12071 Commits

Author SHA1 Message Date
Peter Steinberger
4d16d1390a fix: tighten package json coverage 2026-03-13 23:39:44 +00:00
Peter Steinberger
50c4e89aeb fix: tighten runtime status coverage 2026-03-13 23:38:47 +00:00
Robin Waslander
a54bf71b4c
fix(imessage): sanitize SCP remote path to prevent shell metacharacter injection
References GHSA-g2f6-pwvx-r275.
2026-03-14 00:38:14 +01:00
Peter Steinberger
ff6636ed5b fix: tighten path guard coverage 2026-03-13 23:37:37 +00:00
Peter Steinberger
0da9a25818 test: share pairing setup resolution assertions 2026-03-13 23:35:28 +00:00
Peter Steinberger
a56e620777 test: simplify mattermost token summary fixtures 2026-03-13 23:35:28 +00:00
Peter Steinberger
66979bcc2f refactor: share self hosted provider auth flow 2026-03-13 23:35:28 +00:00
Peter Steinberger
46d4fe2fa1 refactor: share embedded run and discord test helpers 2026-03-13 23:35:28 +00:00
Peter Steinberger
0201f3ff7b refactor: share auto reply helper fixtures 2026-03-13 23:35:28 +00:00
Peter Steinberger
fd5243c27e refactor: share discord exec approval helpers 2026-03-13 23:35:28 +00:00
Peter Steinberger
fd340a88d6 test: dedupe discord preflight helpers 2026-03-13 23:35:28 +00:00
Peter Steinberger
6a44ca9f76 test: dedupe discord queue preflight setup 2026-03-13 23:35:27 +00:00
Peter Steinberger
a7c293b8ef test: dedupe discord bound slash dispatch setup 2026-03-13 23:35:27 +00:00
Peter Steinberger
6cabcf3fd2 test: dedupe session idle timeout assertions 2026-03-13 23:35:27 +00:00
Peter Steinberger
f15abb657a test: dedupe discord listener deferred setup 2026-03-13 23:35:27 +00:00
Peter Steinberger
58a51e2746 refactor: share discord preflight shared fields 2026-03-13 23:35:27 +00:00
Peter Steinberger
801113b46a refactor: share session entry persistence update 2026-03-13 23:35:27 +00:00
Peter Steinberger
f8ee528174 refactor: share discord channel override config type 2026-03-13 23:35:27 +00:00
Peter Steinberger
809785dcd7 test: dedupe discord provider account config harness 2026-03-13 23:35:27 +00:00
Peter Steinberger
aed626ed96 test: dedupe discord gateway proxy register flow 2026-03-13 23:35:27 +00:00
Peter Steinberger
ee80b4be69 test: dedupe discord retry delivery setup 2026-03-13 23:35:27 +00:00
Peter Steinberger
3eb039c554 test: dedupe discord forwarded media assertions 2026-03-13 23:35:27 +00:00
Peter Steinberger
cad1c95405 test: dedupe inline action skip assertions 2026-03-13 23:35:27 +00:00
Peter Steinberger
8cd48c2896 test: dedupe model info reply setup 2026-03-13 23:35:27 +00:00
Peter Steinberger
c59ae1527c refactor: share discord trailing media delivery 2026-03-13 23:35:27 +00:00
Peter Steinberger
1b91fa9358 test: dedupe discord route fixture setup 2026-03-13 23:35:27 +00:00
Peter Steinberger
97ce1503fd refactor: share discord binding update loop 2026-03-13 23:35:27 +00:00
Peter Steinberger
301594b448 refactor: share discord auto thread params 2026-03-13 23:35:27 +00:00
Peter Steinberger
0f9e16ca46 refactor: share provider chunk context resolution 2026-03-13 23:35:27 +00:00
Peter Steinberger
da51e40638 refactor: share auth label suffix formatting 2026-03-13 23:35:27 +00:00
Peter Steinberger
bd758bb438 refactor: share abort target apply params 2026-03-13 23:35:27 +00:00
Peter Steinberger
aaea0b2f28 test: dedupe directive auth ref label setup 2026-03-13 23:35:27 +00:00
Peter Steinberger
07b3f5233e test: dedupe post compaction legacy fallback checks 2026-03-13 23:35:27 +00:00
Peter Steinberger
91c94c8b95 test: dedupe elevated permission assertions 2026-03-13 23:35:27 +00:00
Peter Steinberger
b9e5f23914 test: dedupe route reply slack no-op cases 2026-03-13 23:35:27 +00:00
Peter Steinberger
36e9a811cc test: dedupe discord auto thread harness 2026-03-13 23:35:27 +00:00
Peter Steinberger
7b70fa26e6 test: dedupe discord thread starter setup 2026-03-13 23:35:27 +00:00
Peter Steinberger
22e976574c test: dedupe inbound main scope fixtures 2026-03-13 23:35:27 +00:00
Peter Steinberger
1d99401b8b refactor: share telegram voice send path 2026-03-13 23:35:27 +00:00
Peter Steinberger
41fa63a49e refactor: share anthropic compat flag checks 2026-03-13 23:35:27 +00:00
Peter Steinberger
07900303f4 refactor: share outbound poll and signal route helpers 2026-03-13 23:35:27 +00:00
Peter Steinberger
c5dc61e795 test: share session target and outbound mirror helpers 2026-03-13 23:35:27 +00:00
Peter Steinberger
0229246f3b test: share wake failure assertions 2026-03-13 23:35:27 +00:00
Peter Steinberger
a4a7958678 refactor: share outbound base session setup 2026-03-13 23:35:27 +00:00
Peter Steinberger
854df8352c refactor: share net and slack input helpers 2026-03-13 23:35:26 +00:00
Val Alexander
868fd32ee7
fix(config): avoid Anthropic startup crash (#45520)
Co-authored-by: Val Alexander <bunsthedev@gmail.com>
2026-03-13 18:28:33 -05:00
Robin Waslander
1803d16d5c
fix(auth): make device bootstrap tokens single-use to prevent scope escalation
Refs: GHSA-63f5-hhc7-cx6p
2026-03-13 23:58:45 +01:00
Peter Steinberger
ae1a1fccfe fix: stabilize browser existing-session control 2026-03-13 22:41:17 +00:00
Vincent Koc
e82ba71911
fix(browser): follow up batch failure and limit handling (#45506)
* fix(browser): propagate nested batch failures

* fix(browser): validate top-level batch limits

* test(browser): cover nested batch failures

* test(browser): cover top-level batch limits
2026-03-13 15:39:28 -07:00
Robin Waslander
7e49e98f79
fix(telegram): validate webhook secret before reading request body
Refs: GHSA-jq3f-vjww-8rq7
2026-03-13 23:21:48 +01:00