Commit Graph

1771 Commits

Author SHA1 Message Date
Jasper c250daab3e fix(codex): reject socket-backed MCP extensions (#11304)
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
2026-08-20 11:51:02 +00:00
Jasper ea07f7bb41 fix: pass complete response to stop hooks (#11366)
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
2026-08-20 10:50:45 +00:00
Jasper df899654fe fix: contain and bound skill supporting file reads (#11342)
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
2026-08-20 10:48:51 +00:00
Jasper a171a3db83 fix(security): bound call graph traversal (#11193)
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
2026-08-20 09:45:17 +00:00
Zach Nelson 69a705fc39 feat(providers): custom provider cost fields drive cost tracking (config-declared pricing fallback) (#11220)
Co-authored-by: Claude Opus 5 <noreply@anthropic.com>
2026-08-20 07:36:28 +00:00
Jasper 01f5ed7f9b fix(security): fail closed on invalid Codex ACP mode (#11362)
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
2026-08-20 00:24:12 +00:00
iroiro147 bc68049225 fix(mcp): keep stdio extensions alive across worker exits (#10364)
Signed-off-by: iroiro147 <sarthak.singh@juspay.in>
2026-08-20 00:23:18 +00:00
Jasper 4de6fe2065 fix: bound retry command diagnostics (#11365)
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
2026-08-19 23:32:58 +00:00
Douwe Osinga c13aa86a74 Disable thinking for tool call labels (#11207) 2026-08-19 23:23:18 +00:00
Jasper 760f4d5855 fix(review): contain REVIEW.md discovery (#11367)
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
2026-08-19 23:10:56 +00:00
Jasper 2f89bec759 fix(acp): preserve tool result audience metadata (#11375) 2026-08-19 23:09:34 +00:00
Jasper 0259143260 fix(security): bind Foundry API keys to request origin (#11347)
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
2026-08-19 22:45:10 +00:00
Herley f2e6e9ed05 fix: canonicalize mangled tool names before permission inspection (follow-up to #10230) (#10285) 2026-08-19 22:15:03 +00:00
Jasper ba2d868cff fix: sanitize Pi imported output (#10990) 2026-08-19 22:12:10 +00:00
Jasper b7eef328df fix(otel): honor RUST_LOG directives for logs (#11360)
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
2026-08-19 21:53:53 +00:00
Abhijay Jain 6d6abf74a1 feat(skills): add web-search and browser-use built-in skills (#11233)
Signed-off-by: Abhijay Jain <Abhijay007j@gmail.com>
2026-08-19 21:51:24 +00:00
Joel Wirāmu Pauling 6722a195e1 feat(dictation): add model-native audio transcription provider (#10589) 2026-08-19 21:37:10 +00:00
kbennett15 e31f2f4292 feat(aws_bedrock): route OpenAI GPT-5.6 (sol/terra/luna) via Bedrock … (#10502)
Signed-off-by: kbennett15 <75271761+kbennett15@users.noreply.github.com>
2026-08-19 21:32:40 +00:00
Lifei Zhou b832501b6f preserve extensions when adding MCP servers (#11339) 2026-08-19 20:36:24 +00:00
Jasper 81578789e2 fix(config): preserve platform tool allowlists (#11369)
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
2026-08-19 20:30:15 +00:00
dependabot[bot] b55a28b11b chore(deps): bump nostr from 0.44.7 to 0.45.1 (#11243)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Douwe Osinga <douwe@block.xyz>
Co-authored-by: Douwe Osinga <douwe.osinga@gmail.com>
2026-08-19 17:30:32 +00:00
Jared Manfredi cdc150f87b fix: gate clear_thinking behind an opt-in flag (Z.AI-only) (#10439)
Signed-off-by: Douwe Osinga <douwe.osinga@gmail.com>
Co-authored-by: Jared Manfredi <j.manfredi@draftkings.com>
Co-authored-by: Douwe Osinga <douwe.osinga@gmail.com>
2026-08-19 17:30:05 +00:00
dependabot[bot] 9e4ac726d0 chore(deps): bump rubato from 0.16.2 to 5.0.0 (#11248)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Douwe Osinga <douwe@block.xyz>
Co-authored-by: Douwe Osinga <douwe.osinga@gmail.com>
2026-08-19 17:25:33 +00:00
nuthalapativarun 23c2e2824b fix(summon): give GOOSE_SUBAGENT_PROVIDER/MODEL priority over LLM-injected params (#9650)
Signed-off-by: Varun Nuthalapati <nuthalapativarun@gmail.com>
Signed-off-by: Douwe Osinga <douwe.osinga@gmail.com>
