Yuval Dinodia 68c18caca0 fix(node-pairing): require operator.admin to approve browser.proxy nodes (#104491) ...

Approving a node whose pairing surface advertises browser.proxy only required
operator.write, while invoking browser.proxy already requires operator.admin
(server-methods/nodes.ts). resolveNodePairApprovalScopes bumped the approval
scope to operator.admin only for NODE_SYSTEM_RUN_COMMANDS, so a write-scoped
operator could trust a browser.proxy-capable node that later routes bundled
browser-tool traffic. Add NODE_BROWSER_PROXY_COMMAND to the admin-approval set
so approval scope matches the invoke-time gate.

2026-07-11 09:58:00 -07:00

..

acp

chore(tooling): enforce formatting and refresh TypeScript checks (#104239)

2026-07-11 01:09:51 -07:00

agents

fix: clear remaining release validation blockers (#104555)

2026-07-11 09:32:16 -07:00

audit

…

auto-reply

refactor(agents): converge run staleness policy onto diagnostic activity owner

2026-07-11 20:59:37 +05:30

bindings

…

bootstrap

…

channels

feat(slack): support native data visualizations (#104539)

2026-07-11 09:18:39 -07:00

chat

feat: render inline web chat widgets via capability-gated show_widget tool (#101840)

2026-07-09 12:29:50 +01:00

cli

refactor(feishu): adopt core claimable dedupe for inbound events (#104384)

2026-07-11 03:27:14 -07:00

commands

fix: clear remaining release validation blockers (#104555)

2026-07-11 09:32:16 -07:00

commitments

fix(commitments): isolate extraction batches by agent (#104426)

2026-07-11 04:23:30 -07:00

compat

…

config

fix: clear remaining release validation blockers (#104555)

2026-07-11 09:32:16 -07:00

context-engine

feat(memory-wiki): isolate vaults per agent (#103349)

2026-07-10 05:19:13 +01:00

crestodian

fix: Codex CLI login fails during fresh Mac setup (#104150)

2026-07-11 01:53:49 -07:00

cron

fix(cron): allow silent scheduled runs (#95725)

2026-07-11 07:38:53 -07:00

daemon

fix(status): avoid false shell-wrapper audit warnings (#81778)

2026-07-11 18:12:32 +08:00

docs

…

flows

fix(doctor): restore local audio information (#104281)

2026-07-11 00:41:58 -07:00

gateway

feat(cloud-workers): pinned SSH tunnel runtime and provider-owned key resolution (#104553)

2026-07-11 09:26:08 -07:00

hooks

fix(session-memory): honor configured slug model (#97007)

2026-07-10 22:08:12 -07:00

i18n

…

image-generation

…

infra

fix(node-pairing): require operator.admin to approve browser.proxy nodes (#104491)

2026-07-11 09:58:00 -07:00

interactive

feat: add portable table presentation blocks (#103583)

2026-07-10 22:29:13 -07:00

link-understanding

…

llm

fix: clear remaining release validation blockers (#104555)

2026-07-11 09:32:16 -07:00

logging

refactor(agents): converge run staleness policy onto diagnostic activity owner

2026-07-11 20:59:37 +05:30

mcp

feat(codex): supervise native Codex sessions (#104045)

2026-07-11 00:12:08 -07:00

media

fix(media): normalizeMediaSource should handle uppercase FILE:// URI schemes (#103490)

2026-07-10 16:43:00 +01:00

media-generation

…

media-understanding

chore(tooling): enforce formatting and refresh TypeScript checks (#104239)

2026-07-11 01:09:51 -07:00

memory

…

memory-host-sdk

…

model-catalog

fix(deepseek): align catalog costs and legacy aliases (#103241)

2026-07-10 03:41:33 +01:00

music-generation

…

node-host

fix(macos): reject revoked forwarded exec approvals (#103968)

2026-07-10 19:01:17 -07:00

pairing

feat(watchos): connect directly to Gateway as a node (#102893)

2026-07-09 15:53:02 +01:00

plugin-sdk

feat(cloud-workers): pinned SSH tunnel runtime and provider-owned key resolution (#104553)

2026-07-11 09:26:08 -07:00

plugin-state

…

plugins

fix(plugins): bound hosted catalog feed reads on non-streaming responses (#101000)

2026-07-11 12:41:51 -04:00

process

chore(tooling): enforce formatting and refresh TypeScript checks (#104239)

2026-07-11 01:09:51 -07:00

provider-runtime

refactor: localize internal implementation constants (#101758)

