skills/vercel__chat
1
0
Fork 0
mirror of https://github.com/vercel/chat.git synced 2026-09-14 18:32:29 +08:00
Code Issues Packages Projects Releases Wiki Activity
Files
main
vercel__chat/packages/adapter-shared/CHANGELOG.md
T
github-actions[bot] 85a37c896f chore(release): version packages (#878) 
This PR was opened by the [Changesets
release](https://github.com/changesets/action) GitHub action. When
you're ready to do a release, you can merge this and the packages will
be published to npm automatically. If you're not ready to do a release
yet, that's fine, whenever you add more changesets to main, this PR will
be updated.


# Releases
## @chat-adapter/gchat@4.40.0

### Minor Changes

- f485255: Harden webhook tenant isolation, require explicit Google Chat
bot identity for reliable mention handling, use native Google Chat
pagination, isolate Slack caches, and bound recording storage.

### Patch Changes

- Updated dependencies [f485255]
- Updated dependencies [b7c9316]
- Updated dependencies [4a0b5c0]
  - chat@4.40.0
  - @chat-adapter/shared@4.40.0
## @chat-adapter/slack@4.40.0

### Minor Changes

- 51322dd: Decode the bot's own mention in incoming Slack messages. The
adapter now resolves `<@U_BOT>` to the bot's display name
(`@<DisplayName>`) the same way it resolves every other user mention,
instead of leaving the raw user-ID markup in place, and sets `isMention`
on the parsed message by detecting the bot's ID in the raw event text.
This keeps `message.text` self-describing for downstream consumers (LLM
prompts, classifiers) while preserving mention detection, which
previously depended on the raw ID markup surviving in the text.
- d4a1f03: Rotate long-running native Slack streams before Slack expires
them. Once a stream segment passes `streamSegmentMaxAgeMs` (default four
minutes) the adapter finalizes it at the next paragraph break and
continues the reply in a new message, closing and reopening code fences,
repeating table headers, replaying open task cards and the plan title,
and keeping the agent session in `processing`. A segment Slack already
expired during an idle gap is recovered the same way instead of failing
the reply.
- 2cc8cc3: Surface custom status text in the Agent messaging experience.
`startTyping` and `setAssistantStatus` with a custom status now call the
legacy `assistant.threads.setStatus` endpoint, whose compatibility
bridge renders the text in the agent-session loading UX — instead of
silently dropping the text and showing the generic "Working…" indicator.
Clearing (empty status) still transitions the session to `active` via
the Agent Sessions lifecycle.

### Patch Changes

- 78021c0: pass workspace context to suggested prompt resolvers in Agent
view
- 8b6d7f3: Reactivate Slack Agent Sessions when `startTyping` receives
an empty status.
- c2b6bff: Use the Slack bot user ID for bot-authored messages when a
bot profile is available.
- f485255: Harden webhook tenant isolation, require explicit Google Chat
bot identity for reliable mention handling, use native Google Chat
pagination, isolate Slack caches, and bound recording storage.
- 8fdaf4a: Stream post-and-edit fallback updates through Slack's
`markdown_text` field instead of `text`, so live-updating messages
render markdown while the stream is in progress (and get the
12,000-character ceiling rather than 4,000)
- 7609d8f: Validate external request targets before sending credentials,
message content, or attachment requests.
- Updated dependencies [f485255]
- Updated dependencies [b7c9316]
- Updated dependencies [4a0b5c0]
  - chat@4.40.0
  - @chat-adapter/shared@4.40.0
## @chat-adapter/teams@4.40.0

### Minor Changes

- aaeede7: emit Teams bot-join events and expose the bot user ID
- 4a0b5c0: Add `tooltip` to `Button` and `LinkButton`, and a `width`
hint to `Card`. The Teams adapter and the `@chat-adapter/teams/cards`
subpath render them as the Adaptive Card action `tooltip` and the
`msteams` full-width card property; other adapters ignore them. Emitted
Adaptive Cards now declare schema version 1.5, which is the version that
introduced action tooltips. Buttons with a `callbackUrl` keep their
`tooltip` and other fields when the URL is swapped for a callback token.

### Patch Changes

- a8de95b: Fall back to Teams activity group metadata when the explicit
conversation type is missing.
- f485255: Harden webhook tenant isolation, require explicit Google Chat
bot identity for reliable mention handling, use native Google Chat
pagination, isolate Slack caches, and bound recording storage.
- 7062c39: preserve outgoing @names as plain text instead of generating
mention markup without matching entities
- 7609d8f: Validate external request targets before sending credentials,
message content, or attachment requests.
- Updated dependencies [f485255]
- Updated dependencies [b7c9316]
- Updated dependencies [4a0b5c0]
  - chat@4.40.0
  - @chat-adapter/shared@4.40.0
## @chat-adapter/telegram@4.40.0

### Minor Changes

- 043386b: Add Telegram Business mode support. Opt in via `businessMode:
true`.
  
