2ecdb893d5
fix(tools): block 198.18.0.0/15 in SSRF guard
...
RFC 2544 benchmark addresses (198.18.0.0/15) are not globally routable
but were missing from the isPrivateOrRestrictedIP blocklist, allowing
SSRF bypasses via literal IPv4.
Fixes #3077
2026-06-09 19:01:42 +08:00
46b29a0ae9
Merge pull request #3062 from trufae/health-ready
...
fix: health check always returning not ready
2026-06-08 19:04:09 +02:00
13bf650807
Merge pull request #3058 from chengzhichao-xydt/codex/webfetch-allowed-host-type-assert
...
fix(webfetch): add ok check for type assertion in isAllowedFirstHopHost
2026-06-08 18:51:42 +02:00
0f86d9aacb
Merge pull request #3057 from chengzhichao-xydt/codex/subagent-spawn-type-assertions
...
fix(tools): add ok checks for type assertions in subagent and spawn tools
2026-06-08 18:51:14 +02:00
c215a4caaf
Merge pull request #3056 from chengzhichao-xydt/codex/base-tool-type-assertions
...
fix(tools): add ok checks for context value type assertions in base.go
2026-06-08 18:50:27 +02:00
5b9f9c85a9
Merge pull request #3055 from chengzhichao-xydt/codex/context-getwd-error
...
fix(agent): handle os.Getwd error in NewContextBuilder
2026-06-08 18:48:09 +02:00
b40a1d92cc
Merge pull request #3052 from wzg-gie/fix/telegram-location-message
...
fix: handle Telegram location messages
2026-06-08 18:40:54 +02:00
fac5603daf
fix: health check always returning not ready
2026-06-08 12:14:06 +02:00
a4e8fe953e
fix(webfetch): add ok check for type assertion in isAllowedFirstHopHost
2026-06-08 17:25:44 +08:00
77017eb57d
fix(tools): add ok checks for type assertions in subagent and spawn tools
2026-06-08 17:25:19 +08:00
92a647bfcf
fix(tools): add ok checks for context value type assertions in base.go
2026-06-08 17:24:50 +08:00
8a246c2282
fix(agent): handle os.Getwd error in NewContextBuilder without behavior regression
2026-06-08 16:52:00 +08:00
3bba6338ca
fix: handle Telegram location messages
2026-06-08 15:53:42 +08:00
12c36572a5
Merge pull request #3051 from chengzhichao-xydt/codex/error-wrap-percent-w
...
fix: use %w instead of %v for error wrapping in channels and mcp
2026-06-08 09:14:02 +02:00
890780b924
Merge pull request #3050 from chengzhichao-xydt/codex/use-logger-for-warnings
...
refactor: replace log.Printf/fmt.Printf with structured logger
2026-06-08 09:12:35 +02:00
1ab442b12c
refactor: replace log.Printf/fmt.Printf with structured logger
...
Replace raw log.Printf and fmt.Printf calls in pkg/state, pkg/agent, and pkg/tools with structured logger calls (WarnCF/InfoCF). This ensures warnings and info messages are routed through the configured logging infrastructure instead of raw stderr/stdout.
2026-06-08 09:18:02 +08:00
3f435c5e56
fix: use %w instead of %v for error wrapping
...
errutil.go: Change %v to %w in ClassifySendError and ClassifyNetError so callers can use errors.Is/errors.As on the underlying HTTP/network error.
isolated_command_transport.go: Change %v to %w in Close() and Write() error paths for the same reason.
2026-06-08 09:10:14 +08:00
875cf4a2d4
Merge pull request #3042 from chengzhichao-xydt/codex/evolution-getwd-errors
...
fix: handle os.Getwd() error in evolution skills_recall and drafts
2026-06-08 00:13:32 +02:00
5e7b84f429
Merge pull request #3046 from chengzhichao-xydt/codex/startup-info-type-assert
...
fix(agent): add ok checks for startup info type assertions
2026-06-08 00:11:03 +02:00
1b3e887fc6
Merge pull request #3037 from jp39/kagi-native-web-search
...
Add native Kagi web search provider
2026-06-07 22:51:35 +02:00
d627dc8b57
Merge pull request #2902 from puneetdixit200/docs/termux-android-guide
...
docs: add Android Termux guide
2026-06-07 22:11:48 +02:00
0a3a7881c6
Add native Kagi web search provider
2026-06-07 16:27:50 +02:00
639f700c15
fix(agent): add ok checks for startup info type assertions
...
GetStartupInfo returns map[string]any, and type-asserting tools/skills entries without checking ok is fragile. While the current implementation always stores the correct types, a future refactor could cause silent nil dereference. Add ok checks with explicit nil fallback.
2026-06-07 21:28:45 +08:00
cbb684be01
fix: handle os.Getwd error in evolution skills_recall and drafts
...
When os.Getwd fails, wd is empty and builtinSkillsDir resolves to relative path, causing confusing downstream errors. Fall back to config.GetHome on error.
