Diego Rodrigues de Sa e Souza 85c4292ce3 fix(security): correct XML double-unescape and non-CSPRNG nonce from CodeQL sweep (#10154) ...

* fix(security): correct XML double-unescape and non-CSPRNG nonce from CodeQL sweep

Two real defects surfaced by the 2026-08-12 code-scanning triage.

decodeXmlText decoded `&` before `"`/`'`, so `"` — the encoding of
the literal text `"` — collapsed to `"` in a second pass. The decoded values feed the
workspace-root trust comparison in parseTrustedCodexEnvironment, so an encoded path could
decode into a different path than the client declared. Decoding `&` last fixes it.

The tinycms nonce fell back to `Date.now()` plus a non-cryptographic PRNG when
`crypto.randomUUID` was absent. That nonce is signed into the provider's anti-replay
payload, so the fallback produced a predictable value silently. It is now always
`randomUUID()` from node:crypto, which is present on every supported runtime.

Both guards are mutation-validated: reverting either fix makes the new test fail.

Refs #9985

* fix(security): reword tinycms nonce comment so the CSPRNG regression test holds

---------

Co-authored-by: backryun <bakryun0718@proton.me>

2026-08-12 16:03:58 -03:00

..

antigravity

refactor(antigravity): align official clients and callable catalog (#8013)

2026-07-22 20:41:19 -03:00

base

feat(providers): add DeepSeek V4 thinking effort aliases (#9485)

2026-08-11 09:50:55 -03:00

chatgpt-web

Release v3.8.47 (#6569)

2026-07-13 09:12:40 -03:00

chatgpt-web-codex

Add native ChatGPT Web provider for Codex clients (#8949)

2026-08-11 09:53:39 -03:00

claude-web

fix(types): align web executor event contracts (#9138)

2026-08-05 22:31:30 -03:00

codex

fix(executors): strip redundant oneOf matching sibling enum (#9828)

2026-08-11 08:35:16 -03:00

cursor

fix(cursor): bridge native TodoWrite completions (#8432)

2026-07-26 12:11:31 -03:00

deepseek-web

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00

default

fix(types): validate default executor pool config (#9849)

2026-08-09 09:51:37 -03:00

devin-agentic

fix(ci): clear the 08-08 base-red layers — dead-code, prod crash in chat.ts, Responses payload regression, born-red stdio test, gate drifts (#9757)

2026-08-08 09:08:45 -03:00

duckduckgo-web

fix(executors): repair DuckDuckGo AI Chat challenge solver (418 ERR_CHALLENGE) (#9866)

2026-08-09 09:53:39 -03:00

gemini-web

fix(sse): enforce capabilities for gemini-web reasoning and tools (#9356) (#9397)

2026-08-08 12:47:48 -03:00

grok-web

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00

huggingchat

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00

kiro

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00

lmarena

fix(lmarena): encode SSE stream chunks as Uint8Array to prevent TextDecoder TypeError (#9306)

2026-08-08 11:27:02 -03:00

muse-spark-web

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00

perplexity-web

fix(perplexity-web): update catalog to use 'copilot' mode and fix model IDs (#8989)

2026-08-04 21:36:13 -03:00

promptql

feat(sse): add PromptQL playground provider (unofficial) (#7911)

2026-07-21 13:16:58 -03:00

zai-web

[v3.8.50] Fix Z.ai web browser transport and model capabilities (#8451)

2026-08-12 08:41:03 -03:00

adapta-web.ts

Release v3.8.40

2026-06-29 08:40:06 -03:00

adobe-firefly.ts

feat(adobe-firefly): reference image attach + /v1/images/edits (follow-up #8006) (#8510)

2026-07-26 03:53:10 -03:00

antigravity.ts

fix(antigravity): propagate switchAuth signal from 429 engine to retry guard (#9351)

2026-08-11 10:01:16 -03:00

antigravityOutputCap.ts

fix(sse): take the Antigravity output ceiling from the model, not a constant (#9482)

2026-08-07 20:53:44 -03:00

antigravityUpstreamError.ts

fix(antigravity): alias agy gemini-3.1-pro -high/-low + stop masking upstream 4xx (#3229) (#3245)

2026-06-05 14:20:05 -03:00

auggie.ts

refactor(sse): narrow three result unions via type predicates (#8499)

2026-07-26 03:51:45 -03:00

awsPollyTts.ts

feat: add EdgeTTS audio-tts provider (#6668) (#7605)