The adapter handles `business_connection`, `business_message`, and
`edited_business_message` updates, encodes business threads as
`telegram:biz:{connectionId}:{chatId}`, and passes
`business_connection_id` on outbound sends, edits, typing, file uploads,
and inline-keyboard callbacks. Business threads are their own channel,
slash commands route through `onSlashCommand`, deletes use
`deleteBusinessMessages`, and connection state is cached in the state
adapter so a revoked connection is honoured by every instance. Reactions
on business threads throw a `NotImplementedError`, since the Bot API has
no business variant of `setMessageReaction`.

### Patch Changes

- 43dba3d: Skip unused plain-text conversion for rich and Markdown
native draft updates. Plain-text fallback and final delivery keep their
existing behavior.
- Updated dependencies [f485255]
- Updated dependencies [b7c9316]
- Updated dependencies [4a0b5c0]
  - chat@4.40.0
  - @chat-adapter/shared@4.40.0
## @chat-adapter/whatsapp@4.40.0

### Minor Changes

- 31bce0a: export `WhatsAppApiError` for non-2xx Graph API responses. It
carries Meta's numeric `errorCode`, `providerMessage`, `type`,
`details`, `subcode`, `traceId`, the HTTP `status`, and the `raw`
envelope, and maps `code` onto the shared `AdapterError` taxonomy
(`RATE_LIMITED`, `AUTH_FAILED`, `PERMISSION_DENIED`, `NOT_FOUND`).
Transport failures and unparseable response bodies now throw
`NetworkError` instead of leaking raw fetch errors, and error messages
carry Meta's message or a bounded excerpt instead of the full response
body.

### Patch Changes

- Updated dependencies [f485255]
- Updated dependencies [b7c9316]
- Updated dependencies [4a0b5c0]
  - chat@4.40.0
  - @chat-adapter/shared@4.40.0
## chat@4.40.0

### Minor Changes

- 4a0b5c0: Add `tooltip` to `Button` and `LinkButton`, and a `width`
hint to `Card`. The Teams adapter and the `@chat-adapter/teams/cards`
subpath render them as the Adaptive Card action `tooltip` and the
`msteams` full-width card property; other adapters ignore them. Emitted
Adaptive Cards now declare schema version 1.5, which is the version that
introduced action tooltips. Buttons with a `callbackUrl` keep their
`tooltip` and other fields when the URL is swapped for a callback token.

### Patch Changes

- f485255: Harden webhook tenant isolation, require explicit Google Chat
bot identity for reliable mention handling, use native Google Chat
pagination, isolate Slack caches, and bound recording storage.
- b7c9316: Tighten AI tool and queued-message scoping, isolate
direct-message conversations, preserve ephemeral follow-ups, consume
callback tokens once, and mark external link metadata as untrusted.
## @chat-adapter/discord@4.40.0

### Patch Changes

- b7c9316: Tighten AI tool and queued-message scoping, isolate
direct-message conversations, preserve ephemeral follow-ups, consume
callback tokens once, and mark external link metadata as untrusted.
- Updated dependencies [f485255]
- Updated dependencies [b7c9316]
- Updated dependencies [4a0b5c0]
  - chat@4.40.0
  - @chat-adapter/shared@4.40.0
## @chat-adapter/github@4.40.0

### Patch Changes

- Updated dependencies [f485255]
- Updated dependencies [b7c9316]
- Updated dependencies [4a0b5c0]
  - chat@4.40.0
  - @chat-adapter/shared@4.40.0
## @chat-adapter/instagram@4.40.0

### Patch Changes

- 7609d8f: Validate external request targets before sending credentials,
message content, or attachment requests.
- Updated dependencies [f485255]
- Updated dependencies [b7c9316]
- Updated dependencies [4a0b5c0]
  - chat@4.40.0
  - @chat-adapter/shared@4.40.0
## @chat-adapter/linear@4.40.0

### Patch Changes

- 3d2cb22: Keep Linear agent-session events on one stable thread and
handle sessions created by automation or without a root comment.
- Updated dependencies [f485255]
- Updated dependencies [b7c9316]
- Updated dependencies [4a0b5c0]
  - chat@4.40.0
  - @chat-adapter/shared@4.40.0
## @chat-adapter/messenger@4.40.0

