Commit Graph

Select branches

Hide Pull Requests

main

Mono Color

• b2168bf349 ci(docker): add hadolint + shellcheck for container build inputs Ben 2026-05-21 14:20:54 +10:00
• 440147ebea test(docker): stabilize Phase 0 baseline harness Ben 2026-05-21 14:17:36 +10:00
• a18f69eb55 test(docker): apply 180s timeout to docker harness tests Ben 2026-05-21 14:03:13 +10:00
• 6e6acdea2a test(docker): lock baseline behavior for Phase 0 harness Ben 2026-05-21 12:53:05 +10:00
• 08302135b6 test(docker): add conftest fixtures for docker harness Ben 2026-05-21 12:52:51 +10:00
• d36461d806 docs(plans): add s6-overlay supervision plan (v3) Ben 2026-05-21 12:39:05 +10:00
• 00ec0b617c feat(tts): add register_tts_provider() plugin hook (closes #30398) kshitijk4poor 2026-05-22 17:58:07 +05:30
• 782681f904 fix(google_chat): harden oauth credential persistence with atomic private writes (#24788) Zyrix 2026-05-25 03:58:52 +03:00
• bf2f3b2469 chore(release): map vgocoder for PR #24758 salvage teknium1 2026-05-24 17:57:50 -07:00
• dcc163ee28 fix(security): redact credentials before persistence in session capture vgocoder 2026-05-24 17:57:50 -07:00
• 243ebc7a61 Protect dashboard OAuth credentials with the same file-safety guarantees as other auth paths JunghwanNA 2026-04-16 21:10:05 +09:00
• 55987818b6 chore(release): map kronexoi for PR #30553 salvage teknium1 2026-05-24 17:46:19 -07:00
• 4694524dee fix(security): restrict write access to Anthropic OAuth credential store kronexoi 2026-05-22 21:39:11 +03:00
• be89c2e4fa ci(supply-chain): anchor install-hook regex at repo root (#31744) Teknium 2026-05-24 17:46:08 -07:00
• 223a3971c0 fix(security): close TOCTOU window when saving Claude Code OAuth credentials (#21152) Guts 2026-05-25 03:45:12 +03:00
• bba76f3dcd fix(file-safety): deny reads of Google OAuth tokens (#30972) Hinotobi 2026-05-25 08:45:03 +08:00
• fa957c06cf fix(security): add missing credential paths to write denylist (#27217) flamiinngo 2026-05-25 01:44:53 +01:00
• 9c08070703 test(cli): update resume usage-hint assertion for numbered selection Teknium 2026-05-24 15:57:26 -07:00
• c043c86bd7 i18n+tests: add list_item_numbered, list_footer_numbered, out_of_range for 15 locales Teknium 2026-05-24 15:52:34 -07:00
• 87580076fd chore(release): map 490408354@qq.com to daizhonggeng (PR #9020) Teknium 2026-05-24 15:49:10 -07:00
• fef733d56b feat: support numbered resume selection in cli and gateway daizhonggeng 2026-04-13 12:33:13 +00:00
• 4f4e337c47 fix(file-safety): write-deny pairing/ directory to prevent approved-list injection AhmetArif0 2026-05-22 15:07:37 +03:00
• 6c44d537cc fix(cli): show full session titles in /resume list LeonSGP43 2026-04-23 02:17:35 +08:00
• 8e68426981 fix(cli): add inline --yes/now skip for destructive slash commands (#30768) Teknium 2026-05-24 15:28:15 -07:00
• 99a7ecc335 chore(release): map leeseoki0 for PR #31315 salvage teknium1 2026-05-24 15:48:13 -07:00
• ce529d6072 fix(kanban): scratch tasks must not inherit board.default_workdir (#28818) leeseoki0 2026-05-24 15:48:13 -07:00
• 23115b5c0f fix(kanban): restrict managed-scratch roots to workspaces/ dirs only briandevans 2026-05-23 11:09:37 -07:00
• 80ad1609c8 fix(kanban): refuse to rmtree workspace_path outside managed scratch root (#28818) briandevans 2026-05-19 09:15:06 -07:00
• 396ee69032 fix(gateway): seed plugin extras before is_connected gate (#31703) Teknium 2026-05-24 15:44:26 -07:00
• 514f5020c7 fix(debug): redact BlueBubbles webhook secrets helix4u 2026-05-24 16:04:39 -06:00
• 13b85bc646 feat(config): document resume-recap tuning keys in DEFAULT_CONFIG Teknium 2026-05-24 15:09:57 -07:00
• 5dc10ec3ba test(cli): reconcile resume-recap tests with skip-tool-only default and compression-chain helper Teknium 2026-05-24 15:09:08 -07:00
• 27c4ba98c3 chore(release): map zhangsamuel12@gmail.com to SamuelZ12 (PR #7480) Teknium 2026-05-24 15:06:15 -07:00
