Zhang f37e45ecc1 Add prototype pollution guard to resolveConfigPath (#59694) ...

* config: block prototype keys in config path resolver

* config: guard config defaults fallback

2026-06-28 13:48:24 -07:00

..

acp

fix(messages): apply response usage to followups

2026-06-24 07:12:33 -07:00

agents

Replace SHA-1 with SHA-256 for config fingerprinting (#59695)

2026-06-28 13:38:24 -07:00

auto-reply

fix(agents): preserve structured tool result visible text (#97268)

2026-06-28 02:38:43 -07:00

bindings

…

bootstrap

…

channels

fix(telegram): recover stalled ingress spool claims (#97118)

2026-06-27 09:14:14 -07:00

chat

fix(canvas): stop self-closing embed from starting a greedy block match (#96449)

2026-06-24 23:46:20 +08:00

cli

Add marketplace feed refresh command (#96155)

2026-06-28 10:29:15 -07:00

commands

fix: preserve cron sessions with stale transcript metadata (#97495)

2026-06-28 12:29:37 -07:00

commitments

…

compat

…

config

fix: preserve cron sessions with stale transcript metadata (#97495)

2026-06-28 12:29:37 -07:00

context-engine

fix(context-engine): avoid quarantining read-only discovery factories (#96357)

2026-06-24 21:33:49 +08:00

crestodian

test: trim rescue channel fixture imports

2026-06-24 20:28:42 +01:00

cron

fix(cron): propagate cleanupCliLiveSessionOnRunEnd to isolated cron CLI branch (#97227)

2026-06-28 01:55:56 -07:00

daemon

fix(daemon): type Windows task env fixture

2026-06-23 17:21:05 +08:00

docs

…

flows

Doctor: expose gateway runtime findings (#97075)

2026-06-27 17:17:49 -07:00

gateway

fix(gateway): handle exec approvals persistence errors (#79861)

2026-06-28 13:31:18 -07:00

hooks

fix(imessage): stage remote media for plugin claims (#91803)

2026-06-27 19:36:21 -07:00

i18n

test(i18n): include Hindi and Russian registry locales

2026-06-26 15:23:10 -07:00

image-generation

fix(image-gen): bound image generation provider JSON response reads (#96495)

2026-06-26 07:08:30 -04:00

infra

fix(heartbeat): suppress stream-error placeholders (#97364)

2026-06-28 10:48:21 -07:00

interactive

…

link-understanding

fix(link-understanding): strip markdown links whose label contains brackets (#96476)

2026-06-27 05:43:11 +08:00

llm

fix(azure-openai-responses): bound SSE response reads via buildGuardedModelFetch (#97349)

2026-06-28 12:14:53 -07:00

logging

refactor(logging): share log file path primitives

2026-06-23 03:34:43 +08:00

mcp

Scope agent cron operations to the calling agent (#96883)

2026-06-26 21:41:14 -05:00

media

fix: scanned PDF pages reach chat vision models (#97354)

2026-06-27 23:01:08 -05:00

media-generation

refactor(media): share error normalization helper

2026-06-23 00:38:07 +08:00

media-understanding

Replace SHA-1 with SHA-256 for config fingerprinting (#59695)

2026-06-28 13:38:24 -07:00

memory

…

memory-host-sdk

refactor(memory): remove duplicate embedding input facade

2026-06-22 21:10:23 +08:00

model-catalog

…

music-generation

refactor(providers): reuse capability provider registry maps

2026-06-23 03:17:22 +08:00

node-host

fix(exec): gate versioned inline interpreters (#96216)

2026-06-24 12:22:49 -07:00

pairing

…

plugin-sdk

Fix Codex message-tool-only source reply completion (#95942)

2026-06-28 12:02:36 -07:00

plugin-state

refactor(sqlite): share numeric column decoding

2026-06-23 03:38:18 +08:00

plugins

fix(plugins): preserve mutable hook context (#97281)