2026-07-17 11:32:25 -03:00

azure-ai.ts

cherry-pick(pr-9787): fix(sse): apply Azure param rules on azure-ai and clamp gpt-4o-mini output tokens (#9855)

2026-08-09 09:52:16 -03:00

azure-openai.ts

cherry-pick(pr-9787): fix(sse): apply Azure param rules on azure-ai and clamp gpt-4o-mini output tokens (#9855)

2026-08-09 09:52:16 -03:00

azureParamRules.ts

cherry-pick(pr-9787): fix(sse): apply Azure param rules on azure-ai and clamp gpt-4o-mini output tokens (#9855)

2026-08-09 09:52:16 -03:00

base.ts

feat(cursor): proactively renews Cursor sessions and fixes manual refresh (#9173)

2026-08-11 04:31:24 -03:00

bedrock.ts

[v3.8.50] fix: passthrough non-standard cache token fields for DeepSeek / MiniMax / Bedrock across streaming, non-streaming, and Dashboard paths (#8591)

2026-08-11 07:15:08 -03:00

blackbox-web.ts

Release v3.8.40

2026-06-29 08:40:06 -03:00

chatgpt-web-codex.ts

Add native ChatGPT Web provider for Codex clients (#8949)

2026-08-11 09:53:39 -03:00

chatgpt-web.ts

fix(release): clear remaining Adobe and typecheck gates

2026-08-09 17:02:47 -03:00

chatgptWebErrors.ts

Release v3.8.28 (#4053)

2026-06-17 19:26:32 -03:00

chatgptWebTools.ts

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00

cheaperinference.ts

feat(sse): Cheaper Inference provider — chat + native Responses + images, sponsor rail 2nd (#9043)

2026-07-31 07:53:41 -03:00

chipotle.ts

Release v3.8.40

2026-06-29 08:40:06 -03:00

claude-web.ts

fix(providers): treat claude-web 429 as unhealthy and forward Retry-After (#9406)

2026-08-04 23:28:41 -03:00

claudeIdentity.ts

feat(radar): flag-gated signed free-model catalog overlay (#9515)

2026-08-06 05:58:58 -03:00

cliproxyapi.ts

maint: final follow-up cherry-pick #9783 (#9904)

2026-08-09 09:52:23 -03:00

cloudflare-ai.ts

Release v3.8.47 (#6569)

2026-07-13 09:12:40 -03:00

codebuddy-cn.ts

fix(codebuddy-cn): replace agent system prompts to bypass Tencent content filter (#9723)

2026-08-11 09:06:47 -03:00

codex.ts

Fix custom tool output pairing during context compression (#8933)

2026-08-11 04:25:55 -03:00

commandCode.ts

fix(command-code): include tool call arguments (#9821)

2026-08-11 08:31:09 -03:00

conol-web.ts

feat(providers): add Conol (conol.ai) web session provider (#8974)

2026-08-11 09:08:23 -03:00

copilot-m365-connection.ts

fix(providers): copilot-m365-web fails loudly on empty turns + tier-aware enterprise invocation (#7858, #7870) (#7958)

2026-07-21 08:39:37 -03:00

copilot-m365-frames.ts

fix(providers): copilot-m365-web enterprise turns send disconnectBehavior=continue (#8971)

2026-08-04 21:36:09 -03:00

copilot-m365-web.ts

feat: copilot-m365-web tone-selected model variants (#7872) (#7997)

2026-07-22 00:42:47 -03:00

copilot-web.ts

fix(copilot-web): restore browser authentication (#9984)

2026-08-11 08:40:48 -03:00

cursor.ts

feat(cursor): exclusive live listing + verbatim AgentRun model ids (#9911)

2026-08-10 03:46:14 -03:00

dario.ts

[v3.8.50] feat(services): add Dario as a 5th embedded service (Claude Code toggle/failover) (#8523)

2026-08-06 06:05:46 -03:00

deepseek-web-done-terminator.ts

Release v3.8.47 (#6569)

2026-07-13 09:12:40 -03:00

deepseek-web-with-auto-refresh.ts

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00

deepseek-web.ts

fix(types): narrow DeepSeek tool calls (#9860)

2026-08-09 09:52:54 -03:00

default.ts

fix(providers): switch minimax from claude to openai format so images work (#9463)

2026-08-11 07:25:28 -03:00

devin-cli-agentic.ts

feat(executors): add isolated Claude Code bridge over Devin ACP (#8914)

2026-08-06 11:08:37 -03:00

devin-cli.ts

fix(windows): request shell when spawning bare qoder binary name on Windows (fixes #8590) (#8633)

