Commit Graph

  • 52fefd2e2a Rebuild viewer static assets after rebase opencode-subscription yoni 2026-08-24 18:29:19 +00:00
  • 5a7e5ea255 Fix OpenCode routes: drop LiteLLM-only prompt-cache arg, persist subscription provider for viewer label yoni 2026-08-14 17:55:55 +00:00
  • 7513cea23a Add OpenCode (Zen/Go) subscription support: strix auth login opencode + opencode/<model> routing yoni 2026-08-12 15:57:44 +00:00
  • f4ef8867f6 Add MCP server support (#1137) main yoni-at-strix 2026-08-24 11:00:16 -07:00
  • 439169d101 keep the mcp tests from reading your shell's STRIX_MCP_* vars mcp-support Jonathan Singer 2026-08-24 08:59:35 -04:00
  • 267fe6f1ed Merge remote-tracking branch 'origin/main' into mcp-support Jonathan Singer 2026-08-24 08:59:31 -04:00
  • 59b8803614 fix(models): split first-event and idle stream timeouts devin/1787573537-stream-first-event-timeout Devin AI 2026-08-24 12:16:05 +00:00
  • fb4c3df9b5 Correct the notes docstring to match how notes reach the agent Jonathan Singer 2026-08-24 08:12:17 -04:00
  • bc58880396 Merge origin/main into feature/contextual-safety-review devin/1017-merge-main Ahmed Allam 2026-08-24 10:48:22 +00:00
  • 391d81bea7 feat(agents): evidence discipline, and coverage as a first-class artifact (#961) devin-ai-integration[bot] 2026-08-24 03:34:09 -07:00
  • c5eac30bf0 Say what MCP servers are worth connecting for Jonathan Singer 2026-08-21 17:38:05 -04:00
  • 1c499c5b2d perf: bootstrap Caido concurrently with the scan start (#1143) devin-ai-integration[bot] 2026-08-21 12:09:59 -07:00
  • 01ea94920d Show MCP tool calls distinctly in the terminal and the run viewer Jonathan Singer 2026-08-21 13:09:24 -04:00
  • afda373f55 Sanitize namespaced tool names so model APIs accept them Jonathan Singer 2026-08-21 11:08:23 -04:00
  • 1ce43d1b94 perf: take heavy imports off the startup path and pre-warm them in the background (#1141) devin-ai-integration[bot] 2026-08-20 20:24:08 -07:00
  • 2cc8167814 docs(skills): correct gRPC guidance, a .proto is not a spec target Alex Schapiro 2026-08-20 20:40:46 +00:00
  • d6a3ca7e58 docs(skills): document --workspace-file for supporting files Alex Schapiro 2026-08-20 20:33:32 +00:00
  • 9099710cef docs(skills): fix nonexistent --mount flag, document real targeting flags, add application-security-testing skill Alex Schapiro 2026-08-20 20:28:44 +00:00
  • 634cb98241 docs(skills): use current OWASP editions (Top 10:2025, API Top 10 2023) Alex Schapiro 2026-08-14 15:12:04 +00:00
  • 1b36343eea fix(skills): avoid unquoted colon in api-security-testing description Alex Schapiro 2026-08-14 15:07:26 +00:00
  • b5ef93e744 feat(skills): add target-specific security testing skills (web app, API, OWASP Top 10, code review) Alex Schapiro 2026-08-14 15:06:58 +00:00
  • 305cb13998 Show errored MCP tool calls as failed in the TUI Jonathan Singer 2026-08-20 18:19:01 -04:00
  • e152c4c7c0 fix(report): raise RuntimeError on non-object run.json (fixes #1109) (#1116) RAJVARDHAN PATIL 2026-08-21 02:11:04 +05:30
  • 8e31009c99 docs(skills): correct gRPC guidance, a .proto is not a spec target devin/1786720018-query-shaped-skills Alex Schapiro 2026-08-20 20:40:46 +00:00
  • fe758af4fc fix(tui): use single space after ordered-list marker (#1043) OpenPay 2026-08-20 23:40:12 +03:00
  • deb2057e20 fix(tui): preserve cost when state is truncated (#1086) oyasumi 2026-08-20 16:36:01 -04:00
  • 91afce6847 docs(skills): document --workspace-file for supporting files Alex Schapiro 2026-08-20 20:33:32 +00:00
  • 991c017ddf docs(skills): fix nonexistent --mount flag, document real targeting flags, add application-security-testing skill Alex Schapiro 2026-08-20 20:28:44 +00:00
  • 4b6b2b7920 docs(skills): use current OWASP editions (Top 10:2025, API Top 10 2023) Alex Schapiro 2026-08-14 15:12:04 +00:00
  • 93e2c3d7e9 fix(skills): avoid unquoted colon in api-security-testing description Alex Schapiro 2026-08-14 15:07:26 +00:00
  • 614d2bfb22 feat(skills): add target-specific security testing skills (web app, API, OWASP Top 10, code review) Alex Schapiro 2026-08-14 15:06:58 +00:00
