Commit graph

Select branches

Hide pull requests

dev

main

Mono Color

• 8d9d4ec9c6
  feat(platform): Add support for APFEL as part of the dependencies and models for the Cookbook. (#2657) Sebastian Andres El Khoury Seoane 2026-06-07 16:28:02 +01:00
• 8f2c8d2dc8
  fix(test): tolerate owner kwarg in compaction summary resolve_endpoint mock (#3304) Kenny Van de Maele 2026-06-07 17:23:06 +02:00
• 613bbb0dba
  fix: port main-only fixes to dev (#2761 sharpen auth, #2762 doc version 404) (#3303) Kenny Van de Maele 2026-06-07 17:19:24 +02:00
• 8f5b7210cc
  added if condition (line 4351) to resetWindowsPlacement(); (#2198) Steve 2026-06-07 17:12:42 +02:00
• 2a6921a455
  Fix logical bugs in event bus and bulk session deletion (#3139) Muhammad Ikhwan Fathulloh 2026-06-07 22:08:50 +07:00
• b8463e3ac2
  fix(email): decode headers without injected spaces (#2433) SurprisedDuck 2026-06-07 16:56:20 +02:00
• 92ef01d4fa
  fix(skills): tolerate a stray brace before the JSON in skill extraction (#2200) Mazen Tamer Salah 2026-06-07 17:54:36 +03:00
• c5ac89f01f
  fix: preserve partial deep research findings on non-timeout errors (#2189) Rudra Sarker 2026-06-07 20:53:14 +06:00
• b9a96bca1a
  fix(research): avoid double split() call and potential IndexError (#2229) Wes Huber 2026-06-07 07:46:21 -07:00
• 706ea6a7b7
  fix: TOCTOU race in personal file delete + IndexError on whitespace cmd (#2228) Wes Huber 2026-06-07 07:44:26 -07:00
• 12cb39cbd9
  feat: add OpenCode Zen and Go as provider options (#26) M57 2026-06-07 17:43:00 +03:00
• 43c16fc7e4
  fix(context_compactor): return original messages when compaction summary fails (#2174) max-freddyfire 2026-06-07 16:40:16 +02:00
• c75d3e1975
  fix(memory): record dislikes as dislikes, not preferences (#2435) SurprisedDuck 2026-06-07 16:36:07 +02:00
• 3c924b8dee
  fix: hide Select buttons in Memory/Skills tabs when list is empty (#2906) Maruf Hasan 2026-06-07 20:29:04 +06:00
• adbcb3763f
  fix(agent): don't abort legitimate tool batches as runaway loops (#3183) YotamPeled 2026-06-07 17:16:17 +03:00
• bdf4ec8b24
  fix: fall back to /models probe when base URL returns 404 (#3205) michaelxer 2026-06-07 21:09:33 +07:00
• 5d3e3c7053
  feat(tasks): assign folder='Tasks' at creation + backfill migration (#2834) danielroytel 2026-06-07 23:33:17 +10:00
• 04d6a5ccaa
  Fix: CORS preflight 401'd by AuthMiddleware before CORSMiddleware (#3262) Marius 2026-06-07 14:23:23 +01:00
• a3784da172
  fix: block app_api access to shell routes (#3225) RaresKeY 2026-06-07 16:19:08 +03:00
• cbbb41dfb1
  fix: avoid double bcrypt on login by using create_session_trusted (#3236) Ashvin 2026-06-07 18:40:53 +05:30
• 83b0ab7cd3
  Scope auxiliary LLM endpoints by owner (#2996) Vykos 2026-06-07 14:47:44 +02:00
• 12a7e741d0
  fix: redirect /login to / when AUTH_ENABLED=false (#3235) Ashvin 2026-06-07 17:47:21 +05:30
• 573d431399
  fix(cookbook): don't infer server OS from the browser's user-agent (#3223) Léo 2026-06-07 13:20:05 +02:00
• 2149f0fb67
  fix(rag): forward owner through manager wrapper (#2991) Vykos 2026-06-07 12:56:57 +02:00
• 83fca6ac62
  fix(personal): require document privilege for rag upload (#2990) Vykos 2026-06-07 12:56:53 +02:00
• 000932a6d9
  fix(auth): gate api tokens from user routes (#2992) Vykos 2026-06-07 12:55:01 +02:00
• 299538ea4e
  Harden note reminder dispatch ownership (#2999) Vykos 2026-06-07 12:52:27 +02:00
• 67aeea4f8b
  Scope gallery image endpoints by owner (#3001) Vykos 2026-06-07 12:51:21 +02:00
• f2a79aaf5c
  Tighten manage notes owner checks (#3002) Vykos 2026-06-07 12:50:10 +02:00
• a6490ffb1b
  Harden gallery album assignment scope (#3004) Vykos 2026-06-07 12:49:03 +02:00
• 06d28e23ac
  Scope document session links by owner (#3005) Vykos 2026-06-07 12:47:20 +02:00
• 7b4e6c4c1b
  Enforce task chain owner scope (#3006) Vykos 2026-06-07 12:43:43 +02:00
• 3cff06781e
  Scope model helper endpoint resolution (#3007) Vykos 2026-06-07 12:40:23 +02:00
