Sync upstream changes through 2026-06-27 - #73

Merged

earayu merged 288 commits into

mainfrom

chore/sync-upstream-2026-06-27

Jun 27, 2026

This pull request is big! We're only showing the most recent 250 commits

Commits on Jun 1, 2026

Honor blocking Stop hook decisions (#9468)
johnmatthewtennant
authored
5e160e5
fix(otel): skip OTLP signals when protocol=grpc to avoid background-thread panic (#9512)

authored
f69a178
Fix scheduled recipe session params (#9553)
angiejones
authored
cd8f718

Commits on Jun 2, 2026

fix(extension-manager): forward custom headers through OAuth connect path (#9388)
hydrosquall
authored
586bb15
Revert "refactor: convert desktop v1 and goose-server extensions to ACP+ (#9448)" (#9564)
alexhancock
authored
942a456
chore(release): bump version to 1.37.0 (minor) (#9557)
github-actions[bot]
authored
fdc1994
Pick the last canonical model (#9568)

DOsinga
and
Douwe Osinga
authored
7982086
feat(security): Add directionality to egress logging (#9546)
dorien-koelemeijer
authored
030dbb0
chore(release): release version 1.37.0 (#9565)
github-actions[bot]
authored
502ee50
Bench marking (#9465)

authored
cd12199
Import sesssions (#9474)

DOsinga
and
Douwe Osinga
authored
003252f
Replace review subprocess timeout with turn limits (#9571)

lucasconti-dev
and
cursoragent
authored
9626b4c

Commits on Jun 3, 2026

Commits on Jun 4, 2026

Commits on Jun 5, 2026

refactor: remove dead component and useNavigationSessions cleanup (#9603)
lifeizhou-ap
authored
65b72b2
feat: acp methods for config extensions (#9581)
lifeizhou-ap
authored
2f99664
create goose-providers crate with canonical models, conversation and other types (#9588)
jamadeo
authored
826f13f
Image read tool (#9607)

DOsinga
and
Douwe Osinga
authored
4904e3c

Commits on Jun 8, 2026

move formats/openai.rs into goose-providers crate, along with several dependencies (#9633)
jamadeo
authored
e5fd568

Commits on Jun 10, 2026

feat(security): enable prompt injection mitigation by default for internal users via non-overridable env vars (#9612)
dorien-koelemeijer
authored
f52d717
feat(security): Re-adjust pattern-based detection for prompt injection detection confidence scores (#9690)
dorien-koelemeijer
authored
390dfb8
expose ACP thinking effort config option (#9711)

morgmart
and
lifeizhou-ap
authored
10e665a
feat: acp list session with keyword and type filter (#9695)
lifeizhou-ap
authored
d2ab786
docs: fix typo in MCP blog post (#9641)

Nukually
and
shenzhengyang
authored
9455f8a
Update analyze extension instructions (#9585)

DOsinga
and
Douwe Osinga
authored
fde407c
feat: steering messages with ACP (#9560)
michaelneale
authored
40315b5
feat: use acp search session in Desktop (#9717)
lifeizhou-ap
authored
be91189
pin goose-sdk package in tui (#9712)
lifeizhou-ap
authored
58185fe
feat: surface Anthropic stream refusals as visible errors (#9724)
kalvinnchau
authored
32722e6
feat(acp): support GOOSE_SERVER__SECRET_KEY at goose serve acp endpoint (#9726)
kalvinnchau
authored
e8d5622

Commits on Jun 11, 2026

Commits on Jun 12, 2026

feat(security): unified OTLP logging schema for cross-tool detection (#9713)
dorien-koelemeijer
authored
8b5a7b8

Commits on Jun 13, 2026

docs: update docs for ACP clients (#9772)
yeskunall
authored
f40d56f
i18n: add Japanese locale support (#9768)
tami1A84
authored
d6d99f5
fix: classify Bedrock ValidationException as ExecutionError (#9735)
michaelneale
authored
0629f99
Validate desktop i18n catalogs (#9776)
angiejones
authored
6b9360c
Mark stream decode errors retryable (#9723)

