fix(crx): enforce ToolDefinition.parameters at runtime via schema-driven validation - #5

Closed

Postroggy wants to merge 102 commits into

mainfrom

fix/schema-runtime-validation

Commits on May 21, 2026

fix(native-host): graceful shutdown and connection cleanup (#104)

jh0904
and
codex
authored
edc8861
fix(crx): 修复侧边栏宽度不足时语言选择菜单被裁剪不可见的问题 (#102)

authored
b0f2f9d

Commits on May 22, 2026

fix(crx): 修复模型配置弹窗背景全黑及框外释放鼠标意外关闭问题 (#103)

authored
551c864
Use native-host persistent analytics ID in extension and simplify PostHog flow (#106)

jh0904
and
claude
authored
c0d5367
test(crx): validate agent indicator i18n keys (#108)

jh0904
and
claude
authored
7c89da4
feat: 统一 analytics ID + superduck update 自更新命令 (v0.2.6) (#109)

jh0904
and
codex
authored
a0b8c98
docs: 更新 README 与官网，补充 CLI 介绍并重绘架构图 (#110)

jh0904
and
claude
authored
9d198e6
feat(crx): agent indicator i18n 实时切换及英文默认值兜底 (#111)
jh0904
authored
da2ee4c

Commits on May 26, 2026

fix(crx): remove unused store permissions

arthur-zhang
and
codex
committed
700b301
Merge pull request #118 from superduck-ai/chrome-reject-fix
arthur-zhang
authored
e52ed57

Commits on May 27, 2026

fix(crx): 支持模型配置 API URL 输入纯域名并校验非法输入 (#162)

authored
5e1a100
fix(crx): expose indicator i18n catalogs (#164)

jh0904
and
codex
authored
bf95b86
fix(crx): 统一侧边栏权限模式选择器样式 (#166)

authored
e742132

Commits on May 28, 2026

fix(crx): support OpenAI Responses GPT gateways (#170)

jh0904
and
codex
authored
83c74d3

Commits on May 29, 2026

Commits on Jun 4, 2026

fix: UDS authentication + socket permissions + connection limit

yueqi.guo
and
codex
committed
fa03e9e
fix: CLI input validation improvements

yueqi.guo
and
codex
committed
818dd84
fix: deduplicate screenshot/zoom image handling

yueqi.guo
and
codex
committed
704d233
fix: add SHA256 checksum verification for binary updates

yueqi.guo
and
codex
committed
1a70863
fix: handle nil and non-map results in MCP result conversion

yueqi.guo
and
codex
committed
6d9d3cc

Commits on Jun 5, 2026

fix(cmd-type): support --help flag for type command

yueqi.guo
and
codex
committed
c4bed3d
fix(cmd-read-page): validate --filter enum values

yueqi.guo
and
codex
committed
09fe376
fix(cmd-log): optimize tail performance with reverse reading

yueqi.guo
and
codex
committed
90ba04e
fix(protocol): add buffer pool to ReadMessage for reduced GC pressure

yueqi.guo
and
codex
committed
6391dd4
fix(selfupdate): add cancellation support to BackgroundCheck

yueqi.guo
and
codex
committed
83f0445
test: add comprehensive auth unhappy path tests

yueqi.guo
and
codex
committed
8e4bfd0
docs: remove Co-authored-by requirement from AGENTS.md
yueqi.guo
committed
3b2aef2
refactor: remove overly strict validation
yueqi.guo
committed
d611051
fix(cli): remove arbitrary upper bound limits from resize command
yueqi.guo
committed
d6e651b
fix(cli): align scroll amount validation with documented range

yueqi.guo
and
claude
committed
0c2d256
refactor(udsauth): extract shared auth token helpers into internal/udsauth

yueqi.guo
and
claude
committed
c7ce41a
fix(bridge): bound UDS send/recv with 30s deadlines

yueqi.guo
and
claude
committed
cdb0084
test(cmd-log): add unit tests for tailLines and splitLines

yueqi.guo
and
claude
committed
90881b1
fix: improve MCP computer tool schema with detailed parameter requirements

yueqi.guo
and
codex
committed
cd62c48
fix(protocol): remove ineffective buffer pool implementation
yueqi.guo
committed
244ff73
ci(release): generate SHA256 checksums for release tarballs
yueqi.guo
committed
e01bc69
fix(selfupdate): harden download path against OOM, extra copies, and panics
yueqi.guo
committed
a5a7ad8
fix(cli): preserve -- separator in reorderFlagsFirst for literal args
yueqi.guo
committed
d5301c8
chore(ci): pin GitHub Actions to commit SHAs in release workflow
yueqi.guo
committed
ad471d0
fix(security): address Copilot/CodeRabbit review comments
yueqi.guo
committed
2067702
fix(cli): reject negative values and avoid repeated map allocation
yueqi.guo
committed
ee7d7de
fix(bridge): add headroom to read deadline for wait action

yueqi.guo
and
claude
committed
8ea27f2
fix(cli): reject explicit zero values for --amount and --repeat

yueqi.guo
and
claude
committed
59db63a
fix(cli): use -9999 as sentinel to reject all invalid flag values

