9cbc13015c
test(qa): prove plugin tool ownership in gateway flow ( #118958 )
2026-08-04 05:05:44 +08:00
6fa63a4e67
fix(imessage): honor explicitly enabled accounts during startup ( #118944 )
2026-08-03 13:58:42 -07:00
9e5220cf2c
fix(signal): normalize accounts during noninteractive setup ( #118932 )
2026-08-03 13:57:53 -07:00
be9a34a79d
fix(msteams): enable channels for federated environment credentials ( #118931 )
2026-08-03 13:57:08 -07:00
665b47832a
fix(openai): enforce final transcript bounds before callback delivery ( #118928 )
2026-08-03 13:56:21 -07:00
96ae5fad79
test(qa): add memory redaction boundary coverage ( #118916 )
2026-08-04 04:46:10 +08:00
38aa704a31
fix(kilocode): model discovery overstates the usable context window ( #118868 )
...
The Kilocode gateway publishes an OpenRouter-shaped catalog in which
`context_length` is the catalog-wide ceiling while `top_provider.context_length`
describes the primary provider that actually serves the request. Discovery read
only the catalog-wide value, so models whose primary provider offers a smaller
window were registered with a context window larger than requests can use.
Prefer the primary-provider window and fall back to the catalog-wide value,
matching the precedence already owned by
`extensions/openrouter/provider-catalog.ts`.
Completion-token handling is left alone on purpose: the live Kilocode catalog
exposes no top-level `max_completion_tokens` or `max_output_tokens`, so the
existing `top_provider` read is already the only available source.
2026-08-03 15:44:46 -05:00
682f60ce56
fix(config): reject unsupported diagnostics otel grpc ( #93087 )
2026-08-03 16:28:08 -04:00
990fdcf6fd
fix(providers): recognize configured media credentials across provider boundaries ( #118761 )
...
* fix(providers): honor configured media credentials across owner boundaries
* test(providers): align configured auth fixtures and derived SDK surfaces
* fix(providers): enforce shared DashScope media credential policy
2026-08-03 13:26:31 -07:00
25aa29d7a1
refactor: delete dead post-landing plugin/hooks scaffolding ( #118920 )
...
* refactor: delete dead post-landing plugin/hooks scaffolding
* fix(security): resolve fast-uri and undici HIGH advisories
2026-08-04 04:26:22 +08:00
084833b324
fix(search): propagate cancellation through provider-owned requests ( #118895 )
2026-08-03 12:46:17 -07:00
f9d9d1225a
refactor(channels): own the lifecycle status contract in SDK patch factories ( #118795 )
...
* refactor(sdk): add channel lifecycle patch factories
* refactor(channels): adopt lifecycle patches in a-m
* refactor(channels): adopt lifecycle patches in n-z
* refactor(runtime): lifecycle-own ambient registries
* test(slack): assert lifecycle factory fields
* fix(sdk): preserve lifecycle patch extras types
* test(zalouser): widen lifecycle status sink
* test(irc): avoid shadowed status patch
* fix(zalo): reuse account-agnostic media route
* fix(gateway): accept explicit channel ready recovery
* test(qa): assert terminal Slack block fact
* test(qa): restore Slack blocked lifecycle scenario
* test(gateway): lock explicit lifecycle recovery contract
2026-08-03 12:39:48 -07:00
c1686c9a84
fix(feishu): fence external collaboration tool results ( #118877 )
...
* fix(feishu): fence external collaboration tool results
* test(feishu): narrow bitable result content safely
2026-08-03 12:36:39 -07:00
ef478c14b1
test(matrix): isolate runtime state ( #118892 )
2026-08-03 12:28:49 -07:00
b026d3572e
fix(slack): prevent stalled presence polling from hanging shutdown ( #117478 )
...
* fix(slack): prevent presence polling from hanging shutdown
* fix(slack): honor presence polling rate limits
* fix(slack): preserve presence polling cursor on rate limits
2026-08-03 12:01:52 -07:00
2b3351a743
fix(browser): protect private observation media and Canvas trust boundaries ( #118775 )
...
* fix(browser): protect observation screenshots and Canvas trust boundaries
* test(canvas): preserve actual image helper result types
2026-08-03 11:33:27 -07:00
137462ad48
fix(lmstudio): honor embedding JIT and canonical model identity ( #117320 )
...
* codex/qa400-lmstudio-jit-canonical-identity:
fix(lmstudio): resolve JIT embedding variants
fix(lmstudio): preserve embedding preload and model identity
2026-08-04 02:22:51 +08:00
21a767639f
fix(plugins): unify HTTP route conflict handling ( #118203 )
...
* fix(plugins): unify HTTP route conflict handling
* fix(plugins): preserve source-less route replacement
* test(line): type webhook route source
2026-08-04 02:15:00 +08:00
7c3f8b0a28
fix(lmstudio): resolve JIT embedding variants
2026-08-04 02:11:26 +08:00
f1e7e20bad
fix(lmstudio): preserve embedding preload and model identity
2026-08-04 02:11:26 +08:00
b9e5b25e31
fix(openai): commit eligible final realtime transcription audio safely ( #118782 )
2026-08-03 10:51:48 -07:00
f63f2fd3db
fix(reef): restrict management commands to owners [AI] ( #118578 )
...
