Commit Graph

2527 Commits

Author SHA1 Message Date
Jasper 5dc3fa847e fix(apps): protect bundled cache identities (#11397)
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
2026-08-31 14:58:33 +00:00
Lifei Zhou 3a1d7f8c6a refactor(acp): remove unused provider list fields (#11696) 2026-08-31 14:01:05 +00:00
αI 2163c14d41 test: remove racy scheduler message count assertion (#11691)
Co-authored-by: Alphaxiaoteng <230277249+Alphaxiaoteng@users.noreply.github.com>
2026-08-31 10:06:29 +00:00
Michael Neale fb15d4eade feat: configurable Anthropic prompt-cache TTL (5m/1h) (#11576)
Signed-off-by: Michael Neale <michael.neale@gmail.com>
Co-authored-by: Galadriel <galadriel@buzz.agent>
2026-08-31 00:43:58 +00:00
Michael Neale 815bd0b69a feat(cli): add --system flag to goose session for parity with goose run (#11673)
Signed-off-by: Michael Neale <michael.neale@gmail.com>
2026-08-31 00:42:10 +00:00
Alex Hancock a6d0b10c67 feat(gdk): expose cached input-token usage metrics (#11628) 2026-08-28 16:29:13 +00:00
filip cfc0538463 fix(providers): parse OpenRouter nested cache_write_tokens in usage (#11472) 2026-08-28 16:12:58 +00:00
Douwe Osinga 2f5ff48b56 Clean up obsolete extension paths before redesigning the extension manager (#11645) 2026-08-28 15:10:23 +00:00
Lifei Zhou dd8f5ed5c7 chore(acp): remove unused unstable methods (#11650) 2026-08-28 10:36:17 +00:00
Kalvin C f87c4d73d1 chore: update canonical models json (#11641)
Co-authored-by: Lifei Zhou <lifei@squareup.com>
2026-08-28 04:53:42 +00:00
Kalvin C caf59517cc fix: enforce permission policy for app tool calls (#11275)
Signed-off-by: Kalvin Chau <kalvin@block.xyz>
Co-authored-by: peon <9ac6794b000690b7e814eb1805ad32405d0bec7d52838de3a86cf967565dacc0@buzz.block.builderlab.xyz>
Co-authored-by: Douwe Osinga <douwe.osinga@gmail.com>
Co-authored-by: Lifei Zhou <lifei@squareup.com>
2026-08-27 01:55:06 +00:00
Jasper 867a83cfc7 fix(local-inference): keep nested execute fences inert (#11117) 2026-08-26 21:02:35 +00:00
PigeonCraft 66e395b749 Fix MCP sampling for reasoning-first responses (#11092)
Co-authored-by: Douwe Osinga <douwe.osinga@gmail.com>
2026-08-26 17:36:07 +00:00
Felix fd14ea3f15 feat(providers): add Opper as a declarative OpenAI-compatible provider (#11589) 2026-08-26 16:15:47 +00:00
Alex Hancock 2b9cd967e9 fix(bedrock): prefer HTTP bearer auth when a bearer token is configured (#11562) 2026-08-26 16:11:12 +00:00
tulsi 18c77b7b28 feat: title sessions by subject, not workflow step (#11135)
Co-authored-by: Douwe Osinga <douwe.osinga@gmail.com>
2026-08-26 16:04:22 +00:00
Kalvin C b9b671c6c3 feat(provider): discover Databricks Unity Catalog model services (#11575) 2026-08-26 15:48:55 +00:00
Jack Amadeo 6357f73ea5 fix: unify context limit resolution behind provider API (#11213)
Signed-off-by: Jack Amadeo <jackamadeo@squareup.com>
2026-08-26 14:34:16 +00:00
Jasper 73b9938d73 fix(security): enforce per-turn model tool allowlists (#11426)
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
2026-08-26 13:45:12 +00:00
SynthLuvr 9a05f0207c feat(cli): load extensions in the background so the prompt is immediately usable (#10403)
Co-authored-by: Jasper Hugo <jasper@jasperhugo.com>
2026-08-26 11:19:05 +00:00
Jasper 0ad009d153 fix(security): stop exposing provider secret suffixes (#11476) 2026-08-26 11:02:08 +00:00
Jasper 585d481fcd fix(security): restrict code mode callback output (#11471) 2026-08-26 11:02:05 +00:00
Jasper 0b87ba5a04 fix(security): restrict app management tools (#11470) 2026-08-26 11:02:01 +00:00
Jasper 2aceb2856a fix(security): preserve local inference message text (#11452) 2026-08-26 11:01:57 +00:00
Jasper 86800d42b8 fix(security): preserve session extension identities (#11420)
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
2026-08-26 11:01:53 +00:00
Jasper 9843e0ef34 fix(developer): bound local image reads (#11419)
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
2026-08-26 11:01:48 +00:00