yueqi.guo
and
claude
committed
2401512
fix: remove unused clientAuth helper

yueqi.guo
and
claude
committed
64f6387
Merge pull request #189 from Postroggy/fix/screenshot-dedup
Postroggy
authored
46eb041
Merge pull request #190 from Postroggy/fix/log-tail-performance
Postroggy
authored
7d0f519
Merge pull request #191 from Postroggy/fix/mcp-schema-quality
Postroggy
authored
a35c1da
Merge pull request #192 from Postroggy/fix/mcp-result-handling
Postroggy
authored
5ec9c4c
Merge pull request #194 from Postroggy/fix/background-check-cancellation
Postroggy
authored
0aa02a5
Merge pull request #196 from Postroggy/fix/read-page-filter-validation
Postroggy
authored
0ecb51a
Merge pull request #200 from Postroggy/fix/selfupdate-security
Postroggy
authored
a8d2bbd
Merge pull request #187 from Postroggy/fix/security-uds-auth
Postroggy
authored
80c5689
Merge pull request #188 from Postroggy/fix/cli-input-validation
Postroggy
authored
68fb717
Merge pull request #195 from Postroggy/fix/cmd-type-help
Postroggy
authored
9a595ce
fix: add mutex to protect audit log concurrent writes

yueqi.guo
and
codex
committed
5e3e3de
Merge pull request #193 from Postroggy/fix/state-sync
Postroggy
authored
67159c9
fix(error-handling): improve error classification and handling

yueqi.guo
and
codex
committed
93610f0
Merge pull request #197 from Postroggy/fix/error-handling
Postroggy
authored
1f4ef5e
fix: MCP bridge timeout and reconnection

yueqi.guo
and
codex
committed
41d1a4d
fix(bridge): address bot review comments
yueqi.guo
committed
1e86e89
fix(bridge): close broken connections and add timeout headroom

yueqi.guo
and
claude
committed
cde705e
fix(bridge): cap long deadlines at MaxTimeout and recheck context after lock

yueqi.guo
and
claude
committed
7c53f4d
Merge pull request #186 from Postroggy/fix/mcp-bridge-timeout
Postroggy
authored
317fc1d
fix(native-host): use atomic rename to fix TOCTOU race in prepareSocketPath

yueqi.guo
and
codex
committed
e636b4e
fix(native-host): classify dial errors precisely and use unique stale path
yueqi.guo
committed
5c3976c
fix(socket): verify file is a socket before cleanup

yueqi.guo
and
claude
committed
5f1c7a9
Merge pull request #198 from Postroggy/fix/socket-toctou
Postroggy
authored
8efcb3c
Merge pull request #199 from Postroggy/fix/read-message-buffer-pool
Postroggy
authored
f3172b7
fix(native-host): add idle timeout to UDS connections

yueqi.guo
and
codex
committed
b62f6a6
fix(native-host): use explicit _ = for SetReadDeadline calls
yueqi.guo
committed
a8b9747
Merge pull request #201 from Postroggy/fix/uds-idle-timeout
Postroggy
authored
df175d5
fix(bridge): make UDS path configurable via Options (#202)

authored
705bfdc
fix(testdata): correct scroll amount to match schema (max 10) (#203)

authored
c9560f2

Commits on Jun 6, 2026

fix: improve Edge and Brave browser compatibility (#204)

authored
fefe3e9
refactor(crx): extract provider client management into useProviderClient hook (#205)

authored
4ba6bc4
refactor(sidepanel): extract types from SidepanelApp (#206)

authored
c613d87
refactor(sidepanel): extract tool display components from SidepanelApp (#208)

authored
6c2c4ce
fix(sidepanel): address P1 issues from PR #208 review
yueqi.guo
committed
27e334e
refactor(sidepanel): extract SidepanelHeader and SidepanelBanners components (#211)

authored
a786726
refactor(sidepanel): extract runtime message listener into useRuntimeMessages hook (#210)

authored
1ad4e2a
fix(sidepanel): address P1 issues from PR #208 review (#212)

Postroggy
and
yueqi.guo
authored
956953b
refactor(sidepanel): extract ChatInputArea component from SidepanelApp (#213)

Postroggy
and
yueqi.guo
authored
9e6d848
feat: add Edge extension build support (#214)

authored
1a7acf9

Commits on Jun 7, 2026

fix: distinguish bridge disconnect from permission denial in pending tool calls (#215)

Postroggy
and
yueqi.guo
authored
c1c46eb
fix: log navigate domain category check failures instead of silently ignoring (#216)

Postroggy
and
yueqi.guo
authored
a0f0fab
fix: surface console/network tracking enable failures instead of silent ignore (#217)

Postroggy
and
yueqi.guo
authored
a2ba2d5
fix(cdp): clean up per-tab state on tab close to prevent memory leaks (#218)

Postroggy
and
yueqi.guo
authored
364dc24
fix(bridge): guard against nil b.conn after lock acquisition in ExecuteTool (#221)

Postroggy
and
yueqi.guo
authored
ace0cdf
fix(crx): add MAX_BATCH_ACTIONS limit to browser_batch tool (#224)

Postroggy
and
yueqi.guo
authored
7315581
fix: add tool input parameters to audit trail events (#220)

Postroggy
and
yueqi.guo
authored
e733e14
fix(cli): reject invalid computer tool args instead of warning (#222)

Postroggy
and
yueqi.guo
authored
37c8dc5
fix(crx): cap Bridge WebSocket reconnection at MAX_BRIDGE_RETRIES (#223)

Postroggy
and
yueqi.guo
authored
2bb9ce2
fix(crx): report CDP debugger attach failures to agent (#225)

Postroggy
and
yueqi.guo
authored
b4c607e
fix(crx): clean up screenshotContextManager on tab close (#219)

authored
fedb924
fix(cdp): skip detach/attach cycle when debugger already attached (#226)

authored
799ae61
docs(agents): add low-risk PR batch submission workflow

yueqi.guo
and
claude
committed
a0e2853
Revert "docs(agents): add low-risk PR batch submission workflow"
yueqi.guo
committed
6bca591
fix(testdata): correct scroll amount to match schema (max 10) (#227)

authored
6d8e074

Commits on Jun 9, 2026