14fe739ee9
fix(feishu): enforce exact signed webhook request boundaries ( #118758 )
...
* fix(feishu): enforce exact signed webhook request targets
* fix(feishu): preserve explicitly configured signed webhook query targets
* fix(feishu): preserve shipped relative webhook paths
* fix(feishu): normalize and migrate legacy webhook callback paths
* fix(feishu): preserve transformed webhook schema defaults
* fix(feishu): require canonical webhook paths before runtime startup
* docs(feishu): document canonical webhook routes and doctor recovery
2026-08-03 14:52:58 -07:00
554a6f3bbf
feat(sms): add Twilio MMS support ( #118664 )
...
* feat(sms): add Twilio MMS support
* fix(sms): harden hosted media bearer handling
* fix(sms): discard staged media before dispatch
* fix(sms): close staged media cleanup races
* fix(sms): finalize MMS metadata and race proof
* fix(media): bind local reads to authorized descriptors
* fix(sms): close MMS review gaps
* fix(media): make inbound root matching type-safe
* fix(media): route bounded reads through fs-safe facade
* test(media): satisfy async lint contracts
2026-08-04 05:46:37 +08:00
d0194ee7e1
test(gateway): prove TLS certificate pinning ( #118812 )
...
* test(gateway): prove TLS certificate pinning
* test(gateway): fix TLS pinning proof types
* test(gateway): observe published TLS fingerprint
* test(gateway): load TLS discovery probe explicitly
* test(gateway): keep QA assertion typed
2026-08-04 05:44:00 +08:00
082e9e793e
test(qa): cover tool policy and sandbox gates ( #118925 )
2026-08-04 05:43:33 +08:00
0fd7354cdb
fix(cli): keep update dry-run state immutable ( #118856 )
...
* fix(cli): keep update dry-run state immutable
* test(cli): cover dry-run config compatibility
2026-08-04 05:43:22 +08:00
aa3628ce66
fix(scripts): honor last repeated CLI flag value ( #118710 )
...
Co-authored-by: Tak Hoffman <781889+Takhoffman@users.noreply.github.com >
2026-08-03 16:40:33 -05:00
108cec388e
fix(skills): provide safe workspace-specific malicious skill remediation ( #118969 )
2026-08-03 14:39:02 -07:00
7daf990688
test(qa): cover Prometheus install and runtime export ( #118867 )
2026-08-04 05:38:23 +08:00
7fd3363866
fix(imessage): deduplicate only configured watchers with canonical backend identity ( #118974 )
2026-08-03 14:37:27 -07:00
3ded8fba9b
chore(qa): cover plugin tools activation ( #118949 )
2026-08-04 05:32:58 +08:00
5cddc85e55
fix(signal): deduplicate durable ingress across sender identity aliases ( #118970 )
2026-08-03 14:32:22 -07:00
386228ad66
fix(googlechat): block webhook startup without valid audience configuration ( #118968 )
2026-08-03 14:31:34 -07:00
a36aa23c2c
test(gateway): cover hosted web surfaces ( #118870 )
...
* test(gateway): cover hosted web surfaces
* test(gateway): use shared temp cleanup
* test(gateway): respect plugin test boundaries
2026-08-04 05:31:06 +08:00
ac6cc33d5f
test(cron): cover execution diagnostics ( #118964 )
2026-08-04 05:29:13 +08:00
467492b125
fix(msteams): enforce documented AAD owner approval principals ( #118967 )
2026-08-03 14:24:30 -07:00
347398311a
docs: fix stale 2gb session disk budget default on chrome extension page ( #110624 )
2026-08-04 05:24:23 +08:00
16635fa9c7
test(qa): cover gateway exec approvals ( #118872 )
2026-08-04 05:23:28 +08:00
99c5ea79ab
test(gateway): cover task and automation RPCs ( #118966 )
2026-08-04 05:23:15 +08:00
622b5eaf8e
test(tasks): add durable task operations QA ( #118943 )
2026-08-04 05:20:12 +08:00
99926b7323
test(tui): add reusable PTY evidence producer ( #118902 )
2026-08-04 05:19:42 +08:00
e4b6bde45a
test(gateway): cover agent and artifact APIs ( #118889 )
2026-08-04 05:18:47 +08:00
e4ab08cbfb
test(gateway): prove RPC wire and agent contracts ( #118794 )
...
* test(gateway): cover RPC wire contracts
* test(gateway): cover agent RPC contracts
* test(gateway): satisfy heartbeat type safety
* test(gateway): satisfy agent RPC lint
* test(gateway): assert agent response ordering
2026-08-04 05:17:48 +08:00
42fd51d6c2
test(automation): cover plugin hook lifecycles ( #118962 )
2026-08-04 05:17:32 +08:00
950872b9e0
test(qa): prove gateway catalog RPCs ( #118808 )
...
* test(qa): cover gateway identity and presence RPCs
* test(qa): cover gateway model catalog RPC
* test(qa): cover gateway tool and skill catalogs
* test(qa): track gateway RPC temp dirs
* test(qa): authenticate identity RPC proof
2026-08-04 05:17:22 +08:00
361c07f993
test(ui): add shell and PWA primary QA proof ( #118788 )
...
