Peter Steinberger
9714495797
test: keep plugin runtime symlink assertion on symlink path
2026-04-10 10:28:53 +01:00
Peter Steinberger
ec5ef68b0c
test: fix latest fast-lane boundaries
2026-04-10 09:53:17 +01:00
Peter Steinberger
67ede66b3e
test: refresh latest main expectations
2026-04-10 09:47:57 +01:00
samzong
723dec0432
[Feat] Gateway: add commands.list RPC method ( #62656 )
...
Merged via squash.
Co-authored-by: samzong <samzong.lu@gmail.com >
Co-authored-by: Frank Yang <frank.ekn@gmail.com >
Reviewed-by: @frankekn
2026-04-10 14:28:47 +08:00
Qasim Soomro
71617ef2f0
fix: allow private network provider request opt-in ( #63671 )
...
* feat(models): allow private network via models.providers.*.request
Add optional request.allowPrivateNetwork for operator-controlled self-hosted
OpenAI-compatible bases (LAN/overlay/split DNS). Plumbs the flag into
resolveProviderRequestPolicyConfig for streaming provider HTTP and OpenAI
responses WebSocket so SSRF policy can allow private-resolved model URLs
when explicitly enabled.
Updates zod schema, config help/labels, and unit tests for sanitize/merge.
* agents thread provider request into websocket stream
* fix(config): scope allowPrivateNetwork to model requests
* fix(agents): refresh websocket manager on request changes
* fix(agents): scope runtime private-network overrides to models
* fix: allow private network provider request opt-in (#63671 ) (thanks @qas)
---------
Co-authored-by: Ayaan Zaidi <hi@obviy.us >
2026-04-10 11:11:03 +05:30
Josh Avant
33ad806a14
Browser: consolidate duplicate helper surfaces via facade delegation ( #63957 )
...
* Plugin SDK: route browser helper surfaces through browser facade
* Browser doctor flow: add facade path regression and export parity guards
* Contracts: dedupe browser facade parity checks without reducing coverage
* Browser tests: restore host-inspection semantics coverage in extension
* fix: add changelog note for browser facade consolidation (#63957 ) (thanks @joshavant)
2026-04-09 19:49:04 -05:00
Vincent Koc
c87994bc9a
fix(plugins): split registry type surface
2026-04-09 09:05:11 +01:00
Peter Steinberger
719f06510c
chore: bump version to 2026.4.10
2026-04-09 03:56:22 +01:00
Mason Huang
ba636d1206
plugin-sdk: keep command status compatibility path light
2026-04-09 01:35:15 +01:00
Mason Huang
aa15de8fdc
plugin-sdk: split command status surface
2026-04-09 01:35:15 +01:00
Peter Steinberger
39cc6b7dc7
fix: stabilize character eval and Qwen model routing
2026-04-09 01:04:09 +01:00
Peter Steinberger
fbbd644d7a
plugins: load lightweight provider discovery entries
2026-04-09 00:33:33 +01:00
Altay
554bc0a9fd
fix(plugins): keep test helpers out of contract barrels ( #63311 )
...
Merged via squash.
Prepared head SHA: 769e90c6af9790196+altaywtf@users.noreply.github.com >
Co-authored-by: altaywtf <9790196+altaywtf@users.noreply.github.com >
Reviewed-by: @altaywtf
2026-04-08 22:59:05 +01:00
Agustin Rivera
dafcaf9d69
fix(browser): harden browser control override loading ( #62663 )
...
* fix(browser): harden browser control overrides
* fix(lint): prepare boundary artifacts for extension oxlint
* docs(changelog): add browser override hardening entry
* fix(lint): avoid duplicate boundary prep
---------
Co-authored-by: Devin Robison <drobison@nvidia.com >
Co-authored-by: Devin Robison <drobison00@users.noreply.github.com >
2026-04-08 13:24:47 -06:00
Peter Steinberger
9e4f478f86
feat(plugins): support provider auth aliases
2026-04-08 19:03:04 +01:00
Pavan Kumar Gondhi
2d97eae53e
fix(plugins): prevent untrusted workspace plugins from hijacking bundled provider auth choices [AI] ( #62368 )
...
