Alexandre Teixeira 2e1c2a343a merge(dev): reconcile photo editor security and upstream changes ...

- Reconcile conflict resolution in routes/editor_agent_routes.py and src/editor_agent_model.py
- Enforce strict server-authorized endpoint resolution and reject client URL overrides
- Enforce bearer-token privilege separation: delegated API tokens are capped at non-admin scope per src/tool_security.py and cannot inspect private base URLs or probe metadata
- Preserve chat-scope authorization, missing-session 401 rejection, and owner-scoped browser bridge/SSE queues
- Preserve administrator-disabled-tool denylist enforcement introduced by PR #6357
- Fix mobile toolbar flyout hit-testing and stacking context trapping on viewports <= 700px via scoped elevation and mask suppression
- Stabilize project recovery test fixture by awaiting document draft quiescence prior to baseline capture

2026-10-28 19:30:08 +00:00

..

calendar

Consolidate Odysseus agent harness and tool contracts

2026-09-17 10:07:40 +00:00

color

fix: theme color parsing breaks on #rgb shorthand hex (#1213)

2026-06-03 00:30:03 +09:00

compare

refactor(notes): decompose Notes into feature-owned modules (#6713)

2026-10-15 09:29:41 +01:00

editor

merge(dev): reconcile photo editor security and upstream changes

2026-10-28 19:30:08 +00:00

emailLibrary

Merge branch 'upstream/dev' into fix/pr-6742-email-export

2026-10-20 15:01:55 +01:00

features/notes

fix(ui): respect iOS safe areas, screen height and landscape layout

2026-10-19 19:43:53 +02:00

markdown

Ignore non-string markdown table rows (#1648)

2026-06-03 14:17:02 +09:00

model

fix: model cost/info matches first substring key (gpt-4o-mini billed as gpt-4o) (#1439)

2026-06-04 03:05:37 +01:00

research

Consolidate Odysseus agent harness and tool contracts

2026-09-17 10:07:40 +00:00

settings

merge: reconcile PR 40 with current lab

2026-10-01 05:03:58 +01:00

shared/ui

refactor(notes): decompose Notes into feature-owned modules (#6713)

2026-10-15 09:29:41 +01:00

util

fix: monthly schedule label shows 21th/22th/31th (ordinal suffix for days >20) (#1577)

2026-06-03 08:57:47 +09:00

a11y.js

Improve accessibility across core flows (#86)

2026-06-01 22:04:00 +02:00

actionMenuOrder.js

Squash Odysseus development history

2026-09-11 06:04:19 +00:00

admin.js

fix(security): address CodeQL findings in migration candidate

2026-10-05 20:48:12 +01:00

appConfig.js

perf(frontend): share one cached fetch for /api/auth/settings and /api/tools (#5997)

2026-08-16 21:03:05 +01:00

assistant.js

Consolidate Odysseus agent harness and tool contracts

2026-09-17 10:07:40 +00:00

backgroundToolJobs.js

Consolidate Odysseus agent harness and tool contracts

2026-09-17 10:07:40 +00:00

calendar.js

Consolidate Odysseus agent harness and tool contracts

2026-09-17 10:07:40 +00:00

censor.js

Ignore censor preference storage errors (#1652)

2026-06-03 14:16:55 +09:00

chat.js

Keep streamed-chat module identity consistently cache-busted

2026-10-26 16:57:01 +00:00

chatgptSubscriptionUsage.js

feat(ui): refine subscription model and usage controls

2026-09-22 13:12:19 +01:00

chatModelProvenance.js

refactor(model-routing): centralize explicit foreground fallback policy (#6020)

2026-08-14 08:10:30 +01:00

chatRenderer.js

fix(security): isolate session cost ledger keys

2026-10-06 00:25:24 +01:00

chatStream.js

Harden maintainer-preview harness and review fixes

2026-09-21 06:54:03 +00:00

chatStreamErrors.js

refactor(model-routing): centralize explicit foreground fallback policy (#6020)

2026-08-14 08:10:30 +01:00

chipScroll.js

Squash Odysseus development history

2026-09-11 06:04:19 +00:00

codeRunner.js

Consolidate Odysseus agent harness and tool contracts

2026-09-17 10:07:40 +00:00

colorPicker.js

feat(editor): harden photo editor security and interactions

2026-10-28 17:37:10 +00:00

composerArrowUpRecall.js

fix(chat): stop ArrowUp from eating an unsent multi-line prompt (#5875)