2026-06-28 12:28:30 -07:00

process

refactor(process): remove unused orphan reconciliation API

2026-06-23 01:13:13 +08:00

provider-runtime

…

proxy-capture

chore: drop unrelated formatting churn

2026-06-24 13:42:39 -07:00

realtime-transcription

…

routing

fix(voice-call): emit canonical session keys (#89884)

2026-06-27 01:29:58 +01:00

scripts

fix: seed Slack thread context after reset (#97100)

2026-06-28 02:36:53 -04:00

secrets

refactor(secrets): share env var candidate deduplication

2026-06-23 08:04:35 +08:00

security

refactor(security): share tool policy layering

2026-06-23 02:40:29 +08:00

sessions

fix(voice-call): emit canonical session keys (#89884)

2026-06-27 01:29:58 +01:00

shared

Add prototype pollution guard to resolveConfigPath (#59694)

2026-06-28 13:48:24 -07:00

skills

fix: rebase clawhub install trust (#81364)

2026-06-26 18:33:19 +10:00

state

Persist hosted catalog snapshots in state (#95964)

2026-06-27 19:01:22 -07:00

status

fix(status): distinguish runtime-loaded plugins from installed inventory (#97479)

2026-06-28 10:44:56 -07:00

talk

refactor: add embedded run session target seam (#90439)

2026-06-23 10:08:29 -07:00

tasks

fix(tasks): harden ACP task cancellation (#97352)

2026-06-28 12:27:49 -07:00

test-helpers

…

test-utils

fix: route temp home env setup

2026-06-24 20:32:41 +01:00

tools

…

trajectory

test(trajectory): cover truncated usage preservation

2026-06-26 22:34:55 -05:00

transcripts

…

tts

…

tui

test: relax local TUI PTY startup wait

2026-06-26 23:08:14 -05:00

types

…

utils

fix(context): count fullwidth chars in token estimates (#96442)

2026-06-25 14:36:04 +08:00

video-generation

refactor(providers): reuse capability provider registry maps

2026-06-23 03:17:22 +08:00

web-fetch

…

web-search

…

wizard

feat(onboard): show setup timeline note (#97482)

2026-06-28 10:47:11 -07:00

browser-lifecycle-cleanup.test.ts

…

browser-lifecycle-cleanup.ts

…

docker-build-cache.test.ts

fix(sandbox): install supported node in common image

2026-06-24 22:54:00 +08:00

docker-image-digests.test.ts

…

docker-setup.e2e.test.ts

test(e2e): refresh docker setup fixtures

2026-06-22 02:32:05 +02:00

dockerfile.test.ts

ci(docker): publish releases to Docker Hub (#97122)

2026-06-28 11:15:34 -07:00

entry.compile-cache.test.ts

…

entry.compile-cache.ts

…

entry.respawn.test.ts

…

entry.respawn.ts

…

entry.root-help-fast-path.test.ts

…

entry.test.ts

perf(cli): speed up precomputed command help startup

2026-06-22 21:27:47 +08:00

entry.ts

refactor(cli): share precomputed help parsing

2026-06-23 07:35:59 +08:00

entry.version-fast-path.test.ts

…

entry.version-fast-path.ts

…

extensionAPI.ts

…

global-state.ts

…

globals.ts

…

index.test.ts

…

index.ts

…

install-sh-version.test.ts

…

library.test.ts

…

library.ts

…

logger.test.ts

…

logger.ts

…

logging.ts

…

param-key.ts

…

plugin-activation-boundary.test.ts

…

poll-params.test.ts

…

poll-params.ts

…

polls.test.ts

…

polls.ts

…

runtime.ts

…

ui-app-settings.agents-files-refresh.test.ts

…

utils.test.ts

…

utils.ts

fix(agents): truncate tool-display detail on code-point boundaries (#96958)

2026-06-27 08:10:06 +08:00

version.test.ts

…

version.ts

…