Brian Mendonca
8a3d04c19c
Gateway UX: harden remote ws guidance and onboarding defaults
2026-02-22 12:46:20 +01:00
Peter Steinberger
0f989d3109
fix(gateway): tighten openai-http edge handling
2026-02-22 11:29:31 +00:00
Peter Steinberger
78c3c2a542
fix: stabilize flaky tests and sanitize directive-only chat tags
2026-02-22 12:19:33 +01:00
Ayaan Zaidi
8e00965618
test: use real SubsystemLogger in directive-tags test
2026-02-22 16:39:11 +05:30
Yuzuru Suzuki
6f7e5f92c3
fix: add operator.read and operator.write to default CLI scopes ( #22582 )
...
Merged via /review-pr -> /prepare-pr -> /merge-pr.
Prepared head SHA: 8569fc88c970e75934617c200ebfe117e9d5ae88
Co-authored-by: YuzuruS <1485195+YuzuruS@users.noreply.github.com >
Co-authored-by: obviyus <22031114+obviyus@users.noreply.github.com >
Reviewed-by: @obviyus
2026-02-22 16:36:18 +05:30
Peter Steinberger
5c57a45a59
fix: add non-streaming directive-tag regression tests ( #23298 ) (thanks @SidQin-cyber)
2026-02-22 11:31:23 +01:00
SidQin-cyber
e6490732cd
fix(gateway): strip directive tags from non-streaming webchat broadcasts
...
Closes #23053
The streaming path already strips [[reply_to_current]] and other
directive tags via stripInlineDirectiveTagsForDisplay, but the
non-streaming broadcastChatFinal path and the chat.inject path
sent raw message content to webchat clients, causing tags to
appear in rendered messages after streaming completes.
2026-02-22 11:31:23 +01:00
Peter Steinberger
1cd3b30907
fix: stop hardcoded channel fallback and auto-pick sole configured channel ( #23357 ) (thanks @lbo728)
...
Co-authored-by: lbo728 <extreme0728@gmail.com >
2026-02-22 11:21:43 +01:00
Frank Yang
1051f42f96
fix(stability): patch regex retries and timeout abort handling
2026-02-22 10:59:34 +01:00
Peter Steinberger
f4dd0577b0
fix(security): block hook transform symlink escapes
2026-02-22 10:18:05 +01:00
Peter Steinberger
2c6dd84718
fix(gateway): remove hello-ok host and commit fields
2026-02-22 10:17:36 +01:00
Peter Steinberger
f101d59d57
feat(security): warn on dangerous config flags at startup
2026-02-22 10:11:46 +01:00
Peter Steinberger
7cac6bd85d
test(core): continue mock reset reductions in auth, gateway, npm install
2026-02-22 08:28:50 +00:00
Peter Steinberger
8887f41d7d
refactor(gateway)!: remove legacy v1 device-auth handshake
2026-02-22 09:27:03 +01:00
Peter Steinberger
b014c70292
test(core): trim reset usage in gateway and install source specs
2026-02-22 08:25:09 +00:00
Peter Steinberger
d6d73d0ed9
test(core): trim redundant test resets and use mockClear
2026-02-22 08:12:55 +00:00
Peter Steinberger
88c564f050
test(gateway): use lightweight clears in agent handler tests
2026-02-22 08:01:16 +00:00
Peter Steinberger
1f0695ba47
test(core): use lightweight clears in update, child adapter, and copilot token setup
2026-02-22 08:01:16 +00:00
Peter Steinberger
be5921e8fe
test(gateway): use lightweight clears for openresponses agent fences
2026-02-22 08:01:16 +00:00
Peter Steinberger
682e42b0a1
test(gateway): use lightweight clears for openai http agent fences
2026-02-22 08:01:16 +00:00
Peter Steinberger
d624aa5ab2
test(gateway): use lightweight clears for chat-b reply spy fences
2026-02-22 08:01:16 +00:00
Peter Steinberger
9daab2abb3
test(gateway): use lightweight clears in client close setup
2026-02-22 08:01:16 +00:00
Peter Steinberger
56c57048cb
test(gateway): use lightweight clears for hook cron run fences
2026-02-22 08:01:16 +00:00
Peter Steinberger
