Commit graph

  • 384b6ccfd3
    feat(desktop): select saved recipes when creating a schedule (#10892) main Vincenzo Palazzo 2026-08-21 05:38:29 +00:00
  • 7f8685a6f8
    More provider test scripts (#10515) Douwe Osinga 2026-08-21 05:31:46 +00:00
  • d8cc74fc0e
    cli: remove recipe secret discovery (#11435) Lifei Zhou 2026-08-21 04:16:12 +00:00
  • c274feb016
    fix(openrouter): escape Gemini tool response ref keys (#11276) nathansmithopenclaw-alt 2026-08-21 03:29:23 +00:00
  • d830653309
    fix(security): honor MCP tool model visibility in Code Mode (#11425) Jasper 2026-08-21 02:34:38 +00:00
  • efefb63d43 Resolve Buzz channel ambiguity codex/buzz-github-manager Douwe Osinga 2026-08-20 22:17:02 -04:00
  • 48d480f911
    fix(providers): estimate cost for Azure Foundry models via inferred catalog pricing (#11264) jonathan MERCIER 2026-08-21 01:52:41 +00:00
  • 8e8b674cf0
    feat(providers): add Gondola as declarative OpenAI-compatible provider (#11421) Abhijay Jain 2026-08-21 01:47:18 +00:00
  • f45ccd46f7
    feat(otel): add request params, response metadata, tool call parity, and agent identification (#11261) Steven Pousty 2026-08-21 01:46:22 +00:00
  • d4a689123d Harden Buzz issue automation Douwe Osinga 2026-08-20 21:41:17 -04:00
  • 1f6c7524e1
    fix(providers): coalesce consecutive Thinking blocks in collect_stream (#11317) Wolfe-James 2026-08-21 01:27:58 +00:00
  • d818df8b72 test(hints): cover replay across a compacted conversation exemplar/simple-subdir-hints Michael Neale 2026-08-21 11:27:25 +10:00
  • 6b07a14a8a Handle shorthand Buzz issue requests Douwe Osinga 2026-08-20 21:26:53 -04:00
  • e7d2414216 fix(hints): keep subdirectory hints resume-safe by re-deriving them Michael Neale 2026-08-21 11:20:16 +10:00
  • b82502bf69 chore(roaming): drop the NAT soak harness and stale web-client references micn/roaming-agents-pr Michael Neale 2026-08-21 11:10:31 +10:00
  • 1b295248d0 fix(config): do not treat a keyring read timeout as an empty secret set Michael Neale 2026-08-21 11:02:34 +10:00
  • dda1f7a687 Keep Buzz issue channels focused Douwe Osinga 2026-08-20 20:51:27 -04:00
  • d0fc739a4c
    feat(hooks): add PreToolUseResult event and stable tool_call_id across tool lifecycle (#11120) Tymofii Pidlisnyi 2026-08-21 00:38:53 +00:00
  • 1dfd36b0fe fix(gateway): revoke legacy pairing codes jbg/security-pairing-code-secret-storage Jasper Hugo 2026-08-21 02:06:43 +02:00
  • 34d031d089 fix(config): lock migration-capable reads Jasper Hugo 2026-08-21 01:54:30 +02:00
  • 56cb57a642 fix(cache): anchor chat-payload breakpoints on the agentic tail fix/chat-payload-cache-anchoring Filip Kujawa 2026-08-20 15:57:00 -07:00
  • 29d1842bb4 fix(security): fail closed during legacy pairing migration Jasper Hugo 2026-08-21 01:44:22 +02:00
  • f971a6f167 feat(core): build the compaction request as a cache prefix of the conversation feat/compaction-cache-prefix Filip Kujawa 2026-08-14 10:31:18 -07:00
  • abac8118ee fix(security): preserve newly observed legacy pairing codes Jasper Hugo 2026-08-21 01:32:28 +02:00
  • 9c7dc21311 fix(security): verify every legacy pairing source Jasper Hugo 2026-08-21 01:23:15 +02:00
  • 2436dad25f fix(security): allow empty legacy pairing sources Jasper Hugo 2026-08-21 01:16:15 +02:00
  • e0f7fafab1 Balance Buzz issue assignments Douwe Osinga 2026-08-20 19:14:00 -04:00
  • ec355f0fb4 fix(security): canonicalize advertised tool aliases jbg/security-model-tool-allowlist Jasper Hugo 2026-08-21 01:13:36 +02:00
  • 8b2e5fa952 fix(security): avoid duplicate pairing secret reads Jasper Hugo 2026-08-21 01:03:55 +02:00
  • 4c97689762 test: align code mode fixtures with advertised tools Jasper Hugo 2026-08-21 00:58:57 +02:00
  • 45cc787de1 fix(security): reject persistent legacy pairing codes Jasper Hugo 2026-08-21 00:52:05 +02:00
