Commit Graph

26243 Commits

Author SHA1 Message Date
Peter Steinberger 035a754f0f
fix: harden android a2ui trust matching 2026-04-04 20:28:08 +09:00
Peter Steinberger 1cfc10e836
docs: refresh minimax multimodal refs 2026-04-04 12:27:47 +01:00
Vincent Koc c75f82448f
fix(google-cli): parse gemini json response and stats (#60801)
* fix(google-cli): restore gemini json reporting

* fix(google-cli): fall back to stats when usage is empty

* fix(changelog): note gemini cli cache reporting
2026-04-04 20:27:22 +09:00
Peter Steinberger 46cb493ac8
fix(sandbox): cover home credential bind audit 2026-04-04 20:27:10 +09:00
Peter Steinberger 3ec0463da9
docs: refresh minimax thinking refs 2026-04-04 12:23:33 +01:00
Peter Steinberger 3dda75894b
refactor(agents): centralize run wait helpers 2026-04-04 20:22:16 +09:00
Peter Steinberger 42778ccd46
docs: refresh provider stream family refs 2026-04-04 12:21:37 +01:00
Peter Steinberger 9615488855 fix: disable MiniMax reasoning leak (#55809) (thanks @moktamd) 2026-04-04 20:21:37 +09:00
moktamd 2701e75f40 fix: disable thinking for MiniMax anthropic-messages streaming
MiniMax M2.7 returns reasoning_content in OpenAI-style delta chunks
({delta: {content: "", reasoning_content: "..."}}) when thinking is
active, rather than native Anthropic thinking block SSE events. Pi-ai's
Anthropic provider does not handle this format, causing the model's
internal reasoning to appear as visible chat output.

Add createMinimaxThinkingDisabledWrapper that injects
thinking: {type: "disabled"} into the outgoing payload for any MiniMax
anthropic-messages request where thinking is not already explicitly
configured, preventing the provider from generating reasoning_content
deltas during streaming.

Fixes #55739
2026-04-04 20:21:37 +09:00
Peter Steinberger 561bacd06a
fix: harden synology chat TLS helper defaults 2026-04-04 20:21:13 +09:00
Peter Steinberger b473816afb
docs: refresh native streaming compat refs 2026-04-04 12:20:31 +01:00
Vincent Koc bc648ac8e6 refactor(providers): add stream family hooks 2026-04-04 20:19:53 +09:00
Peter Steinberger 1037af01ad
style(agents): normalize runtime prompt formatting 2026-04-04 12:19:08 +01:00
Peter Steinberger c70b10460c
style(auth): normalize auth choice formatting 2026-04-04 12:19:08 +01:00
Peter Steinberger f3aad63f4e
style(providers): normalize import and wrap formatting 2026-04-04 12:19:08 +01:00
Peter Steinberger 3207c5326a
refactor: share native streaming compat helpers 2026-04-04 12:18:45 +01:00
Peter Steinberger aaa173a4a7
docs: clarify node exec approval binding 2026-04-04 12:18:32 +01:00
Peter Steinberger 9ddfaff45f
docs: clarify node exec approval plan forwarding 2026-04-04 12:18:04 +01:00
Peter Steinberger 605f48556b
refactor(browser): share lifecycle cleanup helpers 2026-04-04 12:17:46 +01:00
Peter Steinberger c3f415ad6e
fix: preserve node system.run approval plans 2026-04-04 20:16:53 +09:00
Peter Steinberger f832699fd7
docs: refresh provider hook overview refs 2026-04-04 12:16:29 +01:00
Peter Steinberger 53c33f8207
fix: forward node exec approval plans 2026-04-04 20:16:19 +09:00
Peter Steinberger 62c54fdc16
docs: refresh provider replay family refs 2026-04-04 12:15:31 +01:00
Jasmine Zhang b838ecf885 fix: add 60s timeout to MiniMax VLM fetch call
The VLM image analysis fetch had no timeout, causing sessions to hang
indefinitely when the MiniMax API is slow or unresponsive. Other
vision/model API calls in the codebase already use timeouts. Adds
AbortSignal.timeout(60_000) consistent with image upload workloads.

Fixes #54139
2026-04-04 20:15:13 +09:00
Peter Steinberger 39bcf695dc
fix(cron): reject unsafe custom session targets earlier 2026-04-04 20:13:39 +09:00
Peter Steinberger 00337cdde1
docs: refresh codex auth and ws refs 2026-04-04 12:11:45 +01:00
Vincent Koc c29d4bbb86 test(providers): add family capability matrix coverage 2026-04-04 20:11:25 +09:00
Peter Steinberger 91bac7cb83
fix(usage): restore provider auth fallback 2026-04-04 12:10:45 +01:00
Peter Steinberger 6bbccb087a
docs: refresh google cached content refs 2026-04-04 12:10:29 +01:00
Peter Steinberger 49bf527fd4
docs: clarify reserved gateway method namespaces 2026-04-04 12:08:41 +01:00
Peter Steinberger 9b352ab5b0
test: isolate session status from provider runtime leak 2026-04-04 12:08:05 +01:00
Peter Steinberger b7411ad594
refactor(cron): share descendant run quiescence wait 2026-04-04 20:07:33 +09:00
Peter Steinberger 7b6334b0f4
refactor(agents): share run wait reply helpers 2026-04-04 20:07:33 +09:00
Peter Steinberger bbb0b574c4
refactor: centralize gateway method policy helpers 2026-04-04 20:07:18 +09:00
Vincent Koc d766465e38
fix(google): add direct cachedContent support (#60757)
* fix(google): restore gemini cache reporting

