Danny Avila b5a274cbb3 🐛 fix: Provision search files for programmatic tool calls ... A file_search configured with allowed_callers: ['code_execution'] is reachable only through run_tools_with_code, whose nested tool names never reach the provisioning predicate, so the nested search ran before queued attachments were embedded and silently searched without them. Programmatic tool calls now mark the turn as needing search.		2026-08-31 11:24:16 -04:00
..
controllers	🧳 feat: Register Principal-Owned Code Environments (#15365)	2026-08-30 19:33:19 -04:00
middleware	🪢 feat: show Langfuse session link in shared chats (#15273)	2026-08-27 14:29:57 -04:00
routes	🧪 test: Assert denial for permanent agent uploads without permission	2026-08-31 11:06:12 -04:00
services	🐛 fix: Provision search files for programmatic tool calls	2026-08-31 11:24:16 -04:00
utils	🎟️ refactor: Require Credentials for Local Image Access by Default (#15252)	2026-08-27 09:55:27 -04:00
cleanup.js
csp.spec.js	🔣 fix: Escape SPA Language Attribute (#15248)	2026-08-26 07:37:36 -04:00
experimental.js	🧳 feat: Register Principal-Owned Code Environments (#15365)	2026-08-30 19:33:19 -04:00
experimental.spec.js	🧾 feat: Store Durable Event Actor Receipts (#15265)	2026-08-27 06:00:43 -04:00
index.js	🔧 feat: Unified file upload — per-mime-type routing with lazy provisioning	2026-08-30 20:12:09 -04:00
index.metrics.spec.js	⏱️ feat: Run Scheduled Chats Through Durable Agent Triggers (#14939)	2026-08-20 11:51:30 -04:00
index.spec.js	🦺 feat: Configurable Baseline HTTP Security Headers (#14445)	2026-08-25 08:21:39 -04:00
socialLogins.js
socialLogins.spec.js
telemetry.js
telemetry.spec.js