vrr/goose
2
0
Fork 0
mirror of https://github.com/block/goose.git synced 2026-08-21 14:24:58 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 55

Commit graph

  • 3ab13367dc fix(plugins): preserve user scope at home jbg/security-disabled-plugin-skills Jasper Hugo 2026-08-21 16:16:17 +02:00
  • 21aecaf843 fix(plugins): retain enabled user fallback Jasper Hugo 2026-08-21 16:15:57 +02:00
  • 45291a7712 fix(skills): reject plugin CRUD before discovery Jasper Hugo 2026-08-21 16:08:18 +02:00
  • 37c7b10d77 fix(extensions): defer CLI secret persistence jbg/security-extension-identity-collision Jasper Hugo 2026-08-21 16:04:39 +02:00
  • 19bf72b6a3 fix(extensions): serialize update secret writes Jasper Hugo 2026-08-21 16:02:09 +02:00
  • 03a67c6021 fix(skills): preserve project plugin ownership Jasper Hugo 2026-08-21 15:58:35 +02:00
  • 511d0e8eff fix(plugins): honor exclusive skill roots Jasper Hugo 2026-08-21 15:58:25 +02:00
  • 3d8d408da7 fix(extensions): update canonical name aliases Jasper Hugo 2026-08-21 15:52:53 +02:00
  • a51a62e5d1 fix(extensions): serialize add secret writes Jasper Hugo 2026-08-21 15:52:24 +02:00
  • da844f8e61 fix(skills): reject nested project plugin CRUD Jasper Hugo 2026-08-21 15:46:05 +02:00
  • e66cd132a0 fix(extensions): update inherited config entries Jasper Hugo 2026-08-21 15:44:40 +02:00
  • 1e75571051 refactor(skills): name directory attributes Jasper Hugo 2026-08-21 15:37:59 +02:00
  • 290f508bfb
         docs: keep GitHub comments concise (#11447) main Jasper 2026-08-21 13:36:05 +00:00
  • 21dd4c4076 fix(extensions): preserve config on rename failure Jasper Hugo 2026-08-21 15:35:27 +02:00
  • 10cd3acd4a
         fix(claude-code): protect system prompt transport (#11441) Jasper 2026-08-21 13:34:36 +00:00
  • bc0edda525 fix(extensions): preserve explicit update path Jasper Hugo 2026-08-21 15:22:15 +02:00
  • 8f6cdcb3ec fix(security): reclaim legacy Telegram voice files jbg/security-telegram-voice-temp-root Jasper Hugo 2026-08-21 15:20:33 +02:00
  • 6fc27e8496 fix(security): reclaim Telegram voice tempfiles safely Jasper Hugo 2026-08-21 15:01:48 +02:00
  • 00c3874375 fix(sources): align agent writability with CRUD jbg/security-agent-source-containment Jasper Hugo 2026-08-21 15:01:42 +02:00
  • 128ecded47 fix(extensions): reject canonical identity collisions Jasper Hugo 2026-08-21 14:59:12 +02:00
  • 776701ccd6 fix(security): report decisive scanner signals jbg/security-scanner-monotonic-fusion Jasper Hugo 2026-08-21 14:45:58 +02:00
  • f1b4029bc2 fix(security): anchor project skill creation jbg/security-project-skill-create-anchor Jasper Hugo 2026-08-21 14:41:08 +02:00
  • e1a1affa94 fix(sources): confine agent listing to source roots Jasper Hugo 2026-08-21 14:36:57 +02:00
  • dc2fec63f7 fix(security): harden Telegram voice temp lifetimes Jasper Hugo 2026-08-21 14:34:08 +02:00
  • b7170c4ed9 fix(security): preserve scanner pattern confidence Jasper Hugo 2026-08-21 14:20:21 +02:00
  • cfa1ecd530 fix(skills): expose project plugin sources read-only Jasper Hugo 2026-08-21 14:18:20 +02:00
  • 102728bf86 fix(skills): follow working directory updates jbg/security-skills-current-workspace Jasper Hugo 2026-08-21 14:18:14 +02:00
  • 47f520fcaa fix(security): isolate Telegram voice temp files Jasper Hugo 2026-08-21 14:05:30 +02:00
  • a3c6c27b60 fix(security): fuse command scanner signals Jasper Hugo 2026-08-21 14:02:02 +02:00
  • 55906294a1 fix(plugins): stabilize enabled discovery order Jasper Hugo 2026-08-21 13:43:28 +02:00
  • 49620a6af8 fix(skills): preserve project plugin precedence Jasper Hugo 2026-08-21 13:42:33 +02:00
  • 334388a09c fix(security): honor plugin enablement for skills Jasper Hugo 2026-08-21 13:32:26 +02:00
  • 38c4235dbb fix(doctor): verify developer extension identity jbg/security-doctor-requires-developer Jasper Hugo 2026-08-21 13:30:36 +02:00