2026-07-07 08:34:13 -07:00

proxy-capture

fix(proxy-capture): truncate inline preview on UTF-8 character boundary (#102409)

2026-07-10 03:18:38 +01:00

realtime-transcription

fix(realtime): preserve reconnect budget across flaps (#102348)

2026-07-09 12:08:50 +01:00

routing

chore(tooling): enforce formatting and refresh TypeScript checks (#104239)

2026-07-11 01:09:51 -07:00

scripts

chore: migrate active GPT-5.5 references to GPT-5.6 (#104452)

2026-07-11 06:30:57 -07:00

secrets

chore(tooling): enforce no-floating-promises and drop DOM globals from Node-side typechecking (#104422)

2026-07-11 07:28:20 -07:00

security

fix(security): confine include permission remediation (#103267)

2026-07-10 17:14:08 +01:00

sessions

feat(codex): supervise native Codex sessions (#104045)

2026-07-11 00:12:08 -07:00

shared

fix(agents): add tool-activity heartbeat to keep subagent alive during tool calls (#95536)

2026-07-11 17:50:33 +08:00

skills

fix(clawhub): reject mutable GitHub skill refs (#97157)

2026-07-11 06:42:35 -07:00

state

feat(cloud-workers): worker bundle production, pinned SSH bootstrap, and admission handshake (#104532)

2026-07-11 08:14:30 -07:00

status

chore(tooling): enforce formatting and refresh TypeScript checks (#104239)

2026-07-11 01:09:51 -07:00

talk

chore(tooling): enforce formatting and refresh TypeScript checks (#104239)

2026-07-11 01:09:51 -07:00

tasks

fix(tasks): show registry restore errors in console (#103976)

2026-07-11 00:10:14 +01:00

test-helpers

…

test-utils

fix(channels): honor configured read target policies (#99905)

2026-07-10 22:29:37 -05:00

tools

fix(tools): reject malformed availability expressions (#92411)

2026-07-11 05:32:22 -07:00

trajectory

refactor(deadcode): localize core helpers (#101869)

2026-07-07 13:16:57 -07:00

transcripts

…

tts

fix(tts): bound voice-list requests (#102865)

2026-07-11 00:55:06 -07:00

tui

feat(codex): supervise native Codex sessions (#104045)

2026-07-11 00:12:08 -07:00

types

chore(tooling): enforce no-floating-promises and drop DOM globals from Node-side typechecking (#104422)

2026-07-11 07:28:20 -07:00

utils

feat(gateway): add cooperative host suspension (#103618)

2026-07-10 20:24:53 +01:00

video-generation

feat(xai): support Grok Imagine Video 1.5 (#103316)

2026-07-10 04:49:42 +01:00

web-fetch

…

web-search

chore(tooling): enforce formatting and refresh TypeScript checks (#104239)

2026-07-11 01:09:51 -07:00

wizard

fix(onboard): wait for gateway warnings before installing service (#104173)

2026-07-11 05:49:34 -07:00

browser-lifecycle-cleanup.test.ts

…

browser-lifecycle-cleanup.ts

…

docker-build-cache.test.ts

…

docker-image-digests.test.ts

…

docker-setup.e2e.test.ts

feat: show build identity in About screens (#103595)

2026-07-10 10:42:36 +01:00

dockerfile.test.ts

fix(docker): make workspace deps portable to Podman (#103814)

2026-07-10 17:33:28 +01:00

entry.compile-cache.test.ts

chore(tooling): enforce formatting and refresh TypeScript checks (#104239)

2026-07-11 01:09:51 -07:00

entry.compile-cache.ts

…

entry.respawn.test.ts

chore(tooling): enforce formatting and refresh TypeScript checks (#104239)

2026-07-11 01:09:51 -07:00

entry.respawn.ts

…

entry.root-help-fast-path.test.ts

…

entry.test.ts

…

entry.ts

…

entry.version-fast-path.test.ts

…

entry.version-fast-path.ts

…

extensionAPI.ts

…

global-state.ts

…

globals.test.ts

…

globals.ts

…

index.test.ts

…

index.ts

…

install-sh-version.test.ts

…

library.test.ts

…

library.ts

…

logger.test.ts

…

logger.ts

…

logging.ts

…

param-key.ts

…

plugin-activation-boundary.test.ts

…

poll-params.test.ts

…

poll-params.ts

…

polls.test.ts

…

polls.ts

…

runtime.test.ts

…

runtime.ts

fix: release startup migration lease before exit (#103157)

2026-07-10 00:53:10 +01:00

utils.test.ts

…

utils.ts

…

version.test.ts

…

version.ts

…