kshitijk4poor d28c513904 fix(raft): a null or blank bridge token is unset, not a guessable inbound token ...

`bridge_token:` with an empty YAML value became str(None) == "None" (and a
whitespace-only value stayed "   "). Both are truthy, so connect() skipped
the auto-generated token and _authorized() accepted any wake/activity POST
carrying that header. Same class as the null-secret fixes for LINE and
WhatsApp Cloud in this stack.

2026-10-07 13:19:35 +05:30

..

browser

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

computer_use

feat(computer-use): pluggable single-select computer-use providers

2026-10-05 17:20:30 -07:00

context_engine

feat(plugins): run third-party plugins in a per-profile plugin host (plugins.isolation: host)

2026-10-03 10:15:11 -07:00

cron_providers

feat(plugins): run third-party plugins in a per-profile plugin host (plugins.isolation: host)

2026-10-03 10:15:11 -07:00

dashboard_auth

fix(dashboard+auth): cap HTTP JSON response body reads

2026-10-06 12:28:55 -04:00

disk-cleanup

fix(disk-cleanup): fail closed on unresolved track paths

2026-10-02 21:21:36 -05:00

google_meet

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

hermes-achievements

Merge origin/main; keep PM as plugin dependency owner

2026-09-17 13:52:05 -04:00

image_gen

fix(agent): keep generated images/videos out of swept media caches (Closes #126445)

2026-10-02 01:18:03 +05:30

kanban

refactor(kanban): drop unenforced column traits from the workflow groundwork

2026-10-07 11:19:10 +05:30

memory

chore(memory): remove the bundled openviking provider

2026-10-06 23:13:01 -07:00

model-providers

refactor(providers): one copy each of TokenHub's effort rule and the generic nested reasoning fallback

2026-10-07 11:27:35 +05:30

observability/langfuse

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-22 05:16:50 -04:00

platforms

fix(raft): a null or blank bridge token is unset, not a guessable inbound token

2026-10-07 13:19:35 +05:30

security-guidance

fix: declare security-guidance hooks in manifest

2026-09-21 23:26:19 -07:00

spotify

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

teams_pipeline

fix(lint): stdin guard catches calls whose arguments start on the next line (review)

2026-10-07 01:03:03 +05:30

video_gen

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

web

Web search: keyless search moves to the next free vendor on 402, 5xx and Keenable refusals (#134048)

2026-10-07 00:59:32 +05:30

__init__.py

…

AGENTS.md

chore(memory): remove the bundled openviking provider

2026-10-06 23:13:01 -07:00

plugin_loader.py

fix(plugins): agent builds wait out a slow provider import; only per-turn callers are bounded

2026-10-05 15:55:58 -07:00

plugin_storage.py

refactor(sqlite): one open_db/transaction layer for every small store; plugin DBs use the WAL fallback

2026-09-13 05:08:29 -07:00

plugin_utils.py

…