759c81ceb8
test: audit heartbeat config honor
2026-04-03 09:55:51 -05:00
76ff144037
test(outbound): remove unused runner helper
2026-04-03 23:46:24 +09:00
5ce7aee33b
test(cron): localize core channel outbound test loads
2026-04-03 23:41:54 +09:00
b40d4b63f6
refactor: centralize update targets and extension guardrails
2026-04-03 23:26:31 +09:00
1a23627e32
refactor: split delivery target runtime seams
2026-04-03 15:10:48 +01:00
4a0905b94b
refactor: lazy load outbound channel bootstrap
2026-04-03 15:10:48 +01:00
4a81771290
refactor: lazy load outbound transcript mirroring
2026-04-03 15:10:48 +01:00
a61408737f
refactor: localize deliver test outbounds
2026-04-03 15:10:48 +01:00
d338299dc7
refactor: keep deliver tests channel-generic
2026-04-03 15:10:48 +01:00
909895c471
refactor: narrow deliver test channel boundaries
2026-04-03 15:10:48 +01:00
d7e4fad872
refactor: trim outbound delivery test imports
2026-04-03 15:10:48 +01:00
52717ee399
refactor: trim outbound target test imports
2026-04-03 15:10:48 +01:00
ab57d24f79
fix: stabilize npm owner update test on Windows ( #60153 ) (thanks @jayeshp19)
2026-04-03 23:01:43 +09:00
b9ede82cc2
greptile fix
2026-04-03 23:01:43 +09:00
eb4b6f7024
Use owning npm prefix for global updates
2026-04-03 23:01:43 +09:00
b48b528b02
fix(skills): block UV_PYTHON in workspace dotenv and harden uv installer env [AI] ( #59178 )
...
* fix: address issue
* fix: finalize issue changes
* fix: address PR review feedback
* Changelog: note uv installer env hardening
---------
Co-authored-by: Jacob Tomlinson <jtomlinson@nvidia.com >
2026-04-03 06:50:43 -07:00
bb25a8050c
test: baseline bundled runtime sidecar paths
2026-04-03 14:26:01 +01:00
3b727d2433
test: harden package-root mocks after setup slimming
2026-04-03 14:17:16 +01:00
39361d13be
fix: restore bootstrap tokens after send failure ( #60221 )
2026-04-03 21:52:35 +09:00
b08d58c917
fix(gateway): track bootstrap profile redemption
2026-04-03 21:52:35 +09:00
0891253012
fix(pairing): preserve mixed-role node scopes
2026-04-03 21:52:35 +09:00
a42f000b53
fix(gateway): defer bootstrap token revocation
2026-04-03 21:52:35 +09:00
f59d0eac68
refactor(plugin-runtime): remove plugin-specific core seams
2026-04-03 13:08:39 +01:00
2766c27b2a
refactor(plugin-sdk): genericize web channel runtime seams
2026-04-03 11:17:28 +01:00
1fabc96acc
fix: keep device approval scopes aligned ( #60208 )
2026-04-03 15:34:05 +05:30
403e0e6521
fix(pairing): mint tokens for merged device roles
2026-04-03 15:34:05 +05:30
55e43cbc7f
test: isolate bundled plugin coverage from unit
2026-04-03 10:58:44 +01:00
f2d7a825b1
refactor(plugin-sdk): remove channel-specific sdk seams
2026-04-03 10:45:10 +01:00
a1d07796fc
fix(pairing): honor operator scopes for mixed bootstrap approvals
2026-04-03 14:51:24 +05:30
051b5ddafe
test: dedupe core test teardown paths
2026-04-03 07:14:58 +01:00
b66197f932
test: reduce import wrapper reload churn
2026-04-03 07:14:58 +01:00
e3674bcc04
test: streamline runtime wrapper test reloads
2026-04-03 04:41:38 +01:00
5f6e3499f3
fix: detect PID recycling in gateway lock on Windows/macOS + startup progress ( #59843 )
...