DOsinga
and
Douwe Osinga
authored
9d166ec

Commits on Jun 15, 2026

fix incorrect max tokens values for groq provider (#9790)
The-Best-Codes
authored
e612d81
fix: correctly map ollama_cloud to canonical provider and update max_… (#9639)
murphysean
authored
3063de7
feat(session): add opt-in ACP last message snippets (#9798)
matt2e
authored
b3aa4c2
chore(deps): bump dirs from 5.0.1 to 6.0.0 (#9630)
dependabot[bot]
authored
fe1475c
chore(deps): bump actions/setup-node from 4 to 6 (#9623)
dependabot[bot]
authored
3dd881a
chore(deps): bump astral-sh/setup-uv from 7.2.0 to 8.2.0 (#9622)
dependabot[bot]
authored
1e9cad7
chore(deps): bump actions/upload-artifact from 4.6.2 to 7.0.1 (#9621)
dependabot[bot]
authored
6ab1831
chore(deps): bump aiohttp from 3.13.4 to 3.14.0 in /scripts/provider-error-proxy (#9594)
dependabot[bot]
authored
2712dd8
chore(deps): bump esbuild and tsx in /evals/open-model-gym/suite (#9775)
dependabot[bot]
authored
64f9d61
chore(deps): bump the cargo-minor-and-patch group with 9 updates (#9764)
dependabot[bot]
authored
8494fc9
chore(deps): bump lopdf from 0.40.0 to 0.41.0 (#9629)
dependabot[bot]
authored
d6fa46c
chore(deps): bump uniffi from 0.29.5 to 0.31.1 (#9628)
dependabot[bot]
authored
114ae52
chore(deps): bump lru from 0.16.4 to 0.18.0 (#9627)
dependabot[bot]
authored
dc94aa6
chore(deps): bump hono from 4.12.18 to 4.12.23 in /evals/open-model-gym/mcp-harness (#9609)
dependabot[bot]
authored
1472e7e
desktop: fix new chat shortcut (#9659)
extrasmall0
authored
cbff60c
chore(release): bump version to 1.38.0 (minor) (#9684)
github-actions[bot]
authored
ca24900
fix(agent): ensure tool request timestamp precedes tool response timestamp (#9462)

msteve123
and
claude
authored
c4d2d84
fix(recipe): close modal when canceling parameter form (#9195)

enilsen16
and
Douwe M Osinga
authored
0f8a202
feat: propagate elicitation decline and cancel actions end-to-end (#9437)

mvanhorn
and
Douwe M Osinga
authored
ee1a2e4
Fix: deleting a recently created session and then creating a new session shows the deleted session's content (#9351)

monroewilliams
and
Douwe M Osinga
authored
3ab8ba1
Add Scholar Sidekick tutorial page + anonymous-default auth (v0.8.0) (#9477)
mlava
authored
f4700ef
fix(summon): warn on unmatched extension names in delegate (#9513)

jeffa-block
and
Douwe M Osinga
authored
0ed51a5
feat(providers): add OrcaRouter as a declarative OpenAI-compatible provider (#9515)

xilema2
and
Douwe M Osinga
authored
cb6ece7
oauth: time out the MCP callback wait instead of hanging in WSL (#9536)
mvanhorn
authored
6364087
feat(summon): add working_dir override for delegate tasks (#9520)

jeffa-block
and
Douwe M Osinga
authored
bbcbb8b
fix(summon): evict stale completed tasks to prevent unbounded memory growth (#9514)

jeffa-block
and
Douwe M Osinga
authored
5d5986f
fix(desktop): restore new chat shortcut navigation (#9528)
he-yufeng
authored
e4329c7

Commits on Jun 16, 2026

fix(providers): detect image paths with spaces (#9387)

jlmalone
and
Douwe M Osinga
authored
93285db
feat(summon): add structured metadata to task load results (#9521)

jeffa-block
and
Douwe M Osinga
authored
4602a88
feat(summon): add context parameter for delegate tasks (#9518)

jeffa-block
and
Douwe M Osinga
authored
8659c14
fix: add option for overriding API Url for Moonshot provider (#9819)
bytrangle
authored
02f27b9
fix: record OpenAI-native cached_tokens in usage metering (#9829)

sumleo
and
Douwe M Osinga
authored
4327dee
fix(bedrock): implement real streaming via ConverseStream API (#9579)
bawongfai
authored
76c8028
fix: show resolved skill supporting file paths (#9584)
he-yufeng
authored
e56c749
fix: refresh session name in sidebar after rename (#9543)