### Patch Changes

- Updated dependencies [f485255]
- Updated dependencies [b7c9316]
- Updated dependencies [4a0b5c0]
  - chat@4.40.0
  - @chat-adapter/shared@4.40.0
## @chat-adapter/notion@4.40.0

### Patch Changes

- Updated dependencies [f485255]
- Updated dependencies [b7c9316]
- Updated dependencies [4a0b5c0]
  - chat@4.40.0
  - @chat-adapter/shared@4.40.0
## @chat-adapter/shared@4.40.0

### Patch Changes

- Updated dependencies [f485255]
- Updated dependencies [b7c9316]
- Updated dependencies [4a0b5c0]
  - chat@4.40.0
## @chat-adapter/twilio@4.40.0

### Patch Changes

- b7c9316: Tighten AI tool and queued-message scoping, isolate
direct-message conversations, preserve ephemeral follow-ups, consume
callback tokens once, and mark external link metadata as untrusted.
- Updated dependencies [f485255]
- Updated dependencies [b7c9316]
- Updated dependencies [4a0b5c0]
  - chat@4.40.0
  - @chat-adapter/shared@4.40.0
## @chat-adapter/web@4.40.0

### Patch Changes

- Updated dependencies [f485255]
- Updated dependencies [b7c9316]
- Updated dependencies [4a0b5c0]
  - chat@4.40.0
  - @chat-adapter/shared@4.40.0
## @chat-adapter/x@4.40.0

### Patch Changes

- 7609d8f: Validate external request targets before sending credentials,
message content, or attachment requests.
- Updated dependencies [f485255]
- Updated dependencies [b7c9316]
- Updated dependencies [4a0b5c0]
  - chat@4.40.0
  - @chat-adapter/shared@4.40.0
## @chat-adapter/state-ioredis@4.40.0

### Patch Changes

- Updated dependencies [f485255]
- Updated dependencies [b7c9316]
- Updated dependencies [4a0b5c0]
  - chat@4.40.0
## @chat-adapter/state-memory@4.40.0

### Patch Changes

- Updated dependencies [f485255]
- Updated dependencies [b7c9316]
- Updated dependencies [4a0b5c0]
  - chat@4.40.0
## @chat-adapter/state-pg@4.40.0

### Patch Changes

- Updated dependencies [f485255]
- Updated dependencies [b7c9316]
- Updated dependencies [4a0b5c0]
  - chat@4.40.0
## @chat-adapter/state-redis@4.40.0

### Patch Changes

- Updated dependencies [f485255]
- Updated dependencies [b7c9316]
- Updated dependencies [4a0b5c0]
  - chat@4.40.0
## @chat-adapter/tests@4.40.0

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-09-05 06:06:47 +00:00

11 KiB
Raw Permalink Blame History

@chat-adapter/shared

4.40.0

Patch Changes

4.39.0

Minor Changes

  • 153bd96: guard Messenger attachment downloads against SSRF and oversized responses

    downloadAttachment in @chat-adapter/shared accepts an optional hosts allowlist that restricts downloads, including redirect targets, to the given hosts and their subdomains. The Messenger adapter uses it to download attachment media only from Meta's fbsbx.com and fbcdn.net hosts, with the shared SSRF guard, 25 MB size cap, and 30 second timeout. External fallback and link-share URLs are rejected before any network request.

  • bb92688: secure anonymous attachment downloads against SSRF and oversized responses

    @chat-adapter/shared gains downloadAttachment, a guarded downloader that refuses private and internal addresses (as URL literals, through DNS resolution, and after redirects), decodes compressed responses, caps the body size at 25 MB, and bounds the whole download with a 30 second timeout. All of these are configurable, including the transport for proxied deployments.

    The Teams adapter uses it for anonymous attachment downloads. HTTPS attachments on any public host keep working, plain-HTTP URLs are refused, and the Bot Framework Emulator's loopback connector now uses bot authentication so local development keeps working.

  • e71bfea: Add normalizeCodeFences to @chat-adapter/shared: a code-fence normalizer for platforms whose triple-backtick fences treat the text after the opening fence as code rather than a CommonMark info string. Only paired fences become code blocks (unpaired fences, fences inside inline code, and fences on quoted lines stay literal text), text following a closing fence cannot be promoted to a block construct, and per-segment callbacks keep text-level rewrites out of code content.

    The WhatsApp adapter now uses it when parsing incoming messages: the first line of a code block is preserved in message text and formatted content, and bold/strikethrough rewriting no longer corrupts fenced code.