• ff4508d396
  Scope vision model resolution by owner (#3009) Vykos 2026-06-07 12:39:02 +02:00
• c11ce66e0e
  docs: note dev branch status in README (#3196) ooovenenoso 2026-06-07 06:16:14 -04:00
• 34bd8f0491
  fix(email): guarantee IMAP conn.logout() on all exception paths (#1530) Lucas Daniel 2026-06-07 01:09:28 -03:00
• f78539ba15
  fix(caldav): disable redirects on the sync/write-back DAVClient (SSRF) (#2663) Joeseph Grey 2026-06-06 22:05:24 -06:00
• 95c2dca4b5
  fix(security): add HSTS and Permissions-Policy to SecurityHeadersMiddleware (#3081) Giuseppe 2026-06-07 05:58:33 +02:00
• 3940297655
  fix(webhooks): redact IPv6 addresses in sanitized error messages (#3038) Karandeep Bhardwaj 2026-06-06 23:55:33 -04:00
• a3cb15d0a1
  fix(agent): enforce guide-only tool policy (#3088) Nicholai 2026-06-06 18:48:24 -06:00
• 108ee1e32b
  fix(security): close DNS-rebinding hole on diffusion_server (wildcard CORS + missing Host check) (#347) @aaronjmars 2026-06-06 18:34:39 -04:00
• b03d934ec6
  fix: restore backup import after skills migration (#2980) muhamed hamed 2026-06-06 23:46:32 +03:00
• e8106f7c7c Fix logical bugs in event bus and bulk session deletion Muhammad-Ikhwan-Fathulloh 2026-06-07 01:38:33 +07:00
• eb840459f5
  ci: skip pytest smoke on documentation-only changes (#2768) Lucas Daniel 2026-06-06 12:00:46 -03:00
• 6ccd4500d7
  fix(chat): show requested and actual reply models Mohammed Riaz 2026-06-06 14:30:16 +04:00
• 2e37d72155
  fix(chat): stop code-block button flicker during streaming (#3023) Merajul Arefin 2026-06-06 16:08:54 +06:00
• fb9c7cf3da
  fix(calendar): accept list event range aliases Ocean Bennett 2026-06-06 05:47:18 -04:00
• 33edc40eae
  fix: route misfenced web lookups to web tools Nicholai 2026-06-06 03:46:31 -06:00
• e87a1ad8d2
  fix(deep-research): wrap fetched webpage content in untrusted-context sandbox Giuseppe 2026-06-06 11:37:10 +02:00
• 893cb8254f
  fix(sessions): retry resumeStream in poll loop when chatModule loads late Giuseppe 2026-06-06 11:36:30 +02:00
• 870ae2823f
  fix: lower minimized-dock z-index so modals stack above it Maruf Hasan 2026-06-06 15:35:48 +06:00
• 86abcb75d0
  fix: split Chroma embedding lanes (#3046) Nicholai 2026-06-06 03:17:19 -06:00
• 463713c2c6
  feat(search): unify session transcript search (#2877) Nicholai 2026-06-05 18:08:31 -06:00
• c2017fa089
  Phase 1: consolidate tool output constants into src/constants.py (#2989) Mateus Oliveira 2026-06-05 18:05:02 -03:00
• 53fd856ea8
  fix: raise imaplib line limit for large mailboxes (#2895) michaelxer 2026-06-06 03:59:35 +07:00
• 66599b02a2
  allow user who disable auth to use chat (#2548) Fijar Lazuardy 2026-06-06 03:54:19 +07:00
• fb3e89b011
  VRAM detection under native Windows install (#1610) n2b12 2026-06-05 22:49:47 +02:00
• f72e1bd412
  feat(reminders): add generic webhook as a fourth reminder channel (#2952) Logan Davis 2026-06-05 16:47:57 -04:00
• 2bdf43b74d
  feat(cookbook): add Gemma4 thinking chat template (#2955) ooovenenoso 2026-06-05 16:43:31 -04:00
• c8b4cd24e0
  fix: Add WSL paths to hardware detection fallback (#2933) horribleCodes 2026-06-05 21:34:41 +02:00
• f4aa661502
  fix ambiguous naming, remove redundant json imports, fix _MCP_ARG_PARSERS type annotations (#2874) Paweł Drużyński 2026-06-05 21:30:22 +02:00
• 5911b8c0dc
  fix(models): allow same endpoint URL with different keys (#2758) Ocean Bennett 2026-06-05 15:12:14 -04:00
• 08e543d1ff
  fix(tool-parsing): don't ship unconvertible <invoke> fence content to the code executor (#2926) nubs 2026-06-05 19:08:54 +00:00
• 47a47bf71d
  fix(llm): guard against null arguments in streaming tool-call accumulator (#2923) nubs 2026-06-05 18:57:36 +00:00
• 71dda5b106
  fix: respect user round count in deep research (#2896) michaelxer 2026-06-06 01:49:42 +07:00
• ad82ee1c83
  feat(calendar): support multiple CalDAV accounts (#2942) Logan Davis 2026-06-05 14:32:50 -04:00
• 545e692565
