Peter Steinberger 6bb85f177f feat(onepassword): optional 1Password secrets broker plugin (#106133) ...

* feat(onepassword): add optional 1Password secrets broker plugin

Curated slug registry with per-item auto/approve/deny policy, plugin-approval
gating with expiring allow-always grants, SQLite audit history, onepassword
status/audit CLI, and a single-attempt op client (--cache=false, minimal env).

Closes #105924

* docs(plugins): refresh generated inventory count after rebase

* fix(onepassword): scope grants and field reads

* fix(onepassword): bound grant retention

* fix(onepassword): satisfy deadcode ratchet and hook allowlist contract

* fix(onepassword): honor live policy reloads

* refactor(onepassword): trim private exports

* test(onepassword): satisfy plugin boundaries

* test(onepassword): document temp directory boundary

2026-07-13 03:12:47 -07:00

..

acpx

refactor(extensions): remove dead QA and utility exports (#105914)

2026-07-13 00:34:46 -07:00

active-memory

test: enable noUncheckedIndexedAccess for extension tests (#105343)

2026-07-12 12:48:22 +01:00

admin-http-rpc

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

alibaba

fix(dashscope): apply request policy to video requests (#102094)

2026-07-12 11:11:15 -04:00

amazon-bedrock

test: enable noUncheckedIndexedAccess for extension tests (#105343)

2026-07-12 12:48:22 +01:00

amazon-bedrock-mantle

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

anthropic

fix(agents): honor claude-cli contextTokens setting (#93198)

2026-07-13 01:58:44 -07:00

anthropic-vertex

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

arcee

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

azure-speech

fix(azure-speech): add timeout to voices list request (#102984)

2026-07-13 02:25:13 -07:00

bonjour

feat(tooling): enforce noUncheckedIndexedAccess in the extensions lane (NUIA phase 4) (#105132)

2026-07-12 09:17:31 +01:00

brave

refactor(brave): remove obsolete testing alias (#105486)

2026-07-12 17:16:47 +02:00

browser

refactor(security): centralize timing-safe secret comparisons (#105989)

2026-07-12 22:37:21 -07:00

byteplus

test: enable noUncheckedIndexedAccess for extension tests (#105343)

2026-07-12 12:48:22 +01:00

canvas

feat(plugin-sdk): add shared HTML escaping seam (#105975)

2026-07-12 22:33:53 -07:00

cerebras

feat(tooling): enforce noUncheckedIndexedAccess in the extensions lane (NUIA phase 4) (#105132)

2026-07-12 09:17:31 +01:00

chutes

test: enable noUncheckedIndexedAccess for extension tests (#105343)

2026-07-12 12:48:22 +01:00

clawrouter

refactor(clawrouter): localize default base URL (#105474)

2026-07-12 16:47:15 +02:00

clickclack

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

cloudflare-ai-gateway

refactor(cloudflare-ai-gateway): remove obsolete testing alias (#105394)

2026-07-12 15:27:41 +02:00

codex

style(codex): restore event projector formatting

2026-07-13 09:48:42 +01:00

cohere

feat(tooling): enforce noUncheckedIndexedAccess in the extensions lane (NUIA phase 4) (#105132)

2026-07-12 09:17:31 +01:00

comfy

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

copilot

refactor(extensions): remove dead QA and utility exports (#105914)

2026-07-13 00:34:46 -07:00

copilot-proxy

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

crabbox

refactor(extensions): remove dead QA and utility exports (#105914)

2026-07-13 00:34:46 -07:00

deepgram

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

deepinfra

chore(tooling): enforce formatting and refresh TypeScript checks (#104239)

2026-07-11 01:09:51 -07:00

deepseek

test: enable noUncheckedIndexedAccess for extension tests (#105343)

2026-07-12 12:48:22 +01:00

device-pair

feat(mobile): default pairing to full node access (#105928)

2026-07-13 02:30:45 -07:00

diagnostics-otel

feat(tooling): enforce noUncheckedIndexedAccess in the extensions lane (NUIA phase 4) (#105132)

2026-07-12 09:17:31 +01:00

diagnostics-prometheus

refactor(plugins): trim long-tail dead exports (#106230)

2026-07-13 02:34:06 -07:00

diffs

feat(plugin-sdk): add shared HTML escaping seam (#105975)

2026-07-12 22:33:53 -07:00

diffs-language-pack

refactor(plugins): trim long-tail dead exports (#106230)

2026-07-13 02:34:06 -07:00

discord

refactor: consolidate bounded concurrency on p-limit and p-map (#106002)

2026-07-13 01:53:28 -07:00

document-extract

feat(tooling): enforce noUncheckedIndexedAccess in the extensions lane (NUIA phase 4) (#105132)

2026-07-12 09:17:31 +01:00

duckduckgo

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

elevenlabs

refactor(transcription): remove obsolete testing aliases (#105406)

2026-07-12 15:43:24 +02:00

exa

chore(tooling): enforce formatting and refresh TypeScript checks (#104239)

