cxbAsDev e1b79346c5 fix(signal): bound outbound container attachment file reads (#101391) ...

* fix(signal): bound outbound container attachment file reads

* fix(signal): honor configured container attachment limits

---------

Co-authored-by: Peter Steinberger <steipete@gmail.com>

2026-07-07 09:17:14 +01:00

..

acpx

feat: correlate native search outcomes in audit history (#98704)

2026-07-06 12:30:12 +01:00

active-memory

fix(core): keep backend truncation UTF-16 safe (#100244)

2026-07-05 05:48:35 -07:00

admin-http-rpc

chore(release): close out 2026.6.11 on main

2026-06-30 11:31:08 -07:00

alibaba

chore(release): close out 2026.6.11 on main

2026-06-30 11:31:08 -07:00

amazon-bedrock

fix(anthropic): resolve thinking as disabled when legacy budget is below 1024 (#101415)

2026-07-07 08:42:40 +01:00

amazon-bedrock-mantle

fix(anthropic): resolve thinking as disabled when legacy budget is below 1024 (#101415)

2026-07-07 08:42:40 +01:00

anthropic

refactor(plugins): localize private declarations (#101406)

2026-07-06 23:26:47 -07:00

anthropic-vertex

fix(anthropic): resolve thinking as disabled when legacy budget is below 1024 (#101415)

2026-07-07 08:42:40 +01:00

arcee

feat(macos): load provider catalog during AI onboarding (#101132)

2026-07-06 20:57:56 +01:00

azure-speech

chore(release): close out 2026.6.11 on main

2026-06-30 11:31:08 -07:00

bonjour

refactor(plugins): localize private declarations (#101406)

2026-07-06 23:26:47 -07:00

brave

refactor(plugins): localize provider internals (#101425)

2026-07-06 23:50:12 -07:00

browser

feat(browser): expose agent download actions (#101369)

2026-07-07 06:17:52 +01:00

byteplus

feat(macos): load provider catalog during AI onboarding (#101132)

2026-07-06 20:57:56 +01:00

canvas

refactor(deadcode): localize internal type aliases (#101243)

2026-07-06 17:57:32 -07:00

cerebras

feat(macos): load provider catalog during AI onboarding (#101132)

2026-07-06 20:57:56 +01:00

chutes

feat(macos): load provider catalog during AI onboarding (#101132)

2026-07-06 20:57:56 +01:00

clawrouter

feat: show auto-detected provider plans and billing (#100520)

2026-07-06 04:53:09 +01:00

clickclack

fix(clickclack): reply to a top-level message in-channel, not as a new thread (#100582)

2026-07-05 22:27:27 -07:00

cloudflare-ai-gateway

chore(release): close out 2026.6.11 on main

2026-06-30 11:31:08 -07:00

codex

refactor(codex): keyed turn routing, client-scoped rate limits, and resume subscription safety (#101376)

2026-07-07 07:25:15 +01:00

codex-supervisor

chore: update dependencies (#100027)

2026-07-04 14:56:50 -04:00

cohere

feat(macos): load provider catalog during AI onboarding (#101132)

2026-07-06 20:57:56 +01:00

comfy

chore(release): close out 2026.6.11 on main

2026-06-30 11:31:08 -07:00

copilot

refactor(copilot): localize internal runtime types (#101379)

2026-07-06 22:33:59 -07:00

copilot-proxy

chore(release): close out 2026.6.11 on main

2026-06-30 11:31:08 -07:00

deepgram

chore(release): close out 2026.6.11 on main

2026-06-30 11:31:08 -07:00

deepinfra

refactor(plugins): localize provider internals (#101425)

2026-07-06 23:50:12 -07:00

deepseek

feat(macos): load provider catalog during AI onboarding (#101132)

2026-07-06 20:57:56 +01:00

device-pair

refactor(plugins): localize private declarations (#101406)

2026-07-06 23:26:47 -07:00

diagnostics-otel

fix: show exported tool results in trace viewers (#101371)

2026-07-07 17:14:30 +10:00

diagnostics-prometheus

chore(release): close out 2026.6.11 on main

2026-06-30 11:31:08 -07:00

diffs

feat(diffs): changed-files summary nav for multi-file patch diffs (#100753)

2026-07-06 16:55:56 +01:00

diffs-language-pack

fix(diffs): share SSR preloads and repair language-pack hydration (#100487)

