Commit Graph

  • 12cb39cbd9 feat: add OpenCode Zen and Go as provider options (#26) M57 2026-06-07 17:43:00 +03:00
  • 43c16fc7e4 fix(context_compactor): return original messages when compaction summary fails (#2174) max-freddyfire 2026-06-07 16:40:16 +02:00
  • c75d3e1975 fix(memory): record dislikes as dislikes, not preferences (#2435) SurprisedDuck 2026-06-07 16:36:07 +02:00
  • 3c924b8dee fix: hide Select buttons in Memory/Skills tabs when list is empty (#2906) Maruf Hasan 2026-06-07 20:29:04 +06:00
  • adbcb3763f fix(agent): don't abort legitimate tool batches as runaway loops (#3183) YotamPeled 2026-06-07 17:16:17 +03:00
  • bdf4ec8b24 fix: fall back to /models probe when base URL returns 404 (#3205) michaelxer 2026-06-07 21:09:33 +07:00
  • 5d3e3c7053 feat(tasks): assign folder='Tasks' at creation + backfill migration (#2834) danielroytel 2026-06-07 23:33:17 +10:00
  • 04d6a5ccaa Fix: CORS preflight 401'd by AuthMiddleware before CORSMiddleware (#3262) Marius 2026-06-07 14:23:23 +01:00
  • a3784da172 fix: block app_api access to shell routes (#3225) RaresKeY 2026-06-07 16:19:08 +03:00
  • cbbb41dfb1 fix: avoid double bcrypt on login by using create_session_trusted (#3236) Ashvin 2026-06-07 18:40:53 +05:30
  • 83b0ab7cd3 Scope auxiliary LLM endpoints by owner (#2996) Vykos 2026-06-07 14:47:44 +02:00
  • 12a7e741d0 fix: redirect /login to / when AUTH_ENABLED=false (#3235) Ashvin 2026-06-07 17:47:21 +05:30
  • 573d431399 fix(cookbook): don't infer server OS from the browser's user-agent (#3223) Léo 2026-06-07 13:20:05 +02:00
  • 2149f0fb67 fix(rag): forward owner through manager wrapper (#2991) Vykos 2026-06-07 12:56:57 +02:00
  • 83fca6ac62 fix(personal): require document privilege for rag upload (#2990) Vykos 2026-06-07 12:56:53 +02:00
  • 000932a6d9 fix(auth): gate api tokens from user routes (#2992) Vykos 2026-06-07 12:55:01 +02:00
  • 299538ea4e Harden note reminder dispatch ownership (#2999) Vykos 2026-06-07 12:52:27 +02:00
  • 67aeea4f8b Scope gallery image endpoints by owner (#3001) Vykos 2026-06-07 12:51:21 +02:00
  • f2a79aaf5c Tighten manage notes owner checks (#3002) Vykos 2026-06-07 12:50:10 +02:00
  • a6490ffb1b Harden gallery album assignment scope (#3004) Vykos 2026-06-07 12:49:03 +02:00
  • 06d28e23ac Scope document session links by owner (#3005) Vykos 2026-06-07 12:47:20 +02:00
  • 7b4e6c4c1b Enforce task chain owner scope (#3006) Vykos 2026-06-07 12:43:43 +02:00
  • 3cff06781e Scope model helper endpoint resolution (#3007) Vykos 2026-06-07 12:40:23 +02:00
  • ff4508d396 Scope vision model resolution by owner (#3009) Vykos 2026-06-07 12:39:02 +02:00
  • c11ce66e0e docs: note dev branch status in README (#3196) ooovenenoso 2026-06-07 06:16:14 -04:00
  • 34bd8f0491 fix(email): guarantee IMAP conn.logout() on all exception paths (#1530) Lucas Daniel 2026-06-07 01:09:28 -03:00
  • f78539ba15 fix(caldav): disable redirects on the sync/write-back DAVClient (SSRF) (#2663) Joeseph Grey 2026-06-06 22:05:24 -06:00
  • 95c2dca4b5 fix(security): add HSTS and Permissions-Policy to SecurityHeadersMiddleware (#3081) Giuseppe 2026-06-07 05:58:33 +02:00
  • 3940297655 fix(webhooks): redact IPv6 addresses in sanitized error messages (#3038) Karandeep Bhardwaj 2026-06-06 23:55:33 -04:00
  • a3cb15d0a1 fix(agent): enforce guide-only tool policy (#3088) Nicholai 2026-06-06 18:48:24 -06:00
  • 108ee1e32b fix(security): close DNS-rebinding hole on diffusion_server (wildcard CORS + missing Host check) (#347) @aaronjmars 2026-06-06 18:34:39 -04:00
  • b03d934ec6 fix: restore backup import after skills migration (#2980) muhamed hamed 2026-06-06 23:46:32 +03:00
  • eb840459f5 ci: skip pytest smoke on documentation-only changes (#2768) Lucas Daniel 2026-06-06 12:00:46 -03:00
  • 6ccd4500d7 fix(chat): show requested and actual reply models Mohammed Riaz 2026-06-06 14:30:16 +04:00
