fcy 6063d975e8 fix(http): restore ACP executable-path validation, bypass SSRF URL check (#1481) ...

ACP providers use api_base to store an executable command/path, not a URL.
A previous SSRF-hardening refactor incorrectly classified ACP as a local-URL
provider type, causing create/update to reject valid ACP configs with
"provider URL must use http or https scheme".

Changes:
- Remove ProviderACP from localURLProviderTypes.
- Add validateACPExecutablePath mirroring the runtime registration logic in
cmd/gateway_providers.go (allows empty, claude/codex/gemini, or absolute path;
rejects URLs and relative paths).
- Route ACP through the new validator inside validateProviderURL.
- Add unit tests for validateACPExecutablePath.
- Update existing local-type tests that assumed ACP was URL-based.
- Add create/update HTTP handler regression tests for ACP binary, empty binary,
and URL rejection.

Bug-first verification: without the fix, ACP api_base values like "gemini" or
absolute paths fail URL validation, while URLs are incorrectly accepted; with
the fix the behavior is reversed to match the intended executable-path model.

Fixes nextlevelbuilder/goclaw#1481.

2026-09-27 12:42:14 +08:00

..

activity_aggregate_test.go

feat(http): unblock CLI P6 backend APIs (#44)

2026-05-22 20:59:47 +07:00

activity.go

feat(http): unblock CLI P6 backend APIs (#44)

2026-05-22 20:59:47 +07:00

agents_codex_pool_activity_test.go

fix(providers): post-merge fixes for Codex OAuth pools (#450)

2026-03-27 10:19:16 +07:00

agents_codex_pool_activity.go

fix(providers): post-merge fixes for Codex OAuth pools (#450)

2026-03-27 10:19:16 +07:00

agents_codex_pool_test.go

feat(v3): core architecture redesign — pipeline, memory, vault, evolution, providers, orchestration (#790)

2026-04-09 21:15:19 +07:00

agents_codex_pool.go

feat(codex-pool,create_image): collapse primary_first + route pools through create_image chain (#1006)

2026-04-24 00:16:14 +07:00

agents_create_summon_test.go

feat(agents): let create opt out of background summoning with "summon": false (#1570)

2026-09-21 17:28:58 +07:00

agents_export_archive.go

feat(v3): core architecture redesign — pipeline, memory, vault, evolution, providers, orchestration (#790)

2026-04-09 21:15:19 +07:00

agents_export_handlers.go

feat(skills): add selected skill downloads

2026-05-31 12:44:29 +07:00

agents_export_marshal.go

feat(agents): add model fallback configuration

2026-05-17 15:51:56 +07:00

agents_export_team.go

feat: standalone Import & Export page with Teams, Agents, Skills & MCP

2026-03-29 18:01:08 +07:00

agents_export.go

feat(v3): core architecture redesign — pipeline, memory, vault, evolution, providers, orchestration (#790)

2026-04-09 21:15:19 +07:00

agents_gateway_operator_bootstrap_test.go

feat: grant first setup agent gateway operator access

2026-06-12 10:40:59 +07:00

agents_gateway_operator_bootstrap.go

feat: grant first setup agent gateway operator access

2026-06-12 10:40:59 +07:00

agents_import_agent.go

feat(agents): add model fallback configuration

2026-05-17 15:51:56 +07:00

agents_import_handlers.go

feat(v3): core architecture redesign — pipeline, memory, vault, evolution, providers, orchestration (#790)

2026-04-09 21:15:19 +07:00

agents_import_helpers.go

feat(v3): core architecture redesign — pipeline, memory, vault, evolution, providers, orchestration (#790)

2026-04-09 21:15:19 +07:00

agents_import_knowledge.go

feat(v3): core architecture redesign — pipeline, memory, vault, evolution, providers, orchestration (#790)

2026-04-09 21:15:19 +07:00

agents_import_sections.go

perf: eliminate N+1 query patterns across import, vault, and usage pipelines

2026-04-10 19:35:02 +07:00

agents_import_team.go

perf: eliminate N+1 query patterns across import, vault, and usage pipelines

2026-04-10 19:35:02 +07:00

agents_import.go

feat(v3): core architecture redesign — pipeline, memory, vault, evolution, providers, orchestration (#790)

