cd50780d6a
fix(qa): provision ffmpeg for Playwright scenarios ( #119064 )
2026-08-03 19:40:39 -07:00
e29f692066
test(qa): repair scenario catalog baselines ( #119062 )
2026-08-04 10:21:04 +08:00
d5d4a63733
test(xai): cover playback mark overflow
2026-08-04 09:07:06 +08:00
73544a73af
fix(xai): bound realtime playback marks
2026-08-04 09:07:06 +08:00
1aea2df935
fix(plugins): refresh bundled channel skills ( #119020 )
2026-08-03 17:31:00 -07:00
7f7a709b1d
fix: Ollama missing from onboarding when its service is reachable ( #118020 )
2026-08-03 17:49:31 -06:00
d38f68065f
fix(sms): align MMS retries with network timeouts ( #119002 )
2026-08-04 07:29:55 +08:00
3bbc4ad085
test(qa): cover managed gateway service lifecycle ( #118855 )
2026-08-04 07:07:27 +08:00
dc11c78927
test(qa): cover audio proxy and limit handling ( #118863 )
2026-08-04 07:06:03 +08:00
6194cfdfb2
fix(sms): retry transient MMS failures before durable adoption ( #118994 )
...
* fix(sms): retry transient MMS downloads before durable adoption
* test(sms): align durable ingress harness with typed runtime contracts
2026-08-03 15:50:30 -07:00
c27fb940cf
test(qa): cover image generation task lifecycle ( #118915 )
2026-08-04 06:43:40 +08:00
0758316883
feat(sms): track Twilio delivery status ( #118665 )
...
* feat(sms): track Twilio delivery status
* fix(sms): preserve Twilio delivery callbacks under inbound load
* fix(sms): correct delivery status contracts
* fix(sms): retry transient Twilio callback reads
* fix(sms): bound delivery callback admission
* docs(sms): clarify delivery callback recovery
2026-08-04 06:39:17 +08:00
c83dcc2bc0
fix(security): harden network tool output at canonical owner boundaries ( #118984 )
...
* fix(security): bound external tool content at its canonical owner boundary
* fix(plugin-sdk): document supported security boundary and restore facade parity
2026-08-03 15:34:33 -07:00
3d65ea2a1b
fix(googlechat): align doctor policy ownership with canonical account configuration ( #118972 )
...
* fix(googlechat): align doctor policy ownership with canonical account configuration
* test(googlechat): align generated channel metadata and typed doctor fixtures
2026-08-03 15:23:16 -07:00
554968fba6
fix(googlechat): recover durable lanes after oversized attachments ( #118986 )
2026-08-03 15:12:17 -07:00
65fa1f9a7b
fix(signal): drain accepted websocket messages before shutdown ( #118975 )
...
* fix(signal): drain accepted websocket messages before shutdown
* test(signal): avoid returning timer handles from Promise executors
2026-08-03 14:58:13 -07:00
14fe739ee9
fix(feishu): enforce exact signed webhook request boundaries ( #118758 )
...
* fix(feishu): enforce exact signed webhook request targets
* fix(feishu): preserve explicitly configured signed webhook query targets
* fix(feishu): preserve shipped relative webhook paths
* fix(feishu): normalize and migrate legacy webhook callback paths
* fix(feishu): preserve transformed webhook schema defaults
* fix(feishu): require canonical webhook paths before runtime startup
* docs(feishu): document canonical webhook routes and doctor recovery
2026-08-03 14:52:58 -07:00
554a6f3bbf
feat(sms): add Twilio MMS support ( #118664 )
...
* feat(sms): add Twilio MMS support
* fix(sms): harden hosted media bearer handling
* fix(sms): discard staged media before dispatch
* fix(sms): close staged media cleanup races
* fix(sms): finalize MMS metadata and race proof
* fix(media): bind local reads to authorized descriptors
* fix(sms): close MMS review gaps
* fix(media): make inbound root matching type-safe
* fix(media): route bounded reads through fs-safe facade
* test(media): satisfy async lint contracts
2026-08-04 05:46:37 +08:00
7daf990688
test(qa): cover Prometheus install and runtime export ( #118867 )
2026-08-04 05:38:23 +08:00
7fd3363866
fix(imessage): deduplicate only configured watchers with canonical backend identity ( #118974 )
2026-08-03 14:37:27 -07:00
5cddc85e55
fix(signal): deduplicate durable ingress across sender identity aliases ( #118970 )
2026-08-03 14:32:22 -07:00
386228ad66
fix(googlechat): block webhook startup without valid audience configuration ( #118968 )
2026-08-03 14:31:34 -07:00
467492b125
fix(msteams): enforce documented AAD owner approval principals ( #118967 )
2026-08-03 14:24:30 -07:00
9cbc13015c
test(qa): prove plugin tool ownership in gateway flow ( #118958 )
2026-08-04 05:05:44 +08:00
6fa63a4e67
fix(imessage): honor explicitly enabled accounts during startup ( #118944 )
2026-08-03 13:58:42 -07:00
9e5220cf2c
fix(signal): normalize accounts during noninteractive setup ( #118932 )
2026-08-03 13:57:53 -07:00
be9a34a79d
fix(msteams): enable channels for federated environment credentials ( #118931 )
2026-08-03 13:57:08 -07:00
665b47832a
fix(openai): enforce final transcript bounds before callback delivery ( #118928 )
2026-08-03 13:56:21 -07:00
96ae5fad79
test(qa): add memory redaction boundary coverage ( #118916 )
2026-08-04 04:46:10 +08:00
38aa704a31
fix(kilocode): model discovery overstates the usable context window ( #118868 )
...
