Josh Avant d7fe595ebb fix(media): honor sender tool policy for outbound file reads (#125950) ...

* fix(media): enforce sender policy for outbound reads

* fix(media): block denied attachment fallbacks

* fix(gateway): preserve sender aliases for media policy

* fix(media): scope wildcard and attachment actions

* test(gateway): prove denied media stays unbuffered

* fix(gateway): scope send attachment hydration

2026-08-18 15:49:18 -07:00

..

acp

fix(acp): normalize file URLs before approval scoping (#124530)

2026-08-18 13:46:32 +05:30

agents

fix(media): honor sender tool policy for outbound file reads (#125950)

2026-08-18 15:49:18 -07:00

audit

fix(skills): restrict workshop mutations to workshop-owned skills and record reconcile outcomes (#125666)

2026-08-18 15:10:41 +05:30

auto-reply

fix(media): honor sender tool policy for outbound file reads (#125950)

2026-08-18 15:49:18 -07:00

bindings

…

boards

feat: add A2UI widgets to session boards (#125803)

2026-08-18 09:08:45 -07:00

bootstrap

…

canvas

feat(canvas): present widgets on native device panels (#125818)

2026-08-18 11:05:41 -07:00

channels

fix(channels): defer ingress during gateway drain (#125919)

2026-08-18 10:56:05 -07:00

chat

feat(canvas): present widgets on native device panels (#125818)

2026-08-18 11:05:41 -07:00

claws

fix(claws): keep project artifacts deterministic (#125801)

2026-08-18 06:09:20 -07:00

cli

fix: direct Gateway stops wait for active work (#126024)

2026-08-18 15:29:52 -07:00

commands

feat(sessions): keep durable work visible and auto-archive stale sessions (#124925)

2026-08-18 14:02:54 -07:00

compat

…

config

fix(codex): report native project docs truthfully (#126010)

2026-08-18 14:42:56 -07:00

context-engine

…

cron

fix: direct Gateway stops wait for active work (#126024)

2026-08-18 15:29:52 -07:00

daemon

fix: report unknown gateway service state when inspection fails (#125734)

2026-08-18 09:20:02 -07:00

docs

…

fleet

refactor(gateway): carry authoritative read facts (#125145)

2026-08-17 05:13:35 -07:00

flows

feat(control-ui): simplified settings experience for non-admin operators (#125492)

2026-08-18 10:15:10 -07:00

gateway

fix(media): honor sender tool policy for outbound file reads (#125950)

2026-08-18 15:49:18 -07:00

hooks

perf(memory): avoid duplicate embeddings during filtered recall (#125735)

2026-08-18 02:00:38 -07:00

image-generation

…

infra

fix: direct Gateway stops wait for active work (#126024)

2026-08-18 15:29:52 -07:00

interactive

refactor(approvals): consolidate channel approval kind (#125215)

2026-08-17 04:08:10 -07:00

link-understanding

…

llm

refactor(agents): prepare provider route facts at model-route build (#125799)

2026-08-18 07:55:13 -07:00

logging

fix(channels): redact logs and reject unknown filters (#125939)

2026-08-18 13:37:17 -07:00

mcp

refactor(approvals): consolidate channel approval kind (#125215)

2026-08-17 04:08:10 -07:00

media

fix(media): honor sender tool policy for outbound file reads (#125950)

2026-08-18 15:49:18 -07:00

media-generation

…

media-understanding

refactor(agents): prepare provider route facts at model-route build (#125799)

2026-08-18 07:55:13 -07:00

meeting-bot

…

memory

fix: surface swallowed failures on action paths (#125319)

2026-08-17 17:14:05 -07:00

memory-host-sdk

…

model-catalog

…

model-picker

…

music-generation

…

node-host

fix(mcp): preserve recovery text with structured results (#125914)

2026-08-18 10:36:03 -07:00

pairing

feat(gateway): run disposable cloud workers through node transport (#125288)

2026-08-17 11:49:06 -07:00

plugin-sdk

feat(ui): show machine CPU and RAM in the cloud picker (#125696)

2026-08-18 15:38:15 -07:00

plugin-state

fix(state): preserve lazy placement column ownership (#125634)

2026-08-17 22:53:39 -07:00

plugins

feat(ui): show machine CPU and RAM in the cloud picker (#125696)

