Commit Graph

  • 480f4a2bbb chore(skills): regenerate the cli-tunnel SKILL.md after the positional-arg fix diegosouzapw 2026-09-11 13:50:33 -03:00
  • 20abd89d7c fix(acp): bound session output buffers and reset stderr per prompt (#13100) anhtahaylove 2026-09-11 23:32:51 +07:00
  • e1cfdb5e48 fix(acp): release listeners, timers and sessions on every sendPrompt outcome (#13096) anhtahaylove 2026-09-11 23:30:44 +07:00
  • d61b1727cd fix(cli-helper): clear the log stream timeout on the abort path (#13114) anhtahaylove 2026-09-11 23:30:38 +07:00
  • 99fb441434 fix(db): release process listeners when a node:sqlite adapter closes (#13109) anhtahaylove 2026-09-11 23:30:32 +07:00
  • 67618978b0 fix(gamification): close the badge SSE stream when the signal is already aborted (#13106) anhtahaylove 2026-09-11 23:30:27 +07:00
  • 85a5126dba fix(compression): terminate idle workers on eviction (#13091) anhtahaylove 2026-09-11 23:27:45 +07:00
  • b1733d3c83 fix(plugins): make SIGKILL escalation idempotent per child (#13092) anhtahaylove 2026-09-11 23:27:42 +07:00
  • 66330cc724 fix(compression): pass a URL object when spawning the LLMLingua worker (#13093) anhtahaylove 2026-09-11 23:27:38 +07:00
  • a3fa6cf524 fix(traffic-inspector): release WS subscriber and ping timer on a dead socket (#13155) anhtahaylove 2026-09-11 23:27:34 +07:00
  • 30c96d43a5 fix(telegram): bound the per-user API key cache (#13166) anhtahaylove 2026-09-11 23:27:30 +07:00
  • 658153c7b0 fix(stream): release the upstream body when the JSON-to-SSE sniff times out (#13171) anhtahaylove 2026-09-11 23:27:26 +07:00
  • a1b9b02d5d fix(telegram): authenticate webhook deliveries with the Telegram secret token (#13175) anhtahaylove 2026-09-11 23:27:23 +07:00
  • 178d25250a fix(test): cap local unit-test concurrency at 4 to avoid exhausting commit charge (#13187) anhtahaylove 2026-09-11 23:27:18 +07:00
  • edfcb8be17 fix(test): resolve the WebDAV handler path with fileURLToPath (#13196) anhtahaylove 2026-09-11 23:27:14 +07:00
  • 6a83c57f19 fix(ci): clear the agent-skills-sync base-red on release/v3.8.51 diegosouzapw 2026-09-11 13:26:50 -03:00
  • 39300717ab docs(changelog): record the base-red orphan fixes for v3.8.51 diegosouzapw 2026-09-11 13:25:20 -03:00
  • c7f400d65f fix(ci): clear the docs-sync base-red on release/v3.8.51 — provider count 356 to 358 diegosouzapw 2026-09-11 13:08:36 -03:00
  • 1eac0226ac fix(api): reject revoked, deactivated, banned or expired keys on DELETE /v1/batches/delete-completed (omni-code-sec on #12969) (#13297) Diego Rodrigues de Sa e Souza 2026-09-11 13:05:48 -03:00
  • 9db4483722 fix(ci): clear the open-sse typecheck base-red on release/v3.8.51 diegosouzapw 2026-09-10 11:29:23 -03:00
  • 86a3af2d23 Merge remote-tracking branch 'origin/release/v3.8.51' into fix/orch-fase3-i18n-eu-locales fix/orch-fase3-i18n-eu-locales diegosouzapw 2026-09-11 13:03:49 -03:00
  • ea7ba79a73 fix(sse): restore credential refresh, failure persistence and codex image errors diegosouzapw 2026-09-11 12:56:54 -03:00
  • 3603a7b246 test(sse): pin the pipeline error-classification and Kiro stream contracts diegosouzapw 2026-09-11 12:56:15 -03:00
  • be40cadd01 fix(sse): carry the upstream error code/type through the provider pipeline diegosouzapw 2026-09-11 12:55:42 -03:00
  • 9e4955b069 Merge branch 'fix/v3851-basereds-orphans-g1' into fix/release-v3.8.51-basereds-orphans diegosouzapw 2026-09-11 12:55:06 -03:00
  • 47b6fb837a Merge branch 'fix/v3851-basereds-orphans-g4' into fix/release-v3.8.51-basereds-orphans diegosouzapw 2026-09-11 12:55:06 -03:00
  • e25b706c56 test(lease): re-inventory hard-lease call sites after the pipeline extraction diegosouzapw 2026-09-10 19:13:05 -03:00
