john
30dd3a4d2b
Add PUT /sessions/{id} for legacy conversation updates in tkmind compat.
...
Portal direct-chat mirror and tool-history repair expect this route.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-08 22:03:52 +08:00
john
df7150b687
feat(tkmind): add POST /agent/call_tool for sandbox page materialization
...
Expose app-visible MCP tool dispatch so local smoke can verify write_file
and edit_file without an LLM round trip.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-08 21:37:27 +08:00
john
bb64736c60
fix(tkmind): restore session history, resume, and restart parity
...
Load conversation on GET /sessions/{id}, port POST /agent/resume, and align
/agent/restart with 1.41 provider restore plus extension_results output.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-08 21:27:14 +08:00
john
3c73d470f5
feat(tkmind): port v1.49 compat layer, PG sessions, and platform extensions
...
Add tkmind_compat REST routes (including config/read), PostgreSQL session
storage, and TKMind platform extensions so upstream Goose 1.49 can serve Portal
locally without changing H5 contracts.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-08 21:10:36 +08:00
Jack Amadeo
71fc4be1ed
remove keyring timeout ( #11798 )
2026-09-02 15:05:51 -04:00
github-actions[bot]
dd8de01967
chore(release): bump version to 1.49.0 (minor) ( #11727 )
...
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: Jack Amadeo <jackamadeo@squareup.com >
2026-09-02 12:06:41 +00:00
Abhijay Jain
f9176266ee
fix(openai): update stored tool call name when later delta carries non-empty name ( #11750 )
2026-09-02 01:57:17 +00:00
Lifei Zhou
14c00a4514
feat: support tool approval in the state machine ( #11685 )
2026-09-02 00:07:34 +00:00
Alex Hancock
7259c05174
feat(gdk): add first-class document content support ( #11629 )
2026-09-01 18:28:11 +00:00
SynthLuvr
3cb6434a02
fix(providers): correct zai default model id and add glm-5.3-flash ( #11674 )
2026-09-01 17:17:42 +00:00
Jack Amadeo
9d0c98595e
migrate openrouter provider to goose-providers ( #11757 )
2026-09-01 17:13:26 +00:00
dependabot[bot]
67827a1754
chore(deps): bump jsonschema from 0.49.9 to 0.52.0 ( #11665 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-09-01 14:57:40 +00:00
Alex Hancock
c1646b8405
fix(gdk): repair uniffi build broken by semantic merge conflict ( #11721 )
2026-09-01 07:26:45 +00:00
Jasper
7d650ebd7f
fix(security): anchor execute shell extraction ( #11492 )
...
Signed-off-by: Jasper Hugo <jasper@spiral.xyz >
2026-09-01 05:12:03 +00:00
Jasper
0cf78829e5
fix(security): isolate Telegram voice temp files ( #11442 )
...
Signed-off-by: Jasper Hugo <jasper@spiral.xyz >
2026-09-01 05:11:59 +00:00
Jasper
e05f5d4348
fix(security): fuse command scanner signals ( #11440 )
...
Signed-off-by: Jasper Hugo <jasper@spiral.xyz >
2026-09-01 05:11:55 +00:00
Jasper
7c7dc342d6
fix(dictation): bound provider response bodies ( #11401 )
...
Signed-off-by: Jasper Hugo <jasper@spiral.xyz >
2026-09-01 04:37:47 +00:00
Leon Bowie
0a9749b1cb
feat(auth): enable refresh auth cli ( #11657 )
...
Co-authored-by: Claude Sonnet 5 <noreply@anthropic.com >
2026-09-01 01:42:11 +00:00
Jasper
ed9648b923
fix(security): restrict extension tool dispatch ( #11602 )
2026-08-31 20:30:02 +00:00
Alex Hancock
114250f8ca
fix(gdk): preserve tool-call indices in streaming responses ( #11637 )
2026-08-31 16:26:08 -04:00
Alex Hancock
1d0146631c
feat(gdk): expose Anthropic response metadata for observability ( #11630 )
2026-08-31 16:24:36 -04:00
Alex Hancock
5c748fef4d
feat(gdk): add structured request and response observability hooks ( #11632 )
2026-08-31 18:27:31 +00:00
Alex Hancock
7d97fe1ead
feat(gdk): preserve thinking and redacted-thinking blocks across turns ( #11636 )
2026-08-31 15:24:39 +00:00
Jasper
5dc3fa847e
fix(apps): protect bundled cache identities ( #11397 )
...
Signed-off-by: Jasper Hugo <jasper@spiral.xyz >
2026-08-31 14:58:33 +00:00
Lifei Zhou
3a1d7f8c6a
refactor(acp): remove unused provider list fields ( #11696 )
2026-08-31 14:01:05 +00:00
αI
2163c14d41
test: remove racy scheduler message count assertion ( #11691 )
...
