tkmind/tkmind_go
1
0
Fork 0
Code Issues Pull Requests Actions 31 Packages Projects Releases Wiki Activity
5,492 Commits 4 Branches 0 Tags
2dbec3bf6418055abb85e9d715deece0d85d5131
Commit Graph

1801 Commits

Author SHA1 Message Date
Jasper 2dbec3bf64 fix(security): recognize Windows package runners (#11466) 2026-08-24 18:52:37 +00:00
Jasper 11269687a8 fix(security): fail closed on malformed tool visibility (#11474) 2026-08-24 18:51:42 +00:00
Jasper df147d32d4 fix(security): give permission denies precedence (#11477) 2026-08-24 18:51:25 +00:00
Jasper 6808b4d15b fix(recipes): confine library writes (#11482) 2026-08-24 18:50:15 +00:00
Jasper 9a4e043562 fix(acp): restrict project updates to visible sessions (#11487) 2026-08-24 16:51:22 +00:00
Jasper ce0bc7c567 fix(checks): reject symlinked check sources (#11489) 2026-08-24 16:51:01 +00:00
Jasper bcde80a63b fix: keep recalled history agent-visible (#11490) 2026-08-24 16:50:45 +00:00
Jasper c5e5929a64 fix(recipe): reject non-object response schemas (#11478) 2026-08-23 23:27:17 +00:00
Jasper 8d844eecbd fix(security): escape OAuth callback content (#11479) 2026-08-21 21:23:59 +00:00
dependabot[bot] 4ac063f664 chore(deps): bump symphonia from 0.5.5 to 0.6.1 (#11465) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Douwe Osinga <douwe.osinga@gmail.com>
 2026-08-21 15:20:09 -04:00
Jasper 45b322c1df fix(security): honor plugin enablement for skills (#11439) 
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
 2026-08-21 15:36:31 +00:00
Jasper 10cd3acd4a fix(claude-code): protect system prompt transport (#11441) 
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
 2026-08-21 13:34:36 +00:00
Wolfe-James a5de37814a fix(agents): fail fast when a recipe's structured response can't reach an ACP-bridged provider (#11307) 
Co-authored-by: Claude Sonnet 5 <noreply@anthropic.com>
Co-authored-by: Lifei Zhou <lifei@squareup.com>
 2026-08-21 08:31:40 +00:00
Abhijay Jain 4078158c01 fix(providers): inform user of clipboard copy and remove copilot auth retry on timeout (#11160) 
Signed-off-by: Abhijay Jain <Abhijay007j@gmail.com>
Co-authored-by: Lifei Zhou <lifei@squareup.com>
 2026-08-21 07:07:11 +00:00
nathansmithopenclaw-alt c274feb016 fix(openrouter): escape Gemini tool response ref keys (#11276) 
Signed-off-by: nathansmithopenclaw-alt <273889179+nathansmithopenclaw-alt@users.noreply.github.com>
Signed-off-by: Michael Neale <michael.neale@gmail.com>
Co-authored-by: nathansmithopenclaw-alt <273889179+nathansmithopenclaw-alt@users.noreply.github.com>
Co-authored-by: Michael Neale <michael.neale@gmail.com>
 2026-08-21 03:29:23 +00:00
Jasper d830653309 fix(security): honor MCP tool model visibility in Code Mode (#11425) 2026-08-21 02:34:38 +00:00
jonathan MERCIER 48d480f911 fix(providers): estimate cost for Azure Foundry models via inferred catalog pricing (#11264) 
Signed-off-by: Michael Neale <michael.neale@gmail.com>
Co-authored-by: Michael Neale <michael.neale@gmail.com>
 2026-08-21 01:52:41 +00:00
Abhijay Jain 8e8b674cf0 feat(providers): add Gondola as declarative OpenAI-compatible provider (#11421) 
Signed-off-by: Abhijay Jain <Abhijay007j@gmail.com>
 2026-08-21 01:47:18 +00:00
Steven Pousty f45ccd46f7 feat(otel): add request params, response metadata, tool call parity, and agent identification (#11261) 
Co-authored-by: Jack Amadeo <jackamadeo@squareup.com>
 2026-08-21 01:46:22 +00:00
Tymofii Pidlisnyi d0fc739a4c feat(hooks): add PreToolUseResult event and stable tool_call_id across tool lifecycle (#11120) 
Signed-off-by: Tymofii Pidlisnyi <171286556+aeoess@users.noreply.github.com>
Signed-off-by: Douwe Osinga <douwe.osinga@gmail.com>
Co-authored-by: Tymofii Pidlisnyi <171286556+aeoess@users.noreply.github.com>
Co-authored-by: Douwe Osinga <douwe.osinga@gmail.com>
 2026-08-21 00:38:53 +00:00
Alex Hancock 2f5169af35 add MCP conformance tests to goose CI (combines #10800 + #10801) (#10940) 
Signed-off-by: Jack Amadeo <jackamadeo@squareup.com>
Co-authored-by: Jack Amadeo <jackamadeo@squareup.com>
 2026-08-20 21:51:53 +00:00
Alex Hancock fc6311acb7 test(plugins): isolate GOOSE_PATH_ROOT in discovery tests (#11407) 2026-08-20 14:59:39 +00:00
Jasper 0ed7b02d5f fix(config): serialize secret mutations (#11388) 
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
 2026-08-20 14:03:53 +00:00