2026-07-06 00:34:17 +01:00

discord

docs(openai): refresh realtime 2.1 examples

2026-07-06 23:22:33 -07:00

document-extract

chore(release): close out 2026.6.11 on main

2026-06-30 11:31:08 -07:00

duckduckgo

refactor(shared): consolidate provider and utility lazy loaders (#98749)

2026-07-02 21:16:26 -07:00

elevenlabs

chore(release): close out 2026.6.11 on main

2026-06-30 11:31:08 -07:00

exa

refactor(shared): consolidate provider and utility lazy loaders (#98749)

2026-07-02 21:16:26 -07:00

fal

fix(fal): route grok-imagine and nano-banana-2-lite edits to correct endpoints (#98688)

2026-07-01 20:42:25 -07:00

featherless

fix(provider): satisfy Featherless release checks

2026-07-06 16:17:44 -07:00

feishu

fix(feishu): keep operator logs UTF-16 safe (#101364)

2026-07-07 05:54:50 +01:00

file-transfer

refactor: consolidate byte-size formatting (#99768)

2026-07-06 09:26:04 -07:00

firecrawl

refactor(plugins): localize provider internals (#101425)

2026-07-06 23:50:12 -07:00

fireworks

feat(macos): load provider catalog during AI onboarding (#101132)

2026-07-06 20:57:56 +01:00

github-copilot

test(github-copilot): use real token exchange response

2026-07-07 08:07:43 +02:00

gmi

feat(macos): load provider catalog during AI onboarding (#101132)

2026-07-06 20:57:56 +01:00

google

feat(models): add Claude Sonnet 5 support (#98254)

2026-07-07 00:05:35 +01:00

google-meet

fix(google-meet): bound JSON response body reads to prevent OOM (#98850)

2026-07-05 02:34:08 -04:00

googlechat

chore: update dependencies (#100027)

2026-07-04 14:56:50 -04:00

gradium

chore(release): close out 2026.6.11 on main

2026-06-30 11:31:08 -07:00

groq

feat(macos): load provider catalog during AI onboarding (#101132)

2026-07-06 20:57:56 +01:00

huggingface

fix(extensions/huggingface): bound model discovery JSON response read to prevent OOM (#101079)

2026-07-06 23:26:27 +01:00

image-generation-core

chore(release): close out 2026.6.11 on main

2026-06-30 11:31:08 -07:00

imessage

fix(imessage): handle CLI child stdout/stderr stream errors (#101401)

2026-07-07 08:19:52 +01:00

inworld

fix(inworld): guard voices JSON.parse against malformed API response bodies (#98660)

2026-07-01 08:55:41 -07:00

irc

fix(irc): monitor stays disconnected after IRC socket closes (#100799)

2026-07-06 06:07:12 -07:00

kilocode

feat(macos): load provider catalog during AI onboarding (#101132)

2026-07-06 20:57:56 +01:00

kimi-coding

feat(macos): load provider catalog during AI onboarding (#101132)

2026-07-06 20:57:56 +01:00

line

fix(line): surface partial delivery when rich or media send fails alongside text (#100996)

2026-07-06 19:21:29 +01:00

litellm

feat(macos): load provider catalog during AI onboarding (#101132)

2026-07-06 20:57:56 +01:00

llama-cpp

refactor(plugins): localize private declarations (#101406)

2026-07-06 23:26:47 -07:00

llm-task

chore: update dependencies (#100027)

2026-07-04 14:56:50 -04:00

lmstudio

feat(macos): load provider catalog during AI onboarding (#101132)

2026-07-06 20:57:56 +01:00

lobster

refactor(plugin-sdk): consolidate tool result helpers (#99740)

2026-07-04 16:50:44 -07:00

logbook

refactor: remove dead code and consolidate repeated paths (#100650)

2026-07-06 02:24:37 -07:00

longcat

feat(providers): add LongCat API support (#100501)

2026-07-06 10:07:08 -07:00

matrix

test: stabilize load-sensitive test families that break gates under parallel load (#100420)

2026-07-05 12:53:06 -07:00

mattermost

fix(mattermost): strip internal tool-trace banners from outbound text (#98693)

2026-07-07 05:48:41 +01:00

media-understanding-core

chore(release): close out 2026.6.11 on main

2026-06-30 11:31:08 -07:00

memory-core

fix(memory-core): clamp widen-fallback kNN k to sqlite-vec 4096 limit (#96157)