• cdf4876bfe fix(cli): skip tool-call-only entries in resume recap, expose limits as config options ygd58 2026-04-01 12:28:19 +02:00
• 961e34a1d3 fix: show recap after in-session resume Samuel Zhang 2026-04-10 21:10:05 -04:00
• 16eed4f91b test(telegram): add brand-new-topic regression for #31086 Teknium 2026-05-24 04:32:01 -07:00
• bdc9b0eff5 fix(telegram): preserve new DM topic lanes Maxim Esipov 2026-05-19 09:58:38 +03:00
• eea9553a9c fix(anthropic): skip mcp_ prefix on outgoing tool schemas when already prefixed Teknium 2026-05-24 15:18:59 -07:00
• 2f91a8406c fix(agent): only strip mcp_ prefix for OAuth-injected tools (GH-25255) HKPA 2026-05-14 00:38:35 +02:00
• 476c897439 fix(telegram): gate send() on send-path health after reconnect storms (#31165) Yuan Li 2026-05-24 04:50:44 -07:00
• 54e61f9331 fix(matrix,gateway): Matrix E2EE installs full dep set; plugins respect is_connected Teknium 2026-05-24 04:36:24 -07:00
• 88834baf50 chore: map soju06@users.noreply.github.com for PR #26054 salvage teknium1 2026-05-24 04:38:03 -07:00
• 6212e9ade8 fix(error-classifier): treat 5xx request-validation errors as non-retryable Soju 2026-05-15 11:26:58 +09:00
• 775a17284f fix(transport): strip Hermes-internal scaffolding keys before chat.completions Soju 2026-05-15 11:26:47 +09:00
• 7ab1677362 feat(security): on-demand supply-chain audit via OSV.dev (#31460) Teknium 2026-05-24 15:15:16 -07:00
• 8065e70274 fix(agent): abort on HTTP 402 after pool rotation and fallback fail (#31443) Teknium 2026-05-24 15:14:13 -07:00
• 5b52e26d18 fix(gateway): swallow transient Telegram TimedOut at loop level teknium1 2026-05-24 04:32:53 -07:00
• 3d66787a04 fix(vision): route auxiliary.vision.provider=openai to api.openai.com, skip text-only main (#31452) Teknium 2026-05-24 15:01:28 -07:00
• d9ec90585c test(dashboard): send loopback headers for WebSocket sidecar test Hinotoi Agent 2026-05-23 17:07:12 +08:00
• 2e66eefbc3 fix(dashboard): validate WebSocket Host and Origin hinotoi-agent 2026-05-22 12:29:48 +08:00
• 1579a6f4a9 docs: clarify xurl auth HOME in Docker Stellar鱼 2026-05-24 23:50:31 +08:00
• 186bf25cb1 test(guardrail): assert halt message reaches stream_delta_callback Teknium 2026-05-24 04:33:51 -07:00
• 38b8d0da85 fix: emit guardrail halt message to client before closing stream annguyenNous 2026-05-23 14:32:25 +07:00
• 889903f0fa fix(tests): align CI tests with recent security hardening (#31470) Teknium 2026-05-24 06:54:16 -07:00
• 3bace071bf fix(state): restrict sensitive store file permissions Hinotoi-agent 2026-05-24 04:54:49 -07:00
• f378f00bfb fix(feishu): validate verification token before reflecting url_verification challenge m0n3r0 2026-05-24 04:50:51 -07:00
• 5e6749fbf3 chore(release): map m0n3r0 for PR #29629 salvage teknium1 2026-05-24 04:47:20 -07:00
• 15aa6884a2 fix(webhook): use 403 not 500 for missing-secret rejection teknium1 2026-05-24 04:47:06 -07:00
• dbf73e90fa fix: fail closed for webhook routes without secrets m0n3r0 2026-05-21 03:56:31 +00:00
• bbf02c3224 fix(gateway): validate Svix webhook signatures (#30200) BaxBit 2026-05-24 04:45:13 -07:00
• ee002e7fc5 fix(dashboard): require auth for plugin rescan (#27340) Jiaming Guo 2026-05-24 19:45:07 +08:00
• 5acaeba2bb fix(mcp): raise ImportError instead of NameError when stdio SDK missing (#31450) Teknium 2026-05-24 04:44:59 -07:00
• 6cafcf9c77 test(streaming): pin partial-stream-stub finish_reason + continuation contract xxxigm 2026-05-23 22:15:26 +07:00
• 20b3703a42 fix(conversation-loop): tailor length-continuation prompt for partial stream xxxigm 2026-05-23 22:05:55 +07:00
• 9140be7c22 fix(streaming): emit finish_reason=length on text-only partial-stream stub xxxigm 2026-05-23 22:05:14 +07:00
• 60d20a37c9 fix(acp): only deliver final_response after streaming when transformed teknium1 2026-05-24 04:19:34 -07:00
• 26088ca669 chore: map kenyon1977@gmail.com for PR #29119 salvage teknium1 2026-05-24 04:08:45 -07:00
