Agustin Rivera b04aaad592 fix(nextcloud-talk): reject excess concurrent webhook reads (#146356) ... * fix(nextcloud-talk): reject excess concurrent webhook reads Acquire a listener-owned in-flight limiter slot before the unauthenticated webhook body read, reject overflow with a close-aware HTTP 429, and release the slot after signature verification but before authenticated dispatch. Incomplete requests previously pinned a pre-auth reader for the full timeout without consuming the authentication-failure budget, letting any reachable client hold unbounded numbers of sockets and readers to degrade webhook availability. This follows the owner-level pattern merged for SMS (#136504) and Feishu (#137230). * fix(nextcloud-talk): preserve queued acknowledgements under pipelined overflow Serialize webhook admission per connection through the shared HTTP request lifecycle (runHttpConnectionRequest, re-exported on the plugin SDK guards subpath) so a pipelined request's overflow rejection only starts after every earlier response on the connection finished. Covers the reviewed sequence with real TCP: a saturated keep-alive connection with admission pending past the one-second close timer must still deliver the earlier signed 200 before the close-aware 429. * docs(nextcloud-talk): document overload admission and SDK connection ordering Record the 64-slot admission bound, its close-aware 429 overflow behavior, ordered keep-alive acknowledgements, and the unverified sender-redelivery risk in the channel guide. Document runHttpConnectionRequest's response-completion and closure semantics for plugin-owned webhook listeners on the SDK infrastructure page. * docs(nextcloud-talk): correct overload mitigation guidance The 64-read admission budget is hard-coded and not configurable, so raising reverse-proxy connection limits cannot relieve saturation and can feed more requests into the rejection path. Advise reducing or buffering upstream concurrency instead, and state plainly that the budget is fixed.		2026-09-13 00:08:51 +00:00
..
architecture-internals	docs(plugins): remove obsolete Gateway restart guidance (#146516)	2026-09-12 16:48:13 -07:00
codex-harness	fix: skip official setup approvals and default to Astra (#145646)	2026-09-12 00:34:25 -07:00
codex-harness-reference	docs(plugins): remove obsolete Gateway restart guidance (#146516)	2026-09-12 16:48:13 -07:00
codex-harness-runtime	refactor(hooks): await stored MCP policy within relay lifetime (#145164)	2026-09-11 14:06:38 -07:00
google-meet	feat(voice): share GPT Live across meetings and calls (#146546)	2026-09-12 17:06:51 -07:00
hooks	docs(plugins): remove obsolete Gateway restart guidance (#146516)	2026-09-12 16:48:13 -07:00
manifest	fix(signal): start accounts with spaced keys without Doctor (#145750)	2026-09-12 16:35:19 +05:30
reference	feat: share selected sessions read-only with a paired team Gateway (#136253)	2026-09-12 13:35:17 -07:00
sdk-agent-harness	fix: skip official setup approvals and default to Astra (#145646)	2026-09-12 00:34:25 -07:00
sdk-channel-plugins	fix: await approval target persistence before completing delivery (#146325)	2026-09-12 13:50:54 -07:00
sdk-entrypoints	feat: share selected sessions read-only with a paired team Gateway (#136253)	2026-09-12 13:35:17 -07:00
sdk-migration	refactor(plugins): deprecate synchronous keyed storage (#145158)	2026-09-11 12:45:23 -07:00
sdk-overview	fix(nextcloud-talk): reject excess concurrent webhook reads (#146356)	2026-09-13 00:08:51 +00:00
sdk-provider-plugins	feat(voice): share GPT Live across meetings and calls (#146546)	2026-09-12 17:06:51 -07:00
sdk-runtime	refactor(tasks): move managed flow state changes to SQLite workers (#146495)	2026-09-12 15:01:15 -07:00
voice-call	feat(voice): share GPT Live across meetings and calls (#146546)	2026-09-12 17:06:51 -07:00
adding-capabilities.md	docs(plugins,providers): close open link-audit findings for plugins and providers (#143021)	2026-09-09 19:49:52 +09:00
admin-http-rpc.md	docs(plugins): remove obsolete Gateway restart guidance (#146516)	2026-09-12 16:48:13 -07:00
architecture-internals.md	docs(plugins): split the plugin architecture internals by reader job (#142730)	2026-09-09 08:58:45 +08:00
architecture.md	fix(plugins): recover reloads and release retired resources (#145816)	2026-09-12 03:27:47 -07:00
beam.md	docs(plugins): remove obsolete Gateway restart guidance (#146516)	2026-09-12 16:48:13 -07:00
building-plugins.md	chore(deps): advance cooled dependencies and major upgrades (#146258)	2026-09-12 13:28:12 -07:00
bundles.md	docs(plugins): remove obsolete Gateway restart guidance (#146516)	2026-09-12 16:48:13 -07:00
cli-backend-plugins.md	fix: skip official setup approvals and default to Astra (#145646)	2026-09-12 00:34:25 -07:00
codex-computer-use.md	fix: skip official setup approvals and default to Astra (#145646)	2026-09-12 00:34:25 -07:00
codex-harness-reference.md	docs: fix information-architecture findings in plugins and channels docs (#143926)	2026-09-10 18:22:51 +08:00
codex-harness-runtime.md	docs(plugins): split the Codex harness runtime page by reader job (#143458)	2026-09-10 08:21:48 +09:00