nuthalapativarun
and
claude
authored
722b3c4
fix(desktop): align session history scrollbar with window edge (#9601)

authored
b9af83b
openai: read meta.n_ctx from /v1/models to fix context limit for local servers (#9530)

authored
11c607c
fix(otel): provide Tokio runtime for OTLP HTTP exporter batch thread (#9541)

nuthalapativarun
and
Douwe M Osinga
authored
3ee795a
fix: fall back to default provider when resuming session with unavailable provider (#9547)

nuthalapativarun
and
claude
authored
1512934
fix: use blocking OTLP HTTP exporter (#9599)

he-yufeng
and
Douwe M Osinga
authored
9278953
fix: add hermit cleanup to uvx and jbang scripts (#9616)
The-Best-Codes
authored
fd7a0fe
fix(ui): dedupe React to prevent multiple instances in renderer (#9631)
Jazzcort
authored
ff91f0c
fix: Mention menu icon to open the sidebar (#9643)
bytrangle
authored
ec453a3
fix(ui): lead with extension description, shorten HTTP/SSE transport label (#9653)

authored
e0492d1
feat: add Together AI declarative provider (#9545)

nuthalapativarun
and
Douwe M Osinga
authored
764a33f
fix(desktop): restore Cmd/Ctrl+T new chat shortcut (#9614)

sanidhyasin
and
Douwe M Osinga
authored
0b67498
bug(hooks): repair PATH for plugin hook commands (#9615)

authored
81a8b87
Improve benchmarking (#9637)

DOsinga
and
Douwe Osinga
authored
59521f4
chore(deps): bump actions/deploy-pages from 4.0.5 to 5.0.0 (#9499)
dependabot[bot]
authored
2e2b7e6
chore(deps): bump shlex from 1.3.0 to 2.0.1 (#9505)
dependabot[bot]
authored
b3d64bb
chore(deps): bump thiserror from 1.0.69 to 2.0.18 (#9506)
dependabot[bot]
authored
943f3e9
chore(deps): bump actions/upload-pages-artifact from 4.0.0 to 5.0.0 (#9497)
dependabot[bot]
authored
59f0bdb

Commits on Jun 17, 2026

feat: added _meta.conversationBefore for ACP forking session (#9821)
lifeizhou-ap
authored
e783d2a
fix(desktop): handle resume deep links (#9298)

McGluut
and
Douwe Osinga
authored
ddd9d3f
feat(i18n): language selection feature (#9405)
besdar
authored
c9a82f3
fix(providers/openai): preserve custom API path in base_url derivation (#9649)

SjB
and
Douwe M Osinga
authored
34b20e3
fix(packaging): disable RPM build-id links (#9671)
yibo365
authored
e990ab7
fix: keep extended thinking within the Anthropic output cap (#9814)
filipkujawa
authored
75f7d08
use windows-2022 image for CUDA builds (#9834)
jamadeo
authored
02d56dc
fix: clear rejected OAuth credentials after refresh (#9694)
qybaihe
authored
9ca81e7
feat(azure): support Entra ID bearer token auth via AZURE_OPENAI_AD_TOKEN (#9716)

hammadxcm
and
Douwe M Osinga
authored
b3d3a8b
fix: accept string values for GOOSE_CONTEXT_LIMIT (#9738)
michaelneale
authored
7f02c1e
feat(gym): make per-agent timeout configurable (GYM_AGENT_TIMEOUT) (#9791)

kyledef
and
claude
authored
d95df17
fix: inherit login-shell PATH in spawned subagents (#9737)
michaelneale
authored
0b95199
feat: load global hints from ~/.agents/AGENTS.md (#9736)

michaelneale
and
Douwe M Osinga
authored
b0d8ea0
Make the context exceeded checker more precise (#9831)

DOsinga
and
Douwe M Osinga
authored
5adaebb
View json (#9678)