4cc975fec1
test(gateway): use lightweight clears in node event setup
2026-02-22 08:01:16 +00:00
Peter Steinberger
d9085a7704
test(gateway): use lightweight clears in node invoke wake setup
2026-02-22 08:01:16 +00:00
Peter Steinberger
c358ada510
test(gateway): use lightweight clears in push handler setup
2026-02-22 08:01:16 +00:00
Peter Steinberger
2b24a44cd9
test(gateway): use lightweight clears in cron service setup
2026-02-22 08:01:15 +00:00
Peter Steinberger
ba2790222d
test(gateway): dedupe loopback cases and trim setup resets
2026-02-22 08:00:41 +00:00
Peter Steinberger
9f97555b5e
refactor(security): unify hook rate-limit and hook module loading
2026-02-22 08:57:01 +01:00
Peter Steinberger
3d03375043
fix(gateway): block avatar symlink escapes
2026-02-22 08:51:17 +01:00
Peter Steinberger
265da4dd2a
fix(security): harden gateway command/audit guardrails
2026-02-22 08:45:48 +01:00
Peter Steinberger
b109fa53ea
refactor(core): dedupe gateway runtime and config tests
2026-02-22 07:44:57 +00:00
Peter Steinberger
d325c01503
test(gateway): dedupe canvas ws connect assertions
2026-02-22 07:44:57 +00:00
Peter Steinberger
6471ff02dc
test(gateway): dedupe chat history transcript helpers
2026-02-22 07:44:57 +00:00
Peter Steinberger
64b9ae8fb1
test(gateway): reuse shared openai timeout e2e helpers
2026-02-22 07:44:57 +00:00
Peter Steinberger
c4aac407dc
test(gateway): dedupe openai context assertions
2026-02-22 07:44:57 +00:00
Peter Steinberger
b0f6f18569
test(gateway): dedupe control-ui not-found fixture assertions
2026-02-22 07:44:57 +00:00
Peter Steinberger
16f6b55cd4
test(gateway): dedupe tailscale header auth fixtures
2026-02-22 07:44:57 +00:00
Peter Steinberger
a2a19cdad2
test(gateway): dedupe transcript seed fixtures in fs session tests
2026-02-22 07:44:57 +00:00
Peter Steinberger
a4b3aeeefa
test(gateway): reuse last agent command assertion helper
2026-02-22 07:44:56 +00:00
Peter Steinberger
3284d2eb22
fix(security): normalize hook auth rate-limit client keys
2026-02-22 08:40:49 +01:00
Peter Steinberger
e0db04a50d
fix(security): harden avatar validation and size limits
2026-02-22 08:35:32 +01:00
Vignesh Natarajan
f2d664e24f
Gateway: deep-compare array config paths for reload diff
2026-02-21 19:17:46 -08:00
Vignesh Natarajan
4550a52007
TUI: filter model picker to allowlisted models
2026-02-21 19:03:15 -08:00
Peter Steinberger
e84d89ab06
test(gateway): extract shared parse warning helper
2026-02-21 23:32:32 +00:00
Peter Steinberger
d748657265
test(gateway): table-drive runtime config validation matrix
2026-02-21 23:29:29 +00:00
Peter Steinberger
833144fd72
test(gateway): tighten e2e timeout budget
2026-02-21 23:28:07 +00:00
Peter Steinberger
98790339ef
test: dedupe repeated validation and throw assertions
2026-02-21 23:28:07 +00:00
Peter Steinberger
c78ea8ec3f
test(gateway): tighten health e2e timeout ceilings
2026-02-21 23:28:06 +00:00
Marcus Widing
fa4e4efd92
fix(gateway): restore localhost Control UI pairing when allowInsecureAuth is set ( #22996 )
...
* fix(gateway): allow localhost Control UI without device identity when allowInsecureAuth is set
* fix(gateway): pass isLocalClient to evaluateMissingDeviceIdentity
* test: add regression tests for localhost Control UI pairing
* fix(gateway): require pairing for legacy metadata upgrades
* test(gateway): fix legacy metadata e2e ws typing
---------
Co-authored-by: Peter Steinberger <steipete@gmail.com >
2026-02-22 00:04:52 +01:00