  • a13a3a56d6 fix(config): protect custom provider files jbg/security-custom-provider-permissions Jasper Hugo 2026-08-21 13:28:08 +02:00
  • ad785203fe test(security): align hidden tool lifecycle expectation jbg/security-model-tool-allowlist Jasper Hugo 2026-08-21 13:27:17 +02:00
  • c96d39afe6 fix(security): require developer for doctor Jasper Hugo 2026-08-21 13:06:14 +02:00
  • 0ea6be9c97 fix(security): reject hidden recipe output calls Jasper Hugo 2026-08-21 12:58:14 +02:00
  • 9ae3ec22b2 fix(desktop): preserve empty extension identities jbg/security-session-extension-identity Jasper Hugo 2026-08-20 20:16:13 +02:00
  • 9576f1b8b6 fix(security): reject ambiguous extension removal Jasper Hugo 2026-08-20 20:15:23 +02:00
  • e61f31603f fix(security): preserve session extension identities Jasper Hugo 2026-08-20 19:56:24 +02:00
  • 5be068f341 fix(hints): reserve only adjacent prompt boundaries jbg/security-top-level-hint-budget Jasper Hugo 2026-08-20 20:30:32 +02:00
  • 3599f8549a fix(hints): budget sanitized import output Jasper Hugo 2026-08-20 20:14:01 +02:00
  • 9b45fcec1d fix(hints): emit newly admissible hints Jasper Hugo 2026-08-20 19:56:31 +02:00
  • e4ff7c3ffe fix(hints): refine prompt boundary reservation Jasper Hugo 2026-08-20 19:17:42 +02:00
  • 22d3229ab9 fix(hints): reserve state machine prompt boundaries Jasper Hugo 2026-08-20 18:57:38 +02:00
  • 8b384c83af fix(hints): preserve incremental loading semantics Jasper Hugo 2026-08-20 18:40:29 +02:00
  • 92e2ac4b55 fix(hints): reserve caller prompt boundary Jasper Hugo 2026-08-20 18:38:52 +02:00
  • 7eea59ae61 test(hints): isolate context filename configuration Jasper Hugo 2026-08-20 18:25:43 +02:00
  • bbe46a8fe3 fix(hints): preserve caller-owned prompt extras Jasper Hugo 2026-08-20 18:14:52 +02:00
  • d6d5960ad0 fix(hints): reserve chat prompt separator Jasper Hugo 2026-08-20 18:13:17 +02:00
  • d73ac53622 fix(hints): apply prompt reservation to root hints Jasper Hugo 2026-08-20 17:32:39 +02:00
  • fc51449058 fix(hints): build prompts from one snapshot Jasper Hugo 2026-08-20 16:58:34 +02:00
  • 22e1aadcf9 fix(security): canonicalize advertised tool aliases Jasper Hugo 2026-08-21 01:13:36 +02:00
  • 611c48e0ae test: align code mode fixtures with advertised tools Jasper Hugo 2026-08-21 00:58:57 +02:00
  • 5471301302 fix(security): enforce allowlists for specialized tools Jasper Hugo 2026-08-21 00:44:41 +02:00
  • de2e60db2f fix(hints): refresh reservation inputs Jasper Hugo 2026-08-20 16:34:48 +02:00
  • da44719b1a fix(hints): reserve lexical working directory hints Jasper Hugo 2026-08-20 16:18:29 +02:00
  • ffa07c6982 fix(hints): budget normalized subdirectory headers Jasper Hugo 2026-08-20 15:59:21 +02:00
  • 5fdccda8ac fix(hints): budget sanitized unicode bytes Jasper Hugo 2026-08-20 15:47:48 +02:00
  • 0eb8c285cb fix(hints): refresh retained subdirectory context Jasper Hugo 2026-08-20 15:29:51 +02:00
  • e9d3718d5a fix(hints): include prompt separators in budget Jasper Hugo 2026-08-20 14:37:34 +02:00
  • f9e3008b46 fix(hints): refresh root output reservation Jasper Hugo 2026-08-20 14:27:15 +02:00
  • f377517c23 fix(hints): share top-level output budget Jasper Hugo 2026-08-20 14:17:40 +02:00
  • c2a1b26079 fix(hints): enforce aggregate output budget Jasper Hugo 2026-08-17 19:28:07 +02:00
  • c556b69ad7 fix(security): enforce per-turn tool allowlists Jasper Hugo 2026-08-21 00:08:48 +02:00
  • 7f4eeac7ad
         fix(ui): bind ACP permissions to request generations (#11415) Jasper 2026-08-21 08:33:51 +00:00
  • a5de37814a
         fix(agents): fail fast when a recipe's structured response can't reach an ACP-bridged provider (#11307) Wolfe-James 2026-08-21 08:31:40 +00:00
  • 4078158c01
         fix(providers): inform user of clipboard copy and remove copilot auth retry on timeout (#11160) Abhijay Jain 2026-08-21 07:07:11 +00:00
  • c0308f413f avoid claiming device code was copied fix/copilot-enrollment-ux Lifei Zhou 2026-08-21 16:57:38 +10:00
