srojk34 8e94e8f882 fix(discord): tag unverified channel-context senders like Slack threads ... Discord's _fetch_channel_context backfills recent channel/thread activity (from any member who can post there, not just the allowlisted user) into the agent's context with no sender-trust distinction. Slack's equivalent _fetch_thread_context was fixed to prefix non-allowlisted senders with [unverified] and add LLM guidance not to act on their content, mitigating indirect prompt injection from third parties in shared channels/threads. Port the same mechanism to Discord using the already-wired _is_sender_authorized/set_authorization_check plumbing.		2026-07-01 16:25:16 +05:30
..
browser	fix: guard int(os.getenv()) casts against malformed env vars (#40598)	2026-06-07 06:14:24 -07:00
context_engine	feat(context-engine): host contract for external context engines	2026-05-28 01:45:30 -07:00
cron_providers	fix(cron): avoid provider package shadowing core cron	2026-06-23 23:39:22 -07:00
dashboard_auth	feat(dashboard_auth): support confidential clients (client_secret) in self-hosted OIDC (#55344)	2026-06-30 13:32:51 +10:00
disk-cleanup	docs(disk-cleanup): clarify cron output-root protection is exact-match	2026-07-01 15:42:04 +05:30
google_meet	fix: prevent TUI gateway stdin EOF crash across all TUI-context subprocess calls	2026-06-08 22:46:57 -07:00
hermes-achievements	revert(plugins): restore user dashboard plugin backend API auto-import (#43719) (#51950)	2026-06-24 07:46:54 -07:00
image_gen	docs(image-gen): align OpenRouter model-resolution docstrings with new precedence	2026-06-30 19:11:49 +05:30
kanban	fix(security): sanitize kanban markdown html	2026-06-21 13:10:17 -07:00
memory	fix(memory/holographic): apply FTS5 sanitizer to search_facts sibling	2026-06-30 15:55:11 -07:00
model-providers	feat: add reasoning_effort support to ollama-cloud provider	2026-06-23 11:51:43 -07:00
observability	fix(langfuse): bound _TRACE_STATE growth from non-finalizing turns	2026-06-18 12:59:41 +05:30
platforms	fix(discord): tag unverified channel-context senders like Slack threads	2026-07-01 16:25:16 +05:30
security-guidance	plugins: add security-guidance — pattern-matched warnings on dangerous code writes (#33131)	2026-05-27 02:07:21 -07:00
spotify	chore: prune unused imports and duplicate import redefinitions	2026-05-28 22:26:25 -07:00
teams_pipeline	fix(teams-pipeline): reject dot-only recording display_name	2026-07-01 02:03:48 -07:00
video_gen	feat(xai): Imagine public-URL storage, chaining & video edit/extend	2026-06-29 21:11:58 -07:00
web	fix(web): re-check Firecrawl final URLs for SSRF	2026-07-01 00:49:38 -07:00
__init__.py	feat(memory): pluggable memory provider interface with profile isolation, review fixes, and honcho CLI restoration (#4623)	2026-04-02 15:33:51 -07:00
plugin_utils.py	fix(plugins): thread-safe lazy-singleton helpers; fix honcho TOCTOU (#24759) (#42150)	2026-06-08 09:35:22 -07:00