2026-06-07 21:05:16 +08:00
67eaa984c7
Merge pull request #3040 from chengzhichao-xydt/codex/model-status-type-assert
...
fix: add ok check for singleflight type assertion in model probe
2026-06-07 15:03:45 +02:00
ebb04abb38
Merge pull request #3034 from chengzhichao-xydt/codex/feishu-resource-close-error
...
fix: check Close() error on feishu resource download
2026-06-07 14:58:21 +02:00
a011df1ddc
fix: add ok check for singleflight type assertion in model probe
...
singleflight.Group.Do() returns any, which is type-asserted as bool
without an ok check at model_status.go:211. If a non-bool value is
returned (e.g. nil from shared/cache corruption), this panics.
Add ok check and return false (model probe failed) as a safe default.
2026-06-07 20:54:00 +08:00
f037a112b2
fix: avoid err shadow in feishu close check
...
Use distinct variable names (writeErr, closeErr) to avoid
shadowing the outer err, so a deferred close failure is
still captured.
2026-06-07 20:35:57 +08:00
10115f941c
Merge pull request #3035 from chengzhichao-xydt/codex/file-copy-close-errors
...
fix: check Close() error after io.Copy to writable files
2026-06-07 14:06:57 +02:00
db13367404
Merge pull request #3036 from SutraHsing/codex/2941-claude-sonnet-model-id
...
fix(config): use canonical Anthropic default model ID
2026-06-07 14:02:25 +02:00
7c18fe8421
Merge pull request #3033 from chengzhichao-xydt/codex/media-close-errors
...
fix: check Close() error after downloading media file
2026-06-07 14:00:34 +02:00
007b2ae8bd
fix(config): use canonical Anthropic default model ID
2026-06-07 15:43:26 +08:00
2d1fb953fc
fix: check Close() error after io.Copy to writable files
2026-06-07 12:09:01 +08:00
b1d727ebaf
fix: check Close() error on feishu resource download
2026-06-07 11:57:10 +08:00
f7be21bb11
fix: check Close() error after downloading media file
2026-06-07 11:53:38 +08:00
7d2b0c2a4d
Merge pull request #3021 from chengzhichao-xydt/codex/safe-startup-info
...
fix: safe startup info map access to prevent panic on nil agent
2026-06-06 16:21:46 +02:00
c19e4e8db1
Merge pull request #3022 from chengzhichao-xydt/codex/sync-map-assertions
...
fix: add ok checks for sync.Map LoadAndDelete/Load type assertions
2026-06-06 16:20:28 +02:00
ebf17aa152
Merge pull request #3023 from chengzhichao-xydt/codex/updater-close-errors
...
fix: check Close() errors in updater extraction functions
2026-06-06 16:12:41 +02:00
4290aa8b5b
fix: check Close() errors in updater extraction functions
2026-06-06 21:34:24 +08:00
5f0d368995
fix: add ok checks for sync.Map LoadAndDelete/Load type assertions
2026-06-06 21:17:07 +08:00
ddabaa69a4
fix: safe startup info map access to prevent panic on nil agent
2026-06-06 21:13:22 +08:00
ff7c92deee
Merge pull request #3019 from chengzhichao-xydt/codex/lastinsertid-nilguard
...
fix: type-switch capture, nil guard, check LastInsertId errors
2026-06-06 12:55:38 +02:00
4752a67a7c
fix: type-switch capture, nil guard, LastInsertId error check
...
Three defensive fixes: 1) whatsapp_native - use type-switch capture instead of redundant unchecked assertion 2) config - add nil receiver guard to FilterSensitiveData 3) seahorse/store - check LastInsertId error in 3 locations
2026-06-06 16:32:14 +08:00
89ee8f1b39
Merge pull request #2915 from SiYue-ZO/feat/mimo-common-models
...
feat(providers): add CommonModels for MiMo provider
2026-06-05 20:52:29 +02:00
b10f9cdf18
Merge pull request #2985 from chengzhichao-xydt/codex/context-show-summarize-threshold
...
fix(context): show both summarize and compress thresholds in /context
2026-06-05 19:24:54 +02:00
0b7aaac2b2
Merge pull request #3009 from chengzhichao-xydt/codex/onebot-group-reply-fix
...
fix(onebot): use prefixed chatID for group reply routing
2026-06-05 19:14:56 +02:00
8e7e910f67
Merge pull request #3010 from chengzhichao-xydt/codex/channel-hash-type-assertions
...
fix(channels): add ok checks for type assertions in toChannelHashes
2026-06-05 19:12:45 +02:00
71524183b6
Merge pull request #3011 from chengzhichao-xydt/codex/legacy-events-ok-assert
...
fix(agent): add ok check for LoadAndDelete type assertion
2026-06-05 19:12:22 +02:00
6c882ec5e7
fix(agent): log warning when LoadAndDelete type assertion fails
...
Add a warning log when the type assertion from sync.Map.LoadAndDelete fails in UnsubscribeEvents, per review suggestion. This makes a mismatched type observable for debugging.
2026-06-06 00:32:49 +08:00
9f246a6482
test(channels): add edge case tests for toChannelHashes type assertions
...
Add 3 tests covering scenarios that previously panicked: 1) missing enabled key in settings 2) enabled field with non-bool type 3) teams_webhook with webhooks using map[string]any from JSON unmarshal
2026-06-06 00:31:44 +08:00
Yue_chen