* fix(google): split cli parsing into separate PR

* fix(google): drop remaining cli overlap

* fix(google): honor cachedContent alias precedence
2026-04-04 20:07:13 +09:00
Peter Steinberger b9e3c1a02e
docs: refresh cron and subagent browser cleanup refs 2026-04-04 12:06:39 +01:00
Peter Steinberger 7ffbbd8586
fix: reserve admin gateway method prefixes 2026-04-04 20:04:48 +09:00
Peter Steinberger 86ee50b968
docs: refresh web search overview mirrors 2026-04-04 12:04:28 +01:00
Peter Steinberger 3b09b58c5d test: cover browser cleanup for cron and subagents (#60146) (thanks @BrianWang1990) 2026-04-04 20:03:57 +09:00
BrianWang1990 e697838899 style: fix import order in server-cron.ts
Move plugin-sdk import after cron/* imports per alphabetical convention.
2026-04-04 20:03:57 +09:00
BrianWang1990 72b2e413d6 fix(browser): clean up browser tabs/processes when cron tasks and subagents complete
When cron tasks or subagents use browser automation, the browser
processes were not cleaned up after the task completed. This caused
orphaned Chrome processes (PPID=1) to accumulate over time.

Root cause: closeTrackedBrowserTabsForSessions was only called during
session-reset/session-delete (via ensureSessionRuntimeCleanup), but
isolated cron runs and subagent completions never triggered these paths.

Fix: Add browser tab cleanup in two places:
1. server-cron.ts: wrap runCronIsolatedAgentTurn in try/finally to
   ensure browser tabs are cleaned up after every cron run.
2. subagent-registry-lifecycle.ts: call closeTrackedBrowserTabsForSessions
   when a subagent run completes, before the announce cleanup flow.

Both cleanup calls are best-effort (caught errors) so they never mask
the actual task result or break the completion flow.

Fixes #60104
2026-04-04 20:03:57 +09:00
Peter Steinberger 0b1c9c7057
fix: stabilize codex auth ownership and ws fallback cache 2026-04-04 20:03:15 +09:00
Peter Steinberger fca889eea3
docs: refresh browser troubleshooting mirrors 2026-04-04 12:02:48 +01:00
Peter Steinberger 29f062770d
docs: refresh browser stop cleanup refs 2026-04-04 12:02:10 +01:00
Peter Steinberger c524d6c76c
docs: refresh shared minimax web search refs 2026-04-04 12:00:58 +01:00
Peter Steinberger bec891b2e2 test: cover attach-only browser stop cleanup (#60097) (thanks @pedh) 2026-04-04 19:59:59 +09:00
pedh 2c9723afd5 fix(browser): disconnect Playwright CDP session on stop for attachOnly/remote profiles
When `browser stop` is called for an `attachOnly` or remote CDP
profile, `profileState.running` is null (no process was launched), so
`stopRunningBrowser()` returned early without closing the Playwright
CDP connection. This left emulation overrides (prefers-color-scheme,
viewport, etc.) permanently applied until a full gateway restart.

Now call `closePlaywrightBrowserConnectionForProfile()` before
returning for attachOnly and remote CDP profiles, matching the cleanup
behavior already present in `resetProfile()`. Regular profiles that
were never started still return `{ stopped: false }`.

Fixes #60095
2026-04-04 19:59:59 +09:00
Peter Steinberger 0bc9f0b5ba
docs: refresh browser screenshot route refs 2026-04-04 11:58:46 +01:00
Jithendra d204be80af feat(tools): add MiniMax as bundled web search provider
Add native MiniMax Search integration via their Coding Plan search API
(POST /v1/coding_plan/search). This brings MiniMax in line with Brave,
Kimi, Grok, Gemini, and other providers that already have bundled web
search support.

- Implement WebSearchProviderPlugin with caching, credential resolution,
  and trusted endpoint wrapping
- Support both global (api.minimax.io) and CN (api.minimaxi.com)
  endpoints, inferred from explicit region config, model provider base
  URL, or minimax-portal OAuth base URL
- Prefer MINIMAX_CODE_PLAN_KEY over MINIMAX_API_KEY in credential
  fallback, matching existing repo precedence
- Accept SecretRef objects for webSearch.apiKey (type: [string, object])
- Register in bundled registry, provider-id compat map, and fast-path
  plugin id list with full alignment test coverage
- Add unit tests for endpoint/region resolution and edge cases

Closes #47927
Related #11399

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-04-04 19:56:04 +09:00
Peter Steinberger a722719720
docs: refresh synology webhook auth refs 2026-04-04 11:55:57 +01:00