2026-04-09 21:15:19 +07:00

agents_instances.go

feat(storage): add lazy folder loading, SSE size endpoint, and enhanced file viewer

2026-03-14 18:13:52 +07:00

agents_prompt_preview_test.go

fix(mcp): tenant isolation, tool policy engine, and prompt preview fixes (#1333)

2026-07-03 08:25:05 +07:00

agents_prompt_preview.go

fix(agent): filter per-tenant disabled tools from system prompt (#1396)

2026-07-09 02:23:46 +07:00

agents_sharing.go

feat(agents): 3-layer recovery for agents stuck in summoning state

2026-04-17 19:02:53 +07:00

agents_workspace.go

feat: standalone Import & Export page with Teams, Agents, Skills & MCP

2026-03-29 18:01:08 +07:00

agents.go

feat(agents): let create opt out of background summoning with "summon": false (#1570)

2026-09-21 17:28:58 +07:00

api_contracts_test.go

feat(http): unblock CLI P6 backend APIs (#44)

2026-05-22 20:59:47 +07:00

api_key_cache_test.go

fix(http): master-scope guards on builtin_tools, packages, api-keys

2026-04-12 10:24:07 +07:00

api_key_cache.go

feat: multi-tenant isolation — complete implementation (#359)

2026-03-23 08:08:23 +07:00

api_keys.go

fix(http): master-scope guards on builtin_tools, packages, api-keys

2026-04-12 10:24:07 +07:00

api_not_found.go

fix(http): harden automation API contracts (#36)

2026-05-20 22:17:13 +07:00

audit.go

feat: multi-tenant isolation — complete implementation (#359)

2026-03-23 08:08:23 +07:00

auth_helpers_test.go

test(gateway,http): add unit tests for server/methods/handlers

2026-04-11 21:22:23 +07:00

auth_test.go

feat(pairing): let an operator make a device pairing permanent

2026-09-18 12:12:23 +04:00

auth.go

feat(auth): inherit tenant_users.role for paired sessions (#1066)

2026-06-26 22:55:17 +07:00

backup_handler.go

fix(backup): handle nested error response and add system owner fallback

2026-04-13 21:01:21 +07:00

backup_s3_handler.go

fix(backup): handle nested error response and add system owner fallback

2026-04-13 21:01:21 +07:00

branding_assets_test.go

feat: add configurable appearance settings (#1384)

2026-07-07 19:54:37 +07:00

branding_assets.go

feat: add configurable appearance settings (#1384)

2026-07-07 19:54:37 +07:00

browser_cookies_payload.go

feat(browser): add scoped cookie sync

2026-05-24 11:27:02 +07:00

browser_cookies_test.go

feat(browser): add scoped cookie sync

2026-05-24 11:27:02 +07:00

browser_cookies.go

feat(browser): add scoped cookie sync

2026-05-24 11:27:02 +07:00

builtin_tools_cache_invalidate_test.go

fix(cache): tenant-aware invalidation for builtin tools and skills

2026-04-11 23:22:17 +07:00

builtin_tools_tenant_settings_test.go

feat(tools): make exec timeout configurable

2026-05-21 16:44:43 +07:00

builtin_tools.go

feat(tools): add Serply as a web_search provider (#1567)

2026-09-26 10:33:07 +07:00

channel_instance_capabilities_test.go

fix(mcp): tenant isolation, tool policy engine, and prompt preview fixes (#1333)

2026-07-03 08:25:05 +07:00

channel_instance_capabilities.go

feat(channels): add context capability admin surface

2026-05-31 13:50:31 +07:00

channel_instance_context_capability_admin.go

feat(channels): add context capability admin surface

2026-05-31 13:50:31 +07:00

channel_instance_contexts_test.go

feat(channels): add context capability admin surface

2026-05-31 13:50:31 +07:00

channel_instance_contexts.go

feat(channels): add context capability admin surface

2026-05-31 13:50:31 +07:00

channel_instance_metadata_test.go

fix(discord): qualify group titles across surfaces (#1420)

2026-07-10 22:25:45 +07:00

channel_instance_metadata.go

fix(discord): qualify group titles across surfaces (#1420)

2026-07-10 22:25:45 +07:00

channel_instances_writers_test.go

feat(http): unblock CLI P6 backend APIs (#44)

2026-05-22 20:59:47 +07:00

channel_instances.go

Enhance passive memory extraction tuning (#1393)