2026-07-27 19:08:12 -03:00

devin-desktop.ts

[v3.8.50] feat(devin-desktop): replace public Windsurf provider (#8228)

2026-08-12 08:40:18 -03:00

doubao-web.ts

Release v3.8.46

2026-07-07 13:14:06 -03:00

duckduckgo-web.ts

fix(executors): repair DuckDuckGo AI Chat challenge solver (418 ERR_CHALLENGE) (#9866)

2026-08-09 09:53:39 -03:00

edgeTts.ts

fix(types): preserve array-buffer response bodies (#9092)

2026-08-05 22:29:49 -03:00

felo-web.ts

fix(executors): pass TimeoutError reason to controller.abort() in 7 niche executors (#8699)

2026-07-27 17:24:39 -03:00

firecrawl-fetch.ts

feat(providers): add comprehensive support for self-hosted Firecrawl via FIRECRAWL_BASE_URL and custom base URLs (#9052)

2026-08-06 11:07:42 -03:00

forceResponsesUpstream.ts

Release v3.8.43 (#5609)

2026-07-02 10:47:13 -03:00

gemini-business.ts

fix(types): normalize Gemini Business credentials (#9851)

2026-08-09 09:51:49 -03:00

gemini-web.ts

fix(sse): enforce capabilities for gemini-web reasoning and tools (#9356) (#9397)

2026-08-08 12:47:48 -03:00

ghe-copilot.ts

fix(ghe-copilot): route OpenAI-native models via Responses API (#8835)

2026-07-28 10:24:45 -03:00

github.ts

fix(types): preserve GHE Copilot executor configuration (#9988)

2026-08-11 08:46:32 -03:00

gitlab.ts

Release v3.8.46

2026-07-07 13:14:06 -03:00

gitlabResponses.ts

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00

glm.ts

fix(stream): suppress </think> close marker for Responses API clients (#7747)

2026-07-19 14:46:37 -03:00

grok-cli.ts

fix(grok-cli): sanitize function_call_output before Grok Build dispatch (#7611) (#8030)

2026-07-22 07:06:15 -03:00

grok-web.ts

feat: classify grok-web Cloudflare anti-bot blocks + gated browser-backed cf_clearance path (#8019) (#8241)

2026-07-23 01:33:32 -03:00

gtts.ts

refactor(sse): declare the ArrayBuffer backing on media byte producers (#8665)

2026-07-27 17:24:23 -03:00

hailuo-web.ts

refactor(sse): stop three executors shadowing BaseExecutor.buildHeaders (#8498)

2026-07-26 03:51:42 -03:00

huggingchat.ts

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00

hyperagent.ts

fix(hyperagent): sticky thread for agentic tool loops (Claude Code) (#8470)

2026-07-27 21:12:45 -03:00

index.ts

[v3.8.50] feat(devin-desktop): replace public Windsurf provider (#8228)

2026-08-12 08:40:18 -03:00

inner-ai.ts

fix(types): align web executor event contracts (#9138)

2026-08-05 22:31:30 -03:00

jina-reader-fetch.ts

Release v3.8.3 (#2617)

2026-05-24 18:05:58 -03:00

kie.ts

fix: address kie provider review feedback

2026-05-07 00:01:54 +07:00

kimi-web.ts

feat(kimi): sync Code, Web, and Moonshot providers (#7531)

2026-07-18 21:19:42 -03:00

kimi.ts

fix(executors): backfill missing tool message names for Kimi K3 and strict BYOK providers (#9005)

2026-08-06 00:09:11 -03:00

kimiToolNames.ts

fix(executors): backfill missing tool message names for Kimi K3 and strict BYOK providers (#9005)

2026-08-06 00:09:11 -03:00

kiro.ts

fix(kiro): complete cache-only usage totals (#9753)

2026-08-08 07:15:34 -03:00

kiroThinking.ts

Release v3.8.38 (#5078)

2026-06-27 09:07:12 -03:00

kiroToolCallValidation.ts

fix(kiro): validate completed nested tool_call payloads (#9314)

2026-08-05 22:41:25 -03:00

lmarena.ts

refactor(sse): stop three executors shadowing BaseExecutor.buildHeaders (#8498)

2026-07-26 03:51:42 -03:00

microsoft-designer-web.ts

feat: add Microsoft Designer as image provider (#6672) (#7609)

2026-07-17 12:09:12 -03:00

mimocode.ts

fix(executors): pass TimeoutError reason to controller.abort() in 7 niche executors (#8699)