  • b30ed45ed1 Add MCP connection notes and per-run selection; clean up on cancel and dedupe names Jonathan Singer 2026-08-20 16:31:58 -04:00
  • d6f2218756 Drop strict tool schemas on Claude routes Alex Schapiro 2026-08-20 19:32:56 +00:00
  • 8fb83f52b1 Add MCP docs and CLI polish: docs page, startup connect summary, --mcp-config flag, compact tool output Jonathan Singer 2026-08-20 15:39:50 -04:00
  • 857b24454d fix: preserve structured persisted config values devin/1787242451-persist-current-merge Alex Schapiro 2026-08-20 16:27:33 +00:00
  • 7a736da465 fix: preserve persisted config environment Alex Schapiro 2026-08-20 16:14:11 +00:00
  • 209584e7fd add a generic MCP client and a config for connecting MCP servers Jonathan Singer 2026-08-20 01:44:01 -04:00
  • d3c42e5498 Wire vulnerability amendment callbacks devin/1787174532-update-vulnerability-report Alex Schapiro 2026-08-19 21:53:49 +00:00
  • 9c1a0c9002 Refine vulnerability report amendments Alex Schapiro 2026-08-19 21:34:05 +00:00
  • 18556da0cd Add vulnerability report amendments Alex Schapiro 2026-08-19 21:28:10 +00:00
  • 6f88b7d7d5 Require viewer session for run data oyasumi 2026-08-19 19:12:59 +00:00
  • 8d3693df8c Expose viewer host option oyasumi 2026-08-19 19:00:14 +00:00
  • f5a467fca5 Add reverse-engineering security skills agent/reverse-engineering-skills bearsyankees 2026-08-18 19:40:34 -04:00
  • 9cd81e5c76 Add semantic browser and Electron security skills bearsyankees 2026-08-19 11:22:14 -04:00
  • 4e50a8e32c Add semantic browser and Electron security skills agent/semantic-browser-electron-skills bearsyankees 2026-08-19 11:22:14 -04:00
  • e8272c6a21 Add HTTP differential testing tools bearsyankees 2026-08-19 11:20:29 -04:00
  • 7cb8da7e5a Add HTTP differential testing tools agent/http-differential-tooling bearsyankees 2026-08-19 11:20:29 -04:00
  • aa5867f5df Add ecosystem supply-chain security skills bearsyankees 2026-08-19 11:22:14 -04:00
  • 2f8ddb3c35 Add ecosystem supply-chain security skills agent/ecosystem-supply-chain-skills bearsyankees 2026-08-19 11:22:14 -04:00
  • 7b8f9cb160 Add argument injection security skill bearsyankees 2026-08-19 11:22:14 -04:00
  • 9ac5707e8f Add argument injection security skill agent/argument-injection-skill bearsyankees 2026-08-19 11:22:14 -04:00
  • 2d944a9bcc Add Azure and Entra security skill bearsyankees 2026-08-19 11:22:14 -04:00
  • f4c6f4644f Add Azure and Entra security skill agent/azure-entra-skill bearsyankees 2026-08-19 11:22:14 -04:00
  • a1ab404abd Split reverse-engineering skills into separate PR agent/add-security-skills bearsyankees 2026-08-18 19:40:34 -04:00
  • 0478a69ab0 feat(skills): cover OWASP LLM Top 10 2026 (#1115) alex s 2026-08-18 18:40:27 -04:00
  • 71bea586fe feat(skills): cover OWASP LLM Top 10 2026 agent/owasp-llm-top-10 bearsyankees 2026-08-18 10:29:02 -04:00
  • 9190c4c379 fix(safety): allow verdicts without inspection oyasumi 2026-08-18 03:53:52 +00:00
  • 2681eb2362 fix(validation): clear static analysis failures oyasumi 2026-08-18 03:53:39 +00:00
  • 8ede419dcc handle resume tokens gracefully (#1097) alex s 2026-08-17 16:55:27 -04:00
  • b8f2fd4827 Fix resumed telemetry duration devin/1786975710-telemetry-resume-deltas Alex Schapiro 2026-08-17 14:15:56 +00:00
  • b1efd6ef1b Fix telemetry deltas for resumed runs Alex Schapiro 2026-08-17 14:12:38 +00:00
  • a46a60cf6a feat(reporting): require contextual CVSS and usage evidence on dependency reports Ahmed Allam 2026-08-17 11:34:15 +00:00
  • 918442dbc8 cli: render contextual CVSS vector, advisory score, and reasoning for dependency findings Ahmed Allam 2026-08-17 09:59:57 +00:00
  • e442db9c93 Contextual CVSS as a full 8-metric breakdown, computed like a normal finding Ahmed Allam 2026-08-17 09:45:04 +00:00
  • 9c0d30a0d0 reporting: require the source-to-sink trace in reachability evidence, not just CVSS reasoning Ahmed Allam 2026-08-17 09:11:59 +00:00
  • 55e6e66030 reporting: surface contextual CVSS in the markdown report; require reasoning only for surviving metrics Ahmed Allam 2026-08-17 09:10:47 +00:00