2026-07-08 20:53:19 +07:00

channel_memory_extraction_test.go

fix(channels): archive group messages before the pending buffer drops them (#1514)

2026-08-15 23:48:15 +07:00

channel_memory_extraction.go

Enhance passive memory extraction tuning (#1393)

2026-07-08 20:53:19 +07:00

chat_completions.go

feat(http): support persistent sessions via X-GoClaw-User-Id header (#713)

2026-08-06 22:32:00 +07:00

chatgpt_oauth_pool_validation_test.go

feat(codex-pool,create_image): collapse primary_first + route pools through create_image chain (#1006)

2026-04-24 00:16:14 +07:00

chatgpt_oauth_pool_validation.go

feat(codex-pool,create_image): collapse primary_first + route pools through create_image chain (#1006)

2026-04-24 00:16:14 +07:00

contact_merge_handlers.go

fix(ui): combobox viewport flip, multi-user picker, merge data migration

2026-03-29 23:51:53 +07:00

edition.go

feat: SQLite desktop edition — full desktop app with team tasks (#505)

2026-03-27 09:28:42 +07:00

episodic_handlers.go

feat(v3): core architecture redesign — pipeline, memory, vault, evolution, providers, orchestration (#790)

2026-04-09 21:15:19 +07:00

evolution_handlers.go

fix(evolution): fix 7 bugs in evolution flow — guardrails, cron, dedup, dead types

2026-04-10 10:13:58 +07:00

evolution_skill_apply.go

feat(v3): core architecture redesign — pipeline, memory, vault, evolution, providers, orchestration (#790)

2026-04-09 21:15:19 +07:00

export_token_store.go

feat(v3): core architecture redesign — pipeline, memory, vault, evolution, providers, orchestration (#790)

2026-04-09 21:15:19 +07:00

file_token_test.go

fix(web): sign media_refs paths in session history delivery (#519) (#520)

2026-03-28 13:33:25 +07:00

file_token.go

fix(test): support windows test execution

2026-05-17 15:33:55 +07:00

files_path_security_test.go

fix(security): consolidate & enhance batched security fixes (#1155, #967, #972, #974, #989, #973) (#1185)

2026-06-05 00:48:38 +07:00

files.go

fix(security): consolidate & enhance batched security fixes (#1155, #967, #972, #974, #989, #973) (#1185)

2026-06-05 00:48:38 +07:00

gateway_upgrade_test.go

fix(deploy): detach gateway upgrades from service (#45)

2026-05-22 21:53:10 +07:00

gateway_upgrade.go

fix(deploy): detach gateway upgrades from service (#45)

2026-05-22 21:53:10 +07:00

knowledge_graph_handlers.go

fix(usage): enforce caps on auxiliary llm calls

2026-05-24 11:13:03 +07:00

knowledge_graph.go

fix(usage): enforce caps on auxiliary llm calls

2026-05-24 11:13:03 +07:00

logs.go

feat(http): unblock CLI P6 backend APIs (#44)

2026-05-22 20:59:47 +07:00

mcp_export.go

feat: standalone Import & Export page with Teams, Agents, Skills & MCP

2026-03-29 18:01:08 +07:00

mcp_grants.go

feat(storage): add lazy folder loading, SSE size endpoint, and enhanced file viewer

2026-03-14 18:13:52 +07:00

mcp_import.go

feat(security): MCP validation + hooks context isolation

2026-04-16 17:19:50 +07:00

mcp_oauth_test.go

get refreshable tokens

2026-08-08 10:12:58 +08:00

mcp_oauth.go

get refreshable tokens

2026-08-08 10:12:58 +08:00

mcp_requests.go

feat(storage): add lazy folder loading, SSE size endpoint, and enhanced file viewer

2026-03-14 18:13:52 +07:00

mcp_ssrf_parity_test.go

test(mcp): lock test and save SSRF parity (#1450)

2026-08-01 01:59:55 +07:00

mcp_tools_test.go

feat(mcp): MCP OAuth 2.1 client for tool servers (#1196)

2026-06-21 22:27:44 +07:00

mcp_tools.go

test(mcp): lock test and save SSRF parity (#1450)

2026-08-01 01:59:55 +07:00

mcp_update_oauth_purge_test.go

feat(mcp): MCP OAuth 2.1 client for tool servers (#1196)