* test(ui): cover shell routing and gateway target
* test(qa): register shell and PWA primary proof
* test(ui): record prefixed asset behavior
* test(ui): satisfy shell routing lint
* test(ui): reject root asset fallbacks in shell proof
* test(ui): preserve shell proxy redirects
2026-08-04 05:11:45 +08:00
5b1b1e0632
test(qa): cover CLI distribution workflows ( #118948 )
2026-08-04 05:09:39 +08:00
7f9994d4f9
chore(i18n): refresh native locales ( #118883 )
...
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-08-04 05:07:27 +08:00
9cbc13015c
test(qa): prove plugin tool ownership in gateway flow ( #118958 )
2026-08-04 05:05:44 +08:00
76cc60a452
docs: correct onboarding risk flags and Google Chat credential shapes ( #118936 )
2026-08-03 13:59:29 -07:00
6fa63a4e67
fix(imessage): honor explicitly enabled accounts during startup ( #118944 )
2026-08-03 13:58:42 -07:00
1cb030f1a9
test(gateway): cover client transport defaults ( #118798 )
2026-08-04 04:58:05 +08:00
9e5220cf2c
fix(signal): normalize accounts during noninteractive setup ( #118932 )
2026-08-03 13:57:53 -07:00
be9a34a79d
fix(msteams): enable channels for federated environment credentials ( #118931 )
2026-08-03 13:57:08 -07:00
665b47832a
fix(openai): enforce final transcript bounds before callback delivery ( #118928 )
2026-08-03 13:56:21 -07:00
d29b9ad083
test(tasks): cover plugin-managed flows ( #118919 )
2026-08-04 04:51:00 +08:00
efcced7207
test(agents): prove process control roundtrip ( #118843 )
2026-08-04 04:46:57 +08:00
96ae5fad79
test(qa): add memory redaction boundary coverage ( #118916 )
2026-08-04 04:46:10 +08:00
38aa704a31
fix(kilocode): model discovery overstates the usable context window ( #118868 )
...
The Kilocode gateway publishes an OpenRouter-shaped catalog in which
`context_length` is the catalog-wide ceiling while `top_provider.context_length`
describes the primary provider that actually serves the request. Discovery read
only the catalog-wide value, so models whose primary provider offers a smaller
window were registered with a context window larger than requests can use.
Prefer the primary-provider window and fall back to the catalog-wide value,
matching the precedence already owned by
`extensions/openrouter/provider-catalog.ts`.
Completion-token handling is left alone on purpose: the live Kilocode catalog
exposes no top-level `max_completion_tokens` or `max_output_tokens`, so the
existing `top_provider` read is already the only available source.
2026-08-03 15:44:46 -05:00
1ed8241226
fix(media): isolate generated-provider text from delivery directives ( #118780 )
2026-08-03 13:39:12 -07:00
7a97997b61
test(gateway): add node control-plane QA coverage ( #118784 )
...
* test(gateway): promote remote host command proof
* test(gateway): cover node control plane
* test(gateway): narrow connected operator client
* test(gateway): use public QA harness
2026-08-04 04:38:02 +08:00
682f60ce56
fix(config): reject unsupported diagnostics otel grpc ( #93087 )
2026-08-03 16:28:08 -04:00
990fdcf6fd
fix(providers): recognize configured media credentials across provider boundaries ( #118761 )
...
* fix(providers): honor configured media credentials across owner boundaries
* test(providers): align configured auth fixtures and derived SDK surfaces
* fix(providers): enforce shared DashScope media credential policy
2026-08-03 13:26:31 -07:00
25aa29d7a1
refactor: delete dead post-landing plugin/hooks scaffolding ( #118920 )
...
* refactor: delete dead post-landing plugin/hooks scaffolding
* fix(security): resolve fast-uri and undici HIGH advisories
2026-08-04 04:26:22 +08:00
f73a7809a5
fix(cron): deliver child results after heartbeat-only parent responses ( #118743 )
...
* fix(cron): deliver child results after heartbeat-only parent replies
* fix(cron): preserve mixed heartbeat parents and wrapped child handoffs
* fix(cron): suppress wrapped heartbeat acknowledgments in child followups
2026-08-03 13:15:57 -07:00
5150670c72
fix(ci): keep Matrix chunk tests aligned with inventory ( #118917 )
...
* test(matrix): derive extension process count
* test(matrix): align full-suite chunk expectations
2026-08-04 04:13:42 +08:00
bac7d6bd5d
fix(tts): preserve hidden speech answers when synthesis fails ( #118690 )
...
* fix(tts): preserve hidden speech answers when synthesis fails
* fix(tts): preserve visible Slack fallback before channel activation
* test(tts): respect plugin ownership boundaries
2026-08-03 13:06:38 -07:00
317320a95e
test(gateway): add HTTP API QA coverage ( #118809 )
2026-08-04 04:00:54 +08:00
02885d6d16
test(qa): cover Control UI sessions and cron ( #118838 )
...
* test(qa): cover Control UI sessions and cron
* test(qa): reuse canonical Cron E2E owner
2026-08-04 03:52:26 +08:00
7ae6a950f6
fix(macos): preserve native command ownership and consent ( #118914 )
2026-08-03 12:50:11 -07:00
3c858f7a92
test(qa): cover OpenClaw exec process lifecycle ( #118819 )
2026-08-04 03:50:05 +08:00
Peter Steinberger