  • 6cd7182950 fix(security): enforce allowlists for specialized tools Jasper Hugo 2026-08-21 00:44:41 +02:00
  • 48379d6881 fix(security): scan all shell tool aliases, not just "shell" fix/security-scanner-shell-tool-aliases Dorien Koelemeijer 2026-08-21 08:33:50 +10:00
  • 47e2f35852 fix: skip unchanged secret-store writes Jasper Hugo 2026-08-21 00:23:03 +02:00
  • df08dc6217 fix(security): protect gateway pairing codes Jasper Hugo 2026-08-21 00:10:18 +02:00
  • d19cc280b3 Add a Blox run target for the ACP server blox-run-targets Alex Hancock 2026-08-20 17:10:22 -04:00
  • f47f0e98a2 fix(security): enforce per-turn tool allowlists Jasper Hugo 2026-08-21 00:08:48 +02:00
  • 2f5169af35
    add MCP conformance tests to goose CI (combines #10800 + #10801) (#10940) Alex Hancock 2026-08-20 21:51:53 +00:00
  • 810bb68fff
    feat(desktop): sort configured providers to the top of the provider list (#11409) Alex Hancock 2026-08-20 18:52:42 +00:00
  • b77d29e518 refactor: simplify custom provider toolshim update codex/11306-custom-provider-toolshim Douwe Osinga 2026-08-20 14:43:24 -04:00
  • 193190af0e fix: preserve custom provider settings on edit Douwe Osinga 2026-08-20 14:35:31 -04:00
  • 9ea28ef6c2 fix(hints): reserve only adjacent prompt boundaries jbg/security-top-level-hint-budget Jasper Hugo 2026-08-20 20:30:32 +02:00
  • 3b3f0f6c0a fix(desktop): preserve empty extension identities jbg/security-session-extension-identity Jasper Hugo 2026-08-20 20:16:13 +02:00
  • ec1ed305c6 fix(security): account for expanded recipe paths jbg/security-subrecipe-secret-discovery-bounds Jasper Hugo 2026-08-20 20:16:07 +02:00
  • 2f0d991bfb fix(security): reject ambiguous extension removal Jasper Hugo 2026-08-20 20:15:23 +02:00
  • ec7a20446b fix(hints): budget sanitized import output Jasper Hugo 2026-08-20 20:14:01 +02:00
  • 7e97ad0776 fix(skills): retain discovered root link policy jbg/security-skill-discovery-no-follow Jasper Hugo 2026-08-20 20:09:55 +02:00
  • 53ebcd2931 fix(skills): preserve nested linked skill roots Jasper Hugo 2026-08-20 20:04:03 +02:00
  • 2b54378653 fix(hints): emit newly admissible hints Jasper Hugo 2026-08-20 19:56:31 +02:00
  • d60bf1b9fa fix(security): preserve session extension identities Jasper Hugo 2026-08-20 19:56:24 +02:00
  • 74224a70e9 fix(developer): bound local image reads jbg/security-local-image-read-bound Jasper Hugo 2026-08-20 19:50:01 +02:00
  • 59d3fcb8ee fix: charge rejected local recipe candidates Jasper Hugo 2026-08-20 19:49:47 +02:00
  • c0992a1e9f fix(acp): omit unsupported socket MCP servers jbg/security-acp-socket-transport Jasper Hugo 2026-08-20 19:39:57 +02:00
  • f03d836a0a fix(skills): allow linked skill roots Jasper Hugo 2026-08-20 19:33:37 +02:00
  • d8920c99a5 fix(ui): preserve inline permission generation jbg/security-acp-permission-generation Jasper Hugo 2026-08-20 19:26:47 +02:00
  • c091200060 fix(recipes): continue after extensionless local misses Jasper Hugo 2026-08-20 19:26:22 +02:00
  • 417750fa58 fix(hints): refine prompt boundary reservation Jasper Hugo 2026-08-20 19:17:42 +02:00
  • 644af0968d fix(acp): bind MCP app tools to extension owner jbg/security-mcp-tool-owner-binding Jasper Hugo 2026-08-20 19:16:13 +02:00
  • 66c366719a fix(recipes): charge archive stream overhead Jasper Hugo 2026-08-20 19:11:09 +02:00
  • 932e55c2d9 fix(recipes): continue after local discovery failures Jasper Hugo 2026-08-20 19:07:16 +02:00
  • 874c2a99f0 fix(ui): bind ACP permissions to request generations Jasper Hugo 2026-08-20 19:02:39 +02:00
  • a4f5d7fe69 fix(hints): reserve state machine prompt boundaries Jasper Hugo 2026-08-20 18:57:38 +02:00
  • 3162a6ff5b feat(acp): scope Toolshim to custom providers Douwe Osinga 2026-08-20 12:57:15 -04:00
  • bc2898f043 fix: charge failed recipe discovery loads Jasper Hugo 2026-08-20 18:55:53 +02:00
