Vincent Koc be967545c5 fix(plugins): fail closed on trusted policy errors ...

Fail closed when bundled trusted tool policy registry, registration, owner id, evaluation, or decision reads fail, so malformed trusted-policy state cannot crash diagnostics or accidentally allow a tool call.

Route before-tool-call diagnostics through guarded trusted-policy readers and keep healthy no-op policy behavior unchanged.

Add focused host-hook contract and before-tool-call e2e coverage for the new fail-closed paths.

PR: #88394

2026-05-31 22:57:38 -04:00

..

acp

chore(lint): enable stricter error rules

2026-06-01 01:12:21 +01:00

agents

fix(plugins): fail closed on trusted policy errors

2026-05-31 22:57:38 -04:00

auto-reply

docs: continue inline comment pass (#88849)

2026-05-31 22:32:28 -04:00

bindings

…

bootstrap

fix: extend CA bundle auto-injection to all 8 Node version managers

2026-05-31 18:02:34 +01:00

channels

docs: continue inline comment pass (#88849)

2026-05-31 22:32:28 -04:00

chat

docs: clarify inline code comments

2026-05-31 14:37:41 +01:00

cli

docs: continue inline comment pass (#88849)

2026-05-31 22:32:28 -04:00

commands

test(agents): use neutral tool schema fixtures (#88848)

2026-05-31 22:09:48 -04:00

commitments

chore(lint): enable stricter error rules

2026-06-01 01:12:21 +01:00

compat

…

config

fix(doctor): respect explicit PI runtime policy

2026-05-31 21:21:11 -04:00

context-engine

chore(lint): enable readability lint rules

2026-05-31 07:17:57 +01:00

crestodian

chore(lint): enable stricter oxlint rules

2026-05-31 18:59:02 +01:00

cron

docs: continue inline comment pass (#88849)

2026-05-31 22:32:28 -04:00

daemon

fix(config): skip state-dir dotenv values that are unresolved shell references (#88288)

2026-05-31 21:01:33 -04:00

docs

…

flows

test(agents): use neutral tool schema fixtures (#88848)

2026-05-31 22:09:48 -04:00

gateway

refactor: share channel start test helpers

2026-06-01 04:40:21 +02:00

hooks

fix(hooks): expose inbound reply metadata before dispatch

2026-05-31 22:15:17 -04:00

i18n

…

image-generation

refactor: extract media and ACP core packages (#88534)

2026-05-31 11:30:33 +01:00

infra

docs: continue inline comment pass (#88849)

2026-05-31 22:32:28 -04:00

interactive

feat(plugin-sdk): add typed presentation command actions (#88721)

2026-05-31 18:48:45 +01:00

link-understanding

refactor: extract media and ACP core packages (#88534)

2026-05-31 11:30:33 +01:00

llm

chore(lint): enable stricter error rules

2026-06-01 01:12:21 +01:00

logging

chore(lint): enable stricter error rules

2026-06-01 01:12:21 +01:00

mcp

chore(lint): enable stricter error rules

2026-06-01 01:12:21 +01:00

media

chore(lint): enable stricter error rules

2026-06-01 01:12:21 +01:00

media-generation

chore(lint): enable stricter error rules

2026-06-01 01:12:21 +01:00

media-understanding

chore(lint): enable no-promise-executor-return

2026-05-31 23:06:13 +01:00

memory

…

memory-host-sdk

refactor: extract normalization core package

2026-05-31 01:33:00 +01:00

model-catalog

refactor: extract normalization core package

2026-05-31 01:33:00 +01:00

music-generation

chore(lint): enable stricter oxlint rules

2026-05-31 18:59:02 +01:00

node-host

chore(lint): enable stricter error rules

2026-06-01 01:12:21 +01:00

pairing

chore(lint): enable no-useless-assignment

2026-05-31 22:40:48 +01:00

plugin-sdk

docs: continue inline comment pass (#88849)

2026-05-31 22:32:28 -04:00

plugin-state

Migrate iMessage monitor state to SQLite (#88797)

2026-06-01 00:19:51 +01:00

plugins

fix(plugins): fail closed on trusted policy errors

2026-05-31 22:57:38 -04:00

process

chore(lint): enable stricter error rules

2026-06-01 01:12:21 +01:00

provider-runtime

fix: validate provider retry attempts

2026-05-28 16:28:07 -04:00

proxy-capture

chore(lint): enable stricter error rules

2026-06-01 01:12:21 +01:00

realtime-transcription

chore(lint): enable no-promise-executor-return

2026-05-31 23:06:13 +01:00

routing

perf: streamline chat startup metadata (#88825)

2026-05-31 21:18:41 -04:00

scripts

test: keep vitest cases under one second

2026-05-31 06:51:34 +01:00

secrets

chore(lint): enable stricter oxlint rules

2026-05-31 18:59:02 +01:00

security

Persist plugin install index in SQLite (#88794)

