Commit Graph

1824 Commits

Author SHA1 Message Date
PigeonCraft 66e395b749 Fix MCP sampling for reasoning-first responses (#11092)
Co-authored-by: Douwe Osinga <douwe.osinga@gmail.com>
2026-08-26 17:36:07 +00:00
Alex Hancock 2b9cd967e9 fix(bedrock): prefer HTTP bearer auth when a bearer token is configured (#11562) 2026-08-26 16:11:12 +00:00
tulsi 18c77b7b28 feat: title sessions by subject, not workflow step (#11135)
Co-authored-by: Douwe Osinga <douwe.osinga@gmail.com>
2026-08-26 16:04:22 +00:00
Kalvin C b9b671c6c3 feat(provider): discover Databricks Unity Catalog model services (#11575) 2026-08-26 15:48:55 +00:00
Jack Amadeo 6357f73ea5 fix: unify context limit resolution behind provider API (#11213)
Signed-off-by: Jack Amadeo <jackamadeo@squareup.com>
2026-08-26 14:34:16 +00:00
Jasper 73b9938d73 fix(security): enforce per-turn model tool allowlists (#11426)
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
2026-08-26 13:45:12 +00:00
SynthLuvr 9a05f0207c feat(cli): load extensions in the background so the prompt is immediately usable (#10403)
Co-authored-by: Jasper Hugo <jasper@jasperhugo.com>
2026-08-26 11:19:05 +00:00
Jasper 0ad009d153 fix(security): stop exposing provider secret suffixes (#11476) 2026-08-26 11:02:08 +00:00
Jasper 585d481fcd fix(security): restrict code mode callback output (#11471) 2026-08-26 11:02:05 +00:00
Jasper 0b87ba5a04 fix(security): restrict app management tools (#11470) 2026-08-26 11:02:01 +00:00
Jasper 86800d42b8 fix(security): preserve session extension identities (#11420)
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
2026-08-26 11:01:53 +00:00
Jasper 9843e0ef34 fix(developer): bound local image reads (#11419)
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
2026-08-26 11:01:48 +00:00
Jasper 9a6127b34b fix(sources): confine agent listing to source roots (#11444)
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
2026-08-26 11:01:45 +00:00
Jack Amadeo 724250c424 move inference operation into goose-agent (#11294)
Signed-off-by: Jack Amadeo <jackamadeo@squareup.com>
Signed-off-by: Michael Neale <michael.neale@gmail.com>
Co-authored-by: Michael Neale <michael.neale@gmail.com>
2026-08-25 17:58:15 +00:00
Alex Hancock eb188752d2 fix(oauth): keep using valid MCP access tokens without a refresh token (#11324) 2026-08-25 14:21:44 +00:00
marquezini b0d5ae6fe5 fix(context): deduplicate parallel tool-pair summaries (#11195)
Co-authored-by: Lifei Zhou <lifei@squareup.com>
2026-08-25 07:30:43 +00:00
Michael Neale bcbf3c7723 Make roaming an opt-in goose-cli feature (default-off, stays in-tree) (#11516)
Signed-off-by: Michael Neale <michael.neale@gmail.com>
Co-authored-by: Michael Neale <14976+michaelneale@users.noreply.github.com>
Co-authored-by: pstayets <philip@vulturelabs.com>
Co-authored-by: pstayet <philipstayetski2416@gmail.com>
Co-authored-by: Colin Gauvin <colin@gauvin.id>
2026-08-25 07:22:46 +00:00
Jasper f1d32e8dbb fix: exclude Git metadata from project hints (#11148)
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
2026-08-25 05:13:05 +00:00
Jasper 520296328f fix(bedrock): sanitize hidden Unicode in tools (#11121) 2026-08-25 04:25:17 +00:00
Kushagra Udai 98dd5305b9 fix: Avoid sending images to non vision capable models (#11496)
Co-authored-by: Kushagra Udai <your.email@example.com>
2026-08-25 02:22:06 +00:00
Tymofii Pidlisnyi ff5935fa12 feat(hooks): add on_failure block for PreToolUse hooks (#11449)
Signed-off-by: Tymofii Pidlisnyi <171286556+aeoess@users.noreply.github.com>
Co-authored-by: Tymofii Pidlisnyi <171286556+aeoess@users.noreply.github.com>
Co-authored-by: Lifei Zhou <lifei@squareup.com>
2026-08-25 02:08:37 +00:00
Lifei Zhou da45bd17b0 perf(session): limit sessions before counting messages (#11521) 2026-08-25 00:55:23 +00:00
Abhijay Jain e0494d1d9f fix(shell): reject cmd.exe commands containing newlines (#11537)
Signed-off-by: Abhijay Jain <Abhijay007j@gmail.com>
2026-08-25 00:44:49 +00:00
Jasper 2dbec3bf64 fix(security): recognize Windows package runners (#11466) 2026-08-24 18:52:37 +00:00
Jasper 11269687a8 fix(security): fail closed on malformed tool visibility (#11474) 2026-08-24 18:51:42 +00:00
Jasper df147d32d4 fix(security): give permission denies precedence (#11477) 2026-08-24 18:51:25 +00:00
