tkmind/tkmind_go
1
0
Fork 0
Code Issues Pull Requests Actions 4 Packages Projects Releases Wiki Activity
5,473 Commits 2 Branches 0 Tags
8d844eecbdfd65626a881c9e8784ae8dc6093f1d
Commit Graph

2474 Commits

Author SHA1 Message Date
Jasper 8d844eecbd fix(security): escape OAuth callback content (#11479) 2026-08-21 21:23:59 +00:00
Jasper 8c1f972772 fix(security): sanitize Unicode tags in MCP prompts (#11453) 2026-08-21 19:29:21 +00:00
dependabot[bot] 4ac063f664 chore(deps): bump symphonia from 0.5.5 to 0.6.1 (#11465) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Douwe Osinga <douwe.osinga@gmail.com>
 2026-08-21 15:20:09 -04:00
dependabot[bot] 469bea969a chore(deps): bump safemlx-lm from 0.1.5 to 0.4.1 (#11464) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-08-21 14:42:49 -04:00
Jasper 45b322c1df fix(security): honor plugin enablement for skills (#11439) 
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
 2026-08-21 15:36:31 +00:00
Jasper 10cd3acd4a fix(claude-code): protect system prompt transport (#11441) 
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
 2026-08-21 13:34:36 +00:00
Wolfe-James a5de37814a fix(agents): fail fast when a recipe's structured response can't reach an ACP-bridged provider (#11307) 
Co-authored-by: Claude Sonnet 5 <noreply@anthropic.com>
Co-authored-by: Lifei Zhou <lifei@squareup.com>
 2026-08-21 08:31:40 +00:00
Abhijay Jain 4078158c01 fix(providers): inform user of clipboard copy and remove copilot auth retry on timeout (#11160) 
Signed-off-by: Abhijay Jain <Abhijay007j@gmail.com>
Co-authored-by: Lifei Zhou <lifei@squareup.com>
 2026-08-21 07:07:11 +00:00
Douwe Osinga 7f8685a6f8 More provider test scripts (#10515) 
Signed-off-by: Michael Neale <14976+michaelneale@users.noreply.github.com>
Co-authored-by: Douwe M Osinga <douwe@sidewalklabs.com>
Co-authored-by: Michael Neale <14976+michaelneale@users.noreply.github.com>
Co-authored-by: Lifei Zhou <lifei@squareup.com>
 2026-08-21 05:31:46 +00:00
Lifei Zhou d8cc74fc0e cli: remove recipe secret discovery (#11435) 2026-08-21 04:16:12 +00:00
nathansmithopenclaw-alt c274feb016 fix(openrouter): escape Gemini tool response ref keys (#11276) 
Signed-off-by: nathansmithopenclaw-alt <273889179+nathansmithopenclaw-alt@users.noreply.github.com>
Signed-off-by: Michael Neale <michael.neale@gmail.com>
Co-authored-by: nathansmithopenclaw-alt <273889179+nathansmithopenclaw-alt@users.noreply.github.com>
Co-authored-by: Michael Neale <michael.neale@gmail.com>
 2026-08-21 03:29:23 +00:00
Jasper d830653309 fix(security): honor MCP tool model visibility in Code Mode (#11425) 2026-08-21 02:34:38 +00:00
jonathan MERCIER 48d480f911 fix(providers): estimate cost for Azure Foundry models via inferred catalog pricing (#11264) 
Signed-off-by: Michael Neale <michael.neale@gmail.com>
Co-authored-by: Michael Neale <michael.neale@gmail.com>
 2026-08-21 01:52:41 +00:00
Abhijay Jain 8e8b674cf0 feat(providers): add Gondola as declarative OpenAI-compatible provider (#11421) 
Signed-off-by: Abhijay Jain <Abhijay007j@gmail.com>
 2026-08-21 01:47:18 +00:00
Steven Pousty f45ccd46f7 feat(otel): add request params, response metadata, tool call parity, and agent identification (#11261) 
Co-authored-by: Jack Amadeo <jackamadeo@squareup.com>
 2026-08-21 01:46:22 +00:00
Wolfe-James 1f6c7524e1 fix(providers): coalesce consecutive Thinking blocks in collect_stream (#11317) 
Co-authored-by: Claude Sonnet 5 <noreply@anthropic.com>
 2026-08-21 01:27:58 +00:00
Tymofii Pidlisnyi d0fc739a4c feat(hooks): add PreToolUseResult event and stable tool_call_id across tool lifecycle (#11120) 
Signed-off-by: Tymofii Pidlisnyi <171286556+aeoess@users.noreply.github.com>
Signed-off-by: Douwe Osinga <douwe.osinga@gmail.com>
Co-authored-by: Tymofii Pidlisnyi <171286556+aeoess@users.noreply.github.com>
Co-authored-by: Douwe Osinga <douwe.osinga@gmail.com>
 2026-08-21 00:38:53 +00:00
Alex Hancock 2f5169af35 add MCP conformance tests to goose CI (combines #10800 + #10801) (#10940) 
Signed-off-by: Jack Amadeo <jackamadeo@squareup.com>
Co-authored-by: Jack Amadeo <jackamadeo@squareup.com>
 2026-08-20 21:51:53 +00:00
Jasper 3479a15c4c fix(cli): refuse symlink diagnostics outputs (#11398) 
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
 2026-08-20 15:59:29 +00:00
Alex Hancock fc6311acb7 test(plugins): isolate GOOSE_PATH_ROOT in discovery tests (#11407) 2026-08-20 14:59:39 +00:00
Jasper 0ed7b02d5f fix(config): serialize secret mutations (#11388) 
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
 2026-08-20 14:03:53 +00:00
Jasper 8343c4a16b fix: decouple source file and tool response limits (#11391) 2026-08-20 14:03:51 +00:00