2026-05-31 20:51:33 -04:00

sessions

chore(lint): enable stricter oxlint rules

2026-05-31 18:59:02 +01:00

shared

docs: continue inline comment pass (#88849)

2026-05-31 22:32:28 -04:00

skills

chore(lint): enable stricter error rules

2026-06-01 01:12:21 +01:00

state

refactor(channels): store inbound queues in SQLite

2026-05-31 21:15:29 +01:00

status

feat(deepseek): show provider balance in usage status

2026-05-31 17:35:41 +01:00

talk

chore(lint): enable no-promise-executor-return

2026-05-31 23:06:13 +01:00

tasks

fix: make task persistence failures explicit

2026-06-01 00:12:28 +01:00

test-helpers

…

test-utils

chore(lint): tighten lint exception coverage

2026-05-31 10:42:59 +01:00

tools

chore(lint): enable stricter oxlint rules

2026-05-31 18:59:02 +01:00

trajectory

refactor: extract normalization core package

2026-05-31 01:33:00 +01:00

transcripts

Revert "fix(ci): clean core unsafe assertions"

2026-05-31 04:09:48 -04:00

tts

chore(lint): enable stricter oxlint rules

2026-05-31 18:59:02 +01:00

tui

fix: restore in-flight TUI run switch-back

2026-05-31 21:22:52 -04:00

types

fix(agents): harden message dts and block timestamps

2026-05-30 20:58:21 +02:00

utils

docs: continue inline comment pass (#88849)

2026-05-31 22:32:28 -04:00

video-generation

refactor: extract media and ACP core packages (#88534)

2026-05-31 11:30:33 +01:00

web

refactor: extract web content core package (#88346)

2026-05-30 21:38:29 +01:00

web-fetch

chore(lint): enable stricter oxlint rules

2026-05-31 18:59:02 +01:00

web-search

chore(lint): enable stricter oxlint rules

2026-05-31 18:59:02 +01:00

wizard

chore(lint): enable no-useless-assignment

2026-05-31 22:40:48 +01:00

browser-lifecycle-cleanup.test.ts

fix: skip browser cleanup when browser is disabled

2026-05-30 21:16:47 +01:00

browser-lifecycle-cleanup.ts

fix: skip browser cleanup when browser is disabled

2026-05-30 21:16:47 +01:00

docker-build-cache.test.ts

…

docker-image-digests.test.ts

fix(docker): refresh Node base image digests (#84988)

2026-05-31 18:55:33 +01:00

docker-setup.e2e.test.ts

chore(lint): enable no-promise-executor-return

2026-05-31 23:06:13 +01:00

dockerfile.test.ts

fix(docker): refresh Node base image digests (#84988)

2026-05-31 18:55:33 +01:00

entry.compile-cache.test.ts

…

entry.compile-cache.ts

refactor: share respawn child runner

2026-05-30 09:44:20 +02:00

entry.respawn.test.ts

…

entry.respawn.ts

refactor: share respawn child runner

2026-05-30 09:44:20 +02:00

entry.root-help-fast-path.test.ts

perf(entry): cache root help module imports

2026-05-30 13:00:29 +02:00

entry.test.ts

…

entry.ts

perf(entry): cache root help module imports

2026-05-30 13:00:29 +02:00

entry.version-fast-path.test.ts

…

entry.version-fast-path.ts

…

extensionAPI.ts

…

global-state.ts

…

globals.ts

refactor: move terminal core into package (#88279)

2026-05-30 11:07:45 +02:00

index.test.ts

…

index.ts

chore(lint): enable stricter error rules

2026-06-01 01:12:21 +01:00

install-sh-version.test.ts

…

library.test.ts

…

library.ts

…

logger.test.ts

chore(lint): enable stricter oxlint rules

2026-05-31 18:59:02 +01:00

logger.ts

refactor: move terminal core into package (#88279)

2026-05-30 11:07:45 +02:00

logging.ts

…

param-key.ts

refactor: extract normalization core package

2026-05-31 01:33:00 +01:00

plugin-activation-boundary.test.ts

…

poll-params.test.ts

fix(polls): centralize duration string parsing

2026-05-29 07:47:59 -04:00

poll-params.ts

refactor: extract normalization core package

2026-05-31 01:33:00 +01:00

polls.test.ts

…

polls.ts

…

runtime.ts

refactor: move terminal core into package (#88279)

2026-05-30 11:07:45 +02:00

ui-app-settings.agents-files-refresh.test.ts

feat: calm composer controls (#88772)

2026-05-31 23:37:27 +01:00

utils.test.ts

fix(utils): clamp shared sleep timers

2026-05-31 01:37:45 -04:00

utils.ts

chore(lint): enable no-promise-executor-return

2026-05-31 23:06:13 +01:00

version.test.ts

…

version.ts

refactor: extract normalization core package

2026-05-31 01:33:00 +01:00