2026-08-18 15:38:15 -07:00

process

fix: direct Gateway stops wait for active work (#126024)

2026-08-18 15:29:52 -07:00

projects

fix: allow direct sessions in non-Git projects (#125657)

2026-08-17 23:45:18 -07:00

provider-runtime

…

proxy-capture

…

realtime-transcription

…

routing

fix(security): warn on main-scoped group rooms (#125054)

2026-08-17 00:37:35 -07:00

scripts

…

secrets

fix(config): redact plugin secrets and preserve safe mutations (#125753)

2026-08-18 08:37:21 -07:00

security

feat(skills): merge execution-dir skills after agent workspace skills (#125786)

2026-08-18 17:14:09 +05:30

session-cards

feat(agents): unify agent status into a durable progress_card (#125125)

2026-08-17 09:44:04 -07:00

sessions

fix: child sessions honor inherited model pins over channel defaults (#125880)

2026-08-18 09:24:15 -07:00

shared

feat(nodes): publish exact runner slots (#125708)

2026-08-18 07:08:06 -07:00

skills

fix(gateway): refresh edited skills in agent RPC sessions (#125962)

2026-08-18 13:06:48 -07:00

snapshot

…

state

fix(upgrade): repair stable state before gateway startup (#125483)

2026-08-18 07:40:01 -07:00

status

fix(upgrade): repair stable state before gateway startup (#125483)

2026-08-18 07:40:01 -07:00

system-agent

fix(agents): finalize guided creation safely (#125768)

2026-08-18 08:50:01 -07:00

talk

refactor(realtime): deduplicate voice audio handling (#125728)

2026-08-18 02:00:12 -07:00

tasks

fix(upgrade): repair stable state before gateway startup (#125483)

2026-08-18 07:40:01 -07:00

test-helpers

…

test-utils

fix: child sessions honor inherited model pins over channel defaults (#125880)

2026-08-18 09:24:15 -07:00

tools

…

trajectory

…

transcripts

…

tts

fix(tts): normalize streamed speech and report fallbacks (#125686)

2026-08-18 03:46:22 -07:00

tui

fix(tui): gate startup sends on restored session (#126046)

2026-08-18 15:20:56 -07:00

types

…

utils

feat: nudge progress cards only when visible (#125701)

2026-08-18 07:42:20 -07:00

video-generation

…

web

…

web-fetch

…

web-search

…

wizard

fix(agents): finalize guided creation safely (#125768)

2026-08-18 08:50:01 -07:00

worker

test(worker): await inference admission before cancellation (#125835)

2026-08-18 07:01:27 -07:00

browser-lifecycle-cleanup.test.ts

…

browser-lifecycle-cleanup.ts

…

docker-build-cache.test.ts

…

docker-healthcheck.test.ts

…

docker-healthcheck.ts

…

docker-image-digests.test.ts

…

docker-setup.e2e.test-support.ts

…

docker-setup.e2e.test.ts

…

dockerfile.test.ts

fix(docker): preserve importer-resolved runtime dependencies (#125580)

2026-08-18 11:14:48 +05:30

entry.compile-cache.test-support.ts

…

entry.compile-cache.test.ts

…

entry.compile-cache.ts

…

entry.respawn.test.ts

…

entry.respawn.ts

…

entry.root-help-fast-path.test.ts

…

entry.run-main.test.ts

fix(cli): report plugin policy refusals as expected conditions (#125304)

2026-08-17 09:49:19 -07:00

entry.test.ts

…

entry.ts

…

entry.version-fast-path.test.ts

…

entry.version-fast-path.ts

…

global-state.ts

…

globals.test.ts

…

globals.ts

…

index.entrypoint.test.ts

…

index.test.ts

…

index.ts

fix(cli): report plugin policy refusals as expected conditions (#125304)

2026-08-17 09:49:19 -07:00

install-sh-version.test.ts

…

library.test.ts

…

library.ts

…

logger.test.ts

…

logger.ts

…

logging.ts

…

param-key.ts

…

plugin-activation-boundary.test.ts

…

poll-params.test.ts

…

poll-params.ts

…

polls.test.ts

…

polls.ts

…

runtime.test.ts

…

runtime.ts

…

utils.test.ts

…

utils.ts

…

version.test.ts

…

version.ts

…