2026-06-21 22:27:44 +07:00

mcp_user_credentials_test.go

feat(mcp): MCP OAuth 2.1 client for tool servers (#1196)

2026-06-21 22:27:44 +07:00

mcp_user_credentials.go

fix(mcp): refresh per-user credentials without restart (#1375)

2026-07-07 12:23:11 +07:00

mcp.go

test(mcp): lock test and save SSRF parity (#1450)

2026-08-01 01:59:55 +07:00

media_serve.go

fix(security): SSRF validation, path hardening, and dependency CVE fixes (#525)

2026-03-29 12:54:12 +07:00

media_upload.go

refactor(http): move gateway token to package-level auth state

2026-03-23 22:57:26 +07:00

memory_handlers.go

fix(http): harden automation API contracts (#36)

2026-05-20 22:17:13 +07:00

memory.go

fix(http): harden automation API contracts (#36)

2026-05-20 22:17:13 +07:00

oauth_quota_test.go

feat(providers): support Codex OAuth pools with inherited routing defaults

2026-03-27 09:35:57 +07:00

oauth_quota.go

fix(providers): post-merge fixes for Codex OAuth pools (#450)

2026-03-27 10:19:16 +07:00

oauth_test.go

fix(http): allow Operator to read providers and OAuth status (#1075) (#1359)

2026-07-05 12:56:13 +07:00

oauth.go

fix(http): allow Operator to read providers and OAuth status (#1075) (#1359)

2026-07-05 12:56:13 +07:00

openapi_spec.json

feat(provider): add Requesty OpenAI-compatible provider (#1579)

2026-09-26 03:33:33 +07:00

openapi.go

refactor(http): move gateway token to package-level auth state

2026-03-23 22:57:26 +07:00

orchestration_handlers.go

feat(v3): core architecture redesign — pipeline, memory, vault, evolution, providers, orchestration (#790)

2026-04-09 21:15:19 +07:00

packages_rate_limiter_test.go

chore: minor formatting and cleanup across config, audio, cache, http, and provider modules

2026-04-23 19:16:12 +07:00

packages_rate_limiter.go

feat(packages): GitHub Releases binary installer (#898)

2026-04-16 15:09:48 +07:00

packages_test.go

feat(workstation): Remote Workstation Runtime — SSH exec + security + audit (#4)

2026-05-11 14:58:19 +07:00

packages_updates_test.go

feat(packages): Phase 2b — apk update flow + pkg-helper v2 protocol (#900) (#7)

2026-05-11 15:41:27 +07:00

packages_updates.go

feat(packages): Phase 2b — apk update flow + pkg-helper v2 protocol (#900) (#7)

2026-05-11 15:41:27 +07:00

packages.go

feat(workstation): Remote Workstation Runtime — SSH exec + security + audit (#4)

2026-05-11 14:58:19 +07:00

pending_messages.go

fix(discord): qualify group titles across surfaces (#1420)

2026-07-10 22:25:45 +07:00

provider_embedding_validation_test.go

fix(memory): guard provider embedding dimensions to 1536 schema (#563)

2026-03-30 21:36:09 +07:00

provider_embedding_validation.go

fix(memory): guard provider embedding dimensions to 1536 schema (#563)

2026-03-30 21:36:09 +07:00

provider_models_catalog.go

feat(providers): add GPT-5.6 Codex models (#1416)

2026-07-10 06:55:30 +07:00

provider_models_fetch.go

feat(provider): add Requesty OpenAI-compatible provider (#1579)

2026-09-26 03:33:33 +07:00

provider_models_test.go

feat(provider): add Requesty OpenAI-compatible provider (#1579)

2026-09-26 03:33:33 +07:00

provider_models.go

feat(provider): add Requesty OpenAI-compatible provider (#1579)

2026-09-26 03:33:33 +07:00

provider_request_timeout_test.go

feat(providers): make provider request timeout configurable (default 30s) (#1400)

2026-07-09 04:54:15 +07:00

provider_request_timeout.go

feat(providers): make provider request timeout configurable (default 30s) (#1400)

2026-07-09 04:54:15 +07:00

provider_verify_embedding.go

feat(embedding): data-driven dimension config with multi-provider support

2026-03-25 14:50:43 +07:00

provider_verify.go

feat(providers): make provider request timeout configurable (default 30s) (#1400)