Co-authored-by: Douwe M Osinga <douwe@sidewalklabs.com>
Co-authored-by: Douwe Osinga <douwe.osinga@gmail.com>
2026-08-19 17:24:43 +00:00
Jasper 3406a6d5dd fix: respect ACP audience in bang-shell shortcut (#11150)
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
2026-08-19 17:24:30 +00:00
filip 33fb29402e fix(core): compact with the main session model, not the fast model (#11255) 2026-08-19 17:18:09 +00:00
Jasper 180042d7ea fix: make Gemini plugin installs transactional (#11303)
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
2026-08-19 17:04:47 +00:00
Jasper e9011346c0 fix(hooks): include working directory in stop context (#11112) 2026-08-19 16:54:13 +00:00
Jasper 01859e2387 fix: scan uvx from selectors for malware (#10988) 2026-08-19 16:54:04 +00:00
Theofanis Petkos afcc603b35 refactor: share axum-server via workspace.dependencies (#11326) 2026-08-19 16:15:32 +00:00
Jasper f167ca6908 fix(security): fail closed on malformed app visibility (#11341)
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
2026-08-19 15:34:00 +00:00
Jasper c9d940ec66 fix: redact Telegram tokens from request errors (#11343)
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
2026-08-19 15:33:02 +00:00
Wolfe-James 7ab3750a90 test(recipe): add a regression guard for minijinja's builtins feature (#11319)
Co-authored-by: Claude Sonnet 5 <noreply@anthropic.com>
2026-08-19 15:32:50 +00:00
Michael A. Smith e6b12beb42 fix(acp): bound the handoff memo so long sessions stay resumable (#11204) 2026-08-19 12:50:49 -04:00
Jingyu Zhao 935a37a684 fix(summon): isolate concurrent subagent notifications (#10772)
Signed-off-by: zhaojy <zhaojy01@rd.netase.com>
Co-authored-by: zhaojy <zhaojy01@rd.netase.com>
2026-08-18 12:47:21 -04:00
Yoggy 403fcc84c7 fix: re-enable minijinja builtins so documented recipe filters work (#11310) 2026-08-18 10:36:54 +00:00
filip 7c4ba22191 fix(providers): send explicit thinking disabled to adaptive Claude models (#11177) 2026-08-17 18:32:49 +00:00
dependabot[bot] 92ec780d1c chore(deps): bump ctor from 0.6.3 to 1.0.11 (#11244)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-17 12:35:21 +00:00
Lifei Zhou ac1918f535 acp: pin V1 SDK and narrow acp crate features (#11289) 2026-08-17 11:03:07 +00:00
Lifei Zhou 063694cf76 acp: Migrate session/delete to the standard acp sdk (#11286) 2026-08-17 10:09:56 +00:00
Lifei Zhou 85aac19404 fix (providers): handle error code for context length exceeded (#11283) 2026-08-17 07:56:02 +00:00
Andrew 3810898a74 feat(mcp): support pre-registered OAuth clients for streamable_http extensions (#11182)
Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
Co-authored-by: OpenAI Codex <codex@openai.com>
2026-08-14 15:57:03 -04:00
Douwe Osinga 4bb968fadb Improve ACP provider setup and unify setup metadata (#11100)
Signed-off-by: Douwe M Osinga <douwe@sidewalklabs.com>
Signed-off-by: Douwe Osinga <douwe.osinga@gmail.com>
Co-authored-by: Douwe M Osinga <douwe@sidewalklabs.com>
2026-08-14 16:25:20 +00:00
Douwe Osinga 618bd37009 fix: reject context commands for context-owning providers (#11094)
Co-authored-by: Douwe M Osinga <douwe@sidewalklabs.com>
2026-08-14 16:24:21 +00:00
Jack Amadeo 5f4b7cc100 create the goose-agent crate with the unrolled agent loop state machine (#11216)
Co-authored-by: Alex Hancock <alexhancock@block.xyz>
2026-08-14 13:33:16 +00:00
Michael Neale 0d0d130d96 refactor(computercontroller): remove automation_script, web_scrape, and cache tools (#11198) 2026-08-14 13:30:46 +00:00
Jasper a680079608 fix(oauth): enforce secure token transport (#11183)
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
2026-08-14 14:53:06 +02:00
Lifei Zhou 433d1b3c8f fix (provider): deprecated gemini oauth provider (#11223) 2026-08-14 09:33:43 +00:00
Lifei Zhou 09177caf51 Revert "feat(acp): add _goose/unstable/session/extensions/apply method (#11081)" (#11217) 2026-08-14 00:14:55 +00:00
filip 31d3ff2bd1 fix(providers): stop paying the prompt-cache write premium on one-shot fast-model calls (#11179) 2026-08-13 23:49:22 +00:00