2026-07-06 16:53:34 -07:00

memory-lancedb

chore: update dependencies (#100027)

2026-07-04 14:56:50 -04:00

memory-wiki

fix(memory-wiki): fail with a readable error when the shared memory manager violates the contract (#100902)

2026-07-06 09:20:43 -07:00

microsoft

chore(release): close out 2026.6.11 on main

2026-06-30 11:31:08 -07:00

microsoft-foundry

chore(release): close out 2026.6.11 on main

2026-06-30 11:31:08 -07:00

migrate-claude

refactor: consolidate core stream cleanup, watchdog locality, and approval text duplication (#99901)

2026-07-04 02:08:35 -07:00

migrate-hermes

refactor: consolidate core stream cleanup, watchdog locality, and approval text duplication (#99901)

2026-07-04 02:08:35 -07:00

minimax

fix(minimax): clarify TTS volume boundary (#101359)

2026-07-07 05:53:08 +01:00

mistral

feat(macos): load provider catalog during AI onboarding (#101132)

2026-07-06 20:57:56 +01:00

moonshot

feat(macos): load provider catalog during AI onboarding (#101132)

2026-07-06 20:57:56 +01:00

msteams

fix(msteams): bound Graph attachment JSON responses (#101082)

2026-07-07 01:18:09 +01:00

nextcloud-talk

fix(release): use workspace host deps in release lockfile

2026-06-30 15:54:12 -07:00

nostr

refactor: consolidate exact keyed async queues (#99691)

2026-07-04 16:45:07 -07:00

novita

feat(macos): load provider catalog during AI onboarding (#101132)

2026-07-06 20:57:56 +01:00

nvidia

feat(macos): load provider catalog during AI onboarding (#101132)

2026-07-06 20:57:56 +01:00

oc-path

chore: update dependencies (#100027)

2026-07-04 14:56:50 -04:00

ollama

feat(macos): load provider catalog during AI onboarding (#101132)

2026-07-06 20:57:56 +01:00

open-prose

chore(release): close out 2026.6.11 on main

2026-06-30 11:31:08 -07:00

openai

feat(openai): default realtime voice to gpt-realtime-2.1

2026-07-06 23:22:33 -07:00

opencode

feat(macos): load provider catalog during AI onboarding (#101132)

2026-07-06 20:57:56 +01:00

opencode-go

refactor(opencode-go): localize stream internals (#101440)

2026-07-07 00:16:14 -07:00

openrouter

refactor(plugins): localize private config types (#101452)

2026-07-07 00:34:46 -07:00

openshell

chore(release): close out 2026.6.11 on main

2026-06-30 11:31:08 -07:00

parallel

refactor(plugins): consolidate record guards (#99361)

2026-07-02 22:12:53 -07:00

perplexity

refactor(shared): consolidate provider and utility lazy loaders (#98749)

2026-07-02 21:16:26 -07:00

phone-control

refactor: consolidate duplicated plugin state and doctor migration plumbing onto SDK seams (#99850)

2026-07-04 01:51:03 -07:00

pixverse

fix(release): use workspace host deps in release lockfile

2026-06-30 15:54:12 -07:00

policy

policy: repair channel ingress findings (#99720)

2026-07-06 18:03:40 -07:00

qa-channel

fix(qa-channel): bound bus JSON response reads (#99169)

2026-07-06 13:02:42 -04:00

qa-lab

fix(plugin-sdk): align speech runtime packaging (#89899)

2026-07-07 07:38:41 +01:00

qa-matrix

test(qa): use qa flow for channel routing scenarios (#101076)

2026-07-06 18:35:41 -07:00

qianfan

feat(macos): load provider catalog during AI onboarding (#101132)

2026-07-06 20:57:56 +01:00

qqbot

fix(qqbot): use UTF-16-safe truncation for messaging reply and approval previews (#101421)

2026-07-07 08:22:06 +01:00

qwen

feat(macos): load provider catalog during AI onboarding (#101132)

2026-07-06 20:57:56 +01:00

raft

fix(release): use workspace host deps in release lockfile

2026-06-30 15:54:12 -07:00

runway

chore(release): close out 2026.6.11 on main

2026-06-30 11:31:08 -07:00

searxng

refactor(shared): consolidate provider and utility lazy loaders (#98749)