DOsinga
and
Douwe M Osinga
authored
9804a8c
fix: removed window goosed when closing window (#9818)
lifeizhou-ap
authored
1f0f5d9
feat: implement acp method for elicitation and elicitation improvement (#9797)
lifeizhou-ap
authored
72da972
fixed acp cancel race condition (#9804)
lifeizhou-ap
authored
55dd847
fix(desktop): preserve Windows backslash paths in custom extension command (#9741)
michaelneale
authored
f7b32da
Fix custom OpenAI provider dropping port when URL scheme is omitted (#9730)

michaelneale
and
Douwe M Osinga
authored
739d9cb
fix(acp): include agentInfo in initialize response (#9765)
maksugr
authored
86846ec
Add support for MLX models to the local inference provider (#9154)
jh-block
authored
4aa5de1
feat(providers): add EmpirioLabs as a declarative OpenAI-compatible provider (#9771)

Adam-Dalloul
and
Douwe M Osinga
authored
402afa5
Keep the version-bump PR up to date by re-running on merge conflicts (#9761)
jamadeo
authored
184f9ef
fix: resolve bundled extensions from discovery (#9759)

extrasmall0
and
Douwe M Osinga
authored
9f6eb65
Dedup duplicate tool-call ids within a turn (#9792)

michaelneale
and
Douwe M Osinga
authored
e3dbb86
fix(summon): skip non-recipe project config files (#9808)

Thump604
and
Douwe M Osinga
authored
80a286d
i18n: add Spanish (es) locale support (#9833)

jmpdsevilla
and
claude
authored
56812f4
fix(desktop): keep extensions icon visible after switching sessions (#9787)

authored
1a500d8
feat(gym): make Open Model Gym output dir configurable (#9789)

authored
d2090b1
fix(local-inference): use media marker parts for vision prompts (#9452)

jh-block
and
Douwe M Osinga
authored
3d40524
Initial prompt with goose://new-session (#9427)

jamadeo
and
Douwe M Osinga
authored
177cf3d
check for responses API support in databricks (#9347)

jamadeo
and
Douwe M Osinga
authored
f0cc765
perf(build): drop debug info for dependencies in the dev profile (#9843)
jlmalone
authored
633df01
Add self-improving agents blog post (#9846)

DOsinga
and
Douwe M Osinga
authored
1701f52
Support MCP extensions in open plugins (#9471)

jamadeo
and
Douwe M Osinga
authored
b0f5db2
Split provider inventory out of providers (#9826)
jamadeo
authored
c239ae0
fix: pass thinking config to Bedrock Anthropic models (#9794)

michaelneale
and
Douwe M Osinga
authored
bd7f492
fix: remove hard-coded React alias that points to the wrong location and break the dev render (#9842)
lifeizhou-ap
authored
69b4d36
refactor: make session.name the source of truth for displayed session titles (#9841)
lifeizhou-ap
authored
109bda3

Commits on Jun 18, 2026

feat: use acp for desktop chat prompt (feature toggle off) (#9802)

lifeizhou-ap
and
Douwe M Osinga
authored
802dd39
feat (ui): Add durable ACP chat session state for desktop UI (#9852)
lifeizhou-ap
authored
ddf23a0
feat (ui): chat reply UI with ACP (last part) (#9857)
lifeizhou-ap
authored
7130cbf
Add Korean localization to desktop app (#9856)

soolmuk
and
lhs
authored
f108282
feat(summon): add peek mode for async background tasks (#9519)

jeffa-block
and
Douwe M Osinga
authored
6d3620d
fix(goal): start a turn when /goal or /grind is set (#9801)
michaelneale
authored
c524c27
feat(aws_bedrock): support OpenAI GPT models via Bedrock mantle endpoint (#9707)

clouatre
and
Douwe M Osinga
authored
d6393d7
Add Ophis MCP server to the extensions registry (#9861)
san-npm
authored
4c64375
move global config access out of ModelConfig, and move ModelConfig into goose_providers (#9769)
jamadeo
authored
80eaf8f
docs: remove DCO references (#9864)

DOsinga
and
Douwe M Osinga
authored
c72c653
move the provider trait into goose-providers (#9860)
jamadeo
authored
73fd41d
Feature AAIF migration blog post (#9866)