  • 7edda9c30a test(combo): follow the provider-cooldown source guard into the split modules diegosouzapw 2026-09-10 19:12:46 -03:00
  • b4616e4316 fix(catalog): keep operator custom models out of the live-sync reader diegosouzapw 2026-09-10 19:12:06 -03:00
  • b3d3d9524c fix(combo): survive a malformed customModels row when building auto/* pools diegosouzapw 2026-09-10 19:11:36 -03:00
  • ed44f4ae12 fix(db): create the call_logs provider-stats index after legacy healing diegosouzapw 2026-09-10 19:11:08 -03:00
  • 2724ad07e1 fix(sse): restore upstream error parsing + rate-limit lock in the provider pipeline diegosouzapw 2026-09-10 18:39:42 -03:00
  • b4699bd0d4 Merge remote-tracking branch 'origin/release/v3.8.51' into chore/revive-excluded-vitest-tests diegosouzapw 2026-09-10 18:26:00 -03:00
  • af49d4972e fix(stream): accept the buffer size glm.ts has been passing since #12179 (#12925) Nguyen Thanh Dat 2026-09-11 04:25:31 +07:00
  • 4a4545b662 chore(ci): gate the two blind spots that let silent debt accumulate diegosouzapw 2026-09-10 18:25:24 -03:00
  • e136bff06b docs(changelog): correct the failure mode — English fallback, not blank text diegosouzapw 2026-09-10 18:18:51 -03:00
  • 22473dee50 feat(providers): add EURouter as an OpenAI-compatible gateway (#12985) (#13025) Nguyen Thanh Dat 2026-09-11 04:16:32 +07:00
  • 70a4b88256 fix(i18n): add the Phase 3 orchestration keys to the nine EU locales diegosouzapw 2026-09-10 18:14:07 -03:00
  • 2b9e7fb3ec feat(providers): add GreenPT as an OpenAI-compatible provider (#13024) Nguyen Thanh Dat 2026-09-11 04:14:04 +07:00
  • 9a56147019 fix(skills): read positionals declared with .addArgument() (#13009) Nguyen Thanh Dat 2026-09-11 04:13:37 +07:00
  • 751247a143 fix(security): scan both ends of an oversized body, not just the front (#13104) Nguyen Thanh Dat 2026-09-11 04:13:20 +07:00
  • 567abb5d68 fix(security): scan the text a tool_result carries (#13101) Nguyen Thanh Dat 2026-09-11 04:13:16 +07:00
  • 403a1a697d fix(guardrails): mask PII inside a tool_result's nested content (#12930) Nguyen Thanh Dat 2026-09-11 04:13:12 +07:00
  • f2d5728cfd fix(dashboard): test Responses nodes on /v1/responses, not chat completions (#13070) (#13087) Nguyen Thanh Dat 2026-09-11 04:13:08 +07:00
  • 0a314c84de fix(translator): treat contentSchema and unevaluatedItems as schema slots (#13110) Nguyen Thanh Dat 2026-09-11 04:13:05 +07:00
  • 1929aa656a fix(validation): accept a null dailyQuotaResetTimezone (#13066) (#13083) Nguyen Thanh Dat 2026-09-11 04:13:01 +07:00
  • 4edc3d57d0 fix(azure): match the generation, not one release, for max_completion_tokens (#13007) Nguyen Thanh Dat 2026-09-11 04:12:57 +07:00
  • a6f28210de fix(logs): match the in-memory call-log filter to the SQL one it re-applies (#12896) Nguyen Thanh Dat 2026-09-11 04:12:54 +07:00
  • 5df94f8b05 fix(bedrock): resolve context limits for every vendor prefix, not just anthropic (#12921) Nguyen Thanh Dat 2026-09-11 04:12:49 +07:00
  • e1a1290fde fix(compression): keep tool_result blocks first when aging annotates a turn (#12920) Nguyen Thanh Dat 2026-09-11 04:12:45 +07:00
  • ee21e7d2c9 fix(a2a): build the status agent card from the request that asked for it (#12918) Nguyen Thanh Dat 2026-09-11 04:12:41 +07:00
  • 150ca00950 fix(api): explicit scope, audit log and atomic sweep for DELETE /v1/batches/delete-completed (omni-code-review battery on #12969) (#13262) Diego Rodrigues de Sa e Souza 2026-09-10 17:58:15 -03:00
  • 14823b8940 fix(dashboard): surface combined-pipeline error in Compression Studio Run (#12061) fix/12061-compression-studio-run diegosouzapw 2026-09-10 16:05:12 -03:00
  • e60508cb9d fix(dashboard): honor active compression profile in effective-pipeline preview (#12063) fix/12063-compression-profile-header diegosouzapw 2026-09-10 16:03:52 -03:00
