Devin Robison 52ef42302e fix: tighten trusted tool media passthrough (#67303) ... * fix: tighten trusted tool media passthrough * changelog: tighten trusted tool media passthrough (#67303) * address review: thread rawToolName into emitToolResultOutput and keep plugin-tool media passthrough - Pass rawToolName through emitToolResultOutput params so the emit and collect calls no longer reference an out-of-scope identifier (ReferenceError on any verbose tool-output path). - Widen builtinToolNames to all effective tool raw names for this run (core + bundled/trusted plugin tools), so plugin tools on the trusted media list still receive local MEDIA: passthrough. Admission-time client-tool conflict check keeps using the core-only set so unrelated plugin names do not spuriously reject client definitions; MEDIA passthrough is still gated by the raw-name set, so a client tool that normalize-collides with a plugin name cannot inherit its media trust. - Add unit coverage for bundled-plugin raw-name passthrough and for case-variant plugin-name collisions. * drop redundant String() casts flagged by oxlint no-useless-cast The names from effectiveTools, client tool function names, and the existingToolNames iterable are already typed as string, so wrapping them in String(...) adds nothing and trips oxlint's no-useless-cast rule.		2026-04-15 13:12:44 -06:00
..
acp	Add /trace toggle and fix Active Memory diagnostics	2026-04-12 13:20:22 -05:00
agents	fix: tighten trusted tool media passthrough (#67303)	2026-04-15 13:12:44 -06:00
auto-reply	test: fix upstream type drift	2026-04-15 19:31:10 +01:00
bindings
bootstrap
canvas-host	fix: narrow a2ui bundle hash inputs	2026-04-15 00:46:40 +01:00
channels	fix(plugins): stabilize bundled setup runtimes (#67200)	2026-04-15 12:35:18 -04:00
chat	feat(ui): render assistant directives and add embed tag (#64104)	2026-04-11 07:32:53 -05:00
cli	build: exclude private QA from npm package	2026-04-15 09:39:51 -07:00
commands	fix(configure): re-read config hash after persist to avoid stale-hash race (#64188) (#66528)	2026-04-15 11:03:09 +01:00
compat
config	fix(context-window): Tighten context limits and bound memory excerpts (#67277)	2026-04-15 13:06:02 -05:00
context-engine	fix(context-engine): gracefully degrade to legacy engine on third-party plugin resolution failure (#66930)	2026-04-15 14:59:29 +08:00
cron	fix(cron): suppress trailing NO_REPLY in announce delivery path [AI-assisted] (#65004)	2026-04-15 09:31:35 -07:00
daemon	test(perf): speed up slow launchd and sessions specs	2026-04-14 23:34:09 +01:00
docs
flows	fix(onboard): normalize channel setup metadata (#66706)	2026-04-14 19:11:52 +01:00
gateway	fix: tighten trusted tool media passthrough (#67303)	2026-04-15 13:12:44 -06:00
hooks	fix(hooks): honor configured ollama slug timeout (#66455)	2026-04-14 10:28:09 +01:00
i18n
image-generation	fix(cycles): bulk extract leaf type surfaces	2026-04-11 13:26:50 +01:00
infra	build: exclude private QA from npm package	2026-04-15 09:39:51 -07:00
interactive
link-understanding	fix(cycles): bulk extract leaf type surfaces	2026-04-11 13:26:50 +01:00
logging	fix(discord): raise carbon slow listener threshold	2026-04-15 06:40:14 -07:00
markdown
mcp	test: refresh cron and mcp typed fixtures	2026-04-13 20:49:39 -07:00
media	fix(context-window): Tighten context limits and bound memory excerpts (#67277)	2026-04-15 13:06:02 -05:00
media-generation	test: dedupe media provider tests	2026-04-11 13:55:07 +01:00
media-understanding	fix: type media private-network request flag	2026-04-15 04:58:11 +01:00
