Peter Steinberger 8b300e57f0 fix(browser): keep remote CDP credentials out of responses (#103139) ...

* fix(browser): contain remote CDP credentials

* fix(browser): probe authenticated discovery before attach

* chore: keep release note in PR metadata

2026-07-10 01:12:51 +01:00

..

acp

fix: scope ACP search path approvals [AI] (#102416)

2026-07-09 20:33:18 +05:30

agents

fix: count multi-failure tool summaries accurately (#102981)

2026-07-10 00:53:06 +01:00

audit

…

auto-reply

fix(usage-bar): cap warnedTemplateOverrides warn-once dedupe cache (#102659)

2026-07-09 22:29:12 +01:00

bindings

…

bootstrap

…

channels

feat(onboard): guided CLI onboarding with live AI verification and classic fallback (#101880)

2026-07-09 12:40:55 +01:00

chat

feat: render inline web chat widgets via capability-gated show_widget tool (#101840)

2026-07-09 12:29:50 +01:00

cli

fix: release startup migration lease before exit (#103157)

2026-07-10 00:53:10 +01:00

commands

fix: release startup migration lease before exit (#103157)

2026-07-10 00:53:10 +01:00

commitments

…

compat

…

config

fix(cli): reject unsafe byte sizes (#103100)

2026-07-09 23:02:31 +01:00

context-engine

…

crestodian

fix: keep bounded Unicode text valid across UTF-16 boundaries (#102823)

2026-07-09 15:21:23 +01:00

cron

fix(cron): keep bounded diagnostics UTF-16 safe (#102624)

2026-07-09 13:05:51 +01:00

daemon

fix(nodes): keep Gateway connections healthy and consistent (#103093)

2026-07-09 22:48:25 +01:00

docs

…

flows

fix(infra): converge legacy state migrations on archive collisions

2026-07-09 18:57:58 +05:30

gateway

fix(gateway): guard thinkingLevel re-validation against only relevant patch fields (#102866)

2026-07-10 01:01:33 +01:00

hooks

fix: keep bounded Unicode text valid across UTF-16 boundaries (#102823)

2026-07-09 15:21:23 +01:00

i18n

…

image-generation

…

infra

chore(pairing): retire vestigial node token plumbing and flatten cleanup claims (#103140)

2026-07-09 23:48:01 +01:00

interactive

…

link-understanding

…

llm

fix(oauth): remove base64 obfuscation from public OAuth client IDs (#96537)

2026-07-09 16:45:03 +01:00

logging

fix: redact diagnostics config with schema hints (#102426)

2026-07-09 20:49:21 +05:30

mcp

…

media

fix: keep bounded Unicode text valid across UTF-16 boundaries (#102823)

2026-07-09 15:21:23 +01:00

media-generation

…

media-understanding

fix(media): trust known CLI transcript files (#87393)

2026-07-09 15:35:38 +01:00

memory

…

memory-host-sdk

…

model-catalog

…

music-generation

…

node-host

chore(pairing): retire vestigial node token plumbing and flatten cleanup claims (#103140)

2026-07-09 23:48:01 +01:00

pairing

feat(watchos): connect directly to Gateway as a node (#102893)

2026-07-09 15:53:02 +01:00

plugin-sdk

fix(browser): keep remote CDP credentials out of responses (#103139)

2026-07-10 01:12:51 +01:00

plugin-state

…

plugins

fix(infra): preserve characters in truncated response snippets (#103136)

2026-07-09 23:43:26 +01:00

process

feat(onboard): guided CLI onboarding with live AI verification and classic fallback (#101880)

2026-07-09 12:40:55 +01:00

provider-runtime

…

proxy-capture

…

realtime-transcription

fix(realtime): preserve reconnect budget across flaps (#102348)

2026-07-09 12:08:50 +01:00

routing

fix(agents): isolated cron busts prompt prefix cache via per-run session id (#96686)

2026-07-09 16:51:04 +01:00

scripts

fix: stabilize SwiftFormat 0.62 lint (#103098)

2026-07-09 21:48:14 +01:00

secrets

perf(test): trim secrets and media setup

2026-07-09 19:32:12 -04:00

security

feat(nodes): add computer use (computer.act) on macOS nodes via Peekaboo (#102776)

2026-07-09 15:28:09 +01:00

sessions

fix(agents): isolated cron busts prompt prefix cache via per-run session id (#96686)

2026-07-09 16:51:04 +01:00

shared

refactor(gateway): retire the standalone node pairing store (#103120)

2026-07-09 22:58:03 +01:00

skills

fix(skills): preserve compact prompt descriptions (#88426)

2026-07-09 20:23:05 +01:00

state

Verify signed marketplace feed refresh (#98338)

2026-07-09 10:46:06 -07:00

status

…

talk

fix: scope task suggestions to supported surfaces (#102743)

2026-07-09 12:59:50 +01:00

tasks

…

test-helpers

…

test-utils

…

tools

…

trajectory

…

transcripts

…

tts

…

tui

test(ci): serialize real TUI PTY backends (#103006)

2026-07-09 17:55:39 +01:00

types

…

utils

fix(utils): fetchWithTimeout ignores caller-provided AbortSignal in RequestInit (#102951)

2026-07-10 00:39:18 +01:00

video-generation

…

web-fetch

…

web-search

…

wizard

fix(secrets): reject prototype-polluting mutation paths (#102840)

2026-07-10 00:17:31 +01:00

browser-lifecycle-cleanup.test.ts

…

browser-lifecycle-cleanup.ts

…

docker-build-cache.test.ts

…

docker-image-digests.test.ts

…

docker-setup.e2e.test.ts

…

dockerfile.test.ts

…

entry.compile-cache.test.ts

…

entry.compile-cache.ts

…

entry.respawn.test.ts

…

entry.respawn.ts

…

entry.root-help-fast-path.test.ts

…

entry.test.ts

…

entry.ts

…

entry.version-fast-path.test.ts

…

entry.version-fast-path.ts

…

extensionAPI.ts

…

global-state.ts

…

globals.test.ts

…

globals.ts

…

index.test.ts

…

index.ts

…

install-sh-version.test.ts

…

library.test.ts

…

library.ts

…

logger.test.ts

…

logger.ts

…

logging.ts

…

param-key.ts

…

plugin-activation-boundary.test.ts

…

poll-params.test.ts

…

poll-params.ts

…

polls.test.ts

…

polls.ts

…

runtime.test.ts

…

runtime.ts

fix: release startup migration lease before exit (#103157)

2026-07-10 00:53:10 +01:00

utils.test.ts

…

utils.ts

…

version.test.ts

…

version.ts

…