Peter SteinbergerandSidQin-cyber 42cf32c386 fix(browser): land PR #26015 query-token auth for /json relay routes ...

Align relay HTTP /json auth with websocket auth by accepting query-param tokens, add regression coverage, and update changelog.
Landed from contributor @Sid-Qin (PR #26015).

Co-authored-by: SidQin-cyber <[email protected]>

2026-02-26 14:17:41 +00:00

..

acp

feat: ACP thread-bound agents (#23580)

2026-02-26 11:00:09 +01:00

agents

refactor(auth-profiles): unify coercion and add rejected-entry diagnostics

2026-02-26 14:42:11 +01:00

auto-reply

fix(typing): force cleanup when dispatch idle is never received

2026-02-26 13:40:58 +00:00

browser

fix(browser): land PR #26015 query-token auth for /json relay routes

2026-02-26 14:17:41 +00:00

canvas-host

…

channels

refactor(security): centralize channel allowlist auth policy

2026-02-26 13:06:33 +01:00

cli

fix(sessions): add fix-missing cleanup path for orphaned store entries

2026-02-26 13:40:58 +00:00

commands

fix(sessions): add fix-missing cleanup path for orphaned store entries

2026-02-26 13:40:58 +00:00

compat

…

config

fix(config): warn and ignore unknown plugin entry keys

2026-02-26 13:40:58 +00:00

cron

refactor(reply): split abort cutoff and timeout policy modules

2026-02-26 14:00:35 +01:00

daemon

Daemon tests: guard undefined runtime status

2026-02-26 03:24:48 -05:00

discord

Doctor: keep allowFrom account-scoped in multi-account configs

2026-02-26 05:34:58 -05:00

docs

…

gateway

fix(gateway): allow cron commands to use gateway.remote.token (#27286)

2026-02-26 14:17:30 +00:00

hooks

refactor: unify boundary hardening for file reads

2026-02-26 13:04:37 +01:00

imessage

refactor(security): centralize channel allowlist auth policy

2026-02-26 13:06:33 +01:00

infra

fix(gateway): pin paired reconnect metadata for node policy

2026-02-26 14:11:04 +01:00

line

fix(security): keep DM pairing allowlists out of group auth

2026-02-26 12:58:18 +01:00

link-understanding

…

logging

…

markdown

fix(markdown): require paired || delimiters for spoiler detection (#26105)

2026-02-25 04:54:51 +00:00

media

…

media-understanding

…

memory

…

node-host

fix(security): harden approval-bound node exec cwd handling

2026-02-26 04:14:11 +01:00

pairing

pairing: enforce strict account-scoped state

2026-02-26 00:31:24 -05:00

plugin-sdk

feat: ACP thread-bound agents (#23580)

2026-02-26 11:00:09 +01:00

plugins

fix(plugins): fallback bundled channel specs when npm install returns 404 (#12849)

2026-02-26 08:06:54 -05:00

process

fix(queue): harden drain/abort/timeout race handling

2026-02-26 13:43:39 +01:00

providers

…

routing

fix(core): unify session-key normalization and plugin boundary checks

2026-02-26 12:41:23 +00:00

scripts

…

security

refactor(security): centralize channel allowlist auth policy

2026-02-26 13:06:33 +01:00

sessions

fix(core): unify session-key normalization and plugin boundary checks

2026-02-26 12:41:23 +00:00

shared

fix(ssrf): unify ipv6 special-use blocking

2026-02-26 03:43:42 +01:00

signal

refactor: unify reaction ingress policy guards across channels

2026-02-26 01:34:47 +01:00

slack

fix(slack): suppress NO_REPLY before Slack API call

2026-02-26 13:40:58 +00:00

telegram

fix(telegram): degrade command sync on BOT_COMMANDS_TOO_MUCH

2026-02-26 13:40:58 +00:00

terminal

…

test-helpers

…

test-utils

…

tts

…

tui

…

types

…

utils

…

web

fix: suppress reasoning payload leakage in whatsapp replies

2026-02-25 01:36:37 +00:00

whatsapp

…

wizard

fix(onboard): seed Control UI origins for non-loopback binds (land #26157, thanks @stakeswky)

2026-02-26 12:13:20 +00:00

channel-web.ts

…

docker-image-digests.test.ts

…

docker-setup.test.ts

fix: harden Docker/GCP onboarding flow (#26253) (thanks @pandego)

2026-02-26 04:46:18 +00:00

dockerfile.test.ts

fix: harden Docker/GCP onboarding flow (#26253) (thanks @pandego)

2026-02-26 04:46:18 +00:00

entry.ts

…

extensionAPI.ts

…

globals.ts

…

index.ts

…

logger.test.ts

…

logger.ts

…

logging.ts

…

polls.test.ts

…

polls.ts

…

runtime.ts

…

utils.test.ts

…

utils.ts

…

version.test.ts

…

version.ts

…