2026-08-07 19:34:50 +02:00

cookbook-deps-recipes.js

Merge verified Odysseus fixes

2026-07-23 14:49:02 +00:00

cookbook-diagnosis.js

Consolidate Odysseus agent harness and tool contracts

2026-09-17 10:07:40 +00:00

cookbook-hwfit.js

chore(publication): close pre-integration release blockers

2026-10-05 01:37:49 +01:00

cookbook.js

chore(publication): close pre-integration release blockers

2026-10-05 01:37:49 +01:00

cookbookDownload.js

Consolidate Odysseus agent harness and tool contracts

2026-09-17 10:07:40 +00:00

cookbookPorts.js

fix(cookbook): only block model launch on real port collisions (#4760)

2026-06-24 19:44:09 +02:00

cookbookProgressSignal.js

Don't falsely declare a dependency build stale (#1568) (#1768)

2026-06-03 13:23:35 +09:00

cookbookRunning.js

Consolidate Odysseus agent harness and tool contracts

2026-09-17 10:07:40 +00:00

cookbookSchedule.js

Consolidate Odysseus agent harness and tool contracts

2026-09-17 10:07:40 +00:00

cookbookServe.js

chore(publication): close pre-integration release blockers

2026-10-05 01:37:49 +01:00

document.js

fix(security): harden browser security boundaries

2026-10-05 23:48:14 +01:00

documentLibrary.js

Consolidate Odysseus agent harness and tool contracts

2026-09-17 10:07:40 +00:00

documentOutline.js

Merge commit 'refs/phase3/pre-ajax/publication-tip' into integration/pre-ajax-release

2026-10-05 15:59:59 +01:00

documentStats.js

Squash Odysseus development history

2026-09-11 06:04:19 +00:00

dragSort.js

Merge current dev and refresh PR #6741 from the 7011 integration

2026-10-26 16:21:28 +00:00

emailInbox.js

Preserve preview harness, editor, email and task improvements

2026-10-01 01:34:26 +00:00

emailLibrary.js

merge: reconcile PR 40 with current lab

2026-10-01 05:03:58 +01:00

emailReplyStream.js

Preserve preview harness, editor, email and task improvements

2026-10-01 01:34:26 +00:00

emailShared.js

Polish mobile UI and editor workflows

2026-06-27 13:05:44 +00:00

emojiPicker.js

fix(modal): keep body-portaled dropdowns above their tool modal at any stack depth (#4720) (#4724)

2026-06-23 10:24:31 +02:00

emojiShortcodes.js

Render emoji shortcodes as icons in chat (#345) (#629)

2026-06-05 02:28:42 +02:00

escMenuStack.js

Squash Odysseus development history

2026-09-11 06:04:19 +00:00

fileHandler.js

Consolidate Odysseus agent harness and tool contracts

2026-09-17 10:07:40 +00:00

gallery.js

Integrate gallery document tabs with the updated editor client

2026-10-26 16:27:31 +00:00

galleryEditor.js

feat(editor): harden photo editor security and interactions

2026-10-28 17:37:10 +00:00

generatedImageResult.js

Preserve preview harness, editor, email and task improvements

2026-10-01 01:34:26 +00:00

group.js

Harden maintainer-preview harness and review fixes

2026-09-21 06:54:03 +00:00

init.js

fix(ui): respect iOS safe areas, screen height and landscape layout

2026-10-19 19:43:53 +02:00

keyboard-shortcuts.js

Squash Odysseus development history

2026-09-11 06:04:19 +00:00

langIcons.js

Squash Odysseus development history

2026-09-11 06:04:19 +00:00

liveThinkingThrottle.js

perf(chat): batch live thinking rendering and bound timer updates (#5931)

2026-08-10 20:11:48 +01:00

markdown.js

fix(security): avoid SVG title DOM reparsing

2026-10-05 22:33:25 +01:00

memory.js

Consolidate Odysseus agent harness and tool contracts

2026-09-17 10:07:40 +00:00

mobileBulkSelect.js

Squash Odysseus development history

2026-09-11 06:04:19 +00:00

modalManager.js

Squash Odysseus development history

2026-09-11 06:04:19 +00:00

modalSnap.js

fix(ui): respect iOS safe areas, screen height and landscape layout

2026-10-19 19:43:53 +02:00

modelPicker.js

Preserve preview harness, editor, email and task improvements

2026-10-01 01:34:26 +00:00

models.js

Preserve preview harness, editor, email and task improvements

2026-10-01 01:34:26 +00:00

modelSort.js

Ignore invalid model sort inputs (#1653)

2026-06-03 14:16:52 +09:00

MODULE_SUMMARY.md

refactor(email): split the email library into seven modules

2026-09-30 09:26:34 +02:00

notes.js

refactor(notes): decompose Notes into feature-owned modules (#6713)

2026-10-15 09:29:41 +01:00

package.json

Fix test suite: ESM module loading and stub isolation (#844)

