Gio Della-Libera 9f248969f6 Verify signed marketplace feed refresh (#98338) ...

* feat: verify signed marketplace feed refresh

* test: fix signed marketplace feed CI

* Guard signed feed refresh trust state

* test(feeds): sign decoded hosted feed payloads

* fix(feeds): make signed snapshot writes monotonic

---------

Co-authored-by: Patrick Erichsen <patrick.a.erichsen@gmail.com>
Co-authored-by: Gio Della-Libera <giodl@microsoft.com>

2026-07-09 10:46:06 -07:00

..

acp

fix: scope ACP search path approvals [AI] (#102416)

2026-07-09 20:33:18 +05:30

agents

fix(sandbox): keep redacted session keys UTF-16 safe (#102969)

2026-07-09 18:31:21 +01:00

audit

…

auto-reply

fix(agent-runner-memory): use truncateUtf16Safe for memory flush error truncation (#102685)

2026-07-09 18:13:49 +01:00

bindings

…

bootstrap

…

channels

feat(onboard): guided CLI onboarding with live AI verification and classic fallback (#101880)

2026-07-09 12:40:55 +01:00

chat

feat: render inline web chat widgets via capability-gated show_widget tool (#101840)

2026-07-09 12:29:50 +01:00

cli

fix(plugins): enforce own install record lookups (#102872)

2026-07-09 15:54:21 +01:00

commands

fix(cli): keep session key truncation UTF-16 safe (#103010)

2026-07-09 18:17:09 +01:00

commitments

…

compat

…

config

feat(providers): add Meta Model API - muse-spark-1.1 (#102873)

2026-07-09 10:27:09 -07:00

context-engine

refactor: localize internal implementation constants (#101758)

2026-07-07 08:34:13 -07:00

crestodian

fix: keep bounded Unicode text valid across UTF-16 boundaries (#102823)

2026-07-09 15:21:23 +01:00

cron

fix(cron): keep bounded diagnostics UTF-16 safe (#102624)

2026-07-09 13:05:51 +01:00

daemon

fix(launchd): verify profile updater jobs by metadata (#97264)

2026-07-09 16:55:23 +01:00

docs

…

flows

fix(infra): converge legacy state migrations on archive collisions

2026-07-09 18:57:58 +05:30

gateway

test(ci): harden live tool nonce retries (#102980)

2026-07-09 17:17:09 +01:00

hooks

fix: keep bounded Unicode text valid across UTF-16 boundaries (#102823)

2026-07-09 15:21:23 +01:00

i18n

…

image-generation

…

infra

feat(providers): add Meta Model API - muse-spark-1.1 (#102873)

2026-07-09 10:27:09 -07:00

interactive

…

link-understanding

…

llm

fix(oauth): remove base64 obfuscation from public OAuth client IDs (#96537)

2026-07-09 16:45:03 +01:00

logging

fix: redact diagnostics config with schema hints (#102426)

2026-07-09 20:49:21 +05:30

mcp

refactor: localize internal implementation constants (#101758)

2026-07-07 08:34:13 -07:00

media

fix: keep bounded Unicode text valid across UTF-16 boundaries (#102823)

2026-07-09 15:21:23 +01:00

media-generation

…

media-understanding

fix(media): trust known CLI transcript files (#87393)

2026-07-09 15:35:38 +01:00

memory

…

memory-host-sdk

…

model-catalog

…

music-generation

…

node-host

fix(node-host): clarify unusable node exec cwd failures (#97105)

2026-07-09 11:34:25 +01:00

pairing

feat(watchos): connect directly to Gateway as a node (#102893)

2026-07-09 15:53:02 +01:00

plugin-sdk

fix: keep bounded Unicode text valid across UTF-16 boundaries (#102823)

2026-07-09 15:21:23 +01:00

plugin-state

refactor(codex): store app-server thread bindings in SQLite plugin state (#101210)

2026-07-07 03:03:44 +01:00

plugins

Verify signed marketplace feed refresh (#98338)

2026-07-09 10:46:06 -07:00

process

feat(onboard): guided CLI onboarding with live AI verification and classic fallback (#101880)