  • 2e37d72155 fix(chat): stop code-block button flicker during streaming (#3023) Merajul Arefin 2026-06-06 16:08:54 +06:00
  • fb9c7cf3da fix(calendar): accept list event range aliases Ocean Bennett 2026-06-06 05:47:18 -04:00
  • 33edc40eae fix: route misfenced web lookups to web tools Nicholai 2026-06-06 03:46:31 -06:00
  • e87a1ad8d2 fix(deep-research): wrap fetched webpage content in untrusted-context sandbox Giuseppe 2026-06-06 11:37:10 +02:00
  • 893cb8254f fix(sessions): retry resumeStream in poll loop when chatModule loads late Giuseppe 2026-06-06 11:36:30 +02:00
  • 870ae2823f fix: lower minimized-dock z-index so modals stack above it Maruf Hasan 2026-06-06 15:35:48 +06:00
  • 86abcb75d0 fix: split Chroma embedding lanes (#3046) Nicholai 2026-06-06 03:17:19 -06:00
  • 463713c2c6 feat(search): unify session transcript search (#2877) Nicholai 2026-06-05 18:08:31 -06:00
  • c2017fa089 Phase 1: consolidate tool output constants into src/constants.py (#2989) Mateus Oliveira 2026-06-05 18:05:02 -03:00
  • 53fd856ea8 fix: raise imaplib line limit for large mailboxes (#2895) michaelxer 2026-06-06 03:59:35 +07:00
  • 66599b02a2 allow user who disable auth to use chat (#2548) Fijar Lazuardy 2026-06-06 03:54:19 +07:00
  • fb3e89b011 VRAM detection under native Windows install (#1610) n2b12 2026-06-05 22:49:47 +02:00
  • f72e1bd412 feat(reminders): add generic webhook as a fourth reminder channel (#2952) Logan Davis 2026-06-05 16:47:57 -04:00
  • 2bdf43b74d feat(cookbook): add Gemma4 thinking chat template (#2955) ooovenenoso 2026-06-05 16:43:31 -04:00
  • c8b4cd24e0 fix: Add WSL paths to hardware detection fallback (#2933) horribleCodes 2026-06-05 21:34:41 +02:00
  • f4aa661502 fix ambiguous naming, remove redundant json imports, fix _MCP_ARG_PARSERS type annotations (#2874) Paweł Drużyński 2026-06-05 21:30:22 +02:00
  • 5911b8c0dc fix(models): allow same endpoint URL with different keys (#2758) Ocean Bennett 2026-06-05 15:12:14 -04:00
  • 08e543d1ff fix(tool-parsing): don't ship unconvertible <invoke> fence content to the code executor (#2926) nubs 2026-06-05 19:08:54 +00:00
  • 47a47bf71d fix(llm): guard against null arguments in streaming tool-call accumulator (#2923) nubs 2026-06-05 18:57:36 +00:00
  • 71dda5b106 fix: respect user round count in deep research (#2896) michaelxer 2026-06-06 01:49:42 +07:00
  • ad82ee1c83 feat(calendar): support multiple CalDAV accounts (#2942) Logan Davis 2026-06-05 14:32:50 -04:00
  • 545e692565 fix(auth): distinguish empty model allowlists (#2938) ghreprimand 2026-06-05 13:27:10 -05:00
  • fa9f62b44c fix(compactor): shrink oversized tool_calls arguments so trim_for_context can fit a tool-only turn (#2949) nubs 2026-06-05 18:23:38 +00:00
  • b448119919 feat(skills): import SKILL.md bundles from public GitHub URLs (#2576) Giulio Zelante 2026-06-05 19:48:23 +02:00
  • 977daf0643 Improve edge-docked window behavior (#2779) Enes Öz 2026-06-05 18:07:08 +03:00
  • 8ce945d338 feat: Add plan mode to the chat agent (#638) Kenny Van de Maele 2026-06-05 16:32:25 +02:00
  • 2e207fc315 fix(notes): track + remove the select-mode Esc keydown listener so it doesn't leak per open (#2792) nubs 2026-06-05 14:25:05 +00:00
  • 01f1278811 fix: Settings now correctly displays CalDAV integrations when more than one isconfigured (#2901) Greg Stevenson 2026-06-05 15:11:08 +01:00
  • 4bfe0c690a fix(calendar): cap RRULE expansion (#2902) ooovenenoso 2026-06-05 10:05:14 -04:00
  • c9d0c6db18 fix: quote IMAP mailbox arguments (#2170) ooovenenoso 2026-06-05 10:00:20 -04:00
  • 6973c5427c fix(model-context): count tool_calls in estimate_tokens so compaction sees real size (#2751) nubs 2026-06-05 13:56:54 +00:00
  • 8354948a1c fix(llm): route harmony thinking streams (#2449) nubs 2026-06-05 13:22:08 +00:00