Co-authored-by: Alphaxiaoteng <230277249+Alphaxiaoteng@users.noreply.github.com >
2026-08-31 10:06:29 +00:00
Michael Neale
fb15d4eade
feat: configurable Anthropic prompt-cache TTL (5m/1h) ( #11576 )
...
Signed-off-by: Michael Neale <michael.neale@gmail.com >
Co-authored-by: Galadriel <galadriel@buzz.agent >
2026-08-31 00:43:58 +00:00
Michael Neale
815bd0b69a
feat(cli): add --system flag to goose session for parity with goose run ( #11673 )
...
Signed-off-by: Michael Neale <michael.neale@gmail.com >
2026-08-31 00:42:10 +00:00
Alex Hancock
a6d0b10c67
feat(gdk): expose cached input-token usage metrics ( #11628 )
2026-08-28 16:29:13 +00:00
filip
cfc0538463
fix(providers): parse OpenRouter nested cache_write_tokens in usage ( #11472 )
2026-08-28 16:12:58 +00:00
Douwe Osinga
2f5ff48b56
Clean up obsolete extension paths before redesigning the extension manager ( #11645 )
2026-08-28 15:10:23 +00:00
Lifei Zhou
dd8f5ed5c7
chore(acp): remove unused unstable methods ( #11650 )
2026-08-28 10:36:17 +00:00
Kalvin C
f87c4d73d1
chore: update canonical models json ( #11641 )
...
Co-authored-by: Lifei Zhou <lifei@squareup.com >
2026-08-28 04:53:42 +00:00
Kalvin C
caf59517cc
fix: enforce permission policy for app tool calls ( #11275 )
...
Signed-off-by: Kalvin Chau <kalvin@block.xyz >
Co-authored-by: peon <9ac6794b000690b7e814eb1805ad32405d0bec7d52838de3a86cf967565dacc0@buzz.block.builderlab.xyz >
Co-authored-by: Douwe Osinga <douwe.osinga@gmail.com >
Co-authored-by: Lifei Zhou <lifei@squareup.com >
2026-08-27 01:55:06 +00:00
Jasper
867a83cfc7
fix(local-inference): keep nested execute fences inert ( #11117 )
2026-08-26 21:02:35 +00:00
PigeonCraft
66e395b749
Fix MCP sampling for reasoning-first responses ( #11092 )
...
Co-authored-by: Douwe Osinga <douwe.osinga@gmail.com >
2026-08-26 17:36:07 +00:00
Felix
fd14ea3f15
feat(providers): add Opper as a declarative OpenAI-compatible provider ( #11589 )
2026-08-26 16:15:47 +00:00
Alex Hancock
2b9cd967e9
fix(bedrock): prefer HTTP bearer auth when a bearer token is configured ( #11562 )
2026-08-26 16:11:12 +00:00
tulsi
18c77b7b28
feat: title sessions by subject, not workflow step ( #11135 )
...
Co-authored-by: Douwe Osinga <douwe.osinga@gmail.com >
2026-08-26 16:04:22 +00:00
Kalvin C
b9b671c6c3
feat(provider): discover Databricks Unity Catalog model services ( #11575 )
2026-08-26 15:48:55 +00:00
Jack Amadeo
6357f73ea5
fix: unify context limit resolution behind provider API ( #11213 )
...
Signed-off-by: Jack Amadeo <jackamadeo@squareup.com >
2026-08-26 14:34:16 +00:00
Jasper
73b9938d73
fix(security): enforce per-turn model tool allowlists ( #11426 )
...
Signed-off-by: Jasper Hugo <jasper@spiral.xyz >
2026-08-26 13:45:12 +00:00
SynthLuvr
9a05f0207c
feat(cli): load extensions in the background so the prompt is immediately usable ( #10403 )
...
Co-authored-by: Jasper Hugo <jasper@jasperhugo.com >
2026-08-26 11:19:05 +00:00
Jasper
0ad009d153
fix(security): stop exposing provider secret suffixes ( #11476 )
2026-08-26 11:02:08 +00:00
Jasper
585d481fcd
fix(security): restrict code mode callback output ( #11471 )
2026-08-26 11:02:05 +00:00
Jasper
0b87ba5a04
fix(security): restrict app management tools ( #11470 )
2026-08-26 11:02:01 +00:00
Jasper
2aceb2856a
fix(security): preserve local inference message text ( #11452 )
2026-08-26 11:01:57 +00:00
Jasper
86800d42b8
fix(security): preserve session extension identities ( #11420 )
...
Signed-off-by: Jasper Hugo <jasper@spiral.xyz >
2026-08-26 11:01:53 +00:00
Jasper
9843e0ef34
fix(developer): bound local image reads ( #11419 )
...
Signed-off-by: Jasper Hugo <jasper@spiral.xyz >
2026-08-26 11:01:48 +00:00
Jasper
9a6127b34b
fix(sources): confine agent listing to source roots ( #11444 )
...
Signed-off-by: Jasper Hugo <jasper@spiral.xyz >
2026-08-26 11:01:45 +00:00