DOsinga
and
Douwe M Osinga
authored
fb59045
fix(gcp): use refreshed gcloud token after reauth (retry Vertex AI on 401/403) (#9849)

michaelneale
and
Douwe M Osinga
authored
9264427
docs(installation): correct whitespace in fenced code block (#9867)
Nicholas-Westby
authored
a8b11e3
delete embeddings support (#9865)
jamadeo
authored
b3cf3cb
Update Moim (#9636)

authored
09c8d2b

Commits on Jun 19, 2026

Commits on Jun 20, 2026

feat: add option to disable automatic update downloads (#9872)

authored
d2a921a

Commits on Jun 22, 2026

feat (acp): used typed request and response for add, get session extensions (#9890)
lifeizhou-ap
authored
2712c06
chore: removed create recipe from session modal and rest api (#9916)
lifeizhou-ap
authored
b893b5f
feat(ui): use acp new session on desktop (only for non recipe session) (#9914)
lifeizhou-ap
authored
6592573
fix: do not pass temperature to ChatGPT Codex provider (#9931)
angiejones
authored
22b7437
Allow unlisted models in search (#9933)
angiejones
authored
d29aa52
chore(deps): bump tokenizers from 0.22.2 to 0.23.1 (#9904)
dependabot[bot]
authored
155a3cd
chore(deps): bump pkcs8 from 0.10.2 to 0.11.0 (#9903)
dependabot[bot]
authored
ada27af
chore(deps): bump tiktoken-rs from 0.11.0 to 0.12.0 (#9901)
dependabot[bot]
authored
27f5c8e
chore(deps): bump sigstore-verify from 0.8.0 to 0.9.0 (#9900)
dependabot[bot]
authored
c847153
chore(deps): bump tower-http from 0.6.11 to 0.7.0 (#9899)
dependabot[bot]
authored
a829e0e
chore(deps): bump docker/login-action from 4.1.0 to 4.2.0 (#9896)
dependabot[bot]
authored
69496e1
chore(deps): bump docker/metadata-action from 6.0.0 to 6.1.0 (#9893)
dependabot[bot]
authored
a8f1dd0
chore(deps): bump rand from 0.8.6 to 0.10.1 (#9504)

dependabot[bot]
and
Douwe M Osinga
authored
102ff05
chore(deps): bump actions/checkout from 6 to 7 (#9894)
dependabot[bot]
authored
23c535a
feat(cli): add /status slash command (#9845)

jlmalone
and
Douwe M Osinga
authored
867267a
mcp(win): full Windows Job Object cleanup wiring (patch draft) (#9835)

michaelneale
and
Douwe M Osinga
authored
e944dcc
fix(developer/read_image): send a User-Agent on URL image fetches (#9927)
jedwards27
authored
0b9ef09
move OpenAI provider into goose-providers (#9880)
jamadeo
authored
c346d00
fix(autovisualiser): accept JSON-encoded string for the data parameter (#9838)
hammadxcm
authored
62beebe
docs: custom agents (#9293)
angiejones
authored
b94b5f3
fix(desktop): activate hermit on macOS so STDIO extensions resolve node (#9482)
Pluviobyte
authored
2023153
docs: correct custom agents guide (#9947)
angiejones
authored
bc86094
added recipe handling in new_session (#9935)
lifeizhou-ap
authored
ca8938c

Commits on Jun 23, 2026

feat (ui) - use acp to manage global config and session extensions (#9948)
lifeizhou-ap
authored
d58f841
fix(desktop): publish mac updater metadata (#9945)

DOsinga
and
Douwe M Osinga
authored
156445e
feat: created acp method for managing recipes and UI changes (#9951)
lifeizhou-ap
authored
f38f1ac
chore(release): bump version to 1.39.0 (minor) (#9810)
github-actions[bot]
authored
06076f0
feat(ui): use acp method to load skills (#9959)
lifeizhou-ap
authored
527fcfc
fix: remove unused SubagentStart/SubagentStop hook events (#9960)
nuthalapativarun
authored
eef6c2a
feat: add streamable HTTP support to deeplink generator (#9954)

Abhijay007
and
goose
authored
51ccfe5
fix(cost): resolve databricks_v2 pricing and surface cost in standard usage update (#9925)

jedwards27
and
Douwe M Osinga
authored
a25f9e9
provider refactor: don't require a model config to create a provider (#9953)

jamadeo
and
Copilot
authored
35711b8

Commits on Jun 24, 2026

Route MCP elicitations through tool streams (#9943)

DOsinga
and
Douwe M Osinga
authored
6782d1f
Migrate diagnostics to JSON report (#9964)

