ZacharyZhang-NY
2ab001b18a
fix(security): require https for trusted links
2026-05-15 02:56:25 -04:00
ZacharyZhang-NY
4e5af2b45f
fix(settings): guard disabled model reads
2026-05-15 02:53:13 -04:00
ZacharyZhang-NY
0a107af014
fix(security): omit agent token fingerprints
2026-05-15 02:49:40 -04:00
ZacharyZhang-NY
c20d3942a8
fix(security): sanitize credential test logs
2026-05-15 02:44:50 -04:00
ZacharyZhang-NY
b92cf62c4c
fix(data): canonicalize operation json fields
2026-05-15 02:36:19 -04:00
ZacharyZhang-NY
9d4af15d4b
fix(browser): limit retained action screenshots
2026-05-15 02:21:16 -04:00
ZacharyZhang-NY
b5a6a1a9ea
fix(browser): settle timed out actions
2026-05-15 02:17:10 -04:00
ZacharyZhang-NY
7b54fe54a8
fix(security): materialize complete skill packages
2026-05-15 01:36:16 -04:00
ZacharyZhang-NY
f5b3de438e
fix(security): limit skill URL import reads
2026-05-15 01:18:44 -04:00
ZacharyZhang-NY
0cbaabf937
fix(security): bound skill URL redirects
2026-05-15 01:07:43 -04:00
ZacharyZhang-NY
6ae506bf73
fix(security): preserve SNI for skill URL fetches
2026-05-15 01:04:41 -04:00
ZacharyZhang-NY
254ee7c8d8
fix(security): validate credential payload reads
2026-05-15 00:57:23 -04:00
ZacharyZhang-NY
8b0b06f765
fix(security): validate bedrock endpoint URLs
2026-05-15 00:52:18 -04:00
ZacharyZhang-NY
84b92c859e
fix(security): restrict local connector endpoints
2026-05-15 00:43:45 -04:00
ZacharyZhang-NY
fa19e95f19
fix(security): inject provider env into model streams
2026-05-15 00:35:55 -04:00
ZacharyZhang-NY
66e24b1060
fix(security): scope managed path opening
2026-05-15 00:26:20 -04:00
ZacharyZhang-NY
bde35c3518
fix(security): scope social account references
2026-05-15 00:15:37 -04:00
ZacharyZhang-NY
fccb0d8586
fix(runtime): serialize Fire Pass calls per credential to stop boss-build 429s
...
Boss build seeds one Fire Pass key for every agent. Three concurrent
agents -> three concurrent streamSimple calls against the Kimi K2.6
Turbo router -> three HTTP 429s on the overview dashboard.
Add an in-memory async semaphore keyed by (provider, sha1(apiKey)) and
acquire a slot inside `createSafePiStream` before invoking the source.
The slot is released when the stream finishes, errors, or aborts.
`fireworks-firepass` is capped at 1 concurrent call; every other
provider stays uncapped (no fallback layer, no 429 retry — flow control
prevents the burst at the source instead of recovering after).
Same code path applies to public and boss builds: only the seeded key
differs, the gate behaviour is identical.
2026-05-14 22:31:01 -04:00
ZacharyZhang-NY
a532120649
feat(connectors): add Ollama and LM Studio as a local auth kind
...
Both servers expose OpenAI-compatible /v1/chat/completions and /v1/models,
so we route them through pi-ai's `openai-completions` API the same way
Fireworks does — but with a per-installation base URL the user enters
during onboarding instead of a hardcoded one. The shared schemas grow a
`local` credential payload carrying just the baseUrl; the credential
resolver surfaces it on `ResolvedCredential.baseUrl`, the runtime bridge
forwards it through `prepareRun`, and the worker plumbs it into
`resolveModel` so the streamed Model<openai-completions> targets the
user's server. The local-cost path short-circuits to zero in cost-writer
since users bill their own hardware, and the live model list is fetched
from the saved baseUrl by `fetchLocalConnectorModels` (Ollama and LM
Studio both speak the standard OpenAI catalog shape). Onboarding ships
a new LocalProviderCard and the Settings panel a LocalForm; both default
to the catalog's per-connector localhost URL and accept any custom URL.