Jasper 8343c4a16b fix: decouple source file and tool response limits (#11391) 2026-08-20 14:03:51 +00:00
dependabot[bot] ba7ffd3efa chore(deps): bump pctx_code_mode from 0.4.1 to 0.5.0 (#11245) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Douwe Osinga <douwe@block.xyz>
Co-authored-by: Douwe Osinga <douwe.osinga@gmail.com>
 2026-08-20 13:19:20 +00:00
Jasper 8648f2d060 fix(security): suppress sensitive OTLP traces (#11381) 2026-08-20 13:16:36 +00:00
Lee-Si-Yoon f70cb64d3f feat(openrouter): forward session_id and add app category header (#10868) 2026-08-20 13:13:33 +00:00
Matt Toohey 3dd0762f96 feat(acp): derive and forward thinking effort from the ACP harness (#10949) 
Signed-off-by: Matt Toohey <contact@matttoohey.com>
Co-authored-by: Claude <noreply@anthropic.com>
Co-authored-by: Jasper Hugo <jasper@jasperhugo.com>
 2026-08-20 12:50:47 +00:00
Hugues Clouâtre 1e7b2b969d fix(aws_bedrock): replace flat model list with routing table, add Gemma 4 Mantle support (#10297) 
Signed-off-by: Hugues Clouâtre <hugues@linux.com>
Co-authored-by: Jack Amadeo <jackamadeo@squareup.com>
 2026-08-20 12:45:14 +00:00
Jasper d1d8f45812 fix(security): fail closed on invalid default GCP credentials (#11363) 
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
 2026-08-20 11:53:02 +00:00
Jasper c250daab3e fix(codex): reject socket-backed MCP extensions (#11304) 
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
 2026-08-20 11:51:02 +00:00
Jasper ea07f7bb41 fix: pass complete response to stop hooks (#11366) 
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
 2026-08-20 10:50:45 +00:00
Jasper df899654fe fix: contain and bound skill supporting file reads (#11342) 
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
 2026-08-20 10:48:51 +00:00
Jasper a171a3db83 fix(security): bound call graph traversal (#11193) 
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
 2026-08-20 09:45:17 +00:00
Zach Nelson 69a705fc39 feat(providers): custom provider cost fields drive cost tracking (config-declared pricing fallback) (#11220) 
Co-authored-by: Claude Opus 5 <noreply@anthropic.com>
 2026-08-20 07:36:28 +00:00
Jasper 01f5ed7f9b fix(security): fail closed on invalid Codex ACP mode (#11362) 
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
 2026-08-20 00:24:12 +00:00
iroiro147 bc68049225 fix(mcp): keep stdio extensions alive across worker exits (#10364) 
Signed-off-by: iroiro147 <sarthak.singh@juspay.in>
 2026-08-20 00:23:18 +00:00
Jasper 4de6fe2065 fix: bound retry command diagnostics (#11365) 
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
 2026-08-19 23:32:58 +00:00
Douwe Osinga c13aa86a74 Disable thinking for tool call labels (#11207) 2026-08-19 23:23:18 +00:00
Jasper 760f4d5855 fix(review): contain REVIEW.md discovery (#11367) 
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
 2026-08-19 23:10:56 +00:00
Jasper 2f89bec759 fix(acp): preserve tool result audience metadata (#11375) 2026-08-19 23:09:34 +00:00
Jasper 0259143260 fix(security): bind Foundry API keys to request origin (#11347) 
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
 2026-08-19 22:45:10 +00:00
Herley f2e6e9ed05 fix: canonicalize mangled tool names before permission inspection (follow-up to #10230) (#10285) 2026-08-19 22:15:03 +00:00
Jasper ba2d868cff fix: sanitize Pi imported output (#10990) 2026-08-19 22:12:10 +00:00
Jasper b7eef328df fix(otel): honor RUST_LOG directives for logs (#11360) 
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
 2026-08-19 21:53:53 +00:00
Abhijay Jain 6d6abf74a1 feat(skills): add web-search and browser-use built-in skills (#11233) 
Signed-off-by: Abhijay Jain <Abhijay007j@gmail.com>
 2026-08-19 21:51:24 +00:00
Joel Wirāmu Pauling 6722a195e1 feat(dictation): add model-native audio transcription provider (#10589) 2026-08-19 21:37:10 +00:00
kbennett15 e31f2f4292 feat(aws_bedrock): route OpenAI GPT-5.6 (sol/terra/luna) via Bedrock … (#10502) 
Signed-off-by: kbennett15 <75271761+kbennett15@users.noreply.github.com>
 2026-08-19 21:32:40 +00:00
Lifei Zhou b832501b6f preserve extensions when adding MCP servers (#11339) 2026-08-19 20:36:24 +00:00
Jasper 81578789e2 fix(config): preserve platform tool allowlists (#11369) 
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
 2026-08-19 20:30:15 +00:00