  • f06bf59b22 filter device codes by provider Lifei Zhou 2026-08-21 16:30:54 +10:00
  • 384b6ccfd3
         feat(desktop): select saved recipes when creating a schedule (#10892) Vincenzo Palazzo 2026-08-21 05:38:29 +00:00
  • 7f8685a6f8
         More provider test scripts (#10515) Douwe Osinga 2026-08-21 05:31:46 +00:00
  • d8cc74fc0e
         cli: remove recipe secret discovery (#11435) Lifei Zhou 2026-08-21 04:16:12 +00:00
  • c274feb016
         fix(openrouter): escape Gemini tool response ref keys (#11276) nathansmithopenclaw-alt 2026-08-21 03:29:23 +00:00
  • d830653309
         fix(security): honor MCP tool model visibility in Code Mode (#11425) Jasper 2026-08-21 02:34:38 +00:00
  • efefb63d43 Resolve Buzz channel ambiguity codex/buzz-github-manager Douwe Osinga 2026-08-20 22:17:02 -04:00
  • 48d480f911
         fix(providers): estimate cost for Azure Foundry models via inferred catalog pricing (#11264) jonathan MERCIER 2026-08-21 01:52:41 +00:00
  • 8e8b674cf0
         feat(providers): add Gondola as declarative OpenAI-compatible provider (#11421) Abhijay Jain 2026-08-21 01:47:18 +00:00
  • f45ccd46f7
         feat(otel): add request params, response metadata, tool call parity, and agent identification (#11261) Steven Pousty 2026-08-21 01:46:22 +00:00
  • d4a689123d Harden Buzz issue automation Douwe Osinga 2026-08-20 21:41:17 -04:00
  • 1f6c7524e1
         fix(providers): coalesce consecutive Thinking blocks in collect_stream (#11317) Wolfe-James 2026-08-21 01:27:58 +00:00
  • d818df8b72 test(hints): cover replay across a compacted conversation exemplar/simple-subdir-hints Michael Neale 2026-08-21 11:27:25 +10:00
  • 6b07a14a8a Handle shorthand Buzz issue requests Douwe Osinga 2026-08-20 21:26:53 -04:00
  • e7d2414216 fix(hints): keep subdirectory hints resume-safe by re-deriving them Michael Neale 2026-08-21 11:20:16 +10:00
  • b82502bf69 chore(roaming): drop the NAT soak harness and stale web-client references micn/roaming-agents-pr Michael Neale 2026-08-21 11:10:31 +10:00
  • 1b295248d0 fix(config): do not treat a keyring read timeout as an empty secret set Michael Neale 2026-08-21 11:02:34 +10:00
  • dda1f7a687 Keep Buzz issue channels focused Douwe Osinga 2026-08-20 20:51:27 -04:00
  • d0fc739a4c
         feat(hooks): add PreToolUseResult event and stable tool_call_id across tool lifecycle (#11120) Tymofii Pidlisnyi 2026-08-21 00:38:53 +00:00
  • 1dfd36b0fe fix(gateway): revoke legacy pairing codes jbg/security-pairing-code-secret-storage Jasper Hugo 2026-08-21 02:06:43 +02:00
  • 34d031d089 fix(config): lock migration-capable reads Jasper Hugo 2026-08-21 01:54:30 +02:00
  • 56cb57a642 fix(cache): anchor chat-payload breakpoints on the agentic tail fix/chat-payload-cache-anchoring Filip Kujawa 2026-08-20 15:57:00 -07:00
  • 29d1842bb4 fix(security): fail closed during legacy pairing migration Jasper Hugo 2026-08-21 01:44:22 +02:00
  • f971a6f167 feat(core): build the compaction request as a cache prefix of the conversation feat/compaction-cache-prefix Filip Kujawa 2026-08-14 10:31:18 -07:00
  • abac8118ee fix(security): preserve newly observed legacy pairing codes Jasper Hugo 2026-08-21 01:32:28 +02:00
  • 9c7dc21311 fix(security): verify every legacy pairing source Jasper Hugo 2026-08-21 01:23:15 +02:00
  • 2436dad25f fix(security): allow empty legacy pairing sources Jasper Hugo 2026-08-21 01:16:15 +02:00
  • e0f7fafab1 Balance Buzz issue assignments Douwe Osinga 2026-08-20 19:14:00 -04:00
  • 8b2e5fa952 fix(security): avoid duplicate pairing secret reads Jasper Hugo 2026-08-21 01:03:55 +02:00
  • 45cc787de1 fix(security): reject persistent legacy pairing codes Jasper Hugo 2026-08-21 00:52:05 +02:00
  • 48379d6881 fix(security): scan all shell tool aliases, not just "shell" fix/security-scanner-shell-tool-aliases Dorien Koelemeijer 2026-08-21 08:33:50 +10:00