  • 3869e5be19 fix: charge GitHub bundles to discovery budget Jasper Hugo 2026-08-20 18:43:47 +02:00
  • b6e1808762 fix(developer): bound image response bodies jbg/security-image-download-bounds Jasper Hugo 2026-08-20 18:42:03 +02:00
  • ea29a6d4e3 fix(hints): preserve incremental loading semantics Jasper Hugo 2026-08-20 18:40:29 +02:00
  • 593d9ecdc1 fix(hints): reserve caller prompt boundary Jasper Hugo 2026-08-20 18:38:52 +02:00
  • f5be4ee697 test(hints): isolate context filename configuration Jasper Hugo 2026-08-20 18:25:43 +02:00
  • 0de0572e86 style: format GitHub recipe bounds Jasper Hugo 2026-08-20 18:21:40 +02:00
  • 179c8a2958 fix(otel): preserve non-streaming response metadata augmented-otel Jack Amadeo 2026-08-20 12:19:00 -04:00
  • eb73131ad9 fix(otel): preserve metadata without stream usage Jack Amadeo 2026-08-20 12:17:32 -04:00
  • f22c3c5bd3 fix(hints): preserve caller-owned prompt extras Jasper Hugo 2026-08-20 18:14:52 +02:00
  • 573cf23306 fix(hints): reserve chat prompt separator Jasper Hugo 2026-08-20 18:13:17 +02:00
  • aeef740f14 fix: share permission lock across symlink paths jbg/security-permission-revocation-race Jasper Hugo 2026-08-20 18:13:03 +02:00
  • 2fcb7f43da fix(recipes): bound GitHub recipe archive extraction Jasper Hugo 2026-08-20 18:11:01 +02:00
  • 3f4bed1430 fix(recipes): preserve GitHub recipe request identities Jasper Hugo 2026-08-20 18:10:51 +02:00
  • 95b7c0fbba fix(otel): preserve provider response metadata Jack Amadeo 2026-08-20 12:09:18 -04:00
  • f9aacc2f4a fix(otel): derive agent name from recipe Jack Amadeo 2026-08-20 12:08:05 -04:00
  • 3479a15c4c
    fix(cli): refuse symlink diagnostics outputs (#11398) Jasper 2026-08-20 15:59:29 +00:00
  • dea363b605 fix(recipes): isolate GitHub recipe extraction paths Jasper Hugo 2026-08-20 17:37:08 +02:00
  • ca046a336c fix(recipes): preserve bounded GitHub recipe bundles Jasper Hugo 2026-08-20 17:35:00 +02:00
  • cf1b9ec4fe fix: preserve permission storage symlinks Jasper Hugo 2026-08-20 10:53:04 +02:00
  • e4dc2592c3 fix: preserve permission revocations across managers Jasper Hugo 2026-08-17 18:21:51 +02:00
  • 2aa2ecf1da fix(hints): apply prompt reservation to root hints Jasper Hugo 2026-08-20 17:32:39 +02:00
  • 978fbb2c0b fix(skills): preserve execute-only supporting files Jasper Hugo 2026-08-20 17:30:29 +02:00
  • 328403e682 fix: bound PCM accumulation during decoding jbg/security-dictation-resample-bound Jasper Hugo 2026-08-20 02:33:59 +02:00
  • e5b21a5c67 fix: enforce dictation budget at native rate Jasper Hugo 2026-08-20 02:21:05 +02:00
  • 4b43a4eedc fix: bound local audio resampling Jasper Hugo 2026-08-20 01:57:04 +02:00
  • fc6311acb7
    test(plugins): isolate GOOSE_PATH_ROOT in discovery tests (#11407) Alex Hancock 2026-08-20 14:59:39 +00:00
  • 6bebeb228c fix(hints): build prompts from one snapshot Jasper Hugo 2026-08-20 16:58:34 +02:00
  • 7a3c3ce847 fix(skills): anchor discovery to opened directories Jasper Hugo 2026-08-20 16:53:52 +02:00
  • c2af8a6a41 fix(skills): reject Windows reparse points Jasper Hugo 2026-08-20 16:29:52 +02:00
  • c03e6433c3 fix(skills): reject linked discovery roots Jasper Hugo 2026-08-20 16:17:23 +02:00
  • 1daa8ecde1 fix(skills): avoid following discovery symlinks Jasper Hugo 2026-08-20 16:00:00 +02:00
  • 013ab848ed fix(recipes): bound secret discovery reads Jasper Hugo 2026-08-20 16:51:46 +02:00
  • 50e77b5291 fix(recipes): bound sub-recipe secret discovery Jasper Hugo 2026-08-20 16:24:37 +02:00
  • bf899beabe fix(desktop): bound HTML comment scanning jbg/security-html-comment-linear-scan Jasper Hugo 2026-08-20 16:38:34 +02:00
  • 75feb549fb fix(hints): refresh reservation inputs Jasper Hugo 2026-08-20 16:34:48 +02:00
  • 3931d15ff6 fix(hints): reserve lexical working directory hints Jasper Hugo 2026-08-20 16:18:29 +02:00