  • 5eede28fa2 fix(sse): surface an error for a truly empty Claude stream (#12398) fix/12398-fable-empty-stream diegosouzapw 2026-09-10 16:01:56 -03:00
  • 34a06be9ed fix(routing): recognize CLIProxyAPI unknown-provider 400 as fallback-worthy (#12800) fix/12800-qwen-family-alias diegosouzapw 2026-09-10 16:01:26 -03:00
  • d984db3053 fix(routing): stop round-robin combo opencode targets from collapsing onto opencode-zen (#11912) fix/11912-roundrobin-zen-collision diegosouzapw 2026-09-10 15:59:10 -03:00
  • 3e9db7a64a fix(sse): cap HuggingChat NDJSON body size and bound the read loop (#12577) fix/12577-huggingchat-buffer-cap diegosouzapw 2026-09-10 15:56:24 -03:00
  • 1430ded910 fix(sse): require Responses-shaped body before native OpenAI-compatible passthrough (#12129) fix/12129-context-handoff-shape diegosouzapw 2026-09-10 15:51:31 -03:00
  • 4ddd782dd8 fix(sse): register Arcee AI in the executor provider registry (#12784) fix/12784-arcee-provider diegosouzapw 2026-09-10 15:49:07 -03:00
  • a5c7eebe4a fix(routing): stop reactive-compaction log from lying when compression is disabled (#11977) fix/11977-antigravity-history-400 diegosouzapw 2026-09-10 15:48:07 -03:00
  • bdca029cbd fix(providers): route opencode-go/gpt-5.6-luna to /responses (#12196) fix/12196-opencode-go-responses diegosouzapw 2026-09-10 15:44:00 -03:00
  • 858cdfd9b7 fix(a2a): accept dashboard session auth on /a2a route (#12888) fix/12888-a2a-dashboard-auth diegosouzapw 2026-09-10 15:35:21 -03:00
  • 3ce03abae3 fix(sse): add first-byte watchdog to the TLS-fingerprint transport (#12656) fix/12656-wreq-stream-watchdog diegosouzapw 2026-09-10 15:35:13 -03:00
  • 17c3a693df fix(dashboard): surface auth-required banner for guest-session database settings (#12709) fix/12709-guest-import-settings diegosouzapw 2026-09-10 15:34:48 -03:00
  • e29123c359 fix(sse): exempt tiny-budget reasoning probes and trace persisted-cooldown skips (#12659) fix/12659-combo-skip-reasons diegosouzapw 2026-09-10 15:31:28 -03:00
  • 222bab0abb fix(memory): authenticate internal /v1/rerank loopback call (#12745) diegosouzapw 2026-09-10 15:27:34 -03:00
  • 9478176782 fix(cache): include tool_choice/tools/response_format in semantic cache signature (#12734) fix/12734-semantic-cache-toolchoice diegosouzapw 2026-09-10 15:25:21 -03:00
  • dcd8a11848 fix(oauth): warn before the dead localhost:8080 redirect in antigravity/gemini oauth start (#12413) fix/12413-antigravity-redirect-uri diegosouzapw 2026-09-10 15:22:56 -03:00
  • 92fc61374a fix(oauth): align codebuddy-cn OAuth User-Agent with chat/usage (#12702) fix/12702-codebuddy-cn-deepseek diegosouzapw 2026-09-10 15:22:15 -03:00
  • b9da3156d0 fix(sse): route shell-reported Auggie CLI-not-found through the actionable message (#12645) fix/12645-auggie-502 diegosouzapw 2026-09-10 15:21:59 -03:00
  • 79a8411709 fix(providers): stop devin-cli spawn error from double-closing SSE controller (#12517) fix/12517-devin-cli-sse-double-close diegosouzapw 2026-09-10 15:19:31 -03:00
  • 27d643a9da fix(sse): parse Ollama Cloud's current usage markup (#12749) fix/12749-ollama-cloud-usage-cookie diegosouzapw 2026-09-10 15:19:26 -03:00
  • 62a3c8156d fix(api): fail closed on an unresolvable API key in the completed-batch sweep; no-op key sweeps log at info fix/omni-code-review-batches-sweep diegosouzapw 2026-09-10 15:18:57 -03:00
  • d1fd3a6f40 fix(guardrails): stop Vision Bridge from re-selecting a model locked after a 404 (#12111) fix/12111-vision-bridge-lockout diegosouzapw 2026-09-10 15:05:56 -03:00
  • 3285e6694d fix(db): scope model-hidden overrides by modality (#12172) fix/12172-model-id-collision diegosouzapw 2026-09-10 15:01:49 -03:00