2026-05-14 14:55:38 -04:00
ZacharyZhang-NY
c9deca5454
fix(database): project only live active runs
2026-04-29 00:10:23 -04:00
ZacharyZhang-NY
7504df170e
fix(worker): harden run completion boundary
2026-04-29 00:04:00 -04:00
ZacharyZhang-NY
e34503df68
fix(orchestration): drain queued recovery blockers
2026-04-28 23:47:02 -04:00
ZacharyZhang-NY
7dbaaf0022
fix(worker): recover tasks after worker crash
2026-04-28 23:37:24 -04:00
ZacharyZhang-NY
d3e108ec18
fix(scheduler): respect heartbeat eligibility for task cadence
2026-04-28 23:21:25 -04:00
ZacharyZhang-NY
d9fd231be3
fix(approvals): make revision requests checkoutable
2026-04-28 23:17:12 -04:00
ZacharyZhang-NY
49ea508ee1
fix(scheduler): drain pending wakeup requests
2026-04-28 20:26:29 -04:00
ZacharyZhang-NY
749ad3a231
fix(scheduler): wake agents with assigned todo work
2026-04-28 20:16:08 -04:00
ZacharyZhang-NY
31aac7c0de
fix(messages): normalize escaped markdown newlines
2026-04-24 10:35:11 -04:00
ZacharyZhang-NY
6ce7e63c71
fix(renderer): simplify sidebar and reset page errors
2026-04-24 10:08:07 -04:00
ZacharyZhang-NY
eabd304a45
fix(database): normalize baseline schema ddl
2026-04-24 09:39:44 -04:00
ZacharyZhang-NY
4582bdbee5
fix(api): enforce utf8 request bodies
2026-04-24 03:42:00 -04:00
ZacharyZhang-NY
6b228864de
fix(auth): persist agent token signing key
2026-04-24 03:35:20 -04:00
ZacharyZhang-NY
38e2807f6c
refactor(errors): route fatal app errors
2026-04-24 03:31:39 -04:00
ZacharyZhang-NY
ead9475b71
refactor(scheduler): unify cadence phases
2026-04-24 03:26:17 -04:00
ZacharyZhang-NY
8d98151027
refactor(heartbeat): collapse skip decisions
2026-04-24 03:13:57 -04:00
ZacharyZhang-NY
1383805d66
refactor(renderer): split snapshot state sections
2026-04-24 02:48:28 -04:00
ZacharyZhang-NY
2cdf26f9fa
refactor(prompt): split stable prefix from volatile tail
2026-04-24 01:57:08 -04:00
ZacharyZhang-NY
227fd7faf2
refactor(ipc): validate write payloads in preload
2026-04-24 01:31:29 -04:00
ZacharyZhang-NY
3609456ca5
refactor(services): combine runtime orchestration ownership
2026-04-24 01:10:54 -04:00
ZacharyZhang-NY
fd86fc6668
refactor(artifacts): reconcile workspace artifacts at completion
2026-04-24 00:58:07 -04:00
ZacharyZhang-NY
2ddc67cc3d
refactor(shutdown): coordinate worker drain handshake
2026-04-24 00:44:06 -04:00
ZacharyZhang-NY
9ee1425a71
refactor(approvals): move execution policy into database
2026-04-24 00:33:56 -04:00
ZacharyZhang-NY
f8eb57ad8c
refactor(database): move task runtime ownership to leases
2026-04-24 00:18:51 -04:00
ZacharyZhang-NY
1f4af89be0
refactor(database): squash schema migrations to v56 baseline
2026-04-24 00:00:13 -04:00
ZacharyZhang-NY
d2e94959e0
fix: make run log creation atomic
2026-04-23 22:14:01 -04:00
ZacharyZhang-NY
4cb61399b1
fix: make navigation sections reachable
2026-04-23 22:02:23 -04:00
ZacharyZhang-NY
88c905c381
fix: make artifact projection durable
2026-04-23 21:50:49 -04:00
ZacharyZhang-NY
84c00e0011
fix: validate and compact session entries
2026-04-23 21:21:59 -04:00
ZacharyZhang-NY
6c757f2081
fix: enforce work product external url policy
2026-04-23 20:54:39 -04:00
ZacharyZhang-NY
d21edb244f
fix: guard run completion boundary
2026-04-23 20:34:31 -04:00
ZacharyZhang-NY