2026-07-11 01:09:51 -07:00

fal

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

featherless

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

feishu

refactor(plugins): trim long-tail dead exports (#106230)

2026-07-13 02:34:06 -07:00

file-transfer

test: enable noUncheckedIndexedAccess for extension tests (#105343)

2026-07-12 12:48:22 +01:00

firecrawl

feat(firecrawl): add keyless Firecrawl Search (Free) provider + richer firecrawl_search options (#97078)

2026-07-12 21:04:43 -07:00

fireworks

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

github-copilot

fix(github-copilot): bound Copilot token exchange fetch timeout (#104488)

2026-07-12 15:24:39 +01:00

gmi

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

google

fix(google): bound realtime browser token requests (#106034)

2026-07-13 01:36:19 -07:00

google-meet

refactor: consolidate duration parsing and formatting (#105988)

2026-07-12 23:38:22 -07:00

googlechat

refactor(plugins): trim long-tail dead exports (#106230)

2026-07-13 02:34:06 -07:00

gradium

fix(gradium): restrict TTS credential egress (#105169)

2026-07-12 09:43:22 +01:00

groq

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

huggingface

test: enable noUncheckedIndexedAccess for extension tests (#105343)

2026-07-12 12:48:22 +01:00

image-generation-core

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

imessage

refactor(channels): share plugin contract scaffolds (#105838)

2026-07-13 01:51:32 -07:00

inworld

test: enable noUncheckedIndexedAccess for extension tests (#105343)

2026-07-12 12:48:22 +01:00

irc

refactor(channels): share plugin contract scaffolds (#105838)

2026-07-13 01:51:32 -07:00

kilocode

chore(tooling): enforce formatting and refresh TypeScript checks (#104239)

2026-07-11 01:09:51 -07:00

kimi-coding

chore(tooling): enforce formatting and refresh TypeScript checks (#104239)

2026-07-11 01:09:51 -07:00

line

fix(line): keep group allowlists scoped (#106056)

2026-07-13 01:18:31 -07:00

litellm

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

llama-cpp

test: enable noUncheckedIndexedAccess for extension tests (#105343)

2026-07-12 12:48:22 +01:00

llm-task

test: eliminate unchecked TypeScript casts (#105804)

2026-07-12 18:08:26 -07:00

lmstudio

feat(tooling): enforce noUncheckedIndexedAccess in the extensions lane (NUIA phase 4) (#105132)

2026-07-12 09:17:31 +01:00

lobster

refactor(lobster): drop stale Ajv cache shim (#106179)

2026-07-13 01:31:16 -07:00

logbook

test: enable noUncheckedIndexedAccess for extension tests (#105343)

2026-07-12 12:48:22 +01:00

longcat

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

matrix

refactor(plugins): trim long-tail dead exports (#106230)

2026-07-13 02:34:06 -07:00

mattermost

refactor(channels): share plugin contract scaffolds (#105838)

2026-07-13 01:51:32 -07:00

media-understanding-core

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

memory-core

refactor(deadcode): trim memory-core type exports (#106263)

2026-07-13 03:04:08 -07:00

memory-lancedb

test: eliminate unchecked TypeScript casts (#105804)

2026-07-12 18:08:26 -07:00

memory-wiki

refactor(extensions): remove dead QA and utility exports (#105914)

2026-07-13 00:34:46 -07:00

meta

refactor(meta): remove unused stream helper export (#105443)

2026-07-12 16:09:01 +02:00

microsoft

fix(tts): bound voice-list requests (#102865)

2026-07-11 00:55:06 -07:00

microsoft-foundry

feat(tooling): enforce noUncheckedIndexedAccess in the extensions lane (NUIA phase 4) (#105132)

2026-07-12 09:17:31 +01:00

migrate-claude

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

migrate-hermes

feat(tooling): enforce noUncheckedIndexedAccess in the extensions lane (NUIA phase 4) (#105132)

2026-07-12 09:17:31 +01:00

minimax

fix(minimax): apply request policy to media generation requests (#102072)

2026-07-12 11:29:57 -04:00

mistral

refactor(transcription): remove obsolete testing aliases (#105406)

2026-07-12 15:43:24 +02:00

moonshot

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

msteams

refactor(plugins): trim long-tail dead exports (#106230)

2026-07-13 02:34:06 -07:00

mxc

feat(mxc): add Windows MXC sandbox backend (#97086)

2026-07-12 23:07:25 -07:00

nextcloud-talk

refactor(channels): share plugin contract scaffolds (#105838)

2026-07-13 01:51:32 -07:00

nostr

refactor(nostr): trim private test seams (#105756)

2026-07-13 08:03:54 +08:00

novita

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

nvidia

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

oc-path

fix(ci): import oc-path limits from their defining module in security test

2026-07-13 02:47:57 -07:00

ollama

refactor(extensions): remove dead QA and utility exports (#105914)

2026-07-13 00:34:46 -07:00

onepassword

feat(onepassword): optional 1Password secrets broker plugin (#106133)