Jasper 9a6127b34b fix(sources): confine agent listing to source roots (#11444)
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
2026-08-26 11:01:45 +00:00
Aaron Alaniz 471904312e fix(local-inference): discover GGUF repos with non-standard filenames (#11005)
Co-authored-by: Claude Opus 5 <noreply@anthropic.com>
Co-authored-by: Jasper Hugo <jasper@jasperhugo.com>
2026-08-26 09:24:34 +00:00
Jack Amadeo 724250c424 move inference operation into goose-agent (#11294)
Signed-off-by: Jack Amadeo <jackamadeo@squareup.com>
Signed-off-by: Michael Neale <michael.neale@gmail.com>
Co-authored-by: Michael Neale <michael.neale@gmail.com>
2026-08-25 17:58:15 +00:00
Alex Hancock eb188752d2 fix(oauth): keep using valid MCP access tokens without a refresh token (#11324) 2026-08-25 14:21:44 +00:00
github-actions[bot] ff1193d8c3 chore(release): bump version to 1.48.0 (minor) (#11542)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-08-25 12:48:34 +00:00
marquezini b0d5ae6fe5 fix(context): deduplicate parallel tool-pair summaries (#11195)
Co-authored-by: Lifei Zhou <lifei@squareup.com>
2026-08-25 07:30:43 +00:00
Michael Neale bcbf3c7723 Make roaming an opt-in goose-cli feature (default-off, stays in-tree) (#11516)
Signed-off-by: Michael Neale <michael.neale@gmail.com>
Co-authored-by: Michael Neale <14976+michaelneale@users.noreply.github.com>
Co-authored-by: pstayets <philip@vulturelabs.com>
Co-authored-by: pstayet <philipstayetski2416@gmail.com>
Co-authored-by: Colin Gauvin <colin@gauvin.id>
2026-08-25 07:22:46 +00:00
Jasper f1d32e8dbb fix: exclude Git metadata from project hints (#11148)
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
2026-08-25 05:13:05 +00:00
Jasper 520296328f fix(bedrock): sanitize hidden Unicode in tools (#11121) 2026-08-25 04:25:17 +00:00
Kushagra Udai 98dd5305b9 fix: Avoid sending images to non vision capable models (#11496)
Co-authored-by: Kushagra Udai <your.email@example.com>
2026-08-25 02:22:06 +00:00
Tymofii Pidlisnyi ff5935fa12 feat(hooks): add on_failure block for PreToolUse hooks (#11449)
Signed-off-by: Tymofii Pidlisnyi <171286556+aeoess@users.noreply.github.com>
Co-authored-by: Tymofii Pidlisnyi <171286556+aeoess@users.noreply.github.com>
Co-authored-by: Lifei Zhou <lifei@squareup.com>
2026-08-25 02:08:37 +00:00
Lifei Zhou da45bd17b0 perf(session): limit sessions before counting messages (#11521) 2026-08-25 00:55:23 +00:00
Abhijay Jain e0494d1d9f fix(shell): reject cmd.exe commands containing newlines (#11537)
Signed-off-by: Abhijay Jain <Abhijay007j@gmail.com>
2026-08-25 00:44:49 +00:00
Alex Hancock f9ac24cbfc docs: add SDK API reference for Rust, Python, and Kotlin (#11251) 2026-08-24 20:07:29 +00:00
Jasper 2dbec3bf64 fix(security): recognize Windows package runners (#11466) 2026-08-24 18:52:37 +00:00
Jasper 11269687a8 fix(security): fail closed on malformed tool visibility (#11474) 2026-08-24 18:51:42 +00:00
Jasper df147d32d4 fix(security): give permission denies precedence (#11477) 2026-08-24 18:51:25 +00:00
Jasper 6808b4d15b fix(recipes): confine library writes (#11482) 2026-08-24 18:50:15 +00:00
Jasper 9a4e043562 fix(acp): restrict project updates to visible sessions (#11487) 2026-08-24 16:51:22 +00:00
Jasper ce0bc7c567 fix(checks): reject symlinked check sources (#11489) 2026-08-24 16:51:01 +00:00
Jasper bcde80a63b fix: keep recalled history agent-visible (#11490) 2026-08-24 16:50:45 +00:00
Alex Hancock dd469e80b6 fix: remove goose tui command (#11484) 2026-08-24 14:59:55 +00:00
Matt Van Horn 3a65236210 fix: honest compaction failure message and fast-fail when no tool responses exist (#10500)
Signed-off-by: Michael Neale <michael.neale@gmail.com>
Co-authored-by: Matt Van Horn <455140+mvanhorn@users.noreply.github.com>
Co-authored-by: Michael Neale <michael.neale@gmail.com>
2026-08-24 13:59:33 +00:00
Abhijay Jain 3cfe512ad2 feat(providers): add TrustedRouter declarative provider (#11422)
Signed-off-by: Abhijay Jain <Abhijay007j@gmail.com>
2026-08-24 08:04:25 +00:00