YeonGyu-Kim
2288988f28
fix(zip): use zipinfo to preflight zip extraction on unix
...
Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-openagent )
Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai >
2026-04-03 18:34:12 +09:00
YeonGyu-Kim
b931e309f4
fix(mcp): warn when MCP env expansion is blocked
...
Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-openagent )
Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai >
2026-04-03 18:31:29 +09:00
YeonGyu-Kim
4766891557
fix(mcp): expand builtin allowlist for benign env vars
...
Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-openagent )
Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai >
2026-04-03 18:31:29 +09:00
YeonGyu-Kim
83acafce48
Merge pull request #3058 from code-yeongyu/fix/p1-11-remove-as-any-tests
...
fix(tests): remove as any from new test files
2026-04-03 18:30:30 +09:00
YeonGyu-Kim
32b9235764
Merge pull request #3051 from code-yeongyu/fix/p0-2-https-enforcement-gaps
...
fix(security): enforce HTTPS for all non-loopback remote hooks
2026-04-03 18:30:29 +09:00
YeonGyu-Kim
071f6c334d
Merge pull request #3055 from code-yeongyu/fix/p1-8-legacy-config-canonical-priority
...
fix: prefer canonical plugin config files
2026-04-03 18:30:19 +09:00
YeonGyu-Kim
72b3b15f78
Merge pull request #3050 from code-yeongyu/fix/p0-4-tmux-default-isolation
...
fix: revert tmux default isolation to inline
2026-04-03 18:30:18 +09:00
YeonGyu-Kim
5b3541f7aa
Clarify doubled context display intent
...
Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-openagent )
Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai >
2026-04-03 18:25:42 +09:00
YeonGyu-Kim
f34edf9957
Update cached limit monitor expectations
...
Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-openagent )
Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai >
2026-04-03 18:14:13 +09:00
YeonGyu-Kim
0e9dbbdc48
Double displayed context window counts
...
Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-openagent )
Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai >
2026-04-03 18:14:13 +09:00
YeonGyu-Kim
ec9ed0a381
Merge pull request #3056 from code-yeongyu/fix/p2-12-notification-template-consolidation
...
Consolidate background task notification template
2026-04-03 18:03:36 +09:00
YeonGyu-Kim
9bcaddf732
Use shared background task notification template
...
Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-openagent )
Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai >
2026-04-03 17:43:33 +09:00
YeonGyu-Kim
833fb12331
Add background task notification template coverage
...
Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-openagent )
Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai >
2026-04-03 17:43:33 +09:00
YeonGyu-Kim
49ea082855
fix(background-agent): await shutdown aborts before cleanup
...
Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-openagent )
Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai >
2026-04-03 17:42:51 +09:00
YeonGyu-Kim
9b1d92d3a6
fix(background-agent): await retry abort before requeueing
...
Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-openagent )
Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai >
2026-04-03 17:42:51 +09:00
YeonGyu-Kim
4d40b44914
fix(background-agent): await stale task aborts before poller exits
...
Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-openagent )
Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai >
2026-04-03 17:42:51 +09:00
YeonGyu-Kim
6ca046c12b
Derive tmux runtime fallback from schema defaults
...
Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-openagent )
Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai >
2026-04-03 17:37:51 +09:00
YeonGyu-Kim
f369971db9
fix(tests): type tmux fetch mocks
...
Model the tmux fetch test doubles with the fetch shape Bun expects so the tests drop without changing assertions.
Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-openagent )
Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai >
2026-04-03 17:37:17 +09:00
YeonGyu-Kim
e3f3bcc063
fix(tests): type cliproxy fallback test harness
...
Convert the cliproxy fallback matrix test to use typed harness helpers instead of so fallback coverage remains unchanged without violating test constraints.
Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-openagent )
Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai >
2026-04-03 17:37:17 +09:00
YeonGyu-Kim
4e435dac73
fix(tests): type event handler test harness
...
Replace broad casts in event handler tests with typed harness helpers so the regression coverage stays intact while matching the test-file typing rules.
Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-openagent )
Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai >
2026-04-03 17:37:17 +09:00
YeonGyu-Kim
3a2c4fd099
fix(tests): type config-handler test spy restore
...
Avoid for the MCP env allowlist spy restore path so the config-handler test keeps the same behavior with specific typing.
Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-openagent )
Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai >
2026-04-03 17:37:17 +09:00
YeonGyu-Kim
f39a0182eb
Merge pull request #3054 from code-yeongyu/fix/p0-6-mcp-local-scope-subdirectory
...
Fix local MCP scope loading in subdirectories
2026-04-03 17:32:11 +09:00
YeonGyu-Kim
b8f4037622
Refine HTTP hook redirect enforcement
...
Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-openagent )
Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai >
2026-04-03 17:30:57 +09:00
YeonGyu-Kim
b2b8f73d0d
Fix tar traversal error normalization
...
Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-openagent )
Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai >
2026-04-03 17:28:22 +09:00
YeonGyu-Kim
22c8e8388f
Fix Linux ZIP preflight entry listing
...
Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-openagent )
Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai >
2026-04-03 17:23:09 +09:00
YeonGyu-Kim
b096e6f751
fix: prefer canonical plugin config files
2026-04-03 17:15:08 +09:00
YeonGyu-Kim
88b84a8517
test: cover canonical plugin config detection
2026-04-03 17:15:03 +09:00
YeonGyu-Kim
6b8d9df316
Add MCP scope subdirectory regression tests
...
Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-openagent )
Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai >
2026-04-03 17:14:40 +09:00
YeonGyu-Kim
f269d2fcc5
Fix local MCP scope path containment
...
Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-openagent )
Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai >
2026-04-03 17:14:40 +09:00
YeonGyu-Kim
ed06428ba3
fix(delegate-task): strip wrapping chars from subagent_type before lookup
...
LLMs sometimes wrap agent names in backslashes, quotes, or slashes
(e.g. \hephaestus\ instead of hephaestus). The trim() call only
removed whitespace, causing "Agent not found" errors during delegation.
Now strips leading/trailing backslashes, quotes, and slashes before
the case-insensitive agent lookup.
Adds regression tests for backslash-wrapped, double-quoted, and
single-quoted agent names.
Fixes: release blocker — delegate_task to hephaestus failing in
pre-publish review sessions.
2026-04-03 17:13:11 +09:00
YeonGyu-Kim
d081e8ef4f
Fix HTTP hook HTTPS enforcement gaps
...
Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-openagent )
Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai >
2026-04-03 17:11:09 +09:00
YeonGyu-Kim
f950d3d75c
Align tmux plugin fallback with inline isolation
...
Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-openagent )
Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai >
2026-04-03 17:11:01 +09:00
YeonGyu-Kim
57c973bac5
Revert tmux config default isolation to inline
...
Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-openagent )
Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai >
2026-04-03 17:11:01 +09:00
YeonGyu-Kim
c78a9e640a
Revert "Merge pull request #3047 from code-yeongyu/fix/p0-4-tmux-default-isolation"
...
This reverts commit 2d13e125bb , reversing
changes made to c45fc83caa .
2026-04-03 17:10:23 +09:00
YeonGyu-Kim
f84d311c64
Revert "Merge pull request #3048 from code-yeongyu/fix/p0-2-https-enforcement-gaps"
...
This reverts commit ede561cb74 , reversing
changes made to 2d13e125bb .
2026-04-03 17:10:23 +09:00
YeonGyu-Kim
ede561cb74
Merge pull request #3048 from code-yeongyu/fix/p0-2-https-enforcement-gaps
...
Fix HTTP hook HTTPS enforcement gaps
2026-04-03 17:09:19 +09:00
YeonGyu-Kim
3eb1430a43
Fix HTTP hook HTTPS enforcement gaps
...
Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-openagent )
Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai >
2026-04-03 17:07:17 +09:00
YeonGyu-Kim
3f0d68bfa3
Align tmux plugin fallback with inline isolation
...
Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-openagent )
Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai >
2026-04-03 17:06:22 +09:00
YeonGyu-Kim
9fb9e15222
Revert tmux config default isolation to inline
...
Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-openagent )
Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai >
2026-04-03 17:06:22 +09:00
YeonGyu-Kim
9c67585519
Merge pull request #3028 from code-yeongyu/fix/issue-2923-gpt41mini-toolcall
...
fix(models): mark gpt-4.1-mini and gpt-4.1-nano as supporting tool calls
2026-04-02 15:46:09 +09:00
YeonGyu-Kim
156c1f4aeb
fix(models): mark gpt-4.1-mini and gpt-4.1-nano as supporting tool calls
...
Fixes #2923
2026-04-02 15:45:39 +09:00
YeonGyu-Kim
027a6b0039
fix(skill-mcp): use correct sessionID when registering skill MCP connections
...
Fixes #3021
2026-04-02 15:45:39 +09:00
YeonGyu-Kim
fba20f9f09
Merge pull request #3019 from code-yeongyu/fix/issue-2986-prometheus-fallback
...
fix(prometheus): respect fallback chain when no explicit model configured
2026-04-02 15:10:43 +09:00
YeonGyu-Kim
39eefe4d4d
Merge pull request #3018 from code-yeongyu/fix/issue-2996-tavily-graceful
...
fix(mcp): handle missing Tavily API key gracefully
2026-04-02 15:10:41 +09:00
YeonGyu-Kim
1b5114b256
Merge pull request #3017 from code-yeongyu/fix/issue-3014-tool-pair-validation
...
fix(hook): add tool_use/tool_result pair validator
2026-04-02 15:10:38 +09:00
YeonGyu-Kim
f0309dff24
Merge pull request #3016 from code-yeongyu/fix/issue-3003-ripgrep-autodownload
...
fix(grep): enable ripgrep auto-download when not found in PATH
2026-04-02 15:10:35 +09:00
YeonGyu-Kim
c173bb1337
Merge pull request #3015 from code-yeongyu/fix/issue-2946-mcp-merge-order
...
fix(mcp): user config overrides Claude Code .mcp.json with collision warning
2026-04-02 15:10:32 +09:00
YeonGyu-Kim
710a8ed4ee
Merge pull request #3026 from code-yeongyu/fix/security-mcp-env-expansion
...
fix(security): restrict env var expansion in MCP configs
2026-04-02 15:10:13 +09:00
YeonGyu-Kim
04876d88f7
Merge pull request #3025 from code-yeongyu/fix/security-http-hooks
...
fix(security): enforce HTTPS for HTTP hook URLs
2026-04-02 15:10:10 +09:00
YeonGyu-Kim
9a7bb5eeb7
Merge pull request #3024 from code-yeongyu/fix/security-tar-containment
...
fix(security): add archive extraction containment validation
2026-04-02 15:09:52 +09:00