2026-07-09 12:40:55 +01:00

provider-runtime

refactor: localize internal implementation constants (#101758)

2026-07-07 08:34:13 -07:00

proxy-capture

fix(secrets): prevent capture and sentinel credential retention (#102420)

2026-07-09 05:50:28 +01:00

realtime-transcription

fix(realtime): preserve reconnect budget across flaps (#102348)

2026-07-09 12:08:50 +01:00

routing

fix(agents): isolated cron busts prompt prefix cache via per-run session id (#96686)

2026-07-09 16:51:04 +01:00

scripts

fix(ci): stabilize Windows startup fallback tests (#101223)

2026-07-07 00:37:50 +01:00

secrets

feat(providers): add Meta Model API - muse-spark-1.1 (#102873)

2026-07-09 10:27:09 -07:00

security

feat(nodes): add computer use (computer.act) on macOS nodes via Peekaboo (#102776)

2026-07-09 15:28:09 +01:00

sessions

fix(agents): isolated cron busts prompt prefix cache via per-run session id (#96686)

2026-07-09 16:51:04 +01:00

shared

feat(watchos): connect directly to Gateway as a node (#102893)

2026-07-09 15:53:02 +01:00

skills

fix(workshop): keep approval target names UTF-16 safe (#102963)

2026-07-09 18:26:08 +01:00

state

Verify signed marketplace feed refresh (#98338)

2026-07-09 10:46:06 -07:00

status

fix(status): surface auto-fallback model in status and session_status (#96126) (#101337)

2026-07-07 09:17:58 +01:00

talk

fix: scope task suggestions to supported surfaces (#102743)

2026-07-09 12:59:50 +01:00

tasks

fix: keep task title truncation UTF-16 safe in restart/diagnostic output (#101934)

2026-07-09 07:10:25 +01:00

test-helpers

…

test-utils

refactor(plugins): require initialized registry collections (#100990)

2026-07-06 10:25:22 -07:00

tools

…

trajectory

refactor(deadcode): localize core helpers (#101869)

2026-07-07 13:16:57 -07:00

transcripts

…

tts

fix(text): keep bounded outputs UTF-16 safe (#101355)

2026-07-06 21:33:24 -07:00

tui

test(ci): serialize real TUI PTY backends (#103006)

2026-07-09 17:55:39 +01:00

types

…

utils

fix: keep bounded Unicode text valid across UTF-16 boundaries (#102823)

2026-07-09 15:21:23 +01:00

video-generation

…

web-fetch

…

web-search

…

wizard

feat(onboard): guided CLI onboarding with live AI verification and classic fallback (#101880)

2026-07-09 12:40:55 +01:00

browser-lifecycle-cleanup.test.ts

…

browser-lifecycle-cleanup.ts

…

docker-build-cache.test.ts

…

docker-image-digests.test.ts

…

docker-setup.e2e.test.ts

…

dockerfile.test.ts

…

entry.compile-cache.test.ts

…

entry.compile-cache.ts

…

entry.respawn.test.ts

…

entry.respawn.ts

…

entry.root-help-fast-path.test.ts

…

entry.test.ts

…

entry.ts

…

entry.version-fast-path.test.ts

…

entry.version-fast-path.ts

…

extensionAPI.ts

…

global-state.ts

…

globals.test.ts

…

globals.ts

…

index.test.ts

…

index.ts

…

install-sh-version.test.ts

…

library.test.ts

…

library.ts

…

logger.test.ts

…

logger.ts

…

logging.ts

…

param-key.ts

…

plugin-activation-boundary.test.ts

…

poll-params.test.ts

…

poll-params.ts

…

polls.test.ts

…

polls.ts

…

runtime.test.ts

fix(runtime): throw typed ExitError instead of generic Error for simulated exit (#97796) (#97803)

2026-07-06 16:07:32 +00:00

runtime.ts

fix(runtime): throw typed ExitError instead of generic Error for simulated exit (#97796) (#97803)

2026-07-06 16:07:32 +00:00

utils.test.ts

…

utils.ts

…

version.test.ts

…

version.ts

…