord

test(discord): prefer claude-sonnet-4-6 in thread-title fixture

2026-04-10 14:07:22 +01:00

duckduckgo

chore: bump version to 2026.4.10

2026-04-09 03:56:22 +01:00

elevenlabs

chore: bump version to 2026.4.10

2026-04-09 03:56:22 +01:00

exa

chore: bump version to 2026.4.10

2026-04-09 03:56:22 +01:00

fal

chore: bump version to 2026.4.10

2026-04-09 03:56:22 +01:00

feishu

feat(feishu): standardize request UA and register bot as AI agent (#63835)

2026-04-10 22:57:38 +08:00

firecrawl

chore: bump version to 2026.4.10

2026-04-09 03:56:22 +01:00

fireworks

fix(fireworks): disable FirePass Kimi reasoning leak (#63607)

2026-04-09 17:09:17 +08:00

github-copilot

chore: bump version to 2026.4.10

2026-04-09 03:56:22 +01:00

google

fix(ci): clear check-additional follow-up regressions (#63934)

2026-04-09 23:47:59 +01:00

googlechat

fix(extensions): split runtime store type imports

2026-04-10 08:16:27 +01:00

groq

chore: bump version to 2026.4.10

2026-04-09 03:56:22 +01:00

huggingface

chore: bump version to 2026.4.10

2026-04-09 03:56:22 +01:00

image-generation-core

chore: bump version to 2026.4.10

2026-04-09 03:56:22 +01:00

imessage

perf: add narrow inbound roots sdk surface

2026-04-10 17:34:41 +01:00

irc

chore: bump version to 2026.4.10

2026-04-09 03:56:22 +01:00

kilocode

chore: bump version to 2026.4.10

2026-04-09 03:56:22 +01:00

kimi-coding

chore: bump version to 2026.4.10

2026-04-09 03:56:22 +01:00

line

fix(line): remove setup api barrel back-edge

2026-04-10 08:16:28 +01:00

litellm

chore: bump version to 2026.4.10

2026-04-09 03:56:22 +01:00

llm-task

chore: bump version to 2026.4.10

2026-04-09 03:56:22 +01:00

lobster

chore: bump version to 2026.4.10

2026-04-09 03:56:22 +01:00

matrix

Gate Matrix profile updates for non-owner message tool runs (#62662)

2026-04-10 12:56:17 -04:00

mattermost

fix(extensions): split runtime store type imports

2026-04-10 08:16:27 +01:00

media-understanding-core

chore: bump version to 2026.4.10

2026-04-09 03:56:22 +01:00

memory-core

fix: clarify plugin command alias diagnostics (#64242) (thanks @feiskyer)

2026-04-10 14:56:12 +01:00

memory-lancedb

fix(memory-lancedb): accept dreaming config for slot-owned memory (#63874)

2026-04-09 23:03:53 +02:00

memory-wiki

fix(ci): clear check-additional follow-up regressions (#63934)

2026-04-09 23:47:59 +01:00

microsoft

chore: bump version to 2026.4.10

2026-04-09 03:56:22 +01:00

microsoft-foundry

chore: bump version to 2026.4.10

2026-04-09 03:56:22 +01:00

minimax

chore: bump version to 2026.4.10

2026-04-09 03:56:22 +01:00

mistral

chore: bump version to 2026.4.10

2026-04-09 03:56:22 +01:00

moonshot

chore: bump version to 2026.4.10

2026-04-09 03:56:22 +01:00

msteams

fix: restore main type gates

2026-04-10 12:14:36 +01:00

nextcloud-talk

fix(extensions): split runtime store type imports

2026-04-10 08:16:27 +01:00

nostr

fix: restore rebased type gates

2026-04-10 12:24:50 +01:00

nvidia

chore: bump version to 2026.4.10

2026-04-09 03:56:22 +01:00

ollama

test: run Ollama stream coverage inside plugin

2026-04-09 06:13:39 +01:00

open-prose

chore: bump version to 2026.4.10

2026-04-09 03:56:22 +01:00

openai

chore: bump version to 2026.4.10

2026-04-09 03:56:22 +01:00

opencode

chore: bump version to 2026.4.10

2026-04-09 03:56:22 +01:00

opencode-go

chore: bump version to 2026.4.10

2026-04-09 03:56:22 +01:00

openrouter

chore: bump version to 2026.4.10

2026-04-09 03:56:22 +01:00

openshell

fix(ci): clear check-additional follow-up regressions (#63934)

