Harold Hunt
fcee6fa047
Docs: add boundary AGENTS guides ( #56647 )
2026-03-28 20:22:03 -04:00
Vignesh Natarajan
c3a0304f63
chore(test): fix stale web search audit coverage
2026-03-28 17:18:57 -07:00
Peter Steinberger
5872f860c9
feat(xai): add plugin-owned x_search onboarding
2026-03-29 00:12:37 +00:00
Gustavo Madeira Santana
ebb4794952
Tests: reuse paired provider contract aliases
2026-03-28 20:08:38 -04:00
Gustavo Madeira Santana
680c30bc5d
Tests: shim config runtime for capability contracts
2026-03-28 20:02:28 -04:00
Gustavo Madeira Santana
d0e0150129
Tests: retry scoped contract registry loads
2026-03-28 19:53:21 -04:00
Gustavo Madeira Santana
5289e8f0fe
Tests: lazy-load web search contract registries
2026-03-28 19:24:38 -04:00
Gustavo Madeira Santana
094524a549
Types: tighten Teams validator return type
2026-03-28 19:15:27 -04:00
Gustavo Madeira Santana
bd1c48e4d9
Tests: lazy-load extension contract registries
2026-03-28 19:09:49 -04:00
Brad Groux
dc382b09be
fix(msteams): accept strict Bot Framework and Entra service tokens ( #56631 )
...
* msteams: log policy-based inbound drops at info level
* fix(msteams): validate Bot Framework and Entra service token issuers
---------
Co-authored-by: Brad Groux <bradgroux@users.noreply.github.com>
2026-03-28 18:04:00 -05:00
Robin Waslander
468185d1b5
fix(agents): handle unhandled stop reasons gracefully instead of crashing ( #56639 )
...
Wrap the embedded agent stream to catch 'Unhandled stop reason: ...'
errors from the provider adapter and convert them into structured
assistant error messages instead of crashing the agent run.
Covers all unknown stop reasons so future provider additions don't
crash the runner. The wrapper becomes a harmless no-op once the
upstream dependency handles them natively.
Fixes #43607
2026-03-28 23:35:12 +01:00
Peter Steinberger
587e18cd3f
chore: prepare 2026.3.28-beta.1 release
2026-03-28 22:24:51 +00:00
Peter Steinberger
8a24cbf450
chore: bump version to 2026.3.28
2026-03-28 22:05:21 +00:00
huntharo
216796f1e3
fix(xai): wire plugin-owned codeExecution config
2026-03-28 21:35:13 +00:00
huntharo
b7ab0ddb55
refactor(xai): move code_execution into plugin
2026-03-28 21:35:13 +00:00
Peter Steinberger
887d7584d6
refactor(plugins): expose bundled onboard helpers
2026-03-28 21:35:13 +00:00
Peter Steinberger
46c2928234
fix(plugins): stabilize provider contract loading
2026-03-28 21:35:13 +00:00
Peter Steinberger
dba1b31243
fix(xai): repair extension test boundaries
2026-03-28 21:35:13 +00:00
Peter Steinberger
1e424990a2
fix(xai): restore config-backed auth discovery
2026-03-28 21:35:13 +00:00
Peter Steinberger
2a950157b1
refactor(xai): move x_search into plugin
2026-03-28 21:35:13 +00:00
huntharo
396bf20cc6
Tools: add xAI-backed code_execution
2026-03-28 21:35:13 +00:00
huntharo
1c9684608a
Docs: guide x_search toward exact-post stats lookups
2026-03-28 21:35:13 +00:00
huntharo
c8ed1638ea
xAI: restore generic auth and x_search seams
2026-03-28 21:35:13 +00:00
huntharo
0391e455bf
Lint: drop stale model compat imports
2026-03-28 21:35:13 +00:00
huntharo
92fb4ad233
xAI: route x_search through public api seam
2026-03-28 21:35:13 +00:00
huntharo
4f3009f57e
Tests: classify x_search secret target parity
2026-03-28 21:35:13 +00:00
huntharo
6e3b54430c
Tests: keep extension onboarding coverage under extensions
2026-03-28 21:35:13 +00:00
huntharo
09e2ef965b
Tests: fix rebased auth and runner type coverage
2026-03-28 21:35:13 +00:00
huntharo
b22f65992e
Build: fix rebased provider secrets helper
2026-03-28 21:35:13 +00:00
huntharo
b918568b1e
Rebase: reconcile xAI post-main conflicts
2026-03-28 21:35:13 +00:00
huntharo
df61660a26
xAI: centralize fallback auth resolution
2026-03-28 21:35:13 +00:00
huntharo
9dd08a49a4
xAI: reuse fallback auth for runtime and discovery