2026-07-02 21:16:26 -07:00

senseaudio

chore(release): close out 2026.6.11 on main

2026-06-30 11:31:08 -07:00

sglang

chore(release): close out 2026.6.11 on main

2026-06-30 11:31:08 -07:00

signal

fix(signal): bound outbound container attachment file reads (#101391)

2026-07-07 09:17:14 +01:00

slack

feat: add channel pairing request hook (#97733)

2026-07-05 19:11:58 -07:00

sms

refactor(plugins): localize private config types (#101452)

2026-07-07 00:34:46 -07:00

stepfun

feat(macos): load provider catalog during AI onboarding (#101132)

2026-07-06 20:57:56 +01:00

synology-chat

chore(release): close out 2026.6.11 on main

2026-06-30 11:31:08 -07:00

synthetic

feat(macos): load provider catalog during AI onboarding (#101132)

2026-07-06 20:57:56 +01:00

talk-voice

fix(voice): require admin for voice set (#97874)

2026-06-29 15:41:26 -07:00

tavily

chore: update dependencies (#100027)

2026-07-04 14:56:50 -04:00

telegram

fix(markdown-core): CJK-friendly emphasis flanking so **标签：**正文 renders bold (#101120) (#101230)

2026-07-07 05:43:42 +01:00

tencent

feat(models): add Claude Sonnet 5 support (#98254)

2026-07-07 00:05:35 +01:00

test-support

…

thread-ownership

…

tlon

fix(tlon): bound Memex upload JSON response read (#101115)

2026-07-06 23:26:15 +01:00

together

feat(macos): load provider catalog during AI onboarding (#101132)

2026-07-06 20:57:56 +01:00

tokenjuice

refactor(plugins): consolidate record guards (#99361)

2026-07-02 22:12:53 -07:00

tts-local-cli

chore(release): close out 2026.6.11 on main

2026-06-30 11:31:08 -07:00

twitch

chore: update dependencies (#100027)

2026-07-04 14:56:50 -04:00

venice

feat(macos): load provider catalog during AI onboarding (#101132)

2026-07-06 20:57:56 +01:00

vercel-ai-gateway

feat(macos): load provider catalog during AI onboarding (#101132)

2026-07-06 20:57:56 +01:00

video-generation-core

chore(release): close out 2026.6.11 on main

2026-06-30 11:31:08 -07:00

vllm

chore(release): close out 2026.6.11 on main

2026-06-30 11:31:08 -07:00

voice-call

fix(voice-call): handle tunnel child stream errors and stop-after-exit hang (#101394)

2026-07-07 08:30:02 +01:00

volcengine

feat(macos): load provider catalog during AI onboarding (#101132)

2026-07-06 20:57:56 +01:00

voyage

fix(voyage): close response body stream when batch output JSONL parsing throws (#98840)

2026-07-06 06:32:50 +00:00

vydra

chore(release): close out 2026.6.11 on main

2026-06-30 11:31:08 -07:00

web-readability

improve(web-fetch): speed up provider fallback loading (#98559)

2026-07-04 12:47:10 -07:00

webhooks

refactor(security): consolidate secret primitives (#99746)

2026-07-04 16:38:13 -07:00

whatsapp

fix(whatsapp): gate poll sends during reachout timelock

2026-07-07 06:03:09 +02:00

workboard

refactor(workboard): localize private store types (#100989)

2026-07-06 09:01:01 -07:00

xai

feat(macos): load provider catalog during AI onboarding (#101132)

2026-07-06 20:57:56 +01:00

xiaomi

feat(macos): load provider catalog during AI onboarding (#101132)

2026-07-06 20:57:56 +01:00

zai

feat(macos): load provider catalog during AI onboarding (#101132)

2026-07-06 20:57:56 +01:00

zalo

improve: keep isolated tests under one second (#100019)

2026-07-05 10:57:19 -07:00

zalouser

refactor(plugin-sdk): consolidate tool result helpers (#99740)

2026-07-04 16:50:44 -07:00

.npmignore

…

AGENTS.md

…

CLAUDE.md

…

music-generation-providers.live.test.ts

…

tsconfig.package-boundary.base.json

…

tsconfig.package-boundary.paths.json

refactor(qa): add canonical live channel adapters (#99707)

2026-07-06 09:24:34 -07:00

video-generation-providers.live.test.ts

…