  fix(auth): distinguish empty model allowlists (#2938) ghreprimand 2026-06-05 13:27:10 -05:00
• fa9f62b44c
  fix(compactor): shrink oversized tool_calls arguments so trim_for_context can fit a tool-only turn (#2949) nubs 2026-06-05 18:23:38 +00:00
• b448119919
  feat(skills): import SKILL.md bundles from public GitHub URLs (#2576) Giulio Zelante 2026-06-05 19:48:23 +02:00
• 977daf0643
  Improve edge-docked window behavior (#2779) Enes Öz 2026-06-05 18:07:08 +03:00
• 8ce945d338
  feat: Add plan mode to the chat agent (#638) Kenny Van de Maele 2026-06-05 16:32:25 +02:00
• 2e207fc315
  fix(notes): track + remove the select-mode Esc keydown listener so it doesn't leak per open (#2792) nubs 2026-06-05 14:25:05 +00:00
• 01f1278811
  fix: Settings now correctly displays CalDAV integrations when more than one isconfigured (#2901) Greg Stevenson 2026-06-05 15:11:08 +01:00
• 4bfe0c690a
  fix(calendar): cap RRULE expansion (#2902) ooovenenoso 2026-06-05 10:05:14 -04:00
• c9d0c6db18
  fix: quote IMAP mailbox arguments (#2170) ooovenenoso 2026-06-05 10:00:20 -04:00
• 6973c5427c
  fix(model-context): count tool_calls in estimate_tokens so compaction sees real size (#2751) nubs 2026-06-05 13:56:54 +00:00
• 8354948a1c
  fix(llm): route harmony thinking streams (#2449) nubs 2026-06-05 13:22:08 +00:00
• 8159733c6c
  fix(caldav): pull Google Calendar events from the events collection, not the /user principal (#2531) L1 2026-06-05 10:18:16 -03:00
• 7367325819
  fix(caldav): include owner in calendar ID hash to prevent PK collision (#2765) Ernest Hysa 2026-06-05 14:12:54 +01:00
• 3738df3b93
  fix(tasks): validate then_task_id belongs to same owner on create/update (#2764) Ernest Hysa 2026-06-05 14:12:47 +01:00
• f5c9095222
  fix(document): add 404 guard to version list/get endpoints (#2762) Ernest Hysa 2026-06-05 14:12:40 +01:00
• d4ff7fce81
  fix(gallery): add auth check to /api/image/sharpen endpoint (#2761) Ernest Hysa 2026-06-05 14:12:33 +01:00
• 05f047b188
  fix: prevent document link click from resetting active session (#2055) Wes Huber 2026-06-05 06:05:30 -07:00
• e9ff6cde77
  docs(tests): document helper conventions Alexandre Teixeira 2026-06-05 14:04:10 +01:00
• 747d005645
  fix(gallery): validate target album owner on image PATCH + owner-scope album count/cover (#2755) nubs 2026-06-05 13:01:01 +00:00
• bec594904d
  Fix/windows llama cpp serve and test upstream (#2669) Zen0-99 2026-06-05 13:53:33 +01:00
• ec8fbf5d8f
  Add support for EMBEDDING_API_KEY (#2691) Yiğit Egemen 2026-06-05 14:47:24 +02:00
• b5c45326e4
  Fix Windows Cookbook background tasks, exit statuses, and empty SSH logs wrapper (#1389) the_peaceful 2026-06-05 14:41:07 +02:00
• 452a94fb1b
  refactor(tests): centralize fake endpoint resolver cleanup Alexandre Teixeira 2026-06-05 13:23:46 +01:00
• 301d1109b5
  refactor(tests): centralize fake database import-state cleanup Alexandre Teixeira 2026-06-05 12:27:44 +01:00
• 370ae5d451
  Harden DAV outbound URL validation (#2819) Vykos 2026-06-05 13:22:21 +02:00
• 6d64055328
  Constrain research handler JSON paths (#2846) Vykos 2026-06-05 13:20:02 +02:00
• 0b0d747f1c
  Constrain signature uploads to PNG data (#2844) Vykos 2026-06-05 13:17:43 +02:00
• 688194113b
  Constrain upload paths to upload root (#2825) Vykos 2026-06-05 13:15:23 +02:00
• 2a1febdeef
  fix(actions): scope scheduled model resolution to owner (#2773) Ocean Bennett 2026-06-05 07:13:13 -04:00
• 0f8d12363a
  fix(images): render agent-generated images in chat (#2809) nsgds 2026-06-05 19:04:33 +08:00
• 201e207b56
  fix(memory): let manual add specify memory category Nicholai 2026-06-05 04:57:13 -06:00
• 65231f2ba1
  refactor(tests): reuse import-state helper in auth manager tests Alexandre Teixeira 2026-06-05 11:24:55 +01:00
• 4f0133b8c3
  refactor(tests): reuse import-state helper in auth tests Alexandre Teixeira 2026-06-05 11:10:41 +01:00
• f9e1d38cc2
  fix: diagnose vllm serve runtime issues (#1198) spooky 2026-06-05 20:03:04 +10:00