2026-04-09 23:47:59 +01:00

perplexity

chore: bump version to 2026.4.10

2026-04-09 03:56:22 +01:00

phone-control

fix: clarify plugin command alias diagnostics (#64242) (thanks @feiskyer)

2026-04-10 14:56:12 +01:00

qa-channel

chore: bump version to 2026.4.10

2026-04-09 03:56:22 +01:00

qa-lab

refactor: split manifest command alias helpers

2026-04-10 17:37:31 +01:00

qianfan

chore: bump version to 2026.4.10

2026-04-09 03:56:22 +01:00

qqbot

fix: stabilize rebased test gates

2026-04-10 12:14:36 +01:00

qwen

chore: bump version to 2026.4.10

2026-04-09 03:56:22 +01:00

runway

chore: bump version to 2026.4.10

2026-04-09 03:56:22 +01:00

searxng

chore: bump version to 2026.4.10

2026-04-09 03:56:22 +01:00

sglang

chore: bump version to 2026.4.10

2026-04-09 03:56:22 +01:00

shared

test: trim whatsapp channel test barrels

2026-04-03 16:39:47 +01:00

signal

fix(extensions): split account config type seams

2026-04-10 08:16:28 +01:00

slack

fix(approval): split discord and slack runtime seams

2026-04-10 09:08:28 +01:00

speech-core

refactor: centralize speech voice-note channel routing

2026-04-10 15:01:19 +01:00

stepfun

chore: bump version to 2026.4.10

2026-04-09 03:56:22 +01:00

synology-chat

chore: bump version to 2026.4.10

2026-04-09 03:56:22 +01:00

synthetic

chore: bump version to 2026.4.10

2026-04-09 03:56:22 +01:00

talk-voice

fix: clarify plugin command alias diagnostics (#64242) (thanks @feiskyer)

2026-04-10 14:56:12 +01:00

tavily

chore: bump version to 2026.4.10

2026-04-09 03:56:22 +01:00

telegram

test(telegram): cover threaded qa replies

2026-04-10 21:53:31 +05:30

thread-ownership

refactor: dedupe provider trimmed readers

2026-04-08 00:09:41 +01:00

tlon

fix: restore rebased type gates

2026-04-10 12:24:50 +01:00

together

chore: bump version to 2026.4.10

2026-04-09 03:56:22 +01:00

twitch

fix(twitch): remove runtime api barrel back-edges

2026-04-10 08:51:17 +01:00

venice

chore: bump version to 2026.4.10

2026-04-09 03:56:22 +01:00

vercel-ai-gateway

chore: bump version to 2026.4.10

2026-04-09 03:56:22 +01:00

video-generation-core

chore: bump version to 2026.4.10

2026-04-09 03:56:22 +01:00

vllm

chore: bump version to 2026.4.10

2026-04-09 03:56:22 +01:00

voice-call

fix(voice-call): reject oversized realtime WebSocket frames

2026-04-10 17:58:44 +01:00

volcengine

chore: bump version to 2026.4.10

2026-04-09 03:56:22 +01:00

vydra

chore: bump version to 2026.4.10

2026-04-09 03:56:22 +01:00

webhooks

chore: bump version to 2026.4.10

2026-04-09 03:56:22 +01:00

whatsapp

test: narrow legacy doctor migration hot paths

2026-04-10 17:51:15 +01:00

xai

fix(extensions): split shared runtime type seams

2026-04-10 08:16:27 +01:00

xiaomi

chore: bump version to 2026.4.10

2026-04-09 03:56:22 +01:00

zai

chore: bump version to 2026.4.10

2026-04-09 03:56:22 +01:00

zalo

fix(zalo): align setup allowlist prompts with shared dm policy

2026-04-10 09:28:19 +01:00

zalouser

fix(zalouser): remove runtime api type back-edges

2026-04-10 08:16:28 +01:00

.npmignore

…

AGENTS.md

docs(agents): tighten provider boundary guidance

2026-04-04 14:13:46 +09:00

CLAUDE.md

Docs: add boundary AGENTS guides (#56647)

2026-03-28 20:22:03 -04:00

music-generation-providers.live.test.ts

fix: stabilize media live provider coverage

2026-04-06 19:15:31 +01:00

tsconfig.package-boundary.base.json

refactor(cli): normalize route boundaries

2026-04-06 15:38:04 +01:00

tsconfig.package-boundary.paths.json

fix(ci): sync package boundary paths config

2026-04-09 23:59:00 +01:00

video-generation-providers.live.test.ts

fix: stabilize media live provider coverage

2026-04-06 19:15:31 +01:00