2026-03-28 21:35:13 +00:00
huntharo
800042a3d5
xAI: reuse plugin key for x_search
2026-03-28 21:35:13 +00:00
huntharo
8ca3710b90
xAI: strip unsupported payload fields
2026-03-28 21:35:13 +00:00
huntharo
fd748171b8
xAI: strip unsupported Responses reasoning params
2026-03-28 21:35:13 +00:00
huntharo
80a1ccc552
xAI: preserve session auth in embedded runs
2026-03-28 21:35:13 +00:00
huntharo
2765fdc2dd
xAI: normalize stale Grok transport to Responses
2026-03-28 21:35:13 +00:00
huntharo
f0ce658fbb
xAI: add auth resolution diagnostics
2026-03-28 21:35:13 +00:00
huntharo
d5fafbe3ce
xAI: honor config-backed auth during provider bootstrap
2026-03-28 21:35:13 +00:00
huntharo
38e4b77e60
Tools: add x_search via xAI Responses
2026-03-28 21:35:13 +00:00
huntharo
5ed8ee6832
xAI: switch bundled provider defaults to Responses
2026-03-28 21:35:13 +00:00
Devin Robison
703e68a749
Fix HTTP OpenAI-compatible routes missing operator.write scope checks ( #56618 )
...
* Fix HTTP OpenAI-compatible routes missing operator.write scope checks
* Update src/gateway/http-endpoint-helpers.ts
Co-authored-by: greptile-apps[bot] <165735046+greptile-apps[bot]@users.noreply.github.com>
* Address Greptile feedback
---------
Co-authored-by: greptile-apps[bot] <165735046+greptile-apps[bot]@users.noreply.github.com>
2026-03-28 15:22:21 -06:00
Robin Waslander
17479ceb43
fix(auto-reply): suppress JSON-wrapped NO_REPLY payloads before channel delivery ( #56612 )
...
Add shared isSilentReplyPayloadText() detector that catches both bare
NO_REPLY tokens and JSON {"action":"NO_REPLY"} envelopes. Apply at the
reply directive parser, reply normalizer, and embedded agent payload
builder so the control payload is stripped before any channel sees it.
Preserves media when text is only a silent control envelope.
Fixes #37727
2026-03-28 22:07:24 +01:00
Peter Steinberger
756df2e955
test: tune gateway live probe skips
2026-03-28 19:13:47 +00:00
Robin Waslander
6be14ab388
fix(cli): defer zsh compdef registration until compinit is available ( #56555 )
...
The generated zsh completion script called compdef at source time,
which fails with 'command not found: compdef' when loaded before
compinit. Replace with a deferred registration that tries immediately,
and if compdef is not yet available, queues a self-removing precmd hook
that retries on first prompt.
Handles repeated sourcing (deduped hook entry) and shells that never
run compinit (completion simply never registers, matching zsh model).
Add real zsh integration test verifying no compdef error on source and
successful registration after compinit.
Fixes #14289
2026-03-28 19:35:32 +01:00
Robin Waslander
31112d5985
fix(security): audit web search keys for all bundled providers ( #56540 )
...
hasWebSearchKey() was hardcoded to only check Brave and Perplexity
credentials. Replace with provider-aware check using
resolveBundledPluginWebSearchProviders() so Gemini, Grok/XAI, Kimi,
Moonshot, and OpenRouter credentials are recognized by the audit.
Add focused regression tests for each provider.
Fixes #34509
2026-03-28 18:55:38 +01:00
Peter Steinberger
02d4c1f2c3
refactor: derive channel metadata from plugin manifests
2026-03-28 17:17:10 +00:00
Frank Yang
c14b169a1b
fix(acp): repair stale bindings after runtime exits ( #56476 )
...
* fix(acp): repair stale bindings after runtime exits
* fix(acp): narrow stale binding recovery
* fix(acp): preserve policy gating for stale sessions
* fix(acp): handle signal exits and canonical unbinds
* fix(acp): harden canonical stale-session recovery
2026-03-29 01:15:16 +08:00
Peter Steinberger
22de54d83d
test: handle live model probe edge cases
2026-03-28 17:12:09 +00:00
Peter Steinberger
5194cf2019
refactor: load bundled provider catalogs dynamically
2026-03-28 16:57:36 +00:00