memory-host-sdk	fix(context-window): Tighten context limits and bound memory excerpts (#67277)	2026-04-15 13:06:02 -05:00
music-generation	fix(cycles): bulk extract leaf type surfaces	2026-04-11 13:26:50 +01:00
node-host	fix(security): remove busybox/toybox from interpreter-like safe bins [AI-assisted] (#65713)	2026-04-13 12:03:15 +05:30
pairing	perf(cron): use read-only allow-from store seam	2026-04-13 17:47:05 +01:00
plugin-sdk	build: exclude private QA from npm package	2026-04-15 09:39:51 -07:00
plugins	build: exclude private QA from npm package	2026-04-15 09:39:51 -07:00
process	test(process): share shimmed windows success assertions	2026-04-12 09:37:06 +01:00
proxy-capture	feat(msteams): add federated credential support (certificate + managed identity) (#53615)	2026-04-11 13:29:22 -05:00
realtime-transcription	fix(cycles): bulk extract leaf type surfaces	2026-04-11 13:26:50 +01:00
realtime-voice	fix(cycles): bulk extract leaf type surfaces	2026-04-11 13:26:50 +01:00
routing	perf(cron): use narrow bound-account lookup	2026-04-13 17:57:47 +01:00
scripts	fix: bound live video generation smoke	2026-04-14 14:59:01 +01:00
secrets	test(perf): speed up slow cron infra and secrets specs	2026-04-15 10:22:43 +01:00
security	perf(cron): lazy-load external content runtime	2026-04-13 18:34:04 +01:00
sessions	fix(trace command): Improve trace raw diagnostics and trace command UX (#66089)	2026-04-13 14:26:57 -05:00
shared	fix(runtime): hide lazy command and context seams from static graph	2026-04-12 12:23:19 +01:00
status	fix: extract shared session status runtime (#65807)	2026-04-13 11:51:26 +02:00
tasks	fix(tasks): avoid leaking scheduled sweep failures	2026-04-13 16:26:55 +01:00
terminal	fix(terminal): tolerate undefined path in formatDocsLink (#67076, #67074) (#67086)	2026-04-15 23:40:52 +05:30
test-helpers
test-utils	fix(cycles): bulk extract leaf type surfaces	2026-04-11 13:26:50 +01:00
tts	fix(tts): split shared tts config types	2026-04-11 20:25:02 +01:00
tui	fix(active-memory): Move active memory recall into the hidden prompt prefix (#66144)	2026-04-13 16:05:43 -05:00
types	fix(qr): lazy load terminal runtime modules	2026-04-13 15:07:50 +01:00
utils	perf(channels): split hot-path message channel normalization	2026-04-13 18:22:12 +01:00
video-generation	fix: bound live video generation smoke	2026-04-14 14:59:01 +01:00
web	fix(cycles): bulk extract leaf type surfaces	2026-04-11 13:26:50 +01:00
web-fetch	fix(cycles): split residual shared type seams	2026-04-11 02:46:40 +01:00
web-search	fix(cycles): add remaining seam files	2026-04-11 10:43:22 +01:00
wizard	perf(tests): trim hot wizard and infra setup work	2026-04-14 22:42:32 +01:00
browser-lifecycle-cleanup.test.ts
browser-lifecycle-cleanup.ts
channel-web.ts
docker-build-cache.test.ts	fix(ci): align docker smoke cache tests and reuse built dist	2026-04-15 12:12:58 +01:00
docker-image-digests.test.ts
docker-setup.e2e.test.ts
dockerfile.test.ts	fix(docker): verify matrix-sdk-crypto native addon without hardcoded pnpm path (#65608) (#67143)	2026-04-15 11:37:14 -04:00
entry.respawn.test.ts
entry.respawn.ts
entry.test.ts
entry.ts
entry.version-fast-path.test.ts
extensionAPI.ts
global-state.ts
globals.ts
index.test.ts
index.ts
install-sh-version.test.ts
library.test.ts
library.ts
logger.test.ts
logger.ts
logging.ts
param-key.ts	Fix Matrix media alias normalization	2026-04-14 12:36:13 -04:00
plugin-activation-boundary.test.ts	test: finish import performance cleanup	2026-04-11 13:55:08 +01:00
poll-params.test.ts
poll-params.ts
polls.test.ts
polls.ts
runtime.ts
ui-app-settings.agents-files-refresh.test.ts
utils.test.ts
utils.ts
version.test.ts
version.ts