  • b6fa24c: guard attachment downloads across the remaining adapters

    Slack, Discord, and WhatsApp attachment downloads now go through the shared guarded downloader: private and internal addresses are refused (as URL literals, through DNS resolution, and after redirects), responses are capped at 25 MB, and downloads time out after 30 seconds. Slack sends the bot token only on hops to trusted Slack origins, and WhatsApp keeps its access token on Meta's media hosts and the configured Graph origin. Telegram enforces the same size cap and timeout with the Web Fetch API so downloads keep working in runtimes like Cloudflare Workers.

    downloadAttachment in @chat-adapter/shared now resolves headers per hop (pass a function to control what each redirect target receives), forwards the resolved headers to custom transports, and accepts an onResponse hook to reject unexpected final responses before the body is read.

Patch Changes

4.38.1

Patch Changes

4.38.0

Patch Changes

4.37.0

Patch Changes

4.36.0

Patch Changes

4.35.0

Patch Changes

4.34.0

Patch Changes

4.33.0

Minor Changes

  • d4c52ca: add replaceBareMentions, a context-aware bare-@mention resolver that skips code spans, URLs, schemeless hosts, and existing angle-bracket tokens before handing each real @name to a platform-specific replacer

Patch Changes

4.32.0

Patch Changes

4.31.0

Patch Changes

4.30.0

Patch Changes

4.29.0

Minor Changes

  • add2730: support typed Telegram attachment uploads

Patch Changes

4.28.1

Patch Changes

4.28.0

Minor Changes

  • 9824d33: Security fixes for HIGH-severity findings:

    • adapter-slack: Replace timing-unsafe !== with crypto.timingSafeEqual when validating the x-slack-socket-token header on forwarded socket-mode events.
    • adapter-github: In multi-tenant App mode, eagerly auto-detect the bot user ID on the first installation client / first webhook so isMe checks work and self-reply loops are prevented. Falls back to apps.getAuthenticated + users.getByUsername when users.getAuthenticated is unavailable for installation tokens.
    • adapter-linear: Add optional encryptionKey config (or LINEAR_ENCRYPTION_KEY env var) that AES-256-GCM-encrypts accessToken and refreshToken at rest in the state store. Tolerates plaintext records for zero-downtime rollout.
    • adapter-gchat: Fail-closed by default — the constructor now throws ValidationError if neither googleChatProjectNumber nor pubsubAudience is configured. To accept unverified webhooks (development only), set the new disableSignatureVerification: true flag (or GOOGLE_CHAT_DISABLE_SIGNATURE_VERIFICATION=true). Mirrors the Slack adapter's signing-secret requirement.
    • adapter-shared: New decodeKey / encryptToken / decryptToken / isEncryptedTokenData utilities (AES-256-GCM, hex or base64 32-byte keys), shared by Slack and Linear.

Patch Changes

4.27.0

Patch Changes

4.26.0

Patch Changes

4.25.0

Patch Changes

4.24.0

Patch Changes

4.23.0

Patch Changes

4.22.0

Patch Changes

4.21.0

Patch Changes

4.20.2

Patch Changes

4.20.1

Patch Changes

4.20.0

Patch Changes

4.19.0

Patch Changes

4.18.0

Patch Changes

4.17.0

Patch Changes

4.16.1

Patch Changes

4.16.0

Minor Changes

  • 02e7ef6: Implements table markdown rendering, and fully streaming markdown rendering including for Slack which has native streaming. Overhauls adapters to have better fallback-render behavior

Patch Changes

4.15.0

Minor Changes

Patch Changes

4.14.0

Patch Changes

4.13.4

Patch Changes

4.13.3

Patch Changes

4.13.2

Patch Changes

4.13.1

Patch Changes

4.13.0

Patch Changes

4.12.0

Patch Changes

4.11.0

Patch Changes

4.10.1

Patch Changes

4.10.0

Patch Changes

4.9.1

Patch Changes

  • 18ce1d0: Exclude action buttons from card fallback text so they no longer appear in Slack notification previews
    • chat@4.9.1

4.9.0

Patch Changes

  • chat@4.9.0

4.8.0

Patch Changes

  • Updated dependencies [cca9867]
    • chat@4.8.0

4.7.2

Patch Changes

  • chat@4.7.2

4.7.1

Patch Changes

  • Updated dependencies [160f1f7]
    • chat@4.7.1

4.7.0

Patch Changes

  • Updated dependencies [a13f43e]
    • chat@4.7.0

4.6.0

Patch Changes

  • Updated dependencies [68e3f74]
    • chat@4.6.0

4.5.0

Patch Changes

  • Updated dependencies [efa6b36]
    • chat@4.5.0

4.4.1

Patch Changes

4.4.0

Patch Changes

  • Updated dependencies [8ca6371]
    • chat@4.4.0

4.3.0

Minor Changes

Patch Changes

Reference in New Issue View Git Blame Copy Permalink