9386e3a9d4
test(feishu): align lifecycle runtime env typing
2026-04-14 21:01:39 +01:00
d35bdf6311
refactor(slack): use packaged thread status method
2026-04-14 12:56:25 -07:00
c8003f1b33
Harden Feishu webhook replay guards ( #66707 )
...
* fix(feishu): harden webhook replay guards
* changelog: note Feishu webhook + card-action fail-closed hardening (#66707 )
* fix(feishu): move blank-token check above decodeFeishuCardAction
Run the early-return guard against a missing/blank card-action
token before decoding the card-action payload. Decoding is
side-effect-free so this is a readability + tiny-perf nit, not a
correctness change. Matches Greptile's P2 suggestion.
---------
Co-authored-by: Devin Robison <drobison@nvidia.com >
2026-04-14 13:50:41 -06:00
1f14c8d96b
fix(slack): fix slash commands with button arg menu errors
...
Co-authored-by: Wang Siyuan <wsy0227@sjtu.edu.cn >
2026-04-14 12:39:56 -07:00
df956f8162
test(slack): harden fixture cleanup retries
2026-04-14 19:51:21 +01:00
c7f08d19ea
test(contracts): refresh plugin boundary expectations
2026-04-14 19:39:33 +01:00
8d1510eb7b
fix(lint): clear masked main check failures
2026-04-14 18:58:36 +01:00
2aaa17dc6f
fix(ci): restore main typecheck
2026-04-14 18:53:14 +01:00
0a9616caa8
fix(matrix): align extension-api source aliases
2026-04-14 18:03:26 +01:00
0a87707092
fix(matrix): normalize trusted wrapper bin hints
2026-04-14 17:58:58 +01:00
3745d5b135
fix(matrix): require trusted wrapper package roots
2026-04-14 17:55:07 +01:00
30073feb6f
fix(matrix): sort safe wrapper sdk subpaths
2026-04-14 17:51:06 +01:00
3a371a32e2
fix: filter telegram binary caption text ( #66663 ) (thanks @joelnishanth)
...
* Telegram: filter binary content from msg.caption to prevent token explosion (#66647 )
When a user sends a binary document (e.g. .mobi, .epub) via Telegram, raw
binary bytes can leak into msg.caption. getTelegramTextParts() passes this
through to the LLM prompt, causing catastrophic token explosion (~460K tokens).
Add isBinaryContent() that detects non-printable control characters (0x00-0x08,
0x0E-0x1F) and use it to sanitize the text in getTelegramTextParts() before it
reaches the prompt pipeline. When binary content is detected, the text and
entities are both replaced with empty values so the message is still processed
(media placeholder still works) but the binary junk is dropped.
Made-with: Cursor
* fix: distill telegram binary caption filtering
* fix: filter telegram binary caption text (#66663 ) (thanks @joelnishanth)
---------
Co-authored-by: Ayaan Zaidi <hi@obviy.us >
2026-04-14 22:14:50 +05:30
074efc94dc
fix(matrix): align wrapper scoped sdk aliases
2026-04-14 17:41:32 +01:00
f190bf0a07
Fix Matrix media alias normalization
2026-04-14 12:36:13 -04:00
8d3bd4859e
perf(whatsapp): add doctor contract fast path
2026-04-14 17:27:07 +01:00
450c3a8ed2
fix(security): include Matrix avatar params in sandbox media normalization + preserve mxc:// URLs + log gmail watcher stop failures [AI-assisted] ( #64701 )
...
Merged via squash.
Prepared head SHA: 54de3f019b8977826d1a40acb827568835bce780
Co-authored-by: slepybear <108438815+slepybear@users.noreply.github.com >
Co-authored-by: gumadeiras <5599352+gumadeiras@users.noreply.github.com >
Reviewed-by: @gumadeiras
2026-04-14 12:22:29 -04:00
daabbce9a0
refactor(openai): import base URL helpers directly
2026-04-14 21:52:16 +05:30
5c28cfbf09
perf(channels): add lightweight doctor contract APIs
2026-04-14 17:20:46 +01:00
8b404eccff
test(openai): cover base URL helpers
2026-04-14 21:45:34 +05:30
3624dda67d
refactor(openai): isolate base URL helpers
2026-04-14 21:45:34 +05:30
b2b3bf35cd
fix(openai): reuse canonical responses stream hooks
2026-04-14 17:14:53 +01:00
eea7ba5345
fix(plugin-sdk): share canonical stream hook families
2026-04-14 17:13:31 +01:00
37d5971db3
Align QMD memory reads with canonical memory paths ( #66026 )
...
