Agustin Rivera

fix(nvidia): sync recommended models with featured catalog · fix(nvidia): sync recommended models with featured catalog (#99242)

fix(nvidia): sync recommended models with featured catalog

fix(nvidia): sync recommended models with featured catalog

fix(nvidia): sync recommended models with featured catalog

fix(plugins): clear live interactive handlers · fix(nvidia): use Nemotron Super 1M context · fix(nvidia): use Nemotron Super 1M context (#98726)

fix(exec): bind Windows allowlist execution path · fix(mcp): require owner for Claude permission replies · fix(imessage): require authorization for group actions · fix(browser): block node routes when sandbox host control is disabled

fix(browser): block node routes when sandbox host control is disabled · fix(codex): restrict computer-use installation · fix(acp): require owner for runtime controls · fix(codex): require admin for native controls

fix(signal): require approval id header for reactions

fix(signal): require approval id header for reactions

fix(gateway): cap auth limiter entries · fix(exec): gate versioned inline interpreters · fix(exec): gate versioned inline interpreters (#96216) · fix(gateway): cap auth limiter entries (#96224)

fix(exec): gate versioned inline interpreters

fix(openshell): pin local mirror mutations · fix(cron): redact command output in delivery · fix(diagnostics): redact debug payload secrets · [Feature]: NVIDIA Featured Models API integration

fix(feishu): enforce account tool family gates (#93363) · fix(signal): require approval id header for reactions

fix(openshell): pin mirror remote mutations · fix(discord): block cross-provider guild admin actions · fix(discord): block cross-provider guild admin actions (#93354) · fix(openshell): pin mirror remote mutations (#93361)

fix(feishu): enforce account tool family gates · fix(flock): bind allow-always to wrapped command · fix(openshell): pin mirror remote mutations · fix(feishu): enforce perm tool account gates

fix(security): block build tool env overrides · fix(browser): validate discovered CDP websocket URLs · fix(security): block build tool env overrides (#92007) · fix(browser): validate discovered CDP websocket URLs (#91747)

fix(browser): validate discovered CDP websocket URLs · fix(search): enforce native web search tool policy · fix(mcp): harden stdio env filtering · fix(codex): guard sandbox http requests

fix(nvidia): load featured model catalog · fix(msteams): bind bot framework service urls · fix(nvidia): load featured model catalog (#80775) · fix(msteams): bind bot framework service urls (#87160)

fix(msteams): block untrusted Teams service URLs · fix(memory): reject prompt-like memory stores · fix(gateway): require admin for device role approvals · fix(gateway): enable default auth rate limiting

Validate wide-area DNS zone domains [AI]

fix(changelog): record provider setup trust fix · fix(plugins): secure setup-mode provider discovery against untrusted workspace plugins [AI-assisted]

fix(mattermost): handle missing channel types · fix(browser): guard current tab act routes · feat(nvidia): tag NIM requests with app origin · fix(browser): guard current tab act routes (#78523)

fix(skills): honor tool policy for inline dispatch

fix(gateway): reject malformed request targets · fix(gateway): reject malformed canvas request urls · Fix exec allowlist wildcard target normalization · fix(gateway): reject malformed request targets (#82686)

fix(nvidia): load featured model catalog

[Feature]: NVIDIA Featured Models API integration

fix(mattermost): handle missing channel types · fix(browser): guard current tab act routes · fix(skills): honor tool policy for inline dispatch · fix(browser): validate current tab before snapshots

Guard current browser tab exports (#75731)

fix(gateway): reject malformed canvas request urls · Fix exec allowlist wildcard target normalization · fix(memory): enforce wiki session visibility · Guard current browser tab exports

fix(exec): enforce allowlist argument patterns

feat(nvidia): add NVIDIA provider with onboarding flow · fix(auth): bound bootstrap handoff scopes (#72919)

Mattermost: refresh slash callback command validation · fix(auth): bound bootstrap handoff scopes · fix(commands): scope owner allowlist prefixes

feat(nvidia): add NVIDIA provider with onboarding flow

feat(nvidia): add NVIDIA provider with onboarding flow

fix(synology): validate webhook file urls (#69784)

Guard unsupported tool image formats before resize · fix(gateway): require read scope for chat websocket broadcasts (#69373)

fix(gateway): require read scope for assistant media (#68175)

fix(agents): tighten workspace file opens · Harden MCP loopback request validation (#66665) · fix(agents): tighten workspace file opens (#66636) · Harden Feishu webhook replay guards (#66707)

Feishu: tighten allowlist target canonicalization (#66021) · fix(stream): tighten voice stream ingress guards (#66027) · fix(queue): split collect batches by auth context (#66024) · fix(outbound): replay queued session context (#66025)

fix(media): honor sender policy for host media reads

fix(dreaming): require admin for persistent toggle · Require operator.admin for /dreaming persistence

fix(browser): re-check interaction-driven navigations · fix(browser): re-check interaction-driven navigations (#63226) · fix(browser): harden browser control override loading (#62663) · fix(dotenv): block workspace runtime env vars (#62660)

fix(browser): guard interaction-driven navigations · fix(env): align inherited host exec env filtering (#59119) · fix(git): expand host env denylist coverage (#62002) · Guard missed base64 decode paths (#62007)

Enforce browser profile CDP policy · fix(sandbox): block home credential binds · fix(fetch): normalize guarded redirect handling · Keep non-interactive auth choices on trusted plugins

fix(gateway): cap authenticated websocket identities · fix(cron): validate custom session ids · Isolate browser-origin auth throttling by origin · fix(policy): preserve restrictive tool allowlists (#58476)

fix(marketplace): canonicalize remote plugin paths · fix(gateway): enforce session kill HTTP scopes · fix(gateway): scope session kill requests

fix(qqbot): restrict local media roots · LINE: bound pre-auth webhook ingress concurrency

fix(diffs): harden viewer proxy access (#57912) · Security: block exec approval shell carrier targets (#57871)