codex-harness.md	docs(plugins): remove obsolete Gateway restart guidance (#146516)	2026-09-12 16:48:13 -07:00
codex-native-plugins.md	docs: fix 17 concrete plugin/channel defects from the ux audit (#144018)	2026-09-10 20:15:43 +08:00
codex-supervision.md	fix(ui): make coding session discovery settings easy to find (#146502)	2026-09-12 17:03:20 -07:00
community.md	docs(plugins): remove obsolete Gateway restart guidance (#146516)	2026-09-12 16:48:13 -07:00
compatibility.md	refactor(plugins): deprecate synchronous keyed storage (#145158)	2026-09-11 12:45:23 -07:00
copilot.md	chore(deps): advance cooled TypeBox, AWS and Copilot SDKs (#145381)	2026-09-11 20:15:55 -07:00
dependency-resolution.md	build(plugins): emit declared private worker entries (#144821)	2026-09-11 03:02:51 -07:00
feature-plugins.md	docs(plugins): remove obsolete Gateway restart guidance (#146516)	2026-09-12 16:48:13 -07:00
geolocation.md
google-meet.md	feat(voice): share GPT Live across meetings and calls (#146546)	2026-09-12 17:06:51 -07:00
hooks.md	docs(plugins): remove obsolete Gateway restart guidance (#146516)	2026-09-12 16:48:13 -07:00
install-overrides.md
llama-cpp.md	docs: close remaining one-way link findings in cli, plugins, tools, providers (#143855)	2026-09-10 16:15:08 +08:00
logbook.md	docs(plugins): remove obsolete Gateway restart guidance (#146516)	2026-09-12 16:48:13 -07:00
manage-plugins.md	docs(plugins): remove obsolete Gateway restart guidance (#146516)	2026-09-12 16:48:13 -07:00
manifest.md	fix(signal): start accounts with spaced keys without Doctor (#145750)	2026-09-12 16:35:19 +05:30
meeting-plugins.md	feat(voice): share GPT Live across meetings and calls (#146546)	2026-09-12 17:06:51 -07:00
memory-lancedb.md	docs(plugins): remove obsolete Gateway restart guidance (#146516)	2026-09-12 16:48:13 -07:00
memory-wiki.md	docs(plugins): remove obsolete Gateway restart guidance (#146516)	2026-09-12 16:48:13 -07:00
message-presentation.md	feat(line): let a LINE tap answer the question an agent asked (#133421)	2026-09-10 20:31:40 -07:00
oc-path.md	docs(plugins): remove obsolete Gateway restart guidance (#146516)	2026-09-12 16:48:13 -07:00
onepassword.md	docs: close remaining one-way link findings in cli, plugins, tools, providers (#143855)	2026-09-10 16:15:08 +08:00
plugin-inventory.md	docs(plugins): remove obsolete Gateway restart guidance (#146516)	2026-09-12 16:48:13 -07:00
plugin-permission-requests.md	docs: STE pass on terminology consistency and run-on sentences (#143770)	2026-09-10 15:51:49 +09:00
reference.md	feat: share selected sessions read-only with a paired team Gateway (#136253)	2026-09-12 13:35:17 -07:00
sdk-agent-harness.md	docs(plugins,providers): close open link-audit findings for plugins and providers (#143021)	2026-09-09 19:49:52 +09:00
sdk-channel-inbound.md	feat(auto-reply): bounded multi-agent group threads on every channel (#141411)	2026-09-11 23:27:09 -07:00
sdk-channel-ingress.md	docs: fix 20 link defects confirmed live in the verified backlog (#144133)	2026-09-11 03:48:10 +08:00
sdk-channel-outbound.md	fix(line): answer a multi-image send as one turn (#132136)	2026-09-10 18:27:07 -07:00
sdk-channel-plugins.md	fix: Nostr profile actions fail for paired dashboard operators (#145932)	2026-09-12 19:06:42 +05:30
sdk-entrypoints.md	docs: Simplified Technical English pass over tools, plugins, and channels (#143979)	2026-09-10 19:21:31 +08:00
sdk-migration.md	docs: Simplified Technical English pass over tools, plugins, and channels (#143979)	2026-09-10 19:21:31 +08:00
sdk-overview.md	feat(plugins): expose the selected runtime entry (#144818)	2026-09-11 02:58:13 -07:00
sdk-provider-plugins.md	fix(auth): make chat login and model-access recovery actionable (#145051)	2026-09-12 09:55:23 +05:30
sdk-runtime.md	docs(plugins): remove obsolete Gateway restart guidance (#146516)	2026-09-12 16:48:13 -07:00
sdk-setup.md	chore(deps): advance cooled dependencies and major upgrades (#146258)	2026-09-12 13:28:12 -07:00
sdk-subpaths.md	feat: share selected sessions read-only with a paired team Gateway (#136253)	2026-09-12 13:35:17 -07:00
sdk-testing.md	improve(plugins): reduce media-tool availability preparation (#141337)	2026-09-07 11:32:26 -07:00
session-share.md	docs(plugins): remove obsolete Gateway restart guidance (#146516)	2026-09-12 16:48:13 -07:00
team-reports.md	docs(plugins): remove obsolete Gateway restart guidance (#146516)	2026-09-12 16:48:13 -07:00
teams-meetings.md	feat(voice): share GPT Live across meetings and calls (#146546)	2026-09-12 17:06:51 -07:00
tool-plugins.md	docs(plugins): remove obsolete Gateway restart guidance (#146516)	2026-09-12 16:48:13 -07:00
vault.md
voice-call.md	docs(plugins): remove obsolete Gateway restart guidance (#146516)	2026-09-12 16:48:13 -07:00
webhooks.md	docs(plugins): remove obsolete Gateway restart guidance (#146516)	2026-09-12 16:48:13 -07:00
workboard.md	docs(plugins): remove obsolete Gateway restart guidance (#146516)	2026-09-12 16:48:13 -07:00
zalouser.md	docs(plugins): remove obsolete Gateway restart guidance (#146516)	2026-09-12 16:48:13 -07:00
zoom-meetings.md	feat(voice): share GPT Live across meetings and calls (#146546)	2026-09-12 17:06:51 -07:00