2026-07-09 04:54:15 +07:00

providers_codex_pool_activity_test.go

feat(codex-pool,create_image): collapse primary_first + route pools through create_image chain (#1006)

2026-04-24 00:16:14 +07:00

providers_codex_pool_activity.go

feat(codex-pool,create_image): collapse primary_first + route pools through create_image chain (#1006)

2026-04-24 00:16:14 +07:00

providers_ollama_url_test.go

fix(providers): normalize Ollama api_base URL to include /v1 suffix

2026-04-03 15:44:39 +07:00

providers_reconnect_test.go

feat(api): unblock goclaw-cli P6 trace follow and provider reconnect (#37)

2026-05-21 16:37:19 +07:00

providers_test.go

fix(http): restore ACP executable-path validation, bypass SSRF URL check (#1481)

2026-09-27 12:42:14 +08:00

providers_url_validate_test.go

fix(http): restore ACP executable-path validation, bypass SSRF URL check (#1481)

2026-09-27 12:42:14 +08:00

providers.go

fix(http): restore ACP executable-path validation, bypass SSRF URL check (#1481)

2026-09-27 12:42:14 +08:00

response_helpers.go

feat(v3): core architecture redesign — pipeline, memory, vault, evolution, providers, orchestration (#790)

2026-04-09 21:15:19 +07:00

responses.go

feat(v3): core architecture redesign — pipeline, memory, vault, evolution, providers, orchestration (#790)

2026-04-09 21:15:19 +07:00

restore_handler.go

fix(backup): handle nested error response and add system owner fallback

2026-04-13 21:01:21 +07:00

run_timeline_test.go

fix(agent): recover interrupted runs to failed on gateway startup (#1272)

2026-06-24 14:03:00 +07:00

secure_cli_agent_credentials.go

fix(release): address official ship blockers

2026-05-31 22:05:59 +07:00

secure_cli_agent_grants_test.go

feat: grant first setup agent gateway operator access

2026-06-12 10:40:59 +07:00

secure_cli_agent_grants.go

feat(cli): split env visibility for credentials

2026-05-24 15:14:43 +07:00

secure_cli_check_binary_test.go

fix(cli-credentials): stabilize git preset creation

2026-05-31 11:05:47 +07:00

secure_cli_env_response_test.go

fix(cli-credentials): stabilize git preset creation

2026-05-31 11:05:47 +07:00

secure_cli_typed_credentials_test.go

fix(release): address official ship blockers

2026-05-31 22:05:59 +07:00

secure_cli_typed_credentials.go

fix: stabilize agent git access

2026-05-31 19:42:05 +07:00

secure_cli_user_credentials.go

fix: stabilize agent git access

2026-05-31 19:42:05 +07:00

secure_cli.go

feat(cli-credentials): add agent-scoped git credentials

2026-05-31 16:49:23 +07:00

sessions_branch_follow_test.go

feat(http): unblock CLI P6 backend APIs (#44)

2026-05-22 20:59:47 +07:00

sessions.go

feat(http): unblock CLI P6 backend APIs (#44)

2026-05-22 20:59:47 +07:00

skills_access_effective.go

feat(skills): add lifecycle API and CLI

2026-06-12 10:38:53 +07:00

skills_access.go

feat(skills): add lifecycle API and CLI

2026-06-12 10:38:53 +07:00

skills_cache_invalidate_test.go

fix(cache): tenant-aware invalidation for builtin tools and skills

2026-04-11 23:22:17 +07:00

skills_evolution_test.go

fix(skills): harden evolution mutations

2026-06-12 15:38:23 +07:00

skills_evolution.go

fix(skills): harden evolution mutations

2026-06-12 15:38:23 +07:00

skills_export_test.go

feat(skills): add selected skill downloads

2026-05-31 12:44:29 +07:00

skills_export.go

feat(skills): add selected skill downloads

2026-05-31 12:44:29 +07:00

skills_grants.go

feat(skills): add lifecycle API and CLI

2026-06-12 10:38:53 +07:00

skills_import_aux_files_test.go

fix(skills): five defects in slash activation, grants, subagent tool policy, preview and import (#1534)

2026-09-01 02:42:47 +07:00

skills_import.go

fix(skills): five defects in slash activation, grants, subagent tool policy, preview and import (#1534)

