Commit Graph

30 Commits

Author SHA1 Message Date
Alix-007
605aede38c fix(exa): bound untrusted search JSON response reads (#96038)
Exa search success responses were read via an unbounded `await
response.json()`, so a misbehaving or hostile endpoint could stream an
arbitrarily large body into memory before parsing. Read the success
body through the shared bounded reader (16 MiB cap, the same limit other
bundled providers use) and cancel the stream on overflow. This mirrors
the error-body bound already in place and the #95103/#95108 response
-limit campaign on the success-JSON side.

AI-assisted.
2026-06-24 10:57:37 -04:00
Vincent Koc
1e53ee4fd5 fix(exa): bound search error bodies 2026-06-19 19:18:38 +02:00
Peter Steinberger
4fa5092cdc docs: document small extension sources 2026-06-04 21:02:07 -04:00
Peter Steinberger
d095d1663b fix(exa): reject non-decimal search counts 2026-05-29 06:49:23 -04:00
Peter Steinberger
59d4327698 fix: validate web search count integers 2026-05-28 18:38:39 -04:00
Peter Steinberger
4f4d108639 chore(lint): remove underscore-dangle allow list (#83542)
* chore(lint): reduce underscore-dangle exceptions

* chore(lint): reduce more underscore exceptions

* chore(lint): remove underscore-dangle allow list

* fix(lint): repair underscore cleanup regressions

* test(lint): track version define suppression
2026-05-18 14:56:06 +01:00
Vincent Koc
31bfe7f084 fix(web-search): wrap malformed provider json 2026-05-15 09:04:20 +08:00
Shakker
748788177b test: tighten exa provider assertions 2026-05-11 08:18:30 +01:00
Shakker
0aac9e8758 test: clear exa broad matcher 2026-05-10 16:39:14 +01:00
Peter Steinberger
827b0de0ce refactor: reduce plugin sdk surface 2026-05-10 12:37:10 +01:00
Peter Steinberger
92c702b97a test: tighten provider config helper assertions 2026-05-08 20:52:17 +01:00
Shakker
b7bdcaeb88 test: tighten web search provider assertions 2026-05-08 18:58:20 +01:00
Peter Steinberger
12342ed0e8 fix(web-search): support Exa baseUrl 2026-05-02 06:06:40 +01:00
Peter Steinberger
98ba5fd952 fix(extensions): type web search onboarding scopes 2026-04-20 22:14:50 +01:00
Peter Steinberger
0324114293 refactor: share exa web search provider base 2026-04-20 22:05:39 +01:00
Peter Steinberger
1f1ff0567a refactor(lint): reduce map spread patterns 2026-04-18 19:27:43 +01:00
Peter Steinberger
a7e029fde9 refactor: cache provider tool runtimes 2026-04-18 19:05:00 +01:00
Gustavo Madeira Santana
b1c032245c test: lazy-load exa web search runtime
Keep Exa provider registration metadata-light and move request,
cache, validation, and test helpers behind a runtime seam.
2026-04-17 18:01:58 -04:00
Gustavo Madeira Santana
a464f5926b Secrets: avoid broad web search discovery for single plugin config
Add an Exa web-search contract artifact and use single bundled plugin-scoped webSearch config as a provider hint. This keeps runtime secret resolution on metadata-only surfaces instead of importing full provider tool implementations.
2026-04-17 13:38:24 -04:00
Peter Steinberger
5fa3b8d7a0 refactor: dedupe provider trimmed readers 2026-04-08 00:09:41 +01:00
Peter Steinberger
b39c7eece6 refactor: dedupe extension lowercase readers 2026-04-07 12:18:01 +01:00
Peter Steinberger
86361f4fca fix: restore ci after rebase drift 2026-04-07 08:40:35 +01:00
Vincent Koc
d88eb0e031 fix(exa): show Exa in setup pickers 2026-04-06 23:09:46 +01:00
Peter Steinberger
af62a2c2e4 style: fix extension lint violations 2026-04-06 14:53:55 +01:00
Peter Steinberger
73ead2425b test: drop redundant web search registration smokes 2026-04-01 02:57:08 +01:00
Peter Steinberger
83591fabfb test: consolidate plugin provider suites 2026-03-25 00:42:09 +00:00
Peter Steinberger
6f6468027a refactor: dedupe test and runtime seams 2026-03-24 23:33:30 +00:00
Vincent Koc
a45ebf74bb fix(web-search): align Exa plugin with current API 2026-03-22 21:16:08 -07:00
Vincent Koc
ee749b520e fix(exa): align freshness typing and config docs 2026-03-22 21:10:49 -07:00
Vincent Koc
1042b59471 feat(web-search): add bundled Exa plugin (#52617) 2026-03-22 20:57:33 -07:00