2026-06-02 11:29:29 +09:00

panels.js

Squash Odysseus development history

2026-09-11 06:04:19 +00:00

platform.js

Ignore AltGr keystrokes in Ctrl+Alt keyboard shortcuts (#825)

2026-06-02 11:12:54 +09:00

presets.js

Squash Odysseus development history

2026-09-11 06:04:19 +00:00

providerDeviceFlow.js

feat: add ChatGPT Subscription provider (#2876)

2026-06-08 10:19:18 +02:00

providers.js

Preserve preview harness, editor, email and task improvements

2026-10-01 01:34:26 +00:00

rag.js

Consolidate Odysseus agent harness and tool contracts

2026-09-17 10:07:40 +00:00

researchSynapse.js

fix(ui): restore rich text controls and accessible research map

2026-09-22 23:26:43 +01:00

search-chat.js

Consolidate Odysseus agent harness and tool contracts

2026-09-17 10:07:40 +00:00

search.js

perf(frontend): share one cached fetch for /api/auth/settings and /api/tools (#5997)

2026-08-16 21:03:05 +01:00

searchProviderIcons.js

Squash Odysseus development history

2026-09-11 06:04:19 +00:00

section-management.js

Squash Odysseus development history

2026-09-11 06:04:19 +00:00

sessions.js

feat(notes): attach selected Notes/Todos as Agent context (#6495)

2026-10-13 18:57:19 +01:00

settings.js

fix(auth): honor AUTH_ENABLED=false in admin-gated app-config routes (#6029)

2026-10-14 09:47:57 +01:00

sidebar-layout.js

fix(ui): respect iOS safe areas, screen height and landscape layout

2026-10-19 19:43:53 +02:00

signature.js

Merge lab into refactor/split-style-css

2026-10-01 00:48:58 +01:00

skills.js

Consolidate Odysseus agent harness and tool contracts

2026-09-17 10:07:40 +00:00

skillsMetrics.js

Squash Odysseus development history

2026-09-11 06:04:19 +00:00

slashAutocomplete.js

feat(provider): support multiple ChatGPT subscriptions with usage

2026-09-22 13:12:19 +01:00

slashCommands.js

feat(provider): support multiple ChatGPT subscriptions with usage

2026-09-22 13:12:19 +01:00

spinner.js

fix(ui): stop the whirlpool spinner animating when it is never attached (#5990)

2026-08-12 00:25:03 +01:00

startupShell.js

perf(ui): stop session loading from blocking shell (#5927)

2026-08-10 19:37:21 +01:00

storage.js

feat(a11y): add a Text size control and an OpenDyslexic font option (#4210)

2026-06-22 13:53:46 +02:00

streamingRenderer.js

fix(chat): stop code-block button flicker during streaming (#3023)

2026-06-06 04:08:54 -06:00

streamingSegmenter.js

fix(chat): stop code-block button flicker during streaming (#3023)

2026-06-06 04:08:54 -06:00

tasks.js

Harden maintainer-preview harness and review fixes

2026-09-21 06:54:03 +00:00

theme.js

chore(publication): close pre-integration release blockers

2026-10-05 01:37:49 +01:00

tileManager.js

Squash Odysseus development history

2026-09-11 06:04:19 +00:00

toolWindowZOrder.js

feat(editor): harden photo editor security and interactions

2026-10-28 17:37:10 +00:00

tourAutoplay.js

feat(provider): support multiple ChatGPT subscriptions with usage

2026-09-22 13:12:19 +01:00

tourHintDismiss.js

Preserve preview harness, editor, email and task improvements

2026-10-01 01:34:26 +00:00

tourHints.js

Preserve preview harness, editor, email and task improvements

2026-10-01 01:34:26 +00:00

tts-ai.js

perf(frontend): share one cached fetch for /api/auth/settings and /api/tools (#5997)

2026-08-16 21:03:05 +01:00

turnRendering.js

Preserve preview harness, editor, email and task improvements

2026-10-01 01:34:26 +00:00

ui_visibility.js

Squash Odysseus development history

2026-09-11 06:04:19 +00:00

ui.js

feat(editor): harden photo editor security and interactions

2026-10-28 17:37:10 +00:00

voiceRecorder.js

Odysseus v1.0

2026-05-31 23:58:26 +09:00

windowDrag.js

Squash Odysseus development history

2026-09-11 06:04:19 +00:00

windowResize.js

fix(ui): respect iOS safe areas, screen height and landscape layout

2026-10-19 19:43:53 +02:00

workspace.js

Consolidate Odysseus agent harness and tool contracts

2026-09-17 10:07:40 +00:00