Mason Huang

fix: respect local Crabbox provider preferences · fix(session): stop repeated restart recovery after retry budget

docs: explain pull request automation workflow · fix(session): stop repeated restart recovery after retry budget

feat(tencent): add Tencent Hy3 provider (TokenHub and TokenPlan) (#99076) · improve: reduce repeated session startup scans · feat(tencent): add Tencent Hy3 provider (TokenHub and TokenPlan)

docs: clarify plugin package live proof · [codex] fix(copilot): preserve BYOK bearer auth through proxy · [codex] fix(copilot): preserve BYOK bearer auth through proxy (#99955) · docs: clarify plugin package live proof (#99962)

[codex] Prevent stale review comment sync overwrites · chore: bump docs i18n x/net · [codex] Prevent stale review comment sync overwrites (#389) · fix: harden docs map heading rendering (#99099)

fix: let maintainer automerge resume paused PRs · fix: harden e2e npm registry package paths · fix: harden npm packument package paths · fix: harden qa lab report table rendering

[codex] Fix locale picker metadata · Fix locale picker metadata (#83) · feat(autoreview): support cursor-agent engine (#97348) · test: prefer auto-cleaning temp dir helper

ci(i18n): run translation regression tests · fix(i18n): shard incremental translation · docs(i18n): document translation workflow updates · ci(i18n): run translation regression tests (#80)

[codex] Fix README banner asset stability · fix(i18n): carry translation memory in full shards · fix README banner asset (#76) · fix(i18n): recover translation CI failures

fix(i18n): recover translation CI failures · docs(i18n): document translation workflow architecture · feat(autoreview): support cursor-agent engine · docs(i18n): document translation workflow architecture (#72)

fix(i18n): verify R2 publish before full translation batches · fix(ci): guard translated MDX repair scope · fix(i18n): verify R2 publish before full translation batches (#67) · fix(ci): guard translated MDX repair scope (#66)

fix: map local-container socket work root into container · ci: recover full docs translation workflow · chore(i18n): extract translation workflow control scripts · fix: map local-container socket work root into container (#728)

fix(doctor): warn on empty core tool allowlists

fix(gateway): deliver replies stranded in pendingFinalDelivery (#93625) · Containerized/self-hosted deploys can't use externalized channel plugins: openKeyedStore is gated to trusted plugins, with no supported way to trust a self-hosted channel

ci: throttle full docs translation fan-out · ci: keep full translation matrix under limit · ci: tune docs translation shard sizing · fix(i18n): retain Codex error tails in logs

fix(review): render copyable Mantis proof comments · fix(review): gate exact reviews by provider lease · ci: shard full docs translations · ci: split docs translation lanes

ci: split docs translation lanes · feat(browser): extend --labels overlay to full-page and element captures (#92834) · fix(cli): preserve sessions_yield over MCP · feat(browser): extend --labels overlay to full-page and element captures

ci: gate secret scanning remediation approval · fix(docs): finalize i18n postprocess before skip · ci: add process exec CodeQL security shard · fix: split image setup and request timeout semantics

fix(cron): require explicit message target proof · fix(review): gate exact reviews by provider lease

fix(channel): harden local setup trust · fix(local-container): clean stale docker claims on stop · fix(local-container): clean stale docker claims on stop (#268)

Feature: Model-aware contextTokens — auto-scale session context limit to active model's actual window

fix(docs): continue partial i18n batches after file errors · ci: fail incomplete docs translation runs · fix(docs): continue partial i18n batches after file errors (#91642) · fix: make docs i18n frontmatter translation resilient (#91578)

fix: clarify provider quota errors · docs: preserve LINE across localized docs glossaries (#91442) · docs: preserve channel brand terms in Chinese i18n (#91419) · fix: clarify provider quota errors (#91390)

chore(codeowners): gate heartbeat template and repair changes · fix(ci): scope PR merge diff checks to first parent

fix(ci): scope PR merge diff checks to first parent · fix(ci): scope PR merge diff checks to first parent (#90287)

fix(channel): harden local setup trust

fix(plugins): block untrusted workspace setup-only channel loads (#86953) · fix(plugins): block untrusted workspace setup-only channel loads

fix(browser): document stable tab references

feat(browser): extend --labels overlay to full-page and element captures

test: tie script tmp dirs to cleanup hooks · chore(test): add temp cleanup guard scan · fix(agents): separate heartbeat runtime template (#85416)

fix(plugins): block untrusted workspace setup-only channel loads

test(tools): add unmocked image custom-provider auth regression (#85733)

fix(tools): honor config auth for media model selection · fix(tools): honor config apiKey in media tool preflight (#85570)

fix(tools): honor config auth for media model selection · fix(agents): separate heartbeat runtime template · fix: split image setup and request timeout semantics · fix(cli): recover replaced device approvals

fix(lmstudio): resolve env-template API keys

fix(qa): honor stale cursor fallback in long polls · fix: align command status comment trust config