  • 99e2d5d826 reporting: drop per-metric contextual CVSS reasoning, keep the summary Ahmed Allam 2026-08-17 09:08:07 +00:00
  • 310f310e28 feat(reporting): contextual CVSS environmental metrics on dependency reports Ahmed Allam 2026-08-17 09:05:20 +00:00
  • 1ec146d809 cli: render contextual CVSS vector, advisory score, and reasoning for dependency findings devin/1786957520-dependency-contextual-cvss Ahmed Allam 2026-08-17 09:59:57 +00:00
  • e82ee2c31e Contextual CVSS as a full 8-metric breakdown, computed like a normal finding Ahmed Allam 2026-08-17 09:45:04 +00:00
  • 256df30d28 reporting: require the source-to-sink trace in reachability evidence, not just CVSS reasoning Ahmed Allam 2026-08-17 09:11:59 +00:00
  • 84163e8e3b reporting: surface contextual CVSS in the markdown report; require reasoning only for surviving metrics Ahmed Allam 2026-08-17 09:10:47 +00:00
  • 360c549278 reporting: drop per-metric contextual CVSS reasoning, keep the summary Ahmed Allam 2026-08-17 09:08:07 +00:00
  • 474fb25bf3 feat(reporting): contextual CVSS environmental metrics on dependency reports Ahmed Allam 2026-08-17 09:05:20 +00:00
  • 8551339130 feat: place caller-provided files into the sandbox workspace (extra_files, --workspace-file) (#1085) yoni-at-strix 2026-08-14 13:43:08 -07:00
  • 2bcd0d267c drop the workspace-file size limit feat/sandbox-extra-files yoni 2026-08-14 20:34:13 +00:00
  • 9c5307d278 revalidate persisted workspace files when resuming a run yoni 2026-08-14 20:26:23 +00:00
  • 7b855c5cb0 reject repeated and control-character workspace paths yoni 2026-08-14 20:19:39 +00:00
  • 56c68011c6 add --workspace-file so CLI users can place files in the sandbox workspace yoni 2026-08-14 19:54:56 +00:00
  • 056ccd5fed Normalize mechanical punctuation fixes devin/1786736410-ste100-oss-docs-mechanical Alex Schapiro 2026-08-14 19:43:51 +00:00
  • 79630f9ba0 Apply mechanical punctuation and wording-token fixes Alex Schapiro 2026-08-14 19:42:22 +00:00
  • 5ca7bc2092 Tighten remaining OSS docs diff devin/1786730046-ste100-oss-docs Alex Schapiro 2026-08-14 19:34:01 +00:00
  • cb3fa2db51 Reduce OSS docs diff to STE fixes Alex Schapiro 2026-08-14 19:32:17 +00:00
  • 5e8a773f3e Restore dropped detail in agent skills table and CLI target docs Alex Schapiro 2026-08-14 19:28:38 +00:00
  • 1300d5a615 reject extra-file paths that collide with a local source tree yoni 2026-08-14 19:19:54 +00:00
  • 13b7374d54 Keep original callout component in local models doc Alex Schapiro 2026-08-14 19:12:16 +00:00
  • 5ad2c96f9b Keep original callout components in CI docs Alex Schapiro 2026-08-14 19:12:00 +00:00
  • 067597cfdb Clarify introduction wording and Ollama context guidance Alex Schapiro 2026-08-14 18:01:10 +00:00
  • b79483c6b7 Restore technical detail in OSS docs Alex Schapiro 2026-08-14 18:00:29 +00:00
  • 2bc86902a4 Clarify provider setup requirement in quickstart Alex Schapiro 2026-08-14 17:58:33 +00:00
  • c8b83d91db Rewrite OSS docs for ASD-STE100 Simplified Technical English Alex Schapiro 2026-08-14 17:57:14 +00:00
  • b1b42393ab add extra-files plumbing so orchestrators can drop single files into the sandbox workspace Jonathan Singer 2026-08-14 13:40:07 -04:00
  • 21e719a2eb fix(grok): close the token-endpoint response like codex does grok-subscription-oauth yoni 2026-08-14 17:33:39 +00:00
  • 21afdaea9e fix(llm): resolve grok/ models to xai/ for LiteLLM metadata yoni 2026-08-14 17:09:39 +00:00
  • 5b476da52a Merge origin/main into devin/1785721011-security-process-tools devin/1785721011-security-process-tools Ahmed Allam 2026-08-13 12:14:26 +00:00
  • d4573a3197 fix(tui): show the actual subscription provider in the Go TUI yoni 2026-08-13 03:26:22 +00:00
  • cd3250576c Merge remote-tracking branch 'origin/main' into grok-subscription-oauth yoni 2026-08-13 03:19:17 +00:00
  • 4e107be8c8 fix: use valid Renovate Docker managers devin/1786572074-pin-deps Alex Schapiro 2026-08-12 22:09:43 +00:00
  • 4a306fcf16 chore: enable Python Renovate updates Alex Schapiro 2026-08-12 22:05:18 +00:00
  • 99b5ce04bf chore: harden dependency pinning Alex Schapiro 2026-08-12 22:02:58 +00:00