2026-07-13 03:12:47 -07:00

open-prose

chore(tooling): enforce formatting and refresh TypeScript checks (#104239)

2026-07-11 01:09:51 -07:00

openai

fix(openai): preserve authored openai-completions through provider normalization (#105539)

2026-07-12 12:37:33 -07:00

opencode

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

opencode-go

refactor: use native abort signal composition (#105947)

2026-07-12 22:39:43 -07:00

openrouter

feat(onboarding): add provider sign-in (#104502)

2026-07-11 13:00:17 -07:00

openshell

refactor: consolidate bounded concurrency on p-limit and p-map (#106002)

2026-07-13 01:53:28 -07:00

parallel

refactor(plugins): trim long-tail dead exports (#106230)

2026-07-13 02:34:06 -07:00

perplexity

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

phone-control

refactor: consolidate duration parsing and formatting (#105988)

2026-07-12 23:38:22 -07:00

pixverse

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

policy

refactor(plugins): trim long-tail dead exports (#106230)

2026-07-13 02:34:06 -07:00

qa-channel

refactor(extensions): remove dead QA and utility exports (#105914)

2026-07-13 00:34:46 -07:00

qa-lab

fix(transcripts): stop live capture when the agent run is canceled (#104123)

2026-07-13 03:11:25 -07:00

qa-matrix

refactor(extensions): remove dead QA and utility exports (#105914)

2026-07-13 00:34:46 -07:00

qianfan

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

qqbot

refactor(plugins): trim long-tail dead exports (#106230)

2026-07-13 02:34:06 -07:00

qwen

fix(dashscope): apply request policy to video requests (#102094)

2026-07-12 11:11:15 -04:00

raft

refactor(security): centralize timing-safe secret comparisons (#105989)

2026-07-12 22:37:21 -07:00

runway

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

searxng

test: enable noUncheckedIndexedAccess for extension tests (#105343)

2026-07-12 12:48:22 +01:00

senseaudio

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

sglang

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

signal

refactor(plugins): trim long-tail dead exports (#106230)

2026-07-13 02:34:06 -07:00

slack

refactor(slack): use Web API response contracts (#106234)

2026-07-13 02:26:49 -07:00

sms

refactor(plugins): trim long-tail dead exports (#106230)

2026-07-13 02:34:06 -07:00

stepfun

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

synology-chat

refactor(channels): share plugin contract scaffolds (#105838)

2026-07-13 01:51:32 -07:00

synthetic

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

talk-voice

…

tavily

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

telegram

refactor(channels): share plugin contract scaffolds (#105838)

2026-07-13 01:51:32 -07:00

tencent

refactor(tencent): localize preview model reference (#105482)

2026-07-12 17:03:26 +02:00

test-support

…

thread-ownership

test: enable noUncheckedIndexedAccess for extension tests (#105343)

2026-07-12 12:48:22 +01:00

tlon

fix(tlon): bound stalled inbound and outbound media header waits (#104132)

2026-07-12 17:30:35 -07:00

together

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

tokenjuice

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

tts-local-cli

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

twitch

test: eliminate unchecked TypeScript casts (#105804)

2026-07-12 18:08:26 -07:00

vault

feat(tooling): enforce noUncheckedIndexedAccess in the extensions lane (NUIA phase 4) (#105132)

2026-07-12 09:17:31 +01:00

venice

test: enable noUncheckedIndexedAccess for extension tests (#105343)

2026-07-12 12:48:22 +01:00

vercel-ai-gateway

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

video-generation-core

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

vllm

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

voice-call

refactor(plugins): trim long-tail dead exports (#106230)

2026-07-13 02:34:06 -07:00

volcengine

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

voyage

fix(memory): harden embedding batch workflows (#103472)

2026-07-11 16:43:58 -07:00

vydra

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

web-readability

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

webhooks

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

whatsapp

refactor(deadcode): trim whatsapp session config exports (#106256)

2026-07-13 02:53:15 -07:00

workboard

refactor(extensions): remove dead QA and utility exports (#105914)

2026-07-13 00:34:46 -07:00

workspaces

refactor(plugins): trim long-tail dead exports (#106230)

2026-07-13 02:34:06 -07:00

xai

refactor(plugins): trim long-tail dead exports (#106230)

2026-07-13 02:34:06 -07:00

xiaomi

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

zai

fix(providers): load trusted external thinking policies

2026-07-12 08:40:22 +08:00

zalo

refactor(channels): share plugin contract scaffolds (#105838)

2026-07-13 01:51:32 -07:00

zalouser

refactor(zalouser): share offset-preserving text chunk ranges (#105842)

2026-07-12 23:46:16 -07:00

.npmignore

…

AGENTS.md

…

CLAUDE.md

…

music-generation-providers.live.test.ts

…

tsconfig.package-boundary.base.json

…

tsconfig.package-boundary.paths.json

refactor(infra): consolidate retry scheduling (#105789)

2026-07-12 19:58:55 -07:00

video-generation-providers.live.test.ts

…