fix(plugins): block untrusted workspace setup-only channel loads · Plugins: keep untrusted workspace channel shadows out of setup-time loads · CI: harden release-check script execution paths · fix(maintainer): gate body notifications after redaction

fix(maintainer): gate body notifications after redaction

fix(changelog): reject bot/app handles as Thanks attribution and require explicit human credit (#81357) · feat(secret-scanning): add automated message header to maintainer notifications

fix(changelog): reject bot/app handles as Thanks attribution and require explicit human credit · docs(changelog): credit Ziy1-Tan for #79645 · fix(security): inline redact into appendSessionTranscriptMessage · fix(config): reject auto-managed meta.lastTouched* paths in config set/unset

fix(security): centralize transcript append redaction

fix(feishu): keep group_topic message-tool replies inside the topic

fix(cli): canonicalize infer model refs safely

fix: constrain clawtributors avatar rendering

chore(test): add temp cleanup guard scan · test(scripts): clean up temp dirs after each case · test(update-cli): clean up temp dirs created by update tests · test(scripts): clean up temp dirs after each case (#78421)

fix(cli): handle closed plugin uninstall prompt

fix(cli): reject missing plugin ids before config writes · fix(cli): block gateway-owned package updates

fix(cli): block package updates from inside running gateway service

fix(cli): block package updates from inside running gateway service · fix(logging): add redaction patterns for Tencent Cloud, Alibaba Cloud, HuggingFace and Replicate API keys · fix(nextcloud-talk): replace manual XOR with crypto.timingSafeEqual and fix length leak

fix(deepseek): expose V4 max thinking levels · refactor(usage): add precise token buckets for Usage Mosaic

ci: add local shell CodeQL security shard · ci: add codeql quality profile input · fix: suppress raw JSON parse errors from leaking to Discord channels (#59076) [AI-assisted] · ci: add plugin sdk package contract codeql quality shard

CI: split CodeQL JavaScript into three lanes

fix(gateway): redact secrets in skills.update response

CI: split CodeQL JavaScript into three lanes · CI: split CodeQL JavaScript lanes

CI: respond to secret scanning alerts

fix(gateway): surface chat.send lifecycle errors to clients

docs(changelog): remove Token Plan from Tencent provider entry

fix(config): accept truncateAfterCompaction

docs(changelog): deduplicate #67800 entries in Unreleased · fix(agents): honor explicit long Anthropic cache TTL on custom hosts · docs(changelog): deduplicate #67800 entries in Unreleased (#69670)

fix(macos): stop evaluating model catalogs as JS · docs(prepare-pr): describe changelog insertion ordering

lint: add config redact coverage guards · fix(cron): clean up deleteAfterRun direct deliveries · fix(secret-scanning): remove maintainer @<LOGIN> attribution from replacement comment template · changelog: move #67807 entry to Fixes section

CI: harden release-check script execution paths · CI: add pull_request trigger to CodeQL workflow, change schedule to weekly

CI: add daily schedule to CodeQL workflow · fix(skills): remove unused model-usage import · CI: pin Docker-related GitHub Actions · Android: modernize WebView and discovery API usage

fix(qa): honor stale cursor fallback in long polls · PR flow: defer changelog to merge and harden prepare/merge edges · fix(test): stop overriding host-aware vitest scheduling in prepare gates · QA channel: stabilize qa bus polling and tests

fix(plugins): support bundled setup-entry contract in loader · fix(browser): unblock loopback CDP readiness under strict SSRF defaults · fix(plugins): support bundled setup-entry contract in loader (#66261)

feat(skills): add secret-scanning-maintainer skill · tests(contracts): use contract-api for Slack and Discord directories · tests(agents): mock timeout compaction side effects at runtime seam · feat(skills): WIP-add secret-scanning-maintainer skill (#65417)

[Bug]: Agent self-update bypasses update.run and uses raw npm global upgrade without restarting gateway

Plugins: keep untrusted workspace channel shadows out of setup-time loads · fix(heartbeat): widen empty-detection to skip API calls for comment-only HEARTBEAT.md (#61690)

fix: clear persistent main CI typecheck and lint failures · docs-i18n: avoid ambiguous body-only wrapper unwrap · docs-i18n: chunk raw doc translation · [codex] tests: fix discord CI seam leakage

[codex] upgrade vite to 8.0.7 · [codex] tests: fix discord CI seam leakage

docs: require i18n postprocess before skip · docs: quote plan title frontmatter · docs: relocalize stale locale links · fix(docs): remove zh-CN homepage redirect override

docs(changelog): split merged bullet entries · fix(doctor): avoid repeat talk normalization changes from key order · fix: wrap untrusted file inputs (#60277)

fix: use JSON5 parser for plugin manifest loading (#57734) [AI-assisted] · fix(gateway): prune empty node-pending-work state entries to prevent memory leak