Commit graph

788 commits

Author SHA1 Message Date
bearsyankees
bee88d95d2 Fix provider token request handling 2026-08-28 10:31:12 -04:00
bearsyankees
de5fcfb283 Allow signed storage upload URLs 2026-08-28 09:56:09 -04:00
bearsyankees
3ca4f4ce72 Clarify chat file path handling 2026-08-28 09:51:21 -04:00
bearsyankees
916af24a19 Correct cloud vulnerability status guidance 2026-08-28 09:46:15 -04:00
bearsyankees
6b66606dfd Clarify cloud test user MFA options 2026-08-28 09:34:13 -04:00
bearsyankees
6a8c89f128 Harden cloud CLI type boundaries 2026-08-28 09:22:18 -04:00
bearsyankees
45353743b8 Merge remote-tracking branch 'origin/main' into devin/1787772918-strix-login 2026-08-28 09:04:15 -04:00
bearsyankees
b984038ed5 Add agent-friendly managed cloud CLI 2026-08-28 09:04:12 -04:00
bearsyankees
1465b57a78 fix(cloud): infer scan type from local targets 2026-08-27 18:42:57 -04:00
bearsyankees
7095d1dcae feat(cloud): upload local source for managed scans 2026-08-27 18:11:07 -04:00
bearsyankees
bb32a7d4b0 feat(cloud): tailor human list and detail views 2026-08-27 17:50:32 -04:00
bearsyankees
cf7224923c feat(cli): add native shell completions 2026-08-27 17:48:37 -04:00
bearsyankees
9aa6b862a9 feat(cloud): improve human navigation and output 2026-08-27 17:46:29 -04:00
bearsyankees
4765838330 fix(cloud): make session command help non-destructive 2026-08-27 17:35:56 -04:00
bearsyankees
1b9f41d244 fix(cloud): preserve scopes when switching workspaces 2026-08-27 17:30:16 -04:00
yoni-at-strix
717ffc8f4c
Isolate MCP connections per task and surface connection status in the UIs (#1181) 2026-08-27 14:10:44 -07:00
bearsyankees
c59e36d353 fix(cloud): send required PR review integration fields 2026-08-27 15:58:42 -04:00
bearsyankees
a02c56423c fix(cloud): align agent commands with API contracts 2026-08-27 15:53:56 -04:00
Alex Schapiro
3580412178 fix(cloud): drop knowledge query and settings commands removed from the API 2026-08-27 18:52:26 +00:00
bearsyankees
41927358eb fix(cloud): preserve API auth during MPP payment 2026-08-27 01:01:32 -04:00
Alex Schapiro
ca0eddc481 docs(cloud): recommend the Stripe agent wallet as the default payment path 2026-08-27 04:45:19 +00:00
Alex Schapiro
2df99a2873 feat(cli): pass a Stripe payment method to the top-up wallet client 2026-08-26 23:36:42 +00:00
yoni-at-strix
cbb0f57058
Reach MCP tools on demand instead of registering every one (#1175) 2026-08-26 16:31:08 -07:00
Alex Schapiro
268769fc45 fix(cli): report a leftover temporary secret file instead of hiding it 2026-08-26 23:04:35 +00:00
Alex Schapiro
8d66c66968 feat(cli): manage workspaces and hosted onboarding links from strix cloud 2026-08-26 23:01:36 +00:00
Ahmed Allam
8b655de615 Mirror the run's threat models into its state dir so resume keeps them 2026-08-27 01:36:47 +03:00
Ahmed Allam
7d8d71beea Scope threat models to the current run instead of caching them on disk 2026-08-27 01:36:47 +03:00
Alex Schapiro
56008a6c50 feat(cli): add the strix cloud command surface for the managed platform 2026-08-26 22:30:09 +00:00
Alex Schapiro
44fb7ac969 fix(login): bound device flow timing values and clean up unreplaced secret temp files 2026-08-26 21:54:04 +00:00
Alex Schapiro
ef722c2ee0 fix(login): show the configured platform host in the sign-in banner 2026-08-26 21:48:05 +00:00
Alex Schapiro
93dc0019fa fix(login): treat overflowing timing values as invalid 2026-08-26 21:43:54 +00:00
Alex Schapiro
5c61a2aee4 fix(login): tolerate malformed selection containers and remove unreadable credential files on logout 2026-08-26 21:32:52 +00:00
Alex Schapiro
baf0ff41fd fix(login): skip the scope prompt when stdin is not a terminal 2026-08-26 21:28:56 +00:00
Alex Schapiro
04a77e50e7 fix(login): reject malformed API token values in sign-in responses 2026-08-26 21:24:57 +00:00
Alex Schapiro
d6ccb7c38a feat(login): interactive workspace and scope selection with presets 2026-08-26 21:23:13 +00:00
Alex Schapiro
67082e21d9 fix(cli): reject sign-in responses without an API token 2026-08-26 21:02:57 +00:00
Alex Schapiro
8dd26f016f fix(cli): handle malformed login responses and credential file failures 2026-08-26 20:56:04 +00:00
Alex Schapiro
6cb78d495a docs: document strix login and managed billing in README, AGENTS, docs, and managed skill 2026-08-26 20:53:13 +00:00
Alex Schapiro
17007bd43c feat(cli): add --scopes flag to strix login 2026-08-26 19:58:21 +00:00
Alex Schapiro
28590a52e0 feat(cli): add strix login for managed platform sign-in (device flow) 2026-08-26 19:35:18 +00:00
alex s
a5856108a7
fix(tui): restore base foreground after ANSI resets (#1169) 2026-08-26 14:11:51 -04:00
devin-ai-integration[bot]
bfaaa904f2
fix(update): re-exec runs the new binary after self-update (endless update-prompt loop) (#1168)
Co-authored-by: Ahmed Allam <ahmed39652003@gmail.com>
2026-08-25 15:13:35 -07:00
alex s
187f41f36f
Treat literal 'null'/'none' strings as absent for optional tool args (#1164)
* Treat literal 'null'/'none' strings as absent for optional tool args