DOsinga
and
Douwe M Osinga
authored
e4f8b61
feat (ui): Use ACP steer to send the message in queue in ACP path (#9957)
lifeizhou-ap
authored
79c6547
removed tunnel rest api and ui (#9932)
lifeizhou-ap
authored
efafdf7
Expose last message timestamp on sessions (#9961)

DOsinga
and
Douwe M Osinga
authored
2acae3b
[codex] Emit assistant reply text in Stop hooks (#9968)
Kvadratni
authored
e51d70f
created custom methods for agent mention and slash command (#9980)
lifeizhou-ap
authored
48a2a3d
chore(deps): bump webpack-dev-server from 5.2.4 to 5.2.5 in /documentation (#9863)

dependabot[bot]
and
Douwe M Osinga
authored
904de1b
fix(desktop): show optimistic toggle state when disabling an extension (#9882)
TheSeydiCharyyev
authored
3a93f56
Fix: surface actionable errors for truncated tool-call arguments (#9946)

authored
63d1456
fix(providers): Buffer thinking across stream chunks for DeepSeek/Kimi tool calls (#9704)
thepetk
authored
0c9acc3
perf: disable extended thinking for fast-model operations (#9815)

filipkujawa
and
Douwe M Osinga
authored
6d7e2da
chore: removed mesh on ui (#9982)
lifeizhou-ap
authored
274e952
chore: clean up ui as we don't have session based permission setting on ui (#9975)
lifeizhou-ap
authored
d97d07f
chore: removed the too many tools warning (#9974)
lifeizhou-ap
authored
09998b1
feat (acp): custom methods for managing scheduler (#9972)
lifeizhou-ap
authored
eea6989

Commits on Jun 25, 2026

chore: remove gateway REST API and UI (#9989)

Abhijay007
and
lifeizhou-ap
authored
416aad8
suppress telemetry event on ui (#9991)
lifeizhou-ap
authored
db26fb7
chore: Remove share session via base url (#9994)
lifeizhou-ap
authored
24166fc
chore(deps): bump docker/setup-buildx-action from 3.12.0 to 4.1.0 (#9895)
dependabot[bot]
authored
f1bf611
ACP Migration: MCP/Goose Apps (#9988)

DOsinga
and
Douwe M Osinga
authored
dc8aedf
removed unnecessary call setRecipeParams for acp enabled path (#10003)
lifeizhou-ap
authored
bb4a9a7
Revert "mcp(win): full Windows Job Object cleanup wiring (patch draft… (#10013)
jamadeo
authored
8ab0320
ignore unused on windows (#10009)
jamadeo
authored
9c96bd7
Add GLM-5.2 support (#9967)

SynthLuvr
and
Douwe M Osinga
authored
37d93ce
run all builds on the release branch, before tagging (#10017)
jamadeo
authored
789717b
Migrate Nostr session sharing to ACP (#10022)

DOsinga
and
Douwe M Osinga
authored
d1af10c
move anthropic provider into goose-providers (#9985)
jamadeo
authored
854fed5
feat: used acp agent capabilities for local Inference support check (#9996)
lifeizhou-ap
authored
3c62892
Apply ACP recipe state during session load and fork (#9998)
lifeizhou-ap
authored
59b28e4

Commits on Jun 26, 2026

feat(acp): migrate upsertPermissions to setToolPermissions ACP method (#9999)
Abhijay007
authored
22883e3
fix: removed fallback rest api call in ACP mode for edit in place (#10034)
lifeizhou-ap
authored
ec450a6
chore: ignore Zed settings (#10043)

DOsinga
and
Douwe M Osinga
authored
d9cf383
refactor: replace getTunnelStatus with GOOSE_DISABLE_NOSTR_SHARING config flag (#10044)
Abhijay007
authored
f0a3ed3
add ACP+ handlers for prompt editing (#10031)
jamadeo
authored
35999d4
Support streamed tool calls without indexes (#10023)
baxen
authored
d1d2166
feat(acp+): models/providers in desktop on ACP+ (#9987)
alexhancock
authored
2fda760

Commits on Jun 27, 2026

feat(acp+): config in desktop on ACP+ (#10057)
alexhancock
authored
98a13ff
chore: sync upstream changes through 2026-06-27
earayu
committed
5bc74cf