The Kilocode gateway publishes an OpenRouter-shaped catalog in which
`context_length` is the catalog-wide ceiling while `top_provider.context_length`
describes the primary provider that actually serves the request. Discovery read
only the catalog-wide value, so models whose primary provider offers a smaller
window were registered with a context window larger than requests can use.
Prefer the primary-provider window and fall back to the catalog-wide value,
matching the precedence already owned by
`extensions/openrouter/provider-catalog.ts`.
Completion-token handling is left alone on purpose: the live Kilocode catalog
exposes no top-level `max_completion_tokens` or `max_output_tokens`, so the
existing `top_provider` read is already the only available source.
2026-08-03 15:44:46 -05:00
682f60ce56
fix(config): reject unsupported diagnostics otel grpc ( #93087 )
2026-08-03 16:28:08 -04:00
990fdcf6fd
fix(providers): recognize configured media credentials across provider boundaries ( #118761 )
...
* fix(providers): honor configured media credentials across owner boundaries
* test(providers): align configured auth fixtures and derived SDK surfaces
* fix(providers): enforce shared DashScope media credential policy
2026-08-03 13:26:31 -07:00
25aa29d7a1
refactor: delete dead post-landing plugin/hooks scaffolding ( #118920 )
...
* refactor: delete dead post-landing plugin/hooks scaffolding
* fix(security): resolve fast-uri and undici HIGH advisories
2026-08-04 04:26:22 +08:00
084833b324
fix(search): propagate cancellation through provider-owned requests ( #118895 )
2026-08-03 12:46:17 -07:00
f9d9d1225a
refactor(channels): own the lifecycle status contract in SDK patch factories ( #118795 )
...
* refactor(sdk): add channel lifecycle patch factories
* refactor(channels): adopt lifecycle patches in a-m
* refactor(channels): adopt lifecycle patches in n-z
* refactor(runtime): lifecycle-own ambient registries
* test(slack): assert lifecycle factory fields
* fix(sdk): preserve lifecycle patch extras types
* test(zalouser): widen lifecycle status sink
* test(irc): avoid shadowed status patch
* fix(zalo): reuse account-agnostic media route
* fix(gateway): accept explicit channel ready recovery
* test(qa): assert terminal Slack block fact
* test(qa): restore Slack blocked lifecycle scenario
* test(gateway): lock explicit lifecycle recovery contract
2026-08-03 12:39:48 -07:00
c1686c9a84
fix(feishu): fence external collaboration tool results ( #118877 )
...
* fix(feishu): fence external collaboration tool results
* test(feishu): narrow bitable result content safely
2026-08-03 12:36:39 -07:00
ef478c14b1
test(matrix): isolate runtime state ( #118892 )
2026-08-03 12:28:49 -07:00
b026d3572e
fix(slack): prevent stalled presence polling from hanging shutdown ( #117478 )
...
* fix(slack): prevent presence polling from hanging shutdown
* fix(slack): honor presence polling rate limits
* fix(slack): preserve presence polling cursor on rate limits
2026-08-03 12:01:52 -07:00
2b3351a743
fix(browser): protect private observation media and Canvas trust boundaries ( #118775 )
...
* fix(browser): protect observation screenshots and Canvas trust boundaries
* test(canvas): preserve actual image helper result types
2026-08-03 11:33:27 -07:00
137462ad48
fix(lmstudio): honor embedding JIT and canonical model identity ( #117320 )
...
* codex/qa400-lmstudio-jit-canonical-identity:
fix(lmstudio): resolve JIT embedding variants
fix(lmstudio): preserve embedding preload and model identity
2026-08-04 02:22:51 +08:00
21a767639f
fix(plugins): unify HTTP route conflict handling ( #118203 )
...
* fix(plugins): unify HTTP route conflict handling
* fix(plugins): preserve source-less route replacement
* test(line): type webhook route source
2026-08-04 02:15:00 +08:00
7c3f8b0a28
fix(lmstudio): resolve JIT embedding variants
2026-08-04 02:11:26 +08:00
f1e7e20bad
fix(lmstudio): preserve embedding preload and model identity
2026-08-04 02:11:26 +08:00
b9e5b25e31
fix(openai): commit eligible final realtime transcription audio safely ( #118782 )
2026-08-03 10:51:48 -07:00
f63f2fd3db
fix(reef): restrict management commands to owners [AI] ( #118578 )
...
* fix(reef): require owner for management commands
* fix(reef): preserve general command access
* fix: preserve explicit owner authority
* fix(discord): separate voice admission from ownership
* docs(reef): explain owner command recovery
* docs(reef): clarify owner recovery paths
2026-08-03 23:18:05 +05:30
8eaf917efb
fix(google): honor Cloud SDK credential location and Vertex billing project ( #118745 )
2026-08-03 10:47:13 -07:00
10b0b7b7c4
fix(bedrock): preserve private embedding endpoints and AWS routing policy ( #118744 )
...
* fix(bedrock): honor private embedding endpoints without overriding AWS routing
* fix(bedrock): preserve canonical secure endpoint modes and private overrides
2026-08-03 10:39:02 -07:00
03bec9d438
fix(voice): make signed callback replay reservations durable and retryable ( #118754 )
2026-08-03 10:35:32 -07:00
830ab164ef
fix(openrouter): isolate custom proxy credentials and transport security ( #118773 )
...
* fix(openrouter): confine custom endpoint credentials and transport policy
* test(openrouter): preserve typed fetch arguments in proxy fixtures
2026-08-03 10:32:06 -07:00
616b0c9408
fix(memory): prevent embedding fallback credential cross-provider leaks ( #118759 )
...
* fix(memory): isolate embedding fallback provider credentials
* test(memory): preserve real embedding fallback owner in index fixtures
2026-08-03 10:30:38 -07:00
Peter Steinberger