BitToby 71e2b636d6 fix: Use secure defaults for Pico channel setup and stop leaking the token in the URL (#1563) ...

* fix: Use secure defaults for Pico channel setup and stop leaking the token in the URL

* fix: Derive default allow_origins from the setup request's Origin header instead of hardcoding localhost ports

2026-03-16 09:58:37 +08:00

..

agent

feat: expose local file paths for non-image media to enable agent file tools (#1516)

2026-03-14 12:09:11 +08:00

auth

feat(auth): add Anthropic OAuth setup-token login (#926)

2026-03-06 19:58:23 +08:00

bus

Removed the old heavy logic

2026-03-08 18:22:15 +01:00

channels

fix: Use secure defaults for Pico channel setup and stop leaking the token in the URL (#1563)

2026-03-16 09:58:37 +08:00

commands

feat: add /clear command to clear chat history (#1266)

2026-03-09 16:39:33 +08:00

config

feat(provider): add support for azure openai provider (#1422)

2026-03-14 22:52:34 +08:00

constants

refactor: replace bool map with set-style map for internal channels (#472)

2026-02-19 11:48:17 +01:00

cron

feat(cron): add execution lifecycle logging (#1185)

2026-03-06 20:46:52 +08:00

devices

fix: address PR #662 review comments (bus drain, context timeouts, onebot leak)

2026-02-23 21:34:37 +08:00

fileutil

refactor(pkg): move atomic file write to dedicated fileutil package

2026-02-24 23:57:13 +08:00

health

chore: resolve conflicts with upstream/main

2026-02-28 12:21:54 +08:00

heartbeat

enable dupl check

2026-03-01 18:17:32 +11:00

identity

fix(identity): prevent allowlist ID entries from matching usernames (#1406)

2026-03-13 15:41:18 +08:00

logger

Merge pull request #1442 from afjcjsbx/feat/logger-stdout-formatting

2026-03-14 22:04:51 +01:00

mcp

Feat/add tool enable or disable configuration (#1071)

2026-03-05 14:53:26 +08:00

media

chore: resolve conflicts with upstream/main

2026-02-28 12:21:54 +08:00

memory

fix: skip meta json files during session migration (#1340)

2026-03-11 14:29:42 +08:00

migrate

docs: remove stale TOOLS.md references (#1388)

2026-03-12 09:47:01 +08:00

providers

fix(provider/azure): lint err

2026-03-15 12:45:11 +08:00

routing

fix(routing): address review feedback on CJK estimation and observability

2026-03-06 13:10:20 +08:00

session

fix(security): harden unauthenticated tool-exec paths (#1360)

2026-03-11 19:22:20 +08:00

skills

enhance skill installer (#1252)

2026-03-13 14:04:02 +08:00

state

fix(security): harden unauthenticated tool-exec paths (#1360)

2026-03-11 19:22:20 +08:00

tools

fix: safety guard incorrectly blocks commands with URLs (#1254)

2026-03-13 17:16:05 +08:00

utils

enhance skill installer (#1252)

2026-03-13 14:04:02 +08:00

voice

Fix lint

2026-03-04 10:21:59 +00:00