2026-07-27 17:24:39 -03:00

moonshot.ts

fix(providers): adapt Kimi nonstream requests internally (#8302)

2026-07-24 09:35:26 -03:00

muse-spark-web.ts

fix(muse-spark-web): document the ecto1: WS auth token requirement in credential hint, spec, and error message (#9502)

2026-08-05 16:49:04 -03:00

ninerouter.ts

Release v3.8.4 (#2678)

2026-05-26 23:51:47 -03:00

nlpcloud.ts

feat(providers): add GitLab Duo, NLP Cloud, and enterprise gateways

2026-04-24 07:00:21 -03:00

notion-web.ts

Stabilize Notion web sessions and JSON output (#8751)

2026-07-27 17:25:43 -03:00

opencode.ts

fix(opencode): fallback unsupported DeepSeek json schema output (#9992)

2026-08-11 08:52:00 -03:00

perplexity-web.ts

fix(perplexity-web): update catalog to use 'copilot' mode and fix model IDs (#8989)

2026-08-04 21:36:13 -03:00

poe-web.ts

Release v3.8.40

2026-06-29 08:40:06 -03:00

pollinations.ts

refactor(sse): declare the executor execute() result contract (#8489)

2026-07-25 02:53:19 -03:00

promptql.ts

feat(sse): add PromptQL playground provider (unofficial) (#7911)

2026-07-21 13:16:58 -03:00

puter.ts

feat(providers): adicionar provedor Puter AI com 500+ modelos

2026-03-22 20:29:06 -03:00

qoder.ts

fix(qoder): surface qodercli stderr in error message instead of generic 502 (#9319) (#9412)

2026-08-07 20:52:54 -03:00

qwen-web.ts

fix(providers): bump qwen-web SPA version header from 0.2.66 to 0.2.81 (#9304)

2026-08-07 18:08:52 -03:00

raycast.ts

fix(ci): clear the 08-08 base-red layers — dead-code, prod crash in chat.ts, Responses payload regression, born-red stdio test, gate drifts (#9757)

2026-08-08 09:08:45 -03:00

t3-chat-web.ts

Release v3.8.43 (#5609)

2026-07-02 10:47:13 -03:00

tavily-fetch.ts

fix(executors): pass TimeoutError reason to controller.abort() in 7 niche executors (#8699)

2026-07-27 17:24:39 -03:00

theoldllm.ts

fix(types): preserve The Old LLM proxy contracts (#9850)

2026-08-09 09:51:44 -03:00

tinycms.ts

fix(security): correct XML double-unescape and non-CSPRNG nonce from CodeQL sweep (#10154)

2026-08-12 16:03:58 -03:00

tinycmsSigner.ts

fix(build): repair broken production build, red lint gate and SWR crash (#10198)

2026-08-12 15:58:40 -03:00

tinyfish-fetch.ts

fix(executors): pass TimeoutError reason to controller.abort() in 7 niche executors (#8699)

2026-07-27 17:24:39 -03:00

trae.ts

Release v3.8.47 (#6569)

2026-07-13 09:12:40 -03:00

v0-vercel-web.ts

Release v3.8.47 (#6569)

2026-07-13 09:12:40 -03:00

venice-web.ts

Release v3.8.40

2026-06-29 08:40:06 -03:00

veoaifree-web.ts

fix(types): preserve Veo polling delay result (#9104)

2026-08-05 22:30:08 -03:00

vertex.ts

fix(vertex): route Claude models to native rawPredict and respect targetFormat overrides (#8994)

2026-08-07 11:23:19 -03:00

vertexMedia.ts

refactor(sse): declare the ArrayBuffer backing on media byte producers (#8665)

2026-07-27 17:24:23 -03:00

xai.ts

feat(providers): native xAI Agent Tools passthrough for /v1/responses (#9111)

2026-08-05 21:43:40 -03:00

yuanbao-web.ts

fix(yuanbao-web): accept content field in SSE text events (upstream format change) (#8739)

2026-08-07 11:23:07 -03:00

zai-web.ts

[v3.8.50] Fix Z.ai web browser transport and model capabilities (#8451)

2026-08-12 08:41:03 -03:00

zed-hosted.ts

[v3.8.50] feat(devin-desktop): replace public Windsurf provider (#8228)

2026-08-12 08:40:18 -03:00

zenmux-free.ts

Release v3.8.38 (#5078)

2026-06-27 09:07:12 -03:00