RaresKeY and nopoz
451900fc15
fix(image): prepare v1.0.3 hotfix ( #6167 )
...
* fix(image): pin standalone service model selection
Port the reviewed standalone image-service hardening from dev to the curated release branch and include its focused regressions.
Evidence: all four focused regression tests pass in an isolated runtime, and the staged diff check is clean. Coordinated-disclosure identifiers are intentionally omitted pending publication.
* chore(release): bump version to 1.0.3
Set the canonical application version for the curated hotfix release.
Evidence: APP_VERSION imports as 1.0.3 and the release workflow reads this source. No tag, package, or release artifact is created by this commit.
---------
Co-authored-by: nopoz <bill.lowney@gmail.com >
2026-08-25 10:22:41 +01:00
RaresKeY
93107c5415
chore(release): bump version to 1.0.2
2026-07-12 08:20:59 +02:00
RaresKeY
2c7580139c
fix(chat): require explicit web search enable
...
(cherry picked from commit dadf178ed5
2026-07-12 08:20:59 +02:00
RaresKeY
f1a057c2e6
fix(tasks): gate cookbook serve task execution ( #5235 )
2026-07-05 13:19:04 +01:00
RaresKeY
ab5d383799
fix(email): enforce MCP account owner scope ( #5234 )
2026-07-05 13:13:56 +01:00
RaresKeY
354853906a
fix(agent): preserve bare email tool parity ( #5075 )
2026-06-30 19:20:56 +01:00
RaresKeY
1f9912294a
fix(cookbook): stop Windows process trees ( #4283 )
2026-06-19 00:28:25 -07:00
RaresKeY
740c0c383d
fix(cookbook): validate agent SSH targets ( #4429 )
2026-06-18 21:41:33 +02:00
RaresKeY
67b40d65ad
fix(hwfit): normalize CPU arch for fallback estimates ( #4441 )
2026-06-18 20:26:22 +02:00
RaresKeY
6b7b4bcad4
fix(routes): normalize session owner fallback helpers ( #4313 )
...
* fix(memory): normalize import session fallback
* fix(chat): use token owner for compaction scope
* fix(background): honor session endpoint fallback
2026-06-16 06:07:42 +01:00
RaresKeY
3f0f4f89d4
fix(email): enforce MCP owner boundaries ( #4335 )
...
* fix(email): enforce MCP owner boundaries
* fix(email): fail closed for unowned MCP fallback
2026-06-16 04:31:24 +01:00
RaresKeY
547e2203a6
test(email): cover sender signature owner cache writes ( #4278 )
2026-06-16 04:21:11 +01:00
RaresKeY
a45b759806
test(hwfit): cover SSH target validation regressions ( #4279 )
2026-06-16 04:18:21 +01:00
RaresKeY
6fb4ccc8ee
test(auth): cover reserved username sentinel gate ( #4276 )
2026-06-16 04:09:58 +01:00
RaresKeY
2007e92a25
fix(devops): harden docker config defaults ( #4349 )
2026-06-16 04:03:43 +01:00
RaresKeY
b36000a170
fix(endpoints): normalize URL handling ( #4338 )
2026-06-16 03:59:18 +01:00
RaresKeY
6f8bee5206
fix(cookbook): harden remote serve host handling ( #4345 )
2026-06-16 03:46:32 +01:00
RaresKeY
12615aefa6
fix(auth): clean up rename and null-owner ownership ( #4340 )
2026-06-16 03:33:02 +01:00
RaresKeY
90ea77d29c
fix(gallery): confine gallery image path resolution ( #4352 )
2026-06-16 03:28:09 +01:00
RaresKeY
0d931ee59e
fix(mcp): scope memory server by owner ( #4315 )
2026-06-16 03:18:17 +01:00
RaresKeY
7756ca9ba7
fix(companion): require chat scope for model inventory ( #4319 )
2026-06-16 01:15:05 +02:00
RaresKeY
f50bad0092
fix(ci): avoid duplicate CodeQL setup ( #4297 )
2026-06-15 16:39:13 +01:00
RaresKeY
7e6352b6f2
fix(cookbook): validate adopt host ( #4282 )
2026-06-15 16:44:24 +02:00
RaresKeY
0d17175a5d
fix(gallery): confine replacement image path ( #4285 )
2026-06-15 16:42:41 +02:00
RaresKeY
2141a7e7e4
fix(ai): validate generated image result URLs ( #4289 )
2026-06-15 16:40:49 +02:00
RaresKeY
359f569f34
fix(models): scope API-token model listing ( #4292 )
2026-06-15 16:38:41 +02:00
RaresKeY
bcb4df10c7
fix(personal): resolve upload delete path ( #4291 )
2026-06-15 16:38:37 +02:00
RaresKeY and Alexandre Teixeira
3a459a0d40
docs: add pull request review template ( #3128 )
...
* docs: add pull request review template
- add a reusable review structure with findings, validation, and hygiene sections
- document priority badges, intent labels, and expected finding fields
* docs: clarify review template usage
* docs: add small PR review path
---------
Co-authored-by: Alexandre Teixeira <111787685+alteixeira20@users.noreply.github.com >
2026-06-15 20:23:13 +09:00
RaresKeY
73cd1696a5
fix(agent): honor auth-disabled tool access after setup
...
Check explicit auth-disabled mode before configured-admin ownership checks so single-user mode keeps full agent tool access after setup.
2026-06-15 15:01:48 +09:00
RaresKeY
509a2cf9b1
fix(uploads): migrate upload ownership on rename ( #3617 )
2026-06-11 16:01:04 +02:00
RaresKeY
2a7a8b0412
Merge pull request #3558 from Rohithmatham12/fix/quote-kernels-repair
...
fix: quote kernels repair package spec
2026-06-11 15:01:30 +03:00
RaresKeY
cfc64a22f4
fix(email): scope learned sender signatures by owner ( #3724 )
2026-06-11 13:26:59 +02:00
RaresKeY
e6ca2f0d0f
fix(research): migrate active task owners on rename ( #3618 )
2026-06-11 01:17:02 +02:00
RaresKeY
b8b6b8e1d6
fix(hwfit): validate remote SSH detection targets ( #3718 )
2026-06-11 00:43:49 +02:00
RaresKeY
9b4fc15769
fix(auth): roll back rename on owner migration failure ( #3616 )
2026-06-10 17:28:27 +02:00
RaresKeY
a4f0e7973b
fix(auth): drop reserved usernames loaded from auth config ( #3727 )
2026-06-10 16:31:26 +02:00
RaresKeY
ffb2b73911
fix(auth): fail closed when deleting user tokens fails ( #3733 )
2026-06-10 16:24:27 +02:00
RaresKeY
ad1f5ed285
fix(gallery): fail closed for null-user owner scope ( #3613 )
2026-06-09 20:20:21 +02:00
RaresKeY
374375a74f
fix: block app_api access to Cookbook host controls ( #3231 )
2026-06-07 19:20:11 +02:00
RaresKeY
ea86a6bfef
fix: block app_api access to shell routes ( #3225 )
2026-06-07 15:19:08 +02:00
RaresKeY
f372a27619
fix: normalize Gemma 4 thought-channel output ( #2224 )
2026-06-04 19:26:58 +02:00