Jasper 6808b4d15b fix(recipes): confine library writes (#11482) 2026-08-24 18:50:15 +00:00
Jasper 9a4e043562 fix(acp): restrict project updates to visible sessions (#11487) 2026-08-24 16:51:22 +00:00
Jasper ce0bc7c567 fix(checks): reject symlinked check sources (#11489) 2026-08-24 16:51:01 +00:00
Jasper bcde80a63b fix: keep recalled history agent-visible (#11490) 2026-08-24 16:50:45 +00:00
Jasper c5e5929a64 fix(recipe): reject non-object response schemas (#11478) 2026-08-23 23:27:17 +00:00
Jasper 8d844eecbd fix(security): escape OAuth callback content (#11479) 2026-08-21 21:23:59 +00:00
dependabot[bot] 4ac063f664 chore(deps): bump symphonia from 0.5.5 to 0.6.1 (#11465)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Douwe Osinga <douwe.osinga@gmail.com>
2026-08-21 15:20:09 -04:00
Jasper 45b322c1df fix(security): honor plugin enablement for skills (#11439)
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
2026-08-21 15:36:31 +00:00
Jasper 10cd3acd4a fix(claude-code): protect system prompt transport (#11441)
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
2026-08-21 13:34:36 +00:00
Wolfe-James a5de37814a fix(agents): fail fast when a recipe's structured response can't reach an ACP-bridged provider (#11307)
Co-authored-by: Claude Sonnet 5 <noreply@anthropic.com>
Co-authored-by: Lifei Zhou <lifei@squareup.com>
2026-08-21 08:31:40 +00:00
Abhijay Jain 4078158c01 fix(providers): inform user of clipboard copy and remove copilot auth retry on timeout (#11160)
Signed-off-by: Abhijay Jain <Abhijay007j@gmail.com>
Co-authored-by: Lifei Zhou <lifei@squareup.com>
2026-08-21 07:07:11 +00:00
nathansmithopenclaw-alt c274feb016 fix(openrouter): escape Gemini tool response ref keys (#11276)
Signed-off-by: nathansmithopenclaw-alt <273889179+nathansmithopenclaw-alt@users.noreply.github.com>
Signed-off-by: Michael Neale <michael.neale@gmail.com>
Co-authored-by: nathansmithopenclaw-alt <273889179+nathansmithopenclaw-alt@users.noreply.github.com>
Co-authored-by: Michael Neale <michael.neale@gmail.com>
2026-08-21 03:29:23 +00:00
Jasper d830653309 fix(security): honor MCP tool model visibility in Code Mode (#11425) 2026-08-21 02:34:38 +00:00
jonathan MERCIER 48d480f911 fix(providers): estimate cost for Azure Foundry models via inferred catalog pricing (#11264)
Signed-off-by: Michael Neale <michael.neale@gmail.com>
Co-authored-by: Michael Neale <michael.neale@gmail.com>
2026-08-21 01:52:41 +00:00
Abhijay Jain 8e8b674cf0 feat(providers): add Gondola as declarative OpenAI-compatible provider (#11421)
Signed-off-by: Abhijay Jain <Abhijay007j@gmail.com>
2026-08-21 01:47:18 +00:00
Steven Pousty f45ccd46f7 feat(otel): add request params, response metadata, tool call parity, and agent identification (#11261)
Co-authored-by: Jack Amadeo <jackamadeo@squareup.com>
2026-08-21 01:46:22 +00:00
Tymofii Pidlisnyi d0fc739a4c feat(hooks): add PreToolUseResult event and stable tool_call_id across tool lifecycle (#11120)
Signed-off-by: Tymofii Pidlisnyi <171286556+aeoess@users.noreply.github.com>
Signed-off-by: Douwe Osinga <douwe.osinga@gmail.com>
Co-authored-by: Tymofii Pidlisnyi <171286556+aeoess@users.noreply.github.com>
Co-authored-by: Douwe Osinga <douwe.osinga@gmail.com>
2026-08-21 00:38:53 +00:00
Alex Hancock 2f5169af35 add MCP conformance tests to goose CI (combines #10800 + #10801) (#10940)
Signed-off-by: Jack Amadeo <jackamadeo@squareup.com>
Co-authored-by: Jack Amadeo <jackamadeo@squareup.com>
2026-08-20 21:51:53 +00:00
Alex Hancock fc6311acb7 test(plugins): isolate GOOSE_PATH_ROOT in discovery tests (#11407) 2026-08-20 14:59:39 +00:00
Jasper 0ed7b02d5f fix(config): serialize secret mutations (#11388)
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
2026-08-20 14:03:53 +00:00
Jasper 8343c4a16b fix: decouple source file and tool response limits (#11391) 2026-08-20 14:03:51 +00:00
dependabot[bot] ba7ffd3efa chore(deps): bump pctx_code_mode from 0.4.1 to 0.5.0 (#11245)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Douwe Osinga <douwe@block.xyz>
Co-authored-by: Douwe Osinga <douwe.osinga@gmail.com>
2026-08-20 13:19:20 +00:00
Jasper 8648f2d060 fix(security): suppress sensitive OTLP traces (#11381) 2026-08-20 13:16:36 +00:00
Lee-Si-Yoon f70cb64d3f feat(openrouter): forward session_id and add app category header (#10868) 2026-08-20 13:13:33 +00:00