2026-09-01 02:42:47 +07:00

skills_lifecycle_deps.go

feat(skills): add lifecycle API and CLI

2026-06-12 10:38:53 +07:00

skills_lifecycle_test.go

feat(skills): add lifecycle API and CLI

2026-06-12 10:38:53 +07:00

skills_lifecycle.go

feat(skills): add lifecycle API and CLI

2026-06-12 10:38:53 +07:00

skills_update_test.go

feat(skills): clarify access modes and repair file paths (#31)

2026-05-21 16:37:50 +07:00

skills_upload_limits.go

feat(skills): configure upload size limits

2026-05-24 15:57:21 +07:00

skills_upload_test.go

fix(skills): normalize backslash in ZIP entry names for Windows compatibility (#1103)

2026-06-26 05:59:35 +07:00

skills_upload.go

Fix/skill violation display (#1304)

2026-06-29 20:54:30 +07:00

skills_versions_test.go

fix: allow skill_manage companion files

2026-05-31 12:24:22 +07:00

skills_versions.go

(feat) MCP Server (#1365)

2026-07-15 09:56:43 +07:00

skills_write_file_test.go

fix(skills): allow editing SKILL.md content for database-managed skills (#1363)

2026-07-05 22:09:27 +07:00

skills_zip_helpers.go

feat(skills): configure upload size limits

2026-05-24 15:57:21 +07:00

skills.go

fix(skills): allow editing SKILL.md content for database-managed skills (#1363)

2026-07-05 22:09:27 +07:00

sse.go

feat: merge pipeline, per-user credentials, unified picker, group contacts

2026-03-29 22:33:17 +07:00

storage_test.go

fix(security): harden upstream critical surfaces (#32)

2026-05-20 16:33:49 +07:00

storage.go

fix(security): harden upstream critical surfaces (#32)

2026-05-20 16:33:49 +07:00

summoner_ensure_capabilities_test.go

feat(v3): core architecture redesign — pipeline, memory, vault, evolution, providers, orchestration (#790)

2026-04-09 21:15:19 +07:00

summoner_prompts.go

feat(v3): core architecture redesign — pipeline, memory, vault, evolution, providers, orchestration (#790)

2026-04-09 21:15:19 +07:00

summoner_regenerate.go

fix(usage): enforce caps on auxiliary llm calls

2026-05-24 11:13:03 +07:00

summoner_utils_test.go

fix(summoning): prevent identity markdown from corrupting display names (#356)

2026-03-23 10:17:47 +07:00

summoner_utils.go

feat(providers): support Codex OAuth pools with inherited routing defaults

2026-03-27 09:35:57 +07:00

summoner.go

fix(usage): enforce caps on auxiliary llm calls

2026-05-24 11:13:03 +07:00

system_configs.go

feat(bgalert): surface non-retryable background worker errors to admin UI

2026-04-13 19:19:51 +07:00

team_attachments.go

refactor(http): move gateway token to package-level auth state

2026-03-23 22:57:26 +07:00

team_events.go

refactor(http): move gateway token to package-level auth state

2026-03-23 22:57:26 +07:00

teams_export.go

feat: merge pipeline, per-user credentials, unified picker, group contacts

2026-03-29 22:33:17 +07:00

teams_import.go

feat: merge pipeline, per-user credentials, unified picker, group contacts

2026-03-29 22:33:17 +07:00

tenant_auth_helpers.go

fix(http): master-scope guards on builtin_tools, packages, api-keys

2026-04-12 10:24:07 +07:00

tenant_backup_auth_helpers_test.go

fix(backup): harden tenant restore preview and lookup handling (#920)

2026-04-16 15:49:50 +07:00

tenant_backup_auth_helpers.go

fix(backup): harden tenant restore preview and lookup handling (#920)

2026-04-16 15:49:50 +07:00

tenant_backup_handler.go

fix(backup): handle nested error response and add system owner fallback

2026-04-13 21:01:21 +07:00

tenant_cache.go

feat(v3): core architecture redesign — pipeline, memory, vault, evolution, providers, orchestration (#790)

2026-04-09 21:15:19 +07:00

tenant_restore_handler.go

fix(backup): harden tenant restore preview and lookup handling (#920)

