Commit Graph

2495 Commits

Author SHA1 Message Date
Michael Neale bcbf3c7723 Make roaming an opt-in goose-cli feature (default-off, stays in-tree) (#11516)
Signed-off-by: Michael Neale <michael.neale@gmail.com>
Co-authored-by: Michael Neale <14976+michaelneale@users.noreply.github.com>
Co-authored-by: pstayets <philip@vulturelabs.com>
Co-authored-by: pstayet <philipstayetski2416@gmail.com>
Co-authored-by: Colin Gauvin <colin@gauvin.id>
2026-08-25 07:22:46 +00:00
Jasper f1d32e8dbb fix: exclude Git metadata from project hints (#11148)
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
2026-08-25 05:13:05 +00:00
Jasper 520296328f fix(bedrock): sanitize hidden Unicode in tools (#11121) 2026-08-25 04:25:17 +00:00
Kushagra Udai 98dd5305b9 fix: Avoid sending images to non vision capable models (#11496)
Co-authored-by: Kushagra Udai <your.email@example.com>
2026-08-25 02:22:06 +00:00
Tymofii Pidlisnyi ff5935fa12 feat(hooks): add on_failure block for PreToolUse hooks (#11449)
Signed-off-by: Tymofii Pidlisnyi <171286556+aeoess@users.noreply.github.com>
Co-authored-by: Tymofii Pidlisnyi <171286556+aeoess@users.noreply.github.com>
Co-authored-by: Lifei Zhou <lifei@squareup.com>
2026-08-25 02:08:37 +00:00
Lifei Zhou da45bd17b0 perf(session): limit sessions before counting messages (#11521) 2026-08-25 00:55:23 +00:00
Abhijay Jain e0494d1d9f fix(shell): reject cmd.exe commands containing newlines (#11537)
Signed-off-by: Abhijay Jain <Abhijay007j@gmail.com>
2026-08-25 00:44:49 +00:00
Alex Hancock f9ac24cbfc docs: add SDK API reference for Rust, Python, and Kotlin (#11251) 2026-08-24 20:07:29 +00:00
Jasper 2dbec3bf64 fix(security): recognize Windows package runners (#11466) 2026-08-24 18:52:37 +00:00
Jasper 11269687a8 fix(security): fail closed on malformed tool visibility (#11474) 2026-08-24 18:51:42 +00:00
Jasper df147d32d4 fix(security): give permission denies precedence (#11477) 2026-08-24 18:51:25 +00:00
Jasper 6808b4d15b fix(recipes): confine library writes (#11482) 2026-08-24 18:50:15 +00:00
Jasper 9a4e043562 fix(acp): restrict project updates to visible sessions (#11487) 2026-08-24 16:51:22 +00:00
Jasper ce0bc7c567 fix(checks): reject symlinked check sources (#11489) 2026-08-24 16:51:01 +00:00
Jasper bcde80a63b fix: keep recalled history agent-visible (#11490) 2026-08-24 16:50:45 +00:00
Alex Hancock dd469e80b6 fix: remove goose tui command (#11484) 2026-08-24 14:59:55 +00:00
Matt Van Horn 3a65236210 fix: honest compaction failure message and fast-fail when no tool responses exist (#10500)
Signed-off-by: Michael Neale <michael.neale@gmail.com>
Co-authored-by: Matt Van Horn <455140+mvanhorn@users.noreply.github.com>
Co-authored-by: Michael Neale <michael.neale@gmail.com>
2026-08-24 13:59:33 +00:00
Abhijay Jain 3cfe512ad2 feat(providers): add TrustedRouter declarative provider (#11422)
Signed-off-by: Abhijay Jain <Abhijay007j@gmail.com>
2026-08-24 08:04:25 +00:00
Vincenzo Palazzo bd16fbfbbe feat(providers): add OpenCode Zen gateway as a declarative provider (#10939) 2026-08-24 07:38:08 +00:00
Jasper 92caef37f8 fix(providers): bound non-streaming JSON responses (#11109)
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
2026-08-24 05:08:24 +00:00
Jasper c5e5929a64 fix(recipe): reject non-object response schemas (#11478) 2026-08-23 23:27:17 +00:00
Jasper 8d844eecbd fix(security): escape OAuth callback content (#11479) 2026-08-21 21:23:59 +00:00
Jasper 8c1f972772 fix(security): sanitize Unicode tags in MCP prompts (#11453) 2026-08-21 19:29:21 +00:00
dependabot[bot] 4ac063f664 chore(deps): bump symphonia from 0.5.5 to 0.6.1 (#11465)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Douwe Osinga <douwe.osinga@gmail.com>
2026-08-21 15:20:09 -04:00
dependabot[bot] 469bea969a chore(deps): bump safemlx-lm from 0.1.5 to 0.4.1 (#11464)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-21 14:42:49 -04:00
Jasper 45b322c1df fix(security): honor plugin enablement for skills (#11439)
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
2026-08-21 15:36:31 +00:00
Jasper 10cd3acd4a fix(claude-code): protect system prompt transport (#11441)
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
2026-08-21 13:34:36 +00:00
Wolfe-James a5de37814a fix(agents): fail fast when a recipe's structured response can't reach an ACP-bridged provider (#11307)
Co-authored-by: Claude Sonnet 5 <noreply@anthropic.com>
Co-authored-by: Lifei Zhou <lifei@squareup.com>
2026-08-21 08:31:40 +00:00
