Commit Graph

10481 Commits

Author SHA1 Message Date
Peter Steinberger
ddfdd20d79 docs: update Slack/Discord allowFrom references 2026-02-15 03:49:33 +01:00
Vignesh Natarajan
d7c0bbd7cd chore (changelog): note stable memory status dirty reporting 2026-02-14 18:48:58 -08:00
Vignesh Natarajan
44bbb4ddf4 chore (memory): add status dirty rebound regression test 2026-02-14 18:48:58 -08:00
Vignesh Natarajan
7addb519da fix (memory/builtin): keep status dirty state stable across invocations 2026-02-14 18:48:58 -08:00
Peter Steinberger
cf04208cb9 fix(allowlist): canonicalize Slack/Discord allowFrom 2026-02-15 03:46:16 +01:00
Vignesh Natarajan
3c3695d7c2 chore (changelog): note narrow-terminal TUI sanitizer hardening 2026-02-14 18:45:07 -08:00
Vignesh Natarajan
7572070f4e chore (tui): add sanitizer regressions for narrow width safety 2026-02-14 18:45:07 -08:00
Vignesh Natarajan
de02b07209 fix (tui): harden render sanitization for narrow terminals 2026-02-14 18:45:07 -08:00
Peter Steinberger
f9bb748a6c fix(memory): prevent QMD scope deny bypass 2026-02-15 02:41:45 +00:00
Vignesh Natarajan
014b42dd45 chore (changelog): note TUI tool-boundary stream fix 2026-02-14 18:41:14 -08:00
Vignesh Natarajan
f7121677f3 chore (tui): add stream assembler regression for tool boundary drops 2026-02-14 18:41:14 -08:00
Vignesh Natarajan
7d7ab8a09a fix (tui): preserve streamed text across tool boundary deltas 2026-02-14 18:41:14 -08:00
Peter Steinberger
725741486f fix(discord): harden voice message media loading 2026-02-15 03:41:08 +01:00
Vignesh Natarajan
a6f3048e44 chore (tests): format apply-patch e2e test 2026-02-14 18:38:15 -08:00
Peter Steinberger
424c718bc5 fix(security): apply tools.fs.workspaceOnly to sandbox file tools 2026-02-15 03:36:31 +01:00
Vignesh Natarajan
44570d9deb chore (changelog): note TUI binary history render hardening 2026-02-14 18:29:54 -08:00
Vignesh Natarajan
d6a635ed48 chore (tui): replace control-char regex with codepoint sanitizer 2026-02-14 18:29:54 -08:00
Vignesh Natarajan
750a7146e4 fix (tui): sanitize binary-heavy history text before render 2026-02-14 18:29:54 -08:00
Peter Steinberger
914b9d1e79 fix(agents): block workspaceOnly apply_patch delete symlink escape 2026-02-15 03:28:25 +01:00
Peter Steinberger
683aa09b55 refactor(media): harden localRoots bypass (#16739)
Merged via /review-pr -> /prepare-pr -> /merge-pr.

Prepared head SHA: 89dce69f50
Co-authored-by: steipete <58493+steipete@users.noreply.github.com>
Co-authored-by: steipete <58493+steipete@users.noreply.github.com>
Reviewed-by: @steipete
2026-02-15 03:27:01 +01:00
Vignesh Natarajan
b607c41a52 chore (changelog): note TUI concurrent stream hardening 2026-02-14 18:25:14 -08:00
Vignesh Natarajan
61228639c2 fix (tui): preserve active stream during concurrent run finals 2026-02-14 18:25:13 -08:00
Peter Steinberger
a7eb0dd9a5 fix(security): harden Windows child process spawning 2026-02-15 03:24:55 +01:00
Peter Steinberger
7b697d6128 fix(config): stop defaulting slack/discord dm.policy 2026-02-15 02:21:38 +00:00
Vignesh Natarajan
b2f66b1797 chore (changelog): note memory-lancedb auto-capture opt-in 2026-02-14 18:20:58 -08:00
Vignesh Natarajan
ed7d83bcfc fix (memory/lancedb): require explicit opt-in for auto-capture 2026-02-14 18:20:48 -08:00
Vignesh Natarajan
3ca74f8e6d chore (changelog): note memory-lancedb injection hardening 2026-02-14 18:19:56 -08:00
Vignesh Natarajan
61725fb37e fix (memory/lancedb): harden memory recall and auto-capture 2026-02-14 18:19:56 -08:00
Peter Steinberger
444a910d9e fix(infra): avoid req.destroy(err) in request body limiters 2026-02-15 03:19:27 +01:00
Peter Steinberger
4a44da7d91 fix(security): default apply_patch workspace containment 2026-02-15 03:19:27 +01:00
Christian Klotz
68c78c4b43 fix: deliver tool result media when verbose is off (#16679)
Merged via /review-pr -> /prepare-pr -> /merge-pr.

