Sync upstream qm through 866764e - #1

Merged

kyne0116 merged 22 commits into

mainfrom

sync-upstream-2026-08-06

Aug 6, 2026

Commits on Aug 4, 2026

model: custom provider endpoints — base-URL overrides and admin-registered providers
ReganBell
committed
f15d7fc
deploy: owner app shell — artifact-style top bar with a docked iterate chat
ReganBell
committed
346388d
Never show a raw Slack id where a person will read it
ReganBell
committed
2fee4d7
web-ui: pre-fork origin badge, author-labeled bubbles, real sidebar links
ReganBell
committed
ea1fa61
Persist full runtime defaults per scope
ReganBell
committed
a7b5c8b
self-API: spawn a fresh conversation
ReganBell
committed
e23b301
dev-instance: browser-only mode (--no-slack) needs no Slack pool slot
ReganBell
committed
4b408da
docs(security): record the three deliberately portal-only actions
ReganBell
committed
6d1f6cf
credential broker: refuse percent-encoded parent traversal in paths

ReganBell
and
yassine-ceo
committed
fd890a8
Merge pull request #198 from yc-software/upstream-broker-path-traversal
ReganBell
authored
ee7344b
Merge pull request #199 from yc-software/upstream-no-raw-slack-ids
ReganBell
authored
cec39b7
Merge pull request #200 from yc-software/upstream-custom-providers
ReganBell
authored
2b5e83e
Merge pull request #202 from yc-software/upstream-web-ui-polish
ReganBell
authored
27e2ff3
Merge pull request #203 from yc-software/upstream-runtime-defaults
ReganBell
authored
db21870
Merge pull request #204 from yc-software/upstream-spawn-conversation
ReganBell
authored
4021b1c
Merge pull request #205 from yc-software/upstream-dev-no-slack
ReganBell
authored
6e7d03e
Merge pull request #206 from yc-software/upstream-portal-only-docs
ReganBell
authored
271a424
test: assert portal origin with a plain substring check
ReganBell
committed
908eae9
CONTRIBUTING: add bug-report / issue guidance
ReganBell
committed
47a6d6c
test: assert the shell's portal origin by exact value
ReganBell
committed
d550d99
Merge pull request #201 from yc-software/upstream-app-shell
ReganBell
authored
7ad80d0
CONTRIBUTING: clarify feature PRs vs bug issues
ReganBell
committed
866764e

Navigation Menu

Uh oh!

Sync upstream qm through 866764e - #1

Sync upstream qm through 866764e#1
kyne0116 merged 22 commits into
mainfrom
sync-upstream-2026-08-06

Commits on Aug 4, 2026

model: custom provider endpoints — base-URL overrides and admin-registered providers

deploy: owner app shell — artifact-style top bar with a docked iterate chat

Never show a raw Slack id where a person will read it

web-ui: pre-fork origin badge, author-labeled bubbles, real sidebar links

Persist full runtime defaults per scope

self-API: spawn a fresh conversation

dev-instance: browser-only mode (--no-slack) needs no Slack pool slot

docs(security): record the three deliberately portal-only actions

credential broker: refuse percent-encoded parent traversal in paths

Merge pull request #198 from yc-software/upstream-broker-path-traversal

Merge pull request #199 from yc-software/upstream-no-raw-slack-ids

Merge pull request #200 from yc-software/upstream-custom-providers

Merge pull request #202 from yc-software/upstream-web-ui-polish

Merge pull request #203 from yc-software/upstream-runtime-defaults

Merge pull request #204 from yc-software/upstream-spawn-conversation

Merge pull request #205 from yc-software/upstream-dev-no-slack

Merge pull request #206 from yc-software/upstream-portal-only-docs

test: assert portal origin with a plain substring check

CONTRIBUTING: add bug-report / issue guidance

test: assert the shell's portal origin by exact value

Merge pull request #201 from yc-software/upstream-app-shell

CONTRIBUTING: clarify feature PRs vs bug issues