Abhijay Jain 4078158c01 fix(providers): inform user of clipboard copy and remove copilot auth retry on timeout (#11160)
Signed-off-by: Abhijay Jain <Abhijay007j@gmail.com>
Co-authored-by: Lifei Zhou <lifei@squareup.com>
2026-08-21 07:07:11 +00:00
Douwe Osinga 7f8685a6f8 More provider test scripts (#10515)
Signed-off-by: Michael Neale <14976+michaelneale@users.noreply.github.com>
Co-authored-by: Douwe M Osinga <douwe@sidewalklabs.com>
Co-authored-by: Michael Neale <14976+michaelneale@users.noreply.github.com>
Co-authored-by: Lifei Zhou <lifei@squareup.com>
2026-08-21 05:31:46 +00:00
Lifei Zhou d8cc74fc0e cli: remove recipe secret discovery (#11435) 2026-08-21 04:16:12 +00:00
nathansmithopenclaw-alt c274feb016 fix(openrouter): escape Gemini tool response ref keys (#11276)
Signed-off-by: nathansmithopenclaw-alt <273889179+nathansmithopenclaw-alt@users.noreply.github.com>
Signed-off-by: Michael Neale <michael.neale@gmail.com>
Co-authored-by: nathansmithopenclaw-alt <273889179+nathansmithopenclaw-alt@users.noreply.github.com>
Co-authored-by: Michael Neale <michael.neale@gmail.com>
2026-08-21 03:29:23 +00:00
Jasper d830653309 fix(security): honor MCP tool model visibility in Code Mode (#11425) 2026-08-21 02:34:38 +00:00
jonathan MERCIER 48d480f911 fix(providers): estimate cost for Azure Foundry models via inferred catalog pricing (#11264)
Signed-off-by: Michael Neale <michael.neale@gmail.com>
Co-authored-by: Michael Neale <michael.neale@gmail.com>
2026-08-21 01:52:41 +00:00
Abhijay Jain 8e8b674cf0 feat(providers): add Gondola as declarative OpenAI-compatible provider (#11421)
Signed-off-by: Abhijay Jain <Abhijay007j@gmail.com>
2026-08-21 01:47:18 +00:00
Steven Pousty f45ccd46f7 feat(otel): add request params, response metadata, tool call parity, and agent identification (#11261)
Co-authored-by: Jack Amadeo <jackamadeo@squareup.com>
2026-08-21 01:46:22 +00:00
Wolfe-James 1f6c7524e1 fix(providers): coalesce consecutive Thinking blocks in collect_stream (#11317)
Co-authored-by: Claude Sonnet 5 <noreply@anthropic.com>
2026-08-21 01:27:58 +00:00
Tymofii Pidlisnyi d0fc739a4c feat(hooks): add PreToolUseResult event and stable tool_call_id across tool lifecycle (#11120)
Signed-off-by: Tymofii Pidlisnyi <171286556+aeoess@users.noreply.github.com>
Signed-off-by: Douwe Osinga <douwe.osinga@gmail.com>
Co-authored-by: Tymofii Pidlisnyi <171286556+aeoess@users.noreply.github.com>
Co-authored-by: Douwe Osinga <douwe.osinga@gmail.com>
2026-08-21 00:38:53 +00:00
Alex Hancock 2f5169af35 add MCP conformance tests to goose CI (combines #10800 + #10801) (#10940)
Signed-off-by: Jack Amadeo <jackamadeo@squareup.com>
Co-authored-by: Jack Amadeo <jackamadeo@squareup.com>
2026-08-20 21:51:53 +00:00
Jasper 3479a15c4c fix(cli): refuse symlink diagnostics outputs (#11398)
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
2026-08-20 15:59:29 +00:00
Alex Hancock fc6311acb7 test(plugins): isolate GOOSE_PATH_ROOT in discovery tests (#11407) 2026-08-20 14:59:39 +00:00
Jasper 0ed7b02d5f fix(config): serialize secret mutations (#11388)
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
2026-08-20 14:03:53 +00:00
Jasper 8343c4a16b fix: decouple source file and tool response limits (#11391) 2026-08-20 14:03:51 +00:00
dependabot[bot] ba7ffd3efa chore(deps): bump pctx_code_mode from 0.4.1 to 0.5.0 (#11245)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Douwe Osinga <douwe@block.xyz>
Co-authored-by: Douwe Osinga <douwe.osinga@gmail.com>
2026-08-20 13:19:20 +00:00
Jasper 8648f2d060 fix(security): suppress sensitive OTLP traces (#11381) 2026-08-20 13:16:36 +00:00
Lee-Si-Yoon f70cb64d3f feat(openrouter): forward session_id and add app category header (#10868) 2026-08-20 13:13:33 +00:00
Matt Toohey 3dd0762f96 feat(acp): derive and forward thinking effort from the ACP harness (#10949)
Signed-off-by: Matt Toohey <contact@matttoohey.com>
Co-authored-by: Claude <noreply@anthropic.com>
Co-authored-by: Jasper Hugo <jasper@jasperhugo.com>
2026-08-20 12:50:47 +00:00
Hugues Clouâtre 1e7b2b969d fix(aws_bedrock): replace flat model list with routing table, add Gemma 4 Mantle support (#10297)
Signed-off-by: Hugues Clouâtre <hugues@linux.com>
Co-authored-by: Jack Amadeo <jackamadeo@squareup.com>
2026-08-20 12:45:14 +00:00
Angie Jones f147e8113d Add GPT-5.6 follow-up support for Codex and Responses API (#10460)
Co-authored-by: Jack Amadeo <jackamadeo@squareup.com>
2026-08-20 12:39:22 +00:00
Kunal Behbudzade fb5a71a94b fix(update): fetch attestation bundles from bundle_url (#10557) 2026-08-20 12:33:17 +00:00