dependabot[bot] ba7ffd3efa chore(deps): bump pctx_code_mode from 0.4.1 to 0.5.0 (#11245) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Douwe Osinga <douwe@block.xyz>
Co-authored-by: Douwe Osinga <douwe.osinga@gmail.com>
 2026-08-20 13:19:20 +00:00
Jasper 8648f2d060 fix(security): suppress sensitive OTLP traces (#11381) 2026-08-20 13:16:36 +00:00
Lee-Si-Yoon f70cb64d3f feat(openrouter): forward session_id and add app category header (#10868) 2026-08-20 13:13:33 +00:00
Matt Toohey 3dd0762f96 feat(acp): derive and forward thinking effort from the ACP harness (#10949) 
Signed-off-by: Matt Toohey <contact@matttoohey.com>
Co-authored-by: Claude <noreply@anthropic.com>
Co-authored-by: Jasper Hugo <jasper@jasperhugo.com>
 2026-08-20 12:50:47 +00:00
Hugues Clouâtre 1e7b2b969d fix(aws_bedrock): replace flat model list with routing table, add Gemma 4 Mantle support (#10297) 
Signed-off-by: Hugues Clouâtre <hugues@linux.com>
Co-authored-by: Jack Amadeo <jackamadeo@squareup.com>
 2026-08-20 12:45:14 +00:00
Angie Jones f147e8113d Add GPT-5.6 follow-up support for Codex and Responses API (#10460) 
Co-authored-by: Jack Amadeo <jackamadeo@squareup.com>
 2026-08-20 12:39:22 +00:00
Kunal Behbudzade fb5a71a94b fix(update): fetch attestation bundles from bundle_url (#10557) 2026-08-20 12:33:17 +00:00
Jasper d1d8f45812 fix(security): fail closed on invalid default GCP credentials (#11363) 
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
 2026-08-20 11:53:02 +00:00
Jasper c250daab3e fix(codex): reject socket-backed MCP extensions (#11304) 
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
 2026-08-20 11:51:02 +00:00
Jasper ea07f7bb41 fix: pass complete response to stop hooks (#11366) 
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
 2026-08-20 10:50:45 +00:00
Jasper df899654fe fix: contain and bound skill supporting file reads (#11342) 
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
 2026-08-20 10:48:51 +00:00
Jasper a171a3db83 fix(security): bound call graph traversal (#11193) 
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
 2026-08-20 09:45:17 +00:00
Abhijay Jain cd23a1ed40 feat(providers): add SayGM as declarative OpenAI-compatible provider (#11267) 
Signed-off-by: Abhijay Jain <Abhijay007j@gmail.com>
Co-authored-by: Lifei Zhou <lifei@squareup.com>
 2026-08-20 07:52:23 +00:00
Zach Nelson 69a705fc39 feat(providers): custom provider cost fields drive cost tracking (config-declared pricing fallback) (#11220) 
Co-authored-by: Claude Opus 5 <noreply@anthropic.com>
 2026-08-20 07:36:28 +00:00
Jasper 01f5ed7f9b fix(security): fail closed on invalid Codex ACP mode (#11362) 
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
 2026-08-20 00:24:12 +00:00
iroiro147 bc68049225 fix(mcp): keep stdio extensions alive across worker exits (#10364) 
Signed-off-by: iroiro147 <sarthak.singh@juspay.in>
 2026-08-20 00:23:18 +00:00
Jasper 4de6fe2065 fix: bound retry command diagnostics (#11365) 
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
 2026-08-19 23:32:58 +00:00
Douwe Osinga c13aa86a74 Disable thinking for tool call labels (#11207) 2026-08-19 23:23:18 +00:00
Jasper 760f4d5855 fix(review): contain REVIEW.md discovery (#11367) 
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
 2026-08-19 23:10:56 +00:00
Jasper 2f89bec759 fix(acp): preserve tool result audience metadata (#11375) 2026-08-19 23:09:34 +00:00
asiantuntija fe83492090 test(providers): isolate environment-proxy test in its own binary (#11262) 
Co-authored-by: tsih <tsih@tsih.fi>
 2026-08-19 22:55:40 +00:00
Jasper 0259143260 fix(security): bind Foundry API keys to request origin (#11347) 
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
 2026-08-19 22:45:10 +00:00
Herley f2e6e9ed05 fix: canonicalize mangled tool names before permission inspection (follow-up to #10230) (#10285) 2026-08-19 22:15:03 +00:00
Vishal Veera Reddy 5e6b79fb96 feat(providers): add Lynkr as a declarative OpenAI-compatible provider (#11372) 
Co-authored-by: vishal veerareddy <vishalveera.reddy@servicenow.com>
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
 2026-08-19 22:12:24 +00:00
Jasper ba2d868cff fix: sanitize Pi imported output (#10990) 2026-08-19 22:12:10 +00:00
Jasper b7eef328df fix(otel): honor RUST_LOG directives for logs (#11360) 
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
 2026-08-19 21:53:53 +00:00
Abhijay Jain 6d6abf74a1 feat(skills): add web-search and browser-use built-in skills (#11233) 
Signed-off-by: Abhijay Jain <Abhijay007j@gmail.com>
 2026-08-19 21:51:24 +00:00
Joel Wirāmu Pauling 6722a195e1 feat(dictation): add model-native audio transcription provider (#10589) 2026-08-19 21:37:10 +00:00