2026-04-16 15:49:50 +07:00

tenant_scope_hotfix_test.go

feat(workstation): Remote Workstation Runtime — SSH exec + security + audit (#4)

2026-05-11 14:58:19 +07:00

tenants.go

feat(v3): core architecture redesign — pipeline, memory, vault, evolution, providers, orchestration (#790)

2026-04-09 21:15:19 +07:00

tools_invoke.go

feat(v3): core architecture redesign — pipeline, memory, vault, evolution, providers, orchestration (#790)

2026-04-09 21:15:19 +07:00

traces_follow_test.go

feat(traces): add search and advanced filters

2026-06-12 00:14:40 +07:00

traces.go

feat(traces): add search and advanced filters

2026-06-12 00:14:40 +07:00

tts_capabilities_test.go

feat(tts): provider capabilities schema + Gemini TTS + dynamic param forms

2026-04-20 00:05:19 +07:00

tts_capabilities.go

feat(tts): provider capabilities schema + Gemini TTS + dynamic param forms

2026-04-20 00:05:19 +07:00

tts_config_dual_read_test.go

feat(tts): provider capabilities schema + Gemini TTS + dynamic param forms

2026-04-20 00:05:19 +07:00

tts_config_test.go

fix: persist explicit None TTS provider instead of dropping it (#1424)

2026-07-12 12:56:59 +07:00

tts_config.go

fix: persist explicit None TTS provider instead of dropping it (#1424)

2026-07-12 12:56:59 +07:00

tts_test_connection_test.go

feat(tts): provider capabilities schema + Gemini TTS + dynamic param forms

2026-04-20 00:05:19 +07:00

tts_test_connection.go

feat(tts): wire tenant timeout + fix Gemini text-only 400

2026-04-23 08:31:53 +07:00

tts_test.go

feat(tts): wire tenant timeout + fix Gemini text-only 400

2026-04-23 08:31:53 +07:00

tts_timeout_test.go

feat(tts): wire tenant timeout + fix Gemini text-only 400

2026-04-23 08:31:53 +07:00

tts_update_manager_test.go

chore: minor formatting and cleanup across config, audio, cache, http, and provider modules

2026-04-23 19:16:12 +07:00

tts.go

feat(tts): wire tenant timeout + fix Gemini text-only 400

2026-04-23 08:31:53 +07:00

usage_caps_policy_patch_test.go

feat(usage): edit cap policies and trace decisions

2026-05-23 09:34:29 +07:00

usage_caps_test.go

feat(usage): add AI budget usage caps

2026-05-23 00:16:03 +07:00

usage_caps.go

fix(usage): enforce caps on auxiliary llm calls

2026-05-24 11:13:03 +07:00

usage_live_breakdown.go

fix(usage): repair cost analytics and display precision (#1330)

2026-07-03 06:24:21 +07:00

usage_live_merge.go

fix(usage): repair cost analytics and display precision (#1330)

2026-07-03 06:24:21 +07:00

usage_live_test.go

fix(usage): repair cost analytics and display precision (#1330)

2026-07-03 06:24:21 +07:00

usage_live.go

fix(usage): repair cost analytics and display precision (#1330)

2026-07-03 06:24:21 +07:00

usage.go

fix(usage): repair cost analytics and display precision (#1330)

2026-07-03 06:24:21 +07:00

user_search.go

fix(contacts): merge contact into existing tenant user

2026-04-17 19:07:01 +07:00

v3_flags_handlers.go

feat(v3): core architecture redesign — pipeline, memory, vault, evolution, providers, orchestration (#790)

2026-04-09 21:15:19 +07:00

validate_slug_test.go

fix(http/agents): validate agent_key slug on update path

2026-04-11 21:22:23 +07:00

validate_test.go

fix(config): MCP env: resolution, channel field filter, orphan provider event, workspace fallback (#348, #297, #295, #431)

2026-03-30 14:12:18 +07:00

validate.go

feat(bitrix24): replace two MCP text inputs with a filtered dropdown (#1392)