Models routinely pass the literal string "null" or "none" instead of
omitting an optional argument. Taken at face value it becomes a filter
that matches nothing, so tools like list_notes / list_reports /
list_requests silently return no results.

Coerce such values to None in the central argument-coercion layer, but
only for parameters the schema allows to be null (or that are absent from
a declared "required" list), so required strings keep the literal value.
The list/filter helpers normalize the same values too, so a direct call
can't regress.

* Limit nullish coercion to query tools and keep literal tags

A literal "null"/"none" is only a mistake where the argument is a filter, so
gate the coercion on read-only query tools; a tool that writes keeps the value,
which stops update_note(content="none") from being read as "leave unchanged".

Stop dropping nullish entries from a notes tag filter too: tags are free-form,
so a literal "none" tag stays filterable and mixed tag queries keep every
branch.
2026-08-25 13:21:12 -04:00
yoni-at-strix
f4ef8867f6
Add MCP server support (#1137)
* add a generic MCP client and a config for connecting MCP servers

* Add MCP docs and CLI polish: docs page, startup connect summary, --mcp-config flag, compact tool output

* Add MCP connection notes and per-run selection; clean up on cancel and dedupe names

* Show errored MCP tool calls as failed in the TUI

* Sanitize namespaced tool names so model APIs accept them

* Show MCP tool calls distinctly in the terminal and the run viewer

* Say what MCP servers are worth connecting for

* Correct the notes docstring to match how notes reach the agent

* keep the mcp tests from reading your shell's STRIX_MCP_* vars
2026-08-24 14:00:16 -04:00
devin-ai-integration[bot]
391d81bea7
feat(agents): evidence discipline, and coverage as a first-class artifact (#961)
Co-authored-by: Ahmed Allam <ahmed39652003@gmail.com>
2026-08-24 03:34:09 -07:00
devin-ai-integration[bot]
1c499c5b2d
perf: bootstrap Caido concurrently with the scan start (#1143)
Co-authored-by: Ahmed Allam <ahmed39652003@gmail.com>
2026-08-21 12:09:59 -07:00
devin-ai-integration[bot]
1ce43d1b94
perf: take heavy imports off the startup path and pre-warm them in the background (#1141)
Co-authored-by: Ahmed Allam <ahmed39652003@gmail.com>
2026-08-20 20:24:08 -07:00
Alex Schapiro
2cc8167814 docs(skills): correct gRPC guidance, a .proto is not a spec target 2026-08-20 19:27:04 -04:00
Alex Schapiro
d6a3ca7e58 docs(skills): document --workspace-file for supporting files 2026-08-20 19:27:04 -04:00
Alex Schapiro
9099710cef docs(skills): fix nonexistent --mount flag, document real targeting flags, add application-security-testing skill
- Remove --mount from two skills: the flag does not exist in the CLI. Local
  paths are mounted writable when passed with -t.
- Document --target-list, --scope-mode, --diff-base, and OpenAPI/Postman
  targets, so agents stop putting spec URLs in --instruction prose.
- Add the application-security-testing skill as the entry point for
  whole-product AppSec requests, routing each asset to the right workflow.
- Drop contractions and Latin abbreviations across the skill prose.
2026-08-20 19:27:04 -04:00