Fix stale lock files from crashed gateway processes blocking new invocations on Windows/macOS. Detect PID recycling to avoid false positive lock conflicts, and add startup progress indicator.
Thanks @TonyDerek-dot
2026-04-02 22:07:35 -05:00
1efa923ab8
Matrix: add native exec approvals ( #58635 )
...
Merged via squash.
Prepared head SHA: d9f048e8275599352+gumadeiras@users.noreply.github.com >
Co-authored-by: gumadeiras <5599352+gumadeiras@users.noreply.github.com >
Reviewed-by: @gumadeiras
2026-04-02 21:08:54 -04:00
d631326c5e
fix(tailscale): gate test binary override ( #58468 )
...
* fix(tailscale): gate test binary override
* fix(changelog): note tailscale override hardening
* fix(changelog): drop tailscale note from pr
* chore: add changelog for tailscale test binary gating
---------
Co-authored-by: Devin Robison <drobison@nvidia.com >
2026-04-02 12:39:10 -06:00
3e452f2671
fix: preserve strict inline-eval approval boundaries ( #59780 ) (thanks @luoyanglang)
2026-04-02 18:30:29 +01:00
68d8e15a2e
fix(exec): satisfy allowlist predicate type checks
2026-04-03 02:25:48 +09:00
7c83cae425
fix(exec): keep strict inline-eval interpreter approvals reusable
2026-04-03 02:25:48 +09:00
7eb094a00d
fix(infra): align env key normalization in approval binding path ( #59182 )
...
* fix: address issue
* fix: address PR review feedback
* fix: address review feedback
* fix: address review feedback
* chore: add changelog for Windows env approval binding
---------
Co-authored-by: Devin Robison <drobison@nvidia.com >
2026-04-02 11:14:33 -06:00
e36c563775
refactor(exec): dedupe executable candidate resolution
2026-04-03 01:58:37 +09:00
e6ce31eb54
fix(exec): ignore malformed drive-less windows exec paths
2026-04-03 01:53:25 +09:00
17f6626ffe
feat(approvals): auto-enable native chat approvals
2026-04-02 17:30:40 +01:00
721cab2b8d
refactor(exec): split allowlist segment evaluation helpers
2026-04-03 01:22:25 +09:00
47dcfc49b8
fix: scope #57584 to shell allowlist changes
2026-04-03 01:11:20 +09:00
8d81e76f23
fix: evaluate shell wrapper inline commands against allowlist ( #57377 ) ( #57584 )
...
When a skill constructs a compound command via a shell wrapper
(e.g. `sh -c "cat SKILL.md && gog-wrapper calendar events"`),
the allowlist check was comparing `/bin/sh` instead of the actual
target binaries, causing the entire command to be silently rejected.
This adds recursive inline command evaluation that:
- Detects chain operators (&&, ||, ;) in the -c payload
- Parses each sub-command independently via analyzeShellCommand
- Evaluates every sub-command against the allowlist
- Preserves per-sub-command segmentSatisfiedBy for accurate tracking
- Limits recursion depth to 3 to prevent abuse
- Skips recursion on Windows (no POSIX shell semantics)
Closes #57377
Co-authored-by: WZBbiao <wangzhenbiao326@gmail.com >
2026-04-03 01:06:40 +09:00
fff6333773
fix(exec): implement Windows argPattern allowlist flow
2026-04-03 00:09:28 +09:00
4251ad6638
fix(telegram): allow trusted explicit proxy media fetches
2026-04-02 23:36:17 +09:00
7fea8250fb
fix(approvals): use canonical decision values in interactive button payloads
2026-04-02 23:35:23 +09:00
65c1716ad4
refactor(infra): clarify jsonl socket contract
2026-04-02 15:20:37 +01:00
e0d20966ae
Refine JSONL socket EOF regression test
2026-04-02 23:03:36 +09:00
Tak Hoffman