Prepared head SHA: 6e16feb164
Co-authored-by: christianklotz <69443+christianklotz@users.noreply.github.com>
Co-authored-by: christianklotz <69443+christianklotz@users.noreply.github.com>
Reviewed-by: @christianklotz
2026-02-15 02:18:57 +00:00
Vignesh Natarajan
906c32da12 chore (exec): add PTY background abort regression test 2026-02-14 18:18:03 -08:00
Vignesh Natarajan
19238f098b Changelog: note subagent announce queue retry hardening 2026-02-14 18:14:18 -08:00
Vignesh Natarajan
bbbec7a5c1 Subagents: add announce queue failure retry regressions 2026-02-14 18:14:15 -08:00
Vignesh Natarajan
2a83609287 Subagents: retain announce queue items on send failure 2026-02-14 18:14:11 -08:00
Vignesh Natarajan
28ff755623 Changelog: note QMD null-byte collection self-heal 2026-02-14 18:09:12 -08:00
Vignesh Natarajan
df820f0315 Memory/QMD: add null-byte collection repair regressions 2026-02-14 18:09:12 -08:00
Vignesh Natarajan
2dfbb407ba Memory/QMD: self-heal null-byte collection metadata on update 2026-02-14 18:09:12 -08:00
Peter Steinberger
b79e7fdb7a fix(image): propagate workspace root for image allowlist (#16722)
Merged via /review-pr -> /prepare-pr -> /merge-pr.

Prepared head SHA: 24a13675cb
Co-authored-by: steipete <58493+steipete@users.noreply.github.com>
Co-authored-by: steipete <58493+steipete@users.noreply.github.com>
Reviewed-by: @steipete
2026-02-15 03:08:28 +01:00
Vignesh Natarajan
69dd1a31bf Changelog: note remote skills cache disconnect cleanup 2026-02-14 18:02:17 -08:00
Vignesh Natarajan
dabfcbe941 Skills: clean up remote node cache on disconnect 2026-02-14 18:02:14 -08:00
Vignesh Natarajan
6f6954fb34 Changelog: note directory cache bounds hardening 2026-02-14 17:58:11 -08:00
Vignesh Natarajan
48fef27862 Outbound: bound directory cache memory growth 2026-02-14 17:58:07 -08:00
Vignesh Natarajan
c6bac6703e Changelog: note Slack thread starter cache bounds 2026-02-14 17:55:25 -08:00
Vignesh Natarajan
6d0cd54ac1 Slack: bound thread starter cache growth 2026-02-14 17:55:25 -08:00
Peter Steinberger
1ff15e60d3 chore(release): bump versions to 2026.2.14 2026-02-15 02:53:35 +01:00
Vignesh Natarajan
bb53d984d3 Changelog: note abort memory map hardening 2026-02-14 17:52:24 -08:00
Vignesh Natarajan
414b7db8af Auto-reply: bound abort memory map growth 2026-02-14 17:52:19 -08:00
Vignesh Natarajan
377bb9073e Changelog: note agentRunSeq map hardening 2026-02-14 17:50:52 -08:00
Vignesh Natarajan
fc8f59261a Gateway: bound agent run sequence tracking 2026-02-14 17:50:49 -08:00