* fix: address issue
* fix: address review feedback
* docs(changelog): add onboarding auth-choice guard entry
* fix: address PR review feedback
* fix: address PR review feedback
* fix: address PR review feedback
* fix: address PR review feedback
* fix: address PR review feedback
* fix: address PR review feedback
* fix: address PR review feedback
* fix: address PR review feedback
---------
Co-authored-by: Devin Robison <drobison@nvidia.com >
2026-04-08 23:08:14 +05:30
Peter Steinberger
7f5d129a37
fix: keep runtime task test harness behind task seams
2026-04-08 16:53:46 +01:00
Peter Steinberger
34f73abfd3
refactor: dedupe plugin metadata test helpers
2026-04-08 15:58:46 +01:00
Peter Steinberger
e98dc17866
refactor: dedupe plugin test harnesses
2026-04-08 15:58:45 +01:00
Peter Steinberger
49f3ede504
refactor: dedupe shared helper branches
2026-04-08 15:58:45 +01:00
Peter Steinberger
edf6b490a6
fix: harden bundled plugin dependency release checks
2026-04-08 15:15:44 +01:00
Peter Steinberger
557559cd42
test: keep bundled metadata sidecar scan inventory-only
2026-04-08 15:12:33 +01:00
Peter Steinberger
e915ef7a25
test: keep public artifact coverage on cheap boundaries
2026-04-08 15:05:37 +01:00
Peter Steinberger
841a1566ef
test: keep web provider artifact test in boundary
2026-04-08 14:37:19 +01:00
Peter Steinberger
e65d6ebb63
test: fix full suite CI test isolation
2026-04-08 14:29:19 +01:00
Peter Steinberger
307979a4c7
test: restore manifest-only web provider coverage
2026-04-08 14:22:02 +01:00
Peter Steinberger
37473142d8
test: keep web provider artifact test in boundary
2026-04-08 14:11:35 +01:00
Peter Steinberger
5aa8579dd7
test: keep provider policy artifact coverage narrow
2026-04-08 14:00:47 +01:00
Peter Steinberger
a5515db1e8
test: keep web provider artifact coverage manifest-only
2026-04-08 13:58:27 +01:00
Peter Steinberger
5dbf607f73
test: guard loader fixtures against broad sdk imports
2026-04-08 13:28:32 +01:00
Peter Steinberger
640d39d482
test: inline cli metadata channel fixture
2026-04-08 12:58:48 +01:00
Peter Steinberger
4e41cf7a6e
plugins: read contract inventory from manifests
2026-04-08 12:58:42 +01:00
Peter Steinberger
2b6b627fd1
test: stabilize plugin boundary invariants
2026-04-08 12:13:41 +01:00
scoootscooob
d52d5ad6ff
release: mirror bundled channel deps at root ( #63065 )
...
Merged via squash.
Prepared head SHA: ac26799a54167050519+scoootscooob@users.noreply.github.com >
Co-authored-by: scoootscooob <167050519+scoootscooob@users.noreply.github.com >
Reviewed-by: @scoootscooob
2026-04-08 04:00:17 -07:00
Peter Steinberger
4c65fa8eae
fix(test): refresh plugin-sdk package boundary exports
2026-04-08 10:29:37 +01:00
Vincent Koc
208c49841c
perf(plugins): trim explicit web provider artifact imports
2026-04-08 10:28:09 +01:00
Vincent Koc
b2076f0a3f
perf(plugins): prefer require for source public artifacts
2026-04-08 10:24:07 +01:00
Peter Steinberger
9b0f7e0e82
fix: keep bundled dir test argv mutable
2026-04-08 09:58:22 +01:00
Peter Steinberger
95e397a266
refactor: dedupe repeated test helpers
2026-04-08 09:58:22 +01:00
Vincent Koc
092c56ce46
fix(plugins): prefer source bundled tree in tsx runs
2026-04-08 09:48:45 +01:00
Peter Steinberger
a5b54e7c01
test: keep provider auth onboarding tests off runtime auth
2026-04-08 09:44:17 +01:00
Vincent Koc
be530f085d
refactor(plugin-sdk): share tool payload extraction
2026-04-08 09:07:28 +01:00
Vincent Koc
a04b9a27fb
refactor(plugins): reuse canonical media contract registries
2026-04-08 09:07:28 +01:00
Vincent Koc
f38035a7b6
refactor(plugin-sdk): share web-search contract fields
2026-04-08 09:07:28 +01:00
Vincent Koc
2e1ec9653c
refactor(plugins): reuse interactive registry state
2026-04-08 09:07:28 +01:00
Vincent Koc
3574aedd68
test(plugins): refresh telegram runtime api guardrail
2026-04-08 09:07:05 +01:00
Vincent Koc
490c9c80ef
perf(plugin-sdk): split web search config contract
2026-04-08 09:03:07 +01:00
Peter Steinberger
8cbd60d203
chore: prepare 2026.4.9 release
2026-04-08 08:02:53 +01:00
Peter Steinberger
dce3abaef7
fix: align Z.AI endpoint detection with GLM-5.1 default ( #61998 ) (thanks @serg0x)
2026-04-08 04:38:39 +01:00
Peter Steinberger
4f8471617a
chore: prepare 2026.4.8
2026-04-08 04:21:51 +01:00
