You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
- **Bounded Unicode text:** keep remaining operator, prompt, channel, plugin, QA, and Control UI text caps on valid UTF-16 boundaries, including both ends of head/tail previews, so emoji cannot become replacement characters in logs, labels, errors, stored artifacts, or model context. Thanks @Pandah97, @SunnyShu0925, @zhangqueping, @lzyyzznl, @zw-xysk, @cxbAsDev, and @coder-master-0915.
27
26
- **Browser actions on Node 24:** keep browser request cancellation bound to the client and response lifetime instead of Node 24.16+'s prematurely aborted body-stream signal, preventing valid POST actions from failing after JSON parsing. Thanks @obviyus and @vincentkoc.
28
27
- **SecretRef model credentials:** keep resolved provider secrets behind process-local sentinels through auth storage, stream setup, SDK configuration, and managed local-provider probing, then inject plaintext only at the final network or provider-plugin boundary while retaining exact-value log redaction. (#102008, #102009)
29
28
- **Lean local model shell access:** keep `exec` directly visible beside the default structured Tool Search controls so coding-tuned local models can use their shell fallback instead of searching for missing domain tools. (#87587) Thanks @vincentkoc.
0 commit comments