  • 4711f22c17 fix(usage): fail closed on budget enforcement for unpriced auto alias (#12341) fix/12341-budget-alias-auto diegosouzapw 2026-09-10 15:00:23 -03:00
  • 0da1d4277f fix(dashboard): refresh the providers list after deleting a compatible provider node (#12298) fix/12298-provider-delete-cache diegosouzapw 2026-09-10 14:55:38 -03:00
  • c82c7bedc1 test(batches): pin APP_LOG_LEVEL in the sweep-ownership test so the log assertion is environment-independent diegosouzapw 2026-09-10 14:55:16 -03:00
  • 1686024792 fix(providers): refresh Trae's stale Referer/Origin and forward user timezone (#12190) diegosouzapw 2026-09-10 14:54:07 -03:00
  • becb5954cc fix(api): key-first sweep scope, audit at warn, mixed-scope guard for completed batches diegosouzapw 2026-09-10 14:51:59 -03:00
  • c3bf4053e4 fix(providers): scope TinyCMS DOM shims to the call, not the process (#12072) fix/12072-tinycms-dom-shims diegosouzapw 2026-09-10 14:49:29 -03:00
  • 9957d6246f fix(cli): run Node runtime guard before heavy import chain (#12296) fix/12296-regex-flags-crash diegosouzapw 2026-09-10 14:48:13 -03:00
  • 6569b5ccf6 fix(dashboard): allow deleting the last extra-upstream-header row even when invalid (#12251) fix/12251-extra-headers-delete diegosouzapw 2026-09-10 14:48:08 -03:00
  • 8e6bddbc7b fix(db): scope local-provider apiKey dedup to base URL for multi-account LM Studio (#12173) fix/12173-lmstudio-multi-account diegosouzapw 2026-09-10 14:47:00 -03:00
  • 9a4a04a5dc fix(electron): relativize standalone symlink targets for Windows manifest verify (#11979) fix/11979-standalone-manifest-win diegosouzapw 2026-09-10 14:46:30 -03:00
  • b11b39dbce fix(providers): minimax-m3 collapses manual thinking.type:enabled to adaptive (#12132) fix/12132-minimax-thinking diegosouzapw 2026-09-10 14:41:01 -03:00
  • ed2bf5dfe9 fix(nvidia): fail open when a synced model catalog goes stale (#12849) diegosouzapw 2026-09-10 14:26:31 -03:00
  • 4b6c652b48 fix(providers): correct opencode-zen muse-spark context length and Responses auth header (#12681, #12633) fix/12681-opencode-registry diegosouzapw 2026-09-10 14:16:31 -03:00
  • a37c39ef73 fix(cli): setup-opencode respects --api-key/OMNIROUTE_API_KEY over context token (#12783) fix/12783-setup-opencode-key diegosouzapw 2026-09-10 14:15:00 -03:00
  • 60931fc8f9 fix(open-sse): write Adobe Firefly session tokens and cookie jars with 0700/0600 perms (#12572) fix/12572-firefly-perms diegosouzapw 2026-09-10 13:54:32 -03:00
  • 602df4d51d fix(api): remove hardcoded wildcard CORS in openai-to-gemini-sse.ts (#12573) fix/12573-gemini-cors diegosouzapw 2026-09-10 13:46:46 -03:00
  • 1aba29a532 fix(api): enforce API key policy on ElevenLabs proxy routes (#12574) fix/12574-elevenlabs-policy diegosouzapw 2026-09-10 13:58:45 -03:00
  • b6cc3e57c6 fix(api): close DNS-rebinding SSRF gap in webhook outbound-URL guard (#12569) diegosouzapw 2026-09-10 13:57:26 -03:00
  • cfd1007f0d fix(docker): require a per-session token on the VNC browser CDP bridge (#12571) diegosouzapw 2026-09-10 13:52:47 -03:00
  • b87c92b3d7 fix(docker): bind app/sidecar compose ports to loopback by default (#12568, #12578) fix/12568-compose-bind diegosouzapw 2026-09-10 13:51:25 -03:00
  • 9095c2c31a fix(api): create DB export temp paths with mkdtemp instead of predictable timestamps (#12579) fix/12579-db-export-tmp diegosouzapw 2026-09-10 13:45:32 -03:00
  • 43aba7dd7e fix(api): explicit sweep scope, audit log and atomic delete for completed batches diegosouzapw 2026-09-10 13:39:36 -03:00
  • fd27ff08c7 chore(deps): drain the Dependabot queue — 10 of 13 alerts (#13213) Diego Rodrigues de Sa e Souza 2026-09-10 13:37:55 -03:00
  • 3e56c46feb docs(changelog): point the PR-5 fragment at #13235 chore/electron-prune-docs-i18n diegosouzapw 2026-09-10 13:35:57 -03:00