Mason 09016db731 fix: wrap untrusted file inputs (#60277) ...

Merged via squash.

Prepared head SHA: 56ce545786
Co-authored-by: hxy91819 <8814856+hxy91819@users.noreply.github.com>
Co-authored-by: frankekn <4488090+frankekn@users.noreply.github.com>
Reviewed-by: @frankekn

2026-04-05 01:54:48 +08:00

..

acp

fix(ci): restore contract-safe core imports

2026-04-04 15:09:48 +01:00

agents

style: trim live model switch comment noise

2026-04-04 22:42:30 +05:30

auto-reply

core: dedupe approval not-found handling (#60932)

2026-04-04 13:23:58 -04:00

bindings

…

bootstrap

…

canvas-host

…

channels

fix: remove bundled channel startup reentry

2026-04-04 15:39:12 +01:00

chat

…

cli

fix(cli): route skills list output to stdout when --json is active (#60914)

2026-04-04 18:09:44 +03:00

commands

fix: remove bundled channel startup reentry

2026-04-04 15:39:12 +01:00

compat

…

config

fix(ci): restore contract-safe core imports

2026-04-04 15:09:48 +01:00

context-engine

…

cron

fix: keep NO_REPLY detection case-insensitive

2026-04-04 22:38:59 +05:30

daemon

fix: preserve Windows scheduled task restart/install behavior (#59335) (thanks @tmimmanuel)

2026-04-04 08:46:00 +05:30

docs

…

flows

style(providers): normalize import and wrap formatting

2026-04-04 12:19:08 +01:00

gateway

fix: wrap untrusted file inputs (#60277)

2026-04-05 01:54:48 +08:00

generated

feat(memory): harden dreaming and multilingual memory promotion (#60697)

2026-04-04 15:48:13 +09:00

hooks

test: align hook install unsafe flag assertion

2026-04-04 05:27:57 +01:00

i18n

…

image-generation

fix(plugins): reuse active registry during tool resolution (#52262)

2026-04-03 17:16:33 -04:00

infra

core: dedupe approval not-found handling (#60932)

2026-04-04 13:23:58 -04:00

interactive

…

link-understanding

…

logging

perf(cli): trim gateway status startup imports

2026-04-04 08:59:56 +01:00

markdown

test(plugins): finish moving contract coverage

2026-04-04 00:11:39 +01:00

mcp

…

media

test(plugins): finish moving contract coverage

2026-04-04 00:11:39 +01:00

media-understanding

fix: wrap untrusted file inputs (#60277)

2026-04-05 01:54:48 +08:00

memory-host-sdk

fix(ci): restore contract-safe core imports

2026-04-04 15:09:48 +01:00

node-host

fix(ci): restore contract-safe core imports

2026-04-04 15:09:48 +01:00

pairing

fix(auth): hand off qr bootstrap to bounded device tokens

2026-04-04 15:57:38 +09:00

plugin-sdk

core: dedupe approval not-found handling (#60932)

2026-04-04 13:23:58 -04:00

plugins

core: dedupe approval not-found handling (#60932)

2026-04-04 13:23:58 -04:00

process

fix(ci): repair zalouser sdk path and exec timeout kill

2026-04-04 04:51:33 +01:00

realtime-transcription

refactor: move voice-call realtime providers into extensions

2026-04-04 12:07:23 +09:00

realtime-voice

refactor: move voice-call realtime providers into extensions

2026-04-04 12:07:23 +09:00

routing

fix(control-ui): keep session key helpers browser-safe

2026-04-03 20:39:36 -07:00

scripts

perf: split more targeted test lanes

2026-04-04 06:05:24 +01:00

secrets

style(providers): normalize import and wrap formatting

2026-04-04 12:19:08 +01:00

security

fix(ci): restore contract-safe core imports

2026-04-04 15:09:48 +01:00

sessions

fix: scope live model switch pending state (#60266) (thanks @kiranvk-2011)

2026-04-04 19:45:53 +09:00

shared

fix: constrain device bootstrap scope checks by role prefix (#57258) (thanks @jlapenna) (#57258)

2026-04-04 23:21:01 +09:00

tasks

fix(runtime): restore gateway watch on legacy state

2026-04-04 09:18:28 +01:00

terminal

…

test-helpers

test(plugins): finish moving contract coverage

2026-04-04 00:11:39 +01:00

test-utils

fix(ci): await async provider test registration

2026-04-04 09:28:43 +01:00

tts

…

tui

test: trim remaining mock drift

2026-04-04 04:04:12 +01:00

types

…

utils

refactor(providers): centralize provider model policy

2026-04-04 06:16:48 +01:00

web-fetch

…

web-search

…

wizard

fix: handle sensitive, number-clear, and array-clear edge cases in plugin config TUI (#60640) (#60640)

2026-04-03 19:27:26 -07:00

browser-lifecycle-cleanup.test.ts

refactor(browser): share lifecycle cleanup helpers

2026-04-04 12:17:46 +01:00

browser-lifecycle-cleanup.ts

refactor(browser): share lifecycle cleanup helpers

2026-04-04 12:17:46 +01:00

channel-web.ts

…

docker-build-cache.test.ts

fix: stabilize live and docker test lanes

2026-04-03 21:43:36 +01:00

docker-image-digests.test.ts

…

docker-setup.e2e.test.ts

…

dockerfile.test.ts

…

entry.respawn.test.ts

…

entry.respawn.ts

…

entry.test.ts

fix: unblock cli startup metadata

2026-04-04 02:35:36 +01:00

entry.ts

fix: unblock cli startup metadata

2026-04-04 02:35:36 +01:00

entry.version-fast-path.test.ts

…

extensionAPI.ts

…

global-state.ts

…

globals.ts

…

index.test.ts

…

index.ts

refactor(plugins): move extension seams into extensions

2026-04-04 00:10:16 +01:00

install-sh-version.test.ts

…

library.test.ts

…

library.ts

refactor(plugins): move extension seams into extensions

2026-04-04 00:10:16 +01:00

logger.test.ts

…

logger.ts

…

logging.ts

…

param-key.ts

…

plugin-activation-boundary.test.ts

…

poll-params.test.ts

…

poll-params.ts

…

polls.test.ts

…

polls.ts

…

runtime.ts

…

ui-app-settings.agents-files-refresh.test.ts

fix(ci): align settings host test fixtures

2026-04-04 06:08:26 +01:00

utils.test.ts

test(plugins): finish moving contract coverage

2026-04-04 00:11:39 +01:00

utils.ts

refactor(plugins): move extension seams into extensions

2026-04-04 00:10:16 +01:00

version.test.ts

…

version.ts

…