• b9f533af0a test(gateway): regression for plugin-transformed response after streaming teknium1 2026-05-24 04:08:11 -07:00
• 5cb21e3fb5 fix(gateway): edit streamed message instead of sending duplicate when response_transformed kenyonxu 2026-05-20 13:32:40 +08:00
• a4ceead796 fix(gateway): propagate response_transformed flag through run_sync return dict kenyonxu 2026-05-20 13:14:29 +08:00
• 8edeebe6d7 fix: propagate response_transformed flag — plugin hook output survives streaming suppression kenyonxu 2026-05-20 12:33:59 +08:00
• 7eb6c7f489 fix(acp): deliver final_response after streaming — transform_llm_output hook now visible kenyonxu 2026-05-20 11:43:43 +08:00
• 197f63f454 fix(feishu): require webhook auth secret and honor config extras (#30746) Teknium 2026-05-24 04:27:28 -07:00
• bdb97b8573 fix(feishu): enforce auth and chat binding for approval buttons (#30744) Teknium 2026-05-24 04:27:17 -07:00
• 485292ac7d fix(feishu): authorize interactive exec approval callbacks (#30739) Teknium 2026-05-24 04:26:57 -07:00
• be27bfed01 security: harden API server key placeholder handling (#30738) Teknium 2026-05-24 04:25:32 -07:00
• 2df2f9190b fix(docker): keep dashboard side-process loopback by default (#30740) Teknium 2026-05-24 04:25:28 -07:00
• 4ca77f1059 Harden msgraph webhook auth requirements (#30169) Teknium 2026-05-24 04:25:20 -07:00
• 3e78e353d7 fix(qqbot): authorize approval button interactions by session owner (#30737) Teknium 2026-05-24 04:25:12 -07:00
• e4a1220f83 security: restrict default webhook toolset capabilities (#30745) Teknium 2026-05-24 04:24:54 -07:00
• c3caca6584 fix(gateway): remove discord role allowlist auth bypass (#30742) Teknium 2026-05-24 04:24:49 -07:00
• 1f897b0dc9 fix(gateway): stop enabling dingtalk allow-all during setup (#30743) Teknium 2026-05-24 04:24:44 -07:00
• 9732559864 fix(security): restrict dashboard websockets to loopback clients (#30741) Teknium 2026-05-24 04:24:40 -07:00
• bc3f1f4f34 feat(secrets/bitwarden): EU Cloud + self-hosted server URL support (#31378) Teknium 2026-05-24 02:19:57 -07:00
• c9b3eeabdc fix(cli): decouple tool_progress=verbose from global DEBUG logging (#31379) Teknium 2026-05-24 02:19:20 -07:00
• 5848174374 fix(wecom): guard flush task against cancel-delivery race to prevent message loss AhmetArif0 2026-05-23 13:12:53 +03:00
• 1bed4e8eed fix(gateway): drop text snippet from debounce debug log (CodeQL) Teknium 2026-05-24 01:28:53 -07:00
• 51bb8c0a9e chore: map pnascimento9596@gmail.com for PR #31235 salvage Teknium 2026-05-23 23:11:37 -07:00
• 7abd62719b gateway: debounce queued text follow-ups Paulo Nascimento 2026-05-23 21:32:19 -04:00
• 21db250034 fix(wecom-callback): retry send with fresh token on errcode 40001/42001 AhmetArif0 2026-05-23 12:59:27 +03:00
• d3c167b644 fix(profiles): cross-profile soft guard on file-write tools + system-prompt hint (#31290) Teknium 2026-05-24 00:38:17 -07:00
• b207dc28b3 feat(kanban): --ids bulk promote + AUTHOR_MAP entry for #29464 Teknium 2026-05-23 23:00:35 -07:00
• d46adad22f feat(cli): kanban promote verb for manual todo->ready recovery David Murray 2026-05-20 13:30:50 -07:00
• 421ab81052 fix(cli): reuse canonical root model key normalization in load_cli_config novax635 2026-05-23 21:31:18 +03:00
• 2442a0c281 fix(background-review): allow pinned skills to be improved Teknium 2026-05-23 22:36:28 -07:00
• a627981a65 fix(tui): stop slash dropdown from chopping last char of /goal (#31311) brooklyn! 2026-05-24 00:12:55 -05:00
• 2666009ccc docs: dedicated Nous Portal integration page and setup guide (#31296) Teknium 2026-05-23 21:07:58 -07:00
• 2b10024ee8 test(display): cover failure-suffix rendering + update scrollback test Teknium 2026-05-23 20:56:18 -07:00
• ffde8b7b09 feat(cli): show todo progress as done/total fraction Albert.Zhou 2026-05-23 20:54:37 -07:00
• 094d732378 fix(cli): surface tool failures with specific error messages Albert.Zhou 2026-05-23 20:54:17 -07:00