* fix(reef): require owner for management commands
* fix(reef): preserve general command access
* fix: preserve explicit owner authority
* fix(discord): separate voice admission from ownership
* docs(reef): explain owner command recovery
* docs(reef): clarify owner recovery paths
2026-08-03 23:18:05 +05:30
8eaf917efb
fix(google): honor Cloud SDK credential location and Vertex billing project ( #118745 )
2026-08-03 10:47:13 -07:00
10b0b7b7c4
fix(bedrock): preserve private embedding endpoints and AWS routing policy ( #118744 )
...
* fix(bedrock): honor private embedding endpoints without overriding AWS routing
* fix(bedrock): preserve canonical secure endpoint modes and private overrides
2026-08-03 10:39:02 -07:00
03bec9d438
fix(voice): make signed callback replay reservations durable and retryable ( #118754 )
2026-08-03 10:35:32 -07:00
830ab164ef
fix(openrouter): isolate custom proxy credentials and transport security ( #118773 )
...
* fix(openrouter): confine custom endpoint credentials and transport policy
* test(openrouter): preserve typed fetch arguments in proxy fixtures
2026-08-03 10:32:06 -07:00
616b0c9408
fix(memory): prevent embedding fallback credential cross-provider leaks ( #118759 )
...
* fix(memory): isolate embedding fallback provider credentials
* test(memory): preserve real embedding fallback owner in index fixtures
2026-08-03 10:30:38 -07:00
3fa9cc209b
fix(agents): preserve tainted memory provenance in provider tool bridges ( #118760 )
2026-08-03 10:12:10 -07:00
d857c8eebc
fix(ollama): scope embedding credentials to the selected host ( #118753 )
2026-08-03 10:09:12 -07:00
95e17d6c99
fix(memory): isolate LanceDB embedding credentials per agent lifecycle ( #118767 )
2026-08-03 10:00:08 -07:00
d2c8fd2e71
fix(deepgram): preserve endpointed voice turns ( #117663 )
2026-08-04 00:46:14 +08:00
430fca67ff
fix(reply): preserve streamed Telegram replies on failure
...
Preserve already-visible Telegram partial replies when a later run failure occurs. Finalize the same draft with the terminal notice while keeping the reply operation in run_failed state.
Co-authored-by: Dinesh Suthar <dineshsld20@gmail.com >
Co-authored-by: Ayaan Zaidi <hi@obviy.us >
2026-08-04 01:38:59 +09:00
d5887c110e
fix(diffs): restore Windows browser discovery roots ( #111257 )
...
Co-authored-by: Vincent Koc <vincentkoc@ieee.org >
2026-08-04 00:22:24 +08:00
0a01099530
fix(memory): honor keyed agents in standalone operations ( #118310 )
...
Co-authored-by: Tak Hoffman <781889+Takhoffman@users.noreply.github.com >
2026-08-03 11:18:39 -05:00
7fc1089d95
fix(slack): unify slash command registration ownership ( #118735 )
...
Co-authored-by: Peter Steinberger <steipete@macos.shared >
2026-08-03 09:13:45 -07:00
ed8881c308
fix(channels): deny unauthorized Discord and Telegram binding access ( #118704 )
...
* fix(channels): deny unauthorized Discord and Telegram binding access
* test(discord): remove retired access-group config key
2026-08-03 08:37:00 -07:00
7fabb55648
fix(channels): generate catalog from package manifests ( #118097 )
2026-08-03 23:17:09 +08:00
bbd95cc410
fix(zalouser): distinguish probe timeout from auth failure ( #111336 )
...
Co-authored-by: Vincent Koc <vincentkoc@ieee.org >
Co-authored-by: NIO <nocodet@mail.com >
2026-08-03 23:16:14 +08:00
09e40d0b74
fix(whatsapp): honor disabled self-chat without widening group access ( #118711 )
2026-08-03 07:57:23 -07:00
e701d256b9
Merge branch 'main' into fix/deepgram-realtime-endpointing-turn-taking
2026-08-03 10:47:18 -04:00
eb76bf499b
fix(voice-call): terminate carrier calls after realtime startup failures ( #118699 )
2026-08-03 07:38:42 -07:00
48c14976b9
fix(slack): isolate GovSlack media trust and delivery ( #118695 )
2026-08-03 07:37:38 -07:00
c70863a5e5
fix(browser): wrap page-controlled action results ( #118691 )
2026-08-03 07:37:04 -07:00
cae7431644
test(qa): prove real yielded-child completion and channel delivery ( #118707 )
2026-08-03 07:35:56 -07:00
c547f16506
fix(nextcloud-talk): allow bounded parallel room deliveries ( #118692 )
2026-08-03 07:08:48 -07:00
9742ab6fed
Merge branch 'main' into fix/deepgram-realtime-endpointing-turn-taking
2026-08-03 10:05:33 -04:00
5541eef4f2
fix(slack): scope interactive conversation bindings safely ( #118662 )
...
* fix(slack): scope interactive conversation bindings safely
* fix(slack): satisfy typed sender authorization lint
2026-08-03 06:42:32 -07:00
3b6cad7e31
fix(whatsapp): preserve terminal retry exhaustion lifecycle ( #118659 )
...
Co-authored-by: Peter Steinberger <steipete@macos.shared >
2026-08-03 06:19:00 -07:00
65a0db95dd
test(memory): isolate wiki plugin fixtures ( #118654 )
2026-08-03 05:26:59 -07:00
e402606c71
fix(line): clear default access token when removing account ( #118055 )
...
* fix(line): clear default access token when removing account
* fix(line): clear default access token when removing account
---------
Co-authored-by: clawsweeper <274271284+clawsweeper[bot]@users.noreply.github.com>
2026-08-03 05:20:38 -07:00
Vincent Koc