2026-07-08 19:23:21 +07:00

vault_graph_handler.go

feat(vault): optimize graph visualization and fix sidebar state bugs

2026-04-13 10:59:27 +07:00

vault_handler_documents_nofollow_unix.go

fix(vault): non-master tenant 500, O_NOFOLLOW, slog, *string content

2026-05-28 20:55:23 +07:00

vault_handler_documents_nofollow_windows.go

fix(vault): non-master tenant 500, O_NOFOLLOW, slog, *string content

2026-05-28 20:55:23 +07:00

vault_handler_documents_test.go

fix(vault): enforce team access on document updates

2026-06-09 23:04:59 +07:00

vault_handler_documents.go

fix(vault): enforce team access on document updates

2026-06-09 23:04:59 +07:00

vault_handler_links.go

fix(vault): complete chat_id isolation coverage

2026-04-23 18:56:57 +07:00

vault_handler_tree.go

fix(vault): agent filter support + rescan agent_key path matching

2026-04-12 13:25:15 +07:00

vault_handler_upload_test.go

refactor(comments): remove plan/phase refs from agent identity hardening code

2026-04-11 21:22:23 +07:00

vault_handler_upload.go

fix(vault): enrichment pipeline reliability + cross-agent classify

2026-04-12 14:31:36 +07:00

vault_handlers.go

fix(vault): suppress stale error toast on stop + count unenriched docs in scan

2026-04-13 21:42:17 +07:00

voices_test.go

feat(tts): provider capabilities schema + Gemini TTS + dynamic param forms

2026-04-20 00:05:19 +07:00

voices.go

feat(tts): provider capabilities schema + Gemini TTS + dynamic param forms

2026-04-20 00:05:19 +07:00

wake.go

feat(v3): core architecture redesign — pipeline, memory, vault, evolution, providers, orchestration (#790)

2026-04-09 21:15:19 +07:00

webhooks_admin_calls_test.go

feat(webhooks): lease heartbeat to prevent duplicate async processing (#1275)

2026-06-24 16:10:38 +07:00

webhooks_admin_test.go

feat(webhooks): paginate list + call-history endpoints (server + web UI) (#1268)

2026-06-24 10:39:24 +07:00

webhooks_admin.go

feat(webhooks): paginate list + call-history endpoints (server + web UI) (#1268)

2026-06-24 10:39:24 +07:00

webhooks_auth_test.go

feat(webhooks): lease heartbeat to prevent duplicate async processing (#1275)

2026-06-24 16:10:38 +07:00

webhooks_auth.go

fix(security): harden upstream critical surfaces (#32)

2026-05-20 16:33:49 +07:00

webhooks_context.go

fix(security): harden upstream critical surfaces (#32)

2026-05-20 16:33:49 +07:00

webhooks_idempotency_test.go

fix(security): harden upstream critical surfaces (#32)

2026-05-20 16:33:49 +07:00

webhooks_idempotency.go

fix(security): harden upstream critical surfaces (#32)

2026-05-20 16:33:49 +07:00

webhooks_llm_test.go

feat(webhooks): return per-call usage breakdown with provider/model/cost (#1421)

2026-07-10 22:56:05 +07:00

webhooks_llm.go

feat(webhooks): return per-call usage breakdown with provider/model/cost (#1421)

2026-07-10 22:56:05 +07:00

webhooks_media_fetch.go

feat(webhooks): HTTP webhooks to trigger agents with HMAC auth + durable callbacks (#2)

2026-05-11 13:29:24 +07:00

webhooks_message_test.go

feat(webhooks): lease heartbeat to prevent duplicate async processing (#1275)

2026-06-24 16:10:38 +07:00

webhooks_message.go

feat(webhooks): add webhook management UI with delivery history & test (#1211)

2026-06-21 18:46:37 +07:00

webhooks_nonce.go

feat(webhooks): HTTP webhooks to trigger agents with HMAC auth + durable callbacks (#2)

2026-05-11 13:29:24 +07:00

webhooks_payload.go

feat(webhooks): HTTP webhooks to trigger agents with HMAC auth + durable callbacks (#2)

2026-05-11 13:29:24 +07:00

webhooks_ratelimit.go

feat(webhooks): HTTP webhooks to trigger agents with HMAC auth + durable callbacks (#2)

2026-05-11 13:29:24 +07:00

workspace_upload.go

fix(workspace): fix file move bugs, migrate DnD to @dnd-kit

2026-03-25 22:17:33 +07:00

workstations.go

feat(workstation): Remote Workstation Runtime — SSH exec + security + audit (#4)

2026-05-11 14:58:19 +07:00