* fix(memory): align qmd read paths
Co-authored-by: zsx <git@zsxsoft.com >
* fix(memory): add qmd exact-path read fast path
* fix(memory): tighten qmd read-path guards
* changelog: note QMD memory_get canonical-path restriction (#66026 )
---------
Co-authored-by: zsx <git@zsxsoft.com >
Co-authored-by: Devin Robison <drobison@nvidia.com >
2026-04-14 09:58:27 -06:00
30dcebae80
fix(minimax): share region auth builders
2026-04-14 16:50:20 +01:00
66701d5a1e
fix(plugin-sdk): share opencode catalog auth helper
2026-04-14 16:48:02 +01:00
25efa8cf81
fix(minimax): share provider hook bundle
2026-04-14 16:41:46 +01:00
36f4913e30
fix(openai): share responses transport hooks
2026-04-14 16:40:05 +01:00
e5c38290a6
fix(plugin-sdk): share anthropic replay hook constants
2026-04-14 16:37:29 +01:00
4c15f1310b
fix(plugin-sdk): share canonical replay hook families
2026-04-14 16:34:09 +01:00
356110c52f
fix(google): share gemini provider hook bundle
2026-04-14 16:30:32 +01:00
a14f7c5c6d
fix(openai): share responses stream hook family
2026-04-14 16:28:58 +01:00
60961a7f55
fix(openai): share responses transport defaults
2026-04-14 16:25:30 +01:00
9c42e6424d
fix(plugins): share tool-stream defaults and align xai sdk imports
2026-04-14 16:23:40 +01:00
5237a149ff
fix(plugins): drop stale provider hook dead code
2026-04-14 16:16:34 +01:00
3f8c6dd341
fix(openrouter): reuse shared replay hooks
2026-04-14 16:15:22 +01:00
e121889a9f
fix(plugins): share native anthropic replay hooks
2026-04-14 16:07:16 +01:00
7184200c17
fix: accept optional runway source mime type
2026-04-14 15:14:26 +01:00
a88c6f0fe7
fix: bound live video generation smoke
2026-04-14 14:59:01 +01:00
d86527d8c6
fix(whatsapp): harden Baileys media upload hotfix ( #65966 )
...
Merged via squash.
Prepared head SHA: b5db59b8feac73eda70f98c360725030c124cba8
Co-authored-by: frankekn <4488090+frankekn@users.noreply.github.com >
Co-authored-by: frankekn <4488090+frankekn@users.noreply.github.com >
Reviewed-by: @frankekn
2026-04-14 21:34:23 +08:00
d2240a9476
test: harden qa-lab concurrent web scenarios
2026-04-14 13:42:02 +01:00
10dbb21380
fix(models): normalize google-vertex flash-lite ids
2026-04-14 13:24:46 +01:00
3329824eed
test: harden video live provider release gate
2026-04-14 12:53:33 +01:00
6c0bff111c
fix(google): strip Gemini compat base suffixes ( #66445 )
...
* fix(google): cover Gemini image /openai base URLs
* fix(google): strip Gemini compat base suffixes
* fix(google): scope Gemini /openai normalization
* fix(google): harden base URL normalization
* fix(google): restrict Gemini auth base URLs
* Update CHANGELOG.md
* Update CHANGELOG.md
2026-04-14 11:19:41 +01:00
3587e0ef95
fix(codex): keep auth read diagnostics off stdout ( #66451 )
...
* fix(codex): keep auth read diagnostics off stdout
* docs(changelog): fix codex auth entry
* fix(codex): sanitize auth read diagnostics
* Update CHANGELOG.md
2026-04-14 11:13:57 +01:00
5a5ca6d62c
feat(codex): add gpt-5.4-pro forward compat ( #66453 )
...
* feat(openai-codex): add gpt-5.4-pro forward-compat #63404
* feat(openai-codex): add gpt-5.4-pro forward-compat #63404
* openai-codex: use patch.cost when forward-compat falls back to normalizeModelCompat
* feat(codex): add gpt-5.4-pro forward compat
* fix(codex): reuse gpt-5.4 fallback for gpt-5.4-pro
---------
Co-authored-by: jepson-liu <jepsonliu@gmail.com >
2026-04-14 11:05:24 +01:00
e58d50b7a8
fix(telegram): trust explicit proxy DNS for media downloads ( #66461 )
2026-04-14 10:42:33 +01:00
072e8cfe62
test(discord): avoid status fast path in allow-from fixture
2026-04-14 10:04:47 +01:00
a70fdc88e0
fix(github-copilot): enable xhigh for gpt-5.4 ( #66437 )
...
* fix(github-copilot): enable xhigh for gpt-5.4
* Update CHANGELOG.md
2026-04-14 09:58:19 +01:00
b90d4ea3d7
fix(codex): canonicalize the gpt-5.4-codex alias ( #66438 )
...
* fix(codex): canonicalize the gpt-5.4-codex alias
* Update CHANGELOG.md
2026-04-14 09:56:58 +01:00
Vincent Koc