  • 8159733c6c fix(caldav): pull Google Calendar events from the events collection, not the /user principal (#2531) L1 2026-06-05 10:18:16 -03:00
  • 7367325819 fix(caldav): include owner in calendar ID hash to prevent PK collision (#2765) Ernest Hysa 2026-06-05 14:12:54 +01:00
  • 3738df3b93 fix(tasks): validate then_task_id belongs to same owner on create/update (#2764) Ernest Hysa 2026-06-05 14:12:47 +01:00
  • f5c9095222 fix(document): add 404 guard to version list/get endpoints (#2762) Ernest Hysa 2026-06-05 14:12:40 +01:00
  • d4ff7fce81 fix(gallery): add auth check to /api/image/sharpen endpoint (#2761) Ernest Hysa 2026-06-05 14:12:33 +01:00
  • 05f047b188 fix: prevent document link click from resetting active session (#2055) Wes Huber 2026-06-05 06:05:30 -07:00
  • e9ff6cde77 docs(tests): document helper conventions Alexandre Teixeira 2026-06-05 14:04:10 +01:00
  • 747d005645 fix(gallery): validate target album owner on image PATCH + owner-scope album count/cover (#2755) nubs 2026-06-05 13:01:01 +00:00
  • bec594904d Fix/windows llama cpp serve and test upstream (#2669) Zen0-99 2026-06-05 13:53:33 +01:00
  • ec8fbf5d8f Add support for EMBEDDING_API_KEY (#2691) Yiğit Egemen 2026-06-05 14:47:24 +02:00
  • b5c45326e4 Fix Windows Cookbook background tasks, exit statuses, and empty SSH logs wrapper (#1389) the_peaceful 2026-06-05 14:41:07 +02:00
  • 452a94fb1b refactor(tests): centralize fake endpoint resolver cleanup Alexandre Teixeira 2026-06-05 13:23:46 +01:00
  • 301d1109b5 refactor(tests): centralize fake database import-state cleanup Alexandre Teixeira 2026-06-05 12:27:44 +01:00
  • 370ae5d451 Harden DAV outbound URL validation (#2819) Vykos 2026-06-05 13:22:21 +02:00
  • 6d64055328 Constrain research handler JSON paths (#2846) Vykos 2026-06-05 13:20:02 +02:00
  • 0b0d747f1c Constrain signature uploads to PNG data (#2844) Vykos 2026-06-05 13:17:43 +02:00
  • 688194113b Constrain upload paths to upload root (#2825) Vykos 2026-06-05 13:15:23 +02:00
  • 2a1febdeef fix(actions): scope scheduled model resolution to owner (#2773) Ocean Bennett 2026-06-05 07:13:13 -04:00
  • 0f8d12363a fix(images): render agent-generated images in chat (#2809) nsgds 2026-06-05 19:04:33 +08:00
  • 201e207b56 fix(memory): let manual add specify memory category Nicholai 2026-06-05 04:57:13 -06:00
  • 65231f2ba1 refactor(tests): reuse import-state helper in auth manager tests Alexandre Teixeira 2026-06-05 11:24:55 +01:00
  • 4f0133b8c3 refactor(tests): reuse import-state helper in auth tests Alexandre Teixeira 2026-06-05 11:10:41 +01:00
  • f9e1d38cc2 fix: diagnose vllm serve runtime issues (#1198) spooky 2026-06-05 20:03:04 +10:00
  • 0a2adc9c96 Add ask_user tool: agent-posed multiple-choice questions (#2111) Kenny Van de Maele 2026-06-05 11:49:11 +02:00
  • 621885ac06 fix(tests): restore Python CI baseline regressions Alexandre Teixeira 2026-06-05 10:31:38 +01:00
  • 30173f3909 fix(tests): make archived session filter test multipart-independent Alexandre Teixeira 2026-06-05 10:12:47 +01:00
  • f5d834b0c5 fix(cookbook): surface backend diagnosis when serve fails in background (#1636) Lucas Daniel 2026-06-05 05:52:07 -03:00
  • 367858a587 Merge branch 'main' into dev Kenny Van de Maele 2026-06-05 10:50:51 +02:00
  • b19e5693af Constrain embedding model cache paths (#2849) Vykos 2026-06-05 10:46:48 +02:00
  • 11ba46505b Constrain generated-image paths to image root (#2837) Vykos 2026-06-05 10:33:47 +02:00
  • d4d168f972 Harden emoji SVG proxy responses (#2842) Vykos 2026-06-05 10:31:58 +02:00
  • 194985b5e1 Constrain gallery filenames to image root (#2828) Vykos 2026-06-05 10:29:11 +02:00
  • 0dc051dea3 refactor(tests): reuse import-state helper in session tests Alexandre Teixeira 2026-06-05 09:25:52 +01:00
  • 8b386a172e fix(calendar): route read requests to agent (#2452) nubs 2026-06-05 08:24:04 +00:00